|
| 1 | +#!/usr/bin/env bash |
| 2 | +set -euo pipefail |
| 3 | + |
| 4 | +# Sandbox npm Install Script |
| 5 | +# Installs node_modules on local ext4 filesystem and symlinks into the workspace. |
| 6 | +# This avoids native binary crashes (esbuild, lightningcss, rollup) on virtiofs. |
| 7 | + |
| 8 | +SCRIPT_DIR="$(cd "$(dirname "${BASH_SOURCE[0]}")" && pwd)" |
| 9 | +REPO_ROOT="$(cd "$SCRIPT_DIR/../../.." && pwd)" |
| 10 | + |
| 11 | +# Local ext4 base directory where node_modules is installed to avoid virtiofs crashes. |
| 12 | +# Change this path if your sandbox uses a different local filesystem location. |
| 13 | +readonly DEPS_BASE="/home/agent/project-deps" |
| 14 | +WORKSPACE_CLIENT="" |
| 15 | +INSTALL_PLAYWRIGHT="false" |
| 16 | + |
| 17 | +usage() { |
| 18 | + cat <<EOF |
| 19 | +Usage: $(basename "$0") [options] |
| 20 | +
|
| 21 | +Options: |
| 22 | + --workspace <path> Client workspace containing package.json |
| 23 | + --playwright Install Playwright Chromium browser |
| 24 | + --help Show this help message |
| 25 | +
|
| 26 | +Examples: |
| 27 | + bash scripts/install.sh |
| 28 | + bash scripts/install.sh --workspace app/client --playwright |
| 29 | +EOF |
| 30 | +} |
| 31 | + |
| 32 | +while [[ $# -gt 0 ]]; do |
| 33 | + case "$1" in |
| 34 | + --workspace) |
| 35 | + if [[ -z "${2:-}" ]]; then |
| 36 | + echo "Error: --workspace requires a path argument" |
| 37 | + usage |
| 38 | + exit 1 |
| 39 | + fi |
| 40 | + WORKSPACE_CLIENT="$2" |
| 41 | + shift 2 |
| 42 | + ;; |
| 43 | + --playwright) |
| 44 | + INSTALL_PLAYWRIGHT="true" |
| 45 | + shift |
| 46 | + ;; |
| 47 | + --help|-h) |
| 48 | + usage |
| 49 | + exit 0 |
| 50 | + ;; |
| 51 | + *) |
| 52 | + echo "Unknown option: $1" |
| 53 | + usage |
| 54 | + exit 1 |
| 55 | + ;; |
| 56 | + esac |
| 57 | +done |
| 58 | + |
| 59 | +if [[ -z "$WORKSPACE_CLIENT" ]]; then |
| 60 | + if [[ -f "$PWD/package.json" ]]; then |
| 61 | + WORKSPACE_CLIENT="$PWD" |
| 62 | + elif [[ -f "$REPO_ROOT/package.json" ]]; then |
| 63 | + WORKSPACE_CLIENT="$REPO_ROOT" |
| 64 | + fi |
| 65 | +fi |
| 66 | + |
| 67 | +if [[ -n "$WORKSPACE_CLIENT" ]]; then |
| 68 | + WORKSPACE_CLIENT="$(cd "$WORKSPACE_CLIENT" 2>/dev/null && pwd || true)" |
| 69 | +fi |
| 70 | + |
| 71 | +if [[ -z "$WORKSPACE_CLIENT" || ! -f "$WORKSPACE_CLIENT/package.json" ]]; then |
| 72 | + echo "Could not find a valid workspace client path containing package.json." |
| 73 | + echo "Use --workspace <path> to specify it explicitly." |
| 74 | + exit 1 |
| 75 | +fi |
| 76 | + |
| 77 | +echo "=== Sandbox npm Install ===" |
| 78 | +echo "Workspace: $WORKSPACE_CLIENT" |
| 79 | + |
| 80 | +# Derive a unique subdirectory from the workspace path relative to the repo root. |
| 81 | +# e.g. /repo/apps/web -> apps-web, /repo -> <repo-basename> |
| 82 | +REL_PATH="${WORKSPACE_CLIENT#"$REPO_ROOT"}" |
| 83 | +REL_PATH="${REL_PATH#/}" |
| 84 | +if [[ -z "$REL_PATH" ]]; then |
| 85 | + REL_PATH="$(basename "$REPO_ROOT")" |
| 86 | +fi |
| 87 | +# Sanitize: replace path separators with hyphens |
| 88 | +DEPS_SUBDIR="${REL_PATH//\//-}" |
| 89 | +DEPS_DIR="${DEPS_BASE}/${DEPS_SUBDIR}" |
| 90 | + |
| 91 | +echo "Deps dir: $DEPS_DIR" |
| 92 | + |
| 93 | +# Step 1: Prepare local deps directory |
| 94 | +echo "→ Preparing $DEPS_DIR..." |
| 95 | +if [[ -z "$DEPS_DIR" || "$DEPS_DIR" != "${DEPS_BASE}/"* ]]; then |
| 96 | + echo "ERROR: DEPS_DIR ('$DEPS_DIR') is not under DEPS_BASE ('$DEPS_BASE'). Aborting." |
| 97 | + exit 1 |
| 98 | +fi |
| 99 | +rm -rf "$DEPS_DIR" |
| 100 | +mkdir -p "$DEPS_DIR" |
| 101 | +chmod 700 "$DEPS_DIR" |
| 102 | +cp "$WORKSPACE_CLIENT/package.json" "$DEPS_DIR/" |
| 103 | + |
| 104 | +# Copy .npmrc if present (needed for private registries / scoped packages) |
| 105 | +# Permissions restricted to owner-only since .npmrc may contain auth tokens |
| 106 | +if [[ -f "$WORKSPACE_CLIENT/.npmrc" ]]; then |
| 107 | + cp "$WORKSPACE_CLIENT/.npmrc" "$DEPS_DIR/" |
| 108 | + chmod 600 "$DEPS_DIR/.npmrc" |
| 109 | +fi |
| 110 | + |
| 111 | +if [[ -f "$WORKSPACE_CLIENT/package-lock.json" ]]; then |
| 112 | + cp "$WORKSPACE_CLIENT/package-lock.json" "$DEPS_DIR/" |
| 113 | + INSTALL_CMD=(npm ci) |
| 114 | +else |
| 115 | + echo "! package-lock.json not found; falling back to npm install" |
| 116 | + INSTALL_CMD=(npm install) |
| 117 | +fi |
| 118 | + |
| 119 | +# Step 2: Install on local ext4 |
| 120 | +echo "→ Running ${INSTALL_CMD[*]} on local ext4..." |
| 121 | +cd "$DEPS_DIR" && "${INSTALL_CMD[@]}" |
| 122 | + |
| 123 | +# Step 3: Symlink into workspace |
| 124 | +echo "→ Symlinking node_modules into workspace..." |
| 125 | +cd "$WORKSPACE_CLIENT" |
| 126 | +rm -rf node_modules |
| 127 | +ln -s "$DEPS_DIR/node_modules" node_modules |
| 128 | + |
| 129 | +has_dep() { |
| 130 | + local dep="$1" |
| 131 | + node -e " |
| 132 | + const pkg=require(process.argv[1]); |
| 133 | + const deps={...(pkg.dependencies||{}),...(pkg.devDependencies||{}),...(pkg.optionalDependencies||{})}; |
| 134 | + process.exit(deps[process.argv[2]] ? 0 : 1); |
| 135 | + " "$WORKSPACE_CLIENT/package.json" "$dep" |
| 136 | +} |
| 137 | + |
| 138 | +verify_one() { |
| 139 | + local label="$1" |
| 140 | + shift |
| 141 | + if "$@" >/dev/null 2>&1; then |
| 142 | + echo " ✓ $label OK" |
| 143 | + return 0 |
| 144 | + fi |
| 145 | + |
| 146 | + echo " ✗ $label FAIL" |
| 147 | + return 1 |
| 148 | +} |
| 149 | + |
| 150 | +# Step 4: Verify native binaries when present in this project |
| 151 | +echo "→ Verifying native binaries..." |
| 152 | +FAIL=0 |
| 153 | + |
| 154 | +if has_dep esbuild; then |
| 155 | + verify_one "esbuild" node -e "require('esbuild').transform('const x: number = 1',{loader:'ts'}).catch(()=>process.exit(1))" || FAIL=1 |
| 156 | +fi |
| 157 | + |
| 158 | +if has_dep rollup; then |
| 159 | + verify_one "rollup" node -e "import('rollup').catch(()=>process.exit(1))" || FAIL=1 |
| 160 | +fi |
| 161 | + |
| 162 | +if has_dep lightningcss; then |
| 163 | + verify_one "lightningcss" node -e "try{require('lightningcss')}catch(_){process.exit(1)}" || FAIL=1 |
| 164 | +fi |
| 165 | + |
| 166 | +if has_dep vite; then |
| 167 | + verify_one "vite" node -e "import('vite').catch(()=>process.exit(1))" || FAIL=1 |
| 168 | +fi |
| 169 | + |
| 170 | +if [ "$FAIL" -ne 0 ]; then |
| 171 | + echo "✗ Binary verification failed. Try running the script again (crashes can be intermittent)." |
| 172 | + exit 1 |
| 173 | +fi |
| 174 | + |
| 175 | +# Step 5: Optionally install Playwright |
| 176 | +if [[ "$INSTALL_PLAYWRIGHT" == "true" ]]; then |
| 177 | + echo "→ Installing Playwright browsers..." |
| 178 | + if [[ "${EUID:-$(id -u)}" -eq 0 ]]; then |
| 179 | + npx playwright install --with-deps chromium |
| 180 | + elif command -v sudo &>/dev/null && sudo -n true 2>/dev/null; then |
| 181 | + # Non-root but passwordless sudo available — install browsers then system deps |
| 182 | + npx playwright install chromium |
| 183 | + sudo npx playwright install-deps chromium |
| 184 | + else |
| 185 | + npx playwright install chromium |
| 186 | + echo "⚠ System dependencies not installed (no root/sudo access)." |
| 187 | + echo " Playwright tests may fail. Run: sudo npx playwright install-deps chromium" |
| 188 | + fi |
| 189 | +fi |
| 190 | + |
| 191 | +echo "" |
| 192 | +echo "=== ✓ Sandbox npm install complete ===" |
| 193 | +echo "Run 'npm run dev' to start the dev server." |
0 commit comments