CognitiveLoopKernel/Dockerfile at master · BillJr99/CognitiveLoopKernel · GitHub

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
FROM python:3.11-slim

# System deps: git (harness commits), curl/gnupg/ca-certificates (NodeSource setup).
RUN apt-get update && apt-get install -y --no-install-recommends \
        git curl ca-certificates gnupg \
    && rm -rf /var/lib/apt/lists/*

# Node.js LTS via NodeSource (needed for claude, codex, gemini, pi CLIs).
ARG NODE_MAJOR=22
RUN curl -fsSL https://deb.nodesource.com/gpgkey/nodesource-repo.gpg.key \
       | gpg --dearmor -o /usr/share/keyrings/nodesource.gpg \
    && echo "deb [signed-by=/usr/share/keyrings/nodesource.gpg] https://deb.nodesource.com/node_${NODE_MAJOR}.x nodistro main" \
       > /etc/apt/sources.list.d/nodesource.list \
    && apt-get update \
    && apt-get install -y --no-install-recommends nodejs \
    && rm -rf /var/lib/apt/lists/*

# Provider CLIs — installed globally so they're on PATH for all agents.
RUN npm install -g \
        @anthropic-ai/claude-code \
        @openai/codex \
        @google/gemini-cli \
        @mariozechner/pi-coding-agent

WORKDIR /app

# Install Python dependencies declared in pyproject.toml before copying
# sources so this layer is cached when only code changes.
COPY pyproject.toml ./
RUN mkdir -p clk_harness && touch clk_harness/__init__.py README.md \
 && pip install --no-cache-dir "." \
 && rm -rf clk_harness README.md

# Install REST API dependencies from pyproject.toml [api] extra.
# Using the extras directly (instead of a separate requirements-api.txt)
# keeps pyproject.toml as the single source of truth and avoids drift.
COPY clk_harness/ ./clk_harness/

# Build the React web UI bundle so the `clk web` dashboard is served from the
# image (Node is already installed above). Vite emits into
# clk_harness/webui_dist, which then ships with the package on install below.
# Best-effort: if the build fails the server still runs and shows a
# build-instructions page rather than breaking the image.
COPY webui/ ./webui/
RUN (npm --prefix webui ci && npm --prefix webui run build && rm -rf webui/node_modules) \
    || echo "[docker] web UI build skipped; 'clk web' will show the build-instructions page"

# README.md is referenced by pyproject metadata; ensure it exists for the build.
RUN [ -f README.md ] || printf '# clk-harness\n' > README.md
# The dependency-caching layer above installed clk_harness from an empty
# placeholder package (just a touched __init__.py). When the package version
# is unchanged, a stale Docker build cache can reuse that install step and let
# the empty stub survive into site-packages -- and `clk` then fails with
# "cannot import name '__version__' from 'clk_harness'". Force-reinstall the
# package itself (without touching the already-installed deps) so the real
# sources always overwrite the stub, then install the [api,telegram] extras.
RUN pip install --no-cache-dir --force-reinstall --no-deps "." \
 && pip install --no-cache-dir ".[api,telegram]"

COPY scripts/     ./scripts/
COPY kickoff.sh   ./
COPY .env.example ./

RUN chmod +x kickoff.sh \
             scripts/clk \
             scripts/install_local.sh \
             scripts/run_loop.sh \
             scripts/telegram_setup_wizard.sh 2>/dev/null || true

# kickoff.sh loads /app/.env at startup (provider, API keys, git identity, ...).
# Bind-mount your host file there to provide config from outside the image:
#   docker run -v ~/clk.env:/app/.env ...
# or pass the same file via Docker's --env-file flag (no mount needed):
#   docker run --env-file ~/clk.env ...
# An empty placeholder is created so the bind-mount target exists in the image;
# kickoff.sh treats an empty file the same as no file (it just falls through to
# prompts / -e overrides).
RUN touch /app/.env

# Global git identity used by the harness when committing inside kickoff dirs.
RUN git config --global user.name  "CLK Container" \
 && git config --global user.email "clk@local.invalid"

# Kickoffs are created under workspace/ — mount a volume here to keep them
# after the container exits, or bind-mount a host directory instead.
RUN mkdir -p workspace
VOLUME /app/workspace

# Workspaces for the REST API are stored under /workspaces by default.
# Mount a volume here to persist them across container restarts.
RUN mkdir -p /workspaces
VOLUME /workspaces

# ---------------------------------------------------------------------------
# Running modes
# ---------------------------------------------------------------------------
#
# Run CLI (default — interactive TUI dashboard):
#   docker run --rm -it -v clk-workspace:/app/workspace clk "My idea here"
#
# Run CLI non-interactively (CI/scripting):
#   docker run --rm -e CLK_NO_TUI=true ... clk "My idea here"
#
# Run REST API:
#   docker run --rm -p 8001:8001 \
#     -v clk-workspaces:/workspaces \
#     clk python -m clk_harness.api
#
# The API server respects:
#   CLK_API_PORT      — TCP port (default 8001)
#   CLK_WORKSPACES_DIR — workspace root (default /workspaces)
# ---------------------------------------------------------------------------

# Run with -it for the interactive TUI (the default). For non-interactive
# use (CI, scripting) pass -e CLK_NO_TUI=true and omit -it.
ENTRYPOINT ["./kickoff.sh"]