# ---------- Build stage ----------
FROM node:22-alpine AS build
WORKDIR /app

COPY package.json package-lock.json ./
RUN npm ci

COPY . .
RUN npm run build

# ---------- Runtime stage ----------
FROM node:22-alpine
WORKDIR /app
ENV NODE_ENV=production

# production dependencies only (ws)
COPY package.json package-lock.json ./
RUN npm ci --omit=dev && npm cache clean --force

COPY server/server.mjs server/server.mjs
COPY server/db.mjs server/db.mjs
COPY shared/ shared/
COPY --from=build /app/dist dist/

# persistent account/progress database (mount a volume here on the host)
RUN mkdir -p /app/data && chown -R node:node /app/data
VOLUME ["/app/data"]

# run as unprivileged user
USER node

EXPOSE 3001
ENV PORT=3001
ENV DATA_DIR=/app/data

HEALTHCHECK --interval=30s --timeout=5s --start-period=10s --retries=3 \
  CMD node -e "fetch('http://localhost:3001/health').then(r=>process.exit(r.ok?0:1)).catch(()=>process.exit(1))"

CMD ["node", "server/server.mjs"]