0xkobold 0.2.0 → 0.3.0

package/dist/src/sandbox/docker-runner.js

@@ -0,0 +1,228 @@
+/**
+ * Docker Sandbox Runner - v0.3.0
+ *
+ * Containerized execution for security isolation.
+ * Docker sandboxing for tools and agent execution.
+ */
+import { spawn } from "node:child_process";
+const DEFAULT_CONFIG = {
+    image: "node:20-slim",
+    memoryLimit: "512m",
+    cpuLimit: "1.0",
+    timeout: 30000,
+    volumes: [],
+    network: "none",
+    user: "node",
+    workingDir: "/workspace",
+};
+class DockerRunner {
+    config;
+    available = null;
+    constructor(config = {}) {
+        this.config = { ...DEFAULT_CONFIG, ...config };
+    }
+    /**
+     * Check if Docker is available
+     */
+    async isAvailable() {
+        if (this.available !== null)
+            return this.available;
+        try {
+            const result = await this.execCommand("docker", ["version"]);
+            this.available = result.success;
+            return this.available;
+        }
+        catch {
+            this.available = false;
+            return false;
+        }
+    }
+    /**
+     * Run command in Docker container
+     */
+    async run(options) {
+        if (!(await this.isAvailable())) {
+            return {
+                success: false,
+                stdout: "",
+                stderr: "Docker not available. Install Docker or check permissions.",
+                exitCode: -1,
+                duration: 0,
+            };
+        }
+        const startTime = Date.now();
+        const timeout = options.timeout || this.config.timeout;
+        // Build docker run arguments
+        const args = [
+            "run",
+            "--rm",
+            "--memory", this.config.memoryLimit,
+            "--cpus", this.config.cpuLimit,
+            "--network", this.config.network,
+            "--user", this.config.user,
+            "--workdir", this.config.workingDir,
+            "-i", // Interactive for stdin
+        ];
+        // Add timeout
+        if (timeout > 0) {
+            args.push("--stop-timeout", String(Math.floor(timeout / 1000)));
+        }
+        // Add volumes
+        for (const vol of this.config.volumes) {
+            const ro = vol.readonly ? ":ro" : "";
+            args.push("-v", `${vol.host}:${vol.container}${ro}`);
+        }
+        // Add environment variables
+        if (options.env) {
+            for (const [key, value] of Object.entries(options.env)) {
+                args.push("-e", `${key}=${value}`);
+            }
+        }
+        // Add image
+        args.push(this.config.image);
+        // Add command
+        args.push(options.command);
+        if (options.args) {
+            args.push(...options.args);
+        }
+        return new Promise((resolve) => {
+            const child = spawn("docker", args, {
+                stdio: ["pipe", "pipe", "pipe"],
+            });
+            let stdout = "";
+            let stderr = "";
+            let killed = false;
+            // Collect stdout
+            child.stdout?.on("data", (data) => {
+                stdout += data.toString();
+            });
+            // Collect stderr
+            child.stderr?.on("data", (data) => {
+                stderr += data.toString();
+            });
+            // Send stdin if provided
+            if (options.stdin) {
+                child.stdin?.write(options.stdin);
+                child.stdin?.end();
+            }
+            // Timeout handling
+            const timeoutId = setTimeout(() => {
+                killed = true;
+                child.kill("SIGKILL");
+            }, timeout);
+            // Process completion
+            child.on("exit", (code) => {
+                clearTimeout(timeoutId);
+                const duration = Date.now() - startTime;
+                resolve({
+                    success: code === 0 && !killed,
+                    stdout,
+                    stderr,
+                    exitCode: code ?? -1,
+                    duration,
+                    killed,
+                });
+            });
+            child.on("error", (err) => {
+                clearTimeout(timeoutId);
+                resolve({
+                    success: false,
+                    stdout,
+                    stderr: err.message,
+                    exitCode: -1,
+                    duration: Date.now() - startTime,
+                });
+            });
+        });
+    }
+    /**
+     * Create workspace volume
+     */
+    async createWorkspace(workspacePath) {
+        const containerPath = `/workspace-${Date.now()}`;
+        this.config.volumes.push({
+            host: workspacePath,
+            container: containerPath,
+            readonly: false,
+        });
+        return containerPath;
+    }
+    /**
+     * Pull image if not present
+     */
+    async pullImage() {
+        try {
+            const result = await this.execCommand("docker", [
+                "pull",
+                this.config.image,
+            ]);
+            return result.success;
+        }
+        catch {
+            return false;
+        }
+    }
+    /**
+     * Get container logs
+     */
+    async getLogs(containerId) {
+        const result = await this.execCommand("docker", ["logs", containerId]);
+        return result.success ? result.stdout : "";
+    }
+    /**
+     * List running containers
+     */
+    async listContainers() {
+        const result = await this.execCommand("docker", [
+            "ps",
+            "--format",
+            "{{.ID}}",
+        ]);
+        return result.success ? result.stdout.trim().split("\n").filter(Boolean) : [];
+    }
+    /**
+     * Stop container
+     */
+    async stopContainer(containerId) {
+        const result = await this.execCommand("docker", ["stop", containerId]);
+        return result.success;
+    }
+    /**
+     * Execute command helper
+     */
+    execCommand(cmd, args) {
+        return new Promise((resolve) => {
+            const child = spawn(cmd, args, {
+                stdio: ["ignore", "pipe", "pipe"],
+            });
+            let stdout = "";
+            let stderr = "";
+            child.stdout?.on("data", (data) => {
+                stdout += data.toString();
+            });
+            child.stderr?.on("data", (data) => {
+                stderr += data.toString();
+            });
+            child.on("exit", (code) => {
+                resolve({ success: code === 0, stdout, stderr });
+            });
+            child.on("error", () => {
+                resolve({ success: false, stdout, stderr });
+            });
+        });
+    }
+}
+// Singleton
+let runner = null;
+export function getDockerRunner(config) {
+    if (!runner) {
+        runner = new DockerRunner(config);
+    }
+    return runner;
+}
+export function resetDockerRunner() {
+    runner = null;
+}
+export { DockerRunner, DEFAULT_CONFIG };
+export default DockerRunner;
+//# sourceMappingURL=docker-runner.js.map

package/dist/src/sandbox/docker-runner.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"docker-runner.js","sourceRoot":"","sources":["../../../src/sandbox/docker-runner.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,OAAO,EAAE,KAAK,EAAE,MAAM,oBAAoB,CAAC;AAiC3C,MAAM,cAAc,GAAiB;IACnC,KAAK,EAAE,cAAc;IACrB,WAAW,EAAE,MAAM;IACnB,QAAQ,EAAE,KAAK;IACf,OAAO,EAAE,KAAK;IACd,OAAO,EAAE,EAAE;IACX,OAAO,EAAE,MAAM;IACf,IAAI,EAAE,MAAM;IACZ,UAAU,EAAE,YAAY;CACzB,CAAC;AAEF,MAAM,YAAY;IACR,MAAM,CAAe;IACrB,SAAS,GAAmB,IAAI,CAAC;IAEzC,YAAY,SAAgC,EAAE;QAC5C,IAAI,CAAC,MAAM,GAAG,EAAE,GAAG,cAAc,EAAE,GAAG,MAAM,EAAE,CAAC;IACjD,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,WAAW;QACf,IAAI,IAAI,CAAC,SAAS,KAAK,IAAI;YAAE,OAAO,IAAI,CAAC,SAAS,CAAC;QAEnD,IAAI,CAAC;YACH,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,WAAW,CAAC,QAAQ,EAAE,CAAC,SAAS,CAAC,CAAC,CAAC;YAC7D,IAAI,CAAC,SAAS,GAAG,MAAM,CAAC,OAAO,CAAC;YAChC,OAAO,IAAI,CAAC,SAAS,CAAC;QACxB,CAAC;QAAC,MAAM,CAAC;YACP,IAAI,CAAC,SAAS,GAAG,KAAK,CAAC;YACvB,OAAO,KAAK,CAAC;QACf,CAAC;IACH,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,GAAG,CAAC,OAAyB;QACjC,IAAI,CAAC,CAAC,MAAM,IAAI,CAAC,WAAW,EAAE,CAAC,EAAE,CAAC;YAChC,OAAO;gBACL,OAAO,EAAE,KAAK;gBACd,MAAM,EAAE,EAAE;gBACV,MAAM,EAAE,4DAA4D;gBACpE,QAAQ,EAAE,CAAC,CAAC;gBACZ,QAAQ,EAAE,CAAC;aACZ,CAAC;QACJ,CAAC;QAED,MAAM,SAAS,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QAC7B,MAAM,OAAO,GAAG,OAAO,CAAC,OAAO,IAAI,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC;QAEvD,6BAA6B;QAC7B,MAAM,IAAI,GAAa;YACrB,KAAK;YACL,MAAM;YACN,UAAU,EAAE,IAAI,CAAC,MAAM,CAAC,WAAW;YACnC,QAAQ,EAAE,IAAI,CAAC,MAAM,CAAC,QAAQ;YAC9B,WAAW,EAAE,IAAI,CAAC,MAAM,CAAC,OAAO;YAChC,QAAQ,EAAE,IAAI,CAAC,MAAM,CAAC,IAAI;YAC1B,WAAW,EAAE,IAAI,CAAC,MAAM,CAAC,UAAU;YACnC,IAAI,EAAE,wBAAwB;SAC/B,CAAC;QAEF,cAAc;QACd,IAAI,OAAO,GAAG,CAAC,EAAE,CAAC;YAChB,IAAI,CAAC,IAAI,CAAC,gBAAgB,EAAE,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,OAAO,GAAG,IAAI,CAAC,CAAC,CAAC,CAAC;QAClE,CAAC;QAED,cAAc;QACd,KAAK,MAAM,GAAG,IAAI,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;YACtC,MAAM,EAAE,GAAG,GAAG,CAAC,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,CAAC;YACrC,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,GAAG,GAAG,CAAC,IAAI,IAAI,GAAG,CAAC,SAAS,GAAG,EAAE,EAAE,CAAC,CAAC;QACvD,CAAC;QAED,4BAA4B;QAC5B,IAAI,OAAO,CAAC,GAAG,EAAE,CAAC;YAChB,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC;gBACvD,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,GAAG,GAAG,IAAI,KAAK,EAAE,CAAC,CAAC;YACrC,CAAC;QACH,CAAC;QAED,YAAY;QACZ,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;QAE7B,cAAc;QACd,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC;QAC3B,IAAI,OAAO,CAAC,IAAI,EAAE,CAAC;YACjB,IAAI,CAAC,IAAI,CAAC,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;QAC7B,CAAC;QAED,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,EAAE;YAC7B,MAAM,KAAK,GAAG,KAAK,CAAC,QAAQ,EAAE,IAAI,EAAE;gBAClC,KAAK,EAAE,CAAC,MAAM,EAAE,MAAM,EAAE,MAAM,CAAC;aAChC,CAAC,CAAC;YAEH,IAAI,MAAM,GAAG,EAAE,CAAC;YAChB,IAAI,MAAM,GAAG,EAAE,CAAC;YAChB,IAAI,MAAM,GAAG,KAAK,CAAC;YAEnB,iBAAiB;YACjB,KAAK,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,EAAE;gBAChC,MAAM,IAAI,IAAI,CAAC,QAAQ,EAAE,CAAC;YAC5B,CAAC,CAAC,CAAC;YAEH,iBAAiB;YACjB,KAAK,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,EAAE;gBAChC,MAAM,IAAI,IAAI,CAAC,QAAQ,EAAE,CAAC;YAC5B,CAAC,CAAC,CAAC;YAEH,yBAAyB;YACzB,IAAI,OAAO,CAAC,KAAK,EAAE,CAAC;gBAClB,KAAK,CAAC,KAAK,EAAE,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;gBAClC,KAAK,CAAC,KAAK,EAAE,GAAG,EAAE,CAAC;YACrB,CAAC;YAED,mBAAmB;YACnB,MAAM,SAAS,GAAG,UAAU,CAAC,GAAG,EAAE;gBAChC,MAAM,GAAG,IAAI,CAAC;gBACd,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;YACxB,CAAC,EAAE,OAAO,CAAC,CAAC;YAEZ,qBAAqB;YACrB,KAAK,CAAC,EAAE,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,EAAE;gBACxB,YAAY,CAAC,SAAS,CAAC,CAAC;gBACxB,MAAM,QAAQ,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,SAAS,CAAC;gBAExC,OAAO,CAAC;oBACN,OAAO,EAAE,IAAI,KAAK,CAAC,IAAI,CAAC,MAAM;oBAC9B,MAAM;oBACN,MAAM;oBACN,QAAQ,EAAE,IAAI,IAAI,CAAC,CAAC;oBACpB,QAAQ;oBACR,MAAM;iBACP,CAAC,CAAC;YACL,CAAC,CAAC,CAAC;YAEH,KAAK,CAAC,EAAE,CAAC,OAAO,EAAE,CAAC,GAAG,EAAE,EAAE;gBACxB,YAAY,CAAC,SAAS,CAAC,CAAC;gBACxB,OAAO,CAAC;oBACN,OAAO,EAAE,KAAK;oBACd,MAAM;oBACN,MAAM,EAAE,GAAG,CAAC,OAAO;oBACnB,QAAQ,EAAE,CAAC,CAAC;oBACZ,QAAQ,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,SAAS;iBACjC,CAAC,CAAC;YACL,CAAC,CAAC,CAAC;QACL,CAAC,CAAC,CAAC;IACL,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,eAAe,CAAC,aAAqB;QACzC,MAAM,aAAa,GAAG,cAAc,IAAI,CAAC,GAAG,EAAE,EAAE,CAAC;QACjD,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC;YACvB,IAAI,EAAE,aAAa;YACnB,SAAS,EAAE,aAAa;YACxB,QAAQ,EAAE,KAAK;SAChB,CAAC,CAAC;QACH,OAAO,aAAa,CAAC;IACvB,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,SAAS;QACb,IAAI,CAAC;YACH,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,WAAW,CAAC,QAAQ,EAAE;gBAC9C,MAAM;gBACN,IAAI,CAAC,MAAM,CAAC,KAAK;aAClB,CAAC,CAAC;YACH,OAAO,MAAM,CAAC,OAAO,CAAC;QACxB,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,KAAK,CAAC;QACf,CAAC;IACH,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,OAAO,CAAC,WAAmB;QAC/B,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,WAAW,CAAC,QAAQ,EAAE,CAAC,MAAM,EAAE,WAAW,CAAC,CAAC,CAAC;QACvE,OAAO,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC;IAC7C,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,cAAc;QAClB,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,WAAW,CAAC,QAAQ,EAAE;YAC9C,IAAI;YACJ,UAAU;YACV,SAAS;SACV,CAAC,CAAC;QACH,OAAO,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;IAChF,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,aAAa,CAAC,WAAmB;QACrC,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,WAAW,CAAC,QAAQ,EAAE,CAAC,MAAM,EAAE,WAAW,CAAC,CAAC,CAAC;QACvE,OAAO,MAAM,CAAC,OAAO,CAAC;IACxB,CAAC;IAED;;OAEG;IACK,WAAW,CAAC,GAAW,EAAE,IAAc;QAC7C,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,EAAE;YAC7B,MAAM,KAAK,GAAG,KAAK,CAAC,GAAG,EAAE,IAAI,EAAE;gBAC7B,KAAK,EAAE,CAAC,QAAQ,EAAE,MAAM,EAAE,MAAM,CAAC;aAClC,CAAC,CAAC;YAEH,IAAI,MAAM,GAAG,EAAE,CAAC;YAChB,IAAI,MAAM,GAAG,EAAE,CAAC;YAEhB,KAAK,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,EAAE;gBAChC,MAAM,IAAI,IAAI,CAAC,QAAQ,EAAE,CAAC;YAC5B,CAAC,CAAC,CAAC;YAEH,KAAK,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,EAAE;gBAChC,MAAM,IAAI,IAAI,CAAC,QAAQ,EAAE,CAAC;YAC5B,CAAC,CAAC,CAAC;YAEH,KAAK,CAAC,EAAE,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,EAAE;gBACxB,OAAO,CAAC,EAAE,OAAO,EAAE,IAAI,KAAK,CAAC,EAAE,MAAM,EAAE,MAAM,EAAE,CAAC,CAAC;YACnD,CAAC,CAAC,CAAC;YAEH,KAAK,CAAC,EAAE,CAAC,OAAO,EAAE,GAAG,EAAE;gBACrB,OAAO,CAAC,EAAE,OAAO,EAAE,KAAK,EAAE,MAAM,EAAE,MAAM,EAAE,CAAC,CAAC;YAC9C,CAAC,CAAC,CAAC;QACL,CAAC,CAAC,CAAC;IACL,CAAC;CACF;AAED,YAAY;AACZ,IAAI,MAAM,GAAwB,IAAI,CAAC;AAEvC,MAAM,UAAU,eAAe,CAAC,MAA8B;IAC5D,IAAI,CAAC,MAAM,EAAE,CAAC;QACZ,MAAM,GAAG,IAAI,YAAY,CAAC,MAAM,CAAC,CAAC;IACpC,CAAC;IACD,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,MAAM,UAAU,iBAAiB;IAC/B,MAAM,GAAG,IAAI,CAAC;AAChB,CAAC;AAED,OAAO,EAAE,YAAY,EAAE,cAAc,EAAE,CAAC;AACxC,eAAe,YAAY,CAAC"}

package/dist/src/sandbox/index.js

@@ -0,0 +1,3 @@
+// Sandbox Module - v0.3.0
+export { DockerRunner, getDockerRunner, resetDockerRunner, DEFAULT_CONFIG, } from "./docker-runner.js";
+//# sourceMappingURL=index.js.map

package/dist/src/sandbox/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../src/sandbox/index.ts"],"names":[],"mappings":"AAAA,0BAA0B;AAC1B,OAAO,EACL,YAAY,EACZ,eAAe,EACf,iBAAiB,EACjB,cAAc,GAIf,MAAM,oBAAoB,CAAC"}