Kwaku Danso
3f8bc58ca9
Phase 1 — Core API (Go): - Events, guests, tokens, RSVPs CRUD on PostgreSQL via pgx/v5 - HMAC-signed per-guest tokens with format validation - Health endpoint with DB ping, slog JSON logging, graceful shutdown Phase 2 — NATS + Fraud Engine: - NATS JetStream pub/sub with explicit-ack consumers - Python/FastAPI fraud engine with heuristic risk scoring (fingerprint mismatch, IP change, missing signals, repeated access) - gRPC sync scoring with 250ms fail-open timeout - Per-guest baseline tracking; risk bands low/medium/high/block Phase 3 — Notifications + Frontend: - Notification worker scaffolding (Twilio/SES stubs, retry/backoff) - Nuxt 3 frontend with Tailwind dark theme + brand green - Live monitor via WebSocket with auto-reconnect - Activity history endpoint backfills monitor with RSVPs + scored access checks (including blocked attempts) UX polish: - Marketing-friendly landing page (hero mockup, how-it-works, features, use cases, testimonials, FAQ, final CTA) - Animated layered card mockups on landing + new-event page - Plus-ones stepper, RSVP status badges, filter buttons - Friendly access-check labels (Verified/Review/Suspicious/Blocked) - Dashboard hydration fix via ClientOnly wrapper Infrastructure: - docker-compose for full local dev (postgres, nats, api, fraud-engine, notifier, frontend) - Multi-stage Dockerfiles, non-root UID 1000 - Integration tests with testcontainers-go Co-Authored-By: Claude Opus 4.7 <noreply@anthropic.com>
33 lines
972 B
Docker
33 lines
972 B
Docker
FROM node:20-alpine AS deps
|
|
WORKDIR /app
|
|
RUN apk add --no-cache libc6-compat
|
|
COPY package.json package-lock.json* ./
|
|
RUN npm install --no-audit --no-fund
|
|
|
|
FROM node:20-alpine AS build
|
|
WORKDIR /app
|
|
COPY --from=deps /app/node_modules ./node_modules
|
|
COPY . .
|
|
RUN npm run build
|
|
|
|
FROM node:20-alpine AS runtime
|
|
ENV NODE_ENV=production \
|
|
NITRO_HOST=0.0.0.0 \
|
|
NITRO_PORT=3000
|
|
WORKDIR /app
|
|
|
|
# node:20-alpine ships a `node` user at uid/gid 1000 already.
|
|
COPY --from=build --chown=node:node /app/.output ./.output
|
|
|
|
# Workaround for Nitro 2.12.4: the public-asset manifest declares paths
|
|
# relative to .output/server/, but the runtime resolves them relative to
|
|
# .output/server/chunks/nitro/, so it looks under chunks/public/. Symlink
|
|
# that location to the real public dir so `node .output/server/index.mjs`
|
|
# can actually find _nuxt/*.css and *.js.
|
|
RUN ln -sfn ../../public /app/.output/server/chunks/public
|
|
|
|
USER node
|
|
EXPOSE 3000
|
|
|
|
CMD ["node", ".output/server/index.mjs"]
|