84e2a9f0ac
Server mode can now run each account as its own Linux user (ah-<name>) when `agenthub server install-system` has set S3 up. The dashboard reaches a member only through sudo -u / write-as / pane-launch, reads a member's files only through owner- and type-checked opens, and hooks are authenticated by peer uid. Local mode and server mode without S3 are unchanged. EXPERIMENTAL: tested with fake sudo and fake accounts only. It has not yet been verified on a real install with real member accounts, sudo or a real Codex login. Do not offer it to real users yet. - S3 core: provisioning, per-member tmux servers, the proxy key gateway, shared tools in /opt, dropped capabilities for children (P0–P5) - P4: plan and quota per member home - P6: ~/.claude.json seed; opt-in plugin baseline installed as the member; managed-settings spike script (not run) - P7: Codex account pool (`agenthub accounts add --tool codex`) - Roles merged with main's admin / analyst / developer: analysts write only their own rows, under S3 as well - Per-account prefs: one implementation (Chat UI + onboarding) - Security reviews F1–F49 (five rounds), each fix with a regression test: symlink/TOCTOU-safe member reads, no host writes in a member home, credentials and the data dir never served, owner and folder account must agree, pane tokens bound to the pane's uid, bounded sudo/tmux/git calls and member reads (no hang or crash from a member), async route rejections answer 500 instead of exiting - Docs: docs/SERVER-MODE.md (S3 model, accepted ceilings, operator runbook), docs/plans/server-mode/S3-PLAN.md, CLAUDE.md S3 rules Tests: server 2838/2841 (3 need 127.0.0.1:3000, held on this box); client 1162/1162; tsc clean; headers check passes. Co-Authored-By: Claude <noreply@anthropic.com>
179 lines
6.8 KiB
JavaScript
179 lines
6.8 KiB
JavaScript
/**
|
|
* @file Tests server/lib/cursor-usage.js — Cursor sessions from its agent
|
|
* transcripts: a session created as `tool = 'cursor'` with its name, cwd (the
|
|
* project slug walked back onto the filesystem) and no tokens, an unchanged
|
|
* file never re-read, a quiet one settled to completed, a session the user
|
|
* deleted staying deleted, and a non-cursor row with the same id never
|
|
* touched. The Cursor dir and the DB are temp dirs; the transcripts are
|
|
* synthetic, in the shape Cursor writes.
|
|
* @author Nguyễn Ngọc Trí Vĩ <vinnt@smartgift.vn>
|
|
*/
|
|
|
|
const os = require("node:os");
|
|
const fs = require("node:fs");
|
|
const path = require("node:path");
|
|
|
|
const ROOT = fs.mkdtempSync(path.join(os.tmpdir(), "agenthub-cursor-usage-"));
|
|
process.env.DASHBOARD_DB_PATH = path.join(ROOT, "dashboard.db");
|
|
process.env.AGENTHUB_CURSOR_DIR = path.join(ROOT, "cursor");
|
|
|
|
const { describe, it, beforeEach, after } = require("node:test");
|
|
const assert = require("node:assert/strict");
|
|
const { db } = require("../db");
|
|
const cursor = require("../lib/cursor-usage");
|
|
|
|
after(() => fs.rmSync(ROOT, { recursive: true, force: true }));
|
|
|
|
const ID = "7481e37e-9157-4145-b985-2ea9a2117f52";
|
|
const PROJECT = path.join(fs.realpathSync(ROOT), "work", "my app");
|
|
fs.mkdirSync(PROJECT, { recursive: true });
|
|
const slugOf = (p) => p.replace(/^\/+/, "").replace(/[^A-Za-z0-9]/g, "-");
|
|
|
|
function transcript(
|
|
id,
|
|
{ slug = slugOf(PROJECT), prompt = "Review the campaign code\nplease" } = {}
|
|
) {
|
|
const dir = path.join(process.env.AGENTHUB_CURSOR_DIR, "projects", slug, "agent-transcripts", id);
|
|
fs.mkdirSync(dir, { recursive: true });
|
|
const file = path.join(dir, `${id}.jsonl`);
|
|
const lines = [
|
|
{
|
|
role: "user",
|
|
message: {
|
|
content: [
|
|
{
|
|
type: "text",
|
|
text: `<timestamp>Thursday, Jun 11, 2026, 4:53 PM (UTC+7)</timestamp>\n<user_query>\n${prompt}\n</user_query>`,
|
|
},
|
|
],
|
|
},
|
|
},
|
|
{ role: "assistant", message: { content: [{ type: "tool_use", name: "Read", input: {} }] } },
|
|
{ type: "turn_ended", status: "success" },
|
|
];
|
|
fs.writeFileSync(file, lines.map((l) => JSON.stringify(l)).join("\n") + "\n");
|
|
return file;
|
|
}
|
|
|
|
function age(file, ms) {
|
|
const t = new Date(Date.now() - ms);
|
|
fs.utimesSync(file, t, t);
|
|
}
|
|
|
|
const session = (id) => db.prepare("SELECT * FROM sessions WHERE id = ?").get(id);
|
|
|
|
beforeEach(() => {
|
|
fs.rmSync(process.env.AGENTHUB_CURSOR_DIR, { recursive: true, force: true });
|
|
db.exec(
|
|
"DELETE FROM token_usage; DELETE FROM agents; DELETE FROM sessions; DELETE FROM cursor_transcripts;"
|
|
);
|
|
});
|
|
|
|
describe("cursor usage", () => {
|
|
it("walks a project slug back to an existing directory, else null", () => {
|
|
assert.equal(cursor.cwdFromSlug(slugOf(PROJECT)), PROJECT);
|
|
assert.equal(cursor.cwdFromSlug(slugOf(`${PROJECT}-gone`)), null);
|
|
assert.equal(cursor.cwdFromSlug("empty-window"), null);
|
|
assert.equal(cursor.cwdFromSlug(""), null);
|
|
});
|
|
|
|
it("bounds the walk: no symlink is followed, and it gives up after a budget", () => {
|
|
const base = path.join(fs.realpathSync(ROOT), "maze");
|
|
// A symlink loop: every `a` and `a-a` is the same directory again.
|
|
const loop = path.join(base, "loop");
|
|
fs.mkdirSync(loop, { recursive: true });
|
|
fs.symlinkSync(".", path.join(loop, "a"));
|
|
fs.symlinkSync(".", path.join(loop, "a-a"));
|
|
// A real tree with ~1000 directories that all prefix the slug.
|
|
const tree = path.join(base, "tree");
|
|
const grow = (dir, t) => {
|
|
if (t <= 0) return;
|
|
fs.mkdirSync(path.join(dir, "a"), { recursive: true });
|
|
grow(path.join(dir, "a"), t - 1);
|
|
if (t < 2) return;
|
|
fs.mkdirSync(path.join(dir, "a-a"), { recursive: true });
|
|
grow(path.join(dir, "a-a"), t - 2);
|
|
};
|
|
grow(tree, 13);
|
|
const real = fs.readdirSync;
|
|
let calls = 0;
|
|
fs.readdirSync = (...a) => {
|
|
if (++calls > 5000) throw new Error("unbounded walk");
|
|
return real(...a);
|
|
};
|
|
try {
|
|
assert.equal(cursor.cwdFromSlug(`${slugOf(loop)}${"-a".repeat(30)}-z`), null);
|
|
assert.ok(calls < 20, `followed a symlink loop: ${calls} reads`);
|
|
calls = 0;
|
|
assert.equal(cursor.cwdFromSlug(`${slugOf(tree)}${"-a".repeat(13)}-z`), null);
|
|
assert.ok(calls <= 501, `walked ${calls} directories`);
|
|
assert.equal(cursor.cwdFromSlug(slugOf(PROJECT)), PROJECT);
|
|
} finally {
|
|
fs.readdirSync = real;
|
|
fs.rmSync(base, { recursive: true, force: true });
|
|
}
|
|
});
|
|
|
|
it("creates the session with its name and cwd, and no tokens", async () => {
|
|
transcript(ID);
|
|
assert.deepEqual(await cursor.ingestCursorUsage(), { files: 1, sessions: 1 });
|
|
const s = session(ID);
|
|
assert.equal(s.tool, "cursor");
|
|
assert.equal(s.name, "Review the campaign code");
|
|
assert.equal(s.cwd, PROJECT);
|
|
assert.equal(s.model, null);
|
|
assert.equal(s.status, "active");
|
|
assert.equal(s.transcript_path, null);
|
|
assert.equal(db.prepare("SELECT COUNT(*) c FROM token_usage").get().c, 0);
|
|
// Unchanged: never re-read.
|
|
assert.deepEqual(await cursor.ingestCursorUsage(), { files: 0, sessions: 0 });
|
|
});
|
|
|
|
it("settles a quiet session to completed, and reads an old one completed", async () => {
|
|
const file = transcript(ID);
|
|
await cursor.ingestCursorUsage();
|
|
const seen = db.prepare("SELECT mtime_ms FROM cursor_transcripts").get().mtime_ms;
|
|
assert.deepEqual(await cursor.ingestCursorUsage({ now: seen + 5 * 60_000 }), {
|
|
files: 0,
|
|
sessions: 1,
|
|
});
|
|
assert.equal(session(ID).status, "completed");
|
|
assert.equal(session(ID).ended_at, new Date(seen).toISOString());
|
|
|
|
db.exec("DELETE FROM sessions; DELETE FROM cursor_transcripts;");
|
|
age(file, 10 * 60_000);
|
|
await cursor.ingestCursorUsage();
|
|
assert.equal(session(ID).status, "completed");
|
|
});
|
|
|
|
it("keeps a deleted session deleted until Cursor writes again", async () => {
|
|
const file = transcript(ID);
|
|
age(file, 10 * 60_000);
|
|
await cursor.ingestCursorUsage();
|
|
db.prepare("DELETE FROM sessions WHERE id = ?").run(ID);
|
|
await cursor.ingestCursorUsage();
|
|
assert.equal(session(ID), undefined);
|
|
fs.appendFileSync(file, JSON.stringify({ role: "user", message: { content: [] } }) + "\n");
|
|
await cursor.ingestCursorUsage();
|
|
assert.equal(session(ID).tool, "cursor");
|
|
});
|
|
|
|
it("never touches a session of another tool with the same id", async () => {
|
|
db.prepare(
|
|
"INSERT INTO sessions (id, name, status, tool) VALUES (?, 'mine', 'active', 'claude')"
|
|
).run(ID);
|
|
transcript(ID, { slug: "empty-window" });
|
|
await cursor.ingestCursorUsage();
|
|
const s = session(ID);
|
|
assert.equal(s.tool, "claude");
|
|
assert.equal(s.name, "mine");
|
|
});
|
|
|
|
it("names a session with no prompt by its id, with no cwd", async () => {
|
|
transcript(ID, { slug: "1778550192773", prompt: "" });
|
|
await cursor.ingestCursorUsage();
|
|
assert.equal(session(ID).name, `Cursor ${ID.slice(0, 8)}`);
|
|
assert.equal(session(ID).cwd, null);
|
|
});
|
|
});
|