leankg 0.19.3

# LeanKG MCP HTTP server (RocksDB backend)
# Multi-stage build for a slim runtime image suitable for Docker Hub.
#
# Published Hub image (linux/arm64): freepeak/leankg:latest
#
# One-line setup (index + embed + MCP, no Rust):
#   curl -fsSL https://raw.githubusercontent.com/FreePeak/LeanKG/main/scripts/docker-up.sh | bash
#
# Or MCP + UI REST (entrypoint starts serve :8080 when LEANKG_SERVE_HTTP=1):
#   docker run -d --name leankg -p 9699:9699 -p 8080:8080 \
#     -v HOST_DIR:/workspace \
#     -v leankg-rocksdb:/data/leankg-rocksdb \
#     -v leankg-models:/root/.cache/leankg \
#     freepeak/leankg:latest

# UI v2 → baked into the binary via rust_embed (`src/embed/`).
FROM node:20-bookworm AS ui
WORKDIR /ui
COPY ui-v2/package.json ui-v2/package-lock.json ./
RUN npm ci
COPY ui-v2/ ./
RUN npm run build

FROM rust:1-bookworm AS builder
WORKDIR /app

RUN sed -i 's|http://deb.debian.org|https://deb.debian.org|g' /etc/apt/sources.list.d/debian.sources \
    && apt-get update \
    && apt-get install -y clang libclang-dev \
    && rm -rf /var/lib/apt/lists/*

# Optional local patches (no-op if empty). Keep for offline/build reproducibility.
COPY vendor/ ./vendor/
COPY Cargo.toml Cargo.lock ./
COPY src ./src
COPY benches ./benches
COPY ontology/ ./ontology/
# Prefer freshly built ui-v2 over whatever was last committed under src/embed/.
COPY --from=ui /ui/dist/ ./src/embed/

# Build with the `embeddings` feature so the resulting binary ships
# `leankg embed`, `leankg semantic-context`, `leankg smoke-test`, and the
# HNSW-backed semantic_search MCP tool out of the box (US-CBM-C1 / FR-C01 /
# FR-HNSW-C). See docs/prd.md §5.12.
RUN cargo build --release --features embeddings \
    && strip target/release/leankg \
    && cp target/release/leankg /usr/local/bin/leankg

FROM debian:bookworm-slim

# Seed CA bundle from the builder so apt can use https mirrors (slim has none
# yet; plain http to deb.debian.org often fails behind corporate/CDN paths).
COPY --from=builder /etc/ssl/certs/ca-certificates.crt /etc/ssl/certs/ca-certificates.crt

RUN sed -i 's|http://deb.debian.org|https://deb.debian.org|g' /etc/apt/sources.list.d/debian.sources \
    && apt-get update \
    && apt-get install -y --no-install-recommends \
        ca-certificates \
        curl \
        git \
        libstdc++6 \
    && rm -rf /var/lib/apt/lists/*

COPY --from=builder /usr/local/bin/leankg /usr/local/bin/leankg
COPY entrypoint.sh /usr/local/bin/entrypoint.sh
RUN chmod +x /usr/local/bin/entrypoint.sh \
    && mkdir -p /data/leankg-rocksdb /workspace

# Defaults so `docker run -v HOST_DIR:/workspace ... freepeak/leankg` works
# without an env file. Compose can still override these.
ENV LEANKG_DB_ENGINE=rocksdb \
    LEANKG_ROCKSDB_ROOT=/data/leankg-rocksdb \
    LEANKG_MCP_PROJECT=/workspace \
    LEANKG_AUTO_INDEX=1 \
    LEANKG_EMBED_ON_BOOT=0 \
    LEANKG_EMBED_BACKGROUND=0 \
    LEANKG_EMBED_FAST=1 \
    LEANKG_EMBED_MODEL=bge-q \
    LEANKG_EMBED_MAX_SEQ=128 \
    LEANKG_EMBED_MAX_BLOB_CHARS=500 \
    LEANKG_EMBED_MAX_MB=3072 \
    LEANKG_EMBED_BACKGROUND_WORKERS=1 \
    LEANKG_EMBED_BACKGROUND_BATCH=32 \
    MCP_HTTP_PORT=9699 \
    LEANKG_SERVE_HTTP=1 \
    LEANKG_SERVE_PORT=8080 \
    LEANKG_MMAP_SIZE=67108864 \
    LEANKG_WATCHER_DEBOUNCE_MS=2000 \
    LEANKG_WATCHER_BURST_LIMIT=256 \
    RUST_LOG=leankg=info

VOLUME ["/data/leankg-rocksdb"]
EXPOSE 9699 8080
WORKDIR /workspace
HEALTHCHECK --interval=30s --timeout=5s --start-period=60s --retries=3 \
    CMD curl -fsS "http://127.0.0.1:${MCP_HTTP_PORT}/health" || exit 1

ENTRYPOINT ["/usr/local/bin/entrypoint.sh"]