Skip to content

feat: gut Docker sandbox infrastructure (#68)#69

Merged
alexey-pelykh merged 1 commit intomainfrom
gut-docker-sandbox
Feb 27, 2026
Merged

feat: gut Docker sandbox infrastructure (#68)#69
alexey-pelykh merged 1 commit intomainfrom
gut-docker-sandbox

Conversation

@alexey-pelykh
Copy link
Copy Markdown

Summary

  • Remove the entire Docker sandbox system (39 files in src/agents/sandbox/, 3 Dockerfiles, sandbox CLI/commands, test infrastructure, media staging, config types/schemas)
  • Fix 30+ surviving files with inline stubs replacing deleted sandbox imports
  • Surviving pi-embedded-runner and bash-tools files get minimal no-op stubs (slated for deletion in future work items)
  • Security audit functions stubbed to return safe defaults
  • Config schemas relaxed for backward compatibility during transition

Closes #68

129 files changed, 349 insertions, 14,424 deletions

Test plan

  • pnpm build passes
  • pnpm test — 6 failing suites / 33 tests, ALL pre-existing on main (cron test failures unrelated to sandbox)
  • grep -r "sandbox" src/ — zero imports from deleted sandbox modules in surviving code
  • sandbox CLI subcommand deregistered from register.subclis.ts
  • src/agents/sandbox/ directory fully deleted
  • Lint passes (pre-commit hook)

🤖 Generated with Claude Code

Remove the entire Docker sandbox system — RemoteClaw delegates execution
to CLI agents (Claude Code, Gemini CLI, etc.) which have their own native
sandboxing, making the in-process Docker sandbox dead code.

Deleted:
- src/agents/sandbox/ directory (39 files)
- Root-level sandbox files (sandbox.ts, sandbox-paths.ts, sandbox-tool-policy.ts, etc.)
- Dockerfile.sandbox, Dockerfile.sandbox-browser, Dockerfile.sandbox-common
- Sandbox CLI subcommand (sandbox-cli.ts, sandbox-display.ts, sandbox-explain.ts, etc.)
- Sandbox test infrastructure (scripts/docker/*)
- Sandbox media staging (stage-sandbox-media.ts)
- Sandbox config types (types.sandbox.ts) and Zod schemas
- Sandbox-only test files (25+ files)

Modified (inline stubs for build compatibility):
- pi-embedded-runner files: minimal no-op stubs (files slated for deletion)
- bash-tools files: minimal assertSandboxPath stubs (files slated for deletion)
- apply-patch.ts, pi-tools.read.ts: inlined SandboxFsBridge type + assertSandboxPath
- pi-tools.policy.ts: inlined SandboxToolPolicy type + pickSandboxToolPolicy
- Security audit files: stubbed sandbox audit functions
- Config schemas: relaxed sandbox schemas for backward compat
- Auto-reply files: simplified to always-direct mode (no sandbox)

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>
@alexey-pelykh alexey-pelykh enabled auto-merge (squash) February 27, 2026 18:05
@alexey-pelykh alexey-pelykh merged commit 9ab3f08 into main Feb 27, 2026
2 checks passed
@alexey-pelykh alexey-pelykh deleted the gut-docker-sandbox branch February 27, 2026 18:15
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

GUT Docker sandbox infrastructure

1 participant