FROM node:24.20.0-bookworm-slim@sha256:ba849c60be29959425b8734d57b8b4b7d56f98edd9504c9af091d5281095a71e
WORKDIR /app
COPY package.json package-lock.json ./
RUN npm ci --ignore-scripts --no-audit --no-fund
COPY contracts ./contracts
COPY scripts ./scripts
COPY test ./test
RUN mkdir -p /app/reports
RUN npm run build && npm test
RUN mkdir -p /app/reports && chown node:node /app/reports
USER node
CMD ["npm", "run", "rehearse"]
