feat: deploy zopu single-node production

deploy/zopu-runtime/bootstrap.sh

@@ -14,9 +14,9 @@
 #   TAILSCALE_AUTHKEY   — if set, configure Tailscale
 #   TAILSCALE_HOSTNAME  — Tailscale hostname (default: zopu-runtime)
 #
-# Installs: Docker Engine, Bun, clones the repo, runs bun install, builds the
-# daemon and agent, creates a non-root service user, installs systemd units,
-# and configures firewall/Tailscale defaults.
+# Installs: Docker Engine, Node.js 22, Bun, clones the repo, runs bun install, builds the
+# web app, daemon, and agent, creates a non-root service user, installs systemd
+# units, and configures firewall/Tailscale defaults.
 
 set -euo pipefail
 
@@ -105,18 +105,31 @@ fi
 systemctl enable --now docker
 
 # ---------------------------------------------------------------------------
-# 3. Bun
+# 3. Node.js 22 (required by the Flue Node target)
+# ---------------------------------------------------------------------------
+NODE_MAJOR=$(node --version 2>/dev/null | sed -n 's/^v\([0-9][0-9]*\).*/\1/p')
+if [[ -z "$NODE_MAJOR" || "$NODE_MAJOR" -lt 22 ]]; then
+  log "Installing Node.js 22..."
+  curl -fsSL https://deb.nodesource.com/setup_22.x -o /tmp/nodesource_setup.sh
+  bash /tmp/nodesource_setup.sh
+  apt-get install -y nodejs
+else
+  log "Node.js already installed: $(node --version)"
+fi
+
+# ---------------------------------------------------------------------------
+# 4. Bun
 # ---------------------------------------------------------------------------
 if ! command -v bun &>/dev/null; then
   log "Installing Bun..."
   curl -fsSL https://bun.sh/install | bash
-  ln -sf /root/.bun/bin/bun /usr/local/bin/bun
+  install -m 0755 /root/.bun/bin/bun /usr/local/bin/bun
 else
   log "Bun already installed: $(bun --version)"
 fi
 
 # ---------------------------------------------------------------------------
-# 4. Service user
+# 5. Service user
 # ---------------------------------------------------------------------------
 if ! id "$SERVICE_USER" &>/dev/null; then
   log "Creating service user: $SERVICE_USER"
@@ -129,7 +142,7 @@ if ! id -nG "$SERVICE_USER" | grep -qw docker; then
 fi
 
 # ---------------------------------------------------------------------------
-# 5. Clone or update repository
+# 6. Clone or update repository
 # ---------------------------------------------------------------------------
 if [[ -d "$INSTALL_DIR/.git" ]]; then
   log "Repository exists at $INSTALL_DIR, fetching latest..."
@@ -144,25 +157,28 @@ else
 fi
 
 # ---------------------------------------------------------------------------
-# 5b. Hand ownership of the checkout to the service user
+# 6b. Hand ownership of the checkout to the service user
 # ---------------------------------------------------------------------------
 log "Setting ownership of $INSTALL_DIR to $SERVICE_USER..."
 chown -R "$SERVICE_USER":"$SERVICE_USER" "$INSTALL_DIR"
 
 # ---------------------------------------------------------------------------
-# 6. Install dependencies and build
+# 7. Install dependencies and build
 # ---------------------------------------------------------------------------
 log "Running bun install..."
 run_as_service bun install
 
-log "Building daemon binary..."
+log "Building web app..."
+run_as_service bun run --cwd apps/web build
+
+log "Validating daemon production build..."
 run_as_service bun run build:daemon
 
 log "Building agent service..."
 run_as_service bun run build:agents
 
 # ---------------------------------------------------------------------------
-# 7. Environment file
+# 8. Environment file
 # ---------------------------------------------------------------------------
 ENV_FILE="$INSTALL_DIR/.env"
 if [[ ! -f "$ENV_FILE" ]]; then
@@ -179,17 +195,17 @@ else
 fi
 
 # ---------------------------------------------------------------------------
-# 8. Persistent log directory
+# 9. Persistent log directory
 # ---------------------------------------------------------------------------
 LOG_DIR="/var/log/zopu"
 mkdir -p "$LOG_DIR"
 chown "$SERVICE_USER":"$SERVICE_USER" "$LOG_DIR"
 
 # ---------------------------------------------------------------------------
-# 9. Install systemd units (substitute placeholders)
+# 10. Install systemd units (substitute placeholders)
 # ---------------------------------------------------------------------------
 log "Installing systemd units..."
-for unit in zopu-daemon.service zopu-agent.service \
+for unit in zopu-web.service zopu-daemon.service zopu-agent.service \
            zopu-health.timer zopu-health.service \
            zopu-docker-cleanup.timer zopu-docker-cleanup.service; do
   SRC="$DEPLOY_DIR/systemd/$unit"
@@ -205,7 +221,7 @@ done
 systemctl daemon-reload
 
 # ---------------------------------------------------------------------------
-# 10. Firewall (deny-by-default, explicit allow for Tailscale)
+# 11. Firewall (deny-by-default, explicit allow for Tailscale)
 # ---------------------------------------------------------------------------
 log "Configuring firewall..."
 if ! ufw status 2>/dev/null | grep -q "Status: active"; then
@@ -227,7 +243,7 @@ else
 fi
 
 # ---------------------------------------------------------------------------
-# 11. Tailscale (optional)
+# 12. Tailscale (optional)
 # ---------------------------------------------------------------------------
 if [[ -n "${TAILSCALE_AUTHKEY:-}" ]]; then
   log "Installing and configuring Tailscale..."
@@ -249,7 +265,7 @@ else
 fi
 
 # ---------------------------------------------------------------------------
-# 12. Disk-space monitoring cron
+# 13. Disk-space monitoring cron
 # /etc/cron.d format REQUIRES a username field.
 # ---------------------------------------------------------------------------
 log "Installing disk-space monitor (daily at 06:00)..."
@@ -265,7 +281,7 @@ echo ""
 echo "Next steps:"
 echo "  1. Edit $ENV_FILE with real values"
 echo "  2. Start services:"
-echo "     systemctl start zopu-daemon zopu-agent"
+echo "     systemctl start zopu-web zopu-daemon zopu-agent"
 echo "  3. Enable health monitoring:"
 echo "     systemctl enable --now zopu-health.timer zopu-docker-cleanup.timer"
 echo "  4. Verify health:"