mirror of
https://github.com/badlogic/pi-mono.git
synced 2026-11-05 23:37:25 +00:00
2a32a605a9
A sandbox is a new env type (`type: "gondolin"`): a long-lived Gondolin micro-VM on an SSH environment, with listed host folders and an HTTP(S) host allowlist. The worker reaches it over SSH to the host, where p2's launcher (plugins/envs/sandbox: native, or Docker when the host's Node/QEMU are too old) runs pi-env's daemon inside the VM, so tools, workspace, terminals, uploads and MCP work unchanged. Names outside the allowlist are refused before the host resolves them. Conversations working in a sandbox cannot leave it: location tools, subagent spawn/configure, AgentLocations.move, the terminal tool, and one-shot agents (which now inherit their caller's own location) all keep them there; only the owner's Relocate moves a session out, after a confirmation. conversationConfinement() exposes it to plugins. Owner-only management in the Envs sheet: sandboxes listed under their host, host test reports sandbox support, create/edit/start/stop/restart/test, lock icons in the top bar and sidebar. Tests in test/p2/sandboxes.test.ts (real VM cases with P2_TEST_GONDOLIN=1) and ui-sandboxes.test.ts; docs in docs/remote-envs.md.
26 lines
928 B
TypeScript
26 lines
928 B
TypeScript
// What the sandbox launcher on a host prints (p2-sandbox.sh check, p2-sandbox.mjs status/start/stop): wire input that
|
|
// the manager checks before use.
|
|
|
|
import { bool, num, obj, str, union } from "@earendil-works/pi-schema";
|
|
import { literal } from "@p2/app/v1";
|
|
|
|
/** `p2-sandbox.sh check`: how Gondolin can run on the host and what it found. */
|
|
export const LauncherCheckSchema = obj(
|
|
{
|
|
runtime: union([literal("native"), literal("docker"), literal("none")]),
|
|
system: str(),
|
|
arch: str(),
|
|
kvm: bool(),
|
|
kvmDevice: bool(),
|
|
qemu: str(),
|
|
node: str(),
|
|
docker: bool(),
|
|
},
|
|
{ open: true },
|
|
);
|
|
|
|
/** `status`, `start` and `stop`: the VM's state; a running one names its configuration's revision. */
|
|
export const LauncherStatusSchema = union([
|
|
obj({ state: literal("stopped") }, { open: true }),
|
|
obj({ state: literal("running"), startedAt: num(), revision: str(), cpus: num(), memoryMb: num() }, { open: true }),
|
|
]);
|