fix: persist DB via HF Dataset repo — bucket FUSE mount doesn't support SQLite writes

Dockerfile

@@ -27,10 +27,11 @@ RUN CGO_ENABLED=0 GOOS=linux GOARCH=amd64 go build -ldflags="-s -w" -o server ./
 # ============================================================================
 FROM alpine:3.19
 
-RUN apk --no-cache add ca-certificates tzdata
+RUN apk --no-cache add ca-certificates tzdata python3 py3-pip \
+    && pip3 install --no-cache-dir --break-system-packages huggingface-hub
 
 WORKDIR /app
-RUN mkdir -p /data /app/data /app/static
+RUN mkdir -p /app/data /app/static
 
 # Copy Go binary
 COPY --from=backend-builder /build/backend/server .
@@ -43,8 +44,8 @@ RUN chmod +x entrypoint.sh
 COPY --from=frontend-builder /build/frontend/build ./static
 
 # Environment
-# DB runs on local disk (/app/data/) for proper SQLite locking/WAL support.
-# /data is the HF bucket mount used only for backup/restore by entrypoint.sh.
+# DB runs on local disk for proper SQLite locking/WAL support.
+# HF_TOKEN is set as a Space secret — used by entrypoint.sh for DB backup/restore.
 ENV PORT=7860
 ENV ENVIRONMENT=production
 ENV DB_PATH=/app/data/restaurant.db
@@ -52,6 +53,7 @@ ENV STATIC_DIR=/app/static
 ENV UPLOAD_DIR=/app/data/uploads
 ENV CORS_ORIGINS=*
 ENV JWT_SECRET=hss-pos-hf-deploy-2026
+ENV HF_BACKUP_REPO=FordAI/hss-pos-backup
 
 EXPOSE 7860
 

entrypoint.sh

@@ -1,50 +1,66 @@
 #!/bin/sh
 # entrypoint.sh — Persist SQLite across HF Spaces rebuilds
 #
-# Problem: HF Storage Buckets (mounted at /data) are Xet-backed FUSE mounts
-# that don't support SQLite's file locking, mmap, or WAL mode.
-#
-# Solution: Run SQLite on local disk (/app/data/), and periodically copy the
-# DB file to /data/ as a backup. On startup, restore from /data/ if present.
+# Uses huggingface-cli to upload/download the DB to a private Dataset repo.
+# HF_TOKEN must be set as a Space secret.
+# HF_BACKUP_REPO is the dataset repo (e.g. FordAI/hss-pos-backup).
 
 LOCAL_DB="/app/data/restaurant.db"
-PERSIST_DIR="/data"
-PERSIST_DB="${PERSIST_DIR}/restaurant.db"
+BACKUP_REPO="${HF_BACKUP_REPO:-FordAI/hss-pos-backup}"
+BACKUP_FILE="restaurant.db"
 
 mkdir -p /app/data
 
-# ── Restore from persistent storage on startup ──
-if [ -f "$PERSIST_DB" ]; then
-    echo "[PERSIST] Restoring database from persistent storage..."
-    cp "$PERSIST_DB" "$LOCAL_DB"
-    echo "[PERSIST] Database restored ($(du -h "$LOCAL_DB" | cut -f1))"
+# ── Restore DB from HF Dataset repo on startup ──
+if [ -n "$HF_TOKEN" ]; then
+    echo "[PERSIST] Downloading database from $BACKUP_REPO..."
+    huggingface-cli download "$BACKUP_REPO" "$BACKUP_FILE" \
+        --repo-type dataset \
+        --local-dir /app/data \
+        --token "$HF_TOKEN" \
+        --quiet 2>/dev/null
+    if [ -f "$LOCAL_DB" ] && [ "$(stat -c%s "$LOCAL_DB" 2>/dev/null || echo 0)" -gt 8192 ]; then
+        echo "[PERSIST] Database restored ($(du -h "$LOCAL_DB" | cut -f1))"
+    else
+        echo "[PERSIST] No valid backup found — starting fresh"
+        rm -f "$LOCAL_DB"
+    fi
 else
-    echo "[PERSIST] No backup found — starting fresh"
+    echo "[PERSIST] HF_TOKEN not set — persistence disabled"
 fi
 
-# ── Periodic backup: local → bucket (every 2 min) ──
+# ── Upload DB to HF Dataset repo ──
+do_backup() {
+    if [ -z "$HF_TOKEN" ]; then return; fi
+    if [ ! -f "$LOCAL_DB" ]; then return; fi
+    # Only backup if DB has real data (>8KB)
+    DB_SIZE=$(stat -c%s "$LOCAL_DB" 2>/dev/null || echo 0)
+    if [ "$DB_SIZE" -le 8192 ]; then return; fi
+
+    huggingface-cli upload "$BACKUP_REPO" "$LOCAL_DB" "$BACKUP_FILE" \
+        --repo-type dataset \
+        --token "$HF_TOKEN" \
+        --quiet 2>/dev/null \
+        && echo "[PERSIST] Backup complete ($(du -h "$LOCAL_DB" | cut -f1))" \
+        || echo "[PERSIST] Backup failed"
+}
+
+# ── Periodic backup every 5 minutes ──
 backup_loop() {
+    sleep 30  # first backup after 30s (let DB seed finish)
+    do_backup
     while true; do
-        sleep 120
-        if [ -f "$LOCAL_DB" ]; then
-            cp "$LOCAL_DB" "${PERSIST_DB}.tmp" 2>/dev/null && \
-                mv "${PERSIST_DB}.tmp" "$PERSIST_DB" 2>/dev/null && \
-                echo "[PERSIST] Backup complete ($(du -h "$PERSIST_DB" | cut -f1))" || \
-                echo "[PERSIST] Backup failed"
-        fi
+        sleep 300
+        do_backup
     done
 }
 backup_loop &
 BACKUP_PID=$!
 
-# ── Graceful shutdown: final backup before exit ──
+# ── Graceful shutdown: final backup ──
 cleanup() {
-    echo "[PERSIST] Shutdown signal received, running final backup..."
-    if [ -f "$LOCAL_DB" ]; then
-        cp "$LOCAL_DB" "$PERSIST_DB" 2>/dev/null && \
-            echo "[PERSIST] Final backup complete" || \
-            echo "[PERSIST] Final backup failed"
-    fi
+    echo "[PERSIST] Shutdown signal, running final backup..."
+    do_backup
     kill "$BACKUP_PID" 2>/dev/null || true
     exit 0
 }