V4.14.10 dev (#6686)

* docker

* fix: community version check

* perf: deploy doc

* doc

* doc

* remove invalide md

deploy/docker/global/docker-compose.oceanbase.yml

@@ -11,6 +11,8 @@ x-system-key: &x-system-key 'fastgpt-xxx'
 x-plugin-auth-token: &x-plugin-auth-token 'token'
 # code sandbox token
 x-code-sandbox-token: &x-code-sandbox-token 'codesandbox'
+# volume manager auth token
+x-volume-manager-auth-token: &x-volume-manager-auth-token 'vmtoken'
 # aiproxy token
 x-aiproxy-token: &x-aiproxy-token 'token'
 # 数据库连接相关配置
@@ -168,7 +170,7 @@ services:
 
   fastgpt:
     container_name: fastgpt
-    image: ghcr.io/labring/fastgpt:v4.14.9.5 # git
+    image: ghcr.io/labring/fastgpt:v4.14.10 
     ports:
       - 3000:3000
     networks:
@@ -211,6 +213,19 @@ services:
       # AI Proxy 的 Admin Token，与 AI Proxy 中的环境变量 ADMIN_KEY
       AIPROXY_API_TOKEN: *x-aiproxy-token
 
+      # ==================== Agent sandbox 配置 ====================
+      AGENT_SANDBOX_PROVIDER: opensandbox
+      # OpenSandbox 配置（PROVIDER: opensandbox 时生效）
+      AGENT_SANDBOX_OPENSANDBOX_BASEURL: http://opensandbox-server:8090
+      AGENT_SANDBOX_OPENSANDBOX_API_KEY:
+      AGENT_SANDBOX_OPENSANDBOX_RUNTIME: docker
+      AGENT_SANDBOX_OPENSANDBOX_IMAGE_REPO: undefined
+      AGENT_SANDBOX_OPENSANDBOX_IMAGE_TAG: v0.0.2
+      # Volume 持久化配置（opensandbox provider 下可选）
+      AGENT_SANDBOX_ENABLE_VOLUME: true
+      AGENT_SANDBOX_VOLUME_MANAGER_URL: http://volume-manager:3000
+      AGENT_SANDBOX_VOLUME_MANAGER_TOKEN: *x-volume-manager-auth-token
+
       # ==================== 日志与监控 ====================
       # 传递给 OTLP 收集器的服务名称
       LOG_OTEL_SERVICE_NAME: fastgpt-client
@@ -242,7 +257,7 @@ services:
       - ./config.json:/app/data/config.json
   code-sandbox:
     container_name: code-sandbox
-    image: ghcr.io/labring/fastgpt-sandbox:v4.14.9.5
+    image: ghcr.io/labring/fastgpt-code-sandbox:v4.14.10
     networks:
       - fastgpt
     restart: always
@@ -287,7 +302,7 @@ services:
       retries: 3
   fastgpt-mcp-server:
     container_name: fastgpt-mcp-server
-    image: ghcr.io/labring/fastgpt-mcp_server:v4.14.9
+    image: ghcr.io/labring/fastgpt-mcp_server:v4.14.10
     networks:
       - fastgpt
     ports:
@@ -297,7 +312,7 @@ services:
       <<: [*x-log-config]
       FASTGPT_ENDPOINT: http://fastgpt:3000
   fastgpt-plugin:
-    image: ghcr.io/labring/fastgpt-plugin:v0.5.5
+    image: ghcr.io/labring/fastgpt-plugin:v0.5.6
     container_name: fastgpt-plugin
     restart: always
     networks:
@@ -319,6 +334,60 @@ services:
       interval: 30s
       timeout: 20s
       retries: 3
+
+  # 沙盒控制器：管理 Docker 容器的创建/执行/停止/删除
+  # runtime=docker 模式需要挂载 Docker socket
+  # 配置 docker.host_ip 为宿主机 LAN IP（容器内访问宿主机服务用）
+  opensandbox-server:
+    image: registry.cn-hangzhou.aliyuncs.com/fastgpt/opensandbox-server:v0.1.9
+    container_name: opensandbox-server
+    restart: always
+    networks:
+      - fastgpt
+    volumes:
+      - /var/run/docker.sock:/var/run/docker.sock # Docker 模式必须挂载
+    configs:
+      - source: opensandbox-config
+        target: /etc/opensandbox/config.toml
+    environment:
+      SANDBOX_CONFIG_PATH: /etc/opensandbox/config.toml
+    healthcheck:
+      test: ['CMD', 'curl', '-f', 'http://localhost:8090/health']
+      interval: 10s
+      timeout: 5s
+      retries: 5
+  # 卷管理微服务：负责幂等创建/删除 Docker named volume 或 k8s PVC
+  volume-manager:
+    image: ghcr.io/labring/fastgpt-agent-volume-manager:v0.0.2
+    container_name: volume-manager
+    restart: always
+    networks:
+      - fastgpt
+    volumes:
+      - /var/run/docker.sock:/var/run/docker.sock:ro # Docker 模式必须挂载（只读即可）
+    environment:
+      PORT: 3000
+      VM_RUNTIME: docker
+      VM_AUTH_TOKEN: *x-volume-manager-auth-token # 对应 AGENT_SANDBOX_VOLUME_MANAGER_TOKEN
+      VM_VOLUME_NAME_PREFIX: fastgpt-session # volume 名称前缀
+      VM_LOG_LEVEL: info
+    healthcheck:
+      test:
+        [
+          'CMD',
+          'bun',
+          '-e',
+          "fetch('http://localhost:3000/health').then((res) => { if (!res.ok) throw new Error(String(res.status)); })"
+        ]
+      interval: 10s
+      timeout: 5s
+      retries: 5
+  # Pre-pull only: not started by `docker compose up` (uses profile `prepull`).
+  agent-sandbox-image:
+    image: undefined:v0.0.2
+    profiles:
+      - prepull
+
   # AI Proxy
   aiproxy:
     image: ghcr.io/labring/aiproxy:v0.3.5
@@ -370,9 +439,29 @@ networks:
   fastgpt:
   aiproxy:
   vector:
+
 configs:
+  opensandbox-config:
+    content: |
+      [server]
+      host = "0.0.0.0"
+      port = 8090
+      log_level = "INFO"
+
+      [runtime]
+      type = "docker"
+       execd_image = "sandbox-registry.cn-zhangjiakou.cr.aliyuncs.com/opensandbox/execd:v1.0.6"
+
+      [egress]
+      image = "sandbox-registry.cn-zhangjiakou.cr.aliyuncs.com/opensandbox/egress:v1.0.1"
+
+      [docker]
+      network_mode = "bridge"
+      # 容器内访问宿主机服务时需要设置为宿主机 IP 或 hostname
+      # macOS/Windows: host.docker.internal；Linux: 宿主机 LAN IP（如 192.168.1.100）
+      host_ip = "host.docker.internal"
   init_sql:
     name: init_sql
     content: |
       ALTER SYSTEM SET ob_vector_memory_limit_percentage = 30;
-    
+