Add personnel dataset backup filtering

scripts/backup/restore.sh

@@ -7,6 +7,7 @@ source "$script_dir/lib/postgres.sh"
 source "$script_dir/lib/clickhouse.sh"
 source "$script_dir/lib/config.sh"
 source "$script_dir/lib/report.sh"
+source "$script_dir/lib/personnel_dataset.sh"
 
 dry_run=false
 if [[ "${1:-}" == "--dry-run" ]]; then
@@ -26,6 +27,7 @@ report_message=""
 dump_checksum_status="not_run"
 target_verification_status="not_run"
 target_verification_reports="[]"
+dataset="full"
 
 json_array_from_words() {
   local words="$1"
@@ -43,6 +45,7 @@ write_restore_report() {
   local finished_at
   local services_json
   local restore_policy_json="{}"
+  local personnel_policy_json="{}"
 
   [[ -n "$report_path" ]] || return 0
 
@@ -51,6 +54,9 @@ write_restore_report() {
   if [[ -n "${backup_dir:-}" && -f "$backup_dir/manifest.json" ]]; then
     restore_policy_json="$(jq -c '.restore_policy // {}' "$backup_dir/manifest.json")"
   fi
+  if [[ "${dataset:-full}" == "personnel" ]]; then
+    personnel_policy_json="$(restore_personnel_plan_policy_json "$backup_dir")"
+  fi
 
   mkdir -p "$(dirname "$report_path")"
   jq -n \
@@ -69,6 +75,8 @@ write_restore_report() {
     --arg target_row_counts "$target_verification_status" \
     --argjson target_reports "$target_verification_reports" \
     --argjson restore_policy "$restore_policy_json" \
+    --arg dataset "${dataset:-full}" \
+    --argjson personnel_policy "$personnel_policy_json" \
     '{
       format_version: $format_version,
       started_at: $started_at,
@@ -78,10 +86,11 @@ write_restore_report() {
       backup_source: $backup_source,
       backup_dir: $backup_dir,
       dump_file: (if $dump_file == "" then null else $dump_file end),
+      dataset: $dataset,
       services: $services,
       allow_non_empty_restore: ($allow_non_empty_restore == "true"),
       dry_run: ($dry_run == "true"),
-      restore_policy: $restore_policy,
+      restore_policy: (if $dataset == "personnel" then $personnel_policy else $restore_policy end),
       verification: {
         dump_checksum: $dump_checksum,
         target_row_counts: $target_row_counts,
@@ -439,6 +448,13 @@ if [[ "${CONFIRM_RESTORE:-}" != "baron-sso" ]]; then
 fi
 
 services="$(normalize_service_filter "${RESTORE_SERVICES:-all}")"
+if [[ -n "${RESTORE_DATASET:-}" ]]; then
+  dataset="$(normalize_dataset_profile "$RESTORE_DATASET")"
+elif [[ -f "$backup_dir/manifest.json" ]]; then
+  dataset="$(normalize_dataset_profile "$(jq -r '.dataset // "full"' "$backup_dir/manifest.json")")"
+else
+  dataset="full"
+fi
 allow_non_empty="${ALLOW_NON_EMPTY_RESTORE:-false}"
 
 if [[ "${RESTORE_TEST_NON_EMPTY:-}" == "1" && "$allow_non_empty" != "true" ]]; then
@@ -447,6 +463,7 @@ fi
 
 if [[ "$dry_run" == "true" ]]; then
   backup_log "Restore plan for $backup_dir"
+  backup_log "Dataset: $dataset"
   backup_log "Services: $services"
   backup_log "ALLOW_NON_EMPTY_RESTORE=$allow_non_empty"
   backup_log "RESTORE_REPORT=$report_path"
@@ -466,27 +483,32 @@ fi
 BACKUP="$backup_dir" "$script_dir/verify-dump.sh"
 dump_checksum_status="passed"
 
-if service_enabled postgres "$services"; then
-  restore_baron_postgres "$backup_dir"
+if [[ "$dataset" == "personnel" ]]; then
+  restore_personnel_dataset "$backup_dir" "$services"
+else
+  if service_enabled postgres "$services"; then
+    restore_baron_postgres "$backup_dir"
+  fi
+
+  if service_enabled ory-postgres "$services"; then
+    restore_ory_postgres "$backup_dir"
+  fi
+
+  if service_enabled clickhouse "$services"; then
+    restore_baron_clickhouse "$backup_dir"
+  fi
+
+  if service_enabled ory-clickhouse "$services"; then
+    restore_ory_clickhouse "$backup_dir"
+  fi
+
+  if service_enabled config "$services"; then
+    restore_config_snapshot "$backup_dir"
+  fi
+
+  verify_restored_targets
 fi
 
-if service_enabled ory-postgres "$services"; then
-  restore_ory_postgres "$backup_dir"
-fi
-
-if service_enabled clickhouse "$services"; then
-  restore_baron_clickhouse "$backup_dir"
-fi
-
-if service_enabled ory-clickhouse "$services"; then
-  restore_ory_clickhouse "$backup_dir"
-fi
-
-if service_enabled config "$services"; then
-  restore_config_snapshot "$backup_dir"
-fi
-
-verify_restored_targets
 write_restore_report "succeeded" "restore completed and target row-count verification passed"
 
 backup_log "Restore complete. Keep WORKS relay disabled until comparison dry-run passes."