lastlight 0.16.0 → 0.16.1

package/dist/providers.js

@@ -1,279 +0,0 @@
-/**
- * Provider registry — single source of truth for the LLM providers Last Light
- * knows how to wire end-to-end.
- *
- * pi-ai (`@earendil-works/pi-ai`) is provider-agnostic and supports 15+
- * providers out of the box. Of those, only a subset is "wizard-able" here:
- * they authenticate with a single API-key env var and expose a stable
- * endpoint reachable from the sandbox egress firewall. Excluded are the
- * OAuth-only providers (`openai-codex`, `github-copilot`), the multi-env
- * Ambient-cred ones (`amazon-bedrock`, `google-vertex`, `azure-openai-*`,
- * `cloudflare-*`), and the regional-CN variants.
- *
- * This registry is consumed by:
- *   - `src/engine/llm.ts` — the cheap one-shot helper used by the
- *     prompt screener + intent classifier. It builds requests for the
- *     `openai-completions` family (which is most wizard-able providers —
- *     Google and Mistral are routed through their OpenAI-compatible
- *     endpoints) and the `anthropic-messages` family (Kimi for Coding,
- *     MiniMax, Anthropic itself).
- *   - `src/engine/agent-executor.ts` — forwards each provider's env var
- *     into the sandbox so agentic-pi can auth.
- *   - `src/sandbox/egress-allowlist.ts` — the SNI/firewall allowlist is
- *     seeded from each provider's `host`.
- *   - `src/cli/setup.ts` — the install wizard's step-4 provider picker.
- *
- * Keep this list aligned with pi-ai's provider registry. When pi-ai adds a
- * new provider that we want to surface, add an entry here and everything
- * else (forwarding, egress, wizard UI) follows automatically.
- */
-/**
- * The registry. Order matters — `defaultFastModel()` in `llm.ts` selects
- * a fast model by iterating this list and picking the first provider
- * whose env var is present. Always keep Anthropic first (best raw-latency
- * cheap helper) then OpenAI then OpenRouter, then the rest grouped by
- * families so the array is easy to scan.
- */
-export const PROVIDERS = [
-    // ── Anthropic-messages family ───────────────────────────────────────
-    {
-        prefix: "anthropic",
-        displayName: "Anthropic",
-        envKey: "ANTHROPIC_API_KEY",
-        baseUrl: "https://api.anthropic.com/v1",
-        api: "anthropic-messages",
-        host: "anthropic.com",
-        fastModel: "claude-haiku-4-5-20251001",
-        sampleModel: "claude-sonnet-4-6",
-        keyPrefix: "sk-ant-",
-    },
-    {
-        prefix: "kimi-coding",
-        displayName: "Kimi for Coding (Moonshot)",
-        envKey: "KIMI_API_KEY",
-        baseUrl: "https://api.kimi.com/coding",
-        api: "anthropic-messages",
-        host: "kimi.com",
-        fastModel: "kimi-latest",
-        sampleModel: "kimi-latest",
-    },
-    {
-        prefix: "minimax",
-        displayName: "MiniMax",
-        envKey: "MINIMAX_API_KEY",
-        baseUrl: "https://api.minimax.io/anthropic",
-        api: "anthropic-messages",
-        host: "minimax.io",
-        fastModel: "MiniMax-M1",
-        sampleModel: "MiniMax-M2",
-    },
-    // ── OpenAI-completions family — first-party OpenAI ──────────────────
-    {
-        prefix: "openai",
-        displayName: "OpenAI",
-        envKey: "OPENAI_API_KEY",
-        baseUrl: "https://api.openai.com/v1",
-        api: "openai-completions",
-        host: "openai.com",
-        fastModel: "gpt-5.4-mini",
-        sampleModel: "gpt-5.5",
-        maxTokensField: "max_completion_tokens",
-        keyPrefix: "sk-",
-    },
-    // ── Google Gemini — routed through Google's OpenAI-compatible endpoint ──
-    {
-        prefix: "google",
-        displayName: "Google AI Studio (Gemini)",
-        envKey: "GEMINI_API_KEY",
-        baseUrl: "https://generativelanguage.googleapis.com/v1beta/openai",
-        api: "openai-completions",
-        host: "generativelanguage.googleapis.com",
-        fastModel: "gemini-2.5-flash",
-        sampleModel: "gemini-2.5-pro",
-        keyPrefix: "AIza",
-    },
-    // ── Mistral — Mistral exposes an OpenAI-compatible path ──────────────
-    {
-        prefix: "mistral",
-        displayName: "Mistral",
-        envKey: "MISTRAL_API_KEY",
-        baseUrl: "https://api.mistral.ai/v1",
-        api: "openai-completions",
-        host: "mistral.ai",
-        fastModel: "mistral-small-latest",
-        sampleModel: "mistral-large-latest",
-    },
-    // ── OpenAI-compatible inference specialists ──────────────────────────
-    {
-        prefix: "groq",
-        displayName: "Groq",
-        envKey: "GROQ_API_KEY",
-        baseUrl: "https://api.groq.com/openai/v1",
-        api: "openai-completions",
-        host: "groq.com",
-        fastModel: "llama-3.3-70b-versatile",
-        sampleModel: "llama-3.3-70b-versatile",
-    },
-    {
-        prefix: "cerebras",
-        displayName: "Cerebras",
-        envKey: "CEREBRAS_API_KEY",
-        baseUrl: "https://api.cerebras.ai/v1",
-        api: "openai-completions",
-        host: "cerebras.ai",
-        fastModel: "llama-3.3-70b",
-        sampleModel: "llama-3.3-70b",
-    },
-    {
-        prefix: "xai",
-        displayName: "xAI (Grok)",
-        envKey: "XAI_API_KEY",
-        baseUrl: "https://api.x.ai/v1",
-        api: "openai-completions",
-        host: "x.ai",
-        fastModel: "grok-3-mini",
-        sampleModel: "grok-4",
-    },
-    {
-        prefix: "huggingface",
-        displayName: "Hugging Face",
-        envKey: "HF_TOKEN",
-        baseUrl: "https://router.huggingface.co/v1",
-        api: "openai-completions",
-        host: "huggingface.co",
-        fastModel: "meta-llama/Llama-3.3-70B-Instruct",
-        sampleModel: "meta-llama/Llama-3.3-70B-Instruct",
-        keyPrefix: "hf_",
-    },
-    {
-        prefix: "moonshotai",
-        displayName: "Moonshot AI",
-        envKey: "MOONSHOT_API_KEY",
-        baseUrl: "https://api.moonshot.ai/v1",
-        api: "openai-completions",
-        host: "moonshot.ai",
-        fastModel: "kimi-k2",
-        sampleModel: "kimi-k2",
-    },
-    {
-        prefix: "nvidia",
-        displayName: "NVIDIA NIM",
-        envKey: "NVIDIA_API_KEY",
-        baseUrl: "https://integrate.api.nvidia.com/v1",
-        api: "openai-completions",
-        host: "integrate.api.nvidia.com",
-        fastModel: "meta/llama-3.3-70b-instruct",
-        sampleModel: "meta/llama-3.3-70b-instruct",
-    },
-    {
-        prefix: "fireworks",
-        displayName: "Fireworks",
-        envKey: "FIREWORKS_API_KEY",
-        baseUrl: "https://api.fireworks.ai/inference/v1",
-        api: "openai-completions",
-        host: "fireworks.ai",
-        fastModel: "accounts/fireworks/models/llama-v3p3-70b-instruct",
-        sampleModel: "accounts/fireworks/models/llama-v3p3-70b-instruct",
-    },
-    {
-        prefix: "together",
-        displayName: "Together",
-        envKey: "TOGETHER_API_KEY",
-        baseUrl: "https://api.together.ai/v1",
-        api: "openai-completions",
-        host: "together.ai",
-        fastModel: "meta-llama/Llama-3.3-70B-Instruct-Turbo",
-        sampleModel: "meta-llama/Llama-3.3-70B-Instruct-Turbo",
-    },
-    {
-        prefix: "deepseek",
-        displayName: "DeepSeek",
-        envKey: "DEEPSEEK_API_KEY",
-        baseUrl: "https://api.deepseek.com/v1",
-        api: "openai-completions",
-        host: "deepseek.com",
-        fastModel: "deepseek-chat",
-        sampleModel: "deepseek-chat",
-    },
-    {
-        prefix: "zai",
-        displayName: "Z.AI (GLM)",
-        envKey: "ZAI_API_KEY",
-        baseUrl: "https://api.z.ai/api/coding/paas/v4",
-        api: "openai-completions",
-        host: "z.ai",
-        fastModel: "glm-4.6",
-        sampleModel: "glm-4.6",
-    },
-    // ── OpenRouter — aggregator (take any pi.dev-listed model via one key) ──
-    {
-        prefix: "openrouter",
-        displayName: "OpenRouter (aggregator — Anthropic, Google, xAI, …)",
-        envKey: "OPENROUTER_API_KEY",
-        baseUrl: "https://openrouter.ai/api/v1",
-        api: "openai-completions",
-        host: "openrouter.ai",
-        fastModel: "google/gemini-2.5-flash",
-        sampleModel: "anthropic/claude-sonnet-4.5",
-        preserveNestedModelId: true,
-        extraHeaders: {
-            "HTTP-Referer": "https://github.com/nearform/lastlight",
-            "X-Title": "Last Light",
-        },
-        keyPrefix: "sk-or-",
-    },
-];
-const PREFIX_INDEX = new Map(PROVIDERS.map((p) => [p.prefix, p]));
-const ENV_INDEX = new Map(PROVIDERS.map((p) => [p.envKey, p]));
-export function providerByPrefix(prefix) {
-    return PREFIX_INDEX.get(prefix.toLowerCase());
-}
-export function providerByEnvKey(envKey) {
-    return ENV_INDEX.get(envKey);
-}
-/** All the env var names a harness must forward to reach every registered provider. */
-export const PROVIDER_ENV_KEYS = PROVIDERS.map((p) => p.envKey);
-/** All the hosts the sandbox egress firewall must allowlist to reach these providers. */
-export const PROVIDER_HOSTS = PROVIDERS.map((p) => p.host);
-/**
- * Default model spec shipped with the harness. Keep aligned with the
- * `OPENCODE_MODEL` default in `config/default.yaml` and the wizard's
- * initial provider selection.
- */
-export const DEFAULT_PROVIDER = "anthropic";
-export const DEFAULT_MODEL = "anthropic/claude-sonnet-4-6";
-export const OAUTH_PROVIDERS = [
-    {
-        id: "openai-codex",
-        displayName: "ChatGPT Plus/Pro (Codex)",
-        modelPrefix: "openai-codex",
-        sampleModel: "openai-codex/gpt-5.4",
-        sandboxEnvVar: null, // chatgpt.com backend — no env route, chat-only
-        oauthOnly: true,
-    },
-    {
-        id: "anthropic",
-        displayName: "Anthropic (Claude Pro/Max)",
-        modelPrefix: "anthropic",
-        sampleModel: "anthropic/claude-sonnet-4-6",
-        sandboxEnvVar: "ANTHROPIC_OAUTH_TOKEN",
-        oauthOnly: false, // falls back to ANTHROPIC_API_KEY
-    },
-    {
-        id: "github-copilot",
-        displayName: "GitHub Copilot",
-        modelPrefix: "github-copilot",
-        sampleModel: "github-copilot/gpt-4o",
-        sandboxEnvVar: "COPILOT_GITHUB_TOKEN",
-        oauthOnly: true,
-    },
-];
-const OAUTH_PREFIX_INDEX = new Map(OAUTH_PROVIDERS.map((p) => [p.modelPrefix, p]));
-const OAUTH_ID_INDEX = new Map(OAUTH_PROVIDERS.map((p) => [p.id, p]));
-export function oauthProviderByModelPrefix(prefix) {
-    return OAUTH_PREFIX_INDEX.get(prefix);
-}
-export function oauthProviderById(id) {
-    return OAUTH_ID_INDEX.get(id);
-}
-//# sourceMappingURL=providers.js.map

package/dist/providers.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"providers.js","sourceRoot":"","sources":["../src/providers.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA4BG;AA0CH;;;;;;GAMG;AACH,MAAM,CAAC,MAAM,SAAS,GAA4B;IAChD,uEAAuE;IACvE;QACE,MAAM,EAAE,WAAW;QACnB,WAAW,EAAE,WAAW;QACxB,MAAM,EAAE,mBAAmB;QAC3B,OAAO,EAAE,8BAA8B;QACvC,GAAG,EAAE,oBAAoB;QACzB,IAAI,EAAE,eAAe;QACrB,SAAS,EAAE,2BAA2B;QACtC,WAAW,EAAE,mBAAmB;QAChC,SAAS,EAAE,SAAS;KACrB;IACD;QACE,MAAM,EAAE,aAAa;QACrB,WAAW,EAAE,4BAA4B;QACzC,MAAM,EAAE,cAAc;QACtB,OAAO,EAAE,6BAA6B;QACtC,GAAG,EAAE,oBAAoB;QACzB,IAAI,EAAE,UAAU;QAChB,SAAS,EAAE,aAAa;QACxB,WAAW,EAAE,aAAa;KAC3B;IACD;QACE,MAAM,EAAE,SAAS;QACjB,WAAW,EAAE,SAAS;QACtB,MAAM,EAAE,iBAAiB;QACzB,OAAO,EAAE,kCAAkC;QAC3C,GAAG,EAAE,oBAAoB;QACzB,IAAI,EAAE,YAAY;QAClB,SAAS,EAAE,YAAY;QACvB,WAAW,EAAE,YAAY;KAC1B;IACD,uEAAuE;IACvE;QACE,MAAM,EAAE,QAAQ;QAChB,WAAW,EAAE,QAAQ;QACrB,MAAM,EAAE,gBAAgB;QACxB,OAAO,EAAE,2BAA2B;QACpC,GAAG,EAAE,oBAAoB;QACzB,IAAI,EAAE,YAAY;QAClB,SAAS,EAAE,cAAc;QACzB,WAAW,EAAE,SAAS;QACtB,cAAc,EAAE,uBAAuB;QACvC,SAAS,EAAE,KAAK;KACjB;IACD,2EAA2E;IAC3E;QACE,MAAM,EAAE,QAAQ;QAChB,WAAW,EAAE,2BAA2B;QACxC,MAAM,EAAE,gBAAgB;QACxB,OAAO,EAAE,yDAAyD;QAClE,GAAG,EAAE,oBAAoB;QACzB,IAAI,EAAE,mCAAmC;QACzC,SAAS,EAAE,kBAAkB;QAC7B,WAAW,EAAE,gBAAgB;QAC7B,SAAS,EAAE,MAAM;KAClB;IACD,wEAAwE;IACxE;QACE,MAAM,EAAE,SAAS;QACjB,WAAW,EAAE,SAAS;QACtB,MAAM,EAAE,iBAAiB;QACzB,OAAO,EAAE,2BAA2B;QACpC,GAAG,EAAE,oBAAoB;QACzB,IAAI,EAAE,YAAY;QAClB,SAAS,EAAE,sBAAsB;QACjC,WAAW,EAAE,sBAAsB;KACpC;IACD,wEAAwE;IACxE;QACE,MAAM,EAAE,MAAM;QACd,WAAW,EAAE,MAAM;QACnB,MAAM,EAAE,cAAc;QACtB,OAAO,EAAE,gCAAgC;QACzC,GAAG,EAAE,oBAAoB;QACzB,IAAI,EAAE,UAAU;QAChB,SAAS,EAAE,yBAAyB;QACpC,WAAW,EAAE,yBAAyB;KACvC;IACD;QACE,MAAM,EAAE,UAAU;QAClB,WAAW,EAAE,UAAU;QACvB,MAAM,EAAE,kBAAkB;QAC1B,OAAO,EAAE,4BAA4B;QACrC,GAAG,EAAE,oBAAoB;QACzB,IAAI,EAAE,aAAa;QACnB,SAAS,EAAE,eAAe;QAC1B,WAAW,EAAE,eAAe;KAC7B;IACD;QACE,MAAM,EAAE,KAAK;QACb,WAAW,EAAE,YAAY;QACzB,MAAM,EAAE,aAAa;QACrB,OAAO,EAAE,qBAAqB;QAC9B,GAAG,EAAE,oBAAoB;QACzB,IAAI,EAAE,MAAM;QACZ,SAAS,EAAE,aAAa;QACxB,WAAW,EAAE,QAAQ;KACtB;IACD;QACE,MAAM,EAAE,aAAa;QACrB,WAAW,EAAE,cAAc;QAC3B,MAAM,EAAE,UAAU;QAClB,OAAO,EAAE,kCAAkC;QAC3C,GAAG,EAAE,oBAAoB;QACzB,IAAI,EAAE,gBAAgB;QACtB,SAAS,EAAE,mCAAmC;QAC9C,WAAW,EAAE,mCAAmC;QAChD,SAAS,EAAE,KAAK;KACjB;IACD;QACE,MAAM,EAAE,YAAY;QACpB,WAAW,EAAE,aAAa;QAC1B,MAAM,EAAE,kBAAkB;QAC1B,OAAO,EAAE,4BAA4B;QACrC,GAAG,EAAE,oBAAoB;QACzB,IAAI,EAAE,aAAa;QACnB,SAAS,EAAE,SAAS;QACpB,WAAW,EAAE,SAAS;KACvB;IACD;QACE,MAAM,EAAE,QAAQ;QAChB,WAAW,EAAE,YAAY;QACzB,MAAM,EAAE,gBAAgB;QACxB,OAAO,EAAE,qCAAqC;QAC9C,GAAG,EAAE,oBAAoB;QACzB,IAAI,EAAE,0BAA0B;QAChC,SAAS,EAAE,6BAA6B;QACxC,WAAW,EAAE,6BAA6B;KAC3C;IACD;QACE,MAAM,EAAE,WAAW;QACnB,WAAW,EAAE,WAAW;QACxB,MAAM,EAAE,mBAAmB;QAC3B,OAAO,EAAE,uCAAuC;QAChD,GAAG,EAAE,oBAAoB;QACzB,IAAI,EAAE,cAAc;QACpB,SAAS,EAAE,mDAAmD;QAC9D,WAAW,EAAE,mDAAmD;KACjE;IACD;QACE,MAAM,EAAE,UAAU;QAClB,WAAW,EAAE,UAAU;QACvB,MAAM,EAAE,kBAAkB;QAC1B,OAAO,EAAE,4BAA4B;QACrC,GAAG,EAAE,oBAAoB;QACzB,IAAI,EAAE,aAAa;QACnB,SAAS,EAAE,yCAAyC;QACpD,WAAW,EAAE,yCAAyC;KACvD;IACD;QACE,MAAM,EAAE,UAAU;QAClB,WAAW,EAAE,UAAU;QACvB,MAAM,EAAE,kBAAkB;QAC1B,OAAO,EAAE,6BAA6B;QACtC,GAAG,EAAE,oBAAoB;QACzB,IAAI,EAAE,cAAc;QACpB,SAAS,EAAE,eAAe;QAC1B,WAAW,EAAE,eAAe;KAC7B;IACD;QACE,MAAM,EAAE,KAAK;QACb,WAAW,EAAE,YAAY;QACzB,MAAM,EAAE,aAAa;QACrB,OAAO,EAAE,qCAAqC;QAC9C,GAAG,EAAE,oBAAoB;QACzB,IAAI,EAAE,MAAM;QACZ,SAAS,EAAE,SAAS;QACpB,WAAW,EAAE,SAAS;KACvB;IACD,2EAA2E;IAC3E;QACE,MAAM,EAAE,YAAY;QACpB,WAAW,EAAE,qDAAqD;QAClE,MAAM,EAAE,oBAAoB;QAC5B,OAAO,EAAE,8BAA8B;QACvC,GAAG,EAAE,oBAAoB;QACzB,IAAI,EAAE,eAAe;QACrB,SAAS,EAAE,yBAAyB;QACpC,WAAW,EAAE,6BAA6B;QAC1C,qBAAqB,EAAE,IAAI;QAC3B,YAAY,EAAE;YACZ,cAAc,EAAE,uCAAuC;YACvD,SAAS,EAAE,YAAY;SACxB;QACD,SAAS,EAAE,QAAQ;KACpB;CACF,CAAC;AAEF,MAAM,YAAY,GAAG,IAAI,GAAG,CAC1B,SAAS,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,CACpC,CAAC;AAEF,MAAM,SAAS,GAAG,IAAI,GAAG,CACvB,SAAS,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,CACpC,CAAC;AAEF,MAAM,UAAU,gBAAgB,CAAC,MAAc;IAC7C,OAAO,YAAY,CAAC,GAAG,CAAC,MAAM,CAAC,WAAW,EAAE,CAAC,CAAC;AAChD,CAAC;AAED,MAAM,UAAU,gBAAgB,CAAC,MAAc;IAC7C,OAAO,SAAS,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;AAC/B,CAAC;AAED,uFAAuF;AACvF,MAAM,CAAC,MAAM,iBAAiB,GAAsB,SAAS,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC;AAEnF,yFAAyF;AACzF,MAAM,CAAC,MAAM,cAAc,GAAsB,SAAS,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;AAE9E;;;;GAIG;AACH,MAAM,CAAC,MAAM,gBAAgB,GAAG,WAAW,CAAC;AAC5C,MAAM,CAAC,MAAM,aAAa,GAAG,6BAA6B,CAAC;AAqC3D,MAAM,CAAC,MAAM,eAAe,GAAiC;IAC3D;QACE,EAAE,EAAE,cAAc;QAClB,WAAW,EAAE,0BAA0B;QACvC,WAAW,EAAE,cAAc;QAC3B,WAAW,EAAE,sBAAsB;QACnC,aAAa,EAAE,IAAI,EAAE,gDAAgD;QACrE,SAAS,EAAE,IAAI;KAChB;IACD;QACE,EAAE,EAAE,WAAW;QACf,WAAW,EAAE,4BAA4B;QACzC,WAAW,EAAE,WAAW;QACxB,WAAW,EAAE,6BAA6B;QAC1C,aAAa,EAAE,uBAAuB;QACtC,SAAS,EAAE,KAAK,EAAE,kCAAkC;KACrD;IACD;QACE,EAAE,EAAE,gBAAgB;QACpB,WAAW,EAAE,gBAAgB;QAC7B,WAAW,EAAE,gBAAgB;QAC7B,WAAW,EAAE,uBAAuB;QACpC,aAAa,EAAE,sBAAsB;QACrC,SAAS,EAAE,IAAI;KAChB;CACF,CAAC;AAEF,MAAM,kBAAkB,GAAG,IAAI,GAAG,CAChC,eAAe,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC,CAC/C,CAAC;AACF,MAAM,cAAc,GAAG,IAAI,GAAG,CAC5B,eAAe,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CACtC,CAAC;AAEF,MAAM,UAAU,0BAA0B,CAAC,MAAc;IACvD,OAAO,kBAAkB,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;AACxC,CAAC;AAED,MAAM,UAAU,iBAAiB,CAAC,EAAU;IAC1C,OAAO,cAAc,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;AAChC,CAAC"}

package/dist/sandbox/docker.d.ts

@@ -1,180 +0,0 @@
-/**
- * Docker sandbox manager — runs agent tasks in isolated sibling containers.
- *
- * The sandbox image bakes immutable assets at /app/ (skills, agent-context,
- * MCP server, MCP config template). Its entrypoint wires them into the
- * workspace after volumes are mounted — no post-run docker exec needed.
- *
- * Volumes mounted at runtime:
- * - Shared data volume (/data): secrets (app.pem), session logs
- * - Task worktree (/home/agent/workspace): per-task git repo
- */
-export interface SandboxConfig {
-    /** Docker image for sandbox containers (default: lastlight-sandbox:latest) */
-    imageName: string;
-    /** Env vars to inject into the sandbox */
-    env: Record<string, string>;
-    /** Timeout in seconds (default: 1800 = 30 min) */
-    timeoutSeconds?: number;
-    /**
-     * Per-sandbox memory cap, in Docker's `--memory` format (e.g. "2g", "512m").
-     * Default: 2g — enough headroom for `npm install`, vite build, and an
-     * agent loop, but small enough that several concurrent sandboxes can't
-     * exhaust a 16 GB host. Override via the `SANDBOX_MEMORY_LIMIT` env var.
-     */
-    memoryLimit?: string;
-    /**
-     * Docker network to attach the sandbox container to. Defaults to
-     * `LASTLIGHT_SANDBOX_NETWORK` env var or `lastlight_sandbox-egress`
-     * (the `internal: true` network declared in docker-compose.yml). The
-     * sandbox can only reach the public internet through the nginx-egress
-     * firewall sidecars on this network.
-     */
-    network?: string;
-    /**
-     * IP of the coredns sidecar this sandbox uses as its DNS resolver.
-     * `coredns-strict` (172.30.0.10) returns the strict-nginx IP for
-     * allowlisted hosts and NXDOMAIN for everything else; `coredns-open`
-     * (172.30.0.11) returns the open-nginx IP for any hostname (minus a
-     * small SSRF deny set). Passed to `docker run` as `--dns <ip>`.
-     *
-     * No env vars are injected — the sandbox has no idea a firewall is
-     * in front of it. Works for every SDK regardless of whether it
-     * honours HTTP_PROXY / HTTPS_PROXY.
-     */
-    dnsIp?: string;
-}
-export interface SandboxInfo {
-    containerId: string;
-    containerName: string;
-    worktreePath: string;
-}
-/**
- * How `/home/agent/workspace` is materialized inside the sandbox container.
- *
- * - `bind`: classic host-path bind mount. Only safe when the host filesystem
- *   path is identical from the harness's view and the docker daemon's view —
- *   i.e. local dev where the harness runs directly on the host, or any
- *   deployment where `SANDBOX_DATA_VOLUME` is a real host path.
- * - `volume-subpath`: mount a subpath of a named docker volume. Required
- *   when the harness runs inside a container that holds the data dir via a
- *   named volume (the standard docker-compose setup). A bare bind would
- *   resolve `/app/data/sandboxes/<id>` against the host's empty bare-FS
- *   `/app/data/...` rather than the named volume's `_data/sandboxes/<id>`,
- *   producing two divergent trees and breaking skill staging.
- */
-export type WorkspaceMount = {
-    type: "bind";
-    hostPath: string;
-} | {
-    type: "volume-subpath";
-    volume: string;
-    subpath: string;
-};
-export declare class DockerSandbox {
-    private config;
-    private activeContainers;
-    constructor(config: SandboxConfig);
-    /**
-     * Create and start a sandbox container for a task.
-     */
-    create(opts: {
-        taskId: string;
-        worktreePath: string;
-        workspaceMount: WorkspaceMount;
-    }): Promise<SandboxInfo>;
-    /**
-     * Wait for the sandbox entrypoint to finish setup. The entrypoint touches
-     * `$WORKSPACE/.ready` as its last step before exec'ing the agent shell.
-     */
-    private waitForReady;
-    /**
-     * Run the agentic-pi CLI inside the sandbox with a prompt.
-     *
-     * Streams stdout line-by-line so the caller can react to JSON events
-     * (e.g. capture the top-level `session` record's id) before the agent
-     * has finished. The full stdout is also buffered and returned for
-     * post-run parsing of the usage_snapshot rollup.
-     */
-    runAgent(taskId: string, prompt: string, opts?: {
-        model?: string;
-        /**
-         * Pi thinking level: `off | minimal | low | medium | high | xhigh`.
-         * Validated against the closed set before being shell-interpolated.
-         */
-        thinking?: string;
-        /** agentic-pi GitHub profile: `read | issues-write | review-write | repo-write`. */
-        profile?: string;
-        /**
-         * Env forwarded INTO the sandboxed run via repeated `--sandbox-env`
-         * flags. Used to inject git identity. Keys / values are charset-asserted
-         * before shell interpolation.
-         */
-        sandboxEnv?: Record<string, string>;
-        /**
-         * Working directory for the agent process inside the container.
-         * Defaults to WORKSPACE_DIR (the workspace root). When the harness
-         * pre-cloned the target repo, the executor passes
-         * `<WORKSPACE_DIR>/<repo>` so the agent starts inside the checked-out
-         * tree. The path is asserted against an allowlist before being passed
-         * to `docker exec -w` to keep it shell-safe.
-         */
-        agentCwd?: string;
-        /**
-         * Enable agentic-pi's web-search extension. When false (or omitted),
-         * `--no-web-search` is appended to suppress auto-enable. When true,
-         * the flag is omitted and agentic-pi auto-detects the provider from
-         * whichever `*_API_KEY` env var the container received.
-         */
-        webSearch?: boolean;
-        /** Force a specific web-search provider. Validated against a closed set. */
-        webSearchProvider?: "tavily" | "brave" | "exa";
-        /**
-         * Per-phase skill directories to load, as absolute in-container paths
-         * under WORKSPACE_DIR (e.g. `/home/agent/workspace/.lastlight-skills/
-         * <phase>/<skill>`). Each becomes a repeated `--skill <dir>` flag.
-         * Charset/prefix-asserted before shell interpolation.
-         */
-        skillDirs?: string[];
-        /** Called for each newline-terminated stdout line as it arrives. */
-        onLine?: (line: string) => void;
-    }): Promise<void>;
-    /**
-     * Run a deterministic shell command inside an already-provisioned sandbox
-     * container and return its exit code + captured output. This is the
-     * non-agent sibling of {@link runAgent}: same `docker exec --user agent -w
-     * <workdir> … sh -c <cmd>` machinery, but it captures a bounded stdout tail
-     * (runAgent discards stdout) and RESOLVES with the exit code instead of
-     * rejecting on non-zero — the caller decides success/failure.
-     *
-     * Powers `type: bash` / `type: script` workflow phases (and the in-sandbox
-     * `generic_loop.until_bash` check). `command` is passed as a single argv slot
-     * to `sh -c`, so it is NOT re-parsed by the host shell — it is the script we
-     * intend to run. Env is forwarded via `docker exec -e KEY=VALUE` (argv, not
-     * shell-interpolated); keys are charset-asserted defensively.
-     */
-    runCommand(taskId: string, command: string, opts?: {
-        /**
-         * Working directory inside the container. Defaults to WORKSPACE_DIR.
-         * Asserted against the workspace-root allowlist (same guard as runAgent).
-         */
-        cwd?: string;
-        /** Env forwarded into the command via `docker exec -e`. */
-        sandboxEnv?: Record<string, string>;
-        /** Per-command timeout in seconds (default: the sandbox config timeout). */
-        timeoutSeconds?: number;
-        /** Called for each newline-terminated stdout line as it arrives. */
-        onLine?: (line: string) => void;
-    }): Promise<{
-        exitCode: number;
-        stdout: string;
-        stderr: string;
-        timedOut: boolean;
-    }>;
-    /**
-     * Remove a sandbox container.
-     */
-    destroy(taskId: string): Promise<void>;
-    destroyAll(): Promise<void>;
-    private resolveGitMounts;
-}