FROM python:3.12-slim
WORKDIR /app
COPY pyproject.toml README.md LICENSE NOTICE ./
COPY src ./src
RUN pip install --no-cache-dir . && useradd --uid 65532 --create-home surface
USER 65532:65532
ENTRYPOINT ["surface-mcp"]
CMD ["serve", "--config", "/config/config.yaml"]
