README.md

---
title: Copper Group Dashboard
emoji: 📊
colorFrom: yellow
colorTo: blue
sdk: streamlit
sdk_version: "1.39.0"
app_file: streamlit_app.py
pinned: false
hf_oauth: true
hf_oauth_authorized_org: CB-Group
hf_oauth_expiration_minutes: 480
---

# Copper Group Dashboard

Internal dashboard for Copper Group restaurants (Copper Buffet + Tiew Copper).

Data source: a private Hugging Face dataset repo
(`CB-Group/CB-Dashboard-Data`), refreshed by
`Optimized_Daily_Data_Collection.py` on the operations laptop.

## Access model

- The Space is **public** so the URL resolves on any device, including
  mobile (where private-Space cookie scoping is unreliable).
- Sign-in is **gated by HF OAuth**, restricted to members of the
  `CB-Group` organization (`hf_oauth_authorized_org`). Non-members
  hit the HF authorize page and get rejected before reaching our app.
- (Optional) `ALLOWED_USERS` secret further narrows access to specific
  HF usernames inside the org — comma-separated, case-insensitive.
- The dataset stays **private**; only the container's `HF_TOKEN` reads it.
- Sessions last `hf_oauth_expiration_minutes` (default 8 hours).

## Space secrets required

- `HF_REPO`         — `CB-Group/CB-Dashboard-Data`
- `HF_TOKEN`        — fine-grained token with read access to that dataset
- `ALLOWED_USERS`   — (optional) `username1,username2,username3`

`OAUTH_CLIENT_ID`, `OAUTH_CLIENT_SECRET`, `OPENID_PROVIDER_URL`, and
`SPACE_HOST` are injected automatically by HF when `hf_oauth: true` is set —
don't set them manually.