Build

Build configuration. A string shorthand (build: ".") expands to { context: "." }.

Field	Type	Description
`context`	`string`	Build context directory (relative to repo root)
`dockerfile`	`string`	Path to Dockerfile
`target`	`string`	Multi-stage build target
`args`	`map<string, string>`	Build arguments
`secrets`	`string[]`	Secret names available during build (never baked into image)

Each entry in secrets is a name that the platform resolves at build time. The name may reference a top-level secrets: entry (generated by the Launchfile) or a platform-managed secret (e.g., an NPM token or SSH key provided out-of-band). The platform mounts each secret during the build phase and ensures it is never included in the resulting image.

secrets:
  npm-token:
    generator: secret

build:
  dockerfile: ./docker/Dockerfile.backend
  target: production
  args:
    NODE_ENV: production
  secrets:
    - npm-token          # from top-level secrets block
    - ssh-deploy-key     # platform-managed, provided out-of-band