FROM python:3.9-slim

WORKDIR /app

COPY requirements.txt .
RUN pip install --no-cache-dir -r requirements.txt

COPY . .

# Create uploads and data directory and set permissions
# It is critical to set permissions for the directory containing the SQLite DB
# because SQLite creates temporary journal files in that directory.
RUN mkdir -p /app/uploads && \
    mkdir -p /app/data && \
    chmod 777 /app/uploads && \
    chmod 777 /app/data

# Create a non-root user for security (recommended for HF Spaces)
RUN useradd -m -u 1000 user
USER user
ENV HOME=/home/user \
    PATH=/home/user/.local/bin:$PATH

EXPOSE 7860

CMD ["python", "app.py"]