# Stage 1: builder

FROM python:3.11-slim AS builder

COPY --from=ghcr.io/astral-sh/uv:latest /uv /usr/local/bin/uv

WORKDIR /app

COPY pyproject.toml uv.lock ./

RUN uv sync --frozen --no-dev --no-install-project

COPY src/ src/

# Stage 2: runtime

FROM python:3.11-slim AS runtime

RUN apt-get update && apt-get install -y --no-install-recommends curl \

&& rm -rf /var/lib/apt/lists/*

RUN groupadd --gid 1000 appuser && \

useradd --uid 1000 --gid appuser --shell /bin/bash --create-home appuser

WORKDIR /app

COPY --from=builder /app/.venv /app/.venv

COPY --from=builder /app/src /app/src

COPY workflows/ workflows/

ENV PATH="/app/.venv/bin:$PATH"

USER appuser

EXPOSE 8000

CMD ["uvicorn", "agent_engine.api.app:app", "--host", "0.0.0.0", "--port", "8000"]