从 Vibe Coding 到 Harness × SDD：重构全栈应用的可控交付体系

openapi: 3.0.3
info:
  title: Order Service API
  version: 1.0.0
paths:
  /api/v1/order:
    post:
      requestBody:
        required: true
        content:
          application/json:
            schema:
              type: object
              required: [ "userId", "skuId", "quantity" ]
              properties:
                userId: { type: string, format: uuid }
                skuId: { type: string }
                quantity: { type: integer, minimum: 1 }
      responses:
        '201':
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/OrderResponse'
components:
  schemas:
    OrderResponse:
      type: object
      properties:
        orderId: { type: string }
        status: { type: string, enum: [PENDING, CONFIRMED] }

environment:
  - name: stage
    region: us-east-1
    instance_type: t3.medium
    env_vars:
      LOG_LEVEL: debug
  - name: prod
    region: eu-west-1
    instance_type: t3.large
    env_vars:
      LOG_LEVEL: error

npx @openapitools/openapi-generator-cli generate -i .schema/api/order.v1.yaml -g typescript-nestjs -o src/generated/

// src/order/order.controller.ts
import { OrderApi } from '../generated/api/order-api';
import { CreateOrderRequest, OrderResponse } from '../generated';

@Controller('api/v1/order')
export class OrderController implements OrderApi {
  // AI 自动生成实现，但必须符合 Schema 签名
  async createOrder(createOrderRequest: CreateOrderRequest): Promise<OrderResponse> {
    // 业务逻辑...
  }
}

pipeline:
  name: "OrderService_SDD_Pipeline"
  identifier: "OrderService_SDD"
  stages:
    - stage:
        name: "Security_Scan_and_Build"
        type: "CI"
        spec:
          execution:
            steps:
              - step:
                  type: "Run"
                  name: "Contract_Verification"
                  command: |-
                    # 检查生成的 Types 是否与当前 Schema 一致
                    npx openapi-generator-cli validate -i .schema/api/order.v1.yaml
                    npm run build:types
              - step:
                  type: "BuildAndPushDocker"
                  name: "Build_Image"

    - stage:
        name: "Harness_Approval_and_Deploy"
        type: "CD"
        spec:
          serviceRef: "OrderService"
          envRef: <+pipeline.variables.environment> # 动态传入 stage/prod
          deploymentType: "Kubernetes"
          manifests:
            - manifest:
                type: "ValuesYaml"
                identifier: "infra_config"
                spec:
                  store:
                    type: "Git"
                    spec:
                      paths:
                        - .schema/infra/order-service.yaml # 动态读取资源规格
          execution:
            steps:
              - step:
                  type: "HarnessApproval"
                  name: "QA_Smoke_Test_Gate"
                  timeout: "1h"
                  spec:
                    approvers:
                      minimumCount: 1
                      userGroups: ["QA_Leads"]
              - step:
                  type: "RollingDeploy"
                  name: "Rollout_With_Canary"
                  spec:
                    targetInstances: 100% # 按照 Schema 定义的实例规格

- step:
    type: "Run"
    name: "DB_Migrate_Check"
    command: |-
      # 利用 Harness Secrets 管理数据库密码
      flyway migrate -url=jdbc:postgresql://${{secrets.getValue("DB_HOST")}}/order_db \
                     -user=${{secrets.getValue("DB_USER")}} \
                     -password=${{secrets.getValue("DB_PASS")}} \
                     -locations=filesystem:./migrations