@lobu/gateway 2.8.0

package/dist/orchestration/deployment-utils.js

@@ -0,0 +1,65 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.BASE_WORKER_LABELS = void 0;
+exports.buildModuleEnvVars = buildModuleEnvVars;
+exports.resolvePlatformDeploymentMetadata = resolvePlatformDeploymentMetadata;
+exports.getVeryOldThresholdDays = getVeryOldThresholdDays;
+exports.buildDeploymentInfoSummary = buildDeploymentInfoSummary;
+const module_system_1 = require("../modules/module-system");
+const platform_1 = require("../platform");
+/**
+ * Shared types and utilities for deployment managers
+ * Reduces code duplication between Docker and K8s implementations
+ */
+// ============================================================================
+// Utility Functions
+// ============================================================================
+/**
+ * Build environment variables by integrating all registered modules
+ */
+async function buildModuleEnvVars(agentId, baseEnv) {
+    let envVars = Object.assign({}, baseEnv);
+    const orchestratorModules = (0, module_system_1.getOrchestratorModules)();
+    for (const module of orchestratorModules) {
+        if (module.buildEnvVars) {
+            envVars = await module.buildEnvVars(agentId, envVars);
+        }
+    }
+    return envVars;
+}
+exports.BASE_WORKER_LABELS = {
+    "app.kubernetes.io/name": "lobu",
+    "app.kubernetes.io/component": "worker",
+    "lobu/managed-by": "orchestrator",
+};
+function resolvePlatformDeploymentMetadata(messageData) {
+    if (!(messageData === null || messageData === void 0 ? void 0 : messageData.platform) ||
+        !messageData.channelId ||
+        !messageData.conversationId ||
+        !messageData.platformMetadata) {
+        return {};
+    }
+    const platform = platform_1.platformRegistry.get(messageData.platform);
+    if (!platform) {
+        return {};
+    }
+    return platform.buildDeploymentMetadata(messageData.conversationId, messageData.channelId, messageData.platformMetadata);
+}
+function getVeryOldThresholdDays(config) {
+    var _a, _b;
+    return (_b = (_a = config.cleanup) === null || _a === void 0 ? void 0 : _a.veryOldDays) !== null && _b !== void 0 ? _b : 7;
+}
+function buildDeploymentInfoSummary({ deploymentName, lastActivity, now, idleThresholdMinutes, veryOldDays, replicas, }) {
+    const minutesIdle = (now - lastActivity.getTime()) / (1000 * 60);
+    const daysSinceActivity = minutesIdle / (60 * 24);
+    return {
+        deploymentName,
+        lastActivity,
+        minutesIdle,
+        daysSinceActivity,
+        replicas,
+        isIdle: minutesIdle >= idleThresholdMinutes,
+        isVeryOld: daysSinceActivity >= veryOldDays,
+    };
+}
+//# sourceMappingURL=deployment-utils.js.map

package/dist/orchestration/deployment-utils.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"deployment-utils.js","sourceRoot":"","sources":["../../src/orchestration/deployment-utils.ts"],"names":[],"mappings":";;;AAoBA,gDAcC;AAQD,8EAsBC;AAED,0DAEC;AAED,gEA2BC;AAjGD,4DAAkE;AAClE,0CAA+C;AAO/C;;;GAGG;AAEH,+EAA+E;AAC/E,oBAAoB;AACpB,+EAA+E;AAE/E;;GAEG;AACI,KAAK,UAAU,kBAAkB,CACtC,OAAe,EACf,OAA+B;IAE/B,IAAI,OAAO,qBAAQ,OAAO,CAAE,CAAC;IAE7B,MAAM,mBAAmB,GAAG,IAAA,sCAAsB,GAAE,CAAC;IACrD,KAAK,MAAM,MAAM,IAAI,mBAAmB,EAAE,CAAC;QACzC,IAAI,MAAM,CAAC,YAAY,EAAE,CAAC;YACxB,OAAO,GAAG,MAAM,MAAM,CAAC,YAAY,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;QACxD,CAAC;IACH,CAAC;IAED,OAAO,OAAO,CAAC;AACjB,CAAC;AAEY,QAAA,kBAAkB,GAAG;IAChC,wBAAwB,EAAE,MAAM;IAChC,6BAA6B,EAAE,QAAQ;IACvC,iBAAiB,EAAE,cAAc;CACzB,CAAC;AAEX,SAAgB,iCAAiC,CAC/C,WAA4B;IAE5B,IACE,CAAC,CAAA,WAAW,aAAX,WAAW,uBAAX,WAAW,CAAE,QAAQ,CAAA;QACtB,CAAC,WAAW,CAAC,SAAS;QACtB,CAAC,WAAW,CAAC,cAAc;QAC3B,CAAC,WAAW,CAAC,gBAAgB,EAC7B,CAAC;QACD,OAAO,EAAE,CAAC;IACZ,CAAC;IAED,MAAM,QAAQ,GAAG,2BAAgB,CAAC,GAAG,CAAC,WAAW,CAAC,QAAQ,CAAC,CAAC;IAC5D,IAAI,CAAC,QAAQ,EAAE,CAAC;QACd,OAAO,EAAE,CAAC;IACZ,CAAC;IAED,OAAO,QAAQ,CAAC,uBAAuB,CACrC,WAAW,CAAC,cAAc,EAC1B,WAAW,CAAC,SAAS,EACrB,WAAW,CAAC,gBAAgB,CAC7B,CAAC;AACJ,CAAC;AAED,SAAgB,uBAAuB,CAAC,MAA0B;;IAChE,OAAO,MAAA,MAAA,MAAM,CAAC,OAAO,0CAAE,WAAW,mCAAI,CAAC,CAAC;AAC1C,CAAC;AAED,SAAgB,0BAA0B,CAAC,EACzC,cAAc,EACd,YAAY,EACZ,GAAG,EACH,oBAAoB,EACpB,WAAW,EACX,QAAQ,GAQT;IACC,MAAM,WAAW,GAAG,CAAC,GAAG,GAAG,YAAY,CAAC,OAAO,EAAE,CAAC,GAAG,CAAC,IAAI,GAAG,EAAE,CAAC,CAAC;IACjE,MAAM,iBAAiB,GAAG,WAAW,GAAG,CAAC,EAAE,GAAG,EAAE,CAAC,CAAC;IAElD,OAAO;QACL,cAAc;QACd,YAAY;QACZ,WAAW;QACX,iBAAiB;QACjB,QAAQ;QACR,MAAM,EAAE,WAAW,IAAI,oBAAoB;QAC3C,SAAS,EAAE,iBAAiB,IAAI,WAAW;KAC5C,CAAC;AACJ,CAAC"}

package/dist/orchestration/impl/docker-deployment.d.ts

@@ -0,0 +1,43 @@
+import type { ModelProviderModule } from "../../modules/module-system";
+import { BaseDeploymentManager, type DeploymentInfo, type ModuleEnvVarsBuilder, type OrchestratorConfig } from "../base-deployment-manager";
+export declare class DockerDeploymentManager extends BaseDeploymentManager {
+    private docker;
+    private gvisorAvailable;
+    private activityTimestamps;
+    constructor(config: OrchestratorConfig, moduleEnvVarsBuilder?: ModuleEnvVarsBuilder, providerModules?: ModelProviderModule[]);
+    private checkGvisorAvailability;
+    /**
+     * Ensure the internal Docker network exists with `internal: true` for worker isolation.
+     * Skipped when WORKER_NETWORK is explicitly set (e.g. local dev using bridge).
+     * Creates the network if it doesn't exist (e.g. production without docker-compose).
+     */
+    private ensureInternalNetwork;
+    /**
+     * Check if gateway is running inside a Docker container
+     */
+    private isRunningInContainer;
+    /**
+     * Get the host address that workers should use to reach the gateway
+     * When gateway runs on host, workers use host.docker.internal
+     * When gateway runs in container (docker-compose mode), workers use service name
+     */
+    private getHostAddress;
+    /**
+     * Validate that the worker image exists locally, or pull it if missing.
+     * Called on gateway startup to ensure workers can be created.
+     */
+    validateWorkerImage(): Promise<void>;
+    listDeployments(): Promise<DeploymentInfo[]>;
+    /**
+     * Ensures a Docker volume exists for the given space ID.
+     * Uses named volumes for better isolation and security.
+     * Multiple threads in the same space share the same volume.
+     */
+    private ensureVolume;
+    createDeployment(...args: Parameters<BaseDeploymentManager["createDeployment"]>): Promise<void>;
+    scaleDeployment(deploymentName: string, replicas: number): Promise<void>;
+    deleteDeployment(deploymentName: string): Promise<void>;
+    updateDeploymentActivity(deploymentName: string): Promise<void>;
+    protected getDispatcherHost(): string;
+}
+//# sourceMappingURL=docker-deployment.d.ts.map

package/dist/orchestration/impl/docker-deployment.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"docker-deployment.d.ts","sourceRoot":"","sources":["../../../src/orchestration/impl/docker-deployment.ts"],"names":[],"mappings":"AAIA,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,6BAA6B,CAAC;AACvE,OAAO,EACL,qBAAqB,EACrB,KAAK,cAAc,EAEnB,KAAK,oBAAoB,EACzB,KAAK,kBAAkB,EACxB,MAAM,4BAA4B,CAAC;AA0CpC,qBAAa,uBAAwB,SAAQ,qBAAqB;IAChE,OAAO,CAAC,MAAM,CAAS;IACvB,OAAO,CAAC,eAAe,CAAS;IAChC,OAAO,CAAC,kBAAkB,CAAgC;gBAGxD,MAAM,EAAE,kBAAkB,EAC1B,oBAAoB,CAAC,EAAE,oBAAoB,EAC3C,eAAe,GAAE,mBAAmB,EAAO;YAc/B,uBAAuB;IAsBrC;;;;OAIG;YACW,qBAAqB;IAwCnC;;OAEG;IACH,OAAO,CAAC,oBAAoB;IAI5B;;;;OAIG;IACH,OAAO,CAAC,cAAc;IAQtB;;;OAGG;IACG,mBAAmB,IAAI,OAAO,CAAC,IAAI,CAAC;IAiDpC,eAAe,IAAI,OAAO,CAAC,cAAc,EAAE,CAAC;IAmDlD;;;;OAIG;YACW,YAAY;IAgEpB,gBAAgB,CACpB,GAAG,IAAI,EAAE,UAAU,CAAC,qBAAqB,CAAC,kBAAkB,CAAC,CAAC,GAC7D,OAAO,CAAC,IAAI,CAAC;IAuNV,eAAe,CACnB,cAAc,EAAE,MAAM,EACtB,QAAQ,EAAE,MAAM,GACf,OAAO,CAAC,IAAI,CAAC;IAsBV,gBAAgB,CAAC,cAAc,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAiCvD,wBAAwB,CAAC,cAAc,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAMrE,SAAS,CAAC,iBAAiB,IAAI,MAAM;CAGtC"}

package/dist/orchestration/impl/docker-deployment.js

@@ -0,0 +1,480 @@
+"use strict";
+var __importDefault = (this && this.__importDefault) || function (mod) {
+    return (mod && mod.__esModule) ? mod : { "default": mod };
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.DockerDeploymentManager = void 0;
+const node_fs_1 = __importDefault(require("node:fs"));
+const node_path_1 = __importDefault(require("node:path"));
+const core_1 = require("@lobu/core");
+const dockerode_1 = __importDefault(require("dockerode"));
+const base_deployment_manager_1 = require("../base-deployment-manager");
+const deployment_utils_1 = require("../deployment-utils");
+/**
+ * Resource parsing utilities for memory and CPU limits
+ */
+class ResourceParser {
+    static parseMemory(memoryStr) {
+        const units = {
+            Ki: 1024,
+            Mi: 1024 * 1024,
+            Gi: 1024 * 1024 * 1024,
+            k: 1000,
+            M: 1000 * 1000,
+            G: 1000 * 1000 * 1000,
+        };
+        for (const [unit, multiplier] of Object.entries(units)) {
+            if (memoryStr.endsWith(unit)) {
+                const value = parseFloat(memoryStr.replace(unit, ""));
+                return value * multiplier;
+            }
+        }
+        return parseInt(memoryStr, 10);
+    }
+    static parseCpu(cpuStr) {
+        if (cpuStr.endsWith("m")) {
+            const millicores = parseInt(cpuStr.replace("m", ""), 10);
+            return (millicores / 1000) * 1e9;
+        }
+        const cores = parseFloat(cpuStr);
+        return cores * 1e9;
+    }
+}
+const logger = (0, core_1.createLogger)("orchestrator");
+class DockerDeploymentManager extends base_deployment_manager_1.BaseDeploymentManager {
+    constructor(config, moduleEnvVarsBuilder, providerModules = []) {
+        super(config, moduleEnvVarsBuilder, providerModules);
+        this.gvisorAvailable = false;
+        this.activityTimestamps = new Map();
+        // Explicitly use the Unix socket for Docker connection
+        this.docker = new dockerode_1.default({ socketPath: "/var/run/docker.sock" });
+        // Check for gvisor availability on initialization
+        this.checkGvisorAvailability();
+        // Ensure the internal network exists for worker isolation
+        this.ensureInternalNetwork();
+    }
+    async checkGvisorAvailability() {
+        try {
+            const info = await this.docker.info();
+            const runtimes = info.Runtimes || {};
+            if (runtimes.runsc || runtimes.gvisor) {
+                this.gvisorAvailable = true;
+                logger.info("✅ gVisor runtime detected and will be used for worker isolation");
+            }
+            else {
+                logger.info("ℹ️  gVisor runtime not available, using default runc runtime");
+            }
+        }
+        catch (error) {
+            logger.warn(`⚠️  Failed to check Docker runtime availability: ${error instanceof Error ? error.message : String(error)}`);
+        }
+    }
+    /**
+     * Ensure the internal Docker network exists with `internal: true` for worker isolation.
+     * Skipped when WORKER_NETWORK is explicitly set (e.g. local dev using bridge).
+     * Creates the network if it doesn't exist (e.g. production without docker-compose).
+     */
+    async ensureInternalNetwork() {
+        // If explicitly overridden (e.g. WORKER_NETWORK=bridge for local dev), skip
+        if (process.env.WORKER_NETWORK) {
+            return;
+        }
+        const composeProjectName = process.env.COMPOSE_PROJECT_NAME || "lobu";
+        const networkName = `${composeProjectName}_lobu-internal`;
+        try {
+            const network = this.docker.getNetwork(networkName);
+            const info = await network.inspect();
+            if (!info.Internal) {
+                logger.warn(`⚠️  Network ${networkName} exists but is NOT internal — workers may have direct internet access`);
+            }
+        }
+        catch (_a) {
+            // Network doesn't exist — create it with internal: true
+            try {
+                await this.docker.createNetwork({
+                    Name: networkName,
+                    Internal: true,
+                    Driver: "bridge",
+                    Labels: {
+                        "lobu.io/managed": "true",
+                        "lobu.io/purpose": "worker-isolation",
+                    },
+                });
+                logger.info(`✅ Created internal network ${networkName} for worker isolation`);
+            }
+            catch (createError) {
+                logger.error(`Failed to create internal network ${networkName}: ${createError instanceof Error ? createError.message : String(createError)}`);
+            }
+        }
+    }
+    /**
+     * Check if gateway is running inside a Docker container
+     */
+    isRunningInContainer() {
+        return node_fs_1.default.existsSync("/.dockerenv") || process.env.CONTAINER === "true";
+    }
+    /**
+     * Get the host address that workers should use to reach the gateway
+     * When gateway runs on host, workers use host.docker.internal
+     * When gateway runs in container (docker-compose mode), workers use service name
+     */
+    getHostAddress() {
+        if (this.isRunningInContainer()) {
+            return "gateway";
+        }
+        // For host-mode development, workers reach gateway via host.docker.internal
+        return "host.docker.internal";
+    }
+    /**
+     * Validate that the worker image exists locally, or pull it if missing.
+     * Called on gateway startup to ensure workers can be created.
+     */
+    async validateWorkerImage() {
+        const imageName = this.getWorkerImageReference();
+        try {
+            await this.docker.getImage(imageName).inspect();
+            logger.info(`✅ Worker image verified: ${imageName}`);
+        }
+        catch (error) {
+            const errorMessage = error instanceof Error ? error.message : String(error);
+            // If image not found, try to pull it
+            if (errorMessage.includes("No such image") ||
+                errorMessage.includes("404")) {
+                logger.info(`📥 Worker image ${imageName} not found locally, pulling...`);
+                try {
+                    await new Promise((resolve, reject) => {
+                        this.docker.pull(imageName, (err, stream) => {
+                            if (err)
+                                return reject(err);
+                            this.docker.modem.followProgress(stream, (err) => {
+                                if (err)
+                                    reject(err);
+                                else
+                                    resolve();
+                            });
+                        });
+                    });
+                    logger.info(`✅ Worker image ${imageName} pulled successfully`);
+                }
+                catch (pullError) {
+                    logger.error(`❌ Failed to pull worker image ${imageName}:`, pullError);
+                    throw new core_1.OrchestratorError(core_1.ErrorCode.DEPLOYMENT_CREATE_FAILED, `Worker image ${imageName} does not exist locally and pull failed. Please check your internet connection or registry permissions.`);
+                }
+            }
+            else {
+                // Other error - re-throw
+                throw new core_1.OrchestratorError(core_1.ErrorCode.DEPLOYMENT_CREATE_FAILED, `Failed to validate worker image ${imageName}: ${errorMessage}`);
+            }
+        }
+    }
+    async listDeployments() {
+        try {
+            const containers = await this.docker.listContainers({
+                all: true,
+                filters: {
+                    label: ["app.kubernetes.io/component=worker"],
+                },
+            });
+            const now = Date.now();
+            const idleThresholdMinutes = this.config.worker.idleCleanupMinutes;
+            const veryOldDays = (0, deployment_utils_1.getVeryOldThresholdDays)(this.config);
+            return containers.map((containerInfo) => {
+                var _a, _b, _c;
+                const deploymentName = ((_a = containerInfo.Names[0]) === null || _a === void 0 ? void 0 : _a.substring(1)) || ""; // Remove leading '/'
+                // Get last activity from in-memory tracking, labels, or creation time
+                const trackedActivity = this.activityTimestamps.get(deploymentName);
+                const lastActivityStr = ((_b = containerInfo.Labels) === null || _b === void 0 ? void 0 : _b["lobu.io/last-activity"]) ||
+                    ((_c = containerInfo.Labels) === null || _c === void 0 ? void 0 : _c["lobu.io/created"]);
+                const labelActivity = lastActivityStr
+                    ? new Date(lastActivityStr)
+                    : new Date(containerInfo.Created * 1000);
+                // Use the most recent timestamp from any source
+                const lastActivity = trackedActivity && trackedActivity > labelActivity
+                    ? trackedActivity
+                    : labelActivity;
+                const replicas = containerInfo.State === "running" ? 1 : 0;
+                return (0, deployment_utils_1.buildDeploymentInfoSummary)({
+                    deploymentName,
+                    lastActivity,
+                    now,
+                    idleThresholdMinutes,
+                    veryOldDays,
+                    replicas,
+                });
+            });
+        }
+        catch (error) {
+            throw new core_1.OrchestratorError(core_1.ErrorCode.DEPLOYMENT_CREATE_FAILED, `Failed to list Docker containers: ${error instanceof Error ? error.message : String(error)}`, { error }, true);
+        }
+    }
+    /**
+     * Ensures a Docker volume exists for the given space ID.
+     * Uses named volumes for better isolation and security.
+     * Multiple threads in the same space share the same volume.
+     */
+    async ensureVolume(agentId) {
+        var _a;
+        const volumeName = `lobu-workspace-${agentId}`;
+        let volumeCreated = false;
+        try {
+            // Check if volume already exists (idempotent for concurrent creation)
+            await this.docker.getVolume(volumeName).inspect();
+            logger.info(`✅ Volume ${volumeName} already exists`);
+        }
+        catch (_error) {
+            // Volume doesn't exist, create it
+            try {
+                await this.docker.createVolume({
+                    Name: volumeName,
+                    Labels: {
+                        "lobu.io/agent-id": agentId,
+                        "lobu.io/created": new Date().toISOString(),
+                    },
+                });
+                logger.info(`✅ Created volume: ${volumeName}`);
+                volumeCreated = true;
+            }
+            catch (createError) {
+                // Handle race condition: volume created by another thread
+                if (createError.statusCode === 409 ||
+                    ((_a = createError.message) === null || _a === void 0 ? void 0 : _a.includes("already exists"))) {
+                    logger.info(`Volume ${volumeName} was created by another thread`);
+                }
+                else {
+                    throw createError;
+                }
+            }
+        }
+        // Fix volume permissions for new volumes
+        // The claude user in the worker container has UID 1001
+        if (volumeCreated) {
+            try {
+                const initContainer = await this.docker.createContainer({
+                    Image: "alpine:latest",
+                    Cmd: ["chown", "-R", "1001:1001", "/workspace"],
+                    HostConfig: {
+                        AutoRemove: true,
+                        Mounts: [
+                            {
+                                Type: "volume",
+                                Source: volumeName,
+                                Target: "/workspace",
+                            },
+                        ],
+                    },
+                });
+                await initContainer.start();
+                await initContainer.wait();
+                logger.info(`✅ Fixed volume permissions for ${volumeName}`);
+            }
+            catch (permError) {
+                logger.warn(`⚠️ Could not fix volume permissions: ${permError instanceof Error ? permError.message : String(permError)}`);
+            }
+        }
+        return volumeName;
+    }
+    async createDeployment(...args) {
+        var _a, _b, _c, _d;
+        const [deploymentName, username, userId, messageDataRaw] = args;
+        const messageData = messageDataRaw;
+        try {
+            // Use agentId for volume naming (shared across threads in same space)
+            const agentId = messageData === null || messageData === void 0 ? void 0 : messageData.agentId;
+            if (!agentId) {
+                throw new core_1.OrchestratorError(core_1.ErrorCode.DEPLOYMENT_CREATE_FAILED, "Missing agentId in message payload");
+            }
+            // Determine if running in Docker and resolve project paths
+            const isRunningInDocker = process.env.DEPLOYMENT_MODE === "docker";
+            const projectRoot = isRunningInDocker
+                ? process.env.LOBU_DEV_PROJECT_PATH || "/app"
+                : node_path_1.default.join(process.cwd(), "..", "..");
+            const workspaceDir = `${projectRoot}/workspaces/${agentId}`;
+            // Ensure volume exists for production mode (space-scoped)
+            const volumeName = await this.ensureVolume(agentId);
+            // Get common environment variables from base class
+            const commonEnvVars = await this.generateEnvironmentVariables(username, userId, deploymentName, messageData, true);
+            // On macOS/Windows, Docker containers need to use host.docker.internal instead of localhost
+            if (process.platform === "darwin" || process.platform === "win32") {
+                if (commonEnvVars.LOBU_DATABASE_HOST === "localhost" ||
+                    commonEnvVars.LOBU_DATABASE_HOST === "127.0.0.1") {
+                    commonEnvVars.LOBU_DATABASE_HOST = "host.docker.internal";
+                }
+            }
+            // Environment variables from base class already include:
+            // HTTP_PROXY, HTTPS_PROXY, NO_PROXY, NODE_ENV, DEBUG
+            // Provider credentials are injected via provider modules in generateEnvironmentVariables()
+            const envVars = Object.entries(commonEnvVars).map(([key, value]) => `${key}=${value}`);
+            // Check if Nix packages are configured (need writable rootfs for symlinks)
+            const hasNixConfig = ((_c = (_b = (_a = messageData === null || messageData === void 0 ? void 0 : messageData.nixConfig) === null || _a === void 0 ? void 0 : _a.packages) === null || _b === void 0 ? void 0 : _b.length) !== null && _c !== void 0 ? _c : 0) > 0 ||
+                !!((_d = messageData === null || messageData === void 0 ? void 0 : messageData.nixConfig) === null || _d === void 0 ? void 0 : _d.flakeUrl);
+            // Get the Docker Compose project name from environment or use default
+            const composeProjectName = process.env.COMPOSE_PROJECT_NAME || "lobu";
+            const createOptions = {
+                name: deploymentName,
+                Image: this.getWorkerImageReference(),
+                Env: envVars,
+                Labels: Object.assign(Object.assign(Object.assign({}, deployment_utils_1.BASE_WORKER_LABELS), { "lobu.io/created": new Date().toISOString(), "lobu.io/agent-id": agentId, 
+                    // Docker Compose labels to associate with the project
+                    "com.docker.compose.project": composeProjectName, "com.docker.compose.service": deploymentName, "com.docker.compose.oneoff": "False" }), (0, deployment_utils_1.resolvePlatformDeploymentMetadata)(messageData)),
+                HostConfig: Object.assign(Object.assign(Object.assign(Object.assign(Object.assign(Object.assign(Object.assign({}, (process.env.NODE_ENV === "development" && isRunningInDocker
+                    ? {
+                        Binds: [
+                            `${workspaceDir}:/workspace`,
+                            // Mount packages and scripts for hot reload
+                            `${projectRoot}/packages:/app/packages`,
+                            `${projectRoot}/scripts:/app/scripts`,
+                            // Additional custom mounts (optional)
+                            ...(process.env.WORKER_VOLUME_MOUNTS
+                                ? process.env.WORKER_VOLUME_MOUNTS.split(";")
+                                    .filter((mount) => mount.trim())
+                                    .map((mount) => mount
+                                    .replace("${PWD}", projectRoot)
+                                    .replace("${WORKSPACE_DIR}", workspaceDir))
+                                : []),
+                        ],
+                    }
+                    : {
+                        // Production: use named volumes for better isolation
+                        Mounts: [
+                            {
+                                Type: "volume",
+                                Source: volumeName,
+                                Target: "/workspace",
+                                ReadOnly: false,
+                            },
+                        ],
+                    })), { RestartPolicy: {
+                        Name: "unless-stopped",
+                    }, 
+                    // Resource limits similar to K8s
+                    Memory: ResourceParser.parseMemory(this.config.worker.resources.limits.memory), NanoCpus: ResourceParser.parseCpu(this.config.worker.resources.limits.cpu), 
+                    // Always connect to internal network (network isolation always enabled)
+                    // In docker-compose mode: uses compose project prefix
+                    // In host mode: uses plain network name (WORKER_NETWORK env var)
+                    NetworkMode: process.env.WORKER_NETWORK || `${composeProjectName}_lobu-internal` }), (!this.isRunningInContainer() && {
+                    ExtraHosts: ["host.docker.internal:host-gateway"],
+                })), { 
+                    // Security: Drop all capabilities and only add what's needed
+                    CapDrop: ["ALL"], CapAdd: process.env.WORKER_CAPABILITIES
+                        ? process.env.WORKER_CAPABILITIES.split(",")
+                        : [], 
+                    // Security: Prevent privilege escalation
+                    SecurityOpt: [
+                        "no-new-privileges:true",
+                        // Custom seccomp profile (default Docker seccomp is applied automatically)
+                        ...(process.env.WORKER_SECCOMP_PROFILE
+                            ? [`seccomp=${process.env.WORKER_SECCOMP_PROFILE}`]
+                            : []),
+                        // AppArmor profile if specified
+                        ...(process.env.WORKER_APPARMOR_PROFILE
+                            ? [`apparmor=${process.env.WORKER_APPARMOR_PROFILE}`]
+                            : []),
+                    ], 
+                    // User namespace remapping (if Docker daemon is configured for it)
+                    // This makes the root user inside container map to non-root on host
+                    UsernsMode: process.env.WORKER_USERNS_MODE || "", 
+                    // Read-only root filesystem (worker can write to /workspace and /tmp)
+                    // Disabled when Nix packages configured (entrypoint needs to symlink /nix/store)
+                    // Enabled by default for security, set WORKER_READONLY_ROOTFS=false to disable
+                    ReadonlyRootfs: !hasNixConfig && process.env.WORKER_READONLY_ROOTFS !== "false" }), (!hasNixConfig &&
+                    process.env.WORKER_READONLY_ROOTFS !== "false" && {
+                    Tmpfs: {
+                        "/tmp": "rw,noexec,nosuid,size=100m",
+                    },
+                })), { 
+                    // Shared memory for Chromium and other apps requiring /dev/shm
+                    ShmSize: 268435456 }), (this.gvisorAvailable && {
+                    Runtime: "runsc",
+                })),
+                WorkingDir: "/workspace",
+            };
+            const container = await this.docker.createContainer(createOptions);
+            try {
+                await container.start();
+            }
+            catch (startError) {
+                // Clean up orphaned container if start fails
+                logger.error(`Failed to start container ${deploymentName}, removing orphaned container`, startError);
+                try {
+                    await container.remove({ force: true });
+                }
+                catch (removeError) {
+                    logger.error(`Failed to remove orphaned container ${deploymentName}:`, removeError);
+                }
+                throw startError;
+            }
+            // In host mode, also connect the worker to the public network so it can
+            // reach the host gateway via host.docker.internal (internal network blocks host access)
+            if (!this.isRunningInContainer()) {
+                try {
+                    const publicNetwork = this.docker.getNetwork(`${composeProjectName}_lobu-public`);
+                    await publicNetwork.connect({ Container: container.id });
+                }
+                catch (netErr) {
+                    logger.warn(`Could not connect ${deploymentName} to public network: ${netErr instanceof Error ? netErr.message : String(netErr)}`);
+                }
+            }
+            logger.info(`✅ Created and started Docker container: ${deploymentName}`);
+        }
+        catch (error) {
+            throw new core_1.OrchestratorError(core_1.ErrorCode.DEPLOYMENT_CREATE_FAILED, `Failed to create Docker container: ${error instanceof Error ? error.message : String(error)}`, { deploymentName, error }, true);
+        }
+    }
+    async scaleDeployment(deploymentName, replicas) {
+        try {
+            const container = this.docker.getContainer(deploymentName);
+            const containerInfo = await container.inspect();
+            if (replicas === 0 && containerInfo.State.Running) {
+                await container.stop();
+                logger.info(`Stopped container ${deploymentName}`);
+            }
+            else if (replicas === 1 && !containerInfo.State.Running) {
+                await container.start();
+                logger.info(`Started container ${deploymentName}`);
+            }
+        }
+        catch (error) {
+            throw new core_1.OrchestratorError(core_1.ErrorCode.DEPLOYMENT_SCALE_FAILED, `Failed to scale Docker container ${deploymentName}: ${error instanceof Error ? error.message : String(error)}`, { deploymentName, replicas, error }, true);
+        }
+    }
+    async deleteDeployment(deploymentName) {
+        try {
+            const container = this.docker.getContainer(deploymentName);
+            // Stop container if running
+            try {
+                await container.stop();
+                logger.info(`✅ Stopped container: ${deploymentName}`);
+            }
+            catch (_error) {
+                // Container might already be stopped
+                logger.warn(`⚠️  Container ${deploymentName} was not running`);
+            }
+            // Remove container
+            await container.remove();
+            this.activityTimestamps.delete(deploymentName);
+            logger.info(`✅ Removed container: ${deploymentName}`);
+        }
+        catch (error) {
+            const dockerError = error;
+            if (dockerError.statusCode === 404) {
+                logger.warn(`⚠️  Container ${deploymentName} not found (already deleted)`);
+            }
+            else {
+                throw error;
+            }
+        }
+        // NOTE: Space volumes are NOT deleted on deployment deletion
+        // They are shared across threads in the same space and persist
+        // for future conversations. Cleanup is done manually or via separate process.
+    }
+    async updateDeploymentActivity(deploymentName) {
+        // Docker doesn't support runtime label updates like K8s annotations
+        // Track activity in-memory for idle cleanup calculations
+        this.activityTimestamps.set(deploymentName, new Date());
+    }
+    getDispatcherHost() {
+        return this.getHostAddress();
+    }
+}
+exports.DockerDeploymentManager = DockerDeploymentManager;
+//# sourceMappingURL=docker-deployment.js.map

package/dist/orchestration/impl/docker-deployment.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"docker-deployment.js","sourceRoot":"","sources":["../../../src/orchestration/impl/docker-deployment.ts"],"names":[],"mappings":";;;;;;AAAA,sDAAyB;AACzB,0DAA6B;AAC7B,qCAAwE;AACxE,0DAA+B;AAE/B,wEAMoC;AACpC,0DAK6B;AAE7B;;GAEG;AACH,MAAM,cAAc;IAClB,MAAM,CAAC,WAAW,CAAC,SAAiB;QAClC,MAAM,KAAK,GAA2B;YACpC,EAAE,EAAE,IAAI;YACR,EAAE,EAAE,IAAI,GAAG,IAAI;YACf,EAAE,EAAE,IAAI,GAAG,IAAI,GAAG,IAAI;YACtB,CAAC,EAAE,IAAI;YACP,CAAC,EAAE,IAAI,GAAG,IAAI;YACd,CAAC,EAAE,IAAI,GAAG,IAAI,GAAG,IAAI;SACtB,CAAC;QACF,KAAK,MAAM,CAAC,IAAI,EAAE,UAAU,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;YACvD,IAAI,SAAS,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAC;gBAC7B,MAAM,KAAK,GAAG,UAAU,CAAC,SAAS,CAAC,OAAO,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,CAAC;gBACtD,OAAO,KAAK,GAAG,UAAU,CAAC;YAC5B,CAAC;QACH,CAAC;QACD,OAAO,QAAQ,CAAC,SAAS,EAAE,EAAE,CAAC,CAAC;IACjC,CAAC;IAED,MAAM,CAAC,QAAQ,CAAC,MAAc;QAC5B,IAAI,MAAM,CAAC,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC;YACzB,MAAM,UAAU,GAAG,QAAQ,CAAC,MAAM,CAAC,OAAO,CAAC,GAAG,EAAE,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC;YACzD,OAAO,CAAC,UAAU,GAAG,IAAI,CAAC,GAAG,GAAG,CAAC;QACnC,CAAC;QACD,MAAM,KAAK,GAAG,UAAU,CAAC,MAAM,CAAC,CAAC;QACjC,OAAO,KAAK,GAAG,GAAG,CAAC;IACrB,CAAC;CACF;AAED,MAAM,MAAM,GAAG,IAAA,mBAAY,EAAC,cAAc,CAAC,CAAC;AAE5C,MAAa,uBAAwB,SAAQ,+CAAqB;IAKhE,YACE,MAA0B,EAC1B,oBAA2C,EAC3C,kBAAyC,EAAE;QAE3C,KAAK,CAAC,MAAM,EAAE,oBAAoB,EAAE,eAAe,CAAC,CAAC;QAR/C,oBAAe,GAAG,KAAK,CAAC;QACxB,uBAAkB,GAAsB,IAAI,GAAG,EAAE,CAAC;QASxD,uDAAuD;QACvD,IAAI,CAAC,MAAM,GAAG,IAAI,mBAAM,CAAC,EAAE,UAAU,EAAE,sBAAsB,EAAE,CAAC,CAAC;QAEjE,kDAAkD;QAClD,IAAI,CAAC,uBAAuB,EAAE,CAAC;QAE/B,0DAA0D;QAC1D,IAAI,CAAC,qBAAqB,EAAE,CAAC;IAC/B,CAAC;IAEO,KAAK,CAAC,uBAAuB;QACnC,IAAI,CAAC;YACH,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC;YACtC,MAAM,QAAQ,GAAG,IAAI,CAAC,QAAQ,IAAI,EAAE,CAAC;YAErC,IAAI,QAAQ,CAAC,KAAK,IAAI,QAAQ,CAAC,MAAM,EAAE,CAAC;gBACtC,IAAI,CAAC,eAAe,GAAG,IAAI,CAAC;gBAC5B,MAAM,CAAC,IAAI,CACT,iEAAiE,CAClE,CAAC;YACJ,CAAC;iBAAM,CAAC;gBACN,MAAM,CAAC,IAAI,CACT,8DAA8D,CAC/D,CAAC;YACJ,CAAC;QACH,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,MAAM,CAAC,IAAI,CACT,oDAAoD,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,CAC7G,CAAC;QACJ,CAAC;IACH,CAAC;IAED;;;;OAIG;IACK,KAAK,CAAC,qBAAqB;QACjC,4EAA4E;QAC5E,IAAI,OAAO,CAAC,GAAG,CAAC,cAAc,EAAE,CAAC;YAC/B,OAAO;QACT,CAAC;QAED,MAAM,kBAAkB,GAAG,OAAO,CAAC,GAAG,CAAC,oBAAoB,IAAI,MAAM,CAAC;QACtE,MAAM,WAAW,GAAG,GAAG,kBAAkB,gBAAgB,CAAC;QAE1D,IAAI,CAAC;YACH,MAAM,OAAO,GAAG,IAAI,CAAC,MAAM,CAAC,UAAU,CAAC,WAAW,CAAC,CAAC;YACpD,MAAM,IAAI,GAAG,MAAM,OAAO,CAAC,OAAO,EAAE,CAAC;YACrC,IAAI,CAAC,IAAI,CAAC,QAAQ,EAAE,CAAC;gBACnB,MAAM,CAAC,IAAI,CACT,eAAe,WAAW,uEAAuE,CAClG,CAAC;YACJ,CAAC;QACH,CAAC;QAAC,WAAM,CAAC;YACP,wDAAwD;YACxD,IAAI,CAAC;gBACH,MAAM,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC;oBAC9B,IAAI,EAAE,WAAW;oBACjB,QAAQ,EAAE,IAAI;oBACd,MAAM,EAAE,QAAQ;oBAChB,MAAM,EAAE;wBACN,iBAAiB,EAAE,MAAM;wBACzB,iBAAiB,EAAE,kBAAkB;qBACtC;iBACF,CAAC,CAAC;gBACH,MAAM,CAAC,IAAI,CACT,8BAA8B,WAAW,uBAAuB,CACjE,CAAC;YACJ,CAAC;YAAC,OAAO,WAAW,EAAE,CAAC;gBACrB,MAAM,CAAC,KAAK,CACV,qCAAqC,WAAW,KAAK,WAAW,YAAY,KAAK,CAAC,CAAC,CAAC,WAAW,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,WAAW,CAAC,EAAE,CAChI,CAAC;YACJ,CAAC;QACH,CAAC;IACH,CAAC;IAED;;OAEG;IACK,oBAAoB;QAC1B,OAAO,iBAAE,CAAC,UAAU,CAAC,aAAa,CAAC,IAAI,OAAO,CAAC,GAAG,CAAC,SAAS,KAAK,MAAM,CAAC;IAC1E,CAAC;IAED;;;;OAIG;IACK,cAAc;QACpB,IAAI,IAAI,CAAC,oBAAoB,EAAE,EAAE,CAAC;YAChC,OAAO,SAAS,CAAC;QACnB,CAAC;QACD,4EAA4E;QAC5E,OAAO,sBAAsB,CAAC;IAChC,CAAC;IAED;;;OAGG;IACH,KAAK,CAAC,mBAAmB;QACvB,MAAM,SAAS,GAAG,IAAI,CAAC,uBAAuB,EAAE,CAAC;QAEjD,IAAI,CAAC;YACH,MAAM,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,SAAS,CAAC,CAAC,OAAO,EAAE,CAAC;YAChD,MAAM,CAAC,IAAI,CAAC,4BAA4B,SAAS,EAAE,CAAC,CAAC;QACvD,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,MAAM,YAAY,GAChB,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;YAEzD,qCAAqC;YACrC,IACE,YAAY,CAAC,QAAQ,CAAC,eAAe,CAAC;gBACtC,YAAY,CAAC,QAAQ,CAAC,KAAK,CAAC,EAC5B,CAAC;gBACD,MAAM,CAAC,IAAI,CACT,mBAAmB,SAAS,gCAAgC,CAC7D,CAAC;gBACF,IAAI,CAAC;oBACH,MAAM,IAAI,OAAO,CAAO,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;wBAC1C,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,SAAS,EAAE,CAAC,GAAQ,EAAE,MAAW,EAAE,EAAE;4BACpD,IAAI,GAAG;gCAAE,OAAO,MAAM,CAAC,GAAG,CAAC,CAAC;4BAC5B,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,cAAc,CAAC,MAAM,EAAE,CAAC,GAAQ,EAAE,EAAE;gCACpD,IAAI,GAAG;oCAAE,MAAM,CAAC,GAAG,CAAC,CAAC;;oCAChB,OAAO,EAAE,CAAC;4BACjB,CAAC,CAAC,CAAC;wBACL,CAAC,CAAC,CAAC;oBACL,CAAC,CAAC,CAAC;oBACH,MAAM,CAAC,IAAI,CAAC,kBAAkB,SAAS,sBAAsB,CAAC,CAAC;gBACjE,CAAC;gBAAC,OAAO,SAAS,EAAE,CAAC;oBACnB,MAAM,CAAC,KAAK,CACV,iCAAiC,SAAS,GAAG,EAC7C,SAAS,CACV,CAAC;oBACF,MAAM,IAAI,wBAAiB,CACzB,gBAAS,CAAC,wBAAwB,EAClC,gBAAgB,SAAS,yGAAyG,CACnI,CAAC;gBACJ,CAAC;YACH,CAAC;iBAAM,CAAC;gBACN,yBAAyB;gBACzB,MAAM,IAAI,wBAAiB,CACzB,gBAAS,CAAC,wBAAwB,EAClC,mCAAmC,SAAS,KAAK,YAAY,EAAE,CAChE,CAAC;YACJ,CAAC;QACH,CAAC;IACH,CAAC;IAED,KAAK,CAAC,eAAe;QACnB,IAAI,CAAC;YACH,MAAM,UAAU,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,cAAc,CAAC;gBAClD,GAAG,EAAE,IAAI;gBACT,OAAO,EAAE;oBACP,KAAK,EAAE,CAAC,oCAAoC,CAAC;iBAC9C;aACF,CAAC,CAAC;YAEH,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;YACvB,MAAM,oBAAoB,GAAG,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,kBAAkB,CAAC;YACnE,MAAM,WAAW,GAAG,IAAA,0CAAuB,EAAC,IAAI,CAAC,MAAM,CAAC,CAAC;YAEzD,OAAO,UAAU,CAAC,GAAG,CAAC,CAAC,aAAmC,EAAE,EAAE;;gBAC5D,MAAM,cAAc,GAAG,CAAA,MAAA,aAAa,CAAC,KAAK,CAAC,CAAC,CAAC,0CAAE,SAAS,CAAC,CAAC,CAAC,KAAI,EAAE,CAAC,CAAC,qBAAqB;gBAExF,sEAAsE;gBACtE,MAAM,eAAe,GAAG,IAAI,CAAC,kBAAkB,CAAC,GAAG,CAAC,cAAc,CAAC,CAAC;gBACpE,MAAM,eAAe,GACnB,CAAA,MAAA,aAAa,CAAC,MAAM,0CAAG,uBAAuB,CAAC;qBAC/C,MAAA,aAAa,CAAC,MAAM,0CAAG,iBAAiB,CAAC,CAAA,CAAC;gBAE5C,MAAM,aAAa,GAAG,eAAe;oBACnC,CAAC,CAAC,IAAI,IAAI,CAAC,eAAe,CAAC;oBAC3B,CAAC,CAAC,IAAI,IAAI,CAAC,aAAa,CAAC,OAAO,GAAG,IAAI,CAAC,CAAC;gBAE3C,gDAAgD;gBAChD,MAAM,YAAY,GAChB,eAAe,IAAI,eAAe,GAAG,aAAa;oBAChD,CAAC,CAAC,eAAe;oBACjB,CAAC,CAAC,aAAa,CAAC;gBACpB,MAAM,QAAQ,GAAG,aAAa,CAAC,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;gBAC3D,OAAO,IAAA,6CAA0B,EAAC;oBAChC,cAAc;oBACd,YAAY;oBACZ,GAAG;oBACH,oBAAoB;oBACpB,WAAW;oBACX,QAAQ;iBACT,CAAC,CAAC;YACL,CAAC,CAAC,CAAC;QACL,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,MAAM,IAAI,wBAAiB,CACzB,gBAAS,CAAC,wBAAwB,EAClC,qCAAqC,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,EAC7F,EAAE,KAAK,EAAE,EACT,IAAI,CACL,CAAC;QACJ,CAAC;IACH,CAAC;IAED;;;;OAIG;IACK,KAAK,CAAC,YAAY,CAAC,OAAe;;QACxC,MAAM,UAAU,GAAG,kBAAkB,OAAO,EAAE,CAAC;QAC/C,IAAI,aAAa,GAAG,KAAK,CAAC;QAE1B,IAAI,CAAC;YACH,sEAAsE;YACtE,MAAM,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,UAAU,CAAC,CAAC,OAAO,EAAE,CAAC;YAClD,MAAM,CAAC,IAAI,CAAC,YAAY,UAAU,iBAAiB,CAAC,CAAC;QACvD,CAAC;QAAC,OAAO,MAAM,EAAE,CAAC;YAChB,kCAAkC;YAClC,IAAI,CAAC;gBACH,MAAM,IAAI,CAAC,MAAM,CAAC,YAAY,CAAC;oBAC7B,IAAI,EAAE,UAAU;oBAChB,MAAM,EAAE;wBACN,kBAAkB,EAAE,OAAO;wBAC3B,iBAAiB,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;qBAC5C;iBACF,CAAC,CAAC;gBACH,MAAM,CAAC,IAAI,CAAC,qBAAqB,UAAU,EAAE,CAAC,CAAC;gBAC/C,aAAa,GAAG,IAAI,CAAC;YACvB,CAAC;YAAC,OAAO,WAAgB,EAAE,CAAC;gBAC1B,0DAA0D;gBAC1D,IACE,WAAW,CAAC,UAAU,KAAK,GAAG;qBAC9B,MAAA,WAAW,CAAC,OAAO,0CAAE,QAAQ,CAAC,gBAAgB,CAAC,CAAA,EAC/C,CAAC;oBACD,MAAM,CAAC,IAAI,CAAC,UAAU,UAAU,gCAAgC,CAAC,CAAC;gBACpE,CAAC;qBAAM,CAAC;oBACN,MAAM,WAAW,CAAC;gBACpB,CAAC;YACH,CAAC;QACH,CAAC;QAED,yCAAyC;QACzC,uDAAuD;QACvD,IAAI,aAAa,EAAE,CAAC;YAClB,IAAI,CAAC;gBACH,MAAM,aAAa,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,eAAe,CAAC;oBACtD,KAAK,EAAE,eAAe;oBACtB,GAAG,EAAE,CAAC,OAAO,EAAE,IAAI,EAAE,WAAW,EAAE,YAAY,CAAC;oBAC/C,UAAU,EAAE;wBACV,UAAU,EAAE,IAAI;wBAChB,MAAM,EAAE;4BACN;gCACE,IAAI,EAAE,QAAQ;gCACd,MAAM,EAAE,UAAU;gCAClB,MAAM,EAAE,YAAY;6BACrB;yBACF;qBACF;iBACF,CAAC,CAAC;gBACH,MAAM,aAAa,CAAC,KAAK,EAAE,CAAC;gBAC5B,MAAM,aAAa,CAAC,IAAI,EAAE,CAAC;gBAC3B,MAAM,CAAC,IAAI,CAAC,kCAAkC,UAAU,EAAE,CAAC,CAAC;YAC9D,CAAC;YAAC,OAAO,SAAS,EAAE,CAAC;gBACnB,MAAM,CAAC,IAAI,CACT,wCAAwC,SAAS,YAAY,KAAK,CAAC,CAAC,CAAC,SAAS,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,SAAS,CAAC,EAAE,CAC7G,CAAC;YACJ,CAAC;QACH,CAAC;QAED,OAAO,UAAU,CAAC;IACpB,CAAC;IAED,KAAK,CAAC,gBAAgB,CACpB,GAAG,IAA2D;;QAE9D,MAAM,CAAC,cAAc,EAAE,QAAQ,EAAE,MAAM,EAAE,cAAc,CAAC,GAAG,IAAI,CAAC;QAChE,MAAM,WAAW,GAAG,cAA4C,CAAC;QAEjE,IAAI,CAAC;YACH,sEAAsE;YACtE,MAAM,OAAO,GAAG,WAAW,aAAX,WAAW,uBAAX,WAAW,CAAE,OAAO,CAAC;YACrC,IAAI,CAAC,OAAO,EAAE,CAAC;gBACb,MAAM,IAAI,wBAAiB,CACzB,gBAAS,CAAC,wBAAwB,EAClC,oCAAoC,CACrC,CAAC;YACJ,CAAC;YAED,2DAA2D;YAC3D,MAAM,iBAAiB,GAAG,OAAO,CAAC,GAAG,CAAC,eAAe,KAAK,QAAQ,CAAC;YACnE,MAAM,WAAW,GAAG,iBAAiB;gBACnC,CAAC,CAAC,OAAO,CAAC,GAAG,CAAC,qBAAqB,IAAI,MAAM;gBAC7C,CAAC,CAAC,mBAAI,CAAC,IAAI,CAAC,OAAO,CAAC,GAAG,EAAE,EAAE,IAAI,EAAE,IAAI,CAAC,CAAC;YAEzC,MAAM,YAAY,GAAG,GAAG,WAAW,eAAe,OAAO,EAAE,CAAC;YAE5D,0DAA0D;YAC1D,MAAM,UAAU,GAAG,MAAM,IAAI,CAAC,YAAY,CAAC,OAAO,CAAC,CAAC;YAEpD,mDAAmD;YACnD,MAAM,aAAa,GAAG,MAAM,IAAI,CAAC,4BAA4B,CAC3D,QAAQ,EACR,MAAM,EACN,cAAc,EACd,WAAW,EACX,IAAI,CACL,CAAC;YAEF,4FAA4F;YAC5F,IAAI,OAAO,CAAC,QAAQ,KAAK,QAAQ,IAAI,OAAO,CAAC,QAAQ,KAAK,OAAO,EAAE,CAAC;gBAClE,IACE,aAAa,CAAC,kBAAkB,KAAK,WAAW;oBAChD,aAAa,CAAC,kBAAkB,KAAK,WAAW,EAChD,CAAC;oBACD,aAAa,CAAC,kBAAkB,GAAG,sBAAsB,CAAC;gBAC5D,CAAC;YACH,CAAC;YAED,yDAAyD;YACzD,qDAAqD;YACrD,2FAA2F;YAC3F,MAAM,OAAO,GAAG,MAAM,CAAC,OAAO,CAAC,aAAa,CAAC,CAAC,GAAG,CAC/C,CAAC,CAAC,GAAG,EAAE,KAAK,CAAC,EAAE,EAAE,CAAC,GAAG,GAAG,IAAI,KAAK,EAAE,CACpC,CAAC;YAEF,2EAA2E;YAC3E,MAAM,YAAY,GAChB,CAAC,MAAA,MAAA,MAAA,WAAW,aAAX,WAAW,uBAAX,WAAW,CAAE,SAAS,0CAAE,QAAQ,0CAAE,MAAM,mCAAI,CAAC,CAAC,GAAG,CAAC;gBACnD,CAAC,CAAC,CAAA,MAAA,WAAW,aAAX,WAAW,uBAAX,WAAW,CAAE,SAAS,0CAAE,QAAQ,CAAA,CAAC;YAErC,sEAAsE;YACtE,MAAM,kBAAkB,GAAG,OAAO,CAAC,GAAG,CAAC,oBAAoB,IAAI,MAAM,CAAC;YAEtE,MAAM,aAAa,GAAkC;gBACnD,IAAI,EAAE,cAAc;gBACpB,KAAK,EAAE,IAAI,CAAC,uBAAuB,EAAE;gBACrC,GAAG,EAAE,OAAO;gBACZ,MAAM,gDACD,qCAAkB,KACrB,iBAAiB,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,EAC3C,kBAAkB,EAAE,OAAO;oBAC3B,sDAAsD;oBACtD,4BAA4B,EAAE,kBAAkB,EAChD,4BAA4B,EAAE,cAAc,EAC5C,2BAA2B,EAAE,OAAO,KAEjC,IAAA,oDAAiC,EAAC,WAAW,CAAC,CAClD;gBACD,UAAU,wGAGL,CAAC,OAAO,CAAC,GAAG,CAAC,QAAQ,KAAK,aAAa,IAAI,iBAAiB;oBAC7D,CAAC,CAAC;wBACE,KAAK,EAAE;4BACL,GAAG,YAAY,aAAa;4BAC5B,4CAA4C;4BAC5C,GAAG,WAAW,yBAAyB;4BACvC,GAAG,WAAW,uBAAuB;4BACrC,sCAAsC;4BACtC,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,oBAAoB;gCAClC,CAAC,CAAC,OAAO,CAAC,GAAG,CAAC,oBAAoB,CAAC,KAAK,CAAC,GAAG,CAAC;qCACxC,MAAM,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC;qCAC/B,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CACb,KAAK;qCACF,OAAO,CAAC,QAAQ,EAAE,WAAW,CAAC;qCAC9B,OAAO,CAAC,kBAAkB,EAAE,YAAY,CAAC,CAC7C;gCACL,CAAC,CAAC,EAAE,CAAC;yBACR;qBACF;oBACH,CAAC,CAAC;wBACE,qDAAqD;wBACrD,MAAM,EAAE;4BACN;gCACE,IAAI,EAAE,QAAQ;gCACd,MAAM,EAAE,UAAU;gCAClB,MAAM,EAAE,YAAY;gCACpB,QAAQ,EAAE,KAAK;6BAChB;yBACF;qBACF,CAAC,KACN,aAAa,EAAE;wBACb,IAAI,EAAE,gBAAgB;qBACvB;oBACD,iCAAiC;oBACjC,MAAM,EAAE,cAAc,CAAC,WAAW,CAChC,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,SAAS,CAAC,MAAM,CAAC,MAAM,CAC3C,EACD,QAAQ,EAAE,cAAc,CAAC,QAAQ,CAC/B,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,SAAS,CAAC,MAAM,CAAC,GAAG,CACxC;oBACD,wEAAwE;oBACxE,sDAAsD;oBACtD,iEAAiE;oBACjE,WAAW,EACT,OAAO,CAAC,GAAG,CAAC,cAAc,IAAI,GAAG,kBAAkB,gBAAgB,KAGlE,CAAC,CAAC,IAAI,CAAC,oBAAoB,EAAE,IAAI;oBAClC,UAAU,EAAE,CAAC,mCAAmC,CAAC;iBAClD,CAAC;oBACF,6DAA6D;oBAC7D,OAAO,EAAE,CAAC,KAAK,CAAC,EAChB,MAAM,EAAE,OAAO,CAAC,GAAG,CAAC,mBAAmB;wBACrC,CAAC,CAAC,OAAO,CAAC,GAAG,CAAC,mBAAmB,CAAC,KAAK,CAAC,GAAG,CAAC;wBAC5C,CAAC,CAAC,EAAE;oBACN,yCAAyC;oBACzC,WAAW,EAAE;wBACX,wBAAwB;wBACxB,2EAA2E;wBAC3E,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,sBAAsB;4BACpC,CAAC,CAAC,CAAC,WAAW,OAAO,CAAC,GAAG,CAAC,sBAAsB,EAAE,CAAC;4BACnD,CAAC,CAAC,EAAE,CAAC;wBACP,gCAAgC;wBAChC,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,uBAAuB;4BACrC,CAAC,CAAC,CAAC,YAAY,OAAO,CAAC,GAAG,CAAC,uBAAuB,EAAE,CAAC;4BACrD,CAAC,CAAC,EAAE,CAAC;qBACR;oBACD,mEAAmE;oBACnE,oEAAoE;oBACpE,UAAU,EAAE,OAAO,CAAC,GAAG,CAAC,kBAAkB,IAAI,EAAE;oBAChD,sEAAsE;oBACtE,iFAAiF;oBACjF,+EAA+E;oBAC/E,cAAc,EACZ,CAAC,YAAY,IAAI,OAAO,CAAC,GAAG,CAAC,sBAAsB,KAAK,OAAO,KAE9D,CAAC,CAAC,YAAY;oBACf,OAAO,CAAC,GAAG,CAAC,sBAAsB,KAAK,OAAO,IAAI;oBAChD,KAAK,EAAE;wBACL,MAAM,EAAE,4BAA4B;qBACrC;iBACF,CAAC;oBACJ,+DAA+D;oBAC/D,OAAO,EAAE,SAAS,KAEf,CAAC,IAAI,CAAC,eAAe,IAAI;oBAC1B,OAAO,EAAE,OAAO;iBACjB,CAAC,CACH;gBACD,UAAU,EAAE,YAAY;aACzB,CAAC;YAEF,MAAM,SAAS,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,eAAe,CAAC,aAAa,CAAC,CAAC;YACnE,IAAI,CAAC;gBACH,MAAM,SAAS,CAAC,KAAK,EAAE,CAAC;YAC1B,CAAC;YAAC,OAAO,UAAU,EAAE,CAAC;gBACpB,6CAA6C;gBAC7C,MAAM,CAAC,KAAK,CACV,6BAA6B,cAAc,+BAA+B,EAC1E,UAAU,CACX,CAAC;gBACF,IAAI,CAAC;oBACH,MAAM,SAAS,CAAC,MAAM,CAAC,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;gBAC1C,CAAC;gBAAC,OAAO,WAAW,EAAE,CAAC;oBACrB,MAAM,CAAC,KAAK,CACV,uCAAuC,cAAc,GAAG,EACxD,WAAW,CACZ,CAAC;gBACJ,CAAC;gBACD,MAAM,UAAU,CAAC;YACnB,CAAC;YAED,wEAAwE;YACxE,wFAAwF;YACxF,IAAI,CAAC,IAAI,CAAC,oBAAoB,EAAE,EAAE,CAAC;gBACjC,IAAI,CAAC;oBACH,MAAM,aAAa,GAAG,IAAI,CAAC,MAAM,CAAC,UAAU,CAC1C,GAAG,kBAAkB,cAAc,CACpC,CAAC;oBACF,MAAM,aAAa,CAAC,OAAO,CAAC,EAAE,SAAS,EAAE,SAAS,CAAC,EAAE,EAAE,CAAC,CAAC;gBAC3D,CAAC;gBAAC,OAAO,MAAM,EAAE,CAAC;oBAChB,MAAM,CAAC,IAAI,CACT,qBAAqB,cAAc,uBAAuB,MAAM,YAAY,KAAK,CAAC,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,EAAE,CACtH,CAAC;gBACJ,CAAC;YACH,CAAC;YAED,MAAM,CAAC,IAAI,CAAC,2CAA2C,cAAc,EAAE,CAAC,CAAC;QAC3E,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,MAAM,IAAI,wBAAiB,CACzB,gBAAS,CAAC,wBAAwB,EAClC,sCAAsC,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,EAC9F,EAAE,cAAc,EAAE,KAAK,EAAE,EACzB,IAAI,CACL,CAAC;QACJ,CAAC;IACH,CAAC;IAED,KAAK,CAAC,eAAe,CACnB,cAAsB,EACtB,QAAgB;QAEhB,IAAI,CAAC;YACH,MAAM,SAAS,GAAG,IAAI,CAAC,MAAM,CAAC,YAAY,CAAC,cAAc,CAAC,CAAC;YAC3D,MAAM,aAAa,GAAG,MAAM,SAAS,CAAC,OAAO,EAAE,CAAC;YAEhD,IAAI,QAAQ,KAAK,CAAC,IAAI,aAAa,CAAC,KAAK,CAAC,OAAO,EAAE,CAAC;gBAClD,MAAM,SAAS,CAAC,IAAI,EAAE,CAAC;gBACvB,MAAM,CAAC,IAAI,CAAC,qBAAqB,cAAc,EAAE,CAAC,CAAC;YACrD,CAAC;iBAAM,IAAI,QAAQ,KAAK,CAAC,IAAI,CAAC,aAAa,CAAC,KAAK,CAAC,OAAO,EAAE,CAAC;gBAC1D,MAAM,SAAS,CAAC,KAAK,EAAE,CAAC;gBACxB,MAAM,CAAC,IAAI,CAAC,qBAAqB,cAAc,EAAE,CAAC,CAAC;YACrD,CAAC;QACH,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,MAAM,IAAI,wBAAiB,CACzB,gBAAS,CAAC,uBAAuB,EACjC,oCAAoC,cAAc,KAAK,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,EAC/G,EAAE,cAAc,EAAE,QAAQ,EAAE,KAAK,EAAE,EACnC,IAAI,CACL,CAAC;QACJ,CAAC;IACH,CAAC;IAED,KAAK,CAAC,gBAAgB,CAAC,cAAsB;QAC3C,IAAI,CAAC;YACH,MAAM,SAAS,GAAG,IAAI,CAAC,MAAM,CAAC,YAAY,CAAC,cAAc,CAAC,CAAC;YAE3D,4BAA4B;YAC5B,IAAI,CAAC;gBACH,MAAM,SAAS,CAAC,IAAI,EAAE,CAAC;gBACvB,MAAM,CAAC,IAAI,CAAC,wBAAwB,cAAc,EAAE,CAAC,CAAC;YACxD,CAAC;YAAC,OAAO,MAAM,EAAE,CAAC;gBAChB,qCAAqC;gBACrC,MAAM,CAAC,IAAI,CAAC,iBAAiB,cAAc,kBAAkB,CAAC,CAAC;YACjE,CAAC;YAED,mBAAmB;YACnB,MAAM,SAAS,CAAC,MAAM,EAAE,CAAC;YACzB,IAAI,CAAC,kBAAkB,CAAC,MAAM,CAAC,cAAc,CAAC,CAAC;YAC/C,MAAM,CAAC,IAAI,CAAC,wBAAwB,cAAc,EAAE,CAAC,CAAC;QACxD,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,MAAM,WAAW,GAAG,KAAgC,CAAC;YACrD,IAAI,WAAW,CAAC,UAAU,KAAK,GAAG,EAAE,CAAC;gBACnC,MAAM,CAAC,IAAI,CACT,iBAAiB,cAAc,8BAA8B,CAC9D,CAAC;YACJ,CAAC;iBAAM,CAAC;gBACN,MAAM,KAAK,CAAC;YACd,CAAC;QACH,CAAC;QAED,6DAA6D;QAC7D,+DAA+D;QAC/D,8EAA8E;IAChF,CAAC;IAED,KAAK,CAAC,wBAAwB,CAAC,cAAsB;QACnD,oEAAoE;QACpE,yDAAyD;QACzD,IAAI,CAAC,kBAAkB,CAAC,GAAG,CAAC,cAAc,EAAE,IAAI,IAAI,EAAE,CAAC,CAAC;IAC1D,CAAC;IAES,iBAAiB;QACzB,OAAO,IAAI,CAAC,cAAc,EAAE,CAAC;IAC/B,CAAC;CACF;AAtjBD,0DAsjBC"}

package/dist/orchestration/impl/embedded-deployment.d.ts

@@ -0,0 +1,16 @@
+import type { ModelProviderModule } from "../../modules/module-system";
+import { BaseDeploymentManager, type DeploymentInfo, type ModuleEnvVarsBuilder, type OrchestratorConfig } from "../base-deployment-manager";
+export declare class EmbeddedDeploymentManager extends BaseDeploymentManager {
+    private workers;
+    constructor(config: OrchestratorConfig, moduleEnvVarsBuilder?: ModuleEnvVarsBuilder, providerModules?: ModelProviderModule[]);
+    protected getDispatcherHost(): string;
+    validateWorkerImage(): Promise<void>;
+    createDeployment(...args: Parameters<BaseDeploymentManager["createDeployment"]>): Promise<void>;
+    scaleDeployment(deploymentName: string, replicas: number): Promise<void>;
+    deleteDeployment(deploymentName: string): Promise<void>;
+    listDeployments(): Promise<DeploymentInfo[]>;
+    updateDeploymentActivity(deploymentName: string): Promise<void>;
+    /** Send SIGTERM, then SIGKILL after timeout. */
+    private killWorker;
+}
+//# sourceMappingURL=embedded-deployment.d.ts.map

package/dist/orchestration/impl/embedded-deployment.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"embedded-deployment.d.ts","sourceRoot":"","sources":["../../../src/orchestration/impl/embedded-deployment.ts"],"names":[],"mappings":"AAIA,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,6BAA6B,CAAC;AACvE,OAAO,EACL,qBAAqB,EACrB,KAAK,cAAc,EAEnB,KAAK,oBAAoB,EACzB,KAAK,kBAAkB,EACxB,MAAM,4BAA4B,CAAC;AA0CpC,qBAAa,yBAA0B,SAAQ,qBAAqB;IAClE,OAAO,CAAC,OAAO,CAA+C;gBAG5D,MAAM,EAAE,kBAAkB,EAC1B,oBAAoB,CAAC,EAAE,oBAAoB,EAC3C,eAAe,GAAE,mBAAmB,EAAO;IAK7C,SAAS,CAAC,iBAAiB,IAAI,MAAM;IAI/B,mBAAmB,IAAI,OAAO,CAAC,IAAI,CAAC;IAWpC,gBAAgB,CACpB,GAAG,IAAI,EAAE,UAAU,CAAC,qBAAqB,CAAC,kBAAkB,CAAC,CAAC,GAC7D,OAAO,CAAC,IAAI,CAAC;IA+GV,eAAe,CACnB,cAAc,EAAE,MAAM,EACtB,QAAQ,EAAE,MAAM,GACf,OAAO,CAAC,IAAI,CAAC;IAaV,gBAAgB,CAAC,cAAc,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAQvD,eAAe,IAAI,OAAO,CAAC,cAAc,EAAE,CAAC;IAqB5C,wBAAwB,CAAC,cAAc,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAOrE,gDAAgD;IAChD,OAAO,CAAC,UAAU;CAsBnB"}