# syntax=docker/dockerfile:1

ARG NODE_VERSION=20.18.1
FROM node:${NODE_VERSION}-alpine AS base
RUN corepack enable && corepack prepare pnpm@9.15.0 --activate
WORKDIR /app

# --- Builder ---
# Install deps + build in one stage so pnpm's per-package node_modules
# (containing .bin symlinks like `tsup`) are intact.
FROM base AS builder
COPY package.json pnpm-lock.yaml pnpm-workspace.yaml turbo.json tsconfig.json ./
COPY apps/web/package.json ./apps/web/
COPY apps/collab-server/package.json ./apps/collab-server/
COPY apps/mcp-server/package.json ./apps/mcp-server/
COPY packages/database/package.json ./packages/database/
COPY packages/shared/package.json ./packages/shared/
COPY packages/ai/package.json ./packages/ai/
RUN pnpm install --frozen-lockfile

COPY apps/mcp-server ./apps/mcp-server
COPY packages/database ./packages/database
COPY packages/shared ./packages/shared

ENV NODE_ENV=production
RUN pnpm exec turbo build --filter=@tasks/mcp-server

# --- Production runner ---
FROM node:${NODE_VERSION}-alpine AS runner
ARG MCP_SERVER_PORT=3001
ENV MCP_SERVER_PORT=${MCP_SERVER_PORT}

RUN apk add --no-cache procps \
  && addgroup --system --gid 1001 nodejs \
  && adduser --system --uid 1001 mcp --ingroup nodejs

WORKDIR /app

ENV NODE_ENV=production

COPY --from=builder --chown=mcp:nodejs /app/node_modules ./node_modules
COPY --from=builder --chown=mcp:nodejs /app/packages/database ./packages/database
COPY --from=builder --chown=mcp:nodejs /app/packages/shared ./packages/shared
COPY --from=builder --chown=mcp:nodejs /app/apps/mcp-server/dist ./apps/mcp-server/dist
COPY --from=builder --chown=mcp:nodejs /app/apps/mcp-server/package.json ./apps/mcp-server/package.json
COPY --from=builder --chown=mcp:nodejs /app/apps/mcp-server/node_modules ./apps/mcp-server/node_modules

USER mcp

WORKDIR /app/apps/mcp-server

EXPOSE 3001

HEALTHCHECK --interval=30s --timeout=5s --start-period=20s --retries=3 \
  CMD pgrep -f "node.*dist/index\\.js" > /dev/null || exit 1

CMD ["node", "dist/index.js"]