fix: single-token entrypoint scripts for containers (Render dockerCommand quoting)

Author: kohsheen1234

Dockerfile

@@ -8,8 +8,10 @@ COPY agentwatch ./agentwatch
 COPY dashboard ./dashboard
 COPY migrations ./migrations
 COPY alembic.ini ./
+COPY scripts ./scripts
 
-RUN pip install --upgrade pip && pip install ".[dashboard]"
+RUN pip install --upgrade pip && pip install ".[dashboard]" && chmod +x scripts/*.sh
 
-# Default command is the API; compose overrides the command per service.
-CMD ["agentwatch", "serve", "--host", "0.0.0.0", "--port", "8000"]
+# Default command is the API entrypoint (migrate + serve). Compose / Render override
+# with a single-token script path per service so no shell quoting is involved.
+CMD ["/app/scripts/render-api.sh"]

deploy/docker-compose.yml

@@ -18,10 +18,11 @@ services:
 
   api:
     build: ..
-    command: sh -c "alembic upgrade head && agentwatch serve --host 0.0.0.0 --port 8000"
+    command: ["/app/scripts/render-api.sh"]
     environment:
       AGENTWATCH_DATABASE_URL: postgresql+psycopg://agentwatch:agentwatch@db:5432/agentwatch
       AGENTWATCH_ARTIFACT_DIR: /data/artifacts
+      PORT: "8000"
     volumes:
       - artifacts:/data/artifacts
     depends_on:
@@ -30,9 +31,10 @@ services:
 
   dashboard:
     build: ..
-    command: streamlit run dashboard/app.py --server.port 8501 --server.address 0.0.0.0
+    command: ["/app/scripts/render-dashboard.sh"]
     environment:
       AGENTWATCH_API_URL: http://api:8000
+      PORT: "8501"
     depends_on:
       - api
 

render.yaml

@@ -11,7 +11,7 @@ services:
     dockerfilePath: ./Dockerfile
     dockerContext: .
     plan: free
-    dockerCommand: sh -c "alembic upgrade head && agentwatch serve --host 0.0.0.0 --port $PORT"
+    dockerCommand: /app/scripts/render-api.sh
     envVars:
       - key: AGENTWATCH_DATABASE_URL
         fromDatabase:
@@ -26,7 +26,7 @@ services:
     dockerfilePath: ./Dockerfile
     dockerContext: .
     plan: free
-    dockerCommand: sh -c "streamlit run dashboard/app.py --server.port $PORT --server.address 0.0.0.0"
+    dockerCommand: /app/scripts/render-dashboard.sh
     envVars:
       - key: AGENTWATCH_API_URL
         fromService:

scripts/render-api.sh

@@ -0,0 +1,5 @@
+#!/bin/sh
+# API entrypoint: apply migrations, then serve. Runs migrations idempotently on boot.
+set -e
+alembic upgrade head
+exec agentwatch serve --host 0.0.0.0 --port "${PORT:-8000}"

scripts/render-dashboard.sh

@@ -0,0 +1,7 @@
+#!/bin/sh
+# Dashboard entrypoint: run the Streamlit app.
+set -e
+exec streamlit run dashboard/app.py \
+  --server.port "${PORT:-8501}" \
+  --server.address 0.0.0.0 \
+  --server.headless true