Asfmq
cec4b8cf7b
Docker 容器化部署
- 提供 Mode A (Alpine musl, ~23MB) 和 Mode B (Distroless glibc, ~87MB)
两种镜像，Docker Compose 一键启动
- build.rs 支持 SKIP_DASHBOARD_BUILD 跳过前端构建
- 国内镜像加速 (npm/apt/apk) 通过 USE_MIRRORS build-arg 控制
安全：Cookie-Based 鉴权系统
- HttpOnly/SameSite=Strict Cookie 会话管理（24h 过期自动清理）
- 登录/登出/验证接口 + 中间件注入
- 前端登录页面 + 退出按钮
- 三层 CORS：localhost 鉴权 / 全放通 bookmarklet / 受保护路由
- 书签脚本 fetch 添加 credentials:'include'
Coordinator 模式 (P2)
- 4 个 meta-tool (delegate_task/check_task/task_stop/synthesize)
- WorkerPool + Semaphore 并发控制 + 超时保护
- 前端协调者模式开关
Hook 系统：UserPromptSubmit 事件 (P2)
- 第 13 个生命周期事件，fire-and-forget 审计
FTS5 全文搜索 (P3)
- agent_sessions_fts + agent_messages_fts 虚拟表
- search_history Agent 工具 + /api/search/history HTTP 接口
- 前端防抖搜索框 + 仅当前会话筛选
工具加载优化 (P3)
- defer_loading 延迟加载 (7 个重型工具)
- is_readonly 只读标记 (9 个查询工具)
- classifier_summary 工具目录供 LLM 按需判断
模型回退策略 (P3)
- LLM_FALLBACK_MODEL 优先回退 + LLM_FALLBACK_CHAIN 链式轮换
- LlmClient model 改为 Arc<RwLock> 支持运行时切换
- 连续 3 次过载后自动切换
压缩记忆桥接 (P3)
- 压缩丢弃消息 → 子代理提取持久记忆 (extract_memories_from_compaction)
git2 依赖修复
- 切换到 vendored-libgit2，消除 OpenSSL 系统依赖
102 lines
3.7 KiB
Docker
102 lines
3.7 KiB
Docker
# =============================================================================
|
|
# AstroResearch Dockerfile — Mode A (外部 obscura 二进制)
|
|
# =============================================================================
|
|
#
|
|
# 构建:
|
|
# docker build -t astroresearch:latest .
|
|
#
|
|
# 海外网络构建:
|
|
# docker build --build-arg USE_MIRRORS=0 -t astroresearch:latest .
|
|
#
|
|
# 运行:
|
|
# docker run -d --name astro -p 8000:8000 --env-file .env \
|
|
# -v ./library:/app/library \
|
|
# -v ./logs:/app/logs \
|
|
# -v ./skills:/app/skills:ro \
|
|
# -v ./bin:/app/bin:ro \
|
|
# astroresearch:latest
|
|
# =============================================================================
|
|
|
|
# ─── Stage 1: 前端 ───────────────────────────────────────────────────────────
|
|
FROM node:22-alpine AS frontend-builder
|
|
|
|
ARG USE_MIRRORS=1
|
|
WORKDIR /app/dashboard
|
|
|
|
RUN if [ "$USE_MIRRORS" = "1" ]; then \
|
|
npm config set registry https://registry.npmmirror.com; \
|
|
fi
|
|
|
|
COPY dashboard/package.json dashboard/package-lock.json ./
|
|
RUN npm ci
|
|
COPY dashboard/ ./
|
|
RUN npm run build
|
|
|
|
# ─── Stage 2: Rust 后端 (musl 静态链接) ──────────────────────────────────────
|
|
FROM rust:1.94-alpine AS backend-builder
|
|
|
|
ARG USE_MIRRORS=1
|
|
|
|
RUN if [ "$USE_MIRRORS" = "1" ]; then \
|
|
sed -i 's|dl-cdn.alpinelinux.org|mirrors.aliyun.com|g' /etc/apk/repositories; \
|
|
fi
|
|
|
|
RUN apk add --no-cache musl-dev cmake pkgconfig openssl-dev openssl-libs-static
|
|
|
|
# sqlite-vec v0.1.9 与 musl 不兼容: musl 无 BSD u_int*_t 类型
|
|
# typedef u_int8_t uint8_t → typedef uint8_t uint8_t (C11 合法)
|
|
ENV CFLAGS="-Du_int8_t=uint8_t -Du_int16_t=uint16_t -Du_int64_t=uint64_t"
|
|
|
|
WORKDIR /app
|
|
|
|
# Cargo 解析阶段就需要可选 path 依赖存在，即使不启用对应 feature
|
|
RUN mkdir -p libs/obscura/crates/obscura-browser/src && \
|
|
printf '[package]\nname = "obscura-browser"\nversion = "0.1.0"\nedition = "2021"\n\n[features]\nstealth = []\n' \
|
|
> libs/obscura/crates/obscura-browser/Cargo.toml && \
|
|
echo '' > libs/obscura/crates/obscura-browser/src/lib.rs && \
|
|
mkdir -p libs/obscura/crates/obscura-net/src && \
|
|
printf '[package]\nname = "obscura-net"\nversion = "0.1.0"\nedition = "2021"\n\n[features]\nstealth = []\n' \
|
|
> libs/obscura/crates/obscura-net/Cargo.toml && \
|
|
echo '' > libs/obscura/crates/obscura-net/src/lib.rs
|
|
|
|
ENV SKIP_DASHBOARD_BUILD=1
|
|
COPY Cargo.toml Cargo.lock build.rs ./
|
|
COPY src/ ./src/
|
|
COPY migrations/ ./migrations/
|
|
COPY --from=frontend-builder /app/dashboard/dist/ ./dashboard/dist/
|
|
|
|
RUN cargo build --profile release-min && \
|
|
cp /app/target/release-min/astroresearch /usr/local/bin/astroresearch
|
|
|
|
# ─── Stage 3: 运行时 ─────────────────────────────────────────────────────────
|
|
FROM alpine:3.21
|
|
|
|
ARG USE_MIRRORS=1
|
|
|
|
RUN if [ "$USE_MIRRORS" = "1" ]; then \
|
|
sed -i 's|dl-cdn.alpinelinux.org|mirrors.aliyun.com|g' /etc/apk/repositories; \
|
|
fi
|
|
|
|
RUN apk add --no-cache ca-certificates tzdata
|
|
|
|
RUN addgroup -g 65532 -S astro && adduser -u 65532 -S astro -G astro
|
|
|
|
WORKDIR /app
|
|
|
|
COPY --from=backend-builder /usr/local/bin/astroresearch /app/
|
|
COPY --from=frontend-builder /app/dashboard/dist/ ./dashboard/dist/
|
|
COPY skills/ ./skills/
|
|
COPY migrations/ ./migrations/
|
|
|
|
RUN mkdir -p /app/library /app/logs /app/bin
|
|
|
|
VOLUME ["/app/library", "/app/logs", "/app/skills", "/app/bin"]
|
|
|
|
USER astro
|
|
EXPOSE 8000
|
|
|
|
HEALTHCHECK --interval=30s --timeout=10s --start-period=15s --retries=3 \
|
|
CMD wget -q --spider http://localhost:8000/ || exit 1
|
|
|
|
ENTRYPOINT ["/app/astroresearch"]
|