mino 1.6.0

Secure AI agent sandbox using rootless containers
Documentation 
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137

//! Session lifecycle management

use crate::config::ConfigManager;
use crate::error::{MinoError, MinoResult};
use crate::session::state::{Session, SessionStatus};
use chrono::{Duration, Utc};
use tracing::{debug, warn};

/// Session manager handles session CRUD and cleanup
pub struct SessionManager;

impl SessionManager {
    /// Create a new session manager
    pub async fn new() -> MinoResult<Self> {
        // Ensure state directories exist
        ConfigManager::ensure_state_dirs().await?;
        Ok(Self)
    }

    /// Create a new session (atomic — fails if name already taken)
    pub async fn create(&self, session: &Session) -> MinoResult<()> {
        session.create_file().await?;
        debug!("Created session: {}", session.name);
        Ok(())
    }

    /// Get a session by name
    pub async fn get(&self, name: &str) -> MinoResult<Option<Session>> {
        Session::load(name).await
    }

    /// List all sessions
    pub async fn list(&self) -> MinoResult<Vec<Session>> {
        Session::list_all().await
    }

    /// Update session status
    pub async fn update_status(&self, name: &str, status: SessionStatus) -> MinoResult<()> {
        let mut session = self
            .get(name)
            .await?
            .ok_or_else(|| MinoError::SessionNotFound(name.to_string()))?;

        session.status = status;
        session.updated_at = Utc::now();
        session.save().await?;

        debug!("Updated session {} status to {:?}", name, status);
        Ok(())
    }

    /// Set container ID for a session
    pub async fn set_container_id(&self, name: &str, container_id: &str) -> MinoResult<()> {
        let mut session = self
            .get(name)
            .await?
            .ok_or_else(|| MinoError::SessionNotFound(name.to_string()))?;

        session.container_id = Some(container_id.to_string());
        session.updated_at = Utc::now();
        session.save().await?;

        debug!("Set container ID for session {}: {}", name, container_id);
        Ok(())
    }

    /// Delete a session
    pub async fn delete(&self, name: &str) -> MinoResult<()> {
        let session = self
            .get(name)
            .await?
            .ok_or_else(|| MinoError::SessionNotFound(name.to_string()))?;

        session.delete().await?;
        debug!("Deleted session: {}", name);
        Ok(())
    }

    /// Find session by container ID
    pub async fn find_by_container(&self, container_id: &str) -> MinoResult<Option<Session>> {
        let sessions = self.list().await?;
        Ok(sessions
            .into_iter()
            .find(|s| s.container_id.as_deref() == Some(container_id)))
    }

    /// Remove stopped/failed sessions older than `max_age_hours`.
    /// Returns the number of sessions cleaned up.
    pub async fn cleanup(&self, max_age_hours: u32) -> MinoResult<u32> {
        if max_age_hours == 0 {
            return Ok(0);
        }

        let cutoff = Utc::now() - Duration::hours(max_age_hours as i64);
        let sessions = self.list().await?;
        let mut cleaned = 0u32;

        for session in sessions {
            let dominated = matches!(
                session.status,
                SessionStatus::Stopped | SessionStatus::Failed
            );

            if dominated && session.updated_at < cutoff {
                match session.delete().await {
                    Ok(()) => {
                        debug!("Cleaned up session: {}", session.name);
                        cleaned += 1;
                    }
                    Err(e) => {
                        warn!("Failed to clean up session {}: {}", session.name, e);
                    }
                }
            }
        }

        Ok(cleaned)
    }
}

#[cfg(test)]
mod tests {
    use super::*;

    #[test]
    fn session_status_transitions() {
        // Valid transitions
        let status = SessionStatus::Starting;
        assert_eq!(status, SessionStatus::Starting);

        let status = SessionStatus::Running;
        assert_eq!(status, SessionStatus::Running);

        let status = SessionStatus::Stopped;
        assert_eq!(status, SessionStatus::Stopped);
    }
}