| # ---- Stage 1: Build ---- | |
| # Mirrors BRIDGE Modul-E's proven HF pattern (node:20-alpine). | |
| FROM node:20-alpine AS builder | |
| WORKDIR /app | |
| # Vite bakes VITE_* vars in at BUILD time — pass them as build args. | |
| # Empty values keep the demo fallback UI. | |
| ARG VITE_SUPABASE_URL="" | |
| ARG VITE_SUPABASE_ANON_KEY="" | |
| ARG VITE_API_URL="" | |
| ENV VITE_SUPABASE_URL=$VITE_SUPABASE_URL \ | |
| VITE_SUPABASE_ANON_KEY=$VITE_SUPABASE_ANON_KEY \ | |
| VITE_API_URL=$VITE_API_URL | |
| # Install dependencies first (layer caching). | |
| # NOTE: only package.json is copied (no lockfile): the Windows-generated | |
| # lockfile pins win32-only optional native deps (rollup) which break Linux | |
| # builds — npm/cli bug #4828. Dependencies resolve fresh on Alpine/musl. | |
| COPY package.json ./ | |
| RUN npm install --no-audit --no-fund | |
| # Copy source and build frontend + bundle server (dist/server.cjs). | |
| COPY . . | |
| RUN npm run build | |
| # ---- Stage 2: Production ---- | |
| FROM node:20-alpine AS production | |
| WORKDIR /app | |
| # HF Spaces routes to 7860 — the server MUST default to it (see server.ts). | |
| ENV NODE_ENV=production \ | |
| PORT=7860 | |
| # Install production-only dependencies (esbuild, vitest, typescript excluded). | |
| COPY package.json ./ | |
| RUN npm install --omit=dev && npm cache clean --force | |
| # Copy the built output from builder stage. | |
| COPY --from=builder /app/dist ./dist | |
| EXPOSE 7860 | |
| HEALTHCHECK --interval=30s --timeout=5s --start-period=10s --retries=3 \ | |
| CMD wget -qO- http://127.0.0.1:7860/api/health >/dev/null 2>&1 || exit 1 | |
| CMD ["node", "dist/server.cjs"] | |