Fix HF deployment: Dockerfile + supervisor config + README metadata

Dockerfile

@@ -1,9 +1,9 @@
 # ── Base image ──────────────────────────────────────────────────────────────
-# Python 3.11 slim keeps the image lean while matching the dev environment.
-RUN useradd -m -u 1000 user
-USER user
 FROM python:3.11-slim
 
+# ── Create non-root user (HF best practice) ─────────────────────────────────
+RUN useradd -m -u 1000 user
+
 # ── System dependencies ──────────────────────────────────────────────────────
 RUN apt-get update && apt-get install -y --no-install-recommends \
         build-essential \
@@ -15,42 +15,36 @@ RUN apt-get update && apt-get install -y --no-install-recommends \
 WORKDIR /app
 
 # ── Python dependencies ──────────────────────────────────────────────────────
-# Copy requirements first so Docker caches this layer unless deps change.
 COPY requirements.txt .
 RUN pip install --no-cache-dir --upgrade pip \
- && pip install --no-cache-dir -r requirements.txt
+ && pip install --no-cache-dir -r requirements.txt \
+ && pip install --no-cache-dir supervisor
 
 # ── Application code ─────────────────────────────────────────────────────────
 COPY . .
 
-# ── Download model checkpoint from HuggingFace Hub ───────────────────────────
-# Runs at build time so the container starts instantly (no cold-download delay).
-# If HF_TOKEN is set as a build secret the download works for private repos too.
+# ── Download model checkpoint ────────────────────────────────────────────────
 RUN python scripts/download_model.py
 
+# ── Permissions (IMPORTANT for HF) ───────────────────────────────────────────
+RUN chown -R user:user /app
+
+# Switch to non-root AFTER setup
+USER user
+
 # ── Environment ──────────────────────────────────────────────────────────────
-# Tell the Streamlit UI where to find the FastAPI backend (same container).
 ENV API_URL=http://localhost:8000
-# Streamlit must listen on 0.0.0.0:7860 for Spaces to route traffic correctly.
 ENV STREAMLIT_SERVER_PORT=7860
 ENV STREAMLIT_SERVER_ADDRESS=0.0.0.0
-# Disable Streamlit's browser-open behaviour (no browser inside a container).
 ENV STREAMLIT_BROWSER_GATHER_USAGE_STATS=false
-# Keep Python output unbuffered so logs appear in real time.
 ENV PYTHONUNBUFFERED=1
-# Use /app/data as the SQLite database location (writable inside the container).
 ENV STRESS_DB_PATH=/app/stress_detection.db
 
-# ── Expose Streamlit port ────────────────────────────────────────────────────
-# HuggingFace Spaces routes all external traffic to port 7860.
+# ── Expose port ──────────────────────────────────────────────────────────────
 EXPOSE 7860
 
-# ── Process manager ──────────────────────────────────────────────────────────
-# supervisord runs FastAPI (port 8000) and Streamlit (port 7860) as two
-# supervised processes inside one container — the standard pattern for
-# HuggingFace Spaces Docker deployments that need a backend + frontend.
-RUN pip install --no-cache-dir supervisor
-
+# ── Supervisor config ────────────────────────────────────────────────────────
 COPY supervisord.conf /etc/supervisor/conf.d/supervisord.conf
 
-CMD ["/usr/local/bin/supervisord", "-c", "/etc/supervisor/conf.d/supervisord.conf"]
+# ── Start services ───────────────────────────────────────────────────────────
+CMD ["/usr/local/bin/supervisord", "-c", "/etc/supervisor/conf.d/supervisord.conf"]

supervisord.conf

@@ -1,11 +1,9 @@
 [supervisord]
 nodaemon=true
-logfile=/var/log/supervisord.log
-logfile_maxbytes=10MB
+logfile=/dev/null
 loglevel=info
-pidfile=/var/run/supervisord.pid
 
-; ── FastAPI backend ──────────────────────────────────────────────────────────
+; ── FastAPI backend ─────────────────────────────────────────
 [program:fastapi]
 command=uvicorn api.main:app --host 0.0.0.0 --port 8000 --workers 1 --log-level warning
 directory=/app
@@ -13,28 +11,18 @@ autostart=true
 autorestart=true
 startretries=3
 startsecs=5
-stdout_logfile=/var/log/fastapi.log
-stderr_logfile=/var/log/fastapi_err.log
-stdout_logfile_maxbytes=5MB
-stderr_logfile_maxbytes=5MB
+stdout_logfile=/dev/stdout
+stderr_logfile=/dev/stderr
 priority=1
 
-; ── Streamlit UI ─────────────────────────────────────────────────────────────
-; Starts 5 seconds after FastAPI so the /health endpoint is ready
-; before the UI tries to call it.
+; ── Streamlit UI ────────────────────────────────────────────
 [program:streamlit]
-command=streamlit run ui/app.py
-    --server.port=7860
-    --server.address=0.0.0.0
-    --server.headless=true
-    --browser.gatherUsageStats=false
+command=streamlit run ui/app.py --server.port=7860 --server.address=0.0.0.0 --server.headless=true --browser.gatherUsageStats=false
 directory=/app
 autostart=true
 autorestart=true
 startretries=3
 startsecs=5
-stdout_logfile=/var/log/streamlit.log
-stderr_logfile=/var/log/streamlit_err.log
-stdout_logfile_maxbytes=5MB
-stderr_logfile_maxbytes=5MB
-priority=2
+stdout_logfile=/dev/stdout
+stderr_logfile=/dev/stderr
+priority=2