# LaunchKit bridge worker image. Runs the outbound-only sandbox daemon next to
# the customer's E2B-compatible plane. The worker makes only OUTBOUND HTTPS
# calls, so no ports are exposed.
FROM python:3.12-slim

WORKDIR /app

# Install the package (and its e2b + httpx deps) from the build context.
COPY . /app
RUN pip install --no-cache-dir .

# `run` is the daemon; override with `doctor [--probe]` for pre-flight checks:
#   docker run --rm --env-file /etc/launchkit-worker.env <image> doctor
ENTRYPOINT ["launchkit-worker"]
CMD ["run"]
