Add Render deployment support with Lite Mode and static serving

.github/workflows/gemini-invoke.yml

@@ -39,6 +39,8 @@ jobs:
 
       - name: 'Run Gemini CLI'
         id: 'run_gemini'
+        if: |-
+          ${{ secrets.GEMINI_API_KEY != '' || secrets.GOOGLE_API_KEY != '' || vars.GCP_WIF_PROVIDER != '' }}
         uses: 'google-github-actions/run-gemini-cli@v0' # ratchet:exclude
         env:
           TITLE: '${{ github.event.pull_request.title || github.event.issue.title }}'

.github/workflows/gemini-review.yml

@@ -42,6 +42,8 @@ jobs:
         uses: 'actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8' # ratchet:actions/checkout@v5
 
       - name: 'Run Gemini pull request review'
+        if: |-
+          ${{ secrets.GEMINI_API_KEY != '' || secrets.GOOGLE_API_KEY != '' || vars.GCP_WIF_PROVIDER != '' }}
         uses: 'google-github-actions/run-gemini-cli@v0' # ratchet:exclude
         id: 'gemini_pr_review'
         env:

DEPLOY_RENDER.md

@@ -0,0 +1,51 @@
+# Deploying to Render (Free Tier)
+
+This guide explains how to deploy the Email Intelligence Platform to Render's Free Tier (512MB RAM, 0.1 CPU).
+
+## Optimized Architecture
+
+To fit within the free tier limits, this deployment uses:
+*   **Single Service**: The Python backend serves the built React frontend as static files.
+*   **Lite Mode**: Heavy AI libraries (PyTorch, Transformers, Scikit-learn) are **disabled** to save memory.
+*   **Ephemeral Storage**: Data is stored in local JSON files which **will be lost** on restart/redeploy.
+
+## Deployment Steps
+
+1.  **Create a New Web Service** on [Render Dashboard](https://dashboard.render.com/).
+2.  Connect your GitHub repository.
+3.  Select **"Manual Deployment"** (if prompted) or proceed to configuration.
+4.  Configure the service details:
+
+    *   **Name**: `email-intelligence` (or your choice)
+    *   **Region**: Any (e.g., Oregon)
+    *   **Branch**: `main` (or your working branch)
+    *   **Root Directory**: `.` (leave empty)
+    *   **Runtime**: **Python 3**
+    *   **Build Command**: `./setup_env.sh`
+    *   **Start Command**: `uvicorn src.backend.python_backend.main:app --host 0.0.0.0 --port $PORT`
+
+5.  **Environment Variables**:
+    Add the following environment variables:
+
+    | Key | Value | Description |
+    | :--- | :--- | :--- |
+    | `RENDER` | `true` | Activates "Lite Mode" and triggers frontend build. |
+    | `PYTHON_VERSION` | `3.11.0` | Ensures correct Python version. |
+    | `NODE_VERSION` | `20.0.0` | Ensures correct Node.js version for frontend build. |
+    | `PORT` | `10000` | (Render sets this automatically, but good to know). |
+
+6.  **Create Web Service**.
+
+## Verification
+
+Once deployed:
+*   Navigate to your Render URL (e.g., `https://email-intelligence.onrender.com`).
+*   The React frontend should load.
+*   The `/api/health` (if exists) or other API endpoints should work.
+*   **Note**: Local AI features will be disabled.
+
+## Troubleshooting
+
+*   **Build Failures**: Check the logs. Ensure `client/package.json` dependencies are compatible with Node 20.
+*   **Memory Issues**: If the app crashes with "Out of Memory", ensure `RENDER=true` is set.
+*   **Data Loss**: Remember that data is not persistent. For persistence, you would need to connect a managed PostgreSQL database (paid or external free tier).

fix_path_traversal.py

@@ -0,0 +1,51 @@
+import os
+
+file_path = 'src/main.py'
+
+with open(file_path, 'r') as f:
+    lines = f.readlines()
+
+new_logic = """        # Catch-all for SPA routing (excluding API and UI)
+        @app.get("/{full_path:path}")
+        async def catch_all(full_path: str):
+            if full_path.startswith("api") or full_path.startswith("ui"):
+                raise HTTPException(status_code=404, detail="Not found")
+
+            # Sanitize and validate path to prevent directory traversal
+            clean_path = os.path.normpath(full_path).lstrip('/')
+            file_path = os.path.join(static_dir, clean_path)
+
+            # Ensure file_path is within static_dir
+            if not os.path.commonpath([file_path, static_dir]) == static_dir:
+                 raise HTTPException(status_code=403, detail="Access denied")
+
+            # Check if file exists in static dir
+            if os.path.exists(file_path) and os.path.isfile(file_path):
+                 return FileResponse(file_path)
+
+            # Otherwise return index.html
+            return FileResponse(os.path.join(static_dir, "index.html"))
+"""
+
+# Find the catch_all function block to replace
+start_idx = -1
+end_idx = -1
+
+for i, line in enumerate(lines):
+    if '@app.get("/{full_path:path}")' in line:
+        start_idx = i
+    if start_idx != -1 and 'return FileResponse(os.path.join(static_dir, "index.html"))' in line:
+        end_idx = i
+        break
+
+if start_idx != -1 and end_idx != -1:
+    # Remove old block
+    del lines[start_idx:end_idx+1]
+    # Insert new block
+    lines.insert(start_idx, new_logic)
+
+    with open(file_path, 'w') as f:
+        f.writelines(lines)
+    print("Fixed path traversal in src/main.py")
+else:
+    print("Could not find catch_all block")