feat(mcp): подготовить сервер и доступ к приёмке

backend/Dockerfile

@@ -0,0 +1,66 @@
+# syntax=docker/dockerfile:1
+
+FROM node:22-bookworm-slim AS deps
+RUN apt-get update \
+  && apt-get install -y --no-install-recommends python3 make g++ \
+  && rm -rf /var/lib/apt/lists/*
+WORKDIR /app
+# Do not set NODE_ENV=production here — npm would omit typescript needed for the build stage.
+COPY package.json package-lock.json ./
+COPY packages/contracts/package.json packages/contracts/
+COPY backend/package.json backend/
+# Drop root frontend deps (Next/React/UI) so backend image stays lean.
+RUN node -e "\
+  const fs=require('fs');\
+  const p=JSON.parse(fs.readFileSync('package.json','utf8'));\
+  p.dependencies={};\
+  p.devDependencies={};\
+  delete p.scripts;\
+  p.workspaces=['packages/*','backend'];\
+  fs.writeFileSync('package.json', JSON.stringify(p,null,2)+'\\n');\
+"
+# Prefer npm ci; if lockfile rejects stripped root package.json, fall back to install.
+RUN (npm ci --workspace=@mmapp/contracts --workspace=mikrotik-manager-backend --ignore-scripts \
+  || npm install --workspace=@mmapp/contracts --workspace=mikrotik-manager-backend --ignore-scripts) \
+  && npm rebuild better-sqlite3
+
+FROM deps AS build
+ARG APP_VERSION=dev
+ENV APP_VERSION=$APP_VERSION
+COPY packages/contracts packages/contracts
+COPY backend backend
+RUN npm run build -w @mmapp/contracts \
+  && npm run build -w mikrotik-manager-backend \
+  && npm prune --omit=dev \
+  # npm may nest workspace deps (e.g. dotenv) under backend/node_modules — keep dir for COPY
+  && mkdir -p backend/node_modules
+
+FROM node:22-bookworm-slim AS runner
+WORKDIR /app
+# Keep system packages independent of application changes and version tags.
+RUN apt-get update \
+  && apt-get install -y --no-install-recommends gnupg wget ca-certificates \
+  && wget -qO- https://www.postgresql.org/media/keys/ACCC4CF8.asc | gpg --dearmor -o /usr/share/keyrings/pgdg.gpg \
+  && echo "deb [signed-by=/usr/share/keyrings/pgdg.gpg] http://apt.postgresql.org/pub/repos/apt bookworm-pgdg main" > /etc/apt/sources.list.d/pgdg.list \
+  && apt-get update \
+  && apt-get install -y --no-install-recommends postgresql-client-18 \
+  && rm -rf /var/lib/apt/lists/* \
+  && mkdir -p /app/data
+ARG APP_VERSION=dev
+ENV NODE_ENV=production
+ENV PORT=8000
+ENV DATABASE_PATH=/app/data/mikrotik.db
+ENV APP_VERSION=$APP_VERSION
+COPY --from=build /app/package.json /app/package-lock.json ./
+COPY --from=build /app/node_modules ./node_modules
+COPY --from=build /app/packages/contracts ./packages/contracts
+COPY --from=build /app/backend/dist ./backend/dist
+COPY --from=build /app/backend/dist-operator ./backend/dist-operator
+COPY --from=build /app/backend/package.json ./backend/package.json
+COPY --from=build /app/backend/mcp-coverage.json ./backend/mcp-coverage.json
+COPY --from=build /app/backend/drizzle ./backend/drizzle
+COPY deploy/netflow-agent/install.sh ./deploy/netflow-agent/install.sh
+# Nested install from lockfile (dotenv etc.) — ESM resolves from /app/backend/dist → ../node_modules
+COPY --from=build /app/backend/node_modules ./backend/node_modules
+EXPOSE 8000
+CMD ["node", "backend/dist/index.js"]