FROM ghcr.io/astral-sh/uv:python3.13-bookworm-slim AS builder

ENV UV_COMPILE_BYTECODE=1 \
    UV_LINK_MODE=copy \
    UV_PYTHON_DOWNLOADS=0

WORKDIR /app

RUN --mount=type=cache,target=/root/.cache/uv \
    --mount=type=bind,source=uv.lock,target=uv.lock \
    --mount=type=bind,source=pyproject.toml,target=pyproject.toml \
    uv sync --locked --no-install-project --no-dev

COPY . /app

RUN --mount=type=cache,target=/root/.cache/uv \
    uv sync --extra mcp --locked --no-dev

FROM python:3.13-slim-bookworm AS runtime

COPY --from=builder --chown=app:app /app /app

RUN echo '[tool.vault-settings]\nsecret="qdrant-mcp"' > pyproject.toml

ENV PATH="/app/.venv/bin:$PATH"

EXPOSE 8000

CMD [ "searchbox-mcp" ]