Hanzo Dev
b81e6561fb
Re-implement the IAM-only rip on the re-rooted @hanzochat main (the old
auth/iam-only branch shares no history and is unmergeable). @hanzo/iam owns
every credential step via redirect-PKCE to hanzo.id; /auth/callback completes
the token exchange.
Client
- iam.ts: one always-configured IAM SDK singleton (env + prod defaults
hanzo.id / hanzo-chat), redirect_uri ${origin}/auth/callback
- Login.tsx: single "Log in with Hanzo" -> signinRedirect(); auto-redirect
on mount unless ?redirect=false
- drop LoginForm, Registration, ResetPassword, RequestPasswordReset,
SocialButton, SocialLoginRender (+ specs); drop the register / forgot /
reset routes
- GuestLimitDialog / LandingPage / login.ts: login = IAM signinRedirect
Server
- delete local + third-party passport strategies (local, apple, discord,
facebook, github, google, ldap, saml) and their specs
- keep jwt / openid / openidJwt strategies for IAM JWT validation
- socialLogins: Hanzo IAM (OpenID Connect) only
- auth routes: drop /login, /register, /requestPasswordReset, /resetPassword
- remove dead requireLocalAuth / requireLdapAuth middleware + LoginController
Build
- give the @hanzochat/api rollup enough heap (cross-env
NODE_OPTIONS=--max-old-space-size=8192) to fix the OOM exit 134
- raise the Dockerfile heap default to 8192 to match
88 lines
2.8 KiB
Docker
88 lines
2.8 KiB
Docker
# Dockerfile.multi
|
|
# v0.8.3-rc1
|
|
|
|
# Set configurable max-old-space-size with default
|
|
ARG NODE_MAX_OLD_SPACE_SIZE=8192
|
|
|
|
# Base for all builds
|
|
FROM ghcr.io/hanzoai/nodejs:v24.18.0 AS base-min
|
|
# Install jemalloc
|
|
RUN apk add --no-cache jemalloc
|
|
# Set environment variable to use jemalloc
|
|
ENV LD_PRELOAD=/usr/lib/libjemalloc.so.2
|
|
|
|
# Enable pnpm via corepack
|
|
RUN corepack enable && corepack prepare pnpm@latest --activate
|
|
|
|
WORKDIR /app
|
|
RUN apk --no-cache add curl
|
|
COPY package.json pnpm-lock.yaml pnpm-workspace.yaml .npmrc ./
|
|
COPY packages/data-provider/package.json ./packages/data-provider/
|
|
COPY packages/api/package.json ./packages/api/
|
|
COPY packages/data-schemas/package.json ./packages/data-schemas/
|
|
COPY packages/client/package.json ./packages/client/
|
|
COPY client/package.json ./client/
|
|
COPY api/package.json ./api/
|
|
|
|
# Install all dependencies for every build
|
|
FROM base-min AS base
|
|
WORKDIR /app
|
|
RUN pnpm install --frozen-lockfile
|
|
|
|
# Build `data-provider` package
|
|
FROM base AS data-provider-build
|
|
WORKDIR /app/packages/data-provider
|
|
COPY packages/data-provider ./
|
|
RUN pnpm run build
|
|
|
|
# Build `data-schemas` package
|
|
FROM base AS data-schemas-build
|
|
WORKDIR /app/packages/data-schemas
|
|
COPY packages/data-schemas ./
|
|
COPY --from=data-provider-build /app/packages/data-provider/dist /app/packages/data-provider/dist
|
|
RUN pnpm run build
|
|
|
|
# Build `api` package
|
|
FROM base AS api-package-build
|
|
WORKDIR /app/packages/api
|
|
COPY packages/api ./
|
|
COPY --from=data-provider-build /app/packages/data-provider/dist /app/packages/data-provider/dist
|
|
COPY --from=data-schemas-build /app/packages/data-schemas/dist /app/packages/data-schemas/dist
|
|
RUN pnpm run build
|
|
|
|
# Build `client` package
|
|
FROM base AS client-package-build
|
|
WORKDIR /app/packages/client
|
|
COPY packages/client ./
|
|
RUN pnpm run build
|
|
|
|
# Client build
|
|
FROM base AS client-build
|
|
WORKDIR /app/client
|
|
COPY client ./
|
|
COPY --from=data-provider-build /app/packages/data-provider/dist /app/packages/data-provider/dist
|
|
COPY --from=client-package-build /app/packages/client/dist /app/packages/client/dist
|
|
COPY --from=client-package-build /app/packages/client/src /app/packages/client/src
|
|
ARG NODE_MAX_OLD_SPACE_SIZE
|
|
ENV NODE_OPTIONS="--max-old-space-size=${NODE_MAX_OLD_SPACE_SIZE}"
|
|
RUN pnpm run build
|
|
|
|
# API setup (including client dist)
|
|
FROM base-min AS api-build
|
|
# Add `uv` for extended MCP support
|
|
COPY --from=ghcr.io/astral-sh/uv:0.6.13 /uv /uvx /bin/
|
|
RUN uv --version
|
|
WORKDIR /app
|
|
# Install only production deps
|
|
RUN pnpm install --frozen-lockfile --prod
|
|
COPY api ./api
|
|
COPY config ./config
|
|
COPY --from=data-provider-build /app/packages/data-provider/dist ./packages/data-provider/dist
|
|
COPY --from=data-schemas-build /app/packages/data-schemas/dist ./packages/data-schemas/dist
|
|
COPY --from=api-package-build /app/packages/api/dist ./packages/api/dist
|
|
COPY --from=client-build /app/client/dist ./client/dist
|
|
WORKDIR /app/api
|
|
EXPOSE 3080
|
|
ENV HOST=0.0.0.0
|
|
CMD ["node", "server/index.js"]
|