Add /api/health endpoint and update Dockerfile for container deployment

- Add lightweight /api/health endpoint returning {"ok": true} for k8s probes
- Update Dockerfile to include frontend build stage (Node + npm)
- Change default CMD to serve mode for container use

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>

Author: haasonsaas

Dockerfile

@@ -1,4 +1,13 @@
-# Build stage
+# Frontend build stage
+FROM node:20-alpine AS frontend
+
+WORKDIR /app/web
+COPY web/package.json web/package-lock.json ./
+RUN npm ci
+COPY web/ .
+RUN npm run build
+
+# Rust build stage
 FROM rust:alpine AS builder
 
 RUN apk add --no-cache musl-dev
@@ -8,9 +17,13 @@ WORKDIR /app
 # Cache dependencies
 COPY Cargo.toml Cargo.lock ./
 RUN mkdir src && echo 'fn main() {}' > src/main.rs && \
+    mkdir -p web/dist && \
     cargo build --release && \
     rm -rf src
 
+# Copy frontend build output (embedded via rust-embed)
+COPY --from=frontend /app/web/dist ./web/dist
+
 # Build actual binary
 COPY src ./src
 RUN touch src/main.rs && cargo build --release
@@ -22,5 +35,7 @@ RUN apk add --no-cache ca-certificates git
 
 COPY --from=builder /app/target/release/diffscope /usr/local/bin/diffscope
 
+EXPOSE 3000
+
 ENTRYPOINT ["diffscope"]
-CMD ["--help"]
+CMD ["serve", "--host", "0.0.0.0", "--port", "3000"]

src/server/mod.rs

@@ -84,6 +84,7 @@ pub async fn start_server(config: Config, host: &str, port: u16) -> anyhow::Resu
         .allow_headers(tower_http::cors::Any);
 
     let api_routes = Router::new()
+        .route("/health", get(|| async { axum::Json(serde_json::json!({"ok": true})) }))
         .route("/status", get(api::get_status))
         .route("/review", post(api::start_review))
         .route("/reviews", get(api::list_reviews))