# syntax=docker/dockerfile:1.7
FROM python:3.11-slim-bookworm AS build
WORKDIR /src
RUN apt-get update && apt-get install -y --no-install-recommends gcc libffi-dev     && rm -rf /var/lib/apt/lists/*
COPY pyproject.toml ./
COPY q_mcp ./q_mcp
RUN pip install --no-cache-dir --upgrade pip==25.2     && pip install --no-cache-dir .

FROM python:3.11-slim-bookworm AS runtime
RUN useradd --create-home --uid 10001 --shell /usr/sbin/nologin mcp     && mkdir -p /home/mcp/.cache/snowflake     && chown -R mcp:mcp /home/mcp
COPY --from=build /usr/local/lib/python3.11/site-packages /usr/local/lib/python3.11/site-packages
COPY --from=build /usr/local/bin/ae-mcp /usr/local/bin/ae-mcp
USER mcp
WORKDIR /home/mcp
ENV HOME=/home/mcp     SNOWFLAKE_MCP_ALLOW_WRITE=false     SNOWFLAKE_MCP_ALLOW_PROD_READ=false     PYTHONUNBUFFERED=1
ENTRYPOINT ["ae-mcp"]
