@bike4mind/cli 0.2.29-feat-cli-sandbox.18842 → 0.2.29-feat-cli-sandbox.18843

package/dist/{BubblewrapRuntime-EJM4QF7U.js → BubblewrapRuntime-HXTR3NQG.js}

@@ -2,11 +2,10 @@
 import {
   expandPath,
   isBinaryAvailable
-} from "./chunk-PRJKJWD6.js";
+} from "./chunk-AVAD2PPK.js";
 
 // src/sandbox/runtime/BubblewrapRuntime.ts
 import os from "os";
-import { existsSync } from "fs";
 var SYSTEM_RO_BINDS = ["/usr", "/bin", "/lib", "/lib64", "/sbin", "/etc"];
 var SPECIAL_MOUNTS = {
   dev: "/dev",
@@ -27,9 +26,7 @@ var BubblewrapRuntime = class {
     const expandedAllowed = filesystemConfig.allowedReadPaths.map(expandPath);
     const args = [];
     for (const sysPath of SYSTEM_RO_BINDS) {
-      if (existsSync(sysPath)) {
-        args.push("--ro-bind", sysPath, sysPath);
-      }
+      args.push("--ro-bind-try", sysPath, sysPath);
     }
     args.push("--dev", SPECIAL_MOUNTS.dev);
     args.push("--proc", SPECIAL_MOUNTS.proc);
@@ -38,7 +35,7 @@ var BubblewrapRuntime = class {
     const homeDir = os.homedir();
     args.push("--ro-bind", homeDir, homeDir);
     for (const allowedPath of expandedAllowed) {
-      if (!allowedPath.startsWith(homeDir) && existsSync(allowedPath)) {
+      if (!allowedPath.startsWith(homeDir)) {
         args.push("--ro-bind-try", allowedPath, allowedPath);
       }
     }
@@ -48,6 +45,9 @@ var BubblewrapRuntime = class {
     args.push("--unshare-all");
     args.push("--share-net");
     args.push("--die-with-parent");
+    if (options.seccompProfile) {
+      args.push("--seccomp", options.seccompProfile);
+    }
     args.push("--chdir", cwd);
     args.push("bash", "-c", command);
     const commandString = ["bwrap", ...args.map(shellEscape)].join(" ");

package/dist/{SandboxOrchestrator-AEOHC2BL.js → SandboxOrchestrator-Z36SFJ7X.js}

@@ -1,7 +1,7 @@
 #!/usr/bin/env node
 import {
   DEFAULT_SANDBOX_CONFIG
-} from "./chunk-XPSG72HV.js";
+} from "./chunk-W4TCH4ZT.js";
 
 // src/sandbox/SandboxOrchestrator.ts
 var SandboxOrchestrator = class {
@@ -24,6 +24,12 @@ var SandboxOrchestrator = class {
     }
     const baseCommand = this.getBaseCommand(command);
     if (this.isExcludedCommand(baseCommand)) {
+      if (!this.config.allowUnsandboxedCommands) {
+        return {
+          type: "blocked",
+          reason: `Command '${baseCommand}' is excluded from sandboxing and unsandboxed commands are not allowed`
+        };
+      }
       return {
         type: "unsandboxed",
         requiresPermission: true,
@@ -40,7 +46,10 @@ var SandboxOrchestrator = class {
     const wrappedCommand = this.runtime.wrapCommand({
       command,
       cwd,
-      filesystemConfig: this.config.filesystem
+      filesystemConfig: this.config.filesystem,
+      ...this.runtime.platform === "linux" && this.config.platform.linux.seccompProfile && {
+        seccompProfile: this.config.platform.linux.seccompProfile
+      }
     });
     return { type: "sandbox", wrappedCommand };
   }

package/dist/{SandboxRuntimeAdapter-SRX3IM2Q.js → SandboxRuntimeAdapter-5ZMU25Q3.js}

@@ -4,7 +4,7 @@ import {
   detectPlatform,
   expandPath,
   isBinaryAvailable
-} from "./chunk-PRJKJWD6.js";
+} from "./chunk-AVAD2PPK.js";
 export {
   createSandboxRuntime,
   detectPlatform,

package/dist/{SeatbeltRuntime-DZMEIRPM.js → SeatbeltRuntime-SL7HVS3J.js}

@@ -2,7 +2,7 @@
 import {
   expandPath,
   isBinaryAvailable
-} from "./chunk-PRJKJWD6.js";
+} from "./chunk-AVAD2PPK.js";
 
 // src/sandbox/runtime/SeatbeltRuntime.ts
 import { writeFileSync, mkdtempSync } from "fs";
@@ -70,18 +70,22 @@ var SeatbeltRuntime = class {
     return lines.join("\n");
   }
   wrapCommand(options) {
-    const profile = this.generateProfile(options);
-    const tmpDir = mkdtempSync(path.join(os.tmpdir(), "b4m-sandbox-"));
-    const profilePath = path.join(tmpDir, "sandbox.sb");
-    writeFileSync(profilePath, profile, "utf-8");
-    const args = ["-f", profilePath, "bash", "-c", options.command];
-    return {
-      executable: "sandbox-exec",
-      args,
-      env: options.env ?? {},
-      commandString: `sandbox-exec -f ${profilePath} bash -c ${shellEscape(options.command)}`,
-      cleanupPaths: [profilePath, tmpDir]
-    };
+    try {
+      const profile = this.generateProfile(options);
+      const tmpDir = mkdtempSync(path.join(os.tmpdir(), "b4m-sandbox-"));
+      const profilePath = path.join(tmpDir, "sandbox.sb");
+      writeFileSync(profilePath, profile, "utf-8");
+      const args = ["-f", profilePath, "bash", "-c", options.command];
+      return {
+        executable: "sandbox-exec",
+        args,
+        env: options.env ?? {},
+        commandString: `sandbox-exec -f ${profilePath} bash -c ${shellEscape(options.command)}`,
+        cleanupPaths: [profilePath, tmpDir]
+      };
+    } catch (err) {
+      throw new Error(`Failed to create sandbox profile: ${err instanceof Error ? err.message : String(err)}`);
+    }
   }
 };
 function shellEscape(str) {

package/dist/{chunk-PRJKJWD6.js → chunk-AVAD2PPK.js}

@@ -24,12 +24,12 @@ async function createSandboxRuntime() {
   const platform = detectPlatform();
   if (!platform) return null;
   if (platform === "darwin") {
-    const { SeatbeltRuntime } = await import("./SeatbeltRuntime-DZMEIRPM.js");
+    const { SeatbeltRuntime } = await import("./SeatbeltRuntime-SL7HVS3J.js");
     const runtime = new SeatbeltRuntime();
     return runtime.isAvailable() ? runtime : null;
   }
   if (platform === "linux") {
-    const { BubblewrapRuntime } = await import("./BubblewrapRuntime-EJM4QF7U.js");
+    const { BubblewrapRuntime } = await import("./BubblewrapRuntime-HXTR3NQG.js");
     const runtime = new BubblewrapRuntime();
     return runtime.isAvailable() ? runtime : null;
   }

package/dist/{chunk-JJL2EFHA.js → chunk-JWEG53NG.js}

@@ -1,7 +1,7 @@
 #!/usr/bin/env node
 import {
   DEFAULT_SANDBOX_CONFIG
-} from "./chunk-XPSG72HV.js";
+} from "./chunk-W4TCH4ZT.js";
 
 // src/utils/Logger.ts
 import fs from "fs/promises";
@@ -285,6 +285,7 @@ var SandboxConfigSchema = z.object({
   mode: z.enum(["disabled", "auto-allow", "permissions"]).default("disabled"),
   filesystem: SandboxFilesystemSchema.default(DEFAULT_SANDBOX_CONFIG.filesystem),
   excludedCommands: z.array(z.string()).default(DEFAULT_SANDBOX_CONFIG.excludedCommands),
+  allowUnsandboxedCommands: z.boolean().default(true),
   platform: SandboxPlatformSchema.default(DEFAULT_SANDBOX_CONFIG.platform)
 });
 var PartialSandboxConfigSchema = z.object({
@@ -296,6 +297,7 @@ var PartialSandboxConfigSchema = z.object({
     writeOnlyToWorkingDir: z.boolean().optional()
   }).optional(),
   excludedCommands: z.array(z.string()).optional(),
+  allowUnsandboxedCommands: z.boolean().optional(),
   platform: SandboxPlatformSchema.optional()
 }).optional();
 var AuthTokensSchema = z.object({
@@ -546,6 +548,7 @@ function mergeSandboxConfig(base, override) {
       ...override.filesystem ?? {}
     },
     excludedCommands: override.excludedCommands ?? resolved.excludedCommands,
+    allowUnsandboxedCommands: override.allowUnsandboxedCommands ?? resolved.allowUnsandboxedCommands,
     platform: override.platform ?? resolved.platform
   };
 }

package/dist/{chunk-XPSG72HV.js → chunk-W4TCH4ZT.js}

@@ -10,6 +10,7 @@ var DEFAULT_SANDBOX_CONFIG = {
     deniedPaths: ["$HOME/.ssh", "$HOME/.aws", "$HOME/.gnupg", "$HOME/.env", "/etc/shadow", "/etc/passwd"]
   },
   excludedCommands: ["docker", "watchman", "podman"],
+  allowUnsandboxedCommands: true,
   platform: {
     linux: {
       runtime: "bubblewrap"

package/dist/commands/mcpCommand.js

@@ -1,8 +1,8 @@
 #!/usr/bin/env node
 import {
   ConfigStore
-} from "../chunk-JJL2EFHA.js";
-import "../chunk-XPSG72HV.js";
+} from "../chunk-JWEG53NG.js";
+import "../chunk-W4TCH4ZT.js";
 
 // src/commands/mcpCommand.ts
 async function handleMcpCommand(subcommand, argv) {

package/dist/index.js

@@ -10,12 +10,12 @@ import {
 import {
   ConfigStore,
   logger
-} from "./chunk-JJL2EFHA.js";
+} from "./chunk-JWEG53NG.js";
 import {
   selectActiveBackgroundAgents,
   useCliStore
 } from "./chunk-TVW4ZESU.js";
-import "./chunk-XPSG72HV.js";
+import "./chunk-W4TCH4ZT.js";
 import "./chunk-PKKJ44C5.js";
 import {
   BFLImageService,
@@ -11759,15 +11759,33 @@ function wrapToolWithPermission(tool, permissionManager, showPermissionPrompt, a
       }
       const effectiveArgs = isSandboxed ? sandboxedArgs : args;
       if (!permissionManager.needsPermission(toolName, { isSandboxed })) {
-        const result2 = await executeTool(toolName, effectiveArgs, apiClient, originalFn);
+        let result2 = await executeTool(toolName, effectiveArgs, apiClient, originalFn);
         cleanupSandboxFiles(effectiveArgs?._sandboxCleanup);
+        result2 = await retrySandboxFailure(
+          isSandboxed,
+          result2,
+          toolName,
+          args,
+          apiClient,
+          originalFn,
+          showPermissionPrompt
+        );
         agentContext.observationQueue.push({ toolName, result: result2 });
         return result2;
       }
       const { useCliStore: useCliStore2 } = await import("./store-FU6NDC2W.js");
       if (useCliStore2.getState().autoAcceptEdits) {
-        const result2 = await executeTool(toolName, effectiveArgs, apiClient, originalFn);
+        let result2 = await executeTool(toolName, effectiveArgs, apiClient, originalFn);
         cleanupSandboxFiles(effectiveArgs?._sandboxCleanup);
+        result2 = await retrySandboxFailure(
+          isSandboxed,
+          result2,
+          toolName,
+          args,
+          apiClient,
+          originalFn,
+          showPermissionPrompt
+        );
         agentContext.observationQueue.push({ toolName, result: result2 });
         return result2;
       }
@@ -11830,13 +11848,41 @@ function wrapToolWithPermission(tool, permissionManager, showPermissionPrompt, a
           }
         }
       }
-      const result = await executeTool(toolName, effectiveArgs, apiClient, originalFn);
+      let result = await executeTool(toolName, effectiveArgs, apiClient, originalFn);
       cleanupSandboxFiles(effectiveArgs?._sandboxCleanup);
+      result = await retrySandboxFailure(
+        isSandboxed,
+        result,
+        toolName,
+        args,
+        apiClient,
+        originalFn,
+        showPermissionPrompt
+      );
       agentContext.observationQueue.push({ toolName, result });
       return result;
     }
   };
 }
+function isSandboxFailure(isSandboxed, result) {
+  if (!isSandboxed) return false;
+  return result.includes("sandbox-exec:") || result.includes("bwrap:") || result.includes("Operation not permitted");
+}
+async function retrySandboxFailure(isSandboxed, result, toolName, originalArgs, apiClient, originalFn, showPermissionPrompt) {
+  if (!isSandboxFailure(isSandboxed, result)) return result;
+  const errorSnippet = result.slice(0, 200);
+  const retryResponse = await showPermissionPrompt(
+    toolName,
+    originalArgs,
+    `Sandbox execution failed. Retry without sandbox?
+
+Error: ${errorSnippet}`
+  );
+  if (retryResponse.action !== "deny") {
+    return executeTool(toolName, originalArgs, apiClient, originalFn);
+  }
+  return result;
+}
 function cleanupSandboxFiles(paths) {
   if (!paths || paths.length === 0) return;
   for (const p of paths) {
@@ -13643,7 +13689,7 @@ import { isAxiosError as isAxiosError2 } from "axios";
 // package.json
 var package_default = {
   name: "@bike4mind/cli",
-  version: "0.2.29-feat-cli-sandbox.18842+fc55c56fc",
+  version: "0.2.29-feat-cli-sandbox.18843+467f137bc",
   type: "module",
   description: "Interactive CLI tool for Bike4Mind with ReAct agents",
   license: "UNLICENSED",
@@ -13753,10 +13799,10 @@ var package_default = {
   },
   devDependencies: {
     "@bike4mind/agents": "0.1.0",
-    "@bike4mind/common": "2.50.1-feat-cli-sandbox.18842+fc55c56fc",
-    "@bike4mind/mcp": "1.29.1-feat-cli-sandbox.18842+fc55c56fc",
-    "@bike4mind/services": "2.48.1-feat-cli-sandbox.18842+fc55c56fc",
-    "@bike4mind/utils": "2.5.1-feat-cli-sandbox.18842+fc55c56fc",
+    "@bike4mind/common": "2.50.1-feat-cli-sandbox.18843+467f137bc",
+    "@bike4mind/mcp": "1.29.1-feat-cli-sandbox.18843+467f137bc",
+    "@bike4mind/services": "2.48.1-feat-cli-sandbox.18843+467f137bc",
+    "@bike4mind/utils": "2.5.1-feat-cli-sandbox.18843+467f137bc",
     "@types/better-sqlite3": "^7.6.13",
     "@types/diff": "^5.0.9",
     "@types/jsonwebtoken": "^9.0.4",
@@ -13773,7 +13819,7 @@ var package_default = {
   optionalDependencies: {
     "@vscode/ripgrep": "^1.17.0"
   },
-  gitHead: "fc55c56fc0acb53d861d98b5b5e902a3e38a4c37"
+  gitHead: "467f137bcb738020d1665b78bc7d34de7d846df5"
 };
 
 // src/config/constants.ts
@@ -15779,9 +15825,9 @@ function CliApp() {
         config.tools.disabled || []
         // denied tools from project config
       );
-      const { createSandboxRuntime } = await import("./SandboxRuntimeAdapter-SRX3IM2Q.js");
-      const { SandboxOrchestrator } = await import("./SandboxOrchestrator-AEOHC2BL.js");
-      const { DEFAULT_SANDBOX_CONFIG } = await import("./types-2T7ALTCA.js");
+      const { createSandboxRuntime } = await import("./SandboxRuntimeAdapter-5ZMU25Q3.js");
+      const { SandboxOrchestrator } = await import("./SandboxOrchestrator-Z36SFJ7X.js");
+      const { DEFAULT_SANDBOX_CONFIG } = await import("./types-SMQKWHQK.js");
       const sandboxRuntime = await createSandboxRuntime();
       const sandboxConfig = config.sandbox ?? DEFAULT_SANDBOX_CONFIG;
       const sandboxOrchestrator = new SandboxOrchestrator(sandboxConfig, sandboxRuntime);

package/dist/{types-2T7ALTCA.js → types-SMQKWHQK.js}

@@ -1,7 +1,7 @@
 #!/usr/bin/env node
 import {
   DEFAULT_SANDBOX_CONFIG
-} from "./chunk-XPSG72HV.js";
+} from "./chunk-W4TCH4ZT.js";
 export {
   DEFAULT_SANDBOX_CONFIG
 };

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@bike4mind/cli",
-  "version": "0.2.29-feat-cli-sandbox.18842+fc55c56fc",
+  "version": "0.2.29-feat-cli-sandbox.18843+467f137bc",
   "type": "module",
   "description": "Interactive CLI tool for Bike4Mind with ReAct agents",
   "license": "UNLICENSED",
@@ -110,10 +110,10 @@
   },
   "devDependencies": {
     "@bike4mind/agents": "0.1.0",
-    "@bike4mind/common": "2.50.1-feat-cli-sandbox.18842+fc55c56fc",
-    "@bike4mind/mcp": "1.29.1-feat-cli-sandbox.18842+fc55c56fc",
-    "@bike4mind/services": "2.48.1-feat-cli-sandbox.18842+fc55c56fc",
-    "@bike4mind/utils": "2.5.1-feat-cli-sandbox.18842+fc55c56fc",
+    "@bike4mind/common": "2.50.1-feat-cli-sandbox.18843+467f137bc",
+    "@bike4mind/mcp": "1.29.1-feat-cli-sandbox.18843+467f137bc",
+    "@bike4mind/services": "2.48.1-feat-cli-sandbox.18843+467f137bc",
+    "@bike4mind/utils": "2.5.1-feat-cli-sandbox.18843+467f137bc",
     "@types/better-sqlite3": "^7.6.13",
     "@types/diff": "^5.0.9",
     "@types/jsonwebtoken": "^9.0.4",
@@ -130,5 +130,5 @@
   "optionalDependencies": {
     "@vscode/ripgrep": "^1.17.0"
   },
-  "gitHead": "fc55c56fc0acb53d861d98b5b5e902a3e38a4c37"
+  "gitHead": "467f137bcb738020d1665b78bc7d34de7d846df5"
 }