FROM node:22-slim

WORKDIR /app

# Install pnpm
RUN npm install -g pnpm

# Install build tools for native dependencies (node-crc, @discordjs/opus)
RUN apt-get update -qq && apt-get install -y -qq --no-install-recommends python3 make g++ wget && rm -rf /var/lib/apt/lists/*

# Create non-root user
RUN groupadd --system app && useradd --system -g app app

# Copy dependency definition files first for better caching
COPY services/backend/package.json services/backend/pnpm-lock.yaml* ./services/backend/

# Copy patches (pnpm patchedDependencies)
COPY patches ./patches

# Copy service source (shared code is embedded in src/shared/)
COPY services/backend/ ./services/backend/

# Install dependencies
RUN --mount=type=cache,id=pnpm-store,target=/root/.local/share/pnpm/store \
    cd services/backend && pnpm install --frozen-lockfile

# Build backend
RUN --mount=type=cache,id=pnpm-store,target=/root/.local/share/pnpm/store \
    cd services/backend && pnpm run build

# Own dist + node_modules by non-root user
RUN chown -R app:app /app

# Switch to non-root user
USER app

# Expose port
EXPOSE 3000

# Healthcheck — backend serves HTTP on port 3000
HEALTHCHECK --interval=30s --timeout=10s --start-period=15s --retries=3 \
  CMD wget -qO- http://localhost:3000/api/health || exit 1

# Start backend
CMD ["node", "services/backend/dist/index.js"]