mirror of
https://gitee.com/mateos/mateclaw.git
synced 2026-09-14 03:33:43 +08:00
5f77434953
OAuth token save now promotes the first available chat model when no usable default exists. Default-model resolution and provider availability checks require Provider.enabled=true alongside credentials, so disabled Providers no longer return stale defaults. /models/enabled drops the single-Provider hard-code so OpenAI OAuth and other enabled chat models surface in selectors. Docker exposes the 1455 PKCE callback via MATECLAW_OAUTH_OPENAI_CALLBACK_BIND_HOST (default 127.0.0.1) and a port mapping; deployment mode stays Host-driven.
105 lines
4.5 KiB
Docker
105 lines
4.5 KiB
Docker
# Multi-stage build
|
|
#
|
|
# Stage 1 — Frontend (Node / pnpm)
|
|
# Builds the Vue 3 admin SPA and emits static files to /static inside the
|
|
# build container. These files are later copied into the JAR's classpath so
|
|
# Spring Boot serves the SPA at the root URL.
|
|
FROM node:22-alpine AS frontend-builder
|
|
# Pin pnpm to a major version so the Docker build doesn't break when the npm
|
|
# `latest` tag jumps majors. pnpm v10+ blocks dependency lifecycle scripts by
|
|
# default; the allowed packages live under `pnpm.onlyBuiltDependencies` in
|
|
# mateclaw-ui/package.json.
|
|
RUN npm install -g pnpm@10 --silent
|
|
WORKDIR /frontend
|
|
# Install dependencies first (layer cache)
|
|
COPY mateclaw-ui/package.json mateclaw-ui/pnpm-lock.yaml ./
|
|
RUN pnpm install --frozen-lockfile
|
|
# Copy source and build
|
|
COPY mateclaw-ui/ ./
|
|
# Override outDir: vite.config.ts writes to ../mateclaw-server/…/static which
|
|
# is outside this container; call vite directly to control --outDir.
|
|
# Skipping vue-tsc here is intentional — type errors are caught in CI, not in
|
|
# the production Docker image build.
|
|
RUN pnpm exec vite build --outDir /static --emptyOutDir
|
|
|
|
# Stage 2 — Backend (Maven)
|
|
FROM maven:3.9-eclipse-temurin-21 AS builder
|
|
|
|
# Optional Maven extra flags passed at build time.
|
|
# Set MAVEN_FLAGS=-Paliyun-first in .env (or via --build-arg) to put Aliyun
|
|
# repos first — speeds up builds dramatically inside mainland China.
|
|
ARG MAVEN_FLAGS=""
|
|
|
|
# Inject mirror settings to avoid Maven Central timeouts in restricted networks
|
|
COPY mateclaw-server/settings.xml /root/.m2/settings.xml
|
|
|
|
# Build and install plugin-api into the local Maven cache first
|
|
WORKDIR /plugin-api
|
|
COPY mateclaw-plugin-api/pom.xml ./pom.xml
|
|
COPY mateclaw-plugin-api/src ./src
|
|
RUN mvn install -Dmaven.test.skip=true -q ${MAVEN_FLAGS}
|
|
|
|
# Pre-fetch mateclaw-server dependencies (uses mirror, so this won't hang)
|
|
WORKDIR /build
|
|
COPY mateclaw-server/pom.xml .
|
|
RUN mvn dependency:go-offline -q ${MAVEN_FLAGS}
|
|
|
|
# Copy backend source and inject pre-built frontend into the right classpath location
|
|
COPY mateclaw-server/src ./src
|
|
COPY --from=frontend-builder /static ./src/main/resources/static
|
|
|
|
RUN mvn package -Dmaven.test.skip=true -q ${MAVEN_FLAGS}
|
|
|
|
# Stage 3 — Runtime
|
|
#
|
|
# Uses Microsoft's official Playwright image (Ubuntu Noble, glibc) with all three
|
|
# browsers (Chromium / Firefox / WebKit) and every system library Chromium needs
|
|
# pre-installed. This avoids the `playwright install` step and the Alpine/musl
|
|
# incompatibility that blocks browser_use on minimal images.
|
|
#
|
|
# We pin to the exact Playwright version declared in pom.xml (1.52.0). If you
|
|
# bump the Java dependency, bump this tag in lockstep — Microsoft rebuilds each
|
|
# tag with the matching driver, so mismatched versions cause the java driver to
|
|
# re-download browsers at runtime (defeating the whole point of this image).
|
|
FROM mcr.microsoft.com/playwright:v1.52.0-noble
|
|
WORKDIR /app
|
|
|
|
# JDK 21 is NOT part of the base image (it ships Node for the JS driver).
|
|
# Install openjdk-21 explicitly and add CJK fonts so Chinese pages render
|
|
# correctly in screenshots and snapshots.
|
|
#
|
|
# PDF extraction toolchain — DocumentExtractTool tries pdftotext first, then
|
|
# Python pdfplumber/pypdf, then falls through to a naive Java parser that
|
|
# reads bytes as ISO_8859_1 (mojibake for CJK). Without poppler-utils the
|
|
# Docker image always hits the naive path and feeds garbled text to the
|
|
# Wiki pipeline.
|
|
#
|
|
# We install poppler-utils (backend 1) and tesseract (backend 4), which
|
|
# together cover the vast majority of PDFs including scanned docs. The
|
|
# Python backend is intentionally skipped — pip install against aliyun
|
|
# mirrors in CN networks hits transient hash-mismatch failures on cffi /
|
|
# cryptography transitive deps, and RFC-051 PR-1c will replace the Python
|
|
# hop with JVM-native Tika extraction anyway. Leaving it out keeps the
|
|
# image ~200 MB smaller and the build reproducible.
|
|
RUN apt-get update \
|
|
&& apt-get install -y --no-install-recommends \
|
|
openjdk-21-jre-headless \
|
|
fonts-noto-cjk \
|
|
fonts-noto-color-emoji \
|
|
poppler-utils \
|
|
tesseract-ocr \
|
|
tesseract-ocr-chi-sim \
|
|
tzdata \
|
|
&& rm -rf /var/lib/apt/lists/*
|
|
|
|
# Tell Playwright Java where Microsoft's image stored the browsers.
|
|
# BrowserLauncher's BUNDLED strategy will then succeed without extra config.
|
|
ENV PLAYWRIGHT_BROWSERS_PATH=/ms-playwright \
|
|
TZ=Asia/Shanghai \
|
|
JAVA_TOOL_OPTIONS="-Duser.timezone=Asia/Shanghai"
|
|
|
|
COPY --from=builder /build/target/*.jar app.jar
|
|
EXPOSE 18088
|
|
EXPOSE 1455
|
|
ENTRYPOINT ["java", "-jar", "-Dspring.profiles.active=mysql", "app.jar"]
|