From b6b66b8e7d752a2493d737b60a7ca0a605174226 Mon Sep 17 00:00:00 2001
From: Nat Welch <nat@natwelch.com>
Date: Mon, 12 Oct 2026 23:17:46 +0000
Subject: [PATCH] fix: restore docker build policy and mcp validation

---
 .dockerignore          | 1 +
 Dockerfile             | 2 +-
 tests/routing.test.mjs | 2 +-
 3 files changed, 3 insertions(+), 2 deletions(-)

diff --git a/.dockerignore b/.dockerignore
index ec77c70..0d10235 100644
--- a/.dockerignore
+++ b/.dockerignore
@@ -8,5 +8,6 @@
 !orchestra.jsonc
 !package.json
 !pnpm-lock.yaml
+!pnpm-workspace.yaml
 !scripts/
 !scripts/build-config.mjs
diff --git a/Dockerfile b/Dockerfile
index 22f6fcc..bc4848d 100644
--- a/Dockerfile
+++ b/Dockerfile
@@ -43,7 +43,7 @@ RUN case "$TARGETARCH" in amd64) arch=x64 ;; arm64) arch=arm64 ;; *) exit 1 ;; e
 
 FROM tools AS config
 WORKDIR /build
-COPY package.json pnpm-lock.yaml opencode.jsonc ./
+COPY package.json pnpm-lock.yaml pnpm-workspace.yaml opencode.jsonc ./
 COPY scripts/build-config.mjs ./scripts/build-config.mjs
 RUN pnpm install --frozen-lockfile --ignore-scripts --no-optional \
     && node scripts/build-config.mjs /build/runtime.json
diff --git a/tests/routing.test.mjs b/tests/routing.test.mjs
index 3d3441d..ab85e61 100644
--- a/tests/routing.test.mjs
+++ b/tests/routing.test.mjs
@@ -39,7 +39,7 @@ test("image-owned skills are discoverable", async () => {
 });
 
 test("existing providers, MCP integrations and quota are preserved", () => {
-  assert.deepEqual(Object.keys(config.mcp.servers).sort(), ["context7", "grafana", "karakeep", "lunchmoney", "notion"]);
+  assert.deepEqual(Object.keys(config.mcp.servers).sort(), ["context7", "grafana", "karakeep", "lunchmoney", "notion", "robinhood"]);
   assert.ok(config.plugins.includes("@slkiser/opencode-quota@5.0.2"));
   assert.ok(!config.permissions?.some(rule => rule.action === "*" && rule.effect === "allow"));
   assert.deepEqual(config.agents.build.permissions, [{ action: "*", resource: "*", effect: "allow" }]);