@osva-ai/cli 1.1.1 → 1.1.2

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@osva-ai/cli",
-  "version": "1.1.1",
+  "version": "1.1.2",
   "description": "Official OSVA command-line interface",
   "license": "Apache-2.0",
   "repository": {
@@ -22,8 +22,8 @@
     "README.md"
   ],
   "dependencies": {
-    "@osva-ai/contracts": "1.1.1",
-    "@osva-ai/sdk": "1.1.1",
+    "@osva-ai/contracts": "1.1.2",
+    "@osva-ai/sdk": "1.1.2",
     "ajv": "^8.17.1",
     "zod": "4.6.7"
   },

package/templates/compose-install/compose.yml

@@ -0,0 +1,307 @@
+x-osva-image: &osva-image
+  image: ${OSVA_IMAGE:?OSVA_IMAGE is required}
+
+x-osva-common-env: &osva-common-env
+  OSVA_DATABASE_URL: postgres://osva:${POSTGRES_PASSWORD:?POSTGRES_PASSWORD is required}@postgres:5432/osva
+  OSVA_VALKEY_URL: ${OSVA_VALKEY_URL:-redis://valkey:6379}
+  OSVA_HEALTH_HOST: 0.0.0.0
+  OSVA_HEALTH_PORT: "8081"
+  OSVA_ARTIFACT_STORAGE_DRIVER: filesystem
+  OSVA_ARTIFACT_FILESYSTEM_ROOT: /var/lib/osva/artifacts
+  OSVA_ARTIFACT_MAX_BYTES: ${OSVA_ARTIFACT_MAX_BYTES:-67108864}
+  OSVA_TRUSTED_RUNTIME_ROOT: /var/lib/osva/trusted-runtime
+  OSVA_KNOWLEDGE_EMBEDDING_PROVIDER: ${OSVA_KNOWLEDGE_EMBEDDING_PROVIDER:-DETERMINISTIC}
+  OSVA_KNOWLEDGE_EMBEDDING_MODEL: ${OSVA_KNOWLEDGE_EMBEDDING_MODEL:-deterministic-v1}
+  OSVA_KNOWLEDGE_EMBEDDING_DIMENSIONS: ${OSVA_KNOWLEDGE_EMBEDDING_DIMENSIONS:-384}
+  OSVA_CONTAINER_ENABLED: "false"
+  OSVA_MCP_CONNECTOR_ALLOW_PRIVATE_NETWORKS: ${OSVA_MCP_CONNECTOR_ALLOW_PRIVATE_NETWORKS:-false}
+
+services:
+  postgres:
+    image: pgvector/pgvector:pg17
+    restart: unless-stopped
+    environment:
+      POSTGRES_DB: osva
+      POSTGRES_USER: osva
+      POSTGRES_PASSWORD: ${POSTGRES_PASSWORD:?POSTGRES_PASSWORD is required}
+    volumes:
+      - osva-postgres-data:/var/lib/postgresql/data
+    healthcheck:
+      test: ["CMD-SHELL", "pg_isready -U osva -d osva"]
+      interval: 5s
+      timeout: 5s
+      retries: 12
+      start_period: 10s
+
+  valkey:
+    image: valkey/valkey:8.1.10-alpine
+    restart: unless-stopped
+    environment:
+      VALKEY_PASSWORD: ${VALKEY_PASSWORD:-}
+    command:
+      - /bin/sh
+      - -c
+      - |
+        if [ -n "$$VALKEY_PASSWORD" ]; then
+          exec valkey-server --appendonly yes --requirepass "$$VALKEY_PASSWORD"
+        else
+          exec valkey-server --appendonly yes
+        fi
+    volumes:
+      - osva-valkey-data:/data
+    healthcheck:
+      test:
+        [
+          "CMD-SHELL",
+          'if [ -n "$$VALKEY_PASSWORD" ]; then valkey-cli -a "$$VALKEY_PASSWORD" ping; else valkey-cli ping; fi',
+        ]
+      interval: 5s
+      timeout: 3s
+      retries: 12
+      start_period: 5s
+
+  migrate:
+    <<: *osva-image
+    restart: "no"
+    environment:
+      <<: *osva-common-env
+      OSVA_PROCESS: migrate
+    depends_on:
+      postgres:
+        condition: service_healthy
+
+  web:
+    <<: *osva-image
+    restart: unless-stopped
+    environment:
+      <<: *osva-common-env
+      OSVA_PROCESS: web
+      OSVA_WEB_HOST: 0.0.0.0
+      OSVA_WEB_PORT: "3000"
+      OSVA_AUTH_SECRET: ${OSVA_AUTH_SECRET:?OSVA_AUTH_SECRET is required}
+      OSVA_AUTH_BASE_URL: ${OSVA_AUTH_BASE_URL:-http://127.0.0.1:8080}
+      OSVA_AUTH_TRUSTED_ORIGINS: ${OSVA_AUTH_TRUSTED_ORIGINS:-http://127.0.0.1:8080}
+    ports:
+      - "127.0.0.1:${OSVA_PUBLISH_WEB_PORT:-8080}:3000"
+    volumes:
+      - osva-artifacts:/var/lib/osva/artifacts
+    depends_on:
+      migrate:
+        condition: service_completed_successfully
+      valkey:
+        condition: service_healthy
+    healthcheck:
+      test:
+        [
+          "CMD",
+          "node",
+          "-e",
+          "fetch('http://127.0.0.1:3000/health').then((r)=>process.exit(r.ok?0:1)).catch(()=>process.exit(1))",
+        ]
+      interval: 10s
+      timeout: 5s
+      retries: 12
+      start_period: 20s
+
+  worker:
+    <<: *osva-image
+    restart: unless-stopped
+    environment:
+      <<: *osva-common-env
+      OSVA_PROCESS: worker
+    volumes:
+      - osva-artifacts:/var/lib/osva/artifacts
+      - osva-trusted-runtime:/var/lib/osva/trusted-runtime
+    depends_on:
+      migrate:
+        condition: service_completed_successfully
+      valkey:
+        condition: service_healthy
+    healthcheck:
+      test:
+        [
+          "CMD",
+          "node",
+          "-e",
+          "fetch('http://127.0.0.1:8081/ready').then((r)=>process.exit(r.ok?0:1)).catch(()=>process.exit(1))",
+        ]
+      interval: 10s
+      timeout: 5s
+      retries: 12
+      start_period: 20s
+
+  scheduler:
+    <<: *osva-image
+    restart: unless-stopped
+    environment:
+      <<: *osva-common-env
+      OSVA_PROCESS: scheduler
+    depends_on:
+      migrate:
+        condition: service_completed_successfully
+      valkey:
+        condition: service_healthy
+    healthcheck:
+      test:
+        [
+          "CMD",
+          "node",
+          "-e",
+          "fetch('http://127.0.0.1:8081/ready').then((r)=>process.exit(r.ok?0:1)).catch(()=>process.exit(1))",
+        ]
+      interval: 10s
+      timeout: 5s
+      retries: 12
+      start_period: 20s
+
+  workflow-orchestrator:
+    <<: *osva-image
+    restart: unless-stopped
+    environment:
+      <<: *osva-common-env
+      OSVA_PROCESS: workflow-orchestrator
+    depends_on:
+      migrate:
+        condition: service_completed_successfully
+      valkey:
+        condition: service_healthy
+    healthcheck:
+      test:
+        [
+          "CMD",
+          "node",
+          "-e",
+          "fetch('http://127.0.0.1:8081/ready').then((r)=>process.exit(r.ok?0:1)).catch(()=>process.exit(1))",
+        ]
+      interval: 10s
+      timeout: 5s
+      retries: 12
+      start_period: 20s
+
+  knowledge-worker:
+    <<: *osva-image
+    restart: unless-stopped
+    environment:
+      <<: *osva-common-env
+      OSVA_PROCESS: knowledge-worker
+    volumes:
+      - osva-artifacts:/var/lib/osva/artifacts
+    depends_on:
+      migrate:
+        condition: service_completed_successfully
+      valkey:
+        condition: service_healthy
+    healthcheck:
+      test:
+        [
+          "CMD",
+          "node",
+          "-e",
+          "fetch('http://127.0.0.1:8081/ready').then((r)=>process.exit(r.ok?0:1)).catch(()=>process.exit(1))",
+        ]
+      interval: 10s
+      timeout: 5s
+      retries: 12
+      start_period: 20s
+
+  mcp-server:
+    <<: *osva-image
+    restart: unless-stopped
+    environment:
+      <<: *osva-common-env
+      OSVA_PROCESS: mcp-server
+      OSVA_MCP_HOST: 0.0.0.0
+      OSVA_MCP_PORT: "3100"
+      OSVA_API_BASE_URL: http://web:3000
+      OSVA_MCP_ALLOWED_HOSTS: ${OSVA_MCP_ALLOWED_HOSTS:-}
+    ports:
+      - "127.0.0.1:${OSVA_PUBLISH_MCP_PORT:-3100}:3100"
+    depends_on:
+      web:
+        condition: service_healthy
+    healthcheck:
+      test:
+        [
+          "CMD",
+          "node",
+          "-e",
+          "fetch('http://127.0.0.1:3100/health').then((r)=>process.exit(r.ok?0:1)).catch(()=>process.exit(1))",
+        ]
+      interval: 10s
+      timeout: 5s
+      retries: 12
+      start_period: 20s
+
+  console:
+    <<: *osva-image
+    restart: unless-stopped
+    environment:
+      <<: *osva-common-env
+      OSVA_PROCESS: console
+      # In-container BFF must reach the web service on the Compose network (not host loopback).
+      OSVA_BASE_URL: http://web:3000
+      OSVA_CONSOLE_HOST: 127.0.0.1
+      OSVA_CONSOLE_PORT: "4174"
+      OSVA_CONSOLE_BROWSER_ORIGIN: http://127.0.0.1:${OSVA_PUBLISH_CONSOLE_PORT:-4174}
+      OSVA_CONSOLE_DOCKER_PUBLISH: "true"
+    ports:
+      - "127.0.0.1:${OSVA_PUBLISH_CONSOLE_PORT:-4174}:4174"
+    depends_on:
+      web:
+        condition: service_healthy
+    healthcheck:
+      test:
+        [
+          "CMD",
+          "node",
+          "-e",
+          "fetch('http://127.0.0.1:4174/').then((r)=>process.exit(r.ok?0:1)).catch(()=>process.exit(1))",
+        ]
+      interval: 10s
+      timeout: 5s
+      retries: 12
+      start_period: 25s
+
+  bootstrap:
+    <<: *osva-image
+    restart: "no"
+    environment:
+      <<: *osva-common-env
+      OSVA_PROCESS: bootstrap
+      OSVA_AUTH_SECRET: ${OSVA_AUTH_SECRET:?OSVA_AUTH_SECRET is required}
+      OSVA_AUTH_BASE_URL: ${OSVA_AUTH_BASE_URL:-http://127.0.0.1:8080}
+      OSVA_BOOTSTRAP_WORKSPACE_NAME: ${OSVA_BOOTSTRAP_WORKSPACE_NAME:-Default Workspace}
+    depends_on:
+      migrate:
+        condition: service_completed_successfully
+    profiles: ["bootstrap"]
+
+  identity-bootstrap:
+    <<: *osva-image
+    restart: "no"
+    environment:
+      <<: *osva-common-env
+      OSVA_PROCESS: identity-bootstrap
+      OSVA_AUTH_SECRET: ${OSVA_AUTH_SECRET:?OSVA_AUTH_SECRET is required}
+      OSVA_AUTH_BASE_URL: ${OSVA_AUTH_BASE_URL:-http://127.0.0.1:8080}
+    depends_on:
+      migrate:
+        condition: service_completed_successfully
+    profiles: ["bootstrap"]
+
+  installation-status:
+    <<: *osva-image
+    restart: "no"
+    environment:
+      <<: *osva-common-env
+      OSVA_PROCESS: installation-status
+    depends_on:
+      postgres:
+        condition: service_healthy
+    profiles: ["bootstrap"]
+
+volumes:
+  osva-postgres-data:
+  osva-valkey-data:
+  osva-artifacts:
+  osva-trusted-runtime:

package/templates/compose-install/distribution.json

@@ -0,0 +1,5 @@
+{
+  "distributionSchemaVersion": 1,
+  "platformVersion": "1.1.1",
+  "imageRef": "ghcr.io/osva-ai/osva:1.1.1"
+}

package/templates/compose-install/upgrade-catalog.json

@@ -0,0 +1,39 @@
+{
+  "schemaVersion": 1,
+  "targets": [
+    {
+      "platformVersion": "1.1.1",
+      "imageRef": "ghcr.io/osva-ai/osva:1.1.1"
+    },
+    {
+      "platformVersion": "1.1.0",
+      "imageRef": "ghcr.io/osva-ai/osva:1.1.0"
+    }
+  ],
+  "paths": [
+    {
+      "fromPlatformVersion": "1.1.0",
+      "toPlatformVersion": "1.1.1",
+      "migrationRequired": false,
+      "composeTemplateUpdate": true
+    },
+    {
+      "fromPlatformVersion": "1.1.0-rc.4",
+      "toPlatformVersion": "1.1.0",
+      "migrationRequired": true,
+      "composeTemplateUpdate": true
+    },
+    {
+      "fromPlatformVersion": "1.1.0-rc.2",
+      "toPlatformVersion": "1.1.0",
+      "migrationRequired": true,
+      "composeTemplateUpdate": true
+    },
+    {
+      "fromPlatformVersion": "1.0.0",
+      "toPlatformVersion": "1.1.0",
+      "migrationRequired": true,
+      "composeTemplateUpdate": true
+    }
+  ]
+}