FROM ghcr.io/astral-sh/uv:python3.12-bookworm-slim

ENV PYTHONUNBUFFERED=1 \
    PYTHONDONTWRITEBYTECODE=1 \
    UV_LINK_MODE=copy \
    UV_COMPILE_BYTECODE=1

WORKDIR /app

COPY pyproject.toml README.md ./
COPY src ./src

RUN uv pip install --system --no-cache .

RUN useradd --create-home --uid 10001 gateway
USER gateway
WORKDIR /home/gateway

ENTRYPOINT ["mcp-audit-gateway"]
CMD ["serve", "--transport", "stdio"]
