aec-agent 1.0.0

package/dist/components/sandbox-hub/approval-policy.d.ts

@@ -0,0 +1,12 @@
+import type { SandboxApprovalPolicy } from "./types/policy.js";
+/**
+ * Default approval rules per sandbox (wired into the approval gate by A-61):
+ *
+ * | operation              | isolated (docker/remote) | not isolated (host) |
+ * |------------------------|--------------------------|---------------------|
+ * | fs.read / fs.search    | auto                     | auto                |
+ * | fs.write               | auto                     | approval            |
+ * | exec                   | auto                     | approval            |
+ */
+export declare const defaultSandboxApprovalPolicy: SandboxApprovalPolicy;
+//# sourceMappingURL=approval-policy.d.ts.map

package/dist/components/sandbox-hub/approval-policy.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"approval-policy.d.ts","sourceRoot":"","sources":["../../../src/components/sandbox-hub/approval-policy.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,qBAAqB,EAAE,MAAM,mBAAmB,CAAC;AAE/D;;;;;;;;GAQG;AACH,eAAO,MAAM,4BAA4B,EAAE,qBAC6B,CAAC"}

package/dist/components/sandbox-hub/approval-policy.js

@@ -0,0 +1,11 @@
+/**
+ * Default approval rules per sandbox (wired into the approval gate by A-61):
+ *
+ * | operation              | isolated (docker/remote) | not isolated (host) |
+ * |------------------------|--------------------------|---------------------|
+ * | fs.read / fs.search    | auto                     | auto                |
+ * | fs.write               | auto                     | approval            |
+ * | exec                   | auto                     | approval            |
+ */
+export const defaultSandboxApprovalPolicy = (traits, operation) => !traits.isolated && (operation === "fs.write" || operation === "exec");
+//# sourceMappingURL=approval-policy.js.map

package/dist/components/sandbox-hub/approval-policy.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"approval-policy.js","sourceRoot":"","sources":["../../../src/components/sandbox-hub/approval-policy.ts"],"names":[],"mappings":"AAEA;;;;;;;;GAQG;AACH,MAAM,CAAC,MAAM,4BAA4B,GAA0B,CAAC,MAAM,EAAE,SAAS,EAAE,EAAE,CACvF,CAAC,MAAM,CAAC,QAAQ,IAAI,CAAC,SAAS,KAAK,UAAU,IAAI,SAAS,KAAK,MAAM,CAAC,CAAC"}

package/dist/components/sandbox-hub/docker/aec-sandbox-image.d.ts

@@ -0,0 +1,3 @@
+export declare const AEC_SANDBOX_IMAGE = "aec-sandbox:latest";
+export declare const AEC_SANDBOX_DOCKERFILE = "FROM node:22-bookworm-slim\n\nRUN apt-get update \\\n && apt-get install -y --no-install-recommends \\\n      git ripgrep python3 python3-pip python3-venv ca-certificates procps \\\n && rm -rf /var/lib/apt/lists/*\n\nRUN mkdir -p /workspace && chown node:node /workspace\n\nENV HOME=/tmp/home \\\n    PYTHONDONTWRITEBYTECODE=1 \\\n    PIP_DISABLE_PIP_VERSION_CHECK=1 \\\n    NPM_CONFIG_UPDATE_NOTIFIER=false\n\nUSER node\nWORKDIR /workspace\nCMD [\"sleep\", \"infinity\"]\n";
+//# sourceMappingURL=aec-sandbox-image.d.ts.map

package/dist/components/sandbox-hub/docker/aec-sandbox-image.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"aec-sandbox-image.d.ts","sourceRoot":"","sources":["../../../../src/components/sandbox-hub/docker/aec-sandbox-image.ts"],"names":[],"mappings":"AAYA,eAAO,MAAM,iBAAiB,uBAAuB,CAAC;AAEtD,eAAO,MAAM,sBAAsB,8dAiBlC,CAAC"}

package/dist/components/sandbox-hub/docker/aec-sandbox-image.js

@@ -0,0 +1,31 @@
+// ---------------------------------------------------------------------------
+// aec-sandbox — the default image for Docker sandboxes (A-60).
+//
+// Debian slim + Node (required: the sandbox helper runs on it) + Python + git +
+// ripgrep. Built from this Dockerfile (no build context) by DockerSandboxProvider
+// the first time the image is missing, or by hand:
+//
+//   docker build -t aec-sandbox:latest - < Dockerfile
+//
+// The `node` user (uid 1000) owns /workspace; containers run as it.
+// ---------------------------------------------------------------------------
+export const AEC_SANDBOX_IMAGE = "aec-sandbox:latest";
+export const AEC_SANDBOX_DOCKERFILE = `FROM node:22-bookworm-slim
+
+RUN apt-get update \\
+ && apt-get install -y --no-install-recommends \\
+      git ripgrep python3 python3-pip python3-venv ca-certificates procps \\
+ && rm -rf /var/lib/apt/lists/*
+
+RUN mkdir -p /workspace && chown node:node /workspace
+
+ENV HOME=/tmp/home \\
+    PYTHONDONTWRITEBYTECODE=1 \\
+    PIP_DISABLE_PIP_VERSION_CHECK=1 \\
+    NPM_CONFIG_UPDATE_NOTIFIER=false
+
+USER node
+WORKDIR /workspace
+CMD ["sleep", "infinity"]
+`;
+//# sourceMappingURL=aec-sandbox-image.js.map

package/dist/components/sandbox-hub/docker/aec-sandbox-image.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"aec-sandbox-image.js","sourceRoot":"","sources":["../../../../src/components/sandbox-hub/docker/aec-sandbox-image.ts"],"names":[],"mappings":"AAAA,8EAA8E;AAC9E,+DAA+D;AAC/D,EAAE;AACF,gFAAgF;AAChF,kFAAkF;AAClF,mDAAmD;AACnD,EAAE;AACF,sDAAsD;AACtD,EAAE;AACF,oEAAoE;AACpE,8EAA8E;AAE9E,MAAM,CAAC,MAAM,iBAAiB,GAAG,oBAAoB,CAAC;AAEtD,MAAM,CAAC,MAAM,sBAAsB,GAAG;;;;;;;;;;;;;;;;;CAiBrC,CAAC"}

package/dist/components/sandbox-hub/docker/docker-cli.d.ts

@@ -0,0 +1,32 @@
+import type { ChildProcessWithoutNullStreams } from "node:child_process";
+import { SandboxError } from "../../../kernel/errors/sandbox-error.js";
+export interface DockerRunResult {
+    code: number | null;
+    stdout: string;
+    stderr: string;
+}
+export interface DockerRunOptions {
+    /** Written to stdin, then stdin is closed. */
+    input?: string;
+    timeoutMs?: number;
+    signal?: AbortSignal;
+    /** Sandbox id for errors. */
+    sandboxId?: string;
+}
+/**
+ * Thin wrapper over the `docker` CLI. The CLI gets the server's environment (it may
+ * need DOCKER_HOST, PATH); containers never do — `docker exec` only passes what `-e`
+ * names, and the provider passes nothing from the server.
+ */
+export declare class DockerCli {
+    readonly binary: string;
+    constructor(binary?: string);
+    /** Start a docker process with piped stdio. */
+    spawn(args: string[]): ChildProcessWithoutNullStreams;
+    /** Run to completion. Rejects only when docker cannot run at all, times out or is aborted. */
+    run(args: string[], opts?: DockerRunOptions): Promise<DockerRunResult>;
+}
+export declare function dockerSpawnError(error: NodeJS.ErrnoException, binary: string, sandboxId?: string): SandboxError;
+/** docker's message for a container that is gone or stopped (recoverable by restarting it). */
+export declare function isContainerDown(stderr: string): boolean;
+//# sourceMappingURL=docker-cli.d.ts.map

package/dist/components/sandbox-hub/docker/docker-cli.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"docker-cli.d.ts","sourceRoot":"","sources":["../../../../src/components/sandbox-hub/docker/docker-cli.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,8BAA8B,EAAE,MAAM,oBAAoB,CAAC;AACzE,OAAO,EAAE,YAAY,EAAE,MAAM,yCAAyC,CAAC;AAEvE,MAAM,WAAW,eAAe;IAC9B,IAAI,EAAE,MAAM,GAAG,IAAI,CAAC;IACpB,MAAM,EAAE,MAAM,CAAC;IACf,MAAM,EAAE,MAAM,CAAC;CAChB;AAED,MAAM,WAAW,gBAAgB;IAC/B,8CAA8C;IAC9C,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,MAAM,CAAC,EAAE,WAAW,CAAC;IACrB,6BAA6B;IAC7B,SAAS,CAAC,EAAE,MAAM,CAAC;CACpB;AAKD;;;;GAIG;AACH,qBAAa,SAAS;IACR,QAAQ,CAAC,MAAM,EAAE,MAAM;IAAnC,YAAqB,MAAM,GAAE,MAAiB,EAAI;IAElD,+CAA+C;IAC/C,KAAK,CAAC,IAAI,EAAE,MAAM,EAAE,GAAG,8BAA8B,CAEpD;IAED,8FAA8F;IAC9F,GAAG,CAAC,IAAI,EAAE,MAAM,EAAE,EAAE,IAAI,GAAE,gBAAqB,GAAG,OAAO,CAAC,eAAe,CAAC,CAwDzE;CACF;AAED,wBAAgB,gBAAgB,CAAC,KAAK,EAAE,MAAM,CAAC,cAAc,EAAE,MAAM,EAAE,MAAM,EAAE,SAAS,CAAC,EAAE,MAAM,GAAG,YAAY,CAM/G;AAED,+FAA+F;AAC/F,wBAAgB,eAAe,CAAC,MAAM,EAAE,MAAM,GAAG,OAAO,CAEvD"}

package/dist/components/sandbox-hub/docker/docker-cli.js

@@ -0,0 +1,83 @@
+import { spawn } from "node:child_process";
+import { SandboxError } from "../../../kernel/errors/sandbox-error.js";
+/** Output above this is dropped — docker's own output, never a command's (that is streamed). */
+const MAX_CAPTURE_BYTES = 64 * 1024 * 1024;
+/**
+ * Thin wrapper over the `docker` CLI. The CLI gets the server's environment (it may
+ * need DOCKER_HOST, PATH); containers never do — `docker exec` only passes what `-e`
+ * names, and the provider passes nothing from the server.
+ */
+export class DockerCli {
+    binary;
+    constructor(binary = "docker") {
+        this.binary = binary;
+    }
+    /** Start a docker process with piped stdio. */
+    spawn(args) {
+        return spawn(this.binary, args, { stdio: ["pipe", "pipe", "pipe"], windowsHide: true });
+    }
+    /** Run to completion. Rejects only when docker cannot run at all, times out or is aborted. */
+    run(args, opts = {}) {
+        return new Promise((resolve, reject) => {
+            if (opts.signal?.aborted) {
+                reject(new SandboxError("Operation cancelled", "cancelled", opts.sandboxId));
+                return;
+            }
+            const proc = this.spawn(args);
+            const out = [];
+            const err = [];
+            let captured = 0;
+            let settled = false;
+            const capture = (into) => (chunk) => {
+                if (captured >= MAX_CAPTURE_BYTES)
+                    return;
+                captured += chunk.length;
+                into.push(chunk);
+            };
+            proc.stdout.on("data", capture(out));
+            proc.stderr.on("data", capture(err));
+            const settle = (fn) => {
+                if (settled)
+                    return;
+                settled = true;
+                clearTimeout(timer);
+                opts.signal?.removeEventListener("abort", onAbort);
+                fn();
+            };
+            const onAbort = () => {
+                proc.kill();
+                settle(() => reject(new SandboxError("Operation cancelled", "cancelled", opts.sandboxId)));
+            };
+            const timer = opts.timeoutMs
+                ? setTimeout(() => {
+                    proc.kill();
+                    settle(() => reject(new SandboxError(`docker ${args[0]} timed out after ${opts.timeoutMs} ms`, "timeout", opts.sandboxId)));
+                }, opts.timeoutMs)
+                : undefined;
+            opts.signal?.addEventListener("abort", onAbort, { once: true });
+            proc.on("error", (error) => {
+                settle(() => reject(dockerSpawnError(error, this.binary, opts.sandboxId)));
+            });
+            proc.on("close", (code) => {
+                settle(() => resolve({
+                    code,
+                    stdout: Buffer.concat(out).toString("utf8"),
+                    stderr: Buffer.concat(err).toString("utf8"),
+                }));
+            });
+            proc.stdin.on("error", () => { });
+            proc.stdin.end(opts.input ?? "");
+        });
+    }
+}
+export function dockerSpawnError(error, binary, sandboxId) {
+    const message = error.code === "ENOENT"
+        ? `Docker CLI "${binary}" was not found — install Docker to use sandboxes`
+        : `Could not run the Docker CLI: ${error.message}`;
+    return new SandboxError(message, "environment_unavailable", sandboxId);
+}
+/** docker's message for a container that is gone or stopped (recoverable by restarting it). */
+export function isContainerDown(stderr) {
+    return /No such container|is not running|is paused|is restarting/i.test(stderr);
+}
+//# sourceMappingURL=docker-cli.js.map

package/dist/components/sandbox-hub/docker/docker-cli.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"docker-cli.js","sourceRoot":"","sources":["../../../../src/components/sandbox-hub/docker/docker-cli.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,KAAK,EAAE,MAAM,oBAAoB,CAAC;AAE3C,OAAO,EAAE,YAAY,EAAE,MAAM,yCAAyC,CAAC;AAiBvE,gGAAgG;AAChG,MAAM,iBAAiB,GAAG,EAAE,GAAG,IAAI,GAAG,IAAI,CAAC;AAE3C;;;;GAIG;AACH,MAAM,OAAO,SAAS;IACC,MAAM;IAA3B,YAAqB,MAAM,GAAW,QAAQ;sBAAzB,MAAM;IAAsB,CAAC;IAElD,+CAA+C;IAC/C,KAAK,CAAC,IAAc;QAClB,OAAO,KAAK,CAAC,IAAI,CAAC,MAAM,EAAE,IAAI,EAAE,EAAE,KAAK,EAAE,CAAC,MAAM,EAAE,MAAM,EAAE,MAAM,CAAC,EAAE,WAAW,EAAE,IAAI,EAAE,CAAC,CAAC;IAC1F,CAAC;IAED,8FAA8F;IAC9F,GAAG,CAAC,IAAc,EAAE,IAAI,GAAqB,EAAE;QAC7C,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;YACrC,IAAI,IAAI,CAAC,MAAM,EAAE,OAAO,EAAE,CAAC;gBACzB,MAAM,CAAC,IAAI,YAAY,CAAC,qBAAqB,EAAE,WAAW,EAAE,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC;gBAC7E,OAAO;YACT,CAAC;YACD,MAAM,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;YAC9B,MAAM,GAAG,GAAa,EAAE,CAAC;YACzB,MAAM,GAAG,GAAa,EAAE,CAAC;YACzB,IAAI,QAAQ,GAAG,CAAC,CAAC;YACjB,IAAI,OAAO,GAAG,KAAK,CAAC;YACpB,MAAM,OAAO,GAAG,CAAC,IAAc,EAAE,EAAE,CAAC,CAAC,KAAa,EAAE,EAAE;gBACpD,IAAI,QAAQ,IAAI,iBAAiB;oBAAE,OAAO;gBAC1C,QAAQ,IAAI,KAAK,CAAC,MAAM,CAAC;gBACzB,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;YACnB,CAAC,CAAC;YACF,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC;YACrC,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC;YAErC,MAAM,MAAM,GAAG,CAAC,EAAc,EAAE,EAAE;gBAChC,IAAI,OAAO;oBAAE,OAAO;gBACpB,OAAO,GAAG,IAAI,CAAC;gBACf,YAAY,CAAC,KAAK,CAAC,CAAC;gBACpB,IAAI,CAAC,MAAM,EAAE,mBAAmB,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;gBACnD,EAAE,EAAE,CAAC;YACP,CAAC,CAAC;YACF,MAAM,OAAO,GAAG,GAAG,EAAE;gBACnB,IAAI,CAAC,IAAI,EAAE,CAAC;gBACZ,MAAM,CAAC,GAAG,EAAE,CAAC,MAAM,CAAC,IAAI,YAAY,CAAC,qBAAqB,EAAE,WAAW,EAAE,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC;YAC7F,CAAC,CAAC;YACF,MAAM,KAAK,GAAG,IAAI,CAAC,SAAS;gBAC1B,CAAC,CAAC,UAAU,CAAC,GAAG,EAAE;oBACd,IAAI,CAAC,IAAI,EAAE,CAAC;oBACZ,MAAM,CAAC,GAAG,EAAE,CACV,MAAM,CAAC,IAAI,YAAY,CAAC,UAAU,IAAI,CAAC,CAAC,CAAC,oBAAoB,IAAI,CAAC,SAAS,KAAK,EAAE,SAAS,EAAE,IAAI,CAAC,SAAS,CAAC,CAAC,CAC9G,CAAC;gBACJ,CAAC,EAAE,IAAI,CAAC,SAAS,CAAC;gBACpB,CAAC,CAAC,SAAS,CAAC;YACd,IAAI,CAAC,MAAM,EAAE,gBAAgB,CAAC,OAAO,EAAE,OAAO,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC;YAEhE,IAAI,CAAC,EAAE,CAAC,OAAO,EAAE,CAAC,KAA4B,EAAE,EAAE;gBAChD,MAAM,CAAC,GAAG,EAAE,CAAC,MAAM,CAAC,gBAAgB,CAAC,KAAK,EAAE,IAAI,CAAC,MAAM,EAAE,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC;YAC7E,CAAC,CAAC,CAAC;YACH,IAAI,CAAC,EAAE,CAAC,OAAO,EAAE,CAAC,IAAI,EAAE,EAAE;gBACxB,MAAM,CAAC,GAAG,EAAE,CACV,OAAO,CAAC;oBACN,IAAI;oBACJ,MAAM,EAAE,MAAM,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC;oBAC3C,MAAM,EAAE,MAAM,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC;iBAC5C,CAAC,CACH,CAAC;YACJ,CAAC,CAAC,CAAC;YAEH,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC,OAAO,EAAE,GAAG,EAAE,GAAE,CAAC,CAAC,CAAC;YACjC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,KAAK,IAAI,EAAE,CAAC,CAAC;QACnC,CAAC,CAAC,CAAC;IACL,CAAC;CACF;AAED,MAAM,UAAU,gBAAgB,CAAC,KAA4B,EAAE,MAAc,EAAE,SAAkB;IAC/F,MAAM,OAAO,GACX,KAAK,CAAC,IAAI,KAAK,QAAQ;QACrB,CAAC,CAAC,eAAe,MAAM,mDAAmD;QAC1E,CAAC,CAAC,iCAAiC,KAAK,CAAC,OAAO,EAAE,CAAC;IACvD,OAAO,IAAI,YAAY,CAAC,OAAO,EAAE,yBAAyB,EAAE,SAAS,CAAC,CAAC;AACzE,CAAC;AAED,+FAA+F;AAC/F,MAAM,UAAU,eAAe,CAAC,MAAc;IAC5C,OAAO,2DAA2D,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;AAClF,CAAC"}

package/dist/components/sandbox-hub/docker/docker-sandbox-provider.d.ts

@@ -0,0 +1,70 @@
+import type { SandboxLimits, Sandbox } from "../types/sandbox.js";
+import type { CreateSandboxContext, SandboxSpec, ResourceLimits, SandboxProvider } from "../types/provider.js";
+import { DockerCli } from "./docker-cli.js";
+import type { DockerSandboxProviderOptions } from "./types.js";
+/** Per-operation ceilings of a Docker sandbox (overridable via options.limits). */
+export declare const DOCKER_DEFAULT_LIMITS: SandboxLimits;
+export interface DockerSandboxSettings {
+    defaultImage: string;
+    user: string;
+    defaultResources: ResourceLimits;
+    tmpfsSize: string;
+    limits: SandboxLimits;
+    buildDefaultImage: boolean;
+    pullImages: boolean;
+    operationTimeoutMs: number;
+    namePrefix: string;
+}
+/**
+ * Docker sandboxes (A-60): one long-lived container per sandbox on a named volume,
+ * driven through the `docker` CLI (no Docker SDK dependency, no Docker socket mounts).
+ *
+ *   shared sandbox   aec-sandbox-shared        /workspace/agents/<id> + /workspace/shared
+ *   own sandbox      aec-sandbox-own-<agentId> the whole /workspace
+ *   named env        aec-sandbox-env-<name>
+ *
+ * Retention: files live on the volume — they survive sessions, container restarts and
+ * server restarts. /tmp is a tmpfs, wiped whenever the container restarts. Disposing
+ * stops and removes the container but keeps the volume; data is deleted only through
+ * `dispose({ removeData: true })` / `removeAgentData()` / `removeData()` — which the
+ * SandboxHub calls when an agent is deleted.
+ */
+export declare class DockerSandboxProvider implements SandboxProvider {
+    readonly name = "sandbox:docker";
+    readonly version = "1.0.0";
+    readonly kind: "docker";
+    readonly cli: DockerCli;
+    readonly settings: DockerSandboxSettings;
+    private images;
+    constructor(options?: DockerSandboxProviderOptions);
+    create(spec: SandboxSpec, context: CreateSandboxContext): Promise<Sandbox>;
+    /**
+     * Delete the stored data of a sandbox that is not running in this process —
+     * its whole volume, or (with `agentId`, shared tenancy) one agent's folder in it.
+     */
+    removeData(spec: SandboxSpec, context: CreateSandboxContext, opts?: {
+        agentId?: string;
+    }): Promise<void>;
+    /** Is Docker reachable? For startup logs and health checks — never throws. */
+    checkAvailable(): Promise<{
+        ok: true;
+        version: string;
+    } | {
+        ok: false;
+        reason: string;
+    }>;
+    /** @internal Throws environment_unavailable (retryable) when Docker is not running. */
+    checkDocker(sandboxId: string): Promise<void>;
+    /**
+     * Make sure an image exists locally: build aec-sandbox from the bundled Dockerfile,
+     * pull anything else. Call at server startup to avoid a slow first tool call.
+     */
+    ensureImage(image: string, sandboxId?: string): Promise<void>;
+    /** @internal Container/volume names for a sandbox id ("docker:shared" → "aec-sandbox-shared"). */
+    namesFor(sandboxId: string): {
+        container: string;
+        volume: string;
+    };
+    private prepareImage;
+}
+//# sourceMappingURL=docker-sandbox-provider.d.ts.map

package/dist/components/sandbox-hub/docker/docker-sandbox-provider.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"docker-sandbox-provider.d.ts","sourceRoot":"","sources":["../../../../src/components/sandbox-hub/docker/docker-sandbox-provider.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,aAAa,EAAE,OAAO,EAAE,MAAM,qBAAqB,CAAC;AAClE,OAAO,KAAK,EACV,oBAAoB,EACpB,WAAW,EACX,cAAc,EACd,eAAe,EAChB,MAAM,sBAAsB,CAAC;AAE9B,OAAO,EAAE,SAAS,EAAE,MAAM,iBAAiB,CAAC;AAE5C,OAAO,KAAK,EAAE,4BAA4B,EAAE,MAAM,YAAY,CAAC;AAE/D,mFAAmF;AACnF,eAAO,MAAM,qBAAqB,EAAE,aAOnC,CAAC;AAMF,MAAM,WAAW,qBAAqB;IACpC,YAAY,EAAE,MAAM,CAAC;IACrB,IAAI,EAAE,MAAM,CAAC;IACb,gBAAgB,EAAE,cAAc,CAAC;IACjC,SAAS,EAAE,MAAM,CAAC;IAClB,MAAM,EAAE,aAAa,CAAC;IACtB,iBAAiB,EAAE,OAAO,CAAC;IAC3B,UAAU,EAAE,OAAO,CAAC;IACpB,kBAAkB,EAAE,MAAM,CAAC;IAC3B,UAAU,EAAE,MAAM,CAAC;CACpB;AAED;;;;;;;;;;;;;GAaG;AACH,qBAAa,qBAAsB,YAAW,eAAe;IAC3D,QAAQ,CAAC,IAAI,oBAAoB;IACjC,QAAQ,CAAC,OAAO,WAAW;IAC3B,QAAQ,CAAC,IAAI,EAAG,QAAQ,CAAU;IAClC,QAAQ,CAAC,GAAG,EAAE,SAAS,CAAC;IACxB,QAAQ,CAAC,QAAQ,EAAE,qBAAqB,CAAC;IACzC,OAAO,CAAC,MAAM,CAAoC;IAElD,YAAY,OAAO,GAAE,4BAAiC,EAmBrD;IAEK,MAAM,CAAC,IAAI,EAAE,WAAW,EAAE,OAAO,EAAE,oBAAoB,GAAG,OAAO,CAAC,OAAO,CAAC,CAO/E;IAED;;;OAGG;IACG,UAAU,CAAC,IAAI,EAAE,WAAW,EAAE,OAAO,EAAE,oBAAoB,EAAE,IAAI,GAAE;QAAE,OAAO,CAAC,EAAE,MAAM,CAAA;KAAO,GAAG,OAAO,CAAC,IAAI,CAAC,CA+BjH;IAED,8EAA8E;IACxE,cAAc,IAAI,OAAO,CAAC;QAAE,EAAE,EAAE,IAAI,CAAC;QAAC,OAAO,EAAE,MAAM,CAAA;KAAE,GAAG;QAAE,EAAE,EAAE,KAAK,CAAC;QAAC,MAAM,EAAE,MAAM,CAAA;KAAE,CAAC,CAQ7F;IAED,uFAAuF;IACjF,WAAW,CAAC,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAKlD;IAED;;;OAGG;IACH,WAAW,CAAC,KAAK,EAAE,MAAM,EAAE,SAAS,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAU5D;IAED,kGAAkG;IAClG,QAAQ,CAAC,SAAS,EAAE,MAAM,GAAG;QAAE,SAAS,EAAE,MAAM,CAAC;QAAC,MAAM,EAAE,MAAM,CAAA;KAAE,CAKjE;YAEa,YAAY;CAsB3B"}

package/dist/components/sandbox-hub/docker/docker-sandbox-provider.js

@@ -0,0 +1,166 @@
+import { SandboxError } from "../../../kernel/errors/sandbox-error.js";
+import { AGENTS_DIR, assertSafeAgentId, WORKSPACE_ROOT } from "../logical-path.js";
+import { AEC_SANDBOX_DOCKERFILE, AEC_SANDBOX_IMAGE } from "./aec-sandbox-image.js";
+import { DockerCli } from "./docker-cli.js";
+import { DockerSandbox } from "./docker-sandbox.js";
+/** Per-operation ceilings of a Docker sandbox (overridable via options.limits). */
+export const DOCKER_DEFAULT_LIMITS = {
+    maxReadBytes: 2_000_000,
+    maxWriteBytes: 5_000_000,
+    maxListEntries: 5_000,
+    maxSearchMatches: 500,
+    maxExecTimeoutMs: 10 * 60_000,
+    maxExecOutputBytes: 2_000_000,
+};
+const DEFAULT_RESOURCES = { cpus: 2, memoryMb: 2048, pids: 256 };
+const IMAGE_BUILD_TIMEOUT_MS = 30 * 60_000;
+const IMAGE_PULL_TIMEOUT_MS = 20 * 60_000;
+/**
+ * Docker sandboxes (A-60): one long-lived container per sandbox on a named volume,
+ * driven through the `docker` CLI (no Docker SDK dependency, no Docker socket mounts).
+ *
+ *   shared sandbox   aec-sandbox-shared        /workspace/agents/<id> + /workspace/shared
+ *   own sandbox      aec-sandbox-own-<agentId> the whole /workspace
+ *   named env        aec-sandbox-env-<name>
+ *
+ * Retention: files live on the volume — they survive sessions, container restarts and
+ * server restarts. /tmp is a tmpfs, wiped whenever the container restarts. Disposing
+ * stops and removes the container but keeps the volume; data is deleted only through
+ * `dispose({ removeData: true })` / `removeAgentData()` / `removeData()` — which the
+ * SandboxHub calls when an agent is deleted.
+ */
+export class DockerSandboxProvider {
+    name = "sandbox:docker";
+    version = "1.0.0";
+    kind = "docker";
+    cli;
+    settings;
+    images = new Map();
+    constructor(options = {}) {
+        this.cli = new DockerCli(options.dockerPath ?? "docker");
+        this.settings = {
+            defaultImage: options.defaultImage ?? AEC_SANDBOX_IMAGE,
+            user: options.user ?? "1000:1000",
+            defaultResources: { ...DEFAULT_RESOURCES, ...options.defaultResources },
+            tmpfsSize: options.tmpfsSize ?? "256m",
+            limits: { ...DOCKER_DEFAULT_LIMITS, ...options.limits },
+            buildDefaultImage: options.buildDefaultImage ?? true,
+            pullImages: options.pullImages ?? true,
+            operationTimeoutMs: options.operationTimeoutMs ?? 60_000,
+            namePrefix: options.namePrefix ?? "aec-sandbox",
+        };
+        if (!/^\d+(:\d+)?$/.test(this.settings.user)) {
+            throw new Error(`DockerSandboxProvider: user must be numeric "uid" or "uid:gid", got "${this.settings.user}"`);
+        }
+        if (!/^[a-zA-Z0-9][a-zA-Z0-9_.-]{0,63}$/.test(this.settings.namePrefix)) {
+            throw new Error(`DockerSandboxProvider: invalid namePrefix "${this.settings.namePrefix}"`);
+        }
+    }
+    async create(spec, context) {
+        if (spec.kind !== "docker") {
+            throw new SandboxError(`DockerSandboxProvider cannot create "${spec.kind}" sandboxes`, "provider_unavailable", context.id);
+        }
+        const env = new DockerSandbox(this, spec, context);
+        await env.start();
+        return env;
+    }
+    /**
+     * Delete the stored data of a sandbox that is not running in this process —
+     * its whole volume, or (with `agentId`, shared tenancy) one agent's folder in it.
+     */
+    async removeData(spec, context, opts = {}) {
+        const { container, volume } = this.namesFor(context.id);
+        if (context.tenancy === "own" || !opts.agentId) {
+            await this.cli.run(["rm", "--force", container], { timeoutMs: 60_000, sandboxId: context.id });
+            await this.cli.run(["volume", "rm", "--force", volume], { timeoutMs: 60_000, sandboxId: context.id });
+            return;
+        }
+        assertSafeAgentId(opts.agentId);
+        const exists = await this.cli.run(["volume", "inspect", volume], { timeoutMs: 30_000, sandboxId: context.id });
+        if (exists.code !== 0)
+            return; // never created — nothing stored
+        const image = spec.image ?? this.settings.defaultImage;
+        const present = await this.cli.run(["image", "inspect", "--format", "{{.Id}}", image], { timeoutMs: 30_000 });
+        if (present.code !== 0)
+            return;
+        const r = await this.cli.run([
+            "run", "--rm",
+            "--network", "none",
+            "--user", this.settings.user,
+            "--cap-drop", "ALL",
+            "--security-opt", "no-new-privileges",
+            "--mount", `type=volume,source=${volume},target=${WORKSPACE_ROOT}`,
+            "--entrypoint", "sh",
+            image,
+            "-c", 'chmod -R u+rwX -- "$1" 2>/dev/null; rm -rf -- "$1"',
+            "sh", `${AGENTS_DIR}/${opts.agentId}`,
+        ], { timeoutMs: 120_000, sandboxId: context.id });
+        if (r.code !== 0) {
+            throw new SandboxError(`Could not remove the agent's sandbox files: ${r.stderr.trim().slice(0, 300)}`, "environment_unavailable", context.id);
+        }
+    }
+    /** Is Docker reachable? For startup logs and health checks — never throws. */
+    async checkAvailable() {
+        try {
+            const r = await this.cli.run(["version", "--format", "{{.Server.Version}}"], { timeoutMs: 20_000 });
+            if (r.code === 0 && r.stdout.trim())
+                return { ok: true, version: r.stdout.trim() };
+            return { ok: false, reason: r.stderr.trim().split("\n")[0] || `docker exited with ${r.code}` };
+        }
+        catch (error) {
+            return { ok: false, reason: error instanceof Error ? error.message : String(error) };
+        }
+    }
+    /** @internal Throws environment_unavailable (retryable) when Docker is not running. */
+    async checkDocker(sandboxId) {
+        const status = await this.checkAvailable();
+        if (!status.ok) {
+            throw new SandboxError(`Docker is not available (is Docker running?): ${status.reason}`, "environment_unavailable", sandboxId);
+        }
+    }
+    /**
+     * Make sure an image exists locally: build aec-sandbox from the bundled Dockerfile,
+     * pull anything else. Call at server startup to avoid a slow first tool call.
+     */
+    ensureImage(image, sandboxId) {
+        let pending = this.images.get(image);
+        if (!pending) {
+            pending = this.prepareImage(image, sandboxId).catch((error) => {
+                this.images.delete(image); // retried on the next call
+                throw error;
+            });
+            this.images.set(image, pending);
+        }
+        return pending;
+    }
+    /** @internal Container/volume names for a sandbox id ("docker:shared" → "aec-sandbox-shared"). */
+    namesFor(sandboxId) {
+        const bare = sandboxId.replace(/^docker:/, "");
+        const suffix = bare === "shared" ? "shared" : bare.startsWith("own:") ? `own-${bare.slice(4)}` : `env-${bare}`;
+        const name = `${this.settings.namePrefix}-${suffix.replace(/[^A-Za-z0-9_.-]/g, "-")}`;
+        return { container: name, volume: name };
+    }
+    async prepareImage(image, sandboxId) {
+        const present = await this.cli.run(["image", "inspect", "--format", "{{.Id}}", image], { timeoutMs: 30_000, sandboxId });
+        if (present.code === 0)
+            return;
+        if (image === AEC_SANDBOX_IMAGE && this.settings.buildDefaultImage) {
+            const r = await this.cli.run(["build", "--tag", image, "-"], {
+                input: AEC_SANDBOX_DOCKERFILE, timeoutMs: IMAGE_BUILD_TIMEOUT_MS, sandboxId,
+            });
+            if (r.code !== 0) {
+                throw new SandboxError(`Building ${image} failed: ${r.stderr.trim().slice(-500)}`, "environment_unavailable", sandboxId);
+            }
+            return;
+        }
+        if (this.settings.pullImages) {
+            const r = await this.cli.run(["pull", image], { timeoutMs: IMAGE_PULL_TIMEOUT_MS, sandboxId });
+            if (r.code !== 0) {
+                throw new SandboxError(`Pulling ${image} failed: ${r.stderr.trim().slice(-500)}`, "environment_unavailable", sandboxId);
+            }
+            return;
+        }
+        throw new SandboxError(`Image "${image}" is not available locally`, "environment_unavailable", sandboxId);
+    }
+}
+//# sourceMappingURL=docker-sandbox-provider.js.map

package/dist/components/sandbox-hub/docker/docker-sandbox-provider.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"docker-sandbox-provider.js","sourceRoot":"","sources":["../../../../src/components/sandbox-hub/docker/docker-sandbox-provider.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,YAAY,EAAE,MAAM,yCAAyC,CAAC;AACvE,OAAO,EAAE,UAAU,EAAE,iBAAiB,EAAE,cAAc,EAAE,MAAM,oBAAoB,CAAC;AAQnF,OAAO,EAAE,sBAAsB,EAAE,iBAAiB,EAAE,MAAM,wBAAwB,CAAC;AACnF,OAAO,EAAE,SAAS,EAAE,MAAM,iBAAiB,CAAC;AAC5C,OAAO,EAAE,aAAa,EAAE,MAAM,qBAAqB,CAAC;AAGpD,mFAAmF;AACnF,MAAM,CAAC,MAAM,qBAAqB,GAAkB;IAClD,YAAY,EAAE,SAAS;IACvB,aAAa,EAAE,SAAS;IACxB,cAAc,EAAE,KAAK;IACrB,gBAAgB,EAAE,GAAG;IACrB,gBAAgB,EAAE,EAAE,GAAG,MAAM;IAC7B,kBAAkB,EAAE,SAAS;CAC9B,CAAC;AAEF,MAAM,iBAAiB,GAAmB,EAAE,IAAI,EAAE,CAAC,EAAE,QAAQ,EAAE,IAAI,EAAE,IAAI,EAAE,GAAG,EAAE,CAAC;AACjF,MAAM,sBAAsB,GAAG,EAAE,GAAG,MAAM,CAAC;AAC3C,MAAM,qBAAqB,GAAG,EAAE,GAAG,MAAM,CAAC;AAc1C;;;;;;;;;;;;;GAaG;AACH,MAAM,OAAO,qBAAqB;IACvB,IAAI,GAAG,gBAAgB,CAAC;IACxB,OAAO,GAAG,OAAO,CAAC;IAClB,IAAI,GAAG,QAAiB,CAAC;IACzB,GAAG,CAAY;IACf,QAAQ,CAAwB;IACjC,MAAM,GAAG,IAAI,GAAG,EAAyB,CAAC;IAElD,YAAY,OAAO,GAAiC,EAAE;QACpD,IAAI,CAAC,GAAG,GAAG,IAAI,SAAS,CAAC,OAAO,CAAC,UAAU,IAAI,QAAQ,CAAC,CAAC;QACzD,IAAI,CAAC,QAAQ,GAAG;YACd,YAAY,EAAE,OAAO,CAAC,YAAY,IAAI,iBAAiB;YACvD,IAAI,EAAE,OAAO,CAAC,IAAI,IAAI,WAAW;YACjC,gBAAgB,EAAE,EAAE,GAAG,iBAAiB,EAAE,GAAG,OAAO,CAAC,gBAAgB,EAAE;YACvE,SAAS,EAAE,OAAO,CAAC,SAAS,IAAI,MAAM;YACtC,MAAM,EAAE,EAAE,GAAG,qBAAqB,EAAE,GAAG,OAAO,CAAC,MAAM,EAAE;YACvD,iBAAiB,EAAE,OAAO,CAAC,iBAAiB,IAAI,IAAI;YACpD,UAAU,EAAE,OAAO,CAAC,UAAU,IAAI,IAAI;YACtC,kBAAkB,EAAE,OAAO,CAAC,kBAAkB,IAAI,MAAM;YACxD,UAAU,EAAE,OAAO,CAAC,UAAU,IAAI,aAAa;SAChD,CAAC;QACF,IAAI,CAAC,cAAc,CAAC,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAC;YAC7C,MAAM,IAAI,KAAK,CAAC,wEAAwE,IAAI,CAAC,QAAQ,CAAC,IAAI,GAAG,CAAC,CAAC;QACjH,CAAC;QACD,IAAI,CAAC,mCAAmC,CAAC,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,UAAU,CAAC,EAAE,CAAC;YACxE,MAAM,IAAI,KAAK,CAAC,8CAA8C,IAAI,CAAC,QAAQ,CAAC,UAAU,GAAG,CAAC,CAAC;QAC7F,CAAC;IACH,CAAC;IAED,KAAK,CAAC,MAAM,CAAC,IAAiB,EAAE,OAA6B;QAC3D,IAAI,IAAI,CAAC,IAAI,KAAK,QAAQ,EAAE,CAAC;YAC3B,MAAM,IAAI,YAAY,CAAC,wCAAwC,IAAI,CAAC,IAAI,aAAa,EAAE,sBAAsB,EAAE,OAAO,CAAC,EAAE,CAAC,CAAC;QAC7H,CAAC;QACD,MAAM,GAAG,GAAG,IAAI,aAAa,CAAC,IAAI,EAAE,IAAI,EAAE,OAAO,CAAC,CAAC;QACnD,MAAM,GAAG,CAAC,KAAK,EAAE,CAAC;QAClB,OAAO,GAAG,CAAC;IACb,CAAC;IAED;;;OAGG;IACH,KAAK,CAAC,UAAU,CAAC,IAAiB,EAAE,OAA6B,EAAE,IAAI,GAAyB,EAAE;QAChG,MAAM,EAAE,SAAS,EAAE,MAAM,EAAE,GAAG,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC;QACxD,IAAI,OAAO,CAAC,OAAO,KAAK,KAAK,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,CAAC;YAC/C,MAAM,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,SAAS,EAAE,SAAS,CAAC,EAAE,EAAE,SAAS,EAAE,MAAM,EAAE,SAAS,EAAE,OAAO,CAAC,EAAE,EAAE,CAAC,CAAC;YAC/F,MAAM,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,QAAQ,EAAE,IAAI,EAAE,SAAS,EAAE,MAAM,CAAC,EAAE,EAAE,SAAS,EAAE,MAAM,EAAE,SAAS,EAAE,OAAO,CAAC,EAAE,EAAE,CAAC,CAAC;YACtG,OAAO;QACT,CAAC;QACD,iBAAiB,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;QAChC,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,QAAQ,EAAE,SAAS,EAAE,MAAM,CAAC,EAAE,EAAE,SAAS,EAAE,MAAM,EAAE,SAAS,EAAE,OAAO,CAAC,EAAE,EAAE,CAAC,CAAC;QAC/G,IAAI,MAAM,CAAC,IAAI,KAAK,CAAC;YAAE,OAAO,CAAC,iCAAiC;QAChE,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,IAAI,IAAI,CAAC,QAAQ,CAAC,YAAY,CAAC;QACvD,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,OAAO,EAAE,SAAS,EAAE,UAAU,EAAE,SAAS,EAAE,KAAK,CAAC,EAAE,EAAE,SAAS,EAAE,MAAM,EAAE,CAAC,CAAC;QAC9G,IAAI,OAAO,CAAC,IAAI,KAAK,CAAC;YAAE,OAAO;QAC/B,MAAM,CAAC,GAAG,MAAM,IAAI,CAAC,GAAG,CAAC,GAAG,CAC1B;YACE,KAAK,EAAE,MAAM;YACb,WAAW,EAAE,MAAM;YACnB,QAAQ,EAAE,IAAI,CAAC,QAAQ,CAAC,IAAI;YAC5B,YAAY,EAAE,KAAK;YACnB,gBAAgB,EAAE,mBAAmB;YACrC,SAAS,EAAE,sBAAsB,MAAM,WAAW,cAAc,EAAE;YAClE,cAAc,EAAE,IAAI;YACpB,KAAK;YACL,IAAI,EAAE,oDAAoD;YAC1D,IAAI,EAAE,GAAG,UAAU,IAAI,IAAI,CAAC,OAAO,EAAE;SACtC,EACD,EAAE,SAAS,EAAE,OAAO,EAAE,SAAS,EAAE,OAAO,CAAC,EAAE,EAAE,CAC9C,CAAC;QACF,IAAI,CAAC,CAAC,IAAI,KAAK,CAAC,EAAE,CAAC;YACjB,MAAM,IAAI,YAAY,CAAC,+CAA+C,CAAC,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,EAAE,EAAE,yBAAyB,EAAE,OAAO,CAAC,EAAE,CAAC,CAAC;QAChJ,CAAC;IACH,CAAC;IAED,8EAA8E;IAC9E,KAAK,CAAC,cAAc;QAClB,IAAI,CAAC;YACH,MAAM,CAAC,GAAG,MAAM,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,SAAS,EAAE,UAAU,EAAE,qBAAqB,CAAC,EAAE,EAAE,SAAS,EAAE,MAAM,EAAE,CAAC,CAAC;YACpG,IAAI,CAAC,CAAC,IAAI,KAAK,CAAC,IAAI,CAAC,CAAC,MAAM,CAAC,IAAI,EAAE;gBAAE,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,CAAC,CAAC,MAAM,CAAC,IAAI,EAAE,EAAE,CAAC;YACnF,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,CAAC,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,sBAAsB,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC;QACjG,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC;QACvF,CAAC;IACH,CAAC;IAED,uFAAuF;IACvF,KAAK,CAAC,WAAW,CAAC,SAAiB;QACjC,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,cAAc,EAAE,CAAC;QAC3C,IAAI,CAAC,MAAM,CAAC,EAAE,EAAE,CAAC;YACf,MAAM,IAAI,YAAY,CAAC,iDAAiD,MAAM,CAAC,MAAM,EAAE,EAAE,yBAAyB,EAAE,SAAS,CAAC,CAAC;QACjI,CAAC;IACH,CAAC;IAED;;;OAGG;IACH,WAAW,CAAC,KAAa,EAAE,SAAkB;QAC3C,IAAI,OAAO,GAAG,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;QACrC,IAAI,CAAC,OAAO,EAAE,CAAC;YACb,OAAO,GAAG,IAAI,CAAC,YAAY,CAAC,KAAK,EAAE,SAAS,CAAC,CAAC,KAAK,CAAC,CAAC,KAAc,EAAE,EAAE;gBACrE,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,2BAA2B;gBACtD,MAAM,KAAK,CAAC;YACd,CAAC,CAAC,CAAC;YACH,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,KAAK,EAAE,OAAO,CAAC,CAAC;QAClC,CAAC;QACD,OAAO,OAAO,CAAC;IACjB,CAAC;IAED,kGAAkG;IAClG,QAAQ,CAAC,SAAiB;QACxB,MAAM,IAAI,GAAG,SAAS,CAAC,OAAO,CAAC,UAAU,EAAE,EAAE,CAAC,CAAC;QAC/C,MAAM,MAAM,GAAG,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,UAAU,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,OAAO,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,OAAO,IAAI,EAAE,CAAC;QAC/G,MAAM,IAAI,GAAG,GAAG,IAAI,CAAC,QAAQ,CAAC,UAAU,IAAI,MAAM,CAAC,OAAO,CAAC,kBAAkB,EAAE,GAAG,CAAC,EAAE,CAAC;QACtF,OAAO,EAAE,SAAS,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC;IAC3C,CAAC;IAEO,KAAK,CAAC,YAAY,CAAC,KAAa,EAAE,SAAkB;QAC1D,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,OAAO,EAAE,SAAS,EAAE,UAAU,EAAE,SAAS,EAAE,KAAK,CAAC,EAAE,EAAE,SAAS,EAAE,MAAM,EAAE,SAAS,EAAE,CAAC,CAAC;QACzH,IAAI,OAAO,CAAC,IAAI,KAAK,CAAC;YAAE,OAAO;QAE/B,IAAI,KAAK,KAAK,iBAAiB,IAAI,IAAI,CAAC,QAAQ,CAAC,iBAAiB,EAAE,CAAC;YACnE,MAAM,CAAC,GAAG,MAAM,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,GAAG,CAAC,EAAE;gBAC3D,KAAK,EAAE,sBAAsB,EAAE,SAAS,EAAE,sBAAsB,EAAE,SAAS;aAC5E,CAAC,CAAC;YACH,IAAI,CAAC,CAAC,IAAI,KAAK,CAAC,EAAE,CAAC;gBACjB,MAAM,IAAI,YAAY,CAAC,YAAY,KAAK,YAAY,CAAC,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,CAAC,GAAG,CAAC,EAAE,EAAE,yBAAyB,EAAE,SAAS,CAAC,CAAC;YAC3H,CAAC;YACD,OAAO;QACT,CAAC;QACD,IAAI,IAAI,CAAC,QAAQ,CAAC,UAAU,EAAE,CAAC;YAC7B,MAAM,CAAC,GAAG,MAAM,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,KAAK,CAAC,EAAE,EAAE,SAAS,EAAE,qBAAqB,EAAE,SAAS,EAAE,CAAC,CAAC;YAC/F,IAAI,CAAC,CAAC,IAAI,KAAK,CAAC,EAAE,CAAC;gBACjB,MAAM,IAAI,YAAY,CAAC,WAAW,KAAK,YAAY,CAAC,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,CAAC,GAAG,CAAC,EAAE,EAAE,yBAAyB,EAAE,SAAS,CAAC,CAAC;YAC1H,CAAC;YACD,OAAO;QACT,CAAC;QACD,MAAM,IAAI,YAAY,CAAC,UAAU,KAAK,4BAA4B,EAAE,yBAAyB,EAAE,SAAS,CAAC,CAAC;IAC5G,CAAC;CACF"}

package/dist/components/sandbox-hub/docker/docker-sandbox.d.ts

@@ -0,0 +1,51 @@
+import type { SandboxCapability, SandboxLimits, SandboxTraits, SandboxView, OpOptions, Sandbox } from "../types/sandbox.js";
+import type { CreateSandboxContext, SandboxSpec } from "../types/provider.js";
+import type { DockerSandboxProvider } from "./docker-sandbox-provider.js";
+export declare class DockerSandbox implements Sandbox {
+    private readonly provider;
+    readonly spec: SandboxSpec;
+    private readonly context;
+    readonly id: string;
+    readonly traits: SandboxTraits;
+    readonly image: string;
+    readonly containerName: string;
+    readonly volumeName: string;
+    private readonly resources;
+    private readonly fingerprint;
+    private disposed;
+    private recovering?;
+    /** Agent folders already created in this container run. */
+    private agentDirs;
+    constructor(provider: DockerSandboxProvider, spec: SandboxSpec, context: CreateSandboxContext);
+    get limits(): SandboxLimits;
+    get capabilities(): ReadonlySet<SandboxCapability>;
+    private get cli();
+    private get user();
+    /** Docker up → image present → container running + set up. */
+    start(): Promise<void>;
+    forAgent(agentId: string): Promise<SandboxView>;
+    health(): Promise<"ready" | "starting" | "unavailable">;
+    removeAgentData(agentId: string): Promise<void>;
+    /** Stops and removes the container. The volume (the files) stays unless `removeData`. */
+    dispose(opts?: {
+        removeData?: boolean;
+    }): Promise<void>;
+    /** @internal */
+    assertUsable(): void;
+    /** @internal Run one helper file operation; restarts the container once if it went down. */
+    helper<T>(op: string, payload: Record<string, unknown>, opts?: OpOptions): Promise<T>;
+    /** @internal Start the helper in exec mode (the caller drives stdin/stdout). */
+    spawnExec(): import("node:child_process").ChildProcessWithoutNullStreams;
+    /** @internal Bring a stopped/removed container back (files are on the volume). */
+    recover(): Promise<void>;
+    private inspect;
+    private ensureContainer;
+    private runArgs;
+    /**
+     * Install the helper (root-owned, so the sandbox user cannot replace it), give the
+     * sandbox user /workspace and a HOME, then create the layout folders as that user.
+     */
+    private setup;
+    private docker;
+}
+//# sourceMappingURL=docker-sandbox.d.ts.map

package/dist/components/sandbox-hub/docker/docker-sandbox.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"docker-sandbox.d.ts","sourceRoot":"","sources":["../../../../src/components/sandbox-hub/docker/docker-sandbox.ts"],"names":[],"mappings":"AAYA,OAAO,KAAK,EACV,iBAAiB,EACjB,aAAa,EACb,aAAa,EAIb,WAAW,EAKX,SAAS,EAMT,OAAO,EACR,MAAM,qBAAqB,CAAC;AAC7B,OAAO,KAAK,EAAE,oBAAoB,EAAE,WAAW,EAAkB,MAAM,sBAAsB,CAAC;AAG9F,OAAO,KAAK,EAAE,qBAAqB,EAAE,MAAM,8BAA8B,CAAC;AAiC1E,qBAAa,aAAc,YAAW,OAAO;IAczC,OAAO,CAAC,QAAQ,CAAC,QAAQ;IACzB,QAAQ,CAAC,IAAI,EAAE,WAAW;IAC1B,OAAO,CAAC,QAAQ,CAAC,OAAO;IAf1B,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAC;IACpB,QAAQ,CAAC,MAAM,EAAE,aAAa,CAAC;IAC/B,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,aAAa,EAAE,MAAM,CAAC;IAC/B,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAC5B,OAAO,CAAC,QAAQ,CAAC,SAAS,CAAiB;IAC3C,OAAO,CAAC,QAAQ,CAAC,WAAW,CAAS;IACrC,OAAO,CAAC,QAAQ,CAAS;IACzB,OAAO,CAAC,UAAU,CAAC,CAAgB;IACnC,2DAA2D;IAC3D,OAAO,CAAC,SAAS,CAAqB;IAEtC,YACmB,QAAQ,EAAE,qBAAqB,EACvC,IAAI,EAAE,WAAW,EACT,OAAO,EAAE,oBAAoB,EAyB/C;IAED,IAAI,MAAM,IAAI,aAAa,CAE1B;IAED,IAAI,YAAY,IAAI,WAAW,CAAC,iBAAiB,CAAC,CAEjD;IAED,OAAO,KAAK,GAAG,GAEd;IAED,OAAO,KAAK,IAAI,GAEf;IAID,8DAA8D;IACxD,KAAK,IAAI,OAAO,CAAC,IAAI,CAAC,CAI3B;IAEK,QAAQ,CAAC,OAAO,EAAE,MAAM,GAAG,OAAO,CAAC,WAAW,CAAC,CAQpD;IAEK,MAAM,IAAI,OAAO,CAAC,OAAO,GAAG,UAAU,GAAG,aAAa,CAAC,CAK5D;IAEK,eAAe,CAAC,OAAO,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAKpD;IAED,yFAAyF;IACnF,OAAO,CAAC,IAAI,CAAC,EAAE;QAAE,UAAU,CAAC,EAAE,OAAO,CAAA;KAAE,GAAG,OAAO,CAAC,IAAI,CAAC,CAM5D;IAID,gBAAgB;IAChB,YAAY,IAAI,IAAI,CAInB;IAED,4FAA4F;IACtF,MAAM,CAAC,CAAC,EAAE,EAAE,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAAE,IAAI,CAAC,EAAE,SAAS,GAAG,OAAO,CAAC,CAAC,CAAC,CAiB1F;IAED,gFAAgF;IAChF,SAAS,gEAER;IAED,kFAAkF;IAClF,OAAO,IAAI,OAAO,CAAC,IAAI,CAAC,CAMvB;YAIa,OAAO;YAiBP,eAAe;IAY7B,OAAO,CAAC,OAAO;IA+Bf;;;OAGG;YACW,KAAK;YAgCL,MAAM;CAMrB"}