build: add remote E2B workspace image promotion

Author: Gini

.github/workflows/workspace-image.yml

@@ -0,0 +1,51 @@
+name: Build ONEComputer workspace image
+
+on:
+  workflow_dispatch:
+  push:
+    branches:
+      - codex/onevibe-computer
+
+permissions:
+  contents: read
+  packages: write
+
+jobs:
+  build:
+    runs-on: ubuntu-24.04
+    timeout-minutes: 360
+    steps:
+      - name: Check out source
+        uses: actions/checkout@v4
+
+      - name: Set up Buildx
+        uses: docker/setup-buildx-action@v3
+
+      - name: Log in to GHCR
+        uses: docker/login-action@v3
+        with:
+          registry: ghcr.io
+          username: ${{ github.actor }}
+          password: ${{ secrets.GITHUB_TOKEN }}
+
+      - name: Build and publish immutable workspace image
+        id: image
+        uses: docker/build-push-action@v6
+        with:
+          context: .
+          file: docker/Dockerfile.workspace
+          platforms: linux/amd64
+          push: true
+          tags: ghcr.io/one-computer/onecomputer-workspace:${{ github.sha }}
+          labels: |
+            org.opencontainers.image.source=${{ github.server_url }}/${{ github.repository }}
+            org.opencontainers.image.revision=${{ github.sha }}
+          provenance: true
+          sbom: true
+          cache-from: type=gha,scope=onecomputer-workspace
+          cache-to: type=gha,mode=max,scope=onecomputer-workspace
+
+      - name: Publish digest for E2B template promotion
+        run: |
+          echo "Image: ghcr.io/one-computer/onecomputer-workspace@${{ steps.image.outputs.digest }}" >> "$GITHUB_STEP_SUMMARY"
+          echo "Digest: ${{ steps.image.outputs.digest }}" >> "$GITHUB_STEP_SUMMARY"

docs/ONEVIBE_REAL_E2B_ACP_DEPLOYMENT.md

@@ -251,6 +251,36 @@ redacted durable activity, replay, approvals, and cleanup proof. No E2B
 pause/resume or snapshot behavior is allowed to silently extend a Cowork task
 or fabricate a missing ACP transcript.
 
+## ACP and template R&D verification — 2026-08-01
+
+The current ACP sources and the older ONEVibe experiments were reviewed before
+the live foundation work. The official ACP repository states that protocol
+wire compatibility is determined by the negotiated `initialize` protocol
+version, not by the npm package version; optional features must be gated by
+the capabilities exchanged during initialization. The official Codex adapter
+is a stdio ACP server and supports client-provided custom OpenAI-compatible
+gateways. The legacy ONEVibe bridge used a similar stdio lifecycle, but its
+default auto-approval path and host-oriented workdir assumptions are not
+acceptable for governed E2B execution. The current bridge therefore keeps
+permission cancellation as the default, uses task-confined paths, and
+configures the gateway in memory before `session/new`.
+
+The ACP streamable-HTTP RFC was also checked. It defines a different transport
+shape (connection-scoped and session-scoped SSE streams, `Acp-Connection-Id`,
+and `Acp-Session-Id`) for remote ACP servers. ONEComputer does not expose that
+transport from the E2B guest: the guest runtime remains stdio, while Control's
+canonical SSE is the product-facing replay stream. This avoids treating ACP
+transport identifiers as user authentication or as the evidence sequence.
+
+E2B's current template SDK supports private registry credentials on
+`Template().fromImage(...)`, while `fromDockerfile(...)` does not support
+multi-stage Dockerfiles. The build path therefore publishes the exact
+multi-stage workspace image to an OCI registry and passes short-lived registry
+credentials only to the E2B template build; credentials are never baked into
+the image or committed. The repository's `scripts/build-e2b-template.mts`
+now accepts the paired `E2B_REGISTRY_USERNAME` and `E2B_REGISTRY_PASSWORD`
+variables for this purpose.
+
 ## Current known prerequisite
 
 The repository now contains the provider-hosted ACP bridge and routing logic,

scripts/build-e2b-template.mts

@@ -2,6 +2,8 @@ import { Template, defaultBuildLogger } from "e2b";
 
 const image = process.env.ONECOMPUTER_WORKSPACE_IMAGE_REF?.trim();
 const name = process.env.E2B_TEMPLATE_NAME?.trim() || "onecomputer-workspace:dev";
+const registryUsername = process.env.E2B_REGISTRY_USERNAME?.trim();
+const registryPassword = process.env.E2B_REGISTRY_PASSWORD?.trim();
 
 if (!image || !image.includes("@sha256:")) {
   throw new Error("ONECOMPUTER_WORKSPACE_IMAGE_REF must be a linux/amd64 image pinned by digest");
@@ -12,9 +14,15 @@ if (!process.env.E2B_API_KEY?.trim()) {
 if (!/^[A-Za-z0-9][A-Za-z0-9._/-]{0,127}:[A-Za-z0-9][A-Za-z0-9._-]{0,63}$/.test(name)) {
   throw new Error("E2B_TEMPLATE_NAME must include an immutable tag, for example onecomputer-workspace:qualification");
 }
+if (Boolean(registryUsername) !== Boolean(registryPassword)) {
+  throw new Error("E2B_REGISTRY_USERNAME and E2B_REGISTRY_PASSWORD must be provided together");
+}
 
 const template = Template()
-  .fromImage(image)
+  .fromImage(image, registryUsername && registryPassword ? {
+    username: registryUsername,
+    password: registryPassword,
+  } : undefined)
   .setUser("root");
 
 const build = await Template.build(template, name, {