fix(backend): Dockerfile workspace dep + local build/run targets

Dockerfile.bun:
- Preserve packages/email-templates when flattening so workspace:* resolves
- Add workspaces to package.json and re-run bun install after flatten
  (fixes 'Workspace dependency @docs.plus/email-templates not found')
- Remove lockfile before second install (reduced workspace layout)

Makefile + override:
- build-backend-prod: build only rest-api, hocuspocus-server, worker (stub env)
- run-backend-prod-local: run backend + redis locally with .env.local
- docker-compose.backend-local.override.yml: publish 4000/4001/4002 for local

Made-with: Cursor

Author: HMarzban

Makefile

@@ -3,7 +3,7 @@
 # Manages: Hocuspocus Server + Webapp + Infrastructure
 # =============================================================================
 
-.PHONY: help build build-dev validate-prod-build up-prod up-dev up-local infra-up infra-down infra-logs dev-local dev-backend dev-webapp dev-admin dev-rest dev-ws dev-worker down logs logs-webapp logs-backend restart clean scale scale-webapp scale-hocuspocus ps stats supabase-start supabase-stop supabase-status deploy-prod rollback-prod status-prod logs-traefik
+.PHONY: help build build-dev validate-prod-build build-backend-prod run-backend-prod-local up-prod up-dev up-local infra-up infra-down infra-logs dev-local dev-backend dev-webapp dev-admin dev-rest dev-ws dev-worker down logs logs-webapp logs-backend restart clean scale scale-webapp scale-hocuspocus ps stats supabase-start supabase-stop supabase-status deploy-prod rollback-prod status-prod logs-traefik
 
 help:
 	@echo "Docsplus Full Stack Docker Commands"
@@ -12,6 +12,8 @@ help:
 	@echo "  make build             - Build all services (production)"
 	@echo "  make build-dev         - Build all services (development)"
 	@echo "  make validate-prod-build - Build prod images with stub env (no .env.production needed)"
+	@echo "  make build-backend-prod  - Build only backend prod images (rest-api, hocuspocus, worker)"
+	@echo "  make run-backend-prod-local - Run backend prod images locally (needs .env.local)"
 	@echo ""
 	@echo "Running:"
 	@echo "  make up-prod           - Start all services (production)"
@@ -75,6 +77,23 @@ validate-prod-build:
 	DOCKER_BUILDKIT=1 COMPOSE_DOCKER_CLI_BUILD=1 docker compose -f docker-compose.prod.yml --env-file scripts/env.production.build-stub build --parallel
 	@echo "✅ Production build validation passed"
 
+# Build only backend (rest-api, hocuspocus-server, hocuspocus-worker) prod images. Same image, 3 services.
+# Use before pushing to verify backend Dockerfile builds; then run with run-backend-prod-local.
+build-backend-prod:
+	@echo "🏗️  Building backend production images (rest-api, hocuspocus-server, hocuspocus-worker)..."
+	@test -f scripts/env.production.build-stub || (echo "❌ scripts/env.production.build-stub missing"; exit 1)
+	DOCKER_BUILDKIT=1 COMPOSE_DOCKER_CLI_BUILD=1 docker compose -f docker-compose.prod.yml --env-file scripts/env.production.build-stub build rest-api hocuspocus-server hocuspocus-worker
+	@echo "✅ Backend production images built"
+
+# Run backend prod images locally: Redis + rest-api + hocuspocus-server + hocuspocus-worker (1 replica each).
+# Uses .env.local for DATABASE_URL and secrets. No Traefik; override publishes 4000/4001/4002.
+run-backend-prod-local: build-backend-prod
+	@test -f .env.local || (echo "❌ .env.local required (DATABASE_URL, SUPABASE_*, JWT_SECRET, etc.)"; exit 1)
+	@echo "🚀 Starting backend (prod images) + Redis locally..."
+	DOCKER_BUILDKIT=1 COMPOSE_DOCKER_CLI_BUILD=1 docker compose -f docker-compose.prod.yml -f docker-compose.backend-local.override.yml --env-file .env.local up -d redis rest-api hocuspocus-server hocuspocus-worker
+	@echo "✅ Backend running. REST: http://localhost:4000  WS: ws://localhost:4001  Health: http://localhost:4000/health"
+	@echo "  make logs-backend  - view logs"
+
 build-dev:
 	@echo "🏗️  Building all services (development)..."
 	@docker compose -f docker-compose.dev.yml --env-file .env.development build

docker-compose.backend-local.override.yml

@@ -0,0 +1,16 @@
+# Override for running backend prod images locally (no Traefik).
+# Use: docker compose -f docker-compose.prod.yml -f docker-compose.backend-local.override.yml --env-file .env.local up -d redis rest-api hocuspocus-server hocuspocus-worker
+# Then: REST http://localhost:4000  WS ws://localhost:4001  Worker health localhost:4002
+
+name: docsplus
+
+services:
+  rest-api:
+    ports:
+      - '4000:4000'
+  hocuspocus-server:
+    ports:
+      - '4001:4001'
+  hocuspocus-worker:
+    ports:
+      - '4002:4002'

packages/hocuspocus.server/docker/Dockerfile.bun

@@ -80,15 +80,20 @@ RUN cd packages/hocuspocus.server && bunx prisma@6 generate
 COPY --from=base /app/packages/hocuspocus.server/scripts/docker-entrypoint.sh /usr/local/bin/docker-entrypoint.sh
 RUN chmod +x /usr/local/bin/docker-entrypoint.sh
 
-# Flat layout for runtime: /app/src, /app/prisma, /app/node_modules, /app/package.json
+# Flat layout: keep packages/email-templates (workspace dep), rest at /app
 RUN mv packages/hocuspocus.server/src . && \
     mv packages/hocuspocus.server/prisma . && \
     cp packages/hocuspocus.server/package.json . && \
-    rm -rf packages
-
-# Re-install so node_modules is for /app only (no symlinks into deleted packages/)
-# Otherwise hono etc. are only in packages/.../node_modules and break after rm -rf packages
-RUN bun install --frozen-lockfile --production --ignore-scripts
+    mv packages/email-templates /tmp/email-templates && \
+    rm -rf packages && \
+    mkdir -p packages && \
+    mv /tmp/email-templates packages/email-templates
+
+# Add workspaces so "workspace:*" @docs.plus/email-templates resolves; then re-install
+# so node_modules is for /app only (no symlinks into deleted packages/) and hono is found.
+# Remove root lockfile so Bun resolves only this workspace (hocuspocus + email-templates).
+RUN bun -e "const p=require('./package.json'); p.workspaces=['packages']; require('fs').writeFileSync('package.json', JSON.stringify(p,null,2));"
+RUN rm -f bun.lock bun.lockb && bun install --production --ignore-scripts
 
 # Pre-download Prisma CLI for migrations (pin 6.19.0)
 RUN bunx --bun prisma@6.19.0 --version || true