@gethmy/agent 1.32.0 → 1.33.0

package/dist/cli.js

@@ -841,6 +841,31 @@ function findRemovedConfigKeys(rawConfig) {
   }
   return found;
 }
+function sandboxConfigIssues(args) {
+  const out = [];
+  if (args.image && !/^[A-Za-z0-9]/.test(args.image)) {
+    out.push(`${args.imagePath}: must start with a letter or digit (got "${args.image}") — a leading "-" is read by docker as a flag, not an image`);
+  }
+  if (args.timeoutPath !== undefined) {
+    const ms = args.timeoutMs;
+    if (typeof ms !== "number" || !Number.isInteger(ms) || ms < 1) {
+      out.push(`${args.timeoutPath}: must be an integer >= 1 (got ${ms})`);
+    }
+  }
+  return out;
+}
+function validateVerificationConfig(config) {
+  const v = config.verification;
+  const issues = sandboxConfigIssues({
+    image: v.sandboxImage,
+    imagePath: "verification.sandboxImage"
+  });
+  if (issues.length > 0) {
+    throw new ConfigValidationError(`Invalid verification config:
+  - ${issues.join(`
+  - `)}`, issues);
+  }
+}
 function validateAutoMergeConfig(config) {
   const autoMerge = config.review.autoMerge;
   const issues = [];
@@ -869,18 +894,18 @@ function validateAutoMergeConfig(config) {
     if (!autoMerge.reReviewOnBranchChange) {
       issues.push("review.autoMerge.ciRepair.patch.enabled: needs review.autoMerge.reReviewOnBranchChange — without it a machine-authored repair could merge with nothing having reviewed its diff");
     }
-    if (patch.sandboxImage && !/^[A-Za-z0-9]/.test(patch.sandboxImage)) {
-      issues.push(`review.autoMerge.ciRepair.patch.sandboxImage: must start with a letter or digit (got "${patch.sandboxImage}") — a leading "-" is read by docker as a flag, not an image`);
-    }
+    issues.push(...sandboxConfigIssues({
+      image: patch.sandboxImage,
+      timeoutMs: patch.sandboxTimeoutMs,
+      imagePath: "review.autoMerge.ciRepair.patch.sandboxImage",
+      timeoutPath: "review.autoMerge.ciRepair.patch.sandboxTimeoutMs"
+    }));
     if (!Number.isInteger(patch.maxTurns) || patch.maxTurns < 1) {
       issues.push(`review.autoMerge.ciRepair.patch.maxTurns: must be an integer >= 1 (got ${patch.maxTurns})`);
     }
     if (!(patch.maxBudgetUsd > 0)) {
       issues.push(`review.autoMerge.ciRepair.patch.maxBudgetUsd: must be greater than 0 (got ${patch.maxBudgetUsd})`);
     }
-    if (!Number.isInteger(patch.sandboxTimeoutMs) || patch.sandboxTimeoutMs < 1) {
-      issues.push(`review.autoMerge.ciRepair.patch.sandboxTimeoutMs: must be an integer >= 1 (got ${patch.sandboxTimeoutMs})`);
-    }
   }
   const independent = autoMerge.independentReview;
   if (typeof independent?.enabled !== "boolean") {
@@ -2750,6 +2775,7 @@ var init_types2 = __esm(() => {
       devServerBasePort: 4200,
       timeout: 120000,
       testTimeout: 600000,
+      sandboxImage: "",
       failColumn: "To Do"
     },
     review: {
@@ -5233,7 +5259,8 @@ import {
   reportFindings,
   runFormatFix,
   runVerification,
-  teardownWorktree
+  teardownWorktree,
+  verificationSandbox
 } from "@gethmy/harness";
 function formatTokenCount(tokens) {
   if (tokens >= 1e6)
@@ -5275,7 +5302,7 @@ async function runCompletion(client, card, branchName, worktreePath, config, wor
     revertWarnings: []
   };
   if (config.verification.enabled && config.verification.lint) {
-    runFormatFix(worktreePath, config.verification.timeout, workerId);
+    await runFormatFix(worktreePath, config.verification.timeout, workerId, verificationSandbox(config));
   }
   commitUncommittedChanges(worktreePath, card);
   const hasCommits = checkHasCommits(worktreePath, config.worktree.baseBranch, runBaselineSha);
@@ -9674,6 +9701,7 @@ import {
   spawnInGroup as spawnInGroup4,
   teardownWorktree as teardownWorktree2,
   terminateGroup as terminateGroup3,
+  verificationSandbox as verificationSandbox2,
   WorktreeBaseError
 } from "@gethmy/harness";
 function sdkDraftLogLine(ev) {
@@ -10998,7 +11026,8 @@ ${prompt}`;
         build: {
           worktreePath,
           buildTimeout: this.config.verification.timeout,
-          lintTimeout: this.config.verification.timeout
+          lintTimeout: this.config.verification.timeout,
+          sandbox: verificationSandbox2(this.config)
         },
         artifact: {
           worktreePath,
@@ -14581,6 +14610,7 @@ async function main() {
     validateBudgetConfig(config.agent);
     validateSweepConfig(config.agent);
     validateRankingConfig(config.agent);
+    validateVerificationConfig(config.agent);
   } catch (err) {
     if (err instanceof ConfigValidationError) {
       banner.fail();

package/dist/index.js

@@ -840,6 +840,31 @@ function findRemovedConfigKeys(rawConfig) {
   }
   return found;
 }
+function sandboxConfigIssues(args) {
+  const out = [];
+  if (args.image && !/^[A-Za-z0-9]/.test(args.image)) {
+    out.push(`${args.imagePath}: must start with a letter or digit (got "${args.image}") — a leading "-" is read by docker as a flag, not an image`);
+  }
+  if (args.timeoutPath !== undefined) {
+    const ms = args.timeoutMs;
+    if (typeof ms !== "number" || !Number.isInteger(ms) || ms < 1) {
+      out.push(`${args.timeoutPath}: must be an integer >= 1 (got ${ms})`);
+    }
+  }
+  return out;
+}
+function validateVerificationConfig(config) {
+  const v = config.verification;
+  const issues = sandboxConfigIssues({
+    image: v.sandboxImage,
+    imagePath: "verification.sandboxImage"
+  });
+  if (issues.length > 0) {
+    throw new ConfigValidationError(`Invalid verification config:
+  - ${issues.join(`
+  - `)}`, issues);
+  }
+}
 function validateAutoMergeConfig(config) {
   const autoMerge = config.review.autoMerge;
   const issues = [];
@@ -868,18 +893,18 @@ function validateAutoMergeConfig(config) {
     if (!autoMerge.reReviewOnBranchChange) {
       issues.push("review.autoMerge.ciRepair.patch.enabled: needs review.autoMerge.reReviewOnBranchChange — without it a machine-authored repair could merge with nothing having reviewed its diff");
     }
-    if (patch.sandboxImage && !/^[A-Za-z0-9]/.test(patch.sandboxImage)) {
-      issues.push(`review.autoMerge.ciRepair.patch.sandboxImage: must start with a letter or digit (got "${patch.sandboxImage}") — a leading "-" is read by docker as a flag, not an image`);
-    }
+    issues.push(...sandboxConfigIssues({
+      image: patch.sandboxImage,
+      timeoutMs: patch.sandboxTimeoutMs,
+      imagePath: "review.autoMerge.ciRepair.patch.sandboxImage",
+      timeoutPath: "review.autoMerge.ciRepair.patch.sandboxTimeoutMs"
+    }));
     if (!Number.isInteger(patch.maxTurns) || patch.maxTurns < 1) {
       issues.push(`review.autoMerge.ciRepair.patch.maxTurns: must be an integer >= 1 (got ${patch.maxTurns})`);
     }
     if (!(patch.maxBudgetUsd > 0)) {
       issues.push(`review.autoMerge.ciRepair.patch.maxBudgetUsd: must be greater than 0 (got ${patch.maxBudgetUsd})`);
     }
-    if (!Number.isInteger(patch.sandboxTimeoutMs) || patch.sandboxTimeoutMs < 1) {
-      issues.push(`review.autoMerge.ciRepair.patch.sandboxTimeoutMs: must be an integer >= 1 (got ${patch.sandboxTimeoutMs})`);
-    }
   }
   const independent = autoMerge.independentReview;
   if (typeof independent?.enabled !== "boolean") {
@@ -2749,6 +2774,7 @@ var init_types2 = __esm(() => {
       devServerBasePort: 4200,
       timeout: 120000,
       testTimeout: 600000,
+      sandboxImage: "",
       failColumn: "To Do"
     },
     review: {
@@ -5232,7 +5258,8 @@ import {
   reportFindings,
   runFormatFix,
   runVerification,
-  teardownWorktree
+  teardownWorktree,
+  verificationSandbox
 } from "@gethmy/harness";
 function formatTokenCount(tokens) {
   if (tokens >= 1e6)
@@ -5274,7 +5301,7 @@ async function runCompletion(client, card, branchName, worktreePath, config, wor
     revertWarnings: []
   };
   if (config.verification.enabled && config.verification.lint) {
-    runFormatFix(worktreePath, config.verification.timeout, workerId);
+    await runFormatFix(worktreePath, config.verification.timeout, workerId, verificationSandbox(config));
   }
   commitUncommittedChanges(worktreePath, card);
   const hasCommits = checkHasCommits(worktreePath, config.worktree.baseBranch, runBaselineSha);
@@ -9673,6 +9700,7 @@ import {
   spawnInGroup as spawnInGroup4,
   teardownWorktree as teardownWorktree2,
   terminateGroup as terminateGroup3,
+  verificationSandbox as verificationSandbox2,
   WorktreeBaseError
 } from "@gethmy/harness";
 function sdkDraftLogLine(ev) {
@@ -10997,7 +11025,8 @@ ${prompt}`;
         build: {
           worktreePath,
           buildTimeout: this.config.verification.timeout,
-          lintTimeout: this.config.verification.timeout
+          lintTimeout: this.config.verification.timeout,
+          sandbox: verificationSandbox2(this.config)
         },
         artifact: {
           worktreePath,
@@ -14580,6 +14609,7 @@ async function main() {
     validateBudgetConfig(config.agent);
     validateSweepConfig(config.agent);
     validateRankingConfig(config.agent);
+    validateVerificationConfig(config.agent);
   } catch (err) {
     if (err instanceof ConfigValidationError) {
       banner.fail();

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@gethmy/agent",
-  "version": "1.32.0",
+  "version": "1.33.0",
   "description": "Push-based agent daemon for Harmony — picks up assigned cards, builds them in isolated git worktrees, and opens PRs. It runs where you put it.",
   "type": "module",
   "main": "dist/index.js",
@@ -45,7 +45,7 @@
   },
   "dependencies": {
     "@anthropic-ai/claude-agent-sdk": "^0.3.178",
-    "@gethmy/harness": "1.5.0",
+    "@gethmy/harness": "1.6.0",
     "@gethmy/mcp": "3.2.0",
     "@supabase/supabase-js": "2.95.3"
   },