Dockerfile

# Multi-stage Dockerfile for Brain Agent Platform
# Phase 6: Docker containerization

# Stage 1: Builder
FROM node:22-alpine AS builder

WORKDIR /build

# Install dependencies
COPY package*.json ./
RUN npm ci --only=production && \
    npm cache clean --force

# Copy source
COPY . .

# Install Playwright browsers (needed for browser-relay)
RUN npx playwright install --with-deps chromium

# Stage 2: Runtime
FROM node:22-alpine

LABEL maintainer="Brain Agent Platform"
LABEL description="Standalone autonomous agent runtime platform"
LABEL version="5.0.0"

WORKDIR /app

# Create non-root user
RUN addgroup -g 1001 -S brain && \
    adduser -S brain -u 1001

# Copy from builder
COPY --from=builder /build ./
COPY --from=builder /root/.cache/ms-playwright /home/brain/.cache/ms-playwright

# Create working directory for sessions
RUN mkdir -p /data && \
    chown -R brain:brain /app /data

# Health check
HEALTHCHECK --interval=30s --timeout=5s --start-period=10s --retries=3 \
  CMD node -e "require('http').get('http://localhost:18789/health', (r) => { if(r.statusCode!==200) throw new Error(); })" || exit 1

# Expose ports
EXPOSE 18789 3001 3003 3000

# Switch to non-root user
USER brain

# Default command
CMD ["node", "bin/brain", "start"]