@agent-sandbox/cli 0.1.1 → 0.2.0

package/README.md

@@ -4,6 +4,8 @@ Command-line interface for Agent Sandbox.
 
 ## Install
 
+Install or upgrade the CLI:
+
 ```bash
 npm install -g @agent-sandbox/cli
 ```
@@ -22,17 +24,24 @@ npx skills add https://github.com/usamaasfar/agent-sandbox/tree/main/skills/agen
 
 ```bash
 agent-sandbox create
-agent-sandbox write <sandboxId> "printf 'hello\n' > /proc/1/fd/1"
-agent-sandbox read <sandboxId>
-agent-sandbox delete <sandboxId>
+agent-sandbox write <sandboxId|name> "printf 'hello\n' > /proc/1/fd/1"
+agent-sandbox read <sandboxId|name>
+agent-sandbox delete <sandboxId|name>
 ```
 
 ## Command Reference
 
+### `--version`
+
+```bash
+agent-sandbox --version
+agent-sandbox -v
+```
+
 ### `create`
 
 ```bash
-agent-sandbox create [--name <name>] [--image <image>]
+agent-sandbox create [--name <name>] [--image <image>] [--clone <sandboxId|name>]
 ```
 
 Prints the `sandboxId`.
@@ -40,7 +49,7 @@ Prints the `sandboxId`.
 ### `delete`
 
 ```bash
-agent-sandbox delete <sandboxId>
+agent-sandbox delete <sandboxId|name>
 ```
 
 ### `list`
@@ -54,7 +63,7 @@ Prints a JSON array of managed sandboxes.
 ### `read`
 
 ```bash
-agent-sandbox read <sandboxId> [--tail <n>]
+agent-sandbox read <sandboxId|name> [--tail <n>]
 ```
 
 Returns container logs. `--tail` limits to the last N lines.
@@ -62,7 +71,7 @@ Returns container logs. `--tail` limits to the last N lines.
 ### `write`
 
 ```bash
-agent-sandbox write <sandboxId> <input> [--detach]
+agent-sandbox write <sandboxId|name> <input> [--detach]
 ```
 
 Runs the command and returns its output and exit code. Use `--detach` to fire-and-forget
@@ -71,7 +80,7 @@ Runs the command and returns its output and exit code. Use `--detach` to fire-an
 ### `upload`
 
 ```bash
-agent-sandbox upload <sandboxId> <localPath> <remotePath>
+agent-sandbox upload <sandboxId|name> <localPath> <remotePath>
 ```
 
 Both paths must be absolute.
@@ -79,7 +88,7 @@ Both paths must be absolute.
 ### `download`
 
 ```bash
-agent-sandbox download <sandboxId> <remotePath> <localPath>
+agent-sandbox download <sandboxId|name> <remotePath> <localPath>
 ```
 
 `remotePath` may be a file or directory. Both paths must be absolute.

package/dist/index.js

@@ -165,26 +165,71 @@ async function dockerJSON(options) {
 }
 
 // ../../packages/core/src/primitives/create.ts
-async function create(options = {}) {
-  const { name, image = "agent-sandbox" } = options;
-  const createResponse = await dockerJSON({
+async function copyVolume(sourceVolume, destVolume) {
+  const { Id } = await dockerJSON({
     method: "POST",
     path: "/containers/create",
-    query: name ? { name } : undefined,
     body: {
-      Image: image,
-      Labels: {
-        "agent-sandbox": "true"
+      Image: "ghcr.io/usamaasfar/agent-sandbox:latest",
+      Cmd: ["sh", "-c", "cp -a /from/. /to/"],
+      HostConfig: {
+        Binds: [`${sourceVolume}:/from:ro`, `${destVolume}:/to`]
       }
     }
   });
-  await dockerRequest({
+  try {
+    await dockerRequest({ method: "POST", path: `/containers/${Id}/start` });
+    const { StatusCode } = await dockerJSON({
+      method: "POST",
+      path: `/containers/${Id}/wait`
+    });
+    if (StatusCode !== 0) {
+      throw new SandboxError(`Volume copy failed with exit code ${StatusCode}`);
+    }
+  } finally {
+    await dockerRequest({ method: "DELETE", path: `/containers/${Id}`, allowStatus: [404] });
+  }
+}
+async function getVolumeForSandbox(sandboxId) {
+  const info = await dockerJSON({
+    method: "GET",
+    path: `/containers/${sandboxId}/json`
+  });
+  return info.Mounts.find((m) => m.Destination === "/data" && m.Type === "volume")?.Name;
+}
+async function create(options = {}) {
+  const { name, image = "ghcr.io/usamaasfar/agent-sandbox:latest", clone } = options;
+  const { Name: volume } = await dockerJSON({
     method: "POST",
-    path: `/containers/${createResponse.Id}/start`
+    path: "/volumes/create",
+    body: {}
   });
-  return {
-    sandboxId: createResponse.Id.slice(0, 12)
-  };
+  try {
+    if (clone) {
+      const sourceVolume = await getVolumeForSandbox(clone);
+      if (!sourceVolume) {
+        throw new SandboxError(`No volume found for sandbox ${clone}`);
+      }
+      await copyVolume(sourceVolume, volume);
+    }
+    const { Id } = await dockerJSON({
+      method: "POST",
+      path: "/containers/create",
+      query: name ? { name } : undefined,
+      body: {
+        Image: image,
+        Labels: { "agent-sandbox": "true" },
+        HostConfig: {
+          Binds: [`${volume}:/data`]
+        }
+      }
+    });
+    await dockerRequest({ method: "POST", path: `/containers/${Id}/start` });
+    return { sandboxId: Id.slice(0, 12) };
+  } catch (error) {
+    await dockerRequest({ method: "DELETE", path: `/volumes/${volume}`, allowStatus: [404] });
+    throw error;
+  }
 }
 // ../../packages/core/src/primitives/delete.ts
 function remapContainerNotFound(error, sandboxId) {
@@ -193,8 +238,20 @@ function remapContainerNotFound(error, sandboxId) {
   }
   throw error;
 }
+async function getVolumeForSandbox2(sandboxId) {
+  try {
+    const info = await dockerJSON({
+      method: "GET",
+      path: `/containers/${sandboxId}/json`
+    });
+    return info.Mounts?.find((m) => m.Destination === "/data" && m.Type === "volume")?.Name ?? null;
+  } catch {
+    return null;
+  }
+}
 async function deleteContainer(options) {
   const { sandboxId } = options;
+  const volume = await getVolumeForSandbox2(sandboxId);
   try {
     await dockerRequest({
       method: "POST",
@@ -212,9 +269,14 @@ async function deleteContainer(options) {
   } catch (error) {
     remapContainerNotFound(error, sandboxId);
   }
-  return {
-    ok: true
-  };
+  if (volume) {
+    await dockerRequest({
+      method: "DELETE",
+      path: `/volumes/${volume}`,
+      allowStatus: [404]
+    });
+  }
+  return { ok: true };
 }
 // ../../packages/core/src/primitives/download.ts
 import path2 from "path";
@@ -222,7 +284,12 @@ import path2 from "path";
 // ../../packages/core/src/archive.ts
 import { tmpdir } from "os";
 import path from "path";
-import { mkdir, mkdtemp, readdir, rename, rm, stat } from "fs/promises";
+import { cp, mkdir, mkdtemp, readdir, rename, rm, stat } from "fs/promises";
+function ensureSafeTarEntryName(name) {
+  if (name === "." || name === ".." || path.basename(name) !== name) {
+    throw new SandboxError(`Invalid remote path name: ${name}`);
+  }
+}
 function ensureAbsoluteHostPath(targetPath) {
   if (!path.isAbsolute(targetPath)) {
     throw new SandboxError(`Host path must be absolute: ${targetPath}`);
@@ -259,26 +326,70 @@ function spawnTar(command, options) {
     throw new SandboxError(`Failed to start tar: ${message}`);
   }
 }
-async function createTarStream(localPath) {
-  ensureAbsoluteHostPath(localPath);
-  await ensurePathExists(localPath);
+async function createTarSource(localPath, remoteName) {
   const directory = path.dirname(localPath);
   const name = path.basename(localPath);
-  const process2 = spawnTar(["tar", "-C", directory, "-cf", "-", name], {
-    stdout: "pipe",
-    stderr: "pipe"
-  });
+  if (!remoteName || remoteName === name) {
+    return {
+      cleanup: async () => {},
+      directory,
+      name
+    };
+  }
+  ensureSafeTarEntryName(remoteName);
+  const stagingDirectory = await mkdtemp(path.join(tmpdir(), "agent-sandbox-upload-"));
+  const stagingPath = path.join(stagingDirectory, remoteName);
+  try {
+    await cp(localPath, stagingPath, { force: true, recursive: true });
+  } catch (error) {
+    await rm(stagingDirectory, { recursive: true, force: true });
+    throw error;
+  }
+  return {
+    cleanup: async () => {
+      await rm(stagingDirectory, { recursive: true, force: true });
+    },
+    directory: stagingDirectory,
+    name: remoteName
+  };
+}
+async function createTarStream(localPath, remoteName) {
+  ensureAbsoluteHostPath(localPath);
+  await ensurePathExists(localPath);
+  const source = await createTarSource(localPath, remoteName);
+  let process2;
+  try {
+    process2 = spawnTar(["tar", "-C", source.directory, "-cf", "-", "--", source.name], {
+      env: {
+        ...globalThis.process.env,
+        COPYFILE_DISABLE: "1"
+      },
+      stdout: "pipe",
+      stderr: "pipe"
+    });
+  } catch (error) {
+    await source.cleanup();
+    throw error;
+  }
   const stream = process2.stdout;
   if (!stream) {
+    await source.cleanup();
     throw new SandboxError("Tar create failed: tar did not produce an archive stream");
   }
   return {
     stream,
-    complete: () => ensureTarSuccess(process2, "Tar create"),
+    complete: async () => {
+      try {
+        await ensureTarSuccess(process2, "Tar create");
+      } finally {
+        await source.cleanup();
+      }
+    },
     abort: () => {
       try {
         process2.kill();
       } catch {}
+      source.cleanup().catch(() => {});
     }
   };
 }
@@ -436,7 +547,7 @@ function remapUploadError(error, sandboxId) {
 }
 async function upload(options) {
   ensureAbsoluteContainerPath2(options.remotePath);
-  const archive = await createTarStream(options.localPath);
+  const archive = await createTarStream(options.localPath, path3.posix.basename(options.remotePath));
   try {
     await dockerRequest({
       method: "PUT",
@@ -546,6 +657,7 @@ function readOption(args, index, name) {
 async function runCreateCommand(args) {
   let name;
   let image;
+  let clone;
   for (let i = 0;i < args.length; ) {
     const arg = args[i];
     switch (arg) {
@@ -561,11 +673,17 @@ async function runCreateCommand(args) {
         i = option.nextIndex;
         break;
       }
+      case "--clone": {
+        const option = readOption(args, i, "--clone");
+        clone = option.value;
+        i = option.nextIndex;
+        break;
+      }
       default:
         throw new Error(`Unknown argument: ${arg}`);
     }
   }
-  const options = { name, image };
+  const options = { name, image, clone };
   const result = await create(options);
   console.log(result.sandboxId);
 }
@@ -670,6 +788,49 @@ async function runWriteCommand(args) {
     }
   }
 }
+// package.json
+var package_default = {
+  name: "@agent-sandbox/cli",
+  version: "0.2.0",
+  description: "CLI to spin up isolated terminal sandboxes for AI agents",
+  type: "module",
+  license: "MIT",
+  bin: {
+    "agent-sandbox": "./dist/index.js"
+  },
+  files: [
+    "dist"
+  ],
+  scripts: {
+    dev: "bun run index.ts",
+    build: "bun build ./index.ts --outfile dist/index.js --target bun",
+    "build:binary": "bun build ./index.ts --compile --minify --bytecode --outfile dist/agent-sandbox"
+  },
+  devDependencies: {
+    "@agent-sandbox/core": "*",
+    "@types/bun": "^1.3.9"
+  },
+  engines: {
+    bun: ">=1.0.0"
+  },
+  repository: {
+    type: "git",
+    url: "git+https://github.com/usamaasfar/agent-sandbox.git",
+    directory: "apps/cli"
+  },
+  homepage: "https://github.com/usamaasfar/agent-sandbox#readme",
+  bugs: {
+    url: "https://github.com/usamaasfar/agent-sandbox/issues"
+  },
+  keywords: [
+    "sandbox",
+    "agent",
+    "ai",
+    "terminal",
+    "docker",
+    "cli"
+  ]
+};
 
 // index.ts
 var USAGE = "Usage: agent-sandbox <create|delete|list|read|write|upload|download> ...";
@@ -678,6 +839,10 @@ function printHelp() {
 }
 async function main() {
   const [command, ...rest] = process.argv.slice(2);
+  if (command === "--version" || command === "-v") {
+    console.log(package_default.version);
+    return;
+  }
   if (command === undefined || command === "--help" || command === "-h" || command === "help") {
     printHelp();
     return;

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@agent-sandbox/cli",
-  "version": "0.1.1",
+  "version": "0.2.0",
   "description": "CLI to spin up isolated terminal sandboxes for AI agents",
   "type": "module",
   "license": "MIT",