Create Dockerfile

Dockerfile

@@ -0,0 +1,239 @@
+FROM oven/bun:1-slim
+
+ARG DEBIAN_FRONTEND=noninteractive
+RUN apt-get update && apt-get install -y --no-install-recommends \
+  git ca-certificates curl sqlite3 rsync python3 \
+  && rm -rf /var/lib/apt/lists/*
+
+WORKDIR /app
+
+# Clone app
+ARG LUMIVERSE_REPO=https://github.com/prolix-oc/Lumiverse.git
+ARG LUMIVERSE_REF=staging
+RUN git clone --depth 1 --branch "${LUMIVERSE_REF}" "${LUMIVERSE_REPO}" .
+
+# Patch auth rewrite for HF reverse proxy
+RUN cat > /tmp/patch-auth-rewrite.mjs <<'PATCH'
+import { readFileSync, writeFileSync } from "fs";
+
+const path = "src/app.ts";
+const src = readFileSync(path, "utf8");
+
+const before = `app.on(["POST", "GET"], "/api/auth/*", (c) => {
+  const host = c.req.header("host");
+  if (host) {
+    const url = new URL(c.req.url);
+    const rewritten = new URL(url.pathname + url.search, \`http://\${host}\`);
+    return auth.handler(new Request(rewritten.toString(), c.req.raw));
+  }
+  return auth.handler(c.req.raw);
+});`;
+
+const after = `app.on(["POST", "GET"], "/api/auth/*", (c) => {
+  const host = c.req.header("x-forwarded-host") || c.req.header("host");
+  const proto = c.req.header("x-forwarded-proto") || "http";
+
+  if (host) {
+    const url = new URL(c.req.url);
+    const rewritten = new URL(url.pathname + url.search, \`\${proto}://\${host}\`);
+    return auth.handler(new Request(rewritten.toString(), c.req.raw));
+  }
+  return auth.handler(c.req.raw);
+});`;
+
+if (!src.includes(before)) {
+  console.error("[patch] Expected auth rewrite block not found in src/app.ts");
+  process.exit(1);
+}
+
+writeFileSync(path, src.replace(before, after), "utf8");
+console.log("[patch] Patched src/app.ts for x-forwarded-proto/host");
+PATCH
+
+RUN bun /tmp/patch-auth-rewrite.mjs \
+  && grep -n "x-forwarded-proto" src/app.ts >/dev/null
+
+# Install deps
+RUN rm -f package-lock.json && bun install --production
+
+WORKDIR /app/frontend
+RUN rm -f package-lock.json && bun install && bun run build
+# neutralize service worker to avoid cache loops
+RUN printf "self.addEventListener('install',e=>self.skipWaiting());self.addEventListener('activate',e=>e.waitUntil(self.clients.claim()));\n" > /app/frontend/dist/sw.js
+RUN test -f /app/frontend/dist/index.html
+
+WORKDIR /app
+ENV NODE_ENV=production
+ENV PORT=7860
+ENV DATA_DIR=/app/data
+ENV FRONTEND_DIR=/app/frontend/dist
+ENV TRUST_ANY_ORIGIN=true
+
+# Aggressive recovery script
+RUN cat > /app/start.sh <<'SH'
+#!/usr/bin/env sh
+set -eu
+
+PERSIST_DIR="${DATA_DIR:-/app/data}"
+WORK_DIR="/tmp/lumi-recovery"
+RECOVERY_DIR="$PERSIST_DIR/recovery"
+DB_NAME="lumiverse.db"
+
+mkdir -p "$WORK_DIR" "$RECOVERY_DIR"
+
+pick_corrupt() {
+  for f in \
+    "$PERSIST_DIR/lumiverse.db.corrupt-eeeeeeeeeee" \
+    "$PERSIST_DIR/lumiverse.db.corrupt-20260413-213108" \
+    "$PERSIST_DIR/lumiverse.db.corrupt"* \
+  do
+    [ -f "$f" ] && { echo "$f"; return 0; }
+  done
+  return 1
+}
+
+CORRUPT_SRC="$(pick_corrupt || true)"
+OUT_DB="$RECOVERY_DIR/$DB_NAME"
+LIVE_DB="$PERSIST_DIR/$DB_NAME"
+
+copy_backup() {
+  src="$1"
+  base="$(basename "$src")"
+  cp "$src" "$RECOVERY_DIR/$base.bak"
+  cp "$src" "$WORK_DIR/$base"
+}
+
+try_integrity() {
+  db="$1"
+  sqlite3 "$db" "PRAGMA integrity_check;" 2>/dev/null | grep -qx "ok"
+}
+
+try_recover() {
+  src="$1"
+  dst="$2"
+  echo "[recover] Trying .recover from $(basename "$src")"
+  if sqlite3 "$src" ".recover" | sqlite3 "$dst"; then
+    if try_integrity "$dst"; then
+      echo "[recover] .recover succeeded"
+      return 0
+    fi
+  fi
+  return 1
+}
+
+try_dump() {
+  src="$1"
+  dst="$2"
+  echo "[recover] Trying .dump from $(basename "$src")"
+  if sqlite3 "$src" ".dump" > "$WORK_DIR/dump.sql" 2>/dev/null; then
+    if [ -s "$WORK_DIR/dump.sql" ]; then
+      if sqlite3 "$dst" < "$WORK_DIR/dump.sql" 2>/dev/null; then
+        if try_integrity "$dst"; then
+          echo "[recover] .dump succeeded"
+          return 0
+        fi
+      fi
+    fi
+  fi
+  return 1
+}
+
+try_schema_heal() {
+  src="$1"
+  dst="$2"
+  echo "[recover] Trying schema extraction"
+  # Extract table names from sqlite_master if possible
+  sqlite3 "$src" "SELECT name, sql FROM sqlite_master WHERE type='table' AND name NOT LIKE 'sqlite_%';" \
+    > "$WORK_DIR/schema.tsv" 2>/dev/null || true
+
+  if [ ! -s "$WORK_DIR/schema.tsv" ]; then
+    return 1
+  fi
+
+  # Recreate schema from the statements we could read.
+  while IFS='|' read -r name sql; do
+    [ -n "${sql:-}" ] || continue
+    echo "$sql;" >> "$WORK_DIR/schema.sql"
+  done < "$WORK_DIR/schema.tsv"
+
+  if [ ! -s "$WORK_DIR/schema.sql" ]; then
+    return 1
+  fi
+
+  sqlite3 "$dst" < "$WORK_DIR/schema.sql" 2>/dev/null || return 1
+  if try_integrity "$dst"; then
+    echo "[recover] schema-only restore succeeded"
+    return 0
+  fi
+  return 1
+}
+
+recover_attempt() {
+  src="$1"
+  rm -f "$OUT_DB" "$WORK_DIR/recovered.db" "$WORK_DIR/dump.sql" "$WORK_DIR/schema.sql" "$WORK_DIR/schema.tsv" 2>/dev/null || true
+
+  copy_backup "$src"
+
+  if try_integrity "$WORK_DIR/$(basename "$src")"; then
+    echo "[recover] Source file is already healthy"
+    cp "$WORK_DIR/$(basename "$src")" "$OUT_DB"
+    return 0
+  fi
+
+  if try_recover "$WORK_DIR/$(basename "$src")" "$OUT_DB"; then
+    return 0
+  fi
+
+  rm -f "$OUT_DB" 2>/dev/null || true
+  if try_dump "$WORK_DIR/$(basename "$src")" "$OUT_DB"; then
+    return 0
+  fi
+
+  rm -f "$OUT_DB" 2>/dev/null || true
+  if try_schema_heal "$WORK_DIR/$(basename "$src")" "$OUT_DB"; then
+    return 0
+  fi
+
+  return 1
+}
+
+if [ -n "${CORRUPT_SRC:-}" ]; then
+  echo "[recover] Source candidate: $CORRUPT_SRC"
+  if recover_attempt "$CORRUPT_SRC"; then
+    echo "[recover] Recovery completed: $OUT_DB"
+    cp "$OUT_DB" "$LIVE_DB"
+    rm -f "$LIVE_DB-wal" "$LIVE_DB-shm" 2>/dev/null || true
+  else
+    echo "[recover] All recovery attempts failed"
+  fi
+else
+  echo "[recover] No corrupt DB found"
+fi
+
+# If recovery produced a DB, use it as the app DB.
+if [ -f "$LIVE_DB" ]; then
+  CHECK="$(sqlite3 "$LIVE_DB" "PRAGMA integrity_check;" 2>/dev/null || true)"
+  if [ "$CHECK" = "ok" ]; then
+    echo "[db-check] Recovered/live DB integrity ok"
+  else
+    echo "[db-check] Live DB still not healthy; app may create a fresh one"
+    rm -f "$LIVE_DB" "$LIVE_DB-wal" "$LIVE_DB-shm" 2>/dev/null || true
+  fi
+fi
+
+# Make the app use persistent storage as normal.
+export DATA_DIR="$PERSIST_DIR"
+
+exec bun run src/index.ts
+SH
+
+RUN chmod +x /app/start.sh
+
+USER root
+RUN mkdir -p /app/data && chown -R bun:bun /app/data
+
+EXPOSE 7860
+VOLUME /app/data
+
+USER bun
+CMD ["/app/start.sh"]