@botlearn-course/daemon 0.0.5 → 0.0.6

package/README.md

@@ -40,7 +40,9 @@ npx @botlearn-course/daemon@latest course logout
 `botlearn-sandbox-supervisor agent-service session`。它不是 BYOA 用户入口：生产环境只允许由
 Agent Service 以固定 argv 启动，通过 stdin 接收一次性 bootstrap，并把 daemon/runtime 分别降权
 到 `botlearn-control`/`user` UID。E2B Template 通过 root-owned 固定 launcher 将 DeepSeek
-单向降权为 `user` 并设置 `no_new_privs`；runtime 用户本身没有 sudo 权限。
+单向降权为 `user` 并设置 `no_new_privs`；runtime 用户本身没有 sudo 权限。托管启动链只执行
+`/opt` 下的固定 Node、supervisor、daemon、launcher 与 DeepSeek 文件，不信任 E2B 会开放给 runtime
+写入的 `/usr/local/bin`。
 `agent-service session --bootstrap-stdin` 同样属于受 supervisor 保护的内部协议，不应直接暴露给
 课程任务或 workspace shell。
 

package/dist/runtime-env.js

@@ -20,7 +20,8 @@ const AGENT_SERVICE_SUPERVISOR_ENV_KEYS = [
 ];
 const RUNTIME_USER_PATTERN = /^[a-z_][a-z0-9_-]{0,31}$/;
 const RUNTIME_SUDO_BINARY = "/usr/bin/sudo";
-const MANAGED_RUNTIME_LAUNCHER = "/usr/local/bin/botlearn-runtime-launcher";
+const MANAGED_RUNTIME_LAUNCHER = "/opt/botlearn/bin/botlearn-runtime-launcher";
+const MANAGED_RUNTIME_BINARY = "/opt/deepseek-tui/0.8.39/bin/deepseek";
 /** Remove Course control-plane coordinates before any model/runtime child is created. */
 export function clearAgentServiceControlEnv(env = process.env) {
     for (const key of AGENT_SERVICE_CONTROL_ENV_KEYS)
@@ -72,6 +73,9 @@ export function runtimeChildLaunch(binary, args, env = process.env) {
     if (env.BOTLEARN_RUNTIME_LAUNCHER !== MANAGED_RUNTIME_LAUNCHER) {
         throw new Error("invalid supervisor-provided runtime launcher");
     }
+    if (binary !== MANAGED_RUNTIME_BINARY) {
+        throw new Error("invalid supervisor-provided runtime binary");
+    }
     return {
         binary: RUNTIME_SUDO_BINARY,
         args: [

package/dist/sandbox-supervisor.js

@@ -10,7 +10,19 @@ const CONTROL_HOME = "/home/botlearn-control/.botlearn-course/daemon";
 const WORKSPACE = "/workspace";
 const RUNTIME_PROFILE_ROOT = "/run/botlearn-runtime-profiles";
 const SUPERVISOR_LOCK_ROOT = "/run/botlearn-sandbox-supervisors";
-const DAEMON_BINARY = "/usr/local/bin/botlearn-course-daemon";
+const NODE_BINARY = "/opt/node/22.23.1/bin/node";
+const DAEMON_ENTRY = "/opt/botlearn/course-daemon/dist/cli.js";
+const RUNTIME_LAUNCHER = "/opt/botlearn/bin/botlearn-runtime-launcher";
+const DEEPSEEK_BINARY = "/opt/deepseek-tui/0.8.39/bin/deepseek";
+const MANAGED_PATH = [
+    "/opt/deepseek-tui/0.8.39/bin",
+    "/opt/node/22.23.1/bin",
+    "/usr/bin",
+    "/bin",
+    // E2B materializes this directory as runtime-writable. Keep it last and never
+    // use it for a managed control-plane executable.
+    "/usr/local/bin",
+].join(":");
 function numericId(flag, user) {
     const output = execFileSync("/usr/bin/id", [flag, user], {
         encoding: "utf8",
@@ -117,19 +129,25 @@ export async function runSandboxSupervisor(argv) {
         if (releaseLock === null)
             return 0;
         prepareDirectories(controlUid, controlGid, runtimeUid, runtimeSessionId, sessionGeneration);
-        child = spawn(DAEMON_BINARY, ["agent-service", "session", "--bootstrap-stdin"], {
+        child = spawn(NODE_BINARY, [
+            DAEMON_ENTRY,
+            "agent-service",
+            "session",
+            "--bootstrap-stdin",
+        ], {
             uid: controlUid,
             gid: controlGid,
             env: {
                 HOME: "/home/botlearn-control",
-                PATH: "/usr/local/bin:/usr/bin:/bin",
+                PATH: MANAGED_PATH,
                 BOTLEARN_DAEMON_HOME: CONTROL_HOME,
                 BOTLEARN_RUNTIME_UID: String(runtimeUid),
                 BOTLEARN_RUNTIME_GID: String(controlGid),
                 BOTLEARN_RUNTIME_USER: RUNTIME_USER,
                 BOTLEARN_RUNTIME_GROUP: CONTROL_USER,
                 BOTLEARN_RUNTIME_HOME: "/home/user",
-                BOTLEARN_RUNTIME_LAUNCHER: "/usr/local/bin/botlearn-runtime-launcher",
+                BOTLEARN_RUNTIME_LAUNCHER: RUNTIME_LAUNCHER,
+                BOTLEARN_DEEPSEEK_TUI_BIN: DEEPSEEK_BINARY,
                 BOTLEARN_AGENT_SERVICE_WORKSPACE_ROOT: WORKSPACE,
                 BOTLEARN_AGENT_SERVICE_PROFILE_ROOT: RUNTIME_PROFILE_ROOT,
             },

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@botlearn-course/daemon",
-  "version": "0.0.5",
+  "version": "0.0.6",
   "description": "Lightweight BotLearn Course daemon: run course tasks on your own machine with your own agent runtime (BYOA).",
   "type": "module",
   "bin": {