@docker-harpoon/core 0.1.3 → 0.1.4

package/dist/__tests__/bindings.test.js

@@ -6,8 +6,9 @@
  * - Env var injection into containers
  * - Binding composition
  */
-import { describe, test, expect, afterEach, setDefaultTimeout } from 'bun:test';
+import { describe, test, expect, afterEach, beforeAll, setDefaultTimeout } from 'bun:test';
 import { Container, database, createEnvBinding, destroyAll } from '../index';
+import { buildTestImage, TEST_IMAGE } from './test-setup';
 setDefaultTimeout(30_000);
 const waitUntil = (fn, timeout = 5000) => {
     return new Promise((resolve) => {
@@ -20,6 +21,9 @@ const waitUntil = (fn, timeout = 5000) => {
     });
 };
 describe('Bindings', () => {
+    beforeAll(async () => {
+        await buildTestImage();
+    });
     afterEach(async () => {
         await destroyAll();
     });
@@ -40,7 +44,7 @@ describe('Bindings', () => {
             APP_VERSION: '1.0.0',
         });
         const container = await Container('test-binding-env', {
-            image: 'alpine:latest',
+            image: TEST_IMAGE,
             cmd: ['sleep', '30'],
             bindings: {
                 config: configBinding,
@@ -65,7 +69,7 @@ describe('Bindings', () => {
             VAR_D: 'd',
         });
         const container = await Container('test-multi-binding', {
-            image: 'alpine:latest',
+            image: TEST_IMAGE,
             cmd: ['sleep', '30'],
             bindings: {
                 first: binding1,
@@ -86,7 +90,7 @@ describe('Bindings', () => {
             MY_VAR: 'from-binding',
         });
         const container = await Container('test-env-precedence', {
-            image: 'alpine:latest',
+            image: TEST_IMAGE,
             cmd: ['sleep', '30'],
             bindings: {
                 config: binding,
@@ -109,7 +113,7 @@ describe('Bindings', () => {
             REDIS_URL: db.connectionString,
         });
         const container = await Container('test-db-consumer', {
-            image: 'alpine:latest',
+            image: TEST_IMAGE,
             cmd: ['sleep', '30'],
             bindings: {
                 db: dbBinding,

package/dist/__tests__/container.test.js

@@ -8,16 +8,20 @@
  * - stats retrieval
  * - Lifecycle (stop, destroy)
  */
-import { describe, test, expect, afterEach, setDefaultTimeout } from 'bun:test';
+import { describe, test, expect, afterEach, beforeAll, setDefaultTimeout } from 'bun:test';
 import { Network, Container, destroyAll } from '../index';
+import { buildTestImage, TEST_IMAGE } from './test-setup';
 setDefaultTimeout(30_000);
 describe('Container', () => {
+    beforeAll(async () => {
+        await buildTestImage();
+    });
     afterEach(async () => {
         await destroyAll();
     });
     test('creates a container with basic config', async () => {
         const container = await Container('test-container-basic', {
-            image: 'alpine:latest',
+            image: TEST_IMAGE,
             cmd: ['sleep', '30'],
         });
         expect(container.id).toBeDefined();
@@ -27,7 +31,7 @@ describe('Container', () => {
     test('creates a container attached to a network', async () => {
         const network = await Network('test-container-net');
         const container = await Container('test-container-networked', {
-            image: 'alpine:latest',
+            image: TEST_IMAGE,
             cmd: ['sleep', '30'],
             networks: [network],
         });
@@ -39,7 +43,7 @@ describe('Container', () => {
     });
     test('exec runs commands inside container', async () => {
         const container = await Container('test-container-exec', {
-            image: 'alpine:latest',
+            image: TEST_IMAGE,
             cmd: ['sleep', '30'],
         });
         await new Promise((r) => setTimeout(r, 500));
@@ -51,7 +55,7 @@ describe('Container', () => {
     });
     test('stats returns container resource statistics', async () => {
         const container = await Container('test-container-stats', {
-            image: 'alpine:latest',
+            image: TEST_IMAGE,
             cmd: ['sleep', '30'],
         });
         await new Promise((r) => setTimeout(r, 500));
@@ -66,7 +70,7 @@ describe('Container', () => {
     });
     test('waitForLog detects log patterns', async () => {
         const container = await Container('test-container-logs', {
-            image: 'alpine:latest',
+            image: TEST_IMAGE,
             cmd: ['sh', '-c', 'echo "Server started successfully" && sleep 30'],
         });
         await container.waitForLog('Server started', 5000);
@@ -75,7 +79,7 @@ describe('Container', () => {
     });
     test('stop gracefully shuts down container', async () => {
         const container = await Container('test-container-stop', {
-            image: 'alpine:latest',
+            image: TEST_IMAGE,
             cmd: ['sh', '-c', 'trap "exit 0" TERM; while true; do sleep 1; done'],
         });
         await new Promise((r) => setTimeout(r, 500));
@@ -87,7 +91,7 @@ describe('Container', () => {
     });
     test('supports environment variables', async () => {
         const container = await Container('test-container-env', {
-            image: 'alpine:latest',
+            image: TEST_IMAGE,
             cmd: ['sleep', '30'],
             env: {
                 MY_VAR: 'hello',
@@ -105,11 +109,28 @@ describe('Container', () => {
     });
     test('supports port mappings', async () => {
         const container = await Container('test-container-ports', {
-            image: 'alpine:latest',
+            image: TEST_IMAGE,
             cmd: ['sleep', '30'],
             ports: [{ internal: 8080, external: 18080 }],
         });
         expect(container.id).toBeDefined();
         await container.destroy();
     });
+    test('streamLogs terminates without follow option', async () => {
+        const container = await Container('test-logs-terminate', {
+            image: TEST_IMAGE,
+            cmd: ['sh', '-c', 'echo "line1" && echo "line2" && echo "line3" && sleep 30'],
+        });
+        await container.waitForLog('line3', 5000);
+        const lines = [];
+        const logStream = await container.streamLogs({ tail: 3 });
+        for await (const line of logStream) {
+            lines.push(line.message);
+        }
+        // Loop should exit naturally
+        expect(lines).toContain('line1');
+        expect(lines).toContain('line2');
+        expect(lines).toContain('line3');
+        await container.destroy();
+    });
 });

package/dist/__tests__/database.test.js

@@ -50,20 +50,6 @@ describe('database', () => {
         expect(db.connectionString).toBe('redis://:secret@localhost:16380');
         await db.destroy();
     });
-    test('creates a mysql database with connection string', async () => {
-        const db = await database('test-mysql', {
-            image: 'mysql:8',
-            env: {
-                MYSQL_ROOT_PASSWORD: 'rootpass',
-                MYSQL_DATABASE: 'mydb',
-            },
-            hostPort: 13306,
-        });
-        expect(db.port).toBe(3306);
-        expect(db.hostPort).toBe(13306);
-        expect(db.connectionString).toBe('mysql://root:rootpass@localhost:13306/mydb');
-        await db.destroy();
-    });
     test('attaches database to network', async () => {
         const network = await Network('test-db-net');
         const db = await database('test-db-networked', {

package/dist/__tests__/docker-infra.template.d.ts

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=docker-infra.template.d.ts.map

package/dist/__tests__/docker-infra.template.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"docker-infra.template.d.ts","sourceRoot":"","sources":["../../src/__tests__/docker-infra.template.ts"],"names":[],"mappings":""}

package/dist/__tests__/docker-infra.template.js

@@ -0,0 +1,174 @@
+/**
+ * Docker Infrastructure Test Template
+ *
+ * Copy and customize this file to test your project's Dockerfile and entrypoint.
+ * Replace {{PROJECT_NAME}} and {{PROJECT_IMAGE}} with your values.
+ *
+ * This template demonstrates Harpoon's complete API for testing Docker infrastructure:
+ * - Image building with buildArgs
+ * - Container creation with volumes, capabilities, and user overrides
+ * - Log waiting and streaming
+ * - Command execution inside containers
+ * - Network isolation testing
+ *
+ * @example
+ * ```bash
+ * # Copy and customize for your project
+ * cp docker-infra.template.ts my-project.test.ts
+ * # Edit PROJECT config and tests
+ * bun test my-project.test.ts
+ * ```
+ */
+import { describe, test, expect, beforeAll, afterEach, setDefaultTimeout } from 'bun:test';
+import { Image, Container, Network, destroyAll } from '@docker-harpoon/core';
+// ============ PROJECT CONFIGURATION ============
+// Customize these values for your project
+const PROJECT = {
+    name: '{{PROJECT_NAME}}',
+    image: '{{PROJECT_IMAGE}}:latest',
+    context: './',
+    dockerfile: 'Dockerfile',
+    port: 3000,
+    healthPath: '/api/status',
+};
+// Set a generous timeout for Docker operations
+setDefaultTimeout(120_000);
+describe(`${PROJECT.name} Docker Infrastructure`, () => {
+    beforeAll(async () => {
+        // Build the project image
+        await Image(PROJECT.image, {
+            context: PROJECT.context,
+            dockerfile: PROJECT.dockerfile,
+            buildArgs: { SEED_DATABASE: 'true' },
+        });
+    });
+    afterEach(async () => {
+        await destroyAll();
+    });
+    // ============ HEALTH CHECK TEST ============
+    test('health check responds 200', async () => {
+        const container = await Container('test-health', {
+            image: PROJECT.image,
+            env: { PORT: String(PROJECT.port) },
+            ports: [{ internal: PROJECT.port, external: 13000 }],
+        });
+        await container.waitForLog(/listening|started|ready/i, 30000);
+        const res = await fetch(`http://localhost:13000${PROJECT.healthPath}`);
+        expect(res.status).toBe(200);
+    });
+    // ============ VOLUME MOUNT TEST ============
+    test('db snapshot copy-on-boot pattern', async () => {
+        const container = await Container('test-snapshot', {
+            image: PROJECT.image,
+            env: {
+                DB_SOURCE: '/data/snapshot/app.db',
+                DB_PATH: '/app/data/test.db',
+            },
+            volumes: [
+                { hostPath: '/tmp/test-snapshot.db', containerPath: '/data/snapshot/app.db', readonly: true },
+            ],
+        });
+        await container.waitForLog(/snapshot copied|database ready/i, 30000);
+    });
+    // ============ FILE SYSTEM TEST ============
+    test('file upload directory setup', async () => {
+        const container = await Container('test-uploads', {
+            image: PROJECT.image,
+            env: { FILE_UPLOAD_PATH: '/app/custom-uploads' },
+        });
+        await container.waitForLog(/upload directory|ensuring/i, 10000);
+        const result = await container.exec(['ls', '-la', '/app/custom-uploads']);
+        expect(result.exitCode).toBe(0);
+        expect(result.stdout).toContain('drwx'); // Directory exists with permissions
+    });
+    // ============ NETWORK ISOLATION TEST ============
+    test('network isolation with iptables', async () => {
+        const network = await Network('isolated-net');
+        const container = await Container('test-isolation', {
+            image: PROJECT.image,
+            networks: [network],
+            env: { ENABLE_NETWORK_ISOLATION: 'true' },
+            capAdd: ['NET_ADMIN'],
+        });
+        await container.waitForLog(/network isolation configured|iptables/i, 15000);
+    });
+    // ============ PRIVILEGE DROPPING TEST ============
+    test('privilege dropping', async () => {
+        const container = await Container('test-privileges', {
+            image: PROJECT.image,
+        });
+        await container.waitForLog(/dropping privileges|started/i, 15000);
+        const result = await container.exec(['whoami']);
+        expect(result.exitCode).toBe(0);
+        expect(result.stdout.trim()).not.toBe('root');
+    });
+    // ============ ENVIRONMENT VARIABLE TEST ============
+    test('environment variable propagation', async () => {
+        const container = await Container('test-env', {
+            image: PROJECT.image,
+            env: {
+                PORT: '8080',
+                LOG_LEVEL: 'debug',
+                CUSTOM_VAR: 'test-value',
+            },
+            ports: [{ internal: 8080, external: 18080 }],
+        });
+        await container.waitForLog(/listening|started/i, 30000);
+        // Verify env vars are set
+        const envResult = await container.exec(['printenv']);
+        expect(envResult.stdout).toContain('PORT=8080');
+        expect(envResult.stdout).toContain('LOG_LEVEL=debug');
+        expect(envResult.stdout).toContain('CUSTOM_VAR=test-value');
+    });
+    // ============ USER OVERRIDE TEST ============
+    test('user override', async () => {
+        const container = await Container('test-user', {
+            image: PROJECT.image,
+            user: '1000:1000',
+        });
+        await container.waitForLog(/started|ready/i, 15000);
+        const result = await container.exec(['id']);
+        expect(result.exitCode).toBe(0);
+        expect(result.stdout).toContain('uid=1000');
+        expect(result.stdout).toContain('gid=1000');
+    });
+    // ============ CAPABILITIES TEST ============
+    test('dropped capabilities', async () => {
+        const container = await Container('test-caps', {
+            image: PROJECT.image,
+            capDrop: ['ALL'],
+            capAdd: ['NET_BIND_SERVICE'],
+        });
+        await container.waitForLog(/started|ready/i, 15000);
+        // Container should be running with minimal capabilities
+        const result = await container.exec(['cat', '/proc/1/status']);
+        expect(result.exitCode).toBe(0);
+        // CapEff should show limited capabilities
+        expect(result.stdout).toContain('CapEff');
+    });
+    // ============ GRACEFUL SHUTDOWN TEST ============
+    test('graceful shutdown', async () => {
+        const container = await Container('test-shutdown', {
+            image: PROJECT.image,
+            env: { PORT: String(PROJECT.port) },
+        });
+        await container.waitForLog(/listening|started|ready/i, 30000);
+        const metadata = await container.stop('SIGTERM', 10000);
+        expect(metadata.graceful).toBe(true);
+        expect(metadata.signal).toBe('SIGTERM');
+    });
+    // ============ RESOURCE STATS TEST ============
+    test('container stats', async () => {
+        const container = await Container('test-stats', {
+            image: PROJECT.image,
+            env: { PORT: String(PROJECT.port) },
+        });
+        await container.waitForLog(/listening|started|ready/i, 30000);
+        const stats = await container.stats();
+        expect(stats.cpu).toBeDefined();
+        expect(stats.cpu.percent).toBeGreaterThanOrEqual(0);
+        expect(stats.memory).toBeDefined();
+        expect(stats.memory.usage).toBeGreaterThan(0);
+        expect(stats.network).toBeDefined();
+    });
+});

package/dist/__tests__/test-setup.d.ts

@@ -0,0 +1,9 @@
+/**
+ * Shared test setup for integration tests.
+ *
+ * Builds a minimal test image that can be used across all tests,
+ * ensuring tests are self-contained and don't rely on external images.
+ */
+export declare const TEST_IMAGE = "harpoon-test:latest";
+export declare function buildTestImage(): Promise<void>;
+//# sourceMappingURL=test-setup.d.ts.map

package/dist/__tests__/test-setup.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"test-setup.d.ts","sourceRoot":"","sources":["../../src/__tests__/test-setup.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAKH,eAAO,MAAM,UAAU,wBAAwB,CAAC;AAIhD,wBAAsB,cAAc,IAAI,OAAO,CAAC,IAAI,CAAC,CAWpD"}

package/dist/__tests__/test-setup.js

@@ -0,0 +1,20 @@
+/**
+ * Shared test setup for integration tests.
+ *
+ * Builds a minimal test image that can be used across all tests,
+ * ensuring tests are self-contained and don't rely on external images.
+ */
+import { Image } from '../index';
+import { join } from 'path';
+export const TEST_IMAGE = 'harpoon-test:latest';
+let imageBuilt = false;
+export async function buildTestImage() {
+    if (imageBuilt) {
+        return;
+    }
+    await Image(TEST_IMAGE, {
+        context: join(__dirname, 'fixtures'),
+        dockerfile: 'Dockerfile',
+    });
+    imageBuilt = true;
+}

package/dist/api/index.d.ts

@@ -3,5 +3,5 @@
  *
  * Re-exports the Promise-based API for cleaner imports.
  */
-export { Network, Container, database, Image, setDocker, resetDocker, destroyAll, type NetworkConfig, type NetworkResource, type ContainerConfig, type ContainerResource, type PortMapping, type ShutdownMetadata, type DatabaseConfig, type DatabaseResource, type ImageConfig, type ImageResource, type ContainerStats, type ExecOptions, type ExecResult, type LogOptions, type LogLine, } from './promise';
+export { Network, Container, database, Image, setDocker, resetDocker, destroyAll, type NetworkConfig, type NetworkResource, type ContainerConfig, type ContainerResource, type PortMapping, type ShutdownMetadata, type DatabaseConfig, type DatabaseResource, type ImageConfig, type ImageResource, type ContainerStats, type ExecOptions, type ExecResult, type LogOptions, type LogLine, type VolumeMapping, } from './promise';
 //# sourceMappingURL=index.d.ts.map

package/dist/api/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/api/index.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH,OAAO,EAEL,OAAO,EACP,SAAS,EACT,QAAQ,EACR,KAAK,EAGL,SAAS,EACT,WAAW,EACX,UAAU,EAGV,KAAK,aAAa,EAClB,KAAK,eAAe,EACpB,KAAK,eAAe,EACpB,KAAK,iBAAiB,EACtB,KAAK,WAAW,EAChB,KAAK,gBAAgB,EACrB,KAAK,cAAc,EACnB,KAAK,gBAAgB,EACrB,KAAK,WAAW,EAChB,KAAK,aAAa,EAGlB,KAAK,cAAc,EACnB,KAAK,WAAW,EAChB,KAAK,UAAU,EACf,KAAK,UAAU,EACf,KAAK,OAAO,GACb,MAAM,WAAW,CAAC"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/api/index.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH,OAAO,EAEL,OAAO,EACP,SAAS,EACT,QAAQ,EACR,KAAK,EAGL,SAAS,EACT,WAAW,EACX,UAAU,EAGV,KAAK,aAAa,EAClB,KAAK,eAAe,EACpB,KAAK,eAAe,EACpB,KAAK,iBAAiB,EACtB,KAAK,WAAW,EAChB,KAAK,gBAAgB,EACrB,KAAK,cAAc,EACnB,KAAK,gBAAgB,EACrB,KAAK,WAAW,EAChB,KAAK,aAAa,EAGlB,KAAK,cAAc,EACnB,KAAK,WAAW,EAChB,KAAK,UAAU,EACf,KAAK,UAAU,EACf,KAAK,OAAO,EACZ,KAAK,aAAa,GACnB,MAAM,WAAW,CAAC"}

package/dist/api/promise.d.ts

@@ -7,8 +7,8 @@
  * Inspired by Alchemy.run and Pulumi's IAC patterns.
  */
 import Docker from 'dockerode';
-import { type ContainerStats, type ExecOptions, type ExecResult, type LogOptions, type LogLine } from '../resources';
-export type { ContainerStats, ExecOptions, ExecResult, LogOptions, LogLine, } from '../resources';
+import { type ContainerStats, type ExecOptions, type ExecResult, type LogOptions, type LogLine, type VolumeMapping } from '../resources';
+export type { ContainerStats, ExecOptions, ExecResult, LogOptions, LogLine, VolumeMapping, } from '../resources';
 import type { Binding } from '../bindings/types';
 export interface NetworkConfig {
     /** Network driver (default: 'bridge') */
@@ -41,6 +41,16 @@ export interface ContainerConfig {
     cmd?: string[];
     /** Bindings that provide env vars and lifecycle hooks */
     bindings?: Record<string, Binding>;
+    /** Volume mounts (host:container) */
+    volumes?: VolumeMapping[];
+    /** Capabilities to add (e.g., 'NET_ADMIN', 'SYS_PTRACE') */
+    capAdd?: string[];
+    /** Capabilities to drop (e.g., 'ALL') */
+    capDrop?: string[];
+    /** Run in privileged mode */
+    privileged?: boolean;
+    /** User/group to run as (e.g., '1000:1000') */
+    user?: string;
 }
 export interface ContainerResource {
     readonly id: string;

package/dist/api/promise.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"promise.d.ts","sourceRoot":"","sources":["../../src/api/promise.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAMH,OAAO,MAAM,MAAM,WAAW,CAAC;AAG/B,OAAO,EASL,KAAK,cAAc,EACnB,KAAK,WAAW,EAChB,KAAK,UAAU,EACf,KAAK,UAAU,EACf,KAAK,OAAO,EACb,MAAM,cAAc,CAAC;AAGtB,YAAY,EACV,cAAc,EACd,WAAW,EACX,UAAU,EACV,UAAU,EACV,OAAO,GACR,MAAM,cAAc,CAAC;AAOtB,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,mBAAmB,CAAC;AAIjD,MAAM,WAAW,aAAa;IAC5B,yCAAyC;IACzC,MAAM,CAAC,EAAE,MAAM,CAAC;CACjB;AAED,MAAM,WAAW,eAAe;IAC9B,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAC;IACpB,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,0BAA0B;IAC1B,OAAO,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC;CAC1B;AAED,MAAM,WAAW,WAAW;IAC1B,QAAQ,EAAE,MAAM,CAAC;IACjB,QAAQ,EAAE,MAAM,CAAC;CAClB;AAED,MAAM,WAAW,gBAAgB;IAC/B,WAAW,EAAE,MAAM,CAAC;IACpB,QAAQ,EAAE,OAAO,CAAC;IAClB,WAAW,EAAE,MAAM,CAAC;IACpB,MAAM,EAAE,MAAM,CAAC;IACf,SAAS,EAAE,MAAM,CAAC;CACnB;AAED,MAAM,WAAW,eAAe;IAC9B,KAAK,EAAE,MAAM,CAAC;IACd,QAAQ,CAAC,EAAE,KAAK,CAAC,eAAe,GAAG;QAAE,IAAI,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;IACrD,KAAK,CAAC,EAAE,WAAW,EAAE,CAAC;IACtB,GAAG,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAC7B,GAAG,CAAC,EAAE,MAAM,EAAE,CAAC;IACf,yDAAyD;IACzD,QAAQ,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;CACpC;AAED,MAAM,WAAW,iBAAiB;IAChC,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAC;IACpB,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,uCAAuC;IACvC,UAAU,CAAC,OAAO,EAAE,MAAM,GAAG,MAAM,EAAE,SAAS,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IACxE,gCAAgC;IAChC,IAAI,CAAC,MAAM,CAAC,EAAE,MAAM,EAAE,SAAS,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,gBAAgB,CAAC,CAAC;IACrE,oCAAoC;IACpC,KAAK,CAAC,WAAW,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC;IAC5C,+DAA+D;IAC/D,KAAK,IAAI,OAAO,CAAC,cAAc,CAAC,CAAC;IACjC,6CAA6C;IAC7C,IAAI,CAAC,GAAG,EAAE,MAAM,EAAE,EAAE,OAAO,CAAC,EAAE,IAAI,CAAC,WAAW,EAAE,KAAK,CAAC,GAAG,OAAO,CAAC,UAAU,CAAC,CAAC;IAC7E,iDAAiD;IACjD,UAAU,CAAC,OAAO,CAAC,EAAE,UAAU,GAAG,OAAO,CAAC,aAAa,CAAC,OAAO,CAAC,CAAC,CAAC;IAClE,4BAA4B;IAC5B,OAAO,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC;CAC1B;AAED,MAAM,WAAW,cAAc;IAC7B,+DAA+D;IAC/D,KAAK,EAAE,MAAM,CAAC;IACd,mDAAmD;IACnD,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,8DAA8D;IAC9D,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,oEAAoE;IACpE,GAAG,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAC7B,6BAA6B;IAC7B,QAAQ,CAAC,EAAE,KAAK,CAAC,eAAe,GAAG;QAAE,IAAI,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;IACrD,iCAAiC;IACjC,QAAQ,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;CACpC;AAED,MAAM,WAAW,gBAAiB,SAAQ,iBAAiB;IACzD,0CAA0C;IAC1C,QAAQ,CAAC,gBAAgB,EAAE,MAAM,CAAC;IAClC,iDAAiD;IACjD,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,uCAAuC;IACvC,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;CAC3B;AAED,MAAM,WAAW,WAAW;IAC1B,0CAA0C;IAC1C,OAAO,EAAE,MAAM,CAAC;IAChB,6CAA6C;IAC7C,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,6BAA6B;IAC7B,SAAS,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IACnC,kDAAkD;IAClD,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,uCAAuC;IACvC,eAAe,CAAC,EAAE,MAAM,CAAC;IACzB,mDAAmD;IACnD,cAAc,CAAC,EAAE,MAAM,CAAC;CACzB;AAED,MAAM,WAAW,aAAa;IAC5B,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAC;IACrB,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAC;CACtB;AA0ID;;;GAGG;AACH,wBAAgB,SAAS,CAAC,MAAM,EAAE,MAAM,GAAG,IAAI,CAE9C;AAED;;GAEG;AACH,wBAAgB,WAAW,IAAI,IAAI,CAElC;AA4CD;;;;;;;;;GASG;AACH,wBAAsB,OAAO,CAC3B,IAAI,EAAE,MAAM,EACZ,MAAM,GAAE,aAAkB,GACzB,OAAO,CAAC,eAAe,CAAC,CA+B1B;AAED;;;;;;;;;;;;;;;GAeG;AACH,wBAAsB,SAAS,CAC7B,IAAI,EAAE,MAAM,EACZ,MAAM,EAAE,eAAe,GACtB,OAAO,CAAC,iBAAiB,CAAC,CAiE5B;AAED;;;;;;;;;;;;;;;;;;;;;GAqBG;AACH,wBAAsB,QAAQ,CAC5B,IAAI,EAAE,MAAM,EACZ,MAAM,EAAE,cAAc,GACrB,OAAO,CAAC,gBAAgB,CAAC,CAoE3B;AAED;;;;;;;;;;;;;;;GAeG;AACH,wBAAsB,KAAK,CACzB,GAAG,EAAE,MAAM,EACX,MAAM,EAAE,WAAW,GAClB,OAAO,CAAC,aAAa,CAAC,CAWxB;AAED;;;GAGG;AACH,wBAAsB,UAAU,IAAI,OAAO,CAAC,IAAI,CAAC,CAShD"}
+{"version":3,"file":"promise.d.ts","sourceRoot":"","sources":["../../src/api/promise.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAMH,OAAO,MAAM,MAAM,WAAW,CAAC;AAG/B,OAAO,EASL,KAAK,cAAc,EACnB,KAAK,WAAW,EAChB,KAAK,UAAU,EACf,KAAK,UAAU,EACf,KAAK,OAAO,EACZ,KAAK,aAAa,EACnB,MAAM,cAAc,CAAC;AAGtB,YAAY,EACV,cAAc,EACd,WAAW,EACX,UAAU,EACV,UAAU,EACV,OAAO,EACP,aAAa,GACd,MAAM,cAAc,CAAC;AAOtB,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,mBAAmB,CAAC;AAIjD,MAAM,WAAW,aAAa;IAC5B,yCAAyC;IACzC,MAAM,CAAC,EAAE,MAAM,CAAC;CACjB;AAED,MAAM,WAAW,eAAe;IAC9B,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAC;IACpB,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,0BAA0B;IAC1B,OAAO,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC;CAC1B;AAED,MAAM,WAAW,WAAW;IAC1B,QAAQ,EAAE,MAAM,CAAC;IACjB,QAAQ,EAAE,MAAM,CAAC;CAClB;AAED,MAAM,WAAW,gBAAgB;IAC/B,WAAW,EAAE,MAAM,CAAC;IACpB,QAAQ,EAAE,OAAO,CAAC;IAClB,WAAW,EAAE,MAAM,CAAC;IACpB,MAAM,EAAE,MAAM,CAAC;IACf,SAAS,EAAE,MAAM,CAAC;CACnB;AAED,MAAM,WAAW,eAAe;IAC9B,KAAK,EAAE,MAAM,CAAC;IACd,QAAQ,CAAC,EAAE,KAAK,CAAC,eAAe,GAAG;QAAE,IAAI,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;IACrD,KAAK,CAAC,EAAE,WAAW,EAAE,CAAC;IACtB,GAAG,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAC7B,GAAG,CAAC,EAAE,MAAM,EAAE,CAAC;IACf,yDAAyD;IACzD,QAAQ,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IACnC,qCAAqC;IACrC,OAAO,CAAC,EAAE,aAAa,EAAE,CAAC;IAC1B,4DAA4D;IAC5D,MAAM,CAAC,EAAE,MAAM,EAAE,CAAC;IAClB,yCAAyC;IACzC,OAAO,CAAC,EAAE,MAAM,EAAE,CAAC;IACnB,6BAA6B;IAC7B,UAAU,CAAC,EAAE,OAAO,CAAC;IACrB,+CAA+C;IAC/C,IAAI,CAAC,EAAE,MAAM,CAAC;CACf;AAED,MAAM,WAAW,iBAAiB;IAChC,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAC;IACpB,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,uCAAuC;IACvC,UAAU,CAAC,OAAO,EAAE,MAAM,GAAG,MAAM,EAAE,SAAS,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IACxE,gCAAgC;IAChC,IAAI,CAAC,MAAM,CAAC,EAAE,MAAM,EAAE,SAAS,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,gBAAgB,CAAC,CAAC;IACrE,oCAAoC;IACpC,KAAK,CAAC,WAAW,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC;IAC5C,+DAA+D;IAC/D,KAAK,IAAI,OAAO,CAAC,cAAc,CAAC,CAAC;IACjC,6CAA6C;IAC7C,IAAI,CAAC,GAAG,EAAE,MAAM,EAAE,EAAE,OAAO,CAAC,EAAE,IAAI,CAAC,WAAW,EAAE,KAAK,CAAC,GAAG,OAAO,CAAC,UAAU,CAAC,CAAC;IAC7E,iDAAiD;IACjD,UAAU,CAAC,OAAO,CAAC,EAAE,UAAU,GAAG,OAAO,CAAC,aAAa,CAAC,OAAO,CAAC,CAAC,CAAC;IAClE,4BAA4B;IAC5B,OAAO,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC;CAC1B;AAED,MAAM,WAAW,cAAc;IAC7B,+DAA+D;IAC/D,KAAK,EAAE,MAAM,CAAC;IACd,mDAAmD;IACnD,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,8DAA8D;IAC9D,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,oEAAoE;IACpE,GAAG,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAC7B,6BAA6B;IAC7B,QAAQ,CAAC,EAAE,KAAK,CAAC,eAAe,GAAG;QAAE,IAAI,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;IACrD,iCAAiC;IACjC,QAAQ,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;CACpC;AAED,MAAM,WAAW,gBAAiB,SAAQ,iBAAiB;IACzD,0CAA0C;IAC1C,QAAQ,CAAC,gBAAgB,EAAE,MAAM,CAAC;IAClC,iDAAiD;IACjD,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,uCAAuC;IACvC,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;CAC3B;AAED,MAAM,WAAW,WAAW;IAC1B,0CAA0C;IAC1C,OAAO,EAAE,MAAM,CAAC;IAChB,6CAA6C;IAC7C,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,6BAA6B;IAC7B,SAAS,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IACnC,kDAAkD;IAClD,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,uCAAuC;IACvC,eAAe,CAAC,EAAE,MAAM,CAAC;IACzB,mDAAmD;IACnD,cAAc,CAAC,EAAE,MAAM,CAAC;CACzB;AAED,MAAM,WAAW,aAAa;IAC5B,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAC;IACrB,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAC;CACtB;AA0ID;;;GAGG;AACH,wBAAgB,SAAS,CAAC,MAAM,EAAE,MAAM,GAAG,IAAI,CAE9C;AAED;;GAEG;AACH,wBAAgB,WAAW,IAAI,IAAI,CAElC;AA4CD;;;;;;;;;GASG;AACH,wBAAsB,OAAO,CAC3B,IAAI,EAAE,MAAM,EACZ,MAAM,GAAE,aAAkB,GACzB,OAAO,CAAC,eAAe,CAAC,CA+B1B;AAED;;;;;;;;;;;;;;;GAeG;AACH,wBAAsB,SAAS,CAC7B,IAAI,EAAE,MAAM,EACZ,MAAM,EAAE,eAAe,GACtB,OAAO,CAAC,iBAAiB,CAAC,CAsE5B;AAED;;;;;;;;;;;;;;;;;;;;;GAqBG;AACH,wBAAsB,QAAQ,CAC5B,IAAI,EAAE,MAAM,EACZ,MAAM,EAAE,cAAc,GACrB,OAAO,CAAC,gBAAgB,CAAC,CAoE3B;AAED;;;;;;;;;;;;;;;GAeG;AACH,wBAAsB,KAAK,CACzB,GAAG,EAAE,MAAM,EACX,MAAM,EAAE,WAAW,GAClB,OAAO,CAAC,aAAa,CAAC,CAWxB;AAED;;;GAGG;AACH,wBAAsB,UAAU,IAAI,OAAO,CAAC,IAAI,CAAC,CAShD"}

package/dist/api/promise.js

@@ -237,6 +237,11 @@ export async function Container(name, config) {
         ...(config.env !== undefined && { env: config.env }),
         ...(config.cmd !== undefined && { cmd: config.cmd }),
         ...(config.bindings !== undefined && { bindings: config.bindings }),
+        ...(config.volumes !== undefined && { volumes: config.volumes }),
+        ...(config.capAdd !== undefined && { capAdd: config.capAdd }),
+        ...(config.capDrop !== undefined && { capDrop: config.capDrop }),
+        ...(config.privileged !== undefined && { privileged: config.privileged }),
+        ...(config.user !== undefined && { user: config.user }),
     };
     const effectResource = await Effect.runPromise(EffectContainer(name, effectConfig, docker).pipe(Scope.extend(scope)));
     const resourceId = `container:${effectResource.id}`;

package/dist/index.d.ts

@@ -27,7 +27,7 @@
  * - Binding interface for env var injection and lifecycle hooks
  * - BuildBinding interface for Dockerfile transformations
  */
-export { Network, Container, database, Image, setDocker, resetDocker, destroyAll, type NetworkConfig, type NetworkResource, type ContainerConfig, type ContainerResource, type PortMapping, type ShutdownMetadata, type DatabaseConfig, type DatabaseResource, type ImageConfig, type ImageResource, type ContainerStats, type ExecOptions, type ExecResult, type LogOptions, type LogLine, } from './api';
+export { Network, Container, database, Image, setDocker, resetDocker, destroyAll, type NetworkConfig, type NetworkResource, type ContainerConfig, type ContainerResource, type PortMapping, type ShutdownMetadata, type DatabaseConfig, type DatabaseResource, type ImageConfig, type ImageResource, type ContainerStats, type ExecOptions, type ExecResult, type LogOptions, type LogLine, type VolumeMapping, } from './api';
 export type { Binding, BuildBinding, BindingsEnv, FlatBindingsEnv, } from './bindings';
 export { isBuildBinding, mergeBindingsEnv, createEnvBinding, } from './bindings';
 export { HarpoonError, NetworkError, ImageError, ContainerError, ScopeError, BindingError, toHarpoonError, asCause, isHarpoonError, isNetworkError, isImageError, isContainerError, isScopeError, isBindingError, } from './errors';

package/dist/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA4BG;AAIH,OAAO,EAEL,OAAO,EACP,SAAS,EACT,QAAQ,EACR,KAAK,EAGL,SAAS,EACT,WAAW,EACX,UAAU,EAGV,KAAK,aAAa,EAClB,KAAK,eAAe,EACpB,KAAK,eAAe,EACpB,KAAK,iBAAiB,EACtB,KAAK,WAAW,EAChB,KAAK,gBAAgB,EACrB,KAAK,cAAc,EACnB,KAAK,gBAAgB,EACrB,KAAK,WAAW,EAChB,KAAK,aAAa,EAGlB,KAAK,cAAc,EACnB,KAAK,WAAW,EAChB,KAAK,UAAU,EACf,KAAK,UAAU,EACf,KAAK,OAAO,GACb,MAAM,OAAO,CAAC;AAIf,YAAY,EACV,OAAO,EACP,YAAY,EACZ,WAAW,EACX,eAAe,GAChB,MAAM,YAAY,CAAC;AAEpB,OAAO,EACL,cAAc,EACd,gBAAgB,EAChB,gBAAgB,GACjB,MAAM,YAAY,CAAC;AAIpB,OAAO,EACL,YAAY,EACZ,YAAY,EACZ,UAAU,EACV,cAAc,EACd,UAAU,EACV,YAAY,EACZ,cAAc,EACd,OAAO,EACP,cAAc,EACd,cAAc,EACd,YAAY,EACZ,gBAAgB,EAChB,YAAY,EACZ,cAAc,GACf,MAAM,UAAU,CAAC;AAElB,YAAY,EAAE,eAAe,EAAE,MAAM,UAAU,CAAC;AAIhD,OAAO,EACL,qBAAqB,EACrB,qBAAqB,EACrB,gBAAgB,EAChB,mBAAmB,EACnB,gBAAgB,EAChB,kBAAkB,GACnB,MAAM,oBAAoB,CAAC;AAE5B,YAAY,EACV,aAAa,EACb,kBAAkB,EAClB,YAAY,EACZ,qBAAqB,GACtB,MAAM,oBAAoB,CAAC;AAI5B,OAAO,EACL,qBAAqB,EACrB,qBAAqB,EACrB,gBAAgB,EAChB,kBAAkB,EAClB,kBAAkB,EAClB,gBAAgB,GACjB,MAAM,mBAAmB,CAAC;AAE3B,YAAY,EACV,aAAa,EACb,YAAY,EACZ,WAAW,EACX,qBAAqB,EACrB,YAAY,GACb,MAAM,mBAAmB,CAAC;AAI3B,OAAO,EACL,mBAAmB,EACnB,mBAAmB,EACnB,cAAc,EACd,gBAAgB,EAChB,sBAAsB,EACtB,qBAAqB,EACrB,8BAA8B,EAC9B,eAAe,EACf,qBAAqB,EACrB,mBAAmB,EACnB,cAAc,EACd,mBAAmB,EACnB,kBAAkB,EAClB,gBAAgB,EAChB,WAAW,EACX,MAAM,EACN,gBAAgB,GACjB,MAAM,2BAA2B,CAAC;AAEnC,YAAY,EACV,sBAAsB,EACtB,qBAAqB,EACrB,gBAAgB,EAChB,mBAAmB,EACnB,iBAAiB,EACjB,eAAe,GAChB,MAAM,2BAA2B,CAAC"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA4BG;AAIH,OAAO,EAEL,OAAO,EACP,SAAS,EACT,QAAQ,EACR,KAAK,EAGL,SAAS,EACT,WAAW,EACX,UAAU,EAGV,KAAK,aAAa,EAClB,KAAK,eAAe,EACpB,KAAK,eAAe,EACpB,KAAK,iBAAiB,EACtB,KAAK,WAAW,EAChB,KAAK,gBAAgB,EACrB,KAAK,cAAc,EACnB,KAAK,gBAAgB,EACrB,KAAK,WAAW,EAChB,KAAK,aAAa,EAGlB,KAAK,cAAc,EACnB,KAAK,WAAW,EAChB,KAAK,UAAU,EACf,KAAK,UAAU,EACf,KAAK,OAAO,EACZ,KAAK,aAAa,GACnB,MAAM,OAAO,CAAC;AAIf,YAAY,EACV,OAAO,EACP,YAAY,EACZ,WAAW,EACX,eAAe,GAChB,MAAM,YAAY,CAAC;AAEpB,OAAO,EACL,cAAc,EACd,gBAAgB,EAChB,gBAAgB,GACjB,MAAM,YAAY,CAAC;AAIpB,OAAO,EACL,YAAY,EACZ,YAAY,EACZ,UAAU,EACV,cAAc,EACd,UAAU,EACV,YAAY,EACZ,cAAc,EACd,OAAO,EACP,cAAc,EACd,cAAc,EACd,YAAY,EACZ,gBAAgB,EAChB,YAAY,EACZ,cAAc,GACf,MAAM,UAAU,CAAC;AAElB,YAAY,EAAE,eAAe,EAAE,MAAM,UAAU,CAAC;AAIhD,OAAO,EACL,qBAAqB,EACrB,qBAAqB,EACrB,gBAAgB,EAChB,mBAAmB,EACnB,gBAAgB,EAChB,kBAAkB,GACnB,MAAM,oBAAoB,CAAC;AAE5B,YAAY,EACV,aAAa,EACb,kBAAkB,EAClB,YAAY,EACZ,qBAAqB,GACtB,MAAM,oBAAoB,CAAC;AAI5B,OAAO,EACL,qBAAqB,EACrB,qBAAqB,EACrB,gBAAgB,EAChB,kBAAkB,EAClB,kBAAkB,EAClB,gBAAgB,GACjB,MAAM,mBAAmB,CAAC;AAE3B,YAAY,EACV,aAAa,EACb,YAAY,EACZ,WAAW,EACX,qBAAqB,EACrB,YAAY,GACb,MAAM,mBAAmB,CAAC;AAI3B,OAAO,EACL,mBAAmB,EACnB,mBAAmB,EACnB,cAAc,EACd,gBAAgB,EAChB,sBAAsB,EACtB,qBAAqB,EACrB,8BAA8B,EAC9B,eAAe,EACf,qBAAqB,EACrB,mBAAmB,EACnB,cAAc,EACd,mBAAmB,EACnB,kBAAkB,EAClB,gBAAgB,EAChB,WAAW,EACX,MAAM,EACN,gBAAgB,GACjB,MAAM,2BAA2B,CAAC;AAEnC,YAAY,EACV,sBAAsB,EACtB,qBAAqB,EACrB,gBAAgB,EAChB,mBAAmB,EACnB,iBAAiB,EACjB,eAAe,GAChB,MAAM,2BAA2B,CAAC"}

package/dist/resources/container.d.ts

@@ -14,6 +14,14 @@ export interface PortMapping {
     internal: number;
     external: number;
 }
+export interface VolumeMapping {
+    /** Host path to mount */
+    hostPath: string;
+    /** Container path to mount at */
+    containerPath: string;
+    /** Mount as read-only */
+    readonly?: boolean;
+}
 export interface ContainerConfig {
     image: string;
     networks?: Array<{
@@ -24,6 +32,16 @@ export interface ContainerConfig {
     cmd?: string[];
     /** Bindings that provide env vars and lifecycle hooks */
     bindings?: Record<string, Binding>;
+    /** Volume mounts (host:container) */
+    volumes?: VolumeMapping[];
+    /** Capabilities to add (e.g., 'NET_ADMIN', 'SYS_PTRACE') */
+    capAdd?: string[];
+    /** Capabilities to drop (e.g., 'ALL') */
+    capDrop?: string[];
+    /** Run in privileged mode */
+    privileged?: boolean;
+    /** User/group to run as (e.g., '1000:1000') */
+    user?: string;
 }
 export interface ShutdownMetadata {
     signalCount: number;

package/dist/resources/container.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"container.d.ts","sourceRoot":"","sources":["../../src/resources/container.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAEH,OAAO,EAAE,MAAM,EAAE,KAAK,EAA0B,MAAM,QAAQ,CAAC;AAC/D,OAAO,MAAM,MAAM,WAAW,CAAC;AAE/B,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,mBAAmB,CAAC;AAEjD,OAAO,EAKL,KAAK,cAAc,EACnB,KAAK,WAAW,EAChB,KAAK,UAAU,EACf,KAAK,UAAU,EACf,KAAK,OAAO,EACb,MAAM,WAAW,CAAC;AAEnB,MAAM,WAAW,WAAW;IAC1B,QAAQ,EAAE,MAAM,CAAC;IACjB,QAAQ,EAAE,MAAM,CAAC;CAClB;AAED,MAAM,WAAW,eAAe;IAC9B,KAAK,EAAE,MAAM,CAAC;IACd,QAAQ,CAAC,EAAE,KAAK,CAAC;QAAE,IAAI,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;IACnC,KAAK,CAAC,EAAE,WAAW,EAAE,CAAC;IACtB,GAAG,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAC7B,GAAG,CAAC,EAAE,MAAM,EAAE,CAAC;IACf,yDAAyD;IACzD,QAAQ,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;CACpC;AAED,MAAM,WAAW,gBAAgB;IAC/B,WAAW,EAAE,MAAM,CAAC;IACpB,QAAQ,EAAE,OAAO,CAAC;IAClB,WAAW,EAAE,MAAM,CAAC;IACpB,MAAM,EAAE,MAAM,CAAC;IACf,SAAS,EAAE,MAAM,CAAC;CACnB;AAED,MAAM,WAAW,iBAAiB;IAChC,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAC;IACpB,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,uCAAuC;IACvC,QAAQ,CAAC,UAAU,EAAE,CACnB,OAAO,EAAE,MAAM,GAAG,MAAM,EACxB,SAAS,CAAC,EAAE,MAAM,KACf,MAAM,CAAC,MAAM,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC;IAChC,4CAA4C;IAC5C,QAAQ,CAAC,cAAc,EAAE,CACvB,MAAM,CAAC,EAAE,MAAM,EACf,SAAS,CAAC,EAAE,MAAM,KACf,MAAM,CAAC,MAAM,CAAC,gBAAgB,EAAE,KAAK,CAAC,CAAC;IAC5C,6CAA6C;IAC7C,QAAQ,CAAC,KAAK,EAAE,CAAC,WAAW,EAAE,MAAM,KAAK,MAAM,CAAC,MAAM,CAAC,MAAM,EAAE,KAAK,CAAC,CAAC;IACtE,+DAA+D;IAC/D,QAAQ,CAAC,KAAK,EAAE,MAAM,MAAM,CAAC,MAAM,CAAC,cAAc,EAAE,KAAK,CAAC,CAAC;IAC3D,6CAA6C;IAC7C,QAAQ,CAAC,IAAI,EAAE,CAAC,OAAO,EAAE,WAAW,KAAK,MAAM,CAAC,MAAM,CAAC,UAAU,EAAE,KAAK,CAAC,CAAC;IAC1E,iDAAiD;IACjD,QAAQ,CAAC,UAAU,EAAE,CAAC,OAAO,CAAC,EAAE,UAAU,KAAK,MAAM,CAAC,MAAM,CAAC,aAAa,CAAC,OAAO,CAAC,EAAE,KAAK,CAAC,CAAC;CAC7F;AA6ED,eAAO,MAAM,SAAS,uHA2hBnB,CAAC"}
+{"version":3,"file":"container.d.ts","sourceRoot":"","sources":["../../src/resources/container.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAEH,OAAO,EAAE,MAAM,EAAE,KAAK,EAA0B,MAAM,QAAQ,CAAC;AAC/D,OAAO,MAAM,MAAM,WAAW,CAAC;AAE/B,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,mBAAmB,CAAC;AAEjD,OAAO,EAKL,KAAK,cAAc,EACnB,KAAK,WAAW,EAChB,KAAK,UAAU,EACf,KAAK,UAAU,EACf,KAAK,OAAO,EACb,MAAM,WAAW,CAAC;AAEnB,MAAM,WAAW,WAAW;IAC1B,QAAQ,EAAE,MAAM,CAAC;IACjB,QAAQ,EAAE,MAAM,CAAC;CAClB;AAED,MAAM,WAAW,aAAa;IAC5B,yBAAyB;IACzB,QAAQ,EAAE,MAAM,CAAC;IACjB,iCAAiC;IACjC,aAAa,EAAE,MAAM,CAAC;IACtB,yBAAyB;IACzB,QAAQ,CAAC,EAAE,OAAO,CAAC;CACpB;AAED,MAAM,WAAW,eAAe;IAC9B,KAAK,EAAE,MAAM,CAAC;IACd,QAAQ,CAAC,EAAE,KAAK,CAAC;QAAE,IAAI,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;IACnC,KAAK,CAAC,EAAE,WAAW,EAAE,CAAC;IACtB,GAAG,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAC7B,GAAG,CAAC,EAAE,MAAM,EAAE,CAAC;IACf,yDAAyD;IACzD,QAAQ,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IACnC,qCAAqC;IACrC,OAAO,CAAC,EAAE,aAAa,EAAE,CAAC;IAC1B,4DAA4D;IAC5D,MAAM,CAAC,EAAE,MAAM,EAAE,CAAC;IAClB,yCAAyC;IACzC,OAAO,CAAC,EAAE,MAAM,EAAE,CAAC;IACnB,6BAA6B;IAC7B,UAAU,CAAC,EAAE,OAAO,CAAC;IACrB,+CAA+C;IAC/C,IAAI,CAAC,EAAE,MAAM,CAAC;CACf;AAED,MAAM,WAAW,gBAAgB;IAC/B,WAAW,EAAE,MAAM,CAAC;IACpB,QAAQ,EAAE,OAAO,CAAC;IAClB,WAAW,EAAE,MAAM,CAAC;IACpB,MAAM,EAAE,MAAM,CAAC;IACf,SAAS,EAAE,MAAM,CAAC;CACnB;AAED,MAAM,WAAW,iBAAiB;IAChC,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAC;IACpB,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,uCAAuC;IACvC,QAAQ,CAAC,UAAU,EAAE,CACnB,OAAO,EAAE,MAAM,GAAG,MAAM,EACxB,SAAS,CAAC,EAAE,MAAM,KACf,MAAM,CAAC,MAAM,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC;IAChC,4CAA4C;IAC5C,QAAQ,CAAC,cAAc,EAAE,CACvB,MAAM,CAAC,EAAE,MAAM,EACf,SAAS,CAAC,EAAE,MAAM,KACf,MAAM,CAAC,MAAM,CAAC,gBAAgB,EAAE,KAAK,CAAC,CAAC;IAC5C,6CAA6C;IAC7C,QAAQ,CAAC,KAAK,EAAE,CAAC,WAAW,EAAE,MAAM,KAAK,MAAM,CAAC,MAAM,CAAC,MAAM,EAAE,KAAK,CAAC,CAAC;IACtE,+DAA+D;IAC/D,QAAQ,CAAC,KAAK,EAAE,MAAM,MAAM,CAAC,MAAM,CAAC,cAAc,EAAE,KAAK,CAAC,CAAC;IAC3D,6CAA6C;IAC7C,QAAQ,CAAC,IAAI,EAAE,CAAC,OAAO,EAAE,WAAW,KAAK,MAAM,CAAC,MAAM,CAAC,UAAU,EAAE,KAAK,CAAC,CAAC;IAC1E,iDAAiD;IACjD,QAAQ,CAAC,UAAU,EAAE,CAAC,OAAO,CAAC,EAAE,UAAU,KAAK,MAAM,CAAC,MAAM,CAAC,aAAa,CAAC,OAAO,CAAC,EAAE,KAAK,CAAC,CAAC;CAC7F;AA6ED,eAAO,MAAM,SAAS,uHAgkBnB,CAAC"}

package/dist/resources/container.js

@@ -142,9 +142,14 @@ export const Container = (resourceId, config, docker) => Effect.acquireRelease(E
                 NetworkMode: config.networks?.[0]?.name,
                 AutoRemove: false,
                 PortBindings,
+                Binds: config.volumes?.map(v => `${v.hostPath}:${v.containerPath}${v.readonly ? ':ro' : ''}`),
+                CapAdd: config.capAdd,
+                CapDrop: config.capDrop,
+                Privileged: config.privileged,
             },
             ExposedPorts,
             Cmd: config.cmd,
+            User: config.user,
             StopSignal: 'SIGTERM',
             StopTimeout: 10,
         });
@@ -376,66 +381,94 @@ export const Container = (resourceId, config, docker) => Effect.acquireRelease(E
                     const stdout = opts.stdout ?? true;
                     const stderr = opts.stderr ?? true;
                     const timestamps = opts.timestamps ?? false;
-                    const stream = await container.logs({
-                        follow: true,
-                        stdout,
-                        stderr,
-                        since: opts.since,
-                        until: opts.until,
-                        tail: opts.tail,
-                        timestamps,
-                    });
-                    // Create a wrapper to make the stream async iterable
-                    const readable = stream;
-                    // Convert NodeJS.ReadableStream to AsyncIterable<LogLine>
-                    async function* logIterator() {
-                        const chunks = [];
-                        // Use Promise-based iteration for ReadableStream
-                        for await (const chunk of readable) {
-                            // Parse Docker log format (8-byte header + payload)
-                            let offset = 0;
-                            const buffer = Buffer.isBuffer(chunk) ? chunk : Buffer.from(chunk);
-                            while (offset < buffer.length) {
-                                if (offset + 8 > buffer.length) {
-                                    // Incomplete header, yield rest as stdout
+                    const follow = opts.follow ?? false;
+                    // Helper to parse Docker log format from a buffer
+                    function* parseLogBuffer(buffer) {
+                        let offset = 0;
+                        while (offset < buffer.length) {
+                            if (offset + 8 > buffer.length) {
+                                // Incomplete header, yield rest as stdout
+                                const remaining = buffer.slice(offset).toString('utf-8').trim();
+                                if (remaining) {
                                     yield {
                                         stream: 'stdout',
-                                        message: buffer.slice(offset).toString('utf-8').trim(),
+                                        message: remaining,
                                     };
-                                    break;
                                 }
-                                const streamType = buffer.readUInt8(offset);
-                                const size = buffer.readUInt32BE(offset + 4);
-                                if (offset + 8 + size > buffer.length) {
-                                    // Incomplete payload
+                                break;
+                            }
+                            const streamType = buffer.readUInt8(offset);
+                            const size = buffer.readUInt32BE(offset + 4);
+                            if (offset + 8 + size > buffer.length) {
+                                // Incomplete payload
+                                const remaining = buffer.slice(offset + 8).toString('utf-8').trim();
+                                if (remaining) {
                                     yield {
                                         stream: streamType === 2 ? 'stderr' : 'stdout',
-                                        message: buffer.slice(offset + 8).toString('utf-8').trim(),
+                                        message: remaining,
                                     };
-                                    break;
                                 }
-                                const payload = buffer.slice(offset + 8, offset + 8 + size);
-                                const message = payload.toString('utf-8');
-                                // Parse timestamp if present (format: "2024-01-14T21:00:00.000000000Z message")
-                                let timestamp;
-                                let content = message;
-                                if (timestamps) {
-                                    const match = message.match(/^(\d{4}-\d{2}-\d{2}T\d{2}:\d{2}:\d{2}\.\d+Z)\s+(.*)$/s);
-                                    if (match) {
-                                        timestamp = match[1];
-                                        content = match[2] ?? '';
-                                    }
+                                break;
+                            }
+                            const payload = buffer.slice(offset + 8, offset + 8 + size);
+                            const message = payload.toString('utf-8');
+                            // Parse timestamp if present (format: "2024-01-14T21:00:00.000000000Z message")
+                            let timestamp;
+                            let content = message;
+                            if (timestamps) {
+                                const match = message.match(/^(\d{4}-\d{2}-\d{2}T\d{2}:\d{2}:\d{2}\.\d+Z)\s+(.*)$/s);
+                                if (match) {
+                                    timestamp = match[1];
+                                    content = match[2] ?? '';
                                 }
-                                yield {
-                                    stream: streamType === 2 ? 'stderr' : 'stdout',
-                                    timestamp,
-                                    message: content.trim(),
-                                };
-                                offset += 8 + size;
                             }
+                            yield {
+                                stream: streamType === 2 ? 'stderr' : 'stdout',
+                                timestamp,
+                                message: content.trim(),
+                            };
+                            offset += 8 + size;
                         }
                     }
-                    return logIterator();
+                    // Dockerode has different return types based on follow option:
+                    // - follow: false (or undefined) returns Buffer
+                    // - follow: true returns NodeJS.ReadableStream
+                    // We branch explicitly so TypeScript can infer correct types
+                    if (follow) {
+                        const readable = await container.logs({
+                            follow: true,
+                            stdout,
+                            stderr,
+                            since: opts.since,
+                            until: opts.until,
+                            tail: opts.tail,
+                            timestamps,
+                        });
+                        async function* streamIterator() {
+                            for await (const chunk of readable) {
+                                if (!Buffer.isBuffer(chunk) && typeof chunk !== 'string') {
+                                    continue;
+                                }
+                                const buffer = Buffer.isBuffer(chunk) ? chunk : Buffer.from(chunk);
+                                yield* parseLogBuffer(buffer);
+                            }
+                        }
+                        return streamIterator();
+                    }
+                    // Non-follow mode: Docker returns Buffer directly
+                    const buffer = await container.logs({
+                        follow: false,
+                        stdout,
+                        stderr,
+                        since: opts.since,
+                        until: opts.until,
+                        tail: opts.tail,
+                        timestamps,
+                    });
+                    async function* bufferIterator() {
+                        yield* parseLogBuffer(buffer);
+                    }
+                    return bufferIterator();
                 },
                 catch: (e) => new Error(`streamLogs failed: ${e}`),
             }),

package/dist/resources/index.d.ts

@@ -6,7 +6,7 @@
 export { Network } from './network';
 export type { NetworkConfig, NetworkResource } from './network';
 export { Container } from './container';
-export type { ContainerConfig, ContainerResource, PortMapping, ShutdownMetadata, } from './container';
+export type { ContainerConfig, ContainerResource, PortMapping, ShutdownMetadata, VolumeMapping, } from './container';
 export { containerStatsSchema, execOptionsSchema, execResultSchema, logOptionsSchema, logLineSchema, cpuStatsSchema, memoryStatsSchema, networkStatsSchema, statsOptionsSchema, } from './schemas';
 export type { ContainerStats, CpuStats, MemoryStats, NetworkStats, ExecOptions, ExecResult, LogOptions, LogLine, StatsOptions, } from './schemas';
 export { Image } from './image';

package/dist/resources/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/resources/index.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AACpC,YAAY,EAAE,aAAa,EAAE,eAAe,EAAE,MAAM,WAAW,CAAC;AAEhE,OAAO,EAAE,SAAS,EAAE,MAAM,aAAa,CAAC;AACxC,YAAY,EACV,eAAe,EACf,iBAAiB,EACjB,WAAW,EACX,gBAAgB,GACjB,MAAM,aAAa,CAAC;AAGrB,OAAO,EACL,oBAAoB,EACpB,iBAAiB,EACjB,gBAAgB,EAChB,gBAAgB,EAChB,aAAa,EACb,cAAc,EACd,iBAAiB,EACjB,kBAAkB,EAClB,kBAAkB,GACnB,MAAM,WAAW,CAAC;AACnB,YAAY,EACV,cAAc,EACd,QAAQ,EACR,WAAW,EACX,YAAY,EACZ,WAAW,EACX,UAAU,EACV,UAAU,EACV,OAAO,EACP,YAAY,GACb,MAAM,WAAW,CAAC;AAEnB,OAAO,EAAE,KAAK,EAAE,MAAM,SAAS,CAAC;AAChC,YAAY,EAAE,WAAW,EAAE,aAAa,EAAE,MAAM,SAAS,CAAC"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/resources/index.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AACpC,YAAY,EAAE,aAAa,EAAE,eAAe,EAAE,MAAM,WAAW,CAAC;AAEhE,OAAO,EAAE,SAAS,EAAE,MAAM,aAAa,CAAC;AACxC,YAAY,EACV,eAAe,EACf,iBAAiB,EACjB,WAAW,EACX,gBAAgB,EAChB,aAAa,GACd,MAAM,aAAa,CAAC;AAGrB,OAAO,EACL,oBAAoB,EACpB,iBAAiB,EACjB,gBAAgB,EAChB,gBAAgB,EAChB,aAAa,EACb,cAAc,EACd,iBAAiB,EACjB,kBAAkB,EAClB,kBAAkB,GACnB,MAAM,WAAW,CAAC;AACnB,YAAY,EACV,cAAc,EACd,QAAQ,EACR,WAAW,EACX,YAAY,EACZ,WAAW,EACX,UAAU,EACV,UAAU,EACV,OAAO,EACP,YAAY,GACb,MAAM,WAAW,CAAC;AAEnB,OAAO,EAAE,KAAK,EAAE,MAAM,SAAS,CAAC;AAChC,YAAY,EAAE,WAAW,EAAE,aAAa,EAAE,MAAM,SAAS,CAAC"}

package/dist/resources/schemas.d.ts

@@ -95,6 +95,7 @@ export declare const logOptionsSchema: z.ZodObject<{
     until: z.ZodOptional<z.ZodNumber>;
     tail: z.ZodOptional<z.ZodNumber>;
     timestamps: z.ZodOptional<z.ZodBoolean>;
+    follow: z.ZodOptional<z.ZodBoolean>;
 }, z.core.$strip>;
 /**
  * A single log line from a container

package/dist/resources/schemas.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"schemas.d.ts","sourceRoot":"","sources":["../../src/resources/schemas.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAIxB;;GAEG;AACH,eAAO,MAAM,cAAc;;;;;iBAKzB,CAAC;AAEH;;GAEG;AACH,eAAO,MAAM,iBAAiB;;;;;;iBAM5B,CAAC;AAEH;;GAEG;AACH,eAAO,MAAM,kBAAkB;;;;;iBAK7B,CAAC;AAEH;;GAEG;AACH,eAAO,MAAM,oBAAoB;;;;;;;;;;;;;;;;;;;;;;iBAM/B,CAAC;AAEH,MAAM,MAAM,cAAc,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,oBAAoB,CAAC,CAAC;AAClE,MAAM,MAAM,QAAQ,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,cAAc,CAAC,CAAC;AACtD,MAAM,MAAM,WAAW,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,iBAAiB,CAAC,CAAC;AAC5D,MAAM,MAAM,YAAY,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,kBAAkB,CAAC,CAAC;AAI9D;;GAEG;AACH,eAAO,MAAM,iBAAiB;;;;;;;iBAO5B,CAAC;AAEH;;GAEG;AACH,eAAO,MAAM,gBAAgB;;;;;iBAK3B,CAAC;AAEH,MAAM,MAAM,WAAW,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,iBAAiB,CAAC,CAAC;AAC5D,MAAM,MAAM,UAAU,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,gBAAgB,CAAC,CAAC;AAI1D;;GAEG;AACH,eAAO,MAAM,gBAAgB;;;;;;;iBAO3B,CAAC;AAEH;;GAEG;AACH,eAAO,MAAM,aAAa;;;;;;;iBAIxB,CAAC;AAEH,MAAM,MAAM,UAAU,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,gBAAgB,CAAC,CAAC;AAC1D,MAAM,MAAM,OAAO,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,aAAa,CAAC,CAAC;AAIpD;;GAEG;AACH,eAAO,MAAM,kBAAkB;;;iBAG7B,CAAC;AAEH,MAAM,MAAM,YAAY,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,kBAAkB,CAAC,CAAC"}
+{"version":3,"file":"schemas.d.ts","sourceRoot":"","sources":["../../src/resources/schemas.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAIxB;;GAEG;AACH,eAAO,MAAM,cAAc;;;;;iBAKzB,CAAC;AAEH;;GAEG;AACH,eAAO,MAAM,iBAAiB;;;;;;iBAM5B,CAAC;AAEH;;GAEG;AACH,eAAO,MAAM,kBAAkB;;;;;iBAK7B,CAAC;AAEH;;GAEG;AACH,eAAO,MAAM,oBAAoB;;;;;;;;;;;;;;;;;;;;;;iBAM/B,CAAC;AAEH,MAAM,MAAM,cAAc,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,oBAAoB,CAAC,CAAC;AAClE,MAAM,MAAM,QAAQ,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,cAAc,CAAC,CAAC;AACtD,MAAM,MAAM,WAAW,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,iBAAiB,CAAC,CAAC;AAC5D,MAAM,MAAM,YAAY,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,kBAAkB,CAAC,CAAC;AAI9D;;GAEG;AACH,eAAO,MAAM,iBAAiB;;;;;;;iBAO5B,CAAC;AAEH;;GAEG;AACH,eAAO,MAAM,gBAAgB;;;;;iBAK3B,CAAC;AAEH,MAAM,MAAM,WAAW,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,iBAAiB,CAAC,CAAC;AAC5D,MAAM,MAAM,UAAU,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,gBAAgB,CAAC,CAAC;AAI1D;;GAEG;AACH,eAAO,MAAM,gBAAgB;;;;;;;;iBAQ3B,CAAC;AAEH;;GAEG;AACH,eAAO,MAAM,aAAa;;;;;;;iBAIxB,CAAC;AAEH,MAAM,MAAM,UAAU,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,gBAAgB,CAAC,CAAC;AAC1D,MAAM,MAAM,OAAO,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,aAAa,CAAC,CAAC;AAIpD;;GAEG;AACH,eAAO,MAAM,kBAAkB;;;iBAG7B,CAAC;AAEH,MAAM,MAAM,YAAY,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,kBAAkB,CAAC,CAAC"}

package/dist/resources/schemas.js

@@ -76,6 +76,7 @@ export const logOptionsSchema = z.object({
     until: z.number().optional().describe('Unix timestamp to end at'),
     tail: z.number().int().min(0).optional().describe('Number of lines to tail'),
     timestamps: z.boolean().optional().describe('Include timestamps (default: false)'),
+    follow: z.boolean().optional().describe('Follow log output (default: false)'),
 });
 /**
  * A single log line from a container

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@docker-harpoon/core",
-  "version": "0.1.3",
+  "version": "0.1.4",
   "license": "MIT",
   "description": "Core Docker resource primitives and binding interface",
   "type": "module",