@kortix/sandbox 0.4.1

package/patch-agent-browser.js

@@ -0,0 +1,100 @@
+const fs = require('fs');
+
+// ── Patch 1: handleLaunch env var fallbacks ─────────────────────────────────
+// The Rust CLI sends a launch command to the Node.js daemon but doesn't
+// include executablePath/args/profile in the JSON. We inject env var fallbacks.
+const actionsFile = '/usr/lib/node_modules/agent-browser/dist/actions.js';
+let actions = fs.readFileSync(actionsFile, 'utf8');
+
+const oldLaunch = [
+  'async function handleLaunch(command, browser) {',
+  '    await browser.launch(command);',
+  '    return successResponse(command.id, { launched: true });',
+  '}',
+].join('\n');
+
+const newLaunch = [
+  'async function handleLaunch(command, browser) {',
+  '    if (!command.executablePath && process.env.AGENT_BROWSER_EXECUTABLE_PATH) command.executablePath = process.env.AGENT_BROWSER_EXECUTABLE_PATH;',
+  '    var _isPrimary = (process.env.AGENT_BROWSER_SESSION || "default") === (process.env.AGENT_BROWSER_PRIMARY_SESSION || process.env.AGENT_BROWSER_SESSION || "default");',
+  '    if (!_isPrimary) { delete command.profile; } else if (!command.profile && process.env.AGENT_BROWSER_PROFILE) { command.profile = process.env.AGENT_BROWSER_PROFILE; }',
+  '    if (!command.args && process.env.AGENT_BROWSER_ARGS) command.args = process.env.AGENT_BROWSER_ARGS.split(/[,]/).map(function(a){return a.trim()}).filter(Boolean);',
+  '    if (command.headless === undefined && process.env.AGENT_BROWSER_HEADED === "1") command.headless = false;',
+  '    if (!command.userAgent && process.env.AGENT_BROWSER_USER_AGENT) command.userAgent = process.env.AGENT_BROWSER_USER_AGENT;',
+  '    if (!command.proxy && process.env.AGENT_BROWSER_PROXY) command.proxy = { server: process.env.AGENT_BROWSER_PROXY };',
+  '    if (!command.viewport) command.viewport = { width: 1920, height: 1080 };',
+  '    await browser.launch(command);',
+  '    return successResponse(command.id, { launched: true });',
+  '}',
+].join('\n');
+
+if (!actions.includes(oldLaunch)) {
+  console.error('PATCH 1 FAILED - handleLaunch pattern not found in actions.js');
+  process.exit(1);
+}
+actions = actions.replace(oldLaunch, newLaunch);
+fs.writeFileSync(actionsFile, actions);
+console.log('PATCH 1 OK - handleLaunch env var fallbacks');
+
+// ── Patch 2: REMOVED — upstream agent-browser now allows localhost origins
+// via isAllowedOrigin() in stream-server.js. No patch needed.
+console.log('PATCH 2 SKIPPED - upstream already allows localhost origins');
+
+// ── Patch 3: stream port per session ────────────────────────────────────────
+// When AGENT_BROWSER_STREAM_PORT is set globally, ALL sessions try to bind
+// that port. Named sessions crash with EADDRINUSE. Fix: only the default
+// session uses the env var port; named sessions use the hash-based port.
+const daemonFile = '/usr/lib/node_modules/agent-browser/dist/daemon.js';
+let daemon = fs.readFileSync(daemonFile, 'utf8');
+
+const oldStreamPort = `const streamPort = options?.streamPort ??
+        (process.env.AGENT_BROWSER_STREAM_PORT
+            ? parseInt(process.env.AGENT_BROWSER_STREAM_PORT, 10)
+            : 0);`;
+
+const newStreamPort = `const isPrimarySession = (process.env.AGENT_BROWSER_SESSION || 'default') === (process.env.AGENT_BROWSER_PRIMARY_SESSION || process.env.AGENT_BROWSER_SESSION || 'default');
+    const streamPort = options?.streamPort ??
+        (isPrimarySession && process.env.AGENT_BROWSER_STREAM_PORT
+            ? parseInt(process.env.AGENT_BROWSER_STREAM_PORT, 10)
+            : (!isPrimarySession ? getPortForSession(currentSession) : 0));`;
+
+if (!daemon.includes(oldStreamPort)) {
+  console.error('PATCH 3 FAILED - streamPort pattern not found in daemon.js');
+  process.exit(1);
+}
+daemon = daemon.replace(oldStreamPort, newStreamPort);
+fs.writeFileSync(daemonFile, daemon);
+console.log('PATCH 3 OK - named sessions use hash-based stream ports');
+
+// ── Patch 4: auto-launch profile only for default session ───────────────────
+// The daemon's auto-launch path (line ~282) reads AGENT_BROWSER_PROFILE
+// unconditionally. Named sessions must NOT use the persistent profile or
+// Chromium will fail with "profile already in use".
+const oldAutoProfile = "profile: process.env.AGENT_BROWSER_PROFILE,";
+const newAutoProfile = 'profile: (process.env.AGENT_BROWSER_SESSION || "default") === (process.env.AGENT_BROWSER_PRIMARY_SESSION || process.env.AGENT_BROWSER_SESSION || "default") ? process.env.AGENT_BROWSER_PROFILE : undefined,';
+
+if (!daemon.includes(oldAutoProfile)) {
+  console.error('PATCH 4 FAILED - auto-launch profile pattern not found in daemon.js');
+  process.exit(1);
+}
+daemon = daemon.replace(oldAutoProfile, newAutoProfile);
+fs.writeFileSync(daemonFile, daemon);
+console.log('PATCH 4 OK - auto-launch profile only for default session');
+
+// ── Patch 5: fix newTab/newWindow with persistent contexts ──────────────────
+// When using launchPersistentContext (profile mode), this.browser is null.
+// newTab() checks `!this.browser` and throws "Browser not launched".
+// Fix: also check this.contexts.length > 0 as an alternative.
+const browserFile = '/usr/lib/node_modules/agent-browser/dist/browser.js';
+let browser = fs.readFileSync(browserFile, 'utf8');
+
+const oldNewTabCheck = "if (!this.browser || this.contexts.length === 0) {\n            throw new Error('Browser not launched');\n        }\n        // Invalidate CDP session since we're switching to a new page";
+const newNewTabCheck = "if ((!this.browser && this.contexts.length === 0) || this.contexts.length === 0) {\n            throw new Error('Browser not launched');\n        }\n        // Invalidate CDP session since we're switching to a new page";
+
+if (!browser.includes(oldNewTabCheck)) {
+  console.error('PATCH 5 FAILED - newTab check pattern not found in browser.js');
+  process.exit(1);
+}
+browser = browser.replace(oldNewTabCheck, newNewTabCheck);
+fs.writeFileSync(browserFile, browser);
+console.log('PATCH 5 OK - newTab works with persistent contexts');

package/postinstall.sh

@@ -0,0 +1,88 @@
+#!/usr/bin/env bash
+# @kortix/sandbox postinstall
+#
+# Copies source files to their runtime locations under /opt/ and installs
+# local dependencies. Runs automatically after `npm install -g @kortix/sandbox`.
+#
+# This script is idempotent — safe to run multiple times.
+
+set -euo pipefail
+
+PKG_DIR="$(cd "$(dirname "$0")" && pwd)"
+
+# Detect if we're running inside a sandbox (vs. being installed as a dev dep locally)
+if [ ! -d "/opt" ] || [ "$(id -u)" = "0" ] && [ ! -d "/opt/bun" ]; then
+  echo "[sandbox-postinstall] Not in sandbox environment, skipping file deployment"
+  exit 0
+fi
+
+echo "[sandbox-postinstall] Deploying @kortix/sandbox files..."
+
+# ── Kortix Master ────────────────────────────────────────────────────────────
+echo "[sandbox-postinstall] Updating kortix-master..."
+mkdir -p /opt/kortix-master
+# Copy source files (preserving structure), skip node_modules
+rsync -a --delete \
+  --exclude='node_modules' \
+  --exclude='bun.lock' \
+  "$PKG_DIR/kortix-master/" /opt/kortix-master/
+
+# Install deps
+cd /opt/kortix-master && bun install 2>/dev/null || true
+
+# ── OpenCode config/agents/tools/skills ──────────────────────────────────────
+echo "[sandbox-postinstall] Updating opencode config..."
+mkdir -p /opt/opencode
+
+# Sync source files — delete stale files but preserve node_modules and runtime data
+rsync -a --delete \
+  --exclude='node_modules' \
+  --exclude='bun.lock' \
+  --exclude='.local' \
+  "$PKG_DIR/opencode/" /opt/opencode/
+
+# Install deps (runs opencode patches via its own postinstall)
+cd /opt/opencode && bun install 2>/dev/null || true
+
+# ── s6 service scripts ──────────────────────────────────────────────────────
+if [ -d "$PKG_DIR/services" ] && [ -d "/etc/services.d" ]; then
+  echo "[sandbox-postinstall] Updating s6 service scripts..."
+  rsync -a "$PKG_DIR/services/" /etc/services.d/
+  chmod +x /etc/services.d/*/run 2>/dev/null || true
+fi
+
+# ── Init scripts ─────────────────────────────────────────────────────────────
+if [ -d "$PKG_DIR/config" ] && [ -d "/custom-cont-init.d" ]; then
+  echo "[sandbox-postinstall] Updating init scripts..."
+  cp -f "$PKG_DIR/config/kortix-env-setup.sh" /custom-cont-init.d/98-kortix-env 2>/dev/null || true
+  cp -f "$PKG_DIR/config/customize.sh" /custom-cont-init.d/99-customize 2>/dev/null || true
+  chmod +x /custom-cont-init.d/98-kortix-env /custom-cont-init.d/99-customize 2>/dev/null || true
+fi
+
+# ── Agent browser patches ────────────────────────────────────────────────────
+if [ -f "$PKG_DIR/patch-agent-browser.js" ]; then
+  echo "[sandbox-postinstall] Applying agent-browser patches..."
+  node "$PKG_DIR/patch-agent-browser.js" 2>/dev/null || true
+fi
+
+# ── Version file ─────────────────────────────────────────────────────────────
+# Read version from package.json (the single source of truth) and write to .version
+mkdir -p /opt/kortix
+PKG_VERSION=$(node -e "console.log(require('$PKG_DIR/package.json').version)" 2>/dev/null || echo "0.0.0")
+echo "{\"version\":\"$PKG_VERSION\",\"updatedAt\":\"$(date -u +%Y-%m-%dT%H:%M:%SZ)\"}" > /opt/kortix/.version
+
+# ── Fix ownership ────────────────────────────────────────────────────────────
+chown -R 1000:1000 /opt/kortix-master /opt/opencode /opt/kortix 2>/dev/null || true
+
+# ── pip packages ─────────────────────────────────────────────────────────────
+# These are pinned to versions tested with this sandbox release.
+echo "[sandbox-postinstall] Checking pip packages..."
+pip3 install --break-system-packages -q \
+  'local-semantic-search' \
+  'playwright==1.58.0' \
+  'pypdf2==3.0.1' \
+  'python-pptx==1.0.2' \
+  'pillow==12.1.0' \
+  2>/dev/null || true
+
+echo "[sandbox-postinstall] Done."

package/services/KORTIX-presentation-viewer/run

@@ -0,0 +1,37 @@
+#!/usr/bin/with-contenv bash
+# KORTIX Presentation Viewer — s6 service
+#
+# Watches for presentations in /workspace/presentations/ and serves
+# the most recently updated one on port 3210.
+# If no presentation exists yet, waits until one appears.
+
+PRES_ROOT="/workspace/presentations"
+VIEWER="/opt/opencode/skills/KORTIX-presentation-viewer/serve.ts"
+PORT=3210
+
+wait_for_presentation() {
+    while true; do
+        if [ -d "$PRES_ROOT" ]; then
+            LATEST=$(find "$PRES_ROOT" -maxdepth 2 -name "metadata.json" -newer /tmp/.pv-last-check 2>/dev/null | head -1)
+            if [ -z "$LATEST" ]; then
+                LATEST=$(find "$PRES_ROOT" -maxdepth 2 -name "metadata.json" 2>/dev/null | head -1)
+            fi
+            if [ -n "$LATEST" ]; then
+                dirname "$LATEST"
+                return 0
+            fi
+        fi
+        sleep 3
+    done
+}
+
+touch /tmp/.pv-last-check
+
+echo "[KORTIX-pv] Waiting for a presentation in $PRES_ROOT ..."
+PRES_DIR=$(wait_for_presentation)
+echo "[KORTIX-pv] Serving: $PRES_DIR on port $PORT"
+
+touch /tmp/.pv-last-check
+
+exec s6-setuidgid abc \
+    /usr/local/bin/bun run "$VIEWER" "$PRES_DIR"

package/services/agent-browser-viewer/run

@@ -0,0 +1,48 @@
+#!/usr/bin/with-contenv bash
+# Agent Browser Viewer — s6 service
+#
+# Serves the browser viewer UI on port 9224.
+# - GET /           → viewer HTML
+# - GET /sessions   → JSON list of active sessions + stream ports
+
+echo "[agent-browser-viewer] Starting viewer on port 9224"
+
+exec s6-setuidgid abc \
+  node -e '
+    const http = require("http");
+    const fs = require("fs");
+    const path = require("path");
+
+    const html = fs.readFileSync("/opt/agent-browser-viewer/index.html");
+    const socketDir = process.env.AGENT_BROWSER_SOCKET_DIR || "/workspace/.agent-browser";
+
+    function getSessions() {
+      try {
+        const files = fs.readdirSync(socketDir);
+        const sessions = [];
+        for (const f of files) {
+          if (f.endsWith(".stream")) {
+            const name = f.replace(".stream", "");
+            const port = parseInt(fs.readFileSync(path.join(socketDir, f), "utf8").trim(), 10);
+            const hasSock = files.includes(name + ".sock");
+            if (port > 0 && hasSock) {
+              sessions.push({ name, port });
+            }
+          }
+        }
+        return sessions;
+      } catch(e) { return []; }
+    }
+
+    http.createServer((req, res) => {
+      if (req.url === "/sessions") {
+        res.writeHead(200, { "Content-Type": "application/json", "Cache-Control": "no-cache" });
+        res.end(JSON.stringify(getSessions()));
+      } else {
+        res.writeHead(200, { "Content-Type": "text/html", "Cache-Control": "no-cache" });
+        res.end(html);
+      }
+    }).listen(9224, "0.0.0.0", () => {
+      console.log("[agent-browser-viewer] Ready at http://0.0.0.0:9224");
+    });
+  '

package/services/kortix-master/run

@@ -0,0 +1,16 @@
+#!/usr/bin/with-contenv bash
+# Kortix Master — s6 service
+#
+# Reverse proxy that sits in front of OpenCode on port 8000.
+# All external traffic enters through Kortix Master, which proxies
+# to the OpenCode API server on localhost:4096.
+
+echo "[kortix-master] Starting on port 8000, proxying to OpenCode at localhost:4096"
+
+exec s6-setuidgid abc \
+  env HOME=/workspace \
+      KORTIX_MASTER_PORT=8000 \
+      OPENCODE_HOST=localhost \
+      OPENCODE_PORT=4096 \
+      PATH="/opt/bun/bin:/usr/local/bin:/usr/bin:/bin" \
+  /opt/bun/bin/bun run /opt/kortix-master/src/index.ts

package/services/lss-sync/run

@@ -0,0 +1,22 @@
+#!/usr/bin/with-contenv bash
+# lss-sync — File-watcher daemon that keeps the semantic search index in sync.
+#
+# Uses watchdog (inotify/FSEvents) to detect file changes in real time and
+# triggers re-indexing with debounce. Changes are picked up within seconds.
+#
+# Watches:
+#   /workspace       — User files and projects
+#   /workspace/.kortix — Agent memory
+
+exec s6-setuidgid abc \
+  env HOME=/workspace \
+      OPENAI_API_KEY="${OPENAI_API_KEY}" \
+      LSS_DIR=/workspace/.lss \
+      PATH="/lsiopy/bin:/usr/local/bin:/usr/bin:/bin" \
+  lss-sync \
+    --watch /workspace \
+    --exclude node_modules \
+    --exclude .git \
+    --exclude __pycache__ \
+    --startup-delay 15 \
+    --debounce 2

package/services/opencode-serve/run

@@ -0,0 +1,25 @@
+#!/usr/bin/with-contenv bash
+# OpenCode API Server — s6 service
+#
+# Runs `opencode serve` on port 4096 (internal only, proxied by kortix-master).
+# This is the headless API server, distinct from `opencode web` (the Web UI).
+
+# Wait a moment for filesystem to settle
+sleep 3
+
+cd /workspace
+
+# Ensure OpenCode data dirs exist and are owned by abc (guards against
+# Daytona race conditions where /workspace ownership may shift after startup.sh)
+mkdir -p /workspace/.local/share/opencode/log \
+         /workspace/.local/share/opencode/storage \
+         /workspace/.local/share/opencode/snapshot
+chown -R abc:abc /workspace/.local/share/opencode
+
+echo "[opencode-serve] Starting OpenCode API server on port 4096"
+
+exec s6-setuidgid abc \
+  env HOME=/workspace \
+      OPENCODE_CONFIG_DIR=/opt/opencode \
+      PATH="/opt/bun/bin:/usr/local/bin:/usr/bin:/bin" \
+  opencode serve --port 4096 --hostname 0.0.0.0

package/services/opencode-web/run

@@ -0,0 +1,21 @@
+#!/usr/bin/with-contenv bash
+# OpenCode Web UI — serves the web interface on port 3111
+#
+# Runs `opencode web` headless so it's accessible via the browser at
+# http://localhost:3111 (mapped from the container).
+
+cd /workspace
+
+# Ensure OpenCode data dirs exist and are owned by abc
+mkdir -p /workspace/.local/share/opencode/log \
+         /workspace/.local/share/opencode/storage \
+         /workspace/.local/share/opencode/snapshot
+chown -R abc:abc /workspace/.local/share/opencode
+
+exec s6-setuidgid abc \
+  env HOME=/workspace \
+      OPENCODE_CONFIG_DIR=/opt/opencode \
+      OPENCODE_SERVER_USERNAME= \
+      OPENCODE_SERVER_PASSWORD= \
+      PATH="/opt/bun/bin:/usr/local/bin:/usr/bin:/bin" \
+  opencode web --port 3111 --hostname 0.0.0.0