smoke: hello-world FastAPI on port 7860

Dockerfile

@@ -0,0 +1,11 @@
+FROM python:3.11-slim
+
+WORKDIR /app
+
+RUN pip install --no-cache-dir fastapi==0.115.0 uvicorn[standard]==0.32.0
+
+COPY main.py .
+
+EXPOSE 7860
+
+CMD ["uvicorn", "main:app", "--host", "0.0.0.0", "--port", "7860"]

README.md

@@ -1,10 +1,25 @@
 ---
-title: Secureagentrag Api
-emoji: 💻
-colorFrom: pink
-colorTo: gray
+title: SecureAgentRAG API (smoke)
+emoji: 🛡️
+colorFrom: blue
+colorTo: indigo
 sdk: docker
+app_port: 7860
 pinned: false
+short_description: Phase 1 smoke test for the SecureAgentRAG production launch
 ---
 
-Check out the configuration reference at https://huggingface.co/docs/hub/spaces-config-reference
+# SecureAgentRAG API — Phase 1 Smoke
+
+Hello-world FastAPI proving HF Docker SDK build + CPU Basic free tier + port 7860 reachability from Egypt.
+
+Real backend lands in Phase 2 — see [launch plan](https://github.com/moazmo/secureagentrag/blob/deploy/prod-launch/launch-plan/03-backend-byok.md).
+
+## Endpoints
+
+- `GET /` — service info + uptime
+- `GET /health` — health probe (used by the GitHub Actions keepalive cron)
+
+## Source
+
+[github.com/moazmo/secureagentrag](https://github.com/moazmo/secureagentrag) — branch `deploy/prod-launch`.

main.py

@@ -0,0 +1,42 @@
+"""Hello-world FastAPI for SecureAgentRAG HF Space smoke test.
+
+Verifies:
+- HF Docker SDK builds a custom image
+- Free CPU Basic (2 vCPU / 16 GB) accepts our deps
+- Port 7860 reachable from public internet (Egypt origin)
+
+This is a smoke test only. Real backend lands in Phase 2 (see
+launch-plan/03-backend-byok.md).
+"""
+
+from __future__ import annotations
+
+import os
+import time
+
+from fastapi import FastAPI
+
+app = FastAPI(title="SecureAgentRAG API — smoke", version="0.0.1-smoke")
+
+_BOOT_TIME = time.monotonic()
+
+
+@app.get("/")
+def root() -> dict[str, object]:
+    return {
+        "service": "secureagentrag-api",
+        "phase": "1-smoke",
+        "ok": True,
+        "uptime_seconds": round(time.monotonic() - _BOOT_TIME, 2),
+    }
+
+
+@app.get("/health")
+def health() -> dict[str, object]:
+    return {
+        "status": "ok",
+        "service": "secureagentrag-api",
+        "phase": "1-smoke",
+        "python": os.environ.get("PYTHON_VERSION", "unknown"),
+        "uptime_seconds": round(time.monotonic() - _BOOT_TIME, 2),
+    }