@mybase-dev/cli 1.0.8 → 1.0.9

package/dist/mybase.js

@@ -117,6 +117,7 @@ var KEY_RESOURCES = [
   { id: "users", name: "Users", description: "Your app's users and sessions (read), revoking and deleting them, and sending sign-in events (write)" },
   { id: "captcha", name: "Captcha", description: "Captcha settings (read), and verifying tokens (write)" },
   { id: "realtime", name: "Realtime", description: "Channels, members, and settings (read), and publishing messages (write)" },
+  { id: "sandbox", name: "Agent sandboxes", description: "Sandboxes, executions, files, artifacts, and browser connections" },
   { id: "audit", name: "Audit log", description: "Who did what: sign-ins, key and project changes, secret reads (read only)" }
 ];
 function parseDotenv(text) {
@@ -140,7 +141,7 @@ function parseDotenv(text) {
 // package.json
 var package_default = {
   name: "@mybase-dev/cli",
-  version: "1.0.8",
+  version: "1.0.9",
   description: "The mybase CLI: projects, keys, cron, queues, cache, rate limits, analytics, docs, and agent setup for a self-hosted mybase.",
   type: "module",
   repository: {
@@ -262,15 +263,18 @@ function confirm(yes, warning, expected, what = expected) {
 var config = await loadConfig();
 var API_URL = (process.env.MYBASE_API_URL || config.url || DEFAULT_API_URL).replace(/\/$/, "");
 var TOKEN = process.env.MYBASE_TOKEN || config.token;
+var apiToken = () => TOKEN;
 var CLI_VERSION = package_default.version;
 async function api(path, init) {
   const token = init?.token === undefined ? TOKEN : init.token;
   const base = init?.url ?? API_URL;
+  const headers = new Headers({ "Content-Type": "application/json", "User-Agent": `mybase-cli/${CLI_VERSION}`, ...token ? { Authorization: `Bearer ${token}` } : {} });
+  new Headers(init?.headers).forEach((value, key) => headers.set(key, value));
   let res;
   try {
     res = await fetch(`${base}${path}`, {
       ...init,
-      headers: { "Content-Type": "application/json", "User-Agent": `mybase-cli/${CLI_VERSION}`, ...token ? { Authorization: `Bearer ${token}` } : {} }
+      headers
     });
   } catch {
     throw new CliError(`can't reach the API at ${base}. Check that it's running, or point MYBASE_API_URL / \`mybase login --url\` at it.`);
@@ -278,6 +282,8 @@ async function api(path, init) {
   init?.onStatus?.(res.status);
   if (res.status === 204)
     return;
+  if (res.ok && init?.raw)
+    return res;
   const body = await res.json().catch(() => ({}));
   if (res.status === 401 && !path.startsWith("/auth/login")) {
     const message = token ? "the API rejected your token. Run `mybase login` again." : "not signed in. Run `mybase login` (or set MYBASE_TOKEN).";
@@ -2508,6 +2514,93 @@ async function search(sub, args) {
   }
 }
 
+// src/sandbox.ts
+var sandboxUsage = `  sandbox enable <project>       Enable isolated agent compute (requires sandbox worker)
+  sandbox disable <project> [--yes]  Stop sandboxes and delete their artifacts
+  sandbox create <project> --key <key> [--ttl 300] [--idle 120]
+  sandbox list|get|usage <project> [<id>]
+  sandbox terminate <project> <id> [--yes]
+  sandbox exec <project> <id> --key <key> [--code file.js | --command '["node","script.js"]'] [--timeout 30000]
+  sandbox runs|artifacts|browser <project> <id>
+  sandbox run <project> <id> <execution>
+  sandbox cancel <project> <id> <execution> [--yes]
+  sandbox upload|download <project> <id> <workspace-path> <local-file>
+  sandbox export <project> <id> <workspace-path> [--type image/png]
+  sandbox artifact <project> <id> <artifact-id> <local-file>
+  Creation/execution return promptly. Poll get/run. Cancelling execution terminates sandbox.
+  Browser credentials expire after 30s; authenticated CDP connection lasts at most 60s.`;
+async function sandbox(sub, args) {
+  const known = ["enable", "disable", "create", "list", "get", "usage", "terminate", "exec", "runs", "run", "cancel", "upload", "download", "export", "artifacts", "artifact", "browser"];
+  if (!known.includes(sub))
+    return false;
+  const { positional, flags } = parseArgs(args);
+  const [project, id, item, local] = positional;
+  const p = need(project, "project name");
+  const base = `/sandbox/${encodeURIComponent(p)}`;
+  const root = () => `${base}/${encodeURIComponent(need(id, "sandbox id"))}`;
+  const value = (key) => {
+    const found = flags.get(key);
+    return typeof found === "string" ? found : undefined;
+  };
+  const number = (key) => value(key) === undefined ? undefined : Number(value(key));
+  let result;
+  if (sub === "enable") {
+    result = await enableService(p, "sandbox", flags);
+  } else if (sub === "disable") {
+    confirm(flags.has("yes"), `This stops every sandbox and permanently deletes sandbox artifacts for "${p}".`, p, "the project name");
+    await api(`/projects/${encodeURIComponent(p)}/services/sandbox`, { method: "DELETE" });
+    result = { disabled: "sandbox", project: p };
+  } else if (sub === "create")
+    result = await api(base, { method: "POST", body: JSON.stringify({ key: need(value("key"), "--key"), ttlSeconds: number("ttl"), idleSeconds: number("idle"), profile: "browser" }) });
+  else if (sub === "list" || sub === "usage")
+    result = await api(sub === "list" ? base : `${base}/usage`);
+  else if (sub === "get")
+    result = await api(root());
+  else if (sub === "terminate") {
+    confirm(flags.has("yes"), `This stops sandbox "${need(id, "sandbox id")}" and deletes its temporary workspace.`, id, "the sandbox id");
+    result = await api(root(), { method: "DELETE" });
+  } else if (sub === "exec") {
+    const codePath = value("code");
+    const command = value("command");
+    if (!!codePath === !!command)
+      usageError(`provide exactly one of --code file.js or --command '["node","script.js"]'`);
+    let argv;
+    if (command) {
+      try {
+        argv = JSON.parse(command);
+      } catch {
+        usageError("--command must be a JSON argument array");
+      }
+    }
+    result = await api(`${root()}/executions`, { method: "POST", body: JSON.stringify({ key: need(value("key"), "--key"), code: codePath ? await Bun.file(codePath).text() : undefined, command: argv, timeoutMs: number("timeout") }) });
+  } else if (sub === "runs")
+    result = await api(`${root()}/executions`);
+  else if (sub === "run" || sub === "cancel") {
+    if (sub === "cancel")
+      confirm(flags.has("yes"), `Cancelling stops the entire sandbox "${need(id, "sandbox id")}" and deletes its temporary workspace.`, id, "the sandbox id");
+    result = await api(`${root()}/executions/${encodeURIComponent(need(item, "execution id"))}`, { method: sub === "run" ? "GET" : "DELETE" });
+  } else if (sub === "upload") {
+    const bytes = await Bun.file(need(local, "local file")).arrayBuffer();
+    await api(`${root()}/files?path=${encodeURIComponent(need(item, "workspace path"))}`, { method: "PUT", body: bytes, headers: { "Content-Type": "application/octet-stream" } });
+    result = { uploaded: item, bytes: bytes.byteLength };
+  } else if (sub === "download" || sub === "artifact") {
+    const path = sub === "download" ? `${root()}/files?path=${encodeURIComponent(need(item, "workspace path"))}` : `${root()}/artifacts/${encodeURIComponent(need(item, "artifact id"))}`;
+    const response = await api(path, { raw: true });
+    const size = await Bun.write(need(local, "local file"), response);
+    result = { file: local, bytes: size };
+  } else if (sub === "export")
+    result = await api(`${root()}/artifacts`, { method: "POST", body: JSON.stringify({ path: need(item, "workspace path"), type: value("type") }) });
+  else if (sub === "artifacts")
+    result = await api(`${root()}/artifacts`);
+  else if (sub === "browser") {
+    const connection = await api(`${root()}/browser`, { method: "POST", body: "{}" });
+    connection.headers.Authorization = `Bearer ${apiToken()}`;
+    result = connection;
+  }
+  print(result, () => console.log(JSON.stringify(result, null, 2)));
+  return true;
+}
+
 // ../../node_modules/.bun/@clack+core@1.5.1/node_modules/@clack/core/dist/index.mjs
 import { styleText } from "util";
 import { stdout, stdin } from "process";
@@ -3899,6 +3992,8 @@ var SERVICE_COLORS = {
   users: color.green,
   captcha: color.blue,
   realtime: color.magenta,
+  sandbox: color.yellow,
+  "sandbox-worker": color.yellow,
   "db-public": color.cyan,
   dev: color.gray
 };
@@ -4084,6 +4179,8 @@ services:
       # 1 for one restart turns the admin's 2FA off (lost phone and recovery codes).
       MYBASE_ADMIN_RESET_MFA: \${MYBASE_ADMIN_RESET_MFA:-}
       LOG_LEVEL: \${LOG_LEVEL:-info}
+      MYBASE_SANDBOX_WORKER_URL: \${MYBASE_SANDBOX_WORKER_URL:-}
+      MYBASE_SANDBOX_WORKER_KEY: \${MYBASE_SANDBOX_WORKER_KEY:-}
     ports:
       - "\${MYBASE_BIND:-0.0.0.0}:\${MYBASE_PORT:-4000}:4000"
 
@@ -4161,6 +4258,27 @@ services:
       - source: searxng
         target: /etc/searxng/settings.yml
 
+  # Opt-in trusted agent host. Requires runsc/cgroup v2 on the Docker host and a pre-pulled
+  # sandbox image. See docs/sandboxes.md. No guest ever receives this socket or worker key.
+  sandbox-worker:
+    image: \${MYBASE_SANDBOX_WORKER_IMAGE:-ghcr.io/landonharter/mybase-sandbox-worker:latest}
+    profiles: [sandbox]
+    restart: \${MYBASE_RESTART:-unless-stopped}
+    stop_grace_period: 45s
+    environment:
+      MYBASE_SANDBOX_WORKER_KEY: \${MYBASE_SANDBOX_WORKER_KEY:-}
+      MYBASE_SANDBOX_DENY_HOSTS: \${MYBASE_SANDBOX_DENY_HOSTS:-}
+      MYBASE_SANDBOX_IMAGE: \${MYBASE_SANDBOX_IMAGE:-ghcr.io/landonharter/mybase-sandbox:latest}
+      LOG_LEVEL: \${LOG_LEVEL:-info}
+    volumes:
+      - /var/run/docker.sock:/var/run/docker.sock
+    healthcheck:
+      test: ["CMD", "bun", "-e", "fetch('http://127.0.0.1:4010/health',{headers:{Authorization:'Bearer '+process.env.MYBASE_SANDBOX_WORKER_KEY}}).then(r=>{if(!r.ok)process.exit(1)}).catch(()=>process.exit(1))"]
+      interval: 30s
+      timeout: 5s
+      start_period: 30s
+    # Private Compose network only. No published worker or browser-debugging ports.
+
   # Cloudflare Tunnel: public HTTPS without opening router ports. Off unless COMPOSE_PROFILES=tunnel.
   # Hostnames are set up in the Cloudflare dashboard (see the top of this file).
   cloudflared:
@@ -5975,6 +6093,7 @@ var USAGE = {
   ratelimit: ratelimitUsage,
   queue: queueUsage,
   search: searchUsage,
+  sandbox: sandboxUsage,
   secrets: secretsUsage,
   vector: vectorUsage,
   users: usersUsage,
@@ -6022,6 +6141,8 @@ async function main(args) {
     return audit(args.slice(1));
   if (command === "alerts")
     return alerts(args.slice(1));
+  if (command === "sandbox" && sub && await sandbox(sub, rest))
+    return;
   if (command === "project" && sub === "create") {
     const name = need(rest[0], "project name");
     const project = await api("/projects", {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@mybase-dev/cli",
-  "version": "1.0.8",
+  "version": "1.0.9",
   "description": "The mybase CLI: projects, keys, cron, queues, cache, rate limits, analytics, docs, and agent setup for a self-hosted mybase.",
   "type": "module",
   "repository": {