# Disposable qualification only. Preserve the pinned upstream/dependency bytes
# of a previously qualified package; never tag this as a released app version.
# Build context is docker/blossom (not the whole repository).
ARG BLOSSOM_BASE
FROM ${BLOSSOM_BASE}
USER 0:0
COPY startup.ts upload-policy.ts upload-worker-patch.ts /app/
RUN deno eval --cached-only --frozen 'import {patchUploadWorker} from "./upload-worker-patch.ts"; const p="/app/src/workers/upload-worker.ts"; await Deno.writeTextFile(p,patchUploadWorker(await Deno.readTextFile(p)))' \
    && deno cache --frozen main.ts startup.ts
USER 1000:1000