pptx704
9bf67aa7f7
Replaces the hardcoded CP_HOST_AGENT_ADDR single-agent setup with a DB-driven registration system supporting multiple host agents (BYOC). Key changes: - Host agents register via one-time token, receive a 7-day JWT + 60-day refresh token; heartbeat loop auto-refreshes on 401/403 and pauses all sandboxes if refresh fails - HostClientPool: lazy Connect RPC client cache keyed by host ID, replacing the single static agent client throughout the API and service layers - RoundRobinScheduler: picks an online host for each new sandbox via ListActiveHosts; extensible for future scheduling strategies - HostMonitor (replaces Reconciler): passive heartbeat staleness check marks hosts unreachable and sandboxes missing after 90s; active reconciliation per online host restores missing-but-alive sandboxes and stops orphans - Graceful host delete: returns 409 with affected sandbox list without ?force=true; force-delete destroys sandboxes then evicts pool client - Snapshot delete broadcasts to all online hosts (templates have no host_id) - sandbox.Manager.PauseAll: pauses all running VMs on CP connectivity loss - New migration: host_refresh_tokens table with token rotation (issue-then- revoke ordering to prevent lockout on mid-rotation crash) - New sandbox status 'missing' (reversible, unlike 'stopped') and host status 'unreachable'; both reflected in OpenAPI spec - Fix: refresh token auth failure now returns 401 (was 400 via generic 'invalid' substring match in serviceErrToHTTP)
76 lines
2.1 KiB
SQL
76 lines
2.1 KiB
SQL
-- name: InsertSandbox :one
|
|
INSERT INTO sandboxes (id, team_id, host_id, template, status, vcpus, memory_mb, timeout_sec)
|
|
VALUES ($1, $2, $3, $4, $5, $6, $7, $8)
|
|
RETURNING *;
|
|
|
|
-- name: GetSandbox :one
|
|
SELECT * FROM sandboxes WHERE id = $1;
|
|
|
|
-- name: GetSandboxByTeam :one
|
|
SELECT * FROM sandboxes WHERE id = $1 AND team_id = $2;
|
|
|
|
-- name: ListSandboxes :many
|
|
SELECT * FROM sandboxes ORDER BY created_at DESC;
|
|
|
|
-- name: ListSandboxesByTeam :many
|
|
SELECT * FROM sandboxes
|
|
WHERE team_id = $1 AND status NOT IN ('stopped', 'error')
|
|
ORDER BY created_at DESC;
|
|
|
|
-- name: ListSandboxesByHostAndStatus :many
|
|
SELECT * FROM sandboxes
|
|
WHERE host_id = $1 AND status = ANY($2::text[])
|
|
ORDER BY created_at DESC;
|
|
|
|
-- name: UpdateSandboxRunning :one
|
|
UPDATE sandboxes
|
|
SET status = 'running',
|
|
host_ip = $2,
|
|
guest_ip = $3,
|
|
started_at = $4,
|
|
last_active_at = $4,
|
|
last_updated = NOW()
|
|
WHERE id = $1
|
|
RETURNING *;
|
|
|
|
-- name: UpdateSandboxStatus :one
|
|
UPDATE sandboxes
|
|
SET status = $2,
|
|
last_updated = NOW()
|
|
WHERE id = $1
|
|
RETURNING *;
|
|
|
|
-- name: UpdateLastActive :exec
|
|
UPDATE sandboxes
|
|
SET last_active_at = $2,
|
|
last_updated = NOW()
|
|
WHERE id = $1;
|
|
|
|
-- name: BulkUpdateStatusByIDs :exec
|
|
UPDATE sandboxes
|
|
SET status = $2,
|
|
last_updated = NOW()
|
|
WHERE id = ANY($1::text[]);
|
|
|
|
-- name: ListActiveSandboxesByTeam :many
|
|
SELECT * FROM sandboxes
|
|
WHERE team_id = $1 AND status IN ('running', 'paused', 'starting')
|
|
ORDER BY created_at DESC;
|
|
|
|
-- name: MarkSandboxesMissingByHost :exec
|
|
-- Called when the host monitor marks a host unreachable.
|
|
-- Marks running/starting/pending sandboxes on that host as 'missing' so users see
|
|
-- the sandbox is not currently reachable, without permanently losing the record.
|
|
UPDATE sandboxes
|
|
SET status = 'missing',
|
|
last_updated = NOW()
|
|
WHERE host_id = $1 AND status IN ('running', 'starting', 'pending');
|
|
|
|
-- name: BulkRestoreRunning :exec
|
|
-- Called by the reconciler when a host comes back online and its sandboxes are
|
|
-- confirmed alive. Restores only sandboxes that are in 'missing' state.
|
|
UPDATE sandboxes
|
|
SET status = 'running',
|
|
last_updated = NOW()
|
|
WHERE id = ANY($1::text[]) AND status = 'missing';
|