Live deploy console: stream compose up output to the browser (0.22.0)

Deploying a local stack from the editor now opens a console modal that streams
the `docker compose up -d` output (image pulls, container creation) live over a
new `/ws/deploy/{stack_id}` WebSocket, replacing the blind "Deploying…" spinner.
The compose subprocess keeps running server-side if the modal is closed early;
the same audit entry + start/error notification as the REST start path is recorded.

Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>

backend/routers/ws.py

@@ -16,7 +16,8 @@ from sqlmodel import Session
 from auth import decode_token
 from database import engine
 from models.agent import Agent
-from services import compose_service
+from models.setting import EVENT_STACK_ERROR, EVENT_STACK_START
+from services import audit_service, compose_service, notify_service
 
 logger = logging.getLogger("stackpilot.ws")
 
@@ -92,6 +93,64 @@ async def ws_service_logs(
         pass
 
 
+@router.websocket("/ws/deploy/{stack_id}")
+async def ws_deploy(
+    websocket: WebSocket,
+    stack_id: str,
+    token: str | None = Query(default=None),
+):
+    """Run `docker compose up -d` and stream its output (image pulls, container
+    creation) to the browser so the user sees deploy progress live. Records the
+    same audit entry and notification as the REST `/start` endpoint."""
+    await websocket.accept()
+    if not await _authorize(websocket, token):
+        return
+    username = decode_token(token, "access").get("sub", "unknown") if token else "unknown"
+
+    rc: int | None = None
+    disconnected = False
+    compose_service.mark_busy(stack_id)
+    try:
+        async for kind, payload in compose_service.stream_up(stack_id):
+            if kind == "log":
+                await websocket.send_text(json.dumps({"type": "log", "line": payload}))
+            else:
+                rc = payload
+                await websocket.send_text(json.dumps({"type": "done", "returncode": rc}))
+    except WebSocketDisconnect:
+        # Client navigated away; the compose subprocess keeps running so the
+        # deploy still completes in the background.
+        disconnected = True
+    except Exception as exc:  # noqa: BLE001
+        with contextlib.suppress(Exception):
+            await websocket.send_text(json.dumps({"type": "error", "detail": str(exc)}))
+    finally:
+        compose_service.clear_busy(stack_id)
+
+    ok = rc in (0, None)
+    try:
+        with Session(engine) as session:
+            audit_service.record(
+                session, user=username, action="stack.start", target=stack_id,
+                detail=f"rc={rc} (deploy console)", ip="ws",
+            )
+            if ok:
+                await notify_service.notify(
+                    EVENT_STACK_START, f"Stack '{stack_id}' started",
+                    "compose up completed successfully.", session,
+                )
+            else:
+                await notify_service.notify(
+                    EVENT_STACK_ERROR, f"Stack '{stack_id}' start failed",
+                    "compose up returned a non-zero exit code.", session,
+                )
+    except Exception:  # noqa: BLE001 - audit/notify are best-effort
+        pass
+    if not disconnected:
+        with contextlib.suppress(Exception):
+            await websocket.close()
+
+
 @router.websocket("/ws/agent-logs/{agent_id}/{stack_id}")
 async def ws_agent_logs(
     websocket: WebSocket,