FROM python:3.12-slim-bookworm
RUN apt-get update && apt-get install -y --no-install-recommends git ca-certificates \
    && rm -rf /var/lib/apt/lists/* \
    && groupadd --gid 10001 preview && useradd --uid 10001 --gid preview --create-home preview
WORKDIR /app
COPY requirements.txt /app/requirements.txt
RUN pip install --no-cache-dir -r requirements.txt
COPY gateway /app/gateway
COPY outcomes /app/outcomes
COPY developer_preview /app/developer_preview
COPY research /app/research
COPY output /app/output
RUN mkdir /state /secrets /exports && chown -R preview:preview /state /secrets /exports /app/output
USER 10001:10001
ENV PYTHONDONTWRITEBYTECODE=1 PYTHONUNBUFFERED=1
CMD ["python", "-m", "developer_preview.boot", "gateway"]
