mirror of
https://github.com/badlogic/pi-mono.git
synced 2026-11-05 23:37:25 +00:00
2a32a605a9
A sandbox is a new env type (`type: "gondolin"`): a long-lived Gondolin micro-VM on an SSH environment, with listed host folders and an HTTP(S) host allowlist. The worker reaches it over SSH to the host, where p2's launcher (plugins/envs/sandbox: native, or Docker when the host's Node/QEMU are too old) runs pi-env's daemon inside the VM, so tools, workspace, terminals, uploads and MCP work unchanged. Names outside the allowlist are refused before the host resolves them. Conversations working in a sandbox cannot leave it: location tools, subagent spawn/configure, AgentLocations.move, the terminal tool, and one-shot agents (which now inherit their caller's own location) all keep them there; only the owner's Relocate moves a session out, after a confirmation. conversationConfinement() exposes it to plugins. Owner-only management in the Envs sheet: sandboxes listed under their host, host test reports sandbox support, create/edit/start/stop/restart/test, lock icons in the top bar and sidebar. Tests in test/p2/sandboxes.test.ts (real VM cases with P2_TEST_GONDOLIN=1) and ui-sandboxes.test.ts; docs in docs/remote-envs.md. |
||
|---|---|---|
| .. | ||
| agent | ||
| artifacts | ||
| chat | ||
| chat-mode | ||
| codemode | ||
| coding-tools | ||
| conversations | ||
| dev-tools | ||
| devices | ||
| drafts | ||
| envs | ||
| file-index | ||
| files | ||
| history | ||
| locations | ||
| login | ||
| logs | ||
| mcp | ||
| models | ||
| ports | ||
| powershell | ||
| prompt | ||
| proxy-marker | ||
| quiet-tools | ||
| radius | ||
| search | ||
| send-file | ||
| sessions | ||
| sharing | ||
| status | ||
| subagents | ||
| terminals | ||
| tree | ||
| voice | ||
| web-shell | ||
| workspace | ||