Split architecture: Trainer=backend, Demo=dashboard

Dockerfile
- Replaces hard-coded uvicorn CMD with /bin/sh /app/start.sh
- Sets ownership correctly before switching to non-root user

start.sh (new)
- Reads BACKEND_URL env var → writes it into dashboard/js/config.js
- Reads SERVE_DASHBOARD_ONLY env var:
0 / unset → full stack via dashboard_server.py (Trainer Space)
1 → static-only via serve_demo.py (Demo Space)

serve_demo.py (new)
- Minimal FastAPI + StaticFiles server for the Demo space
- Serves dashboard/ on port 7860 with CORS enabled

dashboard/js/config.js (new)
- Sets window.CYBERSOC_BACKEND_URL = '' by default
- Overwritten at container startup by start.sh when BACKEND_URL is set

dashboard/js/api.js
- Reads window.CYBERSOC_BACKEND_URL set by config.js
- _wsUrl() and _httpBase() use the override URL when set,
fall back to same-origin auto-detection when empty

dashboard/index.html
- Loads js/config.js before api.js so the override is available

HF Space setup:
CyberSOC-trainer → no extra env vars (full backend mode)
Demo → SERVE_DASHBOARD_ONLY=1
BACKEND_URL=https://ajay00747-cybersoc-trainer.hf.space

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>

Dockerfile

@@ -1,19 +1,23 @@
 FROM python:3.10-slim
 
-# Create user with home directory
+# Create non-root user
 RUN useradd -m -u 1000 user
-USER user
-ENV PATH="/home/user/.local/bin:$PATH"
 
 WORKDIR /app
 
-# Copy requirements and install
-COPY --chown=user ./requirements.txt requirements.txt
+# Install dependencies as root so pip cache is shared
+COPY ./requirements.txt requirements.txt
 RUN pip install --no-cache-dir --upgrade -r requirements.txt
 
-# Copy all environment files
-COPY --chown=user . /app
+# Copy project files and set ownership
+COPY . /app
+RUN chmod +x /app/start.sh && chown -R user:user /app
+
+USER user
+ENV PATH="/home/user/.local/bin:$PATH"
 
-# The hackathon expects the OpenEnv Server to run on 7860 for Spaces Gradio endpoints
-# We will use uvicorn to host the app which complies with the spec
-CMD ["uvicorn", "dashboard_server:app", "--host", "0.0.0.0", "--port", "7860"]
+# start.sh reads BACKEND_URL and SERVE_DASHBOARD_ONLY env vars:
+#   Trainer Space  →  SERVE_DASHBOARD_ONLY unset  →  full backend (dashboard_server.py)
+#   Demo Space     →  SERVE_DASHBOARD_ONLY=1      →  static dashboard only (serve_demo.py)
+#                     BACKEND_URL=https://ajay00747-cybersoc-trainer.hf.space
+CMD ["/bin/sh", "/app/start.sh"]

dashboard/index.html

@@ -290,6 +290,7 @@
   </main><!-- /main-grid -->
 
   <!-- Scripts (order matters) -->
+  <script src="js/config.js"></script>
   <script src="js/animations.js"></script>
   <script src="js/api.js"></script>
   <script src="js/graphs.js"></script>

dashboard/js/api.js

@@ -49,8 +49,22 @@ const API = (() => {
     }
   })();
 
+  // ── External backend override (set by dashboard/js/config.js in Demo mode) ─
+  // config.js sets window.CYBERSOC_BACKEND_URL to the trainer Space URL.
+  // Empty string → auto-detect from page origin (default for full-stack mode).
+  const _backendOverride = (
+    typeof window !== 'undefined' &&
+    typeof window.CYBERSOC_BACKEND_URL === 'string' &&
+    window.CYBERSOC_BACKEND_URL.trim()
+  ) ? window.CYBERSOC_BACKEND_URL.trim().replace(/\/$/, '') : '';
+
   // ── WebSocket URL ──────────────────────────────────────────────────────────
   function _wsUrl() {
+    if (_backendOverride) {
+      const wsProto = _backendOverride.startsWith('https') ? 'wss:' : 'ws:';
+      const host    = _backendOverride.replace(/^https?:\/\//, '');
+      return `${wsProto}//${host}/ws/${_sessionId}`;
+    }
     if (typeof window === 'undefined') {
       return `ws://localhost:8000/ws/${_sessionId}`;
     }
@@ -63,6 +77,7 @@ const API = (() => {
 
   // HTTP base URL — used only by checkConnection() which pings /health over HTTP
   function _httpBase() {
+    if (_backendOverride) return _backendOverride;
     if (typeof window === 'undefined') return 'http://localhost:8000';
     const { protocol, hostname, port } = window.location;
     if (protocol === 'file:') return 'http://localhost:8000';

dashboard/js/config.js

@@ -0,0 +1,12 @@
+// CyberSOC Backend URL Configuration
+// -------------------------------------------------------------
+// Leave as empty string when the dashboard and backend are on
+// the same origin (default for the CyberSOC-upgraded space).
+//
+// Set to the trainer Space URL for standalone Dashboard mode:
+//   window.CYBERSOC_BACKEND_URL = 'https://ajay00747-cybersoc-trainer.hf.space';
+//
+// In production this file is overwritten at container startup by
+// start.sh using the BACKEND_URL environment variable.
+// -------------------------------------------------------------
+window.CYBERSOC_BACKEND_URL = '';

serve_demo.py

@@ -0,0 +1,43 @@
+"""
+Minimal static file server for the CyberSOC Demo HF Space.
+
+Serves the dashboard/ directory on port 7860.
+The BACKEND_URL environment variable is injected into
+dashboard/js/config.js at startup by start.sh before this
+process is launched.
+"""
+
+import os
+import uvicorn
+from fastapi import FastAPI
+from fastapi.responses import RedirectResponse
+from fastapi.staticfiles import StaticFiles
+from fastapi.middleware.cors import CORSMiddleware
+
+app = FastAPI(title="CyberSOC Demo Dashboard")
+
+app.add_middleware(
+    CORSMiddleware,
+    allow_origins=["*"],
+    allow_methods=["*"],
+    allow_headers=["*"],
+)
+
+
+@app.get("/")
+def root():
+    return RedirectResponse(url="/index.html")
+
+
+@app.get("/health")
+def health():
+    return {"status": "ok", "service": "cybersoc-demo"}
+
+
+# Serve everything in the dashboard/ folder
+_dashboard_dir = os.path.join(os.path.dirname(__file__), "dashboard")
+app.mount("/", StaticFiles(directory=_dashboard_dir, html=True), name="static")
+
+
+if __name__ == "__main__":
+    uvicorn.run(app, host="0.0.0.0", port=7860)

start.sh

@@ -0,0 +1,37 @@
+#!/bin/sh
+# CyberSOC container startup script
+#
+# Environment variables (set in HF Space settings):
+#   BACKEND_URL          — URL of the CyberSOC trainer Space, e.g.
+#                          https://ajay00747-cybersoc-trainer.hf.space
+#                          Leave unset for same-origin (full-stack mode).
+#   SERVE_DASHBOARD_ONLY — Set to "1" for the Demo space (static files only).
+#                          Leave unset or "0" for the Trainer space (full API).
+#
+# Demo Space settings:
+#   BACKEND_URL          = https://ajay00747-cybersoc-trainer.hf.space
+#   SERVE_DASHBOARD_ONLY = 1
+#
+# Trainer Space settings:
+#   (no extra env vars required)
+
+set -e
+
+# ── Inject backend URL into config.js ────────────────────────────────────────
+CONFIG_JS="/app/dashboard/js/config.js"
+if [ -n "${BACKEND_URL}" ]; then
+    printf "window.CYBERSOC_BACKEND_URL = '%s';\n" "${BACKEND_URL}" > "${CONFIG_JS}"
+    echo "[startup] Demo mode — backend URL: ${BACKEND_URL}"
+else
+    printf "window.CYBERSOC_BACKEND_URL = '';\n" > "${CONFIG_JS}"
+    echo "[startup] Full-stack mode — backend on same origin"
+fi
+
+# ── Launch the correct server ─────────────────────────────────────────────────
+if [ "${SERVE_DASHBOARD_ONLY:-0}" = "1" ]; then
+    echo "[startup] Serving dashboard only (serve_demo.py) on port 7860"
+    exec python /app/serve_demo.py
+else
+    echo "[startup] Serving full stack (dashboard_server.py) on port 7860"
+    exec uvicorn dashboard_server:app --host 0.0.0.0 --port 7860
+fi