@1claw/cli 0.34.6 → 0.35.0

package/dist/src/docker/base/entrypoint.sh

@@ -0,0 +1,61 @@
+#!/bin/sh
+# 1Claw agent container entrypoint.
+# Supports two modes:
+#   local  (ONECLAW_LOCAL_VAULT=true)  → credentials injected by the host daemon
+#                                         over the mounted Unix socket. The key
+#                                         NEVER enters the container.
+#   cloud  (ONECLAW_LOCAL_VAULT=false) → the agent API key is provided directly
+#                                         (e.g. via a Secret Manager mount).
+set -e
+
+CHAT_UI_PORT="${CHAT_UI_PORT:-3000}"
+
+echo "─────────────────────────────────────────────"
+echo " 1Claw agent container starting"
+echo "   Agent ID:  ${ONECLAW_AGENT_ID:-not set}"
+echo "   Modules:   ${ONECLAW_CONTAINER_MODULES:-none}"
+
+if [ "$ONECLAW_LOCAL_VAULT" = "true" ]; then
+    echo "   Mode:      local (daemon socket)"
+    echo "   Socket:    $ONECLAW_DAEMON_SOCKET"
+    if [ ! -S "$ONECLAW_DAEMON_SOCKET" ]; then
+        echo ""
+        echo "ERROR: Daemon socket not found at $ONECLAW_DAEMON_SOCKET"
+        echo ""
+        echo "The 1Claw daemon must be running on the host with the socket mounted:"
+        echo "  1claw daemon start"
+        echo "  docker run -v ~/.config/1claw/daemon.sock:/run/1claw/daemon.sock:ro ..."
+        exit 1
+    fi
+    echo "─────────────────────────────────────────────"
+    # Start the MCP server in local daemon mode (best-effort).
+    if command -v 1claw-mcp >/dev/null 2>&1; then
+        ONECLAW_LOCAL_VAULT=true 1claw-mcp --local 2>/tmp/mcp.log &
+    else
+        echo "NOTE: @1claw/mcp not installed in image; chat UI uses the daemon directly."
+    fi
+else
+    echo "   Mode:      cloud (agent API key)"
+    if [ -z "$ONECLAW_AGENT_API_KEY" ]; then
+        echo ""
+        echo "ERROR: ONECLAW_AGENT_API_KEY is not set (cloud mode)."
+        echo "Provide it via a Secret Manager mount or -e ONECLAW_AGENT_API_KEY=..."
+        exit 1
+    fi
+    echo "─────────────────────────────────────────────"
+    if command -v 1claw-mcp >/dev/null 2>&1; then
+        1claw-mcp 2>/tmp/mcp.log &
+    fi
+fi
+
+# Run module startup hooks (each module may drop an executable startup.sh).
+for hook in /app/modules/*/startup.sh; do
+    if [ -x "$hook" ]; then
+        echo "Running module hook: $hook"
+        "$hook" || echo "WARN: module hook $hook exited non-zero"
+    fi
+done
+
+# Start the chat UI (the container's health anchor) in the foreground.
+echo "Ready: http://0.0.0.0:${CHAT_UI_PORT}"
+exec node /app/chat-ui/server.js

package/dist/src/docker/base/healthcheck.sh

@@ -0,0 +1,2 @@
+#!/bin/sh
+curl -sf "http://localhost:${CHAT_UI_PORT:-3000}/health" >/dev/null || exit 1

package/dist/src/docker/compose.yaml

@@ -0,0 +1,20 @@
+# docker-compose template for a 1Claw agent container (local daemon mode).
+# Generated by `1claw eject`. The daemon must be running on the host:
+#   1claw daemon start
+services:
+  agent:
+    image: {{IMAGE}}
+    container_name: {{NAME}}
+    restart: unless-stopped
+    ports:
+      - "{{PORT}}:3000"
+    volumes:
+      # Host daemon socket — credentials are injected here; the container
+      # never receives the raw agent key.
+      - {{DAEMON_SOCKET}}:/run/1claw/daemon.sock:ro
+    environment:
+      ONECLAW_LOCAL_VAULT: "true"
+      ONECLAW_DAEMON_SOCKET: /run/1claw/daemon.sock
+      ONECLAW_AGENT_ID: "{{AGENT_ID}}"
+      ONECLAW_CONTAINER_MODULES: "{{MODULES}}"
+      CHAT_UI_PORT: "3000"

package/dist/src/docker/templates/Dockerfile.tmpl

@@ -0,0 +1,7 @@
+# Generated by `1claw init --docker` / `1claw eject`.
+# Base image provides @1claw/mcp + chat UI + entrypoint. Module layers are
+# appended below. Edit freely, then build with:
+#   docker build -t my-agent .
+FROM {{BASE_IMAGE}}
+
+{{MODULE_LAYERS}}

package/dist/src/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/index.ts"],"names":[],"mappings":"AAGA,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AA+CpC,wBAAgB,aAAa,IAAI,OAAO,CA0EvC"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/index.ts"],"names":[],"mappings":"AAGA,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAoDpC,wBAAgB,aAAa,IAAI,OAAO,CAiFvC"}

package/dist/src/index.js

@@ -26,6 +26,11 @@ import { webhookCommand } from "./commands/webhook.js";
 import { platformCommand } from "./commands/platform.js";
 import { deviceCommand } from "./commands/device.js";
 import { approvalCommand } from "./commands/approval.js";
+import { initCommand } from "./commands/init.js";
+import { publishCommand } from "./commands/publish.js";
+import { ejectCommand } from "./commands/eject.js";
+import { containersCommand } from "./commands/containers.js";
+import { deployCommand } from "./commands/deploy.js";
 import { setOutputFormat, setApiUrl } from "./config.js";
 const __dirname = dirname(fileURLToPath(import.meta.url));
 // Compiled to dist/src/index.js → ../../package.json; ts-node from src/ → ../package.json
@@ -65,6 +70,12 @@ export function createProgram() {
     program.addCommand(importCommand);
     program.addCommand(localCommand);
     program.addCommand(daemonCommand);
+    // Containerized agent runtime
+    program.addCommand(initCommand);
+    program.addCommand(publishCommand);
+    program.addCommand(ejectCommand);
+    program.addCommand(containersCommand);
+    program.addCommand(deployCommand);
     // Config
     program.addCommand(configCommand);
     // Treasury

package/dist/src/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,YAAY,EAAE,MAAM,SAAS,CAAC;AACnD,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AAC1C,OAAO,EAAE,aAAa,EAAE,MAAM,UAAU,CAAC;AACzC,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AACpC,OAAO,EACH,YAAY,EACZ,aAAa,EACb,aAAa,GAChB,MAAM,qBAAqB,CAAC;AAC7B,OAAO,EACH,qBAAqB,EACrB,oBAAoB,GACvB,MAAM,8BAA8B,CAAC;AACtC,OAAO,EACH,kBAAkB,EAClB,kBAAkB,GACrB,MAAM,uBAAuB,CAAC;AAC/B,OAAO,EAAE,WAAW,EAAE,MAAM,oBAAoB,CAAC;AACjD,OAAO,EAAE,YAAY,EAAE,MAAM,qBAAqB,CAAC;AACnD,OAAO,EAAE,aAAa,EAAE,MAAM,sBAAsB,CAAC;AACrD,OAAO,EAAE,UAAU,EAAE,MAAM,mBAAmB,CAAC;AAC/C,OAAO,EAAE,YAAY,EAAE,MAAM,qBAAqB,CAAC;AACnD,OAAO,EAAE,aAAa,EAAE,MAAM,sBAAsB,CAAC;AACrD,OAAO,EAAE,YAAY,EAAE,MAAM,qBAAqB,CAAC;AACnD,OAAO,EAAE,cAAc,EAAE,MAAM,uBAAuB,CAAC;AACvD,OAAO,EAAE,YAAY,EAAE,MAAM,qBAAqB,CAAC;AACnD,OAAO,EAAE,UAAU,EAAE,MAAM,mBAAmB,CAAC;AAC/C,OAAO,EAAE,aAAa,EAAE,MAAM,sBAAsB,CAAC;AACrD,OAAO,EAAE,YAAY,EAAE,MAAM,qBAAqB,CAAC;AACnD,OAAO,EAAE,aAAa,EAAE,MAAM,sBAAsB,CAAC;AACrD,OAAO,EAAE,YAAY,EAAE,MAAM,qBAAqB,CAAC;AACnD,OAAO,EAAE,aAAa,EAAE,MAAM,sBAAsB,CAAC;AACrD,OAAO,EAAE,YAAY,EAAE,MAAM,qBAAqB,CAAC;AACnD,OAAO,EAAE,eAAe,EAAE,MAAM,wBAAwB,CAAC;AACzD,OAAO,EAAE,cAAc,EAAE,MAAM,uBAAuB,CAAC;AACvD,OAAO,EAAE,eAAe,EAAE,MAAM,wBAAwB,CAAC;AACzD,OAAO,EAAE,aAAa,EAAE,MAAM,sBAAsB,CAAC;AACrD,OAAO,EAAE,eAAe,EAAE,MAAM,wBAAwB,CAAC;AACzD,OAAO,EAAE,eAAe,EAAE,SAAS,EAAE,MAAM,aAAa,CAAC;AAEzD,MAAM,SAAS,GAAG,OAAO,CAAC,aAAa,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC;AAC1D,0FAA0F;AAC1F,MAAM,WAAW,GAAG,CAAC,IAAI,CAAC,SAAS,EAAE,oBAAoB,CAAC,EAAE,IAAI,CAAC,SAAS,EAAE,iBAAiB,CAAC,CAAC,CAAC,IAAI,CAChG,CAAC,CAAC,EAAE,EAAE,CAAC,UAAU,CAAC,CAAC,CAAC,CACvB,CAAC;AACF,IAAI,CAAC,WAAW,EAAE,CAAC;IACf,MAAM,IAAI,KAAK,CAAC,iDAAiD,CAAC,CAAC;AACvE,CAAC;AACD,MAAM,iBAAiB,GAAG,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,WAAW,EAAE,MAAM,CAAC,CAAC,CAAC,OAAiB,CAAC;AAE1F,MAAM,UAAU,aAAa;IACzB,MAAM,OAAO,GAAG,IAAI,OAAO,CAAC,OAAO,CAAC;SAC/B,OAAO,CAAC,iBAAiB,CAAC;SAC1B,WAAW,CACR,mEAAmE,CACtE,CAAC;IAEN,OAAO;IACP,OAAO,CAAC,UAAU,CAAC,YAAY,CAAC,CAAC;IACjC,OAAO,CAAC,UAAU,CAAC,aAAa,CAAC,CAAC;IAClC,OAAO,CAAC,UAAU,CAAC,aAAa,CAAC,CAAC;IAClC,OAAO,CAAC,UAAU,CAAC,qBAAqB,CAAC,CAAC;IAC1C,OAAO,CAAC,UAAU,CAAC,oBAAoB,CAAC,CAAC;IACzC,OAAO,CAAC,UAAU,CAAC,kBAAkB,CAAC,CAAC;IACvC,OAAO,CAAC,UAAU,CAAC,kBAAkB,CAAC,CAAC;IACvC,OAAO,CAAC,UAAU,CAAC,WAAW,CAAC,CAAC;IAEhC,iBAAiB;IACjB,OAAO,CAAC,UAAU,CAAC,YAAY,CAAC,CAAC;IACjC,OAAO,CAAC,UAAU,CAAC,aAAa,CAAC,CAAC;IAClC,OAAO,CAAC,UAAU,CAAC,UAAU,CAAC,CAAC;IAC/B,OAAO,CAAC,UAAU,CAAC,YAAY,CAAC,CAAC;IACjC,OAAO,CAAC,UAAU,CAAC,aAAa,CAAC,CAAC;IAElC,UAAU;IACV,OAAO,CAAC,UAAU,CAAC,YAAY,CAAC,CAAC;IAEjC,UAAU;IACV,OAAO,CAAC,UAAU,CAAC,cAAc,CAAC,CAAC;IAEnC,WAAW;IACX,OAAO,CAAC,UAAU,CAAC,YAAY,CAAC,CAAC;IACjC,OAAO,CAAC,UAAU,CAAC,UAAU,CAAC,CAAC;IAE/B,8BAA8B;IAC9B,OAAO,CAAC,UAAU,CAAC,YAAY,CAAC,CAAC;IACjC,OAAO,CAAC,UAAU,CAAC,aAAa,CAAC,CAAC;IAClC,OAAO,CAAC,UAAU,CAAC,YAAY,CAAC,CAAC;IACjC,OAAO,CAAC,UAAU,CAAC,aAAa,CAAC,CAAC;IAElC,SAAS;IACT,OAAO,CAAC,UAAU,CAAC,aAAa,CAAC,CAAC;IAElC,WAAW;IACX,OAAO,CAAC,UAAU,CAAC,eAAe,CAAC,CAAC;IAEpC,WAAW;IACX,OAAO,CAAC,UAAU,CAAC,cAAc,CAAC,CAAC;IAEnC,QAAQ;IACR,OAAO,CAAC,UAAU,CAAC,YAAY,CAAC,CAAC;IAEjC,WAAW;IACX,OAAO,CAAC,UAAU,CAAC,eAAe,CAAC,CAAC;IAEpC,mBAAmB;IACnB,OAAO,CAAC,UAAU,CAAC,aAAa,CAAC,CAAC;IAClC,OAAO,CAAC,UAAU,CAAC,eAAe,CAAC,CAAC;IAEpC,iBAAiB;IACjB,OAAO,CAAC,MAAM,CAAC,QAAQ,EAAE,oCAAoC,CAAC,CAAC;IAC/D,OAAO,CAAC,MAAM,CAAC,iBAAiB,EAAE,sCAAsC,CAAC,CAAC;IAE1E,OAAO,CAAC,IAAI,CAAC,WAAW,EAAE,GAAG,EAAE;QAC3B,MAAM,UAAU,GAAG,OAAO,CAAC,IAAI,EAAE,CAAC;QAClC,IAAI,UAAU,CAAC,IAAI,EAAE,CAAC;YAClB,eAAe,CAAC,MAAM,CAAC,CAAC;QAC5B,CAAC;QACD,IAAI,UAAU,CAAC,MAAM,EAAE,CAAC;YACpB,SAAS,CAAC,UAAU,CAAC,MAAM,CAAC,CAAC;QACjC,CAAC;IACL,CAAC,CAAC,CAAC;IAEH,OAAO,OAAO,CAAC;AACnB,CAAC"}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,YAAY,EAAE,MAAM,SAAS,CAAC;AACnD,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AAC1C,OAAO,EAAE,aAAa,EAAE,MAAM,UAAU,CAAC;AACzC,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AACpC,OAAO,EACH,YAAY,EACZ,aAAa,EACb,aAAa,GAChB,MAAM,qBAAqB,CAAC;AAC7B,OAAO,EACH,qBAAqB,EACrB,oBAAoB,GACvB,MAAM,8BAA8B,CAAC;AACtC,OAAO,EACH,kBAAkB,EAClB,kBAAkB,GACrB,MAAM,uBAAuB,CAAC;AAC/B,OAAO,EAAE,WAAW,EAAE,MAAM,oBAAoB,CAAC;AACjD,OAAO,EAAE,YAAY,EAAE,MAAM,qBAAqB,CAAC;AACnD,OAAO,EAAE,aAAa,EAAE,MAAM,sBAAsB,CAAC;AACrD,OAAO,EAAE,UAAU,EAAE,MAAM,mBAAmB,CAAC;AAC/C,OAAO,EAAE,YAAY,EAAE,MAAM,qBAAqB,CAAC;AACnD,OAAO,EAAE,aAAa,EAAE,MAAM,sBAAsB,CAAC;AACrD,OAAO,EAAE,YAAY,EAAE,MAAM,qBAAqB,CAAC;AACnD,OAAO,EAAE,cAAc,EAAE,MAAM,uBAAuB,CAAC;AACvD,OAAO,EAAE,YAAY,EAAE,MAAM,qBAAqB,CAAC;AACnD,OAAO,EAAE,UAAU,EAAE,MAAM,mBAAmB,CAAC;AAC/C,OAAO,EAAE,aAAa,EAAE,MAAM,sBAAsB,CAAC;AACrD,OAAO,EAAE,YAAY,EAAE,MAAM,qBAAqB,CAAC;AACnD,OAAO,EAAE,aAAa,EAAE,MAAM,sBAAsB,CAAC;AACrD,OAAO,EAAE,YAAY,EAAE,MAAM,qBAAqB,CAAC;AACnD,OAAO,EAAE,aAAa,EAAE,MAAM,sBAAsB,CAAC;AACrD,OAAO,EAAE,YAAY,EAAE,MAAM,qBAAqB,CAAC;AACnD,OAAO,EAAE,eAAe,EAAE,MAAM,wBAAwB,CAAC;AACzD,OAAO,EAAE,cAAc,EAAE,MAAM,uBAAuB,CAAC;AACvD,OAAO,EAAE,eAAe,EAAE,MAAM,wBAAwB,CAAC;AACzD,OAAO,EAAE,aAAa,EAAE,MAAM,sBAAsB,CAAC;AACrD,OAAO,EAAE,eAAe,EAAE,MAAM,wBAAwB,CAAC;AACzD,OAAO,EAAE,WAAW,EAAE,MAAM,oBAAoB,CAAC;AACjD,OAAO,EAAE,cAAc,EAAE,MAAM,uBAAuB,CAAC;AACvD,OAAO,EAAE,YAAY,EAAE,MAAM,qBAAqB,CAAC;AACnD,OAAO,EAAE,iBAAiB,EAAE,MAAM,0BAA0B,CAAC;AAC7D,OAAO,EAAE,aAAa,EAAE,MAAM,sBAAsB,CAAC;AACrD,OAAO,EAAE,eAAe,EAAE,SAAS,EAAE,MAAM,aAAa,CAAC;AAEzD,MAAM,SAAS,GAAG,OAAO,CAAC,aAAa,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC;AAC1D,0FAA0F;AAC1F,MAAM,WAAW,GAAG,CAAC,IAAI,CAAC,SAAS,EAAE,oBAAoB,CAAC,EAAE,IAAI,CAAC,SAAS,EAAE,iBAAiB,CAAC,CAAC,CAAC,IAAI,CAChG,CAAC,CAAC,EAAE,EAAE,CAAC,UAAU,CAAC,CAAC,CAAC,CACvB,CAAC;AACF,IAAI,CAAC,WAAW,EAAE,CAAC;IACf,MAAM,IAAI,KAAK,CAAC,iDAAiD,CAAC,CAAC;AACvE,CAAC;AACD,MAAM,iBAAiB,GAAG,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,WAAW,EAAE,MAAM,CAAC,CAAC,CAAC,OAAiB,CAAC;AAE1F,MAAM,UAAU,aAAa;IACzB,MAAM,OAAO,GAAG,IAAI,OAAO,CAAC,OAAO,CAAC;SAC/B,OAAO,CAAC,iBAAiB,CAAC;SAC1B,WAAW,CACR,mEAAmE,CACtE,CAAC;IAEN,OAAO;IACP,OAAO,CAAC,UAAU,CAAC,YAAY,CAAC,CAAC;IACjC,OAAO,CAAC,UAAU,CAAC,aAAa,CAAC,CAAC;IAClC,OAAO,CAAC,UAAU,CAAC,aAAa,CAAC,CAAC;IAClC,OAAO,CAAC,UAAU,CAAC,qBAAqB,CAAC,CAAC;IAC1C,OAAO,CAAC,UAAU,CAAC,oBAAoB,CAAC,CAAC;IACzC,OAAO,CAAC,UAAU,CAAC,kBAAkB,CAAC,CAAC;IACvC,OAAO,CAAC,UAAU,CAAC,kBAAkB,CAAC,CAAC;IACvC,OAAO,CAAC,UAAU,CAAC,WAAW,CAAC,CAAC;IAEhC,iBAAiB;IACjB,OAAO,CAAC,UAAU,CAAC,YAAY,CAAC,CAAC;IACjC,OAAO,CAAC,UAAU,CAAC,aAAa,CAAC,CAAC;IAClC,OAAO,CAAC,UAAU,CAAC,UAAU,CAAC,CAAC;IAC/B,OAAO,CAAC,UAAU,CAAC,YAAY,CAAC,CAAC;IACjC,OAAO,CAAC,UAAU,CAAC,aAAa,CAAC,CAAC;IAElC,UAAU;IACV,OAAO,CAAC,UAAU,CAAC,YAAY,CAAC,CAAC;IAEjC,UAAU;IACV,OAAO,CAAC,UAAU,CAAC,cAAc,CAAC,CAAC;IAEnC,WAAW;IACX,OAAO,CAAC,UAAU,CAAC,YAAY,CAAC,CAAC;IACjC,OAAO,CAAC,UAAU,CAAC,UAAU,CAAC,CAAC;IAE/B,8BAA8B;IAC9B,OAAO,CAAC,UAAU,CAAC,YAAY,CAAC,CAAC;IACjC,OAAO,CAAC,UAAU,CAAC,aAAa,CAAC,CAAC;IAClC,OAAO,CAAC,UAAU,CAAC,YAAY,CAAC,CAAC;IACjC,OAAO,CAAC,UAAU,CAAC,aAAa,CAAC,CAAC;IAElC,8BAA8B;IAC9B,OAAO,CAAC,UAAU,CAAC,WAAW,CAAC,CAAC;IAChC,OAAO,CAAC,UAAU,CAAC,cAAc,CAAC,CAAC;IACnC,OAAO,CAAC,UAAU,CAAC,YAAY,CAAC,CAAC;IACjC,OAAO,CAAC,UAAU,CAAC,iBAAiB,CAAC,CAAC;IACtC,OAAO,CAAC,UAAU,CAAC,aAAa,CAAC,CAAC;IAElC,SAAS;IACT,OAAO,CAAC,UAAU,CAAC,aAAa,CAAC,CAAC;IAElC,WAAW;IACX,OAAO,CAAC,UAAU,CAAC,eAAe,CAAC,CAAC;IAEpC,WAAW;IACX,OAAO,CAAC,UAAU,CAAC,cAAc,CAAC,CAAC;IAEnC,QAAQ;IACR,OAAO,CAAC,UAAU,CAAC,YAAY,CAAC,CAAC;IAEjC,WAAW;IACX,OAAO,CAAC,UAAU,CAAC,eAAe,CAAC,CAAC;IAEpC,mBAAmB;IACnB,OAAO,CAAC,UAAU,CAAC,aAAa,CAAC,CAAC;IAClC,OAAO,CAAC,UAAU,CAAC,eAAe,CAAC,CAAC;IAEpC,iBAAiB;IACjB,OAAO,CAAC,MAAM,CAAC,QAAQ,EAAE,oCAAoC,CAAC,CAAC;IAC/D,OAAO,CAAC,MAAM,CAAC,iBAAiB,EAAE,sCAAsC,CAAC,CAAC;IAE1E,OAAO,CAAC,IAAI,CAAC,WAAW,EAAE,GAAG,EAAE;QAC3B,MAAM,UAAU,GAAG,OAAO,CAAC,IAAI,EAAE,CAAC;QAClC,IAAI,UAAU,CAAC,IAAI,EAAE,CAAC;YAClB,eAAe,CAAC,MAAM,CAAC,CAAC;QAC5B,CAAC;QACD,IAAI,UAAU,CAAC,MAAM,EAAE,CAAC;YACpB,SAAS,CAAC,UAAU,CAAC,MAAM,CAAC,CAAC;QACjC,CAAC;IACL,CAAC,CAAC,CAAC;IAEH,OAAO,OAAO,CAAC;AACnB,CAAC"}

package/dist/src/lib/container-config.d.ts

@@ -0,0 +1,43 @@
+export declare const CONTAINERS_DIR: string;
+export interface ContainerState {
+    containerName: string;
+    containerId: string | null;
+    agentId: string | null;
+    vaultId: string | null;
+    image: string;
+    modules: string[];
+    port: number;
+    createdAt: string;
+    /** Local-vault path where the daemon stores the agent key (cloud mode only). */
+    localVaultPath: string | null;
+    /** Set by `1claw publish` once an image is pushed to a registry. */
+    customImage: string | null;
+    publishedAt?: string;
+    /** "local" (daemon socket) or "cloud" (agent API key direct). */
+    mode: "local" | "cloud";
+    /** Deployment info, populated by `1claw deploy`. */
+    deployment?: {
+        provider: string;
+        serviceUrl?: string;
+        region?: string;
+        deployedAt: string;
+    };
+}
+/** A short, URL/identifier-safe random id (8 hex chars). */
+export declare function shortId(): string;
+/** Generate a default container name: docker-agent-<shortId>. */
+export declare function generateContainerName(): string;
+/** Restrict names to docker-safe characters. */
+export declare function sanitizeName(name: string): string;
+export declare function isValidContainerName(name: string): boolean;
+export declare function saveContainerState(state: ContainerState): void;
+export declare function loadContainerState(name: string): ContainerState | null;
+export declare function deleteContainerState(name: string): boolean;
+export declare function listContainerStates(): ContainerState[];
+/** Check whether a TCP port is free to bind on localhost. */
+export declare function isPortAvailable(port: number): Promise<boolean>;
+/** Find the first available port at or after `start` (bounded search). */
+export declare function findAvailablePort(start: number): Promise<number>;
+/** Label namespace applied to every CLI-managed container. */
+export declare const MANAGED_LABEL = "1claw.managed";
+//# sourceMappingURL=container-config.d.ts.map

package/dist/src/lib/container-config.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"container-config.d.ts","sourceRoot":"","sources":["../../../src/lib/container-config.ts"],"names":[],"mappings":"AAiBA,eAAO,MAAM,cAAc,QAAiC,CAAC;AAE7D,MAAM,WAAW,cAAc;IAC3B,aAAa,EAAE,MAAM,CAAC;IACtB,WAAW,EAAE,MAAM,GAAG,IAAI,CAAC;IAC3B,OAAO,EAAE,MAAM,GAAG,IAAI,CAAC;IACvB,OAAO,EAAE,MAAM,GAAG,IAAI,CAAC;IACvB,KAAK,EAAE,MAAM,CAAC;IACd,OAAO,EAAE,MAAM,EAAE,CAAC;IAClB,IAAI,EAAE,MAAM,CAAC;IACb,SAAS,EAAE,MAAM,CAAC;IAClB,gFAAgF;IAChF,cAAc,EAAE,MAAM,GAAG,IAAI,CAAC;IAC9B,oEAAoE;IACpE,WAAW,EAAE,MAAM,GAAG,IAAI,CAAC;IAC3B,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,iEAAiE;IACjE,IAAI,EAAE,OAAO,GAAG,OAAO,CAAC;IACxB,oDAAoD;IACpD,UAAU,CAAC,EAAE;QACT,QAAQ,EAAE,MAAM,CAAC;QACjB,UAAU,CAAC,EAAE,MAAM,CAAC;QACpB,MAAM,CAAC,EAAE,MAAM,CAAC;QAChB,UAAU,EAAE,MAAM,CAAC;KACtB,CAAC;CACL;AAYD,4DAA4D;AAC5D,wBAAgB,OAAO,IAAI,MAAM,CAEhC;AAED,iEAAiE;AACjE,wBAAgB,qBAAqB,IAAI,MAAM,CAE9C;AAED,gDAAgD;AAChD,wBAAgB,YAAY,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,CAEjD;AAED,wBAAgB,oBAAoB,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAG1D;AAED,wBAAgB,kBAAkB,CAAC,KAAK,EAAE,cAAc,GAAG,IAAI,CAS9D;AAED,wBAAgB,kBAAkB,CAAC,IAAI,EAAE,MAAM,GAAG,cAAc,GAAG,IAAI,CAQtE;AAED,wBAAgB,oBAAoB,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAK1D;AAED,wBAAgB,mBAAmB,IAAI,cAAc,EAAE,CAgBtD;AAED,6DAA6D;AAC7D,wBAAgB,eAAe,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC,CAS9D;AAED,0EAA0E;AAC1E,wBAAsB,iBAAiB,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,CAOtE;AAED,8DAA8D;AAC9D,eAAO,MAAM,aAAa,kBAAkB,CAAC"}

package/dist/src/lib/container-config.js

@@ -0,0 +1,98 @@
+import { existsSync, mkdirSync, readFileSync, writeFileSync, readdirSync, unlinkSync, chmodSync, } from "node:fs";
+import { homedir } from "node:os";
+import { join } from "node:path";
+import { randomBytes } from "node:crypto";
+import { createServer } from "node:net";
+const CONFIG_DIR = process.env.ONECLAW_CONFIG_DIR || join(homedir(), ".config", "1claw");
+export const CONTAINERS_DIR = join(CONFIG_DIR, "containers");
+function ensureContainersDir() {
+    if (!existsSync(CONTAINERS_DIR)) {
+        mkdirSync(CONTAINERS_DIR, { recursive: true });
+    }
+}
+function statePath(name) {
+    return join(CONTAINERS_DIR, `${sanitizeName(name)}.json`);
+}
+/** A short, URL/identifier-safe random id (8 hex chars). */
+export function shortId() {
+    return randomBytes(4).toString("hex");
+}
+/** Generate a default container name: docker-agent-<shortId>. */
+export function generateContainerName() {
+    return `docker-agent-${shortId()}`;
+}
+/** Restrict names to docker-safe characters. */
+export function sanitizeName(name) {
+    return name.replace(/[^a-zA-Z0-9_.-]/g, "-");
+}
+export function isValidContainerName(name) {
+    // Docker: [a-zA-Z0-9][a-zA-Z0-9_.-]+
+    return /^[a-zA-Z0-9][a-zA-Z0-9_.-]*$/.test(name);
+}
+export function saveContainerState(state) {
+    ensureContainersDir();
+    const path = statePath(state.containerName);
+    writeFileSync(path, JSON.stringify(state, null, 2) + "\n", "utf-8");
+    try {
+        chmodSync(path, 0o600);
+    }
+    catch {
+        // best-effort
+    }
+}
+export function loadContainerState(name) {
+    const path = statePath(name);
+    if (!existsSync(path))
+        return null;
+    try {
+        return JSON.parse(readFileSync(path, "utf-8"));
+    }
+    catch {
+        return null;
+    }
+}
+export function deleteContainerState(name) {
+    const path = statePath(name);
+    if (!existsSync(path))
+        return false;
+    unlinkSync(path);
+    return true;
+}
+export function listContainerStates() {
+    if (!existsSync(CONTAINERS_DIR))
+        return [];
+    const states = [];
+    for (const file of readdirSync(CONTAINERS_DIR)) {
+        if (!file.endsWith(".json"))
+            continue;
+        try {
+            states.push(JSON.parse(readFileSync(join(CONTAINERS_DIR, file), "utf-8")));
+        }
+        catch {
+            // skip corrupt entries
+        }
+    }
+    return states.sort((a, b) => b.createdAt.localeCompare(a.createdAt));
+}
+/** Check whether a TCP port is free to bind on localhost. */
+export function isPortAvailable(port) {
+    return new Promise((resolve) => {
+        const server = createServer();
+        server.once("error", () => resolve(false));
+        server.once("listening", () => {
+            server.close(() => resolve(true));
+        });
+        server.listen(port, "127.0.0.1");
+    });
+}
+/** Find the first available port at or after `start` (bounded search). */
+export async function findAvailablePort(start) {
+    for (let p = start; p < start + 100; p++) {
+        if (await isPortAvailable(p))
+            return p;
+    }
+    throw new Error(`No available port found in range ${start}-${start + 100}.`);
+}
+/** Label namespace applied to every CLI-managed container. */
+export const MANAGED_LABEL = "1claw.managed";
+//# sourceMappingURL=container-config.js.map

package/dist/src/lib/container-config.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"container-config.js","sourceRoot":"","sources":["../../../src/lib/container-config.ts"],"names":[],"mappings":"AAAA,OAAO,EACH,UAAU,EACV,SAAS,EACT,YAAY,EACZ,aAAa,EACb,WAAW,EACX,UAAU,EACV,SAAS,GACZ,MAAM,SAAS,CAAC;AACjB,OAAO,EAAE,OAAO,EAAE,MAAM,SAAS,CAAC;AAClC,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AACjC,OAAO,EAAE,WAAW,EAAE,MAAM,aAAa,CAAC;AAC1C,OAAO,EAAE,YAAY,EAAE,MAAM,UAAU,CAAC;AAExC,MAAM,UAAU,GACZ,OAAO,CAAC,GAAG,CAAC,kBAAkB,IAAI,IAAI,CAAC,OAAO,EAAE,EAAE,SAAS,EAAE,OAAO,CAAC,CAAC;AAE1E,MAAM,CAAC,MAAM,cAAc,GAAG,IAAI,CAAC,UAAU,EAAE,YAAY,CAAC,CAAC;AA2B7D,SAAS,mBAAmB;IACxB,IAAI,CAAC,UAAU,CAAC,cAAc,CAAC,EAAE,CAAC;QAC9B,SAAS,CAAC,cAAc,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IACnD,CAAC;AACL,CAAC;AAED,SAAS,SAAS,CAAC,IAAY;IAC3B,OAAO,IAAI,CAAC,cAAc,EAAE,GAAG,YAAY,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;AAC9D,CAAC;AAED,4DAA4D;AAC5D,MAAM,UAAU,OAAO;IACnB,OAAO,WAAW,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;AAC1C,CAAC;AAED,iEAAiE;AACjE,MAAM,UAAU,qBAAqB;IACjC,OAAO,gBAAgB,OAAO,EAAE,EAAE,CAAC;AACvC,CAAC;AAED,gDAAgD;AAChD,MAAM,UAAU,YAAY,CAAC,IAAY;IACrC,OAAO,IAAI,CAAC,OAAO,CAAC,kBAAkB,EAAE,GAAG,CAAC,CAAC;AACjD,CAAC;AAED,MAAM,UAAU,oBAAoB,CAAC,IAAY;IAC7C,qCAAqC;IACrC,OAAO,8BAA8B,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AACrD,CAAC;AAED,MAAM,UAAU,kBAAkB,CAAC,KAAqB;IACpD,mBAAmB,EAAE,CAAC;IACtB,MAAM,IAAI,GAAG,SAAS,CAAC,KAAK,CAAC,aAAa,CAAC,CAAC;IAC5C,aAAa,CAAC,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC,GAAG,IAAI,EAAE,OAAO,CAAC,CAAC;IACpE,IAAI,CAAC;QACD,SAAS,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC;IAC3B,CAAC;IAAC,MAAM,CAAC;QACL,cAAc;IAClB,CAAC;AACL,CAAC;AAED,MAAM,UAAU,kBAAkB,CAAC,IAAY;IAC3C,MAAM,IAAI,GAAG,SAAS,CAAC,IAAI,CAAC,CAAC;IAC7B,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC;QAAE,OAAO,IAAI,CAAC;IACnC,IAAI,CAAC;QACD,OAAO,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,IAAI,EAAE,OAAO,CAAC,CAAmB,CAAC;IACrE,CAAC;IAAC,MAAM,CAAC;QACL,OAAO,IAAI,CAAC;IAChB,CAAC;AACL,CAAC;AAED,MAAM,UAAU,oBAAoB,CAAC,IAAY;IAC7C,MAAM,IAAI,GAAG,SAAS,CAAC,IAAI,CAAC,CAAC;IAC7B,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC;QAAE,OAAO,KAAK,CAAC;IACpC,UAAU,CAAC,IAAI,CAAC,CAAC;IACjB,OAAO,IAAI,CAAC;AAChB,CAAC;AAED,MAAM,UAAU,mBAAmB;IAC/B,IAAI,CAAC,UAAU,CAAC,cAAc,CAAC;QAAE,OAAO,EAAE,CAAC;IAC3C,MAAM,MAAM,GAAqB,EAAE,CAAC;IACpC,KAAK,MAAM,IAAI,IAAI,WAAW,CAAC,cAAc,CAAC,EAAE,CAAC;QAC7C,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC;YAAE,SAAS;QACtC,IAAI,CAAC;YACD,MAAM,CAAC,IAAI,CACP,IAAI,CAAC,KAAK,CACN,YAAY,CAAC,IAAI,CAAC,cAAc,EAAE,IAAI,CAAC,EAAE,OAAO,CAAC,CAClC,CACtB,CAAC;QACN,CAAC;QAAC,MAAM,CAAC;YACL,uBAAuB;QAC3B,CAAC;IACL,CAAC;IACD,OAAO,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC,aAAa,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC;AACzE,CAAC;AAED,6DAA6D;AAC7D,MAAM,UAAU,eAAe,CAAC,IAAY;IACxC,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,EAAE;QAC3B,MAAM,MAAM,GAAG,YAAY,EAAE,CAAC;QAC9B,MAAM,CAAC,IAAI,CAAC,OAAO,EAAE,GAAG,EAAE,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC;QAC3C,MAAM,CAAC,IAAI,CAAC,WAAW,EAAE,GAAG,EAAE;YAC1B,MAAM,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC;QACtC,CAAC,CAAC,CAAC;QACH,MAAM,CAAC,MAAM,CAAC,IAAI,EAAE,WAAW,CAAC,CAAC;IACrC,CAAC,CAAC,CAAC;AACP,CAAC;AAED,0EAA0E;AAC1E,MAAM,CAAC,KAAK,UAAU,iBAAiB,CAAC,KAAa;IACjD,KAAK,IAAI,CAAC,GAAG,KAAK,EAAE,CAAC,GAAG,KAAK,GAAG,GAAG,EAAE,CAAC,EAAE,EAAE,CAAC;QACvC,IAAI,MAAM,eAAe,CAAC,CAAC,CAAC;YAAE,OAAO,CAAC,CAAC;IAC3C,CAAC;IACD,MAAM,IAAI,KAAK,CACX,oCAAoC,KAAK,IAAI,KAAK,GAAG,GAAG,GAAG,CAC9D,CAAC;AACN,CAAC;AAED,8DAA8D;AAC9D,MAAM,CAAC,MAAM,aAAa,GAAG,eAAe,CAAC"}

package/dist/src/lib/daemon-control.d.ts

@@ -0,0 +1,10 @@
+export declare function daemonSocketPath(): string;
+/** Ping the daemon's /health over its Unix socket. */
+export declare function daemonHealthy(socketPath?: string): Promise<boolean>;
+/**
+ * Start the local daemon as a detached background process. The passphrase is
+ * passed via the child's environment (ONECLAW_VAULT_PASSPHRASE) so no
+ * interactive prompt is needed. Resolves once the socket answers /health.
+ */
+export declare function startDaemonDetached(passphrase: string, socketPath?: string, timeoutMs?: number): Promise<boolean>;
+//# sourceMappingURL=daemon-control.d.ts.map

package/dist/src/lib/daemon-control.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"daemon-control.d.ts","sourceRoot":"","sources":["../../../src/lib/daemon-control.ts"],"names":[],"mappings":"AASA,wBAAgB,gBAAgB,IAAI,MAAM,CAEzC;AAED,sDAAsD;AACtD,wBAAgB,aAAa,CAAC,UAAU,SAAqB,GAAG,OAAO,CAAC,OAAO,CAAC,CAoB/E;AAED;;;;GAIG;AACH,wBAAsB,mBAAmB,CACrC,UAAU,EAAE,MAAM,EAClB,UAAU,SAAqB,EAC/B,SAAS,SAAQ,GAClB,OAAO,CAAC,OAAO,CAAC,CAwBlB"}

package/dist/src/lib/daemon-control.js

@@ -0,0 +1,58 @@
+import { request as httpRequest } from "node:http";
+import { spawn } from "node:child_process";
+import { existsSync } from "node:fs";
+import { homedir } from "node:os";
+import { join } from "node:path";
+const CONFIG_DIR = process.env.ONECLAW_CONFIG_DIR || join(homedir(), ".config", "1claw");
+export function daemonSocketPath() {
+    return process.env.ONECLAW_DAEMON_SOCKET || join(CONFIG_DIR, "daemon.sock");
+}
+/** Ping the daemon's /health over its Unix socket. */
+export function daemonHealthy(socketPath = daemonSocketPath()) {
+    return new Promise((resolve) => {
+        if (!existsSync(socketPath)) {
+            resolve(false);
+            return;
+        }
+        const req = httpRequest({ socketPath, path: "/health", method: "GET", timeout: 2000 }, (res) => {
+            res.resume();
+            resolve(res.statusCode === 200);
+        });
+        req.on("error", () => resolve(false));
+        req.on("timeout", () => {
+            req.destroy();
+            resolve(false);
+        });
+        req.end();
+    });
+}
+/**
+ * Start the local daemon as a detached background process. The passphrase is
+ * passed via the child's environment (ONECLAW_VAULT_PASSPHRASE) so no
+ * interactive prompt is needed. Resolves once the socket answers /health.
+ */
+export async function startDaemonDetached(passphrase, socketPath = daemonSocketPath(), timeoutMs = 10000) {
+    // process.argv[1] is the CLI entry (dist/bin/1claw.js). Re-invoke it so the
+    // daemon runs the same code path in both dev and installed environments.
+    const cliEntry = process.argv[1];
+    const child = spawn(process.execPath, [cliEntry, "daemon", "start", "--socket", socketPath], {
+        detached: true,
+        stdio: "ignore",
+        env: {
+            ...process.env,
+            ONECLAW_VAULT_PASSPHRASE: passphrase,
+        },
+    });
+    child.unref();
+    const deadline = Date.now() + timeoutMs;
+    while (Date.now() < deadline) {
+        if (await daemonHealthy(socketPath))
+            return true;
+        await sleep(250);
+    }
+    return false;
+}
+function sleep(ms) {
+    return new Promise((r) => setTimeout(r, ms));
+}
+//# sourceMappingURL=daemon-control.js.map

package/dist/src/lib/daemon-control.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"daemon-control.js","sourceRoot":"","sources":["../../../src/lib/daemon-control.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,OAAO,IAAI,WAAW,EAAE,MAAM,WAAW,CAAC;AACnD,OAAO,EAAE,KAAK,EAAE,MAAM,oBAAoB,CAAC;AAC3C,OAAO,EAAE,UAAU,EAAE,MAAM,SAAS,CAAC;AACrC,OAAO,EAAE,OAAO,EAAE,MAAM,SAAS,CAAC;AAClC,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AAEjC,MAAM,UAAU,GACZ,OAAO,CAAC,GAAG,CAAC,kBAAkB,IAAI,IAAI,CAAC,OAAO,EAAE,EAAE,SAAS,EAAE,OAAO,CAAC,CAAC;AAE1E,MAAM,UAAU,gBAAgB;IAC5B,OAAO,OAAO,CAAC,GAAG,CAAC,qBAAqB,IAAI,IAAI,CAAC,UAAU,EAAE,aAAa,CAAC,CAAC;AAChF,CAAC;AAED,sDAAsD;AACtD,MAAM,UAAU,aAAa,CAAC,UAAU,GAAG,gBAAgB,EAAE;IACzD,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,EAAE;QAC3B,IAAI,CAAC,UAAU,CAAC,UAAU,CAAC,EAAE,CAAC;YAC1B,OAAO,CAAC,KAAK,CAAC,CAAC;YACf,OAAO;QACX,CAAC;QACD,MAAM,GAAG,GAAG,WAAW,CACnB,EAAE,UAAU,EAAE,IAAI,EAAE,SAAS,EAAE,MAAM,EAAE,KAAK,EAAE,OAAO,EAAE,IAAI,EAAE,EAC7D,CAAC,GAAG,EAAE,EAAE;YACJ,GAAG,CAAC,MAAM,EAAE,CAAC;YACb,OAAO,CAAC,GAAG,CAAC,UAAU,KAAK,GAAG,CAAC,CAAC;QACpC,CAAC,CACJ,CAAC;QACF,GAAG,CAAC,EAAE,CAAC,OAAO,EAAE,GAAG,EAAE,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC;QACtC,GAAG,CAAC,EAAE,CAAC,SAAS,EAAE,GAAG,EAAE;YACnB,GAAG,CAAC,OAAO,EAAE,CAAC;YACd,OAAO,CAAC,KAAK,CAAC,CAAC;QACnB,CAAC,CAAC,CAAC;QACH,GAAG,CAAC,GAAG,EAAE,CAAC;IACd,CAAC,CAAC,CAAC;AACP,CAAC;AAED;;;;GAIG;AACH,MAAM,CAAC,KAAK,UAAU,mBAAmB,CACrC,UAAkB,EAClB,UAAU,GAAG,gBAAgB,EAAE,EAC/B,SAAS,GAAG,KAAK;IAEjB,4EAA4E;IAC5E,yEAAyE;IACzE,MAAM,QAAQ,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IACjC,MAAM,KAAK,GAAG,KAAK,CACf,OAAO,CAAC,QAAQ,EAChB,CAAC,QAAQ,EAAE,QAAQ,EAAE,OAAO,EAAE,UAAU,EAAE,UAAU,CAAC,EACrD;QACI,QAAQ,EAAE,IAAI;QACd,KAAK,EAAE,QAAQ;QACf,GAAG,EAAE;YACD,GAAG,OAAO,CAAC,GAAG;YACd,wBAAwB,EAAE,UAAU;SACvC;KACJ,CACJ,CAAC;IACF,KAAK,CAAC,KAAK,EAAE,CAAC;IAEd,MAAM,QAAQ,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,SAAS,CAAC;IACxC,OAAO,IAAI,CAAC,GAAG,EAAE,GAAG,QAAQ,EAAE,CAAC;QAC3B,IAAI,MAAM,aAAa,CAAC,UAAU,CAAC;YAAE,OAAO,IAAI,CAAC;QACjD,MAAM,KAAK,CAAC,GAAG,CAAC,CAAC;IACrB,CAAC;IACD,OAAO,KAAK,CAAC;AACjB,CAAC;AAED,SAAS,KAAK,CAAC,EAAU;IACrB,OAAO,IAAI,OAAO,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,UAAU,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC;AACjD,CAAC"}

package/dist/src/lib/docker-client.d.ts

@@ -0,0 +1,58 @@
+import { type ChildProcess } from "node:child_process";
+/**
+ * Thin wrapper around the Docker CLI via `child_process.execFile`.
+ *
+ * We deliberately avoid `dockerode` / any Docker SDK to keep the CLI's
+ * dependency surface minimal. Every call shells out to the local `docker`
+ * binary with an argv array (never a `/bin/sh -c` string), so user-supplied
+ * values (image names, env values, tags) cannot inject shell metacharacters.
+ */
+export interface DockerRunOptions {
+    image: string;
+    name: string;
+    /** Host port → container port, e.g. { "3000": "3000" } */
+    ports: Record<string, string>;
+    /** Host path → container mount spec, e.g. { "/host/x.sock": "/run/x.sock:ro" } */
+    volumes: Record<string, string>;
+    env: Record<string, string>;
+    detach: boolean;
+    restart?: string;
+    labels?: Record<string, string>;
+}
+export interface DockerBuildOptions {
+    context: string;
+    dockerfile: string;
+    tag: string;
+    buildArgs?: Record<string, string>;
+    onProgress?: (line: string) => void;
+}
+declare class DockerError extends Error {
+    stderr?: string | undefined;
+    constructor(message: string, stderr?: string | undefined);
+}
+export declare function dockerAvailable(): Promise<boolean>;
+/** True if Docker is installed but the daemon is unreachable. */
+export declare function dockerDaemonError(): Promise<string | null>;
+export declare function dockerImageExists(image: string): Promise<boolean>;
+export declare function dockerPull(image: string, onProgress?: (line: string) => void): Promise<void>;
+export declare function dockerBuild(opts: DockerBuildOptions): Promise<string>;
+export declare function dockerRun(opts: DockerRunOptions): Promise<string>;
+export declare function dockerStop(nameOrId: string): Promise<void>;
+export declare function dockerRm(nameOrId: string, force?: boolean): Promise<void>;
+export declare function dockerInspect(nameOrId: string): Promise<unknown>;
+export interface ContainerStatus {
+    exists: boolean;
+    running: boolean;
+    status?: string;
+    health?: string;
+}
+export declare function dockerContainerStatus(nameOrId: string): Promise<ContainerStatus>;
+export declare function dockerPush(tag: string, onProgress?: (line: string) => void): Promise<void>;
+export declare function dockerTag(source: string, target: string): Promise<void>;
+export declare function dockerCommit(container: string, tag: string): Promise<string>;
+/** Spawn `docker logs -f` and return the child process so the caller streams it. */
+export declare function dockerLogs(nameOrId: string, follow: boolean): ChildProcess;
+/** True if the local docker client is authenticated to the given registry. */
+export declare function dockerLoggedIn(registry?: string): Promise<boolean>;
+export { DockerError };
+//# sourceMappingURL=docker-client.d.ts.map

package/dist/src/lib/docker-client.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"docker-client.d.ts","sourceRoot":"","sources":["../../../src/lib/docker-client.ts"],"names":[],"mappings":"AAAA,OAAO,EAAmB,KAAK,YAAY,EAAE,MAAM,oBAAoB,CAAC;AAExE;;;;;;;GAOG;AAEH,MAAM,WAAW,gBAAgB;IAC7B,KAAK,EAAE,MAAM,CAAC;IACd,IAAI,EAAE,MAAM,CAAC;IACb,0DAA0D;IAC1D,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAC9B,kFAAkF;IAClF,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAChC,GAAG,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAC5B,MAAM,EAAE,OAAO,CAAC;IAChB,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,MAAM,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;CACnC;AAED,MAAM,WAAW,kBAAkB;IAC/B,OAAO,EAAE,MAAM,CAAC;IAChB,UAAU,EAAE,MAAM,CAAC;IACnB,GAAG,EAAE,MAAM,CAAC;IACZ,SAAS,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IACnC,UAAU,CAAC,EAAE,CAAC,IAAI,EAAE,MAAM,KAAK,IAAI,CAAC;CACvC;AAED,cAAM,WAAY,SAAQ,KAAK;IAGhB,MAAM,CAAC,EAAE,MAAM;gBADtB,OAAO,EAAE,MAAM,EACR,MAAM,CAAC,EAAE,MAAM,YAAA;CAK7B;AAmFD,wBAAsB,eAAe,IAAI,OAAO,CAAC,OAAO,CAAC,CAOxD;AAED,iEAAiE;AACjE,wBAAsB,iBAAiB,IAAI,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC,CAOhE;AAED,wBAAsB,iBAAiB,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC,CAOvE;AAED,wBAAsB,UAAU,CAC5B,KAAK,EAAE,MAAM,EACb,UAAU,CAAC,EAAE,CAAC,IAAI,EAAE,MAAM,KAAK,IAAI,GACpC,OAAO,CAAC,IAAI,CAAC,CAEf;AAED,wBAAsB,WAAW,CAAC,IAAI,EAAE,kBAAkB,GAAG,OAAO,CAAC,MAAM,CAAC,CAY3E;AAED,wBAAsB,SAAS,CAAC,IAAI,EAAE,gBAAgB,GAAG,OAAO,CAAC,MAAM,CAAC,CAmBvE;AAED,wBAAsB,UAAU,CAAC,QAAQ,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAEhE;AAED,wBAAsB,QAAQ,CAAC,QAAQ,EAAE,MAAM,EAAE,KAAK,UAAQ,GAAG,OAAO,CAAC,IAAI,CAAC,CAK7E;AAED,wBAAsB,aAAa,CAAC,QAAQ,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC,CAItE;AAED,MAAM,WAAW,eAAe;IAC5B,MAAM,EAAE,OAAO,CAAC;IAChB,OAAO,EAAE,OAAO,CAAC;IACjB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,MAAM,CAAC,EAAE,MAAM,CAAC;CACnB;AAED,wBAAsB,qBAAqB,CACvC,QAAQ,EAAE,MAAM,GACjB,OAAO,CAAC,eAAe,CAAC,CAkB1B;AAED,wBAAsB,UAAU,CAC5B,GAAG,EAAE,MAAM,EACX,UAAU,CAAC,EAAE,CAAC,IAAI,EAAE,MAAM,KAAK,IAAI,GACpC,OAAO,CAAC,IAAI,CAAC,CAEf;AAED,wBAAsB,SAAS,CAAC,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAE7E;AAED,wBAAsB,YAAY,CAC9B,SAAS,EAAE,MAAM,EACjB,GAAG,EAAE,MAAM,GACZ,OAAO,CAAC,MAAM,CAAC,CAGjB;AAED,oFAAoF;AACpF,wBAAgB,UAAU,CAAC,QAAQ,EAAE,MAAM,EAAE,MAAM,EAAE,OAAO,GAAG,YAAY,CAK1E;AAED,8EAA8E;AAC9E,wBAAsB,cAAc,CAAC,QAAQ,SAAgC,GAAG,OAAO,CAAC,OAAO,CAAC,CAa/F;AAED,OAAO,EAAE,WAAW,EAAE,CAAC"}

package/dist/src/lib/docker-client.js

@@ -0,0 +1,193 @@
+import { execFile, spawn } from "node:child_process";
+class DockerError extends Error {
+    stderr;
+    constructor(message, stderr) {
+        super(message);
+        this.stderr = stderr;
+        this.name = "DockerError";
+    }
+}
+function run(args, opts = {}) {
+    return new Promise((resolve, reject) => {
+        execFile("docker", args, { cwd: opts.cwd, maxBuffer: 64 * 1024 * 1024 }, (err, stdout, stderr) => {
+            if (err) {
+                reject(translateError(err, stderr));
+                return;
+            }
+            resolve({ stdout: stdout.toString(), stderr: stderr.toString() });
+        });
+    });
+}
+function translateError(err, stderr) {
+    if (err.code === "ENOENT") {
+        return new DockerError("Docker is not installed or not on your PATH. Install Docker Desktop (https://docs.docker.com/get-docker/) and try again.");
+    }
+    const s = (stderr || "").trim();
+    if (s.includes("Cannot connect to the Docker daemon") ||
+        s.includes("Is the docker daemon running")) {
+        return new DockerError("Docker is not running. Start Docker Desktop, or run `sudo systemctl start docker` on Linux.", s);
+    }
+    return new DockerError(s || err.message || "docker command failed", s);
+}
+/** Stream a long-running docker command, forwarding output line-by-line. */
+function runStreaming(args, onProgress, cwd) {
+    return new Promise((resolve, reject) => {
+        const child = spawn("docker", args, { cwd });
+        let stderrTail = "";
+        const onData = (buf) => {
+            const text = buf.toString();
+            stderrTail = (stderrTail + text).slice(-4096);
+            if (onProgress) {
+                for (const line of text.split("\n")) {
+                    if (line.trim())
+                        onProgress(line.trimEnd());
+                }
+            }
+        };
+        child.stdout?.on("data", onData);
+        child.stderr?.on("data", onData);
+        child.on("error", (err) => reject(translateError(err, stderrTail)));
+        child.on("close", (code) => {
+            if (code === 0)
+                resolve();
+            else
+                reject(new DockerError(`docker ${args[0]} exited with code ${code}`, stderrTail));
+        });
+    });
+}
+export async function dockerAvailable() {
+    try {
+        await run(["info", "--format", "{{.ServerVersion}}"]);
+        return true;
+    }
+    catch {
+        return false;
+    }
+}
+/** True if Docker is installed but the daemon is unreachable. */
+export async function dockerDaemonError() {
+    try {
+        await run(["info", "--format", "{{.ServerVersion}}"]);
+        return null;
+    }
+    catch (err) {
+        return err instanceof Error ? err.message : String(err);
+    }
+}
+export async function dockerImageExists(image) {
+    try {
+        await run(["image", "inspect", image]);
+        return true;
+    }
+    catch {
+        return false;
+    }
+}
+export async function dockerPull(image, onProgress) {
+    await runStreaming(["pull", image], onProgress);
+}
+export async function dockerBuild(opts) {
+    const args = ["build", "-t", opts.tag, "-f", opts.dockerfile];
+    if (opts.buildArgs) {
+        for (const [k, v] of Object.entries(opts.buildArgs)) {
+            args.push("--build-arg", `${k}=${v}`);
+        }
+    }
+    args.push(opts.context);
+    await runStreaming(args, opts.onProgress);
+    // Resolve the built image ID.
+    const { stdout } = await run(["image", "inspect", opts.tag, "--format", "{{.Id}}"]);
+    return stdout.trim();
+}
+export async function dockerRun(opts) {
+    const args = ["run", "--name", opts.name];
+    args.push(opts.detach ? "-d" : "-d"); // always detached; logs streamed separately
+    if (opts.restart)
+        args.push("--restart", opts.restart);
+    for (const [host, container] of Object.entries(opts.ports)) {
+        args.push("-p", `${host}:${container}`);
+    }
+    for (const [host, container] of Object.entries(opts.volumes)) {
+        args.push("-v", `${host}:${container}`);
+    }
+    for (const [k, v] of Object.entries(opts.env)) {
+        args.push("-e", `${k}=${v}`);
+    }
+    for (const [k, v] of Object.entries(opts.labels ?? {})) {
+        args.push("--label", `${k}=${v}`);
+    }
+    args.push(opts.image);
+    const { stdout } = await run(args);
+    return stdout.trim();
+}
+export async function dockerStop(nameOrId) {
+    await run(["stop", nameOrId]);
+}
+export async function dockerRm(nameOrId, force = false) {
+    const args = ["rm"];
+    if (force)
+        args.push("-f");
+    args.push(nameOrId);
+    await run(args);
+}
+export async function dockerInspect(nameOrId) {
+    const { stdout } = await run(["inspect", nameOrId]);
+    const parsed = JSON.parse(stdout);
+    return Array.isArray(parsed) ? parsed[0] : parsed;
+}
+export async function dockerContainerStatus(nameOrId) {
+    try {
+        const { stdout } = await run([
+            "inspect",
+            nameOrId,
+            "--format",
+            "{{.State.Status}}|{{if .State.Health}}{{.State.Health.Status}}{{else}}none{{end}}",
+        ]);
+        const [status, health] = stdout.trim().split("|");
+        return {
+            exists: true,
+            running: status === "running",
+            status,
+            health: health === "none" ? undefined : health,
+        };
+    }
+    catch {
+        return { exists: false, running: false };
+    }
+}
+export async function dockerPush(tag, onProgress) {
+    await runStreaming(["push", tag], onProgress);
+}
+export async function dockerTag(source, target) {
+    await run(["tag", source, target]);
+}
+export async function dockerCommit(container, tag) {
+    const { stdout } = await run(["commit", container, tag]);
+    return stdout.trim();
+}
+/** Spawn `docker logs -f` and return the child process so the caller streams it. */
+export function dockerLogs(nameOrId, follow) {
+    const args = ["logs"];
+    if (follow)
+        args.push("-f");
+    args.push(nameOrId);
+    return spawn("docker", args, { stdio: ["ignore", "inherit", "inherit"] });
+}
+/** True if the local docker client is authenticated to the given registry. */
+export async function dockerLoggedIn(registry = "https://index.docker.io/v1/") {
+    try {
+        const { stdout } = await run(["system", "info", "--format", "{{json .}}"]);
+        const info = JSON.parse(stdout);
+        // `docker info` doesn't reliably expose auth; fall back to checking the
+        // config file via `docker logout --help`-free heuristic is unreliable,
+        // so we simply return true and let `docker push` surface auth errors.
+        void info;
+        void registry;
+        return true;
+    }
+    catch {
+        return true;
+    }
+}
+export { DockerError };
+//# sourceMappingURL=docker-client.js.map