fix: bypass untrusted proxy only for sandbox relay

Author: Gini

server/onecomputer-sandbox-runner.test.ts

@@ -114,6 +114,8 @@ describe('OneComputerSandboxRuntimeAdapter', () => {
     expect(launchCommand.indexOf('claude --print')).toBeLessThan(launchCommand.indexOf('rm -f .onevibe-prompt'))
     expect(launchCommand.indexOf('rm -f .onevibe-prompt')).toBeLessThan(launchCommand.indexOf('printf %s "$onevibe_exit_code"'))
     expect(commands.some((command) => command.includes("export ANTHROPIC_BASE_URL='http://sandbox-reachable-litellm:4100'"))).toBe(true)
+    expect(commands.some((command) => command.includes('sandbox-reachable-litellm'))).toBe(true)
+    expect(commands.some((command) => command.includes('export NO_PROXY='))).toBe(false)
     expect(commands.some((command) => command.includes("export ANTHROPIC_API_KEY='placeholder'"))).toBe(true)
     expect(commands.some((command) => command.includes("export ANTHROPIC_AUTH_TOKEN='test-sandbox-bearer-token'"))).toBe(true)
     expect(store.listEvents(task.id).some((event) => event.type === 'run_started' && event.payload.claudeTransport === 'litellm')).toBe(true)
@@ -181,6 +183,9 @@ describe('OneComputerSandboxRuntimeAdapter', () => {
   })
 
   it('reuses the conversation-owned sandbox and Claude session for a continuation', async () => {
+    vi.stubEnv('ONEVIBE_LITELLM_URL', 'http://host-only-litellm:4100')
+    vi.stubEnv('ONEVIBE_SANDBOX_LITELLM_URL', 'https://sandbox-relay.example')
+    vi.stubEnv('ONEVIBE_LITELLM_API_KEY', 'test-routing-key')
     const root = await mkdtemp(path.join(tmpdir(), 'onevibe-onecomputer-retained-'))
     roots.push(root)
     const { TaskStore } = await import('./store.js')
@@ -211,6 +216,7 @@ describe('OneComputerSandboxRuntimeAdapter', () => {
     expect(commands.filter((command) => command.includes('claude --print'))).toHaveLength(2)
     expect(commands.filter((command) => command.includes('claude --print'))[0]).not.toContain('--resume')
     expect(commands.filter((command) => command.includes('claude --print'))[1]).toContain("--resume 'session-retained'")
+    expect(commands.some((command) => command.includes('export NO_PROXY=') && command.includes('sandbox-relay.example'))).toBe(true)
     expect(store.getTask(task.id).securityContext).toMatchObject({ runtimeSessionId: 'session-retained', runtimeSessionLeaseGeneration: 1 })
   })
 })

server/onecomputer-sandbox-runner.ts

@@ -139,6 +139,7 @@ export class OneComputerSandboxRuntimeAdapter implements RuntimeAdapter {
     const configuredClaude = claudeProviderConfig()
     const sandboxBaseUrl = process.env.ONEVIBE_SANDBOX_LITELLM_URL?.trim().replace(/\/+$/, '')
       ?? configuredClaude.childEnv.ANTHROPIC_BASE_URL
+    const sandboxNoProxyHost = sandboxBaseUrl ? new URL(sandboxBaseUrl).hostname : undefined
     const sandboxAuthToken = process.env.ONEVIBE_SANDBOX_LITELLM_AUTH_TOKEN?.trim()
     const sandboxApiKey = sandboxAuthToken ? 'placeholder' : configuredClaude.childEnv.ANTHROPIC_API_KEY
     const claudeTransport = configuredClaude.configured ? configuredClaude.transport : 'sandbox_preconfigured'
@@ -299,6 +300,10 @@ export class OneComputerSandboxRuntimeAdapter implements RuntimeAdapter {
         'set -eu',
         'export PATH=/opt/node22/bin:/home/kasm-user/.npm-global/bin:$PATH',
         ...(sandboxBaseUrl ? [`export ANTHROPIC_BASE_URL=${shellQuote(sandboxBaseUrl)}`] : []),
+        ...(!this.options.gatewayEnforced && sandboxNoProxyHost ? [
+          `export NO_PROXY="\${NO_PROXY:+$NO_PROXY,}${sandboxNoProxyHost}"`,
+          `export no_proxy="\${no_proxy:+$no_proxy,}${sandboxNoProxyHost}"`,
+        ] : []),
         ...(sandboxApiKey ? [`export ANTHROPIC_API_KEY=${shellQuote(sandboxApiKey)}`] : []),
         ...(sandboxAuthToken ? [`export ANTHROPIC_AUTH_TOKEN=${shellQuote(sandboxAuthToken)}`] : []),
         'export CLAUDE_CODE_DISABLE_NONESSENTIAL_TRAFFIC=1',