nntrivi2001
84e2a9f0ac
Server mode can now run each account as its own Linux user (ah-<name>) when `agenthub server install-system` has set S3 up. The dashboard reaches a member only through sudo -u / write-as / pane-launch, reads a member's files only through owner- and type-checked opens, and hooks are authenticated by peer uid. Local mode and server mode without S3 are unchanged. EXPERIMENTAL: tested with fake sudo and fake accounts only. It has not yet been verified on a real install with real member accounts, sudo or a real Codex login. Do not offer it to real users yet. - S3 core: provisioning, per-member tmux servers, the proxy key gateway, shared tools in /opt, dropped capabilities for children (P0–P5) - P4: plan and quota per member home - P6: ~/.claude.json seed; opt-in plugin baseline installed as the member; managed-settings spike script (not run) - P7: Codex account pool (`agenthub accounts add --tool codex`) - Roles merged with main's admin / analyst / developer: analysts write only their own rows, under S3 as well - Per-account prefs: one implementation (Chat UI + onboarding) - Security reviews F1–F49 (five rounds), each fix with a regression test: symlink/TOCTOU-safe member reads, no host writes in a member home, credentials and the data dir never served, owner and folder account must agree, pane tokens bound to the pane's uid, bounded sudo/tmux/git calls and member reads (no hang or crash from a member), async route rejections answer 500 instead of exiting - Docs: docs/SERVER-MODE.md (S3 model, accepted ceilings, operator runbook), docs/plans/server-mode/S3-PLAN.md, CLAUDE.md S3 rules Tests: server 2838/2841 (3 need 127.0.0.1:3000, held on this box); client 1162/1162; tsc clean; headers check passes. Co-Authored-By: Claude <noreply@anthropic.com>
60 lines
2.3 KiB
JavaScript
60 lines
2.3 KiB
JavaScript
/**
|
|
* @file quit.js — Quit AgentHub (issue #65, 9router's tray "Quit"): stop the
|
|
* dashboard and every lane pane, and keep it stopped until the user starts it
|
|
* again. "Stopped" is the file `<data dir>/runtime/stopped`: the plugin
|
|
* bootstrap starts no server while it exists, and every server that starts
|
|
* clears it — so a boot or login through an enabled autostart unit still
|
|
* brings the dashboard back, and only Claude Code's SessionStart is held off.
|
|
* Kept free of anything but fs/path: the bootstrap reads it before the
|
|
* runtime's dependencies are installed.
|
|
* @author Nguyễn Ngọc Trí Vĩ <vinnt@smartgift.vn>
|
|
*/
|
|
|
|
const fs = require("fs");
|
|
const path = require("path");
|
|
const { getDataDir } = require("./claude-home");
|
|
|
|
function flagPath(rt = path.join(getDataDir(), "runtime")) {
|
|
return path.join(rt, "stopped");
|
|
}
|
|
|
|
function isQuit(rt) {
|
|
return fs.existsSync(flagPath(rt));
|
|
}
|
|
|
|
function markQuit(rt) {
|
|
const file = flagPath(rt);
|
|
fs.mkdirSync(path.dirname(file), { recursive: true });
|
|
fs.writeFileSync(file, `${new Date().toISOString()}\n`, "utf8");
|
|
}
|
|
|
|
function clearQuit(rt) {
|
|
fs.rmSync(flagPath(rt), { force: true });
|
|
}
|
|
|
|
/**
|
|
* Stops this server. A unit of ours that is running is stopped THROUGH its
|
|
* service manager: a SIGTERM'd server exits 0, which `Restart=always` /
|
|
* `KeepAlive` answer by starting it again. Async spawns, because launchd's
|
|
* `bootout` waits for the job — this process — to exit. If this process was
|
|
* not the unit's (a second dashboard beside it), it follows a moment later.
|
|
*/
|
|
function stopServer({
|
|
svc = require("../../scripts/service-manager"),
|
|
spawn = require("child_process").spawn,
|
|
kill = () => process.kill(process.pid, "SIGTERM"),
|
|
} = {}) {
|
|
const owned =
|
|
svc.systemctlAvailable() && svc.unitIsOurs("agenthub") && svc.unitIsActive("agenthub");
|
|
if (!owned) return kill();
|
|
const argv = svc.stopArgv
|
|
? svc.stopArgv("agenthub") // the server-mode system unit: through sudo
|
|
: svc.kind === "launchd"
|
|
? ["launchctl", ["bootout", `gui/${process.getuid()}/io.smartgift.agenthub`]]
|
|
: ["systemctl", ["--user", "stop", "--no-block", "agenthub.service"]];
|
|
spawn(argv[0], argv[1], { detached: true, stdio: "ignore" }).unref();
|
|
setTimeout(kill, 5000).unref();
|
|
}
|
|
|
|
module.exports = { flagPath, isQuit, markQuit, clearQuit, stopServer };
|