FROM python:3.11-slim-bookworm

ENV PYTHONUNBUFFERED=1 \
    PIP_NO_CACHE_DIR=1 \
    HF_HOME=/home/user/.cache/huggingface

RUN useradd -m -u 1000 user

WORKDIR /app
COPY --chown=1000:1000 requirements.txt .

RUN pip install --upgrade pip \
    && pip install --index-url https://download.pytorch.org/whl/cpu "torch==2.8.0+cpu" \
    && pip install -r requirements.txt \
    && pip install "gradio[oauth,mcp]==5.49.1" "uvicorn>=0.14.0" "websockets>=10.4" spaces

COPY --chown=1000:1000 . .

USER 1000
EXPOSE 7860

CMD ["python", "app.py"]