Files
platform/scripts/gen-index.ts
T
pastilhasandClaude Opus 5 b9524ee4d5 prefix the env with OFFICERDEV_, and keep reading the bare names
PORT, PUBLIC_URL and POSTGRES_URL are names half the software in the world
uses. Bun auto-loads .env into EVERY process started in the platform directory,
so a bare PORT reaches the sidecars, the tools they spawn and anything an agent
runs from here — and a bare POSTGRES_URL reaches things with no business
holding a database credential.

Four parts.

officer-setup now writes OFFICERDEV_-prefixed names, with the reasoning in the
generated file so whoever opens it later knows why.

Every consumer reads `OFFICERDEV_X ?? X` — eleven sites across the databases,
the DAV router, officer-url.mjs, os-user-postgres and two scripts. The bare
name is the FALLBACK, never the source, which is what makes this safe to ship
before every machine has been converted.

`bun run fix:env` converts a file in place. Idempotent, preserves comments and
`export`, leaves the value untouched including an `=` inside it, and refuses to
touch names belonging to other software — prefixing PATH or NODE_ENV does not
rename a variable, it deletes it.

And it runs on every restart from the server settings screen. There rather than
at boot because a restart is the one moment the file can be rewritten and take
effect in the same breath: the process about to start is the one that reads it.
Non-fatal, since the fallback means the worst case is that nothing changed.

gen-index reads either spelling out of the file directly, because it is run by
hand as often as by the setup and a bare shell has no .env loaded.

Verified by converting this machine's own .env: PORT, PUBLIC_URL and the
database all still resolve, gen:index still finds its URL, 1152 pass.

Co-Authored-By: Claude Opus 5 <noreply@anthropic.com>
2026-08-19 11:46:00 +00:00

76 lines
3.6 KiB
TypeScript

#!/usr/bin/env bun
// Generates src/apps/officer-web/index.gen.html from index.html, substituting __PUBLIC_URL__ with
// PUBLIC_URL from .env.
//
// The OpenGraph tags need absolute URLs — crawlers fetch the page standalone and cannot resolve
// relative ones — but hardcoding the domain forces every deployment to carry its own edit of
// index.html. Bun's HTML import offers no substitution hook, so the swap happens here and the server
// imports the generated file. index.gen.html is gitignored; index.html is the tracked template and
// is identical on every instance.
import { existsSync } from 'node:fs';
import { dirname, join, resolve } from 'node:path';
import { fileURLToPath } from 'node:url';
const root = resolve(dirname(fileURLToPath(import.meta.url)), '..');
const template = join(root, 'src/apps/officer-web/index.html');
const output = join(root, 'src/apps/officer-web/index.gen.html');
// Where the URL comes from, most specific first:
//
// 1. the first argument `bun gen:index https://officer.example.com`
// 2. PUBLIC_URL in the environment
// 3. PUBLIC_URL in .env (this script runs standalone; the server gets it via --env-file)
//
// The argument exists so changing the public address is one command rather than an edit plus a
// regenerate — and so a second address can be generated for without touching the install's own .env.
const argUrl = process.argv[2]?.trim();
const envPath = join(root, '.env');
// Prefixed first, bare as the fallback — the same rule every other consumer follows. This script reads
// the file itself rather than relying on the environment, because it is run by hand as often as by the
// setup, and `bun run gen:index` in a bare shell has no `.env` loaded.
const envValue = (): string | undefined => process.env.OFFICERDEV_PUBLIC_URL ?? process.env.PUBLIC_URL;
if (!argUrl && !envValue() && existsSync(envPath)) {
for (const line of (await Bun.file(envPath).text()).split('\n')) {
// Either spelling, so a file that has been through `bun run fix:env` and one that has not both work.
const match = line.match(/^\s*(?:OFFICERDEV_)?PUBLIC_URL\s*=\s*(.*)$/);
if (match) process.env.OFFICERDEV_PUBLIC_URL = match[1]!.trim().replace(/^["']|["']$/g, '');
}
}
const publicUrl = (argUrl || envValue() || '').replace(/\/+$/, '');
if (!publicUrl) {
console.error('[gen-index] no public URL. Pass one — `bun gen:index https://officer.example.com` —');
console.error('[gen-index] or set OFFICERDEV_PUBLIC_URL in .env.');
process.exit(1);
}
// Caught here rather than left to a crawler: a relative or scheme-less value substitutes without
// complaint and produces OpenGraph tags nothing can resolve, which is invisible until someone shares a
// link and the preview is blank.
try {
const parsed = new URL(publicUrl);
if (parsed.protocol !== 'http:' && parsed.protocol !== 'https:') throw new Error('not http(s)');
} catch {
console.error(`[gen-index] "${publicUrl}" is not an absolute http(s) URL — OpenGraph tags need one.`);
process.exit(1);
}
const html = await Bun.file(template).text();
const generated = html.replaceAll('__PUBLIC_URL__', publicUrl);
if (generated.includes('__PUBLIC_URL__')) {
console.error('[gen-index] substitution left placeholders behind');
process.exit(1);
}
// Only write when the content actually changes, so `bun --watch` does not restart in a loop.
if (existsSync(output) && (await Bun.file(output).text()) === generated) {
console.log(`[gen-index] up to date (${publicUrl})`);
} else {
await Bun.write(output, generated);
console.log(`[gen-index] wrote index.gen.html (${publicUrl})`);
}