在 sandbox 中运行 Codex

FROM node:24-trixie-slim

RUN apt-get update \
	&& apt-get install -y --no-install-recommends bash ca-certificates git ripgrep \
	&& rm -rf /var/lib/apt/lists/*

RUN npm install --global --ignore-scripts @openai/[email protected]

COPY --from=docker.io/cloudflare/sandbox:1.0.1 /usr/local/bin/sandbox-shim /usr/local/bin/sandbox-shim

WORKDIR /workspace
CMD ["sleep", "infinity"]

const lastMessagePath = `${taskDirectory}/last-message.txt`;

const FailureEvent = z.union([
	z.object({
		type: z.literal("turn.failed"),
		error: z.object({ message: z.string() }),
	}),
	z.object({ type: z.literal("error"), message: z.string() }),
]);

export class AgentSandbox extends DurableObject<Env> {
	// ...

	private agentCommand(prompt: string): string[] {
		const baseUrl = `https://gateway.ai.cloudflare.com/v1/${this.env.AI_GATEWAY_ACCOUNT_ID}/${this.env.AI_GATEWAY_ID}/openai`;

		return [
			"codex",
			// Run one task without an interactive terminal
			"exec",
			// Write one JSON event per line to the events file
			"--json",
			// Skip the session files that Codex would otherwise save
			"--ephemeral",
			"--dangerously-bypass-approvals-and-sandbox",
			// Write the final message to a file outside the repository
			"--output-last-message",
			lastMessagePath,
			"--model",
			this.env.MODEL,
			// Add a custom provider that sends requests to the OpenAI endpoint of your gateway
			"--config",
			'model_provider="cloudflare-ai-gateway"',
			"--config",
			`model_providers.cloudflare-ai-gateway={ name = "Cloudflare AI Gateway", base_url = ${JSON.stringify(baseUrl)}, wire_api = "responses" }`,
			// Stop the analytics and update requests from Codex
			"--config",
			"analytics.enabled=false",
			"--config",
			"check_for_update_on_startup=false",
			// Stop Codex from syncing its plugin marketplace, which clones a
			// repository from `github.com` on every run
			"--config",
			"features.plugins=false",
			"--",
			prompt,
		];
	}

	private agentEnv(): Record<string, string> {
		return {};
	}
}

export class AgentSandbox extends DurableObject<Env> {
	// ...

	private async outcome(exitCode: number): Promise<TaskStatus> {
		if (exitCode === 0) {
			return {
				state: "succeeded",
				result: (await this.readOptionalText(lastMessagePath)) ?? "",
			};
		}

		let failure: string | undefined;
		const events = await this.files.readFile(eventsPath);

		for await (const line of readLines(events.body)) {
			const parsed = FailureEvent.safeParse(parseJson(line));

			if (parsed.success) {
				failure =
					parsed.data.type === "error"
						? parsed.data.message
						: parsed.data.error.message;
			}
		}

		if (failure === undefined) {
			const stderr = (await this.readOptionalText(stderrPath)) ?? "";
			return {
				state: "failed",
				error: `codex exited with ${exitCode}: ${stderr.slice(-2000)}`,
			};
		}

		return { state: "failed", error: failure };
	}
}