FROM python:3.12-slim

LABEL org.opencontainers.image.title="scopeshift"
LABEL org.opencontainers.image.description="Scope-manipulation research artifact (authorized testing only)"
LABEL org.opencontainers.image.licenses="Research-Use"

ENV PYTHONDONTWRITEBYTECODE=1 \
    PYTHONUNBUFFERED=1 \
    PIP_NO_CACHE_DIR=1

WORKDIR /app

COPY pyproject.toml README.md LICENSE ./
COPY scopeshift ./scopeshift

RUN pip install --upgrade pip && pip install .

# In-container DNS may bind on 53 (namespace only — no host privilege required).
EXPOSE 53/udp 1337/tcp 8765/tcp

ENTRYPOINT ["scopeshift"]
CMD ["--help"]
