# Duoqi API - Multi-stage Dockerfile
# 阶段 1: 构建依赖
FROM oven/bun:1.1 AS base
WORKDIR /app

# 复制依赖文件
COPY package.json bun.lock ./

# 阶段 2: 安装依赖
FROM base AS install
RUN bun install --frozen-lockfile --production

# 阶段 3: 构建应用
FROM base AS build
COPY --from=install /app/node_modules ./node_modules
COPY . .

# 类型检查和编译
RUN bun run typecheck
RUN bun run build

# 阶段 4: 生产镜像
FROM oven/bun:1.1 AS release
WORKDIR /app

# 创建非 root 用户
RUN addgroup --system --gid 1001 nodejs
RUN adduser --system --uid 1001 bun

# 复制生产依赖和构建产物
COPY --from=install /app/node_modules ./node_modules
COPY --from=build /app/dist ./dist
COPY --from=build /app/db ./db
COPY --from=build /app/package.json ./

# 设置权限
RUN chown -R bun:nodejs /app
USER bun

# 暴露端口
EXPOSE 3000

# 健康检查
HEALTHCHECK --interval=30s --timeout=10s --start-period=40s --retries=3 \
  CMD curl -f http://localhost:3000/health || exit 1

# 启动应用
CMD ["node", "dist/index.js"]
