@intentic/cli 1.159.0 → 1.160.0

package/dist/app.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"app.d.ts","sourceRoot":"","sources":["../src/app.ts"],"names":[],"mappings":"AAwEA,eAAO,MAAM,GAAG,6EAWf,CAAC"}
+{"version":3,"file":"app.d.ts","sourceRoot":"","sources":["../src/app.ts"],"names":[],"mappings":"AAkFA,eAAO,MAAM,GAAG,6EAWf,CAAC"}

package/dist/app.js

@@ -14,6 +14,7 @@ import { monorepoCommand } from "./monorepo/monorepo.command.js";
 import { planCommand } from "./plan/plan.command.js";
 import { resolveCommand } from "./resolve/resolve.command.js";
 import { restore } from "./restore/restore.command.js";
+import { sandboxRunCommandCli } from "./sandbox-run/sandbox-run.command.js";
 import { sandboxTunnel } from "./sandbox-tunnel/sandbox-tunnel.command.js";
 import { secretsCommand } from "./secrets/secrets.command.js";
 const formatException = (exc) => {
@@ -46,6 +47,12 @@ const deploy = buildRouteMap({
     },
     docs: { brief: "The bundled deployment engine — declare intent, reconcile your own infrastructure" },
 });
+const sandbox = buildRouteMap({
+    routes: {
+        runCommand: sandboxRunCommandCli,
+    },
+    docs: { brief: "The sandbox container's own run contract — print the canonical docker-run command" },
+});
 const scaffold = buildRouteMap({
     routes: {
         monorepo: monorepoCommand,
@@ -54,8 +61,8 @@ const scaffold = buildRouteMap({
     docs: { brief: "Scaffold app repositories — a pnpm+turbo monorepo and its apps" },
 });
 export const app = buildApplication(buildRouteMap({
-    routes: { tunnel, deploy, scaffold },
-    docs: { brief: "intentic — the sandbox toolbox: tunnel · deploy · scaffold" },
+    routes: { tunnel, sandbox, deploy, scaffold },
+    docs: { brief: "intentic — the sandbox toolbox: tunnel · sandbox · deploy · scaffold" },
 }), {
     name: "intentic",
     versionInfo: { currentVersion: version },

package/dist/app.js.map

@@ -1 +1 @@
-{"version":3,"file":"app.js","sourceRoot":"","sources":["../src/app.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,gBAAgB,EAAE,aAAa,EAAE,OAAO,EAAE,MAAM,eAAe,CAAC;AACzE,OAAO,EAAE,aAAa,EAAE,MAAM,8BAA8B,CAAC;AAC7D,OAAO,EAAE,KAAK,EAAE,MAAM,0BAA0B,CAAC;AACjD,OAAO,EAAE,KAAK,EAAE,MAAM,0BAA0B,CAAC;AACjD,OAAO,EAAE,kBAAkB,EAAE,MAAM,sCAAsC,CAAC;AAC1E,OAAO,EAAE,OAAO,EAAE,MAAM,8BAA8B,CAAC;AACvD,OAAO,EAAE,UAAU,EAAE,MAAM,iBAAiB,CAAC;AAC7C,OAAO,EAAE,aAAa,EAAE,MAAM,8CAA8C,CAAC;AAC7E,OAAO,EAAE,IAAI,EAAE,MAAM,wBAAwB,CAAC;AAC9C,OAAO,EAAE,OAAO,EAAE,MAAM,kBAAkB,CAAC;AAC3C,OAAO,EAAE,gBAAgB,EAAE,MAAM,kBAAkB,CAAC;AACpD,OAAO,EAAE,WAAW,EAAE,MAAM,wBAAwB,CAAC;AACrD,OAAO,EAAE,eAAe,EAAE,MAAM,gCAAgC,CAAC;AACjE,OAAO,EAAE,WAAW,EAAE,MAAM,wBAAwB,CAAC;AACrD,OAAO,EAAE,cAAc,EAAE,MAAM,8BAA8B,CAAC;AAC9D,OAAO,EAAE,OAAO,EAAE,MAAM,8BAA8B,CAAC;AACvD,OAAO,EAAE,aAAa,EAAE,MAAM,4CAA4C,CAAC;AAC3E,OAAO,EAAE,cAAc,EAAE,MAAM,8BAA8B,CAAC;AAQ9D,MAAM,eAAe,GAAG,CAAC,GAAY,EAAU,EAAE;IAC7C,MAAM,OAAO,GAAG,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;IACjE,gBAAgB,CAAC,OAAO,CAAC,CAAC;IAC1B,IAAI,GAAG,YAAY,KAAK,EAAE,CAAC;QACvB,OAAO,UAAU,EAAE,CAAC,aAAa,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,KAAK,IAAI,OAAO,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC;IACzE,CAAC;IACD,OAAO,OAAO,CAAC;AACnB,CAAC,CAAC;AAQF,MAAM,MAAM,GAAG,aAAa,CAAC;IACzB,MAAM,EAAE;QACJ,OAAO,EAAE,aAAa;QACtB,IAAI,EAAE,aAAa;KACtB;IACD,IAAI,EAAE,EAAE,KAAK,EAAE,uFAAuF,EAAE;CAC3G,CAAC,CAAC;AAEH,MAAM,MAAM,GAAG,aAAa,CAAC;IACzB,MAAM,EAAE;QACJ,IAAI;QACJ,OAAO,EAAE,cAAc;QACvB,IAAI,EAAE,WAAW;QACjB,KAAK;QACL,OAAO;QACP,KAAK;QACL,OAAO;QACP,OAAO,EAAE,cAAc;QACvB,WAAW,EAAE,kBAAkB;QAC/B,IAAI,EAAE,WAAW;KACpB;IACD,IAAI,EAAE,EAAE,KAAK,EAAE,mFAAmF,EAAE;CACvG,CAAC,CAAC;AAEH,MAAM,QAAQ,GAAG,aAAa,CAAC;IAC3B,MAAM,EAAE;QACJ,QAAQ,EAAE,eAAe;QACzB,MAAM,EAAE,aAAa;KACxB;IACD,IAAI,EAAE,EAAE,KAAK,EAAE,gEAAgE,EAAE;CACpF,CAAC,CAAC;AAEH,MAAM,CAAC,MAAM,GAAG,GAAG,gBAAgB,CAC/B,aAAa,CAAC;IACV,MAAM,EAAE,EAAE,MAAM,EAAE,MAAM,EAAE,QAAQ,EAAE;IACpC,IAAI,EAAE,EAAE,KAAK,EAAE,4DAA4D,EAAE;CAChF,CAAC,EACF;IACI,IAAI,EAAE,UAAU;IAChB,WAAW,EAAE,EAAE,cAAc,EAAE,OAAO,EAAE;IACxC,OAAO,EAAE,EAAE,SAAS,EAAE,uBAAuB,EAAE;IAC/C,YAAY,EAAE,EAAE,QAAQ,EAAE,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,MAAM,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,EAAE,GAAG,OAAO,EAAE,eAAe,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC,EAAE;CAClH,CACJ,CAAC"}
+{"version":3,"file":"app.js","sourceRoot":"","sources":["../src/app.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,gBAAgB,EAAE,aAAa,EAAE,OAAO,EAAE,MAAM,eAAe,CAAC;AACzE,OAAO,EAAE,aAAa,EAAE,MAAM,8BAA8B,CAAC;AAC7D,OAAO,EAAE,KAAK,EAAE,MAAM,0BAA0B,CAAC;AACjD,OAAO,EAAE,KAAK,EAAE,MAAM,0BAA0B,CAAC;AACjD,OAAO,EAAE,kBAAkB,EAAE,MAAM,sCAAsC,CAAC;AAC1E,OAAO,EAAE,OAAO,EAAE,MAAM,8BAA8B,CAAC;AACvD,OAAO,EAAE,UAAU,EAAE,MAAM,iBAAiB,CAAC;AAC7C,OAAO,EAAE,aAAa,EAAE,MAAM,8CAA8C,CAAC;AAC7E,OAAO,EAAE,IAAI,EAAE,MAAM,wBAAwB,CAAC;AAC9C,OAAO,EAAE,OAAO,EAAE,MAAM,kBAAkB,CAAC;AAC3C,OAAO,EAAE,gBAAgB,EAAE,MAAM,kBAAkB,CAAC;AACpD,OAAO,EAAE,WAAW,EAAE,MAAM,wBAAwB,CAAC;AACrD,OAAO,EAAE,eAAe,EAAE,MAAM,gCAAgC,CAAC;AACjE,OAAO,EAAE,WAAW,EAAE,MAAM,wBAAwB,CAAC;AACrD,OAAO,EAAE,cAAc,EAAE,MAAM,8BAA8B,CAAC;AAC9D,OAAO,EAAE,OAAO,EAAE,MAAM,8BAA8B,CAAC;AACvD,OAAO,EAAE,oBAAoB,EAAE,MAAM,sCAAsC,CAAC;AAC5E,OAAO,EAAE,aAAa,EAAE,MAAM,4CAA4C,CAAC;AAC3E,OAAO,EAAE,cAAc,EAAE,MAAM,8BAA8B,CAAC;AAQ9D,MAAM,eAAe,GAAG,CAAC,GAAY,EAAU,EAAE;IAC7C,MAAM,OAAO,GAAG,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;IACjE,gBAAgB,CAAC,OAAO,CAAC,CAAC;IAC1B,IAAI,GAAG,YAAY,KAAK,EAAE,CAAC;QACvB,OAAO,UAAU,EAAE,CAAC,aAAa,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,KAAK,IAAI,OAAO,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC;IACzE,CAAC;IACD,OAAO,OAAO,CAAC;AACnB,CAAC,CAAC;AAQF,MAAM,MAAM,GAAG,aAAa,CAAC;IACzB,MAAM,EAAE;QACJ,OAAO,EAAE,aAAa;QACtB,IAAI,EAAE,aAAa;KACtB;IACD,IAAI,EAAE,EAAE,KAAK,EAAE,uFAAuF,EAAE;CAC3G,CAAC,CAAC;AAEH,MAAM,MAAM,GAAG,aAAa,CAAC;IACzB,MAAM,EAAE;QACJ,IAAI;QACJ,OAAO,EAAE,cAAc;QACvB,IAAI,EAAE,WAAW;QACjB,KAAK;QACL,OAAO;QACP,KAAK;QACL,OAAO;QACP,OAAO,EAAE,cAAc;QACvB,WAAW,EAAE,kBAAkB;QAC/B,IAAI,EAAE,WAAW;KACpB;IACD,IAAI,EAAE,EAAE,KAAK,EAAE,mFAAmF,EAAE;CACvG,CAAC,CAAC;AAIH,MAAM,OAAO,GAAG,aAAa,CAAC;IAC1B,MAAM,EAAE;QACJ,UAAU,EAAE,oBAAoB;KACnC;IACD,IAAI,EAAE,EAAE,KAAK,EAAE,mFAAmF,EAAE;CACvG,CAAC,CAAC;AAEH,MAAM,QAAQ,GAAG,aAAa,CAAC;IAC3B,MAAM,EAAE;QACJ,QAAQ,EAAE,eAAe;QACzB,MAAM,EAAE,aAAa;KACxB;IACD,IAAI,EAAE,EAAE,KAAK,EAAE,gEAAgE,EAAE;CACpF,CAAC,CAAC;AAEH,MAAM,CAAC,MAAM,GAAG,GAAG,gBAAgB,CAC/B,aAAa,CAAC;IACV,MAAM,EAAE,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,QAAQ,EAAE;IAC7C,IAAI,EAAE,EAAE,KAAK,EAAE,sEAAsE,EAAE;CAC1F,CAAC,EACF;IACI,IAAI,EAAE,UAAU;IAChB,WAAW,EAAE,EAAE,cAAc,EAAE,OAAO,EAAE;IACxC,OAAO,EAAE,EAAE,SAAS,EAAE,uBAAuB,EAAE;IAC/C,YAAY,EAAE,EAAE,QAAQ,EAAE,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,MAAM,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,EAAE,GAAG,OAAO,EAAE,eAAe,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC,EAAE;CAClH,CACJ,CAAC"}

package/dist/sandbox-run/sandbox-run.command.d.ts

@@ -0,0 +1,3 @@
+import { type CommandContext } from "@stricli/core";
+export declare const sandboxRunCommandCli: import("@stricli/core").Command<CommandContext>;
+//# sourceMappingURL=sandbox-run.command.d.ts.map

package/dist/sandbox-run/sandbox-run.command.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"sandbox-run.command.d.ts","sourceRoot":"","sources":["../../src/sandbox-run/sandbox-run.command.ts"],"names":[],"mappings":"AASA,OAAO,EAAgB,KAAK,cAAc,EAAE,MAAM,eAAe,CAAC;AAiBlE,eAAO,MAAM,oBAAoB,iDAgE/B,CAAC"}

package/dist/sandbox-run/sandbox-run.command.js

@@ -0,0 +1,57 @@
+import { readFileSync } from "node:fs";
+import { parseNulEnv, replayableEnv, runtimeDirectivesOf, sandboxNames, sandboxRunArgv, sandboxRunCommand, } from "@intentic/sandbox-run";
+import { buildCommand } from "@stricli/core";
+export const sandboxRunCommandCli = buildCommand({
+    docs: { brief: "Print the canonical docker-run command for a sandbox container (used by connect.sh/recreate.sh)" },
+    parameters: {
+        flags: {
+            slug: { kind: "parsed", parse: String, brief: "The sandbox slug every per-sandbox name derives from" },
+            image: { kind: "parsed", parse: String, brief: "The image to run (freshly pulled/built by the calling flow)" },
+            baseImage: {
+                kind: "parsed",
+                parse: String,
+                brief: "The base the daemon keeps composing overlays against (SANDBOX_BASE_IMAGE)",
+            },
+            environmentHash: {
+                kind: "parsed",
+                parse: String,
+                optional: true,
+                brief: "The approved overlay's sha256, when `image` was built from one (SANDBOX_ENVIRONMENT_HASH)",
+            },
+            runtime: {
+                kind: "parsed",
+                parse: String,
+                optional: true,
+                brief: "The overlay's '# intentic:runtime' directive lines, verbatim — validated against the allowlist here",
+            },
+            mounts: {
+                kind: "parsed",
+                parse: String,
+                optional: true,
+                brief: "Extra -v specs, newline-separated (the /agent-auth replay, dev compiled-tree binds)",
+            },
+            dns: {
+                kind: "parsed",
+                parse: String,
+                optional: true,
+                brief: "DNS resolvers, space-separated (fresh public resolvers dodge negatively-cached tunnel NXDOMAINs)",
+            },
+            format: { kind: "parsed", parse: String, optional: true, brief: "sh (default): one quoted command line; json: the docker argv" },
+        },
+    },
+    func(flags) {
+        const env = replayableEnv(parseNulEnv(readFileSync(0, "utf8")));
+        const run = {
+            names: sandboxNames(flags.slug),
+            image: flags.image,
+            baseImage: flags.baseImage,
+            ...(flags.environmentHash !== undefined && flags.environmentHash !== "" ? { environmentHash: flags.environmentHash } : {}),
+            env,
+            runtime: runtimeDirectivesOf(flags.runtime ?? ""),
+            mounts: (flags.mounts ?? "").split("\n").filter((mount) => mount !== ""),
+            dns: (flags.dns ?? "").split(/\s+/).filter((server) => server !== ""),
+        };
+        this.process.stdout.write(flags.format === "json" ? `${JSON.stringify(sandboxRunArgv(run))}\n` : `${sandboxRunCommand(run)}\n`);
+    },
+});
+//# sourceMappingURL=sandbox-run.command.js.map

package/dist/sandbox-run/sandbox-run.command.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sandbox-run.command.js","sourceRoot":"","sources":["../../src/sandbox-run/sandbox-run.command.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,YAAY,EAAE,MAAM,SAAS,CAAC;AACvC,OAAO,EACH,WAAW,EACX,aAAa,EACb,mBAAmB,EACnB,YAAY,EACZ,cAAc,EACd,iBAAiB,GACpB,MAAM,uBAAuB,CAAC;AAC/B,OAAO,EAAE,YAAY,EAAuB,MAAM,eAAe,CAAC;AAiBlE,MAAM,CAAC,MAAM,oBAAoB,GAAG,YAAY,CAS7C;IACC,IAAI,EAAE,EAAE,KAAK,EAAE,iGAAiG,EAAE;IAClH,UAAU,EAAE;QACR,KAAK,EAAE;YACH,IAAI,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,KAAK,EAAE,MAAM,EAAE,KAAK,EAAE,sDAAsD,EAAE;YACtG,KAAK,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,KAAK,EAAE,MAAM,EAAE,KAAK,EAAE,6DAA6D,EAAE;YAC9G,SAAS,EAAE;gBACP,IAAI,EAAE,QAAQ;gBACd,KAAK,EAAE,MAAM;gBACb,KAAK,EAAE,2EAA2E;aACrF;YACD,eAAe,EAAE;gBACb,IAAI,EAAE,QAAQ;gBACd,KAAK,EAAE,MAAM;gBACb,QAAQ,EAAE,IAAI;gBACd,KAAK,EAAE,2FAA2F;aACrG;YACD,OAAO,EAAE;gBACL,IAAI,EAAE,QAAQ;gBACd,KAAK,EAAE,MAAM;gBACb,QAAQ,EAAE,IAAI;gBACd,KAAK,EAAE,qGAAqG;aAC/G;YACD,MAAM,EAAE;gBACJ,IAAI,EAAE,QAAQ;gBACd,KAAK,EAAE,MAAM;gBACb,QAAQ,EAAE,IAAI;gBACd,KAAK,EAAE,qFAAqF;aAC/F;YACD,GAAG,EAAE;gBACD,IAAI,EAAE,QAAQ;gBACd,KAAK,EAAE,MAAM;gBACb,QAAQ,EAAE,IAAI;gBACd,KAAK,EAAE,kGAAkG;aAC5G;YACD,MAAM,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,KAAK,EAAE,MAAM,EAAE,QAAQ,EAAE,IAAI,EAAE,KAAK,EAAE,8DAA8D,EAAE;SACnI;KACJ;IACD,IAAI,CAAuB,KAAK;QAE5B,MAAM,GAAG,GAAG,aAAa,CAAC,WAAW,CAAC,YAAY,CAAC,CAAC,EAAE,MAAM,CAAC,CAAC,CAAC,CAAC;QAChE,MAAM,GAAG,GAAG;YACR,KAAK,EAAE,YAAY,CAAC,KAAK,CAAC,IAAI,CAAC;YAC/B,KAAK,EAAE,KAAK,CAAC,KAAK;YAClB,SAAS,EAAE,KAAK,CAAC,SAAS;YAC1B,GAAG,CAAC,KAAK,CAAC,eAAe,KAAK,SAAS,IAAI,KAAK,CAAC,eAAe,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,eAAe,EAAE,KAAK,CAAC,eAAe,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YAC1H,GAAG;YAGH,OAAO,EAAE,mBAAmB,CAAC,KAAK,CAAC,OAAO,IAAI,EAAE,CAAC;YACjD,MAAM,EAAE,CAAC,KAAK,CAAC,MAAM,IAAI,EAAE,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,MAAM,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,KAAK,EAAE,CAAC;YACxE,GAAG,EAAE,CAAC,KAAK,CAAC,GAAG,IAAI,EAAE,CAAC,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,MAAM,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,KAAK,EAAE,CAAC;SACxE,CAAC;QACF,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,KAAK,CAAC,MAAM,KAAK,MAAM,CAAC,CAAC,CAAC,GAAG,IAAI,CAAC,SAAS,CAAC,cAAc,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,GAAG,iBAAiB,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;IACpI,CAAC;CACJ,CAAC,CAAC"}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@intentic/cli",
-  "version": "1.159.0",
+  "version": "1.160.0",
   "description": "",
   "license": "MIT",
   "type": "module",
@@ -39,13 +39,14 @@
     "eta": "4.6.0",
     "tslib": "2.8.1",
     "zod": "4.4.3",
-    "@intentic/engine": "1.159.0",
-    "@intentic/graph": "1.159.0",
-    "@intentic/need-resolver": "1.159.0",
-    "@intentic/providers": "1.159.0",
-    "@intentic/sandbox-contract": "1.159.0",
-    "@intentic/scaffold": "1.159.0",
-    "@intentic/state-resolver": "1.159.0"
+    "@intentic/engine": "1.160.0",
+    "@intentic/need-resolver": "1.160.0",
+    "@intentic/graph": "1.160.0",
+    "@intentic/sandbox-contract": "1.160.0",
+    "@intentic/providers": "1.160.0",
+    "@intentic/sandbox-run": "0.0.0",
+    "@intentic/scaffold": "1.160.0",
+    "@intentic/state-resolver": "1.160.0"
   },
   "devDependencies": {
     "@types/node": "24.13.2",
@@ -53,10 +54,11 @@
     "@typescript/native-preview": "7.0.0-dev.20260707.2",
     "ssh2": "1.17.0",
     "testcontainers": "12.0.3",
+    "tsx": "4.22.4",
     "vitest": "4.1.9",
     "yaml": "2.9.0",
     "@intentic/dind-host": "0.0.0",
-    "@intentic/sdk": "1.159.0",
+    "@intentic/sdk": "1.160.0",
     "@intentic/tsconfig": "0.0.0"
   },
   "scripts": {