2026-02-09 20:17:45 +00:00
5 changed files with 67 additions and 38 deletions
--- a/.woodpecker.yml
+++ b/.woodpecker.yml
@@ -100,9 +100,10 @@ steps:
      - *use_deps
      - pnpm build
    depends_on:
-      - typecheck # Only block on critical checks
+      - lint
+      - typecheck
+      - test
      - security-audit
-      - prisma-generate

  # ======================
  # Docker Build & Push (main/develop only)
@@ -265,6 +266,36 @@ steps:
    depends_on:
      - build

+  # Build and push Coordinator image using Kaniko
+  docker-build-coordinator:
+    image: gcr.io/kaniko-project/executor:debug
+    environment:
+      GITEA_USER:
+        from_secret: gitea_username
+      GITEA_TOKEN:
+        from_secret: gitea_token
+      CI_COMMIT_BRANCH: ${CI_COMMIT_BRANCH}
+      CI_COMMIT_TAG: ${CI_COMMIT_TAG}
+      CI_COMMIT_SHA: ${CI_COMMIT_SHA}
+    commands:
+      - *kaniko_setup
+      - |
+        DESTINATIONS="--destination git.mosaicstack.dev/mosaic/stack-coordinator:${CI_COMMIT_SHA:0:8}"
+        if [ "$CI_COMMIT_BRANCH" = "main" ]; then
+          DESTINATIONS="$DESTINATIONS --destination git.mosaicstack.dev/mosaic/stack-coordinator:latest"
+        elif [ "$CI_COMMIT_BRANCH" = "develop" ]; then
+          DESTINATIONS="$DESTINATIONS --destination git.mosaicstack.dev/mosaic/stack-coordinator:dev"
+        fi
+        if [ -n "$CI_COMMIT_TAG" ]; then
+          DESTINATIONS="$DESTINATIONS --destination git.mosaicstack.dev/mosaic/stack-coordinator:$CI_COMMIT_TAG"
+        fi
+        /kaniko/executor --context apps/coordinator --dockerfile apps/coordinator/Dockerfile $DESTINATIONS
+    when:
+      - branch: [main, develop]
+        event: [push, manual, tag]
+    depends_on:
+      - build
+
  # ======================
  # Link Packages to Repository
  # ======================
@@ -313,6 +344,7 @@ steps:
        link_package "stack-postgres"
        link_package "stack-openbao"
        link_package "stack-orchestrator"
+        link_package "stack-coordinator"
    when:
      - branch: [main, develop]
        event: [push, manual, tag]
@@ -322,3 +354,4 @@ steps:
      - docker-build-postgres
      - docker-build-openbao
      - docker-build-orchestrator
+      - docker-build-coordinator
--- a/apps/api/package.json
+++ b/apps/api/package.json
@@ -50,7 +50,7 @@
    "@types/multer": "^2.0.0",
    "adm-zip": "^0.5.16",
    "archiver": "^7.0.1",
-    "axios": "^1.13.4",
+    "axios": "^1.13.5",
    "better-auth": "^1.4.17",
    "bullmq": "^5.67.2",
    "class-transformer": "^0.5.1",
--- a/docker-compose.prod.yml
+++ b/docker-compose.prod.yml
@@ -16,7 +16,7 @@ services:
  # PostgreSQL Database
  # ======================
  postgres:
-    image: git.mosaicstack.dev/mosaic/postgres:latest
+    image: git.mosaicstack.dev/mosaic/stack-postgres:${IMAGE_TAG:-latest}
    container_name: mosaic-postgres
    restart: unless-stopped
    environment:
@@ -70,7 +70,7 @@ services:
  # Mosaic API
  # ======================
  api:
-    image: git.mosaicstack.dev/mosaic/api:latest
+    image: git.mosaicstack.dev/mosaic/stack-api:${IMAGE_TAG:-latest}
    container_name: mosaic-api
    restart: unless-stopped
    environment:
@@ -121,7 +121,7 @@ services:
  # Mosaic Web
  # ======================
  web:
-    image: git.mosaicstack.dev/mosaic/web:latest
+    image: git.mosaicstack.dev/mosaic/stack-web:${IMAGE_TAG:-latest}
    container_name: mosaic-web
    restart: unless-stopped
    environment:
--- a/package.json
+++ b/package.json
@@ -56,7 +56,10 @@
  },
  "pnpm": {
    "overrides": {
-      "@isaacs/brace-expansion": ">=5.0.1"
+      "@isaacs/brace-expansion": ">=5.0.1",
+      "lodash": ">=4.17.23",
+      "lodash-es": ">=4.17.23",
+      "undici": ">=6.23.0"
    }
  }
 }
--- a/pnpm-lock.yaml
+++ b/pnpm-lock.yaml
@@ -6,6 +6,9 @@ settings:

 overrides:
  '@isaacs/brace-expansion': '>=5.0.1'
+  lodash: '>=4.17.23'
+  lodash-es: '>=4.17.23'
+  undici: '>=6.23.0'

 importers:

@@ -65,7 +68,7 @@ importers:
        version: link:../../packages/shared
      '@nestjs/axios':
        specifier: ^4.0.1
-        version: 4.0.1(@nestjs/common@11.1.12(class-transformer@0.5.1)(class-validator@0.14.3)(reflect-metadata@0.2.2)(rxjs@7.8.2))(axios@1.13.4)(rxjs@7.8.2)
+        version: 4.0.1(@nestjs/common@11.1.12(class-transformer@0.5.1)(class-validator@0.14.3)(reflect-metadata@0.2.2)(rxjs@7.8.2))(axios@1.13.5)(rxjs@7.8.2)
      '@nestjs/bullmq':
        specifier: ^11.0.4
        version: 11.0.4(@nestjs/common@11.1.12(class-transformer@0.5.1)(class-validator@0.14.3)(reflect-metadata@0.2.2)(rxjs@7.8.2))(@nestjs/core@11.1.12)(bullmq@5.67.2)
@@ -133,8 +136,8 @@ importers:
        specifier: ^7.0.1
        version: 7.0.1
      axios:
-        specifier: ^1.13.4
-        version: 1.13.4
+        specifier: ^1.13.5
+        version: 1.13.5
      better-auth:
        specifier: ^1.4.17
        version: 1.4.17(@prisma/client@6.19.2(prisma@6.19.2(magicast@0.3.5)(typescript@5.9.3))(typescript@5.9.3))(better-sqlite3@12.6.2)(drizzle-orm@0.41.0(@opentelemetry/api@1.9.0)(@prisma/client@5.22.0(prisma@6.19.2(magicast@0.3.5)(typescript@5.9.3)))(@types/pg@8.16.0)(better-sqlite3@12.6.2)(kysely@0.28.10)(pg@8.17.2)(prisma@6.19.2(magicast@0.3.5)(typescript@5.9.3)))(next@16.1.6(@babel/core@7.28.6)(@opentelemetry/api@1.9.0)(react-dom@19.2.4(react@19.2.4))(react@19.2.4))(pg@8.17.2)(prisma@6.19.2(magicast@0.3.5)(typescript@5.9.3))(react-dom@19.2.4(react@19.2.4))(react@19.2.4)(vitest@4.0.18(@opentelemetry/api@1.9.0)(@types/node@22.19.7)(jiti@2.6.1)(jsdom@26.1.0)(terser@5.46.0)(tsx@4.21.0)(yaml@2.8.2))
@@ -3340,8 +3343,8 @@ packages:
  asynckit@0.4.0:
    resolution: {integrity: sha512-Oei9OH4tRh0YqU3GxhX79dM/mwVgvbZJaSNaRk+bshkj0S5cfHcgYakreBjrHwatXKbz+IoIdYLxrKim2MjW0Q==}

-  axios@1.13.4:
-    resolution: {integrity: sha512-1wVkUaAO6WyaYtCkcYCOx12ZgpGf9Zif+qXa4n+oYzK558YryKqiL6UWwd5DqiH3VRW0GYhTZQ/vlgJrCoNQlg==}
+  axios@1.13.5:
+    resolution: {integrity: sha512-cz4ur7Vb0xS4/KUN0tPWe44eqxrIu31me+fbang3ijiNscE129POzipJJA6zniq2C/Z6sJCjMimjS8Lc/GAs8Q==}

  b4a@1.7.3:
    resolution: {integrity: sha512-5Q2mfq2WfGuFp3uS//0s6baOJLMoVduPYVeNmDYxu5OUA1/cBfvr2RIS7vi62LdNj/urk1hfmj867I3qt6uZ7Q==}
@@ -4978,9 +4981,6 @@ packages:
    resolution: {integrity: sha512-iPZK6eYjbxRu3uB4/WZ3EsEIMJFMqAoopl3R+zuq0UjcAm/MO6KCweDgPfP3elTztoKP3KtnVHxTn2NHBSDVUw==}
    engines: {node: '>=10'}

-  lodash-es@4.17.21:
-    resolution: {integrity: sha512-mKnC+QJ9pWVzv+C4/U3rRsHapFfHvQFoFB92e52xeyGMcX6/OlIl78je1u8vePzYZSkkogMPJ2yjxxsb89cxyw==}
-
  lodash-es@4.17.23:
    resolution: {integrity: sha512-kVI48u3PZr38HdYz98UmfPnXl2DXrpdctLrFLCd3kOx1xUkOmpFPx7gCWWM5MPkL/fD8zb+Ph0QzjGFs4+hHWg==}

@@ -4999,9 +4999,6 @@ packages:
  lodash.snakecase@4.1.1:
    resolution: {integrity: sha512-QZ1d4xoBHYUeuouhEq3lk3Uq7ldgyFXGBhg04+oRLnIz8o9T65Eh+8YdroUwn846zchkA9yDsDl5CVVaV2nqYw==}

-  lodash@4.17.21:
-    resolution: {integrity: sha512-v2kDEe57lecTulaDIuNTPy3Ry4gLGJ6Z1O3vE1krgXZNrsQ+LFTGHVxVjcXPs17LhbZVGedAJv8XZ1tvj5FvSg==}
-
  lodash@4.17.23:
    resolution: {integrity: sha512-LgVTMpQtIopCi79SJeDiP0TfWi5CNEc/L/aRdTh3yIvmZXTnheWpKjSZhnvMl8iXbC1tFg9gdHHDMLoV7CnG+w==}

@@ -6302,9 +6299,9 @@ packages:
  undici-types@6.21.0:
    resolution: {integrity: sha512-iwDZqg0QAGrg9Rav5H4n0M64c3mkR59cJ6wQp+7C4nI0gsmExaedaYLNO44eT4AtBBwjbTiGPMlt2Md0T9H9JQ==}

-  undici@6.21.3:
-    resolution: {integrity: sha512-gBLkYIlEnSp8pFbT64yFgGE6UIB9tAkhukC23PmMDCe5Nd+cRqKxSjw5y54MK2AZMgZfJWMaNE4nYUHgi1XEOw==}
-    engines: {node: '>=18.17'}
+  undici@7.21.0:
+    resolution: {integrity: sha512-Hn2tCQpoDt1wv23a68Ctc8Cr/BHpUSfaPYrkajTXOS9IKpxVRx/X5m1K2YkbK2ipgZgxXSgsUinl3x+2YdSSfg==}
+    engines: {node: '>=20.18.1'}

  universalify@2.0.1:
    resolution: {integrity: sha512-gptHNQghINnc/vTGIk0SOFGFNXw7JVrlRUtConJRlvaw6DuX0wO5Jeko9sWrMBhh+PsYAZ7oXAiOnf/UKogyiw==}
@@ -7127,23 +7124,23 @@ snapshots:
    dependencies:
      '@chevrotain/gast': 10.5.0
      '@chevrotain/types': 10.5.0
-      lodash: 4.17.21
+      lodash: 4.17.23

  '@chevrotain/cst-dts-gen@11.0.3':
    dependencies:
      '@chevrotain/gast': 11.0.3
      '@chevrotain/types': 11.0.3
-      lodash-es: 4.17.21
+      lodash-es: 4.17.23

  '@chevrotain/gast@10.5.0':
    dependencies:
      '@chevrotain/types': 10.5.0
-      lodash: 4.17.21
+      lodash: 4.17.23

  '@chevrotain/gast@11.0.3':
    dependencies:
      '@chevrotain/types': 11.0.3
-      lodash-es: 4.17.21
+      lodash-es: 4.17.23

  '@chevrotain/regexp-to-ast@11.0.3': {}

@@ -7221,7 +7218,7 @@ snapshots:
      discord-api-types: 0.38.38
      magic-bytes.js: 1.13.0
      tslib: 2.8.1
-      undici: 6.21.3
+      undici: 7.21.0

  '@discordjs/util@1.2.0':
    dependencies:
@@ -7758,10 +7755,10 @@ snapshots:
  '@msgpackr-extract/msgpackr-extract-win32-x64@3.0.3':
    optional: true

-  '@nestjs/axios@4.0.1(@nestjs/common@11.1.12(class-transformer@0.5.1)(class-validator@0.14.3)(reflect-metadata@0.2.2)(rxjs@7.8.2))(axios@1.13.4)(rxjs@7.8.2)':
+  '@nestjs/axios@4.0.1(@nestjs/common@11.1.12(class-transformer@0.5.1)(class-validator@0.14.3)(reflect-metadata@0.2.2)(rxjs@7.8.2))(axios@1.13.5)(rxjs@7.8.2)':
    dependencies:
      '@nestjs/common': 11.1.12(class-transformer@0.5.1)(class-validator@0.14.3)(reflect-metadata@0.2.2)(rxjs@7.8.2)
-      axios: 1.13.4
+      axios: 1.13.5
      rxjs: 7.8.2

  '@nestjs/bull-shared@11.0.4(@nestjs/common@11.1.12(class-transformer@0.5.1)(class-validator@0.14.3)(reflect-metadata@0.2.2)(rxjs@7.8.2))(@nestjs/core@11.1.12)':
@@ -7826,7 +7823,7 @@ snapshots:
      '@nestjs/common': 11.1.12(class-transformer@0.5.1)(class-validator@0.14.3)(reflect-metadata@0.2.2)(rxjs@7.8.2)
      dotenv: 16.4.7
      dotenv-expand: 12.0.1
-      lodash: 4.17.21
+      lodash: 4.17.23
      rxjs: 7.8.2

  '@nestjs/core@11.1.12(@nestjs/common@11.1.12(class-transformer@0.5.1)(class-validator@0.14.3)(reflect-metadata@0.2.2)(rxjs@7.8.2))(@nestjs/platform-express@11.1.12)(@nestjs/websockets@11.1.12)(reflect-metadata@0.2.2)(rxjs@7.8.2)':
@@ -9932,7 +9929,7 @@ snapshots:

  asynckit@0.4.0: {}

-  axios@1.13.4:
+  axios@1.13.5:
    dependencies:
      follow-redirects: 1.15.11
      form-data: 4.0.5
@@ -10213,7 +10210,7 @@ snapshots:
      '@chevrotain/gast': 10.5.0
      '@chevrotain/types': 10.5.0
      '@chevrotain/utils': 10.5.0
-      lodash: 4.17.21
+      lodash: 4.17.23
      regexp-to-ast: 0.5.0

  chevrotain@11.0.3:
@@ -10223,7 +10220,7 @@ snapshots:
      '@chevrotain/regexp-to-ast': 11.0.3
      '@chevrotain/types': 11.0.3
      '@chevrotain/utils': 11.0.3
-      lodash-es: 4.17.21
+      lodash-es: 4.17.23

  chokidar@4.0.3:
    dependencies:
@@ -10691,7 +10688,7 @@ snapshots:
      lodash.snakecase: 4.1.1
      magic-bytes.js: 1.13.0
      tslib: 2.8.1
-      undici: 6.21.3
+      undici: 7.21.0
    transitivePeerDependencies:
      - bufferutil
      - utf-8-validate
@@ -11614,8 +11611,6 @@ snapshots:
    dependencies:
      p-locate: 5.0.0

-  lodash-es@4.17.21: {}
-
  lodash-es@4.17.23: {}

  lodash.camelcase@4.3.0: {}
@@ -11628,8 +11623,6 @@ snapshots:

  lodash.snakecase@4.1.1: {}

-  lodash@4.17.21: {}
-
  lodash@4.17.23: {}

  log-symbols@4.1.0:
@@ -13036,7 +13029,7 @@ snapshots:

  undici-types@6.21.0: {}

-  undici@6.21.3: {}
+  undici@7.21.0: {}

  universalify@2.0.1: {}