Function buildSandbox

examples/ts-react-chat/src/sandbox-triage.ts:349–423

(opts: {
  harness: HarnessName
  provider: ProviderName
  repo: string
  threadId: string
  /** Keep the sandbox alive after the run instead of destroying it (default: destroy). */
  keepAlive?: boolean
  /** Local Claude Code only: use the host's subscription login instead of an API key. */
  useSubscription?: boolean
})

/** One sandbox per (harness, provider, thread): switching a picker → fresh sandbox. */
export function buildSandbox(opts: {
  harness: HarnessName
  provider: ProviderName
  repo: string
  threadId: string
  /** Keep the sandbox alive after the run instead of destroying it (default: destroy). */
  keepAlive?: boolean
  /** Local Claude Code only: use the host's subscription login instead of an API key. */
  useSubscription?: boolean
}): SandboxDefinition {
  const harness = HARNESSES[opts.harness]
  const subscription = usesSubscription(
    opts.harness,
    opts.provider,
    opts.useSubscription,
  )

  // Subscription mode scrubs ANTHROPIC_API_KEY from the host claude's env (via the
  // provider's `scrubEnv` flag) so it falls back to the logged-in subscription.
  // Ports the in-sandbox CLI needs reachable from the host (e.g. opencode's serve port).
  const ports = harness.exposePort !== undefined ? [harness.exposePort] : []
  const provider = subscription
    ? localProcessSandbox({ scrubEnv: ['ANTHROPIC_API_KEY'] })
    : PROVIDERS[opts.provider].make(ports)

  // Inject auth secrets only for sandboxed providers — local-process inherits the
  // host's own env (API key, or a `claude login`/`codex login`), so nothing to inject.
  const secretEnv: Record<string, string> = {}
  if (opts.provider !== 'local') {
    // Harness auth: a custom mapping (e.g. codex → CODEX_API_KEY) if provided,
    // otherwise inject whichever of its requiredEnv vars are set.
    if (harness.sandboxSecrets) {
      Object.assign(secretEnv, harness.sandboxSecrets())
    } else {
      for (const key of harness.requiredEnv) {
        const value = process.env[key]
        if (value) secretEnv[key] = value
      }
    }
    // Provider auth (e.g. DAYTONA_API_KEY) — used host-side, harmless in-sandbox.
    for (const key of PROVIDERS[opts.provider].requiredEnv) {
      const value = process.env[key]
      if (value) secretEnv[key] = value
    }
  }
  return defineSandbox({
    id: `triage-${opts.harness}-${opts.provider}-${opts.threadId}`,
    provider,
    workspace: defineWorkspace({
      source: githubRepo({ repo: opts.repo }),
      setup: ({ serial }) => {
        // Install the harness CLI into the fresh sandbox for every provider
        // EXCEPT local-process, which uses the host's CLI already on PATH.
        // Remote/container images (docker/vercel/daytona) don't ship it.
        if (opts.provider !== 'local' && harness.installCommand) {
          // Some images (e.g. Daytona) run as a non-root user with a root-owned
          // global npm dir → `npm install -g` fails EACCES. Fall back to
          // passwordless sudo, preserving PATH so nvm's npm/node still resolve.