sandcastle: base image on nixos/nix and bake devShells.ci #17

Merged

weiwen merged 3 commits from sandcastle/issue-11 into main

2026-07-05 06:52:31 +08:00

weiwen commented

2026-07-05 06:41:47 +08:00

Owner

Summary

Base the sandcastle Docker image on nixos/nix instead of node:22-bookworm and bake devShells.ci from flake.nix into the image at build time.

This eliminates the apt-based tool installation, gives us flake-pinned tool versions, and makes the image reproducible from the same inputs the host uses.

What changed

Dockerfile: base image → nixos/nix; install tools via nix develop .#ci which pre-caches every package in /nix/store and symlinks binaries into /usr/local/bin via a new bake-devenv.sh script.
flake.nix: new devShells.ci with bash, curl, git, jq, nodejs_22, tea — the tools the agent needs at runtime.
Claude Code integration: added ANTHROPIC_API_KEY / CLAUDE_CODE_OAUTH_TOKEN to .env.example; added claude install step in Dockerfile; switched main.mts agents from opencode to claudeCode for plan/implement/review stages.
plan-prompt.md: clarified that the issues list has already been filtered to ready-for-agent issues and tightened phrasing.

Reviewer notes

Verify that the nix develop .#ci build step works end-to-end in a fresh container.
Confirm the bake-devenv.sh approach doesn\t

## Summary Base the sandcastle Docker image on `nixos/nix` instead of `node:22-bookworm` and bake `devShells.ci` from `flake.nix` into the image at build time. This eliminates the apt-based tool installation, gives us flake-pinned tool versions, and makes the image reproducible from the same inputs the host uses. ## What changed - **Dockerfile**: base image → `nixos/nix`; install tools via `nix develop .#ci` which pre-caches every package in `/nix/store` and symlinks binaries into `/usr/local/bin` via a new `bake-devenv.sh` script. - **flake.nix**: new `devShells.ci` with `bash`, `curl`, `git`, `jq`, `nodejs_22`, `tea` — the tools the agent needs at runtime. - **Claude Code integration**: added `ANTHROPIC_API_KEY` / `CLAUDE_CODE_OAUTH_TOKEN` to `.env.example`; added `claude` install step in Dockerfile; switched `main.mts` agents from `opencode` to `claudeCode` for plan/implement/review stages. - **plan-prompt.md**: clarified that the issues list has already been filtered to `ready-for-agent` issues and tightened phrasing. ## Reviewer notes - Verify that the `nix develop .#ci` build step works end-to-end in a fresh container. - Confirm the `bake-devenv.sh` approach doesn\t

weiwen added the

ready-for-human

label

2026-07-05 06:41:47 +08:00

weiwen added 1 commit

2026-07-05 06:41:47 +08:00

feat(sandcastle): use mixture of claude and opencode agents 21952e82bf

weiwen force-pushed sandcastle/issue-11 from 7c00024e2e to 5ca201198a

CI / check (pull_request) Has been cancelled

Details

2026-07-05 06:52:22 +08:00

Compare