- integrations.ts: grant data:<provider> on OAuth callback, revoke on disconnect - Backfill migration: INSERT OR IGNORE data:<provider> for all active tokens - Agent manifests: drop agent:<id> from required_consents (momentum, time-of-day, overdue-task, recent-patterns, health-vitals) — per-agent control is a preference - eligibility.ts: update comment to reflect data:-only consent model - test_manifest.py: assert no agent: consents remain in any manifest - migrations.test.ts: backfill idempotency tests for issue #127 - Dockerfile.api: drop --offline flag (fixes ERR_PNPM_NO_OFFLINE_META) Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
36 lines
1.2 KiB
Docker
36 lines
1.2 KiB
Docker
# syntax=docker/dockerfile:1.7
|
|
|
|
FROM node:22-slim AS base
|
|
RUN apt-get update && apt-get install -y --no-install-recommends \
|
|
python3 make g++ ca-certificates \
|
|
&& rm -rf /var/lib/apt/lists/* \
|
|
&& npm install -g pnpm
|
|
ENV CI=true \
|
|
PNPM_HOME=/pnpm \
|
|
PATH=/pnpm:$PATH
|
|
RUN pnpm config set store-dir /pnpm/store
|
|
|
|
FROM base AS builder
|
|
WORKDIR /app
|
|
COPY pnpm-lock.yaml ./
|
|
RUN --mount=type=cache,id=pnpm,target=/pnpm/store pnpm fetch
|
|
COPY . .
|
|
RUN --mount=type=cache,id=pnpm,target=/pnpm/store \
|
|
pnpm install --frozen-lockfile \
|
|
--filter @oo/api... --filter @oo/shared-types
|
|
RUN pnpm --filter @oo/shared-types build
|
|
RUN pnpm --filter @oo/api build
|
|
RUN --mount=type=cache,id=pnpm,target=/pnpm/store \
|
|
pnpm --filter @oo/api --prod deploy --legacy /deploy \
|
|
&& cp -r services/api/dist /deploy/dist \
|
|
&& rm -rf /deploy/node_modules/@oo/shared-types/src \
|
|
&& cp -r packages/shared-types/dist /deploy/node_modules/@oo/shared-types/dist
|
|
|
|
FROM node:22-slim AS runner
|
|
WORKDIR /app
|
|
ENV NODE_ENV=production
|
|
COPY --from=builder /deploy/package.json ./
|
|
COPY --from=builder /deploy/node_modules ./node_modules
|
|
COPY --from=builder /deploy/dist ./dist
|
|
CMD ["node", "dist/index.js"]
|