FROM node:22-bookworm-slim

WORKDIR /app

RUN apt-get update -y && apt-get install -y --no-install-recommends curl jq ca-certificates && rm -rf /var/lib/apt/lists/*

COPY package*.json ./
RUN npm ci

COPY src ./src
COPY scripts ./scripts

CMD ["sh", "-c", ". /app/scripts/load-vault-env.sh && node src/worker.js"]
