feat(fc): add FC Operator for Alibaba Cloud Function Compute sandbox support

resolves #870

Add FC (Function Compute) Operator pattern support to ROCK framework.

Components:
- FCConfig: Service-level configuration (rock/config.py)
- FCDeploymentConfig: API-level sandbox configuration (rock/deployments/config.py)
- FCOperator: AbstractOperator implementation (rock/sandbox/operator/fc.py)
- FCDeployment: WebSocket session management (rock/deployments/fc.py)
- fc_rocklet: Container and Runtime deployment modes

Deployment modes:
- Container: custom-container runtime (recommended for production)
- Runtime: custom.debian12 runtime

Both configured with SESSION_EXCLUSIVE mode and x-rock-session-id header affinity.

Test coverage:
- test_fc_deployment.py: Config validation, lifecycle tests
- test_fc_e2e.py: E2E HTTP/WebSocket tests
- test_fc_rocklet_runtimes.py: Runtime config validation

Change-Id: I54e2de23c55d9b4c6641d6849330a300c3ad8632
Co-developed-by: Claude <noreply@anthropic.com>
Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>

Author: insight-bit

pyproject.toml

@@ -173,5 +173,6 @@ markers = [
     "need_docker: need docker daemon running",
     "need_admin: need admin start",
     "need_admin_and_network: need install from network",
-    "need_database: need database Docker containers (PostgreSQL, Redis)"
+    "need_database: need database Docker containers (PostgreSQL, Redis)",
+    "need_fc: need FC (Function Compute) environment"
 ]

rock-conf/rock-fc.yml

@@ -0,0 +1,82 @@
+# =============================================================================
+# ROCK Admin 运行时配置 - FC 环境
+# =============================================================================
+#
+# 用途：ROCK Admin 服务启动时加载的运行时配置
+#
+# 使用方式:
+#   rock admin start --env fc
+#   或 export ROCK_CONFIG=rock-conf/rock-fc.yml
+#
+# 注意：此文件不是函数部署配置，FC 函数部署使用
+#   rock/deployments/fc_rocklet/*/s.yaml + s deploy
+#
+# =============================================================================
+#
+# 配置层级说明:
+#
+# ┌─────────────────────────────────────────────────────────────────────┐
+# │  FCConfig (Admin 服务级) - 本文件                                    │
+# │  - Admin 启动时加载，提供默认值和凭证                                 │
+# │  - 服务级设置 (region, account_id, credentials)                     │
+# └─────────────────────────────────────────────────────────────────────┘
+#                           │
+#                           │ merge_with_fc_config()
+#                           ▼
+# ┌─────────────────────────────────────────────────────────────────────┐
+# │  FCDeploymentConfig (API 调用级)                                     │
+# │  - 每个 sandbox API 请求创建                                         │
+# │  - 可覆盖特定字段 (memory, cpus, timeout 等)                         │
+# │  - session_id 与 ROCK sandbox_id 1:1 映射                           │
+# └─────────────────────────────────────────────────────────────────────┘
+#                           │
+#                           │ 用于调用 FC 函数
+#                           ▼
+# ┌─────────────────────────────────────────────────────────────────────┐
+# │  s.yaml (FC 函数部署配置)                                            │
+# │  - 定义 FC 函数资源规格                                              │
+# │  - Session affinity, memory, CPU, timeout 等                        │
+# │  - 通过 `s deploy` 命令部署                                          │
+# │  - 位置: rock/deployments/fc_rocklet/{runtime,container,adapter}/    │
+# └─────────────────────────────────────────────────────────────────────┘
+#
+# =============================================================================
+
+# Ray 配置（FC 环境不使用 Ray 进行沙箱调度，但可用于其他分布式任务）
+ray:
+    runtime_env:
+        working_dir: ./
+        pip: ./requirements_sandbox_actor.txt
+    namespace: "rock-sandbox-fc"
+
+# FC 配置（阿里云函数计算服务级别配置）
+# FC (Function Compute) 是阿里云的无服务器计算服务
+fc:
+    # 连接设置
+    region: "cn-hangzhou"
+    account_id: null  # 阿里云账号 ID，运行时从环境变量或 STS 获取
+
+    # 函数名（必须与 s.yaml 中部署的函数名一致）
+    # 部署流程：选择一种方案执行 s deploy → function_name 已统一为 rock-serverless-runtime-rocklet
+    function_name: "rock-serverless-runtime-rocklet"
+
+    # 凭证（建议通过环境变量或 STS 临时凭证提供）
+    # access_key_id: null
+    # access_key_secret: null
+    # security_token: null
+
+    # 资源默认值（可被 API 调用覆盖）
+    default_memory: 4096  # MB
+    default_cpus: 2.0
+
+    # 超时默认值（单位：秒）
+    default_session_ttl: 86400  # 会话生命周期（秒），24小时，对应 s.yaml 中的 sessionTTLInSeconds
+    default_function_timeout: 3600.0  # 函数执行超时（秒），单次请求最大1小时
+    default_session_idle_timeout: 1800  # 会话空闲超时（秒），30分钟，对应 s.yaml 中的 sessionIdleTimeoutInSeconds
+
+    # 协议设置
+    session_affinity_header: "x-rock-session-id"
+
+# 预热配置（FC 环境无本地镜像需预热）
+warmup:
+    images: []

rock/config.py

@@ -156,6 +156,36 @@ class K8sConfig:
     watch_reconnect_delay_seconds: int = 5  # DEPRECATED: No longer used
 
 
+@dataclass
+class FCConfig:
+    """FC (Function Compute) configuration for FC operator.
+
+    FC (Function Compute) is Alibaba Cloud's serverless compute service.
+    This configuration provides default values and credentials for FC sandbox deployment.
+    """
+
+    region: str = "cn-hangzhou"
+    account_id: str | None = None
+    function_name: str = "rock-serverless-runtime-rocklet"
+
+    # Credentials
+    access_key_id: str | None = None
+    access_key_secret: str = field(default="", repr=False)
+    security_token: str | None = None
+
+    # Resource defaults
+    default_memory: int = 4096
+    default_cpus: float = 2.0
+
+    # Timeout defaults (in seconds)
+    default_session_ttl: int = 86400  # 会话生命周期（秒），24小时
+    default_function_timeout: float = 3600.0  # 函数执行超时（秒），单次请求最大1小时
+    default_session_idle_timeout: int = 1800  # 会话空闲超时（秒），30分钟
+
+    # Protocol settings
+    session_affinity_header: str = "x-rock-session-id"
+
+
 @dataclass
 class RuntimeConfig:
     enable_auto_clear: bool = False
@@ -199,6 +229,7 @@ def __post_init__(self) -> None:
 class RockConfig:
     ray: RayConfig = field(default_factory=RayConfig)
     k8s: K8sConfig = field(default_factory=K8sConfig)
+    fc: FCConfig = field(default_factory=FCConfig)
     warmup: WarmupConfig = field(default_factory=WarmupConfig)
     nacos: NacosConfig = field(default_factory=NacosConfig)
     redis: RedisConfig = field(default_factory=RedisConfig)
@@ -233,6 +264,8 @@ def from_env(cls, config_path: str | None = None):
             kwargs["ray"] = RayConfig(**config["ray"])
         if "k8s" in config:
             kwargs["k8s"] = K8sConfig(**config["k8s"])
+        if "fc" in config:
+            kwargs["fc"] = FCConfig(**config["fc"])
         if "warmup" in config:
             kwargs["warmup"] = WarmupConfig(**config["warmup"])
         if "nacos" in config:

rock/deployments/config.py

@@ -232,6 +232,63 @@ def get_deployment(self) -> AbstractDeployment:
         return RemoteDeployment.from_config(self)
 
 
+class FCDeploymentConfig(DeploymentConfig):
+    """Configuration for Alibaba Cloud Function Compute deployment.
+
+    FC (Function Compute) is Alibaba Cloud's serverless compute service.
+    This deployment type enables serverless sandbox execution with WebSocket
+    session management for stateful operations.
+    """
+
+    type: Literal["fc"] = "fc"
+    """Deployment type discriminator."""
+
+    session_id: str | None = None
+    """FC session identifier (also serves as ROCK sandbox_id)."""
+
+    # Connection settings
+    function_name: str | None = None
+    region: str | None = None
+    account_id: str | None = None
+    access_key_id: str | None = None
+    access_key_secret: str | None = Field(default=None, repr=False, exclude=True)
+    security_token: str | None = None
+
+    # Resource settings
+    memory: int | None = None
+    cpus: float | None = None
+
+    # Timeout settings (in seconds)
+    session_ttl: int | None = None
+    session_idle_timeout: int | None = None
+    function_timeout: float | None = None
+
+    def get_deployment(self) -> AbstractDeployment:
+        from rock.deployments.fc import FCDeployment
+
+        return FCDeployment.from_config(self)
+
+    def merge_with_fc_config(self, fc_config: "FCConfig") -> "FCDeploymentConfig":
+        """Merge this config with FCConfig defaults."""
+        from rock.config import FCConfig
+
+        return FCDeploymentConfig(
+            type=self.type,
+            session_id=self.session_id,
+            function_name=self.function_name or fc_config.function_name,
+            region=self.region or fc_config.region,
+            account_id=self.account_id or fc_config.account_id,
+            access_key_id=self.access_key_id or fc_config.access_key_id,
+            access_key_secret=self.access_key_secret or fc_config.access_key_secret,
+            security_token=self.security_token or fc_config.security_token,
+            memory=self.memory or fc_config.default_memory,
+            cpus=self.cpus or fc_config.default_cpus,
+            session_ttl=self.session_ttl or fc_config.default_session_ttl,
+            session_idle_timeout=self.session_idle_timeout or fc_config.default_session_idle_timeout,
+            function_timeout=self.function_timeout or fc_config.default_function_timeout,
+        )
+
+
 def get_deployment(config: DeploymentConfig) -> AbstractDeployment:
     """Create a deployment instance from the given configuration.