7 Commits

Include renames

Author	SHA1	Message	Date
Gabriel Brown	9e7a8722f3	fix(worker): make user-box lifecycle concurrency-safe	2026-07-10 16:54:55 -04:00
Gabriel Brown	b09295570d	Fix terminal issue	2026-06-25 00:30:11 -04:00
Gabriel Brown	c6b27063a4	Phase 2: single per-user box container for every thread ... Every thread (agent turns + terminal + project commands) now execs into one persistent per-user container (spoon-box-{username}) instead of ephemeral docker run --rm — so the agent and terminal share the exact same running environment, filesystem, and in-session installs. - docker.ts: ensureUserContainer (persistent box) + streamExecInContainer/ runExecInContainer (docker exec, streaming) sharing a factored streamSubprocess - user-container.ts: reference-counted box lifecycle (held while any thread workspace is active or a terminal is connected; idle-reaped after SPOON_AGENT_BOX_IDLE_MS, default 30m) - worker.ts: runClaim acquires the box; codex turn + runProjectCommand exec into it; release on stop/PR/failure - terminal.ts: execs into the shared box (dockerode TTY) instead of a per-job container; materializeUserHome runs the dotfiles setup in the box - Verified: agent + terminal run in the same box, share fs, dotfiles + tmux load	2026-06-24 10:30:40 -04:00
Gabriel Brown	4c0de2cbf3	Worker: persistent per-user home + dotfiles materialization ... - Each job/terminal now mounts a persistent per-user home (${workdir}/homes/ {username}) at /home/{username}; the thread checkout lives at ~/Code/{spoon}/{branch} so every thread shows up as a folder in one home and dotfiles/tools/nvim plugins persist across sessions - docker.ts helpers + git.ts cloneRepository take container home/cwd + dir name (backward-compatible defaults); codex/opencode/terminal use the per-user paths - new user-environment.ts: fetchUserEnvironment (worker-token Convex action) + materializeUserHome — ensures ~/.bash_profile, applies the editable overlay files, and (hashed/idempotent) clones the public dotfiles repo + runs the setup command inside the job image - stopWorkspace no longer deletes the home; only the container stops - Verified: codex runs a real turn under the new /home/{user} + ~/Code layout; overlay .bashrc loads in the interactive shell	2026-06-24 09:51:39 -04:00
Gabriel Brown	65aae85369	Update formatting on worker	2026-06-24 08:40:52 -04:00
Gabriel Brown	fd48dcfc28	Not sure what this change is but hey	2026-06-24 08:38:23 -04:00
Gabriel Brown	c1263b2e69	Worker: interactive terminal WebSocket bridge (PTY in workspace container) ... - attachTerminalServer() upgrades /jobs/:id/terminal WS connections, verifying a short-lived job-scoped HMAC token (verifyTerminalToken) so the browser never holds the worker secret - Bridges the socket to a bash PTY via dockerode exec (Tty) in a persistent per-job shell container (spoon-agent-term-<id>) mounting the workspace; binary frames = stdin, JSON text frames = resize; idle containers reaped after 30m - New env: SPOON_AGENT_TERMINAL_IMAGE/SECRET/IDLE_MS (secret falls back to the shared worker internal token)	2026-06-24 08:16:39 -04:00