refactor: HF routing like RAG 1.2 — /ui, /widget, /admin, port 7860

Mount Gradio chat at /ui, serve widget and admin pages with CORS, redirect / to /ui, enable persistent storage in README, switch Space port to 7860.

Co-authored-by: Cursor <cursoragent@cursor.com>

Dockerfile

@@ -1,5 +1,6 @@
 # ============================================================
 # AuthorBot RAG API — Root Dockerfile for HuggingFace Spaces
+# Routing: /ui (Gradio) · /widget · /admin · /api/v1 · /health
 # ============================================================
 FROM python:3.11-slim AS builder
 
@@ -13,7 +14,6 @@ RUN apt-get update && apt-get install -y --no-install-recommends \
 
 WORKDIR /app
 
-# Copy and install Python dependencies from backend directory
 COPY backend/requirements.txt .
 RUN pip install --no-cache-dir --upgrade pip && \
     pip install --no-cache-dir -r requirements.txt
@@ -39,27 +39,23 @@ ENV UPLOAD_STORAGE_PATH=/data/uploads
 COPY --from=builder /usr/local/lib/python3.11/site-packages /usr/local/lib/python3.11/site-packages
 COPY --from=builder /usr/local/bin /usr/local/bin
 
-# Copy ONLY backend application code to /app
 COPY backend /app
 
 RUN mkdir -p /app/logs /data/chroma /data/uploads /data/redis && \
     printf 'dir /data/redis\nbind 127.0.0.1\nport 6379\ndaemonize yes\nlogfile /dev/null\n' > /app/redis-hf.conf
 
-# HuggingFace Spaces: run as non-root user (uid 1000)
 RUN adduser --disabled-password --gecos "" --uid 1000 appuser && \
     chown -R appuser:appuser /app /data
 USER appuser
 
-# Pre-download models at build time (avoids cold-start delays)
 RUN python -c "from sentence_transformers import CrossEncoder; CrossEncoder('cross-encoder/ms-marco-MiniLM-L-6-v2')" || true
 RUN python -c "from sentence_transformers import SentenceTransformer; SentenceTransformer('sentence-transformers/all-MiniLM-L6-v2')" || true
 
-# Verify the app imports cleanly before deployment
-RUN python -c "from app.main import app; print('App import OK:', app.title)"
+RUN python -c "from app.main import app; print('App import OK')"
 
-HEALTHCHECK --interval=30s --timeout=10s --start-period=120s --retries=5 \
-    CMD curl -f http://localhost:8080/health || exit 1
+HEALTHCHECK --interval=30s --timeout=10s --start-period=180s --retries=5 \
+    CMD curl -f http://localhost:7860/health || exit 1
 
-EXPOSE 8080
+EXPOSE 7860
 
-CMD ["sh", "-c", "mkdir -p /data/chroma /data/uploads /data/redis && redis-server /app/redis-hf.conf && sleep 1 && alembic upgrade head && uvicorn app.main:app --host 0.0.0.0 --port 8080 --workers 1 --loop uvloop --http httptools"]
+CMD ["sh", "-c", "mkdir -p /data/chroma /data/uploads /data/redis && redis-server /app/redis-hf.conf && sleep 1 && alembic upgrade head && uvicorn app.main:app --host 0.0.0.0 --port 7860 --workers 1 --loop uvloop --http httptools"]

README.md

@@ -5,7 +5,8 @@ colorFrom: indigo
 colorTo: purple
 sdk: docker
 pinned: false
-app_port: 8080
+app_port: 7860
+storage: true
 ---
 
 # AuthorBot RAG Chatbot SaaS

backend/app.py

@@ -0,0 +1,8 @@
+"""Hugging Face Space entry point."""
+
+from app.main import app  # noqa: F401
+
+if __name__ == "__main__":
+    import uvicorn
+
+    uvicorn.run("app.main:app", host="0.0.0.0", port=7860, workers=1)

backend/app/config.py

@@ -124,6 +124,10 @@ class Settings(BaseSettings):
         default=None,
         validation_alias=AliasChoices("SUBSCRIPTION_SECRET", "SUBSCRIPTION_TOKEN_SECRET"),
     )
+    DEMO_SUBSCRIPTION_TOKEN: str | None = Field(
+        default=None,
+        validation_alias=AliasChoices("DEMO_SUBSCRIPTION_TOKEN", "SUBSCRIPTION_TOKEN"),
+    )
     # Legacy HF secret name — TOTP secrets are stored per SuperAdmin in the DB.
     SUPERADMIN_TOTP_SECRET: str | None = Field(default=None, exclude=True)
 

backend/app/main.py

@@ -1,22 +1,27 @@
 """Author RAG Chatbot SaaS — FastAPI Application Factory.
 
-This module creates and configures the FastAPI application instance.
-All middleware, exception handlers, and routers are registered here.
+Routing follows the Hugging Face Space pattern:
+  /ui      — Gradio chat (main entry for visitors)
+  /widget  — Embeddable chat widget (CORS-friendly)
+  /admin   — Admin portal
+  /api/v1  — REST API
+  /health  — Health check
+  /        — Redirect to /ui
 """
 
 from contextlib import asynccontextmanager
-from typing import AsyncGenerator
-
 from pathlib import Path
+from typing import AsyncGenerator
 
+import gradio as gr
 import structlog
-from fastapi import FastAPI, Request
+from fastapi import FastAPI, HTTPException, Request
 from fastapi.middleware.cors import CORSMiddleware
-from fastapi.responses import HTMLResponse, JSONResponse
+from fastapi.responses import FileResponse, JSONResponse, RedirectResponse
 from fastapi.staticfiles import StaticFiles
 
-from app.config import get_settings
 from app.api.v1 import auth, books, documents, chatbot, analytics, settings, links, superadmin
+from app.config import get_settings
 from app.exceptions.base import AppException
 from app.exceptions.auth import AuthError, InvalidTokenError, ExpiredTokenError, AccountLockedError
 from app.exceptions.access import (
@@ -25,6 +30,7 @@ from app.exceptions.access import (
 )
 from app.middleware.logging_middleware import LoggingMiddleware
 from app.middleware.rate_limit_middleware import RateLimitMiddleware
+from app.ui_gradio import demo
 
 logger = structlog.get_logger(__name__)
 STATIC_DIR = Path(__file__).resolve().parent.parent / "static"
@@ -33,13 +39,18 @@ STATIC_DIR = Path(__file__).resolve().parent.parent / "static"
 @asynccontextmanager
 async def lifespan(app: FastAPI) -> AsyncGenerator[None, None]:
     """Handle application startup and shutdown lifecycle."""
-    logger.info("Starting AuthorBot API", env=get_settings().APP_ENV)
+    cfg = get_settings()
+    logger.info("Starting AuthorBot API", env=cfg.APP_ENV)
+    if Path("/data").exists():
+        logger.info("Persistent HF storage detected at /data")
+    else:
+        logger.warning("No /data mount — data may not persist across rebuilds")
     yield
     logger.info("AuthorBot API shutting down")
 
 
-def create_app() -> FastAPI:
-    """Create and configure the FastAPI application."""
+def create_fastapi_app() -> FastAPI:
+    """Create and configure the inner FastAPI application."""
     cfg = get_settings()
 
     app = FastAPI(
@@ -54,6 +65,7 @@ def create_app() -> FastAPI:
     _register_middleware(app, cfg)
     _register_exception_handlers(app)
     _register_routers(app)
+    _register_public_routes(app)
 
     return app
 
@@ -64,10 +76,10 @@ def _register_middleware(app: FastAPI, cfg) -> None:
     app.add_middleware(RateLimitMiddleware)
     app.add_middleware(
         CORSMiddleware,
-        allow_origins=cfg.ALLOWED_ORIGINS,
+        allow_origins=["*"],
         allow_credentials=True,
-        allow_methods=["GET", "POST", "PUT", "PATCH", "DELETE"],
-        allow_headers=["Authorization", "Content-Type", "X-Subscription-Token"],
+        allow_methods=["*"],
+        allow_headers=["*"],
     )
 
 
@@ -125,7 +137,7 @@ def _register_exception_handlers(app: FastAPI) -> None:
 
 
 def _register_routers(app: FastAPI) -> None:
-    """Register all API routers."""
+    """Register all API routers under /api/v1."""
     prefix = "/api/v1"
     app.include_router(auth.router, prefix=f"{prefix}/auth", tags=["Authentication"])
     app.include_router(books.router, prefix=f"{prefix}/books", tags=["Books"])
@@ -136,24 +148,53 @@ def _register_routers(app: FastAPI) -> None:
     app.include_router(links.router, prefix=f"{prefix}/links", tags=["Links"])
     app.include_router(superadmin.router, prefix=f"{prefix}/superadmin", tags=["Super Admin"])
 
-    @app.get("/", response_class=HTMLResponse, include_in_schema=False)
-    async def home() -> HTMLResponse:
-        """Landing page with links to the chat demo and API docs."""
-        return HTMLResponse((STATIC_DIR / "index.html").read_text(encoding="utf-8"))
 
-    @app.get("/demo", response_class=HTMLResponse, include_in_schema=False)
-    async def chat_demo() -> HTMLResponse:
-        """Embedded chat widget demo page."""
-        return HTMLResponse((STATIC_DIR / "demo.html").read_text(encoding="utf-8"))
+def _register_public_routes(app: FastAPI) -> None:
+    """Public-facing pages and static assets (registered before Gradio mount)."""
+
+    if STATIC_DIR.is_dir():
+        app.mount("/static", StaticFiles(directory=str(STATIC_DIR)), name="static")
+
+    @app.get("/", include_in_schema=False)
+    async def root() -> RedirectResponse:
+        """Space home → Gradio chat UI."""
+        return RedirectResponse(url="/ui")
+
+    @app.get("/demo", include_in_schema=False)
+    async def demo_redirect() -> RedirectResponse:
+        """Legacy demo URL → widget."""
+        return RedirectResponse(url="/widget")
+
+    @app.get("/widget", include_in_schema=False)
+    async def get_widget() -> FileResponse:
+        """Embeddable chat widget with CORS headers for external sites."""
+        path = STATIC_DIR / "addon.html"
+        if not path.is_file():
+            raise HTTPException(status_code=404, detail="Widget not found")
+        return FileResponse(
+            path,
+            headers={
+                "Access-Control-Allow-Origin": "*",
+                "Cache-Control": "no-cache, no-store, must-revalidate",
+            },
+        )
+
+    @app.get("/admin", include_in_schema=False)
+    async def get_admin() -> FileResponse:
+        """Author admin portal."""
+        path = STATIC_DIR / "admin.html"
+        if not path.is_file():
+            raise HTTPException(status_code=404, detail="Admin panel not found")
+        return FileResponse(path)
 
     @app.get("/health", tags=["Health"])
     async def health_check() -> dict:
-        """System health check — verifies DB, Redis, ChromaDB, and model status."""
+        """System health check — verifies DB, Redis, and ChromaDB."""
         from app.dependencies import check_health
         return await check_health()
 
-    if STATIC_DIR.is_dir():
-        app.mount("/static", StaticFiles(directory=str(STATIC_DIR)), name="static")
 
+fastapi_app = create_fastapi_app()
 
-app = create_app()
+# Mount Gradio at /ui — MUST be last (wraps the FastAPI app for HF Spaces)
+app = gr.mount_gradio_app(fastapi_app, demo, path="/ui")

backend/app/ui_gradio.py

@@ -0,0 +1,86 @@
+"""Gradio chat UI mounted at /ui (Hugging Face Spaces entry point)."""
+
+from __future__ import annotations
+
+import httpx
+import gradio as gr
+
+from app.config import get_settings
+
+settings = get_settings()
+API_BASE = "http://127.0.0.1:7860/api/v1"
+
+
+async def _ensure_session(client: httpx.AsyncClient, token: str, session_id: str | None) -> tuple[str, str]:
+    """Create a chat session if needed and return (session_id, welcome)."""
+    if session_id:
+        return session_id, ""
+    response = await client.post(
+        f"{API_BASE}/chatbot/session",
+        headers={"X-Subscription-Token": token},
+    )
+    response.raise_for_status()
+    data = response.json()
+    return data["session_id"], data.get("welcome_message", "")
+
+
+async def chat_fn(message: str, history: list, token: str, session_id: str | None):
+    """Send a message to the AuthorBot RAG pipeline."""
+    if not message or not message.strip():
+        return "", history, session_id
+
+    token = (token or settings.DEMO_SUBSCRIPTION_TOKEN or "").strip()
+    if not token:
+        history = history + [
+            {"role": "user", "content": message},
+            {"role": "assistant", "content": "Add DEMO_SUBSCRIPTION_TOKEN in Space secrets, or paste your subscription token above."},
+        ]
+        return "", history, session_id
+
+    try:
+        async with httpx.AsyncClient(timeout=120.0) as client:
+            session_id, welcome = await _ensure_session(client, token, session_id)
+            if welcome and not history:
+                history = history + [{"role": "assistant", "content": welcome}]
+
+            response = await client.post(
+                f"{API_BASE}/chatbot/chat",
+                headers={"X-Subscription-Token": token},
+                json={"session_id": session_id, "message": message.strip()},
+            )
+            response.raise_for_status()
+            reply = response.json().get("text", "No response.")
+    except Exception as exc:
+        reply = f"Sorry, something went wrong: {exc}"
+
+    history = history + [
+        {"role": "user", "content": message},
+        {"role": "assistant", "content": reply},
+    ]
+    return "", history, session_id
+
+
+with gr.Blocks(title="AuthorBot") as demo:
+    gr.Markdown("# AuthorBot — AI Book Advisor")
+    gr.Markdown("Chat with your book-trained assistant. Set your subscription token once below.")
+
+    token_box = gr.Textbox(
+        label="Subscription token",
+        type="password",
+        placeholder="Paste token from SuperAdmin grant…",
+        value=settings.DEMO_SUBSCRIPTION_TOKEN or "",
+    )
+    chatbot = gr.Chatbot(height=420, show_label=False)
+    msg = gr.Textbox(placeholder="Ask about a book…", show_label=False, scale=9)
+    send = gr.Button("Send", variant="primary", scale=1)
+    session_state = gr.State(value=None)
+
+    send.click(chat_fn, [msg, chatbot, token_box, session_state], [msg, chatbot, session_state])
+    msg.submit(chat_fn, [msg, chatbot, token_box, session_state], [msg, chatbot, session_state])
+
+    gr.Markdown(
+        "**Links:** [Widget](/widget) · [Admin](/admin) · [Health](/health) · [API docs](/docs)"
+    )
+
+if __name__ == "__main__":
+    demo.launch(server_name="0.0.0.0", server_port=7860)

backend/requirements.txt

@@ -34,6 +34,9 @@ tiktoken==0.7.0
 chromadb==0.5.0
 numpy==1.26.4                  # chromadb 0.5.x incompatible with NumPy 2.x
 
+# ── Hugging Face UI ───────────────────────────────────────
+gradio==5.9.1
+
 # ── Free Local ML Models ──────────────────────────────────
 sentence-transformers==3.0.1   # MiniLM intent + book confidence
 torch==2.3.0                    # Required by sentence-transformers

backend/static/addon.html

@@ -0,0 +1,40 @@
+<!DOCTYPE html>
+<html lang="en">
+<head>
+  <meta charset="UTF-8">
+  <meta name="viewport" content="width=device-width, initial-scale=1.0">
+  <title>AuthorBot Widget</title>
+  <style>
+    body {
+      margin: 0; min-height: 100vh; font-family: -apple-system, BlinkMacSystemFont, 'Segoe UI', sans-serif;
+      background: linear-gradient(135deg, #0d0f1a, #13161f); color: #94a3b8;
+      display: flex; align-items: center; justify-content: center; padding: 24px;
+    }
+    .card { max-width: 520px; text-align: center; }
+    h1 { color: #e2e8f0; margin-bottom: 8px; }
+    p { line-height: 1.6; }
+    .warn { color: #fcd34d; margin-top: 16px; font-size: 14px; }
+    code { background: rgba(255,255,255,0.08); padding: 2px 6px; border-radius: 4px; }
+  </style>
+</head>
+<body>
+  <div class="card">
+    <h1>AuthorBot Widget</h1>
+    <p>Chat bubble is in the bottom-right corner. Use <code>?token=YOUR_TOKEN</code> in the URL if needed.</p>
+    <p id="warn" class="warn" style="display:none">Missing token — add <code>?token=...</code> to the URL.</p>
+  </div>
+  <script>
+    const params = new URLSearchParams(window.location.search);
+    const token = params.get('token') || '';
+    if (!token) document.getElementById('warn').style.display = 'block';
+    window.AuthorBotConfig = {
+      token: token,
+      theme: params.get('theme') || 'midnight',
+      position: params.get('position') || 'bottom-right',
+      autoOpenDelay: Number(params.get('autoOpen') || 1),
+      apiBase: window.location.origin + '/api/v1',
+    };
+  </script>
+  <script src="/static/widget.js"></script>
+</body>
+</html>

backend/static/admin.html

@@ -0,0 +1,125 @@
+<!DOCTYPE html>
+<html lang="en">
+<head>
+  <meta charset="UTF-8">
+  <meta name="viewport" content="width=device-width, initial-scale=1.0">
+  <title>AuthorBot Admin</title>
+  <style>
+    * { box-sizing: border-box; margin: 0; padding: 0; }
+    body {
+      font-family: -apple-system, BlinkMacSystemFont, 'Segoe UI', sans-serif;
+      background: #0d0f1a; color: #e2e8f0; min-height: 100vh; padding: 32px 20px;
+    }
+    .wrap { max-width: 720px; margin: 0 auto; }
+    h1 { font-size: 1.75rem; margin-bottom: 8px; }
+    .sub { color: #94a3b8; margin-bottom: 28px; }
+    .panel {
+      background: #13161f; border: 1px solid rgba(255,255,255,0.08);
+      border-radius: 16px; padding: 24px; margin-bottom: 20px;
+    }
+    label { display: block; font-size: 13px; color: #94a3b8; margin-bottom: 6px; }
+    input {
+      width: 100%; padding: 10px 12px; border-radius: 8px; border: 1px solid rgba(255,255,255,0.12);
+      background: #0d0f1a; color: #e2e8f0; margin-bottom: 12px;
+    }
+    button, a.btn {
+      display: inline-block; padding: 10px 18px; border-radius: 8px; border: none;
+      background: #6366f1; color: white; font-weight: 600; cursor: pointer; text-decoration: none;
+    }
+    button:hover, a.btn:hover { background: #4f46e5; }
+    .links { display: flex; flex-wrap: wrap; gap: 10px; margin-top: 16px; }
+    .links a { color: #a5b4fc; text-decoration: none; font-size: 14px; }
+    .msg { margin-top: 12px; font-size: 14px; color: #4ade80; }
+    .err { color: #f87171; }
+    #dashboard { display: none; }
+  </style>
+</head>
+<body>
+  <div class="wrap">
+    <h1>AuthorBot Admin</h1>
+    <p class="sub">Manage books, uploads, and settings via the API.</p>
+
+    <div class="panel" id="login-panel">
+      <h2 style="margin-bottom:16px;font-size:1.1rem">Sign in</h2>
+      <label>Email</label>
+      <input id="email" type="email" placeholder="you@example.com">
+      <label>Password</label>
+      <input id="password" type="password" placeholder="Password">
+      <button type="button" id="login-btn">Login</button>
+      <p id="login-msg"></p>
+      <p style="margin-top:12px;font-size:13px;color:#64748b">
+        No account? Register via <a href="/docs#/Authentication/register_api_v1_auth_register_post" style="color:#a5b4fc">API docs</a>.
+      </p>
+    </div>
+
+    <div class="panel" id="dashboard">
+      <p class="msg" id="welcome"></p>
+      <div class="links">
+        <a href="/ui">Open chat UI</a>
+        <a href="/widget">Open widget</a>
+        <a href="/docs">API docs</a>
+        <a href="/health">Health</a>
+      </div>
+      <div class="links" style="margin-top:20px">
+        <a href="#" id="books-link">List books (JSON)</a>
+        <a href="#" id="logout-link">Logout</a>
+      </div>
+      <pre id="output" style="margin-top:16px;background:#0d0f1a;padding:12px;border-radius:8px;overflow:auto;font-size:12px;display:none"></pre>
+    </div>
+  </div>
+
+  <script>
+    const API = window.location.origin + '/api/v1';
+    const token = localStorage.getItem('access_token');
+
+    function showDashboard(email) {
+      document.getElementById('login-panel').style.display = 'none';
+      document.getElementById('dashboard').style.display = 'block';
+      document.getElementById('welcome').textContent = 'Signed in as ' + email;
+    }
+
+    if (token) showDashboard(localStorage.getItem('user_email') || 'author');
+
+    document.getElementById('login-btn').onclick = async () => {
+      const msg = document.getElementById('login-msg');
+      msg.textContent = '';
+      msg.className = '';
+      try {
+        const res = await fetch(API + '/auth/login', {
+          method: 'POST',
+          headers: { 'Content-Type': 'application/json' },
+          body: JSON.stringify({
+            email: document.getElementById('email').value,
+            password: document.getElementById('password').value,
+          }),
+        });
+        const data = await res.json();
+        if (!res.ok) throw new Error(data.detail || 'Login failed');
+        localStorage.setItem('access_token', data.access_token);
+        localStorage.setItem('refresh_token', data.refresh_token);
+        localStorage.setItem('user_email', document.getElementById('email').value);
+        showDashboard(document.getElementById('email').value);
+      } catch (e) {
+        msg.textContent = e.message;
+        msg.className = 'err';
+      }
+    };
+
+    document.getElementById('books-link').onclick = async (e) => {
+      e.preventDefault();
+      const out = document.getElementById('output');
+      out.style.display = 'block';
+      const res = await fetch(API + '/books/', {
+        headers: { Authorization: 'Bearer ' + localStorage.getItem('access_token') },
+      });
+      out.textContent = JSON.stringify(await res.json(), null, 2);
+    };
+
+    document.getElementById('logout-link').onclick = (e) => {
+      e.preventDefault();
+      localStorage.clear();
+      location.reload();
+    };
+  </script>
+</body>
+</html>

backend/static/demo.html

@@ -1,66 +0,0 @@
-<!DOCTYPE html>
-<html lang="en">
-<head>
-<meta charset="UTF-8">
-<meta name="viewport" content="width=device-width, initial-scale=1.0">
-<title>AuthorBot Chat Demo</title>
-<style>
-  * { margin: 0; padding: 0; box-sizing: border-box; }
-  body {
-    font-family: -apple-system, 'Inter', sans-serif;
-    background: linear-gradient(135deg, #0d0f1a 0%, #13161f 100%);
-    min-height: 100vh; color: #e2e8f0;
-    display: flex; flex-direction: column; align-items: center; justify-content: center;
-    padding: 24px;
-  }
-  .hero { text-align: center; max-width: 560px; }
-  h1 { font-size: 2.5rem; font-weight: 900; margin-bottom: 14px;
-    background: linear-gradient(135deg, #6366f1, #a78bfa); -webkit-background-clip: text; -webkit-text-fill-color: transparent; }
-  p  { color: #94a3b8; font-size: 1.125rem; line-height: 1.7; margin-bottom: 24px; }
-  .warn {
-    background: rgba(251, 191, 36, 0.12); border: 1px solid rgba(251, 191, 36, 0.35);
-    color: #fcd34d; padding: 12px 16px; border-radius: 12px; font-size: 14px; margin-bottom: 24px;
-  }
-  .controls { display: flex; gap: 10px; justify-content: center; flex-wrap: wrap; margin-bottom: 32px; }
-  .btn {
-    padding: 10px 22px; border-radius: 24px; border: 1px solid rgba(255,255,255,0.12);
-    background: rgba(255,255,255,0.06); color: #e2e8f0; cursor: pointer; font-size: 14px;
-    font-weight: 600; font-family: inherit; text-decoration: none;
-  }
-  .btn:hover { background: rgba(99,102,241,0.25); border-color: #6366f1; }
-  code { background: rgba(255,255,255,0.08); padding: 2px 6px; border-radius: 4px; font-size: 13px; }
-</style>
-</head>
-<body>
-<div class="hero">
-  <div style="font-size:3rem;margin-bottom:16px">✨</div>
-  <h1>AuthorBot Chat</h1>
-  <p id="intro">Click the chat bubble in the bottom-right corner to talk to the bot.</p>
-  <div id="token-warn" class="warn" style="display:none">
-    Add your subscription token to the URL:<br>
-    <code>/demo?token=YOUR_SUBSCRIPTION_TOKEN</code>
-  </div>
-  <div class="controls">
-    <button class="btn" onclick="AuthorBot.open()">Open Chat</button>
-    <button class="btn" onclick="AuthorBot.close()">Close Chat</button>
-    <a class="btn" href="/">← Back home</a>
-  </div>
-</div>
-
-<script>
-  const params = new URLSearchParams(window.location.search);
-  const token = params.get('token') || '';
-  if (!token) {
-    document.getElementById('token-warn').style.display = 'block';
-  }
-  window.AuthorBotConfig = {
-    token: token,
-    theme: params.get('theme') || 'midnight',
-    position: params.get('position') || 'bottom-right',
-    autoOpenDelay: Number(params.get('autoOpen') || 2),
-    apiBase: window.location.origin + '/api/v1',
-  };
-</script>
-<script src="/static/widget.js"></script>
-</body>
-</html>

backend/static/index.html

@@ -1,70 +0,0 @@
-<!DOCTYPE html>
-<html lang="en">
-<head>
-<meta charset="UTF-8">
-<meta name="viewport" content="width=device-width, initial-scale=1.0">
-<title>AuthorBot RAG</title>
-<style>
-  * { box-sizing: border-box; margin: 0; padding: 0; }
-  body {
-    font-family: -apple-system, BlinkMacSystemFont, 'Segoe UI', sans-serif;
-    background: #0d0f1a; color: #e2e8f0; min-height: 100vh;
-    display: flex; align-items: center; justify-content: center; padding: 24px;
-  }
-  .card {
-    max-width: 640px; width: 100%;
-    background: #13161f; border: 1px solid rgba(255,255,255,0.08);
-    border-radius: 20px; padding: 40px;
-    box-shadow: 0 24px 80px rgba(0,0,0,0.45);
-  }
-  h1 {
-    font-size: 2rem; margin-bottom: 8px;
-    background: linear-gradient(135deg, #6366f1, #a78bfa);
-    -webkit-background-clip: text; -webkit-text-fill-color: transparent;
-  }
-  .sub { color: #94a3b8; margin-bottom: 28px; line-height: 1.6; }
-  .links { display: flex; flex-direction: column; gap: 12px; }
-  a.link {
-    display: flex; align-items: center; justify-content: space-between;
-    padding: 14px 18px; border-radius: 12px;
-    background: rgba(255,255,255,0.04); border: 1px solid rgba(255,255,255,0.08);
-    color: #e2e8f0; text-decoration: none; transition: border-color 0.2s, background 0.2s;
-  }
-  a.link:hover { border-color: #6366f1; background: rgba(99,102,241,0.12); }
-  a.link strong { font-size: 15px; }
-  a.link span { color: #64748b; font-size: 13px; }
-  .badge {
-    display: inline-block; margin-top: 24px; padding: 6px 12px;
-    border-radius: 999px; font-size: 12px; font-weight: 600;
-    background: rgba(34,197,94,0.15); color: #4ade80; border: 1px solid rgba(34,197,94,0.3);
-  }
-  .note { margin-top: 20px; font-size: 13px; color: #64748b; line-height: 1.5; }
-  code { background: rgba(255,255,255,0.06); padding: 2px 6px; border-radius: 4px; }
-</style>
-</head>
-<body>
-  <div class="card">
-    <h1>AuthorBot RAG</h1>
-    <p class="sub">Your AI book advisor API is running on Hugging Face Spaces.</p>
-    <div class="links">
-      <a class="link" href="/demo">
-        <strong>💬 Try the chatbot</strong>
-        <span>Open demo →</span>
-      </a>
-      <a class="link" href="/health">
-        <strong>❤️ Health check</strong>
-        <span>API status →</span>
-      </a>
-      <a class="link" href="/docs">
-        <strong>📖 API docs</strong>
-        <span>Swagger UI →</span>
-      </a>
-    </div>
-    <div class="badge">● Online</div>
-    <p class="note">
-      To use the chatbot, open <code>/demo?token=YOUR_SUBSCRIPTION_TOKEN</code>.<br>
-      Register via <code>POST /api/v1/auth/register</code> in the API docs, then grant a subscription as SuperAdmin.
-    </p>
-  </div>
-</body>
-</html>