Dockerfile

# Stage 1: install + build pi-fork
FROM node:24-alpine AS builder
RUN apk add --no-cache build-base python3 pkgconfig pixman-dev cairo-dev pango-dev jpeg-dev giflib-dev librsvg-dev
RUN corepack enable && corepack prepare pnpm@9 --activate
WORKDIR /app

# Copy workspace manifests for layer caching
COPY pnpm-workspace.yaml pnpm-lock.yaml ./
COPY packages/session-backend/package.json ./packages/session-backend/
COPY packages/k8s-sandbox/package.json ./packages/k8s-sandbox/
COPY packages/knative-server/package.json ./packages/knative-server/
COPY packages/sandbox-relay/package.json ./packages/sandbox-relay/
COPY packages/work-queue/package.json ./packages/work-queue/
COPY packages/ibac-stub/package.json ./packages/ibac-stub/
COPY harness/package.json ./harness/

# Copy pi-fork (uses npm, not pnpm — has its own package-lock.json)
COPY pi-fork/ ./pi-fork/

# Install pi-fork deps (provides tsgo, tsx, etc.)
WORKDIR /app/pi-fork
RUN npm ci
WORKDIR /app

# Install pnpm workspace deps (links to pi-fork via relative paths)
RUN pnpm install --frozen-lockfile

# Copy workspace source
COPY packages/ ./packages/
COPY harness/ ./harness/

# Build pi-fork (required order per M1 gotcha; uses npm since pi-fork is an npm workspace)
WORKDIR /app/pi-fork
RUN npm run build -w packages/ai && \
    npm run build -w packages/agent && \
    npm run build -w packages/tui && \
    npm run build -w packages/coding-agent
WORKDIR /app

# Stage 2: slim runtime
FROM node:24-alpine
RUN apk add --no-cache kubectl cairo pango libjpeg-turbo giflib librsvg pixman
WORKDIR /app
COPY --from=builder /app ./
ENV NODE_ENV=production
EXPOSE 8080
WORKDIR /app/packages/knative-server
CMD ["node", "--import", "tsx", "src/server.ts"]