feat: explicitly specify the COYOTE_CONFIG_DIR in the sbx kit

2026-07-01 16:54:42 -06:00
parent 45d709f28e
commit 318d9ba1cd
1 changed files with 58 additions and 53 deletions
@@ -5,7 +5,7 @@
 #   sbx cp $HOME/.config/coyote/ testing:/home/agent/.config/
 #   sbx cp $HOME/.coyote_password testing:/home/agent/
 #   sbx run testing --kit ./sbx-kit/
-schemaVersion: "1"
+schemaVersion: '1'
 kind: agent
 name: coyote
 displayName: Coyote
@@ -14,11 +14,10 @@ description: >
  CLI & REPL mode, RAG, AI tools & agents, MCP servers, skills, and macros.

 agent:
-  image: "docker/sandbox-templates:shell-docker"
+  image: 'docker/sandbox-templates:shell-docker'
  aiFilename: COYOTE.md
-#  persistence: persistent
  entrypoint:
-    run: ["bash", "-lc", "exec /home/agent/.cargo/bin/coyote"]
+    run: ['bash', '-lc', 'exec /home/agent/.cargo/bin/coyote']

 network:
  # Proxy-managed LLM providers: the proxy substitutes `proxy-managed` for
@@ -51,96 +50,96 @@ network:
  serviceAuth:
    openai:
      headerName: Authorization
-      valueFormat: "Bearer %s"
+      valueFormat: 'Bearer %s'
    anthropic:
      headerName: x-api-key
-      valueFormat: "%s"
+      valueFormat: '%s'
    gemini:
      headerName: x-goog-api-key
-      valueFormat: "%s"
+      valueFormat: '%s'
    cohere:
      headerName: Authorization
-      valueFormat: "Bearer %s"
+      valueFormat: 'Bearer %s'
    groq:
      headerName: Authorization
-      valueFormat: "Bearer %s"
+      valueFormat: 'Bearer %s'
    openrouter:
      headerName: Authorization
-      valueFormat: "Bearer %s"
+      valueFormat: 'Bearer %s'
    ai21:
      headerName: Authorization
-      valueFormat: "Bearer %s"
+      valueFormat: 'Bearer %s'
    cloudflare:
      headerName: Authorization
-      valueFormat: "Bearer %s"
+      valueFormat: 'Bearer %s'
    deepinfra:
      headerName: Authorization
-      valueFormat: "Bearer %s"
+      valueFormat: 'Bearer %s'
    deepseek:
      headerName: Authorization
-      valueFormat: "Bearer %s"
+      valueFormat: 'Bearer %s'
    mistral:
      headerName: Authorization
-      valueFormat: "Bearer %s"
+      valueFormat: 'Bearer %s'
    perplexity:
      headerName: Authorization
-      valueFormat: "Bearer %s"
+      valueFormat: 'Bearer %s'
    voyageai:
      headerName: Authorization
-      valueFormat: "Bearer %s"
+      valueFormat: 'Bearer %s'
    xai:
      headerName: Authorization
-      valueFormat: "Bearer %s"
+      valueFormat: 'Bearer %s'
    jina:
      headerName: Authorization
-      valueFormat: "Bearer %s"
+      valueFormat: 'Bearer %s'
    ernie:
      headerName: Authorization
-      valueFormat: "Bearer %s"
+      valueFormat: 'Bearer %s'
    hunyuan:
      headerName: Authorization
-      valueFormat: "Bearer %s"
+      valueFormat: 'Bearer %s'
    minimax:
      headerName: Authorization
-      valueFormat: "Bearer %s"
+      valueFormat: 'Bearer %s'
    moonshot:
      headerName: Authorization
-      valueFormat: "Bearer %s"
+      valueFormat: 'Bearer %s'
    qianwen:
      headerName: Authorization
-      valueFormat: "Bearer %s"
+      valueFormat: 'Bearer %s'
    zhipuai:
      headerName: Authorization
-      valueFormat: "Bearer %s"
+      valueFormat: 'Bearer %s'
  allowedDomains:
    # Coyote release + self-update + model-registry sync
-    - "github.com:443"
-    - "api.github.com:443"
-    - "raw.githubusercontent.com:443"
-    - "objects.githubusercontent.com:443"
-    - "*.githubusercontent.com:443"
+    - 'github.com:443'
+    - 'api.github.com:443'
+    - 'raw.githubusercontent.com:443'
+    - 'objects.githubusercontent.com:443'
+    - '*.githubusercontent.com:443'
    # Coyote install paths (cargo install + uv + rustup + Python tool deps at runtime)
-    - "crates.io:443"
-    - "static.crates.io:443"
-    - "pypi.org:443"
-    - "files.pythonhosted.org:443"
-    - "astral.sh:443"
-    - "sh.rustup.rs:443"
-    - "static.rust-lang.org:443"
+    - 'crates.io:443'
+    - 'static.crates.io:443'
+    - 'pypi.org:443'
+    - 'files.pythonhosted.org:443'
+    - 'astral.sh:443'
+    - 'sh.rustup.rs:443'
+    - 'static.rust-lang.org:443'

    # LLM model OAuth + API endpoints
-    - "claude.ai:443"
-    - "console.anthropic.com:443"
-    - "accounts.google.com:443"
+    - 'claude.ai:443'
+    - 'console.anthropic.com:443'
+    - 'accounts.google.com:443'
    # *.googleapis.com covers oauth2 + userinfo + VertexAI regional endpoints
    # (*-aiplatform.googleapis.com). Do not narrow without re-checking VertexAI.
-    - "*.googleapis.com:443"
+    - '*.googleapis.com:443'

    # Bedrock and GitHub Models use signed / GitHub-PAT auth that the proxy
    # cannot rewrite. Domains are allow-listed; credentials must be injected
    # separately (see README "Extending").
-    - "*.amazonaws.com:443"
-    - "models.inference.ai.azure.com:443"
+    - '*.amazonaws.com:443'
+    - 'models.inference.ai.azure.com:443'

 credentials:
  sources:
@@ -211,8 +210,9 @@ credentials:

 environment:
  variables:
-    IS_SANDBOX: "1"
+    IS_SANDBOX: '1'
    COYOTE_LOG_LEVEL: INFO
+    COYOTE_CONFIG_DIR: /home/agent/.config/coyote
  proxyManaged:
    - OPENAI_API_KEY
    - ANTHROPIC_API_KEY
@@ -250,14 +250,14 @@ commands:
          libssl-dev \
          pandoc \
          bzip2
-      user: "1000"
+      user: '1000'
      description: Install system prerequisites (including pandoc for fetch_url_via_curl)
-    - command: "curl -LsSf https://astral.sh/uv/install.sh | sh"
-      user: "1000"
+    - command: 'curl -LsSf https://astral.sh/uv/install.sh | sh'
+      user: '1000'
      description: Install uv (required for Python-based custom tools)
    - command: |
        set -euo pipefail
-        USQL_VERSION=$(curl -sSL https://api.github.com/repos/xo/usql/releases/latest | jq -r .tag_name | sed 's/^v//')
+        USQL_VERSION="0.21.4"
        ARCH=$(uname -m)
        case "$ARCH" in
          x86_64) USQL_ARCH=amd64 ;;
@@ -266,10 +266,10 @@ commands:
        esac
        TMPDIR=$(mktemp -d)
        trap 'rm -rf "$TMPDIR"' EXIT
-        curl -sSL "https://github.com/xo/usql/releases/download/v${USQL_VERSION}/usql_static-${USQL_VERSION}-linux-${USQL_ARCH}.tar.bz2" -o "$TMPDIR/usql.tar.bz2"
+        curl -fsSL "https://github.com/xo/usql/releases/download/v${USQL_VERSION}/usql_static-${USQL_VERSION}-linux-${USQL_ARCH}.tar.bz2" -o "$TMPDIR/usql.tar.bz2"
        tar -xjf "$TMPDIR/usql.tar.bz2" -C "$TMPDIR"
        sudo install -m 0755 "$TMPDIR/usql_static" /usr/local/bin/usql
-      user: "1000"
+      user: '1000'
      description: Install the usql universal SQL CLI (used by the built-in sql agent and execute_sql_code tool)
    - command: |
        curl --proto '=https' --tlsv1.2 -sSf https://sh.rustup.rs | \
@@ -279,12 +279,17 @@ commands:
          --target x86_64-unknown-linux-musl
        . "$HOME/.cargo/env"
        cargo install --locked coyote-ai
-      user: "1000"
+      user: '1000'
      description: Install Coyote AI CLI via Rust's Cargo

  startup:
-    - command: ["sh", "-c", "test -f \"$HOME/.config/coyote/config.yaml\" || coyote --info >/dev/null 2>&1 || true"]
-      user: "1000"
+    - command:
+        [
+          'sh',
+          '-c',
+          'test -f "$HOME/.config/coyote/config.yaml" || coyote --info >/dev/null 2>&1 || true',
+        ]
+      user: '1000'
      background: false
      description: Bootstrap Coyote config directory on first sandbox start