Dockerfile.sandbox

FROM node:22-bookworm-slim@sha256:db9a3a15e8e8e2adbaf1e1c3d93dfb04c2e294bdd027490addb2391b8e61cc6a AS openclaw-readonly-build

RUN apt-get update \
  && apt-get install -y --no-install-recommends ca-certificates git \
  && rm -rf /var/lib/apt/lists/*

RUN corepack enable

WORKDIR /build

COPY package.json pnpm-workspace.yaml .npmrc tsconfig.json tsconfig.plugin-sdk.dts.json tsdown.config.ts ./
COPY ui/package.json ./ui/package.json
COPY extensions/memory-mongodb/package.json ./extensions/memory-mongodb/package.json
COPY apps/shared/OpenClawKit/Sources/OpenClawKit/Resources/tool-display.json ./apps/shared/OpenClawKit/Sources/OpenClawKit/Resources/tool-display.json
COPY patches ./patches
COPY src ./src
COPY skills ./skills

RUN NODE_OPTIONS=--max-old-space-size=2048 pnpm install --config.engine-strict=false
RUN pnpm exec tsdown --config tsdown.config.ts
RUN CI=true pnpm prune --prod

FROM node:22-bookworm-slim@sha256:db9a3a15e8e8e2adbaf1e1c3d93dfb04c2e294bdd027490addb2391b8e61cc6a

ENV DEBIAN_FRONTEND=noninteractive
ENV OPENCLAW_RUNTIME_WRAPPER_BIN=/opt/daisy/bin
ENV PATH="${OPENCLAW_RUNTIME_WRAPPER_BIN}:${PATH}"

RUN apt-get update \
  && apt-get install -y --no-install-recommends \
    bash \
    ca-certificates \
    curl \
    ffmpeg \
    git \
    jq \
    python3 \
    ripgrep \
    unzip \
    zip \
  && zip --version >/dev/null \
  && unzip -v >/dev/null \
  && rm -rf /var/lib/apt/lists/*
COPY scripts/docker/install-runtime-binaries.sh /tmp/install-runtime-binaries.sh
COPY scripts/docker/runtime-binaries.json /tmp/runtime-binaries.json
ARG TARGETARCH=""
RUN chmod 755 /tmp/install-runtime-binaries.sh \
  && mkdir -p /usr/local/share/openclaw \
  && install -m 644 /tmp/runtime-binaries.json /usr/local/share/openclaw/runtime-binaries.json \
  && TARGETARCH="${TARGETARCH}" WRAPPER_PREFIX="${OPENCLAW_RUNTIME_WRAPPER_BIN}" /tmp/install-runtime-binaries.sh \
  && rm -f /tmp/install-runtime-binaries.sh /tmp/runtime-binaries.json
ARG OPENCLAW_GWS_VERSION="0.17.0"
RUN npm install -g --prefix=/usr/local --omit=dev --no-audit --no-fund @googleworkspace/cli@${OPENCLAW_GWS_VERSION} \
 && gws --version \
 && npm cache clean --force
ARG OPENCLAW_SUMMARIZE_VERSION="0.13.0"
RUN npm install -g --prefix=/usr/local --omit=dev --no-audit --no-fund @steipete/summarize@${OPENCLAW_SUMMARIZE_VERSION} \
 && /usr/local/bin/node /usr/local/lib/node_modules/@steipete/summarize/dist/cli.js --version \
 && npm cache clean --force
COPY scripts/docker/summarize-wrapper.sh /tmp/summarize-wrapper.sh
RUN rm -f /usr/local/bin/summarize \
  && install -m 0755 /tmp/summarize-wrapper.sh /usr/local/bin/summarize \
  && rm -f /tmp/summarize-wrapper.sh \
  && /usr/local/bin/summarize --version

COPY --from=openclaw-readonly-build /build/package.json /opt/daisy/openclaw-readonly/package.json
COPY --from=openclaw-readonly-build /build/node_modules /opt/daisy/openclaw-readonly/node_modules
COPY --from=openclaw-readonly-build /build/dist /opt/daisy/openclaw-readonly/dist
COPY --from=openclaw-readonly-build /build/skills /opt/daisy/openclaw-readonly/skills
COPY scripts/docker/openclaw-readonly.mjs /opt/daisy/openclaw-readonly/openclaw-readonly.mjs
COPY scripts/docker/openclaw-readonly-wrapper.mjs /usr/local/bin/openclaw-readonly
RUN bash -o pipefail -lc '\
  chmod 755 /opt/daisy/openclaw-readonly/openclaw-readonly.mjs /usr/local/bin/openclaw-readonly \
  && mkdir -p /tmp/openclaw-readonly-smoke/state /tmp/openclaw-readonly-smoke/workspace \
  && printf "%s" "{\"agents\":{\"list\":[{\"id\":\"main\",\"skills\":[\"openclaw-readonly\"]}],\"defaults\":{\"sandbox\":{\"mode\":\"all\",\"scope\":\"agent\",\"workspaceAccess\":\"ro\",\"workspaceRoot\":\"/tmp/openclaw-readonly-sandbox\",\"docker\":{\"network\":\"none\"}}}},\"tools\":{\"sandbox\":{\"tools\":{\"allow\":[\"read\",\"exec\"]}},\"elevated\":{\"enabled\":false}}}" >/tmp/openclaw-readonly-smoke/openclaw.json \
  && { \
       OPENCLAW_READONLY_CONFIG_PATH=/tmp/openclaw-readonly-smoke/openclaw.json \
       OPENCLAW_READONLY_STATE_DIR=/tmp/openclaw-readonly-smoke/state \
       OPENCLAW_READONLY_AGENT_ID=main \
       OPENCLAW_READONLY_WORKSPACE_DIR=/tmp/openclaw-readonly-smoke/workspace \
       /usr/local/bin/openclaw-readonly skills list \
         >/tmp/openclaw-readonly-smoke/skills-list.txt \
         2>/tmp/openclaw-readonly-smoke/skills-list.err \
       || { cat /tmp/openclaw-readonly-smoke/skills-list.txt; cat /tmp/openclaw-readonly-smoke/skills-list.err >&2; exit 1; }; \
       grep -q "Sandbox-safe OpenClaw diagnostics" /tmp/openclaw-readonly-smoke/skills-list.txt \
       || { cat /tmp/openclaw-readonly-smoke/skills-list.txt; cat /tmp/openclaw-readonly-smoke/skills-list.err >&2; exit 1; }; \
     } \
  && { \
       OPENCLAW_READONLY_CONFIG_PATH=/tmp/openclaw-readonly-smoke/openclaw.json \
       OPENCLAW_READONLY_STATE_DIR=/tmp/openclaw-readonly-smoke/state \
       OPENCLAW_READONLY_AGENT_ID=main \
       /usr/local/bin/openclaw-readonly sandbox explain \
         >/tmp/openclaw-readonly-smoke/sandbox-explain.txt \
         2>/tmp/openclaw-readonly-smoke/sandbox-explain.err \
       || { cat /tmp/openclaw-readonly-smoke/sandbox-explain.txt; cat /tmp/openclaw-readonly-smoke/sandbox-explain.err >&2; exit 1; }; \
       grep -q "mode:" /tmp/openclaw-readonly-smoke/sandbox-explain.txt \
       || { cat /tmp/openclaw-readonly-smoke/sandbox-explain.txt; cat /tmp/openclaw-readonly-smoke/sandbox-explain.err >&2; exit 1; }; \
     } \
  && rm -rf /tmp/openclaw-readonly-smoke'

RUN useradd --create-home --shell /bin/bash sandbox
USER sandbox
WORKDIR /home/sandbox

CMD ["sleep", "infinity"]