# Base image pinned by digest for reproducibility + integrity. Same base as the
# production Dockerfile: Dependabot bumps both.
FROM node:26-alpine@sha256:c6ad9e9c1d80f6eb607c26b4b0a132ff7a2344fad1c78ea3baa2a7d4c8de6d94

# Enable corepack (pnpm version comes from package.json "packageManager",
# single source of truth, matching the production Dockerfile).
ENV COREPACK_ENABLE_DOWNLOAD_PROMPT=0
RUN npm install -g corepack@0.35.0 && corepack enable

WORKDIR /app

# The web app's dev server, and the API it sends /api to (docker-compose.dev.yml).
EXPOSE 5173 3000