on a1056ba help sign in
25 files changed+846−3213
since splitsnapshots
unifiedsplit
.github/workflows/ci.yml+1−31 Cargo.lock+1−93 Cargo.toml+1−10 README.md+32−173 README.zh.md−209 docs/tasks.md+9−14 scripts/commit-check.sh−6 src/bin/vibebox-supervisor.rs+7−8 src/bin/vibebox.rs+91−55 src/config.rs+77−467 src/error_report.sh−28 src/explain.rs+48−33 src/instance.rs+136−297 src/lib.rs−1 src/provision.sh+5−49 src/session_manager.rs+93−56 src/ssh.sh+11−35 src/tui.rs+31−31 src/utils.rs−18 src/vm.rs+177−282 src/vm_manager.rs+126−413 tests/e2e_cli.rs−58 tests/e2e_vm.rs−278 tests/e2e_vm_mock.rs−455 tests/explain_integration.rs−113
.github/workflows/ci.yml+1−31
@@ -6,10 +6,9 @@ on:
66 - "**"
77 paths-ignore:
88 - "README.md"
9− - "CONTRIBUTING.md"
10− - "README.zh.md"
119 - "docs/**"
1210 - "install"
11+ pull_request:
1312
1413concurrency:
1514 group: ci-${{ github.ref }}
@@ -19,8 +18,6 @@ jobs:
1918 fmt:
2019 name: Format
2120 runs-on: macos-latest
22− env:
23− RUST_BACKTRACE: "1"
2421 steps:
2522 - uses: actions/checkout@v6
2623 - name: Install Rust
@@ -35,8 +32,6 @@ jobs:
3532 clippy:
3633 name: Clippy
3734 runs-on: macos-latest
38− env:
39− RUST_BACKTRACE: "1"
4035 steps:
4136 - uses: actions/checkout@v6
4237 - name: Install Rust
@@ -51,8 +46,6 @@ jobs:
5146 build:
5247 name: Build
5348 runs-on: macos-latest
54− env:
55− RUST_BACKTRACE: "1"
5649 steps:
5750 - uses: actions/checkout@v6
5851 - name: Install Rust
@@ -65,8 +58,6 @@ jobs:
6558 test:
6659 name: Test
6760 runs-on: macos-latest
68− env:
69− RUST_BACKTRACE: "full"
7061 steps:
7162 - uses: actions/checkout@v6
7263 - name: Install Rust
@@ -75,24 +66,3 @@ jobs:
7566 uses: Swatinem/rust-cache@v2
7667 - name: cargo test
7768 run: cargo test --locked
78−
79− coverage:
80− name: Coverage
81− runs-on: macos-latest
82− needs: [fmt, clippy, build, test]
83− env:
84− RUST_BACKTRACE: "full"
85− steps:
86− - uses: actions/checkout@v6
87− - name: Install Rust
88− uses: dtolnay/rust-toolchain@stable
89− with:
90− components: llvm-tools-preview
91− - name: Cache Rust
92− uses: Swatinem/rust-cache@v2
93− - name: Install cargo-llvm-cov
94− uses: taiki-e/install-action@v2
95− with:
96− tool: cargo-llvm-cov
97− - name: cargo llvm-cov
98− run: cargo llvm-cov --locked --features mock-vm --tests -- --nocapture
Cargo.lock+1−93
@@ -82,27 +82,6 @@ dependencies = [
8282 "windows-sys 0.61.2",
8383]
8484
85−[[package]]
86−name = "anyhow"
87−version = "1.0.101"
88−source = "registry+https://github.com/rust-lang/crates.io-index"
89−checksum = "5f0e0fee31ef5ed1ba1316088939cea399010ed7731dba877ed44aeb407a75ea"
90−
91−[[package]]
92−name = "assert_cmd"
93−version = "2.1.2"
94−source = "registry+https://github.com/rust-lang/crates.io-index"
95−checksum = "9c5bcfa8749ac45dd12cb11055aeeb6b27a3895560d60d71e3c23bf979e60514"
96−dependencies = [
97− "anstyle",
98− "bstr",
99− "libc",
100− "predicates",
101− "predicates-core",
102− "predicates-tree",
103− "wait-timeout",
104−]
105−
10685[[package]]
10786name = "backtrace"
10887version = "0.3.76"
@@ -133,32 +112,12 @@ dependencies = [
133112 "objc2",
134113]
135114
136−[[package]]
137−name = "bstr"
138−version = "1.12.1"
139−source = "registry+https://github.com/rust-lang/crates.io-index"
140−checksum = "63044e1ae8e69f3b5a92c736ca6269b8d12fa7efe39bf34ddb06d102cf0e2cab"
141−dependencies = [
142− "memchr",
143− "regex-automata",
144− "serde",
145−]
146−
147115[[package]]
148116name = "bumpalo"
149117version = "3.19.1"
150118source = "registry+https://github.com/rust-lang/crates.io-index"
151119checksum = "5dd9dc738b7a8311c7ade152424974d8115f2cdad61e8dab8dac9f2362298510"
152120
153−[[package]]
154−name = "bytesize"
155−version = "2.3.1"
156−source = "registry+https://github.com/rust-lang/crates.io-index"
157−checksum = "6bd91ee7b2422bcb158d90ef4d14f75ef67f340943fc4149891dcce8f8b972a3"
158−dependencies = [
159− "serde_core",
160−]
161−
162121[[package]]
163122name = "cassowary"
164123version = "0.3.0"
@@ -362,12 +321,6 @@ dependencies = [
362321 "zeroize",
363322]
364323
365−[[package]]
366−name = "difflib"
367−version = "0.4.0"
368−source = "registry+https://github.com/rust-lang/crates.io-index"
369−checksum = "6184e33543162437515c2e2b48714794e37845ec9851711914eec9d308f6ebe8"
370−
371324[[package]]
372325name = "dispatch2"
373326version = "0.3.0"
@@ -784,33 +737,6 @@ version = "0.2.0"
784737source = "registry+https://github.com/rust-lang/crates.io-index"
785738checksum = "439ee305def115ba05938db6eb1644ff94165c5ab5e9420d1c1bcedbba909391"
786739
787−[[package]]
788−name = "predicates"
789−version = "3.1.3"
790−source = "registry+https://github.com/rust-lang/crates.io-index"
791−checksum = "a5d19ee57562043d37e82899fade9a22ebab7be9cef5026b07fda9cdd4293573"
792−dependencies = [
793− "anstyle",
794− "difflib",
795− "predicates-core",
796−]
797−
798−[[package]]
799−name = "predicates-core"
800−version = "1.0.9"
801−source = "registry+https://github.com/rust-lang/crates.io-index"
802−checksum = "727e462b119fe9c93fd0eb1429a5f7647394014cf3c04ab2c0350eeb09095ffa"
803−
804−[[package]]
805−name = "predicates-tree"
806−version = "1.0.12"
807−source = "registry+https://github.com/rust-lang/crates.io-index"
808−checksum = "72dd2d6d381dfb73a193c7fca536518d7caee39fc8503f74e7dc0be0531b425c"
809−dependencies = [
810− "predicates-core",
811− "termtree",
812−]
813−
814740[[package]]
815741name = "proc-macro2"
816742version = "1.0.106"
@@ -1081,12 +1007,6 @@ dependencies = [
10811007 "windows-sys 0.61.2",
10821008]
10831009
1084−[[package]]
1085−name = "termtree"
1086−version = "0.5.1"
1087−source = "registry+https://github.com/rust-lang/crates.io-index"
1088−checksum = "8f50febec83f5ee1df3015341d8bd429f2d1cc62bcba7ea2076759d315084683"
1089−
10901010[[package]]
10911011name = "thiserror"
10921012version = "2.0.18"
@@ -1318,12 +1238,9 @@ checksum = "ba73ea9cf16a25df0c8caa16c51acb937d5712a8429db78a3ee29d5dcacd3a65"
13181238
13191239[[package]]
13201240name = "vibebox"
1321−version = "0.3.2"
1241+version = "0.2.1"
13221242dependencies = [
1323− "anyhow",
1324− "assert_cmd",
13251243 "block2",
1326− "bytesize",
13271244 "clap",
13281245 "color-eyre",
13291246 "crossterm",
@@ -1344,15 +1261,6 @@ dependencies = [
13441261 "uuid",
13451262]
13461263
1347−[[package]]
1348−name = "wait-timeout"
1349−version = "0.2.1"
1350−source = "registry+https://github.com/rust-lang/crates.io-index"
1351−checksum = "09ac3b126d3914f9849036f826e054cbabdc8519970b8998ddaf3b5bd3c65f11"
1352−dependencies = [
1353− "libc",
1354−]
1355−
13561264[[package]]
13571265name = "wasi"
13581266version = "0.11.1+wasi-snapshot-preview1"
Cargo.toml+1−10
@@ -1,6 +1,6 @@
11[package]
22name = "vibebox"
3−version = "0.3.2"
3+version = "0.2.1"
44edition = "2024"
55authors = ["Finn Sheng"]
66description = "Ultrafast CLI on Apple Silicon macOS for fast, sandboxed development and LLM agents."
@@ -42,12 +42,3 @@ ratatui = { version = "0.29.0", features = ["unstable-rendered-line-info"] }
4242tracing = "0.1"
4343tracing-subscriber = { version = "0.3", features = ["env-filter"] }
4444dialoguer = "0.12.0"
45−bytesize = {version = "2.3.1",features = ["serde"]}
46−anyhow = "1.0.101"
47−
48−[dev-dependencies]
49−assert_cmd = "2"
50−tempfile = "3"
51−
52−[features]
53−mock-vm = []
README.md+32−173
@@ -5,219 +5,78 @@
55 </picture>
66 </a>
77</p>
8−<p align="center">an ultrafast, open-source sandbox for running coding agents safely.</p>
8+<p align="center">The open source AI coding agent.</p>
99
10−<p align="center">
11− <a href="https://crates.io/crates/vibebox">
12− <img alt="Crates.io" src="https://img.shields.io/crates/v/vibebox.svg">
13− </a>
14− <a href="https://github.com/robcholz/vibebox/blob/main/LICENSE">
15− <img alt="MIT licensed" src="https://img.shields.io/badge/license-MIT-blue.svg">
16− </a>
17− <a href="https://github.com/robcholz/vibebox/actions?query=workflow%3ACI+branch%3Amain">
18− <img alt="Build Status" src="https://github.com/robcholz/vibebox/workflows/CI/badge.svg">
19− </a>
20−</p>
21−
22−<p align="center">
23− <a href="README.md">English</a> |
24− <a href="README.zh.md">简体中文</a>
25−</p>
10+[![Crates.io][crates-badge]][crates-url]
11+[![MIT licensed][mit-badge]][mit-url]
12+[![Build Status][actions-badge]][actions-url]
2613
27−**VibeBox is a per-project micro-VM sandbox for running coding agents on macOS (Apple Virtualization Framework).**
28−It’s optimized for a *daily-driver* workflow: fast warm re-entry, explicit mounts, and reusable sessions.
14+[crates-badge]: https://img.shields.io/crates/v/vibebox.svg
2915
30−**Who it’s for:** macOS users running coding agents who want real isolation without giving up a fast daily workflow.
16+[crates-url]: https://crates.io/crates/vibebox
3117
32−**Quick facts:** warm re-entry is typically **<5s** on my M3 (varies by machine/cache); first run downloads and
33−provisions a Debian base image (network dependent).
18+[mit-badge]: https://img.shields.io/badge/license-MIT-blue.svg
3419
35−**Security model:** Linux guest VM with explicit mount allowlists from `vibebox.toml` (repo-first, everything else
36−opt-in).
20+[mit-url]: https://github.com/robcholz/vibebox/blob/main/LICENSE
3721
38−- **enter/attach in seconds:** `vibebox` drops you into a reusable sandbox for the current repo
39−- **project-scoped by default:** explicit mounts + repo-contained changes (repo-first, everything else is allowlisted)
40−- **sessioned:** multi-instance + session management (reuse, multiple terminals, cleanup)
22+[actions-badge]: https://github.com/robcholz/vibebox/workflows/CI/badge.svg
4123
42−### Quick Demo
24+[actions-url]: https://github.com/robcholz/vibebox/actions?query=workflow%3ACI+branch%3Amain
4325
44−```bash
45−# from any repo
46−cd my-project
47−vibebox
48−```
49−
50−What you should see (roughly):
51−
52−```text
53−vibebox: starting (session: my-project)
54−vibebox: attaching...
55−vibecoder@vibebox:~/my-project$
56−```
26+<p align="center">
27+ <a href="README.md">English</a> |
28+ <a href="README.zh.md">简体中文</a> |
29+</p>
5730
58−[![VibeBox Terminal UI](docs/screenshot.png)](https://vibebox.robcholz.com)
31+[![OpenCode Terminal UI](docs/screenshot.png)](https://vibebox.robcholz.com)
5932
6033---
6134
62−### Why I built VibeBox
63−
64−I use coding agents daily, and I wanted to give them a real shell without handing them my host machine.
65−Lock things down and you get nonstop confirmations; loosen it up and you worry about deleting files, touching secrets,
66−or wandering outside the repo.
67−
68−VibeBox is the middle ground: a per-repo sandbox with a hard VM boundary, fast re-entry, and explicit mounts. It’s built
69−to be “always on” for agent work without turning safety into a chore.
70−
71−### Why a micro-VM (vs containers)?
72−
73−Containers are great. VibeBox isn’t trying to replace Docker/devcontainers for building services.
74−
75−I specifically wanted a VM-shaped default for agent workflows on macOS:
76−
77−- **guest-kernel isolation boundary by default:** when I’m letting an agent run arbitrary commands, I want “safe mode”
78− to
79− be a Linux guest, not my host.
80−- **sessions as a first-class workflow:** attach/reuse per repo, multiple terminals into the same sandbox, reliable
81− cleanup to avoid orphan environments.
82−- **explicit mount allowlists as the primary UX:** repo-scoped by default; anything else is an explicit decision.
83−- **minimal per-repo setup:** you *can* reproduce parts of this with compose/devcontainers, but I wanted a single
84− command
85− that works repo-to-repo without maintaining container configs for the basic “safe shell” workflow.
86−
87−### Comparison
88−
89−Here’s why I didn’t just use existing options:
90−
91−- **vibe**: super convenient and nails “zero-config, just go”. VibeBox is intentionally on a different axis: per-repo
92− config + sessions + multi-instance lifecycle.
93−- **QEMU**: powerful, but the configuration surface area is huge. For day-to-day sandboxing it’s not “open a repo and
94− go” — it’s a project on its own.
95−- **Docker / devcontainers / devpods**: great ecosystem. My friction wasn’t raw startup time, it was the day-to-day
96− overhead of keeping per-repo agent sandboxes *safe-by-default* (mount allowlists, secrets exposure, attach/reuse,
97− cleanup) without maintaining container configs per repo for the basic workflow.
98−
99−That’s what pushed me to build **VibeBox**: I wanted a per-project sandbox that’s fast to enter (just `vibebox`),
100−supports real configuration + sessions, and keeps a hard isolation boundary.
101−
10235### Installation
10336
10437```bash
105−# install script
38+# YOLO
10639curl -fsSL https://raw.githubusercontent.com/robcholz/vibebox/main/install | bash
10740
108−# package managers
41+# Package managers
10942cargo install vibebox
110−
111−# manual install
112−curl -LO https://github.com/robcholz/vibebox/releases/download/latest/vibebox-macos-arm64.zip
113−unzip vibebox-macos-arm64.zip
114−mkdir -p ~/.local/bin
115−mv vibebox ~/.local/bin
116−export PATH="$HOME/.local/bin:$PATH"
11743```
11844
119−**Requirements**
120−
121−- macOS on Apple Silicon (VibeBox uses Apple's virtualization APIs).
122−
123−**First Run**
45+> [!TIP]
46+> We truly recommend you to use `YOLO`.
12447
125−The first `vibebox` run downloads a Debian base image and provisions it. After that, per-project instances reuse the
126−cached base image for much faster startups.
48+todo
12749
12850### Documentation
12951
130−**Quick Start**
131−
132−```bash
133−cd /path/to/your/project
134−vibebox
135−```
136−
137−On first run, VibeBox creates `vibebox.toml` in your project (if missing) and a `.vibebox/` directory for instance data.
138−
139−**Configuration (`vibebox.toml`)**
140−
141−`vibebox.toml` lives in your project root by default. You can override it with `vibebox -c path/to/vibebox.toml` or the
142−`VIBEBOX_CONFIG_PATH` env var, but the path must stay inside the project directory.
143−
144−Default config (auto-created when missing):
145−
146−```toml
147−[box]
148−cpu_count = 2
149−ram_mb = 2048
150−disk_gb = 5
151−mounts = [
152− "~/.codex:~/.codex:read-write",
153− "~/.claude:~/.claude:read-write",
154−]
155−
156−[supervisor]
157−auto_shutdown_ms = 20000
158−```
159−
160−`disk_gb` is only applied when the instance disk is first created. If you change it later, run `vibebox reset` to
161−recreate the disk.
162−
163−**Mounts**
164−
165−- Your project is mounted read-write at `~/<project-name>`, and the shell starts there.
166−- If a `.git` directory exists, it is masked with a tmpfs mount inside the VM to discourage accidental edits from the
167− guest.
168−- Extra mounts come from `box.mounts` with the format `host:guest[:read-only|read-write]`.
169−- Host paths support `~` expansion. Relative guest paths are treated as `/root/<path>`.
170−- Guest paths that use `~` are linked into `/home/<ssh-user>` for convenience. Run `vibebox explain` to see the resolved
171− host/guest mappings.
172−
173−**CLI Commands**
174−
175−```bash
176−vibebox # start or attach to the current project VM
177−vibebox list # list known project sessions
178−vibebox reset # delete .vibebox for this project and recreate on next run
179−vibebox purge-cache # delete the global cache (~/.cache/vibebox)
180−vibebox explain # show mounts and network info
181−```
182−
183−**Inside the VM**
184−
185−- Default SSH user: `vibecoder`
186−- Hostname: `vibebox`
187−- Base image provisioning installs: build tools, `git`, `curl`, `ripgrep`, `openssh-server`, and `sudo`.
188−- On first login, VibeBox installs `mise` and configures tools like `uv`, `node`, `@openai/codex`, and
189− `@anthropic-ai/claude-code` (best-effort).
190−- Shell aliases: `:help` and `:exit`.
191−
192−**State & Cache**
193−
194−- Project state lives in `.vibebox/` (instance disk, SSH keys, logs, manager socket/pid). `vibebox reset` removes it.
195−- Global cache lives in `~/.cache/vibebox` (base image + shared guest cache). `vibebox purge-cache` clears it.
196−- Session index lives in `~/.vibebox/sessions` and is shown by `vibebox list`.
52+todo
19753
19854### Contributing
19955
20056If you're interested in contributing to VibeBox, please read our [contributing docs](CONTRIBUTING.md) before
20157submitting a pull request.
20258
59+### Using VibeBox
60+
61+Feel free to use, but remember to promote VibeBox as well!
62+
20363### FAQ
20464
205−#### How is this different from other sandboxes?
65+#### How is this different from other Sandboxes?
20666
207−VibeBox is built for fast, repeatable local sandboxes with minimal ceremony. What’s different here:
67+Vibebox is built for fast, repeatable local sandboxes with minimal ceremony. What’s different here:
20868
209−- Warm re-entry is typically **<5s** on my M3 (varies by machine/cache), so you can jump back in quickly.
69+- Warm startup is typically under **6 seconds** on my M3, so you can jump back in quickly.
21070- One simple command — `vibebox` — drops you into the sandbox from your project.
21171- Configuration lives in `vibebox.toml`, where you can set CPU, RAM, disk size, and mounts.
212−- Sessions are first-class: reuse, multiple terminals, cleanup.
21372
214−### Special thanks
73+### Special Thank
21574
21675[vibe](https://github.com/lynaghk/vibe) by lynaghk.
21776
218−And the amazing Rust community — without the ecosystem and toolchain like [crates.io](https://crates.io), this wouldn't
219−be possible!
77+And amazing Rust community, without your rich crates and fantastic toolchain like [crates.io](https://crates.io), this
78+wouldn't be possible!
22079
22180---
22281
223−**Follow me on X** [x.com/robcholz](https://x.com/robcholz)
82+**Follow me on X** [X.com](https://x.com/robcholz)
README.zh.md−209
@@ -1,209 +0,0 @@
1−<p align="center">
2− <a href="https://vibebox.robcholz.com">
3− <picture>
4− <img src="docs/banner.png" alt="VibeBox logo">
5− </picture>
6− </a>
7−</p>
8−<p align="center">用于安全运行 coding agents 的超高速开源沙盒。</p>
9−
10−<p align="center">
11− <a href="https://crates.io/crates/vibebox">
12− <img alt="Crates.io" src="https://img.shields.io/crates/v/vibebox.svg">
13− </a>
14− <a href="https://github.com/robcholz/vibebox/blob/main/LICENSE">
15− <img alt="MIT licensed" src="https://img.shields.io/badge/license-MIT-blue.svg">
16− </a>
17− <a href="https://github.com/robcholz/vibebox/actions?query=workflow%3ACI+branch%3Amain">
18− <img alt="Build Status" src="https://github.com/robcholz/vibebox/workflows/CI/badge.svg">
19− </a>
20−</p>
21−
22−<p align="center">
23− <a href="README.zh.md">简体中文</a> |
24− <a href="README.md">English</a>
25−</p>
26−
27−**VibeBox 是一个按项目划分的 micro-VM 沙盒,用于在 macOS 上运行 coding agents(基于 Apple Virtualization Framework)。**
28−它面向 *日常使用* 工作流优化:快速热启动、显式挂载、可复用会话。
29−
30−**适合谁:** 在 macOS 上使用 coding agents,并且既想要真实隔离又不想牺牲日常效率的人。
31−
32−**快速事实:** 在我的 M3 上,热启动通常 **<5s**(因机器/缓存而异);首次运行会下载并初始化 Debian 基础镜像(受网络影响)。
33−
34−**安全模型:** Linux 来宾 VM + `vibebox.toml` 显式挂载白名单(默认仅项目目录,其它均需显式允许)。
35−
36−- **几秒进入/附加:** `vibebox` 直接进入当前仓库的可复用沙盒
37−- **默认按项目范围:** 显式挂载 + 改动限制在仓库内(repo 优先,其他需 allowlist)
38−- **会话化:** 多实例 + 会话管理(复用、多终端、清理)
39−
40−### 快速演示
41−
42−```bash
43−# 在任意仓库内
44−cd my-project
45−vibebox
46−```
47−
48−你大致会看到:
49−
50−```text
51−vibebox: starting (session: my-project)
52−vibebox: attaching...
53−vibecoder@vibebox:~/my-project$
54−```
55−
56−[![VibeBox Terminal UI](docs/screenshot.png)](https://vibebox.robcholz.com)
57−
58−---
59−
60−### 我为什么做 VibeBox
61−
62−我每天都在用 coding agents,也希望它们有一个真实的 shell,但不想把宿主机直接交出去。
63−权限收紧会被不停的确认打断;权限放开又担心误删文件、触及密钥,或者跑出仓库边界。
64−
65−VibeBox 是中间方案:按项目隔离、硬 VM 边界、快速回到工作状态、显式挂载。它适合把 agent 当成日常工具,而不是把安全变成负担。
66−
67−### 为什么是 micro-VM(而不是容器)?
68−
69−容器很好用。VibeBox 并不是用来替代 Docker/devcontainers 去构建服务。
70−
71−我更想要的是在 macOS 上适合 agent 的 VM 默认形态:
72−
73−- **默认是 guest-kernel 隔离边界:** 让 agent 跑任意命令时,“安全模式”是 Linux 来宾而不是宿主机。
74−- **会话是第一等公民:** 按项目附加/复用,多终端进入同一沙盒,可靠清理,避免孤儿环境。
75−- **显式挂载白名单作为主要 UX:** 默认仅项目目录,其它都需显式允许。
76−- **最少的每项目配置:** 你可以用 compose/devcontainers 实现一部分,但我想要的是一个命令,在不同仓库间直接工作,不必维护容器配置来获得基础“安全
77− shell”体验。
78−
79−### 对比
80−
81−下面是我为什么没有直接用现成方案的原因:
82−
83−- **vibe**:非常方便,“零配置、直接用”做得很好。但 VibeBox 走的是另一条路:按项目配置 + 会话 + 多实例生命周期。
84−- **QEMU**:很强大,但配置面太大了。日常当沙箱用,它不像是“进到 repo 就能用”,更像是你得先把它当成一个项目来折腾。
85−- **Docker / devcontainers / devpods**:生态很成熟。我的痛点不在启动时间,而是日常保持
86− safe-by-default(挂载白名单、密钥暴露、附加/复用、清理)的开销,不想为基础 workflow 在每个项目维护容器配置。
87−
88−这就是我做 **VibeBox** 的原因:我想要一个按项目隔离的沙箱,进入快(直接 `vibebox`),支持真实配置 + 会话,同时保持硬隔离边界。
89−
90−### 安装
91−
92−```bash
93−# YOLO:一键安装
94−curl -fsSL https://raw.githubusercontent.com/robcholz/vibebox/main/install | bash
95−
96−# Cargo
97−cargo install vibebox
98−
99−# 或者手动安装
100−curl -LO https://github.com/robcholz/vibebox/releases/download/latest/vibebox-macos-arm64.zip
101−unzip vibebox-macos-arm64.zip
102−mkdir -p ~/.local/bin
103−mv vibebox ~/.local/bin
104−export PATH="$HOME/.local/bin:$PATH"
105−```
106−
107−**系统要求**
108−
109−- Apple Silicon 的 macOS(VibeBox 使用了 Apple 的虚拟化 API)。
110−
111−**首次运行**
112−
113−第一次执行 `vibebox` 会下载 Debian 基础镜像并完成初始化。之后每个项目的实例会复用缓存的基础镜像,
114−启动会快很多。
115−
116−### 文档
117−
118−**快速开始**
119−
120−```bash
121−cd /path/to/your/project
122−vibebox
123−```
124−
125−第一次运行时,如果项目目录里缺少配置,VibeBox 会自动创建 `vibebox.toml`(放在项目根目录),并创建
126−`.vibebox/` 用来保存实例数据。
127−
128−**配置(`vibebox.toml`)**
129−
130−默认情况下,`vibebox.toml` 位于项目根目录。你可以用 `vibebox -c path/to/vibebox.toml` 或设置
131−`VIBEBOX_CONFIG_PATH` 环境变量来覆盖路径,但配置文件必须仍然位于项目目录内部。
132−
133−默认配置(缺失时会自动生成):
134−
135−```toml
136−[box]
137−cpu_count = 2
138−ram_mb = 2048
139−disk_gb = 5
140−mounts = [
141− "~/.codex:~/.codex:read-write",
142− "~/.claude:~/.claude:read-write",
143−]
144−
145−[supervisor]
146−auto_shutdown_ms = 20000
147−```
148−
149−注意:`disk_gb` 只在「首次创建实例磁盘」时生效。之后如果你改了它,需要运行 `vibebox reset` 重新创建磁盘。
150−
151−**挂载(Mounts)**
152−
153−- 你的项目会以读写方式挂载到 `~/<project-name>`,并且 shell 会默认从那里启动。
154−- 如果项目里存在 `.git` 目录,VM 内会用 tmpfs 把它遮住,避免你在 guest 里误操作改到 Git 元数据。
155−- 额外挂载通过 `box.mounts` 配置,格式为 `host:guest[:read-only|read-write]`。
156−- Host 路径支持 `~` 展开;guest 的相对路径会被视为 `/root/<path>`。
157−- guest 路径如果用了 `~`,会为了方便被链接到 `/home/<ssh-user>` 下。你可以运行 `vibebox explain`
158− 查看最终解析后的 host/guest 映射关系。
159−
160−**CLI 命令**
161−
162−```bash
163−vibebox # 启动或连接当前项目的 VM
164−vibebox list # 列出已知的项目会话
165−vibebox reset # 删除当前项目的 .vibebox,下一次运行会重新创建
166−vibebox purge-cache # 删除全局缓存(~/.cache/vibebox)
167−vibebox explain # 显示挂载与网络信息
168−```
169−
170−**在 VM 内部**
171−
172−- 默认 SSH 用户:`vibecoder`
173−- 主机名:`vibebox`
174−- 基础镜像初始化会安装:构建工具、`git`、`curl`、`ripgrep`、`openssh-server`、`sudo`
175−- 首次登录时,VibeBox 会安装 `mise`,并尽力配置 `uv`、`node`、`@openai/codex`、
176− `@anthropic-ai/claude-code` 等工具(best-effort,视网络和环境而定)
177−- Shell 里有两个别名:`:help` 和 `:exit`
178−
179−**状态与缓存**
180−
181−- 项目级状态在 `.vibebox/`(实例磁盘、SSH key、日志、manager socket/pid)。`vibebox reset` 会移除它。
182−- 全局缓存在 `~/.cache/vibebox`(基础镜像 + 共享 guest 缓存)。`vibebox purge-cache` 会清空它。
183−- 会话索引在 `~/.vibebox/sessions`,可以通过 `vibebox list` 查看。
184−
185−### 参与贡献
186−
187−如果你想参与贡献 VibeBox,请先阅读 [贡献指南](CONTRIBUTING.md),再提交 Pull Request。
188−
189−### FAQ
190−
191−#### 它和其它 Sandboxes 有什么不同?
192−
193−VibeBox 追求的是:本地、可复现、启动快、流程简单。主要差异点:
194−
195−- 在我的 M3 上,热启动通常 **<5s**,可以非常快地回到工作状态。
196−- 一个命令——`vibebox`——直接把你带进沙盒(从你的项目目录启动)。
197−- 配置集中在 `vibebox.toml`,CPU / 内存 / 磁盘大小 / 挂载都能一眼看懂、随手改。
198−- 会话是第一等公民:复用、多终端、清理。
199−
200−### 特别鸣谢
201−
202−[vibe](https://github.com/lynaghk/vibe) by lynaghk。
203−
204−以及 Rust 社区。没有你们丰富的 crates 生态和优秀的工具链(比如 [crates.io](https://crates.io)),
205−这个项目不可能这么顺利!Rust教。
206−
207−---
208−
209−**在 X 上关注我** [X.com](https://x.com/robcholz)
docs/tasks.md+9−14
@@ -25,7 +25,7 @@
25255. [x] Implement rendering functions for header, terminal area, input area, completions, and status bar.
26266. [x] Implement async event loop (keyboard, resize, tick) with crossterm EventStream + tokio.
27277. [x] Add a standalone TUI CLI binary (no main.rs wiring) with placeholder VM info and TODOs for VM integration.
28−8. [x] Run tests and validate coverage for the new module.
28+8. [ ] Run tests and validate coverage for the new module.
2929
3030## TUI
3131
@@ -49,23 +49,18 @@
4949 4. [x] set up the cli.
50509. [x] fix ui overlap, and consistency issue.
515110. [x] `purge-cache` to clear the cache.
52−11. [x] intensive integration test.
52+11. [ ] intensive integration test.
5353
5454## Publish
5555
56−1. [x] write the docs.
57−2. [x] setup quick install link.
58−3. [x] setup website.
56+1. [ ] write the docs.
57+2. [ ] setup quick install link.
58+3. [ ] setup website.
5959
6060## Stage 2
6161
62621. [ ] retouch the cli ux.
63−2. [x] refactor the code.
64−3. [ ] refactor the mount system.
65−4. [x] refactor the vm process lifetime.
66−5. [x] Redirect vm output to log.
67−6. [x] Redirect vm output to vibebox starting it.
68−7. [x] use anyhow to sync api.
69−8. [ ] add support for ipv6.
70−9. [x] use UnixStream instead of status file
71−10. [x] liveness check should also happen when waiting for ssh port
63+2. [ ] refactor the code.
64+3. [ ] Redirect vm output to log.
65+4. [ ] Redirect vm output to vibebox starting it.
66+5. [ ] use anyhow to sync api.
scripts/commit-check.shdeleted−6
@@ -1,6 +0,0 @@
1−#!/usr/bin/env bash
2−set -euo pipefail
3−
4−cargo clippy --all-targets --all-features -- -D warnings
5−cargo fmt --all
6−cargo build --all-targets
src/bin/vibebox-supervisor.rs+7−8
@@ -21,16 +21,15 @@ fn main() -> Result<()> {
2121 color_eyre::install()?;
2222
2323 tracing::info!("starting vm supervisor");
24− let project_dir = env::current_dir().map_err(|err| color_eyre::eyre::eyre!(err.to_string()))?;
25− let config = config::load_config(&project_dir)
24+ let cwd = env::current_dir().map_err(|err| color_eyre::eyre::eyre!(err.to_string()))?;
25+ let config = config::load_config(&cwd);
26+ let instance_dir = instance::ensure_instance_dir(&cwd)
2627 .map_err(|err| color_eyre::eyre::eyre!(err.to_string()))?;
27− let _ = instance::ensure_instance_dir(&project_dir)
28− .map_err(|err| color_eyre::eyre::eyre!(err.to_string()))?;
29− let _ = instance::touch_last_active(&project_dir);
28+ let _ = instance::touch_last_active(&instance_dir);
3029 let args = vm::VmArg {
3130 cpu_count: config.box_cfg.cpu_count,
32− ram_bytes: config.box_cfg.ram_size.as_u64(),
33− disk_bytes: config.box_cfg.disk_size.as_u64(),
31+ ram_bytes: config.box_cfg.ram_mb.saturating_mul(1024 * 1024),
32+ disk_bytes: config.box_cfg.disk_gb.saturating_mul(1024 * 1024 * 1024),
3433 no_default_mounts: false,
3534 mounts: config.box_cfg.mounts.clone(),
3635 };
@@ -38,7 +37,7 @@ fn main() -> Result<()> {
3837 tracing::info!(auto_shutdown_ms, "vm supervisor config");
3938
4039 let result = vm_manager::run_manager(args, auto_shutdown_ms);
41− let _ = instance::touch_last_active(&project_dir);
40+ let _ = instance::touch_last_active(&instance_dir);
4241 if let Err(err) = result {
4342 tracing::error!(error = %err, "vm supervisor exited");
4443 return Err(color_eyre::eyre::eyre!(err.to_string()));
src/bin/vibebox.rs+91−55
@@ -1,7 +1,3 @@
1−use bytesize::ByteSize;
2−use clap::Parser;
3−use color_eyre::Result;
4−use dialoguer::Confirm;
51use std::{
62 env,
73 ffi::OsString,
@@ -10,6 +6,10 @@ use std::{
106 path::{Path, PathBuf},
117 sync::{Arc, Mutex},
128};
9+
10+use clap::Parser;
11+use color_eyre::Result;
12+use dialoguer::Confirm;
1313use time::OffsetDateTime;
1414use time::format_description::well_known::Rfc3339;
1515use tracing_subscriber::filter::LevelFilter;
@@ -17,9 +17,8 @@ use tracing_subscriber::registry::Registry;
1717use tracing_subscriber::{EnvFilter, fmt, prelude::*, reload};
1818
1919use vibebox::tui::{AppState, VmInfo};
20−use vibebox::utils::relative_to_home;
2120use vibebox::{
22− SessionManager, commands, config, explain, instance, session_manager, tui, vm_manager,
21+ SessionManager, commands, config, explain, instance, session_manager, tui, vm, vm_manager,
2322};
2423
2524#[derive(Debug, Parser)]
@@ -57,26 +56,53 @@ fn main() -> Result<()> {
5756
5857 let config_override = cli.config.clone();
5958 let raw_args: Vec<OsString> = env::args_os().collect();
60− let config = config::load_config_with_path(&cwd, config_override.as_deref())
61− .map_err(|err| color_eyre::eyre::eyre!(err.to_string()))?;
59+ let config = config::load_config_with_path(&cwd, config_override.as_deref());
6260
61+ if env::var("VIBEBOX_VM_MANAGER").as_deref() == Ok("1") {
62+ tracing::info!("starting vm manager mode");
63+ let args = vm::VmArg {
64+ cpu_count: config.box_cfg.cpu_count,
65+ ram_bytes: config.box_cfg.ram_mb.saturating_mul(1024 * 1024),
66+ disk_bytes: config.box_cfg.disk_gb.saturating_mul(1024 * 1024 * 1024),
67+ no_default_mounts: false,
68+ mounts: config.box_cfg.mounts.clone(),
69+ };
70+ let auto_shutdown_ms = config.supervisor.auto_shutdown_ms;
71+ tracing::info!(auto_shutdown_ms, "vm manager config");
72+ if let Err(err) = vm_manager::run_manager(args, auto_shutdown_ms) {
73+ tracing::error!(error = %err, "vm manager exited");
74+ return Err(color_eyre::eyre::eyre!(err.to_string()));
75+ }
76+ return Ok(());
77+ }
78+
79+ vm::ensure_signed();
80+
81+ let vm_args = vm::VmArg {
82+ cpu_count: config.box_cfg.cpu_count,
83+ ram_bytes: config.box_cfg.ram_mb.saturating_mul(1024 * 1024),
84+ disk_bytes: config.box_cfg.disk_gb.saturating_mul(1024 * 1024 * 1024),
85+ no_default_mounts: false,
86+ mounts: config.box_cfg.mounts.clone(),
87+ };
88+ let auto_shutdown_ms = config.supervisor.auto_shutdown_ms;
6389 let vm_info = VmInfo {
64− max_memory: config.box_cfg.ram_size,
65− cpu_cores: config.box_cfg.cpu_count,
66− max_disk: config.box_cfg.disk_size,
90+ max_memory_mb: vm_args.ram_bytes / (1024 * 1024),
91+ cpu_cores: vm_args.cpu_count,
92+ max_disk_gb: (vm_args.disk_bytes as f32) / 1024.0 / 1024.0 / 1024.0,
6793 system_name: "Debian".to_string(), // TODO: read system name from the VM.
68− auto_shutdown_ms: config.supervisor.auto_shutdown_ms,
94+ auto_shutdown_ms,
6995 };
7096 if let Ok(manager) = SessionManager::new() {
7197 if let Err(err) = manager.update_global_sessions(&cwd) {
7298 tracing::warn!(error = %err, "failed to update a global session list");
7399 }
74100 } else {
75− tracing::error!("failed to initialize session manager");
76− std::process::exit(1);
101+ tracing::warn!("failed to initialize session manager");
77102 }
78103 let commands = commands::build_commands();
79104 let app = Arc::new(Mutex::new(AppState::new(cwd.clone(), vm_info, commands)));
105+
80106 {
81107 let mut locked = app.lock().expect("app state poisoned");
82108 tui::render_tui_once(&mut locked)?;
@@ -86,39 +112,17 @@ fn main() -> Result<()> {
86112 writeln!(stdout)?;
87113 stdout.flush()?;
88114 }
89− warn_disk_size_mismatch(&cwd, config.box_cfg.disk_size);
115+ warn_disk_size_mismatch(&cwd, vm_args.disk_bytes);
90116 if let Some(handle) = stderr_handle {
91117 let _ = handle.modify(|filter| *filter = LevelFilter::INFO);
92118 }
93119
94− tracing::debug!(config.supervisor.auto_shutdown_ms, "auto shutdown config");
95− let manager_conn = vm_manager::ensure_manager(
96− &raw_args,
97− config.supervisor.auto_shutdown_ms,
98− config_override.as_deref(),
99− )
100− .map_err(|err| {
101− tracing::error!(error = %err, "failed to ensure vm manager");
102− color_eyre::eyre::eyre!(err.to_string())
103− })?;
120+ tracing::debug!(auto_shutdown_ms, "auto shutdown config");
121+ let manager_conn =
122+ vm_manager::ensure_manager(&raw_args, auto_shutdown_ms, config_override.as_deref())
123+ .map_err(|err| color_eyre::eyre::eyre!(err.to_string()))?;
104124
105− if let Err(err) = instance::run_with_ssh(manager_conn) {
106− if let Some(instance::InstanceError::UnexpectedDisconnection) =
107− err.downcast_ref::<instance::InstanceError>()
108− {
109− tracing::warn!("vm manager disconnected; exiting vibebox");
110− } else if let Some(instance::InstanceError::VMError(vm_error)) =
111− err.downcast_ref::<instance::InstanceError>()
112− {
113− tracing::error!("[vm]: {vm_error}");
114− tracing::info!("vibecoding paused: the VM says today is a rest day 😴");
115− std::process::exit(1);
116− } else {
117− let message = err.to_string();
118− tracing::error!(error = %message, "vibebox exited: uncaught error");
119− return Err(color_eyre::eyre::eyre!(message));
120− }
121− }
125+ instance::run_with_ssh(manager_conn).map_err(|err| color_eyre::eyre::eyre!(err.to_string()))?;
122126
123127 tracing::info!("See you again — keep vibecoding (no SEVs, only vibes) 😈");
124128
@@ -201,14 +205,13 @@ fn handle_command(command: Command, cwd: &Path, config_override: Option<&Path>)
201205 "Purged {} file{} totaling {} from {}",
202206 file_count,
203207 if file_count == 1 { "" } else { "s" },
204− ByteSize(total_bytes),
208+ format_bytes(total_bytes),
205209 cache_dir.display()
206210 );
207211 Ok(())
208212 }
209213 Command::Explain => {
210− let config = config::load_config_with_path(cwd, config_override)
211− .map_err(|err| color_eyre::eyre::eyre!(err.to_string()))?;
214+ let config = config::load_config_with_path(cwd, config_override);
212215 let mounts = explain::build_mount_rows(cwd, &config)
213216 .map_err(|err| color_eyre::eyre::eyre!(err.to_string()))?;
214217 let networks = explain::build_network_rows(cwd)
@@ -231,6 +234,20 @@ fn project_name(directory: &Path) -> String {
231234 .to_string()
232235}
233236
237+fn relative_to_home(directory: &Path) -> String {
238+ let Ok(home) = env::var("HOME") else {
239+ return directory.display().to_string();
240+ };
241+ let home_path = PathBuf::from(home);
242+ if let Ok(stripped) = directory.strip_prefix(&home_path) {
243+ if stripped.components().next().is_none() {
244+ return "~".to_string();
245+ }
246+ return format!("~/{}", stripped.display());
247+ }
248+ directory.display().to_string()
249+}
250+
234251fn cache_dir() -> Result<PathBuf> {
235252 let home = env::var("HOME").map(PathBuf::from)?;
236253 let cache_home = env::var("XDG_CACHE_HOME")
@@ -279,6 +296,23 @@ fn measure_dir(path: &Path) -> Result<(u64, u64)> {
279296 Ok((file_count, total_bytes))
280297}
281298
299+fn format_bytes(bytes: u64) -> String {
300+ const KB: f64 = 1024.0;
301+ const MB: f64 = KB * 1024.0;
302+ const GB: f64 = MB * 1024.0;
303+
304+ let b = bytes as f64;
305+ if b >= GB {
306+ format!("{:.2} GB", b / GB)
307+ } else if b >= MB {
308+ format!("{:.1} MB", b / MB)
309+ } else if b >= KB {
310+ format!("{:.1} KB", b / KB)
311+ } else {
312+ format!("{} B", bytes)
313+ }
314+}
315+
282316fn format_last_active(value: Option<&str>) -> String {
283317 let Some(raw) = value else {
284318 return "-".to_string();
@@ -320,22 +354,24 @@ fn format_last_active(value: Option<&str>) -> String {
320354 format!("{} day{} ago", days, if days == 1 { "" } else { "s" })
321355}
322356
323−fn warn_disk_size_mismatch(cwd: &Path, configured_size: ByteSize) {
357+fn warn_disk_size_mismatch(cwd: &Path, configured_bytes: u64) {
324358 let instance_raw = cwd
325359 .join(session_manager::INSTANCE_DIR_NAME)
326360 .join("instance.raw");
327361 let Ok(meta) = fs::metadata(&instance_raw) else {
328362 return;
329363 };
330− let current_size = ByteSize::b(meta.len());
331− if current_size == configured_size {
364+ let current_bytes = meta.len();
365+ if current_bytes == configured_bytes {
332366 return;
333367 }
368+ let current_gb = current_bytes as f64 / (1024.0 * 1024.0 * 1024.0);
369+ let target_gb = configured_bytes as f64 / (1024.0 * 1024.0 * 1024.0);
334370 tracing::warn!(
335− "instance disk size does not match config (current {}, config {}). \
371+ "instance disk size does not match config (current {:.2} GB, config {:.2} GB). \
336372disk_gb applies only on init. Run `vibebox reset` to recreate or set disk_gb to match; using the existing disk.",
337− current_size,
338− configured_size,
373+ current_gb,
374+ target_gb
339375 );
340376}
341377
@@ -344,13 +380,13 @@ type StderrHandle = reload::Handle<LevelFilter, Registry>;
344380fn init_tracing(cwd: &Path) -> Option<StderrHandle> {
345381 let filter = EnvFilter::try_from_default_env().unwrap_or_else(|_| EnvFilter::new("debug"));
346382 let file_filter = filter.clone();
347− let stderr_is_tty = io::stderr().is_terminal();
383+ let stderr_is_tty = std::io::stderr().is_terminal();
348384 let ansi = stderr_is_tty && env::var("VIBEBOX_LOG_NO_COLOR").is_err();
349385 let file = instance::ensure_instance_dir(cwd)
350386 .ok()
351387 .and_then(|instance_dir| {
352388 let log_path = instance_dir.join("cli.log");
353− fs::OpenOptions::new()
389+ std::fs::OpenOptions::new()
354390 .create(true)
355391 .write(true)
356392 .truncate(true)
@@ -364,7 +400,7 @@ fn init_tracing(cwd: &Path) -> Option<StderrHandle> {
364400 .with_target(false)
365401 .with_ansi(ansi)
366402 .without_time()
367− .with_writer(io::stderr)
403+ .with_writer(std::io::stderr)
368404 .with_filter(stderr_filter);
369405 let subscriber = tracing_subscriber::registry().with(stderr_layer);
370406 if let Some(file) = file {
@@ -382,7 +418,7 @@ fn init_tracing(cwd: &Path) -> Option<StderrHandle> {
382418 let stderr_layer = fmt::layer()
383419 .with_target(false)
384420 .with_ansi(ansi)
385− .with_writer(io::stderr)
421+ .with_writer(std::io::stderr)
386422 .with_filter(filter);
387423 let subscriber = tracing_subscriber::registry().with(stderr_layer);
388424 if let Some(file) = file {
src/config.rs+77−467
@@ -1,14 +1,13 @@
1−use anyhow::{Context, Error, Result, bail};
2−use bytesize::ByteSize;
3−use serde::{Deserialize, Serialize};
41use std::{
52 env, fs, io,
63 path::{Path, PathBuf},
74};
85
6+use serde::{Deserialize, Serialize};
7+
98use crate::vm::DirectoryShare;
109
11−const CONFIG_FILENAME: &str = "vibebox.toml";
10+pub const CONFIG_FILENAME: &str = "vibebox.toml";
1211pub const CONFIG_PATH_ENV: &str = "VIBEBOX_CONFIG_PATH";
1312
1413const DEFAULT_CPU_COUNT: usize = 2;
@@ -23,83 +22,20 @@ pub struct Config {
2322 pub supervisor: SupervisorConfig,
2423}
2524
26−const MI_B: u64 = 1024 * 1024;
27−const GI_B: u64 = 1024 * 1024 * 1024;
28−
29−mod serde_mb {
30− use super::{ByteSize, MI_B};
31− use serde::{Deserialize, Deserializer, Serializer};
32−
33− pub fn serialize<S>(v: &ByteSize, s: S) -> Result<S::Ok, S::Error>
34− where
35− S: Serializer,
36− {
37− let bytes = v.0;
38− if !bytes.is_multiple_of(MI_B) {
39− return Err(serde::ser::Error::custom(
40− "ram_mb must be an integer number of MB",
41− ));
42− }
43− s.serialize_u64(bytes / MI_B)
44− }
45−
46− pub fn deserialize<'de, D>(d: D) -> Result<ByteSize, D::Error>
47− where
48− D: Deserializer<'de>,
49− {
50− let mb = u64::deserialize(d)?;
51− let bytes = mb
52− .checked_mul(MI_B)
53− .ok_or_else(|| serde::de::Error::custom("ram_mb overflow"))?;
54− Ok(ByteSize(bytes))
55− }
56−}
57−
58−mod serde_gb {
59− use super::{ByteSize, GI_B};
60− use serde::{Deserialize, Deserializer, Serializer};
61−
62− pub fn serialize<S>(v: &ByteSize, s: S) -> Result<S::Ok, S::Error>
63− where
64− S: Serializer,
65− {
66− let bytes = v.0;
67− if !bytes.is_multiple_of(GI_B) {
68− return Err(serde::ser::Error::custom(
69− "disk_gb must be an integer number of GB",
70− ));
71− }
72− s.serialize_u64(bytes / GI_B)
73− }
74−
75− pub fn deserialize<'de, D>(d: D) -> Result<ByteSize, D::Error>
76− where
77− D: Deserializer<'de>,
78− {
79− let gb = u64::deserialize(d)?;
80− let bytes = gb
81− .checked_mul(GI_B)
82− .ok_or_else(|| serde::de::Error::custom("disk_gb overflow"))?;
83− Ok(ByteSize(bytes))
84− }
85−}
86−
8725#[derive(Debug, Clone, Serialize, Deserialize)]
8826pub struct BoxConfig {
8927 pub cpu_count: usize,
90− #[serde(rename = "ram_mb", with = "serde_mb")]
91− pub ram_size: ByteSize,
92− #[serde(rename = "disk_gb", with = "serde_gb")]
93− pub disk_size: ByteSize,
28+ pub ram_mb: u64,
29+ pub disk_gb: u64,
9430 pub mounts: Vec<String>,
9531}
9632
9733impl Default for BoxConfig {
9834 fn default() -> Self {
9935 Self {
100− cpu_count: DEFAULT_CPU_COUNT,
101− ram_size: ByteSize::mib(DEFAULT_RAM_MB),
102− disk_size: ByteSize::gib(DEFAULT_DISK_GB),
36+ cpu_count: default_cpu_count(),
37+ ram_mb: default_ram_mb(),
38+ disk_gb: default_disk_gb(),
10339 mounts: default_mounts(),
10440 }
10541 }
@@ -113,11 +49,23 @@ pub struct SupervisorConfig {
11349impl Default for SupervisorConfig {
11450 fn default() -> Self {
11551 Self {
116− auto_shutdown_ms: DEFAULT_AUTO_SHUTDOWN_MS,
52+ auto_shutdown_ms: default_auto_shutdown_ms(),
11753 }
11854 }
11955}
12056
57+fn default_cpu_count() -> usize {
58+ DEFAULT_CPU_COUNT
59+}
60+
61+fn default_ram_mb() -> u64 {
62+ DEFAULT_RAM_MB
63+}
64+
65+fn default_auto_shutdown_ms() -> u64 {
66+ DEFAULT_AUTO_SHUTDOWN_MS
67+}
68+
12169fn default_mounts() -> Vec<String> {
12270 vec![
12371 "~/.codex:~/.codex:read-write".into(),
@@ -125,12 +73,19 @@ fn default_mounts() -> Vec<String> {
12573 ]
12674}
12775
76+fn default_disk_gb() -> u64 {
77+ DEFAULT_DISK_GB
78+}
79+
12880pub fn config_path(project_root: &Path) -> PathBuf {
12981 project_root.join(CONFIG_FILENAME)
13082}
13183
132−pub fn ensure_config_file(project_root: &Path, override_path: Option<&Path>) -> Result<PathBuf> {
133− let path = resolve_config_path(project_root, override_path)?;
84+pub fn ensure_config_file(
85+ project_root: &Path,
86+ override_path: Option<&Path>,
87+) -> Result<PathBuf, io::Error> {
88+ let path = resolve_config_path(project_root, override_path);
13489 if !path.exists() {
13590 let default_config = Config::default();
13691 let contents = toml::to_string_pretty(&default_config).unwrap_or_default();
@@ -140,24 +95,32 @@ pub fn ensure_config_file(project_root: &Path, override_path: Option<&Path>) ->
14095 Ok(path)
14196}
14297
143−pub fn load_config(project_root: &Path) -> Result<Config> {
98+pub fn load_config(project_root: &Path) -> Config {
14499 load_config_with_path(project_root, None)
145100}
146101
147−pub fn load_config_with_path(project_root: &Path, override_path: Option<&Path>) -> Result<Config> {
148− let path =
149− ensure_config_file(project_root, override_path).context("failed to create config")?;
150− let raw = fs::read_to_string(&path).context("failed to read config")?;
102+pub fn load_config_with_path(project_root: &Path, override_path: Option<&Path>) -> Config {
103+ let path = match ensure_config_file(project_root, override_path) {
104+ Ok(path) => path,
105+ Err(err) => die(&format!("failed to create config: {err}")),
106+ };
107+ let raw = match fs::read_to_string(&path) {
108+ Ok(raw) => raw,
109+ Err(err) => die(&format!("failed to read config: {err}")),
110+ };
151111 let trimmed = raw.trim();
152112 tracing::debug!(path = %path.display(), bytes = raw.len(), "loaded vibebox config");
153113 if trimmed.is_empty() {
154− bail!(format!(
114+ die(&format!(
155115 "config file ({}) is empty. Required fields: [box].cpu_count (integer), [box].ram_mb (integer), [box].disk_gb (integer), [box].mounts (array of strings), [supervisor].auto_shutdown_ms (integer)",
156116 path.display()
157117 ));
158118 }
159119
160− let value: toml::Value = toml::from_str(trimmed).context("invalid config")?;
120+ let value: toml::Value = match toml::from_str(trimmed) {
121+ Ok(value) => value,
122+ Err(err) => die(&format!("invalid config: {err}")),
123+ };
161124 let schema_errors = validate_schema(&value);
162125 if !schema_errors.is_empty() {
163126 let message = format!(
@@ -165,28 +128,27 @@ pub fn load_config_with_path(project_root: &Path, override_path: Option<&Path>)
165128 path.display(),
166129 schema_errors.join("\n- ")
167130 );
168− bail!(message);
131+ die(&message);
169132 }
170133
171− let config: Config = toml::from_str(trimmed).context("invalid config")?;
172− validate_config(&config).map_err(Error::msg)?;
173− Ok(config)
174−}
175−
176−fn resolve_config_path(project_root: &Path, override_path: Option<&Path>) -> Result<PathBuf> {
177− let env_override = env::var_os(CONFIG_PATH_ENV).map(PathBuf::from);
178− resolve_config_path_inner(project_root, override_path, env_override)
134+ let config: Config = match toml::from_str(trimmed) {
135+ Ok(config) => config,
136+ Err(err) => die(&format!("invalid config: {err}")),
137+ };
138+ validate_or_exit(&config);
139+ config
179140}
180141
181−fn resolve_config_path_inner(
182− project_root: &Path,
183− override_path: Option<&Path>,
184− env_override: Option<PathBuf>,
185−) -> Result<PathBuf> {
186− let root = fs::canonicalize(project_root).context("failed to resolve project root")?;
142+fn resolve_config_path(project_root: &Path, override_path: Option<&Path>) -> PathBuf {
143+ let root = match fs::canonicalize(project_root) {
144+ Ok(root) => root,
145+ Err(err) => die(&format!("failed to resolve project root: {err}")),
146+ };
187147
188− let selected_path = override_path.map(PathBuf::from).or(env_override);
189− let raw_path = if let Some(path) = selected_path {
148+ let override_path = override_path
149+ .map(PathBuf::from)
150+ .or_else(|| env::var_os(CONFIG_PATH_ENV).map(PathBuf::from));
151+ let raw_path = if let Some(path) = override_path {
190152 if path.is_absolute() {
191153 path
192154 } else {
@@ -197,50 +159,14 @@ fn resolve_config_path_inner(
197159 };
198160
199161 let normalized = normalize_path(&raw_path);
200− let resolved =
201− resolve_path_for_boundary_check(&normalized).context("failed to resolve config path")?;
202− if !resolved.starts_with(&root) {
203− bail!(
162+ if !normalized.starts_with(&root) {
163+ die(&format!(
204164 "config path must be within {}: {}",
205165 root.display(),
206− resolved.display()
207− );
208− }
209− Ok(normalized)
210−}
211−
212−fn resolve_path_for_boundary_check(path: &Path) -> Result<PathBuf, io::Error> {
213− if path.exists() {
214− return fs::canonicalize(path);
215− }
216− let (ancestor, missing) = nearest_existing_ancestor(path)?;
217− let mut resolved = fs::canonicalize(ancestor)?;
218− for part in missing {
219− resolved.push(part);
220− }
221− Ok(resolved)
222−}
223−
224−fn nearest_existing_ancestor(path: &Path) -> Result<(&Path, Vec<std::ffi::OsString>), io::Error> {
225− let mut current = path;
226− let mut missing = Vec::new();
227− while !current.exists() {
228− let name = current.file_name().ok_or_else(|| {
229− io::Error::new(
230− io::ErrorKind::InvalidInput,
231− format!("path has no existing ancestor: {}", path.display()),
232− )
233− })?;
234− missing.push(name.to_os_string());
235− current = current.parent().ok_or_else(|| {
236− io::Error::new(
237− io::ErrorKind::InvalidInput,
238− format!("path has no parent: {}", path.display()),
239− )
240− })?;
166+ normalized.display()
167+ ));
241168 }
242− missing.reverse();
243− Ok((current, missing))
169+ normalized
244170}
245171
246172fn normalize_path(path: &Path) -> PathBuf {
@@ -337,343 +263,27 @@ fn validate_string_array(
337263 }
338264}
339265
340−fn validate_config(config: &Config) -> Result<(), String> {
266+fn validate_or_exit(config: &Config) {
341267 if config.box_cfg.cpu_count == 0 {
342− return Err("box.cpu_count must be >= 1".to_string());
268+ die("box.cpu_count must be >= 1");
343269 }
344− if config.box_cfg.ram_size.as_mib() == 0.0 {
345− return Err("box.ram_mb must be >= 1".to_string());
270+ if config.box_cfg.ram_mb == 0 {
271+ die("box.ram_mb must be >= 1");
346272 }
347− if config.box_cfg.disk_size.as_gib() == 0.0 {
348− return Err("box.disk_gb must be >= 1".to_string());
273+ if config.box_cfg.disk_gb == 0 {
274+ die("box.disk_gb must be >= 1");
349275 }
350276 if config.supervisor.auto_shutdown_ms == 0 {
351− return Err("supervisor.auto_shutdown_ms must be >= 1".to_string());
277+ die("supervisor.auto_shutdown_ms must be >= 1");
352278 }
353279 for spec in &config.box_cfg.mounts {
354280 if let Err(err) = DirectoryShare::from_mount_spec(spec) {
355− return Err(format!("invalid mount spec '{spec}': {err}"));
281+ die(&format!("invalid mount spec '{spec}': {err}"));
356282 }
357283 }
358− Ok(())
359284}
360285
361−#[cfg(test)]
362−mod tests {
363− use super::*;
364− use std::ffi::OsString;
365− use std::sync::Mutex;
366− use tempfile::TempDir;
367−
368− static ENV_MUTEX: Mutex<()> = Mutex::new(());
369−
370− struct EnvGuard {
371− key: &'static str,
372− previous: Option<OsString>,
373− }
374−
375− impl EnvGuard {
376− fn set(key: &'static str, value: &Path) -> Self {
377− let previous = env::var_os(key);
378− unsafe {
379− env::set_var(key, value);
380− }
381− Self { key, previous }
382− }
383− }
384−
385− impl Drop for EnvGuard {
386− fn drop(&mut self) {
387− match &self.previous {
388− Some(value) => unsafe {
389− env::set_var(self.key, value);
390− },
391− None => unsafe {
392− env::remove_var(self.key);
393− },
394− }
395− }
396− }
397−
398− #[test]
399− fn default_config_serializes_with_legacy_keys() {
400− let cfg = Config::default();
401− let serialized = toml::to_string(&cfg).expect("default config should serialize");
402−
403− assert!(serialized.contains("ram_mb = 2048"));
404− assert!(serialized.contains("disk_gb = 5"));
405− assert!(!serialized.contains("ram_size"));
406− assert!(!serialized.contains("disk_size"));
407− }
408−
409− #[test]
410− fn config_deserializes_sizes_from_mb_and_gb() {
411− let raw = r#"
412−[box]
413−cpu_count = 4
414−ram_mb = 3072
415−disk_gb = 12
416−mounts = ["~/src:~/src:read-write"]
417−
418−[supervisor]
419−auto_shutdown_ms = 15000
420−"#;
421− let cfg: Config = toml::from_str(raw).expect("config should deserialize");
422−
423− assert_eq!(cfg.box_cfg.cpu_count, 4);
424− assert_eq!(cfg.box_cfg.ram_size.as_u64(), ByteSize::mib(3072).as_u64());
425− assert_eq!(cfg.box_cfg.disk_size.as_u64(), ByteSize::gib(12).as_u64());
426− assert_eq!(cfg.supervisor.auto_shutdown_ms, 15000);
427− }
428−
429− #[test]
430− fn serialize_rejects_non_integral_mb_or_gb() {
431− let cfg = Config {
432− box_cfg: BoxConfig {
433− cpu_count: 2,
434− ram_size: ByteSize::b((2 * MI_B) + 1),
435− disk_size: ByteSize::gib(5),
436− mounts: default_mounts(),
437− },
438− supervisor: SupervisorConfig::default(),
439− };
440−
441− let err = toml::to_string(&cfg).expect_err("serialization should reject invalid MB");
442− assert!(
443− err.to_string()
444− .contains("ram_mb must be an integer number of MB")
445− );
446−
447− let cfg = Config {
448− box_cfg: BoxConfig {
449− cpu_count: 2,
450− ram_size: ByteSize::mib(2048),
451− disk_size: ByteSize::b((5 * GI_B) + 1),
452− mounts: default_mounts(),
453− },
454− supervisor: SupervisorConfig::default(),
455− };
456−
457− let err = toml::to_string(&cfg).expect_err("serialization should reject invalid GB");
458− assert!(
459− err.to_string()
460− .contains("disk_gb must be an integer number of GB")
461− );
462− }
463−
464− #[test]
465− fn normalize_path_removes_dot_and_parent_components() {
466− let normalized = normalize_path(Path::new("/tmp/project/./nested/../config.toml"));
467− assert_eq!(normalized, PathBuf::from("/tmp/project/config.toml"));
468− }
469−
470− #[test]
471− fn validate_schema_returns_errors_for_missing_required_fields() {
472− let value: toml::Value = toml::from_str(
473− r#"
474−[box]
475−cpu_count = 2
476−"#,
477− )
478− .expect("toml should parse");
479−
480− let errors = validate_schema(&value);
481−
482− assert!(errors.iter().any(|e| e == "missing [supervisor] table"));
483− assert!(errors.iter().any(|e| e == "missing [box].ram_mb (integer)"));
484− assert!(
485− errors
486− .iter()
487− .any(|e| e == "missing [box].disk_gb (integer)")
488− );
489− assert!(
490− errors
491− .iter()
492− .any(|e| e == "missing [box].mounts (array of strings)")
493− );
494− }
495−
496− #[test]
497− fn validate_schema_errors_when_supervisor_is_not_table() {
498− let value: toml::Value = toml::from_str(
499− r#"
500−supervisor = 123
501−
502−[box]
503−cpu_count = 2
504−ram_mb = 2048
505−disk_gb = 5
506−mounts = []
507−"#,
508− )
509− .expect("toml should parse");
510−
511− let errors = validate_schema(&value);
512− assert!(errors.iter().any(|e| e == "[supervisor] must be a table"));
513− }
514−
515− #[test]
516− fn ensure_config_file_creates_default_config_if_absent() {
517− let temp = TempDir::new().expect("temp dir should be created");
518− let root = fs::canonicalize(temp.path()).expect("temp dir should canonicalize");
519−
520− let path = ensure_config_file(&root, None).expect("config should be created");
521− let raw = fs::read_to_string(&path).expect("created config should be readable");
522− let parsed: Config = toml::from_str(&raw).expect("created config should be valid");
523−
524− assert_eq!(path, root.join("vibebox.toml"));
525− assert_eq!(parsed.box_cfg.cpu_count, DEFAULT_CPU_COUNT);
526− assert_eq!(
527− parsed.box_cfg.ram_size.as_u64(),
528− ByteSize::mib(DEFAULT_RAM_MB).as_u64()
529− );
530− assert_eq!(
531− parsed.box_cfg.disk_size.as_u64(),
532− ByteSize::gib(DEFAULT_DISK_GB).as_u64()
533− );
534− }
535−
536− #[test]
537− fn load_config_creates_and_loads_default_config() {
538− let _lock = ENV_MUTEX.lock().expect("env lock should be acquired");
539− let temp = TempDir::new().expect("temp dir should be created");
540− let root = fs::canonicalize(temp.path()).expect("temp dir should canonicalize");
541− let home = root.join("home");
542− fs::create_dir_all(home.join(".codex")).expect("home .codex should be created");
543− fs::create_dir_all(home.join(".claude")).expect("home .claude should be created");
544− let _home_guard = EnvGuard::set("HOME", &home);
545−
546− let cfg = load_config(&root).expect("load_config should succeed");
547−
548− assert_eq!(cfg.box_cfg.cpu_count, DEFAULT_CPU_COUNT);
549− assert_eq!(
550− cfg.box_cfg.ram_size.as_u64(),
551− ByteSize::mib(DEFAULT_RAM_MB).as_u64()
552− );
553− assert_eq!(
554− cfg.box_cfg.disk_size.as_u64(),
555− ByteSize::gib(DEFAULT_DISK_GB).as_u64()
556− );
557− assert!(root.join("vibebox.toml").exists());
558− }
559−
560− #[test]
561− fn load_config_with_path_uses_override_path() {
562− let _lock = ENV_MUTEX.lock().expect("env lock should be acquired");
563− let temp = TempDir::new().expect("temp dir should be created");
564− let root = fs::canonicalize(temp.path()).expect("temp dir should canonicalize");
565− let home = root.join("home");
566− fs::create_dir_all(home.join(".codex")).expect("home .codex should be created");
567− fs::create_dir_all(home.join(".claude")).expect("home .claude should be created");
568− let _home_guard = EnvGuard::set("HOME", &home);
569− let override_path = root.join("custom.toml");
570−
571− fs::write(
572− &override_path,
573− r#"
574−[box]
575−cpu_count = 6
576−ram_mb = 4096
577−disk_gb = 9
578−mounts = ["~/.codex:~/.codex:read-write", "~/.claude:~/.claude:read-write"]
579−
580−[supervisor]
581−auto_shutdown_ms = 12345
582−"#,
583− )
584− .expect("override config should be written");
585−
586− let cfg = load_config_with_path(&root, Some(Path::new("custom.toml")))
587− .expect("load_config_with_path should succeed");
588−
589− assert_eq!(cfg.box_cfg.cpu_count, 6);
590− assert_eq!(cfg.box_cfg.ram_size.as_u64(), ByteSize::mib(4096).as_u64());
591− assert_eq!(cfg.box_cfg.disk_size.as_u64(), ByteSize::gib(9).as_u64());
592− assert_eq!(cfg.supervisor.auto_shutdown_ms, 12345);
593− assert!(!root.join("vibebox.toml").exists());
594− }
595−
596− #[test]
597− fn resolve_config_path_uses_env_override_when_cli_override_missing() {
598− let temp = TempDir::new().expect("temp dir should be created");
599− let root = fs::canonicalize(temp.path()).expect("temp dir should canonicalize");
600−
601− let resolved = resolve_config_path_inner(&root, None, Some(PathBuf::from("custom.toml")))
602− .expect("env override path should resolve");
603−
604− assert_eq!(resolved, root.join("custom.toml"));
605− }
606−
607− #[test]
608− fn resolve_config_path_rejects_env_override_outside_project() {
609− let temp = TempDir::new().expect("temp dir should be created");
610− let root = fs::canonicalize(temp.path()).expect("temp dir should canonicalize");
611−
612− let err = resolve_config_path_inner(&root, None, Some(PathBuf::from("../escape.toml")))
613− .expect_err("outside-project path should be rejected");
614−
615− assert!(
616− err.to_string().contains("config path must be within"),
617− "expected bounds-check error, got: {err}"
618− );
619− }
620−
621− #[test]
622− fn validate_config_rejects_invalid_values() {
623− let cfg = Config {
624− box_cfg: BoxConfig {
625− cpu_count: 0,
626− ram_size: ByteSize::mib(2048),
627− disk_size: ByteSize::gib(5),
628− mounts: vec![],
629− },
630− supervisor: SupervisorConfig::default(),
631− };
632− let err = validate_config(&cfg).expect_err("cpu_count=0 should fail");
633− assert_eq!(err, "box.cpu_count must be >= 1");
634−
635− let cfg = Config {
636− box_cfg: BoxConfig {
637− cpu_count: 2,
638− ram_size: ByteSize::mib(2048),
639− disk_size: ByteSize::gib(5),
640− mounts: vec!["/definitely/missing:/tmp/missing:read-write".to_string()],
641− },
642− supervisor: SupervisorConfig::default(),
643− };
644− let err = validate_config(&cfg).expect_err("invalid mount should fail");
645− assert!(err.starts_with("invalid mount spec"));
646− }
647−
648− #[test]
649− fn resolve_config_path_accepts_symlinked_project_root() {
650− let temp = TempDir::new().expect("temp dir should be created");
651− let actual_root = temp.path().join("actual");
652− let link_root = temp.path().join("linked");
653− fs::create_dir_all(&actual_root).expect("actual root should exist");
654− std::os::unix::fs::symlink(&actual_root, &link_root).expect("symlink should be created");
655−
656− let resolved = resolve_config_path_inner(&link_root, Some(Path::new("vibebox.toml")), None)
657− .expect("symlinked project root should resolve");
658−
659− assert_eq!(resolved, link_root.join("vibebox.toml"));
660− }
661−
662− #[test]
663− fn resolve_config_path_rejects_symlink_escape() {
664− let temp = TempDir::new().expect("temp dir should be created");
665− let project_root = temp.path().join("project");
666− let outside_root = temp.path().join("outside");
667− fs::create_dir_all(&project_root).expect("project root should exist");
668− fs::create_dir_all(&outside_root).expect("outside root should exist");
669− std::os::unix::fs::symlink(&outside_root, project_root.join("link"))
670− .expect("escape symlink should be created");
671−
672− let err = resolve_config_path_inner(&project_root, Some(Path::new("link/cfg.toml")), None)
673− .expect_err("symlink escape should be rejected");
674− assert!(
675− err.to_string().contains("config path must be within"),
676− "expected bounds-check error, got: {err}"
677− );
678− }
286+fn die(message: &str) -> ! {
287+ tracing::error!("{message}");
288+ std::process::exit(1);
679289}
src/error_report.shdeleted−28
@@ -1,28 +0,0 @@
1−#!/usr/bin/env bash
2−set -Eeuo pipefail
3−__vibebox_err_reported=0
4−__vibebox_report_error() {
5− local rc="$1"
6− local line="$2"
7− local msg="${3:-}"
8− if [ "$__vibebox_err_reported" -eq 0 ]; then
9− msg="${msg//$'\n'/ }"
10− msg="${msg//$'\r'/ }"
11− if [ -n "$msg" ]; then
12− echo "VIBEBOX_SCRIPT_ERROR:__LABEL__:${line}:${rc} ${msg}"
13− else
14− echo "VIBEBOX_SCRIPT_ERROR:__LABEL__:${line}:${rc}"
15− fi
16− __vibebox_err_reported=1
17− fi
18−}
19−vibebox_fail() {
20− local msg="${1:-script failed}"
21− local rc="${2:-1}"
22− __vibebox_report_error "$rc" "${LINENO}" "$msg"
23− exit "$rc"
24−}
25−trap 'rc="$?"; __vibebox_report_error "$rc" "${LINENO}" "command failed: ${BASH_COMMAND:-unknown}"' ERR
26−trap 'rc="$?"; if [ "$rc" -ne 0 ]; then __vibebox_report_error "$rc" "${LINENO}" "script exited with code ${rc}"; fi' EXIT
27−
28−__SCRIPT_BODY__
src/explain.rs+48−33
@@ -1,31 +1,31 @@
1−use crate::instance::InstanceConfig;
2−use crate::utils::relative_to_home;
3−use crate::{config, instance, session_manager, tui};
4−use anyhow::{Context, Result, bail};
51use std::{
62 env,
3+ error::Error,
74 path::{Path, PathBuf},
85};
96
10−pub fn build_mount_rows(project: &Path, config: &config::Config) -> Result<Vec<tui::MountListRow>> {
7+use crate::{config, instance, session_manager, tui};
8+
9+pub fn build_mount_rows(
10+ cwd: &Path,
11+ config: &config::Config,
12+) -> Result<Vec<tui::MountListRow>, Box<dyn Error + Send + Sync>> {
1113 let mut rows = Vec::new();
12− rows.extend(default_mounts(project)?);
13− let guest_home = resolve_guest_home(project);
14+ rows.extend(default_mounts(cwd)?);
15+ let guest_home = resolve_guest_home(cwd)?;
1416 for spec in &config.box_cfg.mounts {
15− rows.push(parse_mount_spec(project, spec, false, &guest_home)?);
17+ rows.push(parse_mount_spec(cwd, spec, false, &guest_home)?);
1618 }
1719 Ok(rows)
1820}
1921
20−pub fn build_network_rows(project_dir: &Path) -> Result<Vec<tui::NetworkListRow>> {
22+pub fn build_network_rows(
23+ cwd: &Path,
24+) -> Result<Vec<tui::NetworkListRow>, Box<dyn Error + Send + Sync>> {
25+ let instance_dir = cwd.join(session_manager::INSTANCE_DIR_NAME);
2126 let mut vm_ip = "-".to_string();
22− if let Ok(config) = instance::read_instance_config(project_dir) {
23− match config.vm_ipv4 {
24− None => {}
25− Some(ip) => {
26− vm_ip = ip;
27− }
28− }
27+ if let Ok(Some(ip)) = instance::read_instance_vm_ip(&instance_dir) {
28+ vm_ip = ip;
2929 }
3030 let host_to_vm = if vm_ip == "-" {
3131 "ssh: <pending>:22".to_string()
@@ -41,13 +41,13 @@ pub fn build_network_rows(project_dir: &Path) -> Result<Vec<tui::NetworkListRow>
4141 Ok(vec![row])
4242}
4343
44−fn default_mounts(cwd: &Path) -> Result<Vec<tui::MountListRow>> {
44+fn default_mounts(cwd: &Path) -> Result<Vec<tui::MountListRow>, Box<dyn Error + Send + Sync>> {
4545 let project_name = cwd
4646 .file_name()
4747 .and_then(|name| name.to_str())
48− .with_context(|| "failed to get project name")?;
49− let project_guest = format!("~/{project_name}");
50− let project_host = relative_to_home(cwd);
48+ .unwrap_or("project");
49+ let project_guest = format!("/root/{project_name}");
50+ let project_host = display_path(cwd);
5151 let mut rows = vec![tui::MountListRow {
5252 host: project_host,
5353 guest: project_guest,
@@ -57,14 +57,14 @@ fn default_mounts(cwd: &Path) -> Result<Vec<tui::MountListRow>> {
5757
5858 let home = env::var("HOME")
5959 .map(PathBuf::from)
60− .with_context(|| "failed to get home directory")?;
60+ .unwrap_or_else(|_| PathBuf::from("/"));
6161 let cache_home = env::var("XDG_CACHE_HOME")
6262 .map(PathBuf::from)
6363 .unwrap_or_else(|_| home.join(".cache"));
6464 let cache_dir = cache_home.join(session_manager::GLOBAL_CACHE_DIR_NAME);
6565 let guest_mise_cache = cache_dir.join(".guest-mise-cache");
6666 rows.push(tui::MountListRow {
67− host: relative_to_home(&guest_mise_cache),
67+ host: display_path(&guest_mise_cache),
6868 guest: "/root/.local/share/mise".to_string(),
6969 mode: "read-write".to_string(),
7070 default_mount: "yes".to_string(),
@@ -77,10 +77,10 @@ fn parse_mount_spec(
7777 spec: &str,
7878 default_mount: bool,
7979 guest_home: &str,
80−) -> Result<tui::MountListRow> {
80+) -> Result<tui::MountListRow, Box<dyn Error + Send + Sync>> {
8181 let parts: Vec<&str> = spec.split(':').collect();
8282 if parts.len() < 2 || parts.len() > 3 {
83− bail!["invalid mount spec: {spec}"];
83+ return Err(format!("invalid mount spec: {spec}").into());
8484 }
8585 let host_part = parts[0];
8686 let guest_part = parts[1];
@@ -89,10 +89,11 @@ fn parse_mount_spec(
8989 "read-only" => "read-only",
9090 "read-write" => "read-write",
9191 other => {
92− bail![format!(
92+ return Err(format!(
9393 "invalid mount mode '{}'; expected read-only or read-write",
9494 other
95− )];
95+ )
96+ .into());
9697 }
9798 }
9899 } else {
@@ -115,22 +116,22 @@ fn display_host_spec(cwd: &Path, host: &str) -> String {
115116 }
116117 let host_path = PathBuf::from(host);
117118 if host_path.is_absolute() {
118− return relative_to_home(&host_path);
119+ return display_path(&host_path);
119120 }
120121 let candidate = cwd.join(&host_path);
121122 if candidate.is_absolute() {
122− relative_to_home(&candidate)
123+ display_path(&candidate)
123124 } else {
124125 host.to_string()
125126 }
126127}
127128
128−fn resolve_guest_home(project_dir: &Path) -> String {
129− let config = instance::read_instance_config(project_dir);
130− match config {
131− Ok(config) => format!("/home/{}", config.ssh_user),
132− Err(_) => format!("/home/{}", InstanceConfig::default().ssh_user),
129+fn resolve_guest_home(cwd: &Path) -> Result<String, Box<dyn Error + Send + Sync>> {
130+ let instance_dir = cwd.join(session_manager::INSTANCE_DIR_NAME);
131+ if let Ok(Some(user)) = instance::read_instance_ssh_user(&instance_dir) {
132+ return Ok(format!("/home/{user}"));
133133 }
134+ Ok(format!("/home/{}", instance::DEFAULT_SSH_USER))
134135}
135136
136137fn resolve_guest_display(guest: &str, guest_home: &str) -> String {
@@ -154,3 +155,17 @@ fn resolve_guest_display(guest: &str, guest_home: &str) -> String {
154155 format!("/root/{guest}")
155156 }
156157}
158+
159+fn display_path(path: &Path) -> String {
160+ let Ok(home) = env::var("HOME") else {
161+ return path.display().to_string();
162+ };
163+ let home_path = PathBuf::from(home);
164+ if let Ok(stripped) = path.strip_prefix(&home_path) {
165+ if stripped.components().next().is_none() {
166+ return "~".to_string();
167+ }
168+ return format!("~/{}", stripped.display());
169+ }
170+ path.display().to_string()
171+}
src/instance.rs+136−297
@@ -1,140 +1,81 @@
1−use anyhow::{Context, Result, bail};
2−use serde::{Deserialize, Serialize};
3−use std::os::unix::fs::FileTypeExt;
41use std::{
52 env, fs,
6− io::{self, IsTerminal, Read},
3+ io::{self},
74 net::{SocketAddr, TcpStream},
85 os::unix::{fs::PermissionsExt, net::UnixStream},
96 path::{Path, PathBuf},
10− process::{Child, Command, Stdio},
11− sync::{
12− Arc, Mutex,
13− atomic::{AtomicBool, Ordering},
14− mpsc,
15− },
7+ process::{Command, Stdio},
8+ sync::{Arc, Mutex},
169 thread,
1710 time::{Duration, Instant},
1811};
12+
13+use serde::{Deserialize, Serialize};
1914use time::{OffsetDateTime, format_description::well_known::Rfc3339};
2015use uuid::Uuid;
2116
2217use crate::{
2318 commands,
24− session_manager::INSTANCE_DIR_NAME,
25− session_manager::{VM_MANAGER_PID_NAME, VM_MANAGER_SOCKET_NAME},
19+ session_manager::{INSTANCE_DIR_NAME, INSTANCE_FILENAME},
2620 vm::{self, LoginAction},
2721};
2822
29−pub const STATUS_VM_ERROR_PREFIX: &str = "error:";
30−
3123const SSH_KEY_NAME: &str = "ssh_key";
32−const INSTANCE_FILENAME: &str = "instance.toml";
33−const DEFAULT_SSH_USER: &str = "vibecoder";
34−const SSH_CONNECT_RETRIES: usize = 10;
24+pub(crate) const VM_ROOT_LOG_NAME: &str = "vm_root.log";
25+pub(crate) const STATUS_FILE_NAME: &str = "status.txt";
26+pub(crate) const DEFAULT_SSH_USER: &str = "vibecoder";
27+const SSH_CONNECT_RETRIES: usize = 30;
3528const SSH_CONNECT_DELAY_MS: u64 = 500;
3629const SSH_SETUP_SCRIPT: &str = include_str!("ssh.sh");
37−const STATUS_PREFIX: &str = "status:";
38−
39−#[derive(Debug, Clone, Copy, PartialEq, Eq)]
40−pub enum VmLiveness {
41− RunningWithSocket { pid: u32 },
42− RunningWithoutSocket { pid: u32 },
43− NotRunningOrMissing,
44−}
45−
46−pub fn vm_liveness(project_root: &Path) -> Result<VmLiveness> {
47− let instance_dir = ensure_instance_dir(project_root)?;
48− let pid_path = instance_dir.join(VM_MANAGER_PID_NAME);
49− let socket_path = instance_dir.join(VM_MANAGER_SOCKET_NAME);
50− fn pid_is_alive(pid: u32) -> bool {
51− let pid = pid as libc::pid_t;
52− let result = unsafe { libc::kill(pid, 0) };
53− if result == 0 {
54− return true;
55− }
56− match io::Error::last_os_error().raw_os_error() {
57− Some(code) if code == libc::EPERM => true,
58− Some(code) if code == libc::ESRCH => false,
59− _ => false,
60− }
61− }
62− let Ok(content) = fs::read_to_string(pid_path) else {
63− return Ok(VmLiveness::NotRunningOrMissing);
64− };
65− let Ok(pid) = content.trim().parse::<u32>() else {
66− return Ok(VmLiveness::NotRunningOrMissing);
67− };
68− if !pid_is_alive(pid) {
69− return Ok(VmLiveness::NotRunningOrMissing);
70− }
71− let has_socket = fs::metadata(socket_path)
72− .map(|meta| meta.file_type().is_socket())
73− .unwrap_or(false);
74− if has_socket {
75− Ok(VmLiveness::RunningWithSocket { pid })
76− } else {
77− Ok(VmLiveness::RunningWithoutSocket { pid })
78− }
79−}
80−
81−#[derive(Debug, thiserror::Error)]
82−pub enum InstanceError {
83− #[error("unexpected disconnection from vm manager")]
84− UnexpectedDisconnection,
85− #[error("{0}")]
86− VMError(String),
87−}
88−
89−fn default_ssh_user() -> String {
90− DEFAULT_SSH_USER.to_string()
91−}
9230
9331#[derive(Debug, Clone, Serialize, Deserialize)]
94−pub struct InstanceConfig {
32+pub(crate) struct InstanceConfig {
9533 #[serde(default)]
96− pub id: String,
34+ id: String,
9735 #[serde(default = "default_ssh_user")]
98− pub ssh_user: String,
36+ ssh_user: String,
9937 #[serde(default)]
10038 sudo_password: String,
10139 #[serde(default)]
102− pub last_active: Option<String>,
40+ last_active: Option<String>,
10341 #[serde(default)]
104− pub vm_ipv4: Option<String>,
42+ pub(crate) vm_ipv4: Option<String>,
10543}
10644
107−impl Default for InstanceConfig {
108− fn default() -> Self {
109− Self {
110− id: Uuid::now_v7().to_string(),
111− ssh_user: DEFAULT_SSH_USER.to_string(),
112− sudo_password: Uuid::now_v7().simple().to_string(),
113− last_active: None,
114− vm_ipv4: None,
45+impl InstanceConfig {
46+ pub(crate) fn ssh_user_display(&self) -> String {
47+ if self.ssh_user.trim().is_empty() {
48+ DEFAULT_SSH_USER.to_string()
49+ } else {
50+ self.ssh_user.clone()
11551 }
11652 }
11753}
11854
119−pub fn run_with_ssh(manager_conn: UnixStream) -> Result<()> {
55+fn default_ssh_user() -> String {
56+ DEFAULT_SSH_USER.to_string()
57+}
58+
59+pub fn run_with_ssh(manager_conn: UnixStream) -> Result<(), Box<dyn std::error::Error>> {
12060 let project_root = env::current_dir()?;
12161 tracing::info!(root = %project_root.display(), "starting ssh session");
12262 let instance_dir = ensure_instance_dir(&project_root)?;
12363 tracing::debug!(instance_dir = %instance_dir.display(), "instance dir ready");
12464 let (ssh_key, _ssh_pub) = ensure_ssh_keypair(&instance_dir)?;
12565
126− let config = load_or_create_instance_config(&project_root)?;
66+ let config = load_or_create_instance_config(&instance_dir)?;
12767 let ssh_user = config.ssh_user.clone();
12868 tracing::debug!(ssh_user = %ssh_user, "loaded instance config");
12969
130− wait_for_vm_ipv4(&project_root, Duration::from_secs(480), &manager_conn)?;
70+ let _manager_conn = manager_conn;
71+ wait_for_vm_ipv4(&instance_dir, Duration::from_secs(120))?;
13172
132− let ip = load_or_create_instance_config(&project_root)?
73+ let ip = load_or_create_instance_config(&instance_dir)?
13374 .vm_ipv4
134− .with_context(|| "failed to load instance IP address")?;
75+ .ok_or("VM IPv4 not available")?;
13576 tracing::info!(ip = %ip, "vm ipv4 ready");
13677
137− run_ssh_session(ssh_key, ssh_user, ip, manager_conn, project_root)
78+ run_ssh_session(ssh_key, ssh_user, ip)
13879}
13980
14081pub fn ensure_instance_dir(project_root: &Path) -> Result<PathBuf, io::Error> {
@@ -143,7 +84,9 @@ pub fn ensure_instance_dir(project_root: &Path) -> Result<PathBuf, io::Error> {
14384 Ok(instance_dir)
14485}
14586
146−pub fn ensure_ssh_keypair(instance_dir: &Path) -> Result<(PathBuf, PathBuf)> {
87+pub(crate) fn ensure_ssh_keypair(
88+ instance_dir: &Path,
89+) -> Result<(PathBuf, PathBuf), Box<dyn std::error::Error>> {
14790 let private_key = instance_dir.join(SSH_KEY_NAME);
14891 let public_key = instance_dir.join(format!("{SSH_KEY_NAME}.pub"));
14992
@@ -165,9 +108,7 @@ pub fn ensure_ssh_keypair(instance_dir: &Path) -> Result<(PathBuf, PathBuf)> {
165108 "-N",
166109 "",
167110 "-f",
168− private_key
169− .to_str()
170− .with_context(|| "ssh key path not utf-8")?,
111+ private_key.to_str().ok_or("ssh key path not utf-8")?,
171112 "-C",
172113 "vibebox",
173114 ])
@@ -177,7 +118,7 @@ pub fn ensure_ssh_keypair(instance_dir: &Path) -> Result<(PathBuf, PathBuf)> {
177118 .status()?;
178119
179120 if !status.success() {
180− bail!("ssh-keygen failed");
121+ return Err("ssh-keygen failed".into());
181122 }
182123
183124 fs::set_permissions(&private_key, fs::Permissions::from_mode(0o600))?;
@@ -186,66 +127,97 @@ pub fn ensure_ssh_keypair(instance_dir: &Path) -> Result<(PathBuf, PathBuf)> {
186127 Ok((private_key, public_key))
187128}
188129
189−pub fn load_or_create_instance_config(project_dir: &Path) -> Result<InstanceConfig> {
190− let mut exist = true;
191− let mut config = read_instance_config(project_dir).unwrap_or_else(|_| {
192− exist = false;
193− InstanceConfig::default()
194− });
130+pub(crate) fn load_or_create_instance_config(
131+ instance_dir: &Path,
132+) -> Result<InstanceConfig, Box<dyn std::error::Error>> {
133+ let config_path = instance_dir.join(INSTANCE_FILENAME);
134+ let mut config = if config_path.exists() {
135+ let raw = fs::read_to_string(&config_path)?;
136+ toml::from_str::<InstanceConfig>(&raw)?
137+ } else {
138+ InstanceConfig {
139+ id: String::new(),
140+ ssh_user: default_ssh_user(),
141+ sudo_password: String::new(),
142+ last_active: None,
143+ vm_ipv4: None,
144+ }
145+ };
195146
196147 let mut changed = false;
197148 if config.ssh_user.trim().is_empty() {
198− config.ssh_user = InstanceConfig::default().ssh_user;
149+ config.ssh_user = default_ssh_user();
199150 changed = true;
200151 }
201152
202153 if config.id.trim().is_empty() {
203− config.id = InstanceConfig::default().id;
154+ config.id = Uuid::now_v7().to_string();
204155 changed = true;
205156 }
206157
207158 if config.sudo_password.trim().is_empty() {
208− config.sudo_password = InstanceConfig::default().sudo_password;
159+ config.sudo_password = generate_password();
209160 changed = true;
210161 }
211162
212− if !exist || changed {
213− write_instance_config(project_dir, &config)?;
163+ if !config_path.exists() || changed {
164+ write_instance_config(&config_path, &config)?;
214165 }
215166
216167 Ok(config)
217168}
218169
219−pub fn read_instance_config(project_dir: &Path) -> Result<InstanceConfig> {
220− // todo maybe verify schema?
221− let config_path = project_dir.join(INSTANCE_DIR_NAME).join(INSTANCE_FILENAME);
170+fn read_instance_config(
171+ instance_dir: &Path,
172+) -> Result<Option<InstanceConfig>, Box<dyn std::error::Error>> {
173+ let config_path = instance_dir.join(INSTANCE_FILENAME);
222174 if !config_path.exists() {
223− bail!("instance config file does not exist");
175+ return Ok(None);
224176 }
225177 let raw = fs::read_to_string(&config_path)?;
226178 let config = toml::from_str::<InstanceConfig>(&raw)?;
227− Ok(config)
179+ Ok(Some(config))
180+}
181+
182+pub fn read_instance_vm_ip(
183+ instance_dir: &Path,
184+) -> Result<Option<String>, Box<dyn std::error::Error>> {
185+ let config = read_instance_config(instance_dir)?;
186+ Ok(config.and_then(|cfg| cfg.vm_ipv4))
187+}
188+
189+pub fn read_instance_ssh_user(
190+ instance_dir: &Path,
191+) -> Result<Option<String>, Box<dyn std::error::Error>> {
192+ let config = read_instance_config(instance_dir)?;
193+ Ok(config
194+ .map(|cfg| cfg.ssh_user)
195+ .filter(|user| !user.trim().is_empty()))
228196}
229197
230−pub fn touch_last_active(project_dir: &Path) -> Result<()> {
231− let mut config = load_or_create_instance_config(project_dir)?;
198+pub fn touch_last_active(instance_dir: &Path) -> Result<(), Box<dyn std::error::Error>> {
199+ let mut config = load_or_create_instance_config(instance_dir)?;
232200 let now = OffsetDateTime::now_utc().format(&Rfc3339)?;
233201 config.last_active = Some(now);
234− write_instance_config(project_dir, &config)?;
202+ write_instance_config(&instance_dir.join(INSTANCE_FILENAME), &config)?;
235203 Ok(())
236204}
237205
238−pub fn write_instance_config(project_dir: &Path, config: &InstanceConfig) -> Result<()> {
239− let path = project_dir.join(INSTANCE_DIR_NAME).join(INSTANCE_FILENAME);
206+pub(crate) fn write_instance_config(
207+ path: &Path,
208+ config: &InstanceConfig,
209+) -> Result<(), Box<dyn std::error::Error>> {
240210 let data = toml::to_string_pretty(config)?;
241− fs::create_dir_all(project_dir.join(INSTANCE_DIR_NAME))?;
242− fs::write(&path, data)?;
243− fs::set_permissions(&path, fs::Permissions::from_mode(0o600))?;
211+ fs::write(path, data)?;
212+ fs::set_permissions(path, fs::Permissions::from_mode(0o600))?;
244213 Ok(())
245214}
246215
247−#[cfg_attr(feature = "mock-vm", allow(dead_code))]
248−pub fn extract_ipv4(line: &str) -> Option<String> {
216+fn generate_password() -> String {
217+ Uuid::now_v7().simple().to_string()
218+}
219+
220+pub(crate) fn extract_ipv4(line: &str) -> Option<String> {
249221 let mut current = String::new();
250222 let mut best: Option<String> = None;
251223
@@ -264,69 +236,25 @@ pub fn extract_ipv4(line: &str) -> Option<String> {
264236 best
265237}
266238
267−fn handle_manager_line(line: &str, last_status: &mut Option<String>) -> Result<()> {
268− if let Some(status) = line.strip_prefix(STATUS_PREFIX) {
269− let status = status.trim();
270− if let Some(message) = status.strip_prefix(STATUS_VM_ERROR_PREFIX) {
271− let message = message.trim();
272− if message.is_empty() {
273− bail!("vm manager reported startup failure");
274− }
275− return Err(InstanceError::VMError(message.to_string()).into());
276− }
277− if !status.is_empty() && last_status.as_deref() != Some(status) {
278− tracing::info!("[background]: {}", status);
279− *last_status = Some(status.to_string());
280− }
281− }
282− Ok(())
283−}
284−
285239fn wait_for_vm_ipv4(
286− project_dir: &Path,
240+ instance_dir: &Path,
287241 timeout: Duration,
288− manager_conn: &UnixStream,
289−) -> Result<()> {
242+) -> Result<(), Box<dyn std::error::Error>> {
290243 let start = Instant::now();
291244 let mut next_log_at = start + Duration::from_secs(10);
292− let mut stream = manager_conn.try_clone()?;
293− let _ = stream.set_read_timeout(Some(Duration::from_millis(250)));
294− let mut read_buf = [0u8; 1024];
295− let mut pending = String::new();
296245 tracing::info!("waiting for vm ipv4");
246+ let status_path = instance_dir.join(STATUS_FILE_NAME);
297247 let mut last_status: Option<String> = None;
298248 let mut once_hint = false;
299249 loop {
300− match stream.read(&mut read_buf) {
301− Ok(0) => {
302− bail!("vm manager disconnected before VM became ready");
303− }
304− Ok(n) => {
305− pending.push_str(&String::from_utf8_lossy(&read_buf[..n]));
306− while let Some(pos) = pending.find('\n') {
307− let line = pending[..pos].trim().to_string();
308− pending.drain(..=pos);
309− handle_manager_line(&line, &mut last_status)?;
310− }
311− }
312− Err(err) if err.kind() == io::ErrorKind::WouldBlock => {}
313− Err(err) if err.kind() == io::ErrorKind::TimedOut => {}
314− Err(err) if err.kind() == io::ErrorKind::Interrupted => {}
315− Err(err) => {
316− tracing::warn!(error = %err, "failed to read vm manager status stream");
317− }
318− }
319−
320− let config = load_or_create_instance_config(project_dir)?;
250+ let config = load_or_create_instance_config(instance_dir)?;
321251 if config.vm_ipv4.is_some() {
322252 return Ok(());
323253 }
324254 if start.elapsed() > timeout {
325− bail!("timed out waiting for VM IPv4");
255+ return Err("Timed out waiting for VM IPv4".into());
326256 }
327−
328− let now = Instant::now();
329− if now >= next_log_at {
257+ if Instant::now() >= next_log_at {
330258 let waited = start.elapsed();
331259 if waited.as_secs() > 15 && !once_hint {
332260 tracing::info!(
@@ -334,9 +262,18 @@ fn wait_for_vm_ipv4(
334262 );
335263 once_hint = true;
336264 }
337− tracing::info!("still waiting for vm ipv4, {}s elapsed", waited.as_secs(),);
338− next_log_at += Duration::from_secs(20);
265+ if let Ok(status) = fs::read_to_string(&status_path) {
266+ let status = status.trim().to_string();
267+ if !status.is_empty() && last_status.as_deref() != Some(status.as_str()) {
268+ tracing::info!("[background]: {}", status);
269+ last_status = Some(status);
270+ }
271+ } else {
272+ tracing::info!("still waiting for vm ipv4, {}s elapsed", waited.as_secs(),);
273+ }
274+ next_log_at += Duration::from_secs(10);
339275 }
276+ thread::sleep(Duration::from_millis(200));
340277 }
341278}
342279
@@ -344,14 +281,9 @@ fn run_ssh_session(
344281 ssh_key: PathBuf,
345282 ssh_user: String,
346283 ip: String,
347− manager_conn: UnixStream,
348− project_root: PathBuf,
349−) -> Result<()> {
284+) -> Result<(), Box<dyn std::error::Error>> {
350285 let mut attempts = 0usize;
351286 loop {
352− if matches!(vm_liveness(&project_root)?, VmLiveness::NotRunningOrMissing) {
353− return Err(InstanceError::UnexpectedDisconnection.into());
354− }
355287 attempts += 1;
356288 if !ssh_port_open(&ip) {
357289 tracing::debug!(attempts, "ssh port doesn't open yet");
@@ -363,7 +295,9 @@ fn run_ssh_session(
363295 SSH_CONNECT_RETRIES
364296 );
365297 if attempts >= SSH_CONNECT_RETRIES {
366− bail!("ssh port not ready after {SSH_CONNECT_RETRIES} attempts");
298+ return Err(
299+ format!("ssh port not ready after {SSH_CONNECT_RETRIES} attempts").into(),
300+ );
367301 }
368302 thread::sleep(Duration::from_millis(SSH_CONNECT_DELAY_MS));
369303 continue;
@@ -377,10 +311,10 @@ fn run_ssh_session(
377311 attempts,
378312 SSH_CONNECT_RETRIES
379313 );
380− let child = Command::new("ssh")
314+ let status = Command::new("ssh")
381315 .args([
382316 "-i",
383− ssh_key.to_str().with_context(|| "invalid path")?,
317+ ssh_key.to_str().unwrap_or(".vibebox/ssh_key"),
384318 "-o",
385319 "IdentitiesOnly=yes",
386320 "-o",
@@ -405,67 +339,27 @@ fn run_ssh_session(
405339 .stdin(Stdio::inherit())
406340 .stdout(Stdio::inherit())
407341 .stderr(Stdio::inherit())
408− .spawn();
409−
410− match child {
411− Ok(mut child) => {
412− let done = Arc::new(AtomicBool::new(false));
413− let done_for_monitor = done.clone();
414− let (disconnect_tx, disconnect_rx) = mpsc::channel::<()>();
415− let mut manager_stream = manager_conn.try_clone()?;
416− let _ = manager_stream.set_read_timeout(Some(Duration::from_millis(250)));
417− thread::spawn(move || {
418− let mut buf = [0u8; 1];
419− while !done_for_monitor.load(Ordering::Relaxed) {
420− match manager_stream.read(&mut buf) {
421− Ok(0) => {
422− let _ = disconnect_tx.send(());
423− return;
424− }
425− Ok(_) => {}
426− Err(err) if err.kind() == io::ErrorKind::WouldBlock => {}
427− Err(err) if err.kind() == io::ErrorKind::TimedOut => {}
428− Err(err) if err.kind() == io::ErrorKind::Interrupted => {}
429− Err(_) => {
430− let _ = disconnect_tx.send(());
431− return;
432− }
433− }
434− }
435− });
436−
437− let status = loop {
438− if disconnect_rx.try_recv().is_ok() {
439− done.store(true, Ordering::Relaxed);
440− terminate_ssh_child(&mut child);
441− restore_terminal_after_disconnect();
442− return Err(InstanceError::UnexpectedDisconnection.into());
443− }
444− if let Some(status) = child.try_wait()? {
445− done.store(true, Ordering::Relaxed);
446− break status;
447− }
448− thread::sleep(Duration::from_millis(100));
449− };
450−
451− if status.success() {
452− tracing::info!(status = %status, "ssh exited");
453− break;
454− }
455− if status.code() == Some(255) {
456− tracing::warn!(status = %status, "ssh connection failed");
457− if attempts >= SSH_CONNECT_RETRIES {
458− bail!("ssh failed after {SSH_CONNECT_RETRIES} attempts");
459− }
460− thread::sleep(Duration::from_millis(500));
461− continue;
342+ .status();
343+
344+ match status {
345+ Ok(status) if status.success() => {
346+ tracing::info!(status = %status, "ssh exited");
347+ break;
348+ }
349+ Ok(status) if status.code() == Some(255) => {
350+ tracing::warn!(status = %status, "ssh connection failed");
351+ if attempts >= SSH_CONNECT_RETRIES {
352+ return Err(format!("ssh failed after {SSH_CONNECT_RETRIES} attempts").into());
462353 }
354+ thread::sleep(Duration::from_millis(500));
355+ }
356+ Ok(status) => {
463357 tracing::info!(status = %status, "ssh exited");
464358 break;
465359 }
466360 Err(err) => {
467361 tracing::error!(error = %err, "failed to start ssh");
468− bail!("failed to start ssh: {err}");
362+ return Err(format!("failed to start ssh: {err}").into());
469363 }
470364 }
471365 }
@@ -473,31 +367,6 @@ fn run_ssh_session(
473367 Ok(())
474368}
475369
476−fn terminate_ssh_child(child: &mut Child) {
477− let pid = child.id() as i32;
478− unsafe {
479− libc::kill(pid, libc::SIGTERM);
480− }
481− let deadline = Instant::now() + Duration::from_millis(700);
482− while Instant::now() < deadline {
483− match child.try_wait() {
484− Ok(Some(_)) => return,
485− Ok(None) => thread::sleep(Duration::from_millis(50)),
486− Err(_) => break,
487− }
488− }
489− let _ = child.kill();
490− let _ = child.wait();
491−}
492−
493−fn restore_terminal_after_disconnect() {
494− if io::stdin().is_terminal() {
495− let _ = Command::new("stty").arg("sane").status();
496− }
497− eprintln!();
498−}
499−
500−#[cfg_attr(feature = "mock-vm", allow(dead_code))]
501370fn is_ipv4_candidate(candidate: &str) -> bool {
502371 let parts: Vec<&str> = candidate.split('.').collect();
503372 if parts.len() != 4 {
@@ -519,13 +388,12 @@ fn ssh_port_open(ip: &str) -> bool {
519388 Ok(addr) => addr,
520389 Err(_) => return false,
521390 };
522− TcpStream::connect_timeout(&addr, Duration::from_millis(500)).is_ok()
391+ TcpStream::connect_timeout(&addr, std::time::Duration::from_millis(500)).is_ok()
523392}
524393
525−pub fn build_ssh_login_actions(
394+pub(crate) fn build_ssh_login_actions(
526395 config: &Arc<Mutex<InstanceConfig>>,
527396 project_name: &str,
528− project_guest_dir: &str,
529397 guest_dir: &str,
530398 key_name: &str,
531399 home_links_script: &str,
@@ -537,44 +405,15 @@ pub fn build_ssh_login_actions(
537405
538406 let key_path = format!("{guest_dir}/{key_name}.pub");
539407
540− let ssh_script = SSH_SETUP_SCRIPT
408+ let setup_script = SSH_SETUP_SCRIPT
541409 .replace("__SSH_USER__", &ssh_user)
542410 .replace("__SUDO_PASSWORD__", &sudo_password)
543411 .replace("__PROJECT_NAME__", project_name)
544− .replace("__PROJECT_GUEST_DIR__", project_guest_dir)
545412 .replace("__KEY_PATH__", &key_path)
546413 .replace("__VIBEBOX_SHELL_SCRIPT__", &commands::render_shell_script())
547414 .replace("__VIBEBOX_HOME_LINKS__", home_links_script);
548− let setup = vm::script_command_from_content("ssh.sh", &ssh_script)
415+ let setup = vm::script_command_from_content("ssh_setup", &setup_script)
549416 .expect("ssh setup script contained invalid marker");
550417
551418 vec![LoginAction::Send(setup)]
552419}
553−
554−#[cfg(test)]
555−mod tests {
556− use super::*;
557−
558− #[test]
559− fn handle_manager_line_updates_status() {
560− let mut last_status = None;
561− handle_manager_line("status: preparing VM image...", &mut last_status)
562− .expect("status should be accepted");
563− assert_eq!(last_status.as_deref(), Some("preparing VM image..."));
564− }
565−
566− #[test]
567− fn handle_manager_line_ignores_non_status_lines() {
568− let mut last_status = None;
569− handle_manager_line("pid=123", &mut last_status).expect("non-status lines are ignored");
570− assert!(last_status.is_none());
571− }
572−
573− #[test]
574− fn handle_manager_line_surfaces_error_status() {
575− let mut last_status = None;
576− let err = handle_manager_line("status: error: vm failed to boot", &mut last_status)
577− .expect_err("error status should fail");
578− assert_eq!(err.to_string(), "vm failed to boot");
579− }
580−}
src/lib.rs−1
@@ -8,4 +8,3 @@ pub mod vm_manager;
88
99pub use session_manager::{SessionError, SessionManager, SessionRecord};
1010pub mod config;
11−pub mod utils;
src/provision.sh+5−49
@@ -1,55 +1,12 @@
11#!/bin/bash
2−set -eEux
3−
4−trap 'rc=$?; echo "[vibebox][error] provisioning failed at: ${BASH_COMMAND} (exit ${rc})"; printf "%s%s\n" VIBEBOX_PROVISION_ FAILED; systemctl poweroff || true; exit 1' ERR
5−
6−# Wait for network + DNS before apt-get to avoid early boot flakiness.
7−wait_for_network() {
8− echo "[vibebox] waiting for network/DNS readiness"
9− local deadline=$((SECONDS + 180))
10− while [ "$SECONDS" -lt "$deadline" ]; do
11− local has_route=0
12− if ip -4 route show default >/dev/null 2>&1; then
13− has_route=1
14− elif ip -6 route show default >/dev/null 2>&1; then
15− has_route=1
16− fi
17− if [ "$has_route" -eq 1 ]; then
18− if getent hosts deb.debian.org >/dev/null 2>&1; then
19− return 0
20− fi
21− fi
22− sleep 1
23− done
24− echo "[vibebox][warn] network/DNS still not ready after 180s; continuing" >&2
25− echo "[vibebox][warn] /etc/resolv.conf:" >&2
26− cat /etc/resolv.conf >&2 || true
27− ip -br addr >&2 || true
28− ip route >&2 || true
29− ip -6 route >&2 || true
30− return 0
31−}
32−
33−apt_update_with_retries() {
34− local attempt=1
35− while [ "$attempt" -le 5 ]; do
36− if apt-get update; then
37− return 0
38− fi
39− echo "[vibebox][warn] apt-get update failed (attempt ${attempt}/5); retrying..." >&2
40− attempt=$((attempt + 1))
41− sleep 2
42− done
43− return 1
44−}
2+set -eux
453
464# Don't wait too long for slow mirrors.
47−echo 'Acquire::http::Timeout "10";' | tee /etc/apt/apt.conf.d/99timeout
48−echo 'Acquire::https::Timeout "10";' | tee -a /etc/apt/apt.conf.d/99timeout
49−echo 'Acquire::Retries "5";' | tee -a /etc/apt/apt.conf.d/99timeout
5+echo 'Acquire::http::Timeout "2";' | tee /etc/apt/apt.conf.d/99timeout
6+echo 'Acquire::https::Timeout "2";' | tee -a /etc/apt/apt.conf.d/99timeout
7+echo 'Acquire::Retries "2";' | tee -a /etc/apt/apt.conf.d/99timeout
508
51−wait_for_network
52−apt_update_with_retries
9+apt-get update
5310apt-get install -y --no-install-recommends \
5411 build-essential \
5512 pkg-config \
@@ -98,5 +55,4 @@ sleep 100 # sleep here so that we don't see the login screen flash up before the
9855EOF
9956
10057# Done provisioning, power off the VM
101−printf "%s%s\n" VIBEBOX_PROVISION_ OK
10258systemctl poweroff
src/session_manager.rs+93−56
@@ -1,18 +1,19 @@
1−use anyhow::Result;
21use std::{
32 env, fs,
43 io::{self, Write},
4+ os::unix::fs::FileTypeExt,
55 path::{Path, PathBuf},
66};
77
8−use crate::config::config_path;
9−use crate::instance::{VmLiveness, read_instance_config, vm_liveness};
108use serde::{Deserialize, Serialize};
119
10+use crate::config::CONFIG_FILENAME;
11+
1212pub const INSTANCE_DIR_NAME: &str = ".vibebox";
1313pub const GLOBAL_CACHE_DIR_NAME: &str = "vibebox";
1414pub const GLOBAL_DIR_NAME: &str = ".vibebox";
15−const SESSION_TOML_SUFFIX: &str = ".toml";
15+pub const INSTANCE_FILENAME: &str = "instance.toml";
16+pub const SESSION_TOML_SUFFIX: &str = ".toml";
1617pub const VM_MANAGER_SOCKET_NAME: &str = "vm.sock";
1718pub const VM_MANAGER_PID_NAME: &str = "vm.pid";
1819const SESSIONS_DIR_NAME: &str = "sessions";
@@ -31,6 +32,14 @@ struct SessionEntry {
3132 pub id: String,
3233}
3334
35+#[derive(Debug, Default, Deserialize)]
36+struct InstanceMetadata {
37+ #[serde(default)]
38+ id: Option<String>,
39+ #[serde(default)]
40+ last_active: Option<String>,
41+}
42+
3443#[derive(Debug)]
3544pub struct SessionManager {
3645 sessions_dir: PathBuf,
@@ -52,7 +61,7 @@ pub enum SessionError {
5261 #[error("Session directory does not exist: {0}")]
5362 MissingDirectory(PathBuf),
5463 #[error(transparent)]
55− Io(#[from] io::Error),
64+ Io(#[from] std::io::Error),
5665 #[error(transparent)]
5766 TomlDe(#[from] toml::de::Error),
5867 #[error(transparent)]
@@ -85,8 +94,8 @@ impl SessionManager {
8594 let mut added = false;
8695
8796 if has_config {
88− let id = read_instance_config(&directory).map_or(None, |config| Some(config.id));
89− if let Some(id) = id {
97+ let meta = read_instance_metadata(&directory)?;
98+ if let Some(id) = meta.id {
9099 let record = SessionEntry {
91100 directory: directory.clone(),
92101 id: id.clone(),
@@ -101,6 +110,7 @@ impl SessionManager {
101110 } else {
102111 tracing::warn!(
103112 directory = %directory.display(),
113+ file = INSTANCE_FILENAME,
104114 "missing session id in instance file"
105115 );
106116 }
@@ -138,13 +148,12 @@ impl SessionManager {
138148 }
139149 let mut records = Vec::with_capacity(sessions.len());
140150 for session in sessions {
141− let last_active =
142− read_instance_config(&session.directory).map_or(None, |option| option.last_active);
151+ let meta = read_instance_metadata(&session.directory)?;
143152 let active = is_session_active(&session.directory);
144153 records.push(SessionRecord {
145154 directory: session.directory,
146155 id: session.id,
147− last_active,
156+ last_active: meta.last_active,
148157 active,
149158 });
150159 }
@@ -262,22 +271,43 @@ fn is_vibebox_dir(directory: &Path) -> bool {
262271 if !directory.is_absolute() {
263272 return false;
264273 }
265− config_path(directory).is_file()
274+ directory.join(CONFIG_FILENAME).is_file()
266275}
267276
268277fn is_session_active(directory: &Path) -> bool {
269278 let instance_dir = directory.join(INSTANCE_DIR_NAME);
270279 let pid_path = instance_dir.join(VM_MANAGER_PID_NAME);
271− match vm_liveness(directory) {
272− Ok(liveness) => match liveness {
273− VmLiveness::RunningWithSocket { .. } => true,
274− VmLiveness::RunningWithoutSocket { .. } => true,
275− VmLiveness::NotRunningOrMissing => {
276− let _ = fs::remove_file(&pid_path);
277− false
278− }
279− },
280− Err(_) => false,
280+ let socket_path = instance_dir.join(VM_MANAGER_SOCKET_NAME);
281+
282+ let pid = read_pid(&pid_path);
283+ let is_alive = pid.map(pid_is_alive).unwrap_or(false);
284+ if !is_alive {
285+ let _ = fs::remove_file(&pid_path);
286+ return false;
287+ }
288+
289+ if let Ok(metadata) = fs::metadata(&socket_path) {
290+ return metadata.file_type().is_socket();
291+ }
292+
293+ true
294+}
295+
296+fn read_pid(path: &Path) -> Option<u32> {
297+ let content = fs::read_to_string(path).ok()?;
298+ content.trim().parse::<u32>().ok()
299+}
300+
301+fn pid_is_alive(pid: u32) -> bool {
302+ let pid = pid as libc::pid_t;
303+ let result = unsafe { libc::kill(pid, 0) };
304+ if result == 0 {
305+ return true;
306+ }
307+ match std::io::Error::last_os_error().raw_os_error() {
308+ Some(code) if code == libc::EPERM => true,
309+ Some(code) if code == libc::ESRCH => false,
310+ _ => false,
281311 }
282312}
283313
@@ -285,11 +315,31 @@ fn read_session_file(path: &Path) -> Result<SessionEntry, SessionError> {
285315 let raw = fs::read_to_string(path)?;
286316 let record: SessionEntry = toml::from_str(&raw)?;
287317 if record.id.trim().is_empty() {
288− return Err(io::Error::new(io::ErrorKind::InvalidData, "session id missing").into());
318+ return Err(std::io::Error::new(io::ErrorKind::InvalidData, "session id missing").into());
289319 }
290320 Ok(record)
291321}
292322
323+fn read_instance_metadata(directory: &Path) -> Result<InstanceMetadata, SessionError> {
324+ let instance_path = directory.join(INSTANCE_DIR_NAME).join(INSTANCE_FILENAME);
325+ if !instance_path.exists() {
326+ return Ok(InstanceMetadata::default());
327+ }
328+ let raw = fs::read_to_string(&instance_path)?;
329+ let mut meta: InstanceMetadata = toml::from_str(&raw)?;
330+ if let Some(id) = &meta.id
331+ && id.trim().is_empty()
332+ {
333+ meta.id = None;
334+ }
335+ if let Some(last_active) = &meta.last_active
336+ && last_active.trim().is_empty()
337+ {
338+ meta.last_active = None;
339+ }
340+ Ok(meta)
341+}
342+
293343fn atomic_write(path: &Path, content: &[u8]) -> io::Result<()> {
294344 let Some(parent) = path.parent() else {
295345 return Err(io::Error::new(
@@ -312,7 +362,6 @@ fn atomic_write(path: &Path, content: &[u8]) -> io::Result<()> {
312362#[cfg(test)]
313363mod tests {
314364 use super::*;
315− use crate::instance::{InstanceConfig, write_instance_config};
316365 use std::fs;
317366 use tempfile::TempDir;
318367
@@ -326,14 +375,11 @@ mod tests {
326375 dir
327376 }
328377
329− fn write_instance(project_dir: &Path, id: &str, last_active: &str) -> Result<()> {
330− fs::create_dir_all(project_dir)?;
331−
332− let mut config = InstanceConfig::default();
333− config.id = id.to_string();
334− config.last_active = Some(last_active.to_string());
335−
336− write_instance_config(project_dir, &config)
378+ fn write_instance(project_dir: &Path, id: &str, last_active: &str) {
379+ let instance_dir = project_dir.join(INSTANCE_DIR_NAME);
380+ fs::create_dir_all(&instance_dir).unwrap();
381+ let content = format!("id = \"{id}\"\nlast_active = \"{last_active}\"\n");
382+ fs::write(instance_dir.join(INSTANCE_FILENAME), content).unwrap();
337383 }
338384
339385 #[test]
@@ -341,14 +387,11 @@ mod tests {
341387 let temp = TempDir::new().unwrap();
342388 let mgr = manager(&temp);
343389 let project_dir = create_project_dir(&temp);
344− fs::write(config_path(project_dir.as_path()), "").unwrap();
345− assert!(
346− write_instance(
347− &project_dir,
348− "019bf290-cccc-7c23-ba1d-dce7e6d40693",
349− "2026-02-07T05:00:00Z",
350− )
351− .is_ok()
390+ fs::write(project_dir.join(CONFIG_FILENAME), "").unwrap();
391+ write_instance(
392+ &project_dir,
393+ "019bf290-cccc-7c23-ba1d-dce7e6d40693",
394+ "2026-02-07T05:00:00Z",
352395 );
353396
354397 let dirs = mgr.update_global_sessions(&project_dir).unwrap();
@@ -369,18 +412,15 @@ mod tests {
369412 let temp = TempDir::new().unwrap();
370413 let mgr = manager(&temp);
371414 let project_dir = create_project_dir(&temp);
372− fs::write(config_path(project_dir.as_path()), "").unwrap();
373− assert!(
374− write_instance(
375− &project_dir,
376− "019bf290-cccc-7c23-ba1d-dce7e6d40693",
377− "2026-02-07T05:00:00Z",
378− )
379− .is_ok()
415+ fs::write(project_dir.join(CONFIG_FILENAME), "").unwrap();
416+ write_instance(
417+ &project_dir,
418+ "019bf290-cccc-7c23-ba1d-dce7e6d40693",
419+ "2026-02-07T05:00:00Z",
380420 );
381421 let _ = mgr.update_global_sessions(&project_dir).unwrap();
382422
383− fs::remove_file(config_path(project_dir.as_path())).unwrap();
423+ fs::remove_file(project_dir.join(CONFIG_FILENAME)).unwrap();
384424 let sessions = mgr.list_sessions().unwrap();
385425 assert!(sessions.is_empty());
386426
@@ -411,14 +451,11 @@ mod tests {
411451 let temp = TempDir::new().unwrap();
412452 let mgr = manager(&temp);
413453 let project_dir = create_project_dir(&temp);
414− fs::write(config_path(project_dir.as_path()), "").unwrap();
415− assert!(
416− write_instance(
417− &project_dir,
418− "019bf290-cccc-7c23-ba1d-dce7e6d40693",
419− "2026-02-07T05:00:00Z",
420− )
421− .is_ok()
454+ fs::write(project_dir.join(CONFIG_FILENAME), "").unwrap();
455+ write_instance(
456+ &project_dir,
457+ "019bf290-cccc-7c23-ba1d-dce7e6d40693",
458+ "2026-02-07T05:00:00Z",
422459 );
423460 let _ = mgr.update_global_sessions(&project_dir).unwrap();
424461
src/ssh.sh+11−35
@@ -2,9 +2,7 @@
22set -eu
33
44SSH_USER="__SSH_USER__"
5−SUDO_PASSWORD="__SUDO_PASSWORD__"
65PROJECT_NAME="__PROJECT_NAME__"
7−PROJECT_GUEST_DIR="__PROJECT_GUEST_DIR__"
86KEY_PATH="__KEY_PATH__"
97
108diag() { echo "[vibebox][diag] $*" >&2; }
@@ -51,7 +49,7 @@ dump_diag() {
5149}
5250
5351# 1) tmpfs mount
54−TARGET="${PROJECT_GUEST_DIR}/.vibebox"
52+TARGET="/root/${PROJECT_NAME}/.vibebox"
5553if [ -d "$TARGET" ] && ! mountpoint -q "$TARGET"; then
5654 mount -t tmpfs tmpfs "$TARGET"
5755fi
@@ -62,10 +60,6 @@ if ! id -u "$SSH_USER" >/dev/null 2>&1; then
6260 usermod -aG sudo "$SSH_USER" || true
6361fi
6462
65−if [ -n "$SUDO_PASSWORD" ]; then
66− echo "${SSH_USER}:${SUDO_PASSWORD}" | chpasswd
67−fi
68−
6963install -d -m 700 -o "$SSH_USER" -g "$SSH_USER" "/home/${SSH_USER}/.ssh"
7064install -m 600 -o "$SSH_USER" -g "$SSH_USER" "$KEY_PATH" "/home/${SSH_USER}/.ssh/authorized_keys"
7165
@@ -84,21 +78,6 @@ __VIBEBOX_SHELL_SCRIPT__
8478VIBEBOX_SHELL_EOF
8579chmod 644 /etc/profile.d/vibebox.sh
8680
87−# Auto-cd into project for interactive shells
88−cat > /etc/profile.d/vibebox-project.sh <<'VIBEBOX_PROJECT_EOF'
89−case "$-" in
90− *i*)
91− project_home="${HOME}/__PROJECT_NAME__"
92− if [ "$USER" = "__SSH_USER__" ] && [ -d "$project_home" ]; then
93− cd "$project_home"
94− elif [ "$USER" = "__SSH_USER__" ] && [ -d "__PROJECT_GUEST_DIR__" ]; then
95− cd "__PROJECT_GUEST_DIR__"
96− fi
97− ;;
98−esac
99−VIBEBOX_PROJECT_EOF
100−chmod 644 /etc/profile.d/vibebox-project.sh
101−
10281if ! grep -q "vibebox-aliases" "${USER_HOME}/.bashrc" 2>/dev/null; then
10382 {
10483 echo ""
@@ -114,8 +93,8 @@ mise_ok() { command -v mise >/dev/null 2>&1 || [ -x "$MISE_BIN" ]; }
11493mise_install() {
11594 if [ ! -x "$MISE_BIN" ] && ! command -v mise >/dev/null 2>&1; then
11695 if ! curl https://mise.run | HOME="$USER_HOME" sh; then
117− mise_warn "mise install script failed"
118− return 1
96+ mise_warn "mise install script failed (continuing)"
97+ return 0
11998 fi
12099 fi
121100 echo 'eval "$(~/.local/bin/mise activate bash)"' >> "${USER_HOME}/.bashrc"
@@ -141,21 +120,18 @@ MISE
141120 touch "${USER_HOME}/.config/mise/mise.lock"
142121 if [ -x "$MISE_BIN" ]; then
143122 if ! HOME="$USER_HOME" "$MISE_BIN" install; then
144− mise_warn "mise install failed"
145− return 1
123+ mise_warn "mise install failed (continuing)"
124+ return 0
146125 fi
147126 else
148127 if ! HOME="$USER_HOME" mise install; then
149− mise_warn "mise install failed"
150− return 1
128+ mise_warn "mise install failed (continuing)"
129+ return 0
151130 fi
152131 fi
153132}
154133
155−if ! mise_install; then
156− diag "mise installation failed"
157− vibebox_fail "mise installation failed" 1
158−fi
134+mise_install || true
159135
160136# 3) start ssh (don't swallow failures)
161137# If ssh is already active, don't force start/restart.
@@ -163,7 +139,7 @@ if ! systemctl is-active --quiet ssh; then
163139 if ! systemctl start ssh; then
164140 diag "systemctl start ssh failed"
165141 dump_diag
166− vibebox_fail "failed to start ssh service" 1
142+ exit 1
167143 fi
168144fi
169145
@@ -201,7 +177,7 @@ done
201177if [ -z "$dev" ] || [ -z "$ip" ]; then
202178 diag "no stable IPv4 on default route interface"
203179 dump_diag
204− vibebox_fail "no stable ipv4 route on default interface" 1
180+ exit 1
205181fi
206182
207183# 5) strong verify: ssh must listen externally (0.0.0.0:22 or $ip:22 or [::]:22)
@@ -220,7 +196,7 @@ done
220196if ! listens_ok; then
221197 diag "sshd not listening on 0.0.0.0:22 / ${ip}:22"
222198 dump_diag
223− vibebox_fail "sshd is not listening on the expected address" 1
199+ exit 1
224200fi
225201
226202ip a
src/tui.rs+31−31
@@ -1,4 +1,10 @@
1−use bytesize::ByteSize;
1+use std::{
2+ io::{self, Write},
3+ os::unix::io::OwnedFd,
4+ path::PathBuf,
5+ sync::{Arc, Mutex},
6+};
7+
28use color_eyre::Result;
39use crossterm::{
410 cursor::{MoveTo, Show},
@@ -16,12 +22,6 @@ use ratatui::{
1622 text::{Line, Span, Text},
1723 widgets::{Block, Borders, Cell, List, ListItem, Paragraph, Row, Table, Widget},
1824};
19−use std::{
20− io::{self, Write},
21− os::unix::io::OwnedFd,
22− path::PathBuf,
23− sync::{Arc, Mutex},
24−};
2525
2626use crate::vm;
2727
@@ -39,9 +39,9 @@ const INFO_LINE_COUNT: u16 = 5;
3939
4040#[derive(Debug, Clone)]
4141pub struct VmInfo {
42− pub max_memory: ByteSize,
42+ pub max_memory_mb: u64,
4343 pub cpu_cores: usize,
44− pub max_disk: ByteSize,
44+ pub max_disk_gb: f32,
4545 pub system_name: String,
4646 pub auto_shutdown_ms: u64,
4747}
@@ -474,27 +474,27 @@ fn write_buffer_with_style(buffer: &Buffer, out: &mut impl Write) -> io::Result<
474474 Ok(())
475475}
476476
477−fn map_color(color: Color) -> CrosstermColor {
477+fn map_color(color: ratatui::style::Color) -> CrosstermColor {
478478 match color {
479− Color::Reset => CrosstermColor::Reset,
480− Color::Black => CrosstermColor::Black,
481− Color::Red => CrosstermColor::DarkRed,
482− Color::Green => CrosstermColor::DarkGreen,
483− Color::Yellow => CrosstermColor::DarkYellow,
484− Color::Blue => CrosstermColor::DarkBlue,
485− Color::Magenta => CrosstermColor::DarkMagenta,
486− Color::Cyan => CrosstermColor::DarkCyan,
487− Color::Gray => CrosstermColor::Grey,
488− Color::DarkGray => CrosstermColor::DarkGrey,
489− Color::LightRed => CrosstermColor::Red,
490− Color::LightGreen => CrosstermColor::Green,
491− Color::LightYellow => CrosstermColor::Yellow,
492− Color::LightBlue => CrosstermColor::Blue,
493− Color::LightMagenta => CrosstermColor::Magenta,
494− Color::LightCyan => CrosstermColor::Cyan,
495− Color::White => CrosstermColor::White,
496− Color::Rgb(r, g, b) => CrosstermColor::Rgb { r, g, b },
497− Color::Indexed(i) => CrosstermColor::AnsiValue(i),
479+ ratatui::style::Color::Reset => CrosstermColor::Reset,
480+ ratatui::style::Color::Black => CrosstermColor::Black,
481+ ratatui::style::Color::Red => CrosstermColor::DarkRed,
482+ ratatui::style::Color::Green => CrosstermColor::DarkGreen,
483+ ratatui::style::Color::Yellow => CrosstermColor::DarkYellow,
484+ ratatui::style::Color::Blue => CrosstermColor::DarkBlue,
485+ ratatui::style::Color::Magenta => CrosstermColor::DarkMagenta,
486+ ratatui::style::Color::Cyan => CrosstermColor::DarkCyan,
487+ ratatui::style::Color::Gray => CrosstermColor::Grey,
488+ ratatui::style::Color::DarkGray => CrosstermColor::DarkGrey,
489+ ratatui::style::Color::LightRed => CrosstermColor::Red,
490+ ratatui::style::Color::LightGreen => CrosstermColor::Green,
491+ ratatui::style::Color::LightYellow => CrosstermColor::Yellow,
492+ ratatui::style::Color::LightBlue => CrosstermColor::Blue,
493+ ratatui::style::Color::LightMagenta => CrosstermColor::Magenta,
494+ ratatui::style::Color::LightCyan => CrosstermColor::Cyan,
495+ ratatui::style::Color::White => CrosstermColor::White,
496+ ratatui::style::Color::Rgb(r, g, b) => CrosstermColor::Rgb { r, g, b },
497+ ratatui::style::Color::Indexed(i) => CrosstermColor::AnsiValue(i),
498498 }
499499}
500500
@@ -574,8 +574,8 @@ fn render_header(buffer: &mut Buffer, area: Rect, app: &AppState) {
574574 Span::raw("CPU / Memory / Disk: "),
575575 Span::styled(
576576 format!(
577− "{} cores / {} / {}",
578− app.vm_info.cpu_cores, app.vm_info.max_memory, app.vm_info.max_disk
577+ "{} cores / {} MB / {} GB",
578+ app.vm_info.cpu_cores, app.vm_info.max_memory_mb, app.vm_info.max_disk_gb
579579 ),
580580 Style::default().fg(Color::Green),
581581 ),
src/utils.rsdeleted−18
@@ -1,18 +0,0 @@
1−use std::{
2− env,
3− path::{Path, PathBuf},
4−};
5−
6−pub fn relative_to_home(directory: &Path) -> String {
7− let Ok(home) = env::var("HOME") else {
8− return directory.display().to_string();
9− };
10− let home_path = PathBuf::from(home);
11− if let Ok(stripped) = directory.strip_prefix(&home_path) {
12− if stripped.components().next().is_none() {
13− return "~".to_string();
14− }
15− return format!("~/{}", stripped.display());
16− }
17− directory.display().to_string()
18−}
src/vm.rs+177−282
@@ -1,5 +1,5 @@
1+use crate::instance::STATUS_FILE_NAME;
12use crate::session_manager::{GLOBAL_CACHE_DIR_NAME, INSTANCE_DIR_NAME};
2−use anyhow::{Context, Error, Result, bail};
33use std::{
44 env, fs,
55 io::{self, Write},
@@ -23,7 +23,6 @@ use std::{
2323};
2424
2525use block2::RcBlock;
26−use bytesize::ByteSize;
2726use dispatch2::DispatchQueue;
2827use objc2::{AnyThread, rc::Retained, runtime::ProtocolObject};
2928use objc2_foundation::*;
@@ -33,46 +32,75 @@ const DEBIAN_COMPRESSED_DISK_URL: &str = "https://cloud.debian.org/images/cloud/
3332const DEBIAN_COMPRESSED_SHA: &str = "6ab9be9e6834adc975268367f2f0235251671184345c34ee13031749fdfbf66fe4c3aafd949a2d98550426090e9ac645e79009c51eb0eefc984c15786570bb38";
3433const DEBIAN_COMPRESSED_SIZE_BYTES: u64 = 280901576;
3534const SHARED_DIRECTORIES_TAG: &str = "shared";
36−pub const PROJECT_GUEST_BASE: &str = "/usr/local/vibebox-mounts";
3735
36+const BYTES_PER_MB: u64 = 1024 * 1024;
37+const DEFAULT_CPU_COUNT: usize = 2;
38+const DEFAULT_RAM_MB: u64 = 2048;
39+const DEFAULT_RAM_BYTES: u64 = DEFAULT_RAM_MB * BYTES_PER_MB;
3840const START_TIMEOUT: Duration = Duration::from_secs(60);
3941const LOGIN_EXPECT_TIMEOUT: Duration = Duration::from_secs(120);
40−const PROVISION_EXPECT_TIMEOUT: Duration = Duration::from_secs(900);
4142
42−const ERROR_REPORT_SCRIPT: &str = include_str!("error_report.sh");
43+struct StatusFile {
44+ path: PathBuf,
45+ cleared: AtomicBool,
46+}
47+
48+impl StatusFile {
49+ fn new(path: PathBuf) -> Self {
50+ Self {
51+ path,
52+ cleared: AtomicBool::new(false),
53+ }
54+ }
55+
56+ fn update(&self, message: &str) {
57+ let _ = fs::write(&self.path, message);
58+ }
59+
60+ fn clear(&self) {
61+ if !self.cleared.swap(true, Ordering::SeqCst) {
62+ let _ = fs::remove_file(&self.path);
63+ }
64+ }
65+}
66+
67+impl Drop for StatusFile {
68+ fn drop(&mut self) {
69+ if !self.cleared.load(Ordering::SeqCst) {
70+ let _ = fs::remove_file(&self.path);
71+ self.cleared.store(true, Ordering::SeqCst);
72+ }
73+ }
74+}
4375const PROVISION_SCRIPT: &str = include_str!("provision.sh");
76+const PROVISION_SCRIPT_NAME: &str = "provision.sh";
4477const RESIZE_DISK_SCRIPT: &str = include_str!("resize_disk.sh");
4578const DEFAULT_RAW_NAME: &str = "default.raw";
4679const INSTANCE_RAW_NAME: &str = "instance.raw";
4780const BASE_DISK_RAW_NAME: &str = "disk.raw";
4881
4982#[derive(Clone)]
50−pub enum LoginAction {
51− Expect {
52− text: String,
53− timeout: Duration,
54− },
55− ExpectEither {
56− success: String,
57− failure: String,
58− timeout: Duration,
59− },
83+pub(crate) enum LoginAction {
84+ Expect { text: String, timeout: Duration },
6085 Send(String),
6186}
62−use crate::config::BoxConfig;
6387use LoginAction::*;
6488
6589#[derive(Clone)]
66−pub struct DirectoryShare {
90+pub(crate) struct DirectoryShare {
6791 host: PathBuf,
6892 guest: PathBuf,
6993 read_only: bool,
7094}
7195
7296impl DirectoryShare {
73− pub fn new(host: PathBuf, mut guest: PathBuf, read_only: bool) -> Result<Self> {
97+ pub(crate) fn new(
98+ host: PathBuf,
99+ mut guest: PathBuf,
100+ read_only: bool,
101+ ) -> Result<Self, Box<dyn std::error::Error>> {
74102 if !host.exists() {
75− bail!(format!("host path does not exist: {}", host.display()));
103+ return Err(format!("Host path does not exist: {}", host.display()).into());
76104 }
77105 if !guest.is_absolute() {
78106 guest = PathBuf::from("/root").join(guest);
@@ -84,10 +112,10 @@ impl DirectoryShare {
84112 })
85113 }
86114
87− pub fn from_mount_spec(spec: &str) -> Result<Self> {
115+ pub(crate) fn from_mount_spec(spec: &str) -> Result<Self, Box<dyn std::error::Error>> {
88116 let parts: Vec<&str> = spec.split(':').collect();
89117 if parts.len() < 2 || parts.len() > 3 {
90− bail!(format!("invalid mount spec: {spec}"));
118+ return Err(format!("Invalid mount spec: {spec}").into());
91119 }
92120 let host = expand_tilde_path(parts[0]);
93121 let guest = PathBuf::from(parts[1]);
@@ -96,10 +124,11 @@ impl DirectoryShare {
96124 "read-only" => true,
97125 "read-write" => false,
98126 _ => {
99− bail!(format!(
127+ return Err(format!(
100128 "Invalid mount mode '{}'; expected read-only or read-write",
101129 parts[2]
102− ));
130+ )
131+ .into());
103132 }
104133 }
105134 } else {
@@ -143,28 +172,19 @@ pub struct VmArg {
143172 pub mounts: Vec<String>,
144173}
145174
146−type StatusEmitter<'a> = dyn Fn(&str) + std::marker::Send + Sync + 'a;
147−
148−fn emit_status(status: Option<&StatusEmitter<'_>>, message: &str) {
149− if let Some(status) = status {
150− status(message);
151− }
152−}
153−
154−pub fn run_with_args<F>(args: VmArg, io_handler: F) -> Result<()>
175+pub fn run_with_args<F>(args: VmArg, io_handler: F) -> Result<(), Box<dyn std::error::Error>>
155176where
156177 F: FnOnce(Arc<OutputMonitor>, OwnedFd, OwnedFd) -> IoContext,
157178{
158− run_with_args_and_extras(args, io_handler, Vec::new(), Vec::new(), None)
179+ run_with_args_and_extras(args, io_handler, Vec::new(), Vec::new())
159180}
160181
161−pub fn run_with_args_and_extras<F>(
182+pub(crate) fn run_with_args_and_extras<F>(
162183 args: VmArg,
163184 io_handler: F,
164185 extra_login_actions: Vec<LoginAction>,
165186 extra_directory_shares: Vec<DirectoryShare>,
166− status: Option<&StatusEmitter<'_>>,
167−) -> Result<()>
187+) -> Result<(), Box<dyn std::error::Error>>
168188where
169189 F: FnOnce(Arc<OutputMonitor>, OwnedFd, OwnedFd) -> IoContext,
170190{
@@ -173,7 +193,7 @@ where
173193 let project_root = env::current_dir()?;
174194 let project_name = project_root
175195 .file_name()
176− .with_context(|| "Project directory has no name")?
196+ .ok_or("Project directory has no name")?
177197 .to_string_lossy()
178198 .into_owned();
179199
@@ -185,10 +205,8 @@ where
185205 let guest_mise_cache = cache_dir.join(".guest-mise-cache");
186206
187207 let instance_dir = project_root.join(INSTANCE_DIR_NAME);
188− fs::create_dir_all(&instance_dir)?;
189− emit_status(status, "preparing VM image...");
190− tracing::info!("preparing VM image...");
191− let provision_log = instance_dir.join("provision.log");
208+ let status_file = StatusFile::new(instance_dir.join(STATUS_FILE_NAME));
209+ status_file.update("preparing VM image...");
192210
193211 let basename_compressed = DEBIAN_COMPRESSED_DISK_URL.rsplit('/').next().unwrap();
194212 let base_compressed = cache_dir.join(basename_compressed);
@@ -212,14 +230,13 @@ where
212230 &base_compressed,
213231 &default_raw,
214232 std::slice::from_ref(&mise_directory_share),
215− Some(&provision_log),
216− status,
233+ Some(&status_file),
217234 )?;
218235 let _ = ensure_instance_disk(
219236 &instance_raw,
220237 &default_raw,
221− ByteSize(args.disk_bytes),
222− status,
238+ args.disk_bytes,
239+ Some(&status_file),
223240 )?;
224241 let base_size = fs::metadata(&default_raw)?.len();
225242 let instance_size = fs::metadata(&instance_raw)?.len();
@@ -230,8 +247,7 @@ where
230247 let mut directory_shares = Vec::new();
231248
232249 if !args.no_default_mounts {
233− let project_guest_dir = PathBuf::from(PROJECT_GUEST_BASE).join(project_name);
234− login_actions.push(Send(format!("cd {}", project_guest_dir.display())));
250+ login_actions.push(Send(format!("cd {project_name}")));
235251
236252 // discourage read/write of .git folder from within the VM. note that this isn't secure, since the VM runs as root and could unmount this.
237253 // I couldn't find an alternative way to do this --- the MacOS sandbox doesn't apply to the Apple Virtualization system
@@ -239,6 +255,15 @@ where
239255 login_actions.push(Send(r"mount -t tmpfs tmpfs .git/".into()));
240256 }
241257
258+ directory_shares.push(
259+ DirectoryShare::new(
260+ project_root,
261+ PathBuf::from("/root/").join(project_name),
262+ false,
263+ )
264+ .expect("Project directory must exist"),
265+ );
266+
242267 directory_shares.push(mise_directory_share);
243268 }
244269
@@ -249,7 +274,7 @@ where
249274 }
250275
251276 if needs_resize {
252− let resize_cmd = script_command_from_content("resize_disk.sh", RESIZE_DISK_SCRIPT)?;
277+ let resize_cmd = script_command_from_content("resize_disk", RESIZE_DISK_SCRIPT)?;
253278 login_actions.push(Send(resize_cmd));
254279 }
255280
@@ -265,29 +290,25 @@ where
265290 &directory_shares[..],
266291 args.cpu_count,
267292 args.ram_bytes,
268− status,
293+ Some(&status_file),
269294 io_handler,
270295 )
271296}
272297
273−pub fn script_command_from_content(label: &str, script: &str) -> Result<String> {
298+pub(crate) fn script_command_from_content(
299+ label: &str,
300+ script: &str,
301+) -> Result<String, Box<dyn std::error::Error>> {
274302 let marker = "VIBE_SCRIPT_EOF";
275303 let guest_dir = "/tmp/vibe-scripts";
276304 let guest_path = format!("{guest_dir}/{label}.sh");
277− let script_body = match script.split_once('\n') {
278− Some((first, rest)) if first.starts_with("#!") => rest,
279− _ => script,
280− };
281− let wrapped_script = ERROR_REPORT_SCRIPT
282− .replace("__LABEL__", label)
283− .replace("__SCRIPT_BODY__", script_body);
284305 let command = format!(
285− "mkdir -p {guest_dir}\ncat >{guest_path} <<'{marker}'\n{wrapped_script}\n{marker}\nchmod +x {guest_path}\n{guest_path}"
306+ "mkdir -p {guest_dir}\ncat >{guest_path} <<'{marker}'\n{script}\n{marker}\nchmod +x {guest_path}\n{guest_path}"
286307 );
287308 if script.contains(marker) {
288− bail!(format!(
289− "Script '{label}' contains marker '{marker}', cannot safely upload"
290− ));
309+ return Err(
310+ format!("Script '{label}' contains marker '{marker}', cannot safely upload").into(),
311+ );
291312 }
292313 Ok(command)
293314}
@@ -351,12 +372,6 @@ enum WaitResult {
351372 Found,
352373}
353374
354−#[derive(PartialEq, Eq)]
355−enum WaitAnyResult {
356− Timeout,
357− Found(usize),
358−}
359−
360375pub enum VmInput {
361376 Bytes(Vec<u8>),
362377 Shutdown,
@@ -364,7 +379,6 @@ pub enum VmInput {
364379
365380enum VmOutput {
366381 LoginActionTimeout { action: String, timeout: Duration },
367− LoginActionFailed { action: String, reason: String },
368382}
369383
370384#[derive(Default)]
@@ -401,41 +415,6 @@ impl OutputMonitor {
401415 WaitResult::Found
402416 }
403417 }
404−
405− fn wait_for_any(&self, needles: &[&str], timeout: Duration) -> WaitAnyResult {
406− let mut found: Option<usize> = None;
407− let (_unused, timeout_result) = self
408− .condvar
409− .wait_timeout_while(self.buffer.lock().unwrap(), timeout, |buf| {
410− if let Some((pos, idx, len)) = find_any(buf, needles) {
411− *buf = buf[(pos + len)..].to_string();
412− found = Some(idx);
413− false
414− } else {
415− true
416− }
417− })
418− .unwrap();
419−
420− if timeout_result.timed_out() {
421− WaitAnyResult::Timeout
422− } else {
423− WaitAnyResult::Found(found.unwrap_or(0))
424− }
425− }
426−}
427−
428−fn find_any(buf: &str, needles: &[&str]) -> Option<(usize, usize, usize)> {
429− let mut best: Option<(usize, usize, usize)> = None; // (pos, idx, len)
430− for (idx, needle) in needles.iter().enumerate() {
431− if let Some(pos) = buf.find(needle) {
432− let candidate = (pos, idx, needle.len());
433− if best.is_none_or(|b| candidate.0 < b.0) {
434− best = Some(candidate);
435− }
436− }
437− }
438− best
439418}
440419
441420#[derive(Debug)]
@@ -484,16 +463,18 @@ impl IoControl {
484463fn ensure_base_image(
485464 base_raw: &Path,
486465 base_compressed: &Path,
487− status: Option<&StatusEmitter<'_>>,
488−) -> Result<()> {
466+ status: Option<&StatusFile>,
467+) -> Result<(), Box<dyn std::error::Error>> {
489468 if base_raw.exists() {
490469 return Ok(());
491470 }
492471
493472 if !base_compressed.exists()
494− || fs::metadata(base_compressed).map(|m| m.len())? < DEBIAN_COMPRESSED_SIZE_BYTES
473+ || std::fs::metadata(base_compressed).map(|m| m.len())? < DEBIAN_COMPRESSED_SIZE_BYTES
495474 {
496− emit_status(status, "downloading base image...");
475+ if let Some(status) = status {
476+ status.update("downloading base image...");
477+ }
497478 tracing::info!("downloading base image");
498479 let status = Command::new("curl")
499480 .args([
@@ -508,14 +489,15 @@ fn ensure_base_image(
508489 ])
509490 .status()?;
510491 if !status.success() {
511− bail!("failed to download base image");
492+ return Err("Failed to download base image".into());
512493 }
513494 }
514495
515496 // Check SHA
516497 {
517− emit_status(status, "verifying base image...");
518− tracing::info!("verifying base image...");
498+ if let Some(status) = status {
499+ status.update("verifying base image...");
500+ }
519501 let input = format!("{} {}\n", DEBIAN_COMPRESSED_SHA, base_compressed.display());
520502
521503 let mut child = Command::new("/usr/bin/shasum")
@@ -533,25 +515,25 @@ fn ensure_base_image(
533515
534516 let status = child.wait().expect("failed to wait on child");
535517 if !status.success() {
536− bail!(format!(
537− "SHA validation failed for {DEBIAN_COMPRESSED_DISK_URL}"
538− ));
518+ return Err(format!("SHA validation failed for {DEBIAN_COMPRESSED_DISK_URL}").into());
539519 }
540520 }
541521
542− emit_status(status, "decompressing base image...");
543− tracing::info!("decompressing base image...");
522+ if let Some(status) = status {
523+ status.update("decompressing base image...");
524+ }
525+ tracing::info!("decompressing base image");
544526 let status = Command::new("tar")
545527 .args([
546528 "-xOf",
547529 &base_compressed.to_string_lossy(),
548530 BASE_DISK_RAW_NAME,
549531 ])
550− .stdout(fs::File::create(base_raw)?)
532+ .stdout(std::fs::File::create(base_raw)?)
551533 .status()?;
552534
553535 if !status.success() {
554− bail!("Failed to decompress base image");
536+ return Err("Failed to decompress base image".into());
555537 }
556538
557539 Ok(())
@@ -562,56 +544,29 @@ fn ensure_default_image(
562544 base_compressed: &Path,
563545 default_raw: &Path,
564546 directory_shares: &[DirectoryShare],
565− provision_log: Option<&Path>,
566− status: Option<&StatusEmitter<'_>>,
567−) -> Result<()> {
547+ status: Option<&StatusFile>,
548+) -> Result<(), Box<dyn std::error::Error>> {
568549 if default_raw.exists() {
569550 return Ok(());
570551 }
571552
572553 ensure_base_image(base_raw, base_compressed, status)?;
573554
574− emit_status(status, "configuring base image...");
575− tracing::info!("configuring base image...");
555+ if let Some(status) = status {
556+ status.update("configuring base image...");
557+ }
558+ tracing::info!("configuring base image");
576559 fs::copy(base_raw, default_raw)?;
577560
578− let provision_command = script_command_from_content("provision.sh", PROVISION_SCRIPT)?;
579− let provision_actions = [
580− Send(provision_command),
581− ExpectEither {
582− success: "VIBEBOX_PROVISION_OK".to_string(),
583− failure: "VIBEBOX_PROVISION_FAILED".to_string(),
584− timeout: PROVISION_EXPECT_TIMEOUT,
585− },
586− ];
587− let provision_result = if let Some(log_path) = provision_log {
588− let log_path = log_path.to_path_buf();
589− run_vm_with_io(
590− default_raw,
591− &provision_actions,
592− directory_shares,
593− BoxConfig::default().cpu_count,
594− BoxConfig::default().ram_size.as_u64(),
595− status,
596− move |output_monitor, vm_output_fd, vm_input_fd| {
597− spawn_vm_io_with_log(output_monitor, vm_output_fd, vm_input_fd, log_path)
598− },
599− )
600− } else {
601− run_vm(
602− default_raw,
603− &provision_actions,
604− directory_shares,
605− BoxConfig::default().cpu_count,
606− BoxConfig::default().ram_size.as_u64(),
607− status,
608− )
609− };
610−
611− if let Err(err) = provision_result {
612− let _ = fs::remove_file(default_raw);
613− return Err(err);
614− }
561+ let provision_command = script_command_from_content(PROVISION_SCRIPT_NAME, PROVISION_SCRIPT)?;
562+ run_vm(
563+ default_raw,
564+ &[Send(provision_command)],
565+ directory_shares,
566+ DEFAULT_CPU_COUNT,
567+ DEFAULT_RAM_BYTES,
568+ None,
569+ )?;
615570
616571 Ok(())
617572}
@@ -619,16 +574,18 @@ fn ensure_default_image(
619574fn ensure_instance_disk(
620575 instance_raw: &Path,
621576 template_raw: &Path,
622− target_bytes: ByteSize,
623− status: Option<&StatusEmitter<'_>>,
624−) -> Result<bool> {
577+ target_bytes: u64,
578+ status: Option<&StatusFile>,
579+) -> Result<bool, Box<dyn std::error::Error>> {
625580 if instance_raw.exists() {
626− let current_size = ByteSize(fs::metadata(instance_raw)?.len());
581+ let current_size = fs::metadata(instance_raw)?.len();
627582 if current_size != target_bytes {
628− let current_gb = current_size;
629− let target_gb = target_bytes;
583+ let current_gb = current_size as f64 / (1024.0 * 1024.0 * 1024.0);
584+ let target_gb = target_bytes as f64 / (1024.0 * 1024.0 * 1024.0);
630585 tracing::warn!(
631− "instance disk size does not match config (current {}, config {}); disk_gb applies only on init. Run `vibebox reset` to recreate or set disk_gb to match; using existing disk.",
586+ current_bytes = current_size,
587+ target_bytes,
588+ "instance disk size does not match config (current {:.2} GB, config {:.2} GB); disk_gb applies only on init. Run `vibebox reset` to recreate or set disk_gb to match; using existing disk.",
632589 current_gb,
633590 target_gb
634591 );
@@ -636,28 +593,30 @@ fn ensure_instance_disk(
636593 return Ok(false);
637594 }
638595
639− let template_size = ByteSize(fs::metadata(template_raw)?.len());
596+ let template_size = fs::metadata(template_raw)?.len();
640597 if target_bytes < template_size {
641− bail!(format!(
642− "Requested disk size {} is smaller than base image size {}",
598+ return Err(format!(
599+ "Requested disk size {} bytes is smaller than base image size {} bytes",
643600 target_bytes, template_size
644− ));
601+ )
602+ .into());
645603 }
646604 let target_size = target_bytes;
647605 let needs_resize = target_size > template_size;
648606
649− emit_status(status, "creating instance disk...");
650− tracing::info!("creating instance disk...");
607+ if let Some(status) = status {
608+ status.update("creating instance disk...");
609+ }
651610 tracing::info!(path = %template_raw.display(), "creating instance disk");
652− fs::create_dir_all(instance_raw.parent().unwrap())?;
611+ std::fs::create_dir_all(instance_raw.parent().unwrap())?;
653612 if target_size == template_size {
654613 fs::copy(template_raw, instance_raw)?;
655614 return Ok(needs_resize);
656615 }
657616
658− let mut dst = fs::File::create(instance_raw)?;
659− dst.set_len(target_size.as_u64())?;
660− let mut src = fs::File::open(template_raw)?;
617+ let mut dst = std::fs::File::create(instance_raw)?;
618+ dst.set_len(target_size)?;
619+ let mut src = std::fs::File::open(template_raw)?;
661620 std::io::copy(&mut src, &mut dst)?;
662621 Ok(needs_resize)
663622}
@@ -675,17 +634,18 @@ pub fn create_pipe() -> (OwnedFd, OwnedFd) {
675634 (read_stream.into(), write_stream.into())
676635}
677636
678−pub fn spawn_vm_io_with_hooks<
679− F: FnMut(&str) -> bool + std::marker::Send + 'static,
680− G: FnMut(&[u8]) + std::marker::Send + 'static,
681−>(
637+pub fn spawn_vm_io_with_hooks<F, G>(
682638 output_monitor: Arc<OutputMonitor>,
683639 vm_output_fd: OwnedFd,
684640 vm_input_fd: OwnedFd,
685641 io_control: Arc<IoControl>,
686642 mut on_line: F,
687643 mut on_output: G,
688−) -> IoContext {
644+) -> IoContext
645+where
646+ F: FnMut(&str) -> bool + ::std::marker::Send + 'static,
647+ G: FnMut(&[u8]) + ::std::marker::Send + 'static,
648+{
689649 let (input_tx, input_rx): (Sender<VmInput>, Receiver<VmInput>) = mpsc::channel();
690650
691651 // raw_guard is set when we've put the user's terminal into raw mode because we've attached stdin/stdout to the VM.
@@ -833,14 +793,14 @@ pub fn spawn_vm_io_with_hooks<
833793 PollResult::Spurious => continue,
834794 PollResult::Ready(bytes) => {
835795 if io_control.forward_output() {
836− // enable raw mode if we haven't already
796+ // enable raw mode, if we haven't already
837797 if raw_guard.lock().unwrap().is_none()
838798 && let Ok(guard) = enable_raw_mode(libc::STDIN_FILENO)
839799 {
840800 *raw_guard.lock().unwrap() = Some(guard);
841801 }
842802
843− let mut stdout = io::stdout().lock();
803+ let mut stdout = std::io::stdout().lock();
844804 if stdout.write_all(bytes).is_err() {
845805 break;
846806 }
@@ -856,7 +816,7 @@ pub fn spawn_vm_io_with_hooks<
856816
857817 // Copies data from mpsc channel into VM, so vibe can "type" stuff and run scripts.
858818 let mux_thread = thread::spawn(move || {
859− let mut vm_writer = fs::File::from(vm_input_fd);
819+ let mut vm_writer = std::fs::File::from(vm_input_fd);
860820 loop {
861821 match input_rx.recv() {
862822 Ok(VmInput::Bytes(data)) => {
@@ -886,7 +846,7 @@ pub fn spawn_vm_io_with_line_handler<F>(
886846 on_line: F,
887847) -> IoContext
888848where
889− F: FnMut(&str) -> bool + std::marker::Send + 'static,
849+ F: FnMut(&str) -> bool + ::std::marker::Send + 'static,
890850{
891851 spawn_vm_io_with_hooks(
892852 output_monitor,
@@ -906,36 +866,6 @@ pub fn spawn_vm_io(
906866 spawn_vm_io_with_line_handler(output_monitor, vm_output_fd, vm_input_fd, |_| false)
907867}
908868
909−fn spawn_vm_io_with_log(
910− output_monitor: Arc<OutputMonitor>,
911− vm_output_fd: OwnedFd,
912− vm_input_fd: OwnedFd,
913− log_path: PathBuf,
914−) -> IoContext {
915− let log_file = fs::OpenOptions::new()
916− .create(true)
917− .write(true)
918− .truncate(true)
919− .open(&log_path)
920− .ok()
921− .map(|file| Arc::new(Mutex::new(file)));
922−
923− spawn_vm_io_with_hooks(
924− output_monitor,
925− vm_output_fd,
926− vm_input_fd,
927− IoControl::new(),
928− |_| false,
929− move |bytes| {
930− if let Some(log) = &log_file
931− && let Ok(mut file) = log.lock()
932− {
933− let _ = file.write_all(bytes);
934− }
935− },
936− )
937−}
938−
939869impl IoContext {
940870 pub fn shutdown(self) {
941871 let _ = self.input_tx.send(VmInput::Shutdown);
@@ -953,7 +883,7 @@ fn create_vm_configuration(
953883 vm_writes_to_fd: OwnedFd,
954884 cpu_count: usize,
955885 ram_bytes: u64,
956−) -> Result<Retained<VZVirtualMachineConfiguration>> {
886+) -> Result<Retained<VZVirtualMachineConfiguration>, Box<dyn std::error::Error>> {
957887 unsafe {
958888 let platform =
959889 VZGenericPlatformConfiguration::init(VZGenericPlatformConfiguration::alloc());
@@ -987,7 +917,7 @@ fn create_vm_configuration(
987917 false,
988918 VZDiskImageCachingMode::Automatic,
989919 VZDiskImageSynchronizationMode::Full,
990− )?;
920+ ).unwrap();
991921
992922 let disk_device = VZVirtioBlockDeviceConfiguration::initWithAttachment(
993923 VZVirtioBlockDeviceConfiguration::alloc(),
@@ -1074,7 +1004,7 @@ fn create_vm_configuration(
10741004 // Validate
10751005 config.validateWithError().map_err(|e| {
10761006 io::Error::other(format!(
1077− "invalid VM configuration: {:?}",
1007+ "Invalid VM configuration: {:?}",
10781008 e.localizedDescription()
10791009 ))
10801010 })?;
@@ -1083,9 +1013,9 @@ fn create_vm_configuration(
10831013 }
10841014}
10851015
1086−fn load_efi_variable_store() -> Result<Retained<VZEFIVariableStore>> {
1016+fn load_efi_variable_store() -> Result<Retained<VZEFIVariableStore>, Box<dyn std::error::Error>> {
10871017 unsafe {
1088− let temp_dir = env::temp_dir();
1018+ let temp_dir = std::env::temp_dir();
10891019 let temp_path = temp_dir.join(format!("efi_variable_store_{}.efivars", std::process::id()));
10901020 let url = nsurl_from_path(&temp_path)?;
10911021 let options = VZEFIVariableStoreInitializationOptions::AllowOverwrite;
@@ -1101,8 +1031,8 @@ fn load_efi_variable_store() -> Result<Retained<VZEFIVariableStore>> {
11011031fn spawn_login_actions_thread(
11021032 login_actions: Vec<LoginAction>,
11031033 output_monitor: Arc<OutputMonitor>,
1104− input_tx: Sender<VmInput>,
1105− vm_output_tx: Sender<VmOutput>,
1034+ input_tx: mpsc::Sender<VmInput>,
1035+ vm_output_tx: mpsc::Sender<VmOutput>,
11061036) -> thread::JoinHandle<()> {
11071037 thread::spawn(move || {
11081038 for a in login_actions {
@@ -1116,27 +1046,6 @@ fn spawn_login_actions_thread(
11161046 return;
11171047 }
11181048 }
1119− ExpectEither {
1120− success,
1121− failure,
1122− timeout,
1123− } => match output_monitor.wait_for_any(&[&success, &failure], timeout) {
1124− WaitAnyResult::Found(0) => {}
1125− WaitAnyResult::Found(_) => {
1126− let _ = vm_output_tx.send(VmOutput::LoginActionFailed {
1127− action: format!("expect '{}'", success),
1128− reason: format!("saw failure marker '{}'", failure),
1129− });
1130− return;
1131− }
1132− WaitAnyResult::Timeout => {
1133− let _ = vm_output_tx.send(VmOutput::LoginActionTimeout {
1134− action: format!("expect '{}'", success),
1135− timeout,
1136− });
1137− return;
1138− }
1139− },
11401049 Send(mut text) => {
11411050 text.push('\n'); // Type the newline so the command is actually submitted.
11421051 input_tx.send(VmInput::Bytes(text.into_bytes())).unwrap();
@@ -1152,9 +1061,9 @@ fn run_vm_with_io<F>(
11521061 directory_shares: &[DirectoryShare],
11531062 cpu_count: usize,
11541063 ram_bytes: u64,
1155− status: Option<&StatusEmitter<'_>>,
1064+ status: Option<&StatusFile>,
11561065 io_handler: F,
1157−) -> Result<()>
1066+) -> Result<(), Box<dyn std::error::Error>>
11581067where
11591068 F: FnOnce(Arc<OutputMonitor>, OwnedFd, OwnedFd) -> IoContext,
11601069{
@@ -1201,22 +1110,24 @@ where
12011110
12021111 match rx.try_recv() {
12031112 Ok(result) => {
1204− result.map_err(|e| Error::msg(format!("Failed to start VM: {}", e)))?;
1113+ result.map_err(|e| format!("Failed to start VM: {}", e))?;
12051114 break;
12061115 }
12071116 Err(mpsc::TryRecvError::Empty) => continue,
12081117 Err(mpsc::TryRecvError::Disconnected) => {
1209− bail!("VM start channel disconnected");
1118+ return Err("VM start channel disconnected".into());
12101119 }
12111120 }
12121121 }
12131122
12141123 if Instant::now() >= start_deadline {
1215− bail!("Timed out waiting for VM to start");
1124+ return Err("Timed out waiting for VM to start".into());
12161125 }
12171126
1218− emit_status(status, "vm booting... go vibecoder!");
1219− tracing::info!("vm booting... go vibecoder!");
1127+ if let Some(status) = status {
1128+ status.update("vm booting... go vibecoder!");
1129+ status.clear();
1130+ }
12201131 tracing::info!("vm booting");
12211132
12221133 let output_monitor = Arc::new(OutputMonitor::default());
@@ -1262,7 +1173,7 @@ where
12621173 );
12631174
12641175 let mut last_state = None;
1265− let mut exit_result: Result<(), String> = Ok(());
1176+ let mut exit_result = Ok(());
12661177 loop {
12671178 unsafe {
12681179 NSRunLoop::mainRunLoop().runMode_beforeDate(
@@ -1281,24 +1192,8 @@ where
12811192 exit_result = Err(format!(
12821193 "Login action ({}) timed out after {:?}; shutting down.",
12831194 action, timeout
1284− ));
1285− unsafe {
1286− if vm.canRequestStop() {
1287− if let Err(err) = vm.requestStopWithError() {
1288− tracing::error!(error = ?err, "failed to request VM stop");
1289− }
1290− } else if vm.canStop() {
1291− let handler = RcBlock::new(|_error: *mut NSError| {});
1292− vm.stopWithCompletionHandler(&handler);
1293− }
1294− }
1295− break;
1296− }
1297− Ok(VmOutput::LoginActionFailed { action, reason }) => {
1298− exit_result = Err(format!(
1299− "Login action ({}) failed: {}; shutting down.",
1300− action, reason
1301− ));
1195+ )
1196+ .into());
13021197 unsafe {
13031198 if vm.canRequestStop() {
13041199 if let Err(err) = vm.requestStopWithError() {
@@ -1314,7 +1209,7 @@ where
13141209 Err(mpsc::TryRecvError::Empty) => {}
13151210 Err(mpsc::TryRecvError::Disconnected) => {}
13161211 }
1317− if state != VZVirtualMachineState::Running {
1212+ if state != objc2_virtualization::VZVirtualMachineState::Running {
13181213 //eprintln!("VM stopped with state: {:?}", state);
13191214 break;
13201215 }
@@ -1324,7 +1219,7 @@ where
13241219
13251220 io_ctx.shutdown();
13261221
1327− exit_result.map_err(Error::msg)
1222+ exit_result
13281223}
13291224
13301225fn run_vm(
@@ -1333,8 +1228,8 @@ fn run_vm(
13331228 directory_shares: &[DirectoryShare],
13341229 cpu_count: usize,
13351230 ram_bytes: u64,
1336− status: Option<&StatusEmitter<'_>>,
1337−) -> Result<()> {
1231+ status: Option<&StatusFile>,
1232+) -> Result<(), Box<dyn std::error::Error>> {
13381233 run_vm_with_io(
13391234 disk_path,
13401235 login_actions,
@@ -1346,7 +1241,7 @@ fn run_vm(
13461241 )
13471242}
13481243
1349−fn nsurl_from_path(path: &Path) -> Result<Retained<NSURL>> {
1244+fn nsurl_from_path(path: &Path) -> Result<Retained<NSURL>, Box<dyn std::error::Error>> {
13501245 let abs_path = if path.is_absolute() {
13511246 path.to_path_buf()
13521247 } else {
@@ -1355,7 +1250,7 @@ fn nsurl_from_path(path: &Path) -> Result<Retained<NSURL>> {
13551250 let ns_path = NSString::from_str(
13561251 abs_path
13571252 .to_str()
1358− .with_context(|| "non-UTF8 path encountered while building NSURL")?,
1253+ .ok_or("Non-UTF8 path encountered while building NSURL")?,
13591254 );
13601255 Ok(NSURL::fileURLWithPath(&ns_path))
13611256}
@@ -1370,7 +1265,7 @@ fn enable_raw_mode(fd: i32) -> io::Result<RawModeGuard> {
13701265 let original = attributes;
13711266
13721267 // Disable translation of carriage return to newline on input
1373− attributes.c_iflag &= !libc::ICRNL;
1268+ attributes.c_iflag &= !(libc::ICRNL);
13741269 // Disable canonical mode (line buffering), echo, and signal generation
13751270 attributes.c_lflag &= !(libc::ICANON | libc::ECHO | libc::ISIG);
13761271 attributes.c_cc[libc::VMIN] = 0;
@@ -1398,10 +1293,10 @@ impl Drop for RawModeGuard {
13981293
13991294// Ensure the running binary has com.apple.security.virtualization entitlements by checking and, if not, signing and relaunching.
14001295pub fn ensure_signed() {
1401− if env::var("VIBEBOX_SKIP_CODESIGN").as_deref() == Ok("1") {
1296+ if std::env::var("VIBEBOX_SKIP_CODESIGN").as_deref() == Ok("1") {
14021297 return;
14031298 }
1404− let exe = env::current_exe().expect("failed to get current exe path");
1299+ let exe = std::env::current_exe().expect("failed to get current exe path");
14051300 let exe_str = exe.to_str().expect("exe path not valid utf-8");
14061301
14071302 let has_required_entitlements = {
@@ -1423,8 +1318,8 @@ pub fn ensure_signed() {
14231318 }
14241319
14251320 const ENTITLEMENTS: &str = include_str!("entitlements.plist");
1426− let entitlements_path = env::temp_dir().join("entitlements.plist");
1427− fs::write(&entitlements_path, ENTITLEMENTS).expect("failed to write entitlements");
1321+ let entitlements_path = std::env::temp_dir().join("entitlements.plist");
1322+ std::fs::write(&entitlements_path, ENTITLEMENTS).expect("failed to write entitlements");
14281323
14291324 let output = Command::new("codesign")
14301325 .args([
@@ -1437,7 +1332,7 @@ pub fn ensure_signed() {
14371332 ])
14381333 .output();
14391334
1440− let _ = fs::remove_file(&entitlements_path);
1335+ let _ = std::fs::remove_file(&entitlements_path);
14411336
14421337 match output {
14431338 Ok(o) if o.status.success() => {
@@ -1445,7 +1340,7 @@ pub fn ensure_signed() {
14451340 if !stderr.trim().is_empty() {
14461341 tracing::debug!(codesign_stderr = %stderr.trim(), "codesign output");
14471342 }
1448− let err = Command::new(&exe).args(env::args_os().skip(1)).exec();
1343+ let err = Command::new(&exe).args(std::env::args_os().skip(1)).exec();
14491344 tracing::error!(error = %err, "failed to re-exec after signing");
14501345 std::process::exit(1);
14511346 }
src/vm_manager.rs+126−413
@@ -1,22 +1,12 @@
1−use crate::instance::{VmLiveness, vm_liveness};
2−use crate::session_manager::INSTANCE_DIR_NAME;
3−use crate::{
4− config::CONFIG_PATH_ENV,
5− instance::{
6− InstanceConfig, STATUS_VM_ERROR_PREFIX, build_ssh_login_actions, ensure_instance_dir,
7− ensure_ssh_keypair, extract_ipv4, load_or_create_instance_config, write_instance_config,
8− },
9− session_manager::{GLOBAL_DIR_NAME, VM_MANAGER_PID_NAME, VM_MANAGER_SOCKET_NAME},
10− vm::{self, DirectoryShare, LoginAction, PROJECT_GUEST_BASE, VmInput},
11−};
12−use anyhow::{Error, Result, anyhow, bail};
131use std::{
142 env, fs,
153 io::{Read, Write},
164 os::unix::{
5+ fs::FileTypeExt,
176 fs::PermissionsExt,
187 io::AsRawFd,
198 net::{UnixListener, UnixStream},
9+ process::CommandExt,
2010 },
2111 path::{Path, PathBuf},
2212 process::{Command, Stdio},
@@ -25,44 +15,36 @@ use std::{
2515 time::{Duration, Instant},
2616};
2717
28−#[cfg_attr(feature = "mock-vm", allow(dead_code))]
29−const VM_ROOT_LOG_NAME: &str = "vm_root.log";
18+use crate::{
19+ config::CONFIG_PATH_ENV,
20+ instance::VM_ROOT_LOG_NAME,
21+ instance::{
22+ DEFAULT_SSH_USER, InstanceConfig, build_ssh_login_actions, ensure_instance_dir,
23+ ensure_ssh_keypair, extract_ipv4, load_or_create_instance_config, write_instance_config,
24+ },
25+ session_manager::{
26+ GLOBAL_DIR_NAME, INSTANCE_FILENAME, VM_MANAGER_PID_NAME, VM_MANAGER_SOCKET_NAME,
27+ },
28+ vm::{self, DirectoryShare, LoginAction, VmInput},
29+};
30+
3031const VM_MANAGER_LOCK_NAME: &str = "vm.lock";
3132const VM_MANAGER_LOG_NAME: &str = "vm_manager.log";
32−const SHUTDOWN_RETRY_MS: u64 = 500;
33−#[cfg(test)]
34−const HARD_SHUTDOWN_TIMEOUT_MS: u64 = 1_000;
35−#[cfg(not(test))]
36−const HARD_SHUTDOWN_TIMEOUT_MS: u64 = 12_000;
37−const STATUS_PREFIX: &str = "status:";
38−
39−type ClientStreams = Arc<Mutex<Vec<UnixStream>>>;
40−type SharedStatus = Arc<Mutex<String>>;
41−
42−#[cfg(not(test))]
43−fn force_exit(_reason: &str) -> ! {
44− std::process::exit(1);
45−}
46−
47−#[cfg(test)]
48−fn force_exit(reason: &str) -> ! {
49− panic!("{reason}");
50−}
5133
5234pub fn ensure_manager(
5335 raw_args: &[std::ffi::OsString],
5436 auto_shutdown_ms: u64,
5537 config_path: Option<&Path>,
56−) -> Result<UnixStream> {
38+) -> Result<UnixStream, Box<dyn std::error::Error>> {
5739 let project_root = env::current_dir()?;
5840 tracing::debug!(root = %project_root.display(), "ensure vm manager");
5941 let instance_dir = ensure_instance_dir(&project_root)?;
60− cleanup_stale_manager(&project_root)?;
42+ cleanup_stale_manager(&instance_dir);
6143 let socket_path = instance_dir.join(VM_MANAGER_SOCKET_NAME);
6244
6345 if let Ok(stream) = UnixStream::connect(&socket_path) {
6446 send_client_pid(&stream);
65− tracing::info!(path = %socket_path.display(), "connected to an existing vm manager");
47+ tracing::info!(path = %socket_path.display(), "connected to existing vm manager");
6648 return Ok(stream);
6749 }
6850
@@ -100,11 +82,12 @@ pub fn ensure_manager(
10082 drop(lock_file.take());
10183 let _ = fs::remove_file(&lock_path);
10284 }
103− bail!(format!(
104− "timed out waiting for vm manager socket: {} ({})",
85+ return Err(format!(
86+ "Timed out waiting for vm manager socket: {} ({})",
10587 socket_path.display(),
10688 err
107− ));
89+ )
90+ .into());
10891 }
10992 thread::sleep(Duration::from_millis(100));
11093 }
@@ -112,49 +95,24 @@ pub fn ensure_manager(
11295 }
11396}
11497
115−pub fn run_manager(args: vm::VmArg, auto_shutdown_ms: u64) -> Result<()> {
98+pub fn run_manager(
99+ args: vm::VmArg,
100+ auto_shutdown_ms: u64,
101+) -> Result<(), Box<dyn std::error::Error>> {
116102 let project_root = env::current_dir()?;
117103 tracing::info!(root = %project_root.display(), "vm manager starting");
118− #[cfg(not(feature = "mock-vm"))]
119− {
120− unsafe {
121− env::remove_var("VIBEBOX_SKIP_CODESIGN");
122− }
123− vm::ensure_signed();
124− unsafe {
125− env::set_var("VIBEBOX_SKIP_CODESIGN", "1");
126− }
127− }
128104 let _pid_guard = ensure_pid_file(&project_root)?;
129− #[cfg(feature = "mock-vm")]
130− tracing::info!("vm manager using mock executor");
131− let executor: &dyn VmExecutor = {
132− #[cfg(feature = "mock-vm")]
133− {
134− &MockVmExecutor
135− }
136− #[cfg(not(feature = "mock-vm"))]
137− {
138− &RealVmExecutor
139− }
140− };
141− let options = {
142− #[cfg(feature = "mock-vm")]
143− {
144− ManagerOptions {
145− detach: true,
146− prepare_vm: false,
147− }
148− }
149− #[cfg(not(feature = "mock-vm"))]
150− {
151− ManagerOptions {
152− detach: true,
153− prepare_vm: true,
154− }
155− }
156− };
157− run_manager_with(&project_root, args, auto_shutdown_ms, executor, options)
105+ run_manager_with(
106+ &project_root,
107+ args,
108+ auto_shutdown_ms,
109+ &RealVmExecutor,
110+ ManagerOptions {
111+ ensure_signed: true,
112+ detach: true,
113+ prepare_vm: true,
114+ },
115+ )
158116}
159117
160118fn spawn_manager_process(
@@ -162,22 +120,25 @@ fn spawn_manager_process(
162120 auto_shutdown_ms: u64,
163121 instance_dir: &Path,
164122 config_path: Option<&Path>,
165−) -> Result<()> {
123+) -> Result<(), Box<dyn std::error::Error>> {
166124 let exe = env::current_exe()?;
167125 let mut supervisor_exe = exe.clone();
168126 supervisor_exe.set_file_name("vibebox-supervisor");
169− // intentional
170− if !supervisor_exe.exists() {
171− bail!(format!(
172− "vibebox-supervisor not found at {}",
173− supervisor_exe.display()
174− ));
175− }
176− let mut cmd = Command::new(supervisor_exe);
127+ let use_supervisor = supervisor_exe.exists();
128+ let mut cmd = if use_supervisor {
129+ Command::new(supervisor_exe)
130+ } else {
131+ let mut cmd = Command::new(exe);
132+ cmd.arg0("vibebox-supervisor");
133+ cmd
134+ };
177135 if raw_args.len() > 1 {
178136 cmd.args(&raw_args[1..]);
179137 }
180138 cmd.env("VIBEBOX_INTERNAL", "1");
139+ if !use_supervisor {
140+ cmd.env("VIBEBOX_VM_MANAGER", "1");
141+ }
181142 cmd.env("VIBEBOX_LOG_NO_COLOR", "1");
182143 cmd.env("VIBEBOX_AUTO_SHUTDOWN_MS", auto_shutdown_ms.to_string());
183144 if let Some(path) = config_path {
@@ -205,22 +166,22 @@ fn spawn_manager_process(
205166 Ok(())
206167}
207168
208−fn ensure_pid_file(project_root: &Path) -> Result<PidFileGuard> {
169+fn ensure_pid_file(project_root: &Path) -> Result<PidFileGuard, Box<dyn std::error::Error>> {
209170 let instance_dir = ensure_instance_dir(project_root)?;
210171 let pid_path = instance_dir.join(VM_MANAGER_PID_NAME);
211172 let socket_path = instance_dir.join(VM_MANAGER_SOCKET_NAME);
212− match vm_liveness(project_root)? {
213− VmLiveness::RunningWithSocket { pid } => {
214− bail!("vm manager already running (pid {pid})");
215− }
216− VmLiveness::RunningWithoutSocket { pid } => {
217− tracing::warn!(
218− pid,
219− path = %socket_path.display(),
220− "stale pid file detected with missing socket"
221− );
173+ if let Ok(content) = fs::read_to_string(&pid_path)
174+ && let Ok(pid) = content.trim().parse::<u32>()
175+ && pid_is_alive(pid)
176+ {
177+ if is_socket_path(&socket_path) {
178+ return Err(format!("vm manager already running (pid {pid})").into());
222179 }
223− VmLiveness::NotRunningOrMissing => {}
180+ tracing::warn!(
181+ pid,
182+ path = %socket_path.display(),
183+ "stale pid file detected with missing socket"
184+ );
224185 }
225186 let _ = fs::remove_file(&pid_path);
226187 fs::write(&pid_path, format!("{}\n", std::process::id()))?;
@@ -228,42 +189,21 @@ fn ensure_pid_file(project_root: &Path) -> Result<PidFileGuard> {
228189 Ok(PidFileGuard { path: pid_path })
229190}
230191
231−fn cleanup_stale_manager(project_root: &Path) -> Result<()> {
232− let pid_path = project_root
233− .join(INSTANCE_DIR_NAME)
234− .join(VM_MANAGER_PID_NAME);
235− if matches!(
236− vm_liveness(project_root)?,
237− VmLiveness::RunningWithSocket { .. } | VmLiveness::RunningWithoutSocket { .. }
238− ) {
239− return Ok(());
192+fn cleanup_stale_manager(instance_dir: &Path) {
193+ let pid_path = instance_dir.join(VM_MANAGER_PID_NAME);
194+ if let Ok(content) = fs::read_to_string(&pid_path)
195+ && let Ok(pid) = content.trim().parse::<u32>()
196+ && pid_is_alive(pid)
197+ {
198+ return;
240199 }
241200 let _ = fs::remove_file(&pid_path);
242− Ok(())
243201}
244202
245−fn inject_project_mount(
246− mounts: &mut Vec<String>,
247− project_root: &Path,
248− ssh_user: &str,
249− project_name: &str,
250−) {
251− let guest_tilde = format!("~/{project_name}");
252− let guest_home = format!("/home/{ssh_user}/{project_name}");
253− let guest_base = format!("{PROJECT_GUEST_BASE}/{project_name}");
254− let already_mapped = mounts.iter().any(|spec| {
255− let parts: Vec<&str> = spec.split(':').collect();
256− if parts.len() < 2 {
257− return false;
258− }
259− let guest = parts[1];
260− guest == guest_tilde || guest == guest_home || guest == guest_base
261− });
262− if already_mapped {
263− return;
264− }
265− let host = project_root.display();
266− mounts.insert(0, format!("{host}:{guest_tilde}:read-write"));
203+fn is_socket_path(path: &Path) -> bool {
204+ fs::metadata(path)
205+ .map(|meta| meta.file_type().is_socket())
206+ .unwrap_or(false)
267207}
268208
269209fn prepare_mounts_and_links(mut args: vm::VmArg, ssh_user: &str) -> (vm::VmArg, String) {
@@ -312,7 +252,7 @@ fn rewrite_mount_spec(spec: &str, ssh_user: &str) -> (String, Option<HomeLink>)
312252 return (spec.to_string(), None);
313253 }
314254
315− let root_base = PROJECT_GUEST_BASE;
255+ let root_base = "/usr/local/vibebox-mounts";
316256 let root_path = if rel.is_empty() {
317257 root_base.to_string()
318258 } else {
@@ -409,30 +349,6 @@ fn wait_for_disconnect(mut stream: UnixStream) {
409349 }
410350}
411351
412−fn remove_client(streams: &ClientStreams, fd: std::os::fd::RawFd) {
413− if let Ok(mut clients) = streams.lock() {
414− clients.retain(|stream| stream.as_raw_fd() != fd);
415− }
416−}
417−
418−fn send_status_line(stream: &mut UnixStream, status: &str) -> bool {
419− let mut payload = String::with_capacity(STATUS_PREFIX.len() + status.len() + 1);
420− payload.push_str(STATUS_PREFIX);
421− payload.push_str(status);
422− payload.push('\n');
423− stream.write_all(payload.as_bytes()).is_ok()
424−}
425−
426−#[cfg_attr(feature = "mock-vm", allow(dead_code))]
427−fn broadcast_status(streams: &ClientStreams, latest_status: &SharedStatus, status: &str) {
428− if let Ok(mut current) = latest_status.lock() {
429− *current = status.to_string();
430− }
431− if let Ok(mut clients) = streams.lock() {
432− clients.retain_mut(|stream| send_status_line(stream, status));
433− }
434−}
435−
436352fn send_client_pid(stream: &UnixStream) {
437353 let pid = std::process::id();
438354 let payload = format!("pid={pid}\n");
@@ -442,7 +358,7 @@ fn send_client_pid(stream: &UnixStream) {
442358 }
443359}
444360
445−fn acquire_spawn_lock(lock_path: &Path) -> Result<Option<fs::File>> {
361+fn acquire_spawn_lock(lock_path: &Path) -> Result<Option<fs::File>, Box<dyn std::error::Error>> {
446362 match fs::OpenOptions::new()
447363 .write(true)
448364 .create_new(true)
@@ -476,12 +392,6 @@ fn is_lock_stale(lock_path: &Path) -> bool {
476392 }
477393}
478394
479−fn read_lock_pid(lock_path: &Path) -> Option<u32> {
480− let content = fs::read_to_string(lock_path).ok()?;
481− let line = content.lines().next()?;
482− line.strip_prefix("pid=")?.trim().parse::<u32>().ok()
483−}
484−
485395fn pid_is_alive(pid: u32) -> bool {
486396 let pid = pid as libc::pid_t;
487397 let result = unsafe { libc::kill(pid, 0) };
@@ -495,6 +405,12 @@ fn pid_is_alive(pid: u32) -> bool {
495405 }
496406}
497407
408+fn read_lock_pid(lock_path: &Path) -> Option<u32> {
409+ let content = fs::read_to_string(lock_path).ok()?;
410+ let line = content.lines().next()?;
411+ line.strip_prefix("pid=")?.trim().parse::<u32>().ok()
412+}
413+
498414fn read_client_pid(stream: &UnixStream) -> Option<u32> {
499415 let mut stream = stream.try_clone().ok()?;
500416 let _ = stream.set_read_timeout(Some(Duration::from_millis(200)));
@@ -527,17 +443,14 @@ fn read_client_pid(stream: &UnixStream) -> Option<u32> {
527443 }
528444}
529445
530−#[cfg_attr(feature = "mock-vm", allow(dead_code))]
531446fn spawn_manager_io(
532447 config: Arc<Mutex<InstanceConfig>>,
533− project_dir: PathBuf,
534− clients: ClientStreams,
535− latest_status: SharedStatus,
448+ instance_dir: PathBuf,
536449 output_monitor: Arc<vm::OutputMonitor>,
537450 vm_output_fd: std::os::unix::io::OwnedFd,
538451 vm_input_fd: std::os::unix::io::OwnedFd,
539452) -> vm::IoContext {
540− let log_path = project_dir.join(INSTANCE_DIR_NAME).join(VM_ROOT_LOG_NAME);
453+ let log_path = instance_dir.join(VM_ROOT_LOG_NAME);
541454 let log_file = fs::OpenOptions::new()
542455 .create(true)
543456 .write(true)
@@ -546,6 +459,7 @@ fn spawn_manager_io(
546459 .ok()
547460 .map(|file| Arc::new(Mutex::new(file)));
548461
462+ let instance_path = instance_dir.join(INSTANCE_FILENAME);
549463 let config_for_output = config.clone();
550464 let log_for_output = log_file.clone();
551465 let mut line_buf = String::new();
@@ -568,17 +482,6 @@ fn spawn_manager_io(
568482 line_buf.drain(..=pos);
569483
570484 let cleaned = line.trim_start_matches(['\r', ' ']);
571− if let Some(script_failure) = cleaned.strip_prefix("VIBEBOX_SCRIPT_ERROR:") {
572− let failure = script_failure.trim();
573− if !failure.is_empty() {
574− tracing::error!(script_failure = %failure, "[vm] script reported failure");
575− broadcast_status(
576− &clients,
577− &latest_status,
578− &format!("{STATUS_VM_ERROR_PREFIX} {failure}"),
579− );
580− }
581− }
582485 if let Some(pos) = cleaned.find("VIBEBOX_IPV4=") {
583486 let ip_raw = &cleaned[(pos + "VIBEBOX_IPV4=".len())..];
584487 let ip = extract_ipv4(ip_raw).unwrap_or_default();
@@ -587,7 +490,7 @@ fn spawn_manager_io(
587490 && cfg.vm_ipv4.as_deref() != Some(ip.as_str())
588491 {
589492 cfg.vm_ipv4 = Some(ip.clone());
590− let _ = write_instance_config(&project_dir, &cfg);
493+ let _ = write_instance_config(&instance_path, &cfg);
591494 }
592495 }
593496 }
@@ -610,12 +513,12 @@ enum ManagerEvent {
610513}
611514
612515struct ManagerOptions {
516+ ensure_signed: bool,
613517 detach: bool,
614518 prepare_vm: bool,
615519}
616520
617521trait VmExecutor {
618− #[allow(clippy::too_many_arguments)]
619522 fn run_vm(
620523 &self,
621524 args: vm::VmArg,
@@ -623,13 +526,10 @@ trait VmExecutor {
623526 extra_shares: Vec<DirectoryShare>,
624527 config: Arc<Mutex<InstanceConfig>>,
625528 instance_dir: PathBuf,
626− clients: ClientStreams,
627− latest_status: SharedStatus,
628529 vm_input_tx: Arc<Mutex<Option<mpsc::Sender<VmInput>>>>,
629− ) -> Result<()>;
530+ ) -> Result<(), Box<dyn std::error::Error>>;
630531}
631532
632−#[cfg_attr(feature = "mock-vm", allow(dead_code))]
633533struct RealVmExecutor;
634534
635535impl VmExecutor for RealVmExecutor {
@@ -639,22 +539,15 @@ impl VmExecutor for RealVmExecutor {
639539 extra_login_actions: Vec<LoginAction>,
640540 extra_shares: Vec<DirectoryShare>,
641541 config: Arc<Mutex<InstanceConfig>>,
642− project_dir: PathBuf,
643− clients: ClientStreams,
644− latest_status: SharedStatus,
542+ instance_dir: PathBuf,
645543 vm_input_tx: Arc<Mutex<Option<mpsc::Sender<VmInput>>>>,
646− ) -> Result<()> {
647− let status_callback = |status: &str| {
648− broadcast_status(&clients, &latest_status, status);
649− };
544+ ) -> Result<(), Box<dyn std::error::Error>> {
650545 vm::run_with_args_and_extras(
651546 args,
652547 |output_monitor, vm_output_fd, vm_input_fd| {
653548 let io_ctx = spawn_manager_io(
654549 config.clone(),
655− project_dir.clone(),
656− clients.clone(),
657− latest_status.clone(),
550+ instance_dir.clone(),
658551 output_monitor,
659552 vm_output_fd,
660553 vm_input_fd,
@@ -664,60 +557,34 @@ impl VmExecutor for RealVmExecutor {
664557 },
665558 extra_login_actions,
666559 extra_shares,
667− Some(&status_callback),
668560 )
669561 }
670562}
671563
672−#[cfg(feature = "mock-vm")]
673−struct MockVmExecutor;
674−
675−#[cfg(feature = "mock-vm")]
676−impl VmExecutor for MockVmExecutor {
677− fn run_vm(
678− &self,
679− _args: vm::VmArg,
680− _extra_login_actions: Vec<LoginAction>,
681− _extra_shares: Vec<DirectoryShare>,
682− _config: Arc<Mutex<InstanceConfig>>,
683− _instance_dir: PathBuf,
684− _clients: ClientStreams,
685− _latest_status: SharedStatus,
686− vm_input_tx: Arc<Mutex<Option<mpsc::Sender<VmInput>>>>,
687− ) -> Result<()> {
688− let (tx, rx) = mpsc::channel::<VmInput>();
689− *vm_input_tx.lock().unwrap() = Some(tx);
690− tracing::info!("mock vm executor running");
691− while let Ok(input) = rx.recv() {
692− match input {
693− VmInput::Shutdown => break,
694− VmInput::Bytes(bytes) => {
695− let text = String::from_utf8_lossy(&bytes);
696− if text.contains("systemctl poweroff") {
697− break;
698− }
699− }
700− }
701− }
702− tracing::info!("mock vm executor exiting");
703− Ok(())
704− }
705−}
706−
707564fn run_manager_with(
708565 project_root: &Path,
709− mut args: vm::VmArg,
566+ args: vm::VmArg,
710567 auto_shutdown_ms: u64,
711568 executor: &dyn VmExecutor,
712569 options: ManagerOptions,
713−) -> Result<()> {
570+) -> Result<(), Box<dyn std::error::Error>> {
571+ if options.ensure_signed {
572+ let _had_skip = env::var("VIBEBOX_SKIP_CODESIGN").ok();
573+ unsafe {
574+ env::remove_var("VIBEBOX_SKIP_CODESIGN");
575+ }
576+ vm::ensure_signed();
577+ unsafe {
578+ env::set_var("VIBEBOX_SKIP_CODESIGN", "1");
579+ }
580+ }
714581 if options.detach {
715582 detach_from_terminal();
716583 }
717584
718585 let project_name = project_root
719586 .file_name()
720− .ok_or_else(|| anyhow!("Project directory has no name"))?
587+ .ok_or("Project directory has no name")?
721588 .to_string_lossy()
722589 .into_owned();
723590 let instance_dir = ensure_instance_dir(project_root)?;
@@ -725,31 +592,27 @@ fn run_manager_with(
725592 let _ = ensure_ssh_keypair(&instance_dir)?;
726593 }
727594
728− let mut config = load_or_create_instance_config(project_root)?;
595+ let mut config = load_or_create_instance_config(&instance_dir)?;
729596 if config.vm_ipv4.is_some() {
730597 config.vm_ipv4 = None;
731− write_instance_config(project_root, &config)?;
598+ write_instance_config(&instance_dir.join(INSTANCE_FILENAME), &config)?;
732599 }
733600 let config = Arc::new(Mutex::new(config));
734601 let ssh_user = config
735602 .lock()
736− .map(|cfg| cfg.ssh_user.clone())
737− .map_err(|_| anyhow!("failed to acquire ssh user display"))?;
738− if !args.no_default_mounts {
739− inject_project_mount(&mut args.mounts, project_root, &ssh_user, &project_name);
740− }
603+ .map(|cfg| cfg.ssh_user_display())
604+ .unwrap_or_else(|_| DEFAULT_SSH_USER.to_string());
741605 let (args, home_links_script) = prepare_mounts_and_links(args, &ssh_user);
742606
743− let project_guest_dir = format!("{PROJECT_GUEST_BASE}/{project_name}");
744607 let ssh_guest_dir = format!("/root/{}", GLOBAL_DIR_NAME);
745− let extra_shares = vec![
746− DirectoryShare::new(instance_dir.clone(), ssh_guest_dir.clone().into(), true)
747− .map_err(|err| anyhow!(err.to_string()))?,
748− ];
608+ let extra_shares = vec![DirectoryShare::new(
609+ instance_dir.clone(),
610+ ssh_guest_dir.clone().into(),
611+ true,
612+ )?];
749613 let extra_login_actions = build_ssh_login_actions(
750614 &config,
751615 &project_name,
752− &project_guest_dir,
753616 ssh_guest_dir.as_str(),
754617 "ssh_key",
755618 &home_links_script,
@@ -768,43 +631,17 @@ fn run_manager_with(
768631 let _ = fs::set_permissions(&socket_path, fs::Permissions::from_mode(0o600));
769632 tracing::info!(path = %socket_path.display(), "vm manager socket bound");
770633
771− let clients: ClientStreams = Arc::new(Mutex::new(Vec::new()));
772− let latest_status: SharedStatus = Arc::new(Mutex::new(String::new()));
773634 let (event_tx, event_rx) = mpsc::channel::<ManagerEvent>();
774635 let event_tx_accept = event_tx.clone();
775− let clients_accept = clients.clone();
776− let latest_status_accept = latest_status.clone();
777636 thread::spawn(move || {
778637 for stream in listener.incoming() {
779638 match stream {
780639 Ok(stream) => {
781− let mut client_fd: Option<std::os::fd::RawFd> = None;
782− let latest_status_snapshot = latest_status_accept
783− .lock()
784− .ok()
785− .map(|status| status.clone());
786− if let Ok(writer) = stream.try_clone() {
787− let writer_fd = writer.as_raw_fd();
788− if let Ok(mut connected) = clients_accept.lock() {
789− connected.push(writer);
790− client_fd = Some(writer_fd);
791− if let Some(last) = connected.last_mut()
792− && let Some(status) = latest_status_snapshot.as_deref()
793− && !status.is_empty()
794− {
795− let _ = send_status_line(last, status);
796− }
797− }
798− }
799640 let event_tx_conn = event_tx_accept.clone();
800− let clients_conn = clients_accept.clone();
801641 thread::spawn(move || {
802642 let pid = read_client_pid(&stream);
803643 let _ = event_tx_conn.send(ManagerEvent::Inc(pid));
804644 wait_for_disconnect(stream);
805− if let Some(fd) = client_fd {
806− remove_client(&clients_conn, fd);
807− }
808645 let _ = event_tx_conn.send(ManagerEvent::Dec(pid));
809646 });
810647 }
@@ -824,59 +661,43 @@ fn run_manager_with(
824661 extra_login_actions,
825662 extra_shares,
826663 config.clone(),
827− project_root.to_path_buf(),
828− clients.clone(),
829− latest_status.clone(),
664+ instance_dir.clone(),
830665 vm_input_tx.clone(),
831666 );
832667 tracing::info!("vm manager vm run completed");
833668 let vm_err = vm_result.err().map(|e| e.to_string());
834− if let Some(err) = &vm_err {
835− broadcast_status(
836− &clients,
837− &latest_status,
838− &format!("{STATUS_VM_ERROR_PREFIX} {err}"),
839− );
840− }
841669 let _ = event_tx.send(ManagerEvent::VmExited(vm_err.clone()));
842− let event_loop_result = event_loop_handle
670+ let event_loop_result: Result<(), String> = event_loop_handle
843671 .join()
844− .unwrap_or_else(|_| Err(Error::msg("vm manager event loop panicked")))
672+ .unwrap_or_else(|_| Err("vm manager event loop panicked".into()))
845673 .map_err(|err| err.to_string());
846674 let _ = fs::remove_file(&socket_path);
847675 if let Err(err) = &event_loop_result {
848676 tracing::error!(error = %err, "vm manager exiting due to event loop error");
849− bail!(err.to_string());
677+ return Err(err.to_string().into());
850678 }
851679 if let Some(err) = vm_err {
852680 tracing::error!(error = %err, "vm manager exiting due to vm error");
853− bail!(err);
681+ return Err(err.into());
854682 }
855683 tracing::info!("vm manager exiting");
856− event_loop_result.map_err(Error::msg)
684+ Ok(event_loop_result?)
857685}
858686
859687fn manager_event_loop(
860688 event_rx: mpsc::Receiver<ManagerEvent>,
861689 vm_input_tx: Arc<Mutex<Option<mpsc::Sender<VmInput>>>>,
862690 auto_shutdown_ms: u64,
863−) -> Result<()> {
691+) -> Result<(), String> {
864692 let mut ref_count: usize = 0;
865693 let mut shutdown_deadline: Option<Instant> = None;
866694 let mut shutdown_sent = false;
867− let mut hard_deadline: Option<Instant> = None;
868695 let grace = Duration::from_millis(auto_shutdown_ms.max(1));
869− let hard_timeout = Duration::from_millis(HARD_SHUTDOWN_TIMEOUT_MS);
870696
871697 loop {
872− let timeout = match (shutdown_deadline, hard_deadline) {
873− (Some(shutdown), Some(hard)) => {
874− let next = if shutdown <= hard { shutdown } else { hard };
875− next.saturating_duration_since(Instant::now())
876− }
877− (Some(shutdown), None) => shutdown.saturating_duration_since(Instant::now()),
878− (None, Some(hard)) => hard.saturating_duration_since(Instant::now()),
879− (None, None) => Duration::from_secs(1),
698+ let timeout = match shutdown_deadline {
699+ Some(deadline) => deadline.saturating_duration_since(Instant::now()),
700+ None => Duration::from_secs(1),
880701 };
881702
882703 match event_rx.recv_timeout(timeout) {
@@ -890,7 +711,6 @@ fn manager_event_loop(
890711 );
891712 shutdown_deadline = None;
892713 shutdown_sent = false;
893− hard_deadline = None;
894714 }
895715 Ok(ManagerEvent::Dec(pid)) => {
896716 ref_count = ref_count.saturating_sub(1);
@@ -916,48 +736,12 @@ fn manager_event_loop(
916736 && Instant::now() >= deadline
917737 && !shutdown_sent
918738 {
919− if hard_deadline.is_none() {
920− hard_deadline = Some(Instant::now() + hard_timeout);
921− }
922− let mut sent = false;
923739 if let Some(tx) = vm_input_tx.lock().unwrap().clone() {
924− if tx
925− .send(VmInput::Bytes(b"systemctl poweroff\n".to_vec()))
926− .is_ok()
927− {
928− sent = true;
929− } else {
930− tracing::warn!("shutdown command failed to send");
931− }
932− } else {
933− tracing::warn!("shutdown command deferred; vm input not ready");
934− }
935− if sent {
936− tracing::info!("shutdown command sent");
937− shutdown_sent = true;
938− shutdown_deadline = None;
939− hard_deadline = Some(Instant::now() + hard_timeout);
940− } else {
941− shutdown_deadline =
942− Some(Instant::now() + Duration::from_millis(SHUTDOWN_RETRY_MS));
740+ let _ = tx.send(VmInput::Bytes(b"systemctl poweroff\n".to_vec()));
943741 }
944− }
945− if ref_count == 0
946− && let Some(deadline) = hard_deadline
947− && Instant::now() >= deadline
948− {
949− if shutdown_sent {
950− tracing::warn!(
951− timeout_ms = HARD_SHUTDOWN_TIMEOUT_MS,
952− "force exiting: VM did not stop after shutdown timeout"
953− );
954− } else {
955− tracing::warn!(
956− timeout_ms = HARD_SHUTDOWN_TIMEOUT_MS,
957− "force exiting: VM input not ready after shutdown timeout"
958− );
959− }
960− force_exit("vm manager forced exit");
742+ tracing::info!("shutdown command sent");
743+ shutdown_sent = true;
744+ shutdown_deadline = None;
961745 }
962746 }
963747 Err(mpsc::RecvTimeoutError::Disconnected) => break,
@@ -970,7 +754,7 @@ fn manager_event_loop(
970754#[cfg(test)]
971755mod tests {
972756 use super::*;
973− use std::{fs, sync::mpsc, thread, time::Duration};
757+ use std::{sync::mpsc, time::Duration};
974758
975759 #[test]
976760 fn manager_powers_off_after_grace_when_no_refs() {
@@ -1003,75 +787,4 @@ mod tests {
1003787 let _ = event_tx.send(ManagerEvent::VmExited(None));
1004788 let _ = manager_thread.join();
1005789 }
1006−
1007− #[test]
1008− fn manager_force_exits_when_vm_input_never_ready() {
1009− let (event_tx, event_rx) = mpsc::channel::<ManagerEvent>();
1010− let vm_input_tx = Arc::new(Mutex::new(None));
1011−
1012− let manager_thread = thread::spawn(move || {
1013− let _ = manager_event_loop(event_rx, vm_input_tx, 10);
1014− });
1015−
1016− event_tx.send(ManagerEvent::Inc(None)).unwrap();
1017− event_tx.send(ManagerEvent::Dec(None)).unwrap();
1018−
1019− let join_result = manager_thread.join();
1020− assert!(
1021− join_result.is_err(),
1022− "expected manager to force-exit when vm input never becomes ready"
1023− );
1024− }
1025−
1026− #[test]
1027− fn manager_sends_shutdown_after_vm_input_becomes_ready() {
1028− let (event_tx, event_rx) = mpsc::channel::<ManagerEvent>();
1029− let (vm_tx, vm_rx) = mpsc::channel::<VmInput>();
1030− let vm_input_tx = Arc::new(Mutex::new(None));
1031− let vm_input_for_thread = vm_input_tx.clone();
1032−
1033− let manager_thread = thread::spawn(move || {
1034− manager_event_loop(event_rx, vm_input_for_thread, 10).expect("event loop");
1035− });
1036−
1037− event_tx.send(ManagerEvent::Inc(None)).unwrap();
1038− event_tx.send(ManagerEvent::Dec(None)).unwrap();
1039−
1040− thread::sleep(Duration::from_millis(100));
1041− *vm_input_tx.lock().unwrap() = Some(vm_tx);
1042−
1043− let msg = vm_rx
1044− .recv_timeout(Duration::from_secs(2))
1045− .expect("poweroff");
1046− match msg {
1047− VmInput::Bytes(data) => {
1048− assert_eq!(data, b"systemctl poweroff\n");
1049− }
1050− _ => panic!("unexpected vm input"),
1051− }
1052− let _ = event_tx.send(ManagerEvent::VmExited(None));
1053− let _ = manager_thread.join();
1054− }
1055−
1056− #[test]
1057− fn lock_is_not_stale_when_owner_pid_is_alive() {
1058− let temp = tempfile::Builder::new()
1059− .prefix("vb")
1060− .tempdir_in("/tmp")
1061− .expect("tempdir");
1062− let lock_path = temp.path().join("vm.lock");
1063− fs::write(&lock_path, format!("pid={}\n", std::process::id())).expect("write lock");
1064− assert!(!is_lock_stale(&lock_path));
1065− }
1066−
1067− #[test]
1068− fn lock_is_stale_when_owner_pid_is_missing() {
1069− let temp = tempfile::Builder::new()
1070− .prefix("vb")
1071− .tempdir_in("/tmp")
1072− .expect("tempdir");
1073− let lock_path = temp.path().join("vm.lock");
1074− fs::write(&lock_path, "pid=999999\n").expect("write lock");
1075− assert!(is_lock_stale(&lock_path));
1076− }
1077790}
tests/e2e_cli.rsdeleted−58
@@ -1,58 +0,0 @@
1−use assert_cmd::cargo::cargo_bin_cmd;
2−use tempfile::TempDir;
3−
4−#[test]
5−fn cli_version_shows_binary_name() {
6− let output = cargo_bin_cmd!("vibebox").arg("--version").output().unwrap();
7− print_output("e2e_cli", &output);
8− assert!(
9− output.status.success(),
10− "expected success, got status: {}",
11− output.status
12− );
13− let stdout = String::from_utf8_lossy(&output.stdout);
14− assert!(
15− stdout.contains("vibebox"),
16− "expected --version output to contain 'vibebox', got: {}",
17− stdout
18− );
19−}
20−
21−#[test]
22−fn list_reports_no_sessions_when_empty() {
23− let temp = TempDir::new().unwrap();
24− let home = temp.path().join("home");
25− let project = temp.path().join("project");
26− std::fs::create_dir_all(&home).unwrap();
27− std::fs::create_dir_all(&project).unwrap();
28−
29− let output = cargo_bin_cmd!("vibebox")
30− .current_dir(&project)
31− .env("HOME", &home)
32− .arg("list")
33− .output()
34− .unwrap();
35− print_output("e2e_cli", &output);
36− assert!(
37− output.status.success(),
38− "expected success, got status: {}",
39− output.status
40− );
41− let stdout = String::from_utf8_lossy(&output.stdout);
42− assert!(
43− stdout.contains("No sessions were found."),
44− "expected empty sessions message, got: {}",
45− stdout
46− );
47−}
48−
49−fn print_output(prefix: &str, output: &std::process::Output) {
50− let stdout = String::from_utf8_lossy(&output.stdout);
51− for line in stdout.lines() {
52− println!("[{}] {}", prefix, line);
53− }
54− let stderr = String::from_utf8_lossy(&output.stderr);
55− for line in stderr.lines() {
56− eprintln!("[{}] {}", prefix, line);
57− }
58−}
tests/e2e_vm.rsdeleted−278
@@ -1,278 +0,0 @@
1−use std::{
2− fs,
3− io::{BufRead, BufReader, Read},
4− path::{Path, PathBuf},
5− process::{Child, Command, Stdio},
6− thread,
7− time::{Duration, Instant},
8−};
9−
10−use tempfile::TempDir;
11−
12−#[cfg(target_os = "macos")]
13−#[test]
14−#[ignore]
15−fn vm_boots_and_runs_command() {
16− if std::env::var("VIBEBOX_E2E_VM").as_deref() != Ok("1") {
17− eprintln!("skipping: set VIBEBOX_E2E_VM=1 to run this test");
18− return;
19− }
20− if !virtualization_available() {
21− eprintln!("[e2e_vm] skipping: virtualization not available on this hardware");
22− return;
23− }
24−
25− let temp = TempDir::new().unwrap();
26− let home = temp.path().join("home");
27− let cache_home = temp.path().join("cache");
28− let project = temp.path().join("project");
29− fs::create_dir_all(&home).unwrap();
30− fs::create_dir_all(&cache_home).unwrap();
31− fs::create_dir_all(&project).unwrap();
32−
33− write_config(&project);
34−
35− let mut child = Command::new(assert_cmd::cargo_bin!("vibebox-supervisor"))
36− .current_dir(&project)
37− .env("HOME", &home)
38− .env("XDG_CACHE_HOME", &cache_home)
39− .env("VIBEBOX_INTERNAL", "1")
40− .stdout(Stdio::piped())
41− .stderr(Stdio::piped())
42− .spawn()
43− .unwrap();
44− if let Some(stdout) = child.stdout.take() {
45− spawn_prefix_reader("e2e_vm", "stdout", stdout);
46− }
47− if let Some(stderr) = child.stderr.take() {
48− spawn_prefix_reader("e2e_vm", "stderr", stderr);
49− }
50− let _child_guard = ChildGuard::new(child);
51−
52− log_line("e2e_vm", "waiting for vm manager socket");
53− let socket_path = project.join(".vibebox").join("vm.sock");
54− let _socket_guard = wait_for_socket(&socket_path, Duration::from_secs(30));
55− log_line("e2e_vm", "vm manager socket ready");
56−
57− log_line("e2e_vm", "waiting for vm ipv4");
58− let instance_path = project.join(".vibebox").join("instance.toml");
59− let (ip, user) = wait_for_vm_ip(&instance_path, Duration::from_secs(180));
60− log_line("e2e_vm", &format!("vm ipv4={ip} user={user}"));
61−
62− let ssh_key = project.join(".vibebox").join("ssh_key");
63− wait_for_file(&ssh_key, Duration::from_secs(30));
64− log_line("e2e_vm", "ssh key ready");
65−
66− let output = wait_for_ssh_command(&ssh_key, &user, &ip, Duration::from_secs(90));
67− print_output("e2e_vm", &output);
68− let stdout = String::from_utf8_lossy(&output.stdout);
69− assert!(
70− stdout.contains("Linux"),
71− "expected ssh command output to contain 'Linux', got: {}",
72− stdout
73− );
74−}
75−
76−#[cfg(not(target_os = "macos"))]
77−#[test]
78−#[ignore]
79−fn vm_boots_and_runs_command() {
80− eprintln!("skipping: vm e2e test requires macOS virtualization");
81−}
82−
83−struct ChildGuard {
84− child: Option<Child>,
85−}
86−
87−impl ChildGuard {
88− fn new(child: Child) -> Self {
89− Self { child: Some(child) }
90− }
91−}
92−
93−impl Drop for ChildGuard {
94− fn drop(&mut self) {
95− if let Some(child) = &mut self.child {
96− let _ = child.kill();
97− let _ = child.wait();
98− }
99− }
100−}
101−
102−struct SocketGuard {
103− _path: PathBuf,
104− _stream: std::os::unix::net::UnixStream,
105−}
106−
107−fn write_config(project: &Path) {
108− let config = r#"[box]
109−cpu_count = 2
110−ram_mb = 2048
111−disk_gb = 5
112−mounts = []
113−
114−[supervisor]
115−auto_shutdown_ms = 120000
116−"#;
117− fs::write(project.join("vibebox.toml"), config).unwrap();
118−}
119−
120−fn wait_for_socket(path: &Path, timeout: Duration) -> SocketGuard {
121− let start = Instant::now();
122− loop {
123− if let Ok(stream) = std::os::unix::net::UnixStream::connect(path) {
124− return SocketGuard {
125− _path: path.to_path_buf(),
126− _stream: stream,
127− };
128− }
129− if start.elapsed() > timeout {
130− panic!(
131− "timed out waiting for vm manager socket at {}",
132− path.display()
133− );
134− }
135− thread::sleep(Duration::from_millis(200));
136− }
137−}
138−
139−fn wait_for_vm_ip(instance_path: &Path, timeout: Duration) -> (String, String) {
140− let start = Instant::now();
141− loop {
142− if let Ok(raw) = fs::read_to_string(instance_path)
143− && let Ok(value) = toml::from_str::<toml::Value>(&raw)
144− {
145− let ip = value
146− .get("vm_ipv4")
147− .and_then(|v| v.as_str())
148− .map(|s| s.trim().to_string())
149− .filter(|s| !s.is_empty());
150− if let Some(ip) = ip {
151− let user = value
152− .get("ssh_user")
153− .and_then(|v| v.as_str())
154− .map(|s| s.trim().to_string())
155− .filter(|s| !s.is_empty())
156− .unwrap_or_else(|| "vibecoder".to_string());
157− return (ip, user);
158− }
159− }
160− if start.elapsed() > timeout {
161− panic!(
162− "timed out waiting for vm_ipv4 in {}",
163− instance_path.display()
164− );
165− }
166− thread::sleep(Duration::from_millis(500));
167− }
168−}
169−
170−fn wait_for_file(path: &Path, timeout: Duration) {
171− let start = Instant::now();
172− loop {
173− if path.exists() {
174− return;
175− }
176− if start.elapsed() > timeout {
177− panic!("timed out waiting for file {}", path.display());
178− }
179− thread::sleep(Duration::from_millis(200));
180− }
181−}
182−
183−fn wait_for_ssh_command(
184− ssh_key: &Path,
185− user: &str,
186− ip: &str,
187− timeout: Duration,
188−) -> std::process::Output {
189− let start = Instant::now();
190− loop {
191− let output = Command::new("ssh")
192− .args([
193− "-i",
194− ssh_key.to_str().unwrap_or(".vibebox/ssh_key"),
195− "-o",
196− "IdentitiesOnly=yes",
197− "-o",
198− "StrictHostKeyChecking=no",
199− "-o",
200− "UserKnownHostsFile=/dev/null",
201− "-o",
202− "GlobalKnownHostsFile=/dev/null",
203− "-o",
204− "PasswordAuthentication=no",
205− "-o",
206− "BatchMode=yes",
207− "-o",
208− "LogLevel=ERROR",
209− "-o",
210− "ConnectTimeout=5",
211− &format!("{user}@{ip}"),
212− "uname -s",
213− ])
214− .output()
215− .unwrap();
216− if output.status.success() {
217− return output;
218− }
219− if start.elapsed() > timeout {
220− let stderr = String::from_utf8_lossy(&output.stderr);
221− panic!("ssh command failed and timed out: {}", stderr);
222− }
223− thread::sleep(Duration::from_millis(1000));
224− }
225−}
226−
227−fn spawn_prefix_reader(
228− label: &'static str,
229− stream: &'static str,
230− reader: impl Read + Send + 'static,
231−) {
232− thread::spawn(move || {
233− let buf = BufReader::new(reader);
234− for line in buf.lines() {
235− match line {
236− Ok(line) => {
237− println!("[{}][{}] {}", label, stream, line);
238− }
239− Err(err) => {
240− eprintln!("[{}][{}] read error: {}", label, stream, err);
241− break;
242− }
243− }
244− }
245− });
246−}
247−
248−fn log_line(prefix: &str, message: &str) {
249− println!("[{}] {}", prefix, message);
250−}
251−
252−fn print_output(prefix: &str, output: &std::process::Output) {
253− let stdout = String::from_utf8_lossy(&output.stdout);
254− for line in stdout.lines() {
255− println!("[{}] {}", prefix, line);
256− }
257− let stderr = String::from_utf8_lossy(&output.stderr);
258− for line in stderr.lines() {
259− eprintln!("[{}] {}", prefix, line);
260− }
261−}
262−
263−fn virtualization_available() -> bool {
264− let output = Command::new("sysctl")
265− .args(["-n", "kern.hv_support"])
266− .output();
267− match output {
268− Ok(output) if output.status.success() => {
269− let value = String::from_utf8_lossy(&output.stdout);
270− match value.trim() {
271− "1" => true,
272− "0" => false,
273− _ => true,
274− }
275− }
276− _ => true,
277− }
278−}
tests/e2e_vm_mock.rsdeleted−455
@@ -1,455 +0,0 @@
1−#![cfg(all(feature = "mock-vm", target_os = "macos"))]
2−
3−use std::{
4− fs,
5− io::{BufRead, BufReader, Read},
6− os::unix::net::UnixStream,
7− path::{Path, PathBuf},
8− process::{Child, Command, Stdio},
9− sync::mpsc,
10− thread,
11− time::{Duration, Instant},
12−};
13−
14−use tempfile::TempDir;
15−
16−#[test]
17−fn mock_vm_allows_refcount_concurrency() {
18− let temp = TempDir::new().unwrap();
19− let mut supervisor = spawn_supervisor(&temp, 0, 1200, "e2e_vm_mock".to_string());
20−
21− supervisor.clients = connect_clients(
22− &supervisor.socket_path,
23− 12,
24− Duration::from_secs(2),
25− true,
26− "e2e_vm_mock",
27− );
28− log_line("e2e_vm_mock", "connected 12 clients");
29−
30− assert_manager_alive_for(
31− &mut supervisor.child,
32− Duration::from_millis(900),
33− "vm manager exited while clients active",
34− );
35−
36− let remaining = supervisor.clients.split_off(6);
37− supervisor.clients = remaining;
38− log_line("e2e_vm_mock", "dropped 6 clients");
39− assert_manager_alive_for(
40− &mut supervisor.child,
41− Duration::from_millis(900),
42− "vm manager exited while clients active",
43− );
44−
45− supervisor.clients.clear();
46− log_line("e2e_vm_mock", "dropped remaining clients");
47− wait_for_exit(&mut supervisor.child, Duration::from_secs(10));
48− let status = supervisor.child.wait().unwrap();
49− assert!(status.success(), "vm manager exited with {status}");
50−}
51−
52−#[test]
53−fn mock_vm_many_managers_many_clients() {
54− let temp = TempDir::new().unwrap();
55− let mut supervisors = Vec::new();
56−
57− for idx in 0..3 {
58− supervisors.push(spawn_supervisor(
59− &temp,
60− idx + 1,
61− 1400,
62− format!("e2e_vm_mock_{idx}"),
63− ));
64− }
65−
66− for supervisor in &mut supervisors {
67− supervisor.clients = connect_clients(
68− &supervisor.socket_path,
69− 8,
70− Duration::from_secs(2),
71− true,
72− "e2e_vm_mock",
73− );
74− }
75− log_line("e2e_vm_mock", "connected 8 clients per manager");
76−
77− for supervisor in &mut supervisors {
78− assert_manager_alive_for(
79− &mut supervisor.child,
80− Duration::from_millis(900),
81− "manager exited while clients active",
82− );
83− }
84−
85− supervisors[0].clients.clear();
86− log_line("e2e_vm_mock", "dropped all clients for manager 0");
87− wait_for_exit(&mut supervisors[0].child, Duration::from_secs(10));
88− let status = supervisors[0].child.wait().unwrap();
89− assert!(status.success(), "manager 0 exited with {status}");
90−
91− for supervisor in supervisors.iter_mut().skip(1) {
92− assert_manager_alive_for(
93− &mut supervisor.child,
94− Duration::from_millis(900),
95− "another manager exited early",
96− );
97− }
98−
99− for supervisor in supervisors.iter_mut().skip(1) {
100− supervisor.clients.clear();
101− }
102− log_line("e2e_vm_mock", "dropped remaining clients");
103− for supervisor in supervisors.iter_mut().skip(1) {
104− wait_for_exit(&mut supervisor.child, Duration::from_secs(10));
105− let status = supervisor.child.wait().unwrap();
106− assert!(status.success(), "manager exited with {status}");
107− }
108−}
109−
110−#[test]
111−fn mock_vm_monkey_processes() {
112− let temp = TempDir::new().unwrap();
113− let mut rng = Lcg::new(0x5eed_f00d_dead_beef);
114− let mut supervisors = Vec::new();
115− let mut next_id = 0usize;
116− let max_supervisors = 4usize;
117− let steps = 25usize;
118−
119− supervisors.push(spawn_supervisor(
120− &temp,
121− next_id,
122− 1200,
123− format!("e2e_vm_monkey_{next_id}"),
124− ));
125− next_id += 1;
126−
127− for step in 0..steps {
128− prune_exited_supervisors(&mut supervisors, "e2e_vm_monkey");
129− let roll = rng.gen_range(100);
130− log_line(
131− "e2e_vm_monkey",
132− &format!("step {step} roll={roll} supervisors={}", supervisors.len()),
133− );
134− if roll < 20 && supervisors.len() < max_supervisors {
135− supervisors.push(spawn_supervisor(
136− &temp,
137− next_id,
138− 1200,
139− format!("e2e_vm_monkey_{next_id}"),
140− ));
141− log_line("e2e_vm_monkey", &format!("spawned supervisor {next_id}"));
142− next_id += 1;
143− } else if roll < 45 && !supervisors.is_empty() {
144− let idx = rng.gen_range(supervisors.len());
145− let mut supervisor = supervisors.swap_remove(idx);
146− log_line(
147− "e2e_vm_monkey",
148− &format!("killing supervisor {}", supervisor.label),
149− );
150− kill_supervisor(&mut supervisor, Duration::from_secs(5));
151− } else if roll < 80 && !supervisors.is_empty() {
152− let idx = rng.gen_range(supervisors.len());
153− let burst = 1 + rng.gen_range(3);
154− let new_clients = connect_clients(
155− &supervisors[idx].socket_path,
156− burst,
157− Duration::from_secs(1),
158− false,
159− "e2e_vm_monkey",
160− );
161− supervisors[idx].clients.extend(new_clients);
162− log_line(
163− "e2e_vm_monkey",
164− &format!("connected {burst} clients to {}", supervisors[idx].label),
165− );
166− } else if !supervisors.is_empty() {
167− let idx = rng.gen_range(supervisors.len());
168− if !supervisors[idx].clients.is_empty() {
169− let len = supervisors[idx].clients.len();
170− let drop_count = 1 + rng.gen_range(len);
171− supervisors[idx].clients.drain(0..drop_count.min(len));
172− log_line(
173− "e2e_vm_monkey",
174− &format!(
175− "dropped {drop_count} clients from {}",
176− supervisors[idx].label
177− ),
178− );
179− }
180− }
181− thread::sleep(Duration::from_millis(200));
182− }
183−
184− log_line("e2e_vm_monkey", "final cleanup");
185− for supervisor in supervisors.iter_mut() {
186− shutdown_supervisor(supervisor, Duration::from_secs(10));
187− }
188−}
189−
190−#[test]
191−fn mock_vm_exits_without_clients() {
192− let temp = TempDir::new().unwrap();
193− let mut supervisor = spawn_supervisor(&temp, 99, 300, "e2e_vm_no_clients".to_string());
194− wait_for_exit(&mut supervisor.child, Duration::from_secs(5));
195− let status = supervisor.child.wait().unwrap();
196− assert!(status.success(), "vm manager exited with {status}");
197−}
198−
199−#[test]
200−fn mock_vm_reconnect_resets_shutdown() {
201− let temp = TempDir::new().unwrap();
202− let mut supervisor = spawn_supervisor(&temp, 100, 800, "e2e_vm_reconnect".to_string());
203−
204− supervisor.clients = connect_clients(
205− &supervisor.socket_path,
206− 1,
207− Duration::from_secs(2),
208− true,
209− "e2e_vm_reconnect",
210− );
211− supervisor.clients.clear();
212− thread::sleep(Duration::from_millis(400));
213−
214− supervisor.clients = connect_clients(
215− &supervisor.socket_path,
216− 1,
217− Duration::from_secs(2),
218− true,
219− "e2e_vm_reconnect",
220− );
221− assert_manager_alive_for(
222− &mut supervisor.child,
223− Duration::from_millis(600),
224− "vm manager exited despite reconnect",
225− );
226−
227− supervisor.clients.clear();
228− wait_for_exit(&mut supervisor.child, Duration::from_secs(10));
229− let status = supervisor.child.wait().unwrap();
230− assert!(status.success(), "vm manager exited with {status}");
231−}
232−
233−struct Supervisor {
234− child: Child,
235− socket_path: PathBuf,
236− clients: Vec<UnixStream>,
237− label: String,
238−}
239−
240−fn write_config(project: &Path, auto_shutdown_ms: u64) {
241− let config = format!(
242− r#"[box]
243−cpu_count = 2
244−ram_mb = 2048
245−disk_gb = 5
246−mounts = []
247−
248−[supervisor]
249−auto_shutdown_ms = {auto_shutdown_ms}
250−"#
251− );
252− fs::write(project.join("vibebox.toml"), config).unwrap();
253−}
254−
255−fn spawn_supervisor(
256− temp: &TempDir,
257− idx: usize,
258− auto_shutdown_ms: u64,
259− label: String,
260−) -> Supervisor {
261− let home = temp.path().join(format!("home-{idx}"));
262− let cache_home = temp.path().join(format!("cache-{idx}"));
263− let project = temp.path().join(format!("project-{idx}"));
264− fs::create_dir_all(&home).unwrap();
265− fs::create_dir_all(&cache_home).unwrap();
266− fs::create_dir_all(&project).unwrap();
267− write_config(&project, auto_shutdown_ms);
268−
269− let mut child = Command::new(assert_cmd::cargo_bin!("vibebox-supervisor"))
270− .current_dir(&project)
271− .env("HOME", &home)
272− .env("XDG_CACHE_HOME", &cache_home)
273− .env("VIBEBOX_INTERNAL", "1")
274− .stdout(Stdio::piped())
275− .stderr(Stdio::piped())
276− .spawn()
277− .unwrap();
278− if let Some(stdout) = child.stdout.take() {
279− spawn_prefix_reader(label.clone(), "stdout", stdout);
280− }
281− if let Some(stderr) = child.stderr.take() {
282− spawn_prefix_reader(label.clone(), "stderr", stderr);
283− }
284−
285− let socket_path = project.join(".vibebox").join("vm.sock");
286− wait_for_socket(&socket_path, Duration::from_secs(10));
287−
288− Supervisor {
289− child,
290− socket_path,
291− clients: Vec::new(),
292− label,
293− }
294−}
295−
296−fn connect_clients(
297− socket_path: &Path,
298− count: usize,
299− timeout: Duration,
300− require_all: bool,
301− label: &str,
302−) -> Vec<UnixStream> {
303− let (tx, rx) = mpsc::channel();
304− let mut handles = Vec::with_capacity(count);
305− for _ in 0..count {
306− let path = socket_path.to_path_buf();
307− let tx = tx.clone();
308− handles.push(thread::spawn(move || {
309− let stream = connect_client_with_retry(&path, timeout);
310− let _ = tx.send(stream);
311− }));
312− }
313− drop(tx);
314− let mut clients = Vec::with_capacity(count);
315− for stream in rx.into_iter().flatten() {
316− clients.push(stream);
317− }
318− for handle in handles {
319− handle.join().unwrap();
320− }
321− if require_all && clients.len() != count {
322− panic!(
323− "client count mismatch: expected {count} got {}",
324− clients.len()
325− );
326− }
327− if !require_all && clients.len() != count {
328− log_line(
329− label,
330− &format!("connected {} of {count} clients", clients.len()),
331− );
332− }
333− clients
334−}
335−
336−fn connect_client_with_retry(path: &Path, timeout: Duration) -> Option<UnixStream> {
337− let start = Instant::now();
338− loop {
339− match UnixStream::connect(path) {
340− Ok(stream) => return Some(stream),
341− Err(_) => {
342− if start.elapsed() > timeout {
343− return None;
344− }
345− thread::sleep(Duration::from_millis(50));
346− }
347− }
348− }
349−}
350−
351−fn wait_for_socket(path: &Path, timeout: Duration) {
352− let start = Instant::now();
353− loop {
354− if UnixStream::connect(path).is_ok() {
355− return;
356− }
357− if start.elapsed() > timeout {
358− panic!("timed out waiting for socket {}", path.display());
359− }
360− thread::sleep(Duration::from_millis(100));
361− }
362−}
363−
364−fn assert_manager_alive(child: &mut Child, message: &str) {
365− assert!(child.try_wait().unwrap().is_none(), "{message}");
366−}
367−
368−fn assert_manager_alive_for(child: &mut Child, duration: Duration, message: &str) {
369− let start = Instant::now();
370− while start.elapsed() < duration {
371− assert_manager_alive(child, message);
372− thread::sleep(Duration::from_millis(100));
373− }
374−}
375−
376−fn kill_supervisor(supervisor: &mut Supervisor, timeout: Duration) {
377− supervisor.clients.clear();
378− let _ = supervisor.child.kill();
379− wait_for_exit(&mut supervisor.child, timeout);
380− let _ = supervisor.child.wait();
381−}
382−
383−fn prune_exited_supervisors(supervisors: &mut Vec<Supervisor>, label: &str) {
384− supervisors.retain_mut(|supervisor| {
385− if supervisor.child.try_wait().unwrap().is_some() {
386− log_line(label, &format!("removed exited {}", supervisor.label));
387− false
388− } else {
389− true
390− }
391− });
392−}
393−
394−fn shutdown_supervisor(supervisor: &mut Supervisor, timeout: Duration) {
395− supervisor.clients.clear();
396− wait_for_exit(&mut supervisor.child, timeout);
397− if supervisor.child.try_wait().unwrap().is_none() {
398− let _ = supervisor.child.kill();
399− let _ = supervisor.child.wait();
400− }
401−}
402−
403−fn wait_for_exit(child: &mut Child, timeout: Duration) {
404− let start = Instant::now();
405− loop {
406− if child.try_wait().unwrap().is_some() {
407− return;
408− }
409− if start.elapsed() > timeout {
410− panic!("timed out waiting for mock vm supervisor exit");
411− }
412− thread::sleep(Duration::from_millis(200));
413− }
414−}
415−
416−fn spawn_prefix_reader(label: String, stream: &'static str, reader: impl Read + Send + 'static) {
417− thread::spawn(move || {
418− let buf = BufReader::new(reader);
419− for line in buf.lines() {
420− match line {
421− Ok(line) => println!("[{}][{}] {}", label, stream, line),
422− Err(err) => {
423− eprintln!("[{}][{}] read error: {}", label, stream, err);
424− break;
425− }
426− }
427− }
428− });
429−}
430−
431−fn log_line(prefix: &str, message: &str) {
432− println!("[{}] {}", prefix, message);
433−}
434−
435−struct Lcg {
436− state: u64,
437−}
438−
439−impl Lcg {
440− fn new(seed: u64) -> Self {
441− Self { state: seed }
442− }
443−
444− fn next_u32(&mut self) -> u32 {
445− self.state = self.state.wrapping_mul(6364136223846793005).wrapping_add(1);
446− (self.state >> 32) as u32
447− }
448−
449− fn gen_range(&mut self, upper: usize) -> usize {
450− if upper == 0 {
451− return 0;
452− }
453− (self.next_u32() as usize) % upper
454− }
455−}
tests/explain_integration.rsdeleted−113
@@ -1,113 +0,0 @@
1−use std::{env, ffi::OsString, fs, path::Path, sync::Mutex};
2−
3−use tempfile::TempDir;
4−
5−use vibebox::session_manager::INSTANCE_DIR_NAME;
6−use vibebox::{config, explain};
7−
8−static ENV_MUTEX: Mutex<()> = Mutex::new(());
9−
10−struct EnvGuard {
11− key: &'static str,
12− previous: Option<OsString>,
13−}
14−
15−impl EnvGuard {
16− fn set(key: &'static str, value: &Path) -> Self {
17− let previous = env::var_os(key);
18− unsafe {
19− env::set_var(key, value);
20− }
21− Self { key, previous }
22− }
23−}
24−
25−impl Drop for EnvGuard {
26− fn drop(&mut self) {
27− match &self.previous {
28− Some(value) => unsafe {
29− env::set_var(self.key, value);
30− },
31− None => unsafe {
32− env::remove_var(self.key);
33− },
34− }
35− }
36−}
37−
38−#[test]
39−fn build_mount_rows_includes_defaults_and_custom_mounts() {
40− let _lock = ENV_MUTEX.lock().unwrap();
41− let temp = TempDir::new().unwrap();
42− let home = temp.path().join("home");
43− let project = home.join("project");
44− let cache_home = home.join("cache");
45− fs::create_dir_all(&project).unwrap();
46− fs::create_dir_all(&cache_home).unwrap();
47−
48− let _home_guard = EnvGuard::set("HOME", &home);
49− let _cache_guard = EnvGuard::set("XDG_CACHE_HOME", &cache_home);
50−
51− let box_cfg = config::BoxConfig {
52− mounts: vec!["data:~/data:read-only".to_string()],
53− ..Default::default()
54− };
55− let cfg = config::Config {
56− box_cfg,
57− supervisor: config::SupervisorConfig::default(),
58− };
59−
60− let rows = explain::build_mount_rows(&project, &cfg).unwrap();
61−
62− assert_eq!(rows.len(), 3);
63− assert_eq!(rows[0].host, "~/project");
64− assert_eq!(rows[0].guest, "~/project");
65− assert_eq!(rows[0].mode, "read-write");
66− assert_eq!(rows[0].default_mount, "yes");
67−
68− assert_eq!(rows[1].host, "~/cache/vibebox/.guest-mise-cache");
69− assert_eq!(rows[1].guest, "/root/.local/share/mise");
70− assert_eq!(rows[1].mode, "read-write");
71− assert_eq!(rows[1].default_mount, "yes");
72−
73− assert_eq!(rows[2].host, "~/project/data");
74− assert_eq!(rows[2].guest, "~/data");
75− assert_eq!(rows[2].mode, "read-only");
76− assert_eq!(rows[2].default_mount, "no");
77−}
78−
79−#[test]
80−fn build_network_rows_pending_without_instance_file() {
81− let temp = TempDir::new().unwrap();
82− let project = temp.path().join("project");
83− fs::create_dir_all(&project).unwrap();
84−
85− let rows = explain::build_network_rows(&project).unwrap();
86−
87− assert_eq!(rows.len(), 1);
88− assert_eq!(rows[0].network_type, "NAT");
89− assert_eq!(rows[0].vm_ip, "-");
90− assert_eq!(rows[0].host_to_vm, "ssh: <pending>:22");
91− assert_eq!(rows[0].vm_to_host, "none");
92−}
93−
94−#[test]
95−fn build_network_rows_uses_instance_vm_ip() {
96− let temp = TempDir::new().unwrap();
97− let project = temp.path().join("project");
98− let instance_dir = project.join(INSTANCE_DIR_NAME);
99− fs::create_dir_all(&instance_dir).unwrap();
100− fs::write(
101− instance_dir.join("instance.toml"),
102− "vm_ipv4 = \"10.1.2.3\"\n",
103− )
104− .unwrap();
105−
106− let rows = explain::build_network_rows(&project).unwrap();
107−
108− assert_eq!(rows.len(), 1);
109− assert_eq!(rows[0].network_type, "NAT");
110− assert_eq!(rows[0].vm_ip, "10.1.2.3");
111− assert_eq!(rows[0].host_to_vm, "ssh: 10.1.2.3:22");
112− assert_eq!(rows[0].vm_to_host, "none");
113−}