FROM node:20.20.2-alpine3.23@sha256:fb4cd12c85ee03686f6af5362a0b0d56d50c58a04632e6c0fb8363f609372293 AS frontend-build

WORKDIR /frontend
COPY frontend/package.json frontend/package-lock.json ./
RUN npm ci
COPY frontend/ ./
RUN npm run build

FROM postgres:16.15-bookworm@sha256:bb3e1a57e5407e0a5280b4211980a5e537f4abd234a87014ac979849a78dd825 AS runtime

ARG GEOINTEL_INSTALL_AI=false
ARG GEOINTEL_TORCH_INDEX_URL=https://download.pytorch.org/whl/cu128
ARG GEOINTEL_TORCH_VERSION=2.11.0
ARG GEOINTEL_TORCHVISION_VERSION=0.26.0
ARG GEOINTEL_ULTRALYTICS_VERSION=8.4.99
ARG GEOINTEL_SETUPTOOLS_VERSION=81.0.0
ARG GEOINTEL_WHEEL_VERSION=0.47.0

ENV GEOINTEL_ENV=production \
    GEOINTEL_API_PREFIX=/api/v1 \
    GEOINTEL_STORAGE_ROOT=/app/storage \
    STORAGE_ROOT=/app/storage \
    GEOINTEL_ALL_IN_ONE=1 \
    PATH="/opt/geointel/venv/bin:${PATH}"

RUN apt-get update && apt-get install -y --no-install-recommends \
    build-essential \
    curl \
    gdal-bin \
    libgl1 \
    libglib2.0-0 \
    libgdal-dev \
    libgeos-dev \
    libpq-dev \
    libproj-dev \
    libsm6 \
    libx11-6 \
    libxcb1 \
    libxext6 \
    libxrender1 \
    nginx \
    postgresql-16-postgis-3 \
    postgresql-16-postgis-3-scripts \
    proj-bin \
    python3-dev \
    python3-venv \
    && ln -sf /usr/bin/python3.11 /usr/local/bin/python3 \
    && ln -sf /usr/bin/python3.11 /usr/bin/python3 \
    && rm -rf /var/lib/apt/lists/*

WORKDIR /app

COPY deploy/unraid/gosu-setpriv /usr/local/bin/gosu
COPY backend/pyproject.toml /app/
COPY backend/requirements-runtime.lock /app/
COPY backend/app/__init__.py /app/app/__init__.py

RUN printf '# GeoIntel backend package metadata\n' > /app/README.md \
    && /usr/bin/python3.11 -m venv /opt/geointel/venv \
    && pip install --no-cache-dir --require-hashes -r requirements-runtime.lock \
    && if [ "$GEOINTEL_INSTALL_AI" = "true" ]; then \
         pip install --no-cache-dir \
           --index-url "$GEOINTEL_TORCH_INDEX_URL" \
           "torch==$GEOINTEL_TORCH_VERSION" \
           "torchvision==$GEOINTEL_TORCHVISION_VERSION" \
         && pip install --no-cache-dir \
           "ultralytics==$GEOINTEL_ULTRALYTICS_VERSION"; \
       fi \
    && pip install --no-cache-dir \
      "setuptools==$GEOINTEL_SETUPTOOLS_VERSION" \
      "wheel==$GEOINTEL_WHEEL_VERSION" \
    && pip check

COPY backend/ /app/
COPY fixtures/ /app/fixtures/

RUN python scripts/gis_import_smoke.py \
    && python scripts/yolo_preflight.py --json >/tmp/geointel-yolo-preflight.json \
    && rm -f /etc/nginx/sites-enabled/default \
    && mkdir -p /app/storage /run/nginx /var/log/nginx

COPY scripts/prepare_operator_real_data_samples.py /app/scripts/prepare_operator_real_data_samples.py
COPY scripts/provision_mol_municipality_workspace.py /app/scripts/provision_mol_municipality_workspace.py
COPY scripts/provision_mol_context_layers.py /app/scripts/provision_mol_context_layers.py
COPY scripts/provision_mol_dhmv.py /app/scripts/provision_mol_dhmv.py
COPY scripts/provision_regional_dhmv.py /app/scripts/provision_regional_dhmv.py
COPY scripts/provision_mol_flood_hazards.py /app/scripts/provision_mol_flood_hazards.py
COPY scripts/provision_regional_flood_hazards.py /app/scripts/provision_regional_flood_hazards.py
COPY scripts/provision_thematic_rasters.py /app/scripts/provision_thematic_rasters.py
COPY scripts/provision_mol_soil_map.py /app/scripts/provision_mol_soil_map.py
COPY scripts/provision_regional_soil_map.py /app/scripts/provision_regional_soil_map.py
COPY scripts/provision_mol_population_history.py /app/scripts/provision_mol_population_history.py
COPY scripts/statbel_population_preflight.py /app/scripts/statbel_population_preflight.py
COPY scripts/manage_statbel_population_release.py /app/scripts/manage_statbel_population_release.py
COPY scripts/provision_mol_historical_landuse.py /app/scripts/provision_mol_historical_landuse.py
COPY scripts/provision_regional_historical_landuse.py /app/scripts/provision_regional_historical_landuse.py
COPY scripts/provision_official_landuse_timeseries.py /app/scripts/provision_official_landuse_timeseries.py
COPY scripts/provision_waterinfo_station_history.py /app/scripts/provision_waterinfo_station_history.py
COPY scripts/provision_mol_bathymetry_profiles.py /app/scripts/provision_mol_bathymetry_profiles.py
COPY scripts/provision_flanders_geographic_scope.py /app/scripts/provision_flanders_geographic_scope.py
COPY scripts/provision_flanders_bathymetry_profiles.py /app/scripts/provision_flanders_bathymetry_profiles.py
COPY scripts/probe_mdk_bathymetry.py /app/scripts/probe_mdk_bathymetry.py
COPY scripts/import_spw_bathymetry.py /app/scripts/import_spw_bathymetry.py
COPY scripts/provision_walous_sources.py /app/scripts/provision_walous_sources.py
COPY scripts/provision_spw_terrain_source.py /app/scripts/provision_spw_terrain_source.py
COPY scripts/provision_mol_bwk_natura2000.py /app/scripts/provision_mol_bwk_natura2000.py
COPY scripts/provision_regional_bwk_natura2000.py /app/scripts/provision_regional_bwk_natura2000.py
COPY scripts/provision_agricultural_parcel_history.py /app/scripts/provision_agricultural_parcel_history.py
COPY scripts/manage_alz_agriculture_release.py /app/scripts/manage_alz_agriculture_release.py
COPY scripts/orthophoto_release_preflight.py /app/scripts/orthophoto_release_preflight.py
COPY scripts/manage_orthophoto_release.py /app/scripts/manage_orthophoto_release.py
COPY scripts/provision_buildings_addresses_register.py /app/scripts/provision_buildings_addresses_register.py
COPY scripts/provision_regional_timeseries.py /app/scripts/provision_regional_timeseries.py
COPY scripts/geographic_scopes.py /app/scripts/geographic_scopes.py
COPY scripts/provision_geographic_scope.py /app/scripts/provision_geographic_scope.py
COPY scripts/build_model_validation_scope_manifest.py /app/scripts/build_model_validation_scope_manifest.py
COPY scripts/provision_belgium_north_sea_scope.py /app/scripts/provision_belgium_north_sea_scope.py
COPY scripts/provision_release_golden_areas.py /app/scripts/provision_release_golden_areas.py
COPY scripts/provision_regional_grb_buildings.py /app/scripts/provision_regional_grb_buildings.py
COPY scripts/provision_regional_grb_context.py /app/scripts/provision_regional_grb_context.py
COPY scripts/audit_source_freshness.py /app/scripts/audit_source_freshness.py
COPY scripts/manage_grb_refresh.py /app/scripts/manage_grb_refresh.py
COPY scripts/export_operator_yolo_tile_dataset.py /app/scripts/export_operator_yolo_tile_dataset.py
COPY scripts/normalize_belgium_building_labels.py /app/scripts/normalize_belgium_building_labels.py
COPY scripts/assemble_belgium_building_corpus.py /app/scripts/assemble_belgium_building_corpus.py
COPY scripts/provision_belgium_building_training_portfolio.py /app/scripts/provision_belgium_building_training_portfolio.py
COPY scripts/audit_belgium_building_corpus.py /app/scripts/audit_belgium_building_corpus.py
COPY scripts/evaluate_belgium_building_candidate.py /app/scripts/evaluate_belgium_building_candidate.py
COPY scripts/assess_belgium_building_training_iteration.py /app/scripts/assess_belgium_building_training_iteration.py
COPY scripts/run_belgium_building_training_loop.py /app/scripts/run_belgium_building_training_loop.py
COPY scripts/build_failure_driven_yolo_sampling.py /app/scripts/build_failure_driven_yolo_sampling.py
COPY scripts/training_dataset_eligibility.py /app/scripts/training_dataset_eligibility.py
COPY scripts/training_release_manifest.py /app/scripts/training_release_manifest.py
COPY scripts/build_grayscale_yolo_dataset.py /app/scripts/build_grayscale_yolo_dataset.py
COPY scripts/audit_operator_yolo_dataset_quality.py /app/scripts/audit_operator_yolo_dataset_quality.py
COPY scripts/render_operator_yolo_label_qa_contact_sheets.py /app/scripts/render_operator_yolo_label_qa_contact_sheets.py
COPY scripts/render_operator_polygon_label_qa.py /app/scripts/render_operator_polygon_label_qa.py
COPY scripts/train_operator_yolo_detector.sh /app/scripts/train_operator_yolo_detector.sh
COPY scripts/verify_real_data_detection_qa_workflow.sh /app/scripts/verify_real_data_detection_qa_workflow.sh
COPY scripts/run_detection_quality_matrix.sh /app/scripts/run_detection_quality_matrix.sh
COPY scripts/run_multi_sample_detection_quality_matrix.sh /app/scripts/run_multi_sample_detection_quality_matrix.sh
COPY scripts/run_mol_operational_validation.sh /app/scripts/run_mol_operational_validation.sh
COPY scripts/export_detection_calibration_evidence.sh /app/scripts/export_detection_calibration_evidence.sh
COPY scripts/assemble_detection_calibration_evidence_portfolio.sh /app/scripts/assemble_detection_calibration_evidence_portfolio.sh
COPY scripts/build_fixed_threshold_evidence_portfolio_inputs.py /app/scripts/build_fixed_threshold_evidence_portfolio_inputs.py
COPY scripts/audit_detection_false_negative_evidence.py /app/scripts/audit_detection_false_negative_evidence.py
COPY scripts/audit_detection_false_positive_evidence.py /app/scripts/audit_detection_false_positive_evidence.py
COPY scripts/render_detection_false_positive_review_contact_sheets.py /app/scripts/render_detection_false_positive_review_contact_sheets.py
COPY scripts/render_detection_false_negative_review_contact_sheets.py /app/scripts/render_detection_false_negative_review_contact_sheets.py
COPY scripts/validate_detection_false_positive_review_decisions.py /app/scripts/validate_detection_false_positive_review_decisions.py
COPY scripts/validate_detection_false_negative_review_decisions.py /app/scripts/validate_detection_false_negative_review_decisions.py
COPY scripts/run_operator_hard_negative_detection_matrix.sh /app/scripts/run_operator_hard_negative_detection_matrix.sh
COPY scripts/run_background_corpus_split_matrix.sh /app/scripts/run_background_corpus_split_matrix.sh
COPY scripts/build_background_corpus_split_report.py /app/scripts/build_background_corpus_split_report.py
COPY scripts/build_detection_model_promotion_report.py /app/scripts/build_detection_model_promotion_report.py
COPY scripts/build_mol_operational_benchmark_report.py /app/scripts/build_mol_operational_benchmark_report.py
COPY scripts/run_split_background_promotion_workflow.sh /app/scripts/run_split_background_promotion_workflow.sh
COPY scripts/activate_promoted_yolo_candidate.py /app/scripts/activate_promoted_yolo_candidate.py
COPY scripts/migrate_runtime_model_provenance.py /app/scripts/migrate_runtime_model_provenance.py
COPY scripts/archive_technical_projects.py /app/scripts/archive_technical_projects.py
COPY scripts/runtime_state_report.py /app/scripts/runtime_state_report.py
COPY scripts/release_backup_guard.py /app/scripts/release_backup_guard.py
COPY scripts/audit_data_operations.py /app/scripts/audit_data_operations.py
COPY scripts/cleanup_storage_artifacts.py /app/scripts/cleanup_storage_artifacts.py
COPY deploy/unraid/nginx-all-in-one.conf /etc/nginx/conf.d/default.conf
COPY deploy/unraid/all-in-one-start.sh /usr/local/bin/geointel-all-in-one-start
COPY --from=frontend-build /frontend/dist/ /usr/share/nginx/html/

RUN chmod +x /usr/local/bin/geointel-all-in-one-start /usr/local/bin/gosu \
    && chmod +x \
      /app/scripts/train_operator_yolo_detector.sh \
      /app/scripts/verify_real_data_detection_qa_workflow.sh \
      /app/scripts/run_detection_quality_matrix.sh \
      /app/scripts/run_multi_sample_detection_quality_matrix.sh \
      /app/scripts/run_mol_operational_validation.sh \
      /app/scripts/export_detection_calibration_evidence.sh \
      /app/scripts/assemble_detection_calibration_evidence_portfolio.sh \
      /app/scripts/run_operator_hard_negative_detection_matrix.sh \
      /app/scripts/run_background_corpus_split_matrix.sh \
      /app/scripts/run_split_background_promotion_workflow.sh

ARG GEOINTEL_BUILD_SHA=unknown
ARG GEOINTEL_BUILD_TIME=unknown
ARG GEOINTEL_APP_VERSION=1.0.0

ENV GEOINTEL_BUILD_SHA="${GEOINTEL_BUILD_SHA}" \
    GEOINTEL_BUILD_TIME="${GEOINTEL_BUILD_TIME}" \
    GEOINTEL_APP_VERSION="${GEOINTEL_APP_VERSION}"

LABEL org.opencontainers.image.title="GeoIntel" \
      org.opencontainers.image.description="GeoIntel workbench for Belgium and the Belgian North Sea" \
      org.opencontainers.image.version="${GEOINTEL_APP_VERSION}" \
      org.opencontainers.image.revision="${GEOINTEL_BUILD_SHA}" \
      org.opencontainers.image.created="${GEOINTEL_BUILD_TIME}" \
      io.geointel.ai.enabled="${GEOINTEL_INSTALL_AI}"

VOLUME ["/var/lib/postgresql/data", "/app/storage", "/app/backups"]

EXPOSE 80

HEALTHCHECK --interval=30s --timeout=5s --retries=10 --start-period=60s \
  CMD curl -fsS http://127.0.0.1/health/ready >/dev/null || exit 1

CMD ["/usr/local/bin/geointel-all-in-one-start"]