@dofe/infra-docker 0.1.78 → 0.1.80

package/README.md

@@ -0,0 +1,29 @@
+# @dofe/infra-docker
+
+Shared Docker primitives for Dofe services.
+
+## Owns
+
+- Docker client creation and daemon probing.
+- Image inspect and pull helpers, including registry auth matching and safe
+  error redaction.
+- Product-neutral Docker sandbox command/profile/runner primitives for
+  short-lived execution.
+- Generic container lifecycle helpers retained by the existing `DockerService`.
+
+## Does Not Own
+
+- Bot lifecycle, OpenClaw Gateway config sync, Gateway tokens, provider routing,
+  or product container labels.
+- Loop shards, review evidence, browser QA, operator UX, or Loop-specific image
+  defaults.
+- Model provider keys, routing decisions, usage, or proxy behavior.
+
+## Compatibility Note
+
+Some historical exports in `src/types.ts` are Bot/OpenClaw-shaped compatibility
+stubs. They remain for existing consumers, but new public APIs must use
+product-neutral names and types.
+
+See `docs/0627/shared-primitives-boundary.md` in the infra repository for the
+cross-package boundary.

package/dist/docker-client.factory.d.ts

@@ -0,0 +1,14 @@
+import Docker from 'dockerode';
+export interface DockerClientOptions {
+    dockerHost?: string;
+}
+export interface DockerDaemonProbe {
+    ok: boolean;
+    version?: string;
+    message?: string;
+}
+export declare function createDockerClient(options?: DockerClientOptions): Docker;
+export declare function probeDockerDaemon(docker: Docker, timeoutMs?: number): Promise<DockerDaemonProbe>;
+export declare function withDockerTimeout<T>(promise: Promise<T>, timeoutMs: number, label: string): Promise<T>;
+export declare function safeDockerMessage(error: unknown, maxLength?: number): string;
+//# sourceMappingURL=docker-client.factory.d.ts.map

package/dist/docker-client.factory.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"docker-client.factory.d.ts","sourceRoot":"","sources":["../../../packages/docker/src/docker-client.factory.ts"],"names":[],"mappings":"AAAA,OAAO,MAAM,MAAM,WAAW,CAAC;AAK/B,MAAM,WAAW,mBAAmB;IAClC,UAAU,CAAC,EAAE,MAAM,CAAC;CACrB;AAED,MAAM,WAAW,iBAAiB;IAChC,EAAE,EAAE,OAAO,CAAC;IACZ,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,OAAO,CAAC,EAAE,MAAM,CAAC;CAClB;AAED,wBAAgB,kBAAkB,CAAC,OAAO,GAAE,mBAAwB,GAAG,MAAM,CAI5E;AAuBD,wBAAsB,iBAAiB,CACrC,MAAM,EAAE,MAAM,EACd,SAAS,SAAqB,GAC7B,OAAO,CAAC,iBAAiB,CAAC,CAqB5B;AAED,wBAAsB,iBAAiB,CAAC,CAAC,EACvC,OAAO,EAAE,OAAO,CAAC,CAAC,CAAC,EACnB,SAAS,EAAE,MAAM,EACjB,KAAK,EAAE,MAAM,GACZ,OAAO,CAAC,CAAC,CAAC,CAaZ;AAED,wBAAgB,iBAAiB,CAAC,KAAK,EAAE,OAAO,EAAE,SAAS,SAAM,GAAG,MAAM,CAGzE"}

package/dist/docker-client.factory.js

@@ -0,0 +1,68 @@
+"use strict";
+var __importDefault = (this && this.__importDefault) || function (mod) {
+    return (mod && mod.__esModule) ? mod : { "default": mod };
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.createDockerClient = createDockerClient;
+exports.probeDockerDaemon = probeDockerDaemon;
+exports.withDockerTimeout = withDockerTimeout;
+exports.safeDockerMessage = safeDockerMessage;
+const dockerode_1 = __importDefault(require("dockerode"));
+const DEFAULT_DOCKER_HOST = '/var/run/docker.sock';
+const DEFAULT_TIMEOUT_MS = 8000;
+function createDockerClient(options = {}) {
+    return new dockerode_1.default(getDockerConnectionOptions(options.dockerHost ?? DEFAULT_DOCKER_HOST));
+}
+function getDockerConnectionOptions(hostOrUrl) {
+    const value = (hostOrUrl ?? '').trim();
+    if (!value) {
+        return { socketPath: DEFAULT_DOCKER_HOST };
+    }
+    const tcpMatch = value.match(/^(?:tcp|http|https):\/\/([^:/]+):(\d+)$/i);
+    if (tcpMatch) {
+        const protocol = value.toLowerCase().startsWith('https') ? 'https' : 'http';
+        return {
+            protocol: protocol,
+            host: tcpMatch[1],
+            port: parseInt(tcpMatch[2], 10),
+            socketPath: null,
+        };
+    }
+    const socketPath = value.startsWith('unix://') ? value.slice(7) : value;
+    return { socketPath };
+}
+async function probeDockerDaemon(docker, timeoutMs = DEFAULT_TIMEOUT_MS) {
+    try {
+        await withDockerTimeout(docker.ping(), timeoutMs, 'docker ping');
+        const dockerWithVersion = docker;
+        const version = await withDockerTimeout(dockerWithVersion.version(), timeoutMs, 'docker version');
+        return {
+            ok: true,
+            version: (version.ServerVersion ?? version.Version)?.slice(0, 120),
+        };
+    }
+    catch (error) {
+        return {
+            ok: false,
+            message: safeDockerMessage(error),
+        };
+    }
+}
+async function withDockerTimeout(promise, timeoutMs, label) {
+    let timer;
+    const timeout = new Promise((_, reject) => {
+        timer = setTimeout(() => reject(new Error(`${label} timed out after ${timeoutMs}ms`)), timeoutMs);
+    });
+    try {
+        return await Promise.race([promise, timeout]);
+    }
+    finally {
+        if (timer)
+            clearTimeout(timer);
+    }
+}
+function safeDockerMessage(error, maxLength = 240) {
+    const message = error instanceof Error ? error.message : String(error);
+    return message.slice(0, maxLength);
+}
+//# sourceMappingURL=docker-client.factory.js.map

package/dist/docker-client.factory.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"docker-client.factory.js","sourceRoot":"","sources":["../../../packages/docker/src/docker-client.factory.ts"],"names":[],"mappings":";;;;;AAeA,gDAIC;AAuBD,8CAwBC;AAED,8CAiBC;AAED,8CAGC;AA1FD,0DAA+B;AAE/B,MAAM,mBAAmB,GAAG,sBAAsB,CAAC;AACnD,MAAM,kBAAkB,GAAG,IAAI,CAAC;AAYhC,SAAgB,kBAAkB,CAAC,UAA+B,EAAE;IAClE,OAAO,IAAI,mBAAM,CACf,0BAA0B,CAAC,OAAO,CAAC,UAAU,IAAI,mBAAmB,CAAC,CACtE,CAAC;AACJ,CAAC;AAED,SAAS,0BAA0B,CAAC,SAAiB;IACnD,MAAM,KAAK,GAAG,CAAC,SAAS,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC;IACvC,IAAI,CAAC,KAAK,EAAE,CAAC;QACX,OAAO,EAAE,UAAU,EAAE,mBAAmB,EAAE,CAAC;IAC7C,CAAC;IAED,MAAM,QAAQ,GAAG,KAAK,CAAC,KAAK,CAAC,0CAA0C,CAAC,CAAC;IACzE,IAAI,QAAQ,EAAE,CAAC;QACb,MAAM,QAAQ,GAAG,KAAK,CAAC,WAAW,EAAE,CAAC,UAAU,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC;QAC5E,OAAO;YACL,QAAQ,EAAE,QAA4B;YACtC,IAAI,EAAE,QAAQ,CAAC,CAAC,CAAC;YACjB,IAAI,EAAE,QAAQ,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC;YAC/B,UAAU,EAAE,IAAI;SACO,CAAC;IAC5B,CAAC;IAED,MAAM,UAAU,GAAG,KAAK,CAAC,UAAU,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC;IACxE,OAAO,EAAE,UAAU,EAAE,CAAC;AACxB,CAAC;AAEM,KAAK,UAAU,iBAAiB,CACrC,MAAc,EACd,SAAS,GAAG,kBAAkB;IAE9B,IAAI,CAAC;QACH,MAAM,iBAAiB,CAAC,MAAM,CAAC,IAAI,EAAE,EAAE,SAAS,EAAE,aAAa,CAAC,CAAC;QACjE,MAAM,iBAAiB,GAAG,MAEzB,CAAC;QACF,MAAM,OAAO,GAAG,MAAM,iBAAiB,CACrC,iBAAiB,CAAC,OAAO,EAAE,EAC3B,SAAS,EACT,gBAAgB,CACjB,CAAC;QACF,OAAO;YACL,EAAE,EAAE,IAAI;YACR,OAAO,EAAE,CAAC,OAAO,CAAC,aAAa,IAAI,OAAO,CAAC,OAAO,CAAC,EAAE,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC;SACnE,CAAC;IACJ,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,OAAO;YACL,EAAE,EAAE,KAAK;YACT,OAAO,EAAE,iBAAiB,CAAC,KAAK,CAAC;SAClC,CAAC;IACJ,CAAC;AACH,CAAC;AAEM,KAAK,UAAU,iBAAiB,CACrC,OAAmB,EACnB,SAAiB,EACjB,KAAa;IAEb,IAAI,KAAiC,CAAC;IACtC,MAAM,OAAO,GAAG,IAAI,OAAO,CAAQ,CAAC,CAAC,EAAE,MAAM,EAAE,EAAE;QAC/C,KAAK,GAAG,UAAU,CAChB,GAAG,EAAE,CAAC,MAAM,CAAC,IAAI,KAAK,CAAC,GAAG,KAAK,oBAAoB,SAAS,IAAI,CAAC,CAAC,EAClE,SAAS,CACV,CAAC;IACJ,CAAC,CAAC,CAAC;IACH,IAAI,CAAC;QACH,OAAO,MAAM,OAAO,CAAC,IAAI,CAAC,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC,CAAC;IAChD,CAAC;YAAS,CAAC;QACT,IAAI,KAAK;YAAE,YAAY,CAAC,KAAK,CAAC,CAAC;IACjC,CAAC;AACH,CAAC;AAED,SAAgB,iBAAiB,CAAC,KAAc,EAAE,SAAS,GAAG,GAAG;IAC/D,MAAM,OAAO,GAAG,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;IACvE,OAAO,OAAO,CAAC,KAAK,CAAC,CAAC,EAAE,SAAS,CAAC,CAAC;AACrC,CAAC"}

package/dist/docker-image-puller.d.ts

@@ -0,0 +1,28 @@
+import Docker from 'dockerode';
+export interface DockerRegistryAuth {
+    username: string;
+    password: string;
+    serveraddress: string;
+}
+export interface DockerPullOptions {
+    image: string;
+    timeoutMs?: number;
+    platform?: string;
+    registryAuth?: DockerRegistryAuth;
+}
+export interface DockerPullOutcome {
+    ok: boolean;
+    message: string;
+}
+export interface DockerImagePresence {
+    present: boolean;
+    imageId: string | null;
+}
+export declare function inspectDockerImage(docker: Docker | null, image: string, timeoutMs?: number): Promise<DockerImagePresence>;
+export declare function pullDockerImage(docker: Docker | null, options: DockerPullOptions): Promise<DockerPullOutcome>;
+export declare function registryAuthFromEnv(image: string, env?: NodeJS.ProcessEnv): DockerRegistryAuth | undefined;
+export declare function redactDockerAuth(message: string, auth: DockerRegistryAuth | undefined): string;
+export declare function registryFromImage(image: string): string;
+export declare function stripRegistryScheme(server: string): string;
+export declare function normalizeRegistryServer(server: string): string;
+//# sourceMappingURL=docker-image-puller.d.ts.map

package/dist/docker-image-puller.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"docker-image-puller.d.ts","sourceRoot":"","sources":["../../../packages/docker/src/docker-image-puller.ts"],"names":[],"mappings":"AAAA,OAAO,MAAM,MAAM,WAAW,CAAC;AAK/B,MAAM,WAAW,kBAAkB;IACjC,QAAQ,EAAE,MAAM,CAAC;IACjB,QAAQ,EAAE,MAAM,CAAC;IACjB,aAAa,EAAE,MAAM,CAAC;CACvB;AAED,MAAM,WAAW,iBAAiB;IAChC,KAAK,EAAE,MAAM,CAAC;IACd,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,YAAY,CAAC,EAAE,kBAAkB,CAAC;CACnC;AAED,MAAM,WAAW,iBAAiB;IAChC,EAAE,EAAE,OAAO,CAAC;IACZ,OAAO,EAAE,MAAM,CAAC;CACjB;AAED,MAAM,WAAW,mBAAmB;IAClC,OAAO,EAAE,OAAO,CAAC;IACjB,OAAO,EAAE,MAAM,GAAG,IAAI,CAAC;CACxB;AAED,wBAAsB,kBAAkB,CACtC,MAAM,EAAE,MAAM,GAAG,IAAI,EACrB,KAAK,EAAE,MAAM,EACb,SAAS,SAAO,GACf,OAAO,CAAC,mBAAmB,CAAC,CAe9B;AAED,wBAAsB,eAAe,CACnC,MAAM,EAAE,MAAM,GAAG,IAAI,EACrB,OAAO,EAAE,iBAAiB,GACzB,OAAO,CAAC,iBAAiB,CAAC,CAmB5B;AAeD,wBAAgB,mBAAmB,CACjC,KAAK,EAAE,MAAM,EACb,GAAG,GAAE,MAAM,CAAC,UAAwB,GACnC,kBAAkB,GAAG,SAAS,CAkBhC;AAED,wBAAgB,gBAAgB,CAC9B,OAAO,EAAE,MAAM,EACf,IAAI,EAAE,kBAAkB,GAAG,SAAS,GACnC,MAAM,CAMR;AAED,wBAAgB,iBAAiB,CAAC,KAAK,EAAE,MAAM,GAAG,MAAM,CAGvD;AAED,wBAAgB,mBAAmB,CAAC,MAAM,EAAE,MAAM,GAAG,MAAM,CAE1D;AAED,wBAAgB,uBAAuB,CAAC,MAAM,EAAE,MAAM,GAAG,MAAM,CAG9D"}

package/dist/docker-image-puller.js

@@ -0,0 +1,116 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.inspectDockerImage = inspectDockerImage;
+exports.pullDockerImage = pullDockerImage;
+exports.registryAuthFromEnv = registryAuthFromEnv;
+exports.redactDockerAuth = redactDockerAuth;
+exports.registryFromImage = registryFromImage;
+exports.stripRegistryScheme = stripRegistryScheme;
+exports.normalizeRegistryServer = normalizeRegistryServer;
+const docker_client_factory_1 = require("./docker-client.factory");
+const DEFAULT_PULL_TIMEOUT_MS = 300_000;
+async function inspectDockerImage(docker, image, timeoutMs = 8000) {
+    if (!docker) {
+        return { present: false, imageId: null };
+    }
+    try {
+        const imageId = await (0, docker_client_factory_1.withDockerTimeout)(getLocalImageId(docker, image), timeoutMs, 'docker image inspect');
+        return { present: imageId !== null, imageId };
+    }
+    catch {
+        return { present: false, imageId: null };
+    }
+}
+async function pullDockerImage(docker, options) {
+    const timeoutMs = options.timeoutMs ?? DEFAULT_PULL_TIMEOUT_MS;
+    if (!docker) {
+        return { ok: false, message: 'Docker is not available.' };
+    }
+    try {
+        await pullWithDockerode(docker, options, timeoutMs);
+        return {
+            ok: true,
+            message: `Image ${options.image} pulled successfully.`,
+        };
+    }
+    catch (error) {
+        const message = redactDockerAuth((0, docker_client_factory_1.safeDockerMessage)(error), options.registryAuth);
+        return { ok: false, message };
+    }
+}
+async function getLocalImageId(docker, imageName) {
+    try {
+        const image = docker.getImage(imageName);
+        const info = await image.inspect();
+        return info.Id || null;
+    }
+    catch {
+        return null;
+    }
+}
+function registryAuthFromEnv(image, env = process.env) {
+    const username = env.DOCKER_REGISTRY_USERNAME?.trim();
+    const password = env.DOCKER_REGISTRY_PASSWORD?.trim();
+    if (!username || !password)
+        return undefined;
+    const configuredServer = stripRegistryScheme(env.DOCKER_REGISTRY_SERVER?.trim() ?? '');
+    const imageRegistry = registryFromImage(image);
+    const target = configuredServer || imageRegistry;
+    if (!target)
+        return undefined;
+    if (configuredServer && configuredServer !== imageRegistry)
+        return undefined;
+    return {
+        username,
+        password,
+        serveraddress: normalizeRegistryServer(target),
+    };
+}
+function redactDockerAuth(message, auth) {
+    if (!auth)
+        return message;
+    let redacted = message;
+    if (auth.password)
+        redacted = redacted.split(auth.password).join('***');
+    if (auth.username)
+        redacted = redacted.split(auth.username).join('***');
+    return redacted;
+}
+function registryFromImage(image) {
+    const host = image.split('/')[0] ?? '';
+    return /[.:]/.test(host) || host === 'localhost' ? host : '';
+}
+function stripRegistryScheme(server) {
+    return server.replace(/^https?:\/\//i, '');
+}
+function normalizeRegistryServer(server) {
+    if (!server)
+        return '';
+    return /^https?:\/\//i.test(server) ? server : `https://${server}`;
+}
+function pullWithDockerode(docker, options, timeoutMs) {
+    const pull = new Promise((resolve, reject) => {
+        docker.pull(options.image, {
+            ...(options.platform ? { platform: options.platform } : {}),
+            ...(options.registryAuth ? { authconfig: options.registryAuth } : {}),
+        }, (error, stream) => {
+            if (error) {
+                reject(error);
+                return;
+            }
+            if (!stream) {
+                resolve();
+                return;
+            }
+            docker.modem.followProgress(stream, (progressError) => {
+                if (progressError) {
+                    reject(progressError);
+                    return;
+                }
+                resolve();
+            });
+        });
+    });
+    return (0, docker_client_factory_1.withDockerTimeout)(pull, timeoutMs, 'docker pull');
+}
+//# sourceMappingURL=docker-image-puller.js.map

package/dist/docker-image-puller.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"docker-image-puller.js","sourceRoot":"","sources":["../../../packages/docker/src/docker-image-puller.ts"],"names":[],"mappings":";;AA4BA,gDAmBC;AAED,0CAsBC;AAeD,kDAqBC;AAED,4CASC;AAED,8CAGC;AAED,kDAEC;AAED,0DAGC;AAnID,mEAA+E;AAE/E,MAAM,uBAAuB,GAAG,OAAO,CAAC;AAyBjC,KAAK,UAAU,kBAAkB,CACtC,MAAqB,EACrB,KAAa,EACb,SAAS,GAAG,IAAI;IAEhB,IAAI,CAAC,MAAM,EAAE,CAAC;QACZ,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC;IAC3C,CAAC;IAED,IAAI,CAAC;QACH,MAAM,OAAO,GAAG,MAAM,IAAA,yCAAiB,EACrC,eAAe,CAAC,MAAM,EAAE,KAAK,CAAC,EAC9B,SAAS,EACT,sBAAsB,CACvB,CAAC;QACF,OAAO,EAAE,OAAO,EAAE,OAAO,KAAK,IAAI,EAAE,OAAO,EAAE,CAAC;IAChD,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC;IAC3C,CAAC;AACH,CAAC;AAEM,KAAK,UAAU,eAAe,CACnC,MAAqB,EACrB,OAA0B;IAE1B,MAAM,SAAS,GAAG,OAAO,CAAC,SAAS,IAAI,uBAAuB,CAAC;IAC/D,IAAI,CAAC,MAAM,EAAE,CAAC;QACZ,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,OAAO,EAAE,0BAA0B,EAAE,CAAC;IAC5D,CAAC;IAED,IAAI,CAAC;QACH,MAAM,iBAAiB,CAAC,MAAM,EAAE,OAAO,EAAE,SAAS,CAAC,CAAC;QACpD,OAAO;YACL,EAAE,EAAE,IAAI;YACR,OAAO,EAAE,SAAS,OAAO,CAAC,KAAK,uBAAuB;SACvD,CAAC;IACJ,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,MAAM,OAAO,GAAG,gBAAgB,CAC9B,IAAA,yCAAiB,EAAC,KAAK,CAAC,EACxB,OAAO,CAAC,YAAY,CACrB,CAAC;QACF,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,OAAO,EAAE,CAAC;IAChC,CAAC;AACH,CAAC;AAED,KAAK,UAAU,eAAe,CAC5B,MAAc,EACd,SAAiB;IAEjB,IAAI,CAAC;QACH,MAAM,KAAK,GAAG,MAAM,CAAC,QAAQ,CAAC,SAAS,CAAC,CAAC;QACzC,MAAM,IAAI,GAAG,MAAM,KAAK,CAAC,OAAO,EAAE,CAAC;QACnC,OAAO,IAAI,CAAC,EAAE,IAAI,IAAI,CAAC;IACzB,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC;AAED,SAAgB,mBAAmB,CACjC,KAAa,EACb,MAAyB,OAAO,CAAC,GAAG;IAEpC,MAAM,QAAQ,GAAG,GAAG,CAAC,wBAAwB,EAAE,IAAI,EAAE,CAAC;IACtD,MAAM,QAAQ,GAAG,GAAG,CAAC,wBAAwB,EAAE,IAAI,EAAE,CAAC;IACtD,IAAI,CAAC,QAAQ,IAAI,CAAC,QAAQ;QAAE,OAAO,SAAS,CAAC;IAE7C,MAAM,gBAAgB,GAAG,mBAAmB,CAC1C,GAAG,CAAC,sBAAsB,EAAE,IAAI,EAAE,IAAI,EAAE,CACzC,CAAC;IACF,MAAM,aAAa,GAAG,iBAAiB,CAAC,KAAK,CAAC,CAAC;IAC/C,MAAM,MAAM,GAAG,gBAAgB,IAAI,aAAa,CAAC;IACjD,IAAI,CAAC,MAAM;QAAE,OAAO,SAAS,CAAC;IAC9B,IAAI,gBAAgB,IAAI,gBAAgB,KAAK,aAAa;QAAE,OAAO,SAAS,CAAC;IAE7E,OAAO;QACL,QAAQ;QACR,QAAQ;QACR,aAAa,EAAE,uBAAuB,CAAC,MAAM,CAAC;KAC/C,CAAC;AACJ,CAAC;AAED,SAAgB,gBAAgB,CAC9B,OAAe,EACf,IAAoC;IAEpC,IAAI,CAAC,IAAI;QAAE,OAAO,OAAO,CAAC;IAC1B,IAAI,QAAQ,GAAG,OAAO,CAAC;IACvB,IAAI,IAAI,CAAC,QAAQ;QAAE,QAAQ,GAAG,QAAQ,CAAC,KAAK,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IACxE,IAAI,IAAI,CAAC,QAAQ;QAAE,QAAQ,GAAG,QAAQ,CAAC,KAAK,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IACxE,OAAO,QAAQ,CAAC;AAClB,CAAC;AAED,SAAgB,iBAAiB,CAAC,KAAa;IAC7C,MAAM,IAAI,GAAG,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;IACvC,OAAO,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,IAAI,KAAK,WAAW,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC;AAC/D,CAAC;AAED,SAAgB,mBAAmB,CAAC,MAAc;IAChD,OAAO,MAAM,CAAC,OAAO,CAAC,eAAe,EAAE,EAAE,CAAC,CAAC;AAC7C,CAAC;AAED,SAAgB,uBAAuB,CAAC,MAAc;IACpD,IAAI,CAAC,MAAM;QAAE,OAAO,EAAE,CAAC;IACvB,OAAO,eAAe,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,WAAW,MAAM,EAAE,CAAC;AACrE,CAAC;AAED,SAAS,iBAAiB,CACxB,MAAc,EACd,OAA0B,EAC1B,SAAiB;IAEjB,MAAM,IAAI,GAAG,IAAI,OAAO,CAAO,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;QACjD,MAAM,CAAC,IAAI,CACT,OAAO,CAAC,KAAK,EACb;YACE,GAAG,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,OAAO,CAAC,QAAQ,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YAC3D,GAAG,CAAC,OAAO,CAAC,YAAY,CAAC,CAAC,CAAC,EAAE,UAAU,EAAE,OAAO,CAAC,YAAY,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SACtE,EACD,CAAC,KAAK,EAAE,MAAM,EAAE,EAAE;YAChB,IAAI,KAAK,EAAE,CAAC;gBACV,MAAM,CAAC,KAAK,CAAC,CAAC;gBACd,OAAO;YACT,CAAC;YACD,IAAI,CAAC,MAAM,EAAE,CAAC;gBACZ,OAAO,EAAE,CAAC;gBACV,OAAO;YACT,CAAC;YACD,MAAM,CAAC,KAAK,CAAC,cAAc,CAAC,MAAM,EAAE,CAAC,aAA2B,EAAE,EAAE;gBAClE,IAAI,aAAa,EAAE,CAAC;oBAClB,MAAM,CAAC,aAAa,CAAC,CAAC;oBACtB,OAAO;gBACT,CAAC;gBACD,OAAO,EAAE,CAAC;YACZ,CAAC,CAAC,CAAC;QACL,CAAC,CACF,CAAC;IACJ,CAAC,CAAC,CAAC;IACH,OAAO,IAAA,yCAAiB,EAAC,IAAI,EAAE,SAAS,EAAE,aAAa,CAAC,CAAC;AAC3D,CAAC"}

package/dist/docker-sandbox-command.d.ts

@@ -0,0 +1,9 @@
+import type { DockerSandboxProfile, DockerSandboxRunOptions, DockerSandboxValidation } from './docker-sandbox.types';
+export declare function buildDockerSandboxRunCommand(opts: DockerSandboxRunOptions): string[];
+export declare function buildDockerSandboxedExec(opts: DockerSandboxRunOptions): {
+    command: string;
+    args: string[];
+};
+export declare function describeDockerSandboxProfile(opts: DockerSandboxRunOptions): DockerSandboxProfile;
+export declare function validateDockerSandboxProfile(opts: DockerSandboxRunOptions): DockerSandboxValidation;
+//# sourceMappingURL=docker-sandbox-command.d.ts.map

package/dist/docker-sandbox-command.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"docker-sandbox-command.d.ts","sourceRoot":"","sources":["../../../packages/docker/src/docker-sandbox-command.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EACV,oBAAoB,EACpB,uBAAuB,EACvB,uBAAuB,EACxB,MAAM,wBAAwB,CAAC;AAEhC,wBAAgB,4BAA4B,CAC1C,IAAI,EAAE,uBAAuB,GAC5B,MAAM,EAAE,CAuBV;AAED,wBAAgB,wBAAwB,CACtC,IAAI,EAAE,uBAAuB,GAC5B;IAAE,OAAO,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,MAAM,EAAE,CAAA;CAAE,CAGrC;AAED,wBAAgB,4BAA4B,CAC1C,IAAI,EAAE,uBAAuB,GAC5B,oBAAoB,CActB;AAED,wBAAgB,4BAA4B,CAC1C,IAAI,EAAE,uBAAuB,GAC5B,uBAAuB,CAkBzB"}

package/dist/docker-sandbox-command.js

@@ -0,0 +1,70 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.buildDockerSandboxRunCommand = buildDockerSandboxRunCommand;
+exports.buildDockerSandboxedExec = buildDockerSandboxedExec;
+exports.describeDockerSandboxProfile = describeDockerSandboxProfile;
+exports.validateDockerSandboxProfile = validateDockerSandboxProfile;
+function buildDockerSandboxRunCommand(opts) {
+    const cmd = ['docker', 'run', '--rm'];
+    cmd.push(`--network=${opts.networkMode}`);
+    if (opts.readonlyRootfs)
+        cmd.push('--read-only');
+    const capDrop = opts.capDrop.length > 0 ? opts.capDrop : ['ALL'];
+    for (const cap of capDrop)
+        cmd.push(`--cap-drop=${cap}`);
+    for (const cap of opts.capAdd ?? [])
+        cmd.push(`--cap-add=${cap}`);
+    if (opts.memoryLimitMb)
+        cmd.push(`--memory=${opts.memoryLimitMb}m`);
+    if (opts.cpuLimit)
+        cmd.push(`--cpus=${opts.cpuLimit}`);
+    cmd.push('-v', `${opts.mountPath}:${opts.workdir}`);
+    cmd.push('-w', opts.workdir);
+    cmd.push('--security-opt=no-new-privileges:true');
+    for (const [key, value] of Object.entries(opts.envVars ?? {})) {
+        cmd.push('-e', `${key}=${value}`);
+    }
+    cmd.push(opts.image);
+    cmd.push(opts.command);
+    if (opts.args?.length)
+        cmd.push(...opts.args);
+    return cmd;
+}
+function buildDockerSandboxedExec(opts) {
+    const fullCmd = buildDockerSandboxRunCommand(opts);
+    return { command: fullCmd[0], args: fullCmd.slice(1) };
+}
+function describeDockerSandboxProfile(opts) {
+    return {
+        network: opts.networkMode === 'none'
+            ? 'deny'
+            : opts.networkMode === 'bridge'
+                ? 'allowlist'
+                : 'open-with-approval',
+        writeScope: opts.readonlyRootfs ? 'artifact-only' : 'repo',
+        shellEnforcement: opts.capDrop.includes('ALL'),
+        secretMode: opts.envVars?.SECRET_REDACT ? 'redacted' : 'blocked',
+        memoryLimitMb: opts.memoryLimitMb ?? 512,
+        cpuLimit: opts.cpuLimit ?? 1,
+    };
+}
+function validateDockerSandboxProfile(opts) {
+    const warnings = [];
+    if (opts.networkMode !== 'none') {
+        warnings.push('Network is not fully denied; consider --network=none');
+    }
+    if (!opts.readonlyRootfs) {
+        warnings.push('Root filesystem is writable; consider --read-only');
+    }
+    if (!opts.capDrop.includes('ALL')) {
+        warnings.push('Not all capabilities dropped; add --cap-drop=ALL');
+    }
+    if ((opts.capAdd ?? []).includes('SYS_ADMIN')) {
+        warnings.push('SYS_ADMIN is dangerous in sandbox');
+    }
+    if (opts.memoryLimitMb && opts.memoryLimitMb > 4096) {
+        warnings.push(`Memory limit (${opts.memoryLimitMb}MB) exceeds 4GB`);
+    }
+    return { valid: warnings.length === 0, warnings };
+}
+//# sourceMappingURL=docker-sandbox-command.js.map

package/dist/docker-sandbox-command.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"docker-sandbox-command.js","sourceRoot":"","sources":["../../../packages/docker/src/docker-sandbox-command.ts"],"names":[],"mappings":";;AAMA,oEAyBC;AAED,4DAKC;AAED,oEAgBC;AAED,oEAoBC;AAxED,SAAgB,4BAA4B,CAC1C,IAA6B;IAE7B,MAAM,GAAG,GAAa,CAAC,QAAQ,EAAE,KAAK,EAAE,MAAM,CAAC,CAAC;IAChD,GAAG,CAAC,IAAI,CAAC,aAAa,IAAI,CAAC,WAAW,EAAE,CAAC,CAAC;IAC1C,IAAI,IAAI,CAAC,cAAc;QAAE,GAAG,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC;IAEjD,MAAM,OAAO,GAAG,IAAI,CAAC,OAAO,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC;IACjE,KAAK,MAAM,GAAG,IAAI,OAAO;QAAE,GAAG,CAAC,IAAI,CAAC,cAAc,GAAG,EAAE,CAAC,CAAC;IACzD,KAAK,MAAM,GAAG,IAAI,IAAI,CAAC,MAAM,IAAI,EAAE;QAAE,GAAG,CAAC,IAAI,CAAC,aAAa,GAAG,EAAE,CAAC,CAAC;IAElE,IAAI,IAAI,CAAC,aAAa;QAAE,GAAG,CAAC,IAAI,CAAC,YAAY,IAAI,CAAC,aAAa,GAAG,CAAC,CAAC;IACpE,IAAI,IAAI,CAAC,QAAQ;QAAE,GAAG,CAAC,IAAI,CAAC,UAAU,IAAI,CAAC,QAAQ,EAAE,CAAC,CAAC;IACvD,GAAG,CAAC,IAAI,CAAC,IAAI,EAAE,GAAG,IAAI,CAAC,SAAS,IAAI,IAAI,CAAC,OAAO,EAAE,CAAC,CAAC;IACpD,GAAG,CAAC,IAAI,CAAC,IAAI,EAAE,IAAI,CAAC,OAAO,CAAC,CAAC;IAC7B,GAAG,CAAC,IAAI,CAAC,uCAAuC,CAAC,CAAC;IAElD,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,OAAO,IAAI,EAAE,CAAC,EAAE,CAAC;QAC9D,GAAG,CAAC,IAAI,CAAC,IAAI,EAAE,GAAG,GAAG,IAAI,KAAK,EAAE,CAAC,CAAC;IACpC,CAAC;IAED,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IACrB,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;IACvB,IAAI,IAAI,CAAC,IAAI,EAAE,MAAM;QAAE,GAAG,CAAC,IAAI,CAAC,GAAG,IAAI,CAAC,IAAI,CAAC,CAAC;IAC9C,OAAO,GAAG,CAAC;AACb,CAAC;AAED,SAAgB,wBAAwB,CACtC,IAA6B;IAE7B,MAAM,OAAO,GAAG,4BAA4B,CAAC,IAAI,CAAC,CAAC;IACnD,OAAO,EAAE,OAAO,EAAE,OAAO,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,CAAC;AACzD,CAAC;AAED,SAAgB,4BAA4B,CAC1C,IAA6B;IAE7B,OAAO;QACL,OAAO,EACL,IAAI,CAAC,WAAW,KAAK,MAAM;YACzB,CAAC,CAAC,MAAM;YACR,CAAC,CAAC,IAAI,CAAC,WAAW,KAAK,QAAQ;gBAC7B,CAAC,CAAC,WAAW;gBACb,CAAC,CAAC,oBAAoB;QAC5B,UAAU,EAAE,IAAI,CAAC,cAAc,CAAC,CAAC,CAAC,eAAe,CAAC,CAAC,CAAC,MAAM;QAC1D,gBAAgB,EAAE,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,KAAK,CAAC;QAC9C,UAAU,EAAE,IAAI,CAAC,OAAO,EAAE,aAAa,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,SAAS;QAChE,aAAa,EAAE,IAAI,CAAC,aAAa,IAAI,GAAG;QACxC,QAAQ,EAAE,IAAI,CAAC,QAAQ,IAAI,CAAC;KAC7B,CAAC;AACJ,CAAC;AAED,SAAgB,4BAA4B,CAC1C,IAA6B;IAE7B,MAAM,QAAQ,GAAa,EAAE,CAAC;IAC9B,IAAI,IAAI,CAAC,WAAW,KAAK,MAAM,EAAE,CAAC;QAChC,QAAQ,CAAC,IAAI,CAAC,sDAAsD,CAAC,CAAC;IACxE,CAAC;IACD,IAAI,CAAC,IAAI,CAAC,cAAc,EAAE,CAAC;QACzB,QAAQ,CAAC,IAAI,CAAC,mDAAmD,CAAC,CAAC;IACrE,CAAC;IACD,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC;QAClC,QAAQ,CAAC,IAAI,CAAC,kDAAkD,CAAC,CAAC;IACpE,CAAC;IACD,IAAI,CAAC,IAAI,CAAC,MAAM,IAAI,EAAE,CAAC,CAAC,QAAQ,CAAC,WAAW,CAAC,EAAE,CAAC;QAC9C,QAAQ,CAAC,IAAI,CAAC,mCAAmC,CAAC,CAAC;IACrD,CAAC;IACD,IAAI,IAAI,CAAC,aAAa,IAAI,IAAI,CAAC,aAAa,GAAG,IAAI,EAAE,CAAC;QACpD,QAAQ,CAAC,IAAI,CAAC,iBAAiB,IAAI,CAAC,aAAa,iBAAiB,CAAC,CAAC;IACtE,CAAC;IACD,OAAO,EAAE,KAAK,EAAE,QAAQ,CAAC,MAAM,KAAK,CAAC,EAAE,QAAQ,EAAE,CAAC;AACpD,CAAC"}

package/dist/docker-sandbox-runner.d.ts

@@ -0,0 +1,3 @@
+import type { DockerSandboxRunOptions, DockerSandboxRunResult } from './docker-sandbox.types';
+export declare function executeDockerSandbox(opts: DockerSandboxRunOptions, maxOutputBytes?: number): Promise<DockerSandboxRunResult>;
+//# sourceMappingURL=docker-sandbox-runner.d.ts.map

package/dist/docker-sandbox-runner.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"docker-sandbox-runner.d.ts","sourceRoot":"","sources":["../../../packages/docker/src/docker-sandbox-runner.ts"],"names":[],"mappings":"AAKA,OAAO,KAAK,EACV,uBAAuB,EACvB,sBAAsB,EACvB,MAAM,wBAAwB,CAAC;AAIhC,wBAAgB,oBAAoB,CAClC,IAAI,EAAE,uBAAuB,EAC7B,cAAc,SAA2B,GACxC,OAAO,CAAC,sBAAsB,CAAC,CAuDjC"}

package/dist/docker-sandbox-runner.js

@@ -0,0 +1,66 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.executeDockerSandbox = executeDockerSandbox;
+const node_child_process_1 = require("node:child_process");
+const docker_sandbox_command_1 = require("./docker-sandbox-command");
+const DEFAULT_MAX_OUTPUT_BYTES = 10 * 1024 * 1024;
+function executeDockerSandbox(opts, maxOutputBytes = DEFAULT_MAX_OUTPUT_BYTES) {
+    const profile = (0, docker_sandbox_command_1.describeDockerSandboxProfile)(opts);
+    const startedAt = Date.now();
+    const redactions = sandboxSecretRedactions(opts);
+    return new Promise((resolve) => {
+        const args = (0, docker_sandbox_command_1.buildDockerSandboxRunCommand)(opts).slice(1);
+        const child = (0, node_child_process_1.spawn)('docker', args, {
+            stdio: ['ignore', 'pipe', 'pipe'],
+            timeout: opts.timeoutSec ? opts.timeoutSec * 1000 : undefined,
+        });
+        let stdout = '';
+        let stderr = '';
+        child.stdout?.on('data', (chunk) => {
+            stdout = appendBounded(stdout, redactSandboxOutput(chunk.toString('utf8'), redactions), maxOutputBytes);
+        });
+        child.stderr?.on('data', (chunk) => {
+            stderr = appendBounded(stderr, redactSandboxOutput(chunk.toString('utf8'), redactions), maxOutputBytes);
+        });
+        child.on('error', (error) => {
+            resolve({
+                exitCode: -1,
+                stdout,
+                stderr: appendBounded(`Spawn error: ${error.message}\n`, stderr, maxOutputBytes),
+                durationMs: Date.now() - startedAt,
+                sandboxProfile: profile,
+            });
+        });
+        child.on('close', (code) => {
+            resolve({
+                exitCode: code ?? -1,
+                stdout,
+                stderr,
+                durationMs: Date.now() - startedAt,
+                sandboxProfile: profile,
+            });
+        });
+    });
+}
+function appendBounded(current, next, maxBytes) {
+    const combined = current + next;
+    if (combined.length <= maxBytes)
+        return combined;
+    return combined.slice(0, maxBytes);
+}
+function sandboxSecretRedactions(opts) {
+    return Object.entries(opts.envVars ?? {})
+        .filter(([key, value]) => isSecretEnvKey(key) && value.length > 0)
+        .map(([, value]) => value);
+}
+function isSecretEnvKey(key) {
+    return /SECRET|TOKEN|PASSWORD|API[_-]?KEY|PRIVATE[_-]?KEY/i.test(key);
+}
+function redactSandboxOutput(output, redactions) {
+    let redacted = output;
+    for (const value of redactions) {
+        redacted = redacted.split(value).join('***');
+    }
+    return redacted;
+}
+//# sourceMappingURL=docker-sandbox-runner.js.map

package/dist/docker-sandbox-runner.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"docker-sandbox-runner.js","sourceRoot":"","sources":["../../../packages/docker/src/docker-sandbox-runner.ts"],"names":[],"mappings":";;AAYA,oDA0DC;AAtED,2DAA2C;AAC3C,qEAGkC;AAMlC,MAAM,wBAAwB,GAAG,EAAE,GAAG,IAAI,GAAG,IAAI,CAAC;AAElD,SAAgB,oBAAoB,CAClC,IAA6B,EAC7B,cAAc,GAAG,wBAAwB;IAEzC,MAAM,OAAO,GAAG,IAAA,qDAA4B,EAAC,IAAI,CAAC,CAAC;IACnD,MAAM,SAAS,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;IAC7B,MAAM,UAAU,GAAG,uBAAuB,CAAC,IAAI,CAAC,CAAC;IAEjD,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,EAAE;QAC7B,MAAM,IAAI,GAAG,IAAA,qDAA4B,EAAC,IAAI,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;QACzD,MAAM,KAAK,GAAG,IAAA,0BAAK,EAAC,QAAQ,EAAE,IAAI,EAAE;YAClC,KAAK,EAAE,CAAC,QAAQ,EAAE,MAAM,EAAE,MAAM,CAAC;YACjC,OAAO,EAAE,IAAI,CAAC,UAAU,CAAC,CAAC,CAAC,IAAI,CAAC,UAAU,GAAG,IAAI,CAAC,CAAC,CAAC,SAAS;SAC9D,CAAC,CAAC;QAEH,IAAI,MAAM,GAAG,EAAE,CAAC;QAChB,IAAI,MAAM,GAAG,EAAE,CAAC;QAEhB,KAAK,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,EAAE,CAAC,KAAa,EAAE,EAAE;YACzC,MAAM,GAAG,aAAa,CACpB,MAAM,EACN,mBAAmB,CAAC,KAAK,CAAC,QAAQ,CAAC,MAAM,CAAC,EAAE,UAAU,CAAC,EACvD,cAAc,CACf,CAAC;QACJ,CAAC,CAAC,CAAC;QAEH,KAAK,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,EAAE,CAAC,KAAa,EAAE,EAAE;YACzC,MAAM,GAAG,aAAa,CACpB,MAAM,EACN,mBAAmB,CAAC,KAAK,CAAC,QAAQ,CAAC,MAAM,CAAC,EAAE,UAAU,CAAC,EACvD,cAAc,CACf,CAAC;QACJ,CAAC,CAAC,CAAC;QAEH,KAAK,CAAC,EAAE,CAAC,OAAO,EAAE,CAAC,KAA4B,EAAE,EAAE;YACjD,OAAO,CAAC;gBACN,QAAQ,EAAE,CAAC,CAAC;gBACZ,MAAM;gBACN,MAAM,EAAE,aAAa,CACnB,gBAAgB,KAAK,CAAC,OAAO,IAAI,EACjC,MAAM,EACN,cAAc,CACf;gBACD,UAAU,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,SAAS;gBAClC,cAAc,EAAE,OAAO;aACxB,CAAC,CAAC;QACL,CAAC,CAAC,CAAC;QAEH,KAAK,CAAC,EAAE,CAAC,OAAO,EAAE,CAAC,IAAmB,EAAE,EAAE;YACxC,OAAO,CAAC;gBACN,QAAQ,EAAE,IAAI,IAAI,CAAC,CAAC;gBACpB,MAAM;gBACN,MAAM;gBACN,UAAU,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,SAAS;gBAClC,cAAc,EAAE,OAAO;aACxB,CAAC,CAAC;QACL,CAAC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;AACL,CAAC;AAED,SAAS,aAAa,CAAC,OAAe,EAAE,IAAY,EAAE,QAAgB;IACpE,MAAM,QAAQ,GAAG,OAAO,GAAG,IAAI,CAAC;IAChC,IAAI,QAAQ,CAAC,MAAM,IAAI,QAAQ;QAAE,OAAO,QAAQ,CAAC;IACjD,OAAO,QAAQ,CAAC,KAAK,CAAC,CAAC,EAAE,QAAQ,CAAC,CAAC;AACrC,CAAC;AAED,SAAS,uBAAuB,CAAC,IAA6B;IAC5D,OAAO,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,OAAO,IAAI,EAAE,CAAC;SACtC,MAAM,CAAC,CAAC,CAAC,GAAG,EAAE,KAAK,CAAC,EAAE,EAAE,CAAC,cAAc,CAAC,GAAG,CAAC,IAAI,KAAK,CAAC,MAAM,GAAG,CAAC,CAAC;SACjE,GAAG,CAAC,CAAC,CAAC,EAAE,KAAK,CAAC,EAAE,EAAE,CAAC,KAAK,CAAC,CAAC;AAC/B,CAAC;AAED,SAAS,cAAc,CAAC,GAAW;IACjC,OAAO,oDAAoD,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;AACxE,CAAC;AAED,SAAS,mBAAmB,CAAC,MAAc,EAAE,UAAoB;IAC/D,IAAI,QAAQ,GAAG,MAAM,CAAC;IACtB,KAAK,MAAM,KAAK,IAAI,UAAU,EAAE,CAAC;QAC/B,QAAQ,GAAG,QAAQ,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IAC/C,CAAC;IACD,OAAO,QAAQ,CAAC;AAClB,CAAC"}

package/dist/docker-sandbox.types.d.ts

@@ -0,0 +1,35 @@
+export interface DockerSandboxRunOptions {
+    image: string;
+    command: string;
+    args?: string[];
+    workdir: string;
+    mountPath: string;
+    networkMode: 'none' | 'host' | 'bridge';
+    readonlyRootfs: boolean;
+    capDrop: string[];
+    capAdd?: string[];
+    memoryLimitMb?: number;
+    cpuLimit?: number;
+    timeoutSec?: number;
+    envVars?: Record<string, string>;
+}
+export interface DockerSandboxRunResult {
+    exitCode: number;
+    stdout: string;
+    stderr: string;
+    durationMs: number;
+    sandboxProfile: DockerSandboxProfile;
+}
+export interface DockerSandboxProfile {
+    network: 'deny' | 'allowlist' | 'open-with-approval';
+    writeScope: 'workspace' | 'repo' | 'artifact-only';
+    shellEnforcement: boolean;
+    secretMode: 'redacted' | 'blocked';
+    memoryLimitMb: number;
+    cpuLimit: number;
+}
+export interface DockerSandboxValidation {
+    valid: boolean;
+    warnings: string[];
+}
+//# sourceMappingURL=docker-sandbox.types.d.ts.map

package/dist/docker-sandbox.types.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"docker-sandbox.types.d.ts","sourceRoot":"","sources":["../../../packages/docker/src/docker-sandbox.types.ts"],"names":[],"mappings":"AAAA,MAAM,WAAW,uBAAuB;IACtC,KAAK,EAAE,MAAM,CAAC;IACd,OAAO,EAAE,MAAM,CAAC;IAChB,IAAI,CAAC,EAAE,MAAM,EAAE,CAAC;IAChB,OAAO,EAAE,MAAM,CAAC;IAChB,SAAS,EAAE,MAAM,CAAC;IAClB,WAAW,EAAE,MAAM,GAAG,MAAM,GAAG,QAAQ,CAAC;IACxC,cAAc,EAAE,OAAO,CAAC;IACxB,OAAO,EAAE,MAAM,EAAE,CAAC;IAClB,MAAM,CAAC,EAAE,MAAM,EAAE,CAAC;IAClB,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;CAClC;AAED,MAAM,WAAW,sBAAsB;IACrC,QAAQ,EAAE,MAAM,CAAC;IACjB,MAAM,EAAE,MAAM,CAAC;IACf,MAAM,EAAE,MAAM,CAAC;IACf,UAAU,EAAE,MAAM,CAAC;IACnB,cAAc,EAAE,oBAAoB,CAAC;CACtC;AAED,MAAM,WAAW,oBAAoB;IACnC,OAAO,EAAE,MAAM,GAAG,WAAW,GAAG,oBAAoB,CAAC;IACrD,UAAU,EAAE,WAAW,GAAG,MAAM,GAAG,eAAe,CAAC;IACnD,gBAAgB,EAAE,OAAO,CAAC;IAC1B,UAAU,EAAE,UAAU,GAAG,SAAS,CAAC;IACnC,aAAa,EAAE,MAAM,CAAC;IACtB,QAAQ,EAAE,MAAM,CAAC;CAClB;AAED,MAAM,WAAW,uBAAuB;IACtC,KAAK,EAAE,OAAO,CAAC;IACf,QAAQ,EAAE,MAAM,EAAE,CAAC;CACpB"}

package/dist/docker-sandbox.types.js

@@ -0,0 +1,3 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+//# sourceMappingURL=docker-sandbox.types.js.map

package/dist/docker-sandbox.types.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"docker-sandbox.types.js","sourceRoot":"","sources":["../../../packages/docker/src/docker-sandbox.types.ts"],"names":[],"mappings":""}

package/dist/index.d.ts

@@ -8,4 +8,9 @@ export { DockerOrphanCleanerService } from './docker-orphan-cleaner.service';
 export type { SandboxOrphanInfo, SandboxCleanupReport, } from './docker-orphan-cleaner.service';
 export * from './types';
 export * from './docker.utils';
+export * from './docker-client.factory';
+export * from './docker-image-puller';
+export * from './docker-sandbox.types';
+export * from './docker-sandbox-command';
+export * from './docker-sandbox-runner';
 //# sourceMappingURL=index.d.ts.map

package/dist/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../packages/docker/src/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,YAAY,EAAE,MAAM,iBAAiB,CAAC;AAC/C,OAAO,EAAE,mBAAmB,EAAE,MAAM,yBAAyB,CAAC;AAC9D,OAAO,EAAE,iBAAiB,EAAE,MAAM,uBAAuB,CAAC;AAC1D,OAAO,EAAE,aAAa,EAAE,MAAM,kBAAkB,CAAC;AACjD,OAAO,EAAE,kBAAkB,EAAE,MAAM,wBAAwB,CAAC;AAC5D,OAAO,EAAE,kBAAkB,EAAE,MAAM,wBAAwB,CAAC;AAC5D,OAAO,EAAE,0BAA0B,EAAE,MAAM,iCAAiC,CAAC;AAC7E,YAAY,EACV,iBAAiB,EACjB,oBAAoB,GACrB,MAAM,iCAAiC,CAAC;AACzC,cAAc,SAAS,CAAC;AACxB,cAAc,gBAAgB,CAAC"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../packages/docker/src/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,YAAY,EAAE,MAAM,iBAAiB,CAAC;AAC/C,OAAO,EAAE,mBAAmB,EAAE,MAAM,yBAAyB,CAAC;AAC9D,OAAO,EAAE,iBAAiB,EAAE,MAAM,uBAAuB,CAAC;AAC1D,OAAO,EAAE,aAAa,EAAE,MAAM,kBAAkB,CAAC;AACjD,OAAO,EAAE,kBAAkB,EAAE,MAAM,wBAAwB,CAAC;AAC5D,OAAO,EAAE,kBAAkB,EAAE,MAAM,wBAAwB,CAAC;AAC5D,OAAO,EAAE,0BAA0B,EAAE,MAAM,iCAAiC,CAAC;AAC7E,YAAY,EACV,iBAAiB,EACjB,oBAAoB,GACrB,MAAM,iCAAiC,CAAC;AACzC,cAAc,SAAS,CAAC;AACxB,cAAc,gBAAgB,CAAC;AAC/B,cAAc,yBAAyB,CAAC;AACxC,cAAc,uBAAuB,CAAC;AACtC,cAAc,wBAAwB,CAAC;AACvC,cAAc,0BAA0B,CAAC;AACzC,cAAc,yBAAyB,CAAC"}

package/dist/index.js

@@ -31,4 +31,9 @@ var docker_orphan_cleaner_service_1 = require("./docker-orphan-cleaner.service")
 Object.defineProperty(exports, "DockerOrphanCleanerService", { enumerable: true, get: function () { return docker_orphan_cleaner_service_1.DockerOrphanCleanerService; } });
 __exportStar(require("./types"), exports);
 __exportStar(require("./docker.utils"), exports);
+__exportStar(require("./docker-client.factory"), exports);
+__exportStar(require("./docker-image-puller"), exports);
+__exportStar(require("./docker-sandbox.types"), exports);
+__exportStar(require("./docker-sandbox-command"), exports);
+__exportStar(require("./docker-sandbox-runner"), exports);
 //# sourceMappingURL=index.js.map

package/dist/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../packages/docker/src/index.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;;AAAA,iDAA+C;AAAtC,6GAAA,YAAY,OAAA;AACrB,iEAA8D;AAArD,4HAAA,mBAAmB,OAAA;AAC5B,6DAA0D;AAAjD,wHAAA,iBAAiB,OAAA;AAC1B,mDAAiD;AAAxC,+GAAA,aAAa,OAAA;AACtB,+DAA4D;AAAnD,0HAAA,kBAAkB,OAAA;AAC3B,+DAA4D;AAAnD,0HAAA,kBAAkB,OAAA;AAC3B,iFAA6E;AAApE,2IAAA,0BAA0B,OAAA;AAKnC,0CAAwB;AACxB,iDAA+B"}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../packages/docker/src/index.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;;AAAA,iDAA+C;AAAtC,6GAAA,YAAY,OAAA;AACrB,iEAA8D;AAArD,4HAAA,mBAAmB,OAAA;AAC5B,6DAA0D;AAAjD,wHAAA,iBAAiB,OAAA;AAC1B,mDAAiD;AAAxC,+GAAA,aAAa,OAAA;AACtB,+DAA4D;AAAnD,0HAAA,kBAAkB,OAAA;AAC3B,+DAA4D;AAAnD,0HAAA,kBAAkB,OAAA;AAC3B,iFAA6E;AAApE,2IAAA,0BAA0B,OAAA;AAKnC,0CAAwB;AACxB,iDAA+B;AAC/B,0DAAwC;AACxC,wDAAsC;AACtC,yDAAuC;AACvC,2DAAyC;AACzC,0DAAwC"}

package/dist/types.d.ts

@@ -1,6 +1,11 @@
 /**
  * Shared type stubs for the Docker package.
  * Kept local to avoid depending on @repo/contracts (agents-specific).
+ *
+ * Legacy compatibility note:
+ * these Bot/OpenClaw-shaped exports predate the cross-project infra boundary.
+ * New shared Docker primitives must not add product-domain types here; prefer
+ * product-neutral modules such as docker-client.factory and docker-image-puller.
  */
 export type BotType = string;
 export type ProviderVendor = string;

package/dist/types.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../../../packages/docker/src/types.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAGH,MAAM,MAAM,OAAO,GAAG,MAAM,CAAC;AAG7B,MAAM,MAAM,cAAc,GAAG,MAAM,CAAC;AAEpC,MAAM,WAAW,cAAc;IAC7B,IAAI,EAAE,MAAM,CAAC;IACb,MAAM,EAAE,MAAM,EAAE,CAAC;IACjB,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,CAAC,GAAG,EAAE,MAAM,GAAG,GAAG,CAAC;CACpB;AAED,eAAO,MAAM,gBAAgB,EAAE,MAAM,CAAC,MAAM,EAAE,cAAc,CAAM,CAAC;AAEnE,gFAAgF;AAChF,wBAAgB,yBAAyB,CAAC,SAAS,EAAE,MAAM,GAAG,GAAG,CAEhE;AAGD,MAAM,WAAW,cAAc;IAC7B,QAAQ,EAAE,MAAM,CAAC;IACjB,IAAI,EAAE,MAAM,CAAC;IACb,WAAW,EAAE,MAAM,CAAC;IACpB,GAAG,EAAE,MAAM,GAAG,IAAI,CAAC;IACnB,aAAa,EAAE,MAAM,GAAG,IAAI,CAAC;IAC7B,SAAS,EAAE,MAAM,GAAG,IAAI,CAAC;IACzB,UAAU,EAAE,MAAM,CAAC;IACnB,WAAW,EAAE,MAAM,CAAC;IACpB,WAAW,EAAE,MAAM,CAAC;IACpB,aAAa,EAAE,MAAM,CAAC;IACtB,cAAc,EAAE,MAAM,CAAC;IACvB,cAAc,EAAE,MAAM,CAAC;IACvB,SAAS,EAAE,MAAM,CAAC;CACnB;AAGD,MAAM,WAAW,YAAY;IAC3B,kBAAkB,EAAE,MAAM,EAAE,CAAC;IAC7B,kBAAkB,EAAE,MAAM,EAAE,CAAC;IAC7B,eAAe,EAAE,MAAM,EAAE,CAAC;IAC1B,KAAK,EAAE,MAAM,CAAC;CACf;AAGD,MAAM,WAAW,aAAa;IAC5B,OAAO,EAAE,OAAO,CAAC;IACjB,iBAAiB,EAAE,MAAM,CAAC;IAC1B,iBAAiB,EAAE,MAAM,CAAC;IAC1B,cAAc,EAAE,MAAM,CAAC;CACxB"}
+{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../../../packages/docker/src/types.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAGH,MAAM,MAAM,OAAO,GAAG,MAAM,CAAC;AAG7B,MAAM,MAAM,cAAc,GAAG,MAAM,CAAC;AAEpC,MAAM,WAAW,cAAc;IAC7B,IAAI,EAAE,MAAM,CAAC;IACb,MAAM,EAAE,MAAM,EAAE,CAAC;IACjB,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,CAAC,GAAG,EAAE,MAAM,GAAG,GAAG,CAAC;CACpB;AAED,eAAO,MAAM,gBAAgB,EAAE,MAAM,CAAC,MAAM,EAAE,cAAc,CAAM,CAAC;AAEnE,gFAAgF;AAChF,wBAAgB,yBAAyB,CAAC,SAAS,EAAE,MAAM,GAAG,GAAG,CAEhE;AAGD,MAAM,WAAW,cAAc;IAC7B,QAAQ,EAAE,MAAM,CAAC;IACjB,IAAI,EAAE,MAAM,CAAC;IACb,WAAW,EAAE,MAAM,CAAC;IACpB,GAAG,EAAE,MAAM,GAAG,IAAI,CAAC;IACnB,aAAa,EAAE,MAAM,GAAG,IAAI,CAAC;IAC7B,SAAS,EAAE,MAAM,GAAG,IAAI,CAAC;IACzB,UAAU,EAAE,MAAM,CAAC;IACnB,WAAW,EAAE,MAAM,CAAC;IACpB,WAAW,EAAE,MAAM,CAAC;IACpB,aAAa,EAAE,MAAM,CAAC;IACtB,cAAc,EAAE,MAAM,CAAC;IACvB,cAAc,EAAE,MAAM,CAAC;IACvB,SAAS,EAAE,MAAM,CAAC;CACnB;AAGD,MAAM,WAAW,YAAY;IAC3B,kBAAkB,EAAE,MAAM,EAAE,CAAC;IAC7B,kBAAkB,EAAE,MAAM,EAAE,CAAC;IAC7B,eAAe,EAAE,MAAM,EAAE,CAAC;IAC1B,KAAK,EAAE,MAAM,CAAC;CACf;AAGD,MAAM,WAAW,aAAa;IAC5B,OAAO,EAAE,OAAO,CAAC;IACjB,iBAAiB,EAAE,MAAM,CAAC;IAC1B,iBAAiB,EAAE,MAAM,CAAC;IAC1B,cAAc,EAAE,MAAM,CAAC;CACxB"}

package/dist/types.js

@@ -2,6 +2,11 @@
 /**
  * Shared type stubs for the Docker package.
  * Kept local to avoid depending on @repo/contracts (agents-specific).
+ *
+ * Legacy compatibility note:
+ * these Bot/OpenClaw-shaped exports predate the cross-project infra boundary.
+ * New shared Docker primitives must not add product-domain types here; prefer
+ * product-neutral modules such as docker-client.factory and docker-image-puller.
  */
 Object.defineProperty(exports, "__esModule", { value: true });
 exports.PROVIDER_CONFIGS = void 0;

package/dist/types.js.map

@@ -1 +1 @@
-{"version":3,"file":"types.js","sourceRoot":"","sources":["../../../packages/docker/src/types.ts"],"names":[],"mappings":";AAAA;;;GAGG;;;AAkBH,8DAEC;AALY,QAAA,gBAAgB,GAAmC,EAAE,CAAC;AAEnE,gFAAgF;AAChF,SAAgB,yBAAyB,CAAC,SAAiB;IACzD,OAAO,IAAI,CAAC;AACd,CAAC"}
+{"version":3,"file":"types.js","sourceRoot":"","sources":["../../../packages/docker/src/types.ts"],"names":[],"mappings":";AAAA;;;;;;;;GAQG;;;AAkBH,8DAEC;AALY,QAAA,gBAAgB,GAAmC,EAAE,CAAC;AAEnE,gFAAgF;AAChF,SAAgB,yBAAyB,CAAC,SAAiB;IACzD,OAAO,IAAI,CAAC;AACd,CAAC"}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@dofe/infra-docker",
-  "version": "0.1.78",
+  "version": "0.1.80",
   "description": "Docker container management — create/start/stop containers, port allocation, orphan cleanup with grace period",
   "main": "dist/index.js",
   "types": "dist/index.d.ts",
@@ -9,6 +9,14 @@
       "types": "./dist/index.d.ts",
       "default": "./dist/index.js"
     },
+    "./docker-client.factory": {
+      "types": "./dist/docker-client.factory.d.ts",
+      "default": "./dist/docker-client.factory.js"
+    },
+    "./docker-image-puller": {
+      "types": "./dist/docker-image-puller.d.ts",
+      "default": "./dist/docker-image-puller.js"
+    },
     "./docker-image.module": {
       "types": "./dist/docker-image.module.d.ts",
       "default": "./dist/docker-image.module.js"
@@ -25,6 +33,18 @@
       "types": "./dist/docker-runtime.module.d.ts",
       "default": "./dist/docker-runtime.module.js"
     },
+    "./docker-sandbox-command": {
+      "types": "./dist/docker-sandbox-command.d.ts",
+      "default": "./dist/docker-sandbox-command.js"
+    },
+    "./docker-sandbox-runner": {
+      "types": "./dist/docker-sandbox-runner.d.ts",
+      "default": "./dist/docker-sandbox-runner.js"
+    },
+    "./docker-sandbox.types": {
+      "types": "./dist/docker-sandbox.types.d.ts",
+      "default": "./dist/docker-sandbox.types.js"
+    },
     "./docker-stats.service": {
       "types": "./dist/docker-stats.service.d.ts",
       "default": "./dist/docker-stats.service.js"
@@ -55,8 +75,8 @@
     "reflect-metadata": "^0.2.0",
     "rxjs": "^7.8.0",
     "winston": "^3.13.0",
-    "@dofe/infra-common": "^0.1.78",
-    "@dofe/infra-utils": "^0.1.78"
+    "@dofe/infra-common": "^0.1.80",
+    "@dofe/infra-utils": "^0.1.80"
   },
   "devDependencies": {
     "rimraf": "^6.1.3",
@@ -67,13 +87,17 @@
     "access": "public"
   },
   "files": [
-    "dist"
+    "dist",
+    "test",
+    "package.json"
   ],
   "license": "UNLICENSED",
   "scripts": {
     "build": "tsc",
     "typecheck": "tsc --noEmit",
     "clean": "rimraf dist",
+    "test": "pnpm run test:smoke",
+    "test:smoke": "node --test test/*.smoke.mjs",
     "postbuild": "node ../../scripts/generate-exports.mjs"
   }
 }

package/test/image-puller.smoke.mjs

@@ -0,0 +1,156 @@
+import assert from 'node:assert/strict';
+import test from 'node:test';
+import {
+  probeDockerDaemon,
+} from '../dist/docker-client.factory.js';
+import {
+  inspectDockerImage,
+  normalizeRegistryServer,
+  pullDockerImage,
+  redactDockerAuth,
+  registryAuthFromEnv,
+  registryFromImage,
+  stripRegistryScheme,
+} from '../dist/docker-image-puller.js';
+
+function fakeDocker(overrides = {}) {
+  const calls = {
+    pull: [],
+    followProgress: 0,
+    getImage: [],
+  };
+  return {
+    calls,
+    ping: async () => undefined,
+    version: async () => ({ ServerVersion: '25.0.3-test-build-extra-long-version' }),
+    getImage: (image) => {
+      calls.getImage.push(image);
+      return {
+        inspect: async () => ({ Id: `sha256:${image}` }),
+      };
+    },
+    pull: (image, options, callback) => {
+      calls.pull.push({ image, options });
+      callback(null, { fakeStream: true });
+    },
+    modem: {
+      followProgress: (_stream, callback) => {
+        calls.followProgress += 1;
+        callback(null);
+      },
+    },
+    ...overrides,
+  };
+}
+
+test('probeDockerDaemon returns safe ready status and trimmed version', async () => {
+  const result = await probeDockerDaemon(fakeDocker(), 100);
+  assert.equal(result.ok, true);
+  assert.equal(result.version, '25.0.3-test-build-extra-long-version');
+});
+
+test('probeDockerDaemon redacts failure shape into a bounded message', async () => {
+  const result = await probeDockerDaemon(
+    fakeDocker({
+      ping: async () => {
+        throw new Error('daemon unavailable '.repeat(40));
+      },
+    }),
+    100,
+  );
+  assert.equal(result.ok, false);
+  assert.ok(result.message.length <= 240);
+  assert.match(result.message, /daemon unavailable/);
+});
+
+test('inspectDockerImage reports local image presence without a daemon dependency', async () => {
+  const result = await inspectDockerImage(fakeDocker(), 'registry.local/app:1', 100);
+  assert.deepEqual(result, {
+    present: true,
+    imageId: 'sha256:registry.local/app:1',
+  });
+});
+
+test('registry helpers only produce auth for matching configured registries', () => {
+  assert.equal(registryFromImage('registry.local:5000/team/app:1'), 'registry.local:5000');
+  assert.equal(registryFromImage('library/ubuntu:latest'), '');
+  assert.equal(stripRegistryScheme('https://registry.local'), 'registry.local');
+  assert.equal(normalizeRegistryServer('registry.local'), 'https://registry.local');
+
+  assert.deepEqual(
+    registryAuthFromEnv('registry.local/team/app:1', {
+      DOCKER_REGISTRY_USERNAME: 'alice',
+      DOCKER_REGISTRY_PASSWORD: 'secret',
+      DOCKER_REGISTRY_SERVER: 'https://registry.local',
+    }),
+    {
+      username: 'alice',
+      password: 'secret',
+      serveraddress: 'https://registry.local',
+    },
+  );
+
+  assert.equal(
+    registryAuthFromEnv('other.local/team/app:1', {
+      DOCKER_REGISTRY_USERNAME: 'alice',
+      DOCKER_REGISTRY_PASSWORD: 'secret',
+      DOCKER_REGISTRY_SERVER: 'registry.local',
+    }),
+    undefined,
+  );
+});
+
+test('pullDockerImage passes platform and matching authconfig to Dockerode', async () => {
+  const docker = fakeDocker();
+  const registryAuth = {
+    username: 'alice',
+    password: 'secret',
+    serveraddress: 'https://registry.local',
+  };
+  const result = await pullDockerImage(docker, {
+    image: 'registry.local/team/app:1',
+    platform: 'linux/amd64',
+    registryAuth,
+    timeoutMs: 100,
+  });
+
+  assert.equal(result.ok, true);
+  assert.equal(docker.calls.followProgress, 1);
+  assert.deepEqual(docker.calls.pull, [
+    {
+      image: 'registry.local/team/app:1',
+      options: {
+        platform: 'linux/amd64',
+        authconfig: registryAuth,
+      },
+    },
+  ]);
+});
+
+test('pullDockerImage redacts auth details from Docker failures', async () => {
+  const registryAuth = {
+    username: 'alice',
+    password: 'secret',
+    serveraddress: 'https://registry.local',
+  };
+  const docker = fakeDocker({
+    pull: (_image, _options, callback) => {
+      callback(new Error('login failed for alice with password secret'), null);
+    },
+  });
+
+  const result = await pullDockerImage(docker, {
+    image: 'registry.local/team/app:1',
+    registryAuth,
+    timeoutMs: 100,
+  });
+
+  assert.equal(result.ok, false);
+  assert.equal(result.message.includes('alice'), false);
+  assert.equal(result.message.includes('secret'), false);
+  assert.match(result.message, /\*\*\*/);
+});
+
+test('redactDockerAuth leaves unauthenticated messages untouched', () => {
+  assert.equal(redactDockerAuth('plain docker error', undefined), 'plain docker error');
+});

package/test/sandbox.smoke.mjs

@@ -0,0 +1,114 @@
+import assert from 'node:assert/strict';
+import test from 'node:test';
+import { chmod, mkdir, writeFile } from 'node:fs/promises';
+import os from 'node:os';
+import path from 'node:path';
+import {
+  buildDockerSandboxRunCommand,
+  buildDockerSandboxedExec,
+  describeDockerSandboxProfile,
+  validateDockerSandboxProfile,
+} from '../dist/docker-sandbox-command.js';
+import { executeDockerSandbox as runSandbox } from '../dist/docker-sandbox-runner.js';
+
+const baseOptions = {
+  image: 'example/sandbox:latest',
+  command: 'node',
+  args: ['script.js'],
+  workdir: '/workspace',
+  mountPath: '/host/repo',
+  networkMode: 'none',
+  readonlyRootfs: true,
+  capDrop: ['ALL'],
+  memoryLimitMb: 256,
+  cpuLimit: 0.5,
+  timeoutSec: 2,
+  envVars: {
+    API_TOKEN: 'secret-token',
+    PUBLIC_FLAG: 'visible',
+  },
+};
+
+test('buildDockerSandboxRunCommand locks down the default sandbox shape', () => {
+  const cmd = buildDockerSandboxRunCommand(baseOptions);
+
+  assert.deepEqual(cmd.slice(0, 3), ['docker', 'run', '--rm']);
+  assert.ok(cmd.includes('--network=none'));
+  assert.ok(cmd.includes('--read-only'));
+  assert.ok(cmd.includes('--cap-drop=ALL'));
+  assert.ok(cmd.includes('--security-opt=no-new-privileges:true'));
+  assert.ok(cmd.includes('--memory=256m'));
+  assert.ok(cmd.includes('--cpus=0.5'));
+  assert.ok(cmd.includes('/host/repo:/workspace'));
+  assert.ok(cmd.includes('-w'));
+  assert.ok(cmd.includes('/workspace'));
+  assert.ok(cmd.includes('-e'));
+  assert.ok(cmd.includes('API_TOKEN=secret-token'));
+  assert.deepEqual(cmd.slice(-3), ['example/sandbox:latest', 'node', 'script.js']);
+});
+
+test('buildDockerSandboxedExec separates docker command from argv', () => {
+  const exec = buildDockerSandboxedExec(baseOptions);
+  assert.equal(exec.command, 'docker');
+  assert.equal(exec.args[0], 'run');
+  assert.equal(exec.args.includes('docker'), false);
+});
+
+test('describe and validate sandbox profiles expose security posture', () => {
+  assert.deepEqual(describeDockerSandboxProfile(baseOptions), {
+    network: 'deny',
+    writeScope: 'artifact-only',
+    shellEnforcement: true,
+    secretMode: 'blocked',
+    memoryLimitMb: 256,
+    cpuLimit: 0.5,
+  });
+  assert.deepEqual(validateDockerSandboxProfile(baseOptions), {
+    valid: true,
+    warnings: [],
+  });
+
+  const unsafe = validateDockerSandboxProfile({
+    ...baseOptions,
+    networkMode: 'bridge',
+    readonlyRootfs: false,
+    capDrop: [],
+    capAdd: ['SYS_ADMIN'],
+    memoryLimitMb: 8192,
+  });
+  assert.equal(unsafe.valid, false);
+  assert.equal(unsafe.warnings.length, 5);
+});
+
+test('executeDockerSandbox captures exit code, truncates output, and redacts secret env values', async () => {
+  const oldPath = process.env.PATH;
+  const binDir = path.join(os.tmpdir(), `infra-docker-fake-${Date.now()}`);
+  await mkdir(binDir, { recursive: true });
+  const dockerPath = path.join(binDir, 'docker');
+  await writeFile(
+    dockerPath,
+    [
+      '#!/bin/sh',
+      'printf "stdout:%s:%s" "secret-token" "$*"',
+      'printf "stderr:%s:%s" "secret-token" "$*" 1>&2',
+      'exit 7',
+      '',
+    ].join('\n'),
+  );
+  await chmod(dockerPath, 0o755);
+
+  try {
+    process.env.PATH = `${binDir}:${oldPath ?? ''}`;
+    const result = await runSandbox(baseOptions, 80);
+    assert.equal(result.exitCode, 7);
+    assert.equal(result.stdout.includes('secret-token'), false);
+    assert.equal(result.stderr.includes('secret-token'), false);
+    assert.match(result.stdout, /\*\*\*/);
+    assert.match(result.stderr, /\*\*\*/);
+    assert.ok(result.stdout.length <= 80);
+    assert.ok(result.stderr.length <= 80);
+    assert.equal(result.sandboxProfile.network, 'deny');
+  } finally {
+    process.env.PATH = oldPath;
+  }
+});