FROM python:3.13-slim

RUN useradd --create-home --uid 1000 appuser
WORKDIR /app
COPY requirements.txt /app/requirements.txt
RUN python -m pip install --no-cache-dir -r requirements.txt
RUN mkdir -p /app/.model-cache /app/.uploads && chown appuser:appuser /app/.model-cache /app/.uploads

COPY --chown=appuser:appuser . /app
USER appuser
ENV PYTHONUNBUFFERED=1 \
    PYTHONDONTWRITEBYTECODE=1 \
    TOKEN_VISUALISER_HOSTED=1 \
    HF_HOME=/app/.model-cache/hf \
    HF_XET_CACHE=/app/.model-cache/xet

EXPOSE 7860
CMD ["python", "-m", "streamlit", "run", "app.py", "--server.address=0.0.0.0", "--server.port=7860", "--server.headless=true", "--server.fileWatcherType=none", "--server.maxUploadSize=1024", "--browser.gatherUsageStats=false"]