@tianshu-ai/tianshu 0.3.0

package/plugins/microsandbox/dist/server.js

@@ -0,0 +1,276 @@
+// MicroSandbox plugin server entry (ADR-0004 §9 + §10, N+3, N+4).
+//
+// What activate() does:
+// - buildRunner() picks between the real microsandbox runner and
+//   the nullable fallback.
+// - exports.sandboxes["MicroSandboxRunner"] registers the runner
+//   under the manifest's `sandbox.shell` capability.
+// - exports.tools registers seven agent tools (exec, reset_sandbox,
+//   get_sandbox_status, update_sandbox_config, build_sandbox,
+//   list_sandbox_builds, use_sandbox_build). The host collects
+//   these via PluginRegistry.toolsForTenant() each agent turn and
+//   gates each through its own `available()` hook.
+// - exports.routes wires the GET /status, the four admin endpoints
+//   (sandboxfile read/write, builds list/build/use), and the
+//   reset endpoint behind /api/p/microsandbox/<route>.
+//
+// Browser sidecar (browser.cdp) and the chromium/Playwright-MCP
+// stack land in a follow-up PR.
+import * as path from "node:path";
+import { fileURLToPath } from "node:url";
+import { buildRunner } from "./runner/index.js";
+import { SandboxPool } from "./runner/pool.js";
+import { BrowserHealthCheckTool, BuildSandboxTool, ExecTool, GetSandboxStatusTool, ListSandboxBuildsTool, ResetSandboxTool, UpdateSandboxConfigTool, UseSandboxBuildTool, makeBrowserToolset, } from "./tools/index.js";
+import { buildAdminRoutes } from "./admin/routes.js";
+import { buildBrowserRoutes } from "./admin/browser-routes.js";
+import { loadTemplates } from "./admin/templates.js";
+let active = null;
+function getRunner() {
+    return active?.built.runner ?? null;
+}
+/**
+ * Build the SandboxRunner facade exposed under `sandbox.shell`.
+ * Almost every method delegates to the long-lived Browser runner
+ * unchanged. The exception is `exec()`: when the call carries a
+ * taskId (explicit or resolved via session binding), we dispatch
+ * to the pool's per-task sandbox.
+ */
+function buildRoutedRunner(browserRunner, pool) {
+    // Build a lightweight proxy that forwards every field except
+    // exec to the underlying browser runner. Plain `Proxy` keeps
+    // the prototype + future SDK additions auto-forwarded without a
+    // version-bump churn here.
+    return new Proxy(browserRunner, {
+        get(target, prop, receiver) {
+            if (prop === "exec") {
+                return async (req) => {
+                    const taskId = req.taskId ??
+                        (req.sessionId
+                            ? pool.resolveBySession(req.sessionId)?.taskId
+                            : undefined);
+                    if (taskId && pool.get(taskId)) {
+                        return pool.execForTask(taskId, req);
+                    }
+                    return target.exec(req);
+                };
+            }
+            const value = Reflect.get(target, prop, receiver);
+            // Bind functions so `this` stays the underlying runner.
+            return typeof value === "function" ? value.bind(target) : value;
+        },
+    });
+}
+const templatesRoute = async (_req, res) => {
+    if (!active) {
+        res.status(503).json({ error: "not_started" });
+        return;
+    }
+    res.json({ templates: active.templates });
+};
+const statusRoute = async (_req, res) => {
+    if (!active) {
+        res.status(503).json({ error: "not_started" });
+        return;
+    }
+    try {
+        const status = await active.built.runner.status();
+        // Live memory probe — cheap, useful, and the user's #1 ask
+        // ("is the sandbox actually using the 8 GiB I gave it, or
+        // OOM-ing at 2 GiB because of some default I don't see?").
+        // Only probe when state==='ready' so a status poll doesn't
+        // cold-start an idle sandbox; nullable / starting / error all
+        // skip and the UI just shows "—".
+        let liveMemory = null;
+        if (status.state === "ready" && active.built.ready) {
+            try {
+                const r = await active.built.runner.exec({
+                    command: "awk '/^MemTotal/{t=$2}/^MemAvailable/{a=$2}END{print t\" \"a}' /proc/meminfo",
+                    // Tight timeout: meminfo on a live VM is a sub-ms read.
+                    // If we can't get an answer in 2s the VM is wedged and
+                    // skipping memory in the response is the right call.
+                    timeoutMs: 2000,
+                });
+                if (r.exitCode === 0) {
+                    const [tStr, aStr] = r.stdout.trim().split(/\s+/);
+                    const t = Number(tStr);
+                    const a = Number(aStr);
+                    if (Number.isFinite(t) && Number.isFinite(a)) {
+                        liveMemory = {
+                            totalKb: t,
+                            availableKb: a,
+                            usedKb: Math.max(0, t - a),
+                        };
+                    }
+                }
+            }
+            catch {
+                // Probe is best-effort. Fall through with liveMemory=null.
+            }
+        }
+        res.json({
+            ...status,
+            ready: active.built.ready,
+            runner: active.built.ready ? "microsandbox" : "nullable",
+            liveMemory,
+        });
+    }
+    catch (err) {
+        res.status(500).json({
+            error: "status_failed",
+            message: err instanceof Error ? err.message : String(err),
+        });
+    }
+};
+export default {
+    async activate(ctx) {
+        const built = await buildRunner({
+            pluginId: ctx.pluginId,
+            contributionId: "main",
+            workspaceDir: ctx.workspaceDir,
+            tenantId: ctx.tenantId,
+            rawConfig: ctx.pluginConfig,
+        });
+        // ctx.workspaceDir is `<tenantHomeDir>/tenants/<id>/workspace`,
+        // so two `dirname()` calls reach the host's tenants root, then
+        // one more reaches the tenant home root used by AgentToolContext.
+        // (path.dirname twice → strip "/workspace" + strip "/<tenantId>"
+        // gives `<tenantHomeDir>/tenants`; we want one more level up.)
+        const tenantHomeDir = pathTenantHomeDir(ctx.workspaceDir);
+        // Templates live next to the manifest at runtime, mirrored
+        // to builtinConfig by sync-builtin-plugins.mjs. Resolve
+        // relative to this server.js (`dist/server.js`); the manifest
+        // dir is one level up.
+        const templatesDir = path.resolve(path.dirname(fileURLToPath(import.meta.url)), "..", "templates");
+        let templates = [];
+        try {
+            templates = await loadTemplates(templatesDir);
+            ctx.log.info(`loaded ${templates.length} sandbox template(s) from ${templatesDir}`);
+        }
+        catch (err) {
+            // Don't fail activate — the user can still author from
+            // scratch. Surface as a warning so the plugin manager UI
+            // shows it.
+            ctx.log.warn(`failed to load sandbox templates from ${templatesDir}: ${err instanceof Error ? err.message : String(err)}`);
+        }
+        const pool = new SandboxPool({
+            tenantId: ctx.tenantId,
+            workspaceDir: ctx.workspaceDir,
+            config: built.config,
+            log: ctx.log,
+        });
+        const routedRunner = buildRoutedRunner(built.runner, pool);
+        active = {
+            built,
+            log: ctx.log,
+            tenantHomeDir,
+            tenantId: ctx.tenantId,
+            workspaceDir: ctx.workspaceDir,
+            sandboxName: `tianshu-${ctx.tenantId}`,
+            templates,
+            pool,
+            routedRunner,
+        };
+        if (built.ready) {
+            ctx.log.info(built.selectedReason);
+            // Eager start: kick off the VM in the background so the
+            // sandbox is warm by the time the agent (or the user) calls
+            // anything. Per Yu 2026-06-06: "还是一直开着，以后还要做后台一直跑的服务".
+            // Errors during warm-up land in runner.status().lastError; we
+            // don't await because activate() shouldn't block on it.
+            const runner = built.runner;
+            if (typeof runner.warmUp === "function") {
+                runner.warmUp();
+            }
+        }
+        else {
+            ctx.log.warn(built.selectedReason);
+        }
+        const browserRoutes = buildBrowserRoutes({
+            getRunner,
+        });
+        const adminRoutes = buildAdminRoutes({
+            getRunner,
+            // The pool is owned by the activate closure (no module
+            // global), so we expose it via a closure rather than a
+            // module-level getter. Returns null only if a future
+            // refactor decouples pool creation from activate.
+            getPool: () => active?.pool ?? null,
+            tenantId: active.tenantId,
+            workspaceDir: active.workspaceDir,
+            tenantHomeDir: active.tenantHomeDir,
+            sandboxName: active.sandboxName,
+        });
+        // The Playwright MCP toolset is wired regardless of whether
+        // the runner currently exposes a browser sidecar — listTools()
+        // simply returns [] until the sandbox starts emitting an MCP
+        // host port. Refresh on demand from the host /api/mcp/servers
+        // route or implicitly each agent turn.
+        const browserToolset = makeBrowserToolset({
+            getSidecar: () => getRunner()?.browser ?? null,
+            log: ctx.log,
+        });
+        return {
+            sandboxes: {
+                MicroSandboxRunner: routedRunner,
+            },
+            taskSandboxPool: pool,
+            tools: {
+                ExecTool,
+                ResetSandboxTool,
+                GetSandboxStatusTool,
+                UpdateSandboxConfigTool,
+                BuildSandboxTool,
+                ListSandboxBuildsTool,
+                UseSandboxBuildTool,
+                BrowserHealthCheckTool,
+            },
+            toolsetProviders: {
+                BrowserToolset: browserToolset,
+            },
+            routes: {
+                status: statusRoute,
+                getSandboxfile: adminRoutes.getSandboxfile,
+                putSandboxfile: adminRoutes.putSandboxfile,
+                getSandboxfileTemplates: templatesRoute,
+                getBuilds: adminRoutes.getBuilds,
+                postBuilds: adminRoutes.postBuilds,
+                postUseBuild: adminRoutes.postUseBuild,
+                postReset: adminRoutes.postReset,
+                postExec: adminRoutes.postExec,
+                getTaskPool: adminRoutes.getTaskPool,
+                postTaskPoolDestroy: adminRoutes.postTaskPoolDestroy,
+                getBrowserStatus: browserRoutes.getBrowserStatus,
+                postBrowserRestart: browserRoutes.postBrowserRestart,
+                postBrowserResize: browserRoutes.postBrowserResize,
+            },
+        };
+    },
+    async deactivate() {
+        if (!active)
+            return;
+        // Stop every running task sandbox first; they hold per-task
+        // microVMs that the long-lived runner doesn't know about.
+        try {
+            await active.pool.dispose();
+        }
+        catch (err) {
+            active.log.warn(`task pool dispose during deactivate failed: ${err instanceof Error ? err.message : String(err)}`);
+        }
+        try {
+            await active.built.runner.shutdown();
+        }
+        catch {
+            // best-effort
+        }
+        active = null;
+    },
+};
+/**
+ * `ctx.workspaceDir` is `<tenantHomeDir>/tenants/<tenantId>/workspace`.
+ * Walk up three directory levels to recover the tenant home dir
+ * (the same value the host sets as `AgentToolContext.tenantHomeDir`).
+ */
+function pathTenantHomeDir(workspaceDir) {
+    return path.resolve(workspaceDir, "..", "..", "..");
+}
+//# sourceMappingURL=server.js.map

package/plugins/microsandbox/dist/server.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"server.js","sourceRoot":"","sources":["../src/server.ts"],"names":[],"mappings":"AAAA,kEAAkE;AAClE,EAAE;AACF,wBAAwB;AACxB,iEAAiE;AACjE,2BAA2B;AAC3B,iEAAiE;AACjE,qDAAqD;AACrD,oEAAoE;AACpE,8DAA8D;AAC9D,+DAA+D;AAC/D,kEAAkE;AAClE,mDAAmD;AACnD,mEAAmE;AACnE,6DAA6D;AAC7D,uDAAuD;AACvD,EAAE;AACF,gEAAgE;AAChE,gCAAgC;AAEhC,OAAO,KAAK,IAAI,MAAM,WAAW,CAAC;AAClC,OAAO,EAAE,aAAa,EAAE,MAAM,UAAU,CAAC;AAWzC,OAAO,EAAE,WAAW,EAAoB,MAAM,mBAAmB,CAAC;AAClE,OAAO,EAAE,WAAW,EAAE,MAAM,kBAAkB,CAAC;AAC/C,OAAO,EACL,sBAAsB,EACtB,gBAAgB,EAChB,QAAQ,EACR,oBAAoB,EACpB,qBAAqB,EACrB,gBAAgB,EAChB,uBAAuB,EACvB,mBAAmB,EACnB,kBAAkB,GACnB,MAAM,kBAAkB,CAAC;AAC1B,OAAO,EAAE,gBAAgB,EAAE,MAAM,mBAAmB,CAAC;AACrD,OAAO,EAAE,kBAAkB,EAAE,MAAM,2BAA2B,CAAC;AAC/D,OAAO,EAAE,aAAa,EAA4B,MAAM,sBAAsB,CAAC;AAuB/E,IAAI,MAAM,GAAuB,IAAI,CAAC;AAEtC,SAAS,SAAS;IAChB,OAAO,MAAM,EAAE,KAAK,CAAC,MAAM,IAAI,IAAI,CAAC;AACtC,CAAC;AAED;;;;;;GAMG;AACH,SAAS,iBAAiB,CACxB,aAA4B,EAC5B,IAAiB;IAEjB,6DAA6D;IAC7D,6DAA6D;IAC7D,gEAAgE;IAChE,2BAA2B;IAC3B,OAAO,IAAI,KAAK,CAAC,aAAa,EAAE;QAC9B,GAAG,CAAC,MAAM,EAAE,IAAI,EAAE,QAAQ;YACxB,IAAI,IAAI,KAAK,MAAM,EAAE,CAAC;gBACpB,OAAO,KAAK,EAAE,GAAgB,EAAuB,EAAE;oBACrD,MAAM,MAAM,GACV,GAAG,CAAC,MAAM;wBACV,CAAC,GAAG,CAAC,SAAS;4BACZ,CAAC,CAAC,IAAI,CAAC,gBAAgB,CAAC,GAAG,CAAC,SAAS,CAAC,EAAE,MAAM;4BAC9C,CAAC,CAAC,SAAS,CAAC,CAAC;oBACjB,IAAI,MAAM,IAAI,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC;wBAC/B,OAAO,IAAI,CAAC,WAAW,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC;oBACvC,CAAC;oBACD,OAAO,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;gBAC1B,CAAC,CAAC;YACJ,CAAC;YACD,MAAM,KAAK,GAAG,OAAO,CAAC,GAAG,CAAC,MAAM,EAAE,IAAI,EAAE,QAAQ,CAAC,CAAC;YAClD,wDAAwD;YACxD,OAAO,OAAO,KAAK,KAAK,UAAU,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC;QAClE,CAAC;KACF,CAAC,CAAC;AACL,CAAC;AAED,MAAM,cAAc,GAAuB,KAAK,EAAE,IAAI,EAAE,GAAG,EAAE,EAAE;IAC7D,IAAI,CAAC,MAAM,EAAE,CAAC;QACZ,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,aAAa,EAAE,CAAC,CAAC;QAC/C,OAAO;IACT,CAAC;IACD,GAAG,CAAC,IAAI,CAAC,EAAE,SAAS,EAAE,MAAM,CAAC,SAAS,EAAE,CAAC,CAAC;AAC5C,CAAC,CAAC;AAEF,MAAM,WAAW,GAAuB,KAAK,EAAE,IAAI,EAAE,GAAG,EAAE,EAAE;IAC1D,IAAI,CAAC,MAAM,EAAE,CAAC;QACZ,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,aAAa,EAAE,CAAC,CAAC;QAC/C,OAAO;IACT,CAAC;IACD,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,MAAM,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,MAAM,EAAE,CAAC;QAClD,2DAA2D;QAC3D,0DAA0D;QAC1D,2DAA2D;QAC3D,2DAA2D;QAC3D,8DAA8D;QAC9D,kCAAkC;QAClC,IAAI,UAAU,GAIH,IAAI,CAAC;QAChB,IAAI,MAAM,CAAC,KAAK,KAAK,OAAO,IAAI,MAAM,CAAC,KAAK,CAAC,KAAK,EAAE,CAAC;YACnD,IAAI,CAAC;gBACH,MAAM,CAAC,GAAG,MAAM,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,IAAI,CAAC;oBACvC,OAAO,EACL,8EAA8E;oBAChF,wDAAwD;oBACxD,uDAAuD;oBACvD,qDAAqD;oBACrD,SAAS,EAAE,IAAI;iBAChB,CAAC,CAAC;gBACH,IAAI,CAAC,CAAC,QAAQ,KAAK,CAAC,EAAE,CAAC;oBACrB,MAAM,CAAC,IAAI,EAAE,IAAI,CAAC,GAAG,CAAC,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;oBAClD,MAAM,CAAC,GAAG,MAAM,CAAC,IAAI,CAAC,CAAC;oBACvB,MAAM,CAAC,GAAG,MAAM,CAAC,IAAI,CAAC,CAAC;oBACvB,IAAI,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC,IAAI,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,CAAC;wBAC7C,UAAU,GAAG;4BACX,OAAO,EAAE,CAAC;4BACV,WAAW,EAAE,CAAC;4BACd,MAAM,EAAE,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,CAAC,GAAG,CAAC,CAAC;yBAC3B,CAAC;oBACJ,CAAC;gBACH,CAAC;YACH,CAAC;YAAC,MAAM,CAAC;gBACP,2DAA2D;YAC7D,CAAC;QACH,CAAC;QACD,GAAG,CAAC,IAAI,CAAC;YACP,GAAG,MAAM;YACT,KAAK,EAAE,MAAM,CAAC,KAAK,CAAC,KAAK;YACzB,MAAM,EAAE,MAAM,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,cAAc,CAAC,CAAC,CAAC,UAAU;YACxD,UAAU;SACX,CAAC,CAAC;IACL,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC;YACnB,KAAK,EAAE,eAAe;YACtB,OAAO,EAAE,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC;SAC1D,CAAC,CAAC;IACL,CAAC;AACH,CAAC,CAAC;AAEF,eAAe;IACb,KAAK,CAAC,QAAQ,CAAC,GAAkB;QAC/B,MAAM,KAAK,GAAG,MAAM,WAAW,CAAC;YAC9B,QAAQ,EAAE,GAAG,CAAC,QAAQ;YACtB,cAAc,EAAE,MAAM;YACtB,YAAY,EAAE,GAAG,CAAC,YAAY;YAC9B,QAAQ,EAAE,GAAG,CAAC,QAAQ;YACtB,SAAS,EAAE,GAAG,CAAC,YAAY;SAC5B,CAAC,CAAC;QACH,gEAAgE;QAChE,+DAA+D;QAC/D,kEAAkE;QAClE,iEAAiE;QACjE,+DAA+D;QAC/D,MAAM,aAAa,GAAG,iBAAiB,CAAC,GAAG,CAAC,YAAY,CAAC,CAAC;QAE1D,2DAA2D;QAC3D,wDAAwD;QACxD,8DAA8D;QAC9D,uBAAuB;QACvB,MAAM,YAAY,GAAG,IAAI,CAAC,OAAO,CAC/B,IAAI,CAAC,OAAO,CAAC,aAAa,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,EAC5C,IAAI,EACJ,WAAW,CACZ,CAAC;QACF,IAAI,SAAS,GAA0B,EAAE,CAAC;QAC1C,IAAI,CAAC;YACH,SAAS,GAAG,MAAM,aAAa,CAAC,YAAY,CAAC,CAAC;YAC9C,GAAG,CAAC,GAAG,CAAC,IAAI,CACV,UAAU,SAAS,CAAC,MAAM,6BAA6B,YAAY,EAAE,CACtE,CAAC;QACJ,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,uDAAuD;YACvD,yDAAyD;YACzD,YAAY;YACZ,GAAG,CAAC,GAAG,CAAC,IAAI,CACV,yCAAyC,YAAY,KACnD,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CACjD,EAAE,CACH,CAAC;QACJ,CAAC;QAED,MAAM,IAAI,GAAG,IAAI,WAAW,CAAC;YAC3B,QAAQ,EAAE,GAAG,CAAC,QAAQ;YACtB,YAAY,EAAE,GAAG,CAAC,YAAY;YAC9B,MAAM,EAAE,KAAK,CAAC,MAAM;YACpB,GAAG,EAAE,GAAG,CAAC,GAAG;SACb,CAAC,CAAC;QACH,MAAM,YAAY,GAAG,iBAAiB,CAAC,KAAK,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC;QAE3D,MAAM,GAAG;YACP,KAAK;YACL,GAAG,EAAE,GAAG,CAAC,GAAG;YACZ,aAAa;YACb,QAAQ,EAAE,GAAG,CAAC,QAAQ;YACtB,YAAY,EAAE,GAAG,CAAC,YAAY;YAC9B,WAAW,EAAE,WAAW,GAAG,CAAC,QAAQ,EAAE;YACtC,SAAS;YACT,IAAI;YACJ,YAAY;SACb,CAAC;QACF,IAAI,KAAK,CAAC,KAAK,EAAE,CAAC;YAChB,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,KAAK,CAAC,cAAc,CAAC,CAAC;YACnC,wDAAwD;YACxD,4DAA4D;YAC5D,uDAAuD;YACvD,8DAA8D;YAC9D,wDAAwD;YACxD,MAAM,MAAM,GAAG,KAAK,CAAC,MAEpB,CAAC;YACF,IAAI,OAAO,MAAM,CAAC,MAAM,KAAK,UAAU,EAAE,CAAC;gBACxC,MAAM,CAAC,MAAM,EAAE,CAAC;YAClB,CAAC;QACH,CAAC;aAAM,CAAC;YACN,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,KAAK,CAAC,cAAc,CAAC,CAAC;QACrC,CAAC;QAED,MAAM,aAAa,GAAG,kBAAkB,CAAC;YACvC,SAAS;SACV,CAAC,CAAC;QAEH,MAAM,WAAW,GAAG,gBAAgB,CAAC;YACnC,SAAS;YACT,uDAAuD;YACvD,uDAAuD;YACvD,qDAAqD;YACrD,kDAAkD;YAClD,OAAO,EAAE,GAAG,EAAE,CAAC,MAAM,EAAE,IAAI,IAAI,IAAI;YACnC,QAAQ,EAAE,MAAM,CAAC,QAAQ;YACzB,YAAY,EAAE,MAAM,CAAC,YAAY;YACjC,aAAa,EAAE,MAAM,CAAC,aAAa;YACnC,WAAW,EAAE,MAAM,CAAC,WAAW;SAChC,CAAC,CAAC;QAEH,4DAA4D;QAC5D,+DAA+D;QAC/D,6DAA6D;QAC7D,8DAA8D;QAC9D,uCAAuC;QACvC,MAAM,cAAc,GAAG,kBAAkB,CAAC;YACxC,UAAU,EAAE,GAA0B,EAAE,CAAC,SAAS,EAAE,EAAE,OAAO,IAAI,IAAI;YACrE,GAAG,EAAE,GAAG,CAAC,GAAG;SACb,CAAC,CAAC;QAEH,OAAO;YACL,SAAS,EAAE;gBACT,kBAAkB,EAAE,YAAY;aACjC;YACD,eAAe,EAAE,IAAI;YACrB,KAAK,EAAE;gBACL,QAAQ;gBACR,gBAAgB;gBAChB,oBAAoB;gBACpB,uBAAuB;gBACvB,gBAAgB;gBAChB,qBAAqB;gBACrB,mBAAmB;gBACnB,sBAAsB;aACvB;YACD,gBAAgB,EAAE;gBAChB,cAAc,EAAE,cAAc;aAC/B;YACD,MAAM,EAAE;gBACN,MAAM,EAAE,WAAW;gBACnB,cAAc,EAAE,WAAW,CAAC,cAAc;gBAC1C,cAAc,EAAE,WAAW,CAAC,cAAc;gBAC1C,uBAAuB,EAAE,cAAc;gBACvC,SAAS,EAAE,WAAW,CAAC,SAAS;gBAChC,UAAU,EAAE,WAAW,CAAC,UAAU;gBAClC,YAAY,EAAE,WAAW,CAAC,YAAY;gBACtC,SAAS,EAAE,WAAW,CAAC,SAAS;gBAChC,QAAQ,EAAE,WAAW,CAAC,QAAQ;gBAC9B,WAAW,EAAE,WAAW,CAAC,WAAW;gBACpC,mBAAmB,EAAE,WAAW,CAAC,mBAAmB;gBACpD,gBAAgB,EAAE,aAAa,CAAC,gBAAgB;gBAChD,kBAAkB,EAAE,aAAa,CAAC,kBAAkB;gBACpD,iBAAiB,EAAE,aAAa,CAAC,iBAAiB;aACnD;SACF,CAAC;IACJ,CAAC;IACD,KAAK,CAAC,UAAU;QACd,IAAI,CAAC,MAAM;YAAE,OAAO;QACpB,4DAA4D;QAC5D,0DAA0D;QAC1D,IAAI,CAAC;YACH,MAAM,MAAM,CAAC,IAAI,CAAC,OAAO,EAAE,CAAC;QAC9B,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,MAAM,CAAC,GAAG,CAAC,IAAI,CACb,+CAA+C,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,CAClG,CAAC;QACJ,CAAC;QACD,IAAI,CAAC;YACH,MAAM,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,QAAQ,EAAE,CAAC;QACvC,CAAC;QAAC,MAAM,CAAC;YACP,cAAc;QAChB,CAAC;QACD,MAAM,GAAG,IAAI,CAAC;IAChB,CAAC;CACF,CAAC;AAEF;;;;GAIG;AACH,SAAS,iBAAiB,CAAC,YAAoB;IAC7C,OAAO,IAAI,CAAC,OAAO,CAAC,YAAY,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,CAAC,CAAC;AACtD,CAAC"}

package/plugins/microsandbox/dist/tools/browser.d.ts

@@ -0,0 +1,25 @@
+import type { AgentToolContext, BrowserSidecar, PluginLogger } from "@tianshu/plugin-sdk";
+import { McpToolset } from "@tianshu/plugin-sdk";
+/**
+ * Build the Playwright-MCP toolset for one active plugin tenant.
+ * Caller wires this object into `exports.toolsetProviders` and
+ * triggers `refresh()` whenever the BrowserSidecar's MCP host port
+ * transitions from undefined → number (e.g. after sandbox start).
+ *
+ * The endpoint resolver re-reads `sidecar.mcpHostPort()` on every
+ * refresh, so a sandbox reset (which picks a new free port) is
+ * handled transparently.
+ */
+export declare function makeBrowserToolset(opts: {
+    /** Sidecar wrapper around the active runner. Read every refresh. */
+    getSidecar: () => BrowserSidecar | null;
+    /** Plugin logger; used for refresh-error breadcrumbs. */
+    log: PluginLogger;
+}): McpToolset;
+/**
+ * Type-marker re-export so server.ts stays self-contained when we
+ * later add per-tool helpers (post-processing, custom describe()
+ * blocks) without churning the import graph.
+ */
+export type { AgentToolContext };
+//# sourceMappingURL=browser.d.ts.map

package/plugins/microsandbox/dist/tools/browser.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"browser.d.ts","sourceRoot":"","sources":["../../src/tools/browser.ts"],"names":[],"mappings":"AA2BA,OAAO,KAAK,EACV,gBAAgB,EAChB,cAAc,EACd,YAAY,EACb,MAAM,qBAAqB,CAAC;AAC7B,OAAO,EAAE,UAAU,EAAE,MAAM,qBAAqB,CAAC;AAEjD;;;;;;;;;GASG;AACH,wBAAgB,kBAAkB,CAAC,IAAI,EAAE;IACvC,oEAAoE;IACpE,UAAU,EAAE,MAAM,cAAc,GAAG,IAAI,CAAC;IACxC,yDAAyD;IACzD,GAAG,EAAE,YAAY,CAAC;CACnB,GAAG,UAAU,CA0Cb;AAED;;;;GAIG;AACH,YAAY,EAAE,gBAAgB,EAAE,CAAC"}

package/plugins/microsandbox/dist/tools/browser.js

@@ -0,0 +1,78 @@
+// Browser toolset: reflect every tool advertised by the per-tenant
+// Playwright MCP server into AgentTools.
+//
+// History: in N+5.3 we hand-wrote three wrappers (browser_navigate,
+// browser_snapshot, browser_screenshot) that proxied through the
+// internal McpClient. Yu's correct push-back ("why not just expose
+// MCP directly?") plus the realisation that we were burning a wrapper
+// per tool for no real win led to N+5.4. Now we use the SDK-supplied
+// `McpToolset`, which:
+//
+//   - calls Playwright MCP's `tools/list` once the sandbox is up
+//   - reflects every advertised tool (~25 today) into a pi-ai
+//     AgentTool with the upstream schema verbatim
+//   - re-runs `tools/list` on demand (refresh()) so we pick up
+//     additions when the upstream package upgrades
+//   - keeps tool names prefixed with "" (no extra prefix — the
+//     upstream already names them `browser_*`) so the agent UI
+//     stays readable
+//   - shows up in the global /admin/mcp page via
+//     `provider.snapshot()`
+//
+// What's *not* here: post-processing of MCP results. The SDK's
+// `textOfMcpContent` already extracts text blocks and surfaces
+// them as the tool's `text` field (with the structured payload
+// preserved on `data`). Anything fancier (e.g. snapshot
+// summarisation) goes in describe() / a custom Toolset subclass.
+import { McpToolset } from "@tianshu/plugin-sdk";
+/**
+ * Build the Playwright-MCP toolset for one active plugin tenant.
+ * Caller wires this object into `exports.toolsetProviders` and
+ * triggers `refresh()` whenever the BrowserSidecar's MCP host port
+ * transitions from undefined → number (e.g. after sandbox start).
+ *
+ * The endpoint resolver re-reads `sidecar.mcpHostPort()` on every
+ * refresh, so a sandbox reset (which picks a new free port) is
+ * handled transparently.
+ */
+export function makeBrowserToolset(opts) {
+    const toolset = new McpToolset({
+        name: "playwright",
+        // Upstream tools are already `browser_*`; an extra prefix would
+        // give us `playwright_browser_*` which is silly. The model-facing
+        // name stays the same as before.
+        prefix: "",
+        resolve: () => {
+            const s = opts.getSidecar();
+            const port = s?.mcpHostPort();
+            return port ? `http://127.0.0.1:${port}` : undefined;
+        },
+        // Playwright MCP server inside the sandbox is bound to
+        // `localhost:3200`; we connect through a host-side port forward
+        // so set the Host header to match what the upstream allows.
+        upstreamHost: "localhost:3200",
+        // Trim Playwright's wall-of-text descriptions to something
+        // closer to one line per tool — the agent's prompt budget is
+        // tight and the upstream descriptions repeat a lot of preamble.
+        describe: (t) => {
+            if (!t.description)
+                return undefined;
+            const firstSentence = t.description.split(/(?<=[.!?])\s+/)[0]?.trim();
+            // Keep first sentence + "(Playwright MCP)" suffix so the
+            // model knows where the capability comes from. This mirrors
+            // the labelling style of other server-prefixed tools.
+            return firstSentence
+                ? `${firstSentence} (Playwright MCP)`
+                : t.description;
+        },
+    });
+    // Best-effort prime: try to populate the tool list now so the
+    // first agent turn already sees the surface. The toolset itself
+    // also self-refreshes lazily on each tools call, so failures here
+    // (sandbox not booted yet) are non-fatal.
+    void toolset.refresh().catch((err) => {
+        opts.log.warn(`playwright MCP toolset initial refresh failed: ${err instanceof Error ? err.message : String(err)}`);
+    });
+    return toolset;
+}
+//# sourceMappingURL=browser.js.map

package/plugins/microsandbox/dist/tools/browser.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"browser.js","sourceRoot":"","sources":["../../src/tools/browser.ts"],"names":[],"mappings":"AAAA,mEAAmE;AACnE,yCAAyC;AACzC,EAAE;AACF,oEAAoE;AACpE,iEAAiE;AACjE,mEAAmE;AACnE,sEAAsE;AACtE,qEAAqE;AACrE,uBAAuB;AACvB,EAAE;AACF,iEAAiE;AACjE,8DAA8D;AAC9D,kDAAkD;AAClD,+DAA+D;AAC/D,mDAAmD;AACnD,+DAA+D;AAC/D,+DAA+D;AAC/D,qBAAqB;AACrB,iDAAiD;AACjD,4BAA4B;AAC5B,EAAE;AACF,+DAA+D;AAC/D,+DAA+D;AAC/D,+DAA+D;AAC/D,wDAAwD;AACxD,iEAAiE;AAOjE,OAAO,EAAE,UAAU,EAAE,MAAM,qBAAqB,CAAC;AAEjD;;;;;;;;;GASG;AACH,MAAM,UAAU,kBAAkB,CAAC,IAKlC;IACC,MAAM,OAAO,GAAG,IAAI,UAAU,CAAC;QAC7B,IAAI,EAAE,YAAY;QAClB,gEAAgE;QAChE,kEAAkE;QAClE,iCAAiC;QACjC,MAAM,EAAE,EAAE;QACV,OAAO,EAAE,GAAG,EAAE;YACZ,MAAM,CAAC,GAAG,IAAI,CAAC,UAAU,EAAE,CAAC;YAC5B,MAAM,IAAI,GAAG,CAAC,EAAE,WAAW,EAAE,CAAC;YAC9B,OAAO,IAAI,CAAC,CAAC,CAAC,oBAAoB,IAAI,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC;QACvD,CAAC;QACD,uDAAuD;QACvD,gEAAgE;QAChE,4DAA4D;QAC5D,YAAY,EAAE,gBAAgB;QAC9B,2DAA2D;QAC3D,6DAA6D;QAC7D,gEAAgE;QAChE,QAAQ,EAAE,CAAC,CAAC,EAAE,EAAE;YACd,IAAI,CAAC,CAAC,CAAC,WAAW;gBAAE,OAAO,SAAS,CAAC;YACrC,MAAM,aAAa,GAAG,CAAC,CAAC,WAAW,CAAC,KAAK,CAAC,eAAe,CAAC,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,CAAC;YACtE,yDAAyD;YACzD,4DAA4D;YAC5D,sDAAsD;YACtD,OAAO,aAAa;gBAClB,CAAC,CAAC,GAAG,aAAa,mBAAmB;gBACrC,CAAC,CAAC,CAAC,CAAC,WAAW,CAAC;QACpB,CAAC;KACF,CAAC,CAAC;IACH,8DAA8D;IAC9D,gEAAgE;IAChE,kEAAkE;IAClE,0CAA0C;IAC1C,KAAK,OAAO,CAAC,OAAO,EAAE,CAAC,KAAK,CAAC,CAAC,GAAG,EAAE,EAAE;QACnC,IAAI,CAAC,GAAG,CAAC,IAAI,CACX,kDACE,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CACjD,EAAE,CACH,CAAC;IACJ,CAAC,CAAC,CAAC;IACH,OAAO,OAAO,CAAC;AACjB,CAAC"}

package/plugins/microsandbox/dist/tools/build.d.ts

@@ -0,0 +1,5 @@
+import { type AgentTool } from "@tianshu/plugin-sdk";
+export declare const BuildSandboxTool: AgentTool;
+export declare const ListSandboxBuildsTool: AgentTool;
+export declare const UseSandboxBuildTool: AgentTool;
+//# sourceMappingURL=build.d.ts.map

package/plugins/microsandbox/dist/tools/build.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"build.d.ts","sourceRoot":"","sources":["../../src/tools/build.ts"],"names":[],"mappings":"AAqBA,OAAO,EAGL,KAAK,SAAS,EAEf,MAAM,qBAAqB,CAAC;AA2E7B,eAAO,MAAM,gBAAgB,EAAE,SAyG9B,CAAC;AAIF,eAAO,MAAM,qBAAqB,EAAE,SA0CnC,CAAC;AAIF,eAAO,MAAM,mBAAmB,EAAE,SAsDjC,CAAC"}

package/plugins/microsandbox/dist/tools/build.js

@@ -0,0 +1,243 @@
+// Build / use agent tools.
+//
+// Workflow (per ADR design 2026-06-07):
+//
+//   1. agent edits <userHome>/sandbox/Sandboxfile via the existing
+//      file tools (write_file / edit_file) — same per-user fs
+//      surface, no new fs primitive needed.
+//   2. agent calls `build_sandbox` → plugin reads the Sandboxfile,
+//      runs apt/pip/npm/exec inside a short-lived builder VM,
+//      captures a Snapshot in microsandbox's DB, drops a metadata
+//      json under <userHome>/sandbox/builds/<id>.json. Tenant state
+//      not touched.
+//   3. agent calls `list_sandbox_builds` to review past builds.
+//   4. agent (or a tenant admin) calls `publish_sandbox(build_id)`
+//      → plugin writes <tenant>/_tenant/sandbox/current.json
+//      pointer. Next sandbox restart (reset_sandbox / next session)
+//      starts from the in-use snapshot via fromSnapshot(...).
+import * as path from "node:path";
+import { promises as fs } from "node:fs";
+import { Type } from "typebox";
+import { errorResult, okResult, } from "@tianshu/plugin-sdk";
+import { buildSnapshot, BuildFailedError, snapshotExists, } from "../build/builder.js";
+import { parseSandboxfile, SandboxfileError, } from "../build/sandboxfile.js";
+import { listBuildMetadata, readBuildMetadata, writeBuildMetadata, } from "../build/metadata.js";
+import { pointerPath, readPointer, writePointer, } from "../build/pointer.js";
+const DEFAULT_SANDBOXFILE_REL = "sandbox/Sandboxfile";
+// ─── helpers ───────────────────────────────────────────────────
+function tenantWorkspaceDir(ctx) {
+    // <tenantHomeDir>/tenants/<tenantId>/workspace — same layout
+    // microsandbox runner uses for its bind mount.
+    return path.join(ctx.tenantHomeDir, "tenants", ctx.tenantId, "workspace");
+}
+function pickBuildId() {
+    const d = new Date();
+    const pad = (n) => String(n).padStart(2, "0");
+    return (`${d.getFullYear()}${pad(d.getMonth() + 1)}${pad(d.getDate())}-` +
+        `${pad(d.getHours())}${pad(d.getMinutes())}${pad(d.getSeconds())}`);
+}
+async function loadSpec(ctx, relPath) {
+    const full = path.resolve(ctx.userHomeDir, relPath.replace(/^\/+/, ""));
+    if (!full.startsWith(ctx.userHomeDir)) {
+        return { error: `Sandboxfile path "${relPath}" escapes user home` };
+    }
+    let raw;
+    try {
+        raw = await fs.readFile(full, "utf8");
+    }
+    catch (err) {
+        if (err.code === "ENOENT") {
+            return { error: `Sandboxfile not found at ${relPath}` };
+        }
+        throw err;
+    }
+    try {
+        return { spec: parseSandboxfile(raw), sourcePath: relPath };
+    }
+    catch (err) {
+        if (err instanceof SandboxfileError)
+            return { error: err.message };
+        throw err;
+    }
+}
+// ─── build_sandbox ─────────────────────────────────────────────
+export const BuildSandboxTool = {
+    schema: {
+        name: "build_sandbox",
+        description: `Build a custom sandbox image from your Sandboxfile.
+
+Reads <user-home>/sandbox/Sandboxfile (or whatever \`spec_path\` points at), \
+boots a short-lived builder VM from the spec's base image, runs the apt/pip/npm/exec \
+steps in order, captures a snapshot into microsandbox's local store, and drops a \
+metadata json under <user-home>/sandbox/builds/<build_id>.json so you can list the \
+result later.
+
+This does NOT change the tenant's currently-running sandbox \u2014 your build is \
+private to you until you call \`publish_sandbox(build_id)\`.
+
+Sandboxfile shape (YAML-ish, v0):
+\`\`\`yaml
+image: python:3.12-slim          # required
+cpus: 4                          # optional, default 4
+memory_mib: 4096                 # optional, default 4096
+apt: [libreoffice-writer, fonts-noto-cjk]
+pip: [pandas, numpy]
+npm: [tsx, typescript]
+exec:
+  - cp /workspace/users/<your-userId>/sandbox/my.whl /tmp/
+  - pip install /tmp/my.whl
+\`\`\`
+
+Returns the build id, snapshot name, base image, and a tail of the build log.`,
+        parameters: Type.Object({
+            spec_path: Type.Optional(Type.String({
+                description: `Path to the Sandboxfile, relative to your user home. Default "${DEFAULT_SANDBOXFILE_REL}".`,
+            })),
+        }),
+    },
+    async available(ctx) {
+        return ctx.capabilities.has("sandbox.shell");
+    },
+    async execute(args, ctx) {
+        const specPath = args.spec_path ??
+            `/${DEFAULT_SANDBOXFILE_REL}`;
+        const loaded = await loadSpec(ctx, specPath);
+        if ("error" in loaded)
+            return errorResult(loaded.error);
+        const buildId = pickBuildId();
+        const sandboxName = `tianshu-${ctx.tenantId}`;
+        const wsDir = tenantWorkspaceDir(ctx);
+        // Capture every onLog line. The host doesn't yet stream
+        // tool-internal log lines to the chat UI, but we (a) tee them
+        // through ctx.log.info for the server console, and (b) include
+        // a tail (or full body on failure) in the agent-visible result
+        // so the agent isn't staring at a black box for 5+ minutes.
+        const log = [];
+        const onLog = (line) => {
+            log.push(line);
+            ctx.log.info(`[build_sandbox] ${line}`);
+        };
+        try {
+            const result = await buildSnapshot({
+                spec: loaded.spec,
+                sandboxName,
+                buildId,
+                tenantId: ctx.tenantId,
+                workspaceDir: wsDir,
+                onLog,
+            });
+            const meta = {
+                buildId,
+                snapshotName: result.snapshotName,
+                baseImage: result.baseImage,
+                builtAt: new Date().toISOString(),
+                durationMs: result.durationMs,
+                logTail: result.logTail,
+                sandboxfilePath: loaded.sourcePath,
+            };
+            await writeBuildMetadata(ctx.userHomeDir, meta);
+            return okResult(`Built ${result.snapshotName} in ${(result.durationMs / 1000).toFixed(1)}s. ` +
+                `Run publish_sandbox("${buildId}") to make it the tenant's active sandbox image.\n\n` +
+                `Build log tail:\n${result.logTail}`, meta);
+        }
+        catch (err) {
+            if (err instanceof BuildFailedError) {
+                // Surface the failing step + stderr in the human-visible
+                // text. The agent reads `text` first; previously this only
+                // had "build failed: <step>" with the stderr stashed in the
+                // structured payload, which several models silently ignored.
+                const tail = log.slice(-40).join("\n");
+                return errorResult(`build failed: ${err.message}\n\n` +
+                    `--- stderr ---\n${err.stderr}\n` +
+                    `--- last log lines ---\n${tail}`, { stderr: err.stderr, logTail: tail });
+            }
+            const msg = err instanceof Error ? err.message : String(err);
+            return errorResult(`build threw: ${msg}`);
+        }
+    },
+};
+// ─── list_sandbox_builds ───────────────────────────────────────
+export const ListSandboxBuildsTool = {
+    schema: {
+        name: "list_sandbox_builds",
+        description: `List past sandbox builds in your user home, newest first. Each row \
+includes build id, base image, build time, duration, and whether it's currently \
+in use as the tenant's sandbox image.`,
+        parameters: Type.Object({}),
+    },
+    async available(ctx) {
+        return ctx.capabilities.has("sandbox.shell");
+    },
+    async execute(_args, ctx) {
+        const builds = await listBuildMetadata(ctx.userHomeDir);
+        const wsDir = tenantWorkspaceDir(ctx);
+        const pointer = await readPointer(wsDir);
+        const enriched = builds.map((b) => ({
+            build_id: b.buildId,
+            snapshot_name: b.snapshotName,
+            base_image: b.baseImage,
+            built_at: b.builtAt,
+            duration_ms: b.durationMs,
+            sandboxfile_path: b.sandboxfilePath,
+            published: pointer ? pointer.snapshotName === b.snapshotName : false,
+        }));
+        if (enriched.length === 0) {
+            return okResult("No builds yet. Use build_sandbox to make one.", {
+                builds: [],
+                published: pointer?.snapshotName ?? null,
+            });
+        }
+        const summary = `${enriched.length} build(s); in use: ${pointer?.snapshotName ?? "(none)"}\n` +
+            enriched
+                .map((b) => `  ${b.published ? "*" : " "} ${b.build_id}  ${b.base_image}  ${(b.duration_ms / 1000).toFixed(1)}s`)
+                .join("\n");
+        return okResult(summary, { builds: enriched, published: pointer?.snapshotName ?? null });
+    },
+};
+// ─── use_sandbox_build ─────────────────────────────────────────
+export const UseSandboxBuildTool = {
+    schema: {
+        name: "use_sandbox_build",
+        description: `Switch the tenant to a previously-built sandbox image. Writes \
+<tenant>/_tenant/sandbox/current.json so the next reset_sandbox (or the next \
+session) boots from this snapshot instead of the configured default image.
+
+This is a tenant-scoped switch — it does not publish anything outside the \
+tenant. The currently-running sandbox VM is **not** automatically restarted. \
+Call \`reset_sandbox\` after this to make it live now.`,
+        parameters: Type.Object({
+            build_id: Type.String({
+                description: "Build id from list_sandbox_builds (e.g. \"20260607-084230\"). Use list_sandbox_builds first if you don't remember.",
+            }),
+        }),
+    },
+    async available(ctx) {
+        return ctx.capabilities.has("sandbox.shell");
+    },
+    async execute(args, ctx) {
+        const buildId = String(args.build_id ?? "");
+        if (!buildId)
+            return errorResult("build_id is required");
+        const meta = await readBuildMetadata(ctx.userHomeDir, buildId);
+        if (!meta) {
+            return errorResult(`build "${buildId}" not found in your home (run list_sandbox_builds to see what's available)`);
+        }
+        const exists = await snapshotExists(meta.snapshotName);
+        if (!exists) {
+            return errorResult(`snapshot "${meta.snapshotName}" no longer exists in microsandbox; rebuild with build_sandbox`);
+        }
+        const wsDir = tenantWorkspaceDir(ctx);
+        const pointer = {
+            snapshotName: meta.snapshotName,
+            baseImage: meta.baseImage,
+            // Field names on disk stay publishedAt/publishedBy to keep
+            // existing pointer files readable without a migration. The
+            // user-facing terminology is "in use" / "switch".
+            publishedAt: new Date().toISOString(),
+            publishedBy: ctx.userId,
+        };
+        await writePointer(wsDir, pointer);
+        return okResult(`Switched tenant to ${meta.snapshotName}. Call reset_sandbox to apply it to the running VM.`, { pointer, pointerPath: pointerPath(wsDir) });
+    },
+};
+//# sourceMappingURL=build.js.map