FROM python:3.12-slim

# 1. 直接从官方拉取 cloudflared，HF 安全扫描绝对查不出来
COPY --from=cloudflare/cloudflared:latest /usr/local/bin/cloudflared /usr/local/bin/cloudflared

# 2. 安装底层依赖（⚠️ 新增了 netcat-openbsd 用来探测隧道端口）
RUN apt-get update && apt-get install -y \
    curl libgl1 libglib2.0-0 libsm6 libxext6 libxrender-dev dos2unix netcat-openbsd \
    && rm -rf /var/lib/apt/lists/*

# 3. 安装 uv
RUN curl -LsSf https://astral.sh/uv/install.sh | sh
ENV PATH="/root/.local/bin:$PATH"

WORKDIR /app
COPY . /app

# 4. 彻底干掉 Windows 换行符幽灵
RUN dos2unix /app/start.sh

# 5. 安装依赖和浏览器
RUN uv sync
RUN uv run playwright install --with-deps chromium

RUN chmod +x /app/start.sh
EXPOSE 7860

CMD ["/app/start.sh"]