initial commit

Author: Chris

.github/workflows/build.yml

@@ -0,0 +1,49 @@
+name: Build and Push
+
+on:
+  push:
+    branches: [main]
+  pull_request:
+    branches: [main]
+
+env:
+  REGISTRY: ghcr.io
+  IMAGE_NAME: caninehq/rover
+
+jobs:
+  build:
+    runs-on: ubuntu-latest
+    permissions:
+      contents: read
+      packages: write
+
+    steps:
+      - uses: actions/checkout@v4
+
+      - uses: docker/setup-buildx-action@v3
+
+      - uses: docker/login-action@v3
+        if: github.event_name == 'push'
+        with:
+          registry: ${{ env.REGISTRY }}
+          username: ${{ github.actor }}
+          password: ${{ secrets.GITHUB_TOKEN }}
+
+      - uses: docker/metadata-action@v5
+        id: meta
+        with:
+          images: ${{ env.REGISTRY }}/${{ env.IMAGE_NAME }}
+          tags: |
+            type=sha
+            type=raw,value=latest,enable={{is_default_branch}}
+
+      - uses: docker/build-push-action@v6
+        with:
+          context: .
+          file: Dockerfile.sidecar
+          platforms: linux/amd64,linux/arm64
+          push: ${{ github.event_name == 'push' }}
+          tags: ${{ steps.meta.outputs.tags }}
+          labels: ${{ steps.meta.outputs.labels }}
+          cache-from: type=gha
+          cache-to: type=gha,mode=max

.gitignore

@@ -0,0 +1,3 @@
+.DS_Store
+.env
+*.log

Dockerfile.sidecar

@@ -0,0 +1,67 @@
+# syntax=docker/dockerfile:1
+
+# Rover is Canine's managed coding-agent sidecar. It is intentionally generic:
+# Canine can exec commands inside it, mount the shared workspace, and layer in
+# agent-specific behavior later without rebuilding the project app image.
+
+FROM docker.io/library/debian:bookworm-slim
+
+ARG DEBIAN_FRONTEND=noninteractive
+ARG NODE_VERSION=22.14.0
+ARG YARN_VERSION=1.22.22
+ARG PNPM_VERSION=9.15.4
+ARG TARGETARCH
+
+ENV LANG=C.UTF-8 \
+    LC_ALL=C.UTF-8 \
+    TERM=xterm-256color \
+    WORKSPACE_DIR=/workspace
+
+RUN apt-get update -qq && \
+    apt-get install --no-install-recommends -y \
+      bash \
+      build-essential \
+      ca-certificates \
+      curl \
+      fd-find \
+      git \
+      git-lfs \
+      jq \
+      less \
+      openssh-client \
+      patch \
+      procps \
+      python3 \
+      python3-pip \
+      ripgrep \
+      ruby-full \
+      shellcheck \
+      software-properties-common \
+      sqlite3 \
+      sudo \
+      tini \
+      unzip \
+      vim-tiny \
+      wget \
+      xz-utils && \
+    ln -sf /usr/bin/fdfind /usr/local/bin/fd && \
+    rm -rf /var/lib/apt/lists /var/cache/apt/archives
+
+RUN arch="$(case "${TARGETARCH:-amd64}" in amd64) echo x64 ;; arm64) echo arm64 ;; *) echo "${TARGETARCH}" ;; esac)" && \
+    curl -fsSL "https://nodejs.org/dist/v${NODE_VERSION}/node-v${NODE_VERSION}-linux-${arch}.tar.xz" \
+    | tar -xJ --strip-components=1 -C /usr/local/ && \
+    npm install -g "yarn@${YARN_VERSION}" "pnpm@${PNPM_VERSION}" && \
+    npm cache clean --force
+
+# Install coding agents
+RUN npm install -g @anthropic-ai/claude-code @openai/codex && \
+    npm cache clean --force
+
+COPY entrypoint.sh /usr/local/bin/rover-entrypoint
+RUN chmod +x /usr/local/bin/rover-entrypoint && \
+    git lfs install --system
+
+WORKDIR /workspace
+
+ENTRYPOINT ["/usr/bin/tini", "--", "/usr/local/bin/rover-entrypoint"]
+CMD ["sleep", "infinity"]

README.md

@@ -0,0 +1,48 @@
+# Rover Sidecar
+
+`rover` is Canine's managed coding-agent sidecar image.
+
+It is designed to:
+
+- mount the same writable workspace volume as the user's development container
+- stay alive and ready for Canine to exec coding-agent commands into it
+- include a broad set of common developer tools without coupling the sidecar to a specific app stack
+- provide pre-installed coding agents (Claude Code, Codex)
+
+## Pre-installed Coding Agents
+
+| Agent | Command | Required Env Var |
+|-------|---------|-----------------|
+| Claude Code | `claude` | `ANTHROPIC_API_KEY` |
+| Codex | `codex` | `OPENAI_API_KEY` |
+
+## Key Defaults
+
+- workspace: `/workspace`
+- entrypoint: `rover-entrypoint`
+- default command: `sleep infinity`
+
+## Build
+
+```bash
+docker build -f resources/sidecars/rover/Dockerfile.sidecar -t canine/rover-sidecar:dev resources/sidecars/rover
+```
+
+## Usage
+
+API keys should be injected as environment variables when running the container:
+
+```bash
+docker run -d \
+  -e ANTHROPIC_API_KEY=sk-ant-... \
+  -e OPENAI_API_KEY=sk-... \
+  -v workspace:/workspace \
+  canine/rover-sidecar:dev
+```
+
+Then exec into the running container to invoke agents:
+
+```bash
+docker exec -it <container> claude --print "fix the failing tests"
+docker exec -it <container> codex --quiet "add input validation"
+```

entrypoint.sh

@@ -0,0 +1,12 @@
+#!/usr/bin/env bash
+set -euo pipefail
+
+workspace_dir="${WORKSPACE_DIR:-/workspace}"
+
+mkdir -p "${workspace_dir}"
+cd "${workspace_dir}"
+
+# Configure git safe directory for the workspace
+git config --global --add safe.directory "${workspace_dir}"
+
+exec "$@"