Skip to content

feat(sandbox): inject user env vars and secret refs into execution #12655

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Open
anticorrelator wants to merge 7 commits into
base: version-sandboxes
Choose a base branch
from
Open

feat(sandbox): inject user env vars and secret refs into execution #12655

Show file tree
Hide file tree
Changes from all commits
Commits
Show all changes
7 commits
Select commit Hold shift + click to select a range
6066e82
feat(sandbox): inject user-defined env vars and secret refs into sand…
anticorrelator Apr 14, 2026
a073fec
fix(sandbox): align test adapter signatures and ruff formatting
anticorrelator Apr 14, 2026
aad90e9
fix(sandbox): unpack packages list in daytona pip install command
anticorrelator Apr 14, 2026
f0e12a1
feat(sandbox): resolve provider credentials via DB secrets + env fall…
anticorrelator Apr 14, 2026
9d65ff2
feat(sandbox): unified config contract — fail-closed runtime + preser…
anticorrelator Apr 15, 2026
13dda2e
fix(sandbox): enforce dependencies/internet_access guards for DENO an…
anticorrelator Apr 15, 2026
95fb7bb
feat(sandbox): enforce capability gates and reserved credential names…
anticorrelator Apr 17, 2026
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
23 changes: 23 additions & 0 deletions app/schema.graphql
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -1232,6 +1232,12 @@ type DeleteSandboxConfigPayload {
query: Query!
}

type DeleteSandboxCredentialPayload {
backendType: String!
key: String!
query: Query!
}

input DeleteUsersInput {
userIds: [ID!]!
}
Expand Down Expand Up @@ -2061,6 +2067,12 @@ type IntInvocationParameter implements InvocationParameterBase {
defaultValue: Int
}

enum InternetAccessMode {
NONE
BOOLEAN
ALLOWLIST
}

enum InvocationInputField {
value_int
value_float
Expand Down Expand Up @@ -2230,6 +2242,8 @@ type Mutation {
updateSandboxConfig(input: UpdateSandboxConfigInput!): UpdateSandboxConfigPayload!
deleteSandboxConfig(id: ID!): DeleteSandboxConfigPayload!
updateSandboxProvider(input: UpdateSandboxProviderInput!): UpdateSandboxProviderPayload!
setSandboxCredential(backendType: String!, key: String!, value: String!): SetSandboxCredentialPayload!
deleteSandboxCredential(backendType: String!, key: String!): DeleteSandboxCredentialPayload!
upsertOrDeleteSecrets(input: UpsertOrDeleteSecretsMutationInput!): UpsertOrDeleteSecretsMutationPayload!
createSpanAnnotations(input: [CreateSpanAnnotationInput!]!): SpanAnnotationMutationPayload!
createSpanNote(annotationInput: CreateSpanNoteInput!): SpanAnnotationMutationPayload!
Expand Down Expand Up @@ -3084,6 +3098,9 @@ type SandboxBackendInfo {
status: SandboxBackendStatus!
dependencyHints: [String!]!
configFieldSpecs: [ConfigFieldSpecType!]!
supportsEnvVars: Boolean!
internetAccess: InternetAccessMode!
dependenciesLanguage: Language
}

enum SandboxBackendStatus {
Expand Down Expand Up @@ -3189,6 +3206,12 @@ input SetPromptVersionTagInput {
description: String = null
}

type SetSandboxCredentialPayload {
backendType: String!
key: String!
query: Query!
}

enum SortDir {
asc
desc
Expand Down
27 changes: 24 additions & 3 deletions app/src/pages/settings/__generated__/settingsSandboxesPageLoaderQuery.graphql.ts
View file
Open in desktop

Some generated files are not rendered by default. Learn more about how customized files appear on GitHub.

Loading
Loading