Add Docker deployment configuration for Hugging Face

.gitignore

@@ -1,12 +0,0 @@
-# Environments
-.env
-venv/
-__pycache__/
-
-# Node
-node_modules/
-.expo/
-
-# OS Files
-.DS_Store
-Thumbs.db

Dockerfile

@@ -1,39 +0,0 @@
-FROM node:20 AS frontend
-
-WORKDIR /frontend
-
-COPY mobile/package.json ./
-RUN npm install
-
-COPY mobile/ .
-RUN npx expo export --platform web
-
-FROM python:3.11-slim
-
-RUN apt-get update && apt-get install -y --no-install-recommends \
-    libmagic1 \
-    libmagic-dev \
-    libjpeg-dev \
-    zlib1g-dev \
-    libwebp-dev \
-    curl \
-    && rm -rf /var/lib/apt/lists/*
-
-WORKDIR /app
-
-COPY backend/requirements.txt ./requirements.txt
-RUN pip install --no-cache-dir --upgrade pip && \
-    pip install --no-cache-dir -r requirements.txt
-
-COPY backend/ .
-COPY --from=frontend /frontend/dist ./web
-
-RUN useradd -m -u 1000 appuser && chown -R appuser:appuser /app
-USER appuser
-
-EXPOSE 7860
-
-HEALTHCHECK --interval=30s --timeout=10s --start-period=10s --retries=3 \
-    CMD curl -f http://localhost:7860/health || exit 1
-
-CMD ["uvicorn", "app.main:app", "--host", "0.0.0.0", "--port", "7860", "--workers", "2"]

README.md

@@ -8,110 +8,3 @@ app_port: 7860
 pinned: false
 license: mit
 ---
-
-# KeyStone 🔷 – Private Photo Cloud
-
-> Your photos. Your cloud. Zero dependencies on Google or Apple.
-
-KeyStone is a self-hosted Google Photos alternative with automatic mobile backup, deduplication, and AI-ready architecture.
-
-## Architecture
-
-```
-Expo App (iOS + Android + Web)
-         │
-   Supabase Auth (JWT)
-         │
-   FastAPI Backend  ─────► Hugging Face Bucket (storage)
-         │
-   Supabase PostgreSQL
-```
-
-## Live Deployment
-
-| Service | URL |
-|---|---|
-| 🚀 Backend API | https://dpv007-keystone.hf.space |
-| 📖 API Docs | https://dpv007-keystone.hf.space/docs |
-
-## Quick Start
-
-### Backend (local dev)
-
-```bash
-cd backend
-cp .env.example .env       # fill in your credentials
-docker compose up          # starts FastAPI + PostgreSQL
-```
-
-### Run database migrations
-
-```bash
-cd backend
-alembic upgrade head
-```
-
-### Mobile App
-
-```bash
-cd mobile
-cp .env.example .env       # fill in Supabase keys
-npm install
-npm start                  # Expo dev server (iOS/Android/Web)
-```
-
-Open in browser: http://localhost:8081 (web), or scan QR in Expo Go.
-
-## Environment Variables
-
-### Backend (`backend/.env`)
-
-| Variable | Description |
-|---|---|
-| `DATABASE_URL` | Supabase PostgreSQL connection string |
-| `SUPABASE_URL` | Your Supabase project URL |
-| `SUPABASE_JWT_SECRET` | JWT secret from Supabase Dashboard → Settings → API |
-| `HF_TOKEN` | Hugging Face token with write access |
-| `HF_DATASET_REPO` | HF Dataset repo for photo storage (e.g. `user/keystone-photos`) |
-
-### Mobile (`mobile/.env`)
-
-| Variable | Description |
-|---|---|
-| `EXPO_PUBLIC_API_URL` | Backend URL (defaults to HF Space URL) |
-| `EXPO_PUBLIC_SUPABASE_URL` | Your Supabase project URL |
-| `EXPO_PUBLIC_SUPABASE_ANON_KEY` | Supabase anon key |
-
-## Features
-
-- ✅ Email/password authentication via Supabase
-- ✅ JWT verification on every API request
-- ✅ SHA256 deduplication (never upload the same photo twice)
-- ✅ Background sync (iOS + Android) with Wi-Fi-only option
-- ✅ Battery-aware syncing
-- ✅ Thumbnail generation (Pillow)
-- ✅ Infinite-scroll gallery
-- ✅ Albums with photo management
-- ✅ Photo search (filename + AI tags)
-- ✅ Favorites
-- ✅ Soft delete
-- ✅ Works on iOS, Android, and Web (same codebase)
-- 🔜 CLIP semantic search
-- 🔜 Face clustering
-- 🔜 OCR text extraction
-- 🔜 Auto albums
-
-## Deployment to Hugging Face Spaces
-
-The backend is a Docker Space. Push this repo and set the following secrets in the Space settings:
-
-- `DATABASE_URL`
-- `SUPABASE_URL`
-- `SUPABASE_JWT_SECRET`
-- `SUPABASE_SERVICE_ROLE_KEY`
-- `HF_TOKEN`
-- `HF_DATASET_REPO`
-
-## License
-
-MIT

keystone-backend/.gitignore

@@ -36,7 +36,8 @@ yarn-error.*
 venv/
 # typescript
 *.tsbuildinfo
-
+# Local Storage
+data/
 # generated native folders
 /ios
 /android

keystone-backend/main.py

@@ -1,5 +1,6 @@
 import os
-from fastapi import FastAPI, HTTPException, Header, Depends
+import shutil
+from fastapi import FastAPI, HTTPException, Header, Depends, UploadFile, File
 from fastapi.middleware.cors import CORSMiddleware
 from pydantic import BaseModel
 from dotenv import load_dotenv
@@ -9,11 +10,20 @@ load_dotenv()
 
 app = FastAPI(title="KeyStone API", version="0.1.0")
 
-# Fetch credentials from environment variables
+# Fetch credentials
 DEV_USERNAME = os.getenv("DEV_USERNAME", "admin")
 DEV_PASSWORD = os.getenv("DEV_LOGIN_PASSWORD", "password123")
 MOCK_TOKEN = "mock-jwt-token-xyz123"
 
+# --- PERSISTENT STORAGE SETUP ---
+# If running in HF Spaces with persistent storage, it mounts to /data.
+# Locally, we will default to creating a folder called "data/photos" in the project root.
+BASE_STORAGE_DIR = os.getenv("STORAGE_DIR", "./data/photos")
+
+# Ensure the directory exists when the server starts
+os.makedirs(BASE_STORAGE_DIR, exist_ok=True)
+# --------------------------------
+
 app.add_middleware(
     CORSMiddleware,
     allow_origins=["*"],
@@ -22,7 +32,6 @@ app.add_middleware(
     allow_headers=["*"],
 )
 
-# Updated schema to look for username instead of email
 class LoginPayload(BaseModel):
     username: str
     password: str
@@ -38,24 +47,34 @@ def verify_mock_token(authorization: str = Header(None)):
 
 @app.get("/health")
 async def health_check():
-    return {"status": "ok", "service": "KeyStone API"}
+    return {"status": "ok", "service": "KeyStone API", "storage_path": BASE_STORAGE_DIR}
 
 @app.post("/auth/login")
 async def mock_login(payload: LoginPayload):
-    # Strict matching for both username AND password
     if payload.username == DEV_USERNAME and payload.password == DEV_PASSWORD:
         return {
             "access_token": MOCK_TOKEN,
             "token_type": "bearer",
             "user": {"username": payload.username, "id": "mock-uuid-1111-2222"}
         }
-    
-    # Generic error message so we don't leak which field was incorrect
     raise HTTPException(status_code=400, detail="Incorrect username or password")
 
-@app.get("/photos")
-async def get_photos(token: str = Depends(verify_mock_token)):
+# --- NEW UPLOAD ENDPOINT ---
+@app.post("/upload")
+async def upload_photo(file: UploadFile = File(...), token: str = Depends(verify_mock_token)):
+    # Create the full file path safely
+    file_path = os.path.join(BASE_STORAGE_DIR, file.filename)
+    
+    try:
+        # Save the file in chunks to keep memory usage low
+        with open(file_path, "wb") as buffer:
+            while content := await file.read(1024 * 1024):  # Read in 1MB chunks
+                buffer.write(content)
+    except Exception as e:
+        raise HTTPException(status_code=500, detail=f"Could not save file: {str(e)}")
+        
     return {
-        "message": "Authenticated successfully!",
-        "photos": []
+        "message": "Photo uploaded successfully!",
+        "filename": file.filename,
+        "path": file_path
     }