FROM public.ecr.aws/docker/library/python:3.13-slim

WORKDIR /app
COPY --chmod=0444 acr/runtime/control_plane.py /app/control_plane.py
COPY --chmod=0555 bin/codex /opt/bma/bin/codex

EXPOSE 8080

USER 1000:1000

CMD ["python3", "-u", "/app/control_plane.py"]
