FROM python:3.11

RUN useradd -m -u 1000 user

RUN apt-get update && \
    apt-get install -y --no-install-recommends \
    build-essential \
    git \
    && rm -rf /var/lib/apt/lists/*

WORKDIR /app

RUN git clone https://kogakisaki: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@github.com/kogakisaki/leafcat-mcp.git

RUN cd leafcat-mcp \
    && pip install --no-cache-dir -r requirements.txt

RUN chown -R user: /app

WORKDIR /app/leafcat-mcp

USER user

EXPOSE 7860

CMD ["python", "app.py"]