Add HuggingFace Docker Space deployment — Dockerfile + README metadata

Dockerfile

@@ -0,0 +1,57 @@
+# ──────────────────────────────────────────────
+# Shortlist Backend — HuggingFace Spaces Dockerfile
+# Deploys FastAPI backend as a Docker Space
+# ──────────────────────────────────────────────
+
+# Stage 1: Install dependencies
+FROM python:3.12-slim AS builder
+
+WORKDIR /build
+
+RUN apt-get update && \
+    apt-get install -y --no-install-recommends gcc && \
+    rm -rf /var/lib/apt/lists/*
+
+COPY backend/requirements.txt .
+RUN pip install --no-cache-dir --prefix=/install -r requirements.txt
+
+# Stage 2: Production image
+FROM python:3.12-slim
+
+# HuggingFace Spaces requires UID 1000
+RUN useradd -m -u 1000 user
+
+WORKDIR /app
+
+# Copy installed packages from builder
+COPY --from=builder /install /usr/local
+
+# Install git (needed for repo analyzer feature)
+RUN apt-get update && \
+    apt-get install -y --no-install-recommends git && \
+    rm -rf /var/lib/apt/lists/*
+
+# Copy backend application code
+COPY --chown=user backend/app/ ./app/
+COPY --chown=user backend/migrations/ ./migrations/
+COPY --chown=user backend/apply_migration.py ./apply_migration.py
+
+# Create temp directory for repo cloning
+RUN mkdir -p /tmp/shortlist_repos && \
+    chown user:user /tmp/shortlist_repos && \
+    chmod 700 /tmp/shortlist_repos
+
+# Switch to non-root user
+USER user
+
+ENV PATH="/home/user/.local/bin:$PATH"
+
+# HuggingFace Spaces MUST listen on port 7860
+EXPOSE 7860
+
+# Run with uvicorn — single worker for HF free tier
+CMD ["uvicorn", "app.main:app", \
+     "--host", "0.0.0.0", \
+     "--port", "7860", \
+     "--workers", "2", \
+     "--timeout-keep-alive", "120"]

README.md

@@ -1,107 +1,33 @@
-# Shortlist
-
-An AI agent system that reverse-engineers what recruiters look for, then helps you build exactly that — tailored capstone projects, polished repos, and optimized portfolio materials, all calibrated to a specific job description.
-
+---
+title: Shortlist
+emoji: 🎯
+colorFrom: blue
+colorTo: purple
+sdk: docker
+app_port: 7860
+pinned: false
 ---
 
-## What It Does
-
-Paste a job description and Shortlist runs it through a pipeline of specialized AI agents:
-
-1. **JD Analysis** — Extracts skills, role level, domain context, and what the company actually cares about
-2. **Company Logic** — Applies behavioral modifiers based on company type (startup hustle vs. FAANG system design vs. consultancy breadth)
-3. **Capstone Generator** — Proposes 3 project ideas engineered to hit the skills the JD demands, each with resume bullets and a recruiter-match score
-4. **Repo Analyzer** — Scores any GitHub repo on structure, documentation, code quality, and how it reads to a non-technical recruiter
-5. **Scaffold Generator** — Outputs a production-ready repo skeleton (directory tree, configs, starter code) for any selected project
-6. **Portfolio Optimizer** — Generates README copy, resume bullets, a 60-second demo script, and a LinkedIn post for each project
-7. **Resume Fitness Scorer** — Compares your existing resume against the JD analysis and scores the match with specific improvement suggestions
+# Shortlist — AI-Powered Portfolio Architect API
 
-## Architecture
+Backend API for Shortlist — an AI agent system that reverse-engineers what recruiters look for, then helps you build exactly that.
 
-```
-                    ┌──────────────────┐
-                    │  Nginx / Caddy   │
-                    │  (TLS + Proxy)   │
-                    └────┬────────┬────┘
-                         │        │
-              ┌──────────▼──┐  ┌──▼──────────┐
-              │   Backend   │  │   Frontend   │
-              │  (Gunicorn  │  │  (Next.js    │
-              │   +Uvicorn) │  │   Standalone)│
-              │  Port 8000  │  │  Port 3000   │
-              └──────┬──────┘  └──────────────┘
-                     │
-          ┌──────────┼──────────┐
-          │          │          │
-    ┌─────▼─────┐ ┌──▼───┐ ┌───▼────┐
-    │ Supabase  │ │ Groq │ │ GitHub │
-    │ (DB+Auth) │ │ (LLM)│ │  API   │
-    └───────────┘ └──────┘ └────────┘
-```
+## Endpoints
 
-The backend is a FastAPI service running a LangGraph agent orchestrator. Each "intelligence layer" is an independent graph node — the orchestrator wires them together based on what the user requests. The frontend is a Next.js App Router dashboard with Supabase auth (Google OAuth + magic link).
+| Endpoint | Description |
+|---|---|
+| `GET /health` | Health check |
+| `GET /health/deep` | Deep health check (DB + LLM) |
+| `GET /docs` | Swagger UI |
+| `POST /api/v1/jd/analyze` | JD Analysis |
+| `POST /api/v1/capstone/generate` | Capstone Project Generator |
+| `POST /api/v1/repo/analyze` | GitHub Repo Analyzer |
+| `POST /api/v1/scaffold/generate` | Scaffold Generator |
+| `POST /api/v1/portfolio/optimize` | Portfolio Optimizer |
+| `POST /api/v1/fitness/score` | Resume Fitness Scorer |
 
 ## Tech Stack
 
-| Layer | Technology |
-|-------|------------|
-| Frontend | Next.js 16 (App Router), React 19, TypeScript 5, Tailwind CSS v4 |
-| Backend | FastAPI, Pydantic v2, Python 3.12 |
-| AI Orchestration | LangGraph, langchain-groq |
-| LLM | Groq (Llama 3.3 70B) |
-| Database + Auth | Supabase (PostgreSQL + Row Level Security + Auth) |
-| Deployment | Docker (multi-stage), Gunicorn + Uvicorn, GitHub Actions CI/CD |
-
-## Project Structure
-
-```
-Shortlist/
-├── backend/
-│   ├── app/
-│   │   ├── agents/
-│   │   │   ├── nodes/          # 7 LangGraph nodes (jd, company, capstone,
-│   │   │   │                   #   repo, scaffold, portfolio, fitness)
-│   │   │   ├── orchestrator.py # Graph builder + pipeline routing
-│   │   │   └── state.py        # Shared state schema
-│   │   ├── api/v1/             # 6 REST endpoint modules
-│   │   ├── llm/provider.py     # Provider-agnostic LLM factory
-│   │   ├── prompts/            # 7 system/user prompt templates
-│   │   ├── schemas/            # Pydantic request/response models
-│   │   ├── services/           # DB operations + GitHub analyzer
-│   │   ├── config.py           # Env-based settings (validated)
-│   │   ├── database.py         # Supabase async client
-│   │   ├── logging_config.py   # Structured JSON logging
-│   │   ├── main.py             # App factory + middleware stack
-│   │   ├── monitoring.py       # Health checks + Prometheus metrics
-│   │   └── security.py         # CORS, rate limiting, security headers
-│   ├── migrations/             # 4 SQL schema migrations
-│   ├── tests/                  # 171 pytest tests (10 modules)
-│   ├── Dockerfile
-│   ├── gunicorn.conf.py
-│   └── requirements.txt
-├── frontend/
-│   ├── src/
-│   │   ├── app/
-│   │   │   ├── page.tsx            # Landing page (WebGL + animations)
-│   │   │   └── dashboard/          # 8 authenticated routes
-│   │   │       ├── analyze/        # JD analysis form
-│   │   │       ├── results/[id]/   # Analysis results + capstones
-│   │   │       ├── repo/           # Repo analyzer + results
-│   │   │       ├── scaffold/       # Scaffold generator + viewer
-│   │   │       ├── portfolio/      # Portfolio optimizer output
-│   │   │       ├── fitness/        # Resume fitness scorer
-│   │   │       ├── projects/       # Saved projects overview
-│   │   │       └── profile/        # User profile + avatar
-│   │   ├── components/             # Auth, landing (WebGL), UI primitives
-│   │   ├── lib/                    # API client, Supabase client, utils
-│   │   └── middleware.ts           # Route protection
-│   ├── Dockerfile
-│   └── package.json
-├── .github/workflows/ci.yml       # 4-job CI/CD pipeline
-├── Makefile                        # Dev/test/lint shortcuts
-└── DEPLOY.md                       # Production deployment guide
-```
-
-## License
-
-MIT
+- **FastAPI** + Pydantic v2
+- **LangGraph** + langchain-groq (Llama 3.3 70B)
+- **Supabase** (PostgreSQL + Auth + RLS)