pediatric-ai-scribe-v3/.npmrc
Daniel 48e85c807e fix(infra): Dockerfile compiles TS, SPA fallback works on Express 4
Rebuilding the pediatric-ai-scribe container surfaced three long-
standing bugs that pre-date today's work but only showed up when
the image was actually rebuilt for the first time since April.
Fixing them in one commit so the live app reflects the React
changes shipped earlier today.

Dockerfile (compiles TypeScript now):
  • COPY package.json → COPY package.json package-lock.json .npmrc
    so npm ci can do a deterministic install.
  • Drop --omit=dev from the install step (tsc is a devDep and we
    need it to compile); prune devDeps AFTER the build runs.
  • RUN npm run build — compiles server.ts + src/ to dist/.
    server.ts was renamed from server.js in commit d60a29f but no
    one updated the Dockerfile; CMD has been "node server.js"
    against a file that didn't exist. The running e2e container
    survived because it was built before the rename.
  • cp package.json dist/package.json — server.ts does
    require('./package.json') which resolves relative to the
    compiled file; keeping a copy next to it is simpler than
    making the source path-aware.
  • ln -s /app/public /app/dist/public — express.static /
    sendFile calls use path.join(__dirname, 'public', …) and
    __dirname at runtime is /app/dist.
  • CMD ["node", "dist/server.js"] (was "server.js").

.npmrc:
  • legacy-peer-deps=true. npm 10+ hard-rejects the transitive
    peerOptional mismatch between openai@4.x (peerOptional zod@^3)
    and our direct dep zod@^4.3.6. Host, CI, and Docker now all
    share one resolution policy so the lock file stays reproducible.

server.ts:
  • `app.get('/app/*splat', …)` → `app.get('/app/*', …)`
  • `app.get('*splat', …)` → `app.get('*', …)`
    Express 5 named-splat syntax doesn't match anything on Express
    4.21 (which we ship). Hard refresh on /wellvisit, /encounter,
    /cms etc. was falling through to the static 404 instead of
    serving the React index. Verified: all 7 clinical routes now
    return HTTP 200 from the SPA fallback.

Smoke-tested against 127.0.0.1:3552 after rebuild:
  /                              HTTP 200
  /wellvisit  /encounter  /cms   HTTP 200
  /auth  /api/health              HTTP 200
  /app/assets/index-C9wKWOAN.js  HTTP 200
  /does-not-exist.jpg            HTTP 404  (static 404 preserved)
2026-04-24 06:03:02 +02:00

8 lines
490 B
Text

# npm 10+ rejects transitive peerOptional mismatches by default. The
# repo has one: openai@4.x declares peerOptional zod@^3.x, but zod@4.x
# is a direct dependency here (used by the request-schema layer in
# shared/clinical/). Earlier npm versions ignored peerOptional clashes
# automatically; since npm 10 we have to opt-in to that behaviour.
# Pinning it here so host installs, CI, and Docker all share one
# resolution policy and the lock file stays reproducible.
legacy-peer-deps=true