fix(docker): force better-sqlite3 to compile from source under QEMU

both prebuild-install and node-gyp rebuild were failing silently
under QEMU arm64 emulation on GitHub Actions amd64 runners.

prebuild-install first attempts to download a prebuilt binary from
GitHub releases; under QEMU + CI this either times out, returns an
incompatible binary, or the exact node-v115-linux-arm64 prebuilt
simply does not exist for better-sqlite3@9.6.0. The fallback
'node-gyp rebuild' then also failed silently.

Fix: set npm_config_build_from_source=true on the pnpm install call
so prebuild-install skips the download entirely and goes straight to
node-gyp compilation. python3/make/g++ are already in the image so
this always succeeds.

Also add a verification RUN that fails the image build immediately
if better_sqlite3.node is still missing after install, giving an
early actionable error instead of a runtime crash.

Author: SPCFXDA

apps/cas/backend/Dockerfile

@@ -34,11 +34,16 @@ RUN apt-get update -qq && apt-get install -y --no-install-recommends \
 RUN npm install -g pnpm@10.11.0
 
 # Install from pruned manifests.
-# better-sqlite3 is in onlyBuiltDependencies (pnpm-workspace.yaml) so pnpm
-# runs its install script, which downloads the prebuilt arm64 binary directly.
+# npm_config_build_from_source skips the prebuild-install download entirely
+# and goes straight to node-gyp compilation — necessary because under QEMU
+# the prebuild-install download either fails or downloads an incompatible binary.
 COPY --from=pruner /app/out/json/ .
 COPY --from=pruner /app/out/pnpm-lock.yaml ./pnpm-lock.yaml
-RUN pnpm install --frozen-lockfile
+RUN npm_config_build_from_source=true pnpm install --frozen-lockfile
+
+# Verify the binary was actually compiled (fail loudly during build if not)
+RUN find /app/node_modules/.pnpm -name 'better_sqlite3.node' | grep . || \
+    (echo 'ERROR: better_sqlite3.node was not compiled!' && exit 1)
 
 # Copy source for all packages in the pruned subset and build in dep order.
 # turbo respects "dependsOn": ["^build"] so executor and its deps build first.

apps/template/backend/Dockerfile

@@ -48,9 +48,14 @@ COPY apps/template/backend/package.json  ./apps/template/backend/package.json
 COPY apps/template/frontend/package.json ./apps/template/frontend/package.json
 
 # Install deps for the template backend only.
-# better-sqlite3 is in onlyBuiltDependencies (pnpm-workspace.yaml) so pnpm
-# downloads its prebuilt arm64 binary — no QEMU compilation needed.
-RUN pnpm install --frozen-lockfile --filter @cfxdevkit/template-backend
+# npm_config_build_from_source skips the prebuild-install download entirely
+# and goes straight to node-gyp compilation — necessary because under QEMU
+# the prebuild-install download either fails or downloads an incompatible binary.
+RUN npm_config_build_from_source=true pnpm install --frozen-lockfile --filter @cfxdevkit/template-backend
+
+# Verify the binary was actually compiled (fail loudly during build if not)
+RUN find /app/node_modules/.pnpm -name 'better_sqlite3.node' | grep . || \
+    (echo 'ERROR: better_sqlite3.node was not compiled!' && exit 1)
 
 COPY apps/template/backend/ ./apps/template/backend/
 RUN pnpm --filter @cfxdevkit/template-backend build