@kortix/sandbox 0.4.1 → 0.4.2

package/config/customize.sh

@@ -14,130 +14,117 @@ if [ -f "$MARKER" ]; then
     exit 0
 fi
 
-echo "[heyagi] Applying desktop customization..."
-mkdir -p "$CONFIG_DIR/.config/autostart"
-mkdir -p "$CONFIG_DIR/.local/share/konsole"
+echo "[heyagi] Applying XFCE desktop customization (Alpine)..."
 
 # ── Symlink presentations into Desktop for easy access ─────────────────────
 mkdir -p "$CONFIG_DIR/presentations"
-# Create a Desktop directory for KDE and symlink presentations into it
 mkdir -p "$CONFIG_DIR/Desktop"
 ln -sfn "$CONFIG_DIR/presentations" "$CONFIG_DIR/Desktop/presentations"
 
-# ── KDE Global: Breeze Dark ────────────────────────────────────────────────
-cat > "$CONFIG_DIR/.config/kdeglobals" << 'EOF'
-[General]
-ColorScheme=BreezeDark
-Name=Breeze Dark
-widgetStyle=Breeze
-
-[Icons]
-Theme=breeze-dark
-
-[KDE]
-LookAndFeelPackage=org.kde.breezedark.desktop
-widgetStyle=breeze
+# ── XFCE: Wallpaper ───────────────────────────────────────────────────────
+mkdir -p "$CONFIG_DIR/.config/xfce4/xfconf/xfce-perchannel-xml"
+cat > "$CONFIG_DIR/.config/xfce4/xfconf/xfce-perchannel-xml/xfce4-desktop.xml" << 'EOF'
+<?xml version="1.0" encoding="UTF-8"?>
+<channel name="xfce4-desktop" version="1.0">
+  <property name="backdrop" type="empty">
+    <property name="screen0" type="empty">
+      <property name="monitorVNC-0" type="empty">
+        <property name="workspace0" type="empty">
+          <property name="last-image" type="string" value="/usr/share/wallpapers/heyagi/wallpaper.png"/>
+          <property name="image-style" type="int" value="5"/>
+          <property name="color-style" type="int" value="0"/>
+          <property name="rgba1" type="array">
+            <value type="double" value="0.10196"/>
+            <value type="double" value="0.10588"/>
+            <value type="double" value="0.14902"/>
+            <value type="double" value="1.0"/>
+          </property>
+        </property>
+      </property>
+      <property name="monitorscreen" type="empty">
+        <property name="workspace0" type="empty">
+          <property name="last-image" type="string" value="/usr/share/wallpapers/heyagi/wallpaper.png"/>
+          <property name="image-style" type="int" value="5"/>
+          <property name="color-style" type="int" value="0"/>
+          <property name="rgba1" type="array">
+            <value type="double" value="0.10196"/>
+            <value type="double" value="0.10588"/>
+            <value type="double" value="0.14902"/>
+            <value type="double" value="1.0"/>
+          </property>
+        </property>
+      </property>
+    </property>
+  </property>
+</channel>
 EOF
 
-# ── KWin ────────────────────────────────────────────────────────────────────
-cat > "$CONFIG_DIR/.config/kwinrc" << 'EOF'
-[org.kde.kdecoration2]
-theme=Breeze
-library=org.kde.breeze
-
-[Windows]
-Placement=Centered
-
-[Desktops]
-Number=1
-Rows=1
+# ── XFCE: Dark theme (adw-gtk3-dark — Alpine's equivalent of Adwaita-dark)
+cat > "$CONFIG_DIR/.config/xfce4/xfconf/xfce-perchannel-xml/xsettings.xml" << 'EOF'
+<?xml version="1.0" encoding="UTF-8"?>
+<channel name="xsettings" version="1.0">
+  <property name="Net" type="empty">
+    <property name="ThemeName" type="string" value="adw-gtk3-dark"/>
+    <property name="IconThemeName" type="string" value="Adwaita"/>
+    <property name="CursorThemeName" type="string" value="Breeze_Light"/>
+  </property>
+  <property name="Gtk" type="empty">
+    <property name="FontName" type="string" value="Sans 10"/>
+    <property name="CursorThemeSize" type="int" value="24"/>
+  </property>
+</channel>
 EOF
 
-# ── Plasma theme ────────────────────────────────────────────────────────────
-cat > "$CONFIG_DIR/.config/plasmarc" << 'EOF'
-[Theme]
-name=breeze-dark
+# ── XFCE: Window Manager dark theme (Daloa — only xfwm4 theme on Alpine)
+cat > "$CONFIG_DIR/.config/xfce4/xfconf/xfce-perchannel-xml/xfwm4.xml" << 'EOF'
+<?xml version="1.0" encoding="UTF-8"?>
+<channel name="xfwm4" version="1.0">
+  <property name="general" type="empty">
+    <property name="theme" type="string" value="Daloa"/>
+    <property name="title_font" type="string" value="Sans Bold 9"/>
+    <property name="placement_ratio" type="int" value="50"/>
+    <property name="cycle_tabwin_mode" type="int" value="0"/>
+  </property>
+</channel>
 EOF
 
-# ── Konsole dark profile ───────────────────────────────────────────────────
-cat > "$CONFIG_DIR/.local/share/konsole/HeyAGI.profile" << 'EOF'
-[Appearance]
-ColorScheme=Breeze
-Font=Monospace,11,-1,5,50,0,0,0,0,0
-
-[General]
-Name=HeyAGI
-Parent=FALLBACK/
-
-[Scrolling]
-HistoryMode=2
+# ── XFCE: Terminal dark profile ──────────────────────────────────────────
+mkdir -p "$CONFIG_DIR/.config/xfce4/terminal"
+cat > "$CONFIG_DIR/.config/xfce4/terminal/terminalrc" << 'EOF'
+[Configuration]
+BackgroundMode=TERMINAL_BACKGROUND_TRANSPARENT
+BackgroundDarkness=0.90
+ColorForeground=#c0caf5
+ColorBackground=#1a1b26
+ColorCursor=#c0caf5
+ColorPalette=#15161e;#f7768e;#9ece6a;#e0af68;#7aa2f7;#bb9af7;#7dcfff;#a9b1d6;#414868;#f7768e;#9ece6a;#e0af68;#7aa2f7;#bb9af7;#7dcfff;#c0caf5
+FontName=Monospace 11
+MiscAlwaysShowTabs=FALSE
+MiscBordersDefault=TRUE
+MiscShowUnsafePasteDialog=FALSE
+ScrollingUnlimited=TRUE
 EOF
 
-cat > "$CONFIG_DIR/.config/konsolerc" << 'EOF'
-[Desktop Entry]
-DefaultProfile=HeyAGI.profile
-
-[MainWindow]
-MenuBar=Disabled
-ToolBarsMovable=Disabled
+# ── GTK dark theme (fallback for GTK2 apps) ───────────────────────────────
+cat > "$CONFIG_DIR/.gtkrc-2.0" << 'EOF'
+gtk-theme-name="adw-gtk3-dark"
+gtk-icon-theme-name="Adwaita"
+gtk-font-name="Sans 10"
+gtk-cursor-theme-name="Breeze_Light"
 EOF
 
-# ── Autostart: apply wallpaper + launcher icon after KDE session loads ──────
-cat > "$CONFIG_DIR/.config/autostart/heyagi-desktop.desktop" << 'EOF'
-[Desktop Entry]
-Type=Application
-Name=HeyAGI Desktop Setup
-Exec=/usr/share/wallpapers/heyagi/apply-desktop.sh
-X-KDE-autostart-phase=2
+mkdir -p "$CONFIG_DIR/.config/gtk-3.0"
+cat > "$CONFIG_DIR/.config/gtk-3.0/settings.ini" << 'EOF'
+[Settings]
+gtk-theme-name=adw-gtk3-dark
+gtk-icon-theme-name=Adwaita
+gtk-font-name=Sans 10
+gtk-application-prefer-dark-theme=true
+gtk-cursor-theme-name=Breeze_Light
 EOF
 
-cat > /usr/share/wallpapers/heyagi/apply-desktop.sh << 'SCRIPT'
-#!/bin/bash
-sleep 5
-
-plasma-apply-wallpaperimage /usr/share/wallpapers/heyagi/wallpaper.png
-
-PLASMA_RC="$HOME/.config/plasma-org.kde.plasma.desktop-appletsrc"
-ICON_PATH="/usr/share/icons/heyagi/kortix-symbol-white.svg"
-
-if [ -f "$PLASMA_RC" ]; then
-    # Find the kickoff applet's [Configuration][General] section and inject icon
-    # Get the containment/applet IDs for kickoff
-    KICKOFF_SECTION=$(grep -B3 "plugin=org.kde.plasma.kickoff" "$PLASMA_RC" | grep "^\[Containments\]" | tail -1)
-    
-    if [ -n "$KICKOFF_SECTION" ]; then
-        # Build the [Configuration][General] section name
-        GENERAL_SECTION="${KICKOFF_SECTION%]}][Configuration][General]"
-        
-        if grep -q "$(echo "$GENERAL_SECTION" | sed 's/\[/\\[/g; s/\]/\\]/g')" "$PLASMA_RC"; then
-            # Section exists -- replace or add icon line
-            ESCAPED=$(echo "$GENERAL_SECTION" | sed 's/\[/\\[/g; s/\]/\\]/g')
-            if grep -A10 "$ESCAPED" "$PLASMA_RC" | grep -q "^icon="; then
-                sed -i "/$ESCAPED/,/^\[/{s|^icon=.*|icon=$ICON_PATH|}" "$PLASMA_RC"
-            else
-                sed -i "/$ESCAPED/a icon=$ICON_PATH" "$PLASMA_RC"
-            fi
-        else
-            # Section doesn't exist -- create it
-            CONF_SECTION="${KICKOFF_SECTION%]}][Configuration]"
-            ESCAPED_CONF=$(echo "$CONF_SECTION" | sed 's/\[/\\[/g; s/\]/\\]/g')
-            sed -i "/$ESCAPED_CONF/,/^\[/{/^\[.*\]/!b;i\\${GENERAL_SECTION}\nicon=$ICON_PATH
-            }" "$PLASMA_RC"
-        fi
-    fi
-    
-    # Restart plasmashell to pick up icon change
-    kquitapp5 plasmashell 2>/dev/null
-    sleep 2
-    kstart5 plasmashell 2>/dev/null &
-fi
-SCRIPT
-chmod +x /usr/share/wallpapers/heyagi/apply-desktop.sh
-
 # ── Fix ownership ──────────────────────────────────────────────────────────
-# Give abc full ownership of everything under /workspace so opencode and its
-# agents can freely create directories and files (presentations, output, etc.)
 chown -R abc:abc "$CONFIG_DIR" 2>/dev/null
 
 touch "$MARKER"
-echo "[heyagi] Customization complete."
+echo "[heyagi] XFCE customization complete."

package/config/kortix-env-setup.sh

@@ -12,11 +12,11 @@ if [ "$ENV_MODE" = "cloud" ] || [ "$ENV_MODE" = "production" ]; then
         echo "[Kortix] Services will still start; set KORTIX_API_URL later to enable model routing"
     else
         # Write env overrides that s6 services will inherit via with-contenv
-        printf '%s' "${KORTIX_API_URL}/tavily"    > /var/run/s6/container_environment/TAVILY_API_URL
-        printf '%s' "${KORTIX_API_URL}/serper"    > /var/run/s6/container_environment/SERPER_API_URL
-        printf '%s' "${KORTIX_API_URL}/firecrawl" > /var/run/s6/container_environment/FIRECRAWL_API_URL
-        printf '%s' "${KORTIX_API_URL}/replicate" > /var/run/s6/container_environment/REPLICATE_API_URL
-        printf '%s' "${KORTIX_API_URL}/context7"  > /var/run/s6/container_environment/CONTEXT7_API_URL
+        printf '%s' "${KORTIX_API_URL}/tavily"    > /run/s6/container_environment/TAVILY_API_URL
+        printf '%s' "${KORTIX_API_URL}/serper"    > /run/s6/container_environment/SERPER_API_URL
+        printf '%s' "${KORTIX_API_URL}/firecrawl" > /run/s6/container_environment/FIRECRAWL_API_URL
+        printf '%s' "${KORTIX_API_URL}/replicate" > /run/s6/container_environment/REPLICATE_API_URL
+        printf '%s' "${KORTIX_API_URL}/context7"  > /run/s6/container_environment/CONTEXT7_API_URL
 
         echo "[Kortix] SDK URLs routed through ${KORTIX_API_URL}"
     fi

package/kortix-master/src/index.ts

@@ -18,8 +18,18 @@ await secretStore.loadIntoProcessEnv()
 app.use('*', logger())
 app.use('*', cors())
 
-// Health check
-app.get('/kortix/health', (c) => c.json({ status: 'ok' }))
+// Health check — includes current sandbox version
+app.get('/kortix/health', async (c) => {
+  let version = '0.0.0'
+  try {
+    const file = Bun.file('/opt/kortix/.version')
+    if (await file.exists()) {
+      const data = await file.json()
+      version = data.version || '0.0.0'
+    }
+  } catch {}
+  return c.json({ status: 'ok', version })
+})
 
 // Update check — /kortix/update and /kortix/update/status
 app.route('/kortix/update', updateRouter)

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@kortix/sandbox",
-  "version": "0.4.1",
+  "version": "0.4.2",
   "description": "Kortix sandbox runtime — kortix-master, opencode config/agents/skills, and dependencies",
   "private": false,
   "scripts": {

package/patch-agent-browser.js

@@ -1,9 +1,16 @@
 const fs = require('fs');
+const { execSync } = require('child_process');
+
+// Auto-detect npm global modules directory
+const npmGlobalRoot = execSync('npm root -g').toString().trim();
+console.log('npm global root:', npmGlobalRoot);
+
+const agentBrowserDir = npmGlobalRoot + '/agent-browser/dist';
 
 // ── Patch 1: handleLaunch env var fallbacks ─────────────────────────────────
 // The Rust CLI sends a launch command to the Node.js daemon but doesn't
 // include executablePath/args/profile in the JSON. We inject env var fallbacks.
-const actionsFile = '/usr/lib/node_modules/agent-browser/dist/actions.js';
+const actionsFile = agentBrowserDir + '/actions.js';
 let actions = fs.readFileSync(actionsFile, 'utf8');
 
 const oldLaunch = [
@@ -44,7 +51,7 @@ console.log('PATCH 2 SKIPPED - upstream already allows localhost origins');
 // When AGENT_BROWSER_STREAM_PORT is set globally, ALL sessions try to bind
 // that port. Named sessions crash with EADDRINUSE. Fix: only the default
 // session uses the env var port; named sessions use the hash-based port.
-const daemonFile = '/usr/lib/node_modules/agent-browser/dist/daemon.js';
+const daemonFile = agentBrowserDir + '/daemon.js';
 let daemon = fs.readFileSync(daemonFile, 'utf8');
 
 const oldStreamPort = `const streamPort = options?.streamPort ??
@@ -85,7 +92,7 @@ console.log('PATCH 4 OK - auto-launch profile only for default session');
 // When using launchPersistentContext (profile mode), this.browser is null.
 // newTab() checks `!this.browser` and throws "Browser not launched".
 // Fix: also check this.contexts.length > 0 as an alternative.
-const browserFile = '/usr/lib/node_modules/agent-browser/dist/browser.js';
+const browserFile = agentBrowserDir + '/browser.js';
 let browser = fs.readFileSync(browserFile, 'utf8');
 
 const oldNewTabCheck = "if (!this.browser || this.contexts.length === 0) {\n            throw new Error('Browser not launched');\n        }\n        // Invalidate CDP session since we're switching to a new page";

package/services/KORTIX-presentation-viewer/run

@@ -1,37 +0,0 @@
-#!/usr/bin/with-contenv bash
-# KORTIX Presentation Viewer — s6 service
-#
-# Watches for presentations in /workspace/presentations/ and serves
-# the most recently updated one on port 3210.
-# If no presentation exists yet, waits until one appears.
-
-PRES_ROOT="/workspace/presentations"
-VIEWER="/opt/opencode/skills/KORTIX-presentation-viewer/serve.ts"
-PORT=3210
-
-wait_for_presentation() {
-    while true; do
-        if [ -d "$PRES_ROOT" ]; then
-            LATEST=$(find "$PRES_ROOT" -maxdepth 2 -name "metadata.json" -newer /tmp/.pv-last-check 2>/dev/null | head -1)
-            if [ -z "$LATEST" ]; then
-                LATEST=$(find "$PRES_ROOT" -maxdepth 2 -name "metadata.json" 2>/dev/null | head -1)
-            fi
-            if [ -n "$LATEST" ]; then
-                dirname "$LATEST"
-                return 0
-            fi
-        fi
-        sleep 3
-    done
-}
-
-touch /tmp/.pv-last-check
-
-echo "[KORTIX-pv] Waiting for a presentation in $PRES_ROOT ..."
-PRES_DIR=$(wait_for_presentation)
-echo "[KORTIX-pv] Serving: $PRES_DIR on port $PORT"
-
-touch /tmp/.pv-last-check
-
-exec s6-setuidgid abc \
-    /usr/local/bin/bun run "$VIEWER" "$PRES_DIR"

package/services/agent-browser-viewer/run

@@ -1,48 +0,0 @@
-#!/usr/bin/with-contenv bash
-# Agent Browser Viewer — s6 service
-#
-# Serves the browser viewer UI on port 9224.
-# - GET /           → viewer HTML
-# - GET /sessions   → JSON list of active sessions + stream ports
-
-echo "[agent-browser-viewer] Starting viewer on port 9224"
-
-exec s6-setuidgid abc \
-  node -e '
-    const http = require("http");
-    const fs = require("fs");
-    const path = require("path");
-
-    const html = fs.readFileSync("/opt/agent-browser-viewer/index.html");
-    const socketDir = process.env.AGENT_BROWSER_SOCKET_DIR || "/workspace/.agent-browser";
-
-    function getSessions() {
-      try {
-        const files = fs.readdirSync(socketDir);
-        const sessions = [];
-        for (const f of files) {
-          if (f.endsWith(".stream")) {
-            const name = f.replace(".stream", "");
-            const port = parseInt(fs.readFileSync(path.join(socketDir, f), "utf8").trim(), 10);
-            const hasSock = files.includes(name + ".sock");
-            if (port > 0 && hasSock) {
-              sessions.push({ name, port });
-            }
-          }
-        }
-        return sessions;
-      } catch(e) { return []; }
-    }
-
-    http.createServer((req, res) => {
-      if (req.url === "/sessions") {
-        res.writeHead(200, { "Content-Type": "application/json", "Cache-Control": "no-cache" });
-        res.end(JSON.stringify(getSessions()));
-      } else {
-        res.writeHead(200, { "Content-Type": "text/html", "Cache-Control": "no-cache" });
-        res.end(html);
-      }
-    }).listen(9224, "0.0.0.0", () => {
-      console.log("[agent-browser-viewer] Ready at http://0.0.0.0:9224");
-    });
-  '

package/services/kortix-master/run

@@ -1,16 +0,0 @@
-#!/usr/bin/with-contenv bash
-# Kortix Master — s6 service
-#
-# Reverse proxy that sits in front of OpenCode on port 8000.
-# All external traffic enters through Kortix Master, which proxies
-# to the OpenCode API server on localhost:4096.
-
-echo "[kortix-master] Starting on port 8000, proxying to OpenCode at localhost:4096"
-
-exec s6-setuidgid abc \
-  env HOME=/workspace \
-      KORTIX_MASTER_PORT=8000 \
-      OPENCODE_HOST=localhost \
-      OPENCODE_PORT=4096 \
-      PATH="/opt/bun/bin:/usr/local/bin:/usr/bin:/bin" \
-  /opt/bun/bin/bun run /opt/kortix-master/src/index.ts

package/services/lss-sync/run

@@ -1,22 +0,0 @@
-#!/usr/bin/with-contenv bash
-# lss-sync — File-watcher daemon that keeps the semantic search index in sync.
-#
-# Uses watchdog (inotify/FSEvents) to detect file changes in real time and
-# triggers re-indexing with debounce. Changes are picked up within seconds.
-#
-# Watches:
-#   /workspace       — User files and projects
-#   /workspace/.kortix — Agent memory
-
-exec s6-setuidgid abc \
-  env HOME=/workspace \
-      OPENAI_API_KEY="${OPENAI_API_KEY}" \
-      LSS_DIR=/workspace/.lss \
-      PATH="/lsiopy/bin:/usr/local/bin:/usr/bin:/bin" \
-  lss-sync \
-    --watch /workspace \
-    --exclude node_modules \
-    --exclude .git \
-    --exclude __pycache__ \
-    --startup-delay 15 \
-    --debounce 2

package/services/opencode-serve/run

@@ -1,25 +0,0 @@
-#!/usr/bin/with-contenv bash
-# OpenCode API Server — s6 service
-#
-# Runs `opencode serve` on port 4096 (internal only, proxied by kortix-master).
-# This is the headless API server, distinct from `opencode web` (the Web UI).
-
-# Wait a moment for filesystem to settle
-sleep 3
-
-cd /workspace
-
-# Ensure OpenCode data dirs exist and are owned by abc (guards against
-# Daytona race conditions where /workspace ownership may shift after startup.sh)
-mkdir -p /workspace/.local/share/opencode/log \
-         /workspace/.local/share/opencode/storage \
-         /workspace/.local/share/opencode/snapshot
-chown -R abc:abc /workspace/.local/share/opencode
-
-echo "[opencode-serve] Starting OpenCode API server on port 4096"
-
-exec s6-setuidgid abc \
-  env HOME=/workspace \
-      OPENCODE_CONFIG_DIR=/opt/opencode \
-      PATH="/opt/bun/bin:/usr/local/bin:/usr/bin:/bin" \
-  opencode serve --port 4096 --hostname 0.0.0.0

package/services/opencode-web/run

@@ -1,21 +0,0 @@
-#!/usr/bin/with-contenv bash
-# OpenCode Web UI — serves the web interface on port 3111
-#
-# Runs `opencode web` headless so it's accessible via the browser at
-# http://localhost:3111 (mapped from the container).
-
-cd /workspace
-
-# Ensure OpenCode data dirs exist and are owned by abc
-mkdir -p /workspace/.local/share/opencode/log \
-         /workspace/.local/share/opencode/storage \
-         /workspace/.local/share/opencode/snapshot
-chown -R abc:abc /workspace/.local/share/opencode
-
-exec s6-setuidgid abc \
-  env HOME=/workspace \
-      OPENCODE_CONFIG_DIR=/opt/opencode \
-      OPENCODE_SERVER_USERNAME= \
-      OPENCODE_SERVER_PASSWORD= \
-      PATH="/opt/bun/bin:/usr/local/bin:/usr/bin:/bin" \
-  opencode web --port 3111 --hostname 0.0.0.0