Update Dockerfile

Dockerfile

@@ -1,24 +1,60 @@
-# ... (Rust Stage remains the same) ...
+# --- STAGE 1: Build Rust Backend ---
+FROM rust:1.84-bookworm AS backend_build
+WORKDIR /app
+RUN apt-get update && apt-get install -y pkg-config libssl-dev
+COPY Cargo.toml ./
+# Build dependencies only (caching)
+RUN mkdir src && echo "fn main() {}" > src/main.rs && cargo build --release
+# Build actual source
+COPY src ./src
+RUN touch src/main.rs && cargo build --release
 
-# --- Stage 2: Frontend Builder ---
-FROM node:20-slim AS frontend-builder
+# --- STAGE 2: Build React Frontend ---
+FROM node:20-bookworm AS frontend_build
 WORKDIR /app/frontend
-# Copy package files first for caching
 COPY frontend/package*.json ./
 RUN npm install
-# Copy the rest of the frontend files
 COPY frontend/ ./
-# This will now run 'vite build' without failing on type checks
 RUN npm run build
 
-# --- Stage 3: Final Runtime ---
+# --- STAGE 3: Final Runtime (Nix + Agent) ---
 FROM debian:bookworm-slim
-# ... (Install dependencies and Nix as before) ...
+# Install system tools and browser libs
+RUN apt-get update && apt-get install -y \
+    curl xz-utils wget ca-certificates procps \
+    libssl3 libasound2 libatk1.0-0 libc6 libcairo2 libcups2 \
+    libdbus-1-3 libexpat1 libfontconfig1 libgbm1 libgcc1 \
+    libgconf-2-4 libgdk-pixbuf2.0-0 libglib2.0-0 libgtk-3-0 \
+    libnspr4 libnss3 libpango-1.0-0 libpangocairo-1.0-0 \
+    libstdc++6 libx11-6 libx11-xcb1 libxcb1 libxcomposite1 \
+    libxcursor1 libxdamage1 libxext6 libxfixes3 libxi6 \
+    libxrandr2 libxrender1 libxss1 libxtst6 \
+    && rm -rf /var/lib/apt/lists/*
 
-# Copy built assets
-COPY --from=rust-builder /app/target/release/polymorphic-agent .
-# Ensure the path matches where Axum looks for files
-COPY --from=frontend-builder /app/frontend/dist ./frontend/dist
+# Setup non-root user for Hugging Face
+RUN useradd -m -u 1000 user
+USER user
+ENV HOME=/home/user
+WORKDIR /home/user
 
+# Install Nix in single-user mode
+RUN curl -L https://nixos.org/nix/install | sh -s -- --no-daemon
+ENV PATH="/home/user/.nix-profile/bin:${PATH}"
+ENV NIX_PATH=nixpkgs=https://github.com/NixOS/nixpkgs/archive/nixos-unstable.tar.gz
+
+# Copy the Rust binary from STAGE 1
+COPY --from=backend_build /app/target/release/polymorphic-agent .
+
+# Copy the Frontend dist from STAGE 2
+# Axum will serve this folder
+COPY --from=frontend_build /app/frontend/dist ./frontend/dist
+
+# Create dynamic UI folder for the agent to write to
+RUN mkdir -p ./frontend/src/dynamic
+
+# Set environment variables
+ENV PORT=7860
 EXPOSE 7860
+
+# Start the agent
 CMD ["./polymorphic-agent"]