@agenthippo-ai/agenthippo 0.1.0

package/out/scripts/gateway/Dockerfile.serve

@@ -0,0 +1,45 @@
+# AgentHippo — Sandboxed Agent Server
+#
+# This container runs agenthippo serve with workspace isolation:
+# - /workspace is the only writable volume (mounted at runtime)
+# - ~/.openclaw/ is NOT mounted — config is protected from agent writes
+# - Host filesystem is inaccessible
+# - /tmp is ephemeral (tmpfs, noexec)
+#
+# Build:
+#   docker build -t agenthippo-serve -f Dockerfile.serve .
+#
+# Run:
+#   docker run --rm \
+#     -v /path/to/workspace:/workspace:rw \
+#     -e ANTHROPIC_API_KEY=sk-... \
+#     -e OPENCLAW_GATEWAY_URL=ws://host.docker.internal:18789 \
+#     -p 3000:3000 \
+#     agenthippo-serve serve -a myagent -p 3000 -w /workspace
+
+FROM node:22-slim
+
+# Install common tools agents may need
+RUN apt-get update && \
+    apt-get install -y --no-install-recommends \
+      git \
+      ca-certificates \
+      curl \
+      jq \
+      ripgrep \
+    && rm -rf /var/lib/apt/lists/*
+
+# Install agenthippo CLI.
+# Engine SDKs (Claude, Codex) are auto-installed by the CLI on first run
+# via ensureDeps() — no need to pre-install them here.
+# For dev: mount the binary instead of installing from npm.
+ARG AGENTHIPPO_SOURCE=agenthippo@latest
+RUN npm install -g ${AGENTHIPPO_SOURCE} 2>/dev/null || true
+
+RUN mkdir -p /workspace
+
+WORKDIR /workspace
+
+ENTRYPOINT ["agenthippo"]
+CMD ["serve", "--help"]
+

package/out/scripts/gateway/docker-serve.sh

@@ -0,0 +1,248 @@
+#!/usr/bin/env bash
+#
+# Copyright (c) AgentHippo.ai. All rights reserved.
+#
+# AgentHippo — Sandboxed Agent Server (Docker)
+#
+# Runs agenthippo serve inside a Docker container with workspace isolation.
+# The agent can only write to the workspace volume — ~/.openclaw/ and other
+# host paths are read-only or unmounted.
+#
+# Usage:
+#   ./docker-serve.sh -a myagent -w /path/to/workspace
+#   ./docker-serve.sh -a myagent -w . --bind telegram,whatsapp
+#   ./docker-serve.sh -a myagent -w . --bind "*" --gateway-url ws://host:18789
+#   ./docker-serve.sh --build  # Build the Docker image first
+#
+# Environment:
+#   ANTHROPIC_API_KEY           API key for Claude
+#   OPENAI_API_KEY              API key for Codex/OpenAI
+#   AGENTHIPPO_LITELLM_API_KEY API key for LiteLLM proxy
+#   AGENTHIPPO_LITELLM_BASE_URL LiteLLM base URL
+#   OPENCLAW_GATEWAY_URL       Gateway WebSocket URL (default: ws://host.docker.internal:18789)
+#   OPENCLAW_GATEWAY_TOKEN     Gateway auth token
+#
+
+set -euo pipefail
+
+# Colors
+RED='\033[0;31m'
+GREEN='\033[0;32m'
+YELLOW='\033[1;33m'
+CYAN='\033[0;36m'
+BOLD='\033[1m'
+NC='\033[0m'
+
+# Defaults
+IMAGE_NAME="agenthippo-serve"
+AGENT=""
+WORKSPACE=""
+BIND=""
+PORT=3000
+GATEWAY_URL="${OPENCLAW_GATEWAY_URL:-}"
+GATEWAY_TOKEN="${OPENCLAW_GATEWAY_TOKEN:-}"
+BUILD_ONLY=false
+EXTRA_ARGS=()
+
+# Parse arguments
+while [[ $# -gt 0 ]]; do
+    case "$1" in
+        -a|--agent)
+            AGENT="$2"
+            shift 2
+            ;;
+        -w|--workspace)
+            WORKSPACE="$2"
+            shift 2
+            ;;
+        -p|--port)
+            PORT="$2"
+            shift 2
+            ;;
+        --bind)
+            BIND="$2"
+            shift 2
+            ;;
+        --gateway-url)
+            GATEWAY_URL="$2"
+            shift 2
+            ;;
+        --gateway-token)
+            GATEWAY_TOKEN="$2"
+            shift 2
+            ;;
+        --build)
+            BUILD_ONLY=true
+            shift
+            ;;
+        --image)
+            IMAGE_NAME="$2"
+            shift 2
+            ;;
+        --help|-h)
+            echo "Usage: $0 [options]"
+            echo ""
+            echo "Options:"
+            echo "  -a, --agent <name>         Agent pack name (required)"
+            echo "  -w, --workspace <path>     Workspace directory (required)"
+            echo "  -p, --port <port>          HTTP server port (default: 3000)"
+            echo "  --bind <channels>          Bind to gateway channels (e.g. telegram,whatsapp or *)"
+            echo "  --gateway-url <url>        Gateway WebSocket URL"
+            echo "  --gateway-token <token>    Gateway auth token"
+            echo "  --build                    Build the Docker image and exit"
+            echo "  --image <name>             Docker image name (default: agenthippo-serve)"
+            echo "  --help, -h                 Show this help"
+            echo ""
+            echo "Environment variables:"
+            echo "  ANTHROPIC_API_KEY, OPENAI_API_KEY, AGENTHIPPO_LITELLM_API_KEY,"
+            echo "  AGENTHIPPO_LITELLM_BASE_URL, OPENCLAW_GATEWAY_URL, OPENCLAW_GATEWAY_TOKEN"
+            exit 0
+            ;;
+        --)
+            shift
+            EXTRA_ARGS+=("$@")
+            break
+            ;;
+        *)
+            EXTRA_ARGS+=("$1")
+            shift
+            ;;
+    esac
+done
+
+SCRIPT_DIR="$(cd "$(dirname "${BASH_SOURCE[0]}")" && pwd)"
+DOCKERFILE_PATH="$SCRIPT_DIR/Dockerfile.serve"
+
+# ============================================================================
+# Build
+# ============================================================================
+
+build_image() {
+    echo -e "${CYAN}Building Docker image: ${IMAGE_NAME}${NC}"
+
+    if [[ ! -f "$DOCKERFILE_PATH" ]]; then
+        echo -e "${RED}Error:${NC} Dockerfile not found at ${DOCKERFILE_PATH}"
+        echo "       Expected: Dockerfile.serve next to this script"
+        exit 1
+    fi
+
+    docker build -t "$IMAGE_NAME" -f "$DOCKERFILE_PATH" "$SCRIPT_DIR"
+    echo -e "${GREEN}✓${NC} Image built: ${IMAGE_NAME}"
+}
+
+# ============================================================================
+# Run
+# ============================================================================
+
+run_container() {
+    if [[ -z "$AGENT" ]]; then
+        echo -e "${RED}Error:${NC} --agent is required"
+        exit 1
+    fi
+    if [[ -z "$WORKSPACE" ]]; then
+        echo -e "${RED}Error:${NC} --workspace is required"
+        exit 1
+    fi
+
+    # Resolve absolute path
+    WORKSPACE="$(cd "$WORKSPACE" && pwd)"
+
+    # Check image exists
+    if ! docker image inspect "$IMAGE_NAME" &>/dev/null; then
+        echo -e "${YELLOW}Image ${IMAGE_NAME} not found, building...${NC}"
+        build_image
+    fi
+
+    # Build docker run arguments
+    local docker_args=(
+        --rm
+        --name "agenthippo-${AGENT}-$$"
+
+        # Workspace: read-write (the only writable volume)
+        -v "${WORKSPACE}:/workspace:rw"
+
+        # Temp: agent needs /tmp for SDK state and session data.
+        # No noexec — engine SDKs install and execute binaries from temp paths.
+        --tmpfs /tmp:rw,nosuid,size=512m
+
+        # Port mapping
+        -p "${PORT}:${PORT}"
+    )
+
+    # Pass API keys as environment variables (never mounted as files)
+    local env_vars=(
+        ANTHROPIC_API_KEY
+        OPENAI_API_KEY
+        CLAUDE_API_KEY
+        AGENTHIPPO_LITELLM_API_KEY
+        AGENTHIPPO_LITELLM_BASE_URL
+        AGENTIDE_LITELLM_API_KEY
+        AGENTIDE_LITELLM_BASE_URL
+    )
+    for var in "${env_vars[@]}"; do
+        if [[ -n "${!var:-}" ]]; then
+            docker_args+=(-e "${var}=${!var}")
+        fi
+    done
+
+    # Gateway connection
+    local resolved_gateway_url="$GATEWAY_URL"
+    if [[ -z "$resolved_gateway_url" ]]; then
+        # Default: connect to gateway on the host
+        resolved_gateway_url="ws://host.docker.internal:18789"
+    fi
+    docker_args+=(-e "OPENCLAW_GATEWAY_URL=${resolved_gateway_url}")
+    if [[ -n "$GATEWAY_TOKEN" ]]; then
+        docker_args+=(-e "OPENCLAW_GATEWAY_TOKEN=${GATEWAY_TOKEN}")
+    fi
+
+    # On Linux, host.docker.internal doesn't resolve by default
+    if [[ "$(uname)" == "Linux" ]]; then
+        docker_args+=(--add-host "host.docker.internal:host-gateway")
+    fi
+
+    # Build the serve command
+    local serve_args=(
+        "serve"
+        "-a" "$AGENT"
+        "-p" "$PORT"
+        "-w" "/workspace"
+    )
+    if [[ -n "$BIND" ]]; then
+        serve_args+=("--bind" "$BIND")
+    fi
+    serve_args+=("${EXTRA_ARGS[@]}")
+
+    echo -e "${BOLD}${CYAN}"
+    echo "  ╔═══════════════════════════════════════╗"
+    echo "  ║   AgentHippo (Sandboxed Container)    ║"
+    echo "  ╚═══════════════════════════════════════╝"
+    echo -e "${NC}"
+    echo -e "  Agent:     ${GREEN}${AGENT}${NC}"
+    echo -e "  Workspace: ${GREEN}${WORKSPACE}${NC} (rw)"
+    echo -e "  Port:      ${GREEN}${PORT}${NC}"
+    echo -e "  Gateway:   ${GREEN}${resolved_gateway_url}${NC}"
+    if [[ -n "$BIND" ]]; then
+        echo -e "  Bind:      ${GREEN}${BIND}${NC}"
+    fi
+    echo ""
+    echo -e "  ${CYAN}Security:${NC}"
+    echo -e "    ✓ Workspace is the only writable volume"
+    echo -e "    ✓ ~/.openclaw/ is NOT mounted (protected)"
+    echo -e "    ✓ Host filesystem is inaccessible"
+    echo ""
+
+    exec docker run "${docker_args[@]}" "$IMAGE_NAME" "${serve_args[@]}"
+}
+
+# ============================================================================
+# Main
+# ============================================================================
+
+if $BUILD_ONLY; then
+    build_image
+    exit 0
+fi
+
+run_container
+