3471d40576
CI / changes (pull_request) Successful in 3s
CI / unit (pull_request) Successful in 9s
CI / integration (pull_request) Successful in 16s
CI / ui (pull_request) Successful in 1m4s
CI / conformance (pull_request) Successful in 9s
CI / gate (pull_request) Successful in 0s
CI / deploy (pull_request) Successful in 1m27s
The finished-game export now works identically on every platform: the client mints a signed relative URL (game.export_url) carrying its date locale, IANA time zone and localized non-play labels, resolves it against its own origin and hands it to the platform's native download — Telegram downloadFile, VKWebAppDownloadFile, or a plain browser anchor (also the desktop VK iframe). Both artifacts ride the route: the .gcg text (no more clipboard mode, except the legacy pre-8.0 Telegram fallback) and the PNG of the final position. The PNG is rasterized by a new internal 'renderer' sidecar (node:22-slim + skia-canvas + baked Liberation/Noto Color Emoji fonts) executing the SAME ui/src/lib/gameimage.ts the web project unit-tests, bundled at image build time — one renderer, no drift; the browser no longer draws or delivers bytes itself. The backend rebuilds the render payload from the journal + engine.AlphabetTable, verifies the HMAC (10-minute TTL, BACKEND_EXPORT_SIGN_KEY, constant-time, uniform 404s) on its public group, and streams the artifact as a named attachment; the gateway forwards /dl/* behind the per-IP public rate limiter (caddy @gateway matcher extended — the landing catch-all trap). Deploy: renderer service (compose + prod overlay + roll before backend + prod push list), EXPORT_SIGN_KEY env (TEST_/PROD_ secrets), CI runs the sidecar smoke in the ui job. Docs: ARCHITECTURE export-delivery section, FUNCTIONAL(+_ru), UI_DESIGN, TESTING, deploy/README.
30 lines
1.2 KiB
Docker
30 lines
1.2 KiB
Docker
# renderer — the finished-game image-render sidecar: Node + skia-canvas running the SAME
|
|
# ui/src/lib/gameimage.ts the web client unit-tests, bundled at build time (renderer/README.md).
|
|
# Debian slim, not the repo's usual alpine/distroless: skia-canvas ships prebuilt glibc
|
|
# binaries and resolves fonts through fontconfig, and the runtime fonts are baked into the
|
|
# image — Liberation Sans (the UI font stack's Linux face) + Noto Color Emoji (the 🏆).
|
|
FROM node:22-slim AS build
|
|
WORKDIR /src/renderer
|
|
RUN corepack enable && corepack prepare pnpm@11.0.9 --activate
|
|
COPY renderer/package.json renderer/pnpm-lock.yaml renderer/pnpm-workspace.yaml ./
|
|
RUN pnpm install --frozen-lockfile
|
|
COPY renderer/build.mjs ./
|
|
COPY renderer/src ./src
|
|
COPY ui/src/lib /src/ui/src/lib
|
|
RUN pnpm run bundle
|
|
|
|
FROM node:22-slim
|
|
RUN apt-get update \
|
|
&& apt-get install -y --no-install-recommends fonts-liberation fonts-noto-color-emoji \
|
|
&& rm -rf /var/lib/apt/lists/*
|
|
ENV NODE_ENV=production
|
|
ARG VERSION=dev
|
|
ENV APP_VERSION=${VERSION}
|
|
WORKDIR /app
|
|
COPY --from=build /src/renderer/node_modules ./node_modules
|
|
COPY --from=build /src/renderer/dist ./dist
|
|
COPY renderer/src/server.mjs renderer/src/render.mjs ./src/
|
|
USER node
|
|
EXPOSE 8090
|
|
CMD ["node", "src/server.mjs"]
|