FROM node:22-bookworm-slim

WORKDIR /app

RUN apt-get update -y \
  && apt-get install -y --no-install-recommends curl jq ca-certificates \
  && rm -rf /var/lib/apt/lists/*

COPY package*.json ./
RUN npm ci

COPY src ./src
COPY scripts ./scripts

CMD ["sh", "-c", ". /app/scripts/load-vault-env.sh && node src/worker.js"]