ante-erp-cli 1.11.46 → 1.11.50

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "ante-erp-cli",
-  "version": "1.11.46",
+  "version": "1.11.50",
   "description": "Comprehensive CLI tool for managing ANTE ERP self-hosted installations",
   "type": "module",
   "bin": {

package/src/commands/daily-backup.js

@@ -3,8 +3,12 @@ import chalk from 'chalk';
 import ora from 'ora';
 import { execa } from 'execa';
 import { readFileSync, writeFileSync, existsSync } from 'fs';
-import { join } from 'path';
+import { join, dirname } from 'path';
+import { fileURLToPath } from 'url';
 import os from 'os';
+
+const __filename = fileURLToPath(import.meta.url);
+const __dirname = dirname(__filename);
 import Conf from 'conf';
 import Table from 'cli-table3';
 import { backup } from './backup.js';
@@ -522,8 +526,8 @@ async function setupCronJob(schedule) {
       .split('\n')
       .filter(line => !line.includes('ante-daily-backup-runner'));
 
-    // Add new cron job
-    const runnerPath = join(process.cwd(), 'cli/src/commands/daily-backup-runner.js');
+    // Add new cron job - use the actual module location, not process.cwd()
+    const runnerPath = join(__dirname, 'daily-backup-runner.js');
     const logFile = join(os.homedir(), '.ante-cli-backup.log');
     const cronLine = `${schedule} /usr/bin/node ${runnerPath} >> ${logFile} 2>&1`;
 

package/src/commands/install.js

@@ -15,6 +15,7 @@ import { generateDockerCompose } from '../templates/docker-compose.yml.js';
 import { generateEnv } from '../templates/env.js';
 import { detectPublicIPWithFeedback, buildURL } from '../utils/network.js';
 import { configureNginx, requiresNginx } from '../utils/nginx.js';
+import { applySysctlSettings } from '../utils/system-config.js';
 
 const __filename = fileURLToPath(import.meta.url);
 const __dirname = dirname(__filename);
@@ -302,6 +303,10 @@ export async function install(options) {
       }
 
       console.log(chalk.green(`✓ ${formatStepTitle(stepSystemCheck, totalSteps, 'System requirements met')}\n`));
+
+      // Configure system kernel parameters for Redis
+      console.log(chalk.cyan('  Configuring system kernel parameters...'));
+      await applySysctlSettings();
     }
 
     // Step: Network detection

package/src/commands/restore.js

@@ -6,7 +6,7 @@ import { existsSync, mkdirSync, readdirSync, statSync, readFileSync, createWrite
 import { execa } from 'execa';
 import Conf from 'conf';
 import { getInstallDir } from '../utils/config.js';
-import { execInContainer, stopServices, startServices, waitForHealthy } from '../utils/docker.js';
+import { execInContainer, stopServices, startServices, waitForHealthy, runMigrations } from '../utils/docker.js';
 import { createS3Client, listS3Backups } from '../utils/s3-client.js';
 import { decryptFields } from '../utils/crypto.js';
 import { GetObjectCommand } from '@aws-sdk/client-s3';
@@ -368,6 +368,19 @@ export async function restore(backupFile, options = {}) {
       spinner.text = 'Starting all services...';
       await startServices(composeFile);
 
+      // Wait for backend to be healthy before running migrations
+      spinner.text = 'Waiting for backend service...';
+      await waitForHealthy(composeFile, ['backend'], 120);
+
+      // Run database migrations to sync schema with current code
+      spinner.text = 'Running database migrations...';
+      const migrationResult = await runMigrations(composeFile);
+
+      if (!migrationResult.success) {
+        spinner.warn(chalk.yellow('Migrations completed with warnings'));
+        console.log(chalk.gray(migrationResult.output));
+      }
+
       // Cleanup
       spinner.text = 'Cleaning up...';
       await execa('rm', ['-rf', tempDir]);
@@ -382,6 +395,7 @@ export async function restore(backupFile, options = {}) {
 
       console.log(chalk.white('\n✓ PostgreSQL database restored'));
       console.log(chalk.white('✓ MongoDB database restored'));
+      console.log(chalk.white('✓ Database migrations applied'));
       console.log(chalk.white('✓ All services started'));
 
       console.log(chalk.cyan('\nANTE is now running with restored database data'));

package/src/commands/update.js

@@ -9,6 +9,7 @@ import { backup } from './backup.js';
 import { getCurrentVersion, getLatestVersion } from './update-cli.js';
 import { generateDockerCompose } from '../templates/docker-compose.yml.js';
 import { generateSecurePassword } from '../utils/password.js';
+import { verifySysctlSettings, applySysctlSettings } from '../utils/system-config.js';
 
 /**
  * Check if gate-app, guardian-app, facial-web, or pos-app is installed by checking docker-compose.yml
@@ -461,6 +462,16 @@ export async function update(options) {
       refreshDockerCompose(composeFile, envFile);
     }
 
+    // Verify and apply sysctl settings if needed (for Redis optimization)
+    console.log(chalk.gray('Verifying system kernel parameters...'));
+    const sysctlCheck = await verifySysctlSettings();
+    if (!sysctlCheck.ok) {
+      console.log(chalk.yellow('  Reapplying system kernel parameters...'));
+      await applySysctlSettings();
+    } else {
+      console.log(chalk.gray('  System kernel parameters OK'));
+    }
+
     // Pre-calculate step numbers for each task (fixes step numbering bug)
     let currentStep = 0;
     const stepPreStart = !options.skipBackup ? ++currentStep : null;

package/src/templates/docker-compose.yml.js

@@ -42,7 +42,7 @@ services:
     networks:
       - ante-network
     healthcheck:
-      test: ["CMD-SHELL", "pg_isready -U ante"]
+      test: ["CMD-SHELL", "pg_isready -U ante -d ante_db"]
       interval: 10s
       timeout: 5s
       retries: 5

package/src/utils/system-config.js

@@ -0,0 +1,130 @@
+import { execa } from 'execa';
+import { writeFileSync } from 'fs';
+import chalk from 'chalk';
+
+const SYSCTL_CONFIG_FILE = '/etc/sysctl.d/ante-redis.conf';
+
+/**
+ * Required sysctl settings for optimal Redis performance
+ * vm.overcommit_memory=1 prevents Redis background save failures under low memory
+ */
+const REQUIRED_SETTINGS = {
+  'vm.overcommit_memory': '1'
+};
+
+/**
+ * Check if a sysctl setting is currently applied
+ * @param {string} key - The sysctl key (e.g., 'vm.overcommit_memory')
+ * @returns {Promise<string|null>} Current value or null if error
+ */
+export async function checkSysctlSetting(key) {
+  try {
+    const { stdout } = await execa('sysctl', ['-n', key]);
+    return stdout.trim();
+  } catch {
+    return null;
+  }
+}
+
+/**
+ * Apply a sysctl setting immediately
+ * @param {string} key - The sysctl key
+ * @param {string} value - The value to set
+ * @returns {Promise<boolean>} Success status
+ */
+export async function applySysctlSetting(key, value) {
+  try {
+    await execa('sudo', ['sysctl', '-w', `${key}=${value}`], { stdio: 'pipe' });
+    return true;
+  } catch {
+    return false;
+  }
+}
+
+/**
+ * Persist sysctl settings to config file for reboot survival
+ * @returns {Promise<boolean>} Success status
+ */
+export async function persistSysctlSettings() {
+  const lines = Object.entries(REQUIRED_SETTINGS)
+    .map(([key, value]) => `${key}=${value}`)
+    .join('\n');
+
+  const content = `# ANTE ERP Redis Optimization
+# Generated by ante-erp-cli
+# See: https://redis.io/docs/getting-started/faq/#background-saving-fails-with-a-fork-error-on-linux
+${lines}
+`;
+
+  try {
+    // Write to temp file then move with sudo
+    const tempFile = '/tmp/ante-sysctl.conf';
+    writeFileSync(tempFile, content);
+    await execa('sudo', ['mv', tempFile, SYSCTL_CONFIG_FILE], { stdio: 'pipe' });
+    await execa('sudo', ['chmod', '644', SYSCTL_CONFIG_FILE], { stdio: 'pipe' });
+    return true;
+  } catch {
+    return false;
+  }
+}
+
+/**
+ * Apply and persist all required sysctl settings
+ * @param {boolean} silent - Suppress console output
+ * @returns {Promise<{applied: string[], failed: string[], skipped: string[]}>}
+ */
+export async function applySysctlSettings(silent = false) {
+  const results = { applied: [], failed: [], skipped: [] };
+
+  for (const [key, value] of Object.entries(REQUIRED_SETTINGS)) {
+    const current = await checkSysctlSetting(key);
+
+    if (current === value) {
+      results.skipped.push(key);
+      continue;
+    }
+
+    const success = await applySysctlSetting(key, value);
+    if (success) {
+      results.applied.push(key);
+    } else {
+      results.failed.push(key);
+    }
+  }
+
+  // Persist to config file for reboot survival
+  if (results.applied.length > 0) {
+    await persistSysctlSettings();
+  }
+
+  if (!silent) {
+    if (results.applied.length > 0) {
+      console.log(chalk.green(`  ✓ Applied sysctl settings: ${results.applied.join(', ')}`));
+    }
+    if (results.skipped.length > 0) {
+      console.log(chalk.gray(`    Sysctl settings already configured: ${results.skipped.join(', ')}`));
+    }
+    if (results.failed.length > 0) {
+      console.log(chalk.yellow(`  ⚠ Failed to apply: ${results.failed.join(', ')} (may require root privileges)`));
+    }
+  }
+
+  return results;
+}
+
+/**
+ * Verify sysctl settings are applied (for update command)
+ * @returns {Promise<{ok: boolean, missing: Array<{key: string, expected: string, current: string|null}>}>}
+ */
+export async function verifySysctlSettings() {
+  const missing = [];
+
+  for (const [key, value] of Object.entries(REQUIRED_SETTINGS)) {
+    const current = await checkSysctlSetting(key);
+    if (current !== value) {
+      missing.push({ key, expected: value, current });
+    }
+  }
+
+  return { ok: missing.length === 0, missing };
+}