📝 docs: update README with unified port architecture and Docker improvements

- Document single-port deployment: gateway serves UI/API/WS on 8080
- Add Ports & Services table showing production vs development setup
- Clarify Vite dev server (5173) proxies to gateway (8080) in dev mode
- Update WebSocket endpoint: ws://localhost:8080/ws (not separate port)
- Fix docker-compose to use root Dockerfile (includes UI bundle)
- Update test counts: 545+ files, 26,500+ tests (was 383/22,000)
- Improve gateway

Author: ersinkoc

README.md

@@ -230,9 +230,9 @@ Privacy-first personal AI assistant platform with soul agents, autonomous backgr
 ```
                          ┌──────────────┐
                          │   Web UI     │  React 19 + Vite 7
-                         │  (Port 5173) │  Tailwind CSS 4
+                         │  (bundled)   │  Tailwind CSS 4
                          └──────┬───────┘
-                                │ HTTP + SSE + WebSocket
+                                │ HTTP + SSE + WebSocket (/ws)
               ┌─────────────────┼─────────────────┐
               │                 │                  │
      ┌────────┴────────┐       │        ┌─────────┴──────────┐
@@ -362,11 +362,10 @@ cp .env.example .env
 # Start PostgreSQL (if you don't have one already)
 docker compose --profile postgres up -d
 
-# Start development (gateway + ui)
+# Start development (gateway on :8080 + Vite UI on :5173)
 pnpm dev
 
-# UI: http://localhost:5173
-# API: http://localhost:8080
+# Open http://localhost:5173 (Vite proxies API/WS to gateway)
 ```
 
 AI provider API keys are configured via the **Config Center UI** (Settings page) after setup.
@@ -493,7 +492,7 @@ The foundational runtime library. Contains the AI engine, tool system, plugin ar
 
 The API server built on [Hono](https://hono.dev/). Handles HTTP/WebSocket communication, database operations, agent execution, MCP integration, plugin management, and channel connectivity.
 
-**~76,000 LOC** across 210+ source files. **239 test files** with **11,750+ tests**.
+**~76,000 LOC** across 210+ source files. **389 test files** with **16,400+ tests**.
 
 **Route Modules (50+ top-level + 70+ sub-modules):**
 
@@ -1518,7 +1517,7 @@ Sliding window algorithm with configurable window (default 60s), max requests (d
 
 ### WebSocket Events
 
-Real-time broadcasts on `ws://localhost:18789`:
+Real-time broadcasts via WebSocket at `ws://localhost:8080/ws` (attached to the HTTP server, same port):
 
 | Event                     | Description                                      |
 | ------------------------- | ------------------------------------------------ |
@@ -1624,9 +1623,19 @@ LOG_LEVEL=info
 
 ## Deployment
 
-### Docker Compose
+### Ports & Services
+
+| Service        | Port    | Protocol | Description                                  |
+| -------------- | ------- | -------- | -------------------------------------------- |
+| **Gateway**    | `8080`  | HTTP     | REST API + bundled UI (Vite static assets)   |
+| **WebSocket**  | `8080`  | WS       | Real-time events at `/ws` (shares HTTP port) |
+| **PostgreSQL** | `25432` | TCP      | Database (mapped from container's `5432`)    |
+| **MQTT**       | `1883`  | TCP      | Mosquitto broker (optional, for edge/IoT)    |
+| **MQTT WS**    | `9001`  | WS       | MQTT WebSocket transport (optional)          |
+
+> **Note:** In production (Docker), a single port `8080` serves everything — REST API, WebSocket, and the pre-built UI. No separate frontend deployment needed.
 
-The simplest way to run OwnPilot in production:
+### Docker Compose
 
 ```bash
 cp .env.example .env
@@ -1637,15 +1646,13 @@ docker compose --profile postgres up -d
 
 # With MQTT broker for edge/IoT devices
 docker compose --profile postgres --profile mqtt up -d
-
-# UI + API: http://localhost:8080
 ```
 
-The gateway container serves the bundled UI — no separate frontend deployment needed.
+Open **http://localhost:8080** — the gateway serves the bundled React UI, REST API, and WebSocket on the same port.
 
 ### Pre-built Image
 
-A multi-arch image (amd64 + arm64) is published to GitHub Container Registry:
+A multi-arch image (amd64 + arm64) is published to GitHub Container Registry on every release:
 
 ```bash
 docker pull ghcr.io/ownpilot/ownpilot:latest
@@ -1658,19 +1665,29 @@ docker run -d \
   ghcr.io/ownpilot/ownpilot:latest
 ```
 
-Health check endpoint: `GET /health`
+Health check: `GET http://localhost:8080/health`
 
-### Manual
+### Development Mode
+
+In development, Vite runs a separate dev server with hot reload:
+
+| Service             | Port    | Description                                             |
+| ------------------- | ------- | ------------------------------------------------------- |
+| **Vite Dev Server** | `5173`  | React UI with HMR (proxies `/api` and `/ws` to gateway) |
+| **Gateway**         | `8080`  | REST API + WebSocket                                    |
+| **PostgreSQL**      | `25432` | Database                                                |
 
 ```bash
-# Build all packages
-pnpm build
+pnpm dev     # Starts gateway (8080) + Vite UI (5173)
+```
 
-# Start production server
-ownpilot start
+Open **http://localhost:5173** for development. Vite automatically proxies API calls (`/api/*`) and WebSocket (`/ws`) to the gateway on port 8080.
+
+### Manual Production
 
-# Or start gateway only
-pnpm --filter @ownpilot/gateway start
+```bash
+pnpm build        # Build all packages (includes UI static assets)
+ownpilot start    # Start production server on port 8080
 ```
 
 ---
@@ -1721,7 +1738,7 @@ pnpm clean            # Clear all build artifacts
 | **Telegram**   | Grammy 1.41                                   |
 | **CLI**        | Commander.js 14                               |
 | **MCP**        | @modelcontextprotocol/sdk                     |
-| **Testing**    | Vitest 4.x (383+ test files, 22,000+ tests)   |
+| **Testing**    | Vitest 4.x (545+ test files, 26,500+ tests)   |
 | **Linting**    | ESLint 10 (flat config)                       |
 | **Formatting** | Prettier 3.8                                  |
 | **Container**  | Docker multi-arch (ghcr.io/ownpilot/ownpilot) |

docker-compose.yml

@@ -30,7 +30,7 @@ services:
   gateway:
     build:
       context: .
-      dockerfile: packages/gateway/Dockerfile
+      dockerfile: Dockerfile
     container_name: ownpilot
     restart: unless-stopped
     ports:

packages/gateway/Dockerfile

@@ -1,48 +1,43 @@
-# OwnPilot Gateway Dockerfile
-# Multi-stage build for production optimization
+# OwnPilot Gateway-Only Dockerfile
+# API server without bundled UI (for headless/API-only deployments)
+# For full deployment (API + UI), use the root Dockerfile instead.
 
 # ============================================================================
 # Stage 1: Base
 # ============================================================================
 FROM node:22-alpine AS base
 
-# Install pnpm
-RUN npm install -g pnpm@10.29.3
+RUN corepack enable && corepack prepare pnpm@10.29.3 --activate
 
-# Set working directory
 WORKDIR /app
 
 # ============================================================================
 # Stage 2: Dependencies
 # ============================================================================
 FROM base AS dependencies
 
-# Copy workspace files
 COPY package.json pnpm-lock.yaml pnpm-workspace.yaml turbo.json ./
 COPY packages/core/package.json ./packages/core/
 COPY packages/gateway/package.json ./packages/gateway/
 COPY packages/cli/package.json ./packages/cli/
 
-# Install dependencies
 RUN pnpm install --frozen-lockfile
 
 # ============================================================================
 # Stage 3: Builder
 # ============================================================================
 FROM dependencies AS builder
 
-# Copy source code
 COPY . .
 
-# Build only necessary packages (exclude UI)
+# Build backend only (no UI)
 RUN pnpm run build --filter=@ownpilot/core --filter=@ownpilot/gateway --filter=@ownpilot/cli
 
 # ============================================================================
 # Stage 4: Production
 # ============================================================================
 FROM base AS production
 
-# Install production dependencies only
 COPY package.json pnpm-lock.yaml pnpm-workspace.yaml turbo.json ./
 COPY packages/core/package.json ./packages/core/
 COPY packages/gateway/package.json ./packages/gateway/
@@ -52,22 +47,28 @@ RUN pnpm install --frozen-lockfile --prod
 
 # Copy built artifacts
 COPY --from=builder /app/packages/core/dist ./packages/core/dist
+COPY --from=builder /app/packages/core/data ./packages/core/data
 COPY --from=builder /app/packages/gateway/dist ./packages/gateway/dist
+COPY --from=builder /app/packages/gateway/data ./packages/gateway/data
 COPY --from=builder /app/packages/cli/dist ./packages/cli/dist
 
-# Copy necessary non-code files
-COPY packages/gateway/src/db/migrations ./packages/gateway/src/db/migrations
+# Create non-root user and data directory
+RUN addgroup -g 1001 -S ownpilot && adduser -S ownpilot -u 1001 -G ownpilot
+RUN mkdir -p /app/data && chown -R ownpilot:ownpilot /app/data
 
-# Environment
 ENV NODE_ENV=production
 ENV PORT=8080
+ENV HOST=0.0.0.0
+
+USER ownpilot
 
-# Expose port
 EXPOSE 8080
 
-# Health check
-HEALTHCHECK --interval=30s --timeout=3s --start-period=5s --retries=3 \
-  CMD node -e "require('http').get('http://localhost:8080/api/v1/health', (r) => {process.exit(r.statusCode === 200 ? 0 : 1)})"
+HEALTHCHECK --interval=30s --timeout=10s --start-period=10s --retries=3 \
+  CMD wget --no-verbose --tries=1 --spider http://127.0.0.1:8080/health || exit 1
+
+LABEL org.opencontainers.image.source="https://github.com/ownpilot/ownpilot"
+LABEL org.opencontainers.image.description="OwnPilot Gateway — API server only (no UI)"
+LABEL org.opencontainers.image.licenses="MIT"
 
-# Start the gateway
 CMD ["node", "packages/gateway/dist/server.js"]