Asfmq
cec4b8cf7b
Docker 容器化部署
- 提供 Mode A (Alpine musl, ~23MB) 和 Mode B (Distroless glibc, ~87MB)
两种镜像，Docker Compose 一键启动
- build.rs 支持 SKIP_DASHBOARD_BUILD 跳过前端构建
- 国内镜像加速 (npm/apt/apk) 通过 USE_MIRRORS build-arg 控制
安全：Cookie-Based 鉴权系统
- HttpOnly/SameSite=Strict Cookie 会话管理（24h 过期自动清理）
- 登录/登出/验证接口 + 中间件注入
- 前端登录页面 + 退出按钮
- 三层 CORS：localhost 鉴权 / 全放通 bookmarklet / 受保护路由
- 书签脚本 fetch 添加 credentials:'include'
Coordinator 模式 (P2)
- 4 个 meta-tool (delegate_task/check_task/task_stop/synthesize)
- WorkerPool + Semaphore 并发控制 + 超时保护
- 前端协调者模式开关
Hook 系统：UserPromptSubmit 事件 (P2)
- 第 13 个生命周期事件，fire-and-forget 审计
FTS5 全文搜索 (P3)
- agent_sessions_fts + agent_messages_fts 虚拟表
- search_history Agent 工具 + /api/search/history HTTP 接口
- 前端防抖搜索框 + 仅当前会话筛选
工具加载优化 (P3)
- defer_loading 延迟加载 (7 个重型工具)
- is_readonly 只读标记 (9 个查询工具)
- classifier_summary 工具目录供 LLM 按需判断
模型回退策略 (P3)
- LLM_FALLBACK_MODEL 优先回退 + LLM_FALLBACK_CHAIN 链式轮换
- LlmClient model 改为 Arc<RwLock> 支持运行时切换
- 连续 3 次过载后自动切换
压缩记忆桥接 (P3)
- 压缩丢弃消息 → 子代理提取持久记忆 (extract_memories_from_compaction)
git2 依赖修复
- 切换到 vendored-libgit2，消除 OpenSSL 系统依赖
95 lines
3.5 KiB
Docker
95 lines
3.5 KiB
Docker
# =============================================================================
|
|
# AstroResearch Dockerfile — Mode B (进程内 obscura, 无外部二进制依赖)
|
|
# =============================================================================
|
|
#
|
|
# 前置条件:
|
|
# mkdir -p libs
|
|
# git clone https://github.com/h4ckf0r0day/obscura libs/obscura
|
|
#
|
|
# 并从 .dockerignore 中移除 "libs/" 行 (否则源码不会进构建上下文)
|
|
#
|
|
# 构建:
|
|
# docker build -f Dockerfile.modeB -t astroresearch-all:latest .
|
|
#
|
|
# 运行 (无需 bin/obscura, 反爬能力内置于单体二进制):
|
|
# docker run -d --name astro -p 8000:8000 --env-file .env \
|
|
# -v ./library:/app/library \
|
|
# -v ./logs:/app/logs \
|
|
# -v ./skills:/app/skills:ro \
|
|
# astroresearch-all:latest
|
|
#
|
|
# 注意: Mode B 依赖 deno_core → v8 (V8 JavaScript 引擎).
|
|
# Deno 只发布 glibc 目标的预编译 V8 静态库, 无 musl 版本.
|
|
# 因此构建和运行都必须使用 glibc (Debian), 不能用 Alpine/musl.
|
|
# =============================================================================
|
|
|
|
# ─── Stage 1: 前端 ───────────────────────────────────────────────────────────
|
|
FROM node:22-alpine AS frontend-builder
|
|
|
|
ARG USE_MIRRORS=1
|
|
WORKDIR /app/dashboard
|
|
|
|
RUN if [ "$USE_MIRRORS" = "1" ]; then \
|
|
npm config set registry https://registry.npmmirror.com; \
|
|
fi
|
|
|
|
COPY dashboard/package.json dashboard/package-lock.json ./
|
|
RUN npm ci
|
|
COPY dashboard/ ./
|
|
RUN npm run build
|
|
|
|
# ─── Stage 2: Rust 后端 (glibc, V8 预编译库仅支持 glibc) ────────────────────
|
|
FROM rust:1.94-slim-bookworm AS backend-builder
|
|
|
|
ARG USE_MIRRORS=1
|
|
|
|
RUN if [ "$USE_MIRRORS" = "1" ]; then \
|
|
sed -i 's|deb.debian.org|mirrors.ustc.edu.cn|g' /etc/apt/sources.list.d/debian.sources; \
|
|
fi
|
|
|
|
# build-essential: gcc g++ make; binutils: nm objcopy (btls-sys prefix-symbols)
|
|
# libclang-dev: libclang.so (bindgen FFI 生成, btls-sys + v8)
|
|
# cmake perl git curl python3: BoringSSL 编译 + V8 下载
|
|
# 注: 无需 libssl-dev/libgit2-dev — git2(default-features=false,无https) 不依赖 OpenSSL
|
|
RUN apt-get update && apt-get install -y --no-install-recommends \
|
|
build-essential binutils cmake pkg-config libclang-dev \
|
|
perl git curl python3 ca-certificates \
|
|
&& rm -rf /var/lib/apt/lists/*
|
|
|
|
# bindgen 需要找到 libclang.so; Debian bookworm 安装在 /usr/lib/llvm-14/lib/
|
|
ENV LIBCLANG_PATH=/usr/lib/llvm-14/lib
|
|
|
|
ENV SKIP_DASHBOARD_BUILD=1
|
|
|
|
WORKDIR /app
|
|
|
|
COPY Cargo.toml Cargo.lock build.rs ./
|
|
COPY src/ ./src/
|
|
COPY migrations/ ./migrations/
|
|
COPY libs/obscura/ ./libs/obscura/
|
|
COPY --from=frontend-builder /app/dashboard/dist/ ./dashboard/dist/
|
|
|
|
RUN cargo build --profile release-min --features obscura-inprocess && \
|
|
cp /app/target/release-min/astroresearch /usr/local/bin/astroresearch
|
|
|
|
# ─── Stage 3: 运行时 (distroless — 仅 glibc + 必需库, 无 shell/apt) ──────
|
|
FROM gcr.io/distroless/cc-debian12:nonroot
|
|
|
|
# frontend + skills + migrations 从构建阶段拷贝
|
|
COPY --from=frontend-builder /app/dashboard/dist/ /app/dashboard/dist/
|
|
COPY skills/ /app/skills/
|
|
COPY migrations/ /app/migrations/
|
|
|
|
# 二进制
|
|
COPY --from=backend-builder /usr/local/bin/astroresearch /app/astroresearch
|
|
|
|
WORKDIR /app
|
|
|
|
VOLUME ["/app/library", "/app/logs", "/app/skills"]
|
|
|
|
EXPOSE 8000
|
|
|
|
# 注: distroless 无 shell/wget, 无法使用传统 healthcheck.
|
|
# 编排层 (docker-compose/k8s) 可用 TCP probe 或 HTTP GET / 替代.
|
|
ENTRYPOINT ["/app/astroresearch"]
|