ARG NODE_IMAGE=node:22-bookworm-slim

ARG PYTHON_IMAGE=python:3.12-slim-bookworm

FROM ${NODE_IMAGE} AS web

WORKDIR /web

COPY frontend/package*.json ./

RUN npm ci

COPY frontend/ ./

COPY LICENSE THIRD_PARTY_NOTICES.md /

RUN npm run build

FROM ${PYTHON_IMAGE}

ENV PYTHONUNBUFFERED=1 UV_PROJECT_ENVIRONMENT=/opt/venv PATH="/opt/venv/bin:$PATH"

WORKDIR /app

COPY --from=ghcr.io/astral-sh/uv:0.10.9 /uv /uvx /bin/

COPY pyproject.toml uv.lock ./

RUN uv sync --frozen --no-dev

COPY app/ ./app/

COPY runner/ ./runner/

COPY docs/MCP.md ./docs/MCP.md

COPY LICENSE THIRD_PARTY_NOTICES.md ./

COPY --from=web /web/dist ./frontend/dist/

RUN useradd --create-home app && mkdir -p /app/data && chown -R app:app /app

USER app

EXPOSE 8000

CMD ["sh", "-c", "exec uvicorn app.main:app --host 0.0.0.0 --port ${PORT:-8000} --workers 1 --no-access-log"]