Update Dockerfile

Dockerfile

@@ -21,6 +21,7 @@ RUN apt-get update && \
     apt-get clean && rm -rf /var/lib/apt/lists/*
 
 # Copy entrypoint script and make it executable
+# Note: At this point, /app is owned by root, but entrypoint.sh is copied in.
 COPY entrypoint.sh /app/
 RUN chmod +x /app/entrypoint.sh
 
@@ -37,27 +38,26 @@ ENV PATH="${BUN_INSTALL}/bin:${PATH}"
 USER root
 RUN pip install --no-cache-dir mcpo uv
 
-# --- Playwright Installation Section (Revised) ---
-
-# 1. Create the target Playwright cache directory AND set ownership EARLY
-#    This is the path where the error message indicates Playwright is looking.
-RUN mkdir -p /app/.cache/ms-playwright && chown -R mcp:mcp /app/.cache
-
-# 2. Set the environment variable to tell Playwright where to install/find browsers
-#    This applies to BOTH the build-time install command below AND the runtime environment.
+# --- Playwright Installation Section ---
+# Create the target Playwright cache directory (owned by root initially)
+RUN mkdir -p /app/.cache/ms-playwright
+# Set the environment variable to tell Playwright where to install/find browsers
 ENV PLAYWRIGHT_BROWSERS_PATH="/app/.cache/ms-playwright"
-
-# 3. Install Playwright browsers using npx (still as root, but targeting the owned directory)
-#    It *should* now respect the PLAYWRIGHT_BROWSERS_PATH
+# Install Playwright browsers using npx (as root)
 RUN npx playwright install chromium --with-deps
-
 # --- End of Playwright Section ---
 
-# Set general cache directory for other tools like uv
-# Ensure the parent dir exists and is owned by mcp (already done above for ms-playwright)
+# Set general cache directory env var (directory created above)
 ENV XDG_CACHE_HOME="/app/.cache"
 
+# --- Change Ownership Section ---
+# NOW, change ownership of the entire /app directory and its contents to mcp
+# This includes /app/entrypoint.sh and /app/.cache and its contents (like playwright browsers)
+RUN chown -R mcp:mcp /app
+# --- End of Change Ownership Section ---
+
 # Switch back to non-root user for running the application
+# This user now owns /app and can write config.json into it.
 USER mcp
 
 # Expose the port mcpo will listen on