FROM python:3.12-slim

RUN apt-get update && apt-get install -y --no-install-recommends libgomp1 gcc g++ && rm -rf /var/lib/apt/lists/*

WORKDIR /app

COPY requirements.txt .
RUN pip install --no-cache-dir -r requirements.txt

COPY config.py main.py input_sanitizer.py checkpoint.py ./
COPY agents/ ./agents/
COPY tools/ ./tools/
COPY skills/ ./skills/
COPY ui/ ./ui/
COPY harness/ ./harness/
COPY docs/ ./docs/
COPY data/ ./data/
COPY demo_target.py ./

RUN mkdir -p logs/checkpoints memory reports

RUN useradd -m -u 1000 -s /bin/bash user && chown -R user:user /app
USER user

ENV PYTHONUNBUFFERED=1 PYTHONDONTWRITEBYTECODE=1 SANDBOX_ENABLED=false ENABLE_CRITIC=false ENABLE_MEMORY_RAG=false

EXPOSE 7860

CMD ["python3", "-m", "uvicorn", "ui.server:app", "--host", "0.0.0.0", "--port", "7860"]