vrr/spawn
2
0
Fork 0
mirror of https://github.com/OpenRouterTeam/spawn.git synced 2026-07-10 01:28:35 +00:00
Code Issues Projects Releases Packages Wiki Activity Actions 3

feat(local): warn users before executing commands on their machine

Browse source 
Local spawns now show a security warning with three options: Ok (proceed
normally), Sandbox (run inside a Docker container), or Cancel (abort).
Replaces the previous openclaw-only warning with a universal prompt that
applies to all agents. When Sandbox is selected, the function re-invokes
with useSandbox=true so the Docker-wrapped runner is used.
This commit is contained in:
Ahmed Abushagur 2026-05-20 23:09:04 -07:00 • committed by AULORBE
parent 08223209a4
commit 8fc7889cb6
No known key found for this signature in database
1 changed files with 39 additions and 20 deletions
Download patch file Download diff file Expand all files Collapse all files

59
packages/cli/src/local/run.ts
View file

@ -37,6 +37,45 @@ import {
* host (the `local` cloud).
*/
export async function runLocalAgent(agentName: string, useSandbox: boolean): Promise<void> {
// Warn that local spawning executes commands directly on the user's machine.
// Skip in non-interactive mode (headless / CI) and when sandbox is already active.
if (!useSandbox && process.env.SPAWN_NON_INTERACTIVE !== "1") {
process.stderr.write("\n");
logWarn("⚠ Local execution warning");
logWarn(" Spawning locally will execute commands directly on this machine.");
logWarn(" The agent will have full access to your filesystem, shell, and network.\n");
const action = await p.select<"ok" | "sandbox" | "cancel">({
message: "How would you like to proceed?",
options: [
{
value: "ok",
label: "Ok",
hint: "proceed — execute directly on this machine",
},
{
value: "sandbox",
label: "Sandbox",
hint: "run inside a Docker container instead",
},
{
value: "cancel",
label: "Cancel",
hint: "abort the operation",
},
],
});
if (p.isCancel(action) || action === "cancel") {
p.log.info("Operation cancelled.");
process.exit(0);
}
if (action === "sandbox") {
return runLocalAgent(agentName, true);
}
}
const baseRunner = {
runServer: runLocal,
uploadFile: async (l: string, r: string) => uploadFile(l, r),
@ -55,26 +94,6 @@ export async function runLocalAgent(agentName: string, useSandbox: boolean): Pro
await ensureDocker();
}
// Warn about security implications of installing OpenClaw locally
// (skip warning in sandbox mode — the container provides isolation)
if (agentName === "openclaw" && !useSandbox && process.env.SPAWN_NON_INTERACTIVE !== "1") {
process.stderr.write("\n");
logWarn("⚠ Local installation warning");
logWarn(` This will install ${agent.name} directly on your machine.`);
logWarn(" The agent will have full access to your filesystem, shell, and network.");
logWarn(" For isolation, consider running on a cloud VM instead.\n");
const confirmed = await p.confirm({
message: "Continue with local installation?",
initialValue: true,
});
if (p.isCancel(confirmed) || !confirmed) {
p.log.info("Installation cancelled.");
process.exit(0);
}
}
const cloud: CloudOrchestrator = {
cloudName: "local",
cloudLabel: useSandbox ? "local (sandboxed)" : "local",