Bound Apple container identifiers to 64 characters

[penso]

Summary

• Fix Apple Container sandbox startup failures when identity-scoped prefixes plus session UUIDs exceed the 64-character identifier limit.
• Generate stable Apple-only names with SHA-256 suffixes, reserve room for stale-container generation suffixes, and keep startup/per-session cleanup discoverable.
• Report the actual active container name through sandbox and failover backends without changing Docker container naming.

flowchart LR
    A[Instance prefix + session key] --> B[Normalize components]
    B --> C[Bound prefix and key with stable digest]
    C --> D[Reserve generation suffix]
    D --> E[Apple container ID at most 64 chars]
    E --> F[Create, report, and clean same ID]

Loading

Closes #1137

Validation

Completed

• cargo test -p moltis-tools container_name
• cargo test -p moltis-tools apple_container_names_fit_runtime_limit
• cargo check -p moltis-chat
• just release-preflight
• ./scripts/local-validate.sh 1237

Remaining

• Live Apple Container smoke test on a machine with sandbox execution configured.

Manual QA

1. Configure tools.exec.sandbox.backend = "apple-container" with the default Moltis identity.
2. Start a new chat session and execute a sandboxed command.
3. Confirm the Apple container starts and its logged identifier is no longer than 64 characters.
4. Trigger session cleanup and confirm the generated container is removed.

[greptile-apps]

Greptile Summary

The PR bounds Apple Container identifiers to 64 characters while preserving stable naming, stale-container generations, management discovery, and backend-aware diagnostics.

• Adds normalized, digest-suffixed Apple container names with reserved generation space.
• Aligns listing, cleanup, web, and Swift management with compact Apple prefixes.
• Reports backend and runtime container names from the same resolved sandbox backend.

Confidence Score: 5/5

The PR appears safe to merge.

No blocking failure remains.

Important Files Changed

Filename	Overview
crates/tools/src/sandbox/container_name.rs	Defines stable bounded Apple container names and delimiter-aware compact-prefix matching, including maximum-generation coverage.
crates/tools/src/sandbox/apple.rs	Uses the bounded naming helper consistently for container creation, generation rotation, runtime reporting, and session cleanup.
crates/tools/src/sandbox/containers.rs	Extends Apple container discovery and cleanup to recognize compact runtime prefixes while preserving Docker naming behavior.
crates/web/src/container_management.rs	Accepts compact Apple runtime names during management authorization, resolving the previously reported rejection.
crates/swift-bridge/src/ffi_sandbox.rs	Aligns Swift stop and remove authorization with compact Apple container naming.
crates/chat/src/service/chat_impl.rs	Resolves backend metadata and runtime container name from one effective session backend, resolving the previously inconsistent response pair.
crates/tools/src/sandbox/router.rs	Delegates runtime metadata through failover and session backend routing so backend names remain paired with their runtime resource names.

Flowchart

%%{init: {'theme': 'neutral'}}%%
flowchart LR
    A[Configured prefix and session key] --> B[Normalize components]
    B --> C[Compact long values with stable digest]
    C --> D[Reserve generation suffix space]
    D --> E[Apple identifier at most 64 characters]
    E --> F[Create and report runtime container]
    E --> G[List, stop, remove, and clean by matching prefix]

Loading

_{Reviews (3): Last reviewed commit: "test(sandbox): cover management prefix f..." | Re-trigger Greptile}

[codspeed-hq]

Merging this PR will degrade performance by 10.32%

⚠️ Different runtime environments detected

Some benchmarks with significant performance changes were compared across different runtime environments,
which may affect the accuracy of the results.

Open the report in CodSpeed to investigate

❌ 1 regressed benchmark
✅ 38 untouched benchmarks
⏩ 9 skipped benchmarks¹

Warning

Please fix the performance issues or acknowledge them on CodSpeed.

Performance Changes

	Benchmark	BASE	HEAD	Efficiency
❌	session_history_path[default]	6.2 µs	6.9 µs	-10.32%

Tip

Investigate this regression by commenting @codspeedbot fix this regression on this PR, or directly use the CodSpeed MCP with your agent.

---

_{Comparing fix/apple-container-name-limit (d6130ea) with main (fc65e52)}

Footnotes

1. 9 benchmarks were skipped, so the baseline results were used instead. If they were deleted from the codebase, click here and archive them to remove them from the performance reports. ↩

[codecov]

Codecov Report

❌ Patch coverage is 72.04301% with 26 lines in your changes missing coverage. Please review.

Files with missing lines	Patch %	Lines
crates/web/src/api.rs	0.00%	26 Missing ⚠️

📢 Thoughts on this report? Let us know!

[penso]

@greptile review

[penso]

@greptile review