FROM node:22-bookworm-slim

ENV PYTHONDONTWRITEBYTECODE=1 \
    PYTHONUNBUFFERED=1 \
    PIP_DISABLE_PIP_VERSION_CHECK=1

RUN apt-get update \
    && apt-get install -y --no-install-recommends python3 python3-venv ca-certificates \
    && rm -rf /var/lib/apt/lists/*

WORKDIR /app
RUN python3 -m venv /opt/venv
ENV PATH="/opt/venv/bin:$PATH"

COPY requirements.txt /app/requirements.txt
RUN pip install --no-cache-dir -r /app/requirements.txt

COPY bootstrap.py runtime.bundle.enc /app/

RUN groupadd --system astera \
    && useradd --system --gid astera --home-dir /app --shell /usr/sbin/nologin astera \
    && chown -R astera:astera /app

USER astera
EXPOSE 7860
CMD ["python", "bootstrap.py"]