feat: Containerize the project using Docker for production

.dockerignore

@@ -0,0 +1,22 @@
+# Ignore Python cache files
+__pycache__/
+*.pyc
+*.pyo
+
+# Ignore virtual environments
+venv/
+env/
+
+.venv
+.env
+
+# Ignore logs
+*.log
+
+# Ignore local configuration files
+*.env
+
+# Ignore any other unnecessary files
+*.DS_Store
+*.db
+*.sqlite3

.gitattributes

@@ -0,0 +1,35 @@
+*.7z filter=lfs diff=lfs merge=lfs -text
+*.arrow filter=lfs diff=lfs merge=lfs -text
+*.bin filter=lfs diff=lfs merge=lfs -text
+*.bz2 filter=lfs diff=lfs merge=lfs -text
+*.ckpt filter=lfs diff=lfs merge=lfs -text
+*.ftz filter=lfs diff=lfs merge=lfs -text
+*.gz filter=lfs diff=lfs merge=lfs -text
+*.h5 filter=lfs diff=lfs merge=lfs -text
+*.joblib filter=lfs diff=lfs merge=lfs -text
+*.lfs.* filter=lfs diff=lfs merge=lfs -text
+*.mlmodel filter=lfs diff=lfs merge=lfs -text
+*.model filter=lfs diff=lfs merge=lfs -text
+*.msgpack filter=lfs diff=lfs merge=lfs -text
+*.npy filter=lfs diff=lfs merge=lfs -text
+*.npz filter=lfs diff=lfs merge=lfs -text
+*.onnx filter=lfs diff=lfs merge=lfs -text
+*.ot filter=lfs diff=lfs merge=lfs -text
+*.parquet filter=lfs diff=lfs merge=lfs -text
+*.pb filter=lfs diff=lfs merge=lfs -text
+*.pickle filter=lfs diff=lfs merge=lfs -text
+*.pkl filter=lfs diff=lfs merge=lfs -text
+*.pt filter=lfs diff=lfs merge=lfs -text
+*.pth filter=lfs diff=lfs merge=lfs -text
+*.rar filter=lfs diff=lfs merge=lfs -text
+*.safetensors filter=lfs diff=lfs merge=lfs -text
+saved_model/**/* filter=lfs diff=lfs merge=lfs -text
+*.tar.* filter=lfs diff=lfs merge=lfs -text
+*.tar filter=lfs diff=lfs merge=lfs -text
+*.tflite filter=lfs diff=lfs merge=lfs -text
+*.tgz filter=lfs diff=lfs merge=lfs -text
+*.wasm filter=lfs diff=lfs merge=lfs -text
+*.xz filter=lfs diff=lfs merge=lfs -text
+*.zip filter=lfs diff=lfs merge=lfs -text
+*.zst filter=lfs diff=lfs merge=lfs -text
+*tfevents* filter=lfs diff=lfs merge=lfs -text

Dockerfile

@@ -0,0 +1,69 @@
+# Use the official Python 3.11 slim image as the base
+FROM python:3.1-slim
+
+# --- Install System Dependencies, uv, and Node.js/npm/npx ---
+# Install curl (for uv script), nodejs & npm (for npx), git (optional, but sometimes needed by deps)
+# Install uv using its official script
+# Install npx globally using npm (often included with recent npm, but explicit install is safer)
+# Clean up apt cache to reduce image size
+RUN apt-get update && \
+    apt-get install -y --no-install-recommends curl nodejs npm git && \
+    curl -LsSf https://astral.sh/uv/install.sh | sh && \
+    mv /root/.local/bin/uv /usr/local/bin/uv && \
+    # mv /root/.local/bin/uvx /usr/local/bin/uvx # uvx might not be needed unless you use uv run directly
+    npm install -g npx && \
+    apt-get clean && \
+    rm -rf /var/lib/apt/lists/*
+
+# --- Python Dependency Installation (as root for system-wide access) ---
+# Create cache directory for uv
+RUN mkdir -p /.cache/uv
+
+# Copy only the pyproject.toml file first to leverage Docker layer caching
+COPY pyproject.toml .
+
+# Install Python dependencies using uv sync based on pyproject.toml
+# This reads dependencies and installs them efficiently
+# Remove the uv cache after installation if not needed later to save space
+RUN uv sync --system && \
+    rm -rf /.cache/uv/*
+
+# --- Non-Root User Setup ---
+# Create a non-root user 'user' with ID 1000 and create their home directory
+# Note: Cache was already cleaned, so no need to chown it here.
+RUN useradd -m -u 1000 user
+# Switch to the non-root user
+USER user
+
+# --- Environment Setup ---
+# Set the home directory for the user
+ENV HOME=/home/user
+# Add user's local bin to PATH (though we installed system-wide with uv sync --system)
+# Ensure Python output is sent straight to terminal without being buffered
+# Set the default port expected by Hugging Face Spaces for web apps
+ENV PATH="/home/user/.local/bin:$PATH" \
+    PYTHONUNBUFFERED=1 \
+    PORT=7860
+
+# Set the working directory for the application inside the user's home
+WORKDIR $HOME/app
+
+# --- Application Code ---
+# Copy the rest of the application files needed at runtime
+# Ensure the non-root user owns these files
+# Specific copies are better for caching than 'COPY . .' after dependency install
+COPY --chown=user:user ./chainlit_ui.py ./chainlit_ui.py
+COPY --chown=user:user ./mcp.json ./mcp.json
+COPY --chown=user:user ./src ./src
+COPY --chown=user:user ./public ./public
+# If you have a .env file for local dev, ensure it's NOT copied (use .dockerignore)
+# Secrets should come from Hugging Face Secrets management
+
+# --- Runtime ---
+# Expose the port Chainlit will run on (standard HF Spaces port)
+EXPOSE 7860
+
+# Define the command to run the Chainlit application
+# Listen on all interfaces (0.0.0.0) on the designated port
+# Do NOT use the --watch (-w) flag in production
+CMD ["chainlit", "run", "chainlit_ui.py", "--host", "0.0.0.0", "--port", "7860"]