@b4run/sandbox 0.8.28

package/dist/kubernetes/default-kube-client.js

@@ -0,0 +1,331 @@
+/** Default KubeClient backed by the real @kubernetes/client-node (v1.x) API.
+ * KubeConfig.loadFromDefault() auto-detects in-cluster ServiceAccount token vs
+ * ~/.kube/config. Unit tests never construct this — they inject a fake KubeClient. */
+import { Readable, Writable } from "node:stream";
+import { ApiException, AuthorizationV1Api, CoreV1Api, Exec, KubeConfig, NetworkingV1Api, } from "@kubernetes/client-node";
+import { KubeAuthorizationReviewError, } from "./kube-client.js";
+const CONTAINER_NAME = "sandbox";
+function statusCode(error) {
+    return error instanceof ApiException ? error.code : undefined;
+}
+/** Writable sink that accumulates written chunks into a single string, for
+ * capturing exec stdout/stderr without piping to a real stream destination. */
+function collect() {
+    const chunks = [];
+    const stream = new Writable({
+        write(chunk, _encoding, callback) {
+            chunks.push(Buffer.isBuffer(chunk) ? chunk : Buffer.from(chunk));
+            callback();
+        },
+    });
+    return { stream, text: () => Buffer.concat(chunks).toString("utf8") };
+}
+function toPodManifest(namespace, s) {
+    const mounts = [
+        { name: "workspace", mountPath: "/workspace" },
+        ...(s.readOnlyRootFilesystem
+            ? [
+                { name: "tmp", mountPath: "/tmp" },
+                { name: "run", mountPath: "/run" },
+            ]
+            : []),
+    ];
+    const volumes = [
+        { name: "workspace", persistentVolumeClaim: { claimName: s.pvcName } },
+        ...(s.readOnlyRootFilesystem
+            ? [
+                { name: "tmp", emptyDir: {} },
+                { name: "run", emptyDir: {} },
+            ]
+            : []),
+    ];
+    return {
+        metadata: { name: s.name, namespace, labels: { ...s.labels } },
+        spec: {
+            restartPolicy: "Always",
+            automountServiceAccountToken: s.automountServiceAccountToken,
+            securityContext: s.podSecurityContext,
+            containers: [
+                {
+                    name: CONTAINER_NAME,
+                    image: s.image,
+                    command: ["sleep", "infinity"],
+                    env: s.env.map((e) => ({ name: e.name, value: e.value })),
+                    securityContext: s.containerSecurityContext,
+                    ...(Object.keys(s.limits).length > 0 ? { resources: { limits: { ...s.limits } } } : {}),
+                    volumeMounts: mounts,
+                },
+            ],
+            volumes,
+        },
+    };
+}
+function toPvcManifest(s) {
+    return {
+        metadata: { name: s.name, labels: { ...s.labels } },
+        spec: {
+            accessModes: ["ReadWriteOnce"],
+            resources: { requests: { storage: `${s.storageGi}Gi` } },
+            ...(s.storageClass ? { storageClassName: s.storageClass } : {}),
+        },
+    };
+}
+/** `mode` is always "deny" in this provider (allow-mode emits no policy). Deny =
+ * block all egress except a DNS carve-out plus any allowlisted CIDRs. The manifest
+ * below encodes ONLY deny semantics — guard against a future allow-mode caller. */
+function toNetworkPolicyManifest(s) {
+    if (s.mode !== "deny") {
+        throw new Error(`toNetworkPolicyManifest only builds deny-mode policies; got mode "${s.mode}".`);
+    }
+    // Scope DNS egress to the cluster-DNS namespace (CoreDNS lives in kube-system).
+    // Without a `to:` selector the rule would allow port-53 traffic to ANY host,
+    // opening a DNS-tunneling exfiltration path out of the deny-mode sandbox.
+    const dnsEgress = {
+        to: [{ namespaceSelector: { matchLabels: { "kubernetes.io/metadata.name": "kube-system" } } }],
+        ports: [
+            { protocol: "UDP", port: 53 },
+            { protocol: "TCP", port: 53 },
+        ],
+    };
+    const cidrEgress = (s.allowlist ?? []).map((cidr) => ({ to: [{ ipBlock: { cidr } }] }));
+    return {
+        metadata: { name: s.name, labels: { ...s.labels } },
+        spec: {
+            podSelector: { matchLabels: { "b4.run/thread": s.threadLabelValue } },
+            policyTypes: ["Egress"],
+            egress: [dnsEgress, ...cidrEgress],
+        },
+    };
+}
+/** @internal Validates that a live policy is the B4.run-owned object we intend to
+ * replace, then carries only its optimistic-concurrency token into the desired body. */
+export function prepareNetworkPolicyReplacement(existing, desired, threadLabelValue) {
+    const desiredName = desired.metadata?.name;
+    if (!desiredName || existing.metadata?.name !== desiredName) {
+        throw new Error("Cannot replace NetworkPolicy: existing name does not match desired name.");
+    }
+    if (existing.metadata.labels?.["app.kubernetes.io/managed-by"] !== "b4") {
+        throw new Error("Cannot replace NetworkPolicy: existing object is not B4.run-owned.");
+    }
+    if (existing.metadata.labels?.["b4.run/thread"] !== threadLabelValue) {
+        throw new Error("Cannot replace NetworkPolicy: existing thread label does not match.");
+    }
+    const resourceVersion = existing.metadata.resourceVersion;
+    if (!resourceVersion) {
+        throw new Error("Cannot replace NetworkPolicy: live resourceVersion is missing or empty.");
+    }
+    return {
+        ...desired,
+        metadata: { ...desired.metadata, resourceVersion },
+    };
+}
+/** Parses the exec status callback's V1Status into an exit code. Success -> 0;
+ * Failure with an ExitCode cause -> that code; anything else -> 1 (best-effort). */
+function exitCodeFromStatus(status) {
+    if (!status || status.status === "Success")
+        return 0;
+    const cause = status.details?.causes?.find((c) => c.reason === "ExitCode");
+    if (cause?.message !== undefined) {
+        const n = Number.parseInt(cause.message, 10);
+        if (!Number.isNaN(n))
+            return n;
+    }
+    return 1;
+}
+export function createDefaultKubeClient() {
+    const kc = new KubeConfig();
+    kc.loadFromDefault();
+    const core = kc.makeApiClient(CoreV1Api);
+    const networking = kc.makeApiClient(NetworkingV1Api);
+    const authorization = kc.makeApiClient(AuthorizationV1Api);
+    const execClient = new Exec(kc);
+    return {
+        async readNamespacedPodPhase(ns, name) {
+            try {
+                const pod = await core.readNamespacedPod({ name, namespace: ns });
+                return pod.status?.phase ?? "Unknown";
+            }
+            catch (error) {
+                if (statusCode(error) === 404)
+                    return null;
+                throw error;
+            }
+        },
+        async createNamespacedPod(ns, spec) {
+            await core.createNamespacedPod({ namespace: ns, body: toPodManifest(ns, spec) });
+        },
+        async deleteNamespacedPod(ns, name, opts) {
+            try {
+                await core.deleteNamespacedPod({
+                    name,
+                    namespace: ns,
+                    ...(opts?.gracePeriodSeconds !== undefined
+                        ? { gracePeriodSeconds: opts.gracePeriodSeconds }
+                        : {}),
+                });
+            }
+            catch (error) {
+                if (statusCode(error) === 404)
+                    return;
+                throw error;
+            }
+        },
+        async createNamespacedPvcIfAbsent(ns, spec) {
+            try {
+                await core.createNamespacedPersistentVolumeClaim({
+                    namespace: ns,
+                    body: toPvcManifest(spec),
+                });
+            }
+            catch (error) {
+                if (statusCode(error) === 409)
+                    return;
+                throw error;
+            }
+        },
+        async deleteNamespacedPvc(ns, name) {
+            try {
+                await core.deleteNamespacedPersistentVolumeClaim({ name, namespace: ns });
+            }
+            catch (error) {
+                if (statusCode(error) === 404)
+                    return;
+                throw error;
+            }
+        },
+        async pvcExists(ns, name) {
+            try {
+                await core.readNamespacedPersistentVolumeClaim({ name, namespace: ns });
+                return true;
+            }
+            catch (error) {
+                if (statusCode(error) === 404)
+                    return false;
+                throw error;
+            }
+        },
+        async upsertNamespacedNetworkPolicy(ns, spec) {
+            const body = toNetworkPolicyManifest(spec);
+            try {
+                await networking.createNamespacedNetworkPolicy({ namespace: ns, body });
+            }
+            catch (error) {
+                if (statusCode(error) === 409) {
+                    const existing = await networking.readNamespacedNetworkPolicy({
+                        name: spec.name,
+                        namespace: ns,
+                    });
+                    const replacement = prepareNetworkPolicyReplacement(existing, body, spec.threadLabelValue);
+                    await networking.replaceNamespacedNetworkPolicy({
+                        name: spec.name,
+                        namespace: ns,
+                        body: replacement,
+                    });
+                    return;
+                }
+                throw error;
+            }
+        },
+        async deleteNamespacedNetworkPolicy(ns, name) {
+            try {
+                await networking.deleteNamespacedNetworkPolicy({ name, namespace: ns });
+            }
+            catch (error) {
+                if (statusCode(error) === 404)
+                    return;
+                throw error;
+            }
+        },
+        async exec(ns, pod, argv, opts = {}) {
+            const stdout = collect();
+            const stderr = collect();
+            let settledStatus;
+            // The library sends a close-stdin frame when the readable ends, giving the
+            // in-pod process (e.g. `cat > file`) a clean EOF. null = no stdin.
+            const stdin = opts.stdin !== undefined ? Readable.from(Buffer.from(opts.stdin, "utf8")) : null;
+            const signal = opts.signal;
+            // `ws` is untyped (the resolved WebSocket has no shipped types); track it so
+            // an abort can close the socket and tear down the orphaned in-pod process.
+            let socket;
+            let settled = false;
+            await new Promise((resolve, reject) => {
+                const finish = (fn) => {
+                    if (settled)
+                        return;
+                    settled = true;
+                    signal?.removeEventListener("abort", onAbort);
+                    fn();
+                };
+                const onAbort = () => {
+                    socket?.close();
+                    finish(() => reject(new Error("Kubernetes exec aborted.")));
+                };
+                if (signal?.aborted) {
+                    onAbort();
+                    return;
+                }
+                signal?.addEventListener("abort", onAbort, { once: true });
+                execClient
+                    .exec(ns, pod, CONTAINER_NAME, [...argv], stdout.stream, stderr.stream, stdin, false, (status) => {
+                    settledStatus = status;
+                })
+                    .then((ws) => {
+                    socket = ws;
+                    // Aborted between scheduling and connecting: close the fresh socket.
+                    if (signal?.aborted) {
+                        ws.close();
+                        return;
+                    }
+                    ws.on("close", () => finish(() => resolve()));
+                    ws.on("error", (event) => {
+                        finish(() => reject(event instanceof Error ? event : new Error("Kubernetes exec socket error.")));
+                    });
+                })
+                    .catch((error) => finish(() => reject(error)));
+            });
+            return {
+                stdout: stdout.text(),
+                stderr: stderr.text(),
+                // The library fires the status callback before `close` on a normal exit,
+                // so an undefined status at close means the socket died abnormally (pod
+                // OOMKill mid-exec, network drop). Report that as a failure, not success.
+                exitCode: settledStatus === undefined ? 1 : exitCodeFromStatus(settledStatus),
+            };
+        },
+        async canI(ns, permission) {
+            try {
+                const review = await authorization.createSelfSubjectAccessReview({
+                    body: {
+                        spec: {
+                            resourceAttributes: {
+                                group: permission.apiGroup,
+                                namespace: ns,
+                                resource: permission.resource,
+                                ...(permission.subresource !== undefined
+                                    ? { subresource: permission.subresource }
+                                    : {}),
+                                verb: permission.verb,
+                            },
+                        },
+                    },
+                });
+                return review.status?.allowed === true;
+            }
+            catch (error) {
+                throw new KubeAuthorizationReviewError(error instanceof ApiException ? "api" : "transport", error instanceof Error ? error.message : String(error), { cause: error });
+            }
+        },
+        async networkPolicyEnforced(ns) {
+            // Listing NetworkPolicy objects only proves the API is present, not that a
+            // CNI enforces them — we cannot portably introspect the CNI, so treat a
+            // successful list as inconclusive rather than a confirmed "true".
+            try {
+                await networking.listNamespacedNetworkPolicy({ namespace: ns });
+                return "unknown";
+            }
+            catch {
+                return false;
+            }
+        },
+    };
+}

package/dist/kubernetes/kube-client.d.ts

@@ -0,0 +1,138 @@
+/** Narrow Kubernetes API seam the provider needs. Default impl (later task) wraps
+ * @kubernetes/client-node; unit tests inject a fake. Pod/PVC/NetworkPolicy specs
+ * are the minimal shapes this provider sets — NOT the full k8s object types. */
+export interface KubePodSpec {
+    readonly name: string;
+    readonly image: string;
+    readonly labels: Readonly<Record<string, string>>;
+    readonly pvcName: string;
+    readonly env: readonly {
+        readonly name: string;
+        readonly value: string;
+    }[];
+    readonly limits: Readonly<Record<string, string>>;
+    readonly podSecurityContext: Readonly<Record<string, unknown>>;
+    readonly containerSecurityContext: Readonly<Record<string, unknown>>;
+    readonly readOnlyRootFilesystem: boolean;
+    readonly automountServiceAccountToken: boolean;
+}
+export interface KubePvcSpec {
+    readonly name: string;
+    readonly labels: Readonly<Record<string, string>>;
+    readonly storageGi: number;
+    readonly storageClass?: string;
+}
+export interface KubeNetworkPolicySpec {
+    readonly name: string;
+    readonly labels: Readonly<Record<string, string>>;
+    readonly threadLabelValue: string;
+    readonly mode: "deny" | "allow";
+    readonly allowlist?: readonly string[];
+}
+export type KubePermission = {
+    readonly apiGroup: "";
+    readonly resource: "pods";
+    readonly subresource?: never;
+    readonly verb: "create" | "get" | "delete";
+} | {
+    readonly apiGroup: "";
+    readonly resource: "pods";
+    readonly subresource: "exec";
+    readonly verb: "create" | "get";
+} | {
+    readonly apiGroup: "";
+    readonly resource: "persistentvolumeclaims";
+    readonly subresource?: never;
+    readonly verb: "create" | "get" | "delete";
+} | {
+    readonly apiGroup: "networking.k8s.io";
+    readonly resource: "networkpolicies";
+    readonly subresource?: never;
+    readonly verb: "create" | "get" | "list" | "update" | "delete";
+};
+export declare const REQUIRED_KUBE_PERMISSIONS: readonly [{
+    readonly apiGroup: "";
+    readonly resource: "pods";
+    readonly verb: "create";
+}, {
+    readonly apiGroup: "";
+    readonly resource: "pods";
+    readonly verb: "get";
+}, {
+    readonly apiGroup: "";
+    readonly resource: "pods";
+    readonly verb: "delete";
+}, {
+    readonly apiGroup: "";
+    readonly resource: "persistentvolumeclaims";
+    readonly verb: "create";
+}, {
+    readonly apiGroup: "";
+    readonly resource: "persistentvolumeclaims";
+    readonly verb: "get";
+}, {
+    readonly apiGroup: "";
+    readonly resource: "persistentvolumeclaims";
+    readonly verb: "delete";
+}, {
+    readonly apiGroup: "";
+    readonly resource: "pods";
+    readonly subresource: "exec";
+    readonly verb: "create";
+}, {
+    readonly apiGroup: "";
+    readonly resource: "pods";
+    readonly subresource: "exec";
+    readonly verb: "get";
+}, {
+    readonly apiGroup: "networking.k8s.io";
+    readonly resource: "networkpolicies";
+    readonly verb: "create";
+}, {
+    readonly apiGroup: "networking.k8s.io";
+    readonly resource: "networkpolicies";
+    readonly verb: "get";
+}, {
+    readonly apiGroup: "networking.k8s.io";
+    readonly resource: "networkpolicies";
+    readonly verb: "list";
+}, {
+    readonly apiGroup: "networking.k8s.io";
+    readonly resource: "networkpolicies";
+    readonly verb: "update";
+}, {
+    readonly apiGroup: "networking.k8s.io";
+    readonly resource: "networkpolicies";
+    readonly verb: "delete";
+}];
+export declare class KubeAuthorizationReviewError extends Error {
+    readonly kind: "api" | "transport";
+    constructor(kind: "api" | "transport", message: string, options?: ErrorOptions);
+}
+export type PodPhase = "Pending" | "Running" | "Succeeded" | "Failed" | "Unknown";
+export interface KubeClient {
+    readNamespacedPodPhase(ns: string, name: string): Promise<PodPhase | null>;
+    createNamespacedPod(ns: string, spec: KubePodSpec): Promise<void>;
+    deleteNamespacedPod(ns: string, name: string, opts?: {
+        readonly gracePeriodSeconds?: number;
+    }): Promise<void>;
+    createNamespacedPvcIfAbsent(ns: string, spec: KubePvcSpec): Promise<void>;
+    deleteNamespacedPvc(ns: string, name: string): Promise<void>;
+    /** Existence probe: true if the PVC is still present (including Terminating). */
+    pvcExists(ns: string, name: string): Promise<boolean>;
+    upsertNamespacedNetworkPolicy(ns: string, spec: KubeNetworkPolicySpec): Promise<void>;
+    deleteNamespacedNetworkPolicy(ns: string, name: string): Promise<void>;
+    exec(ns: string, pod: string, argv: readonly string[], opts?: {
+        readonly stdin?: string;
+        readonly signal?: AbortSignal;
+    }): Promise<{
+        readonly stdout: string;
+        readonly stderr: string;
+        readonly exitCode: number;
+    }>;
+    /** SelfSubjectAccessReview probe for preflight. */
+    canI(namespace: string, permission: KubePermission): Promise<boolean>;
+    /** Whether a NetworkPolicy-enforcing CNI is present; "unknown" if undetectable. */
+    networkPolicyEnforced(ns: string): Promise<boolean | "unknown">;
+}
+//# sourceMappingURL=kube-client.d.ts.map

package/dist/kubernetes/kube-client.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"kube-client.d.ts","sourceRoot":"","sources":["../../src/kubernetes/kube-client.ts"],"names":[],"mappings":"AAAA;;gFAEgF;AAEhF,MAAM,WAAW,WAAW;IAC1B,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAA;IACrB,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAA;IACtB,QAAQ,CAAC,MAAM,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,CAAA;IACjD,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAA;IACxB,QAAQ,CAAC,GAAG,EAAE,SAAS;QAAE,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;QAAC,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAA;KAAE,EAAE,CAAA;IAC1E,QAAQ,CAAC,MAAM,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,CAAA;IACjD,QAAQ,CAAC,kBAAkB,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,CAAA;IAC9D,QAAQ,CAAC,wBAAwB,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,CAAA;IACpE,QAAQ,CAAC,sBAAsB,EAAE,OAAO,CAAA;IACxC,QAAQ,CAAC,4BAA4B,EAAE,OAAO,CAAA;CAC/C;AAED,MAAM,WAAW,WAAW;IAC1B,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAA;IACrB,QAAQ,CAAC,MAAM,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,CAAA;IACjD,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAA;IAC1B,QAAQ,CAAC,YAAY,CAAC,EAAE,MAAM,CAAA;CAC/B;AAED,MAAM,WAAW,qBAAqB;IACpC,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAA;IACrB,QAAQ,CAAC,MAAM,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,CAAA;IACjD,QAAQ,CAAC,gBAAgB,EAAE,MAAM,CAAA;IACjC,QAAQ,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAA;IAC/B,QAAQ,CAAC,SAAS,CAAC,EAAE,SAAS,MAAM,EAAE,CAAA;CACvC;AAED,MAAM,MAAM,cAAc,GACtB;IACE,QAAQ,CAAC,QAAQ,EAAE,EAAE,CAAA;IACrB,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAA;IACzB,QAAQ,CAAC,WAAW,CAAC,EAAE,KAAK,CAAA;IAC5B,QAAQ,CAAC,IAAI,EAAE,QAAQ,GAAG,KAAK,GAAG,QAAQ,CAAA;CAC3C,GACD;IACE,QAAQ,CAAC,QAAQ,EAAE,EAAE,CAAA;IACrB,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAA;IACzB,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAA;IAC5B,QAAQ,CAAC,IAAI,EAAE,QAAQ,GAAG,KAAK,CAAA;CAChC,GACD;IACE,QAAQ,CAAC,QAAQ,EAAE,EAAE,CAAA;IACrB,QAAQ,CAAC,QAAQ,EAAE,wBAAwB,CAAA;IAC3C,QAAQ,CAAC,WAAW,CAAC,EAAE,KAAK,CAAA;IAC5B,QAAQ,CAAC,IAAI,EAAE,QAAQ,GAAG,KAAK,GAAG,QAAQ,CAAA;CAC3C,GACD;IACE,QAAQ,CAAC,QAAQ,EAAE,mBAAmB,CAAA;IACtC,QAAQ,CAAC,QAAQ,EAAE,iBAAiB,CAAA;IACpC,QAAQ,CAAC,WAAW,CAAC,EAAE,KAAK,CAAA;IAC5B,QAAQ,CAAC,IAAI,EAAE,QAAQ,GAAG,KAAK,GAAG,MAAM,GAAG,QAAQ,GAAG,QAAQ,CAAA;CAC/D,CAAA;AAEL,eAAO,MAAM,yBAAyB;uBACxB,EAAE;uBAAY,MAAM;mBAAQ,QAAQ;;uBACpC,EAAE;uBAAY,MAAM;mBAAQ,KAAK;;uBACjC,EAAE;uBAAY,MAAM;mBAAQ,QAAQ;;uBACpC,EAAE;uBAAY,wBAAwB;mBAAQ,QAAQ;;uBACtD,EAAE;uBAAY,wBAAwB;mBAAQ,KAAK;;uBACnD,EAAE;uBAAY,wBAAwB;mBAAQ,QAAQ;;uBACtD,EAAE;uBAAY,MAAM;0BAAe,MAAM;mBAAQ,QAAQ;;uBACzD,EAAE;uBAAY,MAAM;0BAAe,MAAM;mBAAQ,KAAK;;uBACtD,mBAAmB;uBAAY,iBAAiB;mBAAQ,QAAQ;;uBAChE,mBAAmB;uBAAY,iBAAiB;mBAAQ,KAAK;;uBAC7D,mBAAmB;uBAAY,iBAAiB;mBAAQ,MAAM;;uBAC9D,mBAAmB;uBAAY,iBAAiB;mBAAQ,QAAQ;;uBAChE,mBAAmB;uBAAY,iBAAiB;mBAAQ,QAAQ;EAChC,CAAA;AAE9C,qBAAa,4BAA6B,SAAQ,KAAK;IACrD,QAAQ,CAAC,IAAI,EAAE,KAAK,GAAG,WAAW,CAAA;IAElC,YAAY,IAAI,EAAE,KAAK,GAAG,WAAW,EAAE,OAAO,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,YAAY,EAI7E;CACF;AAED,MAAM,MAAM,QAAQ,GAAG,SAAS,GAAG,SAAS,GAAG,WAAW,GAAG,QAAQ,GAAG,SAAS,CAAA;AAEjF,MAAM,WAAW,UAAU;IACzB,sBAAsB,CAAC,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,QAAQ,GAAG,IAAI,CAAC,CAAA;IAC1E,mBAAmB,CAAC,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE,WAAW,GAAG,OAAO,CAAC,IAAI,CAAC,CAAA;IACjE,mBAAmB,CACjB,EAAE,EAAE,MAAM,EACV,IAAI,EAAE,MAAM,EACZ,IAAI,CAAC,EAAE;QAAE,QAAQ,CAAC,kBAAkB,CAAC,EAAE,MAAM,CAAA;KAAE,GAC9C,OAAO,CAAC,IAAI,CAAC,CAAA;IAChB,2BAA2B,CAAC,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE,WAAW,GAAG,OAAO,CAAC,IAAI,CAAC,CAAA;IACzE,mBAAmB,CAAC,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAA;IAC5D,iFAAiF;IACjF,SAAS,CAAC,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC,CAAA;IACrD,6BAA6B,CAAC,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE,qBAAqB,GAAG,OAAO,CAAC,IAAI,CAAC,CAAA;IACrF,6BAA6B,CAAC,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAA;IACtE,IAAI,CACF,EAAE,EAAE,MAAM,EACV,GAAG,EAAE,MAAM,EACX,IAAI,EAAE,SAAS,MAAM,EAAE,EACvB,IAAI,CAAC,EAAE;QAAE,QAAQ,CAAC,KAAK,CAAC,EAAE,MAAM,CAAC;QAAC,QAAQ,CAAC,MAAM,CAAC,EAAE,WAAW,CAAA;KAAE,GAChE,OAAO,CAAC;QAAE,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;QAAC,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;QAAC,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAA;KAAE,CAAC,CAAA;IAC3F,mDAAmD;IACnD,IAAI,CAAC,SAAS,EAAE,MAAM,EAAE,UAAU,EAAE,cAAc,GAAG,OAAO,CAAC,OAAO,CAAC,CAAA;IACrE,mFAAmF;IACnF,qBAAqB,CAAC,EAAE,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,GAAG,SAAS,CAAC,CAAA;CAChE"}

package/dist/kubernetes/kube-client.js

@@ -0,0 +1,26 @@
+/** Narrow Kubernetes API seam the provider needs. Default impl (later task) wraps
+ * @kubernetes/client-node; unit tests inject a fake. Pod/PVC/NetworkPolicy specs
+ * are the minimal shapes this provider sets — NOT the full k8s object types. */
+export const REQUIRED_KUBE_PERMISSIONS = [
+    { apiGroup: "", resource: "pods", verb: "create" },
+    { apiGroup: "", resource: "pods", verb: "get" },
+    { apiGroup: "", resource: "pods", verb: "delete" },
+    { apiGroup: "", resource: "persistentvolumeclaims", verb: "create" },
+    { apiGroup: "", resource: "persistentvolumeclaims", verb: "get" },
+    { apiGroup: "", resource: "persistentvolumeclaims", verb: "delete" },
+    { apiGroup: "", resource: "pods", subresource: "exec", verb: "create" },
+    { apiGroup: "", resource: "pods", subresource: "exec", verb: "get" },
+    { apiGroup: "networking.k8s.io", resource: "networkpolicies", verb: "create" },
+    { apiGroup: "networking.k8s.io", resource: "networkpolicies", verb: "get" },
+    { apiGroup: "networking.k8s.io", resource: "networkpolicies", verb: "list" },
+    { apiGroup: "networking.k8s.io", resource: "networkpolicies", verb: "update" },
+    { apiGroup: "networking.k8s.io", resource: "networkpolicies", verb: "delete" },
+];
+export class KubeAuthorizationReviewError extends Error {
+    kind;
+    constructor(kind, message, options) {
+        super(message, options);
+        this.name = "KubeAuthorizationReviewError";
+        this.kind = kind;
+    }
+}

package/dist/kubernetes/kube-exec.d.ts

@@ -0,0 +1,7 @@
+import type { ExecBackend } from "@b4run/workspace";
+import type { KubeClient } from "./kube-client.js";
+/** ExecBackend that runs commands inside a pod via KubeClient.exec (sh -c). */
+export declare function kubeExec(client: KubeClient, namespace: string, pod: string, opts?: {
+    readonly timeoutMs?: number;
+}): ExecBackend;
+//# sourceMappingURL=kube-exec.d.ts.map

package/dist/kubernetes/kube-exec.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"kube-exec.d.ts","sourceRoot":"","sources":["../../src/kubernetes/kube-exec.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAkB,WAAW,EAAE,MAAM,kBAAkB,CAAA;AACnE,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,kBAAkB,CAAA;AAMlD,+EAA+E;AAC/E,wBAAgB,QAAQ,CACtB,MAAM,EAAE,UAAU,EAClB,SAAS,EAAE,MAAM,EACjB,GAAG,EAAE,MAAM,EACX,IAAI,GAAE;IAAE,QAAQ,CAAC,SAAS,CAAC,EAAE,MAAM,CAAA;CAAO,GACzC,WAAW,CAoCb"}

package/dist/kubernetes/kube-exec.js

@@ -0,0 +1,38 @@
+function shellQuote(s) {
+    return `'${s.replaceAll("'", `'\\''`)}'`;
+}
+/** ExecBackend that runs commands inside a pod via KubeClient.exec (sh -c). */
+export function kubeExec(client, namespace, pod, opts = {}) {
+    return {
+        async runCommand(args, ctx) {
+            const envPrefix = args.env
+                ? Object.entries(args.env)
+                    .map(([k, v]) => {
+                    if (!/^[A-Za-z_][A-Za-z0-9_]*$/.test(k)) {
+                        throw new Error(`Invalid environment variable name ${JSON.stringify(k)}: keys must match /^[A-Za-z_][A-Za-z0-9_]*$/`);
+                    }
+                    return `${k}=${shellQuote(v)} `;
+                })
+                    .join("")
+                : "";
+            const cwd = args.cwd ?? ctx.workspaceRoot;
+            const cdPrefix = cwd ? `cd ${shellQuote(cwd)} && ` : "";
+            const full = `${envPrefix}${cdPrefix}${args.command}`;
+            const shArgs = ["sh", "-c", full];
+            // `timeout` has second granularity, so round up to the enforced ceiling and
+            // report THAT (not the raw ms) — otherwise `timeoutMs: 500` reports "500ms"
+            // while the process actually gets a full 1s.
+            const timeoutSecs = opts.timeoutMs !== undefined ? Math.ceil(opts.timeoutMs / 1000) : undefined;
+            const argv = timeoutSecs !== undefined ? ["timeout", `${timeoutSecs}s`, ...shArgs] : shArgs;
+            const r = await client.exec(namespace, pod, argv, { signal: ctx.signal });
+            if (timeoutSecs !== undefined && r.exitCode === 124) {
+                return {
+                    stdout: r.stdout,
+                    stderr: `${r.stderr}${r.stderr ? "\n" : ""}Command timed out after ${timeoutSecs}s (resources.timeoutMs: ${opts.timeoutMs}ms).`,
+                    exitCode: 124,
+                };
+            }
+            return { stdout: r.stdout, stderr: r.stderr, exitCode: r.exitCode };
+        },
+    };
+}

package/dist/kubernetes/kube-filesystem.d.ts

@@ -0,0 +1,5 @@
+import type { FilesystemBackend } from "@b4run/workspace";
+import type { KubeClient } from "./kube-client.js";
+/** FilesystemBackend whose ops run inside a pod via KubeClient.exec. */
+export declare function kubeFilesystem(client: KubeClient, namespace: string, pod: string): FilesystemBackend;
+//# sourceMappingURL=kube-filesystem.d.ts.map

package/dist/kubernetes/kube-filesystem.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"kube-filesystem.d.ts","sourceRoot":"","sources":["../../src/kubernetes/kube-filesystem.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAkB,iBAAiB,EAAE,MAAM,kBAAkB,CAAA;AACzE,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,kBAAkB,CAAA;AAMlD,wEAAwE;AACxE,wBAAgB,cAAc,CAC5B,MAAM,EAAE,UAAU,EAClB,SAAS,EAAE,MAAM,EACjB,GAAG,EAAE,MAAM,GACV,iBAAiB,CAiDnB"}

package/dist/kubernetes/kube-filesystem.js

@@ -0,0 +1,57 @@
+function q(s) {
+    return `'${s.replaceAll("'", `'\\''`)}'`;
+}
+/** FilesystemBackend whose ops run inside a pod via KubeClient.exec. */
+export function kubeFilesystem(client, namespace, pod) {
+    const run = (cmd, ctx, stdin) => client.exec(namespace, pod, ["sh", "-c", cmd], {
+        ...(stdin !== undefined ? { stdin } : {}),
+        signal: ctx.signal,
+    });
+    return {
+        async readFile(path, ctx, opts) {
+            const r = await run(`cat ${q(path)}`, ctx);
+            if (r.exitCode !== 0)
+                throw new Error(`readFile failed: ${r.stderr.trim()}`);
+            const max = opts?.maxBytes;
+            if (max !== undefined && Number.isFinite(max) && Buffer.byteLength(r.stdout) > max) {
+                throw new Error(`readFile ${path}: content exceeds maxBytes (${max}).`);
+            }
+            return r.stdout;
+        },
+        async writeFile(path, content, ctx) {
+            const r = await run(`mkdir -p "$(dirname ${q(path)})" && cat > ${q(path)}`, ctx, content);
+            if (r.exitCode !== 0)
+                throw new Error(`writeFile failed: ${r.stderr.trim()}`);
+            return { bytesWritten: Buffer.byteLength(content) };
+        },
+        async listDir(path, ctx) {
+            const r = await run(`ls -1 ${q(path)}`, ctx);
+            if (r.exitCode !== 0)
+                throw new Error(`listDir failed: ${r.stderr.trim()}`);
+            return r.stdout
+                .split("\n")
+                .map((l) => l.trim())
+                .filter(Boolean);
+        },
+        async realPath(path, ctx) {
+            const r = await run(`realpath -m ${q(path)}`, ctx);
+            return r.exitCode === 0 ? r.stdout.trim() : path;
+        },
+        async statFile(path, ctx) {
+            const r = await run(`stat -c '%s %Y' ${q(path)}`, ctx);
+            if (r.exitCode !== 0)
+                throw new Error(`statFile failed: ${r.stderr.trim()}`);
+            const [size, mtime] = r.stdout.trim().split(" ");
+            return { size: Number(size), mtimeMs: Number(mtime) * 1000 };
+        },
+        async removeFile(path, ctx) {
+            await run(`rm -f ${q(path)}`, ctx);
+        },
+        async touchFile(path, ctx) {
+            await run(`touch ${q(path)}`, ctx);
+        },
+        async mkdir(path, ctx) {
+            await run(`mkdir -p ${q(path)}`, ctx);
+        },
+    };
+}

package/dist/kubernetes/kube-sandbox.d.ts

@@ -0,0 +1,25 @@
+import type { SandboxPolicy, SandboxProvider } from "@b4run/workspace";
+import { type KubeClient } from "./kube-client.js";
+export interface KubernetesSandboxOptions {
+    readonly image: string;
+    readonly namespace?: string;
+    readonly storageClass?: string;
+    readonly startupTimeoutMs?: number;
+    /** Injected for tests; defaults to the real @kubernetes/client-node impl (later task). */
+    readonly client?: KubeClient;
+}
+export declare function resolveSecurity(policy: SandboxPolicy): {
+    podSecurityContext: Record<string, unknown>;
+    containerSecurityContext: Record<string, unknown>;
+    readOnly: boolean;
+    user: {
+        uid: number;
+        gid: number;
+    } | undefined;
+};
+/** Kubernetes SandboxProvider. Per thread: a keeper Pod `b4-sbx-<t>` (sleep
+ * infinity) + a PVC `b4-sbx-vol-<t>` at /workspace. acquire = create-or-reattach;
+ * release deletes the Pod (keeps the PVC); destroy deletes both. Hardening maps to
+ * SecurityContext; fsGroup chowns the PVC (no chown-init); the pod mounts no SA token. */
+export declare function kubernetesSandbox(opts: KubernetesSandboxOptions): SandboxProvider;
+//# sourceMappingURL=kube-sandbox.d.ts.map

package/dist/kubernetes/kube-sandbox.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"kube-sandbox.d.ts","sourceRoot":"","sources":["../../src/kubernetes/kube-sandbox.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAiB,aAAa,EAAE,eAAe,EAAE,MAAM,kBAAkB,CAAA;AAGrF,OAAO,EAEL,KAAK,UAAU,EAIhB,MAAM,kBAAkB,CAAA;AAiCzB,MAAM,WAAW,wBAAwB;IACvC,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAA;IACtB,QAAQ,CAAC,SAAS,CAAC,EAAE,MAAM,CAAA;IAC3B,QAAQ,CAAC,YAAY,CAAC,EAAE,MAAM,CAAA;IAC9B,QAAQ,CAAC,gBAAgB,CAAC,EAAE,MAAM,CAAA;IAClC,0FAA0F;IAC1F,QAAQ,CAAC,MAAM,CAAC,EAAE,UAAU,CAAA;CAC7B;AAED,wBAAgB,eAAe,CAAC,MAAM,EAAE,aAAa,GAAG;IACtD,kBAAkB,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAA;IAC3C,wBAAwB,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAA;IACjD,QAAQ,EAAE,OAAO,CAAA;IACjB,IAAI,EAAE;QAAE,GAAG,EAAE,MAAM,CAAC;QAAC,GAAG,EAAE,MAAM,CAAA;KAAE,GAAG,SAAS,CAAA;CAC/C,CAiCA;AAED;;;0FAG0F;AAC1F,wBAAgB,iBAAiB,CAAC,IAAI,EAAE,wBAAwB,GAAG,eAAe,CA8KjF"}