Prepare isolated Qwen Image 2.1 evaluation

compose.yaml

@@ -572,6 +572,7 @@ services:
       ALLOWED_PROFILES: fast,medium,large,ultra,uncensored
       IMAGE_WORKER: image
       RESTORE_WORKER: restore
+      QWEN_IMAGE_TEST_WORKER: qwen-image-2.1-test
       TTS_WORKER: qwen3
       MUSIC_WORKER: acestep
       YUE2_WORKER: yue2
@@ -708,6 +709,69 @@ services:
       timeout: 3s
       retries: 12
 
+  # Isolated evaluation target. It is created in a stopped state by the
+  # preparation script and can only be started through the controller's
+  # allowlisted, GPU-exclusive test endpoint.
+  qwen-image-21-test:
+    build:
+      context: platform/docker/qwen-image-21-test
+      args:
+        COMFYUI_COMMIT: b0f4b7b294ce482a2e071d9d762c133d38c7aa07
+    image: mike-ai/qwen-image-2.1-test:local
+    container_name: mike-ai-qwen-image-2.1-test
+    restart: "no"
+    profiles: [qwen-image-test]
+    labels:
+      com.mike-ai.image-worker: qwen-image-2.1-test
+    gpus: all
+    read_only: true
+    tmpfs: ["/tmp:size=4g,mode=1777"]
+    volumes:
+      - "${QWEN_IMAGE_21_MODEL_DIR:-/data/models/Qwen-Image-2.1-ComfyUI}:/opt/ComfyUI/models:ro"
+      - "${QWEN_IMAGE_21_OUTPUT_DIR:-/data/qwen-image-2.1-test-output}:/opt/ComfyUI/output"
+    environment:
+      # Athena enumerates RTX 3060 as GPU 0 and RTX 5080 as GPU 1.
+      NVIDIA_VISIBLE_DEVICES: "${QWEN_IMAGE_21_GPU:-1}"
+      NVIDIA_DRIVER_CAPABILITIES: compute,utility
+      PYTORCH_CUDA_ALLOC_CONF: expandable_segments:True
+    command:
+      - python
+      - main.py
+      - --listen
+      - 0.0.0.0
+      - --port
+      - "8188"
+      - --lowvram
+      - --preview-method
+      - none
+    networks: [inference]
+    security_opt: ["no-new-privileges:true"]
+    cap_drop: [ALL]
+    healthcheck:
+      test: [CMD, python, -c, "import urllib.request; urllib.request.urlopen('http://127.0.0.1:8188/system_stats', timeout=2)"]
+      interval: 5s
+      timeout: 3s
+      retries: 60
+      start_period: 10s
+
+  qwen-image-21-test-runner:
+    image: python:3.12-slim
+    profiles: [qwen-image-test]
+    read_only: true
+    tmpfs: ["/tmp:size=32m,mode=1777"]
+    volumes:
+      - ./scripts/qwen-image-21-test.py:/opt/test/run.py:ro
+      - "${QWEN_IMAGE_21_OUTPUT_DIR:-/data/qwen-image-2.1-test-output}:/output"
+    environment:
+      CONTROLLER_URL: http://profile-controller:8090
+      CONTROLLER_TOKEN: "${CONTROLLER_TOKEN:?CONTROLLER_TOKEN is required}"
+      COMFY_URL: http://qwen-image-21-test:8188
+      OUTPUT_DIR: /output
+    command: [python, /opt/test/run.py]
+    networks: [control, inference]
+    security_opt: ["no-new-privileges:true"]
+    cap_drop: [ALL]
+
   qwen3-tts:
     image: ${QWEN3_TTS_IMAGE:-ghcr.io/malaiwah/qwen3-tts-server:latest@sha256:b363a01d08b1bbecbfc3ca6f585368fae2cfdc591f9ecca6643738369f9a9d98}
     container_name: mike-ai-qwen3-tts