seperation of nearle admin

Dockerfile

@@ -54,6 +54,31 @@ COPY . .
 ARG VITE_API_BASE="https://fiesta.nearle.app"
 ENV VITE_API_BASE=$VITE_API_BASE
 
+# Which console this image is.
+#
+#   platform  → platform.nearledaily.com, Nearle's own staff
+#   merchant  → app.nearledaily.com, merchants and their branch users
+#
+# The same source builds both. What the flag changes is which workspace's routes
+# are mounted and which roles may sign in — neither image lets the other's
+# accounts through. Both images still CONTAIN both workspaces' compiled chunks;
+# the unmounted one is never fetched because nothing routes to it.
+#
+# Defaulting to `merchant` keeps every existing deployment behaving exactly as
+# it did. The platform build is the one that has to be asked for — the opposite
+# default would turn every environment that had not been told about this into a
+# platform console on the day it shipped.
+ARG VITE_WORKSPACE="merchant"
+ENV VITE_WORKSPACE=$VITE_WORKSPACE
+
+# The other console's address, for the sentence shown to somebody in the wrong
+# place. Only the one this build is NOT is used; both are given so a single set
+# of build args works for either image.
+ARG VITE_PLATFORM_HOST="platform.nearledaily.com"
+ENV VITE_PLATFORM_HOST=$VITE_PLATFORM_HOST
+ARG VITE_MERCHANT_HOST="app.nearledaily.com"
+ENV VITE_MERCHANT_HOST=$VITE_MERCHANT_HOST
+
 RUN npm run build
 
 # Stage 2 — serve