lastlight 0.15.0 → 0.16.1

package/dist/sandbox/docker.d.ts

@@ -1,180 +0,0 @@
-/**
- * Docker sandbox manager — runs agent tasks in isolated sibling containers.
- *
- * The sandbox image bakes immutable assets at /app/ (skills, agent-context,
- * MCP server, MCP config template). Its entrypoint wires them into the
- * workspace after volumes are mounted — no post-run docker exec needed.
- *
- * Volumes mounted at runtime:
- * - Shared data volume (/data): secrets (app.pem), session logs
- * - Task worktree (/home/agent/workspace): per-task git repo
- */
-export interface SandboxConfig {
-    /** Docker image for sandbox containers (default: lastlight-sandbox:latest) */
-    imageName: string;
-    /** Env vars to inject into the sandbox */
-    env: Record<string, string>;
-    /** Timeout in seconds (default: 1800 = 30 min) */
-    timeoutSeconds?: number;
-    /**
-     * Per-sandbox memory cap, in Docker's `--memory` format (e.g. "2g", "512m").
-     * Default: 2g — enough headroom for `npm install`, vite build, and an
-     * agent loop, but small enough that several concurrent sandboxes can't
-     * exhaust a 16 GB host. Override via the `SANDBOX_MEMORY_LIMIT` env var.
-     */
-    memoryLimit?: string;
-    /**
-     * Docker network to attach the sandbox container to. Defaults to
-     * `LASTLIGHT_SANDBOX_NETWORK` env var or `lastlight_sandbox-egress`
-     * (the `internal: true` network declared in docker-compose.yml). The
-     * sandbox can only reach the public internet through the nginx-egress
-     * firewall sidecars on this network.
-     */
-    network?: string;
-    /**
-     * IP of the coredns sidecar this sandbox uses as its DNS resolver.
-     * `coredns-strict` (172.30.0.10) returns the strict-nginx IP for
-     * allowlisted hosts and NXDOMAIN for everything else; `coredns-open`
-     * (172.30.0.11) returns the open-nginx IP for any hostname (minus a
-     * small SSRF deny set). Passed to `docker run` as `--dns <ip>`.
-     *
-     * No env vars are injected — the sandbox has no idea a firewall is
-     * in front of it. Works for every SDK regardless of whether it
-     * honours HTTP_PROXY / HTTPS_PROXY.
-     */
-    dnsIp?: string;
-}
-export interface SandboxInfo {
-    containerId: string;
-    containerName: string;
-    worktreePath: string;
-}
-/**
- * How `/home/agent/workspace` is materialized inside the sandbox container.
- *
- * - `bind`: classic host-path bind mount. Only safe when the host filesystem
- *   path is identical from the harness's view and the docker daemon's view —
- *   i.e. local dev where the harness runs directly on the host, or any
- *   deployment where `SANDBOX_DATA_VOLUME` is a real host path.
- * - `volume-subpath`: mount a subpath of a named docker volume. Required
- *   when the harness runs inside a container that holds the data dir via a
- *   named volume (the standard docker-compose setup). A bare bind would
- *   resolve `/app/data/sandboxes/<id>` against the host's empty bare-FS
- *   `/app/data/...` rather than the named volume's `_data/sandboxes/<id>`,
- *   producing two divergent trees and breaking skill staging.
- */
-export type WorkspaceMount = {
-    type: "bind";
-    hostPath: string;
-} | {
-    type: "volume-subpath";
-    volume: string;
-    subpath: string;
-};
-export declare class DockerSandbox {
-    private config;
-    private activeContainers;
-    constructor(config: SandboxConfig);
-    /**
-     * Create and start a sandbox container for a task.
-     */
-    create(opts: {
-        taskId: string;
-        worktreePath: string;
-        workspaceMount: WorkspaceMount;
-    }): Promise<SandboxInfo>;
-    /**
-     * Wait for the sandbox entrypoint to finish setup. The entrypoint touches
-     * `$WORKSPACE/.ready` as its last step before exec'ing the agent shell.
-     */
-    private waitForReady;
-    /**
-     * Run the agentic-pi CLI inside the sandbox with a prompt.
-     *
-     * Streams stdout line-by-line so the caller can react to JSON events
-     * (e.g. capture the top-level `session` record's id) before the agent
-     * has finished. The full stdout is also buffered and returned for
-     * post-run parsing of the usage_snapshot rollup.
-     */
-    runAgent(taskId: string, prompt: string, opts?: {
-        model?: string;
-        /**
-         * Pi thinking level: `off | minimal | low | medium | high | xhigh`.
-         * Validated against the closed set before being shell-interpolated.
-         */
-        thinking?: string;
-        /** agentic-pi GitHub profile: `read | issues-write | review-write | repo-write`. */
-        profile?: string;
-        /**
-         * Env forwarded INTO the sandboxed run via repeated `--sandbox-env`
-         * flags. Used to inject git identity. Keys / values are charset-asserted
-         * before shell interpolation.
-         */
-        sandboxEnv?: Record<string, string>;
-        /**
-         * Working directory for the agent process inside the container.
-         * Defaults to WORKSPACE_DIR (the workspace root). When the harness
-         * pre-cloned the target repo, the executor passes
-         * `<WORKSPACE_DIR>/<repo>` so the agent starts inside the checked-out
-         * tree. The path is asserted against an allowlist before being passed
-         * to `docker exec -w` to keep it shell-safe.
-         */
-        agentCwd?: string;
-        /**
-         * Enable agentic-pi's web-search extension. When false (or omitted),
-         * `--no-web-search` is appended to suppress auto-enable. When true,
-         * the flag is omitted and agentic-pi auto-detects the provider from
-         * whichever `*_API_KEY` env var the container received.
-         */
-        webSearch?: boolean;
-        /** Force a specific web-search provider. Validated against a closed set. */
-        webSearchProvider?: "tavily" | "brave" | "exa";
-        /**
-         * Per-phase skill directories to load, as absolute in-container paths
-         * under WORKSPACE_DIR (e.g. `/home/agent/workspace/.lastlight-skills/
-         * <phase>/<skill>`). Each becomes a repeated `--skill <dir>` flag.
-         * Charset/prefix-asserted before shell interpolation.
-         */
-        skillDirs?: string[];
-        /** Called for each newline-terminated stdout line as it arrives. */
-        onLine?: (line: string) => void;
-    }): Promise<void>;
-    /**
-     * Run a deterministic shell command inside an already-provisioned sandbox
-     * container and return its exit code + captured output. This is the
-     * non-agent sibling of {@link runAgent}: same `docker exec --user agent -w
-     * <workdir> … sh -c <cmd>` machinery, but it captures a bounded stdout tail
-     * (runAgent discards stdout) and RESOLVES with the exit code instead of
-     * rejecting on non-zero — the caller decides success/failure.
-     *
-     * Powers `type: bash` / `type: script` workflow phases (and the in-sandbox
-     * `generic_loop.until_bash` check). `command` is passed as a single argv slot
-     * to `sh -c`, so it is NOT re-parsed by the host shell — it is the script we
-     * intend to run. Env is forwarded via `docker exec -e KEY=VALUE` (argv, not
-     * shell-interpolated); keys are charset-asserted defensively.
-     */
-    runCommand(taskId: string, command: string, opts?: {
-        /**
-         * Working directory inside the container. Defaults to WORKSPACE_DIR.
-         * Asserted against the workspace-root allowlist (same guard as runAgent).
-         */
-        cwd?: string;
-        /** Env forwarded into the command via `docker exec -e`. */
-        sandboxEnv?: Record<string, string>;
-        /** Per-command timeout in seconds (default: the sandbox config timeout). */
-        timeoutSeconds?: number;
-        /** Called for each newline-terminated stdout line as it arrives. */
-        onLine?: (line: string) => void;
-    }): Promise<{
-        exitCode: number;
-        stdout: string;
-        stderr: string;
-        timedOut: boolean;
-    }>;
-    /**
-     * Remove a sandbox container.
-     */
-    destroy(taskId: string): Promise<void>;
-    destroyAll(): Promise<void>;
-    private resolveGitMounts;
-}