mirror of
https://github.com/hanzoai/insights.git
synced 2026-10-30 16:15:31 +00:00
zeekay
1b367e2b62
The tree was a debranded snapshot of upstream taken around 2026-02-20, and upstream has moved about five months since. This replaces it with upstream master, mechanically re-derived: bin/debrand does the rename, and the pipeline and squashed migrations are restored from the shipped tree. Not a merge. The previous import replaced the tree wholesale in a single commit, so there is no shared content history to merge against. Reproducing the rename on the new tree is what actually converges. What survives: .hanzo/workflows, the Dockerfiles and bin/docker* entrypoints, compose files, LLM.md, and insights/migrations. The squashed initial migration is load-bearing — the live database records it by name, so upstream's ~918 individual migrations cannot come back. Nine products are dropped as unreferenced. Twenty-one more that we do not run are kept anyway because the core app still imports them; unpicking those is a refactor and does not belong in a rebase. This base does not build yet, and the reasons are not in the rename: upstream now wants Python 3.13.13 against our 3.12.12 and Django 5.2 against our 4.2, and the dependency manifests still name upstream packages that we republish under our own names. Those are decisions, not renames.
89 lines
3.7 KiB
Docker
89 lines
3.7 KiB
Docker
# Insights MCP server (Hono / Node.js).
|
|
#
|
|
# Production runtime image. Build context is the repo root so we can install
|
|
# dependencies through the pnpm workspace.
|
|
#
|
|
# docker build -f services/mcp/Dockerfile -t insights-mcp .
|
|
#
|
|
# The legacy `Dockerfile.proxy` in this directory is for the `mcp-remote` CLI
|
|
# proxy distribution, not the server — different artifact, don't confuse them.
|
|
|
|
# Pin the same Node version as the rest of the monorepo (.nvmrc).
|
|
ARG NODE_VERSION=24.13.0
|
|
ARG NODE_IMAGE=node:${NODE_VERSION}-bookworm-slim
|
|
|
|
#
|
|
# Build stage — install workspace deps, bundle the Hono entry into a single .mjs.
|
|
# Everything (including ioredis) is bundled, so the runtime stage doesn't need
|
|
# `node_modules` at all.
|
|
#
|
|
FROM ${NODE_IMAGE} AS build
|
|
WORKDIR /code
|
|
|
|
# `corepack enable` reads the `packageManager` field in package.json to pick the
|
|
# pnpm version — no `corepack prepare pnpm@latest` (non-deterministic).
|
|
RUN corepack enable
|
|
|
|
# Copy lockfile + workspace manifests first so the install layer caches across
|
|
# unrelated source changes. `patches/` is required because pnpm-lock.yaml
|
|
# references workspace-level patch files (e.g. `[email protected]`).
|
|
# Root `tsconfig.json` is needed because product tsconfigs (`products/*/tsconfig.json`)
|
|
# extend it via relative path; vite reads it during the UI apps build.
|
|
COPY pnpm-lock.yaml pnpm-workspace.yaml package.json tsconfig.json ./
|
|
COPY patches/ patches/
|
|
|
|
# pnpm needs every referenced workspace package's `package.json` BEFORE install
|
|
# so it can build the dependency graph and link transitive workspace deps. We
|
|
# do this in two passes: manifests first (cache-friendly install layer), then
|
|
# source after, so source edits don't bust the install cache.
|
|
COPY services/mcp/package.json services/mcp/package.json
|
|
COPY tools/openapi-codegen/package.json tools/openapi-codegen/package.json
|
|
# @hanzo/mcp depends on @hanzo/products-ai-observability (workspace:*) —
|
|
# pnpm needs its manifest to resolve the dependency graph and install its
|
|
# transitive deps (e.g. yaml).
|
|
COPY products/ai_observability/package.json products/ai_observability/package.json
|
|
# UI apps depend on @hanzo/quill — copy all its workspace manifests so pnpm
|
|
# can resolve the full dependency graph during install.
|
|
COPY packages/ packages/
|
|
|
|
RUN --mount=type=cache,id=pnpm,target=/pnpm/store \
|
|
pnpm install --frozen-lockfile --filter @hanzo/mcp...
|
|
|
|
COPY services/mcp/ services/mcp/
|
|
COPY tools/openapi-codegen/ tools/openapi-codegen/
|
|
# `scripts/build-ui-apps.ts` imports React components from `products/<x>/mcp/apps/`
|
|
# (the generator scans `products/*/mcp/tools.yaml` and synthesizes entry points),
|
|
# so the whole `products/` tree needs to be in the build context.
|
|
COPY products/ products/
|
|
WORKDIR /code/services/mcp
|
|
RUN pnpm exec tsx scripts/build-hono.ts && pnpm run build:ui-apps
|
|
|
|
#
|
|
# Runtime stage — minimal slim image with just the bundle.
|
|
#
|
|
FROM ${NODE_IMAGE}
|
|
WORKDIR /code
|
|
|
|
# Commit hash burned in for incident triage; matches the convention in
|
|
# Dockerfile.node.
|
|
ARG COMMIT_HASH
|
|
RUN echo "${COMMIT_HASH:-unknown}" > /code/commit.txt
|
|
|
|
# Bundle is fully self-contained — ioredis and everything else is inlined.
|
|
COPY --from=build --chown=node:node /code/services/mcp/dist/hono-server.mjs ./hono-server.mjs
|
|
COPY --from=build --chown=node:node /code/services/mcp/dist/hono-server.mjs.map ./hono-server.mjs.map
|
|
# UI app static assets — served at `/ui-apps/<app>/...` by `serveStatic` in app.ts.
|
|
COPY --from=build --chown=node:node /code/services/mcp/public/ ./public/
|
|
|
|
ENV NODE_ENV=production \
|
|
PORT=3001
|
|
|
|
EXPOSE 3001
|
|
|
|
# Liveness/readiness are handled by the orchestrator (k8s probes hit /healthz
|
|
# and /readyz). No HEALTHCHECK directive — keeps the image free of curl etc.
|
|
|
|
USER node
|
|
|
|
CMD ["node", "hono-server.mjs"]
|