Wire slicks into sandbox via uv and bump default model to MiniMax-M3

Sandbox slicks wiring (matches the slicks v0.3.0 TimescaleDB backend on
the timescaledb-migration branch that was merged to main):

- server/installer/sandbox/Dockerfile.sandbox: install uv, then use it
  for both requirements-docker.txt and the editable slicks install from
  /slicks_src (a docker compose additional_context pointing at the
  sibling slicks checkout). uv keeps the image layer smaller than pip
  and the install deterministic. Added a build-time smoke test that
  imports slicks to catch future regressions early.

- server/installer/docker-compose.yml:
  * sandbox service: pass slicks source as a build-time additional_context
    and bind-mount the same path at runtime so live source edits are
    picked up on the next container recreate without an image rebuild
    (controlled by SLICKS_HOST_PATH env var, default points at
    /home/ubuntu/projects/slicks).
  * sandbox service: export POSTGRES_DSN, TIMESCALE_TABLE,
    TIMESCALE_SEASON, and POSTGRES_TABLE so slicks auto-connects on
    import. The published PyPI slicks (0.2.3) is the InfluxDB backend
    and would not be importable as TimescaleDB-aware code; install from
    local source instead.

- server/installer/sandbox/requirements-docker.txt: drop the
  'slicks>=0.2.0' PyPI pin. Slicks is now installed editable from the
  local source above; the pin was pulling the InfluxDB-only release.

- server/installer/sandbox/requirements.txt: add psycopg2-binary
  (slicks depends on it; listing explicitly so the layer order is
  stable across slicks extras changes).

Code-generator Dockerfile fix:

- server/installer/sandbox/Dockerfile: the previous version only COPY'd
  prompt-guide.txt.example, so the active (gitignored) prompt-guide.txt
  was silently being ignored at every build. Switched to COPY
  prompt-guide.txt* ./ (with the existing fallback to copy the example
  when the active file is missing). This restores the team's
  customization workflow where the active prompt-guide lives in the
  build context and gets shipped to the container.

Model bump:

- server/installer/.env.example: ANTHROPIC_MODEL default MiniMax-M2.7
  -> MiniMax-M3.
- server/installer/sandbox/code_generator.py: same bump in the
  os.getenv default so a missing env var falls back to M3.

Tested end-to-end: code-generator /api/generate-code returns
result.status=success with a PNG, slicks.fetch_telemetry() returns
407k rows from a real TimescaleDB window, and the slackbot -> code-gen
-> sandbox chain still works.

Author: wfr-data-acquisition

server/installer/.env.example

@@ -95,7 +95,7 @@ ALLOWED_ORIGINS=http://localhost:3000,http://localhost:5173
 # ------------------------------------------------------------
 ANTHROPIC_API_KEY=your-minimax-api-key-here
 ANTHROPIC_BASE_URL=https://api.minimaxi.com/anthropic
-ANTHROPIC_MODEL=MiniMax-M2.7
+ANTHROPIC_MODEL=MiniMax-M3
 
 # Maximum number of retries when generated code fails (default: 2)
 MAX_RETRIES=2

server/installer/docker-compose.yml

@@ -261,15 +261,31 @@ services:
     build:
       context: ./sandbox
       dockerfile: Dockerfile.sandbox
+      # slicks lives outside the build context (sibling repo at
+      # /home/ubuntu/projects/slicks), so we pass it in as an additional
+      # build context. The Dockerfile uses `COPY --from=slicks ...` to
+      # pull files from it. Override SLICKS_HOST_PATH to relocate.
+      additional_contexts:
+        - slicks=${SLICKS_HOST_PATH:-/home/ubuntu/projects/slicks}
     container_name: sandbox
     restart: unless-stopped
     environment:
       SANDBOX_PORT: 8080
       SANDBOX_TIMEOUT: 120
       SANDBOX_MAX_FILE_MB: 20
       SANDBOX_MAX_FILES: 20
-      # TimescaleDB connection for user scripts (follow-up: add psycopg2 boilerplate)
+      # TimescaleDB connection for user scripts (consumed by `slicks`).
+      # slicks v0.3.0 reads TIMESCALE_TABLE (with TIMESCALE_SEASON fallback);
+      # we also keep POSTGRES_TABLE for backward compat with older code paths.
       POSTGRES_DSN: "${POSTGRES_DSN:-postgresql://wfr:wfr_password@timescaledb:5432/wfr}"
+      TIMESCALE_TABLE: "${TIMESCALE_TABLE:-${POSTGRES_TABLE:-wfr26}}"
+      TIMESCALE_SEASON: "${TIMESCALE_SEASON:-${POSTGRES_TABLE:-wfr26}}"
+      POSTGRES_TABLE: "${POSTGRES_TABLE:-wfr26}"
+    volumes:
+      # slicks source (TimescaleDB-migration branch). Editable-installed at
+      # image build time; the bind mount below lets live source edits show
+      # up on the next container recreate without an image rebuild.
+      - ${SLICKS_HOST_PATH:-/home/ubuntu/projects/slicks}:/slicks_src:rw
     depends_on:
       timescaledb:
         condition: service_healthy
@@ -314,7 +330,7 @@ services:
     environment:
       ANTHROPIC_API_KEY: "${ANTHROPIC_API_KEY}"
       ANTHROPIC_BASE_URL: "${ANTHROPIC_BASE_URL:-https://api.minimaxi.com/anthropic}"
-      ANTHROPIC_MODEL: "${ANTHROPIC_MODEL:-MiniMax-M2.7}"
+      ANTHROPIC_MODEL: "${ANTHROPIC_MODEL:-MiniMax-M3}"
       SANDBOX_URL: "http://sandbox:8080"
       MAX_RETRIES: "${MAX_RETRIES:-2}"
       CODE_GEN_PORT: 3030

server/installer/sandbox/Dockerfile

@@ -12,8 +12,11 @@ RUN python -c "from langchain_community.embeddings import FastEmbedEmbeddings; F
 # Copy application code
 COPY code_generator.py .
 COPY stats_report.py .
-COPY prompt-guide.txt.example ./
-# prompt-guide.txt is optional (local customization); fall back to example if absent
+COPY anomaly_scan.py .
+# Use the wildcard so an existing prompt-guide.txt is preferred; otherwise
+# fall back to .example. The previous version only copied .example, which
+# silently ignored the active prompt-guide.txt customization.
+COPY prompt-guide.txt* ./
 RUN if [ ! -f prompt-guide.txt ]; then cp prompt-guide.txt.example prompt-guide.txt; fi
 
 # Create directories for generated code, ChromaDB, and cache

server/installer/sandbox/Dockerfile.sandbox

@@ -1,3 +1,4 @@
+# syntax=docker/dockerfile:1
 FROM python:3.11-slim
 
 ENV PYTHONDONTWRITEBYTECODE=1 \
@@ -29,10 +30,24 @@ RUN apt-get update && apt-get install -y --no-install-recommends \
         fonts-liberation \
     && rm -rf /var/lib/apt/lists/*
 
+# Install uv (replaces pip for dependency management)
+RUN pip install --no-cache-dir uv
+
+# Install runtime deps via uv. slicks itself is installed editable below.
 COPY requirements-docker.txt /tmp/requirements-docker.txt
-RUN pip install --upgrade pip \
-    && pip install --no-cache-dir -r /tmp/requirements-docker.txt \
-    && rm -rf /root/.cache/pip
+RUN uv pip install --system --no-cache -r /tmp/requirements-docker.txt \
+    && rm -rf /root/.cache/uv
+
+# Install slicks editable. The `slicks` build context is passed in by
+# docker-compose.yml's `additional_contexts:` (lives outside this repo's
+# build context). At runtime, the docker-compose `volumes:` entry
+# bind-mounts the same host path over /slicks_src so live source edits
+# show up on the next container recreate (no image rebuild needed for
+# code-only changes; pyproject changes still need a rebuild).
+COPY --from=slicks pyproject.toml /slicks_src/pyproject.toml
+COPY --from=slicks README.md /slicks_src/README.md
+COPY --from=slicks src /slicks_src/src
+RUN uv pip install --system --no-cache -e /slicks_src
 
 # Tell Kaleido where Chromium lives
 ENV CHROME_PATH=/usr/bin/chromium
@@ -42,10 +57,11 @@ RUN python3 - <<EOF
 import plotly.express as px
 fig = px.line(x=[1,2,3], y=[1,4,9])
 fig.write_image("test.png")
-print("PNG export OK")
+import slicks
+print("slicks OK from", slicks.__file__)
 EOF
 
-COPY . /app
+COPY . /app/
 
 EXPOSE 8080
 CMD ["python3", "sandbox_server.py"]

server/installer/sandbox/code_generator.py

@@ -32,7 +32,7 @@
 # ── Config ─────────────────────────────────────────────────────────────────────
 ANTHROPIC_API_KEY = os.environ["ANTHROPIC_API_KEY"]
 ANTHROPIC_BASE_URL = os.getenv("ANTHROPIC_BASE_URL", "https://api.minimaxi.com/anthropic")
-ANTHROPIC_MODEL = os.getenv("ANTHROPIC_MODEL", "MiniMax-M2.7")
+ANTHROPIC_MODEL = os.getenv("ANTHROPIC_MODEL", "MiniMax-M3")
 SANDBOX_URL = os.getenv("SANDBOX_URL", "http://sandbox:8080")
 MAX_RETRIES = int(os.getenv("MAX_RETRIES", "2"))
 DATA_DIR = Path(os.getenv("DATA_DIR", "/app/data"))

server/installer/sandbox/requirements-docker.txt

@@ -1,10 +1,13 @@
 # Docker container requirements for sandbox execution environment
 # These are the dependencies needed inside the Docker container
+#
+# NOTE: `slicks` is NOT pinned here — it is installed editable from
+# /slicks (a host bind mount) in Dockerfile.sandbox so source edits
+# land in the running container without a pip rebuild. The published
+# 0.2.x line on PyPI is the InfluxDB backend, which is not what we want.
 
-# WFR's telemetry analysis stack (pandas, matplotlib)
-slicks>=0.2.0
-
-# SQL access for TimescaleDB (explicitly listed — slicks dep is indirect)
+# SQL access for TimescaleDB (slicks depends on these; listing explicitly
+# in case slicks changes its extras and to keep the layer order stable)
 sqlalchemy
 psycopg2-binary
 

server/installer/sandbox/requirements.txt

@@ -11,6 +11,7 @@ chromadb
 fastembed
 diskcache
 requests
+psycopg2-binary
 duckdb
 matplotlib
 pandas