Dockerfile

# =============================================================================
# OCT-B agent — Hugging Face *Docker* Space (Chainlit chat UI)
# =============================================================================
# Full model-driven sandbox variant: the agent gets shell + filesystem inside a
# UnixLocalSandboxClient and can author its own visualizations. No GPU here —
# inference is dispatched to the Modal workers behind the MCP servers.
#
# Build context = the Space repo root, which must contain:
#   Dockerfile  app.py  requirements.txt  README.md  chainlit.md
#   .chainlit/config.toml  public/elements/OverlayFrame.jsx  oct_b_agent/
# =============================================================================
# agentskills-core requires Python >=3.12 (<3.14), so the agent image uses
# 3.12-slim. The MCP server images can stay on 3.11 — they never import
# agentskills; only this orchestrator does.
FROM python:3.12-slim

# System libs for Pillow image decode (mirrors the MCP server images).
RUN apt-get update && apt-get install -y --no-install-recommends \
        libglib2.0-0 \
        libgomp1 \
    && rm -rf /var/lib/apt/lists/*

# HF Docker Spaces run the container as uid 1000. Create a matching user with a
# writable home so pip --user installs and runtime temp writes (Chainlit's
# .files/ and .chainlit/ live under the working dir) work.
RUN useradd -m -u 1000 user
USER user
ENV HOME=/home/user \
    PATH=/home/user/.local/bin:$PATH \
    PYTHONUNBUFFERED=1 \
    OCT_OUT_DIR=/tmp/octb_out \
    CHAINLIT_HOST=0.0.0.0 \
    CHAINLIT_PORT=7860

WORKDIR $HOME/app

# Install deps first for layer caching.
COPY --chown=user requirements.txt .
RUN pip install --no-cache-dir -r requirements.txt

# Bring in app.py, the Chainlit assets (.chainlit/, public/, chainlit.md), and
# the unchanged oct_b_agent/ project.
COPY --chown=user . .

# HF Docker Spaces expose 7860 by convention (see app_port in README.md).
EXPOSE 7860

# Chainlit must be launched via its CLI (not `python app.py`). --headless keeps
# it from trying to open a browser; host/port also come from the env above.
CMD ["chainlit", "run", "app.py", "--host", "0.0.0.0", "--port", "7860", "--headless"]