fix: resolve LFS pointers at runtime instead of build time

Build-time downloads fail (circular dep — files not served while
building). Moved LFS resolution to a startup script that runs
before uvicorn launches.

Dockerfile

@@ -21,58 +21,13 @@ RUN pip install --no-cache-dir -r requirements.txt
 
 COPY . .
 
-# HF Docker builds copy LFS pointers, not real files.
-# Resolve them by downloading from the HF API.
-ARG HF_SPACE=FocusGuard/final
-RUN python -c "\
-import os, urllib.request, sys;\
-SPACE='${HF_SPACE}';\
-BASE=f'https://huggingface.co/spaces/{SPACE}/resolve/main';\
-files=[\
-  'checkpoints/mlp_best.pt',\
-  'checkpoints/scaler_mlp.joblib',\
-  'checkpoints/hybrid_combiner.joblib',\
-  'checkpoints/hybrid_focus_config.json',\
-  'checkpoints/xgboost_face_orientation_best.json',\
-  'checkpoints/meta_best.npz',\
-  'checkpoints/meta_mlp.npz',\
-  'checkpoints/L2CSNet_gaze360.pkl',\
-  'models/L2CS-Net/models/L2CSNet_gaze360.pkl',\
-];\
-for f in files:\
-  path=f;\
-  is_ptr=False;\
-  if os.path.isfile(path):\
-    with open(path,'rb') as fh:\
-      is_ptr=fh.read(50).startswith(b'version https://git-lfs');\
-  if not os.path.isfile(path) or is_ptr:\
-    url=f'{BASE}/{f}';\
-    print(f'Downloading {f} ...');\
-    try:\
-      os.makedirs(os.path.dirname(path),exist_ok=True);\
-      urllib.request.urlretrieve(url,path);\
-      sz=os.path.getsize(path);\
-      print(f'  OK ({sz} bytes)');\
-    except Exception as e:\
-      print(f'  WARN: {e}');\
-  else:\
-    print(f'[OK] {f} ({os.path.getsize(path)} bytes)');\
-print('Checkpoint resolution done')\
-"
-
 RUN npm install && npm run build && mkdir -p /app/static && cp -R dist/* /app/static/
 
 ENV FOCUSGUARD_CACHE_DIR=/app/.cache/focusguard
-RUN python -c "\
-try:\
-  from models.face_mesh import _ensure_model; _ensure_model(); print('face_mesh model cached')\
-except Exception as e:\
-  print(f'face_mesh pre-download skipped: {e} — will retry at runtime')\
-"
 
-RUN mkdir -p /app/data && chown -R user:user /app
+RUN mkdir -p /app/data /app/.cache && chown -R user:user /app
 
 USER user
 EXPOSE 7860
 
-CMD ["uvicorn", "main:app", "--host", "0.0.0.0", "--port", "7860", "--log-level", "info"]
+CMD ["bash", "start.sh"]

resolve_lfs.py

@@ -0,0 +1,46 @@
+"""Resolve Git LFS pointers left by HF Docker builds."""
+import os
+import urllib.request
+
+SPACE = os.environ.get("SPACE_ID", "FocusGuard/final")
+BASE = f"https://huggingface.co/spaces/{SPACE}/resolve/main"
+
+FILES = [
+    "checkpoints/mlp_best.pt",
+    "checkpoints/scaler_mlp.joblib",
+    "checkpoints/hybrid_combiner.joblib",
+    "checkpoints/hybrid_focus_config.json",
+    "checkpoints/xgboost_face_orientation_best.json",
+    "checkpoints/meta_best.npz",
+    "checkpoints/meta_mlp.npz",
+    "checkpoints/L2CSNet_gaze360.pkl",
+    "models/L2CS-Net/models/L2CSNet_gaze360.pkl",
+]
+
+
+def _is_lfs_pointer(path):
+    if not os.path.isfile(path):
+        return True
+    with open(path, "rb") as f:
+        return f.read(50).startswith(b"version https://git-lfs")
+
+
+def resolve():
+    for rel in FILES:
+        if not _is_lfs_pointer(rel):
+            sz = os.path.getsize(rel)
+            print(f"[OK] {rel} ({sz} bytes)")
+            continue
+        url = f"{BASE}/{rel}"
+        print(f"[LFS] Downloading {rel} ...")
+        try:
+            os.makedirs(os.path.dirname(rel), exist_ok=True)
+            urllib.request.urlretrieve(url, rel)
+            print(f"  -> {os.path.getsize(rel)} bytes")
+        except Exception as e:
+            print(f"  WARN: {e}")
+    print("LFS resolution done.")
+
+
+if __name__ == "__main__":
+    resolve()

start.sh

@@ -0,0 +1,8 @@
+#!/bin/bash
+set -e
+
+echo "=== Resolving LFS pointers ==="
+python resolve_lfs.py
+
+echo "=== Starting FocusGuard ==="
+exec uvicorn main:app --host 0.0.0.0 --port 7860 --log-level info