robisie 0.1.0 → 0.1.1

package/helpers/client-spawn-session.sh

@@ -0,0 +1,181 @@
+#!/usr/bin/env bash
+# Terminal-side lifecycle wrapper for client-spawn.sh. This file is invoked
+# inside the new terminal and owns the card lock for exactly as long as the
+# configured agent process remains alive.
+set -euo pipefail
+
+OWNER_PREFIX="robisie-client-spawn-v1"
+STATE_DIR="${1:-}"
+EXPECTED_OWNER="${2:-}"
+CARD_REF="${3:-}"
+STATE_ROOT=""
+STATE_KEY=""
+AGENT_PID=""
+OWNERSHIP_VALIDATED=0
+GENERATION=""
+RUNNER_CLAIM=""
+RUNNER_PID_FILE=""
+AGENT_PID_FILE=""
+READY_FILE=""
+FAILED_FILE=""
+TOKEN_FIFO=""
+
+sha256_text() {
+  local value="$1" digest=""
+  if command -v sha256sum >/dev/null 2>&1; then
+    digest="$(printf '%s' "$value" | sha256sum)"
+  elif command -v shasum >/dev/null 2>&1; then
+    digest="$(printf '%s' "$value" | shasum -a 256)"
+  else
+    return 1
+  fi
+  digest="${digest%% *}"
+  [[ "$digest" =~ ^[0-9a-f]{64}$ ]] || return 1
+  printf '%s' "$digest"
+}
+
+state_is_owned() {
+  local marker=""
+  [[ "$OWNERSHIP_VALIDATED" -eq 1 ]] || return 1
+  [[ -d "$STATE_DIR" && -f "$STATE_DIR/.owner" ]] || return 1
+  IFS= read -r marker < "$STATE_DIR/.owner" || return 1
+  [[ "$marker" == "$EXPECTED_OWNER" ]]
+}
+
+write_owned_line() {
+  local path="$1" value="$2"
+  state_is_owned || return 1
+  printf '%s\n' "$value" > "$path"
+}
+
+fail_state() {
+  local message="$1"
+  if state_is_owned; then
+    write_owned_line "$FAILED_FILE" "$message" 2>/dev/null || true
+  fi
+  echo "client-spawn-session: $message" >&2
+  exit 4
+}
+
+read_state_line() {
+  local file="$1" value=""
+  state_is_owned || return 1
+  [[ -f "$file" ]] || return 1
+  IFS= read -r value < "$file" || [[ -n "$value" ]] || return 1
+  state_is_owned || return 1
+  printf '%s' "$value"
+}
+
+cleanup_state() {
+  state_is_owned || return 0
+  case "$STATE_DIR" in "$STATE_ROOT/$STATE_KEY.lock") ;; *) return 1 ;; esac
+  rm -rf -- "$STATE_DIR"
+}
+
+# Invoked indirectly by the signal traps installed below.
+# shellcheck disable=SC2329
+forward_signal() {
+  local signal="$1"
+  if [[ "$AGENT_PID" =~ ^[0-9]+$ ]] && kill -0 "$AGENT_PID" 2>/dev/null; then
+    kill -"$signal" "$AGENT_PID" 2>/dev/null || true
+    wait "$AGENT_PID" 2>/dev/null || true
+  fi
+  cleanup_state
+  exit 130
+}
+
+[[ -n "$STATE_DIR" && "$STATE_DIR" == /* && "$STATE_DIR" != *$'\n'* ]] || fail_state "absolute state directory argument is required"
+[[ "$EXPECTED_OWNER" =~ ^${OWNER_PREFIX}:[[:alnum:]._-]+$ ]] || fail_state "state generation token is missing or invalid"
+[[ "$CARD_REF" =~ ^[[:alnum:]][[:alnum:].:_-]{0,127}$ ]] || fail_state "card-ref argument is missing or invalid"
+CARD_DIGEST="$(sha256_text "$CARD_REF")" || fail_state "sha256sum or shasum is required to verify the portable card lock"
+STATE_KEY="card-$CARD_DIGEST"
+STATE_ROOT="${STATE_DIR%/*}"
+[[ -n "$STATE_ROOT" && "$STATE_DIR" == "$STATE_ROOT/$STATE_KEY.lock" ]] || fail_state "state path is outside the expected card lock"
+GENERATION="${EXPECTED_OWNER#*:}"
+RUNNER_CLAIM="$STATE_DIR/runner.claim.$GENERATION"
+RUNNER_PID_FILE="$STATE_DIR/runner.$GENERATION.pid"
+AGENT_PID_FILE="$STATE_DIR/agent.$GENERATION.pid"
+READY_FILE="$STATE_DIR/ready.$GENERATION"
+FAILED_FILE="$STATE_DIR/failed.$GENERATION"
+TOKEN_FIFO="$STATE_DIR/token.$GENERATION.fifo"
+
+OWNERSHIP_VALIDATED=1
+state_is_owned || fail_state "state ownership generation mismatch"
+
+if ! mkdir "$RUNNER_CLAIM" 2>/dev/null; then
+  # A terminal retry may open a second shell, but only the first wrapper may
+  # ever start the agent or reserve the card.
+  exit 0
+fi
+state_is_owned || exit 4
+write_owned_line "$RUNNER_PID_FILE" "$$" || fail_state "cannot record runner pid"
+
+STORED_CARD_REF="$(read_state_line "$STATE_DIR/card-ref")" || fail_state "card-ref state is missing"
+[[ "$STORED_CARD_REF" == "$CARD_REF" ]] || fail_state "card-ref state does not match launch generation"
+PROJECT_CONTEXT="$(read_state_line "$STATE_DIR/project-context")" || fail_state "project context state is missing"
+AGENT_COMMAND="$(read_state_line "$STATE_DIR/agent-command")" || fail_state "agent command state is missing"
+BOOT_GRACE_SEC="$(read_state_line "$STATE_DIR/boot-grace")" || fail_state "boot grace state is missing"
+TRANSCRIPT_PATH="$(read_state_line "$STATE_DIR/transcript-path" || true)"
+
+if [[ -p "$TOKEN_FIFO" ]]; then
+  state_is_owned || exit 4
+  FIFO_TEST_DELAY="${ROBISIE_SPAWN_TEST_FIFO_DELAY_SEC:-0}"
+  [[ "$FIFO_TEST_DELAY" =~ ^[0-9]+([.][0-9]+)?$ ]] || fail_state "invalid test FIFO delay"
+  sleep "$FIFO_TEST_DELAY"
+  ROBISIE_KEY=""
+  IFS= read -r ROBISIE_KEY < "$TOKEN_FIFO" || [[ -n "$ROBISIE_KEY" ]] || fail_state "credential FIFO closed without a value"
+  state_is_owned || exit 4
+  rm -f "$TOKEN_FIFO" || fail_state "cannot remove consumed credential FIFO"
+fi
+
+[[ -n "${ROBISIE_KEY:-}" ]] || fail_state "ROBISIE_KEY did not reach the terminal session"
+[[ -d "$PROJECT_CONTEXT" ]] || fail_state "project context does not exist"
+state_is_owned || exit 4
+
+export ROBISIE_CARD_REF="$CARD_REF"
+export ROBISIE_KEY
+export ROBISIE_PROJECT_CONTEXT="$PROJECT_CONTEXT"
+if [[ -n "$TRANSCRIPT_PATH" ]]; then
+  export ROBISIE_SPAWN_TRANSCRIPT="$TRANSCRIPT_PATH"
+else
+  unset ROBISIE_SPAWN_TRANSCRIPT 2>/dev/null || true
+fi
+
+cd "$PROJECT_CONTEXT" || fail_state "cannot enter project context"
+trap 'forward_signal TERM' TERM
+trap 'forward_signal INT' INT
+trap 'forward_signal HUP' HUP
+
+state_is_owned || exit 4
+/bin/bash -c "$AGENT_COMMAND" &
+AGENT_PID=$!
+write_owned_line "$AGENT_PID_FILE" "$AGENT_PID" || {
+  kill "$AGENT_PID" 2>/dev/null || true
+  fail_state "cannot record agent pid"
+}
+
+sleep "$BOOT_GRACE_SEC"
+if ! state_is_owned; then
+  kill "$AGENT_PID" 2>/dev/null || true
+  wait "$AGENT_PID" 2>/dev/null || true
+  exit 4
+fi
+if ! kill -0 "$AGENT_PID" 2>/dev/null; then
+  set +e
+  wait "$AGENT_PID"
+  agent_rc=$?
+  set -e
+  fail_state "agent exited before readiness (rc=$agent_rc)"
+fi
+
+write_owned_line "$READY_FILE" "ready" || {
+  kill "$AGENT_PID" 2>/dev/null || true
+  fail_state "cannot publish readiness marker"
+}
+
+set +e
+wait "$AGENT_PID"
+agent_rc=$?
+set -e
+cleanup_state
+exit "$agent_rc"