@kokorolx/ai-sandbox-wrapper 3.1.0 → 3.1.1

package/bin/ai-run

@@ -43,7 +43,7 @@ Examples:
   ai-run opencode web -e 4096             # Run OpenCode web with port exposed
   ai-run opencode web -p secret           # Run with password
   ai-run opencode --shell                 # Start shell, run tool manually
-  ai-run aider -n mynetwork               # Connect to Docker network
+  # ai-run aider -n mynetwork               # Connect to Docker network
   ai-run opencode --git-fetch             # Git fetch only (no push)
 
 Documentation: https://github.com/kokorolx/ai-sandbox-wrapper
@@ -663,26 +663,26 @@ done < "$WORKSPACES_FILE"
 # Maps tool name to space-separated config paths (relative to $HOME)
 get_tool_configs() {
   case "$1" in
-    amp)       echo ".config/amp .local/share/amp" ;;
+    # amp)       echo ".config/amp .local/share/amp" ;;
     opencode)  echo ".config/opencode .local/share/opencode" ;;
     claude)    echo ".claude" ;;
-    openclaw)  echo ".openclaw" ;;
-    droid)     echo ".config/droid" ;;
-    qoder)     echo ".config/qoder" ;;
-    auggie)    echo ".config/auggie" ;;
-    codebuddy) echo ".config/codebuddy" ;;
-    jules)     echo ".config/jules" ;;
-    shai)      echo ".config/shai" ;;
-    gemini)    echo ".config/gemini" ;;
-    aider)     echo ".config/aider .aider" ;;
-    kilo)      echo ".config/kilo" ;;
+    # openclaw)  echo ".openclaw" ;;
+    # droid)     echo ".config/droid" ;;
+    # qoder)     echo ".config/qoder" ;;
+    # auggie)    echo ".config/auggie" ;;
+    # codebuddy) echo ".config/codebuddy" ;;
+    # jules)     echo ".config/jules" ;;
+    # shai)      echo ".config/shai" ;;
+    # gemini)    echo ".config/gemini" ;;
+    # aider)     echo ".config/aider .aider" ;;
+    # kilo)      echo ".config/kilo" ;;
     codex)     echo ".config/codex" ;;
-    qwen)      echo ".config/qwen" ;;
+    # qwen)      echo ".config/qwen" ;;
   esac
 }
 
 # All known tools (for fallback)
-ALL_KNOWN_TOOLS="amp opencode claude openclaw droid qoder auggie codebuddy jules shai gemini aider kilo codex qwen"
+ALL_KNOWN_TOOLS="opencode claude codex"
 
 # Get list of installed tools from config.json, fallback to all known tools
 get_installed_tools() {
@@ -2296,9 +2296,27 @@ run_with_capture() {
   if [[ $exit_code -ne 0 ]] && grep -Eqi "$REPAIR_PATTERN" "$err_file"; then
     cat "$err_file" >&2
     echo "⚠️  Detected nano-brain native module issue."
-    echo "🔧 Running automatic repair (clearing npx/node-gyp caches)..."
+    echo "🔧 Running automatic repair (rebuilding native modules for container arch)..."
     rm -rf /home/agent/.npm/_npx /home/agent/.cache/node-gyp 2>/dev/null || true
     npm cache clean --force >/dev/null 2>&1 || true
+    # Root cause: host macOS prebuilds are wrong arch for Linux container.
+    # Fix: delete wrong-arch prebuilds and reinstall to compile from source.
+    local NB_DIR
+    NB_DIR=$(dirname "$(dirname "$(readlink -f "$(which npx)")")")/lib/node_modules/nano-brain 2>/dev/null || true
+    if [[ -z "$NB_DIR" || ! -d "$NB_DIR" ]]; then
+      # npx cache location
+      NB_DIR=$(find /home/agent/.npm/_npx -maxdepth 4 -name "nano-brain" -type d 2>/dev/null | head -1)
+    fi
+    if [[ -n "$NB_DIR" && -d "$NB_DIR/node_modules" ]]; then
+      echo "  📦 Rebuilding tree-sitter in $NB_DIR..."
+      for pkg in tree-sitter-typescript tree-sitter-javascript tree-sitter-python; do
+        local prebuild_dir="$NB_DIR/node_modules/$pkg/prebuilds/linux-arm64"
+        if [[ -d "$prebuild_dir" ]]; then
+          rm -rf "$prebuild_dir"
+        fi
+      done
+      (cd "$NB_DIR" && npm rebuild tree-sitter tree-sitter-typescript tree-sitter-javascript tree-sitter-python 2>/dev/null) || true
+    fi
     echo "🔁 Retrying nano-brain command once..."
     set +e
     "${ORIG_CMD[@]}"
@@ -2344,9 +2362,26 @@ nano_brain_shell_wrapper() {
   if [[ $exit_code -ne 0 ]] && grep -Eqi "$REPAIR_PATTERN" "$err_file"; then
     cat "$err_file" >&2
     echo "⚠️  Detected nano-brain native module issue."
-    echo "🔧 Running automatic repair (clearing npx/node-gyp caches)..."
+    echo "🔧 Running automatic repair (rebuilding native modules for container arch)..."
     rm -rf /home/agent/.npm/_npx /home/agent/.cache/node-gyp 2>/dev/null || true
     npm cache clean --force >/dev/null 2>&1 || true
+    # Root cause: host macOS prebuilds are wrong arch for Linux container.
+    # Fix: delete wrong-arch prebuilds and reinstall to compile from source.
+    local NB_DIR
+    NB_DIR=$(dirname "$(dirname "$(readlink -f "$(which npx)")")")/lib/node_modules/nano-brain 2>/dev/null || true
+    if [[ -z "$NB_DIR" || ! -d "$NB_DIR" ]]; then
+      NB_DIR=$(find /home/agent/.npm/_npx -maxdepth 4 -name "nano-brain" -type d 2>/dev/null | head -1)
+    fi
+    if [[ -n "$NB_DIR" && -d "$NB_DIR/node_modules" ]]; then
+      echo "  📦 Rebuilding tree-sitter in $NB_DIR..."
+      for pkg in tree-sitter-typescript tree-sitter-javascript tree-sitter-python; do
+        local prebuild_dir="$NB_DIR/node_modules/$pkg/prebuilds/linux-arm64"
+        if [[ -d "$prebuild_dir" ]]; then
+          rm -rf "$prebuild_dir"
+        fi
+      done
+      (cd "$NB_DIR" && npm rebuild tree-sitter tree-sitter-typescript tree-sitter-javascript tree-sitter-python 2>/dev/null) || true
+    fi
     echo "🔁 Retrying nano-brain command once..."
     "${ORIG_CMD[@]}"
     local retry_code=$?
@@ -2406,7 +2441,7 @@ elif [[ "$SHELL_MODE" == "true" || -z "$TOOL" ]]; then
     # Shell mode without tool (ai-run with no args)
     DOCKER_COMMAND=(
       "-c"
-      "echo ''; echo '🚀 AI Sandbox - Interactive Shell'; echo '━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━'; echo ''; echo 'Installed tools: ${INSTALLED_TOOLS_MSG:-unknown}'; echo ''; echo 'Run any tool by name: claude, opencode, gemini, etc.'; echo 'Exit: exit or Ctrl+D'; echo ''; echo 'Enhancement tools: specify, uipro, openspec, rtk'; echo '━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━'; echo ''; exec bash"
+      "echo ''; echo '🚀 AI Sandbox - Interactive Shell'; echo '━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━'; echo ''; echo 'Installed tools: ${INSTALLED_TOOLS_MSG:-unknown}'; echo ''; echo 'Run any tool by name: claude, opencode, codex, etc.'; echo 'Exit: exit or Ctrl+D'; echo ''; echo 'Enhancement tools: specify, uipro, openspec, rtk'; echo '━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━'; echo ''; exec bash"
     )
   fi
 else
@@ -2444,7 +2479,7 @@ if [[ -z "$PLATFORM" ]]; then
   esac
 fi
 
-# Terminal size for TUI apps (important for opencode, aider, etc.)
+# Terminal size for TUI apps (important for opencode, etc.)
 TERMINAL_SIZE=""
 if [[ -n "$TTY_FLAGS" ]]; then
   # Get current terminal size
@@ -2486,65 +2521,65 @@ DISPLAY_FLAGS=$(detect_display_config)
 # ============================================================================
 # OPENCLAW DOCKER-COMPOSE MODE
 # ============================================================================
-if [[ "$TOOL" == "openclaw" ]]; then
-  OPENCLAW_REPO_DIR="$HOME/.ai-sandbox/tools/openclaw/repo"
-
-  if [[ ! -d "$OPENCLAW_REPO_DIR" ]]; then
-    echo "❌ ERROR: OpenClaw repository not found at $OPENCLAW_REPO_DIR"
-    echo "   Run: npx @kokorolx/ai-sandbox-wrapper setup"
-    exit 1
-  fi
-
-  cd "$OPENCLAW_REPO_DIR"
-
-  OPENCLAW_COMPOSE_FILE="$OPENCLAW_REPO_DIR/docker-compose.yml"
-  OPENCLAW_OVERRIDE_FILE="$OPENCLAW_REPO_DIR/docker-compose.override.yml"
-
-  echo "🔄 Generating OpenClaw docker-compose override..."
-
-  cat > "$OPENCLAW_OVERRIDE_FILE" <<EOF
-services:
-  openclaw-gateway:
-    environment:
-      HOME: /home/node
-      OPENCLAW_GATEWAY_TOKEN: \${OPENCLAW_GATEWAY_TOKEN:-}
-    volumes:
-      - $HOME/.openclaw:/home/node/.openclaw
-EOF
-
-  for workspace in "${WORKSPACES[@]}"; do
-    echo "      - $workspace:$workspace" >> "$OPENCLAW_OVERRIDE_FILE"
-  done
-
-  cat >> "$OPENCLAW_OVERRIDE_FILE" <<EOF
-    ports:
-      - "18789:18789"
-      - "18790:18790"
-    working_dir: $CURRENT_DIR
-EOF
-
-  if [[ -n "$NETWORK_OPTIONS" ]]; then
-    echo "    networks:" >> "$OPENCLAW_OVERRIDE_FILE"
-    for net in ${DOCKER_NETWORKS//,/ }; do
-      echo "      - $net" >> "$OPENCLAW_OVERRIDE_FILE"
-    done
-    echo "" >> "$OPENCLAW_OVERRIDE_FILE"
-    echo "networks:" >> "$OPENCLAW_OVERRIDE_FILE"
-    for net in ${DOCKER_NETWORKS//,/ }; do
-      echo "  $net:" >> "$OPENCLAW_OVERRIDE_FILE"
-      echo "    external: true" >> "$OPENCLAW_OVERRIDE_FILE"
-    done
-  fi
-
-  echo "🚀 Starting OpenClaw with docker-compose..."
-  echo "🌐 Gateway: http://localhost:18789"
-  echo "🌐 Bridge: http://localhost:18790"
-  echo ""
-
-  exec docker compose -f "$OPENCLAW_COMPOSE_FILE" -f "$OPENCLAW_OVERRIDE_FILE" \
-    --env-file "$ENV_FILE" \
-    up --remove-orphans
-fi
+# if [[ "$TOOL" == "openclaw" ]]; then
+#   OPENCLAW_REPO_DIR="$HOME/.ai-sandbox/tools/openclaw/repo"
+#
+#   if [[ ! -d "$OPENCLAW_REPO_DIR" ]]; then
+#     echo "❌ ERROR: OpenClaw repository not found at $OPENCLAW_REPO_DIR"
+#     echo "   Run: npx @kokorolx/ai-sandbox-wrapper setup"
+#     exit 1
+#   fi
+#
+#   cd "$OPENCLAW_REPO_DIR"
+#
+#   OPENCLAW_COMPOSE_FILE="$OPENCLAW_REPO_DIR/docker-compose.yml"
+#   OPENCLAW_OVERRIDE_FILE="$OPENCLAW_REPO_DIR/docker-compose.override.yml"
+#
+#   echo "🔄 Generating OpenClaw docker-compose override..."
+#
+#   cat > "$OPENCLAW_OVERRIDE_FILE" <<EOF
+# services:
+#   openclaw-gateway:
+#     environment:
+#       HOME: /home/node
+#       OPENCLAW_GATEWAY_TOKEN: \${OPENCLAW_GATEWAY_TOKEN:-}
+#     volumes:
+#       - $HOME/.openclaw:/home/node/.openclaw
+# EOF
+#
+#   for workspace in "${WORKSPACES[@]}"; do
+#     echo "      - $workspace:$workspace" >> "$OPENCLAW_OVERRIDE_FILE"
+#   done
+#
+#   cat >> "$OPENCLAW_OVERRIDE_FILE" <<EOF
+#     ports:
+#       - "18789:18789"
+#       - "18790:18790"
+#     working_dir: $CURRENT_DIR
+# EOF
+#
+#   if [[ -n "$NETWORK_OPTIONS" ]]; then
+#     echo "    networks:" >> "$OPENCLAW_OVERRIDE_FILE"
+#     for net in ${DOCKER_NETWORKS//,/ }; do
+#       echo "      - $net" >> "$OPENCLAW_OVERRIDE_FILE"
+#     done
+#     echo "" >> "$OPENCLAW_OVERRIDE_FILE"
+#     echo "networks:" >> "$OPENCLAW_OVERRIDE_FILE"
+#     for net in ${DOCKER_NETWORKS//,/ }; do
+#       echo "  $net:" >> "$OPENCLAW_OVERRIDE_FILE"
+#       echo "    external: true" >> "$OPENCLAW_OVERRIDE_FILE"
+#     done
+#   fi
+#
+#   echo "🚀 Starting OpenClaw with docker-compose..."
+#   echo "🌐 Gateway: http://localhost:18789"
+#   echo "🌐 Bridge: http://localhost:18790"
+#   echo ""
+#
+#   exec docker compose -f "$OPENCLAW_COMPOSE_FILE" -f "$OPENCLAW_OVERRIDE_FILE" \
+#     --env-file "$ENV_FILE" \
+#     up --remove-orphans
+# fi
 
 docker run $CONTAINER_NAME --rm $TTY_FLAGS \
   --init \

package/dockerfiles/base/Dockerfile

@@ -6,7 +6,7 @@ FROM node:22-bookworm-slim
 
 ARG AGENT_UID=1001
 
-RUN apt-get update && apt-get install -y --no-install-recommends     git     curl     ssh     ca-certificates     jq     python3     python3-pip     python3-venv     python3-dev     python3-setuptools     build-essential     libopenblas-dev     pipx     unzip     xclip     wl-clipboard     ripgrep     tmux     fd-find     sqlite3     poppler-utils     qpdf     tesseract-ocr     && curl -LsSf https://astral.sh/uv/install.sh | UV_INSTALL_DIR=/usr/local/bin sh     && rm -rf /var/lib/apt/lists/*     && pipx ensurepath
+RUN apt-get update && apt-get install -y --no-install-recommends     git     curl     ssh     ca-certificates     jq     python3     python3-pip     python3-venv     python3-dev     python3-setuptools     build-essential     libopenblas-dev     pipx     unzip     xclip     wl-clipboard     ripgrep     tmux     fd-find     sqlite3     vim-tiny     poppler-utils     qpdf     tesseract-ocr     && curl -LsSf https://astral.sh/uv/install.sh | UV_INSTALL_DIR=/usr/local/bin sh     && rm -rf /var/lib/apt/lists/*     && pipx ensurepath
 
 # Install Python PDF processing tools for PDF skill
 RUN pip3 install --no-cache-dir --break-system-packages pypdf pdfplumber reportlab pytesseract pdf2image

package/dockerfiles/sandbox/Dockerfile

@@ -6,7 +6,7 @@ FROM node:22-bookworm-slim
 
 ARG AGENT_UID=1001
 
-RUN apt-get update && apt-get install -y --no-install-recommends     git     curl     ssh     ca-certificates     jq     python3     python3-pip     python3-venv     python3-dev     python3-setuptools     build-essential     libopenblas-dev     pipx     unzip     xclip     wl-clipboard     ripgrep     tmux     fd-find     sqlite3     poppler-utils     qpdf     tesseract-ocr     && curl -LsSf https://astral.sh/uv/install.sh | UV_INSTALL_DIR=/usr/local/bin sh     && rm -rf /var/lib/apt/lists/*     && pipx ensurepath
+RUN apt-get update && apt-get install -y --no-install-recommends     git     curl     ssh     ca-certificates     jq     python3     python3-pip     python3-venv     python3-dev     python3-setuptools     build-essential     libopenblas-dev     pipx     unzip     xclip     wl-clipboard     ripgrep     tmux     fd-find     sqlite3     vim-tiny     poppler-utils     qpdf     tesseract-ocr     && curl -LsSf https://astral.sh/uv/install.sh | UV_INSTALL_DIR=/usr/local/bin sh     && rm -rf /var/lib/apt/lists/*     && pipx ensurepath
 
 # Install Python PDF processing tools for PDF skill
 RUN pip3 install --no-cache-dir --break-system-packages pypdf pdfplumber reportlab pytesseract pdf2image

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@kokorolx/ai-sandbox-wrapper",
-  "version": "3.1.0",
+  "version": "3.1.1",
   "description": "Docker-based security sandbox for AI coding agents. Isolate Claude, Gemini, Aider, and other AI tools from your host system.",
   "keywords": [
     "ai",

package/setup.sh

@@ -281,8 +281,9 @@ echo "📁 Legacy workspaces file: $WORKSPACES_FILE"
 WORKSPACE="${WORKSPACES[0]}"
 
 # Tool definitions
-TOOL_OPTIONS="amp,opencode,openclaw,droid,claude,gemini,kilo,qwen,codex,qoder,auggie,codebuddy,jules,shai"
-TOOL_DESCS="AI coding assistant from @sourcegraph/amp,Open-source coding tool from opencode-ai,OpenClaw AI gateway (Docker Compose),Factory CLI from factory.ai,Claude Code CLI from Anthropic,Google Gemini CLI (free tier),AI pair programmer (Git-native),Kilo Code (500+ models),Alibaba Qwen CLI (1M context),OpenAI Codex terminal agent,Qoder AI CLI assistant,Augment Auggie CLI,Tencent CodeBuddy CLI,Google Jules CLI,OVHcloud SHAI agent"
+# DISABLED: amp,openclaw,droid,gemini,kilo,qwen,qoder,auggie,codebuddy,jules,shai
+TOOL_OPTIONS="opencode,claude,codex"
+TOOL_DESCS="Open-source coding tool from opencode-ai,Claude Code CLI from Anthropic,OpenAI Codex terminal agent"
 
 # Pre-select previously installed tools
 PRESELECTED_TOOLS=""
@@ -303,7 +304,7 @@ echo "Installing tools: ${TOOLS[*]}"
 
 CONTAINERIZED_TOOLS=()
 for tool in "${TOOLS[@]}"; do
-  if [[ "$tool" =~ ^(amp|opencode|openclaw|claude|aider|droid|gemini|kilo|qwen|codex|qoder|auggie|codebuddy|jules|shai)$ ]]; then
+  if [[ "$tool" =~ ^(opencode|claude|codex)$ ]]; then
     CONTAINERIZED_TOOLS+=("$tool")
   fi
 done