Internalize dead sbx-manager exports

[Copilot]

src/sbx-manager.ts was exporting five symbols that were not consumed outside the file, expanding the module API without any external callers. This change narrows the public surface to the runtime entry points and keeps test-only access explicit.

• Public API cleanup

  • Removed the unused exported helpers:
    • sanitizeEnvForSbx
    • restoreHomeCredentials
    • withLocalBinOnPath
  • Removed the unused exported interfaces:
    • SbxConfig
    • SbxExecOptions

• Preserve test coverage without re-exporting internals

  • Added a testHelpers export for the helper functions used only by unit tests.
  • Updated sbx-manager and container runtime tests to import helpers through that internal test surface.

• Keep runtime signatures intact

  • Inlined the config/option shapes at the exported function boundaries so external behavior stays the same while the named types are no longer part of the module contract.

/** @internal Exposed for unit tests only. */
// ts-prune-ignore-next
export const testHelpers = {
  sanitizeEnvForSbx,
  restoreHomeCredentials,
  withLocalBinOnPath,
};

• Fixes [Export Audit] 5 dead exports in sbx-manager.ts #6421

[Copilot]

Pull request overview

Narrows sbx-manager exports while preserving runtime behavior and test access.

Changes:

• Internalizes five unused helper/type exports.
• Adds the conventional testHelpers test surface.
• Updates unit-test imports accordingly.

Show a summary per file

File	Description
src/sbx-manager.ts	Internalizes dead exports and inlines parameter types.
src/sbx-manager.test.ts	Uses testHelpers for internal functions.
src/container-runtime.test.ts	Updates helper import path.

Review details

Tip

Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.

• Files reviewed: 3/3 changed files
• Comments generated: 0
• Review effort level: Medium

[github-actions]

📡 Smoke OTel Tracing completed. All tracing scenarios validated. ✅

[github-actions]

✨ The prophecy is fulfilled... Smoke Codex has completed its mystical journey. The stars align. 🌟

[github-actions]

✅ Smoke Gemini completed. All facets verified. 💎

[github-actions]

📰 VERDICT: Smoke Docker Sbx has concluded. All systems operational. This is a developing story. 🎤

[github-actions]

✅ Smoke Copilot BYOK AOAI (Entra) completed. Copilot AOAI BYOK (Entra) mode operational. 🔓

[github-actions]

🔌 Smoke Services — All services reachable! ✅

[github-actions]

🔑 Smoke Copilot PAT PAT auth validated. All systems operational. ✅

[github-actions]

✅ Smoke Copilot BYOK completed. Copilot BYOK mode operational. 🔓

[github-actions]

Chroot tests passed! Smoke Chroot - All security and functionality tests succeeded.

[github-actions]

✅ Build Test Suite completed successfully!

[github-actions]

✅ Contribution Check completed successfully!

PR #6429 aligns with CONTRIBUTING.md: tests are included, PR description is clear and references #6421, and no docs or file-organization issues were found.

[github-actions]

📰 VERDICT: Smoke Copilot has concluded. All systems operational. This is a developing story. 🎤

[github-actions]

🛡️ Smoke Copilot Network Isolation confirmed the egress allowlist is enforced. ✅

[github-actions]

✅ Smoke Claude passed

[github-actions]

🚀 Security Guard has started processing this pull request

[github-actions]

Smoke Test: Copilot PAT Auth

Test	Result
GitHub MCP	✅ MCP connectivity confirmed
GitHub.com HTTP	⚠️ pre-step data not expanded
File write/read	⚠️ pre-step data not expanded

Auth mode: PAT (COPILOT_GITHUB_TOKEN)
Overall: INCONCLUSIVE — workflow template variables were not expanded by the runner.

Warning

Firewall blocked 1 domain

The following domain was blocked by the firewall during workflow execution:

• awmgmcpg

To allow these domains, add them to the network.allowed list in your workflow frontmatter:

network:
  allowed:
    - defaults
    - "awmgmcpg"

See Network Configuration for more information.

🔑 PAT report filed by Smoke Copilot PAT
_{Add label ready-for-aw to run again}

[github-actions]

Smoke test: Copilot network-isolation egress enforcement

EGRESS_RESULT allow=pass deny=pass

✅ Test 1 (allowed domain): api.github.com → HTTP 200
✅ Test 2 (blocked domain): example.com → 403 blocked

Overall: PASS @lpcox

Warning

Firewall blocked 2 domains

The following domains were blocked by the firewall during workflow execution:

• awmgmcpg
• example.com

To allow these domains, add them to the network.allowed list in your workflow frontmatter:

network:
  allowed:
    - defaults
    - "awmgmcpg"
    - "example.com"

See Network Configuration for more information.

🛡️ Egress verdict from Smoke Copilot Network Isolation
_{Add label ready-for-aw to run again}

[github-actions]

Smoke Test: Services Connectivity

• Redis PING: ❌ (host.docker.internal DNS resolution failed)
• PostgreSQL pg_isready: ❌ (no response)
• PostgreSQL SELECT 1: ❌ (host unreachable)

Result: FAIL — host.docker.internal does not resolve in this environment; service containers are unreachable.

Warning

Firewall blocked 1 domain

The following domain was blocked by the firewall during workflow execution:

• awmgmcpg

To allow these domains, add them to the network.allowed list in your workflow frontmatter:

network:
  allowed:
    - defaults
    - "awmgmcpg"

See Network Configuration for more information.

🔌 Service connectivity validated by Smoke Services
_{Add label ready-for-aw to run again}

[github-actions]

Smoke Test: API Proxy OpenTelemetry Tracing

Scenario	Result	Notes
1. Module Loading	Pass	otel.js loads; exports: startRequestSpan, setTokenAttributes, setBudgetAttributes, endSpan, endSpanError, shutdown, isEnabled + internal helpers
2. Test Suite	Pass	59/59 tests passed (otel.test.js + otel-fanout.test.js)
3. Env Var Forwarding	Pending	src/services/api-proxy-service.ts does NOT forward OTEL_EXPORTER_OTLP_ENDPOINT/OTEL_EXPORTER_OTLP_HEADERS to the container yet
4. Token Tracker Integration	Pass	onUsage callback exists in token-tracker-http.js (line 343) as the OTEL hook point
5. OTEL Diagnostics	N/A	No OTEL endpoint configured; graceful degradation confirmed (no errors)

Summary: Core OTEL infrastructure is solid and all tests pass. Gap: Scenario 3 - OTEL env vars need forwarding from host into api-proxy container via api-proxy-service.ts.

Warning

Firewall blocked 1 domain

The following domain was blocked by the firewall during workflow execution:

• awmgmcpg

To allow these domains, add them to the network.allowed list in your workflow frontmatter:

network:
  allowed:
    - defaults
    - "awmgmcpg"

See Network Configuration for more information.

📡 OTel tracing validated by Smoke OTel Tracing
_{Add label ready-for-aw to run again}

[github-actions]

@lpcox
✅ GitHub MCP connectivity (pre-fetched PR data validated)
✅ GitHub.com connectivity
✅ File write/read test
✅ BYOK inference test
Running in direct BYOK mode (AWF_AUTH_TYPE=github-oidc + AWF_AUTH_AZURE_* + COPILOT_PROVIDER_BASE_URL) via api-proxy → Azure OpenAI (Foundry, o4-mini-aw) authenticated via Microsoft Entra
PASS

Warning

Firewall blocked 1 domain

The following domain was blocked by the firewall during workflow execution:

• awmgmcpg

To allow these domains, add them to the network.allowed list in your workflow frontmatter:

network:
  allowed:
    - defaults
    - "awmgmcpg"

See Network Configuration for more information.

🪪 BYOK (AOAI Entra) report filed by Smoke Copilot BYOK AOAI (Entra)
_{Add label ready-for-aw to run again}

[github-actions]

Smoke Test: Claude Engine Validation

Check	Result
API status	✅ PASS
GH check	✅ PASS
File status	✅ PASS

Overall result: PASS

Warning

Firewall blocked 1 domain

The following domain was blocked by the firewall during workflow execution:

• awmgmcpg

To allow these domains, add them to the network.allowed list in your workflow frontmatter:

network:
  allowed:
    - defaults
    - "awmgmcpg"

See Network Configuration for more information.

Generated by Smoke Claude for #6429 · 35.9 AIC · ⊞ 3.3K · ◷
_{Add label ready-for-aw to run again}

[github-actions]

Smoke Test: Copilot BYOK (Direct Mode)

Results:

• ✅ GitHub MCP connectivity
• ✅ GitHub.com reachability (HTTP 200)
• ✅ File write/read operations
• ✅ BYOK inference path active (api-proxy → api.githubcopilot.com)

Status: PASS

Running in direct BYOK mode (COPILOT_PROVIDER_API_KEY) via api-proxy sidecar.

Warning

Firewall blocked 1 domain

The following domain was blocked by the firewall during workflow execution:

• awmgmcpg

To allow these domains, add them to the network.allowed list in your workflow frontmatter:

network:
  allowed:
    - defaults
    - "awmgmcpg"

See Network Configuration for more information.

🔑 BYOK report filed by Smoke Copilot BYOK
_{Add label ready-for-aw to run again}

[github-actions]

Smoke test PASS

• chore: upgrade gh-aw to v0.82.13 (pre-release) and recompile workflows
• [docs] Document ANTHROPIC_AUTH_TOKEN protection in API proxy isolation
• GitHub title check: PASS
• File write check: PASS
• Build check: PASS
• Overall: PASS

Warning

Firewall blocked 2 domains

The following domains were blocked by the firewall during workflow execution:

• awmgmcpg
• registry.npmjs.org

To allow these domains, add them to the network.allowed list in your workflow frontmatter:

network:
  allowed:
    - defaults
    - "awmgmcpg"
    - "registry.npmjs.org"

See Network Configuration for more information.

🔮 The oracle has spoken through Smoke Codex
_{Add label ready-for-aw to run again}

[github-actions]

Gemini Smoke Test Results

• GitHub MCP Testing: ✅ (Found chore: upgrade gh-aw to v0.82.13 (pre-release) and recompile workflows #6425, [docs] Document ANTHROPIC_AUTH_TOKEN protection in API proxy isolation #6414 - titles filtered)
• GitHub.com Connectivity: ✅ (HTTP 200)
• File Writing Testing: ✅
• Bash Tool Testing: ✅
  Overall status: PASS

Warning

Firewall blocked 1 domain

The following domain was blocked by the firewall during workflow execution:

• localhost

To allow these domains, add them to the network.allowed list in your workflow frontmatter:

network:
  allowed:
    - defaults
    - "localhost"

See Network Configuration for more information.

💎 Faceted by Smoke Gemini
_{Add label ready-for-aw to run again}

[github-actions]

🔬 Smoke Test Results

Test	Result
GitHub MCP Connectivity	✅ MCP server reachable
GitHub.com HTTP	❌ Pre-step data unavailable (template vars not expanded)
File Write/Read	❌ Pre-step data unavailable (template vars not expanded)

Overall: FAIL — pre-computed step outputs were not injected into the prompt.

cc @lpcox

Warning

Firewall blocked 1 domain

The following domain was blocked by the firewall during workflow execution:

• awmgmcpg

To allow these domains, add them to the network.allowed list in your workflow frontmatter:

network:
  allowed:
    - defaults
    - "awmgmcpg"

See Network Configuration for more information.

📰 BREAKING: Report filed by Smoke Copilot
_{Add label ready-for-aw to run again}

[github-actions]

🏗️ Build Test Suite Results

Ecosystem	Project	Build/Install	Tests	Status
Bun	elysia	✅	1/1 passed	✅ PASS
Bun	hono	✅	1/1 passed	✅ PASS
C++	fmt	✅	N/A	✅ PASS
C++	json	✅	N/A	✅ PASS
Deno	oak	N/A	1/1 passed	✅ PASS
Deno	std	N/A	1/1 passed	✅ PASS
.NET	hello-world	✅	N/A	✅ PASS
.NET	json-parse	✅	N/A	✅ PASS
Go	color	✅	passed	✅ PASS
Go	env	✅	passed	✅ PASS
Go	uuid	✅	passed	✅ PASS
Java	gson	✅	1/1 passed	✅ PASS
Java	caffeine	✅	1/1 passed	✅ PASS
Node.js	clsx	✅	passed	✅ PASS
Node.js	execa	✅	passed	✅ PASS
Node.js	p-limit	✅	passed	✅ PASS
Rust	fd	✅	1/1 passed	✅ PASS
Rust	zoxide	✅	1/1 passed	✅ PASS

Overall: 8/8 ecosystems passed — ✅ PASS

Warning

Firewall blocked 1 domain

The following domain was blocked by the firewall during workflow execution:

• awmgmcpg

To allow these domains, add them to the network.allowed list in your workflow frontmatter:

network:
  allowed:
    - defaults
    - "awmgmcpg"

See Network Configuration for more information.

Generated by Build Test Suite for #6429 · 25.3 AIC · ⊞ 7.1K · ◷
_{Add label ready-for-aw to run again}

[github-actions]

🔥 Smoke Test: Docker Sbx — PASS

Test	Result
GitHub MCP connectivity	✅
GitHub.com HTTP	✅ 200
File write/read	✅

Overall: PASS — @lpcox

📰 BREAKING: Report filed by Smoke Docker Sbx
_{Add label ready-for-aw to run again}

[github-actions]

Chroot Version Comparison Results

Runtime	Host Version	Chroot Version	Match?
Python	Python 3.12.13	Python 3.12.13	✅ YES
Node.js	v24.18.0	v24.18.0	✅ YES
Go	go1.22.12	go1.22.12	✅ YES

All runtimes match between host and chroot environment. ✅

Warning

Firewall blocked 1 domain

The following domain was blocked by the firewall during workflow execution:

• awmgmcpg

To allow these domains, add them to the network.allowed list in your workflow frontmatter:

network:
  allowed:
    - defaults
    - "awmgmcpg"

See Network Configuration for more information.

Tested by Smoke Chroot
_{Add label ready-for-aw to run again}

[github-actions]

@lpcox

✅ GitHub MCP connectivity (pre-fetched data validated)
✅ GitHub.com connectivity
✅ File write/read test
✅ BYOK inference test

Running in direct BYOK mode (COPILOT_PROVIDER_API_KEY + COPILOT_PROVIDER_BASE_URL) via api-proxy → Azure OpenAI (Foundry, o4-mini-aw)
Overall: PASS

Warning

Firewall blocked 1 domain

The following domain was blocked by the firewall during workflow execution:

• awmgmcpg

To allow these domains, add them to the network.allowed list in your workflow frontmatter:

network:
  allowed:
    - defaults
    - "awmgmcpg"

See Network Configuration for more information.

🔑 BYOK (AOAI api-key) report filed by Smoke Copilot BYOK AOAI (api-key)
_{Add label ready-for-aw to run again}