@greppleai/grip 0.0.1 → 0.1.4

package/dist/core/remote-workspace-protocol/shared-transport.d.ts

@@ -0,0 +1,71 @@
+/** Opt-in multiplex transport. V1 messages are validated *inside* a bound channel. */
+import { type Static, Type } from "typebox";
+import { type RemoteWorkspaceClientMessage, type RemoteWorkspaceProtocolLimits, type RemoteWorkspaceServerMessage } from "./contract.ts";
+export declare const SHARED_WORKSPACE_WEBSOCKET_PROTOCOL = "grip.workspace.v2";
+declare const Channel: Type.TObject<{
+    type: Type.TLiteral<"channel">;
+    channelId: Type.TString;
+    payload: Type.TUnknown;
+}>;
+declare const ClientFrame: Type.TUnion<[Type.TObject<{
+    type: Type.TLiteral<"hello">;
+    id: Type.TString;
+    version: Type.TLiteral<2>;
+}>, Type.TObject<{
+    type: Type.TLiteral<"open">;
+    id: Type.TString;
+    root: Type.TString;
+}>, Type.TObject<{
+    type: Type.TLiteral<"close">;
+    channelId: Type.TString;
+}>, Type.TObject<{
+    type: Type.TLiteral<"channel">;
+    channelId: Type.TString;
+    payload: Type.TUnknown;
+}>]>;
+declare const ServerFrame: Type.TUnion<[Type.TObject<{
+    type: Type.TLiteral<"hello_ack">;
+    id: Type.TString;
+    version: Type.TLiteral<2>;
+    epoch: Type.TString;
+    daemonVersion: Type.TString;
+}>, Type.TObject<{
+    type: Type.TLiteral<"opened">;
+    id: Type.TString;
+    channelId: Type.TString;
+}>, Type.TObject<{
+    type: Type.TLiteral<"closed">;
+    channelId: Type.TString;
+    reason: Type.TOptional<Type.TObject<{
+        code: Type.TUnion<[Type.TLiteral<"protocol_error">, Type.TLiteral<"invalid_payload">, Type.TLiteral<"message_too_large">, Type.TLiteral<"policy_violation">, Type.TLiteral<"normal">]>;
+        message: Type.TString;
+    }>>;
+}>, Type.TObject<{
+    type: Type.TLiteral<"control_error">;
+    id: Type.TString;
+    code: Type.TUnion<[Type.TLiteral<"invalid_root">, Type.TLiteral<"limit_exceeded">, Type.TLiteral<"invalid_request">]>;
+    message: Type.TString;
+}>, Type.TObject<{
+    type: Type.TLiteral<"channel">;
+    channelId: Type.TString;
+    payload: Type.TUnknown;
+}>]>;
+export type SharedWorkspaceClientChannelFrame = Omit<Static<typeof Channel>, "payload"> & {
+    payload: RemoteWorkspaceClientMessage;
+};
+export type SharedWorkspaceServerChannelFrame = Omit<Static<typeof Channel>, "payload"> & {
+    payload: RemoteWorkspaceServerMessage;
+};
+export type SharedWorkspaceClientFrame = Exclude<Static<typeof ClientFrame>, {
+    type: "channel";
+}> | SharedWorkspaceClientChannelFrame;
+/** The daemon dispatches a valid outer envelope before parsing the inner message on its bound channel. */
+export type SharedWorkspaceClientEnvelope = Static<typeof ClientFrame>;
+export type SharedWorkspaceServerFrame = Exclude<Static<typeof ServerFrame>, {
+    type: "channel";
+}> | SharedWorkspaceServerChannelFrame;
+export declare function parseSharedWorkspaceClientFrame(input: string | Uint8Array, limits: RemoteWorkspaceProtocolLimits): SharedWorkspaceClientFrame;
+export declare function parseSharedWorkspaceClientEnvelope(input: string | Uint8Array, limits: RemoteWorkspaceProtocolLimits): SharedWorkspaceClientEnvelope;
+export declare function parseSharedWorkspaceServerFrame(input: string | Uint8Array, limits: RemoteWorkspaceProtocolLimits): SharedWorkspaceServerFrame;
+export {};
+//# sourceMappingURL=shared-transport.d.ts.map

package/dist/core/remote-workspace-protocol/shared-transport.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"shared-transport.d.ts","sourceRoot":"","sources":["../../../src/core/remote-workspace-protocol/shared-transport.ts"],"names":[],"mappings":"AAAA,sFAAsF;AACtF,OAAO,EAAE,KAAK,MAAM,EAAE,IAAI,EAAE,MAAM,SAAS,CAAC;AAE5C,OAAO,EAIN,KAAK,4BAA4B,EACjC,KAAK,6BAA6B,EAClC,KAAK,4BAA4B,EAEjC,MAAM,eAAe,CAAC;AAEvB,eAAO,MAAM,mCAAmC,sBAAsB,CAAC;AAsDvE,QAAA,MAAM,OAAO;;;;EAAwG,CAAC;AAEtH,QAAA,MAAM,WAAW;;;;;;;;;;;;;;;IAA4C,CAAC;AAC9D,QAAA,MAAM,WAAW;;;;;;;;;;;;;;;;;;;;;;;;;;IAAgE,CAAC;AAGlF,MAAM,MAAM,iCAAiC,GAAG,IAAI,CAAC,MAAM,CAAC,OAAO,OAAO,CAAC,EAAE,SAAS,CAAC,GAAG;IACzF,OAAO,EAAE,4BAA4B,CAAC;CACtC,CAAC;AACF,MAAM,MAAM,iCAAiC,GAAG,IAAI,CAAC,MAAM,CAAC,OAAO,OAAO,CAAC,EAAE,SAAS,CAAC,GAAG;IACzF,OAAO,EAAE,4BAA4B,CAAC;CACtC,CAAC;AACF,MAAM,MAAM,0BAA0B,GACnC,OAAO,CAAC,MAAM,CAAC,OAAO,WAAW,CAAC,EAAE;IAAE,IAAI,EAAE,SAAS,CAAA;CAAE,CAAC,GACxD,iCAAiC,CAAC;AACrC,0GAA0G;AAC1G,MAAM,MAAM,6BAA6B,GAAG,MAAM,CAAC,OAAO,WAAW,CAAC,CAAC;AACvE,MAAM,MAAM,0BAA0B,GACnC,OAAO,CAAC,MAAM,CAAC,OAAO,WAAW,CAAC,EAAE;IAAE,IAAI,EAAE,SAAS,CAAA;CAAE,CAAC,GACxD,iCAAiC,CAAC;AAuBrC,wBAAgB,+BAA+B,CAC9C,KAAK,EAAE,MAAM,GAAG,UAAU,EAC1B,MAAM,EAAE,6BAA6B,GACnC,0BAA0B,CAE5B;AACD,wBAAgB,kCAAkC,CACjD,KAAK,EAAE,MAAM,GAAG,UAAU,EAC1B,MAAM,EAAE,6BAA6B,GACnC,6BAA6B,CAE/B;AAED,wBAAgB,+BAA+B,CAC9C,KAAK,EAAE,MAAM,GAAG,UAAU,EAC1B,MAAM,EAAE,6BAA6B,GACnC,0BAA0B,CAE5B","sourcesContent":["/** Opt-in multiplex transport. V1 messages are validated *inside* a bound channel. */\nimport { type Static, Type } from \"typebox\";\nimport { Compile, type Validator } from \"typebox/compile\";\nimport {\n\tdecodeRemoteWorkspaceMessage,\n\tparseRemoteWorkspaceClientMessage,\n\tparseRemoteWorkspaceServerMessage,\n\ttype RemoteWorkspaceClientMessage,\n\ttype RemoteWorkspaceProtocolLimits,\n\ttype RemoteWorkspaceServerMessage,\n\tRemoteWorkspaceValidationError,\n} from \"./contract.ts\";\n\nexport const SHARED_WORKSPACE_WEBSOCKET_PROTOCOL = \"grip.workspace.v2\";\nconst strict = { additionalProperties: false } as const;\nconst Id = Type.String({ minLength: 1, maxLength: 128, pattern: \"^[A-Za-z0-9._:-]+$\" });\nconst ChannelId = Type.String({ minLength: 24, maxLength: 128, pattern: \"^[A-Za-z0-9_-]+$\" });\n\nconst Hello = Type.Object({ type: Type.Literal(\"hello\"), id: Id, version: Type.Literal(2) }, strict);\nconst HelloAck = Type.Object(\n\t{\n\t\ttype: Type.Literal(\"hello_ack\"),\n\t\tid: Id,\n\t\tversion: Type.Literal(2),\n\t\tepoch: ChannelId,\n\t\tdaemonVersion: Type.String({ minLength: 1, maxLength: 128 }),\n\t},\n\tstrict,\n);\nconst Open = Type.Object(\n\t{ type: Type.Literal(\"open\"), id: Id, root: Type.String({ minLength: 1, maxLength: 32_768 }) },\n\tstrict,\n);\nconst Opened = Type.Object({ type: Type.Literal(\"opened\"), id: Id, channelId: ChannelId }, strict);\nconst Close = Type.Object({ type: Type.Literal(\"close\"), channelId: ChannelId }, strict);\nconst Closed = Type.Object(\n\t{\n\t\ttype: Type.Literal(\"closed\"),\n\t\tchannelId: ChannelId,\n\t\t// Absent for an acknowledged client detach; present for an unsolicited protocol failure.\n\t\treason: Type.Optional(\n\t\t\tType.Object(\n\t\t\t\t{\n\t\t\t\t\tcode: Type.Union([\n\t\t\t\t\t\tType.Literal(\"protocol_error\"),\n\t\t\t\t\t\tType.Literal(\"invalid_payload\"),\n\t\t\t\t\t\tType.Literal(\"message_too_large\"),\n\t\t\t\t\t\tType.Literal(\"policy_violation\"),\n\t\t\t\t\t\tType.Literal(\"normal\"),\n\t\t\t\t\t]),\n\t\t\t\t\tmessage: Type.String({ minLength: 1, maxLength: 120 }),\n\t\t\t\t},\n\t\t\t\tstrict,\n\t\t\t),\n\t\t),\n\t},\n\tstrict,\n);\nconst ControlError = Type.Object(\n\t{\n\t\ttype: Type.Literal(\"control_error\"),\n\t\tid: Id,\n\t\tcode: Type.Union([Type.Literal(\"invalid_root\"), Type.Literal(\"limit_exceeded\"), Type.Literal(\"invalid_request\")]),\n\t\tmessage: Type.String({ minLength: 1, maxLength: 1024 }),\n\t},\n\tstrict,\n);\nconst Channel = Type.Object({ type: Type.Literal(\"channel\"), channelId: ChannelId, payload: Type.Unknown() }, strict);\n\nconst ClientFrame = Type.Union([Hello, Open, Close, Channel]);\nconst ServerFrame = Type.Union([HelloAck, Opened, Closed, ControlError, Channel]);\nconst clientValidator = Compile(ClientFrame);\nconst serverValidator = Compile(ServerFrame);\nexport type SharedWorkspaceClientChannelFrame = Omit<Static<typeof Channel>, \"payload\"> & {\n\tpayload: RemoteWorkspaceClientMessage;\n};\nexport type SharedWorkspaceServerChannelFrame = Omit<Static<typeof Channel>, \"payload\"> & {\n\tpayload: RemoteWorkspaceServerMessage;\n};\nexport type SharedWorkspaceClientFrame =\n\t| Exclude<Static<typeof ClientFrame>, { type: \"channel\" }>\n\t| SharedWorkspaceClientChannelFrame;\n/** The daemon dispatches a valid outer envelope before parsing the inner message on its bound channel. */\nexport type SharedWorkspaceClientEnvelope = Static<typeof ClientFrame>;\nexport type SharedWorkspaceServerFrame =\n\t| Exclude<Static<typeof ServerFrame>, { type: \"channel\" }>\n\t| SharedWorkspaceServerChannelFrame;\n\nfunction validateFrame<T extends { type: string }>(\n\tinput: string | Uint8Array,\n\tlimits: RemoteWorkspaceProtocolLimits,\n\tvalidator: Validator,\n\tparsePayload?: (value: unknown, limits: RemoteWorkspaceProtocolLimits) => unknown,\n): T {\n\tconst value = decodeRemoteWorkspaceMessage(input, limits);\n\tif (!validator.Check(value)) {\n\t\tconst failure = validator.Errors(value)[0];\n\t\tthrow new RemoteWorkspaceValidationError(\n\t\t\t`Invalid v2 frame: ${failure?.instancePath || \"/\"}: ${failure?.message ?? \"schema mismatch\"}`,\n\t\t);\n\t}\n\tconst frame = value as T;\n\tif (frame.type === \"channel\" && parsePayload) {\n\t\tconst channel = frame as T & { payload: unknown };\n\t\tparsePayload(channel.payload, limits);\n\t}\n\treturn frame;\n}\n\nexport function parseSharedWorkspaceClientFrame(\n\tinput: string | Uint8Array,\n\tlimits: RemoteWorkspaceProtocolLimits,\n): SharedWorkspaceClientFrame {\n\treturn validateFrame(input, limits, clientValidator, parseRemoteWorkspaceClientMessage);\n}\nexport function parseSharedWorkspaceClientEnvelope(\n\tinput: string | Uint8Array,\n\tlimits: RemoteWorkspaceProtocolLimits,\n): SharedWorkspaceClientEnvelope {\n\treturn validateFrame(input, limits, clientValidator);\n}\n\nexport function parseSharedWorkspaceServerFrame(\n\tinput: string | Uint8Array,\n\tlimits: RemoteWorkspaceProtocolLimits,\n): SharedWorkspaceServerFrame {\n\treturn validateFrame(input, limits, serverValidator, parseRemoteWorkspaceServerMessage);\n}\n"]}

package/dist/core/remote-workspace-protocol/shared-transport.js

@@ -0,0 +1,68 @@
+/** Opt-in multiplex transport. V1 messages are validated *inside* a bound channel. */
+import { Type } from "typebox";
+import { Compile } from "typebox/compile";
+import { decodeRemoteWorkspaceMessage, parseRemoteWorkspaceClientMessage, parseRemoteWorkspaceServerMessage, RemoteWorkspaceValidationError, } from "./contract.js";
+export const SHARED_WORKSPACE_WEBSOCKET_PROTOCOL = "grip.workspace.v2";
+const strict = { additionalProperties: false };
+const Id = Type.String({ minLength: 1, maxLength: 128, pattern: "^[A-Za-z0-9._:-]+$" });
+const ChannelId = Type.String({ minLength: 24, maxLength: 128, pattern: "^[A-Za-z0-9_-]+$" });
+const Hello = Type.Object({ type: Type.Literal("hello"), id: Id, version: Type.Literal(2) }, strict);
+const HelloAck = Type.Object({
+    type: Type.Literal("hello_ack"),
+    id: Id,
+    version: Type.Literal(2),
+    epoch: ChannelId,
+    daemonVersion: Type.String({ minLength: 1, maxLength: 128 }),
+}, strict);
+const Open = Type.Object({ type: Type.Literal("open"), id: Id, root: Type.String({ minLength: 1, maxLength: 32_768 }) }, strict);
+const Opened = Type.Object({ type: Type.Literal("opened"), id: Id, channelId: ChannelId }, strict);
+const Close = Type.Object({ type: Type.Literal("close"), channelId: ChannelId }, strict);
+const Closed = Type.Object({
+    type: Type.Literal("closed"),
+    channelId: ChannelId,
+    // Absent for an acknowledged client detach; present for an unsolicited protocol failure.
+    reason: Type.Optional(Type.Object({
+        code: Type.Union([
+            Type.Literal("protocol_error"),
+            Type.Literal("invalid_payload"),
+            Type.Literal("message_too_large"),
+            Type.Literal("policy_violation"),
+            Type.Literal("normal"),
+        ]),
+        message: Type.String({ minLength: 1, maxLength: 120 }),
+    }, strict)),
+}, strict);
+const ControlError = Type.Object({
+    type: Type.Literal("control_error"),
+    id: Id,
+    code: Type.Union([Type.Literal("invalid_root"), Type.Literal("limit_exceeded"), Type.Literal("invalid_request")]),
+    message: Type.String({ minLength: 1, maxLength: 1024 }),
+}, strict);
+const Channel = Type.Object({ type: Type.Literal("channel"), channelId: ChannelId, payload: Type.Unknown() }, strict);
+const ClientFrame = Type.Union([Hello, Open, Close, Channel]);
+const ServerFrame = Type.Union([HelloAck, Opened, Closed, ControlError, Channel]);
+const clientValidator = Compile(ClientFrame);
+const serverValidator = Compile(ServerFrame);
+function validateFrame(input, limits, validator, parsePayload) {
+    const value = decodeRemoteWorkspaceMessage(input, limits);
+    if (!validator.Check(value)) {
+        const failure = validator.Errors(value)[0];
+        throw new RemoteWorkspaceValidationError(`Invalid v2 frame: ${failure?.instancePath || "/"}: ${failure?.message ?? "schema mismatch"}`);
+    }
+    const frame = value;
+    if (frame.type === "channel" && parsePayload) {
+        const channel = frame;
+        parsePayload(channel.payload, limits);
+    }
+    return frame;
+}
+export function parseSharedWorkspaceClientFrame(input, limits) {
+    return validateFrame(input, limits, clientValidator, parseRemoteWorkspaceClientMessage);
+}
+export function parseSharedWorkspaceClientEnvelope(input, limits) {
+    return validateFrame(input, limits, clientValidator);
+}
+export function parseSharedWorkspaceServerFrame(input, limits) {
+    return validateFrame(input, limits, serverValidator, parseRemoteWorkspaceServerMessage);
+}
+//# sourceMappingURL=shared-transport.js.map

package/dist/core/remote-workspace-protocol/shared-transport.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"shared-transport.js","sourceRoot":"","sources":["../../../src/core/remote-workspace-protocol/shared-transport.ts"],"names":[],"mappings":"AAAA,sFAAsF;AACtF,OAAO,EAAe,IAAI,EAAE,MAAM,SAAS,CAAC;AAC5C,OAAO,EAAE,OAAO,EAAkB,MAAM,iBAAiB,CAAC;AAC1D,OAAO,EACN,4BAA4B,EAC5B,iCAAiC,EACjC,iCAAiC,EAIjC,8BAA8B,GAC9B,MAAM,eAAe,CAAC;AAEvB,MAAM,CAAC,MAAM,mCAAmC,GAAG,mBAAmB,CAAC;AACvE,MAAM,MAAM,GAAG,EAAE,oBAAoB,EAAE,KAAK,EAAW,CAAC;AACxD,MAAM,EAAE,GAAG,IAAI,CAAC,MAAM,CAAC,EAAE,SAAS,EAAE,CAAC,EAAE,SAAS,EAAE,GAAG,EAAE,OAAO,EAAE,oBAAoB,EAAE,CAAC,CAAC;AACxF,MAAM,SAAS,GAAG,IAAI,CAAC,MAAM,CAAC,EAAE,SAAS,EAAE,EAAE,EAAE,SAAS,EAAE,GAAG,EAAE,OAAO,EAAE,kBAAkB,EAAE,CAAC,CAAC;AAE9F,MAAM,KAAK,GAAG,IAAI,CAAC,MAAM,CAAC,EAAE,IAAI,EAAE,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,EAAE,EAAE,EAAE,EAAE,EAAE,OAAO,EAAE,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,EAAE,MAAM,CAAC,CAAC;AACrG,MAAM,QAAQ,GAAG,IAAI,CAAC,MAAM,CAC3B;IACC,IAAI,EAAE,IAAI,CAAC,OAAO,CAAC,WAAW,CAAC;IAC/B,EAAE,EAAE,EAAE;IACN,OAAO,EAAE,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC;IACxB,KAAK,EAAE,SAAS;IAChB,aAAa,EAAE,IAAI,CAAC,MAAM,CAAC,EAAE,SAAS,EAAE,CAAC,EAAE,SAAS,EAAE,GAAG,EAAE,CAAC;CAC5D,EACD,MAAM,CACN,CAAC;AACF,MAAM,IAAI,GAAG,IAAI,CAAC,MAAM,CACvB,EAAE,IAAI,EAAE,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,EAAE,EAAE,EAAE,EAAE,IAAI,EAAE,IAAI,CAAC,MAAM,CAAC,EAAE,SAAS,EAAE,CAAC,EAAE,SAAS,EAAE,MAAM,EAAE,CAAC,EAAE,EAC9F,MAAM,CACN,CAAC;AACF,MAAM,MAAM,GAAG,IAAI,CAAC,MAAM,CAAC,EAAE,IAAI,EAAE,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,EAAE,EAAE,EAAE,EAAE,EAAE,SAAS,EAAE,SAAS,EAAE,EAAE,MAAM,CAAC,CAAC;AACnG,MAAM,KAAK,GAAG,IAAI,CAAC,MAAM,CAAC,EAAE,IAAI,EAAE,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,EAAE,SAAS,EAAE,SAAS,EAAE,EAAE,MAAM,CAAC,CAAC;AACzF,MAAM,MAAM,GAAG,IAAI,CAAC,MAAM,CACzB;IACC,IAAI,EAAE,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC;IAC5B,SAAS,EAAE,SAAS;IACpB,yFAAyF;IACzF,MAAM,EAAE,IAAI,CAAC,QAAQ,CACpB,IAAI,CAAC,MAAM,CACV;QACC,IAAI,EAAE,IAAI,CAAC,KAAK,CAAC;YAChB,IAAI,CAAC,OAAO,CAAC,gBAAgB,CAAC;YAC9B,IAAI,CAAC,OAAO,CAAC,iBAAiB,CAAC;YAC/B,IAAI,CAAC,OAAO,CAAC,mBAAmB,CAAC;YACjC,IAAI,CAAC,OAAO,CAAC,kBAAkB,CAAC;YAChC,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC;SACtB,CAAC;QACF,OAAO,EAAE,IAAI,CAAC,MAAM,CAAC,EAAE,SAAS,EAAE,CAAC,EAAE,SAAS,EAAE,GAAG,EAAE,CAAC;KACtD,EACD,MAAM,CACN,CACD;CACD,EACD,MAAM,CACN,CAAC;AACF,MAAM,YAAY,GAAG,IAAI,CAAC,MAAM,CAC/B;IACC,IAAI,EAAE,IAAI,CAAC,OAAO,CAAC,eAAe,CAAC;IACnC,EAAE,EAAE,EAAE;IACN,IAAI,EAAE,IAAI,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,cAAc,CAAC,EAAE,IAAI,CAAC,OAAO,CAAC,gBAAgB,CAAC,EAAE,IAAI,CAAC,OAAO,CAAC,iBAAiB,CAAC,CAAC,CAAC;IACjH,OAAO,EAAE,IAAI,CAAC,MAAM,CAAC,EAAE,SAAS,EAAE,CAAC,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC;CACvD,EACD,MAAM,CACN,CAAC;AACF,MAAM,OAAO,GAAG,IAAI,CAAC,MAAM,CAAC,EAAE,IAAI,EAAE,IAAI,CAAC,OAAO,CAAC,SAAS,CAAC,EAAE,SAAS,EAAE,SAAS,EAAE,OAAO,EAAE,IAAI,CAAC,OAAO,EAAE,EAAE,EAAE,MAAM,CAAC,CAAC;AAEtH,MAAM,WAAW,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,KAAK,EAAE,IAAI,EAAE,KAAK,EAAE,OAAO,CAAC,CAAC,CAAC;AAC9D,MAAM,WAAW,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,QAAQ,EAAE,MAAM,EAAE,MAAM,EAAE,YAAY,EAAE,OAAO,CAAC,CAAC,CAAC;AAClF,MAAM,eAAe,GAAG,OAAO,CAAC,WAAW,CAAC,CAAC;AAC7C,MAAM,eAAe,GAAG,OAAO,CAAC,WAAW,CAAC,CAAC;AAgB7C,SAAS,aAAa,CACrB,KAA0B,EAC1B,MAAqC,EACrC,SAAoB,EACpB,YAAiF,EAC7E;IACJ,MAAM,KAAK,GAAG,4BAA4B,CAAC,KAAK,EAAE,MAAM,CAAC,CAAC;IAC1D,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,KAAK,CAAC,EAAE,CAAC;QAC7B,MAAM,OAAO,GAAG,SAAS,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC;QAC3C,MAAM,IAAI,8BAA8B,CACvC,qBAAqB,OAAO,EAAE,YAAY,IAAI,GAAG,KAAK,OAAO,EAAE,OAAO,IAAI,iBAAiB,EAAE,CAC7F,CAAC;IACH,CAAC;IACD,MAAM,KAAK,GAAG,KAAU,CAAC;IACzB,IAAI,KAAK,CAAC,IAAI,KAAK,SAAS,IAAI,YAAY,EAAE,CAAC;QAC9C,MAAM,OAAO,GAAG,KAAiC,CAAC;QAClD,YAAY,CAAC,OAAO,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;IACvC,CAAC;IACD,OAAO,KAAK,CAAC;AAAA,CACb;AAED,MAAM,UAAU,+BAA+B,CAC9C,KAA0B,EAC1B,MAAqC,EACR;IAC7B,OAAO,aAAa,CAAC,KAAK,EAAE,MAAM,EAAE,eAAe,EAAE,iCAAiC,CAAC,CAAC;AAAA,CACxF;AACD,MAAM,UAAU,kCAAkC,CACjD,KAA0B,EAC1B,MAAqC,EACL;IAChC,OAAO,aAAa,CAAC,KAAK,EAAE,MAAM,EAAE,eAAe,CAAC,CAAC;AAAA,CACrD;AAED,MAAM,UAAU,+BAA+B,CAC9C,KAA0B,EAC1B,MAAqC,EACR;IAC7B,OAAO,aAAa,CAAC,KAAK,EAAE,MAAM,EAAE,eAAe,EAAE,iCAAiC,CAAC,CAAC;AAAA,CACxF","sourcesContent":["/** Opt-in multiplex transport. V1 messages are validated *inside* a bound channel. */\nimport { type Static, Type } from \"typebox\";\nimport { Compile, type Validator } from \"typebox/compile\";\nimport {\n\tdecodeRemoteWorkspaceMessage,\n\tparseRemoteWorkspaceClientMessage,\n\tparseRemoteWorkspaceServerMessage,\n\ttype RemoteWorkspaceClientMessage,\n\ttype RemoteWorkspaceProtocolLimits,\n\ttype RemoteWorkspaceServerMessage,\n\tRemoteWorkspaceValidationError,\n} from \"./contract.ts\";\n\nexport const SHARED_WORKSPACE_WEBSOCKET_PROTOCOL = \"grip.workspace.v2\";\nconst strict = { additionalProperties: false } as const;\nconst Id = Type.String({ minLength: 1, maxLength: 128, pattern: \"^[A-Za-z0-9._:-]+$\" });\nconst ChannelId = Type.String({ minLength: 24, maxLength: 128, pattern: \"^[A-Za-z0-9_-]+$\" });\n\nconst Hello = Type.Object({ type: Type.Literal(\"hello\"), id: Id, version: Type.Literal(2) }, strict);\nconst HelloAck = Type.Object(\n\t{\n\t\ttype: Type.Literal(\"hello_ack\"),\n\t\tid: Id,\n\t\tversion: Type.Literal(2),\n\t\tepoch: ChannelId,\n\t\tdaemonVersion: Type.String({ minLength: 1, maxLength: 128 }),\n\t},\n\tstrict,\n);\nconst Open = Type.Object(\n\t{ type: Type.Literal(\"open\"), id: Id, root: Type.String({ minLength: 1, maxLength: 32_768 }) },\n\tstrict,\n);\nconst Opened = Type.Object({ type: Type.Literal(\"opened\"), id: Id, channelId: ChannelId }, strict);\nconst Close = Type.Object({ type: Type.Literal(\"close\"), channelId: ChannelId }, strict);\nconst Closed = Type.Object(\n\t{\n\t\ttype: Type.Literal(\"closed\"),\n\t\tchannelId: ChannelId,\n\t\t// Absent for an acknowledged client detach; present for an unsolicited protocol failure.\n\t\treason: Type.Optional(\n\t\t\tType.Object(\n\t\t\t\t{\n\t\t\t\t\tcode: Type.Union([\n\t\t\t\t\t\tType.Literal(\"protocol_error\"),\n\t\t\t\t\t\tType.Literal(\"invalid_payload\"),\n\t\t\t\t\t\tType.Literal(\"message_too_large\"),\n\t\t\t\t\t\tType.Literal(\"policy_violation\"),\n\t\t\t\t\t\tType.Literal(\"normal\"),\n\t\t\t\t\t]),\n\t\t\t\t\tmessage: Type.String({ minLength: 1, maxLength: 120 }),\n\t\t\t\t},\n\t\t\t\tstrict,\n\t\t\t),\n\t\t),\n\t},\n\tstrict,\n);\nconst ControlError = Type.Object(\n\t{\n\t\ttype: Type.Literal(\"control_error\"),\n\t\tid: Id,\n\t\tcode: Type.Union([Type.Literal(\"invalid_root\"), Type.Literal(\"limit_exceeded\"), Type.Literal(\"invalid_request\")]),\n\t\tmessage: Type.String({ minLength: 1, maxLength: 1024 }),\n\t},\n\tstrict,\n);\nconst Channel = Type.Object({ type: Type.Literal(\"channel\"), channelId: ChannelId, payload: Type.Unknown() }, strict);\n\nconst ClientFrame = Type.Union([Hello, Open, Close, Channel]);\nconst ServerFrame = Type.Union([HelloAck, Opened, Closed, ControlError, Channel]);\nconst clientValidator = Compile(ClientFrame);\nconst serverValidator = Compile(ServerFrame);\nexport type SharedWorkspaceClientChannelFrame = Omit<Static<typeof Channel>, \"payload\"> & {\n\tpayload: RemoteWorkspaceClientMessage;\n};\nexport type SharedWorkspaceServerChannelFrame = Omit<Static<typeof Channel>, \"payload\"> & {\n\tpayload: RemoteWorkspaceServerMessage;\n};\nexport type SharedWorkspaceClientFrame =\n\t| Exclude<Static<typeof ClientFrame>, { type: \"channel\" }>\n\t| SharedWorkspaceClientChannelFrame;\n/** The daemon dispatches a valid outer envelope before parsing the inner message on its bound channel. */\nexport type SharedWorkspaceClientEnvelope = Static<typeof ClientFrame>;\nexport type SharedWorkspaceServerFrame =\n\t| Exclude<Static<typeof ServerFrame>, { type: \"channel\" }>\n\t| SharedWorkspaceServerChannelFrame;\n\nfunction validateFrame<T extends { type: string }>(\n\tinput: string | Uint8Array,\n\tlimits: RemoteWorkspaceProtocolLimits,\n\tvalidator: Validator,\n\tparsePayload?: (value: unknown, limits: RemoteWorkspaceProtocolLimits) => unknown,\n): T {\n\tconst value = decodeRemoteWorkspaceMessage(input, limits);\n\tif (!validator.Check(value)) {\n\t\tconst failure = validator.Errors(value)[0];\n\t\tthrow new RemoteWorkspaceValidationError(\n\t\t\t`Invalid v2 frame: ${failure?.instancePath || \"/\"}: ${failure?.message ?? \"schema mismatch\"}`,\n\t\t);\n\t}\n\tconst frame = value as T;\n\tif (frame.type === \"channel\" && parsePayload) {\n\t\tconst channel = frame as T & { payload: unknown };\n\t\tparsePayload(channel.payload, limits);\n\t}\n\treturn frame;\n}\n\nexport function parseSharedWorkspaceClientFrame(\n\tinput: string | Uint8Array,\n\tlimits: RemoteWorkspaceProtocolLimits,\n): SharedWorkspaceClientFrame {\n\treturn validateFrame(input, limits, clientValidator, parseRemoteWorkspaceClientMessage);\n}\nexport function parseSharedWorkspaceClientEnvelope(\n\tinput: string | Uint8Array,\n\tlimits: RemoteWorkspaceProtocolLimits,\n): SharedWorkspaceClientEnvelope {\n\treturn validateFrame(input, limits, clientValidator);\n}\n\nexport function parseSharedWorkspaceServerFrame(\n\tinput: string | Uint8Array,\n\tlimits: RemoteWorkspaceProtocolLimits,\n): SharedWorkspaceServerFrame {\n\treturn validateFrame(input, limits, serverValidator, parseRemoteWorkspaceServerMessage);\n}\n"]}

package/dist/core/sandbox/command.d.ts

@@ -1,10 +1,9 @@
-import type { SandboxContainer, SandboxRuntime, SandboxStartResult, SandboxStopResult } from "./docker.ts";
+import type { SandboxContainer, SandboxStartResult, SandboxStopResult } from "./config.ts";
 export interface SandboxStartUserCommand {
     subcommand: "start";
-    image?: string;
-    runtime?: SandboxRuntime;
     name?: string;
     template?: string;
+    update?: boolean;
 }
 export type SandboxUserCommand = {
     subcommand: "status";
@@ -15,7 +14,6 @@ export type SandboxUserCommand = {
     url: string;
 } | SandboxStartUserCommand | {
     subcommand: "list";
-    runtime?: SandboxRuntime;
 } | {
     subcommand: "stop";
     target?: string;

package/dist/core/sandbox/command.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"command.d.ts","sourceRoot":"","sources":["../../../src/core/sandbox/command.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,gBAAgB,EAAE,cAAc,EAAE,kBAAkB,EAAE,iBAAiB,EAAE,MAAM,aAAa,CAAC;AAE3G,MAAM,WAAW,uBAAuB;IACvC,UAAU,EAAE,OAAO,CAAC;IACpB,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,OAAO,CAAC,EAAE,cAAc,CAAC;IACzB,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,QAAQ,CAAC,EAAE,MAAM,CAAC;CAClB;AAED,MAAM,MAAM,kBAAkB,GAC3B;IAAE,UAAU,EAAE,QAAQ,CAAA;CAAE,GACxB;IAAE,UAAU,EAAE,OAAO,CAAA;CAAE,GACvB;IAAE,UAAU,EAAE,QAAQ,CAAC;IAAC,GAAG,EAAE,MAAM,CAAA;CAAE,GACrC,uBAAuB,GACvB;IAAE,UAAU,EAAE,MAAM,CAAC;IAAC,OAAO,CAAC,EAAE,cAAc,CAAA;CAAE,GAChD;IAAE,UAAU,EAAE,MAAM,CAAC;IAAC,MAAM,CAAC,EAAE,MAAM,CAAA;CAAE,CAAC;AAoE3C,wBAAgB,uBAAuB,CAAC,KAAK,EAAE,MAAM,GAAG,kBAAkB,CA4BzE;AAED,wBAAgB,wBAAwB,CAAC,MAAM,EAAE,kBAAkB,GAAG,MAAM,CAO3E;AAED,wBAAgB,iBAAiB,CAAC,UAAU,EAAE,gBAAgB,EAAE,GAAG,MAAM,CASxE;AAED,wBAAgB,uBAAuB,CAAC,MAAM,EAAE,iBAAiB,GAAG,MAAM,CAMzE","sourcesContent":["import type { SandboxContainer, SandboxRuntime, SandboxStartResult, SandboxStopResult } from \"./docker.ts\";\n\nexport interface SandboxStartUserCommand {\n\tsubcommand: \"start\";\n\timage?: string;\n\truntime?: SandboxRuntime;\n\tname?: string;\n\ttemplate?: string;\n}\n\nexport type SandboxUserCommand =\n\t| { subcommand: \"status\" }\n\t| { subcommand: \"clear\" }\n\t| { subcommand: \"attach\"; url: string }\n\t| SandboxStartUserCommand\n\t| { subcommand: \"list\"; runtime?: SandboxRuntime }\n\t| { subcommand: \"stop\"; target?: string };\n\nfunction splitCommandLine(input: string): string[] {\n\tconst tokens = input.match(/(?:[^\\s\"']+|\"[^\"]*\"|'[^']*')+/g) ?? [];\n\treturn tokens.map((token) => {\n\t\tif ((token.startsWith('\"') && token.endsWith('\"')) || (token.startsWith(\"'\") && token.endsWith(\"'\"))) {\n\t\t\treturn token.slice(1, -1);\n\t\t}\n\t\treturn token;\n\t});\n}\n\nfunction parseRuntime(value: string | undefined, usage: string): SandboxRuntime {\n\tif (value === \"docker\" || value === \"lima\") return value;\n\tthrow new Error(usage);\n}\n\nfunction parseSandboxStartCommand(tokens: string[]): SandboxUserCommand {\n\tlet image: string | undefined;\n\tlet runtime: SandboxRuntime | undefined;\n\tlet name: string | undefined;\n\tlet template: string | undefined;\n\tfor (let index = 2; index < tokens.length; index++) {\n\t\tconst option = tokens[index];\n\t\tconst value = tokens[++index];\n\t\tif (!value)\n\t\t\tthrow new Error(\n\t\t\t\t\"Usage: /sandbox start [--runtime docker|lima] [--image <image>] [--name <lima-instance>] [--template <lima-template>]\",\n\t\t\t);\n\t\tswitch (option) {\n\t\t\tcase \"--image\":\n\t\t\t\timage = value;\n\t\t\t\tbreak;\n\t\t\tcase \"--runtime\":\n\t\t\t\truntime = parseRuntime(value, \"Usage: /sandbox start --runtime docker|lima\");\n\t\t\t\tbreak;\n\t\t\tcase \"--name\":\n\t\t\t\tname = value;\n\t\t\t\tbreak;\n\t\t\tcase \"--template\":\n\t\t\t\ttemplate = value;\n\t\t\t\tbreak;\n\t\t\tdefault:\n\t\t\t\tthrow new Error(`Unsupported /sandbox start argument: ${option}`);\n\t\t}\n\t}\n\tif (name) runtime ??= \"lima\";\n\tif ((name || template) && runtime !== \"lima\") {\n\t\tthrow new Error(\"/sandbox start --name and --template require --runtime lima\");\n\t}\n\tif (image && runtime === \"lima\") throw new Error(\"/sandbox start --image is only supported by the Docker runtime\");\n\treturn {\n\t\tsubcommand: \"start\",\n\t\t...(image ? { image } : {}),\n\t\t...(runtime ? { runtime } : {}),\n\t\t...(name ? { name } : {}),\n\t\t...(template ? { template } : {}),\n\t};\n}\n\nfunction parseSandboxListCommand(tokens: string[]): SandboxUserCommand {\n\tif (tokens.length === 2) return { subcommand: \"list\" };\n\tif (tokens.length !== 4 || tokens[2] !== \"--runtime\") {\n\t\tthrow new Error(\"Usage: /sandbox list [--runtime docker|lima]\");\n\t}\n\treturn { subcommand: \"list\", runtime: parseRuntime(tokens[3], \"Usage: /sandbox list --runtime docker|lima\") };\n}\n\nexport function parseSandboxUserCommand(input: string): SandboxUserCommand {\n\tconst tokens = splitCommandLine(input.trim());\n\tif (tokens[0] !== \"/sandbox\") throw new Error(\"Sandbox command must start with /sandbox\");\n\n\tconst subcommand = tokens[1];\n\tswitch (subcommand) {\n\t\tcase undefined:\n\t\tcase \"status\":\n\t\t\tif (tokens.length > 2) throw new Error(\"Usage: /sandbox status\");\n\t\t\treturn { subcommand: \"status\" };\n\t\tcase \"clear\":\n\t\t\tif (tokens.length > 2) throw new Error(\"Usage: /sandbox clear\");\n\t\t\treturn { subcommand: \"clear\" };\n\t\tcase \"--attach\":\n\t\t\tif (tokens.length !== 3) throw new Error(\"Usage: /sandbox --attach <ws://url>\");\n\t\t\treturn { subcommand: \"attach\", url: tokens[2]! };\n\t\tcase \"start\":\n\t\t\treturn parseSandboxStartCommand(tokens);\n\t\tcase \"list\":\n\t\t\treturn parseSandboxListCommand(tokens);\n\t\tcase \"stop\":\n\t\t\tif (tokens.length > 3) throw new Error(\"Usage: /sandbox stop [container]\");\n\t\t\treturn tokens[2] ? { subcommand: \"stop\", target: tokens[2] } : { subcommand: \"stop\" };\n\t\tdefault:\n\t\t\tthrow new Error(\n\t\t\t\t`Unsupported /sandbox subcommand: ${subcommand}. Use status, clear, --attach, start, list, or stop.`,\n\t\t\t);\n\t}\n}\n\nexport function formatSandboxStartResult(result: SandboxStartResult): string {\n\treturn [\n\t\t`Sandbox started: ${result.containerName} (${result.containerId})`,\n\t\t`Workspace: ${result.workspaceRoot} -> ${result.workspaceMountPath}`,\n\t\t`Daemon: ${result.daemonUrlRedacted}`,\n\t\t\"Sandbox mode active: workspace tools/resources now route through the sandbox daemon.\",\n\t].join(\"\\n\");\n}\n\nexport function formatSandboxList(containers: SandboxContainer[]): string {\n\tif (containers.length === 0) return \"No Grip sandboxes found for this workspace.\";\n\treturn containers\n\t\t.map((container) => {\n\t\t\tconst endpoint = container.daemonEndpoint ? ` daemon=${container.daemonEndpoint}` : \"\";\n\t\t\tconst mount = container.workspaceMountPath ? ` workspace=${container.workspaceMountPath}` : \"\";\n\t\t\treturn `${container.id}\\t${container.name}\\t${container.state ?? container.status}\\t${container.image}${mount}${endpoint}`;\n\t\t})\n\t\t.join(\"\\n\");\n}\n\nexport function formatSandboxStopResult(result: SandboxStopResult): string {\n\tif (result.status === \"not-found\") return result.message;\n\tif (result.status === \"already-stopped\")\n\t\treturn `Sandbox already stopped: ${result.container.name} (${result.container.id})`;\n\tif (result.status === \"removed\") return `Sandbox removed: ${result.container.name} (${result.container.id})`;\n\treturn `Sandbox stopped: ${result.container.name} (${result.container.id})`;\n}\n"]}
+{"version":3,"file":"command.d.ts","sourceRoot":"","sources":["../../../src/core/sandbox/command.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,gBAAgB,EAAE,kBAAkB,EAAE,iBAAiB,EAAE,MAAM,aAAa,CAAC;AAE3F,MAAM,WAAW,uBAAuB;IACvC,UAAU,EAAE,OAAO,CAAC;IACpB,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,MAAM,CAAC,EAAE,OAAO,CAAC;CACjB;AAED,MAAM,MAAM,kBAAkB,GAC3B;IAAE,UAAU,EAAE,QAAQ,CAAA;CAAE,GACxB;IAAE,UAAU,EAAE,OAAO,CAAA;CAAE,GACvB;IAAE,UAAU,EAAE,QAAQ,CAAC;IAAC,GAAG,EAAE,MAAM,CAAA;CAAE,GACrC,uBAAuB,GACvB;IAAE,UAAU,EAAE,MAAM,CAAA;CAAE,GACtB;IAAE,UAAU,EAAE,MAAM,CAAC;IAAC,MAAM,CAAC,EAAE,MAAM,CAAA;CAAE,CAAC;AA+C3C,wBAAgB,uBAAuB,CAAC,KAAK,EAAE,MAAM,GAAG,kBAAkB,CA6BzE;AAED,wBAAgB,wBAAwB,CAAC,MAAM,EAAE,kBAAkB,GAAG,MAAM,CAO3E;AAED,wBAAgB,iBAAiB,CAAC,UAAU,EAAE,gBAAgB,EAAE,GAAG,MAAM,CASxE;AAED,wBAAgB,uBAAuB,CAAC,MAAM,EAAE,iBAAiB,GAAG,MAAM,CAMzE","sourcesContent":["import type { SandboxContainer, SandboxStartResult, SandboxStopResult } from \"./config.ts\";\n\nexport interface SandboxStartUserCommand {\n\tsubcommand: \"start\";\n\tname?: string;\n\ttemplate?: string;\n\tupdate?: boolean;\n}\n\nexport type SandboxUserCommand =\n\t| { subcommand: \"status\" }\n\t| { subcommand: \"clear\" }\n\t| { subcommand: \"attach\"; url: string }\n\t| SandboxStartUserCommand\n\t| { subcommand: \"list\" }\n\t| { subcommand: \"stop\"; target?: string };\n\nfunction splitCommandLine(input: string): string[] {\n\tconst tokens = input.match(/(?:[^\\s\"']+|\"[^\"]*\"|'[^']*')+/g) ?? [];\n\treturn tokens.map((token) => {\n\t\tif ((token.startsWith('\"') && token.endsWith('\"')) || (token.startsWith(\"'\") && token.endsWith(\"'\"))) {\n\t\t\treturn token.slice(1, -1);\n\t\t}\n\t\treturn token;\n\t});\n}\n\nfunction parseSandboxStartValue(\n\toption: string | undefined,\n\tvalue: string | undefined,\n): Pick<SandboxStartUserCommand, \"name\" | \"template\"> {\n\tif (option !== \"--name\" && option !== \"--template\") {\n\t\tthrow new Error(`Unsupported /sandbox start argument: ${option}`);\n\t}\n\tif (!value || value.startsWith(\"--\")) {\n\t\tthrow new Error(\"Usage: /sandbox start [--name <lima-instance>] [--template <lima-template>] [--update]\");\n\t}\n\treturn option === \"--name\" ? { name: value } : { template: value };\n}\n\nfunction parseSandboxStartCommand(tokens: string[]): SandboxUserCommand {\n\tconst fields: Pick<SandboxStartUserCommand, \"name\" | \"template\"> = {};\n\tlet update = false;\n\tfor (let index = 2; index < tokens.length; index++) {\n\t\tconst option = tokens[index];\n\t\tif (option === \"--update\") {\n\t\t\tif (update) throw new Error(\"Duplicate /sandbox start --update\");\n\t\t\tupdate = true;\n\t\t\tcontinue;\n\t\t}\n\t\tObject.assign(fields, parseSandboxStartValue(option, tokens[++index]));\n\t}\n\tif (update && (!fields.name || fields.template)) {\n\t\tthrow new Error(\"/sandbox start --update requires --name and cannot be combined with --template\");\n\t}\n\treturn {\n\t\tsubcommand: \"start\",\n\t\t...fields,\n\t\t...(update ? { update: true } : {}),\n\t};\n}\n\nexport function parseSandboxUserCommand(input: string): SandboxUserCommand {\n\tconst tokens = splitCommandLine(input.trim());\n\tif (tokens[0] !== \"/sandbox\") throw new Error(\"Sandbox command must start with /sandbox\");\n\n\tconst subcommand = tokens[1];\n\tswitch (subcommand) {\n\t\tcase undefined:\n\t\tcase \"status\":\n\t\t\tif (tokens.length > 2) throw new Error(\"Usage: /sandbox status\");\n\t\t\treturn { subcommand: \"status\" };\n\t\tcase \"clear\":\n\t\t\tif (tokens.length > 2) throw new Error(\"Usage: /sandbox clear\");\n\t\t\treturn { subcommand: \"clear\" };\n\t\tcase \"--attach\":\n\t\t\tif (tokens.length !== 3) throw new Error(\"Usage: /sandbox --attach <ws://url>\");\n\t\t\treturn { subcommand: \"attach\", url: tokens[2]! };\n\t\tcase \"start\":\n\t\t\treturn parseSandboxStartCommand(tokens);\n\t\tcase \"list\":\n\t\t\tif (tokens.length !== 2) throw new Error(\"Usage: /sandbox list\");\n\t\t\treturn { subcommand: \"list\" };\n\t\tcase \"stop\":\n\t\t\tif (tokens.length > 3) throw new Error(\"Usage: /sandbox stop [vm]\");\n\t\t\treturn tokens[2] ? { subcommand: \"stop\", target: tokens[2] } : { subcommand: \"stop\" };\n\t\tdefault:\n\t\t\tthrow new Error(\n\t\t\t\t`Unsupported /sandbox subcommand: ${subcommand}. Use status, clear, --attach, start, list, or stop.`,\n\t\t\t);\n\t}\n}\n\nexport function formatSandboxStartResult(result: SandboxStartResult): string {\n\treturn [\n\t\t`Sandbox started: ${result.containerName} (${result.containerId})`,\n\t\t`Workspace: ${result.workspaceRoot} -> ${result.workspaceMountPath}`,\n\t\t`Daemon: ${result.daemonUrlRedacted}`,\n\t\t\"Sandbox mode active: workspace tools/resources now route through the sandbox daemon.\",\n\t].join(\"\\n\");\n}\n\nexport function formatSandboxList(containers: SandboxContainer[]): string {\n\tif (containers.length === 0) return \"No Grip sandboxes found for this workspace.\";\n\treturn containers\n\t\t.map((container) => {\n\t\t\tconst endpoint = container.daemonEndpoint ? ` daemon=${container.daemonEndpoint}` : \"\";\n\t\t\tconst mount = container.workspaceMountPath ? ` workspace=${container.workspaceMountPath}` : \"\";\n\t\t\treturn `${container.id}\\t${container.name}\\t${container.state ?? container.status}\\t${container.image}${mount}${endpoint}`;\n\t\t})\n\t\t.join(\"\\n\");\n}\n\nexport function formatSandboxStopResult(result: SandboxStopResult): string {\n\tif (result.status === \"not-found\") return result.message;\n\tif (result.status === \"already-stopped\")\n\t\treturn `Sandbox already stopped: ${result.container.name} (${result.container.id})`;\n\tif (result.status === \"removed\") return `Sandbox removed: ${result.container.name} (${result.container.id})`;\n\treturn `Sandbox stopped: ${result.container.name} (${result.container.id})`;\n}\n"]}

package/dist/core/sandbox/command.js

@@ -7,61 +7,37 @@ function splitCommandLine(input) {
         return token;
     });
 }
-function parseRuntime(value, usage) {
-    if (value === "docker" || value === "lima")
-        return value;
-    throw new Error(usage);
+function parseSandboxStartValue(option, value) {
+    if (option !== "--name" && option !== "--template") {
+        throw new Error(`Unsupported /sandbox start argument: ${option}`);
+    }
+    if (!value || value.startsWith("--")) {
+        throw new Error("Usage: /sandbox start [--name <lima-instance>] [--template <lima-template>] [--update]");
+    }
+    return option === "--name" ? { name: value } : { template: value };
 }
 function parseSandboxStartCommand(tokens) {
-    let image;
-    let runtime;
-    let name;
-    let template;
+    const fields = {};
+    let update = false;
     for (let index = 2; index < tokens.length; index++) {
         const option = tokens[index];
-        const value = tokens[++index];
-        if (!value)
-            throw new Error("Usage: /sandbox start [--runtime docker|lima] [--image <image>] [--name <lima-instance>] [--template <lima-template>]");
-        switch (option) {
-            case "--image":
-                image = value;
-                break;
-            case "--runtime":
-                runtime = parseRuntime(value, "Usage: /sandbox start --runtime docker|lima");
-                break;
-            case "--name":
-                name = value;
-                break;
-            case "--template":
-                template = value;
-                break;
-            default:
-                throw new Error(`Unsupported /sandbox start argument: ${option}`);
+        if (option === "--update") {
+            if (update)
+                throw new Error("Duplicate /sandbox start --update");
+            update = true;
+            continue;
         }
+        Object.assign(fields, parseSandboxStartValue(option, tokens[++index]));
     }
-    if (name)
-        runtime ??= "lima";
-    if ((name || template) && runtime !== "lima") {
-        throw new Error("/sandbox start --name and --template require --runtime lima");
+    if (update && (!fields.name || fields.template)) {
+        throw new Error("/sandbox start --update requires --name and cannot be combined with --template");
     }
-    if (image && runtime === "lima")
-        throw new Error("/sandbox start --image is only supported by the Docker runtime");
     return {
         subcommand: "start",
-        ...(image ? { image } : {}),
-        ...(runtime ? { runtime } : {}),
-        ...(name ? { name } : {}),
-        ...(template ? { template } : {}),
+        ...fields,
+        ...(update ? { update: true } : {}),
     };
 }
-function parseSandboxListCommand(tokens) {
-    if (tokens.length === 2)
-        return { subcommand: "list" };
-    if (tokens.length !== 4 || tokens[2] !== "--runtime") {
-        throw new Error("Usage: /sandbox list [--runtime docker|lima]");
-    }
-    return { subcommand: "list", runtime: parseRuntime(tokens[3], "Usage: /sandbox list --runtime docker|lima") };
-}
 export function parseSandboxUserCommand(input) {
     const tokens = splitCommandLine(input.trim());
     if (tokens[0] !== "/sandbox")
@@ -84,10 +60,12 @@ export function parseSandboxUserCommand(input) {
         case "start":
             return parseSandboxStartCommand(tokens);
         case "list":
-            return parseSandboxListCommand(tokens);
+            if (tokens.length !== 2)
+                throw new Error("Usage: /sandbox list");
+            return { subcommand: "list" };
         case "stop":
             if (tokens.length > 3)
-                throw new Error("Usage: /sandbox stop [container]");
+                throw new Error("Usage: /sandbox stop [vm]");
             return tokens[2] ? { subcommand: "stop", target: tokens[2] } : { subcommand: "stop" };
         default:
             throw new Error(`Unsupported /sandbox subcommand: ${subcommand}. Use status, clear, --attach, start, list, or stop.`);

package/dist/core/sandbox/command.js.map

@@ -1 +1 @@
-{"version":3,"file":"command.js","sourceRoot":"","sources":["../../../src/core/sandbox/command.ts"],"names":[],"mappings":"AAkBA,SAAS,gBAAgB,CAAC,KAAa,EAAY;IAClD,MAAM,MAAM,GAAG,KAAK,CAAC,KAAK,CAAC,gCAAgC,CAAC,IAAI,EAAE,CAAC;IACnE,OAAO,MAAM,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC;QAC5B,IAAI,CAAC,KAAK,CAAC,UAAU,CAAC,GAAG,CAAC,IAAI,KAAK,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,UAAU,CAAC,GAAG,CAAC,IAAI,KAAK,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,EAAE,CAAC;YACtG,OAAO,KAAK,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC;QAC3B,CAAC;QACD,OAAO,KAAK,CAAC;IAAA,CACb,CAAC,CAAC;AAAA,CACH;AAED,SAAS,YAAY,CAAC,KAAyB,EAAE,KAAa,EAAkB;IAC/E,IAAI,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,MAAM;QAAE,OAAO,KAAK,CAAC;IACzD,MAAM,IAAI,KAAK,CAAC,KAAK,CAAC,CAAC;AAAA,CACvB;AAED,SAAS,wBAAwB,CAAC,MAAgB,EAAsB;IACvE,IAAI,KAAyB,CAAC;IAC9B,IAAI,OAAmC,CAAC;IACxC,IAAI,IAAwB,CAAC;IAC7B,IAAI,QAA4B,CAAC;IACjC,KAAK,IAAI,KAAK,GAAG,CAAC,EAAE,KAAK,GAAG,MAAM,CAAC,MAAM,EAAE,KAAK,EAAE,EAAE,CAAC;QACpD,MAAM,MAAM,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC;QAC7B,MAAM,KAAK,GAAG,MAAM,CAAC,EAAE,KAAK,CAAC,CAAC;QAC9B,IAAI,CAAC,KAAK;YACT,MAAM,IAAI,KAAK,CACd,uHAAuH,CACvH,CAAC;QACH,QAAQ,MAAM,EAAE,CAAC;YAChB,KAAK,SAAS;gBACb,KAAK,GAAG,KAAK,CAAC;gBACd,MAAM;YACP,KAAK,WAAW;gBACf,OAAO,GAAG,YAAY,CAAC,KAAK,EAAE,6CAA6C,CAAC,CAAC;gBAC7E,MAAM;YACP,KAAK,QAAQ;gBACZ,IAAI,GAAG,KAAK,CAAC;gBACb,MAAM;YACP,KAAK,YAAY;gBAChB,QAAQ,GAAG,KAAK,CAAC;gBACjB,MAAM;YACP;gBACC,MAAM,IAAI,KAAK,CAAC,wCAAwC,MAAM,EAAE,CAAC,CAAC;QACpE,CAAC;IACF,CAAC;IACD,IAAI,IAAI;QAAE,OAAO,KAAK,MAAM,CAAC;IAC7B,IAAI,CAAC,IAAI,IAAI,QAAQ,CAAC,IAAI,OAAO,KAAK,MAAM,EAAE,CAAC;QAC9C,MAAM,IAAI,KAAK,CAAC,6DAA6D,CAAC,CAAC;IAChF,CAAC;IACD,IAAI,KAAK,IAAI,OAAO,KAAK,MAAM;QAAE,MAAM,IAAI,KAAK,CAAC,gEAAgE,CAAC,CAAC;IACnH,OAAO;QACN,UAAU,EAAE,OAAO;QACnB,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAC3B,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAC/B,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACzB,GAAG,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KACjC,CAAC;AAAA,CACF;AAED,SAAS,uBAAuB,CAAC,MAAgB,EAAsB;IACtE,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,EAAE,UAAU,EAAE,MAAM,EAAE,CAAC;IACvD,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC,IAAI,MAAM,CAAC,CAAC,CAAC,KAAK,WAAW,EAAE,CAAC;QACtD,MAAM,IAAI,KAAK,CAAC,8CAA8C,CAAC,CAAC;IACjE,CAAC;IACD,OAAO,EAAE,UAAU,EAAE,MAAM,EAAE,OAAO,EAAE,YAAY,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,4CAA4C,CAAC,EAAE,CAAC;AAAA,CAC9G;AAED,MAAM,UAAU,uBAAuB,CAAC,KAAa,EAAsB;IAC1E,MAAM,MAAM,GAAG,gBAAgB,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC,CAAC;IAC9C,IAAI,MAAM,CAAC,CAAC,CAAC,KAAK,UAAU;QAAE,MAAM,IAAI,KAAK,CAAC,0CAA0C,CAAC,CAAC;IAE1F,MAAM,UAAU,GAAG,MAAM,CAAC,CAAC,CAAC,CAAC;IAC7B,QAAQ,UAAU,EAAE,CAAC;QACpB,KAAK,SAAS,CAAC;QACf,KAAK,QAAQ;YACZ,IAAI,MAAM,CAAC,MAAM,GAAG,CAAC;gBAAE,MAAM,IAAI,KAAK,CAAC,wBAAwB,CAAC,CAAC;YACjE,OAAO,EAAE,UAAU,EAAE,QAAQ,EAAE,CAAC;QACjC,KAAK,OAAO;YACX,IAAI,MAAM,CAAC,MAAM,GAAG,CAAC;gBAAE,MAAM,IAAI,KAAK,CAAC,uBAAuB,CAAC,CAAC;YAChE,OAAO,EAAE,UAAU,EAAE,OAAO,EAAE,CAAC;QAChC,KAAK,UAAU;YACd,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC;gBAAE,MAAM,IAAI,KAAK,CAAC,qCAAqC,CAAC,CAAC;YAChF,OAAO,EAAE,UAAU,EAAE,QAAQ,EAAE,GAAG,EAAE,MAAM,CAAC,CAAC,CAAE,EAAE,CAAC;QAClD,KAAK,OAAO;YACX,OAAO,wBAAwB,CAAC,MAAM,CAAC,CAAC;QACzC,KAAK,MAAM;YACV,OAAO,uBAAuB,CAAC,MAAM,CAAC,CAAC;QACxC,KAAK,MAAM;YACV,IAAI,MAAM,CAAC,MAAM,GAAG,CAAC;gBAAE,MAAM,IAAI,KAAK,CAAC,kCAAkC,CAAC,CAAC;YAC3E,OAAO,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,UAAU,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,UAAU,EAAE,MAAM,EAAE,CAAC;QACvF;YACC,MAAM,IAAI,KAAK,CACd,oCAAoC,UAAU,sDAAsD,CACpG,CAAC;IACJ,CAAC;AAAA,CACD;AAED,MAAM,UAAU,wBAAwB,CAAC,MAA0B,EAAU;IAC5E,OAAO;QACN,oBAAoB,MAAM,CAAC,aAAa,KAAK,MAAM,CAAC,WAAW,GAAG;QAClE,cAAc,MAAM,CAAC,aAAa,OAAO,MAAM,CAAC,kBAAkB,EAAE;QACpE,WAAW,MAAM,CAAC,iBAAiB,EAAE;QACrC,sFAAsF;KACtF,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AAAA,CACb;AAED,MAAM,UAAU,iBAAiB,CAAC,UAA8B,EAAU;IACzE,IAAI,UAAU,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,6CAA6C,CAAC;IAClF,OAAO,UAAU;SACf,GAAG,CAAC,CAAC,SAAS,EAAE,EAAE,CAAC;QACnB,MAAM,QAAQ,GAAG,SAAS,CAAC,cAAc,CAAC,CAAC,CAAC,WAAW,SAAS,CAAC,cAAc,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACvF,MAAM,KAAK,GAAG,SAAS,CAAC,kBAAkB,CAAC,CAAC,CAAC,cAAc,SAAS,CAAC,kBAAkB,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAC/F,OAAO,GAAG,SAAS,CAAC,EAAE,KAAK,SAAS,CAAC,IAAI,KAAK,SAAS,CAAC,KAAK,IAAI,SAAS,CAAC,MAAM,KAAK,SAAS,CAAC,KAAK,GAAG,KAAK,GAAG,QAAQ,EAAE,CAAC;IAAA,CAC3H,CAAC;SACD,IAAI,CAAC,IAAI,CAAC,CAAC;AAAA,CACb;AAED,MAAM,UAAU,uBAAuB,CAAC,MAAyB,EAAU;IAC1E,IAAI,MAAM,CAAC,MAAM,KAAK,WAAW;QAAE,OAAO,MAAM,CAAC,OAAO,CAAC;IACzD,IAAI,MAAM,CAAC,MAAM,KAAK,iBAAiB;QACtC,OAAO,4BAA4B,MAAM,CAAC,SAAS,CAAC,IAAI,KAAK,MAAM,CAAC,SAAS,CAAC,EAAE,GAAG,CAAC;IACrF,IAAI,MAAM,CAAC,MAAM,KAAK,SAAS;QAAE,OAAO,oBAAoB,MAAM,CAAC,SAAS,CAAC,IAAI,KAAK,MAAM,CAAC,SAAS,CAAC,EAAE,GAAG,CAAC;IAC7G,OAAO,oBAAoB,MAAM,CAAC,SAAS,CAAC,IAAI,KAAK,MAAM,CAAC,SAAS,CAAC,EAAE,GAAG,CAAC;AAAA,CAC5E","sourcesContent":["import type { SandboxContainer, SandboxRuntime, SandboxStartResult, SandboxStopResult } from \"./docker.ts\";\n\nexport interface SandboxStartUserCommand {\n\tsubcommand: \"start\";\n\timage?: string;\n\truntime?: SandboxRuntime;\n\tname?: string;\n\ttemplate?: string;\n}\n\nexport type SandboxUserCommand =\n\t| { subcommand: \"status\" }\n\t| { subcommand: \"clear\" }\n\t| { subcommand: \"attach\"; url: string }\n\t| SandboxStartUserCommand\n\t| { subcommand: \"list\"; runtime?: SandboxRuntime }\n\t| { subcommand: \"stop\"; target?: string };\n\nfunction splitCommandLine(input: string): string[] {\n\tconst tokens = input.match(/(?:[^\\s\"']+|\"[^\"]*\"|'[^']*')+/g) ?? [];\n\treturn tokens.map((token) => {\n\t\tif ((token.startsWith('\"') && token.endsWith('\"')) || (token.startsWith(\"'\") && token.endsWith(\"'\"))) {\n\t\t\treturn token.slice(1, -1);\n\t\t}\n\t\treturn token;\n\t});\n}\n\nfunction parseRuntime(value: string | undefined, usage: string): SandboxRuntime {\n\tif (value === \"docker\" || value === \"lima\") return value;\n\tthrow new Error(usage);\n}\n\nfunction parseSandboxStartCommand(tokens: string[]): SandboxUserCommand {\n\tlet image: string | undefined;\n\tlet runtime: SandboxRuntime | undefined;\n\tlet name: string | undefined;\n\tlet template: string | undefined;\n\tfor (let index = 2; index < tokens.length; index++) {\n\t\tconst option = tokens[index];\n\t\tconst value = tokens[++index];\n\t\tif (!value)\n\t\t\tthrow new Error(\n\t\t\t\t\"Usage: /sandbox start [--runtime docker|lima] [--image <image>] [--name <lima-instance>] [--template <lima-template>]\",\n\t\t\t);\n\t\tswitch (option) {\n\t\t\tcase \"--image\":\n\t\t\t\timage = value;\n\t\t\t\tbreak;\n\t\t\tcase \"--runtime\":\n\t\t\t\truntime = parseRuntime(value, \"Usage: /sandbox start --runtime docker|lima\");\n\t\t\t\tbreak;\n\t\t\tcase \"--name\":\n\t\t\t\tname = value;\n\t\t\t\tbreak;\n\t\t\tcase \"--template\":\n\t\t\t\ttemplate = value;\n\t\t\t\tbreak;\n\t\t\tdefault:\n\t\t\t\tthrow new Error(`Unsupported /sandbox start argument: ${option}`);\n\t\t}\n\t}\n\tif (name) runtime ??= \"lima\";\n\tif ((name || template) && runtime !== \"lima\") {\n\t\tthrow new Error(\"/sandbox start --name and --template require --runtime lima\");\n\t}\n\tif (image && runtime === \"lima\") throw new Error(\"/sandbox start --image is only supported by the Docker runtime\");\n\treturn {\n\t\tsubcommand: \"start\",\n\t\t...(image ? { image } : {}),\n\t\t...(runtime ? { runtime } : {}),\n\t\t...(name ? { name } : {}),\n\t\t...(template ? { template } : {}),\n\t};\n}\n\nfunction parseSandboxListCommand(tokens: string[]): SandboxUserCommand {\n\tif (tokens.length === 2) return { subcommand: \"list\" };\n\tif (tokens.length !== 4 || tokens[2] !== \"--runtime\") {\n\t\tthrow new Error(\"Usage: /sandbox list [--runtime docker|lima]\");\n\t}\n\treturn { subcommand: \"list\", runtime: parseRuntime(tokens[3], \"Usage: /sandbox list --runtime docker|lima\") };\n}\n\nexport function parseSandboxUserCommand(input: string): SandboxUserCommand {\n\tconst tokens = splitCommandLine(input.trim());\n\tif (tokens[0] !== \"/sandbox\") throw new Error(\"Sandbox command must start with /sandbox\");\n\n\tconst subcommand = tokens[1];\n\tswitch (subcommand) {\n\t\tcase undefined:\n\t\tcase \"status\":\n\t\t\tif (tokens.length > 2) throw new Error(\"Usage: /sandbox status\");\n\t\t\treturn { subcommand: \"status\" };\n\t\tcase \"clear\":\n\t\t\tif (tokens.length > 2) throw new Error(\"Usage: /sandbox clear\");\n\t\t\treturn { subcommand: \"clear\" };\n\t\tcase \"--attach\":\n\t\t\tif (tokens.length !== 3) throw new Error(\"Usage: /sandbox --attach <ws://url>\");\n\t\t\treturn { subcommand: \"attach\", url: tokens[2]! };\n\t\tcase \"start\":\n\t\t\treturn parseSandboxStartCommand(tokens);\n\t\tcase \"list\":\n\t\t\treturn parseSandboxListCommand(tokens);\n\t\tcase \"stop\":\n\t\t\tif (tokens.length > 3) throw new Error(\"Usage: /sandbox stop [container]\");\n\t\t\treturn tokens[2] ? { subcommand: \"stop\", target: tokens[2] } : { subcommand: \"stop\" };\n\t\tdefault:\n\t\t\tthrow new Error(\n\t\t\t\t`Unsupported /sandbox subcommand: ${subcommand}. Use status, clear, --attach, start, list, or stop.`,\n\t\t\t);\n\t}\n}\n\nexport function formatSandboxStartResult(result: SandboxStartResult): string {\n\treturn [\n\t\t`Sandbox started: ${result.containerName} (${result.containerId})`,\n\t\t`Workspace: ${result.workspaceRoot} -> ${result.workspaceMountPath}`,\n\t\t`Daemon: ${result.daemonUrlRedacted}`,\n\t\t\"Sandbox mode active: workspace tools/resources now route through the sandbox daemon.\",\n\t].join(\"\\n\");\n}\n\nexport function formatSandboxList(containers: SandboxContainer[]): string {\n\tif (containers.length === 0) return \"No Grip sandboxes found for this workspace.\";\n\treturn containers\n\t\t.map((container) => {\n\t\t\tconst endpoint = container.daemonEndpoint ? ` daemon=${container.daemonEndpoint}` : \"\";\n\t\t\tconst mount = container.workspaceMountPath ? ` workspace=${container.workspaceMountPath}` : \"\";\n\t\t\treturn `${container.id}\\t${container.name}\\t${container.state ?? container.status}\\t${container.image}${mount}${endpoint}`;\n\t\t})\n\t\t.join(\"\\n\");\n}\n\nexport function formatSandboxStopResult(result: SandboxStopResult): string {\n\tif (result.status === \"not-found\") return result.message;\n\tif (result.status === \"already-stopped\")\n\t\treturn `Sandbox already stopped: ${result.container.name} (${result.container.id})`;\n\tif (result.status === \"removed\") return `Sandbox removed: ${result.container.name} (${result.container.id})`;\n\treturn `Sandbox stopped: ${result.container.name} (${result.container.id})`;\n}\n"]}
+{"version":3,"file":"command.js","sourceRoot":"","sources":["../../../src/core/sandbox/command.ts"],"names":[],"mappings":"AAiBA,SAAS,gBAAgB,CAAC,KAAa,EAAY;IAClD,MAAM,MAAM,GAAG,KAAK,CAAC,KAAK,CAAC,gCAAgC,CAAC,IAAI,EAAE,CAAC;IACnE,OAAO,MAAM,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC;QAC5B,IAAI,CAAC,KAAK,CAAC,UAAU,CAAC,GAAG,CAAC,IAAI,KAAK,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,UAAU,CAAC,GAAG,CAAC,IAAI,KAAK,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,EAAE,CAAC;YACtG,OAAO,KAAK,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC;QAC3B,CAAC;QACD,OAAO,KAAK,CAAC;IAAA,CACb,CAAC,CAAC;AAAA,CACH;AAED,SAAS,sBAAsB,CAC9B,MAA0B,EAC1B,KAAyB,EAC4B;IACrD,IAAI,MAAM,KAAK,QAAQ,IAAI,MAAM,KAAK,YAAY,EAAE,CAAC;QACpD,MAAM,IAAI,KAAK,CAAC,wCAAwC,MAAM,EAAE,CAAC,CAAC;IACnE,CAAC;IACD,IAAI,CAAC,KAAK,IAAI,KAAK,CAAC,UAAU,CAAC,IAAI,CAAC,EAAE,CAAC;QACtC,MAAM,IAAI,KAAK,CAAC,wFAAwF,CAAC,CAAC;IAC3G,CAAC;IACD,OAAO,MAAM,KAAK,QAAQ,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,KAAK,EAAE,CAAC;AAAA,CACnE;AAED,SAAS,wBAAwB,CAAC,MAAgB,EAAsB;IACvE,MAAM,MAAM,GAAuD,EAAE,CAAC;IACtE,IAAI,MAAM,GAAG,KAAK,CAAC;IACnB,KAAK,IAAI,KAAK,GAAG,CAAC,EAAE,KAAK,GAAG,MAAM,CAAC,MAAM,EAAE,KAAK,EAAE,EAAE,CAAC;QACpD,MAAM,MAAM,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC;QAC7B,IAAI,MAAM,KAAK,UAAU,EAAE,CAAC;YAC3B,IAAI,MAAM;gBAAE,MAAM,IAAI,KAAK,CAAC,mCAAmC,CAAC,CAAC;YACjE,MAAM,GAAG,IAAI,CAAC;YACd,SAAS;QACV,CAAC;QACD,MAAM,CAAC,MAAM,CAAC,MAAM,EAAE,sBAAsB,CAAC,MAAM,EAAE,MAAM,CAAC,EAAE,KAAK,CAAC,CAAC,CAAC,CAAC;IACxE,CAAC;IACD,IAAI,MAAM,IAAI,CAAC,CAAC,MAAM,CAAC,IAAI,IAAI,MAAM,CAAC,QAAQ,CAAC,EAAE,CAAC;QACjD,MAAM,IAAI,KAAK,CAAC,gFAAgF,CAAC,CAAC;IACnG,CAAC;IACD,OAAO;QACN,UAAU,EAAE,OAAO;QACnB,GAAG,MAAM;QACT,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KACnC,CAAC;AAAA,CACF;AAED,MAAM,UAAU,uBAAuB,CAAC,KAAa,EAAsB;IAC1E,MAAM,MAAM,GAAG,gBAAgB,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC,CAAC;IAC9C,IAAI,MAAM,CAAC,CAAC,CAAC,KAAK,UAAU;QAAE,MAAM,IAAI,KAAK,CAAC,0CAA0C,CAAC,CAAC;IAE1F,MAAM,UAAU,GAAG,MAAM,CAAC,CAAC,CAAC,CAAC;IAC7B,QAAQ,UAAU,EAAE,CAAC;QACpB,KAAK,SAAS,CAAC;QACf,KAAK,QAAQ;YACZ,IAAI,MAAM,CAAC,MAAM,GAAG,CAAC;gBAAE,MAAM,IAAI,KAAK,CAAC,wBAAwB,CAAC,CAAC;YACjE,OAAO,EAAE,UAAU,EAAE,QAAQ,EAAE,CAAC;QACjC,KAAK,OAAO;YACX,IAAI,MAAM,CAAC,MAAM,GAAG,CAAC;gBAAE,MAAM,IAAI,KAAK,CAAC,uBAAuB,CAAC,CAAC;YAChE,OAAO,EAAE,UAAU,EAAE,OAAO,EAAE,CAAC;QAChC,KAAK,UAAU;YACd,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC;gBAAE,MAAM,IAAI,KAAK,CAAC,qCAAqC,CAAC,CAAC;YAChF,OAAO,EAAE,UAAU,EAAE,QAAQ,EAAE,GAAG,EAAE,MAAM,CAAC,CAAC,CAAE,EAAE,CAAC;QAClD,KAAK,OAAO;YACX,OAAO,wBAAwB,CAAC,MAAM,CAAC,CAAC;QACzC,KAAK,MAAM;YACV,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC;gBAAE,MAAM,IAAI,KAAK,CAAC,sBAAsB,CAAC,CAAC;YACjE,OAAO,EAAE,UAAU,EAAE,MAAM,EAAE,CAAC;QAC/B,KAAK,MAAM;YACV,IAAI,MAAM,CAAC,MAAM,GAAG,CAAC;gBAAE,MAAM,IAAI,KAAK,CAAC,2BAA2B,CAAC,CAAC;YACpE,OAAO,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,UAAU,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,UAAU,EAAE,MAAM,EAAE,CAAC;QACvF;YACC,MAAM,IAAI,KAAK,CACd,oCAAoC,UAAU,sDAAsD,CACpG,CAAC;IACJ,CAAC;AAAA,CACD;AAED,MAAM,UAAU,wBAAwB,CAAC,MAA0B,EAAU;IAC5E,OAAO;QACN,oBAAoB,MAAM,CAAC,aAAa,KAAK,MAAM,CAAC,WAAW,GAAG;QAClE,cAAc,MAAM,CAAC,aAAa,OAAO,MAAM,CAAC,kBAAkB,EAAE;QACpE,WAAW,MAAM,CAAC,iBAAiB,EAAE;QACrC,sFAAsF;KACtF,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AAAA,CACb;AAED,MAAM,UAAU,iBAAiB,CAAC,UAA8B,EAAU;IACzE,IAAI,UAAU,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,6CAA6C,CAAC;IAClF,OAAO,UAAU;SACf,GAAG,CAAC,CAAC,SAAS,EAAE,EAAE,CAAC;QACnB,MAAM,QAAQ,GAAG,SAAS,CAAC,cAAc,CAAC,CAAC,CAAC,WAAW,SAAS,CAAC,cAAc,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACvF,MAAM,KAAK,GAAG,SAAS,CAAC,kBAAkB,CAAC,CAAC,CAAC,cAAc,SAAS,CAAC,kBAAkB,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAC/F,OAAO,GAAG,SAAS,CAAC,EAAE,KAAK,SAAS,CAAC,IAAI,KAAK,SAAS,CAAC,KAAK,IAAI,SAAS,CAAC,MAAM,KAAK,SAAS,CAAC,KAAK,GAAG,KAAK,GAAG,QAAQ,EAAE,CAAC;IAAA,CAC3H,CAAC;SACD,IAAI,CAAC,IAAI,CAAC,CAAC;AAAA,CACb;AAED,MAAM,UAAU,uBAAuB,CAAC,MAAyB,EAAU;IAC1E,IAAI,MAAM,CAAC,MAAM,KAAK,WAAW;QAAE,OAAO,MAAM,CAAC,OAAO,CAAC;IACzD,IAAI,MAAM,CAAC,MAAM,KAAK,iBAAiB;QACtC,OAAO,4BAA4B,MAAM,CAAC,SAAS,CAAC,IAAI,KAAK,MAAM,CAAC,SAAS,CAAC,EAAE,GAAG,CAAC;IACrF,IAAI,MAAM,CAAC,MAAM,KAAK,SAAS;QAAE,OAAO,oBAAoB,MAAM,CAAC,SAAS,CAAC,IAAI,KAAK,MAAM,CAAC,SAAS,CAAC,EAAE,GAAG,CAAC;IAC7G,OAAO,oBAAoB,MAAM,CAAC,SAAS,CAAC,IAAI,KAAK,MAAM,CAAC,SAAS,CAAC,EAAE,GAAG,CAAC;AAAA,CAC5E","sourcesContent":["import type { SandboxContainer, SandboxStartResult, SandboxStopResult } from \"./config.ts\";\n\nexport interface SandboxStartUserCommand {\n\tsubcommand: \"start\";\n\tname?: string;\n\ttemplate?: string;\n\tupdate?: boolean;\n}\n\nexport type SandboxUserCommand =\n\t| { subcommand: \"status\" }\n\t| { subcommand: \"clear\" }\n\t| { subcommand: \"attach\"; url: string }\n\t| SandboxStartUserCommand\n\t| { subcommand: \"list\" }\n\t| { subcommand: \"stop\"; target?: string };\n\nfunction splitCommandLine(input: string): string[] {\n\tconst tokens = input.match(/(?:[^\\s\"']+|\"[^\"]*\"|'[^']*')+/g) ?? [];\n\treturn tokens.map((token) => {\n\t\tif ((token.startsWith('\"') && token.endsWith('\"')) || (token.startsWith(\"'\") && token.endsWith(\"'\"))) {\n\t\t\treturn token.slice(1, -1);\n\t\t}\n\t\treturn token;\n\t});\n}\n\nfunction parseSandboxStartValue(\n\toption: string | undefined,\n\tvalue: string | undefined,\n): Pick<SandboxStartUserCommand, \"name\" | \"template\"> {\n\tif (option !== \"--name\" && option !== \"--template\") {\n\t\tthrow new Error(`Unsupported /sandbox start argument: ${option}`);\n\t}\n\tif (!value || value.startsWith(\"--\")) {\n\t\tthrow new Error(\"Usage: /sandbox start [--name <lima-instance>] [--template <lima-template>] [--update]\");\n\t}\n\treturn option === \"--name\" ? { name: value } : { template: value };\n}\n\nfunction parseSandboxStartCommand(tokens: string[]): SandboxUserCommand {\n\tconst fields: Pick<SandboxStartUserCommand, \"name\" | \"template\"> = {};\n\tlet update = false;\n\tfor (let index = 2; index < tokens.length; index++) {\n\t\tconst option = tokens[index];\n\t\tif (option === \"--update\") {\n\t\t\tif (update) throw new Error(\"Duplicate /sandbox start --update\");\n\t\t\tupdate = true;\n\t\t\tcontinue;\n\t\t}\n\t\tObject.assign(fields, parseSandboxStartValue(option, tokens[++index]));\n\t}\n\tif (update && (!fields.name || fields.template)) {\n\t\tthrow new Error(\"/sandbox start --update requires --name and cannot be combined with --template\");\n\t}\n\treturn {\n\t\tsubcommand: \"start\",\n\t\t...fields,\n\t\t...(update ? { update: true } : {}),\n\t};\n}\n\nexport function parseSandboxUserCommand(input: string): SandboxUserCommand {\n\tconst tokens = splitCommandLine(input.trim());\n\tif (tokens[0] !== \"/sandbox\") throw new Error(\"Sandbox command must start with /sandbox\");\n\n\tconst subcommand = tokens[1];\n\tswitch (subcommand) {\n\t\tcase undefined:\n\t\tcase \"status\":\n\t\t\tif (tokens.length > 2) throw new Error(\"Usage: /sandbox status\");\n\t\t\treturn { subcommand: \"status\" };\n\t\tcase \"clear\":\n\t\t\tif (tokens.length > 2) throw new Error(\"Usage: /sandbox clear\");\n\t\t\treturn { subcommand: \"clear\" };\n\t\tcase \"--attach\":\n\t\t\tif (tokens.length !== 3) throw new Error(\"Usage: /sandbox --attach <ws://url>\");\n\t\t\treturn { subcommand: \"attach\", url: tokens[2]! };\n\t\tcase \"start\":\n\t\t\treturn parseSandboxStartCommand(tokens);\n\t\tcase \"list\":\n\t\t\tif (tokens.length !== 2) throw new Error(\"Usage: /sandbox list\");\n\t\t\treturn { subcommand: \"list\" };\n\t\tcase \"stop\":\n\t\t\tif (tokens.length > 3) throw new Error(\"Usage: /sandbox stop [vm]\");\n\t\t\treturn tokens[2] ? { subcommand: \"stop\", target: tokens[2] } : { subcommand: \"stop\" };\n\t\tdefault:\n\t\t\tthrow new Error(\n\t\t\t\t`Unsupported /sandbox subcommand: ${subcommand}. Use status, clear, --attach, start, list, or stop.`,\n\t\t\t);\n\t}\n}\n\nexport function formatSandboxStartResult(result: SandboxStartResult): string {\n\treturn [\n\t\t`Sandbox started: ${result.containerName} (${result.containerId})`,\n\t\t`Workspace: ${result.workspaceRoot} -> ${result.workspaceMountPath}`,\n\t\t`Daemon: ${result.daemonUrlRedacted}`,\n\t\t\"Sandbox mode active: workspace tools/resources now route through the sandbox daemon.\",\n\t].join(\"\\n\");\n}\n\nexport function formatSandboxList(containers: SandboxContainer[]): string {\n\tif (containers.length === 0) return \"No Grip sandboxes found for this workspace.\";\n\treturn containers\n\t\t.map((container) => {\n\t\t\tconst endpoint = container.daemonEndpoint ? ` daemon=${container.daemonEndpoint}` : \"\";\n\t\t\tconst mount = container.workspaceMountPath ? ` workspace=${container.workspaceMountPath}` : \"\";\n\t\t\treturn `${container.id}\\t${container.name}\\t${container.state ?? container.status}\\t${container.image}${mount}${endpoint}`;\n\t\t})\n\t\t.join(\"\\n\");\n}\n\nexport function formatSandboxStopResult(result: SandboxStopResult): string {\n\tif (result.status === \"not-found\") return result.message;\n\tif (result.status === \"already-stopped\")\n\t\treturn `Sandbox already stopped: ${result.container.name} (${result.container.id})`;\n\tif (result.status === \"removed\") return `Sandbox removed: ${result.container.name} (${result.container.id})`;\n\treturn `Sandbox stopped: ${result.container.name} (${result.container.id})`;\n}\n"]}

package/dist/core/sandbox/config.d.ts

@@ -0,0 +1,91 @@
+import type { SandboxSettings } from "../settings-manager.ts";
+export declare const DEFAULT_SANDBOX_WORKSPACE_MOUNT = "/workspace";
+export declare const DEFAULT_SANDBOX_DAEMON_PORT = 8787;
+export declare const DEFAULT_SANDBOX_LIMA_BINARY = "limactl";
+export declare const DEFAULT_SANDBOX_LIMA_TEMPLATE = "template:docker-rootful";
+export declare const SANDBOX_LABEL_PREFIX = "ai.greppleai.grip";
+export type SandboxCleanupBehavior = "stop" | "remove";
+export type SandboxConfig = Required<SandboxSettings>;
+export type SandboxConfigOverrides = SandboxSettings;
+export interface SandboxEnvironment {
+    GRIP_SANDBOX_LIMA?: string;
+    GRIP_SANDBOX_GUEST_BINARY?: string;
+    GRIP_SANDBOX_LIMA_TEMPLATE?: string;
+    GRIP_SANDBOX_LIMA_INSTANCE_PREFIX?: string;
+    GRIP_SANDBOX_WORKSPACE_MOUNT?: string;
+    GRIP_SANDBOX_DAEMON_PORT?: string;
+    GRIP_SANDBOX_DAEMON_HOST_BIND?: string;
+    GRIP_SANDBOX_CLEANUP?: string;
+}
+export interface SandboxStartOptions extends SandboxConfigOverrides {
+    workspaceRoot: string;
+    sessionId?: string;
+    name?: string;
+    update?: boolean;
+}
+export interface SandboxListOptions {
+    workspaceRoot: string;
+    allWorkspaces?: boolean;
+}
+export interface SandboxStopOptions {
+    workspaceRoot: string;
+    target?: string;
+    currentContainerId?: string;
+}
+export interface SandboxContainer {
+    id: string;
+    name: string;
+    image: string;
+    status: string;
+    state: string | undefined;
+    createdAt: string | undefined;
+    workspaceRoot: string | undefined;
+    workspaceMountPath: string | undefined;
+    daemonPort: number | undefined;
+    daemonEndpoint: string | undefined;
+    labels: Record<string, string>;
+}
+export interface SandboxStartResult {
+    containerId: string;
+    containerName: string;
+    workspaceRoot: string;
+    workspaceMountPath: string;
+    daemonUrl: string;
+    daemonUrlRedacted: string;
+    token: string;
+    labels: Record<string, string>;
+}
+export type SandboxStopResult = {
+    status: "stopped";
+    container: SandboxContainer;
+} | {
+    status: "removed";
+    container: SandboxContainer;
+} | {
+    status: "already-stopped";
+    container: SandboxContainer;
+} | {
+    status: "not-found";
+    message: string;
+};
+export interface SandboxService {
+    resolveConfig(overrides?: SandboxConfigOverrides): SandboxConfig;
+    start(options: SandboxStartOptions): Promise<SandboxStartResult>;
+    list(options: SandboxListOptions): Promise<SandboxContainer[]>;
+    stop(options: SandboxStopOptions): Promise<SandboxStopResult>;
+}
+export interface SandboxCommandResult {
+    exitCode: number | null;
+    stdout: string;
+    stderr: string;
+}
+export interface SandboxCommandOptions {
+    env?: Record<string, string>;
+}
+export interface SandboxRunner {
+    run(command: string, args: string[], options?: SandboxCommandOptions): Promise<SandboxCommandResult>;
+}
+export declare function redactSecrets(value: string): string;
+export declare function resolveSandboxConfig(settings: SandboxSettings | undefined, env?: SandboxEnvironment, overrides?: SandboxConfigOverrides): SandboxConfig;
+export declare function allocateSandboxDaemonPort(host: string, preferredPort: number): Promise<number>;
+//# sourceMappingURL=config.d.ts.map

package/dist/core/sandbox/config.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"config.d.ts","sourceRoot":"","sources":["../../../src/core/sandbox/config.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,wBAAwB,CAAC;AAE9D,eAAO,MAAM,+BAA+B,eAAe,CAAC;AAC5D,eAAO,MAAM,2BAA2B,OAAO,CAAC;AAChD,eAAO,MAAM,2BAA2B,YAAY,CAAC;AACrD,eAAO,MAAM,6BAA6B,4BAA4B,CAAC;AACvE,eAAO,MAAM,oBAAoB,sBAAsB,CAAC;AAExD,MAAM,MAAM,sBAAsB,GAAG,MAAM,GAAG,QAAQ,CAAC;AAEvD,MAAM,MAAM,aAAa,GAAG,QAAQ,CAAC,eAAe,CAAC,CAAC;AAEtD,MAAM,MAAM,sBAAsB,GAAG,eAAe,CAAC;AAErD,MAAM,WAAW,kBAAkB;IAClC,iBAAiB,CAAC,EAAE,MAAM,CAAC;IAC3B,yBAAyB,CAAC,EAAE,MAAM,CAAC;IACnC,0BAA0B,CAAC,EAAE,MAAM,CAAC;IACpC,iCAAiC,CAAC,EAAE,MAAM,CAAC;IAC3C,4BAA4B,CAAC,EAAE,MAAM,CAAC;IACtC,wBAAwB,CAAC,EAAE,MAAM,CAAC;IAClC,6BAA6B,CAAC,EAAE,MAAM,CAAC;IACvC,oBAAoB,CAAC,EAAE,MAAM,CAAC;CAC9B;AAED,MAAM,WAAW,mBAAoB,SAAQ,sBAAsB;IAClE,aAAa,EAAE,MAAM,CAAC;IACtB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,MAAM,CAAC,EAAE,OAAO,CAAC;CACjB;AAED,MAAM,WAAW,kBAAkB;IAClC,aAAa,EAAE,MAAM,CAAC;IACtB,aAAa,CAAC,EAAE,OAAO,CAAC;CACxB;AAED,MAAM,WAAW,kBAAkB;IAClC,aAAa,EAAE,MAAM,CAAC;IACtB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,kBAAkB,CAAC,EAAE,MAAM,CAAC;CAC5B;AAED,MAAM,WAAW,gBAAgB;IAChC,EAAE,EAAE,MAAM,CAAC;IACX,IAAI,EAAE,MAAM,CAAC;IACb,KAAK,EAAE,MAAM,CAAC;IACd,MAAM,EAAE,MAAM,CAAC;IACf,KAAK,EAAE,MAAM,GAAG,SAAS,CAAC;IAC1B,SAAS,EAAE,MAAM,GAAG,SAAS,CAAC;IAC9B,aAAa,EAAE,MAAM,GAAG,SAAS,CAAC;IAClC,kBAAkB,EAAE,MAAM,GAAG,SAAS,CAAC;IACvC,UAAU,EAAE,MAAM,GAAG,SAAS,CAAC;IAC/B,cAAc,EAAE,MAAM,GAAG,SAAS,CAAC;IACnC,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;CAC/B;AAED,MAAM,WAAW,kBAAkB;IAClC,WAAW,EAAE,MAAM,CAAC;IACpB,aAAa,EAAE,MAAM,CAAC;IACtB,aAAa,EAAE,MAAM,CAAC;IACtB,kBAAkB,EAAE,MAAM,CAAC;IAC3B,SAAS,EAAE,MAAM,CAAC;IAClB,iBAAiB,EAAE,MAAM,CAAC;IAC1B,KAAK,EAAE,MAAM,CAAC;IACd,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;CAC/B;AAED,MAAM,MAAM,iBAAiB,GAC1B;IAAE,MAAM,EAAE,SAAS,CAAC;IAAC,SAAS,EAAE,gBAAgB,CAAA;CAAE,GAClD;IAAE,MAAM,EAAE,SAAS,CAAC;IAAC,SAAS,EAAE,gBAAgB,CAAA;CAAE,GAClD;IAAE,MAAM,EAAE,iBAAiB,CAAC;IAAC,SAAS,EAAE,gBAAgB,CAAA;CAAE,GAC1D;IAAE,MAAM,EAAE,WAAW,CAAC;IAAC,OAAO,EAAE,MAAM,CAAA;CAAE,CAAC;AAE5C,MAAM,WAAW,cAAc;IAC9B,aAAa,CAAC,SAAS,CAAC,EAAE,sBAAsB,GAAG,aAAa,CAAC;IACjE,KAAK,CAAC,OAAO,EAAE,mBAAmB,GAAG,OAAO,CAAC,kBAAkB,CAAC,CAAC;IACjE,IAAI,CAAC,OAAO,EAAE,kBAAkB,GAAG,OAAO,CAAC,gBAAgB,EAAE,CAAC,CAAC;IAC/D,IAAI,CAAC,OAAO,EAAE,kBAAkB,GAAG,OAAO,CAAC,iBAAiB,CAAC,CAAC;CAC9D;AAED,MAAM,WAAW,oBAAoB;IACpC,QAAQ,EAAE,MAAM,GAAG,IAAI,CAAC;IACxB,MAAM,EAAE,MAAM,CAAC;IACf,MAAM,EAAE,MAAM,CAAC;CACf;AAED,MAAM,WAAW,qBAAqB;IACrC,GAAG,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;CAC7B;AAED,MAAM,WAAW,aAAa;IAC7B,GAAG,CAAC,OAAO,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,EAAE,OAAO,CAAC,EAAE,qBAAqB,GAAG,OAAO,CAAC,oBAAoB,CAAC,CAAC;CACrG;AAwBD,wBAAgB,aAAa,CAAC,KAAK,EAAE,MAAM,GAAG,MAAM,CAMnD;AAED,wBAAgB,oBAAoB,CACnC,QAAQ,EAAE,eAAe,GAAG,SAAS,EACrC,GAAG,GAAE,kBAAuB,EAC5B,SAAS,GAAE,sBAA2B,GACpC,aAAa,CAsCf;AAED,wBAAsB,yBAAyB,CAAC,IAAI,EAAE,MAAM,EAAE,aAAa,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,CAiBpG","sourcesContent":["import { createServer } from \"node:net\";\nimport type { SandboxSettings } from \"../settings-manager.ts\";\n\nexport const DEFAULT_SANDBOX_WORKSPACE_MOUNT = \"/workspace\";\nexport const DEFAULT_SANDBOX_DAEMON_PORT = 8787;\nexport const DEFAULT_SANDBOX_LIMA_BINARY = \"limactl\";\nexport const DEFAULT_SANDBOX_LIMA_TEMPLATE = \"template:docker-rootful\";\nexport const SANDBOX_LABEL_PREFIX = \"ai.greppleai.grip\";\n\nexport type SandboxCleanupBehavior = \"stop\" | \"remove\";\n\nexport type SandboxConfig = Required<SandboxSettings>;\n\nexport type SandboxConfigOverrides = SandboxSettings;\n\nexport interface SandboxEnvironment {\n\tGRIP_SANDBOX_LIMA?: string;\n\tGRIP_SANDBOX_GUEST_BINARY?: string;\n\tGRIP_SANDBOX_LIMA_TEMPLATE?: string;\n\tGRIP_SANDBOX_LIMA_INSTANCE_PREFIX?: string;\n\tGRIP_SANDBOX_WORKSPACE_MOUNT?: string;\n\tGRIP_SANDBOX_DAEMON_PORT?: string;\n\tGRIP_SANDBOX_DAEMON_HOST_BIND?: string;\n\tGRIP_SANDBOX_CLEANUP?: string;\n}\n\nexport interface SandboxStartOptions extends SandboxConfigOverrides {\n\tworkspaceRoot: string;\n\tsessionId?: string;\n\tname?: string;\n\tupdate?: boolean;\n}\n\nexport interface SandboxListOptions {\n\tworkspaceRoot: string;\n\tallWorkspaces?: boolean;\n}\n\nexport interface SandboxStopOptions {\n\tworkspaceRoot: string;\n\ttarget?: string;\n\tcurrentContainerId?: string;\n}\n\nexport interface SandboxContainer {\n\tid: string;\n\tname: string;\n\timage: string;\n\tstatus: string;\n\tstate: string | undefined;\n\tcreatedAt: string | undefined;\n\tworkspaceRoot: string | undefined;\n\tworkspaceMountPath: string | undefined;\n\tdaemonPort: number | undefined;\n\tdaemonEndpoint: string | undefined;\n\tlabels: Record<string, string>;\n}\n\nexport interface SandboxStartResult {\n\tcontainerId: string;\n\tcontainerName: string;\n\tworkspaceRoot: string;\n\tworkspaceMountPath: string;\n\tdaemonUrl: string;\n\tdaemonUrlRedacted: string;\n\ttoken: string;\n\tlabels: Record<string, string>;\n}\n\nexport type SandboxStopResult =\n\t| { status: \"stopped\"; container: SandboxContainer }\n\t| { status: \"removed\"; container: SandboxContainer }\n\t| { status: \"already-stopped\"; container: SandboxContainer }\n\t| { status: \"not-found\"; message: string };\n\nexport interface SandboxService {\n\tresolveConfig(overrides?: SandboxConfigOverrides): SandboxConfig;\n\tstart(options: SandboxStartOptions): Promise<SandboxStartResult>;\n\tlist(options: SandboxListOptions): Promise<SandboxContainer[]>;\n\tstop(options: SandboxStopOptions): Promise<SandboxStopResult>;\n}\n\nexport interface SandboxCommandResult {\n\texitCode: number | null;\n\tstdout: string;\n\tstderr: string;\n}\n\nexport interface SandboxCommandOptions {\n\tenv?: Record<string, string>;\n}\n\nexport interface SandboxRunner {\n\trun(command: string, args: string[], options?: SandboxCommandOptions): Promise<SandboxCommandResult>;\n}\n\nfunction nonEmpty(value: string | undefined): string | undefined {\n\tconst trimmed = value?.trim();\n\treturn trimmed ? trimmed : undefined;\n}\n\nfunction parsePositiveInteger(value: string | number | undefined, settingName: string): number | undefined {\n\tif (value === undefined) return undefined;\n\tconst text = String(value).trim();\n\tif (!/^\\d+$/.test(text)) throw new Error(`Invalid ${settingName}: expected a decimal integer`);\n\tconst parsed = Number(text);\n\tif (!Number.isSafeInteger(parsed) || parsed < 1 || parsed > 65535) {\n\t\tthrow new Error(`Invalid ${settingName}: expected a port from 1 to 65535`);\n\t}\n\treturn parsed;\n}\n\nfunction parseCleanup(value: string | undefined, settingName: string): SandboxCleanupBehavior | undefined {\n\tif (value === undefined) return undefined;\n\tif (value === \"stop\" || value === \"remove\") return value;\n\tthrow new Error(`Invalid ${settingName}: expected stop or remove`);\n}\n\nexport function redactSecrets(value: string): string {\n\treturn value\n\t\t.replace(/(GRIP_DAEMON_TOKEN=)[^\\s,;]+/g, \"$1[REDACTED]\")\n\t\t.replace(/(PI_DAEMON_TOKEN=)[^\\s,;]+/g, \"$1[REDACTED]\")\n\t\t.replace(/(Authorization:\\s*Bearer\\s+)[^\\s,;]+/gi, \"$1[REDACTED]\")\n\t\t.replace(/([?&]token=)[^\\s&]+/gi, \"$1[REDACTED]\");\n}\n\nexport function resolveSandboxConfig(\n\tsettings: SandboxSettings | undefined,\n\tenv: SandboxEnvironment = {},\n\toverrides: SandboxConfigOverrides = {},\n): SandboxConfig {\n\treturn {\n\t\tlimaBinary:\n\t\t\tnonEmpty(overrides.limaBinary) ??\n\t\t\tnonEmpty(env.GRIP_SANDBOX_LIMA) ??\n\t\t\tnonEmpty(settings?.limaBinary) ??\n\t\t\tDEFAULT_SANDBOX_LIMA_BINARY,\n\t\tlimaTemplate:\n\t\t\tnonEmpty(overrides.limaTemplate) ??\n\t\t\tnonEmpty(env.GRIP_SANDBOX_LIMA_TEMPLATE) ??\n\t\t\tnonEmpty(settings?.limaTemplate) ??\n\t\t\tDEFAULT_SANDBOX_LIMA_TEMPLATE,\n\t\tlimaInstanceNamePrefix:\n\t\t\tnonEmpty(overrides.limaInstanceNamePrefix) ??\n\t\t\tnonEmpty(env.GRIP_SANDBOX_LIMA_INSTANCE_PREFIX) ??\n\t\t\tnonEmpty(settings?.limaInstanceNamePrefix) ??\n\t\t\t\"grip-sandbox\",\n\t\tworkspaceMountPath:\n\t\t\tnonEmpty(overrides.workspaceMountPath) ??\n\t\t\tnonEmpty(env.GRIP_SANDBOX_WORKSPACE_MOUNT) ??\n\t\t\tnonEmpty(settings?.workspaceMountPath) ??\n\t\t\tDEFAULT_SANDBOX_WORKSPACE_MOUNT,\n\t\tdaemonPort:\n\t\t\toverrides.daemonPort ??\n\t\t\tparsePositiveInteger(env.GRIP_SANDBOX_DAEMON_PORT, \"GRIP_SANDBOX_DAEMON_PORT\") ??\n\t\t\tparsePositiveInteger(settings?.daemonPort, \"sandbox.daemonPort\") ??\n\t\t\tDEFAULT_SANDBOX_DAEMON_PORT,\n\t\tdaemonHostBind:\n\t\t\tnonEmpty(overrides.daemonHostBind) ??\n\t\t\tnonEmpty(env.GRIP_SANDBOX_DAEMON_HOST_BIND) ??\n\t\t\tnonEmpty(settings?.daemonHostBind) ??\n\t\t\t\"127.0.0.1\",\n\t\tcleanup:\n\t\t\toverrides.cleanup ??\n\t\t\tparseCleanup(env.GRIP_SANDBOX_CLEANUP, \"GRIP_SANDBOX_CLEANUP\") ??\n\t\t\tparseCleanup(settings?.cleanup, \"sandbox.cleanup\") ??\n\t\t\t\"stop\",\n\t};\n}\n\nexport async function allocateSandboxDaemonPort(host: string, preferredPort: number): Promise<number> {\n\tconst reserve = (port: number): Promise<number | undefined> =>\n\t\tnew Promise((resolvePort) => {\n\t\t\tconst server = createServer();\n\t\t\tserver.unref();\n\t\t\tserver.once(\"error\", () => resolvePort(undefined));\n\t\t\tserver.listen({ host, port, exclusive: true }, () => {\n\t\t\t\tconst address = server.address();\n\t\t\t\tconst selectedPort = typeof address === \"object\" && address ? address.port : undefined;\n\t\t\t\tserver.close(() => resolvePort(selectedPort));\n\t\t\t});\n\t\t});\n\tconst preferred = await reserve(preferredPort);\n\tif (preferred !== undefined) return preferred;\n\tconst fallback = await reserve(0);\n\tif (fallback === undefined) throw new Error(`Unable to allocate a sandbox daemon port on ${host}`);\n\treturn fallback;\n}\n"]}

package/dist/core/sandbox/config.js

@@ -0,0 +1,88 @@
+import { createServer } from "node:net";
+export const DEFAULT_SANDBOX_WORKSPACE_MOUNT = "/workspace";
+export const DEFAULT_SANDBOX_DAEMON_PORT = 8787;
+export const DEFAULT_SANDBOX_LIMA_BINARY = "limactl";
+export const DEFAULT_SANDBOX_LIMA_TEMPLATE = "template:docker-rootful";
+export const SANDBOX_LABEL_PREFIX = "ai.greppleai.grip";
+function nonEmpty(value) {
+    const trimmed = value?.trim();
+    return trimmed ? trimmed : undefined;
+}
+function parsePositiveInteger(value, settingName) {
+    if (value === undefined)
+        return undefined;
+    const text = String(value).trim();
+    if (!/^\d+$/.test(text))
+        throw new Error(`Invalid ${settingName}: expected a decimal integer`);
+    const parsed = Number(text);
+    if (!Number.isSafeInteger(parsed) || parsed < 1 || parsed > 65535) {
+        throw new Error(`Invalid ${settingName}: expected a port from 1 to 65535`);
+    }
+    return parsed;
+}
+function parseCleanup(value, settingName) {
+    if (value === undefined)
+        return undefined;
+    if (value === "stop" || value === "remove")
+        return value;
+    throw new Error(`Invalid ${settingName}: expected stop or remove`);
+}
+export function redactSecrets(value) {
+    return value
+        .replace(/(GRIP_DAEMON_TOKEN=)[^\s,;]+/g, "$1[REDACTED]")
+        .replace(/(PI_DAEMON_TOKEN=)[^\s,;]+/g, "$1[REDACTED]")
+        .replace(/(Authorization:\s*Bearer\s+)[^\s,;]+/gi, "$1[REDACTED]")
+        .replace(/([?&]token=)[^\s&]+/gi, "$1[REDACTED]");
+}
+export function resolveSandboxConfig(settings, env = {}, overrides = {}) {
+    return {
+        limaBinary: nonEmpty(overrides.limaBinary) ??
+            nonEmpty(env.GRIP_SANDBOX_LIMA) ??
+            nonEmpty(settings?.limaBinary) ??
+            DEFAULT_SANDBOX_LIMA_BINARY,
+        limaTemplate: nonEmpty(overrides.limaTemplate) ??
+            nonEmpty(env.GRIP_SANDBOX_LIMA_TEMPLATE) ??
+            nonEmpty(settings?.limaTemplate) ??
+            DEFAULT_SANDBOX_LIMA_TEMPLATE,
+        limaInstanceNamePrefix: nonEmpty(overrides.limaInstanceNamePrefix) ??
+            nonEmpty(env.GRIP_SANDBOX_LIMA_INSTANCE_PREFIX) ??
+            nonEmpty(settings?.limaInstanceNamePrefix) ??
+            "grip-sandbox",
+        workspaceMountPath: nonEmpty(overrides.workspaceMountPath) ??
+            nonEmpty(env.GRIP_SANDBOX_WORKSPACE_MOUNT) ??
+            nonEmpty(settings?.workspaceMountPath) ??
+            DEFAULT_SANDBOX_WORKSPACE_MOUNT,
+        daemonPort: overrides.daemonPort ??
+            parsePositiveInteger(env.GRIP_SANDBOX_DAEMON_PORT, "GRIP_SANDBOX_DAEMON_PORT") ??
+            parsePositiveInteger(settings?.daemonPort, "sandbox.daemonPort") ??
+            DEFAULT_SANDBOX_DAEMON_PORT,
+        daemonHostBind: nonEmpty(overrides.daemonHostBind) ??
+            nonEmpty(env.GRIP_SANDBOX_DAEMON_HOST_BIND) ??
+            nonEmpty(settings?.daemonHostBind) ??
+            "127.0.0.1",
+        cleanup: overrides.cleanup ??
+            parseCleanup(env.GRIP_SANDBOX_CLEANUP, "GRIP_SANDBOX_CLEANUP") ??
+            parseCleanup(settings?.cleanup, "sandbox.cleanup") ??
+            "stop",
+    };
+}
+export async function allocateSandboxDaemonPort(host, preferredPort) {
+    const reserve = (port) => new Promise((resolvePort) => {
+        const server = createServer();
+        server.unref();
+        server.once("error", () => resolvePort(undefined));
+        server.listen({ host, port, exclusive: true }, () => {
+            const address = server.address();
+            const selectedPort = typeof address === "object" && address ? address.port : undefined;
+            server.close(() => resolvePort(selectedPort));
+        });
+    });
+    const preferred = await reserve(preferredPort);
+    if (preferred !== undefined)
+        return preferred;
+    const fallback = await reserve(0);
+    if (fallback === undefined)
+        throw new Error(`Unable to allocate a sandbox daemon port on ${host}`);
+    return fallback;
+}
+//# sourceMappingURL=config.js.map

package/dist/core/sandbox/config.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"config.js","sourceRoot":"","sources":["../../../src/core/sandbox/config.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,YAAY,EAAE,MAAM,UAAU,CAAC;AAGxC,MAAM,CAAC,MAAM,+BAA+B,GAAG,YAAY,CAAC;AAC5D,MAAM,CAAC,MAAM,2BAA2B,GAAG,IAAI,CAAC;AAChD,MAAM,CAAC,MAAM,2BAA2B,GAAG,SAAS,CAAC;AACrD,MAAM,CAAC,MAAM,6BAA6B,GAAG,yBAAyB,CAAC;AACvE,MAAM,CAAC,MAAM,oBAAoB,GAAG,mBAAmB,CAAC;AAyFxD,SAAS,QAAQ,CAAC,KAAyB,EAAsB;IAChE,MAAM,OAAO,GAAG,KAAK,EAAE,IAAI,EAAE,CAAC;IAC9B,OAAO,OAAO,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,SAAS,CAAC;AAAA,CACrC;AAED,SAAS,oBAAoB,CAAC,KAAkC,EAAE,WAAmB,EAAsB;IAC1G,IAAI,KAAK,KAAK,SAAS;QAAE,OAAO,SAAS,CAAC;IAC1C,MAAM,IAAI,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC,IAAI,EAAE,CAAC;IAClC,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,WAAW,WAAW,8BAA8B,CAAC,CAAC;IAC/F,MAAM,MAAM,GAAG,MAAM,CAAC,IAAI,CAAC,CAAC;IAC5B,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,MAAM,CAAC,IAAI,MAAM,GAAG,CAAC,IAAI,MAAM,GAAG,KAAK,EAAE,CAAC;QACnE,MAAM,IAAI,KAAK,CAAC,WAAW,WAAW,mCAAmC,CAAC,CAAC;IAC5E,CAAC;IACD,OAAO,MAAM,CAAC;AAAA,CACd;AAED,SAAS,YAAY,CAAC,KAAyB,EAAE,WAAmB,EAAsC;IACzG,IAAI,KAAK,KAAK,SAAS;QAAE,OAAO,SAAS,CAAC;IAC1C,IAAI,KAAK,KAAK,MAAM,IAAI,KAAK,KAAK,QAAQ;QAAE,OAAO,KAAK,CAAC;IACzD,MAAM,IAAI,KAAK,CAAC,WAAW,WAAW,2BAA2B,CAAC,CAAC;AAAA,CACnE;AAED,MAAM,UAAU,aAAa,CAAC,KAAa,EAAU;IACpD,OAAO,KAAK;SACV,OAAO,CAAC,+BAA+B,EAAE,cAAc,CAAC;SACxD,OAAO,CAAC,6BAA6B,EAAE,cAAc,CAAC;SACtD,OAAO,CAAC,wCAAwC,EAAE,cAAc,CAAC;SACjE,OAAO,CAAC,uBAAuB,EAAE,cAAc,CAAC,CAAC;AAAA,CACnD;AAED,MAAM,UAAU,oBAAoB,CACnC,QAAqC,EACrC,GAAG,GAAuB,EAAE,EAC5B,SAAS,GAA2B,EAAE,EACtB;IAChB,OAAO;QACN,UAAU,EACT,QAAQ,CAAC,SAAS,CAAC,UAAU,CAAC;YAC9B,QAAQ,CAAC,GAAG,CAAC,iBAAiB,CAAC;YAC/B,QAAQ,CAAC,QAAQ,EAAE,UAAU,CAAC;YAC9B,2BAA2B;QAC5B,YAAY,EACX,QAAQ,CAAC,SAAS,CAAC,YAAY,CAAC;YAChC,QAAQ,CAAC,GAAG,CAAC,0BAA0B,CAAC;YACxC,QAAQ,CAAC,QAAQ,EAAE,YAAY,CAAC;YAChC,6BAA6B;QAC9B,sBAAsB,EACrB,QAAQ,CAAC,SAAS,CAAC,sBAAsB,CAAC;YAC1C,QAAQ,CAAC,GAAG,CAAC,iCAAiC,CAAC;YAC/C,QAAQ,CAAC,QAAQ,EAAE,sBAAsB,CAAC;YAC1C,cAAc;QACf,kBAAkB,EACjB,QAAQ,CAAC,SAAS,CAAC,kBAAkB,CAAC;YACtC,QAAQ,CAAC,GAAG,CAAC,4BAA4B,CAAC;YAC1C,QAAQ,CAAC,QAAQ,EAAE,kBAAkB,CAAC;YACtC,+BAA+B;QAChC,UAAU,EACT,SAAS,CAAC,UAAU;YACpB,oBAAoB,CAAC,GAAG,CAAC,wBAAwB,EAAE,0BAA0B,CAAC;YAC9E,oBAAoB,CAAC,QAAQ,EAAE,UAAU,EAAE,oBAAoB,CAAC;YAChE,2BAA2B;QAC5B,cAAc,EACb,QAAQ,CAAC,SAAS,CAAC,cAAc,CAAC;YAClC,QAAQ,CAAC,GAAG,CAAC,6BAA6B,CAAC;YAC3C,QAAQ,CAAC,QAAQ,EAAE,cAAc,CAAC;YAClC,WAAW;QACZ,OAAO,EACN,SAAS,CAAC,OAAO;YACjB,YAAY,CAAC,GAAG,CAAC,oBAAoB,EAAE,sBAAsB,CAAC;YAC9D,YAAY,CAAC,QAAQ,EAAE,OAAO,EAAE,iBAAiB,CAAC;YAClD,MAAM;KACP,CAAC;AAAA,CACF;AAED,MAAM,CAAC,KAAK,UAAU,yBAAyB,CAAC,IAAY,EAAE,aAAqB,EAAmB;IACrG,MAAM,OAAO,GAAG,CAAC,IAAY,EAA+B,EAAE,CAC7D,IAAI,OAAO,CAAC,CAAC,WAAW,EAAE,EAAE,CAAC;QAC5B,MAAM,MAAM,GAAG,YAAY,EAAE,CAAC;QAC9B,MAAM,CAAC,KAAK,EAAE,CAAC;QACf,MAAM,CAAC,IAAI,CAAC,OAAO,EAAE,GAAG,EAAE,CAAC,WAAW,CAAC,SAAS,CAAC,CAAC,CAAC;QACnD,MAAM,CAAC,MAAM,CAAC,EAAE,IAAI,EAAE,IAAI,EAAE,SAAS,EAAE,IAAI,EAAE,EAAE,GAAG,EAAE,CAAC;YACpD,MAAM,OAAO,GAAG,MAAM,CAAC,OAAO,EAAE,CAAC;YACjC,MAAM,YAAY,GAAG,OAAO,OAAO,KAAK,QAAQ,IAAI,OAAO,CAAC,CAAC,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS,CAAC;YACvF,MAAM,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,WAAW,CAAC,YAAY,CAAC,CAAC,CAAC;QAAA,CAC9C,CAAC,CAAC;IAAA,CACH,CAAC,CAAC;IACJ,MAAM,SAAS,GAAG,MAAM,OAAO,CAAC,aAAa,CAAC,CAAC;IAC/C,IAAI,SAAS,KAAK,SAAS;QAAE,OAAO,SAAS,CAAC;IAC9C,MAAM,QAAQ,GAAG,MAAM,OAAO,CAAC,CAAC,CAAC,CAAC;IAClC,IAAI,QAAQ,KAAK,SAAS;QAAE,MAAM,IAAI,KAAK,CAAC,+CAA+C,IAAI,EAAE,CAAC,CAAC;IACnG,OAAO,QAAQ,CAAC;AAAA,CAChB","sourcesContent":["import { createServer } from \"node:net\";\nimport type { SandboxSettings } from \"../settings-manager.ts\";\n\nexport const DEFAULT_SANDBOX_WORKSPACE_MOUNT = \"/workspace\";\nexport const DEFAULT_SANDBOX_DAEMON_PORT = 8787;\nexport const DEFAULT_SANDBOX_LIMA_BINARY = \"limactl\";\nexport const DEFAULT_SANDBOX_LIMA_TEMPLATE = \"template:docker-rootful\";\nexport const SANDBOX_LABEL_PREFIX = \"ai.greppleai.grip\";\n\nexport type SandboxCleanupBehavior = \"stop\" | \"remove\";\n\nexport type SandboxConfig = Required<SandboxSettings>;\n\nexport type SandboxConfigOverrides = SandboxSettings;\n\nexport interface SandboxEnvironment {\n\tGRIP_SANDBOX_LIMA?: string;\n\tGRIP_SANDBOX_GUEST_BINARY?: string;\n\tGRIP_SANDBOX_LIMA_TEMPLATE?: string;\n\tGRIP_SANDBOX_LIMA_INSTANCE_PREFIX?: string;\n\tGRIP_SANDBOX_WORKSPACE_MOUNT?: string;\n\tGRIP_SANDBOX_DAEMON_PORT?: string;\n\tGRIP_SANDBOX_DAEMON_HOST_BIND?: string;\n\tGRIP_SANDBOX_CLEANUP?: string;\n}\n\nexport interface SandboxStartOptions extends SandboxConfigOverrides {\n\tworkspaceRoot: string;\n\tsessionId?: string;\n\tname?: string;\n\tupdate?: boolean;\n}\n\nexport interface SandboxListOptions {\n\tworkspaceRoot: string;\n\tallWorkspaces?: boolean;\n}\n\nexport interface SandboxStopOptions {\n\tworkspaceRoot: string;\n\ttarget?: string;\n\tcurrentContainerId?: string;\n}\n\nexport interface SandboxContainer {\n\tid: string;\n\tname: string;\n\timage: string;\n\tstatus: string;\n\tstate: string | undefined;\n\tcreatedAt: string | undefined;\n\tworkspaceRoot: string | undefined;\n\tworkspaceMountPath: string | undefined;\n\tdaemonPort: number | undefined;\n\tdaemonEndpoint: string | undefined;\n\tlabels: Record<string, string>;\n}\n\nexport interface SandboxStartResult {\n\tcontainerId: string;\n\tcontainerName: string;\n\tworkspaceRoot: string;\n\tworkspaceMountPath: string;\n\tdaemonUrl: string;\n\tdaemonUrlRedacted: string;\n\ttoken: string;\n\tlabels: Record<string, string>;\n}\n\nexport type SandboxStopResult =\n\t| { status: \"stopped\"; container: SandboxContainer }\n\t| { status: \"removed\"; container: SandboxContainer }\n\t| { status: \"already-stopped\"; container: SandboxContainer }\n\t| { status: \"not-found\"; message: string };\n\nexport interface SandboxService {\n\tresolveConfig(overrides?: SandboxConfigOverrides): SandboxConfig;\n\tstart(options: SandboxStartOptions): Promise<SandboxStartResult>;\n\tlist(options: SandboxListOptions): Promise<SandboxContainer[]>;\n\tstop(options: SandboxStopOptions): Promise<SandboxStopResult>;\n}\n\nexport interface SandboxCommandResult {\n\texitCode: number | null;\n\tstdout: string;\n\tstderr: string;\n}\n\nexport interface SandboxCommandOptions {\n\tenv?: Record<string, string>;\n}\n\nexport interface SandboxRunner {\n\trun(command: string, args: string[], options?: SandboxCommandOptions): Promise<SandboxCommandResult>;\n}\n\nfunction nonEmpty(value: string | undefined): string | undefined {\n\tconst trimmed = value?.trim();\n\treturn trimmed ? trimmed : undefined;\n}\n\nfunction parsePositiveInteger(value: string | number | undefined, settingName: string): number | undefined {\n\tif (value === undefined) return undefined;\n\tconst text = String(value).trim();\n\tif (!/^\\d+$/.test(text)) throw new Error(`Invalid ${settingName}: expected a decimal integer`);\n\tconst parsed = Number(text);\n\tif (!Number.isSafeInteger(parsed) || parsed < 1 || parsed > 65535) {\n\t\tthrow new Error(`Invalid ${settingName}: expected a port from 1 to 65535`);\n\t}\n\treturn parsed;\n}\n\nfunction parseCleanup(value: string | undefined, settingName: string): SandboxCleanupBehavior | undefined {\n\tif (value === undefined) return undefined;\n\tif (value === \"stop\" || value === \"remove\") return value;\n\tthrow new Error(`Invalid ${settingName}: expected stop or remove`);\n}\n\nexport function redactSecrets(value: string): string {\n\treturn value\n\t\t.replace(/(GRIP_DAEMON_TOKEN=)[^\\s,;]+/g, \"$1[REDACTED]\")\n\t\t.replace(/(PI_DAEMON_TOKEN=)[^\\s,;]+/g, \"$1[REDACTED]\")\n\t\t.replace(/(Authorization:\\s*Bearer\\s+)[^\\s,;]+/gi, \"$1[REDACTED]\")\n\t\t.replace(/([?&]token=)[^\\s&]+/gi, \"$1[REDACTED]\");\n}\n\nexport function resolveSandboxConfig(\n\tsettings: SandboxSettings | undefined,\n\tenv: SandboxEnvironment = {},\n\toverrides: SandboxConfigOverrides = {},\n): SandboxConfig {\n\treturn {\n\t\tlimaBinary:\n\t\t\tnonEmpty(overrides.limaBinary) ??\n\t\t\tnonEmpty(env.GRIP_SANDBOX_LIMA) ??\n\t\t\tnonEmpty(settings?.limaBinary) ??\n\t\t\tDEFAULT_SANDBOX_LIMA_BINARY,\n\t\tlimaTemplate:\n\t\t\tnonEmpty(overrides.limaTemplate) ??\n\t\t\tnonEmpty(env.GRIP_SANDBOX_LIMA_TEMPLATE) ??\n\t\t\tnonEmpty(settings?.limaTemplate) ??\n\t\t\tDEFAULT_SANDBOX_LIMA_TEMPLATE,\n\t\tlimaInstanceNamePrefix:\n\t\t\tnonEmpty(overrides.limaInstanceNamePrefix) ??\n\t\t\tnonEmpty(env.GRIP_SANDBOX_LIMA_INSTANCE_PREFIX) ??\n\t\t\tnonEmpty(settings?.limaInstanceNamePrefix) ??\n\t\t\t\"grip-sandbox\",\n\t\tworkspaceMountPath:\n\t\t\tnonEmpty(overrides.workspaceMountPath) ??\n\t\t\tnonEmpty(env.GRIP_SANDBOX_WORKSPACE_MOUNT) ??\n\t\t\tnonEmpty(settings?.workspaceMountPath) ??\n\t\t\tDEFAULT_SANDBOX_WORKSPACE_MOUNT,\n\t\tdaemonPort:\n\t\t\toverrides.daemonPort ??\n\t\t\tparsePositiveInteger(env.GRIP_SANDBOX_DAEMON_PORT, \"GRIP_SANDBOX_DAEMON_PORT\") ??\n\t\t\tparsePositiveInteger(settings?.daemonPort, \"sandbox.daemonPort\") ??\n\t\t\tDEFAULT_SANDBOX_DAEMON_PORT,\n\t\tdaemonHostBind:\n\t\t\tnonEmpty(overrides.daemonHostBind) ??\n\t\t\tnonEmpty(env.GRIP_SANDBOX_DAEMON_HOST_BIND) ??\n\t\t\tnonEmpty(settings?.daemonHostBind) ??\n\t\t\t\"127.0.0.1\",\n\t\tcleanup:\n\t\t\toverrides.cleanup ??\n\t\t\tparseCleanup(env.GRIP_SANDBOX_CLEANUP, \"GRIP_SANDBOX_CLEANUP\") ??\n\t\t\tparseCleanup(settings?.cleanup, \"sandbox.cleanup\") ??\n\t\t\t\"stop\",\n\t};\n}\n\nexport async function allocateSandboxDaemonPort(host: string, preferredPort: number): Promise<number> {\n\tconst reserve = (port: number): Promise<number | undefined> =>\n\t\tnew Promise((resolvePort) => {\n\t\t\tconst server = createServer();\n\t\t\tserver.unref();\n\t\t\tserver.once(\"error\", () => resolvePort(undefined));\n\t\t\tserver.listen({ host, port, exclusive: true }, () => {\n\t\t\t\tconst address = server.address();\n\t\t\t\tconst selectedPort = typeof address === \"object\" && address ? address.port : undefined;\n\t\t\t\tserver.close(() => resolvePort(selectedPort));\n\t\t\t});\n\t\t});\n\tconst preferred = await reserve(preferredPort);\n\tif (preferred !== undefined) return preferred;\n\tconst fallback = await reserve(0);\n\tif (fallback === undefined) throw new Error(`Unable to allocate a sandbox daemon port on ${host}`);\n\treturn fallback;\n}\n"]}

package/dist/core/sandbox/lima-guest-binary.d.ts

@@ -0,0 +1,11 @@
+import type { SandboxRunner } from "./config.ts";
+export interface LocalGuestBinary {
+    path: string;
+    arch: string;
+    sha256: string;
+}
+/** Refuse macOS executables in Linux VMs, even when the host CPU architecture matches. */
+export declare function inspectLocalGuestBinary(path: string): Promise<LocalGuestBinary>;
+/** Called only for explicitly requested local-development installs. No remote download or sudo. */
+export declare function installLocalGuestBinary(runner: SandboxRunner, limaBinary: string, name: string, local: LocalGuestBinary, version: string, assertOwner?: () => Promise<void>): Promise<void>;
+//# sourceMappingURL=lima-guest-binary.d.ts.map