@agimon-ai/po-sandbox 0.0.0-alpha.0

package/dist/sandboxBridge-Db6DubLC.cjs

@@ -0,0 +1,81 @@
+//#region \0rolldown/runtime.js
+var __create = Object.create;
+var __defProp = Object.defineProperty;
+var __getOwnPropDesc = Object.getOwnPropertyDescriptor;
+var __getOwnPropNames = Object.getOwnPropertyNames;
+var __getProtoOf = Object.getPrototypeOf;
+var __hasOwnProp = Object.prototype.hasOwnProperty;
+var __copyProps = (to, from, except, desc) => {
+	if (from && typeof from === "object" || typeof from === "function") for (var keys = __getOwnPropNames(from), i = 0, n = keys.length, key; i < n; i++) {
+		key = keys[i];
+		if (!__hasOwnProp.call(to, key) && key !== except) __defProp(to, key, {
+			get: ((k) => from[k]).bind(null, key),
+			enumerable: !(desc = __getOwnPropDesc(from, key)) || desc.enumerable
+		});
+	}
+	return to;
+};
+var __toESM = (mod, isNodeMode, target) => (target = mod != null ? __create(__getProtoOf(mod)) : {}, __copyProps(isNodeMode || !mod || !mod.__esModule || !__hasOwnProp.call(mod, "default") ? __defProp(target, "default", {
+	value: mod,
+	enumerable: true
+}) : target, mod));
+const BROKER_SOCKET_ENV = "PO_BROKER_SOCKET";
+const BROKER_ADDRESS_ENV = "PO_BROKER_ADDRESS";
+/** Hostname the engine maps to the host, used when the broker listens on TCP. */
+const BROKER_HOST_GATEWAY = "host.docker.internal";
+const BROKER_PORT_ENV = "PO_BROKER_PORT";
+const BROKER_PROVIDERS_ENV = "PO_BROKER_PROVIDERS";
+/** Fixed inside the container, which has its own loopback namespace. */
+const BROKER_CONTAINER_PORT = 8317;
+const BROKER_SOCKET_CONTAINER_PATH = "/run/po/broker.sock";
+//#endregion
+Object.defineProperty(exports, "BROKER_ADDRESS_ENV", {
+	enumerable: true,
+	get: function() {
+		return BROKER_ADDRESS_ENV;
+	}
+});
+Object.defineProperty(exports, "BROKER_CONTAINER_PORT", {
+	enumerable: true,
+	get: function() {
+		return BROKER_CONTAINER_PORT;
+	}
+});
+Object.defineProperty(exports, "BROKER_HOST_GATEWAY", {
+	enumerable: true,
+	get: function() {
+		return BROKER_HOST_GATEWAY;
+	}
+});
+Object.defineProperty(exports, "BROKER_PORT_ENV", {
+	enumerable: true,
+	get: function() {
+		return BROKER_PORT_ENV;
+	}
+});
+Object.defineProperty(exports, "BROKER_PROVIDERS_ENV", {
+	enumerable: true,
+	get: function() {
+		return BROKER_PROVIDERS_ENV;
+	}
+});
+Object.defineProperty(exports, "BROKER_SOCKET_CONTAINER_PATH", {
+	enumerable: true,
+	get: function() {
+		return BROKER_SOCKET_CONTAINER_PATH;
+	}
+});
+Object.defineProperty(exports, "BROKER_SOCKET_ENV", {
+	enumerable: true,
+	get: function() {
+		return BROKER_SOCKET_ENV;
+	}
+});
+Object.defineProperty(exports, "__toESM", {
+	enumerable: true,
+	get: function() {
+		return __toESM;
+	}
+});
+
+//# sourceMappingURL=sandboxBridge-Db6DubLC.cjs.map

package/dist/sandboxBridge-Db6DubLC.cjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"sandboxBridge-Db6DubLC.cjs","names":[],"sources":["../src/services/sandboxBridge/index.ts"],"sourcesContent":["export const BRIDGE_FILE_NAME = 'sandbox-bridge.mjs';\nexport const BRIDGE_CONTAINER_PATH = `/opt/po/${BRIDGE_FILE_NAME}`;\nexport const BROKER_SOCKET_ENV = 'PO_BROKER_SOCKET';\nexport const BROKER_ADDRESS_ENV = 'PO_BROKER_ADDRESS';\n/** Hostname the engine maps to the host, used when the broker listens on TCP. */\nexport const BROKER_HOST_GATEWAY = 'host.docker.internal';\nexport const BROKER_PORT_ENV = 'PO_BROKER_PORT';\nexport const BROKER_PROVIDERS_ENV = 'PO_BROKER_PROVIDERS';\n/** Fixed inside the container, which has its own loopback namespace. */\nexport const BROKER_CONTAINER_PORT = 8317;\nexport const BROKER_SOCKET_CONTAINER_PATH = '/run/po/broker.sock';\n\n/**\n * Container-side forwarder from loopback TCP to the mounted broker socket.\n *\n * Provider SDKs issue ordinary HTTP through Node's global fetch, which cannot\n * address a unix socket, and on a virtual machine backed engine cannot reach\n * one at all. Forwarding raw bytes leaves every SDK unmodified whichever way\n * the broker listens. Wrapping the launcher rather than running as a separate\n * service ties the listener's lifetime to the session without an init process.\n */\nexport function sandboxBridgeSource(): string {\n  return [\n    \"import { spawn } from 'node:child_process';\",\n    \"import net from 'node:net';\",\n    '',\n    `const socketPath = process.env.${BROKER_SOCKET_ENV};`,\n    `const address = process.env.${BROKER_ADDRESS_ENV};`,\n    `const port = Number(process.env.${BROKER_PORT_ENV});`,\n    'const [command, ...args] = process.argv.slice(2);',\n    '',\n    'function startChild(whenDone) {',\n    \"  const child = spawn(command, args, { stdio: 'inherit' });\",\n    \"  child.on('exit', (code, signal) => whenDone(code ?? (signal ? 1 : 0)));\",\n    \"  child.on('error', (error) => {\",\n    '    process.stderr.write(`[po] sandbox bridge: ${error.message}\\\\n`);',\n    '    whenDone(127);',\n    '  });',\n    '}',\n    '',\n    'function dialBroker() {',\n    '  if (socketPath) return net.connect(socketPath);',\n    \"  const separator = address.lastIndexOf(':');\",\n    '  return net.connect(Number(address.slice(separator + 1)), address.slice(0, separator));',\n    '}',\n    '',\n    'if ((!socketPath && !address) || !Number.isInteger(port)) {',\n    '  startChild((code) => {',\n    '    process.exitCode = code;',\n    '  });',\n    '} else {',\n    '  const server = net.createServer((client) => {',\n    '    const upstream = dialBroker();',\n    \"    client.on('error', () => upstream.destroy());\",\n    \"    upstream.on('error', () => client.destroy());\",\n    '    client.pipe(upstream);',\n    '    upstream.pipe(client);',\n    '  });',\n    \"  server.listen(port, '127.0.0.1', () => {\",\n    '    startChild((code) => {',\n    '      server.close();',\n    '      process.exitCode = code;',\n    '    });',\n    '  });',\n    '}',\n    '',\n  ].join('\\n');\n}\n"],"mappings":";;;;;;;;;;;;;;;;;;;;;AAEA,MAAa,oBAAoB;AACjC,MAAa,qBAAqB;;AAElC,MAAa,sBAAsB;AACnC,MAAa,kBAAkB;AAC/B,MAAa,uBAAuB;;AAEpC,MAAa,wBAAwB;AACrC,MAAa,+BAA+B"}

package/llms.txt

@@ -0,0 +1,11 @@
+# @agimon-ai/po-sandbox
+
+Package-owned guidance for Container sandbox for Po launches: the agent, extensions, and tools run inside Docker or Podman while the terminal stays on the host
+
+## How to use
+
+- [Use Sandbox](./src/prompts/po-use-sandbox/SKILL.md): Run the package command and follow its package-specific usage guidance.
+
+## Resources
+
+- [Package README](./README.md): Installation, development commands, Pi entrypoint, and extension-specific usage.

package/package.json

@@ -0,0 +1,117 @@
+{
+  "name": "@agimon-ai/po-sandbox",
+  "version": "0.0.0-alpha.0",
+  "description": "Container sandbox for Po launches: the agent, extensions, and tools run inside Docker or Podman while the terminal stays on the host",
+  "keywords": [
+    "ai",
+    "coding-agent",
+    "container-sandbox",
+    "developer-tools",
+    "pi-coding-agent",
+    "pi-extension",
+    "pi-package",
+    "po",
+    "typescript"
+  ],
+  "homepage": "https://agimon.ai",
+  "bugs": {
+    "url": "https://github.com/AgiFlow/po/issues"
+  },
+  "license": "MIT",
+  "author": "Vuong Ngo",
+  "repository": {
+    "type": "git",
+    "url": "git+https://github.com/AgiFlow/po.git",
+    "directory": "layers/sandbox/po-sandbox"
+  },
+  "files": [
+    "dist",
+    "src/prompts",
+    "llms.txt",
+    "README.md",
+    "LICENSE",
+    "package.json"
+  ],
+  "type": "module",
+  "main": "./dist/index.cjs",
+  "module": "./dist/index.mjs",
+  "types": "./dist/index.d.mts",
+  "jsnext:main": "./dist/index.mjs",
+  "exports": {
+    ".": {
+      "types": "./dist/index.d.mts",
+      "import": "./dist/index.mjs",
+      "require": "./dist/index.cjs"
+    },
+    "./apiContracts": {
+      "types": "./dist/apiContracts.d.mts",
+      "import": "./dist/apiContracts.mjs",
+      "require": "./dist/apiContracts.cjs"
+    },
+    "./cockpitHarness": {
+      "types": "./dist/cockpitHarness.d.mts",
+      "import": "./dist/cockpitHarness.mjs",
+      "require": "./dist/cockpitHarness.cjs"
+    },
+    "./extensions/server": {
+      "types": "./dist/extensions/server.d.mts",
+      "import": "./dist/extensions/server.mjs",
+      "require": "./dist/extensions/server.cjs"
+    },
+    "./package.json": "./package.json"
+  },
+  "publishConfig": {
+    "access": "public"
+  },
+  "dependencies": {
+    "@agimon-ai/po-core": "0.0.0-alpha.0",
+    "@deepseek-ai/cordis": "4.0.4"
+  },
+  "devDependencies": {
+    "@agimon-ai/po-build": "0.0.0-alpha.0",
+    "@agimon-ai/vibe-lint-plugin-doom-extension": "0.0.0-alpha.0",
+    "@earendil-works/pi-coding-agent": "1.0.2",
+    "@types/node": "26.6.4",
+    "@vitest/coverage-v8": "5.0.3",
+    "tsdown": "0.23.0",
+    "typescript": "7.0.2",
+    "vitest": "5.0.3"
+  },
+  "peerDependencies": {
+    "@earendil-works/pi-coding-agent": "1.0.2"
+  },
+  "peerDependenciesMeta": {
+    "@earendil-works/pi-coding-agent": {
+      "optional": true
+    }
+  },
+  "engines": {
+    "node": ">=24"
+  },
+  "poMcp": {
+    "entry": "./generated/mcp.ts",
+    "dist": "./dist/extensions/mcp.mjs",
+    "scopes": [
+      "session"
+    ]
+  },
+  "poServer": {
+    "entry": "./generated/server.ts",
+    "dist": "./dist/extensions/server.mjs",
+    "scopes": [
+      "session"
+    ],
+    "contracts": {
+      "entry": "./src/exports/apiContracts.ts",
+      "dist": "./dist/apiContracts.mjs"
+    }
+  },
+  "scripts": {
+    "build": "tsdown && pnpm build:mcp",
+    "build:mcp": "tsdown --config tsdown.mcp.config.ts",
+    "test": "vitest --run",
+    "typecheck": "tsc --noEmit",
+    "lint": "oxlint . && oxfmt . --check",
+    "fixcode": "oxlint . --fix && oxfmt ."
+  }
+}

package/src/prompts/po-use-sandbox/SKILL.md

@@ -0,0 +1,14 @@
+---
+name: po-use-sandbox
+description: 'Use @agimon-ai/po-sandbox: Container sandbox for Po launches: the agent, extensions, and tools run inside Docker or Podman while the terminal stays on the host'
+---
+
+# Use Sandbox
+
+Read the package [README](../../../README.md) for its exact installation, command, configuration, and behavior.
+
+## Guidance
+
+- Use `/doom-sandbox` as the package's primary Pi entrypoint.
+- Treat the package README and its linked resources as the source of truth for package-specific behavior.
+- Do not require Po Help for runtime activation. Help only makes this package guidance discoverable while the minor mode is active.