FROM python:3.12-slim

RUN apt-get update && apt-get install -y --no-install-recommends \
    git \
    openssh-client \
    ca-certificates \
    curl \
    jq \
    ripgrep \
    tree \
    && rm -rf /var/lib/apt/lists/*

RUN useradd -m -u 1000 agent

WORKDIR /app

COPY requirements.txt /tmp/requirements.txt
RUN pip install --no-cache-dir -r /tmp/requirements.txt

USER agent

CMD ["uvicorn", "project_agent.server:app", "--host", "0.0.0.0", "--port", "8787"]