Enhance Beryl Agent detail and report views

2026-09-11 11:13:24 +08:00
parent 336bf88466
commit 15f067fff9
57 changed files with 1833 additions and 95 deletions
@@ -0,0 +1,69 @@
+services:
+  agent:
+    build:
+      context: .
+      target: agent
+    init: true
+    user: "1000:1000"
+    read_only: true
+    cap_drop: [ALL]
+    security_opt: ["no-new-privileges:true"]
+    pids_limit: 128
+    cpus: 2.0
+    mem_limit: 4g
+    memswap_limit: 4g
+    restart: "no"
+    stop_grace_period: 15s
+    ports: ["127.0.0.1:${SANDBOX_PORT:-15173}:5173"]
+    networks: [isolated]
+    volumes:
+      - sandbox-data:/app/workspace
+    tmpfs:
+      - /tmp:rw,noexec,nosuid,size=256m,mode=1777
+      - /home/node:rw,noexec,nosuid,size=32m,uid=1000,gid=1000
+    environment:
+      NODE_USE_ENV_PROXY: "1"
+      HTTPS_PROXY: http://egress:3128
+      HTTP_PROXY: http://egress:3128
+      NO_PROXY: localhost,127.0.0.1
+      SANDBOX_MODE: docker
+      SANDBOX_TTL_SECONDS: "3600"
+      AGENT_SKILLS_DIRS: ""
+      ANTHROPIC_API_KEY: ${ANTHROPIC_API_KEY:-}
+      OPENAI_API_KEY: ${OPENAI_API_KEY:-}
+      SWADS_MCP_TOKEN: ${SWADS_MCP_TOKEN:-}
+      SWADS_MCP_URL: ${SWADS_MCP_URL:-https://ads.mincode.cn/mcp}
+    depends_on: [egress]
+    healthcheck:
+      test: [CMD, node, -e, "fetch('http://127.0.0.1:3001/health').then(r=>process.exit(r.ok?0:1)).catch(()=>process.exit(1))"]
+      interval: 10s
+      timeout: 3s
+      retries: 6
+    logging:
+      driver: json-file
+      options: {max-size: 10m, max-file: "3"}
+  egress:
+    build:
+      context: .
+      target: egress
+    user: "1000:1000"
+    read_only: true
+    cap_drop: [ALL]
+    security_opt: ["no-new-privileges:true"]
+    pids_limit: 32
+    cpus: 0.5
+    mem_limit: 128m
+    memswap_limit: 128m
+    restart: "no"
+    networks: [isolated, outbound]
+    environment:
+      EGRESS_HOSTS: ${SANDBOX_EGRESS_HOSTS:-gateway.pencil-stub.com,ads.mincode.cn}
+    logging:
+      driver: json-file
+      options: {max-size: 5m, max-file: "2"}
+networks:
+  isolated:
+    internal: true
+  outbound: {}
+volumes:
+  sandbox-data: {}