@gjermundgaraba/clankerbox-rivet-sandbox-agent 0.20.1 → 0.22.0

package/dist/index.d.mts

@@ -20,8 +20,6 @@ interface Options {
   readonly fresh?: boolean | undefined;
   /** `sandbox` by default. */
   readonly namePrefix?: string | undefined;
-  /** The machine's own login user by default. */
-  readonly sshUser?: string | undefined;
   /**
    * The path of a public-key file, such as your `id_ed25519.pub`, whose keys the host installs for
    * the login user after a profile's setup, as the client config's `authorizedKeys` does: the key
@@ -34,7 +32,7 @@ interface Options {
    * `-S`): the tunnel ends with its ssh, and those would outlive it.
    */
   readonly sshArguments?: ReadonlyArray<string> | undefined;
-  /** `/home/user` by default, the login user's home, where the Ubuntu recipe runs the server. */
+  /** `/home/admin` by default, the login user's home, where the Ubuntu recipe runs the server. */
   readonly cwd?: string | undefined;
 }
 /**

package/dist/index.mjs

@@ -166,7 +166,7 @@ const make = (options, ssh = "ssh") => {
 		known.held = {
 			tunnel: yield* Effect.gen(function* () {
 				const directory = yield* (yield* FileSystem.FileSystem).makeTempDirectoryScoped({ prefix: "clankerbox-tunnel-" });
-				const args = yield* pinnedSsh(target, options.sshUser ?? target.login.user, forwarding(port, options.sshArguments ?? []));
+				const args = yield* pinnedSsh(target, target.login.user, forwarding(port, options.sshArguments ?? []));
 				return yield* open({
 					program: ssh,
 					args,
@@ -244,7 +244,7 @@ const provider = (options, layer, ssh) => {
 	const sandboxes = make(options, ssh);
 	return {
 		name,
-		defaultCwd: options.cwd ?? "/home/user",
+		defaultCwd: options.cwd ?? "/home/admin",
 		create: () => runtime.runPromise(sandboxes.create),
 		destroy: (id) => runtime.runPromise(sandboxes.destroy(id)),
 		pause: (id) => runtime.runPromise(sandboxes.pause(id)),

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@gjermundgaraba/clankerbox-rivet-sandbox-agent",
-  "version": "0.20.1",
+  "version": "0.22.0",
   "description": "clankerbox machines as sandboxes for Rivet's Sandbox Agent",
   "license": "MIT",
   "repository": {
@@ -25,14 +25,14 @@
     "access": "public"
   },
   "dependencies": {
-    "@gjermundgaraba/clankerbox-sdk": "0.20.1"
+    "@gjermundgaraba/clankerbox-sdk": "0.22.0"
   },
   "devDependencies": {
     "@effect/platform-node": "4.0.5",
     "@gjermundgaraba/effect-actions": "0.18.2",
     "@types/node": "26.6.5",
     "effect": "4.0.5",
-    "sandbox-agent": "0.5.2",
+    "sandbox-agent": "0.5.3",
     "typescript": "7.0.2",
     "vite": "npm:@voidzero-dev/vite-plus-core@1.3.0",
     "vite-plus": "1.3.0"
@@ -41,7 +41,7 @@
     "@effect/platform-node": "~4.0.4",
     "@gjermundgaraba/effect-actions": "^0.18.0",
     "effect": "~4.0.4",
-    "sandbox-agent": "~0.5.2"
+    "sandbox-agent": "~0.5.3"
   },
   "scripts": {
     "build": "vp pack",

package/recipes/macos/setup.sh

@@ -13,10 +13,10 @@ PATH=/usr/local/bin:/usr/bin:/bin:/usr/sbin:/sbin
 
 # The pins, each an arm64 macOS download with its sha256. The bump-sandbox-agent skill says
 # where each comes from.
-agent_version=0.5.2
-agent_sha256=58417cf5fa1e2dc417fc4a92d11840cc245ad599b87dd4c9a41686b05c36d877
-node_version=22.23.3
-node_sha256=23b25245dcfb9af7262f8ff142e9e2e0af025368117329e7a7458a51e5922f53
+agent_version=0.5.3
+agent_sha256=b4bf7244a67bd74ed91bef68051717503d3b4db6aad8f76c1ba71fccb9712b48
+node_version=22.23.4
+node_sha256=c9e1dbc748b33ed2d14f42445191ecaf14c56259c7a9a26d0042c49ec2b66428
 
 # Softnet blocks the gateway's DNS, so public resolvers come first.
 networksetup -listallnetworkservices | tail -n +2 | sed 's/^\*//' | while IFS= read -r service; do

package/recipes/ubuntu/setup.sh

@@ -1,9 +1,8 @@
 #!/bin/sh
 # A clankerbox setup that makes an x86_64 Ubuntu machine a sandbox for Rivet's Sandbox Agent:
-# the login user `user` with passwordless sudo, for whom the host then installs your keys, sshd
-# with root's login off where this recipe installs it, the Sandbox Agent's server and Claude Code
-# under `user`, and an /etc/clankerbox/start that keeps the server running on the guest's
-# loopback, port 2468.
+# the login user `admin` with passwordless sudo, for whom the host then installs your keys, sshd
+# with root's login off, the Sandbox Agent's server and Claude Code under `admin`, and an
+# /etc/clankerbox/start that keeps the server running on the guest's loopback, port 2468.
 #
 # Name this directory, or a copy, as a profile's `setup.path`. An optional `agent.env` beside
 # it, of `NAME=value` lines such as `ANTHROPIC_API_KEY=…`, becomes the server's environment,
@@ -14,33 +13,28 @@ export DEBIAN_FRONTEND=noninteractive
 
 # The pins, each an x86_64 Linux download with its sha256. The bump-sandbox-agent skill says
 # where each comes from.
-agent_version=0.5.2
-agent_sha256=5ebefccb130cccb0aa7972eacc8ff7c55550b959b2dd682a232a21a5712d955e
+agent_version=0.5.3
+agent_sha256=48b8bcdabf7d22e276593651a64c72e84e41fd8ef743b524721e949f9c330b90
 # The agents' adapters run on Node, and need a newer one than Ubuntu 24.04 packages.
-node_version=22.23.3
-node_sha256=df450af89261115ef9f9e3830c3eeb2cc9213b63c720b1af623cb5dcbe2e02de
-
-# A base with its own sshd, such as boat's, keeps it as it is.
-if [ -x /usr/sbin/sshd ]; then own_sshd=false; else own_sshd=true; fi
+node_version=22.23.4
+node_sha256=1805bcd35e6815559bd2eb97db438d3fdb0eb3a5e6a977b7c1badca76337e9ce
 
 apt-get update -qq
 apt-get install -y -qq --no-install-recommends \
   openssh-server sudo curl ca-certificates xz-utils procps >/dev/null
 
-if [ "$own_sshd" = true ]; then
-  install -d /etc/ssh/sshd_config.d
-  echo "PermitRootLogin no" >/etc/ssh/sshd_config.d/10-clankerbox.conf
-fi
+install -d /etc/ssh/sshd_config.d
+echo "PermitRootLogin no" >/etc/ssh/sshd_config.d/10-clankerbox.conf
 
-# The login user, which boat's bases already have.
-if ! id user >/dev/null 2>&1; then
-  useradd -m -s /bin/bash user
+if ! id admin >/dev/null 2>&1; then
+  groupadd -f admin
+  useradd -m -s /bin/bash -g admin admin
 fi
 
-echo "user ALL=(ALL) NOPASSWD: ALL" >/var/tmp/sudoers-user
-visudo -cf /var/tmp/sudoers-user >/dev/null
-install -m 440 /var/tmp/sudoers-user /etc/sudoers.d/user
-rm /var/tmp/sudoers-user
+echo "admin ALL=(ALL) NOPASSWD: ALL" >/var/tmp/sudoers-admin
+visudo -cf /var/tmp/sudoers-admin >/dev/null
+install -m 440 /var/tmp/sudoers-admin /etc/sudoers.d/admin
+rm /var/tmp/sudoers-admin
 
 # Downloads $1 to $3 and refuses it unless its sha256 is $2.
 fetch() {
@@ -58,16 +52,16 @@ fetch "https://nodejs.org/dist/v$node_version/node-v$node_version-linux-x64.tar.
 tar -xJf /var/tmp/node.tar.xz -C /usr/local --strip-components=1 --no-same-owner
 rm /var/tmp/node.tar.xz
 
-# The agents run as `user`: as root, Claude Code offers no bypass-permissions mode.
+# The agents run as `admin`: as root, Claude Code offers no bypass-permissions mode.
 if [ -s agent.env ]; then
-  install -m 600 -o user -g "$(id -gn user)" agent.env /etc/sandbox-agent.env
+  install -m 600 -o admin -g "$(id -gn admin)" agent.env /etc/sandbox-agent.env
 fi
 
 # Claude Code at its latest release, and its adapter at the version the server pins. Other
 # agents install the same way; `install-agent codex` hangs in its own check at this version, so
 # give it a timeout too, and end what it leaves running. Claude's install takes about 30 s; 300 s
 # leaves room for a slow mirror.
-timeout 300 su - user -c 'sandbox-agent install-agent claude' >/var/tmp/install-agent.log 2>&1 || {
+timeout 300 su - admin -c 'sandbox-agent install-agent claude' >/var/tmp/install-agent.log 2>&1 || {
   tail -n 15 /var/tmp/install-agent.log
   exit 1
 }
@@ -103,17 +97,17 @@ answers_within() {
 }
 
 running() {
-  pgrep -u user -f 'sandbox-agent server' >/dev/null
+  pgrep -u admin -f 'sandbox-agent server' >/dev/null
 }
 
 # A running server gets 10 s to answer, since this runs at every start, a running machine's too,
 # before it is ended as hung: TERM, then KILL after 5 s, as a hung one may ignore TERM.
 if running && ! answers_within 10; then
-  pkill -u user -f 'sandbox-agent server' || true
+  pkill -u admin -f 'sandbox-agent server' || true
   for tries in $(seq 40); do
     running || break
     if [ "$tries" -eq 20 ]; then
-      pkill -KILL -u user -f 'sandbox-agent server' || true
+      pkill -KILL -u admin -f 'sandbox-agent server' || true
     fi
     sleep 0.25
   done
@@ -121,7 +115,7 @@ fi
 
 # The server listens on loopback alone, with no token: guest port 22 is the only way to it.
 if ! running; then
-  su - user -c '
+  su - admin -c '
     if [ -r /etc/sandbox-agent.env ]; then set -a; . /etc/sandbox-agent.env; set +a; fi
     setsid -f sandbox-agent server --no-token --no-telemetry >/dev/null 2>&1
   '