🚧 WIP

api/Dockerfile

@@ -2,10 +2,18 @@ FROM python:3.12-slim
 
 WORKDIR /app
 
-COPY requirements.txt .
+# Build context is the repo root (see docker-compose.yml) so shared/ is
+# copyable; shared/ holds the access-control model used by api + webui.
+COPY api/requirements.txt .
 RUN pip install --no-cache-dir -r requirements.txt
 
-COPY . .
+COPY shared /app/shared
+COPY api /app/api
+
+WORKDIR /app/api
+
+# shared/ is installed at /app/shared; make it importable from /app/api.
+ENV PYTHONPATH=/app
 
 RUN useradd --system --no-create-home api
 USER api