mirror of
https://github.com/badlogic/pi-mono.git
synced 2026-11-05 23:37:25 +00:00
2a32a605a9
A sandbox is a new env type (`type: "gondolin"`): a long-lived Gondolin micro-VM on an SSH environment, with listed host folders and an HTTP(S) host allowlist. The worker reaches it over SSH to the host, where p2's launcher (plugins/envs/sandbox: native, or Docker when the host's Node/QEMU are too old) runs pi-env's daemon inside the VM, so tools, workspace, terminals, uploads and MCP work unchanged. Names outside the allowlist are refused before the host resolves them. Conversations working in a sandbox cannot leave it: location tools, subagent spawn/configure, AgentLocations.move, the terminal tool, and one-shot agents (which now inherit their caller's own location) all keep them there; only the owner's Relocate moves a session out, after a confirmation. conversationConfinement() exposes it to plugins. Owner-only management in the Envs sheet: sandboxes listed under their host, host test reports sandbox support, create/edit/start/stop/restart/test, lock icons in the top bar and sidebar. Tests in test/p2/sandboxes.test.ts (real VM cases with P2_TEST_GONDOLIN=1) and ui-sandboxes.test.ts; docs in docs/remote-envs.md.
44 lines
1.9 KiB
TypeScript
44 lines
1.9 KiB
TypeScript
import { pluginFile } from "@earendil-works/chord/plugins";
|
|
import { contribute, defineFacet } from "@p2/app/v1";
|
|
import { HarnessEnvironments, workerOf } from "@p2/app/v1/worker";
|
|
import { isSandbox, loadEnvs } from "./config.ts";
|
|
import { remoteSession } from "./remote-env.ts";
|
|
import { EnvStore } from "./store.ts";
|
|
|
|
export default defineFacet((host) => {
|
|
contribute(host, "p2.worker-envs", (self) => {
|
|
const worker = workerOf(self);
|
|
const launcher = pluginFile("sandbox");
|
|
const store = self.open(
|
|
async () => {
|
|
const opened = new EnvStore(worker().init.dataDir);
|
|
await opened.observer.start();
|
|
return opened;
|
|
},
|
|
(opened) => opened.observer.close(),
|
|
);
|
|
self.contribute(HarnessEnvironments, {
|
|
remote: {
|
|
open: async (env) => {
|
|
const { dataDir } = worker().init;
|
|
const configs = await loadEnvs(dataDir);
|
|
const config = Object.hasOwn(configs, env) ? configs[env] : undefined;
|
|
if (!config) throw new Error(`Environment "${env}" is not configured; refusing local execution`);
|
|
// One connection for every conversation working on this environment, at its directories.
|
|
const remote = remoteSession(dataDir, env, config, "/", { launcher });
|
|
return { at: remote.at, close: () => remote.connection.close() };
|
|
},
|
|
describe: async (env) => {
|
|
const configs = await loadEnvs(worker().init.dataDir);
|
|
const config = Object.hasOwn(configs, env) ? configs[env] : undefined;
|
|
if (config?.type === "ssh") return `the remote environment "${env}" (SSH host ${config.host})`;
|
|
if (config?.type === "gondolin")
|
|
return `the sandbox "${env}" (a VM on the environment "${config.host}"; you cannot leave it, and only its own folders and allowed hosts are reachable)`;
|
|
return undefined;
|
|
},
|
|
// The observed envs.json: a sandbox stays one while its configuration is valid (the last valid state).
|
|
sandbox: (env) => isSandbox(store.value.snapshot.configs, env),
|
|
},
|
|
});
|
|
});
|
|
});
|