Update Dockerfile

Dockerfile

@@ -4,8 +4,6 @@ FROM python:3.11.4-slim as builder
 
 WORKDIR /usr/src/app
 
-# We do NOT set PYTHONPYCACHEPREFIX. We will use a simpler method.
-
 # Copy and install dependencies
 COPY requirements.txt ./
 RUN pip install --no-cache-dir -r requirements.txt
@@ -13,9 +11,7 @@ RUN pip install --no-cache-dir -r requirements.txt
 # Copy the application source code
 COPY . .
 
-# Compile all .py files.
-# The -b flag creates legacy .pyc files right next to the .py files (e.g., app.pyc)
-# This is the simplest and most reliable method for our use case.
+# Compile all .py files. The -b flag creates legacy .pyc files.
 RUN python -m compileall -b -f .
 
 
@@ -27,23 +23,23 @@ WORKDIR /usr/src/app
 
 # Create a non-root user for enhanced security
 RUN useradd --create-home appuser
-USER appuser
 
-# --- THIS IS THE KEY FIX ---
-# Copy ONLY the compiled .pyc files from the builder stage.
-# The glob pattern (*) ensures we get all of them.
+# Copy the compiled .pyc files and other assets
 COPY --from=builder /usr/src/app/*.pyc .
-
-# Copy the templates and requirements file as before.
 COPY --from=builder /usr/src/app/templates ./templates
 COPY --from=builder /usr/src/app/requirements.txt .
 
+# --- THIS IS THE KEY FIX FOR PERMISSIONERROR ---
+# Change the ownership of the entire app directory to our new user.
+# This allows the user to write files like client_secrets.json and token.json.
+RUN chown -R appuser:appuser /usr/src/app
+
+# Switch to the non-root user BEFORE installing final packages and running the app
+USER appuser
+
 # Install the runtime dependencies into the final image
-USER root
 RUN pip install --no-cache-dir -r requirements.txt
-USER appuser
 
-# --- THIS IS THE SECOND CRITICAL FIX ---
-# The command MUST listen on the port Render provides via the $PORT environment variable.
-# Hardcoding a port like 7860 will cause health check failures on Render.
+# The command to run the application.
+# It will listen on the port Hugging Face provides (usually 7860) via the $PORT variable.
 CMD ["gunicorn", "app:app", "--bind", "0.0.0.0:7860"]