511f930d20
Some checks failed
PR Checks / Lint (push) Has been cancelled
PR Checks / Typecheck (push) Has been cancelled
PR Checks / Build (push) Has been cancelled
PR Checks / Test shard 1/4 (push) Has been cancelled
PR Checks / Test shard 2/4 (push) Has been cancelled
PR Checks / Test shard 3/4 (push) Has been cancelled
PR Checks / Test shard 4/4 (push) Has been cancelled
Strategy: reset main to upstream/main (v0.39.0) and reapply only the fork-specific patches that survive — most older patches (plugin-loader routing, heartbeat resolver, autoload, cross-spawn, scope-resolution fixes) were absorbed by upstream between v0.28.1 → v0.39.0. Surviving patches: - Dockerfile: keep single-stage Coolify-compatible build (upstream went multi-stage which breaks our bind-mount strategy for /home/s/.codex, /home/s/.claude, /usr/lib/node_modules) - packages/engine/src/sandbox-tester-gate.ts: shared Phase-3 pre-merge gate module (Opus 4.7 + OpenSandbox + Playwright smoke) - packages/engine/src/executor.ts: call runSandboxTesterGate from finalizeAlreadyReviewedTask recovery path - packages/engine/src/project-engine.ts: call applySandboxTesterGate from primary direct-merge dispatch (the path that actually fires in prod — recovery path only catches stuck tasks) - packages/dashboard/src/auth-middleware.ts: registerPluginExemptPath for webhook endpoints (Grafana, Gitea) that must bypass daemon-token - packages/dashboard/src/plugin-routes.ts: auto-register plugin-defined routes as daemon-exempt so external plugins (telemetry-watcher, gitea-issues) work out of the box Tested locally: pnpm install + pnpm -r build green, no TS errors. Co-Authored-By: Claude Opus 4.7 <noreply@anthropic.com>
41 lines
1.0 KiB
Docker
41 lines
1.0 KiB
Docker
# syntax=docker/dockerfile:1
|
|
|
|
FROM node:22-slim
|
|
LABEL org.opencontainers.image.source="https://github.com/Runfusion/Fusion"
|
|
LABEL org.opencontainers.image.description="AI-orchestrated task board"
|
|
|
|
ENV NODE_ENV=production
|
|
ENV PORT=4040
|
|
|
|
RUN apt-get update \
|
|
&& apt-get install -y --no-install-recommends git build-essential python3 curl ca-certificates \
|
|
&& rm -rf /var/lib/apt/lists/*
|
|
|
|
RUN corepack enable && corepack prepare pnpm@10.33.0 --activate
|
|
|
|
WORKDIR /app
|
|
|
|
COPY package.json pnpm-lock.yaml pnpm-workspace.yaml ./
|
|
COPY packages ./packages
|
|
COPY plugins ./plugins
|
|
|
|
RUN pnpm install --frozen-lockfile
|
|
|
|
COPY . .
|
|
RUN pnpm build
|
|
|
|
RUN mkdir -p /project && chown -R node:node /project /app
|
|
|
|
RUN ln -s /usr/lib/node_modules/@openai/codex/bin/codex.js /usr/local/bin/codex
|
|
|
|
USER node
|
|
WORKDIR /project
|
|
|
|
EXPOSE 4040
|
|
|
|
HEALTHCHECK --interval=30s --timeout=5s --start-period=30s --retries=3 \
|
|
CMD curl -fsS -o /dev/null http://localhost:4040/ || exit 1
|
|
|
|
ENTRYPOINT ["node", "/app/packages/cli/dist/bin.js"]
|
|
CMD ["dashboard", "--host", "0.0.0.0"]
|