Dockerfile

# ---- Build & verify stage: run checks + compile the frontend ----
# Building this stage in CI validates lint + tests + the production build
# inside a reproducible container (the same thing that ships to runtime).
FROM node:24-alpine AS build
WORKDIR /app
RUN corepack enable
COPY package.json pnpm-lock.yaml ./
RUN pnpm install --frozen-lockfile
COPY . .
RUN pnpm lint && pnpm test && pnpm build

# ---- Runtime stage: one container serves the frontend + /api/chat proxy ----
FROM node:24-alpine
WORKDIR /app
ENV NODE_ENV=production
ENV PORT=3000
RUN corepack enable
COPY package.json pnpm-lock.yaml ./
RUN pnpm install --frozen-lockfile --prod
COPY --from=build /app/dist ./dist
COPY server ./server
EXPOSE 3000

# The server serves the built frontend AND proxies /api/chat to Gemini.
# Provide the key at runtime: docker run -e GEMINI_API_KEY=...
CMD ["node", "server/index.mjs"]