nntrivi2001
9a54978eef
Server mode (AGENTHUB_MODE=server; OFF by default — local mode is unchanged) - Login for every page and API call (server/lib/auth.js, routes/auth.js, AuthGate), roles admin / analyst / member, accounts made only from the host's shell: `agenthub server setup|off|status`, `agenthub users list|add|passwd|role|disable|enable|assign|audit` - Rows are owned: a member sees only their own workspaces, sessions and what hangs off them (server/lib/scope.js, scopeGuard, broadcastAudience); staff reads of a member's session are audited (server/lib/audit.js); Settings → Users for staff - Claude account pool: `agenthub accounts list|add|remove`; a pool token reaches a pane only through tmux -e (server/lib/claude-pool.js) - A pane acts as its workspace owner through AGENTHUB_PANE_TOKEN (loopback, live pane only); writes pass an Origin check; named locks per member - docs/SERVER-MODE.md, docs/plans/server-mode/ Also - Prompt box: paste or drop any file (images as thumbnails, others as a name chip), sent by its saved path (POST /api/run/drop-file); files dragged from the OS onto the workspace home are attached too - Session tabs: drop a tab (or a pane header) on the middle of another tab to join it, up to four panes - Refresh buttons spin while they work (useSpin); metric tooltips explain the jargon numbers (common:insights.help.*) - Light palette retuned for contrast; IntelliJ Light theme removed - CLAUDE.md sync marker trimmed; its history moved to docs/CLAUDE-SYNC-LOG.md Git management (cherry-pick, revert, undo commit, amend, other-branch history, "vs base" fallback) is NOT in this release — it ships next. Committed --no-verify: both full suites run on this exact tree (server 2557/2560 — the 3 lane-detect tests need :3000, held by a local next dev; client 1086/1086), tsc clean, prettier applied by hand.
80 lines
2.8 KiB
JavaScript
80 lines
2.8 KiB
JavaScript
/**
|
|
* @file HTTP surface for cross-lane named locks (`server/lib/named-lock.js`).
|
|
* Every route is single-shot — this layer never blocks waiting for a lock to
|
|
* free up. The CLI (`agenthub lock acquire`) owns the polling loop; AgentHub's
|
|
* server-side primitives stay non-orchestrating, same as every other lane
|
|
* route in this project. Lock names are one directory name each (named-lock.js
|
|
* refuses a path), and in server mode a member's live in their own namespace.
|
|
* @author Nguyễn Ngọc Trí Vĩ <vinnt@smartgift.vn>
|
|
*/
|
|
|
|
const { Router } = require("express");
|
|
const namedLock = require("../lib/named-lock");
|
|
const { sameOriginGuard } = require("./run");
|
|
const { memberId } = require("../lib/scope");
|
|
|
|
const router = Router();
|
|
|
|
// Server mode: a member's locks live in their own namespace (`u<id>.<name>`),
|
|
// so one user's agents can neither see nor take another user's locks.
|
|
const memberPrefix = (req) => {
|
|
const uid = memberId(req);
|
|
return uid == null ? "" : `u${uid}.`;
|
|
};
|
|
const lockName = (req) => memberPrefix(req) + req.params.name;
|
|
|
|
const badInput = (res, err) =>
|
|
res.status(400).json({ error: { code: err.code, message: err.message } });
|
|
|
|
router.get("/", (req, res) => {
|
|
const prefix = memberPrefix(req);
|
|
const locks = namedLock.listLocks();
|
|
res.json({
|
|
locks: prefix
|
|
? locks
|
|
.filter((l) => l.name.startsWith(prefix))
|
|
.map((l) => ({ ...l, name: l.name.slice(prefix.length) }))
|
|
: locks,
|
|
});
|
|
});
|
|
|
|
router.post("/:name/acquire", sameOriginGuard, (req, res) => {
|
|
const holder = typeof req.body?.holder === "string" ? req.body.holder.trim() : "";
|
|
if (!holder) {
|
|
return res.status(400).json({ error: { code: "EBADHOLDER", message: "holder is required" } });
|
|
}
|
|
let result;
|
|
try {
|
|
result = namedLock.tryAcquire(lockName(req), holder);
|
|
} catch (err) {
|
|
if (err.code === "EBADNAME" || err.code === "EBADHOLDER") return badInput(res, err);
|
|
throw err;
|
|
}
|
|
if (result.acquired) return res.json(result);
|
|
res.status(409).json(result);
|
|
});
|
|
|
|
router.post("/:name/release", sameOriginGuard, (req, res) => {
|
|
const holder = typeof req.body?.holder === "string" ? req.body.holder.trim() : "";
|
|
if (!holder) {
|
|
return res.status(400).json({ error: { code: "EBADHOLDER", message: "holder is required" } });
|
|
}
|
|
try {
|
|
namedLock.release(lockName(req), holder);
|
|
res.json({ ok: true });
|
|
} catch (err) {
|
|
if (err.code === "EBADNAME" || err.code === "EBADHOLDER") return badInput(res, err);
|
|
if (err.code === "ENOLOCK") {
|
|
return res.status(404).json({ error: { code: err.code, message: err.message } });
|
|
}
|
|
if (err.code === "ENOTHOLDER") {
|
|
return res.status(409).json({
|
|
error: { code: err.code, message: err.message, currentHolder: err.currentHolder },
|
|
});
|
|
}
|
|
res.status(500).json({ error: { code: err.code, message: err.message } });
|
|
}
|
|
});
|
|
|
|
module.exports = router;
|