Dockerfile

# Multi-stage build for Rose the Healer Shaman
# Stage 1: Build frontend
FROM node:20-slim AS frontend-builder

WORKDIR /frontend

# Copy frontend package files
COPY frontend/package*.json ./

# Install frontend dependencies
RUN npm ci

# Copy frontend source
COPY frontend/ ./

# Build frontend
ENV DOCKER_BUILD=true
RUN npm run build

# Stage 2: Build Python dependencies
FROM ghcr.io/astral-sh/uv:python3.12-bookworm-slim AS python-builder

WORKDIR /app

# Install system dependencies for building libraries
RUN apt-get update && apt-get install -y \
    build-essential \
    g++ \
    && rm -rf /var/lib/apt/lists/*

# Copy the dependency management files
COPY uv.lock pyproject.toml README.md /app/

# Install the application dependencies
RUN uv sync --frozen --no-cache

# Copy application code
COPY src/ /app/src/

# Install the package in editable mode
RUN uv pip install -e .

# Stage 3: Runtime image (minimal, no build tools)
FROM python:3.12-slim-bookworm

WORKDIR /app

# Set environment variables
ENV PYTHONUNBUFFERED=1 \
    PYTHONDONTWRITEBYTECODE=1 \
    VIRTUAL_ENV=/app/.venv \
    PATH="/app/.venv/bin:$PATH"

# Install only runtime dependencies (no build tools)
# libgomp1 is required for some ML libraries
RUN apt-get update && apt-get install -y --no-install-recommends \
    libgomp1 \
    && rm -rf /var/lib/apt/lists/* \
    && apt-get clean \
    && apt-get autoremove -y

# Copy frontend build from frontend-builder stage to correct location
# Vite outputs to /frontend/dist, we copy to the path expected by FastAPI
COPY --from=frontend-builder /frontend/dist /app/src/ai_companion/interfaces/web/static

# Create non-root user for security
RUN useradd -m -u 1000 appuser

# Create data directories for memory databases and backups
RUN mkdir -p /app/data /app/data/backups && \
    chown -R appuser:appuser /app/data

# Copy virtual environment from builder
COPY --from=python-builder --chown=appuser:appuser /app/.venv /app/.venv

# Copy application code
COPY --from=python-builder --chown=appuser:appuser /app/src /app/src
COPY --from=python-builder --chown=appuser:appuser /app/pyproject.toml /app/README.md /app/

# Switch to non-root user
USER appuser

# Define volumes
VOLUME ["/app/data"]

# Expose the port
EXPOSE 8000

# Health check (uses PORT env var with 8000 fallback)
HEALTHCHECK --interval=30s --timeout=10s --start-period=60s --retries=3 \
    CMD python -c "import os,urllib.request; urllib.request.urlopen(f'http://localhost:{os.environ.get(\"PORT\",\"8000\")}/api/v1/health')" || exit 1

# Run the Rose web interface using uvicorn (PORT set by Railway/platform, defaults to 8000)
CMD ["sh", "-c", "uvicorn ai_companion.interfaces.web.app:app --host 0.0.0.0 --port ${PORT:-8000}"]