fix: close workspace ownership and API escapes

This commit is contained in:
2026-08-11 15:39:27 +02:00
parent 1b24337a98
commit ca37156a56
12 changed files with 202 additions and 77 deletions
+5 -2
View File
@@ -21,17 +21,20 @@ WORKDIR /src/backend
COPY backend/package*.json ./
COPY backend/scripts ./scripts
COPY backend/native ./native
COPY backend/src ./src
COPY backend/test ./test
RUN npm ci
RUN npm run build:native
RUN npm run test:native
# ---- Stage 2: backend TypeScript -> dist ----
FROM node:22-bookworm@sha256:7725a5c2c83eed1d36258c66efae14b1ceccd021db9ed1d9559d3335ed3d68ed AS backend-build
WORKDIR /src/backend
COPY backend/package*.json ./
RUN npm ci --ignore-scripts
COPY --from=backend-native-build /src/backend/node_modules ./node_modules
COPY backend/src ./src
COPY backend/scripts ./scripts
COPY backend/tsconfig*.json ./
RUN npm run build
RUN npm run build:ts
RUN npm prune --omit=dev
COPY --from=backend-native-build /src/backend/native/workspace-fs-at/build/Release/workspace_fs_at.node ./native/workspace-fs-at/build/Release/workspace_fs_at.node
# fs-ext is the pinned runtime flock binding; carry its Node-22 build from the compiler stage.