Deploy bare minimum codebase for nsedash

Dockerfile

@@ -29,8 +29,15 @@ COPY requirements.txt /app/
 # Note: we use torch CPU-only wheels and --no-deps to bypass version conflicts.
 RUN pip install --no-cache-dir --no-deps --extra-index-url https://download.pytorch.org/whl/cpu -r requirements.txt
 
-# Copy application files
-COPY . /app/
+# Create a user with UID 1000
+RUN useradd -m -u 1000 user
+ENV HOME=/home/user
+
+# Copy application files and change ownership to user
+COPY --chown=user . /app/
+
+# Switch to the non-root user
+USER user
 
 # Expose HF Spaces port
 EXPOSE 7860

requirements.txt

@@ -1,307 +1,11 @@
-absl-py==2.3.1
-accelerate==1.12.0
-aiofiles==24.1.0
-aiohappyeyeballs==2.6.1
-aiohttp==3.14.1
-aiosignal==1.4.0
-aiosqlite==0.21.0
-alembic==1.17.2
-annotated-types==0.7.0
-anthropic==0.71.0
-anyio==4.12.0
-appdirs==1.4.4
-astor==0.8.1
-asttokens==3.0.1
-astunparse==1.6.3
-attrs==25.4.0
-babel==2.17.0
-backoff==2.2.1
-bcrypt==5.0.0
-beautifulsoup4==4.14.3
-blake3==1.0.8
-blinker==1.9.0
-build==1.5.0
-cachetools==6.2.4
-cbor2==5.7.1
-certifi==2025.11.12
-cffi==2.0.0
-charset-normalizer==3.4.4
-chromadb==1.1.1
-click==8.3.1
-cloudpickle==3.1.2
-colorlog==6.10.1
-comm==0.2.3
-compressed-tensors==0.12.2
-contourpy==1.3.3
-cramjam==2.11.0
-crewai==1.15.1
-crewai-cli==1.15.1
-crewai-core==1.15.1
-cryptography==46.0.3
-cuda-bindings==13.1.1
-cuda-pathfinder==1.3.3
-cuda-python==13.1.1
-cupy-cuda12x==13.6.0
-curl-cffi==0.13.0
-cycler==0.12.1
-debugpy==1.8.19
-decorator==5.2.1
-deprecation==2.1.0
-depyf==0.20.0
-dill==0.4.0
-diskcache==5.6.3
-distro==1.9.0
-dnspython==2.8.0
-docstring-parser==0.17.0
-durationpy==0.10
-einops==0.8.1
-email-validator==2.3.0
-et-xmlfile==2.0.0
-executing==2.2.1
-fastapi==0.128.0
-fastapi-cli==0.0.20
-fastapi-cloud-cli==0.8.0
-fastparquet==2025.12.0
-fastrlock==0.8.3
-filelock==3.20.1
-flashinfer-python==0.5.3
-Flask==3.1.3
-flatbuffers==25.12.19
-fonttools==4.61.1
-frozendict==2.4.7
-frozenlist==1.8.0
-fsspec==2025.12.0
-gast==0.7.0
-gguf==0.17.1
-google-pasta==0.2.0
-google-re2==1.1.20251105
-googleapis-common-protos==1.75.0
-greenlet==3.3.0
-grpcio==1.76.0
-h11==0.16.0
-h5py==3.14.0
-httpcore==1.0.9
-httptools==0.7.1
-httpx==0.28.1
-httpx-sse==0.4.3
-huggingface-hub==0.36.0
-idna==3.11
-ijson==3.4.0.post0
-importlib-resources==7.1.0
-instructor==1.15.4
-interegular==0.3.3
-ipykernel==7.1.0
-ipython==9.8.0
-ipython_pygments_lexers==1.1.1
-itsdangerous==2.2.0
-jedi==0.19.2
-jinja2==3.1.6
-jiter==0.12.0
-jmespath==1.0.1
-joblib==1.5.3
-json-repair==0.25.3
-json5==0.10.0
-jsonpatch==1.33
-jsonpointer==3.1.1
-jsonref==1.1.0
-jsonschema==4.25.1
-jsonschema-specifications==2025.9.1
-jupyter_client==8.7.0
-jupyter_core==5.9.1
-keras==3.13.0
-kiwisolver==1.4.9
-kubernetes==36.0.2
-lancedb==0.30.0
-langchain==1.3.11
-langchain-core==1.4.8
-langgraph==1.2.7
-langgraph-checkpoint==4.1.1
-langgraph-prebuilt==1.1.0
-langgraph-sdk==0.4.2
-langsmith==0.9.5
-lark==1.2.2
-linkify-it-py==2.1.0
-llguidance==1.3.0
-llvmlite==0.44.0
-lm-format-enforcer==0.11.3
-loguru==0.7.3
-mako==1.3.10
-markdown==3.10
-markdown-it-py==4.0.0
-markupsafe==3.0.3
-matplotlib==3.10.8
-matplotlib-inline==0.2.1
-mcp==1.26.0
-mdit-py-plugins==0.6.1
-mdurl==0.1.2
-mistral-common==1.8.8
-ml-dtypes==0.5.4
-mmh3==5.2.1
-mpmath==1.3.0
-msgpack==1.1.2
-msgspec==0.20.0
-multidict==6.7.0
-multitasking==0.0.12
-namex==0.1.0
-nest-asyncio==1.6.0
-networkx==3.6.1
-ninja==1.13.0
-numba==0.61.2
-numpy==2.2.6
-nvidia-cublas-cu12==12.8.4.1
-nvidia-cuda-cupti-cu12==12.8.90
-nvidia-cuda-nvcc-cu12==12.9.86
-nvidia-cuda-nvrtc-cu12==12.8.93
-nvidia-cuda-runtime-cu12==12.8.90
-nvidia-cudnn-cu12==9.10.2.21
-nvidia-cudnn-frontend==1.17.0
-nvidia-cufft-cu12==11.3.3.83
-nvidia-cufile-cu12==1.13.1.3
-nvidia-curand-cu12==10.3.9.90
-nvidia-cusolver-cu12==11.7.3.90
-nvidia-cusparse-cu12==12.5.8.93
-nvidia-cusparselt-cu12==0.7.1
-nvidia-cutlass-dsl==4.3.4
-nvidia-ml-py==13.590.44
-nvidia-nccl-cu12==2.27.5
-nvidia-nvjitlink-cu12==12.8.93
-nvidia-nvshmem-cu12==3.3.20
-nvidia-nvtx-cu12==12.8.90
-oauthlib==3.3.1
-onnxruntime==1.27.0
-openai==2.44.0
-openai-harmony==0.0.8
-opencv-python-headless==4.12.0.88
-openpyxl==3.1.5
-opentelemetry-api==1.42.1
-opentelemetry-exporter-otlp-proto-common==1.42.1
-opentelemetry-exporter-otlp-proto-grpc==1.42.1
-opentelemetry-exporter-otlp-proto-http==1.42.1
-opentelemetry-proto==1.42.1
-opentelemetry-sdk==1.42.1
-opentelemetry-semantic-conventions==0.63b1
-opt-einsum==3.4.0
-optree==0.18.0
-optuna==4.6.0
-optuna-integration==4.6.0
-orjson==3.11.9
-ormsgpack==1.12.2
-outlines-core==0.2.11
-overrides==7.7.0
-packaging==25.0
-pandas==2.3.3
-parso==0.8.5
-partial-json-parser==0.2.1.1.post7
-pdfminer-six==20260107
-pdfplumber==0.11.10
-peewee==3.18.3
-pendulum==3.2.0
-pexpect==4.9.0
-pillow==12.3.0
-platformdirs==4.5.1
-portalocker==2.7.0
-posthog==5.4.0
-prometheus-client==0.23.1
-prometheus-fastapi-instrumentator==7.1.0
-prompt-toolkit==3.0.52
-propcache==0.4.1
-protobuf==6.33.2
-psutil==7.2.1
-ptyprocess==0.7.0
-pure_eval==0.2.3
-py-cpuinfo==9.0.0
-pyarrow==24.0.0
-pybase64==1.4.3
-pycountry==24.6.1
-pycparser==2.23
-pydantic==2.12.5
-pydantic-core==2.41.5
-pydantic-extra-types==2.10.6
-pydantic-settings==2.10.1
-pygments==2.19.2
-pyjwt==2.13.0
-pyparsing==3.3.1
-pypdfium2==5.11.0
-pypika==0.51.1
-pyproject-hooks==1.2.0
-python-dateutil==2.9.0.post0
-python-dotenv==1.2.2
-python-json-logger==4.0.0
-python-multipart==0.0.21
-pytz==2025.2
-pyyaml==6.0.3
-pyzmq==27.1.0
-ray==2.53.0
-referencing==0.37.0
-regex==2026.1.15
-requests==2.32.5
-requests-oauthlib==2.0.0
-requests-toolbelt==1.0.0
-rich==14.2.0
-rich-toolkit==0.17.1
-rignore==0.7.6
-rpds-py==0.30.0
-safetensors==0.7.0
-scikit-learn==1.8.0
-scipy==1.16.3
-seaborn==0.13.2
-sentencepiece==0.2.1
-sentry-sdk==2.48.0
-setproctitle==1.3.7
-setuptools==80.9.0
-shellingham==1.5.4
-six==1.17.0
-sniffio==1.3.1
-soupsieve==2.8.1
-sqlalchemy==2.0.45
-sse-starlette==3.1.1
-stack_data==0.6.3
-starlette==0.50.0
-supervisor==4.3.0
-sympy==1.14.0
-tabulate==0.9.0
-tenacity==9.1.4
-tensorboard==2.20.0
-tensorboard-data-server==0.7.2
-tensorflow==2.20.0
-termcolor==3.3.0
-textual==8.2.8
-threadpoolctl==3.6.0
-tiktoken==0.12.0
-tkcalendar==1.6.1
-tokenizers==0.22.1
-tomli==2.0.2
-tomli-w==1.1.0
-torch==2.9.0
-torchaudio==2.9.0
-torchvision==0.24.0
-tornado==6.5.4
-tqdm==4.67.1
-traitlets==5.14.3
-transformers==4.57.3
-triton==3.5.0
-typer==0.21.0
-typing-inspection==0.4.2
-typing_extensions==4.15.0
-tzdata==2025.3
-uc-micro-py==2.0.0
-urllib3==2.6.2
-uuid-utils==0.16.2
-uv==0.11.26
-uvicorn==0.40.0
-uvloop==0.22.1
-vllm==0.13.0
-watchfiles==1.1.1
-wcwidth==0.2.14
-websocket-client==1.9.0
-websockets==15.0.1
-Werkzeug==3.1.4
-wrapt==2.0.1
-xgrammar==0.1.27
-xxhash==3.8.0
-yarl==1.22.0
-yfinance==1.0
-zstandard==0.25.0
-pyotp==2.10.0
-qrcode==8.2
-
+Flask>=3.1.3
+pandas>=2.2.0
+numpy>=1.24.0
+pyarrow>=15.0.0
+fastparquet>=2023.10.0
+requests>=2.31.0
+beautifulsoup4>=4.12.0
+qrcode>=8.2
+pyotp>=2.10.0
+bcrypt>=4.0.0
+huggingface-hub>=0.20.0