fix(docker): replace root multi-stage Dockerfile with backend-only Python Dockerfile

Dockerfile

@@ -1,49 +1,38 @@
-FROM node:22-bookworm AS frontend
-WORKDIR /app
-
-# Install pnpm via corepack
-RUN corepack enable && corepack prepare pnpm@10 --activate
-
-# Copy workspace config + lockfile first (cache layer for installs)
-COPY pnpm-workspace.yaml pnpm-lock.yaml package.json tsconfig.base.json ./
-COPY scripts/ ./scripts/
-COPY artifacts/agente-ai/package.json ./artifacts/agente-ai/
+FROM python:3.11-slim
 
-# Install from workspace root — resolves all catalog: entries correctly
-RUN pnpm install --no-frozen-lockfile
+ENV PYTHONUNBUFFERED=1 \
+    PYTHONDONTWRITEBYTECODE=1 \
+    PORT=7860 \
+    FRONTEND_DIST=/home/user/app/static \
+    PLAYWRIGHT_BROWSERS_PATH=/ms-playwright
 
-# Copy frontend source
-COPY artifacts/agente-ai/ ./artifacts/agente-ai/
-
-# Build frontend (2 GB heap for large bundles)
-RUN cd artifacts/agente-ai && NODE_OPTIONS=--max-old-space-size=2048 pnpm run build
-
-# ── Runtime ──────────────────────────────────────────────────────────────────
-FROM python:3.11-slim AS runtime
-ENV PYTHONDONTWRITEBYTECODE=1 \
-    PYTHONUNBUFFERED=1 \
-    PYTHONPATH=/app/backend \
-    FRONTEND_DIST=/app/backend/static
 WORKDIR /app
 
 RUN apt-get update && apt-get install -y --no-install-recommends \
-    build-essential \
-    curl \
-    git \
-    tmux \
-    libssl-dev \
-    libffi-dev \
+    build-essential curl git nodejs npm \
+    libnss3 libnspr4 libdbus-1-3 libatk1.0-0 libatk-bridge2.0-0 \
+    libcups2 libdrm2 libxkbcommon0 libxcomposite1 libxdamage1 \
+    libxfixes3 libxrandr2 libgbm1 libasound2 \
     && rm -rf /var/lib/apt/lists/*
 
-COPY backend/requirements.txt /app/backend/requirements.txt
-RUN pip install --no-cache-dir --upgrade pip setuptools wheel \
- && pip install --no-cache-dir -r /app/backend/requirements.txt
+COPY requirements.txt /app/requirements.txt
+RUN pip install --no-cache-dir -r /app/requirements.txt \
+    && playwright install chromium \
+    && chmod -R 755 /ms-playwright
+
+ARG TTYD_VERSION=1.7.7
+RUN ARCH=$(uname -m) && \
+    TTYD_ARCH=$([ "$ARCH" = "aarch64" ] && echo "aarch64" || echo "x86_64") && \
+    curl -fsSL -o /usr/local/bin/ttyd \
+      "https://github.com/tsl0922/ttyd/releases/download/${TTYD_VERSION}/ttyd.${TTYD_ARCH}" && \
+    chmod +x /usr/local/bin/ttyd
 
-COPY backend /app/backend
-COPY --from=frontend /app/artifacts/agente-ai/dist /app/backend/static
+RUN useradd -m -u 1000 user
+USER user
+ENV HOME=/home/user PATH=/home/user/.local/bin:$PATH
 
-WORKDIR /app/backend
-RUN python -c "import sys; print('Python', sys.version); from fastapi import FastAPI; print('FastAPI OK')"
+WORKDIR /home/user/app
+COPY --chown=user . /home/user/app/
 
 EXPOSE 7860
-CMD ["sh", "-c", "uvicorn main:app --host 0.0.0.0 --port ${PORT:-7860} --log-level info"]
+CMD ["sh", "-c", "uvicorn main:app --host 0.0.0.0 --port ${PORT:-7860} --workers 1"]