Files
nntrivi2001 84e2a9f0ac feat(server-s3): one Linux user per account (S3) — experimental
Server mode can now run each account as its own Linux user (ah-<name>)
when `agenthub server install-system` has set S3 up. The dashboard
reaches a member only through sudo -u / write-as / pane-launch, reads a
member's files only through owner- and type-checked opens, and hooks
are authenticated by peer uid. Local mode and server mode without S3
are unchanged.

EXPERIMENTAL: tested with fake sudo and fake accounts only. It has not
yet been verified on a real install with real member accounts, sudo or
a real Codex login. Do not offer it to real users yet.

- S3 core: provisioning, per-member tmux servers, the proxy key
  gateway, shared tools in /opt, dropped capabilities for children
  (P0–P5)
- P4: plan and quota per member home
- P6: ~/.claude.json seed; opt-in plugin baseline installed as the
  member; managed-settings spike script (not run)
- P7: Codex account pool (`agenthub accounts add --tool codex`)
- Roles merged with main's admin / analyst / developer: analysts write
  only their own rows, under S3 as well
- Per-account prefs: one implementation (Chat UI + onboarding)
- Security reviews F1–F49 (five rounds), each fix with a regression
  test: symlink/TOCTOU-safe member reads, no host writes in a member
  home, credentials and the data dir never served, owner and folder
  account must agree, pane tokens bound to the pane's uid, bounded
  sudo/tmux/git calls and member reads (no hang or crash from a member),
  async route rejections answer 500 instead of exiting
- Docs: docs/SERVER-MODE.md (S3 model, accepted ceilings, operator
  runbook), docs/plans/server-mode/S3-PLAN.md, CLAUDE.md S3 rules

Tests: server 2838/2841 (3 need 127.0.0.1:3000, held on this box);
client 1162/1162; tsc clean; headers check passes.

Co-Authored-By: Claude <noreply@anthropic.com>
2026-10-09 14:57:10 +07:00

179 lines
6.8 KiB
JavaScript

/**
* @file Tests server/lib/cursor-usage.js — Cursor sessions from its agent
* transcripts: a session created as `tool = 'cursor'` with its name, cwd (the
* project slug walked back onto the filesystem) and no tokens, an unchanged
* file never re-read, a quiet one settled to completed, a session the user
* deleted staying deleted, and a non-cursor row with the same id never
* touched. The Cursor dir and the DB are temp dirs; the transcripts are
* synthetic, in the shape Cursor writes.
* @author Nguyễn Ngọc Trí Vĩ <vinnt@smartgift.vn>
*/
const os = require("node:os");
const fs = require("node:fs");
const path = require("node:path");
const ROOT = fs.mkdtempSync(path.join(os.tmpdir(), "agenthub-cursor-usage-"));
process.env.DASHBOARD_DB_PATH = path.join(ROOT, "dashboard.db");
process.env.AGENTHUB_CURSOR_DIR = path.join(ROOT, "cursor");
const { describe, it, beforeEach, after } = require("node:test");
const assert = require("node:assert/strict");
const { db } = require("../db");
const cursor = require("../lib/cursor-usage");
after(() => fs.rmSync(ROOT, { recursive: true, force: true }));
const ID = "7481e37e-9157-4145-b985-2ea9a2117f52";
const PROJECT = path.join(fs.realpathSync(ROOT), "work", "my app");
fs.mkdirSync(PROJECT, { recursive: true });
const slugOf = (p) => p.replace(/^\/+/, "").replace(/[^A-Za-z0-9]/g, "-");
function transcript(
id,
{ slug = slugOf(PROJECT), prompt = "Review the campaign code\nplease" } = {}
) {
const dir = path.join(process.env.AGENTHUB_CURSOR_DIR, "projects", slug, "agent-transcripts", id);
fs.mkdirSync(dir, { recursive: true });
const file = path.join(dir, `${id}.jsonl`);
const lines = [
{
role: "user",
message: {
content: [
{
type: "text",
text: `<timestamp>Thursday, Jun 11, 2026, 4:53 PM (UTC+7)</timestamp>\n<user_query>\n${prompt}\n</user_query>`,
},
],
},
},
{ role: "assistant", message: { content: [{ type: "tool_use", name: "Read", input: {} }] } },
{ type: "turn_ended", status: "success" },
];
fs.writeFileSync(file, lines.map((l) => JSON.stringify(l)).join("\n") + "\n");
return file;
}
function age(file, ms) {
const t = new Date(Date.now() - ms);
fs.utimesSync(file, t, t);
}
const session = (id) => db.prepare("SELECT * FROM sessions WHERE id = ?").get(id);
beforeEach(() => {
fs.rmSync(process.env.AGENTHUB_CURSOR_DIR, { recursive: true, force: true });
db.exec(
"DELETE FROM token_usage; DELETE FROM agents; DELETE FROM sessions; DELETE FROM cursor_transcripts;"
);
});
describe("cursor usage", () => {
it("walks a project slug back to an existing directory, else null", () => {
assert.equal(cursor.cwdFromSlug(slugOf(PROJECT)), PROJECT);
assert.equal(cursor.cwdFromSlug(slugOf(`${PROJECT}-gone`)), null);
assert.equal(cursor.cwdFromSlug("empty-window"), null);
assert.equal(cursor.cwdFromSlug(""), null);
});
it("bounds the walk: no symlink is followed, and it gives up after a budget", () => {
const base = path.join(fs.realpathSync(ROOT), "maze");
// A symlink loop: every `a` and `a-a` is the same directory again.
const loop = path.join(base, "loop");
fs.mkdirSync(loop, { recursive: true });
fs.symlinkSync(".", path.join(loop, "a"));
fs.symlinkSync(".", path.join(loop, "a-a"));
// A real tree with ~1000 directories that all prefix the slug.
const tree = path.join(base, "tree");
const grow = (dir, t) => {
if (t <= 0) return;
fs.mkdirSync(path.join(dir, "a"), { recursive: true });
grow(path.join(dir, "a"), t - 1);
if (t < 2) return;
fs.mkdirSync(path.join(dir, "a-a"), { recursive: true });
grow(path.join(dir, "a-a"), t - 2);
};
grow(tree, 13);
const real = fs.readdirSync;
let calls = 0;
fs.readdirSync = (...a) => {
if (++calls > 5000) throw new Error("unbounded walk");
return real(...a);
};
try {
assert.equal(cursor.cwdFromSlug(`${slugOf(loop)}${"-a".repeat(30)}-z`), null);
assert.ok(calls < 20, `followed a symlink loop: ${calls} reads`);
calls = 0;
assert.equal(cursor.cwdFromSlug(`${slugOf(tree)}${"-a".repeat(13)}-z`), null);
assert.ok(calls <= 501, `walked ${calls} directories`);
assert.equal(cursor.cwdFromSlug(slugOf(PROJECT)), PROJECT);
} finally {
fs.readdirSync = real;
fs.rmSync(base, { recursive: true, force: true });
}
});
it("creates the session with its name and cwd, and no tokens", async () => {
transcript(ID);
assert.deepEqual(await cursor.ingestCursorUsage(), { files: 1, sessions: 1 });
const s = session(ID);
assert.equal(s.tool, "cursor");
assert.equal(s.name, "Review the campaign code");
assert.equal(s.cwd, PROJECT);
assert.equal(s.model, null);
assert.equal(s.status, "active");
assert.equal(s.transcript_path, null);
assert.equal(db.prepare("SELECT COUNT(*) c FROM token_usage").get().c, 0);
// Unchanged: never re-read.
assert.deepEqual(await cursor.ingestCursorUsage(), { files: 0, sessions: 0 });
});
it("settles a quiet session to completed, and reads an old one completed", async () => {
const file = transcript(ID);
await cursor.ingestCursorUsage();
const seen = db.prepare("SELECT mtime_ms FROM cursor_transcripts").get().mtime_ms;
assert.deepEqual(await cursor.ingestCursorUsage({ now: seen + 5 * 60_000 }), {
files: 0,
sessions: 1,
});
assert.equal(session(ID).status, "completed");
assert.equal(session(ID).ended_at, new Date(seen).toISOString());
db.exec("DELETE FROM sessions; DELETE FROM cursor_transcripts;");
age(file, 10 * 60_000);
await cursor.ingestCursorUsage();
assert.equal(session(ID).status, "completed");
});
it("keeps a deleted session deleted until Cursor writes again", async () => {
const file = transcript(ID);
age(file, 10 * 60_000);
await cursor.ingestCursorUsage();
db.prepare("DELETE FROM sessions WHERE id = ?").run(ID);
await cursor.ingestCursorUsage();
assert.equal(session(ID), undefined);
fs.appendFileSync(file, JSON.stringify({ role: "user", message: { content: [] } }) + "\n");
await cursor.ingestCursorUsage();
assert.equal(session(ID).tool, "cursor");
});
it("never touches a session of another tool with the same id", async () => {
db.prepare(
"INSERT INTO sessions (id, name, status, tool) VALUES (?, 'mine', 'active', 'claude')"
).run(ID);
transcript(ID, { slug: "empty-window" });
await cursor.ingestCursorUsage();
const s = session(ID);
assert.equal(s.tool, "claude");
assert.equal(s.name, "mine");
});
it("names a session with no prompt by its id, with no cwd", async () => {
transcript(ID, { slug: "1778550192773", prompt: "" });
await cursor.ingestCursorUsage();
assert.equal(session(ID).name, `Cursor ${ID.slice(0, 8)}`);
assert.equal(session(ID).cwd, null);
});
});