70679a3321
## Thinking Path > - Paperclip orchestrates AI agents for zero-human companies. > - The environment/runtime layer decides where agent work executes and how the control plane reaches those runtimes. > - Today Paperclip can run locally and over SSH, but sandboxed execution needs a first-class environment model instead of one-off adapter behavior. > - We also want sandbox providers to be pluggable so the core does not hardcode every provider implementation. > - This branch adds the Sandbox environment path, the provider contract, and a deterministic fake provider plugin. > - That required synchronized changes across shared contracts, plugin SDK surfaces, server runtime orchestration, and the UI environment/workspace flows. > - The result is that sandbox execution becomes a core control-plane capability while keeping provider implementations extensible and testable. ## What Changed - Added sandbox runtime support to the environment execution path, including runtime URL discovery, sandbox execution targeting, orchestration, and heartbeat integration. - Added plugin-provider support for sandbox environments so providers can be supplied via plugins instead of hardcoded server logic. - Added the fake sandbox provider plugin with deterministic behavior suitable for local and automated testing. - Updated shared types, validators, plugin protocol definitions, and SDK helpers to carry sandbox provider and workspace-runtime contracts across package boundaries. - Updated server routes and services so companies can create sandbox environments, select them for work, and execute work through the sandbox runtime path. - Updated the UI environment and workspace surfaces to expose sandbox environment configuration and selection. - Added test coverage for sandbox runtime behavior, provider seams, environment route guards, orchestration, and the fake provider plugin. ## Verification - Ran locally before the final fixture-only scrub: - `pnpm -r typecheck` - `pnpm test:run` - `pnpm build` - Ran locally after the final scrub amend: - `pnpm vitest run server/src/__tests__/runtime-api.test.ts` - Reviewer spot checks: - create a sandbox environment backed by the fake provider plugin - run work through that environment - confirm sandbox provider execution does not inherit host secrets implicitly ## Risks - This touches shared contracts, plugin SDK plumbing, server runtime orchestration, and UI environment/workspace flows, so regressions would likely show up as cross-layer mismatches rather than isolated type errors. - Runtime URL discovery and sandbox callback selection are sensitive to host/bind configuration; if that logic is wrong, sandbox-backed callbacks may fail even when execution succeeds. - The fake provider plugin is intentionally deterministic and test-oriented; future providers may expose capability gaps that this branch does not yet cover. ## Model Used - OpenAI Codex coding agent on a GPT-5-class backend in the Paperclip/Codex harness. Exact backend model ID is not exposed in-session. Tool-assisted workflow with shell execution, file editing, git history inspection, and local test execution. ## Checklist - [x] I have included a thinking path that traces from project context to this change - [x] I have specified the model used (with version and capability details) - [x] I have checked ROADMAP.md and confirmed this PR does not duplicate planned core work - [x] I have run tests locally and they pass - [x] I have added or updated tests where applicable - [ ] If this change affects the UI, I have included before/after screenshots - [x] I have updated relevant documentation to reflect my changes - [x] I have considered and documented any risks above - [x] I will address all Greptile and reviewer comments before requesting merge
383 lines
10 KiB
TypeScript
383 lines
10 KiB
TypeScript
export {
|
|
instanceGeneralSettingsSchema,
|
|
patchInstanceGeneralSettingsSchema,
|
|
type InstanceGeneralSettings,
|
|
type PatchInstanceGeneralSettings,
|
|
instanceExperimentalSettingsSchema,
|
|
patchInstanceExperimentalSettingsSchema,
|
|
type InstanceExperimentalSettings,
|
|
type PatchInstanceExperimentalSettings,
|
|
} from "./instance.js";
|
|
|
|
export {
|
|
upsertBudgetPolicySchema,
|
|
resolveBudgetIncidentSchema,
|
|
type UpsertBudgetPolicy,
|
|
type ResolveBudgetIncident,
|
|
} from "./budget.js";
|
|
|
|
export {
|
|
createCompanySchema,
|
|
updateCompanySchema,
|
|
updateCompanyBrandingSchema,
|
|
type CreateCompany,
|
|
type UpdateCompany,
|
|
type UpdateCompanyBranding,
|
|
} from "./company.js";
|
|
export {
|
|
environmentDriverSchema,
|
|
environmentStatusSchema,
|
|
environmentLeaseStatusSchema,
|
|
environmentLeaseCleanupStatusSchema,
|
|
createEnvironmentSchema,
|
|
updateEnvironmentSchema,
|
|
probeEnvironmentConfigSchema,
|
|
type CreateEnvironment,
|
|
type UpdateEnvironment,
|
|
type ProbeEnvironmentConfig,
|
|
} from "./environment.js";
|
|
export {
|
|
feedbackDataSharingPreferenceSchema,
|
|
feedbackTargetTypeSchema,
|
|
feedbackTraceStatusSchema,
|
|
feedbackVoteValueSchema,
|
|
upsertIssueFeedbackVoteSchema,
|
|
type UpsertIssueFeedbackVote,
|
|
} from "./feedback.js";
|
|
export {
|
|
sidebarOrderPreferenceSchema,
|
|
upsertSidebarOrderPreferenceSchema,
|
|
type UpsertSidebarOrderPreference,
|
|
} from "./sidebar-preferences.js";
|
|
export {
|
|
companySkillSourceTypeSchema,
|
|
companySkillTrustLevelSchema,
|
|
companySkillCompatibilitySchema,
|
|
companySkillSourceBadgeSchema,
|
|
companySkillFileInventoryEntrySchema,
|
|
companySkillSchema,
|
|
companySkillListItemSchema,
|
|
companySkillUsageAgentSchema,
|
|
companySkillDetailSchema,
|
|
companySkillUpdateStatusSchema,
|
|
companySkillImportSchema,
|
|
companySkillProjectScanRequestSchema,
|
|
companySkillProjectScanSkippedSchema,
|
|
companySkillProjectScanConflictSchema,
|
|
companySkillProjectScanResultSchema,
|
|
companySkillCreateSchema,
|
|
companySkillFileDetailSchema,
|
|
companySkillFileUpdateSchema,
|
|
type CompanySkillImport,
|
|
type CompanySkillProjectScan,
|
|
type CompanySkillCreate,
|
|
type CompanySkillFileUpdate,
|
|
} from "./company-skill.js";
|
|
export {
|
|
agentSkillStateSchema,
|
|
agentSkillSyncModeSchema,
|
|
agentSkillEntrySchema,
|
|
agentSkillSnapshotSchema,
|
|
agentSkillSyncSchema,
|
|
type AgentSkillSync,
|
|
} from "./adapter-skills.js";
|
|
export {
|
|
portabilityIncludeSchema,
|
|
portabilityEnvInputSchema,
|
|
portabilityCompanyManifestEntrySchema,
|
|
portabilitySidebarOrderSchema,
|
|
portabilityAgentManifestEntrySchema,
|
|
portabilitySkillManifestEntrySchema,
|
|
portabilityManifestSchema,
|
|
portabilitySourceSchema,
|
|
portabilityTargetSchema,
|
|
portabilityAgentSelectionSchema,
|
|
portabilityCollisionStrategySchema,
|
|
companyPortabilityExportSchema,
|
|
companyPortabilityPreviewSchema,
|
|
companyPortabilityImportSchema,
|
|
type CompanyPortabilityExport,
|
|
type CompanyPortabilityPreview,
|
|
type CompanyPortabilityImport,
|
|
} from "./company-portability.js";
|
|
|
|
export {
|
|
createAgentSchema,
|
|
createAgentHireSchema,
|
|
updateAgentSchema,
|
|
agentInstructionsBundleModeSchema,
|
|
updateAgentInstructionsBundleSchema,
|
|
upsertAgentInstructionsFileSchema,
|
|
updateAgentInstructionsPathSchema,
|
|
createAgentKeySchema,
|
|
agentMineInboxQuerySchema,
|
|
wakeAgentSchema,
|
|
resetAgentSessionSchema,
|
|
testAdapterEnvironmentSchema,
|
|
agentPermissionsSchema,
|
|
updateAgentPermissionsSchema,
|
|
type CreateAgent,
|
|
type CreateAgentHire,
|
|
type UpdateAgent,
|
|
type UpdateAgentInstructionsBundle,
|
|
type UpsertAgentInstructionsFile,
|
|
type UpdateAgentInstructionsPath,
|
|
type CreateAgentKey,
|
|
type AgentMineInboxQuery,
|
|
type WakeAgent,
|
|
type ResetAgentSession,
|
|
type TestAdapterEnvironment,
|
|
type UpdateAgentPermissions,
|
|
} from "./agent.js";
|
|
|
|
export {
|
|
createProjectSchema,
|
|
updateProjectSchema,
|
|
createProjectWorkspaceSchema,
|
|
updateProjectWorkspaceSchema,
|
|
projectExecutionWorkspacePolicySchema,
|
|
projectWorkspaceRuntimeConfigSchema,
|
|
type CreateProject,
|
|
type UpdateProject,
|
|
type CreateProjectWorkspace,
|
|
type UpdateProjectWorkspace,
|
|
type ProjectExecutionWorkspacePolicy,
|
|
} from "./project.js";
|
|
|
|
export {
|
|
createIssueSchema,
|
|
createChildIssueSchema,
|
|
createIssueLabelSchema,
|
|
updateIssueSchema,
|
|
issueExecutionPolicySchema,
|
|
issueExecutionStateSchema,
|
|
issueReviewRequestSchema,
|
|
issueExecutionWorkspaceSettingsSchema,
|
|
checkoutIssueSchema,
|
|
addIssueCommentSchema,
|
|
issueThreadInteractionStatusSchema,
|
|
issueThreadInteractionKindSchema,
|
|
issueThreadInteractionContinuationPolicySchema,
|
|
suggestedTaskDraftSchema,
|
|
suggestTasksPayloadSchema,
|
|
suggestTasksResultCreatedTaskSchema,
|
|
suggestTasksResultSchema,
|
|
askUserQuestionsQuestionOptionSchema,
|
|
askUserQuestionsQuestionSchema,
|
|
askUserQuestionsPayloadSchema,
|
|
askUserQuestionsAnswerSchema,
|
|
askUserQuestionsResultSchema,
|
|
requestConfirmationIssueDocumentTargetSchema,
|
|
requestConfirmationCustomTargetSchema,
|
|
requestConfirmationTargetSchema,
|
|
requestConfirmationPayloadSchema,
|
|
requestConfirmationResultSchema,
|
|
createIssueThreadInteractionSchema,
|
|
acceptIssueThreadInteractionSchema,
|
|
rejectIssueThreadInteractionSchema,
|
|
respondIssueThreadInteractionSchema,
|
|
linkIssueApprovalSchema,
|
|
createIssueAttachmentMetadataSchema,
|
|
issueDocumentFormatSchema,
|
|
issueDocumentKeySchema,
|
|
upsertIssueDocumentSchema,
|
|
restoreIssueDocumentRevisionSchema,
|
|
type CreateIssue,
|
|
type CreateChildIssue,
|
|
type CreateIssueLabel,
|
|
type UpdateIssue,
|
|
type IssueExecutionWorkspaceSettings,
|
|
type CheckoutIssue,
|
|
type AddIssueComment,
|
|
type CreateIssueThreadInteraction,
|
|
type AcceptIssueThreadInteraction,
|
|
type RejectIssueThreadInteraction,
|
|
type RespondIssueThreadInteraction,
|
|
type LinkIssueApproval,
|
|
type CreateIssueAttachmentMetadata,
|
|
type IssueDocumentFormat,
|
|
type UpsertIssueDocument,
|
|
type RestoreIssueDocumentRevision,
|
|
} from "./issue.js";
|
|
|
|
export {
|
|
createIssueTreeHoldSchema,
|
|
issueTreeControlModeSchema,
|
|
issueTreeHoldReleasePolicySchema,
|
|
previewIssueTreeControlSchema,
|
|
releaseIssueTreeHoldSchema,
|
|
type CreateIssueTreeHold,
|
|
type PreviewIssueTreeControl,
|
|
type ReleaseIssueTreeHold,
|
|
} from "./issue-tree-control.js";
|
|
|
|
export {
|
|
createIssueWorkProductSchema,
|
|
updateIssueWorkProductSchema,
|
|
issueWorkProductTypeSchema,
|
|
issueWorkProductStatusSchema,
|
|
issueWorkProductReviewStateSchema,
|
|
type CreateIssueWorkProduct,
|
|
type UpdateIssueWorkProduct,
|
|
} from "./work-product.js";
|
|
|
|
export {
|
|
executionWorkspaceConfigSchema,
|
|
updateExecutionWorkspaceSchema,
|
|
executionWorkspaceStatusSchema,
|
|
executionWorkspaceCloseActionKindSchema,
|
|
executionWorkspaceCloseActionSchema,
|
|
executionWorkspaceCloseGitReadinessSchema,
|
|
executionWorkspaceCloseLinkedIssueSchema,
|
|
executionWorkspaceCloseReadinessSchema,
|
|
executionWorkspaceCloseReadinessStateSchema,
|
|
type UpdateExecutionWorkspace,
|
|
} from "./execution-workspace.js";
|
|
|
|
export {
|
|
createGoalSchema,
|
|
updateGoalSchema,
|
|
type CreateGoal,
|
|
type UpdateGoal,
|
|
} from "./goal.js";
|
|
|
|
export {
|
|
createApprovalSchema,
|
|
resolveApprovalSchema,
|
|
requestApprovalRevisionSchema,
|
|
resubmitApprovalSchema,
|
|
addApprovalCommentSchema,
|
|
type CreateApproval,
|
|
type ResolveApproval,
|
|
type RequestApprovalRevision,
|
|
type ResubmitApproval,
|
|
type AddApprovalComment,
|
|
} from "./approval.js";
|
|
|
|
export {
|
|
envBindingPlainSchema,
|
|
envBindingSecretRefSchema,
|
|
envBindingSchema,
|
|
envConfigSchema,
|
|
createSecretSchema,
|
|
rotateSecretSchema,
|
|
updateSecretSchema,
|
|
type CreateSecret,
|
|
type RotateSecret,
|
|
type UpdateSecret,
|
|
} from "./secret.js";
|
|
|
|
export {
|
|
createRoutineSchema,
|
|
updateRoutineSchema,
|
|
createRoutineTriggerSchema,
|
|
updateRoutineTriggerSchema,
|
|
routineVariableSchema,
|
|
runRoutineSchema,
|
|
rotateRoutineTriggerSecretSchema,
|
|
type CreateRoutine,
|
|
type UpdateRoutine,
|
|
type CreateRoutineTrigger,
|
|
type UpdateRoutineTrigger,
|
|
type RunRoutine,
|
|
type RotateRoutineTriggerSecret,
|
|
} from "./routine.js";
|
|
|
|
export {
|
|
createCostEventSchema,
|
|
updateBudgetSchema,
|
|
type CreateCostEvent,
|
|
type UpdateBudget,
|
|
} from "./cost.js";
|
|
|
|
export {
|
|
createFinanceEventSchema,
|
|
type CreateFinanceEvent,
|
|
} from "./finance.js";
|
|
|
|
export {
|
|
createAssetImageMetadataSchema,
|
|
type CreateAssetImageMetadata,
|
|
} from "./asset.js";
|
|
|
|
export {
|
|
createCompanyInviteSchema,
|
|
createOpenClawInvitePromptSchema,
|
|
acceptInviteSchema,
|
|
listCompanyInvitesQuerySchema,
|
|
listJoinRequestsQuerySchema,
|
|
claimJoinRequestApiKeySchema,
|
|
boardCliAuthAccessLevelSchema,
|
|
createCliAuthChallengeSchema,
|
|
resolveCliAuthChallengeSchema,
|
|
currentUserProfileSchema,
|
|
authSessionSchema,
|
|
updateCurrentUserProfileSchema,
|
|
updateCompanyMemberSchema,
|
|
updateCompanyMemberWithPermissionsSchema,
|
|
archiveCompanyMemberSchema,
|
|
updateMemberPermissionsSchema,
|
|
searchAdminUsersQuerySchema,
|
|
updateUserCompanyAccessSchema,
|
|
type CreateCompanyInvite,
|
|
type CreateOpenClawInvitePrompt,
|
|
type AcceptInvite,
|
|
type ListCompanyInvitesQuery,
|
|
type ListJoinRequestsQuery,
|
|
type ClaimJoinRequestApiKey,
|
|
type BoardCliAuthAccessLevel,
|
|
type CreateCliAuthChallenge,
|
|
type ResolveCliAuthChallenge,
|
|
type CurrentUserProfile,
|
|
type AuthSession,
|
|
type UpdateCurrentUserProfile,
|
|
type UpdateCompanyMember,
|
|
type UpdateCompanyMemberWithPermissions,
|
|
type ArchiveCompanyMember,
|
|
type UpdateMemberPermissions,
|
|
type SearchAdminUsersQuery,
|
|
type UpdateUserCompanyAccess,
|
|
} from "./access.js";
|
|
|
|
export {
|
|
jsonSchemaSchema,
|
|
pluginJobDeclarationSchema,
|
|
pluginWebhookDeclarationSchema,
|
|
pluginToolDeclarationSchema,
|
|
pluginEnvironmentDriverDeclarationSchema,
|
|
pluginUiSlotDeclarationSchema,
|
|
pluginLauncherActionDeclarationSchema,
|
|
pluginLauncherRenderDeclarationSchema,
|
|
pluginLauncherDeclarationSchema,
|
|
pluginDatabaseDeclarationSchema,
|
|
pluginApiRouteDeclarationSchema,
|
|
pluginManifestV1Schema,
|
|
installPluginSchema,
|
|
upsertPluginConfigSchema,
|
|
patchPluginConfigSchema,
|
|
updatePluginStatusSchema,
|
|
uninstallPluginSchema,
|
|
pluginStateScopeKeySchema,
|
|
setPluginStateSchema,
|
|
listPluginStateSchema,
|
|
type PluginJobDeclarationInput,
|
|
type PluginWebhookDeclarationInput,
|
|
type PluginToolDeclarationInput,
|
|
type PluginEnvironmentDriverDeclarationInput,
|
|
type PluginUiSlotDeclarationInput,
|
|
type PluginLauncherActionDeclarationInput,
|
|
type PluginLauncherRenderDeclarationInput,
|
|
type PluginLauncherDeclarationInput,
|
|
type PluginDatabaseDeclarationInput,
|
|
type PluginApiRouteDeclarationInput,
|
|
type PluginManifestV1Input,
|
|
type InstallPlugin,
|
|
type UpsertPluginConfig,
|
|
type PatchPluginConfig,
|
|
type UpdatePluginStatus,
|
|
type UninstallPlugin,
|
|
type PluginStateScopeKey,
|
|
type SetPluginState,
|
|
type ListPluginState,
|
|
} from "./plugin.js";
|