Metic 3.0.0: unified TypeScript core + Bun server (#532)

.dockerignore

@@ -43,9 +43,12 @@ data/
 logs/
 *.log
 
-# Node modules (web builder stage installs fresh)
+# Node modules (builder stages install fresh)
 apps/web/node_modules/
 apps/web/dist/
+apps/bun-server/node_modules/
+apps/bun-server/dist/
+packages/core/node_modules/
 
 # Python cache
 __pycache__/

.github/dependabot.yml

@@ -3,51 +3,49 @@
 
 version: 2
 updates:
-  # Python — FastAPI server
-  - package-ecosystem: "pip"
-    directory: "/apps/server"
+  # npm — Web frontend (Bun uses package.json)
+  - package-ecosystem: "npm"
+    directory: "/apps/web"
     schedule:
       interval: "weekly"
       day: "monday"
-    open-pull-requests-limit: 5
+    open-pull-requests-limit: 10
     labels:
       - "dependencies"
-      - "python"
+      - "javascript"
     commit-message:
       prefix: "chore(deps)"
+    groups:
+      dev-dependencies:
+        dependency-type: "development"
+        update-types: ["minor", "patch"]
+      production-dependencies:
+        dependency-type: "production"
+        update-types: ["patch"]
 
-  # Python — MCP server
-  - package-ecosystem: "pip"
-    directory: "/apps/mcp-server"
+  # npm — Bun server host (@metic/server)
+  - package-ecosystem: "npm"
+    directory: "/apps/bun-server"
     schedule:
       interval: "weekly"
       day: "monday"
-    open-pull-requests-limit: 3
     labels:
       - "dependencies"
-      - "python"
+      - "javascript"
     commit-message:
       prefix: "chore(deps)"
 
-  # npm — Web frontend (Bun uses package.json)
+  # npm — shared @metic/core handler
   - package-ecosystem: "npm"
-    directory: "/apps/web"
+    directory: "/packages/core"
     schedule:
       interval: "weekly"
       day: "monday"
-    open-pull-requests-limit: 10
     labels:
       - "dependencies"
       - "javascript"
     commit-message:
       prefix: "chore(deps)"
-    groups:
-      dev-dependencies:
-        dependency-type: "development"
-        update-types: ["minor", "patch"]
-      production-dependencies:
-        dependency-type: "production"
-        update-types: ["patch"]
 
   # Docker — unified Dockerfile
   - package-ecosystem: "docker"

.github/workflows/build-publish.yml

@@ -129,8 +129,8 @@ jobs:
           # Check container is running
           docker ps | grep test-container
 
-          # Check health endpoint
-          docker exec test-container curl -f http://localhost:3550/health || exit 1
+          # Check health endpoint (distroless image has no curl; use the binary's own healthcheck)
+          docker exec test-container /app/metic healthcheck || exit 1
 
       - name: Cleanup
         if: always()

.github/workflows/tests.yml

@@ -14,14 +14,14 @@ on:
 
 jobs:
   # ============================================================================
-  # Relay Server Tests (Python/FastAPI)
+  # Core + Server Tests (TypeScript/Bun)
   # ============================================================================
+  # @metic/core is the shared request handler; apps/bun-server is the compiled
+  # single-binary host. Both run under Bun and share the frozen /api/* contract
+  # tests that are the cross-runtime parity oracle.
   server-tests:
-    name: Server Tests (Python)
+    name: Core + Server Tests (Bun)
     runs-on: ubuntu-latest
-    defaults:
-      run:
-        working-directory: apps/server
     permissions:
       contents: read
 
@@ -31,37 +31,52 @@ jobs:
         with:
           submodules: recursive
 
-      - name: Set up Python 3.13
-        uses: actions/setup-python@v6
+      - name: Setup Bun (attempt 1)
+        id: setup_bun_1
+        continue-on-error: true
+        uses: oven-sh/setup-bun@v2
         with:
-          python-version: "3.13"
-          cache: "pip"
-          cache-dependency-path: apps/server/requirements-test.txt
-
-      - name: Install dependencies
-        run: |
-          pip install --upgrade pip
-          pip install -r requirements-test.txt
+          # Pin Bun for CI reproducibility and transient download stability.
+          # Keep this in sync with docker/Dockerfile.unified bun base image.
+          bun-version: 1.3.14
 
-      - name: Run Python tests with coverage
-        env:
-          GEMINI_API_KEY: test_key_for_ci
-        run: |
-          pytest test_main.py test_logging.py test_taste_compass.py test_recommendations.py -v \
-            --cov=main --cov=logging_config --cov=config \
-            --cov=prompt_builder --cov=api --cov=services \
-            --cov=utils --cov=models \
-            --cov-report=xml --cov-report=term-missing
+      - name: Setup Bun (attempt 2)
+        id: setup_bun_2
+        if: steps.setup_bun_1.outcome == 'failure'
+        continue-on-error: true
+        uses: oven-sh/setup-bun@v2
+        with:
+          bun-version: 1.3.14
 
-      - name: Upload coverage to Codecov
-        uses: codecov/codecov-action@v7
+      - name: Setup Bun (attempt 3)
+        if: steps.setup_bun_2.outcome == 'failure'
+        uses: oven-sh/setup-bun@v2
         with:
-          files: ./apps/server/coverage.xml
-          flags: relay
-          name: server-coverage
+          bun-version: 1.3.14
+
+      - name: Install @metic/core dependencies
+        working-directory: packages/core
+        run: bun install --frozen-lockfile
+
+      - name: Typecheck @metic/core
+        working-directory: packages/core
+        run: bunx tsc --noEmit
+
+      - name: Run @metic/core contract + unit tests
+        working-directory: packages/core
+        run: bunx vitest run
+
+      - name: Install apps/bun-server dependencies
+        working-directory: apps/bun-server
+        run: bun install --frozen-lockfile
 
-      - name: Check coverage threshold
-        run: coverage report --fail-under=68
+      - name: Typecheck apps/bun-server
+        working-directory: apps/bun-server
+        run: bunx tsc --noEmit
+
+      - name: Run apps/bun-server tests
+        working-directory: apps/bun-server
+        run: bun test
 
   # ============================================================================
   # Web Frontend Tests (TypeScript/React)
@@ -212,6 +227,20 @@ jobs:
           cache-from: type=gha
           cache-to: type=gha,mode=max
 
+      - name: Enforce image size gate
+        run: |
+          # The 3.0.0 distroless single-binary image is a single Bun process
+          # (no Python/nginx/mosquitto/s6). Guard against accidental bloat.
+          # Threshold is the uncompressed size reported by `docker images`.
+          MAX_MB=260
+          SIZE_BYTES=$(docker image inspect meticai:test --format '{{.Size}}')
+          SIZE_MB=$(( SIZE_BYTES / 1024 / 1024 ))
+          echo "Unified image size: ${SIZE_MB} MB (limit ${MAX_MB} MB)"
+          if [ "${SIZE_MB}" -gt "${MAX_MB}" ]; then
+            echo "::error::Image size ${SIZE_MB} MB exceeds the ${MAX_MB} MB gate"
+            exit 1
+          fi
+
       - name: Test container starts
         run: |
           docker run -d --name test-container \
@@ -226,8 +255,9 @@ jobs:
           # Check container is running
           docker ps | grep test-container
 
-          # Check health endpoint
-          docker exec test-container curl -f http://localhost:3550/health || exit 1
+          # Check health endpoint. The distroless image has no shell/curl, so
+          # probe via the binary's own healthcheck subcommand.
+          docker exec test-container /app/metic healthcheck || exit 1
 
       - name: Setup Bun (attempt 1)
         id: setup_bun_1
@@ -295,22 +325,6 @@ jobs:
         with:
           submodules: recursive
 
-      - name: Set up Python 3.13
-        uses: actions/setup-python@v6
-        with:
-          python-version: "3.13"
-
-      - name: Install Python linting tools
-        run: pip install ruff black
-
-      - name: Run ruff on relay
-        run: ruff check apps/server/
-        continue-on-error: true
-
-      - name: Check Python formatting
-        run: black --check apps/server/
-        continue-on-error: true
-
       - name: Setup Bun (attempt 1)
         id: setup_bun_1
         continue-on-error: true

.gitignore

@@ -1,5 +1,9 @@
 # .gitignore
 
+# Node
+node_modules/
+packages/*/dist/
+
 # Secrets
 .env
 tasks.md
@@ -39,6 +43,8 @@ htmlcov/
 data/
 !data/PourOverBase.json
 !data/recipes/
+!packages/core/src/data/
+!packages/core/src/data/**
 
 # Update tracking
 .versions.json
@@ -84,3 +90,9 @@ testflight.md
 
 # Brainstorming visual companion
 .superpowers/
+
+# TypeScript incremental build info
+*.tsbuildinfo
+
+# Bun compile temp artifacts
+*.bun-build

HOME_ASSISTANT.md

@@ -1,5 +1,11 @@
 # 🏠 Home Assistant Integration
 
+> **⚠️ Removed in 3.0.0.** The MQTT bridge (Mosquitto broker + meticulous-addon)
+> was removed when the Python backend was replaced by the unified Bun server.
+> Home Assistant auto-discovery is no longer available. Live telemetry and
+> machine control remain fully functional inside Metic via the built-in
+> `/api/ws/live` WebSocket. This document is retained for users still on 2.x.
+
 Connect Metic to Home Assistant to get real-time espresso machine telemetry, create automations, and control your Meticulous from HA dashboards.
 
 ## How It Works