Files
jared ffff199b7f
Lint / Shell (shellcheck) (push) Successful in 11s
Lint / JS (eslint) (push) Successful in 12s
Lint / Python (ruff) (push) Successful in 5s
Lint / Python deps (pip-audit) (push) Successful in 40s
Lint / Secret scan (gitleaks) (push) Successful in 5s
Fix NODE_OPTIONS heap size for Vite build (896MB → 6144MB)
OOM observed during rendering-chunks phase at 896MB and 3072MB.
6144MB heap with 8GB LXC memory is confirmed working.
Also update README rebuild command to match.

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
2026-05-13 20:34:14 -04:00

120 lines
4.1 KiB
Bash

#!/bin/bash
# Merges the latest upstream stable release tag into the lotus branch, builds, and deploys.
# Triggered via webhook by LotusBot !cinny-update command.
# Requires:
# /etc/cinny-monitor.env — MATRIX_TOKEN, MATRIX_SERVER, MATRIX_ROOM
# /opt/lotus-cinny/ — git clone of code.lotusguild.org/LotusGuild/cinny
# with upstream remote: https://github.com/cinnyapp/cinny.git
set -euo pipefail
REPO_DIR="/opt/lotus-cinny"
WEB_ROOT="/var/www/html"
CONFIG_BACKUP="/opt/lotus-cinny/.cinny-config.json"
BUILD_DIR="/opt/lotus-cinny/dist"
STATE_FILE="/var/lib/cinny-monitor/last-upstream-tag"
ENV_FILE="/etc/cinny-monitor.env"
LOG="/var/log/cinny-build.log"
exec >> "$LOG" 2>&1
echo "=== $(date) === Cinny build triggered ==="
[ -f "$ENV_FILE" ] || { echo "ERROR: $ENV_FILE missing"; exit 1; }
set -a
# shellcheck source=/dev/null
source "$ENV_FILE"
set +a
matrix_notify() {
local msg="$1"
echo "[notify] $msg"
[ -z "${MATRIX_TOKEN:-}" ] && return
export _NOTIFY_MSG="$msg"
python3 << 'PYEOF'
import urllib.request, urllib.parse, json, time, sys, os
token = os.environ.get('MATRIX_TOKEN', '')
server = os.environ.get('MATRIX_SERVER', '').rstrip('/')
room = os.environ.get('MATRIX_ROOM', '')
msg = os.environ.get('_NOTIFY_MSG', '')
if not all([token, server, room, msg]):
sys.exit(0)
txn = str(int(time.time() * 1000))
api = f"{server}/_matrix/client/v3/rooms/{urllib.parse.quote(room, safe='')}/send/m.room.message/{txn}"
body = json.dumps({"msgtype": "m.text", "body": msg}).encode()
req = urllib.request.Request(api, data=body, method="PUT", headers={
"Authorization": f"Bearer {token}", "Content-Type": "application/json"
})
try:
urllib.request.urlopen(req, timeout=10)
except Exception as e:
print(f"Notify failed: {e}", file=sys.stderr)
PYEOF
}
if [ ! -d "$REPO_DIR/.git" ]; then
matrix_notify "cinny-build: FAILED — $REPO_DIR is not a git repo. Clone the lotus fork first."
exit 1
fi
cd "$REPO_DIR"
if ! git remote | grep -q '^upstream$'; then
matrix_notify "cinny-build: FAILED — upstream remote missing. Run: git remote add upstream https://github.com/cinnyapp/cinny.git"
exit 1
fi
matrix_notify "cinny-build: fetching upstream tags..."
git fetch upstream --tags --no-recurse-submodules -q
# Get latest stable release tag from GitHub API
LATEST_TAG=$(curl -sf \
-H "Accept: application/vnd.github.v3+json" \
-H "User-Agent: lotus-cinny-monitor/1.0" \
"https://api.github.com/repos/cinnyapp/cinny/releases/latest" | python3 -c "import sys,json; print(json.load(sys.stdin)['tag_name'])")
CURRENT_TAG=$(git describe --tags --exact-match HEAD 2>/dev/null || git log -1 --format='%D' | grep -oP 'tag: \K[^,]+' | head -1 || echo "untagged")
echo "Current: $CURRENT_TAG — Target: $LATEST_TAG"
if [ "$CURRENT_TAG" = "$LATEST_TAG" ]; then
matrix_notify "cinny-build: already on $LATEST_TAG, nothing to do."
exit 0
fi
matrix_notify "cinny-build: merging $LATEST_TAG into lotus branch..."
# Back up live config before touching anything
[ -f "$WEB_ROOT/config.json" ] && cp "$WEB_ROOT/config.json" "$CONFIG_BACKUP"
if ! git merge "$LATEST_TAG" --no-edit 2>&1; then
git merge --abort 2>/dev/null || true
matrix_notify "cinny-build: FAILED — merge conflict at $LATEST_TAG. SSH to LXC 106 and resolve manually. See /var/log/cinny-build.log"
exit 1
fi
echo "Running npm ci..."
npm ci 2>&1 | tail -5
rm -rf "$BUILD_DIR"
export NODE_OPTIONS='--max_old_space_size=6144'
echo "Building $LATEST_TAG..."
npm run build 2>&1 | tail -10
if [ ! -f "$BUILD_DIR/index.html" ]; then
matrix_notify "cinny-build: FAILED — build produced no output at $LATEST_TAG. See /var/log/cinny-build.log"
exit 1
fi
rm -rf "${WEB_ROOT:?}"/*
cp -r "$BUILD_DIR"/* "$WEB_ROOT/"
[ -f "$CONFIG_BACKUP" ] && cp "$CONFIG_BACKUP" "$WEB_ROOT/config.json"
nginx -s reload
# Push merged lotus branch to origin
git push origin lotus
# Update state file so upstream-check knows we're on this tag
echo "$LATEST_TAG" > "$STATE_FILE"
matrix_notify "cinny-build: deployed $LATEST_TAG — Lotus Cinny is live."
echo "=== Build complete: $LATEST_TAG ==="