mirror of
https://github.com/Colton-z/AstraBox.git
synced 2026-09-28 06:02:56 +08:00
Colton QiandClaude
5ed0137859
Strengthen sandbox isolation and authentication, make all five engines work through the bundled installer, and preserve conversations across sandbox and service restarts. Add team login and single-container deployment, with upgrade instructions for replacing existing 0.1.0 sandboxes. Co-Authored-By: Claude <noreply@anthropic.com>
109 lines
4.3 KiB
Bash
Executable File
109 lines
4.3 KiB
Bash
Executable File
#!/usr/bin/env bash
|
|
# One-command source development stack. Python code is mounted into the
|
|
# maintained container topology, so local development exercises the same
|
|
# private database network and sandbox-edge boundary as deployment.
|
|
set -euo pipefail
|
|
|
|
SCRIPT_DIR="$(cd "$(dirname "${BASH_SOURCE[0]}")" && pwd)"
|
|
REPO_ROOT="$(cd "$SCRIPT_DIR/.." && pwd)"
|
|
cd "$REPO_ROOT"
|
|
|
|
ENV_FILE="${ASTRABOX_DEV_ENV_FILE:-$REPO_ROOT/.env}"
|
|
BACKEND_PORT="${ASTRABOX_DEV_BACKEND_PORT:-8000}"
|
|
FRONTEND_PORT="${ASTRABOX_DEV_FRONTEND_PORT:-5173}"
|
|
COMPOSE_PROJECT="${ASTRABOX_DEV_COMPOSE_PROJECT:-astrabox-dev}"
|
|
SERVER_IMAGE="${ASTRABOX_SERVER_IMAGE:-astrabox/server:latest}"
|
|
|
|
log() { printf '\033[36m[dev]\033[0m %s\n' "$*" >&2; }
|
|
die() { printf '\033[31m[dev] ERROR:\033[0m %s\n' "$*" >&2; exit 1; }
|
|
|
|
command -v docker >/dev/null 2>&1 || die "Docker CLI not found"
|
|
docker version --format '{{.Server.Version}}' >/dev/null 2>&1 \
|
|
|| die "Docker daemon is not reachable"
|
|
|
|
if [ -f "$ENV_FILE" ]; then
|
|
log "loading provider settings from $ENV_FILE"
|
|
set -a
|
|
# shellcheck disable=SC1090
|
|
. "$ENV_FILE"
|
|
set +a
|
|
else
|
|
log "no $ENV_FILE; the console will open, but a real turn needs a model provider key"
|
|
fi
|
|
|
|
SERVER_IMAGE="${ASTRABOX_SERVER_IMAGE:-$SERVER_IMAGE}"
|
|
docker image inspect "$SERVER_IMAGE" >/dev/null 2>&1 \
|
|
|| die "server image $SERVER_IMAGE is missing; run 'make build-server-image' once"
|
|
|
|
# Use task-owned names and ports so this stack cannot attach to or stop another
|
|
# Compose deployment on the same workstation.
|
|
export ASTRABOX_SERVER_IMAGE="$SERVER_IMAGE"
|
|
export ASTRABOX_SERVER_HOST_PORT="$BACKEND_PORT"
|
|
export ASTRABOX_POSTGRES_PORT="${ASTRABOX_DEV_POSTGRES_PORT:-$((BACKEND_PORT + 30000))}"
|
|
export ASTRABOX_REDIS_PORT="${ASTRABOX_DEV_REDIS_PORT:-$((BACKEND_PORT + 31000))}"
|
|
export ASTRABOX_POSTGRES_VOLUME="${ASTRABOX_DEV_POSTGRES_VOLUME:-astrabox-dev-postgres}"
|
|
export ASTRABOX_STATE_VOLUME="${ASTRABOX_DEV_STATE_VOLUME:-astrabox-dev-state}"
|
|
export ASTRABOX_LOCAL_DATABASE_SECRET_DIR="${ASTRABOX_DEV_DATABASE_SECRET_DIR:-$REPO_ROOT/.astrabox/dev-database-secrets}"
|
|
if [ -z "${DOCKER_GID:-}" ]; then
|
|
DOCKER_GID="$(stat -c %g /var/run/docker.sock 2>/dev/null \
|
|
|| stat -f %g /var/run/docker.sock 2>/dev/null)" \
|
|
|| die "cannot determine the Docker socket group"
|
|
export DOCKER_GID
|
|
fi
|
|
|
|
# Deployment-wide values from an unrelated .env must not bypass this stack's
|
|
# generated database files or dynamic edge discovery. Dedicated dev overrides
|
|
# remain available for deliberately external services.
|
|
export ASTRABOX_DB_URL="${ASTRABOX_DEV_DB_URL:-}"
|
|
export LITELLM_DATABASE_URL="${ASTRABOX_DEV_LITELLM_DATABASE_URL:-}"
|
|
export ASTRABOX_MCP_PROXY_BASE_URL="${ASTRABOX_DEV_MCP_PROXY_BASE_URL:-}"
|
|
export ASTRABOX_SANDBOX_GATEWAY_IP="${ASTRABOX_DEV_SANDBOX_EDGE_IP:-}"
|
|
export ASTRABOX_SANDBOX_EGRESS_DNS_UPSTREAM="${ASTRABOX_DEV_SANDBOX_EGRESS_DNS_UPSTREAM:-}"
|
|
export ASTRABOX_LITELLM_BASE_URL="${ASTRABOX_DEV_LITELLM_BASE_URL:-}"
|
|
export ASTRABOX_LITELLM_SERVER_BASE_URL="${ASTRABOX_DEV_LITELLM_SERVER_BASE_URL:-}"
|
|
export ASTRABOX_DEV_PROXY_TARGET="http://127.0.0.1:$BACKEND_PORT"
|
|
|
|
COMPOSE_ARGS=(
|
|
--project-name "$COMPOSE_PROJECT"
|
|
-f containers/compose.source.yaml
|
|
)
|
|
PIDS=()
|
|
|
|
cleanup() {
|
|
local rc=$?
|
|
trap - EXIT INT TERM
|
|
for pid in "${PIDS[@]:-}"; do
|
|
[ -n "$pid" ] && kill "$pid" >/dev/null 2>&1 || true
|
|
done
|
|
log "stopping source-development containers"
|
|
"$REPO_ROOT/scripts/compose.sh" "${COMPOSE_ARGS[@]}" down --remove-orphans \
|
|
>/dev/null 2>&1 || true
|
|
wait 2>/dev/null || true
|
|
exit "$rc"
|
|
}
|
|
trap cleanup EXIT INT TERM
|
|
|
|
"$REPO_ROOT/scripts/compose.sh" "${COMPOSE_ARGS[@]}" up -d --wait --no-build
|
|
log "backend -> http://127.0.0.1:$BACKEND_PORT (containerized uvicorn --reload)"
|
|
log "database -> private Compose network; generated credentials in $ASTRABOX_LOCAL_DATABASE_SECRET_DIR"
|
|
|
|
"$REPO_ROOT/scripts/compose.sh" "${COMPOSE_ARGS[@]}" logs -f --no-log-prefix server &
|
|
PIDS+=("$!")
|
|
|
|
if [ "${ASTRABOX_DEV_BACKEND_ONLY:-0}" != "1" ]; then
|
|
if [ -d "$REPO_ROOT/frontend/node_modules" ]; then
|
|
log "frontend -> http://127.0.0.1:$FRONTEND_PORT"
|
|
(
|
|
cd "$REPO_ROOT/frontend"
|
|
exec python3 "$REPO_ROOT/scripts/node-toolchain.py" \
|
|
npm run dev -- --port "$FRONTEND_PORT" --strictPort
|
|
) &
|
|
PIDS+=("$!")
|
|
else
|
|
log "frontend/node_modules is missing; run 'make install-web'"
|
|
fi
|
|
fi
|
|
|
|
log "stack is ready; Ctrl-C stops its containers but preserves its data volumes"
|
|
wait -n
|