@cabane/companion 0.6.124 → 0.6.126

package/dist/pairing-config.js

@@ -227,10 +227,45 @@ var companionConfigSchema = z2.object({
   // wraps the runner in an OS sandbox where the host supports one; `'none'`
   // (the default) runs it as a plain child beside this process, a supported
   // configuration in its own right rather than a degraded one.
+  // CT1684: `policy` is what the OS sandbox lets a turn reach, read and hold
+  // (`runner/sandbox-policy.ts`). It is validated there rather than here, so a
+  // bad policy refuses the turns it governs, with the field named, instead of
+  // keeping the companion from starting at all.
   runners: z2.object({
     enabled: z2.boolean().optional(),
-    provider: z2.literal("local-process").optional(),
-    sandbox: z2.enum(["os", "none"]).optional()
+    provider: z2.enum(["local-process", "docker"]).optional(),
+    sandbox: z2.enum(["os", "none"]).optional(),
+    // CT1681: the `docker` provider — a container per conversation and agent,
+    // from one image, on a network whose only way out is an allow-listed proxy.
+    docker: z2.object({
+      // The base image a container runs. Default: the one this companion
+      // builds from its own Dockerfile on first use. One named here must
+      // have that one's layout (the `runner` user, `cabane-companion` on
+      // PATH reading `CABANE_COMPANION_ROOT`).
+      image: z2.string().min(1).optional(),
+      // The companion install mounted into every container. Default, on
+      // Linux: this companion's own. Needed for one run from a checkout
+      // (a `pnpm --filter @cabane/companion deploy --prod <dir>`).
+      companionDir: z2.string().min(1).optional(),
+      // Hosts a turn may reach besides the Cabane API, the model providers
+      // and the git host. `*.example.com` matches any subdomain.
+      egressAllow: z2.array(z2.string().min(1)).optional(),
+      // Keep a turn's container between turns and start it again for the
+      // next one. Off by default: the container goes after every turn and
+      // the runtime's session files are restored into the next.
+      keepContainers: z2.boolean().optional(),
+      // The Cabane URL as a container reaches it, for a device whose own
+      // `baseUrl` is a loopback address the container can't see.
+      apiUrl: z2.string().url().refine(isAllowedBaseUrl).optional(),
+      // Env set on each turn's runner, `${NAME}` resolved from secrets.json
+      // at exec: the runtime's own auth, which the image never carries.
+      env: z2.record(z2.string(), z2.string()).optional(),
+      // A git credential helper run on this device to answer the
+      // container's git for an allowed host, e.g. `!gh auth git-credential`.
+      // Absent: git's own configured helpers on this device.
+      gitCredentialHelper: z2.string().min(1).optional()
+    }).strict().optional(),
+    policy: z2.unknown().optional()
   }).strict().optional()
 });
 function loadConfig() {