aa-proxy 0.0.1-alpha.8

Sidecar traffic interception proxy for Agent Assembly
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46

# Builder stage: compiles aa-proxy for the target musl architecture
FROM rust:alpine AS builder

# Install build-time dependencies
RUN apk add --no-cache \
    musl-dev \
    protobuf-dev \
    openssl-dev \
    pkgconfig

# Select the correct musl target based on Docker's TARGETARCH build arg,
# add the target, build the release binary, strip it, and place it at a
# fixed path so the final stage can copy it regardless of architecture.
ARG TARGETARCH
RUN case "$TARGETARCH" in \
      amd64) TARGET=x86_64-unknown-linux-musl ;; \
      arm64) TARGET=aarch64-unknown-linux-musl ;; \
      *) echo "Unsupported arch: $TARGETARCH" && exit 1 ;; \
    esac && \
    rustup target add "$TARGET" && \
    echo "$TARGET" > /tmp/rust_target

WORKDIR /app

COPY . .

RUN TARGET=$(cat /tmp/rust_target) && \
    cargo build --release --target "$TARGET" -p aa-proxy && \
    strip "target/$TARGET/release/aa-proxy" && \
    cp "target/$TARGET/release/aa-proxy" /app/aa-proxy-bin

# Final stage: minimal distroless image running as non-root
FROM gcr.io/distroless/static:nonroot AS runtime

COPY --from=builder /app/aa-proxy-bin /aa-proxy

LABEL org.opencontainers.image.source="https://github.com/ai-agent-assembly/agent-assembly" \
      org.opencontainers.image.description="aa-proxy sidecar — AAASM traffic interception proxy" \
      org.opencontainers.image.licenses="Apache-2.0"

ENV AA_PROXY_ADDR="0.0.0.0:8080"
ENV AA_PROXY_LLM_ONLY="false"

EXPOSE 8080

ENTRYPOINT ["/aa-proxy"]