Dockerfile

FROM python:3.11-slim

LABEL org.opencontainers.image.title="SocialSim"
LABEL org.opencontainers.image.description="Multi-Agent Social Media Opinion Simulation System"

# Node.js 20 LTS (frontend requires >=18)
RUN apt-get update \
    && apt-get install -y --no-install-recommends curl gnupg ca-certificates \
    && curl -fsSL https://deb.nodesource.com/setup_20.x | bash - \
    && apt-get install -y --no-install-recommends nodejs \
    && rm -rf /var/lib/apt/lists/*

# uv package manager
COPY --from=ghcr.io/astral-sh/uv:0.9.26 /uv /uvx /bin/

WORKDIR /app

# ── Dependency files (layer caching) ──
COPY package.json package-lock.json ./
COPY frontend/package.json frontend/package-lock.json frontend/.npmrc ./frontend/
COPY backend/pyproject.toml backend/uv.lock backend/gunicorn.conf.py ./backend/

# Install all dependencies
RUN npm ci \
    && npm ci --prefix frontend \
    && cd backend && uv sync --frozen

# ── Source is mounted at runtime for hot-reload (dev), or built for prod ──
COPY . .

# Build frontend for production
RUN cd frontend && npm run build

# Create non-root user for container execution
RUN groupadd --system socialsim && useradd --system --gid socialsim -d /app socialsim \
    && chown -R socialsim:socialsim /app \
    && mkdir -p /app/backend/uploads /app/backend/logs \
    && chown -R socialsim:socialsim /app/backend/uploads /app/backend/logs

USER socialsim

EXPOSE 5003

# Production: gunicorn backend serves built frontend statically
ENV FLASK_DEBUG=0
CMD ["sh", "-c", "cd backend && uv run gunicorn --config gunicorn.conf.py 'app:create_app()'"]