lastlight 0.15.0 → 0.16.1

package/dist/sandbox/index.js

@@ -1,332 +0,0 @@
-import { execFileSync } from "child_process";
-import { existsSync, mkdirSync, readFileSync, rmSync, writeFileSync } from "fs";
-import { isAbsolute, join, relative, resolve, sep } from "path";
-import { DockerSandbox } from "./docker.js";
-import { SANDBOX_IMAGE, isSandboxAvailable } from "./images.js";
-export { DockerSandbox } from "./docker.js";
-export { SANDBOX_IMAGE, SANDBOX_IMAGE_QA, isSandboxAvailable, qaImageAvailable, } from "./images.js";
-/**
- * Clean up orphaned sandbox containers from previous runs.
- * Called on startup to remove containers that survived a harness restart.
- */
-export function cleanupOrphanedSandboxes() {
-    try {
-        const out = execFileSync("docker", [
-            "ps", "-q", "--filter", "name=lastlight-sandbox",
-        ], { encoding: "utf-8", timeout: 5000 });
-        const ids = out.trim().split("\n").filter(Boolean);
-        if (ids.length > 0) {
-            console.log(`[sandbox] Cleaning up ${ids.length} orphaned sandbox container(s)`);
-            execFileSync("docker", ["rm", "-f", ...ids], { stdio: "ignore", timeout: 15000 });
-        }
-    }
-    catch {
-        // Docker not available or no containers — fine
-    }
-}
-/** Cached check — only probe Docker once per process */
-let _sandboxAvailable = null;
-export function sandboxAvailable() {
-    if (_sandboxAvailable === null) {
-        _sandboxAvailable = isSandboxAvailable();
-        if (_sandboxAvailable) {
-            console.log(`[sandbox] Docker sandbox available (image: ${SANDBOX_IMAGE})`);
-        }
-        else {
-            console.log(`[sandbox] Docker not available — running agents directly`);
-        }
-    }
-    return _sandboxAvailable;
-}
-function isWithinDir(parent, child) {
-    return child === parent || child.startsWith(`${parent}${sep}`);
-}
-/**
- * Set up the per-task worktree directory (mkdir + optional pre-clone) without
- * touching Docker. Used by the non-docker sandbox modes (gondolin / none) where
- * agentic-pi runs in-process or in a VM rather than a container, but still
- * wants a per-task workspace cloned from the target branch.
- */
-export function setupTaskWorktree(opts) {
-    const sandboxBase = resolve(opts.sandboxDir || join(opts.stateDir, "sandboxes"));
-    mkdirSync(sandboxBase, { recursive: true });
-    const workDir = resolve(sandboxBase, opts.taskId);
-    if (!isWithinDir(sandboxBase, workDir)) {
-        throw new Error(`Invalid taskId path escape attempt: ${opts.taskId}`);
-    }
-    mkdirSync(workDir, { recursive: true });
-    if (opts.prePopulate) {
-        prePopulateWorkspace(workDir, opts.prePopulate);
-    }
-    return workDir;
-}
-/**
- * Create a sandbox for a task. Returns the sandbox and a cleanup function.
- * If Docker is not available, returns null (caller should fall back to direct execution).
- */
-export async function createTaskSandbox(opts) {
-    if (!sandboxAvailable())
-        return null;
-    const sandboxBase = resolve(opts.sandboxDir || join(opts.stateDir, "sandboxes"));
-    mkdirSync(sandboxBase, { recursive: true });
-    const workDir = resolve(sandboxBase, opts.taskId);
-    if (!isWithinDir(sandboxBase, workDir)) {
-        throw new Error(`Invalid taskId path escape attempt: ${opts.taskId}`);
-    }
-    mkdirSync(workDir, { recursive: true });
-    if (opts.prePopulate) {
-        prePopulateWorkspace(workDir, opts.prePopulate);
-    }
-    const sandbox = new DockerSandbox({
-        imageName: opts.imageName || SANDBOX_IMAGE,
-        env: opts.env || {},
-        memoryLimit: process.env.SANDBOX_MEMORY_LIMIT || undefined,
-        dnsIp: opts.dnsIp,
-    });
-    try {
-        await sandbox.create({
-            taskId: opts.taskId,
-            worktreePath: workDir,
-            workspaceMount: resolveWorkspaceMount(opts.stateDir, workDir),
-        });
-        return {
-            sandbox,
-            workDir,
-            cleanup: () => sandbox.destroy(opts.taskId),
-        };
-    }
-    catch (err) {
-        console.warn(`[sandbox] Failed to create sandbox: ${err.message}`);
-        return null;
-    }
-}
-/**
- * Decide how the sandbox container should mount `/home/agent/workspace`.
- *
- * The harness writes the per-task workspace to `workDir`, which is always
- * under `stateDir` (`sandboxes/<taskId>/`). In production, `stateDir` is
- * served by a named docker volume mounted into the harness container. A
- * plain `-v workDir:/home/agent/workspace` bind makes the daemon resolve
- * `workDir` against the *host* filesystem, where the named volume's
- * content is not visible — docker silently creates an empty dir at that
- * host path and mounts it, so the sandbox sees an empty workspace and the
- * skills the harness staged are never reachable.
- *
- * In volume mode we ask docker for a `volume-subpath` mount instead, so
- * the sandbox sees exactly the harness's view. In path mode (local dev,
- * or any deployment where SANDBOX_DATA_VOLUME is a host path) a normal
- * bind is correct because both views point at the same FS path.
- *
- * Edge case: if `opts.sandboxDir` was overridden to live outside `stateDir`,
- * we can't carve a volume-subpath out of the data volume — fall back to
- * a bind mount. That keeps the no-data-volume dev path working; the
- * named-volume + custom-sandboxDir combination isn't currently used.
- */
-function resolveWorkspaceMount(stateDir, workDir) {
-    const dataVolumeRaw = process.env.SANDBOX_DATA_VOLUME || "lastlight_agent-data";
-    if (isPathLike(dataVolumeRaw)) {
-        return { type: "bind", hostPath: workDir };
-    }
-    const rel = relative(resolve(stateDir), workDir);
-    if (rel === "" || rel.startsWith("..") || isAbsolute(rel)) {
-        return { type: "bind", hostPath: workDir };
-    }
-    return { type: "volume-subpath", volume: dataVolumeRaw, subpath: rel };
-}
-function isPathLike(value) {
-    return value.startsWith("/") ||
-        value.startsWith("./") ||
-        value.startsWith("../") ||
-        value.startsWith("~");
-}
-/** Marker file (at the workspace root, outside the repo so `git clean` can't
- * touch it) recording which run last provisioned this workspace. */
-const RUN_MARKER = ".lastlight-run";
-/**
- * Clone the repo into `<workDir>/<repo>` at the given branch.
- *
- * Cases:
- * - **Fresh dir** (no `.git`): clone. `--depth 1 --single-branch` for
- *   read-only workflows (`pre.shallow`), `--depth 50` otherwise. For
- *   `recreateFromBase` the branch is cut from the default branch directly
- *   (never `clone --branch <feature>`).
- * - **Same run revisiting the workspace** (`.git` exists, run marker matches
- *   `pre.runId`): preserve — this is a later phase of the same run reading
- *   what an earlier phase wrote (architect's `plan.md`, the reviewer's
- *   checkout). No git ops.
- * - **A fresh run reusing an old per-target workspace** (`.git` exists, marker
- *   differs/absent):
- *   - default (pr-review / pr-fix): fetch + hard-reset to the remote branch +
- *     `git clean` that **keeps `node_modules`** so the next `npm install` is
- *     incremental (the re-review fast path from issue #107).
- *   - `recreateFromBase` (build): delete the stale checkout and re-clone from
- *     the default branch — a re-triggered incomplete build starts again off
- *     current `main` (issue #153).
- */
-export { prePopulateWorkspace as __prePopulateWorkspaceForTest };
-export function prePopulateWorkspace(workDir, pre) {
-    // Token shape is asserted in src/engine/git-auth.ts before we get here,
-    // but re-check the narrow set here too — defense in depth, this string
-    // crosses a process boundary into git's command line.
-    if (!/^[A-Za-z0-9_-]+$/.test(pre.token)) {
-        throw new Error("prePopulate: refusing to embed a token outside [A-Za-z0-9_-]");
-    }
-    const url = `https://x-access-token:${pre.token}@github.com/${pre.owner}/${pre.repo}.git`;
-    // The agent's cwd is `workDir` (the workspace). The harness writes
-    // `AGENTS.md` there, so cloning into the workDir root would collide.
-    // Instead, clone into a `<repo>/` subdirectory — keeps the layout
-    // consistent regardless of whether the harness or the agent did the
-    // clone, and leaves room for `.lastlight/issue-N/` scratch space at
-    // the workspace root.
-    const repoDir = join(workDir, pre.repo);
-    const markerPath = join(workDir, RUN_MARKER);
-    const scrub = (s) => typeof s === "string" ? s.replaceAll(pre.token, "[REDACTED-TOKEN]") : "";
-    // Repo dir might already exist — from a later phase of the same run, or a
-    // *different* run reusing a stable per-target workspace (issue #107).
-    if (existsSync(join(repoDir, ".git"))) {
-        const lastRun = readMarker(markerPath);
-        // Same run (or a caller that doesn't track runs): preserve the workspace
-        // exactly — earlier phases may have written uncommitted scratch here.
-        if (!pre.runId || lastRun === pre.runId) {
-            console.log(`[sandbox] Pre-clone skipped: ${repoDir} already a git repo (same run).`);
-            return;
-        }
-        if (pre.recreateFromBase) {
-            // build (#153): a prior incomplete run left a checkout on a possibly
-            // stale feature branch. Discard it and re-clone from the default branch
-            // (below) so the re-triggered build starts again off current `main`.
-            try {
-                rmSync(repoDir, { recursive: true, force: true });
-                console.log(`[sandbox] Recreating ${repoDir} from the default branch ` +
-                    `(discarded stale workspace from run ${lastRun ?? "unknown"}).`);
-            }
-            catch (err) {
-                console.warn(`[sandbox] Failed to remove stale workspace ${repoDir} ` +
-                    `(${scrub(err?.message)}); attempting a fresh clone anyway.`);
-            }
-            // fall through to the recreate-from-base clone below.
-        }
-        else {
-            // Different run reusing this PR's workspace — refresh in place.
-            refreshExistingClone(repoDir, markerPath, pre);
-            return;
-        }
-    }
-    const start = Date.now();
-    const depth = pre.shallow ? "1" : "50";
-    const shallowArgs = pre.shallow ? ["--single-branch"] : [];
-    // Recreate-from-base workflows (build) always cut their branch from the
-    // default branch — never `clone --branch <feature>`, which would resurrect a
-    // stale *pushed* feature branch from an earlier incomplete run (#153).
-    if (pre.recreateFromBase) {
-        cloneDefaultAndCreateBranch(repoDir, url, depth, shallowArgs, pre, markerPath, start, scrub);
-        return;
-    }
-    try {
-        execFileSync("git", ["clone", "--branch", pre.branch, "--depth", depth, ...shallowArgs, url, repoDir], { stdio: "pipe", timeout: 120_000 });
-        writeMarker(markerPath, pre.runId);
-        const ms = Date.now() - start;
-        console.log(`[sandbox] Pre-cloned ${pre.owner}/${pre.repo}@${pre.branch} into ${repoDir} ` +
-            `(depth ${depth}, ${ms}ms)`);
-    }
-    catch (err) {
-        const firstError = scrub(err?.message) || scrub(err?.stderr?.toString?.()) || "unknown error";
-        const looksLikeMissingBranch = /Remote branch .* not found|not found in upstream/i.test(firstError);
-        if (looksLikeMissingBranch) {
-            // Build-style workflows create a brand-new branch (e.g. `lastlight/N-slug`)
-            // and push it later. The remote doesn't have it yet at pre-clone time —
-            // clone the default branch, then create the target branch locally so
-            // the agent enters a workspace already on the right branch.
-            cloneDefaultAndCreateBranch(repoDir, url, depth, shallowArgs, pre, markerPath, start, scrub);
-            return;
-        }
-        // Don't kill the run on a failed pre-clone — fall through to an empty
-        // workspace and let the agent clone via the MCP path as a backup.
-        //
-        // CRITICAL: execFileSync errors echo the failing command line, which
-        // includes the auth URL `https://x-access-token:<token>@github.com/…`.
-        // The token is scrubbed above before anything reaches the logs.
-        console.warn(`[sandbox] Pre-clone of ${pre.owner}/${pre.repo}@${pre.branch} failed (${firstError}). ` +
-            `Agent will need to clone via MCP.`);
-    }
-}
-/**
- * Clone the repo's default branch into `repoDir` and create `pre.branch`
- * locally off it (`checkout -B`), then stamp the run marker. Shared by two
- * paths: the feature branch not existing on the remote yet (build-style first
- * run) and a recreate-from-base workflow deliberately re-cutting its branch
- * from the default (issue #153). Best-effort — on failure it logs a
- * token-scrubbed warning and leaves an empty workspace for the agent's MCP
- * clone fallback.
- */
-function cloneDefaultAndCreateBranch(repoDir, url, depth, shallowArgs, pre, markerPath, start, scrub) {
-    try {
-        execFileSync("git", ["clone", "--depth", depth, ...shallowArgs, url, repoDir], { stdio: "pipe", timeout: 120_000 });
-        execFileSync("git", ["-C", repoDir, "checkout", "-B", pre.branch], { stdio: "pipe", timeout: 30_000 });
-        writeMarker(markerPath, pre.runId);
-        const ms = Date.now() - start;
-        console.log(`[sandbox] Pre-cloned ${pre.owner}/${pre.repo} (default branch) into ${repoDir} ` +
-            `and created local branch ${pre.branch} (${ms}ms)`);
-    }
-    catch (err) {
-        const reason = scrub(err?.message) || scrub(err?.stderr?.toString?.()) || "unknown error";
-        console.warn(`[sandbox] Default-branch clone of ${pre.owner}/${pre.repo} failed (${reason}). ` +
-            `Agent will need to clone via MCP.`);
-    }
-}
-function readMarker(markerPath) {
-    try {
-        return readFileSync(markerPath, "utf-8").trim() || null;
-    }
-    catch {
-        return null;
-    }
-}
-function writeMarker(markerPath, runId) {
-    if (!runId)
-        return;
-    try {
-        writeFileSync(markerPath, runId);
-    }
-    catch {
-        // Best-effort — a missing marker just means the next reuse refreshes
-        // (the safe direction), never a wrong-preserve.
-    }
-}
-/**
- * Refresh a reused per-PR workspace in place: fetch the branch, hard-reset the
- * checkout to it, and `git clean` away stale tracked/untracked build output —
- * but **keep `node_modules`** (and any nested ones) so the next install is
- * incremental against a warm tree. The shared package cache (docker backend)
- * lives on a separate mount and is untouched by `git clean`.
- *
- * On any failure we leave the workspace as-is and do NOT advance the marker,
- * so the next run retries the refresh rather than reviewing a half-reset tree.
- */
-function refreshExistingClone(repoDir, markerPath, pre) {
-    const scrub = (s) => typeof s === "string" ? s.replaceAll(pre.token, "[REDACTED-TOKEN]") : "";
-    const url = `https://x-access-token:${pre.token}@github.com/${pre.owner}/${pre.repo}.git`;
-    const depth = pre.shallow ? ["--depth", "1"] : ["--depth", "50"];
-    const start = Date.now();
-    try {
-        // Fetch the branch from the authenticated URL directly so we don't depend
-        // on the stored remote (and never persist the token into .git/config).
-        execFileSync("git", ["-C", repoDir, "fetch", ...depth, url, pre.branch], { stdio: "pipe", timeout: 120_000 });
-        execFileSync("git", ["-C", repoDir, "checkout", "-B", pre.branch, "FETCH_HEAD"], { stdio: "pipe", timeout: 30_000 });
-        execFileSync("git", ["-C", repoDir, "reset", "--hard", "FETCH_HEAD"], { stdio: "pipe", timeout: 30_000 });
-        // -x removes ignored files (stale dist/, .turbo, coverage, …); -e keeps the
-        // dependency trees warm so install is incremental. `node_modules` with no
-        // leading slash matches at any depth (monorepos / workspaces).
-        execFileSync("git", ["-C", repoDir, "clean", "-fdx", "-e", "node_modules"], { stdio: "pipe", timeout: 60_000 });
-        writeMarker(markerPath, pre.runId);
-        const ms = Date.now() - start;
-        console.log(`[sandbox] Refreshed reused workspace ${repoDir} → ${pre.branch} ` +
-            `(fetch+reset+clean, node_modules kept, ${ms}ms)`);
-    }
-    catch (err) {
-        const reason = scrub(err?.message) || scrub(err?.stderr?.toString?.()) || "unknown error";
-        console.warn(`[sandbox] Refresh of reused workspace ${repoDir} failed (${reason}). ` +
-            `Leaving it untouched; agent can re-fetch via MCP.`);
-    }
-}
-//# sourceMappingURL=index.js.map

package/dist/sandbox/index.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/sandbox/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,YAAY,EAAE,MAAM,eAAe,CAAC;AAC7C,OAAO,EAAE,UAAU,EAAE,SAAS,EAAE,YAAY,EAAE,MAAM,EAAE,aAAa,EAAE,MAAM,IAAI,CAAC;AAChF,OAAO,EAAE,UAAU,EAAE,IAAI,EAAE,QAAQ,EAAE,OAAO,EAAE,GAAG,EAAE,MAAM,MAAM,CAAC;AAChE,OAAO,EAAE,aAAa,EAAuB,MAAM,aAAa,CAAC;AACjE,OAAO,EAAE,aAAa,EAAE,kBAAkB,EAAE,MAAM,aAAa,CAAC;AAEhE,OAAO,EAAE,aAAa,EAAE,MAAM,aAAa,CAAC;AAC5C,OAAO,EACL,aAAa,EACb,gBAAgB,EAChB,kBAAkB,EAClB,gBAAgB,GACjB,MAAM,aAAa,CAAC;AAErB;;;GAGG;AACH,MAAM,UAAU,wBAAwB;IACtC,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,YAAY,CAAC,QAAQ,EAAE;YACjC,IAAI,EAAE,IAAI,EAAE,UAAU,EAAE,wBAAwB;SACjD,EAAE,EAAE,QAAQ,EAAE,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC,CAAC;QAEzC,MAAM,GAAG,GAAG,GAAG,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;QACnD,IAAI,GAAG,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YACnB,OAAO,CAAC,GAAG,CAAC,yBAAyB,GAAG,CAAC,MAAM,gCAAgC,CAAC,CAAC;YACjF,YAAY,CAAC,QAAQ,EAAE,CAAC,IAAI,EAAE,IAAI,EAAE,GAAG,GAAG,CAAC,EAAE,EAAE,KAAK,EAAE,QAAQ,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC,CAAC;QACpF,CAAC;IACH,CAAC;IAAC,MAAM,CAAC;QACP,+CAA+C;IACjD,CAAC;AACH,CAAC;AAED,wDAAwD;AACxD,IAAI,iBAAiB,GAAmB,IAAI,CAAC;AAE7C,MAAM,UAAU,gBAAgB;IAC9B,IAAI,iBAAiB,KAAK,IAAI,EAAE,CAAC;QAC/B,iBAAiB,GAAG,kBAAkB,EAAE,CAAC;QACzC,IAAI,iBAAiB,EAAE,CAAC;YACtB,OAAO,CAAC,GAAG,CAAC,8CAA8C,aAAa,GAAG,CAAC,CAAC;QAC9E,CAAC;aAAM,CAAC;YACN,OAAO,CAAC,GAAG,CAAC,0DAA0D,CAAC,CAAC;QAC1E,CAAC;IACH,CAAC;IACD,OAAO,iBAAiB,CAAC;AAC3B,CAAC;AAED,SAAS,WAAW,CAAC,MAAc,EAAE,KAAa;IAChD,OAAO,KAAK,KAAK,MAAM,IAAI,KAAK,CAAC,UAAU,CAAC,GAAG,MAAM,GAAG,GAAG,EAAE,CAAC,CAAC;AACjE,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,iBAAiB,CAAC,IAejC;IACC,MAAM,WAAW,GAAG,OAAO,CAAC,IAAI,CAAC,UAAU,IAAI,IAAI,CAAC,IAAI,CAAC,QAAQ,EAAE,WAAW,CAAC,CAAC,CAAC;IACjF,SAAS,CAAC,WAAW,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IAE5C,MAAM,OAAO,GAAG,OAAO,CAAC,WAAW,EAAE,IAAI,CAAC,MAAM,CAAC,CAAC;IAClD,IAAI,CAAC,WAAW,CAAC,WAAW,EAAE,OAAO,CAAC,EAAE,CAAC;QACvC,MAAM,IAAI,KAAK,CAAC,uCAAuC,IAAI,CAAC,MAAM,EAAE,CAAC,CAAC;IACxE,CAAC;IACD,SAAS,CAAC,OAAO,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IAExC,IAAI,IAAI,CAAC,WAAW,EAAE,CAAC;QACrB,oBAAoB,CAAC,OAAO,EAAE,IAAI,CAAC,WAAW,CAAC,CAAC;IAClD,CAAC;IACD,OAAO,OAAO,CAAC;AACjB,CAAC;AAED;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,iBAAiB,CAAC,IAwCvC;IACC,IAAI,CAAC,gBAAgB,EAAE;QAAE,OAAO,IAAI,CAAC;IAErC,MAAM,WAAW,GAAG,OAAO,CAAC,IAAI,CAAC,UAAU,IAAI,IAAI,CAAC,IAAI,CAAC,QAAQ,EAAE,WAAW,CAAC,CAAC,CAAC;IACjF,SAAS,CAAC,WAAW,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IAE5C,MAAM,OAAO,GAAG,OAAO,CAAC,WAAW,EAAE,IAAI,CAAC,MAAM,CAAC,CAAC;IAClD,IAAI,CAAC,WAAW,CAAC,WAAW,EAAE,OAAO,CAAC,EAAE,CAAC;QACvC,MAAM,IAAI,KAAK,CAAC,uCAAuC,IAAI,CAAC,MAAM,EAAE,CAAC,CAAC;IACxE,CAAC;IAED,SAAS,CAAC,OAAO,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IAExC,IAAI,IAAI,CAAC,WAAW,EAAE,CAAC;QACrB,oBAAoB,CAAC,OAAO,EAAE,IAAI,CAAC,WAAW,CAAC,CAAC;IAClD,CAAC;IAED,MAAM,OAAO,GAAG,IAAI,aAAa,CAAC;QAChC,SAAS,EAAE,IAAI,CAAC,SAAS,IAAI,aAAa;QAC1C,GAAG,EAAE,IAAI,CAAC,GAAG,IAAI,EAAE;QACnB,WAAW,EAAE,OAAO,CAAC,GAAG,CAAC,oBAAoB,IAAI,SAAS;QAC1D,KAAK,EAAE,IAAI,CAAC,KAAK;KAClB,CAAC,CAAC;IAEH,IAAI,CAAC;QACH,MAAM,OAAO,CAAC,MAAM,CAAC;YACnB,MAAM,EAAE,IAAI,CAAC,MAAM;YACnB,YAAY,EAAE,OAAO;YACrB,cAAc,EAAE,qBAAqB,CAAC,IAAI,CAAC,QAAQ,EAAE,OAAO,CAAC;SAC9D,CAAC,CAAC;QACH,OAAO;YACL,OAAO;YACP,OAAO;YACP,OAAO,EAAE,GAAG,EAAE,CAAC,OAAO,CAAC,OAAO,CAAC,IAAI,CAAC,MAAM,CAAC;SAC5C,CAAC;IACJ,CAAC;IAAC,OAAO,GAAQ,EAAE,CAAC;QAClB,OAAO,CAAC,IAAI,CAAC,uCAAuC,GAAG,CAAC,OAAO,EAAE,CAAC,CAAC;QACnE,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC;AAED;;;;;;;;;;;;;;;;;;;;;GAqBG;AACH,SAAS,qBAAqB,CAC5B,QAAgB,EAChB,OAAe;IAEf,MAAM,aAAa,GAAG,OAAO,CAAC,GAAG,CAAC,mBAAmB,IAAI,sBAAsB,CAAC;IAChF,IAAI,UAAU,CAAC,aAAa,CAAC,EAAE,CAAC;QAC9B,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,QAAQ,EAAE,OAAO,EAAE,CAAC;IAC7C,CAAC;IACD,MAAM,GAAG,GAAG,QAAQ,CAAC,OAAO,CAAC,QAAQ,CAAC,EAAE,OAAO,CAAC,CAAC;IACjD,IAAI,GAAG,KAAK,EAAE,IAAI,GAAG,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,UAAU,CAAC,GAAG,CAAC,EAAE,CAAC;QAC1D,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,QAAQ,EAAE,OAAO,EAAE,CAAC;IAC7C,CAAC;IACD,OAAO,EAAE,IAAI,EAAE,gBAAgB,EAAE,MAAM,EAAE,aAAa,EAAE,OAAO,EAAE,GAAG,EAAE,CAAC;AACzE,CAAC;AAED,SAAS,UAAU,CAAC,KAAa;IAC/B,OAAO,KAAK,CAAC,UAAU,CAAC,GAAG,CAAC;QAC1B,KAAK,CAAC,UAAU,CAAC,IAAI,CAAC;QACtB,KAAK,CAAC,UAAU,CAAC,KAAK,CAAC;QACvB,KAAK,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC;AAC1B,CAAC;AAED;oEACoE;AACpE,MAAM,UAAU,GAAG,gBAAgB,CAAC;AAYpC;;;;;;;;;;;;;;;;;;;;GAoBG;AACH,OAAO,EAAE,oBAAoB,IAAI,6BAA6B,EAAE,CAAC;AAEjE,MAAM,UAAU,oBAAoB,CAClC,OAAe,EACf,GAAgB;IAEhB,wEAAwE;IACxE,uEAAuE;IACvE,sDAAsD;IACtD,IAAI,CAAC,kBAAkB,CAAC,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,EAAE,CAAC;QACxC,MAAM,IAAI,KAAK,CAAC,8DAA8D,CAAC,CAAC;IAClF,CAAC;IACD,MAAM,GAAG,GAAG,0BAA0B,GAAG,CAAC,KAAK,eAAe,GAAG,CAAC,KAAK,IAAI,GAAG,CAAC,IAAI,MAAM,CAAC;IAC1F,mEAAmE;IACnE,qEAAqE;IACrE,kEAAkE;IAClE,oEAAoE;IACpE,oEAAoE;IACpE,sBAAsB;IACtB,MAAM,OAAO,GAAG,IAAI,CAAC,OAAO,EAAE,GAAG,CAAC,IAAI,CAAC,CAAC;IACxC,MAAM,UAAU,GAAG,IAAI,CAAC,OAAO,EAAE,UAAU,CAAC,CAAC;IAC7C,MAAM,KAAK,GAAG,CAAC,CAAU,EAAU,EAAE,CACnC,OAAO,CAAC,KAAK,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,UAAU,CAAC,GAAG,CAAC,KAAK,EAAE,kBAAkB,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;IAC3E,0EAA0E;IAC1E,sEAAsE;IACtE,IAAI,UAAU,CAAC,IAAI,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC,EAAE,CAAC;QACtC,MAAM,OAAO,GAAG,UAAU,CAAC,UAAU,CAAC,CAAC;QACvC,yEAAyE;QACzE,sEAAsE;QACtE,IAAI,CAAC,GAAG,CAAC,KAAK,IAAI,OAAO,KAAK,GAAG,CAAC,KAAK,EAAE,CAAC;YACxC,OAAO,CAAC,GAAG,CACT,gCAAgC,OAAO,iCAAiC,CACzE,CAAC;YACF,OAAO;QACT,CAAC;QACD,IAAI,GAAG,CAAC,gBAAgB,EAAE,CAAC;YACzB,qEAAqE;YACrE,wEAAwE;YACxE,qEAAqE;YACrE,IAAI,CAAC;gBACH,MAAM,CAAC,OAAO,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;gBAClD,OAAO,CAAC,GAAG,CACT,wBAAwB,OAAO,2BAA2B;oBAC1D,uCAAuC,OAAO,IAAI,SAAS,IAAI,CAChE,CAAC;YACJ,CAAC;YAAC,OAAO,GAAQ,EAAE,CAAC;gBAClB,OAAO,CAAC,IAAI,CACV,8CAA8C,OAAO,GAAG;oBACxD,IAAI,KAAK,CAAC,GAAG,EAAE,OAAO,CAAC,qCAAqC,CAC7D,CAAC;YACJ,CAAC;YACD,sDAAsD;QACxD,CAAC;aAAM,CAAC;YACN,gEAAgE;YAChE,oBAAoB,CAAC,OAAO,EAAE,UAAU,EAAE,GAAG,CAAC,CAAC;YAC/C,OAAO;QACT,CAAC;IACH,CAAC;IACD,MAAM,KAAK,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;IACzB,MAAM,KAAK,GAAG,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC;IACvC,MAAM,WAAW,GAAG,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,iBAAiB,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;IAC3D,wEAAwE;IACxE,6EAA6E;IAC7E,uEAAuE;IACvE,IAAI,GAAG,CAAC,gBAAgB,EAAE,CAAC;QACzB,2BAA2B,CAAC,OAAO,EAAE,GAAG,EAAE,KAAK,EAAE,WAAW,EAAE,GAAG,EAAE,UAAU,EAAE,KAAK,EAAE,KAAK,CAAC,CAAC;QAC7F,OAAO;IACT,CAAC;IACD,IAAI,CAAC;QACH,YAAY,CACV,KAAK,EACL,CAAC,OAAO,EAAE,UAAU,EAAE,GAAG,CAAC,MAAM,EAAE,SAAS,EAAE,KAAK,EAAE,GAAG,WAAW,EAAE,GAAG,EAAE,OAAO,CAAC,EACjF,EAAE,KAAK,EAAE,MAAM,EAAE,OAAO,EAAE,OAAO,EAAE,CACpC,CAAC;QACF,WAAW,CAAC,UAAU,EAAE,GAAG,CAAC,KAAK,CAAC,CAAC;QACnC,MAAM,EAAE,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,KAAK,CAAC;QAC9B,OAAO,CAAC,GAAG,CACT,wBAAwB,GAAG,CAAC,KAAK,IAAI,GAAG,CAAC,IAAI,IAAI,GAAG,CAAC,MAAM,SAAS,OAAO,GAAG;YAC9E,UAAU,KAAK,KAAK,EAAE,KAAK,CAC5B,CAAC;IACJ,CAAC;IAAC,OAAO,GAAQ,EAAE,CAAC;QAClB,MAAM,UAAU,GAAG,KAAK,CAAC,GAAG,EAAE,OAAO,CAAC,IAAI,KAAK,CAAC,GAAG,EAAE,MAAM,EAAE,QAAQ,EAAE,EAAE,CAAC,IAAI,eAAe,CAAC;QAC9F,MAAM,sBAAsB,GAAG,mDAAmD,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;QACpG,IAAI,sBAAsB,EAAE,CAAC;YAC3B,4EAA4E;YAC5E,wEAAwE;YACxE,qEAAqE;YACrE,4DAA4D;YAC5D,2BAA2B,CAAC,OAAO,EAAE,GAAG,EAAE,KAAK,EAAE,WAAW,EAAE,GAAG,EAAE,UAAU,EAAE,KAAK,EAAE,KAAK,CAAC,CAAC;YAC7F,OAAO;QACT,CAAC;QACD,sEAAsE;QACtE,kEAAkE;QAClE,EAAE;QACF,qEAAqE;QACrE,uEAAuE;QACvE,gEAAgE;QAChE,OAAO,CAAC,IAAI,CACV,0BAA0B,GAAG,CAAC,KAAK,IAAI,GAAG,CAAC,IAAI,IAAI,GAAG,CAAC,MAAM,YAAY,UAAU,KAAK;YACxF,mCAAmC,CACpC,CAAC;IACJ,CAAC;AACH,CAAC;AAED;;;;;;;;GAQG;AACH,SAAS,2BAA2B,CAClC,OAAe,EACf,GAAW,EACX,KAAa,EACb,WAAqB,EACrB,GAAgB,EAChB,UAAkB,EAClB,KAAa,EACb,KAA6B;IAE7B,IAAI,CAAC;QACH,YAAY,CACV,KAAK,EACL,CAAC,OAAO,EAAE,SAAS,EAAE,KAAK,EAAE,GAAG,WAAW,EAAE,GAAG,EAAE,OAAO,CAAC,EACzD,EAAE,KAAK,EAAE,MAAM,EAAE,OAAO,EAAE,OAAO,EAAE,CACpC,CAAC;QACF,YAAY,CACV,KAAK,EACL,CAAC,IAAI,EAAE,OAAO,EAAE,UAAU,EAAE,IAAI,EAAE,GAAG,CAAC,MAAM,CAAC,EAC7C,EAAE,KAAK,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,CACnC,CAAC;QACF,WAAW,CAAC,UAAU,EAAE,GAAG,CAAC,KAAK,CAAC,CAAC;QACnC,MAAM,EAAE,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,KAAK,CAAC;QAC9B,OAAO,CAAC,GAAG,CACT,wBAAwB,GAAG,CAAC,KAAK,IAAI,GAAG,CAAC,IAAI,0BAA0B,OAAO,GAAG;YACjF,4BAA4B,GAAG,CAAC,MAAM,KAAK,EAAE,KAAK,CACnD,CAAC;IACJ,CAAC;IAAC,OAAO,GAAQ,EAAE,CAAC;QAClB,MAAM,MAAM,GAAG,KAAK,CAAC,GAAG,EAAE,OAAO,CAAC,IAAI,KAAK,CAAC,GAAG,EAAE,MAAM,EAAE,QAAQ,EAAE,EAAE,CAAC,IAAI,eAAe,CAAC;QAC1F,OAAO,CAAC,IAAI,CACV,qCAAqC,GAAG,CAAC,KAAK,IAAI,GAAG,CAAC,IAAI,YAAY,MAAM,KAAK;YACjF,mCAAmC,CACpC,CAAC;IACJ,CAAC;AACH,CAAC;AAED,SAAS,UAAU,CAAC,UAAkB;IACpC,IAAI,CAAC;QACH,OAAO,YAAY,CAAC,UAAU,EAAE,OAAO,CAAC,CAAC,IAAI,EAAE,IAAI,IAAI,CAAC;IAC1D,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC;AAED,SAAS,WAAW,CAAC,UAAkB,EAAE,KAAyB;IAChE,IAAI,CAAC,KAAK;QAAE,OAAO;IACnB,IAAI,CAAC;QACH,aAAa,CAAC,UAAU,EAAE,KAAK,CAAC,CAAC;IACnC,CAAC;IAAC,MAAM,CAAC;QACP,qEAAqE;QACrE,gDAAgD;IAClD,CAAC;AACH,CAAC;AAED;;;;;;;;;GASG;AACH,SAAS,oBAAoB,CAC3B,OAAe,EACf,UAAkB,EAClB,GAAgB;IAEhB,MAAM,KAAK,GAAG,CAAC,CAAU,EAAU,EAAE,CACnC,OAAO,CAAC,KAAK,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,UAAU,CAAC,GAAG,CAAC,KAAK,EAAE,kBAAkB,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;IAC3E,MAAM,GAAG,GAAG,0BAA0B,GAAG,CAAC,KAAK,eAAe,GAAG,CAAC,KAAK,IAAI,GAAG,CAAC,IAAI,MAAM,CAAC;IAC1F,MAAM,KAAK,GAAG,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,SAAS,EAAE,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,SAAS,EAAE,IAAI,CAAC,CAAC;IACjE,MAAM,KAAK,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;IACzB,IAAI,CAAC;QACH,0EAA0E;QAC1E,uEAAuE;QACvE,YAAY,CACV,KAAK,EACL,CAAC,IAAI,EAAE,OAAO,EAAE,OAAO,EAAE,GAAG,KAAK,EAAE,GAAG,EAAE,GAAG,CAAC,MAAM,CAAC,EACnD,EAAE,KAAK,EAAE,MAAM,EAAE,OAAO,EAAE,OAAO,EAAE,CACpC,CAAC;QACF,YAAY,CACV,KAAK,EACL,CAAC,IAAI,EAAE,OAAO,EAAE,UAAU,EAAE,IAAI,EAAE,GAAG,CAAC,MAAM,EAAE,YAAY,CAAC,EAC3D,EAAE,KAAK,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,CACnC,CAAC;QACF,YAAY,CACV,KAAK,EACL,CAAC,IAAI,EAAE,OAAO,EAAE,OAAO,EAAE,QAAQ,EAAE,YAAY,CAAC,EAChD,EAAE,KAAK,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,CACnC,CAAC;QACF,4EAA4E;QAC5E,0EAA0E;QAC1E,+DAA+D;QAC/D,YAAY,CACV,KAAK,EACL,CAAC,IAAI,EAAE,OAAO,EAAE,OAAO,EAAE,MAAM,EAAE,IAAI,EAAE,cAAc,CAAC,EACtD,EAAE,KAAK,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,CACnC,CAAC;QACF,WAAW,CAAC,UAAU,EAAE,GAAG,CAAC,KAAK,CAAC,CAAC;QACnC,MAAM,EAAE,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,KAAK,CAAC;QAC9B,OAAO,CAAC,GAAG,CACT,wCAAwC,OAAO,MAAM,GAAG,CAAC,MAAM,GAAG;YAClE,0CAA0C,EAAE,KAAK,CAClD,CAAC;IACJ,CAAC;IAAC,OAAO,GAAQ,EAAE,CAAC;QAClB,MAAM,MAAM,GAAG,KAAK,CAAC,GAAG,EAAE,OAAO,CAAC,IAAI,KAAK,CAAC,GAAG,EAAE,MAAM,EAAE,QAAQ,EAAE,EAAE,CAAC,IAAI,eAAe,CAAC;QAC1F,OAAO,CAAC,IAAI,CACV,yCAAyC,OAAO,YAAY,MAAM,KAAK;YACvE,mDAAmD,CACpD,CAAC;IACJ,CAAC;AACH,CAAC"}

package/dist/sandbox/sandbox.d.ts

@@ -1,214 +0,0 @@
-import type { RunResult, ThinkingLevel } from "agentic-pi";
-import type { OtelConfig, SandboxBackend } from "../config/config.js";
-/**
- * The **Sandbox port** — the single named interface every isolation backend
- * (`docker`, `smol`, `gondolin`, `none`) implements. Before this seam existed,
- * the orchestration around the four backends was copy-pasted twin-for-twin
- * (`executeDocker` / `executeSmol` / `executeInProcess`). Now the orchestrator
- * (`src/engine/executors/orchestrator.ts`) is written once and drives any
- * adapter through these methods.
- *
- * See `CONTEXT.md` → "Sandbox execution" for the pinned vocabulary; in short:
- *   - **Sandbox** (this interface) is the *port*.
- *   - **adapters** are the concrete backends below (`DockerSandbox`,
- *     `SmolSandbox`, `InProcessSandbox`, `FakeSandbox`). Each owns its
- *     isolation mechanism + egress enforcement; none of that surfaces here.
- *   - the **orchestrator** is the deep module that brackets a run.
- *
- * A Sandbox instance is created per task (the factory carries `taskId`), so the
- * `taskId` argument on `runAgent` / `runCommand` is threaded purely for the
- * underlying driver APIs.
- */
-export interface Sandbox {
-    /** Which backend this adapter is — used only for telemetry tagging. */
-    readonly backend: SandboxBackend;
-    /**
-     * Provision the workspace and any isolation primitive (container / VM /
-     * worktree). **Owns provisioning** — each adapter orders its own
-     * clone-vs-boot internally (docker pre-clones then mounts; smol boots then
-     * probes the share then clones; in-process just sets up the worktree) and
-     * returns the two paths the orchestrator needs.
-     */
-    provision(prePopulate?: PrePopulateSpec): Promise<ProvisionResult>;
-    /**
-     * Stage this phase's skill bundle into the workspace and return the skill
-     * dirs to hand the agent (already mapped to sandbox-visible paths). The
-     * mode (symlink vs copy), root (workspace vs cwd), and any post-stage git
-     * exclusion are adapter-local. Returns undefined when the phase has none.
-     */
-    stageSkills(phaseKey: string, skillPaths: string[] | undefined): string[] | undefined;
-    /**
-     * Map a workspace-relative path (written to `hostWorkspaceDir`) to the
-     * absolute path the sandboxed process sees. Used for staged `type: script`
-     * source files. docker/smol prefix the in-sandbox workspace root; in-process
-     * returns the host path verbatim.
-     */
-    sandboxPathFor(relPath: string): string;
-    /**
-     * Run one agent turn. Emits **parsed** event records to `onEvent` — the
-     * `startsWith("{")` guard + `JSON.parse` of the subprocess line stream live
-     * inside the docker/smol adapters; the in-process adapter forwards
-     * agentic-pi's already-parsed events straight through. Returns the run's
-     * authoritative `RunResult` when the adapter has one (in-process), else
-     * `undefined` (docker/smol) — the orchestrator reconstructs it from the
-     * accumulated events in that case.
-     */
-    runAgent(taskId: string, prompt: string, opts: RunAgentOpts, onEvent: (record: SandboxEvent) => void): Promise<RunResult | undefined>;
-    /** Run a deterministic shell command (no LLM). Resolves with its raw result. */
-    runCommand(taskId: string, command: string, opts: RunCommandOpts): Promise<RawCommandResult>;
-    /** Tear down the isolation primitive (container/VM destroy; no-op in-process). */
-    dispose(): Promise<void> | void;
-}
-/**
- * The **intent-only** egress value object. The orchestrator decides *what is
- * allowed* once (hosts already merged with any OTEL collector hosts); each
- * adapter translates it to its *mechanism* — docker `--dns` strict/open, smol
- * `--allow-host`, in-process `allowedHttpHosts` / `["*"]`. The `172.30.0.x`
- * constants and the `"*"` sentinel live inside the adapters, never here.
- */
-export interface EgressPolicy {
-    /** True iff a phase opted out of the allowlist (`unrestricted_egress`). */
-    unrestricted: boolean;
-    /** Allowed apex hostnames when not unrestricted (incl. collector hosts). */
-    hosts: string[];
-}
-/** The repo pre-clone descriptor handed to {@link Sandbox.provision}. */
-export interface PrePopulateSpec {
-    owner: string;
-    repo: string;
-    branch: string;
-    token: string;
-    runId?: string;
-    shallow?: boolean;
-    /**
-     * Recreate the checkout from the default branch on a fresh (different-run)
-     * provision instead of refreshing the existing feature branch: delete any
-     * leftover checkout and clone the default branch, then create `branch`
-     * locally off it. Set for `build` so a re-triggered incomplete build starts
-     * again from current `main` (issue #153). A same-run provision still
-     * preserves the workspace.
-     */
-    recreateFromBase?: boolean;
-}
-/** What {@link Sandbox.provision} hands back to the orchestrator. */
-export interface ProvisionResult {
-    /** Host dir backing the workspace (where the orchestrator stages files). */
-    hostWorkspaceDir: string;
-    /** Working directory the agent/command process runs in (sandbox-visible). */
-    agentCwd: string;
-}
-export type SandboxEvent = Record<string, unknown>;
-export interface RunAgentOpts {
-    model: string;
-    thinking?: ThinkingLevel;
-    /** agentic-pi github profile (`read` | `issues-write` | … ). */
-    profile?: string;
-    /** Base inner-run env (git identity); adapters merge their own OTEL/HOME. */
-    sandboxEnv: Record<string, string>;
-    agentCwd: string;
-    skillDirs?: string[];
-    webSearch?: boolean;
-    webSearchProvider?: "tavily" | "brave" | "exa";
-    /** Test/eval escape hatch — only honoured by the in-process adapter. */
-    githubApiBaseUrl?: string;
-    /**
-     * Credential store (`auth.json`) agentic-pi points Pi's AuthStorage at for
-     * model auth — carries OAuth subscription logins (Codex / Claude Pro /
-     * Copilot). Only meaningful for the in-process adapter (none/gondolin), where
-     * the model call runs host-side so a host path resolves; the docker adapter
-     * ignores it (its model call is in-container) and relies on env tokens.
-     */
-    authFile?: string;
-}
-export interface RunCommandOpts {
-    cwd: string;
-    /** Extra env forwarded into the command (upstream phase outputs, etc.). */
-    sandboxEnv?: Record<string, string>;
-    timeoutSeconds: number;
-}
-export interface RawCommandResult {
-    exitCode: number;
-    stdout: string;
-    stderr: string;
-    timedOut: boolean;
-}
-/** Construction-time opts for {@link sandboxFor} / each adapter. */
-export interface SandboxFactoryOpts {
-    taskId: string;
-    egress: EgressPolicy;
-    /** Env forwarded into the sandbox (provider keys, minted GITHUB_TOKEN, …). */
-    env: Record<string, string>;
-    stateDir: string;
-    sandboxDir?: string;
-    /** Run the agent in this `<workspace>/<repoSubdir>/` subdir (pre-seeded by the
-     * caller) instead of the workspace root — see {@link ExecutorConfig.repoSubdir}. */
-    repoSubdir?: string;
-    /** Docker image override (the browser-QA image for `sandbox_image: qa`). */
-    imageName?: string;
-    otel?: OtelConfig;
-    timeoutSeconds?: number;
-}
-export type SandboxFactory = (backend: SandboxBackend, opts: SandboxFactoryOpts) => Sandbox;
-/**
- * Inner-run git identity, shared by every adapter's agent path. Takes the
- * resolved bot login (e.g. `last-light[bot]` / `nearform-lastlight[bot]`) so
- * agent commits are attributed to the actual App — including a `BOT_LOGIN`
- * override, which the caller resolves before passing it here.
- */
-export declare function agentGitIdentityEnv(botLogin: string): Record<string, string>;
-/**
- * The single factory replacing the `if (backend === …)` ladder. Given a
- * backend and construction opts, returns the matching adapter. Docker's
- * old null-fallback is now a thrown error from `provision` (the orchestrator's
- * bracket surfaces it), so this never returns null.
- */
-export declare function sandboxFor(backend: SandboxBackend, opts: SandboxFactoryOpts): Sandbox;
-export interface FakeBehavior {
-    /** Canned parsed pi-event records replayed through `onEvent`. */
-    events?: SandboxEvent[];
-    /** Throw from `runAgent` to exercise the fallback path. */
-    throwOnRunAgent?: Error | string;
-    /** Authoritative RunResult `runAgent` returns (else undefined → acc.build). */
-    returnRunResult?: RunResult;
-    /** Result `runCommand` resolves with (default exit 0, empty output). */
-    commandResult?: RawCommandResult;
-    /** Throw from `runCommand`. */
-    throwOnRunCommand?: Error | string;
-}
-/**
- * In-memory `Sandbox` adapter for unit-testing the orchestrator without
- * Docker/VMs. `provision()` returns a **real** `mkdtemp` workspace (so skill
- * staging + artifact harvest run for real), `runAgent` replays a canned array
- * of pi event records through `onEvent`, and it **records** the opts it
- * received for assertions. Covers Last Light's orchestration, not agentic-pi's
- * semantics.
- *
- * Inject it via the optional `sandboxFactory` on `executeAgent`/`executeCommand`
- * — see {@link FakeSandbox.asFactory}.
- */
-export declare class FakeSandbox implements Sandbox {
-    private readonly behavior;
-    backend: SandboxBackend;
-    egress?: EgressPolicy;
-    env?: Record<string, string>;
-    hostWorkspaceDir: string;
-    agentCwd: string;
-    stagedSkillDirs?: string[];
-    receivedAgentOpts?: RunAgentOpts;
-    receivedCommandOpts?: RunCommandOpts;
-    receivedCommand?: string;
-    provisionCalls: number;
-    disposed: boolean;
-    constructor(behavior?: FakeBehavior);
-    /**
-     * Build a {@link SandboxFactory} that always returns THIS instance, capturing
-     * the construction opts (egress, env, backend) for later inspection.
-     */
-    asFactory(): SandboxFactory;
-    provision(pre?: PrePopulateSpec): Promise<ProvisionResult>;
-    stageSkills(phaseKey: string, skillPaths: string[] | undefined): string[] | undefined;
-    sandboxPathFor(relPath: string): string;
-    runAgent(_taskId: string, _prompt: string, opts: RunAgentOpts, onEvent: (record: SandboxEvent) => void): Promise<RunResult | undefined>;
-    runCommand(_taskId: string, command: string, opts: RunCommandOpts): Promise<RawCommandResult>;
-    dispose(): void;
-}