[30388f42] Infrastructure Hardening: Repaired CE/Connector DB schema, fixed frontend styling build, implemented robust echo shield in worker v2.1.1, and integrated Lead Engine into gateway.

heatmap-tool/backend/Dockerfile

@@ -1,19 +1,31 @@
-# Use an official Python runtime as a parent image
-FROM python:3.9-slim
+# --- STAGE 1: Builder ---
+FROM python:3.11-slim AS builder
 
-# Set the working directory in the container
 WORKDIR /app
 
-# Copy the requirements file into the container at /app
+# Install system dependencies needed for building
+RUN apt-get update && apt-get install -y --no-install-recommends \
+    build-essential \
+    && apt-get clean && rm -rf /var/lib/apt/lists/*
+
+# Install dependencies into a local directory
 COPY requirements.txt .
+RUN pip install --user --no-cache-dir -r requirements.txt
 
-# Install any needed packages specified in requirements.txt
-RUN pip install --no-cache-dir -r requirements.txt
+# --- STAGE 2: Runtime ---
+FROM python:3.11-slim
 
-# Copy the rest of the application's code from the host to the container at /app
+WORKDIR /app
+
+# Copy only installed packages from builder
+COPY --from=builder /root/.local /root/.local
+# Update PATH to include the user-installed packages
+ENV PATH=/root/.local/bin:$PATH
+
+# Copy application code
 COPY . .
 
-# Expose port 8000 to the outside world
+# Expose port 8000
 EXPOSE 8000
 
 # Command to run the application

heatmap-tool/frontend/Dockerfile

@@ -1,20 +1,27 @@
-# Use an official Node.js runtime as a parent image
-FROM node:20-alpine
+# --- STAGE 1: Build ---
+FROM node:20-alpine AS builder
 
-# Set the working directory in the container
 WORKDIR /app
 
-# Copy package.json and package-lock.json to the container
-COPY package.json package-lock.json ./
-
 # Install dependencies
+COPY package.json package-lock.json ./
 RUN npm install --legacy-peer-deps
 
-# Copy the rest of the application's code
+# Copy source and build
 COPY . .
+RUN npm run build
 
-# Expose the port the app runs on
-EXPOSE 5173
+# --- STAGE 2: Runtime ---
+FROM nginx:alpine
 
-# Command to run the development server
-CMD ["npm", "run", "dev"]
+# Copy built assets from builder stage
+COPY --from=builder /app/dist /usr/share/nginx/html
+
+# Copy custom nginx config for SPA routing
+COPY nginx.conf /etc/nginx/conf.d/default.conf
+
+# Expose port 80
+EXPOSE 80
+
+# Nginx starts automatically
+CMD ["nginx", "-g", "daemon off;"]

heatmap-tool/frontend/nginx.conf

@@ -0,0 +1,15 @@
+server {
+    listen 80;
+    server_name localhost;
+
+    location / {
+        root /usr/share/nginx/html;
+        index index.html index.htm;
+        try_files $uri $uri/ /index.html;
+    }
+
+    error_page 500 502 503 504 /50x.html;
+    location = /50x.html {
+        root /usr/share/nginx/html;
+    }
+}

heatmap-tool/frontend/src/vite-env.d.ts

@@ -0,0 +1,3 @@
+/// <reference types="vite/client" />
+
+declare module 'react-leaflet-heatmap-layer-v3';