sandboxbox 1.2.2 → 2.0.0

package/full-build.log

@@ -1,234 +0,0 @@
-📦 SandboxBox - Zero-Privilege Container Runner
-═════════════════════════════════════════════════════
-
-🏗️  Building container...
-✅ Using bundled bubblewrap
-✅ Bubblewrap found: bubblewrap 0.9.0
-⚠️  User namespaces not available
-   Try: sudo sysctl kernel.unprivileged_userns_clone=1
-   Or: echo 1 | sudo tee /proc/sys/kernel/unprivileged_userns_clone
-✅ Using bundled bubblewrap
-🐳 Building container with bubblewrap isolation...
-
-📦 FROM node:20
-   ⚠️  Unknown base image type
-
-🏗️  ARG TZ
-
-🔧 ENV TZ="$TZ"
-
-🏗️  ARG CLAUDE_CODE_VERSION=latest
-
-⚙️  RUN apt-get update && apt-get install -y --no-install-recommends  less  gi...
-⚙️  RUN mkdir -p /usr/local/share/npm-global &&  chown -R node:node /usr/local...
-🏗️  ARG USERNAME=node
-
-⚙️  RUN SNIPPET="export PROMPT_COMMAND='history -a' && export HISTFILE=/comman...
-🔧 ENV DEVCONTAINER=true
-
-⚙️  RUN mkdir -p /workspace /home/node/.claude &&  chown -R node:node /workspa...
-📁 WORKDIR workspace
-
-🏗️  ARG GIT_DELTA_VERSION=0.18.2
-
-⚙️  RUN ARCH=$(dpkg --print-architecture) &&  wget "https://github.com/dandavi...
-👤 USER node
-
-🔧 ENV NPM_CONFIG_PREFIX=/usr/local/share/npm-global
-
-🔧 ENV PATH=$PATH:/usr/local/share/npm-global/bin
-
-🔧 ENV SHELL=/bin/zsh
-
-🔧 ENV EDITOR=nano
-
-🔧 ENV VISUAL=nano
-
-🏗️  ARG ZSH_IN_DOCKER_VERSION=1.2.0
-
-⚙️  RUN sh -c "$(wget -O- https://github.com/deluan/zsh-in-docker/releases/dow...
-⚙️  RUN npm install -g @anthropic-ai/claude-code@${CLAUDE_CODE_VERSION}
-⚙️  RUN npx --yes playwright install-deps
-⚙️  RUN npm i -g @playwright/mcp
-📋 COPY init-firewall.sh /usr/local/bin/
-   ⚠️  COPY/ADD commands must be run in project directory
-
-👤 USER root
-
-⚙️  RUN chmod +x /usr/local/bin/init-firewall.sh &&  echo "node ALL=(root) NOP...
-👤 USER node
-
-📝 Creating build script...
-
-✅ Build script created: sandboxbox-sandbox/build.sh
-
-🚀 Executing build commands...
-
-⚠️  Note: Commands will run on host system (Docker-free mode)
-
-────────────────────────────────────────────────────────────
-
-
-📍 [1/10] apt-get update && apt-get install -y --no-install-recommends  less  git  procps ...
-   🔐 Running with sudo (requires root privileges)
-Get:1 http://ports.ubuntu.com/ubuntu-ports noble InRelease [256 kB]
-Get:2 http://ports.ubuntu.com/ubuntu-ports noble-updates InRelease [126 kB]
-Get:3 http://ports.ubuntu.com/ubuntu-ports noble-security InRelease [126 kB]
-Get:4 http://ports.ubuntu.com/ubuntu-ports noble/main Sources [1,713 kB]
-Get:5 http://ports.ubuntu.com/ubuntu-ports noble/restricted Sources [21.8 kB]
-Get:6 http://ports.ubuntu.com/ubuntu-ports noble/universe Sources [24.3 MB]
-Get:7 http://ports.ubuntu.com/ubuntu-ports noble/multiverse Sources [355 kB]
-Get:8 http://ports.ubuntu.com/ubuntu-ports noble/main arm64 Packages [1,776 kB]
-Get:9 http://ports.ubuntu.com/ubuntu-ports noble/multiverse arm64 Packages [274 kB]
-Get:10 http://ports.ubuntu.com/ubuntu-ports noble/restricted arm64 Packages [113 kB]
-Get:11 http://ports.ubuntu.com/ubuntu-ports noble/universe arm64 Packages [19.0 MB]
-Get:12 http://ports.ubuntu.com/ubuntu-ports noble-updates/multiverse Sources [28.1 kB]
-Get:13 http://ports.ubuntu.com/ubuntu-ports noble-updates/universe Sources [633 kB]
-Get:14 http://ports.ubuntu.com/ubuntu-ports noble-updates/restricted Sources [70.8 kB]
-Get:15 http://ports.ubuntu.com/ubuntu-ports noble-updates/main Sources [583 kB]
-Get:16 http://ports.ubuntu.com/ubuntu-ports noble-updates/multiverse arm64 Packages [36.9 kB]
-Get:17 http://ports.ubuntu.com/ubuntu-ports noble-updates/universe arm64 Packages [1,849 kB]
-Get:18 http://ports.ubuntu.com/ubuntu-ports noble-updates/main arm64 Packages [1,969 kB]
-Get:19 http://ports.ubuntu.com/ubuntu-ports noble-updates/restricted arm64 Packages [3,560 kB]
-Get:20 http://ports.ubuntu.com/ubuntu-ports noble-security/main Sources [253 kB]
-Get:21 http://ports.ubuntu.com/ubuntu-ports noble-security/multiverse Sources [21.3 kB]
-Get:22 http://ports.ubuntu.com/ubuntu-ports noble-security/restricted Sources [64.7 kB]
-Get:23 http://ports.ubuntu.com/ubuntu-ports noble-security/universe Sources [408 kB]
-Get:24 http://ports.ubuntu.com/ubuntu-ports noble-security/multiverse arm64 Packages [35.8 kB]
-Get:25 http://ports.ubuntu.com/ubuntu-ports noble-security/restricted arm64 Packages [3,435 kB]
-Get:26 http://ports.ubuntu.com/ubuntu-ports noble-security/universe arm64 Packages [1,122 kB]
-Get:27 http://ports.ubuntu.com/ubuntu-ports noble-security/main arm64 Packages [1,624 kB]
-Fetched 63.8 MB in 11s (5,899 kB/s)
-Reading package lists...
-Reading package lists...
-Building dependency tree...
-Reading state information...
-less is already the newest version (590-2ubuntu2.1).
-git is already the newest version (1:2.43.0-1ubuntu7.3).
-procps is already the newest version (2:4.0.4-4ubuntu3.2).
-sudo is already the newest version (1.9.15p5-3ubuntu5.24.04.1).
-fzf is already the newest version (0.44.1-1ubuntu0.3).
-zsh is already the newest version (5.9-6ubuntu2).
-man-db is already the newest version (2.12.0-4build2).
-unzip is already the newest version (6.0-28ubuntu4.1).
-gnupg2 is already the newest version (2.4.4-2ubuntu17.3).
-gh is already the newest version (2.45.0-1ubuntu0.3).
-iptables is already the newest version (1.8.10-3ubuntu2).
-ipset is already the newest version (7.19-1ubuntu2).
-iproute2 is already the newest version (6.1.0-1ubuntu6.2).
-dnsutils is already the newest version (1:9.18.39-0ubuntu0.24.04.1).
-aggregate is already the newest version (1.6-7build1).
-jq is already the newest version (1.7.1-3ubuntu0.24.04.1).
-nano is already the newest version (7.2-2ubuntu0.1).
-vim is already the newest version (2:9.1.0016-1ubuntu7.9).
-0 upgraded, 0 newly installed, 0 to remove and 12 not upgraded.
-✅ Command 1 completed successfully
-
-📍 [2/10] mkdir -p /usr/local/share/npm-global &&  chown -R node:node /usr/local/share
-   🔐 Running with sudo (requires root privileges)
-✅ Command 2 completed successfully
-
-📍 [3/10] SNIPPET="export PROMPT_COMMAND='history -a' && export HISTFILE=/commandhistory/....
-   🔐 Running with sudo (requires root privileges)
-✅ Command 3 completed successfully
-
-📍 [4/10] mkdir -p /workspace /home/node/.claude &&  chown -R node:node /workspace /home/n...
-   🔐 Running with sudo (requires root privileges)
-✅ Command 4 completed successfully
-
-📍 [5/10] ARCH=$(dpkg --print-architecture) &&  wget "https://github.com/dandavison/delta/...
---2025-10-09 18:31:56--  https://github.com/dandavison/delta/releases/download/0.18.2/git-delta_0.18.2_arm64.deb
-Resolving github.com (github.com)... 20.87.245.0
-Connecting to github.com (github.com)|20.87.245.0|:443... connected.
-HTTP request sent, awaiting response... 302 Found
-Location: https://release-assets.githubusercontent.com/github-production-release-asset/193526915/efd1d245-1d1e-4f19-ac99-0518bf31266d?sp=r&sv=2018-11-09&sr=b&spr=https&se=2025-10-09T19%3A19%3A51Z&rscd=attachment%3B+filename%3Dgit-delta_0.18.2_arm64.deb&rsct=application%2Foctet-stream&skoid=96c2d410-5711-43a1-aedd-ab1947aa7ab0&sktid=398a6654-997b-47e9-b12b-9515b896b4de&skt=2025-10-09T18%3A19%3A38Z&ske=2025-10-09T19%3A19%3A51Z&sks=b&skv=2018-11-09&sig=wSSEOovq7e2nsvla8Wy3AD4txJ%2FUyt12xkkPIvASOLM%3D&jwt=eyJ0eXAiOiJKV1QiLCJhbGciOiJIUzI1NiJ9.eyJpc3MiOiJnaXRodWIuY29tIiwiYXVkIjoicmVsZWFzZS1hc3NldHMuZ2l0aHVidXNlcmNvbnRlbnQuY29tIiwia2V5Ijoia2V5MSIsImV4cCI6MTc2MDAzNDkyNCwibmJmIjoxNzYwMDM0NjI0LCJwYXRoIjoicmVsZWFzZWFzc2V0cHJvZHVjdGlvbi5ibG9iLmNvcmUud2luZG93cy5uZXQifQ.a4i5Y0160BTAu_nkE8pT86CFHfQiK4LwrvsirK3sVkE&response-content-disposition=attachment%3B%20filename%3Dgit-delta_0.18.2_arm64.deb&response-content-type=application%2Foctet-stream [following]
---2025-10-09 18:31:56--  https://release-assets.githubusercontent.com/github-production-release-asset/193526915/efd1d245-1d1e-4f19-ac99-0518bf31266d?sp=r&sv=2018-11-09&sr=b&spr=https&se=2025-10-09T19%3A19%3A51Z&rscd=attachment%3B+filename%3Dgit-delta_0.18.2_arm64.deb&rsct=application%2Foctet-stream&skoid=96c2d410-5711-43a1-aedd-ab1947aa7ab0&sktid=398a6654-997b-47e9-b12b-9515b896b4de&skt=2025-10-09T18%3A19%3A38Z&ske=2025-10-09T19%3A19%3A51Z&sks=b&skv=2018-11-09&sig=wSSEOovq7e2nsvla8Wy3AD4txJ%2FUyt12xkkPIvASOLM%3D&jwt=eyJ0eXAiOiJKV1QiLCJhbGciOiJIUzI1NiJ9.eyJpc3MiOiJnaXRodWIuY29tIiwiYXVkIjoicmVsZWFzZS1hc3NldHMuZ2l0aHVidXNlcmNvbnRlbnQuY29tIiwia2V5Ijoia2V5MSIsImV4cCI6MTc2MDAzNDkyNCwibmJmIjoxNzYwMDM0NjI0LCJwYXRoIjoicmVsZWFzZWFzc2V0cHJvZHVjdGlvbi5ibG9iLmNvcmUud2luZG93cy5uZXQifQ.a4i5Y0160BTAu_nkE8pT86CFHfQiK4LwrvsirK3sVkE&response-content-disposition=attachment%3B%20filename%3Dgit-delta_0.18.2_arm64.deb&response-content-type=application%2Foctet-stream
-Resolving release-assets.githubusercontent.com (release-assets.githubusercontent.com)... 185.199.109.133, 185.199.110.133, 185.199.108.133, ...
-Connecting to release-assets.githubusercontent.com (release-assets.githubusercontent.com)|185.199.109.133|:443... connected.
-HTTP request sent, awaiting response... 200 OK
-Length: 2292336 (2.2M) [application/octet-stream]
-Saving to: ‘git-delta_0.18.2_arm64.deb’
-
-     0K .......... .......... .......... .......... ..........  2% 13.0M 0s
-    50K .......... .......... .......... .......... ..........  4% 30.5M 0s
-   100K .......... .......... .......... .......... ..........  6% 46.5M 0s
-   150K .......... .......... .......... .......... ..........  8% 63.5M 0s
-   200K .......... .......... .......... .......... .......... 11%  195M 0s
-   250K .......... .......... .......... .......... .......... 13% 26.0M 0s
-   300K .......... .......... .......... .......... .......... 15%  134M 0s
-   350K .......... .......... .......... .......... .......... 17% 39.6M 0s
-   400K .......... .......... .......... .......... .......... 20% 59.6M 0s
-   450K .......... .......... .......... .......... .......... 22%  116M 0s
-   500K .......... .......... .......... .......... .......... 24% 77.7M 0s
-   550K .......... .......... .......... .......... .......... 26%  369M 0s
-   600K .......... .......... .......... .......... .......... 29%  396M 0s
-   650K .......... .......... .......... .......... .......... 31%  188M 0s
-   700K .......... .......... .......... .......... .......... 33% 79.0M 0s
-   750K .......... .......... .......... .......... .......... 35%  334M 0s
-   800K .......... .......... .......... .......... .......... 37%  106M 0s
-   850K .......... .......... .......... .......... .......... 40%  463M 0s
-   900K .......... .......... .......... .......... .......... 42%  540M 0s
-   950K .......... .......... .......... .......... .......... 44% 62.6M 0s
-  1000K .......... .......... .......... .......... .......... 46%  519M 0s
-  1050K .......... .......... .......... .......... .......... 49%  534M 0s
-  1100K .......... .......... .......... .......... .......... 51%  543M 0s
-  1150K .......... .......... .......... .......... .......... 53%  513M 0s
-  1200K .......... .......... .......... .......... .......... 55%  424M 0s
-  1250K .......... .......... .......... .......... .......... 58%  539M 0s
-  1300K .......... .......... .......... .......... .......... 60%  559M 0s
-  1350K .......... .......... .......... .......... .......... 62%  153M 0s
-  1400K .......... .......... .......... .......... .......... 64%  358M 0s
-  1450K .......... .......... .......... .......... .......... 67%  539M 0s
-  1500K .......... .......... .......... .......... .......... 69%  550M 0s
-  1550K .......... .......... .......... .......... .......... 71%  404M 0s
-  1600K .......... .......... .......... .......... .......... 73%  541M 0s
-  1650K .......... .......... .......... .......... .......... 75%  105M 0s
-  1700K .......... .......... .......... .......... .......... 78%  467M 0s
-  1750K .......... .......... .......... .......... .......... 80%  511M 0s
-  1800K .......... .......... .......... .......... .......... 82%  523M 0s
-  1850K .......... .......... .......... .......... .......... 84%  565M 0s
-  1900K .......... .......... .......... .......... .......... 87%  496M 0s
-  1950K .......... .......... .......... .......... .......... 89%  415M 0s
-  2000K .......... .......... .......... .......... .......... 91%  536M 0s
-  2050K .......... .......... .......... .......... .......... 93%  403M 0s
-  2100K .......... .......... .......... .......... .......... 96%  454M 0s
-  2150K .......... .......... .......... .......... .......... 98%  403M 0s
-  2200K .......... .......... .......... ........             100%  641M=0.02s
-
-2025-10-09 18:31:56 (118 MB/s) - ‘git-delta_0.18.2_arm64.deb’ saved [2292336/2292336]
-
-(Reading database ... 23523 files and directories currently installed.)
-Preparing to unpack git-delta_0.18.2_arm64.deb ...
-Unpacking git-delta (0.18.2) over (0.18.2) ...
-Setting up git-delta (0.18.2) ...
-✅ Command 5 completed successfully
-
-📍 [6/10] sh -c "$(wget -O- https://github.com/deluan/zsh-in-docker/releases/download/v${Z...
---2025-10-09 18:31:56--  https://github.com/deluan/zsh-in-docker/releases/download/v1.2.0/zsh-in-docker.sh
-Resolving github.com (github.com)... 20.87.245.0
-Connecting to github.com (github.com)|20.87.245.0|:443... connected.
-HTTP request sent, awaiting response... 302 Found
-Location: https://release-assets.githubusercontent.com/github-production-release-asset/207162804/8afe1b92-7364-41b9-9e24-1c704ccf220d?sp=r&sv=2018-11-09&sr=b&spr=https&se=2025-10-09T19%3A18%3A38Z&rscd=attachment%3B+filename%3Dzsh-in-docker.sh&rsct=application%2Foctet-stream&skoid=96c2d410-5711-43a1-aedd-ab1947aa7ab0&sktid=398a6654-997b-47e9-b12b-9515b896b4de&skt=2025-10-09T18%3A17%3A39Z&ske=2025-10-09T19%3A18%3A38Z&sks=b&skv=2018-11-09&sig=uymHSHDf26tIi9rheQuEUARoScEXKEC9DIfao1H5X8o%3D&jwt=eyJ0eXAiOiJKV1QiLCJhbGciOiJIUzI1NiJ9.eyJpc3MiOiJnaXRodWIuY29tIiwiYXVkIjoicmVsZWFzZS1hc3NldHMuZ2l0aHVidXNlcmNvbnRlbnQuY29tIiwia2V5Ijoia2V5MSIsImV4cCI6MTc2MDAzNDkyNSwibmJmIjoxNzYwMDM0NjI1LCJwYXRoIjoicmVsZWFzZWFzc2V0cHJvZHVjdGlvbi5ibG9iLmNvcmUud2luZG93cy5uZXQifQ.lHr8IW9Y9ctEHUmvuB_Bo0RqZ44N1UwiGZlsQkHWMc8&response-content-disposition=attachment%3B%20filename%3Dzsh-in-docker.sh&response-content-type=application%2Foctet-stream [following]
---2025-10-09 18:31:56--  https://release-assets.githubusercontent.com/github-production-release-asset/207162804/8afe1b92-7364-41b9-9e24-1c704ccf220d?sp=r&sv=2018-11-09&sr=b&spr=https&se=2025-10-09T19%3A18%3A38Z&rscd=attachment%3B+filename%3Dzsh-in-docker.sh&rsct=application%2Foctet-stream&skoid=96c2d410-5711-43a1-aedd-ab1947aa7ab0&sktid=398a6654-997b-47e9-b12b-9515b896b4de&skt=2025-10-09T18%3A17%3A39Z&ske=2025-10-09T19%3A18%3A38Z&sks=b&skv=2018-11-09&sig=uymHSHDf26tIi9rheQuEUARoScEXKEC9DIfao1H5X8o%3D&jwt=eyJ0eXAiOiJKV1QiLCJhbGciOiJIUzI1NiJ9.eyJpc3MiOiJnaXRodWIuY29tIiwiYXVkIjoicmVsZWFzZS1hc3NldHMuZ2l0aHVidXNlcmNvbnRlbnQuY29tIiwia2V5Ijoia2V5MSIsImV4cCI6MTc2MDAzNDkyNSwibmJmIjoxNzYwMDM0NjI1LCJwYXRoIjoicmVsZWFzZWFzc2V0cHJvZHVjdGlvbi5ibG9iLmNvcmUud2luZG93cy5uZXQifQ.lHr8IW9Y9ctEHUmvuB_Bo0RqZ44N1UwiGZlsQkHWMc8&response-content-disposition=attachment%3B%20filename%3Dzsh-in-docker.sh&response-content-type=application%2Foctet-stream
-Resolving release-assets.githubusercontent.com (release-assets.githubusercontent.com)... 185.199.108.133, 185.199.110.133, 185.199.111.133, ...
-Connecting to release-assets.githubusercontent.com (release-assets.githubusercontent.com)|185.199.108.133|:443... connected.
-HTTP request sent, awaiting response... 200 OK
-Length: 5426 (5.3K) [application/octet-stream]
-Saving to: ‘STDOUT’
-
-     0K .....                                                 100% 91.6M=0s
-
-2025-10-09 18:31:56 (91.6 MB/s) - written to stdout [5426/5426]
-
-
-Installing Oh-My-Zsh with:
-  THEME   = default
-  PLUGINS = git fzf 
-
-fatal: destination path '/config/.oh-my-zsh/custom/themes/powerlevel10k' already exists and is not an empty directory.
-❌ Command 6 failed: Command failed: sh -c "$(wget -O- https://github.com/deluan/zsh-in-docker/releases/download/v${ZSH_IN_DOCKER_VERSION}/zsh-in-docker.sh)" --  -p git  -p fzf  -a "source /usr/share/doc/fzf/examples/key-bindings.zsh"  -a "source /usr/share/doc/fzf/examples/completion.zsh"  -a "export PROMPT_COMMAND='history -a' && export HISTFILE=/commandhistory/.bash_history"  -x
-
-⚠️  Build failed at command 6/10
-📝 Partial build script available at: sandboxbox-sandbox/build.sh
-❌ Error: Build failed: Command failed: sh -c "$(wget -O- https://github.com/deluan/zsh-in-docker/releases/download/v${ZSH_IN_DOCKER_VERSION}/zsh-in-docker.sh)" --  -p git  -p fzf  -a "source /usr/share/doc/fzf/examples/key-bindings.zsh"  -a "source /usr/share/doc/fzf/examples/completion.zsh"  -a "export PROMPT_COMMAND='history -a' && export HISTFILE=/commandhistory/.bash_history"  -x
-❌ Command failed: Command failed: node "./container.js" build ./Dockerfile

package/init-firewall.sh

@@ -1,36 +0,0 @@
-#!/bin/bash
-# Firewall initialization script for container networking
-# This script sets up basic firewall rules for container isolation
-
-set -e
-
-echo "Initializing firewall rules..."
-
-# Check if iptables is available
-if ! command -v iptables &> /dev/null; then
-    echo "Error: iptables not found"
-    exit 1
-fi
-
-# Allow established connections
-iptables -A INPUT -m conntrack --ctstate ESTABLISHED,RELATED -j ACCEPT || true
-
-# Allow loopback
-iptables -A INPUT -i lo -j ACCEPT || true
-iptables -A OUTPUT -o lo -j ACCEPT || true
-
-# Allow DNS
-iptables -A OUTPUT -p udp --dport 53 -j ACCEPT || true
-iptables -A OUTPUT -p tcp --dport 53 -j ACCEPT || true
-
-# Allow HTTP/HTTPS outbound (for package downloads, etc)
-iptables -A OUTPUT -p tcp --dport 80 -j ACCEPT || true
-iptables -A OUTPUT -p tcp --dport 443 -j ACCEPT || true
-
-# Allow SSH outbound
-iptables -A OUTPUT -p tcp --dport 22 -j ACCEPT || true
-
-# Allow git protocol
-iptables -A OUTPUT -p tcp --dport 9418 -j ACCEPT || true
-
-echo "Firewall rules initialized successfully"

package/lib/bubblewrap.js

@@ -1,203 +0,0 @@
-/**
- * Portable bubblewrap binary manager
- * Handles bundled, system, and downloaded bubblewrap binaries
- */
-
-import fs from 'fs';
-import path from 'path';
-import https from 'https';
-import { execSync } from 'child_process';
-import { fileURLToPath } from 'url';
-import { dirname } from 'path';
-
-const __filename = fileURLToPath(import.meta.url);
-const __dirname = dirname(__filename);
-
-export class BubblewrapManager {
-  constructor() {
-    this.bwrapPath = null;
-    this.alpineRoot = path.join(
-      process.env.HOME || process.env.USERPROFILE,
-      '.cache',
-      'sandboxbox',
-      'alpine-root'
-    );
-  }
-
-  /**
-   * Find bubblewrap binary in this order:
-   * 1. Bundled binary (downloaded during npm install)
-   * 2. System binary
-   * 3. Throw error with helpful message
-   */
-  findBubblewrap() {
-    if (this.bwrapPath) {
-      return this.bwrapPath;
-    }
-
-    // Try bundled binary first
-    const bundledPath = path.join(__dirname, '..', 'bin', 'bwrap');
-    if (fs.existsSync(bundledPath)) {
-      try {
-        // Test if it works
-        execSync(`"${bundledPath}" --version`, { stdio: 'ignore' });
-        this.bwrapPath = bundledPath;
-        console.log('✅ Using bundled bubblewrap');
-        return this.bwrapPath;
-      } catch (e) {
-        console.log('⚠️  Bundled bubblewrap not working, falling back to system...');
-      }
-    }
-
-    // Try system binary
-    try {
-      const systemBwrap = execSync('which bwrap', { encoding: 'utf8' }).trim();
-      if (systemBwrap && fs.existsSync(systemBwrap)) {
-        execSync(`"${systemBwrap}" --version`, { stdio: 'ignore' });
-        this.bwrapPath = systemBwrap;
-        console.log('✅ Using system bubblewrap');
-        return this.bwrapPath;
-      }
-    } catch (e) {
-      // System bwrap not available
-    }
-
-    // No bubblewrap found
-    throw new Error(`
-❌ Bubblewrap not found!
-
-💡 Easy fixes:
-1. Reinstall SandboxBox: npm uninstall sandboxbox && npm install sandboxbox
-2. Install system-wide: sudo apt-get install bubblewrap
-3. Install manually: https://github.com/containers/bubblewrap
-
-📦 SandboxBox works on Linux only and requires bubblewrap for container isolation.
-`);
-  }
-
-  /**
-   * Check if bubblewrap is available
-   */
-  isAvailable() {
-    try {
-      this.findBubblewrap();
-      return true;
-    } catch (e) {
-      return false;
-    }
-  }
-
-  /**
-   * Get bubblewrap version
-   */
-  getVersion() {
-    try {
-      const bwrapPath = this.findBubblewrap();
-      const version = execSync(`"${bwrapPath}" --version`, { encoding: 'utf8' });
-      return version.trim();
-    } catch (e) {
-      return 'Unknown';
-    }
-  }
-
-  /**
-   * Check if user namespaces are available
-   */
-  checkUserNamespaces() {
-    try {
-      // Try to create a user namespace
-      execSync('unshare -U true', { stdio: 'ignore' });
-      return true;
-    } catch (e) {
-      return false;
-    }
-  }
-
-  /**
-   * Setup Alpine Linux rootfs if needed
-   */
-  async ensureAlpineRoot() {
-    if (fs.existsSync(path.join(this.alpineRoot, 'bin', 'sh'))) {
-      return; // Already set up
-    }
-
-    console.log('🏔️  Setting up Alpine Linux environment...');
-
-    fs.mkdirSync(this.alpineRoot, { recursive: true });
-
-    // Download Alpine minirootfs
-    const alpineVersion = '3.20.2';
-    const arch = process.arch === 'x64' ? 'x86_64' : process.arch;
-    const tarball = `alpine-minirootfs-${alpineVersion}-${arch}.tar.gz`;
-    const tarballPath = path.join(this.alpineRoot, tarball);
-
-    console.log('📥 Downloading Alpine Linux...');
-    const url = `https://dl-cdn.alpinelinux.org/alpine/v3.20/releases/${arch}/${tarball}`;
-
-    await new Promise((resolve, reject) => {
-      const file = fs.createWriteStream(tarballPath);
-
-      https.get(url, (response) => {
-        if (response.statusCode !== 200) {
-          reject(new Error(`HTTP ${response.statusCode}`));
-          return;
-        }
-
-        response.pipe(file);
-
-        file.on('finish', () => {
-          file.close();
-          resolve();
-        });
-      }).on('error', reject);
-    });
-
-    // Extract Alpine
-    console.log('📦 Extracting Alpine rootfs...');
-    execSync(`tar -xzf "${tarballPath}" -C "${this.alpineRoot}"`, { stdio: 'inherit' });
-    fs.unlinkSync(tarballPath);
-
-    // Install basic packages
-    console.log('🔧 Installing Node.js and Chromium...');
-    const bwrapPath = this.findBubblewrap();
-
-    execSync(`
-      "${bwrapPath}" \\
-        --ro-bind "${this.alpineRoot}" / \\
-        --proc /proc \\
-        --dev /dev \\
-        --tmpfs /tmp \\
-        --share-net \\
-        --die-with-parent \\
-        /bin/sh -c "
-          echo 'https://dl-cdn.alpinelinux.org/alpine/v3.20/main' > /etc/apk/repositories
-          echo 'https://dl-cdn.alpinelinux.org/alpine/v3.20/community' >> /etc/apk/repositories
-          apk update
-          apk add --no-cache nodejs npm chromium nss freetype harfbuzz ttf-freefont xvfb mesa-gl libx11 libxrandr libxss
-          echo '✅ Alpine setup complete'
-        "
-    `, { stdio: 'inherit' });
-
-    console.log('✅ Alpine Linux environment ready!');
-  }
-
-  /**
-   * Get Alpine root path
-   */
-  getAlpineRoot() {
-    return this.alpineRoot;
-  }
-
-  /**
-   * Cleanup cached files
-   */
-  cleanup() {
-    if (fs.existsSync(this.alpineRoot)) {
-      fs.rmSync(this.alpineRoot, { recursive: true, force: true });
-      console.log('🧹 Cleaned up Alpine cache');
-    }
-  }
-}
-
-// Export singleton instance
-export const bubblewrap = new BubblewrapManager();