Docker

Dockerfile

@@ -3,28 +3,31 @@
 # ============================================
 # Stage 1: Dependencies
 # ============================================
-FROM --platform=$BUILDPLATFORM node:26-alpine3.24 AS deps
+FROM --platform=$BUILDPLATFORM node:22-alpine3.22 AS deps
 
 WORKDIR /app
 
 ENV NEXT_TELEMETRY_DISABLED=1
+ENV COREPACK_DEFAULT_TO_LATEST=0
 
 COPY package.json pnpm-lock.yaml pnpm-workspace.yaml ./
 
-# Node 25+ images ship without corepack; keep pnpm in sync with "packageManager"
+RUN corepack enable \
-RUN npm install -g [email protected] \
+ && corepack prepare [email protected] --activate \
  && pnpm install --frozen-lockfile
 
 # ============================================
 # Stage 2: Builder
 # ============================================
-FROM --platform=$BUILDPLATFORM node:26-alpine3.24 AS builder
+FROM --platform=$BUILDPLATFORM node:22-alpine3.22 AS builder
 
 WORKDIR /app
 
 ENV NEXT_TELEMETRY_DISABLED=1
+ENV COREPACK_DEFAULT_TO_LATEST=0
 
-RUN npm install -g [email protected]
+RUN corepack enable \
+ && corepack prepare [email protected] --activate
 
 COPY --from=deps /app/node_modules ./node_modules
 
@@ -35,7 +38,7 @@ RUN pnpm build
 # ============================================
 # Stage 3: Runner
 # ============================================
-FROM node:26-alpine3.24 AS runner
+FROM node:22-alpine3.22 AS runner
 
 WORKDIR /app
 

package.json

@@ -2,7 +2,7 @@
   "name": "nini-artgallery",
   "version": "0.1.0",
   "private": true,
-  "packageManager": "pnpm@12.5.1",
+  "packageManager": "pnpm@11.1.2",
   "scripts": {
     "dev": "next dev --turbopack",
     "build": "next build",
@@ -11,35 +11,42 @@
     "lint:fix": "eslint --fix ."
   },
   "dependencies": {
-    "@ai-sdk/react": "^4.0.112",
+    "@ai-sdk/react": "^3.0.186",
     "@heroicons/react": "^2.2.0",
-    "@openrouter/ai-sdk-provider": "^3.1.0",
+    "@openrouter/ai-sdk-provider": "^2.9.0",
     "@types/jsonwebtoken": "^9.0.10",
-    "ai": "^7.0.109",
+    "@types/nodemailer": "^8.0.0",
+    "ai": "^6.0.184",
     "jsonwebtoken": "^9.0.3",
-    "next": "16.3.6",
+    "next": "16.2.6",
-    "next-intl": "^4.14.6",
+    "next-intl": "^4.12.0",
-    "nodemailer": "^10.0.10",
+    "nodemailer": "^8.0.7",
-    "react": "19.3.0",
+    "react": "19.2.6",
-    "react-dom": "19.3.0",
+    "react-dom": "19.2.6",
     "server-only": "^0.0.1",
-    "zod": "^4.6.5"
+    "zod": "^4.4.3"
   },
   "devDependencies": {
-    "@eslint/eslintrc": "^3.3.7",
+    "@eslint/eslintrc": "^3.3.5",
-    "@eslint/js": "^10.0.1",
+    "@eslint/js": "^9.39.4",
-    "@tailwindcss/postcss": "^4.3.3",
+    "@tailwindcss/postcss": "^4.3.0",
-    "@types/node": "^26.6.2",
+    "@types/node": "^25.8.0",
-    "@types/react": "19.3.0",
+    "@types/react": "19.2.14",
-    "@types/react-dom": "19.3.0",
+    "@types/react-dom": "19.2.3",
-    "@typescript-eslint/eslint-plugin": "^8.70.1",
+    "@typescript-eslint/eslint-plugin": "^8.59.3",
-    "@typescript-eslint/parser": "^8.70.1",
+    "@typescript-eslint/parser": "^8.59.3",
-    "eslint": "^10.11.0",
+    "eslint": "^9.39.4",
-    "eslint-config-next": "16.3.5",
+    "eslint-config-next": "16.2.6",
-    "globals": "^17.12.0",
+    "globals": "^17.6.0",
-    "postcss": "^8.5.28",
+    "postcss": "^8.5.14",
     "postcss-load-config": "^6.0.1",
-    "tailwindcss": "^4.3.3",
+    "tailwindcss": "^4.3.0",
     "typescript": "^6.0.3"
+  },
+  "pnpm": {
+    "overrides": {
+      "@types/react": "19.2.14",
+      "@types/react-dom": "19.2.3"
+    }
   }
 }

pnpm-workspace.yaml

@@ -3,19 +3,9 @@ allowBuilds:
   '@swc/core': true
   sharp: true
   unrs-resolver: true
-# [email protected] fixes GHSA-vcvr-r3jv-pc5j (critical RCE in next/og); these exact-version
+onlyBuiltDependencies:
-# exclusions only bypass the 24h release-age gate and can be removed after 2026-09-24.
+  - "@parcel/watcher"
-minimumReleaseAgeExclude:
+  - "@swc/core"
-  - '@next/[email protected]'
+  - sharp
-  - '@next/[email protected]'
+  - unrs-resolver
-  - '@next/[email protected]'
+  - "@tailwindcss/oxide"
-  - '@next/[email protected]'
-  - '@next/[email protected]'
-  - '@next/[email protected]'
-  - '@next/[email protected]'
-  - '@next/[email protected]'
-  - '@next/[email protected]'
-  - [email protected]
-overrides:
-  '@types/react': 19.3.0
-  '@types/react-dom': 19.3.0

src/app/api/chat/route.ts

@@ -81,7 +81,7 @@ export async function POST(req: Request) {
 
     const result = streamText({
       model: openrouter("openai/gpt-4o-mini"),
-      instructions:
+      system:
         `You ARE ${artist.name}, the artist whose gallery the visitor is browsing. ` +
         `Always speak in first person. When greeting a visitor or starting a conversation, ` +
         `introduce yourself by name (${artist.name}) so they know who they're talking to.\n\n` +

src/app/api/transcribe/route.ts

@@ -64,13 +64,15 @@ export async function POST(req: Request) {
     // ── Transcribe via OpenRouter audio model ─────────────────────
     const result = await generateText({
       model: openrouter(TRANSCRIPTION_MODEL),
-      // AI SDK v7 rejects system messages inside `messages`; use `instructions`.
+      messages: [
-      instructions:
+        {
+          role: "system",
+          content:
             `Transcribe the following audio exactly in ${languageName}. ` +
             "Return ONLY the transcription text — no preamble, no explanation, no formatting. " +
             "If the audio contains only silence, background noise, or no discernible speech, " +
             "return exactly the string [SILENCE] and nothing else.",
-      messages: [
+        },
         {
           role: "user",
           content: [