# Development Dockerfile to be run from the docker-compose.yml (run: docker compose up)

FROM python:3.11-slim

ENV DEBIAN_FRONTEND=noninteractive

# Update package lists

RUN apt-get -o Acquire::Check-Valid-Until=false -o Acquire::AllowInsecureRepositories=true -o Acquire::AllowDowngradeToInsecureRepositories=true update

# Install base dependencies + Python build dependencies for pyenv

# make g++ gcc build-essential are needed for node-gyp

# Others are common for building Python versions with pyenv

RUN apt-get install -y --no-install-recommends \

curl make g++ gcc build-essential git \

libssl-dev zlib1g-dev libbz2-dev \

libreadline-dev libsqlite3-dev wget llvm \

libncursesw5-dev xz-utils tk-dev libxml2-dev libxmlsec1-dev libffi-dev liblzma-dev \

&& rm -rf /var/lib/apt/lists/*

# Install Node.js

RUN curl -sL https://deb.nodesource.com/setup_22.x -o nodesource_setup.sh \

&& bash ./nodesource_setup.sh \

&& apt-get install -y nodejs \

&& rm nodesource_setup.sh \

&& npm install -g pnpm

# Define user and home directory consistently

ENV USER_NAME=typedai

ENV HOMEDIR=/home/${USER_NAME}

# Create user with a specific home directory

# Consider adding -u <UID> if you need a fixed UID, e.g., -u 1000

RUN useradd --create-home -d ${HOMEDIR} -g users ${USER_NAME}

# Set working directory (HOMEDIR is now defined)

WORKDIR ${HOMEDIR}

# Copy application files that are needed before USER switch or owned by root initially (if any)

# For .husky and package.json, it's usually better to copy them after USER switch

# so the user owns them, or chown them.

# Copy .python-version file from build context (TYPEDAI_HOME) to the user's home directory in the image

# This must exist in your TYPEDAI_HOME directory.

COPY .python-version ${HOMEDIR}/.python-version

# Ensure the user will own it (important if copied before USER switch, good practice anyway)

RUN chown ${USER_NAME}:users ${HOMEDIR}/.python-version

# Copy .husky files (assuming they are at the root of TYPEDAI_HOME)

RUN mkdir ".husky"

COPY .husky/install.mjs .husky/install.mjs

RUN chown -R ${USER_NAME}:users ${HOMEDIR}/.husky

# Copy main package.json and install dependencies

COPY package*.json ./

# Make chown of lock file optional

RUN chown ${USER_NAME}:users package.json package-lock.json 2>/dev/null || chown ${USER_NAME}:users package.json

# Switch to non-root user

USER ${USER_NAME}

# Now, as the user, install npm dependencies

RUN pnpm install

# Install Angular dependencies and build Angular app

# Ensure frontend/package.json exists in your TYPEDAI_HOME/frontend

WORKDIR ${HOMEDIR}/frontend

COPY --chown=${USER_NAME}:users frontend/package.json ./

# COPY frontend/yarn.lock ./ # if you use yarn

# If frontend/package-lock.json exists in your TYPEDAI_HOME/frontend, copy it with correct ownership.

# If it doesn't exist, this COPY command will fail. If it's optional, remove this line.

COPY --chown=${USER_NAME}:users frontend/package-lock.json ./

RUN pnpm install

# RUN npm run build # If you need to build frontend during Docker image creation

# Set work directory back to home

WORKDIR ${HOMEDIR}

# Install pyenv for the typedai user

RUN git clone https://github.com/pyenv/pyenv.git ${HOMEDIR}/.pyenv

# Add pyenv bin directory to the PATH for the typedai user

ENV PYENV_ROOT="${HOMEDIR}/.pyenv"

# Add shims dir too, and move comment

ENV PATH="${PYENV_ROOT}/bin:${PYENV_ROOT}/shims:${PATH}"

# This comment was on the ENV PATH line before, moving it here:

# This sets PATH for subsequent RUN commands in Dockerfile and for the runtime environment

# Initialize pyenv, install Python version from .python-version, and set it globally for pyenv

# Ensure .python-version was copied earlier and is readable

RUN eval "$(pyenv init --path)" && \

eval "$(pyenv init -)" && \

eval "$(pyenv virtualenv-init -)" && \

pyenv install --skip-existing $(cat ${HOMEDIR}/.python-version) && \

pyenv global $(cat ${HOMEDIR}/.python-version) && \

pyenv rehash

ENV NODE_ENV=development

# Needed to avoid "fatal: detected dubious ownership in repository"

# This applies to /home/typedai because it's mounted from the host and owned by host's user in many cases

RUN git config --global --add safe.directory ${HOMEDIR}

# If your /workspace is also a git repo and you run git commands there:

# RUN git config --global --add safe.directory /workspace

EXPOSE 4200

EXPOSE 3000

CMD ["./bin/cmd-script"]