BullX智能工作流

Other Bun packages

bun webapps:build bun feishu-openapi:test

Agent Computer is designed to run as a Linux container runtime. For strong
bubblewrap command isolation, run Docker with `--cap-add SYS_ADMIN`,
`--security-opt seccomp=unconfined`, and
`--security-opt systempaths=unconfined` unless you provide an equivalent custom
seccomp/profile setup. In Kubernetes, put the equivalent
`capabilities.add: ["SYS_ADMIN"]`, `seccompProfile`, and `procMount: Unmasked`
on the Agent Computer container `securityContext`. If strong bubblewrap is
unavailable, the worker may downgrade to weak bubblewrap (container `/proc`
mounted into bwrap) and emits a startup warning. It never exposes model commands
without a sandbox.

Run checks for each affected package:

Once the control plane is running, the worker bootstrap helper renders the Docker command used to start an external Agent Computer worker against the local RuntimeFabric endpoint:

Production bootstrap configuration uses standard infrastructure names such as DATABASE_URL and SECRET_KEY_BASE. Store runtime application configuration in the AppConfigure records in PostgreSQL.

Brain requires PostgreSQL with pg_search preloaded and the pg_search, vector, and pg_trgm extensions available; the BrainV3 migration installs them. tools/devkit/postgres-for-ankole builds a matching image.