checkpoint

⚒️ Generated with [Fabro](https://fabro.sh)

stages/006-preflight_lint@2/output.log

@@ -0,0 +1 @@
+blob://sha256/12ae32cb1ec02d01eda3581b127c1fee3b0dc53572ed6baf239721a03d82e126

stages/006-preflight_lint@2/script_timing.json

@@ -0,0 +1,8 @@
+{
+  "output": "blob://sha256/12ae32cb1ec02d01eda3581b127c1fee3b0dc53572ed6baf239721a03d82e126",
+  "exit_code": 0,
+  "duration_ms": 20702,
+  "termination": "exited",
+  "output_bytes": 0,
+  "live_streaming": false
+}

stages/006-preflight_lint@2/status.json

@@ -0,0 +1,6 @@
+{
+  "outcome": "succeeded",
+  "notes": "Script completed: cargo +nightly-2026-04-14 clippy -q --workspace --all-targets -- -D warnings 2>&1",
+  "failure_reason": null,
+  "timestamp": "2026-05-23T03:04:16.284075Z"
+}

stages/007-implement@1/prompt.md

@@ -0,0 +1,183 @@
+Goal: # Named Environments Implementation Plan
+
+> **For agentic workers:** REQUIRED SUB-SKILL: Use superpowers:subagent-driven-development (recommended) or superpowers:executing-plans to implement this plan task-by-task.
+
+**Goal:** Replace run-scoped sandbox configuration with named, provider-explicit environments that runs can select by slug.
+
+**Architecture:** Add a shared top-level environment catalog, resolve a selected environment into the run's dense settings, validate provider capabilities, and convert the resolved environment into the existing sandbox runtime specs. Keep "environment" as reusable desired configuration and "sandbox" as the concrete runtime instance created for a run.
+
+**Tech Stack:** Rust config/types crates, TOML settings layers, Fabro workflow sandbox providers, OpenAPI-generated clients, public docs.
+
+---
+
+## Summary
+
+Replace run-scoped sandbox configuration with named, provider-explicit environments. A run selects an environment by slug via `[run.environment] id = "..."`; Fabro resolves the environment catalog through normal config precedence, applies run-level environment overrides, validates provider capabilities, freezes the resolved environment into the run settings, and creates a concrete sandbox instance from it.
+
+This is a greenfield break: no `[run.sandbox]` compatibility layer, no server policy layer, and no required/optional volume semantics.
+
+## Key Interface Changes
+
+- Add top-level `[environments.<slug>]` to the shared settings schema. It is valid in `settings.toml`, `.fabro/project.toml`, and `workflow.toml`.
+- Replace sandbox selection with:
+
+```toml
+[run.environment]
+id = "fabro-dev"
+```
+
+- Allow sparse run-level overrides under the same table:
+
+```toml
+[run.environment.resources]
+memory = "32GB"
+
+[run.environment.lifecycle]
+preserve = true
+```
+
+- Environment shape:
+
+```toml
+[environments.fabro-dev]
+provider = "daytona" # local | docker | daytona
+
+[environments.fabro-dev.image]
+ref = "fabro-v11"              # Docker image or Daytona snapshot name
+dockerfile = { path = "Dockerfile" }
+
+[environments.fabro-dev.resources]
+cpu = 8
+memory = "16GB"
+disk = "20GB"
+
+[environments.fabro-dev.network]
+mode = "block"                # allow_all | block | cidr_allow_list
+allow = ["10.0.0.0/8"]
+
+[environments.fabro-dev.lifecycle]
+preserve = false
+stop_on_terminal = true
+auto_stop = "30m"
+
+[environments.fabro-dev.labels]
+repo = "fabro-sh/fabro"
+
+[[environments.fabro-dev.volumes]]
+id = "vol-agent-state"
+mount_path = "/home/daytona/agent-state"
+subpath = "auth"
+
+[environments.fabro-dev.env]
+NODE_ENV = "development"
+```
+
+- Built-in default becomes:
+
+```toml
+[run.environment]
+id = "default"
+
+[environments.default]
+provider = "docker"
+
+[environments.default.image]
+ref = "buildpack-deps:noble"
+
+[environments.default.resources]
+cpu = 2
+memory = "4GB"
+
+[environments.default.lifecycle]
+preserve = false
+stop_on_terminal = true
+```
+
+## Implementation Changes
+
+- Add environment sparse and dense types:
+  - Sparse layer in `fabro-config` for `EnvironmentLayer`, `RunEnvironmentLayer`, image/resources/network/lifecycle/volume sublayers, and `[environments]` as a `MergeMap`.
+  - Dense types in `fabro-types` for `EnvironmentSettings`, `RunEnvironmentSettings`, `EnvironmentProvider`, `EnvironmentNetworkMode`, and related subsettings.
+  - Add `environments` to the top-level `SettingsLayer` and resolved `WorkflowSettings`; add selected `environment` to `RunNamespace`.
+- Resolve environments before run consumers use sandbox data:
+  - Merge environment definitions by slug.
+  - Resolve `[run.environment].id`; error if the slug is missing.
+  - Overlay sparse `[run.environment.*]` fields onto the selected environment.
+  - Validate provider is `local`, `docker`, or `daytona`.
+  - Validate CIDRs with existing `ipnet`.
+  - Store the selected resolved environment in `RunNamespace.environment`.
+- Replace sandbox runtime mapping:
+  - Convert `RunNamespace.environment` to `SandboxSpec` in workflow start and server preflight paths.
+  - Daytona: `image.ref` maps to snapshot name, `dockerfile` to snapshot Dockerfile, resources to snapshot sizing, network to Daytona policy, labels/volumes/env/lifecycle to existing provider fields.
+  - Docker: `image.ref` maps to Docker image, `cpu` maps to `cpu_quota = cpu * 100000`, memory maps to memory limit, `network.mode = block` maps to `network_mode = none`, `allow_all` maps to default/bridge.
+  - Local: use resolved working directory; env overlays process env as today.
+- Capability diagnostics:
+  - Hard error for explicit security/isolation properties a provider cannot enforce:
+    - local with `network.mode = block` or `cidr_allow_list`
+    - docker with `network.mode = cidr_allow_list`
+  - Warnings only for unsupported resource limits, volumes, labels, `auto_stop`, and Docker `image.dockerfile`.
+  - If Daytona has `image.dockerfile` without `image.ref`, error because snapshot creation needs a name.
+- Remove old sandbox config surface:
+  - Delete `[run.sandbox]` parsing/resolution/types from user-facing config.
+  - Replace CLI/API/tool manifest args named `sandbox` with `environment` where they select execution profile.
+  - Keep runtime/public "sandbox" terminology only for concrete instances, e.g. `fabro sandbox ssh`, `RunSandbox`, sandbox details.
+- Update docs and generated clients:
+  - Update run configuration, environments, Daytona, server configuration, CLI reference, and OpenAPI spec.
+  - Regenerate Rust API types/client and TypeScript API client after OpenAPI changes.
+
+## Test Plan
+
+- Config tests:
+  - default resolves to `run.environment.id = "default"` and Docker environment settings.
+  - project/workflow/run layers merge environment catalog by slug.
+  - `[run.environment]` overrides selected environment fields.
+  - `env` and `labels` merge by key; `volumes` replace wholesale.
+  - missing environment slug errors.
+  - old `[run.sandbox]` is rejected as an unknown field.
+- Provider mapping tests:
+  - Daytona environment maps to snapshot/resources/network/labels/volumes/env.
+  - Docker environment maps image, CPU, memory, network block, and env.
+  - Local environment ignores non-security unsupported fields with warnings.
+- Validation tests:
+  - docker plus CIDR allow-list errors.
+  - local plus blocked network errors.
+  - resource limits unsupported by provider produce warnings, not errors.
+  - volumes unsupported by provider produce warnings, not errors.
+  - Daytona dockerfile without image ref errors.
+- Integration/API tests:
+  - run manifest with `[environments.<slug>]` and `[run.environment]` starts with the selected provider.
+  - Dockerfile path bundling works from environment image config.
+  - preflight reports capability warnings and security errors.
+  - CLI/API `environment` override wins over config selection.
+
+## Assumptions
+
+- No compatibility behavior is required for `[run.sandbox]` or `--sandbox`.
+- No server-side environment policy or quota enforcement is in scope.
+- Volumes are simple provider hints; unsupported volume config warns and continues.
+- Resource limits are best-effort hints; unsupported resource fields warn and continue.
+- Provider names remain explicit for now: `local`, `docker`, and `daytona`.
+
+
+## Completed stages
+- **toolchain**: succeeded
+  - Script: `command -v cargo >/dev/null || { curl --proto '=https' --tlsv1.2 -sSf https://sh.rustup.rs | sh -s -- -y && sudo ln -sf $HOME/.cargo/bin/* /usr/local/bin/; }; cargo --version 2>&1`
+  - Output:
+    ```
+    cargo 1.95.0 (f2d3ce0bd 2026-03-21)
+    ```
+- **preflight_compile**: succeeded
+  - Script: `cargo check -q --workspace 2>&1`
+  - Output: (empty)
+- **preflight_lint**: succeeded
+  - Script: `cargo +nightly-2026-04-14 clippy -q --workspace --all-targets -- -D warnings 2>&1`
+  - Output: (empty)
+- **fix_lints**: succeeded
+  - Model: claude-opus-4-7, 20.0k tokens in / 7.9k out
+  - Files: /home/daytona/workspace/fabro/lib/crates/fabro-agent/src/apply_patch.rs, /home/daytona/workspace/fabro/lib/crates/fabro-sandbox/src/docker.rs
+- **preflight_lint**: succeeded
+  - Script: `cargo +nightly-2026-04-14 clippy -q --workspace --all-targets -- -D warnings 2>&1`
+  - Output: (empty)
+
+
+Read the plan file referenced in the goal and implement every step. Make all the code changes described in the plan. Use red/green TDD.

stages/007-implement@1/provider_used.json

@@ -0,0 +1,5 @@
+{
+  "mode": "agent",
+  "provider": "openai",
+  "model": "gpt-5.5"
+}

stages/007-implement@1/response.md

@@ -0,0 +1,54 @@
+Implemented named environments across the Rust config/types/runtime stack, CLI/API/tool manifest surfaces, OpenAPI, TypeScript client generation, and public docs.
+
+### What changed
+
+- Added top-level `[environments.<slug>]` catalog support and `[run.environment] id = "..."`.
+- Added sparse config layers and dense settings types for:
+  - `EnvironmentSettings`
+  - `RunEnvironmentSettings`
+  - image/resources/network/lifecycle/labels/volumes/env
+  - `EnvironmentProvider`
+  - `EnvironmentNetworkMode`
+- Removed user-facing `[run.sandbox]` parsing/resolution/types.
+- Added defaults:
+  - selected `run.environment.id = "default"`
+  - Docker `default` environment
+  - convenience built-in `local`, `docker`, and `daytona` named environments.
+- Implemented environment resolution:
+  - slug lookup and missing slug errors
+  - sparse run-level overrides
+  - `env`/`labels` merge by key
+  - `volumes` replace wholesale
+  - CIDR validation
+  - hard security capability errors
+- Replaced runtime mapping:
+  - Docker image/CPU/memory/network/env mapping
+  - Daytona snapshot/resources/network/labels/volumes/env/lifecycle mapping
+  - Local environment env handling
+- Added preflight capability warnings for unsupported best-effort hints.
+- Renamed selection surfaces from `sandbox` to `environment` where they select an execution profile:
+  - CLI `--environment`
+  - server `--environment`
+  - `ManifestArgs.environment`
+  - Fabro tool create spec `environment`
+- Preserved runtime “sandbox” terminology for concrete instances and commands.
+- Updated OpenAPI schema and regenerated the TypeScript Axios client.
+- Updated core environment/run/server/Daytona/CLI docs and repo `.fabro` configs.
+
+### Validation run
+
+Passed:
+
+- `cargo check -q --workspace`
+- `cargo test -q --workspace --no-run`
+- `cargo test -q -p fabro-config`
+- `cargo test -q -p fabro-workflow runtime_docker_config_maps_environment_hints`
+- `cargo test -q -p fabro-server prepare_manifest_inlines_project_config_daytona_dockerfile_from_bundle`
+- `cargo test -q -p fabro-server prepare_manifest_errors_when_project_config_dockerfile_bundle_is_missing`
+- `cargo test -q -p fabro-tool`
+- `cargo test -q -p fabro-api`
+- `cargo +nightly-2026-04-14 fmt --check --all`
+- `cargo +nightly-2026-04-14 clippy -q --workspace --all-targets -- -D warnings`
+- `cd lib/packages/fabro-api-client && bun run typecheck`
+
+Note: full `cargo test -q -p fabro-server` still has 3 order-dependent storage-related failures unrelated to this change; each of those failing tests passes when run individually.