replace UptimeRobot keep-alive implementation with a Cloudflare Workers cron-triggered proxy system

.env.example

@@ -109,9 +109,9 @@ BETTER_AUTH_SECRET=your-random-secret-here-minimum-32-characters
 # Monitoring & Uptime
 # ============================================================================
 
-# UptimeRobot keep-alive: add your Main API key (NOT Read-only or Monitor-specific).
-# Monitor is created automatically at boot. Status shown on the dashboard.
-# UPTIMEROBOT_API_KEY=ur_xxxxxxxxxxxxxxxxxxxxxxxxxxxxxx
+# Cloudflare proxy & keep-alive: add your Cloudflare API token.
+# A Worker is created automatically at boot for both outbound proxying and keep-alive.
+# CLOUDFLARE_WORKERS_TOKEN=your_cloudflare_token_here
 
 # Optional: Webhook URL for restart/failure alerts
 # WEBHOOK_URL=https://uptime-robot-webhook-url

Dockerfile

@@ -127,9 +127,9 @@ COPY paperclip-sync.py /app/
 COPY cloudflare-proxy.js /app/
 COPY cloudflare-proxy-setup.py /app/
 COPY cloudflare-worker.js /app/
-COPY setup-uptimerobot.sh /app/
+COPY cloudflare-keepalive-setup.py /app/
 
-RUN chmod +x /app/start.sh /app/setup-uptimerobot.sh
+RUN chmod +x /app/start.sh /app/cloudflare-keepalive-setup.py
 
 # Create non-root user for running Paperclip + agent CLIs
 # Claude Code refuses --dangerously-skip-permissions when running as root

README.md

@@ -16,8 +16,8 @@ secrets:
     description: Google Gemini API key for Gemini-powered agents.
   - name: OPENAI_API_KEY
     description: OpenAI API key for GPT-powered agents.
-  - name: UPTIMEROBOT_API_KEY
-    description: UptimeRobot API key for automatic monitor setup.
+  - name: CLOUDFLARE_WORKERS_TOKEN
+    description: "Cloudflare API token — auto-creates a Worker proxy and KeepAlive monitor."
 ---
 
 <!-- Badges -->
@@ -50,7 +50,7 @@ secrets:
 - ⚡ **One-click deploy:** Duplicate the Space and add your API key — nothing else needed to get started.
 - 💾 **Persistent Database:** PostgreSQL database auto-backed up to a private HF Dataset and restored on every restart — no data loss.
 - 📊 **Visual Dashboard:** Real-time status dashboard at `/` with Paperclip service health, backup status, and uptime.
-- ⏰ **Keep-Alive:** Add `UPTIMEROBOT_API_KEY` as a Space secret and the monitor is created automatically at boot — no manual setup.
+- ⏰ **Keep-Alive:** Uses `CLOUDFLARE_WORKERS_TOKEN` to automatically set up a cron-triggered keep-awake worker at boot.
 - 🌐 **Cloudflare Proxy:** Auto-provisions a Cloudflare Worker proxy for blocked outbound connections.
 - 🔒 **Secure by Default:** Auth secrets randomly generated on first boot and persisted across restarts.
 - 🏠 **100% HF-Native:** Runs entirely on Hugging Face's free infrastructure.
@@ -110,6 +110,7 @@ No secrets are strictly required to start, but you need at least one LLM key to
 | `BETTER_AUTH_SECRET` | auto-generated | Auth secret (auto-persisted on first boot) |
 | `PAPERCLIP_AGENT_JWT_SECRET` | auto-generated | Agent JWT secret (auto-persisted on first boot) |
 | `SYNC_MAX_FILE_BYTES` | `52428800` | Max backup size in bytes (50MB default) |
+| `CLOUDFLARE_KEEPALIVE_ENABLED` | `true` | Set to `false` to disable the automatic Cloudflare KeepAlive worker |
 
 ## 🤖 LLM Providers
 
@@ -162,7 +163,7 @@ HuggingClip automatically backs up your Paperclip PostgreSQL database to a priva
 
 ## 💓 Staying Alive *(Recommended on Free HF Spaces)*
 
-Add your [UptimeRobot](https://uptimerobot.com/) **Main API key** (not the Read-only or Monitor-specific key) as a Space secret named `UPTIMEROBOT_API_KEY`. HuggingClip will automatically create a monitor for `https://your-space.hf.space/health` at boot. The dashboard shows the current status (configured, setting up, or failed).
+Your Space will automatically be kept awake by a background Cloudflare Worker when you configure the `CLOUDFLARE_WORKERS_TOKEN` secret. The worker uses a cron trigger to regularly ping your Space's `/health` endpoint. The dashboard displays the current keep-alive worker status.
 
 ## 💻 Local Development
 
@@ -241,7 +242,7 @@ Verify `HF_TOKEN` is set and has write access. Check the dashboard backup status
 `HF_TOKEN` is not set. Add it and the next restart will restore from backup. The backup also needs to have been run at least once before the restart.
 
 **Space keeps sleeping**
-Add `UPTIMEROBOT_API_KEY` as a Space secret to enable automatic keep-awake monitoring.
+Add `CLOUDFLARE_WORKERS_TOKEN` as a Space secret to enable automatic keep-awake monitoring via Cloudflare Workers.
 
 **Paperclip unreachable (502 errors)**
 Wait 60–90s after boot for Paperclip to initialize. If it stays unreachable, check logs for PostgreSQL connection errors or memory issues.
@@ -258,6 +259,7 @@ Similar projects by [@somratpro](https://github.com/somratpro) — all free, one
 
 | Project | What it runs | HF Space | GitHub |
 | :--- | :--- | :--- | :--- |
+| **HuggingMess** | Hermes — Self-hosted agent gateway | [Space](https://huggingface.co/spaces/somratpro/HuggingMess) | [Repo](https://github.com/somratpro/huggingmess) |
 | **HuggingClaw** | OpenClaw — Claude Code in the browser | [Space](https://huggingface.co/spaces/somratpro/HuggingClaw) | [Repo](https://github.com/somratpro/huggingclaw) |
 | **Hugging8n** | n8n — workflow & automation platform | [Space](https://huggingface.co/spaces/somratpro/Hugging8n) | [Repo](https://github.com/somratpro/hugging8n) |
 

cloudflare-keepalive-setup.py

@@ -0,0 +1,212 @@
+#!/usr/bin/env python3
+from __future__ import annotations
+
+"""Create or reuse a Cloudflare Worker for Space keep-awake."""
+
+import json
+import os
+import re
+import sys
+import time
+import urllib.request
+from pathlib import Path
+
+API_BASE = "https://api.cloudflare.com/client/v4"
+KEEPALIVE_STATUS_FILE = Path("/tmp/huggingclip-cloudflare-keepalive-status.json")
+
+
+def cf_request(method: str, path: str, token: str, body: bytes | None = None, content_type: str = "application/json"):
+    req = urllib.request.Request(
+        f"{API_BASE}{path}",
+        data=body,
+        method=method,
+        headers={"Authorization": f"Bearer {token}", "Content-Type": content_type},
+    )
+    with urllib.request.urlopen(req, timeout=30) as response:
+        payload = json.loads(response.read().decode("utf-8"))
+    if not payload.get("success"):
+        errors = payload.get("errors") or [{"message": "Unknown Cloudflare API error"}]
+        raise RuntimeError(errors[0].get("message", "Unknown Cloudflare API error"))
+    return payload["result"]
+
+
+def slugify(value: str) -> str:
+    cleaned = re.sub(r"[^a-z0-9-]+", "-", value.lower()).strip("-")
+    cleaned = re.sub(r"-{2,}", "-", cleaned)
+    return (cleaned or "huggingclip-proxy")[:63].rstrip("-")
+
+
+def get_space_host() -> str:
+    space_host = os.environ.get("SPACE_HOST", "").strip()
+    if space_host:
+        return space_host
+    
+    author = os.environ.get("SPACE_AUTHOR_NAME", "").strip()
+    repo = os.environ.get("SPACE_REPO_NAME", "").strip()
+    if author and repo:
+        return f"{author}-{repo}.hf.space".lower()
+    
+    return ""
+
+
+def derive_keepalive_worker_name() -> str:
+    explicit = os.environ.get("CLOUDFLARE_KEEPALIVE_WORKER_NAME", "").strip()
+    if explicit:
+        return slugify(explicit)
+    space_host = get_space_host()
+    if space_host:
+        return slugify(f"{space_host.replace('.hf.space', '')}-keepalive")
+    return "huggingclip-keepalive"
+
+
+def render_keepalive_worker(target_url: str) -> str:
+    return f"""addEventListener("fetch", (event) => {{
+  event.respondWith(handleRequest(event.request));
+}});
+
+addEventListener("scheduled", (event) => {{
+  event.waitUntil(ping("cron"));
+}});
+
+const TARGET_URL = {json.dumps(target_url)};
+
+async function ping(source) {{
+  const startedAt = new Date().toISOString();
+  try {{
+    const response = await fetch(TARGET_URL, {{
+      method: "GET",
+      headers: {{
+        "user-agent": "HuggingClip Cloudflare KeepAlive",
+        "cache-control": "no-cache"
+      }},
+      cf: {{ cacheTtl: 0, cacheEverything: false }}
+    }});
+    return {{
+      ok: response.ok,
+      status: response.status,
+      source,
+      target: TARGET_URL,
+      timestamp: startedAt
+    }};
+  }} catch (error) {{
+    return {{
+      ok: false,
+      status: 0,
+      source,
+      target: TARGET_URL,
+      timestamp: startedAt,
+      error: error.message
+    }};
+  }}
+}}
+
+async function handleRequest(request) {{
+  const url = new URL(request.url);
+  if (url.pathname === "/" || url.pathname === "/health" || url.pathname === "/ping") {{
+    const result = await ping("manual");
+    return new Response(JSON.stringify(result, null, 2), {{
+      status: result.ok ? 200 : 502,
+      headers: {{ "content-type": "application/json; charset=utf-8" }}
+    }});
+  }}
+  return new Response("Not found", {{ status: 404 }});
+}}
+"""
+
+
+def write_keepalive_status(payload: dict) -> None:
+    payload = {
+        **payload,
+        "timestamp": payload.get("timestamp") or time.strftime("%Y-%m-%dT%H:%M:%SZ", time.gmtime()),
+    }
+    KEEPALIVE_STATUS_FILE.write_text(json.dumps(payload), encoding="utf-8")
+    try:
+        KEEPALIVE_STATUS_FILE.chmod(0o600)
+    except OSError:
+        pass
+
+
+def resolve_account_and_subdomain(api_token: str) -> tuple[str, str]:
+    account_id = os.environ.get("CLOUDFLARE_ACCOUNT_ID", "").strip()
+    if not account_id:
+        accounts = cf_request("GET", "/accounts", api_token)
+        if not accounts:
+            raise RuntimeError("No Cloudflare account is available for this token.")
+        account_id = accounts[0]["id"]
+
+    subdomain_info = cf_request("GET", f"/accounts/{account_id}/workers/subdomain", api_token)
+    subdomain = (subdomain_info or {}).get("subdomain", "").strip()
+    if not subdomain:
+        raise RuntimeError("Cloudflare Workers subdomain is not configured. Enable workers.dev first.")
+    return account_id, subdomain
+
+
+def setup_keepalive_worker(api_token: str, account_id: str, subdomain: str) -> None:
+    enabled = os.environ.get("CLOUDFLARE_KEEPALIVE_ENABLED", "true").strip().lower()
+    if enabled in {"0", "false", "no", "off"}:
+        write_keepalive_status({"configured": False, "status": "disabled", "message": "Cloudflare keep-awake is disabled."})
+        return
+
+    space_host = get_space_host()
+    if not space_host:
+        write_keepalive_status({"configured": False, "status": "skipped", "message": "SPACE_HOST could not be determined."})
+        return
+
+    cron = os.environ.get("CLOUDFLARE_KEEPALIVE_CRON", "*/10 * * * *").strip()
+    space_host = space_host.removeprefix("https://").removeprefix("http://").split("/")[0]
+    target_url = os.environ.get("CLOUDFLARE_KEEPALIVE_URL", f"https://{space_host}/health").strip()
+    worker_name = derive_keepalive_worker_name()
+    worker_source = render_keepalive_worker(target_url)
+
+    cf_request(
+        "PUT",
+        f"/accounts/{account_id}/workers/scripts/{worker_name}",
+        api_token,
+        body=worker_source.encode("utf-8"),
+        content_type="application/javascript",
+    )
+    cf_request(
+        "POST",
+        f"/accounts/{account_id}/workers/scripts/{worker_name}/subdomain",
+        api_token,
+        body=json.dumps({"enabled": True, "previews_enabled": True}).encode("utf-8"),
+    )
+    cf_request(
+        "PUT",
+        f"/accounts/{account_id}/workers/scripts/{worker_name}/schedules",
+        api_token,
+        body=json.dumps([{"cron": cron}]).encode("utf-8"),
+    )
+
+    worker_url = f"https://{worker_name}.{subdomain}.workers.dev"
+    write_keepalive_status(
+        {
+            "configured": True,
+            "status": "configured",
+            "workerName": worker_name,
+            "workerUrl": worker_url,
+            "targetUrl": target_url,
+            "cron": cron,
+            "message": f"Cloudflare Worker cron pings {target_url} on {cron}.",
+        }
+    )
+
+
+def main() -> int:
+    api_token = os.environ.get("CLOUDFLARE_WORKERS_TOKEN", "").strip()
+
+    if not api_token:
+        return 0
+
+    try:
+        account_id, subdomain = resolve_account_and_subdomain(api_token)
+        setup_keepalive_worker(api_token, account_id, subdomain)
+        return 0
+    except Exception as exc:
+        print(f"Cloudflare keepalive setup failed: {exc}", file=sys.stderr)
+        write_keepalive_status({"configured": False, "status": "error", "message": str(exc)})
+        return 1
+
+
+if __name__ == "__main__":
+    raise SystemExit(main())

health-server.js

@@ -3,20 +3,13 @@ const http = require("http");
 const fs = require("fs");
 const net = require("net");
 
-const PORT = 7861; // always public-facing port, never read from PORT (that's for Paperclip)
-const PAPERCLIP_HOST = "127.0.0.1";
-const PAPERCLIP_PORT = 3100;
+const PORT = 7861;
+const APP_PORT = 3100;
+const APP_HOST = "127.0.0.1";
 const startTime = Date.now();
-
-const HF_BACKUP_ENABLED = !!process.env.HF_TOKEN;
-const SYNC_INTERVAL = process.env.SYNC_INTERVAL || "86400";
-
-const UPTIMEROBOT_STATUS_FILE = "/tmp/huggingclip-uptimerobot-status.json";
-const UPTIMEROBOT_API_KEY_SET = !!process.env.UPTIMEROBOT_API_KEY;
-
-// ============================================================================
-// URL helpers
-// ============================================================================
+const INVITE_URL_FILE = "/tmp/invite-url.txt";
+const SYNC_STATUS_FILE = "/tmp/sync-status.json";
+const CLOUDFLARE_KEEPALIVE_STATUS_FILE = "/tmp/huggingclip-cloudflare-keepalive-status.json";
 
 function parseRequestUrl(url) {
   try {
@@ -26,591 +19,306 @@ function parseRequestUrl(url) {
   }
 }
 
-function isLocalRoute(pathname) {
-  return pathname === "/health" || pathname === "/status";
-}
-
-// ============================================================================
-// UptimeRobot helpers
-// ============================================================================
-
-function getUptimeRobotStatus() {
+function getSyncStatus() {
   try {
-    if (fs.existsSync(UPTIMEROBOT_STATUS_FILE)) {
-      return JSON.parse(fs.readFileSync(UPTIMEROBOT_STATUS_FILE, "utf8"));
+    if (fs.existsSync(SYNC_STATUS_FILE)) {
+      return JSON.parse(fs.readFileSync(SYNC_STATUS_FILE, "utf8"));
     }
   } catch {}
-  return null;
+  if (process.env.HF_TOKEN) {
+    return {
+      status: "configured",
+      message: `Backup is enabled. Waiting for sync window (${process.env.SYNC_INTERVAL || 3600}s).`,
+    };
+  }
+  return { status: "disabled", message: "HF_TOKEN not set" };
 }
 
-// ============================================================================
-// Status helpers
-// ============================================================================
-
-function readSyncStatus() {
+function getKeepaliveStatus() {
   try {
-    if (fs.existsSync("/tmp/sync-status.json")) {
-      return JSON.parse(fs.readFileSync("/tmp/sync-status.json", "utf8"));
+    if (fs.existsSync(CLOUDFLARE_KEEPALIVE_STATUS_FILE)) {
+      return JSON.parse(fs.readFileSync(CLOUDFLARE_KEEPALIVE_STATUS_FILE, "utf8"));
     }
   } catch {}
-  if (HF_BACKUP_ENABLED) {
-    return {
-      db_status: "unknown",
-      last_sync_time: null,
-      last_error: null,
-      sync_count: 0,
-      status: "configured",
-      message: `Backup enabled. Waiting for first sync (every ${SYNC_INTERVAL}s).`,
-    };
-  }
-  return { db_status: "unknown", last_sync_time: null, last_error: null, sync_count: 0 };
+  return null;
 }
 
-function readInviteUrl() {
+function getInviteUrl() {
   try {
-    if (fs.existsSync("/tmp/invite-url.txt")) {
-      return fs.readFileSync("/tmp/invite-url.txt", "utf8").trim();
+    if (fs.existsSync(INVITE_URL_FILE)) {
+      return fs.readFileSync(INVITE_URL_FILE, "utf8").trim();
     }
   } catch {}
   return null;
 }
 
-function checkPaperclipHealth() {
+function probeAppHealth(timeoutMs = 1500) {
   return new Promise((resolve) => {
-    const timeout = setTimeout(() => resolve({ status: "unreachable", reason: "timeout" }), 5000);
-    http.get(`http://${PAPERCLIP_HOST}:${PAPERCLIP_PORT}/api/health`, (res) => {
-      clearTimeout(timeout);
-      resolve({ status: res.statusCode < 500 ? "running" : "error", statusCode: res.statusCode });
-      res.resume();
-    }).on("error", (err) => {
-      clearTimeout(timeout);
-      resolve({ status: "unreachable", reason: err.message });
+    const request = http.get(
+      {
+        hostname: APP_HOST,
+        port: APP_PORT,
+        path: "/api/health",
+        timeout: timeoutMs,
+      },
+      (response) => {
+        response.resume();
+        resolve(response.statusCode >= 200 && response.statusCode < 400);
+      },
+    );
+    request.on("timeout", () => {
+      request.destroy();
+      resolve(false);
     });
+    request.on("error", () => resolve(false));
   });
 }
 
-function formatUptime(seconds) {
-  const h = Math.floor(seconds / 3600);
-  const m = Math.floor((seconds % 3600) / 60);
-  return `${h}h ${m}m`;
+function formatUptime(ms) {
+  const total = Math.floor(ms / 1000);
+  const days = Math.floor(total / 86400);
+  const hours = Math.floor((total % 86400) / 3600);
+  const minutes = Math.floor((total % 3600) / 60);
+  if (days) return `${days}d ${hours}h ${minutes}m`;
+  if (hours) return `${hours}h ${minutes}m`;
+  return `${minutes}m`;
 }
 
-// ============================================================================
-// Dashboard HTML
-// ============================================================================
-
-function renderDashboard(initialData) {
-  const uptimerobotStatus = getUptimeRobotStatus();
-  let keepAwakeHtml;
-  if (uptimerobotStatus?.configured) {
-    keepAwakeHtml = `<div class="helper-summary success">
-      <span class="status-badge status-online"><div class="pulse"></div>Configured</span>
-      <span>UptimeRobot monitor active for <code>${uptimerobotStatus.url || "your /health endpoint"}</code>.</span>
-    </div>`;
-  } else if (uptimerobotStatus?.configured === false) {
-    keepAwakeHtml = `<div class="helper-summary error">
-      <span class="status-badge status-error">Failed</span>
-      <span>Monitor setup failed. Check Space logs.</span>
-    </div>`;
-  } else if (UPTIMEROBOT_API_KEY_SET) {
-    keepAwakeHtml = `<div class="helper-summary"><span class="status-badge status-syncing"><div class="pulse" style="background:#3b82f6"></div>Setting up</span> Setting up UptimeRobot monitor...</div>`;
-  } else {
-    keepAwakeHtml = `<div class="helper-summary">
-      <strong>Not configured.</strong> Add <code>UPTIMEROBOT_API_KEY</code> to Space secrets to enable keep-awake monitoring.
-    </div>`;
-  }
-
-  const syncStatus = initialData.sync;
-  const hasBackup = HF_BACKUP_ENABLED;
-  const lastSync = syncStatus.last_sync_time
-    ? new Date(syncStatus.last_sync_time).toLocaleString()
-    : "Never";
-  const syncError = syncStatus.last_error || null;
-  const syncOk = hasBackup && !syncError && syncStatus.last_sync_time;
-
-  const syncBadge = !hasBackup
-    ? `<div class="status-badge status-offline">Disabled</div>`
-    : syncError
-    ? `<div class="status-badge status-error">Error</div>`
-    : syncStatus.last_sync_time
-    ? `<div class="status-badge status-online"><div class="pulse"></div>Enabled</div>`
-    : `<div class="status-badge status-syncing"><div class="pulse" style="background:#3b82f6"></div>Pending</div>`;
+function escapeHtml(value) {
+  return String(value)
+    .replace(/&/g, "&amp;")
+    .replace(/</g, "&lt;")
+    .replace(/>/g, "&gt;")
+    .replace(/"/g, "&quot;");
+}
 
-  const paperclipBadge = initialData.paperclipRunning
-    ? `<div class="status-badge status-online"><div class="pulse"></div>Running</div>`
-    : `<div class="status-badge status-offline">Unreachable</div>`;
+function toneBadge(label, tone = "neutral") {
+  return `<span class="badge ${tone}">${escapeHtml(label)}</span>`;
+}
 
-  const inviteUrl = initialData.inviteUrl;
-  const setupBannerHtml = inviteUrl ? `
-    <div class="setup-banner">
-      <div class="setup-banner-title">Admin Setup Required</div>
-      <div class="setup-banner-body">No admin account configured. Open this link to create your first admin account:</div>
-      <div class="setup-banner-url">${inviteUrl}</div>
-      <a href="${inviteUrl}" class="setup-banner-btn" target="_blank" rel="noopener noreferrer">Open Setup Page →</a>
-    </div>` : "";
+function renderTile({ title, value, detail = "", tone = "neutral", meta = "" }) {
+  return `<article class="tile ${tone}">
+    <div class="tile-head">
+      <span class="tile-title">${escapeHtml(title)}</span>
+      <span class="tile-dot"></span>
+    </div>
+    <div class="tile-value">${value}</div>
+    ${detail ? `<div class="tile-detail">${detail}</div>` : ""}
+    ${meta ? `<div class="tile-meta">${meta}</div>` : ""}
+  </article>`;
+}
 
-  return `<!DOCTYPE html>
+function renderDashboard(data) {
+  const syncStatus = String(data.sync?.status || "unknown");
+  const syncTone = ["success", "restored", "synced", "configured"].includes(syncStatus)
+    ? "ok"
+    : syncStatus === "disabled"
+      ? "warn"
+      : "neutral";
+  const backupDetail = data.sync?.message ? escapeHtml(data.sync.message) : "No status yet";
+
+  const keepaliveConfigured = data.keepalive?.configured === true;
+  const keepaliveStatus = String(
+    data.keepalive?.status ||
+      (process.env.CLOUDFLARE_WORKERS_TOKEN ? "pending" : "not configured"),
+  );
+  const keepAliveTone = keepaliveConfigured
+    ? "ok"
+    : process.env.CLOUDFLARE_WORKERS_TOKEN
+      ? "warn"
+      : "neutral";
+  const keepAliveDetail = keepaliveConfigured
+    ? `Pinging <code>${escapeHtml(data.keepalive.targetUrl || "/health")}</code>`
+    : process.env.CLOUDFLARE_WORKERS_TOKEN
+      ? "Worker pending or failed"
+      : "Not configured";
+
+  const inviteUrl = getInviteUrl();
+
+  const tiles = [
+    renderTile({
+      title: "Paperclip Core",
+      value: toneBadge(data.appReady ? "Online" : "Booting", data.appReady ? "ok" : "warn"),
+      detail: `Backend Port ${APP_PORT}`,
+      tone: data.appReady ? "ok" : "warn",
+    }),
+    renderTile({
+      title: "Database",
+      value: toneBadge("PostgreSQL", "ok"),
+      detail: "Embedded cluster active",
+      tone: "ok",
+    }),
+    renderTile({
+      title: "Runtime",
+      value: escapeHtml(data.uptimeHuman),
+      detail: `Exposed on port ${PORT}`,
+      tone: "neutral",
+    }),
+    renderTile({
+      title: "Backup",
+      value: toneBadge(syncStatus.toUpperCase(), syncTone),
+      detail: backupDetail,
+      tone: syncTone,
+    }),
+    renderTile({
+      title: "Keep Awake",
+      value: toneBadge(keepaliveConfigured ? "CF Cron" : keepaliveStatus.toUpperCase(), keepAliveTone),
+      detail: keepAliveDetail,
+      tone: keepAliveTone,
+    }),
+  ].join("");
+
+  return `<!doctype html>
 <html lang="en">
 <head>
-    <meta charset="UTF-8">
-    <meta name="viewport" content="width=device-width, initial-scale=1.0">
-    <title>HuggingClip Dashboard</title>
-    <link href="https://fonts.googleapis.com/css2?family=Outfit:wght@300;400;600&display=swap" rel="stylesheet">
-    <style>
-        :root {
-            --bg: #0f172a;
-            --card-bg: rgba(30, 41, 59, 0.7);
-            --accent: linear-gradient(135deg, #667eea, #764ba2);
-            --text: #f8fafc;
-            --text-dim: #94a3b8;
-            --success: #10b981;
-            --error: #ef4444;
-            --warning: #f59e0b;
-        }
-        * { box-sizing: border-box; margin: 0; padding: 0; }
-        body {
-            font-family: 'Outfit', sans-serif;
-            background-color: var(--bg);
-            color: var(--text);
-            display: flex;
-            justify-content: center;
-            align-items: flex-start;
-            min-height: 100vh;
-            padding: 24px 0;
-            background-image:
-                radial-gradient(at 0% 0%, rgba(102, 126, 234, 0.15) 0px, transparent 50%),
-                radial-gradient(at 100% 0%, rgba(118, 75, 162, 0.15) 0px, transparent 50%);
-        }
-        .dashboard {
-            width: 90%;
-            max-width: 600px;
-            background: var(--card-bg);
-            backdrop-filter: blur(12px);
-            border: 1px solid rgba(255,255,255,0.1);
-            border-radius: 24px;
-            padding: 40px;
-            box-shadow: 0 25px 50px -12px rgba(0,0,0,0.5);
-            animation: fadeIn 0.8s ease-out;
-            margin: 24px 0;
-        }
-        @keyframes fadeIn { from { opacity:0; transform:translateY(20px); } to { opacity:1; transform:translateY(0); } }
-        header { text-align: center; margin-bottom: 40px; }
-        h1 {
-            font-size: 2.5rem;
-            margin-bottom: 8px;
-            background: var(--accent);
-            -webkit-background-clip: text;
-            -webkit-text-fill-color: transparent;
-            font-weight: 600;
-        }
-        .subtitle { color: var(--text-dim); font-size: 0.9rem; letter-spacing: 1px; text-transform: uppercase; }
-        .stats-grid { display: grid; grid-template-columns: repeat(2, 1fr); gap: 20px; margin-bottom: 20px; }
-        .stat-card {
-            background: rgba(255,255,255,0.03);
-            border: 1px solid rgba(255,255,255,0.05);
-            padding: 20px;
-            border-radius: 16px;
-            transition: transform 0.3s ease, border-color 0.3s ease;
-        }
-        .stat-card:hover { transform: translateY(-3px); border-color: rgba(102,126,234,0.3); }
-        .stat-label { color: var(--text-dim); font-size: 0.75rem; text-transform: uppercase; margin-bottom: 8px; display: block; }
-        .stat-value { font-size: 1.1rem; font-weight: 600; }
-        .stat-btn {
-            grid-column: span 2;
-            background: var(--accent);
-            color: #fff;
-            padding: 16px;
-            border-radius: 16px;
-            text-align: center;
-            text-decoration: none;
-            font-weight: 600;
-            display: block;
-            transition: transform 0.3s ease, box-shadow 0.3s ease;
-            box-shadow: 0 10px 20px -5px rgba(102,126,234,0.4);
-        }
-        .stat-btn:hover { transform: scale(1.02); box-shadow: 0 15px 30px -5px rgba(102,126,234,0.6); }
-        .status-badge {
-            display: inline-flex;
-            align-items: center;
-            gap: 6px;
-            padding: 4px 12px;
-            border-radius: 20px;
-            font-size: 0.8rem;
-            font-weight: 600;
-        }
-        .status-online  { background: rgba(16,185,129,0.1); color: var(--success); }
-        .status-offline { background: rgba(239,68,68,0.1); color: var(--error); }
-        .status-syncing { background: rgba(59,130,246,0.1); color: #3b82f6; }
-        .status-error   { background: rgba(239,68,68,0.1); color: var(--error); }
-        .pulse {
-            width: 8px; height: 8px; border-radius: 50%;
-            background: currentColor;
-            box-shadow: 0 0 0 0 rgba(16,185,129,0.7);
-            animation: pulse 2s infinite;
-        }
-        @keyframes pulse {
-            0%   { transform: scale(0.95); box-shadow: 0 0 0 0 rgba(16,185,129,0.7); }
-            70%  { transform: scale(1);    box-shadow: 0 0 0 10px rgba(16,185,129,0); }
-            100% { transform: scale(0.95); box-shadow: 0 0 0 0 rgba(16,185,129,0); }
-        }
-        .card-header { display: flex; align-items: center; justify-content: space-between; gap: 12px; margin-bottom: 8px; }
-        .card-header .stat-label { margin-bottom: 0; }
-        .sync-info { background: rgba(255,255,255,0.02); padding: 15px; border-radius: 12px; font-size: 0.85rem; color: var(--text-dim); margin-top: 10px; }
-        #sync-msg { color: var(--text); display: block; margin-top: 4px; }
-        .helper-card { width: 100%; margin-top: 20px; }
-        .helper-copy { color: var(--text-dim); font-size: 0.92rem; line-height: 1.6; margin-top: 10px; }
-        .helper-copy strong { color: var(--text); }
-        .helper-row { display: flex; gap: 10px; margin-top: 16px; flex-wrap: wrap; }
-        .helper-input {
-            flex: 1; min-width: 240px;
-            background: rgba(255,255,255,0.04);
-            border: 1px solid rgba(255,255,255,0.08);
-            color: var(--text); border-radius: 12px;
-            padding: 14px 16px; font: inherit;
-        }
-        .helper-input::placeholder { color: var(--text-dim); }
-        .helper-button {
-            background: var(--accent); color: #fff; border: 0;
-            border-radius: 12px; padding: 14px 18px;
-            font: inherit; font-weight: 600; cursor: pointer; min-width: 180px;
-        }
-        .helper-button:disabled { opacity: 0.6; cursor: wait; }
-        .hidden { display: none !important; }
-        .helper-note { margin-top: 10px; font-size: 0.82rem; color: var(--text-dim); }
-        .helper-result { margin-top: 14px; padding: 12px 14px; border-radius: 12px; font-size: 0.9rem; display: none; }
-        .helper-result.ok    { display: block; background: rgba(16,185,129,0.1); color: var(--success); }
-        .helper-result.error { display: block; background: rgba(239,68,68,0.1); color: var(--error); }
-        .helper-shell { margin-top: 12px; }
-        .helper-shell.hidden { display: none; }
-        .helper-summary {
-            margin-top: 14px; padding: 12px 14px; border-radius: 12px;
-            background: rgba(255,255,255,0.03); color: var(--text-dim);
-            font-size: 0.9rem; line-height: 1.5;
-            display: flex; align-items: center; gap: 10px; flex-wrap: wrap;
-        }
-        .helper-summary strong { color: var(--text); }
-        .helper-summary code { background: rgba(255,255,255,0.07); padding: 1px 6px; border-radius: 4px; font-size: 0.85em; color: var(--text); }
-        .helper-summary.success { background: rgba(16,185,129,0.08); }
-        .helper-summary.error { background: rgba(239,68,68,0.08); }
-        .helper-toggle {
-            margin-top: 14px; display: inline-flex; align-items: center; justify-content: center;
-            background: rgba(255,255,255,0.04); color: var(--text);
-            border: 1px solid rgba(255,255,255,0.08); border-radius: 12px;
-            padding: 12px 16px; font: inherit; font-weight: 600; cursor: pointer;
-        }
-        .setup-banner {
-            background: rgba(245,158,11,0.1); border: 1px solid rgba(245,158,11,0.3);
-            border-radius: 16px; padding: 20px; margin-bottom: 20px;
-        }
-        .setup-banner-title { font-weight: 600; color: var(--warning); margin-bottom: 8px; }
-        .setup-banner-body { color: var(--text-dim); font-size: 0.9rem; margin-bottom: 10px; }
-        .setup-banner-url {
-            font-family: monospace; font-size: 0.8rem; word-break: break-all;
-            background: rgba(255,255,255,0.04); border-radius: 8px;
-            padding: 8px 12px; margin-bottom: 12px; color: var(--text);
-        }
-        .setup-banner-btn {
-            display: inline-block; background: var(--warning); color: #000;
-            font-weight: 700; padding: 8px 20px; border-radius: 8px;
-            text-decoration: none; font-size: 0.9rem;
-        }
-        .links-row { display: flex; gap: 12px; margin-top: 16px; flex-wrap: wrap; }
-        .link-btn {
-            flex: 1; min-width: 120px; text-align: center; padding: 10px 16px;
-            border-radius: 12px; text-decoration: none; font-size: 0.9rem; font-weight: 600;
-            transition: opacity 0.2s;
-        }
-        .link-btn:hover { opacity: 0.8; }
-        .link-primary { background: var(--accent); color: #fff; }
-        .link-secondary { background: rgba(255,255,255,0.06); color: var(--text); border: 1px solid rgba(255,255,255,0.08); }
-        .footer { text-align: center; color: var(--text-dim); font-size: 0.8rem; margin-top: 20px; }
-        @media (max-width: 700px) {
-            body { padding: 16px 0; }
-            .dashboard { width: calc(100% - 24px); padding: 24px; border-radius: 18px; margin: 12px 0; }
-            header { margin-bottom: 28px; }
-            h1 { font-size: 2rem; }
-            .stats-grid { grid-template-columns: 1fr; gap: 14px; margin-bottom: 16px; }
-            .stat-btn { grid-column: span 1; }
-            .helper-row { flex-direction: column; }
-            .helper-input, .helper-button { width: 100%; min-width: 0; }
-        }
-    </style>
+  <meta charset="utf-8" />
+  <meta name="viewport" content="width=device-width, initial-scale=1" />
+  <title>HuggingClip</title>
+  <style>
+    :root { color-scheme: dark; --bg:#08080f; --panel:#12111b; --panel2:#151421; --line:#26243a; --text:#f6f4ff; --muted:#7f7a9e; --soft:#b8b3d7; --good:#22c55e; --warn:#f5c542; --bad:#fb7185; --accent:#3b82f6; --accent2:#8b5cf6; }
+    * { box-sizing:border-box; }
+    body { margin:0; min-height:100vh; font-family:Inter, ui-sans-serif, system-ui, -apple-system, BlinkMacSystemFont, "Segoe UI", sans-serif; background:var(--bg); color:var(--text); font-size:13px; }
+    main { width:min(720px, calc(100% - 32px)); margin:0 auto; padding:36px 0 44px; }
+    header { text-align:center; margin-bottom:22px; }
+    h1 { margin:0; font-size:1.65rem; line-height:1; letter-spacing:0; }
+    .subtitle { margin-top:12px; color:var(--muted); font-size:.72rem; text-transform:uppercase; letter-spacing:.14em; font-weight:800; }
+    .hero-action { display:flex; width:100%; min-height:46px; align-items:center; justify-content:center; border-radius:8px; background:linear-gradient(135deg, var(--accent), var(--accent2)); color:#ffffff; text-decoration:none; font-weight:850; font-size:.98rem; margin:24px 0 20px; transition: opacity 0.15s ease; }
+    .hero-action:hover { opacity: 0.9; }
+    .invite-banner { background:rgba(245,197,66,.1); border:1px solid rgba(245,197,66,.2); border-radius:8px; padding:12px 16px; margin-bottom:20px; display:flex; flex-direction:column; gap:6px; }
+    .invite-banner span { color:var(--warn); font-weight:850; font-size:.75rem; text-transform:uppercase; }
+    .invite-banner code { font-size:1rem; padding:8px; margin-top:4px; display:block; overflow-wrap:anywhere; }
+    .overview { display:grid; grid-template-columns:repeat(2, minmax(0, 1fr)); gap:10px; margin-bottom:10px; }
+    .tile { border:1px solid var(--line); background:var(--panel); border-radius:11px; padding:18px; min-height:124px; display:flex; flex-direction:column; gap:10px; position:relative; }
+    .tile.ok { border-color:rgba(34,197,94,.22); }
+    .tile.warn { border-color:rgba(245,197,66,.24); }
+    .tile.off { border-color:rgba(251,113,133,.28); }
+    .tile-head { display:flex; align-items:center; justify-content:space-between; gap:12px; }
+    .tile-title { color:var(--muted); font-size:.67rem; letter-spacing:.18em; text-transform:uppercase; font-weight:850; }
+    .tile-dot { width:7px; height:7px; border-radius:50%; background:var(--line); }
+    .tile.ok .tile-dot { background:var(--good); }
+    .tile.warn .tile-dot { background:var(--warn); }
+    .tile.off .tile-dot { background:var(--bad); }
+    .tile-value { font-size:1.12rem; font-weight:850; overflow-wrap:anywhere; }
+    .tile-detail { color:var(--soft); line-height:1.45; font-size:.83rem; }
+    .tile-meta { color:var(--muted); line-height:1.4; font-size:.75rem; margin-top:auto; overflow-wrap:anywhere; }
+
+    code { background:#232234; border:1px solid #34324c; border-radius:6px; padding:2px 6px; color:var(--text); font-size:.9em; }
+    .badge { display:inline-flex; align-items:center; width:max-content; border:1px solid var(--line); border-radius:999px; padding:5px 10px; font-size:.72rem; font-weight:850; line-height:1; text-transform:uppercase; }
+    .badge.ok { color:var(--good); border-color:rgba(34,197,94,.34); background:rgba(34,197,94,.11); }
+    .badge.warn { color:var(--warn); border-color:rgba(245,197,66,.34); background:rgba(245,197,66,.11); }
+    .badge.off { color:var(--bad); border-color:rgba(251,113,133,.34); background:rgba(251,113,133,.11); }
+    .badge.neutral { color:var(--soft); }
+    footer { color:var(--muted); text-align:center; font-size:.74rem; margin-top:18px; }
+    footer .live { color:var(--good); }
+    @media (max-width: 700px) { .overview { grid-template-columns:1fr; } main { width:min(100% - 22px, 720px); padding-top:28px; } }
+  </style>
 </head>
 <body>
-    <div class="dashboard">
-        <header>
-            <h1>📎 HuggingClip</h1>
-            <p class="subtitle">Paperclip on HF Spaces</p>
-        </header>
-
-        ${setupBannerHtml}
-
-        <div class="stats-grid">
-            <div class="stat-card">
-                <div class="card-header">
-                    <span class="stat-label">Paperclip</span>
-                    <span id="paperclip-badge">${paperclipBadge}</span>
-                </div>
-                <div style="margin-top: 8px; font-size: 0.82rem; color: var(--text-dim);">
-                    Port <strong style="color:var(--text)">3100</strong> · <a href="/app/" style="color:#818cf8;text-decoration:none;" target="_blank">Open UI →</a>
-                </div>
-            </div>
-            <div class="stat-card">
-                <span class="stat-label">Uptime</span>
-                <span class="stat-value" id="uptime">${formatUptime(Math.floor((Date.now() - startTime) / 1000))}</span>
-            </div>
-            <div class="stat-card">
-                <div class="card-header">
-                    <span class="stat-label">Backup</span>
-                    <span id="sync-badge">${syncBadge}</span>
-                </div>
-                <div style="margin-top: 8px; font-size: 0.82rem; color: var(--text-dim);">
-                    Last sync: <span id="last-sync">${lastSync}</span>
-                </div>
-            </div>
-            <div class="stat-card">
-                <span class="stat-label">Database</span>
-                <span class="stat-value" id="db-status">${syncStatus.db_status === "connected" ? "PostgreSQL ✓" : syncStatus.db_status === "error" ? "Error" : "PostgreSQL"}</span>
-            </div>
-            <a href="/app/" id="open-ui-btn" class="stat-btn" target="_blank" rel="noopener noreferrer">Open Paperclip UI</a>
-        </div>
-
-        <div class="stat-card" style="width: 100%; margin-bottom: 20px;">
-            <div class="card-header">
-                <span class="stat-label">Backup Sync</span>
-                <div id="sync-badge-detail">${syncBadge}</div>
-            </div>
-            <div class="sync-info">
-                Last activity: <span id="sync-time-detail">${lastSync}</span>
-                <span id="sync-msg">${syncError ? "Error: " + syncError : syncStatus.last_sync_time ? "Sync successful" : hasBackup ? "Waiting for first sync..." : "HF_TOKEN not set — backups disabled"}</span>
-            </div>
-        </div>
-
-        <div class="stat-card helper-card">
-            <span class="stat-label">Keep Space Awake</span>
-            ${keepAwakeHtml}
-        </div>
-
-        <div class="footer">Live updates every 30s</div>
-    </div>
-
-    <script>
-        function getCurrentSearch() { return window.location.search || ''; }
-
-        function renderSyncBadge(status, lastSyncTime, lastError) {
-            if (!${hasBackup}) return '<div class="status-badge status-offline">Disabled</div>';
-            if (lastError) return '<div class="status-badge status-error">Error</div>';
-            if (lastSyncTime) return '<div class="status-badge status-online"><div class="pulse"></div>Enabled</div>';
-            return '<div class="status-badge status-syncing"><div class="pulse" style="background:#3b82f6"></div>Pending</div>';
-        }
-
-        async function updateStatus() {
-            try {
-                const res = await fetch('/status' + getCurrentSearch());
-                const data = await res.json();
-
-                document.getElementById('uptime').textContent = data.uptime;
-
-                const pbadge = data.paperclipRunning
-                    ? '<div class="status-badge status-online"><div class="pulse"></div>Running</div>'
-                    : '<div class="status-badge status-offline">Unreachable</div>';
-                document.getElementById('paperclip-badge').innerHTML = pbadge;
-
-                const badge = renderSyncBadge(data.sync.db_status, data.sync.last_sync_time, data.sync.last_error);
-                document.getElementById('sync-badge').innerHTML = badge;
-                document.getElementById('sync-badge-detail').innerHTML = badge;
-
-                const lastSync = data.sync.last_sync_time
-                    ? new Date(data.sync.last_sync_time).toLocaleString()
-                    : 'Never';
-                document.getElementById('last-sync').textContent = lastSync;
-                document.getElementById('sync-time-detail').textContent = lastSync;
-
-                const syncMsg = data.sync.last_error
-                    ? 'Error: ' + data.sync.last_error
-                    : data.sync.last_sync_time
-                    ? 'Sync successful'
-                    : ${hasBackup} ? 'Waiting for first sync...' : 'HF_TOKEN not set — backups disabled';
-                document.getElementById('sync-msg').textContent = syncMsg;
-
-                const dbEl = document.getElementById('db-status');
-                dbEl.textContent = data.sync.db_status === 'connected' ? 'PostgreSQL ✓'
-                    : data.sync.db_status === 'error' ? 'Error' : 'PostgreSQL';
-            } catch (e) {
-                console.error('Status update failed:', e);
-            }
-        }
-
-        updateStatus();
-        setInterval(updateStatus, 30000);
-    </script>
+  <main>
+    <header>
+      <h1>🧬 HuggingClip</h1>
+      <div class="subtitle">Paperclip Orchestrator Dashboard</div>
+    </header>
+    ${inviteUrl ? `
+    <div class="invite-banner">
+      <span>Admin Setup Required</span>
+      <code>${escapeHtml(inviteUrl)}</code>
+    </div>` : ""}
+    <a class="hero-action" href="/app/" target="_blank" rel="noopener noreferrer">Open Paperclip UI -></a>
+    <section class="overview">
+      ${tiles}
+    </section>
+    <footer><span class="live">Live</span> status - Health endpoint: <code>/health</code></footer>
+  </main>
 </body>
 </html>`;
 }
 
-// ============================================================================
-// HTTP Proxy helpers
-// ============================================================================
+const server = http.createServer(async (req, res) => {
+  const url = parseRequestUrl(req.url);
+  const pathname = url.pathname;
+
+  if (pathname === "/health") {
+    const appReady = await probeAppHealth();
+    res.writeHead(appReady ? 200 : 503, { "Content-Type": "application/json" });
+    return res.end(
+      JSON.stringify({
+        status: appReady ? "ok" : "booting",
+        uptime: formatUptime(Date.now() - startTime),
+        sync: getSyncStatus(),
+        keepalive: getKeepaliveStatus(),
+      }),
+    );
+  }
 
-function buildProxyHeaders(headers) {
-  const clientIp = (function() {
-    const f = headers["x-forwarded-for"];
-    if (typeof f === "string") return f.split(",")[0].trim();
-    if (Array.isArray(f) && f.length > 0) return String(f[0]).split(",")[0].trim();
-    return "";
-  })();
-  return {
-    ...headers,
-    host: `${PAPERCLIP_HOST}:${PAPERCLIP_PORT}`,
-    "x-forwarded-for": clientIp,
-    "x-forwarded-host": headers.host || "",
-    "x-forwarded-proto": headers["x-forwarded-proto"] || "https",
+  if (pathname === "/" || pathname === "/dashboard") {
+    const appReady = await probeAppHealth();
+    res.writeHead(200, { "Content-Type": "text/html" });
+    return res.end(
+      renderDashboard({
+        uptimeHuman: formatUptime(Date.now() - startTime),
+        appReady,
+        sync: getSyncStatus(),
+        keepalive: getKeepaliveStatus(),
+      }),
+    );
+  }
+
+  // Proxy logic to Paperclip (port 3100)
+  const proxyHeaders = {
+    ...req.headers,
+    host: `${APP_HOST}:${APP_PORT}`,
+    "x-forwarded-for": req.socket.remoteAddress,
+    "x-forwarded-host": req.headers.host,
+    "x-forwarded-proto": "https",
   };
-}
 
-function proxyHttp(req, res, overridePath) {
-  const targetPath = overridePath !== undefined ? overridePath : req.url;
-  let upstreamStarted = false;
   const proxyReq = http.request(
-    { hostname: PAPERCLIP_HOST, port: PAPERCLIP_PORT, method: req.method, path: targetPath, headers: buildProxyHeaders(req.headers) },
+    {
+      hostname: APP_HOST,
+      port: APP_PORT,
+      path: pathname + url.search,
+      method: req.method,
+      headers: proxyHeaders,
+    },
     (proxyRes) => {
-      upstreamStarted = true;
-      res.writeHead(proxyRes.statusCode || 502, proxyRes.headers);
+      res.writeHead(proxyRes.statusCode, proxyRes.headers);
       proxyRes.pipe(res);
+      proxyRes.on("error", () => res.end());
     },
   );
-  proxyReq.on("error", (error) => {
-    if (res.headersSent || upstreamStarted) { res.destroy(); return; }
-    res.writeHead(502, { "Content-Type": "application/json" });
-    res.end(JSON.stringify({ status: "error", message: "Paperclip unavailable", detail: error.message }));
-  });
-  res.on("close", () => proxyReq.destroy());
-  req.pipe(proxyReq);
-}
 
-function proxyUpgrade(req, socket, head, overridePath) {
-  const targetPath = overridePath !== undefined ? overridePath : req.url;
-  const proxySocket = net.connect(PAPERCLIP_PORT, PAPERCLIP_HOST);
-  proxySocket.on("connect", () => {
-    const clientIp = (function() {
-      const f = req.headers["x-forwarded-for"];
-      if (typeof f === "string") return f.split(",")[0].trim();
-      return req.socket.remoteAddress || "";
-    })();
-    const lines = [
-      `${req.method} ${targetPath} HTTP/${req.httpVersion}`,
-      ...req.rawHeaders.reduce((acc, val, i) => {
-        if (i % 2 === 0) { acc.push(i); } else { acc[acc.length - 1] = `${req.rawHeaders[acc[acc.length - 1]]}: ${val}`; }
-        return acc;
-      }, []).filter((h) => {
-        const lower = (typeof h === "string" ? h : "").toLowerCase();
-        return !lower.startsWith("host:") && !lower.startsWith("x-forwarded-");
-      }),
-      `Host: ${PAPERCLIP_HOST}:${PAPERCLIP_PORT}`,
-      `X-Forwarded-For: ${clientIp}`,
-      `X-Forwarded-Host: ${req.headers.host || ""}`,
-      `X-Forwarded-Proto: ${req.headers["x-forwarded-proto"] || "https"}`,
-      "", "",
-    ];
-    proxySocket.write(lines.join("\r\n"));
-    if (head && head.length > 0) proxySocket.write(head);
-    socket.pipe(proxySocket).pipe(socket);
-  });
-  proxySocket.on("error", () => {
-    if (socket.writable) socket.write("HTTP/1.1 502 Bad Gateway\r\nConnection: close\r\n\r\n");
-    socket.destroy();
+  req.on("error", () => proxyReq.destroy());
+  res.on("error", () => proxyReq.destroy());
+  proxyReq.on("error", () => {
+    if (!res.headersSent) {
+      res.writeHead(503, { "Content-Type": "application/json" });
+      res.end(JSON.stringify({ status: "starting", message: "Paperclip is booting..." }));
+    } else {
+      res.end();
+    }
   });
-  socket.on("error", () => proxySocket.destroy());
-}
-
-// ============================================================================
-// HTTP Server
-// ============================================================================
-
-const server = http.createServer((req, res) => {
-  const parsedUrl = parseRequestUrl(req.url || "/");
-  const pathname = parsedUrl.pathname;
-  const uptime = Math.floor((Date.now() - startTime) / 1000);
-
-  // ── Health endpoint ────────────────────────────────────────────────────────
-  if (pathname === "/health") {
-    res.writeHead(200, { "Content-Type": "application/json" });
-    res.end(JSON.stringify({
-      status: "ok",
-      uptime,
-      uptimeHuman: formatUptime(uptime),
-      timestamp: new Date().toISOString(),
-      sync: readSyncStatus(),
-    }));
-    return;
-  }
-
-  // ── Status endpoint (JSON, polled by dashboard) ───────────────────────────
-  if (pathname === "/status") {
-    void (async () => {
-      const paperclipStatus = await checkPaperclipHealth();
-      res.writeHead(200, { "Content-Type": "application/json" });
-      res.end(JSON.stringify({
-        uptime: formatUptime(uptime),
-        paperclipRunning: paperclipStatus.status === "running",
-        sync: readSyncStatus(),
-        inviteUrl: readInviteUrl(),
-      }));
-    })();
-    return;
-  }
-
-  // ── Dashboard (root) ───────────────────────────────────────────────────────
-  if (pathname === "/" || pathname === "") {
-    void (async () => {
-      const paperclipStatus = await checkPaperclipHealth();
-      const initialData = {
-        paperclipRunning: paperclipStatus.status === "running",
-        sync: readSyncStatus(),
-        inviteUrl: readInviteUrl(),
-      };
-      res.writeHead(200, { "Content-Type": "text/html; charset=utf-8" });
-      res.end(renderDashboard(initialData));
-    })();
-    return;
-  }
 
-  // ── /invite/* → redirect to /app/invite/* (SPA uses basename="/app") ────────
-  if (pathname.startsWith("/invite/") || pathname === "/invite") {
-    const rest = pathname.slice("/invite".length) || "/";
-    const query = parsedUrl.search || "";
-    res.writeHead(302, { Location: "/app/invite" + rest + query });
-    res.end();
-    return;
-  }
-
-  // ── /app/* → strip prefix, proxy to Paperclip ─────────────────────────────
-  // SPA built with basename="/app"; React Router strips /app client-side.
-  if (pathname === "/app" || pathname.startsWith("/app/")) {
-    const stripped = pathname.slice("/app".length) || "/";
-    const query = parsedUrl.search || "";
-    proxyHttp(req, res, stripped + query);
-    return;
-  }
-
-  // ── Everything else → proxy directly ──────────────────────────────────────
-  proxyHttp(req, res);
+  req.pipe(proxyReq);
 });
 
 server.on("upgrade", (req, socket, head) => {
-  const pathname = parseRequestUrl(req.url || "/").pathname;
-  if (isLocalRoute(pathname)) { socket.destroy(); return; }
-  if (pathname === "/app" || pathname.startsWith("/app/")) {
-    const stripped = pathname.slice("/app".length) || "/";
-    proxyUpgrade(req, socket, head, stripped + (parseRequestUrl(req.url).search || ""));
-    return;
-  }
-  proxyUpgrade(req, socket, head);
+  const url = parseRequestUrl(req.url);
+  const proxyPath = url.pathname;
+  const proxySocket = net.connect(APP_PORT, APP_HOST, () => {
+    proxySocket.write(`${req.method} ${proxyPath}${url.search} HTTP/${req.httpVersion}\r\n`);
+    for (let i = 0; i < req.rawHeaders.length; i += 2) {
+      proxySocket.write(`${req.rawHeaders[i]}: ${req.rawHeaders[i + 1]}\r\n`);
+    }
+    proxySocket.write("\r\n");
+    if (head && head.length) proxySocket.write(head);
+    proxySocket.pipe(socket).pipe(proxySocket);
+  });
+  proxySocket.on("error", () => socket.destroy());
 });
 
-server.listen(PORT, "0.0.0.0", () => {
-  console.log(`✓ Health server listening on port ${PORT}`);
-  console.log(`✓ Dashboard: http://localhost:${PORT}/`);
-  console.log(`✓ API proxy: http://localhost:${PORT}/api/*`);
-  console.log(`✓ App proxy: http://localhost:${PORT}/  (root → Paperclip)`);
-});
+server.timeout = 0;
+server.keepAliveTimeout = 65000;
+server.listen(PORT, "0.0.0.0", () =>
+  console.log(`🧬 HuggingClip Dashboard on ${PORT} -> Paperclip on ${APP_PORT}`),
+);

setup-uptimerobot.sh

@@ -1,91 +0,0 @@
-#!/bin/bash
-set -euo pipefail
-
-# Create or update a UptimeRobot monitor for this Hugging Face Space.
-#
-# Requirements:
-# - UPTIMEROBOT_API_KEY: Main API key from UptimeRobot
-# - SPACE_HOST or first CLI arg: your HF Space host, e.g. "user-space.hf.space"
-#
-# Optional:
-# - UPTIMEROBOT_MONITOR_NAME: friendly name for the monitor
-# - UPTIMEROBOT_ALERT_CONTACTS: dash-separated alert contact IDs, e.g. "123456-789012"
-# - UPTIMEROBOT_INTERVAL: monitoring interval in seconds (default: 300 = 5 min; min: 30)
-
-API_URL="https://api.uptimerobot.com/v2"
-API_KEY="${UPTIMEROBOT_API_KEY:-}"
-SPACE_HOST_INPUT="${1:-${SPACE_HOST:-}}"
-STATUS_FILE="/tmp/huggingclip-uptimerobot-status.json"
-
-if [ -z "$API_KEY" ]; then
-  echo "Missing UPTIMEROBOT_API_KEY."
-  echo "Use the Main API key from UptimeRobot -> Integrations."
-  echo "Do not use the Read-only API key or a Monitor-specific API key."
-  exit 1
-fi
-
-if [ -z "$SPACE_HOST_INPUT" ]; then
-  echo "Missing Space host."
-  echo "Usage: UPTIMEROBOT_API_KEY=... ./setup-uptimerobot.sh your-space.hf.space"
-  exit 1
-fi
-
-SPACE_HOST_CLEAN="${SPACE_HOST_INPUT#https://}"
-SPACE_HOST_CLEAN="${SPACE_HOST_CLEAN#http://}"
-SPACE_HOST_CLEAN="${SPACE_HOST_CLEAN%%/*}"
-
-MONITOR_URL="https://${SPACE_HOST_CLEAN}/health"
-MONITOR_NAME="${UPTIMEROBOT_MONITOR_NAME:-HuggingClip ${SPACE_HOST_CLEAN}}"
-INTERVAL="${UPTIMEROBOT_INTERVAL:-300}"
-
-echo "Checking existing UptimeRobot monitors for ${MONITOR_URL}..."
-MONITORS_RESPONSE=$(curl -sS -X POST "${API_URL}/getMonitors" \
-  -d "api_key=${API_KEY}" \
-  -d "format=json" \
-  -d "logs=0" \
-  -d "response_times=0" \
-  -d "response_times_limit=1")
-
-MONITOR_ID=$(printf '%s' "$MONITORS_RESPONSE" | jq -r --arg url "$MONITOR_URL" '
-  (.monitors // []) | map(select(.url == $url)) | first | .id // empty
-')
-
-if [ -n "$MONITOR_ID" ]; then
-  printf '{"configured":true,"monitorId":"%s","url":"%s","alreadyExisted":true,"timestamp":"%s"}\n' \
-    "$MONITOR_ID" "$MONITOR_URL" "$(date -u +%Y-%m-%dT%H:%M:%SZ)" > "$STATUS_FILE"
-  echo "Monitor already exists (id=${MONITOR_ID}) for ${MONITOR_URL}"
-  exit 0
-fi
-
-echo "Creating new UptimeRobot monitor for ${MONITOR_URL}..."
-
-CURL_ARGS=(
-  -sS
-  -X POST "${API_URL}/newMonitor"
-  -d "api_key=${API_KEY}"
-  -d "format=json"
-  -d "type=1"
-  -d "friendly_name=${MONITOR_NAME}"
-  -d "url=${MONITOR_URL}"
-  -d "interval=${INTERVAL}"
-)
-
-if [ -n "${UPTIMEROBOT_ALERT_CONTACTS:-}" ]; then
-  CURL_ARGS+=(-d "alert_contacts=${UPTIMEROBOT_ALERT_CONTACTS}")
-fi
-
-CREATE_RESPONSE=$(curl "${CURL_ARGS[@]}")
-CREATE_STATUS=$(printf '%s' "$CREATE_RESPONSE" | jq -r '.stat // "fail"')
-
-if [ "$CREATE_STATUS" != "ok" ]; then
-  printf '{"configured":false,"error":"creation failed","timestamp":"%s"}\n' \
-    "$(date -u +%Y-%m-%dT%H:%M:%SZ)" > "$STATUS_FILE"
-  echo "Failed to create monitor."
-  printf '%s\n' "$CREATE_RESPONSE"
-  exit 1
-fi
-
-NEW_ID=$(printf '%s' "$CREATE_RESPONSE" | jq -r '.monitor.id // empty')
-printf '{"configured":true,"monitorId":"%s","url":"%s","timestamp":"%s"}\n' \
-  "${NEW_ID:-}" "$MONITOR_URL" "$(date -u +%Y-%m-%dT%H:%M:%SZ)" > "$STATUS_FILE"
-echo "Created UptimeRobot monitor ${NEW_ID:-"(id unavailable)"} for ${MONITOR_URL}"

start.sh

@@ -209,9 +209,9 @@ fi
 node /app/health-server.js &
 HEALTH_PID=$!
 
-if [ -n "${UPTIMEROBOT_API_KEY:-}" ] && [ -n "${SPACE_HOST:-}" ]; then
-  echo "Setting up UptimeRobot monitor..."
-  bash /app/setup-uptimerobot.sh "${SPACE_HOST}" || true
+if [ -n "${CLOUDFLARE_WORKERS_TOKEN:-}" ]; then
+  echo "Setting up Cloudflare KeepAlive monitor..."
+  python3 /app/cloudflare-keepalive-setup.py || true
 fi
 
 sleep 2