@task-handoff/node-agent 0.0.16 → 0.0.18

package/docker/entrypoint.sh

@@ -1,6 +1,48 @@
 #!/usr/bin/env bash
 set -euo pipefail
 
+load_private_config() {
+  local config_path="/run/task-handoff/instance-private-config.json"
+  if [ ! -f "${config_path}" ]; then
+    echo "Managed instance private configuration is missing." >&2
+    exit 78
+  fi
+  while IFS=$'\t' read -r key encoded; do
+    if [[ ! "${key}" =~ ^[A-Za-z_][A-Za-z0-9_]*$ ]]; then
+      echo "Managed instance private configuration contains an invalid environment key." >&2
+      exit 78
+    fi
+    local value
+    value="$(printf '%s' "${encoded}" | base64 --decode)"
+    export "${key}=${value}"
+  done < <(node -e '
+    const fs = require("node:fs");
+    const value = JSON.parse(fs.readFileSync(process.argv[1], "utf8"));
+    if (value.version !== 1 || typeof value.instanceCredential !== "string" || !value.instanceCredential || !value.environment || typeof value.environment !== "object" || Array.isArray(value.environment)) process.exit(78);
+    const environment = { ...value.environment, TASK_HANDOFF_REGISTRATION_TOKEN: value.instanceCredential, TASK_HANDOFF_PRIVATE_CONFIG_LOADED: "1" };
+    for (const [key, item] of Object.entries(environment)) {
+      if (!/^[A-Za-z_][A-Za-z0-9_]*$/.test(key) || typeof item !== "string") process.exit(78);
+      process.stdout.write(`${key}\t${Buffer.from(item).toString("base64")}\n`);
+    }
+  ' "${config_path}")
+  if [ "${TASK_HANDOFF_PRIVATE_CONFIG_LOADED:-}" != "1" ]; then
+    echo "Managed instance private configuration is invalid." >&2
+    exit 78
+  fi
+}
+
+if [ "$(id -u)" = "0" ] && [ "${TASK_HANDOFF_PRIVILEGE_DROPPED:-0}" != "1" ]; then
+  load_private_config
+  mkdir -p /data /home/agent
+  chown agent:agent /data /home/agent
+  if [ "${TASK_HANDOFF_WORKSPACE_MODE:-}" = "git-clone" ]; then
+    mkdir -p "${TASK_HANDOFF_WORKSPACE:-/workspace}"
+    chown agent:agent "${TASK_HANDOFF_WORKSPACE:-/workspace}"
+  fi
+  export TASK_HANDOFF_PRIVILEGE_DROPPED=1
+  exec sudo --preserve-env -u agent -- bash "$0" "$@"
+fi
+
 mkdir -p \
   "${TASK_HANDOFF_DATA_DIR:-/data/task-handoff}" \
   "${TASK_HANDOFF_APP_CATALOG_DIR:-/data/task-handoff/app-catalog}" \
@@ -84,12 +126,18 @@ start_web_cap_daemon() {
 if [ "${1:-}" = "task-handoff" ] && [ "${2:-}" = "web" ]; then
   bootstrap_workspace
   start_web_cap_daemon
+  if [ -n "${TASK_HANDOFF_INSTANCE_LAUNCHER:-}" ]; then
+    exec bash "${TASK_HANDOFF_INSTANCE_LAUNCHER}"
+  fi
   exec task-handoff-instance-launcher
 fi
 
 if [ "${1:-}" = "task-handoff" ]; then
   shift
   if [ "$#" -eq 0 ] || { [ "${1:-}" = "web" ] && [ "$#" -eq 1 ]; }; then
+    if [ -n "${TASK_HANDOFF_INSTANCE_LAUNCHER:-}" ]; then
+      exec bash "${TASK_HANDOFF_INSTANCE_LAUNCHER}"
+    fi
     exec task-handoff-instance-launcher
   fi
   echo "Managed container commands must be launched through the active controlled-instance runtime." >&2

package/docker/instance-launcher.sh

@@ -21,11 +21,6 @@ bootstrap_wait() {
 }
 
 if [ ! -L "${current}" ]; then
-  if command -v task-handoff-controlled-instance >/dev/null 2>&1; then
-    exec task-handoff-controlled-instance web \
-      --host "${TASK_HANDOFF_WEB_HOST:-0.0.0.0}" \
-      --port "${TASK_HANDOFF_WEB_PORT:-8080}"
-  fi
   bootstrap_wait
 fi
 

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@task-handoff/node-agent",
-  "version": "0.0.16",
+  "version": "0.0.18",
   "description": "Prebuilt TaskHandoff node agent runtime.",
   "license": "Apache-2.0",
   "type": "commonjs",
@@ -23,6 +23,7 @@
     "@fastify/cookie": "11.1.1",
     "@fastify/static": "8.3.0",
     "@fastify/websocket": "11.2.0",
+    "@larksuiteoapi/node-sdk": "1.72.0",
     "commander": "14.0.3",
     "dingtalk-stream": "2.1.5",
     "fastify": "5.8.5",

package/runtime-artifacts/{controlled-instance-runtime-0.0.16-linux-universal.manifest.json → controlled-instance-runtime-0.0.18-linux-universal.manifest.json}

@@ -1,10 +1,10 @@
 {
   "packageName": "@task-handoff/controlled-instance",
-  "version": "0.0.16",
+  "version": "0.0.18",
   "platform": "linux",
   "arch": "universal",
   "formatVersion": 1,
   "launcherAbi": 1,
   "entrypoint": "dist/controlled-instance-cli.js",
-  "sha256": "49cba53b846707e115a727b8b3ac3b02cda6fb2326120734b4778c64cc06dc2a"
+  "sha256": "49cf45b50333fd08eb25759867681fdb0decec53d3d7e28922790bb6497c18c7"
 }

package/runtime-artifacts/controlled-instance-runtime-0.0.18-linux-universal.tar.gz.sha256

@@ -0,0 +1 @@
+1d149eca220a1c1191d53373a8bc508fe99e67ccb0328051bd9eb4303ac7734a  controlled-instance-runtime-0.0.18-linux-universal.tar.gz

package/runtime-artifacts/controlled-instance-runtime-0.0.16-linux-universal.tar.gz.sha256

@@ -1 +0,0 @@
-2a95e98182db251f91a887d77a86051e230ea1339995e54682c85143df181d52  controlled-instance-runtime-0.0.16-linux-universal.tar.gz