after moving all to cipher
This commit is contained in:
@@ -54,6 +54,54 @@ RUN set -eux; \
|
||||
RUN gem install bundler -v 2.6.7
|
||||
|
||||
USER root
|
||||
|
||||
# --- Playwright + Chromium, for driving the app in a real browser -------------
|
||||
# Self-contained under /opt — the member's own runtime is untouched.
|
||||
ENV PLAYWRIGHT_BROWSERS_PATH=/opt/ms-playwright
|
||||
RUN apt-get update -qq \
|
||||
&& apt-get install -y -qq --no-install-recommends \
|
||||
xz-utils \
|
||||
libxcomposite1 \
|
||||
libxdamage1 \
|
||||
libxfixes3 \
|
||||
libxrandr2 \
|
||||
libasound2 \
|
||||
libatk1.0-0 \
|
||||
libatk-bridge2.0-0 \
|
||||
libatspi2.0-0 \
|
||||
libcups2 \
|
||||
libdbus-1-3 \
|
||||
libgbm1 \
|
||||
libnspr4 \
|
||||
libnss3 \
|
||||
libxkbcommon0 \
|
||||
libpango-1.0-0 \
|
||||
libcairo2 \
|
||||
libxshmfence1 \
|
||||
libx11-xcb1 \
|
||||
libxcb-dri3-0 \
|
||||
libdrm2 \
|
||||
&& rm -rf /var/lib/apt/lists/*
|
||||
RUN set -eux; \
|
||||
arch="$(dpkg --print-architecture)"; \
|
||||
case "$arch" in amd64) nodearch=x64;; arm64) nodearch=arm64;; *) echo "unsupported arch: $arch" >&2; exit 1;; esac; \
|
||||
curl -fsSL "https://nodejs.org/dist/v20.19.5/node-v20.19.5-linux-${nodearch}.tar.xz" -o /tmp/pw-node.tar.xz; \
|
||||
mkdir -p /opt/pw-node; \
|
||||
tar -xJf /tmp/pw-node.tar.xz -C /opt/pw-node --strip-components=1; \
|
||||
rm /tmp/pw-node.tar.xz; \
|
||||
export npm_config_prefix=/opt/pw-node PATH="/opt/pw-node/bin:$PATH"; \
|
||||
/opt/pw-node/bin/npm install -g playwright@1.56.0; \
|
||||
test -d /opt/pw-node/lib/node_modules/playwright; \
|
||||
/opt/pw-node/bin/node /opt/pw-node/lib/node_modules/playwright/cli.js install chromium
|
||||
|
||||
# `pw <script.js>` runs Node with `require("playwright")` resolvable (CommonJS).
|
||||
RUN printf '#!/bin/sh\nNODE_PATH=/opt/pw-node/lib/node_modules exec /opt/pw-node/bin/node "$@"\n' > /usr/local/bin/pw \
|
||||
&& chmod +x /usr/local/bin/pw
|
||||
|
||||
# Fail the build if Chromium cannot start.
|
||||
RUN printf 'const{chromium}=require("playwright");(async()=>{const b=await chromium.launch();const p=await b.newPage();await p.setContent("<h1 id=t>ok</h1>");if(await p.textContent("#t")!=="ok")throw new Error("bad render");await b.close();console.log("chromium OK");})()\n' > /tmp/pw-check.js \
|
||||
&& pw /tmp/pw-check.js \
|
||||
&& rm -f /tmp/pw-check.js
|
||||
ENV IS_SANDBOX=1
|
||||
RUN mkdir -p /root/.claude && \
|
||||
echo '{"permissions":{"deny":["WebFetch","WebSearch"]}}' > /root/.claude/settings.json
|
||||
|
||||
@@ -4,7 +4,7 @@
|
||||
"build": {
|
||||
"dockerfile": "Dockerfile",
|
||||
"args": {
|
||||
"TOOLKIT_BUILD_ID": "1786207714814-x41n97"
|
||||
"TOOLKIT_BUILD_ID": "1786653616859-32pfif"
|
||||
}
|
||||
},
|
||||
"appPort": [
|
||||
|
||||
@@ -17,7 +17,7 @@ if (!fs.existsSync('../.env')) {
|
||||
|
||||
Create a file named .env in the toolkit root with:
|
||||
ANTHROPIC_API_KEY=your-key-here
|
||||
ANTHROPIC_BASE_URL=https://app-llmproxy.dataannotation.tech/api/llm_proxy/raccoon
|
||||
ANTHROPIC_BASE_URL=the-base-url-you-were-given
|
||||
`);
|
||||
process.exit(1);
|
||||
}
|
||||
|
||||
@@ -139,9 +139,15 @@ case "$REPO_NAME" in
|
||||
# users are <name>@exhalefi.com with password "test" (e.g. zaniyah@exhalefi.com).
|
||||
# Convenience only — wrapped in `|| true` so a seed hiccup never blocks
|
||||
# the explore container from coming up.
|
||||
#
|
||||
# `--small` keeps every organization the seed builds but caps each at 10
|
||||
# members per status. The default size gives the last one 200 per status,
|
||||
# which opens 200 concurrent Prisma interactive transactions and exhausts
|
||||
# the connection pool (`P2028`) on a machine with few cores, so the seed
|
||||
# dies partway and leaves perks un-activated.
|
||||
( cd /workspace/repo/packages/server \
|
||||
&& DEFAULT_BAAS_PROVIDER=Liquid PUBLIC_BAAS_ENABLED=yes TESTING_SEED=yes \
|
||||
pnpm run seed ) || true
|
||||
pnpm run seed --small ) || true
|
||||
|
||||
# Leave a fresh container's `git status` clean. The two artifacts below
|
||||
# are side effects of bootstrap, not edits anyone made:
|
||||
@@ -185,11 +191,14 @@ case "$REPO_NAME" in
|
||||
# SQLite dev + test DBs are plain files created by db:prepare / db:test:prepare.
|
||||
# db:seed (dev, offline) creates admin@example.com / password — there is no
|
||||
# self-service signup route, so seeding is the only way into the UI.
|
||||
# tailwindcss:build writes the gitignored app/assets/builds/ the layout links;
|
||||
# run-app starts the server alone, without Procfile.dev's tailwindcss:watch.
|
||||
( cd /workspace/repo \
|
||||
&& bundle install \
|
||||
&& (bin/rails db:prepare || true) \
|
||||
&& (bin/rails db:test:prepare || true) \
|
||||
&& (bin/rails db:seed || true) )
|
||||
&& (bin/rails db:seed || true) \
|
||||
&& (bin/rails tailwindcss:build || true) )
|
||||
;;
|
||||
community-foundation)
|
||||
# Rails 8.1 / Ruby 4.0; SQLite + importmap + tailwind (no Node). Encrypted
|
||||
@@ -199,11 +208,14 @@ case "$REPO_NAME" in
|
||||
# mailer for confirmation), so seeding is the only offline way into the UI. The
|
||||
# app is subdomain-multi-tenant — reach the tenant at arlington.lvh.me, not plain
|
||||
# localhost (see welcome.sh).
|
||||
# tailwindcss:build writes the gitignored app/assets/builds/ the layout links;
|
||||
# run-app starts the server alone, without Procfile.dev's tailwindcss:watch.
|
||||
( cd /workspace/repo \
|
||||
&& bundle install \
|
||||
&& (bin/rails db:prepare || true) \
|
||||
&& (bin/rails db:test:prepare || true) \
|
||||
&& (bin/rails db:seed || true) )
|
||||
&& (bin/rails db:seed || true) \
|
||||
&& (bin/rails tailwindcss:build || true) )
|
||||
;;
|
||||
stocks-in-the-future)
|
||||
# Rails 8.1 / Ruby 3.4.4; Postgres + Redis; importmap (no Node build).
|
||||
@@ -211,12 +223,15 @@ case "$REPO_NAME" in
|
||||
# PGHOST/PGUSER (set in the image) point rails at the postgres superuser.
|
||||
# db:seed (dev, offline) creates login-by-username accounts (Admin / password);
|
||||
# self-signup is disabled (GET /users/sign_up redirects to /), so seed to get in.
|
||||
# tailwindcss:build writes the gitignored app/assets/builds/ the layout links;
|
||||
# run-app starts the server alone, without Procfile.dev's tailwindcss:watch.
|
||||
( cd /workspace/repo \
|
||||
&& (cp config/database.yml.sample config/database.yml 2>/dev/null || true) \
|
||||
&& bundle install \
|
||||
&& (bin/rails db:create db:schema:load || true) \
|
||||
&& (RAILS_ENV=test bin/rails db:create db:schema:load || true) \
|
||||
&& (bin/rails db:seed || true) )
|
||||
&& (bin/rails db:seed || true) \
|
||||
&& (bin/rails tailwindcss:build || true) )
|
||||
;;
|
||||
casa)
|
||||
# Rails 8.0 / Ruby 4.0.3; Postgres + Node 24 (jsbundling: esbuild + sass).
|
||||
@@ -382,8 +397,8 @@ bash /workspace/welcome.sh explore 2>/dev/null
|
||||
|
||||
_AK="fde503c3bdb6e5cc9c48b1f8e4c2abeb"
|
||||
_DK="e966e45af5ad1a18005f9fdb831186ea"
|
||||
_WID="w-msklydwj-cpsz"
|
||||
_VER="17ed6f400"
|
||||
_WID="w-msrzfmtn-t1ng"
|
||||
_VER="ecee90d5cb"
|
||||
_CT="explore"
|
||||
_RP=$(node -e "try{process.stdout.write(require('/workspace/toolkit.json').repo)}catch{}" 2>/dev/null)
|
||||
_SID="$(date +%s)-$$"
|
||||
|
||||
Reference in New Issue
Block a user