@opencode-cloud/core 1.0.8 → 3.0.15

package/Cargo.toml

@@ -1,8 +1,8 @@
 [package]
 name = "opencode-cloud-core"
-version = "1.0.8"
+version = "3.0.15"
 edition = "2024"
-rust-version = "1.85"
+rust-version = "1.88"
 license = "MIT"
 repository = "https://github.com/pRizz/opencode-cloud"
 homepage = "https://github.com/pRizz/opencode-cloud"
@@ -32,6 +32,7 @@ thiserror = "2"
 anyhow = "1"
 tracing = "0.1"
 console = "0.16"
+chrono = { version = "0.4", default-features = false, features = ["std", "clock"] }
 
 # NAPI dependencies (optional - only for Node bindings)
 napi = { version = "2", features = ["tokio_rt", "napi9"], optional = true }
@@ -46,10 +47,16 @@ tokio-retry = "0.3"
 indicatif = { version = "0.17", features = ["tokio", "futures"] }
 http-body-util = "0.1"
 bytes = "1.9"
+reqwest = { version = "0.12", default-features = false, features = ["rustls-tls", "json"] }
 
 # Platform service management (macOS)
 plist = "1.8"
 
+# Host management
+whoami = "1.5"
+ssh2-config-rs = "0.7.1"
+dirs = "6"
+
 [build-dependencies]
 napi-build = "2"
 

package/README.md

@@ -2,54 +2,82 @@
 
 [![CI](https://github.com/pRizz/opencode-cloud/actions/workflows/ci.yml/badge.svg)](https://github.com/pRizz/opencode-cloud/actions/workflows/ci.yml)
 [![crates.io](https://img.shields.io/crates/v/opencode-cloud.svg)](https://crates.io/crates/opencode-cloud)
-[![npm](https://img.shields.io/npm/v/opencode-cloud.svg)](https://www.npmjs.com/package/opencode-cloud)
+[![GHCR](https://img.shields.io/badge/ghcr.io-sandbox-blue?logo=github)](https://github.com/pRizz/opencode-cloud/pkgs/container/opencode-cloud-sandbox)
+[![Docker Hub](https://img.shields.io/docker/v/prizz/opencode-cloud-sandbox?label=docker&sort=semver)](https://hub.docker.com/r/prizz/opencode-cloud-sandbox)
 [![docs.rs](https://docs.rs/opencode-cloud/badge.svg)](https://docs.rs/opencode-cloud)
 [![MSRV](https://img.shields.io/badge/MSRV-1.85-blue.svg)](https://blog.rust-lang.org/2025/02/20/Rust-1.85.0.html)
 [![License: MIT](https://img.shields.io/badge/License-MIT-yellow.svg)](https://opensource.org/licenses/MIT)
 
-A production-ready toolkit for deploying [opencode](https://github.com/anomalyco/opencode) as a persistent cloud service.
+A production-ready toolkit for deploying and managing [opencode](https://github.com/anomalyco/opencode) as a persistent cloud service, **sandboxed inside a Docker container** for isolation and security.
+
+## Quick install (cargo)
+
+```bash
+cargo install opencode-cloud
+opencode-cloud --version
+```
 
 ## Features
 
-- Cross-platform CLI (`opencode-cloud` / `occ`)
-- Docker container management
-- Service lifecycle commands (start, stop, status, logs)
-- Platform service integration (systemd/launchd)
-- XDG-compliant configuration
-- Singleton enforcement (one instance per host)
+- **Sandboxed execution** - opencode runs inside a Docker container, isolated from your host system
+- **Persistent environment** - Your projects, settings, and shell history persist across restarts
+- **Cross-platform CLI** (`opencode-cloud` / `occ`) - Works on Linux and macOS
+- **Service lifecycle commands** - start, stop, restart, status, logs
+- **Platform service integration** - systemd (Linux) / launchd (macOS) for auto-start on boot
+- **Remote host management** - Manage opencode containers on remote servers via SSH
+- **Web-based admin** - Cockpit integration for container administration
 
-## Requirements
+## How it works
 
-### For npm installation
+opencode-cloud runs opencode inside a Docker container, providing:
 
-- **Node.js 20+**
-- **Rust 1.82+** (for compiling native bindings)
-  - Install via [rustup](https://rustup.rs): `curl --proto '=https' --tlsv1.2 -sSf https://sh.rustup.rs | sh`
+- **Isolation** - opencode and its AI-generated code run in a sandbox, separate from your host system
+- **Reproducibility** - The container includes a full development environment (languages, tools, runtimes)
+- **Persistence** - Docker volumes preserve your work across container restarts and updates
+- **Security** - Network exposure is opt-in; by default, the service only binds to localhost
 
-### For cargo installation
+The CLI manages the container lifecycle, so you don't need to interact with Docker directly.
 
-- **Rust 1.82+**
+## Docker Images
 
-## Installation
+The sandbox container image is named **`opencode-cloud-sandbox`** (not `opencode-cloud`) to clearly distinguish it from the CLI tool. The CLI (`opencode-cloud` / `occ`) deploys and manages this sandbox container.
+
+The image is published to both registries:
 
-### Via npm (compiles from source)
+| Registry | Image |
+|----------|-------|
+| GitHub Container Registry | [`ghcr.io/prizz/opencode-cloud-sandbox`](https://github.com/pRizz/opencode-cloud/pkgs/container/opencode-cloud-sandbox) |
+| Docker Hub | [`prizz/opencode-cloud-sandbox`](https://hub.docker.com/r/prizz/opencode-cloud-sandbox) |
 
+Pull commands:
+
+Docker Hub:
 ```bash
-npx opencode-cloud --version
+docker pull prizz/opencode-cloud-sandbox:latest
 ```
 
-Or install globally:
+GitHub Container Registry:
+```bash
+docker pull ghcr.io/prizz/opencode-cloud-sandbox:latest
+```
 
+**For most users:** Just use the CLI - it handles image pulling/building automatically:
 ```bash
-npm install -g opencode-cloud
-occ --version
+occ start  # Pulls or builds the image as needed
 ```
 
-### Via cargo
+## Requirements
+
+- **Rust 1.85+** - Install via [rustup](https://rustup.rs): `curl --proto '=https' --tlsv1.2 -sSf https://sh.rustup.rs | sh`
+- **Docker** - For running the opencode container
+
+## Installation
+
+### Via cargo (recommended)
 
 ```bash
 cargo install opencode-cloud
-opencode-cloud --version
+occ --version
 ```
 
 ### From source
@@ -67,7 +95,7 @@ cargo run -p opencode-cloud -- --version
 # Show version
 occ --version
 
-# Start the service (builds image on first run)
+# Start the service (builds Docker container on first run, ~10-15 min)
 occ start
 
 # Start on a custom port
@@ -165,15 +193,13 @@ just lint
 ## Architecture
 
 This is a monorepo with:
-- `packages/core` - Rust core library with NAPI-RS bindings
-- `packages/cli-rust` - Rust CLI binary
-- `packages/cli-node` - Node.js CLI wrapper (calls into core via NAPI)
-
-The npm package compiles the Rust core on install (no prebuilt binaries).
+- `packages/core` - Rust core library
+- `packages/cli-rust` - Rust CLI binary (recommended)
+- `packages/cli-node` - Node.js CLI (deprecated, directs users to cargo install)
 
 ### Cargo.toml Sync Requirement
 
-The `packages/core/Cargo.toml` file must use **explicit values** rather than `workspace = true` references. This is because when users install the npm package, they only get `packages/core/` without the workspace root `Cargo.toml`, so workspace inheritance would fail.
+The `packages/core/Cargo.toml` file must use **explicit values** rather than `workspace = true` references.
 
 When updating package metadata (version, edition, rust-version, etc.), keep both files in sync:
 - `Cargo.toml` (workspace root)

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@opencode-cloud/core",
-  "version": "1.0.8",
+  "version": "3.0.15",
   "description": "Core NAPI bindings for opencode-cloud (internal package)",
   "main": "index.js",
   "types": "index.d.ts",

package/src/config/mod.rs

@@ -5,6 +5,7 @@
 
 pub mod paths;
 pub mod schema;
+pub mod validation;
 
 use std::fs::{self, File};
 use std::io::{Read, Write};
@@ -13,8 +14,12 @@ use std::path::PathBuf;
 use anyhow::{Context, Result};
 use jsonc_parser::parse_to_serde_value;
 
-pub use paths::{get_config_dir, get_config_path, get_data_dir, get_pid_path};
-pub use schema::Config;
+pub use paths::{get_config_dir, get_config_path, get_data_dir, get_hosts_path, get_pid_path};
+pub use schema::{Config, validate_bind_address};
+pub use validation::{
+    ValidationError, ValidationWarning, display_validation_error, display_validation_warning,
+    validate_config,
+};
 
 /// Ensure the config directory exists
 ///
@@ -84,7 +89,7 @@ pub fn load_config() -> Result<Config> {
 
     // Parse JSONC (JSON with comments)
     let parsed_value = parse_to_serde_value(&contents, &Default::default())
-        .map_err(|e| anyhow::anyhow!("Invalid JSONC in config file: {}", e))?
+        .map_err(|e| anyhow::anyhow!("Invalid JSONC in config file: {e}"))?
         .ok_or_else(|| anyhow::anyhow!("Config file is empty"))?;
 
     // Deserialize into Config struct (deny_unknown_fields will reject unknown keys)

package/src/config/paths.rs

@@ -72,6 +72,13 @@ pub fn get_pid_path() -> Option<PathBuf> {
     get_data_dir().map(|d| d.join("opencode-cloud.pid"))
 }
 
+/// Get the full path to the hosts configuration file
+///
+/// Returns: `{config_dir}/hosts.json`
+pub fn get_hosts_path() -> Option<PathBuf> {
+    get_config_dir().map(|d| d.join("hosts.json"))
+}
+
 #[cfg(test)]
 mod tests {
     use super::*;
@@ -105,4 +112,11 @@ mod tests {
         assert!(path.is_some());
         assert!(path.unwrap().ends_with("opencode-cloud.pid"));
     }
+
+    #[test]
+    fn test_hosts_path_ends_with_hosts_json() {
+        let path = get_hosts_path();
+        assert!(path.is_some());
+        assert!(path.unwrap().ends_with("hosts.json"));
+    }
 }