feat(mobile): add production gh Dockerfile for web-mobile (build wiring follows)

Author: ardaerzin

web/mobile/docker/Dockerfile.gh

@@ -0,0 +1,86 @@
+# syntax=docker/dockerfile:1.20
+FROM node:24-slim AS base
+
+WORKDIR /app
+
+ENV NEXT_TELEMETRY_DISABLED=1 \
+    TURBO_TELEMETRY_DISABLED=1 \
+    PNPM_HOME="/pnpm" \
+    PATH="/pnpm:$PATH"
+
+RUN npm install -g corepack@0.31.0 && \
+    corepack enable
+
+COPY package.json pnpm-lock.yaml pnpm-workspace.yaml turbo.json ./
+COPY patches/ ./patches/
+
+RUN PNPM_VERSION=$(node -p "require('./package.json').packageManager.split('@')[1]") && \
+    corepack prepare "pnpm@${PNPM_VERSION}" --activate
+
+
+FROM base AS builder
+
+ENV NODE_OPTIONS="--max_old_space_size=4096"
+ENV TURBO_CACHE_DIR="/app/.turbo"
+
+COPY docker/run-turbo-build.sh /usr/local/bin/run-turbo-build.sh
+
+RUN chmod +x /usr/local/bin/run-turbo-build.sh
+
+# Manifests first (change less often than source). @agenta/mobile has no
+# workspace package deps in WP1; add packages/*/package.json copies here when
+# WP2+ introduces @agenta/* imports.
+COPY mobile/package.json ./mobile/package.json
+
+RUN --mount=type=cache,id=pnpm,target=/pnpm/store \
+    pnpm fetch --frozen-lockfile
+
+RUN --mount=type=cache,id=pnpm,target=/pnpm/store \
+    pnpm install --frozen-lockfile --offline
+
+COPY mobile/ ./mobile/
+
+RUN --mount=type=cache,id=turbo-mobile,target=/app/.turbo \
+    --mount=type=cache,id=nextjs-mobile,target=/app/mobile/.next/cache \
+    --mount=type=secret,id=turbo_team,required=false \
+    --mount=type=secret,id=turbo_token,required=false \
+    /usr/local/bin/run-turbo-build.sh @agenta/mobile
+
+
+FROM node:24-slim AS runner
+
+ARG BUILD_DATE
+ARG VCS_REF
+ARG VERSION=0.0.0
+
+WORKDIR /app
+
+ENV NEXT_TELEMETRY_DISABLED=1 \
+    NODE_ENV=production
+
+RUN groupadd --gid 10001 agenta && \
+    useradd --uid 10001 --gid 10001 --shell /bin/false --create-home agenta
+
+# web/entrypoint.sh (set -e) does `mkdir -p /app/<license>/public` before
+# writing __env.js and mirroring it into mobile/public. This image ships only
+# mobile/ and /app is root-owned, so pre-create both license dirs writable
+# for the runtime user or the container exits at startup.
+RUN mkdir -p /app/oss/public /app/ee/public && \
+    chown -R agenta:agenta /app/oss /app/ee
+
+COPY --chown=agenta:agenta --from=builder /app/mobile/.next/standalone /app
+COPY --chown=agenta:agenta --from=builder /app/mobile/.next/static /app/mobile/.next/static
+COPY --chown=agenta:agenta --from=builder /app/mobile/public /app/mobile/public
+COPY --chown=agenta:agenta ./entrypoint.sh /app/entrypoint.sh
+
+USER 10001
+
+LABEL org.opencontainers.image.title="agenta-web-mobile" \
+    org.opencontainers.image.description="Agenta Mobile Web GH runtime image" \
+    org.opencontainers.image.version="${VERSION}" \
+    org.opencontainers.image.revision="${VCS_REF}" \
+    org.opencontainers.image.created="${BUILD_DATE}"
+
+ENTRYPOINT ["/app/entrypoint.sh"]
+CMD ["node", "mobile/server.js"]
+EXPOSE 3000