Upload folder using huggingface_hub

.hfignore

@@ -1,9 +1 @@
-node_modules
-.git
-.npm
-.cache
-dist
-apps/ui/dist
-apps/server/dist
-libs/*/dist
-temp_repo
+node_modules\n.git\n.npm\n.cache\ndist\napps/ui/dist\napps/server/dist\nlibs/*/dist\ntemp_repo

Dockerfile

@@ -1,11 +1,75 @@
-# Automaker Dockerfile for Hugging Face Spaces
-# Clones exact branch and builds everything in a single stage for simplicity on HF
+# Automaker Multi-Stage Dockerfile
+# Single Dockerfile for both server and UI builds
+# Usage:
+#   docker build --target server -t automaker-server .
+#   docker build --target ui -t automaker-ui .
+# Or use docker-compose which selects targets automatically
 
-FROM node:22-slim
+# =============================================================================
+# BASE STAGE - Common setup for all builds (DRY: defined once, used by all)
+# =============================================================================
+FROM node:22-slim AS base
 
-# Install system dependencies
+# Install build dependencies for native modules (node-pty)
 RUN apt-get update && apt-get install -y --no-install-recommends \
-    git curl bash python3 make g++ ca-certificates openssh-client jq \
+    python3 make g++ \
+    && rm -rf /var/lib/apt/lists/*
+
+WORKDIR /app
+
+# Copy root package files
+COPY package*.json ./
+
+# Copy all libs package.json files (centralized - add new libs here)
+COPY libs/types/package*.json ./libs/types/
+COPY libs/utils/package*.json ./libs/utils/
+COPY libs/prompts/package*.json ./libs/prompts/
+COPY libs/platform/package*.json ./libs/platform/
+COPY libs/spec-parser/package*.json ./libs/spec-parser/
+COPY libs/model-resolver/package*.json ./libs/model-resolver/
+COPY libs/dependency-resolver/package*.json ./libs/dependency-resolver/
+COPY libs/git-utils/package*.json ./libs/git-utils/
+COPY libs/spec-parser/package*.json ./libs/spec-parser/
+
+# Copy scripts (needed by npm workspace)
+COPY scripts ./scripts
+
+# =============================================================================
+# SERVER BUILD STAGE
+# =============================================================================
+FROM base AS server-builder
+
+# Copy server-specific package.json
+COPY apps/server/package*.json ./apps/server/
+
+# Install dependencies (--ignore-scripts to skip husky/prepare, then rebuild native modules)
+RUN npm ci --ignore-scripts && npm rebuild node-pty
+
+# Copy all source files
+COPY libs ./libs
+COPY apps/server ./apps/server
+
+# Build packages in dependency order, then build server
+RUN npm run build:packages && npm run build --workspace=apps/server
+
+# =============================================================================
+# SERVER PRODUCTION STAGE
+# =============================================================================
+FROM node:22-slim AS server
+
+# Build argument for tracking which commit this image was built from
+ARG GIT_COMMIT_SHA=unknown
+LABEL automaker.git.commit.sha="${GIT_COMMIT_SHA}"
+
+# Build arguments for user ID matching (allows matching host user for mounted volumes)
+# Override at build time: docker build --build-arg UID=$(id -u) --build-arg GID=$(id -g) ...
+ARG UID=1001
+ARG GID=1001
+
+# Install git, curl, bash (for terminal), gosu (for user switching), and GitHub CLI (pinned version, multi-arch)
+# Also install Playwright/Chromium system dependencies (aligns with playwright install-deps on Debian/Ubuntu)
+RUN apt-get update && apt-get install -y --no-install-recommends \
+    git curl bash gosu ca-certificates openssh-client \
     # Playwright/Chromium dependencies
     libglib2.0-0 libnss3 libnspr4 libdbus-1-3 libatk1.0-0 libatk-bridge2.0-0 \
     libcups2 libdrm2 libxkbcommon0 libatspi2.0-0 libxcomposite1 libxdamage1 \
@@ -13,10 +77,7 @@ RUN apt-get update && apt-get install -y --no-install-recommends \
     libx11-6 libx11-xcb1 libxcb1 libxext6 libxrender1 libxss1 libxtst6 \
     libxshmfence1 libgtk-3-0 libexpat1 libfontconfig1 fonts-liberation \
     xdg-utils libpangocairo-1.0-0 libpangoft2-1.0-0 libu2f-udev libvulkan1 \
-    && rm -rf /var/lib/apt/lists/*
-
-# Install GitHub CLI
-RUN GH_VERSION="2.63.2" \
+    && GH_VERSION="2.63.2" \
     && ARCH=$(uname -m) \
     && case "$ARCH" in \
         x86_64) GH_ARCH="amd64" ;; \
@@ -26,54 +87,151 @@ RUN GH_VERSION="2.63.2" \
     && curl -L "https://github.com/cli/cli/releases/download/v${GH_VERSION}/gh_${GH_VERSION}_linux_${GH_ARCH}.tar.gz" -o gh.tar.gz \
     && tar -xzf gh.tar.gz \
     && mv gh_${GH_VERSION}_linux_${GH_ARCH}/bin/gh /usr/local/bin/gh \
-    && rm -rf gh.tar.gz gh_${GH_VERSION}_linux_${GH_ARCH}
+    && rm -rf gh.tar.gz gh_${GH_VERSION}_linux_${GH_ARCH} \
+    && rm -rf /var/lib/apt/lists/*
+
+# Install Claude CLI globally (available to all users via npm global bin)
+RUN npm install -g @anthropic-ai/claude-code
+
+# Create non-root user with home directory BEFORE installing Cursor CLI
+# Uses UID/GID build args to match host user for mounted volume permissions
+# Use -o flag to allow non-unique IDs (GID 1000 may already exist as 'node' group)
+RUN groupadd -o -g ${GID} automaker && \
+    useradd -o -u ${UID} -g automaker -m -d /home/automaker -s /bin/bash automaker && \
+    mkdir -p /home/automaker/.local/bin && \
+    mkdir -p /home/automaker/.cursor && \
+    chown -R automaker:automaker /home/automaker && \
+    chmod 700 /home/automaker/.cursor
+
+# Install Cursor CLI as the automaker user
+# Set HOME explicitly and install to /home/automaker/.local/bin/
+USER automaker
+ENV HOME=/home/automaker
+RUN curl https://cursor.com/install -fsS | bash && \
+    echo "=== Checking Cursor CLI installation ===" && \
+    ls -la /home/automaker/.local/bin/ && \
+    echo "=== PATH is: $PATH ===" && \
+    (which cursor-agent && cursor-agent --version) || echo "cursor-agent installed (may need auth setup)"
+
+# Install OpenCode CLI (for multi-provider AI model access)
+RUN curl -fsSL https://opencode.ai/install | bash && \
+    echo "=== Checking OpenCode CLI installation ===" && \
+    ls -la /home/automaker/.local/bin/ && \
+    (which opencode && opencode --version) || echo "opencode installed (may need auth setup)"
+
+USER root
+
+# Add PATH to profile so it's available in all interactive shells (for login shells)
+RUN mkdir -p /etc/profile.d && \
+    echo 'export PATH="/home/automaker/.local/bin:$PATH"' > /etc/profile.d/cursor-cli.sh && \
+    chmod +x /etc/profile.d/cursor-cli.sh
+
+# Add to automaker's .bashrc for bash interactive shells
+RUN echo 'export PATH="/home/automaker/.local/bin:$PATH"' >> /home/automaker/.bashrc && \
+    chown automaker:automaker /home/automaker/.bashrc
+
+# Also add to root's .bashrc since docker exec defaults to root
+RUN echo 'export PATH="/home/automaker/.local/bin:$PATH"' >> /root/.bashrc
 
-# Set working directory
 WORKDIR /app
 
-# Clone the repository and checkout the specific branch
+# Copy root package.json (needed for workspace resolution)
+COPY --from=server-builder /app/package*.json ./
 
-# Install dependencies and build
-# We use root for the build process to ensure all global tools are available
-RUN npm install && npm rebuild node-pty
-RUN npm run build:packages && \
-    npm run build --workspace=apps/ui && \
-    npm run build --workspace=apps/server
+# Copy built libs (workspace packages are symlinked in node_modules)
+COPY --from=server-builder /app/libs ./libs
 
-# Install global CLIs
-RUN npm install -g @anthropic-ai/claude-code
-RUN curl -fsSL https://opencode.ai/install | bash
+# Copy built server
+COPY --from=server-builder /app/apps/server/dist ./apps/server/dist
+COPY --from=server-builder /app/apps/server/package*.json ./apps/server/
 
-# Create non-root user
-RUN useradd -m -d /home/node -s /bin/bash automaker && \
-    mkdir -p /home/node/.local/bin && \
-    chown -R automaker:automaker /home/node
+# Copy node_modules (includes symlinks to libs)
+COPY --from=server-builder /app/node_modules ./node_modules
 
-# Install Cursor CLI as the automaker user
+# Install Playwright Chromium browser for AI agent verification tests
+# This adds ~300MB to the image but enables automated testing mode out of the box
+# Using the locally installed playwright ensures we use the pinned version from package-lock.json
 USER automaker
-ENV HOME=/home/node
-RUN curl https://cursor.com/install -fsS | bash
+RUN ./node_modules/.bin/playwright install chromium && \
+    echo "=== Playwright Chromium installed ===" && \
+    ls -la /home/automaker/.cache/ms-playwright/
 USER root
 
-# Install Playwright Chromium
-RUN ./node_modules/.bin/playwright install chromium
+# Create data and projects directories
+RUN mkdir -p /data /projects && chown automaker:automaker /data /projects
 
-# Create data directory
-RUN mkdir -p /app/data && chown automaker:automaker /app/data
+# Configure git for mounted volumes and authentication
+# Use --system so it's not overwritten by mounted user .gitconfig
+RUN git config --system --add safe.directory '*' && \
+    # Use gh as credential helper (works with GH_TOKEN env var)
+    git config --system credential.helper '!gh auth git-credential'
 
-# Copy helper scripts (local files from the agent environment)
-COPY entrypoint.sh ./entrypoint.sh
-COPY update_settings.py /usr/local/bin/update_settings.py
-RUN chmod +x entrypoint.sh /usr/local/bin/update_settings.py
+# Copy entrypoint script for fixing permissions on mounted volumes
+COPY docker-entrypoint.sh /usr/local/bin/docker-entrypoint.sh
+RUN chmod +x /usr/local/bin/docker-entrypoint.sh
+
+# Note: We stay as root here so entrypoint can fix permissions
+# The entrypoint script will switch to automaker user before running the command
 
 # Environment variables
-ENV PORT=7860
-ENV DATA_DIR=/app/data
-ENV NODE_ENV=production
-ENV PATH="/home/node/.local/bin:${PATH}"
+ENV PORT=3008
+ENV DATA_DIR=/data
+ENV HOME=/home/automaker
+# Add user's local bin to PATH for cursor-agent
+ENV PATH="/home/automaker/.local/bin:${PATH}"
 
 # Expose port
-EXPOSE 7860
+EXPOSE 3008
+
+# Health check (using curl since it's already installed, more reliable than busybox wget)
+HEALTHCHECK --interval=30s --timeout=3s --start-period=5s --retries=3 \
+    CMD curl -f http://localhost:3008/api/health || exit 1
+
+# Use entrypoint to fix permissions before starting
+ENTRYPOINT ["/usr/local/bin/docker-entrypoint.sh"]
+
+# Start server
+CMD ["node", "apps/server/dist/index.js"]
+
+# =============================================================================
+# UI BUILD STAGE
+# =============================================================================
+FROM base AS ui-builder
+
+# Copy UI-specific package.json
+COPY apps/ui/package*.json ./apps/ui/
+
+# Install dependencies (--ignore-scripts to skip husky and build:packages in prepare script)
+RUN npm ci --ignore-scripts
+
+# Copy all source files
+COPY libs ./libs
+COPY apps/ui ./apps/ui
+
+# Build packages in dependency order, then build UI
+# When VITE_SERVER_URL is empty, the UI uses relative URLs (e.g., /api/...) which nginx proxies
+# to the server container. This avoids CORS issues entirely in Docker Compose setups.
+# Override at build time if needed: --build-arg VITE_SERVER_URL=http://api.example.com
+ARG VITE_SERVER_URL=
+ENV VITE_SKIP_ELECTRON=true
+ENV VITE_SERVER_URL=${VITE_SERVER_URL}
+RUN npm run build:packages && npm run build --workspace=apps/ui
+
+# =============================================================================
+# UI PRODUCTION STAGE
+# =============================================================================
+FROM nginx:alpine AS ui
+
+# Build argument for tracking which commit this image was built from
+ARG GIT_COMMIT_SHA=unknown
+LABEL automaker.git.commit.sha="${GIT_COMMIT_SHA}"
+
+# Copy built files
+COPY --from=ui-builder /app/apps/ui/dist /usr/share/nginx/html
+
+# Copy nginx config for SPA routing
+COPY apps/ui/nginx.conf /etc/nginx/conf.d/default.conf
+
+EXPOSE 80
 
-# Use entrypoint
-ENTRYPOINT ["./entrypoint.sh"]
+CMD ["nginx", "-g", "daemon off;"]

README.md

@@ -1,13 +1,3 @@
----
-title: Automaker
-emoji: 🤖
-colorFrom: blue
-colorTo: indigo
-sdk: docker
-app_port: 7860
-pinned: false
----
-
 <p align="center">
   <img src="apps/ui/public/readme_logo.svg" alt="Automaker Logo" height="80" />
 </p>

apps/server/src/index.ts

@@ -283,8 +283,6 @@ function isLocalOrigin(origin: string): boolean {
       hostname === '0.0.0.0' ||
       hostname.startsWith('192.168.') ||
       hostname.startsWith('10.') ||
-      hostname.endsWith('.hf.space') ||
-      hostname.endsWith('.huggingface.co') ||
       /^172\.(1[6-9]|2[0-9]|3[0-1])\./.test(hostname)
     );
   } catch {
@@ -302,7 +300,7 @@ app.use(
       }
 
       // If CORS_ORIGIN is set, use it (can be comma-separated list)
-      const allowedOrigins = process.env.CORS_ORIGIN?.split(',').concat(['.hf.space', '.huggingface.co'])
+      const allowedOrigins = process.env.CORS_ORIGIN?.split(',')
         .map((o) => o.trim())
         .filter(Boolean);
       if (allowedOrigins && allowedOrigins.length > 0) {
@@ -480,20 +478,6 @@ app.use('/api', requireJsonContentType);
 
 // Mount API routes - health, auth, and setup are unauthenticated
 app.use('/api/health', createHealthRoutes());
-import path from 'path';
-import { fileURLToPath } from 'url';
-const __filename = fileURLToPath(import.meta.url);
-const __dirname = path.dirname(__filename);
-const UI_DIST_PATH = path.resolve(__dirname, '../../../apps/ui/dist');
-app.use(express.static(UI_DIST_PATH));
-app.get('/health', (_req, res) => res.status(200).json({ status: 'ok' }));
-app.get('/api-docs', (_req, res) => res.status(200).json({
-  message: 'Automaker API Documentation',
-  endpoints: [
-    { method: 'GET', path: '/api/health', purpose: 'Health Check' },
-    { method: 'POST', path: '/api/auth/login', purpose: 'Login' }
-  ]
-}));
 app.use('/api/auth', createAuthRoutes());
 app.use('/api/setup', createSetupRoutes());
 
@@ -537,12 +521,6 @@ app.use(
   '/api/projects',
   createProjectsRoutes(featureLoader, autoModeService, settingsService, notificationService)
 );
-app.use((req, res, next) => {
-  if (req.path.startsWith('/api/') || req.path === '/health' || req.path === '/api-docs') {
-    return next();
-  }
-  res.sendFile(path.join(UI_DIST_PATH, 'index.html'));
-});
 
 // Create HTTP server
 const server = createServer(app);

entrypoint.sh

@@ -6,39 +6,37 @@ echo "Starting Automaker entrypoint script..."
 # Ensure DATA_DIR exists
 mkdir -p "$DATA_DIR"
 
-# Configure OpenCode authentication and providers
-if [ -n "$OPENCODE_AUTH_TOKEN" ]; then
-    echo "OPENCODE_AUTH_TOKEN detected, authenticating OpenCode CLI..."
-    
-    # Use the CLI to login if possible, or manually create the config
-    # Since opencode auth login is interactive, we might need to simulate it or use the config file approach
+# Configure OpenCode & Helmholtz authentication
+if [ -n "$OPENCODE_AUTH_TOKEN" ] || [ -n "$BLABLADOR_API_KEY" ]; then
+    echo "Authentication tokens detected, configuring providers..."
     mkdir -p "$HOME/.local/share/opencode"
-    echo "{\"opencode\": {\"type\": \"api\", \"key\": \"$OPENCODE_AUTH_TOKEN\"}}" > "$HOME/.local/share/opencode/auth.json"
     
-    # Add Helmholtz provider if BLABLADOR_API_KEY is provided
+    # Initialize base JSON
+    AUTH_JSON="{}"
+    
+    if [ -n "$OPENCODE_AUTH_TOKEN" ]; then
+        AUTH_JSON=$(echo "$AUTH_JSON" | jq ". + {\"opencode\": {\"type\": \"api\", \"key\": \"$OPENCODE_AUTH_TOKEN\"}}")
+    fi
+    
     if [ -n "$BLABLADOR_API_KEY" ]; then
-        echo "BLABLADOR_API_KEY detected, adding Helmholtz provider..."
+        AUTH_JSON=$(echo "$AUTH_JSON" | jq ". + {\"helmholtz\": {\"type\": \"api\", \"key\": \"$BLABLADOR_API_KEY\", \"baseURL\": \"https://api.helmholtz-blablador.fz-juelich.de/v1\"}}")
         
-        # Add the provider via CLI
-        # opencode provider add helmholtz --endpoint https://api.helmholtz-blablador.fz-juelich.de/v1 --api-key $BLABLADOR_API_KEY
-        
-        # Or update auth.json manually to be sure
-        AUTH_JSON=$(cat "$HOME/.local/share/opencode/auth.json")
-        NEW_AUTH_JSON=$(echo "$AUTH_JSON" | jq ". + {\"helmholtz\": {\"type\": \"api\", \"key\": \"$BLABLADOR_API_KEY\", \"baseURL\": \"https://api.helmholtz-blablador.fz-juelich.de/v1\"}}")
-        echo "$NEW_AUTH_JSON" > "$HOME/.local/share/opencode/auth.json"
-        
-        # Set Helmholtz alias-code as the default model in Automaker settings
+        # Configure the app settings to use Helmholtz alias-code model by default
         python3 /usr/local/bin/update_settings.py "$DATA_DIR" "helmholtz/alias-code"
         echo "Helmholtz provider and default model configured."
     fi
+    
+    echo "$AUTH_JSON" > "$HOME/.local/share/opencode/auth.json"
+    echo "Provider authentication configured."
 else
-    echo "OPENCODE_AUTH_TOKEN not set, skipping OpenCode authentication."
+    echo "No provider tokens set, skipping auto-login."
 fi
 
 # Configure GitHub CLI authentication if token is provided
 if [ -n "$GITHUB_API_TOKEN" ]; then
     echo "GITHUB_API_TOKEN detected, configuring GitHub CLI..."
     export GH_TOKEN="$GITHUB_API_TOKEN"
+    echo "GitHub CLI token exported."
 fi
 
 # Start the application