mirror of
https://github.com/badlogic/pi-mono.git
synced 2026-11-05 23:37:25 +00:00
2a32a605a9
A sandbox is a new env type (`type: "gondolin"`): a long-lived Gondolin micro-VM on an SSH environment, with listed host folders and an HTTP(S) host allowlist. The worker reaches it over SSH to the host, where p2's launcher (plugins/envs/sandbox: native, or Docker when the host's Node/QEMU are too old) runs pi-env's daemon inside the VM, so tools, workspace, terminals, uploads and MCP work unchanged. Names outside the allowlist are refused before the host resolves them. Conversations working in a sandbox cannot leave it: location tools, subagent spawn/configure, AgentLocations.move, the terminal tool, and one-shot agents (which now inherit their caller's own location) all keep them there; only the owner's Relocate moves a session out, after a confirmation. conversationConfinement() exposes it to plugins. Owner-only management in the Envs sheet: sandboxes listed under their host, host test reports sandbox support, create/edit/start/stop/restart/test, lock icons in the top bar and sidebar. Tests in test/p2/sandboxes.test.ts (real VM cases with P2_TEST_GONDOLIN=1) and ui-sandboxes.test.ts; docs in docs/remote-envs.md.
165 lines
5.5 KiB
JSON
165 lines
5.5 KiB
JSON
{
|
|
"name": "p2-sandbox-host",
|
|
"lockfileVersion": 3,
|
|
"requires": true,
|
|
"packages": {
|
|
"": {
|
|
"name": "p2-sandbox-host",
|
|
"dependencies": {
|
|
"@earendil-works/gondolin": "0.14.0"
|
|
}
|
|
},
|
|
"node_modules/@cto.af/wtf8": {
|
|
"version": "1.0.0",
|
|
"resolved": "https://registry.npmjs.org/@cto.af/wtf8/-/wtf8-1.0.0.tgz",
|
|
"integrity": "sha512-qI0XnZxcj/FmASB8XXWqG49bSIzu0I/02deAjhnTni9IZ7KMRVlh8EFLE+mmJlMA169lET6rTCFhEsZSjOwlhA==",
|
|
"license": "MIT",
|
|
"engines": {
|
|
"node": ">=22"
|
|
}
|
|
},
|
|
"node_modules/@earendil-works/gondolin": {
|
|
"version": "0.14.0",
|
|
"resolved": "https://registry.npmjs.org/@earendil-works/gondolin/-/gondolin-0.14.0.tgz",
|
|
"integrity": "sha512-MSw+EGcqFJeyKHdXEfm+nMRr74ytT4x8DGIohav0oPCHeVQAB9AajquM94cv2xqvIU3VDAaZZVC07IXsOY6OVQ==",
|
|
"license": "Apache-2.0",
|
|
"dependencies": {
|
|
"cbor2": "^2.3.0",
|
|
"ssh2": "^1.17.0",
|
|
"undici": "^6.29.0"
|
|
},
|
|
"bin": {
|
|
"gondolin": "dist/bin/gondolin.js"
|
|
},
|
|
"engines": {
|
|
"node": ">=22.19.0"
|
|
},
|
|
"optionalDependencies": {
|
|
"@earendil-works/gondolin-krun-runner-darwin-arm64": "0.14.0",
|
|
"@earendil-works/gondolin-krun-runner-linux-x64": "0.14.0"
|
|
}
|
|
},
|
|
"node_modules/@earendil-works/gondolin-krun-runner-darwin-arm64": {
|
|
"version": "0.14.0",
|
|
"resolved": "https://registry.npmjs.org/@earendil-works/gondolin-krun-runner-darwin-arm64/-/gondolin-krun-runner-darwin-arm64-0.14.0.tgz",
|
|
"integrity": "sha512-fvuhz1CZPaEbmXC0luZoXd1obAb0bjaaGJz33Jo63bhMlosYunAahItakh7cU0dnTlNFzufOSnpGOPqtuYjnpQ==",
|
|
"cpu": ["arm64"],
|
|
"license": "Apache-2.0",
|
|
"optional": true,
|
|
"os": ["darwin"],
|
|
"bin": {
|
|
"gondolin-krun-runner": "bin/gondolin-krun-runner"
|
|
}
|
|
},
|
|
"node_modules/@earendil-works/gondolin-krun-runner-linux-x64": {
|
|
"version": "0.14.0",
|
|
"resolved": "https://registry.npmjs.org/@earendil-works/gondolin-krun-runner-linux-x64/-/gondolin-krun-runner-linux-x64-0.14.0.tgz",
|
|
"integrity": "sha512-91iw4smoOH/yOoAuQS6N2UZOxqSFwRhtk8rTyrokXBoWiWcveAzg4kHvnLcm40ZlNrWwzIDFrere4bkZeGDQcA==",
|
|
"cpu": ["x64"],
|
|
"license": "Apache-2.0",
|
|
"optional": true,
|
|
"os": ["linux"],
|
|
"bin": {
|
|
"gondolin-krun-runner": "bin/gondolin-krun-runner"
|
|
}
|
|
},
|
|
"node_modules/asn1": {
|
|
"version": "0.2.6",
|
|
"resolved": "https://registry.npmjs.org/asn1/-/asn1-0.2.6.tgz",
|
|
"integrity": "sha512-ix/FxPn0MDjeyJ7i/yoHGFt/EX6LyNbxSEhPPXODPL+KB0VPk86UYfL0lMdy+KCnv+fmvIzySwaK5COwqVbWTQ==",
|
|
"license": "MIT",
|
|
"dependencies": {
|
|
"safer-buffer": "~2.1.0"
|
|
}
|
|
},
|
|
"node_modules/bcrypt-pbkdf": {
|
|
"version": "1.0.2",
|
|
"resolved": "https://registry.npmjs.org/bcrypt-pbkdf/-/bcrypt-pbkdf-1.0.2.tgz",
|
|
"integrity": "sha512-qeFIXtP4MSoi6NLqO12WfqARWWuCKi2Rn/9hJLEmtB5yTNr9DqFWkJRCf2qShWzPeAMRnOgCrq0sg/KLv5ES9w==",
|
|
"license": "BSD-3-Clause",
|
|
"dependencies": {
|
|
"tweetnacl": "^0.14.3"
|
|
}
|
|
},
|
|
"node_modules/buildcheck": {
|
|
"version": "0.0.7",
|
|
"resolved": "https://registry.npmjs.org/buildcheck/-/buildcheck-0.0.7.tgz",
|
|
"integrity": "sha512-lHblz4ahamxpTmnsk+MNTRWsjYKv965MwOrSJyeD588rR3Jcu7swE+0wN5F+PbL5cjgu/9ObkhfzEPuofEMwLA==",
|
|
"optional": true,
|
|
"engines": {
|
|
"node": ">=10.0.0"
|
|
}
|
|
},
|
|
"node_modules/cbor2": {
|
|
"version": "2.4.1",
|
|
"resolved": "https://registry.npmjs.org/cbor2/-/cbor2-2.4.1.tgz",
|
|
"integrity": "sha512-h4OqPnSvIEUNCxTNb9pwMZPKjhNKO9bkPwQJOR7d5oBIrZR/CO098atrLl4AkQmB1p3opCvo2UFt4fhRSWC/vQ==",
|
|
"license": "MIT",
|
|
"dependencies": {
|
|
"@cto.af/wtf8": "1.0.0"
|
|
},
|
|
"engines": {
|
|
"node": ">=22"
|
|
}
|
|
},
|
|
"node_modules/cpu-features": {
|
|
"version": "0.0.10",
|
|
"resolved": "https://registry.npmjs.org/cpu-features/-/cpu-features-0.0.10.tgz",
|
|
"integrity": "sha512-9IkYqtX3YHPCzoVg1Py+o9057a3i0fp7S530UWokCSaFVTc7CwXPRiOjRjBQQ18ZCNafx78YfnG+HALxtVmOGA==",
|
|
"hasInstallScript": true,
|
|
"optional": true,
|
|
"dependencies": {
|
|
"buildcheck": "~0.0.6",
|
|
"nan": "^2.19.0"
|
|
},
|
|
"engines": {
|
|
"node": ">=10.0.0"
|
|
}
|
|
},
|
|
"node_modules/nan": {
|
|
"version": "2.30.0",
|
|
"resolved": "https://registry.npmjs.org/nan/-/nan-2.30.0.tgz",
|
|
"integrity": "sha512-P5mokDkSvCGBz6mZDD/2l+w9QoICRXdCyZ9ONGmTePr40oihJg3Kpn0YU3twKd6PJnwSlLBWNQeOT6yWEV2c4A==",
|
|
"license": "MIT",
|
|
"optional": true
|
|
},
|
|
"node_modules/safer-buffer": {
|
|
"version": "2.1.2",
|
|
"resolved": "https://registry.npmjs.org/safer-buffer/-/safer-buffer-2.1.2.tgz",
|
|
"integrity": "sha512-YZo3K82SD7Riyi0E1EQPojLz7kpepnSQI9IyPbHHg1XXXevb5dJI7tpyN2ADxGcQbHG7vcyRHk0cbwqcQriUtg==",
|
|
"license": "MIT"
|
|
},
|
|
"node_modules/ssh2": {
|
|
"version": "1.17.0",
|
|
"resolved": "https://registry.npmjs.org/ssh2/-/ssh2-1.17.0.tgz",
|
|
"integrity": "sha512-wPldCk3asibAjQ/kziWQQt1Wh3PgDFpC0XpwclzKcdT1vql6KeYxf5LIt4nlFkUeR8WuphYMKqUA56X4rjbfgQ==",
|
|
"hasInstallScript": true,
|
|
"dependencies": {
|
|
"asn1": "^0.2.6",
|
|
"bcrypt-pbkdf": "^1.0.2"
|
|
},
|
|
"engines": {
|
|
"node": ">=10.16.0"
|
|
},
|
|
"optionalDependencies": {
|
|
"cpu-features": "~0.0.10",
|
|
"nan": "^2.23.0"
|
|
}
|
|
},
|
|
"node_modules/tweetnacl": {
|
|
"version": "0.14.5",
|
|
"resolved": "https://registry.npmjs.org/tweetnacl/-/tweetnacl-0.14.5.tgz",
|
|
"integrity": "sha512-KXXFFdAbFXY4geFIwoyNK+f5Z1b7swfXABfL7HXCmoIWMKU3dmS26672A4EeQtDzLKy7SXmfBu51JolvEKwtGA==",
|
|
"license": "Unlicense"
|
|
},
|
|
"node_modules/undici": {
|
|
"version": "6.29.1",
|
|
"resolved": "https://registry.npmjs.org/undici/-/undici-6.29.1.tgz",
|
|
"integrity": "sha512-EvRlUt/QqAEvXdQeRMYUfwOQsfzpDztykrG2owGEE/rBOBoYv9uF39ZzsNDh4lTFHhTr2XOZjKkYgueD12ZmGA==",
|
|
"license": "MIT",
|
|
"engines": {
|
|
"node": ">=18.17"
|
|
}
|
|
}
|
|
}
|
|
}
|