Refactor Dockerfile to use multi-stage builds (#3)

Author: devksingh4

Dockerfile

@@ -1,21 +1,41 @@
-FROM debian:bookworm-slim
+# Build stage
+FROM node:20-bookworm AS builder
 
 ARG BWDC_VERSION=2026.1.0
 
+RUN apt-get update && apt-get install -y --no-install-recommends \
+    git \
+    python3 \
+    make \
+    g++ \
+    && rm -rf /var/lib/apt/lists/*
+
+WORKDIR /build
+
+RUN git clone --depth 1 --branch v${BWDC_VERSION} \
+    https://github.com/bitwarden/directory-connector.git .
+
+RUN npm ci
+
+RUN npm run build:cli:prod && npm run clean:dist:cli
+
+# Determine arch and run pkg with correct target
+RUN PKG_ARCH=$(uname -m | sed 's/x86_64/x64/' | sed 's/aarch64/arm64/') && \
+    npx pkg ./src-cli --targets linux-${PKG_ARCH} --output ./dist-cli/linux/bwdc
+
+# Runtime stage
+FROM debian:bookworm-slim
+
 RUN apt-get update && apt-get install -y --no-install-recommends \
     libsecret-1-0 \
-    curl \
-    unzip \
     ca-certificates \
     && rm -rf /var/lib/apt/lists/*
 
-RUN curl -L "https://github.com/bitwarden/directory-connector/releases/download/v${BWDC_VERSION}/bwdc-linux-${BWDC_VERSION}.zip" -o /tmp/bwdc.zip && \
-    unzip /tmp/bwdc.zip -d /usr/local/bin && \
-    chmod +x /usr/local/bin/bwdc && \
-    rm /tmp/bwdc.zip
+COPY --from=builder /build/dist-cli/linux/ /usr/local/bin/
+RUN chmod +x /usr/local/bin/bwdc
 
 RUN useradd -r -s /bin/false bitwarden && \
-    mkdir -p /home/bitwarden/.config/Bitwarden\ Directory\ Connector && \
+    mkdir -p "/home/bitwarden/.config/Bitwarden Directory Connector" && \
     chown -R bitwarden:bitwarden /home/bitwarden
 
 COPY entrypoint.sh /entrypoint.sh
@@ -24,5 +44,4 @@ RUN chmod +x /entrypoint.sh && sed -i 's/\r$//' /entrypoint.sh
 ENV BITWARDENCLI_CONNECTOR_PLAINTEXT_SECRETS=true
 
 USER bitwarden
-
 ENTRYPOINT ["/entrypoint.sh"]