Dockerfile

# ---- Builder Stage ----
FROM node:24-alpine AS builder

# Install build tools required for native modules (e.g. re2)
RUN apk add --no-cache python3 make g++

WORKDIR /app

# Install dependencies first (layer caching)
# --ignore-scripts avoids triggering `prepare` (build) before source is copied
COPY package.json package-lock.json ./
RUN npm ci --ignore-scripts && npm rebuild

# Copy source and build
COPY src/ ./src/
COPY tsconfig.json tsconfig.build.json ./
COPY scripts/ ./scripts/
RUN npm run build

# Remove dev dependencies (keep pre-compiled native modules)
RUN npm prune --production

# ---- Release Stage ----
FROM node:24-alpine

ENV NODE_ENV=production

# Labels for Docker / MCP Catalog
LABEL org.opencontainers.image.title="Code Lens" \
      org.opencontainers.image.description="Gemini-powered MCP server for code analysis." \
      org.opencontainers.image.source="https://github.com/j0hanz/code-lens" \
      org.opencontainers.image.licenses="MIT" \
      io.modelcontextprotocol.server.name="io.github.j0hanz/code-lens"

# Create non-root user
RUN adduser -D mcp

WORKDIR /app

# Copy built artifacts and pre-compiled dependencies from builder
COPY --from=builder /app/dist ./dist/
COPY --from=builder /app/node_modules ./node_modules/
COPY --from=builder /app/package.json ./

USER mcp

ENTRYPOINT ["node", "dist/index.js"]