FROM python:3.11-slim

WORKDIR /app

# Install package with remote extras
COPY pyproject.toml README.md ./
COPY src/ src/
RUN pip install --no-cache-dir ".[remote]"

# Run as non-root user
RUN useradd -m -r appuser
USER appuser

# No local database, no embeddings — pure API proxy
# All state lives at api.coretx.ai

EXPOSE 8080

CMD ["coretx-connect-remote"]
