Production Deployment

Use this runbook only after a target host has passed the zero-to-running bootstrap and staging gate.

Inputs

clean repository snapshot;
active validated profile for the target runtime user;
configured production Python;
operator-provided SSH alias and local privilege elevation;
ready WeChat main window on display :1.

Do not place hostnames, addresses, usernames, passwords, private keys, or profile values in the repository or command history.

Local Gate

PATH="$PWD/.venv/bin:$PATH" ./tools/check-local.sh
./tools/check-secrets.py --history

Staging

Transfer a clean snapshot without .git, local profiles, virtualenvs, debug state, captures, databases, or archives. On the target:

JWEBOT_RUNTIME_PYTHON=/opt/jwebot/venv/bin/python \
  PATH="/opt/jwebot/venv/bin:$PATH" \
  ./tools/check-local.sh

Verify the active profile:

/opt/jwebot/venv/bin/python -m jwebot_config status
/opt/jwebot/venv/bin/python -m jwebot_config validate <profile>

Pre-Cutover

Confirm:

WeChat main window is visible and meets minimum geometry.
Edge and adaptive recorder are active with stable restart counts.
Adaptive and legacy OCR queues are empty.
Edge direct/cloud outboxes have no failed backlog.
Edge SQLite quick_check is ok.
Legacy OCR services are disabled and inactive.
A restorable baseline exists.

Coordinated Cutover

Elevate locally on the target and run:

JWEBOT_RUNTIME_PYTHON=/opt/jwebot/venv/bin/python \
  ./deploy/scripts/deploy-jwebot-production.sh \
  /path/to/staged/JWeBot \
  jwebot

The deployer prints an eight-stage progress bar and:

records root and user service topology;
copies root and user runtime files;
backs up generated configuration;
creates a SQLite online backup and runs quick_check;
refuses non-empty queues or an unready WeChat window;
installs the runtime;
leaves legacy OCR disabled;
verifies Edge health and adaptive restart stability;
writes and verifies backup SHA-256 checksums;
rolls back files, state, and unit topology on failure.

Post-Cutover

systemctl --user is-active jwebot-edge.service
systemctl --user is-active wechat-ocr-adaptive-recorder.service
systemctl --user show wechat-ocr-adaptive-recorder.service \
  -p NRestarts --value

printf '%s\n' '{"op":"health"}' |
  /opt/jwebot/venv/bin/python \
  ~/.local/lib/wechat-health-watch/jwebot_edge.py respond

/opt/jwebot/venv/bin/python - <<'PY'
import sqlite3
from pathlib import Path

path = Path.home() / ".local/state/jwebot-edge/edge.sqlite3"
print(sqlite3.connect(f"file:{path}?mode=ro", uri=True)
      .execute("pragma quick_check").fetchone()[0])
PY

Player-visible acceptance must use deliberate synthetic messages in the configured group and confirm exactly one ACK and one final response.

Rollback

If any gate fails:

stop further cutover attempts;
verify the coordinated deployer's rollback result;
confirm unit topology and SQLite integrity;
archive privacy-safe evidence under the active profile;
fix and rerun staging before another production attempt.

3.1 KiB Raw Blame History