fix sandbox search mediator liveness

Author: SecAI-Hub

deploy/sandbox/compose.yaml

@@ -172,7 +172,7 @@ services:
           "CMD",
           "/opt/venv/bin/python",
           "-c",
-          "from urllib.request import urlopen; import sys; sys.exit(0 if urlopen('http://127.0.0.1:8485/health', timeout=3).status == 200 else 1)",
+          "from urllib.request import urlopen; import sys; sys.exit(0 if urlopen('http://127.0.0.1:8485/live', timeout=3).status == 200 else 1)",
         ]
       interval: 15s
       timeout: 5s

services/search-mediator/Dockerfile

@@ -103,5 +103,5 @@ COPY --from=build /app /app
 
 USER 65534:65534
 EXPOSE 8485
-HEALTHCHECK --interval=30s --timeout=5s --start-period=10s --retries=5 CMD ["/opt/venv/bin/python", "-c", "from urllib.request import urlopen; import os, sys; port=os.getenv('BIND_ADDR','127.0.0.1:8485').rsplit(':',1)[-1]; sys.exit(0 if urlopen(f'http://127.0.0.1:{port}/health', timeout=3).status == 200 else 1)"]
+HEALTHCHECK --interval=30s --timeout=5s --start-period=10s --retries=5 CMD ["/opt/venv/bin/python", "-c", "from urllib.request import urlopen; import os, sys; port=os.getenv('BIND_ADDR','127.0.0.1:8485').rsplit(':',1)[-1]; sys.exit(0 if urlopen(f'http://127.0.0.1:{port}/live', timeout=3).status == 200 else 1)"]
 ENTRYPOINT ["/opt/venv/bin/python", "/app/entrypoint.py"]

services/search-mediator/app.py

@@ -688,6 +688,18 @@ def health():
     })
 
 
+@app.route("/live")
+def live():
+    """Fast liveness probe that does not depend on optional upstream services."""
+    return jsonify({
+        "status": "ok",
+        "search_enabled": _is_search_enabled(),
+        "session_mode": _get_session_mode(),
+        "searxng_reachable": None,
+        "tor_routed": True,
+    })
+
+
 @app.route("/v1/search", methods=["POST"])
 def search():
     """Perform a sanitized, Tor-routed web search."""

services/ui/ui/app.py

@@ -2371,7 +2371,9 @@ def search_status():
     try:
         resp = requests.get(f"{SEARCH_MEDIATOR_URL}/health", timeout=5)
         data = resp.json()
-        if data.get("search_enabled") is False and _is_sandbox_deployment():
+        available = data.get("search_enabled") is not False and data.get("searxng_reachable") is not False
+        data["search_available"] = available
+        if not available and _is_sandbox_deployment():
             data.setdefault("message", "Web search is available after starting the sandbox with the search profile.")
             data.setdefault("command", _sandbox_launch_command("search"))
             data.setdefault("automation_available", _sandbox_control_configured())

services/ui/ui/templates/index.html

@@ -227,7 +227,9 @@ <h3>Local-first. Private by default.</h3>
         try {
             var resp = await fetch('/api/search/status');
             var data = await resp.json();
-            searchAvailable = data.search_enabled !== false;
+            searchAvailable = data.search_available !== undefined
+                ? data.search_available === true
+                : data.search_enabled !== false && data.searxng_reachable !== false;
             searchAutomationAvailable = data.automation_available === true;
             if (searchAvailable) {
                 modeWeb.disabled = false;

tests/test_search.py

@@ -280,6 +280,26 @@ def fail_get(*args, **kwargs):
 
         assert resp.status_code == 200
 
+    def test_live_never_probes_optional_upstream(self, monkeypatch):
+        import app as sm
+
+        with monkeypatch.context() as m:
+            m.setattr(sm, "_is_search_enabled", lambda: True)
+            m.setattr(sm, "_get_session_mode", lambda: "normal")
+
+            def fail_get(*args, **kwargs):
+                raise AssertionError("liveness probe must not depend on SearXNG")
+
+            m.setattr(sm.requests, "get", fail_get)
+
+            with search_app.test_client() as client:
+                resp = client.get("/live")
+
+        assert resp.status_code == 200
+        data = resp.get_json()
+        assert data["status"] == "ok"
+        assert data["searxng_reachable"] is None
+
     def test_search_forwards_policy_allowed_engines(self, monkeypatch):
         import app as sm
 

tests/test_ui.py

@@ -57,6 +57,25 @@ def test_models_endpoint_empty_when_registry_down(self, client):
             assert resp.status_code == 200
             assert resp.get_json() == []
 
+    def test_search_status_requires_reachable_search_backend(self, client):
+        class SearchResp:
+            def json(self):
+                return {
+                    "status": "ok",
+                    "search_enabled": True,
+                    "searxng_reachable": False,
+                }
+
+        with patch("ui.app.requests.get", return_value=SearchResp()), \
+             patch("ui.app._is_sandbox_deployment", return_value=True), \
+             patch("ui.app._sandbox_control_configured", return_value=False):
+            resp = client.get("/api/search/status")
+
+        assert resp.status_code == 200
+        data = resp.get_json()
+        assert data["search_available"] is False
+        assert "start --with-search" in data["command"]
+
     def test_profile_status_infers_full_lab_in_sandbox_when_diffusion_is_live(self, client):
         class HealthyResp:
             status_code = 200