@qlucent/fishi 0.6.0 → 0.7.0

package/dist/index.js

@@ -2,7 +2,7 @@
 
 // src/index.ts
 import { Command } from "commander";
-import chalk8 from "chalk";
+import chalk9 from "chalk";
 
 // src/commands/init.ts
 import chalk from "chalk";
@@ -10,7 +10,7 @@ import ora from "ora";
 import inquirer from "inquirer";
 import path3 from "path";
 import fs3 from "fs";
-import { detectConflicts, createBackup } from "@qlucent/fishi-core";
+import { detectConflicts, createBackup, detectDocker } from "@qlucent/fishi-core";
 
 // src/analyzers/detector.ts
 import fs from "fs";
@@ -1005,6 +1005,23 @@ async function initCommand(description, options) {
   } else {
     initOptions = await runWizard(options);
   }
+  const dockerAvailable = detectDocker();
+  let sandboxMode = "process";
+  if (options.interactive !== false) {
+    if (dockerAvailable) {
+      const { useSandbox } = await inquirer.prompt([{
+        type: "confirm",
+        name: "useSandbox",
+        message: "Docker detected. Use Docker sandbox for agent isolation? (Recommended)",
+        default: true
+      }]);
+      sandboxMode = useSandbox ? "docker" : "process";
+    } else {
+      console.log(chalk.yellow("  Docker not found. Using process-level sandbox (limited isolation)."));
+      console.log(chalk.gray("  Install Docker for full agent isolation: https://docs.docker.com/get-docker/"));
+      console.log("");
+    }
+  }
   let brownfieldAnalysis = null;
   if (detection.type === "brownfield" || detection.type === "hybrid") {
     console.log("");
@@ -1148,6 +1165,21 @@ async function initCommand(description, options) {
       const report = generateBrownfieldReport(brownfieldAnalysis);
       fs3.writeFileSync(reportPath, report, "utf-8");
     }
+    const sandboxYaml = `
+sandbox:
+  mode: ${sandboxMode}
+  docker_available: ${dockerAvailable}
+`;
+    const fishiYamlPath = path3.join(targetDir, ".fishi", "fishi.yaml");
+    if (fs3.existsSync(fishiYamlPath)) {
+      fs3.appendFileSync(fishiYamlPath, sandboxYaml, "utf-8");
+    }
+    const { getSandboxPolicyTemplate, getDockerfileTemplate } = await import("@qlucent/fishi-core");
+    fs3.writeFileSync(path3.join(targetDir, ".fishi", "sandbox-policy.yaml"), getSandboxPolicyTemplate(), "utf-8");
+    if (sandboxMode === "docker") {
+      fs3.mkdirSync(path3.join(targetDir, ".fishi", "docker"), { recursive: true });
+      fs3.writeFileSync(path3.join(targetDir, ".fishi", "docker", "Dockerfile"), getDockerfileTemplate(), "utf-8");
+    }
     scaffoldSpinner.succeed("FISHI framework scaffolded successfully!");
     console.log("");
     console.log(chalk.bold("  Created:"));
@@ -1158,6 +1190,7 @@ async function initCommand(description, options) {
     console.log(chalk.gray(`  \u{1F4C4} .claude/CLAUDE.md       \u2014 Project instructions`));
     console.log(chalk.gray(`  \u{1F4C4} .claude/settings.json   \u2014 Hooks & permissions`));
     console.log(chalk.gray(`  \u{1F4C4} .mcp.json               \u2014 MCP server config`));
+    console.log(chalk.gray(`  \u{1F512} Sandbox:              ${sandboxMode} mode${sandboxMode === "docker" ? " (full isolation)" : " (limited isolation)"}`));
     if (brownfieldAnalysis) {
       console.log(chalk.gray(`  \u{1F4C4} .fishi/memory/brownfield-analysis.md \u2014 Codebase analysis report`));
       console.log("");
@@ -1898,11 +1931,50 @@ async function dashboardCommand(options) {
   });
 }
 
+// src/commands/sandbox.ts
+import chalk8 from "chalk";
+import fs10 from "fs";
+import path10 from "path";
+import { detectDocker as detectDocker2, readSandboxConfig, readSandboxPolicy } from "@qlucent/fishi-core";
+async function sandboxCommand(action) {
+  const targetDir = process.cwd();
+  if (!fs10.existsSync(path10.join(targetDir, ".fishi"))) {
+    console.log(chalk8.yellow("  No FISHI project found. Run `fishi init` first."));
+    return;
+  }
+  if (action === "status") {
+    const config = readSandboxConfig(targetDir);
+    const dockerNow = detectDocker2();
+    console.log("");
+    console.log(chalk8.cyan.bold("  FISHI Sandbox Status"));
+    console.log("");
+    console.log(chalk8.white("  Mode:             ") + (config.mode === "docker" ? chalk8.green("Docker") : chalk8.yellow("Process")));
+    console.log(chalk8.white("  Docker available:  ") + (dockerNow ? chalk8.green("yes") : chalk8.red("no")));
+    if (config.mode === "docker" && !dockerNow) {
+      console.log(chalk8.red("  Warning: Docker mode configured but Docker not available!"));
+    }
+    console.log("");
+    const policy = readSandboxPolicy(targetDir);
+    console.log(chalk8.white.bold("  Policy"));
+    console.log(chalk8.gray(`    Timeout:         ${policy.timeout}s`));
+    console.log(chalk8.gray(`    Memory limit:    ${policy.memory}`));
+    console.log(chalk8.gray(`    CPU limit:       ${policy.cpus}`));
+    console.log(chalk8.gray(`    Network allow:   ${policy.networkAllow.join(", ")}`));
+    console.log(chalk8.gray(`    Env passthrough: ${policy.envPassthrough.length > 0 ? policy.envPassthrough.join(", ") : "(none)"}`));
+    console.log("");
+  } else if (action === "policy") {
+    const policy = readSandboxPolicy(targetDir);
+    console.log(JSON.stringify(policy, null, 2));
+  } else {
+    console.log(chalk8.yellow(`  Unknown action: ${action}. Use: status, policy`));
+  }
+}
+
 // src/index.ts
 var program = new Command();
 program.name("fishi").description(
-  chalk8.cyan("\u{1F41F} FISHI") + " \u2014 Your AI Dev Team That Actually Ships\n   Autonomous agent framework for Claude Code"
-).version("0.6.0");
+  chalk9.cyan("\u{1F41F} FISHI") + " \u2014 Your AI Dev Team That Actually Ships\n   Autonomous agent framework for Claude Code"
+).version("0.7.0");
 program.command("init").description("Initialize FISHI in the current directory").argument("[description]", "Project description (skip wizard with zero-config)").option("-l, --language <lang>", "Primary language (e.g., typescript, python)").option("-f, --framework <framework>", "Framework (e.g., nextjs, express, django)").option(
   "-c, --cost-mode <mode>",
   "Cost mode: performance | balanced | economy",
@@ -1914,4 +1986,5 @@ program.command("reset").description("Rollback to a previous checkpoint").argume
 program.command("validate").description("Validate scaffold integrity \u2014 checks files, frontmatter, cross-references, pipeline, and permissions").action(validateCommand);
 program.command("monitor").description("Agent observability \u2014 TUI dashboard showing agent activity, tokens, gates").option("-w, --watch", "Watch mode \u2014 auto-refresh on changes").action(monitorCommand);
 program.command("dashboard").description("Agent observability \u2014 web dashboard at http://localhost:4269").option("-p, --port <port>", "Port number", "4269").action(dashboardCommand);
+program.command("sandbox").description("Sandbox status and policy management").argument("<action>", "Action: status | policy").action(sandboxCommand);
 program.parse();

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@qlucent/fishi",
-  "version": "0.6.0",
+  "version": "0.7.0",
   "description": "FISHI — Your AI Dev Team That Actually Ships. Autonomous agent framework for Claude Code.",
   "license": "MIT",
   "type": "module",