@namzu/sandbox 24.0.0 → 25.0.0

package/local-computer/new-tab/home.css

@@ -0,0 +1,255 @@
+* {
+	box-sizing: border-box;
+}
+body {
+	margin: 0;
+	min-height: 100dvh;
+	color: #e7eee8;
+	background: radial-gradient(ellipse at 20% 0%, #2a4933 0%, transparent 56%),
+		#141c17;
+	font-family: "DejaVu Sans", sans-serif;
+}
+body::before {
+	position: fixed;
+	inset: 0;
+	background-image: radial-gradient(#a4d5ab 0.7px, transparent 0.8px);
+	background-size: 5px 5px;
+	mask-image: linear-gradient(145deg, #0004, transparent 65%);
+	pointer-events: none;
+	content: "";
+}
+header {
+	display: flex;
+	align-items: center;
+	justify-content: space-between;
+	padding: 28px 36px;
+}
+.brand {
+	display: block;
+	width: 126px;
+	height: 24px;
+}
+.workspace-label {
+	color: #9dac9f;
+	font-size: 12px;
+}
+main {
+	display: flex;
+	align-items: center;
+	justify-content: center;
+	flex-direction: column;
+	min-height: calc(100dvh - 140px);
+	padding: 24px 28px 60px;
+	animation: arrive 240ms ease-out both;
+}
+#clock {
+	font-size: clamp(64px, 11vw, 104px);
+	font-weight: 300;
+	letter-spacing: -6px;
+	font-variant-numeric: tabular-nums;
+}
+#date {
+	margin: 4px 0 24px;
+	color: #a4b4a6;
+	font-size: 14px;
+}
+h1 {
+	margin: 0 0 28px;
+	font-size: clamp(20px, 3vw, 27px);
+	font-weight: 400;
+	letter-spacing: -0.5px;
+}
+form {
+	display: flex;
+	align-items: center;
+	width: min(100%, 500px);
+	padding: 7px 9px 7px 18px;
+	border: 1px solid #62816b66;
+	border-radius: 16px;
+	background: #17231ccc;
+	box-shadow: 0 8px 32px #0002;
+	transition: border-color 150ms ease, box-shadow 150ms ease;
+}
+form:focus-within {
+	border-color: #7acc84;
+	box-shadow: 0 0 0 3px #7acc841a;
+}
+label {
+	position: absolute;
+	width: 1px;
+	height: 1px;
+	overflow: hidden;
+	clip-path: inset(50%);
+	white-space: nowrap;
+}
+input {
+	min-width: 0;
+	flex: 1;
+	height: 40px;
+	border: 0;
+	outline: none;
+	background: transparent;
+	color: inherit;
+	font: inherit;
+	font-size: 14px;
+}
+input::placeholder {
+	color: #9bad9f;
+}
+button {
+	display: grid;
+	place-items: center;
+	width: 36px;
+	height: 36px;
+	border: 0;
+	border-radius: 11px;
+	background: #84d88c;
+	color: #142319;
+	cursor: pointer;
+	transition: background 150ms ease;
+}
+button:hover {
+	background: #9be7a2;
+}
+button:focus-visible {
+	outline: 2px solid #c1fac8;
+	outline-offset: 3px;
+}
+button svg {
+	width: 18px;
+	height: 18px;
+}
+.hint {
+	margin: 24px 0 0;
+	color: #8ea493;
+	font-size: 12px;
+	text-align: center;
+	line-height: 20px;
+}
+.apps {
+	display: grid;
+	grid-template-columns: repeat(5, minmax(0, 1fr));
+	width: min(100%, 600px);
+	gap: 14px;
+	margin-top: 30px;
+}
+.app {
+	display: flex;
+	flex-direction: column;
+	justify-content: center;
+	gap: 9px;
+	width: 100%;
+	min-height: 94px;
+	height: auto;
+	padding: 12px 6px;
+	color: #e7eee8;
+	background: #1c2a2070;
+	border: 1px solid #6b877533;
+	border-radius: 16px;
+	font: inherit;
+	font-size: 11px;
+}
+.app:hover {
+	background: #314b38;
+}
+.app:disabled {
+	opacity: 0.6;
+	cursor: wait;
+}
+.app img {
+	object-fit: contain;
+}
+.app span {
+	max-width: 100%;
+	overflow-wrap: anywhere;
+	line-height: 16px;
+}
+@media (max-width: 480px) {
+	.apps {
+		grid-template-columns: repeat(3, minmax(0, 1fr));
+		gap: 10px;
+	}
+}
+@keyframes arrive {
+	from {
+		opacity: 0;
+		transform: translateY(5px);
+	}
+	to {
+		opacity: 1;
+		transform: none;
+	}
+}
+@media (max-width: 500px) {
+	header {
+		padding: 22px;
+	}
+	.workspace-label {
+		display: none;
+	}
+	main {
+		padding-inline: 22px;
+	}
+}
+@media (max-height: 650px) {
+	header {
+		padding-block: 8px;
+		line-height: 20px;
+	}
+	.brand {
+		width: 105px;
+		height: 20px;
+	}
+	main {
+		min-height: calc(100dvh - 36px);
+		padding-block: 8px 12px;
+	}
+	#clock {
+		font-size: 52px;
+		line-height: 1;
+		letter-spacing: -2px;
+	}
+	#date {
+		margin: 2px 0 8px;
+		font-size: 12px;
+		line-height: 18px;
+	}
+	h1 {
+		margin-bottom: 12px;
+		font-size: 20px;
+		line-height: 26px;
+	}
+	form {
+		padding-block: 4px;
+	}
+	input {
+		height: 32px;
+	}
+	.apps {
+		width: min(100%, 660px);
+		gap: 8px 12px;
+		margin-top: 14px;
+	}
+	.app {
+		min-height: 80px;
+		gap: 6px;
+		padding-block: 6px;
+	}
+	.app img {
+		flex: none;
+		width: 44px;
+		height: 44px;
+	}
+	.hint {
+		margin-top: 8px;
+	}
+}
+@media (prefers-reduced-motion: reduce) {
+	main {
+		animation: none;
+	}
+	form,
+	button {
+		transition: none;
+	}
+}

package/local-computer/new-tab/home.js

@@ -0,0 +1,65 @@
+      const clock = document.getElementById('clock');
+      const date = document.getElementById('date');
+      const timeFormat = new Intl.DateTimeFormat(undefined, { hour: '2-digit', minute: '2-digit', hourCycle: 'h23' });
+      const dateFormat = new Intl.DateTimeFormat(undefined, { weekday: 'long', month: 'long', day: 'numeric' });
+      function updateClock() {
+        const now = new Date();
+        clock.textContent = timeFormat.format(now);
+        clock.dateTime = now.toISOString();
+        date.textContent = dateFormat.format(now);
+      }
+      updateClock();
+      setInterval(updateClock, 1000);
+      document.getElementById('search').addEventListener('submit', (event) => {
+        const value = document.getElementById('query').value.trim();
+        if (!value) { event.preventDefault(); return; }
+        const candidate = /^[a-z][a-z\d+.-]*:/i.test(value) ? value : `https://${value}`;
+        try {
+          const url = new URL(candidate);
+          if (['https:', 'http:'].includes(url.protocol) && !value.includes(' ') && (url.hostname.includes('.') || url.hostname === 'localhost')) {
+            event.preventDefault();
+            location.assign(url.href);
+          }
+        } catch { /* Ordinary words and phrases go through the web search form. */ }
+      });
+
+const apps = document.getElementById('apps')
+const status = document.getElementById('app-status')
+async function nativeMessage(message) {
+  return await chrome.runtime.sendNativeMessage('org.namzu.apps', message)
+}
+async function showApplications() {
+  try {
+    const result = await nativeMessage({ type: 'list' })
+    if (!result?.ok || !Array.isArray(result.apps)) throw new Error('Catalogue unavailable')
+    for (const app of result.apps) {
+      const button = document.createElement('button')
+      button.type = 'button'
+      button.className = 'app'
+      const icon = document.createElement('img')
+      icon.src = app.icon
+      icon.alt = ''
+      icon.width = 44
+      icon.height = 44
+      const label = document.createElement('span')
+      label.textContent = app.name
+      button.append(icon, label)
+      button.addEventListener('click', async () => {
+        button.disabled = true
+        status.textContent = `Opening ${app.name}…`
+        try {
+          const result = await nativeMessage({ type: 'launch', appId: app.id })
+          status.textContent = result?.ok ? `${app.name} started` : `${app.name} could not be opened. Try again.`
+        } catch {
+          status.textContent = `${app.name} could not be opened. Try again.`
+        } finally {
+          button.disabled = false
+        }
+      })
+      apps.append(button)
+    }
+  } catch {
+    status.textContent = 'Application launchers are unavailable. The desktop dock is still available.'
+  }
+}
+void showApplications()

package/local-computer/new-tab/manifest.json

@@ -0,0 +1,12 @@
+{
+  "manifest_version": 3,
+  "name": "Namzu workspace",
+  "version": "1.0.0",
+  "description": "A local New Tab page and installed application launchers for this Pal computer.",
+  "key": "MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqXoJpqX+TnJeUjITQ6mFH8XMww1XambzeBOR5IJHng5i1GN7sVaKWv2fukjd59blBuW7k3Nu/Yqi+qfp652Zto0nPNCMobZCb/IYJX2xil1JrfOVddSxfJRBK1MMJC6fQpnRB6DZzS+R9yGKH5P4Ivxu070StVDcJ6FBhHZAWM0kyKzqQrYAfCWS1vQeY6Z8oMitNBEQZUKWFmMDBatxJJaXI9bwYJ/IABdf3d+sUiCkFkmXm/LHHNqXSCRCCn0+LPXDgbHjX7MY765+Fk8Ue4rtKkTKISox5xF7wZC/Bm8VkxeRh9xLc8x+jz2nqayU1RNkC52u2QikD4Biafz2KQIDAQAB",
+  "permissions": ["nativeMessaging"],
+  "chrome_url_overrides": { "newtab": "home.html" },
+  "content_security_policy": {
+    "extension_pages": "script-src 'self'; object-src 'none'; base-uri 'none'; frame-ancestors 'none'"
+  }
+}

package/local-computer/new-tab/wordmark.svg

@@ -0,0 +1,33 @@
+<svg xmlns="http://www.w3.org/2000/svg" viewBox="0 0 21 4" width="126" height="24" fill="#8ae592" shape-rendering="crispEdges">
+  <title>Namzu</title>
+  <!-- Exact CLI/desktop two-row block lettering: each half block is one cell. -->
+  <rect x="0" y="0" width="1" height="2" />
+  <rect x="1" y="1" width="1" height="1" />
+  <rect x="3" y="0" width="1" height="2" />
+  <rect x="5" y="1" width="1" height="1" />
+  <rect x="6" y="0" width="1" height="1" />
+  <rect x="7" y="0" width="1" height="2" />
+  <rect x="9" y="0" width="1" height="2" />
+  <rect x="10" y="0" width="1" height="1" />
+  <rect x="11" y="1" width="1" height="1" />
+  <rect x="12" y="0" width="1" height="1" />
+  <rect x="13" y="0" width="1" height="2" />
+  <rect x="15" y="0" width="1" height="1" />
+  <rect x="16" y="0" width="1" height="2" />
+  <rect x="18" y="0" width="1" height="2" />
+  <rect x="20" y="0" width="1" height="2" />
+  <rect x="0" y="2" width="1" height="2" />
+  <rect x="2" y="2" width="1" height="1" />
+  <rect x="3" y="2" width="1" height="2" />
+  <rect x="5" y="2" width="1" height="2" />
+  <rect x="6" y="2" width="1" height="1" />
+  <rect x="7" y="2" width="1" height="2" />
+  <rect x="9" y="2" width="1" height="2" />
+  <rect x="11" y="2" width="1" height="1" />
+  <rect x="13" y="2" width="1" height="2" />
+  <rect x="15" y="2" width="1" height="2" />
+  <rect x="16" y="3" width="1" height="1" />
+  <rect x="18" y="2" width="1" height="2" />
+  <rect x="19" y="3" width="1" height="1" />
+  <rect x="20" y="2" width="1" height="2" />
+</svg>

package/local-computer/openbox-rc.xml

@@ -0,0 +1,41 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<openbox_config xmlns="http://openbox.org/3.4/rc">
+  <focus>
+    <focusNew>yes</focusNew><followMouse>no</followMouse><focusLast>yes</focusLast>
+  </focus>
+  <placement><policy>Smart</policy><center>yes</center><monitor>Primary</monitor></placement>
+  <theme>
+    <name>Onyx</name><titleLayout>NLIMC</titleLayout><keepBorder>yes</keepBorder>
+    <animateIconify>yes</animateIconify>
+    <font place="ActiveWindow"><name>DejaVu Sans</name><size>9</size><weight>normal</weight></font>
+    <font place="InactiveWindow"><name>DejaVu Sans</name><size>9</size><weight>normal</weight></font>
+  </theme>
+  <desktops><number>1</number><firstdesk>1</firstdesk><names><name>Namzu</name></names></desktops>
+  <margins><top>16</top><bottom>86</bottom><left>16</left><right>16</right></margins>
+  <resize><drawContents>yes</drawContents><popupShow>Nonpixel</popupShow></resize>
+  <keyboard>
+    <keybind key="A-F4"><action name="Close"/></keybind>
+    <keybind key="A-Tab"><action name="NextWindow"><finalactions><action name="Focus"/><action name="Raise"/></finalactions></action></keybind>
+    <keybind key="A-S-Tab"><action name="PreviousWindow"><finalactions><action name="Focus"/><action name="Raise"/></finalactions></action></keybind>
+    <keybind key="W-d"><action name="ToggleShowDesktop"/></keybind>
+  </keyboard>
+  <mouse>
+    <context name="Frame">
+      <mousebind button="A-Left" action="Press"><action name="Focus"/><action name="Raise"/></mousebind>
+      <mousebind button="A-Left" action="Drag"><action name="Move"/></mousebind>
+      <mousebind button="A-Right" action="Drag"><action name="Resize"/></mousebind>
+    </context>
+    <context name="Titlebar">
+      <mousebind button="Left" action="Press"><action name="Focus"/><action name="Raise"/></mousebind>
+      <mousebind button="Left" action="Drag"><action name="Move"/></mousebind>
+      <mousebind button="Left" action="DoubleClick"><action name="ToggleMaximize"/></mousebind>
+    </context>
+    <context name="Client"><mousebind button="Left" action="Press"><action name="Focus"/><action name="Raise"/></mousebind></context>
+    <context name="Iconify"><mousebind button="Left" action="Click"><action name="Iconify"/></mousebind></context>
+    <context name="Maximize"><mousebind button="Left" action="Click"><action name="ToggleMaximize"/></mousebind></context>
+    <context name="Close"><mousebind button="Left" action="Click"><action name="Close"/></mousebind></context>
+  </mouse>
+  <applications>
+    <application class="Chromium"><decor>yes</decor><maximized>no</maximized><fullscreen>no</fullscreen></application>
+  </applications>
+</openbox_config>

package/local-computer/prepare-home.cjs

@@ -0,0 +1,121 @@
+const { copyFileSync, existsSync, mkdirSync, readFileSync, writeFileSync } = require('node:fs')
+const { basename, dirname, extname, join } = require('node:path')
+const { STAGES, applicationsForStage, installedApplication } = require('./app-catalog.cjs')
+const { EXTENSION_ORIGIN, HOST_NAME } = require('./app-native-host.cjs')
+
+function findIcon(name, root = '/usr/share') {
+	if (name.startsWith('/')) {
+		if (name.startsWith(`${root}/`) && ['.png', '.svg'].includes(extname(name)) && existsSync(name))
+			return name
+		// Debian can name an XPM pixmap and ship a browser-readable theme icon
+		// for that same application. Copy that genuine installed asset instead.
+		if (name.startsWith(`${root}/`) && extname(name) === '.xpm')
+			return findIcon(basename(name, '.xpm'), root)
+		return undefined
+	}
+	if (!/^[a-zA-Z0-9_.-]+$/.test(name)) return undefined
+	for (const theme of ['hicolor', 'Adwaita']) {
+		for (const size of ['128x128', '96x96', '64x64', '48x48', 'scalable', '256x256', '32x32']) {
+			for (const category of ['apps', 'legacy', 'places'])
+				for (const extension of ['png', 'svg']) {
+					const file = join(root, 'icons', theme, size, category, `${name}.${extension}`)
+					if (existsSync(file)) return file
+				}
+		}
+	}
+	for (const extension of ['svg', 'png']) {
+		const file = join(root, 'pixmaps', `${name}.${extension}`)
+		if (existsSync(file)) return file
+	}
+	return undefined
+}
+
+function desktopIcon(source) {
+	let entry = false
+	for (const line of source.split(/\r?\n/)) {
+		if (line.startsWith('[')) entry = line === '[Desktop Entry]'
+		if (entry && line.startsWith('Icon=')) return line.slice(5).trim()
+	}
+	return undefined
+}
+
+function prepareHome(options = {}) {
+	const root = options.shareRoot ?? '/usr/share'
+	const destination = options.destination ?? join(__dirname, 'new-tab')
+	const stage = options.stage ?? STAGES[STAGES.length - 1]
+	const applications = applicationsForStage(stage)
+	const applicationExists =
+		options.applicationExists ?? ((app) => installedApplication(app.id, undefined, applications))
+	const catalogue = []
+	mkdirSync(join(destination, 'icons'), { recursive: true })
+	for (const app of applications) {
+		if (!applicationExists(app)) {
+			throw new Error(`Required guest application is missing: ${app.id}`)
+		}
+		const desktop = app.desktop.map((name) => join(root, 'applications', name)).find(existsSync)
+		if (!desktop) throw new Error(`Installed guest application entry is missing: ${app.id}`)
+		// A catalogue icon wins over the desktop entry's (the entry may name a plain pixmap).
+		const entryIcon = desktopIcon(readFileSync(desktop, 'utf8'))
+		const icon =
+			(app.icon && findIcon(app.icon, root)) ||
+			(entryIcon && findIcon(entryIcon, root)) ||
+			(app.fallbackIcon && findIcon(app.fallbackIcon, root))
+		if (!icon) throw new Error(`Installed guest application icon is missing: ${app.id}`)
+		const path = `icons/${app.id}${extname(icon)}`
+		copyFileSync(icon, join(destination, path))
+		catalogue.push({ id: app.id, name: app.name, icon: path })
+	}
+	writeFileSync(join(destination, 'apps.json'), JSON.stringify(catalogue))
+	// Runtime readers (the browser launcher, the native host) trust this marker, not a list of their own.
+	writeFileSync(options.stageFile ?? join(dirname(destination), 'stage'), `${stage}\n`)
+	return catalogue
+}
+
+function installNativeManifest() {
+	const directory = '/etc/chromium/native-messaging-hosts'
+	mkdirSync(directory, { recursive: true })
+	writeFileSync(
+		join(directory, `${HOST_NAME}.json`),
+		JSON.stringify({
+			name: HOST_NAME,
+			description: 'Launch installed applications in this Pal guest',
+			path: '/opt/namzu-computer/app-native-host.cjs',
+			type: 'stdio',
+			allowed_origins: [EXTENSION_ORIGIN],
+		}),
+	)
+}
+
+// Managed policy, so the guest browser never offers to sign in to a browser account. BrowserSignin
+// alone leaves the toolbar's "Sign in to Chromium?" button; with the promotions off it is gone.
+const BROWSER_POLICY = Object.freeze({
+	BrowserSignin: 0,
+	SyncDisabled: true,
+	PromotionsEnabled: false,
+})
+
+function installBrowserPolicy(directory = '/etc/chromium/policies/managed') {
+	mkdirSync(directory, { recursive: true })
+	writeFileSync(join(directory, 'namzu.json'), JSON.stringify(BROWSER_POLICY))
+}
+
+function stageArgument(argv) {
+	const index = argv.indexOf('--stage')
+	const stage = index < 0 ? STAGES[STAGES.length - 1] : argv[index + 1]
+	if (!STAGES.includes(stage)) throw new Error(`Unknown image stage: ${stage}`)
+	return stage
+}
+
+module.exports = {
+	findIcon,
+	desktopIcon,
+	prepareHome,
+	installBrowserPolicy,
+	stageArgument,
+	BROWSER_POLICY,
+}
+if (require.main === module) {
+	prepareHome({ stage: stageArgument(process.argv.slice(2)) })
+	installNativeManifest()
+	installBrowserPolicy()
+}

package/local-computer/tint2rc

@@ -0,0 +1,44 @@
+# Genuine guest launchers. The application entries are owned by entrypoint.sh.
+rounded = 18
+border_width = 1
+background_color = #1c2720 100
+border_color = #789882 45
+background_color_hover = #263b2c 100
+border_color_hover = #91bb9a 60
+
+panel_items = L
+panel_size = 196 60
+panel_shrink = 1
+panel_position = bottom center horizontal
+panel_margin = 0 16
+panel_padding = 10 7 10
+panel_background_id = 1
+panel_layer = top
+panel_dock = 0
+panel_window_name = Namzu dock
+strut_policy = follow_size
+disable_transparency = 1
+autohide = 0
+mouse_effects = 1
+mouse_hover_icon_asb = 100 0 10
+mouse_pressed_icon_asb = 100 0 -10
+
+launcher_background_id = 0
+launcher_icon_background_id = 0
+launcher_padding = 0 0 10
+launcher_icon_size = 42
+launcher_icon_theme = Adwaita
+launcher_icon_theme_override = 1
+launcher_icon_asb = 100 0 0
+launcher_tooltip = 1
+startup_notifications = 0
+launcher_item_app = /home/namzu/.local/share/applications/namzu-browser.desktop
+launcher_item_app = /home/namzu/.local/share/applications/namzu-terminal.desktop
+launcher_item_app = /home/namzu/.local/share/applications/namzu-files.desktop
+
+tooltip_show_timeout = 0.3
+tooltip_hide_timeout = 0.1
+tooltip_padding = 8 5
+tooltip_background_id = 1
+tooltip_font = DejaVu Sans 10
+tooltip_font_color = #e7eee8 100

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@namzu/sandbox",
-  "version": "24.0.0",
+  "version": "25.0.0",
   "description": "Pluggable sandbox provider for @namzu/sdk. Process-level isolation (bubblewrap on Linux, Seatbelt on macOS, via @anthropic-ai/sandbox-runtime) for developer dev loops; container-level isolation (HTTP worker + a loopback-bound egress proxy that allows by resolved address and brokers outbound credentials so they never enter the sandbox) for multi-tenant production. Backend selected at construction time; the SDK consumes both through the same SandboxProvider interface.",
   "license": "FSL-1.1-MIT",
   "engines": {
@@ -22,6 +22,10 @@
     ".": {
       "types": "./dist/index.d.ts",
       "import": "./dist/index.js"
+    },
+    "./local-virtual-computer/setup": {
+      "types": "./dist/local-virtual-computer/setup/index.d.ts",
+      "import": "./dist/local-virtual-computer/setup/index.js"
     }
   },
   "files": [
@@ -37,6 +41,8 @@
     "!src/**/__tests__",
     "!src/**/__fixtures__",
     "!src/**/test-setup.*",
+    "local-computer",
+    "worker/server.js",
     "LICENSE.md",
     "README.md",
     "CHANGELOG.md"
@@ -46,7 +52,10 @@
     "provenance": true
   },
   "peerDependencies": {
-    "@namzu/sdk": "^49.0.0"
+    "@namzu/sdk": "^50.0.0"
+  },
+  "dependencies": {
+    "ws": "8.21.3"
   },
   "devDependencies": {
     "@biomejs/biome": "^1.9.4",
@@ -54,12 +63,12 @@
     "typescript": "^5.5.0",
     "vitest": "^4.1.11",
     "yaml": "^2.9.0",
-    "@namzu/sdk": "^49.0.0"
+    "@namzu/sdk": "^50.0.0"
   },
   "scripts": {
     "build": "tsc --build",
     "dev": "tsc --build --watch",
-    "lint": "biome check src/ worker/ agent/ k8s/ egress-proxy/",
+    "lint": "biome check src/ worker/ agent/ k8s/ egress-proxy/ local-computer/",
     "lint:fix": "biome check --write src/",
     "format": "biome format --write src/",
     "test": "vitest run --passWithNoTests",