studio-console 1.3.4__py3-none-any.whl

VERSION

@@ -0,0 +1 @@
+1.3.4

docker-compose.yml

@@ -0,0 +1,282 @@
+# Studio - Production
+# Pre-built images from GHCR. No build: directives.
+# GPU workers: docker compose -f docker-compose.yml -f workers/docker-compose.gpu.yml up -d
+#
+# Usage:
+#   docker compose up -d                           # Core (postgres + api + ui + nginx)
+#   docker compose --profile worker-general up -d  # Core + a specific worker
+#   docker compose --profile workers up -d         # Core + all workers (if using COMPOSE_PROFILES)
+#
+# nginx is always the front door on SHS_NGINX_PORT (default 80).
+# api and ui are internal — not bound to host ports.
+# Scaling is handled by console via docker-compose.override.yml.
+
+services:
+  postgres:
+    image: pgvector/pgvector:0.8.3-pg18-trixie@sha256:6232c5ea178707f278d060b51747c30f310164595674e95d5f9d100f4a48b56c
+
+    environment:
+      POSTGRES_USER: ${POSTGRES_USER:-postgres}
+      POSTGRES_PASSWORD: ${POSTGRES_PASSWORD:-postgres}
+      POSTGRES_DB: selfhost_studio
+      PGDATA: /var/lib/postgresql/data
+    ports:
+      - "${POSTGRES_PORT:-5432}:5432"
+    volumes:
+      - ${SHS_DB_DATA:?SHS_DB_DATA is required - set in .env}:/var/lib/postgresql/data
+    healthcheck:
+      test: ["CMD-SHELL", "pg_isready -U ${POSTGRES_USER:-postgres}"]
+      interval: 5s
+      timeout: 5s
+      retries: 5
+    networks:
+      - prod-network
+    restart: unless-stopped
+    logging:
+      driver: json-file
+      options:
+        max-size: "50m"
+        max-file: "3"
+
+  api:
+    image: ghcr.io/selfhosthub/studio-api:${SHS_STUDIO_VERSION:?SHS_STUDIO_VERSION is required - set in .env}
+
+    env_file:
+      - ${SHS_WORKSPACE_DIR}/.env
+    environment:
+      - SHS_WORKSPACE_ROOT=/workspace
+    volumes:
+      - ${SHS_STORAGE_ROOT:?SHS_STORAGE_ROOT is required - set in .env}:/workspace
+    depends_on:
+      postgres:
+        condition: service_healthy
+    extra_hosts:
+      - "host.docker.internal:host-gateway"
+    healthcheck:
+      test: ["CMD", "curl", "-f", "http://127.0.0.1:8000/health"]
+      interval: 30s
+      timeout: 10s
+      retries: 3
+      start_period: 10s
+    networks:
+      - prod-network
+    restart: unless-stopped
+    logging:
+      driver: json-file
+      options:
+        max-size: "50m"
+        max-file: "3"
+
+  ui:
+    image: ghcr.io/selfhosthub/studio-ui:${SHS_STUDIO_VERSION:?SHS_STUDIO_VERSION is required - set in .env}
+
+    environment:
+      - NEXT_PUBLIC_API_URL=${SHS_PUBLIC_API_URL:-${SHS_API_BASE_URL}}
+      - NEXT_PUBLIC_WS_URL=${SHS_WS_URL:?SHS_WS_URL is required - set in .env}
+      - NEXT_PUBLIC_API_ENV=production
+      # SSR target; internal nginx.
+      - SHS_API_BASE_URL=http://nginx:${SHS_NGINX_PORT:-80}
+      - SHS_WS_URL=${SHS_WS_URL}
+    depends_on:
+      - api
+    networks:
+      - prod-network
+    restart: unless-stopped
+    logging:
+      driver: json-file
+      options:
+        max-size: "50m"
+        max-file: "3"
+
+  nginx:
+    image: nginx:alpine
+    ports:
+      - "${SHS_NGINX_PORT:-80}:80"
+    volumes:
+      - ${SHS_WORKSPACE_DIR}/nginx/studio.conf:/etc/nginx/conf.d/default.conf:ro
+    depends_on:
+      api:
+        condition: service_started
+        required: false
+      ui:
+        condition: service_started
+        required: false
+    healthcheck:
+      # 127.0.0.1, not localhost: /etc/hosts maps localhost to ::1 too, and
+      # nginx listens only on IPv4 0.0.0.0:80 — wget tries ::1 first and gets
+      # 'connection refused', leaving the container perpetually unhealthy.
+      test: ["CMD", "wget", "-qO-", "http://127.0.0.1/nginx-health"]
+      interval: 10s
+      timeout: 5s
+      retries: 3
+    networks:
+      - prod-network
+    restart: unless-stopped
+    logging:
+      driver: json-file
+      options:
+        max-size: "50m"
+        max-file: "3"
+
+  # ===========================================================================
+  # Workers - each has its own profile, activated via COMPOSE_PROFILES in .env
+  # ===========================================================================
+
+  worker-general:
+    image: ghcr.io/selfhosthub/studio-worker-general:${SHS_STUDIO_VERSION:?SHS_STUDIO_VERSION is required - set in .env}
+
+    profiles: [worker-general]
+
+    env_file:
+      - ${SHS_WORKSPACE_DIR}/.env
+    environment:
+      - SHS_API_BASE_URL=http://api:8000
+      - SHS_PUBLIC_BASE_URL=${SHS_PUBLIC_BASE_URL:?SHS_PUBLIC_BASE_URL is required - set in .env}
+      - SHS_WORKER_SHARED_SECRET=${SHS_WORKER_SHARED_SECRET:?SHS_WORKER_SHARED_SECRET is required - set in .env}
+      - SHS_WORKSPACE_ROOT=/workspace
+      - SHS_WORKER_TYPE=general
+    volumes:
+      - ${SHS_STORAGE_ROOT}:/workspace
+    extra_hosts:
+      - "host.docker.internal:host-gateway"
+    networks:
+      - prod-network
+    restart: unless-stopped
+    logging:
+      driver: json-file
+      options:
+        max-size: "50m"
+        max-file: "3"
+
+  worker-transfer:
+    image: ghcr.io/selfhosthub/studio-worker-transfer:${SHS_STUDIO_VERSION:?SHS_STUDIO_VERSION is required - set in .env}
+
+    profiles: [worker-transfer]
+
+    env_file:
+      - ${SHS_WORKSPACE_DIR}/.env
+    environment:
+      - SHS_API_BASE_URL=http://api:8000
+      - SHS_PUBLIC_BASE_URL=${SHS_PUBLIC_BASE_URL:?SHS_PUBLIC_BASE_URL is required - set in .env}
+      - SHS_WORKER_SHARED_SECRET=${SHS_WORKER_SHARED_SECRET:?SHS_WORKER_SHARED_SECRET is required - set in .env}
+      - SHS_WORKSPACE_ROOT=/workspace
+      - SHS_WORKER_TYPE=transfer
+    volumes:
+      - ${SHS_STORAGE_ROOT}:/workspace
+    extra_hosts:
+      - "host.docker.internal:host-gateway"
+    networks:
+      - prod-network
+    restart: unless-stopped
+    logging:
+      driver: json-file
+      options:
+        max-size: "50m"
+        max-file: "3"
+
+  worker-video:
+    image: ghcr.io/selfhosthub/studio-worker-video:${SHS_STUDIO_VERSION:?SHS_STUDIO_VERSION is required - set in .env}
+
+    profiles: [worker-video]
+
+    env_file:
+      - ${SHS_WORKSPACE_DIR}/.env
+    environment:
+      - SHS_API_BASE_URL=http://api:8000
+      - SHS_PUBLIC_BASE_URL=${SHS_PUBLIC_BASE_URL:?SHS_PUBLIC_BASE_URL is required - set in .env}
+      - SHS_WORKER_SHARED_SECRET=${SHS_WORKER_SHARED_SECRET:?SHS_WORKER_SHARED_SECRET is required - set in .env}
+      - SHS_WORKSPACE_ROOT=/workspace
+      - SHS_WORKER_TYPE=video
+      - SHS_WHISPER_MODEL=${SHS_WHISPER_MODEL:-base}
+    volumes:
+      - ${SHS_STORAGE_ROOT}:/workspace
+    extra_hosts:
+      - "host.docker.internal:host-gateway"
+    networks:
+      - prod-network
+    restart: unless-stopped
+    logging:
+      driver: json-file
+      options:
+        max-size: "50m"
+        max-file: "3"
+
+  worker-audio:
+    image: ghcr.io/selfhosthub/studio-worker-audio:${SHS_STUDIO_VERSION:?SHS_STUDIO_VERSION is required - set in .env}
+
+    profiles: [worker-audio]
+
+    env_file:
+      - ${SHS_WORKSPACE_DIR}/.env
+    environment:
+      - SHS_API_BASE_URL=http://api:8000
+      - SHS_PUBLIC_BASE_URL=${SHS_PUBLIC_BASE_URL:?SHS_PUBLIC_BASE_URL is required - set in .env}
+      - SHS_WORKER_SHARED_SECRET=${SHS_WORKER_SHARED_SECRET:?SHS_WORKER_SHARED_SECRET is required - set in .env}
+      - SHS_WORKSPACE_ROOT=/workspace
+      - SHS_WORKER_TYPE=audio
+      - HF_HOME=/models/huggingface
+    volumes:
+      - ${SHS_STORAGE_ROOT}:/workspace
+      - ${SHS_MODELS_ROOT:?SHS_MODELS_ROOT is required - set in .env}:/models
+    extra_hosts:
+      - "host.docker.internal:host-gateway"
+    networks:
+      - prod-network
+    restart: unless-stopped
+    logging:
+      driver: json-file
+      options:
+        max-size: "50m"
+        max-file: "3"
+
+  # ComfyUI worker (proxy to operator-managed ComfyUI server)
+  # Deploy with SHS_WORKER_TYPE=comfyui-image (default) or SHS_WORKER_TYPE=comfyui-video
+  worker-comfyui-image:
+    image: ghcr.io/selfhosthub/studio-worker-comfyui:${SHS_STUDIO_VERSION:?SHS_STUDIO_VERSION is required - set in .env}
+
+    profiles: [worker-comfyui-image]
+
+    env_file:
+      - ${SHS_WORKSPACE_DIR}/.env
+    environment:
+      - SHS_API_BASE_URL=http://api:8000
+      - SHS_PUBLIC_BASE_URL=${SHS_PUBLIC_BASE_URL:?SHS_PUBLIC_BASE_URL is required - set in .env}
+      - SHS_WORKER_SHARED_SECRET=${SHS_WORKER_SHARED_SECRET:?SHS_WORKER_SHARED_SECRET is required - set in .env}
+      - SHS_WORKSPACE_ROOT=/workspace
+      - SHS_WORKER_TYPE=comfyui-image
+      - SHS_COMFYUI_URL=${SHS_COMFYUI_URL:-}
+    volumes:
+      - ${SHS_STORAGE_ROOT}:/workspace
+    extra_hosts:
+      - "host.docker.internal:host-gateway"
+    networks:
+      - prod-network
+    restart: unless-stopped
+    logging:
+      driver: json-file
+      options:
+        max-size: "50m"
+        max-file: "3"
+
+  # ===========================================================================
+  # Cloudflare Tunnel - activated via COMPOSE_PROFILES=cloudflared
+  # ===========================================================================
+
+  cloudflared:
+    image: cloudflare/cloudflared:latest
+    profiles: [cloudflared]
+    command: tunnel --no-autoupdate run --token ${CLOUDFLARE_TUNNEL_TOKEN:-}
+    depends_on:
+      - nginx
+    networks:
+      - prod-network
+    restart: unless-stopped
+    logging:
+      driver: json-file
+      options:
+        max-size: "50m"
+        max-file: "3"
+
+networks:
+  prod-network:
+    driver: bridge

nginx/studio.conf.template

@@ -0,0 +1,89 @@
+upstream studio_api {
+    ip_hash;
+{{API_UPSTREAM}}
+}
+
+upstream studio_ui {
+{{UI_UPSTREAM}}
+}
+
+server {
+    listen 80;
+
+    # Compression — all responses are proxied from upstreams, so gzip_proxied
+    # must be set or nginx skips them by default.
+    gzip              on;
+    gzip_vary         on;
+    gzip_proxied      any;
+    gzip_comp_level   5;
+    gzip_min_length   256;
+    gzip_types
+        application/json
+        application/javascript
+        text/javascript
+        text/css
+        text/plain
+        application/xml
+        image/svg+xml
+        application/rss+xml
+        font/ttf
+        font/otf
+        application/font-woff;
+
+    # Health endpoint for the nginx container itself
+    location /nginx-health {
+        access_log off;
+        return 200 "ok\n";
+        add_header Content-Type text/plain;
+    }
+
+    # API health check (top-level route, not under /api)
+    location = /health {
+        proxy_pass http://studio_api;
+        proxy_http_version 1.1;
+        proxy_set_header Host              $host;
+        proxy_set_header X-Real-IP         $remote_addr;
+        proxy_set_header X-Forwarded-For   $proxy_add_x_forwarded_for;
+        proxy_set_header X-Forwarded-Proto $scheme;
+    }
+
+    # API + WebSocket + static uploads (org media served by API)
+    location ~ ^/(api|ws|uploads)(/|$) {
+        proxy_pass http://studio_api;
+        proxy_http_version 1.1;
+        proxy_set_header Host              $host;
+        proxy_set_header X-Real-IP         $remote_addr;
+        proxy_set_header X-Forwarded-For   $proxy_add_x_forwarded_for;
+        proxy_set_header X-Forwarded-Proto $scheme;
+
+        # WebSocket upgrade
+        proxy_set_header Upgrade    $http_upgrade;
+        proxy_set_header Connection $connection_upgrade;
+        proxy_read_timeout 86400s;
+        proxy_send_timeout 86400s;
+    }
+
+    # Hashed Next.js assets — content-hashed filenames, safe to cache forever.
+    location /_next/static/ {
+        proxy_pass http://studio_ui;
+        proxy_http_version 1.1;
+        proxy_set_header Host $host;
+        add_header Cache-Control "public, max-age=31536000, immutable";
+    }
+
+    # UI (everything else)
+    location / {
+        proxy_pass http://studio_ui;
+        proxy_http_version 1.1;
+        proxy_set_header Host              $host;
+        proxy_set_header X-Real-IP         $remote_addr;
+        proxy_set_header X-Forwarded-For   $proxy_add_x_forwarded_for;
+        proxy_set_header X-Forwarded-Proto $scheme;
+    }
+}
+
+# WebSocket connection upgrade map (referenced above)
+map $http_upgrade $connection_upgrade {
+    default upgrade;
+    ""      close;
+}

studio_console/__init__.py

@@ -0,0 +1,17 @@
+# studio_console/__init__.py
+"""Studio Console — operator management CLI."""
+
+from pathlib import Path
+
+_VERSION_FILE = Path(__file__).resolve().parent.parent / "VERSION"
+__version__: str = _VERSION_FILE.read_text().strip() if _VERSION_FILE.exists() else "dev"
+
+
+def main() -> None:
+    from .cli import main as _main
+
+    _main()
+
+
+__all__ = ["main", "__version__"]
+

studio_console/__main__.py

@@ -0,0 +1,3 @@
+from .cli import main
+
+main()

studio_console/cli.py

@@ -0,0 +1,176 @@
+# studio_console/cli.py
+"""Argument parser and main entry point."""
+
+import argparse
+import os
+import sys
+from pathlib import Path
+
+from .commands import (
+    cmd_backup,
+    cmd_build,
+    cmd_config_set,
+    cmd_config_unset,
+    cmd_health,
+    cmd_links,
+    cmd_logs,
+    cmd_reset_password,
+    cmd_restart,
+    cmd_restore,
+    cmd_self_update,
+    cmd_show_config,
+    cmd_start,
+    cmd_stop,
+    cmd_upgrade,
+    cmd_workers,
+    config_menu,
+)
+from .commands_container import container_menu
+from .commands_launch import cmd_launch_core, cmd_launch_full, cmd_set_core_db_url
+from .env import _workspace_dir, detect_context, env_path
+from .tui import NavBack, NavExit
+from .wizard import wizard, wizard_non_interactive
+
+
+def build_parser() -> argparse.ArgumentParser:
+    parser = argparse.ArgumentParser(
+        prog="studio-console",
+        description="Studio Console — operator management CLI",
+    )
+    sub = parser.add_subparsers(dest="command")
+
+    p_build = sub.add_parser("build", help="Build Docker images from local source")
+    p_build.add_argument(
+        "images",
+        nargs="*",
+        default=None,
+        help="Images to build (e.g. api ui worker-general). Omit for all.",
+    )
+
+    sub.add_parser("start", help="Start services")
+    sub.add_parser("stop", help="Stop services")
+
+    p_restart = sub.add_parser("restart", help="Restart service or all")
+    p_restart.add_argument("service", nargs="?", default=None)
+
+    sub.add_parser("health", help="Health check")
+
+    p_config = sub.add_parser("config", help="Show or set config")
+    config_sub = p_config.add_subparsers(dest="config_action")
+    p_set = config_sub.add_parser("set", help="Set a config value")
+    p_set.add_argument("key")
+    p_set.add_argument("value")
+    p_unset = config_sub.add_parser("unset", help="Remove a config value")
+    p_unset.add_argument("key")
+
+    p_logs = sub.add_parser("logs", help="View logs")
+    p_logs.add_argument("service", nargs="?", default=None)
+
+    sub.add_parser("workers", help="List/scale workers")
+    sub.add_parser("reset-password", help="Reset admin password")
+
+    p_backup = sub.add_parser("backup", help="Backup database + files")
+    p_backup.add_argument(
+        "what",
+        nargs="?",
+        choices=["all", "db", "orgs"],
+        default="all",
+        help="What to back up (default: all)",
+    )
+
+    p_restore = sub.add_parser("restore", help="Restore from backup")
+    p_restore.add_argument("path", nargs="?", default=None)
+
+    sub.add_parser("upgrade", help="Pull latest Studio version + restart")
+    sub.add_parser("links", help="Print service URLs")
+    p_launch = sub.add_parser("launch-full", help="Launch the self-contained full image and open its console")
+    p_launch.add_argument("--tag", help="Image tag to launch (default: latest)")
+    p_launch.add_argument("--workspace", help="Host data dir (default: ~/.studio)")
+    p_launch_core = sub.add_parser("launch-core", help="Launch the core image (external Postgres) and open its console")
+    p_launch_core.add_argument("--tag", help="Image tag to launch (default: latest)")
+    p_launch_core.add_argument("--workspace", help="Host data dir (default: ~/.studio-core)")
+    p_core_db = sub.add_parser("core-db-url", help="Set core's external database URL for the next launch-core")
+    p_core_db.add_argument("url", nargs="?", default=None, help="postgresql+asyncpg://user:pass@host:5432/db (prompts if omitted)")
+    sub.add_parser("wizard", help="Run setup wizard")
+    sub.add_parser("init", help="Non-interactive setup from env vars (undocumented)")
+    sub.add_parser("self-update", help="Update studio-console to the latest version")
+    sub.add_parser("version", help="Print version")
+
+
+    return parser
+
+
+def main() -> None:
+    parser = build_parser()
+    args = parser.parse_args()
+
+    context = detect_context()
+    ef = env_path(context)
+
+    if args.command is None:
+        try:
+            if context in ("container", "runpod"):
+                # In-container mode: entrypoint owns provisioning, console is
+                # purely an operator tool. No wizard, no compose-shaped commands.
+                container_menu(context, ef)
+            else:
+                if not ef.exists():
+                    if not wizard(context, ef):
+                        return  # wizard aborted
+                # Always show the main menu (wizard saves .env, then we land here)
+                config_menu(context, ef)
+        except (NavBack, NavExit, KeyboardInterrupt):
+            print()
+        return
+
+    dispatch = {
+        "build": lambda: cmd_build(ef, args.images if args.images else None),
+        "start": lambda: sys.exit(0 if cmd_start(context, ef) is not False else 1),
+        "stop": lambda: cmd_stop(context, ef),
+        "restart": lambda: cmd_restart(context, ef, args.service),
+        "health": lambda: cmd_health(context, ef),
+        "config": lambda: (
+            cmd_config_set(ef, args.key, args.value)
+            if getattr(args, "config_action", None) == "set"
+            else cmd_config_unset(ef, args.key)
+            if getattr(args, "config_action", None) == "unset"
+            else cmd_show_config(context, ef)
+        ),
+        "logs": lambda: cmd_logs(context, ef, args.service),
+        "workers": lambda: cmd_workers(context, ef),
+        "reset-password": lambda: cmd_reset_password(context, ef),
+        "backup": lambda: cmd_backup(context, ef, args.what),
+        "restore": lambda: cmd_restore(context, ef, args.path),
+        "upgrade": lambda: cmd_upgrade(context, ef),
+        "links": lambda: cmd_links(context, ef),
+        "launch-full": lambda: sys.exit(
+            0 if cmd_launch_full(
+                context,
+                args.tag,
+                Path(os.path.expanduser(args.workspace)) if args.workspace else None,
+            ) else 1
+        ),
+        "launch-core": lambda: sys.exit(
+            0 if cmd_launch_core(
+                context,
+                args.tag,
+                Path(os.path.expanduser(args.workspace)) if args.workspace else None,
+            ) else 1
+        ),
+        "core-db-url": lambda: sys.exit(0 if cmd_set_core_db_url(context, args.url) else 1),
+        "wizard": lambda: wizard(context, ef),
+        "init": lambda: sys.exit(0 if wizard_non_interactive(context, ef) else 1),
+        "self-update": lambda: cmd_self_update(context),
+        "version": lambda: cmd_version(),
+    }
+
+    handler = dispatch.get(args.command)
+    if handler:
+        handler()
+    else:
+        parser.print_help()
+
+
+def cmd_version() -> None:
+    from . import __version__
+    print(f"studio-console {__version__}")

studio_console/cloudflare/__init__.py

@@ -0,0 +1 @@
+# studio_console/cloudflare/__init__.py