FROM python:3.11-slim

WORKDIR /app
COPY . /app/

WORKDIR /app/services/governance-gateway
RUN pip install --no-cache-dir -r requirements.txt

RUN useradd -m -u 1000 user
RUN chown -R user:user /app
USER user

ENV HF_HOME="/home/user/.cache/huggingface"
ENV TRANSFORMERS_CACHE="/home/user/.cache/huggingface"
ENV PYTHONPATH="/app"

EXPOSE 7860
CMD ["uvicorn", "app.main:app", "--host", "0.0.0.0", "--port", "7860"]