@atomic-chat/core 0.5.1 → 0.13.2

package/dist/runtime/container/argv.js

@@ -0,0 +1,406 @@
+/**
+ * Pure Docker CLI argv construction. Nothing in this file touches the filesystem or a process; every
+ * function here takes data and returns a `string[]` a caller passes straight to `spawn`/`execFile`
+ * with no shell (`exec.ts`), so nothing a descriptor or a probe produced is ever interpreted as a
+ * flag or a shell word.
+ *
+ * `assertSafeArgvValue` is the one guard every descriptor- or probe-derived value goes through
+ * before it becomes an argv token: no leading `-` (which Docker would read as a flag) and no NUL,
+ * `\n` or `\r` (which would smuggle a second argv-like word past a naive splitter, or corrupt a
+ * `-v`/`-l`/`-e` value that gets joined with `:`/`=`). This is a carry-forward from the task 2.1
+ * review: conf's `imageRepository` pattern (`schema.json#/definitions/imageRepository`) permits a
+ * leading `-`, so a descriptor field like `repository: "-foo/bar"` passes descriptor validation and
+ * must still be caught here, one layer closer to the actual `spawn` call. Every option in
+ * `buildCreateModelContainerArgv`/`buildRunOnceArgv` is placed before the image reference and any
+ * command words, so a positional value can never be mistaken for the start of a new flag either.
+ *
+ * `--host unix:///var/run/docker.sock` is prepended to every argv by `withSystemSocket`; `env.ts`
+ * separately strips `DOCKER_HOST`/`DOCKER_CONTEXT` and points `DOCKER_CONFIG` at an empty,
+ * core-owned directory, so between the two, no user Docker context is ever consulted (spec
+ * `tensorrt-llm-runtime`, "the model container is isolated"). `buildCreateModelContainerArgv`/
+ * `buildRunOnceArgv` also add `--pull=never` (review round 1, item 5 ruling): the only thing in this
+ * module that fetches image bytes is `pull.ts`'s `pullImage`, over the Engine API — `docker
+ * create`/`docker run` must never trigger an implicit pull of their own, which would otherwise use
+ * whatever registry auth `DOCKER_CONFIG`'s directory happens to hold.
+ */
+import path from 'node:path';
+import { AtomicCoreError } from '../../contracts/index.js';
+/**
+ * The one path to the Docker daemon's system socket, in its two textual forms `argv.ts` and
+ * `pull.ts` each need. `pull.ts` derives its `node:http` `socketPath` from `DOCKER_SOCKET_PATH`
+ * rather than declaring its own literal (review round 1, item 15), so there is exactly one socket
+ * path constant in this module.
+ */
+export const DOCKER_SOCKET_PATH = '/var/run/docker.sock';
+/** Forced with every docker CLI call; no user Docker context (`DOCKER_HOST`/context/config) is ever used. */
+export const DOCKER_SYSTEM_SOCKET = `unix://${DOCKER_SOCKET_PATH}`;
+/** Docker socket paths (and their parent directories) that must never be used as a mount source — bind-mounting one of these into the container would hand it the socket even though no `-v` flag ever names it directly. */
+const FORBIDDEN_MOUNT_SOURCES = new Set(['/var/run/docker.sock', '/run/docker.sock', '/var/run', '/run']);
+/** Container-side mount targets. Fixed by this module; callers only choose the host-side source. */
+export const CONTAINER_MODEL_PATH = '/atomic/model';
+export const CONTAINER_ENGINE_CACHE_PATH = '/atomic/engine-cache';
+export const CONTAINER_ENTRYPOINT_PATH = '/atomic/entrypoint.sh';
+/** What runs the watchdog script (`#!/bin/sh`) inside the container. */
+export const CONTAINER_ENTRYPOINT_SHELL = '/bin/sh';
+export const CONTAINER_HEARTBEAT_PATH = '/atomic/heartbeat';
+/**
+ * `--shm-size` for the model container. A named placeholder, not a measurement: the real value is
+ * measured against a live `trtllm-serve` load in live test 2.19. Bounded rather than left at
+ * Docker's 64 MB default, which a multi-worker CUDA server exhausts immediately, and rather than
+ * unbounded (`--shm-size` with no limit maps to host memory, defeating the point of a limit).
+ */
+export const MODEL_CONTAINER_SHM_SIZE = '2g';
+/** The largest `--shm-size` this module will build, regardless of what a caller passes in `shmSize`. */
+export const MODEL_CONTAINER_SHM_SIZE_CEILING_GB = 16;
+const DIGEST_PATTERN = /^sha256:[0-9a-f]{64}$/;
+const NEWLINE_CHARS = /[\n\r]/;
+/** An env or label key: `KEY=value`/`atomic.key=value` always starts with this, so the leading
+ *  character can never be misread as a docker flag regardless of what the value contains. */
+const IDENTIFIER_PATTERN = /^[A-Za-z_][A-Za-z0-9_.-]*$/;
+/** `nvidia-smi -L`'s two UUID spellings: `GPU-<uuid>` and, for a MIG slice, `MIG-<uuid>`. */
+const GPU_UUID_PATTERN = /^(GPU|MIG)-[0-9A-Fa-f-]+$/;
+/** An integer byte count with a Docker size suffix, e.g. `2g`, `512m`, `65536k`. */
+const SHM_SIZE_PATTERN = /^([0-9]+)(k|m|g)$/;
+const DESKTOP_LOOPBACK_HOST = '127.0.0.1';
+function invalidArgument(what, value) {
+    throw new AtomicCoreError('INVALID_ARGUMENT', `${what} is not safe to pass to docker.`, value);
+}
+/** A NUL byte or a `\n`/`\r`: anything that could smuggle a second argv-like word past a naive splitter. */
+function hasControlChars(value) {
+    return value.includes('\u0000') || NEWLINE_CHARS.test(value);
+}
+/**
+ * Refuses an empty value, a leading `-` (would be read as a flag), or an embedded NUL/`\n`/`\r`.
+ * Every image reference, GPU id, mount source, label value, env value and command word passes
+ * through this before becoming an argv token.
+ */
+export function assertSafeArgvValue(value, what) {
+    if (value === '')
+        invalidArgument(what, value);
+    if (value.startsWith('-'))
+        invalidArgument(what, value);
+    if (hasControlChars(value))
+        invalidArgument(what, value);
+    return value;
+}
+/** Shared with `pull.ts`, which needs the repository and digest validated but not joined by `@`. */
+export function assertDigest(value, what) {
+    if (!DIGEST_PATTERN.test(value)) {
+        throw new AtomicCoreError('INVALID_ARGUMENT', `${what} is not a sha256 digest.`, value);
+    }
+    return value;
+}
+function assertPort(value, what) {
+    if (!Number.isInteger(value) || value < 1 || value > 65535) {
+        throw new AtomicCoreError('INVALID_ARGUMENT', `${what} is not a valid TCP port.`, String(value));
+    }
+    return value;
+}
+/** The model container's port may only ever be published on the literal desktop loopback address. */
+function assertLoopbackHost(host) {
+    if (host !== DESKTOP_LOOPBACK_HOST) {
+        throw new AtomicCoreError('FORBIDDEN_HOST', `A model container may only publish its port on ${DESKTOP_LOOPBACK_HOST}.`, host);
+    }
+    return host;
+}
+/** Shared by env and label keys: both are the `KEY` half of a `KEY=value` argv token. */
+function assertIdentifier(value, what) {
+    if (!IDENTIFIER_PATTERN.test(value)) {
+        throw new AtomicCoreError('INVALID_ARGUMENT', `${what} is not a valid identifier.`, value);
+    }
+    return value;
+}
+/**
+ * An env *value* embedded in `-e KEY=value`: the key half is already validated as an identifier that
+ * cannot start with `-`, so the whole argv token can never be misread as a flag regardless of what
+ * the value contains — unlike a standalone value, this one only needs the control-character guard
+ * (review round 1, item 16: rejecting a leading `-` here wrongly refused an ordinary value like
+ * `TEMPERATURE=-0.5`). Empty is allowed: `FOO=` is a legitimate way to set an empty env var.
+ */
+function assertEnvValue(value, what) {
+    if (hasControlChars(value))
+        invalidArgument(what, value);
+    return value;
+}
+function assertGpuUuid(value) {
+    if (!GPU_UUID_PATTERN.test(value)) {
+        throw new AtomicCoreError('INVALID_ARGUMENT', 'gpu id is not a GPU-<uuid>/MIG-<uuid> value.', value);
+    }
+    return value;
+}
+/** `--shm-size=<value>`: an integer with a `k`/`m`/`g` suffix, capped at `MODEL_CONTAINER_SHM_SIZE_CEILING_GB`. */
+function assertShmSize(value) {
+    const match = SHM_SIZE_PATTERN.exec(value);
+    if (!match) {
+        throw new AtomicCoreError('INVALID_ARGUMENT', 'shm size is not an integer with a k/m/g suffix.', value);
+    }
+    const [, digits, unit] = match;
+    const amount = Number(digits);
+    const gib = unit === 'g' ? amount : unit === 'm' ? amount / 1024 : amount / (1024 * 1024);
+    if (gib > MODEL_CONTAINER_SHM_SIZE_CEILING_GB) {
+        throw new AtomicCoreError('INVALID_ARGUMENT', `shm size must not exceed ${MODEL_CONTAINER_SHM_SIZE_CEILING_GB}g.`, value);
+    }
+    return value;
+}
+/** A uid or gid: a non-negative safe integer, so `--user` only ever carries `<digits>:<digits>`. */
+function assertUserId(value, what) {
+    if (!Number.isSafeInteger(value) || value < 0) {
+        throw new AtomicCoreError('INVALID_ARGUMENT', `${what} is not a non-negative integer id.`, String(value));
+    }
+    return String(value);
+}
+/** `--user <uid>:<gid>`, or nothing: the image's own user. */
+function userFlags(user) {
+    if (user === undefined)
+        return [];
+    return ['--user', `${assertUserId(user.uid, 'container uid')}:${assertUserId(user.gid, 'container gid')}`];
+}
+/** Normalizes a POSIX (Docker-daemon-side) path: no trailing slash, `.`/`..` resolved, for exact/prefix comparison. */
+function normalizeMountPath(value) {
+    const normalized = path.posix.normalize(value);
+    return normalized.length > 1 && normalized.endsWith('/') ? normalized.slice(0, -1) : normalized;
+}
+/**
+ * A mount source must be an absolute path (the Docker daemon's own view, never a relative path it
+ * would resolve against some unpredictable cwd), must not contain `:` (the character `-v`'s own
+ * `source:target:options` syntax splits on — a `:` inside the source would be read as the start of
+ * the target), and must not be the Docker socket file or a directory that contains it (review round
+ * 1, item 1): none of the four mounts this module builds names the socket directly, but a source
+ * that IS `/var/run` (or its ancestor) would still hand the container the socket as a side effect of
+ * mounting its parent.
+ */
+function assertMountSource(source, what) {
+    assertSafeArgvValue(source, what);
+    if (!source.startsWith('/')) {
+        throw new AtomicCoreError('INVALID_ARGUMENT', `${what} must be an absolute path.`, source);
+    }
+    if (source.includes(':')) {
+        throw new AtomicCoreError('INVALID_ARGUMENT', `${what} must not contain ':'.`, source);
+    }
+    if (FORBIDDEN_MOUNT_SOURCES.has(normalizeMountPath(source))) {
+        throw new AtomicCoreError('INVALID_ARGUMENT', `${what} must not be the Docker socket or a directory that contains it.`, source);
+    }
+    return source;
+}
+/**
+ * SELinux's `:z` relabels a directory for every container that shares it — spec `tensorrt-llm-runtime`
+ * ("mounts work under SELinux") requires that this module never relabels anything outside its own
+ * data (design D15). `dataRoot` is the one directory this executor owns; every `:z`-relabeled source
+ * must be it, or under it.
+ */
+function assertWithinDataRoot(source, dataRoot, what) {
+    const normalizedRoot = normalizeMountPath(dataRoot);
+    const normalizedSource = normalizeMountPath(source);
+    const prefix = normalizedRoot === '/' ? '/' : `${normalizedRoot}/`;
+    if (normalizedSource !== normalizedRoot && !normalizedSource.startsWith(prefix)) {
+        // Says what to do (final review M-6): typically a models folder that is a symlink to another
+        // disk, which resolves outside the data folder — the only place this core relabels (design D15).
+        throw new AtomicCoreError('INVALID_ARGUMENT', `The ${what} is outside the data folder (${normalizedRoot}), and under SELinux this core only ` +
+            'relabels its own data folder for containers. A symlink to another disk resolves outside it: ' +
+            'move the model folder into the data folder, or bind-mount the other disk at that path ' +
+            'instead of linking it (mount --bind), so it resolves inside the data folder.', source);
+    }
+}
+/** `repository@digest`, safe only once both halves — and the joined value itself — are validated. */
+export function imageReference(image) {
+    const repository = assertSafeArgvValue(image.repository, 'image repository');
+    const digest = assertDigest(image.digest, 'image digest');
+    return assertSafeArgvValue(`${repository}@${digest}`, 'image reference');
+}
+/** Prepend the forced system-socket connection flag to any docker subcommand argv. */
+export function withSystemSocket(args) {
+    return ['--host', DOCKER_SYSTEM_SOCKET, ...args];
+}
+export function buildInspectImageArgv(image) {
+    return withSystemSocket(['image', 'inspect', imageReference(image)]);
+}
+export function buildInspectContainerArgv(containerId) {
+    return withSystemSocket(['container', 'inspect', assertSafeArgvValue(containerId, 'container id')]);
+}
+export function buildStartArgv(containerId) {
+    return withSystemSocket(['start', assertSafeArgvValue(containerId, 'container id')]);
+}
+/**
+ * `docker stop --time <timeoutSeconds> <id>`. The CLI call itself blocks until the daemon confirms
+ * the container exited (or force-kills it at the timeout and waits for that kill to land) — what a
+ * *caller* of this argv must not assume is that getting an answer at all is guaranteed; `operations.ts`
+ * turns "no answer" into `StopOutcome.confirmed: false` rather than treating a silent exec failure as
+ * a stop.
+ */
+export function buildStopArgv(containerId, timeoutSeconds) {
+    if (!Number.isInteger(timeoutSeconds) || timeoutSeconds < 0) {
+        throw new AtomicCoreError('INVALID_ARGUMENT', 'stop timeout is not a non-negative integer number of seconds.', String(timeoutSeconds));
+    }
+    return withSystemSocket([
+        'stop',
+        '--time',
+        String(timeoutSeconds),
+        assertSafeArgvValue(containerId, 'container id'),
+    ]);
+}
+export function buildRmArgv(containerId) {
+    return withSystemSocket(['rm', assertSafeArgvValue(containerId, 'container id')]);
+}
+/**
+ * `docker ps --all --filter ancestor=<repo@digest>`: every container, running or stopped, created
+ * from this image (or an image built on it) — what removing an engine asks before deleting the
+ * image, so an image someone else's container still uses is left in place (task 2.6).
+ */
+export function buildListContainersByImageArgv(image) {
+    return withSystemSocket([
+        'ps',
+        '--all',
+        '--no-trunc',
+        '--filter',
+        `ancestor=${imageReference(image)}`,
+        '--format',
+        '{{.ID}}',
+    ]);
+}
+/**
+ * `docker image rm <repo@digest>`, never `--force`: only the digest reference this core pulled is
+ * removed, and Docker itself refuses while any container still uses the image. A tag the user added
+ * to the same image keeps the image in place (task 2.6).
+ */
+export function buildRemoveImageArgv(image) {
+    return withSystemSocket(['image', 'rm', imageReference(image)]);
+}
+/**
+ * `--timestamps` prefixes every line with its RFC3339Nano time so `operations.ts`'s `containerLogs`
+ * can merge stdout and stderr back into one chronological log (review round 1, item 2). `'all'` is
+ * docker's own spelling for the whole log.
+ */
+export function buildLogsArgv(containerId, tailLines) {
+    if (tailLines !== 'all' && (!Number.isInteger(tailLines) || tailLines < 1)) {
+        throw new AtomicCoreError('INVALID_ARGUMENT', 'log tail length is not a positive integer.', String(tailLines));
+    }
+    return withSystemSocket([
+        'logs',
+        '--timestamps',
+        '--tail',
+        String(tailLines),
+        assertSafeArgvValue(containerId, 'container id'),
+    ]);
+}
+/**
+ * `-v <source>:<target>:<mode>[,z]`; `:z` only when the caller says this Docker runs with SELinux
+ * (design D15), and only once `source` is confirmed to be inside `dataRoot` — the caller
+ * (`buildCreateModelContainerArgv`) has already refused to reach here with `selinux: true` and no
+ * `dataRoot`.
+ */
+function mountFlag(source, target, mode, selinux, dataRoot, what) {
+    assertMountSource(source, what);
+    if (selinux && dataRoot !== undefined)
+        assertWithinDataRoot(source, dataRoot, what);
+    const options = selinux ? `${mode},z` : mode;
+    return ['-v', `${source}:${target}:${options}`];
+}
+function labelFlags(labels) {
+    const flags = [];
+    for (const [key, value] of Object.entries(labels)) {
+        assertIdentifier(key, `label key ${key}`);
+        flags.push('-l', `atomic.${key}=${assertSafeArgvValue(value, `label ${key}`)}`);
+    }
+    return flags;
+}
+function envFlags(env) {
+    if (!env)
+        return [];
+    const flags = [];
+    for (const [key, value] of Object.entries(env)) {
+        assertIdentifier(key, `env key ${key}`);
+        flags.push('-e', `${key}=${assertEnvValue(value, `env ${key}`)}`);
+    }
+    return flags;
+}
+/**
+ * Command words run *after* the image reference: Docker itself never parses them as its own flags,
+ * it hands them straight to the container's entrypoint, so a leading `-` here is ordinary (e.g. a
+ * program's own `--port 8000` or `-L`) rather than a flag-injection risk. Only the control-character
+ * guard — which protects the argv boundary itself, not "did this look like a docker flag" — still
+ * applies.
+ */
+function commandWords(command) {
+    if (!command)
+        return [];
+    return command.map((word, i) => {
+        if (word === '' || hasControlChars(word))
+            invalidArgument(`command[${i}]`, word);
+        return word;
+    });
+}
+/**
+ * The model container's `docker create` argv (spec `tensorrt-llm-runtime`, requirement "the model
+ * container is isolated"; SELinux per requirement "mounts work under SELinux", design D15). Security
+ * posture is not configurable by the spec: no docker socket mount, no `--privileged`, no
+ * `--ipc=host`, `--restart=no` always, `--pull=never` always (review round 1, item 5 ruling — only
+ * `pull.ts` fetches image bytes), and the port published only on `127.0.0.1`. Every option comes
+ * before the positional image reference and command, so nothing derived from a descriptor or a probe
+ * can land where Docker would read it as the start of a new flag. `spec.selinuxDataRoot` is required
+ * whenever `spec.selinux` is true — see `assertWithinDataRoot`. `spec.user` runs the engine as the
+ * core's own uid:gid rather than the image's root (final review I-1, ADR
+ * 2026-09-29-the-engine-container-runs-as-the-invoking-user).
+ */
+export function buildCreateModelContainerArgv(spec) {
+    const ref = imageReference(spec.image);
+    const gpuUuid = assertGpuUuid(spec.gpuUuid);
+    const host = assertLoopbackHost(spec.publication.host);
+    // 0: Docker picks a free port on the loopback of the machine it runs on (the WSL guest, design D7 of
+    // change `add-tensorrt-llm-windows`), read back afterwards with `docker port`.
+    const hostPort = spec.publication.host_port === 0 ? '' : assertPort(spec.publication.host_port, 'host port');
+    const containerPort = assertPort(spec.publication.container_port, 'container port');
+    const shmSize = assertShmSize(spec.shmSize ?? MODEL_CONTAINER_SHM_SIZE);
+    if (spec.selinux && spec.selinuxDataRoot === undefined) {
+        throw new AtomicCoreError('INVALID_ARGUMENT', 'selinuxDataRoot is required to :z-relabel mounts under SELinux.', 'selinuxDataRoot');
+    }
+    const dataRoot = spec.selinux ? spec.selinuxDataRoot : undefined;
+    const args = [
+        'create',
+        '--restart=no',
+        '--pull=never',
+        `--shm-size=${shmSize}`,
+        ...userFlags(spec.user),
+        '--gpus',
+        `device=${gpuUuid}`,
+        ...mountFlag(spec.mounts.model.source, CONTAINER_MODEL_PATH, 'ro', spec.selinux, dataRoot, 'model mount source'),
+        ...mountFlag(spec.mounts.engineCache.source, CONTAINER_ENGINE_CACHE_PATH, 'rw', spec.selinux, dataRoot, 'engine cache mount source'),
+        ...mountFlag(spec.mounts.entrypoint.source, CONTAINER_ENTRYPOINT_PATH, 'ro', spec.selinux, dataRoot, 'entrypoint mount source'),
+        ...mountFlag(spec.mounts.heartbeat.source, CONTAINER_HEARTBEAT_PATH, 'ro', spec.selinux, dataRoot, 'heartbeat mount source'),
+        // The watchdog script runs through its interpreter, not as an executable: on Windows it reaches
+        // the guest through `\\wsl.localhost` (9p), which keeps no Unix mode, and a direct entrypoint
+        // failed with `exec: "/atomic/entrypoint.sh": permission denied` (live acceptance). Read access is
+        // all `/bin/sh` needs, on every host.
+        '--entrypoint',
+        CONTAINER_ENTRYPOINT_SHELL,
+        '-p',
+        `${host}:${hostPort}:${containerPort}`,
+        ...labelFlags(spec.labels),
+        ...envFlags(spec.env),
+        ref,
+        CONTAINER_ENTRYPOINT_PATH,
+        ...commandWords(spec.command),
+    ];
+    return withSystemSocket(args);
+}
+/** `docker port <id> <port>/tcp`: where a running container's port was published. */
+export function buildPortArgv(containerId, containerPort) {
+    return withSystemSocket([
+        'port',
+        assertSafeArgvValue(containerId, 'container id'),
+        `${assertPort(containerPort, 'container port')}/tcp`,
+    ]);
+}
+/**
+ * A one-shot `docker run --rm` probe (task 2.x's GPU check): no mounts, no port publication, no
+ * restart policy, `--pull=never` (same reasoning as `buildCreateModelContainerArgv`).
+ */
+export function buildRunOnceArgv(spec) {
+    const ref = imageReference(spec.image);
+    const args = ['run', '--rm', '--pull=never'];
+    if (spec.gpuUuid !== undefined) {
+        args.push('--gpus', `device=${assertGpuUuid(spec.gpuUuid)}`);
+    }
+    args.push(...envFlags(spec.env), ref, ...commandWords(spec.command));
+    return withSystemSocket(args);
+}
+//# sourceMappingURL=argv.js.map

package/dist/runtime/container/argv.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"argv.js","sourceRoot":"","sources":["../../../src/runtime/container/argv.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;GAwBG;AACH,OAAO,IAAI,MAAM,WAAW,CAAA;AAC5B,OAAO,EAAE,eAAe,EAAE,MAAM,0BAA0B,CAAA;AAS1D;;;;;GAKG;AACH,MAAM,CAAC,MAAM,kBAAkB,GAAG,sBAAsB,CAAA;AACxD,6GAA6G;AAC7G,MAAM,CAAC,MAAM,oBAAoB,GAAG,UAAU,kBAAkB,EAAE,CAAA;AAElE,6NAA6N;AAC7N,MAAM,uBAAuB,GAAG,IAAI,GAAG,CAAC,CAAC,sBAAsB,EAAE,kBAAkB,EAAE,UAAU,EAAE,MAAM,CAAC,CAAC,CAAA;AAEzG,oGAAoG;AACpG,MAAM,CAAC,MAAM,oBAAoB,GAAG,eAAe,CAAA;AACnD,MAAM,CAAC,MAAM,2BAA2B,GAAG,sBAAsB,CAAA;AACjE,MAAM,CAAC,MAAM,yBAAyB,GAAG,uBAAuB,CAAA;AAChE,wEAAwE;AACxE,MAAM,CAAC,MAAM,0BAA0B,GAAG,SAAS,CAAA;AACnD,MAAM,CAAC,MAAM,wBAAwB,GAAG,mBAAmB,CAAA;AAE3D;;;;;GAKG;AACH,MAAM,CAAC,MAAM,wBAAwB,GAAG,IAAI,CAAA;AAE5C,wGAAwG;AACxG,MAAM,CAAC,MAAM,mCAAmC,GAAG,EAAE,CAAA;AAErD,MAAM,cAAc,GAAG,uBAAuB,CAAA;AAC9C,MAAM,aAAa,GAAG,QAAQ,CAAA;AAC9B;6FAC6F;AAC7F,MAAM,kBAAkB,GAAG,4BAA4B,CAAA;AACvD,6FAA6F;AAC7F,MAAM,gBAAgB,GAAG,2BAA2B,CAAA;AACpD,oFAAoF;AACpF,MAAM,gBAAgB,GAAG,mBAAmB,CAAA;AAC5C,MAAM,qBAAqB,GAAG,WAAW,CAAA;AAEzC,SAAS,eAAe,CAAC,IAAY,EAAE,KAAa;IAClD,MAAM,IAAI,eAAe,CAAC,kBAAkB,EAAE,GAAG,IAAI,iCAAiC,EAAE,KAAK,CAAC,CAAA;AAChG,CAAC;AAED,4GAA4G;AAC5G,SAAS,eAAe,CAAC,KAAa;IACpC,OAAO,KAAK,CAAC,QAAQ,CAAC,QAAQ,CAAC,IAAI,aAAa,CAAC,IAAI,CAAC,KAAK,CAAC,CAAA;AAC9D,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,mBAAmB,CAAC,KAAa,EAAE,IAAY;IAC7D,IAAI,KAAK,KAAK,EAAE;QAAE,eAAe,CAAC,IAAI,EAAE,KAAK,CAAC,CAAA;IAC9C,IAAI,KAAK,CAAC,UAAU,CAAC,GAAG,CAAC;QAAE,eAAe,CAAC,IAAI,EAAE,KAAK,CAAC,CAAA;IACvD,IAAI,eAAe,CAAC,KAAK,CAAC;QAAE,eAAe,CAAC,IAAI,EAAE,KAAK,CAAC,CAAA;IACxD,OAAO,KAAK,CAAA;AACd,CAAC;AAED,oGAAoG;AACpG,MAAM,UAAU,YAAY,CAAC,KAAa,EAAE,IAAY;IACtD,IAAI,CAAC,cAAc,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC;QAChC,MAAM,IAAI,eAAe,CAAC,kBAAkB,EAAE,GAAG,IAAI,0BAA0B,EAAE,KAAK,CAAC,CAAA;IACzF,CAAC;IACD,OAAO,KAAK,CAAA;AACd,CAAC;AAED,SAAS,UAAU,CAAC,KAAa,EAAE,IAAY;IAC7C,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,KAAK,CAAC,IAAI,KAAK,GAAG,CAAC,IAAI,KAAK,GAAG,KAAK,EAAE,CAAC;QAC3D,MAAM,IAAI,eAAe,CAAC,kBAAkB,EAAE,GAAG,IAAI,2BAA2B,EAAE,MAAM,CAAC,KAAK,CAAC,CAAC,CAAA;IAClG,CAAC;IACD,OAAO,KAAK,CAAA;AACd,CAAC;AAED,qGAAqG;AACrG,SAAS,kBAAkB,CAAC,IAAY;IACtC,IAAI,IAAI,KAAK,qBAAqB,EAAE,CAAC;QACnC,MAAM,IAAI,eAAe,CACvB,gBAAgB,EAChB,kDAAkD,qBAAqB,GAAG,EAC1E,IAAI,CACL,CAAA;IACH,CAAC;IACD,OAAO,IAAI,CAAA;AACb,CAAC;AAED,yFAAyF;AACzF,SAAS,gBAAgB,CAAC,KAAa,EAAE,IAAY;IACnD,IAAI,CAAC,kBAAkB,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC;QACpC,MAAM,IAAI,eAAe,CAAC,kBAAkB,EAAE,GAAG,IAAI,6BAA6B,EAAE,KAAK,CAAC,CAAA;IAC5F,CAAC;IACD,OAAO,KAAK,CAAA;AACd,CAAC;AAED;;;;;;GAMG;AACH,SAAS,cAAc,CAAC,KAAa,EAAE,IAAY;IACjD,IAAI,eAAe,CAAC,KAAK,CAAC;QAAE,eAAe,CAAC,IAAI,EAAE,KAAK,CAAC,CAAA;IACxD,OAAO,KAAK,CAAA;AACd,CAAC;AAED,SAAS,aAAa,CAAC,KAAa;IAClC,IAAI,CAAC,gBAAgB,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC;QAClC,MAAM,IAAI,eAAe,CAAC,kBAAkB,EAAE,8CAA8C,EAAE,KAAK,CAAC,CAAA;IACtG,CAAC;IACD,OAAO,KAAK,CAAA;AACd,CAAC;AAED,mHAAmH;AACnH,SAAS,aAAa,CAAC,KAAa;IAClC,MAAM,KAAK,GAAG,gBAAgB,CAAC,IAAI,CAAC,KAAK,CAAC,CAAA;IAC1C,IAAI,CAAC,KAAK,EAAE,CAAC;QACX,MAAM,IAAI,eAAe,CAAC,kBAAkB,EAAE,iDAAiD,EAAE,KAAK,CAAC,CAAA;IACzG,CAAC;IACD,MAAM,CAAC,EAAE,MAAM,EAAE,IAAI,CAAC,GAAG,KAAqD,CAAA;IAC9E,MAAM,MAAM,GAAG,MAAM,CAAC,MAAM,CAAC,CAAA;IAC7B,MAAM,GAAG,GAAG,IAAI,KAAK,GAAG,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,KAAK,GAAG,CAAC,CAAC,CAAC,MAAM,GAAG,IAAI,CAAC,CAAC,CAAC,MAAM,GAAG,CAAC,IAAI,GAAG,IAAI,CAAC,CAAA;IACzF,IAAI,GAAG,GAAG,mCAAmC,EAAE,CAAC;QAC9C,MAAM,IAAI,eAAe,CACvB,kBAAkB,EAClB,4BAA4B,mCAAmC,IAAI,EACnE,KAAK,CACN,CAAA;IACH,CAAC;IACD,OAAO,KAAK,CAAA;AACd,CAAC;AAED,oGAAoG;AACpG,SAAS,YAAY,CAAC,KAAa,EAAE,IAAY;IAC/C,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,KAAK,CAAC,IAAI,KAAK,GAAG,CAAC,EAAE,CAAC;QAC9C,MAAM,IAAI,eAAe,CAAC,kBAAkB,EAAE,GAAG,IAAI,oCAAoC,EAAE,MAAM,CAAC,KAAK,CAAC,CAAC,CAAA;IAC3G,CAAC;IACD,OAAO,MAAM,CAAC,KAAK,CAAC,CAAA;AACtB,CAAC;AAED,8DAA8D;AAC9D,SAAS,SAAS,CAAC,IAA+B;IAChD,IAAI,IAAI,KAAK,SAAS;QAAE,OAAO,EAAE,CAAA;IACjC,OAAO,CAAC,QAAQ,EAAE,GAAG,YAAY,CAAC,IAAI,CAAC,GAAG,EAAE,eAAe,CAAC,IAAI,YAAY,CAAC,IAAI,CAAC,GAAG,EAAE,eAAe,CAAC,EAAE,CAAC,CAAA;AAC5G,CAAC;AAED,uHAAuH;AACvH,SAAS,kBAAkB,CAAC,KAAa;IACvC,MAAM,UAAU,GAAG,IAAI,CAAC,KAAK,CAAC,SAAS,CAAC,KAAK,CAAC,CAAA;IAC9C,OAAO,UAAU,CAAC,MAAM,GAAG,CAAC,IAAI,UAAU,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,UAAU,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,UAAU,CAAA;AACjG,CAAC;AAED;;;;;;;;GAQG;AACH,SAAS,iBAAiB,CAAC,MAAc,EAAE,IAAY;IACrD,mBAAmB,CAAC,MAAM,EAAE,IAAI,CAAC,CAAA;IACjC,IAAI,CAAC,MAAM,CAAC,UAAU,CAAC,GAAG,CAAC,EAAE,CAAC;QAC5B,MAAM,IAAI,eAAe,CAAC,kBAAkB,EAAE,GAAG,IAAI,4BAA4B,EAAE,MAAM,CAAC,CAAA;IAC5F,CAAC;IACD,IAAI,MAAM,CAAC,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC;QACzB,MAAM,IAAI,eAAe,CAAC,kBAAkB,EAAE,GAAG,IAAI,wBAAwB,EAAE,MAAM,CAAC,CAAA;IACxF,CAAC;IACD,IAAI,uBAAuB,CAAC,GAAG,CAAC,kBAAkB,CAAC,MAAM,CAAC,CAAC,EAAE,CAAC;QAC5D,MAAM,IAAI,eAAe,CACvB,kBAAkB,EAClB,GAAG,IAAI,iEAAiE,EACxE,MAAM,CACP,CAAA;IACH,CAAC;IACD,OAAO,MAAM,CAAA;AACf,CAAC;AAED;;;;;GAKG;AACH,SAAS,oBAAoB,CAAC,MAAc,EAAE,QAAgB,EAAE,IAAY;IAC1E,MAAM,cAAc,GAAG,kBAAkB,CAAC,QAAQ,CAAC,CAAA;IACnD,MAAM,gBAAgB,GAAG,kBAAkB,CAAC,MAAM,CAAC,CAAA;IACnD,MAAM,MAAM,GAAG,cAAc,KAAK,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,cAAc,GAAG,CAAA;IAClE,IAAI,gBAAgB,KAAK,cAAc,IAAI,CAAC,gBAAgB,CAAC,UAAU,CAAC,MAAM,CAAC,EAAE,CAAC;QAChF,6FAA6F;QAC7F,iGAAiG;QACjG,MAAM,IAAI,eAAe,CACvB,kBAAkB,EAClB,OAAO,IAAI,gCAAgC,cAAc,sCAAsC;YAC7F,8FAA8F;YAC9F,wFAAwF;YACxF,8EAA8E,EAChF,MAAM,CACP,CAAA;IACH,CAAC;AACH,CAAC;AAED,qGAAqG;AACrG,MAAM,UAAU,cAAc,CAAC,KAAe;IAC5C,MAAM,UAAU,GAAG,mBAAmB,CAAC,KAAK,CAAC,UAAU,EAAE,kBAAkB,CAAC,CAAA;IAC5E,MAAM,MAAM,GAAG,YAAY,CAAC,KAAK,CAAC,MAAM,EAAE,cAAc,CAAC,CAAA;IACzD,OAAO,mBAAmB,CAAC,GAAG,UAAU,IAAI,MAAM,EAAE,EAAE,iBAAiB,CAAC,CAAA;AAC1E,CAAC;AAED,sFAAsF;AACtF,MAAM,UAAU,gBAAgB,CAAC,IAAuB;IACtD,OAAO,CAAC,QAAQ,EAAE,oBAAoB,EAAE,GAAG,IAAI,CAAC,CAAA;AAClD,CAAC;AAED,MAAM,UAAU,qBAAqB,CAAC,KAAe;IACnD,OAAO,gBAAgB,CAAC,CAAC,OAAO,EAAE,SAAS,EAAE,cAAc,CAAC,KAAK,CAAC,CAAC,CAAC,CAAA;AACtE,CAAC;AAED,MAAM,UAAU,yBAAyB,CAAC,WAAmB;IAC3D,OAAO,gBAAgB,CAAC,CAAC,WAAW,EAAE,SAAS,EAAE,mBAAmB,CAAC,WAAW,EAAE,cAAc,CAAC,CAAC,CAAC,CAAA;AACrG,CAAC;AAED,MAAM,UAAU,cAAc,CAAC,WAAmB;IAChD,OAAO,gBAAgB,CAAC,CAAC,OAAO,EAAE,mBAAmB,CAAC,WAAW,EAAE,cAAc,CAAC,CAAC,CAAC,CAAA;AACtF,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,aAAa,CAAC,WAAmB,EAAE,cAAsB;IACvE,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,cAAc,CAAC,IAAI,cAAc,GAAG,CAAC,EAAE,CAAC;QAC5D,MAAM,IAAI,eAAe,CACvB,kBAAkB,EAClB,+DAA+D,EAC/D,MAAM,CAAC,cAAc,CAAC,CACvB,CAAA;IACH,CAAC;IACD,OAAO,gBAAgB,CAAC;QACtB,MAAM;QACN,QAAQ;QACR,MAAM,CAAC,cAAc,CAAC;QACtB,mBAAmB,CAAC,WAAW,EAAE,cAAc,CAAC;KACjD,CAAC,CAAA;AACJ,CAAC;AAED,MAAM,UAAU,WAAW,CAAC,WAAmB;IAC7C,OAAO,gBAAgB,CAAC,CAAC,IAAI,EAAE,mBAAmB,CAAC,WAAW,EAAE,cAAc,CAAC,CAAC,CAAC,CAAA;AACnF,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,8BAA8B,CAAC,KAAe;IAC5D,OAAO,gBAAgB,CAAC;QACtB,IAAI;QACJ,OAAO;QACP,YAAY;QACZ,UAAU;QACV,YAAY,cAAc,CAAC,KAAK,CAAC,EAAE;QACnC,UAAU;QACV,SAAS;KACV,CAAC,CAAA;AACJ,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,oBAAoB,CAAC,KAAe;IAClD,OAAO,gBAAgB,CAAC,CAAC,OAAO,EAAE,IAAI,EAAE,cAAc,CAAC,KAAK,CAAC,CAAC,CAAC,CAAA;AACjE,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,aAAa,CAAC,WAAmB,EAAE,SAAyB;IAC1E,IAAI,SAAS,KAAK,KAAK,IAAI,CAAC,CAAC,MAAM,CAAC,SAAS,CAAC,SAAS,CAAC,IAAI,SAAS,GAAG,CAAC,CAAC,EAAE,CAAC;QAC3E,MAAM,IAAI,eAAe,CACvB,kBAAkB,EAClB,4CAA4C,EAC5C,MAAM,CAAC,SAAS,CAAC,CAClB,CAAA;IACH,CAAC;IACD,OAAO,gBAAgB,CAAC;QACtB,MAAM;QACN,cAAc;QACd,QAAQ;QACR,MAAM,CAAC,SAAS,CAAC;QACjB,mBAAmB,CAAC,WAAW,EAAE,cAAc,CAAC;KACjD,CAAC,CAAA;AACJ,CAAC;AAED;;;;;GAKG;AACH,SAAS,SAAS,CAChB,MAAc,EACd,MAAc,EACd,IAAiB,EACjB,OAAgB,EAChB,QAA4B,EAC5B,IAAY;IAEZ,iBAAiB,CAAC,MAAM,EAAE,IAAI,CAAC,CAAA;IAC/B,IAAI,OAAO,IAAI,QAAQ,KAAK,SAAS;QAAE,oBAAoB,CAAC,MAAM,EAAE,QAAQ,EAAE,IAAI,CAAC,CAAA;IACnF,MAAM,OAAO,GAAG,OAAO,CAAC,CAAC,CAAC,GAAG,IAAI,IAAI,CAAC,CAAC,CAAC,IAAI,CAAA;IAC5C,OAAO,CAAC,IAAI,EAAE,GAAG,MAAM,IAAI,MAAM,IAAI,OAAO,EAAE,CAAC,CAAA;AACjD,CAAC;AAED,SAAS,UAAU,CAAC,MAA4B;IAC9C,MAAM,KAAK,GAAa,EAAE,CAAA;IAC1B,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC;QAClD,gBAAgB,CAAC,GAAG,EAAE,aAAa,GAAG,EAAE,CAAC,CAAA;QACzC,KAAK,CAAC,IAAI,CAAC,IAAI,EAAE,UAAU,GAAG,IAAI,mBAAmB,CAAC,KAAK,EAAE,SAAS,GAAG,EAAE,CAAC,EAAE,CAAC,CAAA;IACjF,CAAC;IACD,OAAO,KAAK,CAAA;AACd,CAAC;AAED,SAAS,QAAQ,CAAC,GAAuC;IACvD,IAAI,CAAC,GAAG;QAAE,OAAO,EAAE,CAAA;IACnB,MAAM,KAAK,GAAa,EAAE,CAAA;IAC1B,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC;QAC/C,gBAAgB,CAAC,GAAG,EAAE,WAAW,GAAG,EAAE,CAAC,CAAA;QACvC,KAAK,CAAC,IAAI,CAAC,IAAI,EAAE,GAAG,GAAG,IAAI,cAAc,CAAC,KAAK,EAAE,OAAO,GAAG,EAAE,CAAC,EAAE,CAAC,CAAA;IACnE,CAAC;IACD,OAAO,KAAK,CAAA;AACd,CAAC;AAED;;;;;;GAMG;AACH,SAAS,YAAY,CAAC,OAA6B;IACjD,IAAI,CAAC,OAAO;QAAE,OAAO,EAAE,CAAA;IACvB,OAAO,OAAO,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,CAAC,EAAE,EAAE;QAC7B,IAAI,IAAI,KAAK,EAAE,IAAI,eAAe,CAAC,IAAI,CAAC;YAAE,eAAe,CAAC,WAAW,CAAC,GAAG,EAAE,IAAI,CAAC,CAAA;QAChF,OAAO,IAAI,CAAA;IACb,CAAC,CAAC,CAAA;AACJ,CAAC;AAED;;;;;;;;;;;GAWG;AACH,MAAM,UAAU,6BAA6B,CAAC,IAA8B;IAC1E,MAAM,GAAG,GAAG,cAAc,CAAC,IAAI,CAAC,KAAK,CAAC,CAAA;IACtC,MAAM,OAAO,GAAG,aAAa,CAAC,IAAI,CAAC,OAAO,CAAC,CAAA;IAC3C,MAAM,IAAI,GAAG,kBAAkB,CAAC,IAAI,CAAC,WAAW,CAAC,IAAI,CAAC,CAAA;IACtD,qGAAqG;IACrG,+EAA+E;IAC/E,MAAM,QAAQ,GAAG,IAAI,CAAC,WAAW,CAAC,SAAS,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,UAAU,CAAC,IAAI,CAAC,WAAW,CAAC,SAAS,EAAE,WAAW,CAAC,CAAA;IAC5G,MAAM,aAAa,GAAG,UAAU,CAAC,IAAI,CAAC,WAAW,CAAC,cAAc,EAAE,gBAAgB,CAAC,CAAA;IACnF,MAAM,OAAO,GAAG,aAAa,CAAC,IAAI,CAAC,OAAO,IAAI,wBAAwB,CAAC,CAAA;IACvE,IAAI,IAAI,CAAC,OAAO,IAAI,IAAI,CAAC,eAAe,KAAK,SAAS,EAAE,CAAC;QACvD,MAAM,IAAI,eAAe,CACvB,kBAAkB,EAClB,iEAAiE,EACjE,iBAAiB,CAClB,CAAA;IACH,CAAC;IACD,MAAM,QAAQ,GAAG,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,IAAI,CAAC,eAAe,CAAC,CAAC,CAAC,SAAS,CAAA;IAEhE,MAAM,IAAI,GAAa;QACrB,QAAQ;QACR,cAAc;QACd,cAAc;QACd,cAAc,OAAO,EAAE;QACvB,GAAG,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC;QACvB,QAAQ;QACR,UAAU,OAAO,EAAE;QACnB,GAAG,SAAS,CACV,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,MAAM,EACxB,oBAAoB,EACpB,IAAI,EACJ,IAAI,CAAC,OAAO,EACZ,QAAQ,EACR,oBAAoB,CACrB;QACD,GAAG,SAAS,CACV,IAAI,CAAC,MAAM,CAAC,WAAW,CAAC,MAAM,EAC9B,2BAA2B,EAC3B,IAAI,EACJ,IAAI,CAAC,OAAO,EACZ,QAAQ,EACR,2BAA2B,CAC5B;QACD,GAAG,SAAS,CACV,IAAI,CAAC,MAAM,CAAC,UAAU,CAAC,MAAM,EAC7B,yBAAyB,EACzB,IAAI,EACJ,IAAI,CAAC,OAAO,EACZ,QAAQ,EACR,yBAAyB,CAC1B;QACD,GAAG,SAAS,CACV,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,MAAM,EAC5B,wBAAwB,EACxB,IAAI,EACJ,IAAI,CAAC,OAAO,EACZ,QAAQ,EACR,wBAAwB,CACzB;QACD,gGAAgG;QAChG,8FAA8F;QAC9F,mGAAmG;QACnG,sCAAsC;QACtC,cAAc;QACd,0BAA0B;QAC1B,IAAI;QACJ,GAAG,IAAI,IAAI,QAAQ,IAAI,aAAa,EAAE;QACtC,GAAG,UAAU,CAAC,IAAI,CAAC,MAAM,CAAC;QAC1B,GAAG,QAAQ,CAAC,IAAI,CAAC,GAAG,CAAC;QACrB,GAAG;QACH,yBAAyB;QACzB,GAAG,YAAY,CAAC,IAAI,CAAC,OAAO,CAAC;KAC9B,CAAA;IACD,OAAO,gBAAgB,CAAC,IAAI,CAAC,CAAA;AAC/B,CAAC;AAED,qFAAqF;AACrF,MAAM,UAAU,aAAa,CAAC,WAAmB,EAAE,aAAqB;IACtE,OAAO,gBAAgB,CAAC;QACtB,MAAM;QACN,mBAAmB,CAAC,WAAW,EAAE,cAAc,CAAC;QAChD,GAAG,UAAU,CAAC,aAAa,EAAE,gBAAgB,CAAC,MAAM;KACrD,CAAC,CAAA;AACJ,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,gBAAgB,CAAC,IAAoB;IACnD,MAAM,GAAG,GAAG,cAAc,CAAC,IAAI,CAAC,KAAK,CAAC,CAAA;IACtC,MAAM,IAAI,GAAa,CAAC,KAAK,EAAE,MAAM,EAAE,cAAc,CAAC,CAAA;IACtD,IAAI,IAAI,CAAC,OAAO,KAAK,SAAS,EAAE,CAAC;QAC/B,IAAI,CAAC,IAAI,CAAC,QAAQ,EAAE,UAAU,aAAa,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC,CAAA;IAC9D,CAAC;IACD,IAAI,CAAC,IAAI,CAAC,GAAG,QAAQ,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,GAAG,EAAE,GAAG,YAAY,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,CAAA;IACpE,OAAO,gBAAgB,CAAC,IAAI,CAAC,CAAA;AAC/B,CAAC"}

package/dist/runtime/container/docker-binary.d.ts

@@ -0,0 +1,4 @@
+/** System locations of the docker CLI, in the order they are tried. Never a relative path. */
+export declare const DOCKER_BINARY_CANDIDATES: readonly string[];
+/** The first candidate that is an executable file, or null when this host has none of them. */
+export declare function resolveDockerBinary(candidates?: readonly string[]): Promise<string | null>;

package/dist/runtime/container/docker-binary.js

@@ -0,0 +1,34 @@
+/**
+ * Where the `docker` CLI lives, resolved once at core startup (task 2.12; task 2.8 review carry-
+ * forward). Every model-container command runs this absolute path rather than `docker` looked up on
+ * `PATH`: core's `PATH` is whatever the app or shell that started it had, and a directory earlier on
+ * it (a user's `~/bin`, a project's `node_modules/.bin`) could put a different program under that
+ * name, and core would hand it the model container's whole configuration. The distributions the
+ * install recipe supports all ship the CLI in one of the fixed system directories below.
+ */
+import { constants } from 'node:fs';
+import { access, stat } from 'node:fs/promises';
+/** System locations of the docker CLI, in the order they are tried. Never a relative path. */
+export const DOCKER_BINARY_CANDIDATES = [
+    '/usr/bin/docker',
+    '/usr/local/bin/docker',
+    '/bin/docker',
+];
+async function isExecutableFile(path) {
+    try {
+        await access(path, constants.X_OK);
+        return (await stat(path)).isFile();
+    }
+    catch {
+        return false;
+    }
+}
+/** The first candidate that is an executable file, or null when this host has none of them. */
+export async function resolveDockerBinary(candidates = DOCKER_BINARY_CANDIDATES) {
+    for (const candidate of candidates) {
+        if (await isExecutableFile(candidate))
+            return candidate;
+    }
+    return null;
+}
+//# sourceMappingURL=docker-binary.js.map

package/dist/runtime/container/docker-binary.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"docker-binary.js","sourceRoot":"","sources":["../../../src/runtime/container/docker-binary.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AACH,OAAO,EAAE,SAAS,EAAE,MAAM,SAAS,CAAA;AACnC,OAAO,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,kBAAkB,CAAA;AAE/C,8FAA8F;AAC9F,MAAM,CAAC,MAAM,wBAAwB,GAAsB;IACzD,iBAAiB;IACjB,uBAAuB;IACvB,aAAa;CACd,CAAA;AAED,KAAK,UAAU,gBAAgB,CAAC,IAAY;IAC1C,IAAI,CAAC;QACH,MAAM,MAAM,CAAC,IAAI,EAAE,SAAS,CAAC,IAAI,CAAC,CAAA;QAClC,OAAO,CAAC,MAAM,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,MAAM,EAAE,CAAA;IACpC,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,KAAK,CAAA;IACd,CAAC;AACH,CAAC;AAED,+FAA+F;AAC/F,MAAM,CAAC,KAAK,UAAU,mBAAmB,CACvC,aAAgC,wBAAwB;IAExD,KAAK,MAAM,SAAS,IAAI,UAAU,EAAE,CAAC;QACnC,IAAI,MAAM,gBAAgB,CAAC,SAAS,CAAC;YAAE,OAAO,SAAS,CAAA;IACzD,CAAC;IACD,OAAO,IAAI,CAAA;AACb,CAAC"}

package/dist/runtime/container/env.d.ts

@@ -0,0 +1,17 @@
+/** Removed outright: `--host` (`argv.ts`) already replaces what these two would otherwise select. */
+export declare const STRIPPED_DOCKER_ENV_VARS: readonly ["DOCKER_HOST", "DOCKER_CONTEXT"];
+export interface DockerChildEnvOptions {
+    /** An empty, core-owned directory the docker CLI reads as `$DOCKER_CONFIG`. Not created by this function — call `ensureDockerConfigDir` first. */
+    dockerConfigDir: string;
+    /** Defaults to `process.env`. Never mutated. */
+    base?: NodeJS.ProcessEnv;
+}
+/** A copy of `options.base` (default `process.env`) with `DOCKER_HOST`/`DOCKER_CONTEXT` removed and `DOCKER_CONFIG` pointed at `options.dockerConfigDir`. */
+export declare function dockerChildEnv(options: DockerChildEnvOptions): NodeJS.ProcessEnv;
+/**
+ * Creates `dir` (and any missing parents) if it does not already exist, then atomically writes an
+ * empty `config.json` into it (write to `config.json.tmp`, then `rename` over `config.json`) — every
+ * call re-asserts emptiness, rather than trusting that nothing has written there since the last call.
+ * Idempotent: safe to call before every docker invocation.
+ */
+export declare function ensureDockerConfigDir(dir: string): Promise<void>;

package/dist/runtime/container/env.js

@@ -0,0 +1,52 @@
+/**
+ * The child environment for a docker CLI call.
+ *
+ * Review round 1, item 5 (RULING): the first version of this file only *deleted* `DOCKER_CONFIG`
+ * from the child's environment, on the theory that an absent variable means "no config". It does
+ * not: with `DOCKER_CONFIG` unset, the docker CLI falls back to `$HOME/.docker/config.json` — the
+ * user's own config, which can carry a `credsStore` (a credential helper the CLI would invoke on the
+ * user's behalf) and `proxies` (`HttpProxy`/`HttpsProxy`/`NoProxy` settings the CLI injects as env
+ * vars into every container it creates). Deleting the variable does not isolate the call; it makes
+ * the call adopt whatever the user's own Docker identity happens to be. The fix is to *set*
+ * `DOCKER_CONFIG` to an empty directory this module owns (injectable — production wiring picks a
+ * real path under core's data root; tests point it at a temp directory), so the CLI reads that empty
+ * directory (no `config.json` inside → no creds, no injected proxies) instead of falling back.
+ * `ensureDockerConfigDir` creates it if missing; `--host` (`argv.ts`) separately forces the system
+ * socket, so between the two, no user Docker context is ever consulted.
+ *
+ * Review round 2, item 3 (controller ruling): an empty *directory* alone is not a guarantee of
+ * emptiness — something else could later write a `config.json` into it (another tool, a stray copy,
+ * a future bug elsewhere in this codebase), and the docker CLI would read whatever showed up.
+ * `ensureDockerConfigDir` now also atomically writes `config.json` containing `{}` into the
+ * directory on every call (write to a `.tmp` file, then `rename` over the real one — the same
+ * write-then-rename convention as `src/settings/store.ts`'s `persist`), so the directory's content is
+ * guaranteed, in code, not just by nothing having gotten there yet.
+ */
+import { mkdir, rename, writeFile } from 'node:fs/promises';
+import { join } from 'node:path';
+/** Removed outright: `--host` (`argv.ts`) already replaces what these two would otherwise select. */
+export const STRIPPED_DOCKER_ENV_VARS = ['DOCKER_HOST', 'DOCKER_CONTEXT'];
+/** A copy of `options.base` (default `process.env`) with `DOCKER_HOST`/`DOCKER_CONTEXT` removed and `DOCKER_CONFIG` pointed at `options.dockerConfigDir`. */
+export function dockerChildEnv(options) {
+    const env = { ...(options.base ?? process.env) };
+    for (const key of STRIPPED_DOCKER_ENV_VARS)
+        delete env[key];
+    env['DOCKER_CONFIG'] = options.dockerConfigDir;
+    return env;
+}
+/** The docker CLI's config file, forced empty (review round 2, item 3): no `credsStore`, no `proxies`. */
+const EMPTY_DOCKER_CONFIG_JSON = '{}\n';
+/**
+ * Creates `dir` (and any missing parents) if it does not already exist, then atomically writes an
+ * empty `config.json` into it (write to `config.json.tmp`, then `rename` over `config.json`) — every
+ * call re-asserts emptiness, rather than trusting that nothing has written there since the last call.
+ * Idempotent: safe to call before every docker invocation.
+ */
+export async function ensureDockerConfigDir(dir) {
+    await mkdir(dir, { recursive: true });
+    const configPath = join(dir, 'config.json');
+    const tmpPath = `${configPath}.tmp`;
+    await writeFile(tmpPath, EMPTY_DOCKER_CONFIG_JSON, { encoding: 'utf8', mode: 0o600 });
+    await rename(tmpPath, configPath);
+}
+//# sourceMappingURL=env.js.map

package/dist/runtime/container/env.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"env.js","sourceRoot":"","sources":["../../../src/runtime/container/env.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;GAuBG;AACH,OAAO,EAAE,KAAK,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,kBAAkB,CAAA;AAC3D,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAA;AAEhC,qGAAqG;AACrG,MAAM,CAAC,MAAM,wBAAwB,GAAG,CAAC,aAAa,EAAE,gBAAgB,CAAU,CAAA;AASlF,6JAA6J;AAC7J,MAAM,UAAU,cAAc,CAAC,OAA8B;IAC3D,MAAM,GAAG,GAAsB,EAAE,GAAG,CAAC,OAAO,CAAC,IAAI,IAAI,OAAO,CAAC,GAAG,CAAC,EAAE,CAAA;IACnE,KAAK,MAAM,GAAG,IAAI,wBAAwB;QAAE,OAAO,GAAG,CAAC,GAAG,CAAC,CAAA;IAC3D,GAAG,CAAC,eAAe,CAAC,GAAG,OAAO,CAAC,eAAe,CAAA;IAC9C,OAAO,GAAG,CAAA;AACZ,CAAC;AAED,0GAA0G;AAC1G,MAAM,wBAAwB,GAAG,MAAM,CAAA;AAEvC;;;;;GAKG;AACH,MAAM,CAAC,KAAK,UAAU,qBAAqB,CAAC,GAAW;IACrD,MAAM,KAAK,CAAC,GAAG,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAA;IACrC,MAAM,UAAU,GAAG,IAAI,CAAC,GAAG,EAAE,aAAa,CAAC,CAAA;IAC3C,MAAM,OAAO,GAAG,GAAG,UAAU,MAAM,CAAA;IACnC,MAAM,SAAS,CAAC,OAAO,EAAE,wBAAwB,EAAE,EAAE,QAAQ,EAAE,MAAM,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAA;IACrF,MAAM,MAAM,CAAC,OAAO,EAAE,UAAU,CAAC,CAAA;AACnC,CAAC"}

package/dist/runtime/container/exec.d.ts

@@ -0,0 +1,27 @@
+import type { DockerCommandResult, DockerExec, DockerExecCallOptions } from './types.js';
+export interface DockerCommandOptions {
+    /** How long one docker call may take before it counts as unanswered. Default 30 s; a per-call `timeoutMs` overrides it for just that call. */
+    timeoutMs?: number;
+    /**
+     * Per stream (so stdout and stderr together hold up to twice this). Past it the whole lines within
+     * the first half and within the last half are kept and the middle is dropped; the command still
+     * counts as answered. Default 4 MiB.
+     */
+    maxOutputBytes?: number;
+    env?: NodeJS.ProcessEnv;
+    /** An empty, core-owned directory the docker CLI reads as `$DOCKER_CONFIG` (review round 1, item 5 ruling). Created if missing before every call. */
+    dockerConfigDir: string;
+}
+/** `spawn(exe, args)` with no shell, a sanitized environment (`env.ts`), a deadline and a bounded buffer. */
+export declare function runDockerCommand(exe: string, args: string[], options: DockerCommandOptions, callOptions?: DockerExecCallOptions): Promise<DockerCommandResult>;
+export interface CreateDockerExecOptions extends DockerCommandOptions {
+    /** The docker executable to run. Defaults to `'docker'` on `PATH`; tests inject a fake binary. */
+    dockerPath?: string;
+}
+/**
+ * The production `DockerExec`: real `docker`, the system socket already forced by `argv.ts`'s
+ * builders. `dockerConfigDir` is required — see `env.ts`'s doc comment for why this module never
+ * runs `docker` without one. The returned function accepts a per-call `DockerExecCallOptions`
+ * (review round 1, item 3): `stopContainer` uses it to extend the deadline past a long `--time`.
+ */
+export declare function createDockerExec(options: CreateDockerExecOptions): DockerExec;