FROM node:22-alpine@sha256:c610fcdfb1d5b4740dd70c284ed3cb16bb857e0f7166196e36a5501df7a3aa32 AS web
WORKDIR /src/web
COPY web/package*.json ./
RUN npm ci
COPY web/ ./
RUN npm run build

FROM golang:1.26-alpine@sha256:28d89ee9cc0ff9fec75c82ca201e6bf7fdf9a679d4b7b24dfa04f2bb766bb468 AS go
ENV GOPROXY=https://goproxy.cn|direct
WORKDIR /src
COPY go.mod go.sum ./
COPY cmd/ ./cmd/
COPY internal/ ./internal/
RUN CGO_ENABLED=0 go build -buildvcs=false -trimpath -ldflags='-s -w' -o /out/control-plane ./cmd/control-plane

FROM python:3.13-alpine@sha256:7415fbc3c9e4979cc717d92377ab2bc7b2b4a2af1ac03cc52b5f3f88efedaf3a
COPY requirements-gateway.lock /tmp/requirements-gateway.lock
RUN apk add --no-cache ffmpeg \
    && python -m pip install --no-cache-dir -r /tmp/requirements-gateway.lock \
    && addgroup -g 65532 app && adduser -D -u 65532 -G app app \
    && install -d -o app -g app -m 0700 /var/lib/creatorhub/credentials /var/lib/creatorhub/materials
WORKDIR /app
COPY --from=go /out/control-plane /app/
COPY cmd/__init__.py /app/cmd/__init__.py
COPY cmd/docker_gateway /app/cmd/docker_gateway
COPY --from=web /src/web/dist /app/web
USER 65532:65532
ENV WEB_DIR=/app/web
EXPOSE 8080 8081
CMD ["/app/control-plane"]