fix: stabilize PR CI (node-gyp from lockfile, pipe hang, flaky tests)

apps/dokploy/__test__/auth/better-auth-schema-compat.test.ts

@@ -46,5 +46,7 @@ describe("Better Auth schema compatibility", () => {
 				Promise.resolve(context.checkSchema?.()),
 			).resolves.toBeUndefined();
 		},
+		// The first case imports lib/auth and its whole module graph from scratch.
+		60_000,
 	);
 });

apps/dokploy/__test__/backup/backup-failure-output.test.ts

@@ -133,12 +133,20 @@ fi
 	};
 };
 
+const expectBackupCalls = (calls: string[], after: string[] = []) => {
+	expect(calls).toHaveLength(3 + after.length);
+	expect(calls[0]).toBe("docker ps");
+	// Both sides of the dump | upload pipeline start concurrently, so their order varies.
+	expect(calls.slice(1, 3).sort()).toEqual(["docker exec", "rclone rcat"]);
+	expect(calls.slice(3)).toEqual(after);
+};
+
 describe("backup script", () => {
 	it("dumps the database and uploads it once", () => {
 		const { calls, log, result } = runBackupScript(0);
 
 		expect(result.status).toBe(0);
-		expect(calls).toEqual(["docker ps", "docker exec", "rclone rcat"]);
+		expectBackupCalls(calls);
 		expect(log).toContain("✅ Backup uploaded to S3 successfully");
 		expect(log).toContain("Backup done ✅");
 	});
@@ -147,12 +155,7 @@ describe("backup script", () => {
 		const { calls, log, result } = runBackupScript(1);
 
 		expect(result.status).toBe(1);
-		expect(calls).toEqual([
-			"docker ps",
-			"docker exec",
-			"rclone rcat",
-			"rclone deletefile",
-		]);
+		expectBackupCalls(calls, ["rclone deletefile"]);
 		expect(log).toContain("❌ Error: Backup failed");
 		expect(log).not.toContain("SignatureDoesNotMatch");
 		expect(log).not.toContain("leaked-secret");

apps/dokploy/__test__/deployment/cloud-queue-availability.test.ts

@@ -53,6 +53,8 @@ type QueueApp = {
 let missingConfigApp: QueueApp;
 let configuredApp: QueueApp;
 
+// Each import below loads the whole API module graph from a fresh registry,
+// which alone can take several seconds on a busy runner.
 beforeAll(async () => {
 	vi.resetModules();
 	vi.stubEnv("INNGEST_BASE_URL", "https://inngest.example");
@@ -64,7 +66,7 @@ beforeAll(async () => {
 	vi.resetModules();
 	vi.stubEnv("INNGEST_SIGNING_KEY", "signing-key");
 	configuredApp = (await import("../../../api/src/index")).app;
-});
+}, 60_000);
 
 afterAll(() => {
 	vi.unstubAllEnvs();

apps/dokploy/__test__/utils/remote-stream.test.ts

@@ -49,6 +49,18 @@ describe("pipeBetweenServers", () => {
 		).rejects.toThrow("target exited with code 3: boom");
 	});
 
+	it("drains the source when the target exits before reading it", async () => {
+		const size = 1024 * 1024;
+		const bytes = await pipeBetweenServers({
+			source: {
+				serverId: null,
+				command: `sleep 0.1; head -c ${size} /dev/zero`,
+			},
+			target: { serverId: null, command: "exit 0" },
+		});
+		expect(bytes).toBe(size);
+	});
+
 	it("reports a source failure", async () => {
 		await expect(
 			pipeBetweenServers({

package.json

@@ -30,6 +30,7 @@
 		"dotenv": "16.6.1",
 		"esbuild": "0.28.2",
 		"lint-staged": "^15.5.2",
+		"node-gyp": "13.1.0",
 		"tsx": "4.23.15"
 	},
 	"packageManager": "bun@1.4.2",

packages/server/src/utils/process/remoteStream.ts

@@ -107,8 +107,16 @@ export const pipeBetweenServers = async ({
 		onProgress?.(bytes);
 	});
 	from.stdout.pipe(to.stdin);
+	// pipe() pauses the source when the target's stdin closes early; a paused
+	// stdout never reaches EOF, so the source would never report its exit.
+	const drainSource = () => {
+		from.stdout.unpipe(to.stdin);
+		from.stdout.resume();
+	};
+	to.stdin.once("close", drainSource);
 
 	const targetExit = to.exit.then((code) => {
+		drainSource();
 		if (code !== 0) from.close();
 		return code;
 	});