deploy-stack 0.17.2 → 0.17.3

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "deploy-stack",
-  "version": "0.17.2",
+  "version": "0.17.3",
   "description": "Provision production-ready AWS infrastructure and CI/CD pipelines in seconds.",
   "engines": {
     "node": ">=18.0.0"

package/templates/docker/svelte.Dockerfile

@@ -1,3 +1,21 @@
+# ==========================================
+# Stage 1: Builder
+# ==========================================
+FROM node:22-alpine AS builder
+WORKDIR /app
+
+# Install all dependencies (including devDependencies)
+COPY package*.json ./
+RUN npm ci
+
+# Copy source code and compile the SvelteKit application
+COPY . .
+# Inject the bypass flag so the adapter doesn't trigger inside the container!
+RUN DEPLOY_STACK_BYPASS=true npm run build
+
+# ==========================================
+# Stage 2: Production (Zero-CVE)
+# ==========================================
 FROM node:22-alpine
 
 # 1. DevSecOps: Patch underlying Alpine OS vulnerabilities
@@ -8,18 +26,17 @@ ENV NODE_ENV=production
 WORKDIR /app
 
 # 3. Copy manifests and install ONLY production dependencies
-COPY --chown=node:node package*.json ./
+COPY --from=builder --chown=node:node /app/package*.json ./
 RUN npm ci --omit=dev && npm cache clean --force
 
-# 4. Copy the compiled SvelteKit server generated by adapter-node
-COPY --chown=node:node build/ ./build/
-COPY --chown=node:node package.json ./
+# 4. Copy the compiled SvelteKit server from the builder stage
+COPY --from=builder --chown=node:node /app/build/ ./build/
 
-# 5. DevSecOps: Remove NPM to eliminate Trivy vulnerabilities
+# 5. DevSecOps: Nuke NPM completely to eliminate Trivy vulnerabilities
 RUN rm -rf /usr/local/lib/node_modules/npm /usr/local/bin/npm /usr/local/bin/npx
 
 USER node
 EXPOSE {{PORT}}
 
-# 6. Execute the raw Node server directly (Bypassing NPM)
+# 6. Execute the raw Node server directly
 CMD ["node", "build/index.js"]