@emseepea/create-database-schema-server 0.0.7 → 0.0.10

package/README.md

@@ -77,17 +77,21 @@ Stop the server with Control-C. Remove the local database and volume when you
 no longer need them:
 
 ```sh
-docker compose down --volumes
+npm run db:reset
 ```
 
+`npm run db:reset` deletes the local PostgreSQL volume and its data. You cannot
+undo this action. Docker Compose starts PostgreSQL for local development only.
+It is not a production deployment recipe.
+
 ## Change the Database Contract
 
 Edit `schema.sql`, recreate the development database, then regenerate the
 checked-in files:
 
 ```sh
-docker compose down --volumes
-docker compose up --detach --wait database
+npm run db:reset
+npm run db:start
 npm run generate
 ```
 
@@ -99,6 +103,23 @@ reads and writes while insulating tools from storage tables. The
 `summarize-pea-catalog` procedure is included only for databases where an
 existing operation must remain procedural.
 
+## Build a production container
+
+Run `npm install` first so the project has a lockfile. Then run:
+
+```sh
+npm run container:build
+```
+
+The image is for a production deployment behind a trusted proxy. It starts with
+the fail-closed production profile and needs a runtime-mounted deployment
+configuration file. Keep secrets, including `DATABASE_URL`, in your platform's
+runtime secret store, not in the Dockerfile, build arguments, or deployment
+configuration file.
+
+For the production proxy, runtime configuration, and hardening requirements, see
+the [container guide](https://emseepea.github.io/emseepea/examples/#build-a-production-container).
+
 ## Tools
 
 - `list-pea-varieties` reads a bounded, fixed projection from the catalogue view.

package/initializer-dist/template/.dockerignore

@@ -0,0 +1,17 @@
+.env
+.env.*
+.git
+.github
+.npmrc
+artifacts
+coverage
+dist
+docs
+eval
+initializer-dist
+node_modules
+release-artifacts
+test
+test-support
+*.log
+*.tsbuildinfo

package/initializer-dist/template/Dockerfile

@@ -0,0 +1,19 @@
+FROM docker.io/library/node:24.21.0-trixie-slim@sha256:db3ae80f5d8df06e04dabdf7b44cbf008d32de168205fa0294444aabbc08c590 AS build
+WORKDIR /app
+COPY . .
+RUN test "$(node --version)" = "v24.21.0" \
+  && test -f package-lock.json \
+  && npm ci --ignore-scripts \
+  && npm run build \
+  && npm prune --omit=dev --ignore-scripts
+
+FROM gcr.io/distroless/nodejs24-debian13:nonroot@sha256:7781e8b4fccf59240bd539af6738cccf8dad4be303165c3a1fa065c48699b937
+WORKDIR /app
+ENV EMSEEPEA_DEPLOYMENT_MODE=production-behind-proxy
+COPY --from=build --chown=65532:65532 /app/package.json ./package.json
+COPY --from=build --chown=65532:65532 /app/node_modules ./node_modules
+COPY --from=build --chown=65532:65532 /app/dist ./dist
+USER 65532:65532
+EXPOSE 3000
+HEALTHCHECK --interval=30s --timeout=3s --start-period=5s --retries=3 CMD ["/nodejs/bin/node", "-e", "const port=process.env.PORT||'3000';fetch(`http://127.0.0.1:${port}/healthz`).then((r)=>process.exit(r.ok?0:1),()=>process.exit(1));"]
+CMD ["dist/server.js"]

package/initializer-dist/template/README.md

@@ -47,17 +47,21 @@ Stop the server with Control-C. Remove the local database and volume when you
 no longer need them:
 
 ```sh
-docker compose down --volumes
+npm run db:reset
 ```
 
+`npm run db:reset` deletes the local PostgreSQL volume and its data. You cannot
+undo this action. Docker Compose starts PostgreSQL for local development only.
+It is not a production deployment recipe.
+
 ## Change the Database Contract
 
 Edit `schema.sql`, recreate the development database, then regenerate the
 checked-in files:
 
 ```sh
-docker compose down --volumes
-docker compose up --detach --wait database
+npm run db:reset
+npm run db:start
 npm run generate
 ```
 
@@ -69,6 +73,23 @@ reads and writes while insulating tools from storage tables. The
 `summarize-pea-catalog` procedure is included only for databases where an
 existing operation must remain procedural.
 
+## Build a production container
+
+Run `npm install` first so the project has a lockfile. Then run:
+
+```sh
+npm run container:build
+```
+
+The image is for a production deployment behind a trusted proxy. It starts with
+the fail-closed production profile and needs a runtime-mounted deployment
+configuration file. Keep secrets, including `DATABASE_URL`, in your platform's
+runtime secret store, not in the Dockerfile, build arguments, or deployment
+configuration file.
+
+For the production proxy, runtime configuration, and hardening requirements, see
+the [container guide](https://emseepea.github.io/emseepea/examples/#build-a-production-container).
+
 ## Tools
 
 - `list-pea-varieties` reads a bounded, fixed projection from the catalogue view.

package/initializer-dist/template/package.json

@@ -9,18 +9,21 @@
     "generate": "kanel --config kanel.config.cjs",
     "generate:check": "node test/with-postgres.mjs node scripts/check-generated.mjs",
     "start": "node dist/server.js",
-    "dev": "docker compose up --detach --wait database && npm run generate && npm run build && npm start",
+    "dev": "npm run db:start && npm run generate && npm run build && npm start",
+    "db:start": "docker compose up --detach --wait database",
+    "db:reset": "docker compose down --volumes",
     "test": "npm run build && npm run test:built",
     "test:built": "node test/with-postgres.mjs node --test test/*.test.mjs",
     "test:llm": "npm run build && npm run test:llm:built",
     "test:llm:built": "node test/with-postgres.mjs emseepea-test eval",
-    "lint": "oxlint src test eval scripts kanel.config.cjs"
+    "lint": "oxlint src test eval scripts kanel.config.cjs",
+    "container:build": "docker build --tag emseepea-server:local ."
   },
   "devDependencies": {
-    "@emseepea/feedback": "0.2.3",
+    "@emseepea/feedback": "0.2.6",
     "kanel": "4.0.4",
     "kanel-zod": "4.0.1",
-    "@emseepea/testing": "0.9.6",
+    "@emseepea/testing": "0.9.9",
     "@modelcontextprotocol/client": "2.0.0",
     "@types/node": "24.13.3",
     "@types/pg": "8.23.1",
@@ -32,7 +35,7 @@
   },
   "private": true,
   "dependencies": {
-    "@emseepea/server": "0.8.1",
+    "@emseepea/server": "0.10.0",
     "pg": "8.23.0",
     "zod": "4.4.3"
   }

package/initializer-dist/template/src/server.ts

@@ -1,8 +1,8 @@
-import { serveEmseepea } from "@emseepea/server";
+import { loadDeploymentProfile, serveEmseepea } from "@emseepea/server";
 import { createDatabaseSchemaExample } from "./app.js";
 
 const databaseUrl = process.env.DATABASE_URL ?? "postgres://emseepea:emseepea@127.0.0.1:5432/emseepea";
-const { app } = await createDatabaseSchemaExample({ databaseUrl });
+const { app } = await createDatabaseSchemaExample({ databaseUrl, deployment: loadDeploymentProfile() });
 const running = await serveEmseepea(app, {
   port: Number.parseInt(process.env.PORT ?? "3000", 10),
 });

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@emseepea/create-database-schema-server",
-  "version": "0.0.7",
+  "version": "0.0.10",
   "description": "Create an Em See Pea server with internal validation generated from a PostgreSQL schema.",
   "license": "MIT",
   "type": "module",
@@ -12,7 +12,9 @@
     "generate": "kanel --config kanel.config.cjs",
     "generate:check": "node test/with-postgres.mjs node scripts/check-generated.mjs",
     "start": "node dist/server.js",
-    "dev": "docker compose up --detach --wait database && npm run generate && npm run build && npm start",
+    "dev": "npm run db:start && npm run generate && npm run build && npm start",
+    "db:start": "docker compose up --detach --wait database",
+    "db:reset": "docker compose down --volumes",
     "test": "npm run build && npm run test:built",
     "test:built": "node test/with-postgres.mjs node --test test/*.test.mjs",
     "test:llm": "npm run build && npm run test:llm:built",
@@ -21,13 +23,13 @@
     "prepack": "npm run build:initializer"
   },
   "devDependencies": {
-    "@emseepea/feedback": "0.2.3",
-    "@emseepea/server": "0.8.1",
+    "@emseepea/feedback": "0.2.6",
+    "@emseepea/server": "0.10.0",
     "pg": "8.23.0",
     "zod": "4.4.3",
     "kanel": "4.0.4",
     "kanel-zod": "4.0.1",
-    "@emseepea/testing": "0.9.6",
+    "@emseepea/testing": "0.9.9",
     "@modelcontextprotocol/client": "2.0.0",
     "@types/node": "24.13.3",
     "@types/pg": "8.23.1",