232a00cc9e
Collaborative sandbox over the same zero-knowledge encrypted channel:
- sbx.rs: SandboxBackend (Local / Docker / Multipass) spawning a shell in a PTY
(portable-pty); reader thread pumps output to the broker.
- Broker (owner's client): /sbx launch [backend] [image] boots the sandbox and
relays PTY output as encrypted {"_sbx":"data"} frames; /sbx stop tears down.
PTY input arrives as {"_sbx":"input"} frames and is written back.
- All clients render the shared terminal from data frames via a vt100 parser;
F2 toggles drive mode (keystrokes -> input frames, incl. Ctrl-C); esc releases.
- ui.rs: sandbox pane (split below chat) with drive indicator.
- Server stays zero-knowledge: PTY bytes are Fernet-encrypted like chat/files;
the VM runs on the initiator's client, never the server.
Tests (cargo test, 4 pass): PTY I/O round-trip + headless end-to-end relay
(PTY -> _sbx frame encode -> decode -> vt100 screen shows command output).
Note: Multipass assumes the instance is launched separately (lifecycle = P3b);
per-user unix accounts + sudo delegation = P4.
Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>
48 lines
1.1 KiB
TOML
48 lines
1.1 KiB
TOML
[package]
|
|
name = "hack-house"
|
|
version = "0.1.0"
|
|
edition = "2021"
|
|
description = "hack-house — encrypted collaborative sessions with a summoned sandbox. ⛧"
|
|
license = "MIT"
|
|
|
|
[[bin]]
|
|
name = "hack-house"
|
|
path = "src/main.rs"
|
|
|
|
[dependencies]
|
|
# crypto
|
|
num-bigint = "0.4"
|
|
num-traits = "0.2"
|
|
sha2 = "0.10"
|
|
hkdf = "0.12"
|
|
fernet = "0.2"
|
|
base64 = "0.22"
|
|
rand = "0.8"
|
|
hex = "0.4"
|
|
|
|
# net
|
|
reqwest = { version = "0.12", default-features = false, features = ["blocking", "json", "rustls-tls"] }
|
|
tungstenite = { version = "0.24", features = ["rustls-tls-webpki-roots"] }
|
|
rustls = "0.23"
|
|
url = "2"
|
|
|
|
# sandbox (P3): PTY + terminal emulation
|
|
portable-pty = "0.8"
|
|
vt100 = "0.15"
|
|
|
|
# async + tui
|
|
tokio = { version = "1", features = ["rt-multi-thread", "macros", "net", "io-util", "sync", "time"] }
|
|
tokio-tungstenite = { version = "0.24", features = ["rustls-tls-webpki-roots"] }
|
|
futures-util = "0.3"
|
|
ratatui = { version = "0.29", features = ["serde"] }
|
|
crossterm = { version = "0.28", features = ["event-stream"] }
|
|
toml = "0.8"
|
|
|
|
# data
|
|
serde = { version = "1", features = ["derive"] }
|
|
serde_json = "1"
|
|
|
|
# cli / errors
|
|
clap = { version = "4", features = ["derive"] }
|
|
anyhow = "1"
|