FROM node:22-alpine

WORKDIR /app

RUN apk add --no-cache curl jq

COPY package*.json ./
RUN npm ci

COPY src ./src
COPY scripts ./scripts
COPY tsconfig.json ./tsconfig.json

ENV NODE_ENV=production

CMD ["sh", "-lc", ". /app/scripts/load-vault-env.sh && npm run start"]