on 5e95c09 help sign in
19 files changed+853−1774
since splitsnapshots
unifiedsplit
Cargo.lock+1−18 Cargo.toml+1−3 README.md+34−63 README.zh.md+17−51 docs/tasks.md+9−14 src/bin/vibebox-supervisor.rs+7−8 src/bin/vibebox.rs+91−55 src/config.rs+77−467 src/error_report.sh−28 src/explain.rs+47−32 src/instance.rs+149−289 src/lib.rs−1 src/provision.sh+5−49 src/session_manager.rs+93−56 src/ssh.sh+10−18 src/tui.rs+31−31 src/utils.rs−18 src/vm.rs+160−279 src/vm_manager.rs+121−294
Cargo.lock+1−18
@@ -82,12 +82,6 @@ dependencies = [
8282 "windows-sys 0.61.2",
8383]
8484
85−[[package]]
86−name = "anyhow"
87−version = "1.0.101"
88−source = "registry+https://github.com/rust-lang/crates.io-index"
89−checksum = "5f0e0fee31ef5ed1ba1316088939cea399010ed7731dba877ed44aeb407a75ea"
90−
9185[[package]]
9286name = "assert_cmd"
9387version = "2.1.2"
@@ -150,15 +144,6 @@ version = "3.19.1"
150144source = "registry+https://github.com/rust-lang/crates.io-index"
151145checksum = "5dd9dc738b7a8311c7ade152424974d8115f2cdad61e8dab8dac9f2362298510"
152146
153−[[package]]
154−name = "bytesize"
155−version = "2.3.1"
156−source = "registry+https://github.com/rust-lang/crates.io-index"
157−checksum = "6bd91ee7b2422bcb158d90ef4d14f75ef67f340943fc4149891dcce8f8b972a3"
158−dependencies = [
159− "serde_core",
160−]
161−
162147[[package]]
163148name = "cassowary"
164149version = "0.3.0"
@@ -1318,12 +1303,10 @@ checksum = "ba73ea9cf16a25df0c8caa16c51acb937d5712a8429db78a3ee29d5dcacd3a65"
13181303
13191304[[package]]
13201305name = "vibebox"
1321−version = "0.3.2"
1306+version = "0.2.3"
13221307dependencies = [
1323− "anyhow",
13241308 "assert_cmd",
13251309 "block2",
1326− "bytesize",
13271310 "clap",
13281311 "color-eyre",
13291312 "crossterm",
Cargo.toml+1−3
@@ -1,6 +1,6 @@
11[package]
22name = "vibebox"
3−version = "0.3.2"
3+version = "0.2.3"
44edition = "2024"
55authors = ["Finn Sheng"]
66description = "Ultrafast CLI on Apple Silicon macOS for fast, sandboxed development and LLM agents."
@@ -42,8 +42,6 @@ ratatui = { version = "0.29.0", features = ["unstable-rendered-line-info"] }
4242tracing = "0.1"
4343tracing-subscriber = { version = "0.3", features = ["env-filter"] }
4444dialoguer = "0.12.0"
45−bytesize = {version = "2.3.1",features = ["serde"]}
46−anyhow = "1.0.101"
4745
4846[dev-dependencies]
4947assert_cmd = "2"
README.md+34−63
@@ -5,7 +5,7 @@
55 </picture>
66 </a>
77</p>
8−<p align="center">an ultrafast, open-source sandbox for running coding agents safely.</p>
8+<p align="center">Your ultrafast open source AI sandbox.</p>
99
1010<p align="center">
1111 <a href="https://crates.io/crates/vibebox">
@@ -24,77 +24,45 @@
2424 <a href="README.zh.md">简体中文</a>
2525</p>
2626
27−**VibeBox is a per-project micro-VM sandbox for running coding agents on macOS (Apple Virtualization Framework).**
28−It’s optimized for a *daily-driver* workflow: fast warm re-entry, explicit mounts, and reusable sessions.
27+**VibeBox is a per-project micro-VM sandbox for coding agents on macOS (Apple Virtualization Framework), fast to enter,
28+configurable, and built around sessions.**
2929
30−**Who it’s for:** macOS users running coding agents who want real isolation without giving up a fast daily workflow.
31−
32−**Quick facts:** warm re-entry is typically **<5s** on my M3 (varies by machine/cache); first run downloads and
33−provisions a Debian base image (network dependent).
34−
35−**Security model:** Linux guest VM with explicit mount allowlists from `vibebox.toml` (repo-first, everything else
36−opt-in).
37−
38−- **enter/attach in seconds:** `vibebox` drops you into a reusable sandbox for the current repo
39−- **project-scoped by default:** explicit mounts + repo-contained changes (repo-first, everything else is allowlisted)
40−- **sessioned:** multi-instance + session management (reuse, multiple terminals, cleanup)
30+- **Enter in seconds:** `vibebox` drops you into a reusable sandbox for the current repo
31+- **Project-scoped:** explicit mounts + repo-contained changes
32+- **Sessioned:** multi-instance + session management (reuse, multiple terminals, cleanup)
4133
4234### Quick Demo
4335
4436```bash
45−# from any repo
37+# 1) from any repo
4638cd my-project
4739vibebox
4840```
4941
50−What you should see (roughly):
51−
52−```text
53−vibebox: starting (session: my-project)
54−vibebox: attaching...
55−vibecoder@vibebox:~/my-project$
56−```
57−
5842[![VibeBox Terminal UI](docs/screenshot.png)](https://vibebox.robcholz.com)
5943
6044---
6145
6246### Why I built VibeBox
6347
64−I use coding agents daily, and I wanted to give them a real shell without handing them my host machine.
65−Lock things down and you get nonstop confirmations; loosen it up and you worry about deleting files, touching secrets,
66−or wandering outside the repo.
48+I use agents like Codex and CC a lot, but I always felt uneasy running them directly on my host machine. If I lock
49+things
50+down, I get interrupted by constant “are you sure?” prompts. If I loosen it up, I worry the agent might touch the
51+wrong files or run something I didn’t intend.
6752
68−VibeBox is the middle ground: a per-repo sandbox with a hard VM boundary, fast re-entry, and explicit mounts. It’s built
69−to be “always on” for agent work without turning safety into a chore.
70−
71−### Why a micro-VM (vs containers)?
72−
73−Containers are great. VibeBox isn’t trying to replace Docker/devcontainers for building services.
74−
75−I specifically wanted a VM-shaped default for agent workflows on macOS:
76−
77−- **guest-kernel isolation boundary by default:** when I’m letting an agent run arbitrary commands, I want “safe mode”
78− to
79− be a Linux guest, not my host.
80−- **sessions as a first-class workflow:** attach/reuse per repo, multiple terminals into the same sandbox, reliable
81− cleanup to avoid orphan environments.
82−- **explicit mount allowlists as the primary UX:** repo-scoped by default; anything else is an explicit decision.
83−- **minimal per-repo setup:** you *can* reproduce parts of this with compose/devcontainers, but I wanted a single
84− command
85− that works repo-to-repo without maintaining container configs for the basic “safe shell” workflow.
53+I wanted something that feels as frictionless as giving an agent a real shell, but with a hard isolation boundary. So I
54+built VibeBox: a per-project micro-VM sandbox that starts fast, keeps changes contained to the repo, and lets me iterate
55+without babysitting permissions.
8656
8757### Comparison
8858
8959Here’s why I didn’t just use existing options:
9060
91−- **vibe**: super convenient and nails “zero-config, just go”. VibeBox is intentionally on a different axis: per-repo
92− config + sessions + multi-instance lifecycle.
61+- **vibe**: super convenient, but it’s too minimal for what I need. It lacks basic configuration, and it doesn’t give me
62+ the multi-instance + session management my workflow wants.
9363- **QEMU**: powerful, but the configuration surface area is huge. For day-to-day sandboxing it’s not “open a repo and
9464 go” — it’s a project on its own.
95−- **Docker / devcontainers / devpods**: great ecosystem. My friction wasn’t raw startup time, it was the day-to-day
96− overhead of keeping per-repo agent sandboxes *safe-by-default* (mount allowlists, secrets exposure, attach/reuse,
97− cleanup) without maintaining container configs per repo for the basic workflow.
65+- **Docker / devcontainers**: great ecosystem, but for daily use it feels heavy.
9866
9967That’s what pushed me to build **VibeBox**: I wanted a per-project sandbox that’s fast to enter (just `vibebox`),
10068supports real configuration + sessions, and keeps a hard isolation boundary.
@@ -102,13 +70,13 @@ supports real configuration + sessions, and keeps a hard isolation boundary.
10270### Installation
10371
10472```bash
105−# install script
73+# YOLO
10674curl -fsSL https://raw.githubusercontent.com/robcholz/vibebox/main/install | bash
10775
108−# package managers
76+# Package managers
10977cargo install vibebox
11078
111−# manual install
79+# Or manually
11280curl -LO https://github.com/robcholz/vibebox/releases/download/latest/vibebox-macos-arm64.zip
11381unzip vibebox-macos-arm64.zip
11482mkdir -p ~/.local/bin
@@ -118,7 +86,7 @@ export PATH="$HOME/.local/bin:$PATH"
11886
11987**Requirements**
12088
121−- macOS on Apple Silicon (VibeBox uses Apple's virtualization APIs).
89+- macOS on Apple Silicon (Vibebox uses Apple's virtualization APIs).
12290
12391**First Run**
12492
@@ -134,7 +102,7 @@ cd /path/to/your/project
134102vibebox
135103```
136104
137−On first run, VibeBox creates `vibebox.toml` in your project (if missing) and a `.vibebox/` directory for instance data.
105+On first run, Vibebox creates `vibebox.toml` in your project (if missing) and a `.vibebox/` directory for instance data.
138106
139107**Configuration (`vibebox.toml`)**
140108
@@ -185,7 +153,7 @@ vibebox explain # show mounts and network info
185153- Default SSH user: `vibecoder`
186154- Hostname: `vibebox`
187155- Base image provisioning installs: build tools, `git`, `curl`, `ripgrep`, `openssh-server`, and `sudo`.
188−- On first login, VibeBox installs `mise` and configures tools like `uv`, `node`, `@openai/codex`, and
156+- On first login, Vibebox installs `mise` and configures tools like `uv`, `node`, `@openai/codex`, and
189157 `@anthropic-ai/claude-code` (best-effort).
190158- Shell aliases: `:help` and `:exit`.
191159
@@ -200,24 +168,27 @@ vibebox explain # show mounts and network info
200168If you're interested in contributing to VibeBox, please read our [contributing docs](CONTRIBUTING.md) before
201169submitting a pull request.
202170
171+### Using VibeBox
172+
173+Feel free to use
174+
203175### FAQ
204176
205−#### How is this different from other sandboxes?
177+#### How is this different from other Sandboxes?
206178
207−VibeBox is built for fast, repeatable local sandboxes with minimal ceremony. What’s different here:
179+Vibebox is built for fast, repeatable local sandboxes with minimal ceremony. What’s different here:
208180
209−- Warm re-entry is typically **<5s** on my M3 (varies by machine/cache), so you can jump back in quickly.
181+- Warm startup is typically under **6 seconds** on my M3, so you can jump back in quickly.
210182- One simple command — `vibebox` — drops you into the sandbox from your project.
211183- Configuration lives in `vibebox.toml`, where you can set CPU, RAM, disk size, and mounts.
212−- Sessions are first-class: reuse, multiple terminals, cleanup.
213184
214−### Special thanks
185+### Special Thank
215186
216187[vibe](https://github.com/lynaghk/vibe) by lynaghk.
217188
218−And the amazing Rust community — without the ecosystem and toolchain like [crates.io](https://crates.io), this wouldn't
219−be possible!
189+And amazing Rust community, without your rich crates and fantastic toolchain like [crates.io](https://crates.io), this
190+wouldn't be possible!
220191
221192---
222193
223−**Follow me on X** [x.com/robcholz](https://x.com/robcholz)
194+**Follow me on X** [X.com](https://x.com/robcholz)
README.zh.md+17−51
@@ -5,7 +5,7 @@
55 </picture>
66 </a>
77</p>
8−<p align="center">用于安全运行 coding agents 的超高速开源沙盒。</p>
8+<p align="center">超高速、开源的 AI 沙盒。</p>
99
1010<p align="center">
1111 <a href="https://crates.io/crates/vibebox">
@@ -24,34 +24,8 @@
2424 <a href="README.md">English</a>
2525</p>
2626
27−**VibeBox 是一个按项目划分的 micro-VM 沙盒,用于在 macOS 上运行 coding agents(基于 Apple Virtualization Framework)。**
28−它面向 *日常使用* 工作流优化:快速热启动、显式挂载、可复用会话。
29−
30−**适合谁:** 在 macOS 上使用 coding agents,并且既想要真实隔离又不想牺牲日常效率的人。
31−
32−**快速事实:** 在我的 M3 上,热启动通常 **<5s**(因机器/缓存而异);首次运行会下载并初始化 Debian 基础镜像(受网络影响)。
33−
34−**安全模型:** Linux 来宾 VM + `vibebox.toml` 显式挂载白名单(默认仅项目目录,其它均需显式允许)。
35−
36−- **几秒进入/附加:** `vibebox` 直接进入当前仓库的可复用沙盒
37−- **默认按项目范围:** 显式挂载 + 改动限制在仓库内(repo 优先,其他需 allowlist)
38−- **会话化:** 多实例 + 会话管理(复用、多终端、清理)
39−
40−### 快速演示
41−
42−```bash
43−# 在任意仓库内
44−cd my-project
45−vibebox
46−```
47−
48−你大致会看到:
49−
50−```text
51−vibebox: starting (session: my-project)
52−vibebox: attaching...
53−vibecoder@vibebox:~/my-project$
54−```
27+VibeBox 是一个轻量、启动极快的沙盒环境,让 AI Agent 可以安全地直接跑命令、改文件、执行代码,不会不停弹“要不要允许”的提示。它基于
28+Apple 的 Virtualization Framework 做到彻底隔离,所以无论 Agent 在里面怎么折腾,你的真实系统都不会被影响;同时做到了低内存和磁盘占用。
5529
5630[![VibeBox Terminal UI](docs/screenshot.png)](https://vibebox.robcholz.com)
5731
@@ -59,33 +33,22 @@ vibecoder@vibebox:~/my-project$
5933
6034### 我为什么做 VibeBox
6135
62−我每天都在用 coding agents,也希望它们有一个真实的 shell,但不想把宿主机直接交出去。
63−权限收紧会被不停的确认打断;权限放开又担心误删文件、触及密钥,或者跑出仓库边界。
64−
65−VibeBox 是中间方案:按项目隔离、硬 VM 边界、快速回到工作状态、显式挂载。它适合把 agent 当成日常工具,而不是把安全变成负担。
66−
67−### 为什么是 micro-VM(而不是容器)?
36+我平时经常用像 Codex 和 CC 这样的
37+agent,但一直不太敢让它们直接在我的宿主机上跑。把权限收紧一点,就会被各种“你确定吗?”的确认弹窗不停打断;放松一点,又担心它哪天误操作,碰到不该碰的文件,或者跑了我没打算执行的命令。
6838
69−容器很好用。VibeBox 并不是用来替代 Docker/devcontainers 去构建服务。
70−
71−我更想要的是在 macOS 上适合 agent 的 VM 默认形态:
72−
73−- **默认是 guest-kernel 隔离边界:** 让 agent 跑任意命令时,“安全模式”是 Linux 来宾而不是宿主机。
74−- **会话是第一等公民:** 按项目附加/复用,多终端进入同一沙盒,可靠清理,避免孤儿环境。
75−- **显式挂载白名单作为主要 UX:** 默认仅项目目录,其它都需显式允许。
76−- **最少的每项目配置:** 你可以用 compose/devcontainers 实现一部分,但我想要的是一个命令,在不同仓库间直接工作,不必维护容器配置来获得基础“安全
77− shell”体验。
39+我想要的是一种体验:像给 agent 一个真实 shell 一样顺滑,但同时又有一道硬隔离的安全边界。于是我做了 VibeBox:一个按项目划分的
40+micro-VM 沙箱,启动很快,改动被限制在仓库范围内,让我可以更高频地迭代,而不用一直盯着权限确认。
7841
7942### 对比
8043
8144下面是我为什么没有直接用现成方案的原因:
8245
83−- **vibe**:非常方便,“零配置、直接用”做得很好。但 VibeBox 走的是另一条路:按项目配置 + 会话 + 多实例生命周期。
46+- **vibe**:非常方便,但对我来说太“极简”了。它缺少一些基础配置能力,也没法提供我工作流里需要的多开和 session 管理。
8447- **QEMU**:很强大,但配置面太大了。日常当沙箱用,它不像是“进到 repo 就能用”,更像是你得先把它当成一个项目来折腾。
85−- **Docker / devcontainers / devpods**:生态很成熟。我的痛点不在启动时间,而是日常保持
86− safe-by-default(挂载白名单、密钥暴露、附加/复用、清理)的开销,不想为基础 workflow 在每个项目维护容器配置。
48+- **Docker / devcontainers**:生态很成熟,但日常使用对我来说偏重。
8749
88−这就是我做 **VibeBox** 的原因:我想要一个按项目隔离的沙箱,进入快(直接 `vibebox`),支持真实配置 + 会话,同时保持硬隔离边界。
50+这些就促使我做了 **VibeBox**:我想要一个按项目隔离的沙箱,进入速度快(直接用 `vibebox`),支持真正可用的配置和
51+sessions,同时还保留明确的硬隔离边界。
8952
9053### 安装
9154
@@ -186,16 +149,19 @@ vibebox explain # 显示挂载与网络信息
186149
187150如果你想参与贡献 VibeBox,请先阅读 [贡献指南](CONTRIBUTING.md),再提交 Pull Request。
188151
152+### 使用 VibeBox
153+
154+欢迎使用
155+
189156### FAQ
190157
191158#### 它和其它 Sandboxes 有什么不同?
192159
193−VibeBox 追求的是:本地、可复现、启动快、流程简单。主要差异点:
160+Vibebox 追求的是:本地、可复现、启动快、流程简单。主要差异点:
194161
195−- 在我的 M3 上,热启动通常 **<5s**,可以非常快地回到工作状态。
162+- 在我的 M3 上,热启动通常 **6 秒以内**,可以非常快地回到工作状态。
196163- 一个命令——`vibebox`——直接把你带进沙盒(从你的项目目录启动)。
197164- 配置集中在 `vibebox.toml`,CPU / 内存 / 磁盘大小 / 挂载都能一眼看懂、随手改。
198−- 会话是第一等公民:复用、多终端、清理。
199165
200166### 特别鸣谢
201167
docs/tasks.md+9−14
@@ -25,7 +25,7 @@
25255. [x] Implement rendering functions for header, terminal area, input area, completions, and status bar.
26266. [x] Implement async event loop (keyboard, resize, tick) with crossterm EventStream + tokio.
27277. [x] Add a standalone TUI CLI binary (no main.rs wiring) with placeholder VM info and TODOs for VM integration.
28−8. [x] Run tests and validate coverage for the new module.
28+8. [ ] Run tests and validate coverage for the new module.
2929
3030## TUI
3131
@@ -49,23 +49,18 @@
4949 4. [x] set up the cli.
50509. [x] fix ui overlap, and consistency issue.
515110. [x] `purge-cache` to clear the cache.
52−11. [x] intensive integration test.
52+11. [ ] intensive integration test.
5353
5454## Publish
5555
56−1. [x] write the docs.
57−2. [x] setup quick install link.
58−3. [x] setup website.
56+1. [ ] write the docs.
57+2. [ ] setup quick install link.
58+3. [ ] setup website.
5959
6060## Stage 2
6161
62621. [ ] retouch the cli ux.
63−2. [x] refactor the code.
64−3. [ ] refactor the mount system.
65−4. [x] refactor the vm process lifetime.
66−5. [x] Redirect vm output to log.
67−6. [x] Redirect vm output to vibebox starting it.
68−7. [x] use anyhow to sync api.
69−8. [ ] add support for ipv6.
70−9. [x] use UnixStream instead of status file
71−10. [x] liveness check should also happen when waiting for ssh port
63+2. [ ] refactor the code.
64+3. [ ] Redirect vm output to log.
65+4. [ ] Redirect vm output to vibebox starting it.
66+5. [ ] use anyhow to sync api.
src/bin/vibebox-supervisor.rs+7−8
@@ -21,16 +21,15 @@ fn main() -> Result<()> {
2121 color_eyre::install()?;
2222
2323 tracing::info!("starting vm supervisor");
24− let project_dir = env::current_dir().map_err(|err| color_eyre::eyre::eyre!(err.to_string()))?;
25− let config = config::load_config(&project_dir)
24+ let cwd = env::current_dir().map_err(|err| color_eyre::eyre::eyre!(err.to_string()))?;
25+ let config = config::load_config(&cwd);
26+ let instance_dir = instance::ensure_instance_dir(&cwd)
2627 .map_err(|err| color_eyre::eyre::eyre!(err.to_string()))?;
27− let _ = instance::ensure_instance_dir(&project_dir)
28− .map_err(|err| color_eyre::eyre::eyre!(err.to_string()))?;
29− let _ = instance::touch_last_active(&project_dir);
28+ let _ = instance::touch_last_active(&instance_dir);
3029 let args = vm::VmArg {
3130 cpu_count: config.box_cfg.cpu_count,
32− ram_bytes: config.box_cfg.ram_size.as_u64(),
33− disk_bytes: config.box_cfg.disk_size.as_u64(),
31+ ram_bytes: config.box_cfg.ram_mb.saturating_mul(1024 * 1024),
32+ disk_bytes: config.box_cfg.disk_gb.saturating_mul(1024 * 1024 * 1024),
3433 no_default_mounts: false,
3534 mounts: config.box_cfg.mounts.clone(),
3635 };
@@ -38,7 +37,7 @@ fn main() -> Result<()> {
3837 tracing::info!(auto_shutdown_ms, "vm supervisor config");
3938
4039 let result = vm_manager::run_manager(args, auto_shutdown_ms);
41− let _ = instance::touch_last_active(&project_dir);
40+ let _ = instance::touch_last_active(&instance_dir);
4241 if let Err(err) = result {
4342 tracing::error!(error = %err, "vm supervisor exited");
4443 return Err(color_eyre::eyre::eyre!(err.to_string()));
src/bin/vibebox.rs+91−55
@@ -1,7 +1,3 @@
1−use bytesize::ByteSize;
2−use clap::Parser;
3−use color_eyre::Result;
4−use dialoguer::Confirm;
51use std::{
62 env,
73 ffi::OsString,
@@ -10,6 +6,10 @@ use std::{
106 path::{Path, PathBuf},
117 sync::{Arc, Mutex},
128};
9+
10+use clap::Parser;
11+use color_eyre::Result;
12+use dialoguer::Confirm;
1313use time::OffsetDateTime;
1414use time::format_description::well_known::Rfc3339;
1515use tracing_subscriber::filter::LevelFilter;
@@ -17,9 +17,8 @@ use tracing_subscriber::registry::Registry;
1717use tracing_subscriber::{EnvFilter, fmt, prelude::*, reload};
1818
1919use vibebox::tui::{AppState, VmInfo};
20−use vibebox::utils::relative_to_home;
2120use vibebox::{
22− SessionManager, commands, config, explain, instance, session_manager, tui, vm_manager,
21+ SessionManager, commands, config, explain, instance, session_manager, tui, vm, vm_manager,
2322};
2423
2524#[derive(Debug, Parser)]
@@ -57,26 +56,53 @@ fn main() -> Result<()> {
5756
5857 let config_override = cli.config.clone();
5958 let raw_args: Vec<OsString> = env::args_os().collect();
60− let config = config::load_config_with_path(&cwd, config_override.as_deref())
61− .map_err(|err| color_eyre::eyre::eyre!(err.to_string()))?;
59+ let config = config::load_config_with_path(&cwd, config_override.as_deref());
6260
61+ if env::var("VIBEBOX_VM_MANAGER").as_deref() == Ok("1") {
62+ tracing::info!("starting vm manager mode");
63+ let args = vm::VmArg {
64+ cpu_count: config.box_cfg.cpu_count,
65+ ram_bytes: config.box_cfg.ram_mb.saturating_mul(1024 * 1024),
66+ disk_bytes: config.box_cfg.disk_gb.saturating_mul(1024 * 1024 * 1024),
67+ no_default_mounts: false,
68+ mounts: config.box_cfg.mounts.clone(),
69+ };
70+ let auto_shutdown_ms = config.supervisor.auto_shutdown_ms;
71+ tracing::info!(auto_shutdown_ms, "vm manager config");
72+ if let Err(err) = vm_manager::run_manager(args, auto_shutdown_ms) {
73+ tracing::error!(error = %err, "vm manager exited");
74+ return Err(color_eyre::eyre::eyre!(err.to_string()));
75+ }
76+ return Ok(());
77+ }
78+
79+ vm::ensure_signed();
80+
81+ let vm_args = vm::VmArg {
82+ cpu_count: config.box_cfg.cpu_count,
83+ ram_bytes: config.box_cfg.ram_mb.saturating_mul(1024 * 1024),
84+ disk_bytes: config.box_cfg.disk_gb.saturating_mul(1024 * 1024 * 1024),
85+ no_default_mounts: false,
86+ mounts: config.box_cfg.mounts.clone(),
87+ };
88+ let auto_shutdown_ms = config.supervisor.auto_shutdown_ms;
6389 let vm_info = VmInfo {
64− max_memory: config.box_cfg.ram_size,
65− cpu_cores: config.box_cfg.cpu_count,
66− max_disk: config.box_cfg.disk_size,
90+ max_memory_mb: vm_args.ram_bytes / (1024 * 1024),
91+ cpu_cores: vm_args.cpu_count,
92+ max_disk_gb: (vm_args.disk_bytes as f32) / 1024.0 / 1024.0 / 1024.0,
6793 system_name: "Debian".to_string(), // TODO: read system name from the VM.
68− auto_shutdown_ms: config.supervisor.auto_shutdown_ms,
94+ auto_shutdown_ms,
6995 };
7096 if let Ok(manager) = SessionManager::new() {
7197 if let Err(err) = manager.update_global_sessions(&cwd) {
7298 tracing::warn!(error = %err, "failed to update a global session list");
7399 }
74100 } else {
75− tracing::error!("failed to initialize session manager");
76− std::process::exit(1);
101+ tracing::warn!("failed to initialize session manager");
77102 }
78103 let commands = commands::build_commands();
79104 let app = Arc::new(Mutex::new(AppState::new(cwd.clone(), vm_info, commands)));
105+
80106 {
81107 let mut locked = app.lock().expect("app state poisoned");
82108 tui::render_tui_once(&mut locked)?;
@@ -86,39 +112,17 @@ fn main() -> Result<()> {
86112 writeln!(stdout)?;
87113 stdout.flush()?;
88114 }
89− warn_disk_size_mismatch(&cwd, config.box_cfg.disk_size);
115+ warn_disk_size_mismatch(&cwd, vm_args.disk_bytes);
90116 if let Some(handle) = stderr_handle {
91117 let _ = handle.modify(|filter| *filter = LevelFilter::INFO);
92118 }
93119
94− tracing::debug!(config.supervisor.auto_shutdown_ms, "auto shutdown config");
95− let manager_conn = vm_manager::ensure_manager(
96− &raw_args,
97− config.supervisor.auto_shutdown_ms,
98− config_override.as_deref(),
99− )
100− .map_err(|err| {
101− tracing::error!(error = %err, "failed to ensure vm manager");
102− color_eyre::eyre::eyre!(err.to_string())
103− })?;
120+ tracing::debug!(auto_shutdown_ms, "auto shutdown config");
121+ let manager_conn =
122+ vm_manager::ensure_manager(&raw_args, auto_shutdown_ms, config_override.as_deref())
123+ .map_err(|err| color_eyre::eyre::eyre!(err.to_string()))?;
104124
105− if let Err(err) = instance::run_with_ssh(manager_conn) {
106− if let Some(instance::InstanceError::UnexpectedDisconnection) =
107− err.downcast_ref::<instance::InstanceError>()
108− {
109− tracing::warn!("vm manager disconnected; exiting vibebox");
110− } else if let Some(instance::InstanceError::VMError(vm_error)) =
111− err.downcast_ref::<instance::InstanceError>()
112− {
113− tracing::error!("[vm]: {vm_error}");
114− tracing::info!("vibecoding paused: the VM says today is a rest day 😴");
115− std::process::exit(1);
116− } else {
117− let message = err.to_string();
118− tracing::error!(error = %message, "vibebox exited: uncaught error");
119− return Err(color_eyre::eyre::eyre!(message));
120− }
121− }
125+ instance::run_with_ssh(manager_conn).map_err(|err| color_eyre::eyre::eyre!(err.to_string()))?;
122126
123127 tracing::info!("See you again — keep vibecoding (no SEVs, only vibes) 😈");
124128
@@ -201,14 +205,13 @@ fn handle_command(command: Command, cwd: &Path, config_override: Option<&Path>)
201205 "Purged {} file{} totaling {} from {}",
202206 file_count,
203207 if file_count == 1 { "" } else { "s" },
204− ByteSize(total_bytes),
208+ format_bytes(total_bytes),
205209 cache_dir.display()
206210 );
207211 Ok(())
208212 }
209213 Command::Explain => {
210− let config = config::load_config_with_path(cwd, config_override)
211− .map_err(|err| color_eyre::eyre::eyre!(err.to_string()))?;
214+ let config = config::load_config_with_path(cwd, config_override);
212215 let mounts = explain::build_mount_rows(cwd, &config)
213216 .map_err(|err| color_eyre::eyre::eyre!(err.to_string()))?;
214217 let networks = explain::build_network_rows(cwd)
@@ -231,6 +234,20 @@ fn project_name(directory: &Path) -> String {
231234 .to_string()
232235}
233236
237+fn relative_to_home(directory: &Path) -> String {
238+ let Ok(home) = env::var("HOME") else {
239+ return directory.display().to_string();
240+ };
241+ let home_path = PathBuf::from(home);
242+ if let Ok(stripped) = directory.strip_prefix(&home_path) {
243+ if stripped.components().next().is_none() {
244+ return "~".to_string();
245+ }
246+ return format!("~/{}", stripped.display());
247+ }
248+ directory.display().to_string()
249+}
250+
234251fn cache_dir() -> Result<PathBuf> {
235252 let home = env::var("HOME").map(PathBuf::from)?;
236253 let cache_home = env::var("XDG_CACHE_HOME")
@@ -279,6 +296,23 @@ fn measure_dir(path: &Path) -> Result<(u64, u64)> {
279296 Ok((file_count, total_bytes))
280297}
281298
299+fn format_bytes(bytes: u64) -> String {
300+ const KB: f64 = 1024.0;
301+ const MB: f64 = KB * 1024.0;
302+ const GB: f64 = MB * 1024.0;
303+
304+ let b = bytes as f64;
305+ if b >= GB {
306+ format!("{:.2} GB", b / GB)
307+ } else if b >= MB {
308+ format!("{:.1} MB", b / MB)
309+ } else if b >= KB {
310+ format!("{:.1} KB", b / KB)
311+ } else {
312+ format!("{} B", bytes)
313+ }
314+}
315+
282316fn format_last_active(value: Option<&str>) -> String {
283317 let Some(raw) = value else {
284318 return "-".to_string();
@@ -320,22 +354,24 @@ fn format_last_active(value: Option<&str>) -> String {
320354 format!("{} day{} ago", days, if days == 1 { "" } else { "s" })
321355}
322356
323−fn warn_disk_size_mismatch(cwd: &Path, configured_size: ByteSize) {
357+fn warn_disk_size_mismatch(cwd: &Path, configured_bytes: u64) {
324358 let instance_raw = cwd
325359 .join(session_manager::INSTANCE_DIR_NAME)
326360 .join("instance.raw");
327361 let Ok(meta) = fs::metadata(&instance_raw) else {
328362 return;
329363 };
330− let current_size = ByteSize::b(meta.len());
331− if current_size == configured_size {
364+ let current_bytes = meta.len();
365+ if current_bytes == configured_bytes {
332366 return;
333367 }
368+ let current_gb = current_bytes as f64 / (1024.0 * 1024.0 * 1024.0);
369+ let target_gb = configured_bytes as f64 / (1024.0 * 1024.0 * 1024.0);
334370 tracing::warn!(
335− "instance disk size does not match config (current {}, config {}). \
371+ "instance disk size does not match config (current {:.2} GB, config {:.2} GB). \
336372disk_gb applies only on init. Run `vibebox reset` to recreate or set disk_gb to match; using the existing disk.",
337− current_size,
338− configured_size,
373+ current_gb,
374+ target_gb
339375 );
340376}
341377
@@ -344,13 +380,13 @@ type StderrHandle = reload::Handle<LevelFilter, Registry>;
344380fn init_tracing(cwd: &Path) -> Option<StderrHandle> {
345381 let filter = EnvFilter::try_from_default_env().unwrap_or_else(|_| EnvFilter::new("debug"));
346382 let file_filter = filter.clone();
347− let stderr_is_tty = io::stderr().is_terminal();
383+ let stderr_is_tty = std::io::stderr().is_terminal();
348384 let ansi = stderr_is_tty && env::var("VIBEBOX_LOG_NO_COLOR").is_err();
349385 let file = instance::ensure_instance_dir(cwd)
350386 .ok()
351387 .and_then(|instance_dir| {
352388 let log_path = instance_dir.join("cli.log");
353− fs::OpenOptions::new()
389+ std::fs::OpenOptions::new()
354390 .create(true)
355391 .write(true)
356392 .truncate(true)
@@ -364,7 +400,7 @@ fn init_tracing(cwd: &Path) -> Option<StderrHandle> {
364400 .with_target(false)
365401 .with_ansi(ansi)
366402 .without_time()
367− .with_writer(io::stderr)
403+ .with_writer(std::io::stderr)
368404 .with_filter(stderr_filter);
369405 let subscriber = tracing_subscriber::registry().with(stderr_layer);
370406 if let Some(file) = file {
@@ -382,7 +418,7 @@ fn init_tracing(cwd: &Path) -> Option<StderrHandle> {
382418 let stderr_layer = fmt::layer()
383419 .with_target(false)
384420 .with_ansi(ansi)
385− .with_writer(io::stderr)
421+ .with_writer(std::io::stderr)
386422 .with_filter(filter);
387423 let subscriber = tracing_subscriber::registry().with(stderr_layer);
388424 if let Some(file) = file {
src/config.rs+77−467
@@ -1,14 +1,13 @@
1−use anyhow::{Context, Error, Result, bail};
2−use bytesize::ByteSize;
3−use serde::{Deserialize, Serialize};
41use std::{
52 env, fs, io,
63 path::{Path, PathBuf},
74};
85
6+use serde::{Deserialize, Serialize};
7+
98use crate::vm::DirectoryShare;
109
11−const CONFIG_FILENAME: &str = "vibebox.toml";
10+pub const CONFIG_FILENAME: &str = "vibebox.toml";
1211pub const CONFIG_PATH_ENV: &str = "VIBEBOX_CONFIG_PATH";
1312
1413const DEFAULT_CPU_COUNT: usize = 2;
@@ -23,83 +22,20 @@ pub struct Config {
2322 pub supervisor: SupervisorConfig,
2423}
2524
26−const MI_B: u64 = 1024 * 1024;
27−const GI_B: u64 = 1024 * 1024 * 1024;
28−
29−mod serde_mb {
30− use super::{ByteSize, MI_B};
31− use serde::{Deserialize, Deserializer, Serializer};
32−
33− pub fn serialize<S>(v: &ByteSize, s: S) -> Result<S::Ok, S::Error>
34− where
35− S: Serializer,
36− {
37− let bytes = v.0;
38− if !bytes.is_multiple_of(MI_B) {
39− return Err(serde::ser::Error::custom(
40− "ram_mb must be an integer number of MB",
41− ));
42− }
43− s.serialize_u64(bytes / MI_B)
44− }
45−
46− pub fn deserialize<'de, D>(d: D) -> Result<ByteSize, D::Error>
47− where
48− D: Deserializer<'de>,
49− {
50− let mb = u64::deserialize(d)?;
51− let bytes = mb
52− .checked_mul(MI_B)
53− .ok_or_else(|| serde::de::Error::custom("ram_mb overflow"))?;
54− Ok(ByteSize(bytes))
55− }
56−}
57−
58−mod serde_gb {
59− use super::{ByteSize, GI_B};
60− use serde::{Deserialize, Deserializer, Serializer};
61−
62− pub fn serialize<S>(v: &ByteSize, s: S) -> Result<S::Ok, S::Error>
63− where
64− S: Serializer,
65− {
66− let bytes = v.0;
67− if !bytes.is_multiple_of(GI_B) {
68− return Err(serde::ser::Error::custom(
69− "disk_gb must be an integer number of GB",
70− ));
71− }
72− s.serialize_u64(bytes / GI_B)
73− }
74−
75− pub fn deserialize<'de, D>(d: D) -> Result<ByteSize, D::Error>
76− where
77− D: Deserializer<'de>,
78− {
79− let gb = u64::deserialize(d)?;
80− let bytes = gb
81− .checked_mul(GI_B)
82− .ok_or_else(|| serde::de::Error::custom("disk_gb overflow"))?;
83− Ok(ByteSize(bytes))
84− }
85−}
86−
8725#[derive(Debug, Clone, Serialize, Deserialize)]
8826pub struct BoxConfig {
8927 pub cpu_count: usize,
90− #[serde(rename = "ram_mb", with = "serde_mb")]
91− pub ram_size: ByteSize,
92− #[serde(rename = "disk_gb", with = "serde_gb")]
93− pub disk_size: ByteSize,
28+ pub ram_mb: u64,
29+ pub disk_gb: u64,
9430 pub mounts: Vec<String>,
9531}
9632
9733impl Default for BoxConfig {
9834 fn default() -> Self {
9935 Self {
100− cpu_count: DEFAULT_CPU_COUNT,
101− ram_size: ByteSize::mib(DEFAULT_RAM_MB),
102− disk_size: ByteSize::gib(DEFAULT_DISK_GB),
36+ cpu_count: default_cpu_count(),
37+ ram_mb: default_ram_mb(),
38+ disk_gb: default_disk_gb(),
10339 mounts: default_mounts(),
10440 }
10541 }
@@ -113,11 +49,23 @@ pub struct SupervisorConfig {
11349impl Default for SupervisorConfig {
11450 fn default() -> Self {
11551 Self {
116− auto_shutdown_ms: DEFAULT_AUTO_SHUTDOWN_MS,
52+ auto_shutdown_ms: default_auto_shutdown_ms(),
11753 }
11854 }
11955}
12056
57+fn default_cpu_count() -> usize {
58+ DEFAULT_CPU_COUNT
59+}
60+
61+fn default_ram_mb() -> u64 {
62+ DEFAULT_RAM_MB
63+}
64+
65+fn default_auto_shutdown_ms() -> u64 {
66+ DEFAULT_AUTO_SHUTDOWN_MS
67+}
68+
12169fn default_mounts() -> Vec<String> {
12270 vec![
12371 "~/.codex:~/.codex:read-write".into(),
@@ -125,12 +73,19 @@ fn default_mounts() -> Vec<String> {
12573 ]
12674}
12775
76+fn default_disk_gb() -> u64 {
77+ DEFAULT_DISK_GB
78+}
79+
12880pub fn config_path(project_root: &Path) -> PathBuf {
12981 project_root.join(CONFIG_FILENAME)
13082}
13183
132−pub fn ensure_config_file(project_root: &Path, override_path: Option<&Path>) -> Result<PathBuf> {
133− let path = resolve_config_path(project_root, override_path)?;
84+pub fn ensure_config_file(
85+ project_root: &Path,
86+ override_path: Option<&Path>,
87+) -> Result<PathBuf, io::Error> {
88+ let path = resolve_config_path(project_root, override_path);
13489 if !path.exists() {
13590 let default_config = Config::default();
13691 let contents = toml::to_string_pretty(&default_config).unwrap_or_default();
@@ -140,24 +95,32 @@ pub fn ensure_config_file(project_root: &Path, override_path: Option<&Path>) ->
14095 Ok(path)
14196}
14297
143−pub fn load_config(project_root: &Path) -> Result<Config> {
98+pub fn load_config(project_root: &Path) -> Config {
14499 load_config_with_path(project_root, None)
145100}
146101
147−pub fn load_config_with_path(project_root: &Path, override_path: Option<&Path>) -> Result<Config> {
148− let path =
149− ensure_config_file(project_root, override_path).context("failed to create config")?;
150− let raw = fs::read_to_string(&path).context("failed to read config")?;
102+pub fn load_config_with_path(project_root: &Path, override_path: Option<&Path>) -> Config {
103+ let path = match ensure_config_file(project_root, override_path) {
104+ Ok(path) => path,
105+ Err(err) => die(&format!("failed to create config: {err}")),
106+ };
107+ let raw = match fs::read_to_string(&path) {
108+ Ok(raw) => raw,
109+ Err(err) => die(&format!("failed to read config: {err}")),
110+ };
151111 let trimmed = raw.trim();
152112 tracing::debug!(path = %path.display(), bytes = raw.len(), "loaded vibebox config");
153113 if trimmed.is_empty() {
154− bail!(format!(
114+ die(&format!(
155115 "config file ({}) is empty. Required fields: [box].cpu_count (integer), [box].ram_mb (integer), [box].disk_gb (integer), [box].mounts (array of strings), [supervisor].auto_shutdown_ms (integer)",
156116 path.display()
157117 ));
158118 }
159119
160− let value: toml::Value = toml::from_str(trimmed).context("invalid config")?;
120+ let value: toml::Value = match toml::from_str(trimmed) {
121+ Ok(value) => value,
122+ Err(err) => die(&format!("invalid config: {err}")),
123+ };
161124 let schema_errors = validate_schema(&value);
162125 if !schema_errors.is_empty() {
163126 let message = format!(
@@ -165,28 +128,27 @@ pub fn load_config_with_path(project_root: &Path, override_path: Option<&Path>)
165128 path.display(),
166129 schema_errors.join("\n- ")
167130 );
168− bail!(message);
131+ die(&message);
169132 }
170133
171− let config: Config = toml::from_str(trimmed).context("invalid config")?;
172− validate_config(&config).map_err(Error::msg)?;
173− Ok(config)
174−}
175−
176−fn resolve_config_path(project_root: &Path, override_path: Option<&Path>) -> Result<PathBuf> {
177− let env_override = env::var_os(CONFIG_PATH_ENV).map(PathBuf::from);
178− resolve_config_path_inner(project_root, override_path, env_override)
134+ let config: Config = match toml::from_str(trimmed) {
135+ Ok(config) => config,
136+ Err(err) => die(&format!("invalid config: {err}")),
137+ };
138+ validate_or_exit(&config);
139+ config
179140}
180141
181−fn resolve_config_path_inner(
182− project_root: &Path,
183− override_path: Option<&Path>,
184− env_override: Option<PathBuf>,
185−) -> Result<PathBuf> {
186− let root = fs::canonicalize(project_root).context("failed to resolve project root")?;
142+fn resolve_config_path(project_root: &Path, override_path: Option<&Path>) -> PathBuf {
143+ let root = match fs::canonicalize(project_root) {
144+ Ok(root) => root,
145+ Err(err) => die(&format!("failed to resolve project root: {err}")),
146+ };
187147
188− let selected_path = override_path.map(PathBuf::from).or(env_override);
189− let raw_path = if let Some(path) = selected_path {
148+ let override_path = override_path
149+ .map(PathBuf::from)
150+ .or_else(|| env::var_os(CONFIG_PATH_ENV).map(PathBuf::from));
151+ let raw_path = if let Some(path) = override_path {
190152 if path.is_absolute() {
191153 path
192154 } else {
@@ -197,50 +159,14 @@ fn resolve_config_path_inner(
197159 };
198160
199161 let normalized = normalize_path(&raw_path);
200− let resolved =
201− resolve_path_for_boundary_check(&normalized).context("failed to resolve config path")?;
202− if !resolved.starts_with(&root) {
203− bail!(
162+ if !normalized.starts_with(&root) {
163+ die(&format!(
204164 "config path must be within {}: {}",
205165 root.display(),
206− resolved.display()
207− );
208− }
209− Ok(normalized)
210−}
211−
212−fn resolve_path_for_boundary_check(path: &Path) -> Result<PathBuf, io::Error> {
213− if path.exists() {
214− return fs::canonicalize(path);
215− }
216− let (ancestor, missing) = nearest_existing_ancestor(path)?;
217− let mut resolved = fs::canonicalize(ancestor)?;
218− for part in missing {
219− resolved.push(part);
220− }
221− Ok(resolved)
222−}
223−
224−fn nearest_existing_ancestor(path: &Path) -> Result<(&Path, Vec<std::ffi::OsString>), io::Error> {
225− let mut current = path;
226− let mut missing = Vec::new();
227− while !current.exists() {
228− let name = current.file_name().ok_or_else(|| {
229− io::Error::new(
230− io::ErrorKind::InvalidInput,
231− format!("path has no existing ancestor: {}", path.display()),
232− )
233− })?;
234− missing.push(name.to_os_string());
235− current = current.parent().ok_or_else(|| {
236− io::Error::new(
237− io::ErrorKind::InvalidInput,
238− format!("path has no parent: {}", path.display()),
239− )
240− })?;
166+ normalized.display()
167+ ));
241168 }
242− missing.reverse();
243− Ok((current, missing))
169+ normalized
244170}
245171
246172fn normalize_path(path: &Path) -> PathBuf {
@@ -337,343 +263,27 @@ fn validate_string_array(
337263 }
338264}
339265
340−fn validate_config(config: &Config) -> Result<(), String> {
266+fn validate_or_exit(config: &Config) {
341267 if config.box_cfg.cpu_count == 0 {
342− return Err("box.cpu_count must be >= 1".to_string());
268+ die("box.cpu_count must be >= 1");
343269 }
344− if config.box_cfg.ram_size.as_mib() == 0.0 {
345− return Err("box.ram_mb must be >= 1".to_string());
270+ if config.box_cfg.ram_mb == 0 {
271+ die("box.ram_mb must be >= 1");
346272 }
347− if config.box_cfg.disk_size.as_gib() == 0.0 {
348− return Err("box.disk_gb must be >= 1".to_string());
273+ if config.box_cfg.disk_gb == 0 {
274+ die("box.disk_gb must be >= 1");
349275 }
350276 if config.supervisor.auto_shutdown_ms == 0 {
351− return Err("supervisor.auto_shutdown_ms must be >= 1".to_string());
277+ die("supervisor.auto_shutdown_ms must be >= 1");
352278 }
353279 for spec in &config.box_cfg.mounts {
354280 if let Err(err) = DirectoryShare::from_mount_spec(spec) {
355− return Err(format!("invalid mount spec '{spec}': {err}"));
281+ die(&format!("invalid mount spec '{spec}': {err}"));
356282 }
357283 }
358− Ok(())
359284}
360285
361−#[cfg(test)]
362−mod tests {
363− use super::*;
364− use std::ffi::OsString;
365− use std::sync::Mutex;
366− use tempfile::TempDir;
367−
368− static ENV_MUTEX: Mutex<()> = Mutex::new(());
369−
370− struct EnvGuard {
371− key: &'static str,
372− previous: Option<OsString>,
373− }
374−
375− impl EnvGuard {
376− fn set(key: &'static str, value: &Path) -> Self {
377− let previous = env::var_os(key);
378− unsafe {
379− env::set_var(key, value);
380− }
381− Self { key, previous }
382− }
383− }
384−
385− impl Drop for EnvGuard {
386− fn drop(&mut self) {
387− match &self.previous {
388− Some(value) => unsafe {
389− env::set_var(self.key, value);
390− },
391− None => unsafe {
392− env::remove_var(self.key);
393− },
394− }
395− }
396− }
397−
398− #[test]
399− fn default_config_serializes_with_legacy_keys() {
400− let cfg = Config::default();
401− let serialized = toml::to_string(&cfg).expect("default config should serialize");
402−
403− assert!(serialized.contains("ram_mb = 2048"));
404− assert!(serialized.contains("disk_gb = 5"));
405− assert!(!serialized.contains("ram_size"));
406− assert!(!serialized.contains("disk_size"));
407− }
408−
409− #[test]
410− fn config_deserializes_sizes_from_mb_and_gb() {
411− let raw = r#"
412−[box]
413−cpu_count = 4
414−ram_mb = 3072
415−disk_gb = 12
416−mounts = ["~/src:~/src:read-write"]
417−
418−[supervisor]
419−auto_shutdown_ms = 15000
420−"#;
421− let cfg: Config = toml::from_str(raw).expect("config should deserialize");
422−
423− assert_eq!(cfg.box_cfg.cpu_count, 4);
424− assert_eq!(cfg.box_cfg.ram_size.as_u64(), ByteSize::mib(3072).as_u64());
425− assert_eq!(cfg.box_cfg.disk_size.as_u64(), ByteSize::gib(12).as_u64());
426− assert_eq!(cfg.supervisor.auto_shutdown_ms, 15000);
427− }
428−
429− #[test]
430− fn serialize_rejects_non_integral_mb_or_gb() {
431− let cfg = Config {
432− box_cfg: BoxConfig {
433− cpu_count: 2,
434− ram_size: ByteSize::b((2 * MI_B) + 1),
435− disk_size: ByteSize::gib(5),
436− mounts: default_mounts(),
437− },
438− supervisor: SupervisorConfig::default(),
439− };
440−
441− let err = toml::to_string(&cfg).expect_err("serialization should reject invalid MB");
442− assert!(
443− err.to_string()
444− .contains("ram_mb must be an integer number of MB")
445− );
446−
447− let cfg = Config {
448− box_cfg: BoxConfig {
449− cpu_count: 2,
450− ram_size: ByteSize::mib(2048),
451− disk_size: ByteSize::b((5 * GI_B) + 1),
452− mounts: default_mounts(),
453− },
454− supervisor: SupervisorConfig::default(),
455− };
456−
457− let err = toml::to_string(&cfg).expect_err("serialization should reject invalid GB");
458− assert!(
459− err.to_string()
460− .contains("disk_gb must be an integer number of GB")
461− );
462− }
463−
464− #[test]
465− fn normalize_path_removes_dot_and_parent_components() {
466− let normalized = normalize_path(Path::new("/tmp/project/./nested/../config.toml"));
467− assert_eq!(normalized, PathBuf::from("/tmp/project/config.toml"));
468− }
469−
470− #[test]
471− fn validate_schema_returns_errors_for_missing_required_fields() {
472− let value: toml::Value = toml::from_str(
473− r#"
474−[box]
475−cpu_count = 2
476−"#,
477− )
478− .expect("toml should parse");
479−
480− let errors = validate_schema(&value);
481−
482− assert!(errors.iter().any(|e| e == "missing [supervisor] table"));
483− assert!(errors.iter().any(|e| e == "missing [box].ram_mb (integer)"));
484− assert!(
485− errors
486− .iter()
487− .any(|e| e == "missing [box].disk_gb (integer)")
488− );
489− assert!(
490− errors
491− .iter()
492− .any(|e| e == "missing [box].mounts (array of strings)")
493− );
494− }
495−
496− #[test]
497− fn validate_schema_errors_when_supervisor_is_not_table() {
498− let value: toml::Value = toml::from_str(
499− r#"
500−supervisor = 123
501−
502−[box]
503−cpu_count = 2
504−ram_mb = 2048
505−disk_gb = 5
506−mounts = []
507−"#,
508− )
509− .expect("toml should parse");
510−
511− let errors = validate_schema(&value);
512− assert!(errors.iter().any(|e| e == "[supervisor] must be a table"));
513− }
514−
515− #[test]
516− fn ensure_config_file_creates_default_config_if_absent() {
517− let temp = TempDir::new().expect("temp dir should be created");
518− let root = fs::canonicalize(temp.path()).expect("temp dir should canonicalize");
519−
520− let path = ensure_config_file(&root, None).expect("config should be created");
521− let raw = fs::read_to_string(&path).expect("created config should be readable");
522− let parsed: Config = toml::from_str(&raw).expect("created config should be valid");
523−
524− assert_eq!(path, root.join("vibebox.toml"));
525− assert_eq!(parsed.box_cfg.cpu_count, DEFAULT_CPU_COUNT);
526− assert_eq!(
527− parsed.box_cfg.ram_size.as_u64(),
528− ByteSize::mib(DEFAULT_RAM_MB).as_u64()
529− );
530− assert_eq!(
531− parsed.box_cfg.disk_size.as_u64(),
532− ByteSize::gib(DEFAULT_DISK_GB).as_u64()
533− );
534− }
535−
536− #[test]
537− fn load_config_creates_and_loads_default_config() {
538− let _lock = ENV_MUTEX.lock().expect("env lock should be acquired");
539− let temp = TempDir::new().expect("temp dir should be created");
540− let root = fs::canonicalize(temp.path()).expect("temp dir should canonicalize");
541− let home = root.join("home");
542− fs::create_dir_all(home.join(".codex")).expect("home .codex should be created");
543− fs::create_dir_all(home.join(".claude")).expect("home .claude should be created");
544− let _home_guard = EnvGuard::set("HOME", &home);
545−
546− let cfg = load_config(&root).expect("load_config should succeed");
547−
548− assert_eq!(cfg.box_cfg.cpu_count, DEFAULT_CPU_COUNT);
549− assert_eq!(
550− cfg.box_cfg.ram_size.as_u64(),
551− ByteSize::mib(DEFAULT_RAM_MB).as_u64()
552− );
553− assert_eq!(
554− cfg.box_cfg.disk_size.as_u64(),
555− ByteSize::gib(DEFAULT_DISK_GB).as_u64()
556− );
557− assert!(root.join("vibebox.toml").exists());
558− }
559−
560− #[test]
561− fn load_config_with_path_uses_override_path() {
562− let _lock = ENV_MUTEX.lock().expect("env lock should be acquired");
563− let temp = TempDir::new().expect("temp dir should be created");
564− let root = fs::canonicalize(temp.path()).expect("temp dir should canonicalize");
565− let home = root.join("home");
566− fs::create_dir_all(home.join(".codex")).expect("home .codex should be created");
567− fs::create_dir_all(home.join(".claude")).expect("home .claude should be created");
568− let _home_guard = EnvGuard::set("HOME", &home);
569− let override_path = root.join("custom.toml");
570−
571− fs::write(
572− &override_path,
573− r#"
574−[box]
575−cpu_count = 6
576−ram_mb = 4096
577−disk_gb = 9
578−mounts = ["~/.codex:~/.codex:read-write", "~/.claude:~/.claude:read-write"]
579−
580−[supervisor]
581−auto_shutdown_ms = 12345
582−"#,
583− )
584− .expect("override config should be written");
585−
586− let cfg = load_config_with_path(&root, Some(Path::new("custom.toml")))
587− .expect("load_config_with_path should succeed");
588−
589− assert_eq!(cfg.box_cfg.cpu_count, 6);
590− assert_eq!(cfg.box_cfg.ram_size.as_u64(), ByteSize::mib(4096).as_u64());
591− assert_eq!(cfg.box_cfg.disk_size.as_u64(), ByteSize::gib(9).as_u64());
592− assert_eq!(cfg.supervisor.auto_shutdown_ms, 12345);
593− assert!(!root.join("vibebox.toml").exists());
594− }
595−
596− #[test]
597− fn resolve_config_path_uses_env_override_when_cli_override_missing() {
598− let temp = TempDir::new().expect("temp dir should be created");
599− let root = fs::canonicalize(temp.path()).expect("temp dir should canonicalize");
600−
601− let resolved = resolve_config_path_inner(&root, None, Some(PathBuf::from("custom.toml")))
602− .expect("env override path should resolve");
603−
604− assert_eq!(resolved, root.join("custom.toml"));
605− }
606−
607− #[test]
608− fn resolve_config_path_rejects_env_override_outside_project() {
609− let temp = TempDir::new().expect("temp dir should be created");
610− let root = fs::canonicalize(temp.path()).expect("temp dir should canonicalize");
611−
612− let err = resolve_config_path_inner(&root, None, Some(PathBuf::from("../escape.toml")))
613− .expect_err("outside-project path should be rejected");
614−
615− assert!(
616− err.to_string().contains("config path must be within"),
617− "expected bounds-check error, got: {err}"
618− );
619− }
620−
621− #[test]
622− fn validate_config_rejects_invalid_values() {
623− let cfg = Config {
624− box_cfg: BoxConfig {
625− cpu_count: 0,
626− ram_size: ByteSize::mib(2048),
627− disk_size: ByteSize::gib(5),
628− mounts: vec![],
629− },
630− supervisor: SupervisorConfig::default(),
631− };
632− let err = validate_config(&cfg).expect_err("cpu_count=0 should fail");
633− assert_eq!(err, "box.cpu_count must be >= 1");
634−
635− let cfg = Config {
636− box_cfg: BoxConfig {
637− cpu_count: 2,
638− ram_size: ByteSize::mib(2048),
639− disk_size: ByteSize::gib(5),
640− mounts: vec!["/definitely/missing:/tmp/missing:read-write".to_string()],
641− },
642− supervisor: SupervisorConfig::default(),
643− };
644− let err = validate_config(&cfg).expect_err("invalid mount should fail");
645− assert!(err.starts_with("invalid mount spec"));
646− }
647−
648− #[test]
649− fn resolve_config_path_accepts_symlinked_project_root() {
650− let temp = TempDir::new().expect("temp dir should be created");
651− let actual_root = temp.path().join("actual");
652− let link_root = temp.path().join("linked");
653− fs::create_dir_all(&actual_root).expect("actual root should exist");
654− std::os::unix::fs::symlink(&actual_root, &link_root).expect("symlink should be created");
655−
656− let resolved = resolve_config_path_inner(&link_root, Some(Path::new("vibebox.toml")), None)
657− .expect("symlinked project root should resolve");
658−
659− assert_eq!(resolved, link_root.join("vibebox.toml"));
660− }
661−
662− #[test]
663− fn resolve_config_path_rejects_symlink_escape() {
664− let temp = TempDir::new().expect("temp dir should be created");
665− let project_root = temp.path().join("project");
666− let outside_root = temp.path().join("outside");
667− fs::create_dir_all(&project_root).expect("project root should exist");
668− fs::create_dir_all(&outside_root).expect("outside root should exist");
669− std::os::unix::fs::symlink(&outside_root, project_root.join("link"))
670− .expect("escape symlink should be created");
671−
672− let err = resolve_config_path_inner(&project_root, Some(Path::new("link/cfg.toml")), None)
673− .expect_err("symlink escape should be rejected");
674− assert!(
675− err.to_string().contains("config path must be within"),
676− "expected bounds-check error, got: {err}"
677− );
678− }
286+fn die(message: &str) -> ! {
287+ tracing::error!("{message}");
288+ std::process::exit(1);
679289}
src/error_report.shdeleted−28
@@ -1,28 +0,0 @@
1−#!/usr/bin/env bash
2−set -Eeuo pipefail
3−__vibebox_err_reported=0
4−__vibebox_report_error() {
5− local rc="$1"
6− local line="$2"
7− local msg="${3:-}"
8− if [ "$__vibebox_err_reported" -eq 0 ]; then
9− msg="${msg//$'\n'/ }"
10− msg="${msg//$'\r'/ }"
11− if [ -n "$msg" ]; then
12− echo "VIBEBOX_SCRIPT_ERROR:__LABEL__:${line}:${rc} ${msg}"
13− else
14− echo "VIBEBOX_SCRIPT_ERROR:__LABEL__:${line}:${rc}"
15− fi
16− __vibebox_err_reported=1
17− fi
18−}
19−vibebox_fail() {
20− local msg="${1:-script failed}"
21− local rc="${2:-1}"
22− __vibebox_report_error "$rc" "${LINENO}" "$msg"
23− exit "$rc"
24−}
25−trap 'rc="$?"; __vibebox_report_error "$rc" "${LINENO}" "command failed: ${BASH_COMMAND:-unknown}"' ERR
26−trap 'rc="$?"; if [ "$rc" -ne 0 ]; then __vibebox_report_error "$rc" "${LINENO}" "script exited with code ${rc}"; fi' EXIT
27−
28−__SCRIPT_BODY__
src/explain.rs+47−32
@@ -1,31 +1,31 @@
1−use crate::instance::InstanceConfig;
2−use crate::utils::relative_to_home;
3−use crate::{config, instance, session_manager, tui};
4−use anyhow::{Context, Result, bail};
51use std::{
62 env,
3+ error::Error,
74 path::{Path, PathBuf},
85};
96
10−pub fn build_mount_rows(project: &Path, config: &config::Config) -> Result<Vec<tui::MountListRow>> {
7+use crate::{config, instance, session_manager, tui};
8+
9+pub fn build_mount_rows(
10+ cwd: &Path,
11+ config: &config::Config,
12+) -> Result<Vec<tui::MountListRow>, Box<dyn Error + Send + Sync>> {
1113 let mut rows = Vec::new();
12− rows.extend(default_mounts(project)?);
13− let guest_home = resolve_guest_home(project);
14+ rows.extend(default_mounts(cwd)?);
15+ let guest_home = resolve_guest_home(cwd)?;
1416 for spec in &config.box_cfg.mounts {
15− rows.push(parse_mount_spec(project, spec, false, &guest_home)?);
17+ rows.push(parse_mount_spec(cwd, spec, false, &guest_home)?);
1618 }
1719 Ok(rows)
1820}
1921
20−pub fn build_network_rows(project_dir: &Path) -> Result<Vec<tui::NetworkListRow>> {
22+pub fn build_network_rows(
23+ cwd: &Path,
24+) -> Result<Vec<tui::NetworkListRow>, Box<dyn Error + Send + Sync>> {
25+ let instance_dir = cwd.join(session_manager::INSTANCE_DIR_NAME);
2126 let mut vm_ip = "-".to_string();
22− if let Ok(config) = instance::read_instance_config(project_dir) {
23− match config.vm_ipv4 {
24− None => {}
25− Some(ip) => {
26− vm_ip = ip;
27− }
28− }
27+ if let Ok(Some(ip)) = instance::read_instance_vm_ip(&instance_dir) {
28+ vm_ip = ip;
2929 }
3030 let host_to_vm = if vm_ip == "-" {
3131 "ssh: <pending>:22".to_string()
@@ -41,13 +41,13 @@ pub fn build_network_rows(project_dir: &Path) -> Result<Vec<tui::NetworkListRow>
4141 Ok(vec![row])
4242}
4343
44−fn default_mounts(cwd: &Path) -> Result<Vec<tui::MountListRow>> {
44+fn default_mounts(cwd: &Path) -> Result<Vec<tui::MountListRow>, Box<dyn Error + Send + Sync>> {
4545 let project_name = cwd
4646 .file_name()
4747 .and_then(|name| name.to_str())
48− .with_context(|| "failed to get project name")?;
48+ .unwrap_or("project");
4949 let project_guest = format!("~/{project_name}");
50− let project_host = relative_to_home(cwd);
50+ let project_host = display_path(cwd);
5151 let mut rows = vec![tui::MountListRow {
5252 host: project_host,
5353 guest: project_guest,
@@ -57,14 +57,14 @@ fn default_mounts(cwd: &Path) -> Result<Vec<tui::MountListRow>> {
5757
5858 let home = env::var("HOME")
5959 .map(PathBuf::from)
60− .with_context(|| "failed to get home directory")?;
60+ .unwrap_or_else(|_| PathBuf::from("/"));
6161 let cache_home = env::var("XDG_CACHE_HOME")
6262 .map(PathBuf::from)
6363 .unwrap_or_else(|_| home.join(".cache"));
6464 let cache_dir = cache_home.join(session_manager::GLOBAL_CACHE_DIR_NAME);
6565 let guest_mise_cache = cache_dir.join(".guest-mise-cache");
6666 rows.push(tui::MountListRow {
67− host: relative_to_home(&guest_mise_cache),
67+ host: display_path(&guest_mise_cache),
6868 guest: "/root/.local/share/mise".to_string(),
6969 mode: "read-write".to_string(),
7070 default_mount: "yes".to_string(),
@@ -77,10 +77,10 @@ fn parse_mount_spec(
7777 spec: &str,
7878 default_mount: bool,
7979 guest_home: &str,
80−) -> Result<tui::MountListRow> {
80+) -> Result<tui::MountListRow, Box<dyn Error + Send + Sync>> {
8181 let parts: Vec<&str> = spec.split(':').collect();
8282 if parts.len() < 2 || parts.len() > 3 {
83− bail!["invalid mount spec: {spec}"];
83+ return Err(format!("invalid mount spec: {spec}").into());
8484 }
8585 let host_part = parts[0];
8686 let guest_part = parts[1];
@@ -89,10 +89,11 @@ fn parse_mount_spec(
8989 "read-only" => "read-only",
9090 "read-write" => "read-write",
9191 other => {
92− bail![format!(
92+ return Err(format!(
9393 "invalid mount mode '{}'; expected read-only or read-write",
9494 other
95− )];
95+ )
96+ .into());
9697 }
9798 }
9899 } else {
@@ -115,22 +116,22 @@ fn display_host_spec(cwd: &Path, host: &str) -> String {
115116 }
116117 let host_path = PathBuf::from(host);
117118 if host_path.is_absolute() {
118− return relative_to_home(&host_path);
119+ return display_path(&host_path);
119120 }
120121 let candidate = cwd.join(&host_path);
121122 if candidate.is_absolute() {
122− relative_to_home(&candidate)
123+ display_path(&candidate)
123124 } else {
124125 host.to_string()
125126 }
126127}
127128
128−fn resolve_guest_home(project_dir: &Path) -> String {
129− let config = instance::read_instance_config(project_dir);
130− match config {
131− Ok(config) => format!("/home/{}", config.ssh_user),
132− Err(_) => format!("/home/{}", InstanceConfig::default().ssh_user),
129+fn resolve_guest_home(cwd: &Path) -> Result<String, Box<dyn Error + Send + Sync>> {
130+ let instance_dir = cwd.join(session_manager::INSTANCE_DIR_NAME);
131+ if let Ok(Some(user)) = instance::read_instance_ssh_user(&instance_dir) {
132+ return Ok(format!("/home/{user}"));
133133 }
134+ Ok(format!("/home/{}", instance::DEFAULT_SSH_USER))
134135}
135136
136137fn resolve_guest_display(guest: &str, guest_home: &str) -> String {
@@ -154,3 +155,17 @@ fn resolve_guest_display(guest: &str, guest_home: &str) -> String {
154155 format!("/root/{guest}")
155156 }
156157}
158+
159+fn display_path(path: &Path) -> String {
160+ let Ok(home) = env::var("HOME") else {
161+ return path.display().to_string();
162+ };
163+ let home_path = PathBuf::from(home);
164+ if let Ok(stripped) = path.strip_prefix(&home_path) {
165+ if stripped.components().next().is_none() {
166+ return "~".to_string();
167+ }
168+ return format!("~/{}", stripped.display());
169+ }
170+ path.display().to_string()
171+}
src/instance.rs+149−289
@@ -1,140 +1,82 @@
1−use anyhow::{Context, Result, bail};
2−use serde::{Deserialize, Serialize};
3−use std::os::unix::fs::FileTypeExt;
41use std::{
52 env, fs,
6− io::{self, IsTerminal, Read},
3+ io::{self},
74 net::{SocketAddr, TcpStream},
85 os::unix::{fs::PermissionsExt, net::UnixStream},
96 path::{Path, PathBuf},
10− process::{Child, Command, Stdio},
11− sync::{
12− Arc, Mutex,
13− atomic::{AtomicBool, Ordering},
14− mpsc,
15− },
7+ process::{Command, Stdio},
8+ sync::{Arc, Mutex},
169 thread,
1710 time::{Duration, Instant},
1811};
12+
13+use serde::{Deserialize, Serialize};
1914use time::{OffsetDateTime, format_description::well_known::Rfc3339};
2015use uuid::Uuid;
2116
2217use crate::{
2318 commands,
24− session_manager::INSTANCE_DIR_NAME,
25− session_manager::{VM_MANAGER_PID_NAME, VM_MANAGER_SOCKET_NAME},
19+ session_manager::{INSTANCE_DIR_NAME, INSTANCE_FILENAME},
2620 vm::{self, LoginAction},
2721};
2822
29−pub const STATUS_VM_ERROR_PREFIX: &str = "error:";
30−
3123const SSH_KEY_NAME: &str = "ssh_key";
32−const INSTANCE_FILENAME: &str = "instance.toml";
33−const DEFAULT_SSH_USER: &str = "vibecoder";
34−const SSH_CONNECT_RETRIES: usize = 10;
24+#[cfg_attr(feature = "mock-vm", allow(dead_code))]
25+pub(crate) const VM_ROOT_LOG_NAME: &str = "vm_root.log";
26+pub(crate) const STATUS_FILE_NAME: &str = "status.txt";
27+pub(crate) const DEFAULT_SSH_USER: &str = "vibecoder";
28+const SSH_CONNECT_RETRIES: usize = 30;
3529const SSH_CONNECT_DELAY_MS: u64 = 500;
3630const SSH_SETUP_SCRIPT: &str = include_str!("ssh.sh");
37−const STATUS_PREFIX: &str = "status:";
38−
39−#[derive(Debug, Clone, Copy, PartialEq, Eq)]
40−pub enum VmLiveness {
41− RunningWithSocket { pid: u32 },
42− RunningWithoutSocket { pid: u32 },
43− NotRunningOrMissing,
44−}
45−
46−pub fn vm_liveness(project_root: &Path) -> Result<VmLiveness> {
47− let instance_dir = ensure_instance_dir(project_root)?;
48− let pid_path = instance_dir.join(VM_MANAGER_PID_NAME);
49− let socket_path = instance_dir.join(VM_MANAGER_SOCKET_NAME);
50− fn pid_is_alive(pid: u32) -> bool {
51− let pid = pid as libc::pid_t;
52− let result = unsafe { libc::kill(pid, 0) };
53− if result == 0 {
54− return true;
55− }
56− match io::Error::last_os_error().raw_os_error() {
57− Some(code) if code == libc::EPERM => true,
58− Some(code) if code == libc::ESRCH => false,
59− _ => false,
60− }
61− }
62− let Ok(content) = fs::read_to_string(pid_path) else {
63− return Ok(VmLiveness::NotRunningOrMissing);
64− };
65− let Ok(pid) = content.trim().parse::<u32>() else {
66− return Ok(VmLiveness::NotRunningOrMissing);
67− };
68− if !pid_is_alive(pid) {
69− return Ok(VmLiveness::NotRunningOrMissing);
70− }
71− let has_socket = fs::metadata(socket_path)
72− .map(|meta| meta.file_type().is_socket())
73− .unwrap_or(false);
74− if has_socket {
75− Ok(VmLiveness::RunningWithSocket { pid })
76− } else {
77− Ok(VmLiveness::RunningWithoutSocket { pid })
78− }
79−}
80−
81−#[derive(Debug, thiserror::Error)]
82−pub enum InstanceError {
83− #[error("unexpected disconnection from vm manager")]
84− UnexpectedDisconnection,
85− #[error("{0}")]
86− VMError(String),
87−}
88−
89−fn default_ssh_user() -> String {
90− DEFAULT_SSH_USER.to_string()
91−}
9231
9332#[derive(Debug, Clone, Serialize, Deserialize)]
94−pub struct InstanceConfig {
33+pub(crate) struct InstanceConfig {
9534 #[serde(default)]
96− pub id: String,
35+ id: String,
9736 #[serde(default = "default_ssh_user")]
98− pub ssh_user: String,
37+ ssh_user: String,
9938 #[serde(default)]
10039 sudo_password: String,
10140 #[serde(default)]
102− pub last_active: Option<String>,
41+ last_active: Option<String>,
10342 #[serde(default)]
104− pub vm_ipv4: Option<String>,
43+ pub(crate) vm_ipv4: Option<String>,
10544}
10645
107−impl Default for InstanceConfig {
108− fn default() -> Self {
109− Self {
110− id: Uuid::now_v7().to_string(),
111− ssh_user: DEFAULT_SSH_USER.to_string(),
112− sudo_password: Uuid::now_v7().simple().to_string(),
113− last_active: None,
114− vm_ipv4: None,
46+impl InstanceConfig {
47+ pub(crate) fn ssh_user_display(&self) -> String {
48+ if self.ssh_user.trim().is_empty() {
49+ DEFAULT_SSH_USER.to_string()
50+ } else {
51+ self.ssh_user.clone()
11552 }
11653 }
11754}
11855
119−pub fn run_with_ssh(manager_conn: UnixStream) -> Result<()> {
56+fn default_ssh_user() -> String {
57+ DEFAULT_SSH_USER.to_string()
58+}
59+
60+pub fn run_with_ssh(manager_conn: UnixStream) -> Result<(), Box<dyn std::error::Error>> {
12061 let project_root = env::current_dir()?;
12162 tracing::info!(root = %project_root.display(), "starting ssh session");
12263 let instance_dir = ensure_instance_dir(&project_root)?;
12364 tracing::debug!(instance_dir = %instance_dir.display(), "instance dir ready");
12465 let (ssh_key, _ssh_pub) = ensure_ssh_keypair(&instance_dir)?;
12566
126− let config = load_or_create_instance_config(&project_root)?;
67+ let config = load_or_create_instance_config(&instance_dir)?;
12768 let ssh_user = config.ssh_user.clone();
12869 tracing::debug!(ssh_user = %ssh_user, "loaded instance config");
12970
130− wait_for_vm_ipv4(&project_root, Duration::from_secs(480), &manager_conn)?;
71+ let _manager_conn = manager_conn;
72+ wait_for_vm_ipv4(&instance_dir, Duration::from_secs(480))?;
13173
132− let ip = load_or_create_instance_config(&project_root)?
74+ let ip = load_or_create_instance_config(&instance_dir)?
13375 .vm_ipv4
134− .with_context(|| "failed to load instance IP address")?;
76+ .ok_or("VM IPv4 not available")?;
13577 tracing::info!(ip = %ip, "vm ipv4 ready");
13678
137− run_ssh_session(ssh_key, ssh_user, ip, manager_conn, project_root)
79+ run_ssh_session(ssh_key, ssh_user, ip)
13880}
13981
14082pub fn ensure_instance_dir(project_root: &Path) -> Result<PathBuf, io::Error> {
@@ -143,7 +85,9 @@ pub fn ensure_instance_dir(project_root: &Path) -> Result<PathBuf, io::Error> {
14385 Ok(instance_dir)
14486}
14587
146−pub fn ensure_ssh_keypair(instance_dir: &Path) -> Result<(PathBuf, PathBuf)> {
88+pub(crate) fn ensure_ssh_keypair(
89+ instance_dir: &Path,
90+) -> Result<(PathBuf, PathBuf), Box<dyn std::error::Error>> {
14791 let private_key = instance_dir.join(SSH_KEY_NAME);
14892 let public_key = instance_dir.join(format!("{SSH_KEY_NAME}.pub"));
14993
@@ -165,9 +109,7 @@ pub fn ensure_ssh_keypair(instance_dir: &Path) -> Result<(PathBuf, PathBuf)> {
165109 "-N",
166110 "",
167111 "-f",
168− private_key
169− .to_str()
170− .with_context(|| "ssh key path not utf-8")?,
112+ private_key.to_str().ok_or("ssh key path not utf-8")?,
171113 "-C",
172114 "vibebox",
173115 ])
@@ -177,7 +119,7 @@ pub fn ensure_ssh_keypair(instance_dir: &Path) -> Result<(PathBuf, PathBuf)> {
177119 .status()?;
178120
179121 if !status.success() {
180− bail!("ssh-keygen failed");
122+ return Err("ssh-keygen failed".into());
181123 }
182124
183125 fs::set_permissions(&private_key, fs::Permissions::from_mode(0o600))?;
@@ -186,66 +128,98 @@ pub fn ensure_ssh_keypair(instance_dir: &Path) -> Result<(PathBuf, PathBuf)> {
186128 Ok((private_key, public_key))
187129}
188130
189−pub fn load_or_create_instance_config(project_dir: &Path) -> Result<InstanceConfig> {
190− let mut exist = true;
191− let mut config = read_instance_config(project_dir).unwrap_or_else(|_| {
192− exist = false;
193− InstanceConfig::default()
194− });
131+pub(crate) fn load_or_create_instance_config(
132+ instance_dir: &Path,
133+) -> Result<InstanceConfig, Box<dyn std::error::Error>> {
134+ let config_path = instance_dir.join(INSTANCE_FILENAME);
135+ let mut config = if config_path.exists() {
136+ let raw = fs::read_to_string(&config_path)?;
137+ toml::from_str::<InstanceConfig>(&raw)?
138+ } else {
139+ InstanceConfig {
140+ id: String::new(),
141+ ssh_user: default_ssh_user(),
142+ sudo_password: String::new(),
143+ last_active: None,
144+ vm_ipv4: None,
145+ }
146+ };
195147
196148 let mut changed = false;
197149 if config.ssh_user.trim().is_empty() {
198− config.ssh_user = InstanceConfig::default().ssh_user;
150+ config.ssh_user = default_ssh_user();
199151 changed = true;
200152 }
201153
202154 if config.id.trim().is_empty() {
203− config.id = InstanceConfig::default().id;
155+ config.id = Uuid::now_v7().to_string();
204156 changed = true;
205157 }
206158
207159 if config.sudo_password.trim().is_empty() {
208− config.sudo_password = InstanceConfig::default().sudo_password;
160+ config.sudo_password = generate_password();
209161 changed = true;
210162 }
211163
212− if !exist || changed {
213− write_instance_config(project_dir, &config)?;
164+ if !config_path.exists() || changed {
165+ write_instance_config(&config_path, &config)?;
214166 }
215167
216168 Ok(config)
217169}
218170
219−pub fn read_instance_config(project_dir: &Path) -> Result<InstanceConfig> {
220− // todo maybe verify schema?
221− let config_path = project_dir.join(INSTANCE_DIR_NAME).join(INSTANCE_FILENAME);
171+fn read_instance_config(
172+ instance_dir: &Path,
173+) -> Result<Option<InstanceConfig>, Box<dyn std::error::Error>> {
174+ let config_path = instance_dir.join(INSTANCE_FILENAME);
222175 if !config_path.exists() {
223− bail!("instance config file does not exist");
176+ return Ok(None);
224177 }
225178 let raw = fs::read_to_string(&config_path)?;
226179 let config = toml::from_str::<InstanceConfig>(&raw)?;
227− Ok(config)
180+ Ok(Some(config))
181+}
182+
183+pub fn read_instance_vm_ip(
184+ instance_dir: &Path,
185+) -> Result<Option<String>, Box<dyn std::error::Error>> {
186+ let config = read_instance_config(instance_dir)?;
187+ Ok(config.and_then(|cfg| cfg.vm_ipv4))
188+}
189+
190+pub fn read_instance_ssh_user(
191+ instance_dir: &Path,
192+) -> Result<Option<String>, Box<dyn std::error::Error>> {
193+ let config = read_instance_config(instance_dir)?;
194+ Ok(config
195+ .map(|cfg| cfg.ssh_user)
196+ .filter(|user| !user.trim().is_empty()))
228197}
229198
230−pub fn touch_last_active(project_dir: &Path) -> Result<()> {
231− let mut config = load_or_create_instance_config(project_dir)?;
199+pub fn touch_last_active(instance_dir: &Path) -> Result<(), Box<dyn std::error::Error>> {
200+ let mut config = load_or_create_instance_config(instance_dir)?;
232201 let now = OffsetDateTime::now_utc().format(&Rfc3339)?;
233202 config.last_active = Some(now);
234− write_instance_config(project_dir, &config)?;
203+ write_instance_config(&instance_dir.join(INSTANCE_FILENAME), &config)?;
235204 Ok(())
236205}
237206
238−pub fn write_instance_config(project_dir: &Path, config: &InstanceConfig) -> Result<()> {
239− let path = project_dir.join(INSTANCE_DIR_NAME).join(INSTANCE_FILENAME);
207+pub(crate) fn write_instance_config(
208+ path: &Path,
209+ config: &InstanceConfig,
210+) -> Result<(), Box<dyn std::error::Error>> {
240211 let data = toml::to_string_pretty(config)?;
241− fs::create_dir_all(project_dir.join(INSTANCE_DIR_NAME))?;
242− fs::write(&path, data)?;
243− fs::set_permissions(&path, fs::Permissions::from_mode(0o600))?;
212+ fs::write(path, data)?;
213+ fs::set_permissions(path, fs::Permissions::from_mode(0o600))?;
244214 Ok(())
245215}
246216
217+fn generate_password() -> String {
218+ Uuid::now_v7().simple().to_string()
219+}
220+
247221#[cfg_attr(feature = "mock-vm", allow(dead_code))]
248−pub fn extract_ipv4(line: &str) -> Option<String> {
222+pub(crate) fn extract_ipv4(line: &str) -> Option<String> {
249223 let mut current = String::new();
250224 let mut best: Option<String> = None;
251225
@@ -264,68 +238,46 @@ pub fn extract_ipv4(line: &str) -> Option<String> {
264238 best
265239}
266240
267−fn handle_manager_line(line: &str, last_status: &mut Option<String>) -> Result<()> {
268− if let Some(status) = line.strip_prefix(STATUS_PREFIX) {
269− let status = status.trim();
270− if let Some(message) = status.strip_prefix(STATUS_VM_ERROR_PREFIX) {
271− let message = message.trim();
272− if message.is_empty() {
273− bail!("vm manager reported startup failure");
274− }
275− return Err(InstanceError::VMError(message.to_string()).into());
276− }
277− if !status.is_empty() && last_status.as_deref() != Some(status) {
278− tracing::info!("[background]: {}", status);
279− *last_status = Some(status.to_string());
280− }
281− }
282− Ok(())
283−}
284−
285241fn wait_for_vm_ipv4(
286− project_dir: &Path,
242+ instance_dir: &Path,
287243 timeout: Duration,
288− manager_conn: &UnixStream,
289−) -> Result<()> {
244+) -> Result<(), Box<dyn std::error::Error>> {
290245 let start = Instant::now();
291246 let mut next_log_at = start + Duration::from_secs(10);
292− let mut stream = manager_conn.try_clone()?;
293− let _ = stream.set_read_timeout(Some(Duration::from_millis(250)));
294− let mut read_buf = [0u8; 1024];
295− let mut pending = String::new();
247+ let mut next_status_check = start;
296248 tracing::info!("waiting for vm ipv4");
249+ let status_path = instance_dir.join(STATUS_FILE_NAME);
297250 let mut last_status: Option<String> = None;
251+ let mut status_missing = true;
298252 let mut once_hint = false;
299253 loop {
300− match stream.read(&mut read_buf) {
301− Ok(0) => {
302− bail!("vm manager disconnected before VM became ready");
303− }
304− Ok(n) => {
305− pending.push_str(&String::from_utf8_lossy(&read_buf[..n]));
306− while let Some(pos) = pending.find('\n') {
307− let line = pending[..pos].trim().to_string();
308− pending.drain(..=pos);
309− handle_manager_line(&line, &mut last_status)?;
310− }
311− }
312− Err(err) if err.kind() == io::ErrorKind::WouldBlock => {}
313− Err(err) if err.kind() == io::ErrorKind::TimedOut => {}
314− Err(err) if err.kind() == io::ErrorKind::Interrupted => {}
315− Err(err) => {
316− tracing::warn!(error = %err, "failed to read vm manager status stream");
317− }
318− }
319−
320− let config = load_or_create_instance_config(project_dir)?;
254+ let config = load_or_create_instance_config(instance_dir)?;
321255 if config.vm_ipv4.is_some() {
256+ let _ = fs::remove_file(&status_path);
322257 return Ok(());
323258 }
324259 if start.elapsed() > timeout {
325− bail!("timed out waiting for VM IPv4");
260+ let _ = fs::remove_file(&status_path);
261+ return Err("Timed out waiting for VM IPv4".into());
326262 }
327−
328263 let now = Instant::now();
264+ if now >= next_status_check {
265+ match fs::read_to_string(&status_path) {
266+ Ok(status) => {
267+ status_missing = false;
268+ let status = status.trim().to_string();
269+ if !status.is_empty() && last_status.as_deref() != Some(status.as_str()) {
270+ tracing::info!("[background]: {}", status);
271+ last_status = Some(status);
272+ next_log_at = now + Duration::from_secs(20);
273+ }
274+ }
275+ Err(_) => {
276+ status_missing = true;
277+ }
278+ }
279+ next_status_check = now + Duration::from_millis(500);
280+ }
329281 if now >= next_log_at {
330282 let waited = start.elapsed();
331283 if waited.as_secs() > 15 && !once_hint {
@@ -334,9 +286,12 @@ fn wait_for_vm_ipv4(
334286 );
335287 once_hint = true;
336288 }
337− tracing::info!("still waiting for vm ipv4, {}s elapsed", waited.as_secs(),);
289+ if status_missing {
290+ tracing::info!("still waiting for vm ipv4, {}s elapsed", waited.as_secs(),);
291+ }
338292 next_log_at += Duration::from_secs(20);
339293 }
294+ thread::sleep(Duration::from_millis(200));
340295 }
341296}
342297
@@ -344,14 +299,9 @@ fn run_ssh_session(
344299 ssh_key: PathBuf,
345300 ssh_user: String,
346301 ip: String,
347− manager_conn: UnixStream,
348− project_root: PathBuf,
349−) -> Result<()> {
302+) -> Result<(), Box<dyn std::error::Error>> {
350303 let mut attempts = 0usize;
351304 loop {
352− if matches!(vm_liveness(&project_root)?, VmLiveness::NotRunningOrMissing) {
353− return Err(InstanceError::UnexpectedDisconnection.into());
354− }
355305 attempts += 1;
356306 if !ssh_port_open(&ip) {
357307 tracing::debug!(attempts, "ssh port doesn't open yet");
@@ -363,7 +313,9 @@ fn run_ssh_session(
363313 SSH_CONNECT_RETRIES
364314 );
365315 if attempts >= SSH_CONNECT_RETRIES {
366− bail!("ssh port not ready after {SSH_CONNECT_RETRIES} attempts");
316+ return Err(
317+ format!("ssh port not ready after {SSH_CONNECT_RETRIES} attempts").into(),
318+ );
367319 }
368320 thread::sleep(Duration::from_millis(SSH_CONNECT_DELAY_MS));
369321 continue;
@@ -377,10 +329,10 @@ fn run_ssh_session(
377329 attempts,
378330 SSH_CONNECT_RETRIES
379331 );
380− let child = Command::new("ssh")
332+ let status = Command::new("ssh")
381333 .args([
382334 "-i",
383− ssh_key.to_str().with_context(|| "invalid path")?,
335+ ssh_key.to_str().unwrap_or(".vibebox/ssh_key"),
384336 "-o",
385337 "IdentitiesOnly=yes",
386338 "-o",
@@ -405,67 +357,27 @@ fn run_ssh_session(
405357 .stdin(Stdio::inherit())
406358 .stdout(Stdio::inherit())
407359 .stderr(Stdio::inherit())
408− .spawn();
409−
410− match child {
411− Ok(mut child) => {
412− let done = Arc::new(AtomicBool::new(false));
413− let done_for_monitor = done.clone();
414− let (disconnect_tx, disconnect_rx) = mpsc::channel::<()>();
415− let mut manager_stream = manager_conn.try_clone()?;
416− let _ = manager_stream.set_read_timeout(Some(Duration::from_millis(250)));
417− thread::spawn(move || {
418− let mut buf = [0u8; 1];
419− while !done_for_monitor.load(Ordering::Relaxed) {
420− match manager_stream.read(&mut buf) {
421− Ok(0) => {
422− let _ = disconnect_tx.send(());
423− return;
424− }
425− Ok(_) => {}
426− Err(err) if err.kind() == io::ErrorKind::WouldBlock => {}
427− Err(err) if err.kind() == io::ErrorKind::TimedOut => {}
428− Err(err) if err.kind() == io::ErrorKind::Interrupted => {}
429− Err(_) => {
430− let _ = disconnect_tx.send(());
431− return;
432− }
433− }
434− }
435− });
436−
437− let status = loop {
438− if disconnect_rx.try_recv().is_ok() {
439− done.store(true, Ordering::Relaxed);
440− terminate_ssh_child(&mut child);
441− restore_terminal_after_disconnect();
442− return Err(InstanceError::UnexpectedDisconnection.into());
443− }
444− if let Some(status) = child.try_wait()? {
445− done.store(true, Ordering::Relaxed);
446− break status;
447− }
448− thread::sleep(Duration::from_millis(100));
449− };
360+ .status();
450361
451− if status.success() {
452− tracing::info!(status = %status, "ssh exited");
453− break;
454− }
455− if status.code() == Some(255) {
456− tracing::warn!(status = %status, "ssh connection failed");
457− if attempts >= SSH_CONNECT_RETRIES {
458− bail!("ssh failed after {SSH_CONNECT_RETRIES} attempts");
459− }
460− thread::sleep(Duration::from_millis(500));
461− continue;
362+ match status {
363+ Ok(status) if status.success() => {
364+ tracing::info!(status = %status, "ssh exited");
365+ break;
366+ }
367+ Ok(status) if status.code() == Some(255) => {
368+ tracing::warn!(status = %status, "ssh connection failed");
369+ if attempts >= SSH_CONNECT_RETRIES {
370+ return Err(format!("ssh failed after {SSH_CONNECT_RETRIES} attempts").into());
462371 }
372+ thread::sleep(Duration::from_millis(500));
373+ }
374+ Ok(status) => {
463375 tracing::info!(status = %status, "ssh exited");
464376 break;
465377 }
466378 Err(err) => {
467379 tracing::error!(error = %err, "failed to start ssh");
468− bail!("failed to start ssh: {err}");
380+ return Err(format!("failed to start ssh: {err}").into());
469381 }
470382 }
471383 }
@@ -473,30 +385,6 @@ fn run_ssh_session(
473385 Ok(())
474386}
475387
476−fn terminate_ssh_child(child: &mut Child) {
477− let pid = child.id() as i32;
478− unsafe {
479− libc::kill(pid, libc::SIGTERM);
480− }
481− let deadline = Instant::now() + Duration::from_millis(700);
482− while Instant::now() < deadline {
483− match child.try_wait() {
484− Ok(Some(_)) => return,
485− Ok(None) => thread::sleep(Duration::from_millis(50)),
486− Err(_) => break,
487− }
488− }
489− let _ = child.kill();
490− let _ = child.wait();
491−}
492−
493−fn restore_terminal_after_disconnect() {
494− if io::stdin().is_terminal() {
495− let _ = Command::new("stty").arg("sane").status();
496− }
497− eprintln!();
498−}
499−
500388#[cfg_attr(feature = "mock-vm", allow(dead_code))]
501389fn is_ipv4_candidate(candidate: &str) -> bool {
502390 let parts: Vec<&str> = candidate.split('.').collect();
@@ -519,10 +407,10 @@ fn ssh_port_open(ip: &str) -> bool {
519407 Ok(addr) => addr,
520408 Err(_) => return false,
521409 };
522− TcpStream::connect_timeout(&addr, Duration::from_millis(500)).is_ok()
410+ TcpStream::connect_timeout(&addr, std::time::Duration::from_millis(500)).is_ok()
523411}
524412
525−pub fn build_ssh_login_actions(
413+pub(crate) fn build_ssh_login_actions(
526414 config: &Arc<Mutex<InstanceConfig>>,
527415 project_name: &str,
528416 project_guest_dir: &str,
@@ -537,7 +425,7 @@ pub fn build_ssh_login_actions(
537425
538426 let key_path = format!("{guest_dir}/{key_name}.pub");
539427
540− let ssh_script = SSH_SETUP_SCRIPT
428+ let setup_script = SSH_SETUP_SCRIPT
541429 .replace("__SSH_USER__", &ssh_user)
542430 .replace("__SUDO_PASSWORD__", &sudo_password)
543431 .replace("__PROJECT_NAME__", project_name)
@@ -545,36 +433,8 @@ pub fn build_ssh_login_actions(
545433 .replace("__KEY_PATH__", &key_path)
546434 .replace("__VIBEBOX_SHELL_SCRIPT__", &commands::render_shell_script())
547435 .replace("__VIBEBOX_HOME_LINKS__", home_links_script);
548− let setup = vm::script_command_from_content("ssh.sh", &ssh_script)
436+ let setup = vm::script_command_from_content("ssh_setup", &setup_script)
549437 .expect("ssh setup script contained invalid marker");
550438
551439 vec![LoginAction::Send(setup)]
552440}
553−
554−#[cfg(test)]
555−mod tests {
556− use super::*;
557−
558− #[test]
559− fn handle_manager_line_updates_status() {
560− let mut last_status = None;
561− handle_manager_line("status: preparing VM image...", &mut last_status)
562− .expect("status should be accepted");
563− assert_eq!(last_status.as_deref(), Some("preparing VM image..."));
564− }
565−
566− #[test]
567− fn handle_manager_line_ignores_non_status_lines() {
568− let mut last_status = None;
569− handle_manager_line("pid=123", &mut last_status).expect("non-status lines are ignored");
570− assert!(last_status.is_none());
571− }
572−
573− #[test]
574− fn handle_manager_line_surfaces_error_status() {
575− let mut last_status = None;
576− let err = handle_manager_line("status: error: vm failed to boot", &mut last_status)
577− .expect_err("error status should fail");
578− assert_eq!(err.to_string(), "vm failed to boot");
579− }
580−}
src/lib.rs−1
@@ -8,4 +8,3 @@ pub mod vm_manager;
88
99pub use session_manager::{SessionError, SessionManager, SessionRecord};
1010pub mod config;
11−pub mod utils;
src/provision.sh+5−49
@@ -1,55 +1,12 @@
11#!/bin/bash
2−set -eEux
3−
4−trap 'rc=$?; echo "[vibebox][error] provisioning failed at: ${BASH_COMMAND} (exit ${rc})"; printf "%s%s\n" VIBEBOX_PROVISION_ FAILED; systemctl poweroff || true; exit 1' ERR
5−
6−# Wait for network + DNS before apt-get to avoid early boot flakiness.
7−wait_for_network() {
8− echo "[vibebox] waiting for network/DNS readiness"
9− local deadline=$((SECONDS + 180))
10− while [ "$SECONDS" -lt "$deadline" ]; do
11− local has_route=0
12− if ip -4 route show default >/dev/null 2>&1; then
13− has_route=1
14− elif ip -6 route show default >/dev/null 2>&1; then
15− has_route=1
16− fi
17− if [ "$has_route" -eq 1 ]; then
18− if getent hosts deb.debian.org >/dev/null 2>&1; then
19− return 0
20− fi
21− fi
22− sleep 1
23− done
24− echo "[vibebox][warn] network/DNS still not ready after 180s; continuing" >&2
25− echo "[vibebox][warn] /etc/resolv.conf:" >&2
26− cat /etc/resolv.conf >&2 || true
27− ip -br addr >&2 || true
28− ip route >&2 || true
29− ip -6 route >&2 || true
30− return 0
31−}
32−
33−apt_update_with_retries() {
34− local attempt=1
35− while [ "$attempt" -le 5 ]; do
36− if apt-get update; then
37− return 0
38− fi
39− echo "[vibebox][warn] apt-get update failed (attempt ${attempt}/5); retrying..." >&2
40− attempt=$((attempt + 1))
41− sleep 2
42− done
43− return 1
44−}
2+set -eux
453
464# Don't wait too long for slow mirrors.
47−echo 'Acquire::http::Timeout "10";' | tee /etc/apt/apt.conf.d/99timeout
48−echo 'Acquire::https::Timeout "10";' | tee -a /etc/apt/apt.conf.d/99timeout
49−echo 'Acquire::Retries "5";' | tee -a /etc/apt/apt.conf.d/99timeout
5+echo 'Acquire::http::Timeout "2";' | tee /etc/apt/apt.conf.d/99timeout
6+echo 'Acquire::https::Timeout "2";' | tee -a /etc/apt/apt.conf.d/99timeout
7+echo 'Acquire::Retries "2";' | tee -a /etc/apt/apt.conf.d/99timeout
508
51−wait_for_network
52−apt_update_with_retries
9+apt-get update
5310apt-get install -y --no-install-recommends \
5411 build-essential \
5512 pkg-config \
@@ -98,5 +55,4 @@ sleep 100 # sleep here so that we don't see the login screen flash up before the
9855EOF
9956
10057# Done provisioning, power off the VM
101−printf "%s%s\n" VIBEBOX_PROVISION_ OK
10258systemctl poweroff
src/session_manager.rs+93−56
@@ -1,18 +1,19 @@
1−use anyhow::Result;
21use std::{
32 env, fs,
43 io::{self, Write},
4+ os::unix::fs::FileTypeExt,
55 path::{Path, PathBuf},
66};
77
8−use crate::config::config_path;
9−use crate::instance::{VmLiveness, read_instance_config, vm_liveness};
108use serde::{Deserialize, Serialize};
119
10+use crate::config::CONFIG_FILENAME;
11+
1212pub const INSTANCE_DIR_NAME: &str = ".vibebox";
1313pub const GLOBAL_CACHE_DIR_NAME: &str = "vibebox";
1414pub const GLOBAL_DIR_NAME: &str = ".vibebox";
15−const SESSION_TOML_SUFFIX: &str = ".toml";
15+pub const INSTANCE_FILENAME: &str = "instance.toml";
16+pub const SESSION_TOML_SUFFIX: &str = ".toml";
1617pub const VM_MANAGER_SOCKET_NAME: &str = "vm.sock";
1718pub const VM_MANAGER_PID_NAME: &str = "vm.pid";
1819const SESSIONS_DIR_NAME: &str = "sessions";
@@ -31,6 +32,14 @@ struct SessionEntry {
3132 pub id: String,
3233}
3334
35+#[derive(Debug, Default, Deserialize)]
36+struct InstanceMetadata {
37+ #[serde(default)]
38+ id: Option<String>,
39+ #[serde(default)]
40+ last_active: Option<String>,
41+}
42+
3443#[derive(Debug)]
3544pub struct SessionManager {
3645 sessions_dir: PathBuf,
@@ -52,7 +61,7 @@ pub enum SessionError {
5261 #[error("Session directory does not exist: {0}")]
5362 MissingDirectory(PathBuf),
5463 #[error(transparent)]
55− Io(#[from] io::Error),
64+ Io(#[from] std::io::Error),
5665 #[error(transparent)]
5766 TomlDe(#[from] toml::de::Error),
5867 #[error(transparent)]
@@ -85,8 +94,8 @@ impl SessionManager {
8594 let mut added = false;
8695
8796 if has_config {
88− let id = read_instance_config(&directory).map_or(None, |config| Some(config.id));
89− if let Some(id) = id {
97+ let meta = read_instance_metadata(&directory)?;
98+ if let Some(id) = meta.id {
9099 let record = SessionEntry {
91100 directory: directory.clone(),
92101 id: id.clone(),
@@ -101,6 +110,7 @@ impl SessionManager {
101110 } else {
102111 tracing::warn!(
103112 directory = %directory.display(),
113+ file = INSTANCE_FILENAME,
104114 "missing session id in instance file"
105115 );
106116 }
@@ -138,13 +148,12 @@ impl SessionManager {
138148 }
139149 let mut records = Vec::with_capacity(sessions.len());
140150 for session in sessions {
141− let last_active =
142− read_instance_config(&session.directory).map_or(None, |option| option.last_active);
151+ let meta = read_instance_metadata(&session.directory)?;
143152 let active = is_session_active(&session.directory);
144153 records.push(SessionRecord {
145154 directory: session.directory,
146155 id: session.id,
147− last_active,
156+ last_active: meta.last_active,
148157 active,
149158 });
150159 }
@@ -262,22 +271,43 @@ fn is_vibebox_dir(directory: &Path) -> bool {
262271 if !directory.is_absolute() {
263272 return false;
264273 }
265− config_path(directory).is_file()
274+ directory.join(CONFIG_FILENAME).is_file()
266275}
267276
268277fn is_session_active(directory: &Path) -> bool {
269278 let instance_dir = directory.join(INSTANCE_DIR_NAME);
270279 let pid_path = instance_dir.join(VM_MANAGER_PID_NAME);
271− match vm_liveness(directory) {
272− Ok(liveness) => match liveness {
273− VmLiveness::RunningWithSocket { .. } => true,
274− VmLiveness::RunningWithoutSocket { .. } => true,
275− VmLiveness::NotRunningOrMissing => {
276− let _ = fs::remove_file(&pid_path);
277− false
278− }
279− },
280− Err(_) => false,
280+ let socket_path = instance_dir.join(VM_MANAGER_SOCKET_NAME);
281+
282+ let pid = read_pid(&pid_path);
283+ let is_alive = pid.map(pid_is_alive).unwrap_or(false);
284+ if !is_alive {
285+ let _ = fs::remove_file(&pid_path);
286+ return false;
287+ }
288+
289+ if let Ok(metadata) = fs::metadata(&socket_path) {
290+ return metadata.file_type().is_socket();
291+ }
292+
293+ true
294+}
295+
296+fn read_pid(path: &Path) -> Option<u32> {
297+ let content = fs::read_to_string(path).ok()?;
298+ content.trim().parse::<u32>().ok()
299+}
300+
301+fn pid_is_alive(pid: u32) -> bool {
302+ let pid = pid as libc::pid_t;
303+ let result = unsafe { libc::kill(pid, 0) };
304+ if result == 0 {
305+ return true;
306+ }
307+ match std::io::Error::last_os_error().raw_os_error() {
308+ Some(code) if code == libc::EPERM => true,
309+ Some(code) if code == libc::ESRCH => false,
310+ _ => false,
281311 }
282312}
283313
@@ -285,11 +315,31 @@ fn read_session_file(path: &Path) -> Result<SessionEntry, SessionError> {
285315 let raw = fs::read_to_string(path)?;
286316 let record: SessionEntry = toml::from_str(&raw)?;
287317 if record.id.trim().is_empty() {
288− return Err(io::Error::new(io::ErrorKind::InvalidData, "session id missing").into());
318+ return Err(std::io::Error::new(io::ErrorKind::InvalidData, "session id missing").into());
289319 }
290320 Ok(record)
291321}
292322
323+fn read_instance_metadata(directory: &Path) -> Result<InstanceMetadata, SessionError> {
324+ let instance_path = directory.join(INSTANCE_DIR_NAME).join(INSTANCE_FILENAME);
325+ if !instance_path.exists() {
326+ return Ok(InstanceMetadata::default());
327+ }
328+ let raw = fs::read_to_string(&instance_path)?;
329+ let mut meta: InstanceMetadata = toml::from_str(&raw)?;
330+ if let Some(id) = &meta.id
331+ && id.trim().is_empty()
332+ {
333+ meta.id = None;
334+ }
335+ if let Some(last_active) = &meta.last_active
336+ && last_active.trim().is_empty()
337+ {
338+ meta.last_active = None;
339+ }
340+ Ok(meta)
341+}
342+
293343fn atomic_write(path: &Path, content: &[u8]) -> io::Result<()> {
294344 let Some(parent) = path.parent() else {
295345 return Err(io::Error::new(
@@ -312,7 +362,6 @@ fn atomic_write(path: &Path, content: &[u8]) -> io::Result<()> {
312362#[cfg(test)]
313363mod tests {
314364 use super::*;
315− use crate::instance::{InstanceConfig, write_instance_config};
316365 use std::fs;
317366 use tempfile::TempDir;
318367
@@ -326,14 +375,11 @@ mod tests {
326375 dir
327376 }
328377
329− fn write_instance(project_dir: &Path, id: &str, last_active: &str) -> Result<()> {
330− fs::create_dir_all(project_dir)?;
331−
332− let mut config = InstanceConfig::default();
333− config.id = id.to_string();
334− config.last_active = Some(last_active.to_string());
335−
336− write_instance_config(project_dir, &config)
378+ fn write_instance(project_dir: &Path, id: &str, last_active: &str) {
379+ let instance_dir = project_dir.join(INSTANCE_DIR_NAME);
380+ fs::create_dir_all(&instance_dir).unwrap();
381+ let content = format!("id = \"{id}\"\nlast_active = \"{last_active}\"\n");
382+ fs::write(instance_dir.join(INSTANCE_FILENAME), content).unwrap();
337383 }
338384
339385 #[test]
@@ -341,14 +387,11 @@ mod tests {
341387 let temp = TempDir::new().unwrap();
342388 let mgr = manager(&temp);
343389 let project_dir = create_project_dir(&temp);
344− fs::write(config_path(project_dir.as_path()), "").unwrap();
345− assert!(
346− write_instance(
347− &project_dir,
348− "019bf290-cccc-7c23-ba1d-dce7e6d40693",
349− "2026-02-07T05:00:00Z",
350− )
351− .is_ok()
390+ fs::write(project_dir.join(CONFIG_FILENAME), "").unwrap();
391+ write_instance(
392+ &project_dir,
393+ "019bf290-cccc-7c23-ba1d-dce7e6d40693",
394+ "2026-02-07T05:00:00Z",
352395 );
353396
354397 let dirs = mgr.update_global_sessions(&project_dir).unwrap();
@@ -369,18 +412,15 @@ mod tests {
369412 let temp = TempDir::new().unwrap();
370413 let mgr = manager(&temp);
371414 let project_dir = create_project_dir(&temp);
372− fs::write(config_path(project_dir.as_path()), "").unwrap();
373− assert!(
374− write_instance(
375− &project_dir,
376− "019bf290-cccc-7c23-ba1d-dce7e6d40693",
377− "2026-02-07T05:00:00Z",
378− )
379− .is_ok()
415+ fs::write(project_dir.join(CONFIG_FILENAME), "").unwrap();
416+ write_instance(
417+ &project_dir,
418+ "019bf290-cccc-7c23-ba1d-dce7e6d40693",
419+ "2026-02-07T05:00:00Z",
380420 );
381421 let _ = mgr.update_global_sessions(&project_dir).unwrap();
382422
383− fs::remove_file(config_path(project_dir.as_path())).unwrap();
423+ fs::remove_file(project_dir.join(CONFIG_FILENAME)).unwrap();
384424 let sessions = mgr.list_sessions().unwrap();
385425 assert!(sessions.is_empty());
386426
@@ -411,14 +451,11 @@ mod tests {
411451 let temp = TempDir::new().unwrap();
412452 let mgr = manager(&temp);
413453 let project_dir = create_project_dir(&temp);
414− fs::write(config_path(project_dir.as_path()), "").unwrap();
415− assert!(
416− write_instance(
417− &project_dir,
418− "019bf290-cccc-7c23-ba1d-dce7e6d40693",
419− "2026-02-07T05:00:00Z",
420− )
421− .is_ok()
454+ fs::write(project_dir.join(CONFIG_FILENAME), "").unwrap();
455+ write_instance(
456+ &project_dir,
457+ "019bf290-cccc-7c23-ba1d-dce7e6d40693",
458+ "2026-02-07T05:00:00Z",
422459 );
423460 let _ = mgr.update_global_sessions(&project_dir).unwrap();
424461
src/ssh.sh+10−18
@@ -2,7 +2,6 @@
22set -eu
33
44SSH_USER="__SSH_USER__"
5−SUDO_PASSWORD="__SUDO_PASSWORD__"
65PROJECT_NAME="__PROJECT_NAME__"
76PROJECT_GUEST_DIR="__PROJECT_GUEST_DIR__"
87KEY_PATH="__KEY_PATH__"
@@ -62,10 +61,6 @@ if ! id -u "$SSH_USER" >/dev/null 2>&1; then
6261 usermod -aG sudo "$SSH_USER" || true
6362fi
6463
65−if [ -n "$SUDO_PASSWORD" ]; then
66− echo "${SSH_USER}:${SUDO_PASSWORD}" | chpasswd
67−fi
68−
6964install -d -m 700 -o "$SSH_USER" -g "$SSH_USER" "/home/${SSH_USER}/.ssh"
7065install -m 600 -o "$SSH_USER" -g "$SSH_USER" "$KEY_PATH" "/home/${SSH_USER}/.ssh/authorized_keys"
7166
@@ -114,8 +109,8 @@ mise_ok() { command -v mise >/dev/null 2>&1 || [ -x "$MISE_BIN" ]; }
114109mise_install() {
115110 if [ ! -x "$MISE_BIN" ] && ! command -v mise >/dev/null 2>&1; then
116111 if ! curl https://mise.run | HOME="$USER_HOME" sh; then
117− mise_warn "mise install script failed"
118− return 1
112+ mise_warn "mise install script failed (continuing)"
113+ return 0
119114 fi
120115 fi
121116 echo 'eval "$(~/.local/bin/mise activate bash)"' >> "${USER_HOME}/.bashrc"
@@ -141,21 +136,18 @@ MISE
141136 touch "${USER_HOME}/.config/mise/mise.lock"
142137 if [ -x "$MISE_BIN" ]; then
143138 if ! HOME="$USER_HOME" "$MISE_BIN" install; then
144− mise_warn "mise install failed"
145− return 1
139+ mise_warn "mise install failed (continuing)"
140+ return 0
146141 fi
147142 else
148143 if ! HOME="$USER_HOME" mise install; then
149− mise_warn "mise install failed"
150− return 1
144+ mise_warn "mise install failed (continuing)"
145+ return 0
151146 fi
152147 fi
153148}
154149
155−if ! mise_install; then
156− diag "mise installation failed"
157− vibebox_fail "mise installation failed" 1
158−fi
150+mise_install || true
159151
160152# 3) start ssh (don't swallow failures)
161153# If ssh is already active, don't force start/restart.
@@ -163,7 +155,7 @@ if ! systemctl is-active --quiet ssh; then
163155 if ! systemctl start ssh; then
164156 diag "systemctl start ssh failed"
165157 dump_diag
166− vibebox_fail "failed to start ssh service" 1
158+ exit 1
167159 fi
168160fi
169161
@@ -201,7 +193,7 @@ done
201193if [ -z "$dev" ] || [ -z "$ip" ]; then
202194 diag "no stable IPv4 on default route interface"
203195 dump_diag
204− vibebox_fail "no stable ipv4 route on default interface" 1
196+ exit 1
205197fi
206198
207199# 5) strong verify: ssh must listen externally (0.0.0.0:22 or $ip:22 or [::]:22)
@@ -220,7 +212,7 @@ done
220212if ! listens_ok; then
221213 diag "sshd not listening on 0.0.0.0:22 / ${ip}:22"
222214 dump_diag
223− vibebox_fail "sshd is not listening on the expected address" 1
215+ exit 1
224216fi
225217
226218ip a
src/tui.rs+31−31
@@ -1,4 +1,10 @@
1−use bytesize::ByteSize;
1+use std::{
2+ io::{self, Write},
3+ os::unix::io::OwnedFd,
4+ path::PathBuf,
5+ sync::{Arc, Mutex},
6+};
7+
28use color_eyre::Result;
39use crossterm::{
410 cursor::{MoveTo, Show},
@@ -16,12 +22,6 @@ use ratatui::{
1622 text::{Line, Span, Text},
1723 widgets::{Block, Borders, Cell, List, ListItem, Paragraph, Row, Table, Widget},
1824};
19−use std::{
20− io::{self, Write},
21− os::unix::io::OwnedFd,
22− path::PathBuf,
23− sync::{Arc, Mutex},
24−};
2525
2626use crate::vm;
2727
@@ -39,9 +39,9 @@ const INFO_LINE_COUNT: u16 = 5;
3939
4040#[derive(Debug, Clone)]
4141pub struct VmInfo {
42− pub max_memory: ByteSize,
42+ pub max_memory_mb: u64,
4343 pub cpu_cores: usize,
44− pub max_disk: ByteSize,
44+ pub max_disk_gb: f32,
4545 pub system_name: String,
4646 pub auto_shutdown_ms: u64,
4747}
@@ -474,27 +474,27 @@ fn write_buffer_with_style(buffer: &Buffer, out: &mut impl Write) -> io::Result<
474474 Ok(())
475475}
476476
477−fn map_color(color: Color) -> CrosstermColor {
477+fn map_color(color: ratatui::style::Color) -> CrosstermColor {
478478 match color {
479− Color::Reset => CrosstermColor::Reset,
480− Color::Black => CrosstermColor::Black,
481− Color::Red => CrosstermColor::DarkRed,
482− Color::Green => CrosstermColor::DarkGreen,
483− Color::Yellow => CrosstermColor::DarkYellow,
484− Color::Blue => CrosstermColor::DarkBlue,
485− Color::Magenta => CrosstermColor::DarkMagenta,
486− Color::Cyan => CrosstermColor::DarkCyan,
487− Color::Gray => CrosstermColor::Grey,
488− Color::DarkGray => CrosstermColor::DarkGrey,
489− Color::LightRed => CrosstermColor::Red,
490− Color::LightGreen => CrosstermColor::Green,
491− Color::LightYellow => CrosstermColor::Yellow,
492− Color::LightBlue => CrosstermColor::Blue,
493− Color::LightMagenta => CrosstermColor::Magenta,
494− Color::LightCyan => CrosstermColor::Cyan,
495− Color::White => CrosstermColor::White,
496− Color::Rgb(r, g, b) => CrosstermColor::Rgb { r, g, b },
497− Color::Indexed(i) => CrosstermColor::AnsiValue(i),
479+ ratatui::style::Color::Reset => CrosstermColor::Reset,
480+ ratatui::style::Color::Black => CrosstermColor::Black,
481+ ratatui::style::Color::Red => CrosstermColor::DarkRed,
482+ ratatui::style::Color::Green => CrosstermColor::DarkGreen,
483+ ratatui::style::Color::Yellow => CrosstermColor::DarkYellow,
484+ ratatui::style::Color::Blue => CrosstermColor::DarkBlue,
485+ ratatui::style::Color::Magenta => CrosstermColor::DarkMagenta,
486+ ratatui::style::Color::Cyan => CrosstermColor::DarkCyan,
487+ ratatui::style::Color::Gray => CrosstermColor::Grey,
488+ ratatui::style::Color::DarkGray => CrosstermColor::DarkGrey,
489+ ratatui::style::Color::LightRed => CrosstermColor::Red,
490+ ratatui::style::Color::LightGreen => CrosstermColor::Green,
491+ ratatui::style::Color::LightYellow => CrosstermColor::Yellow,
492+ ratatui::style::Color::LightBlue => CrosstermColor::Blue,
493+ ratatui::style::Color::LightMagenta => CrosstermColor::Magenta,
494+ ratatui::style::Color::LightCyan => CrosstermColor::Cyan,
495+ ratatui::style::Color::White => CrosstermColor::White,
496+ ratatui::style::Color::Rgb(r, g, b) => CrosstermColor::Rgb { r, g, b },
497+ ratatui::style::Color::Indexed(i) => CrosstermColor::AnsiValue(i),
498498 }
499499}
500500
@@ -574,8 +574,8 @@ fn render_header(buffer: &mut Buffer, area: Rect, app: &AppState) {
574574 Span::raw("CPU / Memory / Disk: "),
575575 Span::styled(
576576 format!(
577− "{} cores / {} / {}",
578− app.vm_info.cpu_cores, app.vm_info.max_memory, app.vm_info.max_disk
577+ "{} cores / {} MB / {} GB",
578+ app.vm_info.cpu_cores, app.vm_info.max_memory_mb, app.vm_info.max_disk_gb
579579 ),
580580 Style::default().fg(Color::Green),
581581 ),
src/utils.rsdeleted−18
@@ -1,18 +0,0 @@
1−use std::{
2− env,
3− path::{Path, PathBuf},
4−};
5−
6−pub fn relative_to_home(directory: &Path) -> String {
7− let Ok(home) = env::var("HOME") else {
8− return directory.display().to_string();
9− };
10− let home_path = PathBuf::from(home);
11− if let Ok(stripped) = directory.strip_prefix(&home_path) {
12− if stripped.components().next().is_none() {
13− return "~".to_string();
14− }
15− return format!("~/{}", stripped.display());
16− }
17− directory.display().to_string()
18−}
src/vm.rs+160−279
@@ -1,5 +1,5 @@
1+use crate::instance::STATUS_FILE_NAME;
12use crate::session_manager::{GLOBAL_CACHE_DIR_NAME, INSTANCE_DIR_NAME};
2−use anyhow::{Context, Error, Result, bail};
33use std::{
44 env, fs,
55 io::{self, Write},
@@ -23,7 +23,6 @@ use std::{
2323};
2424
2525use block2::RcBlock;
26−use bytesize::ByteSize;
2726use dispatch2::DispatchQueue;
2827use objc2::{AnyThread, rc::Retained, runtime::ProtocolObject};
2928use objc2_foundation::*;
@@ -35,44 +34,68 @@ const DEBIAN_COMPRESSED_SIZE_BYTES: u64 = 280901576;
3534const SHARED_DIRECTORIES_TAG: &str = "shared";
3635pub const PROJECT_GUEST_BASE: &str = "/usr/local/vibebox-mounts";
3736
37+const BYTES_PER_MB: u64 = 1024 * 1024;
38+const DEFAULT_CPU_COUNT: usize = 2;
39+const DEFAULT_RAM_MB: u64 = 2048;
40+const DEFAULT_RAM_BYTES: u64 = DEFAULT_RAM_MB * BYTES_PER_MB;
3841const START_TIMEOUT: Duration = Duration::from_secs(60);
3942const LOGIN_EXPECT_TIMEOUT: Duration = Duration::from_secs(120);
40−const PROVISION_EXPECT_TIMEOUT: Duration = Duration::from_secs(900);
4143
42−const ERROR_REPORT_SCRIPT: &str = include_str!("error_report.sh");
44+struct StatusFile {
45+ path: PathBuf,
46+ cleared: AtomicBool,
47+}
48+
49+impl StatusFile {
50+ fn new(path: PathBuf) -> Self {
51+ Self {
52+ path,
53+ cleared: AtomicBool::new(false),
54+ }
55+ }
56+
57+ fn update(&self, message: &str) {
58+ let _ = fs::write(&self.path, message);
59+ }
60+}
61+
62+impl Drop for StatusFile {
63+ fn drop(&mut self) {
64+ if !self.cleared.load(Ordering::SeqCst) {
65+ let _ = fs::remove_file(&self.path);
66+ self.cleared.store(true, Ordering::SeqCst);
67+ }
68+ }
69+}
4370const PROVISION_SCRIPT: &str = include_str!("provision.sh");
71+const PROVISION_SCRIPT_NAME: &str = "provision.sh";
4472const RESIZE_DISK_SCRIPT: &str = include_str!("resize_disk.sh");
4573const DEFAULT_RAW_NAME: &str = "default.raw";
4674const INSTANCE_RAW_NAME: &str = "instance.raw";
4775const BASE_DISK_RAW_NAME: &str = "disk.raw";
4876
4977#[derive(Clone)]
50−pub enum LoginAction {
51− Expect {
52− text: String,
53− timeout: Duration,
54− },
55− ExpectEither {
56− success: String,
57− failure: String,
58− timeout: Duration,
59− },
78+pub(crate) enum LoginAction {
79+ Expect { text: String, timeout: Duration },
6080 Send(String),
6181}
62−use crate::config::BoxConfig;
6382use LoginAction::*;
6483
6584#[derive(Clone)]
66−pub struct DirectoryShare {
85+pub(crate) struct DirectoryShare {
6786 host: PathBuf,
6887 guest: PathBuf,
6988 read_only: bool,
7089}
7190
7291impl DirectoryShare {
73− pub fn new(host: PathBuf, mut guest: PathBuf, read_only: bool) -> Result<Self> {
92+ pub(crate) fn new(
93+ host: PathBuf,
94+ mut guest: PathBuf,
95+ read_only: bool,
96+ ) -> Result<Self, Box<dyn std::error::Error>> {
7497 if !host.exists() {
75− bail!(format!("host path does not exist: {}", host.display()));
98+ return Err(format!("Host path does not exist: {}", host.display()).into());
7699 }
77100 if !guest.is_absolute() {
78101 guest = PathBuf::from("/root").join(guest);
@@ -84,10 +107,10 @@ impl DirectoryShare {
84107 })
85108 }
86109
87− pub fn from_mount_spec(spec: &str) -> Result<Self> {
110+ pub(crate) fn from_mount_spec(spec: &str) -> Result<Self, Box<dyn std::error::Error>> {
88111 let parts: Vec<&str> = spec.split(':').collect();
89112 if parts.len() < 2 || parts.len() > 3 {
90− bail!(format!("invalid mount spec: {spec}"));
113+ return Err(format!("Invalid mount spec: {spec}").into());
91114 }
92115 let host = expand_tilde_path(parts[0]);
93116 let guest = PathBuf::from(parts[1]);
@@ -96,10 +119,11 @@ impl DirectoryShare {
96119 "read-only" => true,
97120 "read-write" => false,
98121 _ => {
99− bail!(format!(
122+ return Err(format!(
100123 "Invalid mount mode '{}'; expected read-only or read-write",
101124 parts[2]
102− ));
125+ )
126+ .into());
103127 }
104128 }
105129 } else {
@@ -143,28 +167,19 @@ pub struct VmArg {
143167 pub mounts: Vec<String>,
144168}
145169
146−type StatusEmitter<'a> = dyn Fn(&str) + std::marker::Send + Sync + 'a;
147−
148−fn emit_status(status: Option<&StatusEmitter<'_>>, message: &str) {
149− if let Some(status) = status {
150− status(message);
151− }
152−}
153−
154−pub fn run_with_args<F>(args: VmArg, io_handler: F) -> Result<()>
170+pub fn run_with_args<F>(args: VmArg, io_handler: F) -> Result<(), Box<dyn std::error::Error>>
155171where
156172 F: FnOnce(Arc<OutputMonitor>, OwnedFd, OwnedFd) -> IoContext,
157173{
158− run_with_args_and_extras(args, io_handler, Vec::new(), Vec::new(), None)
174+ run_with_args_and_extras(args, io_handler, Vec::new(), Vec::new())
159175}
160176
161−pub fn run_with_args_and_extras<F>(
177+pub(crate) fn run_with_args_and_extras<F>(
162178 args: VmArg,
163179 io_handler: F,
164180 extra_login_actions: Vec<LoginAction>,
165181 extra_directory_shares: Vec<DirectoryShare>,
166− status: Option<&StatusEmitter<'_>>,
167−) -> Result<()>
182+) -> Result<(), Box<dyn std::error::Error>>
168183where
169184 F: FnOnce(Arc<OutputMonitor>, OwnedFd, OwnedFd) -> IoContext,
170185{
@@ -173,7 +188,7 @@ where
173188 let project_root = env::current_dir()?;
174189 let project_name = project_root
175190 .file_name()
176− .with_context(|| "Project directory has no name")?
191+ .ok_or("Project directory has no name")?
177192 .to_string_lossy()
178193 .into_owned();
179194
@@ -185,10 +200,8 @@ where
185200 let guest_mise_cache = cache_dir.join(".guest-mise-cache");
186201
187202 let instance_dir = project_root.join(INSTANCE_DIR_NAME);
188− fs::create_dir_all(&instance_dir)?;
189− emit_status(status, "preparing VM image...");
190− tracing::info!("preparing VM image...");
191− let provision_log = instance_dir.join("provision.log");
203+ let status_file = StatusFile::new(instance_dir.join(STATUS_FILE_NAME));
204+ status_file.update("preparing VM image...");
192205
193206 let basename_compressed = DEBIAN_COMPRESSED_DISK_URL.rsplit('/').next().unwrap();
194207 let base_compressed = cache_dir.join(basename_compressed);
@@ -212,14 +225,13 @@ where
212225 &base_compressed,
213226 &default_raw,
214227 std::slice::from_ref(&mise_directory_share),
215− Some(&provision_log),
216− status,
228+ Some(&status_file),
217229 )?;
218230 let _ = ensure_instance_disk(
219231 &instance_raw,
220232 &default_raw,
221− ByteSize(args.disk_bytes),
222− status,
233+ args.disk_bytes,
234+ Some(&status_file),
223235 )?;
224236 let base_size = fs::metadata(&default_raw)?.len();
225237 let instance_size = fs::metadata(&instance_raw)?.len();
@@ -249,7 +261,7 @@ where
249261 }
250262
251263 if needs_resize {
252− let resize_cmd = script_command_from_content("resize_disk.sh", RESIZE_DISK_SCRIPT)?;
264+ let resize_cmd = script_command_from_content("resize_disk", RESIZE_DISK_SCRIPT)?;
253265 login_actions.push(Send(resize_cmd));
254266 }
255267
@@ -265,29 +277,25 @@ where
265277 &directory_shares[..],
266278 args.cpu_count,
267279 args.ram_bytes,
268− status,
280+ Some(&status_file),
269281 io_handler,
270282 )
271283}
272284
273−pub fn script_command_from_content(label: &str, script: &str) -> Result<String> {
285+pub(crate) fn script_command_from_content(
286+ label: &str,
287+ script: &str,
288+) -> Result<String, Box<dyn std::error::Error>> {
274289 let marker = "VIBE_SCRIPT_EOF";
275290 let guest_dir = "/tmp/vibe-scripts";
276291 let guest_path = format!("{guest_dir}/{label}.sh");
277− let script_body = match script.split_once('\n') {
278− Some((first, rest)) if first.starts_with("#!") => rest,
279− _ => script,
280− };
281− let wrapped_script = ERROR_REPORT_SCRIPT
282− .replace("__LABEL__", label)
283− .replace("__SCRIPT_BODY__", script_body);
284292 let command = format!(
285− "mkdir -p {guest_dir}\ncat >{guest_path} <<'{marker}'\n{wrapped_script}\n{marker}\nchmod +x {guest_path}\n{guest_path}"
293+ "mkdir -p {guest_dir}\ncat >{guest_path} <<'{marker}'\n{script}\n{marker}\nchmod +x {guest_path}\n{guest_path}"
286294 );
287295 if script.contains(marker) {
288− bail!(format!(
289− "Script '{label}' contains marker '{marker}', cannot safely upload"
290− ));
296+ return Err(
297+ format!("Script '{label}' contains marker '{marker}', cannot safely upload").into(),
298+ );
291299 }
292300 Ok(command)
293301}
@@ -351,12 +359,6 @@ enum WaitResult {
351359 Found,
352360}
353361
354−#[derive(PartialEq, Eq)]
355−enum WaitAnyResult {
356− Timeout,
357− Found(usize),
358−}
359−
360362pub enum VmInput {
361363 Bytes(Vec<u8>),
362364 Shutdown,
@@ -364,7 +366,6 @@ pub enum VmInput {
364366
365367enum VmOutput {
366368 LoginActionTimeout { action: String, timeout: Duration },
367− LoginActionFailed { action: String, reason: String },
368369}
369370
370371#[derive(Default)]
@@ -401,41 +402,6 @@ impl OutputMonitor {
401402 WaitResult::Found
402403 }
403404 }
404−
405− fn wait_for_any(&self, needles: &[&str], timeout: Duration) -> WaitAnyResult {
406− let mut found: Option<usize> = None;
407− let (_unused, timeout_result) = self
408− .condvar
409− .wait_timeout_while(self.buffer.lock().unwrap(), timeout, |buf| {
410− if let Some((pos, idx, len)) = find_any(buf, needles) {
411− *buf = buf[(pos + len)..].to_string();
412− found = Some(idx);
413− false
414− } else {
415− true
416− }
417− })
418− .unwrap();
419−
420− if timeout_result.timed_out() {
421− WaitAnyResult::Timeout
422− } else {
423− WaitAnyResult::Found(found.unwrap_or(0))
424− }
425− }
426−}
427−
428−fn find_any(buf: &str, needles: &[&str]) -> Option<(usize, usize, usize)> {
429− let mut best: Option<(usize, usize, usize)> = None; // (pos, idx, len)
430− for (idx, needle) in needles.iter().enumerate() {
431− if let Some(pos) = buf.find(needle) {
432− let candidate = (pos, idx, needle.len());
433− if best.is_none_or(|b| candidate.0 < b.0) {
434− best = Some(candidate);
435− }
436− }
437− }
438− best
439405}
440406
441407#[derive(Debug)]
@@ -484,16 +450,18 @@ impl IoControl {
484450fn ensure_base_image(
485451 base_raw: &Path,
486452 base_compressed: &Path,
487− status: Option<&StatusEmitter<'_>>,
488−) -> Result<()> {
453+ status: Option<&StatusFile>,
454+) -> Result<(), Box<dyn std::error::Error>> {
489455 if base_raw.exists() {
490456 return Ok(());
491457 }
492458
493459 if !base_compressed.exists()
494− || fs::metadata(base_compressed).map(|m| m.len())? < DEBIAN_COMPRESSED_SIZE_BYTES
460+ || std::fs::metadata(base_compressed).map(|m| m.len())? < DEBIAN_COMPRESSED_SIZE_BYTES
495461 {
496− emit_status(status, "downloading base image...");
462+ if let Some(status) = status {
463+ status.update("downloading base image...");
464+ }
497465 tracing::info!("downloading base image");
498466 let status = Command::new("curl")
499467 .args([
@@ -508,14 +476,15 @@ fn ensure_base_image(
508476 ])
509477 .status()?;
510478 if !status.success() {
511− bail!("failed to download base image");
479+ return Err("Failed to download base image".into());
512480 }
513481 }
514482
515483 // Check SHA
516484 {
517− emit_status(status, "verifying base image...");
518− tracing::info!("verifying base image...");
485+ if let Some(status) = status {
486+ status.update("verifying base image...");
487+ }
519488 let input = format!("{} {}\n", DEBIAN_COMPRESSED_SHA, base_compressed.display());
520489
521490 let mut child = Command::new("/usr/bin/shasum")
@@ -533,25 +502,25 @@ fn ensure_base_image(
533502
534503 let status = child.wait().expect("failed to wait on child");
535504 if !status.success() {
536− bail!(format!(
537− "SHA validation failed for {DEBIAN_COMPRESSED_DISK_URL}"
538− ));
505+ return Err(format!("SHA validation failed for {DEBIAN_COMPRESSED_DISK_URL}").into());
539506 }
540507 }
541508
542− emit_status(status, "decompressing base image...");
543− tracing::info!("decompressing base image...");
509+ if let Some(status) = status {
510+ status.update("decompressing base image...");
511+ }
512+ tracing::info!("decompressing base image");
544513 let status = Command::new("tar")
545514 .args([
546515 "-xOf",
547516 &base_compressed.to_string_lossy(),
548517 BASE_DISK_RAW_NAME,
549518 ])
550− .stdout(fs::File::create(base_raw)?)
519+ .stdout(std::fs::File::create(base_raw)?)
551520 .status()?;
552521
553522 if !status.success() {
554− bail!("Failed to decompress base image");
523+ return Err("Failed to decompress base image".into());
555524 }
556525
557526 Ok(())
@@ -562,56 +531,29 @@ fn ensure_default_image(
562531 base_compressed: &Path,
563532 default_raw: &Path,
564533 directory_shares: &[DirectoryShare],
565− provision_log: Option<&Path>,
566− status: Option<&StatusEmitter<'_>>,
567−) -> Result<()> {
534+ status: Option<&StatusFile>,
535+) -> Result<(), Box<dyn std::error::Error>> {
568536 if default_raw.exists() {
569537 return Ok(());
570538 }
571539
572540 ensure_base_image(base_raw, base_compressed, status)?;
573541
574− emit_status(status, "configuring base image...");
575− tracing::info!("configuring base image...");
542+ if let Some(status) = status {
543+ status.update("configuring base image...");
544+ }
545+ tracing::info!("configuring base image");
576546 fs::copy(base_raw, default_raw)?;
577547
578− let provision_command = script_command_from_content("provision.sh", PROVISION_SCRIPT)?;
579− let provision_actions = [
580− Send(provision_command),
581− ExpectEither {
582− success: "VIBEBOX_PROVISION_OK".to_string(),
583− failure: "VIBEBOX_PROVISION_FAILED".to_string(),
584− timeout: PROVISION_EXPECT_TIMEOUT,
585− },
586− ];
587− let provision_result = if let Some(log_path) = provision_log {
588− let log_path = log_path.to_path_buf();
589− run_vm_with_io(
590− default_raw,
591− &provision_actions,
592− directory_shares,
593− BoxConfig::default().cpu_count,
594− BoxConfig::default().ram_size.as_u64(),
595− status,
596− move |output_monitor, vm_output_fd, vm_input_fd| {
597− spawn_vm_io_with_log(output_monitor, vm_output_fd, vm_input_fd, log_path)
598− },
599− )
600− } else {
601− run_vm(
602− default_raw,
603− &provision_actions,
604− directory_shares,
605− BoxConfig::default().cpu_count,
606− BoxConfig::default().ram_size.as_u64(),
607− status,
608− )
609− };
610−
611− if let Err(err) = provision_result {
612− let _ = fs::remove_file(default_raw);
613− return Err(err);
614− }
548+ let provision_command = script_command_from_content(PROVISION_SCRIPT_NAME, PROVISION_SCRIPT)?;
549+ run_vm(
550+ default_raw,
551+ &[Send(provision_command)],
552+ directory_shares,
553+ DEFAULT_CPU_COUNT,
554+ DEFAULT_RAM_BYTES,
555+ None,
556+ )?;
615557
616558 Ok(())
617559}
@@ -619,16 +561,18 @@ fn ensure_default_image(
619561fn ensure_instance_disk(
620562 instance_raw: &Path,
621563 template_raw: &Path,
622− target_bytes: ByteSize,
623− status: Option<&StatusEmitter<'_>>,
624−) -> Result<bool> {
564+ target_bytes: u64,
565+ status: Option<&StatusFile>,
566+) -> Result<bool, Box<dyn std::error::Error>> {
625567 if instance_raw.exists() {
626− let current_size = ByteSize(fs::metadata(instance_raw)?.len());
568+ let current_size = fs::metadata(instance_raw)?.len();
627569 if current_size != target_bytes {
628− let current_gb = current_size;
629− let target_gb = target_bytes;
570+ let current_gb = current_size as f64 / (1024.0 * 1024.0 * 1024.0);
571+ let target_gb = target_bytes as f64 / (1024.0 * 1024.0 * 1024.0);
630572 tracing::warn!(
631− "instance disk size does not match config (current {}, config {}); disk_gb applies only on init. Run `vibebox reset` to recreate or set disk_gb to match; using existing disk.",
573+ current_bytes = current_size,
574+ target_bytes,
575+ "instance disk size does not match config (current {:.2} GB, config {:.2} GB); disk_gb applies only on init. Run `vibebox reset` to recreate or set disk_gb to match; using existing disk.",
632576 current_gb,
633577 target_gb
634578 );
@@ -636,28 +580,30 @@ fn ensure_instance_disk(
636580 return Ok(false);
637581 }
638582
639− let template_size = ByteSize(fs::metadata(template_raw)?.len());
583+ let template_size = fs::metadata(template_raw)?.len();
640584 if target_bytes < template_size {
641− bail!(format!(
642− "Requested disk size {} is smaller than base image size {}",
585+ return Err(format!(
586+ "Requested disk size {} bytes is smaller than base image size {} bytes",
643587 target_bytes, template_size
644− ));
588+ )
589+ .into());
645590 }
646591 let target_size = target_bytes;
647592 let needs_resize = target_size > template_size;
648593
649− emit_status(status, "creating instance disk...");
650− tracing::info!("creating instance disk...");
594+ if let Some(status) = status {
595+ status.update("creating instance disk...");
596+ }
651597 tracing::info!(path = %template_raw.display(), "creating instance disk");
652− fs::create_dir_all(instance_raw.parent().unwrap())?;
598+ std::fs::create_dir_all(instance_raw.parent().unwrap())?;
653599 if target_size == template_size {
654600 fs::copy(template_raw, instance_raw)?;
655601 return Ok(needs_resize);
656602 }
657603
658− let mut dst = fs::File::create(instance_raw)?;
659− dst.set_len(target_size.as_u64())?;
660− let mut src = fs::File::open(template_raw)?;
604+ let mut dst = std::fs::File::create(instance_raw)?;
605+ dst.set_len(target_size)?;
606+ let mut src = std::fs::File::open(template_raw)?;
661607 std::io::copy(&mut src, &mut dst)?;
662608 Ok(needs_resize)
663609}
@@ -675,17 +621,18 @@ pub fn create_pipe() -> (OwnedFd, OwnedFd) {
675621 (read_stream.into(), write_stream.into())
676622}
677623
678−pub fn spawn_vm_io_with_hooks<
679− F: FnMut(&str) -> bool + std::marker::Send + 'static,
680− G: FnMut(&[u8]) + std::marker::Send + 'static,
681−>(
624+pub fn spawn_vm_io_with_hooks<F, G>(
682625 output_monitor: Arc<OutputMonitor>,
683626 vm_output_fd: OwnedFd,
684627 vm_input_fd: OwnedFd,
685628 io_control: Arc<IoControl>,
686629 mut on_line: F,
687630 mut on_output: G,
688−) -> IoContext {
631+) -> IoContext
632+where
633+ F: FnMut(&str) -> bool + ::std::marker::Send + 'static,
634+ G: FnMut(&[u8]) + ::std::marker::Send + 'static,
635+{
689636 let (input_tx, input_rx): (Sender<VmInput>, Receiver<VmInput>) = mpsc::channel();
690637
691638 // raw_guard is set when we've put the user's terminal into raw mode because we've attached stdin/stdout to the VM.
@@ -833,14 +780,14 @@ pub fn spawn_vm_io_with_hooks<
833780 PollResult::Spurious => continue,
834781 PollResult::Ready(bytes) => {
835782 if io_control.forward_output() {
836− // enable raw mode if we haven't already
783+ // enable raw mode, if we haven't already
837784 if raw_guard.lock().unwrap().is_none()
838785 && let Ok(guard) = enable_raw_mode(libc::STDIN_FILENO)
839786 {
840787 *raw_guard.lock().unwrap() = Some(guard);
841788 }
842789
843− let mut stdout = io::stdout().lock();
790+ let mut stdout = std::io::stdout().lock();
844791 if stdout.write_all(bytes).is_err() {
845792 break;
846793 }
@@ -856,7 +803,7 @@ pub fn spawn_vm_io_with_hooks<
856803
857804 // Copies data from mpsc channel into VM, so vibe can "type" stuff and run scripts.
858805 let mux_thread = thread::spawn(move || {
859− let mut vm_writer = fs::File::from(vm_input_fd);
806+ let mut vm_writer = std::fs::File::from(vm_input_fd);
860807 loop {
861808 match input_rx.recv() {
862809 Ok(VmInput::Bytes(data)) => {
@@ -886,7 +833,7 @@ pub fn spawn_vm_io_with_line_handler<F>(
886833 on_line: F,
887834) -> IoContext
888835where
889− F: FnMut(&str) -> bool + std::marker::Send + 'static,
836+ F: FnMut(&str) -> bool + ::std::marker::Send + 'static,
890837{
891838 spawn_vm_io_with_hooks(
892839 output_monitor,
@@ -906,36 +853,6 @@ pub fn spawn_vm_io(
906853 spawn_vm_io_with_line_handler(output_monitor, vm_output_fd, vm_input_fd, |_| false)
907854}
908855
909−fn spawn_vm_io_with_log(
910− output_monitor: Arc<OutputMonitor>,
911− vm_output_fd: OwnedFd,
912− vm_input_fd: OwnedFd,
913− log_path: PathBuf,
914−) -> IoContext {
915− let log_file = fs::OpenOptions::new()
916− .create(true)
917− .write(true)
918− .truncate(true)
919− .open(&log_path)
920− .ok()
921− .map(|file| Arc::new(Mutex::new(file)));
922−
923− spawn_vm_io_with_hooks(
924− output_monitor,
925− vm_output_fd,
926− vm_input_fd,
927− IoControl::new(),
928− |_| false,
929− move |bytes| {
930− if let Some(log) = &log_file
931− && let Ok(mut file) = log.lock()
932− {
933− let _ = file.write_all(bytes);
934− }
935− },
936− )
937−}
938−
939856impl IoContext {
940857 pub fn shutdown(self) {
941858 let _ = self.input_tx.send(VmInput::Shutdown);
@@ -953,7 +870,7 @@ fn create_vm_configuration(
953870 vm_writes_to_fd: OwnedFd,
954871 cpu_count: usize,
955872 ram_bytes: u64,
956−) -> Result<Retained<VZVirtualMachineConfiguration>> {
873+) -> Result<Retained<VZVirtualMachineConfiguration>, Box<dyn std::error::Error>> {
957874 unsafe {
958875 let platform =
959876 VZGenericPlatformConfiguration::init(VZGenericPlatformConfiguration::alloc());
@@ -987,7 +904,7 @@ fn create_vm_configuration(
987904 false,
988905 VZDiskImageCachingMode::Automatic,
989906 VZDiskImageSynchronizationMode::Full,
990− )?;
907+ ).unwrap();
991908
992909 let disk_device = VZVirtioBlockDeviceConfiguration::initWithAttachment(
993910 VZVirtioBlockDeviceConfiguration::alloc(),
@@ -1074,7 +991,7 @@ fn create_vm_configuration(
1074991 // Validate
1075992 config.validateWithError().map_err(|e| {
1076993 io::Error::other(format!(
1077− "invalid VM configuration: {:?}",
994+ "Invalid VM configuration: {:?}",
1078995 e.localizedDescription()
1079996 ))
1080997 })?;
@@ -1083,9 +1000,9 @@ fn create_vm_configuration(
10831000 }
10841001}
10851002
1086−fn load_efi_variable_store() -> Result<Retained<VZEFIVariableStore>> {
1003+fn load_efi_variable_store() -> Result<Retained<VZEFIVariableStore>, Box<dyn std::error::Error>> {
10871004 unsafe {
1088− let temp_dir = env::temp_dir();
1005+ let temp_dir = std::env::temp_dir();
10891006 let temp_path = temp_dir.join(format!("efi_variable_store_{}.efivars", std::process::id()));
10901007 let url = nsurl_from_path(&temp_path)?;
10911008 let options = VZEFIVariableStoreInitializationOptions::AllowOverwrite;
@@ -1101,8 +1018,8 @@ fn load_efi_variable_store() -> Result<Retained<VZEFIVariableStore>> {
11011018fn spawn_login_actions_thread(
11021019 login_actions: Vec<LoginAction>,
11031020 output_monitor: Arc<OutputMonitor>,
1104− input_tx: Sender<VmInput>,
1105− vm_output_tx: Sender<VmOutput>,
1021+ input_tx: mpsc::Sender<VmInput>,
1022+ vm_output_tx: mpsc::Sender<VmOutput>,
11061023) -> thread::JoinHandle<()> {
11071024 thread::spawn(move || {
11081025 for a in login_actions {
@@ -1116,27 +1033,6 @@ fn spawn_login_actions_thread(
11161033 return;
11171034 }
11181035 }
1119− ExpectEither {
1120− success,
1121− failure,
1122− timeout,
1123− } => match output_monitor.wait_for_any(&[&success, &failure], timeout) {
1124− WaitAnyResult::Found(0) => {}
1125− WaitAnyResult::Found(_) => {
1126− let _ = vm_output_tx.send(VmOutput::LoginActionFailed {
1127− action: format!("expect '{}'", success),
1128− reason: format!("saw failure marker '{}'", failure),
1129− });
1130− return;
1131− }
1132− WaitAnyResult::Timeout => {
1133− let _ = vm_output_tx.send(VmOutput::LoginActionTimeout {
1134− action: format!("expect '{}'", success),
1135− timeout,
1136− });
1137− return;
1138− }
1139− },
11401036 Send(mut text) => {
11411037 text.push('\n'); // Type the newline so the command is actually submitted.
11421038 input_tx.send(VmInput::Bytes(text.into_bytes())).unwrap();
@@ -1152,9 +1048,9 @@ fn run_vm_with_io<F>(
11521048 directory_shares: &[DirectoryShare],
11531049 cpu_count: usize,
11541050 ram_bytes: u64,
1155− status: Option<&StatusEmitter<'_>>,
1051+ status: Option<&StatusFile>,
11561052 io_handler: F,
1157−) -> Result<()>
1053+) -> Result<(), Box<dyn std::error::Error>>
11581054where
11591055 F: FnOnce(Arc<OutputMonitor>, OwnedFd, OwnedFd) -> IoContext,
11601056{
@@ -1201,22 +1097,23 @@ where
12011097
12021098 match rx.try_recv() {
12031099 Ok(result) => {
1204− result.map_err(|e| Error::msg(format!("Failed to start VM: {}", e)))?;
1100+ result.map_err(|e| format!("Failed to start VM: {}", e))?;
12051101 break;
12061102 }
12071103 Err(mpsc::TryRecvError::Empty) => continue,
12081104 Err(mpsc::TryRecvError::Disconnected) => {
1209− bail!("VM start channel disconnected");
1105+ return Err("VM start channel disconnected".into());
12101106 }
12111107 }
12121108 }
12131109
12141110 if Instant::now() >= start_deadline {
1215− bail!("Timed out waiting for VM to start");
1111+ return Err("Timed out waiting for VM to start".into());
12161112 }
12171113
1218− emit_status(status, "vm booting... go vibecoder!");
1219− tracing::info!("vm booting... go vibecoder!");
1114+ if let Some(status) = status {
1115+ status.update("vm booting... go vibecoder!");
1116+ }
12201117 tracing::info!("vm booting");
12211118
12221119 let output_monitor = Arc::new(OutputMonitor::default());
@@ -1262,7 +1159,7 @@ where
12621159 );
12631160
12641161 let mut last_state = None;
1265− let mut exit_result: Result<(), String> = Ok(());
1162+ let mut exit_result = Ok(());
12661163 loop {
12671164 unsafe {
12681165 NSRunLoop::mainRunLoop().runMode_beforeDate(
@@ -1281,24 +1178,8 @@ where
12811178 exit_result = Err(format!(
12821179 "Login action ({}) timed out after {:?}; shutting down.",
12831180 action, timeout
1284− ));
1285− unsafe {
1286− if vm.canRequestStop() {
1287− if let Err(err) = vm.requestStopWithError() {
1288− tracing::error!(error = ?err, "failed to request VM stop");
1289− }
1290− } else if vm.canStop() {
1291− let handler = RcBlock::new(|_error: *mut NSError| {});
1292− vm.stopWithCompletionHandler(&handler);
1293− }
1294− }
1295− break;
1296− }
1297− Ok(VmOutput::LoginActionFailed { action, reason }) => {
1298− exit_result = Err(format!(
1299− "Login action ({}) failed: {}; shutting down.",
1300− action, reason
1301− ));
1181+ )
1182+ .into());
13021183 unsafe {
13031184 if vm.canRequestStop() {
13041185 if let Err(err) = vm.requestStopWithError() {
@@ -1314,7 +1195,7 @@ where
13141195 Err(mpsc::TryRecvError::Empty) => {}
13151196 Err(mpsc::TryRecvError::Disconnected) => {}
13161197 }
1317− if state != VZVirtualMachineState::Running {
1198+ if state != objc2_virtualization::VZVirtualMachineState::Running {
13181199 //eprintln!("VM stopped with state: {:?}", state);
13191200 break;
13201201 }
@@ -1324,7 +1205,7 @@ where
13241205
13251206 io_ctx.shutdown();
13261207
1327− exit_result.map_err(Error::msg)
1208+ exit_result
13281209}
13291210
13301211fn run_vm(
@@ -1333,8 +1214,8 @@ fn run_vm(
13331214 directory_shares: &[DirectoryShare],
13341215 cpu_count: usize,
13351216 ram_bytes: u64,
1336− status: Option<&StatusEmitter<'_>>,
1337−) -> Result<()> {
1217+ status: Option<&StatusFile>,
1218+) -> Result<(), Box<dyn std::error::Error>> {
13381219 run_vm_with_io(
13391220 disk_path,
13401221 login_actions,
@@ -1346,7 +1227,7 @@ fn run_vm(
13461227 )
13471228}
13481229
1349−fn nsurl_from_path(path: &Path) -> Result<Retained<NSURL>> {
1230+fn nsurl_from_path(path: &Path) -> Result<Retained<NSURL>, Box<dyn std::error::Error>> {
13501231 let abs_path = if path.is_absolute() {
13511232 path.to_path_buf()
13521233 } else {
@@ -1355,7 +1236,7 @@ fn nsurl_from_path(path: &Path) -> Result<Retained<NSURL>> {
13551236 let ns_path = NSString::from_str(
13561237 abs_path
13571238 .to_str()
1358− .with_context(|| "non-UTF8 path encountered while building NSURL")?,
1239+ .ok_or("Non-UTF8 path encountered while building NSURL")?,
13591240 );
13601241 Ok(NSURL::fileURLWithPath(&ns_path))
13611242}
@@ -1370,7 +1251,7 @@ fn enable_raw_mode(fd: i32) -> io::Result<RawModeGuard> {
13701251 let original = attributes;
13711252
13721253 // Disable translation of carriage return to newline on input
1373− attributes.c_iflag &= !libc::ICRNL;
1254+ attributes.c_iflag &= !(libc::ICRNL);
13741255 // Disable canonical mode (line buffering), echo, and signal generation
13751256 attributes.c_lflag &= !(libc::ICANON | libc::ECHO | libc::ISIG);
13761257 attributes.c_cc[libc::VMIN] = 0;
@@ -1398,10 +1279,10 @@ impl Drop for RawModeGuard {
13981279
13991280// Ensure the running binary has com.apple.security.virtualization entitlements by checking and, if not, signing and relaunching.
14001281pub fn ensure_signed() {
1401− if env::var("VIBEBOX_SKIP_CODESIGN").as_deref() == Ok("1") {
1282+ if std::env::var("VIBEBOX_SKIP_CODESIGN").as_deref() == Ok("1") {
14021283 return;
14031284 }
1404− let exe = env::current_exe().expect("failed to get current exe path");
1285+ let exe = std::env::current_exe().expect("failed to get current exe path");
14051286 let exe_str = exe.to_str().expect("exe path not valid utf-8");
14061287
14071288 let has_required_entitlements = {
@@ -1423,8 +1304,8 @@ pub fn ensure_signed() {
14231304 }
14241305
14251306 const ENTITLEMENTS: &str = include_str!("entitlements.plist");
1426− let entitlements_path = env::temp_dir().join("entitlements.plist");
1427− fs::write(&entitlements_path, ENTITLEMENTS).expect("failed to write entitlements");
1307+ let entitlements_path = std::env::temp_dir().join("entitlements.plist");
1308+ std::fs::write(&entitlements_path, ENTITLEMENTS).expect("failed to write entitlements");
14281309
14291310 let output = Command::new("codesign")
14301311 .args([
@@ -1437,7 +1318,7 @@ pub fn ensure_signed() {
14371318 ])
14381319 .output();
14391320
1440− let _ = fs::remove_file(&entitlements_path);
1321+ let _ = std::fs::remove_file(&entitlements_path);
14411322
14421323 match output {
14431324 Ok(o) if o.status.success() => {
@@ -1445,7 +1326,7 @@ pub fn ensure_signed() {
14451326 if !stderr.trim().is_empty() {
14461327 tracing::debug!(codesign_stderr = %stderr.trim(), "codesign output");
14471328 }
1448− let err = Command::new(&exe).args(env::args_os().skip(1)).exec();
1329+ let err = Command::new(&exe).args(std::env::args_os().skip(1)).exec();
14491330 tracing::error!(error = %err, "failed to re-exec after signing");
14501331 std::process::exit(1);
14511332 }
src/vm_manager.rs+121−294
@@ -1,22 +1,12 @@
1−use crate::instance::{VmLiveness, vm_liveness};
2−use crate::session_manager::INSTANCE_DIR_NAME;
3−use crate::{
4− config::CONFIG_PATH_ENV,
5− instance::{
6− InstanceConfig, STATUS_VM_ERROR_PREFIX, build_ssh_login_actions, ensure_instance_dir,
7− ensure_ssh_keypair, extract_ipv4, load_or_create_instance_config, write_instance_config,
8− },
9− session_manager::{GLOBAL_DIR_NAME, VM_MANAGER_PID_NAME, VM_MANAGER_SOCKET_NAME},
10− vm::{self, DirectoryShare, LoginAction, PROJECT_GUEST_BASE, VmInput},
11−};
12−use anyhow::{Error, Result, anyhow, bail};
131use std::{
142 env, fs,
153 io::{Read, Write},
164 os::unix::{
5+ fs::FileTypeExt,
176 fs::PermissionsExt,
187 io::AsRawFd,
198 net::{UnixListener, UnixStream},
9+ process::CommandExt,
2010 },
2111 path::{Path, PathBuf},
2212 process::{Command, Stdio},
@@ -25,44 +15,37 @@ use std::{
2515 time::{Duration, Instant},
2616};
2717
28−#[cfg_attr(feature = "mock-vm", allow(dead_code))]
29−const VM_ROOT_LOG_NAME: &str = "vm_root.log";
18+use crate::{
19+ config::CONFIG_PATH_ENV,
20+ instance::VM_ROOT_LOG_NAME,
21+ instance::{
22+ DEFAULT_SSH_USER, InstanceConfig, build_ssh_login_actions, ensure_instance_dir,
23+ ensure_ssh_keypair, extract_ipv4, load_or_create_instance_config, write_instance_config,
24+ },
25+ session_manager::{
26+ GLOBAL_DIR_NAME, INSTANCE_FILENAME, VM_MANAGER_PID_NAME, VM_MANAGER_SOCKET_NAME,
27+ },
28+ vm::{self, DirectoryShare, LoginAction, PROJECT_GUEST_BASE, VmInput},
29+};
30+
3031const VM_MANAGER_LOCK_NAME: &str = "vm.lock";
3132const VM_MANAGER_LOG_NAME: &str = "vm_manager.log";
32−const SHUTDOWN_RETRY_MS: u64 = 500;
33−#[cfg(test)]
34−const HARD_SHUTDOWN_TIMEOUT_MS: u64 = 1_000;
35−#[cfg(not(test))]
3633const HARD_SHUTDOWN_TIMEOUT_MS: u64 = 12_000;
37−const STATUS_PREFIX: &str = "status:";
38−
39−type ClientStreams = Arc<Mutex<Vec<UnixStream>>>;
40−type SharedStatus = Arc<Mutex<String>>;
41−
42−#[cfg(not(test))]
43−fn force_exit(_reason: &str) -> ! {
44− std::process::exit(1);
45−}
46−
47−#[cfg(test)]
48−fn force_exit(reason: &str) -> ! {
49− panic!("{reason}");
50−}
5134
5235pub fn ensure_manager(
5336 raw_args: &[std::ffi::OsString],
5437 auto_shutdown_ms: u64,
5538 config_path: Option<&Path>,
56−) -> Result<UnixStream> {
39+) -> Result<UnixStream, Box<dyn std::error::Error>> {
5740 let project_root = env::current_dir()?;
5841 tracing::debug!(root = %project_root.display(), "ensure vm manager");
5942 let instance_dir = ensure_instance_dir(&project_root)?;
60− cleanup_stale_manager(&project_root)?;
43+ cleanup_stale_manager(&instance_dir);
6144 let socket_path = instance_dir.join(VM_MANAGER_SOCKET_NAME);
6245
6346 if let Ok(stream) = UnixStream::connect(&socket_path) {
6447 send_client_pid(&stream);
65− tracing::info!(path = %socket_path.display(), "connected to an existing vm manager");
48+ tracing::info!(path = %socket_path.display(), "connected to existing vm manager");
6649 return Ok(stream);
6750 }
6851
@@ -100,11 +83,12 @@ pub fn ensure_manager(
10083 drop(lock_file.take());
10184 let _ = fs::remove_file(&lock_path);
10285 }
103− bail!(format!(
104− "timed out waiting for vm manager socket: {} ({})",
86+ return Err(format!(
87+ "Timed out waiting for vm manager socket: {} ({})",
10588 socket_path.display(),
10689 err
107− ));
90+ )
91+ .into());
10892 }
10993 thread::sleep(Duration::from_millis(100));
11094 }
@@ -112,19 +96,12 @@ pub fn ensure_manager(
11296 }
11397}
11498
115−pub fn run_manager(args: vm::VmArg, auto_shutdown_ms: u64) -> Result<()> {
99+pub fn run_manager(
100+ args: vm::VmArg,
101+ auto_shutdown_ms: u64,
102+) -> Result<(), Box<dyn std::error::Error>> {
116103 let project_root = env::current_dir()?;
117104 tracing::info!(root = %project_root.display(), "vm manager starting");
118− #[cfg(not(feature = "mock-vm"))]
119− {
120− unsafe {
121− env::remove_var("VIBEBOX_SKIP_CODESIGN");
122− }
123− vm::ensure_signed();
124− unsafe {
125− env::set_var("VIBEBOX_SKIP_CODESIGN", "1");
126− }
127− }
128105 let _pid_guard = ensure_pid_file(&project_root)?;
129106 #[cfg(feature = "mock-vm")]
130107 tracing::info!("vm manager using mock executor");
@@ -142,6 +119,7 @@ pub fn run_manager(args: vm::VmArg, auto_shutdown_ms: u64) -> Result<()> {
142119 #[cfg(feature = "mock-vm")]
143120 {
144121 ManagerOptions {
122+ ensure_signed: false,
145123 detach: true,
146124 prepare_vm: false,
147125 }
@@ -149,6 +127,7 @@ pub fn run_manager(args: vm::VmArg, auto_shutdown_ms: u64) -> Result<()> {
149127 #[cfg(not(feature = "mock-vm"))]
150128 {
151129 ManagerOptions {
130+ ensure_signed: true,
152131 detach: true,
153132 prepare_vm: true,
154133 }
@@ -162,22 +141,25 @@ fn spawn_manager_process(
162141 auto_shutdown_ms: u64,
163142 instance_dir: &Path,
164143 config_path: Option<&Path>,
165−) -> Result<()> {
144+) -> Result<(), Box<dyn std::error::Error>> {
166145 let exe = env::current_exe()?;
167146 let mut supervisor_exe = exe.clone();
168147 supervisor_exe.set_file_name("vibebox-supervisor");
169− // intentional
170− if !supervisor_exe.exists() {
171− bail!(format!(
172− "vibebox-supervisor not found at {}",
173− supervisor_exe.display()
174− ));
175− }
176− let mut cmd = Command::new(supervisor_exe);
148+ let use_supervisor = supervisor_exe.exists();
149+ let mut cmd = if use_supervisor {
150+ Command::new(supervisor_exe)
151+ } else {
152+ let mut cmd = Command::new(exe);
153+ cmd.arg0("vibebox-supervisor");
154+ cmd
155+ };
177156 if raw_args.len() > 1 {
178157 cmd.args(&raw_args[1..]);
179158 }
180159 cmd.env("VIBEBOX_INTERNAL", "1");
160+ if !use_supervisor {
161+ cmd.env("VIBEBOX_VM_MANAGER", "1");
162+ }
181163 cmd.env("VIBEBOX_LOG_NO_COLOR", "1");
182164 cmd.env("VIBEBOX_AUTO_SHUTDOWN_MS", auto_shutdown_ms.to_string());
183165 if let Some(path) = config_path {
@@ -205,22 +187,22 @@ fn spawn_manager_process(
205187 Ok(())
206188}
207189
208−fn ensure_pid_file(project_root: &Path) -> Result<PidFileGuard> {
190+fn ensure_pid_file(project_root: &Path) -> Result<PidFileGuard, Box<dyn std::error::Error>> {
209191 let instance_dir = ensure_instance_dir(project_root)?;
210192 let pid_path = instance_dir.join(VM_MANAGER_PID_NAME);
211193 let socket_path = instance_dir.join(VM_MANAGER_SOCKET_NAME);
212− match vm_liveness(project_root)? {
213− VmLiveness::RunningWithSocket { pid } => {
214− bail!("vm manager already running (pid {pid})");
215− }
216− VmLiveness::RunningWithoutSocket { pid } => {
217− tracing::warn!(
218− pid,
219− path = %socket_path.display(),
220− "stale pid file detected with missing socket"
221− );
194+ if let Ok(content) = fs::read_to_string(&pid_path)
195+ && let Ok(pid) = content.trim().parse::<u32>()
196+ && pid_is_alive(pid)
197+ {
198+ if is_socket_path(&socket_path) {
199+ return Err(format!("vm manager already running (pid {pid})").into());
222200 }
223− VmLiveness::NotRunningOrMissing => {}
201+ tracing::warn!(
202+ pid,
203+ path = %socket_path.display(),
204+ "stale pid file detected with missing socket"
205+ );
224206 }
225207 let _ = fs::remove_file(&pid_path);
226208 fs::write(&pid_path, format!("{}\n", std::process::id()))?;
@@ -228,18 +210,15 @@ fn ensure_pid_file(project_root: &Path) -> Result<PidFileGuard> {
228210 Ok(PidFileGuard { path: pid_path })
229211}
230212
231−fn cleanup_stale_manager(project_root: &Path) -> Result<()> {
232− let pid_path = project_root
233− .join(INSTANCE_DIR_NAME)
234− .join(VM_MANAGER_PID_NAME);
235− if matches!(
236− vm_liveness(project_root)?,
237− VmLiveness::RunningWithSocket { .. } | VmLiveness::RunningWithoutSocket { .. }
238− ) {
239− return Ok(());
213+fn cleanup_stale_manager(instance_dir: &Path) {
214+ let pid_path = instance_dir.join(VM_MANAGER_PID_NAME);
215+ if let Ok(content) = fs::read_to_string(&pid_path)
216+ && let Ok(pid) = content.trim().parse::<u32>()
217+ && pid_is_alive(pid)
218+ {
219+ return;
240220 }
241221 let _ = fs::remove_file(&pid_path);
242− Ok(())
243222}
244223
245224fn inject_project_mount(
@@ -266,6 +245,12 @@ fn inject_project_mount(
266245 mounts.insert(0, format!("{host}:{guest_tilde}:read-write"));
267246}
268247
248+fn is_socket_path(path: &Path) -> bool {
249+ fs::metadata(path)
250+ .map(|meta| meta.file_type().is_socket())
251+ .unwrap_or(false)
252+}
253+
269254fn prepare_mounts_and_links(mut args: vm::VmArg, ssh_user: &str) -> (vm::VmArg, String) {
270255 let mut links = Vec::new();
271256 let mut mounts = Vec::with_capacity(args.mounts.len());
@@ -409,30 +394,6 @@ fn wait_for_disconnect(mut stream: UnixStream) {
409394 }
410395}
411396
412−fn remove_client(streams: &ClientStreams, fd: std::os::fd::RawFd) {
413− if let Ok(mut clients) = streams.lock() {
414− clients.retain(|stream| stream.as_raw_fd() != fd);
415− }
416−}
417−
418−fn send_status_line(stream: &mut UnixStream, status: &str) -> bool {
419− let mut payload = String::with_capacity(STATUS_PREFIX.len() + status.len() + 1);
420− payload.push_str(STATUS_PREFIX);
421− payload.push_str(status);
422− payload.push('\n');
423− stream.write_all(payload.as_bytes()).is_ok()
424−}
425−
426−#[cfg_attr(feature = "mock-vm", allow(dead_code))]
427−fn broadcast_status(streams: &ClientStreams, latest_status: &SharedStatus, status: &str) {
428− if let Ok(mut current) = latest_status.lock() {
429− *current = status.to_string();
430− }
431− if let Ok(mut clients) = streams.lock() {
432− clients.retain_mut(|stream| send_status_line(stream, status));
433− }
434−}
435−
436397fn send_client_pid(stream: &UnixStream) {
437398 let pid = std::process::id();
438399 let payload = format!("pid={pid}\n");
@@ -442,7 +403,7 @@ fn send_client_pid(stream: &UnixStream) {
442403 }
443404}
444405
445−fn acquire_spawn_lock(lock_path: &Path) -> Result<Option<fs::File>> {
406+fn acquire_spawn_lock(lock_path: &Path) -> Result<Option<fs::File>, Box<dyn std::error::Error>> {
446407 match fs::OpenOptions::new()
447408 .write(true)
448409 .create_new(true)
@@ -476,12 +437,6 @@ fn is_lock_stale(lock_path: &Path) -> bool {
476437 }
477438}
478439
479−fn read_lock_pid(lock_path: &Path) -> Option<u32> {
480− let content = fs::read_to_string(lock_path).ok()?;
481− let line = content.lines().next()?;
482− line.strip_prefix("pid=")?.trim().parse::<u32>().ok()
483−}
484−
485440fn pid_is_alive(pid: u32) -> bool {
486441 let pid = pid as libc::pid_t;
487442 let result = unsafe { libc::kill(pid, 0) };
@@ -495,6 +450,12 @@ fn pid_is_alive(pid: u32) -> bool {
495450 }
496451}
497452
453+fn read_lock_pid(lock_path: &Path) -> Option<u32> {
454+ let content = fs::read_to_string(lock_path).ok()?;
455+ let line = content.lines().next()?;
456+ line.strip_prefix("pid=")?.trim().parse::<u32>().ok()
457+}
458+
498459fn read_client_pid(stream: &UnixStream) -> Option<u32> {
499460 let mut stream = stream.try_clone().ok()?;
500461 let _ = stream.set_read_timeout(Some(Duration::from_millis(200)));
@@ -530,14 +491,12 @@ fn read_client_pid(stream: &UnixStream) -> Option<u32> {
530491#[cfg_attr(feature = "mock-vm", allow(dead_code))]
531492fn spawn_manager_io(
532493 config: Arc<Mutex<InstanceConfig>>,
533− project_dir: PathBuf,
534− clients: ClientStreams,
535− latest_status: SharedStatus,
494+ instance_dir: PathBuf,
536495 output_monitor: Arc<vm::OutputMonitor>,
537496 vm_output_fd: std::os::unix::io::OwnedFd,
538497 vm_input_fd: std::os::unix::io::OwnedFd,
539498) -> vm::IoContext {
540− let log_path = project_dir.join(INSTANCE_DIR_NAME).join(VM_ROOT_LOG_NAME);
499+ let log_path = instance_dir.join(VM_ROOT_LOG_NAME);
541500 let log_file = fs::OpenOptions::new()
542501 .create(true)
543502 .write(true)
@@ -546,6 +505,7 @@ fn spawn_manager_io(
546505 .ok()
547506 .map(|file| Arc::new(Mutex::new(file)));
548507
508+ let instance_path = instance_dir.join(INSTANCE_FILENAME);
549509 let config_for_output = config.clone();
550510 let log_for_output = log_file.clone();
551511 let mut line_buf = String::new();
@@ -568,17 +528,6 @@ fn spawn_manager_io(
568528 line_buf.drain(..=pos);
569529
570530 let cleaned = line.trim_start_matches(['\r', ' ']);
571− if let Some(script_failure) = cleaned.strip_prefix("VIBEBOX_SCRIPT_ERROR:") {
572− let failure = script_failure.trim();
573− if !failure.is_empty() {
574− tracing::error!(script_failure = %failure, "[vm] script reported failure");
575− broadcast_status(
576− &clients,
577− &latest_status,
578− &format!("{STATUS_VM_ERROR_PREFIX} {failure}"),
579− );
580− }
581− }
582531 if let Some(pos) = cleaned.find("VIBEBOX_IPV4=") {
583532 let ip_raw = &cleaned[(pos + "VIBEBOX_IPV4=".len())..];
584533 let ip = extract_ipv4(ip_raw).unwrap_or_default();
@@ -587,7 +536,7 @@ fn spawn_manager_io(
587536 && cfg.vm_ipv4.as_deref() != Some(ip.as_str())
588537 {
589538 cfg.vm_ipv4 = Some(ip.clone());
590− let _ = write_instance_config(&project_dir, &cfg);
539+ let _ = write_instance_config(&instance_path, &cfg);
591540 }
592541 }
593542 }
@@ -610,12 +559,12 @@ enum ManagerEvent {
610559}
611560
612561struct ManagerOptions {
562+ ensure_signed: bool,
613563 detach: bool,
614564 prepare_vm: bool,
615565}
616566
617567trait VmExecutor {
618− #[allow(clippy::too_many_arguments)]
619568 fn run_vm(
620569 &self,
621570 args: vm::VmArg,
@@ -623,10 +572,8 @@ trait VmExecutor {
623572 extra_shares: Vec<DirectoryShare>,
624573 config: Arc<Mutex<InstanceConfig>>,
625574 instance_dir: PathBuf,
626− clients: ClientStreams,
627− latest_status: SharedStatus,
628575 vm_input_tx: Arc<Mutex<Option<mpsc::Sender<VmInput>>>>,
629− ) -> Result<()>;
576+ ) -> Result<(), Box<dyn std::error::Error>>;
630577}
631578
632579#[cfg_attr(feature = "mock-vm", allow(dead_code))]
@@ -639,22 +586,15 @@ impl VmExecutor for RealVmExecutor {
639586 extra_login_actions: Vec<LoginAction>,
640587 extra_shares: Vec<DirectoryShare>,
641588 config: Arc<Mutex<InstanceConfig>>,
642− project_dir: PathBuf,
643− clients: ClientStreams,
644− latest_status: SharedStatus,
589+ instance_dir: PathBuf,
645590 vm_input_tx: Arc<Mutex<Option<mpsc::Sender<VmInput>>>>,
646− ) -> Result<()> {
647− let status_callback = |status: &str| {
648− broadcast_status(&clients, &latest_status, status);
649− };
591+ ) -> Result<(), Box<dyn std::error::Error>> {
650592 vm::run_with_args_and_extras(
651593 args,
652594 |output_monitor, vm_output_fd, vm_input_fd| {
653595 let io_ctx = spawn_manager_io(
654596 config.clone(),
655− project_dir.clone(),
656− clients.clone(),
657− latest_status.clone(),
597+ instance_dir.clone(),
658598 output_monitor,
659599 vm_output_fd,
660600 vm_input_fd,
@@ -664,7 +604,6 @@ impl VmExecutor for RealVmExecutor {
664604 },
665605 extra_login_actions,
666606 extra_shares,
667− Some(&status_callback),
668607 )
669608 }
670609}
@@ -681,10 +620,8 @@ impl VmExecutor for MockVmExecutor {
681620 _extra_shares: Vec<DirectoryShare>,
682621 _config: Arc<Mutex<InstanceConfig>>,
683622 _instance_dir: PathBuf,
684− _clients: ClientStreams,
685− _latest_status: SharedStatus,
686623 vm_input_tx: Arc<Mutex<Option<mpsc::Sender<VmInput>>>>,
687− ) -> Result<()> {
624+ ) -> Result<(), Box<dyn std::error::Error>> {
688625 let (tx, rx) = mpsc::channel::<VmInput>();
689626 *vm_input_tx.lock().unwrap() = Some(tx);
690627 tracing::info!("mock vm executor running");
@@ -710,14 +647,24 @@ fn run_manager_with(
710647 auto_shutdown_ms: u64,
711648 executor: &dyn VmExecutor,
712649 options: ManagerOptions,
713−) -> Result<()> {
650+) -> Result<(), Box<dyn std::error::Error>> {
651+ if options.ensure_signed {
652+ let _had_skip = env::var("VIBEBOX_SKIP_CODESIGN").ok();
653+ unsafe {
654+ env::remove_var("VIBEBOX_SKIP_CODESIGN");
655+ }
656+ vm::ensure_signed();
657+ unsafe {
658+ env::set_var("VIBEBOX_SKIP_CODESIGN", "1");
659+ }
660+ }
714661 if options.detach {
715662 detach_from_terminal();
716663 }
717664
718665 let project_name = project_root
719666 .file_name()
720− .ok_or_else(|| anyhow!("Project directory has no name"))?
667+ .ok_or("Project directory has no name")?
721668 .to_string_lossy()
722669 .into_owned();
723670 let instance_dir = ensure_instance_dir(project_root)?;
@@ -725,16 +672,16 @@ fn run_manager_with(
725672 let _ = ensure_ssh_keypair(&instance_dir)?;
726673 }
727674
728− let mut config = load_or_create_instance_config(project_root)?;
675+ let mut config = load_or_create_instance_config(&instance_dir)?;
729676 if config.vm_ipv4.is_some() {
730677 config.vm_ipv4 = None;
731− write_instance_config(project_root, &config)?;
678+ write_instance_config(&instance_dir.join(INSTANCE_FILENAME), &config)?;
732679 }
733680 let config = Arc::new(Mutex::new(config));
734681 let ssh_user = config
735682 .lock()
736− .map(|cfg| cfg.ssh_user.clone())
737− .map_err(|_| anyhow!("failed to acquire ssh user display"))?;
683+ .map(|cfg| cfg.ssh_user_display())
684+ .unwrap_or_else(|_| DEFAULT_SSH_USER.to_string());
738685 if !args.no_default_mounts {
739686 inject_project_mount(&mut args.mounts, project_root, &ssh_user, &project_name);
740687 }
@@ -742,10 +689,11 @@ fn run_manager_with(
742689
743690 let project_guest_dir = format!("{PROJECT_GUEST_BASE}/{project_name}");
744691 let ssh_guest_dir = format!("/root/{}", GLOBAL_DIR_NAME);
745− let extra_shares = vec![
746− DirectoryShare::new(instance_dir.clone(), ssh_guest_dir.clone().into(), true)
747− .map_err(|err| anyhow!(err.to_string()))?,
748− ];
692+ let extra_shares = vec![DirectoryShare::new(
693+ instance_dir.clone(),
694+ ssh_guest_dir.clone().into(),
695+ true,
696+ )?];
749697 let extra_login_actions = build_ssh_login_actions(
750698 &config,
751699 &project_name,
@@ -768,43 +716,17 @@ fn run_manager_with(
768716 let _ = fs::set_permissions(&socket_path, fs::Permissions::from_mode(0o600));
769717 tracing::info!(path = %socket_path.display(), "vm manager socket bound");
770718
771− let clients: ClientStreams = Arc::new(Mutex::new(Vec::new()));
772− let latest_status: SharedStatus = Arc::new(Mutex::new(String::new()));
773719 let (event_tx, event_rx) = mpsc::channel::<ManagerEvent>();
774720 let event_tx_accept = event_tx.clone();
775− let clients_accept = clients.clone();
776− let latest_status_accept = latest_status.clone();
777721 thread::spawn(move || {
778722 for stream in listener.incoming() {
779723 match stream {
780724 Ok(stream) => {
781− let mut client_fd: Option<std::os::fd::RawFd> = None;
782− let latest_status_snapshot = latest_status_accept
783− .lock()
784− .ok()
785− .map(|status| status.clone());
786− if let Ok(writer) = stream.try_clone() {
787− let writer_fd = writer.as_raw_fd();
788− if let Ok(mut connected) = clients_accept.lock() {
789− connected.push(writer);
790− client_fd = Some(writer_fd);
791− if let Some(last) = connected.last_mut()
792− && let Some(status) = latest_status_snapshot.as_deref()
793− && !status.is_empty()
794− {
795− let _ = send_status_line(last, status);
796− }
797− }
798− }
799725 let event_tx_conn = event_tx_accept.clone();
800− let clients_conn = clients_accept.clone();
801726 thread::spawn(move || {
802727 let pid = read_client_pid(&stream);
803728 let _ = event_tx_conn.send(ManagerEvent::Inc(pid));
804729 wait_for_disconnect(stream);
805− if let Some(fd) = client_fd {
806− remove_client(&clients_conn, fd);
807− }
808730 let _ = event_tx_conn.send(ManagerEvent::Dec(pid));
809731 });
810732 }
@@ -824,43 +746,34 @@ fn run_manager_with(
824746 extra_login_actions,
825747 extra_shares,
826748 config.clone(),
827− project_root.to_path_buf(),
828− clients.clone(),
829− latest_status.clone(),
749+ instance_dir.clone(),
830750 vm_input_tx.clone(),
831751 );
832752 tracing::info!("vm manager vm run completed");
833753 let vm_err = vm_result.err().map(|e| e.to_string());
834− if let Some(err) = &vm_err {
835− broadcast_status(
836− &clients,
837− &latest_status,
838− &format!("{STATUS_VM_ERROR_PREFIX} {err}"),
839− );
840− }
841754 let _ = event_tx.send(ManagerEvent::VmExited(vm_err.clone()));
842− let event_loop_result = event_loop_handle
755+ let event_loop_result: Result<(), String> = event_loop_handle
843756 .join()
844− .unwrap_or_else(|_| Err(Error::msg("vm manager event loop panicked")))
757+ .unwrap_or_else(|_| Err("vm manager event loop panicked".into()))
845758 .map_err(|err| err.to_string());
846759 let _ = fs::remove_file(&socket_path);
847760 if let Err(err) = &event_loop_result {
848761 tracing::error!(error = %err, "vm manager exiting due to event loop error");
849− bail!(err.to_string());
762+ return Err(err.to_string().into());
850763 }
851764 if let Some(err) = vm_err {
852765 tracing::error!(error = %err, "vm manager exiting due to vm error");
853− bail!(err);
766+ return Err(err.into());
854767 }
855768 tracing::info!("vm manager exiting");
856− event_loop_result.map_err(Error::msg)
769+ Ok(event_loop_result?)
857770}
858771
859772fn manager_event_loop(
860773 event_rx: mpsc::Receiver<ManagerEvent>,
861774 vm_input_tx: Arc<Mutex<Option<mpsc::Sender<VmInput>>>>,
862775 auto_shutdown_ms: u64,
863−) -> Result<()> {
776+) -> Result<(), String> {
864777 let mut ref_count: usize = 0;
865778 let mut shutdown_deadline: Option<Instant> = None;
866779 let mut shutdown_sent = false;
@@ -869,14 +782,9 @@ fn manager_event_loop(
869782 let hard_timeout = Duration::from_millis(HARD_SHUTDOWN_TIMEOUT_MS);
870783
871784 loop {
872− let timeout = match (shutdown_deadline, hard_deadline) {
873− (Some(shutdown), Some(hard)) => {
874− let next = if shutdown <= hard { shutdown } else { hard };
875− next.saturating_duration_since(Instant::now())
876− }
877− (Some(shutdown), None) => shutdown.saturating_duration_since(Instant::now()),
878− (None, Some(hard)) => hard.saturating_duration_since(Instant::now()),
879− (None, None) => Duration::from_secs(1),
785+ let timeout = match shutdown_deadline {
786+ Some(deadline) => deadline.saturating_duration_since(Instant::now()),
787+ None => Duration::from_secs(1),
880788 };
881789
882790 match event_rx.recv_timeout(timeout) {
@@ -916,9 +824,6 @@ fn manager_event_loop(
916824 && Instant::now() >= deadline
917825 && !shutdown_sent
918826 {
919− if hard_deadline.is_none() {
920− hard_deadline = Some(Instant::now() + hard_timeout);
921− }
922827 let mut sent = false;
923828 if let Some(tx) = vm_input_tx.lock().unwrap().clone() {
924829 if tx
@@ -938,26 +843,19 @@ fn manager_event_loop(
938843 shutdown_deadline = None;
939844 hard_deadline = Some(Instant::now() + hard_timeout);
940845 } else {
941− shutdown_deadline =
942− Some(Instant::now() + Duration::from_millis(SHUTDOWN_RETRY_MS));
846+ shutdown_deadline = Some(Instant::now() + Duration::from_millis(500));
943847 }
944848 }
945849 if ref_count == 0
850+ && shutdown_sent
946851 && let Some(deadline) = hard_deadline
947852 && Instant::now() >= deadline
948853 {
949− if shutdown_sent {
950− tracing::warn!(
951− timeout_ms = HARD_SHUTDOWN_TIMEOUT_MS,
952− "force exiting: VM did not stop after shutdown timeout"
953− );
954− } else {
955− tracing::warn!(
956− timeout_ms = HARD_SHUTDOWN_TIMEOUT_MS,
957− "force exiting: VM input not ready after shutdown timeout"
958− );
959− }
960− force_exit("vm manager forced exit");
854+ tracing::warn!(
855+ timeout_ms = HARD_SHUTDOWN_TIMEOUT_MS,
856+ "force exiting: VM did not stop after shutdown timeout"
857+ );
858+ std::process::exit(1);
961859 }
962860 }
963861 Err(mpsc::RecvTimeoutError::Disconnected) => break,
@@ -970,7 +868,7 @@ fn manager_event_loop(
970868#[cfg(test)]
971869mod tests {
972870 use super::*;
973− use std::{fs, sync::mpsc, thread, time::Duration};
871+ use std::{sync::mpsc, time::Duration};
974872
975873 #[test]
976874 fn manager_powers_off_after_grace_when_no_refs() {
@@ -1003,75 +901,4 @@ mod tests {
1003901 let _ = event_tx.send(ManagerEvent::VmExited(None));
1004902 let _ = manager_thread.join();
1005903 }
1006−
1007− #[test]
1008− fn manager_force_exits_when_vm_input_never_ready() {
1009− let (event_tx, event_rx) = mpsc::channel::<ManagerEvent>();
1010− let vm_input_tx = Arc::new(Mutex::new(None));
1011−
1012− let manager_thread = thread::spawn(move || {
1013− let _ = manager_event_loop(event_rx, vm_input_tx, 10);
1014− });
1015−
1016− event_tx.send(ManagerEvent::Inc(None)).unwrap();
1017− event_tx.send(ManagerEvent::Dec(None)).unwrap();
1018−
1019− let join_result = manager_thread.join();
1020− assert!(
1021− join_result.is_err(),
1022− "expected manager to force-exit when vm input never becomes ready"
1023− );
1024− }
1025−
1026− #[test]
1027− fn manager_sends_shutdown_after_vm_input_becomes_ready() {
1028− let (event_tx, event_rx) = mpsc::channel::<ManagerEvent>();
1029− let (vm_tx, vm_rx) = mpsc::channel::<VmInput>();
1030− let vm_input_tx = Arc::new(Mutex::new(None));
1031− let vm_input_for_thread = vm_input_tx.clone();
1032−
1033− let manager_thread = thread::spawn(move || {
1034− manager_event_loop(event_rx, vm_input_for_thread, 10).expect("event loop");
1035− });
1036−
1037− event_tx.send(ManagerEvent::Inc(None)).unwrap();
1038− event_tx.send(ManagerEvent::Dec(None)).unwrap();
1039−
1040− thread::sleep(Duration::from_millis(100));
1041− *vm_input_tx.lock().unwrap() = Some(vm_tx);
1042−
1043− let msg = vm_rx
1044− .recv_timeout(Duration::from_secs(2))
1045− .expect("poweroff");
1046− match msg {
1047− VmInput::Bytes(data) => {
1048− assert_eq!(data, b"systemctl poweroff\n");
1049− }
1050− _ => panic!("unexpected vm input"),
1051− }
1052− let _ = event_tx.send(ManagerEvent::VmExited(None));
1053− let _ = manager_thread.join();
1054− }
1055−
1056− #[test]
1057− fn lock_is_not_stale_when_owner_pid_is_alive() {
1058− let temp = tempfile::Builder::new()
1059− .prefix("vb")
1060− .tempdir_in("/tmp")
1061− .expect("tempdir");
1062− let lock_path = temp.path().join("vm.lock");
1063− fs::write(&lock_path, format!("pid={}\n", std::process::id())).expect("write lock");
1064− assert!(!is_lock_stale(&lock_path));
1065− }
1066−
1067− #[test]
1068− fn lock_is_stale_when_owner_pid_is_missing() {
1069− let temp = tempfile::Builder::new()
1070− .prefix("vb")
1071− .tempdir_in("/tmp")
1072− .expect("tempdir");
1073− let lock_path = temp.path().join("vm.lock");
1074− fs::write(&lock_path, "pid=999999\n").expect("write lock");
1075− assert!(is_lock_stale(&lock_path));
1076− }
1077904}