devlaunch 0.0.14__tar.gz → 0.0.15__tar.gz

{devlaunch-0.0.14 → devlaunch-0.0.15}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: devlaunch
-Version: 0.0.14
+Version: 0.0.15
 Summary: DevLaunch - A streamlined CLI for devpod workspaces
 Project-URL: Source, https://github.com/blooop/devlaunch
 Project-URL: Home, https://github.com/blooop/devlaunch
@@ -105,13 +105,26 @@ aid blooop/devlaunch@fix/42 fix the flaky test
 is exactly
 
 ```bash
-dl blooop/devlaunch@fix/42 -- claude 'fix the flaky test'
+dl blooop/devlaunch@fix/42 -- IS_SANDBOX=1 claude --dangerously-skip-permissions 'fix the flaky test'
 ```
 
 That means an `aid` workspace *is* the `dl` workspace: same clone, same workspace
 id, same container — started if stopped, attached to if already running, and never
 rebuilt just because `aid` asked for it. Anything `dl` learns, `aid` gets.
 
+`claude` is started with `--dangerously-skip-permissions`. The agent is already
+inside a disposable container holding only this repo, so the per-tool prompts it
+would ask on the host protect nothing here and would stall an unattended run.
+`IS_SANDBOX=1` rides along because `claude` otherwise refuses that flag outright
+under `uid 0`, and devcontainers that run as root are ordinary. The variable is
+scoped to the agent process, not exported into your shell.
+
+The trade is worth stating plainly: an agent started this way edits, runs and
+deletes inside the container without asking. It cannot reach your host, but it can
+rewrite the checkout it is in, so review an `aid` workspace before pushing rather
+than treating it as a sandbox that will stop it for you. `--codex` and `--gemini`
+are unaffected, and `dl <ws> -- claude` still runs exactly what you typed.
+
 | Option | Description |
 |--------|-------------|
 | `--claude`, `--codex`, `--gemini` | Pick the agent (default: `claude`) |

{devlaunch-0.0.14 → devlaunch-0.0.15}/README.md

@@ -83,13 +83,26 @@ aid blooop/devlaunch@fix/42 fix the flaky test
 is exactly
 
 ```bash
-dl blooop/devlaunch@fix/42 -- claude 'fix the flaky test'
+dl blooop/devlaunch@fix/42 -- IS_SANDBOX=1 claude --dangerously-skip-permissions 'fix the flaky test'
 ```
 
 That means an `aid` workspace *is* the `dl` workspace: same clone, same workspace
 id, same container — started if stopped, attached to if already running, and never
 rebuilt just because `aid` asked for it. Anything `dl` learns, `aid` gets.
 
+`claude` is started with `--dangerously-skip-permissions`. The agent is already
+inside a disposable container holding only this repo, so the per-tool prompts it
+would ask on the host protect nothing here and would stall an unattended run.
+`IS_SANDBOX=1` rides along because `claude` otherwise refuses that flag outright
+under `uid 0`, and devcontainers that run as root are ordinary. The variable is
+scoped to the agent process, not exported into your shell.
+
+The trade is worth stating plainly: an agent started this way edits, runs and
+deletes inside the container without asking. It cannot reach your host, but it can
+rewrite the checkout it is in, so review an `aid` workspace before pushing rather
+than treating it as a sandbox that will stop it for you. `--codex` and `--gemini`
+are unaffected, and `dl <ws> -- claude` still runs exactly what you typed.
+
 | Option | Description |
 |--------|-------------|
 | `--claude`, `--codex`, `--gemini` | Pick the agent (default: `claude`) |

{devlaunch-0.0.14 → devlaunch-0.0.15}/devlaunch/aid.py

@@ -7,7 +7,7 @@ a `dl` one and hands that to :func:`devlaunch.dl.main`, so:
 
 is exactly
 
-    dl owner/repo@branch -- claude 'fix the flaky test'
+    dl owner/repo@branch -- claude --dangerously-skip-permissions 'fix the flaky test'
 
 Everything that decides how a workspace is obtained — the bare repo cache, the
 worktree clone, the workspace id, the devpod container, the fast attach to one
@@ -27,13 +27,41 @@ from typing import Dict, List, Optional
 
 from . import dl
 
+
+@dataclass(frozen=True)
+class Agent:
+    """How one coding agent is started inside the workspace.
+
+    Split three ways because not every part of the line belongs everywhere:
+    `env` and `command` always run, while `prompt_flags` only joins them when
+    there is a prompt — gemini's way of taking an initial prompt is a flag that
+    is a syntax error without one.
+    """
+
+    command: List[str]
+    prompt_flags: List[str] = field(default_factory=list)
+    env: Dict[str, str] = field(default_factory=dict)
+
+
 # Base command per agent. The prompt, when there is one, is appended as a single
 # quoted argument; each of these CLIs takes an initial prompt that way and then
 # drops into its interactive session.
-AGENT_COMMANDS: Dict[str, List[str]] = {
-    "claude": ["claude"],
-    "codex": ["codex"],
-    "gemini": ["gemini", "--prompt-interactive"],
+#
+# claude is started with --dangerously-skip-permissions: the whole point of a dl
+# workspace is that the agent is already inside a disposable container with only
+# this repo in it, so the per-tool prompts it would otherwise ask on the host buy
+# nothing and stop an unattended `aid owner/repo fix the bug` dead.
+#
+# IS_SANDBOX=1 is what makes that flag usable at all here. claude refuses it
+# outright under uid 0 -- "cannot be used with root/sudo privileges", exit 1 --
+# and plenty of devcontainers run as root, so without this aid would not start
+# in them at all. The variable is claude's own way of being told the refusal is
+# answering for a machine that isn't there, which is exactly a dl workspace: a
+# disposable container holding one repo.
+AGENT_COMMANDS: Dict[str, Agent] = {
+    "claude": Agent(["claude", "--dangerously-skip-permissions"], env={"IS_SANDBOX": "1"}),
+    "codex": Agent(["codex"]),
+    "gemini": Agent(["gemini"], prompt_flags=["--prompt-interactive"]),
 }
 
 # Flags that pick the agent, e.g. `aid --gemini owner/repo ...`.
@@ -122,18 +150,21 @@ def build_agent_command(agent: str, prompt: str = "") -> str:
     takes. The prompt is quoted here rather than reassembled by the caller, so
     the words the user typed reach the agent as the single argument they meant.
     """
+    # Named for the agent, not `spec`, which is the workspace everywhere else here.
     try:
-        command = list(AGENT_COMMANDS[agent])
+        started = AGENT_COMMANDS[agent]
     except KeyError:
         raise UsageError(
             f"Unknown agent {agent!r}. Choose one of: {', '.join(sorted(AGENT_COMMANDS))}."
         ) from None
-    if not prompt:
-        # No prompt to be interactive about: start the agent's plain session.
-        # gemini's --prompt-interactive would be a syntax error without one.
-        return shlex.quote(command[0])
-    command.append(prompt)
-    return shlex.join(command)
+    # No prompt to be interactive about: start the agent's plain session, without
+    # the flags that only make sense alongside one.
+    words = [*started.command, *started.prompt_flags, prompt] if prompt else list(started.command)
+    # Assignments prefixing a command set the variables for that command only, so
+    # the agent is the one process that sees them and nothing in the login shell
+    # dl runs this under is changed.
+    assignments = [f"{name}={shlex.quote(value)}" for name, value in sorted(started.env.items())]
+    return " ".join([*assignments, shlex.join(words)])
 
 
 def build_dl_args(parsed: AidArgs) -> List[str]:

devlaunch-0.0.15/devlaunch/devpod_provider.py

@@ -0,0 +1,116 @@
+"""Answer "is this devpod provider already registered?" from devpod itself.
+
+The question used to be asked by grepping devpod's human-facing table:
+
+    devpod provider list | grep -qw docker || devpod provider add docker
+
+devpod v0.26.1 colourises that table unconditionally and emits the reset
+sequence ``ESC[m`` immediately before each cell, so the character preceding
+``docker`` is the letter ``m``, ``grep -w``'s left word boundary never matches,
+and the guard reported "absent" on every machine that had already registered the
+provider. ``NO_COLOR=1`` does not help.
+
+Dropping ``-w`` would have fixed today's rendering and left us reading a table
+devpod is free to re-render tomorrow. ``provider list --output json`` is the
+same information in a form that has no rendering to change: an object keyed by
+provider name.
+
+The other half of the old guard's failure is the part worth keeping out on
+purpose. Output it could not read came back as an empty set of providers, and an
+empty set of providers means "go add one" -- so an unreadable answer turned into
+an action. Here, unreadable is its own outcome: `UnreadableProviderList`. The
+caller finds out, rather than being told something false.
+"""
+
+import json
+import subprocess
+from typing import Callable, Optional, Sequence, Set
+
+
+class UnreadableProviderList(RuntimeError):
+    """devpod's provider listing could not be read.
+
+    Distinct from "no providers are registered", which is a listing that reads
+    fine and is empty.
+    """
+
+
+def parse_provider_names(listing: str) -> Set[str]:
+    """The names of every registered provider in a `--output json` listing."""
+    try:
+        parsed = json.loads(listing)
+    except json.JSONDecodeError as exc:
+        raise UnreadableProviderList(
+            f"devpod's provider listing is not JSON: {listing[:120]!r}"
+        ) from exc
+    if not isinstance(parsed, dict):
+        raise UnreadableProviderList(
+            f"expected devpod to list providers by name, got {type(parsed).__name__}"
+        )
+    return set(parsed)
+
+
+def list_provider_names(
+    run: Callable[..., subprocess.CompletedProcess] = subprocess.run,
+) -> Set[str]:
+    """Ask devpod which providers are registered."""
+    result = run(
+        ["devpod", "provider", "list", "--output", "json"],
+        capture_output=True,
+        text=True,
+        check=False,
+    )
+    if result.returncode != 0:
+        raise UnreadableProviderList(
+            f"`devpod provider list` exited {result.returncode}: {(result.stderr or '').strip()[:200]}"
+        )
+    return parse_provider_names(result.stdout or "")
+
+
+def ensure_provider(
+    name: str, run: Callable[..., subprocess.CompletedProcess] = subprocess.run
+) -> bool:
+    """Register `name` with devpod unless it is already registered.
+
+    Returns True if it had to be added, False if it was already there. Raises
+    `UnreadableProviderList` rather than guessing when devpod's answer cannot
+    be read.
+    """
+    if name in list_provider_names(run=run):
+        return False
+    result = run(["devpod", "provider", "add", name], check=False)
+    if result.returncode != 0:
+        raise RuntimeError(f"`devpod provider add {name}` exited {result.returncode}")
+    return True
+
+
+def main(
+    argv: Optional[Sequence[str]] = None,
+    run: Callable[..., subprocess.CompletedProcess] = subprocess.run,
+) -> int:
+    """CLI entry point: `python -m devlaunch.devpod_provider <name>`.
+
+    This is what the `dev-add-docker` pixi task runs, so a devpod that cannot be
+    read has to stop the task rather than let it carry on as if the provider
+    were missing.
+    """
+    import argparse  # pylint: disable=import-outside-toplevel
+
+    parser = argparse.ArgumentParser(
+        prog="python -m devlaunch.devpod_provider",
+        description="Register a devpod provider unless it is already registered.",
+    )
+    parser.add_argument("name", help="provider name, e.g. docker")
+    args = parser.parse_args(argv)
+
+    try:
+        added = ensure_provider(args.name, run=run)
+    except (UnreadableProviderList, RuntimeError) as exc:
+        print(f"error: {exc}")
+        return 1
+    print(f"devpod provider {args.name}: {'added' if added else 'already registered'}")
+    return 0
+
+
+if __name__ == "__main__":
+    raise SystemExit(main())

{devlaunch-0.0.14 → devlaunch-0.0.15}/pyproject.toml

@@ -1,6 +1,6 @@
 [project]
 name = "devlaunch"
-version = "0.0.14"
+version = "0.0.15"
 authors = [{ name = "Austin Gregg-Smith", email = "blooop@gmail.com" }]
 description = "DevLaunch - A streamlined CLI for devpod workspaces"
 readme = "README.md"
@@ -74,7 +74,7 @@ py312 = ["py312", "test"]
 py313 = ["py313", "test"]
 
 [tool.pixi.tasks]
-dev-add-docker = "devpod provider list | grep -qw docker || devpod provider add docker"
+dev-add-docker = "python -m devlaunch.devpod_provider docker"
 dev = { cmd = "devpod up . --ide none && ssh pythontemplate.devpod", depends-on = ["dev-add-docker"] }
 dev-vs = { cmd = "devpod up . --ide vscode", depends-on = ["dev-add-docker"] }
 dev-restart = { cmd = "devpod up . --recreate --ide none && ssh pythontemplate.devpod", depends-on = ["dev-add-docker"] }