pi-mono/apps/p2/plugins/envs/connection-revision.ts
Mario Zechner 2a32a605a9
Some checks are pending
CI / build-check (push) Waiting to run
CI / test (coding-agent) (push) Waiting to run
CI / test (durable) (push) Waiting to run
CI / test (other) (push) Waiting to run
CI / mcp-conformance (push) Waiting to run
feat(p2): Gondolin sandbox environments
A sandbox is a new env type (`type: "gondolin"`): a long-lived Gondolin micro-VM on an SSH environment, with
listed host folders and an HTTP(S) host allowlist. The worker reaches it over SSH to the host, where p2's launcher
(plugins/envs/sandbox: native, or Docker when the host's Node/QEMU are too old) runs pi-env's daemon inside the VM,
so tools, workspace, terminals, uploads and MCP work unchanged. Names outside the allowlist are refused before
the host resolves them.

Conversations working in a sandbox cannot leave it: location tools, subagent spawn/configure, AgentLocations.move,
the terminal tool, and one-shot agents (which now inherit their caller's own location) all keep them there; only the
owner's Relocate moves a session out, after a confirmation. conversationConfinement() exposes it to plugins.

Owner-only management in the Envs sheet: sandboxes listed under their host, host test reports sandbox support,
create/edit/start/stop/restart/test, lock icons in the top bar and sidebar. Tests in test/p2/sandboxes.test.ts
(real VM cases with P2_TEST_GONDOLIN=1) and ui-sandboxes.test.ts; docs in docs/remote-envs.md.
2026-11-05 23:35:09 +00:00

12 lines
748 B
TypeScript

// The revision a connection to an environment was opened for: its own configuration's, and for a sandbox also its
// host's (the connection goes through the host), so editing either starts a new connection.
import { envRevision } from "@p2/app/v1/node";
import type { EnvConfig, EnvsConfig } from "./schema.ts";
/** The connection revision of an environment configured as `config`, under `configs` (where a sandbox finds its host). */
export function connectionRevision(configs: EnvsConfig, config: EnvConfig): string {
if (config.type === "ssh") return envRevision(config);
const host = Object.hasOwn(configs, config.host) ? configs[config.host] : undefined;
return `${envRevision(config)}+${host === undefined ? "" : envRevision(host)}`;
}