FROM python:3.12-slim AS builder

WORKDIR /build
COPY pyproject.toml .
COPY LICENSE .
COPY README.md .
COPY src/ src/

RUN pip install --no-cache-dir ".[auth,telemetry,docs]" && \
    python -m spacy download en_core_web_sm

FROM python:3.12-slim

RUN useradd -r -s /bin/false appuser
WORKDIR /app

COPY --from=builder /usr/local/lib/python3.12/site-packages /usr/local/lib/python3.12/site-packages
COPY --from=builder /usr/local/bin /usr/local/bin
COPY --from=builder /build/src src/

USER appuser
EXPOSE 8000

CMD ["uvicorn", "redactai.api.app:app", "--host", "0.0.0.0", "--port", "8000"]
