FROM node:24-alpine AS builder
WORKDIR /app

COPY package*.json tsconfig*.json ./
RUN npm ci --ignore-scripts

COPY src/ ./src/
RUN npm run build

RUN npm ci --omit=dev --ignore-scripts


FROM node:24-alpine AS runtime
WORKDIR /app

RUN addgroup -S acme && adduser -S acme -G acme

COPY --from=builder /app/node_modules ./node_modules
COPY --from=builder /app/dist ./dist
COPY --from=builder /app/package.json ./package.json

USER acme

ENV NODE_ENV=production

ENTRYPOINT ["node", "dist/cli.js"]
CMD ["run"]