Dockerfile.preflight

# Preflight container image (Phase 1-C).
#
# Runs the 10-gate preflight matrix INSIDE the internal-only network:
# PostgreSQL is reached at host=postgres (container-to-container), and the
# demo-console HTTP endpoint at http://demo-console:8600 — no host-process
# substitute, no twin container, no published postgres port.
#
# Build context: repository root (see docker-compose.yml).
# Base image: python:3.12-slim — CACHED in the MergePilot-Test daemon.
# pip install at BUILD time only; NOT executed in Phase 1-C (needs separate
# dependency-install authorization).

FROM python:3.12-slim

RUN pip install --no-cache-dir psycopg2-binary==2.9.12

COPY tools/demo_console/one_click_startup.py /app/one_click_startup.py
COPY tools/demo_console/preflight.py /app/preflight.py
COPY tools/demo_console/postgres_source.py /app/postgres_source.py
COPY tools/demo_console/live_poller.py /app/live_poller.py
COPY tools/demo_console/integrity.py /app/integrity.py
COPY tools/demo_console/schema.py /app/schema.py
COPY tools/demo_console/mergepilot_integration.py /app/mergepilot_integration.py
COPY tools/demo_console/evidence_manifest.py /app/evidence_manifest.py
COPY tools/preflight_entrypoint.py /app/preflight_entrypoint.py

WORKDIR /app
ENV PYTHONUNBUFFERED=1 \
    MERGEPILOT_PG_HOST=postgres \
    MERGEPILOT_PG_PORT=5432 \
    MERGEPILOT_DEMO_CONSOLE_URL=http://demo-console:8600
# Reader DSN from MERGEPILOT_PG_DSN (env) — never argv.
ENTRYPOINT ["python", "-u", "/app/preflight_entrypoint.py"]