mirror of
https://github.com/Sea-Haven-Industries/seahaven-ap.git
synced 2026-09-30 08:03:20 +00:00
864531b51e
* feat(api): serve portal-shaped health and error envelope
Move liveness to GET /api/health { stage, sha } with a Node 24 image on 8080 so ALB probes and deploy verify do not need auth or a database ping.
* feat(api): switch live auth to host cookie BFF
Replace Bearer as the documented session path with Cognito hosted UI plus __Host-ap_* cookies so the SPA can call /api with credentials include.
* feat(web): add unused cookie SPA API client
Land a credentials-include fetch helper and hand-synced health/me types without wiring pages or domain hooks, so mocks stay the default data path.
* feat(api): add master-data OpenAPI and Hono stubs
* feat(api): add invoice, line, and document stubs
* feat(api): add approval policy, inbox, and activity stubs
* test(web): fix SPA client fetch mock types
* test(web): cast fetch mock call args for tsc
* fix(api): do not default DEV_AUTH_BYPASS outside local migrate
* fix(api): replace invoice lines in a single transaction
* fix(api): create invoices and lines in one transaction
* fix(api): inline GIT_SHA from the image build arg
* fix(api): stop PATCH from skipping the approval workflow
* fix(api): address review feedback
* fix(ci): format upsert-user test
* fix(api): document only the auth statuses the routes return
* fix(api): drop health 400 responses the routes never return
27 lines
1.3 KiB
Docker
27 lines
1.3 KiB
Docker
FROM --platform=$BUILDPLATFORM node:24-bookworm-slim@sha256:0e0ff40c39bc087845bfb27465a0df4ea419520094bc35842ff83dd8cbe6f9b6 AS build
|
|
WORKDIR /app
|
|
COPY package.json package-lock.json ./
|
|
COPY packages/shared/package.json packages/shared/package.json
|
|
COPY packages/api/package.json packages/api/package.json
|
|
RUN npm ci
|
|
COPY packages/shared packages/shared
|
|
COPY packages/api packages/api
|
|
RUN npm run build:shared && npm run build -w @seahaven-ap/api
|
|
ARG GIT_SHA=unknown
|
|
RUN GIT_SHA="$GIT_SHA" node -e "require('node:fs').writeFileSync('packages/api/dist/build-info.js', 'export const BUILD_GIT_SHA = ' + JSON.stringify(process.env.GIT_SHA || 'unknown') + ';\\n')"
|
|
|
|
FROM --platform=linux/amd64 node:24-alpine@sha256:ebfe2f90462722a7a4de65e91990e97fe0d401c70e0e762c5b53302f905ec1c1
|
|
RUN addgroup -S app && adduser -S -G app app
|
|
WORKDIR /app
|
|
COPY package.json package-lock.json ./
|
|
COPY packages/shared/package.json packages/shared/package.json
|
|
COPY packages/api/package.json packages/api/package.json
|
|
RUN npm ci --omit=dev
|
|
COPY --from=build /app/packages/shared/dist packages/shared/dist
|
|
COPY --from=build /app/packages/api/dist packages/api/dist
|
|
COPY --from=build /app/packages/api/drizzle packages/api/drizzle
|
|
USER app
|
|
ENV NODE_ENV=production \
|
|
API_PORT=8080
|
|
EXPOSE 8080
|
|
CMD ["node", "packages/api/dist/index.js"]
|