@xcanwin/manyoyo 8.3.3 → 8.5.0

package/manyoyo.example.json

@@ -29,6 +29,24 @@
     "volumes": [],
     "ports": ["8888:8888"],
 
+    // 网络策略（新建容器时写入，Web「容器」页随时改，不需要重启容器）。不写 = 默认收紧：允许公网，
+    // 禁止宿主机其他端口、局域网 / 私有网段、云元数据与其他容器。
+    // preset：restricted（默认）/ allowlist（域名白名单，需要 serve 运行）/ open（不加规则）
+    "network": {
+        "preset": "restricted",
+        // 允许容器访问的宿主机端口（宿主机上监听 0.0.0.0 的服务）
+        "host": [],
+        // 直连放行的 IP 规则，例如局域网里的模型网关：{ "cidr": "192.168.1.50", "ports": "8000", "proto": "tcp" }
+        "egress": { "domains": [], "rules": [] },
+        // 端口暴露（需要 serve 运行）：监听地址默认 127.0.0.1；绑 0.0.0.0 等于局域网 / 公网可见
+        "expose": []
+    },
+
+    // 容器每次启动（新建、重启、serve 拉起）都由容器内 init 执行一次的 bash 脚本；新建容器时写入，之后在 Web「容器」页随时改
+    "autostart": "",
+    // serve 启动时是否自动拉起此容器（配合 autostart 使用）
+    "autostartOnServe": false,
+
     // 仅首次创建容器时执行一次（创建后、常规 shell 前）
     "first": {
         // 仅支持绝对路径，如 /abs/path.env
@@ -81,8 +99,8 @@
             "timezoneId": "",
             // 强制 navigator.platform；留空则使用浏览器真实值（推荐，与 UA、字体、WebGL 自洽）
             "navigatorPlatform": "",
-            // 是否禁用 WebRTC（默认 false）
-            "disableWebRTC": false,
+            // 是否禁用 WebRTC（默认 true：否则 STUN 会暴露本机公网 IP；需要视频会议类网站时设为 false）
+            "disableWebRTC": true,
             // chrome 模式读取的 DevToolsActivePort 文件；留空时自动探测常见路径
             "devtoolsActivePortPath": "",
             // playwright ext-download 的 CRX prodversion 参数

package/package.json

@@ -1,8 +1,10 @@
 {
     "name": "@xcanwin/manyoyo",
-    "version": "8.3.3",
-    "imageVersion": "2.1.1-common",
-    "playwrightCliVersion": "0.1.21",
+    "version": "8.5.0",
+    "imageVersion": "2.2.0-common",
+    "playwrightCliVersion": "0.1.19",
+    "patchrightCoreVersion": "1.63.0",
+    "patchrightCoreIntegrity": "sha512-nuRJVTMVKoOFzY8vmwFqJZR3F0trUCKiPzDSgCOPq/yHHTefm9czILV23dXJsi5mvS7sCy7U1CqG7edA/21DtQ==",
     "description": "MANYOYO – open-source AI agent sandbox: run AI coding agents (Claude Code / Codex / Gemini) safely in Docker/Podman",
     "keywords": [
         "manyoyo",
@@ -39,7 +41,7 @@
         "test:web": "node scripts/web.js test",
         "prepack": "npm run build:web",
         "test": "jest --coverage && npm run test:web",
-        "test:unit": "jest test/ --testPathIgnorePatterns '<rootDir>/temp/' '<rootDir>/test/integration/' && npm run test:web",
+        "test:unit": "jest test/ --testPathIgnorePatterns '<rootDir>/temp/' '<rootDir>/.claude/' '<rootDir>/test/integration/' && npm run test:web",
         "test:integration": "jest test/integration/ --runInBand",
         "test:installer": "jest test/installer.test.js",
         "lint:sh": "command -v shellcheck >/dev/null 2>&1 || { echo '未安装 shellcheck：macOS 用 brew install shellcheck，Debian/Ubuntu 用 sudo apt install shellcheck，或用 docker run --rm -v \"$PWD:/mnt\" -w /mnt koalaman/shellcheck:stable scripts/install.sh scripts/offline/*.sh' >&2; exit 1; } && shellcheck -s sh -x -e SC1091 scripts/install.sh scripts/offline/*.sh",
@@ -66,9 +68,9 @@
         "manyoyo.example.json"
     ],
     "dependencies": {
-        "@playwright/cli": "0.1.21",
         "commander": "^15.0.0",
         "json5": "^2.2.3",
+        "patchright-core": "1.63.0",
         "ws": "^8.21.3"
     },
     "devDependencies": {
@@ -88,13 +90,16 @@
         ],
         "testEnvironment": "node",
         "modulePathIgnorePatterns": [
-            "<rootDir>/temp/"
+            "<rootDir>/temp/",
+            "<rootDir>/.claude/"
         ],
         "testPathIgnorePatterns": [
-            "<rootDir>/temp/"
+            "<rootDir>/temp/",
+            "<rootDir>/.claude/"
         ],
         "watchPathIgnorePatterns": [
-            "<rootDir>/temp/"
+            "<rootDir>/temp/",
+            "<rootDir>/.claude/"
         ]
     }
 }