FROM python:3.12-slim AS base

WORKDIR /app

# Install package with HTTP extras
COPY pyproject.toml README.md ./
COPY src/ ./src/
RUN pip install --no-cache-dir ".[http]" \
    && rm -rf /root/.cache/pip

# Create non-root user
RUN useradd --create-home --shell /bin/bash mcp
USER mcp

ENV MCP_HTTP=1
ENV MCP_HOST=0.0.0.0
ENV MCP_PORT=8080

EXPOSE 8080

HEALTHCHECK --interval=30s --timeout=5s --start-period=10s --retries=3 \
    CMD python -c "import urllib.request; urllib.request.urlopen('http://localhost:8080/health')"

CMD ["pointguard-mcp"]
