FROM node:22-alpine WORKDIR /app COPY package.json package-lock.json ./ COPY server/package.json server/package.json COPY packages/contracts/package.json packages/contracts/package.json RUN npm ci --ignore-scripts --omit=dev COPY packages/contracts packages/contracts COPY server server RUN mkdir -p /var/lib/miragenflow/staging && addgroup -S app && adduser -S -G app app && chown -R app:app /app /var/lib/miragenflow ENV NODE_ENV=production ENV MIRAGENFLOW_STAGING_DIR=/var/lib/miragenflow/staging USER app EXPOSE 3100 HEALTHCHECK --interval=10s --timeout=3s --retries=5 CMD node -e "fetch('http://127.0.0.1:3100/api/ready').then(r=>process.exit(r.ok?0:1)).catch(()=>process.exit(1))" CMD ["node", "--import", "tsx", "server/src/index.ts"]