d5fbaa3034
CI / changes (push) Successful in 1s
CI / unit (push) Successful in 9s
CI / integration (push) Successful in 15s
CI / ui (push) Successful in 1m2s
CI / conformance (push) Successful in 9s
CI / gate (push) Successful in 0s
CI / deploy (push) Successful in 1m42s
The finished-game export (GCG + a new PNG of the final position) is one signed, short-lived relative URL (game.export_url; HMAC-SHA256, 10-min TTL, BACKEND_EXPORT_SIGN_KEY) resolved against the client's own origin and delivered by the best affordance each platform has (five on-device review rounds): - TG Android/desktop: native showPopup chooser -> native downloadFile dialog (bridge-only chain, activation-safe). - TG iOS: app-modal chooser -> OS share sheet with the fetched file (a popup callback cannot supply the activation the sheet needs). - VK iOS: VKWebAppDownloadFile for both formats. - VK Android: the PNG opens in VK's native image viewer, the GCG copies to the clipboard (the VK Android downloader hangs on any download, Content-Length/Range notwithstanding). - VK desktop iframe / desktop browsers: plain anchor downloads. - Mobile browsers: the OS share sheet (fetch-then-share). - Legacy TG (< Bot API 8.0): app modal + GCG clipboard, no image option. The PNG is rasterized on demand by the new internal `renderer` sidecar (node:22-slim + skia-canvas + baked Liberation/Noto Color Emoji fonts) executing the SAME ui/src/lib/gameimage.ts the ui project unit-tests; the backend rebuilds the render payload from the journal + engine.AlphabetTable, and the device date locale, IANA time zone and localized non-play labels ride the signed URL. Nothing is stored — the artifact re-derives from the immutable journal on each GET. The gateway forwards /dl/* (caddy @gateway matcher extended) behind the per-IP public rate limiter and serves bytes via http.ServeContent. Deploy: renderer service in compose + prod overlay + rolling order + prod push list; TEST_/PROD_EXPORT_SIGN_KEY secrets; the sidecar smoke runs in the ui CI job. Docs: ARCHITECTURE, FUNCTIONAL(+_ru), UI_DESIGN, TESTING, deploy/README, renderer/README.
30 lines
1.2 KiB
Docker
30 lines
1.2 KiB
Docker
# renderer — the finished-game image-render sidecar: Node + skia-canvas running the SAME
|
|
# ui/src/lib/gameimage.ts the web client unit-tests, bundled at build time (renderer/README.md).
|
|
# Debian slim, not the repo's usual alpine/distroless: skia-canvas ships prebuilt glibc
|
|
# binaries and resolves fonts through fontconfig, and the runtime fonts are baked into the
|
|
# image — Liberation Sans (the UI font stack's Linux face) + Noto Color Emoji (the 🏆).
|
|
FROM node:22-slim AS build
|
|
WORKDIR /src/renderer
|
|
RUN corepack enable && corepack prepare pnpm@11.0.9 --activate
|
|
COPY renderer/package.json renderer/pnpm-lock.yaml renderer/pnpm-workspace.yaml ./
|
|
RUN pnpm install --frozen-lockfile
|
|
COPY renderer/build.mjs ./
|
|
COPY renderer/src ./src
|
|
COPY ui/src/lib /src/ui/src/lib
|
|
RUN pnpm run bundle
|
|
|
|
FROM node:22-slim
|
|
RUN apt-get update \
|
|
&& apt-get install -y --no-install-recommends fonts-liberation fonts-noto-color-emoji \
|
|
&& rm -rf /var/lib/apt/lists/*
|
|
ENV NODE_ENV=production
|
|
ARG VERSION=dev
|
|
ENV APP_VERSION=${VERSION}
|
|
WORKDIR /app
|
|
COPY --from=build /src/renderer/node_modules ./node_modules
|
|
COPY --from=build /src/renderer/dist ./dist
|
|
COPY renderer/src/server.mjs renderer/src/render.mjs ./src/
|
|
USER node
|
|
EXPOSE 8090
|
|
CMD ["node", "src/server.mjs"]
|