Fix HF cache dir and embedding model to avoid /data permission errors

agent_startup.py

@@ -2,10 +2,10 @@ import os
 from dotenv import load_dotenv
 load_dotenv()
 
-# Optionally write Google SA JSON (secret) to /data/sa.json for Gemini auth
+# Optionally write Google SA JSON (secret) to /tmp/sa.json for Gemini auth
 sa_json = os.getenv("GOOGLE_SERVICE_ACCOUNT_JSON")
 if sa_json:
-    sa_path = "/data/sa.json"
+    sa_path = "/tmp/sa.json"  # changed from /data to /tmp
     if not os.path.exists(sa_path):
         with open(sa_path, "w", encoding="utf-8") as f:
             f.write(sa_json)
@@ -17,11 +17,17 @@ from langchain_chroma import Chroma
 from langchain_google_genai import ChatGoogleGenerativeAI
 from langchain_community.document_loaders import PyMuPDFLoader
 from langchain.text_splitter import RecursiveCharacterTextSplitter
+import os
+
+# Force Hugging Face to use a writable cache directory
+os.environ["TRANSFORMERS_CACHE"] = "/tmp/hf_cache"
+os.environ["HF_HOME"] = "/tmp/hf_home"
 
 print("loading embedding")
 embedding_model = HuggingFaceEmbeddings(
     model_name="sentence-transformers/paraphrase-MiniLM-L3-v2",
-    model_kwargs={'device': "cpu"}
+    model_kwargs={'device': "cpu"},
+    cache_folder="/tmp/hf_cache"
 )
 
 persist_dir = os.getenv("PERSIST_DIR", "/data/chroma_db")