Spaces:
Running
Running
| # syntax=docker/dockerfile:1 | |
| # SPDX-License-Identifier: Apache-2.0 | |
| # © 2026 Lutar, Stephen P. — SZL Holdings · ORCID 0009-0001-0110-4173 · Doctrine v11 | |
| # | |
| # a11oy HF Docker Space — RESET build (Brand Orchestration Layer at /). | |
| # | |
| # RESET 2026-05-31 (Yachay CTO): a11oy is NOT a /console/ admin panel. | |
| # Per Replit .replit-artifact/artifact.toml: BASE_PATH="/", serve="static" from dist/public, | |
| # rewrite /* -> /index.html (SPA history fallback). The React SPA IS the Brand | |
| # Orchestration Layer; its HomePage (Vessels-DNA / investor-facing landing) renders at /. | |
| # | |
| # Serves: | |
| # / — SPA front door (Brand Orchestration Layer landing) | |
| # /assets/* — SPA JS/CSS chunks (vite base="/") | |
| # /boardroom, /investor-demo, /sovereign, /fabric, /nexus, /command, ... — SPA routes (history fallback) | |
| # /api/a11oy/* — a11oy serve endpoints (health, gates, reason, policy/evaluate, proxy) | |
| # | |
| # HF Space requirement: listen on PORT 7860. | |
| FROM python:3.12-slim | |
| WORKDIR /app | |
| # Install Node 22 (for a11oy serve TypeScript runner) | |
| RUN apt-get update && apt-get install -y --no-install-recommends \ | |
| curl ca-certificates gnupg git && \ | |
| curl -fsSL https://deb.nodesource.com/setup_22.x | bash - && \ | |
| apt-get install -y --no-install-recommends nodejs && \ | |
| apt-get clean && rm -rf /var/lib/apt/lists/* | |
| # Install GitHub CLI (gh) -- the a11oy.code github_read_file / github_open_issue / | |
| # github_open_pr tools shell out to `gh` and read GH_TOKEN/GITHUB_TOKEN from the | |
| # Space env. Official apt repo; curl + gnupg already installed above. Build-time only. | |
| RUN curl -fsSL https://cli.github.com/packages/githubcli-archive-keyring.gpg \ | |
| | gpg --dearmor -o /usr/share/keyrings/githubcli-archive-keyring.gpg && \ | |
| chmod go+r /usr/share/keyrings/githubcli-archive-keyring.gpg && \ | |
| echo "deb [arch=$(dpkg --print-architecture) signed-by=/usr/share/keyrings/githubcli-archive-keyring.gpg] https://cli.github.com/packages stable main" \ | |
| > /etc/apt/sources.list.d/github-cli.list && \ | |
| apt-get update && apt-get install -y --no-install-recommends gh && \ | |
| apt-get clean && rm -rf /var/lib/apt/lists/* | |
| # Install Python dependencies | |
| # ADDITIVE (Yachay): huggingface_hub + openai power the a11oy.code orchestrator's | |
| # unified open-LLM router (HF Router inference). python-multipart is required by | |
| # FastAPI UploadFile for the Whisper /voice/stt endpoint. None of these change the | |
| # existing SPA / gates runtime; the orchestrator import is try/except-guarded in serve.py. | |
| RUN pip install --no-cache-dir \ | |
| "fastapi>=0.111.0,<1.0.0" \ | |
| "uvicorn[standard]>=0.29.0,<1.0.0" \ | |
| "httpx>=0.27.0,<1.0.0" \ | |
| "starlette>=0.37.0" \ | |
| "huggingface_hub>=0.25.0" \ | |
| "openai>=1.40.0" \ | |
| "python-multipart>=0.0.9" \ | |
| "cryptography>=42.0.0" \ | |
| "lmdb>=1.4.0" | |
| # BE hardening: slowapi rate limiter (60/min/IP). pydantic+fastapi already present. | |
| RUN pip install --no-cache-dir "slowapi>=0.1.9" | |
| # sqlite-vss removed from build: no pre-built wheel for python:3.12-slim; | |
| # szl_khipu_lmdb.py and szl_unay.py already have honest try/except fallback | |
| # to cosine similarity if the sqlite-vss .so cannot load. (P0 CI fix, Dev1 Rumi) | |
| # a11oy source for the serve runtime (receipt-substrate + policy gates only). | |
| # FIX (2026-06-03, HF Verification Squad): the previous `git clone` of the PRIVATE | |
| # github.com/szl-holdings/a11oy repo failed in the HF build sandbox (no GitHub creds) | |
| # with exit code 128, leaving the Space stuck in BUILD_ERROR. The required source is | |
| # already vendored in THIS Space repo under packages/, so we COPY it locally to the | |
| # exact path serve.py expects (/app/a11oy-src/packages/...). No network, no auth. | |
| # Doctrine v11 LOCKED 749/14/163. ADDITIVE-equivalent: same files, same runtime path. | |
| COPY packages/receipt-substrate/src /app/a11oy-src/packages/receipt-substrate/src | |
| COPY packages/policy/src/gates /app/a11oy-src/packages/policy/src/gates | |
| # Copy the pre-built SPA (Brand Orchestration Layer) to the static root. | |
| # index.html + assets/* are served directly at / and /assets/*; unknown GET -> index.html. | |
| COPY console/ ./static/ | |
| # Build cache-bust 2026-06-08T23:30Z (Wave23 instillation): knowledge.json was | |
| # NEVER explicitly COPYed into the image, so /knowledge.json (SPA Formulas tab + | |
| # /api/a11oy/v1/research/corpus) served a STALE in-layer copy. Pin it freshly into | |
| # BOTH the static root (catch-all serves /app/static/knowledge.json) and /app root | |
| # (research-corpus endpoint reads /app/knowledge.json). Wave23 = conditional Khipu | |
| # BFT safety (Conjecture 2 conditional); locked-8 + Lambda Conjecture 1 UNCHANGED. | |
| COPY knowledge.json ./static/knowledge.json | |
| # --------------------------------------------------------------------------- | |
| # CONSOLIDATED ROOT-FILE COPY LAYERS (segment A: pre-LLM-gate) — Docker max-depth fix, Opus 4.8. | |
| # One image layer per COPY; collapsed root-file->same-name COPYs into grouped | |
| # multi-source COPYs landing at the /app WORKDIR root. IDENTICAL file set ships | |
| # to IDENTICAL paths (set-equality proven). Never `COPY . .`; subpath/dir COPYs | |
| # untouched; A11OY_REQUIRE_LOCAL_LLM gate + demo-tier RUN logic untouched. | |
| # Signed-off-by: Yachay <yachay@szlholdings.ai> | |
| # --------------------------------------------------------------------------- | |
| COPY knowledge.json szl_parity_gaps.py a11oy_warhacker_obs.py serve.py a11oy_wireA_metrics.py cathedral.html a11oy_operator_organ.py a11oy_hf_assets.py szl_b2_secdata.py gates_manifest.json a11oy_code_orchestrator.py a11oy_agent_loop.py a11oy_org_rag.py a11oy_mcp_client.py szl_rag.py a11oy_code_ide.html wayra_serve.py wayra_snapshot.json wayra_digests_7d.json szl_khipu_os_routes.py ./ | |
| COPY szl_khipu_consensus.py szl_puriq_formulas.py ayni_os_serve.py szl_live_wires.py live_wires.html live_wires_3d.js szl_dsse.py szl_provenance.py szl_be_hardening.py szl_unay.py szl_khipu_lmdb.py szl_khipu_replicate.py szl_unay_routes.py szl_warhacker_aliases.py a11oy_v4_hickok.py szl_khipu.py szl_formulas.py a11oy_v4_formulas.py szl_anatomy_3d.py szl_anatomy_routes.py ./ | |
| COPY _vendor_blobs.py szl_v4_fleet.py operator_shell_v4.py szl_bridge.py szl_bridge_schemas.py agent.html a11oy_bridge_cli.py szl_ken.py a11oy_formula_endpoints.py a11oy_formulas_page.py a11oy_frontier_patch.py a11oy_v4_agent.py szl_brain.py szl_wire.py szl_hub.py szl_rosie_companion.py szl_receipt_substrate.py szl_alloy_embed_fabric.py szl_ayni_quorum.py szl_agentic_loop.py ./ | |
| COPY szl_formula_wiring.py a11oy_code_engine.py a11oy_code.py a11oy_seismic.py szl_warhacker_real.py szl_warhacker_demos.py NOTICE_warhacker_demos.txt szl_llm_registry.py szl_elite_console.py szl_alloy_models.py szl_scaling.py szl_allodial.py szl_entanglement.py szl_neuroplasticity.py szl_chain_of_title.py szl_sovereign_compute.py ./ | |
| # Energy/heart/engine/revenue/harvest organ modules: present in repo but were absent | |
| # from every COPY line -> guarded imports threw ModuleNotFoundError -> dark 404 surfaces. | |
| COPY szl_energy_budget.py szl_energy_provenance.py szl_heart_blood.py szl_engine_status.py szl_backend_hardening.py revenue_endpoints.py a11oy_harvest_endpoints.py ./ | |
| # ADDITIVE (joules-honesty #349): single-source joules_label helper + its consumers. | |
| # szl_joules_truth.py is imported by szl_energy_budget/szl_engine_status/revenue_endpoints/ | |
| # a11oy_harvest_endpoints/szl_anatomy_loop/szl_prod_hardening; revenue_model.py backs | |
| # /revenue/estimate. Absent from every COPY line -> the guarded import fell back to the | |
| # local 'sample' stub and /revenue/estimate ModuleNotFound'd (#349 merged-but-not-live). | |
| # Per-file COPY (this Dockerfile never uses `COPY . .`); keeps the helper LIVE so 'measured' | |
| # is decided in ONE place. Mirrored byte-identical to the HF Space (hf-sync APP_FILES lockstep). | |
| COPY szl_joules_truth.py revenue_model.py szl_prod_hardening.py ./ | |
| # ADDITIVE (devM resilience): szl_resilience is imported by serve.py for the Hystrix | |
| # circuit breaker + K8s liveness/readiness split. Per-file COPY (this Dockerfile does | |
| # not use `COPY . .`); without this line `import szl_resilience` would ModuleNotFound | |
| # at runtime and /health/live + /health/ready would 404 (the recurring dark-surface bug). | |
| COPY szl_resilience.py ./ | |
| # ADDITIVE (devN observability): szl_observability is imported by serve.py for the | |
| # OpenTelemetry-style distributed tracing + per-surface SLO summary. Per-file COPY | |
| # (this Dockerfile does not use `COPY . .`); without this line `import szl_observability` | |
| # would ModuleNotFound at runtime and /api/a11oy/v1/observability/* would 404 (the | |
| # recurring dark-surface bug). Pure stdlib; no new pip dep. | |
| COPY szl_observability.py ./ | |
| # ADDITIVE (verifiable-corpus): the publisher module imported lazily (try/except) | |
| # by szl_dsse + szl_wire to publish signed receipts to the public HF dataset | |
| # SZLHOLDINGS/a11oy-verifiable-corpus. Per-file COPY (this Dockerfile never uses | |
| # `COPY . .`); without it the lazy import is a no-op and receipts never publish. | |
| COPY szl_corpus_publish.py ./ | |
| # Copy serve orchestrator and gates manifest | |
| # ADDITIVE (live-ops): orchestration + AI-observability module — per-file COPY Dockerfile | |
| # omitted it, so import a11oy_warhacker_obs failed and /warhacker + /observability 404'd. | |
| # DEV-WIRE-A (2026-06-09): additive pure-stdlib tab-upgrade metrics module imported | |
| # by serve.py (try/except-guarded). NO numpy/scipy/networkx. Per-file COPY. | |
| # ADDITIVE (cathedral front-door hero): sovereign 3D landing matching the org card. | |
| # Served at / by serve.py (console one click in at /console). Placed AFTER | |
| # `COPY console/ ./static/` (line 65) so vendor3d + hero js are not clobbered. | |
| # ES-module Three.js r160 (MIT) vendored locally — NO CDN. Doctrine v11 LOCKED. | |
| COPY static/a11oy_cathedral.js ./static/a11oy_cathedral.js | |
| # Operator organ (Dev3) — ingested 3D infra-viz, vendored-three (0 CDN) | |
| COPY static/a11oy_operator_organ.js ./static/a11oy_operator_organ.js | |
| # (pages/operator_organ.html is copied below via `COPY pages/ ./pages/`) | |
| COPY static/vendor3d/three.module.min.js ./static/vendor3d/three.module.min.js | |
| COPY static/vendor3d/OrbitControls.js ./static/vendor3d/OrbitControls.js | |
| COPY static/vendor3d/THREE_LICENSE.txt ./static/vendor3d/THREE_LICENSE.txt | |
| # ADDITIVE (cathedral unification, GitHub-aligned): the ONE canonical genius | |
| # cathedral served at /cathedral — IDENTICAL "Constellation · Khipu" scene as the | |
| # SZLHOLDINGS/cathedral HF static space. cathedral_genius.html is that HF | |
| # index.html byte-for-byte except its two asset paths (importmap -> /hero/vendor3d, | |
| # module src -> /cathedral/app.js). app.js is the canonical ES module, served | |
| # sovereign in-image. Reuses the vendor3d Three.js r160 above — 0 CDN. | |
| COPY cathedral_genius.html ./cathedral_genius.html | |
| COPY static/cathedral_app.js ./static/cathedral_app.js | |
| # ADDITIVE: batch-2 sovereign security data module (imported by serve.py; try/except-guarded). | |
| # ADDITIVE: a11oy.code conversational orchestrator module (imported by serve.py). | |
| # ADDITIVE (a11oy Code agentic core, 2026-06-10): the GENUINELY-agentic loop + agentic | |
| # RAG + MCP client that a11oy_code_orchestrator.py imports (try/except-guarded). All three | |
| # are stdlib-only at import time (szl_brain/szl_rag/httpx/faiss are lazy + guarded), so they | |
| # ship BYTE-IDENTICAL into both a11oy & killinchu images. Without these per-file COPYs | |
| # (this Dockerfile never uses `COPY . .`) the agentic=true /chat/stream path, the | |
| # /api/a11oy/code/agent/* and /rag/* endpoints degrade and the imports fail. | |
| # szl_rag.py exists in the repo but was never COPY'd into the a11oy image; it backs the | |
| # BAAI/bge vector recall in a11oy_org_rag (honest FTS5-only degradation without it). | |
| # EGRESS FIX (2026-06-10): the org-RAG full build runs INSIDE this HF Space, | |
| # which can reach huggingface.co but NOT api.github.com (Space egress is | |
| # GitHub-blocked). Bundle the REAL highest-value files of the four GitHub-only | |
| # corpus categories (thesis/formulas/doctrine/lean) in-image so a11oy_org_rag.py | |
| # ingests them when GitHub is unreachable. corpus/INDEX.json records each file's | |
| # real origin repo+path+blob_sha+commit_sha; chunks cite bundled:<repo>@<sha>:<path> | |
| # (real files, honest provenance, NOT fabricated). BYTE-IDENTICAL across a11oy & | |
| # killinchu. Per-file/dir COPY (this Dockerfile does not use COPY . .). | |
| COPY corpus/ ./corpus/ | |
| # ADDITIVE: a11oy Code IDE page (served by orchestrator GET /api/a11oy/code/ide as a | |
| # sibling of a11oy_code_orchestrator.py). Self-contained (vendored CodeMirror, 0 runtime | |
| # CDN). Explicit per-file COPY (this Dockerfile does not use `COPY . .`). | |
| # ADDITIVE (WAYRA organ): explicit per-file COPY (this Dockerfile does not use COPY . .). | |
| # serve.py mounts wayra_serve.router -> /wayra, /wayra-digest, /api/a11oy/v1/wayra/*. | |
| # ADDITIVE (KHIPU-OS agentic DAG organ, 2026-06-01, Yachay): explicit per-file COPY | |
| # (this Dockerfile does not use COPY . .). serve.py imports szl_khipu_os_routes and | |
| # mounts GET/POST /api/a11oy/v1/khipu-os/{stats,verify,checkpoint,archive}. Self-driving | |
| # Merkle DAG + Reed-Solomon erasure (reedsolo optional; honest, NOT holographic/quantum). | |
| # ADDITIVE (drift-heal parity, 2026-06-10): shared canonical szl_khipu_consensus.py must be | |
| # byte-identical and present in BOTH a11oy & killinchu images (killinchu COPYs it; a11oy lacked | |
| # the line). Additive per-file COPY only (no content edit; this Dockerfile does not use COPY . .). | |
| # ADDITIVE (PURIQ Agentic Formulas, 2026-06-01, Yachay): explicit per-file COPY | |
| # (this Dockerfile does not use COPY . .). serve.py imports szl_puriq_formulas and | |
| # calls .register(app) -> GET /formulas + /api/a11oy/v1/puriq/formulas*. Doctrine v11 LOCKED. | |
| # ADDITIVE (Yachay / AYNI-OS, 2026-06-01): reciprocity organism + event-sourced replay | |
| # + Tinkuy (Kuramoto) flow. Explicit per-file COPY (this Dockerfile does not use COPY . .). | |
| # serve.py imports ayni_os_serve.router -> /v1/ayni, /v1/replay, /v1/tinkuy and serves the | |
| # /ayni tab from /app/pages/ayni.html. HONEST: replay=event-sourcing (NOT time-travel); | |
| # Ayni=game-theory primitive (Axelrod-Hamilton 1981, NOT mystical); Tinkuy=Kuramoto 1975. | |
| # LOCKED preserved: 749/14/163, 13-axis yuyay_v3, replay bacf5443…631fc5. Pure additive. | |
| COPY ayni_os/ ./ayni_os/ | |
| # ayni_os_serve event-sources its ledger from the real signed-receipt corpus; it | |
| # must be in the image or the loader honestly falls back to synthetic. Per-file | |
| # Dockerfile (no `COPY . .`), so copy the corpus explicitly. | |
| COPY infra/receipts-samples/ ./infra/receipts-samples/ | |
| COPY pages/ ./pages/ | |
| # ADDITIVE (Live 3D Wires / PURIQ Doctrine v12, Yachay): explicit per-file COPY. | |
| # This Dockerfile uses per-file COPY (no `COPY . .`), so the live-wires module + | |
| # its static assets must be copied explicitly or `import szl_live_wires` 404s and | |
| # /live-wires falls through to the SPA shell. serve.py registers these FIRST. | |
| # ADDITIVE (Provenance Hardening / Wire D + DSSE Cosign REAL signing, 2026-06-01, Yachay): | |
| # explicit per-file COPY (this Dockerfile does not use `COPY . .`). serve.py imports | |
| # szl_provenance (which imports szl_dsse) and calls register_provenance(app, "a11oy") -> | |
| # GET /api/a11oy/wires/D, POST /khipu/sign, POST /khipu/verify, GET /khipu/ledger, | |
| # GET /api/a11oy/provenance. Without these COPYs the import fails and the routes fall | |
| # through to the Node :8081 proxy (503). cryptography (added above) backs the real | |
| # ECDSA-P256-SHA256 cosign signatures. Real signatures only when SZL_COSIGN_PRIVATE_PEM | |
| # runtime secret is present (else honestly UNSIGNED). SLSA L1 honest (signing live); L2 roadmap via Wire D; L3 NOT claimed. | |
| ENV PORT=7860 | |
| # BE hardening (Greene) — per-file COPY (this Dockerfile uses per-file COPY). | |
| EXPOSE 7860 | |
| # ADDITIVE (UNAY + Khipu-LMDB v2, 2026-06-01, Yachay / Perplexity Computer Agent): | |
| # explicit per-file COPY (this Dockerfile does not use `COPY . .`). serve.py imports | |
| # szl_unay_routes and calls .register(app, ns="a11oy") -> /api/a11oy/v2/unay/* + | |
| # /api/a11oy/v2/khipu/lmdb/*. Real durable lmdb + real sqlite-vss (honest cosine- | |
| # fallback if the .so cannot load in the slim image). a11oy carries Khipu-LMDB PRIMARY. | |
| # ADDITIVE (Warhacker aliases, Yachay 2026-06-01): top-level /healthz + /khipu/* + /wires/D. | |
| # Per-file COPY (no `COPY . .`) — without this `import szl_warhacker_aliases` fails. | |
| # ADDITIVE (Hickok dual-stream ingest, 2026-06-01, Yachay / Perplexity Computer Agent): | |
| # explicit per-file COPY (this Dockerfile does not use `COPY . .`). serve.py imports | |
| # a11oy_v4_hickok and calls .register(app, ns="a11oy") -> POST /api/a11oy/v4/{dorsal, | |
| # ventral,spt,when,what} + GET /api/a11oy/v4/stream (SSE) + GET /brain, plus the | |
| # dual-stream router middleware on /agent/ask + /predict. Without this COPY the import | |
| # fails and the routes fall through to the Node :8081 proxy (503). Every receipt carries | |
| # neuro_citations[]. Anchors A36/A37/A38 (ts-only, honest `sorry` proofs). The three Lean | |
| # anchor files (DualStreamRouting/InternalFeedback/HierarchicalLinearization.lean) arrive | |
| # via the sparse-checkout of packages/policy/src/gates above (no explicit COPY needed). | |
| # Grounded in Hickok & Poeppel 2007 (DOI 10.1038/nrn2113). Doctrine v11 LOCKED 749/14/163. | |
| # ADDITIVE (Anatomy 3D + live formula wiring, 2026-06-02, Yachay / Perplexity | |
| # Computer Agent): explicit per-file COPY (this Dockerfile does not use `COPY . .`). | |
| # serve.py imports a11oy_v4_formulas (38-formula manifest + 15 live evaluators) and | |
| # szl_anatomy_3d (7 sovereign Three.js r128 anatomy surfaces + 6 live JSON endpoints). | |
| # szl_anatomy_3d self-serves Three.js at /anatomy-three.min.js from static-vendor/. | |
| # Receipts sign via szl_dsse (already COPYed) using szl_khipu + szl_formulas. Without | |
| # these COPYs the imports fail and the pages/endpoints fall through to the SPA shell. | |
| # Doctrine v11 LOCKED 749/14/163. Lambda = Conjecture 1 (NOT a theorem). NO external CDN. | |
| COPY web/formulas.html ./web/formulas.html | |
| COPY static-vendor/three.min.js ./static-vendor/three.min.js | |
| # ADDITIVE (Graph/Viz lane + Perplexity Computer Agent, 2026-06-06): AIR-GAP | |
| # VENDORING. The operator console (pages/console.html) loads the 7 viz libs + | |
| # KaTeX from /vendor/* instead of cdn.jsdelivr.net so the Space renders every | |
| # graph with ZERO network egress (Warhacker #2 "Tychee" air-gap deploy stacks). | |
| # Per-file COPY (this Dockerfile does NOT use `COPY . .`). The .js/.css ship as | |
| # text under static-vendor/; the binary globe texture + KaTeX woff2 fonts ship | |
| # as base64 TEXT in _vendor_blobs.py (decoded by the /vendor/* routes in serve.py) | |
| # so NO LFS/Xet blob is committed. Doctrine v11 LOCKED. NO external CDN. | |
| COPY static-vendor/chart.umd.min.js ./static-vendor/chart.umd.min.js | |
| COPY static-vendor/3d-force-graph.min.js ./static-vendor/3d-force-graph.min.js | |
| COPY static-vendor/echarts.min.js ./static-vendor/echarts.min.js | |
| COPY static-vendor/echarts-gl.min.js ./static-vendor/echarts-gl.min.js | |
| COPY static-vendor/globe.gl.min.js ./static-vendor/globe.gl.min.js | |
| COPY static-vendor/cytoscape.min.js ./static-vendor/cytoscape.min.js | |
| COPY static-vendor/d3.min.js ./static-vendor/d3.min.js | |
| COPY static-vendor/katex.min.js ./static-vendor/katex.min.js | |
| COPY static-vendor/katex.min.css ./static-vendor/katex.min.css | |
| # Batch-1 uniqueness rebuild (2026-06-06): additional vendored graph-viz libs | |
| # (MIT/ISC/BSD; NOTICE updated). Per-file COPY (this Dockerfile uses no COPY . .). | |
| COPY static-vendor/dagre.min.js ./static-vendor/dagre.min.js | |
| COPY static-vendor/cytoscape-dagre.js ./static-vendor/cytoscape-dagre.js | |
| COPY static-vendor/d3-sankey.min.js ./static-vendor/d3-sankey.min.js | |
| COPY static-vendor/ngraph.graph.min.js ./static-vendor/ngraph.graph.min.js | |
| COPY static-vendor/ngraph.path.min.js ./static-vendor/ngraph.path.min.js | |
| COPY static-vendor/ngraph.forcelayout.min.js ./static-vendor/ngraph.forcelayout.min.js | |
| COPY static-vendor/panzoom.min.js ./static-vendor/panzoom.min.js | |
| # DEV-WIRE-A (2026-06-09): anvaka graph-stack completion (0-CDN, in-image). BSD-3, anvaka. | |
| COPY static-vendor/vivagraph.min.js ./static-vendor/vivagraph.min.js | |
| COPY static-vendor/ngraph.events.umd.js ./static-vendor/ngraph.events.umd.js | |
| # OPERATOR WIDGET (2026-06-10): a11oy floating governed-operator surface ("Chaski"), | |
| # self-hosted in-image (0 CDN), served at /vendor/a11oy-operator-widget.js by serve.py. | |
| COPY static-vendor/a11oy-operator-widget.js ./static-vendor/a11oy-operator-widget.js | |
| COPY static-vendor/a11oy-operator-widget.css ./static-vendor/a11oy-operator-widget.css | |
| # ADDITIVE (V4 Fleet Panel + /api/health fix, 2026-06-02, Dev2 Inti): | |
| # explicit per-file COPY (this Dockerfile does not use COPY . .). | |
| # Signed-off-by: Yachay <yachay@szlholdings.ai> | |
| # Co-Authored-By: Perplexity Computer Agent <agent@perplexity.ai> | |
| # szl_v4_fleet.py: /api/health + /api/a11oy/v4/fleet[/doctrine] + /fleet + /thesis | |
| # v4_fleet_panel.html: canonical fleet panel served at /fleet | |
| # operator_shell_v4.py: Unified Operator Shell v4 endpoints (fix import failure) | |
| # web/operator.html: operator shell desktop cockpit HTML | |
| COPY web/v4_fleet_panel.html ./web/v4_fleet_panel.html | |
| COPY web/operator.html ./web/operator.html | |
| # ADDITIVE (Frontier wave, 2026-06-08): two founder tabs served from /app/web/ | |
| # via serve.py _ptg_serve. Sovereign pages, vendored 3D (globe.gl + three from | |
| # static-vendor; earth-night texture from _vendor_blobs.py /vendor route), 0 CDN. | |
| # Per-file COPY (this Dockerfile uses no COPY . .). | |
| COPY web/fleet-c2.html ./web/fleet-c2.html | |
| COPY web/living-anatomy.html ./web/living-anatomy.html | |
| # ADDITIVE (Cross-Harness Receipt Bridge — Hermes + OpenClaw; 2026-06-01, Yachay / | |
| # Perplexity Computer Agent; closeout PR superseding #198 runtime files). serve.py | |
| # already imports szl_bridge + a11oy_v4_agent and calls .register(app) BEFORE the | |
| # /api/a11oy/{path} Node proxy + SPA catch-all, but the bridge runtime modules were | |
| # never COPY'd, so `import szl_bridge` failed at boot and POST /api/a11oy/v4/bridge/ | |
| # {hermes,openclaw} + GET /api/a11oy/v4/bridge/receipt/{id} + GET /bridge fell through | |
| # to the SPA (404). Explicit per-file COPY (this Dockerfile never uses `COPY . .`). | |
| # szl_bridge imports szl_bridge_schemas (JSON Schema 2020-12 tool registry) and reuses | |
| # the already-COPY'd szl_dsse + szl_receipt_substrate signing/ledger modules. Doctrine | |
| # v11 LOCKED 749/14/163 UNCHANGED. | |
| # a11oy-bridge CLI (sign --from hermes/openclaw, verify --receipt-id). Standalone | |
| # operator tool; not imported at boot but shipped so it is runnable in-container. | |
| # ADDITIVE (SZL Ken Agent Pattern v1, CTO Yachay Convergence Cycle 1, 2026-06-03): | |
| # Explicit per-file COPY of szl_ken.py (this Dockerfile never uses `COPY . .`). | |
| # serve.py tries `import szl_ken` at startup; without this COPY the import fails | |
| # silently and /v1/agent/loop + /v1/mcp/tools return 404 instead of 200. | |
| # ADDITIVE ONLY — zero existing routes touched. Doctrine v11 LOCKED 749/14/163. | |
| # Signed-off-by: Yachay <yachay@szlholdings.ai> | |
| # Co-Authored-By: Perplexity Computer Agent <agent@perplexity.ai> | |
| # ADDITIVE (Formulas → Ecosystem instillation, Opus 4.8, 2026-06-03): | |
| # Per-file COPY of the a11oy.formulas package (this Dockerfile never uses `COPY . .`). | |
| # serve.py imports a11oy_formula_endpoints, which imports a11oy.formulas.* — without | |
| # these COPYs the import fails and /api/a11oy/v1/formula/* fall through to the SPA shell. | |
| # Real implementations of PAC-Bayes, BLS12-381 aggregate, Welford, Byzantine quorum, | |
| # Holevo, Bloom, Kalman, HNSW (amaru-delegate), Reidemeister. Each cites thesis_v22.pdf | |
| # + a real Lean theorem/obligation. Λ = Conjecture 1 (NEVER a theorem). SLSA L1 honest. | |
| # L2 build-provenance attestation = roadmap (Wire D) — not yet claimed. L3 not claimed. | |
| # Signed-off-by: Yachay <yachay@szlholdings.ai> | |
| # Co-Authored-By: Perplexity Computer Agent <agent@perplexity.ai> | |
| COPY src/a11oy/__init__.py ./src/a11oy/__init__.py | |
| COPY src/a11oy/formulas/__init__.py ./src/a11oy/formulas/__init__.py | |
| COPY src/a11oy/formulas/pac_bayes.py ./src/a11oy/formulas/pac_bayes.py | |
| COPY src/a11oy/formulas/bls_aggregate.py ./src/a11oy/formulas/bls_aggregate.py | |
| COPY src/a11oy/formulas/welford.py ./src/a11oy/formulas/welford.py | |
| COPY src/a11oy/formulas/byzantine_quorum.py ./src/a11oy/formulas/byzantine_quorum.py | |
| COPY src/a11oy/formulas/holevo_bound.py ./src/a11oy/formulas/holevo_bound.py | |
| COPY src/a11oy/formulas/bloom_filter.py ./src/a11oy/formulas/bloom_filter.py | |
| COPY src/a11oy/formulas/kalman.py ./src/a11oy/formulas/kalman.py | |
| COPY src/a11oy/formulas/hnsw_retrieval.py ./src/a11oy/formulas/hnsw_retrieval.py | |
| COPY src/a11oy/formulas/reidemeister.py ./src/a11oy/formulas/reidemeister.py | |
| # FIX (formula/* 404 repair): a11oy_formula_endpoints.py imports a11oy.formulas.{allodial, | |
| # allodial_gate, entanglement} alongside the formulas above, but these three were NEVER | |
| # COPY'd into the image. The package import therefore raised at boot, register() returned | |
| # "formulas-unavailable", and EVERY /api/a11oy/v1/formula/* route (sovereign, quorum, holevo, | |
| # bloom, kalman, formulas/index, …) 404'd through the Node proxy. Per-file COPY (this | |
| # Dockerfile never uses `COPY . .`). Mirrored byte-identical to the HF Space (hf-sync | |
| # APP_FILES lockstep). EXPERIMENTAL frontier gates — Λ = Conjecture 1 (never a theorem). | |
| COPY src/a11oy/formulas/allodial.py ./src/a11oy/formulas/allodial.py | |
| COPY src/a11oy/formulas/allodial_gate.py ./src/a11oy/formulas/allodial_gate.py | |
| COPY src/a11oy/formulas/entanglement.py ./src/a11oy/formulas/entanglement.py | |
| COPY src/a11oy/harvest/__init__.py ./src/a11oy/harvest/__init__.py | |
| COPY src/a11oy/harvest/wasted_energy_harvest.py ./src/a11oy/harvest/wasted_energy_harvest.py | |
| COPY src/a11oy/harvest/harvest_budget.py ./src/a11oy/harvest/harvest_budget.py | |
| # ADDITIVE (Formulas SECTION page — closeout): serve.py imports a11oy_formulas_page | |
| # and calls .register(app) BEFORE the SPA catch-all, mounting GET /formulas/wired | |
| # (premium Inca-palette list of every live formula + thesis citation + Lean permalink | |
| # + "Try it") and GET /api/a11oy/v1/formulas/page-manifest. Per-file COPY (never | |
| # `COPY . .`); without it the import fails and the route falls through to the SPA. | |
| # ADDITIVE (Missing modules fix, 2026-06-04, Perplexity Computer Agent): | |
| # The following .py files exist in the repo and are imported via try/except | |
| # in serve.py, but were never COPY'd into the Docker image. Without them the | |
| # imports fail silently and the associated routes/tabs are unavailable. | |
| # Per-file COPY (this Dockerfile never uses `COPY . .`). | |
| # Signed-off-by: Stephen P. Lutar Jr. <stephenlutar2@gmail.com> | |
| # ADDITIVE (Parity Gaps + Receipt Substrate fix, 2026-06-05, Orchestrator Squad): | |
| # szl_parity_gaps.py was MISSING from the Dockerfile despite being imported by | |
| # serve.py at line ~1722 and being the source of the 5 parity endpoints | |
| # (compliance/export, lineage, policy/validate, receipts/replay, lambda/score). | |
| # Without this COPY those endpoints 404'd. | |
| # szl_receipt_substrate.py was likewise missing — the Dockerfile comment at line ~182 | |
| # said "already-COPY'd" but no COPY line existed; szl_bridge.py and szl_parity_gaps.py | |
| # both import it via try/except, causing silent degradation. | |
| # szl_alloy_embed_fabric.py + szl_ayni_quorum.py: exist in repo, imported in serve.py, | |
| # but were never COPY'd — adding them makes their endpoints live. | |
| # Per-file COPY (this Dockerfile never uses `COPY . .`). | |
| # NOTE: szl_parity_gaps.py is already COPY'd at line 68 (above serve.py). | |
| # Signed-off-by: Stephen P. Lutar Jr. <stephenlutar2@gmail.com> | |
| # Co-Authored-By: Perplexity Computer Agent <agent@perplexity.ai> | |
| # Governed agent loop module (RAG->tool-call->policy/trust->signed-receipt + canonical /mcp/). | |
| # Formula-wiring module (ADDITIVE 2026-06-06): registers the kernel-verified theorem | |
| # mechanisms as live executable checks + the /api/<ns>/v1/formulas/* endpoints | |
| # (selftest, proof-summary). BYTE-IDENTICAL across a11oy + killinchu (single source of | |
| # truth). Per-file COPY (this Dockerfile never uses `COPY . .`) -- without this | |
| # `import szl_formula_wiring` fails at boot and the formula endpoints 404. Imports | |
| # stdlib only; no weights, no keys. | |
| # Signed-off-by: Stephen P. Lutar Jr. <stephenlutar2@gmail.com> | |
| # a11oy Code engine (governed chat/code/research; C20/W7-5 router; W5-3/W7-4 conformal; | |
| # C10-C12 consensus; REAL restricted-subprocess sandbox). Per-file COPY (this Dockerfile | |
| # never uses `COPY . .`) -- without this `import a11oy_code_engine` fails at boot and the | |
| # /api/a11oy/v1/code/* routes fall through to the SPA. Imports only stdlib + the already- | |
| # present szl_agentic_loop primitives; OPEN-WEIGHT roster only, NO closed weights, NO keys. | |
| # Signed-off-by: Stephen P. Lutar Jr. <stephenlutar2@gmail.com> | |
| # a11oy.code 7-tier organ->model router (TIERS + route() + tiers_payload()). | |
| # Per-file COPY (this Dockerfile never uses `COPY . .`) -- without this | |
| # `import a11oy_code` fails at boot and the /api/a11oy/v1/code/{tiers,health, | |
| # index,roster,route,auto,complete} router surface (registered in serve.py before | |
| # the catch-all) silently no-ops, so the /code UI's GET /tiers + POST /route|/auto | |
| # calls 404 and the chat cannot answer. Imports only stdlib (math/time/hashlib). | |
| # Signed-off-by: Stephen P. Lutar Jr. <stephenlutar2@gmail.com> | |
| # a11oy Seismic forecaster (Doctrine v13): honest Reasenberg-Jones (1994) + | |
| # Modified-Omori (Utsu 1961) aftershock-rate model over the LIVE public USGS | |
| # feeds. Per-file COPY (this Dockerfile never uses `COPY . .`) -- without this, | |
| # `import a11oy_seismic` fails at boot and the /api/a11oy/v1/seismic/{quakes, | |
| # forecast,health} routes (registered in serve.py before the catch-all) silently | |
| # no-op and fall through to the proxy (404). Stdlib only (math/urllib/json); | |
| # clean-room MIT, public-domain science, NO third-party code, 0 runtime CDN. | |
| # Statistical forecast -- NOT certainty, NOT a locked-proven claim. | |
| # Signed-off-by: Stephen P. Lutar Jr. <stephenlutar2@gmail.com> | |
| # Warhacker mission tabs backend (5 investor-facing surfaces; reuses | |
| # szl_agentic_loop primitives + the in-image signer). Per-file COPY | |
| # (this Dockerfile never uses `COPY . .`) — without this | |
| # `import szl_warhacker_real` fails at boot. | |
| # Signed-off-by: Stephen P. Lutar Jr. <stephenlutar2@gmail.com> | |
| # Warhacker EXHAUSTIVE demos backend (5 full step-by-step demos: step timeline, | |
| # catch tree, single-byte tamper test, formula-proof panel). Pure-Python, no | |
| # external deps; reuses the in-image signer + loop verifier. Per-file COPY | |
| # (this Dockerfile never uses `COPY . .`) — without this | |
| # `import szl_warhacker_demos` fails at boot. | |
| # Signed-off-by: Stephen P. Lutar Jr. <stephenlutar2@gmail.com> | |
| # --------------------------------------------------------------------------- | |
| # OPEN-WEIGHT ALLOY MODEL LAYER (model-integration squad, 2026-06-06, ADDITIVE) | |
| # Forges the strongest OPEN-WEIGHT coding models into a11oy's brains, BOUND by | |
| # proven formulas (C20/W7-5 router, W5-3/W7-4 conformal, C10-C12 consensus), | |
| # UNIFIED into the existing LLM registry (one roster, not two). | |
| # * szl_alloy_models.py : roster + router + conformal + consensus + governed | |
| # suggest + local GGUF backend (honest tower-side label when no GGUF mounted). | |
| # * szl_llm_registry.py : the EXISTING registry module (was imported in serve.py | |
| # but NEVER COPY'd -> import failed silently / /llm/registry 404). This COPY | |
| # makes the unified roster genuinely LIVE. | |
| # * szl_elite_console.py: existing console module imported by serve.py. | |
| # Per-file COPY (this Dockerfile never uses `COPY . .`). OPEN-WEIGHT only, NO | |
| # closed weights, NO keys. Weights NOT redistributed (loaded by hf_repo at | |
| # runtime / tower-side). | |
| # Signed-off-by: Stephen P. Lutar Jr. <stephenlutar2@gmail.com> | |
| # Co-Authored-By: Perplexity Computer Agent <agent@perplexity.ai> | |
| # LIVE CPU demo tier: install llama.cpp + fetch ONE tiny Apache-2.0 GGUF | |
| # (Qwen2.5-Coder-0.5B-Instruct Q4_K_M) so the demo tier serves REAL output on | |
| # cpu-basic. The wheel install stays best-effort (honest tower-side fallback if | |
| # no prebuilt wheel), but the GGUF weight below is now RELIABLY fetched (pinned | |
| # revision + retry + integrity verify) so the published image always carries it. | |
| # We never redistribute the weight in our repo — it is fetched from the HF repo. | |
| # CPU demo-tier llama.cpp — BUILT FROM SOURCE against glibc (NOT a prebuilt wheel). | |
| # WHY: abetlen's CPU wheel index ships the recent, Qwen2.5-capable 0.3.x cp312 | |
| # linux_x86_64 wheels built against MUSL libc — their bundled libllama.so NEEDs | |
| # libc.musl-x86_64.so.1, which CANNOT load on this glibc python:3.12-slim base | |
| # (dlopen fails: "libc.musl-x86_64.so.1: cannot open shared object file"), so the | |
| # demo tier silently degrades to the honest tower-side label. The only glibc | |
| # (manylinux) prebuilt cp312 wheels on that index are 0.2.6x — far too old to load | |
| # the Qwen2.5 GGUF architecture. So we compile llama-cpp-python==0.3.19 from source | |
| # here: recent enough to load the Qwen2.5-Coder GGUF AND producing a glibc-linked | |
| # libllama.so that actually loads. NO `|| echo` mask — the demo tier is a HARD | |
| # requirement of the published image (the ghcr-build-push "Demo tier serves REAL | |
| # local model" step boots the image and fails the build if the alloy demo tier does | |
| # not serve genuine local llama.cpp output), so a failed compile must fail LOUD. | |
| # GUARD: .github/workflows/llama-wheel-guard.yml re-builds this exact pinned version | |
| # from source on cp312/linux_x86_64 and asserts the resulting libllama.so links | |
| # glibc (not musl) and imports — verifying, not assuming, the contract on each bump. | |
| # GGML_NATIVE=OFF keeps the build portable (no -march=native) across CI + box CPUs. | |
| # | |
| # BUILD-ENV RESILIENCE (a11oy-build-resilience): the from-source compile is heavy. | |
| # On the strict PUBLISHED-image path (GHCR / GitHub Actions, ample RAM+time) it MUST | |
| # succeed and is verified glibc-linked + boot-tested by ghcr-build-push's "Demo tier | |
| # serves REAL local model" step + llama-wheel-guard.yml. On a CONSTRAINED rebuild | |
| # (HF Spaces cpu-basic rebuilds this Dockerfile from scratch and was OOM/timing-out | |
| # -> BUILD_ERROR, bricking the whole Space), a compile failure must NOT brick the app: | |
| # szl_alloy_models.py already returns an HONEST tower-side label (served_locally=False, | |
| # never a fake completion) when llama_cpp is absent. So: fail-loud when | |
| # A11OY_REQUIRE_LOCAL_LLM=1 (set in GHCR CI), else best-effort with an honest skip. | |
| # This preserves the published image's hard real-model guarantee while keeping the | |
| # HF Space reliably bootable. No fabricated data either way. | |
| ARG A11OY_REQUIRE_LOCAL_LLM=0 | |
| RUN set -eux; \ | |
| if [ "${A11OY_REQUIRE_LOCAL_LLM}" != "1" ]; then \ | |
| echo '[a11oy] A11OY_REQUIRE_LOCAL_LLM!=1 (constrained builder, e.g. HF cpu-basic): SKIPPING the heavy from-source llama.cpp compile to keep this build fast + reliable. The demo tier serves the HONEST tower-side label (szl_alloy_models.py, served_locally=False, never fake output). The strict GHCR-published image sets =1 and DOES compile + boot-verify real local output.'; \ | |
| else \ | |
| apt-get update; \ | |
| apt-get install -y --no-install-recommends build-essential cmake ninja-build git libgomp1 libstdc++6; \ | |
| CMAKE_ARGS="-DGGML_NATIVE=OFF" pip install --no-cache-dir --no-binary llama-cpp-python "llama-cpp-python==0.3.19"; \ | |
| python3 -c "import llama_cpp, os, glob; base=os.path.dirname(llama_cpp.__file__); so=glob.glob(os.path.join(base,'**','libllama.so'), recursive=True); assert so, 'libllama.so not found under '+base; d=open(so[0],'rb').read(); assert b'libc.so.6' in d and b'libc.musl-x86_64.so.1' not in d, 'libllama.so is not glibc-linked: '+so[0]; print('[a11oy] llama_cpp built from source OK (glibc):', so[0], getattr(llama_cpp,'__version__','?'))"; \ | |
| apt-get purge -y build-essential cmake ninja-build git; \ | |
| apt-get autoremove -y; \ | |
| rm -rf /var/lib/apt/lists/*; \ | |
| fi | |
| # GGUF weight — RELIABLY PRESENT (pinned revision + retry + integrity verify), NOT best-effort. | |
| # Previously a single best-effort `hf_hub_download(...) || echo` step: a transient download | |
| # failure silently shipped an image with NO model, so the alloy demo tier always degraded to | |
| # the tower-side label. Now we pin the EXACT repo revision, retry with backoff, and HARD-VERIFY | |
| # the downloaded file's byte size + sha256 against the published LFS digest. The build FAILS LOUD | |
| # if the weight is not reliably present, so every published image genuinely carries the GGUF and | |
| # the demo tier serves REAL on-CPU output. The honest tower-side fallback in szl_alloy_models.py | |
| # remains for any runtime where the weight is absent (e.g. local dev / bring-your-own-weights). | |
| # Apache-2.0 weight; fetched from the original HF repo, never redistributed in this repo. | |
| ARG A11OY_ALLOY_GGUF_REPO=Qwen/Qwen2.5-Coder-0.5B-Instruct-GGUF | |
| ARG A11OY_ALLOY_GGUF_FILE=qwen2.5-coder-0.5b-instruct-q4_k_m.gguf | |
| ARG A11OY_ALLOY_GGUF_REV=ebb2015119c907b064c512bf053e945850b5875f | |
| ARG A11OY_ALLOY_GGUF_SHA256=1d9614638d18024d0fbb36575a15f1302a3adf044df10345688ec4f6e1c4ff32 | |
| ARG A11OY_ALLOY_GGUF_SIZE=491400064 | |
| ARG A11OY_REQUIRE_LOCAL_LLM=0 | |
| ENV A11OY_REQUIRE_LOCAL_LLM=${A11OY_REQUIRE_LOCAL_LLM} | |
| RUN python3 <<'GGUFPY' | |
| import hashlib, os, sys, time | |
| from huggingface_hub import hf_hub_download | |
| # RESILIENCE: on a constrained builder (A11OY_REQUIRE_LOCAL_LLM!=1, e.g. HF cpu-basic) | |
| # the llama.cpp compile was skipped, so the 491MB GGUF is dead weight + slows the build. | |
| # Skip the download too; the demo tier serves the HONEST tower-side label. The strict | |
| # GHCR image sets =1 and DOES fetch + sha/size-verify the weight (boot-tested in CI). | |
| if os.environ.get("A11OY_REQUIRE_LOCAL_LLM") != "1": | |
| print("[a11oy] A11OY_REQUIRE_LOCAL_LLM!=1: skipping GGUF weight fetch (demo tier = honest tower-side label). App boots normally.", flush=True) | |
| sys.exit(0) | |
| repo = os.environ["A11OY_ALLOY_GGUF_REPO"] | |
| fname = os.environ["A11OY_ALLOY_GGUF_FILE"] | |
| rev = os.environ["A11OY_ALLOY_GGUF_REV"] | |
| want_sha = os.environ["A11OY_ALLOY_GGUF_SHA256"].lower() | |
| want_size = int(os.environ["A11OY_ALLOY_GGUF_SIZE"]) | |
| dest = "/app/models" | |
| os.makedirs(dest, exist_ok=True) | |
| def verify(p): | |
| if not p or not os.path.exists(p): | |
| return "missing" | |
| sz = os.path.getsize(p) | |
| if sz != want_size: | |
| return "size %d != expected %d" % (sz, want_size) | |
| h = hashlib.sha256() | |
| with open(p, "rb") as f: | |
| for chunk in iter(lambda: f.read(1 << 20), b""): | |
| h.update(chunk) | |
| got = h.hexdigest() | |
| if got != want_sha: | |
| return "sha256 %s != expected %s" % (got, want_sha) | |
| return None | |
| last = None | |
| for attempt in range(1, 7): | |
| try: | |
| p = hf_hub_download(repo_id=repo, filename=fname, revision=rev, local_dir=dest) | |
| last = verify(p) | |
| if last is None: | |
| print("[a11oy] GGUF verified present: %s (%d bytes, sha256 ok, rev %s)" | |
| % (fname, want_size, rev[:12]), flush=True) | |
| sys.exit(0) | |
| print("[a11oy] attempt %d: integrity check failed: %s" % (attempt, last), flush=True) | |
| try: | |
| os.remove(p) | |
| except OSError: | |
| pass | |
| except Exception as e: | |
| last = "%s: %s" % (type(e).__name__, str(e)[:200]) | |
| print("[a11oy] attempt %d: download failed: %s" % (attempt, last), flush=True) | |
| time.sleep(min(60, 5 * attempt)) | |
| # RESILIENCE (a11oy-build-resilience): fail-loud on the strict published-image path | |
| # (A11OY_REQUIRE_LOCAL_LLM=1 in GHCR CI), else honest skip so a constrained HF rebuild | |
| # still boots (demo tier shows the tower-side label, never fake output). | |
| if os.environ.get("A11OY_REQUIRE_LOCAL_LLM") == "1": | |
| sys.stderr.write("[a11oy] FATAL: could not obtain a verified GGUF after retries: %s\n" % last) | |
| sys.exit(1) | |
| sys.stderr.write("[a11oy] NOTE: GGUF weight not obtained (%s); demo tier will serve the HONEST tower-side label. App boots normally.\n" % last) | |
| sys.exit(0) | |
| GGUFPY | |
| # Drop transient download metadata; the real weight stays at /app/models/<file>. | |
| RUN rm -rf /app/models/.cache /root/.cache/huggingface 2>/dev/null || true | |
| ENV A11OY_ALLOY_GGUF=/app/models/qwen2.5-coder-0.5b-instruct-q4_k_m.gguf | |
| # ADDITIVE (Live-Data Layer, 2026-06-06, Warhacker): SHARED live-feed proxy module | |
| # a11oy_live_feeds.py exposes GET /api/a11oy/v1/live/<feed> (server-side fetch+cache, | |
| # CORS-safe same-origin, honest live/cached/self labels, NEVER fabricated). The | |
| # bundled live_snapshots/ are the in-image fallback served labelled 'cached' when an | |
| # upstream feed is unreachable. Per-file COPY (this Dockerfile never uses `COPY . .`) | |
| # -- without these the import fails and the /v1/live/* routes fall through to the SPA. | |
| # Signed-off-by: Stephen P. Lutar Jr. <stephenlutar2@gmail.com> | |
| # Co-Authored-By: Perplexity Computer Agent <agent@perplexity.ai> | |
| # --------------------------------------------------------------------------- | |
| # CONSOLIDATED ROOT-FILE COPY LAYERS (segment B: post-LLM-gate) — Docker max-depth fix, Opus 4.8. | |
| # One image layer per COPY; collapsed root-file->same-name COPYs into grouped | |
| # multi-source COPYs landing at the /app WORKDIR root. IDENTICAL file set ships | |
| # to IDENTICAL paths (set-equality proven). Never `COPY . .`; subpath/dir COPYs | |
| # untouched; A11OY_REQUIRE_LOCAL_LLM gate + demo-tier RUN logic untouched. | |
| # Signed-off-by: Yachay <yachay@szlholdings.ai> | |
| # --------------------------------------------------------------------------- | |
| COPY a11oy_live_feeds.py a11oy_signing_key.py a11oy_dev1_endpoints.py a11oy_vertical_feeds.py a11oy_deva_feeds.py a11oy_devb_endpoints.py a11oy_amaru_feeds.py szl_governance_gateway.py szl_abacus_verify.py szl_decision_uncertainty.py szl_gor_audit.py szl_sovereign_search.py szl_consensus_clusters.py szl_mission_ledger.py szl_budget_router.py szl_wave910_proofs.py szl_evidence_research.py szl_uds_fleet.py szl_readiness.py szl_quantum_bio.py szl_mosaic_governance.py ./ | |
| COPY szl_unified_formulas.py szl_cuas_formulas.py szl_contracting.py szl_bounties.py szl_putnam.py szl_connectors_serve.py szl_connector_mcp.py szl_conjecture_factory.py ./ | |
| COPY live_snapshots/ ./live_snapshots/ | |
| # ADDITIVE (Investor-WOW Layer, 2026-06-08, Dev1): a11oy_dev1_endpoints.py exposes | |
| # the four founder-approved WOW surfaces: POST /v1/wow/govern (Drop-on-Anything | |
| # governed turn + ungoverned-vs-governed catch), GET /v1/wow/ledger (unified | |
| # cross-vertical tamper-evident receipt chain), /v1/wow/roi (cost-of-failure model, | |
| # labeled assumptions), /v1/wow/router-latency (live router topology). Self-contained, | |
| # DSSE-signed receipts, honest labels, 0 fabricated data, 0 CDN. Per-file COPY (this | |
| # Dockerfile never uses `COPY . .`) -- without it the import fails and the /v1/wow/* | |
| # routes fall through to the SPA. serve.py imports it try/except-guarded. | |
| # Co-Authored-By: Perplexity Computer Agent <agent@perplexity.ai> | |
| # | |
| # Signing-key loader (a11oy_signing_key.py): load_signing_key() reads a11oy's | |
| # PERSISTENT ECDSA P-256 receipt key from the mounted Secret. a11oy_dev1_endpoints.py | |
| # imports it, so it MUST be COPY'd into the image (this Dockerfile never uses | |
| # `COPY . .`). Without this line the import fails, the loader never runs, and | |
| # serve.py silently falls back to a throwaway in-process key that changes on every | |
| # restart -- which breaks offline verification of every receipt a11oy ever signed. | |
| # Guarded by .github/workflows/signing-key-image-guard.yml. | |
| # ADDITIVE (Vertical Packs Layer, 2026-06-08, Dev2): a11oy_vertical_feeds.py exposes | |
| # the 5 vertical packs (Defense/Gov, Finance, Legal, Enterprise/Cyber, Real Estate) | |
| # under /api/a11oy/v1/vert/* -- real live server-side feeds (CISA KEV, NVD, Federal | |
| # Register, CourtListener, Yahoo, Coinbase, Frankfurter FX, GitHub events, NYC HPD/DOB, | |
| # Treasury), each running the governed loop (szl_governance_gateway) + emitting | |
| # DSSE-signed receipts (szl_dsse + szl_khipu, all already COPY'd above). Honest | |
| # labels, 0 fabricated data, 0 CDN. Per-file COPY (this Dockerfile never uses | |
| # `COPY . .`) -- without it the import fails and the /v1/vert/* routes fall through | |
| # to the SPA. serve.py imports it try/except-guarded; register() self-reorders its | |
| # routes to the front of the router so they beat the proxy + SPA catch-all. | |
| # Co-Authored-By: Perplexity Computer Agent <agent@perplexity.ai> | |
| # ADDITIVE (Deep Feeds Layer, 2026-06-08, Dev-A): a11oy_deva_feeds.py exposes the 10 | |
| # deep tabs (RealEstate 5: Market Pulse, Distress Radar, Ownership Graph, Deal Intel, | |
| # Broker Edge; Finance 5: Quant Desk, Crypto Live, Markets Macro, Prediction Markets, | |
| # Risk & Fraud Obs.) under /api/a11oy/v1/deva/* -- granular live server-side feeds | |
| # (Yahoo v8, Coinbase, CoinGecko, Frankfurter FX, Treasury, NYC HPD wvxf-dwi5 + DOB, | |
| # Polymarket gamma, SEC EDGAR, NVD), reusing a11oy_vertical_feeds governed_turn/_ledger | |
| # + szl_khipu/szl_dsse for signed receipts. Honest labels, 0 fabricated data, 0 CDN. | |
| # Per-file COPY (this Dockerfile never uses `COPY . .`); register() front-moves its | |
| # routes so they beat the proxy + SPA catch-all. | |
| # ADDITIVE (Provenance & Trust Anchor, 2026-06-08): a11oy_amaru_feeds.py exposes the | |
| # 5 trust tabs (Public-Ledger Anchor LIVE, Post-Quantum Signing PQC, Receipt | |
| # Provenance Graph 3D, Tamper/Audit Verifier, Anchor Health) under | |
| # /api/a11oy/v1/provenance/* -- live CT signed tree heads (Google Argon/Xenon, | |
| # Cloudflare Nimbus) + Bitcoin tip (mempool.space/blockstream), reusing | |
| # a11oy_vertical_feeds governed_turn + szl_khipu/szl_dsse for signed receipts. | |
| # Honest PQC labels (classical ECDSA-P256 live; ML-DSA/ML-KEM/SLH-DSA roadmap), | |
| # 0 fabricated data, 0 CDN. Per-file COPY; register() front-moves its routes so | |
| # they beat the proxy + SPA catch-all. | |
| # ADDITIVE (MINED UPGRADES, 2026-06, Yachay): four self-contained operator surfaces, | |
| # each adopting a PERMISSIVELY-licensed PATTERN (NOTICE updated) and evolving it into | |
| # an a11oy-native mechanism. Stdlib-only (no torch/numpy/CDN). Per-file COPY (this | |
| # Dockerfile never uses `COPY . .`) -- without these the imports fail and the | |
| # /governance-gateway, /abacus-verify, /decision-uncertainty, /gor-audit routes | |
| # fall through to the SPA shell. serve.py imports them try/except-guarded. | |
| # ADDITIVE (RE-SWEEP WAVE 2, 2026-06, Yachay): four MORE operator surfaces from the | |
| # P0 re-sweep backlog, each adopting a PERMISSIVE pattern (MIT/Apache; NOTICE updated) | |
| # and evolving it into an a11oy-native mechanism. Stdlib-only (no torch/numpy/CDN); | |
| # graph tabs render with the already-vendored cytoscape. Per-file COPY (this Dockerfile | |
| # never uses `COPY . .`) -- without these the imports fail and /sovereign-search, | |
| # /consensus-clusters, /mission-ledger, /budget-router fall through to the SPA shell. | |
| # serve.py imports them try/except-guarded. | |
| # ADDITIVE (WAVE9/10 INSTILLATION, 2026-06): the "Proven Formulas (experimental)" | |
| # surface wiring a11oy-targeted lutar-lean Wave9+Wave10 theorems as honest cards with | |
| # verbatim #print axioms + real in-image checks (Gershgorin matrix-health, Ville | |
| # anytime-alarm, replay-determinism+tamper-localize, quorum-intersection, DSSE | |
| # injectivity). Stdlib-only (no torch/numpy/CDN). Per-file COPY (this Dockerfile never | |
| # uses `COPY . .`) -- without this the import fails and /proven-formulas + | |
| # /api/a11oy/v1/proven/* fall through to the SPA shell, and the governance-gateway | |
| # matrix-health pre-flight reports the module missing. serve.py + szl_governance_gateway | |
| # import it try/except-guarded. LOCKED-proven stays EXACTLY 8; Lambda=Conjecture 1. | |
| # Operational Readiness backend (deployed-vs-repo reality, live/cached/unreachable). | |
| # serve.py imports this try/except-guarded; without this per-file COPY the import | |
| # fails and /api/a11oy/v1/readiness 404s (falls through to the SPA shell). | |
| # Quantum-Bio Λ-v5 backend (quantum-bio-v5): VERIFIED quantum-biology models | |
| # (Mitchell pmf + two-ion, Lindblad coherence, radical-pair compass, Λ-v5 gate). | |
| # serve.py imports this try/except-guarded; without this per-file COPY the import | |
| # fails and /api/a11oy/v1/qbio/* 404s. Pure stdlib (+optional numpy already present). | |
| # Contracting Readiness backend (SAM/CAGE + SBIR/STTR eligibility, web-sourced, | |
| # honest verified/confirmed/needs_founder_input/needs_founder_action labels, source | |
| # liveness probes, 0 fabricated org values). serve.py imports this try/except-guarded; | |
| # without this per-file COPY the import fails and /api/a11oy/v1/contracting 404s. | |
| # ADDITIVE (Open-Problem Bounty Board, bounties-tab-patch): stdlib-only bounty module | |
| # + the canonical bounty YAMLs (single source of truth, copied byte-identical from | |
| # szl-holdings/lutar-lean). Per-file/dir COPY (this Dockerfile never uses `COPY . .`) | |
| # -- without these the import fails and /api/a11oy/v1/bounties 404s. | |
| COPY bounties/ ./bounties/ | |
| # --------------------------------------------------------------------------- | |
| # SZL Enterprise Connector Framework. serve.py imports szl_connectors_serve | |
| # (which imports the szl_connectors/ package + szl_connector_mcp) and calls | |
| # register(app, "a11oy") to mount /api/a11oy/connectors + per-connector | |
| # health/read/write/oauth + the /integrations page. Per-file/dir COPY (this | |
| # Dockerfile never uses `COPY . .`) -- without these the import fails and the | |
| # connector routes fall through to the SPA. pages/integrations.html is already | |
| # shipped by the wholesale `COPY pages/ ./pages/` above, so no extra page COPY | |
| # is needed. 52 connectors (13 live-now / 38 credential-READY / 1 SAMPLE). | |
| # Doctrine v11: honest states, no fabricated records, Lambda-gated+DSSE writes. | |
| # Signed-off-by: Stephen P. Lutar Jr. <stephenlutar2@gmail.com> | |
| # Co-Authored-By: Perplexity Computer Agent <agent@perplexity.ai> | |
| # --------------------------------------------------------------------------- | |
| COPY szl_connectors/ ./szl_connectors/ | |
| # ADDITIVE (Task: HF Dataset Bucket Foundation): the ONE shared Hugging Face | |
| # 'bucket' client both flagships reuse. Durable, append-only, idempotent | |
| # (content-addressed dedup), offline-tolerant local queue + flush, rate-aware | |
| # batched Hub commits. Pure stdlib + huggingface_hub (lazy). BYTE-IDENTICAL | |
| # across a11oy + killinchu (shared-file-drift enforces it via this COPY list). | |
| # This Dockerfile never uses `COPY . .` — without this line `import | |
| # szl_hf_bucket` fails. Imported lazily by callers; no boot-time side effects. | |
| COPY szl_hf_bucket.py szl_metrics_prom.py ./ | |
| # Forge fix: these modules are on main + imported by serve.py (try/except) but were NEVER COPY'd | |
| # into the image -> ModuleNotFoundError at startup -> /api/a11oy/v1/research/* + dark surfaces 404. | |
| COPY szl_research_infra.py szl_dark_surfaces_register.py szl_anatomy_loop.py ./ | |
| # copy-sync lockstep guard (CHECK 2): these modules are on main + imported by serve.py | |
| # (try/except-guarded) but were NEVER COPY'd into the image, so the import silently fell | |
| # back to a STUB on the Space (the recurring "merged-but-not-live" failure). conduction_aphasia | |
| # backs /conduction; szl_a11oy_live_feeds backs the a11oy live-feeds organ; szl_jack is imported | |
| # transitively by szl_live_wires. Per-file COPY (this Dockerfile never uses `COPY . .`). They | |
| # auto-mirror to the HF Space via hf-sync-backend.yml (which parses these COPY lines). | |
| COPY conduction_aphasia.py szl_a11oy_live_feeds.py szl_jack.py ./ | |
| CMD ["python", "serve.py"] | |
| # Build cache-bust 2026-06-05T00:00Z (Orchestrator Squad): | |
| # szl_parity_gaps.py already COPY'd at line 68 (commit 543ca95). | |
| # Added COPY szl_receipt_substrate.py + szl_alloy_embed_fabric.py + szl_ayni_quorum.py. | |
| # All 5 parity endpoints now deployable. All 63 COPY sources verified present in repo. | |
| # Build cache-bust 2026-06-06T09:00Z (model-integration squad, Opus 4.8): | |
| # Added OPEN-WEIGHT ALLOY MODEL LAYER: COPY szl_alloy_models.py + szl_llm_registry.py | |
| # (was 404/never-copied) + szl_elite_console.py; optional non-fatal llama-cpp-python + | |
| # tiny Apache-2.0 GGUF fetch for the live CPU demo tier (honest tower-side fallback). | |
| # UNIFIED into the existing LLM registry (one roster). DeepSeek-Coder-V2 = CODE_PRIMARY. | |
| # C20/W7-5 router, W5-3/W7-4 conformal, C10-C12 consensus; every call -> signed receipt. | |