fix: lazy-restore published article using OAuth token

The startup pull fails when there's no HF_TOKEN env var (common in
Spaces using OAuth only). Now the restore is attempted:
1. At startup (works if HF_TOKEN secret is set)
2. On first authenticated request (auth/status with user token)
3. On first visit to the public page (if visitor has a cookie)

Uses a flag to ensure the pull only runs once successfully.

Made-with: Cursor

backend/src/server.ts

@@ -33,6 +33,35 @@ const PORT = parseInt(process.env.PORT || "8080", 10);
 /** Single collab document; URL `?doc=` is not supported. */
 const DEFAULT_DOC_NAME = "default";
 
+/**
+ * Lazy restore of published assets from HF dataset.
+ * Called at startup (may fail without token) and again on first auth.
+ * Only runs the actual pull once successfully.
+ */
+let _publishedRestored = false;
+async function ensurePublishedRestored(token?: string): Promise<void> {
+  if (_publishedRestored) return;
+  if (!getDatasetId()) return;
+
+  const publishedPath = join(DATA_DIR, "published", DEFAULT_DOC_NAME.replace(/[^a-zA-Z0-9_-]/g, "_"), "index.html");
+  if (existsSync(publishedPath)) {
+    _publishedRestored = true;
+    return;
+  }
+
+  if (token) setUserToken(token);
+
+  try {
+    const found = await pullPublishedAssets(DEFAULT_DOC_NAME, DATA_DIR);
+    if (found) {
+      _publishedRestored = true;
+      console.log("[server] restored published article from HF dataset");
+    }
+  } catch (err) {
+    console.warn("[server] failed to restore published:", (err as Error).message);
+  }
+}
+
 mkdirSync(DATA_DIR, { recursive: true });
 
 function docPath(name: string) {
@@ -133,6 +162,8 @@ app.get("/api/auth/status", async (req, res) => {
   // Cache the user's OAuth token for HF API calls (dataset storage)
   if (user.canEdit && token) {
     setUserToken(token);
+    // Lazy-restore published article on first authenticated request
+    ensurePublishedRestored(token).catch(() => {});
   }
 
   res.json({
@@ -392,6 +423,12 @@ if (existsSync(staticDir)) {
       return;
     }
 
+    // Try lazy-restore if we have a cookie token (visitor may be logged in)
+    const visitorToken = extractToken(req.headers.cookie) ?? undefined;
+    if (visitorToken) {
+      await ensurePublishedRestored(visitorToken);
+    }
+
     // In production with OAuth: serve the published article if it exists
     const publishedPath = getPublishedPath(DEFAULT_DOC_NAME);
 
@@ -411,16 +448,8 @@ const server = httpServer.listen(PORT, async () => {
   console.log(`[server] running on http://localhost:${PORT}`);
   console.log(`[server] collab websocket at ws://localhost:${PORT}/collab/:doc`);
 
-  // Restore published articles from HF dataset after a container rebuild
-  if (getDatasetId()) {
-    try {
-      const found = await pullPublishedAssets(DEFAULT_DOC_NAME, DATA_DIR);
-      if (found) console.log("[server] restored published article from HF dataset");
-      else console.log("[server] no published article found in HF dataset");
-    } catch (err) {
-      console.warn("[server] failed to restore published article:", (err as Error).message);
-    }
-  }
+  // Try eager restore (works if HF_TOKEN env var is set)
+  await ensurePublishedRestored();
 });
 
 // Graceful shutdown: flush pending docs to HF