Will Anderson
640813e42e
Build pipeline - build-stage.sh replaces the old in-Dockerfile bootstrap.py path. Host pre-compiles src/*.el into dist/main.c via the canonical native elc at foundation/el/dist/platform/elc and applies the stub-decl sed before docker buildx runs. - Dockerfile.stage drops bootstrap.py + python3 from the builder stage and just runs cc on the host-supplied dist/main.c. - Pre-rendered HTML shells under /srv/landing/ are now chowned to the landing user so the El page-builder's fs_write at startup can rewrite them — without that, post-COPY edits never reach the served HTML and the served page stays as the stale build-time fallback. Chat restore - session.verified + session.verifiedAt persist through localStorage so a return visit within 24h skips the Turnstile gate and lands directly in the restored conversation. - restoreOrGreet() is the single source of truth for what shows up in the message pane after the gate clears: replays prior messages with skipSave, else drops the canned hello once and remembers it. - applyVerifiedDom() hides the gate / reveals the chat row, called both from the verified-on-load path (DOMContentLoaded if loading, else immediate) and from the Turnstile callback. - neuronDemoReset clears verified + verifiedAt so the gate returns next open. Extracted JS assets (src/assets/js/*.js + manifest.json) and the extract-js.py helper land here too — they match what the new build-stage flow produces and removes the inline <script> blobs from the served HTML.
93 lines
3.8 KiB
Docker
93 lines
3.8 KiB
Docker
# Dockerfile.stage — Stage build: landing server + soul-demo in one image.
|
|
#
|
|
# Both processes run in the same container:
|
|
# - neuron-web on port 8080 (landing page server)
|
|
# - soul-demo on port 7772 (demo chat, localhost only)
|
|
#
|
|
# bootstrap.py is no longer in the build path. The host-side build-stage.sh
|
|
# pre-compiles src/*.el → dist/main.c using the canonical native elc and
|
|
# applies the stub forward-declaration sed before this Dockerfile runs.
|
|
# The image just compiles the finished C source.
|
|
|
|
# ── Stage 1: compile both binaries ────────────────────────────────────────────
|
|
FROM debian:bookworm-slim AS builder
|
|
|
|
RUN apt-get update \
|
|
&& apt-get install -y --no-install-recommends \
|
|
build-essential \
|
|
libcurl4-openssl-dev \
|
|
libssl-dev \
|
|
ca-certificates \
|
|
&& rm -rf /var/lib/apt/lists/*
|
|
|
|
WORKDIR /build
|
|
|
|
# El runtime (shared by both binaries)
|
|
COPY runtime/el_runtime.c runtime/el_runtime.h ./
|
|
|
|
# ── Build neuron-web ──────────────────────────────────────────────────────────
|
|
#
|
|
# main.c was generated on the host by build-stage.sh from src/*.el via the
|
|
# native elc compiler. Stub forward-declarations were already injected on
|
|
# the host side, so this stage is a straight cc invocation.
|
|
COPY dist/web_stubs.c ./
|
|
COPY dist/main.c ./
|
|
|
|
RUN cc -O2 -rdynamic \
|
|
-o neuron-web \
|
|
main.c web_stubs.c el_runtime.c \
|
|
-lcurl -lpthread -ldl -lm -lssl -lcrypto
|
|
|
|
# ── Build soul-demo ───────────────────────────────────────────────────────────
|
|
COPY dist/soul-demo.c ./
|
|
COPY dist/vessel_stubs.c ./
|
|
|
|
RUN cc -O2 -rdynamic \
|
|
-o soul-demo \
|
|
soul-demo.c vessel_stubs.c el_runtime.c \
|
|
-lcurl -lpthread -ldl -lm -lssl -lcrypto
|
|
|
|
# ── Stage 2: runtime image ────────────────────────────────────────────────────
|
|
FROM debian:bookworm-slim
|
|
|
|
RUN apt-get update \
|
|
&& apt-get install -y --no-install-recommends \
|
|
libcurl4 \
|
|
libssl3 \
|
|
ca-certificates \
|
|
&& rm -rf /var/lib/apt/lists/* \
|
|
&& groupadd -r landing && useradd -r -g landing landing \
|
|
&& mkdir -p /srv/landing/assets /srv/landing/shares \
|
|
&& mkdir -p /srv/soul/engram-demo \
|
|
&& chown -R landing:landing /srv/landing /srv/soul
|
|
|
|
COPY --from=builder /build/neuron-web /usr/local/bin/neuron-web
|
|
COPY --from=builder /build/soul-demo /usr/local/bin/soul-demo
|
|
|
|
# Engram snapshot — baked in so soul has memory from cold start
|
|
COPY dist/engram-snapshot.json /srv/soul/engram-demo/snapshot.json
|
|
|
|
COPY src/assets /srv/landing/assets
|
|
COPY src/llms.txt /srv/landing/llms.txt
|
|
# Pre-rendered HTML shells (about, terms, enterprise-terms, index) used as
|
|
# fallback when the El page-builder hasn't been seeded yet at startup.
|
|
# chown to the landing user so the El runtime's fs_write at startup can
|
|
# rewrite them with the freshly-rendered page (extracted JS asset paths,
|
|
# updated chat widget, etc.). Without this they stay as their COPY'd root-
|
|
# owned shells and the served HTML never reflects post-COPY source edits.
|
|
COPY src/about.html src/terms.html src/enterprise-terms.html src/index.html /srv/landing/
|
|
RUN chown landing:landing /srv/landing/about.html /srv/landing/terms.html /srv/landing/enterprise-terms.html /srv/landing/index.html /srv/landing/llms.txt
|
|
|
|
COPY dist/entrypoint.sh /usr/local/bin/entrypoint.sh
|
|
RUN chmod +x /usr/local/bin/entrypoint.sh
|
|
|
|
ENV LANDING_ROOT=/srv/landing
|
|
ENV PORT=8080
|
|
ENV NEURON_HOME=/srv/soul/engram-demo
|
|
ENV NEURON_PORT=7772
|
|
|
|
USER landing
|
|
EXPOSE 8080
|
|
|
|
CMD ["/usr/local/bin/entrypoint.sh"]
|