daycare-cli 2026.2.26 → 2026.2.28

package/dist/sandbox/docker/dockerRunInSandbox.spec.js

@@ -0,0 +1,127 @@
+import { promises as fs } from "node:fs";
+import os from "node:os";
+import path from "node:path";
+import { describe, expect, it, vi } from "vitest";
+import { sandboxPathContainerToHost } from "../sandboxPathContainerToHost.js";
+import { dockerContainersShared } from "./dockerContainersShared.js";
+import { dockerRunInSandbox } from "./dockerRunInSandbox.js";
+describe("dockerRunInSandbox", () => {
+    it("rewrites sandbox config paths and runs srt in container", async () => {
+        const workspace = await fs.mkdtemp(path.join(os.tmpdir(), "daycare-docker-run-"));
+        const homeDir = path.join(workspace, "home");
+        await fs.mkdir(path.join(homeDir, "desktop", "project"), { recursive: true });
+        const userId = "u123";
+        const dockerExecSpy = vi.spyOn(dockerContainersShared, "exec");
+        let capturedRuntimeConfig = null;
+        let capturedSettingsHostPath = null;
+        let capturedEnv;
+        let capturedCwd;
+        dockerExecSpy
+            .mockResolvedValueOnce({
+            stdout: "/app/node_modules/@anthropic-ai/sandbox-runtime/dist/cli.js\n",
+            stderr: "",
+            exitCode: 0
+        })
+            .mockImplementationOnce(async (_dockerConfig, args) => {
+            // Command is wrapped as: ["bash", "-lc", "node <cli> --settings <path> -c <cmd>"]
+            const bashCmd = args.command[2] ?? "";
+            const settingsMatch = bashCmd.match(/--settings\s+(\S+)/);
+            const settingsContainerPath = settingsMatch?.[1];
+            if (!settingsContainerPath) {
+                throw new Error("Expected --settings path in bash command string.");
+            }
+            capturedSettingsHostPath = sandboxPathContainerToHost(homeDir, userId, settingsContainerPath);
+            const rawConfig = await fs.readFile(capturedSettingsHostPath, "utf8");
+            capturedRuntimeConfig = JSON.parse(rawConfig);
+            capturedEnv = args.env;
+            capturedCwd = args.cwd;
+            return {
+                stdout: "done",
+                stderr: "",
+                exitCode: 0
+            };
+        });
+        const result = await dockerRunInSandbox("echo ok", {
+            filesystem: {
+                allowWrite: [homeDir, path.join(homeDir, "desktop")],
+                denyRead: [path.join(homeDir, ".ssh")],
+                denyWrite: [path.join(homeDir, ".aws")]
+            },
+            network: {
+                allowedDomains: ["example.com"],
+                deniedDomains: []
+            }
+        }, {
+            cwd: path.join(homeDir, "desktop", "project"),
+            home: homeDir,
+            docker: {
+                image: "daycare-sandbox",
+                tag: "latest",
+                userId
+            }
+        });
+        expect(result).toEqual({
+            stdout: "done",
+            stderr: ""
+        });
+        expect(capturedRuntimeConfig).toEqual({
+            filesystem: {
+                allowWrite: ["/home", "/home/desktop"],
+                denyRead: ["/home/.ssh"],
+                denyWrite: ["/home/.aws"]
+            },
+            network: {
+                allowedDomains: ["example.com"],
+                deniedDomains: []
+            }
+        });
+        expect(capturedEnv?.HOME).toBe("/home");
+        expect(capturedEnv?.TMPDIR).toBe("/home/.tmp");
+        expect(capturedCwd).toBe("/home/desktop/project");
+        await expect(fs.access(capturedSettingsHostPath ?? "")).rejects.toThrow();
+        dockerExecSpy.mockRestore();
+        await fs.rm(workspace, { recursive: true, force: true });
+    });
+    it("throws exec-like error when container command fails", async () => {
+        const workspace = await fs.mkdtemp(path.join(os.tmpdir(), "daycare-docker-run-fail-"));
+        const homeDir = path.join(workspace, "home");
+        await fs.mkdir(homeDir, { recursive: true });
+        const dockerExecSpy = vi.spyOn(dockerContainersShared, "exec");
+        dockerExecSpy
+            .mockResolvedValueOnce({
+            stdout: "/app/node_modules/@anthropic-ai/sandbox-runtime/dist/cli.js\n",
+            stderr: "",
+            exitCode: 0
+        })
+            .mockResolvedValueOnce({
+            stdout: "partial",
+            stderr: "failed",
+            exitCode: 17
+        });
+        await expect(dockerRunInSandbox("bad", {
+            filesystem: {
+                allowWrite: [homeDir],
+                denyRead: [],
+                denyWrite: []
+            },
+            network: {
+                allowedDomains: ["example.com"],
+                deniedDomains: []
+            }
+        }, {
+            home: homeDir,
+            docker: {
+                image: "daycare-sandbox",
+                tag: "latest",
+                userId: "u123"
+            }
+        })).rejects.toMatchObject({
+            code: 17,
+            stdout: "partial",
+            stderr: "failed"
+        });
+        dockerExecSpy.mockRestore();
+        await fs.rm(workspace, { recursive: true, force: true });
+    });
+});
+//# sourceMappingURL=dockerRunInSandbox.spec.js.map

package/dist/sandbox/docker/dockerRunInSandbox.spec.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"dockerRunInSandbox.spec.js","sourceRoot":"","sources":["../../../sources/sandbox/docker/dockerRunInSandbox.spec.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,IAAI,EAAE,EAAE,MAAM,SAAS,CAAC;AACzC,OAAO,EAAE,MAAM,SAAS,CAAC;AACzB,OAAO,IAAI,MAAM,WAAW,CAAC;AAE7B,OAAO,EAAE,QAAQ,EAAE,MAAM,EAAE,EAAE,EAAE,EAAE,EAAE,MAAM,QAAQ,CAAC;AAElD,OAAO,EAAE,0BAA0B,EAAE,MAAM,kCAAkC,CAAC;AAC9E,OAAO,EAAE,sBAAsB,EAAE,MAAM,6BAA6B,CAAC;AACrE,OAAO,EAAE,kBAAkB,EAAE,MAAM,yBAAyB,CAAC;AAE7D,QAAQ,CAAC,oBAAoB,EAAE,GAAG,EAAE;IAChC,EAAE,CAAC,yDAAyD,EAAE,KAAK,IAAI,EAAE;QACrE,MAAM,SAAS,GAAG,MAAM,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,MAAM,EAAE,EAAE,qBAAqB,CAAC,CAAC,CAAC;QAClF,MAAM,OAAO,GAAG,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,MAAM,CAAC,CAAC;QAC7C,MAAM,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,SAAS,EAAE,SAAS,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;QAE9E,MAAM,MAAM,GAAG,MAAM,CAAC;QACtB,MAAM,aAAa,GAAG,EAAE,CAAC,KAAK,CAAC,sBAAsB,EAAE,MAAM,CAAC,CAAC;QAC/D,IAAI,qBAAqB,GAAmC,IAAI,CAAC;QACjE,IAAI,wBAAwB,GAAkB,IAAI,CAAC;QACnD,IAAI,WAA0C,CAAC;QAC/C,IAAI,WAA+B,CAAC;QAEpC,aAAa;aACR,qBAAqB,CAAC;YACnB,MAAM,EAAE,+DAA+D;YACvE,MAAM,EAAE,EAAE;YACV,QAAQ,EAAE,CAAC;SACd,CAAC;aACD,sBAAsB,CAAC,KAAK,EAAE,aAAa,EAAE,IAAI,EAAE,EAAE;YAClD,kFAAkF;YAClF,MAAM,OAAO,GAAG,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;YACtC,MAAM,aAAa,GAAG,OAAO,CAAC,KAAK,CAAC,oBAAoB,CAAC,CAAC;YAC1D,MAAM,qBAAqB,GAAG,aAAa,EAAE,CAAC,CAAC,CAAC,CAAC;YACjD,IAAI,CAAC,qBAAqB,EAAE,CAAC;gBACzB,MAAM,IAAI,KAAK,CAAC,kDAAkD,CAAC,CAAC;YACxE,CAAC;YACD,wBAAwB,GAAG,0BAA0B,CAAC,OAAO,EAAE,MAAM,EAAE,qBAAqB,CAAC,CAAC;YAC9F,MAAM,SAAS,GAAG,MAAM,EAAE,CAAC,QAAQ,CAAC,wBAAwB,EAAE,MAAM,CAAC,CAAC;YACtE,qBAAqB,GAAG,IAAI,CAAC,KAAK,CAAC,SAAS,CAA4B,CAAC;YACzE,WAAW,GAAG,IAAI,CAAC,GAAG,CAAC;YACvB,WAAW,GAAG,IAAI,CAAC,GAAG,CAAC;YAEvB,OAAO;gBACH,MAAM,EAAE,MAAM;gBACd,MAAM,EAAE,EAAE;gBACV,QAAQ,EAAE,CAAC;aACd,CAAC;QACN,CAAC,CAAC,CAAC;QAEP,MAAM,MAAM,GAAG,MAAM,kBAAkB,CACnC,SAAS,EACT;YACI,UAAU,EAAE;gBACR,UAAU,EAAE,CAAC,OAAO,EAAE,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,SAAS,CAAC,CAAC;gBACpD,QAAQ,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;gBACtC,SAAS,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;aAC1C;YACD,OAAO,EAAE;gBACL,cAAc,EAAE,CAAC,aAAa,CAAC;gBAC/B,aAAa,EAAE,EAAE;aACpB;SACJ,EACD;YACI,GAAG,EAAE,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,SAAS,EAAE,SAAS,CAAC;YAC7C,IAAI,EAAE,OAAO;YACb,MAAM,EAAE;gBACJ,KAAK,EAAE,iBAAiB;gBACxB,GAAG,EAAE,QAAQ;gBACb,MAAM;aACT;SACJ,CACJ,CAAC;QAEF,MAAM,CAAC,MAAM,CAAC,CAAC,OAAO,CAAC;YACnB,MAAM,EAAE,MAAM;YACd,MAAM,EAAE,EAAE;SACb,CAAC,CAAC;QACH,MAAM,CAAC,qBAAqB,CAAC,CAAC,OAAO,CAAC;YAClC,UAAU,EAAE;gBACR,UAAU,EAAE,CAAC,OAAO,EAAE,eAAe,CAAC;gBACtC,QAAQ,EAAE,CAAC,YAAY,CAAC;gBACxB,SAAS,EAAE,CAAC,YAAY,CAAC;aAC5B;YACD,OAAO,EAAE;gBACL,cAAc,EAAE,CAAC,aAAa,CAAC;gBAC/B,aAAa,EAAE,EAAE;aACpB;SACJ,CAAC,CAAC;QACH,MAAM,CAAC,WAAW,EAAE,IAAI,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;QACxC,MAAM,CAAC,WAAW,EAAE,MAAM,CAAC,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC;QAC/C,MAAM,CAAC,WAAW,CAAC,CAAC,IAAI,CAAC,uBAAuB,CAAC,CAAC;QAClD,MAAM,MAAM,CAAC,EAAE,CAAC,MAAM,CAAC,wBAAwB,IAAI,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,OAAO,EAAE,CAAC;QAC1E,aAAa,CAAC,WAAW,EAAE,CAAC;QAC5B,MAAM,EAAE,CAAC,EAAE,CAAC,SAAS,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;IAC7D,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,qDAAqD,EAAE,KAAK,IAAI,EAAE;QACjE,MAAM,SAAS,GAAG,MAAM,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,MAAM,EAAE,EAAE,0BAA0B,CAAC,CAAC,CAAC;QACvF,MAAM,OAAO,GAAG,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,MAAM,CAAC,CAAC;QAC7C,MAAM,EAAE,CAAC,KAAK,CAAC,OAAO,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;QAE7C,MAAM,aAAa,GAAG,EAAE,CAAC,KAAK,CAAC,sBAAsB,EAAE,MAAM,CAAC,CAAC;QAC/D,aAAa;aACR,qBAAqB,CAAC;YACnB,MAAM,EAAE,+DAA+D;YACvE,MAAM,EAAE,EAAE;YACV,QAAQ,EAAE,CAAC;SACd,CAAC;aACD,qBAAqB,CAAC;YACnB,MAAM,EAAE,SAAS;YACjB,MAAM,EAAE,QAAQ;YAChB,QAAQ,EAAE,EAAE;SACf,CAAC,CAAC;QAEP,MAAM,MAAM,CACR,kBAAkB,CACd,KAAK,EACL;YACI,UAAU,EAAE;gBACR,UAAU,EAAE,CAAC,OAAO,CAAC;gBACrB,QAAQ,EAAE,EAAE;gBACZ,SAAS,EAAE,EAAE;aAChB;YACD,OAAO,EAAE;gBACL,cAAc,EAAE,CAAC,aAAa,CAAC;gBAC/B,aAAa,EAAE,EAAE;aACpB;SACJ,EACD;YACI,IAAI,EAAE,OAAO;YACb,MAAM,EAAE;gBACJ,KAAK,EAAE,iBAAiB;gBACxB,GAAG,EAAE,QAAQ;gBACb,MAAM,EAAE,MAAM;aACjB;SACJ,CACJ,CACJ,CAAC,OAAO,CAAC,aAAa,CAAC;YACpB,IAAI,EAAE,EAAE;YACR,MAAM,EAAE,SAAS;YACjB,MAAM,EAAE,QAAQ;SACnB,CAAC,CAAC;QAEH,aAAa,CAAC,WAAW,EAAE,CAAC;QAC5B,MAAM,EAAE,CAAC,EAAE,CAAC,SAAS,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;IAC7D,CAAC,CAAC,CAAC;AACP,CAAC,CAAC,CAAC"}

package/dist/sandbox/docker/dockerTypes.d.ts

@@ -0,0 +1,23 @@
+import type Docker from "dockerode";
+export type DockerContainerConfig = {
+    image: string;
+    tag: string;
+    socketPath?: string;
+    runtime?: string;
+    userId: string;
+    hostHomeDir: string;
+};
+export type DockerContainerExecArgs = {
+    command: string[];
+    cwd?: string;
+    env?: NodeJS.ProcessEnv;
+    timeoutMs?: number;
+    maxBufferBytes?: number;
+};
+export type DockerContainerExecResult = {
+    stdout: string;
+    stderr: string;
+    exitCode: number | null;
+};
+export type DockerContainer = Docker.Container;
+//# sourceMappingURL=dockerTypes.d.ts.map

package/dist/sandbox/docker/dockerTypes.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"dockerTypes.d.ts","sourceRoot":"","sources":["../../../sources/sandbox/docker/dockerTypes.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,MAAM,MAAM,WAAW,CAAC;AAEpC,MAAM,MAAM,qBAAqB,GAAG;IAChC,KAAK,EAAE,MAAM,CAAC;IACd,GAAG,EAAE,MAAM,CAAC;IACZ,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,MAAM,EAAE,MAAM,CAAC;IACf,WAAW,EAAE,MAAM,CAAC;CACvB,CAAC;AAEF,MAAM,MAAM,uBAAuB,GAAG;IAClC,OAAO,EAAE,MAAM,EAAE,CAAC;IAClB,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,GAAG,CAAC,EAAE,MAAM,CAAC,UAAU,CAAC;IACxB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,cAAc,CAAC,EAAE,MAAM,CAAC;CAC3B,CAAC;AAEF,MAAM,MAAM,yBAAyB,GAAG;IACpC,MAAM,EAAE,MAAM,CAAC;IACf,MAAM,EAAE,MAAM,CAAC;IACf,QAAQ,EAAE,MAAM,GAAG,IAAI,CAAC;CAC3B,CAAC;AAEF,MAAM,MAAM,eAAe,GAAG,MAAM,CAAC,SAAS,CAAC"}

package/dist/sandbox/docker/dockerTypes.js

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=dockerTypes.js.map

package/dist/sandbox/docker/dockerTypes.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"dockerTypes.js","sourceRoot":"","sources":["../../../sources/sandbox/docker/dockerTypes.ts"],"names":[],"mappings":""}

package/dist/sandbox/sandbox.d.ts

@@ -0,0 +1,28 @@
+import type { SessionPermissions } from "@/types";
+import type { SandboxConfig, SandboxDockerConfig, SandboxExecArgs, SandboxExecResult, SandboxReadArgs, SandboxReadResult, SandboxWriteArgs, SandboxWriteResult } from "./sandboxTypes.js";
+export declare class Sandbox {
+    readonly homeDir: string;
+    readonly workingDir: string;
+    readonly permissions: SessionPermissions;
+    readonly docker: SandboxDockerConfig | undefined;
+    constructor(config: SandboxConfig);
+    /**
+     * Read from the host filesystem with sandbox read checks.
+     * Expects: args.path is absolute or relative to workingDir.
+     */
+    read(args: SandboxReadArgs): Promise<SandboxReadResult>;
+    /**
+     * Write UTF-8 content to host filesystem with sandbox write checks.
+     * Expects: args.path is an absolute path.
+     */
+    write(args: SandboxWriteArgs): Promise<SandboxWriteResult>;
+    /**
+     * Execute a shell command inside sandbox-runtime.
+     * Expects: args.command is non-empty and network allowlist is explicit.
+     */
+    exec(args: SandboxExecArgs): Promise<SandboxExecResult>;
+    private permissionsEffectiveResolve;
+    private readInputPathResolve;
+    private pathContainerToHost;
+}
+//# sourceMappingURL=sandbox.d.ts.map

package/dist/sandbox/sandbox.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"sandbox.d.ts","sourceRoot":"","sources":["../../sources/sandbox/sandbox.ts"],"names":[],"mappings":"AAIA,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,SAAS,CAAC;AAelD,OAAO,KAAK,EACR,aAAa,EACb,mBAAmB,EACnB,eAAe,EACf,iBAAiB,EACjB,eAAe,EACf,iBAAiB,EACjB,gBAAgB,EAChB,kBAAkB,EACrB,MAAM,mBAAmB,CAAC;AAkB3B,qBAAa,OAAO;IAChB,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,WAAW,EAAE,kBAAkB,CAAC;IACzC,QAAQ,CAAC,MAAM,EAAE,mBAAmB,GAAG,SAAS,CAAC;gBAErC,MAAM,EAAE,aAAa;IAOjC;;;OAGG;IACG,IAAI,CAAC,IAAI,EAAE,eAAe,GAAG,OAAO,CAAC,iBAAiB,CAAC;IA8F7D;;;OAGG;IACG,KAAK,CAAC,IAAI,EAAE,gBAAgB,GAAG,OAAO,CAAC,kBAAkB,CAAC;IAiChE;;;OAGG;IACG,IAAI,CAAC,IAAI,EAAE,eAAe,GAAG,OAAO,CAAC,iBAAiB,CAAC;IA+E7D,OAAO,CAAC,2BAA2B;YAarB,oBAAoB;IA0BlC,OAAO,CAAC,mBAAmB;CAM9B"}