mirror of
https://github.com/badlogic/pi-mono.git
synced 2026-11-05 23:37:25 +00:00
A sandbox is a new env type (`type: "gondolin"`): a long-lived Gondolin micro-VM on an SSH environment, with listed host folders and an HTTP(S) host allowlist. The worker reaches it over SSH to the host, where p2's launcher (plugins/envs/sandbox: native, or Docker when the host's Node/QEMU are too old) runs pi-env's daemon inside the VM, so tools, workspace, terminals, uploads and MCP work unchanged. Names outside the allowlist are refused before the host resolves them. Conversations working in a sandbox cannot leave it: location tools, subagent spawn/configure, AgentLocations.move, the terminal tool, and one-shot agents (which now inherit their caller's own location) all keep them there; only the owner's Relocate moves a session out, after a confirmation. conversationConfinement() exposes it to plugins. Owner-only management in the Envs sheet: sandboxes listed under their host, host test reports sandbox support, create/edit/start/stop/restart/test, lock icons in the top bar and sidebar. Tests in test/p2/sandboxes.test.ts (real VM cases with P2_TEST_GONDOLIN=1) and ui-sandboxes.test.ts; docs in docs/remote-envs.md. |
||
|---|---|---|
| .. | ||
| p3-functions | ||
| p3-reviews | ||
| research | ||
| changes.md | ||
| chord-next-walkthrough.md | ||
| chord-walkthrough.md | ||
| durable-request.md | ||
| handoff.md | ||
| history-tool.md | ||
| mcp-durable.md | ||
| optimistic-ui.md | ||
| p2-notes.md | ||
| p2-tui-port.md | ||
| p3-handoff.md | ||
| p3-walkthrough.md | ||
| plugin-hooks.md | ||
| plugin-loading.md | ||
| questions.md | ||
| remote-envs.md | ||
| target-design.md | ||
| tree.md | ||
| workflows.md | ||