@agentrix/cli 0.0.11 → 0.0.13

package/dist/index.cjs

@@ -3,12 +3,11 @@
 require('yargs');
 require('yargs/helpers');
 require('chalk');
-require('./index-Dw2iFM1t.cjs');
-require('./logger-BZKdzrRM.cjs');
+require('./index-B_Hr2zCf.cjs');
+require('./logger-DzYRcKN1.cjs');
 require('@agentrix/shared');
 require('node:crypto');
 require('axios');
-require('node:fs');
 require('node:readline');
 require('fs');
 require('path');
@@ -16,20 +15,24 @@ require('node:os');
 require('open');
 require('socket.io-client');
 require('node:events');
+require('node:fs');
 require('node:path');
 require('child_process');
 require('ps-list');
 require('cross-spawn');
+require('@xmz-ai/sandbox-runtime');
+require('@xmz-ai/sandbox-runtime/dist/utils/platform.js');
 require('fastify');
 require('zod');
 require('fastify-type-provider-zod');
 require('url');
+require('node:stream/promises');
 require('@anthropic-ai/claude-agent-sdk');
 require('simple-git');
 require('node:fs/promises');
 require('crypto');
 require('@openai/codex-sdk');
 require('zod/v3');
-require('node:stream/promises');
 require('winston');
+require('os');
 

package/dist/index.mjs

@@ -1,12 +1,11 @@
 import 'yargs';
 import 'yargs/helpers';
 import 'chalk';
-import './index-CvGINSkT.mjs';
-import './logger-7E71dnBD.mjs';
+import './index-yYa7NL_3.mjs';
+import './logger-BzpMLIL-.mjs';
 import '@agentrix/shared';
 import 'node:crypto';
 import 'axios';
-import 'node:fs';
 import 'node:readline';
 import 'fs';
 import 'path';
@@ -14,19 +13,23 @@ import 'node:os';
 import 'open';
 import 'socket.io-client';
 import 'node:events';
+import 'node:fs';
 import 'node:path';
 import 'child_process';
 import 'ps-list';
 import 'cross-spawn';
+import '@xmz-ai/sandbox-runtime';
+import '@xmz-ai/sandbox-runtime/dist/utils/platform.js';
 import 'fastify';
 import 'zod';
 import 'fastify-type-provider-zod';
 import 'url';
+import 'node:stream/promises';
 import '@anthropic-ai/claude-agent-sdk';
 import 'simple-git';
 import 'node:fs/promises';
 import 'crypto';
 import '@openai/codex-sdk';
 import 'zod/v3';
-import 'node:stream/promises';
 import 'winston';
+import 'os';

package/dist/lib.cjs

@@ -1,6 +1,6 @@
 'use strict';
 
-var _package = require('./logger-BZKdzrRM.cjs');
+var _package = require('./logger-DzYRcKN1.cjs');
 require('winston');
 require('chalk');
 require('node:os');
@@ -11,6 +11,10 @@ require('node:path');
 require('@agentrix/shared');
 require('path');
 require('url');
+require('zod');
+require('@xmz-ai/sandbox-runtime');
+require('os');
+require('@xmz-ai/sandbox-runtime/dist/utils/platform.js');
 
 
 

package/dist/lib.d.cts

@@ -1,6 +1,7 @@
 import winston from 'winston';
 import { FileHandle } from 'node:fs/promises';
 import { AgentContext, CreateTaskEventData, ResumeTaskEventData } from '@agentrix/shared';
+import { z } from 'zod';
 
 /**
  * Winston-based logging system for agentrix CLI
@@ -16,6 +17,99 @@ import { AgentContext, CreateTaskEventData, ResumeTaskEventData } from '@agentri
 
 declare let logger: winston.Logger;
 
+declare const SandboxSettingsSchema: z.ZodObject<{
+    enabled: z.ZodDefault<z.ZodBoolean>;
+    network: z.ZodObject<{
+        allowedDomains: z.ZodUnion<[z.ZodLiteral<"*">, z.ZodArray<z.ZodEffects<z.ZodString, string, string>, "many">]>;
+        deniedDomains: z.ZodUnion<[z.ZodLiteral<"*">, z.ZodArray<z.ZodEffects<z.ZodString, string, string>, "many">]>;
+        allowUnixSockets: z.ZodOptional<z.ZodArray<z.ZodString, "many">>;
+        allowAllUnixSockets: z.ZodOptional<z.ZodBoolean>;
+        allowLocalBinding: z.ZodOptional<z.ZodBoolean>;
+        httpProxyPort: z.ZodOptional<z.ZodNumber>;
+        socksProxyPort: z.ZodOptional<z.ZodNumber>;
+        noProxyAddresses: z.ZodOptional<z.ZodArray<z.ZodString, "many">>;
+    }, "strip", z.ZodTypeAny, {
+        allowedDomains: string[] | "*";
+        deniedDomains: string[] | "*";
+        httpProxyPort?: number | undefined;
+        socksProxyPort?: number | undefined;
+        allowAllUnixSockets?: boolean | undefined;
+        noProxyAddresses?: string[] | undefined;
+        allowUnixSockets?: string[] | undefined;
+        allowLocalBinding?: boolean | undefined;
+    }, {
+        allowedDomains: string[] | "*";
+        deniedDomains: string[] | "*";
+        httpProxyPort?: number | undefined;
+        socksProxyPort?: number | undefined;
+        allowAllUnixSockets?: boolean | undefined;
+        noProxyAddresses?: string[] | undefined;
+        allowUnixSockets?: string[] | undefined;
+        allowLocalBinding?: boolean | undefined;
+    }>;
+    filesystem: z.ZodOptional<z.ZodObject<{
+        denyRead: z.ZodOptional<z.ZodArray<z.ZodString, "many">>;
+        allowRead: z.ZodOptional<z.ZodArray<z.ZodString, "many">>;
+        autoAllowSystemPaths: z.ZodOptional<z.ZodBoolean>;
+        allowWrite: z.ZodOptional<z.ZodArray<z.ZodString, "many">>;
+        denyWrite: z.ZodOptional<z.ZodArray<z.ZodString, "many">>;
+    }, "strip", z.ZodTypeAny, {
+        denyRead?: string[] | undefined;
+        allowRead?: string[] | undefined;
+        autoAllowSystemPaths?: boolean | undefined;
+        allowWrite?: string[] | undefined;
+        denyWrite?: string[] | undefined;
+    }, {
+        denyRead?: string[] | undefined;
+        allowRead?: string[] | undefined;
+        autoAllowSystemPaths?: boolean | undefined;
+        allowWrite?: string[] | undefined;
+        denyWrite?: string[] | undefined;
+    }>>;
+    env: z.ZodOptional<z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodNullable<z.ZodString>>>>;
+}, "strip", z.ZodTypeAny, {
+    enabled: boolean;
+    network: {
+        allowedDomains: string[] | "*";
+        deniedDomains: string[] | "*";
+        httpProxyPort?: number | undefined;
+        socksProxyPort?: number | undefined;
+        allowAllUnixSockets?: boolean | undefined;
+        noProxyAddresses?: string[] | undefined;
+        allowUnixSockets?: string[] | undefined;
+        allowLocalBinding?: boolean | undefined;
+    };
+    filesystem?: {
+        denyRead?: string[] | undefined;
+        allowRead?: string[] | undefined;
+        autoAllowSystemPaths?: boolean | undefined;
+        allowWrite?: string[] | undefined;
+        denyWrite?: string[] | undefined;
+    } | undefined;
+    env?: Record<string, string | null> | undefined;
+}, {
+    network: {
+        allowedDomains: string[] | "*";
+        deniedDomains: string[] | "*";
+        httpProxyPort?: number | undefined;
+        socksProxyPort?: number | undefined;
+        allowAllUnixSockets?: boolean | undefined;
+        noProxyAddresses?: string[] | undefined;
+        allowUnixSockets?: string[] | undefined;
+        allowLocalBinding?: boolean | undefined;
+    };
+    enabled?: boolean | undefined;
+    filesystem?: {
+        denyRead?: string[] | undefined;
+        allowRead?: string[] | undefined;
+        autoAllowSystemPaths?: boolean | undefined;
+        allowWrite?: string[] | undefined;
+        denyWrite?: string[] | undefined;
+    } | undefined;
+    env?: Record<string, string | null> | undefined;
+}>;
+type SandboxSettings = z.infer<typeof SandboxSettingsSchema>;
+
 interface DaemonState {
     pid: number;
     port: number;
@@ -47,6 +141,7 @@ declare class Machine implements AgentContext {
     readonly disableCaffeinate: boolean;
     readonly statePaths: MachineStatePaths;
     secretKey?: Uint8Array<ArrayBufferLike>;
+    private sandboxSettings;
     constructor();
     generateMachineId(): string;
     metadata(): any;
@@ -60,6 +155,7 @@ declare class Machine implements AgentContext {
     acquireDaemonLock(maxAttempts?: number, delayIncrementMs?: number): Promise<FileHandle | null>;
     releaseDaemonLock(lockHandle: FileHandle): Promise<void>;
     ensureDir(target: string): string;
+    resolveTaskDir(userId: string, taskId: string): string;
     resolveProjectDir(cwd: string | undefined, userId: string, taskId: string): string;
     resolveDataDir(userId: string, taskId: string): string;
     resolveAttachmentsDir(userId: string, taskId: string): string;
@@ -73,6 +169,21 @@ declare class Machine implements AgentContext {
     writeTaskInput(data: CreateTaskEventData | ResumeTaskEventData): void;
     readTaskInput(userId: string, taskId: string): (CreateTaskEventData | ResumeTaskEventData);
     getSecretKey(): Promise<Uint8Array<ArrayBufferLike> | undefined>;
+    /**
+     * Read settings file, returns null if file doesn't exist
+     */
+    readSettings(): any | null;
+    /**
+     * Write settings to file, creating parent directories if needed
+     */
+    writeSettings(settings: any): void;
+    /**
+     * Read or initialize settings with default value
+     * If file doesn't exist, writes defaultSettings and returns it
+     */
+    readOrInitSettings(defaultSettings: any): any;
+    private loadSandboxSettings;
+    getSandboxSettings(): SandboxSettings;
 }
 declare const machine: Machine;
 

package/dist/lib.d.mts

@@ -1,6 +1,7 @@
 import winston from 'winston';
 import { FileHandle } from 'node:fs/promises';
 import { AgentContext, CreateTaskEventData, ResumeTaskEventData } from '@agentrix/shared';
+import { z } from 'zod';
 
 /**
  * Winston-based logging system for agentrix CLI
@@ -16,6 +17,99 @@ import { AgentContext, CreateTaskEventData, ResumeTaskEventData } from '@agentri
 
 declare let logger: winston.Logger;
 
+declare const SandboxSettingsSchema: z.ZodObject<{
+    enabled: z.ZodDefault<z.ZodBoolean>;
+    network: z.ZodObject<{
+        allowedDomains: z.ZodUnion<[z.ZodLiteral<"*">, z.ZodArray<z.ZodEffects<z.ZodString, string, string>, "many">]>;
+        deniedDomains: z.ZodUnion<[z.ZodLiteral<"*">, z.ZodArray<z.ZodEffects<z.ZodString, string, string>, "many">]>;
+        allowUnixSockets: z.ZodOptional<z.ZodArray<z.ZodString, "many">>;
+        allowAllUnixSockets: z.ZodOptional<z.ZodBoolean>;
+        allowLocalBinding: z.ZodOptional<z.ZodBoolean>;
+        httpProxyPort: z.ZodOptional<z.ZodNumber>;
+        socksProxyPort: z.ZodOptional<z.ZodNumber>;
+        noProxyAddresses: z.ZodOptional<z.ZodArray<z.ZodString, "many">>;
+    }, "strip", z.ZodTypeAny, {
+        allowedDomains: string[] | "*";
+        deniedDomains: string[] | "*";
+        httpProxyPort?: number | undefined;
+        socksProxyPort?: number | undefined;
+        allowAllUnixSockets?: boolean | undefined;
+        noProxyAddresses?: string[] | undefined;
+        allowUnixSockets?: string[] | undefined;
+        allowLocalBinding?: boolean | undefined;
+    }, {
+        allowedDomains: string[] | "*";
+        deniedDomains: string[] | "*";
+        httpProxyPort?: number | undefined;
+        socksProxyPort?: number | undefined;
+        allowAllUnixSockets?: boolean | undefined;
+        noProxyAddresses?: string[] | undefined;
+        allowUnixSockets?: string[] | undefined;
+        allowLocalBinding?: boolean | undefined;
+    }>;
+    filesystem: z.ZodOptional<z.ZodObject<{
+        denyRead: z.ZodOptional<z.ZodArray<z.ZodString, "many">>;
+        allowRead: z.ZodOptional<z.ZodArray<z.ZodString, "many">>;
+        autoAllowSystemPaths: z.ZodOptional<z.ZodBoolean>;
+        allowWrite: z.ZodOptional<z.ZodArray<z.ZodString, "many">>;
+        denyWrite: z.ZodOptional<z.ZodArray<z.ZodString, "many">>;
+    }, "strip", z.ZodTypeAny, {
+        denyRead?: string[] | undefined;
+        allowRead?: string[] | undefined;
+        autoAllowSystemPaths?: boolean | undefined;
+        allowWrite?: string[] | undefined;
+        denyWrite?: string[] | undefined;
+    }, {
+        denyRead?: string[] | undefined;
+        allowRead?: string[] | undefined;
+        autoAllowSystemPaths?: boolean | undefined;
+        allowWrite?: string[] | undefined;
+        denyWrite?: string[] | undefined;
+    }>>;
+    env: z.ZodOptional<z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodNullable<z.ZodString>>>>;
+}, "strip", z.ZodTypeAny, {
+    enabled: boolean;
+    network: {
+        allowedDomains: string[] | "*";
+        deniedDomains: string[] | "*";
+        httpProxyPort?: number | undefined;
+        socksProxyPort?: number | undefined;
+        allowAllUnixSockets?: boolean | undefined;
+        noProxyAddresses?: string[] | undefined;
+        allowUnixSockets?: string[] | undefined;
+        allowLocalBinding?: boolean | undefined;
+    };
+    filesystem?: {
+        denyRead?: string[] | undefined;
+        allowRead?: string[] | undefined;
+        autoAllowSystemPaths?: boolean | undefined;
+        allowWrite?: string[] | undefined;
+        denyWrite?: string[] | undefined;
+    } | undefined;
+    env?: Record<string, string | null> | undefined;
+}, {
+    network: {
+        allowedDomains: string[] | "*";
+        deniedDomains: string[] | "*";
+        httpProxyPort?: number | undefined;
+        socksProxyPort?: number | undefined;
+        allowAllUnixSockets?: boolean | undefined;
+        noProxyAddresses?: string[] | undefined;
+        allowUnixSockets?: string[] | undefined;
+        allowLocalBinding?: boolean | undefined;
+    };
+    enabled?: boolean | undefined;
+    filesystem?: {
+        denyRead?: string[] | undefined;
+        allowRead?: string[] | undefined;
+        autoAllowSystemPaths?: boolean | undefined;
+        allowWrite?: string[] | undefined;
+        denyWrite?: string[] | undefined;
+    } | undefined;
+    env?: Record<string, string | null> | undefined;
+}>;
+type SandboxSettings = z.infer<typeof SandboxSettingsSchema>;
+
 interface DaemonState {
     pid: number;
     port: number;
@@ -47,6 +141,7 @@ declare class Machine implements AgentContext {
     readonly disableCaffeinate: boolean;
     readonly statePaths: MachineStatePaths;
     secretKey?: Uint8Array<ArrayBufferLike>;
+    private sandboxSettings;
     constructor();
     generateMachineId(): string;
     metadata(): any;
@@ -60,6 +155,7 @@ declare class Machine implements AgentContext {
     acquireDaemonLock(maxAttempts?: number, delayIncrementMs?: number): Promise<FileHandle | null>;
     releaseDaemonLock(lockHandle: FileHandle): Promise<void>;
     ensureDir(target: string): string;
+    resolveTaskDir(userId: string, taskId: string): string;
     resolveProjectDir(cwd: string | undefined, userId: string, taskId: string): string;
     resolveDataDir(userId: string, taskId: string): string;
     resolveAttachmentsDir(userId: string, taskId: string): string;
@@ -73,6 +169,21 @@ declare class Machine implements AgentContext {
     writeTaskInput(data: CreateTaskEventData | ResumeTaskEventData): void;
     readTaskInput(userId: string, taskId: string): (CreateTaskEventData | ResumeTaskEventData);
     getSecretKey(): Promise<Uint8Array<ArrayBufferLike> | undefined>;
+    /**
+     * Read settings file, returns null if file doesn't exist
+     */
+    readSettings(): any | null;
+    /**
+     * Write settings to file, creating parent directories if needed
+     */
+    writeSettings(settings: any): void;
+    /**
+     * Read or initialize settings with default value
+     * If file doesn't exist, writes defaultSettings and returns it
+     */
+    readOrInitSettings(defaultSettings: any): any;
+    private loadSandboxSettings;
+    getSandboxSettings(): SandboxSettings;
 }
 declare const machine: Machine;
 

package/dist/lib.mjs

@@ -1,4 +1,4 @@
-export { M as Machine, l as logger, m as machine } from './logger-7E71dnBD.mjs';
+export { M as Machine, l as logger, m as machine } from './logger-BzpMLIL-.mjs';
 import 'winston';
 import 'chalk';
 import 'node:os';
@@ -9,3 +9,7 @@ import 'node:path';
 import '@agentrix/shared';
 import 'path';
 import 'url';
+import 'zod';
+import '@xmz-ai/sandbox-runtime';
+import 'os';
+import '@xmz-ai/sandbox-runtime/dist/utils/platform.js';