** 基于Git Flow与Trunk-Based的分支策略、Code Review及CI/CD流水线配置实践

master        ← 生产环境，只接受来自 release/* 和 hotfix/* 的合并，永远可发布
develop       ← 集成分支，日常合并目标
feature/*     ← 特性分支，生命周期 ≤ 3天，命名 feature/JIRA-123-简短描述
release/*     ← 发布分支，命名 release/v3.2.0，只修bug不加功能
hotfix/*      ← 紧急修复，命名 hotfix/v3.2.1-问题描述，从master切出

# .gitlab-ci.yml
stages:
  - validate
  - test

variables:
  NODE_IMAGE: "node:18.18.2-alpine"
  GIT_DEPTH: "20"

# 分支命名规范校验：feature/JIRA-123-xxx 这类格式
branch-name-check:
  stage: validate
  image: alpine:3.19
  script:
    - apk add --no-cache grep
    - |
      BRANCH="$CI_MERGE_REQUEST_SOURCE_BRANCH_NAME"
      if [ -z "$BRANCH" ]; then echo "非MR流水线，跳过"; exit 0; fi
      if echo "$BRANCH" | grep -qE '^(feature|release|hotfix)/[A-Z]+-[0-9]+-.+$'; then
        echo "分支命名合规: $BRANCH"
      else
        echo "分支命名不合规: $BRANCH，应为 feature/JIRA-123-描述"
        exit 1
      fi
  rules:
    - if: '$CI_PIPELINE_SOURCE == "merge_request_event"'

lint:
  stage: validate
  image: $NODE_IMAGE
  cache:
    key: "$CI_COMMIT_REF_SLUG"
    paths:
      - node_modules/
  script:
    - npm ci --prefer-offline --no-audit
    - npx eslint . --max-warnings=0
    - npx commitlint --from=origin/develop --to=HEAD --verbose
  rules:
    - if: '$CI_PIPELINE_SOURCE == "merge_request_event"'

unit-test:
  stage: test
  image: $NODE_IMAGE
  cache:
    key: "$CI_COMMIT_REF_SLUG"
    paths:
      - node_modules/
    policy: pull
  script:
    - npm ci --prefer-offline --no-audit
    - npx jest --coverage --ci --runInBand
  coverage: '/All files[^|]*\|[^|]*\s+([\d\.]+)/'
  artifacts:
    reports:
      coverage_report:
        coverage_format: cobertura
        path: coverage/cobertura-coverage.xml
    expire_in: 7 days
  rules:
    - if: '$CI_PIPELINE_SOURCE == "merge_request_event"'

// Jenkinsfile
pipeline {
    agent any
    environment {
        REGISTRY   = "registry.internal.com/app"
        KUBE_NS    = "prod"
        DEPLOY_ENV = "production"
    }
    options {
        timeout(time: 30, unit: 'MINUTES')
        buildDiscarder(logRotator(numToKeepStr: '30'))
    }
    stages {
        stage('Checkout') {
            steps {
                checkout scm
                script {
                    env.GIT_COMMIT_SHORT = sh(
                        returnStdout: true,
                        script: 'git rev-parse --short HEAD'
                    ).trim()
                    env.IMAGE_TAG = "${env.GIT_COMMIT_SHORT}-${env.BUILD_NUMBER}"
                }
            }
        }
        stage('Build & Push Image') {
            steps {
                sh """
                    docker build -t ${REGISTRY}:${IMAGE_TAG} .
                    docker push ${REGISTRY}:${IMAGE_TAG}
                """
            }
        }
        stage('Deploy to K8s') {
            steps {
                sh """
                    kubectl -n ${KUBE_NS} set image deployment/app \
                        app=${REGISTRY}:${IMAGE_TAG} --record
                    kubectl -n ${KUBE_NS} rollout status deployment/app --timeout=300s
                """
            }
        }
        stage('Smoke Test') {
            steps {
                sh 'bash scripts/smoke-test.sh https://api.internal.com/health'
            }
        }
    }
    post {
        failure {
            sh """
                echo "部署失败，自动回滚到上一版本"
                kubectl -n ${KUBE_NS} rollout undo deployment/app
                kubectl -n ${KUBE_NS} rollout status deployment/app --timeout=300s
            """
            slackSend channel: '#deploy-alerts',
                      color: 'danger',
                      message: "生产部署失败并已回滚: ${env.JOB_NAME} #${env.BUILD_NUMBER}"
        }
        success {
            slackSend channel: '#deploy-alerts',
                      color: 'good',
                      message: "生产部署成功: ${env.IMAGE_TAG}"
        }
    }
}

repos:
  - repo: https://github.com/pre-commit/pre-commit-hooks
    rev: v4.5.0
    hooks:
      - id: trailing-whitespace
      - id: end-of-file-fixer
      - id: check-merge-conflict
  - repo: https://github.com/alessandrojcm/commitlint-pre-commit-hook
    rev: v9.11.0
    hooks:
      - id: commitlint
        stages: [commit-msg]
        additional_dependencies: ['@commitlint/config-conventional@18.4.3']