@capybara-hq/plugin-sandbox-e2b 0.1.0-rc.0 → 0.1.0-rc.2

package/.capybara-plugin/plugin.json

@@ -1,15 +1,19 @@
 {
   "schemaVersion": 1,
   "name": "sandbox-e2b",
-  "version": "0.1.0-rc.0",
+  "version": "0.1.0-rc.2",
   "publisher": "Capybara",
   "description": "Conversation sandboxes (sandbox@1) as E2B sandboxes (E2B cloud or self-hosted), with pause / resume and E2B egress controls",
+  "displayName": {
+    "zh": "E2B 沙箱",
+    "en": "E2B sandbox"
+  },
   "homepage": "https://github.com/capybara-hq/plugins/tree/main/plugins/sandbox-e2b#readme",
   "extension": {
     "entry": "./dist/index.mjs",
     "manifest": {
       "name": "sandbox-e2b",
-      "version": "0.1.0-rc.0",
+      "version": "0.1.0-rc.2",
       "sdk": "^0.1.0-rc.0",
       "provides": [
         "sandbox@1"
@@ -57,6 +61,99 @@
         ],
         "org": []
       }
+    },
+    "configSchemas": {
+      "deployment": {
+        "type": "object",
+        "properties": {
+          "apiKey": {
+            "type": "string",
+            "minLength": 1,
+            "x-secret": true,
+            "x-ui": {
+              "label": {
+                "zh": "API 密钥",
+                "en": "API key"
+              }
+            },
+            "title": "API key"
+          },
+          "apiUrl": {
+            "type": "string",
+            "format": "uri",
+            "x-ui": {
+              "label": {
+                "zh": "接口地址",
+                "en": "API URL"
+              }
+            },
+            "title": "API URL"
+          },
+          "domain": {
+            "default": "e2b.app",
+            "type": "string",
+            "pattern": "^[a-z0-9]([a-z0-9-]*[a-z0-9])?(\\.[a-z0-9]([a-z0-9-]*[a-z0-9])?)+$",
+            "x-ui": {
+              "label": {
+                "zh": "沙箱域名",
+                "en": "Sandbox domain"
+              }
+            },
+            "title": "Sandbox domain"
+          },
+          "template": {
+            "type": "string",
+            "minLength": 1,
+            "x-ui": {
+              "label": {
+                "zh": "模板",
+                "en": "Template"
+              }
+            },
+            "title": "Template"
+          },
+          "timeoutSeconds": {
+            "default": 3600,
+            "type": "integer",
+            "minimum": 60,
+            "maximum": 86400,
+            "x-ui": {
+              "label": {
+                "zh": "沙箱超时",
+                "en": "Sandbox timeout"
+              }
+            },
+            "title": "Sandbox timeout"
+          },
+          "domainAllowlist": {
+            "default": true,
+            "type": "boolean",
+            "x-ui": {
+              "label": {
+                "zh": "按域名出站白名单",
+                "en": "Domain egress allowlist"
+              }
+            },
+            "title": "Domain egress allowlist"
+          },
+          "allowOpenEgress": {
+            "default": false,
+            "type": "boolean",
+            "x-ui": {
+              "label": {
+                "zh": "允许开放出站",
+                "en": "Allow open egress"
+              }
+            },
+            "title": "Allow open egress"
+          }
+        },
+        "required": [
+          "apiKey",
+          "template"
+        ],
+        "additionalProperties": false
+      }
     }
   }
 }

package/README.md

@@ -63,7 +63,7 @@ Then set `template` to `capybara-sandbox`. Image conventions (the plugin depends
   and files are not lost even when the kernel has no chance to `suspend` (for example the whole kernel is down). Every use pushes it back through connect (it only extends, never shortens).
   Idle hibernation and expiry destruction are handled by the kernel's maintenance tasks. E2B's continuous run limit (24 hours on Pro, 1 hour on Hobby) is recounted after pause / resume.
 - **Hobby plan**: the `timeout` of connect / create is at most 1 hour, so the deployment config `timeoutSeconds` must be ≤ 3600, and a single command can actually run at most
-  about 1 hour minus 2 minutes; however large the `sandbox_bash` `timeoutSeconds` is (capped by `sandbox.limits.maxCommandSeconds`, default 7200), it will be interrupted by the pause when the sandbox expires.
+  about 1 hour minus 2 minutes; however large the `Bash` `timeout` (in milliseconds) is (capped by `sandbox.limits.maxCommandSeconds`, default 7200 seconds), it will be interrupted by the pause when the sandbox expires.
   On Hobby, set `sandbox.limits.maxCommandSeconds` to below 3480.
 - E2B keeps a paused sandbox indefinitely until it is deleted (the kernel deletes by `destroyAfterInactiveDays`).
 

package/dist/index.mjs

@@ -6,7 +6,7 @@ const __capybara_filename = __capybaraFileURLToPath(import.meta.url);
 const __capybara_dirname = __capybaraPathDirname(__capybara_filename);
 
 // src/index.ts
-import { defineExtension, SANDBOX_EXTENSION_POINT, secret } from "@capybara-hq/plugin-sdk";
+import { defineExtension, SANDBOX_EXTENSION_POINT, secret, ui } from "@capybara-hq/plugin-sdk";
 import { z } from "zod";
 
 // src/provider.ts
@@ -228,7 +228,7 @@ var ENV_KEY_RE = /^[A-Za-z_][A-Za-z0-9_]*$/;
 var HOSTNAME_RE = /^[a-z0-9]([a-z0-9-]*[a-z0-9])?(\.[a-z0-9]([a-z0-9-]*[a-z0-9])?)+$/;
 var SANDBOX_ID_RE = /^[a-zA-Z0-9-]{1,128}$/;
 var IN_SANDBOX_GRACE_SECONDS = 5;
-var EXEC_WRAPPER = 'c=$1; echo $$ > "$c.pid" 2>/dev/null; if [ -e "$c.kill" ]; then exit 137; fi; timeout -s KILL "$3" /bin/bash -c "$2"; s=$?; rm -f "$c.pid"; exit $s';
+var EXEC_WRAPPER = 'c=$1; echo $$ > "$c.pid" 2>/dev/null; if [ -e "$c.kill" ]; then exit 137; fi; timeout -s KILL "$3" /bin/bash -c "$2"; s=$?; if [ $s -eq 124 ] || [ $s -eq 137 ]; then for p in $(pgrep -s $$); do [ "$p" = $$ ] || kill -9 "$p" 2>/dev/null; done; fi; rm -f "$c.pid"; exit $s';
 function execArgs(ctl, command, timeoutMs) {
   const seconds = Math.ceil(timeoutMs / 1e3) + IN_SANDBOX_GRACE_SECONDS;
   return ["-w", "/bin/sh", "-c", EXEC_WRAPPER, "capybara-exec", ctl, command, String(seconds)];
@@ -746,31 +746,42 @@ function checkLimits(l) {
 var MAX_TIMEOUT_SECONDS2 = 86400;
 var DeploymentConfig = z.object({
   /** E2B API key（`e2b_…`）。 */
-  apiKey: secret(z.string().min(1)),
+  apiKey: ui(secret(z.string().min(1)), { label: { zh: "API 密钥", en: "API key" } }),
   /** 控制面 API 地址；不填为 `https://api.<domain>`。自托管 E2B 填自己的地址。 */
-  apiUrl: z.url({ protocol: /^https?$/ }).optional(),
+  apiUrl: ui(z.url({ protocol: /^https?$/ }).optional(), {
+    label: { zh: "接口地址", en: "API URL" }
+  }),
   /** 沙箱域名（envd 地址为 `https://49983-<沙箱 id>.<domain>`）；API 返回了沙箱自己的域名时以返回的为准。 */
-  domain: z.string().regex(HOSTNAME_RE, {
-    message: "domain must be a lowercase hostname such as e2b.app"
-  }).default("e2b.app"),
+  domain: ui(
+    z.string().regex(HOSTNAME_RE, {
+      message: "domain must be a lowercase hostname such as e2b.app"
+    }).default("e2b.app"),
+    { label: { zh: "沙箱域名", en: "Sandbox domain" } }
+  ),
   /** 模板名或 id：由 plugins/sandbox-docker/image/Dockerfile 构建（见 README）。 */
-  template: z.string().min(1),
+  template: ui(z.string().min(1), { label: { zh: "模板", en: "Template" } }),
   /**
    * 沙箱的超时（秒，默认 3600）：到点 E2B 自动暂停（不是删除）沙箱，文件保留。内核每次用沙箱时把它往后推，
    * 长命令会按命令超时再加余量推后；空闲休眠与过期销毁由内核负责。
    */
-  timeoutSeconds: z.number().int().min(60).max(MAX_TIMEOUT_SECONDS2).default(3600),
+  timeoutSeconds: ui(z.number().int().min(60).max(MAX_TIMEOUT_SECONDS2).default(3600), {
+    label: { zh: "沙箱超时", en: "Sandbox timeout" }
+  }),
   /**
    * E2B 是否支持按域名的出站白名单（E2B 云：支持）。为 false 时（不支持的自托管版本）`allowlist` 退化为
    * `none` 并打告警。
    */
-  domainAllowlist: z.boolean().default(true),
+  domainAllowlist: ui(z.boolean().default(true), {
+    label: { zh: "按域名出站白名单", en: "Domain egress allowlist" }
+  }),
   /** 允许 `sandbox.limits.egress = "open"`（默认 false）。为 false 时 `create` 收到 open 直接报错。 */
-  allowOpenEgress: z.boolean().default(false)
+  allowOpenEgress: ui(z.boolean().default(false), {
+    label: { zh: "允许开放出站", en: "Allow open egress" }
+  })
 }).strict();
 var index_default = defineExtension({
   name: "sandbox-e2b",
-  version: "0.1.0-rc.0",
+  version: "0.1.0-rc.2",
   sdk: "^0.1.0-rc.0",
   provides: [SANDBOX_EXTENSION_POINT],
   // 只用部署配置与 E2B 的 API，不用任何需要声明的平台能力

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@capybara-hq/plugin-sandbox-e2b",
-  "version": "0.1.0-rc.0",
+  "version": "0.1.0-rc.2",
   "type": "module",
   "license": "Apache-2.0",
   "description": "Conversation sandboxes (sandbox@1) as E2B sandboxes (E2B cloud or self-hosted), with pause / resume and E2B egress controls",