@lobu/gateway 2.8.0

package/dist/orchestration/impl/embedded-deployment.js

@@ -0,0 +1,195 @@
+"use strict";
+var __importDefault = (this && this.__importDefault) || function (mod) {
+    return (mod && mod.__esModule) ? mod : { "default": mod };
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.EmbeddedDeploymentManager = void 0;
+const node_child_process_1 = require("node:child_process");
+const node_fs_1 = __importDefault(require("node:fs"));
+const node_path_1 = __importDefault(require("node:path"));
+const core_1 = require("@lobu/core");
+const base_deployment_manager_1 = require("../base-deployment-manager");
+const deployment_utils_1 = require("../deployment-utils");
+const logger = (0, core_1.createLogger)("orchestrator");
+/** Timeout (ms) to wait for graceful shutdown before SIGKILL. */
+const KILL_TIMEOUT_MS = 5000;
+const WORKER_BIN_DIR_CANDIDATES = [
+    node_path_1.default.resolve("node_modules/.bin"),
+    node_path_1.default.resolve("packages/worker/node_modules/.bin"),
+    "/app/node_modules/.bin",
+    "/app/packages/worker/node_modules/.bin",
+];
+function buildEmbeddedWorkerPath(existingPath) {
+    const segments = (existingPath || "").split(":").filter(Boolean);
+    for (const candidate of [...WORKER_BIN_DIR_CANDIDATES].reverse()) {
+        if (!node_fs_1.default.existsSync(candidate))
+            continue;
+        if (segments.includes(candidate))
+            continue;
+        segments.unshift(candidate);
+    }
+    return segments.length > 0 ? segments.join(":") : existingPath;
+}
+function getBunExecutable() {
+    return node_path_1.default.basename(process.execPath).startsWith("bun")
+        ? process.execPath
+        : "bun";
+}
+class EmbeddedDeploymentManager extends base_deployment_manager_1.BaseDeploymentManager {
+    constructor(config, moduleEnvVarsBuilder, providerModules = []) {
+        super(config, moduleEnvVarsBuilder, providerModules);
+        this.workers = new Map();
+    }
+    getDispatcherHost() {
+        return "localhost";
+    }
+    async validateWorkerImage() {
+        const entryPoint = node_path_1.default.resolve("packages/worker/src/index.ts");
+        if (!node_fs_1.default.existsSync(entryPoint)) {
+            throw new core_1.OrchestratorError(core_1.ErrorCode.DEPLOYMENT_CREATE_FAILED, `Worker entry point not found: ${entryPoint}. Run from the project root.`);
+        }
+        logger.debug(`Worker entry point verified: ${entryPoint}`);
+    }
+    async createDeployment(...args) {
+        var _a, _b, _c, _d, _e, _f;
+        const [deploymentName, username, userId, messageDataRaw] = args;
+        const messageData = messageDataRaw;
+        const agentId = messageData === null || messageData === void 0 ? void 0 : messageData.agentId;
+        if (!agentId) {
+            throw new core_1.OrchestratorError(core_1.ErrorCode.DEPLOYMENT_CREATE_FAILED, "Missing agentId in message payload");
+        }
+        const workspaceDir = node_path_1.default.resolve(`workspaces/${agentId}`);
+        node_fs_1.default.mkdirSync(workspaceDir, { recursive: true });
+        const commonEnvVars = await this.generateEnvironmentVariables(username, userId, deploymentName, messageData, true);
+        commonEnvVars.WORKSPACE_DIR = workspaceDir;
+        commonEnvVars.DEPLOYMENT_MODE = "embedded";
+        const embeddedPath = buildEmbeddedWorkerPath(commonEnvVars.PATH || process.env.PATH);
+        if (embeddedPath) {
+            commonEnvVars.PATH = embeddedPath;
+        }
+        // Serialize allowed domains for worker-side just-bash bootstrap
+        const allowedDomains = (_b = (_a = messageData === null || messageData === void 0 ? void 0 : messageData.networkConfig) === null || _a === void 0 ? void 0 : _a.allowedDomains) !== null && _b !== void 0 ? _b : [];
+        if (allowedDomains.length > 0) {
+            commonEnvVars.JUST_BASH_ALLOWED_DOMAINS = JSON.stringify(allowedDomains);
+        }
+        // Determine spawn command based on nix packages
+        const nixPackages = (_d = (_c = messageData === null || messageData === void 0 ? void 0 : messageData.nixConfig) === null || _c === void 0 ? void 0 : _c.packages) !== null && _d !== void 0 ? _d : [];
+        const workerEntryPoint = node_path_1.default.resolve("packages/worker/src/index.ts");
+        const bunExecutable = getBunExecutable();
+        let command;
+        let spawnArgs;
+        if (nixPackages.length > 0) {
+            // Wrap in nix-shell so nix binaries are on PATH
+            command = "nix-shell";
+            spawnArgs = [
+                "-p",
+                ...nixPackages,
+                "--run",
+                `${bunExecutable} run ${workerEntryPoint}`,
+            ];
+            logger.info(`Spawning embedded worker ${deploymentName} with nix packages: ${nixPackages.join(", ")}`);
+        }
+        else {
+            command = bunExecutable;
+            spawnArgs = ["run", workerEntryPoint];
+        }
+        const child = (0, node_child_process_1.spawn)(command, spawnArgs, {
+            env: Object.assign(Object.assign({}, process.env), commonEnvVars),
+            cwd: workspaceDir,
+            stdio: ["ignore", "pipe", "pipe"],
+        });
+        // Pipe child stdout/stderr to gateway logger
+        (_e = child.stdout) === null || _e === void 0 ? void 0 : _e.on("data", (data) => {
+            for (const line of data.toString().trimEnd().split("\n")) {
+                logger.info({ worker: deploymentName }, line);
+            }
+        });
+        (_f = child.stderr) === null || _f === void 0 ? void 0 : _f.on("data", (data) => {
+            for (const line of data.toString().trimEnd().split("\n")) {
+                logger.warn({ worker: deploymentName }, line);
+            }
+        });
+        // Handle child exit (use once to prevent duplicate handler invocations)
+        child.once("exit", (code, signal) => {
+            const entry = this.workers.get(deploymentName);
+            if (entry) {
+                this.workers.delete(deploymentName);
+                if (signal) {
+                    logger.info(`Embedded worker ${deploymentName} exited with signal ${signal}`);
+                }
+                else if (code !== 0) {
+                    logger.error(`Embedded worker ${deploymentName} exited with code ${code}`);
+                }
+                else {
+                    logger.info(`Embedded worker ${deploymentName} exited cleanly`);
+                }
+            }
+        });
+        this.workers.set(deploymentName, {
+            process: child,
+            env: commonEnvVars,
+            lastActivity: new Date(),
+            workspaceDir,
+        });
+        logger.info(`Started embedded worker subprocess for ${deploymentName} (pid=${child.pid})`);
+    }
+    async scaleDeployment(deploymentName, replicas) {
+        const entry = this.workers.get(deploymentName);
+        if (replicas === 0 && entry) {
+            this.killWorker(entry, deploymentName);
+            logger.info(`Stopped embedded worker ${deploymentName}`);
+        }
+        else if (replicas === 1 && !entry) {
+            logger.warn(`Cannot scale up ${deploymentName} — use createDeployment to re-spawn`);
+        }
+    }
+    async deleteDeployment(deploymentName) {
+        const entry = this.workers.get(deploymentName);
+        if (entry) {
+            this.killWorker(entry, deploymentName);
+            logger.info(`Stopped embedded worker: ${deploymentName}`);
+        }
+    }
+    async listDeployments() {
+        const now = Date.now();
+        const idleThresholdMinutes = this.config.worker.idleCleanupMinutes;
+        const veryOldDays = (0, deployment_utils_1.getVeryOldThresholdDays)(this.config);
+        const results = [];
+        for (const [deploymentName, entry] of this.workers) {
+            results.push((0, deployment_utils_1.buildDeploymentInfoSummary)({
+                deploymentName,
+                lastActivity: entry.lastActivity,
+                now,
+                idleThresholdMinutes,
+                veryOldDays,
+                replicas: 1,
+            }));
+        }
+        return results;
+    }
+    async updateDeploymentActivity(deploymentName) {
+        const entry = this.workers.get(deploymentName);
+        if (entry) {
+            entry.lastActivity = new Date();
+        }
+    }
+    /** Send SIGTERM, then SIGKILL after timeout. */
+    killWorker(entry, deploymentName) {
+        const child = entry.process;
+        // Delete from map first to prevent race with exit handler
+        this.workers.delete(deploymentName);
+        // Check if already exited after map deletion
+        if (child.exitCode !== null || child.killed)
+            return;
+        child.kill("SIGTERM");
+        const killTimer = setTimeout(() => {
+            if (child.exitCode === null && !child.killed) {
+                logger.warn(`Embedded worker ${deploymentName} did not exit after SIGTERM, sending SIGKILL`);
+                child.kill("SIGKILL");
+            }
+        }, KILL_TIMEOUT_MS);
+        child.once("exit", () => clearTimeout(killTimer));
+    }
+}
+exports.EmbeddedDeploymentManager = EmbeddedDeploymentManager;
+//# sourceMappingURL=embedded-deployment.js.map

package/dist/orchestration/impl/embedded-deployment.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"embedded-deployment.js","sourceRoot":"","sources":["../../../src/orchestration/impl/embedded-deployment.ts"],"names":[],"mappings":";;;;;;AAAA,2DAA8D;AAC9D,sDAAyB;AACzB,0DAA6B;AAC7B,qCAAwE;AAExE,wEAMoC;AACpC,0DAG6B;AAE7B,MAAM,MAAM,GAAG,IAAA,mBAAY,EAAC,cAAc,CAAC,CAAC;AAE5C,iEAAiE;AACjE,MAAM,eAAe,GAAG,IAAK,CAAC;AAC9B,MAAM,yBAAyB,GAAG;IAChC,mBAAI,CAAC,OAAO,CAAC,mBAAmB,CAAC;IACjC,mBAAI,CAAC,OAAO,CAAC,mCAAmC,CAAC;IACjD,wBAAwB;IACxB,wCAAwC;CAChC,CAAC;AASX,SAAS,uBAAuB,CAAC,YAAqB;IACpD,MAAM,QAAQ,GAAG,CAAC,YAAY,IAAI,EAAE,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;IAEjE,KAAK,MAAM,SAAS,IAAI,CAAC,GAAG,yBAAyB,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC;QACjE,IAAI,CAAC,iBAAE,CAAC,UAAU,CAAC,SAAS,CAAC;YAAE,SAAS;QACxC,IAAI,QAAQ,CAAC,QAAQ,CAAC,SAAS,CAAC;YAAE,SAAS;QAC3C,QAAQ,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC;IAC9B,CAAC;IAED,OAAO,QAAQ,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,YAAY,CAAC;AACjE,CAAC;AAED,SAAS,gBAAgB;IACvB,OAAO,mBAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC,UAAU,CAAC,KAAK,CAAC;QACtD,CAAC,CAAC,OAAO,CAAC,QAAQ;QAClB,CAAC,CAAC,KAAK,CAAC;AACZ,CAAC;AAED,MAAa,yBAA0B,SAAQ,+CAAqB;IAGlE,YACE,MAA0B,EAC1B,oBAA2C,EAC3C,kBAAyC,EAAE;QAE3C,KAAK,CAAC,MAAM,EAAE,oBAAoB,EAAE,eAAe,CAAC,CAAC;QAP/C,YAAO,GAAqC,IAAI,GAAG,EAAE,CAAC;IAQ9D,CAAC;IAES,iBAAiB;QACzB,OAAO,WAAW,CAAC;IACrB,CAAC;IAED,KAAK,CAAC,mBAAmB;QACvB,MAAM,UAAU,GAAG,mBAAI,CAAC,OAAO,CAAC,8BAA8B,CAAC,CAAC;QAChE,IAAI,CAAC,iBAAE,CAAC,UAAU,CAAC,UAAU,CAAC,EAAE,CAAC;YAC/B,MAAM,IAAI,wBAAiB,CACzB,gBAAS,CAAC,wBAAwB,EAClC,iCAAiC,UAAU,8BAA8B,CAC1E,CAAC;QACJ,CAAC;QACD,MAAM,CAAC,KAAK,CAAC,gCAAgC,UAAU,EAAE,CAAC,CAAC;IAC7D,CAAC;IAED,KAAK,CAAC,gBAAgB,CACpB,GAAG,IAA2D;;QAE9D,MAAM,CAAC,cAAc,EAAE,QAAQ,EAAE,MAAM,EAAE,cAAc,CAAC,GAAG,IAAI,CAAC;QAChE,MAAM,WAAW,GAAG,cAA4C,CAAC;QAEjE,MAAM,OAAO,GAAG,WAAW,aAAX,WAAW,uBAAX,WAAW,CAAE,OAAO,CAAC;QACrC,IAAI,CAAC,OAAO,EAAE,CAAC;YACb,MAAM,IAAI,wBAAiB,CACzB,gBAAS,CAAC,wBAAwB,EAClC,oCAAoC,CACrC,CAAC;QACJ,CAAC;QACD,MAAM,YAAY,GAAG,mBAAI,CAAC,OAAO,CAAC,cAAc,OAAO,EAAE,CAAC,CAAC;QAC3D,iBAAE,CAAC,SAAS,CAAC,YAAY,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;QAEhD,MAAM,aAAa,GAAG,MAAM,IAAI,CAAC,4BAA4B,CAC3D,QAAQ,EACR,MAAM,EACN,cAAc,EACd,WAAW,EACX,IAAI,CACL,CAAC;QAEF,aAAa,CAAC,aAAa,GAAG,YAAY,CAAC;QAC3C,aAAa,CAAC,eAAe,GAAG,UAAU,CAAC;QAC3C,MAAM,YAAY,GAAG,uBAAuB,CAC1C,aAAa,CAAC,IAAI,IAAI,OAAO,CAAC,GAAG,CAAC,IAAI,CACvC,CAAC;QACF,IAAI,YAAY,EAAE,CAAC;YACjB,aAAa,CAAC,IAAI,GAAG,YAAY,CAAC;QACpC,CAAC;QAED,gEAAgE;QAChE,MAAM,cAAc,GAAG,MAAA,MAAA,WAAW,aAAX,WAAW,uBAAX,WAAW,CAAE,aAAa,0CAAE,cAAc,mCAAI,EAAE,CAAC;QACxE,IAAI,cAAc,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YAC9B,aAAa,CAAC,yBAAyB,GAAG,IAAI,CAAC,SAAS,CAAC,cAAc,CAAC,CAAC;QAC3E,CAAC;QAED,gDAAgD;QAChD,MAAM,WAAW,GAAG,MAAA,MAAA,WAAW,aAAX,WAAW,uBAAX,WAAW,CAAE,SAAS,0CAAE,QAAQ,mCAAI,EAAE,CAAC;QAC3D,MAAM,gBAAgB,GAAG,mBAAI,CAAC,OAAO,CAAC,8BAA8B,CAAC,CAAC;QACtE,MAAM,aAAa,GAAG,gBAAgB,EAAE,CAAC;QAEzC,IAAI,OAAe,CAAC;QACpB,IAAI,SAAmB,CAAC;QAExB,IAAI,WAAW,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YAC3B,gDAAgD;YAChD,OAAO,GAAG,WAAW,CAAC;YACtB,SAAS,GAAG;gBACV,IAAI;gBACJ,GAAG,WAAW;gBACd,OAAO;gBACP,GAAG,aAAa,QAAQ,gBAAgB,EAAE;aAC3C,CAAC;YACF,MAAM,CAAC,IAAI,CACT,4BAA4B,cAAc,uBAAuB,WAAW,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAC1F,CAAC;QACJ,CAAC;aAAM,CAAC;YACN,OAAO,GAAG,aAAa,CAAC;YACxB,SAAS,GAAG,CAAC,KAAK,EAAE,gBAAgB,CAAC,CAAC;QACxC,CAAC;QAED,MAAM,KAAK,GAAG,IAAA,0BAAK,EAAC,OAAO,EAAE,SAAS,EAAE;YACtC,GAAG,kCAAO,OAAO,CAAC,GAAG,GAAK,aAAa,CAAE;YACzC,GAAG,EAAE,YAAY;YACjB,KAAK,EAAE,CAAC,QAAQ,EAAE,MAAM,EAAE,MAAM,CAAC;SAClC,CAAC,CAAC;QAEH,6CAA6C;QAC7C,MAAA,KAAK,CAAC,MAAM,0CAAE,EAAE,CAAC,MAAM,EAAE,CAAC,IAAY,EAAE,EAAE;YACxC,KAAK,MAAM,IAAI,IAAI,IAAI,CAAC,QAAQ,EAAE,CAAC,OAAO,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC;gBACzD,MAAM,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,cAAc,EAAE,EAAE,IAAI,CAAC,CAAC;YAChD,CAAC;QACH,CAAC,CAAC,CAAC;QACH,MAAA,KAAK,CAAC,MAAM,0CAAE,EAAE,CAAC,MAAM,EAAE,CAAC,IAAY,EAAE,EAAE;YACxC,KAAK,MAAM,IAAI,IAAI,IAAI,CAAC,QAAQ,EAAE,CAAC,OAAO,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC;gBACzD,MAAM,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,cAAc,EAAE,EAAE,IAAI,CAAC,CAAC;YAChD,CAAC;QACH,CAAC,CAAC,CAAC;QAEH,wEAAwE;QACxE,KAAK,CAAC,IAAI,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,MAAM,EAAE,EAAE;YAClC,MAAM,KAAK,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,cAAc,CAAC,CAAC;YAC/C,IAAI,KAAK,EAAE,CAAC;gBACV,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,cAAc,CAAC,CAAC;gBACpC,IAAI,MAAM,EAAE,CAAC;oBACX,MAAM,CAAC,IAAI,CACT,mBAAmB,cAAc,uBAAuB,MAAM,EAAE,CACjE,CAAC;gBACJ,CAAC;qBAAM,IAAI,IAAI,KAAK,CAAC,EAAE,CAAC;oBACtB,MAAM,CAAC,KAAK,CACV,mBAAmB,cAAc,qBAAqB,IAAI,EAAE,CAC7D,CAAC;gBACJ,CAAC;qBAAM,CAAC;oBACN,MAAM,CAAC,IAAI,CAAC,mBAAmB,cAAc,iBAAiB,CAAC,CAAC;gBAClE,CAAC;YACH,CAAC;QACH,CAAC,CAAC,CAAC;QAEH,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,cAAc,EAAE;YAC/B,OAAO,EAAE,KAAK;YACd,GAAG,EAAE,aAAa;YAClB,YAAY,EAAE,IAAI,IAAI,EAAE;YACxB,YAAY;SACb,CAAC,CAAC;QAEH,MAAM,CAAC,IAAI,CACT,0CAA0C,cAAc,SAAS,KAAK,CAAC,GAAG,GAAG,CAC9E,CAAC;IACJ,CAAC;IAED,KAAK,CAAC,eAAe,CACnB,cAAsB,EACtB,QAAgB;QAEhB,MAAM,KAAK,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,cAAc,CAAC,CAAC;QAE/C,IAAI,QAAQ,KAAK,CAAC,IAAI,KAAK,EAAE,CAAC;YAC5B,IAAI,CAAC,UAAU,CAAC,KAAK,EAAE,cAAc,CAAC,CAAC;YACvC,MAAM,CAAC,IAAI,CAAC,2BAA2B,cAAc,EAAE,CAAC,CAAC;QAC3D,CAAC;aAAM,IAAI,QAAQ,KAAK,CAAC,IAAI,CAAC,KAAK,EAAE,CAAC;YACpC,MAAM,CAAC,IAAI,CACT,mBAAmB,cAAc,qCAAqC,CACvE,CAAC;QACJ,CAAC;IACH,CAAC;IAED,KAAK,CAAC,gBAAgB,CAAC,cAAsB;QAC3C,MAAM,KAAK,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,cAAc,CAAC,CAAC;QAC/C,IAAI,KAAK,EAAE,CAAC;YACV,IAAI,CAAC,UAAU,CAAC,KAAK,EAAE,cAAc,CAAC,CAAC;YACvC,MAAM,CAAC,IAAI,CAAC,4BAA4B,cAAc,EAAE,CAAC,CAAC;QAC5D,CAAC;IACH,CAAC;IAED,KAAK,CAAC,eAAe;QACnB,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QACvB,MAAM,oBAAoB,GAAG,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,kBAAkB,CAAC;QACnE,MAAM,WAAW,GAAG,IAAA,0CAAuB,EAAC,IAAI,CAAC,MAAM,CAAC,CAAC;QAEzD,MAAM,OAAO,GAAqB,EAAE,CAAC;QACrC,KAAK,MAAM,CAAC,cAAc,EAAE,KAAK,CAAC,IAAI,IAAI,CAAC,OAAO,EAAE,CAAC;YACnD,OAAO,CAAC,IAAI,CACV,IAAA,6CAA0B,EAAC;gBACzB,cAAc;gBACd,YAAY,EAAE,KAAK,CAAC,YAAY;gBAChC,GAAG;gBACH,oBAAoB;gBACpB,WAAW;gBACX,QAAQ,EAAE,CAAC;aACZ,CAAC,CACH,CAAC;QACJ,CAAC;QACD,OAAO,OAAO,CAAC;IACjB,CAAC;IAED,KAAK,CAAC,wBAAwB,CAAC,cAAsB;QACnD,MAAM,KAAK,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,cAAc,CAAC,CAAC;QAC/C,IAAI,KAAK,EAAE,CAAC;YACV,KAAK,CAAC,YAAY,GAAG,IAAI,IAAI,EAAE,CAAC;QAClC,CAAC;IACH,CAAC;IAED,gDAAgD;IACxC,UAAU,CAAC,KAA0B,EAAE,cAAsB;QACnE,MAAM,KAAK,GAAG,KAAK,CAAC,OAAO,CAAC;QAE5B,0DAA0D;QAC1D,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,cAAc,CAAC,CAAC;QAEpC,6CAA6C;QAC7C,IAAI,KAAK,CAAC,QAAQ,KAAK,IAAI,IAAI,KAAK,CAAC,MAAM;YAAE,OAAO;QAEpD,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;QAEtB,MAAM,SAAS,GAAG,UAAU,CAAC,GAAG,EAAE;YAChC,IAAI,KAAK,CAAC,QAAQ,KAAK,IAAI,IAAI,CAAC,KAAK,CAAC,MAAM,EAAE,CAAC;gBAC7C,MAAM,CAAC,IAAI,CACT,mBAAmB,cAAc,8CAA8C,CAChF,CAAC;gBACF,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;YACxB,CAAC;QACH,CAAC,EAAE,eAAe,CAAC,CAAC;QAEpB,KAAK,CAAC,IAAI,CAAC,MAAM,EAAE,GAAG,EAAE,CAAC,YAAY,CAAC,SAAS,CAAC,CAAC,CAAC;IACpD,CAAC;CACF;AAtND,8DAsNC"}

package/dist/orchestration/impl/index.d.ts

@@ -0,0 +1,8 @@
+/**
+ * Deployment manager implementations
+ * Add new deployment targets here (e.g., CloudflareDeploymentManager, LambdaDeploymentManager)
+ */
+export { DockerDeploymentManager } from "./docker-deployment";
+export { EmbeddedDeploymentManager } from "./embedded-deployment";
+export { K8sDeploymentManager } from "./k8s";
+//# sourceMappingURL=index.d.ts.map

package/dist/orchestration/impl/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/orchestration/impl/index.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAEH,OAAO,EAAE,uBAAuB,EAAE,MAAM,qBAAqB,CAAC;AAC9D,OAAO,EAAE,yBAAyB,EAAE,MAAM,uBAAuB,CAAC;AAClE,OAAO,EAAE,oBAAoB,EAAE,MAAM,OAAO,CAAC"}

package/dist/orchestration/impl/index.js

@@ -0,0 +1,14 @@
+"use strict";
+/**
+ * Deployment manager implementations
+ * Add new deployment targets here (e.g., CloudflareDeploymentManager, LambdaDeploymentManager)
+ */
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.K8sDeploymentManager = exports.EmbeddedDeploymentManager = exports.DockerDeploymentManager = void 0;
+var docker_deployment_1 = require("./docker-deployment");
+Object.defineProperty(exports, "DockerDeploymentManager", { enumerable: true, get: function () { return docker_deployment_1.DockerDeploymentManager; } });
+var embedded_deployment_1 = require("./embedded-deployment");
+Object.defineProperty(exports, "EmbeddedDeploymentManager", { enumerable: true, get: function () { return embedded_deployment_1.EmbeddedDeploymentManager; } });
+var k8s_1 = require("./k8s");
+Object.defineProperty(exports, "K8sDeploymentManager", { enumerable: true, get: function () { return k8s_1.K8sDeploymentManager; } });
+//# sourceMappingURL=index.js.map

package/dist/orchestration/impl/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../src/orchestration/impl/index.ts"],"names":[],"mappings":";AAAA;;;GAGG;;;AAEH,yDAA8D;AAArD,4HAAA,uBAAuB,OAAA;AAChC,6DAAkE;AAAzD,gIAAA,yBAAyB,OAAA;AAClC,6BAA6C;AAApC,2GAAA,oBAAoB,OAAA"}

package/dist/orchestration/impl/k8s/deployment.d.ts

@@ -0,0 +1,204 @@
+import type { ModelProviderModule } from "../../../modules/module-system";
+import { BaseDeploymentManager, type DeploymentInfo, type MessagePayload, type ModuleEnvVarsBuilder, type OrchestratorConfig } from "../../base-deployment-manager";
+export declare const LOBU_FINALIZER = "lobu.io/cleanup";
+export declare const WORKER_SECURITY: {
+    readonly USER_ID: 1001;
+    readonly GROUP_ID: 1001;
+    readonly TMP_SIZE_LIMIT: "100Mi";
+};
+export interface K8sProbe {
+    httpGet?: {
+        path: string;
+        port: number | string;
+        scheme?: string;
+    };
+    exec?: {
+        command: string[];
+    };
+    tcpSocket?: {
+        port: number | string;
+    };
+    initialDelaySeconds?: number;
+    periodSeconds?: number;
+    timeoutSeconds?: number;
+    successThreshold?: number;
+    failureThreshold?: number;
+}
+export interface SimpleDeployment {
+    apiVersion: "apps/v1";
+    kind: "Deployment";
+    metadata: {
+        name: string;
+        namespace: string;
+        labels?: Record<string, string>;
+        annotations?: Record<string, string>;
+        finalizers?: string[];
+    };
+    spec: {
+        replicas: number;
+        selector: {
+            matchLabels: Record<string, string>;
+        };
+        template: {
+            metadata: {
+                labels: Record<string, string>;
+                annotations?: Record<string, string>;
+            };
+            spec: {
+                serviceAccountName?: string;
+                imagePullSecrets?: Array<{
+                    name: string;
+                }>;
+                runtimeClassName?: string;
+                securityContext?: {
+                    fsGroup?: number;
+                    fsGroupChangePolicy?: "Always" | "OnRootMismatch";
+                    runAsUser?: number;
+                    runAsGroup?: number;
+                    runAsNonRoot?: boolean;
+                };
+                initContainers?: Array<{
+                    name: string;
+                    image: string;
+                    imagePullPolicy?: string;
+                    command?: string[];
+                    args?: string[];
+                    securityContext?: {
+                        runAsUser?: number;
+                        runAsGroup?: number;
+                        runAsNonRoot?: boolean;
+                        readOnlyRootFilesystem?: boolean;
+                        allowPrivilegeEscalation?: boolean;
+                        capabilities?: {
+                            drop?: string[];
+                            add?: string[];
+                        };
+                    };
+                    resources?: {
+                        requests?: Record<string, string>;
+                        limits?: Record<string, string>;
+                    };
+                    volumeMounts?: Array<{
+                        name: string;
+                        mountPath: string;
+                        subPath?: string;
+                    }>;
+                }>;
+                containers: Array<{
+                    name: string;
+                    image: string;
+                    imagePullPolicy?: string;
+                    command?: string[];
+                    args?: string[];
+                    securityContext?: {
+                        runAsUser?: number;
+                        runAsGroup?: number;
+                        runAsNonRoot?: boolean;
+                        readOnlyRootFilesystem?: boolean;
+                        allowPrivilegeEscalation?: boolean;
+                        capabilities?: {
+                            drop?: string[];
+                            add?: string[];
+                        };
+                    };
+                    env?: Array<{
+                        name: string;
+                        value?: string;
+                        valueFrom?: {
+                            secretKeyRef?: {
+                                name: string;
+                                key: string;
+                            };
+                        };
+                    }>;
+                    ports?: Array<{
+                        name: string;
+                        containerPort: number;
+                        protocol?: string;
+                    }>;
+                    livenessProbe?: K8sProbe;
+                    readinessProbe?: K8sProbe;
+                    resources?: {
+                        requests?: Record<string, string>;
+                        limits?: Record<string, string>;
+                    };
+                    volumeMounts?: Array<{
+                        name: string;
+                        mountPath: string;
+                        subPath?: string;
+                    }>;
+                }>;
+                volumes?: Array<{
+                    name: string;
+                    persistentVolumeClaim?: {
+                        claimName: string;
+                    };
+                    emptyDir?: {
+                        sizeLimit?: string;
+                        medium?: string;
+                    };
+                    hostPath?: {
+                        path: string;
+                        type?: string;
+                    };
+                }>;
+            };
+        };
+    };
+}
+export declare const IMAGE_PULL_FAILURE_REASONS: Set<string>;
+export declare class K8sDeploymentManager extends BaseDeploymentManager {
+    private kc;
+    private appsV1Api;
+    private coreV1Api;
+    private nodeV1Api;
+    private informer;
+    private informerInitializing;
+    constructor(config: OrchestratorConfig, moduleEnvVarsBuilder?: ModuleEnvVarsBuilder, providerModules?: ModelProviderModule[]);
+    /**
+     * Validate that the target namespace exists and we have access to it
+     */
+    private validateNamespace;
+    /**
+     * Check if the configured RuntimeClass exists in the cluster
+     * Similar to Docker's checkGvisorAvailability()
+     */
+    private checkRuntimeClassAvailability;
+    private getWorkerServiceAccountName;
+    private getWorkerImagePullSecrets;
+    private getWorkerStartupTimeoutMs;
+    private listRawWorkerDeployments;
+    /**
+     * Validate that the worker image exists and is pullable
+     * Called on gateway startup to ensure workers can be created
+     */
+    validateWorkerImage(): Promise<void>;
+    reconcileWorkerDeploymentImages(): Promise<void>;
+    listDeployments(): Promise<DeploymentInfo[]>;
+    createDeployment(deploymentName: string, username: string, userId: string, messageData?: MessagePayload): Promise<void>;
+    scaleDeployment(deploymentName: string, replicas: number): Promise<void>;
+    deleteDeployment(deploymentName: string): Promise<void>;
+    /**
+     * Override reconcileDeployments to also clean up orphaned PVC finalizers.
+     * Deployment orphan cleanup is handled inside listDeployments() to avoid
+     * duplicate API calls (listDeployments already iterates raw K8s objects).
+     */
+    reconcileDeployments(): Promise<void>;
+    updateDeploymentActivity(deploymentName: string): Promise<void>;
+    protected getDispatcherHost(): string;
+    /**
+     * Start a watch-based informer for worker deployments.
+     * The informer maintains a local cache that is updated via K8s watch events,
+     * reducing the need for frequent list API calls.
+     */
+    startInformer(): Promise<void>;
+    /**
+     * Stop the informer and clear the cache.
+     */
+    stopInformer(): Promise<void>;
+    /**
+     * Whether the informer is active and has a populated cache.
+     */
+    isInformerActive(): boolean;
+}
+//# sourceMappingURL=deployment.d.ts.map

package/dist/orchestration/impl/k8s/deployment.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"deployment.d.ts","sourceRoot":"","sources":["../../../../src/orchestration/impl/k8s/deployment.ts"],"names":[],"mappings":"AAQA,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,gCAAgC,CAAC;AAC1E,OAAO,EACL,qBAAqB,EACrB,KAAK,cAAc,EACnB,KAAK,cAAc,EACnB,KAAK,oBAAoB,EACzB,KAAK,kBAAkB,EACxB,MAAM,+BAA+B,CAAC;AAgBvC,eAAO,MAAM,cAAc,oBAAoB,CAAC;AAEhD,eAAO,MAAM,eAAe;;;;CAIlB,CAAC;AAQX,MAAM,WAAW,QAAQ;IACvB,OAAO,CAAC,EAAE;QACR,IAAI,EAAE,MAAM,CAAC;QACb,IAAI,EAAE,MAAM,GAAG,MAAM,CAAC;QACtB,MAAM,CAAC,EAAE,MAAM,CAAC;KACjB,CAAC;IACF,IAAI,CAAC,EAAE;QACL,OAAO,EAAE,MAAM,EAAE,CAAC;KACnB,CAAC;IACF,SAAS,CAAC,EAAE;QACV,IAAI,EAAE,MAAM,GAAG,MAAM,CAAC;KACvB,CAAC;IACF,mBAAmB,CAAC,EAAE,MAAM,CAAC;IAC7B,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,gBAAgB,CAAC,EAAE,MAAM,CAAC;IAC1B,gBAAgB,CAAC,EAAE,MAAM,CAAC;CAC3B;AAED,MAAM,WAAW,gBAAgB;IAC/B,UAAU,EAAE,SAAS,CAAC;IACtB,IAAI,EAAE,YAAY,CAAC;IACnB,QAAQ,EAAE;QACR,IAAI,EAAE,MAAM,CAAC;QACb,SAAS,EAAE,MAAM,CAAC;QAClB,MAAM,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;QAChC,WAAW,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;QACrC,UAAU,CAAC,EAAE,MAAM,EAAE,CAAC;KACvB,CAAC;IACF,IAAI,EAAE;QACJ,QAAQ,EAAE,MAAM,CAAC;QACjB,QAAQ,EAAE;YACR,WAAW,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;SACrC,CAAC;QACF,QAAQ,EAAE;YACR,QAAQ,EAAE;gBACR,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;gBAC/B,WAAW,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;aACtC,CAAC;YACF,IAAI,EAAE;gBACJ,kBAAkB,CAAC,EAAE,MAAM,CAAC;gBAC5B,gBAAgB,CAAC,EAAE,KAAK,CAAC;oBAAE,IAAI,EAAE,MAAM,CAAA;iBAAE,CAAC,CAAC;gBAC3C,gBAAgB,CAAC,EAAE,MAAM,CAAC;gBAC1B,eAAe,CAAC,EAAE;oBAChB,OAAO,CAAC,EAAE,MAAM,CAAC;oBACjB,mBAAmB,CAAC,EAAE,QAAQ,GAAG,gBAAgB,CAAC;oBAClD,SAAS,CAAC,EAAE,MAAM,CAAC;oBACnB,UAAU,CAAC,EAAE,MAAM,CAAC;oBACpB,YAAY,CAAC,EAAE,OAAO,CAAC;iBACxB,CAAC;gBACF,cAAc,CAAC,EAAE,KAAK,CAAC;oBACrB,IAAI,EAAE,MAAM,CAAC;oBACb,KAAK,EAAE,MAAM,CAAC;oBACd,eAAe,CAAC,EAAE,MAAM,CAAC;oBACzB,OAAO,CAAC,EAAE,MAAM,EAAE,CAAC;oBACnB,IAAI,CAAC,EAAE,MAAM,EAAE,CAAC;oBAChB,eAAe,CAAC,EAAE;wBAChB,SAAS,CAAC,EAAE,MAAM,CAAC;wBACnB,UAAU,CAAC,EAAE,MAAM,CAAC;wBACpB,YAAY,CAAC,EAAE,OAAO,CAAC;wBACvB,sBAAsB,CAAC,EAAE,OAAO,CAAC;wBACjC,wBAAwB,CAAC,EAAE,OAAO,CAAC;wBACnC,YAAY,CAAC,EAAE;4BACb,IAAI,CAAC,EAAE,MAAM,EAAE,CAAC;4BAChB,GAAG,CAAC,EAAE,MAAM,EAAE,CAAC;yBAChB,CAAC;qBACH,CAAC;oBACF,SAAS,CAAC,EAAE;wBACV,QAAQ,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;wBAClC,MAAM,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;qBACjC,CAAC;oBACF,YAAY,CAAC,EAAE,KAAK,CAAC;wBACnB,IAAI,EAAE,MAAM,CAAC;wBACb,SAAS,EAAE,MAAM,CAAC;wBAClB,OAAO,CAAC,EAAE,MAAM,CAAC;qBAClB,CAAC,CAAC;iBACJ,CAAC,CAAC;gBACH,UAAU,EAAE,KAAK,CAAC;oBAChB,IAAI,EAAE,MAAM,CAAC;oBACb,KAAK,EAAE,MAAM,CAAC;oBACd,eAAe,CAAC,EAAE,MAAM,CAAC;oBACzB,OAAO,CAAC,EAAE,MAAM,EAAE,CAAC;oBACnB,IAAI,CAAC,EAAE,MAAM,EAAE,CAAC;oBAChB,eAAe,CAAC,EAAE;wBAChB,SAAS,CAAC,EAAE,MAAM,CAAC;wBACnB,UAAU,CAAC,EAAE,MAAM,CAAC;wBACpB,YAAY,CAAC,EAAE,OAAO,CAAC;wBACvB,sBAAsB,CAAC,EAAE,OAAO,CAAC;wBACjC,wBAAwB,CAAC,EAAE,OAAO,CAAC;wBACnC,YAAY,CAAC,EAAE;4BACb,IAAI,CAAC,EAAE,MAAM,EAAE,CAAC;4BAChB,GAAG,CAAC,EAAE,MAAM,EAAE,CAAC;yBAChB,CAAC;qBACH,CAAC;oBACF,GAAG,CAAC,EAAE,KAAK,CAAC;wBACV,IAAI,EAAE,MAAM,CAAC;wBACb,KAAK,CAAC,EAAE,MAAM,CAAC;wBACf,SAAS,CAAC,EAAE;4BACV,YAAY,CAAC,EAAE;gCACb,IAAI,EAAE,MAAM,CAAC;gCACb,GAAG,EAAE,MAAM,CAAC;6BACb,CAAC;yBACH,CAAC;qBACH,CAAC,CAAC;oBACH,KAAK,CAAC,EAAE,KAAK,CAAC;wBACZ,IAAI,EAAE,MAAM,CAAC;wBACb,aAAa,EAAE,MAAM,CAAC;wBACtB,QAAQ,CAAC,EAAE,MAAM,CAAC;qBACnB,CAAC,CAAC;oBACH,aAAa,CAAC,EAAE,QAAQ,CAAC;oBACzB,cAAc,CAAC,EAAE,QAAQ,CAAC;oBAC1B,SAAS,CAAC,EAAE;wBACV,QAAQ,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;wBAClC,MAAM,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;qBACjC,CAAC;oBACF,YAAY,CAAC,EAAE,KAAK,CAAC;wBACnB,IAAI,EAAE,MAAM,CAAC;wBACb,SAAS,EAAE,MAAM,CAAC;wBAClB,OAAO,CAAC,EAAE,MAAM,CAAC;qBAClB,CAAC,CAAC;iBACJ,CAAC,CAAC;gBACH,OAAO,CAAC,EAAE,KAAK,CAAC;oBACd,IAAI,EAAE,MAAM,CAAC;oBACb,qBAAqB,CAAC,EAAE;wBACtB,SAAS,EAAE,MAAM,CAAC;qBACnB,CAAC;oBACF,QAAQ,CAAC,EAAE;wBACT,SAAS,CAAC,EAAE,MAAM,CAAC;wBACnB,MAAM,CAAC,EAAE,MAAM,CAAC;qBACjB,CAAC;oBACF,QAAQ,CAAC,EAAE;wBACT,IAAI,EAAE,MAAM,CAAC;wBACb,IAAI,CAAC,EAAE,MAAM,CAAC;qBACf,CAAC;iBACH,CAAC,CAAC;aACJ,CAAC;SACH,CAAC;KACH,CAAC;CACH;AAED,eAAO,MAAM,0BAA0B,aAKrC,CAAC;AAIH,qBAAa,oBAAqB,SAAQ,qBAAqB;IAC7D,OAAO,CAAC,EAAE,CAAiB;IAC3B,OAAO,CAAC,SAAS,CAAgB;IACjC,OAAO,CAAC,SAAS,CAAgB;IACjC,OAAO,CAAC,SAAS,CAAgB;IACjC,OAAO,CAAC,QAAQ,CAA+C;IAC/D,OAAO,CAAC,oBAAoB,CAAS;gBAGnC,MAAM,EAAE,kBAAkB,EAC1B,oBAAoB,CAAC,EAAE,oBAAoB,EAC3C,eAAe,GAAE,mBAAmB,EAAO;IAsE7C;;OAEG;YACW,iBAAiB;IAqC/B;;;OAGG;YACW,6BAA6B;IAyB3C,OAAO,CAAC,2BAA2B;IAInC,OAAO,CAAC,yBAAyB;IAOjC,OAAO,CAAC,yBAAyB;YAKnB,wBAAwB;IAiBtC;;;OAGG;IACG,mBAAmB,IAAI,OAAO,CAAC,IAAI,CAAC;IAuBpC,+BAA+B,IAAI,OAAO,CAAC,IAAI,CAAC;IAYhD,eAAe,IAAI,OAAO,CAAC,cAAc,EAAE,CAAC;IAkE5C,gBAAgB,CACpB,cAAc,EAAE,MAAM,EACtB,QAAQ,EAAE,MAAM,EAChB,MAAM,EAAE,MAAM,EACd,WAAW,CAAC,EAAE,cAAc,GAC3B,OAAO,CAAC,IAAI,CAAC;IAqWV,eAAe,CACnB,cAAc,EAAE,MAAM,EACtB,QAAQ,EAAE,MAAM,GACf,OAAO,CAAC,IAAI,CAAC;IAuDV,gBAAgB,CAAC,cAAc,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAsC7D;;;;OAIG;IACG,oBAAoB,IAAI,OAAO,CAAC,IAAI,CAAC;IAUrC,wBAAwB,CAAC,cAAc,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAiCrE,SAAS,CAAC,iBAAiB,IAAI,MAAM;IAMrC;;;;OAIG;IACG,aAAa,IAAI,OAAO,CAAC,IAAI,CAAC;IA4CpC;;OAEG;IACG,YAAY,IAAI,OAAO,CAAC,IAAI,CAAC;IAQnC;;OAEG;IACH,gBAAgB,IAAI,OAAO;CAG5B"}