FROM node:24.20.0-bookworm-slim@sha256:ba849c60be29959425b8734d57b8b4b7d56f98edd9504c9af091d5281095a71e
WORKDIR /app
COPY package.json package-lock.json ./
RUN npm ci --ignore-scripts --no-audit --no-fund
COPY contracts ./contracts
COPY scripts ./scripts
COPY test ./test
RUN mkdir -p reports && npm run build && chown -R node:node /app
USER node
CMD ["npm", "test"]
