FROM python:3.12-slim

ENV PYTHONDONTWRITEBYTECODE=1 \
    PYTHONUNBUFFERED=1 \
    GATEWAY_HOST=0.0.0.0

WORKDIR /srv

COPY pyproject.toml README.md ./
COPY src ./src

RUN pip install --no-cache-dir . \
    && useradd --system --uid 10001 --user-group gateway

USER gateway

EXPOSE 8000

CMD ["python", "-m", "mcp_gtw.main"]
