fix dependabot vuln

.dockerignore

@@ -1,3 +1,3 @@
 Dockerfile
 node_modules
-./gui/admin/node_modules
+./gui/next/node_modules

.github/dependabot.yml

@@ -1,11 +1,30 @@
-# To get started with Dependabot version updates, you'll need to specify which
-# package ecosystems to update and where the package manifests are located.
-# Please see the documentation for all configuration options:
+# Dependabot configuration.
 # https://docs.github.com/code-security/dependabot/dependabot-version-updates/configuration-options-for-the-dependabot.yml-file
+#
+# Every npm project in this repo is listed explicitly: Dependabot only scans the
+# directories named here, so a manifest that is missing from this list gets no
+# version-update PRs (security alerts still fire for it).
 
 version: 2
 updates:
-  - package-ecosystem: "" # See documentation for possible values
-    directory: "/" # Location of package manifests
+  - package-ecosystem: "npm"
+    directories:
+      - "/"          # the published pos-cli package
+      - "/mcp-min"   # MCP server subpackage
+      - "/gui/next"  # admin GUI (SvelteKit) - build tooling only
+      - "/gui/graphql" # GraphiQL IDE - build tooling only
+    schedule:
+      interval: "weekly"
+    open-pull-requests-limit: 10
+    groups:
+      # One PR per project for routine patch/minor bumps; majors stay separate
+      # so they can be reviewed and rebuilt individually.
+      minor-and-patch:
+        update-types:
+          - "minor"
+          - "patch"
+
+  - package-ecosystem: "github-actions"
+    directory: "/"
     schedule:
       interval: "weekly"

AGENTS.md

@@ -9,7 +9,7 @@ pos-cli is a Node.js CLI tool (v22+) for deploying and managing platformOS appli
 ### Installation & Build
 ```bash
 npm ci                    # Install dependencies (clean install)
-npm run build             # Build GUI assets (admin, graphql, next, liquid)
+npm run build             # Build GUI assets (graphql, next, liquid)
 ```
 
 ### Testing
@@ -105,7 +105,7 @@ pos-cli/
 │   ├── ServerError.js
 │   ├── settings.js   # Environment config (.pos file)
 │   └── deploy/       # Deployment strategies
-├── gui/              # Pre-built web apps (admin, graphql, liquid, next)
+├── gui/              # Pre-built web apps (graphql, liquid, next)
 ├── mcp-min/          # MCP server implementation
 │   ├── tools.js      # Tool definitions
 │   ├── index.js      # Server entry point

CLAUDE.md

@@ -90,7 +90,6 @@ pos-cli/
 │   ├── tools.config.json        # Enable/disable tools, customize descriptions
 │   └── <tool-name>/             # One directory per tool group (deploy/, data/, etc.)
 ├── gui/              # Web UI applications
-│   ├── admin/                   # Admin panel (Svelte, pre-built)
 │   ├── graphql/                 # GraphiQL IDE (React, pre-built)
 │   ├── liquid/                  # Liquid evaluator (pre-built)
 │   └── next/                    # Main GUI (Next.js, pre-built)
@@ -428,7 +427,7 @@ Tests require environment variables (MPKIT_URL, MPKIT_EMAIL, MPKIT_TOKEN) pointi
 
 ### Working with GUI Components
 GUI apps are pre-built (in dist/ or build/ directories). To modify:
-1. Navigate to specific GUI directory (e.g., `gui/admin/`)
+1. Navigate to specific GUI directory (e.g., `gui/next/`)
 2. Make changes to source files
 3. Run build process (`npm run build`)
 4. Commit built assets (they're included in npm package)

Dockerfile

@@ -1,4 +1,4 @@
-FROM node:14-alpine
+FROM node:22-alpine
 
 ENV SOURCE=/tmp/src
 
@@ -8,12 +8,12 @@ RUN mkdir $SOURCE
 
 ADD . $SOURCE
 
-WORKDIR $SOURCE/gui/admin
+WORKDIR $SOURCE/gui/next
 RUN npm ci && npm run build
 
 RUN npm install -g $SOURCE
 
-RUN rm -rf node_modules && rm -rf gui/admin/node_modules
+RUN rm -rf node_modules && rm -rf gui/next/node_modules
 
 RUN mkdir /app
 WORKDIR /app