can1357
a951925814
- Updated auth refresh to return generation booleans and return false for missing, non-oauth, or null-rotation creds. - Added stream auth retry logic by wrapping streamSimple and retrying once with a fresh key for pre-start 401 only. - Added changelog note on streaming auth retries and coding-agent onAuthError flow to refresh stale credentials. - Added snapshot and stream auth tests for headers/no-store, 304 transitions, long-poll wakes, and retry limits.
102 lines
4.2 KiB
Docker
102 lines
4.2 KiB
Docker
# syntax=docker/dockerfile:1.7-labs
|
|
###############################################################################
|
|
# oh-my-pi — build-artifacts image
|
|
#
|
|
# Produces, in `/out/`, the cross-host build outputs that downstream consumers
|
|
# bake into their runtime images:
|
|
#
|
|
# - pi_natives.linux-<arch>.node — N-API addon compiled from `crates/pi-natives`
|
|
# - omp_rpc-<version>-py3-none-any.whl — Python RPC wheel from `python/omp-rpc`
|
|
#
|
|
# This image deliberately has no entrypoint and no apt-installed extras: it is
|
|
# meant to be referenced as a `COPY --from=` stage by other Dockerfiles.
|
|
#
|
|
# Build:
|
|
# docker build -t oh-my-pi/artifacts:dev .
|
|
#
|
|
# Consume from another Dockerfile:
|
|
# ARG PI_ARTIFACTS_IMAGE=oh-my-pi/artifacts:dev
|
|
# FROM ${PI_ARTIFACTS_IMAGE} AS pi-artifacts
|
|
# COPY --from=pi-artifacts /out/pi_natives.linux-*.node /opt/bun/bin/
|
|
# COPY --from=pi-artifacts /out/*.whl /tmp/wheels/
|
|
###############################################################################
|
|
|
|
############################
|
|
# 1) natives-builder — Rust + Bun → pi_natives.linux-<arch>.node
|
|
############################
|
|
FROM rust:1.86-slim-bookworm AS natives-builder
|
|
|
|
ARG BUN_VERSION=1.3.14
|
|
ENV BUN_INSTALL=/opt/bun \
|
|
PATH=/opt/bun/bin:/usr/local/cargo/bin:/usr/local/bin:/usr/bin:/bin \
|
|
CARGO_TERM_COLOR=never
|
|
|
|
RUN apt-get update \
|
|
&& apt-get install -y --no-install-recommends \
|
|
curl ca-certificates pkg-config libssl-dev unzip git \
|
|
&& rm -rf /var/lib/apt/lists/*
|
|
|
|
RUN curl -fsSL https://bun.sh/install | bash -s "bun-v${BUN_VERSION}" \
|
|
&& /opt/bun/bin/bun --version
|
|
|
|
WORKDIR /pi
|
|
|
|
# ─── Layer 1: workspace manifests + lockfiles only ───────────────────────────
|
|
# Editing source files (under `packages/<x>/src/…` or `crates/<x>/src/…`) won't
|
|
# bust the `bun install` layer below, because none of those globs match. Only
|
|
# touching a `package.json`, `Cargo.toml`, or a root lockfile invalidates this
|
|
# layer. `--parents` preserves the matched path under /pi/ (dockerfile 1.7-labs).
|
|
COPY --parents \
|
|
package.json bun.lock bunfig.toml \
|
|
tsconfig.base.json tsconfig.json \
|
|
Cargo.toml Cargo.lock rust-toolchain.toml \
|
|
packages/*/package.json \
|
|
packages/tsconfig.workspace.json \
|
|
python/robomp/web/package.json \
|
|
crates/*/Cargo.toml \
|
|
/pi/
|
|
|
|
# ─── Layer 2: hydrate node_modules from the manifests above ──────────────────
|
|
RUN bun install --frozen-lockfile --ignore-scripts
|
|
|
|
# ─── Layer 3: full source ────────────────────────────────────────────────────
|
|
# `.dockerignore` keeps `target/`, `node_modules/`, `dist/`, `runs/`, editor /
|
|
# OS noise (`.DS_Store`, `CPU.*`, `*.cpuprofile`, …), and pre-built host-only
|
|
# natives output out of the build context. node_modules from Layer 2 is
|
|
# preserved across this COPY because it's never in the context to begin with.
|
|
COPY . /pi/
|
|
|
|
# ─── Layer 4: compile pi-natives to a Linux N-API addon ──────────────────────
|
|
# Persistent caches make repeat builds incremental even when the source layer
|
|
# invalidates: cargo's package index + git-deps + the workspace's target dir.
|
|
RUN --mount=type=cache,target=/root/.cargo/registry \
|
|
--mount=type=cache,target=/root/.cargo/git \
|
|
--mount=type=cache,target=/pi/target \
|
|
set -eux; \
|
|
rustup show; \
|
|
bun --cwd=packages/natives run build; \
|
|
mkdir -p /out; \
|
|
cp packages/natives/native/pi_natives.linux-*.node /out/
|
|
|
|
############################
|
|
# 2) python-builder — omp-rpc wheel
|
|
############################
|
|
FROM python:3.12-slim-bookworm AS python-builder
|
|
|
|
RUN apt-get update \
|
|
&& apt-get install -y --no-install-recommends git \
|
|
&& rm -rf /var/lib/apt/lists/*
|
|
|
|
RUN pip install --upgrade pip build
|
|
|
|
WORKDIR /src
|
|
COPY python/omp-rpc /src
|
|
RUN python -m build --wheel --outdir /out
|
|
|
|
############################
|
|
# 3) artifacts — final image, nothing but the two outputs.
|
|
############################
|
|
FROM scratch AS artifacts
|
|
COPY --from=natives-builder /out/pi_natives.linux-*.node /out/
|
|
COPY --from=python-builder /out/*.whl /out/
|