Deploy Attendwise teacher pilot from eb71b15

Dockerfile

@@ -1,2 +1,16 @@
-FROM huggingface/autotrain-advanced:latest
-CMD uvicorn autotrain.app:app --host 0.0.0.0 --port 7860 --reload --workers 4
+FROM node:24-bookworm-slim
+ARG SOURCE_REV=eb71b15c9c26911909ea1bfbebb981b9c5b04011
+RUN apt-get update && apt-get install -y --no-install-recommends ca-certificates curl python3 make g++ \
+    && rm -rf /var/lib/apt/lists/*
+WORKDIR /app
+# Pin SOURCE_REV to a reviewed, pushed commit; no credentials or runtime data
+# enter the image or the public Space repository.
+RUN test -n "$SOURCE_REV" \
+    && curl -fsSL "https://codeload.github.com/imisa2/bluetooth-attendance/tar.gz/$SOURCE_REV" \
+       | tar -xz --strip-components=1 -C /app
+WORKDIR /app/backend
+RUN npm ci && npm run check && chown -R node:node /app
+ENV NODE_ENV=production PORT=7860
+USER node
+EXPOSE 7860
+CMD ["node", "--import", "tsx", "src/hosting/space.ts"]

README.md

@@ -1,11 +1,32 @@
 ---
-title: AutoTrain Advanced
-emoji: 🚀
-colorFrom: blue
-colorTo: green
+title: Attendwise
+emoji: 🎓
+colorFrom: green
+colorTo: blue
 sdk: docker
+app_port: 7860
 pinned: false
-license: afl-3.0
 ---
 
-Check out the configuration reference at https://huggingface.co/docs/hub/spaces-config-reference
+# Attendwise
+
+Classroom attendance, courses, sessions and teacher appointments in one workspace.
+
+This is a teacher pilot deployment. Open the app in a separate browser tab at `/admin/`.
+The dashboard uses secure first-party cookies, so the embedded Space frame is intentionally blocked.
+
+The existing CPU Basic allocation has no compute charge. It may sleep when unused.
+The owner must keep `imisa2/attendwise-storage` **private**, mounted read/write at `/data`.
+The app keeps SQLite on local disk and publishes eight rolling complete snapshots to that bucket.
+It restores the latest committed snapshot before accepting requests and waits for persistence
+before returning successful API changes. A failed checksum stops startup for owner recovery.
+Run only one replica. This storage path is for a pilot, not a multi-instance institutional service.
+
+On first startup the app generates its own unique runtime secrets and an owner login.
+The owner can retrieve `launch-credentials.json` from the private bucket while signed into Hugging Face.
+That file, the runtime secrets and snapshots are never served by Attendwise or committed to Git.
+Google sign-in and reset email require separate provider configuration; email/password login works now.
+
+The image is built from an explicitly pinned source commit in
+[imisa2/bluetooth-attendance](https://github.com/imisa2/bluetooth-attendance).
+The previous AutoTrain starter remains recoverable in this Space's Git history.