FROM node:24-slim@sha256:6f7b03f7c2c8e2e784dcf9295400527b9b1270fd37b7e9a7285cf83b6951452d

ENV CI=true

ENV PNPM_HOME=/pnpm

ENV COREPACK_HOME=/corepack

ENV PATH=/pnpm:$PATH

WORKDIR /app

RUN apt-get update \

&& apt-get install -y --no-install-recommends --only-upgrade libgcrypt20 libgnutls30 libpcre2-8-0 \

&& apt-get install -y --no-install-recommends ca-certificates \

&& rm -rf /var/lib/apt/lists/*

RUN mkdir -p /corepack /pnpm \

&& corepack enable \

&& corepack prepare pnpm@11.13.0 --activate \

&& pnpm --version \

&& chown -R node:node /corepack /pnpm

COPY package.json pnpm-lock.yaml pnpm-workspace.yaml ./

# pnpm validates every workspace importer under a frozen lockfile, so copy all

# package manifests before the full source copy. These are install/cache inputs,

# not runtime dependencies of this service.

COPY apps/indexer/package.json apps/indexer/package.json

COPY apps/metrics-api/package.json apps/metrics-api/package.json

COPY apps/metrics-publisher/package.json apps/metrics-publisher/package.json

COPY apps/client/package.json apps/client/package.json

RUN pnpm install --frozen-lockfile \

&& rm -rf /app/.pnpm-store /pnpm/store /root/.cache/pnpm

COPY . .

RUN pnpm --dir apps/indexer codegen \

&& pnpm run build \

&& rm -rf /app/.pnpm-store /corepack /pnpm /root/.cache/pnpm \

/usr/local/bin/corepack /usr/local/bin/npm /usr/local/bin/npx \

/usr/local/bin/pnpm /usr/local/bin/pnpx \

/usr/local/lib/node_modules/corepack /usr/local/lib/node_modules/npm \

apps/indexer/.envio

ENV PATH=/app/node_modules/.bin:/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin

WORKDIR /app/apps/metrics-api

USER node

EXPOSE 3000

CMD ["tsx", "src/cli.ts"]