cutec-chris/workspace-git

Workspace Git

Sets up authenticated git push for the Pawlia workspace and registers an automation job that keeps it synced.

Current workspace

The workspace for this session is always:

<session_dir>/<user_id>/workspace

Use this path for all commands below. Never scan other sessions.

Workflow

Step 0 — Sync workspace (always first)

Before any read or write operation on the workspace, sync the latest state from the remote. The remote is authoritative — on divergence it always wins:

git -C <session_dir>/<user_id>/workspace add -A
git -C <session_dir>/<user_id>/workspace commit -m "pre-sync" 2>&1 || true
git -C <session_dir>/<user_id>/workspace fetch origin 2>&1
git -C <session_dir>/<user_id>/workspace reset --hard origin/HEAD 2>&1

• If the remote is not yet configured (message contains "does not appear to be a git repository" / "no remote"), continue to Step 1 — setup is needed first.
• Never use git pull, git merge, or pull --ff-only. Local divergence is always resolved with reset --hard origin/HEAD — the remote wins.
• Committing local changes first (pre-sync) ensures uncommitted edits are not silently destroyed by the hard reset; they remain in the reflog.
• On success, proceed normally.

Step 1 — Check current state

python <scripts_dir>/setup.py list-workspaces

Only used to check whether the current workspace already has a remote and SSH configured (ssh_configured: true). If yes, skip to Step 4.

Step 2 — Generate SSH key

python <scripts_dir>/setup.py keygen

Output includes public_key. Show it to the user and ask them to add it as a deploy key (read+write) to the remote repository. Wait for the user to confirm before continuing.

Step 3 — Configure remote

Once the user confirms the key is added:

python <scripts_dir>/setup.py configure \
  --workspace <session_dir>/<user_id>/workspace \
  [--remote-url <git-ssh-url>]

Include --remote-url only if the remote is not yet configured or the user provided a new URL.

The script sets core.sshCommand in the workspace .git/config so all subsequent git operations (including the automatic push in workspace_git.py) use the session-persisted key. It then runs git ls-remote to verify.

If the test fails: check the error. Common causes:

• Key not yet added on the remote → ask the user to double-check
• Wrong URL format (must be SSH, e.g. git@host:user/repo.git) → ask for correction
• Host unreachable → report and stop

Step 4 — Verify push

python <scripts_dir>/setup.py test \
  --workspace <session_dir>/<user_id>/workspace

Run a git push --dry-run. Report success or the full error output.

Step 5 — Create automation jobs

After a successful test, register two jobs in automations/jobs.json.

Cyclic pull (every 30 minutes):

python <scripts_dir>/setup.py create-job \
  --workspace <session_dir>/<user_id>/workspace \
  --type pull \
  --schedule "*/15 * * * *"

Daily push (keeps remote up-to-date as backup):

python <scripts_dir>/setup.py create-job \
  --workspace <session_dir>/<user_id>/workspace \
  --type push \
  --schedule 03:00

If a job of the same type already exists, skip silently.

Output format

All script commands output JSON:

{"success": true, ...}
{"success": false, "error": "...", "hint": "..."}

Example output

Ich habe deinen SSH-Key generiert:

ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAI... pawlia-workspace

Füge diesen Key als Deploy-Key (mit Schreibzugriff) in dein Git-Repo ein, dann sag mir Bescheid und ich richte den Push ein.

---

(Nach Bestätigung)

Super — Remote konfiguriert und Verbindung erfolgreich getestet. Ich habe außerdem einen täglichen Push-Job um 03:00 Uhr angelegt, damit der Workspace automatisch synchron bleibt.

Error handling

| Error | Recovery | |-------|----------| | Host key verification failed | SSH key not yet in known_hosts — configure uses accept-new, retrying after key add should fix it | | Permission denied (publickey) | Key not added to remote or wrong key — show key again, ask user to re-check | | Repository not found | Wrong URL — ask user for correct SSH URL | | Not a git repo | Workspace not initialized — ensure <session_dir>/<user_id>/workspace exists |