Upload Dockerfile with huggingface_hub

Dockerfile

@@ -1,30 +1,46 @@
-ARG CACHE_BUST=1
-FROM node:22-slim AS builder
-WORKDIR /app
-COPY package*.json ./
-# Lockfile generated on Windows pins win32-only optional native deps (rollup),
-# which breaks Linux builds — npm/cli bug #4828. Remove and resolve fresh.
-RUN rm -f package-lock.json && npm install --prefer-offline --no-audit --no-fund --no-cache
-COPY . .
-RUN npm run build --if-present
-
-FROM node:22-slim
-WORKDIR /app
-COPY --from=builder /app/dist ./dist
-COPY --from=builder /app/package.json ./package.json
-RUN npm install --prefer-offline --no-audit --no-fund --no-cache --omit=dev
-
-# Hugging Face exposes port 7860
-ENV PORT=7860
-ENV NODE_ENV=production
-EXPOSE 7860
-
-CMD ["npm", "start"]
-
-# FORCE REBUILD 1789683004
-
-# FORCE REBUILD 1789683497
-
-# FORCE REBUILD 1789684079
-
-# FORCE REBUILD 1789684845
+# ---- Stage 1: Build ----
+# Mirrors BRIDGE Modul-E's proven HF pattern (node:20-alpine).
+FROM node:20-alpine AS builder
+WORKDIR /app
+
+# Vite bakes VITE_* vars in at BUILD time — pass them as build args.
+# Empty values keep the demo fallback UI.
+ARG VITE_SUPABASE_URL=""
+ARG VITE_SUPABASE_ANON_KEY=""
+ARG VITE_API_URL=""
+ENV VITE_SUPABASE_URL=$VITE_SUPABASE_URL \
+    VITE_SUPABASE_ANON_KEY=$VITE_SUPABASE_ANON_KEY \
+    VITE_API_URL=$VITE_API_URL
+
+# Install dependencies first (layer caching).
+# NOTE: only package.json is copied (no lockfile): the Windows-generated
+# lockfile pins win32-only optional native deps (rollup) which break Linux
+# builds — npm/cli bug #4828. Dependencies resolve fresh on Alpine/musl.
+COPY package.json ./
+RUN npm install --no-audit --no-fund
+
+# Copy source and build frontend + bundle server (dist/server.cjs).
+COPY . .
+RUN npm run build
+
+# ---- Stage 2: Production ----
+FROM node:20-alpine AS production
+WORKDIR /app
+
+# HF Spaces routes to 7860 — the server MUST default to it (see server.ts).
+ENV NODE_ENV=production \
+    PORT=7860
+
+# Install production-only dependencies (esbuild, vitest, typescript excluded).
+COPY package.json ./
+RUN npm install --omit=dev && npm cache clean --force
+
+# Copy the built output from builder stage.
+COPY --from=builder /app/dist ./dist
+
+EXPOSE 7860
+
+HEALTHCHECK --interval=30s --timeout=5s --start-period=10s --retries=3 \
+  CMD wget -qO- http://127.0.0.1:7860/api/health >/dev/null 2>&1 || exit 1
+
+CMD ["node", "dist/server.cjs"]