ARG NODE_IMAGE=m.daocloud.io/docker.io/library/node:22
ARG NPM_REGISTRY=https://registry.npmmirror.com

FROM ${NODE_IMAGE} AS deps
WORKDIR /app
# FROM 之前声明的 ARG 不会自动进入每个构建阶段；
# 只要 RUN 命令里要使用 registry，就需要在当前阶段重新声明。
ARG NPM_REGISTRY=https://registry.npmmirror.com

COPY package.json pnpm-lock.yaml pnpm-workspace.yaml ./
# 仓库中提交的 lockfile 是本次构建的可信输入；
# 这里避免 pnpm 11 在 Docker 构建期间重新用 registry 元数据校验供应链策略。
RUN corepack enable \
  && pnpm config set registry ${NPM_REGISTRY} \
  && pnpm install --frozen-lockfile --config.trust-lockfile=true

FROM ${NODE_IMAGE} AS builder
WORKDIR /app
ENV NEXT_TELEMETRY_DISABLED=1

COPY --from=deps /app/node_modules ./node_modules
COPY . .
# 每个 Docker 阶段都有独立 PATH，因此使用 pnpm 前需要重新启用 corepack。
RUN corepack enable
RUN mkdir -p public/audio
RUN pnpm build

FROM ${NODE_IMAGE} AS runner
WORKDIR /app
ARG NPM_REGISTRY=https://registry.npmmirror.com

ENV NODE_ENV=production
ENV NEXT_TELEMETRY_DISABLED=1
ENV HOSTNAME=0.0.0.0
ENV PORT=3000
ENV AUDIO_DIRECTORY=/app/public/audio

COPY package.json pnpm-lock.yaml pnpm-workspace.yaml ./
# 运行时镜像只安装生产依赖。
RUN corepack enable \
  && pnpm config set registry ${NPM_REGISTRY} \
  && pnpm install --prod --frozen-lockfile --config.trust-lockfile=true \
  && pnpm store prune

COPY --from=builder /app/.next ./.next
COPY --from=builder /app/public ./public
COPY --from=builder /app/next.config.ts ./next.config.ts

RUN mkdir -p /app/data /app/public/audio

EXPOSE 3000

CMD ["pnpm", "start"]