FROM node:24.18.0-alpine AS build
WORKDIR /app

COPY package.json package-lock.json ./
COPY apps/frontend/package.json apps/frontend/package.json
COPY apps/backend/package.json apps/backend/package.json
COPY packages/api-client/package.json packages/api-client/package.json
RUN npm ci

COPY . .
RUN npm run build
RUN mkdir -p apps/backend/dist/public \
  && cp -R apps/frontend/dist/frontend/browser/* apps/backend/dist/public/ \
  && npm prune --omit=dev --workspaces --include-workspace-root

FROM node:24.18.0-alpine AS runtime
ENV NODE_ENV=production
WORKDIR /app

RUN addgroup -S app && adduser -S app -G app

COPY --from=build --chown=app:app /app/package.json /app/package-lock.json ./
COPY --from=build --chown=app:app /app/node_modules ./node_modules
COPY --from=build --chown=app:app /app/apps/backend/package.json ./apps/backend/package.json
COPY --from=build --chown=app:app /app/apps/backend/dist ./apps/backend/dist

USER app
EXPOSE 3000
HEALTHCHECK --interval=30s --timeout=5s --start-period=20s --retries=3 CMD node -e "fetch('http://127.0.0.1:3000/health/ready').then(r=>process.exit(r.ok?0:1)).catch(()=>process.exit(1))"
CMD ["node", "apps/backend/dist/main.js"]