mirror of
https://github.com/hanzoai/insights.git
synced 2026-10-30 16:15:31 +00:00
zeekay
1b367e2b62
The tree was a debranded snapshot of upstream taken around 2026-02-20, and upstream has moved about five months since. This replaces it with upstream master, mechanically re-derived: bin/debrand does the rename, and the pipeline and squashed migrations are restored from the shipped tree. Not a merge. The previous import replaced the tree wholesale in a single commit, so there is no shared content history to merge against. Reproducing the rename on the new tree is what actually converges. What survives: .hanzo/workflows, the Dockerfiles and bin/docker* entrypoints, compose files, LLM.md, and insights/migrations. The squashed initial migration is load-bearing — the live database records it by name, so upstream's ~918 individual migrations cannot come back. Nine products are dropped as unreferenced. Twenty-one more that we do not run are kept anyway because the core app still imports them; unpicking those is a refactor and does not belong in a rebase. This base does not build yet, and the reasons are not in the rename: upstream now wants Python 3.13.13 against our 3.12.12 and Django 5.2 against our 4.2, and the dependency manifests still name upstream packages that we republish under our own names. Those are decisions, not renames.
106 lines
4.0 KiB
Bash
Executable File
106 lines
4.0 KiB
Bash
Executable File
#!/bin/bash
|
|
|
|
set -e
|
|
|
|
SCRIPT_DIR="$(cd "$(dirname "${BASH_SOURCE[0]}")" && pwd)"
|
|
ROOT_DIR="$(cd "$SCRIPT_DIR/.." && pwd)"
|
|
|
|
CONTAINER_NAME="insights-recording-rasterizer"
|
|
IMAGE_NAME="recording-rasterizer:local"
|
|
DOCKERFILE="$ROOT_DIR/Dockerfile.recording-rasterizer"
|
|
HASH_FILE="$ROOT_DIR/.insights/.generated/rasterizer-image.hash"
|
|
|
|
cd "$ROOT_DIR"
|
|
|
|
# --- Step 1: Build TypeScript locally ---
|
|
|
|
echo "Building headless player..."
|
|
pnpm --filter=@hanzo/replay-headless build
|
|
|
|
echo "Building recording-rasterizer worker..."
|
|
pnpm --filter=@hanzo/nodejs build
|
|
|
|
# --- Step 2: Build Docker image if needed ---
|
|
|
|
# Hash the Dockerfile and key dependency files to detect when a rebuild is needed.
|
|
# Source code changes are picked up via volume mounts, so we only need to rebuild
|
|
# when the image structure (deps, base image, system packages) changes.
|
|
current_hash=$(cat \
|
|
"$DOCKERFILE" \
|
|
"$ROOT_DIR/pnpm-lock.yaml" \
|
|
"$ROOT_DIR/nodejs/package.json" \
|
|
"$ROOT_DIR/common/replay-headless/package.json" \
|
|
2>/dev/null | shasum -a 256 | cut -d' ' -f1)
|
|
|
|
previous_hash=""
|
|
if [ -f "$HASH_FILE" ]; then
|
|
previous_hash=$(cat "$HASH_FILE")
|
|
fi
|
|
|
|
# Also rebuild if the image doesn't exist
|
|
if ! docker image inspect "$IMAGE_NAME" >/dev/null 2>&1; then
|
|
previous_hash="missing"
|
|
fi
|
|
|
|
if [ "$current_hash" != "$previous_hash" ]; then
|
|
echo "Docker image outdated or missing, rebuilding..."
|
|
docker build \
|
|
--platform linux/amd64 \
|
|
-f "$DOCKERFILE" \
|
|
-t "$IMAGE_NAME" \
|
|
"$ROOT_DIR"
|
|
|
|
mkdir -p "$(dirname "$HASH_FILE")"
|
|
echo "$current_hash" > "$HASH_FILE"
|
|
echo "Docker image built and cached."
|
|
else
|
|
echo "Docker image up-to-date (cached)."
|
|
fi
|
|
|
|
# --- Step 3: Stop existing container ---
|
|
|
|
if docker ps -a --format '{{.Names}}' | grep -q "^${CONTAINER_NAME}$"; then
|
|
echo "Stopping existing container..."
|
|
docker stop "$CONTAINER_NAME" >/dev/null 2>&1 || true
|
|
docker rm "$CONTAINER_NAME" >/dev/null 2>&1 || true
|
|
fi
|
|
|
|
# --- Step 4: Start container ---
|
|
|
|
# The container joins the docker-compose network for Temporal and MinIO,
|
|
# and uses host.docker.internal for services running natively on the host
|
|
# (recording-api, Django).
|
|
|
|
# Chrome's namespace-sandbox needs seccomp/apparmor relaxed to bootstrap inside
|
|
# the linux/amd64 emulation Docker uses on macOS. Local dev script only — prod
|
|
# runs from the Helm chart, not this script.
|
|
echo "Starting recording-rasterizer container..."
|
|
# nosemgrep: trailofbits.generic.container-privileged.container-privileged
|
|
docker run --rm \
|
|
--name "$CONTAINER_NAME" \
|
|
--network insights_default \
|
|
--platform linux/amd64 \
|
|
--add-host localhost:host-gateway \
|
|
--security-opt seccomp=unconfined \
|
|
--security-opt apparmor=unconfined \
|
|
-e TEMPORAL_HOST="${TEMPORAL_HOST:-insights-temporal-1}" \
|
|
-e TEMPORAL_PORT="${TEMPORAL_PORT:-7233}" \
|
|
-e RECORDING_API_BASE_URL="${RECORDING_API_BASE_URL:-http://host.docker.internal:6741}" \
|
|
-e INTERNAL_API_SECRET="${INTERNAL_API_SECRET:-insights123}" \
|
|
-e SITE_URL="${SITE_URL:-http://host.docker.internal:8000}" \
|
|
-e VIDEO_EXPORT_OBJECT_STORAGE_ENDPOINT="${VIDEO_EXPORT_OBJECT_STORAGE_ENDPOINT:-http://insights-objectstorage-1:19000}" \
|
|
-e AWS_ACCESS_KEY_ID=object_storage_root_user \
|
|
-e AWS_SECRET_ACCESS_KEY=object_storage_root_password \
|
|
-e DISABLE_BROWSER_SECURITY="${DISABLE_BROWSER_SECURITY:-1}" \
|
|
-e MAX_CONCURRENT_ACTIVITIES="${MAX_CONCURRENT_ACTIVITIES:-8}" \
|
|
-e CAPTURE_BROWSER_LOGS="${CAPTURE_BROWSER_LOGS:-0}" \
|
|
-e SECRET_KEY="${SECRET_KEY:?SECRET_KEY must be set}" \
|
|
-e LOG_LEVEL="${LOG_LEVEL:-info}" \
|
|
-e SCREENSHOT_FORMAT="${SCREENSHOT_FORMAT:-jpeg}" \
|
|
-e SCREENSHOT_JPEG_QUALITY="${SCREENSHOT_JPEG_QUALITY:-80}" \
|
|
-e CHROME_HOST_RESOLVER_RULES="MAP localhost host.docker.internal" \
|
|
-v "$ROOT_DIR/nodejs/dist/session-replay/recording-rasterizer:/code/nodejs/dist/session-replay/recording-rasterizer" \
|
|
-v "$ROOT_DIR/common/replay-headless/dist:/code/common/replay-headless/dist" \
|
|
"$IMAGE_NAME" \
|
|
2>&1 | pnpm --filter=@hanzo/nodejs exec pino-pretty --colorize
|