michaelirwin244/temp-wad-sandbox-verification:latest

schemaVersion: "2"
kind: mixin
name: wad-verification
displayName: WAD Sandbox Verification
description: Confirms that the attendee successfully started their generated Docker Sandbox.
args:
    callback_host:
        required: true
        description: Callback hostname allowed by the sandbox network policy.
        pattern: ^[A-Za-z0-9.-]+(:[0-9]+)?$
    callback_url:
        required: true
        description: Per-session completion callback URL.
        pattern: ^https?://[^[:space:]]+$
    validation_token:
        required: true
        description: Per-session bearer credential.
        pattern: ^[A-Za-z0-9_-]{32}$
permissions:
    network:
        allow:
            - ${{ kit.args.callback_host }}
setup:
    startup:
        - command:
            - sh
            - -c
            - 'marker=/tmp/wad-verification-complete; test -f "$marker" || { curl -fsS --retry 5 --retry-all-errors -X POST -H "Authorization: Bearer $1" "$2" && touch "$marker"; }'
            - wad-verification
            - ${{ kit.args.validation_token }}
            - ${{ kit.args.callback_url }}
          user: "1000"
          description: Confirm this generated sandbox started successfully.