@xcanwin/manyoyo 2.0.0

package/LICENSE

@@ -0,0 +1,201 @@
+                                 Apache License
+                           Version 2.0, January 2004
+                        http://www.apache.org/licenses/
+
+   TERMS AND CONDITIONS FOR USE, REPRODUCTION, AND DISTRIBUTION
+
+   1. Definitions.
+
+      "License" shall mean the terms and conditions for use, reproduction,
+      and distribution as defined by Sections 1 through 9 of this document.
+
+      "Licensor" shall mean the copyright owner or entity authorized by
+      the copyright owner that is granting the License.
+
+      "Legal Entity" shall mean the union of the acting entity and all
+      other entities that control, are controlled by, or are under common
+      control with that entity. For the purposes of this definition,
+      "control" means (i) the power, direct or indirect, to cause the
+      direction or management of such entity, whether by contract or
+      otherwise, or (ii) ownership of fifty percent (50%) or more of the
+      outstanding shares, or (iii) beneficial ownership of such entity.
+
+      "You" (or "Your") shall mean an individual or Legal Entity
+      exercising permissions granted by this License.
+
+      "Source" form shall mean the preferred form for making modifications,
+      including but not limited to software source code, documentation
+      source, and configuration files.
+
+      "Object" form shall mean any form resulting from mechanical
+      transformation or translation of a Source form, including but
+      not limited to compiled object code, generated documentation,
+      and conversions to other media types.
+
+      "Work" shall mean the work of authorship, whether in Source or
+      Object form, made available under the License, as indicated by a
+      copyright notice that is included in or attached to the work
+      (an example is provided in the Appendix below).
+
+      "Derivative Works" shall mean any work, whether in Source or Object
+      form, that is based on (or derived from) the Work and for which the
+      editorial revisions, annotations, elaborations, or other modifications
+      represent, as a whole, an original work of authorship. For the purposes
+      of this License, Derivative Works shall not include works that remain
+      separable from, or merely link (or bind by name) to the interfaces of,
+      the Work and Derivative Works thereof.
+
+      "Contribution" shall mean any work of authorship, including
+      the original version of the Work and any modifications or additions
+      to that Work or Derivative Works thereof, that is intentionally
+      submitted to Licensor for inclusion in the Work by the copyright owner
+      or by an individual or Legal Entity authorized to submit on behalf of
+      the copyright owner. For the purposes of this definition, "submitted"
+      means any form of electronic, verbal, or written communication sent
+      to the Licensor or its representatives, including but not limited to
+      communication on electronic mailing lists, source code control systems,
+      and issue tracking systems that are managed by, or on behalf of, the
+      Licensor for the purpose of discussing and improving the Work, but
+      excluding communication that is conspicuously marked or otherwise
+      designated in writing by the copyright owner as "Not a Contribution."
+
+      "Contributor" shall mean Licensor and any individual or Legal Entity
+      on behalf of whom a Contribution has been received by Licensor and
+      subsequently incorporated within the Work.
+
+   2. Grant of Copyright License. Subject to the terms and conditions of
+      this License, each Contributor hereby grants to You a perpetual,
+      worldwide, non-exclusive, no-charge, royalty-free, irrevocable
+      copyright license to reproduce, prepare Derivative Works of,
+      publicly display, publicly perform, sublicense, and distribute the
+      Work and such Derivative Works in Source or Object form.
+
+   3. Grant of Patent License. Subject to the terms and conditions of
+      this License, each Contributor hereby grants to You a perpetual,
+      worldwide, non-exclusive, no-charge, royalty-free, irrevocable
+      (except as stated in this section) patent license to make, have made,
+      use, offer to sell, sell, import, and otherwise transfer the Work,
+      where such license applies only to those patent claims licensable
+      by such Contributor that are necessarily infringed by their
+      Contribution(s) alone or by combination of their Contribution(s)
+      with the Work to which such Contribution(s) was submitted. If You
+      institute patent litigation against any entity (including a
+      cross-claim or counterclaim in a lawsuit) alleging that the Work
+      or a Contribution incorporated within the Work constitutes direct
+      or contributory patent infringement, then any patent licenses
+      granted to You under this License for that Work shall terminate
+      as of the date such litigation is filed.
+
+   4. Redistribution. You may reproduce and distribute copies of the
+      Work or Derivative Works thereof in any medium, with or without
+      modifications, and in Source or Object form, provided that You
+      meet the following conditions:
+
+      (a) You must give any other recipients of the Work or
+          Derivative Works a copy of this License; and
+
+      (b) You must cause any modified files to carry prominent notices
+          stating that You changed the files; and
+
+      (c) You must retain, in the Source form of any Derivative Works
+          that You distribute, all copyright, patent, trademark, and
+          attribution notices from the Source form of the Work,
+          excluding those notices that do not pertain to any part of
+          the Derivative Works; and
+
+      (d) If the Work includes a "NOTICE" text file as part of its
+          distribution, then any Derivative Works that You distribute must
+          include a readable copy of the attribution notices contained
+          within such NOTICE file, excluding those notices that do not
+          pertain to any part of the Derivative Works, in at least one
+          of the following places: within a NOTICE text file distributed
+          as part of the Derivative Works; within the Source form or
+          documentation, if provided along with the Derivative Works; or,
+          within a display generated by the Derivative Works, if and
+          wherever such third-party notices normally appear. The contents
+          of the NOTICE file are for informational purposes only and
+          do not modify the License. You may add Your own attribution
+          notices within Derivative Works that You distribute, alongside
+          or as an addendum to the NOTICE text from the Work, provided
+          that such additional attribution notices cannot be construed
+          as modifying the License.
+
+      You may add Your own copyright statement to Your modifications and
+      may provide additional or different license terms and conditions
+      for use, reproduction, or distribution of Your modifications, or
+      for any such Derivative Works as a whole, provided Your use,
+      reproduction, and distribution of the Work otherwise complies with
+      the conditions stated in this License.
+
+   5. Submission of Contributions. Unless You explicitly state otherwise,
+      any Contribution intentionally submitted for inclusion in the Work
+      by You to the Licensor shall be under the terms and conditions of
+      this License, without any additional terms or conditions.
+      Notwithstanding the above, nothing herein shall supersede or modify
+      the terms of any separate license agreement you may have executed
+      with Licensor regarding such Contributions.
+
+   6. Trademarks. This License does not grant permission to use the trade
+      names, trademarks, service marks, or product names of the Licensor,
+      except as required for reasonable and customary use in describing the
+      origin of the Work and reproducing the content of the NOTICE file.
+
+   7. Disclaimer of Warranty. Unless required by applicable law or
+      agreed to in writing, Licensor provides the Work (and each
+      Contributor provides its Contributions) on an "AS IS" BASIS,
+      WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or
+      implied, including, without limitation, any warranties or conditions
+      of TITLE, NON-INFRINGEMENT, MERCHANTABILITY, or FITNESS FOR A
+      PARTICULAR PURPOSE. You are solely responsible for determining the
+      appropriateness of using or redistributing the Work and assume any
+      risks associated with Your exercise of permissions under this License.
+
+   8. Limitation of Liability. In no event and under no legal theory,
+      whether in tort (including negligence), contract, or otherwise,
+      unless required by applicable law (such as deliberate and grossly
+      negligent acts) or agreed to in writing, shall any Contributor be
+      liable to You for damages, including any direct, indirect, special,
+      incidental, or consequential damages of any character arising as a
+      result of this License or out of the use or inability to use the
+      Work (including but not limited to damages for loss of goodwill,
+      work stoppage, computer failure or malfunction, or any and all
+      other commercial damages or losses), even if such Contributor
+      has been advised of the possibility of such damages.
+
+   9. Accepting Warranty or Additional Liability. While redistributing
+      the Work or Derivative Works thereof, You may choose to offer,
+      and charge a fee for, acceptance of support, warranty, indemnity,
+      or other liability obligations and/or rights consistent with this
+      License. However, in accepting such obligations, You may act only
+      on Your own behalf and on Your sole responsibility, not on behalf
+      of any other Contributor, and only if You agree to indemnify,
+      defend, and hold each Contributor harmless for any liability
+      incurred by, or claims asserted against, such Contributor by reason
+      of your accepting any such warranty or additional liability.
+
+   END OF TERMS AND CONDITIONS
+
+   APPENDIX: How to apply the Apache License to your work.
+
+      To apply the Apache License to your work, attach the following
+      boilerplate notice, with the fields enclosed by brackets "[]"
+      replaced with your own identifying information. (Don't include
+      the brackets!)  The text should be enclosed in the appropriate
+      comment syntax for the file format. We also recommend that a
+      file or class name and description of purpose be included on the
+      same "printed page" as the copyright notice for easier
+      identification within third-party archives.
+
+   Copyright 2026 xcanwin
+
+   Licensed under the Apache License, Version 2.0 (the "License");
+   you may not use this file except in compliance with the License.
+   You may obtain a copy of the License at
+
+       http://www.apache.org/licenses/LICENSE-2.0
+
+   Unless required by applicable law or agreed to in writing, software
+   distributed under the License is distributed on an "AS IS" BASIS,
+   WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+   See the License for the specific language governing permissions and
+   limitations under the License.

package/README.md

@@ -0,0 +1,222 @@
+# MANYOYO（慢悠悠）
+
+**MANYOYO** 是一款 AI 智能体提效安全沙箱，安全、高效、省 token，专为 Agent YOLO 模式设计，保障宿主机安全。
+
+预装常见 Agent 与工具，进一步节省 token。循环自由切换 Agent 和 /bin/bash，进一步提效。
+
+MANYOYO provides an isolated Docker/Podman container environment for running AI agent CLIs safely.
+
+## 功能亮点
+
+- **多Agent**：支持 claude code, gemini, codex, opencode
+- **安全隔离**：保护宿主机，支持安全容器嵌套（Docker-in-Docker）
+- **高效启动**：快捷开启常见 Agent YOLO / SOLO 模式（例如 claude --dangerously-skip-permissions）
+- **便捷操作**：快速进入 `/bin/bash`
+- **会话恢复**：安装 Skills Marketplace 可快速恢复会话
+- **自定义灵活**：支持自定义 `BASEURL`、`AUTH_TOKEN` 等变量
+- **配置管理**：快捷导入配置文件
+- **高级模式**：支持危险容器嵌套（mount-docker-socket）、自定义沙箱镜像
+
+# 使用方法
+
+## 1. 安装 podman
+
+- 安装 [podman](https://podman.io/docs/installation)
+
+## 2. 编译镜像
+
+```
+podman pull ubuntu:24.04
+iv=1.4.0-all && podman build -t localhost/xcanwin/manyoyo:$iv -f docker/manyoyo.Dockerfile . --build-arg EXT=all --no-cache
+podman image prune -f
+```
+
+## 3. 安装 manyoyo（选一种）
+
+### Global Installation (Recommended)
+
+```bash
+cd ./manyoyo/
+npm install -g .
+```
+
+### Local Development
+
+```bash
+npm link
+```
+
+### Direct Symlink Installation
+
+```bash
+node bin/manyoyo.js --install manyoyo
+```
+
+## 4. 使用方法
+
+### Basic Commands
+
+```bash
+# Show help
+manyoyo -h
+
+# Show version
+manyoyo -V
+
+# List all containers
+manyoyo -l
+
+# Create new container with environment file
+manyoyo -n test --ef .env -y c
+
+# Resume existing session
+manyoyo -n test -- -c
+
+# Execute command in interactive shell
+manyoyo -n test -x /bin/bash
+
+# Execute custom command
+manyoyo -n test -x echo "hello world"
+
+# Remove container
+manyoyo -n test --rm
+```
+
+### Environment Variables
+
+#### String Format
+
+```bash
+# Direct
+manyoyo -e "VAR=value" -x env
+
+# Multiple
+manyoyo -e "A=1" -e "B=2" -x env
+```
+
+#### File Format
+
+```bash
+# From file
+manyoyo --ef .env -x env
+```
+
+Environment files (`.env`) support the following formats:
+
+```bash
+# With export statement
+export ANTHROPIC_BASE_URL="https://api.anthropic.com"
+# export CLAUDE_CODE_OAUTH_TOKEN="sk-xxxxxxxx"
+export ANTHROPIC_AUTH_TOKEN="sk-xxxxxxxx"
+export API_TIMEOUT_MS=3000000
+export ANTHROPIC_MODEL="claude-sonnet-4-5"
+export ANTHROPIC_DEFAULT_OPUS_MODEL="claude-opus-4-5"
+export ANTHROPIC_DEFAULT_SONNET_MODEL="claude-sonnet-4-5"
+export ANTHROPIC_DEFAULT_HAIKU_MODEL="claude-haiku-4-5"
+export CLAUDE_CODE_SUBAGENT_MODEL="claude-sonnet-4-5"
+
+# Simple key=value
+API_KEY=your-api-key-here
+
+# Quoted values (quotes will be stripped)
+MESSAGE="Hello World"
+PATH='/usr/local/bin'
+```
+
+### AI CLI Shortcuts (skip permissions)
+
+```bash
+# Claude Code
+manyoyo -y c          # or: claude, cc
+
+# Gemini
+manyoyo -y gm         # or: gemini, g
+
+# Codex
+manyoyo -y cx         # or: codex
+
+# OpenCode
+manyoyo -y oc         # or: opencode
+```
+
+### Interactive Session Management
+
+After exiting a container session, you'll be prompted with options:
+
+- `y` - Keep container running in background (default)
+- `n` - Delete the container
+- `1` - Re-enter with the original command
+- `s` - Execute a new command
+- `i` - Enter interactive shell
+
+### Container Modes
+
+#### Docker-in-Docker Development
+
+```bash
+# Docker-in-Docker (safe nested containers)
+# Create a container with Docker-in-Docker support
+manyoyo -n docker-dev -m dind -x /bin/bash
+
+# Inside the container, start dockerd
+nohup dockerd &
+
+# Now you can use docker commands inside the container
+docker run hello-world
+```
+
+#### Mount Docker socket Development
+
+```bash
+# Mount Docker socket (dangerous - container can access host)
+manyoyo -n socket-dev -m mdsock -x docker ps
+```
+
+### Command-Line Options
+
+| Option | Aliases | Description |
+|--------|---------|-------------|
+| `-l` | `--ls`, `--list` | List all manyoyo containers |
+| `--hp PATH` | `--host-path` | Set host working directory (default: current path) |
+| `-n NAME` | `--cn`, `--cont-name` | Set container name |
+| `--cp PATH` | `--cont-path` | Set container working directory |
+| `--in NAME` | `--image-name` | Specify image name |
+| `--iv VERSION` | `--image-ver` | Specify image version |
+| `-e STRING` | `--env` | Set environment variable |
+| `--ef FILE` | `--env-file` | Load environment variables from file |
+| `-v STRING` | `--volume` | Bind mount volume |
+| `--rm` | `--rmc`, `--remove-cont` | Remove container |
+| `--sp CMD` | `--shell-prefix` | Temporary environment variable (prefix for -s) |
+| `-s CMD` | `--shell` | Specify command to execute |
+| `--` | `--ss`, `--shell-suffix` | Command arguments (suffix for -s) |
+| `-x CMD` | `--sf`, `--shell-full` | Full command (replaces --sp, -s, and --) |
+| `-y CLI` | `--yolo` | Run AI agent without confirmation |
+| `-m MODE` | `--cm`, `--cont-mode` | Set container mode (common, dind, mdsock) |
+| `--install NAME` | | Install manyoyo command |
+| `-V` | `--version` | Show version |
+| `-h` | `--help` | Show help |
+
+## 其他说明
+
+### Default Configuration
+
+- **Container Name**: `myy-{MMDD-HHMM}` (auto-generated based on current time)
+- **Host Path**: Current working directory
+- **Container Path**: Same as host path
+- **Image**: `localhost/xcanwin/manyoyo:xxx`
+
+### Requirements
+
+- Node.js >= 14.0.0
+- Docker or Podman
+
+### remove
+
+```bash
+npm unlink -g manyoyo
+sudo rm -rf /usr/local/bin/manyoyo
+```
+
+## License
+
+MIT

package/bin/manyoyo.js

@@ -0,0 +1,582 @@
+#!/usr/bin/env node
+
+// ==============================================================================
+// MANYOYO - AI Agent CLI Sandbox
+// ==============================================================================
+
+const { execSync, spawnSync } = require('child_process');
+const fs = require('fs');
+const path = require('path');
+const readline = require('readline');
+
+// Helper function to format date like bash $(date +%m%d-%H%M)
+function formatDate() {
+    const now = new Date();
+    const month = String(now.getMonth() + 1).padStart(2, '0');
+    const day = String(now.getDate()).padStart(2, '0');
+    const hour = String(now.getHours()).padStart(2, '0');
+    const minute = String(now.getMinutes()).padStart(2, '0');
+    return `${month}${day}-${hour}${minute}`;
+}
+
+// Default configuration
+const BIN_VERSION = "2.0.0";
+let CONTAINER_NAME = `myy-${formatDate()}`;
+let HOST_PATH = process.cwd();
+let CONTAINER_PATH = HOST_PATH;
+let IMAGE_NAME = "localhost/xcanwin/manyoyo";
+let IMAGE_VERSION = "1.4.0-all";
+let EXEC_COMMAND = "";
+let EXEC_COMMAND_PREFIX = "";
+let EXEC_COMMAND_SUFFIX = "";
+let ENV_FILE = "";
+let SHOULD_REMOVE = false;
+let CONTAINER_ENVS = [];
+let CONTAINER_VOLUMES = [];
+let MANYOYO_NAME = "manyoyo";
+let CONT_MODE = "";
+
+// Color definitions using ANSI codes
+const RED = '\x1b[0;31m';
+const GREEN = '\x1b[0;32m';
+const YELLOW = '\x1b[1;33m';
+const BLUE = '\x1b[0;34m';
+const CYAN = '\x1b[0;36m';
+const NC = '\x1b[0m'; // No Color
+
+// Docker command (will be set by ensure_docker)
+let DOCKER_CMD = 'docker';
+
+function show_help() {
+    console.log(`${BLUE}Usage:${NC}`);
+    console.log(`  ${MANYOYO_NAME} [OPTIONS]`);
+    console.log(`  ${MANYOYO_NAME} [--hp HOST_PATH] [-n CONTAINER_NAME] [--cp CONTAINER_PATH] [--ef ENV_FILE] [--sp COMMAND] [-s COMMAND] [-- COMMAND]`);
+    console.log("");
+    console.log(`${BLUE}Options:${NC}`);
+    console.log("  -l|--ls|--list                 列举容器");
+    console.log("  --hp|--host-path PATH          设置宿主机工作目录 (默认当前路径)");
+    console.log("  -n|--cn|--cont-name NAME       设置容器名称");
+    console.log("  --cp|--cont-path PATH          设置容器工作目录");
+    console.log("  --in|--image-name NAME         指定镜像名称");
+    console.log("  --iv|--image-ver VERSION       指定镜像版本");
+    console.log("  -e|--env STRING                设置环境变量");
+    console.log("  --ef|--env-file ENV_FILE       设置环境变量通过文件");
+    console.log("  -v|--volume STRING             绑定挂载卷");
+    console.log("  --rm|--remove-cont             删除-n容器");
+    console.log("  --sp|--shell-prefix COMMAND    临时环境变量 (作为-s前缀)");
+    console.log("  -s|--shell COMMAND             指定命令执行");
+    console.log("  --|--shell-suffix COMMAND      指定命令参数, --后面全部直传 (作为-s后缀)");
+    console.log("  -x|--shell-full COMMAND        指定完整命令执行, -x后面全部直传 (代替--sp和-s和--命令)");
+    console.log("  -y|--yolo CLI                  使AGENT无需确认 (代替-s命令)");
+    console.log("                                 例如 claude / c, gemini / gm, codex / cx, opencode / oc");
+    console.log("  -m|--cm|--cont-mode STRING     设置容器嵌套容器模式");
+    console.log("                                 例如 common, dind, mdsock");
+    console.log("  --install NAME                 安装manyoyo命令");
+    console.log("                                 例如 manyoyo, myy, docker-cli-plugin");
+    console.log("  -V|--version                   显示版本");
+    console.log("  -h|--help                      显示帮助");
+    console.log("");
+    console.log(`${BLUE}Example:${NC}`);
+    console.log(`  ./${MANYOYO_NAME}.sh --install manyoyo              安装manyoyo命令`);
+    console.log(`  ${MANYOYO_NAME} -n test --ef ./xxx.env -y c         设置环境变量并运行无需确认的AGENT`);
+    console.log(`  ${MANYOYO_NAME} -n test -- -c                       恢复之前会话`);
+    console.log(`  ${MANYOYO_NAME} -x echo 123                         指定命令执行`);
+    console.log(`  ${MANYOYO_NAME} -n test --ef ./xxx.env -x claude    设置环境变量并运行`);
+    console.log(`  ${MANYOYO_NAME} -n test -x claude -c                恢复之前会话`);
+}
+
+function ensure_docker() {
+    try {
+        execSync('docker --version', { stdio: 'pipe' });
+        DOCKER_CMD = 'docker';
+        return true;
+    } catch (e) {
+        try {
+            execSync('podman --version', { stdio: 'pipe' });
+            DOCKER_CMD = 'podman';
+            return true;
+        } catch (e2) {
+            console.error("docker/podman not found");
+            process.exit(1);
+        }
+    }
+}
+
+function install_manyoyo(name) {
+    const MANYOYO_FILE = fs.realpathSync(__filename);
+    switch (name) {
+        case 'manyoyo':
+            execSync(`sudo ln -f -s "${MANYOYO_FILE}" /usr/local/bin/manyoyo`, { stdio: 'inherit' });
+            break;
+        case 'myy':
+            execSync(`sudo ln -f -s "${MANYOYO_FILE}" /usr/local/bin/myy`, { stdio: 'inherit' });
+            break;
+        case 'docker-cli-plugin':
+            execSync(`mkdir -p "$HOME/.docker/cli-plugins/"`, { stdio: 'inherit' });
+            execSync(`sudo ln -f -s "${MANYOYO_FILE}" "$HOME/.docker/cli-plugins/docker-manyoyo"`, { stdio: 'inherit' });
+            break;
+        default:
+            console.log("");
+    }
+    process.exit(0);
+}
+
+function show_version() {
+    console.log(`manyoyo by xcanwin, ${BIN_VERSION}`);
+}
+
+function set_yolo(cli) {
+    switch (cli) {
+        case 'claude':
+        case 'cc':
+        case 'c':
+            EXEC_COMMAND = "IS_SANDBOX=1 claude --dangerously-skip-permissions";
+            break;
+        case 'gemini':
+        case 'gm':
+        case 'g':
+            EXEC_COMMAND = "gemini --yolo";
+            break;
+        case 'codex':
+        case 'cx':
+            EXEC_COMMAND = "codex";
+            break;
+        case 'opencode':
+        case 'oc':
+            EXEC_COMMAND = "opencode";
+            break;
+        default:
+            console.log(`${RED}⚠️ 未知LLM CLI: ${cli}${NC}`);
+            process.exit(0);
+    }
+}
+
+function set_cont_mode(mode) {
+    switch (mode) {
+        case 'common':
+            CONT_MODE = "";
+            break;
+        case 'docker-in-docker':
+        case 'dind':
+        case 'd':
+            CONT_MODE = "--privileged";
+            console.log(`${GREEN}✅ 开启安全的容器嵌套容器模式, 手动在容器内启动服务: nohup dockerd &${NC}`);
+            break;
+        case 'mount-docker-socket':
+        case 'mdsock':
+        case 's':
+            CONT_MODE = "--volume /var/run/docker.sock:/var/run/docker.sock";
+            console.log(`${RED}⚠️ 开启危险的容器嵌套容器模式, 危害: 容器可访问宿主机文件${NC}`);
+            break;
+        default:
+            console.log(`${RED}⚠️ 未知模式: ${mode}${NC}`);
+            process.exit(0);
+    }
+}
+
+function get_cont_list() {
+    try {
+        const result = execSync(`${DOCKER_CMD} ps -a --size --filter "ancestor=manyoyo" --filter "ancestor=$(${DOCKER_CMD} images -a --format '{{.Repository}}:{{.Tag}}' | grep manyoyo)" --format "table {{.Names}}\\t{{.Status}}\\t{{.Size}}\\t{{.ID}}\\t{{.Image}}\\t{{.Ports}}\\t{{.Networks}}\\t{{.Mounts}}"`,
+            { encoding: 'utf-8' });
+        console.log(result);
+    } catch (e) {
+        console.log(e.stdout || '');
+    }
+}
+
+function add_volume(volume) {
+    CONTAINER_VOLUMES.push("--volume", volume);
+}
+
+function add_env(env) {
+    CONTAINER_ENVS.push("--env", env);
+}
+
+function add_env_file(envFile) {
+    ENV_FILE = envFile;
+    if (ENV_FILE && fs.existsSync(ENV_FILE)) {
+        const content = fs.readFileSync(ENV_FILE, 'utf-8');
+        const lines = content.split('\n');
+
+        for (let line of lines) {
+            // Match pattern: (export )?(KEY)=(VALUE)
+            const match = line.match(/^(?:export\s+)?([a-zA-Z_][a-zA-Z0-9_]*)\s*=\s*(.*)$/);
+            if (match) {
+                let key = match[1];
+                let value = match[2].trim();
+
+                // Filter malicious characters
+                if (/[\$\(\)\`\|\&\*\{\}]/.test(value)) continue;
+                if (/^\(/.test(value)) continue;
+
+                // Remove quotes
+                if (/^"(.*)"$/.test(value)) {
+                    value = value.slice(1, -1);
+                } else if (/^'(.*)'$/.test(value)) {
+                    value = value.slice(1, -1);
+                }
+
+                if (key) {
+                    CONTAINER_ENVS.push("--env", `${key}=${value}`);
+                }
+            }
+        }
+    }
+}
+
+function get_hello_tip(containerName, defaultCommand) {
+    console.log(`${BLUE}----------------------------------------${NC}`);
+    console.log(`📦 首次命令        : ${defaultCommand}`);
+    console.log(`⚫ 恢复首次命令会话: ${CYAN}${MANYOYO_NAME} -n ${containerName} -- -c${NC}`);
+    console.log(`⚫ 执行首次命令    : ${GREEN}${MANYOYO_NAME} -n ${containerName}${NC}`);
+    console.log(`⚫ 执行指定命令    : ${GREEN}${MANYOYO_NAME} -n ${containerName} -x /bin/bash${NC}`);
+    console.log(`⚫ 执行指定命令    : ${GREEN}docker exec -it ${containerName} /bin/bash${NC}`);
+    console.log(`⚫ 删除容器        : ${MANYOYO_NAME} -n ${containerName} --rm`);
+    console.log("");
+}
+
+function docker_exec(cmd, options = {}) {
+    try {
+        return execSync(cmd, { encoding: 'utf-8', ...options });
+    } catch (e) {
+        if (options.ignoreError) {
+            return e.stdout || '';
+        }
+        throw e;
+    }
+}
+
+function sleep(ms) {
+    return new Promise(resolve => setTimeout(resolve, ms));
+}
+
+async function askQuestion(prompt) {
+    const rl = readline.createInterface({
+        input: process.stdin,
+        output: process.stdout
+    });
+
+    return new Promise((resolve) => {
+        rl.question(prompt, (answer) => {
+            rl.close();
+            resolve(answer);
+        });
+    });
+}
+
+async function main() {
+    // Check if no arguments provided
+    if (process.argv.length <= 2) {
+        show_help();
+        process.exit(1);
+    }
+
+    // Ensure docker/podman is available
+    ensure_docker();
+
+    // Docker CLI plugin metadata
+    if (process.argv[2] === 'docker-cli-plugin-metadata') {
+        const metadata = {
+            "SchemaVersion": "0.1.0",
+            "Vendor": "xcanwin",
+            "Version": "v1.0.0",
+            "Description": "AI Agent CLI Sandbox"
+        };
+        console.log(JSON.stringify(metadata, null, 2));
+        process.exit(0);
+    }
+
+    // Parse arguments
+    let args = process.argv.slice(2);
+
+    // Docker CLI plugin mode - remove first arg if running as plugin
+    const dockerPluginPath = path.join(process.env.HOME || '', '.docker/cli-plugins/docker-manyoyo');
+    if (process.argv[1] === dockerPluginPath && args[0] === 'manyoyo') {
+        args.shift();
+    }
+
+    // Parse command-line arguments
+    let i = 0;
+    while (i < args.length) {
+        const arg = args[i];
+
+        switch (arg) {
+            case '-l':
+            case '--ls':
+            case '--list':
+                get_cont_list();
+                process.exit(0);
+
+            case '--hp':
+            case '--host-path':
+                HOST_PATH = args[i + 1];
+                i += 2;
+                break;
+
+            case '-n':
+            case '--cn':
+            case '--cont-name':
+                CONTAINER_NAME = args[i + 1];
+                i += 2;
+                break;
+
+            case '--cp':
+            case '--cont-path':
+                CONTAINER_PATH = args[i + 1];
+                i += 2;
+                break;
+
+            case '--in':
+            case '--image-name':
+                IMAGE_NAME = args[i + 1];
+                i += 2;
+                break;
+
+            case '--iv':
+            case '--image-ver':
+                IMAGE_VERSION = args[i + 1];
+                i += 2;
+                break;
+
+            case '-e':
+            case '--env':
+                add_env(args[i + 1]);
+                i += 2;
+                break;
+
+            case '--ef':
+            case '--env-file':
+                add_env_file(args[i + 1]);
+                i += 2;
+                break;
+
+            case '-v':
+            case '--volume':
+                add_volume(args[i + 1]);
+                i += 2;
+                break;
+
+            case '--rm':
+            case '--rmc':
+            case '--remove-cont':
+                SHOULD_REMOVE = true;
+                i += 1;
+                break;
+
+            case '--sp':
+            case '--shell-prefix':
+                EXEC_COMMAND_PREFIX = args[i + 1] + " ";
+                i += 2;
+                break;
+
+            case '-s':
+            case '--shell':
+                EXEC_COMMAND = args[i + 1];
+                i += 2;
+                break;
+
+            case '--':
+            case '--ss':
+            case '--shell-suffix':
+                EXEC_COMMAND_SUFFIX = " " + args.slice(i + 1).join(' ');
+                i = args.length;
+                break;
+
+            case '-x':
+            case '--sf':
+            case '--shell-full':
+                EXEC_COMMAND = args.slice(i + 1).join(' ');
+                i = args.length;
+                break;
+
+            case '-y':
+            case '--yolo':
+                set_yolo(args[i + 1]);
+                i += 2;
+                break;
+
+            case '-m':
+            case '--cm':
+            case '--cont-mode':
+                set_cont_mode(args[i + 1]);
+                i += 2;
+                break;
+
+            case '--install':
+                install_manyoyo(args[i + 1]);
+                process.exit(0);
+
+            case '-V':
+            case '--version':
+                show_version();
+                process.exit(0);
+
+            case '-h':
+            case '--help':
+                show_help();
+                process.exit(0);
+
+            default:
+                console.log(`${RED}⚠️ 未知参数: ${arg}${NC}`);
+                show_help();
+                process.exit(1);
+        }
+    }
+
+    // Handle remove logic
+    if (SHOULD_REMOVE) {
+        try {
+            const containers = docker_exec(`${DOCKER_CMD} ps -a --format '{{.Names}}'`);
+            if (containers.split('\n').some(name => name.trim() === CONTAINER_NAME)) {
+                console.log(`${YELLOW}🗑️ 正在删除容器: ${CONTAINER_NAME}...${NC}`);
+                docker_exec(`${DOCKER_CMD} rm -f "${CONTAINER_NAME}"`, { stdio: 'pipe' });
+                console.log(`${GREEN}✅ 已彻底删除。${NC}`);
+            } else {
+                console.log(`${RED}⚠️ 错误: 未找到名为 ${CONTAINER_NAME} 的容器。${NC}`);
+            }
+        } catch (e) {
+            console.log(`${RED}⚠️ 错误: 未找到名为 ${CONTAINER_NAME} 的容器。${NC}`);
+        }
+        process.exit(0);
+    }
+
+    // Safety check
+    const realHostPath = fs.realpathSync(HOST_PATH);
+    const homeDir = process.env.HOME || '/home';
+    if (realHostPath === '/' || realHostPath === '/home' || realHostPath === homeDir) {
+        console.log(`${RED}⚠️ 错误: 不允许挂载根目录或home目录。${NC}`);
+        process.exit(1);
+    }
+
+    const FULL_IMAGE = `${IMAGE_NAME}:${IMAGE_VERSION}`;
+    let DEFAULT_COMMAND = "";
+
+    // Check if container exists
+    try {
+        const containers = docker_exec(`${DOCKER_CMD} ps -a --format '{{.Names}}'`);
+        const containerExists = containers.split('\n').some(name => name.trim() === CONTAINER_NAME);
+
+        if (!containerExists) {
+            // Create new container
+            console.log(`${CYAN}📦 manyoyo by xcanwin 正在创建新容器: ${YELLOW}${CONTAINER_NAME}${NC}\n`);
+            EXEC_COMMAND = `${EXEC_COMMAND_PREFIX}${EXEC_COMMAND}${EXEC_COMMAND_SUFFIX}`;
+            DEFAULT_COMMAND = EXEC_COMMAND;
+
+            // Build docker run command
+            const envArgs = CONTAINER_ENVS.join(' ');
+            const volumeArgs = CONTAINER_VOLUMES.join(' ');
+            const contModeArg = CONT_MODE ? CONT_MODE : '';
+
+            const dockerRunCmd = `${DOCKER_CMD} run -d --name "${CONTAINER_NAME}" --entrypoint "" ${contModeArg} ${envArgs} ${volumeArgs} --volume "${HOST_PATH}:${CONTAINER_PATH}" --workdir "${CONTAINER_PATH}" --label "manyoyo.default_cmd=${EXEC_COMMAND}" "${FULL_IMAGE}" tail -f /dev/null`;
+
+            docker_exec(dockerRunCmd, { stdio: 'pipe' });
+
+            // Wait for container to be ready
+            const MAX_RETRIES = 50;
+            let count = 0;
+            while (true) {
+                try {
+                    const status = docker_exec(`${DOCKER_CMD} inspect -f '{{.State.Status}}' "${CONTAINER_NAME}"`).trim();
+
+                    if (status === 'running') {
+                        break;
+                    }
+
+                    if (status === 'exited') {
+                        console.log(`${RED}⚠️ 错误: 容器启动后立即退出。${NC}`);
+                        docker_exec(`${DOCKER_CMD} logs "${CONTAINER_NAME}"`, { stdio: 'inherit' });
+                        process.exit(1);
+                    }
+
+                    await sleep(100);
+                    count++;
+
+                    if (count >= MAX_RETRIES) {
+                        console.log(`${RED}⚠️ 错误: 容器启动超时（当前状态: ${status}）。${NC}`);
+                        docker_exec(`${DOCKER_CMD} logs "${CONTAINER_NAME}"`, { stdio: 'inherit' });
+                        process.exit(1);
+                    }
+                } catch (e) {
+                    await sleep(100);
+                    count++;
+                    if (count >= MAX_RETRIES) {
+                        console.log(`${RED}⚠️ 错误: 容器启动超时。${NC}`);
+                        process.exit(1);
+                    }
+                }
+            }
+        } else {
+            // Container exists
+            console.log(`${CYAN}🔄 manyoyo by xcanwin 正在连接到现有容器: ${YELLOW}${CONTAINER_NAME}${NC}`);
+
+            // Start container if stopped
+            const status = docker_exec(`${DOCKER_CMD} inspect -f '{{.State.Status}}' "${CONTAINER_NAME}"`).trim();
+            if (status !== 'running') {
+                docker_exec(`${DOCKER_CMD} start "${CONTAINER_NAME}"`, { stdio: 'pipe' });
+            }
+
+            // Get default command from label
+            DEFAULT_COMMAND = docker_exec(`${DOCKER_CMD} inspect -f '{{index .Config.Labels "manyoyo.default_cmd"}}' "${CONTAINER_NAME}"`).trim();
+
+            if (!EXEC_COMMAND) {
+                EXEC_COMMAND = `${EXEC_COMMAND_PREFIX}${DEFAULT_COMMAND}${EXEC_COMMAND_SUFFIX}`;
+            } else {
+                EXEC_COMMAND = `${EXEC_COMMAND_PREFIX}${EXEC_COMMAND}${EXEC_COMMAND_SUFFIX}`;
+            }
+        }
+
+        get_hello_tip(CONTAINER_NAME, DEFAULT_COMMAND);
+        console.log(`${BLUE}----------------------------------------${NC}`);
+        console.log(`💻 执行命令: ${YELLOW}${EXEC_COMMAND || '交互式 Shell'}${NC}`);
+
+        // Execute command in container
+        if (EXEC_COMMAND) {
+            spawnSync(`${DOCKER_CMD}`, ['exec', '-it', CONTAINER_NAME, '/bin/bash', '-c', EXEC_COMMAND], { stdio: 'inherit' });
+        } else {
+            spawnSync(`${DOCKER_CMD}`, ['exec', '-it', CONTAINER_NAME, '/bin/bash'], { stdio: 'inherit' });
+        }
+
+        // Post-exit prompt
+        console.log("");
+        get_hello_tip(CONTAINER_NAME, DEFAULT_COMMAND);
+
+        const reply = await askQuestion(`❔ 会话已结束。是否保留此后台容器 ${CONTAINER_NAME}? [ y=默认保留, n=删除, 1=首次命令进入, s=执行命令, i=交互式SHELL ]: `);
+        console.log("");
+
+        const firstChar = reply.trim().toLowerCase()[0];
+
+        if (firstChar === 'n') {
+            console.log(`${YELLOW}🗑️ 正在删除容器...${NC}`);
+            docker_exec(`${DOCKER_CMD} rm -f "${CONTAINER_NAME}"`, { stdio: 'pipe' });
+            console.log(`${GREEN}✅ 已彻底删除。${NC}`);
+        } else if (firstChar === '1') {
+            console.log(`${GREEN}✅ 离开当前连接，用首次命令进入。${NC}`);
+            // Reconstruct the command and execute recursively
+            const newArgs = ['-n', CONTAINER_NAME];
+            process.argv = [process.argv[0], process.argv[1], ...newArgs];
+            await main();
+        } else if (firstChar === 's') {
+            const command = await askQuestion('❔ 输入要执行的命令: ');
+            console.log(`${GREEN}✅ 离开当前连接，执行命令。${NC}`);
+            const newArgs = ['-n', CONTAINER_NAME, '-x', command];
+            process.argv = [process.argv[0], process.argv[1], ...newArgs];
+            await main();
+        } else if (firstChar === 'i') {
+            console.log(`${GREEN}✅ 离开当前连接，进入容器交互式SHELL。${NC}`);
+            const newArgs = ['-n', CONTAINER_NAME, '-x', '/bin/bash'];
+            process.argv = [process.argv[0], process.argv[1], ...newArgs];
+            await main();
+        } else {
+            console.log(`${GREEN}✅ 已退出连接。容器 ${CONTAINER_NAME} 仍在后台运行。${NC}`);
+        }
+
+    } catch (e) {
+        console.error(`${RED}Error: ${e.message}${NC}`);
+        process.exit(1);
+    }
+}
+
+main().catch(err => {
+    console.error(err);
+    process.exit(1);
+});

package/docker/manyoyo.Dockerfile

@@ -0,0 +1,215 @@
+FROM ubuntu:24.04
+
+ARG TARGETARCH
+ARG NODE_VERSION=24
+ARG EXT=""
+
+RUN <<EOX
+    # 部署 system
+
+    # 修复CA证书
+    sed -i 's|http://[^/]*\.ubuntu\.com|https://mirrors.aliyun.com|g' /etc/apt/sources.list.d/ubuntu.sources
+    apt-get -o Acquire::https::Verify-Peer=false update -y
+    apt-get -o Acquire::https::Verify-Peer=false install -y --no-install-recommends ca-certificates openssl
+    update-ca-certificates
+
+    # 安装基本依赖
+    apt-get update -y
+    apt-get install -y --no-install-recommends --reinstall ca-certificates openssl
+    update-ca-certificates
+    apt-get install -y --no-install-recommends curl wget net-tools iputils-ping git lsof socat ncat dnsutils \
+                    nano jq file tree ripgrep less bc xxd \
+                    tar zip unzip gzip make sqlite3 \
+                    supervisor
+
+    # 安装 docker
+    case ",$EXT," in *,all,*|*,docker,*)
+        apt-get install -y --no-install-recommends docker.io
+    ;; esac
+
+    # 清理
+    apt-get clean
+    rm -rf /tmp/* /var/tmp/* /var/log/apt /var/log/*.log /var/lib/apt/lists/* ~/.cache ~/.npm ~/go/pkg/mod/cache
+EOX
+
+RUN <<EOX
+    # 安装 python
+    apt-get update -y
+    apt-get install -y --no-install-recommends python3.12 python3.12-dev python3.12-venv python3-pip
+    ln -sf /usr/bin/python3 /usr/bin/python
+    ln -sf /usr/bin/pip3 /usr/bin/pip
+    pip config set global.index-url "https://mirrors.tencent.com/pypi/simple"
+
+    # 清理
+    apt-get clean
+    rm -rf /tmp/* /var/tmp/* /var/log/apt /var/log/*.log /var/lib/apt/lists/* ~/.cache ~/.npm ~/go/pkg/mod/cache
+EOX
+
+RUN <<EOX
+    # 安装 node.js
+    case "$TARGETARCH" in
+      amd64) ARCH_NODE="x64" ;;
+      arm64) ARCH_NODE="arm64" ;;
+      *)     ARCH_NODE="$TARGETARCH" ;;
+    esac
+    NVM_NODEJS_ORG_MIRROR=https://mirrors.tencent.com/nodejs-release/
+    NODE_TAR=$(curl -sL ${NVM_NODEJS_ORG_MIRROR}/latest-v${NODE_VERSION}.x/SHASUMS256.txt | grep linux-${ARCH_NODE}.tar.gz | awk '{print $2}')
+    curl -fsSL ${NVM_NODEJS_ORG_MIRROR}/latest-v${NODE_VERSION}.x/${NODE_TAR} | tar -xz -C /usr/local --strip-components=1 --exclude='*.md' --exclude='LICENSE'
+    npm config set registry=https://mirrors.tencent.com/npm/
+    npm install -g npm
+
+    # 安装 LSP服务（python、typescript）
+    npm install -g pyright typescript-language-server typescript
+
+    # 安装 Claude CLI
+    npm install -g @anthropic-ai/claude-code
+    mkdir -p ~/.claude/plugins/marketplaces/
+    cat > ~/.claude.json <<EOF
+{
+  "bypassPermissionsModeAccepted": true,
+  "hasCompletedOnboarding": true,
+  "env": {
+    "CLAUDE_CODE_DISABLE_NONESSENTIAL_TRAFFIC": "1",
+    "CLAUDE_CODE_HIDE_ACCOUNT_INFO": "1",
+    "DISABLE_AUTOUPDATER": "1"
+  }
+}
+EOF
+    claude plugin marketplace add anthropics/claude-plugins-official
+    claude plugin install ralph-loop@claude-plugins-official
+    claude plugin install typescript-lsp@claude-plugins-official
+    claude plugin install pyright-lsp@claude-plugins-official
+    claude plugin install gopls-lsp@claude-plugins-official
+    claude plugin install jdtls-lsp@claude-plugins-official
+
+    # 安装 Gemini CLI
+    case ",$EXT," in *,all,*|*,gemini,*)
+        npm install -g @google/gemini-cli
+        mkdir -p ~/.gemini/
+        cat > ~/.gemini/settings.json <<EOF
+{
+  "privacy": {
+    "usageStatisticsEnabled": false
+  },
+  "security": {
+    "auth": {
+      "selectedType": "oauth-personal"
+    }
+  },
+  "general": {
+    "previewFeatures": true,
+    "disableAutoUpdate": true,
+    "disableUpdateNag": true
+  },
+  "model": {
+    "name": "gemini-3-pro-preview"
+  }
+}
+EOF
+    ;; esac
+
+    # 安装 Codex CLI
+    case ",$EXT," in *,all,*|*,codex,*)
+        npm install -g @openai/codex
+    ;; esac
+
+    # 安装 Copilot CLI
+    case ",$EXT," in *,all,*|*,copilot,*)
+        npm install -g @github/copilot
+        mkdir -p ~/.copilot/
+        cat > ~/.copilot/config.json <<EOF
+{
+  "banner": "never",
+  "model": "gemini-3-pro-preview",
+  "render_markdown": true,
+  "screen_reader": false,
+  "theme": "auto"
+}
+EOF
+    ;; esac
+
+    # 安装 OpenCode CLI
+    case ",$EXT," in *,all,*|*,opencode,*)
+        npm install -g opencode-ai
+        mkdir -p ~/.config/opencode/
+        cat > ~/.config/opencode/opencode.json <<EOF
+{
+  "$schema": "https://opencode.ai/config.json",
+  "autoupdate": false,
+  "permission": "allow",
+  "model": "myprovider/{env:ANTHROPIC_MODEL}",
+  "provider": {
+    "myprovider": {
+      "npm": "@ai-sdk/openai-compatible",
+      "options": {
+        "baseURL": "{env:ANTHROPIC_BASE_URL}",
+        "apiKey": "{env:ANTHROPIC_AUTH_TOKEN}",
+        "headers": {
+          "User-Agent": "opencode-cli"
+        }
+      },
+      "models": {
+        "{env:ANTHROPIC_MODEL}": {},
+        "claude-sonnet-4-5-20250929": {},
+        "gpt-5.2": {}
+      }
+    }
+  }
+}
+EOF
+    ;; esac
+
+    # 清理
+    npm cache clean --force
+    rm -rf /tmp/* /var/tmp/* /var/log/apt /var/log/*.log /var/lib/apt/lists/* ~/.cache ~/.npm ~/go/pkg/mod/cache
+EOX
+
+COPY ./docker/lib/jdt-language-server-latest.tar.gz /tmp/
+RUN <<EOX
+    # 安装 java
+    case ",$EXT," in *,all,*|*,java,*)
+        apt-get update -y
+        apt-get install -y --no-install-recommends openjdk-21-jdk maven
+
+        # 安装 LSP服务（java）
+        mkdir -p ~/.local/share/jdtls
+        # wget -O /tmp/jdt-language-server-latest.tar.gz https://download.eclipse.org/jdtls/snapshots/jdt-language-server-latest.tar.gz
+        tar -xzf /tmp/jdt-language-server-latest.tar.gz -C ~/.local/share/jdtls
+        rm -f /tmp/jdt-language-server-latest.tar.gz
+        ln -sf ~/.local/share/jdtls/bin/jdtls /usr/local/bin/jdtls
+
+        # 清理
+        apt-get clean
+        rm -rf /tmp/* /var/tmp/* /var/log/apt /var/log/*.log /var/lib/apt/lists/* ~/.cache ~/.npm ~/go/pkg/mod/cache
+    ;; esac
+EOX
+
+RUN <<EOX
+    # 安装 go
+    case ",$EXT," in *,all,*|*,go,*)
+        apt-get update -y
+        apt-get install -y --no-install-recommends golang golang-src gcc
+        go env -w GOPROXY=https://mirrors.tencent.com/go
+
+        # 安装 LSP服务（go）
+        go install golang.org/x/tools/gopls@latest
+        ln -sf ~/go/bin/gopls /usr/local/bin/gopls
+
+        # 清理
+        apt-get clean
+        go clean -modcache -cache
+        rm -rf /tmp/* /var/tmp/* /var/log/apt /var/log/*.log /var/lib/apt/lists/* ~/.cache ~/.npm ~/go/pkg/mod/cache
+    ;; esac
+EOX
+
+RUN <<EOX
+    # 配置 supervisor
+    cat > /etc/supervisor/conf.d/s.conf << EOF
+[supervisord]
+user=root
+nodaemon=true
+EOF
+EOX
+
+WORKDIR /tmp
+CMD ["supervisord", "-n", "-c", "/etc/supervisor/supervisord.conf"]

package/package.json

@@ -0,0 +1,38 @@
+{
+  "name": "@xcanwin/manyoyo",
+  "version": "2.0.0",
+  "description": "AI Agent CLI Sandbox",
+  "main": "bin/manyoyo.js",
+  "bin": {
+    "manyoyo": "bin/manyoyo.js"
+  },
+  "scripts": {
+    "install-link": "npm link",
+    "test": "node bin/manyoyo.js --help"
+  },
+  "keywords": [
+    "ai",
+    "agent",
+    "sandbox",
+    "docker",
+    "cli",
+    "container",
+    "development"
+  ],
+  "author": "xcanwin",
+  "license": "MIT",
+  "repository": {
+    "type": "git",
+    "url": "git+https://github.com/xcanwin/manyoyo.git"
+  },
+  "homepage": "https://github.com/xcanwin/manyoyo",
+  "engines": {
+    "node": ">=14.0.0"
+  },
+  "files": [
+    "manyoyo.js",
+    "README.md",
+    "LICENSE",
+    "docker/manyoyo.Dockerfile"
+  ]
+}