WS-4 Stage 6 (DevOps): Docker packaging + deployment report

[BSTester]

WS-4 Stage 6 (DevOps) — Docker Packaging + Deployment Report

Stage 6 Part 1 (Docker packaging): DONE ✅
Stage 6 Part 2 (full-chain verification): BLOCKED on backend BUG-006 fix

What's in this PR

Adds devops/ directory with Docker packaging artifacts for the full TradingAgents Web stack:

File	Purpose
devops/Dockerfile.backend	Multi-stage FastAPI/uvicorn image. Non-root (app user), healthcheck on /api/config, filters optional ta-lib (has pandas fallback).
devops/Dockerfile.frontend	Multi-stage Next.js static export → Nginx. Reuses existing nginx.conf.template + start.sh. Healthcheck on /.
devops/docker-compose.yml	backend + frontend services. SQLite default (no DB service needed). Scheduler runs in-process. Optional MySQL profile (commented).
devops/.env.example	Env template — OPENAI_API_KEY required, defaults match gpt-5.5 + oneinfinityai.
devops/deployment-report.md	Part 1 verification (10 endpoint checks pass), Part 2 status, known risks.
devops/rollback-plan.md	Rollback procedures + data backup.

Part 1 Verification (PASS ✅)

Verified on this host (raspberry pi + restricted network, DaoCloud mirror for Docker Hub):

$ docker compose ps
NAME               IMAGE             STATUS                        PORTS
tagents-backend    devops-backend    Up (healthy)                  0.0.0.0:8080->8000/tcp
tagents-frontend   devops-frontend   Up (healthy)                  0.0.0.0:8000->80/tcp

10 endpoint checks all pass:

• Frontend static page: 200 (6785 bytes, correct title)
• API proxy (/api/config through nginx): 200 JSON
• Backend direct (/api/config): 200
• Skills health (auth required): 401
• Old /intraday-trading: 308 → /
• Old /leaderboard: 308 → /
• Old /api/intraday/foo: 404
• Old /api/leaderboard: 404

New bug found: BUG-007 (P2, non-blocking)

Backend root route GET / returns 500 due to Starlette 1.x compatibility issue:

# web/backend/routes/page_routes.py:20
return templates.TemplateResponse("index.html", {"request": request})  # old API

Starlette 1.x changed TemplateResponse signature to TemplateResponse(request, name, context=None). The old call passes a dict as the second positional arg → TypeError: unhashable type: 'dict'.

Impact: Does NOT affect the deployed app — nginx serves the Next.js static export for /, and the backend's / route is vestigial. All real API endpoints work correctly.

Fix (for backend rework): templates.TemplateResponse(request, "index.html")

Part 2 — Blocked on BUG-006

Full-chain verification (conversation → analysis → report_ready) requires the backend BUG-006 fix (timeout + degradation for Skills data sources) to be merged first. Will run after that fix lands.

Dependencies

This PR is based on the merge of ws-4-m5-m6-backend-hardening (PR #4) ⊕ ws-4-m3-frontend (PR #5). Merge after PRs #1–#5. Only adds new files in devops/ — no conflicts with any prior PR.

Constraints

• ✅ No trading/ordering/leaderboard services packaged
• ✅ Analysis reports are the only product output
• ✅ gpt-5.5 default (deep + quick)
• ✅ AI exit: OneInfinity (https://api.oneinfinityai.com/v1)
• ✅ No secrets in images (API key via env var, .env gitignored)
• ✅ Multi-stage builds, non-root backend, healthchecks on both services