sandboxbox 2.2.1 → 2.2.3

package/CLAUDE.md

@@ -53,19 +53,34 @@ if (process.platform === 'win32') {
 }
 ```
 
-### Auto Podman Machine Start
+### Auto Podman Machine Start (Rootless Mode)
 ```javascript
+// Initialize with explicit rootless mode for portability
 if (process.platform === 'win32' && isBundled) {
   try {
     execSync(`"${podmanPath}" info`, { stdio: 'pipe' });
   } catch (infoError) {
     if (infoError.message.includes('Cannot connect to Podman')) {
+      // Auto-initialize with rootless mode if machine doesn't exist
+      execSync(`"${podmanPath}" machine init --rootful=false`, { stdio: 'inherit' });
       execSync(`"${podmanPath}" machine start`, { stdio: 'inherit' });
     }
   }
 }
 ```
 
+### Rootless vs Rootful Mode
+- **Rootless (default)**: Runs without administrator privileges, portable across systems
+- **Configuration**: All machines initialized with `--rootful=false` flag
+- **Benefits**: No elevated permissions required, better security, true portability
+
+### Portable Podman Architecture
+- **Direct Podman Execution**: Uses bundled Podman binary without complex machine management
+- **Rootless Operation**: Always runs in rootless mode for portability
+- **Self-Contained**: All dependencies included in the package
+- **Simple Configuration**: No complex connection or machine setup required
+- **Auto-Download**: Downloads platform-specific binaries automatically
+
 ## Isolation Architecture
 
 ### Workflow

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "sandboxbox",
-  "version": "2.2.1",
+  "version": "2.2.3",
   "description": "Portable container runner with Podman - Claude Code & Playwright support. Works on Windows, macOS, and Linux.",
   "type": "module",
   "main": "cli.js",

package/utils/podman.js

@@ -37,43 +37,7 @@ export function checkPodman() {
     };
 
     const version = execSync(`"${podmanPath}" --version`, execOptions).trim();
-
-    // Auto-manage Podman machine on Windows
-    if (process.platform === 'win32' && isBundled) {
-      try {
-        execSync(`"${podmanPath}" info`, { ...execOptions, stdio: 'pipe' });
-      } catch (infoError) {
-        if (infoError.message.includes('Cannot connect to Podman')) {
-          console.log('\n🔧 Podman machine not running, auto-initializing...');
-
-          try {
-            execSync(`"${podmanPath}" machine start`, {
-              stdio: 'inherit',
-              cwd: __dirname,
-              shell: process.platform === 'win32'
-            });
-            console.log('\n✅ Podman machine started successfully in rootless mode!');
-          } catch (startError) {
-            if (startError.message.includes('not found') || startError.message.includes('does not exist')) {
-              execSync(`"${podmanPath}" machine init`, {
-                stdio: 'inherit',
-                cwd: __dirname,
-                shell: process.platform === 'win32'
-              });
-              execSync(`"${podmanPath}" machine start`, {
-                stdio: 'inherit',
-                cwd: __dirname,
-                shell: process.platform === 'win32'
-              });
-              console.log('\n✅ Podman machine initialized and started successfully!');
-            } else {
-              throw startError;
-            }
-          }
-        }
-      }
-    }
-
+    console.log(color('green', `✅ ${version}${isBundled ? ' (bundled)' : ''}`));
     return podmanPath;
   } catch (error) {
     console.log('❌ Podman not found');
@@ -97,23 +61,34 @@ export function checkPodman() {
       const newVersion = execSync(`"${newPodmanPath}" --version`, execOptions).trim();
       console.log(`\n✅ ${newVersion} (auto-downloaded)`);
 
-      if (process.platform === 'win32') {
+      // Auto-setup minimal backend for Windows portable operation
+      if (process.platform === 'win32' && isBundled) {
         try {
           execSync(`"${newPodmanPath}" info`, { ...execOptions, stdio: 'pipe' });
         } catch (infoError) {
           if (infoError.message.includes('Cannot connect to Podman')) {
-            console.log('\n🔧 Initializing Podman machine...');
+            console.log('\n🔧 Setting up portable Podman backend...');
             try {
-              execSync(`"${newPodmanPath}" machine init`, { stdio: 'inherit', shell: true });
-              execSync(`"${newPodmanPath}" machine start`, { stdio: 'inherit', shell: true });
-              console.log('\n✅ Podman machine initialized and started!');
+              execSync(`"${newPodmanPath}" machine init --rootful=false`, {
+                stdio: 'inherit',
+                shell: true,
+                cwd: __dirname
+              });
+              execSync(`"${newPodmanPath}" machine start`, {
+                stdio: 'inherit',
+                shell: true,
+                cwd: __dirname
+              });
+              console.log('\n✅ Portable Podman backend ready!');
             } catch (machineError) {
-              console.log('\n⚠️  Podman machine initialization will be done on first use');
+              console.log('\n⚠️  Podman backend setup needed on first container run');
             }
           }
         }
       }
 
+      console.log('\n✅ Portable Podman ready');
+
       return newPodmanPath;
     } catch (downloadError) {
       console.log(`\n❌ Auto-download failed: ${downloadError.message}`);