heddle-cli 0.15.0

An AI-native version control system
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98

//! Detached lifetime management for the claim authorization endpoint.

use std::{
    process::{Command, Stdio},
    time::Duration,
};

use anyhow::{Context, Result, bail};
use cli_shared::UserConfig;
use objects::lock::RepoLock;

use super::{HostedAuthMode, HostedSession, identity_state};

pub(crate) async fn ensure_running(server: &str) -> Result<()> {
    let lock = server_lock();
    if let Some(guard) = lock.try_write()? {
        let _ = std::fs::remove_file(ready_path());
        drop(guard);
        spawn(server)?;
    }
    for _ in 0..50 {
        tokio::time::sleep(Duration::from_millis(100)).await;
        if std::fs::read_to_string(ready_path()).is_ok_and(|ready| ready == server) {
            return Ok(());
        }
    }
    bail!("claim endpoint did not become ready")
}

fn spawn(server: &str) -> Result<()> {
    let current_exe = std::env::current_exe().context("locating heddle executable")?;
    let mut command = Command::new(current_exe);
    command
        .env_clear()
        .env("HEDDLE_HOME", repo::identity::heddle_home_dir())
        .args(["identity", "serve", "--server", server])
        .stdin(Stdio::null())
        .stdout(Stdio::null())
        .stderr(Stdio::null());
    #[cfg(target_os = "linux")]
    {
        use std::os::unix::process::CommandExt;
        // SAFETY: `setsid` has no arguments or memory effects. Failure is
        // propagated and prevents the background endpoint from starting.
        unsafe {
            command.pre_exec(|| {
                if libc::setsid() == -1 {
                    return Err(std::io::Error::last_os_error());
                }
                Ok(())
            });
        }
    }
    command
        .spawn()
        .context("starting claim authorization endpoint")?;
    Ok(())
}

pub(crate) async fn serve(server: String) -> Result<()> {
    let _guard = match server_lock().try_write()? {
        Some(guard) => guard,
        None => return Ok(()),
    };
    let state = identity_state::load()?.ok_or_else(|| anyhow::anyhow!("claim state is absent"))?;
    if state.server != server {
        bail!("claim state belongs to {}, not {server}", state.server);
    }
    let user_config = UserConfig::load_default()?;
    let session = HostedSession::build(
        &user_config,
        Some(server.clone()),
        HostedAuthMode::CredentialFallback,
    )?;
    let client = session.connect(([127, 0, 0, 1], 0).into()).await?;
    objects::fs_atomic::write_file_atomic(&ready_path(), server.as_bytes())
        .context("publishing claim endpoint readiness")?;
    loop {
        tokio::time::sleep(Duration::from_secs(1)).await;
        let Some(state) = identity_state::load()? else {
            break;
        };
        if !state.is_active(chrono::Utc::now().timestamp_millis()) {
            break;
        }
    }
    client.close().await;
    let _ = std::fs::remove_file(ready_path());
    Ok(())
}

fn ready_path() -> std::path::PathBuf {
    repo::identity::heddle_home_dir().join("agent-claim-server.ready")
}

fn server_lock() -> RepoLock {
    RepoLock::at(repo::identity::heddle_home_dir().join("locks/agent-claim-server.lock"))
}