eac9a6acfd
Add per-group container locking with global concurrency limit to prevent concurrent containers for the same group (#89) and cap total containers. Fix message batching bug where lastAgentTimestamp advanced to trigger message instead of latest in batch, causing redundant re-processing. Move router state, sessions, and registered groups from JSON files to SQLite with automatic one-time migration. Add SIGTERM/SIGINT handlers with graceful shutdown (SIGTERM -> grace period -> SIGKILL). Add startup recovery for messages missed during crash. Remove dead code: utils.ts, Session type, isScheduledTask flag, ContainerConfig.env, getTaskRunLogs, GroupQueue.isActive. Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>
75 lines
2.0 KiB
TypeScript
75 lines
2.0 KiB
TypeScript
export interface AdditionalMount {
|
|
hostPath: string; // Absolute path on host (supports ~ for home)
|
|
containerPath: string; // Path inside container (under /workspace/extra/)
|
|
readonly?: boolean; // Default: true for safety
|
|
}
|
|
|
|
/**
|
|
* Mount Allowlist - Security configuration for additional mounts
|
|
* This file should be stored at ~/.config/nanoclaw/mount-allowlist.json
|
|
* and is NOT mounted into any container, making it tamper-proof from agents.
|
|
*/
|
|
export interface MountAllowlist {
|
|
// Directories that can be mounted into containers
|
|
allowedRoots: AllowedRoot[];
|
|
// Glob patterns for paths that should never be mounted (e.g., ".ssh", ".gnupg")
|
|
blockedPatterns: string[];
|
|
// If true, non-main groups can only mount read-only regardless of config
|
|
nonMainReadOnly: boolean;
|
|
}
|
|
|
|
export interface AllowedRoot {
|
|
// Absolute path or ~ for home (e.g., "~/projects", "/var/repos")
|
|
path: string;
|
|
// Whether read-write mounts are allowed under this root
|
|
allowReadWrite: boolean;
|
|
// Optional description for documentation
|
|
description?: string;
|
|
}
|
|
|
|
export interface ContainerConfig {
|
|
additionalMounts?: AdditionalMount[];
|
|
timeout?: number; // Default: 300000 (5 minutes)
|
|
}
|
|
|
|
export interface RegisteredGroup {
|
|
name: string;
|
|
folder: string;
|
|
trigger: string;
|
|
added_at: string;
|
|
containerConfig?: ContainerConfig;
|
|
}
|
|
|
|
export interface NewMessage {
|
|
id: string;
|
|
chat_jid: string;
|
|
sender: string;
|
|
sender_name: string;
|
|
content: string;
|
|
timestamp: string;
|
|
}
|
|
|
|
export interface ScheduledTask {
|
|
id: string;
|
|
group_folder: string;
|
|
chat_jid: string;
|
|
prompt: string;
|
|
schedule_type: 'cron' | 'interval' | 'once';
|
|
schedule_value: string;
|
|
context_mode: 'group' | 'isolated';
|
|
next_run: string | null;
|
|
last_run: string | null;
|
|
last_result: string | null;
|
|
status: 'active' | 'paused' | 'completed';
|
|
created_at: string;
|
|
}
|
|
|
|
export interface TaskRunLog {
|
|
task_id: string;
|
|
run_at: string;
|
|
duration_ms: number;
|
|
status: 'success' | 'error';
|
|
result: string | null;
|
|
error: string | null;
|
|
}
|