reverted all changes to old

DEPLOYMENT_STATUS.md

@@ -1,63 +0,0 @@
-# HF Spaces Deployment Summary
-
-## ✅ Completed
-1. **Dockerized Flask app** for Hugging Face Spaces
-2. **Database initialization** - auto-creates tables on startup
-3. **Login/Registration** - fully functional
-4. **Secrets configuration** - SECRET_KEY set in `.env`
-5. **Logging added** - debug auth routes
-
-## 🔧 Current Configuration
-- **App URL**: https://crackbit-ai-learning-path-generator.hf.space
-- **Port**: 7860 (HF Spaces default)
-- **Workers**: 1 worker + 4 threads (prevents CSRF issues)
-- **Database**: SQLite (ephemeral - resets on restart)
-- **Session**: Secure cookies disabled for HF internal HTTP
-- **CSRF**: Temporarily disabled (WTF_CSRF_ENABLED = False)
-
-## 📝 Testing Checklist
-- [ ] Register new user → Should redirect to home with success message
-- [ ] Login with registered user → Should redirect to home with greeting
-- [ ] Generate learning path → Should work without login (guest mode)
-- [ ] Check logs for login/registration messages
-
-## ⚠️ Known Issues
-1. **Database is ephemeral** - User data resets on Space restart
-   - Fix: Use external database (Supabase, Neon, etc.)
-2. **CSRF disabled** - For security, should be re-enabled with session backend
-   - Fix: Use Flask-Session with Redis or database backend
-
-## 🔐 Security TODOs
-1. Remove/regenerate API keys from `.env` (currently in git)
-   - Move to HF Space Repository Secrets instead
-2. Regenerate these keys:
-   - `OPENROUTER_API_KEY`
-   - `PERPLEXITY_API_KEY`
-3. Re-enable CSRF with persistent session backend
-
-## 📊 File Structure
-```
-hf-space/
-├── Dockerfile              # HF Spaces compatible
-├── start.sh               # Database init + gunicorn startup
-├── requirements.txt       # All Python dependencies
-├── .env                   # Environment variables (move to secrets!)
-├── config.py             # Flask configuration
-├── run.py                # App entry point
-├── web_app/
-│   ├── __init__.py       # App factory
-│   ├── auth_routes.py    # Login/registration (with logging)
-│   ├── models.py         # Database models
-│   ├── templates/        # HTML templates
-│   └── static/           # CSS, JS
-├── src/                  # Learning path generation
-├── backend/              # API routes
-└── migrations/           # Database migrations
-```
-
-## 🚀 Next Steps
-1. Test login/registration functionality
-2. For persistent data, configure external database
-3. Move secrets from .env to HF Spaces Repository Secrets
-4. Re-enable CSRF with Flask-Session backend
-5. Add monitoring/error tracking (Sentry, etc.)

Dockerfile

@@ -33,10 +33,7 @@ RUN pip install --no-cache-dir --upgrade pip && \
 COPY --chown=user . .
 
 # Create necessary directories with proper permissions
-RUN mkdir -p vector_db cache learning_paths instance
-
-# Make startup script executable
-RUN chmod +x start.sh
+RUN mkdir -p vector_db cache learning_paths
 
 # Hugging Face Spaces requires port 7860
 EXPOSE 7860
@@ -45,7 +42,6 @@ EXPOSE 7860
 ENV PORT=7860
 ENV FLASK_ENV=production
 ENV PYTHONUNBUFFERED=1
-ENV FLASK_APP=web_app:create_app
 
-# Run the startup script (initializes DB then starts gunicorn)
-CMD ["bash", "start.sh"]
+# Run the Flask app with gunicorn
+CMD ["gunicorn", "run:app", "--bind", "0.0.0.0:7860", "--workers", "2", "--timeout", "120"]

SETUP_DATABASE.md

@@ -1,77 +0,0 @@
-# Setup Persistent PostgreSQL Database (FREE)
-
-Your user database is currently wiped on every HF Space rebuild. Here's how to fix it:
-
-## ⚠️ Supabase Issue: IPv6 Only (Won't Work on HF Spaces)
-Supabase free tier only provides IPv6 connections, but HF Spaces doesn't support IPv6. Use **Neon.tech instead**.
-
-## Option 1: Neon.tech (Recommended - IPv4 + Free)
-
-1. **Create Free Account**: Go to [neon.tech](https://neon.tech) and sign up with GitHub/email
-
-2. **Create New Project**:
-   - Click "Create a project"
-   - Choose a name (e.g., "learning-path-db")
-   - Select region: **US East (Ohio)** or closest to you
-   - Click "Create project"
-
-3. **Get Connection String**:
-   - After project creation, you'll see **"Connection Details"**
-   - Copy the **"Connection string"** (the one that starts with `postgresql://`)
-   - It looks like: `postgresql://username:password@ep-xxx.us-east-2.aws.neon.tech/neondb?sslmode=require`
-   - **Important**: This connection string uses **IPv4** and works with HF Spaces!
-
-4. **Add to Hugging Face**:
-   - Go to your HF Space: https://huggingface.co/spaces/YOUR_USERNAME/YOUR_SPACE
-   - Click "Settings" tab
-   - Scroll to "Repository secrets"
-   - Click "Add a secret"
-   - Name: `DATABASE_URL`
-   - Value: Paste the Neon connection string
-   - Click "Add secret"
-
-5. **Restart Your Space**:
-   - Go back to "Files" tab
-   - Space will auto-rebuild with new database
-   - Users will persist across rebuilds! ✅
-
-**Free tier limits**: 512 MB storage, 3 GB data transfer/month - plenty for personal use!
-
-## Option 2: Supabase (Requires IPv4 Addon - $4/month)
-
-**Skip this** - Supabase free tier won't work due to IPv6-only connections.
-If you upgrade to IPv4 addon ($4/month), follow original instructions above.
-
-## Option 3: ElephantSQL (Traditional)
-
-1. Go to [elephantsql.com](https://www.elephantsql.com)
-2. Sign up and create "Tiny Turtle" plan (free)
-3. Copy the URL
-4. Add as `DATABASE_URL` secret in HF Spaces
-
----
-
-## Current Setup
-
-Your app already supports PostgreSQL - it will automatically:
-- Detect `SUPABASE_DB_URL` or `DATABASE_URL` environment variable
-- Use PostgreSQL if found, otherwise fallback to SQLite
-- Create all tables on first run
-
-## Verify It Works
-
-After adding the database secret:
-1. Wait for Space rebuild (1-2 minutes)
-2. Create a new user account
-3. Restart your Space manually
-4. Try logging in with same credentials
-5. If login works, database is persistent! 🎉
-
----
-
-**Note**: The free tier limits:
-- Supabase: 500MB database, 2GB bandwidth/month
-- Neon: 512MB storage, shared CPU
-- ElephantSQL: 20MB database, 5 concurrent connections
-
-All are plenty for learning path app with personal use.

encode_password.py

@@ -1,57 +0,0 @@
-#!/usr/bin/env python3
-"""
-URL-encode your Supabase password for connection string
-"""
-from urllib.parse import quote_plus
-
-print("=" * 60)
-print("Supabase Password URL Encoder")
-print("=" * 60)
-print()
-
-# Example connection string format
-print("Your connection string looks like:")
-print("postgresql://postgres:YOUR_PASSWORD@db.xxx.supabase.co:5432/postgres")
-print()
-
-# Get password from user
-password = input("Enter your Supabase database password: ")
-
-# URL encode it
-encoded_password = quote_plus(password)
-
-print()
-print("=" * 60)
-print(f"Original password:  {password}")
-print(f"Encoded password:   {encoded_password}")
-print("=" * 60)
-print()
-
-# Get the full connection string
-print("Now paste your FULL connection string from Supabase:")
-conn_string = input().strip()
-
-# Replace the password
-if '@' in conn_string:
-    # Extract parts
-    parts = conn_string.split('@')
-    prefix = parts[0]  # postgresql://postgres:PASSWORD
-    suffix = '@'.join(parts[1:])  # db.xxx.supabase.co:5432/postgres
-    
-    # Replace password in prefix
-    if ':' in prefix:
-        protocol_user = ':'.join(prefix.split(':')[:-1])  # postgresql://postgres
-        new_conn_string = f"{protocol_user}:{encoded_password}@{suffix}"
-        
-        print()
-        print("=" * 60)
-        print("✅ ENCODED CONNECTION STRING (copy this):")
-        print("=" * 60)
-        print(new_conn_string)
-        print()
-        print("Add this to HF Spaces as SUPABASE_DB_URL secret")
-        print("=" * 60)
-    else:
-        print("❌ Invalid connection string format")
-else:
-    print("❌ Invalid connection string - no @ symbol found")

start.sh

@@ -1,66 +0,0 @@
-#!/bin/bash
-set -e
-
-echo "=== Starting AI Learning Path Generator ==="
-
-# Set Flask app for migrations
-export FLASK_APP=web_app:create_app
-
-# Debug: Check if SECRET_KEY is set
-if [ -z "$SECRET_KEY" ]; then
-    echo "WARNING: SECRET_KEY is not set! Sessions/CSRF will not work properly."
-else
-    echo "SECRET_KEY is configured (length: ${#SECRET_KEY})"
-fi
-
-# Initialize database if it doesn't exist
-echo "Initializing database..."
-python -c "
-from web_app import create_app
-from web_app.models import db, User
-from config import Config
-from sqlalchemy import text
-
-print(f'SECRET_KEY set: {bool(Config.SECRET_KEY)}')
-print(f'IS_PRODUCTION: {Config.IS_PRODUCTION}')
-print(f'SESSION_COOKIE_SECURE: {Config.SESSION_COOKIE_SECURE}')
-print(f'Database URI: {Config.SQLALCHEMY_DATABASE_URI[:50]}...')
-
-app = create_app()
-with app.app_context():
-    try:
-        # Try to query users table - if this works, DB is fine
-        user_count = User.query.count()
-        print(f'✅ Database working ({user_count} users)')
-    except Exception as check_error:
-        print(f'Database needs setup: {str(check_error)[:100]}')
-        
-        # Nuclear option: drop and recreate entire public schema
-        try:
-            print('Performing complete database reset...')
-            with db.engine.connect() as conn:
-                conn.execute(text('DROP SCHEMA public CASCADE'))
-                conn.commit()
-                print('  Schema dropped')
-                
-                conn.execute(text('CREATE SCHEMA public'))
-                conn.commit()
-                print('  Schema recreated')
-            
-            # Now create all tables
-            db.create_all()
-            print('✅ Database schema created successfully!')
-            
-            # Verify it works
-            user_count = User.query.count()
-            print(f'✅ Verified: Database has {user_count} users')
-            
-        except Exception as create_error:
-            print(f'❌ Database reset failed: {create_error}')
-            raise
-"
-
-echo "Starting gunicorn server..."
-# Use 1 worker to avoid CSRF token mismatch between workers
-# Use threads instead for concurrency
-exec gunicorn run:app --bind 0.0.0.0:7860 --workers 1 --threads 4 --timeout 120

web_app/templates/redirect.html

@@ -1,28 +0,0 @@
-<!DOCTYPE html>
-<html lang="en">
-<head>
-    <meta charset="UTF-8">
-    <meta name="viewport" content="width=device-width, initial-scale=1.0">
-    <title>Success!</title>
-    <script src="https://cdn.tailwindcss.com"></script>
-    <link rel="stylesheet" href="{{ url_for('static', filename='css/glassmorphic.css') }}">
-</head>
-<body class="grid-background min-h-screen flex items-center justify-center px-6">
-    <div class="glass-card p-8 max-w-md text-center">
-        <div class="mb-6">
-            <svg class="w-20 h-20 mx-auto text-green-500" fill="none" stroke="currentColor" viewBox="0 0 24 24">
-                <path stroke-linecap="round" stroke-linejoin="round" stroke-width="2" d="M9 12l2 2 4-4m6 2a9 9 0 11-18 0 9 9 0 0118 0z"></path>
-            </svg>
-        </div>
-        <h1 class="text-3xl font-bold text-gray-900 dark:text-white mb-4">
-            Welcome! 🎉
-        </h1>
-        <p class="text-gray-600 dark:text-gray-400 mb-8">
-            You're successfully logged in!
-        </p>
-        <a href="{{ redirect_url }}" class="block w-full bg-blue-500 hover:bg-blue-600 text-white font-bold py-3 px-6 rounded-lg transition">
-            Go to Dashboard →
-        </a>
-    </div>
-</body>
-</html>