opengraph stuff

src/servers/api/terminal/websocket.ts

@@ -1,5 +1,6 @@
 import type { ServerWebSocket } from 'bun';
-import { mkdirSync, statSync } from 'node:fs';
+import { existsSync, mkdirSync, statSync } from 'node:fs';
+import { homedir } from 'node:os';
 import { dirname, join } from 'node:path';
 import { fileURLToPath } from 'node:url';
 import { getHomeDir, getGlobalSkillsDir, getGlobalToolsDir, getGlobalExtensionsDir, getUserSkillsDir, getUserToolsDir, DATA_PATH } from '@@/data-path';
@@ -101,9 +102,9 @@ const ensureDockerImage = () => {
   dockerImageReady = true;
 };
 
-// Check whether a container already has the officer resource mounts.
-// We test for the global skills dir as a proxy for all mounts being present.
-const containerHasResourceMounts = (dockerId: string): boolean => {
+// Check whether a container has all expected volume mounts.
+// Tests for multiple mount sources — if any is missing, the container should be recreated.
+const containerHasExpectedMounts = (dockerId: string): boolean => {
   const dockerPath = Bun.which('docker') ?? 'docker';
   const result = Bun.spawnSync({
     cmd: [dockerPath, 'inspect', '--format', '{{range .Mounts}}{{.Source}}\n{{end}}', dockerId],
@@ -111,7 +112,8 @@ const containerHasResourceMounts = (dockerId: string): boolean => {
     stderr: 'ignore',
   });
   if (result.exitCode !== 0) return false;
-  return result.stdout.toString().includes(getGlobalSkillsDir());
+  const mounts = result.stdout.toString();
+  return mounts.includes(getGlobalSkillsDir()) && mounts.includes('google-oauth.json');
 };
 
 const startDockerSidecar = (port: number, homeDir: string, userId: number, username: string, email: string): { dockerId: string } => {
@@ -136,6 +138,11 @@ const startDockerSidecar = (port: number, homeDir: string, userId: number, usern
   }
 
   const containerHome = `/home/${username}`;
+  const googleConfigHost = join(homedir(), '.config', 'officer.dev', 'google-oauth.json');
+  const googleMounts: string[] = existsSync(googleConfigHost)
+    ? ['-v', `${googleConfigHost}:/officer/google-oauth.json:ro`]
+    : [];
+
   const run = Bun.spawnSync({
     cmd: [
       dockerPath,
@@ -164,6 +171,8 @@ const startDockerSidecar = (port: number, homeDir: string, userId: number, usern
       '-v', `${getUserSkillsDir(email)}:/officer/user/skills:ro`,
       '-v', `${getUserToolsDir(email)}:/officer/user/tools:ro`,
       '-v', `${join(DATA_PATH, '.generated')}:/officer/generated:ro`,
+      ...googleMounts,
+      '-v', `${join(DATA_PATH, email, 'integrations')}:/officer/user/integrations:ro`,
       '-w', containerHome,
       tag,
     ],
@@ -231,13 +240,14 @@ export const ensureDockerContainer = async (email: string, userId: number, homeD
   // Ensure user-specific resource dirs exist before mounting (Docker creates them as root if missing)
   mkdirSync(getUserSkillsDir(email), { recursive: true });
   mkdirSync(getUserToolsDir(email), { recursive: true });
+  mkdirSync(join(DATA_PATH, email, 'integrations'), { recursive: true });
 
   const map = await loadContainerMap();
   const existing = map[email];
 
   if (existing && dockerContainerRunning(existing.dockerId)) {
     // Recreate if resource mounts are missing (e.g. first run after feature was added)
-    if (!containerHasResourceMounts(existing.dockerId)) {
+    if (!containerHasExpectedMounts(existing.dockerId)) {
       console.log(`[terminal] recreating container for ${email} — resource mounts missing`);
       stopDockerSidecar(existing.dockerId);
     } else {
@@ -246,7 +256,7 @@ export const ensureDockerContainer = async (email: string, userId: number, homeD
   }
 
   if (existing && dockerContainerExists(existing.dockerId)) {
-    if (!containerHasResourceMounts(existing.dockerId)) {
+    if (!containerHasExpectedMounts(existing.dockerId)) {
       stopDockerSidecar(existing.dockerId);
     } else if (dockerStart(existing.dockerId)) {
       return existing;