@madarco/agentbox 0.13.0 → 0.15.0

package/runtime/e2b/attach-helper.cjs

@@ -0,0 +1,167 @@
+"use strict";
+
+// src/attach-helper.ts
+var import_e2b = require("e2b");
+
+// src/env-loader.ts
+var import_node_fs = require("fs");
+var import_node_os = require("os");
+var import_node_path = require("path");
+var E2B_KEYS = ["E2B_API_KEY", "E2B_DOMAIN"];
+var loaded = false;
+function ensureE2bEnvLoaded() {
+  if (loaded) return;
+  loaded = true;
+  importE2bFromFile((0, import_node_path.resolve)((0, import_node_os.homedir)(), ".agentbox", "secrets.env"), E2B_KEYS);
+}
+function importE2bFromFile(path, keys) {
+  if (!(0, import_node_fs.existsSync)(path)) return;
+  let body;
+  try {
+    body = (0, import_node_fs.readFileSync)(path, "utf8");
+  } catch {
+    return;
+  }
+  const parsed = parseEnvFile(body);
+  for (const key of keys) {
+    if (process.env[key] !== void 0) continue;
+    const value = parsed[key];
+    if (typeof value === "string") {
+      process.env[key] = value;
+    }
+  }
+}
+function parseEnvFile(body) {
+  const out = {};
+  for (const rawLine of body.split(/\r?\n/)) {
+    const line = rawLine.trim();
+    if (line.length === 0 || line.startsWith("#")) continue;
+    const stripped = line.startsWith("export ") ? line.slice("export ".length) : line;
+    const eq = stripped.indexOf("=");
+    if (eq <= 0) continue;
+    const key = stripped.slice(0, eq).trim();
+    let value = stripped.slice(eq + 1).trim();
+    if (value.length >= 2 && (value.startsWith('"') && value.endsWith('"') || value.startsWith("'") && value.endsWith("'"))) {
+      value = value.slice(1, -1);
+    }
+    out[key] = value;
+  }
+  return out;
+}
+
+// src/attach-helper.ts
+function parseArgs(argv) {
+  let sandboxId;
+  let user = "vscode";
+  for (let i = 0; i < argv.length; i++) {
+    const a = argv[i];
+    if (a === "--sandbox-id") {
+      sandboxId = argv[i + 1];
+      i++;
+    } else if (a === "--user") {
+      user = argv[i + 1] ?? user;
+      i++;
+    }
+  }
+  if (!sandboxId) {
+    process.stderr.write("attach-helper: --sandbox-id is required\n");
+    process.exit(2);
+  }
+  return { sandboxId, user };
+}
+async function main() {
+  const { sandboxId, user } = parseArgs(process.argv.slice(2));
+  ensureE2bEnvLoaded();
+  const inner = process.env.AGENTBOX_E2B_INNER_CMD;
+  if (!inner) {
+    process.stderr.write("attach-helper: AGENTBOX_E2B_INNER_CMD env is required\n");
+    process.exit(2);
+  }
+  const apiKey = process.env.E2B_API_KEY;
+  if (!apiKey) {
+    process.stderr.write("attach-helper: E2B_API_KEY env is required\n");
+    process.exit(2);
+  }
+  let sb;
+  try {
+    sb = await import_e2b.Sandbox.connect(sandboxId, { apiKey, timeoutMs: 55 * 6e4 });
+  } catch (err) {
+    process.stderr.write(
+      `attach-helper: could not connect to sandbox ${sandboxId}: ${err instanceof Error ? err.message : String(err)}
+`
+    );
+    process.exit(1);
+  }
+  const cols = process.stdout.columns && process.stdout.columns > 0 ? process.stdout.columns : 80;
+  const rows = process.stdout.rows && process.stdout.rows > 0 ? process.stdout.rows : 24;
+  if (process.stdin.isTTY && typeof process.stdin.setRawMode === "function") {
+    process.stdin.setRawMode(true);
+  }
+  process.stdin.resume();
+  const handle = await sb.pty.create({
+    cols,
+    rows,
+    user,
+    cwd: "/workspace",
+    envs: {
+      LANG: "C.UTF-8",
+      LC_ALL: "C.UTF-8",
+      TERM: "xterm-256color"
+    },
+    // Long-lived. We don't want the SDK reaping the PTY mid-session.
+    timeoutMs: 55 * 6e4,
+    onData: (data) => {
+      process.stdout.write(data);
+    }
+  });
+  const pid = handle.pid;
+  await sb.pty.sendInput(pid, new TextEncoder().encode(inner + "\n"));
+  process.stdin.on("data", (chunk) => {
+    sb.pty.sendInput(pid, new Uint8Array(chunk.buffer, chunk.byteOffset, chunk.byteLength)).catch(() => {
+    });
+  });
+  const onResize = () => {
+    const c = process.stdout.columns ?? cols;
+    const r = process.stdout.rows ?? rows;
+    if (c > 0 && r > 0) {
+      sb.pty.resize(pid, { cols: c, rows: r }).catch(() => {
+      });
+    }
+  };
+  process.stdout.on("resize", onResize);
+  const cleanup = () => {
+    process.stdout.off("resize", onResize);
+    if (process.stdin.isTTY && typeof process.stdin.setRawMode === "function") {
+      try {
+        process.stdin.setRawMode(false);
+      } catch {
+      }
+    }
+    process.stdin.pause();
+  };
+  process.on("SIGINT", () => {
+    sb.pty.sendInput(pid, new Uint8Array([3])).catch(() => void 0);
+  });
+  let exitCode = 0;
+  try {
+    const result = await handle.wait();
+    exitCode = result.exitCode ?? 0;
+  } catch (err) {
+    process.stderr.write(
+      `attach-helper: PTY wait failed: ${err instanceof Error ? err.message : String(err)}
+`
+    );
+    exitCode = 1;
+  } finally {
+    cleanup();
+  }
+  process.exit(exitCode);
+}
+main().catch((err) => {
+  process.stderr.write(
+    `attach-helper: unhandled error: ${err instanceof Error ? err.message : String(err)}
+`
+  );
+  process.exit(1);
+});
+//# sourceMappingURL=attach-helper.cjs.map

package/runtime/e2b/claude-managed-settings.json

@@ -0,0 +1,116 @@
+{
+  "$comment": "AgentBox enterprise-managed Claude Code settings, baked into the box image at /etc/claude-code/managed-settings.json. Highest precedence and NOT synced from the host ~/.claude, so claude-hooks-filter.ts never touches it; per Claude Code, hook arrays MERGE across settings sources, so the user's own hooks still run. These hooks report Claude's activity to the box supervisor (agentbox-ctl claude-state -> ctl socket -> relay -> ~/.agentbox/boxes/<id>/status.json) so `agentbox status/list/inspect` can show it even when the box is paused. Each command is exit-0 fast and shell-backgrounded so a hook can never block or fail a Claude turn. The ExitPlanMode / AskUserQuestion entries run SYNCHRONOUSLY (no &) because they consume the hook's stdin payload; the catchall PreToolUse 'working' hook races with them, but the supervisor's sticky-state semantics swallow that race (a 'working' set while in end-plan/question is ignored unless --clear-pending is set, which only the matching PostToolUse hook passes). skipDangerousModePermissionPrompt pre-accepts the bypass-permissions disclaimer at policy precedence — AgentBox boxes are isolated, and `agentbox claude` defaults to --dangerously-skip-permissions, so the one-time accept gate would just trap every fresh box.",
+  "skipDangerousModePermissionPrompt": true,
+  "hooks": {
+    "UserPromptSubmit": [
+      {
+        "hooks": [
+          { "type": "command", "command": "agentbox-ctl claude-state working >/dev/null 2>&1 &", "timeout": 3 }
+        ]
+      }
+    ],
+    "PreToolUse": [
+      {
+        "hooks": [
+          { "type": "command", "command": "agentbox-ctl claude-state working >/dev/null 2>&1 &", "timeout": 3 }
+        ]
+      },
+      {
+        "matcher": "ExitPlanMode",
+        "hooks": [
+          { "type": "command", "command": "agentbox-ctl claude-state end-plan --payload-stdin >/dev/null 2>&1", "timeout": 3 }
+        ]
+      },
+      {
+        "matcher": "AskUserQuestion",
+        "hooks": [
+          { "type": "command", "command": "agentbox-ctl claude-state question --payload-stdin >/dev/null 2>&1", "timeout": 3 }
+        ]
+      }
+    ],
+    "PostToolUse": [
+      {
+        "matcher": "ExitPlanMode",
+        "hooks": [
+          { "type": "command", "command": "agentbox-ctl claude-state working --clear-pending >/dev/null 2>&1 &", "timeout": 3 }
+        ]
+      },
+      {
+        "matcher": "AskUserQuestion",
+        "hooks": [
+          { "type": "command", "command": "agentbox-ctl claude-state working --clear-pending >/dev/null 2>&1 &", "timeout": 3 }
+        ]
+      }
+    ],
+    "Stop": [
+      {
+        "hooks": [
+          { "type": "command", "command": "agentbox-ctl claude-state idle >/dev/null 2>&1 &", "timeout": 3 }
+        ]
+      }
+    ],
+    "StopFailure": [
+      {
+        "hooks": [
+          { "type": "command", "command": "agentbox-ctl claude-state error >/dev/null 2>&1 &", "timeout": 3 }
+        ]
+      }
+    ],
+    "PreCompact": [
+      {
+        "hooks": [
+          { "type": "command", "command": "agentbox-ctl claude-state compacting >/dev/null 2>&1 &", "timeout": 3 }
+        ]
+      }
+    ],
+    "PostCompact": [
+      {
+        "hooks": [
+          { "type": "command", "command": "agentbox-ctl claude-state working --clear-pending >/dev/null 2>&1 &", "timeout": 3 }
+        ]
+      }
+    ],
+    "SubagentStart": [
+      {
+        "hooks": [
+          { "type": "command", "command": "agentbox-ctl claude-state working >/dev/null 2>&1 &", "timeout": 3 }
+        ]
+      }
+    ],
+    "SubagentStop": [
+      {
+        "hooks": [
+          { "type": "command", "command": "agentbox-ctl claude-state working >/dev/null 2>&1 &", "timeout": 3 }
+        ]
+      }
+    ],
+    "Notification": [
+      {
+        "matcher": "permission_prompt",
+        "hooks": [
+          { "type": "command", "command": "agentbox-ctl claude-state waiting >/dev/null 2>&1 &", "timeout": 3 }
+        ]
+      },
+      {
+        "matcher": "idle_prompt",
+        "hooks": [
+          { "type": "command", "command": "agentbox-ctl claude-state idle >/dev/null 2>&1 &", "timeout": 3 }
+        ]
+      }
+    ],
+    "SessionStart": [
+      {
+        "hooks": [
+          { "type": "command", "command": "agentbox-ctl claude-state idle >/dev/null 2>&1 &", "timeout": 3 }
+        ]
+      }
+    ],
+    "SessionEnd": [
+      {
+        "hooks": [
+          { "type": "command", "command": "agentbox-ctl claude-state idle >/dev/null 2>&1 &", "timeout": 3 }
+        ]
+      }
+    ]
+  }
+}