harmonize with coredesktop

2026-10-28 14:35:07 -06:00
parent 866720c3c1
commit 9b9f1d5fdd
35 changed files with 1445 additions and 8 deletions
@@ -0,0 +1,84 @@
+#!/bin/bash
+#
+# Purpose : Set up sandboxed AI agents (see sandbox/agent): install or update
+#           Anthropic's sandbox runtime (srt) and Hermes Agent, and turn on
+#           Claude Code's built-in sandbox. Run by install.sh and on every
+#           update (updates.d/72-sandbox.sh).
+
+MINISERVER="$HOME/.local/share/MiniServer"
+STATUS=0
+
+# npm's global prefix is under /usr, so install to ~/.local; srt lands in ~/.local/bin
+echo "Installing the sandbox runtime (srt)..."
+npm install --global --prefix "$HOME/.local" --no-fund --no-audit @anthropic-ai/sandbox-runtime || STATUS=1
+
+# --non-interactive skips Hermes' setup questions and its background gateway
+# service; `configure hermes` chooses a model provider afterwards
+if [ ! -x "$HOME/.local/bin/hermes" ]; then
+  echo "Installing Hermes Agent..."
+  curl -fsSL https://hermes-agent.nousresearch.com/install.sh | bash -s -- --non-interactive || STATUS=1
+fi
+
+# Claude Code runs every command it starts in its own sandbox, also built on
+# bubblewrap and socat; it can't run inside srt because bubblewrap can't be
+# nested. Anything already in the sandbox section of your settings wins over
+# these defaults.
+CLAUDE_SETTINGS="$HOME/.claude/settings.json"
+if [ -f "$CLAUDE_SETTINGS" ]; then
+  domains="$(jq '.network.allowedDomains' "$MINISERVER/sandbox/config/base.json")"
+  tmp="$(mktemp "$CLAUDE_SETTINGS.XXXXXX")"
+  if jq --argjson domains "$domains" \
+      '.sandbox = ({enabled: true, network: {allowedDomains: $domains}} * (.sandbox // {}))' \
+      "$CLAUDE_SETTINGS" > "$tmp"; then
+    if cmp -s "$tmp" "$CLAUDE_SETTINGS"; then
+      rm -f "$tmp"
+    else
+      echo "Turning on Claude Code's sandbox..."
+      mv -f "$tmp" "$CLAUDE_SETTINGS"
+    fi
+  else
+    echo "Couldn't read $CLAUDE_SETTINGS; Claude Code's sandbox was not turned on."
+    rm -f "$tmp"
+    STATUS=1
+  fi
+fi
+
+# Hermes' gateway acts on messages from outside this machine, so it runs in
+# the sandbox too: a systemd drop-in starts it through sandbox/bin/hermes. It
+# also needs to reach the Matrix server in Hermes' settings, which differs on
+# each machine; for other messaging services, add their domains to
+# ~/.config/miniserver/sandbox/hermes.json.
+GATEWAY_UNIT="$HOME/.config/systemd/user/hermes-gateway.service"
+if [ -f "$GATEWAY_UNIT" ]; then
+  if [ -x "$HOME/.local/bin/srt" ]; then
+    homeserver="$(sed -nE "s#^MATRIX_HOMESERVER=[\"']?https?://([^/:\"']+).*#\1#p" "$HOME/.hermes/.env" 2> /dev/null | head -n 1)"
+    dropin="$GATEWAY_UNIT.d/miniserver-sandbox.conf"
+    tmp="$(mktemp)"
+    cat > "$tmp" << EOF
+# Written by MiniServer (sandbox/setup.sh): run Hermes' gateway in the sandbox
+[Service]
+Environment="MINISERVER_SANDBOX_DOMAINS=$homeserver"
+ExecStart=
+ExecStart=%h/.local/share/MiniServer/sandbox/bin/hermes gateway run
+EOF
+    if cmp -s "$tmp" "$dropin"; then
+      rm -f "$tmp"
+    else
+      echo "Running Hermes' gateway in the sandbox..."
+      mkdir -p "$(dirname "$dropin")" && mv -f "$tmp" "$dropin" && chmod 644 "$dropin" \
+        && systemctl --user daemon-reload || STATUS=1
+    fi
+  else
+    echo "Hermes' gateway isn't sandboxed yet: the sandbox (srt) isn't installed."
+    STATUS=1
+  fi
+
+  # A server is rarely logged in to, and user services stop at logout unless
+  # the user lingers
+  if [ "$(loginctl show-user "$USER" --property=Linger --value 2> /dev/null)" != yes ]; then
+    echo "Keeping Hermes' gateway running while you're logged out..."
+    sudo loginctl enable-linger "$USER" || STATUS=1
+  fi
+fi
+
+exit $STATUS