Update Dockerfile

Dockerfile

@@ -1,22 +1,12 @@
 # =====================================================================
-# 1. LINUX ENGINE & ENVIRONMENT CONFIGURATION
+# 1. SYSTEM LAYER (Executed safely as Root)
 # =====================================================================
 FROM python:3.10-slim
 
 ENV PYTHONDONTWRITEBYTECODE=1
 ENV PYTHONUNBUFFERED=1
-ENV HOME=/home/user
-ENV PYTHONPATH=/home/user/app
-# Locks Playwright browser binaries completely inside the application scope
-ENV PLAYWRIGHT_BROWSERS_PATH=/home/user/app/.cache/ms-playwright
-
-# Pre-render Hugging Face user context
-RUN useradd -m -u 1000 user
-WORKDIR /home/user/app
 
-# =====================================================================
-# 2. MANUAL CHROMIUM SYSTEM DEPENDENCIES (Bypasses Playwright Sudo Script)
-# =====================================================================
+# Install bare-metal system libraries required by Chromium
 RUN apt-get update && apt-get install -y --no-install-recommends \
     curl \
     git \
@@ -36,35 +26,51 @@ RUN apt-get update && apt-get install -y --no-install-recommends \
     libpango-1.0-0 \
     libcairo2 \
     libasound2 \
+    libxshmfence1 \
+    ca-certificates \
     && rm -rf /var/lib/apt/lists/*
 
+# Create the Hugging Face user profile
+RUN useradd -m -u 1000 user
+
+# Create empty target directories and give ownership to the user immediately
+RUN mkdir -p /home/user/app /home/user/venv && \
+    chown -R user:user /home/user
+
 # =====================================================================
-# 3. PYTHON PACKAGES & PLAYWRIGHT BROWSER PIPELINE
+# 2. USER SANDBOX LAYER (Safe from Hugging Face Permission Blocks)
 # =====================================================================
-COPY --chown=user:user Server/requirements.txt* ./Server/
-COPY --chown=user:user requirements.txt* ./
+USER user
+WORKDIR /home/user/app
 
-RUN pip install --no-cache-dir --upgrade pip && \
-    if [ -f "Server/requirements.txt" ]; then pip install --no-cache-dir -r Server/requirements.txt; \
-    else pip install --no-cache-dir -r requirements.txt; fi
+# Instantiate and force the Virtual Environment to be the primary system path
+RUN python -m venv /home/user/venv
+ENV PATH="/home/user/venv/bin:$PATH"
+ENV PYTHONPATH=/home/user/app
+ENV PLAYWRIGHT_BROWSERS_PATH=/home/user/venv/ms-playwright
 
-# Clean installation of the browser package without script overrides
-RUN pip install --no-cache-dir playwright && \
-    playwright install chromium
+# Upgrade pip inside our isolated sandbox space
+RUN pip install --no-cache-dir --upgrade pip
 
 # =====================================================================
-# 4. CODE INGESTION & ISOLATED PERMISSION FIX
+# 3. DEPENDENCY & CODE INGESTION
 # =====================================================================
-COPY --chown=user:user . .
+# 🔥 FIXED: Copy requirements.txt directly from the repository root workspace
+COPY --chown=user:user requirements.txt ./
 
-# 🔥 THE CRITICAL ONE-SHOT FIX: Apply permissions ONLY to /app. 
-# Do not touch the global /home/user path to avoid sandbox blocks.
-RUN chown -R user:user /home/user/app
+RUN pip install --no-cache-dir -r requirements.txt
+
+# Install Playwright and the Chromium binaries entirely within user space
+RUN pip install --no-cache-dir playwright && \
+    playwright install chromium
+
+# Bring in the rest of your app files under native user ownership
+COPY --chown=user:user . .
 
-USER user
 EXPOSE 7860
 
 # =====================================================================
-# 5. CORE SERVICE RUNTIME BOOT
+# 4. RUNTIME EXECUTION
 # =====================================================================
-CMD ["uvicorn", "Server.main:app", "--host", "0.0.0.0", "--port", "7860"]
+# 🔥 FIXED: Targeted directly to main:app since main.py sits at repository root level
+CMD ["uvicorn", "main:app", "--host", "0.0.0.0", "--port", "7860"]