Fix compose dev: isolate node_modules and remove host path leakage

Frontend/scripts/compose-dev.sh

@@ -4,8 +4,8 @@ set -euo pipefail
 cd "$(dirname "$0")/.."
 
 # Prevent path leakage between host Nuxt build cache and Docker runtime.
-# Host-generated .nuxt can contain absolute /Users/... imports that break in /app.
+# If any cache contains absolute /Users/... imports, Nitro dev runtime can break in /app.
-rm -rf .nuxt .output
+rm -rf .nuxt .output node_modules/.cache node_modules/.vite
 
 # Install deps (container starts from a clean image).
 # Fallback to npm install when lockfile was produced by a newer npm major.

compose.yaml

@@ -3,8 +3,11 @@ services:
     image: node:22-bookworm-slim
     working_dir: /app/Frontend
     volumes:
-      - .:/app
+      # Mount only the app source; keep node_modules inside the container to avoid
+      # leaking absolute host paths into Nuxt/Nitro dev runtime.
+      - ./Frontend:/app/Frontend
       - clientsflow_data:/app/.data
+      - frontend_node_modules:/app/Frontend/node_modules
     ports:
       - "3000:3000"
     environment:
@@ -12,12 +15,9 @@ services:
       REDIS_URL: "redis://redis:6379"
       CF_AGENT_MODE: "langgraph"
       OPENAI_MODEL: "gpt-4o-mini"
-      GIGACHAT_AUTH_KEY: "MDE5YzQwNmQtMDM0NC03MTVlLTg4MTAtOWZlYjlmNzQwY2E3OmNhZTg5NmM1LWZiOGEtNGZkZS04ODA0LWZkYjYyYzVlMTI0OQ=="
-      GIGACHAT_MODEL: "GigaChat-2"
-      GIGACHAT_SCOPE: "GIGACHAT_API_PERS"
-      NODE_TLS_REJECT_UNAUTHORIZED: "0"
       # Set this in your shell or a compose override:
       # OPENAI_API_KEY: "..."
+      # GIGACHAT_AUTH_KEY: "..."  (if you use GigaChat integration)
     command: >
       bash -lc "
         ./scripts/compose-dev.sh
@@ -34,4 +34,5 @@ services:
 
 volumes:
   clientsflow_data:
+  frontend_node_modules:
   redis_data: