FreightSense initial commit

Author: VedantAndhale

.dockerignore

@@ -0,0 +1,47 @@
+# --- Python ---
+__pycache__/
+*.py[cod]
+*.pyo
+*.pyd
+*.egg-info/
+.eggs/
+dist/
+build/
+
+# --- Virtual env ---
+.venv/
+venv/
+env/
+
+# --- Secrets / local config ---
+.env
+*.env
+
+# --- Dev / test ---
+scripts/
+*.db
+*.sqlite
+*.sqlite3
+
+# --- Large data files (benchmarks.json is KEPT — needed at startup) ---
+data/DataCoSupplyChainDataset.csv
+data/DescriptionDataCoSupplyChain.csv
+data/tokenized_access_logs.csv
+
+# --- Version control ---
+.git/
+.gitignore
+.gitattributes
+
+# --- Editor ---
+.vscode/
+.idea/
+*.swp
+*.swo
+
+# --- OS ---
+.DS_Store
+Thumbs.db
+
+# --- CI / docs ---
+*.md

.env.example

@@ -0,0 +1,3 @@
+GROQ_API_KEY=gsk_your_key_here
+GROQ_MODEL=llama-3.3-70b-versatile
+DATABASE_URL=shipment_audit.db

.github/workflows/deploy.yml

@@ -0,0 +1,77 @@
+name: Deploy to Cloud Run
+
+on:
+  push:
+    branches: [main, master]
+  workflow_dispatch:   # allow manual trigger from GitHub UI
+
+env:
+  PROJECT_ID: ${{ vars.GCP_PROJECT_ID }}
+  REGION: us-central1
+  SERVICE: shipment-ai
+  REPO: shipment-ai
+  IMAGE: app
+
+jobs:
+  deploy:
+    name: Build & Deploy
+    runs-on: ubuntu-latest
+    permissions:
+      contents: read
+      id-token: write   # required for Workload Identity Federation
+
+    steps:
+      # ── 1. Checkout ──────────────────────────────────────────────────────
+      - name: Checkout
+        uses: actions/checkout@v4
+
+      # ── 2. Authenticate to GCP via Workload Identity Federation ──────────
+      # No long-lived service account key needed — uses OIDC token.
+      # Set GCP_WORKLOAD_IDENTITY_PROVIDER and GCP_SERVICE_ACCOUNT in
+      # GitHub repo → Settings → Secrets and variables → Actions → Variables.
+      - name: Authenticate to Google Cloud
+        uses: google-github-actions/auth@v2
+        with:
+          workload_identity_provider: ${{ vars.GCP_WORKLOAD_IDENTITY_PROVIDER }}
+          service_account: ${{ vars.GCP_SERVICE_ACCOUNT }}
+
+      # ── 3. Set up Cloud SDK ───────────────────────────────────────────────
+      - name: Set up Cloud SDK
+        uses: google-github-actions/setup-gcloud@v2
+
+      # ── 4. Configure Docker auth for Artifact Registry ───────────────────
+      - name: Configure Docker for Artifact Registry
+        run: gcloud auth configure-docker ${{ env.REGION }}-docker.pkg.dev --quiet
+
+      # ── 5. Build and push container image ────────────────────────────────
+      - name: Build and push image
+        run: |
+          IMAGE_URI="${{ env.REGION }}-docker.pkg.dev/${{ env.PROJECT_ID }}/${{ env.REPO }}/${{ env.IMAGE }}"
+          docker build \
+            -t "${IMAGE_URI}:${{ github.sha }}" \
+            -t "${IMAGE_URI}:latest" \
+            .
+          docker push --all-tags "${IMAGE_URI}"
+
+      # ── 6. Deploy to Cloud Run ────────────────────────────────────────────
+      # Stamps the commit SHA into service.yaml before deploying so each
+      # rollout is pinned to an immutable image tag.
+      - name: Deploy to Cloud Run
+        run: |
+          IMAGE_URI="${{ env.REGION }}-docker.pkg.dev/${{ env.PROJECT_ID }}/${{ env.REPO }}/${{ env.IMAGE }}:${{ github.sha }}"
+          sed "s|:latest|:${{ github.sha }}|g" service.yaml \
+            | sed "s|YOUR_PROJECT_ID|${{ env.PROJECT_ID }}|g" \
+            > /tmp/service_deploy.yaml
+          gcloud run services replace /tmp/service_deploy.yaml \
+            --region ${{ env.REGION }} \
+            --project ${{ env.PROJECT_ID }}
+
+      # ── 7. Print live URL ─────────────────────────────────────────────────
+      - name: Get service URL
+        run: |
+          URL=$(gcloud run services describe ${{ env.SERVICE }} \
+            --region ${{ env.REGION }} \
+            --project ${{ env.PROJECT_ID }} \
+            --format='value(status.url)')
+          echo "Deployed to: $URL"
+          echo "url=$URL" >> $GITHUB_OUTPUT

.gitignore

@@ -0,0 +1,25 @@
+# Environment variables (never commit secrets)
+.env
+.env.*
+!.env.example
+
+# Large data files (too large for GitHub without LFS)
+data/DataCoSupplyChainDataset.csv
+data/tokenized_access_logs.csv
+
+# Python
+__pycache__/
+*.py[cod]
+*.egg-info/
+.venv/
+venv/
+dist/
+build/
+
+# IDE
+.vscode/
+.idea/
+
+# OS
+.DS_Store
+Thumbs.db

.python-version

@@ -0,0 +1 @@
+3.14

Dockerfile

@@ -0,0 +1,32 @@
+# ── Build stage ──────────────────────────────────────────────────────────────
+FROM python:3.12-slim AS builder
+
+WORKDIR /build
+
+# Install deps into an isolated prefix so we can copy them clean
+COPY requirements.txt .
+RUN pip install --upgrade pip --quiet \
+ && pip install --prefix=/install --quiet -r requirements.txt
+
+# ── Runtime stage ─────────────────────────────────────────────────────────────
+FROM python:3.12-slim
+
+WORKDIR /app
+
+# Copy installed packages from builder
+COPY --from=builder /install /usr/local
+
+# Copy application source (respects .dockerignore)
+COPY . .
+
+# Cloud Run injects PORT at runtime; default to 8080 for local docker run
+ENV PORT=8080
+
+# Non-root user for security
+RUN adduser --disabled-password --gecos "" appuser \
+ && chown -R appuser:appuser /app
+USER appuser
+
+EXPOSE 8080
+
+CMD ["sh", "-c", "uvicorn main:app --host 0.0.0.0 --port ${PORT}"]