FROM python:3.11-slim
WORKDIR /app
ENV PYTHONDONTWRITEBYTECODE=1 PYTHONUNBUFFERED=1
COPY deployment/requirements-claude.txt /app/requirements.txt
RUN python -m pip install --no-cache-dir -r /app/requirements.txt
COPY packages/claude/client.py packages/claude/mcp_server.py packages/claude/oauth_provider.py /app/
RUN mkdir -p /var/lib/zp-oauth && chown 65534:65534 /var/lib/zp-oauth && chmod 700 /var/lib/zp-oauth
ENV ZP_MCP_OAUTH_DB=/var/lib/zp-oauth/oauth.sqlite
USER 65534:65534
EXPOSE 8001
CMD ["python", "/app/mcp_server.py", "--transport", "http"]