feat(iii-worker): champion-tier agent DX for sandbox::* (#1699)

Author: andersonleal

.gitignore

@@ -78,3 +78,7 @@ graphify-out
 docs/plans/
 # Local-only personal notes (per-contributor, not tracked)
 TODOS.md
+
+# Per-contributor coding-agent state (not tracked)
+.serena/
+CLAUDE.md

Cargo.lock

@@ -18,7 +18,10 @@ export interface TriggerInfo {
   id: string
   trigger_type: string
   function_id: string
-  config: Record<string, unknown>
+  // `config` may be absent on older / leaner engine summaries — always
+  // narrow with `?? {}` before reading nested fields. See triggers.tsx
+  // and flows.ts for the pattern.
+  config?: Record<string, unknown>
   internal?: boolean
 }
 

console/packages/console-frontend/src/api/events/functions.ts

@@ -308,7 +308,7 @@ export async function fetchFlows(): Promise<FlowResponse[]> {
   for (const trigger of triggersData.triggers || []) {
     const funcId = trigger.function_id
     const existing = triggersByFunction.get(funcId) ?? []
-    const config = trigger.config as Record<string, unknown>
+    const config = (trigger.config ?? {}) as Record<string, unknown>
     const normalized: Record<string, unknown> = {
       ...config,
       type: trigger.trigger_type,

console/packages/console-frontend/src/api/flows/flows.ts

@@ -251,7 +251,7 @@ function TriggersPage() {
       const matchesTrigger =
         t.id.toLowerCase().includes(query) || t.trigger_type.toLowerCase().includes(query)
       const matchesFunction = t.function_id.toLowerCase().includes(query)
-      const config = t.config as Record<string, unknown>
+      const config = (t.config ?? {}) as Record<string, unknown>
       const matchesConfig =
         (config.api_path && String(config.api_path).toLowerCase().includes(query)) ||
         (config.topic && String(config.topic).toLowerCase().includes(query)) ||
@@ -392,7 +392,7 @@ function TriggersPage() {
   }
 
   const getTriggerSummary = (trigger: TriggerInfo): string => {
-    const config = trigger.config as Record<string, unknown>
+    const config = (trigger.config ?? {}) as Record<string, unknown>
     switch (trigger.trigger_type) {
       case 'http': {
         const method = (config.http_method as string) || 'GET'
@@ -418,7 +418,7 @@ function TriggersPage() {
       dispatchInvoke({ type: 'CLEAR_RESULT' })
 
       if (trigger.trigger_type === 'http') {
-        const config = trigger.config as { api_path?: string; http_method?: string }
+        const config = (trigger.config ?? {}) as { api_path?: string; http_method?: string }
         const method = config.http_method || 'GET'
         const path = config.api_path || ''
         const matches = path.match(/:([a-zA-Z_]+)/g)
@@ -441,7 +441,7 @@ function TriggersPage() {
   }
 
   const invokeHttp = async (trigger: TriggerInfo) => {
-    const config = trigger.config as { api_path?: string; http_method?: string }
+    const config = (trigger.config ?? {}) as { api_path?: string; http_method?: string }
     let path = (config.api_path || '').replace(/^\//, '')
     const method = httpMethod || config.http_method || 'GET'
 
@@ -553,7 +553,7 @@ function TriggersPage() {
   }
 
   const invokeEvent = async (trigger: TriggerInfo) => {
-    const config = trigger.config as { topic?: string }
+    const config = (trigger.config ?? {}) as { topic?: string }
     const topic = config.topic || ''
     dispatchInvoke({ type: 'START_INVOKE' })
     try {
@@ -891,7 +891,7 @@ function TriggersPage() {
               {/* HTTP Trigger Detail */}
               {selectedTrigger.trigger_type === 'http' &&
                 (() => {
-                  const config = selectedTrigger.config as {
+                  const config = (selectedTrigger.config ?? {}) as {
                     api_path?: string
                     http_method?: string
                   }
@@ -1096,7 +1096,7 @@ function TriggersPage() {
               {/* Cron Trigger Detail */}
               {selectedTrigger.trigger_type === 'cron' &&
                 (() => {
-                  const config = selectedTrigger.config as {
+                  const config = (selectedTrigger.config ?? {}) as {
                     expression?: string
                     description?: string
                   }
@@ -1194,7 +1194,10 @@ function TriggersPage() {
               {/* Event Trigger Detail */}
               {selectedTrigger.trigger_type === 'event' &&
                 (() => {
-                  const config = selectedTrigger.config as { topic?: string; description?: string }
+                  const config = (selectedTrigger.config ?? {}) as {
+                    topic?: string
+                    description?: string
+                  }
                   const topic = config.topic || 'Unknown'
 
                   return (

console/packages/console-frontend/src/routes/triggers.tsx

@@ -14,6 +14,7 @@ path = "src/lib.rs"
 serde = { version = "1", features = ["derive"] }
 serde_json = "1"
 thiserror = "2"
+schemars = "0.8"
 
 [dev-dependencies]
 base64 = "0.22"

crates/iii-shell-proto/Cargo.toml

@@ -66,7 +66,7 @@ pub mod flags {
 /// `mode` is the octal permission string (e.g. `"0644"`); `mtime` is
 /// Unix seconds. `is_symlink` reflects the entry itself — FS handlers
 /// never follow symlinks unless the op doc-comment says otherwise.
-#[derive(Debug, Clone, Serialize, Deserialize, PartialEq, Eq)]
+#[derive(Debug, Clone, Serialize, Deserialize, PartialEq, Eq, schemars::JsonSchema)]
 pub struct FsEntry {
     pub name: String,
     pub is_dir: bool,
@@ -79,7 +79,7 @@ pub struct FsEntry {
 /// Single grep hit. `line` is 1-based. `content` is already truncated
 /// to `max_line_bytes` (with a trailing `…`) if the original line was
 /// longer.
-#[derive(Debug, Clone, Serialize, Deserialize, PartialEq, Eq)]
+#[derive(Debug, Clone, Serialize, Deserialize, PartialEq, Eq, schemars::JsonSchema)]
 pub struct FsMatch {
     #[serde(alias = "file")]
     pub path: String,
@@ -89,7 +89,7 @@ pub struct FsMatch {
 
 /// One `sed` file-level outcome. `success=false` carries the human
 /// failure message in `error`; otherwise `error` is absent.
-#[derive(Debug, Clone, Serialize, Deserialize, PartialEq, Eq)]
+#[derive(Debug, Clone, Serialize, Deserialize, PartialEq, Eq, schemars::JsonSchema)]
 pub struct FsSedFileResult {
     #[serde(alias = "file")]
     pub path: String,
@@ -238,7 +238,7 @@ pub enum FsResult {
 
 /// Metadata frame sent by the supervisor at the start of a
 /// `ReadStart` sequence (one per session, before any `FsChunk`).
-#[derive(Debug, Clone, Serialize, Deserialize, PartialEq, Eq)]
+#[derive(Debug, Clone, Serialize, Deserialize, PartialEq, Eq, schemars::JsonSchema)]
 pub struct FsReadMeta {
     pub size: u64,
     pub mode: String,

crates/iii-shell-proto/src/lib.rs

@@ -85,6 +85,10 @@ once_cell = "1"
 thiserror = "2"
 
 schemars = "0.8"
+# Used by sandbox::exec to shlex-split `cmd` when an agent passes a shell-style
+# line (e.g. `cmd: "node script.js"`). Lets the existing argv-based runner stay
+# argv-pure while accepting the agent-natural input shape.
+shlex = "1"
 
 [dev-dependencies]
 tokio = { version = "1", features = ["test-util"] }

crates/iii-worker/Cargo.toml

@@ -18,7 +18,7 @@ const CREATE_TRIGGER_TIMEOUT_MS: u64 = 300_000;
 /// Matches the daemon's default exec timeout. If the daemon changes, update here.
 /// (See `sandbox_daemon::adapters::DEFAULT_EXEC_TIMEOUT_MS` — private there, so
 /// we maintain a mirrored constant on the CLI side.)
-const DAEMON_DEFAULT_EXEC_TIMEOUT_MS: u64 = 30_000;
+const DAEMON_DEFAULT_EXEC_TIMEOUT_MS: u64 = 300_000;
 /// Safety margin so the daemon's deadline fires before the trigger does.
 const EXEC_TRIGGER_MARGIN_MS: u64 = 5_000;
 

crates/iii-worker/src/cli/sandbox.rs

@@ -2,7 +2,7 @@
 // contributor license agreements. Licensed under the Elastic License 2.0.
 
 //! CLI entrypoint for `iii-worker sandbox-daemon`. Loads config and
-//! delegates to `sandbox_daemon::run`.
+//! delegates to `sandbox_daemon::serve`.
 
 use crate::cli::app::SandboxDaemonArgs;
 use crate::sandbox_daemon;
@@ -30,7 +30,7 @@ pub async fn run(args: SandboxDaemonArgs) -> i32 {
         }
     };
 
-    match sandbox_daemon::run(cfg, &args.engine).await {
+    match sandbox_daemon::serve(cfg, &args.engine).await {
         Ok(()) => 0,
         Err(e) => {
             tracing::error!(error = %e, "sandbox-daemon exited with error");