Dockerfile

# Stage 1: Builder
FROM python:3.13-slim AS builder

WORKDIR /app

COPY pyproject.toml requirements.txt ./

# Install Python dependencies (skip playwright — SSO runs on the host)
RUN pip install --no-cache-dir --target /app/deps \
    $(grep -v playwright requirements.txt | tr '\n' ' ')

COPY src/ ./src/

# Stage 2: Runtime
FROM python:3.13-slim

WORKDIR /app

RUN groupadd --gid 1000 appuser && \
    useradd --uid 1000 --gid appuser --create-home appuser

COPY --from=builder /app/deps /app/deps
COPY --from=builder /app/src  ./src
COPY --from=builder /app/pyproject.toml ./

RUN chown -R appuser:appuser /app

USER appuser

ENV PYTHONPATH=/app/deps:$PYTHONPATH

EXPOSE 8765

ENV MCP_TRANSPORT=sse
ENTRYPOINT ["python3", "-m", "src.server"]