# syntax=docker/dockerfile:1

# --- web UI (PWA) -------------------------------------------------------------
FROM node:22-alpine AS web
WORKDIR /web
COPY web/package.json web/package-lock.json ./
RUN npm ci --no-audit --no-fund
COPY web/ ./
RUN npm run build

# --- server -------------------------------------------------------------------
FROM rust:1-bookworm AS server
WORKDIR /src
COPY config.example.toml ./
COPY Cargo.toml Cargo.lock ./
COPY core/Cargo.toml ./core/
COPY server/Cargo.toml ./server/
COPY cli/Cargo.toml ./cli/
# Cache dependencies separately from the sources (stub crates first).
RUN mkdir -p core/src server/src cli/src \
    && echo '' > core/src/lib.rs && echo 'fn main(){}' > server/src/main.rs && echo 'fn main(){}' > cli/src/main.rs \
    && cargo build --release -p codecraft && rm -rf core/src server/src cli/src
COPY core/src ./core/src
COPY server/src ./server/src
COPY server/resources-cli ./server/resources-cli
COPY cli/src ./cli/src
ARG GIT_COMMIT=""
ENV CODECRAFT_COMMIT=${GIT_COMMIT}
RUN touch core/src/lib.rs server/src/main.rs && cargo build --release -p codecraft

# --- terminal client (static Linux binaries for x86_64 and aarch64) -----------
FROM rust:1-bookworm AS cli
RUN apt-get update && apt-get install -y --no-install-recommends cmake xz-utils && rm -rf /var/lib/apt/lists/*
ARG ZIG_VERSION=0.17.1
RUN curl -fsSL https://ziglang.org/download/${ZIG_VERSION}/zig-$(uname -m)-linux-${ZIG_VERSION}.tar.xz | tar -xJ -C /opt \
    && ln -s /opt/zig-*/zig /usr/local/bin/zig \
    && cargo install --locked cargo-zigbuild \
    && rustup target add x86_64-unknown-linux-musl aarch64-unknown-linux-musl
WORKDIR /src
COPY Cargo.toml Cargo.lock ./
COPY core ./core
COPY server/Cargo.toml ./server/
COPY server/resources ./server/resources
COPY cli ./cli
RUN mkdir -p server/src && echo 'fn main(){}' > server/src/main.rs \
    && cargo zigbuild --release -p codecraft-cli --target x86_64-unknown-linux-musl --target aarch64-unknown-linux-musl \
    && mkdir -p /out && cp target/x86_64-unknown-linux-musl/release/codecraft /out/codecraft-linux-x86_64 \
    && cp target/aarch64-unknown-linux-musl/release/codecraft /out/codecraft-linux-aarch64

# --- runtime ------------------------------------------------------------------
# Node is included so agents can work on JS projects and run npx-based MCP servers.
FROM node:22-bookworm-slim
RUN apt-get update && apt-get install -y --no-install-recommends \
        ca-certificates bash git curl wget ripgrep jq less procps file bubblewrap \
        unzip zip xz-utils bzip2 p7zip-full unar innoextract unshield cabextract msitools arj lhasa \
        python3 python3-pip python3-venv pipx \
        build-essential pkg-config libssl-dev cmake zlib1g-dev binutils-multiarch \
        chromium fonts-dejavu-core fonts-noto-color-emoji poppler-utils openmpt123 \
        openscad xvfb xauth \
        openssh-client rsync mc \
    && rm -rf /var/lib/apt/lists/*
# Language servers for diagnostics after edits (rust-analyzer/gopls/clangd can be
# installed by agents: rustup component add rust-analyzer, go install …).
RUN npm install -g typescript@5 typescript-language-server pyright && npm cache clean --force
COPY --from=server /src/target/release/codecraft /usr/local/bin/codecraft
COPY --from=web /web/dist /app/web
COPY --from=cli /out /app/cli
COPY server/ghidra /app/ghidra
COPY server/resources /app/resources
# The agent's home lives on the data volume: tools it installs in user space
# (pip --user, pipx, rustup, npm -g, downloaded binaries) survive rebuilds.
ENV CODECRAFT_WEB=/app/web \
    CODECRAFT_CONFIG=/data/config.toml \
    HOME=/data/home \
    PATH=/data/home/.local/bin:/data/home/.cargo/bin:/data/home/.npm-global/bin:/usr/local/bin:/usr/bin:/bin \
    NPM_CONFIG_PREFIX=/data/home/.npm-global \
    PIP_BREAK_SYSTEM_PACKAGES=1 \
    PIPX_HOME=/data/home/.local/pipx \
    PIPX_BIN_DIR=/data/home/.local/bin \
    RUST_LOG=info
RUN mkdir -p /data /workspace && chmod 777 /data /workspace
VOLUME ["/data"]
EXPOSE 8787
# Run as the host user (see docker-compose.yml) so files in /workspace keep their owner.
USER 1000:1000
ENTRYPOINT ["codecraft"]