FROM python:3.12-slim AS runtime

ENV PYTHONDONTWRITEBYTECODE=1 \
    PYTHONUNBUFFERED=1 \
    PIP_DISABLE_PIP_VERSION_CHECK=1

WORKDIR /app

COPY pyproject.toml README.md LICENSE ./
COPY src ./src

RUN pip install --no-cache-dir . \
    && addgroup --system wrapper \
    && adduser --system --ingroup wrapper --no-create-home wrapper

USER wrapper
EXPOSE 8080

CMD ["kite-x402-wrapper"]
