# Lint and tests, run in CI. A build context rather than a bind mount, because
# the CI job runs inside a container of its own — $PWD there means nothing to
# the Docker daemon, so a mounted folder arrives empty.
FROM node:22-bookworm-slim
WORKDIR /src

COPY package.json package-lock.json ./
RUN npm ci --no-audit --no-fund

COPY . .
RUN npm run lint && npm test