add --jail flags to colibri spawn-agent (jailed spawn is raw-socket-JSON only today) #102

New issue

Closed

opened 2026-06-20 08:36:26 +02:00 by clawdie · 1 comment

clawdie commented

2026-06-20 08:36:26 +02:00

Owner

Gap

spawn-agent accepts an optional jail: JailConfig over the raw socket, but the colibri client's spawn-local / spawn-agent hardcode jail: None. So a jailed spawn (the only kind that triggers tenant provisioning) can only be issued as raw socket JSON.

Fix

Add --jail-name, --jail-root (and optional --jail-ip4 / --jail-user) flags to the colibri spawn-agent subcommand, mapping to JailConfig.

Acceptance

colibri spawn-agent <provider> <model> --jail-name <T> --jail-root /usr/local/bastille/jails/<T>/root spawns into the jail and fires the provision hook — no raw JSON needed.

Context: first-proof runbook documents the raw-socket JSON path as the interim method.

🤖 Generated with Claude Code

## Gap `spawn-agent` accepts an optional `jail: JailConfig` over the raw socket, but the `colibri` client's `spawn-local` / `spawn-agent` hardcode `jail: None`. So a **jailed** spawn (the only kind that triggers tenant provisioning) can only be issued as raw socket JSON. ## Fix Add `--jail-name`, `--jail-root` (and optional `--jail-ip4` / `--jail-user`) flags to the `colibri spawn-agent` subcommand, mapping to `JailConfig`. ## Acceptance `colibri spawn-agent <provider> <model> --jail-name <T> --jail-root /usr/local/bastille/jails/<T>/root` spawns into the jail and fires the provision hook — no raw JSON needed. Context: first-proof runbook documents the raw-socket JSON path as the interim method. 🤖 Generated with [Claude Code](https://claude.com/claude-code)