Smartgift-AI/AgentHub
14
0
Fork 0
Code Issues 3 Pull Requests Actions Packages Projects Releases 86 Wiki Activity

feat(server-s3): one Linux user per account (S3) — experimental

Browse Source 
Server mode can now run each account as its own Linux user (ah-<name>)
when `agenthub server install-system` has set S3 up. The dashboard
reaches a member only through sudo -u / write-as / pane-launch, reads a
member's files only through owner- and type-checked opens, and hooks
are authenticated by peer uid. Local mode and server mode without S3
are unchanged.

EXPERIMENTAL: tested with fake sudo and fake accounts only. It has not
yet been verified on a real install with real member accounts, sudo or
a real Codex login. Do not offer it to real users yet.

- S3 core: provisioning, per-member tmux servers, the proxy key
  gateway, shared tools in /opt, dropped capabilities for children
  (P0–P5)
- P4: plan and quota per member home
- P6: ~/.claude.json seed; opt-in plugin baseline installed as the
  member; managed-settings spike script (not run)
- P7: Codex account pool (`agenthub accounts add --tool codex`)
- Roles merged with main's admin / analyst / developer: analysts write
  only their own rows, under S3 as well
- Per-account prefs: one implementation (Chat UI + onboarding)
- Security reviews F1–F49 (five rounds), each fix with a regression
  test: symlink/TOCTOU-safe member reads, no host writes in a member
  home, credentials and the data dir never served, owner and folder
  account must agree, pane tokens bound to the pane's uid, bounded
  sudo/tmux/git calls and member reads (no hang or crash from a member),
  async route rejections answer 500 instead of exiting
- Docs: docs/SERVER-MODE.md (S3 model, accepted ceilings, operator
  runbook), docs/plans/server-mode/S3-PLAN.md, CLAUDE.md S3 rules

Tests: server 2838/2841 (3 need 127.0.0.1:3000, held on this box);
client 1162/1162; tsc clean; headers check passes.

Co-Authored-By: Claude <noreply@anthropic.com>
This commit is contained in:
nntrivi2001
2026-10-09 14:57:10 +07:00
parent b7f3735b29
commit 84e2a9f0ac
123 changed files with 12051 additions and 605 deletions
Download Patch File Download Diff File Expand all files Collapse all files
openapi.yaml
+128 -9
View File
@@ -13,7 +13,7 @@ externalDocs:
description: Project documentation
url: https://git.smartgift.io.vn/Smartgift-AI/AgentHub#readme
servers:
- url: http://localhost:4830
- url: http://localhost:4820
description: Local dashboard server (default)
- url: http://127.0.0.1:4820
description: Local loopback endpoint used by hook-handler
@@ -4760,6 +4760,19 @@ components:
description: Events attributed to this run's inner agents, ordered by created_at then id. Capped at 5000 rows.
items:
$ref: '#/components/schemas/DashboardEvent'
UserPrefs:
type: object
required:
- prefs
- onboardedAt
properties:
prefs:
type: object
additionalProperties:
type: string
onboardedAt:
type: string
nullable: true
AuthUser:
type: object
required:
@@ -11453,6 +11466,8 @@ paths:
description: '{branches: string[], current: string | null, worktrees: {path, branch?, locked?}[]}. The worktrees ride along so the picker can grey out branches git would refuse to check out twice.'
'400':
description: repo is missing, relative, does not exist, or is not a git repo.
'403':
description: 'EFOLDER — server mode with AGENTHUB_USERS_ROOT: a developer named a repo outside their own folder.'
/api/lanes/{id}/git/changes:
get:
tags:
@@ -11570,7 +11585,7 @@ paths:
'400':
description: EBADPATH (incl. a symlink resolving outside the lane), EBADREV or ENOFILE.
'403':
description: ESECRET — `.claude/settings.local.json` (where an older build kept the AI Proxy key) is refused at every rev, at any depth, and under any path that resolves to it (a symlinked `.claude`).
description: ESECRET — `.claude/settings.local.json` (where an older build kept the AI Proxy key) is refused at every rev, at any depth, and under any path that resolves to it (a symlinked `.claude`); under S3 also a dot folder at the top of a member's home. EFOREIGN — under S3 the workspace folder now resolves into another account's files.
'404':
description: Lane not found.
/api/lanes/{id}/git/blame:
@@ -11597,7 +11612,7 @@ paths:
'400':
description: EBADPATH, ENOFILE or ETOOBIG.
'403':
description: ESECRET.
description: 'ESECRET, or EFOREIGN (S3: the workspace folder resolves into another account''s files).'
'404':
description: Lane not found.
/api/lanes/{id}/git/raw:
@@ -11629,7 +11644,7 @@ paths:
'400':
description: EBADPATH, EBADREV, ENOFILE, ENOTIMAGE or ETOOBIG.
'403':
description: ESECRET.
description: 'ESECRET, or EFOREIGN (S3: the workspace folder resolves into another account''s files).'
'404':
description: Lane not found.
/api/lanes/{id}/git/ls:
@@ -13676,6 +13691,81 @@ paths:
error:
code: WORKFLOW_DETAIL_FAILED
message: database is locked
/api/me/prefs:
get:
tags:
- Auth
summary: The signed-in account's own UI preferences
description: Local mode is the one account `local`; server mode one row per account. Keys are the browser's localStorage names (docs/API.md).
responses:
'200':
description: Preferences
content:
application/json:
schema:
$ref: '#/components/schemas/UserPrefs'
'401':
description: EAUTH
content:
application/json:
schema:
$ref: '#/components/schemas/ErrorResponse'
put:
tags:
- Auth
summary: Merge the account's preferences (null deletes a key)
requestBody:
required: true
content:
application/json:
schema:
type: object
required:
- prefs
properties:
prefs:
type: object
additionalProperties:
type: string
nullable: true
maxLength: 8192
responses:
'200':
description: Saved
content:
application/json:
schema:
$ref: '#/components/schemas/UserPrefs'
'400':
description: EBADPREFS — an unknown key or a value that is not a short string
content:
application/json:
schema:
$ref: '#/components/schemas/ErrorResponse'
'401':
description: EAUTH
content:
application/json:
schema:
$ref: '#/components/schemas/ErrorResponse'
/api/me/onboarded:
post:
tags:
- Auth
summary: The account went through (or skipped) the first-run setup
responses:
'200':
description: Marked
content:
application/json:
schema:
$ref: '#/components/schemas/UserPrefs'
'401':
description: EAUTH
content:
application/json:
schema:
$ref: '#/components/schemas/ErrorResponse'
/api/users:
get:
tags:
@@ -13768,7 +13858,7 @@ paths:
schema:
$ref: '#/components/schemas/ErrorResponse'
'403':
description: EREAUTH (own password wrong) / EREADONLY / EADMIN / ELOCALMODE
description: EREAUTH (own password wrong) / EADMIN / ELOCALMODE
content:
application/json:
schema:
@@ -13833,7 +13923,7 @@ paths:
schema:
$ref: '#/components/schemas/ErrorResponse'
'403':
description: EREAUTH (own password wrong) / EREADONLY / EADMIN / ELOCALMODE
description: EREAUTH (own password wrong) / EADMIN / ELOCALMODE
content:
application/json:
schema:
@@ -13900,7 +13990,7 @@ paths:
schema:
$ref: '#/components/schemas/ErrorResponse'
'403':
description: EREAUTH (own password wrong) / EREADONLY / EADMIN / ELOCALMODE
description: EREAUTH (own password wrong) / EADMIN / ELOCALMODE
content:
application/json:
schema:
@@ -13966,7 +14056,7 @@ paths:
schema:
$ref: '#/components/schemas/ErrorResponse'
'403':
description: EREAUTH (own password wrong) / EREADONLY / EADMIN / ELOCALMODE
description: EREAUTH (own password wrong) / EADMIN / ELOCALMODE
content:
application/json:
schema:
@@ -14042,7 +14132,7 @@ paths:
tags:
- Auth
operationId: listPoolAccounts
summary: The Claude account pool as the balancer sees it (never a token)
summary: The Claude and Codex account pools as the balancer sees them (never a key or token)
parameters:
- name: force
in: query
@@ -14088,6 +14178,35 @@ paths:
nullable: true
full:
type: boolean
codex:
type: array
description: The Codex account pool (server/lib/codex-pool.js), same fields plus `kind`; no expiry
items:
type: object
properties:
name:
type: string
kind:
type: string
enum:
- apikey
- chatgpt
addedAt:
type: string
livePanes:
type: integer
spend5h:
type: number
spend7d:
type: number
quota:
type: object
nullable: true
quotaPercent:
type: number
nullable: true
full:
type: boolean
/api/auth/me:
get:
tags: