FROM python:3.11-slim

LABEL maintainer="SABKARI Mohamed <sabkari.mohamed@example.com>"
LABEL description="IntelliScan - AI-powered web vulnerability scanner"

WORKDIR /app

# System deps
RUN apt-get update && apt-get install -y --no-install-recommends \
    gcc \
    && rm -rf /var/lib/apt/lists/*

# Python deps
COPY requirements.txt .
RUN pip install --no-cache-dir --upgrade pip && \
    pip install --no-cache-dir -r requirements.txt

# Source
COPY intelliscan/ ./intelliscan/
COPY payloads/ ./payloads/
COPY setup.py README.md LICENSE ./

# Non-root user
RUN useradd -ms /bin/bash scanner && \
    chown -R scanner:scanner /app
USER scanner

# Default: launch the web dashboard
EXPOSE 7860
CMD ["python", "-m", "intelliscan", "web", "--host", "0.0.0.0", "--port", "7860"]