impyard 0.1.1

Rent the intelligence, own the governance — a control plane for imps: software colleagues whose every action passes through a gateway you control (default-deny egress, injected credentials, budgets, approval gates, audit).
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65

# The box: a CAPABLE machine behind a governed door (docs/capable-box.md).
# Tools are baked in deliberately — on the NAT-less network more binaries add
# no egress power, and a missing tool is an illegible "no" that belongs to the
# gateway instead. pi + the box extensions are baked at the version pinned by
# the repo's lockfile; `[engine] dir` in org.toml is a dev override that
# mounts a checkout over them.
#
# Build from the REPO ROOT (the engine layers need package-lock.json + box/):
#   docker build -t impyard-box -f box/Dockerfile .
FROM node:24-bookworm-slim

# Tier 1 — always installed. Base image already carries node/npm/npx.
# build-essential is the big line (~250 MB): native pip/npm builds are the
# most common illegible failure when it is absent.
RUN apt-get update \
  && apt-get install -y --no-install-recommends \
    bash ca-certificates curl git jq python3 ripgrep \
    build-essential pkg-config \
    fd-find file git-lfs less moreutils openssl poppler-utils procps \
    python3-pip python3-venv rsync sqlite3 tree tzdata unzip wget \
    xz-utils zip zstd \
  && rm -rf /var/lib/apt/lists/* \
  && ln -s "$(command -v fdfind)" /usr/local/bin/fd \
  && git lfs install --system

# gh — the official apt repo (refreshed on every image rebuild).
RUN mkdir -p -m 755 /etc/apt/keyrings \
  && curl -fsSL https://cli.github.com/packages/githubcli-archive-keyring.gpg \
       -o /etc/apt/keyrings/githubcli-archive-keyring.gpg \
  && chmod go+r /etc/apt/keyrings/githubcli-archive-keyring.gpg \
  && echo "deb [arch=$(dpkg --print-architecture) signed-by=/etc/apt/keyrings/githubcli-archive-keyring.gpg] https://cli.github.com/packages stable main" \
       > /etc/apt/sources.list.d/github-cli.list \
  && apt-get update \
  && apt-get install -y --no-install-recommends gh \
  && rm -rf /var/lib/apt/lists/*

# yq (mikefarah, static) and uv (fast Python package manager, static).
RUN curl -fsSL "https://github.com/mikefarah/yq/releases/latest/download/yq_linux_$(dpkg --print-architecture)" \
       -o /usr/local/bin/yq \
  && chmod +x /usr/local/bin/yq
COPY --from=ghcr.io/astral-sh/uv:latest /uv /uvx /usr/local/bin/

# pnpm/yarn shims via corepack (ships with node).
RUN corepack enable

# Tier 2 — org choice, heavy: document/media tooling.
#   docker build --build-arg TIER2=1 -t impyard-box -f box/Dockerfile .
ARG TIER2=0
RUN if [ "$TIER2" = "1" ]; then \
      apt-get update \
      && apt-get install -y --no-install-recommends pandoc imagemagick ffmpeg \
      && rm -rf /var/lib/apt/lists/*; \
    fi

# The engine: pi + extensions at the lockfile-pinned version. /opt/impyard/engine/run-pi
# is the stable entry the host invokes — it expands the baked extensions itself,
# so the host never needs to inspect the image.
COPY package.json package-lock.json /opt/impyard/engine/
RUN cd /opt/impyard/engine && npm ci --omit=dev && npm cache clean --force
COPY box/extensions /opt/impyard/engine/box/extensions
RUN node -e "const path=require('path');const dir='/opt/impyard/engine/node_modules/@earendil-works/pi-coding-agent';const p=require(dir+'/package.json');const bin=typeof p.bin==='string'?p.bin:p.bin.pi;require('fs').symlinkSync(path.join(dir,bin),'/opt/impyard/engine/pi')" \
  && printf '#!/bin/sh\nexec node /opt/impyard/engine/pi --no-extensions $(for f in /opt/impyard/engine/box/extensions/*.ts; do printf -- "-e %%s " "$f"; done) "$@"\n' > /opt/impyard/engine/run-pi \
  && chmod +x /opt/impyard/engine/run-pi

WORKDIR /workspace