Switch remote deploy to vendored source builds

Move remote deployment to a vendored source bundle built on the target host via Docker so redeploys no longer require local cross-compilation or host Go installation.

Co-Authored-By: Claude Opus 4.7 <noreply@anthropic.com>

scripts/deploy-remote.sh

@@ -12,6 +12,7 @@ Usage:
 Optional environment variables:
   REMOTE_PORT=22
   REMOTE_DIR=/root/lingma-proxy-compose
+  REMOTE_BUILD_DIR=/root/lingma-proxy-compose/src
   REMOTE_PUBLIC_PORT=13123
   REMOTE_CONTAINER_NAME=lingma-proxy-uploaded
   REMOTE_IMAGE_NAME=lingma-proxy-uploaded
@@ -47,18 +48,22 @@ if [ "${1:-}" = "--help" ] || [ "${1:-}" = "-h" ]; then
   exit 0
 fi
 
-require_cmd go
 require_cmd sshpass
 require_cmd ssh
 require_cmd scp
 require_cmd curl
+require_cmd tar
 
 require_env REMOTE_HOST
 require_env REMOTE_USER
 require_env REMOTE_PASSWORD
 
+SCRIPT_DIR="$(cd "$(dirname "${BASH_SOURCE[0]}")" && pwd)"
+REPO_ROOT="$(cd "$SCRIPT_DIR/.." && pwd)"
+
 REMOTE_PORT="${REMOTE_PORT:-22}"
 REMOTE_DIR="${REMOTE_DIR:-/root/lingma-proxy-compose}"
+REMOTE_BUILD_DIR="${REMOTE_BUILD_DIR:-$REMOTE_DIR/src}"
 REMOTE_PUBLIC_PORT="${REMOTE_PUBLIC_PORT:-13123}"
 REMOTE_CONTAINER_NAME="${REMOTE_CONTAINER_NAME:-lingma-proxy-uploaded}"
 REMOTE_IMAGE_NAME="${REMOTE_IMAGE_NAME:-lingma-proxy-uploaded}"
@@ -71,21 +76,59 @@ LINGMA_MARKETPLACE_EXTENSION="${LINGMA_MARKETPLACE_EXTENSION:-tongyi-lingma}"
 LINGMA_PROXY_MODEL="${LINGMA_PROXY_MODEL:-org_auto}"
 VERIFY_PUBLIC="${VERIFY_PUBLIC:-false}"
 
+if [ "$REMOTE_BUILD_DIR" = "$REMOTE_DIR" ]; then
+  echo "REMOTE_BUILD_DIR must be different from REMOTE_DIR" >&2
+  exit 1
+fi
+
+case "$REMOTE_BUILD_DIR" in
+  "$REMOTE_DIR"/*) REMOTE_BUILD_CONTEXT_SUBDIR="${REMOTE_BUILD_DIR#"$REMOTE_DIR"/}" ;;
+  *)
+    echo "REMOTE_BUILD_DIR must be inside REMOTE_DIR so Docker can access it" >&2
+    exit 1
+    ;;
+esac
+
+if [ ! -d "$REPO_ROOT/vendor" ]; then
+  echo "Missing vendor/ directory. Run 'go mod vendor' first." >&2
+  exit 1
+fi
+
 SSH_BASE=(sshpass -p "$REMOTE_PASSWORD" ssh -o StrictHostKeyChecking=no -p "$REMOTE_PORT" "$REMOTE_USER@$REMOTE_HOST")
 SCP_BASE=(sshpass -p "$REMOTE_PASSWORD" scp -o StrictHostKeyChecking=no -P "$REMOTE_PORT")
 
 work_dir="$(mktemp -d)"
 trap 'rm -rf "$work_dir"' EXIT
 
-binary_path="$work_dir/lingma-proxy"
+source_dir="$work_dir/source"
+archive_path="$work_dir/source.tar.gz"
 dockerfile_path="$work_dir/Dockerfile.uploaded"
 env_path="$work_dir/.env.container"
+remote_archive_path="$REMOTE_DIR/source.tar.gz"
+
+mkdir -p "$source_dir"
+cp -R "$REPO_ROOT/cmd" "$source_dir/cmd"
+cp -R "$REPO_ROOT/internal" "$source_dir/internal"
+cp -R "$REPO_ROOT/vendor" "$source_dir/vendor"
+cp "$REPO_ROOT/go.mod" "$source_dir/go.mod"
+cp "$REPO_ROOT/go.sum" "$source_dir/go.sum"
+if [ -d "$REPO_ROOT/pkg" ]; then
+  cp -R "$REPO_ROOT/pkg" "$source_dir/pkg"
+fi
+
+tar -C "$source_dir" -czf "$archive_path" .
+
+cat >"$dockerfile_path" <<EOF
+FROM golang:1.23.6-bookworm AS builder
+WORKDIR /src
+COPY $REMOTE_BUILD_CONTEXT_SUBDIR/ /src/
+ENV GOTOOLCHAIN=local GOFLAGS=-mod=vendor CGO_ENABLED=0 GOOS=linux GOARCH=amd64
+RUN go build -o /out/lingma-proxy ./cmd/lingma-ipc-proxy
 
-cat >"$dockerfile_path" <<'EOF'
 FROM debian:bookworm-slim
 RUN apt-get update && apt-get install -y --no-install-recommends ca-certificates wget && rm -rf /var/lib/apt/lists/*
 WORKDIR /app
-COPY lingma-proxy /usr/local/bin/lingma-proxy
+COPY --from=builder /out/lingma-proxy /usr/local/bin/lingma-proxy
 EXPOSE 8095
 CMD ["lingma-proxy", "--host", "0.0.0.0", "--port", "8095", "--backend", "remote"]
 EOF
@@ -112,20 +155,23 @@ LINGMA_PROXY_TIMEOUT_SECONDS=0
 LINGMA_REMOTE_FALLBACK_ENABLED=true
 EOF
 
-echo "==> Building Linux amd64 binary locally"
-CGO_ENABLED=0 GOOS=linux GOARCH=amd64 go build -o "$binary_path" ./cmd/lingma-ipc-proxy
-
 echo "==> Ensuring remote deploy directory exists"
-"${SSH_BASE[@]}" "mkdir -p '$REMOTE_DIR' '$REMOTE_DIR/data' '$REMOTE_DIR/secrets'"
+"${SSH_BASE[@]}" "mkdir -p '$REMOTE_DIR' '$REMOTE_DIR/data' '$REMOTE_DIR/secrets' '$REMOTE_BUILD_DIR'"
+
+echo "==> Checking remote build prerequisites"
+"${SSH_BASE[@]}" "command -v docker >/dev/null 2>&1 && command -v tar >/dev/null 2>&1 && command -v curl >/dev/null 2>&1"
 
 echo "==> Checking remote session bundle"
 "${SSH_BASE[@]}" "test -f '$REMOTE_SESSION_BUNDLE_PATH'"
 
-echo "==> Uploading binary and runtime files"
-"${SCP_BASE[@]}" "$binary_path" "$REMOTE_USER@$REMOTE_HOST:$REMOTE_DIR/lingma-proxy"
+echo "==> Uploading source bundle and runtime files"
+"${SCP_BASE[@]}" "$archive_path" "$REMOTE_USER@$REMOTE_HOST:$remote_archive_path"
 "${SCP_BASE[@]}" "$dockerfile_path" "$REMOTE_USER@$REMOTE_HOST:$REMOTE_DIR/Dockerfile.uploaded"
 "${SCP_BASE[@]}" "$env_path" "$REMOTE_USER@$REMOTE_HOST:$REMOTE_DIR/.env.container"
 
+echo "==> Preparing remote build context"
+"${SSH_BASE[@]}" "rm -rf '$REMOTE_BUILD_DIR' && mkdir -p '$REMOTE_BUILD_DIR' && tar -xzf '$remote_archive_path' -C '$REMOTE_BUILD_DIR'"
+
 echo "==> Rebuilding remote runtime image"
 "${SSH_BASE[@]}" "cd '$REMOTE_DIR' && docker build -f Dockerfile.uploaded -t '$REMOTE_IMAGE_NAME' ."