# debian.sh --arch 'amd64' out/ 'bookworm' '@1781049600'

RUN /bin/sh -c set -eux; apt-get update; apt-get install -y --no-install-recommends ca-certificates curl gnupg netbase sq wget ; rm -rf /var/lib/apt/lists/* # buildkit

RUN /bin/sh -c set -eux; apt-get update; apt-get install -y --no-install-recommends git mercurial openssh-client subversion procps ; rm -rf /var/lib/apt/lists/* # buildkit

RUN /bin/sh -c set -ex; apt-get update; apt-get install -y --no-install-recommends autoconf automake bzip2 default-libmysqlclient-dev dpkg-dev file g++ gcc imagemagick libbz2-dev libc6-dev libcurl4-openssl-dev libdb-dev libevent-dev libffi-dev libgdbm-dev libglib2.0-dev libgmp-dev libjpeg-dev libkrb5-dev liblzma-dev libmagickcore-dev libmagickwand-dev libmaxminddb-dev libncurses5-dev libncursesw5-dev libpng-dev libpq-dev libreadline-dev libsqlite3-dev libssl-dev libtool libwebp-dev libxml2-dev libxslt-dev libyaml-dev make patch unzip xz-utils zlib1g-dev ; rm -rf /var/lib/apt/lists/* # buildkit

RUN /bin/sh -c groupadd --gid 1000 node && useradd --uid 1000 --gid node --shell /bin/bash --create-home node # buildkit

ENV NODE_VERSION=22.23.1

RUN /bin/sh -c ARCH= && dpkgArch="$(dpkg --print-architecture)" && case "${dpkgArch##*-}" in amd64) ARCH='x64';; ppc64el) ARCH='ppc64le';; s390x) ARCH='s390x';; arm64) ARCH='arm64';; armhf) ARCH='armv7l';; *) echo "unsupported architecture"; exit 1 ;; esac && export GNUPGHOME="$(mktemp -d)" && set -ex && for key in 5BE8A3F6C8A5C01D106C0AD820B1A390B168D356 DD792F5973C6DE52C432CBDAC77ABFA00DDBF2B7 CC68F5A3106FF448322E48ED27F5E38D5B0A215F 8FCCA13FEF1D0C2E91008E09770F7A9A5AE15600 890C08DB8579162FEE0DF9DB8BEAB4DFCF555EF4 C82FA3AE1CBEDC6BE46B9360C43CEC45C17AB93C 108F52B48DB57BB0CC439B2997B01419BD92F80A A363A499291CBBC940DD62E41F10027AF002F8B0 ; do { gpg --batch --keyserver hkps://keys.openpgp.org --recv-keys "$key" && gpg --batch --fingerprint "$key"; } || { gpg --batch --keyserver keyserver.ubuntu.com --recv-keys "$key" && gpg --batch --fingerprint "$key"; } ; done && curl -fsSLO --compressed "https://nodejs.org/dist/v$NODE_VERSION/node-v$NODE_VERSION-linux-$ARCH.tar.xz" && curl -fsSLO --compressed "https://nodejs.org/dist/v$NODE_VERSION/SHASUMS256.txt.asc" && gpg --batch --decrypt --output SHASUMS256.txt SHASUMS256.txt.asc && gpgconf --kill all && rm -rf "$GNUPGHOME" && grep " node-v$NODE_VERSION-linux-$ARCH.tar.xz\$" SHASUMS256.txt | sha256sum -c - && tar -xJf "node-v$NODE_VERSION-linux-$ARCH.tar.xz" -C /usr/local --strip-components=1 --no-same-owner && rm "node-v$NODE_VERSION-linux-$ARCH.tar.xz" SHASUMS256.txt.asc SHASUMS256.txt && ln -s /usr/local/bin/node /usr/local/bin/nodejs && node --version && npm --version && rm -rf /tmp/* # buildkit

ENV YARN_VERSION=1.22.22

RUN /bin/sh -c set -ex && export GNUPGHOME="$(mktemp -d)" && for key in 6A010C5166006599AA17F08146C2130DFD2497F5 ; do { gpg --batch --keyserver hkps://keys.openpgp.org --recv-keys "$key" && gpg --batch --fingerprint "$key"; } || { gpg --batch --keyserver keyserver.ubuntu.com --recv-keys "$key" && gpg --batch --fingerprint "$key"; } ; done && curl -fsSLO --compressed "https://yarnpkg.com/downloads/$YARN_VERSION/yarn-v$YARN_VERSION.tar.gz" && curl -fsSLO --compressed "https://yarnpkg.com/downloads/$YARN_VERSION/yarn-v$YARN_VERSION.tar.gz.asc" && gpg --batch --verify yarn-v$YARN_VERSION.tar.gz.asc yarn-v$YARN_VERSION.tar.gz && gpgconf --kill all && rm -rf "$GNUPGHOME" && mkdir -p /opt && tar -xzf yarn-v$YARN_VERSION.tar.gz -C /opt/ && ln -s /opt/yarn-v$YARN_VERSION/bin/yarn /usr/local/bin/yarn && ln -s /opt/yarn-v$YARN_VERSION/bin/yarnpkg /usr/local/bin/yarnpkg && rm yarn-v$YARN_VERSION.tar.gz.asc yarn-v$YARN_VERSION.tar.gz && yarn --version && rm -rf /tmp/* # buildkit

COPY docker-entrypoint.sh /usr/local/bin/ # buildkit

ENTRYPOINT ["docker-entrypoint.sh"]

CMD ["node"]

WORKDIR /app

ARG HF_ENDPOINT=https://hf-mirror.com

ARG PLAYWRIGHT_DOWNLOAD_CONNECTION_TIMEOUT=600000

ENV PUPPETEER_SKIP_DOWNLOAD=true SKIP_WEB_UI_INSTALL=true PLAYWRIGHT_BROWSERS_PATH=/app/.playwright PYTHONUNBUFFERED=1 NODE_ENV=production NPM_CONFIG_PREFIX=/app/npm-global HF_ENDPOINT=https://hf-mirror.com MANTISBOT_LOCAL_EMBEDDING_CACHE_DIR=/app/models/embeddings

RUN |2 HF_ENDPOINT=https://hf-mirror.com PLAYWRIGHT_DOWNLOAD_CONNECTION_TIMEOUT=600000 /bin/sh -c sed -i 's/deb.debian.org/mirrors.aliyun.com/g' /etc/apt/sources.list.d/debian.sources && apt-get update && apt-get install -y python3 python3-pip python3-venv make g++ libnspr4 libnss3 libatk1.0-0 libatk-bridge2.0-0 libdbus-1-3 libcups2 libxkbcommon0 libatspi2.0-0 libxcomposite1 libxdamage1 libxfixes3 libxrandr2 libgbm1 libasound2 fonts-wqy-zenhei fonts-wqy-microhei fonts-noto-cjk poppler-utils pandoc curl unzip zip default-mysql-client postgresql-client libreoffice-core libcairo2 libcairo2-dev libpango1.0-0 libpangocairo-1.0-0 libgdk-pixbuf2.0-0 libxml2 libxslt1.1 && rm -rf /var/lib/apt/lists/* # buildkit

RUN |2 HF_ENDPOINT=https://hf-mirror.com PLAYWRIGHT_DOWNLOAD_CONNECTION_TIMEOUT=600000 /bin/sh -c mkdir -p /etc/pip && echo "[global]\nindex-url = https://pypi.tuna.tsinghua.edu.cn/simple\ntrusted-host = pypi.tuna.tsinghua.edu.cn" > /etc/pip/pip.conf && npm config set registry https://registry.npmmirror.com && mkdir -p /app/npm-global && npm install -g firecrawl-cli # buildkit

RUN |2 HF_ENDPOINT=https://hf-mirror.com PLAYWRIGHT_DOWNLOAD_CONNECTION_TIMEOUT=600000 /bin/sh -c pip3 install --break-system-packages --timeout 600 --retries 10 -i https://pypi.tuna.tsinghua.edu.cn/simple pydantic requests httpx aiohttp beautifulsoup4 lxml defusedxml pyyaml openpyxl python-docx python-pptx "json-repair>=0.30.0" # buildkit

RUN |2 HF_ENDPOINT=https://hf-mirror.com PLAYWRIGHT_DOWNLOAD_CONNECTION_TIMEOUT=600000 /bin/sh -c pip3 install --break-system-packages --timeout 600 --retries 10 -i https://pypi.tuna.tsinghua.edu.cn/simple svglib reportlab edge-tts PyMuPDF mammoth markdownify cairosvg # buildkit

RUN |2 HF_ENDPOINT=https://hf-mirror.com PLAYWRIGHT_DOWNLOAD_CONNECTION_TIMEOUT=600000 /bin/sh -c pip3 install --break-system-packages --timeout 600 --retries 10 -i https://pypi.tuna.tsinghua.edu.cn/simple pandas numpy pypdf pdfplumber pdf2image Pillow matplotlib && mkdir -p /root/.config/matplotlib && echo "font.family: sans-serif" > /root/.config/matplotlib/matplotlibrc && echo "font.sans-serif: WenQuanYi Micro Hei, Noto Sans CJK SC, SimHei, DejaVu Sans" >> /root/.config/matplotlib/matplotlibrc && echo "axes.unicode_minus: False" >> /root/.config/matplotlib/matplotlibrc && python3 -c "import matplotlib.font_manager; matplotlib.font_manager._rebuild()" 2>/dev/null || true # buildkit

RUN |2 HF_ENDPOINT=https://hf-mirror.com PLAYWRIGHT_DOWNLOAD_CONNECTION_TIMEOUT=600000 /bin/sh -c pip3 install --break-system-packages --timeout 600 --retries 10 -i https://pypi.tuna.tsinghua.edu.cn/simple "playwright==1.57.0" crawl4ai yfinance anthropic mcp # buildkit

RUN |2 HF_ENDPOINT=https://hf-mirror.com PLAYWRIGHT_DOWNLOAD_CONNECTION_TIMEOUT=600000 /bin/sh -c mkdir -p /app/.playwright-python && for host in https://registry.npmmirror.com/-/binary/playwright https://cdn.playwright.dev/dbazure/download/playwright https://playwright.download.prss.microsoft.com/dbazure/download/playwright https://cdn.playwright.dev; do echo "Installing Python Playwright Chromium from ${host}..." && PLAYWRIGHT_BROWSERS_PATH=/app/.playwright-python PLAYWRIGHT_DOWNLOAD_HOST=${host} PLAYWRIGHT_DOWNLOAD_CONNECTION_TIMEOUT=${PLAYWRIGHT_DOWNLOAD_CONNECTION_TIMEOUT} playwright install chromium && break; done && chmod -R 755 /app/.playwright-python # buildkit

RUN |2 HF_ENDPOINT=https://hf-mirror.com PLAYWRIGHT_DOWNLOAD_CONNECTION_TIMEOUT=600000 /bin/sh -c curl -sSL https://dot.net/v1/dotnet-install.sh -o /tmp/dotnet-install.sh && chmod +x /tmp/dotnet-install.sh && /tmp/dotnet-install.sh --channel 8.0 --runtime dotnet --install-dir /usr/local/dotnet && rm /tmp/dotnet-install.sh # buildkit

RUN |2 HF_ENDPOINT=https://hf-mirror.com PLAYWRIGHT_DOWNLOAD_CONNECTION_TIMEOUT=600000 /bin/sh -c mkdir -p /app/data /app/data/agent-skills /app/data/pets /app/skills /app/private-plugins /app/config /app/python-venv /app/.playwright /app/.playwright-python /app/models/embeddings /app/data/claude-sdk /app/npm-global && chown -R node:node /app # buildkit

RUN |2 HF_ENDPOINT=https://hf-mirror.com PLAYWRIGHT_DOWNLOAD_CONNECTION_TIMEOUT=600000 /bin/sh -c mkdir -p /home/node/.config/matplotlib /home/node/.cache/matplotlib && echo "font.family: sans-serif" > /home/node/.config/matplotlib/matplotlibrc && echo "font.sans-serif: WenQuanYi Micro Hei, Noto Sans CJK SC, SimHei, DejaVu Sans" >> /home/node/.config/matplotlib/matplotlibrc && echo "axes.unicode_minus: False" >> /home/node/.config/matplotlib/matplotlibrc && chown -R node:node /home/node/.config /home/node/.cache && su -s /bin/sh node -c "HOME=/home/node python3 -c \"import matplotlib; matplotlib.use('Agg'); import matplotlib.font_manager as fm; fm._rebuild(); print('Font cache rebuilt for node user')\"" 2>/dev/null || true # buildkit

COPY --chown=node:node package*.json ./ # buildkit

COPY --chown=node:node scripts/ scripts/ # buildkit

USER node

RUN |2 HF_ENDPOINT=https://hf-mirror.com PLAYWRIGHT_DOWNLOAD_CONNECTION_TIMEOUT=600000 /bin/sh -c npm ci --legacy-peer-deps --omit=dev --include=optional && node_modules/.bin/lark-cli --version || { echo "ERROR: lark-cli binary missing, @larksuite/cli postinstall may have failed"; exit 1; } # buildkit

RUN |2 HF_ENDPOINT=https://hf-mirror.com PLAYWRIGHT_DOWNLOAD_CONNECTION_TIMEOUT=600000 /bin/sh -c npm rebuild nodejieba --build-from-source && node -e "const jieba = require('nodejieba'); const tokens = jieba.cutForSearch('创新工场供应链会议'); if (!tokens.includes('供应链')) throw new Error('nodejieba verification failed: ' + tokens.join('/')); console.log('nodejieba OK:', tokens.join('/'))" # buildkit

RUN |2 HF_ENDPOINT=https://hf-mirror.com PLAYWRIGHT_DOWNLOAD_CONNECTION_TIMEOUT=600000 /bin/sh -c npm rebuild node-llama-cpp --build-from-source && npm rebuild argon2 && npm rebuild @napi-rs/canvas && npm rebuild @mariozechner/clipboard || true # buildkit

RUN |2 HF_ENDPOINT=https://hf-mirror.com PLAYWRIGHT_DOWNLOAD_CONNECTION_TIMEOUT=600000 /bin/sh -c ARCH=$(node -p "process.arch") && OS=$(node -p "process.platform") && echo "Installing sharp for ${OS}-${ARCH}..." && npm install --os=${OS} --cpu=${ARCH} sharp --legacy-peer-deps # buildkit

RUN |2 HF_ENDPOINT=https://hf-mirror.com PLAYWRIGHT_DOWNLOAD_CONNECTION_TIMEOUT=600000 /bin/sh -c ARCH=$(node -p "process.arch") && PLATFORM=$(node -p "process.platform") && OS=$([ "$PLATFORM" = "darwin" ] && echo "macos" || echo "linux") && PKG="sqlite-vec-${OS}-${ARCH}" && echo "Installing ${PKG} for sqlite-vec native extension..." && npm install "${PKG}" --legacy-peer-deps --no-save # buildkit

RUN |2 HF_ENDPOINT=https://hf-mirror.com PLAYWRIGHT_DOWNLOAD_CONNECTION_TIMEOUT=600000 /bin/sh -c node --input-type=module <<'JSEOF' import { resolveModelFile } from 'node-llama-cpp'; const modelUri = 'hf:CompendiumLabs/bge-small-zh-v1.5-gguf/bge-small-zh-v1.5-q4_k_m.gguf'; const directory = process.env.MANTISBOT_LOCAL_EMBEDDING_CACHE_DIR || '/app/models/embeddings'; const modelPath = await resolveModelFile(modelUri, { directory, cli: false, }); console.log(`bge-small-zh model pre-downloaded to ${modelPath}`); JSEOF # buildkit

RUN |2 HF_ENDPOINT=https://hf-mirror.com PLAYWRIGHT_DOWNLOAD_CONNECTION_TIMEOUT=600000 /bin/sh -c for host in https://registry.npmmirror.com/-/binary/playwright https://cdn.playwright.dev/dbazure/download/playwright https://playwright.download.prss.microsoft.com/dbazure/download/playwright https://cdn.playwright.dev; do echo "Installing Node.js Playwright Chromium from ${host}..." && PLAYWRIGHT_DOWNLOAD_HOST=${host} PLAYWRIGHT_DOWNLOAD_CONNECTION_TIMEOUT=${PLAYWRIGHT_DOWNLOAD_CONNECTION_TIMEOUT} node node_modules/playwright-core/cli.js install chromium && break; done && chmod -R 755 /app/.playwright # buildkit

ENV PATH=/app/node_modules/.bin:/home/node/.local/bin:/app/npm-global/bin:/usr/local/dotnet:/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin

COPY --chown=node:node /app/dist ./dist/ # buildkit

COPY --chown=node:node /app/skills-default-encrypted ./skills-default-encrypted/ # buildkit

COPY --chown=node:node plugins/ ./plugins/ # buildkit

COPY --chown=node:node docker-entrypoint.sh ./docker-entrypoint.sh # buildkit

RUN |2 HF_ENDPOINT=https://hf-mirror.com PLAYWRIGHT_DOWNLOAD_CONNECTION_TIMEOUT=600000 /bin/sh -c chmod +x /app/docker-entrypoint.sh # buildkit

COPY --chown=node:node /tmp/minimax-docx-publish/ /app/skills-default-encrypted/docx/scripts/dotnet/publish/ # buildkit

COPY --chown=node:node data/agent-profiles ./data/agent-profiles/ # buildkit

COPY --chown=node:node data/pets ./data/pets/ # buildkit

COPY --chown=node:node config/config.example.json ./config/config.example.json # buildkit

RUN |2 HF_ENDPOINT=https://hf-mirror.com PLAYWRIGHT_DOWNLOAD_CONNECTION_TIMEOUT=600000 /bin/sh -c cp -r /app/data/agent-profiles /app/agent-profiles-default && cp -r /app/data/pets /app/pets-default # buildkit

EXPOSE [8118/tcp]

CMD ["bash" "/app/docker-entrypoint.sh"]