Files
map-asset-gateway/scripts/build-api.bat
T
Harmon 73ad03fa59 Rewrite the gateway around health, retries, slicing and a Windows service
Scanner
- manifest lookup is now depth-bounded and prunes numeric zoom directories, so
  a scan no longer walks the whole tile payload
- rescans only report a version as updated when something actually changed
- overlapping runs are refused instead of interleaving their bookkeeping

Hot path
- token authorisation loads only that token grants and throttles the
  last_used_at write instead of touching it on every tile
- SQLite runs in WAL with a busy timeout and a real connection pool
- the catalog lookup used by /tiles no longer loads every basemap

Security
- the admin surface requires ADMIN_TOKEN (bearer) or ADMIN_USER/ADMIN_PASSWORD
  (basic), and the service refuses to bind off-host without credentials
- CORS is an explicit allow-list; newly minted tokens never reach a redirect URL
- client tokens are redacted from the access log

Operations
- resource health inspection flags a moved or deleted tile root before a 404
- pushes retry with backoff and can be re-queued by hand; the schedule lives in
  the database so a restart does not lose it
- access log plus /metrics counters

Image slicing
- tile_jobs drive the GDAL bundled with QGIS via scripts/gdal2tiles-qgis.bat
- layer_sources remembers what a layer is made of: submit one source to append
  a flight, or all of them to rebuild the layer as a VRT mosaic with no tile
  seams; the console exposes both, including a one-click rebuild
- slicing is available to integrations through a narrow slice token scope
  (submit, poll, idempotent by code, completion callback)

Console
- rebuilt around a fixed rail and single-view navigation with health and
  outstanding work leading, instead of one long scrolling page

Windows service
- native install/start/stop/status with crash recovery, auto-start and a
  rotating log file, so no NSSM wrapper is needed
- start-all.bat and stop-all.bat are removed: they killed the process by port
  with taskkill, which fought the service restart policy

Verified with 49 tests and live runs against real tile data and real GDAL.
2026-10-16 10:35:30 +08:00

50 lines
1.4 KiB
Batchfile

@echo off
setlocal
chcp 65001 >nul 2>&1
title Build Basemap Pusher
set "ROOT=%~dp0..\\"
pushd "%ROOT%" >nul 2>&1
set "ROOT=%CD%\"
popd
call "%ROOT%scripts\load-env.bat" "%ROOT%config\service.env"
REM Keep the toolchain caches inside the repo, the same way run-api.bat does.
REM Without this, go build uses the global module cache and reaches out to
REM proxy.golang.org, which is blocked on many internal networks.
if "%GOCACHE%"=="" set "GOCACHE=%ROOT%.gocache"
if "%GOMODCACHE%"=="" set "GOMODCACHE=%ROOT%.gomodcache"
if "%GOTMPDIR%"=="" set "GOTMPDIR=%ROOT%.gotmp"
if "%GOPATH%"=="" set "GOPATH=%ROOT%.gopath"
if "%GOPROXY%"=="" set "GOPROXY=https://goproxy.cn,direct"
if "%GOSUMDB%"=="" set "GOSUMDB=off"
set "OUT=%ROOT%bin\basemap-pusher.exe"
if not exist "%ROOT%bin" mkdir "%ROOT%bin" >nul 2>&1
echo ========================================
echo Building Basemap Pusher
echo ========================================
echo Output: %OUT%
echo.
pushd "%ROOT%services\api-go"
go build -o "%OUT%" .\cmd\api
set "BUILD_EXIT=%ERRORLEVEL%"
popd
if not "%BUILD_EXIT%"=="0" (
echo.
echo [FAIL] Build failed with exit code %BUILD_EXIT%.
) else (
echo.
echo [OK] Built %OUT%
echo.
echo Install as a Windows service ^(elevated shell^):
echo "%OUT%" --env-file "%ROOT%config\service.env" install
echo "%OUT%" start
)
if "%NO_PAUSE%"=="" pause
exit /b %BUILD_EXIT%