@moondeck/station 0.0.1 → 1.0.1

package/lib/machine-project-env-loader.ts

@@ -0,0 +1,152 @@
+import { lstatSync, readFileSync } from "node:fs";
+import { dirname, resolve } from "node:path";
+import { fileURLToPath } from "node:url";
+
+import type { TaskEnvironmentHandle } from "./task-environment/types";
+
+const STEP_TIMEOUT_MS = 60_000;
+const STEP_OUTPUT_BYTES = 256 * 1024;
+
+const INSTALL_ROOT_ASSET_SCRIPT = String.raw`set -eu
+destination=$1
+mode=$2
+case "$destination:$mode" in
+  /usr/local/share/uai/env-hook.sh:0555|/usr/local/bin/uai-env-exec:0555|/usr/local/share/uai/uai-task-forwarder.mjs:0444) ;;
+  *) exit 1 ;;
+esac
+directory=${"$"}{destination%/*}
+[ ! -L "$directory" ] || exit 1
+[ ! -e "$directory" ] || [ -d "$directory" ] || exit 1
+/usr/bin/install -d -o root -g root -m 0755 "$directory"
+[ ! -L "$destination" ] || exit 1
+[ ! -e "$destination" ] || [ -f "$destination" ] || exit 1
+temporary=$(/usr/bin/mktemp "$directory/.uai-loader.XXXXXX")
+trap '/bin/rm -f -- "$temporary"' EXIT
+/bin/cat > "$temporary"
+/bin/chown root:root "$temporary"
+/bin/chmod "$mode" "$temporary"
+/bin/mv -f -- "$temporary" "$destination"
+trap - EXIT`;
+
+const INSTALL_MACHINE_ENV_STUBS_SCRIPT = String.raw`set -eu
+ensure_block() {
+  file=$1
+  line=$2
+  case "$file" in
+    /etc/bash.bashrc | /etc/profile.d/uai-env.sh) ;;
+    *) exit 1 ;;
+  esac
+  [ ! -L "$file" ] || exit 1
+  [ ! -e "$file" ] || [ -f "$file" ] || exit 1
+  directory=${"$"}{file%/*}
+  [ -d "$directory" ] && [ ! -L "$directory" ] || exit 1
+  temporary=$(/usr/bin/mktemp "$directory/.uai-env-stub.XXXXXX")
+  trap '/bin/rm -f -- "$temporary"' EXIT
+  if [ -f "$file" ]; then
+    /usr/bin/awk '
+      $0 == "# >>> uai env loader >>>" { skipping = 1; next }
+      $0 == "# <<< uai env loader <<<" { skipping = 0; next }
+      !skipping { print }
+    ' "$file" > "$temporary"
+  fi
+  {
+    printf '%s\n' '# >>> uai env loader >>>'
+    printf '%s\n' "$line"
+    printf '%s\n' '# <<< uai env loader <<<'
+  } >> "$temporary"
+  /bin/chown root:root "$temporary"
+  /bin/chmod 0644 "$temporary"
+  /bin/mv -f -- "$temporary" "$file"
+  trap - EXIT
+}
+
+ensure_block /etc/bash.bashrc '[ "${"$"}{UAI_ENV_HOOK-0}" != 1 ] || { . /usr/local/share/uai/env-hook.sh; __uai_env_sync; __uai_env_install_bash_preexec; }'
+ensure_block /etc/profile.d/uai-env.sh '[ "${"$"}{UAI_ENV_HOOK-0}" != 1 ] || { . /usr/local/share/uai/env-hook.sh; if [ -z "${"$"}{BASH_EXECUTION_STRING-}" ] || [ -z "${"$"}{BASH_ENV-}" ]; then __uai_env_sync; fi; }'`;
+
+function packagedLoaderAsset(relativePath: readonly string[]): Buffer {
+  const path = resolve(
+    dirname(fileURLToPath(import.meta.url)),
+    "..",
+    ...relativePath,
+  );
+  const metadata = lstatSync(path);
+  if (!metadata.isFile() || metadata.isSymbolicLink()) {
+    throw new Error(`packaged task env loader asset is unsafe: ${path}`);
+  }
+  return readFileSync(path);
+}
+
+async function installRootLoaderAsset(
+  handle: Pick<TaskEnvironmentHandle<unknown>, "exec">,
+  destination: string,
+  mode: "0444" | "0555",
+  bytes: Uint8Array,
+): Promise<void> {
+  const result = await handle.exec({
+    argv: [
+      "/bin/sh",
+      "-c",
+      INSTALL_ROOT_ASSET_SCRIPT,
+      "uai-loader-install",
+      destination,
+      mode,
+    ],
+    user: "root",
+    projectEnvProfile: "maintenance",
+    stdin: bytes,
+    timeoutMs: STEP_TIMEOUT_MS,
+    maxOutputBytes: STEP_OUTPUT_BYTES,
+  });
+  if (result.exitCode !== 0) {
+    throw new Error(
+      `task env loader asset install failed for ${destination}: ${Buffer.from(result.stderr).toString("utf8").trim()}`,
+    );
+  }
+}
+
+/** Root-owned, idempotent loader bootstrap for machine and fixed-sidecar tasks. */
+export async function installMachineProjectEnvLoader(
+  handle: Pick<TaskEnvironmentHandle<unknown>, "exec">,
+): Promise<void> {
+  await installRootLoaderAsset(
+    handle,
+    "/usr/local/share/uai/env-hook.sh",
+    "0555",
+    packagedLoaderAsset(["scripts", "agent", "env-hook.sh"]),
+  );
+  await installRootLoaderAsset(
+    handle,
+    "/usr/local/bin/uai-env-exec",
+    "0555",
+    packagedLoaderAsset(["scripts", "agent", "uai-env-exec.sh"]),
+  );
+  const stubs = await handle.exec({
+    argv: ["/bin/sh", "-c", INSTALL_MACHINE_ENV_STUBS_SCRIPT],
+    user: "root",
+    projectEnvProfile: "maintenance",
+    timeoutMs: STEP_TIMEOUT_MS,
+    maxOutputBytes: STEP_OUTPUT_BYTES,
+  });
+  if (stubs.exitCode !== 0) {
+    throw new Error(
+      `task env shell hook install failed: ${Buffer.from(stubs.stderr).toString("utf8").trim()}`,
+    );
+  }
+}
+
+/** Refresh the process asset before a direct-machine launch or recovery. */
+export function installMachineTaskForwarderAsset(
+  handle: Pick<TaskEnvironmentHandle<unknown>, "exec">,
+): Promise<void> {
+  return installRootLoaderAsset(
+    handle,
+    "/usr/local/share/uai/uai-task-forwarder.mjs",
+    "0444",
+    packagedLoaderAsset([
+      "images",
+      "standard",
+      "container",
+      "uai-task-forwarder.mjs",
+    ]),
+  );
+}