opsmith-cli 0.2.2b0__tar.gz → 0.3.0b0__tar.gz

{opsmith_cli-0.2.2b0 → opsmith_cli-0.3.0b0}/.gitignore

@@ -194,4 +194,7 @@ cython_debug/
 .cursorindexingignore
 
 # Aider
-.aider*
+.aider*
+
+# Asciinema
+*.cast

{opsmith_cli-0.2.2b0 → opsmith_cli-0.3.0b0}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: opsmith-cli
-Version: 0.2.2b0
+Version: 0.3.0b0
 Summary: Opsmith is an AI devops engineer in your terminal
 License-Expression: GPL-3.0-only
 License-File: LICENSE.txt
@@ -109,13 +109,10 @@ Deploying your application with Opsmith follows a straightforward workflow:
     ```shell
     opsmith --model <your-llm-provider:model-name> --api-key <your-api-key> setup
     ```
-
-    You will be prompted to:
-    -   Provide an application name.
-    -   Select a cloud provider (e.g., AWS, GCP — see [Cloud Providers](#cloud-providers) for setup).
-    -   Review and confirm the services and infrastructure dependencies detected by the AI.
-    -   Opsmith will then generate a `Dockerfile` for each of your services.
-
+    <p >
+      <img width="600" src="https://raw.githubusercontent.com/abhishek-ram/opsmith-cli/main/resources/setup_demo.svg" alt="Opsmith Setup">
+    </p>
+    
 2.  **Deploy Your Application**
 
     After setting up the configuration, deploy your application using the `deploy` command:
@@ -124,13 +121,9 @@ Deploying your application with Opsmith follows a straightforward workflow:
     opsmith --model <your-llm-provider:model-name> --api-key <your-api-key> deploy
     ```
 
-    This will guide you through:
-    -   Creating a new deployment environment (e.g., `dev`, `staging`, `production`).
-    -   Selecting a cloud region.
-    -   Choosing a deployment strategy (e.g., `Monolithic`).
-    -   Configuring domain names for your services if needed.
-
-    Opsmith will then provision all the necessary cloud infrastructure and deploy your application.
+    <p >
+      <img width="600" src="https://raw.githubusercontent.com/abhishek-ram/opsmith-cli/main/resources/deploy_demo.svg" alt="Opsmith Setup">
+    </p>
 
 3.  **Manage Your Deployments**
 
@@ -149,14 +142,14 @@ Opsmith leverages Large Language Models (LLMs) to analyze your codebase, generat
 
 Opsmith supports a variety of models from different providers. Here is a list of the currently supported models:
 
+- **Google** (Recommended):
+  - `google-gla:gemini-2.5-pro`
 - **OpenAI**:
   - `openai:gpt-4.1`
   - `openai:gpt-o3`
 - **Anthropic**:
   - `anthropic:claude-3-7-sonnet-20250219`
   - `anthropic:claude-sonnet-4-20250514`
-- **Google**:
-  - `google-gla:gemini-2.5-pro`
 
 #### Usage
 

{opsmith_cli-0.2.2b0 → opsmith_cli-0.3.0b0}/README.md

@@ -70,13 +70,10 @@ Deploying your application with Opsmith follows a straightforward workflow:
     ```shell
     opsmith --model <your-llm-provider:model-name> --api-key <your-api-key> setup
     ```
-
-    You will be prompted to:
-    -   Provide an application name.
-    -   Select a cloud provider (e.g., AWS, GCP — see [Cloud Providers](#cloud-providers) for setup).
-    -   Review and confirm the services and infrastructure dependencies detected by the AI.
-    -   Opsmith will then generate a `Dockerfile` for each of your services.
-
+    <p >
+      <img width="600" src="https://raw.githubusercontent.com/abhishek-ram/opsmith-cli/main/resources/setup_demo.svg" alt="Opsmith Setup">
+    </p>
+    
 2.  **Deploy Your Application**
 
     After setting up the configuration, deploy your application using the `deploy` command:
@@ -85,13 +82,9 @@ Deploying your application with Opsmith follows a straightforward workflow:
     opsmith --model <your-llm-provider:model-name> --api-key <your-api-key> deploy
     ```
 
-    This will guide you through:
-    -   Creating a new deployment environment (e.g., `dev`, `staging`, `production`).
-    -   Selecting a cloud region.
-    -   Choosing a deployment strategy (e.g., `Monolithic`).
-    -   Configuring domain names for your services if needed.
-
-    Opsmith will then provision all the necessary cloud infrastructure and deploy your application.
+    <p >
+      <img width="600" src="https://raw.githubusercontent.com/abhishek-ram/opsmith-cli/main/resources/deploy_demo.svg" alt="Opsmith Setup">
+    </p>
 
 3.  **Manage Your Deployments**
 
@@ -110,14 +103,14 @@ Opsmith leverages Large Language Models (LLMs) to analyze your codebase, generat
 
 Opsmith supports a variety of models from different providers. Here is a list of the currently supported models:
 
+- **Google** (Recommended):
+  - `google-gla:gemini-2.5-pro`
 - **OpenAI**:
   - `openai:gpt-4.1`
   - `openai:gpt-o3`
 - **Anthropic**:
   - `anthropic:claude-3-7-sonnet-20250219`
   - `anthropic:claude-sonnet-4-20250514`
-- **Google**:
-  - `google-gla:gemini-2.5-pro`
 
 #### Usage
 

{opsmith_cli-0.2.2b0 → opsmith_cli-0.3.0b0}/opsmith/agent.py

@@ -1,5 +1,5 @@
 import json
-from dataclasses import dataclass
+from dataclasses import dataclass, field
 from pathlib import Path
 from typing import List, Type
 
@@ -13,6 +13,7 @@ from opsmith.utils import generate_secret_string
 @dataclass
 class AgentDeps:
     src_dir: Path
+    tracked_files: List[Path] = field(default_factory=list)
 
 
 def is_duplicate_tool_call(ctx: RunContext[AgentDeps], tool_name: str) -> bool:
@@ -64,6 +65,7 @@ def build_agent(model_config: Type[BaseAiModel], instrument: bool = False) -> Ag
                 "files in this conversation."
             )
 
+        allowed_files_abs = {str(p) for p in ctx.deps.tracked_files}
         contents = []
         for filename in filenames:
             if Path(filename).is_absolute():
@@ -74,6 +76,9 @@ def build_agent(model_config: Type[BaseAiModel], instrument: bool = False) -> Ag
 
             absolute_file_path = ctx.deps.src_dir.joinpath(filename).resolve()
 
+            if str(absolute_file_path) not in allowed_files_abs:
+                raise ModelRetry(f"File '{filename}' is not in the repo map and cannot be read.")
+
             if not str(absolute_file_path).startswith(str(ctx.deps.src_dir)):
                 raise ModelRetry(
                     f"Access denied. File '{filename}' is outside the repository root."

{opsmith_cli-0.2.2b0 → opsmith_cli-0.3.0b0}/opsmith/deployment_strategies/base.py

@@ -162,7 +162,7 @@ class BaseDeploymentStrategy(abc.ABC):
         registry_url: str,
     ) -> Dict[str, str]:
         """Builds and pushes Docker images for each service."""
-        print("\n[bold blue]Starting to build and push images...[/bold blue]")
+        print("\n[bold blue]Build and push container images to the registry[/bold blue]")
 
         images = {}
 
@@ -237,7 +237,7 @@ class BaseDeploymentStrategy(abc.ABC):
         :return: The content of the found SSH public key as a string.
         :rtype: str
         """
-        print("\n[bold blue]Checking for local SSH public key...[/bold blue]")
+        print("\n[bold blue]Looking up the local SSH public key[/bold blue]")
         system = platform.system().lower()
 
         # Common SSH key names
@@ -342,10 +342,10 @@ class BaseDeploymentStrategy(abc.ABC):
                 print("[bold red]Could not find 'ansible_user' in Terraform outputs.[/bold red]")
                 raise ValueError("Could not find 'ansible_user' in Terraform outputs.")
 
-            print("\n[bold blue]Waiting 15 seconds for instance to become ready...[/bold blue]")
+            print("[bold blue]Waiting 15 seconds for instance to become ready...[/bold blue]")
             time.sleep(15)
 
-            print("\n[bold blue]Setting up Docker on the new instance...[/bold blue]")
+            print("\n[bold blue]Setting up Docker on the newly created VM[/bold blue]")
 
             setup_docker_path = (
                 self.deployments_path / "environments" / environment.name / "docker_setup"

{opsmith_cli-0.2.2b0 → opsmith_cli-0.3.0b0}/opsmith/deployment_strategies/monolithic.py

@@ -153,14 +153,13 @@ class MonolithicDeploymentStrategy(BaseDeploymentStrategy):
         """
         Deploys the docker-compose stack and returns container logs for validation.
         """
-        print("\n[bold blue]Deploying docker-compose stack...[/bold blue]")
+        print("\n[bold blue]Deploying docker-compose stack to the VM \n[/bold blue]")
         ansible_user, instance_public_ip = (
             environment_state.virtual_machine.user,
             environment_state.virtual_machine.public_ip,
         )
         deploy_compose_path, docker_compose_path = self._get_deploy_docker_compose_path(environment)
 
-        print("\n[bold blue]Attempting to deploy and get logs...[/bold blue]")
         ansible_runner = AnsibleProvisioner(working_dir=deploy_compose_path)
         ansible_runner.copy_template(
             "docker_compose_deploy", deployment_config.cloud_provider_instance.name().lower()
@@ -241,8 +240,6 @@ class MonolithicDeploymentStrategy(BaseDeploymentStrategy):
         images: Dict[str, str],
         environment_state: MonolithicDeploymentState,
     ):
-        print("\n[bold blue]Generating docker-compose file...[/bold blue]")
-
         base_compose_template = self.docker_compose_snippets_env.get_template("base.yml")
         base_compose = base_compose_template.render(app_name=deployment_config.app_name_slug)
 
@@ -297,8 +294,8 @@ class MonolithicDeploymentStrategy(BaseDeploymentStrategy):
         messages = []
         for attempt in range(settings.max_docker_compose_gen_attempts):
             print(
-                "\n[bold]Attempt"
-                f" {attempt + 1}/{settings.max_docker_compose_gen_attempts}...[/bold]"
+                "\n[bold blue]Generating docker-compose file, Attempt"
+                f" {attempt + 1}/{settings.max_docker_compose_gen_attempts}[/bold blue]"
             )
             prompt = DOCKER_COMPOSE_GENERATION_PROMPT_TEMPLATE.format(
                 base_compose=base_compose,
@@ -338,7 +335,7 @@ class MonolithicDeploymentStrategy(BaseDeploymentStrategy):
             if is_successful:
                 print("[bold green]Docker compose deployment was successful.[/bold green]")
                 break
-            print(f"Docker compose validation 'failed' with reason: \n {reason}.")
+            print(f"[red]Docker compose validation 'failed' with reason[/red]: \n {reason}.")
 
             messages = docker_compose_response.new_messages() + validation_messages
         else:
@@ -699,7 +696,7 @@ class MonolithicDeploymentStrategy(BaseDeploymentStrategy):
 
             print(
                 "\n[bold blue]Setting up container registry for region"
-                f" '{environment.region}'...[/bold blue]"
+                f" '{environment.region}'... \n[/bold blue]"
             )
             registry_url = self._setup_container_registry(deployment_config, environment)
             images = self._build_and_push_images(deployment_config, environment, registry_url)
@@ -743,16 +740,16 @@ class MonolithicDeploymentStrategy(BaseDeploymentStrategy):
                 )
             self._confirm_dns_records(dns_records)
 
+            env_state.registry_url = registry_url
+            env_state.virtual_machine = virtual_machine_state
+            self._generate_docker_compose(deployment_config, environment, images, env_state)
+
             for domain in environment.get_domains_for_services(other_services):
                 print(
                     "\n[bold green]Your website is available at:"
                     f" https://{domain.domain_name}[/bold green]"
                 )
 
-            env_state.registry_url = registry_url
-            env_state.virtual_machine = virtual_machine_state
-            self._generate_docker_compose(deployment_config, environment, images, env_state)
-
         env_state.save(env_state_path)
         print(f"Monolithic deployment state saved to {env_state_path}")
 

{opsmith_cli-0.2.2b0 → opsmith_cli-0.3.0b0}/opsmith/git_repo.py

@@ -93,5 +93,6 @@ class GitRepo:
             f.write(ignore_block_str)
 
         print(
-            "[bold green].gitignore has been updated to ignore Terraform state files.[/bold green]"
+            "[bold green].gitignore has been updated to ignore Terraform state files.\n[/bold"
+            " green]"
         )

{opsmith_cli-0.2.2b0 → opsmith_cli-0.3.0b0}/opsmith/infra_provisioners/base_provisioner.py

@@ -45,14 +45,12 @@ class BaseInfrastructureProvisioner:
         # Use shutil.copytree to copy the contents of the template directory
         shutil.copytree(template_dir, self.working_dir, dirs_exist_ok=True)
 
-        print(f"[green]{self.command_name} files copied to: {self.working_dir}[/green]")
+        print(f"[grey50]{self.command_name} files copied to: {self.working_dir}[/grey50]")
 
     def _run_command(
         self, command: List[str], env: Optional[Dict[str, str]] = None
     ) -> Dict[str, str]:
         """Runs a command and streams its output."""
-        print(f"\n[bold]Running `{self.command_name}` in {self.working_dir}...[/bold]")
-
         process_env = os.environ.copy()
         process_env.update(env or {})
         outputs = {}

{opsmith_cli-0.2.2b0 → opsmith_cli-0.3.0b0}/opsmith/main.py

@@ -1,6 +1,6 @@
 import os
 from pathlib import Path
-from typing import Annotated, Optional, Type
+from typing import Annotated, Optional, Type, Union
 
 import inquirer
 import logfire
@@ -33,7 +33,7 @@ from opsmith.utils import (
     slugify,
 )
 
-app = typer.Typer(pretty_exceptions_show_locals=True)
+app = typer.Typer(pretty_exceptions_show_locals=False)
 
 
 def _check_external_dependencies():
@@ -52,7 +52,7 @@ def _check_external_dependencies():
         raise typer.Exit(code=1)
 
 
-def parse_model_arg(model: str) -> Type[BaseAiModel]:
+def _parse_model_arg(model: Union[str, BaseAiModel]) -> BaseAiModel:
     """
     Fetches the class corresponding to the given model name.
 
@@ -69,6 +69,8 @@ def parse_model_arg(model: str) -> Type[BaseAiModel]:
     :raises ValueError: If the given model name is not found in the model registry.
     :raises typer.BadParameter: If the provided model name is unsupported.
     """
+    if isinstance(model, BaseAiModel):
+        return model
     try:
         return MODEL_REGISTRY.get_model_class(model)()
     except ValueError:
@@ -77,7 +79,7 @@ def parse_model_arg(model: str) -> Type[BaseAiModel]:
         )
 
 
-def api_key_callback(ctx: typer.Context, value: str):
+def _api_key_callback(ctx: typer.Context, value: str):
     """
     This function serves as a callback for validating and processing an API key when
     used in conjunction with a command-line interface. The function checks whether
@@ -111,18 +113,21 @@ def main(
     model: Annotated[
         Type[BaseAiModel],
         typer.Option(
-            parser=parse_model_arg,
+            parser=_parse_model_arg,
             help="The LLM model to be used for by the AI Agent.",
+            prompt="Select the LLM model to be used for by the AI Agent",
         ),
     ],
     api_key: Annotated[
         str,
         typer.Option(
-            callback=api_key_callback,
+            callback=_api_key_callback,
             help=(
                 "The API KEY to be used for by the AI Agent. This is the API key for the specified"
                 " model."
             ),
+            prompt="Enter the API KEY for the specified model",
+            hide_input=True,
         ),
     ],
     logfire_token: Optional[str] = typer.Option(
@@ -135,6 +140,7 @@ def main(
     src_dir: Optional[str] = typer.Option(
         default=None,
         help="Source directory to be used by the command. Defaults to current working directory.",
+        envvar="OPSMITH_SRC_DIR",
     ),
     verbose: bool = typer.Option(
         False, "--verbose", "-v", help="Enable verbose output for repo map generation."
@@ -227,7 +233,7 @@ def setup(ctx: typer.Context):
             scan_services = True
 
     else:
-        print("No existing deployment configuration found. Starting analysis...")
+        print("No existing deployment configuration found. Starting analysis...\n")
         app_name_questions = [
             inquirer.Text("app_name", message="Enter the application name"),
         ]
@@ -252,7 +258,7 @@ def setup(ctx: typer.Context):
         selected_provider_value = provider_answers["cloud_provider"]
 
         # Get cloud details if new or changed
-        print(f"Initializing {selected_provider_value} provider...")
+        print(f"Initializing {selected_provider_value} provider...\n")
         provider_class = CLOUD_PROVIDER_REGISTRY.get_provider_class(selected_provider_value)
         try:
             cloud_details = provider_class.get_account_details().model_dump(mode="json")

{opsmith_cli-0.2.2b0 → opsmith_cli-0.3.0b0}/opsmith/models.py

@@ -101,6 +101,7 @@ class ModelRegistry:
         """Load built-in models"""
         for model_cls in [
             OpenAIGPT41,
+            OpenAIGPTO3,
             AnthropicClaudeSonnet37,
             AnthropicClaudeSonnet4,
             GoogleGlaGemini25Pro,
@@ -139,13 +140,13 @@ class OpenAIGPT41(BaseAiModel):
     @classmethod
     def get_model_settings(cls) -> ModelSettings:
         """Returns model-specific settings."""
-        return OpenAIModelSettings(openai_reasoning_effort="high")
+        return OpenAIModelSettings()
 
 
 class OpenAIGPTO3(BaseAiModel):
     @classmethod
     def name(cls) -> str:
-        return "gpt-o3"
+        return "o3"
 
     @classmethod
     def provider(cls) -> str:

{opsmith_cli-0.2.2b0 → opsmith_cli-0.3.0b0}/opsmith/prompts.py

@@ -70,6 +70,8 @@ service described below.
 Service Details:
 {service_info_yaml}
 
+{template_section}
+
 Repository Map:
 {repo_map_str}
 

{opsmith_cli-0.2.2b0 → opsmith_cli-0.3.0b0}/opsmith/repo_map.py

@@ -88,6 +88,9 @@ class RepoMap:
         self.src_dir = Path(src_dir).resolve()
         self.git_repo = GitRepo(self.src_dir)
         self.verbose = verbose
+        self.tracked_files: List[Path] = self.git_repo.get_git_tracked_files(
+            [str(self.src_dir), ":!**/*test*"]
+        )
 
         # Initialize tracking variables
         self.warned_files = set()
@@ -146,9 +149,7 @@ class RepoMap:
         if self.max_map_tokens <= 0:
             return None  # Repo map is disabled
 
-        all_tracked_files_paths = self.git_repo.get_git_tracked_files(
-            [str(self.src_dir), ":!**/*test*"]
-        )
+        all_tracked_files_paths = self.tracked_files
         if not all_tracked_files_paths:
             if self.verbose:
                 typer.echo("RepoMap: No git-tracked files found.", err=True)

{opsmith_cli-0.2.2b0 → opsmith_cli-0.3.0b0}/opsmith/service_detector.py

@@ -67,12 +67,14 @@ class ServiceDetector:
         verbose: bool = False,
     ):
         self.deployments_path = Path(src_dir).joinpath(settings.deployments_dir)
-        self.agent_deps = AgentDeps(src_dir=Path(src_dir))
         self.agent = agent
         self.repo_map = RepoMap(
             src_dir=src_dir,
             verbose=verbose,
         )
+        self.agent_deps = AgentDeps(
+            src_dir=Path(src_dir), tracked_files=self.repo_map.tracked_files
+        )
         self.verbose = verbose
 
     def detect_services(self, existing_config: Optional[ServiceList] = None) -> ServiceList:
@@ -130,19 +132,29 @@ class ServiceDetector:
         service_dir_path = self.deployments_path / "docker" / service.name_slug
         service_dir_path.mkdir(parents=True, exist_ok=True)
         dockerfile_path_abs = service_dir_path / "Dockerfile"
-        print(
-            "\n[bold]Generating Dockerfile for service:"
-            f" {service.language} ({service.service_type})...[/bold]"
+        print(f"\n[bold]Generating Dockerfile for service: {service.name_slug}...[/bold]")
+
+        template_name = f"{service.language.lower()}_{service.service_type.value.lower()}"
+        template_path = Path(__file__).parent / "templates" / "dockerfiles" / template_name
+        dockerfile_template = None
+        if template_path.exists():
+            with open(template_path, "r", encoding="utf-8") as f:
+                dockerfile_template = f.read()
+            print(f"[green]Using Dockerfile template: {template_name}[/green]")
+
+        dockerfile_content = self._generate_and_validate_dockerfile(
+            service, dockerfile_path_abs, dockerfile_template
         )
 
-        dockerfile_content = self._generate_and_validate_dockerfile(service, dockerfile_path_abs)
-
         with open(dockerfile_path_abs, "w", encoding="utf-8") as f:
             f.write(dockerfile_content)
         print(f"[green]Dockerfile saved to: {dockerfile_path_abs}[/green]")
 
     def _generate_and_validate_dockerfile(
-        self, service: ServiceInfo, dockerfile_path_abs: Path
+        self,
+        service: ServiceInfo,
+        dockerfile_path_abs: Path,
+        dockerfile_template: Optional[str] = None,
     ) -> str:
         """Generates and validates a Dockerfile for a given service."""
         existing_dockerfile_content = "N/A"
@@ -159,9 +171,21 @@ class ServiceDetector:
         while attempt < settings.max_dockerfile_gen_attempts:
             attempt += 1
             print(f"\n[bold]Attempt {attempt}/{settings.max_dockerfile_gen_attempts}...[/bold]")
+
+            repo_map_str = self.repo_map.get_repo_map()
+            template_section = ""
+            if dockerfile_template:
+                template_section = (
+                    "A Dockerfile template is provided below. Use it as a guide.\n"
+                    "```\n"
+                    f"{dockerfile_template}\n"
+                    "```\n"
+                )
+
             prompt = DOCKERFILE_GENERATION_PROMPT_TEMPLATE.format(
                 service_info_yaml=service_info_yaml,
-                repo_map_str=self.repo_map.get_repo_map(),
+                template_section=template_section,
+                repo_map_str=repo_map_str,
                 existing_dockerfile_content=existing_dockerfile_content,
             )
             with WaitingSpinner(text="Waiting for the LLM to generate the Dockerfile"):
@@ -182,10 +206,9 @@ class ServiceDetector:
                 )
                 break
 
-            with WaitingSpinner(text="Validating generated Dockerfile"):
-                is_successful, reason, validation_messages = self._validate_dockerfile(
-                    dockerfile_content
-                )
+            is_successful, reason, validation_messages = self._validate_dockerfile(
+                dockerfile_content
+            )
 
             if is_successful:
                 print(f"[bold green]Dockerfile validation successful: \n {reason}.[/bold green]")
@@ -209,12 +232,11 @@ class ServiceDetector:
                 raise OpsmithException("Dockerfile generation aborted by user.")
             dockerfile_content = editor_answers["dockerfile"]
 
-            with WaitingSpinner(text="Validating generated Dockerfile"):
-                completed, reason, _ = self._validate_dockerfile(dockerfile_content)
-                print(
-                    f"Dockerfile validation {'succeeded' if completed else 'failed'} "
-                    f"with reason: \n {reason}."
-                )
+            completed, reason, _ = self._validate_dockerfile(dockerfile_content)
+            print(
+                f"Dockerfile validation {'succeeded' if completed else 'failed'} "
+                f"with reason: \n {reason}."
+            )
 
         return dockerfile_content
 
@@ -328,11 +350,12 @@ class ServiceDetector:
                 build_output=build_output_str,
                 run_output=run_output_str,
             )
-            validation_response = self.agent.run_sync(
-                validation_prompt,
-                output_type=DockerfileValidation,
-                deps=self.agent_deps,
-            )
+            with WaitingSpinner(text="Waiting for the LLM to validate the Docker build output"):
+                validation_response = self.agent.run_sync(
+                    validation_prompt,
+                    output_type=DockerfileValidation,
+                    deps=self.agent_deps,
+                )
             return (
                 validation_response.output.is_successful,
                 validation_response.output.reason,

opsmith_cli-0.3.0b0/opsmith/templates/dockerfiles/python_backend_api

@@ -0,0 +1,79 @@
+# Multi-stage Docker build for Python Backend API
+
+# Build stage - for compiling dependencies and reducing final image size
+FROM PYTHON_SLIM_IMAGE as builder
+
+# Set build arguments for customization
+ARG APP_USER=appuser
+ARG APP_DIR=/app
+
+# Create application directory
+WORKDIR ${APP_DIR}
+
+# Copy dependency files first (for better layer caching)
+# TEMPLATE_INSTRUCTION: Copy all possible dependency files your project might have
+
+# Install Python dependencies
+# TEMPLATE_INSTRUCTION: Use the configured dependency manager to install the requirements
+# This list covers common package managers but is not exhaustive - adapt based on project structure
+
+# For pip with requirements.txt:
+# RUN pip install --no-cache-dir --user -r requirements.txt
+
+# For Poetry:
+# RUN pip install poetry && \
+#     poetry config virtualenvs.create false && \
+#     poetry install --only=main --no-dev
+
+# For PDM:
+# RUN pip install pdm && \
+#     pdm install --prod --no-editable
+
+# For uv:
+# RUN pip install uv && \
+#     uv pip install --system .
+
+# For Pipenv:
+# RUN pip install pipenv && \
+#     pipenv install --system --deploy
+
+# TEMPLATE_INSTRUCTION: Copy the rest of the application code
+
+# Production stage - minimal runtime image
+FROM PYTHON_SLIM_IMAGE as runner
+
+# Set build arguments
+ARG APP_USER=appuser
+ARG APP_DIR=/app
+
+# Set environment variables for Python optimization and security
+ENV PYTHONUNBUFFERED=1 \
+    PYTHONDONTWRITEBYTECODE=1 \
+    PYTHONHASHSEED=random \
+    PIP_NO_CACHE_DIR=1 \
+    PIP_DISABLE_PIP_VERSION_CHECK=1
+
+# Create non-root user for security
+RUN groupadd -r ${APP_USER} && \
+    useradd -r -g ${APP_USER} -d ${APP_DIR} -s /sbin/nologin ${APP_USER}
+
+# Create application directory and set permissions
+RUN mkdir -p ${APP_DIR} && chown -R ${APP_USER}:${APP_USER} ${APP_DIR}
+
+# Set working directory
+WORKDIR ${APP_DIR}
+
+# TEMPLATE_INSTRUCTION: Copy the installed Python packages and binaries from the builder stage
+
+# TEMPLATE_INSTRUCTION: Copy the application code from the builder stage and set ownership
+
+# TEMPLATE_INSTRUCTION: Add framework-specific build steps if any here
+
+# Switch to non-root user
+USER ${APP_USER}
+
+# TEMPLATE_INSTRUCTION: Update PATH to include user local binaries and set PYTHONPATH
+
+# TEMPLATE_INSTRUCTION: Expose port
+
+# TEMPLATE_INSTRUCTION: Choose the appropriate command to startup the API