FROM python:3.12-slim

# Minimal system libs some plotting/geo wheels load at runtime.
RUN apt-get update && apt-get install -y --no-install-recommends \
        git libgl1 libglib2.0-0 && \
    rm -rf /var/lib/apt/lists/*

# HuggingFace Spaces run containers as uid 1000.
RUN useradd -m -u 1000 user
USER user
ENV HOME=/home/user \
    PATH=/home/user/.local/bin:$PATH

WORKDIR $HOME/app

COPY --chown=user requirements.txt .
RUN pip install --no-cache-dir --upgrade pip && \
    pip install --no-cache-dir -r requirements.txt

COPY --chown=user . .

EXPOSE 7860

# HuggingFace expects the app on port 7860; allow the Space's websocket origin.
CMD ["panel", "serve", "app.py", \
     "--address", "0.0.0.0", \
     "--port", "7860", \
     "--allow-websocket-origin", "*"]