entrypoint: write ollama log to $HOME (HF Spaces locks /tmp)

HF Spaces mounts a read-only or quota-restricted /tmp; ollama serve
> /tmp/ollama.log fails on container start with EACCES. Move the log
to $HOME/.ollama-server.log and pull the model proactively if it's
not already in the cache, so the first user request doesn't pay the
load latency.

entrypoint.sh

@@ -1,24 +1,42 @@
 #!/usr/bin/env sh
 # Start Ollama daemon in the background, wait for it to be ready,
 # then launch uvicorn on the HF Spaces default port.
+#
+# HF Spaces locks down /tmp for unprivileged users — write logs to
+# $HOME (which we own) instead.
 set -e
 
-ollama serve > /tmp/ollama.log 2>&1 &
+LOG_FILE="$HOME/ollama.log"
+ollama serve > "$LOG_FILE" 2>&1 &
 OLLAMA_PID=$!
 
-# Wait for Ollama to be reachable (up to 30 s)
-for i in $(seq 1 30); do
+# Wait for Ollama to be reachable (up to 60 s — first start can be slow
+# on a cold container with persistent storage being mounted)
+for i in $(seq 1 60); do
   if curl -sf http://127.0.0.1:11434/ > /dev/null 2>&1; then
-    echo "[entrypoint] ollama up (pid $OLLAMA_PID)"
+    echo "[entrypoint] ollama up (pid $OLLAMA_PID) after ${i}s"
     break
   fi
+  if ! kill -0 "$OLLAMA_PID" 2>/dev/null; then
+    echo "[entrypoint] FATAL: ollama serve died. Last 40 lines of $LOG_FILE:"
+    tail -40 "$LOG_FILE" || true
+    exit 1
+  fi
   sleep 1
 done
 
-# Sanity check: Granite 4.1 model is present
-ollama list | grep -q "granite4.1:3b" || {
-  echo "[entrypoint] WARNING: granite4.1:3b not found in ollama; pulling..."
-  ollama pull granite4.1:3b || true
-}
+if ! curl -sf http://127.0.0.1:11434/ > /dev/null 2>&1; then
+  echo "[entrypoint] FATAL: ollama did not become ready within 60s"
+  tail -40 "$LOG_FILE" || true
+  exit 1
+fi
+
+# Sanity check: Granite 4.1 model is present (baked in during build)
+if ! ollama list | grep -q "granite4.1:3b"; then
+  echo "[entrypoint] WARNING: granite4.1:3b not found; pulling now (slow!)..."
+  ollama pull granite4.1:3b || echo "[entrypoint] pull failed; reconciler will fail"
+fi
+
+ollama list
 
 exec uvicorn web.main:app --host 0.0.0.0 --port 7860 --log-level info