Synapse/Dockerfile at main · PIXARTSeu/Synapse · GitHub

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
# ─────────────────────────────────────────────
# SkillBrain MCP Server — monorepo build
# Build context: repo root
# ─────────────────────────────────────────────

ARG CODEGRAPH_AUTH_TOKEN
ARG ANTHROPIC_API_KEY
ARG DASHBOARD_PASSWORD
ARG ENCRYPTION_KEY
ARG LEGACY_TOKEN_USER_EMAIL

# Stage 1: Build
FROM node:22-alpine AS builder
WORKDIR /app

# Build tools for native deps (better-sqlite3, sharp)
RUN apk add --no-cache python3 make g++

# Install workspace deps — copy manifests first for layer caching
COPY package.json pnpm-lock.yaml pnpm-workspace.yaml ./
COPY packages/codegraph/package.json ./packages/codegraph/
COPY packages/storage/package.json ./packages/storage/

RUN corepack enable && pnpm install --frozen-lockfile

# Copy sources
COPY packages/storage/src/ ./packages/storage/src/
COPY packages/storage/tsconfig.json ./packages/storage/

COPY packages/codegraph/src/ ./packages/codegraph/src/
COPY packages/codegraph/tsconfig.json ./packages/codegraph/

# Build storage first (codegraph depends on it)
RUN pnpm --filter @skillbrain/storage build

# Build codegraph (package name is "codegraph", not scoped)
RUN pnpm --filter codegraph build

# Deploy: resolve workspace deps into a self-contained folder
RUN pnpm --filter codegraph deploy --prod /deploy

# Stage 2: Production
FROM node:22-alpine AS runner
WORKDIR /app

RUN apk add --no-cache sqlite libstdc++ curl

RUN addgroup --system --gid 1001 codegraph && \
    adduser --system --uid 1001 codegraph

# Deployed app: dist/ + node_modules/ with @skillbrain/storage resolved
COPY --from=builder /deploy ./

# Bundled skills data (258 skills, agents, commands)
COPY packages/codegraph/data/ ./data/

# Dashboard frontend
COPY packages/codegraph/public/ ./public/

# Entrypoint
COPY packages/codegraph/entrypoint.sh ./entrypoint.sh
RUN chmod +x ./entrypoint.sh

# Persistent data volume
RUN mkdir -p /data/.codegraph /data/.hf-cache && chown -R codegraph:codegraph /data

ARG CODEGRAPH_AUTH_TOKEN
ARG ANTHROPIC_API_KEY
ARG DASHBOARD_PASSWORD
ARG ENCRYPTION_KEY
ARG LEGACY_TOKEN_USER_EMAIL

ENV NODE_ENV=production
ENV PORT=3737
ENV SKILLBRAIN_ROOT=/data
ENV TRANSFORMERS_CACHE=/data/.hf-cache
ENV CODEGRAPH_AUTH_TOKEN=${CODEGRAPH_AUTH_TOKEN}
ENV ANTHROPIC_API_KEY=${ANTHROPIC_API_KEY}
ENV DASHBOARD_PASSWORD=${DASHBOARD_PASSWORD}
ENV ENCRYPTION_KEY=${ENCRYPTION_KEY}
ENV LEGACY_TOKEN_USER_EMAIL=${LEGACY_TOKEN_USER_EMAIL}

HEALTHCHECK --interval=30s --timeout=3s --start-period=15s --retries=3 \
  CMD curl -f http://localhost:3737/api/health || exit 1

USER codegraph

EXPOSE 3737

CMD ["./entrypoint.sh"]