Hyperion: Prepare service for Artemis integration (#176)

Co-authored-by: coderabbitai[bot] <136622811+coderabbitai[bot]@users.noreply.github.com>

Author: FelixTJDietrich

.github/workflows/hyperion_deploy-test.yml

@@ -6,36 +6,14 @@ on:
       image-tag:
         type: string
         description: "Image tag to deploy (default: pr-<number> if PR exists, latest for default branch)"
-      deploy-hyperion:
-        type: boolean
-        default: true
-        description: (Re-)deploys hyperion.
-      deploy-proxy:
-        default: false
-        type: boolean
-        description: (Re-)deploys the proxy components. Usually not necessary and might cause downtime.
 
 jobs:  
-  deploy-hyperion:
-    if: ${{ inputs.deploy-hyperion }}
+  deploy-app:
     uses: ls1intum/.github/.github/workflows/deploy-docker-compose.yml@main
     with:
       environment: "Hyperion - Test 1"
-      docker-compose-file: "./hyperion/docker/compose.hyperion.yaml"
+      docker-compose-file: "./hyperion/compose.yaml"
       main-image-name: ls1intum/edutelligence/hyperion
       image-tag: ${{ inputs.image-tag }}
       deployment-base-path: "/opt/hyperion"
-    secrets: inherit
-
-  deploy-proxy:
-    if: ${{ inputs.deploy-proxy }}
-    uses: ls1intum/.github/.github/workflows/deploy-docker-compose.yml@main
-    with:
-      environment: "Hyperion - Test 1"
-      docker-compose-file: "./hyperion/docker/compose.proxy.yaml"
-      # We just keep the main-image-name and image-tag as placeholders
-      main-image-name: ls1intum/edutelligence/hyperion
-      image-tag: ${{ inputs.image-tag }}
-      deployment-base-path: "/opt/proxy"
-    secrets: inherit
-  
+    secrets: inherit

.github/workflows/hyperion_deploy-with-helios.yml

@@ -20,11 +20,11 @@ on:
         type: string
 
 jobs:  
-  deploy-hyperion:
+  deploy-app:
     uses: ls1intum/.github/.github/workflows/deploy-docker-compose.yml@main
     with:
       environment: ${{ inputs.environment_name }}
-      docker-compose-file: "./hyperion/docker/compose.hyperion.yaml"
+      docker-compose-file: "./hyperion/compose.yaml"
       main-image-name: ls1intum/edutelligence/hyperion
       image-tag: ${{ inputs.commit_sha }}
       deployment-base-path: "/opt/hyperion"

hyperion.code-workspace

@@ -2,21 +2,26 @@
 	"folders": [
 		{
 			"name": "EduTelligence",
-			"path": "./",
+			"path": "."
 		},
 		{
 			"name": "Hyperion",
-			"path": "./hyperion"
+			"path": "hyperion"
 		},
 		{
 			"name": "Shared",
-			"path": "./shared"
+			"path": "shared"
+		},
+		{
+			"name": "Artemis",
+			"path": "../Artemis"
 		}
 	],
 	"settings": {
 		"python.terminal.activateEnvironment": true,
 		"python.terminal.activateEnvInCurrentTerminal": true,
-		"python.defaultInterpreterPath": "${workspaceFolder}/.venv/bin/python"
+		"python.defaultInterpreterPath": "${workspaceFolder}/.venv/bin/python",
+		"java.configuration.updateBuildConfiguration": "interactive"
 	},
 	"extensions": {
 		"recommendations": [

hyperion/.env.example

@@ -1,3 +1,9 @@
+# mTLS for production, can be false for development
+TLS_ENABLED=false
+TLS_CERT_PATH=/certs/server.crt
+TLS_KEY_PATH=/certs/server.key
+TLS_CA_PATH=/certs/ca.crt 
+
 MODEL_NAME="openai:gpt-4o"
 
 # For Non-Azure OpenAI

hyperion/.gitignore

@@ -1,6 +1,9 @@
 .venv
 .DS_Store
 
+# Artemis sync configuration - stores path to Artemis project
+.artemis_sync_config.json
+
 # Idea files
 .idea/
 

hyperion/Dockerfile

@@ -1,31 +1,52 @@
-FROM python:3.13-alpine
-
-RUN apk update && \
-    apk add --no-cache gcc musl-dev postgresql-dev rust cargo curl
-
+FROM python:3.13-slim
+
+# Install minimal dependencies and grpc_health_probe
+RUN apt-get update && apt-get install -y \
+    gcc \
+    libpq-dev \
+    curl \
+    wget \
+    && rm -rf /var/lib/apt/lists/*
+
+# Install grpc_health_probe for proper gRPC health checking
+ARG GRPC_HEALTH_PROBE_VERSION=v0.4.25
+RUN wget -qO/bin/grpc_health_probe \
+      https://github.com/grpc-ecosystem/grpc-health-probe/releases/download/${GRPC_HEALTH_PROBE_VERSION}/grpc_health_probe-linux-amd64 \
+    && chmod +x /bin/grpc_health_probe
+
+# Install poetry
 RUN pip install poetry==2.1.1
 
 WORKDIR /app
 
-# Create the proper directory structure
-RUN mkdir -p /app/hyperion /app/shared
+# Create the directory structure to match pyproject.toml expectations
+RUN mkdir -p hyperion
 
-# Copy shared library into the right location
-COPY shared/ /app/shared/
+# Copy shared library to parent directory (for path dependency)
+COPY shared/ ./shared/
 
-# Copy hyperion files
-COPY hyperion/pyproject.toml hyperion/poetry.lock /app/hyperion/
-COPY hyperion/app/ /app/hyperion/app/
-COPY hyperion/playground/ /app/hyperion/playground/
+# Copy hyperion files to hyperion subdirectory
+COPY hyperion/pyproject.toml ./hyperion/
+COPY hyperion/app/ ./hyperion/app/
 
-# Set working directory to hyperion folder where the poetry config is
+# Change to hyperion directory for poetry install
 WORKDIR /app/hyperion
 
-# Install dependencies but don't try to install the current project
-RUN poetry install --no-root
+# Install dependencies (without lock file to avoid path issues)
+RUN poetry config virtualenvs.create false && \
+    poetry install --only=main --no-root
+
+# Create non-root user
+RUN useradd --create-home --shell /bin/bash hyperion
+
+# Create certificates directory
+RUN mkdir -p /certs && chown hyperion:hyperion /certs
+
+# Switch to non-root user
+USER hyperion
 
 # Expose the gRPC port
 EXPOSE 50051
 
-# Use our custom entrypoint script
-ENTRYPOINT ["poetry", "run", "hyperion"]
+# Start the application
+ENTRYPOINT ["python", "-c", "from app.main import serve; serve()"]