@cyanautomation/kaseki-agent 1.4.1

package/dist/utils/webhook-event-builder.js

@@ -0,0 +1,77 @@
+import { WebhookEventType } from '../kaseki-api-types.js';
+/**
+ * Factory functions for creating webhook event payloads.
+ * Consolidates webhook event creation logic across job-scheduler.ts.
+ */
+/**
+ * Create a JOB_SUBMITTED event payload.
+ */
+export function createJobSubmittedEvent(jobId) {
+    return {
+        eventType: WebhookEventType.JOB_SUBMITTED,
+        jobId,
+        timestamp: new Date().toISOString(),
+        data: {
+            status: 'queued',
+        },
+    };
+}
+/**
+ * Create a JOB_STARTED event payload.
+ */
+export function createJobStartedEvent(jobId) {
+    return {
+        eventType: WebhookEventType.JOB_STARTED,
+        jobId,
+        timestamp: new Date().toISOString(),
+        data: {
+            status: 'running',
+        },
+    };
+}
+/**
+ * Create a JOB_COMPLETED event payload.
+ */
+export function createJobCompletedEvent(jobId, exitCode) {
+    return {
+        eventType: WebhookEventType.JOB_COMPLETED,
+        jobId,
+        timestamp: new Date().toISOString(),
+        data: {
+            status: 'completed',
+            ...(exitCode !== null && exitCode !== undefined && { exitCode }),
+        },
+    };
+}
+/**
+ * Create a JOB_CANCELLED event payload.
+ */
+export function createJobCancelledEvent(jobId, error) {
+    return {
+        eventType: WebhookEventType.JOB_CANCELLED,
+        jobId,
+        timestamp: new Date().toISOString(),
+        data: {
+            status: 'failed',
+            failureClass: 'cancelled',
+            ...(error && { error }),
+        },
+    };
+}
+/**
+ * Create a JOB_FAILED event payload.
+ */
+export function createJobFailedEvent(jobId, failureClass, error, exitCode) {
+    return {
+        eventType: WebhookEventType.JOB_FAILED,
+        jobId,
+        timestamp: new Date().toISOString(),
+        data: {
+            status: 'failed',
+            ...(failureClass && { failureClass }),
+            ...(error && { error }),
+            ...(exitCode !== null && exitCode !== undefined && { exitCode }),
+        },
+    };
+}
+//# sourceMappingURL=webhook-event-builder.js.map

package/dist/utils/webhook-event-builder.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"webhook-event-builder.js","sourceRoot":"","sources":["../../src/utils/webhook-event-builder.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,gBAAgB,EAAkB,MAAM,qBAAqB,CAAC;AAEvE;;;GAGG;AAEH;;GAEG;AACH,MAAM,UAAU,uBAAuB,CAAC,KAAa;IACnD,OAAO;QACL,SAAS,EAAE,gBAAgB,CAAC,aAAa;QACzC,KAAK;QACL,SAAS,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;QACnC,IAAI,EAAE;YACJ,MAAM,EAAE,QAAQ;SACjB;KACF,CAAC;AACJ,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,qBAAqB,CAAC,KAAa;IACjD,OAAO;QACL,SAAS,EAAE,gBAAgB,CAAC,WAAW;QACvC,KAAK;QACL,SAAS,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;QACnC,IAAI,EAAE;YACJ,MAAM,EAAE,SAAS;SAClB;KACF,CAAC;AACJ,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,uBAAuB,CAAC,KAAa,EAAE,QAAwB;IAC7E,OAAO;QACL,SAAS,EAAE,gBAAgB,CAAC,aAAa;QACzC,KAAK;QACL,SAAS,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;QACnC,IAAI,EAAE;YACJ,MAAM,EAAE,WAAW;YACnB,GAAG,CAAC,QAAQ,KAAK,IAAI,IAAI,QAAQ,KAAK,SAAS,IAAI,EAAE,QAAQ,EAAE,CAAC;SACjE;KACF,CAAC;AACJ,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,uBAAuB,CAAC,KAAa,EAAE,KAAc;IACnE,OAAO;QACL,SAAS,EAAE,gBAAgB,CAAC,aAAa;QACzC,KAAK;QACL,SAAS,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;QACnC,IAAI,EAAE;YACJ,MAAM,EAAE,QAAQ;YAChB,YAAY,EAAE,WAAW;YACzB,GAAG,CAAC,KAAK,IAAI,EAAE,KAAK,EAAE,CAAC;SACxB;KACF,CAAC;AACJ,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,oBAAoB,CAClC,KAAa,EACb,YAAqB,EACrB,KAAc,EACd,QAAiB;IAEjB,OAAO;QACL,SAAS,EAAE,gBAAgB,CAAC,UAAU;QACtC,KAAK;QACL,SAAS,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;QACnC,IAAI,EAAE;YACJ,MAAM,EAAE,QAAQ;YAChB,GAAG,CAAC,YAAY,IAAI,EAAE,YAAY,EAAE,CAAC;YACrC,GAAG,CAAC,KAAK,IAAI,EAAE,KAAK,EAAE,CAAC;YACvB,GAAG,CAAC,QAAQ,KAAK,IAAI,IAAI,QAAQ,KAAK,SAAS,IAAI,EAAE,QAAQ,EAAE,CAAC;SACjE;KACF,CAAC;AACJ,CAAC"}

package/dist/webhook-manager.d.ts

@@ -0,0 +1,56 @@
+import { EventEmitter } from 'events';
+import { WebhookPayload, WebhookConfig } from './kaseki-api-types';
+/**
+ * Webhook manager handles async delivery of webhook events with retry logic.
+ */
+export declare class WebhookManager extends EventEmitter {
+    private deliveryQueue;
+    private logger;
+    private deliveryLogPath;
+    private processInterval;
+    private maxConcurrentDeliveries;
+    private activeDeliveries;
+    constructor(resultsDir: string);
+    /**
+     * Enqueue a webhook for delivery.
+     */
+    enqueueWebhook(jobId: string, payload: WebhookPayload, config: WebhookConfig): void;
+    /**
+     * Start the processing loop.
+     */
+    private startProcessing;
+    /**
+     * Stop the processing loop.
+     */
+    stopProcessing(): void;
+    isHealthy(): boolean;
+    /**
+     * Process the delivery queue.
+     */
+    private processQueue;
+    /**
+     * Deliver a webhook with retry logic.
+     */
+    private deliverWebhook;
+    /**
+     * Generate HMAC-SHA256 signature for webhook payload.
+     */
+    private generateSignature;
+    /**
+     * Persist delivery log to disk.
+     */
+    private persistDeliveryLog;
+    /**
+     * Load delivery log from disk.
+     */
+    private loadDeliveryLog;
+    /**
+     * Get current queue size.
+     */
+    getQueueSize(): number;
+    /**
+     * Gracefully shutdown the webhook manager.
+     */
+    shutdown(): Promise<void>;
+}
+//# sourceMappingURL=webhook-manager.d.ts.map

package/dist/webhook-manager.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"webhook-manager.d.ts","sourceRoot":"","sources":["../src/webhook-manager.ts"],"names":[],"mappings":"AAGA,OAAO,EAAE,YAAY,EAAE,MAAM,QAAQ,CAAC;AACtC,OAAO,EAAE,cAAc,EAAE,aAAa,EAAE,MAAM,oBAAoB,CAAC;AAmCnE;;GAEG;AACH,qBAAa,cAAe,SAAQ,YAAY;IAC9C,OAAO,CAAC,aAAa,CAA2B;IAChD,OAAO,CAAC,MAAM,CAAc;IAC5B,OAAO,CAAC,eAAe,CAAS;IAChC,OAAO,CAAC,eAAe,CAA+B;IACtD,OAAO,CAAC,uBAAuB,CAAK;IACpC,OAAO,CAAC,gBAAgB,CAAK;gBAEjB,UAAU,EAAE,MAAM;IAQ9B;;OAEG;IACH,cAAc,CAAC,KAAK,EAAE,MAAM,EAAE,OAAO,EAAE,cAAc,EAAE,MAAM,EAAE,aAAa,GAAG,IAAI;IAgCnF;;OAEG;IACH,OAAO,CAAC,eAAe;IAWvB;;OAEG;IACH,cAAc,IAAI,IAAI;IAOtB,SAAS,IAAI,OAAO;IAIpB;;OAEG;YACW,YAAY;IA4B1B;;OAEG;YACW,cAAc;IAuI5B;;OAEG;IACH,OAAO,CAAC,iBAAiB;IAUzB;;OAEG;IACH,OAAO,CAAC,kBAAkB;IAuB1B;;OAEG;IACH,OAAO,CAAC,eAAe;IAgFvB;;OAEG;IACH,YAAY,IAAI,MAAM;IAItB;;OAEG;IACG,QAAQ,IAAI,OAAO,CAAC,IAAI,CAAC;CAsBhC"}

package/dist/webhook-manager.js

@@ -0,0 +1,359 @@
+import * as crypto from 'crypto';
+import * as fs from 'fs';
+import * as path from 'path';
+import { EventEmitter } from 'events';
+import { createEventLogger } from './logger.js';
+/**
+ * Webhook manager handles async delivery of webhook events with retry logic.
+ */
+export class WebhookManager extends EventEmitter {
+    deliveryQueue = [];
+    logger;
+    deliveryLogPath;
+    processInterval = null;
+    maxConcurrentDeliveries = 5;
+    activeDeliveries = 0;
+    constructor(resultsDir) {
+        super();
+        this.logger = createEventLogger('webhook-manager');
+        this.deliveryLogPath = path.join(resultsDir, '.kaseki-webhook-delivery.log');
+        this.loadDeliveryLog();
+        this.startProcessing();
+    }
+    /**
+     * Enqueue a webhook for delivery.
+     */
+    enqueueWebhook(jobId, payload, config) {
+        // Check if event type is subscribed to
+        if (config.events && !config.events.includes(payload.eventType)) {
+            this.logger.debug(`Webhook event ${payload.eventType} not subscribed for job ${jobId}`);
+            return;
+        }
+        const entry = {
+            jobId,
+            payload,
+            config,
+            deliveryAttempts: 0,
+            attempts: [
+                {
+                    timestamp: new Date().toISOString(),
+                    status: 'pending',
+                },
+            ],
+            nextRetryTime: Date.now(),
+        };
+        this.deliveryQueue.push(entry);
+        this.persistDeliveryLog();
+        this.logger.event('webhook_enqueued', {
+            jobId,
+            eventType: payload.eventType,
+            webhookUrl: config.url,
+            queueSize: this.deliveryQueue.length,
+        });
+    }
+    /**
+     * Start the processing loop.
+     */
+    startProcessing() {
+        if (this.processInterval) {
+            return;
+        }
+        this.processInterval = setInterval(() => {
+            this.processQueue();
+        }, 500); // Check every 500ms
+        this.processInterval.unref();
+    }
+    /**
+     * Stop the processing loop.
+     */
+    stopProcessing() {
+        if (this.processInterval) {
+            clearInterval(this.processInterval);
+            this.processInterval = null;
+        }
+    }
+    isHealthy() {
+        return this.processInterval !== null && this.activeDeliveries <= this.maxConcurrentDeliveries;
+    }
+    /**
+     * Process the delivery queue.
+     */
+    async processQueue() {
+        // Limit concurrent deliveries
+        if (this.activeDeliveries >= this.maxConcurrentDeliveries) {
+            return;
+        }
+        // Find next entry to deliver
+        const now = Date.now();
+        const entry = this.deliveryQueue.find((e) => {
+            const lastAttempt = e.attempts[e.attempts.length - 1];
+            const isCompleted = lastAttempt.status === 'success';
+            const shouldRetry = e.nextRetryTime && e.nextRetryTime <= now;
+            const exceedsMaxAttempts = e.deliveryAttempts >= (e.config.retryPolicy?.maxAttempts || 5);
+            return !isCompleted && shouldRetry && !exceedsMaxAttempts;
+        });
+        if (!entry) {
+            return;
+        }
+        this.activeDeliveries++;
+        try {
+            await this.deliverWebhook(entry);
+        }
+        finally {
+            this.activeDeliveries--;
+        }
+    }
+    /**
+     * Deliver a webhook with retry logic.
+     */
+    async deliverWebhook(entry) {
+        const { config, payload, jobId } = entry;
+        const signature = this.generateSignature(payload, config);
+        const startTime = Date.now();
+        try {
+            entry.deliveryAttempts++;
+            const response = await fetch(config.url, {
+                method: 'POST',
+                headers: {
+                    'Content-Type': 'application/json',
+                    'X-Kaseki-Event': payload.eventType,
+                    'X-Kaseki-Job-Id': jobId,
+                    ...(signature && { 'X-Kaseki-Signature': signature }),
+                },
+                body: JSON.stringify(payload),
+                signal: AbortSignal.timeout(10000), // 10s timeout
+            });
+            const durationMs = Date.now() - startTime;
+            if (response.ok) {
+                // Success
+                entry.attempts.push({
+                    timestamp: new Date().toISOString(),
+                    status: 'success',
+                    statusCode: response.status,
+                    durationMs,
+                });
+                this.logger.event('webhook_delivered', {
+                    jobId,
+                    eventType: payload.eventType,
+                    statusCode: response.status,
+                    durationMs,
+                    attempts: entry.deliveryAttempts,
+                });
+                // Remove from queue
+                this.deliveryQueue = this.deliveryQueue.filter((e) => e !== entry);
+                this.persistDeliveryLog();
+            }
+            else {
+                // Transient error, schedule retry
+                const retryPolicy = config.retryPolicy || {
+                    maxAttempts: 5,
+                    initialDelayMs: 1000,
+                    maxDelayMs: 30000,
+                };
+                const backoffMs = Math.min(retryPolicy.initialDelayMs * Math.pow(2, entry.deliveryAttempts - 1), retryPolicy.maxDelayMs);
+                const hasRemainingAttempts = entry.deliveryAttempts < retryPolicy.maxAttempts;
+                entry.attempts.push({
+                    timestamp: new Date().toISOString(),
+                    status: hasRemainingAttempts ? 'retry' : 'failed',
+                    statusCode: response.status,
+                    durationMs,
+                    error: `HTTP ${response.status}`,
+                });
+                if (hasRemainingAttempts) {
+                    entry.nextRetryTime = Date.now() + backoffMs;
+                    this.logger.event('webhook_retry_scheduled', {
+                        jobId,
+                        eventType: payload.eventType,
+                        statusCode: response.status,
+                        nextRetryMs: backoffMs,
+                        attemptNumber: entry.deliveryAttempts,
+                    });
+                }
+                else {
+                    this.logger.event('webhook_delivery_failed', {
+                        jobId,
+                        eventType: payload.eventType,
+                        statusCode: response.status,
+                        attempts: entry.deliveryAttempts,
+                    });
+                    // Remove from queue after max attempts
+                    this.deliveryQueue = this.deliveryQueue.filter((e) => e !== entry);
+                }
+                this.persistDeliveryLog();
+            }
+        }
+        catch (error) {
+            const durationMs = Date.now() - startTime;
+            const errorMsg = error instanceof Error ? error.message : String(error);
+            const retryPolicy = config.retryPolicy || {
+                maxAttempts: 5,
+                initialDelayMs: 1000,
+                maxDelayMs: 30000,
+            };
+            const backoffMs = Math.min(retryPolicy.initialDelayMs * Math.pow(2, entry.deliveryAttempts - 1), retryPolicy.maxDelayMs);
+            const hasRemainingAttempts = entry.deliveryAttempts < retryPolicy.maxAttempts;
+            entry.attempts.push({
+                timestamp: new Date().toISOString(),
+                status: hasRemainingAttempts ? 'retry' : 'failed',
+                error: errorMsg,
+                durationMs,
+            });
+            if (hasRemainingAttempts) {
+                entry.nextRetryTime = Date.now() + backoffMs;
+                this.logger.event('webhook_delivery_error', {
+                    jobId,
+                    eventType: payload.eventType,
+                    error: errorMsg,
+                    nextRetryMs: backoffMs,
+                    attemptNumber: entry.deliveryAttempts,
+                });
+            }
+            else {
+                this.logger.event('webhook_delivery_failed', {
+                    jobId,
+                    eventType: payload.eventType,
+                    error: errorMsg,
+                    attempts: entry.deliveryAttempts,
+                });
+                // Remove from queue after max attempts
+                this.deliveryQueue = this.deliveryQueue.filter((e) => e !== entry);
+            }
+            this.persistDeliveryLog();
+        }
+    }
+    /**
+     * Generate HMAC-SHA256 signature for webhook payload.
+     */
+    generateSignature(payload, config) {
+        if (!config.secret) {
+            return null;
+        }
+        const body = JSON.stringify(payload);
+        const signature = crypto.createHmac('sha256', config.secret).update(body).digest('hex');
+        return `sha256=${signature}`;
+    }
+    /**
+     * Persist delivery log to disk.
+     */
+    persistDeliveryLog() {
+        try {
+            const logEntries = this.deliveryQueue.map((entry) => ({
+                jobId: entry.jobId,
+                payload: entry.payload,
+                config: entry.config,
+                deliveryAttempts: entry.deliveryAttempts,
+                attempts: entry.attempts,
+                nextRetryTime: entry.nextRetryTime,
+            }));
+            fs.writeFileSync(this.deliveryLogPath, logEntries.map((e) => JSON.stringify(e)).join('\n'), 'utf-8');
+        }
+        catch (error) {
+            this.logger.error('Failed to persist webhook delivery log', {
+                error: error instanceof Error ? error.message : String(error),
+            });
+        }
+    }
+    /**
+     * Load delivery log from disk.
+     */
+    loadDeliveryLog() {
+        try {
+            if (!fs.existsSync(this.deliveryLogPath)) {
+                return;
+            }
+            const content = fs.readFileSync(this.deliveryLogPath, 'utf-8');
+            const lines = content.split('\n').filter((line) => line.trim());
+            const now = Date.now();
+            for (const line of lines) {
+                let parsed;
+                try {
+                    parsed = JSON.parse(line);
+                }
+                catch (error) {
+                    this.logger.warn('Skipping malformed webhook delivery log line', {
+                        reason: 'invalid_json',
+                        error: error instanceof Error ? error.message : String(error),
+                    });
+                    continue;
+                }
+                const candidate = parsed;
+                const hasRequiredFields = typeof candidate.jobId === 'string' &&
+                    !!candidate.payload &&
+                    typeof candidate.payload.eventType === 'string' &&
+                    !!candidate.config &&
+                    typeof candidate.config.url === 'string' &&
+                    typeof candidate.deliveryAttempts === 'number';
+                if (!hasRequiredFields) {
+                    this.logger.warn('Skipping malformed webhook delivery log line', {
+                        reason: 'missing_required_fields',
+                        hasJobId: typeof candidate.jobId === 'string',
+                        hasPayload: !!candidate.payload,
+                        hasEventType: !!candidate.payload && typeof candidate.payload.eventType === 'string',
+                        hasConfigUrl: !!candidate.config && typeof candidate.config.url === 'string',
+                        hasDeliveryAttempts: typeof candidate.deliveryAttempts === 'number',
+                    });
+                    continue;
+                }
+                const retryPolicy = candidate.config.retryPolicy || {
+                    maxAttempts: 5,
+                    initialDelayMs: 1000,
+                    maxDelayMs: 30000,
+                };
+                const lastAttempt = candidate.attempts?.[candidate.attempts.length - 1];
+                const isTerminalSuccess = lastAttempt?.status === 'success';
+                const hasRemainingAttempts = candidate.deliveryAttempts < retryPolicy.maxAttempts;
+                if (isTerminalSuccess || !hasRemainingAttempts) {
+                    continue;
+                }
+                this.deliveryQueue.push({
+                    jobId: candidate.jobId,
+                    payload: candidate.payload,
+                    config: candidate.config,
+                    deliveryAttempts: candidate.deliveryAttempts,
+                    attempts: candidate.attempts || [],
+                    nextRetryTime: typeof candidate.nextRetryTime === 'number' && candidate.nextRetryTime > now
+                        ? candidate.nextRetryTime
+                        : now,
+                });
+            }
+            this.logger.event('webhook_log_loaded', {
+                pendingDeliveries: lines.length,
+                requeuedDeliveries: this.deliveryQueue.length,
+            });
+        }
+        catch (error) {
+            this.logger.error('Failed to load webhook delivery log', {
+                error: error instanceof Error ? error.message : String(error),
+            });
+        }
+    }
+    /**
+     * Get current queue size.
+     */
+    getQueueSize() {
+        return this.deliveryQueue.length;
+    }
+    /**
+     * Gracefully shutdown the webhook manager.
+     */
+    async shutdown() {
+        this.stopProcessing();
+        // Wait for active deliveries to complete (with timeout)
+        const shutdownTimeout = 5000;
+        const startTime = Date.now();
+        while (this.activeDeliveries > 0) {
+            if (Date.now() - startTime > shutdownTimeout) {
+                this.logger.warn('Webhook manager shutdown timeout reached', {
+                    activeDeliveries: this.activeDeliveries,
+                });
+                break;
+            }
+            await new Promise((resolve) => setTimeout(resolve, 100));
+        }
+        this.persistDeliveryLog();
+        this.logger.event('webhook_manager_shutdown', {
+            queueSize: this.deliveryQueue.length,
+        });
+    }
+}
+//# sourceMappingURL=webhook-manager.js.map

package/dist/webhook-manager.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"webhook-manager.js","sourceRoot":"","sources":["../src/webhook-manager.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,MAAM,MAAM,QAAQ,CAAC;AACjC,OAAO,KAAK,EAAE,MAAM,IAAI,CAAC;AACzB,OAAO,KAAK,IAAI,MAAM,MAAM,CAAC;AAC7B,OAAO,EAAE,YAAY,EAAE,MAAM,QAAQ,CAAC;AAEtC,OAAO,EAAE,iBAAiB,EAAe,MAAM,UAAU,CAAC;AAkC1D;;GAEG;AACH,MAAM,OAAO,cAAe,SAAQ,YAAY;IACtC,aAAa,GAAwB,EAAE,CAAC;IACxC,MAAM,CAAc;IACpB,eAAe,CAAS;IACxB,eAAe,GAA0B,IAAI,CAAC;IAC9C,uBAAuB,GAAG,CAAC,CAAC;IAC5B,gBAAgB,GAAG,CAAC,CAAC;IAE7B,YAAY,UAAkB;QAC5B,KAAK,EAAE,CAAC;QACR,IAAI,CAAC,MAAM,GAAG,iBAAiB,CAAC,iBAAiB,CAAC,CAAC;QACnD,IAAI,CAAC,eAAe,GAAG,IAAI,CAAC,IAAI,CAAC,UAAU,EAAE,8BAA8B,CAAC,CAAC;QAC7E,IAAI,CAAC,eAAe,EAAE,CAAC;QACvB,IAAI,CAAC,eAAe,EAAE,CAAC;IACzB,CAAC;IAED;;OAEG;IACH,cAAc,CAAC,KAAa,EAAE,OAAuB,EAAE,MAAqB;QAC1E,uCAAuC;QACvC,IAAI,MAAM,CAAC,MAAM,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,QAAQ,CAAC,OAAO,CAAC,SAAS,CAAC,EAAE,CAAC;YAChE,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,iBAAiB,OAAO,CAAC,SAAS,2BAA2B,KAAK,EAAE,CAAC,CAAC;YACxF,OAAO;QACT,CAAC;QAED,MAAM,KAAK,GAAsB;YAC/B,KAAK;YACL,OAAO;YACP,MAAM;YACN,gBAAgB,EAAE,CAAC;YACnB,QAAQ,EAAE;gBACR;oBACE,SAAS,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;oBACnC,MAAM,EAAE,SAAS;iBAClB;aACF;YACD,aAAa,EAAE,IAAI,CAAC,GAAG,EAAE;SAC1B,CAAC;QAEF,IAAI,CAAC,aAAa,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QAC/B,IAAI,CAAC,kBAAkB,EAAE,CAAC;QAE1B,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,kBAAkB,EAAE;YACpC,KAAK;YACL,SAAS,EAAE,OAAO,CAAC,SAAS;YAC5B,UAAU,EAAE,MAAM,CAAC,GAAG;YACtB,SAAS,EAAE,IAAI,CAAC,aAAa,CAAC,MAAM;SACrC,CAAC,CAAC;IACL,CAAC;IAED;;OAEG;IACK,eAAe;QACrB,IAAI,IAAI,CAAC,eAAe,EAAE,CAAC;YACzB,OAAO;QACT,CAAC;QAED,IAAI,CAAC,eAAe,GAAG,WAAW,CAAC,GAAG,EAAE;YACtC,IAAI,CAAC,YAAY,EAAE,CAAC;QACtB,CAAC,EAAE,GAAG,CAAC,CAAC,CAAC,oBAAoB;QAC7B,IAAI,CAAC,eAAe,CAAC,KAAK,EAAE,CAAC;IAC/B,CAAC;IAED;;OAEG;IACH,cAAc;QACZ,IAAI,IAAI,CAAC,eAAe,EAAE,CAAC;YACzB,aAAa,CAAC,IAAI,CAAC,eAAe,CAAC,CAAC;YACpC,IAAI,CAAC,eAAe,GAAG,IAAI,CAAC;QAC9B,CAAC;IACH,CAAC;IAED,SAAS;QACP,OAAO,IAAI,CAAC,eAAe,KAAK,IAAI,IAAI,IAAI,CAAC,gBAAgB,IAAI,IAAI,CAAC,uBAAuB,CAAC;IAChG,CAAC;IAED;;OAEG;IACK,KAAK,CAAC,YAAY;QACxB,8BAA8B;QAC9B,IAAI,IAAI,CAAC,gBAAgB,IAAI,IAAI,CAAC,uBAAuB,EAAE,CAAC;YAC1D,OAAO;QACT,CAAC;QAED,6BAA6B;QAC7B,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QACvB,MAAM,KAAK,GAAG,IAAI,CAAC,aAAa,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE;YAC1C,MAAM,WAAW,GAAG,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,QAAQ,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC;YACtD,MAAM,WAAW,GAAG,WAAW,CAAC,MAAM,KAAK,SAAS,CAAC;YACrD,MAAM,WAAW,GAAG,CAAC,CAAC,aAAa,IAAI,CAAC,CAAC,aAAa,IAAI,GAAG,CAAC;YAC9D,MAAM,kBAAkB,GAAG,CAAC,CAAC,gBAAgB,IAAI,CAAC,CAAC,CAAC,MAAM,CAAC,WAAW,EAAE,WAAW,IAAI,CAAC,CAAC,CAAC;YAC1F,OAAO,CAAC,WAAW,IAAI,WAAW,IAAI,CAAC,kBAAkB,CAAC;QAC5D,CAAC,CAAC,CAAC;QAEH,IAAI,CAAC,KAAK,EAAE,CAAC;YACX,OAAO;QACT,CAAC;QAED,IAAI,CAAC,gBAAgB,EAAE,CAAC;QACxB,IAAI,CAAC;YACH,MAAM,IAAI,CAAC,cAAc,CAAC,KAAK,CAAC,CAAC;QACnC,CAAC;gBAAS,CAAC;YACT,IAAI,CAAC,gBAAgB,EAAE,CAAC;QAC1B,CAAC;IACH,CAAC;IAED;;OAEG;IACK,KAAK,CAAC,cAAc,CAAC,KAAwB;QACnD,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,KAAK,EAAE,GAAG,KAAK,CAAC;QACzC,MAAM,SAAS,GAAG,IAAI,CAAC,iBAAiB,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;QAC1D,MAAM,SAAS,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QAE7B,IAAI,CAAC;YACH,KAAK,CAAC,gBAAgB,EAAE,CAAC;YACzB,MAAM,QAAQ,GAAG,MAAM,KAAK,CAAC,MAAM,CAAC,GAAG,EAAE;gBACvC,MAAM,EAAE,MAAM;gBACd,OAAO,EAAE;oBACP,cAAc,EAAE,kBAAkB;oBAClC,gBAAgB,EAAE,OAAO,CAAC,SAAS;oBACnC,iBAAiB,EAAE,KAAK;oBACxB,GAAG,CAAC,SAAS,IAAI,EAAE,oBAAoB,EAAE,SAAS,EAAE,CAAC;iBACtD;gBACD,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC;gBAC7B,MAAM,EAAE,WAAW,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,cAAc;aACnD,CAAC,CAAC;YAEH,MAAM,UAAU,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,SAAS,CAAC;YAE1C,IAAI,QAAQ,CAAC,EAAE,EAAE,CAAC;gBAChB,UAAU;gBACV,KAAK,CAAC,QAAQ,CAAC,IAAI,CAAC;oBAClB,SAAS,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;oBACnC,MAAM,EAAE,SAAS;oBACjB,UAAU,EAAE,QAAQ,CAAC,MAAM;oBAC3B,UAAU;iBACX,CAAC,CAAC;gBAEH,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,mBAAmB,EAAE;oBACrC,KAAK;oBACL,SAAS,EAAE,OAAO,CAAC,SAAS;oBAC5B,UAAU,EAAE,QAAQ,CAAC,MAAM;oBAC3B,UAAU;oBACV,QAAQ,EAAE,KAAK,CAAC,gBAAgB;iBACjC,CAAC,CAAC;gBAEH,oBAAoB;gBACpB,IAAI,CAAC,aAAa,GAAG,IAAI,CAAC,aAAa,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,KAAK,KAAK,CAAC,CAAC;gBACnE,IAAI,CAAC,kBAAkB,EAAE,CAAC;YAC5B,CAAC;iBAAM,CAAC;gBACN,kCAAkC;gBAClC,MAAM,WAAW,GAAG,MAAM,CAAC,WAAW,IAAI;oBACxC,WAAW,EAAE,CAAC;oBACd,cAAc,EAAE,IAAI;oBACpB,UAAU,EAAE,KAAK;iBAClB,CAAC;gBAEF,MAAM,SAAS,GAAG,IAAI,CAAC,GAAG,CACxB,WAAW,CAAC,cAAc,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,KAAK,CAAC,gBAAgB,GAAG,CAAC,CAAC,EACpE,WAAW,CAAC,UAAU,CACvB,CAAC;gBACF,MAAM,oBAAoB,GAAG,KAAK,CAAC,gBAAgB,GAAG,WAAW,CAAC,WAAW,CAAC;gBAE9E,KAAK,CAAC,QAAQ,CAAC,IAAI,CAAC;oBAClB,SAAS,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;oBACnC,MAAM,EAAE,oBAAoB,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,QAAQ;oBACjD,UAAU,EAAE,QAAQ,CAAC,MAAM;oBAC3B,UAAU;oBACV,KAAK,EAAE,QAAQ,QAAQ,CAAC,MAAM,EAAE;iBACjC,CAAC,CAAC;gBAEH,IAAI,oBAAoB,EAAE,CAAC;oBACzB,KAAK,CAAC,aAAa,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,SAAS,CAAC;oBAE7C,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,yBAAyB,EAAE;wBAC3C,KAAK;wBACL,SAAS,EAAE,OAAO,CAAC,SAAS;wBAC5B,UAAU,EAAE,QAAQ,CAAC,MAAM;wBAC3B,WAAW,EAAE,SAAS;wBACtB,aAAa,EAAE,KAAK,CAAC,gBAAgB;qBACtC,CAAC,CAAC;gBACL,CAAC;qBAAM,CAAC;oBACN,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,yBAAyB,EAAE;wBAC3C,KAAK;wBACL,SAAS,EAAE,OAAO,CAAC,SAAS;wBAC5B,UAAU,EAAE,QAAQ,CAAC,MAAM;wBAC3B,QAAQ,EAAE,KAAK,CAAC,gBAAgB;qBACjC,CAAC,CAAC;oBAEH,uCAAuC;oBACvC,IAAI,CAAC,aAAa,GAAG,IAAI,CAAC,aAAa,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,KAAK,KAAK,CAAC,CAAC;gBACrE,CAAC;gBAED,IAAI,CAAC,kBAAkB,EAAE,CAAC;YAC5B,CAAC;QACH,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,MAAM,UAAU,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,SAAS,CAAC;YAC1C,MAAM,QAAQ,GAAG,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;YACxE,MAAM,WAAW,GAAG,MAAM,CAAC,WAAW,IAAI;gBACxC,WAAW,EAAE,CAAC;gBACd,cAAc,EAAE,IAAI;gBACpB,UAAU,EAAE,KAAK;aAClB,CAAC;YAEF,MAAM,SAAS,GAAG,IAAI,CAAC,GAAG,CACxB,WAAW,CAAC,cAAc,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,KAAK,CAAC,gBAAgB,GAAG,CAAC,CAAC,EACpE,WAAW,CAAC,UAAU,CACvB,CAAC;YACF,MAAM,oBAAoB,GAAG,KAAK,CAAC,gBAAgB,GAAG,WAAW,CAAC,WAAW,CAAC;YAE9E,KAAK,CAAC,QAAQ,CAAC,IAAI,CAAC;gBAClB,SAAS,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;gBACnC,MAAM,EAAE,oBAAoB,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,QAAQ;gBACjD,KAAK,EAAE,QAAQ;gBACf,UAAU;aACX,CAAC,CAAC;YAEH,IAAI,oBAAoB,EAAE,CAAC;gBACzB,KAAK,CAAC,aAAa,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,SAAS,CAAC;gBAE7C,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,wBAAwB,EAAE;oBAC1C,KAAK;oBACL,SAAS,EAAE,OAAO,CAAC,SAAS;oBAC5B,KAAK,EAAE,QAAQ;oBACf,WAAW,EAAE,SAAS;oBACtB,aAAa,EAAE,KAAK,CAAC,gBAAgB;iBACtC,CAAC,CAAC;YACL,CAAC;iBAAM,CAAC;gBACN,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,yBAAyB,EAAE;oBAC3C,KAAK;oBACL,SAAS,EAAE,OAAO,CAAC,SAAS;oBAC5B,KAAK,EAAE,QAAQ;oBACf,QAAQ,EAAE,KAAK,CAAC,gBAAgB;iBACjC,CAAC,CAAC;gBAEH,uCAAuC;gBACvC,IAAI,CAAC,aAAa,GAAG,IAAI,CAAC,aAAa,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,KAAK,KAAK,CAAC,CAAC;YACrE,CAAC;YAED,IAAI,CAAC,kBAAkB,EAAE,CAAC;QAC5B,CAAC;IACH,CAAC;IAED;;OAEG;IACK,iBAAiB,CAAC,OAAuB,EAAE,MAAqB;QACtE,IAAI,CAAC,MAAM,CAAC,MAAM,EAAE,CAAC;YACnB,OAAO,IAAI,CAAC;QACd,CAAC;QAED,MAAM,IAAI,GAAG,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,CAAC;QACrC,MAAM,SAAS,GAAG,MAAM,CAAC,UAAU,CAAC,QAAQ,EAAE,MAAM,CAAC,MAAM,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;QACxF,OAAO,UAAU,SAAS,EAAE,CAAC;IAC/B,CAAC;IAED;;OAEG;IACK,kBAAkB;QACxB,IAAI,CAAC;YACH,MAAM,UAAU,GAAG,IAAI,CAAC,aAAa,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;gBACpD,KAAK,EAAE,KAAK,CAAC,KAAK;gBAClB,OAAO,EAAE,KAAK,CAAC,OAAO;gBACtB,MAAM,EAAE,KAAK,CAAC,MAAM;gBACpB,gBAAgB,EAAE,KAAK,CAAC,gBAAgB;gBACxC,QAAQ,EAAE,KAAK,CAAC,QAAQ;gBACxB,aAAa,EAAE,KAAK,CAAC,aAAa;aACnC,CAAC,CAAC,CAAC;YAEJ,EAAE,CAAC,aAAa,CACd,IAAI,CAAC,eAAe,EACpB,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,EACnD,OAAO,CACR,CAAC;QACJ,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,wCAAwC,EAAE;gBAC1D,KAAK,EAAE,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC;aAC9D,CAAC,CAAC;QACL,CAAC;IACH,CAAC;IAED;;OAEG;IACK,eAAe;QACrB,IAAI,CAAC;YACH,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,IAAI,CAAC,eAAe,CAAC,EAAE,CAAC;gBACzC,OAAO;YACT,CAAC;YAED,MAAM,OAAO,GAAG,EAAE,CAAC,YAAY,CAAC,IAAI,CAAC,eAAe,EAAE,OAAO,CAAC,CAAC;YAC/D,MAAM,KAAK,GAAG,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC,CAAC;YAEhE,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;YACvB,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;gBACzB,IAAI,MAAe,CAAC;gBACpB,IAAI,CAAC;oBACH,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;gBAC5B,CAAC;gBAAC,OAAO,KAAK,EAAE,CAAC;oBACf,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,8CAA8C,EAAE;wBAC/D,MAAM,EAAE,cAAc;wBACtB,KAAK,EAAE,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC;qBAC9D,CAAC,CAAC;oBACH,SAAS;gBACX,CAAC;gBAED,MAAM,SAAS,GAAG,MAA6C,CAAC;gBAChE,MAAM,iBAAiB,GACrB,OAAO,SAAS,CAAC,KAAK,KAAK,QAAQ;oBACnC,CAAC,CAAC,SAAS,CAAC,OAAO;oBACnB,OAAO,SAAS,CAAC,OAAO,CAAC,SAAS,KAAK,QAAQ;oBAC/C,CAAC,CAAC,SAAS,CAAC,MAAM;oBAClB,OAAO,SAAS,CAAC,MAAM,CAAC,GAAG,KAAK,QAAQ;oBACxC,OAAO,SAAS,CAAC,gBAAgB,KAAK,QAAQ,CAAC;gBAEjD,IAAI,CAAC,iBAAiB,EAAE,CAAC;oBACvB,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,8CAA8C,EAAE;wBAC/D,MAAM,EAAE,yBAAyB;wBACjC,QAAQ,EAAE,OAAO,SAAS,CAAC,KAAK,KAAK,QAAQ;wBAC7C,UAAU,EAAE,CAAC,CAAC,SAAS,CAAC,OAAO;wBAC/B,YAAY,EAAE,CAAC,CAAC,SAAS,CAAC,OAAO,IAAI,OAAO,SAAS,CAAC,OAAO,CAAC,SAAS,KAAK,QAAQ;wBACpF,YAAY,EAAE,CAAC,CAAC,SAAS,CAAC,MAAM,IAAI,OAAO,SAAS,CAAC,MAAM,CAAC,GAAG,KAAK,QAAQ;wBAC5E,mBAAmB,EAAE,OAAO,SAAS,CAAC,gBAAgB,KAAK,QAAQ;qBACpE,CAAC,CAAC;oBACH,SAAS;gBACX,CAAC;gBAED,MAAM,WAAW,GAAG,SAAS,CAAC,MAAO,CAAC,WAAW,IAAI;oBACnD,WAAW,EAAE,CAAC;oBACd,cAAc,EAAE,IAAI;oBACpB,UAAU,EAAE,KAAK;iBAClB,CAAC;gBACF,MAAM,WAAW,GAAG,SAAS,CAAC,QAAQ,EAAE,CAAC,SAAS,CAAC,QAAQ,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC;gBACxE,MAAM,iBAAiB,GAAG,WAAW,EAAE,MAAM,KAAK,SAAS,CAAC;gBAC5D,MAAM,oBAAoB,GAAG,SAAS,CAAC,gBAAiB,GAAG,WAAW,CAAC,WAAW,CAAC;gBAEnF,IAAI,iBAAiB,IAAI,CAAC,oBAAoB,EAAE,CAAC;oBAC/C,SAAS;gBACX,CAAC;gBAED,IAAI,CAAC,aAAa,CAAC,IAAI,CAAC;oBACtB,KAAK,EAAE,SAAS,CAAC,KAAM;oBACvB,OAAO,EAAE,SAAS,CAAC,OAAQ;oBAC3B,MAAM,EAAE,SAAS,CAAC,MAAO;oBACzB,gBAAgB,EAAE,SAAS,CAAC,gBAAiB;oBAC7C,QAAQ,EAAE,SAAS,CAAC,QAAQ,IAAI,EAAE;oBAClC,aAAa,EACX,OAAO,SAAS,CAAC,aAAa,KAAK,QAAQ,IAAI,SAAS,CAAC,aAAa,GAAG,GAAG;wBAC1E,CAAC,CAAC,SAAS,CAAC,aAAa;wBACzB,CAAC,CAAC,GAAG;iBACV,CAAC,CAAC;YACL,CAAC;YAED,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,oBAAoB,EAAE;gBACtC,iBAAiB,EAAE,KAAK,CAAC,MAAM;gBAC/B,kBAAkB,EAAE,IAAI,CAAC,aAAa,CAAC,MAAM;aAC9C,CAAC,CAAC;QACL,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,qCAAqC,EAAE;gBACvD,KAAK,EAAE,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC;aAC9D,CAAC,CAAC;QACL,CAAC;IACH,CAAC;IAED;;OAEG;IACH,YAAY;QACV,OAAO,IAAI,CAAC,aAAa,CAAC,MAAM,CAAC;IACnC,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,QAAQ;QACZ,IAAI,CAAC,cAAc,EAAE,CAAC;QAEtB,wDAAwD;QACxD,MAAM,eAAe,GAAG,IAAI,CAAC;QAC7B,MAAM,SAAS,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QAE7B,OAAO,IAAI,CAAC,gBAAgB,GAAG,CAAC,EAAE,CAAC;YACjC,IAAI,IAAI,CAAC,GAAG,EAAE,GAAG,SAAS,GAAG,eAAe,EAAE,CAAC;gBAC7C,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,0CAA0C,EAAE;oBAC3D,gBAAgB,EAAE,IAAI,CAAC,gBAAgB;iBACxC,CAAC,CAAC;gBACH,MAAM;YACR,CAAC;YACD,MAAM,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,UAAU,CAAC,OAAO,EAAE,GAAG,CAAC,CAAC,CAAC;QAC3D,CAAC;QAED,IAAI,CAAC,kBAAkB,EAAE,CAAC;QAC1B,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,0BAA0B,EAAE;YAC5C,SAAS,EAAE,IAAI,CAAC,aAAa,CAAC,MAAM;SACrC,CAAC,CAAC;IACL,CAAC;CACF"}

package/docker/workspace-cache/package-lock.json

@@ -0,0 +1,13 @@
+{
+  "name": "kaseki-workspace-cache-seed",
+  "version": "1.0.0",
+  "lockfileVersion": 3,
+  "requires": true,
+  "packages": {
+    "": {
+      "name": "kaseki-workspace-cache-seed",
+      "version": "1.0.0",
+      "license": "UNLICENSED"
+    }
+  }
+}

package/docker/workspace-cache/package.json

@@ -0,0 +1,7 @@
+{
+  "name": "kaseki-workspace-cache-seed",
+  "private": true,
+  "version": "1.0.0",
+  "description": "Seed manifests for cache-friendly dependency layers",
+  "license": "UNLICENSED"
+}

package/docker-compose.yml

@@ -0,0 +1,53 @@
+services:
+  kaseki-api:
+    image: "${KASEKI_API_IMAGE:-docker.io/cyanautomation/kaseki-agent:latest}"
+    container_name: kaseki-api
+    user: "${KASEKI_API_USER:-1000:1000}"
+    group_add:
+      - "${DOCKER_GID:-985}"
+    command: ["api"]
+    ports:
+      - "${KASEKI_API_PORT:-8080}:8080"
+    environment:
+      KASEKI_API_PORT: "8080"
+      KASEKI_API_KEYS: "${KASEKI_API_KEYS:-sk-dev-key}"
+      KASEKI_API_LOG_LEVEL: "${KASEKI_API_LOG_LEVEL:-info}"
+      KASEKI_API_MAX_CONCURRENT_RUNS: "${KASEKI_API_MAX_CONCURRENT_RUNS:-3}"
+      KASEKI_RESULTS_DIR: /agents/kaseki-results
+      KASEKI_CONTAINER_USER: "${KASEKI_CONTAINER_USER:-1000:1000}"
+      KASEKI_AGENT_TIMEOUT_SECONDS: "${KASEKI_AGENT_TIMEOUT_SECONDS:-1200}"
+      KASEKI_MAX_DIFF_BYTES: "${KASEKI_MAX_DIFF_BYTES:-200000}"
+      OPENROUTER_API_KEY: "${OPENROUTER_API_KEY:-}"
+      GITHUB_APP_ID_FILE: "${GITHUB_APP_ID_FILE:-/agents/secrets/github_app_id}"
+      GITHUB_APP_CLIENT_ID_FILE: "${GITHUB_APP_CLIENT_ID_FILE:-/agents/secrets/github_client_id}"
+      GITHUB_APP_PRIVATE_KEY_FILE: "${GITHUB_APP_PRIVATE_KEY_FILE:-/agents/secrets/github_app_private_key}"
+    volumes:
+      - /agents:/agents:rw
+      - kaseki-logs:/var/log/kaseki-api
+      - /var/run/docker.sock:/var/run/docker.sock
+    restart: unless-stopped
+    cap_drop:
+      - ALL
+    security_opt:
+      - no-new-privileges:true
+    read_only: true
+    tmpfs:
+      - /tmp
+      - /var/tmp
+      - /run
+    healthcheck:
+      test: ["CMD", "node", "-e", "fetch('http://127.0.0.1:8080/health').then(r=>process.exit(r.ok?0:1)).catch(()=>process.exit(1))"]
+      interval: 30s
+      timeout: 10s
+      retries: 3
+      start_period: 40s
+    networks:
+      - kaseki-network
+
+volumes:
+  kaseki-logs:
+    driver: local
+
+networks:
+  kaseki-network:
+    driver: bridge