@app-vitals/agent-admin 1.2.3 → 1.2.4
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/Dockerfile +15 -4
- package/package.json +2 -2
package/Dockerfile
CHANGED
|
@@ -14,11 +14,21 @@ COPY runtime/package.json ./runtime/
|
|
|
14
14
|
COPY lib/package.json ./lib/
|
|
15
15
|
COPY patches/ ./patches/
|
|
16
16
|
|
|
17
|
-
|
|
17
|
+
# --production: devDependencies (semantic-release's nested npm, typescript's native
|
|
18
|
+
# tsc) never reach the shipped node_modules.
|
|
19
|
+
# typescript is only an optional peer of prisma / @prisma/client, but bun still
|
|
20
|
+
# links it (and its native tsc binary) into the store because the lockfile
|
|
21
|
+
# carries it; nothing at runtime loads it, so drop it.
|
|
22
|
+
RUN if [ -f bun.lock ]; then bun install --frozen-lockfile --production; else bun install --production; fi \
|
|
23
|
+
&& rm -rf node_modules/.bun/typescript@* node_modules/.bun/@typescript+* \
|
|
24
|
+
node_modules/.bun/node_modules/typescript node_modules/.bun/node_modules/@typescript
|
|
18
25
|
|
|
19
26
|
FROM oven/bun:1.4.4-slim@sha256:1846adf22496bd711036aae8be147e57bdebbaea2e5264e3e0b5af1db187d9a4 AS production
|
|
20
27
|
|
|
21
|
-
|
|
28
|
+
# Upgrade apt/libapt-pkg7.0 past the base image's 3.0.3 (Trivy HIGH CVE-2026-109518, fixed in 3.0.4).
|
|
29
|
+
RUN apt-get update \
|
|
30
|
+
&& apt-get install -y --only-upgrade apt libapt-pkg7.0 \
|
|
31
|
+
&& apt-get install -y --no-install-recommends \
|
|
22
32
|
ca-certificates \
|
|
23
33
|
&& rm -rf /var/lib/apt/lists/*
|
|
24
34
|
|
|
@@ -33,8 +43,9 @@ COPY --from=deps /app/lib/node_modules ./lib/node_modules
|
|
|
33
43
|
# .dockerignore keeps node_modules, .git and build output out of the context.
|
|
34
44
|
COPY . .
|
|
35
45
|
|
|
36
|
-
# The generated Prisma client is not committed.
|
|
37
|
-
|
|
46
|
+
# The generated Prisma client is not committed. prisma is a root runtime
|
|
47
|
+
# dependency, so run the lockfile-pinned CLI from node_modules (no bunx download).
|
|
48
|
+
RUN cd admin && ../node_modules/.bin/prisma generate --schema=prisma/schema
|
|
38
49
|
|
|
39
50
|
EXPOSE 3000
|
|
40
51
|
|
package/package.json
CHANGED
|
@@ -1,6 +1,6 @@
|
|
|
1
1
|
{
|
|
2
2
|
"name": "@app-vitals/agent-admin",
|
|
3
|
-
"version": "1.2.
|
|
3
|
+
"version": "1.2.4",
|
|
4
4
|
"repository": {
|
|
5
5
|
"type": "git",
|
|
6
6
|
"url": "git+https://github.com/app-vitals/agent.git",
|
|
@@ -42,7 +42,7 @@
|
|
|
42
42
|
},
|
|
43
43
|
"dependencies": {
|
|
44
44
|
"@anthropic-ai/sdk": "0.135.0",
|
|
45
|
-
"@app-vitals/agent-lib": "1.2.
|
|
45
|
+
"@app-vitals/agent-lib": "1.2.4",
|
|
46
46
|
"@hono/zod-openapi": "^1.0.0",
|
|
47
47
|
"@prisma/adapter-pg": "^7.10.0",
|
|
48
48
|
"@prisma/client": "^7.10.0",
|