fix(space): use writable HF cache dir; set envs; run as user 1000; pin numpy<2; avoid permission + ABI issues

Dockerfile

@@ -6,7 +6,13 @@ RUN apt-get update && apt-get install -y --no-install-recommends \
 
 ENV PIP_NO_CACHE_DIR=1 \
 	MPLBACKEND=Agg \
-	MIM_IGNORE_INSTALL_PYTORCH=1
+	MIM_IGNORE_INSTALL_PYTORCH=1 \
+	HF_HOME=/data/hf \
+	HF_CACHE_DIR=/data/hf-cache \
+	HUGGINGFACE_HUB_CACHE=/data/hf-cache \
+	MPLCONFIGDIR=/data/matplotlib
+
+RUN mkdir -p /data/hf /data/hf-cache /data/matplotlib && chmod -R 777 /data
 
 WORKDIR /app
 
@@ -23,6 +29,10 @@ RUN python -m pip install --upgrade pip wheel setuptools openmim \
 
 COPY . /app
 
+# run as non-root user 1000 if available
+RUN useradd -m -u 1000 user || true
+USER 1000
+
 EXPOSE 7860
 
 CMD ["python", "app.py"] 

app.py

@@ -6,6 +6,13 @@ import torch
 import numpy as np
 import cv2
 
+# Writable cache directory for HF downloads
+HF_CACHE_DIR = os.getenv("HF_CACHE_DIR", "/data/hf-cache")
+try:
+    os.makedirs(HF_CACHE_DIR, exist_ok=True)
+except Exception:
+    pass
+
 # Add custom modules to path - try multiple possible locations
 possible_paths = [
     "./custom_models",
@@ -60,15 +67,14 @@ class MedSAMIntegrator:
             from segment_anything import sam_model_registry as _reg
             import torch as _torch
 
-            # Preferred local path
-            medsam_ckpt_path = "models/medsam_vit_b.pth"
+            # Preferred local path in HF cache
+            medsam_ckpt_path = os.path.join(HF_CACHE_DIR, "medsam_vit_b.pth")
 
             # If not present, fetch from HF Hub using provided repo or default
             if not os.path.exists(medsam_ckpt_path):
                 try:
                     from huggingface_hub import hf_hub_download, list_repo_files
                     repo_id = os.environ.get("HF_MEDSAM_REPO", "Aniketg6/Fine-Tuned-MedSAM")
-                    # Try to find a .pth/.pt in the repo
                     print(f"🔄 Trying to download MedSAM checkpoint from {repo_id} ...")
                     files = list_repo_files(repo_id)
                     candidate = None
@@ -78,9 +84,8 @@ class MedSAMIntegrator:
                             candidate = f
                             break
                     if candidate is None:
-                        # Fallback to a common name
                         candidate = "medsam_vit_b.pth"
-                    ckpt_path = hf_hub_download(repo_id=repo_id, filename=candidate, cache_dir="./models")
+                    ckpt_path = hf_hub_download(repo_id=repo_id, filename=candidate, cache_dir=HF_CACHE_DIR)
                     medsam_ckpt_path = ckpt_path
                     print(f"✅ Downloaded MedSAM checkpoint: {medsam_ckpt_path}")
                 except Exception as dl_err:
@@ -379,7 +384,7 @@ try:
     chart_type_path = hf_hub_download(
         repo_id="hanszhu/ChartTypeNet-DocFigure",
         filename="chart_type.pth",
-        cache_dir="./models"
+        cache_dir=HF_CACHE_DIR
     )
     print(f"✅ Downloaded to: {chart_type_path}")
 
@@ -478,7 +483,7 @@ if MM_DET_AVAILABLE:
         element_checkpoint = hf_hub_download(
             repo_id="hanszhu/ChartElementNet-MultiClass",
             filename="chart_label+.pth",
-            cache_dir="./models"
+            cache_dir=HF_CACHE_DIR
         )
         print(f"✅ Downloaded to: {element_checkpoint}")
 
@@ -504,7 +509,7 @@ if MM_DET_AVAILABLE:
         datapoint_checkpoint = hf_hub_download(
             repo_id="hanszhu/ChartPointNet-InstanceSeg",
             filename="chart_datapoint.pth",
-            cache_dir="./models"
+            cache_dir=HF_CACHE_DIR
         )
         print(f"✅ Downloaded to: {datapoint_checkpoint}")
 
@@ -690,14 +695,14 @@ def analyze_with_medsam(base_result, image):
             from segment_anything import sam_model_registry, SamAutomaticMaskGenerator
             import cv2 as _cv2
             # If ViT-H checkpoint present, use SAM automatic mask generator (download if missing)
-            vit_h_ckpt = "models/sam_vit_h_4b8939.pth"
+            vit_h_ckpt = os.path.join(HF_CACHE_DIR, "sam_vit_h_4b8939.pth")
             if not os.path.exists(vit_h_ckpt):
                 try:
                     from huggingface_hub import hf_hub_download
                     vit_h_ckpt = hf_hub_download(
                         repo_id="Aniketg6/SAM",
                         filename="sam_vit_h_4b8939.pth",
-                        cache_dir="./models"
+                        cache_dir=HF_CACHE_DIR
                     )
                     print(f"✅ Downloaded SAM ViT-H checkpoint to: {vit_h_ckpt}")
                 except Exception as dlh: