@artenx/dshb 0.0.5 → 0.1.0

package/lib/exec-docker/fs-provider.js

@@ -0,0 +1,92 @@
+//#region src/exec-docker/fs-provider.ts
+var DockerFileSystem = class {
+	client;
+	constructor(client) {
+		this.client = client;
+	}
+	async resolve(path) {
+		return path;
+	}
+	processPath(target) {
+		return target;
+	}
+	fileUrl(target) {
+		return `file://${target}`;
+	}
+	contains(parent, child) {
+		return child === parent || child.startsWith(`${parent}/`);
+	}
+	async stat(target, _signal) {
+		return this.client.stat(target);
+	}
+	async lstat(path, _opts, _signal) {
+		return this.client.stat(path);
+	}
+	async readText(target, _signal) {
+		return (await this.client.readFile(target)).toString("utf8");
+	}
+	async streamText(target, _signal) {
+		const text = (await this.client.readFile(target)).toString("utf8");
+		return (async function* () {
+			yield text;
+		})();
+	}
+	async readBytes(target, _signal, maxBytes) {
+		const slice = (await this.client.readFile(target)).subarray(0, maxBytes);
+		return new Uint8Array(slice.buffer, slice.byteOffset, slice.byteLength);
+	}
+	async listDir(target, _signal) {
+		return (await this.client.listDir(target)).map((e) => ({
+			name: e.name,
+			path: `${target.replace(/\/+$/, "")}/${e.name}`,
+			isDirectory: e.isDir,
+			isFile: e.isFile,
+			isSymlink: e.isSymlink,
+			size: e.size,
+			mtime: e.mtime
+		}));
+	}
+	async writeText(target, content, _expected, _signal, _policy) {
+		const normalizeLf = (s) => s.replace(/\r\n/g, "\n");
+		const beforeInfo = await this.client.stat(target);
+		let before = null;
+		if (beforeInfo?.isFile) try {
+			before = normalizeLf((await this.client.readFile(target)).toString("utf8"));
+		} catch {
+			before = null;
+		}
+		const after = normalizeLf(content);
+		await this.client.writeFile(target, content);
+		const afterInfo = await this.client.stat(target);
+		const version = `${afterInfo?.size ?? content.length}:${afterInfo?.mtime ?? Date.now()}`;
+		return {
+			operation: before === null ? "create" : "update",
+			version,
+			before,
+			after
+		};
+	}
+	async editText(target, edit, _expected, _signal, _policy) {
+		const normalizeLf = (s) => s.replace(/\r\n/g, "\n");
+		const before = normalizeLf((await this.client.readFile(target)).toString("utf8"));
+		const req = edit;
+		const oldString = normalizeLf(String(req.oldString ?? ""));
+		if (oldString.length === 0) throw new Error("edit oldString must be non-empty");
+		const newString = normalizeLf(String(req.newString ?? ""));
+		const matches = before.split(oldString).length - 1;
+		if (matches === 0) throw new Error("edit oldString not found in file");
+		if (!req.replaceAll && matches !== 1) throw new Error(`edit oldString matched ${matches} times; expected exactly one`);
+		const after = req.replaceAll ? before.split(oldString).join(newString) : before.replace(oldString, newString);
+		await this.client.writeFile(target, after);
+		const afterInfo = await this.client.stat(target);
+		return {
+			version: `${afterInfo?.size ?? after.length}:${afterInfo?.mtime ?? Date.now()}`,
+			before,
+			after
+		};
+	}
+};
+//#endregion
+export { DockerFileSystem };
+
+//# sourceMappingURL=fs-provider.js.map

package/lib/exec-docker/fs-provider.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"fs-provider.js","names":[],"sources":["../../src/exec-docker/fs-provider.ts"],"sourcesContent":["import type { DockerBackend } from './docker-backend.js'\n\nexport class DockerFileSystem {\n  constructor(private readonly client: DockerBackend) {}\n\n  async resolve(path: string): Promise<string> {\n    return path\n  }\n\n  processPath(target: string): string {\n    return target\n  }\n\n  fileUrl(target: string): string {\n    return `file://${target}`\n  }\n\n  contains(parent: string, child: string): boolean {\n    return child === parent || child.startsWith(`${parent}/`)\n  }\n\n  async stat(target: string, _signal?: AbortSignal): Promise<{ size: number; mtime: number; isDirectory: boolean; isFile: boolean } | undefined> {\n    return this.client.stat(target)\n  }\n\n  async lstat(path: string, _opts?: { cwd?: string }, _signal?: AbortSignal): Promise<{ size: number; mtime: number; isDirectory: boolean; isFile: boolean } | undefined> {\n    return this.client.stat(path)\n  }\n\n  async readText(target: string, _signal?: AbortSignal): Promise<string> {\n    const data = await this.client.readFile(target)\n    return data.toString('utf8')\n  }\n\n  async streamText(target: string, _signal?: AbortSignal): Promise<AsyncIterable<string>> {\n    const data = await this.client.readFile(target)\n    const text = data.toString('utf8')\n    return (async function* () {\n      yield text\n    })()\n  }\n\n  async readBytes(target: string, _signal: AbortSignal | undefined, maxBytes: number): Promise<Uint8Array> {\n    const data = await this.client.readFile(target)\n    const slice = data.subarray(0, maxBytes)\n    return new Uint8Array(slice.buffer, slice.byteOffset, slice.byteLength)\n  }\n\n  async listDir(target: string, _signal?: AbortSignal): Promise<Array<{ name: string; path: string; isDirectory: boolean; isFile: boolean; isSymlink: boolean; size: number; mtime: number }>> {\n    const entries = await this.client.listDir(target)\n    return entries.map((e) => ({\n      name: e.name,\n      path: `${target.replace(/\\/+$/, '')}/${e.name}`,\n      isDirectory: e.isDir,\n      isFile: e.isFile,\n      isSymlink: e.isSymlink,\n      size: e.size,\n      mtime: e.mtime,\n    }))\n  }\n\n  async writeText(target: string, content: string, _expected?: unknown, _signal?: AbortSignal, _policy?: unknown): Promise<{ operation: 'create' | 'update'; version: string; before: string | null; after: string }> {\n    const normalizeLf = (s: string) => s.replace(/\\r\\n/g, '\\n')\n    const beforeInfo = await this.client.stat(target)\n    let before: string | null = null\n    if (beforeInfo?.isFile) {\n      try {\n        before = normalizeLf((await this.client.readFile(target)).toString('utf8'))\n      } catch {\n        before = null\n      }\n    }\n    const after = normalizeLf(content)\n    await this.client.writeFile(target, content)\n    const afterInfo = await this.client.stat(target)\n    const version = `${afterInfo?.size ?? content.length}:${afterInfo?.mtime ?? Date.now()}`\n    return { operation: before === null ? 'create' : 'update', version, before, after }\n  }\n\n  async editText(target: string, edit: unknown, _expected?: unknown, _signal?: AbortSignal, _policy?: unknown): Promise<{ version: string; before: string; after: string }> {\n    const normalizeLf = (s: string) => s.replace(/\\r\\n/g, '\\n')\n    const before = normalizeLf((await this.client.readFile(target)).toString('utf8'))\n    const req = edit as { oldString: string; newString: string; replaceAll: boolean }\n    const oldString = normalizeLf(String(req.oldString ?? ''))\n    if (oldString.length === 0) throw new Error('edit oldString must be non-empty')\n    const newString = normalizeLf(String(req.newString ?? ''))\n    const matches = before.split(oldString).length - 1\n    if (matches === 0) throw new Error('edit oldString not found in file')\n    if (!req.replaceAll && matches !== 1) throw new Error(`edit oldString matched ${matches} times; expected exactly one`)\n    const after = req.replaceAll ? before.split(oldString).join(newString) : before.replace(oldString, newString)\n    await this.client.writeFile(target, after)\n    const afterInfo = await this.client.stat(target)\n    const version = `${afterInfo?.size ?? after.length}:${afterInfo?.mtime ?? Date.now()}`\n    return { version, before, after }\n  }\n}\n"],"mappings":";AAEA,IAAa,mBAAb,MAA8B;CACC;CAA7B,YAAY,QAAwC;EAAvB,KAAA,SAAA;CAAwB;CAErD,MAAM,QAAQ,MAA+B;EAC3C,OAAO;CACT;CAEA,YAAY,QAAwB;EAClC,OAAO;CACT;CAEA,QAAQ,QAAwB;EAC9B,OAAO,UAAU;CACnB;CAEA,SAAS,QAAgB,OAAwB;EAC/C,OAAO,UAAU,UAAU,MAAM,WAAW,GAAG,OAAO,EAAE;CAC1D;CAEA,MAAM,KAAK,QAAgB,SAAoH;EAC7I,OAAO,KAAK,OAAO,KAAK,MAAM;CAChC;CAEA,MAAM,MAAM,MAAc,OAA0B,SAAoH;EACtK,OAAO,KAAK,OAAO,KAAK,IAAI;CAC9B;CAEA,MAAM,SAAS,QAAgB,SAAwC;EAErE,QAAO,MADY,KAAK,OAAO,SAAS,MAAM,EAAA,CAClC,SAAS,MAAM;CAC7B;CAEA,MAAM,WAAW,QAAgB,SAAuD;EAEtF,MAAM,QAAO,MADM,KAAK,OAAO,SAAS,MAAM,EAAA,CAC5B,SAAS,MAAM;EACjC,QAAQ,mBAAmB;GACzB,MAAM;EACR,EAAA,CAAG;CACL;CAEA,MAAM,UAAU,QAAgB,SAAkC,UAAuC;EAEvG,MAAM,SAAQ,MADK,KAAK,OAAO,SAAS,MAAM,EAAA,CAC3B,SAAS,GAAG,QAAQ;EACvC,OAAO,IAAI,WAAW,MAAM,QAAQ,MAAM,YAAY,MAAM,UAAU;CACxE;CAEA,MAAM,QAAQ,QAAgB,SAA+J;EAE3L,QAAO,MADe,KAAK,OAAO,QAAQ,MAAM,EAAA,CACjC,KAAK,OAAO;GACzB,MAAM,EAAE;GACR,MAAM,GAAG,OAAO,QAAQ,QAAQ,EAAE,EAAE,GAAG,EAAE;GACzC,aAAa,EAAE;GACf,QAAQ,EAAE;GACV,WAAW,EAAE;GACb,MAAM,EAAE;GACR,OAAO,EAAE;EACX,EAAE;CACJ;CAEA,MAAM,UAAU,QAAgB,SAAiB,WAAqB,SAAuB,SAAuH;EAClN,MAAM,eAAe,MAAc,EAAE,QAAQ,SAAS,IAAI;EAC1D,MAAM,aAAa,MAAM,KAAK,OAAO,KAAK,MAAM;EAChD,IAAI,SAAwB;EAC5B,IAAI,YAAY,QACd,IAAI;GACF,SAAS,aAAa,MAAM,KAAK,OAAO,SAAS,MAAM,EAAA,CAAG,SAAS,MAAM,CAAC;EAC5E,QAAQ;GACN,SAAS;EACX;EAEF,MAAM,QAAQ,YAAY,OAAO;EACjC,MAAM,KAAK,OAAO,UAAU,QAAQ,OAAO;EAC3C,MAAM,YAAY,MAAM,KAAK,OAAO,KAAK,MAAM;EAC/C,MAAM,UAAU,GAAG,WAAW,QAAQ,QAAQ,OAAO,GAAG,WAAW,SAAS,KAAK,IAAI;EACrF,OAAO;GAAE,WAAW,WAAW,OAAO,WAAW;GAAU;GAAS;GAAQ;EAAM;CACpF;CAEA,MAAM,SAAS,QAAgB,MAAe,WAAqB,SAAuB,SAAgF;EACxK,MAAM,eAAe,MAAc,EAAE,QAAQ,SAAS,IAAI;EAC1D,MAAM,SAAS,aAAa,MAAM,KAAK,OAAO,SAAS,MAAM,EAAA,CAAG,SAAS,MAAM,CAAC;EAChF,MAAM,MAAM;EACZ,MAAM,YAAY,YAAY,OAAO,IAAI,aAAa,EAAE,CAAC;EACzD,IAAI,UAAU,WAAW,GAAG,MAAM,IAAI,MAAM,kCAAkC;EAC9E,MAAM,YAAY,YAAY,OAAO,IAAI,aAAa,EAAE,CAAC;EACzD,MAAM,UAAU,OAAO,MAAM,SAAS,CAAC,CAAC,SAAS;EACjD,IAAI,YAAY,GAAG,MAAM,IAAI,MAAM,kCAAkC;EACrE,IAAI,CAAC,IAAI,cAAc,YAAY,GAAG,MAAM,IAAI,MAAM,0BAA0B,QAAQ,6BAA6B;EACrH,MAAM,QAAQ,IAAI,aAAa,OAAO,MAAM,SAAS,CAAC,CAAC,KAAK,SAAS,IAAI,OAAO,QAAQ,WAAW,SAAS;EAC5G,MAAM,KAAK,OAAO,UAAU,QAAQ,KAAK;EACzC,MAAM,YAAY,MAAM,KAAK,OAAO,KAAK,MAAM;EAE/C,OAAO;GAAE,SAAA,GADU,WAAW,QAAQ,MAAM,OAAO,GAAG,WAAW,SAAS,KAAK,IAAI;GACjE;GAAQ;EAAM;CAClC;AACF"}

package/lib/exec-docker/host-runner.d.ts

@@ -0,0 +1,29 @@
+import { HostCommandRunner } from "./docker-backend.js";
+import { Context } from "@deepseek-ai/cordis";
+//#region src/exec-docker/host-runner.d.ts
+interface SshExecutorLike {
+  exec(argv: string[], cwd: string, env?: Record<string, string>, stdinData?: Buffer): Promise<{
+    code: number;
+    stdout: string;
+    stderr: string;
+  }>;
+}
+declare function sshRunner(executor: SshExecutorLike): HostCommandRunner;
+interface DockerNodeLike {
+  id: string;
+  type: string;
+  ssh?: unknown;
+  docker?: {
+    containerId?: string;
+    image?: string;
+    mode?: string;
+    resources?: {
+      cpus?: number;
+      memoryMB?: number;
+    };
+  };
+}
+declare function resolveHostRunner(ctx: Context, node: DockerNodeLike): Promise<HostCommandRunner | undefined>;
+//#endregion
+export { DockerNodeLike, resolveHostRunner, sshRunner };
+//# sourceMappingURL=host-runner.d.ts.map

package/lib/exec-docker/host-runner.js

@@ -0,0 +1,17 @@
+import { dockerDaemonRunner } from "./daemon-runner.js";
+//#region src/exec-docker/host-runner.ts
+function sshRunner(executor) {
+	return { run: async (argv, cwd) => executor.exec(argv, cwd ?? "/") };
+}
+async function resolveHostRunner(ctx, node) {
+	if (node.type === "remote-docker") {
+		const sshWorld = await ctx.get("dshbSshWorlds")?.ensure(node.id);
+		if (!sshWorld) return void 0;
+		return sshRunner(sshWorld.executor);
+	}
+	return dockerDaemonRunner();
+}
+//#endregion
+export { resolveHostRunner, sshRunner };
+
+//# sourceMappingURL=host-runner.js.map

package/lib/exec-docker/host-runner.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"host-runner.js","names":[],"sources":["../../src/exec-docker/host-runner.ts"],"sourcesContent":["import type { Context } from '@deepseek-ai/cordis'\nimport type { HostCommandRunner } from './docker-backend.js'\nimport { dockerDaemonRunner } from './daemon-runner.js'\n\ninterface SshExecutorLike {\n  exec(argv: string[], cwd: string, env?: Record<string, string>, stdinData?: Buffer): Promise<{ code: number; stdout: string; stderr: string }>\n}\n\nexport function sshRunner(executor: SshExecutorLike): HostCommandRunner {\n  return {\n    run: async (argv, cwd) => executor.exec(argv, cwd ?? '/'),\n  }\n}\n\nexport interface DockerNodeLike {\n  id: string\n  type: string\n  ssh?: unknown\n  docker?: { containerId?: string; image?: string; mode?: string; resources?: { cpus?: number; memoryMB?: number } }\n}\n\nexport async function resolveHostRunner(ctx: Context, node: DockerNodeLike): Promise<HostCommandRunner | undefined> {\n  if (node.type === 'remote-docker') {\n    const sshWorlds = ctx.get('dshbSshWorlds') as { ensure(nodeId: string): Promise<{ executor: SshExecutorLike } | undefined> } | undefined\n    const sshWorld = await sshWorlds?.ensure(node.id)\n    if (!sshWorld) return undefined\n    return sshRunner(sshWorld.executor)\n  }\n  return dockerDaemonRunner()\n}\n"],"mappings":";;AAQA,SAAgB,UAAU,UAA8C;CACtE,OAAO,EACL,KAAK,OAAO,MAAM,QAAQ,SAAS,KAAK,MAAM,OAAO,GAAG,EAC1D;AACF;AASA,eAAsB,kBAAkB,KAAc,MAA8D;CAClH,IAAI,KAAK,SAAS,iBAAiB;EAEjC,MAAM,WAAW,MADC,IAAI,IAAI,eACK,CAAC,EAAE,OAAO,KAAK,EAAE;EAChD,IAAI,CAAC,UAAU,OAAO,KAAA;EACtB,OAAO,UAAU,SAAS,QAAQ;CACpC;CACA,OAAO,mBAAmB;AAC5B"}

package/lib/exec-docker/index.d.ts

@@ -0,0 +1,21 @@
+import { DockerBackend, HostCommandRunner } from "./docker-backend.js";
+import { DockerClient } from "./docker-client.js";
+import { DockerFileSystem } from "./fs-provider.js";
+import { RemoteDockerCli } from "./remote-docker-cli.js";
+import { DockerShellExecutor, DockerSubprocessRuntime } from "./process-provider.js";
+import { DockerExecutionWorld, DockerWorldRegistry } from "./world.js";
+import { ProvisionConfig, ProvisionResult, ProvisionStage, listContainers, provisionContainer, removeContainer } from "./provision.js";
+import { Context } from "@deepseek-ai/cordis";
+//#region src/exec-docker/index.d.ts
+declare const name = "dshb-exec-docker";
+declare const inject: string[];
+interface ProvisionStatus {
+  state: 'provisioning' | 'ready' | 'failed';
+  error?: string;
+  containerId?: string;
+  updatedAt: string;
+}
+declare function apply(ctx: Context): void;
+//#endregion
+export { type DockerBackend, DockerClient, DockerExecutionWorld, DockerFileSystem, DockerShellExecutor, DockerSubprocessRuntime, DockerWorldRegistry, type HostCommandRunner, type ProvisionConfig, type ProvisionResult, type ProvisionStage, ProvisionStatus, RemoteDockerCli, apply, inject, listContainers, name, provisionContainer, removeContainer };
+//# sourceMappingURL=index.d.ts.map

package/lib/exec-docker/index.js

@@ -0,0 +1,137 @@
+import { sharedWorldResolver } from "../router/resolve.js";
+import { DockerClient } from "./docker-client.js";
+import { RemoteDockerCli } from "./remote-docker-cli.js";
+import { DockerFileSystem } from "./fs-provider.js";
+import { DockerShellExecutor, DockerSubprocessRuntime } from "./process-provider.js";
+import { DockerExecutionWorld, DockerWorldRegistry } from "./world.js";
+import { listContainers, provisionContainer, removeContainer } from "./provision.js";
+import { resolveHostRunner } from "./host-runner.js";
+import { registerDockerRoutes } from "./docker-routes.js";
+//#region src/exec-docker/index.ts
+const name = "dshb-exec-docker";
+const inject = ["nodeRegistry", "webServer"];
+function apply(ctx) {
+	const worlds = new DockerWorldRegistry();
+	const provisionStatuses = /* @__PURE__ */ new Map();
+	ctx.provide("dshbDockerWorlds", worlds);
+	sharedWorldResolver().setRegistry({ get: (nodeId) => worlds.get(nodeId) });
+	ctx.provide("dshbDockerWorldsGeneric", { ensure: async (nodeId) => {
+		const node = ctx.get("nodeRegistry")?.get(nodeId);
+		if (!node) return void 0;
+		if (node.type === "local-docker" && node.docker?.containerId) return worlds.ensure(nodeId, new DockerClient(node.docker.containerId));
+		if (node.type === "remote-docker" && node.docker?.containerId && node.ssh) {
+			if (!ctx.get("dshbSshPool")) return void 0;
+			const sshWorlds = ctx.get("dshbSshWorlds");
+			if (!sshWorlds) return void 0;
+			const sshWorld = await sshWorlds.ensure(nodeId);
+			if (!sshWorld) return void 0;
+			return worlds.ensure(nodeId, new RemoteDockerCli(sshWorld.executor, node.docker.containerId));
+		}
+	} });
+	ctx.provide("dshbDockerProvisioner", {
+		provision: async (nodeId) => {
+			const node = ctx.get("nodeRegistry")?.get(nodeId);
+			if (!node) throw new Error(`node ${nodeId} not found`);
+			if (node.type !== "local-docker" && node.type !== "remote-docker") throw new Error("节点不是 Docker 类型");
+			const image = node.docker?.image;
+			if (!image) throw new Error("节点未配置镜像");
+			const runner = await resolveHostRunner(ctx, node);
+			if (!runner) throw new Error("节点执行通道未就绪");
+			const name = `dshb-${nodeId}`;
+			provisionStatuses.set(nodeId, {
+				state: "provisioning",
+				updatedAt: (/* @__PURE__ */ new Date()).toISOString()
+			});
+			try {
+				const result = await provisionContainer(runner, {
+					image,
+					cpus: node.docker?.resources?.cpus,
+					memoryMB: node.docker?.resources?.memoryMB,
+					name
+				});
+				await ctx.get("nodeRegistry")?.update(nodeId, { docker: {
+					...node.docker,
+					containerId: result.containerId,
+					mode: "managed"
+				} });
+				provisionStatuses.set(nodeId, {
+					state: "ready",
+					containerId: result.containerId,
+					updatedAt: (/* @__PURE__ */ new Date()).toISOString()
+				});
+				return result;
+			} catch (err) {
+				provisionStatuses.set(nodeId, {
+					state: "failed",
+					error: err instanceof Error ? err.message : String(err),
+					updatedAt: (/* @__PURE__ */ new Date()).toISOString()
+				});
+				throw err;
+			}
+		},
+		status: (nodeId) => provisionStatuses.get(nodeId)
+	});
+	ctx.provide("dshbDockerTester", { test: async (node) => {
+		try {
+			const runner = await resolveHostRunner(ctx, node);
+			if (!runner) return {
+				ok: false,
+				reachable: false,
+				error: "执行通道未就绪",
+				category: "network"
+			};
+			const info = await runner.run([
+				"docker",
+				"info",
+				"--format",
+				"{{.ServerVersion}}"
+			]);
+			if (info.code !== 0) return {
+				ok: false,
+				reachable: false,
+				error: `Docker 守护进程不可用: ${(info.stderr || info.stdout).trim()}`,
+				category: "unknown"
+			};
+			const containerId = node.docker?.containerId;
+			if (!containerId) return {
+				ok: false,
+				reachable: false,
+				error: "未关联容器，请先创建并启动容器",
+				category: "unknown"
+			};
+			const inspect = await runner.run([
+				"docker",
+				"inspect",
+				"--format",
+				"{{.State.Running}}",
+				containerId
+			]);
+			if (inspect.code !== 0) return {
+				ok: false,
+				reachable: false,
+				error: "容器不存在或已删除"
+			};
+			if (inspect.stdout.trim() !== "true") return {
+				ok: false,
+				reachable: false,
+				error: "容器已停止"
+			};
+			return {
+				ok: true,
+				reachable: true
+			};
+		} catch (err) {
+			return {
+				ok: false,
+				reachable: false,
+				error: err instanceof Error ? err.message : String(err),
+				category: "unknown"
+			};
+		}
+	} });
+	registerDockerRoutes(ctx);
+}
+//#endregion
+export { DockerClient, DockerExecutionWorld, DockerFileSystem, DockerShellExecutor, DockerSubprocessRuntime, DockerWorldRegistry, RemoteDockerCli, apply, inject, listContainers, name, provisionContainer, removeContainer };
+
+//# sourceMappingURL=index.js.map

package/lib/exec-docker/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","names":[],"sources":["../../src/exec-docker/index.ts"],"sourcesContent":["import type { Context } from '@deepseek-ai/cordis'\nimport type {} from '@deepseek-ai/dsh-host-webserver'\nimport type { DockerBackend } from './docker-backend.js'\nimport { DockerWorldRegistry } from './world.js'\nimport { RemoteDockerCli } from './remote-docker-cli.js'\nimport { DockerClient } from './docker-client.js'\nimport { registerDockerRoutes } from './docker-routes.js'\nimport { listContainers, provisionContainer } from './provision.js'\nimport { resolveHostRunner, type DockerNodeLike } from './host-runner.js'\nimport { sharedWorldResolver } from '../router/resolve.js'\n\ninterface NodeRegistryLike {\n  get(id: string): { id: string; type: string; ssh?: { host: string; port: number; username: string }; docker?: { containerId?: string; image?: string; mode?: 'existing' | 'managed'; resources?: { cpus?: number; memoryMB?: number } } } | undefined\n}\n\ninterface SshExecutorLike {\n  exec(argv: string[], cwd: string, env?: Record<string, string>, stdinData?: Buffer): Promise<{ code: number; stdout: string; stderr: string }>\n}\n\nexport const name = 'dshb-exec-docker'\n\nexport const inject = ['nodeRegistry', 'webServer']\n\nexport interface ProvisionStatus {\n  state: 'provisioning' | 'ready' | 'failed'\n  error?: string\n  containerId?: string\n  updatedAt: string\n}\n\nexport function apply(ctx: Context): void {\n  const worlds = new DockerWorldRegistry()\n  const provisionStatuses = new Map<string, ProvisionStatus>()\n  ctx.provide('dshbDockerWorlds', worlds)\n  sharedWorldResolver().setRegistry({\n    get: (nodeId: string) => worlds.get(nodeId),\n  })\n  ctx.provide('dshbDockerWorldsGeneric', {\n    ensure: async (nodeId: string) => {\n      const nodeRegistry = ctx.get('nodeRegistry') as NodeRegistryLike | undefined\n      const node = nodeRegistry?.get(nodeId)\n      if (!node) return undefined\n      if (node.type === 'local-docker' && node.docker?.containerId) {\n        return worlds.ensure(nodeId, new DockerClient(node.docker.containerId))\n      }\n      if (node.type === 'remote-docker' && node.docker?.containerId && node.ssh) {\n        const sshPool = ctx.get('dshbSshPool') as { acquire(target: unknown, secrets: unknown): { getClient(): Promise<unknown> } } | undefined\n        if (!sshPool) return undefined\n        const sshWorlds = ctx.get('dshbSshWorlds') as { ensure(nodeId: string): Promise<{ executor: SshExecutorLike } | undefined> } | undefined\n        if (!sshWorlds) return undefined\n        const sshWorld = await sshWorlds.ensure(nodeId)\n        if (!sshWorld) return undefined\n        return worlds.ensure(nodeId, new RemoteDockerCli(sshWorld.executor, node.docker.containerId))\n      }\n      return undefined\n    },\n  })\n  ctx.provide('dshbDockerProvisioner', {\n    provision: async (nodeId: string) => {\n      const nodeRegistry = ctx.get('nodeRegistry') as NodeRegistryLike | undefined\n      const node = nodeRegistry?.get(nodeId)\n      if (!node) throw new Error(`node ${nodeId} not found`)\n      if (node.type !== 'local-docker' && node.type !== 'remote-docker') throw new Error('节点不是 Docker 类型')\n      const image = node.docker?.image\n      if (!image) throw new Error('节点未配置镜像')\n      const runner = await resolveHostRunner(ctx, node)\n      if (!runner) throw new Error('节点执行通道未就绪')\n      const name = `dshb-${nodeId}`\n      provisionStatuses.set(nodeId, { state: 'provisioning', updatedAt: new Date().toISOString() })\n      try {\n        const result = await provisionContainer(runner, {\n          image,\n          cpus: node.docker?.resources?.cpus,\n          memoryMB: node.docker?.resources?.memoryMB,\n          name,\n        })\n        const registry = ctx.get('nodeRegistry') as { update(id: string, input: { docker: Record<string, unknown> }): Promise<unknown> } | undefined\n        await registry?.update(nodeId, { docker: { ...node.docker, containerId: result.containerId, mode: 'managed' } })\n        provisionStatuses.set(nodeId, { state: 'ready', containerId: result.containerId, updatedAt: new Date().toISOString() })\n        return result\n      } catch (err) {\n        provisionStatuses.set(nodeId, { state: 'failed', error: err instanceof Error ? err.message : String(err), updatedAt: new Date().toISOString() })\n        throw err\n      }\n    },\n    status: (nodeId: string) => provisionStatuses.get(nodeId),\n  })\n  ctx.provide('dshbDockerTester', {\n    test: async (node: DockerNodeLike) => {\n      try {\n        const runner = await resolveHostRunner(ctx, node)\n        if (!runner) return { ok: false, reachable: false, error: '执行通道未就绪', category: 'network' }\n        const info = await runner.run(['docker', 'info', '--format', '{{.ServerVersion}}'])\n        if (info.code !== 0) return { ok: false, reachable: false, error: `Docker 守护进程不可用: ${(info.stderr || info.stdout).trim()}`, category: 'unknown' }\n        const containerId = node.docker?.containerId\n        if (!containerId) return { ok: false, reachable: false, error: '未关联容器，请先创建并启动容器', category: 'unknown' }\n        const inspect = await runner.run(['docker', 'inspect', '--format', '{{.State.Running}}', containerId])\n        if (inspect.code !== 0) return { ok: false, reachable: false, error: '容器不存在或已删除' }\n        if (inspect.stdout.trim() !== 'true') return { ok: false, reachable: false, error: '容器已停止' }\n        return { ok: true, reachable: true }\n      } catch (err) {\n        return { ok: false, reachable: false, error: err instanceof Error ? err.message : String(err), category: 'unknown' }\n      }\n    },\n  })\n  registerDockerRoutes(ctx)\n}\n\nexport { DockerClient } from './docker-client.js'\nexport { RemoteDockerCli } from './remote-docker-cli.js'\nexport { DockerExecutionWorld, DockerWorldRegistry } from './world.js'\nexport { DockerFileSystem } from './fs-provider.js'\nexport { DockerShellExecutor, DockerSubprocessRuntime } from './process-provider.js'\nexport { provisionContainer, listContainers, removeContainer } from './provision.js'\nexport type { ProvisionConfig, ProvisionResult, ProvisionStage } from './provision.js'\nexport type { DockerBackend, HostCommandRunner } from './docker-backend.js'\n"],"mappings":";;;;;;;;;;AAmBA,MAAa,OAAO;AAEpB,MAAa,SAAS,CAAC,gBAAgB,WAAW;AASlD,SAAgB,MAAM,KAAoB;CACxC,MAAM,SAAS,IAAI,oBAAoB;CACvC,MAAM,oCAAoB,IAAI,IAA6B;CAC3D,IAAI,QAAQ,oBAAoB,MAAM;CACtC,oBAAoB,CAAC,CAAC,YAAY,EAChC,MAAM,WAAmB,OAAO,IAAI,MAAM,EAC5C,CAAC;CACD,IAAI,QAAQ,2BAA2B,EACrC,QAAQ,OAAO,WAAmB;EAEhC,MAAM,OADe,IAAI,IAAI,cACL,CAAC,EAAE,IAAI,MAAM;EACrC,IAAI,CAAC,MAAM,OAAO,KAAA;EAClB,IAAI,KAAK,SAAS,kBAAkB,KAAK,QAAQ,aAC/C,OAAO,OAAO,OAAO,QAAQ,IAAI,aAAa,KAAK,OAAO,WAAW,CAAC;EAExE,IAAI,KAAK,SAAS,mBAAmB,KAAK,QAAQ,eAAe,KAAK,KAAK;GAEzE,IAAI,CADY,IAAI,IAAI,aACb,GAAG,OAAO,KAAA;GACrB,MAAM,YAAY,IAAI,IAAI,eAAe;GACzC,IAAI,CAAC,WAAW,OAAO,KAAA;GACvB,MAAM,WAAW,MAAM,UAAU,OAAO,MAAM;GAC9C,IAAI,CAAC,UAAU,OAAO,KAAA;GACtB,OAAO,OAAO,OAAO,QAAQ,IAAI,gBAAgB,SAAS,UAAU,KAAK,OAAO,WAAW,CAAC;EAC9F;CAEF,EACF,CAAC;CACD,IAAI,QAAQ,yBAAyB;EACnC,WAAW,OAAO,WAAmB;GAEnC,MAAM,OADe,IAAI,IAAI,cACL,CAAC,EAAE,IAAI,MAAM;GACrC,IAAI,CAAC,MAAM,MAAM,IAAI,MAAM,QAAQ,OAAO,WAAW;GACrD,IAAI,KAAK,SAAS,kBAAkB,KAAK,SAAS,iBAAiB,MAAM,IAAI,MAAM,gBAAgB;GACnG,MAAM,QAAQ,KAAK,QAAQ;GAC3B,IAAI,CAAC,OAAO,MAAM,IAAI,MAAM,SAAS;GACrC,MAAM,SAAS,MAAM,kBAAkB,KAAK,IAAI;GAChD,IAAI,CAAC,QAAQ,MAAM,IAAI,MAAM,WAAW;GACxC,MAAM,OAAO,QAAQ;GACrB,kBAAkB,IAAI,QAAQ;IAAE,OAAO;IAAgB,4BAAW,IAAI,KAAK,EAAA,CAAE,YAAY;GAAE,CAAC;GAC5F,IAAI;IACF,MAAM,SAAS,MAAM,mBAAmB,QAAQ;KAC9C;KACA,MAAM,KAAK,QAAQ,WAAW;KAC9B,UAAU,KAAK,QAAQ,WAAW;KAClC;IACF,CAAC;IAED,MADiB,IAAI,IAAI,cACZ,CAAC,EAAE,OAAO,QAAQ,EAAE,QAAQ;KAAE,GAAG,KAAK;KAAQ,aAAa,OAAO;KAAa,MAAM;IAAU,EAAE,CAAC;IAC/G,kBAAkB,IAAI,QAAQ;KAAE,OAAO;KAAS,aAAa,OAAO;KAAa,4BAAW,IAAI,KAAK,EAAA,CAAE,YAAY;IAAE,CAAC;IACtH,OAAO;GACT,SAAS,KAAK;IACZ,kBAAkB,IAAI,QAAQ;KAAE,OAAO;KAAU,OAAO,eAAe,QAAQ,IAAI,UAAU,OAAO,GAAG;KAAG,4BAAW,IAAI,KAAK,EAAA,CAAE,YAAY;IAAE,CAAC;IAC/I,MAAM;GACR;EACF;EACA,SAAS,WAAmB,kBAAkB,IAAI,MAAM;CAC1D,CAAC;CACD,IAAI,QAAQ,oBAAoB,EAC9B,MAAM,OAAO,SAAyB;EACpC,IAAI;GACF,MAAM,SAAS,MAAM,kBAAkB,KAAK,IAAI;GAChD,IAAI,CAAC,QAAQ,OAAO;IAAE,IAAI;IAAO,WAAW;IAAO,OAAO;IAAW,UAAU;GAAU;GACzF,MAAM,OAAO,MAAM,OAAO,IAAI;IAAC;IAAU;IAAQ;IAAY;GAAoB,CAAC;GAClF,IAAI,KAAK,SAAS,GAAG,OAAO;IAAE,IAAI;IAAO,WAAW;IAAO,OAAO,oBAAoB,KAAK,UAAU,KAAK,OAAA,CAAQ,KAAK;IAAK,UAAU;GAAU;GAChJ,MAAM,cAAc,KAAK,QAAQ;GACjC,IAAI,CAAC,aAAa,OAAO;IAAE,IAAI;IAAO,WAAW;IAAO,OAAO;IAAmB,UAAU;GAAU;GACtG,MAAM,UAAU,MAAM,OAAO,IAAI;IAAC;IAAU;IAAW;IAAY;IAAsB;GAAW,CAAC;GACrG,IAAI,QAAQ,SAAS,GAAG,OAAO;IAAE,IAAI;IAAO,WAAW;IAAO,OAAO;GAAY;GACjF,IAAI,QAAQ,OAAO,KAAK,MAAM,QAAQ,OAAO;IAAE,IAAI;IAAO,WAAW;IAAO,OAAO;GAAQ;GAC3F,OAAO;IAAE,IAAI;IAAM,WAAW;GAAK;EACrC,SAAS,KAAK;GACZ,OAAO;IAAE,IAAI;IAAO,WAAW;IAAO,OAAO,eAAe,QAAQ,IAAI,UAAU,OAAO,GAAG;IAAG,UAAU;GAAU;EACrH;CACF,EACF,CAAC;CACD,qBAAqB,GAAG;AAC1B"}

package/lib/exec-docker/process-provider.d.ts

@@ -0,0 +1,20 @@
+import { DockerBackend } from "./docker-backend.js";
+import { SubprocessHandle, SubprocessSpawnSpec, SubprocessTerminalHandle, SubprocessTerminalSpawnSpec } from "@deepseek-ai/dsh-subprocess";
+import { ShellExecRequest, ShellExecSpec, ShellProcess, ShellRunResult } from "@deepseek-ai/dsh-shell";
+//#region src/exec-docker/process-provider.d.ts
+declare class DockerShellExecutor {
+  private readonly client;
+  constructor(client: DockerBackend);
+  resolve(request: ShellExecRequest): ShellExecSpec;
+  run(spec: ShellExecSpec): Promise<ShellRunResult>;
+  start(spec: ShellExecSpec): ShellProcess;
+}
+declare class DockerSubprocessRuntime {
+  private readonly client;
+  constructor(client: DockerBackend);
+  spawn(spec: SubprocessSpawnSpec): SubprocessHandle;
+  spawnTerminal(spec: SubprocessTerminalSpawnSpec): Promise<SubprocessTerminalHandle>;
+}
+//#endregion
+export { DockerShellExecutor, DockerSubprocessRuntime };
+//# sourceMappingURL=process-provider.d.ts.map

package/lib/exec-docker/process-provider.js

@@ -0,0 +1,75 @@
+//#region src/exec-docker/process-provider.ts
+var DockerShellExecutor = class {
+	client;
+	constructor(client) {
+		this.client = client;
+	}
+	resolve(request) {
+		return {
+			command: request.command,
+			workdir: request.workdir ?? "/",
+			timeoutMs: request.timeoutMs ?? 6e4,
+			stdoutMaxBytes: request.stdoutMaxBytes ?? 1048576,
+			signal: request.signal,
+			stdin: request.stdin,
+			env: request.env,
+			sandboxPolicy: request.sandboxPolicy
+		};
+	}
+	async run(spec) {
+		const result = await this.client.exec([
+			"bash",
+			"-c",
+			spec.command
+		], spec.workdir, spec.env ?? {}, spec.stdin !== void 0 ? Buffer.from(spec.stdin) : void 0);
+		const collect = (text) => ({
+			text,
+			truncated: false
+		});
+		return {
+			exitCode: result.code,
+			signal: null,
+			timedOut: false,
+			aborted: false,
+			timeoutMs: spec.timeoutMs,
+			stdout: collect(result.stdout),
+			stderr: collect(result.stderr)
+		};
+	}
+	start(spec) {
+		return {
+			pid: -1,
+			done: this.run(spec),
+			kill: () => {}
+		};
+	}
+};
+var DockerSubprocessRuntime = class {
+	client;
+	constructor(client) {
+		this.client = client;
+	}
+	spawn(spec) {
+		return {
+			pid: -1,
+			done: this.client.exec(spec.argv, spec.cwd, spec.env ?? {}).then((r) => ({
+				exitCode: r.code,
+				signal: null
+			})),
+			kill: () => {}
+		};
+	}
+	async spawnTerminal(spec) {
+		const pty = await this.client.pty(spec.argv, spec.cwd, spec.cols ?? 80, spec.rows ?? 24);
+		return {
+			write: (data) => pty.stream.write(data),
+			resize: (cols, rows) => pty.resize(cols, rows),
+			onData: (cb) => pty.stream.on("data", (chunk) => cb(chunk.toString("utf8"))),
+			kill: () => pty.kill()
+		};
+	}
+};
+//#endregion
+export { DockerShellExecutor, DockerSubprocessRuntime };
+
+//# sourceMappingURL=process-provider.js.map

package/lib/exec-docker/process-provider.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"process-provider.js","names":[],"sources":["../../src/exec-docker/process-provider.ts"],"sourcesContent":["import type { DockerBackend } from './docker-backend.js'\nimport type { ShellExecRequest, ShellExecSpec, ShellProcess, ShellRunResult } from '@deepseek-ai/dsh-shell'\nimport type { CollectedOutput, SubprocessHandle, SubprocessSpawnSpec, SubprocessTerminalHandle, SubprocessTerminalSpawnSpec } from '@deepseek-ai/dsh-subprocess'\n\nexport class DockerShellExecutor {\n  constructor(private readonly client: DockerBackend) {}\n\n  resolve(request: ShellExecRequest): ShellExecSpec {\n    return {\n      command: request.command,\n      workdir: request.workdir ?? '/',\n      timeoutMs: request.timeoutMs ?? 60_000,\n      stdoutMaxBytes: request.stdoutMaxBytes ?? 1024 * 1024,\n      signal: request.signal,\n      stdin: request.stdin,\n      env: request.env,\n      sandboxPolicy: request.sandboxPolicy,\n    } as ShellExecSpec\n  }\n\n  async run(spec: ShellExecSpec): Promise<ShellRunResult> {\n    const result = await this.client.exec(['bash', '-c', spec.command], spec.workdir, (spec.env ?? {}) as Record<string, string>, spec.stdin !== undefined ? Buffer.from(spec.stdin) : undefined)\n    const collect = (text: string): CollectedOutput => ({ text, truncated: false })\n    return {\n      exitCode: result.code,\n      signal: null,\n      timedOut: false,\n      aborted: false,\n      timeoutMs: spec.timeoutMs,\n      stdout: collect(result.stdout),\n      stderr: collect(result.stderr),\n    } as unknown as ShellRunResult\n  }\n\n  start(spec: ShellExecSpec): ShellProcess {\n    const promise = this.run(spec)\n    return {\n      pid: -1,\n      done: promise,\n      kill: () => {\n        void promise\n      },\n    } as unknown as ShellProcess\n  }\n}\n\nexport class DockerSubprocessRuntime {\n  constructor(private readonly client: DockerBackend) {}\n\n  spawn(spec: SubprocessSpawnSpec): SubprocessHandle {\n    const promise = this.client.exec(spec.argv as string[], spec.cwd, (spec.env ?? {}) as Record<string, string>)\n    const handle: SubprocessHandle = {\n      pid: -1,\n      done: promise.then((r) => ({ exitCode: r.code, signal: null as NodeJS.Signals | null })),\n      kill: () => {\n        void promise\n      },\n    } as unknown as SubprocessHandle\n    return handle\n  }\n\n  async spawnTerminal(spec: SubprocessTerminalSpawnSpec): Promise<SubprocessTerminalHandle> {\n    const pty = await this.client.pty(spec.argv as string[], spec.cwd, (spec as { cols?: number }).cols ?? 80, (spec as { rows?: number }).rows ?? 24)\n    const handle: SubprocessTerminalHandle = {\n      write: (data: string) => pty.stream.write(data),\n      resize: (cols: number, rows: number) => pty.resize(cols, rows),\n      onData: (cb: (data: string) => void) => pty.stream.on('data', (chunk: Buffer) => cb(chunk.toString('utf8'))),\n      kill: () => pty.kill(),\n    } as unknown as SubprocessTerminalHandle\n    return handle\n  }\n}\n"],"mappings":";AAIA,IAAa,sBAAb,MAAiC;CACF;CAA7B,YAAY,QAAwC;EAAvB,KAAA,SAAA;CAAwB;CAErD,QAAQ,SAA0C;EAChD,OAAO;GACL,SAAS,QAAQ;GACjB,SAAS,QAAQ,WAAW;GAC5B,WAAW,QAAQ,aAAa;GAChC,gBAAgB,QAAQ,kBAAkB;GAC1C,QAAQ,QAAQ;GAChB,OAAO,QAAQ;GACf,KAAK,QAAQ;GACb,eAAe,QAAQ;EACzB;CACF;CAEA,MAAM,IAAI,MAA8C;EACtD,MAAM,SAAS,MAAM,KAAK,OAAO,KAAK;GAAC;GAAQ;GAAM,KAAK;EAAO,GAAG,KAAK,SAAU,KAAK,OAAO,CAAC,GAA8B,KAAK,UAAU,KAAA,IAAY,OAAO,KAAK,KAAK,KAAK,IAAI,KAAA,CAAS;EAC5L,MAAM,WAAW,UAAmC;GAAE;GAAM,WAAW;EAAM;EAC7E,OAAO;GACL,UAAU,OAAO;GACjB,QAAQ;GACR,UAAU;GACV,SAAS;GACT,WAAW,KAAK;GAChB,QAAQ,QAAQ,OAAO,MAAM;GAC7B,QAAQ,QAAQ,OAAO,MAAM;EAC/B;CACF;CAEA,MAAM,MAAmC;EAEvC,OAAO;GACL,KAAK;GACL,MAHc,KAAK,IAAI,IAGX;GACZ,YAAY,CAEZ;EACF;CACF;AACF;AAEA,IAAa,0BAAb,MAAqC;CACN;CAA7B,YAAY,QAAwC;EAAvB,KAAA,SAAA;CAAwB;CAErD,MAAM,MAA6C;EASjD,OAAO;GANL,KAAK;GACL,MAHc,KAAK,OAAO,KAAK,KAAK,MAAkB,KAAK,KAAM,KAAK,OAAO,CAAC,CAGlE,CAAC,CAAC,MAAM,OAAO;IAAE,UAAU,EAAE;IAAM,QAAQ;GAA8B,EAAE;GACvF,YAAY,CAEZ;EAEU;CACd;CAEA,MAAM,cAAc,MAAsE;EACxF,MAAM,MAAM,MAAM,KAAK,OAAO,IAAI,KAAK,MAAkB,KAAK,KAAM,KAA2B,QAAQ,IAAK,KAA2B,QAAQ,EAAE;EAOjJ,OAAO;GALL,QAAQ,SAAiB,IAAI,OAAO,MAAM,IAAI;GAC9C,SAAS,MAAc,SAAiB,IAAI,OAAO,MAAM,IAAI;GAC7D,SAAS,OAA+B,IAAI,OAAO,GAAG,SAAS,UAAkB,GAAG,MAAM,SAAS,MAAM,CAAC,CAAC;GAC3G,YAAY,IAAI,KAAK;EAEX;CACd;AACF"}

package/lib/exec-docker/provision.d.ts

@@ -0,0 +1,24 @@
+import { HostCommandRunner } from "./docker-backend.js";
+//#region src/exec-docker/provision.d.ts
+interface ProvisionConfig {
+  image: string;
+  cpus?: number;
+  memoryMB?: number;
+  name?: string;
+}
+interface ProvisionResult {
+  containerId: string;
+  name: string;
+}
+type ProvisionStage = 'pull' | 'create' | 'wait' | 'ready';
+declare function provisionContainer(runner: HostCommandRunner, config: ProvisionConfig, onStage?: (stage: ProvisionStage, detail?: string) => void, timeoutMs?: number): Promise<ProvisionResult>;
+declare function listContainers(runner: HostCommandRunner): Promise<Array<{
+  id: string;
+  name: string;
+  status: string;
+  image: string;
+}>>;
+declare function removeContainer(runner: HostCommandRunner, containerId: string): Promise<void>;
+//#endregion
+export { ProvisionConfig, ProvisionResult, ProvisionStage, listContainers, provisionContainer, removeContainer };
+//# sourceMappingURL=provision.d.ts.map

package/lib/exec-docker/provision.js

@@ -0,0 +1,103 @@
+//#region src/exec-docker/provision.ts
+async function provisionContainer(runner, config, onStage, timeoutMs = 6e4) {
+	const name = config.name ?? `dshb-${Date.now()}`;
+	const inspectExisting = await runner.run([
+		"docker",
+		"inspect",
+		"--format",
+		"{{.Id}}	{{.State.Running}}",
+		name
+	]);
+	if (inspectExisting.code === 0) {
+		const [containerId, running] = inspectExisting.stdout.trim().split("	");
+		if (running === "true") {
+			onStage?.("ready", `容器 ${name} 已在运行`);
+			return {
+				containerId: containerId ?? name,
+				name
+			};
+		}
+		if ((await runner.run([
+			"docker",
+			"start",
+			name
+		])).code === 0) {
+			onStage?.("ready", `容器 ${name} 已重新启动`);
+			return {
+				containerId: containerId ?? name,
+				name
+			};
+		}
+	}
+	onStage?.("pull", `拉取镜像 ${config.image}`);
+	const pull = await runner.run([
+		"docker",
+		"pull",
+		config.image
+	]);
+	if (pull.code !== 0) throw new Error(`镜像拉取失败: ${pull.stderr.trim() || pull.stdout.trim()}`);
+	onStage?.("create", `创建容器`);
+	const createArgs = [
+		"docker",
+		"run",
+		"-d",
+		"--name",
+		name
+	];
+	if (config.cpus) createArgs.push("--cpus", String(config.cpus));
+	if (config.memoryMB && config.memoryMB >= 6) createArgs.push("-m", `${config.memoryMB}m`);
+	createArgs.push(config.image, "sleep", "infinity");
+	const create = await runner.run(createArgs);
+	if (create.code !== 0) throw new Error(`容器创建失败: ${create.stderr.trim() || create.stdout.trim()}`);
+	const containerId = create.stdout.trim();
+	if (!containerId) throw new Error("容器创建失败：无容器 ID");
+	onStage?.("wait", `等待容器就绪`);
+	const deadline = Date.now() + timeoutMs;
+	while (Date.now() < deadline) {
+		if ((await runner.run([
+			"docker",
+			"inspect",
+			"--format",
+			"{{.State.Running}}",
+			containerId
+		])).stdout.trim() === "true") {
+			onStage?.("ready", `容器 ${name} 就绪`);
+			return {
+				containerId,
+				name
+			};
+		}
+		await new Promise((r) => setTimeout(r, 1e3));
+	}
+	throw new Error(`容器启动超时（${Math.round(timeoutMs / 1e3)} 秒）`);
+}
+async function listContainers(runner) {
+	const result = await runner.run([
+		"docker",
+		"ps",
+		"--format",
+		"{{.ID}}	{{.Names}}	{{.Status}}	{{.Image}}"
+	]);
+	if (result.code !== 0) return [];
+	return result.stdout.split("\n").filter((line) => line.trim()).map((line) => {
+		const [id, name, status, image] = line.split("	");
+		return {
+			id: id?.trim() ?? "",
+			name: name?.trim() ?? "",
+			status: status?.trim() ?? "",
+			image: image?.trim() ?? ""
+		};
+	});
+}
+async function removeContainer(runner, containerId) {
+	await runner.run([
+		"docker",
+		"rm",
+		"-f",
+		containerId
+	]);
+}
+//#endregion
+export { listContainers, provisionContainer, removeContainer };
+
+//# sourceMappingURL=provision.js.map

package/lib/exec-docker/provision.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"provision.js","names":[],"sources":["../../src/exec-docker/provision.ts"],"sourcesContent":["import type { HostCommandRunner } from './docker-backend.js'\n\nexport interface ProvisionConfig {\n  image: string\n  cpus?: number\n  memoryMB?: number\n  name?: string\n}\n\nexport interface ProvisionResult {\n  containerId: string\n  name: string\n}\n\nexport type ProvisionStage = 'pull' | 'create' | 'wait' | 'ready'\n\nexport async function provisionContainer(\n  runner: HostCommandRunner,\n  config: ProvisionConfig,\n  onStage?: (stage: ProvisionStage, detail?: string) => void,\n  timeoutMs = 60_000,\n): Promise<ProvisionResult> {\n  const name = config.name ?? `dshb-${Date.now()}`\n\n  const inspectExisting = await runner.run(['docker', 'inspect', '--format', '{{.Id}}\\t{{.State.Running}}', name])\n  if (inspectExisting.code === 0) {\n    const [containerId, running] = inspectExisting.stdout.trim().split('\\t')\n    if (running === 'true') {\n      onStage?.('ready', `容器 ${name} 已在运行`)\n      return { containerId: containerId ?? name, name }\n    }\n    const startResult = await runner.run(['docker', 'start', name])\n    if (startResult.code === 0) {\n      onStage?.('ready', `容器 ${name} 已重新启动`)\n      return { containerId: containerId ?? name, name }\n    }\n  }\n\n  onStage?.('pull', `拉取镜像 ${config.image}`)\n  const pull = await runner.run(['docker', 'pull', config.image])\n  if (pull.code !== 0) throw new Error(`镜像拉取失败: ${pull.stderr.trim() || pull.stdout.trim()}`)\n\n  onStage?.('create', `创建容器`)\n  const createArgs = ['docker', 'run', '-d', '--name', name]\n  if (config.cpus) createArgs.push('--cpus', String(config.cpus))\n  if (config.memoryMB && config.memoryMB >= 6) createArgs.push('-m', `${config.memoryMB}m`)\n  createArgs.push(config.image, 'sleep', 'infinity')\n  const create = await runner.run(createArgs)\n  if (create.code !== 0) throw new Error(`容器创建失败: ${create.stderr.trim() || create.stdout.trim()}`)\n  const containerId = create.stdout.trim()\n  if (!containerId) throw new Error('容器创建失败：无容器 ID')\n\n  onStage?.('wait', `等待容器就绪`)\n  const deadline = Date.now() + timeoutMs\n  while (Date.now() < deadline) {\n    const inspect = await runner.run(['docker', 'inspect', '--format', '{{.State.Running}}', containerId])\n    if (inspect.stdout.trim() === 'true') {\n      onStage?.('ready', `容器 ${name} 就绪`)\n      return { containerId, name }\n    }\n    await new Promise((r) => setTimeout(r, 1000))\n  }\n  throw new Error(`容器启动超时（${Math.round(timeoutMs / 1000)} 秒）`)\n}\n\nexport async function listContainers(runner: HostCommandRunner): Promise<Array<{ id: string; name: string; status: string; image: string }>> {\n  const result = await runner.run(['docker', 'ps', '--format', '{{.ID}}\\t{{.Names}}\\t{{.Status}}\\t{{.Image}}'])\n  if (result.code !== 0) return []\n  return result.stdout\n    .split('\\n')\n    .filter((line) => line.trim())\n    .map((line) => {\n      const [id, name, status, image] = line.split('\\t')\n      return { id: id?.trim() ?? '', name: name?.trim() ?? '', status: status?.trim() ?? '', image: image?.trim() ?? '' }\n    })\n}\n\nexport async function removeContainer(runner: HostCommandRunner, containerId: string): Promise<void> {\n  await runner.run(['docker', 'rm', '-f', containerId])\n}\n"],"mappings":";AAgBA,eAAsB,mBACpB,QACA,QACA,SACA,YAAY,KACc;CAC1B,MAAM,OAAO,OAAO,QAAQ,QAAQ,KAAK,IAAI;CAE7C,MAAM,kBAAkB,MAAM,OAAO,IAAI;EAAC;EAAU;EAAW;EAAY;EAA+B;CAAI,CAAC;CAC/G,IAAI,gBAAgB,SAAS,GAAG;EAC9B,MAAM,CAAC,aAAa,WAAW,gBAAgB,OAAO,KAAK,CAAC,CAAC,MAAM,GAAI;EACvE,IAAI,YAAY,QAAQ;GACtB,UAAU,SAAS,MAAM,KAAK,MAAM;GACpC,OAAO;IAAE,aAAa,eAAe;IAAM;GAAK;EAClD;EAEA,KAAI,MADsB,OAAO,IAAI;GAAC;GAAU;GAAS;EAAI,CAAC,EAAA,CAC9C,SAAS,GAAG;GAC1B,UAAU,SAAS,MAAM,KAAK,OAAO;GACrC,OAAO;IAAE,aAAa,eAAe;IAAM;GAAK;EAClD;CACF;CAEA,UAAU,QAAQ,QAAQ,OAAO,OAAO;CACxC,MAAM,OAAO,MAAM,OAAO,IAAI;EAAC;EAAU;EAAQ,OAAO;CAAK,CAAC;CAC9D,IAAI,KAAK,SAAS,GAAG,MAAM,IAAI,MAAM,WAAW,KAAK,OAAO,KAAK,KAAK,KAAK,OAAO,KAAK,GAAG;CAE1F,UAAU,UAAU,MAAM;CAC1B,MAAM,aAAa;EAAC;EAAU;EAAO;EAAM;EAAU;CAAI;CACzD,IAAI,OAAO,MAAM,WAAW,KAAK,UAAU,OAAO,OAAO,IAAI,CAAC;CAC9D,IAAI,OAAO,YAAY,OAAO,YAAY,GAAG,WAAW,KAAK,MAAM,GAAG,OAAO,SAAS,EAAE;CACxF,WAAW,KAAK,OAAO,OAAO,SAAS,UAAU;CACjD,MAAM,SAAS,MAAM,OAAO,IAAI,UAAU;CAC1C,IAAI,OAAO,SAAS,GAAG,MAAM,IAAI,MAAM,WAAW,OAAO,OAAO,KAAK,KAAK,OAAO,OAAO,KAAK,GAAG;CAChG,MAAM,cAAc,OAAO,OAAO,KAAK;CACvC,IAAI,CAAC,aAAa,MAAM,IAAI,MAAM,eAAe;CAEjD,UAAU,QAAQ,QAAQ;CAC1B,MAAM,WAAW,KAAK,IAAI,IAAI;CAC9B,OAAO,KAAK,IAAI,IAAI,UAAU;EAE5B,KAAI,MADkB,OAAO,IAAI;GAAC;GAAU;GAAW;GAAY;GAAsB;EAAW,CAAC,EAAA,CACzF,OAAO,KAAK,MAAM,QAAQ;GACpC,UAAU,SAAS,MAAM,KAAK,IAAI;GAClC,OAAO;IAAE;IAAa;GAAK;EAC7B;EACA,MAAM,IAAI,SAAS,MAAM,WAAW,GAAG,GAAI,CAAC;CAC9C;CACA,MAAM,IAAI,MAAM,UAAU,KAAK,MAAM,YAAY,GAAI,EAAE,IAAI;AAC7D;AAEA,eAAsB,eAAe,QAAwG;CAC3I,MAAM,SAAS,MAAM,OAAO,IAAI;EAAC;EAAU;EAAM;EAAY;CAA8C,CAAC;CAC5G,IAAI,OAAO,SAAS,GAAG,OAAO,CAAC;CAC/B,OAAO,OAAO,OACX,MAAM,IAAI,CAAC,CACX,QAAQ,SAAS,KAAK,KAAK,CAAC,CAAC,CAC7B,KAAK,SAAS;EACb,MAAM,CAAC,IAAI,MAAM,QAAQ,SAAS,KAAK,MAAM,GAAI;EACjD,OAAO;GAAE,IAAI,IAAI,KAAK,KAAK;GAAI,MAAM,MAAM,KAAK,KAAK;GAAI,QAAQ,QAAQ,KAAK,KAAK;GAAI,OAAO,OAAO,KAAK,KAAK;EAAG;CACpH,CAAC;AACL;AAEA,eAAsB,gBAAgB,QAA2B,aAAoC;CACnG,MAAM,OAAO,IAAI;EAAC;EAAU;EAAM;EAAM;CAAW,CAAC;AACtD"}

package/lib/exec-docker/remote-docker-cli.d.ts

@@ -0,0 +1,52 @@
+import { DockerBackend } from "./docker-backend.js";
+//#region src/exec-docker/remote-docker-cli.d.ts
+interface SshExecutorLike {
+  exec(argv: string[], cwd: string, env?: Record<string, string>, stdinData?: Buffer): Promise<{
+    code: number;
+    stdout: string;
+    stderr: string;
+  }>;
+}
+declare class RemoteDockerCli implements DockerBackend {
+  private readonly ssh;
+  private readonly containerId;
+  constructor(ssh: SshExecutorLike, containerId: string);
+  exec(argv: string[], cwd: string, env?: Record<string, string>, stdinData?: Buffer): Promise<{
+    code: number;
+    stdout: string;
+    stderr: string;
+  }>;
+  execShell(command: string, cwd: string): Promise<{
+    code: number;
+    stdout: string;
+    stderr: string;
+  }>;
+  readFile(path: string): Promise<Buffer>;
+  writeFile(path: string, content: Buffer | string): Promise<void>;
+  listDir(path: string): Promise<Array<{
+    name: string;
+    isDir: boolean;
+    isFile: boolean;
+    isSymlink: boolean;
+    size: number;
+    mtime: number;
+  }>>;
+  stat(path: string): Promise<{
+    size: number;
+    mtime: number;
+    isDirectory: boolean;
+    isFile: boolean;
+  } | undefined>;
+  mkdir(path: string): Promise<void>;
+  remove(path: string): Promise<void>;
+  rename(src: string, dest: string): Promise<void>;
+  ensureRg(): Promise<void>;
+  pty(argv: string[], cwd: string, cols: number, rows: number): Promise<{
+    stream: NodeJS.ReadWriteStream;
+    resize: (c: number, r: number) => void;
+    kill: () => void;
+  }>;
+}
+//#endregion
+export { RemoteDockerCli };
+//# sourceMappingURL=remote-docker-cli.d.ts.map