2 Commits

Author	SHA1	Message	Date
Alejandro Gutiérrez	f4bcad91b0	refactor(deploy): trim docker images via pnpm deploy --legacy ... Use pnpm deploy to flatten each package's runtime subset into /deploy, then copy ONLY that into the runtime stage. Catalog + workspace:* specifiers previously forced full-workspace resolution into every image's node_modules — unnecessary for either runtime. Results (arm64, same smoke tests pass): - broker: 3.26GB → 341MB (-90%, drops all devDeps incl. drizzle-kit) - migrate: 3.27GB → 653MB (-80%, keeps drizzle-kit which IS runtime) Broker /health confirms GIT_SHA build-arg still propagates (gitSha: "30bc24f" in smoke test). Migrate still reads drizzle.config.ts and attempts the connection correctly. --legacy flag needed because pnpm 10 defaults to inject-workspace- packages mode which the monorepo doesn't opt into; legacy is safe here. --ignore-scripts on deploy skips the root postinstall (sherif lint:ws) which has nothing to do with runtime. Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>	2026-04-05 15:37:21 +01:00
Alejandro Gutiérrez	c6674e971a	chore(deploy): production Dockerfiles for broker + web + env template ... - apps/broker/Dockerfile: oven/bun 1.2-slim runtime, multi-stage, pnpm deps, non-root bun user, GIT_SHA build-arg, /health-based HEALTHCHECK, port 7900 - apps/web/Dockerfile: Next.js 15 standalone, multi-stage, non-root nextjs user, NEXT_PUBLIC_* baked as build args, port 3000 - .env.production.template: DATABASE_URL, BetterAuth, OAuth, broker caps; no secrets - Build context: repo root (pnpm workspace needs root pnpm-lock.yaml + pnpm-workspace.yaml); build with -f apps/{broker,web}/Dockerfile . Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>	2026-04-04 22:22:05 +01:00