mulmoclaude 0.5.2 → 0.6.0

package/Dockerfile.sandbox

@@ -0,0 +1,100 @@
+FROM node:22-slim
+
+# Sandbox tool set (see #162). Grouped into layers by purpose so the
+# rationale is obvious from the diff:
+#
+# 1. Core CLI — read local git history, fetch over HTTP, pipeline JSON,
+#    run Makefile-driven workspaces, handle archives, query SQLite.
+#    `ca-certificates` is needed because `node:22-slim` ships without
+#    a trust store. `ripgrep` backs Claude's grep tool.
+# 2. Data analysis + plotting — Python with pandas/numpy/matplotlib
+#    and `requests` for API fetches. Graphviz for structural diagrams.
+#    ImageMagick for raster ops. Covers the "investment / data / chart"
+#    and "visualize this workflow" use cases in the issue.
+# 3. Document + media conversion — pandoc bridges Markdown ↔ PDF/DOCX/
+#    HTML/EPUB for report output. ffmpeg covers audio/video transcode
+#    and probing. poppler-utils extracts text / images from PDFs.
+# 4. Small extras — `tree` for directory listing, `bc` for arbitrary-
+#    precision arithmetic, `less` for pagers.
+#
+# Deferred on purpose:
+#
+# - `@mermaid-js/mermaid-cli` — pulls in headless Chromium (~300MB).
+#   Revisit as a separate layer if diagram generation becomes common.
+# - `texlive-*` — ~150MB+ for marginal PDF quality gains over pandoc's
+#   default LaTeX-free path; add when a user actually needs math/
+#   journal-style typesetting.
+# - `gh` CLI — now installed (Layer 1b). Auth via SANDBOX_MOUNT_CONFIGS=gh
+#   which mounts ~/.config/gh:ro into the container (#259).
+#
+# Runtime `pip install` is intentionally NOT wired up. Everything the
+# agent might need for data work is preinstalled at build time so
+# supply-chain risk stays out of the sandbox.
+
+# Layer 1: core CLI + SSH client (needed for SSH agent forwarding #259)
+RUN apt-get update && apt-get install -y --no-install-recommends \
+      git \
+      curl \
+      jq \
+      make \
+      ca-certificates \
+      openssh-client \
+      sqlite3 \
+      zip \
+      unzip \
+      ripgrep \
+    && rm -rf /var/lib/apt/lists/*
+
+# Layer 1b: GitHub CLI (#164). Installed from the official apt repo.
+# Auth is provided at runtime via SANDBOX_MOUNT_CONFIGS=gh which
+# bind-mounts ~/.config/gh:ro (#259). On macOS where the token lives
+# in the system keyring, the server falls back to GH_TOKEN env var.
+RUN curl -fsSL https://cli.github.com/packages/githubcli-archive-keyring.gpg \
+      -o /usr/share/keyrings/githubcli-archive-keyring.gpg \
+    && echo "deb [arch=$(dpkg --print-architecture) signed-by=/usr/share/keyrings/githubcli-archive-keyring.gpg] https://cli.github.com/packages stable main" \
+      > /etc/apt/sources.list.d/github-cli.list \
+    && apt-get update && apt-get install -y --no-install-recommends gh \
+    && rm -rf /var/lib/apt/lists/*
+
+# Layer 2: data analysis + plotting
+RUN apt-get update && apt-get install -y --no-install-recommends \
+      python3 \
+      python3-pip \
+      graphviz \
+      imagemagick \
+    && rm -rf /var/lib/apt/lists/* \
+ && pip3 install --no-cache-dir --break-system-packages \
+      pandas \
+      numpy \
+      matplotlib \
+      requests
+
+# Layer 3: document + media conversion
+# LibreOffice core + Impress + Writer enable server-side PPTX→PDF and
+# DOCX→PDF conversion for the attachment pipeline (#386). Only the
+# headless renderer is used (`--headless --convert-to pdf`).
+RUN apt-get update && apt-get install -y --no-install-recommends \
+      pandoc \
+      ffmpeg \
+      poppler-utils \
+      libreoffice-core \
+      libreoffice-impress \
+      libreoffice-writer \
+    && rm -rf /var/lib/apt/lists/*
+
+# Layer 4: small extras
+RUN apt-get update && apt-get install -y --no-install-recommends \
+      tree \
+      bc \
+      less \
+    && rm -rf /var/lib/apt/lists/*
+
+RUN npm install -g @anthropic-ai/claude-code tsx
+
+COPY sandbox-entrypoint.sh /sandbox-entrypoint.sh
+RUN chmod +x /sandbox-entrypoint.sh
+
+# No `USER node` — the entrypoint starts as root to fix /etc/passwd
+# and socket permissions, then drops to HOST_UID:HOST_GID via setpriv.
+WORKDIR /home/node/mulmoclaude
+ENTRYPOINT ["/sandbox-entrypoint.sh"]

package/README.md

@@ -18,12 +18,25 @@ Your browser opens to `http://localhost:3001`. That's it.
 ## Options
 
 ```
-npx mulmoclaude              # Default (port 3001, opens browser)
-npx mulmoclaude --port 8080  # Custom port
-npx mulmoclaude --no-open    # Don't open browser
-npx mulmoclaude --version    # Show version
+npx mulmoclaude                              # Default (port 3001, opens browser)
+npx mulmoclaude --port 8080                  # Custom port
+npx mulmoclaude --no-open                    # Don't open browser
+npx mulmoclaude --dev-plugin ./my-plugin     # Load a plugin from a local
+                                             # project dir (repeatable;
+                                             # path can be relative or absolute)
+npx mulmoclaude --version                    # Show version
 ```
 
+`--dev-plugin <path>` is the plugin author's dev loop. Pair with
+`yarn dev` (vite watch) in the plugin directory: edits → vite
+rebuilds `dist/` → **the browser auto-reloads** via a debounced
+watcher on the plugin's `dist/`. The plugin's `package.json` name +
+`dist/index.js` must already be in place; the launcher refuses to
+start on missing files or on a name collision with an already-
+installed plugin. Server-side `definePlugin` factory edits still
+require a launcher restart (Node ESM has no cache invalidation API);
+the launcher log explicitly says so when `dist/index.js` changes.
+
 ## How it works
 
 The npm package ships with the pre-built client (Vite) and the server

package/bin/mulmoclaude.js

@@ -9,13 +9,14 @@ import { execSync, spawn } from "child_process";
 import { existsSync } from "fs";
 import { get as httpGet } from "http";
 import { createRequire } from "module";
-import { join, dirname } from "path";
+import { join, dirname, delimiter as PATH_DELIMITER } from "path";
 import { fileURLToPath } from "url";
 
 // Shared with `server/index.ts` — the launcher and the dev server use
 // the same probe + fallback logic. See server/utils/port.mjs for why
 // it's plain JS rather than TypeScript.
 import { isPortFree, findAvailablePort, MAX_PORT_PROBES } from "../server/utils/port.mjs";
+import { parseDevPluginArgs } from "../server/utils/dev-plugin-args.mjs";
 
 const require = createRequire(import.meta.url);
 
@@ -56,7 +57,11 @@ function waitUntilReady(portNum, onReady) {
   const timeoutMs = 15000;
   const intervalMs = 300;
 
-  const attempt = () => {
+  // `function` declarations (not arrow consts) so the mutual
+  // reference between `attempt` and `retry` works without TDZ
+  // ordering problems. Both forms are hoisted to the top of the
+  // enclosing function scope.
+  function attempt() {
     const req = httpGet({ host: "127.0.0.1", port: portNum, path: "/", timeout: 1000 }, (res) => {
       res.resume();
       onReady();
@@ -66,12 +71,12 @@ function waitUntilReady(portNum, onReady) {
       req.destroy();
       retry();
     });
-  };
+  }
 
-  const retry = () => {
+  function retry() {
     if (Date.now() - startedAt > timeoutMs) return;
     setTimeout(attempt, intervalMs);
-  };
+  }
 
   attempt();
 }
@@ -95,21 +100,38 @@ if (args.includes("--help") || args.includes("-h")) {
 Usage: npx mulmoclaude [options]
 
 Options:
-  --port <number>   Server port (default: ${DEFAULT_PORT})
-  --no-open         Don't open browser automatically
-  --version         Show version
-  --help            Show this help
+  --port <number>      Server port (default: ${DEFAULT_PORT})
+  --no-open            Don't open browser automatically
+  --dev-plugin <path>  Load a plugin from a local project dir for development
+                       (repeatable). Path can be absolute or relative to cwd.
+                       The dir must have package.json and dist/index.js
+                       (run \`yarn build\` or \`yarn dev\` in the plugin first).
+  --version            Show version
+  --help               Show this help
 `);
   process.exit(0);
 }
 
 if (args.includes("--version")) {
-  console.log("mulmoclaude 0.5.1");
+  console.log("mulmoclaude 0.6.0");
   process.exit(0);
 }
 
 const { requestedPort, portExplicit } = parsePortArg();
 const noOpen = args.includes("--no-open");
+const devPluginPaths = resolveDevPluginPaths();
+
+function resolveDevPluginPaths() {
+  const result = parseDevPluginArgs(args, process.cwd());
+  if (!result.ok) {
+    error(result.reason);
+    process.exit(1);
+  }
+  for (const { rawInput, absPath } of result.resolved) {
+    log(`[dev-plugin] ${rawInput} → ${absPath}`);
+  }
+  return result.resolved.map((entry) => entry.absPath);
+}
 
 function parsePortArg() {
   const idx = args.indexOf("--port");
@@ -180,6 +202,10 @@ log(`Starting MulmoClaude on port ${port}...`);
 let tsxCli;
 try {
   const tsxPkgJson = require.resolve("tsx/package.json");
+  // Path is the resolved location of tsx's own package.json under
+  // node_modules — not user-influenced, so the dynamic require is
+  // safe. require.resolve already validated the path.
+  // eslint-disable-next-line security/detect-non-literal-require -- resolved package.json path from require.resolve, not user input
   const tsxPkg = require(tsxPkgJson);
   tsxCli = join(dirname(tsxPkgJson), tsxPkg.bin);
 } catch {
@@ -187,13 +213,18 @@ try {
   process.exit(1);
 }
 
+const serverEnv = {
+  ...process.env,
+  NODE_ENV: "production",
+  PORT: String(port),
+};
+if (devPluginPaths.length > 0) {
+  serverEnv.MULMOCLAUDE_DEV_PLUGINS = devPluginPaths.join(PATH_DELIMITER);
+}
+
 const server = spawn(process.execPath, [tsxCli, SERVER_ENTRY], {
   cwd: PKG_DIR,
-  env: {
-    ...process.env,
-    NODE_ENV: "production",
-    PORT: String(port),
-  },
+  env: serverEnv,
   stdio: "inherit",
 });
 

package/bin/prepare-dist.js

@@ -31,7 +31,7 @@
 // ── Publish ───────────────────────────────────────────────────
 //   cd packages/mulmoclaude && npm publish --access public
 
-import { cpSync, existsSync, rmSync } from "fs";
+import { copyFileSync, cpSync, existsSync, rmSync } from "fs";
 import { join, dirname } from "path";
 import { fileURLToPath } from "url";
 
@@ -42,11 +42,16 @@ const rootDir = join(pkgDir, "..", "..");
 // ── Clean ───────────────────────────────────────────────────
 
 // Include `dist` so leftovers from the older pre-built-JS layout are
-// wiped on re-run.
+// wiped on re-run. Stale sandbox files are removed too so a renamed
+// or deleted source file doesn't ride along into the tarball.
 for (const dir of ["dist", "client", "server", "src"]) {
   const target = join(pkgDir, dir);
   if (existsSync(target)) rmSync(target, { recursive: true });
 }
+for (const file of ["Dockerfile.sandbox", "sandbox-entrypoint.sh"]) {
+  const target = join(pkgDir, file);
+  if (existsSync(target)) rmSync(target);
+}
 
 // ── Client dist (Vite build output) ─────────────────────────
 // Copied to `client/` (not `dist/client/`) so the server's
@@ -89,5 +94,16 @@ cpSync(join(rootDir, "src"), join(pkgDir, "src"), {
 });
 console.log("✓ shared src/");
 
+// ── Sandbox build context ───────────────────────────────────
+// `server/system/docker.ts` builds the sandbox image via `docker build
+// -f Dockerfile.sandbox .` with cwd = pkgDir. The Dockerfile in turn
+// `COPY`s `sandbox-entrypoint.sh`, so both files must sit at pkgDir
+// or sandbox mode silently falls back to unrestricted execution.
+
+for (const file of ["Dockerfile.sandbox", "sandbox-entrypoint.sh"]) {
+  copyFileSync(join(rootDir, file), join(pkgDir, file));
+}
+console.log("✓ sandbox build context");
+
 console.log("\nReady to publish. Run:");
 console.log("  cd packages/mulmoclaude && npm publish --access public");

package/client/assets/chunk-CernVdwh.js

@@ -0,0 +1 @@
+var e=Object.create,t=Object.defineProperty,n=Object.getOwnPropertyDescriptor,r=Object.getOwnPropertyNames,i=Object.getPrototypeOf,a=Object.prototype.hasOwnProperty,o=(e,t)=>()=>(e&&(t=e(e=0)),t),s=(e,t)=>()=>(t||(e((t={exports:{}}).exports,t),e=null),t.exports),c=(e,n)=>{let r={};for(var i in e)t(r,i,{get:e[i],enumerable:!0});return n||t(r,Symbol.toStringTag,{value:`Module`}),r},l=(e,i,o,s)=>{if(i&&typeof i==`object`||typeof i==`function`)for(var c=r(i),l=0,u=c.length,d;l<u;l++)d=c[l],!a.call(e,d)&&d!==o&&t(e,d,{get:(e=>i[e]).bind(null,d),enumerable:!(s=n(i,d))||s.enumerable});return e},u=(n,r,a)=>(a=n==null?{}:e(i(n)),l(r||!n||!n.__esModule?t(a,`default`,{value:n,enumerable:!0}):a,n)),d=e=>a.call(e,`module.exports`)?e[`module.exports`]:l(t({},`__esModule`,{value:!0}),e),f=(e=>typeof require<`u`?require:typeof Proxy<`u`?new Proxy(e,{get:(e,t)=>(typeof require<`u`?require:e)[t]}):e)(function(e){if(typeof require<`u`)return require.apply(this,arguments);throw Error('Calling `require` for "'+e+"\" in an environment that doesn't expose the `require` function. See https://rolldown.rs/in-depth/bundling-cjs#require-external-modules for more details.")});export{d as a,f as i,o as n,u as o,c as r,s as t};

package/client/assets/chunk-D8eiyYIV-C1eAZMzz.js

@@ -0,0 +1 @@
+import"./chunk-CernVdwh.js";var e=Object.create,t=Object.defineProperty,n=Object.getOwnPropertyDescriptor,r=Object.getOwnPropertyNames,i=Object.getPrototypeOf,a=Object.prototype.hasOwnProperty,o=(e,t)=>()=>(t||(e((t={exports:{}}).exports,t),e=null),t.exports),s=(e,i,o,s)=>{if(i&&typeof i==`object`||typeof i==`function`)for(var c=r(i),l=0,u=c.length,d;l<u;l++)d=c[l],!a.call(e,d)&&d!==o&&t(e,d,{get:(e=>i[e]).bind(null,d),enumerable:!(s=n(i,d))||s.enumerable});return e},c=(n,r,a)=>(a=n==null?{}:e(i(n)),s(r||!n||!n.__esModule?t(a,`default`,{value:n,enumerable:!0}):a,n));export{o as n,c as t};