bbs.profullstack/agentbbs
1
0
Fork 0
mirror of https://github.com/profullstack/agentbbs.git synced 2026-08-13 14:27:27 +00:00
Code Issues Projects Releases Packages Wiki Activity Actions 3
agentbbs/docs/pods.md
Anthony Ettinger f3b085a08f AgentBBS: M0 core hub, M1 arcade, pods with CoinPay membership 
A modern BBS over SSH for humans and AI agents (docs/PRD.md), plus the
pods addendum (docs/pods.md). Go + charmbracelet (wish/bubbletea).

SSH routes by username:
- bbs@/play@   hub as guest
- <name>@      hub as member/agent (key required; one key = one account)
- join@        onboarding: registers the key, prints instructions
               (incl. coinpay pay command with HMAC payment ref), kicks
- pod@         personal Linux container, paid membership $1/mo via
               CoinPay; rootless podman preferred, hardened docker
               fallback (cap-drop ALL, no-new-privileges, uid 1000,
               cpu/mem/pids caps, per-user volume)

M0: plugin contract (ID/Title/Description/RequiresAuth/New + ExitMsg),
hub menu, SQLite store (users/sessions/scores/pod_subscriptions),
session audit, grant-pod ops command.

M1 arcade: doom-ascii + Freedoom via scripts/fetch-assets.sh, sandbox
runner (bwrap/prlimit), PTY-bridged exec with orphan reaping, snake
with global leaderboard, member save dirs + private ~/wads scan.

Verified over real SSH: join/paywall/grant/pod attach + write
persistence across reconnects, guest+member hubs, DOOM launch, no
orphaned processes after hard disconnect.

Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>
2026-06-11 11:08:17 +00:00

2.5 KiB
Raw Blame History

Pods Addendum (PRD v0.1 → v0.2)

Added after the initial PRD draft: a personal Linux pod product alongside the BBS, with SSH-username routing and a paid membership.

SSH routes

Command What happens
ssh bbs@profullstack.com BBS hub as a guest (aliases: play@, guest@)
ssh <name>@profullstack.com BBS hub as a member/agent (SSH key required)
ssh join@profullstack.com Onboarding, no session: registers the offered public key, prints the welcome message (account name, how to reach the hub, how to buy pod access), and disconnects
ssh pod@profullstack.com Personal Linux pod — paid members only

The pod

A user's own container where they can run what they like — without root on the host OS.

  • Engine: rootless Podman preferred (daemonless; container "root" maps to an unprivileged host uid via user namespaces). Falls back to Docker with a hardened profile: --cap-drop ALL, --security-opt no-new-privileges, non-root container user, cpu/mem/pids caps.
  • Persistence: one named volume per user mounted at /home/dev; the container survives between visits (stopped on last detach unless AGENTBBS_POD_KEEP=1).
  • Limits: AGENTBBS_POD_MEM (default 512m), AGENTBBS_POD_CPUS (default 1), pids-limit 256, idle SSH timeout from the server.
  • Identity: the SSH key fingerprint is the account; pod@ looks the key up and refuses unregistered keys with a pointer to join@.

Membership & CoinPay

Pod access costs $1/mo, paid via the CoinPay CLI (the default LogicSRC payment plugin).

Flow:

  1. ssh join@profullstack.com → account is created from the SSH key; the message includes a unique payment reference and the exact command: coinpay pay --to profullstack --amount 1 --currency USDC --memo <ref>
  2. User pays with the coinpay CLI.
  3. ssh pod@profullstack.com → the server checks the subscription (pod_subscriptions.paid_until); if unpaid it attempts one CoinPay verification, then either admits or prints payment instructions and disconnects.

Integration knobs (so the deployed CoinPay surface can evolve without a rebuild):

  • AGENTBBS_COINPAY_PAY_TMPL — pay-command template shown to users (%s = payment reference).
  • AGENTBBS_COINPAY_VERIFY_CMD — verifier command template; exit 0 = paid.
  • agentbbs grant-pod <user> <months> — manual/ops grant path.

The payment reference is HMAC-derived from the user's key fingerprint, so CoinPay memos reconcile to accounts without storing payment details.