Claude Code: Fix permission denied errors - use /data for persistent storage

- Change WORKDIR to /data with proper permissions (chmod 777)
- Use absolute path /data/cain_status.json directly (no dynamic resolution)
- Create /data/.openclaw directory with write permissions
- Update static file paths to use absolute /data/frontend

Co-Authored-By: Claude Code

Dockerfile

@@ -6,21 +6,24 @@ LABEL space_id="tao-shen/HuggingClaw-Cain"
 LABEL sdk="docker"
 LABEL port="7860"
 
-WORKDIR /app
+# Create /data directory for persistent storage
+RUN mkdir -p /data && chmod 777 /data
+WORKDIR /data
 
 # Copy requirements and install (layer cache optimization)
-COPY requirements.txt .
-RUN pip install --no-cache-dir -r requirements.txt
+COPY requirements.txt /tmp/
+RUN pip install --no-cache-dir -r /tmp/requirements.txt
 
 # Copy all application files - combined layer for faster builds
-COPY app.py error_handlers.py entrypoint.sh openclaw.json /app/
-COPY openclaw/ /app/openclaw/
-COPY static/ /app/static/
-COPY frontend/ /app/frontend/
+COPY app.py error_handlers.py entrypoint.sh openclaw.json /data/
+COPY openclaw/ /data/openclaw/
+COPY static/ /data/static/
+COPY frontend/ /data/frontend/
 
-# Create necessary directories
-RUN mkdir -p /app/logs && \
-    chmod +x /app/entrypoint.sh
+# Create necessary directories with proper permissions
+RUN mkdir -p /data/logs /data/.openclaw && \
+    chmod +x /data/entrypoint.sh && \
+    chmod 777 /data/logs /data/.openclaw
 
 ENV PORT=7860
 EXPOSE 7860

app.py

@@ -34,8 +34,8 @@ async def lifespan(app: FastAPI):
 
 app = FastAPI(title="HuggingClaw - Cain", version="0.0.1", lifespan=lifespan)
 
-# Mount frontend folder for static assets (pixel art, fonts, HTML)
-app.mount("/frontend", StaticFiles(directory="frontend"), name="frontend")
+# Mount frontend folder for static assets (pixel art, fonts, HTML) - absolute path
+app.mount("/frontend", StaticFiles(directory="/data/frontend"), name="frontend")
 
 @app.get("/")
 async def root():

error_handlers.py

@@ -58,33 +58,11 @@ async def generic_exception_handler(request: Request, exc: Exception) -> JSONRes
 
 
 # Configuration path - cain_status.json location
-# Uses dynamic path resolution that works both locally and in Docker container
-# Tries multiple strategies to find the status file
-def _find_status_file() -> Path:
-    """Dynamically locate cain_status.json using multiple fallback strategies."""
-    # Strategy 1: Use environment variable if set (highest priority)
-    env_path = os.environ.get("CAIN_STATUS_FILE")
-    if env_path:
-        return Path(env_path)
-
-    # Strategy 2: Relative to this file's parent directory
-    # In workspace: error_handlers.py -> openclaw/.openclaw/agents/
-    # In Docker: /app/error_handlers.py -> /app/openclaw/.openclaw/agents/
-    base_dir = Path(__file__).parent.resolve()
-    relative_path = base_dir / "openclaw" / ".openclaw" / "agents" / "cain_status.json"
-    if relative_path.exists():
-        return relative_path
-
-    # Strategy 3: Check if we're in the openclaw directory already
-    # Handles cases where error_handlers.py might be in openclaw/
-    agents_dir = base_dir / ".openclaw" / "agents" / "cain_status.json"
-    if agents_dir.exists():
-        return agents_dir
-
-    # Strategy 4: Fall back to the expected path (may not exist, but that's OK)
-    return relative_path
-
-STATUS_FILE = _find_status_file()
+# Absolute path to persistent storage directory
+STATUS_FILE = Path("/data/cain_status.json")
+
+# Ensure parent directory exists with proper permissions
+STATUS_FILE.parent.mkdir(parents=True, exist_ok=True)
 
 
 def handle_status_file_read() -> Dict[str, Any]:
@@ -178,3 +156,31 @@ async def handle_websocket_send(websocket, status_data: dict) -> bool:
         return True
     except (ConnectionError, RuntimeError, Exception):
         return False
+
+
+def write_cain_status(status_data: Dict[str, Any]) -> bool:
+    """
+    Write Cain's status to the status file.
+
+    Args:
+        status_data: Dictionary with status information to write.
+
+    Returns:
+        True if write succeeded, False otherwise.
+    """
+    try:
+        # Ensure directory exists
+        STATUS_FILE.parent.mkdir(parents=True, exist_ok=True)
+
+        # Add timestamp if not present
+        if "last_updated" not in status_data:
+            status_data["last_updated"] = datetime.utcnow().isoformat() + "+00:00"
+
+        # Write to file
+        with open(str(STATUS_FILE), "w") as f:
+            json.dump(status_data, f, indent=2)
+
+        return True
+    except (PermissionError, OSError, json.JSONDecodeError) as e:
+        print(f"Error writing status file: {e}")
+        return False