FROM node:20-slim AS builder

WORKDIR /app

RUN apt-get update -qq && apt-get install -y -qq python3 python-is-python3 curl openssl bash git && rm -rf /var/lib/apt/lists/*

COPY package.json package-lock.json ./
COPY packages/casan-control-panel/backend/package.json ./packages/casan-control-panel/backend/
COPY packages/casan-control-panel/frontend/package.json ./packages/casan-control-panel/frontend/
COPY apps/okr/backend/package.json ./apps/okr/backend/
COPY apps/okr/frontend/package.json ./apps/okr/frontend/

RUN npm ci

COPY packages/casan-control-panel/backend ./packages/casan-control-panel/backend

RUN npm run build -w @casan/control-panel-backend

FROM node:20-slim AS runtime

WORKDIR /app

RUN apt-get update -qq && apt-get install -y -qq python3 python-is-python3 curl openssl bash git && rm -rf /var/lib/apt/lists/*

COPY package.json package-lock.json ./
COPY packages/casan-control-panel/backend/package.json ./packages/casan-control-panel/backend/
COPY packages/casan-control-panel/frontend/package.json ./packages/casan-control-panel/frontend/
COPY --from=builder /app/node_modules ./node_modules
COPY --from=builder /app/packages/casan-control-panel/backend/dist ./packages/casan-control-panel/backend/dist
COPY packages/casan-harness/scripts ./packages/casan-harness/scripts
COPY packages/casan-harness/kernel ./packages/casan-harness/kernel
COPY packages/casan-harness/config ./packages/casan-harness/config
COPY packages/casan-harness/security ./packages/casan-harness/security
COPY packages/casan-harness/config/project-registry.json ./packages/casan-harness/config/project-registry.json
COPY packages/casan-devkit ./packages/casan-devkit

# Read-only, build-time workspace snapshots. Goal orchestration resolves only roots
# registered in project-registry.json and never accepts a browser-supplied path.
COPY apps/okr/domain ./apps/okr/domain
COPY apps/service-desk ./apps/service-desk
COPY apps/okr/frontend ./apps/okr/frontend
COPY apps/okr/backend ./apps/okr/backend
COPY docs/technical_architecture.md ./docs/technical_architecture.md

WORKDIR /app/packages/casan-control-panel/backend

ENV NODE_ENV=production
ENV CASAN_PROFILE=prod
ENV CASAN_CP_STRICT=1
ENV CP_BIND=0.0.0.0
ENV CP_PORT=3010

EXPOSE 3010

CMD ["node", "dist/main.js"]