# syntax=docker/dockerfile:1
FROM node:24-alpine AS randomx-build
RUN apk add --no-cache build-base cmake git linux-headers
WORKDIR /native
COPY native/CMakeLists.txt native/randomx-engine.cpp ./
RUN cmake -S . -B build -DCMAKE_BUILD_TYPE=Release -DWIKIDECK_RANDOMX_TESTS=ON \
    && cmake --build build --parallel 2 \
    && ctest --test-dir build --output-on-failure

FROM node:24-alpine AS build
WORKDIR /app
COPY package.json package-lock.json ./
RUN npm ci
COPY . .
ARG WIKIDECK_NETWORK=testnet
ENV VITE_WIKIDECK_NETWORK=$WIKIDECK_NETWORK
RUN npm run build

FROM build AS test
RUN apk add --no-cache libstdc++ postgresql-client
COPY --from=randomx-build /native/build/wikideck-randomx /app/native/wikideck-randomx
ENV RANDOMX_BINARY=/app/native/wikideck-randomx
CMD ["npm", "test"]

FROM node:24-alpine AS production-deps
WORKDIR /app
COPY package.json package-lock.json ./
RUN npm ci --omit=dev --ignore-scripts && npm cache clean --force

FROM node:24-alpine AS runtime
RUN apk add --no-cache libstdc++
ENV NODE_ENV=production \
    HOST=0.0.0.0 \
    PORT=3001 \
    WIKIDECK_DATA_DIR=/app/data \
    RANDOMX_BINARY=/app/native/wikideck-randomx
WORKDIR /app
COPY --from=production-deps /app/node_modules ./node_modules
COPY package.json ./
COPY --from=build /app/dist ./dist
COPY server ./server
COPY shared ./shared
COPY scripts/node-backup.ts ./scripts/node-backup.ts
COPY scripts/ops-check.ts ./scripts/ops-check.ts
COPY scripts/custody-db.ts ./scripts/custody-db.ts
COPY scripts/custody-deployment-init.ts ./scripts/custody-deployment-init.ts
COPY scripts/custody-deployment-check.ts ./scripts/custody-deployment-check.ts
COPY --from=randomx-build /native/build/wikideck-randomx ./native/wikideck-randomx
RUN mkdir -p /app/data && chown node:node /app/data
USER node
EXPOSE 3001
HEALTHCHECK --interval=30s --timeout=5s --start-period=60s --retries=3 \
    CMD ["node", "-e", "fetch('http://127.0.0.1:3001/healthz', {signal: AbortSignal.timeout(4000)}).then(r => process.exit(r.ok ? 0 : 1)).catch(() => process.exit(1))"]
# Node 24 strips the server's erasable TypeScript; no tsx/dev dependencies at runtime.
CMD ["node", "--experimental-strip-types", "server/index.ts"]

# Explicit one-shot maintenance image, derived from runtime so it has no development dependencies.
FROM runtime AS custody-backup
USER root
RUN apk add --no-cache postgresql-client
COPY scripts/custody-pair-backup.ts ./scripts/custody-pair-backup.ts
USER node
ENTRYPOINT ["node", "--experimental-strip-types", "scripts/custody-pair-backup.ts"]