From 14bee9f1eccc92da4c1ae11d88276b4e5c3e455d Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?Hern=C3=A2ni=20Marques?= <hernani+magikoopa@vecirex.net>
Date: Sat, 18 Jul 2026 14:30:56 +0200
Subject: [PATCH] merchant: host build-deploy webui tag + merchant master

---
 ...ild-deploy-webui-1.6.11-merchant-master.sh | 217 ++++++++++++++++++
 1 file changed, 217 insertions(+)
 create mode 100755 scripts/taler-merchant/build-deploy-webui-1.6.11-merchant-master.sh

diff --git a/scripts/taler-merchant/build-deploy-webui-1.6.11-merchant-master.sh b/scripts/taler-merchant/build-deploy-webui-1.6.11-merchant-master.sh
new file mode 100755
index 0000000..bfd0b05
--- /dev/null
+++ b/scripts/taler-merchant/build-deploy-webui-1.6.11-merchant-master.sh
@@ -0,0 +1,217 @@
+#!/usr/bin/env bash
+# Build taler-merchant-webui from tag v1.6.11 + taler-merchant from master,
+# deploy into podman container taler-hacktivism on koopa, restart services.
+#
+# Run from clementine (or any host with: git, node/pnpm, ssh koopa, podman on koopa):
+#   ./scripts/taler-merchant/build-deploy-webui-1.6.11-merchant-master.sh
+#
+# Env:
+#   KOOPA_SSH=koopa
+#   MERCHANT_CTR=taler-hacktivism
+#   TTC_GIT=git@git.taler.net:taler-typescript-core.git
+#   MERCHANT_GIT=https://git.taler.net/merchant.git   # or git@…
+#   WEBUI_TAG=v1.6.11
+#   MERCHANT_REF=master
+#   SKIP_WEBUI=0  SKIP_MERCHANT=0  SKIP_RESTART=0
+#   PNPM=$HOME/.local/bin/pnpm
+#   WORK_ROOT=/tmp/taler-selfbuild-$$
+#
+set -euo pipefail
+
+KOOPA_SSH="${KOOPA_SSH:-koopa}"
+MERCHANT_CTR="${MERCHANT_CTR:-taler-hacktivism}"
+TTC_GIT="${TTC_GIT:-git@git.taler.net:taler-typescript-core.git}"
+MERCHANT_GIT="${MERCHANT_GIT:-https://git.taler.net/merchant.git}"
+WEBUI_TAG="${WEBUI_TAG:-v1.6.11}"
+MERCHANT_REF="${MERCHANT_REF:-master}"
+SKIP_WEBUI="${SKIP_WEBUI:-0}"
+SKIP_MERCHANT="${SKIP_MERCHANT:-0}"
+SKIP_RESTART="${SKIP_RESTART:-0}"
+PNPM="${PNPM:-$HOME/.local/bin/pnpm}"
+WORK_ROOT="${WORK_ROOT:-/tmp/taler-selfbuild-$$}"
+SPA_DIR="${WORK_ROOT}/spa-prod"
+TTC_DIR="${WORK_ROOT}/taler-typescript-core"
+export PATH="${HOME}/.local/bin:${PATH}"
+
+log() { printf '+ %s\n' "$*"; }
+die() { printf 'ERROR: %s\n' "$*" >&2; exit 1; }
+
+need() { command -v "$1" >/dev/null 2>&1 || die "missing command: $1"; }
+
+ssh_koopa() {
+  ssh -o BatchMode=yes -o ConnectTimeout=15 "${KOOPA_SSH}" "$@"
+}
+
+ctr_root() {
+  ssh_koopa podman exec -u root "${MERCHANT_CTR}" bash -c "$*"
+}
+
+log "work root: ${WORK_ROOT}"
+mkdir -p "${WORK_ROOT}"
+need git
+need ssh
+need tar
+need curl
+
+# ---------------------------------------------------------------------------
+# 1) WebUI from tag
+# ---------------------------------------------------------------------------
+if [ "${SKIP_WEBUI}" != "1" ]; then
+  need node
+  if [ ! -x "${PNPM}" ]; then
+    log "installing pnpm to ~/.local …"
+    npm install -g pnpm@10.33.4 --prefix "${HOME}/.local"
+  fi
+  need pnpm || [ -x "${PNPM}" ]
+  PNPM_BIN=$(command -v pnpm || echo "${PNPM}")
+
+  log "clone ${TTC_GIT} @ ${WEBUI_TAG} (full clone, not worktree — build.mjs needs real .git)"
+  rm -rf "${TTC_DIR}"
+  git clone --branch "${WEBUI_TAG}" --depth 1 "${TTC_GIT}" "${TTC_DIR}"
+  cd "${TTC_DIR}"
+  git submodule update --init contrib/taler-assets
+  test -f contrib/taler-assets/svg/logo/qr-logo.svg || die "taler-assets submodule incomplete"
+
+  ver=$(python3 -c "import json; print(json.load(open('packages/taler-merchant-webui/package.json'))['version'])")
+  log "package.json version=${ver} HEAD=$(git rev-parse --short HEAD)"
+
+  log "pnpm install + compile merchant-webui …"
+  "${PNPM_BIN}" install --frozen-lockfile --filter @gnu-taler/taler-merchant-webui...
+  "${PNPM_BIN}" run --filter @gnu-taler/taler-merchant-webui... compile
+
+  test -f packages/taler-merchant-webui/dist/prod/index.js || die "dist/prod/index.js missing"
+  test -f packages/taler-merchant-webui/dist/prod/version.txt || die "version.txt missing"
+  got=$(tr -d '\n' < packages/taler-merchant-webui/dist/prod/version.txt)
+  log "built SPA version.txt=${got}"
+  # expect 1.6.11 for default tag
+  case "${WEBUI_TAG}" in
+    v1.6.11|1.6.11)
+      [ "${got}" = "1.6.11" ] || die "expected version 1.6.11, got ${got}"
+      ;;
+  esac
+
+  rm -rf "${SPA_DIR}"
+  mkdir -p "${SPA_DIR}"
+  cp -a packages/taler-merchant-webui/dist/prod/. "${SPA_DIR}/"
+  printf 'selfbuild-%s-%s\n' "${WEBUI_TAG}" "$(git rev-parse --short HEAD)" >"${SPA_DIR}/version-overlay.txt"
+
+  log "deploy SPA into ${MERCHANT_CTR}:/usr/share/taler-merchant-webui"
+  ts=$(date +%Y%m%d-%H%M%S)
+  ctr_root "
+    set -e
+    if [ -d /usr/share/taler-merchant-webui ]; then
+      cp -a /usr/share/taler-merchant-webui /usr/share/taler-merchant-webui.bak-selfbuild-${ts}
+    fi
+    mkdir -p /usr/share/taler-merchant-webui
+    # clear previous SPA files (keep directory)
+    find /usr/share/taler-merchant-webui -mindepth 1 -maxdepth 1 ! -name 'bak-*' -exec rm -rf {} +
+  "
+  tar -C "${SPA_DIR}" -czf - . | ssh_koopa "podman exec -i -u root ${MERCHANT_CTR} bash -c '
+    set -e
+    cd /usr/share/taler-merchant-webui
+    tar -xzf -
+    chown -R root:root /usr/share/taler-merchant-webui
+    echo deployed:
+    cat version.txt
+    cat version-overlay.txt
+    wc -c index.js
+  '"
+  log "webui deploy done"
+else
+  log "SKIP_WEBUI=1"
+fi
+
+# ---------------------------------------------------------------------------
+# 2) Merchant backend from master (build inside container)
+# ---------------------------------------------------------------------------
+if [ "${SKIP_MERCHANT}" != "1" ]; then
+  log "build taler-merchant ${MERCHANT_REF} inside ${MERCHANT_CTR}"
+  # Install build deps if missing; update /var/taler-src/merchant; bootstrap; make install
+  ssh_koopa "podman exec -u root ${MERCHANT_CTR} bash -s" <<REMOTE
+set -euo pipefail
+export DEBIAN_FRONTEND=noninteractive
+SRC=/var/taler-src/merchant
+GIT_URL='${MERCHANT_GIT}'
+REF='${MERCHANT_REF}'
+
+echo '=== build deps ==='
+apt-get update -qq
+apt-get install -y --no-install-recommends \\
+  build-essential autoconf automake libtool pkg-config \\
+  libjansson-dev libmicrohttpd-dev libpq-dev libsqlite3-dev \\
+  libcurl4-openssl-dev libgcrypt20-dev zlib1g-dev \\
+  libgnunet-dev libtalerexchange-dev libqrencode-dev \\
+  recutils texinfo python3-sphinx git ca-certificates \\
+  2>&1 | tail -30 || true
+
+# exchange headers sometimes via package names that differ
+apt-get install -y --no-install-recommends libtalerutil-dev 2>/dev/null || true
+
+echo '=== source tree ==='
+mkdir -p /var/taler-src
+if [ -d "\$SRC/.git" ]; then
+  cd "\$SRC"
+  git remote set-url origin "\$GIT_URL" 2>/dev/null || git remote add origin "\$GIT_URL" || true
+  git fetch --tags origin
+  git checkout "\$REF"
+  git pull --ff-only origin "\$REF" || git reset --hard "origin/\$REF"
+else
+  rm -rf "\$SRC"
+  git clone "\$GIT_URL" "\$SRC"
+  cd "\$SRC"
+  git checkout "\$REF"
+fi
+# submodules if any
+git submodule update --init --recursive 2>/dev/null || true
+echo "merchant HEAD=\$(git rev-parse --short HEAD) \$(git log -1 --oneline)"
+
+echo '=== bootstrap / configure / make ==='
+if [ ! -x configure ]; then
+  ./bootstrap
+fi
+# Prefer /usr prefix to replace package binaries
+./configure --prefix=/usr --disable-doc 2>&1 | tail -40
+make -j"\$(nproc)" 2>&1 | tail -50
+make install 2>&1 | tail -30
+
+echo '=== installed httpd ==='
+ls -la /usr/bin/taler-merchant-httpd
+taler-merchant-httpd --help 2>&1 | head -5 || true
+# record build id
+git rev-parse HEAD > /usr/share/taler-merchant/SELFBUILD_MERCHANT_HEAD 2>/dev/null \\
+  || mkdir -p /usr/share/taler-merchant && git rev-parse HEAD > /usr/share/taler-merchant/SELFBUILD_MERCHANT_HEAD
+echo "SELFBUILD_MERCHANT_HEAD=\$(cat /usr/share/taler-merchant/SELFBUILD_MERCHANT_HEAD)"
+REMOTE
+  log "merchant build/install done"
+else
+  log "SKIP_MERCHANT=1"
+fi
+
+# ---------------------------------------------------------------------------
+# 3) Restart + health
+# ---------------------------------------------------------------------------
+if [ "${SKIP_RESTART}" != "1" ]; then
+  log "restart merchant services"
+  ssh_koopa "podman exec -u root ${MERCHANT_CTR} bash -c '
+    set -e
+    if id taler-merchant-httpd >/dev/null 2>&1; then
+      runuser -u taler-merchant-httpd -- taler-merchant-dbinit 2>&1 | tail -15 || true
+    fi
+    runuser -u taler-merchant-httpd -- /usr/local/bin/start_merchant.sh --restart
+  '"
+  log "smoke"
+  ssh_koopa 'curl -skS -m 8 -o /dev/null -w "merchant_local %{http_code}\n" https://127.0.0.1:9010/config || true'
+  curl -skS -m 12 -o /dev/null -w "merchant_public %{http_code}\n" https://taler.hacktivism.ch/config || true
+  curl -skS -m 12 -o /dev/null -w "webui %{http_code}\n" https://taler.hacktivism.ch/webui/ || true
+  pubver=$(curl -skS -m 12 https://taler.hacktivism.ch/webui/version.txt 2>/dev/null || true)
+  pubov=$(curl -skS -m 12 https://taler.hacktivism.ch/webui/version-overlay.txt 2>/dev/null || true)
+  log "public version.txt=${pubver}"
+  log "public version-overlay.txt=${pubov}"
+else
+  log "SKIP_RESTART=1"
+fi
+
+log "DONE"
+log "  webui: tag ${WEBUI_TAG} → container /usr/share/taler-merchant-webui"
+log "  merchant: ${MERCHANT_REF} → /usr/bin/taler-merchant-*"
+log "  work left at ${WORK_ROOT} (delete when satisfied)"