Fix Docker build

.dockerignore

@@ -1,51 +1,16 @@
-# Git files
-.git
-.gitignore
-.gitattributes
-
-# CI/CD
-.github
-
-# Documentation
-*.md
-docs/
-DEMO-SCRIPT.md
-IMPLEMENTATION.md
-AGENTS.md
-CHANGELOG.md
-
-# Build artifacts
-waza
-coverage.txt
-coverage.out
-results.json
-transcripts/
-
-# Development
-.vscode/
-.idea/
-*.swp
-*.swo
-*~
-
-# Test files
-*_test.go
-
-# Examples (not needed in image)
-examples/
-skills/
-
-# Web assets (if not needed)
-web/
-
-# Templates
-.ai-team
-.ai-team-templates
-
-# Python legacy
-waza/
-__pycache__/
-*.pyc
-
-# Misc
-.DS_Store
+*
+
+!go.mod
+!go.sum
+!cmd/
+!internal/
+!schemas/
+!web/embed.go
+!web/dist/
+!docs.go
+!docs/graders/
+!version.txt
+
+# Re-exclude test files pulled in by the allowlist above
+**/*_test.go
+**/testdata/

.github/workflows/docker-ci.yml

@@ -0,0 +1,45 @@
+name: Docker Build and Verify
+
+on:
+  push:
+    branches: [main]
+    paths: &docker-paths
+      - 'Dockerfile'
+      - '.dockerignore'
+      - 'go.mod'
+      - 'go.sum'
+      - 'cmd/**'
+      - 'internal/**'
+      - 'web/**'
+      - 'schemas/**'
+      - 'docs.go'
+      - 'docs/graders/**'
+      - '.github/workflows/docker-ci.yml'
+  pull_request:
+    branches: [main]
+    paths: *docker-paths
+
+jobs:
+  docker-build:
+    name: Build and Verify Docker Image
+    runs-on: ubuntu-latest
+
+    steps:
+      - name: Checkout Repository
+        uses: actions/checkout@v4
+
+      - name: Set up Docker Buildx
+        uses: docker/setup-buildx-action@v3
+
+      - name: Build Docker image
+        uses: docker/build-push-action@v6
+        with:
+          context: .
+          push: false
+          load: true
+          tags: waza:ci-${{ github.sha }}
+          cache-from: type=gha
+          cache-to: type=gha,mode=min
+
+      - name: Verify
+        run: docker run --rm waza:ci-${{ github.sha }} --version