FROM python:3.10-slim

# ---- HF-required environment ----
ENV PYTHONUNBUFFERED=1 \
    PORT=7860

# ---- System deps ----
RUN apt-get update && apt-get install -y \
    git \
    build-essential \
    curl \
    && rm -rf /var/lib/apt/lists/*

# ---- Create non-root user (MANDATORY for HF) ----
RUN useradd -m -u 1000 user

# ---- App directory ----
WORKDIR /home/user/app

# ---- Copy project files ----
COPY . .

# ---- Fix permissions ----
RUN chown -R user:user /home/user/app

# ---- Switch to non-root ----
USER user

# ---- Python deps (CPU-safe) ----
RUN pip install --no-cache-dir --upgrade pip && \
    pip install --no-cache-dir \
        fastapi \
        uvicorn \
        transformers \
        sentencepiece \
        llama-cpp-python \
        psutil

# ---- HF ONLY exposes this port ----
EXPOSE 7860

# ---- RUN app.py (THIS IS THE FIX) ----
CMD ["python", "app.py"]