feat(dark-factory): Autonomous Agent Coding Pattern — dual substrate (Kata + Lambda MicroVM), design + implementation - #32

Open

elamaran11 wants to merge 372 commits into

mainfrom

dark-factory-autonomous-agent-coding-pattern

This pull request is big! We're only showing the most recent 250 commits

Commits on Jul 14, 2026

fix(dark-factory): webhookUrl is host-only (Argo appends endpoint)
elamaran11
committed
94b156e
fix(agent-sandbox): coder reaches Bifrost by ClusterIP (Kata VM DNS quirk)
elamaran11
committed
0fbca59
fix(dark-factory): coder uses Bifrost Anthropic endpoint, not Bedrock SDK
elamaran11
committed
2d5f923
fix(dark-factory): inject ClusterIP BIFROST_URL per-claim (Overrides policy)
elamaran11
committed
75a358a
fix(dark-factory): coder uses Bifrost model alias 'claude-sonnet' (v0.1.2)
elamaran11
committed
a0a793f
fix(coder): front Bifrost with a localhost UA-shim to dodge broken claude-cli routing
elamaran11
committed
918188f
deploy(agent-sandbox): bump coder image to v0.1.3 (UA-shim Bifrost fix)
elamaran11
committed
95acca9
fix(coder): UA-shim uses a fixed localhost port (server.address() is null before listen)
elamaran11
committed
5d6aa1f
deploy(agent-sandbox): bump coder image to v0.1.4
elamaran11
committed
8c10ab4
fix(coder): run the Bifrost UA-shim in its own process
elamaran11
committed
a9ec36c
deploy(agent-sandbox): bump coder image to v0.1.5
elamaran11
committed
f74575b
fix(coder): give claude a writable HOME on the read-only rootfs
elamaran11
committed
5405401
deploy(agent-sandbox): bump coder image to v0.1.6
elamaran11
committed
613ee6c
fix(coder): push df/issue-N with plain --force, not --force-with-lease
elamaran11
committed
0482548
deploy(agent-sandbox): bump coder image to v0.1.7
elamaran11
committed
15cab85
fix(coder): retry transient GitHub failures in the self-report bus
elamaran11
committed
5746961
deploy(agent-sandbox): bump coder image to v0.1.8
elamaran11
committed
b79eca3

Commits on Jul 15, 2026

Commits on Jul 16, 2026

Commits on Jul 17, 2026

Commits on Jul 19, 2026

fix(dark-factory): holdout shows 'not applicable' (not 'not run') when no scenarios match
elamaran11
committed
b242673

Commits on Jul 20, 2026

Commits on Jul 21, 2026

Commits on Jul 29, 2026

Commits on Jul 30, 2026

Commits on Jul 31, 2026

Commits on Aug 1, 2026

Revert "feat(sandbox): Agent Sandbox on the hub + scoped GitHub credentials"
elamaran11
authored
f544c7a
Merge pull request #47 from aws-samples/revert-45-fix/parity-with-peeks
elamaran11
authored
47b8908
Merge commit '47b8908c91d87747c722d78d83782e216797000f' into flow-d-lambda-microvm-sandbox
Elamaran Shanmugam
committed
c3ac0c6
feat(flow-d): re-apply df-run orchestration onto reverted #32 (old/working structure)
Elamaran Shanmugam
committed
ba514ac

Commits on Aug 3, 2026

fix(flow-d): sync-wave the RGD before its MicrovmSandbox instance
Elamaran Shanmugam
committed
1e7227d
fix(agent-sandbox): allow coder DNS egress to public resolvers
Elamaran Shanmugam
committed
8b81ed1
fix(dark-factory): retain completed workflows 7d (was 1h)
Elamaran Shanmugam
committed
dfdca56
fix(flow-d): use kro.run apiGroup + grant KRO graph child RBAC
Elamaran Shanmugam
committed
aaaaff6
fix(flow-d): quote operands in microvm-suspend when-expression
Elamaran Shanmugam
committed
70c2fdc
fix(dark-factory): default microvmSuspend off (Flow D only)
Elamaran Shanmugam
committed
ee5d6ff
fix(agent-sandbox): allow coder DNS egress to public resolvers
Elamaran Shanmugam
committed
7187d4a
fix(dark-factory): retain completed workflows 7d (was 1h)
Elamaran Shanmugam
committed
df035d8
Merge pull request #48 from aws-samples/fix/kata-coder-dns-and-ttl
elamaran11
authored
909c8fb
fix(flow-d): scope controller iam:PassRole by target ARN, drop service condition
Elamaran Shanmugam
committed
82daaa1
fix(flow-d): controller needs lambda:PassNetworkConnector for image build
Elamaran Shanmugam
committed
8c9a08d
fix(flow-d): point codeArtifactUri at the RGD-created bucket
Elamaran Shanmugam
committed
e32a08d
fix(flow-d): name the bridge container 'coder' for claim-injection parity
Elamaran Shanmugam
committed
556e7c7
fix(flow-d): allow bridge egress to the K8s API server
Elamaran Shanmugam
committed
6a97fed
fix(flow-d): bridge/lifecycle image needs aws-cli v2 (has lambda-microvms)
Elamaran Shanmugam
committed
df957cd
fix(flow-d): hub overlay bridgeImage → aws-cli v2 (was pinning alpine/k8s)
Elamaran Shanmugam
committed
8a16250
fix(flow-d): allow bridge egress to EKS Pod Identity endpoint
Elamaran Shanmugam
committed
2cebef5
fix(flow-d): bridge SANDBOX_NAME from downward API (was df-<issue> mismatch)
Elamaran Shanmugam
committed
2c7738d
fix(flow-d): re-enable microvmSuspend (hub runs both substrates)
Elamaran Shanmugam
committed
7911579
docs(flow-d): design for running the coder inside the MicroVM
Elamaran Shanmugam
committed
e56dd91
feat(flow-d): lambda-coder — Bedrock-direct + /run hook wrapper
Elamaran Shanmugam
committed
27ee2b5
feat(flow-d): bridge passes runHookPayload (issue ctx + gh token) to RunMicrovm
Elamaran Shanmugam
committed
7369d1b
fix(flow-d): build runHookPayload with python3, not node
Elamaran Shanmugam
committed
6e7070b
fix(flow-d): single-line python3 payload builder (YAML block-scalar fix)
Elamaran Shanmugam
committed
72d8501
docs(flow-d): record in-VM build attempt + confirmed /run-hook blocker
Elamaran Shanmugam
committed
cfcb258
feat(flow-d): bridge creates Microvm CR + payload Secret (fires /run)
Elamaran Shanmugam
committed
f0e12fd
docs(flow-d): Microvm CR path reconciles + VM runs, /run hook still silent
Elamaran Shanmugam
committed
00195a5
docs(flow-d): E2E run #106 report — chain works to /run, 2 gaps isolated
Elamaran Shanmugam
committed
d0bc733

Commits on Aug 4, 2026

feat(flow-d): bridge drives /run + runtime CloudWatch logs + ingress connector
Elamaran Shanmugam
committed
cc6d33c
fix(flow-d): grant lambda:CreateMicrovmAuthToken (bridge drives /run)
Elamaran Shanmugam
committed
601a0c3
feat(flow-d): observable coder — /status endpoint + bridge polls it
Elamaran Shanmugam
committed
9ff9018
chore(flow-d): bump codeArtifactUri to -r2 to force image rebuild
Elamaran Shanmugam
committed
426d069
fix(flow-d): minimal hook-server (drop /status) + artifact r3
Elamaran Shanmugam
committed
8e18fb4
feat(flow-d): /logs endpoint + capture coder output to file (observability)
Elamaran Shanmugam
committed
a84cb38
fix(flow-d): set WORKSPACE=/tmp/workspace (coder crashed EACCES on /workspace)
Elamaran Shanmugam
committed
d48d707
fix(flow-d): df-iterate routes fix round to originating substrate
Elamaran Shanmugam
committed
7c2f950
fix(flow-d): remove microvm-suspend from df-run DAG; bridge owns suspend
Elamaran Shanmugam
committed
63526e5
docs(flow-d): substrate benchmark + diagrams (Kata vs Lambda MicroVM)
Elamaran Shanmugam
committed
405f2a1
fix(flow-d): bump bridge memory 128Mi→1Gi (was OOMKilled mid fix-round)
Elamaran Shanmugam
committed
8089bc9
fix(flow-d): forward df-iterate note into the MicroVM coder
Elamaran Shanmugam
committed
3ec7fb3
fix(flow-d): fresh MicroVM per fix round (terminate stale suspended VM)
Elamaran Shanmugam
committed
4b088b8
fix(flow-d): real CRD-driven suspend/resume across the fix loop
Elamaran Shanmugam
committed
879347e
fix(flow-d): keep VM on suspend — annotation selector + Sandbox-existence teardown guard
Elamaran Shanmugam
committed
d9bed02
fix(flow-d): one Sandbox per VM — stable claim naming by issue-number
Elamaran Shanmugam
committed
8148300
refactor(flow-d): separate df-run-lambda; restore df-run to certified Kata
Elamaran Shanmugam
committed
b05e9ff
feat(flow-d): route darkfactory-lambda → df-run-lambda + workflow IAM/RBAC
Elamaran Shanmugam
committed
d73ef79
docs(flow-d): update benchmark + diagrams for separate df-run-lambda
Elamaran Shanmugam
committed
c69b3ac
fix(df-merge): only count agent findings on the CURRENT head sha
Elamaran Shanmugam
committed
809cbae
fix(df-merge): match inline findings by original_commit_id (exclude carried-forward)
Elamaran Shanmugam
committed
2457dfa
Merge pull request #41 from aws-samples/flow-d-lambda-microvm-sandbox
elamaran11
authored
065ce2c