FROM python:3.11-slim

ENV PYTHONDONTWRITEBYTECODE=1 \
    PYTHONUNBUFFERED=1

WORKDIR /app

RUN adduser --disabled-password --gecos "" --uid 1000 appuser

COPY requirements.txt ./requirements.txt
RUN pip install --no-cache-dir --upgrade pip && \
    pip install --no-cache-dir -r requirements.txt

COPY BioSPPy ./BioSPPy
COPY app.py ./app.py

ENV MCP_TRANSPORT=http
ENV MCP_PORT=7860

EXPOSE 7860

RUN chown -R appuser:appuser /app
USER appuser

ENTRYPOINT ["python", "BioSPPy/mcp_output/start_mcp.py"]