feat: harden orchestrator execution runtime

deploy/orchestrator/.env.example

@@ -1,3 +1,14 @@
 ORCHESTRATOR_POSTGRES_PASSWORD=replace-with-a-long-random-password
 MEMIND_ORCHESTRATOR_SERVICE_TOKEN=replace-with-a-long-random-service-token
+MEMIND_ORCHESTRATOR_WORKER_TOKEN=replace-with-a-distinct-long-random-worker-token
 MEMIND_ORCHESTRATOR_PORT=8093
+
+# Closed by default. A local canary requires all three values plus the
+# goosed-worker Compose profile.
+MEMIND_ORCHESTRATOR_EXECUTION_ENABLED=0
+MEMIND_ORCHESTRATOR_ENABLED_EXECUTORS=
+MEMIND_ORCHESTRATOR_USER_ALLOWLIST=
+MEMIND_ORCHESTRATOR_TENANT_ALLOWLIST=
+MEMIND_EXECUTOR_GOOSED_URL=http://host.docker.internal:18006
+MEMIND_EXECUTOR_GOOSED_TOKEN=
+MEMIND_EXECUTOR_WORKSPACE_ALIASES_JSON={}

deploy/orchestrator/compose.executor-workers.example.yaml

@@ -0,0 +1,55 @@
+services:
+  worker-aider:
+    profiles: ["aider-worker"]
+    image: ${MEMIND_AIDER_WORKER_IMAGE:?set a dedicated image containing Node and Aider}
+    command: ["node", "/app/worker.mjs"]
+    restart: unless-stopped
+    environment:
+      MEMIND_ORCHESTRATOR_URL: http://orchestrator:8093
+      MEMIND_ORCHESTRATOR_SERVICE_TOKEN: ${MEMIND_ORCHESTRATOR_SERVICE_TOKEN:?set service token}
+      MEMIND_ORCHESTRATOR_WORKER_TOKEN: ${MEMIND_ORCHESTRATOR_WORKER_TOKEN:?set worker token}
+      MEMIND_EXECUTOR_WORKER_ID: aider-1
+      MEMIND_EXECUTOR_AIDER_COMMAND: /usr/local/bin/aider
+      MEMIND_EXECUTOR_WORKSPACE_ROOT: /workspaces
+      MEMIND_EXECUTOR_WORKSPACE_ALIASES_JSON: ${MEMIND_EXECUTOR_WORKSPACE_ALIASES_JSON:?use container paths below /workspaces}
+    volumes:
+      - ${MEMIND_EXECUTOR_HOST_WORKSPACE_ROOT:?set isolated host workspace root}:/workspaces:rw
+    read_only: true
+    tmpfs:
+      - /tmp:size=256m
+    cap_drop: [ALL]
+    security_opt: [no-new-privileges:true]
+    pids_limit: 256
+    mem_limit: 4g
+    cpus: 2
+    networks: [orchestrator_edge]
+
+  worker-openhands:
+    profiles: ["openhands-worker"]
+    image: ${MEMIND_OPENHANDS_WORKER_IMAGE:?set a dedicated image containing Node and OpenHands}
+    command: ["node", "/app/worker.mjs"]
+    restart: unless-stopped
+    environment:
+      MEMIND_ORCHESTRATOR_URL: http://orchestrator:8093
+      MEMIND_ORCHESTRATOR_SERVICE_TOKEN: ${MEMIND_ORCHESTRATOR_SERVICE_TOKEN:?set service token}
+      MEMIND_ORCHESTRATOR_WORKER_TOKEN: ${MEMIND_ORCHESTRATOR_WORKER_TOKEN:?set worker token}
+      MEMIND_EXECUTOR_WORKER_ID: openhands-1
+      MEMIND_EXECUTOR_OPENHANDS_COMMAND: /usr/local/bin/openhands
+      MEMIND_EXECUTOR_WORKSPACE_ROOT: /workspaces
+      MEMIND_EXECUTOR_WORKSPACE_ALIASES_JSON: ${MEMIND_EXECUTOR_WORKSPACE_ALIASES_JSON:?use container paths below /workspaces}
+    volumes:
+      - ${MEMIND_EXECUTOR_HOST_WORKSPACE_ROOT:?set isolated host workspace root}:/workspaces:rw
+    read_only: true
+    tmpfs:
+      - /tmp:size=512m
+    cap_drop: [ALL]
+    security_opt: [no-new-privileges:true]
+    pids_limit: 512
+    mem_limit: 8g
+    cpus: 4
+    networks: [orchestrator_edge]
+
+networks:
+  orchestrator_edge:
+    external: true
+    name: orchestrator_orchestrator_edge

deploy/orchestrator/compose.yaml

@@ -32,12 +32,54 @@ services:
       MEMIND_ORCHESTRATOR_DATABASE_URL: postgresql://memind_orchestrator:${ORCHESTRATOR_POSTGRES_PASSWORD}@postgres:5432/memind_orchestrator
       MEMIND_ORCHESTRATOR_DATABASE_SCHEMA: memind_orchestrator
       MEMIND_ORCHESTRATOR_SERVICE_TOKEN: ${MEMIND_ORCHESTRATOR_SERVICE_TOKEN:?set MEMIND_ORCHESTRATOR_SERVICE_TOKEN}
+      MEMIND_ORCHESTRATOR_WORKER_TOKEN: ${MEMIND_ORCHESTRATOR_WORKER_TOKEN:-local-worker-disabled}
+      MEMIND_ORCHESTRATOR_EXECUTION_ENABLED: ${MEMIND_ORCHESTRATOR_EXECUTION_ENABLED:-0}
+      MEMIND_ORCHESTRATOR_ENABLED_EXECUTORS: ${MEMIND_ORCHESTRATOR_ENABLED_EXECUTORS:-}
+      MEMIND_ORCHESTRATOR_TENANT_ALLOWLIST: ${MEMIND_ORCHESTRATOR_TENANT_ALLOWLIST:-}
+      MEMIND_ORCHESTRATOR_USER_ALLOWLIST: ${MEMIND_ORCHESTRATOR_USER_ALLOWLIST:-}
+      MEMIND_ORCHESTRATOR_WORKSPACE_KIND_ALLOWLIST: ${MEMIND_ORCHESTRATOR_WORKSPACE_KIND_ALLOWLIST:-workspace-alias}
+      MEMIND_ORCHESTRATOR_MAX_GLOBAL_ACTIVE: ${MEMIND_ORCHESTRATOR_MAX_GLOBAL_ACTIVE:-20}
+      MEMIND_ORCHESTRATOR_MAX_TENANT_ACTIVE: ${MEMIND_ORCHESTRATOR_MAX_TENANT_ACTIVE:-5}
+      MEMIND_ORCHESTRATOR_MAX_USER_ACTIVE: ${MEMIND_ORCHESTRATOR_MAX_USER_ACTIVE:-2}
+      MEMIND_ORCHESTRATOR_MAX_TENANT_PER_MINUTE: ${MEMIND_ORCHESTRATOR_MAX_TENANT_PER_MINUTE:-30}
+      MEMIND_ORCHESTRATOR_MAX_USER_PER_MINUTE: ${MEMIND_ORCHESTRATOR_MAX_USER_PER_MINUTE:-10}
     ports:
       - "127.0.0.1:${MEMIND_ORCHESTRATOR_PORT:-8093}:8093"
     networks:
       - orchestrator_internal
       - orchestrator_edge
 
+  worker-goosed:
+    profiles: ["goosed-worker"]
+    image: memind/workflow-orchestrator:local
+    restart: unless-stopped
+    command: ["node", "worker.mjs"]
+    depends_on:
+      orchestrator:
+        condition: service_started
+    environment:
+      MEMIND_ORCHESTRATOR_URL: http://orchestrator:8093
+      MEMIND_ORCHESTRATOR_SERVICE_TOKEN: ${MEMIND_ORCHESTRATOR_SERVICE_TOKEN:?set MEMIND_ORCHESTRATOR_SERVICE_TOKEN}
+      MEMIND_ORCHESTRATOR_WORKER_TOKEN: ${MEMIND_ORCHESTRATOR_WORKER_TOKEN:-local-worker-disabled}
+      MEMIND_EXECUTOR_WORKER_ID: ${MEMIND_EXECUTOR_GOOSED_WORKER_ID:-colima-goosed-1}
+      MEMIND_EXECUTOR_GOOSED_URL: ${MEMIND_EXECUTOR_GOOSED_URL:-http://host.docker.internal:18006}
+      MEMIND_EXECUTOR_GOOSED_TOKEN: ${MEMIND_EXECUTOR_GOOSED_TOKEN:-}
+      MEMIND_EXECUTOR_ALLOW_REMOTE_GOOSED: "1"
+      MEMIND_EXECUTOR_WORKSPACE_ALIASES_JSON: ${MEMIND_EXECUTOR_WORKSPACE_ALIASES_JSON:-{}}
+      MEMIND_EXECUTOR_POLL_MS: ${MEMIND_EXECUTOR_POLL_MS:-1000}
+      MEMIND_EXECUTOR_HEARTBEAT_MS: ${MEMIND_EXECUTOR_HEARTBEAT_MS:-10000}
+      MEMIND_EXECUTOR_LEASE_MS: ${MEMIND_EXECUTOR_LEASE_MS:-30000}
+    read_only: true
+    tmpfs:
+      - /tmp:size=64m
+    cap_drop:
+      - ALL
+    security_opt:
+      - no-new-privileges:true
+    pids_limit: 128
+    networks:
+      - orchestrator_edge
+
 networks:
   orchestrator_internal:
     internal: true