tbenandClaude Opus 5.5
86becd50bc
Computers now mount only /home/gem/workspace from DATA_DIR/computers/<id>, so only the workspace persists and goes into the data archive. An older computer's whole home is moved aside to <id>-home-<ts> (kept, never archived) and its container recreated once by sync-computers. Each run works in bots/<bot>/users/<user> (also its cwd and HOME), with bots/<bot> for work every user shares and workspaces/<id> shared by a workspace's bots; the coordinator reaches the whole workspace. Computer tools are gated by withComputerDirs: bash and code start there, file tool paths and file: URLs outside the run's folders are refused, and so is sudo. search_computers, import_file and script tools start there too. The files browser shows members only the bots' folders they reach, their own user folder in each and their workspaces', with names on the id folders. Co-Authored-By: Claude Opus 5.5 <[email protected]>
94 lines
3.7 KiB
TypeScript
94 lines
3.7 KiB
TypeScript
import BunSQLite from "@moduletrace/bun-sqlite";
|
|
import type { BUN_SQLITE_COBBLE_COMPUTERS, BUN_SQLITE_COBBLE_CONTAINERS } from "@/db/types/db";
|
|
import parseJobJson from "@/src/bots-queue/parse-job-json";
|
|
import { AppData } from "@/src/data/app-data";
|
|
import createComputerContainer from "@/src/functions/backend/docker/create-computer-container";
|
|
import { logError } from "@/src/functions/backend/logger";
|
|
import prepareComputerDataDir from "./prepare-computer-data-dir";
|
|
import pushComputerUpdate from "./push-computer-update";
|
|
|
|
type Params = {
|
|
computer_id: number;
|
|
/**
|
|
* A brand new computer: start from an empty workspace.
|
|
*/
|
|
fresh?: boolean;
|
|
};
|
|
|
|
/**
|
|
* Sets up a computer's container: prepares its workspace directory, pulls the
|
|
* sandbox image and starts the container with the computer's resources
|
|
* (`cpus`, `memory_mb`, else the `AppData` defaults), then records it (`containers`:
|
|
* docker id, state, and its IP address on the network). A failure is
|
|
* recorded as `failed` with its reason, which the computer lists show. The
|
|
* owner's tabs hear about it either way. The metadata's `layout` says the
|
|
* container mounts only the workspace (`syncComputers` recreates one that
|
|
* doesn't). Never throws.
|
|
*/
|
|
export default async function provisionComputer({ computer_id, fresh }: Params) {
|
|
const row = (
|
|
await BunSQLite.sql<
|
|
BUN_SQLITE_COBBLE_CONTAINERS & Pick<BUN_SQLITE_COBBLE_COMPUTERS, "cpus" | "memory_mb">
|
|
>({
|
|
sql: `SELECT co.*, c.cpus, c.memory_mb FROM containers co JOIN computers c ON c.container_id = co.id WHERE c.id = ? LIMIT 1`,
|
|
values: [computer_id],
|
|
})
|
|
).payload?.[0];
|
|
|
|
if (!row?.id || !row.name) return;
|
|
|
|
const metadata = parseJobJson({ text: row.metadata }) || {};
|
|
|
|
try {
|
|
await BunSQLite.sql({
|
|
sql: `UPDATE containers SET status = 'creating', updated_at = ? WHERE id = ?`,
|
|
values: [Date.now(), row.id],
|
|
});
|
|
|
|
const data_dir = await prepareComputerDataDir({ computer_id, fresh });
|
|
const created = await createComputerContainer({
|
|
computer_id,
|
|
name: row.name,
|
|
data_dir,
|
|
cpus: Number(row.cpus) || AppData.ComputerDefaultCpus,
|
|
memory_mb: Number(row.memory_mb) || AppData.ComputerDefaultMemoryMb,
|
|
});
|
|
|
|
const { error: _error, mcp_url: _mcp_url, ...kept } = metadata;
|
|
|
|
await BunSQLite.sql({
|
|
sql: `UPDATE containers SET docker_id = ?, image = ?, network = ?, hostname = ?, ip_address = ?,
|
|
port = ?, status = ?, metadata = ?, last_seen_at = ?, updated_at = ? WHERE id = ?`,
|
|
values: [
|
|
created.docker_id,
|
|
AppData.ComputerImage,
|
|
created.network,
|
|
row.name,
|
|
created.ip_address,
|
|
AppData.ComputerPort,
|
|
created.status,
|
|
JSON.stringify({
|
|
...kept,
|
|
data_dir,
|
|
host_dir: created.host_dir,
|
|
layout: AppData.ComputerWorkspaceLayout,
|
|
}),
|
|
Date.now(),
|
|
Date.now(),
|
|
row.id,
|
|
],
|
|
});
|
|
} catch (error) {
|
|
const message = error instanceof Error ? error.message : String(error);
|
|
|
|
await BunSQLite.sql({
|
|
sql: `UPDATE containers SET status = 'failed', metadata = ?, updated_at = ? WHERE id = ?`,
|
|
values: [JSON.stringify({ ...metadata, error: message }), Date.now(), row.id],
|
|
}).catch(() => {});
|
|
|
|
await logError({ title: `Computer #${computer_id} couldn't be set up`, error }).catch(() => {});
|
|
}
|
|
|
|
await pushComputerUpdate({ computer_id }).catch(() => {});
|
|
}
|