# syntax=docker/dockerfile:1

ARG NODE_VERSION=20.18.1
FROM node:${NODE_VERSION}-alpine AS base
RUN corepack enable && corepack prepare pnpm@9.15.0 --activate
WORKDIR /app

# --- Builder ---
# Install deps + build in one stage so pnpm's per-package node_modules
# (containing .bin symlinks like `tsup`) are intact.
FROM base AS builder
COPY package.json pnpm-lock.yaml pnpm-workspace.yaml turbo.json tsconfig.json ./
COPY apps/web/package.json ./apps/web/
COPY apps/collab-server/package.json ./apps/collab-server/
COPY apps/mcp-server/package.json ./apps/mcp-server/
COPY packages/database/package.json ./packages/database/
COPY packages/shared/package.json ./packages/shared/
COPY packages/ai/package.json ./packages/ai/
RUN pnpm install --frozen-lockfile

COPY apps/collab-server ./apps/collab-server
COPY packages/database ./packages/database

ENV NODE_ENV=production
RUN pnpm exec turbo build --filter=@tasks/collab-server

# --- Production runner ---
FROM node:${NODE_VERSION}-alpine AS runner
RUN addgroup --system --gid 1001 nodejs \
  && adduser --system --uid 1001 collab --ingroup nodejs

WORKDIR /app

ENV NODE_ENV=production
ENV PORT=1234

COPY --from=builder --chown=collab:nodejs /app/node_modules ./node_modules
COPY --from=builder --chown=collab:nodejs /app/packages/database ./packages/database
COPY --from=builder --chown=collab:nodejs /app/apps/collab-server/dist ./apps/collab-server/dist
COPY --from=builder --chown=collab:nodejs /app/apps/collab-server/package.json ./apps/collab-server/package.json
COPY --from=builder --chown=collab:nodejs /app/apps/collab-server/node_modules ./apps/collab-server/node_modules

USER collab

EXPOSE 1234

HEALTHCHECK --interval=30s --timeout=5s --start-period=20s --retries=3 \
  CMD node -e "const p=+(process.env.PORT||1234);require('net').createConnection(p,'127.0.0.1').on('connect',()=>process.exit(0)).on('error',()=>process.exit(1))"

WORKDIR /app/apps/collab-server
CMD ["node", "dist/index.mjs"]