@capybara-hq/plugin-sandbox-docker 0.1.0-rc.0 → 0.1.0-rc.1

package/.capybara-plugin/plugin.json

@@ -1,15 +1,19 @@
 {
   "schemaVersion": 1,
   "name": "sandbox-docker",
-  "version": "0.1.0-rc.0",
+  "version": "0.1.0-rc.1",
   "publisher": "Capybara",
   "description": "Conversation sandboxes (sandbox@1) as Docker containers (runc or gVisor runsc) behind a Docker socket proxy, with an egress allowlist proxy",
+  "displayName": {
+    "zh": "Docker 沙箱",
+    "en": "Docker sandbox"
+  },
   "homepage": "https://github.com/capybara-hq/plugins/tree/main/plugins/sandbox-docker#readme",
   "extension": {
     "entry": "./dist/index.mjs",
     "manifest": {
       "name": "sandbox-docker",
-      "version": "0.1.0-rc.0",
+      "version": "0.1.0-rc.1",
       "sdk": "^0.1.0-rc.0",
       "provides": [
         "sandbox@1"
@@ -52,6 +56,89 @@
         ],
         "org": []
       }
+    },
+    "configSchemas": {
+      "deployment": {
+        "type": "object",
+        "properties": {
+          "endpoint": {
+            "type": "string",
+            "pattern": "^(tcp:\\/\\/(\\[[^\\]]+\\]|[^:/]+):\\d{1,5}\\/?|unix:\\/\\/\\/.+)$",
+            "x-ui": {
+              "label": {
+                "zh": "Docker 代理地址",
+                "en": "Docker proxy endpoint"
+              }
+            },
+            "title": "Docker proxy endpoint"
+          },
+          "runtime": {
+            "default": "runc",
+            "type": "string",
+            "enum": [
+              "runc",
+              "runsc"
+            ],
+            "x-ui": {
+              "label": {
+                "zh": "容器运行时",
+                "en": "Container runtime"
+              }
+            },
+            "title": "Container runtime"
+          },
+          "network": {
+            "default": "capybara-sandbox",
+            "type": "string",
+            "pattern": "^cap[a-zA-Z0-9_.-]*$",
+            "x-ui": {
+              "label": {
+                "zh": "沙箱网络",
+                "en": "Sandbox network"
+              }
+            },
+            "title": "Sandbox network"
+          },
+          "egressProxyImage": {
+            "default": "capybara-sandbox-egress:latest",
+            "type": "string",
+            "minLength": 1,
+            "x-ui": {
+              "label": {
+                "zh": "出站代理镜像",
+                "en": "Egress proxy image"
+              }
+            },
+            "title": "Egress proxy image"
+          },
+          "volumeDriver": {
+            "type": "string",
+            "minLength": 1,
+            "x-ui": {
+              "label": {
+                "zh": "卷驱动",
+                "en": "Volume driver"
+              }
+            },
+            "title": "Volume driver"
+          },
+          "allowOpenEgress": {
+            "default": false,
+            "type": "boolean",
+            "x-ui": {
+              "label": {
+                "zh": "允许开放出站",
+                "en": "Allow open egress"
+              }
+            },
+            "title": "Allow open egress"
+          }
+        },
+        "required": [
+          "endpoint"
+        ],
+        "additionalProperties": false
+      }
     }
   }
 }

package/README.md

@@ -24,7 +24,7 @@ The deployment config schema is strict: extra keys are errors.
 
 - The sandbox image `image/Dockerfile` (shared by the Docker plugin and the E2B template). The tag matches the default of the kernel config `sandbox.image`:
   `docker build -t capybara-sandbox:latest plugins/sandbox-docker/image`.
-  Debian trixie-slim (pinned by digest), with bash, coreutils, GNU find / grep (the kernel's `sandbox_glob` / `sandbox_grep`
+  Debian trixie-slim (pinned by digest), with bash, coreutils, GNU find / grep (the kernel's `Glob` / `Grep`
   depend on them), procps, util-linux (`setsid`), curl, git, jq, python3 (with pip / venv) and so on; it runs as the non-root user `sandbox`
   (uid 1000), with HOME and the working directory at `/workspace`.
 - The egress proxy image `egress-proxy/Dockerfile`: `docker build -t capybara-sandbox-egress:latest plugins/sandbox-docker/egress-proxy`.

package/dist/index.mjs

@@ -6,7 +6,7 @@ const __capybara_filename = __capybaraFileURLToPath(import.meta.url);
 const __capybara_dirname = __capybaraPathDirname(__capybara_filename);
 
 // src/index.ts
-import { defineExtension, SANDBOX_EXTENSION_POINT } from "@capybara-hq/plugin-sdk";
+import { defineExtension, SANDBOX_EXTENSION_POINT, ui } from "@capybara-hq/plugin-sdk";
 import { z } from "zod";
 
 // src/provider.ts
@@ -895,31 +895,45 @@ function checkLimits(l) {
 var NETWORK_NAME = /^cap[a-zA-Z0-9_.-]*$/;
 var DeploymentConfig = z.object({
   /** Docker socket 代理地址（docker/sandbox-proxy）：`tcp://sandbox-proxy:2375` 或 `unix:///path`。 */
-  endpoint: z.string().regex(/^(tcp:\/\/(\[[^\]]+\]|[^:/]+):\d{1,5}\/?|unix:\/\/\/.+)$/, {
-    message: "endpoint must be tcp://host:port or unix:///path"
-  }),
+  endpoint: ui(
+    z.string().regex(/^(tcp:\/\/(\[[^\]]+\]|[^:/]+):\d{1,5}\/?|unix:\/\/\/.+)$/, {
+      message: "endpoint must be tcp://host:port or unix:///path"
+    }),
+    { label: { zh: "Docker 代理地址", en: "Docker proxy endpoint" } }
+  ),
   /** 容器运行时：runc（默认）或 gVisor 的 runsc（需在 Docker 守护进程上登记）。 */
-  runtime: z.enum(["runc", "runsc"]).default("runc"),
+  runtime: ui(z.enum(["runc", "runsc"]).default("runc"), {
+    label: { zh: "容器运行时", en: "Container runtime" }
+  }),
   /**
    * 共用的沙箱网络名：egress 为 open 的沙箱与出站代理接在上面；不存在时自动创建（bridge、禁止容器互访）。
    * 须以 `cap` 开头（socket 代理只放行这样的网络名）。
    */
-  network: z.string().regex(NETWORK_NAME, {
-    message: "network must start with 'cap' (the socket proxy only allows cap* networks)"
-  }).default("capybara-sandbox"),
+  network: ui(
+    z.string().regex(NETWORK_NAME, {
+      message: "network must start with 'cap' (the socket proxy only allows cap* networks)"
+    }).default("capybara-sandbox"),
+    { label: { zh: "沙箱网络", en: "Sandbox network" } }
+  ),
   /** 出站代理镜像（plugins/sandbox-docker/egress-proxy/Dockerfile）。 */
-  egressProxyImage: z.string().min(1).default("capybara-sandbox-egress:latest"),
+  egressProxyImage: ui(z.string().min(1).default("capybara-sandbox-egress:latest"), {
+    label: { zh: "出站代理镜像", en: "Egress proxy image" }
+  }),
   /** 工作区卷的驱动（支持 `size` 选项的驱动才能限制磁盘）；不填用 local（不限大小）。 */
-  volumeDriver: z.string().min(1).optional(),
+  volumeDriver: ui(z.string().min(1).optional(), {
+    label: { zh: "卷驱动", en: "Volume driver" }
+  }),
   /**
    * 允许 `sandbox.limits.egress = "open"`（默认 false）。open 的沙箱能访问宿主机网络能访问的一切
    * （宿主机上的服务、内网、云元数据地址），只在可信环境打开。
    */
-  allowOpenEgress: z.boolean().default(false)
+  allowOpenEgress: ui(z.boolean().default(false), {
+    label: { zh: "允许开放出站", en: "Allow open egress" }
+  })
 }).strict();
 var index_default = defineExtension({
   name: "sandbox-docker",
-  version: "0.1.0-rc.0",
+  version: "0.1.0-rc.1",
   sdk: "^0.1.0-rc.0",
   provides: [SANDBOX_EXTENSION_POINT],
   // 只用部署配置与 Docker endpoint，不用任何需要声明的平台能力

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@capybara-hq/plugin-sandbox-docker",
-  "version": "0.1.0-rc.0",
+  "version": "0.1.0-rc.1",
   "type": "module",
   "license": "Apache-2.0",
   "description": "Conversation sandboxes (sandbox@1) as Docker containers (runc or gVisor runsc) behind a Docker socket proxy, with an egress allowlist proxy",