FROM node:24.18.0-bookworm-slim AS frontend

WORKDIR /web
COPY web/package.json web/package-lock.json ./
RUN npm ci
COPY web ./
RUN npm test && npm run check && npm run build

FROM haskell:9.10.3-slim-bookworm AS build

RUN apt-get update \
  && apt-get install -y --no-install-recommends \
       libpq-dev \
       pkg-config \
       zlib1g-dev \
       ca-certificates \
  && rm -rf /var/lib/apt/lists/*

WORKDIR /src

COPY nuthatch.cabal cabal.project ./
RUN cabal update \
  && cabal build --only-dependencies all

COPY sql ./sql
COPY app ./app
COPY src ./src
COPY test ./test

RUN cabal build exe:nuthatch exe:nuthatch-storage-integration exe:nuthatch-recovery-probe exe:nuthatch-protocol-conformance exe:nuthatch-runtime-probe exe:nuthatch-auth-probe exe:nuthatch-product-probe exe:nuthatch-idempotency-probe exe:nuthatch-streaming-probe exe:nuthatch-runtime-http-probe exe:nuthatch-runtime-audit-probe exe:nuthatch-fixture-probe exe:nuthatch-dependency-probe \
  && mkdir -p /out \
  && cp "$(cabal list-bin exe:nuthatch)" /out/nuthatch \
  && cp "$(cabal list-bin exe:nuthatch-storage-integration)" /out/nuthatch-storage-integration \
  && cp "$(cabal list-bin exe:nuthatch-recovery-probe)" /out/nuthatch-recovery-probe \
  && cp "$(cabal list-bin exe:nuthatch-protocol-conformance)" /out/nuthatch-protocol-conformance \
  && cp "$(cabal list-bin exe:nuthatch-runtime-probe)" /out/nuthatch-runtime-probe \
  && cp "$(cabal list-bin exe:nuthatch-auth-probe)" /out/nuthatch-auth-probe \
  && cp "$(cabal list-bin exe:nuthatch-product-probe)" /out/nuthatch-product-probe \
  && cp "$(cabal list-bin exe:nuthatch-idempotency-probe)" /out/nuthatch-idempotency-probe \
  && cp "$(cabal list-bin exe:nuthatch-streaming-probe)" /out/nuthatch-streaming-probe \
  && cp "$(cabal list-bin exe:nuthatch-runtime-http-probe)" /out/nuthatch-runtime-http-probe \
  && cp "$(cabal list-bin exe:nuthatch-runtime-audit-probe)" /out/nuthatch-runtime-audit-probe \
  && cp "$(cabal list-bin exe:nuthatch-fixture-probe)" /out/nuthatch-fixture-probe \
  && cp "$(cabal list-bin exe:nuthatch-dependency-probe)" /out/nuthatch-dependency-probe

FROM debian:bookworm-slim AS runtime-base

RUN apt-get update \
  && apt-get install -y --no-install-recommends \
       libpq5 \
       ca-certificates \
       curl \
       openssl \
  && rm -rf /var/lib/apt/lists/* \
  && groupadd --system --gid 10001 nuthatch \
  && useradd --system --uid 10001 --gid 10001 --no-create-home nuthatch

WORKDIR /app
COPY sql ./sql
COPY --from=frontend /web/dist ./web/dist
USER 10001:10001

FROM runtime-base AS test-runtime

COPY --from=build /out/nuthatch /usr/local/bin/nuthatch
COPY --from=build /out/nuthatch-storage-integration /usr/local/bin/nuthatch-storage-integration
COPY --from=build /out/nuthatch-recovery-probe /usr/local/bin/nuthatch-recovery-probe
COPY --from=build /out/nuthatch-protocol-conformance /usr/local/bin/nuthatch-protocol-conformance
COPY --from=build /out/nuthatch-runtime-probe /usr/local/bin/nuthatch-runtime-probe
COPY --from=build /out/nuthatch-auth-probe /usr/local/bin/nuthatch-auth-probe
COPY --from=build /out/nuthatch-product-probe /usr/local/bin/nuthatch-product-probe
COPY --from=build /out/nuthatch-idempotency-probe /usr/local/bin/nuthatch-idempotency-probe
COPY --from=build /out/nuthatch-streaming-probe /usr/local/bin/nuthatch-streaming-probe
COPY --from=build /out/nuthatch-runtime-http-probe /usr/local/bin/nuthatch-runtime-http-probe
COPY --from=build /out/nuthatch-runtime-audit-probe /usr/local/bin/nuthatch-runtime-audit-probe
COPY --from=build /out/nuthatch-fixture-probe /usr/local/bin/nuthatch-fixture-probe
COPY --from=build /out/nuthatch-dependency-probe /usr/local/bin/nuthatch-dependency-probe
CMD ["nuthatch"]

FROM runtime-base AS runtime

COPY --from=build /out/nuthatch /usr/local/bin/nuthatch

EXPOSE 8080
CMD ["nuthatch"]