Update Dockerfile

Dockerfile

@@ -1,43 +1,45 @@
-# Dockerfile — minimal image to run the Mini Transformer Chainlit UI
-# Uses a slim Python base. For GPU/CUDA use a CUDA-enabled base image.
+# Dockerfile for Spaces — creates writable .files and runs Chainlit
+# Uses python:3.11-slim as base. For GPU/CUDA, replace base image accordingly.
 
 FROM python:3.11-slim
 
-# --- Create non-root user (HF Spaces runs as UID 1000) ---
-RUN useradd -m -u 1000 user
-ENV HOME=/home/user \
-    PATH=/home/user/.local/bin:$PATH \
-    PYTHONUNBUFFERED=1 \
-    PIP_NO_CACHE_DIR=1
+ENV PYTHONUNBUFFERED=1
+WORKDIR /home/user/app
 
-# --- System deps ---
+# Create a non-root user (UID 1000) and home dir, then create .files with correct permissions.
+# Using a dedicated non-root user is a good practice for containerized Spaces.
 RUN apt-get update \
     && apt-get install -y --no-install-recommends build-essential git curl \
-    && rm -rf /var/lib/apt/lists/*
-
-# --- Use a writable app dir owned by UID 1000 ---
-WORKDIR /home/user/app
-
-# --- Copy project (own it as UID 1000 to avoid permission issues) ---
-COPY --chown=1000:1000 . .
-
-# --- Python deps ---
-RUN pip install --upgrade pip setuptools wheel && \
-    if [ -f requirements.txt ]; then \
-      pip install -r requirements.txt; \
+    && rm -rf /var/lib/apt/lists/* \
+    && groupadd -g 1000 appuser || true \
+    && useradd -m -u 1000 -g appuser -s /bin/bash appuser || true
+
+# Create app dir and .files, set ownership to appuser
+RUN mkdir -p /home/user/app/.files \
+    && mkdir -p /home/user/app/.cache /home/user/app/.local /home/user/app/logs \
+    && chown -R appuser:appuser /home/user/app \
+    && chmod -R 700 /home/user/app/.files
+
+# Copy project files as root, then install deps as root
+COPY . /home/user/app
+
+# Use a requirements.txt if present; otherwise install package with [server] extras
+RUN python -m pip install --upgrade pip setuptools wheel
+RUN if [ -f /home/user/app/requirements.txt ]; then \
+      pip install -r /home/user/app/requirements.txt; \
     else \
       pip install .[server]; \
     fi
 
-# --- Optional: make Chainlit's .files persistent/writable (HF Spaces) ---
-# RUN mkdir -p /data/chainlit_files && chown -R 1000:1000 /data/chainlit_files && ln -s /data/chainlit_files ./.files
-
-# --- Run as non-root ---
-USER 1000:1000
+# Switch to non-root user
+USER appuser
+ENV HOME=/home/user/app
+ENV XDG_CACHE_HOME=/home/user/app/.cache
+ENV XDG_CONFIG_HOME=/home/user/app/.config
+ENV XDG_DATA_HOME=/home/user/app/.local/share
+ENV CHAINLIT_FILES_DIR=/home/user/app/.files
 
-# --- Networking ---
 EXPOSE 7860
-ENV PORT=7860
 
-# --- Launch Chainlit ---
-CMD ["bash", "-c", "chainlit run src/mini_transformer/apps/chainlit_app.py --host 0.0.0.0 --port ${PORT}"]
+# Default command: run Chainlit against the packaged chainlit_app.py
+CMD ["bash", "-lc", "chainlit run src/mini_transformer/apps/chainlit_app.py --host 0.0.0.0 --port ${PORT:-7860}"]