WeLe Agentic AI with Docker deployment

Dockerfile

@@ -1,19 +1,23 @@
 # ============================================
 # WeLe Agentic AI — production image
 #
-# Node service only. The voice service is deliberately NOT in this image: it
-# needs a CUDA GPU and several GB of RAM, and the target host has neither.
-# See DEPLOY.md.
+# Speech runs in this same process: ONNX on CPU via Transformers.js. No GPU,
+# no Python, no second service.
+#
+# node:20-slim, NOT alpine. onnxruntime-node ships glibc binaries and Alpine is
+# musl, so the native module fails at load with:
+#   Error loading shared library ld-linux-x86-64.so.2 (needed by libonnxruntime.so.1)
+# `sharp`, pulled in by Transformers.js, has the same constraint.
 # ============================================
 
-FROM node:20-alpine AS deps
+FROM node:20-slim AS deps
 WORKDIR /app
 COPY package*.json ./
 # `npm ci` builds exactly the lockfile, so a deploy can never silently pick up
 # a different dependency tree than the one that was tested.
 RUN npm ci --omit=dev
 
-FROM node:20-alpine
+FROM node:20-slim
 WORKDIR /app
 
 # Run unprivileged. The base image already ships a `node` user.