# syntax=docker/dockerfile:1

FROM oven/bun:1.3.14 AS base
WORKDIR /app

FROM base AS install
COPY package.json bun.lock ./
COPY apps/web/package.json apps/web/package.json
COPY apps/worker/package.json apps/worker/package.json
COPY apps/mobile/package.json apps/mobile/package.json
COPY packages/domain/package.json packages/domain/package.json
COPY packages/email/package.json packages/email/package.json
RUN --mount=type=cache,target=/root/.bun/install/cache,sharing=locked \
    for attempt in 1 2 3; do \
      bun install --frozen-lockfile --filter @beenvoice/web && exit 0; \
      echo "Bun install failed (attempt ${attempt}/3); retrying" >&2; \
    done; \
    exit 1

FROM base AS worker-install
COPY package.json bun.lock ./
COPY apps/web/package.json apps/web/package.json
COPY apps/worker/package.json apps/worker/package.json
COPY apps/mobile/package.json apps/mobile/package.json
COPY packages/domain/package.json packages/domain/package.json
COPY packages/email/package.json packages/email/package.json
RUN --mount=type=cache,target=/root/.bun/install/cache,sharing=locked \
    for attempt in 1 2 3; do \
      bun install --frozen-lockfile --filter @beenvoice/worker && exit 0; \
      echo "Bun install failed (attempt ${attempt}/3); retrying" >&2; \
    done; \
    exit 1

# Next's production build runs under Node because Bun can fail during the
# page-data worker phase on Linux arm64. Dependencies still come from Bun.
FROM node:22-bookworm-slim AS build
WORKDIR /app
COPY --from=install /app ./
COPY . .

ARG NEXT_PUBLIC_APP_URL=http://localhost:3000
ARG BETTER_AUTH_URL=http://localhost:3000
ENV DOCKER_BUILD=1 \
    DISABLE_REACT_COMPILER=1 \
    NODE_ENV=production \
    SKIP_ENV_VALIDATION=1 \
    NEXT_TELEMETRY_DISABLED=1 \
    BETTER_AUTH_URL=${BETTER_AUTH_URL} \
    NEXT_PUBLIC_APP_URL=${NEXT_PUBLIC_APP_URL} \
    AUTH_SECRET=docker-build-placeholder-secret-do-not-use \
    DATABASE_URL=postgres://postgres:postgres@localhost:5432/postgres

WORKDIR /app/apps/web
RUN node ./node_modules/next/dist/bin/next build

FROM base AS release
ENV NODE_ENV=production \
    PORT=3000 \
    HOSTNAME=0.0.0.0 \
    NEXT_TELEMETRY_DISABLED=1

COPY --from=install /app/node_modules ./node_modules
COPY --from=install /app/apps/web/node_modules ./apps/web/node_modules
COPY --from=build /app/package.json ./package.json
COPY --from=build /app/apps/web/package.json ./apps/web/package.json
COPY --from=build /app/packages/domain ./packages/domain
COPY --from=build /app/packages/email ./packages/email
COPY --from=build /app/apps/web/.next ./apps/web/.next
COPY --from=build /app/apps/web/public ./apps/web/public
COPY --from=build /app/apps/web/drizzle.config.ts ./apps/web/drizzle.config.ts
COPY --from=build /app/apps/web/drizzle ./apps/web/drizzle
COPY --from=build /app/apps/web/src/server/db/migrate.ts ./apps/web/src/server/db/migrate.ts

RUN chmod -R a+rX apps/web/drizzle apps/web/public apps/web/src/server/db/migrate.ts

USER bun
EXPOSE 3000
WORKDIR /app/apps/web
CMD ["sh", "-c", "bun src/server/db/migrate.ts && bun run start"]

FROM base AS worker
ENV NODE_ENV=production \
    NEXT_TELEMETRY_DISABLED=1

COPY --from=worker-install /app ./
COPY apps/web/src ./apps/web/src
COPY apps/web/tsconfig.json ./apps/web/tsconfig.json
COPY apps/worker ./apps/worker
COPY packages/domain ./packages/domain
COPY packages/email ./packages/email
RUN ln -s ../worker/node_modules apps/web/node_modules

USER bun
WORKDIR /app/apps/worker
CMD ["bun", "run", "start"]

# Keep the web application as the default Dockerfile target.
FROM release AS final
