mulmoclaude 0.5.1 → 0.5.3

package/Dockerfile.sandbox

@@ -0,0 +1,100 @@
+FROM node:22-slim
+
+# Sandbox tool set (see #162). Grouped into layers by purpose so the
+# rationale is obvious from the diff:
+#
+# 1. Core CLI — read local git history, fetch over HTTP, pipeline JSON,
+#    run Makefile-driven workspaces, handle archives, query SQLite.
+#    `ca-certificates` is needed because `node:22-slim` ships without
+#    a trust store. `ripgrep` backs Claude's grep tool.
+# 2. Data analysis + plotting — Python with pandas/numpy/matplotlib
+#    and `requests` for API fetches. Graphviz for structural diagrams.
+#    ImageMagick for raster ops. Covers the "investment / data / chart"
+#    and "visualize this workflow" use cases in the issue.
+# 3. Document + media conversion — pandoc bridges Markdown ↔ PDF/DOCX/
+#    HTML/EPUB for report output. ffmpeg covers audio/video transcode
+#    and probing. poppler-utils extracts text / images from PDFs.
+# 4. Small extras — `tree` for directory listing, `bc` for arbitrary-
+#    precision arithmetic, `less` for pagers.
+#
+# Deferred on purpose:
+#
+# - `@mermaid-js/mermaid-cli` — pulls in headless Chromium (~300MB).
+#   Revisit as a separate layer if diagram generation becomes common.
+# - `texlive-*` — ~150MB+ for marginal PDF quality gains over pandoc's
+#   default LaTeX-free path; add when a user actually needs math/
+#   journal-style typesetting.
+# - `gh` CLI — now installed (Layer 1b). Auth via SANDBOX_MOUNT_CONFIGS=gh
+#   which mounts ~/.config/gh:ro into the container (#259).
+#
+# Runtime `pip install` is intentionally NOT wired up. Everything the
+# agent might need for data work is preinstalled at build time so
+# supply-chain risk stays out of the sandbox.
+
+# Layer 1: core CLI + SSH client (needed for SSH agent forwarding #259)
+RUN apt-get update && apt-get install -y --no-install-recommends \
+      git \
+      curl \
+      jq \
+      make \
+      ca-certificates \
+      openssh-client \
+      sqlite3 \
+      zip \
+      unzip \
+      ripgrep \
+    && rm -rf /var/lib/apt/lists/*
+
+# Layer 1b: GitHub CLI (#164). Installed from the official apt repo.
+# Auth is provided at runtime via SANDBOX_MOUNT_CONFIGS=gh which
+# bind-mounts ~/.config/gh:ro (#259). On macOS where the token lives
+# in the system keyring, the server falls back to GH_TOKEN env var.
+RUN curl -fsSL https://cli.github.com/packages/githubcli-archive-keyring.gpg \
+      -o /usr/share/keyrings/githubcli-archive-keyring.gpg \
+    && echo "deb [arch=$(dpkg --print-architecture) signed-by=/usr/share/keyrings/githubcli-archive-keyring.gpg] https://cli.github.com/packages stable main" \
+      > /etc/apt/sources.list.d/github-cli.list \
+    && apt-get update && apt-get install -y --no-install-recommends gh \
+    && rm -rf /var/lib/apt/lists/*
+
+# Layer 2: data analysis + plotting
+RUN apt-get update && apt-get install -y --no-install-recommends \
+      python3 \
+      python3-pip \
+      graphviz \
+      imagemagick \
+    && rm -rf /var/lib/apt/lists/* \
+ && pip3 install --no-cache-dir --break-system-packages \
+      pandas \
+      numpy \
+      matplotlib \
+      requests
+
+# Layer 3: document + media conversion
+# LibreOffice core + Impress + Writer enable server-side PPTX→PDF and
+# DOCX→PDF conversion for the attachment pipeline (#386). Only the
+# headless renderer is used (`--headless --convert-to pdf`).
+RUN apt-get update && apt-get install -y --no-install-recommends \
+      pandoc \
+      ffmpeg \
+      poppler-utils \
+      libreoffice-core \
+      libreoffice-impress \
+      libreoffice-writer \
+    && rm -rf /var/lib/apt/lists/*
+
+# Layer 4: small extras
+RUN apt-get update && apt-get install -y --no-install-recommends \
+      tree \
+      bc \
+      less \
+    && rm -rf /var/lib/apt/lists/*
+
+RUN npm install -g @anthropic-ai/claude-code tsx
+
+COPY sandbox-entrypoint.sh /sandbox-entrypoint.sh
+RUN chmod +x /sandbox-entrypoint.sh
+
+# No `USER node` — the entrypoint starts as root to fix /etc/passwd
+# and socket permissions, then drops to HOST_UID:HOST_GID via setpriv.
+WORKDIR /home/node/mulmoclaude
+ENTRYPOINT ["/sandbox-entrypoint.sh"]

package/bin/mulmoclaude.js

@@ -104,7 +104,7 @@ Options:
 }
 
 if (args.includes("--version")) {
-  console.log("mulmoclaude 0.5.1");
+  console.log("mulmoclaude 0.5.3");
   process.exit(0);
 }
 

package/bin/prepare-dist.js

@@ -31,7 +31,7 @@
 // ── Publish ───────────────────────────────────────────────────
 //   cd packages/mulmoclaude && npm publish --access public
 
-import { cpSync, existsSync, rmSync } from "fs";
+import { copyFileSync, cpSync, existsSync, rmSync } from "fs";
 import { join, dirname } from "path";
 import { fileURLToPath } from "url";
 
@@ -42,11 +42,16 @@ const rootDir = join(pkgDir, "..", "..");
 // ── Clean ───────────────────────────────────────────────────
 
 // Include `dist` so leftovers from the older pre-built-JS layout are
-// wiped on re-run.
+// wiped on re-run. Stale sandbox files are removed too so a renamed
+// or deleted source file doesn't ride along into the tarball.
 for (const dir of ["dist", "client", "server", "src"]) {
   const target = join(pkgDir, dir);
   if (existsSync(target)) rmSync(target, { recursive: true });
 }
+for (const file of ["Dockerfile.sandbox", "sandbox-entrypoint.sh"]) {
+  const target = join(pkgDir, file);
+  if (existsSync(target)) rmSync(target);
+}
 
 // ── Client dist (Vite build output) ─────────────────────────
 // Copied to `client/` (not `dist/client/`) so the server's
@@ -89,5 +94,16 @@ cpSync(join(rootDir, "src"), join(pkgDir, "src"), {
 });
 console.log("✓ shared src/");
 
+// ── Sandbox build context ───────────────────────────────────
+// `server/system/docker.ts` builds the sandbox image via `docker build
+// -f Dockerfile.sandbox .` with cwd = pkgDir. The Dockerfile in turn
+// `COPY`s `sandbox-entrypoint.sh`, so both files must sit at pkgDir
+// or sandbox mode silently falls back to unrestricted execution.
+
+for (const file of ["Dockerfile.sandbox", "sandbox-entrypoint.sh"]) {
+  copyFileSync(join(rootDir, file), join(pkgDir, file));
+}
+console.log("✓ sandbox build context");
+
 console.log("\nReady to publish. Run:");
 console.log("  cd packages/mulmoclaude && npm publish --access public");