on 68d3af0 help sign in
.github/workflows/ci.ymldeleted−98
since splitsnapshots
unifiedsplit
@@ -1,98 +0,0 @@
1−name: CI
2−
3−on:
4− push:
5− branches:
6− - "**"
7− paths-ignore:
8− - "README.md"
9− - "CONTRIBUTING.md"
10− - "README.zh.md"
11− - "docs/**"
12− - "install"
13−
14−concurrency:
15− group: ci-${{ github.ref }}
16− cancel-in-progress: true
17−
18−jobs:
19− fmt:
20− name: Format
21− runs-on: macos-latest
22− env:
23− RUST_BACKTRACE: "1"
24− steps:
25− - uses: actions/checkout@v6
26− - name: Install Rust
27− uses: dtolnay/rust-toolchain@stable
28− with:
29− components: rustfmt
30− - name: Cache Rust
31− uses: Swatinem/rust-cache@v2
32− - name: cargo fmt
33− run: cargo fmt --all -- --check
34−
35− clippy:
36− name: Clippy
37− runs-on: macos-latest
38− env:
39− RUST_BACKTRACE: "1"
40− steps:
41− - uses: actions/checkout@v6
42− - name: Install Rust
43− uses: dtolnay/rust-toolchain@stable
44− with:
45− components: clippy
46− - name: Cache Rust
47− uses: Swatinem/rust-cache@v2
48− - name: cargo clippy
49− run: cargo clippy --all-targets --all-features -- -D warnings
50−
51− build:
52− name: Build
53− runs-on: macos-latest
54− env:
55− RUST_BACKTRACE: "1"
56− steps:
57− - uses: actions/checkout@v6
58− - name: Install Rust
59− uses: dtolnay/rust-toolchain@stable
60− - name: Cache Rust
61− uses: Swatinem/rust-cache@v2
62− - name: cargo build
63− run: cargo build --locked
64−
65− test:
66− name: Test
67− runs-on: macos-latest
68− env:
69− RUST_BACKTRACE: "full"
70− steps:
71− - uses: actions/checkout@v6
72− - name: Install Rust
73− uses: dtolnay/rust-toolchain@stable
74− - name: Cache Rust
75− uses: Swatinem/rust-cache@v2
76− - name: cargo test
77− run: cargo test --locked
78−
79− coverage:
80− name: Coverage
81− runs-on: macos-latest
82− needs: [fmt, clippy, build, test]
83− env:
84− RUST_BACKTRACE: "full"
85− steps:
86− - uses: actions/checkout@v6
87− - name: Install Rust
88− uses: dtolnay/rust-toolchain@stable
89− with:
90− components: llvm-tools-preview
91− - name: Cache Rust
92− uses: Swatinem/rust-cache@v2
93− - name: Install cargo-llvm-cov
94− uses: taiki-e/install-action@v2
95− with:
96− tool: cargo-llvm-cov
97− - name: cargo llvm-cov
98− run: cargo llvm-cov --locked --features mock-vm --tests -- --nocapture
.github/workflows/release.ymldeleted−93
@@ -1,93 +0,0 @@
1−name: Build and Release
2−
3−permissions:
4− contents: write
5−
6−on:
7− push:
8− tags:
9− - "v*.*.*"
10−
11−concurrency:
12− group: release-${{ github.ref }}
13− cancel-in-progress: true
14−
15−jobs:
16− build:
17− runs-on: macos-latest
18−
19− steps:
20− - uses: actions/checkout@v6
21− with:
22− fetch-depth: 0
23−
24− - name: Validate release tag format
25− run: |
26− TAG="${GITHUB_REF_NAME}"
27− if [[ ! "$TAG" =~ ^v[0-9]+\.[0-9]+\.[0-9]+(-[A-Za-z]+)?$ ]]; then
28− echo "Tag '$TAG' does not match required format vX.X.X or vX.X.X-word"
29− exit 1
30− fi
31−
32− - name: Install Rust
33− uses: dtolnay/rust-toolchain@stable
34−
35− - name: Cache Rust
36− uses: Swatinem/rust-cache@v2
37−
38− - name: Resolve target commit
39− run: |
40− TARGET_SHA="$(git rev-list -n 1 "${GITHUB_REF_NAME}")"
41− echo "TARGET_SHA=$TARGET_SHA" >> "$GITHUB_ENV"
42−
43− - name: Verify CI passed
44− env:
45− GH_TOKEN: ${{ secrets.GITHUB_TOKEN }}
46− run: |
47− COUNT="$(gh run list --workflow ci.yml --commit "$TARGET_SHA" --json conclusion,createdAt --jq 'length')"
48− if [ "$COUNT" -eq 0 ]; then
49− echo "No CI runs found for commit $TARGET_SHA"
50− exit 1
51− fi
52− CONCLUSION="$(gh run list --workflow ci.yml --commit "$TARGET_SHA" --json conclusion,createdAt --jq '.[0].conclusion')"
53− if [ "$CONCLUSION" != "success" ]; then
54− echo "Latest CI run for commit $TARGET_SHA is $CONCLUSION"
55− exit 1
56− fi
57−
58− - name: Build release binary
59− run: cargo build --release --locked
60−
61− - name: Publish crate
62− env:
63− CARGO_REGISTRY_TOKEN: ${{ secrets.CARGO_REGISTRY_TOKEN }}
64− run: cargo publish --locked
65−
66− - name: Package binary
67− run: |
68− cd target/release
69− zip vibebox-macos-arm64.zip vibebox
70−
71− - name: Create tag release
72− run: |
73− gh release create "${{ github.ref_name }}" \
74− --title "${{ github.ref_name }}" \
75− --notes "Built from commit $TARGET_SHA" \
76− target/release/vibebox-macos-arm64.zip
77− env:
78− GH_TOKEN: ${{ secrets.GITHUB_TOKEN }}
79−
80− - name: Delete existing latest release
81− run: gh release delete latest --cleanup-tag --yes || true
82− env:
83− GH_TOKEN: ${{ secrets.GITHUB_TOKEN }}
84−
85− - name: Create latest release
86− run: |
87− gh release create latest \
88− --title "Latest" \
89− --notes "Built from commit $TARGET_SHA" \
90− --prerelease \
91− target/release/vibebox-macos-arm64.zip
92− env:
93− GH_TOKEN: ${{ secrets.GITHUB_TOKEN }}
CONTRIBUTING.mddeleted−44
@@ -1,44 +0,0 @@
1−# Contributing to Vibebox
2−
3−Thanks for your interest in contributing! This guide keeps PRs small, reviewable, and consistent with the project’s
4−development workflow.
5−
6−**Prerequisites**
7−
8−- macOS on Apple Silicon (required for the virtualization backend)
9−- Rust `1.91.1` or newer (see `Cargo.toml`)
10−
11−**Getting Started**
12−
13−1. Fork the repo and create a feature branch.
14−2. Build once to validate your toolchain:
15−
16−```bash
17−cargo build --locked
18−```
19−
20−**Development Commands**
21−
22−- Format: `cargo fmt --all -- --check`
23−- Lint: `cargo clippy --all-targets --all-features -- -D warnings`
24−- Test: `cargo test --locked`
25−- Build: `cargo build --locked`
26−
27−**Submitting Changes**
28−
29−- Keep changes focused and scoped to one problem.
30−- Update or add tests when behavior changes.
31−- If you change user-facing behavior, update docs or help text.
32−- Avoid adding heavy dependencies without a clear reason.
33−
34−**Reporting Issues**
35−Please include:
36−
37−- macOS version and hardware (Apple Silicon model)
38−- Vibebox version (`vibebox --version`)
39−- Steps to reproduce
40−- Logs from `.vibebox/cli.log`, `.vibebox/vm_root.log` and `.vibebox/vm_manager.log`
41−
42−**Security**
43−If you believe you’ve found a security issue, please avoid public disclosure. Open a private report via GitHub Security
44−Advisories instead.
Cargo.lock+1−93
@@ -82,27 +82,6 @@ dependencies = [
82 "windows-sys 0.61.2",
82 "windows-sys 0.61.2",
83]
83]
84
84
85−[[package]]
86−name = "anyhow"
87−version = "1.0.101"
88−source = "registry+https://github.com/rust-lang/crates.io-index"
89−checksum = "5f0e0fee31ef5ed1ba1316088939cea399010ed7731dba877ed44aeb407a75ea"
90−
91−[[package]]
92−name = "assert_cmd"
93−version = "2.1.2"
94−source = "registry+https://github.com/rust-lang/crates.io-index"
95−checksum = "9c5bcfa8749ac45dd12cb11055aeeb6b27a3895560d60d71e3c23bf979e60514"
96−dependencies = [
97− "anstyle",
98− "bstr",
99− "libc",
100− "predicates",
101− "predicates-core",
102− "predicates-tree",
103− "wait-timeout",
104−]
105−
106[[package]]
85[[package]]
107name = "backtrace"
86name = "backtrace"
108version = "0.3.76"
87version = "0.3.76"
@@ -133,32 +112,12 @@ dependencies = [
133 "objc2",
112 "objc2",
134]
113]
135
114
136−[[package]]
137−name = "bstr"
138−version = "1.12.1"
139−source = "registry+https://github.com/rust-lang/crates.io-index"
140−checksum = "63044e1ae8e69f3b5a92c736ca6269b8d12fa7efe39bf34ddb06d102cf0e2cab"
141−dependencies = [
142− "memchr",
143− "regex-automata",
144− "serde",
145−]
146−
147[[package]]
115[[package]]
148name = "bumpalo"
116name = "bumpalo"
149version = "3.19.1"
117version = "3.19.1"
150source = "registry+https://github.com/rust-lang/crates.io-index"
118source = "registry+https://github.com/rust-lang/crates.io-index"
151checksum = "5dd9dc738b7a8311c7ade152424974d8115f2cdad61e8dab8dac9f2362298510"
119checksum = "5dd9dc738b7a8311c7ade152424974d8115f2cdad61e8dab8dac9f2362298510"
152
120
153−[[package]]
154−name = "bytesize"
155−version = "2.3.1"
156−source = "registry+https://github.com/rust-lang/crates.io-index"
157−checksum = "6bd91ee7b2422bcb158d90ef4d14f75ef67f340943fc4149891dcce8f8b972a3"
158−dependencies = [
159− "serde_core",
160−]
161−
162[[package]]
121[[package]]
163name = "cassowary"
122name = "cassowary"
164version = "0.3.0"
123version = "0.3.0"
@@ -362,12 +321,6 @@ dependencies = [
362 "zeroize",
321 "zeroize",
363]
322]
364
323
365−[[package]]
366−name = "difflib"
367−version = "0.4.0"
368−source = "registry+https://github.com/rust-lang/crates.io-index"
369−checksum = "6184e33543162437515c2e2b48714794e37845ec9851711914eec9d308f6ebe8"
370−
371[[package]]
324[[package]]
372name = "dispatch2"
325name = "dispatch2"
373version = "0.3.0"
326version = "0.3.0"
@@ -784,33 +737,6 @@ version = "0.2.0"
784source = "registry+https://github.com/rust-lang/crates.io-index"
737source = "registry+https://github.com/rust-lang/crates.io-index"
785checksum = "439ee305def115ba05938db6eb1644ff94165c5ab5e9420d1c1bcedbba909391"
738checksum = "439ee305def115ba05938db6eb1644ff94165c5ab5e9420d1c1bcedbba909391"
786
739
787−[[package]]
788−name = "predicates"
789−version = "3.1.3"
790−source = "registry+https://github.com/rust-lang/crates.io-index"
791−checksum = "a5d19ee57562043d37e82899fade9a22ebab7be9cef5026b07fda9cdd4293573"
792−dependencies = [
793− "anstyle",
794− "difflib",
795− "predicates-core",
796−]
797−
798−[[package]]
799−name = "predicates-core"
800−version = "1.0.9"
801−source = "registry+https://github.com/rust-lang/crates.io-index"
802−checksum = "727e462b119fe9c93fd0eb1429a5f7647394014cf3c04ab2c0350eeb09095ffa"
803−
804−[[package]]
805−name = "predicates-tree"
806−version = "1.0.12"
807−source = "registry+https://github.com/rust-lang/crates.io-index"
808−checksum = "72dd2d6d381dfb73a193c7fca536518d7caee39fc8503f74e7dc0be0531b425c"
809−dependencies = [
810− "predicates-core",
811− "termtree",
812−]
813−
814[[package]]
740[[package]]
815name = "proc-macro2"
741name = "proc-macro2"
816version = "1.0.106"
742version = "1.0.106"
@@ -1081,12 +1007,6 @@ dependencies = [
1081 "windows-sys 0.61.2",
1007 "windows-sys 0.61.2",
1082]
1008]
1083
1009
1084−[[package]]
1085−name = "termtree"
1086−version = "0.5.1"
1087−source = "registry+https://github.com/rust-lang/crates.io-index"
1088−checksum = "8f50febec83f5ee1df3015341d8bd429f2d1cc62bcba7ea2076759d315084683"
1089−
1090[[package]]
1010[[package]]
1091name = "thiserror"
1011name = "thiserror"
1092version = "2.0.18"
1012version = "2.0.18"
@@ -1318,12 +1238,9 @@ checksum = "ba73ea9cf16a25df0c8caa16c51acb937d5712a8429db78a3ee29d5dcacd3a65"
1318
1238
1319[[package]]
1239[[package]]
1320name = "vibebox"
1240name = "vibebox"
1321−version = "0.3.2"
1241+version = "0.1.0"
1322dependencies = [
1242dependencies = [
1323− "anyhow",
1324− "assert_cmd",
1325 "block2",
1243 "block2",
1326− "bytesize",
1327 "clap",
1244 "clap",
1328 "color-eyre",
1245 "color-eyre",
1329 "crossterm",
1246 "crossterm",
@@ -1344,15 +1261,6 @@ dependencies = [
1344 "uuid",
1261 "uuid",
1345]
1262]
1346
1263
1347−[[package]]
1348−name = "wait-timeout"
1349−version = "0.2.1"
1350−source = "registry+https://github.com/rust-lang/crates.io-index"
1351−checksum = "09ac3b126d3914f9849036f826e054cbabdc8519970b8998ddaf3b5bd3c65f11"
1352−dependencies = [
1353− "libc",
1354−]
1355−
1356[[package]]
1264[[package]]
1357name = "wasi"
1265name = "wasi"
1358version = "0.11.1+wasi-snapshot-preview1"
1266version = "0.11.1+wasi-snapshot-preview1"
Cargo.toml+7−25
@@ -1,20 +1,11 @@
1[package]
1[package]
2name = "vibebox"
2name = "vibebox"
3−version = "0.3.2"
3+version = "0.1.0"
4edition = "2024"
4edition = "2024"
5−authors = ["Finn Sheng"]
6−description = "Ultrafast CLI on Apple Silicon macOS for fast, sandboxed development and LLM agents."
7−homepage = "https://github.com/robcholz/vibebox"
8−repository = "https://github.com/robcholz/vibebox"
9−readme = "README.md"
10−license = "MIT"
11−categories = ["virtualization","command-line-utilities"]
12−keywords = ["virtualization", "ai", "macos", "agent", "sandbox"]
13−rust-version = "1.91.1"
14
5
15[dependencies]
6[dependencies]
16−objc2 = "0.6.3"
7+objc2 = "*"
17−objc2-foundation = { version = "0.3.2", features = [
8+objc2-foundation = { version = "*", features = [
18 "NSArray",
9 "NSArray",
19 "NSString",
10 "NSString",
20 "NSURL",
11 "NSURL",
@@ -25,10 +16,10 @@ objc2-foundation = { version = "0.3.2", features = [
25 "NSRunLoop",
16 "NSRunLoop",
26 "NSObject",
17 "NSObject",
27] }
18] }
28−objc2-virtualization = "0.3.2"
19+objc2-virtualization = "*"
29−block2 = "0.6.2"
20+block2 = "*"
30−dispatch2 = "0.3.0"
21+dispatch2 = "*"
31−libc = "0.2.180"
22+libc = "*"
32clap = { version = "4", features = ["derive"] }
23clap = { version = "4", features = ["derive"] }
33serde = { version = "1", features = ["derive"] }
24serde = { version = "1", features = ["derive"] }
34tempfile = "3"
25tempfile = "3"
@@ -42,12 +33,3 @@ ratatui = { version = "0.29.0", features = ["unstable-rendered-line-info"] }
42tracing = "0.1"
33tracing = "0.1"
43tracing-subscriber = { version = "0.3", features = ["env-filter"] }
34tracing-subscriber = { version = "0.3", features = ["env-filter"] }
44dialoguer = "0.12.0"
35dialoguer = "0.12.0"
45−bytesize = {version = "2.3.1",features = ["serde"]}
46−anyhow = "1.0.101"
47−
48−[dev-dependencies]
49−assert_cmd = "2"
50−tempfile = "3"
51−
52−[features]
53−mock-vm = []
README.mddeleted−223
@@ -1,223 +0,0 @@
1−<p align="center">
2− <a href="https://vibebox.robcholz.com">
3− <picture>
4− <img src="docs/banner.png" alt="VibeBox logo">
5− </picture>
6− </a>
7−</p>
8−<p align="center">an ultrafast, open-source sandbox for running coding agents safely.</p>
9−
10−<p align="center">
11− <a href="https://crates.io/crates/vibebox">
12− <img alt="Crates.io" src="https://img.shields.io/crates/v/vibebox.svg">
13− </a>
14− <a href="https://github.com/robcholz/vibebox/blob/main/LICENSE">
15− <img alt="MIT licensed" src="https://img.shields.io/badge/license-MIT-blue.svg">
16− </a>
17− <a href="https://github.com/robcholz/vibebox/actions?query=workflow%3ACI+branch%3Amain">
18− <img alt="Build Status" src="https://github.com/robcholz/vibebox/workflows/CI/badge.svg">
19− </a>
20−</p>
21−
22−<p align="center">
23− <a href="README.md">English</a> |
24− <a href="README.zh.md">简体中文</a>
25−</p>
26−
27−**VibeBox is a per-project micro-VM sandbox for running coding agents on macOS (Apple Virtualization Framework).**
28−It’s optimized for a *daily-driver* workflow: fast warm re-entry, explicit mounts, and reusable sessions.
29−
30−**Who it’s for:** macOS users running coding agents who want real isolation without giving up a fast daily workflow.
31−
32−**Quick facts:** warm re-entry is typically **<5s** on my M3 (varies by machine/cache); first run downloads and
33−provisions a Debian base image (network dependent).
34−
35−**Security model:** Linux guest VM with explicit mount allowlists from `vibebox.toml` (repo-first, everything else
36−opt-in).
37−
38−- **enter/attach in seconds:** `vibebox` drops you into a reusable sandbox for the current repo
39−- **project-scoped by default:** explicit mounts + repo-contained changes (repo-first, everything else is allowlisted)
40−- **sessioned:** multi-instance + session management (reuse, multiple terminals, cleanup)
41−
42−### Quick Demo
43−
44−```bash
45−# from any repo
46−cd my-project
47−vibebox
48−```
49−
50−What you should see (roughly):
51−
52−```text
53−vibebox: starting (session: my-project)
54−vibebox: attaching...
55−vibecoder@vibebox:~/my-project$
56−```
57−
58−[![VibeBox Terminal UI](docs/screenshot.png)](https://vibebox.robcholz.com)
59−
60−---
61−
62−### Why I built VibeBox
63−
64−I use coding agents daily, and I wanted to give them a real shell without handing them my host machine.
65−Lock things down and you get nonstop confirmations; loosen it up and you worry about deleting files, touching secrets,
66−or wandering outside the repo.
67−
68−VibeBox is the middle ground: a per-repo sandbox with a hard VM boundary, fast re-entry, and explicit mounts. It’s built
69−to be “always on” for agent work without turning safety into a chore.
70−
71−### Why a micro-VM (vs containers)?
72−
73−Containers are great. VibeBox isn’t trying to replace Docker/devcontainers for building services.
74−
75−I specifically wanted a VM-shaped default for agent workflows on macOS:
76−
77−- **guest-kernel isolation boundary by default:** when I’m letting an agent run arbitrary commands, I want “safe mode”
78− to
79− be a Linux guest, not my host.
80−- **sessions as a first-class workflow:** attach/reuse per repo, multiple terminals into the same sandbox, reliable
81− cleanup to avoid orphan environments.
82−- **explicit mount allowlists as the primary UX:** repo-scoped by default; anything else is an explicit decision.
83−- **minimal per-repo setup:** you *can* reproduce parts of this with compose/devcontainers, but I wanted a single
84− command
85− that works repo-to-repo without maintaining container configs for the basic “safe shell” workflow.
86−
87−### Comparison
88−
89−Here’s why I didn’t just use existing options:
90−
91−- **vibe**: super convenient and nails “zero-config, just go”. VibeBox is intentionally on a different axis: per-repo
92− config + sessions + multi-instance lifecycle.
93−- **QEMU**: powerful, but the configuration surface area is huge. For day-to-day sandboxing it’s not “open a repo and
94− go” — it’s a project on its own.
95−- **Docker / devcontainers / devpods**: great ecosystem. My friction wasn’t raw startup time, it was the day-to-day
96− overhead of keeping per-repo agent sandboxes *safe-by-default* (mount allowlists, secrets exposure, attach/reuse,
97− cleanup) without maintaining container configs per repo for the basic workflow.
98−
99−That’s what pushed me to build **VibeBox**: I wanted a per-project sandbox that’s fast to enter (just `vibebox`),
100−supports real configuration + sessions, and keeps a hard isolation boundary.
101−
102−### Installation
103−
104−```bash
105−# install script
106−curl -fsSL https://raw.githubusercontent.com/robcholz/vibebox/main/install | bash
107−
108−# package managers
109−cargo install vibebox
110−
111−# manual install
112−curl -LO https://github.com/robcholz/vibebox/releases/download/latest/vibebox-macos-arm64.zip
113−unzip vibebox-macos-arm64.zip
114−mkdir -p ~/.local/bin
115−mv vibebox ~/.local/bin
116−export PATH="$HOME/.local/bin:$PATH"
117−```
118−
119−**Requirements**
120−
121−- macOS on Apple Silicon (VibeBox uses Apple's virtualization APIs).
122−
123−**First Run**
124−
125−The first `vibebox` run downloads a Debian base image and provisions it. After that, per-project instances reuse the
126−cached base image for much faster startups.
127−
128−### Documentation
129−
130−**Quick Start**
131−
132−```bash
133−cd /path/to/your/project
134−vibebox
135−```
136−
137−On first run, VibeBox creates `vibebox.toml` in your project (if missing) and a `.vibebox/` directory for instance data.
138−
139−**Configuration (`vibebox.toml`)**
140−
141−`vibebox.toml` lives in your project root by default. You can override it with `vibebox -c path/to/vibebox.toml` or the
142−`VIBEBOX_CONFIG_PATH` env var, but the path must stay inside the project directory.
143−
144−Default config (auto-created when missing):
145−
146−```toml
147−[box]
148−cpu_count = 2
149−ram_mb = 2048
150−disk_gb = 5
151−mounts = [
152− "~/.codex:~/.codex:read-write",
153− "~/.claude:~/.claude:read-write",
154−]
155−
156−[supervisor]
157−auto_shutdown_ms = 20000
158−```
159−
160−`disk_gb` is only applied when the instance disk is first created. If you change it later, run `vibebox reset` to
161−recreate the disk.
162−
163−**Mounts**
164−
165−- Your project is mounted read-write at `~/<project-name>`, and the shell starts there.
166−- If a `.git` directory exists, it is masked with a tmpfs mount inside the VM to discourage accidental edits from the
167− guest.
168−- Extra mounts come from `box.mounts` with the format `host:guest[:read-only|read-write]`.
169−- Host paths support `~` expansion. Relative guest paths are treated as `/root/<path>`.
170−- Guest paths that use `~` are linked into `/home/<ssh-user>` for convenience. Run `vibebox explain` to see the resolved
171− host/guest mappings.
172−
173−**CLI Commands**
174−
175−```bash
176−vibebox # start or attach to the current project VM
177−vibebox list # list known project sessions
178−vibebox reset # delete .vibebox for this project and recreate on next run
179−vibebox purge-cache # delete the global cache (~/.cache/vibebox)
180−vibebox explain # show mounts and network info
181−```
182−
183−**Inside the VM**
184−
185−- Default SSH user: `vibecoder`
186−- Hostname: `vibebox`
187−- Base image provisioning installs: build tools, `git`, `curl`, `ripgrep`, `openssh-server`, and `sudo`.
188−- On first login, VibeBox installs `mise` and configures tools like `uv`, `node`, `@openai/codex`, and
189− `@anthropic-ai/claude-code` (best-effort).
190−- Shell aliases: `:help` and `:exit`.
191−
192−**State & Cache**
193−
194−- Project state lives in `.vibebox/` (instance disk, SSH keys, logs, manager socket/pid). `vibebox reset` removes it.
195−- Global cache lives in `~/.cache/vibebox` (base image + shared guest cache). `vibebox purge-cache` clears it.
196−- Session index lives in `~/.vibebox/sessions` and is shown by `vibebox list`.
197−
198−### Contributing
199−
200−If you're interested in contributing to VibeBox, please read our [contributing docs](CONTRIBUTING.md) before
201−submitting a pull request.
202−
203−### FAQ
204−
205−#### How is this different from other sandboxes?
206−
207−VibeBox is built for fast, repeatable local sandboxes with minimal ceremony. What’s different here:
208−
209−- Warm re-entry is typically **<5s** on my M3 (varies by machine/cache), so you can jump back in quickly.
210−- One simple command — `vibebox` — drops you into the sandbox from your project.
211−- Configuration lives in `vibebox.toml`, where you can set CPU, RAM, disk size, and mounts.
212−- Sessions are first-class: reuse, multiple terminals, cleanup.
213−
214−### Special thanks
215−
216−[vibe](https://github.com/lynaghk/vibe) by lynaghk.
217−
218−And the amazing Rust community — without the ecosystem and toolchain like [crates.io](https://crates.io), this wouldn't
219−be possible!
220−
221−---
222−
223−**Follow me on X** [x.com/robcholz](https://x.com/robcholz)
README.zh.mddeleted−209
@@ -1,209 +0,0 @@
1−<p align="center">
2− <a href="https://vibebox.robcholz.com">
3− <picture>
4− <img src="docs/banner.png" alt="VibeBox logo">
5− </picture>
6− </a>
7−</p>
8−<p align="center">用于安全运行 coding agents 的超高速开源沙盒。</p>
9−
10−<p align="center">
11− <a href="https://crates.io/crates/vibebox">
12− <img alt="Crates.io" src="https://img.shields.io/crates/v/vibebox.svg">
13− </a>
14− <a href="https://github.com/robcholz/vibebox/blob/main/LICENSE">
15− <img alt="MIT licensed" src="https://img.shields.io/badge/license-MIT-blue.svg">
16− </a>
17− <a href="https://github.com/robcholz/vibebox/actions?query=workflow%3ACI+branch%3Amain">
18− <img alt="Build Status" src="https://github.com/robcholz/vibebox/workflows/CI/badge.svg">
19− </a>
20−</p>
21−
22−<p align="center">
23− <a href="README.zh.md">简体中文</a> |
24− <a href="README.md">English</a>
25−</p>
26−
27−**VibeBox 是一个按项目划分的 micro-VM 沙盒,用于在 macOS 上运行 coding agents(基于 Apple Virtualization Framework)。**
28−它面向 *日常使用* 工作流优化:快速热启动、显式挂载、可复用会话。
29−
30−**适合谁:** 在 macOS 上使用 coding agents,并且既想要真实隔离又不想牺牲日常效率的人。
31−
32−**快速事实:** 在我的 M3 上,热启动通常 **<5s**(因机器/缓存而异);首次运行会下载并初始化 Debian 基础镜像(受网络影响)。
33−
34−**安全模型:** Linux 来宾 VM + `vibebox.toml` 显式挂载白名单(默认仅项目目录,其它均需显式允许)。
35−
36−- **几秒进入/附加:** `vibebox` 直接进入当前仓库的可复用沙盒
37−- **默认按项目范围:** 显式挂载 + 改动限制在仓库内(repo 优先,其他需 allowlist)
38−- **会话化:** 多实例 + 会话管理(复用、多终端、清理)
39−
40−### 快速演示
41−
42−```bash
43−# 在任意仓库内
44−cd my-project
45−vibebox
46−```
47−
48−你大致会看到:
49−
50−```text
51−vibebox: starting (session: my-project)
52−vibebox: attaching...
53−vibecoder@vibebox:~/my-project$
54−```
55−
56−[![VibeBox Terminal UI](docs/screenshot.png)](https://vibebox.robcholz.com)
57−
58−---
59−
60−### 我为什么做 VibeBox
61−
62−我每天都在用 coding agents,也希望它们有一个真实的 shell,但不想把宿主机直接交出去。
63−权限收紧会被不停的确认打断;权限放开又担心误删文件、触及密钥,或者跑出仓库边界。
64−
65−VibeBox 是中间方案:按项目隔离、硬 VM 边界、快速回到工作状态、显式挂载。它适合把 agent 当成日常工具,而不是把安全变成负担。
66−
67−### 为什么是 micro-VM(而不是容器)?
68−
69−容器很好用。VibeBox 并不是用来替代 Docker/devcontainers 去构建服务。
70−
71−我更想要的是在 macOS 上适合 agent 的 VM 默认形态:
72−
73−- **默认是 guest-kernel 隔离边界:** 让 agent 跑任意命令时,“安全模式”是 Linux 来宾而不是宿主机。
74−- **会话是第一等公民:** 按项目附加/复用,多终端进入同一沙盒,可靠清理,避免孤儿环境。
75−- **显式挂载白名单作为主要 UX:** 默认仅项目目录,其它都需显式允许。
76−- **最少的每项目配置:** 你可以用 compose/devcontainers 实现一部分,但我想要的是一个命令,在不同仓库间直接工作,不必维护容器配置来获得基础“安全
77− shell”体验。
78−
79−### 对比
80−
81−下面是我为什么没有直接用现成方案的原因:
82−
83−- **vibe**:非常方便,“零配置、直接用”做得很好。但 VibeBox 走的是另一条路:按项目配置 + 会话 + 多实例生命周期。
84−- **QEMU**:很强大,但配置面太大了。日常当沙箱用,它不像是“进到 repo 就能用”,更像是你得先把它当成一个项目来折腾。
85−- **Docker / devcontainers / devpods**:生态很成熟。我的痛点不在启动时间,而是日常保持
86− safe-by-default(挂载白名单、密钥暴露、附加/复用、清理)的开销,不想为基础 workflow 在每个项目维护容器配置。
87−
88−这就是我做 **VibeBox** 的原因:我想要一个按项目隔离的沙箱,进入快(直接 `vibebox`),支持真实配置 + 会话,同时保持硬隔离边界。
89−
90−### 安装
91−
92−```bash
93−# YOLO:一键安装
94−curl -fsSL https://raw.githubusercontent.com/robcholz/vibebox/main/install | bash
95−
96−# Cargo
97−cargo install vibebox
98−
99−# 或者手动安装
100−curl -LO https://github.com/robcholz/vibebox/releases/download/latest/vibebox-macos-arm64.zip
101−unzip vibebox-macos-arm64.zip
102−mkdir -p ~/.local/bin
103−mv vibebox ~/.local/bin
104−export PATH="$HOME/.local/bin:$PATH"
105−```
106−
107−**系统要求**
108−
109−- Apple Silicon 的 macOS(VibeBox 使用了 Apple 的虚拟化 API)。
110−
111−**首次运行**
112−
113−第一次执行 `vibebox` 会下载 Debian 基础镜像并完成初始化。之后每个项目的实例会复用缓存的基础镜像,
114−启动会快很多。
115−
116−### 文档
117−
118−**快速开始**
119−
120−```bash
121−cd /path/to/your/project
122−vibebox
123−```
124−
125−第一次运行时,如果项目目录里缺少配置,VibeBox 会自动创建 `vibebox.toml`(放在项目根目录),并创建
126−`.vibebox/` 用来保存实例数据。
127−
128−**配置(`vibebox.toml`)**
129−
130−默认情况下,`vibebox.toml` 位于项目根目录。你可以用 `vibebox -c path/to/vibebox.toml` 或设置
131−`VIBEBOX_CONFIG_PATH` 环境变量来覆盖路径,但配置文件必须仍然位于项目目录内部。
132−
133−默认配置(缺失时会自动生成):
134−
135−```toml
136−[box]
137−cpu_count = 2
138−ram_mb = 2048
139−disk_gb = 5
140−mounts = [
141− "~/.codex:~/.codex:read-write",
142− "~/.claude:~/.claude:read-write",
143−]
144−
145−[supervisor]
146−auto_shutdown_ms = 20000
147−```
148−
149−注意:`disk_gb` 只在「首次创建实例磁盘」时生效。之后如果你改了它,需要运行 `vibebox reset` 重新创建磁盘。
150−
151−**挂载(Mounts)**
152−
153−- 你的项目会以读写方式挂载到 `~/<project-name>`,并且 shell 会默认从那里启动。
154−- 如果项目里存在 `.git` 目录,VM 内会用 tmpfs 把它遮住,避免你在 guest 里误操作改到 Git 元数据。
155−- 额外挂载通过 `box.mounts` 配置,格式为 `host:guest[:read-only|read-write]`。
156−- Host 路径支持 `~` 展开;guest 的相对路径会被视为 `/root/<path>`。
157−- guest 路径如果用了 `~`,会为了方便被链接到 `/home/<ssh-user>` 下。你可以运行 `vibebox explain`
158− 查看最终解析后的 host/guest 映射关系。
159−
160−**CLI 命令**
161−
162−```bash
163−vibebox # 启动或连接当前项目的 VM
164−vibebox list # 列出已知的项目会话
165−vibebox reset # 删除当前项目的 .vibebox,下一次运行会重新创建
166−vibebox purge-cache # 删除全局缓存(~/.cache/vibebox)
167−vibebox explain # 显示挂载与网络信息
168−```
169−
170−**在 VM 内部**
171−
172−- 默认 SSH 用户:`vibecoder`
173−- 主机名:`vibebox`
174−- 基础镜像初始化会安装:构建工具、`git`、`curl`、`ripgrep`、`openssh-server`、`sudo`
175−- 首次登录时,VibeBox 会安装 `mise`,并尽力配置 `uv`、`node`、`@openai/codex`、
176− `@anthropic-ai/claude-code` 等工具(best-effort,视网络和环境而定)
177−- Shell 里有两个别名:`:help` 和 `:exit`
178−
179−**状态与缓存**
180−
181−- 项目级状态在 `.vibebox/`(实例磁盘、SSH key、日志、manager socket/pid)。`vibebox reset` 会移除它。
182−- 全局缓存在 `~/.cache/vibebox`(基础镜像 + 共享 guest 缓存)。`vibebox purge-cache` 会清空它。
183−- 会话索引在 `~/.vibebox/sessions`,可以通过 `vibebox list` 查看。
184−
185−### 参与贡献
186−
187−如果你想参与贡献 VibeBox,请先阅读 [贡献指南](CONTRIBUTING.md),再提交 Pull Request。
188−
189−### FAQ
190−
191−#### 它和其它 Sandboxes 有什么不同?
192−
193−VibeBox 追求的是:本地、可复现、启动快、流程简单。主要差异点:
194−
195−- 在我的 M3 上,热启动通常 **<5s**,可以非常快地回到工作状态。
196−- 一个命令——`vibebox`——直接把你带进沙盒(从你的项目目录启动)。
197−- 配置集中在 `vibebox.toml`,CPU / 内存 / 磁盘大小 / 挂载都能一眼看懂、随手改。
198−- 会话是第一等公民:复用、多终端、清理。
199−
200−### 特别鸣谢
201−
202−[vibe](https://github.com/lynaghk/vibe) by lynaghk。
203−
204−以及 Rust 社区。没有你们丰富的 crates 生态和优秀的工具链(比如 [crates.io](https://crates.io)),
205−这个项目不可能这么顺利!Rust教。
206−
207−---
208−
209−**在 X 上关注我** [X.com](https://x.com/robcholz)
docs/banner.pngdeleted

Binary file not shown.

docs/screenshot.pngdeleted

Binary file not shown.

docs/tasks.md+9−14
@@ -25,7 +25,7 @@
255. [x] Implement rendering functions for header, terminal area, input area, completions, and status bar.
255. [x] Implement rendering functions for header, terminal area, input area, completions, and status bar.
266. [x] Implement async event loop (keyboard, resize, tick) with crossterm EventStream + tokio.
266. [x] Implement async event loop (keyboard, resize, tick) with crossterm EventStream + tokio.
277. [x] Add a standalone TUI CLI binary (no main.rs wiring) with placeholder VM info and TODOs for VM integration.
277. [x] Add a standalone TUI CLI binary (no main.rs wiring) with placeholder VM info and TODOs for VM integration.
28−8. [x] Run tests and validate coverage for the new module.
28+8. [ ] Run tests and validate coverage for the new module.
29
29
30## TUI
30## TUI
31
31
@@ -49,23 +49,18 @@
49 4. [x] set up the cli.
49 4. [x] set up the cli.
509. [x] fix ui overlap, and consistency issue.
509. [x] fix ui overlap, and consistency issue.
5110. [x] `purge-cache` to clear the cache.
5110. [x] `purge-cache` to clear the cache.
52−11. [x] intensive integration test.
52+11. [ ] intensive integration test.
53
53
54## Publish
54## Publish
55
55
56−1. [x] write the docs.
56+1. [ ] write the docs.
57−2. [x] setup quick install link.
57+2. [ ] setup quick install link.
58−3. [x] setup website.
58+3. [ ] setup website.
59
59
60## Stage 2
60## Stage 2
61
61
621. [ ] retouch the cli ux.
621. [ ] retouch the cli ux.
63−2. [x] refactor the code.
63+2. [ ] refactor the code.
64−3. [ ] refactor the mount system.
65−4. [x] refactor the vm process lifetime.
66−5. [x] Redirect vm output to log.
64+3. [ ] Redirect vm output to log.
67−6. [x] Redirect vm output to vibebox starting it.
65+4. [ ] Redirect vm output to vibebox starting it.
68−7. [x] use anyhow to sync api.
66+5. [ ] use anyhow to sync api.
69−8. [ ] add support for ipv6.
70−9. [x] use UnixStream instead of status file
71−10. [x] liveness check should also happen when waiting for ssh port
install → install.shrenamed+61−54
@@ -2,7 +2,7 @@
2set -euo pipefail
2set -euo pipefail
3
3
4APP=vibebox
4APP=vibebox
5−REPO_URL="https://github.com/robcholz/vibebox"
5+REPO_URL="https://github.com/opencode-ai/vibebox"
6REQUESTED_VERSION=${VERSION:-}
6REQUESTED_VERSION=${VERSION:-}
7
7
8RED='\033[0;31m'
8RED='\033[0;31m'
@@ -38,58 +38,9 @@ require_cmd() {
38 fi
38 fi
39}
39}
40
40
41+require_cmd cargo "Install Rust (cargo) from https://rustup.rs and retry."
41require_cmd git "Install git and retry."
42require_cmd git "Install git and retry."
42
43
43−ensure_cargo() {
44− if command -v cargo >/dev/null 2>&1; then
45− return 0
46− fi
47−
48− print_message warning "Rust (cargo) is required but not found."
49− print_message info "You should review and approve the Rust installer before proceeding."
50− reply=""
51− if [[ -t 0 ]]; then
52− read -r -p "Install Rust using rustup now? (y/N) " reply
53− elif [[ -r /dev/tty ]]; then
54− read -r -p "Install Rust using rustup now? (y/N) " reply </dev/tty
55− else
56− print_message error "Non-interactive shell: cannot prompt to install Rust."
57− print_message info "Install Rust manually from https://rustup.rs and retry."
58− exit 1
59− fi
60−
61− case "${reply}" in
62− y|Y)
63− if command -v curl >/dev/null 2>&1; then
64− curl --proto '=https' --tlsv1.2 -sSf https://sh.rustup.rs | sh -s -- -y
65− elif command -v wget >/dev/null 2>&1; then
66− wget -qO- https://sh.rustup.rs | sh -s -- -y
67− else
68− print_message error "Missing required command: curl or wget"
69− print_message info "Install Rust manually from https://rustup.rs and retry."
70− exit 1
71− fi
72− # shellcheck source=/dev/null
73− if [[ -f "$HOME/.cargo/env" ]]; then
74− # shellcheck disable=SC1090
75− source "$HOME/.cargo/env"
76− fi
77− ;;
78− *)
79− print_message info "Install Rust manually from https://rustup.rs and retry."
80− exit 1
81− ;;
82− esac
83−
84− if ! command -v cargo >/dev/null 2>&1; then
85− print_message error "Cargo still not available after installation."
86− print_message info "Open a new shell or run: source \"$HOME/.cargo/env\""
87− exit 1
88− fi
89−}
90−
91−ensure_cargo
92−
93CARGO_HOME=${CARGO_HOME:-$HOME/.cargo}
44CARGO_HOME=${CARGO_HOME:-$HOME/.cargo}
94INSTALL_DIR="$CARGO_HOME/bin"
45INSTALL_DIR="$CARGO_HOME/bin"
95
46
@@ -117,10 +68,66 @@ print_message info "Using cargo install from ${ORANGE}${REPO_URL}${GREEN}..."
117
68
118cargo "${install_args[@]}"
69cargo "${install_args[@]}"
119
70
71+add_to_path() {
72+ local config_file=$1
73+ local command=$2
74+
75+ if [[ -w $config_file ]]; then
76+ echo -e "\n# vibebox" >> "$config_file"
77+ echo "$command" >> "$config_file"
78+ print_message info "Added ${ORANGE}${APP}${GREEN} to \$PATH in $config_file"
79+ else
80+ print_message warning "Manually add the directory to $config_file (or similar):"
81+ print_message info " $command"
82+ fi
83+}
84+
85+XDG_CONFIG_HOME=${XDG_CONFIG_HOME:-$HOME/.config}
86+current_shell=$(basename "$SHELL")
87+
88+case $current_shell in
89+ fish)
90+ config_files="$HOME/.config/fish/config.fish"
91+ ;;
92+ zsh)
93+ config_files="$HOME/.zshrc $HOME/.zshenv $XDG_CONFIG_HOME/zsh/.zshrc $XDG_CONFIG_HOME/zsh/.zshenv"
94+ ;;
95+ bash)
96+ config_files="$HOME/.bashrc $HOME/.bash_profile $HOME/.profile $XDG_CONFIG_HOME/bash/.bashrc $XDG_CONFIG_HOME/bash/.bash_profile"
97+ ;;
98+ ash)
99+ config_files="$HOME/.ashrc $HOME/.profile /etc/profile"
100+ ;;
101+ sh)
102+ config_files="$HOME/.ashrc $HOME/.profile /etc/profile"
103+ ;;
104+ *)
105+ config_files="$HOME/.bashrc $HOME/.bash_profile $XDG_CONFIG_HOME/bash/.bashrc $XDG_CONFIG_HOME/bash/.bash_profile"
106+ ;;
107+esac
108+
109+config_file=""
110+for file in $config_files; do
111+ if [[ -f $file ]]; then
112+ config_file=$file
113+ break
114+ fi
115+done
116+
117+if [[ -z $config_file ]]; then
118+ print_message error "No config file found for $current_shell. Checked files: ${config_files[@]}"
119+ exit 1
120+fi
121+
120if [[ ":$PATH:" != *":$INSTALL_DIR:"* ]]; then
122if [[ ":$PATH:" != *":$INSTALL_DIR:"* ]]; then
121− print_message warning "Cargo bin directory is not on PATH."
123+ case $current_shell in
122− print_message info "Add this to your shell profile if you can't run ${APP}:"
124+ fish)
125+ add_to_path "$config_file" "fish_add_path $INSTALL_DIR"
126+ ;;
127+ *)
123− print_message info " export PATH=$INSTALL_DIR:\$PATH"
128+ add_to_path "$config_file" "export PATH=$INSTALL_DIR:\$PATH"
129+ ;;
130+ esac
124fi
131fi
125
132
126if [ -n "${GITHUB_ACTIONS-}" ] && [ "${GITHUB_ACTIONS}" == "true" ]; then
133if [ -n "${GITHUB_ACTIONS-}" ] && [ "${GITHUB_ACTIONS}" == "true" ]; then
scripts/commit-check.shdeleted−6
@@ -1,6 +0,0 @@
1−#!/usr/bin/env bash
2−set -euo pipefail
3−
4−cargo clippy --all-targets --all-features -- -D warnings
5−cargo fmt --all
6−cargo build --all-targets
src/bin/vibebox-supervisor.rs+7−9
@@ -21,16 +21,14 @@ fn main() -> Result<()> {
21 color_eyre::install()?;
21 color_eyre::install()?;
22
22
23 tracing::info!("starting vm supervisor");
23 tracing::info!("starting vm supervisor");
24− let project_dir = env::current_dir().map_err(|err| color_eyre::eyre::eyre!(err.to_string()))?;
24+ let cwd = env::current_dir().map_err(|err| color_eyre::eyre::eyre!(err.to_string()))?;
25− let config = config::load_config(&project_dir)
25+ let config = config::load_config(&cwd);
26+ let instance_dir = instance::ensure_instance_dir(&cwd)
26 .map_err(|err| color_eyre::eyre::eyre!(err.to_string()))?;
27 .map_err(|err| color_eyre::eyre::eyre!(err.to_string()))?;
27− let _ = instance::ensure_instance_dir(&project_dir)
28− .map_err(|err| color_eyre::eyre::eyre!(err.to_string()))?;
29− let _ = instance::touch_last_active(&project_dir);
28+ let _ = instance::touch_last_active(&instance_dir);
30 let args = vm::VmArg {
29 let args = vm::VmArg {
31 cpu_count: config.box_cfg.cpu_count,
30 cpu_count: config.box_cfg.cpu_count,
32− ram_bytes: config.box_cfg.ram_size.as_u64(),
31+ ram_bytes: config.box_cfg.ram_mb.saturating_mul(1024 * 1024),
33− disk_bytes: config.box_cfg.disk_size.as_u64(),
34 no_default_mounts: false,
32 no_default_mounts: false,
35 mounts: config.box_cfg.mounts.clone(),
33 mounts: config.box_cfg.mounts.clone(),
36 };
34 };
@@ -38,7 +36,7 @@ fn main() -> Result<()> {
38 tracing::info!(auto_shutdown_ms, "vm supervisor config");
36 tracing::info!(auto_shutdown_ms, "vm supervisor config");
39
37
40 let result = vm_manager::run_manager(args, auto_shutdown_ms);
38 let result = vm_manager::run_manager(args, auto_shutdown_ms);
41− let _ = instance::touch_last_active(&project_dir);
39+ let _ = instance::touch_last_active(&instance_dir);
42 if let Err(err) = result {
40 if let Err(err) = result {
43 tracing::error!(error = %err, "vm supervisor exited");
41 tracing::error!(error = %err, "vm supervisor exited");
44 return Err(color_eyre::eyre::eyre!(err.to_string()));
42 return Err(color_eyre::eyre::eyre!(err.to_string()));
@@ -49,7 +47,7 @@ fn main() -> Result<()> {
49}
47}
50
48
51fn init_tracing() {
49fn init_tracing() {
52− let filter = EnvFilter::try_from_default_env().unwrap_or_else(|_| EnvFilter::new("debug"));
50+ let filter = EnvFilter::try_from_default_env().unwrap_or_else(|_| EnvFilter::new("info"));
53 let stderr_is_tty = std::io::stderr().is_terminal();
51 let stderr_is_tty = std::io::stderr().is_terminal();
54 let ansi = stderr_is_tty && env::var("VIBEBOX_LOG_NO_COLOR").is_err();
52 let ansi = stderr_is_tty && env::var("VIBEBOX_LOG_NO_COLOR").is_err();
55 if stderr_is_tty {
53 if stderr_is_tty {
src/bin/vibebox.rs+86−73
@@ -1,7 +1,3 @@
1−use bytesize::ByteSize;
2−use clap::Parser;
3−use color_eyre::Result;
4−use dialoguer::Confirm;
5use std::{
1use std::{
6 env,
2 env,
7 ffi::OsString,
3 ffi::OsString,
@@ -10,6 +6,10 @@ use std::{
10 path::{Path, PathBuf},
6 path::{Path, PathBuf},
11 sync::{Arc, Mutex},
7 sync::{Arc, Mutex},
12};
8};
9+
10+use clap::Parser;
11+use color_eyre::Result;
12+use dialoguer::Confirm;
13use time::OffsetDateTime;
13use time::OffsetDateTime;
14use time::format_description::well_known::Rfc3339;
14use time::format_description::well_known::Rfc3339;
15use tracing_subscriber::filter::LevelFilter;
15use tracing_subscriber::filter::LevelFilter;
@@ -17,9 +17,8 @@ use tracing_subscriber::registry::Registry;
17use tracing_subscriber::{EnvFilter, fmt, prelude::*, reload};
17use tracing_subscriber::{EnvFilter, fmt, prelude::*, reload};
18
18
19use vibebox::tui::{AppState, VmInfo};
19use vibebox::tui::{AppState, VmInfo};
20−use vibebox::utils::relative_to_home;
21use vibebox::{
20use vibebox::{
22− SessionManager, commands, config, explain, instance, session_manager, tui, vm_manager,
21+ SessionManager, commands, config, explain, instance, session_manager, tui, vm, vm_manager,
23};
22};
24
23
25#[derive(Debug, Parser)]
24#[derive(Debug, Parser)]
@@ -50,33 +49,58 @@ fn main() -> Result<()> {
50 let stderr_handle = init_tracing(&cwd);
49 let stderr_handle = init_tracing(&cwd);
51
50
52 let cli = Cli::parse();
51 let cli = Cli::parse();
53− tracing::debug!(cwd = %cwd.display(), "starting vibebox cli");
52+ tracing::info!(cwd = %cwd.display(), "starting vibebox cli");
54 if let Some(command) = cli.command {
53 if let Some(command) = cli.command {
55 return handle_command(command, &cwd, cli.config.as_deref());
54 return handle_command(command, &cwd, cli.config.as_deref());
56 }
55 }
57
56
58 let config_override = cli.config.clone();
57 let config_override = cli.config.clone();
59 let raw_args: Vec<OsString> = env::args_os().collect();
58 let raw_args: Vec<OsString> = env::args_os().collect();
60− let config = config::load_config_with_path(&cwd, config_override.as_deref())
59+ let config = config::load_config_with_path(&cwd, config_override.as_deref());
61− .map_err(|err| color_eyre::eyre::eyre!(err.to_string()))?;
62
60
61+ if env::var("VIBEBOX_VM_MANAGER").as_deref() == Ok("1") {
62+ tracing::info!("starting vm manager mode");
63+ let args = vm::VmArg {
64+ cpu_count: config.box_cfg.cpu_count,
65+ ram_bytes: config.box_cfg.ram_mb.saturating_mul(1024 * 1024),
66+ no_default_mounts: false,
67+ mounts: config.box_cfg.mounts.clone(),
68+ };
69+ let auto_shutdown_ms = config.supervisor.auto_shutdown_ms;
70+ tracing::info!(auto_shutdown_ms, "vm manager config");
71+ if let Err(err) = vm_manager::run_manager(args, auto_shutdown_ms) {
72+ tracing::error!(error = %err, "vm manager exited");
73+ return Err(color_eyre::eyre::eyre!(err.to_string()));
74+ }
75+ return Ok(());
76+ }
77+
78+ vm::ensure_signed();
79+
80+ let vm_args = vm::VmArg {
81+ cpu_count: config.box_cfg.cpu_count,
82+ ram_bytes: config.box_cfg.ram_mb.saturating_mul(1024 * 1024),
83+ no_default_mounts: false,
84+ mounts: config.box_cfg.mounts.clone(),
85+ };
86+
87+ let auto_shutdown_ms = config.supervisor.auto_shutdown_ms;
63 let vm_info = VmInfo {
88 let vm_info = VmInfo {
64− max_memory: config.box_cfg.ram_size,
89+ max_memory_mb: vm_args.ram_bytes / (1024 * 1024),
65− cpu_cores: config.box_cfg.cpu_count,
90+ cpu_cores: vm_args.cpu_count,
66− max_disk: config.box_cfg.disk_size,
67 system_name: "Debian".to_string(), // TODO: read system name from the VM.
91 system_name: "Debian".to_string(), // TODO: read system name from the VM.
68− auto_shutdown_ms: config.supervisor.auto_shutdown_ms,
92+ auto_shutdown_ms,
69 };
93 };
70 if let Ok(manager) = SessionManager::new() {
94 if let Ok(manager) = SessionManager::new() {
71 if let Err(err) = manager.update_global_sessions(&cwd) {
95 if let Err(err) = manager.update_global_sessions(&cwd) {
72 tracing::warn!(error = %err, "failed to update a global session list");
96 tracing::warn!(error = %err, "failed to update a global session list");
73 }
97 }
74 } else {
98 } else {
75− tracing::error!("failed to initialize session manager");
99+ tracing::warn!("failed to initialize session manager");
76− std::process::exit(1);
77 }
100 }
78 let commands = commands::build_commands();
101 let commands = commands::build_commands();
79 let app = Arc::new(Mutex::new(AppState::new(cwd.clone(), vm_info, commands)));
102 let app = Arc::new(Mutex::new(AppState::new(cwd.clone(), vm_info, commands)));
103+
80 {
104 {
81 let mut locked = app.lock().expect("app state poisoned");
105 let mut locked = app.lock().expect("app state poisoned");
82 tui::render_tui_once(&mut locked)?;
106 tui::render_tui_once(&mut locked)?;
@@ -86,46 +110,23 @@ fn main() -> Result<()> {
86 writeln!(stdout)?;
110 writeln!(stdout)?;
87 stdout.flush()?;
111 stdout.flush()?;
88 }
112 }
89− warn_disk_size_mismatch(&cwd, config.box_cfg.disk_size);
90 if let Some(handle) = stderr_handle {
113 if let Some(handle) = stderr_handle {
91 let _ = handle.modify(|filter| *filter = LevelFilter::INFO);
114 let _ = handle.modify(|filter| *filter = LevelFilter::INFO);
92 }
115 }
93
116
94− tracing::debug!(config.supervisor.auto_shutdown_ms, "auto shutdown config");
117+ tracing::debug!(auto_shutdown_ms, "auto shutdown config");
95− let manager_conn = vm_manager::ensure_manager(
118+ let manager_conn =
96− &raw_args,
97− config.supervisor.auto_shutdown_ms,
98− config_override.as_deref(),
119+ vm_manager::ensure_manager(&raw_args, auto_shutdown_ms, config_override.as_deref())
99− )
100− .map_err(|err| {
101− tracing::error!(error = %err, "failed to ensure vm manager");
102− color_eyre::eyre::eyre!(err.to_string())
120+ .map_err(|err| color_eyre::eyre::eyre!(err.to_string()))?;
103− })?;
104
121
105− if let Err(err) = instance::run_with_ssh(manager_conn) {
122+ instance::run_with_ssh(manager_conn).map_err(|err| color_eyre::eyre::eyre!(err.to_string()))?;
106− if let Some(instance::InstanceError::UnexpectedDisconnection) =
107− err.downcast_ref::<instance::InstanceError>()
108− {
109− tracing::warn!("vm manager disconnected; exiting vibebox");
110− } else if let Some(instance::InstanceError::VMError(vm_error)) =
111− err.downcast_ref::<instance::InstanceError>()
112− {
113− tracing::error!("[vm]: {vm_error}");
114− tracing::info!("vibecoding paused: the VM says today is a rest day 😴");
115− std::process::exit(1);
116− } else {
117− let message = err.to_string();
118− tracing::error!(error = %message, "vibebox exited: uncaught error");
119− return Err(color_eyre::eyre::eyre!(message));
120− }
121− }
122
123
123 tracing::info!("See you again — keep vibecoding (no SEVs, only vibes) 😈");
124 tracing::info!("See you again — keep vibecoding (no SEVs, only vibes) 😈");
124
125
125 Ok(())
126 Ok(())
126}
127}
127
128
128−fn handle_command(command: Command, cwd: &Path, config_override: Option<&Path>) -> Result<()> {
129+fn handle_command(command: Command, cwd: &PathBuf, config_override: Option<&Path>) -> Result<()> {
129 match command {
130 match command {
130 Command::List => {
131 Command::List => {
131 let manager = SessionManager::new()?;
132 let manager = SessionManager::new()?;
@@ -201,14 +202,13 @@ fn handle_command(command: Command, cwd: &Path, config_override: Option<&Path>)
201 "Purged {} file{} totaling {} from {}",
202 "Purged {} file{} totaling {} from {}",
202 file_count,
203 file_count,
203 if file_count == 1 { "" } else { "s" },
204 if file_count == 1 { "" } else { "s" },
204− ByteSize(total_bytes),
205+ format_bytes(total_bytes),
205 cache_dir.display()
206 cache_dir.display()
206 );
207 );
207 Ok(())
208 Ok(())
208 }
209 }
209 Command::Explain => {
210 Command::Explain => {
210− let config = config::load_config_with_path(cwd, config_override)
211+ let config = config::load_config_with_path(cwd, config_override);
211− .map_err(|err| color_eyre::eyre::eyre!(err.to_string()))?;
212 let mounts = explain::build_mount_rows(cwd, &config)
212 let mounts = explain::build_mount_rows(cwd, &config)
213 .map_err(|err| color_eyre::eyre::eyre!(err.to_string()))?;
213 .map_err(|err| color_eyre::eyre::eyre!(err.to_string()))?;
214 let networks = explain::build_network_rows(cwd)
214 let networks = explain::build_network_rows(cwd)
@@ -223,7 +223,7 @@ fn handle_command(command: Command, cwd: &Path, config_override: Option<&Path>)
223 }
223 }
224}
224}
225
225
226−fn project_name(directory: &Path) -> String {
226+fn project_name(directory: &PathBuf) -> String {
227 directory
227 directory
228 .file_name()
228 .file_name()
229 .and_then(|name| name.to_str())
229 .and_then(|name| name.to_str())
@@ -231,6 +231,20 @@ fn project_name(directory: &Path) -> String {
231 .to_string()
231 .to_string()
232}
232}
233
233
234+fn relative_to_home(directory: &PathBuf) -> String {
235+ let Ok(home) = env::var("HOME") else {
236+ return directory.display().to_string();
237+ };
238+ let home_path = PathBuf::from(home);
239+ if let Ok(stripped) = directory.strip_prefix(&home_path) {
240+ if stripped.components().next().is_none() {
241+ return "~".to_string();
242+ }
243+ return format!("~/{}", stripped.display());
244+ }
245+ directory.display().to_string()
246+}
247+
234fn cache_dir() -> Result<PathBuf> {
248fn cache_dir() -> Result<PathBuf> {
235 let home = env::var("HOME").map(PathBuf::from)?;
249 let home = env::var("HOME").map(PathBuf::from)?;
236 let cache_home = env::var("XDG_CACHE_HOME")
250 let cache_home = env::var("XDG_CACHE_HOME")
@@ -279,6 +293,23 @@ fn measure_dir(path: &Path) -> Result<(u64, u64)> {
279 Ok((file_count, total_bytes))
293 Ok((file_count, total_bytes))
280}
294}
281
295
296+fn format_bytes(bytes: u64) -> String {
297+ const KB: f64 = 1024.0;
298+ const MB: f64 = KB * 1024.0;
299+ const GB: f64 = MB * 1024.0;
300+
301+ let b = bytes as f64;
302+ if b >= GB {
303+ format!("{:.2} GB", b / GB)
304+ } else if b >= MB {
305+ format!("{:.1} MB", b / MB)
306+ } else if b >= KB {
307+ format!("{:.1} KB", b / KB)
308+ } else {
309+ format!("{} B", bytes)
310+ }
311+}
312+
282fn format_last_active(value: Option<&str>) -> String {
313fn format_last_active(value: Option<&str>) -> String {
283 let Some(raw) = value else {
314 let Some(raw) = value else {
284 return "-".to_string();
315 return "-".to_string();
@@ -292,6 +323,7 @@ fn format_last_active(value: Option<&str>) -> String {
292 if seconds < 0 {
323 if seconds < 0 {
293 seconds = 0;
324 seconds = 0;
294 }
325 }
326+ let seconds = seconds as i64;
295 let week_seconds = 7 * 24 * 60 * 60;
327 let week_seconds = 7 * 24 * 60 * 60;
296 if seconds >= week_seconds {
328 if seconds >= week_seconds {
297 let formatted =
329 let formatted =
@@ -320,37 +352,18 @@ fn format_last_active(value: Option<&str>) -> String {
320 format!("{} day{} ago", days, if days == 1 { "" } else { "s" })
352 format!("{} day{} ago", days, if days == 1 { "" } else { "s" })
321}
353}
322
354
323−fn warn_disk_size_mismatch(cwd: &Path, configured_size: ByteSize) {
324− let instance_raw = cwd
325− .join(session_manager::INSTANCE_DIR_NAME)
326− .join("instance.raw");
327− let Ok(meta) = fs::metadata(&instance_raw) else {
328− return;
329− };
330− let current_size = ByteSize::b(meta.len());
331− if current_size == configured_size {
332− return;
333− }
334− tracing::warn!(
335− "instance disk size does not match config (current {}, config {}). \
336−disk_gb applies only on init. Run `vibebox reset` to recreate or set disk_gb to match; using the existing disk.",
337− current_size,
338− configured_size,
339− );
340−}
341−
342type StderrHandle = reload::Handle<LevelFilter, Registry>;
355type StderrHandle = reload::Handle<LevelFilter, Registry>;
343
356
344fn init_tracing(cwd: &Path) -> Option<StderrHandle> {
357fn init_tracing(cwd: &Path) -> Option<StderrHandle> {
345− let filter = EnvFilter::try_from_default_env().unwrap_or_else(|_| EnvFilter::new("debug"));
358+ let filter = EnvFilter::try_from_default_env().unwrap_or_else(|_| EnvFilter::new("info"));
346 let file_filter = filter.clone();
359 let file_filter = filter.clone();
347− let stderr_is_tty = io::stderr().is_terminal();
360+ let stderr_is_tty = std::io::stderr().is_terminal();
348 let ansi = stderr_is_tty && env::var("VIBEBOX_LOG_NO_COLOR").is_err();
361 let ansi = stderr_is_tty && env::var("VIBEBOX_LOG_NO_COLOR").is_err();
349 let file = instance::ensure_instance_dir(cwd)
362 let file = instance::ensure_instance_dir(cwd)
350 .ok()
363 .ok()
351 .and_then(|instance_dir| {
364 .and_then(|instance_dir| {
352 let log_path = instance_dir.join("cli.log");
365 let log_path = instance_dir.join("cli.log");
353− fs::OpenOptions::new()
366+ std::fs::OpenOptions::new()
354 .create(true)
367 .create(true)
355 .write(true)
368 .write(true)
356 .truncate(true)
369 .truncate(true)
@@ -359,12 +372,12 @@ fn init_tracing(cwd: &Path) -> Option<StderrHandle> {
359 });
372 });
360
373
361 if stderr_is_tty {
374 if stderr_is_tty {
362− let (stderr_filter, handle) = reload::Layer::new(LevelFilter::INFO);
375+ let (stderr_filter, handle) = reload::Layer::new(LevelFilter::OFF);
363 let stderr_layer = fmt::layer()
376 let stderr_layer = fmt::layer()
364 .with_target(false)
377 .with_target(false)
365 .with_ansi(ansi)
378 .with_ansi(ansi)
366 .without_time()
379 .without_time()
367− .with_writer(io::stderr)
380+ .with_writer(std::io::stderr)
368 .with_filter(stderr_filter);
381 .with_filter(stderr_filter);
369 let subscriber = tracing_subscriber::registry().with(stderr_layer);
382 let subscriber = tracing_subscriber::registry().with(stderr_layer);
370 if let Some(file) = file {
383 if let Some(file) = file {
@@ -382,7 +395,7 @@ fn init_tracing(cwd: &Path) -> Option<StderrHandle> {
382 let stderr_layer = fmt::layer()
395 let stderr_layer = fmt::layer()
383 .with_target(false)
396 .with_target(false)
384 .with_ansi(ansi)
397 .with_ansi(ansi)
385− .with_writer(io::stderr)
398+ .with_writer(std::io::stderr)
386 .with_filter(filter);
399 .with_filter(filter);
387 let subscriber = tracing_subscriber::registry().with(stderr_layer);
400 let subscriber = tracing_subscriber::registry().with(stderr_layer);
388 if let Some(file) = file {
401 if let Some(file) = file {
src/config.rs+77−472
@@ -1,105 +1,47 @@
1−use anyhow::{Context, Error, Result, bail};
2−use bytesize::ByteSize;
3−use serde::{Deserialize, Serialize};
4use std::{
1use std::{
5 env, fs, io,
2 env, fs, io,
6 path::{Path, PathBuf},
3 path::{Path, PathBuf},
7};
4};
8
5
6+use serde::{Deserialize, Serialize};
7+
9use crate::vm::DirectoryShare;
8use crate::vm::DirectoryShare;
10
9
11−const CONFIG_FILENAME: &str = "vibebox.toml";
10+pub const CONFIG_FILENAME: &str = "vibebox.toml";
12pub const CONFIG_PATH_ENV: &str = "VIBEBOX_CONFIG_PATH";
11pub const CONFIG_PATH_ENV: &str = "VIBEBOX_CONFIG_PATH";
13
12
14const DEFAULT_CPU_COUNT: usize = 2;
13const DEFAULT_CPU_COUNT: usize = 2;
15const DEFAULT_RAM_MB: u64 = 2048;
14const DEFAULT_RAM_MB: u64 = 2048;
16const DEFAULT_AUTO_SHUTDOWN_MS: u64 = 20000;
15const DEFAULT_AUTO_SHUTDOWN_MS: u64 = 20000;
17−const DEFAULT_DISK_GB: u64 = 5;
18
16
19−#[derive(Debug, Clone, Default, Serialize, Deserialize)]
17+#[derive(Debug, Clone, Serialize, Deserialize)]
20pub struct Config {
18pub struct Config {
21 #[serde(rename = "box")]
19 #[serde(rename = "box")]
22 pub box_cfg: BoxConfig,
20 pub box_cfg: BoxConfig,
23 pub supervisor: SupervisorConfig,
21 pub supervisor: SupervisorConfig,
24}
22}
25
23
26−const MI_B: u64 = 1024 * 1024;
24+impl Default for Config {
27−const GI_B: u64 = 1024 * 1024 * 1024;
25+ fn default() -> Self {
28−
26+ Self {
29−mod serde_mb {
27+ box_cfg: BoxConfig::default(),
30− use super::{ByteSize, MI_B};
28+ supervisor: SupervisorConfig::default(),
31− use serde::{Deserialize, Deserializer, Serializer};
32−
33− pub fn serialize<S>(v: &ByteSize, s: S) -> Result<S::Ok, S::Error>
34− where
35− S: Serializer,
36− {
37− let bytes = v.0;
38− if !bytes.is_multiple_of(MI_B) {
39− return Err(serde::ser::Error::custom(
40− "ram_mb must be an integer number of MB",
41− ));
42 }
29 }
43− s.serialize_u64(bytes / MI_B)
44− }
45−
46− pub fn deserialize<'de, D>(d: D) -> Result<ByteSize, D::Error>
47− where
48− D: Deserializer<'de>,
49− {
50− let mb = u64::deserialize(d)?;
51− let bytes = mb
52− .checked_mul(MI_B)
53− .ok_or_else(|| serde::de::Error::custom("ram_mb overflow"))?;
54− Ok(ByteSize(bytes))
55− }
56−}
57−
58−mod serde_gb {
59− use super::{ByteSize, GI_B};
60− use serde::{Deserialize, Deserializer, Serializer};
61−
62− pub fn serialize<S>(v: &ByteSize, s: S) -> Result<S::Ok, S::Error>
63− where
64− S: Serializer,
65− {
66− let bytes = v.0;
67− if !bytes.is_multiple_of(GI_B) {
68− return Err(serde::ser::Error::custom(
69− "disk_gb must be an integer number of GB",
70− ));
71− }
72− s.serialize_u64(bytes / GI_B)
73− }
74−
75− pub fn deserialize<'de, D>(d: D) -> Result<ByteSize, D::Error>
76− where
77− D: Deserializer<'de>,
78− {
79− let gb = u64::deserialize(d)?;
80− let bytes = gb
81− .checked_mul(GI_B)
82− .ok_or_else(|| serde::de::Error::custom("disk_gb overflow"))?;
83− Ok(ByteSize(bytes))
84 }
30 }
85}
31}
86
32
87#[derive(Debug, Clone, Serialize, Deserialize)]
33#[derive(Debug, Clone, Serialize, Deserialize)]
88pub struct BoxConfig {
34pub struct BoxConfig {
89 pub cpu_count: usize,
35 pub cpu_count: usize,
90− #[serde(rename = "ram_mb", with = "serde_mb")]
36+ pub ram_mb: u64,
91− pub ram_size: ByteSize,
92− #[serde(rename = "disk_gb", with = "serde_gb")]
93− pub disk_size: ByteSize,
94 pub mounts: Vec<String>,
37 pub mounts: Vec<String>,
95}
38}
96
39
97impl Default for BoxConfig {
40impl Default for BoxConfig {
98 fn default() -> Self {
41 fn default() -> Self {
99 Self {
42 Self {
100− cpu_count: DEFAULT_CPU_COUNT,
43+ cpu_count: default_cpu_count(),
101− ram_size: ByteSize::mib(DEFAULT_RAM_MB),
44+ ram_mb: default_ram_mb(),
102− disk_size: ByteSize::gib(DEFAULT_DISK_GB),
103 mounts: default_mounts(),
45 mounts: default_mounts(),
104 }
46 }
105 }
47 }
@@ -113,24 +55,36 @@ pub struct SupervisorConfig {
113impl Default for SupervisorConfig {
55impl Default for SupervisorConfig {
114 fn default() -> Self {
56 fn default() -> Self {
115 Self {
57 Self {
116− auto_shutdown_ms: DEFAULT_AUTO_SHUTDOWN_MS,
58+ auto_shutdown_ms: default_auto_shutdown_ms(),
117 }
59 }
118 }
60 }
119}
61}
120
62
63+fn default_cpu_count() -> usize {
64+ DEFAULT_CPU_COUNT
65+}
66+
67+fn default_ram_mb() -> u64 {
68+ DEFAULT_RAM_MB
69+}
70+
71+fn default_auto_shutdown_ms() -> u64 {
72+ DEFAULT_AUTO_SHUTDOWN_MS
73+}
74+
121fn default_mounts() -> Vec<String> {
75fn default_mounts() -> Vec<String> {
122− vec![
76+ Vec::new()
123− "~/.codex:~/.codex:read-write".into(),
124− "~/.claude:~/.claude:read-write".into(),
125− ]
126}
77}
127
78
128pub fn config_path(project_root: &Path) -> PathBuf {
79pub fn config_path(project_root: &Path) -> PathBuf {
129 project_root.join(CONFIG_FILENAME)
80 project_root.join(CONFIG_FILENAME)
130}
81}
131
82
132−pub fn ensure_config_file(project_root: &Path, override_path: Option<&Path>) -> Result<PathBuf> {
83+pub fn ensure_config_file(
84+ project_root: &Path,
85+ override_path: Option<&Path>,
86+) -> Result<PathBuf, io::Error> {
133− let path = resolve_config_path(project_root, override_path)?;
87+ let path = resolve_config_path(project_root, override_path);
134 if !path.exists() {
88 if !path.exists() {
135 let default_config = Config::default();
89 let default_config = Config::default();
136 let contents = toml::to_string_pretty(&default_config).unwrap_or_default();
90 let contents = toml::to_string_pretty(&default_config).unwrap_or_default();
@@ -140,24 +94,32 @@ pub fn ensure_config_file(project_root: &Path, override_path: Option<&Path>) ->
140 Ok(path)
94 Ok(path)
141}
95}
142
96
143−pub fn load_config(project_root: &Path) -> Result<Config> {
97+pub fn load_config(project_root: &Path) -> Config {
144 load_config_with_path(project_root, None)
98 load_config_with_path(project_root, None)
145}
99}
146
100
147−pub fn load_config_with_path(project_root: &Path, override_path: Option<&Path>) -> Result<Config> {
101+pub fn load_config_with_path(project_root: &Path, override_path: Option<&Path>) -> Config {
148− let path =
149− ensure_config_file(project_root, override_path).context("failed to create config")?;
102+ let path = match ensure_config_file(project_root, override_path) {
103+ Ok(path) => path,
104+ Err(err) => die(&format!("failed to create config: {err}")),
105+ };
150− let raw = fs::read_to_string(&path).context("failed to read config")?;
106+ let raw = match fs::read_to_string(&path) {
107+ Ok(raw) => raw,
108+ Err(err) => die(&format!("failed to read config: {err}")),
109+ };
151 let trimmed = raw.trim();
110 let trimmed = raw.trim();
152 tracing::debug!(path = %path.display(), bytes = raw.len(), "loaded vibebox config");
111 tracing::debug!(path = %path.display(), bytes = raw.len(), "loaded vibebox config");
153 if trimmed.is_empty() {
112 if trimmed.is_empty() {
154− bail!(format!(
113+ die(&format!(
155− "config file ({}) is empty. Required fields: [box].cpu_count (integer), [box].ram_mb (integer), [box].disk_gb (integer), [box].mounts (array of strings), [supervisor].auto_shutdown_ms (integer)",
114+ "config file ({}) is empty. Required fields: [box].cpu_count (integer), [box].ram_mb (integer), [box].mounts (array of strings), [supervisor].auto_shutdown_ms (integer)",
156 path.display()
115 path.display()
157 ));
116 ));
158 }
117 }
159
118
160− let value: toml::Value = toml::from_str(trimmed).context("invalid config")?;
119+ let value: toml::Value = match toml::from_str(trimmed) {
120+ Ok(value) => value,
121+ Err(err) => die(&format!("invalid config: {err}")),
122+ };
161 let schema_errors = validate_schema(&value);
123 let schema_errors = validate_schema(&value);
162 if !schema_errors.is_empty() {
124 if !schema_errors.is_empty() {
163 let message = format!(
125 let message = format!(
@@ -165,28 +127,27 @@ pub fn load_config_with_path(project_root: &Path, override_path: Option<&Path>)
165 path.display(),
127 path.display(),
166 schema_errors.join("\n- ")
128 schema_errors.join("\n- ")
167 );
129 );
168− bail!(message);
130+ die(&message);
169 }
131 }
170
132
171− let config: Config = toml::from_str(trimmed).context("invalid config")?;
133+ let config: Config = match toml::from_str(trimmed) {
172− validate_config(&config).map_err(Error::msg)?;
173− Ok(config)
134+ Ok(config) => config,
174−}
135+ Err(err) => die(&format!("invalid config: {err}")),
175−
136+ };
176−fn resolve_config_path(project_root: &Path, override_path: Option<&Path>) -> Result<PathBuf> {
137+ validate_or_exit(&config);
177− let env_override = env::var_os(CONFIG_PATH_ENV).map(PathBuf::from);
138+ config
178− resolve_config_path_inner(project_root, override_path, env_override)
179}
139}
180
140
181−fn resolve_config_path_inner(
182− project_root: &Path,
183− override_path: Option<&Path>,
141+fn resolve_config_path(project_root: &Path, override_path: Option<&Path>) -> PathBuf {
184− env_override: Option<PathBuf>,
185−) -> Result<PathBuf> {
186− let root = fs::canonicalize(project_root).context("failed to resolve project root")?;
142+ let root = match fs::canonicalize(project_root) {
143+ Ok(root) => root,
144+ Err(err) => die(&format!("failed to resolve project root: {err}")),
145+ };
187
146
188− let selected_path = override_path.map(PathBuf::from).or(env_override);
147+ let override_path = override_path
148+ .map(PathBuf::from)
149+ .or_else(|| env::var_os(CONFIG_PATH_ENV).map(PathBuf::from));
189− let raw_path = if let Some(path) = selected_path {
150+ let raw_path = if let Some(path) = override_path {
190 if path.is_absolute() {
151 if path.is_absolute() {
191 path
152 path
192 } else {
153 } else {
@@ -197,50 +158,14 @@ fn resolve_config_path_inner(
197 };
158 };
198
159
199 let normalized = normalize_path(&raw_path);
160 let normalized = normalize_path(&raw_path);
200− let resolved =
201− resolve_path_for_boundary_check(&normalized).context("failed to resolve config path")?;
202− if !resolved.starts_with(&root) {
161+ if !normalized.starts_with(&root) {
203− bail!(
162+ die(&format!(
204 "config path must be within {}: {}",
163 "config path must be within {}: {}",
205 root.display(),
164 root.display(),
206− resolved.display()
207− );
208− }
209− Ok(normalized)
165+ normalized.display()
210−}
211−
212−fn resolve_path_for_boundary_check(path: &Path) -> Result<PathBuf, io::Error> {
213− if path.exists() {
214− return fs::canonicalize(path);
215− }
216− let (ancestor, missing) = nearest_existing_ancestor(path)?;
217− let mut resolved = fs::canonicalize(ancestor)?;
218− for part in missing {
219− resolved.push(part);
220− }
221− Ok(resolved)
222−}
223−
224−fn nearest_existing_ancestor(path: &Path) -> Result<(&Path, Vec<std::ffi::OsString>), io::Error> {
225− let mut current = path;
226− let mut missing = Vec::new();
227− while !current.exists() {
228− let name = current.file_name().ok_or_else(|| {
229− io::Error::new(
230− io::ErrorKind::InvalidInput,
231− format!("path has no existing ancestor: {}", path.display()),
232− )
233− })?;
234− missing.push(name.to_os_string());
235− current = current.parent().ok_or_else(|| {
236− io::Error::new(
237− io::ErrorKind::InvalidInput,
238− format!("path has no parent: {}", path.display()),
239− )
240− })?;
166+ ));
241 }
167 }
242− missing.reverse();
168+ normalized
243− Ok((current, missing))
244}
169}
245
170
246fn normalize_path(path: &Path) -> PathBuf {
171fn normalize_path(path: &Path) -> PathBuf {
@@ -277,7 +202,6 @@ fn validate_schema(value: &toml::Value) -> Vec<String> {
277 Some(table) => {
202 Some(table) => {
278 validate_int(table, "cpu_count", "[box].cpu_count (integer)", &mut errors);
203 validate_int(table, "cpu_count", "[box].cpu_count (integer)", &mut errors);
279 validate_int(table, "ram_mb", "[box].ram_mb (integer)", &mut errors);
204 validate_int(table, "ram_mb", "[box].ram_mb (integer)", &mut errors);
280− validate_int(table, "disk_gb", "[box].disk_gb (integer)", &mut errors);
281 validate_string_array(
205 validate_string_array(
282 table,
206 table,
283 "mounts",
207 "mounts",
@@ -337,343 +261,24 @@ fn validate_string_array(
337 }
261 }
338}
262}
339
263
340−fn validate_config(config: &Config) -> Result<(), String> {
264+fn validate_or_exit(config: &Config) {
341 if config.box_cfg.cpu_count == 0 {
265 if config.box_cfg.cpu_count == 0 {
342− return Err("box.cpu_count must be >= 1".to_string());
266+ die("box.cpu_count must be >= 1");
343− }
344− if config.box_cfg.ram_size.as_mib() == 0.0 {
345− return Err("box.ram_mb must be >= 1".to_string());
346 }
267 }
347− if config.box_cfg.disk_size.as_gib() == 0.0 {
268+ if config.box_cfg.ram_mb == 0 {
348− return Err("box.disk_gb must be >= 1".to_string());
269+ die("box.ram_mb must be >= 1");
349 }
270 }
350 if config.supervisor.auto_shutdown_ms == 0 {
271 if config.supervisor.auto_shutdown_ms == 0 {
351− return Err("supervisor.auto_shutdown_ms must be >= 1".to_string());
272+ die("supervisor.auto_shutdown_ms must be >= 1");
352 }
273 }
353 for spec in &config.box_cfg.mounts {
274 for spec in &config.box_cfg.mounts {
354 if let Err(err) = DirectoryShare::from_mount_spec(spec) {
275 if let Err(err) = DirectoryShare::from_mount_spec(spec) {
355− return Err(format!("invalid mount spec '{spec}': {err}"));
276+ die(&format!("invalid mount spec '{spec}': {err}"));
356 }
277 }
357 }
278 }
358− Ok(())
359}
279}
360
280
361−#[cfg(test)]
281+fn die(message: &str) -> ! {
362−mod tests {
282+ tracing::error!("{message}");
363− use super::*;
283+ std::process::exit(1);
364− use std::ffi::OsString;
365− use std::sync::Mutex;
366− use tempfile::TempDir;
367−
368− static ENV_MUTEX: Mutex<()> = Mutex::new(());
369−
370− struct EnvGuard {
371− key: &'static str,
372− previous: Option<OsString>,
373− }
374−
375− impl EnvGuard {
376− fn set(key: &'static str, value: &Path) -> Self {
377− let previous = env::var_os(key);
378− unsafe {
379− env::set_var(key, value);
380− }
381− Self { key, previous }
382− }
383− }
384−
385− impl Drop for EnvGuard {
386− fn drop(&mut self) {
387− match &self.previous {
388− Some(value) => unsafe {
389− env::set_var(self.key, value);
390− },
391− None => unsafe {
392− env::remove_var(self.key);
393− },
394− }
395− }
396− }
397−
398− #[test]
399− fn default_config_serializes_with_legacy_keys() {
400− let cfg = Config::default();
401− let serialized = toml::to_string(&cfg).expect("default config should serialize");
402−
403− assert!(serialized.contains("ram_mb = 2048"));
404− assert!(serialized.contains("disk_gb = 5"));
405− assert!(!serialized.contains("ram_size"));
406− assert!(!serialized.contains("disk_size"));
407− }
408−
409− #[test]
410− fn config_deserializes_sizes_from_mb_and_gb() {
411− let raw = r#"
412−[box]
413−cpu_count = 4
414−ram_mb = 3072
415−disk_gb = 12
416−mounts = ["~/src:~/src:read-write"]
417−
418−[supervisor]
419−auto_shutdown_ms = 15000
420−"#;
421− let cfg: Config = toml::from_str(raw).expect("config should deserialize");
422−
423− assert_eq!(cfg.box_cfg.cpu_count, 4);
424− assert_eq!(cfg.box_cfg.ram_size.as_u64(), ByteSize::mib(3072).as_u64());
425− assert_eq!(cfg.box_cfg.disk_size.as_u64(), ByteSize::gib(12).as_u64());
426− assert_eq!(cfg.supervisor.auto_shutdown_ms, 15000);
427− }
428−
429− #[test]
430− fn serialize_rejects_non_integral_mb_or_gb() {
431− let cfg = Config {
432− box_cfg: BoxConfig {
433− cpu_count: 2,
434− ram_size: ByteSize::b((2 * MI_B) + 1),
435− disk_size: ByteSize::gib(5),
436− mounts: default_mounts(),
437− },
438− supervisor: SupervisorConfig::default(),
439− };
440−
441− let err = toml::to_string(&cfg).expect_err("serialization should reject invalid MB");
442− assert!(
443− err.to_string()
444− .contains("ram_mb must be an integer number of MB")
445− );
446−
447− let cfg = Config {
448− box_cfg: BoxConfig {
449− cpu_count: 2,
450− ram_size: ByteSize::mib(2048),
451− disk_size: ByteSize::b((5 * GI_B) + 1),
452− mounts: default_mounts(),
453− },
454− supervisor: SupervisorConfig::default(),
455− };
456−
457− let err = toml::to_string(&cfg).expect_err("serialization should reject invalid GB");
458− assert!(
459− err.to_string()
460− .contains("disk_gb must be an integer number of GB")
461− );
462− }
463−
464− #[test]
465− fn normalize_path_removes_dot_and_parent_components() {
466− let normalized = normalize_path(Path::new("/tmp/project/./nested/../config.toml"));
467− assert_eq!(normalized, PathBuf::from("/tmp/project/config.toml"));
468− }
469−
470− #[test]
471− fn validate_schema_returns_errors_for_missing_required_fields() {
472− let value: toml::Value = toml::from_str(
473− r#"
474−[box]
475−cpu_count = 2
476−"#,
477− )
478− .expect("toml should parse");
479−
480− let errors = validate_schema(&value);
481−
482− assert!(errors.iter().any(|e| e == "missing [supervisor] table"));
483− assert!(errors.iter().any(|e| e == "missing [box].ram_mb (integer)"));
484− assert!(
485− errors
486− .iter()
487− .any(|e| e == "missing [box].disk_gb (integer)")
488− );
489− assert!(
490− errors
491− .iter()
492− .any(|e| e == "missing [box].mounts (array of strings)")
493− );
494− }
495−
496− #[test]
497− fn validate_schema_errors_when_supervisor_is_not_table() {
498− let value: toml::Value = toml::from_str(
499− r#"
500−supervisor = 123
501−
502−[box]
503−cpu_count = 2
504−ram_mb = 2048
505−disk_gb = 5
506−mounts = []
507−"#,
508− )
509− .expect("toml should parse");
510−
511− let errors = validate_schema(&value);
512− assert!(errors.iter().any(|e| e == "[supervisor] must be a table"));
513− }
514−
515− #[test]
516− fn ensure_config_file_creates_default_config_if_absent() {
517− let temp = TempDir::new().expect("temp dir should be created");
518− let root = fs::canonicalize(temp.path()).expect("temp dir should canonicalize");
519−
520− let path = ensure_config_file(&root, None).expect("config should be created");
521− let raw = fs::read_to_string(&path).expect("created config should be readable");
522− let parsed: Config = toml::from_str(&raw).expect("created config should be valid");
523−
524− assert_eq!(path, root.join("vibebox.toml"));
525− assert_eq!(parsed.box_cfg.cpu_count, DEFAULT_CPU_COUNT);
526− assert_eq!(
527− parsed.box_cfg.ram_size.as_u64(),
528− ByteSize::mib(DEFAULT_RAM_MB).as_u64()
529− );
530− assert_eq!(
531− parsed.box_cfg.disk_size.as_u64(),
532− ByteSize::gib(DEFAULT_DISK_GB).as_u64()
533− );
534− }
535−
536− #[test]
537− fn load_config_creates_and_loads_default_config() {
538− let _lock = ENV_MUTEX.lock().expect("env lock should be acquired");
539− let temp = TempDir::new().expect("temp dir should be created");
540− let root = fs::canonicalize(temp.path()).expect("temp dir should canonicalize");
541− let home = root.join("home");
542− fs::create_dir_all(home.join(".codex")).expect("home .codex should be created");
543− fs::create_dir_all(home.join(".claude")).expect("home .claude should be created");
544− let _home_guard = EnvGuard::set("HOME", &home);
545−
546− let cfg = load_config(&root).expect("load_config should succeed");
547−
548− assert_eq!(cfg.box_cfg.cpu_count, DEFAULT_CPU_COUNT);
549− assert_eq!(
550− cfg.box_cfg.ram_size.as_u64(),
551− ByteSize::mib(DEFAULT_RAM_MB).as_u64()
552− );
553− assert_eq!(
554− cfg.box_cfg.disk_size.as_u64(),
555− ByteSize::gib(DEFAULT_DISK_GB).as_u64()
556− );
557− assert!(root.join("vibebox.toml").exists());
558− }
559−
560− #[test]
561− fn load_config_with_path_uses_override_path() {
562− let _lock = ENV_MUTEX.lock().expect("env lock should be acquired");
563− let temp = TempDir::new().expect("temp dir should be created");
564− let root = fs::canonicalize(temp.path()).expect("temp dir should canonicalize");
565− let home = root.join("home");
566− fs::create_dir_all(home.join(".codex")).expect("home .codex should be created");
567− fs::create_dir_all(home.join(".claude")).expect("home .claude should be created");
568− let _home_guard = EnvGuard::set("HOME", &home);
569− let override_path = root.join("custom.toml");
570−
571− fs::write(
572− &override_path,
573− r#"
574−[box]
575−cpu_count = 6
576−ram_mb = 4096
577−disk_gb = 9
578−mounts = ["~/.codex:~/.codex:read-write", "~/.claude:~/.claude:read-write"]
579−
580−[supervisor]
581−auto_shutdown_ms = 12345
582−"#,
583− )
584− .expect("override config should be written");
585−
586− let cfg = load_config_with_path(&root, Some(Path::new("custom.toml")))
587− .expect("load_config_with_path should succeed");
588−
589− assert_eq!(cfg.box_cfg.cpu_count, 6);
590− assert_eq!(cfg.box_cfg.ram_size.as_u64(), ByteSize::mib(4096).as_u64());
591− assert_eq!(cfg.box_cfg.disk_size.as_u64(), ByteSize::gib(9).as_u64());
592− assert_eq!(cfg.supervisor.auto_shutdown_ms, 12345);
593− assert!(!root.join("vibebox.toml").exists());
594− }
595−
596− #[test]
597− fn resolve_config_path_uses_env_override_when_cli_override_missing() {
598− let temp = TempDir::new().expect("temp dir should be created");
599− let root = fs::canonicalize(temp.path()).expect("temp dir should canonicalize");
600−
601− let resolved = resolve_config_path_inner(&root, None, Some(PathBuf::from("custom.toml")))
602− .expect("env override path should resolve");
603−
604− assert_eq!(resolved, root.join("custom.toml"));
605− }
606−
607− #[test]
608− fn resolve_config_path_rejects_env_override_outside_project() {
609− let temp = TempDir::new().expect("temp dir should be created");
610− let root = fs::canonicalize(temp.path()).expect("temp dir should canonicalize");
611−
612− let err = resolve_config_path_inner(&root, None, Some(PathBuf::from("../escape.toml")))
613− .expect_err("outside-project path should be rejected");
614−
615− assert!(
616− err.to_string().contains("config path must be within"),
617− "expected bounds-check error, got: {err}"
618− );
619− }
620−
621− #[test]
622− fn validate_config_rejects_invalid_values() {
623− let cfg = Config {
624− box_cfg: BoxConfig {
625− cpu_count: 0,
626− ram_size: ByteSize::mib(2048),
627− disk_size: ByteSize::gib(5),
628− mounts: vec![],
629− },
630− supervisor: SupervisorConfig::default(),
631− };
632− let err = validate_config(&cfg).expect_err("cpu_count=0 should fail");
633− assert_eq!(err, "box.cpu_count must be >= 1");
634−
635− let cfg = Config {
636− box_cfg: BoxConfig {
637− cpu_count: 2,
638− ram_size: ByteSize::mib(2048),
639− disk_size: ByteSize::gib(5),
640− mounts: vec!["/definitely/missing:/tmp/missing:read-write".to_string()],
641− },
642− supervisor: SupervisorConfig::default(),
643− };
644− let err = validate_config(&cfg).expect_err("invalid mount should fail");
645− assert!(err.starts_with("invalid mount spec"));
646− }
647−
648− #[test]
649− fn resolve_config_path_accepts_symlinked_project_root() {
650− let temp = TempDir::new().expect("temp dir should be created");
651− let actual_root = temp.path().join("actual");
652− let link_root = temp.path().join("linked");
653− fs::create_dir_all(&actual_root).expect("actual root should exist");
654− std::os::unix::fs::symlink(&actual_root, &link_root).expect("symlink should be created");
655−
656− let resolved = resolve_config_path_inner(&link_root, Some(Path::new("vibebox.toml")), None)
657− .expect("symlinked project root should resolve");
658−
659− assert_eq!(resolved, link_root.join("vibebox.toml"));
660− }
661−
662− #[test]
663− fn resolve_config_path_rejects_symlink_escape() {
664− let temp = TempDir::new().expect("temp dir should be created");
665− let project_root = temp.path().join("project");
666− let outside_root = temp.path().join("outside");
667− fs::create_dir_all(&project_root).expect("project root should exist");
668− fs::create_dir_all(&outside_root).expect("outside root should exist");
669− std::os::unix::fs::symlink(&outside_root, project_root.join("link"))
670− .expect("escape symlink should be created");
671−
672− let err = resolve_config_path_inner(&project_root, Some(Path::new("link/cfg.toml")), None)
673− .expect_err("symlink escape should be rejected");
674− assert!(
675− err.to_string().contains("config path must be within"),
676− "expected bounds-check error, got: {err}"
677− );
678− }
679}
284}
src/error_report.shdeleted−28
@@ -1,28 +0,0 @@
1−#!/usr/bin/env bash
2−set -Eeuo pipefail
3−__vibebox_err_reported=0
4−__vibebox_report_error() {
5− local rc="$1"
6− local line="$2"
7− local msg="${3:-}"
8− if [ "$__vibebox_err_reported" -eq 0 ]; then
9− msg="${msg//$'\n'/ }"
10− msg="${msg//$'\r'/ }"
11− if [ -n "$msg" ]; then
12− echo "VIBEBOX_SCRIPT_ERROR:__LABEL__:${line}:${rc} ${msg}"
13− else
14− echo "VIBEBOX_SCRIPT_ERROR:__LABEL__:${line}:${rc}"
15− fi
16− __vibebox_err_reported=1
17− fi
18−}
19−vibebox_fail() {
20− local msg="${1:-script failed}"
21− local rc="${2:-1}"
22− __vibebox_report_error "$rc" "${LINENO}" "$msg"
23− exit "$rc"
24−}
25−trap 'rc="$?"; __vibebox_report_error "$rc" "${LINENO}" "command failed: ${BASH_COMMAND:-unknown}"' ERR
26−trap 'rc="$?"; if [ "$rc" -ne 0 ]; then __vibebox_report_error "$rc" "${LINENO}" "script exited with code ${rc}"; fi' EXIT
27−
28−__SCRIPT_BODY__
src/explain.rs+48−33
@@ -1,31 +1,31 @@
1−use crate::instance::InstanceConfig;
2−use crate::utils::relative_to_home;
3−use crate::{config, instance, session_manager, tui};
4−use anyhow::{Context, Result, bail};
5use std::{
1use std::{
6 env,
2 env,
3+ error::Error,
7 path::{Path, PathBuf},
4 path::{Path, PathBuf},
8};
5};
9
6
7+use crate::{config, instance, session_manager, tui};
8+
10−pub fn build_mount_rows(project: &Path, config: &config::Config) -> Result<Vec<tui::MountListRow>> {
9+pub fn build_mount_rows(
10+ cwd: &Path,
11+ config: &config::Config,
12+) -> Result<Vec<tui::MountListRow>, Box<dyn Error + Send + Sync>> {
11 let mut rows = Vec::new();
13 let mut rows = Vec::new();
12− rows.extend(default_mounts(project)?);
14+ rows.extend(default_mounts(cwd)?);
13− let guest_home = resolve_guest_home(project);
15+ let guest_home = resolve_guest_home(cwd)?;
14 for spec in &config.box_cfg.mounts {
16 for spec in &config.box_cfg.mounts {
15− rows.push(parse_mount_spec(project, spec, false, &guest_home)?);
17+ rows.push(parse_mount_spec(cwd, spec, false, &guest_home)?);
16 }
18 }
17 Ok(rows)
19 Ok(rows)
18}
20}
19
21
20−pub fn build_network_rows(project_dir: &Path) -> Result<Vec<tui::NetworkListRow>> {
22+pub fn build_network_rows(
23+ cwd: &Path,
24+) -> Result<Vec<tui::NetworkListRow>, Box<dyn Error + Send + Sync>> {
25+ let instance_dir = cwd.join(session_manager::INSTANCE_DIR_NAME);
21 let mut vm_ip = "-".to_string();
26 let mut vm_ip = "-".to_string();
22− if let Ok(config) = instance::read_instance_config(project_dir) {
27+ if let Ok(Some(ip)) = instance::read_instance_vm_ip(&instance_dir) {
23− match config.vm_ipv4 {
24− None => {}
25− Some(ip) => {
26− vm_ip = ip;
28+ vm_ip = ip;
27− }
28− }
29 }
29 }
30 let host_to_vm = if vm_ip == "-" {
30 let host_to_vm = if vm_ip == "-" {
31 "ssh: <pending>:22".to_string()
31 "ssh: <pending>:22".to_string()
@@ -41,13 +41,13 @@ pub fn build_network_rows(project_dir: &Path) -> Result<Vec<tui::NetworkListRow>
41 Ok(vec![row])
41 Ok(vec![row])
42}
42}
43
43
44−fn default_mounts(cwd: &Path) -> Result<Vec<tui::MountListRow>> {
44+fn default_mounts(cwd: &Path) -> Result<Vec<tui::MountListRow>, Box<dyn Error + Send + Sync>> {
45 let project_name = cwd
45 let project_name = cwd
46 .file_name()
46 .file_name()
47 .and_then(|name| name.to_str())
47 .and_then(|name| name.to_str())
48− .with_context(|| "failed to get project name")?;
48+ .unwrap_or("project");
49− let project_guest = format!("~/{project_name}");
49+ let project_guest = format!("/root/{project_name}");
50− let project_host = relative_to_home(cwd);
50+ let project_host = display_path(cwd);
51 let mut rows = vec![tui::MountListRow {
51 let mut rows = vec![tui::MountListRow {
52 host: project_host,
52 host: project_host,
53 guest: project_guest,
53 guest: project_guest,
@@ -57,14 +57,14 @@ fn default_mounts(cwd: &Path) -> Result<Vec<tui::MountListRow>> {
57
57
58 let home = env::var("HOME")
58 let home = env::var("HOME")
59 .map(PathBuf::from)
59 .map(PathBuf::from)
60− .with_context(|| "failed to get home directory")?;
60+ .unwrap_or_else(|_| PathBuf::from("/"));
61 let cache_home = env::var("XDG_CACHE_HOME")
61 let cache_home = env::var("XDG_CACHE_HOME")
62 .map(PathBuf::from)
62 .map(PathBuf::from)
63 .unwrap_or_else(|_| home.join(".cache"));
63 .unwrap_or_else(|_| home.join(".cache"));
64 let cache_dir = cache_home.join(session_manager::GLOBAL_CACHE_DIR_NAME);
64 let cache_dir = cache_home.join(session_manager::GLOBAL_CACHE_DIR_NAME);
65 let guest_mise_cache = cache_dir.join(".guest-mise-cache");
65 let guest_mise_cache = cache_dir.join(".guest-mise-cache");
66 rows.push(tui::MountListRow {
66 rows.push(tui::MountListRow {
67− host: relative_to_home(&guest_mise_cache),
67+ host: display_path(&guest_mise_cache),
68 guest: "/root/.local/share/mise".to_string(),
68 guest: "/root/.local/share/mise".to_string(),
69 mode: "read-write".to_string(),
69 mode: "read-write".to_string(),
70 default_mount: "yes".to_string(),
70 default_mount: "yes".to_string(),
@@ -77,10 +77,10 @@ fn parse_mount_spec(
77 spec: &str,
77 spec: &str,
78 default_mount: bool,
78 default_mount: bool,
79 guest_home: &str,
79 guest_home: &str,
80−) -> Result<tui::MountListRow> {
80+) -> Result<tui::MountListRow, Box<dyn Error + Send + Sync>> {
81 let parts: Vec<&str> = spec.split(':').collect();
81 let parts: Vec<&str> = spec.split(':').collect();
82 if parts.len() < 2 || parts.len() > 3 {
82 if parts.len() < 2 || parts.len() > 3 {
83− bail!["invalid mount spec: {spec}"];
83+ return Err(format!("invalid mount spec: {spec}").into());
84 }
84 }
85 let host_part = parts[0];
85 let host_part = parts[0];
86 let guest_part = parts[1];
86 let guest_part = parts[1];
@@ -89,10 +89,11 @@ fn parse_mount_spec(
89 "read-only" => "read-only",
89 "read-only" => "read-only",
90 "read-write" => "read-write",
90 "read-write" => "read-write",
91 other => {
91 other => {
92− bail![format!(
92+ return Err(format!(
93 "invalid mount mode '{}'; expected read-only or read-write",
93 "invalid mount mode '{}'; expected read-only or read-write",
94 other
94 other
95− )];
95+ )
96+ .into());
96 }
97 }
97 }
98 }
98 } else {
99 } else {
@@ -115,22 +116,22 @@ fn display_host_spec(cwd: &Path, host: &str) -> String {
115 }
116 }
116 let host_path = PathBuf::from(host);
117 let host_path = PathBuf::from(host);
117 if host_path.is_absolute() {
118 if host_path.is_absolute() {
118− return relative_to_home(&host_path);
119+ return display_path(&host_path);
119 }
120 }
120 let candidate = cwd.join(&host_path);
121 let candidate = cwd.join(&host_path);
121 if candidate.is_absolute() {
122 if candidate.is_absolute() {
122− relative_to_home(&candidate)
123+ display_path(&candidate)
123 } else {
124 } else {
124 host.to_string()
125 host.to_string()
125 }
126 }
126}
127}
127
128
128−fn resolve_guest_home(project_dir: &Path) -> String {
129+fn resolve_guest_home(cwd: &Path) -> Result<String, Box<dyn Error + Send + Sync>> {
129− let config = instance::read_instance_config(project_dir);
130+ let instance_dir = cwd.join(session_manager::INSTANCE_DIR_NAME);
130− match config {
131+ if let Ok(Some(user)) = instance::read_instance_ssh_user(&instance_dir) {
131− Ok(config) => format!("/home/{}", config.ssh_user),
132+ return Ok(format!("/home/{user}"));
132− Err(_) => format!("/home/{}", InstanceConfig::default().ssh_user),
133 }
133 }
134+ Ok(format!("/home/{}", instance::DEFAULT_SSH_USER))
134}
135}
135
136
136fn resolve_guest_display(guest: &str, guest_home: &str) -> String {
137fn resolve_guest_display(guest: &str, guest_home: &str) -> String {
@@ -154,3 +155,17 @@ fn resolve_guest_display(guest: &str, guest_home: &str) -> String {
154 format!("/root/{guest}")
155 format!("/root/{guest}")
155 }
156 }
156}
157}
158+
159+fn display_path(path: &Path) -> String {
160+ let Ok(home) = env::var("HOME") else {
161+ return path.display().to_string();
162+ };
163+ let home_path = PathBuf::from(home);
164+ if let Ok(stripped) = path.strip_prefix(&home_path) {
165+ if stripped.components().next().is_none() {
166+ return "~".to_string();
167+ }
168+ return format!("~/{}", stripped.display());
169+ }
170+ path.display().to_string()
171+}
src/instance.rs+136−297
@@ -1,140 +1,81 @@
1−use anyhow::{Context, Result, bail};
2−use serde::{Deserialize, Serialize};
3−use std::os::unix::fs::FileTypeExt;
4use std::{
1use std::{
5 env, fs,
2 env, fs,
6− io::{self, IsTerminal, Read},
3+ io::{self},
7 net::{SocketAddr, TcpStream},
4 net::{SocketAddr, TcpStream},
8 os::unix::{fs::PermissionsExt, net::UnixStream},
5 os::unix::{fs::PermissionsExt, net::UnixStream},
9 path::{Path, PathBuf},
6 path::{Path, PathBuf},
10− process::{Child, Command, Stdio},
7+ process::{Command, Stdio},
11− sync::{
12− Arc, Mutex,
8+ sync::{Arc, Mutex},
13− atomic::{AtomicBool, Ordering},
14− mpsc,
15− },
16 thread,
9 thread,
17 time::{Duration, Instant},
10 time::{Duration, Instant},
18};
11};
12+
13+use serde::{Deserialize, Serialize};
19use time::{OffsetDateTime, format_description::well_known::Rfc3339};
14use time::{OffsetDateTime, format_description::well_known::Rfc3339};
20use uuid::Uuid;
15use uuid::Uuid;
21
16
22use crate::{
17use crate::{
23 commands,
18 commands,
24− session_manager::INSTANCE_DIR_NAME,
19+ session_manager::{INSTANCE_DIR_NAME, INSTANCE_FILENAME},
25− session_manager::{VM_MANAGER_PID_NAME, VM_MANAGER_SOCKET_NAME},
26 vm::{self, LoginAction},
20 vm::{self, LoginAction},
27};
21};
28
22
29−pub const STATUS_VM_ERROR_PREFIX: &str = "error:";
30−
31const SSH_KEY_NAME: &str = "ssh_key";
23const SSH_KEY_NAME: &str = "ssh_key";
32−const INSTANCE_FILENAME: &str = "instance.toml";
24+pub(crate) const VM_ROOT_LOG_NAME: &str = "vm_root.log";
25+pub(crate) const STATUS_FILE_NAME: &str = "status.txt";
33−const DEFAULT_SSH_USER: &str = "vibecoder";
26+pub(crate) const DEFAULT_SSH_USER: &str = "vibecoder";
34−const SSH_CONNECT_RETRIES: usize = 10;
27+const SSH_CONNECT_RETRIES: usize = 30;
35const SSH_CONNECT_DELAY_MS: u64 = 500;
28const SSH_CONNECT_DELAY_MS: u64 = 500;
36const SSH_SETUP_SCRIPT: &str = include_str!("ssh.sh");
29const SSH_SETUP_SCRIPT: &str = include_str!("ssh.sh");
37−const STATUS_PREFIX: &str = "status:";
38−
39−#[derive(Debug, Clone, Copy, PartialEq, Eq)]
40−pub enum VmLiveness {
41− RunningWithSocket { pid: u32 },
42− RunningWithoutSocket { pid: u32 },
43− NotRunningOrMissing,
44−}
45−
46−pub fn vm_liveness(project_root: &Path) -> Result<VmLiveness> {
47− let instance_dir = ensure_instance_dir(project_root)?;
48− let pid_path = instance_dir.join(VM_MANAGER_PID_NAME);
49− let socket_path = instance_dir.join(VM_MANAGER_SOCKET_NAME);
50− fn pid_is_alive(pid: u32) -> bool {
51− let pid = pid as libc::pid_t;
52− let result = unsafe { libc::kill(pid, 0) };
53− if result == 0 {
54− return true;
55− }
56− match io::Error::last_os_error().raw_os_error() {
57− Some(code) if code == libc::EPERM => true,
58− Some(code) if code == libc::ESRCH => false,
59− _ => false,
60− }
61− }
62− let Ok(content) = fs::read_to_string(pid_path) else {
63− return Ok(VmLiveness::NotRunningOrMissing);
64− };
65− let Ok(pid) = content.trim().parse::<u32>() else {
66− return Ok(VmLiveness::NotRunningOrMissing);
67− };
68− if !pid_is_alive(pid) {
69− return Ok(VmLiveness::NotRunningOrMissing);
70− }
71− let has_socket = fs::metadata(socket_path)
72− .map(|meta| meta.file_type().is_socket())
73− .unwrap_or(false);
74− if has_socket {
75− Ok(VmLiveness::RunningWithSocket { pid })
76− } else {
77− Ok(VmLiveness::RunningWithoutSocket { pid })
78− }
79−}
80−
81−#[derive(Debug, thiserror::Error)]
82−pub enum InstanceError {
83− #[error("unexpected disconnection from vm manager")]
84− UnexpectedDisconnection,
85− #[error("{0}")]
86− VMError(String),
87−}
88−
89−fn default_ssh_user() -> String {
90− DEFAULT_SSH_USER.to_string()
91−}
92
30
93#[derive(Debug, Clone, Serialize, Deserialize)]
31#[derive(Debug, Clone, Serialize, Deserialize)]
94−pub struct InstanceConfig {
32+pub(crate) struct InstanceConfig {
95 #[serde(default)]
33 #[serde(default)]
96− pub id: String,
34+ id: String,
97 #[serde(default = "default_ssh_user")]
35 #[serde(default = "default_ssh_user")]
98− pub ssh_user: String,
36+ ssh_user: String,
99 #[serde(default)]
37 #[serde(default)]
100 sudo_password: String,
38 sudo_password: String,
101 #[serde(default)]
39 #[serde(default)]
102− pub last_active: Option<String>,
40+ last_active: Option<String>,
103 #[serde(default)]
41 #[serde(default)]
104− pub vm_ipv4: Option<String>,
42+ pub(crate) vm_ipv4: Option<String>,
105}
43}
106
44
107−impl Default for InstanceConfig {
45+impl InstanceConfig {
108− fn default() -> Self {
46+ pub(crate) fn ssh_user_display(&self) -> String {
109− Self {
47+ if self.ssh_user.trim().is_empty() {
110− id: Uuid::now_v7().to_string(),
111− ssh_user: DEFAULT_SSH_USER.to_string(),
48+ DEFAULT_SSH_USER.to_string()
112− sudo_password: Uuid::now_v7().simple().to_string(),
49+ } else {
113− last_active: None,
50+ self.ssh_user.clone()
114− vm_ipv4: None,
115 }
51 }
116 }
52 }
117}
53}
118
54
55+fn default_ssh_user() -> String {
56+ DEFAULT_SSH_USER.to_string()
57+}
58+
119−pub fn run_with_ssh(manager_conn: UnixStream) -> Result<()> {
59+pub fn run_with_ssh(manager_conn: UnixStream) -> Result<(), Box<dyn std::error::Error>> {
120 let project_root = env::current_dir()?;
60 let project_root = env::current_dir()?;
121 tracing::info!(root = %project_root.display(), "starting ssh session");
61 tracing::info!(root = %project_root.display(), "starting ssh session");
122 let instance_dir = ensure_instance_dir(&project_root)?;
62 let instance_dir = ensure_instance_dir(&project_root)?;
123 tracing::debug!(instance_dir = %instance_dir.display(), "instance dir ready");
63 tracing::debug!(instance_dir = %instance_dir.display(), "instance dir ready");
124 let (ssh_key, _ssh_pub) = ensure_ssh_keypair(&instance_dir)?;
64 let (ssh_key, _ssh_pub) = ensure_ssh_keypair(&instance_dir)?;
125
65
126− let config = load_or_create_instance_config(&project_root)?;
66+ let config = load_or_create_instance_config(&instance_dir)?;
127 let ssh_user = config.ssh_user.clone();
67 let ssh_user = config.ssh_user.clone();
128 tracing::debug!(ssh_user = %ssh_user, "loaded instance config");
68 tracing::debug!(ssh_user = %ssh_user, "loaded instance config");
129
69
70+ let _manager_conn = manager_conn;
130− wait_for_vm_ipv4(&project_root, Duration::from_secs(480), &manager_conn)?;
71+ wait_for_vm_ipv4(&instance_dir, Duration::from_secs(120))?;
131
72
132− let ip = load_or_create_instance_config(&project_root)?
73+ let ip = load_or_create_instance_config(&instance_dir)?
133 .vm_ipv4
74 .vm_ipv4
134− .with_context(|| "failed to load instance IP address")?;
75+ .ok_or("VM IPv4 not available")?;
135 tracing::info!(ip = %ip, "vm ipv4 ready");
76 tracing::info!(ip = %ip, "vm ipv4 ready");
136
77
137− run_ssh_session(ssh_key, ssh_user, ip, manager_conn, project_root)
78+ run_ssh_session(ssh_key, ssh_user, ip)
138}
79}
139
80
140pub fn ensure_instance_dir(project_root: &Path) -> Result<PathBuf, io::Error> {
81pub fn ensure_instance_dir(project_root: &Path) -> Result<PathBuf, io::Error> {
@@ -143,7 +84,9 @@ pub fn ensure_instance_dir(project_root: &Path) -> Result<PathBuf, io::Error> {
143 Ok(instance_dir)
84 Ok(instance_dir)
144}
85}
145
86
146−pub fn ensure_ssh_keypair(instance_dir: &Path) -> Result<(PathBuf, PathBuf)> {
87+pub(crate) fn ensure_ssh_keypair(
88+ instance_dir: &Path,
89+) -> Result<(PathBuf, PathBuf), Box<dyn std::error::Error>> {
147 let private_key = instance_dir.join(SSH_KEY_NAME);
90 let private_key = instance_dir.join(SSH_KEY_NAME);
148 let public_key = instance_dir.join(format!("{SSH_KEY_NAME}.pub"));
91 let public_key = instance_dir.join(format!("{SSH_KEY_NAME}.pub"));
149
92
@@ -165,9 +108,7 @@ pub fn ensure_ssh_keypair(instance_dir: &Path) -> Result<(PathBuf, PathBuf)> {
165 "-N",
108 "-N",
166 "",
109 "",
167 "-f",
110 "-f",
168− private_key
169− .to_str()
170− .with_context(|| "ssh key path not utf-8")?,
111+ private_key.to_str().ok_or("ssh key path not utf-8")?,
171 "-C",
112 "-C",
172 "vibebox",
113 "vibebox",
173 ])
114 ])
@@ -177,7 +118,7 @@ pub fn ensure_ssh_keypair(instance_dir: &Path) -> Result<(PathBuf, PathBuf)> {
177 .status()?;
118 .status()?;
178
119
179 if !status.success() {
120 if !status.success() {
180− bail!("ssh-keygen failed");
121+ return Err("ssh-keygen failed".into());
181 }
122 }
182
123
183 fs::set_permissions(&private_key, fs::Permissions::from_mode(0o600))?;
124 fs::set_permissions(&private_key, fs::Permissions::from_mode(0o600))?;
@@ -186,66 +127,97 @@ pub fn ensure_ssh_keypair(instance_dir: &Path) -> Result<(PathBuf, PathBuf)> {
186 Ok((private_key, public_key))
127 Ok((private_key, public_key))
187}
128}
188
129
189−pub fn load_or_create_instance_config(project_dir: &Path) -> Result<InstanceConfig> {
130+pub(crate) fn load_or_create_instance_config(
190− let mut exist = true;
131+ instance_dir: &Path,
191− let mut config = read_instance_config(project_dir).unwrap_or_else(|_| {
132+) -> Result<InstanceConfig, Box<dyn std::error::Error>> {
192− exist = false;
133+ let config_path = instance_dir.join(INSTANCE_FILENAME);
193− InstanceConfig::default()
134+ let mut config = if config_path.exists() {
135+ let raw = fs::read_to_string(&config_path)?;
136+ toml::from_str::<InstanceConfig>(&raw)?
137+ } else {
138+ InstanceConfig {
139+ id: String::new(),
140+ ssh_user: default_ssh_user(),
141+ sudo_password: String::new(),
142+ last_active: None,
143+ vm_ipv4: None,
144+ }
194− });
145+ };
195
146
196 let mut changed = false;
147 let mut changed = false;
197 if config.ssh_user.trim().is_empty() {
148 if config.ssh_user.trim().is_empty() {
198− config.ssh_user = InstanceConfig::default().ssh_user;
149+ config.ssh_user = default_ssh_user();
199 changed = true;
150 changed = true;
200 }
151 }
201
152
202 if config.id.trim().is_empty() {
153 if config.id.trim().is_empty() {
203− config.id = InstanceConfig::default().id;
154+ config.id = Uuid::now_v7().to_string();
204 changed = true;
155 changed = true;
205 }
156 }
206
157
207 if config.sudo_password.trim().is_empty() {
158 if config.sudo_password.trim().is_empty() {
208− config.sudo_password = InstanceConfig::default().sudo_password;
159+ config.sudo_password = generate_password();
209 changed = true;
160 changed = true;
210 }
161 }
211
162
212− if !exist || changed {
163+ if !config_path.exists() || changed {
213− write_instance_config(project_dir, &config)?;
164+ write_instance_config(&config_path, &config)?;
214 }
165 }
215
166
216 Ok(config)
167 Ok(config)
217}
168}
218
169
219−pub fn read_instance_config(project_dir: &Path) -> Result<InstanceConfig> {
170+fn read_instance_config(
220− // todo maybe verify schema?
171+ instance_dir: &Path,
172+) -> Result<Option<InstanceConfig>, Box<dyn std::error::Error>> {
221− let config_path = project_dir.join(INSTANCE_DIR_NAME).join(INSTANCE_FILENAME);
173+ let config_path = instance_dir.join(INSTANCE_FILENAME);
222 if !config_path.exists() {
174 if !config_path.exists() {
223− bail!("instance config file does not exist");
175+ return Ok(None);
224 }
176 }
225 let raw = fs::read_to_string(&config_path)?;
177 let raw = fs::read_to_string(&config_path)?;
226 let config = toml::from_str::<InstanceConfig>(&raw)?;
178 let config = toml::from_str::<InstanceConfig>(&raw)?;
227− Ok(config)
179+ Ok(Some(config))
180+}
181+
182+pub fn read_instance_vm_ip(
183+ instance_dir: &Path,
184+) -> Result<Option<String>, Box<dyn std::error::Error>> {
185+ let config = read_instance_config(instance_dir)?;
186+ Ok(config.and_then(|cfg| cfg.vm_ipv4))
187+}
188+
189+pub fn read_instance_ssh_user(
190+ instance_dir: &Path,
191+) -> Result<Option<String>, Box<dyn std::error::Error>> {
192+ let config = read_instance_config(instance_dir)?;
193+ Ok(config
194+ .map(|cfg| cfg.ssh_user)
195+ .filter(|user| !user.trim().is_empty()))
228}
196}
229
197
230−pub fn touch_last_active(project_dir: &Path) -> Result<()> {
198+pub fn touch_last_active(instance_dir: &Path) -> Result<(), Box<dyn std::error::Error>> {
231− let mut config = load_or_create_instance_config(project_dir)?;
199+ let mut config = load_or_create_instance_config(instance_dir)?;
232 let now = OffsetDateTime::now_utc().format(&Rfc3339)?;
200 let now = OffsetDateTime::now_utc().format(&Rfc3339)?;
233 config.last_active = Some(now);
201 config.last_active = Some(now);
234− write_instance_config(project_dir, &config)?;
202+ write_instance_config(&instance_dir.join(INSTANCE_FILENAME), &config)?;
235 Ok(())
203 Ok(())
236}
204}
237
205
238−pub fn write_instance_config(project_dir: &Path, config: &InstanceConfig) -> Result<()> {
206+pub(crate) fn write_instance_config(
239− let path = project_dir.join(INSTANCE_DIR_NAME).join(INSTANCE_FILENAME);
207+ path: &Path,
208+ config: &InstanceConfig,
209+) -> Result<(), Box<dyn std::error::Error>> {
240 let data = toml::to_string_pretty(config)?;
210 let data = toml::to_string_pretty(config)?;
241− fs::create_dir_all(project_dir.join(INSTANCE_DIR_NAME))?;
242− fs::write(&path, data)?;
211+ fs::write(path, data)?;
243− fs::set_permissions(&path, fs::Permissions::from_mode(0o600))?;
212+ fs::set_permissions(path, fs::Permissions::from_mode(0o600))?;
244 Ok(())
213 Ok(())
245}
214}
246
215
247−#[cfg_attr(feature = "mock-vm", allow(dead_code))]
216+fn generate_password() -> String {
217+ Uuid::now_v7().simple().to_string()
218+}
219+
248−pub fn extract_ipv4(line: &str) -> Option<String> {
220+pub(crate) fn extract_ipv4(line: &str) -> Option<String> {
249 let mut current = String::new();
221 let mut current = String::new();
250 let mut best: Option<String> = None;
222 let mut best: Option<String> = None;
251
223
@@ -264,69 +236,25 @@ pub fn extract_ipv4(line: &str) -> Option<String> {
264 best
236 best
265}
237}
266
238
267−fn handle_manager_line(line: &str, last_status: &mut Option<String>) -> Result<()> {
268− if let Some(status) = line.strip_prefix(STATUS_PREFIX) {
269− let status = status.trim();
270− if let Some(message) = status.strip_prefix(STATUS_VM_ERROR_PREFIX) {
271− let message = message.trim();
272− if message.is_empty() {
273− bail!("vm manager reported startup failure");
274− }
275− return Err(InstanceError::VMError(message.to_string()).into());
276− }
277− if !status.is_empty() && last_status.as_deref() != Some(status) {
278− tracing::info!("[background]: {}", status);
279− *last_status = Some(status.to_string());
280− }
281− }
282− Ok(())
283−}
284−
285fn wait_for_vm_ipv4(
239fn wait_for_vm_ipv4(
286− project_dir: &Path,
240+ instance_dir: &Path,
287 timeout: Duration,
241 timeout: Duration,
288− manager_conn: &UnixStream,
242+) -> Result<(), Box<dyn std::error::Error>> {
289−) -> Result<()> {
290 let start = Instant::now();
243 let start = Instant::now();
291 let mut next_log_at = start + Duration::from_secs(10);
244 let mut next_log_at = start + Duration::from_secs(10);
292− let mut stream = manager_conn.try_clone()?;
293− let _ = stream.set_read_timeout(Some(Duration::from_millis(250)));
294− let mut read_buf = [0u8; 1024];
295− let mut pending = String::new();
296 tracing::info!("waiting for vm ipv4");
245 tracing::info!("waiting for vm ipv4");
246+ let status_path = instance_dir.join(STATUS_FILE_NAME);
297 let mut last_status: Option<String> = None;
247 let mut last_status: Option<String> = None;
298 let mut once_hint = false;
248 let mut once_hint = false;
299 loop {
249 loop {
300− match stream.read(&mut read_buf) {
301− Ok(0) => {
302− bail!("vm manager disconnected before VM became ready");
303− }
304− Ok(n) => {
305− pending.push_str(&String::from_utf8_lossy(&read_buf[..n]));
306− while let Some(pos) = pending.find('\n') {
307− let line = pending[..pos].trim().to_string();
308− pending.drain(..=pos);
309− handle_manager_line(&line, &mut last_status)?;
310− }
311− }
312− Err(err) if err.kind() == io::ErrorKind::WouldBlock => {}
313− Err(err) if err.kind() == io::ErrorKind::TimedOut => {}
314− Err(err) if err.kind() == io::ErrorKind::Interrupted => {}
315− Err(err) => {
316− tracing::warn!(error = %err, "failed to read vm manager status stream");
317− }
318− }
319−
320− let config = load_or_create_instance_config(project_dir)?;
250+ let config = load_or_create_instance_config(instance_dir)?;
321 if config.vm_ipv4.is_some() {
251 if config.vm_ipv4.is_some() {
322 return Ok(());
252 return Ok(());
323 }
253 }
324 if start.elapsed() > timeout {
254 if start.elapsed() > timeout {
325− bail!("timed out waiting for VM IPv4");
255+ return Err("Timed out waiting for VM IPv4".into());
326 }
256 }
327−
328− let now = Instant::now();
329− if now >= next_log_at {
257+ if Instant::now() >= next_log_at {
330 let waited = start.elapsed();
258 let waited = start.elapsed();
331 if waited.as_secs() > 15 && !once_hint {
259 if waited.as_secs() > 15 && !once_hint {
332 tracing::info!(
260 tracing::info!(
@@ -334,9 +262,18 @@ fn wait_for_vm_ipv4(
334 );
262 );
335 once_hint = true;
263 once_hint = true;
336 }
264 }
265+ if let Ok(status) = fs::read_to_string(&status_path) {
266+ let status = status.trim().to_string();
267+ if !status.is_empty() && last_status.as_deref() != Some(status.as_str()) {
268+ tracing::info!("[background]: {}", status);
269+ last_status = Some(status);
270+ }
271+ } else {
337− tracing::info!("still waiting for vm ipv4, {}s elapsed", waited.as_secs(),);
272+ tracing::info!("still waiting for vm ipv4, {}s elapsed", waited.as_secs(),);
273+ }
338− next_log_at += Duration::from_secs(20);
274+ next_log_at += Duration::from_secs(10);
339 }
275 }
276+ thread::sleep(Duration::from_millis(200));
340 }
277 }
341}
278}
342
279
@@ -344,14 +281,9 @@ fn run_ssh_session(
344 ssh_key: PathBuf,
281 ssh_key: PathBuf,
345 ssh_user: String,
282 ssh_user: String,
346 ip: String,
283 ip: String,
347− manager_conn: UnixStream,
284+) -> Result<(), Box<dyn std::error::Error>> {
348− project_root: PathBuf,
349−) -> Result<()> {
350 let mut attempts = 0usize;
285 let mut attempts = 0usize;
351 loop {
286 loop {
352− if matches!(vm_liveness(&project_root)?, VmLiveness::NotRunningOrMissing) {
353− return Err(InstanceError::UnexpectedDisconnection.into());
354− }
355 attempts += 1;
287 attempts += 1;
356 if !ssh_port_open(&ip) {
288 if !ssh_port_open(&ip) {
357 tracing::debug!(attempts, "ssh port doesn't open yet");
289 tracing::debug!(attempts, "ssh port doesn't open yet");
@@ -363,7 +295,9 @@ fn run_ssh_session(
363 SSH_CONNECT_RETRIES
295 SSH_CONNECT_RETRIES
364 );
296 );
365 if attempts >= SSH_CONNECT_RETRIES {
297 if attempts >= SSH_CONNECT_RETRIES {
298+ return Err(
366− bail!("ssh port not ready after {SSH_CONNECT_RETRIES} attempts");
299+ format!("ssh port not ready after {SSH_CONNECT_RETRIES} attempts").into(),
300+ );
367 }
301 }
368 thread::sleep(Duration::from_millis(SSH_CONNECT_DELAY_MS));
302 thread::sleep(Duration::from_millis(SSH_CONNECT_DELAY_MS));
369 continue;
303 continue;
@@ -377,10 +311,10 @@ fn run_ssh_session(
377 attempts,
311 attempts,
378 SSH_CONNECT_RETRIES
312 SSH_CONNECT_RETRIES
379 );
313 );
380− let child = Command::new("ssh")
314+ let status = Command::new("ssh")
381 .args([
315 .args([
382 "-i",
316 "-i",
383− ssh_key.to_str().with_context(|| "invalid path")?,
317+ ssh_key.to_str().unwrap_or(".vibebox/ssh_key"),
384 "-o",
318 "-o",
385 "IdentitiesOnly=yes",
319 "IdentitiesOnly=yes",
386 "-o",
320 "-o",
@@ -405,67 +339,27 @@ fn run_ssh_session(
405 .stdin(Stdio::inherit())
339 .stdin(Stdio::inherit())
406 .stdout(Stdio::inherit())
340 .stdout(Stdio::inherit())
407 .stderr(Stdio::inherit())
341 .stderr(Stdio::inherit())
408− .spawn();
342+ .status();
409−
343+
410− match child {
344+ match status {
411− Ok(mut child) => {
412− let done = Arc::new(AtomicBool::new(false));
413− let done_for_monitor = done.clone();
414− let (disconnect_tx, disconnect_rx) = mpsc::channel::<()>();
415− let mut manager_stream = manager_conn.try_clone()?;
416− let _ = manager_stream.set_read_timeout(Some(Duration::from_millis(250)));
417− thread::spawn(move || {
418− let mut buf = [0u8; 1];
419− while !done_for_monitor.load(Ordering::Relaxed) {
420− match manager_stream.read(&mut buf) {
421− Ok(0) => {
422− let _ = disconnect_tx.send(());
423− return;
424− }
425− Ok(_) => {}
426− Err(err) if err.kind() == io::ErrorKind::WouldBlock => {}
427− Err(err) if err.kind() == io::ErrorKind::TimedOut => {}
428− Err(err) if err.kind() == io::ErrorKind::Interrupted => {}
429− Err(_) => {
430− let _ = disconnect_tx.send(());
431− return;
432− }
433− }
434− }
435− });
436−
437− let status = loop {
438− if disconnect_rx.try_recv().is_ok() {
439− done.store(true, Ordering::Relaxed);
440− terminate_ssh_child(&mut child);
441− restore_terminal_after_disconnect();
442− return Err(InstanceError::UnexpectedDisconnection.into());
443− }
444− if let Some(status) = child.try_wait()? {
445− done.store(true, Ordering::Relaxed);
446− break status;
447− }
448− thread::sleep(Duration::from_millis(100));
449− };
450−
451− if status.success() {
345+ Ok(status) if status.success() => {
452− tracing::info!(status = %status, "ssh exited");
346+ tracing::info!(status = %status, "ssh exited");
453− break;
347+ break;
454− }
348+ }
455− if status.code() == Some(255) {
349+ Ok(status) if status.code() == Some(255) => {
456− tracing::warn!(status = %status, "ssh connection failed");
350+ tracing::warn!(status = %status, "ssh connection failed");
457− if attempts >= SSH_CONNECT_RETRIES {
351+ if attempts >= SSH_CONNECT_RETRIES {
458− bail!("ssh failed after {SSH_CONNECT_RETRIES} attempts");
352+ return Err(format!("ssh failed after {SSH_CONNECT_RETRIES} attempts").into());
459− }
460− thread::sleep(Duration::from_millis(500));
461− continue;
462 }
353 }
354+ thread::sleep(Duration::from_millis(500));
355+ }
356+ Ok(status) => {
463 tracing::info!(status = %status, "ssh exited");
357 tracing::info!(status = %status, "ssh exited");
464 break;
358 break;
465 }
359 }
466 Err(err) => {
360 Err(err) => {
467 tracing::error!(error = %err, "failed to start ssh");
361 tracing::error!(error = %err, "failed to start ssh");
468− bail!("failed to start ssh: {err}");
362+ return Err(format!("failed to start ssh: {err}").into());
469 }
363 }
470 }
364 }
471 }
365 }
@@ -473,31 +367,6 @@ fn run_ssh_session(
473 Ok(())
367 Ok(())
474}
368}
475
369
476−fn terminate_ssh_child(child: &mut Child) {
477− let pid = child.id() as i32;
478− unsafe {
479− libc::kill(pid, libc::SIGTERM);
480− }
481− let deadline = Instant::now() + Duration::from_millis(700);
482− while Instant::now() < deadline {
483− match child.try_wait() {
484− Ok(Some(_)) => return,
485− Ok(None) => thread::sleep(Duration::from_millis(50)),
486− Err(_) => break,
487− }
488− }
489− let _ = child.kill();
490− let _ = child.wait();
491−}
492−
493−fn restore_terminal_after_disconnect() {
494− if io::stdin().is_terminal() {
495− let _ = Command::new("stty").arg("sane").status();
496− }
497− eprintln!();
498−}
499−
500−#[cfg_attr(feature = "mock-vm", allow(dead_code))]
501fn is_ipv4_candidate(candidate: &str) -> bool {
370fn is_ipv4_candidate(candidate: &str) -> bool {
502 let parts: Vec<&str> = candidate.split('.').collect();
371 let parts: Vec<&str> = candidate.split('.').collect();
503 if parts.len() != 4 {
372 if parts.len() != 4 {
@@ -519,13 +388,12 @@ fn ssh_port_open(ip: &str) -> bool {
519 Ok(addr) => addr,
388 Ok(addr) => addr,
520 Err(_) => return false,
389 Err(_) => return false,
521 };
390 };
522− TcpStream::connect_timeout(&addr, Duration::from_millis(500)).is_ok()
391+ TcpStream::connect_timeout(&addr, std::time::Duration::from_millis(500)).is_ok()
523}
392}
524
393
525−pub fn build_ssh_login_actions(
394+pub(crate) fn build_ssh_login_actions(
526 config: &Arc<Mutex<InstanceConfig>>,
395 config: &Arc<Mutex<InstanceConfig>>,
527 project_name: &str,
396 project_name: &str,
528− project_guest_dir: &str,
529 guest_dir: &str,
397 guest_dir: &str,
530 key_name: &str,
398 key_name: &str,
531 home_links_script: &str,
399 home_links_script: &str,
@@ -537,44 +405,15 @@ pub fn build_ssh_login_actions(
537
405
538 let key_path = format!("{guest_dir}/{key_name}.pub");
406 let key_path = format!("{guest_dir}/{key_name}.pub");
539
407
540− let ssh_script = SSH_SETUP_SCRIPT
408+ let setup_script = SSH_SETUP_SCRIPT
541 .replace("__SSH_USER__", &ssh_user)
409 .replace("__SSH_USER__", &ssh_user)
542 .replace("__SUDO_PASSWORD__", &sudo_password)
410 .replace("__SUDO_PASSWORD__", &sudo_password)
543 .replace("__PROJECT_NAME__", project_name)
411 .replace("__PROJECT_NAME__", project_name)
544− .replace("__PROJECT_GUEST_DIR__", project_guest_dir)
545 .replace("__KEY_PATH__", &key_path)
412 .replace("__KEY_PATH__", &key_path)
546 .replace("__VIBEBOX_SHELL_SCRIPT__", &commands::render_shell_script())
413 .replace("__VIBEBOX_SHELL_SCRIPT__", &commands::render_shell_script())
547 .replace("__VIBEBOX_HOME_LINKS__", home_links_script);
414 .replace("__VIBEBOX_HOME_LINKS__", home_links_script);
548− let setup = vm::script_command_from_content("ssh.sh", &ssh_script)
415+ let setup = vm::script_command_from_content("ssh_setup", &setup_script)
549 .expect("ssh setup script contained invalid marker");
416 .expect("ssh setup script contained invalid marker");
550
417
551 vec![LoginAction::Send(setup)]
418 vec![LoginAction::Send(setup)]
552}
419}
553−
554−#[cfg(test)]
555−mod tests {
556− use super::*;
557−
558− #[test]
559− fn handle_manager_line_updates_status() {
560− let mut last_status = None;
561− handle_manager_line("status: preparing VM image...", &mut last_status)
562− .expect("status should be accepted");
563− assert_eq!(last_status.as_deref(), Some("preparing VM image..."));
564− }
565−
566− #[test]
567− fn handle_manager_line_ignores_non_status_lines() {
568− let mut last_status = None;
569− handle_manager_line("pid=123", &mut last_status).expect("non-status lines are ignored");
570− assert!(last_status.is_none());
571− }
572−
573− #[test]
574− fn handle_manager_line_surfaces_error_status() {
575− let mut last_status = None;
576− let err = handle_manager_line("status: error: vm failed to boot", &mut last_status)
577− .expect_err("error status should fail");
578− assert_eq!(err.to_string(), "vm failed to boot");
579− }
580−}
src/lib.rs−1
@@ -8,4 +8,3 @@ pub mod vm_manager;
8
8
9pub use session_manager::{SessionError, SessionManager, SessionRecord};
9pub use session_manager::{SessionError, SessionManager, SessionRecord};
10pub mod config;
10pub mod config;
11−pub mod utils;
src/provision.sh+5−55
@@ -1,55 +1,12 @@
1#!/bin/bash
1#!/bin/bash
2−set -eEux
2+set -eux
3−
4−trap 'rc=$?; echo "[vibebox][error] provisioning failed at: ${BASH_COMMAND} (exit ${rc})"; printf "%s%s\n" VIBEBOX_PROVISION_ FAILED; systemctl poweroff || true; exit 1' ERR
5−
6−# Wait for network + DNS before apt-get to avoid early boot flakiness.
7−wait_for_network() {
8− echo "[vibebox] waiting for network/DNS readiness"
9− local deadline=$((SECONDS + 180))
10− while [ "$SECONDS" -lt "$deadline" ]; do
11− local has_route=0
12− if ip -4 route show default >/dev/null 2>&1; then
13− has_route=1
14− elif ip -6 route show default >/dev/null 2>&1; then
15− has_route=1
16− fi
17− if [ "$has_route" -eq 1 ]; then
18− if getent hosts deb.debian.org >/dev/null 2>&1; then
19− return 0
20− fi
21− fi
22− sleep 1
23− done
24− echo "[vibebox][warn] network/DNS still not ready after 180s; continuing" >&2
25− echo "[vibebox][warn] /etc/resolv.conf:" >&2
26− cat /etc/resolv.conf >&2 || true
27− ip -br addr >&2 || true
28− ip route >&2 || true
29− ip -6 route >&2 || true
30− return 0
31−}
32−
33−apt_update_with_retries() {
34− local attempt=1
35− while [ "$attempt" -le 5 ]; do
36− if apt-get update; then
37− return 0
38− fi
39− echo "[vibebox][warn] apt-get update failed (attempt ${attempt}/5); retrying..." >&2
40− attempt=$((attempt + 1))
41− sleep 2
42− done
43− return 1
44−}
45
3
46# Don't wait too long for slow mirrors.
4# Don't wait too long for slow mirrors.
47−echo 'Acquire::http::Timeout "10";' | tee /etc/apt/apt.conf.d/99timeout
5+echo 'Acquire::http::Timeout "2";' | tee /etc/apt/apt.conf.d/99timeout
48−echo 'Acquire::https::Timeout "10";' | tee -a /etc/apt/apt.conf.d/99timeout
6+echo 'Acquire::https::Timeout "2";' | tee -a /etc/apt/apt.conf.d/99timeout
49−echo 'Acquire::Retries "5";' | tee -a /etc/apt/apt.conf.d/99timeout
7+echo 'Acquire::Retries "2";' | tee -a /etc/apt/apt.conf.d/99timeout
50
8
51−wait_for_network
9+apt-get update
52−apt_update_with_retries
53apt-get install -y --no-install-recommends \
10apt-get install -y --no-install-recommends \
54 build-essential \
11 build-essential \
55 pkg-config \
12 pkg-config \
@@ -57,7 +14,6 @@ apt-get install -y --no-install-recommends \
57 curl \
14 curl \
58 git \
15 git \
59 ripgrep \
16 ripgrep \
60− cloud-guest-utils \
61 openssh-server \
17 openssh-server \
62 sudo
18 sudo
63
19
@@ -86,11 +42,6 @@ systemctl restart ssh
86# Set this env var so claude doesn't complain about running as root.'
42# Set this env var so claude doesn't complain about running as root.'
87echo "export IS_SANDBOX=1" >> .bashrc
43echo "export IS_SANDBOX=1" >> .bashrc
88
44
89−# Ensure cloned instances generate unique machine-id on first boot.
90−truncate -s 0 /etc/machine-id
91−rm -f /var/lib/dbus/machine-id
92−ln -sf /etc/machine-id /var/lib/dbus/machine-id
93−
94# Shutdown the VM when you logout
45# Shutdown the VM when you logout
95cat > .bash_logout <<EOF
46cat > .bash_logout <<EOF
96systemctl poweroff
47systemctl poweroff
@@ -98,5 +49,4 @@ sleep 100 # sleep here so that we don't see the login screen flash up before the
98EOF
49EOF
99
50
100# Done provisioning, power off the VM
51# Done provisioning, power off the VM
101−printf "%s%s\n" VIBEBOX_PROVISION_ OK
102systemctl poweroff
52systemctl poweroff
src/resize_disk.shdeleted−55
@@ -1,55 +0,0 @@
1−#!/bin/bash
2−set -euo pipefail
3−
4−ROOT_DEV="$(findmnt / -n -o SOURCE || true)"
5−ROOT_FSTYPE="$(findmnt / -n -o FSTYPE || true)"
6−
7−if [ -z "$ROOT_DEV" ]; then
8− exit 0
9−fi
10−
11−DISK_DEV=""
12−PART_NUM=""
13−
14−if command -v lsblk >/dev/null 2>&1; then
15− DISK_DEV="$(lsblk -no pkname "$ROOT_DEV" 2>/dev/null | head -n1 || true)"
16− PART_NUM="$(lsblk -no PARTNUM "$ROOT_DEV" 2>/dev/null | head -n1 || true)"
17−fi
18−
19−if [ -z "$DISK_DEV" ] || [ -z "$PART_NUM" ]; then
20− ROOT_BASENAME="$(basename "$ROOT_DEV")"
21− if echo "$ROOT_BASENAME" | grep -Eq '^nvme.+p[0-9]+$'; then
22− DISK_DEV="/dev/${ROOT_BASENAME%p[0-9]*}"
23− PART_NUM="${ROOT_BASENAME##*p}"
24− elif echo "$ROOT_BASENAME" | grep -Eq '^[a-z]+[0-9]+$'; then
25− DISK_DEV="/dev/${ROOT_BASENAME%%[0-9]*}"
26− PART_NUM="${ROOT_BASENAME##*[a-z]}"
27− fi
28−fi
29−
30−if [ -n "$DISK_DEV" ] && [ -n "$PART_NUM" ]; then
31− if command -v growpart >/dev/null 2>&1; then
32− growpart "$DISK_DEV" "$PART_NUM" || true
33− elif command -v sfdisk >/dev/null 2>&1; then
34− sfdisk -N "$PART_NUM" --force "$DISK_DEV" <<'EOF' || true
35−,,
36−EOF
37− fi
38−fi
39−
40−if command -v partprobe >/dev/null 2>&1; then
41− partprobe "$DISK_DEV" || true
42−fi
43−
44−case "$ROOT_FSTYPE" in
45− ext4|ext3|ext2)
46− if command -v resize2fs >/dev/null 2>&1; then
47− resize2fs "$ROOT_DEV" || true
48− fi
49− ;;
50− xfs)
51− if command -v xfs_growfs >/dev/null 2>&1; then
52− xfs_growfs / || true
53− fi
54− ;;
55−esac
src/session_manager.rs+101−64
@@ -1,18 +1,19 @@
1−use anyhow::Result;
2use std::{
1use std::{
3 env, fs,
2 env, fs,
4 io::{self, Write},
3 io::{self, Write},
4+ os::unix::fs::FileTypeExt,
5 path::{Path, PathBuf},
5 path::{Path, PathBuf},
6};
6};
7
7
8−use crate::config::config_path;
9−use crate::instance::{VmLiveness, read_instance_config, vm_liveness};
10use serde::{Deserialize, Serialize};
8use serde::{Deserialize, Serialize};
11
9
10+use crate::config::CONFIG_FILENAME;
11+
12pub const INSTANCE_DIR_NAME: &str = ".vibebox";
12pub const INSTANCE_DIR_NAME: &str = ".vibebox";
13pub const GLOBAL_CACHE_DIR_NAME: &str = "vibebox";
13pub const GLOBAL_CACHE_DIR_NAME: &str = "vibebox";
14pub const GLOBAL_DIR_NAME: &str = ".vibebox";
14pub const GLOBAL_DIR_NAME: &str = ".vibebox";
15+pub const INSTANCE_FILENAME: &str = "instance.toml";
15−const SESSION_TOML_SUFFIX: &str = ".toml";
16+pub const SESSION_TOML_SUFFIX: &str = ".toml";
16pub const VM_MANAGER_SOCKET_NAME: &str = "vm.sock";
17pub const VM_MANAGER_SOCKET_NAME: &str = "vm.sock";
17pub const VM_MANAGER_PID_NAME: &str = "vm.pid";
18pub const VM_MANAGER_PID_NAME: &str = "vm.pid";
18const SESSIONS_DIR_NAME: &str = "sessions";
19const SESSIONS_DIR_NAME: &str = "sessions";
@@ -31,6 +32,14 @@ struct SessionEntry {
31 pub id: String,
32 pub id: String,
32}
33}
33
34
35+#[derive(Debug, Default, Deserialize)]
36+struct InstanceMetadata {
37+ #[serde(default)]
38+ id: Option<String>,
39+ #[serde(default)]
40+ last_active: Option<String>,
41+}
42+
34#[derive(Debug)]
43#[derive(Debug)]
35pub struct SessionManager {
44pub struct SessionManager {
36 sessions_dir: PathBuf,
45 sessions_dir: PathBuf,
@@ -52,7 +61,7 @@ pub enum SessionError {
52 #[error("Session directory does not exist: {0}")]
61 #[error("Session directory does not exist: {0}")]
53 MissingDirectory(PathBuf),
62 MissingDirectory(PathBuf),
54 #[error(transparent)]
63 #[error(transparent)]
55− Io(#[from] io::Error),
64+ Io(#[from] std::io::Error),
56 #[error(transparent)]
65 #[error(transparent)]
57 TomlDe(#[from] toml::de::Error),
66 TomlDe(#[from] toml::de::Error),
58 #[error(transparent)]
67 #[error(transparent)]
@@ -85,8 +94,8 @@ impl SessionManager {
85 let mut added = false;
94 let mut added = false;
86
95
87 if has_config {
96 if has_config {
88− let id = read_instance_config(&directory).map_or(None, |config| Some(config.id));
97+ let meta = read_instance_metadata(&directory)?;
89− if let Some(id) = id {
98+ if let Some(id) = meta.id {
90 let record = SessionEntry {
99 let record = SessionEntry {
91 directory: directory.clone(),
100 directory: directory.clone(),
92 id: id.clone(),
101 id: id.clone(),
@@ -101,13 +110,14 @@ impl SessionManager {
101 } else {
110 } else {
102 tracing::warn!(
111 tracing::warn!(
103 directory = %directory.display(),
112 directory = %directory.display(),
113+ file = INSTANCE_FILENAME,
104 "missing session id in instance file"
114 "missing session id in instance file"
105 );
115 );
106 }
116 }
107 }
117 }
108
118
109 if removed > 0 || added {
119 if removed > 0 || added {
110− tracing::debug!(
120+ tracing::info!(
111 path = %self.sessions_dir.display(),
121 path = %self.sessions_dir.display(),
112 removed,
122 removed,
113 added,
123 added,
@@ -138,13 +148,12 @@ impl SessionManager {
138 }
148 }
139 let mut records = Vec::with_capacity(sessions.len());
149 let mut records = Vec::with_capacity(sessions.len());
140 for session in sessions {
150 for session in sessions {
141− let last_active =
151+ let meta = read_instance_metadata(&session.directory)?;
142− read_instance_config(&session.directory).map_or(None, |option| option.last_active);
143 let active = is_session_active(&session.directory);
152 let active = is_session_active(&session.directory);
144 records.push(SessionRecord {
153 records.push(SessionRecord {
145 directory: session.directory,
154 directory: session.directory,
146 id: session.id,
155 id: session.id,
147− last_active,
156+ last_active: meta.last_active,
148 active,
157 active,
149 });
158 });
150 }
159 }
@@ -187,7 +196,7 @@ impl SessionManager {
187 let path = self.session_path_for(&record.id);
196 let path = self.session_path_for(&record.id);
188 let content = toml::to_string_pretty(record)?;
197 let content = toml::to_string_pretty(record)?;
189 atomic_write(&path, content.as_bytes())?;
198 atomic_write(&path, content.as_bytes())?;
190− tracing::debug!(
199+ tracing::info!(
191 path = %path.display(),
200 path = %path.display(),
192 "wrote session record"
201 "wrote session record"
193 );
202 );
@@ -214,12 +223,12 @@ impl SessionManager {
214 removed += 1;
223 removed += 1;
215 continue;
224 continue;
216 }
225 }
217− if let Some(stem) = path.file_stem().and_then(|s| s.to_str())
226+ if let Some(stem) = path.file_stem().and_then(|s| s.to_str()) {
218− && stem != record.id
227+ if stem != record.id {
219− {
220− let _ = fs::remove_file(&path);
228+ let _ = fs::remove_file(&path);
221− removed += 1;
229+ removed += 1;
222− continue;
230+ continue;
231+ }
223 }
232 }
224 sessions.push(record);
233 sessions.push(record);
225 }
234 }
@@ -262,22 +271,43 @@ fn is_vibebox_dir(directory: &Path) -> bool {
262 if !directory.is_absolute() {
271 if !directory.is_absolute() {
263 return false;
272 return false;
264 }
273 }
265− config_path(directory).is_file()
274+ directory.join(CONFIG_FILENAME).is_file()
266}
275}
267
276
268fn is_session_active(directory: &Path) -> bool {
277fn is_session_active(directory: &Path) -> bool {
269 let instance_dir = directory.join(INSTANCE_DIR_NAME);
278 let instance_dir = directory.join(INSTANCE_DIR_NAME);
270 let pid_path = instance_dir.join(VM_MANAGER_PID_NAME);
279 let pid_path = instance_dir.join(VM_MANAGER_PID_NAME);
271− match vm_liveness(directory) {
280+ let socket_path = instance_dir.join(VM_MANAGER_SOCKET_NAME);
272− Ok(liveness) => match liveness {
281+
273− VmLiveness::RunningWithSocket { .. } => true,
282+ let pid = read_pid(&pid_path);
274− VmLiveness::RunningWithoutSocket { .. } => true,
283+ let is_alive = pid.map(pid_is_alive).unwrap_or(false);
275− VmLiveness::NotRunningOrMissing => {
284+ if !is_alive {
276− let _ = fs::remove_file(&pid_path);
285+ let _ = fs::remove_file(&pid_path);
277− false
286+ return false;
287+ }
288+
289+ if let Ok(metadata) = fs::metadata(&socket_path) {
290+ return metadata.file_type().is_socket();
291+ }
292+
293+ true
294+}
295+
296+fn read_pid(path: &Path) -> Option<u32> {
297+ let content = fs::read_to_string(path).ok()?;
298+ content.trim().parse::<u32>().ok()
299+}
300+
301+fn pid_is_alive(pid: u32) -> bool {
302+ let pid = pid as libc::pid_t;
303+ let result = unsafe { libc::kill(pid, 0) };
304+ if result == 0 {
305+ return true;
278− }
306+ }
279− },
307+ match std::io::Error::last_os_error().raw_os_error() {
308+ Some(code) if code == libc::EPERM => true,
309+ Some(code) if code == libc::ESRCH => false,
280− Err(_) => false,
310+ _ => false,
281 }
311 }
282}
312}
283
313
@@ -285,11 +315,31 @@ fn read_session_file(path: &Path) -> Result<SessionEntry, SessionError> {
285 let raw = fs::read_to_string(path)?;
315 let raw = fs::read_to_string(path)?;
286 let record: SessionEntry = toml::from_str(&raw)?;
316 let record: SessionEntry = toml::from_str(&raw)?;
287 if record.id.trim().is_empty() {
317 if record.id.trim().is_empty() {
288− return Err(io::Error::new(io::ErrorKind::InvalidData, "session id missing").into());
318+ return Err(std::io::Error::new(io::ErrorKind::InvalidData, "session id missing").into());
289 }
319 }
290 Ok(record)
320 Ok(record)
291}
321}
292
322
323+fn read_instance_metadata(directory: &Path) -> Result<InstanceMetadata, SessionError> {
324+ let instance_path = directory.join(INSTANCE_DIR_NAME).join(INSTANCE_FILENAME);
325+ if !instance_path.exists() {
326+ return Ok(InstanceMetadata::default());
327+ }
328+ let raw = fs::read_to_string(&instance_path)?;
329+ let mut meta: InstanceMetadata = toml::from_str(&raw)?;
330+ if let Some(id) = &meta.id {
331+ if id.trim().is_empty() {
332+ meta.id = None;
333+ }
334+ }
335+ if let Some(last_active) = &meta.last_active {
336+ if last_active.trim().is_empty() {
337+ meta.last_active = None;
338+ }
339+ }
340+ Ok(meta)
341+}
342+
293fn atomic_write(path: &Path, content: &[u8]) -> io::Result<()> {
343fn atomic_write(path: &Path, content: &[u8]) -> io::Result<()> {
294 let Some(parent) = path.parent() else {
344 let Some(parent) = path.parent() else {
295 return Err(io::Error::new(
345 return Err(io::Error::new(
@@ -312,7 +362,6 @@ fn atomic_write(path: &Path, content: &[u8]) -> io::Result<()> {
312#[cfg(test)]
362#[cfg(test)]
313mod tests {
363mod tests {
314 use super::*;
364 use super::*;
315− use crate::instance::{InstanceConfig, write_instance_config};
316 use std::fs;
365 use std::fs;
317 use tempfile::TempDir;
366 use tempfile::TempDir;
318
367
@@ -326,14 +375,11 @@ mod tests {
326 dir
375 dir
327 }
376 }
328
377
329− fn write_instance(project_dir: &Path, id: &str, last_active: &str) -> Result<()> {
378+ fn write_instance(project_dir: &Path, id: &str, last_active: &str) {
379+ let instance_dir = project_dir.join(INSTANCE_DIR_NAME);
330− fs::create_dir_all(project_dir)?;
380+ fs::create_dir_all(&instance_dir).unwrap();
331−
381+ let content = format!("id = \"{id}\"\nlast_active = \"{last_active}\"\n");
332− let mut config = InstanceConfig::default();
382+ fs::write(instance_dir.join(INSTANCE_FILENAME), content).unwrap();
333− config.id = id.to_string();
334− config.last_active = Some(last_active.to_string());
335−
336− write_instance_config(project_dir, &config)
337 }
383 }
338
384
339 #[test]
385 #[test]
@@ -341,14 +387,11 @@ mod tests {
341 let temp = TempDir::new().unwrap();
387 let temp = TempDir::new().unwrap();
342 let mgr = manager(&temp);
388 let mgr = manager(&temp);
343 let project_dir = create_project_dir(&temp);
389 let project_dir = create_project_dir(&temp);
344− fs::write(config_path(project_dir.as_path()), "").unwrap();
390+ fs::write(project_dir.join(CONFIG_FILENAME), "").unwrap();
345− assert!(
346− write_instance(
391+ write_instance(
347− &project_dir,
392+ &project_dir,
348− "019bf290-cccc-7c23-ba1d-dce7e6d40693",
393+ "019bf290-cccc-7c23-ba1d-dce7e6d40693",
349− "2026-02-07T05:00:00Z",
394+ "2026-02-07T05:00:00Z",
350− )
351− .is_ok()
352 );
395 );
353
396
354 let dirs = mgr.update_global_sessions(&project_dir).unwrap();
397 let dirs = mgr.update_global_sessions(&project_dir).unwrap();
@@ -369,18 +412,15 @@ mod tests {
369 let temp = TempDir::new().unwrap();
412 let temp = TempDir::new().unwrap();
370 let mgr = manager(&temp);
413 let mgr = manager(&temp);
371 let project_dir = create_project_dir(&temp);
414 let project_dir = create_project_dir(&temp);
372− fs::write(config_path(project_dir.as_path()), "").unwrap();
415+ fs::write(project_dir.join(CONFIG_FILENAME), "").unwrap();
373− assert!(
374− write_instance(
416+ write_instance(
375− &project_dir,
417+ &project_dir,
376− "019bf290-cccc-7c23-ba1d-dce7e6d40693",
418+ "019bf290-cccc-7c23-ba1d-dce7e6d40693",
377− "2026-02-07T05:00:00Z",
419+ "2026-02-07T05:00:00Z",
378− )
379− .is_ok()
380 );
420 );
381 let _ = mgr.update_global_sessions(&project_dir).unwrap();
421 let _ = mgr.update_global_sessions(&project_dir).unwrap();
382
422
383− fs::remove_file(config_path(project_dir.as_path())).unwrap();
423+ fs::remove_file(project_dir.join(CONFIG_FILENAME)).unwrap();
384 let sessions = mgr.list_sessions().unwrap();
424 let sessions = mgr.list_sessions().unwrap();
385 assert!(sessions.is_empty());
425 assert!(sessions.is_empty());
386
426
@@ -411,14 +451,11 @@ mod tests {
411 let temp = TempDir::new().unwrap();
451 let temp = TempDir::new().unwrap();
412 let mgr = manager(&temp);
452 let mgr = manager(&temp);
413 let project_dir = create_project_dir(&temp);
453 let project_dir = create_project_dir(&temp);
414− fs::write(config_path(project_dir.as_path()), "").unwrap();
454+ fs::write(project_dir.join(CONFIG_FILENAME), "").unwrap();
415− assert!(
416− write_instance(
455+ write_instance(
417− &project_dir,
456+ &project_dir,
418− "019bf290-cccc-7c23-ba1d-dce7e6d40693",
457+ "019bf290-cccc-7c23-ba1d-dce7e6d40693",
419− "2026-02-07T05:00:00Z",
458+ "2026-02-07T05:00:00Z",
420− )
421− .is_ok()
422 );
459 );
423 let _ = mgr.update_global_sessions(&project_dir).unwrap();
460 let _ = mgr.update_global_sessions(&project_dir).unwrap();
424
461
src/ssh.sh+16−61
@@ -2,9 +2,7 @@
2set -eu
2set -eu
3
3
4SSH_USER="__SSH_USER__"
4SSH_USER="__SSH_USER__"
5−SUDO_PASSWORD="__SUDO_PASSWORD__"
6PROJECT_NAME="__PROJECT_NAME__"
5PROJECT_NAME="__PROJECT_NAME__"
7−PROJECT_GUEST_DIR="__PROJECT_GUEST_DIR__"
8KEY_PATH="__KEY_PATH__"
6KEY_PATH="__KEY_PATH__"
9
7
10diag() { echo "[vibebox][diag] $*" >&2; }
8diag() { echo "[vibebox][diag] $*" >&2; }
@@ -51,7 +49,7 @@ dump_diag() {
51}
49}
52
50
53# 1) tmpfs mount
51# 1) tmpfs mount
54−TARGET="${PROJECT_GUEST_DIR}/.vibebox"
52+TARGET="/root/${PROJECT_NAME}/.vibebox"
55if [ -d "$TARGET" ] && ! mountpoint -q "$TARGET"; then
53if [ -d "$TARGET" ] && ! mountpoint -q "$TARGET"; then
56 mount -t tmpfs tmpfs "$TARGET"
54 mount -t tmpfs tmpfs "$TARGET"
57fi
55fi
@@ -62,10 +60,6 @@ if ! id -u "$SSH_USER" >/dev/null 2>&1; then
62 usermod -aG sudo "$SSH_USER" || true
60 usermod -aG sudo "$SSH_USER" || true
63fi
61fi
64
62
65−if [ -n "$SUDO_PASSWORD" ]; then
66− echo "${SSH_USER}:${SUDO_PASSWORD}" | chpasswd
67−fi
68−
69install -d -m 700 -o "$SSH_USER" -g "$SSH_USER" "/home/${SSH_USER}/.ssh"
63install -d -m 700 -o "$SSH_USER" -g "$SSH_USER" "/home/${SSH_USER}/.ssh"
70install -m 600 -o "$SSH_USER" -g "$SSH_USER" "$KEY_PATH" "/home/${SSH_USER}/.ssh/authorized_keys"
64install -m 600 -o "$SSH_USER" -g "$SSH_USER" "$KEY_PATH" "/home/${SSH_USER}/.ssh/authorized_keys"
71
65
@@ -84,21 +78,6 @@ __VIBEBOX_SHELL_SCRIPT__
84VIBEBOX_SHELL_EOF
78VIBEBOX_SHELL_EOF
85chmod 644 /etc/profile.d/vibebox.sh
79chmod 644 /etc/profile.d/vibebox.sh
86
80
87−# Auto-cd into project for interactive shells
88−cat > /etc/profile.d/vibebox-project.sh <<'VIBEBOX_PROJECT_EOF'
89−case "$-" in
90− *i*)
91− project_home="${HOME}/__PROJECT_NAME__"
92− if [ "$USER" = "__SSH_USER__" ] && [ -d "$project_home" ]; then
93− cd "$project_home"
94− elif [ "$USER" = "__SSH_USER__" ] && [ -d "__PROJECT_GUEST_DIR__" ]; then
95− cd "__PROJECT_GUEST_DIR__"
96− fi
97− ;;
98−esac
99−VIBEBOX_PROJECT_EOF
100−chmod 644 /etc/profile.d/vibebox-project.sh
101−
102if ! grep -q "vibebox-aliases" "${USER_HOME}/.bashrc" 2>/dev/null; then
81if ! grep -q "vibebox-aliases" "${USER_HOME}/.bashrc" 2>/dev/null; then
103 {
82 {
104 echo ""
83 echo ""
@@ -109,22 +88,16 @@ fi
109
88
110# Install Mise
89# Install Mise
111MISE_BIN="${USER_HOME}/.local/bin/mise"
90MISE_BIN="${USER_HOME}/.local/bin/mise"
112−mise_warn() { echo "[mise] $*" >&2; }
113−mise_ok() { command -v mise >/dev/null 2>&1 || [ -x "$MISE_BIN" ]; }
114−mise_install() {
115− if [ ! -x "$MISE_BIN" ] && ! command -v mise >/dev/null 2>&1; then
91+if [ ! -x "$MISE_BIN" ] && ! command -v mise >/dev/null 2>&1; then
116− if ! curl https://mise.run | HOME="$USER_HOME" sh; then
92+ curl https://mise.run | HOME="$USER_HOME" sh
117− mise_warn "mise install script failed"
118− return 1
119− fi
120− fi
93+fi
121− echo 'eval "$(~/.local/bin/mise activate bash)"' >> "${USER_HOME}/.bashrc"
94+echo 'eval "$(~/.local/bin/mise activate bash)"' >> "${USER_HOME}/.bashrc"
122
95
123− export PATH="${USER_HOME}/.local/bin:/usr/local/bin:$PATH"
96+export PATH="${USER_HOME}/.local/bin:/usr/local/bin:$PATH"
124
97
125− mkdir -p "${USER_HOME}/.config/mise"
98+mkdir -p "${USER_HOME}/.config/mise"
126
99
127− cat > "${USER_HOME}/.config/mise/config.toml" <<MISE
100+cat > "${USER_HOME}/.config/mise/config.toml" <<MISE
128 [settings]
101 [settings]
129 # Always use the venv created by uv, if available in directory
102 # Always use the venv created by uv, if available in directory
130 python.uv_venv_auto = true
103 python.uv_venv_auto = true
@@ -138,23 +111,11 @@ mise_install() {
138 "npm:@anthropic-ai/claude-code" = "latest"
111 "npm:@anthropic-ai/claude-code" = "latest"
139MISE
112MISE
140
113
141− touch "${USER_HOME}/.config/mise/mise.lock"
114+touch "${USER_HOME}/.config/mise/mise.lock"
142− if [ -x "$MISE_BIN" ]; then
115+if [ -x "$MISE_BIN" ]; then
143− if ! HOME="$USER_HOME" "$MISE_BIN" install; then
116+ HOME="$USER_HOME" "$MISE_BIN" install
144− mise_warn "mise install failed"
145− return 1
146− fi
147− else
117+else
148− if ! HOME="$USER_HOME" mise install; then
118+ HOME="$USER_HOME" mise install
149− mise_warn "mise install failed"
150− return 1
151− fi
152− fi
153−}
154−
155−if ! mise_install; then
156− diag "mise installation failed"
157− vibebox_fail "mise installation failed" 1
158fi
119fi
159
120
160# 3) start ssh (don't swallow failures)
121# 3) start ssh (don't swallow failures)
@@ -163,7 +124,7 @@ if ! systemctl is-active --quiet ssh; then
163 if ! systemctl start ssh; then
124 if ! systemctl start ssh; then
164 diag "systemctl start ssh failed"
125 diag "systemctl start ssh failed"
165 dump_diag
126 dump_diag
166− vibebox_fail "failed to start ssh service" 1
127+ exit 1
167 fi
128 fi
168fi
129fi
169
130
@@ -201,7 +162,7 @@ done
201if [ -z "$dev" ] || [ -z "$ip" ]; then
162if [ -z "$dev" ] || [ -z "$ip" ]; then
202 diag "no stable IPv4 on default route interface"
163 diag "no stable IPv4 on default route interface"
203 dump_diag
164 dump_diag
204− vibebox_fail "no stable ipv4 route on default interface" 1
165+ exit 1
205fi
166fi
206
167
207# 5) strong verify: ssh must listen externally (0.0.0.0:22 or $ip:22 or [::]:22)
168# 5) strong verify: ssh must listen externally (0.0.0.0:22 or $ip:22 or [::]:22)
@@ -220,14 +181,8 @@ done
220if ! listens_ok; then
181if ! listens_ok; then
221 diag "sshd not listening on 0.0.0.0:22 / ${ip}:22"
182 diag "sshd not listening on 0.0.0.0:22 / ${ip}:22"
222 dump_diag
183 dump_diag
223− vibebox_fail "sshd is not listening on the expected address" 1
184+ exit 1
224fi
185fi
225
186
226−ip a
227−ip link
228−curl -s https://api.ipify.org ; echo
229−
230−cat /etc/machine-id
231−
232echo VIBEBOX_SSH_READY
187echo VIBEBOX_SSH_READY
233echo "VIBEBOX_IPV4=$ip"
188echo "VIBEBOX_IPV4=$ip"
src/tui.rs+31−33
@@ -1,4 +1,10 @@
1−use bytesize::ByteSize;
1+use std::{
2+ io::{self, Write},
3+ os::unix::io::OwnedFd,
4+ path::PathBuf,
5+ sync::{Arc, Mutex},
6+};
7+
2use color_eyre::Result;
8use color_eyre::Result;
3use crossterm::{
9use crossterm::{
4 cursor::{MoveTo, Show},
10 cursor::{MoveTo, Show},
@@ -16,16 +22,9 @@ use ratatui::{
16 text::{Line, Span, Text},
22 text::{Line, Span, Text},
17 widgets::{Block, Borders, Cell, List, ListItem, Paragraph, Row, Table, Widget},
23 widgets::{Block, Borders, Cell, List, ListItem, Paragraph, Row, Table, Widget},
18};
24};
19−use std::{
20− io::{self, Write},
21− os::unix::io::OwnedFd,
22− path::PathBuf,
23− sync::{Arc, Mutex},
24−};
25
25
26use crate::vm;
26use crate::vm;
27
27
28−// https://patorjk.com/software/taag/#p=display&f=ANSI+Shadow&t=VIBEBOX&x=none&v=4&h=4&w=80&we=false
29const ASCII_BANNER: [&str; 7] = [
28const ASCII_BANNER: [&str; 7] = [
30 "██╗ ██╗██╗██████╗ ███████╗██████╗ ██████╗ ██╗ ██╗",
29 "██╗ ██╗██╗██████╗ ███████╗██████╗ ██████╗ ██╗ ██╗",
31 "██║ ██║██║██╔══██╗██╔════╝██╔══██╗██╔═══██╗╚██╗██╔╝",
30 "██║ ██║██║██╔══██╗██╔════╝██╔══██╗██╔═══██╗╚██╗██╔╝",
@@ -39,9 +38,8 @@ const INFO_LINE_COUNT: u16 = 5;
39
38
40#[derive(Debug, Clone)]
39#[derive(Debug, Clone)]
41pub struct VmInfo {
40pub struct VmInfo {
42− pub max_memory: ByteSize,
41+ pub max_memory_mb: u64,
43 pub cpu_cores: usize,
42 pub cpu_cores: usize,
44− pub max_disk: ByteSize,
45 pub system_name: String,
43 pub system_name: String,
46 pub auto_shutdown_ms: u64,
44 pub auto_shutdown_ms: u64,
47}
45}
@@ -474,27 +472,27 @@ fn write_buffer_with_style(buffer: &Buffer, out: &mut impl Write) -> io::Result<
474 Ok(())
472 Ok(())
475}
473}
476
474
477−fn map_color(color: Color) -> CrosstermColor {
475+fn map_color(color: ratatui::style::Color) -> CrosstermColor {
478 match color {
476 match color {
479− Color::Reset => CrosstermColor::Reset,
477+ ratatui::style::Color::Reset => CrosstermColor::Reset,
480− Color::Black => CrosstermColor::Black,
478+ ratatui::style::Color::Black => CrosstermColor::Black,
481− Color::Red => CrosstermColor::DarkRed,
479+ ratatui::style::Color::Red => CrosstermColor::DarkRed,
482− Color::Green => CrosstermColor::DarkGreen,
480+ ratatui::style::Color::Green => CrosstermColor::DarkGreen,
483− Color::Yellow => CrosstermColor::DarkYellow,
481+ ratatui::style::Color::Yellow => CrosstermColor::DarkYellow,
484− Color::Blue => CrosstermColor::DarkBlue,
482+ ratatui::style::Color::Blue => CrosstermColor::DarkBlue,
485− Color::Magenta => CrosstermColor::DarkMagenta,
483+ ratatui::style::Color::Magenta => CrosstermColor::DarkMagenta,
486− Color::Cyan => CrosstermColor::DarkCyan,
484+ ratatui::style::Color::Cyan => CrosstermColor::DarkCyan,
487− Color::Gray => CrosstermColor::Grey,
485+ ratatui::style::Color::Gray => CrosstermColor::Grey,
488− Color::DarkGray => CrosstermColor::DarkGrey,
486+ ratatui::style::Color::DarkGray => CrosstermColor::DarkGrey,
489− Color::LightRed => CrosstermColor::Red,
487+ ratatui::style::Color::LightRed => CrosstermColor::Red,
490− Color::LightGreen => CrosstermColor::Green,
488+ ratatui::style::Color::LightGreen => CrosstermColor::Green,
491− Color::LightYellow => CrosstermColor::Yellow,
489+ ratatui::style::Color::LightYellow => CrosstermColor::Yellow,
492− Color::LightBlue => CrosstermColor::Blue,
490+ ratatui::style::Color::LightBlue => CrosstermColor::Blue,
493− Color::LightMagenta => CrosstermColor::Magenta,
491+ ratatui::style::Color::LightMagenta => CrosstermColor::Magenta,
494− Color::LightCyan => CrosstermColor::Cyan,
492+ ratatui::style::Color::LightCyan => CrosstermColor::Cyan,
495− Color::White => CrosstermColor::White,
493+ ratatui::style::Color::White => CrosstermColor::White,
496− Color::Rgb(r, g, b) => CrosstermColor::Rgb { r, g, b },
494+ ratatui::style::Color::Rgb(r, g, b) => CrosstermColor::Rgb { r, g, b },
497− Color::Indexed(i) => CrosstermColor::AnsiValue(i),
495+ ratatui::style::Color::Indexed(i) => CrosstermColor::AnsiValue(i),
498 }
496 }
499}
497}
500
498
@@ -571,11 +569,11 @@ fn render_header(buffer: &mut Buffer, area: Rect, app: &AppState) {
571 Span::styled(&app.vm_info.system_name, Style::default().fg(Color::Green)),
569 Span::styled(&app.vm_info.system_name, Style::default().fg(Color::Green)),
572 ]),
570 ]),
573 Line::from(vec![
571 Line::from(vec![
574− Span::raw("CPU / Memory / Disk: "),
572+ Span::raw("CPU / Memory: "),
575 Span::styled(
573 Span::styled(
576 format!(
574 format!(
577− "{} cores / {} / {}",
575+ "{} cores / {} MB",
578− app.vm_info.cpu_cores, app.vm_info.max_memory, app.vm_info.max_disk
576+ app.vm_info.cpu_cores, app.vm_info.max_memory_mb
579 ),
577 ),
580 Style::default().fg(Color::Green),
578 Style::default().fg(Color::Green),
581 ),
579 ),
src/utils.rsdeleted−18
@@ -1,18 +0,0 @@
1−use std::{
2− env,
3− path::{Path, PathBuf},
4−};
5−
6−pub fn relative_to_home(directory: &Path) -> String {
7− let Ok(home) = env::var("HOME") else {
8− return directory.display().to_string();
9− };
10− let home_path = PathBuf::from(home);
11− if let Ok(stripped) = directory.strip_prefix(&home_path) {
12− if stripped.components().next().is_none() {
13− return "~".to_string();
14− }
15− return format!("~/{}", stripped.display());
16− }
17− directory.display().to_string()
18−}
src/vm.rs+166−318
@@ -1,5 +1,5 @@
1+use crate::instance::STATUS_FILE_NAME;
1use crate::session_manager::{GLOBAL_CACHE_DIR_NAME, INSTANCE_DIR_NAME};
2use crate::session_manager::{GLOBAL_CACHE_DIR_NAME, INSTANCE_DIR_NAME};
2−use anyhow::{Context, Error, Result, bail};
3use std::{
3use std::{
4 env, fs,
4 env, fs,
5 io::{self, Write},
5 io::{self, Write},
@@ -23,7 +23,6 @@ use std::{
23};
23};
24
24
25use block2::RcBlock;
25use block2::RcBlock;
26−use bytesize::ByteSize;
27use dispatch2::DispatchQueue;
26use dispatch2::DispatchQueue;
28use objc2::{AnyThread, rc::Retained, runtime::ProtocolObject};
27use objc2::{AnyThread, rc::Retained, runtime::ProtocolObject};
29use objc2_foundation::*;
28use objc2_foundation::*;
@@ -33,46 +32,74 @@ const DEBIAN_COMPRESSED_DISK_URL: &str = "https://cloud.debian.org/images/cloud/
33const DEBIAN_COMPRESSED_SHA: &str = "6ab9be9e6834adc975268367f2f0235251671184345c34ee13031749fdfbf66fe4c3aafd949a2d98550426090e9ac645e79009c51eb0eefc984c15786570bb38";
32const DEBIAN_COMPRESSED_SHA: &str = "6ab9be9e6834adc975268367f2f0235251671184345c34ee13031749fdfbf66fe4c3aafd949a2d98550426090e9ac645e79009c51eb0eefc984c15786570bb38";
34const DEBIAN_COMPRESSED_SIZE_BYTES: u64 = 280901576;
33const DEBIAN_COMPRESSED_SIZE_BYTES: u64 = 280901576;
35const SHARED_DIRECTORIES_TAG: &str = "shared";
34const SHARED_DIRECTORIES_TAG: &str = "shared";
36−pub const PROJECT_GUEST_BASE: &str = "/usr/local/vibebox-mounts";
37
35
36+const BYTES_PER_MB: u64 = 1024 * 1024;
37+const DEFAULT_CPU_COUNT: usize = 2;
38+const DEFAULT_RAM_MB: u64 = 2048;
39+const DEFAULT_RAM_BYTES: u64 = DEFAULT_RAM_MB * BYTES_PER_MB;
38const START_TIMEOUT: Duration = Duration::from_secs(60);
40const START_TIMEOUT: Duration = Duration::from_secs(60);
39const LOGIN_EXPECT_TIMEOUT: Duration = Duration::from_secs(120);
41const LOGIN_EXPECT_TIMEOUT: Duration = Duration::from_secs(120);
40−const PROVISION_EXPECT_TIMEOUT: Duration = Duration::from_secs(900);
41
42
42−const ERROR_REPORT_SCRIPT: &str = include_str!("error_report.sh");
43+struct StatusFile {
44+ path: PathBuf,
45+ cleared: AtomicBool,
46+}
47+
48+impl StatusFile {
49+ fn new(path: PathBuf) -> Self {
50+ Self {
51+ path,
52+ cleared: AtomicBool::new(false),
53+ }
54+ }
55+
56+ fn update(&self, message: &str) {
57+ let _ = fs::write(&self.path, message);
58+ }
59+
60+ fn clear(&self) {
61+ if !self.cleared.swap(true, Ordering::SeqCst) {
62+ let _ = fs::remove_file(&self.path);
63+ }
64+ }
65+}
66+
67+impl Drop for StatusFile {
68+ fn drop(&mut self) {
69+ if !self.cleared.load(Ordering::SeqCst) {
70+ let _ = fs::remove_file(&self.path);
71+ self.cleared.store(true, Ordering::SeqCst);
72+ }
73+ }
74+}
43const PROVISION_SCRIPT: &str = include_str!("provision.sh");
75const PROVISION_SCRIPT: &str = include_str!("provision.sh");
44−const RESIZE_DISK_SCRIPT: &str = include_str!("resize_disk.sh");
76+const PROVISION_SCRIPT_NAME: &str = "provision.sh";
45const DEFAULT_RAW_NAME: &str = "default.raw";
77const DEFAULT_RAW_NAME: &str = "default.raw";
46const INSTANCE_RAW_NAME: &str = "instance.raw";
78const INSTANCE_RAW_NAME: &str = "instance.raw";
47const BASE_DISK_RAW_NAME: &str = "disk.raw";
79const BASE_DISK_RAW_NAME: &str = "disk.raw";
48
80
49#[derive(Clone)]
81#[derive(Clone)]
50−pub enum LoginAction {
82+pub(crate) enum LoginAction {
51− Expect {
52− text: String,
53− timeout: Duration,
54− },
55− ExpectEither {
56− success: String,
57− failure: String,
58− timeout: Duration,
83+ Expect { text: String, timeout: Duration },
59− },
60 Send(String),
84 Send(String),
61}
85}
62−use crate::config::BoxConfig;
63use LoginAction::*;
86use LoginAction::*;
64
87
65#[derive(Clone)]
88#[derive(Clone)]
66−pub struct DirectoryShare {
89+pub(crate) struct DirectoryShare {
67 host: PathBuf,
90 host: PathBuf,
68 guest: PathBuf,
91 guest: PathBuf,
69 read_only: bool,
92 read_only: bool,
70}
93}
71
94
72impl DirectoryShare {
95impl DirectoryShare {
96+ pub(crate) fn new(
97+ host: PathBuf,
73− pub fn new(host: PathBuf, mut guest: PathBuf, read_only: bool) -> Result<Self> {
98+ mut guest: PathBuf,
99+ read_only: bool,
100+ ) -> Result<Self, Box<dyn std::error::Error>> {
74 if !host.exists() {
101 if !host.exists() {
75− bail!(format!("host path does not exist: {}", host.display()));
102+ return Err(format!("Host path does not exist: {}", host.display()).into());
76 }
103 }
77 if !guest.is_absolute() {
104 if !guest.is_absolute() {
78 guest = PathBuf::from("/root").join(guest);
105 guest = PathBuf::from("/root").join(guest);
@@ -84,10 +111,10 @@ impl DirectoryShare {
84 })
111 })
85 }
112 }
86
113
87− pub fn from_mount_spec(spec: &str) -> Result<Self> {
114+ pub(crate) fn from_mount_spec(spec: &str) -> Result<Self, Box<dyn std::error::Error>> {
88 let parts: Vec<&str> = spec.split(':').collect();
115 let parts: Vec<&str> = spec.split(':').collect();
89 if parts.len() < 2 || parts.len() > 3 {
116 if parts.len() < 2 || parts.len() > 3 {
90− bail!(format!("invalid mount spec: {spec}"));
117+ return Err(format!("Invalid mount spec: {spec}").into());
91 }
118 }
92 let host = expand_tilde_path(parts[0]);
119 let host = expand_tilde_path(parts[0]);
93 let guest = PathBuf::from(parts[1]);
120 let guest = PathBuf::from(parts[1]);
@@ -96,10 +123,11 @@ impl DirectoryShare {
96 "read-only" => true,
123 "read-only" => true,
97 "read-write" => false,
124 "read-write" => false,
98 _ => {
125 _ => {
99− bail!(format!(
126+ return Err(format!(
100 "Invalid mount mode '{}'; expected read-only or read-write",
127 "Invalid mount mode '{}'; expected read-only or read-write",
101 parts[2]
128 parts[2]
102− ));
129+ )
130+ .into());
103 }
131 }
104 }
132 }
105 } else {
133 } else {
@@ -127,10 +155,10 @@ fn expand_tilde_path(value: &str) -> PathBuf {
127 if let Ok(home) = env::var("HOME") {
155 if let Ok(home) = env::var("HOME") {
128 return PathBuf::from(home).join(stripped);
156 return PathBuf::from(home).join(stripped);
129 }
157 }
130− } else if value == "~"
158+ } else if value == "~" {
131− && let Ok(home) = env::var("HOME")
159+ if let Ok(home) = env::var("HOME") {
132− {
133− return PathBuf::from(home);
160+ return PathBuf::from(home);
161+ }
134 }
162 }
135 PathBuf::from(value)
163 PathBuf::from(value)
136}
164}
@@ -138,33 +166,23 @@ fn expand_tilde_path(value: &str) -> PathBuf {
138pub struct VmArg {
166pub struct VmArg {
139 pub cpu_count: usize,
167 pub cpu_count: usize,
140 pub ram_bytes: u64,
168 pub ram_bytes: u64,
141− pub disk_bytes: u64,
142 pub no_default_mounts: bool,
169 pub no_default_mounts: bool,
143 pub mounts: Vec<String>,
170 pub mounts: Vec<String>,
144}
171}
145
172
146−type StatusEmitter<'a> = dyn Fn(&str) + std::marker::Send + Sync + 'a;
147−
148−fn emit_status(status: Option<&StatusEmitter<'_>>, message: &str) {
149− if let Some(status) = status {
150− status(message);
151− }
152−}
153−
154−pub fn run_with_args<F>(args: VmArg, io_handler: F) -> Result<()>
173+pub fn run_with_args<F>(args: VmArg, io_handler: F) -> Result<(), Box<dyn std::error::Error>>
155where
174where
156 F: FnOnce(Arc<OutputMonitor>, OwnedFd, OwnedFd) -> IoContext,
175 F: FnOnce(Arc<OutputMonitor>, OwnedFd, OwnedFd) -> IoContext,
157{
176{
158− run_with_args_and_extras(args, io_handler, Vec::new(), Vec::new(), None)
177+ run_with_args_and_extras(args, io_handler, Vec::new(), Vec::new())
159}
178}
160
179
161−pub fn run_with_args_and_extras<F>(
180+pub(crate) fn run_with_args_and_extras<F>(
162 args: VmArg,
181 args: VmArg,
163 io_handler: F,
182 io_handler: F,
164 extra_login_actions: Vec<LoginAction>,
183 extra_login_actions: Vec<LoginAction>,
165 extra_directory_shares: Vec<DirectoryShare>,
184 extra_directory_shares: Vec<DirectoryShare>,
166− status: Option<&StatusEmitter<'_>>,
185+) -> Result<(), Box<dyn std::error::Error>>
167−) -> Result<()>
168where
186where
169 F: FnOnce(Arc<OutputMonitor>, OwnedFd, OwnedFd) -> IoContext,
187 F: FnOnce(Arc<OutputMonitor>, OwnedFd, OwnedFd) -> IoContext,
170{
188{
@@ -173,7 +191,7 @@ where
173 let project_root = env::current_dir()?;
191 let project_root = env::current_dir()?;
174 let project_name = project_root
192 let project_name = project_root
175 .file_name()
193 .file_name()
176− .with_context(|| "Project directory has no name")?
194+ .ok_or("Project directory has no name")?
177 .to_string_lossy()
195 .to_string_lossy()
178 .into_owned();
196 .into_owned();
179
197
@@ -185,10 +203,8 @@ where
185 let guest_mise_cache = cache_dir.join(".guest-mise-cache");
203 let guest_mise_cache = cache_dir.join(".guest-mise-cache");
186
204
187 let instance_dir = project_root.join(INSTANCE_DIR_NAME);
205 let instance_dir = project_root.join(INSTANCE_DIR_NAME);
188− fs::create_dir_all(&instance_dir)?;
206+ let status_file = StatusFile::new(instance_dir.join(STATUS_FILE_NAME));
189− emit_status(status, "preparing VM image...");
207+ status_file.update("preparing VM image...");
190− tracing::info!("preparing VM image...");
191− let provision_log = instance_dir.join("provision.log");
192
208
193 let basename_compressed = DEBIAN_COMPRESSED_DISK_URL.rsplit('/').next().unwrap();
209 let basename_compressed = DEBIAN_COMPRESSED_DISK_URL.rsplit('/').next().unwrap();
194 let base_compressed = cache_dir.join(basename_compressed);
210 let base_compressed = cache_dir.join(basename_compressed);
@@ -212,26 +228,16 @@ where
212 &base_compressed,
228 &base_compressed,
213 &default_raw,
229 &default_raw,
214 std::slice::from_ref(&mise_directory_share),
230 std::slice::from_ref(&mise_directory_share),
215− Some(&provision_log),
231+ Some(&status_file),
216− status,
217− )?;
218− let _ = ensure_instance_disk(
219− &instance_raw,
220− &default_raw,
221− ByteSize(args.disk_bytes),
222− status,
223 )?;
232 )?;
224− let base_size = fs::metadata(&default_raw)?.len();
233+ ensure_instance_disk(&instance_raw, &default_raw, Some(&status_file))?;
225− let instance_size = fs::metadata(&instance_raw)?.len();
226− let needs_resize = instance_size > base_size;
227 let disk_path = instance_raw;
234 let disk_path = instance_raw;
228
235
229 let mut login_actions = Vec::new();
236 let mut login_actions = Vec::new();
230 let mut directory_shares = Vec::new();
237 let mut directory_shares = Vec::new();
231
238
232 if !args.no_default_mounts {
239 if !args.no_default_mounts {
233− let project_guest_dir = PathBuf::from(PROJECT_GUEST_BASE).join(project_name);
234− login_actions.push(Send(format!("cd {}", project_guest_dir.display())));
240+ login_actions.push(Send(format!("cd {project_name}")));
235
241
236 // discourage read/write of .git folder from within the VM. note that this isn't secure, since the VM runs as root and could unmount this.
242 // discourage read/write of .git folder from within the VM. note that this isn't secure, since the VM runs as root and could unmount this.
237 // I couldn't find an alternative way to do this --- the MacOS sandbox doesn't apply to the Apple Virtualization system
243 // I couldn't find an alternative way to do this --- the MacOS sandbox doesn't apply to the Apple Virtualization system
@@ -239,6 +245,15 @@ where
239 login_actions.push(Send(r"mount -t tmpfs tmpfs .git/".into()));
245 login_actions.push(Send(r"mount -t tmpfs tmpfs .git/".into()));
240 }
246 }
241
247
248+ directory_shares.push(
249+ DirectoryShare::new(
250+ project_root,
251+ PathBuf::from("/root/").join(project_name),
252+ false,
253+ )
254+ .expect("Project directory must exist"),
255+ );
256+
242 directory_shares.push(mise_directory_share);
257 directory_shares.push(mise_directory_share);
243 }
258 }
244
259
@@ -248,11 +263,6 @@ where
248 directory_shares.push(DirectoryShare::from_mount_spec(spec)?);
263 directory_shares.push(DirectoryShare::from_mount_spec(spec)?);
249 }
264 }
250
265
251− if needs_resize {
252− let resize_cmd = script_command_from_content("resize_disk.sh", RESIZE_DISK_SCRIPT)?;
253− login_actions.push(Send(resize_cmd));
254− }
255−
256 if let Some(motd_action) = motd_login_action(&directory_shares) {
266 if let Some(motd_action) = motd_login_action(&directory_shares) {
257 login_actions.push(motd_action);
267 login_actions.push(motd_action);
258 }
268 }
@@ -265,29 +275,25 @@ where
265 &directory_shares[..],
275 &directory_shares[..],
266 args.cpu_count,
276 args.cpu_count,
267 args.ram_bytes,
277 args.ram_bytes,
268− status,
278+ Some(&status_file),
269 io_handler,
279 io_handler,
270 )
280 )
271}
281}
272
282
273−pub fn script_command_from_content(label: &str, script: &str) -> Result<String> {
283+pub(crate) fn script_command_from_content(
284+ label: &str,
285+ script: &str,
286+) -> Result<String, Box<dyn std::error::Error>> {
274 let marker = "VIBE_SCRIPT_EOF";
287 let marker = "VIBE_SCRIPT_EOF";
275 let guest_dir = "/tmp/vibe-scripts";
288 let guest_dir = "/tmp/vibe-scripts";
276 let guest_path = format!("{guest_dir}/{label}.sh");
289 let guest_path = format!("{guest_dir}/{label}.sh");
277− let script_body = match script.split_once('\n') {
278− Some((first, rest)) if first.starts_with("#!") => rest,
279− _ => script,
280− };
281− let wrapped_script = ERROR_REPORT_SCRIPT
282− .replace("__LABEL__", label)
283− .replace("__SCRIPT_BODY__", script_body);
284 let command = format!(
290 let command = format!(
285− "mkdir -p {guest_dir}\ncat >{guest_path} <<'{marker}'\n{wrapped_script}\n{marker}\nchmod +x {guest_path}\n{guest_path}"
291+ "mkdir -p {guest_dir}\ncat >{guest_path} <<'{marker}'\n{script}\n{marker}\nchmod +x {guest_path}\n{guest_path}"
286 );
292 );
287 if script.contains(marker) {
293 if script.contains(marker) {
288− bail!(format!(
294+ return Err(
289− "Script '{label}' contains marker '{marker}', cannot safely upload"
295+ format!("Script '{label}' contains marker '{marker}', cannot safely upload").into(),
290− ));
296+ );
291 }
297 }
292 Ok(command)
298 Ok(command)
293}
299}
@@ -351,12 +357,6 @@ enum WaitResult {
351 Found,
357 Found,
352}
358}
353
359
354−#[derive(PartialEq, Eq)]
355−enum WaitAnyResult {
356− Timeout,
357− Found(usize),
358−}
359−
360pub enum VmInput {
360pub enum VmInput {
361 Bytes(Vec<u8>),
361 Bytes(Vec<u8>),
362 Shutdown,
362 Shutdown,
@@ -364,7 +364,6 @@ pub enum VmInput {
364
364
365enum VmOutput {
365enum VmOutput {
366 LoginActionTimeout { action: String, timeout: Duration },
366 LoginActionTimeout { action: String, timeout: Duration },
367− LoginActionFailed { action: String, reason: String },
368}
367}
369
368
370#[derive(Default)]
369#[derive(Default)]
@@ -401,41 +400,6 @@ impl OutputMonitor {
401 WaitResult::Found
400 WaitResult::Found
402 }
401 }
403 }
402 }
404−
405− fn wait_for_any(&self, needles: &[&str], timeout: Duration) -> WaitAnyResult {
406− let mut found: Option<usize> = None;
407− let (_unused, timeout_result) = self
408− .condvar
409− .wait_timeout_while(self.buffer.lock().unwrap(), timeout, |buf| {
410− if let Some((pos, idx, len)) = find_any(buf, needles) {
411− *buf = buf[(pos + len)..].to_string();
412− found = Some(idx);
413− false
414− } else {
415− true
416− }
417− })
418− .unwrap();
419−
420− if timeout_result.timed_out() {
421− WaitAnyResult::Timeout
422− } else {
423− WaitAnyResult::Found(found.unwrap_or(0))
424− }
425− }
426−}
427−
428−fn find_any(buf: &str, needles: &[&str]) -> Option<(usize, usize, usize)> {
429− let mut best: Option<(usize, usize, usize)> = None; // (pos, idx, len)
430− for (idx, needle) in needles.iter().enumerate() {
431− if let Some(pos) = buf.find(needle) {
432− let candidate = (pos, idx, needle.len());
433− if best.is_none_or(|b| candidate.0 < b.0) {
434− best = Some(candidate);
435− }
436− }
437− }
438− best
439}
403}
440
404
441#[derive(Debug)]
405#[derive(Debug)]
@@ -484,16 +448,18 @@ impl IoControl {
484fn ensure_base_image(
448fn ensure_base_image(
485 base_raw: &Path,
449 base_raw: &Path,
486 base_compressed: &Path,
450 base_compressed: &Path,
487− status: Option<&StatusEmitter<'_>>,
451+ status: Option<&StatusFile>,
488−) -> Result<()> {
452+) -> Result<(), Box<dyn std::error::Error>> {
489 if base_raw.exists() {
453 if base_raw.exists() {
490 return Ok(());
454 return Ok(());
491 }
455 }
492
456
493 if !base_compressed.exists()
457 if !base_compressed.exists()
494− || fs::metadata(base_compressed).map(|m| m.len())? < DEBIAN_COMPRESSED_SIZE_BYTES
458+ || std::fs::metadata(base_compressed).map(|m| m.len())? < DEBIAN_COMPRESSED_SIZE_BYTES
495 {
459 {
460+ if let Some(status) = status {
496− emit_status(status, "downloading base image...");
461+ status.update("downloading base image...");
462+ }
497 tracing::info!("downloading base image");
463 tracing::info!("downloading base image");
498 let status = Command::new("curl")
464 let status = Command::new("curl")
499 .args([
465 .args([
@@ -508,14 +474,15 @@ fn ensure_base_image(
508 ])
474 ])
509 .status()?;
475 .status()?;
510 if !status.success() {
476 if !status.success() {
511− bail!("failed to download base image");
477+ return Err("Failed to download base image".into());
512 }
478 }
513 }
479 }
514
480
515 // Check SHA
481 // Check SHA
516 {
482 {
517− emit_status(status, "verifying base image...");
483+ if let Some(status) = status {
518− tracing::info!("verifying base image...");
484+ status.update("verifying base image...");
485+ }
519 let input = format!("{} {}\n", DEBIAN_COMPRESSED_SHA, base_compressed.display());
486 let input = format!("{} {}\n", DEBIAN_COMPRESSED_SHA, base_compressed.display());
520
487
521 let mut child = Command::new("/usr/bin/shasum")
488 let mut child = Command::new("/usr/bin/shasum")
@@ -533,25 +500,25 @@ fn ensure_base_image(
533
500
534 let status = child.wait().expect("failed to wait on child");
501 let status = child.wait().expect("failed to wait on child");
535 if !status.success() {
502 if !status.success() {
536− bail!(format!(
537− "SHA validation failed for {DEBIAN_COMPRESSED_DISK_URL}"
503+ return Err(format!("SHA validation failed for {DEBIAN_COMPRESSED_DISK_URL}").into());
538− ));
539 }
504 }
540 }
505 }
541
506
507+ if let Some(status) = status {
542− emit_status(status, "decompressing base image...");
508+ status.update("decompressing base image...");
509+ }
543− tracing::info!("decompressing base image...");
510+ tracing::info!("decompressing base image");
544 let status = Command::new("tar")
511 let status = Command::new("tar")
545 .args([
512 .args([
546 "-xOf",
513 "-xOf",
547 &base_compressed.to_string_lossy(),
514 &base_compressed.to_string_lossy(),
548 BASE_DISK_RAW_NAME,
515 BASE_DISK_RAW_NAME,
549 ])
516 ])
550− .stdout(fs::File::create(base_raw)?)
517+ .stdout(std::fs::File::create(base_raw)?)
551 .status()?;
518 .status()?;
552
519
553 if !status.success() {
520 if !status.success() {
554− bail!("Failed to decompress base image");
521+ return Err("Failed to decompress base image".into());
555 }
522 }
556
523
557 Ok(())
524 Ok(())
@@ -562,56 +529,29 @@ fn ensure_default_image(
562 base_compressed: &Path,
529 base_compressed: &Path,
563 default_raw: &Path,
530 default_raw: &Path,
564 directory_shares: &[DirectoryShare],
531 directory_shares: &[DirectoryShare],
565− provision_log: Option<&Path>,
566− status: Option<&StatusEmitter<'_>>,
532+ status: Option<&StatusFile>,
567−) -> Result<()> {
533+) -> Result<(), Box<dyn std::error::Error>> {
568 if default_raw.exists() {
534 if default_raw.exists() {
569 return Ok(());
535 return Ok(());
570 }
536 }
571
537
572 ensure_base_image(base_raw, base_compressed, status)?;
538 ensure_base_image(base_raw, base_compressed, status)?;
573
539
540+ if let Some(status) = status {
574− emit_status(status, "configuring base image...");
541+ status.update("configuring base image...");
542+ }
575− tracing::info!("configuring base image...");
543+ tracing::info!("configuring base image");
576 fs::copy(base_raw, default_raw)?;
544 fs::copy(base_raw, default_raw)?;
577
545
578− let provision_command = script_command_from_content("provision.sh", PROVISION_SCRIPT)?;
546+ let provision_command = script_command_from_content(PROVISION_SCRIPT_NAME, PROVISION_SCRIPT)?;
579− let provision_actions = [
547+ run_vm(
548+ default_raw,
580− Send(provision_command),
549+ &[Send(provision_command)],
581− ExpectEither {
582− success: "VIBEBOX_PROVISION_OK".to_string(),
583− failure: "VIBEBOX_PROVISION_FAILED".to_string(),
584− timeout: PROVISION_EXPECT_TIMEOUT,
585− },
586− ];
587− let provision_result = if let Some(log_path) = provision_log {
588− let log_path = log_path.to_path_buf();
589− run_vm_with_io(
590− default_raw,
591− &provision_actions,
592− directory_shares,
550+ directory_shares,
593− BoxConfig::default().cpu_count,
551+ DEFAULT_CPU_COUNT,
594− BoxConfig::default().ram_size.as_u64(),
552+ DEFAULT_RAM_BYTES,
595− status,
553+ None,
596− move |output_monitor, vm_output_fd, vm_input_fd| {
554+ )?;
597− spawn_vm_io_with_log(output_monitor, vm_output_fd, vm_input_fd, log_path)
598− },
599− )
600− } else {
601− run_vm(
602− default_raw,
603− &provision_actions,
604− directory_shares,
605− BoxConfig::default().cpu_count,
606− BoxConfig::default().ram_size.as_u64(),
607− status,
608− )
609− };
610−
611− if let Err(err) = provision_result {
612− let _ = fs::remove_file(default_raw);
613− return Err(err);
614− }
615
555
616 Ok(())
556 Ok(())
617}
557}
@@ -619,47 +559,19 @@ fn ensure_default_image(
619fn ensure_instance_disk(
559fn ensure_instance_disk(
620 instance_raw: &Path,
560 instance_raw: &Path,
621 template_raw: &Path,
561 template_raw: &Path,
622− target_bytes: ByteSize,
623− status: Option<&StatusEmitter<'_>>,
562+ status: Option<&StatusFile>,
624−) -> Result<bool> {
563+) -> Result<(), Box<dyn std::error::Error>> {
625 if instance_raw.exists() {
564 if instance_raw.exists() {
626− let current_size = ByteSize(fs::metadata(instance_raw)?.len());
627− if current_size != target_bytes {
628− let current_gb = current_size;
629− let target_gb = target_bytes;
630− tracing::warn!(
631− "instance disk size does not match config (current {}, config {}); disk_gb applies only on init. Run `vibebox reset` to recreate or set disk_gb to match; using existing disk.",
632− current_gb,
633− target_gb
634− );
635− }
636− return Ok(false);
565+ return Ok(());
637 }
566 }
638
567
639− let template_size = ByteSize(fs::metadata(template_raw)?.len());
568+ if let Some(status) = status {
640− if target_bytes < template_size {
569+ status.update("creating instance disk...");
641− bail!(format!(
642− "Requested disk size {} is smaller than base image size {}",
643− target_bytes, template_size
644− ));
645 }
570 }
646− let target_size = target_bytes;
647− let needs_resize = target_size > template_size;
648−
649− emit_status(status, "creating instance disk...");
650− tracing::info!("creating instance disk...");
651 tracing::info!(path = %template_raw.display(), "creating instance disk");
571 tracing::info!(path = %template_raw.display(), "creating instance disk");
652− fs::create_dir_all(instance_raw.parent().unwrap())?;
572+ std::fs::create_dir_all(instance_raw.parent().unwrap())?;
653− if target_size == template_size {
654− fs::copy(template_raw, instance_raw)?;
573+ fs::copy(template_raw, instance_raw)?;
655− return Ok(needs_resize);
574+ Ok(())
656− }
657−
658− let mut dst = fs::File::create(instance_raw)?;
659− dst.set_len(target_size.as_u64())?;
660− let mut src = fs::File::open(template_raw)?;
661− std::io::copy(&mut src, &mut dst)?;
662− Ok(needs_resize)
663}
575}
664
576
665pub struct IoContext {
577pub struct IoContext {
@@ -675,17 +587,18 @@ pub fn create_pipe() -> (OwnedFd, OwnedFd) {
675 (read_stream.into(), write_stream.into())
587 (read_stream.into(), write_stream.into())
676}
588}
677
589
678−pub fn spawn_vm_io_with_hooks<
590+pub fn spawn_vm_io_with_hooks<F, G>(
679− F: FnMut(&str) -> bool + std::marker::Send + 'static,
680− G: FnMut(&[u8]) + std::marker::Send + 'static,
681−>(
682 output_monitor: Arc<OutputMonitor>,
591 output_monitor: Arc<OutputMonitor>,
683 vm_output_fd: OwnedFd,
592 vm_output_fd: OwnedFd,
684 vm_input_fd: OwnedFd,
593 vm_input_fd: OwnedFd,
685 io_control: Arc<IoControl>,
594 io_control: Arc<IoControl>,
686 mut on_line: F,
595 mut on_line: F,
687 mut on_output: G,
596 mut on_output: G,
688−) -> IoContext {
597+) -> IoContext
598+where
599+ F: FnMut(&str) -> bool + ::std::marker::Send + 'static,
600+ G: FnMut(&[u8]) + ::std::marker::Send + 'static,
601+{
689 let (input_tx, input_rx): (Sender<VmInput>, Receiver<VmInput>) = mpsc::channel();
602 let (input_tx, input_rx): (Sender<VmInput>, Receiver<VmInput>) = mpsc::channel();
690
603
691 // raw_guard is set when we've put the user's terminal into raw mode because we've attached stdin/stdout to the VM.
604 // raw_guard is set when we've put the user's terminal into raw mode because we've attached stdin/stdout to the VM.
@@ -833,14 +746,14 @@ pub fn spawn_vm_io_with_hooks<
833 PollResult::Spurious => continue,
746 PollResult::Spurious => continue,
834 PollResult::Ready(bytes) => {
747 PollResult::Ready(bytes) => {
835 if io_control.forward_output() {
748 if io_control.forward_output() {
836− // enable raw mode if we haven't already
749+ // enable raw mode, if we haven't already
837 if raw_guard.lock().unwrap().is_none()
750 if raw_guard.lock().unwrap().is_none()
838 && let Ok(guard) = enable_raw_mode(libc::STDIN_FILENO)
751 && let Ok(guard) = enable_raw_mode(libc::STDIN_FILENO)
839 {
752 {
840 *raw_guard.lock().unwrap() = Some(guard);
753 *raw_guard.lock().unwrap() = Some(guard);
841 }
754 }
842
755
843− let mut stdout = io::stdout().lock();
756+ let mut stdout = std::io::stdout().lock();
844 if stdout.write_all(bytes).is_err() {
757 if stdout.write_all(bytes).is_err() {
845 break;
758 break;
846 }
759 }
@@ -856,7 +769,7 @@ pub fn spawn_vm_io_with_hooks<
856
769
857 // Copies data from mpsc channel into VM, so vibe can "type" stuff and run scripts.
770 // Copies data from mpsc channel into VM, so vibe can "type" stuff and run scripts.
858 let mux_thread = thread::spawn(move || {
771 let mux_thread = thread::spawn(move || {
859− let mut vm_writer = fs::File::from(vm_input_fd);
772+ let mut vm_writer = std::fs::File::from(vm_input_fd);
860 loop {
773 loop {
861 match input_rx.recv() {
774 match input_rx.recv() {
862 Ok(VmInput::Bytes(data)) => {
775 Ok(VmInput::Bytes(data)) => {
@@ -886,7 +799,7 @@ pub fn spawn_vm_io_with_line_handler<F>(
886 on_line: F,
799 on_line: F,
887) -> IoContext
800) -> IoContext
888where
801where
889− F: FnMut(&str) -> bool + std::marker::Send + 'static,
802+ F: FnMut(&str) -> bool + ::std::marker::Send + 'static,
890{
803{
891 spawn_vm_io_with_hooks(
804 spawn_vm_io_with_hooks(
892 output_monitor,
805 output_monitor,
@@ -906,36 +819,6 @@ pub fn spawn_vm_io(
906 spawn_vm_io_with_line_handler(output_monitor, vm_output_fd, vm_input_fd, |_| false)
819 spawn_vm_io_with_line_handler(output_monitor, vm_output_fd, vm_input_fd, |_| false)
907}
820}
908
821
909−fn spawn_vm_io_with_log(
910− output_monitor: Arc<OutputMonitor>,
911− vm_output_fd: OwnedFd,
912− vm_input_fd: OwnedFd,
913− log_path: PathBuf,
914−) -> IoContext {
915− let log_file = fs::OpenOptions::new()
916− .create(true)
917− .write(true)
918− .truncate(true)
919− .open(&log_path)
920− .ok()
921− .map(|file| Arc::new(Mutex::new(file)));
922−
923− spawn_vm_io_with_hooks(
924− output_monitor,
925− vm_output_fd,
926− vm_input_fd,
927− IoControl::new(),
928− |_| false,
929− move |bytes| {
930− if let Some(log) = &log_file
931− && let Ok(mut file) = log.lock()
932− {
933− let _ = file.write_all(bytes);
934− }
935− },
936− )
937−}
938−
939impl IoContext {
822impl IoContext {
940 pub fn shutdown(self) {
823 pub fn shutdown(self) {
941 let _ = self.input_tx.send(VmInput::Shutdown);
824 let _ = self.input_tx.send(VmInput::Shutdown);
@@ -953,7 +836,7 @@ fn create_vm_configuration(
953 vm_writes_to_fd: OwnedFd,
836 vm_writes_to_fd: OwnedFd,
954 cpu_count: usize,
837 cpu_count: usize,
955 ram_bytes: u64,
838 ram_bytes: u64,
956−) -> Result<Retained<VZVirtualMachineConfiguration>> {
839+) -> Result<Retained<VZVirtualMachineConfiguration>, Box<dyn std::error::Error>> {
957 unsafe {
840 unsafe {
958 let platform =
841 let platform =
959 VZGenericPlatformConfiguration::init(VZGenericPlatformConfiguration::alloc());
842 VZGenericPlatformConfiguration::init(VZGenericPlatformConfiguration::alloc());
@@ -987,7 +870,7 @@ fn create_vm_configuration(
987 false,
870 false,
988 VZDiskImageCachingMode::Automatic,
871 VZDiskImageCachingMode::Automatic,
989 VZDiskImageSynchronizationMode::Full,
872 VZDiskImageSynchronizationMode::Full,
990− )?;
873+ ).unwrap();
991
874
992 let disk_device = VZVirtioBlockDeviceConfiguration::initWithAttachment(
875 let disk_device = VZVirtioBlockDeviceConfiguration::initWithAttachment(
993 VZVirtioBlockDeviceConfiguration::alloc(),
876 VZVirtioBlockDeviceConfiguration::alloc(),
@@ -1074,7 +957,7 @@ fn create_vm_configuration(
1074 // Validate
957 // Validate
1075 config.validateWithError().map_err(|e| {
958 config.validateWithError().map_err(|e| {
1076 io::Error::other(format!(
959 io::Error::other(format!(
1077− "invalid VM configuration: {:?}",
960+ "Invalid VM configuration: {:?}",
1078 e.localizedDescription()
961 e.localizedDescription()
1079 ))
962 ))
1080 })?;
963 })?;
@@ -1083,9 +966,9 @@ fn create_vm_configuration(
1083 }
966 }
1084}
967}
1085
968
1086−fn load_efi_variable_store() -> Result<Retained<VZEFIVariableStore>> {
969+fn load_efi_variable_store() -> Result<Retained<VZEFIVariableStore>, Box<dyn std::error::Error>> {
1087 unsafe {
970 unsafe {
1088− let temp_dir = env::temp_dir();
971+ let temp_dir = std::env::temp_dir();
1089 let temp_path = temp_dir.join(format!("efi_variable_store_{}.efivars", std::process::id()));
972 let temp_path = temp_dir.join(format!("efi_variable_store_{}.efivars", std::process::id()));
1090 let url = nsurl_from_path(&temp_path)?;
973 let url = nsurl_from_path(&temp_path)?;
1091 let options = VZEFIVariableStoreInitializationOptions::AllowOverwrite;
974 let options = VZEFIVariableStoreInitializationOptions::AllowOverwrite;
@@ -1101,8 +984,8 @@ fn load_efi_variable_store() -> Result<Retained<VZEFIVariableStore>> {
1101fn spawn_login_actions_thread(
984fn spawn_login_actions_thread(
1102 login_actions: Vec<LoginAction>,
985 login_actions: Vec<LoginAction>,
1103 output_monitor: Arc<OutputMonitor>,
986 output_monitor: Arc<OutputMonitor>,
1104− input_tx: Sender<VmInput>,
987+ input_tx: mpsc::Sender<VmInput>,
1105− vm_output_tx: Sender<VmOutput>,
988+ vm_output_tx: mpsc::Sender<VmOutput>,
1106) -> thread::JoinHandle<()> {
989) -> thread::JoinHandle<()> {
1107 thread::spawn(move || {
990 thread::spawn(move || {
1108 for a in login_actions {
991 for a in login_actions {
@@ -1116,27 +999,6 @@ fn spawn_login_actions_thread(
1116 return;
999 return;
1117 }
1000 }
1118 }
1001 }
1119− ExpectEither {
1120− success,
1121− failure,
1122− timeout,
1123− } => match output_monitor.wait_for_any(&[&success, &failure], timeout) {
1124− WaitAnyResult::Found(0) => {}
1125− WaitAnyResult::Found(_) => {
1126− let _ = vm_output_tx.send(VmOutput::LoginActionFailed {
1127− action: format!("expect '{}'", success),
1128− reason: format!("saw failure marker '{}'", failure),
1129− });
1130− return;
1131− }
1132− WaitAnyResult::Timeout => {
1133− let _ = vm_output_tx.send(VmOutput::LoginActionTimeout {
1134− action: format!("expect '{}'", success),
1135− timeout,
1136− });
1137− return;
1138− }
1139− },
1140 Send(mut text) => {
1002 Send(mut text) => {
1141 text.push('\n'); // Type the newline so the command is actually submitted.
1003 text.push('\n'); // Type the newline so the command is actually submitted.
1142 input_tx.send(VmInput::Bytes(text.into_bytes())).unwrap();
1004 input_tx.send(VmInput::Bytes(text.into_bytes())).unwrap();
@@ -1152,9 +1014,9 @@ fn run_vm_with_io<F>(
1152 directory_shares: &[DirectoryShare],
1014 directory_shares: &[DirectoryShare],
1153 cpu_count: usize,
1015 cpu_count: usize,
1154 ram_bytes: u64,
1016 ram_bytes: u64,
1155− status: Option<&StatusEmitter<'_>>,
1017+ status: Option<&StatusFile>,
1156 io_handler: F,
1018 io_handler: F,
1157−) -> Result<()>
1019+) -> Result<(), Box<dyn std::error::Error>>
1158where
1020where
1159 F: FnOnce(Arc<OutputMonitor>, OwnedFd, OwnedFd) -> IoContext,
1021 F: FnOnce(Arc<OutputMonitor>, OwnedFd, OwnedFd) -> IoContext,
1160{
1022{
@@ -1201,22 +1063,24 @@ where
1201
1063
1202 match rx.try_recv() {
1064 match rx.try_recv() {
1203 Ok(result) => {
1065 Ok(result) => {
1204− result.map_err(|e| Error::msg(format!("Failed to start VM: {}", e)))?;
1066+ result.map_err(|e| format!("Failed to start VM: {}", e))?;
1205 break;
1067 break;
1206 }
1068 }
1207 Err(mpsc::TryRecvError::Empty) => continue,
1069 Err(mpsc::TryRecvError::Empty) => continue,
1208 Err(mpsc::TryRecvError::Disconnected) => {
1070 Err(mpsc::TryRecvError::Disconnected) => {
1209− bail!("VM start channel disconnected");
1071+ return Err("VM start channel disconnected".into());
1210 }
1072 }
1211 }
1073 }
1212 }
1074 }
1213
1075
1214 if Instant::now() >= start_deadline {
1076 if Instant::now() >= start_deadline {
1215− bail!("Timed out waiting for VM to start");
1077+ return Err("Timed out waiting for VM to start".into());
1216 }
1078 }
1217
1079
1080+ if let Some(status) = status {
1218− emit_status(status, "vm booting... go vibecoder!");
1081+ status.update("vm booting... go vibecoder!");
1219− tracing::info!("vm booting... go vibecoder!");
1082+ status.clear();
1083+ }
1220 tracing::info!("vm booting");
1084 tracing::info!("vm booting");
1221
1085
1222 let output_monitor = Arc::new(OutputMonitor::default());
1086 let output_monitor = Arc::new(OutputMonitor::default());
@@ -1262,7 +1126,7 @@ where
1262 );
1126 );
1263
1127
1264 let mut last_state = None;
1128 let mut last_state = None;
1265− let mut exit_result: Result<(), String> = Ok(());
1129+ let mut exit_result = Ok(());
1266 loop {
1130 loop {
1267 unsafe {
1131 unsafe {
1268 NSRunLoop::mainRunLoop().runMode_beforeDate(
1132 NSRunLoop::mainRunLoop().runMode_beforeDate(
@@ -1281,24 +1145,8 @@ where
1281 exit_result = Err(format!(
1145 exit_result = Err(format!(
1282 "Login action ({}) timed out after {:?}; shutting down.",
1146 "Login action ({}) timed out after {:?}; shutting down.",
1283 action, timeout
1147 action, timeout
1284− ));
1148+ )
1285− unsafe {
1286− if vm.canRequestStop() {
1287− if let Err(err) = vm.requestStopWithError() {
1288− tracing::error!(error = ?err, "failed to request VM stop");
1289− }
1290− } else if vm.canStop() {
1291− let handler = RcBlock::new(|_error: *mut NSError| {});
1292− vm.stopWithCompletionHandler(&handler);
1293− }
1294− }
1295− break;
1296− }
1297− Ok(VmOutput::LoginActionFailed { action, reason }) => {
1298− exit_result = Err(format!(
1299− "Login action ({}) failed: {}; shutting down.",
1300− action, reason
1301− ));
1149+ .into());
1302 unsafe {
1150 unsafe {
1303 if vm.canRequestStop() {
1151 if vm.canRequestStop() {
1304 if let Err(err) = vm.requestStopWithError() {
1152 if let Err(err) = vm.requestStopWithError() {
@@ -1314,7 +1162,7 @@ where
1314 Err(mpsc::TryRecvError::Empty) => {}
1162 Err(mpsc::TryRecvError::Empty) => {}
1315 Err(mpsc::TryRecvError::Disconnected) => {}
1163 Err(mpsc::TryRecvError::Disconnected) => {}
1316 }
1164 }
1317− if state != VZVirtualMachineState::Running {
1165+ if state != objc2_virtualization::VZVirtualMachineState::Running {
1318 //eprintln!("VM stopped with state: {:?}", state);
1166 //eprintln!("VM stopped with state: {:?}", state);
1319 break;
1167 break;
1320 }
1168 }
@@ -1324,7 +1172,7 @@ where
1324
1172
1325 io_ctx.shutdown();
1173 io_ctx.shutdown();
1326
1174
1327− exit_result.map_err(Error::msg)
1175+ exit_result
1328}
1176}
1329
1177
1330fn run_vm(
1178fn run_vm(
@@ -1333,8 +1181,8 @@ fn run_vm(
1333 directory_shares: &[DirectoryShare],
1181 directory_shares: &[DirectoryShare],
1334 cpu_count: usize,
1182 cpu_count: usize,
1335 ram_bytes: u64,
1183 ram_bytes: u64,
1336− status: Option<&StatusEmitter<'_>>,
1184+ status: Option<&StatusFile>,
1337−) -> Result<()> {
1185+) -> Result<(), Box<dyn std::error::Error>> {
1338 run_vm_with_io(
1186 run_vm_with_io(
1339 disk_path,
1187 disk_path,
1340 login_actions,
1188 login_actions,
@@ -1346,7 +1194,7 @@ fn run_vm(
1346 )
1194 )
1347}
1195}
1348
1196
1349−fn nsurl_from_path(path: &Path) -> Result<Retained<NSURL>> {
1197+fn nsurl_from_path(path: &Path) -> Result<Retained<NSURL>, Box<dyn std::error::Error>> {
1350 let abs_path = if path.is_absolute() {
1198 let abs_path = if path.is_absolute() {
1351 path.to_path_buf()
1199 path.to_path_buf()
1352 } else {
1200 } else {
@@ -1355,7 +1203,7 @@ fn nsurl_from_path(path: &Path) -> Result<Retained<NSURL>> {
1355 let ns_path = NSString::from_str(
1203 let ns_path = NSString::from_str(
1356 abs_path
1204 abs_path
1357 .to_str()
1205 .to_str()
1358− .with_context(|| "non-UTF8 path encountered while building NSURL")?,
1206+ .ok_or("Non-UTF8 path encountered while building NSURL")?,
1359 );
1207 );
1360 Ok(NSURL::fileURLWithPath(&ns_path))
1208 Ok(NSURL::fileURLWithPath(&ns_path))
1361}
1209}
@@ -1370,7 +1218,7 @@ fn enable_raw_mode(fd: i32) -> io::Result<RawModeGuard> {
1370 let original = attributes;
1218 let original = attributes;
1371
1219
1372 // Disable translation of carriage return to newline on input
1220 // Disable translation of carriage return to newline on input
1373− attributes.c_iflag &= !libc::ICRNL;
1221+ attributes.c_iflag &= !(libc::ICRNL);
1374 // Disable canonical mode (line buffering), echo, and signal generation
1222 // Disable canonical mode (line buffering), echo, and signal generation
1375 attributes.c_lflag &= !(libc::ICANON | libc::ECHO | libc::ISIG);
1223 attributes.c_lflag &= !(libc::ICANON | libc::ECHO | libc::ISIG);
1376 attributes.c_cc[libc::VMIN] = 0;
1224 attributes.c_cc[libc::VMIN] = 0;
@@ -1398,10 +1246,10 @@ impl Drop for RawModeGuard {
1398
1246
1399// Ensure the running binary has com.apple.security.virtualization entitlements by checking and, if not, signing and relaunching.
1247// Ensure the running binary has com.apple.security.virtualization entitlements by checking and, if not, signing and relaunching.
1400pub fn ensure_signed() {
1248pub fn ensure_signed() {
1401− if env::var("VIBEBOX_SKIP_CODESIGN").as_deref() == Ok("1") {
1249+ if std::env::var("VIBEBOX_SKIP_CODESIGN").as_deref() == Ok("1") {
1402 return;
1250 return;
1403 }
1251 }
1404− let exe = env::current_exe().expect("failed to get current exe path");
1252+ let exe = std::env::current_exe().expect("failed to get current exe path");
1405 let exe_str = exe.to_str().expect("exe path not valid utf-8");
1253 let exe_str = exe.to_str().expect("exe path not valid utf-8");
1406
1254
1407 let has_required_entitlements = {
1255 let has_required_entitlements = {
@@ -1423,8 +1271,8 @@ pub fn ensure_signed() {
1423 }
1271 }
1424
1272
1425 const ENTITLEMENTS: &str = include_str!("entitlements.plist");
1273 const ENTITLEMENTS: &str = include_str!("entitlements.plist");
1426− let entitlements_path = env::temp_dir().join("entitlements.plist");
1274+ let entitlements_path = std::env::temp_dir().join("entitlements.plist");
1427− fs::write(&entitlements_path, ENTITLEMENTS).expect("failed to write entitlements");
1275+ std::fs::write(&entitlements_path, ENTITLEMENTS).expect("failed to write entitlements");
1428
1276
1429 let output = Command::new("codesign")
1277 let output = Command::new("codesign")
1430 .args([
1278 .args([
@@ -1437,7 +1285,7 @@ pub fn ensure_signed() {
1437 ])
1285 ])
1438 .output();
1286 .output();
1439
1287
1440− let _ = fs::remove_file(&entitlements_path);
1288+ let _ = std::fs::remove_file(&entitlements_path);
1441
1289
1442 match output {
1290 match output {
1443 Ok(o) if o.status.success() => {
1291 Ok(o) if o.status.success() => {
@@ -1445,7 +1293,7 @@ pub fn ensure_signed() {
1445 if !stderr.trim().is_empty() {
1293 if !stderr.trim().is_empty() {
1446 tracing::debug!(codesign_stderr = %stderr.trim(), "codesign output");
1294 tracing::debug!(codesign_stderr = %stderr.trim(), "codesign output");
1447 }
1295 }
1448− let err = Command::new(&exe).args(env::args_os().skip(1)).exec();
1296+ let err = Command::new(&exe).args(std::env::args_os().skip(1)).exec();
1449 tracing::error!(error = %err, "failed to re-exec after signing");
1297 tracing::error!(error = %err, "failed to re-exec after signing");
1450 std::process::exit(1);
1298 std::process::exit(1);
1451 }
1299 }
src/vm_manager.rs+184−466
@@ -1,22 +1,12 @@
1−use crate::instance::{VmLiveness, vm_liveness};
2−use crate::session_manager::INSTANCE_DIR_NAME;
3−use crate::{
4− config::CONFIG_PATH_ENV,
5− instance::{
6− InstanceConfig, STATUS_VM_ERROR_PREFIX, build_ssh_login_actions, ensure_instance_dir,
7− ensure_ssh_keypair, extract_ipv4, load_or_create_instance_config, write_instance_config,
8− },
9− session_manager::{GLOBAL_DIR_NAME, VM_MANAGER_PID_NAME, VM_MANAGER_SOCKET_NAME},
10− vm::{self, DirectoryShare, LoginAction, PROJECT_GUEST_BASE, VmInput},
11−};
12−use anyhow::{Error, Result, anyhow, bail};
13use std::{
1use std::{
14 env, fs,
2 env, fs,
15 io::{Read, Write},
3 io::{Read, Write},
16 os::unix::{
4 os::unix::{
5+ fs::FileTypeExt,
17 fs::PermissionsExt,
6 fs::PermissionsExt,
18 io::AsRawFd,
7 io::AsRawFd,
19 net::{UnixListener, UnixStream},
8 net::{UnixListener, UnixStream},
9+ process::CommandExt,
20 },
10 },
21 path::{Path, PathBuf},
11 path::{Path, PathBuf},
22 process::{Command, Stdio},
12 process::{Command, Stdio},
@@ -25,44 +15,36 @@ use std::{
25 time::{Duration, Instant},
15 time::{Duration, Instant},
26};
16};
27
17
28−#[cfg_attr(feature = "mock-vm", allow(dead_code))]
18+use crate::{
19+ config::CONFIG_PATH_ENV,
29−const VM_ROOT_LOG_NAME: &str = "vm_root.log";
20+ instance::VM_ROOT_LOG_NAME,
21+ instance::{
22+ DEFAULT_SSH_USER, InstanceConfig, build_ssh_login_actions, ensure_instance_dir,
23+ ensure_ssh_keypair, extract_ipv4, load_or_create_instance_config, write_instance_config,
24+ },
25+ session_manager::{
26+ GLOBAL_DIR_NAME, INSTANCE_FILENAME, VM_MANAGER_PID_NAME, VM_MANAGER_SOCKET_NAME,
27+ },
28+ vm::{self, DirectoryShare, LoginAction, VmInput},
29+};
30+
30const VM_MANAGER_LOCK_NAME: &str = "vm.lock";
31const VM_MANAGER_LOCK_NAME: &str = "vm.lock";
31const VM_MANAGER_LOG_NAME: &str = "vm_manager.log";
32const VM_MANAGER_LOG_NAME: &str = "vm_manager.log";
32−const SHUTDOWN_RETRY_MS: u64 = 500;
33−#[cfg(test)]
34−const HARD_SHUTDOWN_TIMEOUT_MS: u64 = 1_000;
35−#[cfg(not(test))]
36−const HARD_SHUTDOWN_TIMEOUT_MS: u64 = 12_000;
37−const STATUS_PREFIX: &str = "status:";
38−
39−type ClientStreams = Arc<Mutex<Vec<UnixStream>>>;
40−type SharedStatus = Arc<Mutex<String>>;
41−
42−#[cfg(not(test))]
43−fn force_exit(_reason: &str) -> ! {
44− std::process::exit(1);
45−}
46−
47−#[cfg(test)]
48−fn force_exit(reason: &str) -> ! {
49− panic!("{reason}");
50−}
51
33
52pub fn ensure_manager(
34pub fn ensure_manager(
53 raw_args: &[std::ffi::OsString],
35 raw_args: &[std::ffi::OsString],
54 auto_shutdown_ms: u64,
36 auto_shutdown_ms: u64,
55 config_path: Option<&Path>,
37 config_path: Option<&Path>,
56−) -> Result<UnixStream> {
38+) -> Result<UnixStream, Box<dyn std::error::Error>> {
57 let project_root = env::current_dir()?;
39 let project_root = env::current_dir()?;
58 tracing::debug!(root = %project_root.display(), "ensure vm manager");
40 tracing::debug!(root = %project_root.display(), "ensure vm manager");
59 let instance_dir = ensure_instance_dir(&project_root)?;
41 let instance_dir = ensure_instance_dir(&project_root)?;
60− cleanup_stale_manager(&project_root)?;
42+ cleanup_stale_manager(&instance_dir);
61 let socket_path = instance_dir.join(VM_MANAGER_SOCKET_NAME);
43 let socket_path = instance_dir.join(VM_MANAGER_SOCKET_NAME);
62
44
63 if let Ok(stream) = UnixStream::connect(&socket_path) {
45 if let Ok(stream) = UnixStream::connect(&socket_path) {
64 send_client_pid(&stream);
46 send_client_pid(&stream);
65− tracing::info!(path = %socket_path.display(), "connected to an existing vm manager");
47+ tracing::info!(path = %socket_path.display(), "connected to existing vm manager");
66 return Ok(stream);
48 return Ok(stream);
67 }
49 }
68
50
@@ -100,11 +82,12 @@ pub fn ensure_manager(
100 drop(lock_file.take());
82 drop(lock_file.take());
101 let _ = fs::remove_file(&lock_path);
83 let _ = fs::remove_file(&lock_path);
102 }
84 }
103− bail!(format!(
85+ return Err(format!(
104− "timed out waiting for vm manager socket: {} ({})",
86+ "Timed out waiting for vm manager socket: {} ({})",
105 socket_path.display(),
87 socket_path.display(),
106 err
88 err
107− ));
89+ )
90+ .into());
108 }
91 }
109 thread::sleep(Duration::from_millis(100));
92 thread::sleep(Duration::from_millis(100));
110 }
93 }
@@ -112,49 +95,24 @@ pub fn ensure_manager(
112 }
95 }
113}
96}
114
97
98+pub fn run_manager(
99+ args: vm::VmArg,
115−pub fn run_manager(args: vm::VmArg, auto_shutdown_ms: u64) -> Result<()> {
100+ auto_shutdown_ms: u64,
101+) -> Result<(), Box<dyn std::error::Error>> {
116 let project_root = env::current_dir()?;
102 let project_root = env::current_dir()?;
117 tracing::info!(root = %project_root.display(), "vm manager starting");
103 tracing::info!(root = %project_root.display(), "vm manager starting");
118− #[cfg(not(feature = "mock-vm"))]
119− {
120− unsafe {
121− env::remove_var("VIBEBOX_SKIP_CODESIGN");
122− }
123− vm::ensure_signed();
124− unsafe {
125− env::set_var("VIBEBOX_SKIP_CODESIGN", "1");
126− }
127− }
128 let _pid_guard = ensure_pid_file(&project_root)?;
104 let _pid_guard = ensure_pid_file(&project_root)?;
129− #[cfg(feature = "mock-vm")]
130− tracing::info!("vm manager using mock executor");
131− let executor: &dyn VmExecutor = {
132− #[cfg(feature = "mock-vm")]
133− {
134− &MockVmExecutor
135− }
136− #[cfg(not(feature = "mock-vm"))]
137− {
138− &RealVmExecutor
139− }
140− };
141− let options = {
142− #[cfg(feature = "mock-vm")]
143− {
144− ManagerOptions {
145− detach: true,
146− prepare_vm: false,
147− }
148− }
149− #[cfg(not(feature = "mock-vm"))]
150− {
151− ManagerOptions {
152− detach: true,
153− prepare_vm: true,
154− }
155− }
156− };
157− run_manager_with(&project_root, args, auto_shutdown_ms, executor, options)
105+ run_manager_with(
106+ &project_root,
107+ args,
108+ auto_shutdown_ms,
109+ &RealVmExecutor,
110+ ManagerOptions {
111+ ensure_signed: true,
112+ detach: true,
113+ prepare_vm: true,
114+ },
115+ )
158}
116}
159
117
160fn spawn_manager_process(
118fn spawn_manager_process(
@@ -162,22 +120,25 @@ fn spawn_manager_process(
162 auto_shutdown_ms: u64,
120 auto_shutdown_ms: u64,
163 instance_dir: &Path,
121 instance_dir: &Path,
164 config_path: Option<&Path>,
122 config_path: Option<&Path>,
165−) -> Result<()> {
123+) -> Result<(), Box<dyn std::error::Error>> {
166 let exe = env::current_exe()?;
124 let exe = env::current_exe()?;
167 let mut supervisor_exe = exe.clone();
125 let mut supervisor_exe = exe.clone();
168 supervisor_exe.set_file_name("vibebox-supervisor");
126 supervisor_exe.set_file_name("vibebox-supervisor");
169− // intentional
127+ let use_supervisor = supervisor_exe.exists();
128+ let mut cmd = if use_supervisor {
170− if !supervisor_exe.exists() {
129+ Command::new(supervisor_exe)
171− bail!(format!(
130+ } else {
131+ let mut cmd = Command::new(exe);
172− "vibebox-supervisor not found at {}",
132+ cmd.arg0("vibebox-supervisor");
173− supervisor_exe.display()
133+ cmd
174− ));
175− }
134+ };
176− let mut cmd = Command::new(supervisor_exe);
177 if raw_args.len() > 1 {
135 if raw_args.len() > 1 {
178 cmd.args(&raw_args[1..]);
136 cmd.args(&raw_args[1..]);
179 }
137 }
180 cmd.env("VIBEBOX_INTERNAL", "1");
138 cmd.env("VIBEBOX_INTERNAL", "1");
139+ if !use_supervisor {
140+ cmd.env("VIBEBOX_VM_MANAGER", "1");
141+ }
181 cmd.env("VIBEBOX_LOG_NO_COLOR", "1");
142 cmd.env("VIBEBOX_LOG_NO_COLOR", "1");
182 cmd.env("VIBEBOX_AUTO_SHUTDOWN_MS", auto_shutdown_ms.to_string());
143 cmd.env("VIBEBOX_AUTO_SHUTDOWN_MS", auto_shutdown_ms.to_string());
183 if let Some(path) = config_path {
144 if let Some(path) = config_path {
@@ -205,65 +166,46 @@ fn spawn_manager_process(
205 Ok(())
166 Ok(())
206}
167}
207
168
208−fn ensure_pid_file(project_root: &Path) -> Result<PidFileGuard> {
169+fn ensure_pid_file(project_root: &Path) -> Result<PidFileGuard, Box<dyn std::error::Error>> {
209 let instance_dir = ensure_instance_dir(project_root)?;
170 let instance_dir = ensure_instance_dir(project_root)?;
210 let pid_path = instance_dir.join(VM_MANAGER_PID_NAME);
171 let pid_path = instance_dir.join(VM_MANAGER_PID_NAME);
211 let socket_path = instance_dir.join(VM_MANAGER_SOCKET_NAME);
172 let socket_path = instance_dir.join(VM_MANAGER_SOCKET_NAME);
212− match vm_liveness(project_root)? {
173+ if let Ok(content) = fs::read_to_string(&pid_path) {
213− VmLiveness::RunningWithSocket { pid } => {
174+ if let Ok(pid) = content.trim().parse::<u32>() {
175+ if pid_is_alive(pid) {
176+ if is_socket_path(&socket_path) {
214− bail!("vm manager already running (pid {pid})");
177+ return Err(format!("vm manager already running (pid {pid})").into());
215− }
178+ }
216− VmLiveness::RunningWithoutSocket { pid } => {
217− tracing::warn!(
179+ tracing::warn!(
218− pid,
180+ pid,
219− path = %socket_path.display(),
181+ path = %socket_path.display(),
220− "stale pid file detected with missing socket"
182+ "stale pid file detected with missing socket"
221− );
183+ );
184+ }
222 }
185 }
223− VmLiveness::NotRunningOrMissing => {}
186+ let _ = fs::remove_file(&pid_path);
224 }
187 }
225− let _ = fs::remove_file(&pid_path);
226 fs::write(&pid_path, format!("{}\n", std::process::id()))?;
188 fs::write(&pid_path, format!("{}\n", std::process::id()))?;
227 let _ = fs::set_permissions(&pid_path, fs::Permissions::from_mode(0o600));
189 let _ = fs::set_permissions(&pid_path, fs::Permissions::from_mode(0o600));
228 Ok(PidFileGuard { path: pid_path })
190 Ok(PidFileGuard { path: pid_path })
229}
191}
230
192
231−fn cleanup_stale_manager(project_root: &Path) -> Result<()> {
193+fn cleanup_stale_manager(instance_dir: &Path) {
232− let pid_path = project_root
194+ let pid_path = instance_dir.join(VM_MANAGER_PID_NAME);
233− .join(INSTANCE_DIR_NAME)
195+ if let Ok(content) = fs::read_to_string(&pid_path) {
234− .join(VM_MANAGER_PID_NAME);
196+ if let Ok(pid) = content.trim().parse::<u32>() {
235− if matches!(
197+ if pid_is_alive(pid) {
236− vm_liveness(project_root)?,
237− VmLiveness::RunningWithSocket { .. } | VmLiveness::RunningWithoutSocket { .. }
238− ) {
239− return Ok(());
198+ return;
199+ }
200+ }
240 }
201 }
241 let _ = fs::remove_file(&pid_path);
202 let _ = fs::remove_file(&pid_path);
242− Ok(())
243}
203}
244
204
245−fn inject_project_mount(
205+fn is_socket_path(path: &Path) -> bool {
246− mounts: &mut Vec<String>,
206+ fs::metadata(path)
247− project_root: &Path,
207+ .map(|meta| meta.file_type().is_socket())
248− ssh_user: &str,
249− project_name: &str,
250−) {
251− let guest_tilde = format!("~/{project_name}");
252− let guest_home = format!("/home/{ssh_user}/{project_name}");
253− let guest_base = format!("{PROJECT_GUEST_BASE}/{project_name}");
254− let already_mapped = mounts.iter().any(|spec| {
255− let parts: Vec<&str> = spec.split(':').collect();
256− if parts.len() < 2 {
257− return false;
208+ .unwrap_or(false)
258− }
259− let guest = parts[1];
260− guest == guest_tilde || guest == guest_home || guest == guest_base
261− });
262− if already_mapped {
263− return;
264− }
265− let host = project_root.display();
266− mounts.insert(0, format!("{host}:{guest_tilde}:read-write"));
267}
209}
268
210
269fn prepare_mounts_and_links(mut args: vm::VmArg, ssh_user: &str) -> (vm::VmArg, String) {
211fn prepare_mounts_and_links(mut args: vm::VmArg, ssh_user: &str) -> (vm::VmArg, String) {
@@ -312,7 +254,7 @@ fn rewrite_mount_spec(spec: &str, ssh_user: &str) -> (String, Option<HomeLink>)
312 return (spec.to_string(), None);
254 return (spec.to_string(), None);
313 }
255 }
314
256
315− let root_base = PROJECT_GUEST_BASE;
257+ let root_base = "/usr/local/vibebox-mounts";
316 let root_path = if rel.is_empty() {
258 let root_path = if rel.is_empty() {
317 root_base.to_string()
259 root_base.to_string()
318 } else {
260 } else {
@@ -409,30 +351,6 @@ fn wait_for_disconnect(mut stream: UnixStream) {
409 }
351 }
410}
352}
411
353
412−fn remove_client(streams: &ClientStreams, fd: std::os::fd::RawFd) {
413− if let Ok(mut clients) = streams.lock() {
414− clients.retain(|stream| stream.as_raw_fd() != fd);
415− }
416−}
417−
418−fn send_status_line(stream: &mut UnixStream, status: &str) -> bool {
419− let mut payload = String::with_capacity(STATUS_PREFIX.len() + status.len() + 1);
420− payload.push_str(STATUS_PREFIX);
421− payload.push_str(status);
422− payload.push('\n');
423− stream.write_all(payload.as_bytes()).is_ok()
424−}
425−
426−#[cfg_attr(feature = "mock-vm", allow(dead_code))]
427−fn broadcast_status(streams: &ClientStreams, latest_status: &SharedStatus, status: &str) {
428− if let Ok(mut current) = latest_status.lock() {
429− *current = status.to_string();
430− }
431− if let Ok(mut clients) = streams.lock() {
432− clients.retain_mut(|stream| send_status_line(stream, status));
433− }
434−}
435−
436fn send_client_pid(stream: &UnixStream) {
354fn send_client_pid(stream: &UnixStream) {
437 let pid = std::process::id();
355 let pid = std::process::id();
438 let payload = format!("pid={pid}\n");
356 let payload = format!("pid={pid}\n");
@@ -442,7 +360,7 @@ fn send_client_pid(stream: &UnixStream) {
442 }
360 }
443}
361}
444
362
445−fn acquire_spawn_lock(lock_path: &Path) -> Result<Option<fs::File>> {
363+fn acquire_spawn_lock(lock_path: &Path) -> Result<Option<fs::File>, Box<dyn std::error::Error>> {
446 match fs::OpenOptions::new()
364 match fs::OpenOptions::new()
447 .write(true)
365 .write(true)
448 .create_new(true)
366 .create_new(true)
@@ -476,12 +394,6 @@ fn is_lock_stale(lock_path: &Path) -> bool {
476 }
394 }
477}
395}
478
396
479−fn read_lock_pid(lock_path: &Path) -> Option<u32> {
480− let content = fs::read_to_string(lock_path).ok()?;
481− let line = content.lines().next()?;
482− line.strip_prefix("pid=")?.trim().parse::<u32>().ok()
483−}
484−
485fn pid_is_alive(pid: u32) -> bool {
397fn pid_is_alive(pid: u32) -> bool {
486 let pid = pid as libc::pid_t;
398 let pid = pid as libc::pid_t;
487 let result = unsafe { libc::kill(pid, 0) };
399 let result = unsafe { libc::kill(pid, 0) };
@@ -495,6 +407,12 @@ fn pid_is_alive(pid: u32) -> bool {
495 }
407 }
496}
408}
497
409
410+fn read_lock_pid(lock_path: &Path) -> Option<u32> {
411+ let content = fs::read_to_string(lock_path).ok()?;
412+ let line = content.lines().next()?;
413+ line.strip_prefix("pid=")?.trim().parse::<u32>().ok()
414+}
415+
498fn read_client_pid(stream: &UnixStream) -> Option<u32> {
416fn read_client_pid(stream: &UnixStream) -> Option<u32> {
499 let mut stream = stream.try_clone().ok()?;
417 let mut stream = stream.try_clone().ok()?;
500 let _ = stream.set_read_timeout(Some(Duration::from_millis(200)));
418 let _ = stream.set_read_timeout(Some(Duration::from_millis(200)));
@@ -505,7 +423,7 @@ fn read_client_pid(stream: &UnixStream) -> Option<u32> {
505 Ok(0) => break,
423 Ok(0) => break,
506 Ok(n) => {
424 Ok(n) => {
507 len += n;
425 len += n;
508− if buf[..len].contains(&b'\n') || len == buf.len() {
426+ if buf[..len].iter().any(|b| *b == b'\n') || len == buf.len() {
509 break;
427 break;
510 }
428 }
511 }
429 }
@@ -527,17 +445,14 @@ fn read_client_pid(stream: &UnixStream) -> Option<u32> {
527 }
445 }
528}
446}
529
447
530−#[cfg_attr(feature = "mock-vm", allow(dead_code))]
531fn spawn_manager_io(
448fn spawn_manager_io(
532 config: Arc<Mutex<InstanceConfig>>,
449 config: Arc<Mutex<InstanceConfig>>,
533− project_dir: PathBuf,
450+ instance_dir: PathBuf,
534− clients: ClientStreams,
535− latest_status: SharedStatus,
536 output_monitor: Arc<vm::OutputMonitor>,
451 output_monitor: Arc<vm::OutputMonitor>,
537 vm_output_fd: std::os::unix::io::OwnedFd,
452 vm_output_fd: std::os::unix::io::OwnedFd,
538 vm_input_fd: std::os::unix::io::OwnedFd,
453 vm_input_fd: std::os::unix::io::OwnedFd,
539) -> vm::IoContext {
454) -> vm::IoContext {
540− let log_path = project_dir.join(INSTANCE_DIR_NAME).join(VM_ROOT_LOG_NAME);
455+ let log_path = instance_dir.join(VM_ROOT_LOG_NAME);
541 let log_file = fs::OpenOptions::new()
456 let log_file = fs::OpenOptions::new()
542 .create(true)
457 .create(true)
543 .write(true)
458 .write(true)
@@ -546,15 +461,16 @@ fn spawn_manager_io(
546 .ok()
461 .ok()
547 .map(|file| Arc::new(Mutex::new(file)));
462 .map(|file| Arc::new(Mutex::new(file)));
548
463
464+ let instance_path = instance_dir.join(INSTANCE_FILENAME);
549 let config_for_output = config.clone();
465 let config_for_output = config.clone();
550 let log_for_output = log_file.clone();
466 let log_for_output = log_file.clone();
551 let mut line_buf = String::new();
467 let mut line_buf = String::new();
552
468
553 let on_output = move |bytes: &[u8]| {
469 let on_output = move |bytes: &[u8]| {
554− if let Some(log) = &log_for_output
470+ if let Some(log) = &log_for_output {
555− && let Ok(mut file) = log.lock()
471+ if let Ok(mut file) = log.lock() {
556− {
557− let _ = file.write_all(bytes);
472+ let _ = file.write_all(bytes);
473+ }
558 }
474 }
559
475
560 let text = String::from_utf8_lossy(bytes);
476 let text = String::from_utf8_lossy(bytes);
@@ -567,27 +483,17 @@ fn spawn_manager_io(
567 }
483 }
568 line_buf.drain(..=pos);
484 line_buf.drain(..=pos);
569
485
570− let cleaned = line.trim_start_matches(['\r', ' ']);
486+ let cleaned = line.trim_start_matches(|c: char| c == '\r' || c == ' ');
571− if let Some(script_failure) = cleaned.strip_prefix("VIBEBOX_SCRIPT_ERROR:") {
572− let failure = script_failure.trim();
573− if !failure.is_empty() {
574− tracing::error!(script_failure = %failure, "[vm] script reported failure");
575− broadcast_status(
576− &clients,
577− &latest_status,
578− &format!("{STATUS_VM_ERROR_PREFIX} {failure}"),
579− );
580− }
581− }
582 if let Some(pos) = cleaned.find("VIBEBOX_IPV4=") {
487 if let Some(pos) = cleaned.find("VIBEBOX_IPV4=") {
583 let ip_raw = &cleaned[(pos + "VIBEBOX_IPV4=".len())..];
488 let ip_raw = &cleaned[(pos + "VIBEBOX_IPV4=".len())..];
584 let ip = extract_ipv4(ip_raw).unwrap_or_default();
489 let ip = extract_ipv4(ip_raw).unwrap_or_default();
585− if !ip.is_empty()
490+ if !ip.is_empty() {
586− && let Ok(mut cfg) = config_for_output.lock()
491+ if let Ok(mut cfg) = config_for_output.lock() {
587− && cfg.vm_ipv4.as_deref() != Some(ip.as_str())
492+ if cfg.vm_ipv4.as_deref() != Some(ip.as_str()) {
588− {
589− cfg.vm_ipv4 = Some(ip.clone());
493+ cfg.vm_ipv4 = Some(ip.clone());
590− let _ = write_instance_config(&project_dir, &cfg);
494+ let _ = write_instance_config(&instance_path, &cfg);
495+ }
496+ }
591 }
497 }
592 }
498 }
593 }
499 }
@@ -609,13 +515,51 @@ enum ManagerEvent {
609 VmExited(Option<String>),
515 VmExited(Option<String>),
610}
516}
611
517
518+#[cfg(test)]
519+mod tests {
520+ use super::*;
521+ use std::{sync::mpsc, time::Duration};
522+
523+ #[test]
524+ fn manager_powers_off_after_grace_when_no_refs() {
525+ let _temp = tempfile::Builder::new()
526+ .prefix("vb")
527+ .tempdir_in("/tmp")
528+ .expect("tempdir");
529+
530+ let (event_tx, event_rx) = mpsc::channel::<ManagerEvent>();
531+ let (vm_tx, vm_rx) = mpsc::channel::<VmInput>();
532+ let vm_input_tx = Arc::new(Mutex::new(Some(vm_tx)));
533+
534+ let manager_thread = thread::spawn(move || {
535+ manager_event_loop(event_rx, vm_input_tx, 50).expect("event loop");
536+ });
537+
538+ event_tx.send(ManagerEvent::Inc(None)).unwrap();
539+ assert!(vm_rx.recv_timeout(Duration::from_millis(100)).is_err());
540+
541+ event_tx.send(ManagerEvent::Dec(None)).unwrap();
542+ let msg = vm_rx
543+ .recv_timeout(Duration::from_secs(2))
544+ .expect("poweroff");
545+ match msg {
546+ VmInput::Bytes(data) => {
547+ assert_eq!(data, b"systemctl poweroff\n");
548+ }
549+ _ => panic!("unexpected vm input"),
550+ }
551+ let _ = event_tx.send(ManagerEvent::VmExited(None));
552+ let _ = manager_thread.join();
553+ }
554+}
555+
612struct ManagerOptions {
556struct ManagerOptions {
557+ ensure_signed: bool,
613 detach: bool,
558 detach: bool,
614 prepare_vm: bool,
559 prepare_vm: bool,
615}
560}
616
561
617trait VmExecutor {
562trait VmExecutor {
618− #[allow(clippy::too_many_arguments)]
619 fn run_vm(
563 fn run_vm(
620 &self,
564 &self,
621 args: vm::VmArg,
565 args: vm::VmArg,
@@ -623,13 +567,10 @@ trait VmExecutor {
623 extra_shares: Vec<DirectoryShare>,
567 extra_shares: Vec<DirectoryShare>,
624 config: Arc<Mutex<InstanceConfig>>,
568 config: Arc<Mutex<InstanceConfig>>,
625 instance_dir: PathBuf,
569 instance_dir: PathBuf,
626− clients: ClientStreams,
627− latest_status: SharedStatus,
628 vm_input_tx: Arc<Mutex<Option<mpsc::Sender<VmInput>>>>,
570 vm_input_tx: Arc<Mutex<Option<mpsc::Sender<VmInput>>>>,
629− ) -> Result<()>;
571+ ) -> Result<(), Box<dyn std::error::Error>>;
630}
572}
631
573
632−#[cfg_attr(feature = "mock-vm", allow(dead_code))]
633struct RealVmExecutor;
574struct RealVmExecutor;
634
575
635impl VmExecutor for RealVmExecutor {
576impl VmExecutor for RealVmExecutor {
@@ -639,22 +580,15 @@ impl VmExecutor for RealVmExecutor {
639 extra_login_actions: Vec<LoginAction>,
580 extra_login_actions: Vec<LoginAction>,
640 extra_shares: Vec<DirectoryShare>,
581 extra_shares: Vec<DirectoryShare>,
641 config: Arc<Mutex<InstanceConfig>>,
582 config: Arc<Mutex<InstanceConfig>>,
642− project_dir: PathBuf,
583+ instance_dir: PathBuf,
643− clients: ClientStreams,
644− latest_status: SharedStatus,
645 vm_input_tx: Arc<Mutex<Option<mpsc::Sender<VmInput>>>>,
584 vm_input_tx: Arc<Mutex<Option<mpsc::Sender<VmInput>>>>,
646− ) -> Result<()> {
585+ ) -> Result<(), Box<dyn std::error::Error>> {
647− let status_callback = |status: &str| {
648− broadcast_status(&clients, &latest_status, status);
649− };
650− vm::run_with_args_and_extras(
586+ let result = vm::run_with_args_and_extras(
651 args,
587 args,
652 |output_monitor, vm_output_fd, vm_input_fd| {
588 |output_monitor, vm_output_fd, vm_input_fd| {
653 let io_ctx = spawn_manager_io(
589 let io_ctx = spawn_manager_io(
654 config.clone(),
590 config.clone(),
655− project_dir.clone(),
591+ instance_dir.clone(),
656− clients.clone(),
657− latest_status.clone(),
658 output_monitor,
592 output_monitor,
659 vm_output_fd,
593 vm_output_fd,
660 vm_input_fd,
594 vm_input_fd,
@@ -664,60 +598,35 @@ impl VmExecutor for RealVmExecutor {
664 },
598 },
665 extra_login_actions,
599 extra_login_actions,
666 extra_shares,
600 extra_shares,
667− Some(&status_callback),
668− )
601+ );
669− }
602+ result
670−}
671−
672−#[cfg(feature = "mock-vm")]
673−struct MockVmExecutor;
674−
675−#[cfg(feature = "mock-vm")]
676−impl VmExecutor for MockVmExecutor {
677− fn run_vm(
678− &self,
679− _args: vm::VmArg,
680− _extra_login_actions: Vec<LoginAction>,
681− _extra_shares: Vec<DirectoryShare>,
682− _config: Arc<Mutex<InstanceConfig>>,
683− _instance_dir: PathBuf,
684− _clients: ClientStreams,
685− _latest_status: SharedStatus,
686− vm_input_tx: Arc<Mutex<Option<mpsc::Sender<VmInput>>>>,
687− ) -> Result<()> {
688− let (tx, rx) = mpsc::channel::<VmInput>();
689− *vm_input_tx.lock().unwrap() = Some(tx);
690− tracing::info!("mock vm executor running");
691− while let Ok(input) = rx.recv() {
692− match input {
693− VmInput::Shutdown => break,
694− VmInput::Bytes(bytes) => {
695− let text = String::from_utf8_lossy(&bytes);
696− if text.contains("systemctl poweroff") {
697− break;
698− }
699− }
700− }
701− }
702− tracing::info!("mock vm executor exiting");
703− Ok(())
704 }
603 }
705}
604}
706
605
707fn run_manager_with(
606fn run_manager_with(
708 project_root: &Path,
607 project_root: &Path,
709− mut args: vm::VmArg,
608+ args: vm::VmArg,
710 auto_shutdown_ms: u64,
609 auto_shutdown_ms: u64,
711 executor: &dyn VmExecutor,
610 executor: &dyn VmExecutor,
712 options: ManagerOptions,
611 options: ManagerOptions,
713−) -> Result<()> {
612+) -> Result<(), Box<dyn std::error::Error>> {
613+ if options.ensure_signed {
614+ let _had_skip = env::var("VIBEBOX_SKIP_CODESIGN").ok();
615+ unsafe {
616+ env::remove_var("VIBEBOX_SKIP_CODESIGN");
617+ }
618+ vm::ensure_signed();
619+ unsafe {
620+ env::set_var("VIBEBOX_SKIP_CODESIGN", "1");
621+ }
622+ }
714 if options.detach {
623 if options.detach {
715 detach_from_terminal();
624 detach_from_terminal();
716 }
625 }
717
626
718 let project_name = project_root
627 let project_name = project_root
719 .file_name()
628 .file_name()
720− .ok_or_else(|| anyhow!("Project directory has no name"))?
629+ .ok_or("Project directory has no name")?
721 .to_string_lossy()
630 .to_string_lossy()
722 .into_owned();
631 .into_owned();
723 let instance_dir = ensure_instance_dir(project_root)?;
632 let instance_dir = ensure_instance_dir(project_root)?;
@@ -725,31 +634,27 @@ fn run_manager_with(
725 let _ = ensure_ssh_keypair(&instance_dir)?;
634 let _ = ensure_ssh_keypair(&instance_dir)?;
726 }
635 }
727
636
728− let mut config = load_or_create_instance_config(project_root)?;
637+ let mut config = load_or_create_instance_config(&instance_dir)?;
729 if config.vm_ipv4.is_some() {
638 if config.vm_ipv4.is_some() {
730 config.vm_ipv4 = None;
639 config.vm_ipv4 = None;
731− write_instance_config(project_root, &config)?;
640+ write_instance_config(&instance_dir.join(INSTANCE_FILENAME), &config)?;
732 }
641 }
733 let config = Arc::new(Mutex::new(config));
642 let config = Arc::new(Mutex::new(config));
734 let ssh_user = config
643 let ssh_user = config
735 .lock()
644 .lock()
736− .map(|cfg| cfg.ssh_user.clone())
645+ .map(|cfg| cfg.ssh_user_display())
737− .map_err(|_| anyhow!("failed to acquire ssh user display"))?;
646+ .unwrap_or_else(|_| DEFAULT_SSH_USER.to_string());
738− if !args.no_default_mounts {
739− inject_project_mount(&mut args.mounts, project_root, &ssh_user, &project_name);
740− }
741 let (args, home_links_script) = prepare_mounts_and_links(args, &ssh_user);
647 let (args, home_links_script) = prepare_mounts_and_links(args, &ssh_user);
742
648
743− let project_guest_dir = format!("{PROJECT_GUEST_BASE}/{project_name}");
744 let ssh_guest_dir = format!("/root/{}", GLOBAL_DIR_NAME);
649 let ssh_guest_dir = format!("/root/{}", GLOBAL_DIR_NAME);
745− let extra_shares = vec![
650+ let extra_shares = vec![DirectoryShare::new(
651+ instance_dir.clone(),
746− DirectoryShare::new(instance_dir.clone(), ssh_guest_dir.clone().into(), true)
652+ ssh_guest_dir.clone().into(),
747− .map_err(|err| anyhow!(err.to_string()))?,
653+ true,
748− ];
654+ )?];
749 let extra_login_actions = build_ssh_login_actions(
655 let extra_login_actions = build_ssh_login_actions(
750 &config,
656 &config,
751 &project_name,
657 &project_name,
752− &project_guest_dir,
753 ssh_guest_dir.as_str(),
658 ssh_guest_dir.as_str(),
754 "ssh_key",
659 "ssh_key",
755 &home_links_script,
660 &home_links_script,
@@ -768,43 +673,17 @@ fn run_manager_with(
768 let _ = fs::set_permissions(&socket_path, fs::Permissions::from_mode(0o600));
673 let _ = fs::set_permissions(&socket_path, fs::Permissions::from_mode(0o600));
769 tracing::info!(path = %socket_path.display(), "vm manager socket bound");
674 tracing::info!(path = %socket_path.display(), "vm manager socket bound");
770
675
771− let clients: ClientStreams = Arc::new(Mutex::new(Vec::new()));
772− let latest_status: SharedStatus = Arc::new(Mutex::new(String::new()));
773 let (event_tx, event_rx) = mpsc::channel::<ManagerEvent>();
676 let (event_tx, event_rx) = mpsc::channel::<ManagerEvent>();
774 let event_tx_accept = event_tx.clone();
677 let event_tx_accept = event_tx.clone();
775− let clients_accept = clients.clone();
776− let latest_status_accept = latest_status.clone();
777 thread::spawn(move || {
678 thread::spawn(move || {
778 for stream in listener.incoming() {
679 for stream in listener.incoming() {
779 match stream {
680 match stream {
780 Ok(stream) => {
681 Ok(stream) => {
781− let mut client_fd: Option<std::os::fd::RawFd> = None;
782− let latest_status_snapshot = latest_status_accept
783− .lock()
784− .ok()
785− .map(|status| status.clone());
786− if let Ok(writer) = stream.try_clone() {
787− let writer_fd = writer.as_raw_fd();
788− if let Ok(mut connected) = clients_accept.lock() {
789− connected.push(writer);
790− client_fd = Some(writer_fd);
791− if let Some(last) = connected.last_mut()
792− && let Some(status) = latest_status_snapshot.as_deref()
793− && !status.is_empty()
794− {
795− let _ = send_status_line(last, status);
796− }
797− }
798− }
799 let event_tx_conn = event_tx_accept.clone();
682 let event_tx_conn = event_tx_accept.clone();
800− let clients_conn = clients_accept.clone();
801 thread::spawn(move || {
683 thread::spawn(move || {
802 let pid = read_client_pid(&stream);
684 let pid = read_client_pid(&stream);
803 let _ = event_tx_conn.send(ManagerEvent::Inc(pid));
685 let _ = event_tx_conn.send(ManagerEvent::Inc(pid));
804 wait_for_disconnect(stream);
686 wait_for_disconnect(stream);
805− if let Some(fd) = client_fd {
806− remove_client(&clients_conn, fd);
807− }
808 let _ = event_tx_conn.send(ManagerEvent::Dec(pid));
687 let _ = event_tx_conn.send(ManagerEvent::Dec(pid));
809 });
688 });
810 }
689 }
@@ -824,59 +703,43 @@ fn run_manager_with(
824 extra_login_actions,
703 extra_login_actions,
825 extra_shares,
704 extra_shares,
826 config.clone(),
705 config.clone(),
827− project_root.to_path_buf(),
706+ instance_dir.clone(),
828− clients.clone(),
829− latest_status.clone(),
830 vm_input_tx.clone(),
707 vm_input_tx.clone(),
831 );
708 );
832 tracing::info!("vm manager vm run completed");
709 tracing::info!("vm manager vm run completed");
833 let vm_err = vm_result.err().map(|e| e.to_string());
710 let vm_err = vm_result.err().map(|e| e.to_string());
834− if let Some(err) = &vm_err {
835− broadcast_status(
836− &clients,
837− &latest_status,
838− &format!("{STATUS_VM_ERROR_PREFIX} {err}"),
839− );
840− }
841 let _ = event_tx.send(ManagerEvent::VmExited(vm_err.clone()));
711 let _ = event_tx.send(ManagerEvent::VmExited(vm_err.clone()));
842− let event_loop_result = event_loop_handle
712+ let event_loop_result: Result<(), String> = event_loop_handle
843 .join()
713 .join()
844− .unwrap_or_else(|_| Err(Error::msg("vm manager event loop panicked")))
714+ .unwrap_or_else(|_| Err("vm manager event loop panicked".into()))
845 .map_err(|err| err.to_string());
715 .map_err(|err| err.to_string());
846 let _ = fs::remove_file(&socket_path);
716 let _ = fs::remove_file(&socket_path);
847 if let Err(err) = &event_loop_result {
717 if let Err(err) = &event_loop_result {
848 tracing::error!(error = %err, "vm manager exiting due to event loop error");
718 tracing::error!(error = %err, "vm manager exiting due to event loop error");
849− bail!(err.to_string());
719+ return Err(err.to_string().into());
850 }
720 }
851 if let Some(err) = vm_err {
721 if let Some(err) = vm_err {
852 tracing::error!(error = %err, "vm manager exiting due to vm error");
722 tracing::error!(error = %err, "vm manager exiting due to vm error");
853− bail!(err);
723+ return Err(err.into());
854 }
724 }
855 tracing::info!("vm manager exiting");
725 tracing::info!("vm manager exiting");
856− event_loop_result.map_err(Error::msg)
726+ Ok(event_loop_result?)
857}
727}
858
728
859fn manager_event_loop(
729fn manager_event_loop(
860 event_rx: mpsc::Receiver<ManagerEvent>,
730 event_rx: mpsc::Receiver<ManagerEvent>,
861 vm_input_tx: Arc<Mutex<Option<mpsc::Sender<VmInput>>>>,
731 vm_input_tx: Arc<Mutex<Option<mpsc::Sender<VmInput>>>>,
862 auto_shutdown_ms: u64,
732 auto_shutdown_ms: u64,
863−) -> Result<()> {
733+) -> Result<(), String> {
864 let mut ref_count: usize = 0;
734 let mut ref_count: usize = 0;
865 let mut shutdown_deadline: Option<Instant> = None;
735 let mut shutdown_deadline: Option<Instant> = None;
866 let mut shutdown_sent = false;
736 let mut shutdown_sent = false;
867− let mut hard_deadline: Option<Instant> = None;
868 let grace = Duration::from_millis(auto_shutdown_ms.max(1));
737 let grace = Duration::from_millis(auto_shutdown_ms.max(1));
869− let hard_timeout = Duration::from_millis(HARD_SHUTDOWN_TIMEOUT_MS);
870
738
871 loop {
739 loop {
872− let timeout = match (shutdown_deadline, hard_deadline) {
740+ let timeout = match shutdown_deadline {
873− (Some(shutdown), Some(hard)) => {
874− let next = if shutdown <= hard { shutdown } else { hard };
875− next.saturating_duration_since(Instant::now())
876− }
877− (Some(shutdown), None) => shutdown.saturating_duration_since(Instant::now()),
741+ Some(deadline) => deadline.saturating_duration_since(Instant::now()),
878− (None, Some(hard)) => hard.saturating_duration_since(Instant::now()),
879− (None, None) => Duration::from_secs(1),
742+ None => Duration::from_secs(1),
880 };
743 };
881
744
882 match event_rx.recv_timeout(timeout) {
745 match event_rx.recv_timeout(timeout) {
@@ -890,10 +753,11 @@ fn manager_event_loop(
890 );
753 );
891 shutdown_deadline = None;
754 shutdown_deadline = None;
892 shutdown_sent = false;
755 shutdown_sent = false;
893− hard_deadline = None;
894 }
756 }
895 Ok(ManagerEvent::Dec(pid)) => {
757 Ok(ManagerEvent::Dec(pid)) => {
758+ if ref_count > 0 {
896− ref_count = ref_count.saturating_sub(1);
759+ ref_count -= 1;
760+ }
897 tracing::info!(
761 tracing::info!(
898 ref_count,
762 ref_count,
899 pid = pid.unwrap_or(0),
763 pid = pid.unwrap_or(0),
@@ -912,52 +776,15 @@ fn manager_event_loop(
912 break;
776 break;
913 }
777 }
914 Err(mpsc::RecvTimeoutError::Timeout) => {
778 Err(mpsc::RecvTimeoutError::Timeout) => {
915− if let Some(deadline) = shutdown_deadline
779+ if let Some(deadline) = shutdown_deadline {
916− && Instant::now() >= deadline
780+ if Instant::now() >= deadline && !shutdown_sent {
917− && !shutdown_sent
918− {
919− if hard_deadline.is_none() {
920− hard_deadline = Some(Instant::now() + hard_timeout);
921− }
922− let mut sent = false;
923− if let Some(tx) = vm_input_tx.lock().unwrap().clone() {
781+ if let Some(tx) = vm_input_tx.lock().unwrap().clone() {
924− if tx
925− .send(VmInput::Bytes(b"systemctl poweroff\n".to_vec()))
782+ let _ = tx.send(VmInput::Bytes(b"systemctl poweroff\n".to_vec()));
926− .is_ok()
927− {
928− sent = true;
929− } else {
930− tracing::warn!("shutdown command failed to send");
931 }
783 }
932− } else {
933− tracing::warn!("shutdown command deferred; vm input not ready");
934− }
935− if sent {
936 tracing::info!("shutdown command sent");
784 tracing::info!("shutdown command sent");
937 shutdown_sent = true;
785 shutdown_sent = true;
938 shutdown_deadline = None;
786 shutdown_deadline = None;
939− hard_deadline = Some(Instant::now() + hard_timeout);
940− } else {
941− shutdown_deadline =
942− Some(Instant::now() + Duration::from_millis(SHUTDOWN_RETRY_MS));
943− }
944− }
945− if ref_count == 0
946− && let Some(deadline) = hard_deadline
947− && Instant::now() >= deadline
948− {
949− if shutdown_sent {
950− tracing::warn!(
951− timeout_ms = HARD_SHUTDOWN_TIMEOUT_MS,
952− "force exiting: VM did not stop after shutdown timeout"
953− );
954− } else {
955− tracing::warn!(
956− timeout_ms = HARD_SHUTDOWN_TIMEOUT_MS,
957− "force exiting: VM input not ready after shutdown timeout"
958− );
959 }
787 }
960− force_exit("vm manager forced exit");
961 }
788 }
962 }
789 }
963 Err(mpsc::RecvTimeoutError::Disconnected) => break,
790 Err(mpsc::RecvTimeoutError::Disconnected) => break,
@@ -966,112 +793,3 @@ fn manager_event_loop(
966
793
967 Ok(())
794 Ok(())
968}
795}
969−
970−#[cfg(test)]
971−mod tests {
972− use super::*;
973− use std::{fs, sync::mpsc, thread, time::Duration};
974−
975− #[test]
976− fn manager_powers_off_after_grace_when_no_refs() {
977− let _temp = tempfile::Builder::new()
978− .prefix("vb")
979− .tempdir_in("/tmp")
980− .expect("tempdir");
981−
982− let (event_tx, event_rx) = mpsc::channel::<ManagerEvent>();
983− let (vm_tx, vm_rx) = mpsc::channel::<VmInput>();
984− let vm_input_tx = Arc::new(Mutex::new(Some(vm_tx)));
985−
986− let manager_thread = thread::spawn(move || {
987− manager_event_loop(event_rx, vm_input_tx, 50).expect("event loop");
988− });
989−
990− event_tx.send(ManagerEvent::Inc(None)).unwrap();
991− assert!(vm_rx.recv_timeout(Duration::from_millis(100)).is_err());
992−
993− event_tx.send(ManagerEvent::Dec(None)).unwrap();
994− let msg = vm_rx
995− .recv_timeout(Duration::from_secs(2))
996− .expect("poweroff");
997− match msg {
998− VmInput::Bytes(data) => {
999− assert_eq!(data, b"systemctl poweroff\n");
1000− }
1001− _ => panic!("unexpected vm input"),
1002− }
1003− let _ = event_tx.send(ManagerEvent::VmExited(None));
1004− let _ = manager_thread.join();
1005− }
1006−
1007− #[test]
1008− fn manager_force_exits_when_vm_input_never_ready() {
1009− let (event_tx, event_rx) = mpsc::channel::<ManagerEvent>();
1010− let vm_input_tx = Arc::new(Mutex::new(None));
1011−
1012− let manager_thread = thread::spawn(move || {
1013− let _ = manager_event_loop(event_rx, vm_input_tx, 10);
1014− });
1015−
1016− event_tx.send(ManagerEvent::Inc(None)).unwrap();
1017− event_tx.send(ManagerEvent::Dec(None)).unwrap();
1018−
1019− let join_result = manager_thread.join();
1020− assert!(
1021− join_result.is_err(),
1022− "expected manager to force-exit when vm input never becomes ready"
1023− );
1024− }
1025−
1026− #[test]
1027− fn manager_sends_shutdown_after_vm_input_becomes_ready() {
1028− let (event_tx, event_rx) = mpsc::channel::<ManagerEvent>();
1029− let (vm_tx, vm_rx) = mpsc::channel::<VmInput>();
1030− let vm_input_tx = Arc::new(Mutex::new(None));
1031− let vm_input_for_thread = vm_input_tx.clone();
1032−
1033− let manager_thread = thread::spawn(move || {
1034− manager_event_loop(event_rx, vm_input_for_thread, 10).expect("event loop");
1035− });
1036−
1037− event_tx.send(ManagerEvent::Inc(None)).unwrap();
1038− event_tx.send(ManagerEvent::Dec(None)).unwrap();
1039−
1040− thread::sleep(Duration::from_millis(100));
1041− *vm_input_tx.lock().unwrap() = Some(vm_tx);
1042−
1043− let msg = vm_rx
1044− .recv_timeout(Duration::from_secs(2))
1045− .expect("poweroff");
1046− match msg {
1047− VmInput::Bytes(data) => {
1048− assert_eq!(data, b"systemctl poweroff\n");
1049− }
1050− _ => panic!("unexpected vm input"),
1051− }
1052− let _ = event_tx.send(ManagerEvent::VmExited(None));
1053− let _ = manager_thread.join();
1054− }
1055−
1056− #[test]
1057− fn lock_is_not_stale_when_owner_pid_is_alive() {
1058− let temp = tempfile::Builder::new()
1059− .prefix("vb")
1060− .tempdir_in("/tmp")
1061− .expect("tempdir");
1062− let lock_path = temp.path().join("vm.lock");
1063− fs::write(&lock_path, format!("pid={}\n", std::process::id())).expect("write lock");
1064− assert!(!is_lock_stale(&lock_path));
1065− }
1066−
1067− #[test]
1068− fn lock_is_stale_when_owner_pid_is_missing() {
1069− let temp = tempfile::Builder::new()
1070− .prefix("vb")
1071− .tempdir_in("/tmp")
1072− .expect("tempdir");
1073− let lock_path = temp.path().join("vm.lock");
1074− fs::write(&lock_path, "pid=999999\n").expect("write lock");
1075− assert!(is_lock_stale(&lock_path));
1076− }
1077−}
tests/e2e_cli.rsdeleted−58
@@ -1,58 +0,0 @@
1−use assert_cmd::cargo::cargo_bin_cmd;
2−use tempfile::TempDir;
3−
4−#[test]
5−fn cli_version_shows_binary_name() {
6− let output = cargo_bin_cmd!("vibebox").arg("--version").output().unwrap();
7− print_output("e2e_cli", &output);
8− assert!(
9− output.status.success(),
10− "expected success, got status: {}",
11− output.status
12− );
13− let stdout = String::from_utf8_lossy(&output.stdout);
14− assert!(
15− stdout.contains("vibebox"),
16− "expected --version output to contain 'vibebox', got: {}",
17− stdout
18− );
19−}
20−
21−#[test]
22−fn list_reports_no_sessions_when_empty() {
23− let temp = TempDir::new().unwrap();
24− let home = temp.path().join("home");
25− let project = temp.path().join("project");
26− std::fs::create_dir_all(&home).unwrap();
27− std::fs::create_dir_all(&project).unwrap();
28−
29− let output = cargo_bin_cmd!("vibebox")
30− .current_dir(&project)
31− .env("HOME", &home)
32− .arg("list")
33− .output()
34− .unwrap();
35− print_output("e2e_cli", &output);
36− assert!(
37− output.status.success(),
38− "expected success, got status: {}",
39− output.status
40− );
41− let stdout = String::from_utf8_lossy(&output.stdout);
42− assert!(
43− stdout.contains("No sessions were found."),
44− "expected empty sessions message, got: {}",
45− stdout
46− );
47−}
48−
49−fn print_output(prefix: &str, output: &std::process::Output) {
50− let stdout = String::from_utf8_lossy(&output.stdout);
51− for line in stdout.lines() {
52− println!("[{}] {}", prefix, line);
53− }
54− let stderr = String::from_utf8_lossy(&output.stderr);
55− for line in stderr.lines() {
56− eprintln!("[{}] {}", prefix, line);
57− }
58−}
tests/e2e_vm.rsdeleted−278
@@ -1,278 +0,0 @@
1−use std::{
2− fs,
3− io::{BufRead, BufReader, Read},
4− path::{Path, PathBuf},
5− process::{Child, Command, Stdio},
6− thread,
7− time::{Duration, Instant},
8−};
9−
10−use tempfile::TempDir;
11−
12−#[cfg(target_os = "macos")]
13−#[test]
14−#[ignore]
15−fn vm_boots_and_runs_command() {
16− if std::env::var("VIBEBOX_E2E_VM").as_deref() != Ok("1") {
17− eprintln!("skipping: set VIBEBOX_E2E_VM=1 to run this test");
18− return;
19− }
20− if !virtualization_available() {
21− eprintln!("[e2e_vm] skipping: virtualization not available on this hardware");
22− return;
23− }
24−
25− let temp = TempDir::new().unwrap();
26− let home = temp.path().join("home");
27− let cache_home = temp.path().join("cache");
28− let project = temp.path().join("project");
29− fs::create_dir_all(&home).unwrap();
30− fs::create_dir_all(&cache_home).unwrap();
31− fs::create_dir_all(&project).unwrap();
32−
33− write_config(&project);
34−
35− let mut child = Command::new(assert_cmd::cargo_bin!("vibebox-supervisor"))
36− .current_dir(&project)
37− .env("HOME", &home)
38− .env("XDG_CACHE_HOME", &cache_home)
39− .env("VIBEBOX_INTERNAL", "1")
40− .stdout(Stdio::piped())
41− .stderr(Stdio::piped())
42− .spawn()
43− .unwrap();
44− if let Some(stdout) = child.stdout.take() {
45− spawn_prefix_reader("e2e_vm", "stdout", stdout);
46− }
47− if let Some(stderr) = child.stderr.take() {
48− spawn_prefix_reader("e2e_vm", "stderr", stderr);
49− }
50− let _child_guard = ChildGuard::new(child);
51−
52− log_line("e2e_vm", "waiting for vm manager socket");
53− let socket_path = project.join(".vibebox").join("vm.sock");
54− let _socket_guard = wait_for_socket(&socket_path, Duration::from_secs(30));
55− log_line("e2e_vm", "vm manager socket ready");
56−
57− log_line("e2e_vm", "waiting for vm ipv4");
58− let instance_path = project.join(".vibebox").join("instance.toml");
59− let (ip, user) = wait_for_vm_ip(&instance_path, Duration::from_secs(180));
60− log_line("e2e_vm", &format!("vm ipv4={ip} user={user}"));
61−
62− let ssh_key = project.join(".vibebox").join("ssh_key");
63− wait_for_file(&ssh_key, Duration::from_secs(30));
64− log_line("e2e_vm", "ssh key ready");
65−
66− let output = wait_for_ssh_command(&ssh_key, &user, &ip, Duration::from_secs(90));
67− print_output("e2e_vm", &output);
68− let stdout = String::from_utf8_lossy(&output.stdout);
69− assert!(
70− stdout.contains("Linux"),
71− "expected ssh command output to contain 'Linux', got: {}",
72− stdout
73− );
74−}
75−
76−#[cfg(not(target_os = "macos"))]
77−#[test]
78−#[ignore]
79−fn vm_boots_and_runs_command() {
80− eprintln!("skipping: vm e2e test requires macOS virtualization");
81−}
82−
83−struct ChildGuard {
84− child: Option<Child>,
85−}
86−
87−impl ChildGuard {
88− fn new(child: Child) -> Self {
89− Self { child: Some(child) }
90− }
91−}
92−
93−impl Drop for ChildGuard {
94− fn drop(&mut self) {
95− if let Some(child) = &mut self.child {
96− let _ = child.kill();
97− let _ = child.wait();
98− }
99− }
100−}
101−
102−struct SocketGuard {
103− _path: PathBuf,
104− _stream: std::os::unix::net::UnixStream,
105−}
106−
107−fn write_config(project: &Path) {
108− let config = r#"[box]
109−cpu_count = 2
110−ram_mb = 2048
111−disk_gb = 5
112−mounts = []
113−
114−[supervisor]
115−auto_shutdown_ms = 120000
116−"#;
117− fs::write(project.join("vibebox.toml"), config).unwrap();
118−}
119−
120−fn wait_for_socket(path: &Path, timeout: Duration) -> SocketGuard {
121− let start = Instant::now();
122− loop {
123− if let Ok(stream) = std::os::unix::net::UnixStream::connect(path) {
124− return SocketGuard {
125− _path: path.to_path_buf(),
126− _stream: stream,
127− };
128− }
129− if start.elapsed() > timeout {
130− panic!(
131− "timed out waiting for vm manager socket at {}",
132− path.display()
133− );
134− }
135− thread::sleep(Duration::from_millis(200));
136− }
137−}
138−
139−fn wait_for_vm_ip(instance_path: &Path, timeout: Duration) -> (String, String) {
140− let start = Instant::now();
141− loop {
142− if let Ok(raw) = fs::read_to_string(instance_path)
143− && let Ok(value) = toml::from_str::<toml::Value>(&raw)
144− {
145− let ip = value
146− .get("vm_ipv4")
147− .and_then(|v| v.as_str())
148− .map(|s| s.trim().to_string())
149− .filter(|s| !s.is_empty());
150− if let Some(ip) = ip {
151− let user = value
152− .get("ssh_user")
153− .and_then(|v| v.as_str())
154− .map(|s| s.trim().to_string())
155− .filter(|s| !s.is_empty())
156− .unwrap_or_else(|| "vibecoder".to_string());
157− return (ip, user);
158− }
159− }
160− if start.elapsed() > timeout {
161− panic!(
162− "timed out waiting for vm_ipv4 in {}",
163− instance_path.display()
164− );
165− }
166− thread::sleep(Duration::from_millis(500));
167− }
168−}
169−
170−fn wait_for_file(path: &Path, timeout: Duration) {
171− let start = Instant::now();
172− loop {
173− if path.exists() {
174− return;
175− }
176− if start.elapsed() > timeout {
177− panic!("timed out waiting for file {}", path.display());
178− }
179− thread::sleep(Duration::from_millis(200));
180− }
181−}
182−
183−fn wait_for_ssh_command(
184− ssh_key: &Path,
185− user: &str,
186− ip: &str,
187− timeout: Duration,
188−) -> std::process::Output {
189− let start = Instant::now();
190− loop {
191− let output = Command::new("ssh")
192− .args([
193− "-i",
194− ssh_key.to_str().unwrap_or(".vibebox/ssh_key"),
195− "-o",
196− "IdentitiesOnly=yes",
197− "-o",
198− "StrictHostKeyChecking=no",
199− "-o",
200− "UserKnownHostsFile=/dev/null",
201− "-o",
202− "GlobalKnownHostsFile=/dev/null",
203− "-o",
204− "PasswordAuthentication=no",
205− "-o",
206− "BatchMode=yes",
207− "-o",
208− "LogLevel=ERROR",
209− "-o",
210− "ConnectTimeout=5",
211− &format!("{user}@{ip}"),
212− "uname -s",
213− ])
214− .output()
215− .unwrap();
216− if output.status.success() {
217− return output;
218− }
219− if start.elapsed() > timeout {
220− let stderr = String::from_utf8_lossy(&output.stderr);
221− panic!("ssh command failed and timed out: {}", stderr);
222− }
223− thread::sleep(Duration::from_millis(1000));
224− }
225−}
226−
227−fn spawn_prefix_reader(
228− label: &'static str,
229− stream: &'static str,
230− reader: impl Read + Send + 'static,
231−) {
232− thread::spawn(move || {
233− let buf = BufReader::new(reader);
234− for line in buf.lines() {
235− match line {
236− Ok(line) => {
237− println!("[{}][{}] {}", label, stream, line);
238− }
239− Err(err) => {
240− eprintln!("[{}][{}] read error: {}", label, stream, err);
241− break;
242− }
243− }
244− }
245− });
246−}
247−
248−fn log_line(prefix: &str, message: &str) {
249− println!("[{}] {}", prefix, message);
250−}
251−
252−fn print_output(prefix: &str, output: &std::process::Output) {
253− let stdout = String::from_utf8_lossy(&output.stdout);
254− for line in stdout.lines() {
255− println!("[{}] {}", prefix, line);
256− }
257− let stderr = String::from_utf8_lossy(&output.stderr);
258− for line in stderr.lines() {
259− eprintln!("[{}] {}", prefix, line);
260− }
261−}
262−
263−fn virtualization_available() -> bool {
264− let output = Command::new("sysctl")
265− .args(["-n", "kern.hv_support"])
266− .output();
267− match output {
268− Ok(output) if output.status.success() => {
269− let value = String::from_utf8_lossy(&output.stdout);
270− match value.trim() {
271− "1" => true,
272− "0" => false,
273− _ => true,
274− }
275− }
276− _ => true,
277− }
278−}
tests/e2e_vm_mock.rsdeleted−455
@@ -1,455 +0,0 @@
1−#![cfg(all(feature = "mock-vm", target_os = "macos"))]
2−
3−use std::{
4− fs,
5− io::{BufRead, BufReader, Read},
6− os::unix::net::UnixStream,
7− path::{Path, PathBuf},
8− process::{Child, Command, Stdio},
9− sync::mpsc,
10− thread,
11− time::{Duration, Instant},
12−};
13−
14−use tempfile::TempDir;
15−
16−#[test]
17−fn mock_vm_allows_refcount_concurrency() {
18− let temp = TempDir::new().unwrap();
19− let mut supervisor = spawn_supervisor(&temp, 0, 1200, "e2e_vm_mock".to_string());
20−
21− supervisor.clients = connect_clients(
22− &supervisor.socket_path,
23− 12,
24− Duration::from_secs(2),
25− true,
26− "e2e_vm_mock",
27− );
28− log_line("e2e_vm_mock", "connected 12 clients");
29−
30− assert_manager_alive_for(
31− &mut supervisor.child,
32− Duration::from_millis(900),
33− "vm manager exited while clients active",
34− );
35−
36− let remaining = supervisor.clients.split_off(6);
37− supervisor.clients = remaining;
38− log_line("e2e_vm_mock", "dropped 6 clients");
39− assert_manager_alive_for(
40− &mut supervisor.child,
41− Duration::from_millis(900),
42− "vm manager exited while clients active",
43− );
44−
45− supervisor.clients.clear();
46− log_line("e2e_vm_mock", "dropped remaining clients");
47− wait_for_exit(&mut supervisor.child, Duration::from_secs(10));
48− let status = supervisor.child.wait().unwrap();
49− assert!(status.success(), "vm manager exited with {status}");
50−}
51−
52−#[test]
53−fn mock_vm_many_managers_many_clients() {
54− let temp = TempDir::new().unwrap();
55− let mut supervisors = Vec::new();
56−
57− for idx in 0..3 {
58− supervisors.push(spawn_supervisor(
59− &temp,
60− idx + 1,
61− 1400,
62− format!("e2e_vm_mock_{idx}"),
63− ));
64− }
65−
66− for supervisor in &mut supervisors {
67− supervisor.clients = connect_clients(
68− &supervisor.socket_path,
69− 8,
70− Duration::from_secs(2),
71− true,
72− "e2e_vm_mock",
73− );
74− }
75− log_line("e2e_vm_mock", "connected 8 clients per manager");
76−
77− for supervisor in &mut supervisors {
78− assert_manager_alive_for(
79− &mut supervisor.child,
80− Duration::from_millis(900),
81− "manager exited while clients active",
82− );
83− }
84−
85− supervisors[0].clients.clear();
86− log_line("e2e_vm_mock", "dropped all clients for manager 0");
87− wait_for_exit(&mut supervisors[0].child, Duration::from_secs(10));
88− let status = supervisors[0].child.wait().unwrap();
89− assert!(status.success(), "manager 0 exited with {status}");
90−
91− for supervisor in supervisors.iter_mut().skip(1) {
92− assert_manager_alive_for(
93− &mut supervisor.child,
94− Duration::from_millis(900),
95− "another manager exited early",
96− );
97− }
98−
99− for supervisor in supervisors.iter_mut().skip(1) {
100− supervisor.clients.clear();
101− }
102− log_line("e2e_vm_mock", "dropped remaining clients");
103− for supervisor in supervisors.iter_mut().skip(1) {
104− wait_for_exit(&mut supervisor.child, Duration::from_secs(10));
105− let status = supervisor.child.wait().unwrap();
106− assert!(status.success(), "manager exited with {status}");
107− }
108−}
109−
110−#[test]
111−fn mock_vm_monkey_processes() {
112− let temp = TempDir::new().unwrap();
113− let mut rng = Lcg::new(0x5eed_f00d_dead_beef);
114− let mut supervisors = Vec::new();
115− let mut next_id = 0usize;
116− let max_supervisors = 4usize;
117− let steps = 25usize;
118−
119− supervisors.push(spawn_supervisor(
120− &temp,
121− next_id,
122− 1200,
123− format!("e2e_vm_monkey_{next_id}"),
124− ));
125− next_id += 1;
126−
127− for step in 0..steps {
128− prune_exited_supervisors(&mut supervisors, "e2e_vm_monkey");
129− let roll = rng.gen_range(100);
130− log_line(
131− "e2e_vm_monkey",
132− &format!("step {step} roll={roll} supervisors={}", supervisors.len()),
133− );
134− if roll < 20 && supervisors.len() < max_supervisors {
135− supervisors.push(spawn_supervisor(
136− &temp,
137− next_id,
138− 1200,
139− format!("e2e_vm_monkey_{next_id}"),
140− ));
141− log_line("e2e_vm_monkey", &format!("spawned supervisor {next_id}"));
142− next_id += 1;
143− } else if roll < 45 && !supervisors.is_empty() {
144− let idx = rng.gen_range(supervisors.len());
145− let mut supervisor = supervisors.swap_remove(idx);
146− log_line(
147− "e2e_vm_monkey",
148− &format!("killing supervisor {}", supervisor.label),
149− );
150− kill_supervisor(&mut supervisor, Duration::from_secs(5));
151− } else if roll < 80 && !supervisors.is_empty() {
152− let idx = rng.gen_range(supervisors.len());
153− let burst = 1 + rng.gen_range(3);
154− let new_clients = connect_clients(
155− &supervisors[idx].socket_path,
156− burst,
157− Duration::from_secs(1),
158− false,
159− "e2e_vm_monkey",
160− );
161− supervisors[idx].clients.extend(new_clients);
162− log_line(
163− "e2e_vm_monkey",
164− &format!("connected {burst} clients to {}", supervisors[idx].label),
165− );
166− } else if !supervisors.is_empty() {
167− let idx = rng.gen_range(supervisors.len());
168− if !supervisors[idx].clients.is_empty() {
169− let len = supervisors[idx].clients.len();
170− let drop_count = 1 + rng.gen_range(len);
171− supervisors[idx].clients.drain(0..drop_count.min(len));
172− log_line(
173− "e2e_vm_monkey",
174− &format!(
175− "dropped {drop_count} clients from {}",
176− supervisors[idx].label
177− ),
178− );
179− }
180− }
181− thread::sleep(Duration::from_millis(200));
182− }
183−
184− log_line("e2e_vm_monkey", "final cleanup");
185− for supervisor in supervisors.iter_mut() {
186− shutdown_supervisor(supervisor, Duration::from_secs(10));
187− }
188−}
189−
190−#[test]
191−fn mock_vm_exits_without_clients() {
192− let temp = TempDir::new().unwrap();
193− let mut supervisor = spawn_supervisor(&temp, 99, 300, "e2e_vm_no_clients".to_string());
194− wait_for_exit(&mut supervisor.child, Duration::from_secs(5));
195− let status = supervisor.child.wait().unwrap();
196− assert!(status.success(), "vm manager exited with {status}");
197−}
198−
199−#[test]
200−fn mock_vm_reconnect_resets_shutdown() {
201− let temp = TempDir::new().unwrap();
202− let mut supervisor = spawn_supervisor(&temp, 100, 800, "e2e_vm_reconnect".to_string());
203−
204− supervisor.clients = connect_clients(
205− &supervisor.socket_path,
206− 1,
207− Duration::from_secs(2),
208− true,
209− "e2e_vm_reconnect",
210− );
211− supervisor.clients.clear();
212− thread::sleep(Duration::from_millis(400));
213−
214− supervisor.clients = connect_clients(
215− &supervisor.socket_path,
216− 1,
217− Duration::from_secs(2),
218− true,
219− "e2e_vm_reconnect",
220− );
221− assert_manager_alive_for(
222− &mut supervisor.child,
223− Duration::from_millis(600),
224− "vm manager exited despite reconnect",
225− );
226−
227− supervisor.clients.clear();
228− wait_for_exit(&mut supervisor.child, Duration::from_secs(10));
229− let status = supervisor.child.wait().unwrap();
230− assert!(status.success(), "vm manager exited with {status}");
231−}
232−
233−struct Supervisor {
234− child: Child,
235− socket_path: PathBuf,
236− clients: Vec<UnixStream>,
237− label: String,
238−}
239−
240−fn write_config(project: &Path, auto_shutdown_ms: u64) {
241− let config = format!(
242− r#"[box]
243−cpu_count = 2
244−ram_mb = 2048
245−disk_gb = 5
246−mounts = []
247−
248−[supervisor]
249−auto_shutdown_ms = {auto_shutdown_ms}
250−"#
251− );
252− fs::write(project.join("vibebox.toml"), config).unwrap();
253−}
254−
255−fn spawn_supervisor(
256− temp: &TempDir,
257− idx: usize,
258− auto_shutdown_ms: u64,
259− label: String,
260−) -> Supervisor {
261− let home = temp.path().join(format!("home-{idx}"));
262− let cache_home = temp.path().join(format!("cache-{idx}"));
263− let project = temp.path().join(format!("project-{idx}"));
264− fs::create_dir_all(&home).unwrap();
265− fs::create_dir_all(&cache_home).unwrap();
266− fs::create_dir_all(&project).unwrap();
267− write_config(&project, auto_shutdown_ms);
268−
269− let mut child = Command::new(assert_cmd::cargo_bin!("vibebox-supervisor"))
270− .current_dir(&project)
271− .env("HOME", &home)
272− .env("XDG_CACHE_HOME", &cache_home)
273− .env("VIBEBOX_INTERNAL", "1")
274− .stdout(Stdio::piped())
275− .stderr(Stdio::piped())
276− .spawn()
277− .unwrap();
278− if let Some(stdout) = child.stdout.take() {
279− spawn_prefix_reader(label.clone(), "stdout", stdout);
280− }
281− if let Some(stderr) = child.stderr.take() {
282− spawn_prefix_reader(label.clone(), "stderr", stderr);
283− }
284−
285− let socket_path = project.join(".vibebox").join("vm.sock");
286− wait_for_socket(&socket_path, Duration::from_secs(10));
287−
288− Supervisor {
289− child,
290− socket_path,
291− clients: Vec::new(),
292− label,
293− }
294−}
295−
296−fn connect_clients(
297− socket_path: &Path,
298− count: usize,
299− timeout: Duration,
300− require_all: bool,
301− label: &str,
302−) -> Vec<UnixStream> {
303− let (tx, rx) = mpsc::channel();
304− let mut handles = Vec::with_capacity(count);
305− for _ in 0..count {
306− let path = socket_path.to_path_buf();
307− let tx = tx.clone();
308− handles.push(thread::spawn(move || {
309− let stream = connect_client_with_retry(&path, timeout);
310− let _ = tx.send(stream);
311− }));
312− }
313− drop(tx);
314− let mut clients = Vec::with_capacity(count);
315− for stream in rx.into_iter().flatten() {
316− clients.push(stream);
317− }
318− for handle in handles {
319− handle.join().unwrap();
320− }
321− if require_all && clients.len() != count {
322− panic!(
323− "client count mismatch: expected {count} got {}",
324− clients.len()
325− );
326− }
327− if !require_all && clients.len() != count {
328− log_line(
329− label,
330− &format!("connected {} of {count} clients", clients.len()),
331− );
332− }
333− clients
334−}
335−
336−fn connect_client_with_retry(path: &Path, timeout: Duration) -> Option<UnixStream> {
337− let start = Instant::now();
338− loop {
339− match UnixStream::connect(path) {
340− Ok(stream) => return Some(stream),
341− Err(_) => {
342− if start.elapsed() > timeout {
343− return None;
344− }
345− thread::sleep(Duration::from_millis(50));
346− }
347− }
348− }
349−}
350−
351−fn wait_for_socket(path: &Path, timeout: Duration) {
352− let start = Instant::now();
353− loop {
354− if UnixStream::connect(path).is_ok() {
355− return;
356− }
357− if start.elapsed() > timeout {
358− panic!("timed out waiting for socket {}", path.display());
359− }
360− thread::sleep(Duration::from_millis(100));
361− }
362−}
363−
364−fn assert_manager_alive(child: &mut Child, message: &str) {
365− assert!(child.try_wait().unwrap().is_none(), "{message}");
366−}
367−
368−fn assert_manager_alive_for(child: &mut Child, duration: Duration, message: &str) {
369− let start = Instant::now();
370− while start.elapsed() < duration {
371− assert_manager_alive(child, message);
372− thread::sleep(Duration::from_millis(100));
373− }
374−}
375−
376−fn kill_supervisor(supervisor: &mut Supervisor, timeout: Duration) {
377− supervisor.clients.clear();
378− let _ = supervisor.child.kill();
379− wait_for_exit(&mut supervisor.child, timeout);
380− let _ = supervisor.child.wait();
381−}
382−
383−fn prune_exited_supervisors(supervisors: &mut Vec<Supervisor>, label: &str) {
384− supervisors.retain_mut(|supervisor| {
385− if supervisor.child.try_wait().unwrap().is_some() {
386− log_line(label, &format!("removed exited {}", supervisor.label));
387− false
388− } else {
389− true
390− }
391− });
392−}
393−
394−fn shutdown_supervisor(supervisor: &mut Supervisor, timeout: Duration) {
395− supervisor.clients.clear();
396− wait_for_exit(&mut supervisor.child, timeout);
397− if supervisor.child.try_wait().unwrap().is_none() {
398− let _ = supervisor.child.kill();
399− let _ = supervisor.child.wait();
400− }
401−}
402−
403−fn wait_for_exit(child: &mut Child, timeout: Duration) {
404− let start = Instant::now();
405− loop {
406− if child.try_wait().unwrap().is_some() {
407− return;
408− }
409− if start.elapsed() > timeout {
410− panic!("timed out waiting for mock vm supervisor exit");
411− }
412− thread::sleep(Duration::from_millis(200));
413− }
414−}
415−
416−fn spawn_prefix_reader(label: String, stream: &'static str, reader: impl Read + Send + 'static) {
417− thread::spawn(move || {
418− let buf = BufReader::new(reader);
419− for line in buf.lines() {
420− match line {
421− Ok(line) => println!("[{}][{}] {}", label, stream, line),
422− Err(err) => {
423− eprintln!("[{}][{}] read error: {}", label, stream, err);
424− break;
425− }
426− }
427− }
428− });
429−}
430−
431−fn log_line(prefix: &str, message: &str) {
432− println!("[{}] {}", prefix, message);
433−}
434−
435−struct Lcg {
436− state: u64,
437−}
438−
439−impl Lcg {
440− fn new(seed: u64) -> Self {
441− Self { state: seed }
442− }
443−
444− fn next_u32(&mut self) -> u32 {
445− self.state = self.state.wrapping_mul(6364136223846793005).wrapping_add(1);
446− (self.state >> 32) as u32
447− }
448−
449− fn gen_range(&mut self, upper: usize) -> usize {
450− if upper == 0 {
451− return 0;
452− }
453− (self.next_u32() as usize) % upper
454− }
455−}
tests/explain_integration.rsdeleted−113
@@ -1,113 +0,0 @@
1−use std::{env, ffi::OsString, fs, path::Path, sync::Mutex};
2−
3−use tempfile::TempDir;
4−
5−use vibebox::session_manager::INSTANCE_DIR_NAME;
6−use vibebox::{config, explain};
7−
8−static ENV_MUTEX: Mutex<()> = Mutex::new(());
9−
10−struct EnvGuard {
11− key: &'static str,
12− previous: Option<OsString>,
13−}
14−
15−impl EnvGuard {
16− fn set(key: &'static str, value: &Path) -> Self {
17− let previous = env::var_os(key);
18− unsafe {
19− env::set_var(key, value);
20− }
21− Self { key, previous }
22− }
23−}
24−
25−impl Drop for EnvGuard {
26− fn drop(&mut self) {
27− match &self.previous {
28− Some(value) => unsafe {
29− env::set_var(self.key, value);
30− },
31− None => unsafe {
32− env::remove_var(self.key);
33− },
34− }
35− }
36−}
37−
38−#[test]
39−fn build_mount_rows_includes_defaults_and_custom_mounts() {
40− let _lock = ENV_MUTEX.lock().unwrap();
41− let temp = TempDir::new().unwrap();
42− let home = temp.path().join("home");
43− let project = home.join("project");
44− let cache_home = home.join("cache");
45− fs::create_dir_all(&project).unwrap();
46− fs::create_dir_all(&cache_home).unwrap();
47−
48− let _home_guard = EnvGuard::set("HOME", &home);
49− let _cache_guard = EnvGuard::set("XDG_CACHE_HOME", &cache_home);
50−
51− let box_cfg = config::BoxConfig {
52− mounts: vec!["data:~/data:read-only".to_string()],
53− ..Default::default()
54− };
55− let cfg = config::Config {
56− box_cfg,
57− supervisor: config::SupervisorConfig::default(),
58− };
59−
60− let rows = explain::build_mount_rows(&project, &cfg).unwrap();
61−
62− assert_eq!(rows.len(), 3);
63− assert_eq!(rows[0].host, "~/project");
64− assert_eq!(rows[0].guest, "~/project");
65− assert_eq!(rows[0].mode, "read-write");
66− assert_eq!(rows[0].default_mount, "yes");
67−
68− assert_eq!(rows[1].host, "~/cache/vibebox/.guest-mise-cache");
69− assert_eq!(rows[1].guest, "/root/.local/share/mise");
70− assert_eq!(rows[1].mode, "read-write");
71− assert_eq!(rows[1].default_mount, "yes");
72−
73− assert_eq!(rows[2].host, "~/project/data");
74− assert_eq!(rows[2].guest, "~/data");
75− assert_eq!(rows[2].mode, "read-only");
76− assert_eq!(rows[2].default_mount, "no");
77−}
78−
79−#[test]
80−fn build_network_rows_pending_without_instance_file() {
81− let temp = TempDir::new().unwrap();
82− let project = temp.path().join("project");
83− fs::create_dir_all(&project).unwrap();
84−
85− let rows = explain::build_network_rows(&project).unwrap();
86−
87− assert_eq!(rows.len(), 1);
88− assert_eq!(rows[0].network_type, "NAT");
89− assert_eq!(rows[0].vm_ip, "-");
90− assert_eq!(rows[0].host_to_vm, "ssh: <pending>:22");
91− assert_eq!(rows[0].vm_to_host, "none");
92−}
93−
94−#[test]
95−fn build_network_rows_uses_instance_vm_ip() {
96− let temp = TempDir::new().unwrap();
97− let project = temp.path().join("project");
98− let instance_dir = project.join(INSTANCE_DIR_NAME);
99− fs::create_dir_all(&instance_dir).unwrap();
100− fs::write(
101− instance_dir.join("instance.toml"),
102− "vm_ipv4 = \"10.1.2.3\"\n",
103− )
104− .unwrap();
105−
106− let rows = explain::build_network_rows(&project).unwrap();
107−
108− assert_eq!(rows.len(), 1);
109− assert_eq!(rows[0].network_type, "NAT");
110− assert_eq!(rows[0].vm_ip, "10.1.2.3");
111− assert_eq!(rows[0].host_to_vm, "ssh: 10.1.2.3:22");
112− assert_eq!(rows[0].vm_to_host, "none");
113−}
vibebox.toml−1
@@ -1,7 +1,6 @@
1[box]
1[box]
2cpu_count = 2
2cpu_count = 2
3ram_mb = 2048
3ram_mb = 2048
4−disk_gb = 5
5mounts = [
4mounts = [
6 "~/.codex:~/.codex:read-write",
5 "~/.codex:~/.codex:read-write",
7 "~/.claude:~/.claude:read-write",
6 "~/.claude:~/.claude:read-write",