pastilhasandClaude Opus 5
b075f1f882
Officer on a Mac is a dev helper on a laptop somebody sits at. It is never the homelab or VPS case, so the role is not asked for there — it is `dev`, and every section that exists to make a machine a good server is skipped. Seventeen of twenty-six sections skip, listed once in MACOS_SKIP in lib/base.sh with a reason each, rather than an `if macos` threaded through each section. Most would simply fail — no systemd, no ufw, no netplan, no useradd, no /etc/ssh/sshd_config.d — but a few would SUCCEED and be wrong, which is worse: stopping a laptop from sleeping, or freezing the address of a machine that moves between networks daily. Nine run: System update, Core utils, Tailscale, Command-line tools, Git, Docker, Neovim, JavaScript runtimes, Agent CLIs. The blocker was root. Linux needs it for nearly everything; Homebrew REFUSES to run as root and says so, so the whole script under sudo would have failed at the first brew install having already taken a password. It is now required on Linux and refused on macOS, which works precisely because the macOS path skips everything that needed it. Docker is checked, not installed. Docker Desktop is a GUI app that wants opening, permissions and a running window — not a shell script's business — and colima and lima both cost an evening the first time something does not resolve. So the step reports whether the daemon answers and points at the download otherwise. The group-vs-rootless choice below it is Linux only: Desktop runs containers in a VM owned by whoever is logged in, so there is no group to join. Added the Xcode command line tools as a macOS-only step, before anything that builds. node-pty ships no prebuilt binary on any platform and always falls through to node-gyp, so `bun install` cannot finish without a compiler — and it fails deep in a dependency tree naming neither Xcode nor node-pty. `xcode-select --install` opens a dialogue and returns immediately, so the step says to come back rather than pretending to have waited. Tailscale takes the cask, not install.sh — that script is a Linux package-manager wrapper. The cask ships a usable CLI; the Mac App Store build is sandboxed and does not. Not run on a Mac. There isn't one here, so this is read from the code and from what each tool documents, not observed. Co-Authored-By: Claude Opus 5 (1M context) <noreply@anthropic.com>
50 lines
2.1 KiB
Bash
50 lines
2.1 KiB
Bash
#!/bin/bash
|
|
# =============================================================================
|
|
# officer-setup — schema and build
|
|
# =============================================================================
|
|
#
|
|
# Definitions only.
|
|
#
|
|
# Both run AS the owner, from the repo. Neither is idempotent in the sense of
|
|
# "does nothing the second time" — both are safe to repeat, which is not the same
|
|
# thing and is the property that matters for a script people re-run.
|
|
|
|
[[ -n "${OFFICER_SETUP_BUILD_LOADED:-}" ]] && return 0
|
|
OFFICER_SETUP_BUILD_LOADED=1
|
|
|
|
# `bun db:push` — drizzle-kit diffs the schema code against the live database.
|
|
#
|
|
# No migrations here and no __drizzle_migrations table: the schema code IS the
|
|
# source of truth (src/databases/CLAUDE.md). On the empty database section 5 just
|
|
# created there is nothing to drop, so the prompt drizzle-kit shows for a
|
|
# destructive change cannot appear.
|
|
#
|
|
# It can still appear on a RE-RUN against a database with data, and a prompt
|
|
# nobody sees would hang the script forever — so stdin is closed rather than left
|
|
# attached. drizzle-kit then fails instead of waiting, which is the outcome you
|
|
# want at 3am.
|
|
push_schema() {
|
|
sudo -u "$USERNAME" bash -c "cd '$(platform_dir)' && bun db:push </dev/null" 2>&1
|
|
}
|
|
|
|
# What tables the schema will create, read from the aggregator rather than
|
|
# guessed. This is what makes the section able to say what it is about to do.
|
|
schema_table_count() {
|
|
local dir
|
|
dir="$(platform_dir)/src/databases/officer_db/src"
|
|
grep -oP "^export \* from '\./\K[\w-]+(?=/schema')" "$dir/schema.ts" 2>/dev/null | while read -r f; do
|
|
grep -c "pgTable(" "$dir/$f/schema.ts" 2>/dev/null || true
|
|
done | awk '{s+=$1} END {print s+0}'
|
|
}
|
|
|
|
# `bun gen:index` — substitutes PUBLIC_URL into index.html and writes
|
|
# index.gen.html, which is what the server actually imports.
|
|
#
|
|
# Not optional and not cosmetic: without it the server has no page to serve. It
|
|
# is gitignored, so a fresh clone never has one.
|
|
gen_index() {
|
|
sudo -u "$USERNAME" bash -c "cd '$(platform_dir)' && bun gen:index '$ENV_PUBLIC_URL'" 2>&1
|
|
}
|
|
|
|
gen_index_output() { echo "$(platform_dir)/src/apps/officer-web/index.gen.html"; }
|