@almyty/runner 1.5.3 → 1.5.5

package/dist/hosted-setup.js

@@ -0,0 +1,202 @@
+/**
+ * First start of a hosted workspace: clone the environment's repository
+ * and run its setup script, once per environment version.
+ *
+ * Runs in enroll mode after the runner has its credential and before it
+ * opens its stream, so the machine reports ready only once the checkout
+ * and setup are in place (docs/hosted-runners.md, "Images and enroll
+ * mode"). The design's rule: on the first start of a volume, or when the
+ * environment version changed, clone `repo` at `ref`, run `setupScript`,
+ * and write `<workspace>/.almyty/env-version`.
+ *
+ * The inputs are the plain variables the Deployment sets
+ * (ALMYTY_WORKSPACE_ROOT, ALMYTY_ENVIRONMENT_VERSION, ALMYTY_REPO_URL,
+ * ALMYTY_REPO_REF, ALMYTY_SETUP_SCRIPT) and one from the Secret,
+ * ALMYTY_GIT_TOKEN. The git token reaches git through GIT_CONFIG_*
+ * variables of that one child process: never on its command line, never
+ * in a file, never in the clone's remote URL.
+ *
+ * A failed clone or setup is reported and the version is not recorded, so
+ * the next start tries again; the runner still comes online, so the
+ * person can look at what went wrong from a shell instead of watching a
+ * pod restart in a loop.
+ */
+import { spawn } from 'node:child_process';
+import { existsSync, mkdirSync, readFileSync, rmSync, writeFileSync } from 'node:fs';
+import { join } from 'node:path';
+/** Where the volume is mounted when the Deployment does not say. */
+export const DEFAULT_WORKSPACE_ROOT = '/workspace';
+/** The checkout's folder inside the workspace. */
+export const REPO_DIR_NAME = 'repo';
+/** A setup script running longer than this is stopped. Override: ALMYTY_SETUP_TIMEOUT_SECONDS. */
+const DEFAULT_SETUP_TIMEOUT_SECONDS = 1800;
+export function workspaceRoot(env) {
+    const root = (env.ALMYTY_WORKSPACE_ROOT ?? '').trim();
+    return root.startsWith('/') ? root : DEFAULT_WORKSPACE_ROOT;
+}
+export async function prepareHostedWorkspace(inputs = {}) {
+    const env = inputs.env ?? process.env;
+    const run = inputs.run ?? runCommand;
+    const log = inputs.log ?? ((line) => process.stdout.write(`${line}\n`));
+    const warn = inputs.warn ?? ((line) => process.stderr.write(`${line}\n`));
+    const root = workspaceRoot(env);
+    const stateDir = join(root, '.almyty');
+    const versionFile = join(stateDir, 'env-version');
+    const version = (env.ALMYTY_ENVIRONMENT_VERSION ?? '').trim() || 'unversioned';
+    const repoUrl = (env.ALMYTY_REPO_URL ?? '').trim();
+    const repoDir = join(root, REPO_DIR_NAME);
+    // An inherited workspace is kept read-only for its new owner to copy
+    // from (the volume is mounted read-only): nothing is set up in it.
+    if ((env.ALMYTY_WORKSPACE_READ_ONLY ?? '').trim() === 'true') {
+        log('workspace: read-only (inherited); nothing is set up');
+        return { upToDate: true, cloned: false, setupRan: false, ok: true, repoDir: repoUrl && existsSync(repoDir) ? repoDir : null };
+    }
+    const recorded = existsSync(versionFile) ? readFileSync(versionFile, 'utf-8').trim() : null;
+    if (recorded === version) {
+        log(`workspace: environment version ${version} already set up`);
+        return { upToDate: true, cloned: false, setupRan: false, ok: true, repoDir: repoUrl ? repoDir : null };
+    }
+    mkdirSync(stateDir, { recursive: true, mode: 0o700 });
+    // A spawned step gets the runner's own variables (the environment's
+    // bindings among them); the enrollment token is already gone (enroll.ts).
+    const childEnv = { ...env, GIT_TERMINAL_PROMPT: '0' };
+    let ok = true;
+    let cloned = false;
+    if (repoUrl) {
+        if (existsSync(join(repoDir, '.git'))) {
+            // An existing checkout is the person's work; a new version does not
+            // overwrite it. Only the setup script runs again.
+            log(`workspace: ${repoDir} already holds a checkout; leaving it as it is`);
+        }
+        else {
+            const result = await cloneRepo({ url: repoUrl, ref: (env.ALMYTY_REPO_REF ?? '').trim(), dir: repoDir, token: env.ALMYTY_GIT_TOKEN, env: childEnv, cwd: root, run, log });
+            cloned = result;
+            if (!result) {
+                ok = false;
+                warn(`workspace: cloning ${redactUrl(repoUrl)} failed; it is tried again on the next start`);
+            }
+        }
+    }
+    const script = env.ALMYTY_SETUP_SCRIPT ?? '';
+    let setupRan = false;
+    if (script.trim() && ok) {
+        setupRan = true;
+        const tmp = inputs.tmpDir ?? '/tmp';
+        const file = join(tmp, `almyty-setup-${process.pid}-${Date.now()}.sh`);
+        writeFileSync(file, script, { mode: 0o700 });
+        const cwd = repoUrl && existsSync(repoDir) ? repoDir : root;
+        const timeoutS = positiveInt(env.ALMYTY_SETUP_TIMEOUT_SECONDS) ?? DEFAULT_SETUP_TIMEOUT_SECONDS;
+        log(`workspace: running the setup script in ${cwd}`);
+        try {
+            const res = await run('bash', [file], { cwd, env: childEnv, timeoutMs: timeoutS * 1000 });
+            if (res.code !== 0) {
+                ok = false;
+                warn(res.timedOut
+                    ? `workspace: the setup script ran past ${timeoutS}s and was stopped; it runs again on the next start`
+                    : `workspace: the setup script exited ${res.code}; it runs again on the next start`);
+            }
+        }
+        finally {
+            rmSync(file, { force: true });
+        }
+    }
+    if (ok) {
+        writeFileSync(versionFile, `${version}\n`, { mode: 0o600 });
+        log(`workspace: environment version ${version} set up`);
+    }
+    return { upToDate: false, cloned, setupRan, ok, repoDir: repoUrl ? repoDir : null };
+}
+async function cloneRepo(o) {
+    const env = { ...o.env, ...gitAuthEnv(o.url, o.token, o.env) };
+    o.log(`workspace: cloning ${redactUrl(o.url)}${o.ref ? ` at ${o.ref}` : ''} into ${o.dir}`);
+    const clone = await o.run('git', ['clone', '--', o.url, o.dir], { cwd: o.cwd, env });
+    if (clone.code !== 0) {
+        rmSync(o.dir, { recursive: true, force: true });
+        return false;
+    }
+    if (!o.ref)
+        return true;
+    // A branch or tag checks out directly; a commit or another ref may need
+    // fetching first.
+    const checkout = await o.run('git', ['-C', o.dir, 'checkout', o.ref, '--'], { cwd: o.cwd, env });
+    if (checkout.code === 0)
+        return true;
+    const fetch = await o.run('git', ['-C', o.dir, 'fetch', 'origin', o.ref], { cwd: o.cwd, env });
+    if (fetch.code !== 0)
+        return false;
+    const detached = await o.run('git', ['-C', o.dir, 'checkout', 'FETCH_HEAD', '--'], { cwd: o.cwd, env });
+    return detached.code === 0;
+}
+/**
+ * The token as an HTTP Authorization header for the repository's origin,
+ * passed through git's GIT_CONFIG_COUNT/KEY/VALUE variables (git 2.31+).
+ * Empty for no token or a URL that is not https.
+ */
+export function gitAuthEnv(url, token, base = {}) {
+    if (!token)
+        return {};
+    let origin;
+    try {
+        const u = new URL(url);
+        if (u.protocol !== 'https:')
+            return {};
+        origin = `${u.protocol}//${u.host}/`;
+    }
+    catch {
+        return {};
+    }
+    const n = positiveInt(base.GIT_CONFIG_COUNT) ?? 0;
+    const basic = Buffer.from(`x-access-token:${token}`).toString('base64');
+    return {
+        GIT_CONFIG_COUNT: String(n + 1),
+        [`GIT_CONFIG_KEY_${n}`]: `http.${origin}.extraHeader`,
+        [`GIT_CONFIG_VALUE_${n}`]: `Authorization: Basic ${basic}`,
+    };
+}
+/** A URL with any user:password part removed, for log lines. */
+export function redactUrl(url) {
+    try {
+        const u = new URL(url);
+        if (u.username || u.password) {
+            u.username = '';
+            u.password = '';
+        }
+        return u.toString();
+    }
+    catch {
+        return url.replace(/\/\/[^@/]*@/, '//');
+    }
+}
+function positiveInt(value) {
+    const n = Number((value ?? '').trim());
+    return Number.isInteger(n) && n > 0 ? n : undefined;
+}
+/** The real runner: inherits stdout/stderr, so setup output lands in the pod log. */
+export const runCommand = (command, args, opts) => new Promise((resolve) => {
+    // Its own process group, so a timeout stops everything it started,
+    // not only the shell.
+    const child = spawn(command, args, { cwd: opts.cwd, env: opts.env, stdio: ['ignore', 'inherit', 'inherit'], detached: true });
+    let timedOut = false;
+    const timer = opts.timeoutMs
+        ? setTimeout(() => {
+            timedOut = true;
+            try {
+                process.kill(-child.pid, 'SIGKILL');
+            }
+            catch {
+                child.kill('SIGKILL');
+            }
+        }, opts.timeoutMs)
+        : null;
+    child.on('error', () => {
+        if (timer)
+            clearTimeout(timer);
+        resolve({ code: -1, timedOut });
+    });
+    child.on('close', (code) => {
+        if (timer)
+            clearTimeout(timer);
+        resolve({ code, timedOut });
+    });
+});
+//# sourceMappingURL=hosted-setup.js.map

package/dist/hosted-setup.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"hosted-setup.js","sourceRoot":"","sources":["../src/hosted-setup.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;GAsBG;AACH,OAAO,EAAE,KAAK,EAAE,MAAM,oBAAoB,CAAC;AAC3C,OAAO,EAAE,UAAU,EAAE,SAAS,EAAE,YAAY,EAAE,MAAM,EAAE,aAAa,EAAE,MAAM,SAAS,CAAC;AACrF,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AAEjC,oEAAoE;AACpE,MAAM,CAAC,MAAM,sBAAsB,GAAG,YAAY,CAAC;AACnD,kDAAkD;AAClD,MAAM,CAAC,MAAM,aAAa,GAAG,MAAM,CAAC;AACpC,kGAAkG;AAClG,MAAM,6BAA6B,GAAG,IAAI,CAAC;AAiC3C,MAAM,UAAU,aAAa,CAAC,GAAuC;IACnE,MAAM,IAAI,GAAG,CAAC,GAAG,CAAC,qBAAqB,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC;IACtD,OAAO,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,sBAAsB,CAAC;AAC9D,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,sBAAsB,CAAC,SAAwB,EAAE;IACrE,MAAM,GAAG,GAAG,MAAM,CAAC,GAAG,IAAI,OAAO,CAAC,GAAG,CAAC;IACtC,MAAM,GAAG,GAAG,MAAM,CAAC,GAAG,IAAI,UAAU,CAAC;IACrC,MAAM,GAAG,GAAG,MAAM,CAAC,GAAG,IAAI,CAAC,CAAC,IAAY,EAAE,EAAE,CAAC,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,GAAG,IAAI,IAAI,CAAC,CAAC,CAAC;IAChF,MAAM,IAAI,GAAG,MAAM,CAAC,IAAI,IAAI,CAAC,CAAC,IAAY,EAAE,EAAE,CAAC,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,GAAG,IAAI,IAAI,CAAC,CAAC,CAAC;IAClF,MAAM,IAAI,GAAG,aAAa,CAAC,GAAG,CAAC,CAAC;IAChC,MAAM,QAAQ,GAAG,IAAI,CAAC,IAAI,EAAE,SAAS,CAAC,CAAC;IACvC,MAAM,WAAW,GAAG,IAAI,CAAC,QAAQ,EAAE,aAAa,CAAC,CAAC;IAClD,MAAM,OAAO,GAAG,CAAC,GAAG,CAAC,0BAA0B,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,IAAI,aAAa,CAAC;IAC/E,MAAM,OAAO,GAAG,CAAC,GAAG,CAAC,eAAe,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC;IACnD,MAAM,OAAO,GAAG,IAAI,CAAC,IAAI,EAAE,aAAa,CAAC,CAAC;IAG1C,qEAAqE;IACrE,mEAAmE;IACnE,IAAI,CAAC,GAAG,CAAC,0BAA0B,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,KAAK,MAAM,EAAE,CAAC;QAC7D,GAAG,CAAC,qDAAqD,CAAC,CAAC;QAC3D,OAAO,EAAE,QAAQ,EAAE,IAAI,EAAE,MAAM,EAAE,KAAK,EAAE,QAAQ,EAAE,KAAK,EAAE,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,OAAO,IAAI,UAAU,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;IAChI,CAAC;IACD,MAAM,QAAQ,GAAG,UAAU,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC,YAAY,CAAC,WAAW,EAAE,OAAO,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC;IAC5F,IAAI,QAAQ,KAAK,OAAO,EAAE,CAAC;QACzB,GAAG,CAAC,kCAAkC,OAAO,iBAAiB,CAAC,CAAC;QAChE,OAAO,EAAE,QAAQ,EAAE,IAAI,EAAE,MAAM,EAAE,KAAK,EAAE,QAAQ,EAAE,KAAK,EAAE,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,OAAO,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;IACzG,CAAC;IACD,SAAS,CAAC,QAAQ,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;IAEtD,oEAAoE;IACpE,0EAA0E;IAC1E,MAAM,QAAQ,GAAsB,EAAE,GAAG,GAAG,EAAE,mBAAmB,EAAE,GAAG,EAAE,CAAC;IACzE,IAAI,EAAE,GAAG,IAAI,CAAC;IACd,IAAI,MAAM,GAAG,KAAK,CAAC;IAEnB,IAAI,OAAO,EAAE,CAAC;QACZ,IAAI,UAAU,CAAC,IAAI,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC,EAAE,CAAC;YACtC,oEAAoE;YACpE,kDAAkD;YAClD,GAAG,CAAC,cAAc,OAAO,gDAAgD,CAAC,CAAC;QAC7E,CAAC;aAAM,CAAC;YACN,MAAM,MAAM,GAAG,MAAM,SAAS,CAAC,EAAE,GAAG,EAAE,OAAO,EAAE,GAAG,EAAE,CAAC,GAAG,CAAC,eAAe,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,EAAE,GAAG,EAAE,OAAO,EAAE,KAAK,EAAE,GAAG,CAAC,gBAAgB,EAAE,GAAG,EAAE,QAAQ,EAAE,GAAG,EAAE,IAAI,EAAE,GAAG,EAAE,GAAG,EAAE,CAAC,CAAC;YACzK,MAAM,GAAG,MAAM,CAAC;YAChB,IAAI,CAAC,MAAM,EAAE,CAAC;gBACZ,EAAE,GAAG,KAAK,CAAC;gBACX,IAAI,CAAC,sBAAsB,SAAS,CAAC,OAAO,CAAC,8CAA8C,CAAC,CAAC;YAC/F,CAAC;QACH,CAAC;IACH,CAAC;IAED,MAAM,MAAM,GAAG,GAAG,CAAC,mBAAmB,IAAI,EAAE,CAAC;IAC7C,IAAI,QAAQ,GAAG,KAAK,CAAC;IACrB,IAAI,MAAM,CAAC,IAAI,EAAE,IAAI,EAAE,EAAE,CAAC;QACxB,QAAQ,GAAG,IAAI,CAAC;QAChB,MAAM,GAAG,GAAG,MAAM,CAAC,MAAM,IAAI,MAAM,CAAC;QACpC,MAAM,IAAI,GAAG,IAAI,CAAC,GAAG,EAAE,gBAAgB,OAAO,CAAC,GAAG,IAAI,IAAI,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC;QACvE,aAAa,CAAC,IAAI,EAAE,MAAM,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;QAC7C,MAAM,GAAG,GAAG,OAAO,IAAI,UAAU,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,IAAI,CAAC;QAC5D,MAAM,QAAQ,GAAG,WAAW,CAAC,GAAG,CAAC,4BAA4B,CAAC,IAAI,6BAA6B,CAAC;QAChG,GAAG,CAAC,0CAA0C,GAAG,EAAE,CAAC,CAAC;QACrD,IAAI,CAAC;YACH,MAAM,GAAG,GAAG,MAAM,GAAG,CAAC,MAAM,EAAE,CAAC,IAAI,CAAC,EAAE,EAAE,GAAG,EAAE,GAAG,EAAE,QAAQ,EAAE,SAAS,EAAE,QAAQ,GAAG,IAAI,EAAE,CAAC,CAAC;YAC1F,IAAI,GAAG,CAAC,IAAI,KAAK,CAAC,EAAE,CAAC;gBACnB,EAAE,GAAG,KAAK,CAAC;gBACX,IAAI,CAAC,GAAG,CAAC,QAAQ;oBACf,CAAC,CAAC,wCAAwC,QAAQ,oDAAoD;oBACtG,CAAC,CAAC,sCAAsC,GAAG,CAAC,IAAI,mCAAmC,CAAC,CAAC;YACzF,CAAC;QACH,CAAC;gBAAS,CAAC;YACT,MAAM,CAAC,IAAI,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;QAChC,CAAC;IACH,CAAC;IAED,IAAI,EAAE,EAAE,CAAC;QACP,aAAa,CAAC,WAAW,EAAE,GAAG,OAAO,IAAI,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;QAC5D,GAAG,CAAC,kCAAkC,OAAO,SAAS,CAAC,CAAC;IAC1D,CAAC;IACD,OAAO,EAAE,QAAQ,EAAE,KAAK,EAAE,MAAM,EAAE,QAAQ,EAAE,EAAE,EAAE,OAAO,EAAE,OAAO,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;AACtF,CAAC;AAED,KAAK,UAAU,SAAS,CAAC,CASxB;IACC,MAAM,GAAG,GAAsB,EAAE,GAAG,CAAC,CAAC,GAAG,EAAE,GAAG,UAAU,CAAC,CAAC,CAAC,GAAG,EAAE,CAAC,CAAC,KAAK,EAAE,CAAC,CAAC,GAAG,CAAC,EAAE,CAAC;IAClF,CAAC,CAAC,GAAG,CAAC,sBAAsB,SAAS,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC,EAAE,SAAS,CAAC,CAAC,GAAG,EAAE,CAAC,CAAC;IAC5F,MAAM,KAAK,GAAG,MAAM,CAAC,CAAC,GAAG,CAAC,KAAK,EAAE,CAAC,OAAO,EAAE,IAAI,EAAE,CAAC,CAAC,GAAG,EAAE,CAAC,CAAC,GAAG,CAAC,EAAE,EAAE,GAAG,EAAE,CAAC,CAAC,GAAG,EAAE,GAAG,EAAE,CAAC,CAAC;IACrF,IAAI,KAAK,CAAC,IAAI,KAAK,CAAC,EAAE,CAAC;QACrB,MAAM,CAAC,CAAC,CAAC,GAAG,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;QAChD,OAAO,KAAK,CAAC;IACf,CAAC;IACD,IAAI,CAAC,CAAC,CAAC,GAAG;QAAE,OAAO,IAAI,CAAC;IACxB,wEAAwE;IACxE,kBAAkB;IAClB,MAAM,QAAQ,GAAG,MAAM,CAAC,CAAC,GAAG,CAAC,KAAK,EAAE,CAAC,IAAI,EAAE,CAAC,CAAC,GAAG,EAAE,UAAU,EAAE,CAAC,CAAC,GAAG,EAAE,IAAI,CAAC,EAAE,EAAE,GAAG,EAAE,CAAC,CAAC,GAAG,EAAE,GAAG,EAAE,CAAC,CAAC;IACjG,IAAI,QAAQ,CAAC,IAAI,KAAK,CAAC;QAAE,OAAO,IAAI,CAAC;IACrC,MAAM,KAAK,GAAG,MAAM,CAAC,CAAC,GAAG,CAAC,KAAK,EAAE,CAAC,IAAI,EAAE,CAAC,CAAC,GAAG,EAAE,OAAO,EAAE,QAAQ,EAAE,CAAC,CAAC,GAAG,CAAC,EAAE,EAAE,GAAG,EAAE,CAAC,CAAC,GAAG,EAAE,GAAG,EAAE,CAAC,CAAC;IAC/F,IAAI,KAAK,CAAC,IAAI,KAAK,CAAC;QAAE,OAAO,KAAK,CAAC;IACnC,MAAM,QAAQ,GAAG,MAAM,CAAC,CAAC,GAAG,CAAC,KAAK,EAAE,CAAC,IAAI,EAAE,CAAC,CAAC,GAAG,EAAE,UAAU,EAAE,YAAY,EAAE,IAAI,CAAC,EAAE,EAAE,GAAG,EAAE,CAAC,CAAC,GAAG,EAAE,GAAG,EAAE,CAAC,CAAC;IACxG,OAAO,QAAQ,CAAC,IAAI,KAAK,CAAC,CAAC;AAC7B,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,UAAU,CAAC,GAAW,EAAE,KAAyB,EAAE,OAA2C,EAAE;IAC9G,IAAI,CAAC,KAAK;QAAE,OAAO,EAAE,CAAC;IACtB,IAAI,MAAc,CAAC;IACnB,IAAI,CAAC;QACH,MAAM,CAAC,GAAG,IAAI,GAAG,CAAC,GAAG,CAAC,CAAC;QACvB,IAAI,CAAC,CAAC,QAAQ,KAAK,QAAQ;YAAE,OAAO,EAAE,CAAC;QACvC,MAAM,GAAG,GAAG,CAAC,CAAC,QAAQ,KAAK,CAAC,CAAC,IAAI,GAAG,CAAC;IACvC,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,EAAE,CAAC;IACZ,CAAC;IACD,MAAM,CAAC,GAAG,WAAW,CAAC,IAAI,CAAC,gBAAgB,CAAC,IAAI,CAAC,CAAC;IAClD,MAAM,KAAK,GAAG,MAAM,CAAC,IAAI,CAAC,kBAAkB,KAAK,EAAE,CAAC,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC;IACxE,OAAO;QACL,gBAAgB,EAAE,MAAM,CAAC,CAAC,GAAG,CAAC,CAAC;QAC/B,CAAC,kBAAkB,CAAC,EAAE,CAAC,EAAE,QAAQ,MAAM,cAAc;QACrD,CAAC,oBAAoB,CAAC,EAAE,CAAC,EAAE,wBAAwB,KAAK,EAAE;KAC3D,CAAC;AACJ,CAAC;AAED,gEAAgE;AAChE,MAAM,UAAU,SAAS,CAAC,GAAW;IACnC,IAAI,CAAC;QACH,MAAM,CAAC,GAAG,IAAI,GAAG,CAAC,GAAG,CAAC,CAAC;QACvB,IAAI,CAAC,CAAC,QAAQ,IAAI,CAAC,CAAC,QAAQ,EAAE,CAAC;YAC7B,CAAC,CAAC,QAAQ,GAAG,EAAE,CAAC;YAChB,CAAC,CAAC,QAAQ,GAAG,EAAE,CAAC;QAClB,CAAC;QACD,OAAO,CAAC,CAAC,QAAQ,EAAE,CAAC;IACtB,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,GAAG,CAAC,OAAO,CAAC,aAAa,EAAE,IAAI,CAAC,CAAC;IAC1C,CAAC;AACH,CAAC;AAED,SAAS,WAAW,CAAC,KAAyB;IAC5C,MAAM,CAAC,GAAG,MAAM,CAAC,CAAC,KAAK,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC;IACvC,OAAO,MAAM,CAAC,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;AACtD,CAAC;AAED,qFAAqF;AACrF,MAAM,CAAC,MAAM,UAAU,GAAe,CAAC,OAAO,EAAE,IAAI,EAAE,IAAI,EAAE,EAAE,CAC5D,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,EAAE;IACtB,mEAAmE;IACnE,sBAAsB;IACtB,MAAM,KAAK,GAAG,KAAK,CAAC,OAAO,EAAE,IAAI,EAAE,EAAE,GAAG,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,EAAE,IAAI,CAAC,GAAG,EAAE,KAAK,EAAE,CAAC,QAAQ,EAAE,SAAS,EAAE,SAAS,CAAC,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC,CAAC;IAC9H,IAAI,QAAQ,GAAG,KAAK,CAAC;IACrB,MAAM,KAAK,GAAG,IAAI,CAAC,SAAS;QAC1B,CAAC,CAAC,UAAU,CAAC,GAAG,EAAE;YACd,QAAQ,GAAG,IAAI,CAAC;YAChB,IAAI,CAAC;gBAAC,OAAO,CAAC,IAAI,CAAC,CAAC,KAAK,CAAC,GAAI,EAAE,SAAS,CAAC,CAAC;YAAC,CAAC;YAAC,MAAM,CAAC;gBAAC,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;YAAC,CAAC;QAChF,CAAC,EAAE,IAAI,CAAC,SAAS,CAAC;QACpB,CAAC,CAAC,IAAI,CAAC;IACT,KAAK,CAAC,EAAE,CAAC,OAAO,EAAE,GAAG,EAAE;QACrB,IAAI,KAAK;YAAE,YAAY,CAAC,KAAK,CAAC,CAAC;QAC/B,OAAO,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,EAAE,QAAQ,EAAE,CAAC,CAAC;IAClC,CAAC,CAAC,CAAC;IACH,KAAK,CAAC,EAAE,CAAC,OAAO,EAAE,CAAC,IAAI,EAAE,EAAE;QACzB,IAAI,KAAK;YAAE,YAAY,CAAC,KAAK,CAAC,CAAC;QAC/B,OAAO,CAAC,EAAE,IAAI,EAAE,QAAQ,EAAE,CAAC,CAAC;IAC9B,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC"}

package/dist/model-proxy.d.ts

@@ -0,0 +1,95 @@
+/**
+ * The model proxy of a hosted pod: how the coding CLIs in it reach models
+ * while the pod model token stays out of their hands.
+ *
+ * The reconcile loop puts a short-lived pod model token into the pod's
+ * Secret (ALMYTY_MODEL_TOKEN, with its expiry in
+ * ALMYTY_MODEL_TOKEN_EXPIRES_AT) and tells the runner where to listen
+ * (ALMYTY_MODEL_PROXY_PORT) and where to renew (ALMYTY_MODEL_RENEW_PATH).
+ * The image's entrypoint points every CLI at http://127.0.0.1:<port> with a
+ * placeholder key (images/runner-env/entrypoint.sh). This module:
+ *
+ *   - takes the token out of the runner's environment as soon as it is
+ *     read, so nothing the runner starts inherits it;
+ *   - listens on the loopback port and forwards each /v1/... call to the
+ *     almyty API, replacing whatever credential the CLI sent with the
+ *     current token, streaming both ways;
+ *   - renews the token with itself when three quarters of its life have
+ *     passed, so a CLI keeps working past the token's lifetime without
+ *     ever seeing it change.
+ *
+ * A renewal the API refuses (the pod is being stopped) is not fatal to the
+ * runner: model calls answer 401 from then on and the next start brings a
+ * fresh token. The token is never logged or written to disk.
+ */
+import { Server } from 'node:http';
+export declare const MODEL_TOKEN_ENV = "ALMYTY_MODEL_TOKEN";
+export declare const MODEL_TOKEN_EXPIRES_ENV = "ALMYTY_MODEL_TOKEN_EXPIRES_AT";
+export declare const MODEL_PROXY_PORT_ENV = "ALMYTY_MODEL_PROXY_PORT";
+export declare const MODEL_RENEW_PATH_ENV = "ALMYTY_MODEL_RENEW_PATH";
+export declare const DEFAULT_MODEL_RENEW_PATH = "/runners/hosted/model-token";
+type Env = Record<string, string | undefined>;
+export interface ModelAccessSettings {
+    token: string;
+    /** Unknown when the pod was started without it; the token is then renewed at once. */
+    expiresAt: Date | null;
+    port: number;
+    renewPath: string;
+}
+/**
+ * The pod model token and the proxy's settings, or null when the pod has
+ * none (a runner outside a hosted pod, or an older backend). Removes the
+ * token variables from `env` once read.
+ */
+export declare function readModelAccess(env?: Env): ModelAccessSettings | null;
+export interface ModelTokenOptions {
+    backendUrl: string;
+    renewPath: string;
+    token: string;
+    expiresAt: Date | null;
+    log?: (line: string) => void;
+    fetch?: typeof globalThis.fetch;
+    setTimeoutFn?: typeof setTimeout;
+    clearTimeoutFn?: typeof clearTimeout;
+    now?: () => number;
+}
+/** Holds the pod model token and renews it before it expires. */
+export declare class ModelToken {
+    private readonly opts;
+    private token;
+    private expiresAt;
+    private timer;
+    private stopped;
+    private readonly fetchImpl;
+    private readonly setTimeoutFn;
+    private readonly clearTimeoutFn;
+    private readonly now;
+    constructor(opts: ModelTokenOptions);
+    current(): string;
+    expiry(): Date | null;
+    start(): void;
+    stop(): void;
+    /** When to renew, from now; at once when the expiry is unknown. */
+    renewDelay(): number;
+    /** One renewal. True when a new token is in place. Never throws. */
+    renew(): Promise<boolean>;
+    private schedule;
+}
+export interface ModelProxyOptions {
+    backendUrl: string;
+    token: () => string;
+    /** 0 picks a free port (tests). */
+    port: number;
+    log?: (line: string) => void;
+}
+/**
+ * The loopback model proxy. Only /v1/... is forwarded; the CLI's own
+ * credential is replaced with the current pod token. Resolves once it
+ * listens, with the port it got.
+ */
+export declare function startModelProxy(opts: ModelProxyOptions): Promise<{
+    server: Server;
+    port: number;
+    close: () => Promise<void>;
+}>;
+export {};

package/dist/model-proxy.js

@@ -0,0 +1,210 @@
+/**
+ * The model proxy of a hosted pod: how the coding CLIs in it reach models
+ * while the pod model token stays out of their hands.
+ *
+ * The reconcile loop puts a short-lived pod model token into the pod's
+ * Secret (ALMYTY_MODEL_TOKEN, with its expiry in
+ * ALMYTY_MODEL_TOKEN_EXPIRES_AT) and tells the runner where to listen
+ * (ALMYTY_MODEL_PROXY_PORT) and where to renew (ALMYTY_MODEL_RENEW_PATH).
+ * The image's entrypoint points every CLI at http://127.0.0.1:<port> with a
+ * placeholder key (images/runner-env/entrypoint.sh). This module:
+ *
+ *   - takes the token out of the runner's environment as soon as it is
+ *     read, so nothing the runner starts inherits it;
+ *   - listens on the loopback port and forwards each /v1/... call to the
+ *     almyty API, replacing whatever credential the CLI sent with the
+ *     current token, streaming both ways;
+ *   - renews the token with itself when three quarters of its life have
+ *     passed, so a CLI keeps working past the token's lifetime without
+ *     ever seeing it change.
+ *
+ * A renewal the API refuses (the pod is being stopped) is not fatal to the
+ * runner: model calls answer 401 from then on and the next start brings a
+ * fresh token. The token is never logged or written to disk.
+ */
+import { createServer, request as httpRequest } from 'node:http';
+import { request as httpsRequest } from 'node:https';
+export const MODEL_TOKEN_ENV = 'ALMYTY_MODEL_TOKEN';
+export const MODEL_TOKEN_EXPIRES_ENV = 'ALMYTY_MODEL_TOKEN_EXPIRES_AT';
+export const MODEL_PROXY_PORT_ENV = 'ALMYTY_MODEL_PROXY_PORT';
+export const MODEL_RENEW_PATH_ENV = 'ALMYTY_MODEL_RENEW_PATH';
+export const DEFAULT_MODEL_RENEW_PATH = '/runners/hosted/model-token';
+/** Renew once this share of the token's lifetime has passed. */
+const RENEW_AT_FRACTION = 0.75;
+/** Delay between renewal attempts that failed for a reason worth retrying. */
+const RENEW_RETRY_MS = 30_000;
+/** Headers the proxy never passes on: hop-by-hop, and every credential the CLI sent. */
+const DROPPED_REQUEST_HEADERS = new Set(['host', 'connection', 'keep-alive', 'transfer-encoding', 'authorization', 'x-api-key', 'proxy-authorization']);
+const DROPPED_RESPONSE_HEADERS = new Set(['connection', 'keep-alive', 'transfer-encoding']);
+/**
+ * The pod model token and the proxy's settings, or null when the pod has
+ * none (a runner outside a hosted pod, or an older backend). Removes the
+ * token variables from `env` once read.
+ */
+export function readModelAccess(env = process.env) {
+    const token = (env[MODEL_TOKEN_ENV] ?? '').trim();
+    const expires = (env[MODEL_TOKEN_EXPIRES_ENV] ?? '').trim();
+    delete env[MODEL_TOKEN_ENV];
+    delete env[MODEL_TOKEN_EXPIRES_ENV];
+    const port = Number((env[MODEL_PROXY_PORT_ENV] ?? '').trim());
+    if (!token || !Number.isInteger(port) || port <= 0 || port > 65535)
+        return null;
+    const expiresAt = expires ? new Date(expires) : null;
+    const renewPath = (env[MODEL_RENEW_PATH_ENV] ?? '').trim();
+    return {
+        token,
+        expiresAt: expiresAt && !Number.isNaN(expiresAt.getTime()) ? expiresAt : null,
+        port,
+        renewPath: renewPath.startsWith('/') ? renewPath : DEFAULT_MODEL_RENEW_PATH,
+    };
+}
+/** Holds the pod model token and renews it before it expires. */
+export class ModelToken {
+    opts;
+    token;
+    expiresAt;
+    timer = null;
+    stopped = false;
+    fetchImpl;
+    setTimeoutFn;
+    clearTimeoutFn;
+    now;
+    constructor(opts) {
+        this.opts = opts;
+        this.token = opts.token;
+        this.expiresAt = opts.expiresAt;
+        this.fetchImpl = opts.fetch ?? globalThis.fetch;
+        this.setTimeoutFn = opts.setTimeoutFn ?? setTimeout;
+        this.clearTimeoutFn = opts.clearTimeoutFn ?? clearTimeout;
+        this.now = opts.now ?? Date.now;
+    }
+    current() {
+        return this.token;
+    }
+    expiry() {
+        return this.expiresAt;
+    }
+    start() {
+        this.schedule(this.renewDelay());
+    }
+    stop() {
+        this.stopped = true;
+        if (this.timer)
+            this.clearTimeoutFn(this.timer);
+        this.timer = null;
+    }
+    /** When to renew, from now; at once when the expiry is unknown. */
+    renewDelay() {
+        if (!this.expiresAt)
+            return 0;
+        return Math.max(0, Math.floor((this.expiresAt.getTime() - this.now()) * RENEW_AT_FRACTION));
+    }
+    /** One renewal. True when a new token is in place. Never throws. */
+    async renew() {
+        if (this.stopped)
+            return false;
+        let status = 0;
+        try {
+            const res = await this.fetchImpl(`${this.opts.backendUrl}${this.opts.renewPath}`, {
+                method: 'POST',
+                headers: { Authorization: `Bearer ${this.token}` },
+            });
+            status = res.status;
+            if (res.ok) {
+                const json = (await res.json().catch(() => null));
+                const next = json?.data?.token;
+                const expiresAt = new Date(json?.data?.expiresAt);
+                if (typeof next === 'string' && next && !Number.isNaN(expiresAt.getTime())) {
+                    this.token = next;
+                    this.expiresAt = expiresAt;
+                    this.opts.log?.(`model token renewed; next renewal in ${Math.round(this.renewDelay() / 1000)}s`);
+                    this.schedule(this.renewDelay());
+                    return true;
+                }
+            }
+        }
+        catch {
+            status = 0;
+        }
+        if (this.stopped)
+            return false;
+        // Refused: the pod is being stopped or the token is gone. Model calls
+        // answer 401 from here on; the next start brings a fresh token.
+        if (status === 401 || status === 403 || status === 404) {
+            this.opts.log?.(`model token renewal refused (${status}); coding CLIs cannot reach models until the next start`);
+            this.stop();
+            return false;
+        }
+        const left = this.expiresAt ? this.expiresAt.getTime() - this.now() : 0;
+        if (this.expiresAt && left <= RENEW_RETRY_MS) {
+            this.opts.log?.(`model token renewal failed (${status || 'no answer'}) and it expires before another try`);
+            return false;
+        }
+        this.opts.log?.(`model token renewal failed (${status || 'no answer'}); retrying in ${RENEW_RETRY_MS / 1000}s`);
+        this.schedule(RENEW_RETRY_MS);
+        return false;
+    }
+    schedule(delay) {
+        if (this.stopped)
+            return;
+        if (this.timer)
+            this.clearTimeoutFn(this.timer);
+        this.timer = this.setTimeoutFn(() => {
+            this.timer = null;
+            void this.renew();
+        }, delay);
+        this.timer?.unref?.();
+    }
+}
+/**
+ * The loopback model proxy. Only /v1/... is forwarded; the CLI's own
+ * credential is replaced with the current pod token. Resolves once it
+ * listens, with the port it got.
+ */
+export async function startModelProxy(opts) {
+    const base = new URL(opts.backendUrl);
+    const server = createServer((req, res) => forward(req, res, base, opts));
+    await new Promise((resolve, reject) => {
+        server.once('error', reject);
+        server.listen(opts.port, '127.0.0.1', () => resolve());
+    });
+    const port = server.address().port;
+    return { server, port, close: () => new Promise((r) => server.close(() => r())) };
+}
+function forward(req, res, base, opts) {
+    const path = req.url ?? '/';
+    if (!path.startsWith('/v1/')) {
+        res.writeHead(404, { 'Content-Type': 'application/json' }).end(JSON.stringify({ error: { message: 'Only the model endpoints (/v1/...) are served here' } }));
+        return;
+    }
+    const target = new URL(`${base.pathname.replace(/(?<!\/)\/+$/, '')}${path}`, base);
+    const headers = {};
+    for (const [name, value] of Object.entries(req.headers)) {
+        if (value !== undefined && !DROPPED_REQUEST_HEADERS.has(name.toLowerCase()))
+            headers[name] = value;
+    }
+    headers.authorization = `Bearer ${opts.token()}`;
+    const send = target.protocol === 'https:' ? httpsRequest : httpRequest;
+    const upstream = send(target, { method: req.method, headers }, (answer) => {
+        const out = {};
+        for (const [name, value] of Object.entries(answer.headers)) {
+            if (value !== undefined && !DROPPED_RESPONSE_HEADERS.has(name.toLowerCase()))
+                out[name] = value;
+        }
+        res.writeHead(answer.statusCode ?? 502, out);
+        answer.pipe(res);
+    });
+    upstream.on('error', (err) => {
+        opts.log?.(`model proxy: almyty could not be reached (${err.message})`);
+        if (!res.headersSent)
+            res.writeHead(502, { 'Content-Type': 'application/json' });
+        res.end(JSON.stringify({ error: { message: 'almyty could not be reached' } }));
+    });
+    // A client that goes away stops the upstream call too.
+    res.on('close', () => {
+        if (!res.writableFinished)
+            upstream.destroy();
+    });
+    req.pipe(upstream);
+}
+//# sourceMappingURL=model-proxy.js.map

package/dist/model-proxy.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"model-proxy.js","sourceRoot":"","sources":["../src/model-proxy.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;GAuBG;AACH,OAAO,EAAE,YAAY,EAAmB,OAAO,IAAI,WAAW,EAA0B,MAAM,WAAW,CAAC;AAC1G,OAAO,EAAE,OAAO,IAAI,YAAY,EAAE,MAAM,YAAY,CAAC;AAGrD,MAAM,CAAC,MAAM,eAAe,GAAG,oBAAoB,CAAC;AACpD,MAAM,CAAC,MAAM,uBAAuB,GAAG,+BAA+B,CAAC;AACvE,MAAM,CAAC,MAAM,oBAAoB,GAAG,yBAAyB,CAAC;AAC9D,MAAM,CAAC,MAAM,oBAAoB,GAAG,yBAAyB,CAAC;AAC9D,MAAM,CAAC,MAAM,wBAAwB,GAAG,6BAA6B,CAAC;AAEtE,gEAAgE;AAChE,MAAM,iBAAiB,GAAG,IAAI,CAAC;AAC/B,8EAA8E;AAC9E,MAAM,cAAc,GAAG,MAAM,CAAC;AAC9B,wFAAwF;AACxF,MAAM,uBAAuB,GAAG,IAAI,GAAG,CAAC,CAAC,MAAM,EAAE,YAAY,EAAE,YAAY,EAAE,mBAAmB,EAAE,eAAe,EAAE,WAAW,EAAE,qBAAqB,CAAC,CAAC,CAAC;AACxJ,MAAM,wBAAwB,GAAG,IAAI,GAAG,CAAC,CAAC,YAAY,EAAE,YAAY,EAAE,mBAAmB,CAAC,CAAC,CAAC;AAY5F;;;;GAIG;AACH,MAAM,UAAU,eAAe,CAAC,MAAW,OAAO,CAAC,GAAG;IACpD,MAAM,KAAK,GAAG,CAAC,GAAG,CAAC,eAAe,CAAC,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC;IAClD,MAAM,OAAO,GAAG,CAAC,GAAG,CAAC,uBAAuB,CAAC,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC;IAC5D,OAAO,GAAG,CAAC,eAAe,CAAC,CAAC;IAC5B,OAAO,GAAG,CAAC,uBAAuB,CAAC,CAAC;IACpC,MAAM,IAAI,GAAG,MAAM,CAAC,CAAC,GAAG,CAAC,oBAAoB,CAAC,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC;IAC9D,IAAI,CAAC,KAAK,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,IAAI,CAAC,IAAI,IAAI,IAAI,CAAC,IAAI,IAAI,GAAG,KAAK;QAAE,OAAO,IAAI,CAAC;IAChF,MAAM,SAAS,GAAG,OAAO,CAAC,CAAC,CAAC,IAAI,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;IACrD,MAAM,SAAS,GAAG,CAAC,GAAG,CAAC,oBAAoB,CAAC,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC;IAC3D,OAAO;QACL,KAAK;QACL,SAAS,EAAE,SAAS,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,SAAS,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,IAAI;QAC7E,IAAI;QACJ,SAAS,EAAE,SAAS,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,wBAAwB;KAC5E,CAAC;AACJ,CAAC;AAcD,iEAAiE;AACjE,MAAM,OAAO,UAAU;IAUQ;IATrB,KAAK,CAAS;IACd,SAAS,CAAc;IACvB,KAAK,GAAyC,IAAI,CAAC;IACnD,OAAO,GAAG,KAAK,CAAC;IACP,SAAS,CAA0B;IACnC,YAAY,CAAoB;IAChC,cAAc,CAAsB;IACpC,GAAG,CAAe;IAEnC,YAA6B,IAAuB;QAAvB,SAAI,GAAJ,IAAI,CAAmB;QAClD,IAAI,CAAC,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC;QACxB,IAAI,CAAC,SAAS,GAAG,IAAI,CAAC,SAAS,CAAC;QAChC,IAAI,CAAC,SAAS,GAAG,IAAI,CAAC,KAAK,IAAI,UAAU,CAAC,KAAK,CAAC;QAChD,IAAI,CAAC,YAAY,GAAG,IAAI,CAAC,YAAY,IAAI,UAAU,CAAC;QACpD,IAAI,CAAC,cAAc,GAAG,IAAI,CAAC,cAAc,IAAI,YAAY,CAAC;QAC1D,IAAI,CAAC,GAAG,GAAG,IAAI,CAAC,GAAG,IAAI,IAAI,CAAC,GAAG,CAAC;IAClC,CAAC;IAED,OAAO;QACL,OAAO,IAAI,CAAC,KAAK,CAAC;IACpB,CAAC;IAED,MAAM;QACJ,OAAO,IAAI,CAAC,SAAS,CAAC;IACxB,CAAC;IAED,KAAK;QACH,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,UAAU,EAAE,CAAC,CAAC;IACnC,CAAC;IAED,IAAI;QACF,IAAI,CAAC,OAAO,GAAG,IAAI,CAAC;QACpB,IAAI,IAAI,CAAC,KAAK;YAAE,IAAI,CAAC,cAAc,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QAChD,IAAI,CAAC,KAAK,GAAG,IAAI,CAAC;IACpB,CAAC;IAED,mEAAmE;IACnE,UAAU;QACR,IAAI,CAAC,IAAI,CAAC,SAAS;YAAE,OAAO,CAAC,CAAC;QAC9B,OAAO,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,OAAO,EAAE,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC,GAAG,iBAAiB,CAAC,CAAC,CAAC;IAC9F,CAAC;IAED,oEAAoE;IACpE,KAAK,CAAC,KAAK;QACT,IAAI,IAAI,CAAC,OAAO;YAAE,OAAO,KAAK,CAAC;QAC/B,IAAI,MAAM,GAAG,CAAC,CAAC;QACf,IAAI,CAAC;YACH,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,SAAS,CAAC,GAAG,IAAI,CAAC,IAAI,CAAC,UAAU,GAAG,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,EAAE;gBAChF,MAAM,EAAE,MAAM;gBACd,OAAO,EAAE,EAAE,aAAa,EAAE,UAAU,IAAI,CAAC,KAAK,EAAE,EAAE;aACnD,CAAC,CAAC;YACH,MAAM,GAAG,GAAG,CAAC,MAAM,CAAC;YACpB,IAAI,GAAG,CAAC,EAAE,EAAE,CAAC;gBACX,MAAM,IAAI,GAAG,CAAC,MAAM,GAAG,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,CAA0B,CAAC;gBAC3E,MAAM,IAAI,GAAG,IAAI,EAAE,IAAI,EAAE,KAAK,CAAC;gBAC/B,MAAM,SAAS,GAAG,IAAI,IAAI,CAAC,IAAI,EAAE,IAAI,EAAE,SAAS,CAAC,CAAC;gBAClD,IAAI,OAAO,IAAI,KAAK,QAAQ,IAAI,IAAI,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,SAAS,CAAC,OAAO,EAAE,CAAC,EAAE,CAAC;oBAC3E,IAAI,CAAC,KAAK,GAAG,IAAI,CAAC;oBAClB,IAAI,CAAC,SAAS,GAAG,SAAS,CAAC;oBAC3B,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,wCAAwC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,UAAU,EAAE,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC;oBACjG,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,UAAU,EAAE,CAAC,CAAC;oBACjC,OAAO,IAAI,CAAC;gBACd,CAAC;YACH,CAAC;QACH,CAAC;QAAC,MAAM,CAAC;YACP,MAAM,GAAG,CAAC,CAAC;QACb,CAAC;QACD,IAAI,IAAI,CAAC,OAAO;YAAE,OAAO,KAAK,CAAC;QAC/B,sEAAsE;QACtE,gEAAgE;QAChE,IAAI,MAAM,KAAK,GAAG,IAAI,MAAM,KAAK,GAAG,IAAI,MAAM,KAAK,GAAG,EAAE,CAAC;YACvD,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,gCAAgC,MAAM,yDAAyD,CAAC,CAAC;YACjH,IAAI,CAAC,IAAI,EAAE,CAAC;YACZ,OAAO,KAAK,CAAC;QACf,CAAC;QACD,MAAM,IAAI,GAAG,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,OAAO,EAAE,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC;QACxE,IAAI,IAAI,CAAC,SAAS,IAAI,IAAI,IAAI,cAAc,EAAE,CAAC;YAC7C,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,+BAA+B,MAAM,IAAI,WAAW,qCAAqC,CAAC,CAAC;YAC3G,OAAO,KAAK,CAAC;QACf,CAAC;QACD,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,+BAA+B,MAAM,IAAI,WAAW,kBAAkB,cAAc,GAAG,IAAI,GAAG,CAAC,CAAC;QAChH,IAAI,CAAC,QAAQ,CAAC,cAAc,CAAC,CAAC;QAC9B,OAAO,KAAK,CAAC;IACf,CAAC;IAEO,QAAQ,CAAC,KAAa;QAC5B,IAAI,IAAI,CAAC,OAAO;YAAE,OAAO;QACzB,IAAI,IAAI,CAAC,KAAK;YAAE,IAAI,CAAC,cAAc,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QAChD,IAAI,CAAC,KAAK,GAAG,IAAI,CAAC,YAAY,CAAC,GAAG,EAAE;YAClC,IAAI,CAAC,KAAK,GAAG,IAAI,CAAC;YAClB,KAAK,IAAI,CAAC,KAAK,EAAE,CAAC;QACpB,CAAC,EAAE,KAAK,CAAC,CAAC;QACT,IAAI,CAAC,KAAa,EAAE,KAAK,EAAE,EAAE,CAAC;IACjC,CAAC;CACF;AAUD;;;;GAIG;AACH,MAAM,CAAC,KAAK,UAAU,eAAe,CAAC,IAAuB;IAC3D,MAAM,IAAI,GAAG,IAAI,GAAG,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;IACtC,MAAM,MAAM,GAAG,YAAY,CAAC,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,CAAC,OAAO,CAAC,GAAG,EAAE,GAAG,EAAE,IAAI,EAAE,IAAI,CAAC,CAAC,CAAC;IACzE,MAAM,IAAI,OAAO,CAAO,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;QAC1C,MAAM,CAAC,IAAI,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;QAC7B,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,EAAE,WAAW,EAAE,GAAG,EAAE,CAAC,OAAO,EAAE,CAAC,CAAC;IACzD,CAAC,CAAC,CAAC;IACH,MAAM,IAAI,GAAI,MAAM,CAAC,OAAO,EAAkB,CAAC,IAAI,CAAC;IACpD,OAAO,EAAE,MAAM,EAAE,IAAI,EAAE,KAAK,EAAE,GAAG,EAAE,CAAC,IAAI,OAAO,CAAO,CAAC,CAAC,EAAE,EAAE,CAAC,MAAM,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE,CAAC;AAC1F,CAAC;AAED,SAAS,OAAO,CAAC,GAAoB,EAAE,GAAmB,EAAE,IAAS,EAAE,IAAuB;IAC5F,MAAM,IAAI,GAAG,GAAG,CAAC,GAAG,IAAI,GAAG,CAAC;IAC5B,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,MAAM,CAAC,EAAE,CAAC;QAC7B,GAAG,CAAC,SAAS,CAAC,GAAG,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,KAAK,EAAE,EAAE,OAAO,EAAE,oDAAoD,EAAE,EAAE,CAAC,CAAC,CAAC;QAC7J,OAAO;IACT,CAAC;IACD,MAAM,MAAM,GAAG,IAAI,GAAG,CAAC,GAAG,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,aAAa,EAAE,EAAE,CAAC,GAAG,IAAI,EAAE,EAAE,IAAI,CAAC,CAAC;IACnF,MAAM,OAAO,GAAsC,EAAE,CAAC;IACtD,KAAK,MAAM,CAAC,IAAI,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,OAAO,CAAC,EAAE,CAAC;QACxD,IAAI,KAAK,KAAK,SAAS,IAAI,CAAC,uBAAuB,CAAC,GAAG,CAAC,IAAI,CAAC,WAAW,EAAE,CAAC;YAAE,OAAO,CAAC,IAAI,CAAC,GAAG,KAAK,CAAC;IACrG,CAAC;IACD,OAAO,CAAC,aAAa,GAAG,UAAU,IAAI,CAAC,KAAK,EAAE,EAAE,CAAC;IACjD,MAAM,IAAI,GAAG,MAAM,CAAC,QAAQ,KAAK,QAAQ,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,WAAW,CAAC;IACvE,MAAM,QAAQ,GAAG,IAAI,CAAC,MAAM,EAAE,EAAE,MAAM,EAAE,GAAG,CAAC,MAAM,EAAE,OAAO,EAAE,EAAE,CAAC,MAAM,EAAE,EAAE;QACxE,MAAM,GAAG,GAAsC,EAAE,CAAC;QAClD,KAAK,MAAM,CAAC,IAAI,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,OAAO,CAAC,EAAE,CAAC;YAC3D,IAAI,KAAK,KAAK,SAAS,IAAI,CAAC,wBAAwB,CAAC,GAAG,CAAC,IAAI,CAAC,WAAW,EAAE,CAAC;gBAAE,GAAG,CAAC,IAAI,CAAC,GAAG,KAAK,CAAC;QAClG,CAAC;QACD,GAAG,CAAC,SAAS,CAAC,MAAM,CAAC,UAAU,IAAI,GAAG,EAAE,GAAG,CAAC,CAAC;QAC7C,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IACnB,CAAC,CAAC,CAAC;IACH,QAAQ,CAAC,EAAE,CAAC,OAAO,EAAE,CAAC,GAAG,EAAE,EAAE;QAC3B,IAAI,CAAC,GAAG,EAAE,CAAC,6CAA6C,GAAG,CAAC,OAAO,GAAG,CAAC,CAAC;QACxE,IAAI,CAAC,GAAG,CAAC,WAAW;YAAE,GAAG,CAAC,SAAS,CAAC,GAAG,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE,CAAC,CAAC;QACjF,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,KAAK,EAAE,EAAE,OAAO,EAAE,6BAA6B,EAAE,EAAE,CAAC,CAAC,CAAC;IACjF,CAAC,CAAC,CAAC;IACH,uDAAuD;IACvD,GAAG,CAAC,EAAE,CAAC,OAAO,EAAE,GAAG,EAAE;QACnB,IAAI,CAAC,GAAG,CAAC,gBAAgB;YAAE,QAAQ,CAAC,OAAO,EAAE,CAAC;IAChD,CAAC,CAAC,CAAC;IACH,GAAG,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;AACrB,CAAC"}

package/dist/policy.d.ts

@@ -1,6 +1,32 @@
 import { RunnerConfig } from './types.js';
 /** Drop env keys a payload must not be allowed to set. */
 export declare function sanitizeEnv(env?: Record<string, string>): Record<string, string> | undefined;
+/**
+ * Parse an allowBinaries list from its environment form: a JSON array of
+ * strings (what the backend writes). Anything else throws, so a runner
+ * with a list it cannot read refuses to start rather than running
+ * unrestricted.
+ */
+export declare function parseAllowBinaries(raw: string | undefined): string[] | undefined;
+/**
+ * The config with an allowBinaries list applied. Only ever narrows: when
+ * the config already has a list, the result is the intersection, and an
+ * empty intersection throws rather than lifting the restriction.
+ */
+export declare function withAllowBinaries(config: RunnerConfig, allow: string[] | undefined): RunnerConfig;
+/**
+ * The command names a shell command line would start: the first word of
+ * every simple command, including those inside $( ), backticks, ( ), <( )
+ * and >( ), after variable assignments, redirections and keywords. Quotes
+ * and backslashes are removed from the word (`"rm"` is rm). A word that is
+ * built at run time ($VAR, a glob) is returned as is and never matches an
+ * entry, so it is refused.
+ *
+ * Best effort by design: separators inside quotes split too, which can
+ * refuse a harmless line (`echo "a; b"` checks `b`) but never lets a
+ * command through unseen.
+ */
+export declare function commandHeads(cmd: string): string[];
 /** Enforce policy for a process.spawn; returns the sanitized env to use. */
 export declare function enforceSpawnPolicy(config: RunnerConfig, opts: {
     binary: string;