Dockerfile

FROM node:22-alpine AS frontend

WORKDIR /app/web
COPY web/package.json web/package-lock.json ./
RUN npm ci
COPY web/ .
ENV NEXT_PUBLIC_BASE_PATH=/__HAPPYVIEW_BP__
RUN npm run build

FROM rust:1.96.1-bookworm AS builder

WORKDIR /app

# Build dependencies first (cached until Cargo.toml/Cargo.lock change)
# Every workspace member needs its manifest and a stub source here, or cargo
# cannot resolve the workspace and the dependency-cache layer fails outright.
# Adding a crate under crates/ means adding it to this list too.
COPY Cargo.toml Cargo.lock ./
COPY crates/happyview-nsid/Cargo.toml crates/happyview-nsid/
COPY crates/happyview-plc/Cargo.toml crates/happyview-plc/
COPY crates/happyview-scopes/Cargo.toml crates/happyview-scopes/
RUN mkdir -p crates/happyview-nsid/src crates/happyview-plc/src crates/happyview-scopes/src \
    && touch crates/happyview-nsid/src/lib.rs crates/happyview-plc/src/lib.rs crates/happyview-scopes/src/lib.rs
RUN mkdir -p src/bin && echo "fn main() {}" > src/main.rs && touch src/lib.rs && echo "fn main() {}" > src/bin/migrate_lua_sql.rs && echo "fn main() {}" > src/bin/migrate_space_cids.rs
ENV SQLX_OFFLINE=true
RUN cargo build --release && rm -rf src target/release/.fingerprint/happyview-*

# Build application code
COPY src/ src/
COPY crates/ crates/
COPY migrations/ migrations/
ARG HAPPYVIEW_VERSION
ENV HAPPYVIEW_VERSION=$HAPPYVIEW_VERSION

# Cargo.toml's package version is deliberately not bumped per release, so
# CARGO_PKG_VERSION reports 0.1.0 unless it is stamped here. Do it before
# compiling so crate metadata matches the tag this image is built from --
# telemetry reported 0.1.0 fleet-wide for exactly this reason. Local builds
# pass no build-arg and keep the repo version. See src/version.rs.
RUN set -eu; \
    v="${HAPPYVIEW_VERSION#v}"; \
    if [ -n "$v" ]; then \
      test "$(grep -c '^version = ' Cargo.toml)" = 1 \
        || { echo "Cargo.toml: expected exactly one top-level 'version =' line" >&2; exit 1; }; \
      sed -i "s|^version = .*|version = \"$v\"|" Cargo.toml; \
      grep -qx "version = \"$v\"" Cargo.toml \
        || { echo "Cargo.toml: version stamp failed" >&2; exit 1; }; \
      echo "stamped Cargo.toml version = $v"; \
    else \
      echo "no HAPPYVIEW_VERSION build-arg; keeping repo version"; \
    fi

RUN cargo build --release

FROM scratch AS binary
COPY --from=builder /app/target/release/happyview /target/release/happyview

FROM debian:bookworm-slim

RUN apt-get update && apt-get install -y --no-install-recommends \
    ca-certificates \
    && rm -rf /var/lib/apt/lists/*

# NOTE: The container runs as root. A previous attempt to run as a non-root user
# (uid 10001) broke upgrades for existing SQLite deployments — mounted data
# volumes (e.g. Railway volumes, root-owned bind mounts) were not writable by the
# non-root user, causing "attempt to write a readonly database" on the first
# migration. Running as root sidesteps volume-ownership entirely. Non-root will be
# reintroduced as a documented breaking change in a future major release, with the
# entrypoint chowning the actual (operator-configurable) data directory before
# dropping privileges. See the L5 note in the security review.
WORKDIR /app

COPY --from=builder /app/target/release/happyview /usr/local/bin/happyview
RUN chmod +x /usr/local/bin/happyview
COPY migrations/ /app/migrations
COPY --from=frontend /app/web/out /srv/static
COPY entrypoint.sh /entrypoint.sh
RUN chmod +x /entrypoint.sh && touch /srv/static/.base-path-pending

ENV STATIC_DIR=/srv/static

EXPOSE 3000

ENTRYPOINT ["/entrypoint.sh"]