wehub-resource-sync
109 lines
3.8 KiB
Python
109 lines
3.8 KiB
Python
"""Host identity management for ``omnigent host``.
|
|
|
|
Reads or creates the ``host`` section in ``~/.omnigent/config.yaml``.
|
|
The host identity is auto-generated on first ``omnigent host``
|
|
if the section does not exist.
|
|
"""
|
|
|
|
from __future__ import annotations
|
|
|
|
import os
|
|
import socket
|
|
import uuid
|
|
from dataclasses import dataclass
|
|
from pathlib import Path
|
|
|
|
import yaml
|
|
|
|
CONFIG_PATH = Path.home() / ".omnigent" / "config.yaml"
|
|
|
|
# Env vars a server-managed sandbox host is launched with. The server
|
|
# provisions the sandbox, generates the identity + launch token, and
|
|
# injects all three so the host registers under the server-chosen
|
|
# identity without persisting anything to the sandbox's config.yaml
|
|
# (managed sandboxes are disposable). HOST_TOKEN is the tunnel
|
|
# credential (see MANAGED_HOST_TOKEN_HEADER); HOST_ID / HOST_NAME
|
|
# override the identity file and must be set together.
|
|
HOST_TOKEN_ENV_VAR = "OMNIGENT_HOST_TOKEN"
|
|
HOST_ID_ENV_VAR = "OMNIGENT_HOST_ID"
|
|
HOST_NAME_ENV_VAR = "OMNIGENT_HOST_NAME"
|
|
|
|
# WebSocket upgrade header carrying a managed host's launch token.
|
|
# Mirrors the runner tunnel's X-Omnigent-Runner-Tunnel-Token pattern:
|
|
# a dedicated header (not Authorization) so the credential can't be
|
|
# confused with a user Bearer token by intermediate proxies or the
|
|
# auth provider.
|
|
MANAGED_HOST_TOKEN_HEADER = "X-Omnigent-Host-Token"
|
|
|
|
|
|
@dataclass
|
|
class HostIdentity:
|
|
"""Identity of a host machine.
|
|
|
|
:param host_id: Stable identifier, e.g.
|
|
``"host_a1b2c3d4e5f67890abcdef1234567890"``.
|
|
Format: ``host_{uuid4_hex}`` (32-char hex portion).
|
|
:param name: Human-readable name displayed in the Web UI
|
|
host picker, e.g. ``"corey-laptop"``.
|
|
"""
|
|
|
|
host_id: str
|
|
name: str
|
|
|
|
|
|
def load_or_create_host_identity(
|
|
path: Path = CONFIG_PATH,
|
|
) -> HostIdentity:
|
|
"""Load host identity from config.yaml, or create it if absent.
|
|
|
|
Reads the ``host:`` section from the config file. If the
|
|
section does not exist, generates a fresh ``host_id``, sets
|
|
``name`` to the machine's hostname, writes the section back,
|
|
and returns the identity.
|
|
|
|
Environment override: when :data:`HOST_ID_ENV_VAR` and
|
|
:data:`HOST_NAME_ENV_VAR` are both set (a server-managed sandbox
|
|
host), that identity is returned directly without reading or
|
|
writing the config file — managed sandboxes are disposable and the
|
|
server owns their identity. Setting only one of the two is a
|
|
launcher bug and fails loud.
|
|
|
|
:param path: Path to the config YAML file, e.g.
|
|
``Path("~/.omnigent/config.yaml")``. Defaults to
|
|
:data:`CONFIG_PATH`.
|
|
:returns: The loaded or newly created :class:`HostIdentity`.
|
|
:raises ValueError: If exactly one of the identity env vars is set.
|
|
"""
|
|
env_host_id = os.environ.get(HOST_ID_ENV_VAR)
|
|
env_name = os.environ.get(HOST_NAME_ENV_VAR)
|
|
if (env_host_id is None) != (env_name is None):
|
|
raise ValueError(
|
|
f"{HOST_ID_ENV_VAR} and {HOST_NAME_ENV_VAR} must be set together "
|
|
"(managed-host launch sets both)"
|
|
)
|
|
if env_host_id is not None and env_name is not None:
|
|
return HostIdentity(host_id=env_host_id, name=env_name)
|
|
|
|
cfg: dict[str, object] = {}
|
|
if path.exists():
|
|
with open(path) as f:
|
|
cfg = yaml.safe_load(f) or {}
|
|
|
|
host_section = cfg.get("host")
|
|
if isinstance(host_section, dict) and "host_id" in host_section and "name" in host_section:
|
|
return HostIdentity(
|
|
host_id=host_section["host_id"],
|
|
name=host_section["name"],
|
|
)
|
|
|
|
host_id = f"host_{uuid.uuid4().hex}"
|
|
name = socket.gethostname()
|
|
identity = HostIdentity(host_id=host_id, name=name)
|
|
|
|
cfg["host"] = {"host_id": identity.host_id, "name": identity.name}
|
|
path.parent.mkdir(parents=True, exist_ok=True)
|
|
with open(path, "w") as f:
|
|
yaml.safe_dump(cfg, f, default_flow_style=False, sort_keys=True)
|
|
|
|
return identity
|