FROM python:3.12-slim

WORKDIR /app

# Install system deps
RUN apt-get update && apt-get install -y --no-install-recommends \
    curl \
    && rm -rf /var/lib/apt/lists/*

# Copy source
COPY pyproject.toml ./
COPY src/ ./src/

# Install with broker extras
RUN pip install --no-cache-dir -e ".[alpaca,kraken]"

# Non-root for security
USER nobody

# Data volume mount point
VOLUME ["/app/data"]

CMD ["pgt", "--help"]
