FROM node:20-alpine AS builder
WORKDIR /app

# Copy SDK
COPY ../encryptid-sdk/ /opt/encryptid-sdk/

# Install dependencies
COPY package.json package-lock.json* ./
RUN sed -i 's|"file:../../encryptid-sdk"|"file:/opt/encryptid-sdk"|' package.json
RUN npm install --legacy-peer-deps 2>/dev/null || npm install --force

# Copy source
COPY src/ ./src/
COPY public/ ./public/
COPY next.config.ts tsconfig.json postcss.config.mjs ./

# Build
RUN npm run build

# ── Production ────────────────────────────────────────────
FROM node:20-alpine AS runner
WORKDIR /app
ENV NODE_ENV=production

RUN addgroup --system --gid 1001 nodejs && \
    adduser --system --uid 1001 nextjs

COPY --from=builder /app/.next/standalone ./
COPY --from=builder /app/.next/static ./.next/static
COPY --from=builder /app/public ./public

USER nextjs
EXPOSE 3000

ENV HOSTNAME=0.0.0.0
CMD ["node", "server.js"]