fix(docker): bundle LLMLingua optional dependencies

[Zartharas]

Summary

• explicitly install optional dependencies in the Docker builder
• reuse the existing LLMLingua dependency-closure copier for Next.js standalone bundles
• preserve packages already traced into the standalone output instead of overwriting pinned versions
• include the @huggingface/transformers dependency closure so ONNX runtime packages survive final-image assembly
• fail the Docker build when required LLMLingua packages do not resolve and load from the final standalone tree
• add focused regression coverage for complete closure copying, no-clobber behavior, and Docker packaging validation

Related Issues

• Fixes fix(docker): optional deps (@atjsh/llmlingua-2, @tensorflow/tfjs, js-tiktoken) absent from diegosouzapw/omniroute:latest image #9166

Root Cause

The LLMLingua packages were already present in optionalDependencies and package-lock.json.

The Docker builder installed them in the root node_modules, but the final image copied only .build/next/standalone. Because the LLMLingua engine uses dynamic imports, Next.js tracing did not reliably include the complete optional dependency closure in that standalone bundle.

The existing colocateLlmlinguaOptionals helper targeted dist/node_modules for npm package installations and was not applied to the Docker standalone output.

Validation

Choose the change type and focused loop from the
Contribution Golden Path.

• Change type: Docker / build packaging

• Focused tests:

  node --import tsx/esm --test tests/unit/colocate-optionals.test.ts tests/unit/docker-llmlingua-optionals-9166.test.ts

  • 9 passed
  • 0 failed

• node --check scripts/build/colocateOptionals.mjs

• node --check scripts/build/assembleStandalone.mjs

• git diff --check

• Reconciled with release/v3.8.50 at fc35dc248f46354e80fdcdaa551e6598abcf5124

• Production-code changes include automated regression tests

• Full Docker image build — delegated to PR CI because of its substantial local build cost

• Full lint, unit suite, coverage, production build, and SonarQube analysis — pending PR CI

Tests Added Or Updated

• existing tests/unit/colocate-optionals.test.ts

  • all six existing compatibility tests continue to pass

• new tests/unit/docker-llmlingua-optionals-9166.test.ts

  • verifies the complete LLMLingua runtime closure is copied into standalone output
  • verifies an already pinned standalone @huggingface/transformers instance is not overwritten
  • verifies missing dependencies from its closure, including onnxruntime-node, are still copied
  • verifies Docker explicitly installs optional dependencies
  • verifies Docker rejects package resolution outside the final standalone tree
  • verifies required packages and the native ONNX runtime are loaded during image assembly

Reviewer Notes

The generalized colocation helper retains its existing default destination of dist/node_modules, so the npm postinstall behavior remains compatible.

Standalone assembly supplies its own destination and adds @huggingface/transformers as a closure seed. Copying remains no-clobber: packages already present in the standalone bundle keep their traced and pinned versions, while missing transitive dependencies are filled from the builder’s installed dependency tree.

The Docker validation uses a createRequire rooted at the standalone package and verifies every resolved path is under the standalone node_modules. This prevents a false-positive result caused by falling back to the builder’s root /app/node_modules.