@decocms/sandbox-controller 0.8.4 → 0.8.5

package/dist/index.d.ts

@@ -3783,6 +3783,15 @@ declare class FreestyleSandboxProvider implements SandboxProvider {
     private run;
     ensure(id: SandboxId, opts?: EnsureOptions): Promise<Sandbox>;
     private resume;
+    /**
+     * The bearer this VM was claimed with lives in daemon memory. A cold boot
+     * (Freestyle restarts a guest it finds wedged) brings the daemon back on the
+     * snapshot's sentinel with no config, so every call signed with the VM's own
+     * token gets 401. Offer the claim again: a daemon that still holds its token
+     * refuses the sentinel. One whose writes hang, while /health still answers, is
+     * the wedged guest itself, so reboot it and claim the fresh daemon.
+     */
+    private reclaim;
     private create;
     /**
      * The fork's first config: swap the snapshot's sentinel bearer for this

package/dist/index.js

@@ -6759,7 +6759,7 @@ var Freestyle = class {
 // ../sandbox/package.json
 var package_default = {
   name: "@decocms/sandbox",
-  version: "1.89.3",
+  version: "1.89.4",
   private: true,
   type: "module",
   description: "Sandbox runtime for isolated Studio tool execution",
@@ -7077,9 +7077,12 @@ running`).digest("hex").slice(0, 16)}`;
     });
   }
   async resume(found, opts) {
-    const { state } = await found.vm.data();
+    const { state, sourceSnapshotSlugAtCreate } = await found.vm.data();
     if (state !== "running") await found.vm.start();
     await this.waitForDaemon(found.daemon.url);
+    if (sourceSnapshotSlugAtCreate) {
+      await this.reclaim(found, sourceSnapshotSlugAtCreate, opts);
+    }
     if (opts.orgFsConfigJson) {
       await postOrgFsConfig(
         found.daemon.url,
@@ -7096,6 +7099,35 @@ running`).digest("hex").slice(0, 16)}`;
       );
     }
   }
+  /**
+   * The bearer this VM was claimed with lives in daemon memory. A cold boot
+   * (Freestyle restarts a guest it finds wedged) brings the daemon back on the
+   * snapshot's sentinel with no config, so every call signed with the VM's own
+   * token gets 401. Offer the claim again: a daemon that still holds its token
+   * refuses the sentinel. One whose writes hang, while /health still answers, is
+   * the wedged guest itself, so reboot it and claim the fresh daemon.
+   */
+  async reclaim(found, snapshotSlug, opts) {
+    const { url, token } = found.daemon;
+    const sentinel = this.sentinelToken(snapshotSlug);
+    const payload = this.configPayload(opts) ?? {};
+    try {
+      await postConfig(url, sentinel, payload, { rotateToken: token });
+      console.log(`[${LOG_LABEL2}] reclaimed ${url} after a reboot`);
+      return;
+    } catch (err) {
+      if (err instanceof ConfigRequestError) {
+        if (err.status === 401) return;
+        throw err;
+      }
+    }
+    console.warn(
+      `[${LOG_LABEL2}] ${url} answers /health but not writes; rebooting`
+    );
+    await found.vm.exec({ command: "reboot -f", timeoutMs: 1e4 }).catch(() => {
+    });
+    await this.claimDaemon(url, sentinel, token, payload);
+  }
   async create(handle, opts) {
     if (opts.env && Object.keys(opts.env).length > 0) {
       throw new Error(

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@decocms/sandbox-controller",
-  "version": "0.8.4",
+  "version": "0.8.5",
   "description": "Runs Studio agent sandboxes on Kubernetes, and serves them to a remote Studio.",
   "repository": {
     "type": "git",