FROM node:22-slim AS builder

WORKDIR /app
COPY package.json package-lock.json* ./
RUN npm ci
COPY tsconfig.json ./
COPY src/ ./src/
RUN npm run build

FROM node:22-slim

RUN groupadd -r axon && useradd -r -g axon -m axon
WORKDIR /app
COPY package.json package-lock.json* ./
RUN npm ci --omit=dev && npm cache clean --force
COPY --from=builder /app/dist ./dist

# Mount point for Claude subscription auth
VOLUME /home/axon/.claude

USER axon
EXPOSE 3000
CMD ["node", "dist/index.js"]
