@elie-laloum/outpost 11.1.2 → 11.2.0

package/dist/providers/container-egress.js

@@ -0,0 +1,101 @@
+import { setTimeout } from "node:timers/promises";
+import { invariant, OutpostError } from "../domain/errors.js";
+import { containerEgress, defaultEgressImage, } from "./container-egress.constants.js";
+import { egressRuntime } from "./egress/egress.constants.js";
+export function containerUserNamespace(engine, config, user) {
+    if (engine !== "podman" ||
+        config.userns === false ||
+        (process.getuid?.() === 0 && config.userns !== "keep-id"))
+        return [];
+    return [
+        "--userns",
+        config.user ? `keep-id:uid=${user.uid},gid=${user.gid}` : "keep-id",
+    ];
+}
+export function createContainerEgress(call, name, config, engine, user) {
+    const companion = `${name}-egress`;
+    let attempted = false;
+    return {
+        name: companion,
+        async start(signal) {
+            invariant(config.egress?.mode === "allowlist", "Container egress requires an allowlist");
+            invariant(user.uid !== egressRuntime.uid, `UID ${egressRuntime.uid} is reserved for the egress proxy`);
+            const image = config.egressImage ?? defaultEgressImage;
+            invariant(image, "The default Outpost egress image has not been published; build images/egress and set egressImage");
+            const extra = signal ? { signal } : {};
+            attempted = true;
+            await call([
+                "create",
+                "--name",
+                companion,
+                "--network",
+                "bridge",
+                "--label",
+                `${containerEgress.label}=${name}`,
+                "--user",
+                "0:0",
+                ...containerUserNamespace(engine, config, user),
+                "--cap-drop",
+                "ALL",
+                "--cap-add",
+                "NET_ADMIN",
+                "--cap-add",
+                "SETUID",
+                "--cap-add",
+                "SETGID",
+                "--security-opt",
+                "no-new-privileges",
+                "--read-only",
+                "--tmpfs",
+                "/run/outpost:rw,noexec,nosuid,size=1m,mode=0700",
+                "--env",
+                `OUTPOST_EGRESS_POLICY=${JSON.stringify(config.egress)}`,
+                "--entrypoint",
+                "node",
+                image,
+                containerEgress.entrypoint,
+            ], extra);
+            await call(["start", companion], extra);
+            const deadline = Date.now() + containerEgress.startupMs;
+            while (true) {
+                signal?.throwIfAborted();
+                try {
+                    await call([
+                        "exec",
+                        companion,
+                        "node",
+                        containerEgress.entrypoint,
+                        "health",
+                        String(egressRuntime.version),
+                    ], { ...extra, deadlineMs: 2_000 });
+                    return;
+                }
+                catch (cause) {
+                    signal?.throwIfAborted();
+                    const running = await call(["inspect", "--format", "{{.State.Running}}", companion], extra);
+                    if (running.stdout.trim() !== "true" || Date.now() >= deadline)
+                        throw new OutpostError("provider", "Container egress could not establish its firewall and proxy; sandbox execution refused", { engine }, cause);
+                    await setTimeout(containerEgress.pollMs, undefined, extra);
+                }
+            }
+        },
+        async release() {
+            if (!attempted)
+                return;
+            const found = await call([
+                "container",
+                "ls",
+                "--all",
+                "--filter",
+                `name=^${companion}$`,
+                "--format",
+                "{{.Names}}",
+            ]);
+            if (!found.stdout.trim())
+                return;
+            invariant(found.stdout.trim() === companion, "Egress container identity mismatch");
+            await call(["rm", "--force", companion]);
+        },
+    };
+}
+//# sourceMappingURL=container-egress.js.map

package/dist/providers/container-egress.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"container-egress.js","sourceRoot":"","sources":["../../src/providers/container-egress.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,sBAAsB,CAAC;AAClD,OAAO,EAAE,SAAS,EAAE,YAAY,EAAE,MAAM,qBAAqB,CAAC;AAC9D,OAAO,EACL,eAAe,EACf,kBAAkB,GACnB,MAAM,iCAAiC,CAAC;AACzC,OAAO,EAAE,aAAa,EAAE,MAAM,8BAA8B,CAAC;AAQ7D,MAAM,UAAU,sBAAsB,CACpC,MAAuB,EACvB,MAAwB,EACxB,IAAmB;IAEnB,IACE,MAAM,KAAK,QAAQ;QACnB,MAAM,CAAC,MAAM,KAAK,KAAK;QACvB,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,MAAM,KAAK,SAAS,CAAC;QAEzD,OAAO,EAAE,CAAC;IACZ,OAAO;QACL,UAAU;QACV,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,eAAe,IAAI,CAAC,GAAG,QAAQ,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC,SAAS;KACpE,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,qBAAqB,CACnC,IAAmB,EACnB,IAAY,EACZ,MAAwB,EACxB,MAAuB,EACvB,IAAmB;IAEnB,MAAM,SAAS,GAAG,GAAG,IAAI,SAAS,CAAC;IACnC,IAAI,SAAS,GAAG,KAAK,CAAC;IACtB,OAAO;QACL,IAAI,EAAE,SAAS;QACf,KAAK,CAAC,KAAK,CAAC,MAAoB;YAC9B,SAAS,CACP,MAAM,CAAC,MAAM,EAAE,IAAI,KAAK,WAAW,EACnC,wCAAwC,CACzC,CAAC;YACF,SAAS,CACP,IAAI,CAAC,GAAG,KAAK,aAAa,CAAC,GAAG,EAC9B,OAAO,aAAa,CAAC,GAAG,mCAAmC,CAC5D,CAAC;YACF,MAAM,KAAK,GAAG,MAAM,CAAC,WAAW,IAAI,kBAAkB,CAAC;YACvD,SAAS,CACP,KAAK,EACL,kGAAkG,CACnG,CAAC;YACF,MAAM,KAAK,GAAG,MAAM,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YACvC,SAAS,GAAG,IAAI,CAAC;YACjB,MAAM,IAAI,CACR;gBACE,QAAQ;gBACR,QAAQ;gBACR,SAAS;gBACT,WAAW;gBACX,QAAQ;gBACR,SAAS;gBACT,GAAG,eAAe,CAAC,KAAK,IAAI,IAAI,EAAE;gBAClC,QAAQ;gBACR,KAAK;gBACL,GAAG,sBAAsB,CAAC,MAAM,EAAE,MAAM,EAAE,IAAI,CAAC;gBAC/C,YAAY;gBACZ,KAAK;gBACL,WAAW;gBACX,WAAW;gBACX,WAAW;gBACX,QAAQ;gBACR,WAAW;gBACX,QAAQ;gBACR,gBAAgB;gBAChB,mBAAmB;gBACnB,aAAa;gBACb,SAAS;gBACT,iDAAiD;gBACjD,OAAO;gBACP,yBAAyB,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,MAAM,CAAC,EAAE;gBACxD,cAAc;gBACd,MAAM;gBACN,KAAK;gBACL,eAAe,CAAC,UAAU;aAC3B,EACD,KAAK,CACN,CAAC;YACF,MAAM,IAAI,CAAC,CAAC,OAAO,EAAE,SAAS,CAAC,EAAE,KAAK,CAAC,CAAC;YACxC,MAAM,QAAQ,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,eAAe,CAAC,SAAS,CAAC;YACxD,OAAO,IAAI,EAAE,CAAC;gBACZ,MAAM,EAAE,cAAc,EAAE,CAAC;gBACzB,IAAI,CAAC;oBACH,MAAM,IAAI,CACR;wBACE,MAAM;wBACN,SAAS;wBACT,MAAM;wBACN,eAAe,CAAC,UAAU;wBAC1B,QAAQ;wBACR,MAAM,CAAC,aAAa,CAAC,OAAO,CAAC;qBAC9B,EACD,EAAE,GAAG,KAAK,EAAE,UAAU,EAAE,KAAK,EAAE,CAChC,CAAC;oBACF,OAAO;gBACT,CAAC;gBAAC,OAAO,KAAK,EAAE,CAAC;oBACf,MAAM,EAAE,cAAc,EAAE,CAAC;oBACzB,MAAM,OAAO,GAAG,MAAM,IAAI,CACxB,CAAC,SAAS,EAAE,UAAU,EAAE,oBAAoB,EAAE,SAAS,CAAC,EACxD,KAAK,CACN,CAAC;oBACF,IAAI,OAAO,CAAC,MAAM,CAAC,IAAI,EAAE,KAAK,MAAM,IAAI,IAAI,CAAC,GAAG,EAAE,IAAI,QAAQ;wBAC5D,MAAM,IAAI,YAAY,CACpB,UAAU,EACV,wFAAwF,EACxF,EAAE,MAAM,EAAE,EACV,KAAK,CACN,CAAC;oBACJ,MAAM,UAAU,CAAC,eAAe,CAAC,MAAM,EAAE,SAAS,EAAE,KAAK,CAAC,CAAC;gBAC7D,CAAC;YACH,CAAC;QACH,CAAC;QACD,KAAK,CAAC,OAAO;YACX,IAAI,CAAC,SAAS;gBAAE,OAAO;YACvB,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC;gBACvB,WAAW;gBACX,IAAI;gBACJ,OAAO;gBACP,UAAU;gBACV,SAAS,SAAS,GAAG;gBACrB,UAAU;gBACV,YAAY;aACb,CAAC,CAAC;YACH,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,IAAI,EAAE;gBAAE,OAAO;YACjC,SAAS,CACP,KAAK,CAAC,MAAM,CAAC,IAAI,EAAE,KAAK,SAAS,EACjC,oCAAoC,CACrC,CAAC;YACF,MAAM,IAAI,CAAC,CAAC,IAAI,EAAE,SAAS,EAAE,SAAS,CAAC,CAAC,CAAC;QAC3C,CAAC;KACF,CAAC;AACJ,CAAC","sourcesContent":["import { setTimeout } from \"node:timers/promises\";\nimport { invariant, OutpostError } from \"../domain/errors.ts\";\nimport {\n  containerEgress,\n  defaultEgressImage,\n} from \"./container-egress.constants.ts\";\nimport { egressRuntime } from \"./egress/egress.constants.ts\";\nimport type {\n  ContainerCall,\n  ContainerEngine,\n  ContainerOptions,\n  ContainerUser,\n} from \"./container.types.ts\";\n\nexport function containerUserNamespace(\n  engine: ContainerEngine,\n  config: ContainerOptions,\n  user: ContainerUser,\n): string[] {\n  if (\n    engine !== \"podman\" ||\n    config.userns === false ||\n    (process.getuid?.() === 0 && config.userns !== \"keep-id\")\n  )\n    return [];\n  return [\n    \"--userns\",\n    config.user ? `keep-id:uid=${user.uid},gid=${user.gid}` : \"keep-id\",\n  ];\n}\n\nexport function createContainerEgress(\n  call: ContainerCall,\n  name: string,\n  config: ContainerOptions,\n  engine: ContainerEngine,\n  user: ContainerUser,\n) {\n  const companion = `${name}-egress`;\n  let attempted = false;\n  return {\n    name: companion,\n    async start(signal?: AbortSignal): Promise<void> {\n      invariant(\n        config.egress?.mode === \"allowlist\",\n        \"Container egress requires an allowlist\",\n      );\n      invariant(\n        user.uid !== egressRuntime.uid,\n        `UID ${egressRuntime.uid} is reserved for the egress proxy`,\n      );\n      const image = config.egressImage ?? defaultEgressImage;\n      invariant(\n        image,\n        \"The default Outpost egress image has not been published; build images/egress and set egressImage\",\n      );\n      const extra = signal ? { signal } : {};\n      attempted = true;\n      await call(\n        [\n          \"create\",\n          \"--name\",\n          companion,\n          \"--network\",\n          \"bridge\",\n          \"--label\",\n          `${containerEgress.label}=${name}`,\n          \"--user\",\n          \"0:0\",\n          ...containerUserNamespace(engine, config, user),\n          \"--cap-drop\",\n          \"ALL\",\n          \"--cap-add\",\n          \"NET_ADMIN\",\n          \"--cap-add\",\n          \"SETUID\",\n          \"--cap-add\",\n          \"SETGID\",\n          \"--security-opt\",\n          \"no-new-privileges\",\n          \"--read-only\",\n          \"--tmpfs\",\n          \"/run/outpost:rw,noexec,nosuid,size=1m,mode=0700\",\n          \"--env\",\n          `OUTPOST_EGRESS_POLICY=${JSON.stringify(config.egress)}`,\n          \"--entrypoint\",\n          \"node\",\n          image,\n          containerEgress.entrypoint,\n        ],\n        extra,\n      );\n      await call([\"start\", companion], extra);\n      const deadline = Date.now() + containerEgress.startupMs;\n      while (true) {\n        signal?.throwIfAborted();\n        try {\n          await call(\n            [\n              \"exec\",\n              companion,\n              \"node\",\n              containerEgress.entrypoint,\n              \"health\",\n              String(egressRuntime.version),\n            ],\n            { ...extra, deadlineMs: 2_000 },\n          );\n          return;\n        } catch (cause) {\n          signal?.throwIfAborted();\n          const running = await call(\n            [\"inspect\", \"--format\", \"{{.State.Running}}\", companion],\n            extra,\n          );\n          if (running.stdout.trim() !== \"true\" || Date.now() >= deadline)\n            throw new OutpostError(\n              \"provider\",\n              \"Container egress could not establish its firewall and proxy; sandbox execution refused\",\n              { engine },\n              cause,\n            );\n          await setTimeout(containerEgress.pollMs, undefined, extra);\n        }\n      }\n    },\n    async release(): Promise<void> {\n      if (!attempted) return;\n      const found = await call([\n        \"container\",\n        \"ls\",\n        \"--all\",\n        \"--filter\",\n        `name=^${companion}$`,\n        \"--format\",\n        \"{{.Names}}\",\n      ]);\n      if (!found.stdout.trim()) return;\n      invariant(\n        found.stdout.trim() === companion,\n        \"Egress container identity mismatch\",\n      );\n      await call([\"rm\", \"--force\", companion]);\n    },\n  };\n}\n"]}

package/dist/providers/container-files.js

@@ -1,11 +1,12 @@
 import { randomUUID } from "node:crypto";
-import { lstat, mkdir, mkdtemp } from "node:fs/promises";
+import { mkdir, mkdtemp } from "node:fs/promises";
 import { tmpdir } from "node:os";
 import { basename, dirname, join, posix, resolve } from "node:path";
 import { invariant, OutpostError } from "../domain/errors.js";
 import { quote } from "../infrastructure/process.js";
-import { copyTransfer, removeTransferDirectory, transferDestination, } from "../infrastructure/transfer-copy.js";
+import { copyTransfer, removeTransferDirectory, transferDestination, transferTarget, } from "../infrastructure/transfer-copy.js";
 import { transfer } from "../infrastructure/transfer.js";
+import { transferDefaults } from "../infrastructure/transfer.constants.js";
 import { containerArchive } from "./container-archive.js";
 export function containerFiles(runtime, archive = containerArchive) {
     const { call, name } = runtime;
@@ -15,6 +16,7 @@ export function containerFiles(runtime, archive = containerArchive) {
                 if (runtime.isClosed())
                     throw new OutpostError("provider", "Container sandbox is closed");
                 const absolute = resolve(source);
+                const target = posix.resolve(runtime.root, destination);
                 const scratch = `/tmp/outpost-transfer-${randomUUID()}`;
                 const entry = basename(absolute);
                 invariant(entry, "Upload a directory's contents using a non-root path");
@@ -23,9 +25,11 @@ export function containerFiles(runtime, archive = containerArchive) {
                 try {
                     await archive(runtime, {
                         executable: "tar",
+                        deadlineMs: options.deadlineMs ?? transferDefaults.deadlineMs,
                         arguments: ["-cf", "-", "-C", dirname(absolute), "--", entry],
                     }, {
                         executable: "tar",
+                        deadlineMs: options.deadlineMs ?? transferDefaults.deadlineMs,
                         arguments: [
                             "-xpf",
                             "-",
@@ -40,7 +44,7 @@ export function containerFiles(runtime, archive = containerArchive) {
                         name,
                         "sh",
                         "-c",
-                        `mkdir -p ${quote(posix.dirname(destination))} && cp -a -- ${quote(posix.join(scratch, entry) + (contents ? "/." : ""))} ${quote(destination)}`,
+                        `mkdir -p ${quote(posix.dirname(target))} && cp -a -- ${quote(posix.join(scratch, entry) + (contents ? "/." : ""))} ${quote(target)}`,
                     ], { signal });
                 }
                 finally {
@@ -66,6 +70,7 @@ export function containerFiles(runtime, archive = containerArchive) {
                 try {
                     await archive(runtime, {
                         executable: "tar",
+                        deadlineMs: options.deadlineMs ?? transferDefaults.deadlineMs,
                         arguments: [
                             "-xpf",
                             "-",
@@ -76,6 +81,7 @@ export function containerFiles(runtime, archive = containerArchive) {
                         ],
                     }, {
                         executable: "tar",
+                        deadlineMs: options.deadlineMs ?? transferDefaults.deadlineMs,
                         arguments: [
                             "-cf",
                             "-",
@@ -85,14 +91,7 @@ export function containerFiles(runtime, archive = containerArchive) {
                             entry,
                         ],
                     }, false, signal);
-                    const existing = await lstat(destination).catch((cause) => {
-                        if (cause.code === "ENOENT")
-                            return undefined;
-                        throw cause;
-                    });
-                    const target = existing?.isDirectory() && !source.endsWith("/.")
-                        ? join(destination, entry)
-                        : destination;
+                    const target = await transferTarget(entry, destination, source.endsWith("/."));
                     await mkdir(dirname(target), { recursive: true });
                     await copyTransfer(join(scratch, entry), target, signal);
                 }

package/dist/providers/container-files.js.map

@@ -1 +1 @@
-{"version":3,"file":"container-files.js","sourceRoot":"","sources":["../../src/providers/container-files.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACzC,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,OAAO,EAAE,MAAM,kBAAkB,CAAC;AACzD,OAAO,EAAE,MAAM,EAAE,MAAM,SAAS,CAAC;AACjC,OAAO,EAAE,QAAQ,EAAE,OAAO,EAAE,IAAI,EAAE,KAAK,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAEpE,OAAO,EAAE,SAAS,EAAE,YAAY,EAAE,MAAM,qBAAqB,CAAC;AAC9D,OAAO,EAAE,KAAK,EAAE,MAAM,8BAA8B,CAAC;AACrD,OAAO,EACL,YAAY,EACZ,uBAAuB,EACvB,mBAAmB,GACpB,MAAM,oCAAoC,CAAC;AAC5C,OAAO,EAAE,QAAQ,EAAE,MAAM,+BAA+B,CAAC;AACzD,OAAO,EAAE,gBAAgB,EAAE,MAAM,wBAAwB,CAAC;AAG1D,MAAM,UAAU,cAAc,CAC5B,OAAyB,EACzB,OAAO,GAAG,gBAAgB;IAE1B,MAAM,EAAE,IAAI,EAAE,IAAI,EAAE,GAAG,OAAO,CAAC;IAC/B,OAAO;QACL,MAAM,CAAC,MAAM,EAAE,WAAW,EAAE,OAAO,GAAG,EAAE;YACtC,OAAO,QAAQ,CAAC,OAAO,EAAE,KAAK,EAAE,MAAM,EAAE,EAAE;gBACxC,IAAI,OAAO,CAAC,QAAQ,EAAE;oBACpB,MAAM,IAAI,YAAY,CAAC,UAAU,EAAE,6BAA6B,CAAC,CAAC;gBACpE,MAAM,QAAQ,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC;gBACjC,MAAM,OAAO,GAAG,yBAAyB,UAAU,EAAE,EAAE,CAAC;gBACxD,MAAM,KAAK,GAAG,QAAQ,CAAC,QAAQ,CAAC,CAAC;gBACjC,SAAS,CAAC,KAAK,EAAE,qDAAqD,CAAC,CAAC;gBACxE,MAAM,QAAQ,GAAG,UAAU,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;gBACzC,MAAM,IAAI,CAAC,CAAC,MAAM,EAAE,IAAI,EAAE,OAAO,EAAE,IAAI,EAAE,KAAK,EAAE,OAAO,CAAC,EAAE,EAAE,MAAM,EAAE,CAAC,CAAC;gBACtE,IAAI,CAAC;oBACH,MAAM,OAAO,CACX,OAAO,EACP;wBACE,UAAU,EAAE,KAAK;wBACjB,SAAS,EAAE,CAAC,KAAK,EAAE,GAAG,EAAE,IAAI,EAAE,OAAO,CAAC,QAAQ,CAAC,EAAE,IAAI,EAAE,KAAK,CAAC;qBAC9D,EACD;wBACE,UAAU,EAAE,KAAK;wBACjB,SAAS,EAAE;4BACT,MAAM;4BACN,GAAG;4BACH,gBAAgB;4BAChB,iBAAiB;4BACjB,IAAI;4BACJ,OAAO;yBACR;qBACF,EACD,IAAI,EACJ,MAAM,CACP,CAAC;oBACF,MAAM,IAAI,CACR;wBACE,MAAM;wBACN,IAAI;wBACJ,IAAI;wBACJ,IAAI;wBACJ,YAAY,KAAK,CAAC,KAAK,CAAC,OAAO,CAAC,WAAW,CAAC,CAAC,gBAAgB,KAAK,CAAC,KAAK,CAAC,IAAI,CAAC,OAAO,EAAE,KAAK,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,IAAI,KAAK,CAAC,WAAW,CAAC,EAAE;qBAChJ,EACD,EAAE,MAAM,EAAE,CACX,CAAC;gBACJ,CAAC;wBAAS,CAAC;oBACT,MAAM,IAAI,CAAC;wBACT,MAAM;wBACN,IAAI;wBACJ,IAAI;wBACJ,IAAI;wBACJ,kBAAkB,KAAK,CAAC,OAAO,CAAC,iBAAiB,KAAK,CAAC,OAAO,CAAC,EAAE;qBAClE,CAAC,CAAC;gBACL,CAAC;YACH,CAAC,CAAC,CAAC;QACL,CAAC;QACD,QAAQ,CAAC,MAAM,EAAE,WAAW,EAAE,OAAO,GAAG,EAAE;YACxC,OAAO,QAAQ,CAAC,OAAO,EAAE,KAAK,EAAE,MAAM,EAAE,EAAE;gBACxC,IAAI,OAAO,CAAC,QAAQ,EAAE;oBACpB,MAAM,IAAI,YAAY,CAAC,UAAU,EAAE,6BAA6B,CAAC,CAAC;gBACpE,MAAM,mBAAmB,CAAC,WAAW,CAAC,CAAC;gBACvC,MAAM,QAAQ,GAAG,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;gBACrD,MAAM,KAAK,GAAG,KAAK,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC;gBACvC,SAAS,CACP,KAAK,EACL,uDAAuD,CACxD,CAAC;gBACF,MAAM,OAAO,GAAG,MAAM,OAAO,CAAC,IAAI,CAAC,MAAM,EAAE,EAAE,mBAAmB,CAAC,CAAC,CAAC;gBACnE,IAAI,CAAC;oBACH,MAAM,OAAO,CACX,OAAO,EACP;wBACE,UAAU,EAAE,KAAK;wBACjB,SAAS,EAAE;4BACT,MAAM;4BACN,GAAG;4BACH,gBAAgB;4BAChB,iBAAiB;4BACjB,IAAI;4BACJ,OAAO;yBACR;qBACF,EACD;wBACE,UAAU,EAAE,KAAK;wBACjB,SAAS,EAAE;4BACT,KAAK;4BACL,GAAG;4BACH,IAAI;4BACJ,KAAK,CAAC,OAAO,CAAC,QAAQ,CAAC;4BACvB,IAAI;4BACJ,KAAK;yBACN;qBACF,EACD,KAAK,EACL,MAAM,CACP,CAAC;oBACF,MAAM,QAAQ,GAAG,MAAM,KAAK,CAAC,WAAW,CAAC,CAAC,KAAK,CAC7C,CAAC,KAA4B,EAAE,EAAE;wBAC/B,IAAI,KAAK,CAAC,IAAI,KAAK,QAAQ;4BAAE,OAAO,SAAS,CAAC;wBAC9C,MAAM,KAAK,CAAC;oBACd,CAAC,CACF,CAAC;oBACF,MAAM,MAAM,GACV,QAAQ,EAAE,WAAW,EAAE,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC;wBAC/C,CAAC,CAAC,IAAI,CAAC,WAAW,EAAE,KAAK,CAAC;wBAC1B,CAAC,CAAC,WAAW,CAAC;oBAClB,MAAM,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;oBAClD,MAAM,YAAY,CAAC,IAAI,CAAC,OAAO,EAAE,KAAK,CAAC,EAAE,MAAM,EAAE,MAAM,CAAC,CAAC;gBAC3D,CAAC;wBAAS,CAAC;oBACT,MAAM,uBAAuB,CAAC,OAAO,CAAC,CAAC;gBACzC,CAAC;YACH,CAAC,CAAC,CAAC;QACL,CAAC;KACF,CAAC;AACJ,CAAC","sourcesContent":["import { randomUUID } from \"node:crypto\";\nimport { lstat, mkdir, mkdtemp } from \"node:fs/promises\";\nimport { tmpdir } from \"node:os\";\nimport { basename, dirname, join, posix, resolve } from \"node:path\";\nimport type { SandboxLease } from \"../domain/sandbox.types.ts\";\nimport { invariant, OutpostError } from \"../domain/errors.ts\";\nimport { quote } from \"../infrastructure/process.ts\";\nimport {\n  copyTransfer,\n  removeTransferDirectory,\n  transferDestination,\n} from \"../infrastructure/transfer-copy.ts\";\nimport { transfer } from \"../infrastructure/transfer.ts\";\nimport { containerArchive } from \"./container-archive.ts\";\nimport type { ContainerRuntime } from \"./container.types.ts\";\n\nexport function containerFiles(\n  runtime: ContainerRuntime,\n  archive = containerArchive,\n): Pick<SandboxLease, \"upload\" | \"download\"> {\n  const { call, name } = runtime;\n  return {\n    upload(source, destination, options = {}) {\n      return transfer(options, async (signal) => {\n        if (runtime.isClosed())\n          throw new OutpostError(\"provider\", \"Container sandbox is closed\");\n        const absolute = resolve(source);\n        const scratch = `/tmp/outpost-transfer-${randomUUID()}`;\n        const entry = basename(absolute);\n        invariant(entry, \"Upload a directory's contents using a non-root path\");\n        const contents = /[\\\\/]\\.$/.test(source);\n        await call([\"exec\", name, \"mkdir\", \"-m\", \"700\", scratch], { signal });\n        try {\n          await archive(\n            runtime,\n            {\n              executable: \"tar\",\n              arguments: [\"-cf\", \"-\", \"-C\", dirname(absolute), \"--\", entry],\n            },\n            {\n              executable: \"tar\",\n              arguments: [\n                \"-xpf\",\n                \"-\",\n                \"--ignore-zeros\",\n                \"--no-same-owner\",\n                \"-C\",\n                scratch,\n              ],\n            },\n            true,\n            signal,\n          );\n          await call(\n            [\n              \"exec\",\n              name,\n              \"sh\",\n              \"-c\",\n              `mkdir -p ${quote(posix.dirname(destination))} && cp -a -- ${quote(posix.join(scratch, entry) + (contents ? \"/.\" : \"\"))} ${quote(destination)}`,\n            ],\n            { signal },\n          );\n        } finally {\n          await call([\n            \"exec\",\n            name,\n            \"sh\",\n            \"-c\",\n            `chmod -R u+rwX ${quote(scratch)} && rm -rf -- ${quote(scratch)}`,\n          ]);\n        }\n      });\n    },\n    download(source, destination, options = {}) {\n      return transfer(options, async (signal) => {\n        if (runtime.isClosed())\n          throw new OutpostError(\"provider\", \"Container sandbox is closed\");\n        await transferDestination(destination);\n        const absolute = posix.resolve(runtime.root, source);\n        const entry = posix.basename(absolute);\n        invariant(\n          entry,\n          \"Download a directory's contents using a non-root path\",\n        );\n        const scratch = await mkdtemp(join(tmpdir(), \"outpost-transfer-\"));\n        try {\n          await archive(\n            runtime,\n            {\n              executable: \"tar\",\n              arguments: [\n                \"-xpf\",\n                \"-\",\n                \"--ignore-zeros\",\n                \"--no-same-owner\",\n                \"-C\",\n                scratch,\n              ],\n            },\n            {\n              executable: \"tar\",\n              arguments: [\n                \"-cf\",\n                \"-\",\n                \"-C\",\n                posix.dirname(absolute),\n                \"--\",\n                entry,\n              ],\n            },\n            false,\n            signal,\n          );\n          const existing = await lstat(destination).catch(\n            (cause: NodeJS.ErrnoException) => {\n              if (cause.code === \"ENOENT\") return undefined;\n              throw cause;\n            },\n          );\n          const target =\n            existing?.isDirectory() && !source.endsWith(\"/.\")\n              ? join(destination, entry)\n              : destination;\n          await mkdir(dirname(target), { recursive: true });\n          await copyTransfer(join(scratch, entry), target, signal);\n        } finally {\n          await removeTransferDirectory(scratch);\n        }\n      });\n    },\n  };\n}\n"]}
+{"version":3,"file":"container-files.js","sourceRoot":"","sources":["../../src/providers/container-files.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACzC,OAAO,EAAE,KAAK,EAAE,OAAO,EAAE,MAAM,kBAAkB,CAAC;AAClD,OAAO,EAAE,MAAM,EAAE,MAAM,SAAS,CAAC;AACjC,OAAO,EAAE,QAAQ,EAAE,OAAO,EAAE,IAAI,EAAE,KAAK,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAEpE,OAAO,EAAE,SAAS,EAAE,YAAY,EAAE,MAAM,qBAAqB,CAAC;AAC9D,OAAO,EAAE,KAAK,EAAE,MAAM,8BAA8B,CAAC;AACrD,OAAO,EACL,YAAY,EACZ,uBAAuB,EACvB,mBAAmB,EACnB,cAAc,GACf,MAAM,oCAAoC,CAAC;AAC5C,OAAO,EAAE,QAAQ,EAAE,MAAM,+BAA+B,CAAC;AACzD,OAAO,EAAE,gBAAgB,EAAE,MAAM,yCAAyC,CAAC;AAC3E,OAAO,EAAE,gBAAgB,EAAE,MAAM,wBAAwB,CAAC;AAG1D,MAAM,UAAU,cAAc,CAC5B,OAAyB,EACzB,OAAO,GAAG,gBAAgB;IAE1B,MAAM,EAAE,IAAI,EAAE,IAAI,EAAE,GAAG,OAAO,CAAC;IAC/B,OAAO;QACL,MAAM,CAAC,MAAM,EAAE,WAAW,EAAE,OAAO,GAAG,EAAE;YACtC,OAAO,QAAQ,CAAC,OAAO,EAAE,KAAK,EAAE,MAAM,EAAE,EAAE;gBACxC,IAAI,OAAO,CAAC,QAAQ,EAAE;oBACpB,MAAM,IAAI,YAAY,CAAC,UAAU,EAAE,6BAA6B,CAAC,CAAC;gBACpE,MAAM,QAAQ,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC;gBACjC,MAAM,MAAM,GAAG,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC,IAAI,EAAE,WAAW,CAAC,CAAC;gBACxD,MAAM,OAAO,GAAG,yBAAyB,UAAU,EAAE,EAAE,CAAC;gBACxD,MAAM,KAAK,GAAG,QAAQ,CAAC,QAAQ,CAAC,CAAC;gBACjC,SAAS,CAAC,KAAK,EAAE,qDAAqD,CAAC,CAAC;gBACxE,MAAM,QAAQ,GAAG,UAAU,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;gBACzC,MAAM,IAAI,CAAC,CAAC,MAAM,EAAE,IAAI,EAAE,OAAO,EAAE,IAAI,EAAE,KAAK,EAAE,OAAO,CAAC,EAAE,EAAE,MAAM,EAAE,CAAC,CAAC;gBACtE,IAAI,CAAC;oBACH,MAAM,OAAO,CACX,OAAO,EACP;wBACE,UAAU,EAAE,KAAK;wBACjB,UAAU,EAAE,OAAO,CAAC,UAAU,IAAI,gBAAgB,CAAC,UAAU;wBAC7D,SAAS,EAAE,CAAC,KAAK,EAAE,GAAG,EAAE,IAAI,EAAE,OAAO,CAAC,QAAQ,CAAC,EAAE,IAAI,EAAE,KAAK,CAAC;qBAC9D,EACD;wBACE,UAAU,EAAE,KAAK;wBACjB,UAAU,EAAE,OAAO,CAAC,UAAU,IAAI,gBAAgB,CAAC,UAAU;wBAC7D,SAAS,EAAE;4BACT,MAAM;4BACN,GAAG;4BACH,gBAAgB;4BAChB,iBAAiB;4BACjB,IAAI;4BACJ,OAAO;yBACR;qBACF,EACD,IAAI,EACJ,MAAM,CACP,CAAC;oBACF,MAAM,IAAI,CACR;wBACE,MAAM;wBACN,IAAI;wBACJ,IAAI;wBACJ,IAAI;wBACJ,YAAY,KAAK,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,gBAAgB,KAAK,CAAC,KAAK,CAAC,IAAI,CAAC,OAAO,EAAE,KAAK,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,IAAI,KAAK,CAAC,MAAM,CAAC,EAAE;qBACtI,EACD,EAAE,MAAM,EAAE,CACX,CAAC;gBACJ,CAAC;wBAAS,CAAC;oBACT,MAAM,IAAI,CAAC;wBACT,MAAM;wBACN,IAAI;wBACJ,IAAI;wBACJ,IAAI;wBACJ,kBAAkB,KAAK,CAAC,OAAO,CAAC,iBAAiB,KAAK,CAAC,OAAO,CAAC,EAAE;qBAClE,CAAC,CAAC;gBACL,CAAC;YACH,CAAC,CAAC,CAAC;QACL,CAAC;QACD,QAAQ,CAAC,MAAM,EAAE,WAAW,EAAE,OAAO,GAAG,EAAE;YACxC,OAAO,QAAQ,CAAC,OAAO,EAAE,KAAK,EAAE,MAAM,EAAE,EAAE;gBACxC,IAAI,OAAO,CAAC,QAAQ,EAAE;oBACpB,MAAM,IAAI,YAAY,CAAC,UAAU,EAAE,6BAA6B,CAAC,CAAC;gBACpE,MAAM,mBAAmB,CAAC,WAAW,CAAC,CAAC;gBACvC,MAAM,QAAQ,GAAG,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;gBACrD,MAAM,KAAK,GAAG,KAAK,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC;gBACvC,SAAS,CACP,KAAK,EACL,uDAAuD,CACxD,CAAC;gBACF,MAAM,OAAO,GAAG,MAAM,OAAO,CAAC,IAAI,CAAC,MAAM,EAAE,EAAE,mBAAmB,CAAC,CAAC,CAAC;gBACnE,IAAI,CAAC;oBACH,MAAM,OAAO,CACX,OAAO,EACP;wBACE,UAAU,EAAE,KAAK;wBACjB,UAAU,EAAE,OAAO,CAAC,UAAU,IAAI,gBAAgB,CAAC,UAAU;wBAC7D,SAAS,EAAE;4BACT,MAAM;4BACN,GAAG;4BACH,gBAAgB;4BAChB,iBAAiB;4BACjB,IAAI;4BACJ,OAAO;yBACR;qBACF,EACD;wBACE,UAAU,EAAE,KAAK;wBACjB,UAAU,EAAE,OAAO,CAAC,UAAU,IAAI,gBAAgB,CAAC,UAAU;wBAC7D,SAAS,EAAE;4BACT,KAAK;4BACL,GAAG;4BACH,IAAI;4BACJ,KAAK,CAAC,OAAO,CAAC,QAAQ,CAAC;4BACvB,IAAI;4BACJ,KAAK;yBACN;qBACF,EACD,KAAK,EACL,MAAM,CACP,CAAC;oBACF,MAAM,MAAM,GAAG,MAAM,cAAc,CACjC,KAAK,EACL,WAAW,EACX,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC,CACtB,CAAC;oBACF,MAAM,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;oBAClD,MAAM,YAAY,CAAC,IAAI,CAAC,OAAO,EAAE,KAAK,CAAC,EAAE,MAAM,EAAE,MAAM,CAAC,CAAC;gBAC3D,CAAC;wBAAS,CAAC;oBACT,MAAM,uBAAuB,CAAC,OAAO,CAAC,CAAC;gBACzC,CAAC;YACH,CAAC,CAAC,CAAC;QACL,CAAC;KACF,CAAC;AACJ,CAAC","sourcesContent":["import { randomUUID } from \"node:crypto\";\nimport { mkdir, mkdtemp } from \"node:fs/promises\";\nimport { tmpdir } from \"node:os\";\nimport { basename, dirname, join, posix, resolve } from \"node:path\";\nimport type { SandboxLease } from \"../domain/sandbox.types.ts\";\nimport { invariant, OutpostError } from \"../domain/errors.ts\";\nimport { quote } from \"../infrastructure/process.ts\";\nimport {\n  copyTransfer,\n  removeTransferDirectory,\n  transferDestination,\n  transferTarget,\n} from \"../infrastructure/transfer-copy.ts\";\nimport { transfer } from \"../infrastructure/transfer.ts\";\nimport { transferDefaults } from \"../infrastructure/transfer.constants.ts\";\nimport { containerArchive } from \"./container-archive.ts\";\nimport type { ContainerRuntime } from \"./container.types.ts\";\n\nexport function containerFiles(\n  runtime: ContainerRuntime,\n  archive = containerArchive,\n): Pick<SandboxLease, \"upload\" | \"download\"> {\n  const { call, name } = runtime;\n  return {\n    upload(source, destination, options = {}) {\n      return transfer(options, async (signal) => {\n        if (runtime.isClosed())\n          throw new OutpostError(\"provider\", \"Container sandbox is closed\");\n        const absolute = resolve(source);\n        const target = posix.resolve(runtime.root, destination);\n        const scratch = `/tmp/outpost-transfer-${randomUUID()}`;\n        const entry = basename(absolute);\n        invariant(entry, \"Upload a directory's contents using a non-root path\");\n        const contents = /[\\\\/]\\.$/.test(source);\n        await call([\"exec\", name, \"mkdir\", \"-m\", \"700\", scratch], { signal });\n        try {\n          await archive(\n            runtime,\n            {\n              executable: \"tar\",\n              deadlineMs: options.deadlineMs ?? transferDefaults.deadlineMs,\n              arguments: [\"-cf\", \"-\", \"-C\", dirname(absolute), \"--\", entry],\n            },\n            {\n              executable: \"tar\",\n              deadlineMs: options.deadlineMs ?? transferDefaults.deadlineMs,\n              arguments: [\n                \"-xpf\",\n                \"-\",\n                \"--ignore-zeros\",\n                \"--no-same-owner\",\n                \"-C\",\n                scratch,\n              ],\n            },\n            true,\n            signal,\n          );\n          await call(\n            [\n              \"exec\",\n              name,\n              \"sh\",\n              \"-c\",\n              `mkdir -p ${quote(posix.dirname(target))} && cp -a -- ${quote(posix.join(scratch, entry) + (contents ? \"/.\" : \"\"))} ${quote(target)}`,\n            ],\n            { signal },\n          );\n        } finally {\n          await call([\n            \"exec\",\n            name,\n            \"sh\",\n            \"-c\",\n            `chmod -R u+rwX ${quote(scratch)} && rm -rf -- ${quote(scratch)}`,\n          ]);\n        }\n      });\n    },\n    download(source, destination, options = {}) {\n      return transfer(options, async (signal) => {\n        if (runtime.isClosed())\n          throw new OutpostError(\"provider\", \"Container sandbox is closed\");\n        await transferDestination(destination);\n        const absolute = posix.resolve(runtime.root, source);\n        const entry = posix.basename(absolute);\n        invariant(\n          entry,\n          \"Download a directory's contents using a non-root path\",\n        );\n        const scratch = await mkdtemp(join(tmpdir(), \"outpost-transfer-\"));\n        try {\n          await archive(\n            runtime,\n            {\n              executable: \"tar\",\n              deadlineMs: options.deadlineMs ?? transferDefaults.deadlineMs,\n              arguments: [\n                \"-xpf\",\n                \"-\",\n                \"--ignore-zeros\",\n                \"--no-same-owner\",\n                \"-C\",\n                scratch,\n              ],\n            },\n            {\n              executable: \"tar\",\n              deadlineMs: options.deadlineMs ?? transferDefaults.deadlineMs,\n              arguments: [\n                \"-cf\",\n                \"-\",\n                \"-C\",\n                posix.dirname(absolute),\n                \"--\",\n                entry,\n              ],\n            },\n            false,\n            signal,\n          );\n          const target = await transferTarget(\n            entry,\n            destination,\n            source.endsWith(\"/.\"),\n          );\n          await mkdir(dirname(target), { recursive: true });\n          await copyTransfer(join(scratch, entry), target, signal);\n        } finally {\n          await removeTransferDirectory(scratch);\n        }\n      });\n    },\n  };\n}\n"]}

package/dist/providers/container-mounts.js

@@ -70,6 +70,9 @@ export async function containerMounts(context, config, platform, root, home) {
                 fileParents.add(folder);
         }
         invariant(!source.includes(",") && !target.includes(","), "Mount paths cannot contain commas");
+        invariant(config.label === false ||
+            platform !== "linux" ||
+            (!source.includes(":") && !target.includes(":")), "SELinux-labelled mount paths cannot contain colons; use label: false for --mount syntax");
         if (config.label === false || platform !== "linux")
             volumes.push("--mount", `type=bind,source=${source},target=${target}${volume.readOnly ? ",readonly" : ""}`);
         else

package/dist/providers/container-mounts.js.map

@@ -1 +1 @@
-{"version":3,"file":"container-mounts.js","sourceRoot":"","sources":["../../src/providers/container-mounts.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,IAAI,EAAE,MAAM,kBAAkB,CAAC;AACxC,OAAO,EAAE,UAAU,EAAE,KAAK,EAAE,QAAQ,EAAE,MAAM,WAAW,CAAC;AACxD,OAAO,EAAE,SAAS,EAAE,YAAY,EAAE,MAAM,qBAAqB,CAAC;AAE9D,OAAO,EAAE,UAAU,EAAE,MAAM,4BAA4B,CAAC;AACxD,OAAO,EAAE,MAAM,EAAE,MAAM,4BAA4B,CAAC;AACpD,OAAO,EAAE,sBAAsB,EAAE,MAAM,qCAAqC,CAAC;AAC7E,OAAO,EAAE,qBAAqB,EAAE,MAAM,0BAA0B,CAAC;AAGjE,MAAM,CAAC,KAAK,UAAU,eAAe,CACnC,OAAuB,EACvB,MAAwB,EACxB,QAAyB,EACzB,IAAY,EACZ,IAAY;IAEZ,MAAM,GAAG,GAA2B;QAClC,GAAG,OAAO,CAAC,SAAS;QACpB,IAAI,EAAE,IAAI;QACV,GAAG,CAAC,OAAO,CAAC,iBAAiB,KAAK,SAAS;YACzC,CAAC,CAAC;gBACE,gBAAgB,EAAE,GAAG;gBACrB,gBAAgB,EAAE,gBAAgB;gBAClC,kBAAkB,EAAE,GAAG;aACxB;YACH,CAAC,CAAC,EAAE,CAAC;KACR,CAAC;IACF,MAAM,QAAQ,GACZ,MAAM,CAAC,cAAc,KAAK,UAAU;QAClC,CAAC,CAAC,EAAE;QACJ,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,OAAO,CAAC,SAAS,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC;IACpD,IAAI,MAAM,CAAC,cAAc,KAAK,UAAU,IAAI,OAAO,CAAC,cAAc,CAAC,MAAM,EAAE,CAAC;QAC1E,MAAM,MAAM,GAAG,OAAO,CAAC,cAAc,CAAC,EAAE,CAAC,CAAC,CAAC,CAAE,CAAC;QAC9C,MAAM,MAAM,GAAG,QAAQ,CAAC,MAAM,EAAE,OAAO,CAAC,cAAc,CAAC,CAAC,CAAE,CAAC,CAAC;QAC5D,MAAM,MAAM,GACV,CAAC,UAAU,CAAC,MAAM,CAAC;YACnB,MAAM,KAAK,IAAI;YACf,CAAC,MAAM,CAAC,UAAU,CAAC,MAAM,CAAC;YAC1B,CAAC,MAAM,CAAC,UAAU,CAAC,KAAK,CAAC,CAAC;QAC5B,QAAQ,CAAC,IAAI,CAAC;YACZ,MAAM,EAAE,MAAM;YACd,MAAM,EAAE,qBAAqB;SAC9B,CAAC,CAAC;QACH,IAAI,CAAC,MAAM;YACT,QAAQ,CAAC,IAAI,CAAC;gBACZ,MAAM,EAAE,OAAO,CAAC,cAAc,CAAC,CAAC,CAAE;gBAClC,MAAM,EAAE,uBAAuB;aAChC,CAAC,CAAC;QACL,GAAG,CAAC,OAAO,GAAG,MAAM;YAClB,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,qBAAqB,EAAE,MAAM,CAAC,UAAU,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC;YACjE,CAAC,CAAC,uBAAuB,CAAC;QAC5B,GAAG,CAAC,cAAc,GAAG,qBAAqB,CAAC;QAC3C,GAAG,CAAC,aAAa,GAAG,IAAI,CAAC;IAC3B,CAAC;IACD,MAAM,OAAO,GAAa,EAAE,CAAC;IAC7B,MAAM,WAAW,GAAG,IAAI,GAAG,EAAU,CAAC;IACtC,KAAK,MAAM,MAAM,IAAI,CAAC,GAAG,QAAQ,EAAE,GAAG,CAAC,MAAM,CAAC,OAAO,IAAI,EAAE,CAAC,CAAC,EAAE,CAAC;QAC9D,MAAM,MAAM,GAAG,UAAU,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,UAAU,CAAC,CAAC;QAC7D,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC;QACvD,IAAI,CAAC,IAAI;YACP,MAAM,IAAI,YAAY,CACpB,UAAU,EACV,gCAAgC,MAAM,EAAE,CACzC,CAAC;QACJ,MAAM,WAAW,GAAG,MAAM,CAAC,MAAM,CAAC,UAAU,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC;QACxD,MAAM,MAAM,GACV,WAAW,KAAK,GAAG;YACjB,CAAC,CAAC,IAAI;YACN,CAAC,CAAC,WAAW,CAAC,UAAU,CAAC,IAAI,CAAC;gBAC5B,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,IAAI,EAAE,WAAW,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;gBAC3C,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,IAAI,EAAE,WAAW,CAAC,CAAC;QACzC,IAAI,OAAO,CAAC,iBAAiB,KAAK,SAAS,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC,MAAM,CAAC,EAAE,CAAC;YAC1E,MAAM,eAAe,GAAG,MAAM,sBAAsB,CAAC,MAAM,CAAC,CAAC;YAC7D,MAAM,OAAO,GAAG,MAAM,sBAAsB,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC;YACjE,SAAS,CACP,CAAC,MAAM,CAAC,eAAe,EAAE,OAAO,CAAC,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,eAAe,CAAC,EACtE,6DAA6D,CAC9D,CAAC;YACF,SAAS,CACP,MAAM,KAAK,IAAI,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,GAAG,MAAM,GAAG,CAAC,EACjD,uDAAuD,CACxD,CAAC;QACJ,CAAC;QACD,IAAI,MAAM,CAAC,cAAc,KAAK,UAAU;YACtC,MAAM,qBAAqB,CAAC,OAAO,EAAE,MAAM,EAAE,MAAM,CAAC,CAAC;QACvD,IAAI,IAAI,CAAC,MAAM,EAAE,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC,MAAM,CAAC,EAAE,CAAC;YAChD,MAAM,MAAM,GAAG,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;YACrC,SAAS,CACP,MAAM,KAAK,IAAI,IAAI,MAAM,CAAC,UAAU,CAAC,IAAI,GAAG,GAAG,CAAC,EAChD,oGAAoG,CACrG,CAAC;YACF,KAAK,IAAI,MAAM,GAAG,MAAM,EAAE,MAAM,KAAK,IAAI,EAAE,MAAM,GAAG,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC;gBACvE,WAAW,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;QAC5B,CAAC;QACD,SAAS,CACP,CAAC,MAAM,CAAC,QAAQ,CAAC,GAAG,CAAC,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,GAAG,CAAC,EAC9C,mCAAmC,CACpC,CAAC;QACF,IAAI,MAAM,CAAC,KAAK,KAAK,KAAK,IAAI,QAAQ,KAAK,OAAO;YAChD,OAAO,CAAC,IAAI,CACV,SAAS,EACT,oBAAoB,MAAM,WAAW,MAAM,GAAG,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,EAAE,EAAE,CACnF,CAAC;;YAEF,OAAO,CAAC,IAAI,CACV,UAAU,EACV,GAAG,MAAM,IAAI,MAAM,IAAI,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,GAAG,MAAM,CAAC,KAAK,IAAI,GAAG,EAAE,CAC5E,CAAC;IACN,CAAC;IAED,OAAO,EAAE,GAAG,EAAE,OAAO,EAAE,WAAW,EAAE,CAAC;AACvC,CAAC","sourcesContent":["import { stat } from \"node:fs/promises\";\nimport { isAbsolute, posix, relative } from \"node:path\";\nimport { invariant, OutpostError } from \"../domain/errors.ts\";\nimport type { SandboxContext, Volume } from \"../domain/sandbox.types.ts\";\nimport { expandPath } from \"../infrastructure/files.ts\";\nimport { inside } from \"../infrastructure/files.ts\";\nimport { canonicalWorkspacePath } from \"../infrastructure/workspace-lock.ts\";\nimport { validateIsolatedMount } from \"./container-isolation.ts\";\nimport type { ContainerMounts, ContainerOptions } from \"./container.types.ts\";\n\nexport async function containerMounts(\n  context: SandboxContext,\n  config: ContainerOptions,\n  platform: NodeJS.Platform,\n  root: string,\n  home: string,\n): Promise<ContainerMounts> {\n  const env: Record<string, string> = {\n    ...context.variables,\n    HOME: home,\n    ...(context.workspaceIdentity === undefined\n      ? {\n          GIT_CONFIG_COUNT: \"1\",\n          GIT_CONFIG_KEY_0: \"safe.directory\",\n          GIT_CONFIG_VALUE_0: \"*\",\n        }\n      : {}),\n  };\n  const internal: Volume[] =\n    config.repositoryMode === \"isolated\"\n      ? []\n      : [{ source: context.directory, target: root }];\n  if (config.repositoryMode !== \"isolated\" && context.gitDirectories.length) {\n    const common = context.gitDirectories.at(-1)!;\n    const offset = relative(common, context.gitDirectories[0]!);\n    const nested =\n      !isAbsolute(offset) &&\n      offset !== \"..\" &&\n      !offset.startsWith(\"..\\\\\") &&\n      !offset.startsWith(\"../\");\n    internal.push({\n      source: common,\n      target: \"/outpost/git/common\",\n    });\n    if (!nested)\n      internal.push({\n        source: context.gitDirectories[0]!,\n        target: \"/outpost/git/worktree\",\n      });\n    env.GIT_DIR = nested\n      ? posix.join(\"/outpost/git/common\", offset.replaceAll(\"\\\\\", \"/\"))\n      : \"/outpost/git/worktree\";\n    env.GIT_COMMON_DIR = \"/outpost/git/common\";\n    env.GIT_WORK_TREE = root;\n  }\n  const volumes: string[] = [];\n  const fileParents = new Set<string>();\n  for (const volume of [...internal, ...(config.volumes ?? [])]) {\n    const source = expandPath(volume.source, context.repository);\n    const info = await stat(source).catch(() => undefined);\n    if (!info)\n      throw new OutpostError(\n        \"provider\",\n        `Mount source is unavailable: ${source}`,\n      );\n    const destination = volume.target.replaceAll(\"\\\\\", \"/\");\n    const target =\n      destination === \"~\"\n        ? home\n        : destination.startsWith(\"~/\")\n          ? posix.resolve(home, destination.slice(2))\n          : posix.resolve(root, destination);\n    if (context.workspaceIdentity !== undefined && !internal.includes(volume)) {\n      const canonicalSource = await canonicalWorkspacePath(source);\n      const control = await canonicalWorkspacePath(context.repository);\n      invariant(\n        !inside(canonicalSource, control) && !inside(control, canonicalSource),\n        \"File workspace mounts cannot expose runtime control storage\",\n      );\n      invariant(\n        target !== root && !root.startsWith(`${target}/`),\n        \"Custom mounts cannot replace the owned workspace root\",\n      );\n    }\n    if (config.repositoryMode === \"isolated\")\n      await validateIsolatedMount(context, source, target);\n    if (info.isFile() && !internal.includes(volume)) {\n      const parent = posix.dirname(target);\n      invariant(\n        parent === home || parent.startsWith(home + \"/\"),\n        \"File mounts must live inside the agent home; mount the containing directory for other destinations\",\n      );\n      for (let folder = parent; folder !== home; folder = posix.dirname(folder))\n        fileParents.add(folder);\n    }\n    invariant(\n      !source.includes(\",\") && !target.includes(\",\"),\n      \"Mount paths cannot contain commas\",\n    );\n    if (config.label === false || platform !== \"linux\")\n      volumes.push(\n        \"--mount\",\n        `type=bind,source=${source},target=${target}${volume.readOnly ? \",readonly\" : \"\"}`,\n      );\n    else\n      volumes.push(\n        \"--volume\",\n        `${source}:${target}:${volume.readOnly ? \"ro,\" : \"\"}${config.label ?? \"z\"}`,\n      );\n  }\n\n  return { env, volumes, fileParents };\n}\n"]}
+{"version":3,"file":"container-mounts.js","sourceRoot":"","sources":["../../src/providers/container-mounts.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,IAAI,EAAE,MAAM,kBAAkB,CAAC;AACxC,OAAO,EAAE,UAAU,EAAE,KAAK,EAAE,QAAQ,EAAE,MAAM,WAAW,CAAC;AACxD,OAAO,EAAE,SAAS,EAAE,YAAY,EAAE,MAAM,qBAAqB,CAAC;AAE9D,OAAO,EAAE,UAAU,EAAE,MAAM,4BAA4B,CAAC;AACxD,OAAO,EAAE,MAAM,EAAE,MAAM,4BAA4B,CAAC;AACpD,OAAO,EAAE,sBAAsB,EAAE,MAAM,qCAAqC,CAAC;AAC7E,OAAO,EAAE,qBAAqB,EAAE,MAAM,0BAA0B,CAAC;AAGjE,MAAM,CAAC,KAAK,UAAU,eAAe,CACnC,OAAuB,EACvB,MAAwB,EACxB,QAAyB,EACzB,IAAY,EACZ,IAAY;IAEZ,MAAM,GAAG,GAA2B;QAClC,GAAG,OAAO,CAAC,SAAS;QACpB,IAAI,EAAE,IAAI;QACV,GAAG,CAAC,OAAO,CAAC,iBAAiB,KAAK,SAAS;YACzC,CAAC,CAAC;gBACE,gBAAgB,EAAE,GAAG;gBACrB,gBAAgB,EAAE,gBAAgB;gBAClC,kBAAkB,EAAE,GAAG;aACxB;YACH,CAAC,CAAC,EAAE,CAAC;KACR,CAAC;IACF,MAAM,QAAQ,GACZ,MAAM,CAAC,cAAc,KAAK,UAAU;QAClC,CAAC,CAAC,EAAE;QACJ,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,OAAO,CAAC,SAAS,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC;IACpD,IAAI,MAAM,CAAC,cAAc,KAAK,UAAU,IAAI,OAAO,CAAC,cAAc,CAAC,MAAM,EAAE,CAAC;QAC1E,MAAM,MAAM,GAAG,OAAO,CAAC,cAAc,CAAC,EAAE,CAAC,CAAC,CAAC,CAAE,CAAC;QAC9C,MAAM,MAAM,GAAG,QAAQ,CAAC,MAAM,EAAE,OAAO,CAAC,cAAc,CAAC,CAAC,CAAE,CAAC,CAAC;QAC5D,MAAM,MAAM,GACV,CAAC,UAAU,CAAC,MAAM,CAAC;YACnB,MAAM,KAAK,IAAI;YACf,CAAC,MAAM,CAAC,UAAU,CAAC,MAAM,CAAC;YAC1B,CAAC,MAAM,CAAC,UAAU,CAAC,KAAK,CAAC,CAAC;QAC5B,QAAQ,CAAC,IAAI,CAAC;YACZ,MAAM,EAAE,MAAM;YACd,MAAM,EAAE,qBAAqB;SAC9B,CAAC,CAAC;QACH,IAAI,CAAC,MAAM;YACT,QAAQ,CAAC,IAAI,CAAC;gBACZ,MAAM,EAAE,OAAO,CAAC,cAAc,CAAC,CAAC,CAAE;gBAClC,MAAM,EAAE,uBAAuB;aAChC,CAAC,CAAC;QACL,GAAG,CAAC,OAAO,GAAG,MAAM;YAClB,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,qBAAqB,EAAE,MAAM,CAAC,UAAU,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC;YACjE,CAAC,CAAC,uBAAuB,CAAC;QAC5B,GAAG,CAAC,cAAc,GAAG,qBAAqB,CAAC;QAC3C,GAAG,CAAC,aAAa,GAAG,IAAI,CAAC;IAC3B,CAAC;IACD,MAAM,OAAO,GAAa,EAAE,CAAC;IAC7B,MAAM,WAAW,GAAG,IAAI,GAAG,EAAU,CAAC;IACtC,KAAK,MAAM,MAAM,IAAI,CAAC,GAAG,QAAQ,EAAE,GAAG,CAAC,MAAM,CAAC,OAAO,IAAI,EAAE,CAAC,CAAC,EAAE,CAAC;QAC9D,MAAM,MAAM,GAAG,UAAU,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,UAAU,CAAC,CAAC;QAC7D,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC;QACvD,IAAI,CAAC,IAAI;YACP,MAAM,IAAI,YAAY,CACpB,UAAU,EACV,gCAAgC,MAAM,EAAE,CACzC,CAAC;QACJ,MAAM,WAAW,GAAG,MAAM,CAAC,MAAM,CAAC,UAAU,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC;QACxD,MAAM,MAAM,GACV,WAAW,KAAK,GAAG;YACjB,CAAC,CAAC,IAAI;YACN,CAAC,CAAC,WAAW,CAAC,UAAU,CAAC,IAAI,CAAC;gBAC5B,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,IAAI,EAAE,WAAW,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;gBAC3C,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,IAAI,EAAE,WAAW,CAAC,CAAC;QACzC,IAAI,OAAO,CAAC,iBAAiB,KAAK,SAAS,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC,MAAM,CAAC,EAAE,CAAC;YAC1E,MAAM,eAAe,GAAG,MAAM,sBAAsB,CAAC,MAAM,CAAC,CAAC;YAC7D,MAAM,OAAO,GAAG,MAAM,sBAAsB,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC;YACjE,SAAS,CACP,CAAC,MAAM,CAAC,eAAe,EAAE,OAAO,CAAC,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,eAAe,CAAC,EACtE,6DAA6D,CAC9D,CAAC;YACF,SAAS,CACP,MAAM,KAAK,IAAI,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,GAAG,MAAM,GAAG,CAAC,EACjD,uDAAuD,CACxD,CAAC;QACJ,CAAC;QACD,IAAI,MAAM,CAAC,cAAc,KAAK,UAAU;YACtC,MAAM,qBAAqB,CAAC,OAAO,EAAE,MAAM,EAAE,MAAM,CAAC,CAAC;QACvD,IAAI,IAAI,CAAC,MAAM,EAAE,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC,MAAM,CAAC,EAAE,CAAC;YAChD,MAAM,MAAM,GAAG,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;YACrC,SAAS,CACP,MAAM,KAAK,IAAI,IAAI,MAAM,CAAC,UAAU,CAAC,IAAI,GAAG,GAAG,CAAC,EAChD,oGAAoG,CACrG,CAAC;YACF,KAAK,IAAI,MAAM,GAAG,MAAM,EAAE,MAAM,KAAK,IAAI,EAAE,MAAM,GAAG,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC;gBACvE,WAAW,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;QAC5B,CAAC;QACD,SAAS,CACP,CAAC,MAAM,CAAC,QAAQ,CAAC,GAAG,CAAC,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,GAAG,CAAC,EAC9C,mCAAmC,CACpC,CAAC;QACF,SAAS,CACP,MAAM,CAAC,KAAK,KAAK,KAAK;YACpB,QAAQ,KAAK,OAAO;YACpB,CAAC,CAAC,MAAM,CAAC,QAAQ,CAAC,GAAG,CAAC,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,EAClD,yFAAyF,CAC1F,CAAC;QACF,IAAI,MAAM,CAAC,KAAK,KAAK,KAAK,IAAI,QAAQ,KAAK,OAAO;YAChD,OAAO,CAAC,IAAI,CACV,SAAS,EACT,oBAAoB,MAAM,WAAW,MAAM,GAAG,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,EAAE,EAAE,CACnF,CAAC;;YAEF,OAAO,CAAC,IAAI,CACV,UAAU,EACV,GAAG,MAAM,IAAI,MAAM,IAAI,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,GAAG,MAAM,CAAC,KAAK,IAAI,GAAG,EAAE,CAC5E,CAAC;IACN,CAAC;IAED,OAAO,EAAE,GAAG,EAAE,OAAO,EAAE,WAAW,EAAE,CAAC;AACvC,CAAC","sourcesContent":["import { stat } from \"node:fs/promises\";\nimport { isAbsolute, posix, relative } from \"node:path\";\nimport { invariant, OutpostError } from \"../domain/errors.ts\";\nimport type { SandboxContext, Volume } from \"../domain/sandbox.types.ts\";\nimport { expandPath } from \"../infrastructure/files.ts\";\nimport { inside } from \"../infrastructure/files.ts\";\nimport { canonicalWorkspacePath } from \"../infrastructure/workspace-lock.ts\";\nimport { validateIsolatedMount } from \"./container-isolation.ts\";\nimport type { ContainerMounts, ContainerOptions } from \"./container.types.ts\";\n\nexport async function containerMounts(\n  context: SandboxContext,\n  config: ContainerOptions,\n  platform: NodeJS.Platform,\n  root: string,\n  home: string,\n): Promise<ContainerMounts> {\n  const env: Record<string, string> = {\n    ...context.variables,\n    HOME: home,\n    ...(context.workspaceIdentity === undefined\n      ? {\n          GIT_CONFIG_COUNT: \"1\",\n          GIT_CONFIG_KEY_0: \"safe.directory\",\n          GIT_CONFIG_VALUE_0: \"*\",\n        }\n      : {}),\n  };\n  const internal: Volume[] =\n    config.repositoryMode === \"isolated\"\n      ? []\n      : [{ source: context.directory, target: root }];\n  if (config.repositoryMode !== \"isolated\" && context.gitDirectories.length) {\n    const common = context.gitDirectories.at(-1)!;\n    const offset = relative(common, context.gitDirectories[0]!);\n    const nested =\n      !isAbsolute(offset) &&\n      offset !== \"..\" &&\n      !offset.startsWith(\"..\\\\\") &&\n      !offset.startsWith(\"../\");\n    internal.push({\n      source: common,\n      target: \"/outpost/git/common\",\n    });\n    if (!nested)\n      internal.push({\n        source: context.gitDirectories[0]!,\n        target: \"/outpost/git/worktree\",\n      });\n    env.GIT_DIR = nested\n      ? posix.join(\"/outpost/git/common\", offset.replaceAll(\"\\\\\", \"/\"))\n      : \"/outpost/git/worktree\";\n    env.GIT_COMMON_DIR = \"/outpost/git/common\";\n    env.GIT_WORK_TREE = root;\n  }\n  const volumes: string[] = [];\n  const fileParents = new Set<string>();\n  for (const volume of [...internal, ...(config.volumes ?? [])]) {\n    const source = expandPath(volume.source, context.repository);\n    const info = await stat(source).catch(() => undefined);\n    if (!info)\n      throw new OutpostError(\n        \"provider\",\n        `Mount source is unavailable: ${source}`,\n      );\n    const destination = volume.target.replaceAll(\"\\\\\", \"/\");\n    const target =\n      destination === \"~\"\n        ? home\n        : destination.startsWith(\"~/\")\n          ? posix.resolve(home, destination.slice(2))\n          : posix.resolve(root, destination);\n    if (context.workspaceIdentity !== undefined && !internal.includes(volume)) {\n      const canonicalSource = await canonicalWorkspacePath(source);\n      const control = await canonicalWorkspacePath(context.repository);\n      invariant(\n        !inside(canonicalSource, control) && !inside(control, canonicalSource),\n        \"File workspace mounts cannot expose runtime control storage\",\n      );\n      invariant(\n        target !== root && !root.startsWith(`${target}/`),\n        \"Custom mounts cannot replace the owned workspace root\",\n      );\n    }\n    if (config.repositoryMode === \"isolated\")\n      await validateIsolatedMount(context, source, target);\n    if (info.isFile() && !internal.includes(volume)) {\n      const parent = posix.dirname(target);\n      invariant(\n        parent === home || parent.startsWith(home + \"/\"),\n        \"File mounts must live inside the agent home; mount the containing directory for other destinations\",\n      );\n      for (let folder = parent; folder !== home; folder = posix.dirname(folder))\n        fileParents.add(folder);\n    }\n    invariant(\n      !source.includes(\",\") && !target.includes(\",\"),\n      \"Mount paths cannot contain commas\",\n    );\n    invariant(\n      config.label === false ||\n        platform !== \"linux\" ||\n        (!source.includes(\":\") && !target.includes(\":\")),\n      \"SELinux-labelled mount paths cannot contain colons; use label: false for --mount syntax\",\n    );\n    if (config.label === false || platform !== \"linux\")\n      volumes.push(\n        \"--mount\",\n        `type=bind,source=${source},target=${target}${volume.readOnly ? \",readonly\" : \"\"}`,\n      );\n    else\n      volumes.push(\n        \"--volume\",\n        `${source}:${target}:${volume.readOnly ? \"ro,\" : \"\"}${config.label ?? \"z\"}`,\n      );\n  }\n\n  return { env, volumes, fileParents };\n}\n"]}

package/dist/providers/container-network.js

@@ -1,5 +1,6 @@
 import { validateEgress } from "../domain/egress.js";
 import { invariant } from "../domain/errors.js";
+import { egressCidr } from "./egress/address.js";
 export function containerNetworks(options) {
     const policy = validateEgress(options.egress);
     const networks = typeof options.networks === "string"
@@ -7,7 +8,21 @@ export function containerNetworks(options) {
         : [...(options.networks ?? [])];
     if (!policy)
         return networks;
-    invariant(policy.mode === "deny-all", "Docker/Podman cannot enforce egress allowlists; use Vercel or an externally managed firewall");
+    if (policy.mode === "allowlist") {
+        for (const cidr of [
+            ...(policy.allowCidrs ?? []),
+            ...(policy.denyCidrs ?? []),
+        ]) {
+            try {
+                egressCidr(cidr);
+            }
+            catch {
+                invariant(false, "IPv4-mapped egress CIDRs require a prefix of at least 96");
+            }
+        }
+        invariant(networks.length === 0, "egress allowlist conflicts with configured networks");
+        return [];
+    }
     invariant(networks.every((network) => network === "none"), "egress deny-all conflicts with configured networks");
     return ["none"];
 }

package/dist/providers/container-network.js.map

@@ -1 +1 @@
-{"version":3,"file":"container-network.js","sourceRoot":"","sources":["../../src/providers/container-network.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,cAAc,EAAE,MAAM,qBAAqB,CAAC;AACrD,OAAO,EAAE,SAAS,EAAE,MAAM,qBAAqB,CAAC;AAGhD,MAAM,UAAU,iBAAiB,CAC/B,OAAyB;IAEzB,MAAM,MAAM,GAAG,cAAc,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;IAC9C,MAAM,QAAQ,GACZ,OAAO,OAAO,CAAC,QAAQ,KAAK,QAAQ;QAClC,CAAC,CAAC,CAAC,OAAO,CAAC,QAAQ,CAAC;QACpB,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,QAAQ,IAAI,EAAE,CAAC,CAAC,CAAC;IACpC,IAAI,CAAC,MAAM;QAAE,OAAO,QAAQ,CAAC;IAC7B,SAAS,CACP,MAAM,CAAC,IAAI,KAAK,UAAU,EAC1B,8FAA8F,CAC/F,CAAC;IACF,SAAS,CACP,QAAQ,CAAC,KAAK,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,OAAO,KAAK,MAAM,CAAC,EAC/C,oDAAoD,CACrD,CAAC;IACF,OAAO,CAAC,MAAM,CAAC,CAAC;AAClB,CAAC","sourcesContent":["import { validateEgress } from \"../domain/egress.ts\";\nimport { invariant } from \"../domain/errors.ts\";\nimport type { ContainerOptions } from \"./container.types.ts\";\n\nexport function containerNetworks(\n  options: ContainerOptions,\n): readonly string[] {\n  const policy = validateEgress(options.egress);\n  const networks =\n    typeof options.networks === \"string\"\n      ? [options.networks]\n      : [...(options.networks ?? [])];\n  if (!policy) return networks;\n  invariant(\n    policy.mode === \"deny-all\",\n    \"Docker/Podman cannot enforce egress allowlists; use Vercel or an externally managed firewall\",\n  );\n  invariant(\n    networks.every((network) => network === \"none\"),\n    \"egress deny-all conflicts with configured networks\",\n  );\n  return [\"none\"];\n}\n"]}
+{"version":3,"file":"container-network.js","sourceRoot":"","sources":["../../src/providers/container-network.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,cAAc,EAAE,MAAM,qBAAqB,CAAC;AACrD,OAAO,EAAE,SAAS,EAAE,MAAM,qBAAqB,CAAC;AAEhD,OAAO,EAAE,UAAU,EAAE,MAAM,qBAAqB,CAAC;AAEjD,MAAM,UAAU,iBAAiB,CAC/B,OAAyB;IAEzB,MAAM,MAAM,GAAG,cAAc,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;IAC9C,MAAM,QAAQ,GACZ,OAAO,OAAO,CAAC,QAAQ,KAAK,QAAQ;QAClC,CAAC,CAAC,CAAC,OAAO,CAAC,QAAQ,CAAC;QACpB,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,QAAQ,IAAI,EAAE,CAAC,CAAC,CAAC;IACpC,IAAI,CAAC,MAAM;QAAE,OAAO,QAAQ,CAAC;IAC7B,IAAI,MAAM,CAAC,IAAI,KAAK,WAAW,EAAE,CAAC;QAChC,KAAK,MAAM,IAAI,IAAI;YACjB,GAAG,CAAC,MAAM,CAAC,UAAU,IAAI,EAAE,CAAC;YAC5B,GAAG,CAAC,MAAM,CAAC,SAAS,IAAI,EAAE,CAAC;SAC5B,EAAE,CAAC;YACF,IAAI,CAAC;gBACH,UAAU,CAAC,IAAI,CAAC,CAAC;YACnB,CAAC;YAAC,MAAM,CAAC;gBACP,SAAS,CACP,KAAK,EACL,0DAA0D,CAC3D,CAAC;YACJ,CAAC;QACH,CAAC;QACD,SAAS,CACP,QAAQ,CAAC,MAAM,KAAK,CAAC,EACrB,qDAAqD,CACtD,CAAC;QACF,OAAO,EAAE,CAAC;IACZ,CAAC;IACD,SAAS,CACP,QAAQ,CAAC,KAAK,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,OAAO,KAAK,MAAM,CAAC,EAC/C,oDAAoD,CACrD,CAAC;IACF,OAAO,CAAC,MAAM,CAAC,CAAC;AAClB,CAAC","sourcesContent":["import { validateEgress } from \"../domain/egress.ts\";\nimport { invariant } from \"../domain/errors.ts\";\nimport type { ContainerOptions } from \"./container.types.ts\";\nimport { egressCidr } from \"./egress/address.ts\";\n\nexport function containerNetworks(\n  options: ContainerOptions,\n): readonly string[] {\n  const policy = validateEgress(options.egress);\n  const networks =\n    typeof options.networks === \"string\"\n      ? [options.networks]\n      : [...(options.networks ?? [])];\n  if (!policy) return networks;\n  if (policy.mode === \"allowlist\") {\n    for (const cidr of [\n      ...(policy.allowCidrs ?? []),\n      ...(policy.denyCidrs ?? []),\n    ]) {\n      try {\n        egressCidr(cidr);\n      } catch {\n        invariant(\n          false,\n          \"IPv4-mapped egress CIDRs require a prefix of at least 96\",\n        );\n      }\n    }\n    invariant(\n      networks.length === 0,\n      \"egress allowlist conflicts with configured networks\",\n    );\n    return [];\n  }\n  invariant(\n    networks.every((network) => network === \"none\"),\n    \"egress deny-all conflicts with configured networks\",\n  );\n  return [\"none\"];\n}\n"]}

package/dist/providers/container-plan.js

@@ -1,3 +1,4 @@
+import { containerUserNamespace } from "./container-egress.js";
 export function containerPlan({ config, engine, user, root, name, image, volumes, fileParents, }) {
     const networks = typeof config.networks === "string"
         ? [config.networks]
@@ -9,19 +10,15 @@ export function containerPlan({ config, engine, user, root, name, image, volumes
         "--init",
         "--user",
         `${user.uid}:${user.gid}`,
-        ...(engine === "podman" &&
-            config.userns !== false &&
-            (process.getuid?.() !== 0 || config.userns === "keep-id")
-            ? [
-                "--userns",
-                config.user ? `keep-id:uid=${user.uid},gid=${user.gid}` : "keep-id",
-            ]
-            : []),
+        ...(engine === "podman" && config.egress?.mode === "allowlist"
+            ? ["--userns", `container:${name}-egress`]
+            : containerUserNamespace(engine, config, user)),
         "--workdir",
         config.repositoryMode === "isolated" ? "/" : root,
         "--cap-drop",
         "ALL",
-        ...(fileParents.size ||
+        ...(engine === "podman" ||
+            fileParents.size ||
             config.caches?.length ||
             config.repositoryMode === "isolated"
             ? ["--cap-add", "CHOWN"]
@@ -30,7 +27,7 @@ export function containerPlan({ config, engine, user, root, name, image, volumes
         "no-new-privileges",
         "--tmpfs",
         engine === "podman"
-            ? "/home/agent:rw,mode=1777"
+            ? "/home/agent:rw,mode=0700"
             : `/home/agent:rw,uid=${fileParents.size ? 0 : user.uid},gid=${fileParents.size ? 0 : user.gid},mode=0700`,
         ...volumes,
         ...networks.flatMap((network) => ["--network", network]),

package/dist/providers/container-plan.js.map

@@ -1 +1 @@
-{"version":3,"file":"container-plan.js","sourceRoot":"","sources":["../../src/providers/container-plan.ts"],"names":[],"mappings":"AAEA,MAAM,UAAU,aAAa,CAAC,EAC5B,MAAM,EACN,MAAM,EACN,IAAI,EACJ,IAAI,EACJ,IAAI,EACJ,KAAK,EACL,OAAO,EACP,WAAW,GACU;IACrB,MAAM,QAAQ,GACZ,OAAO,MAAM,CAAC,QAAQ,KAAK,QAAQ;QACjC,CAAC,CAAC,CAAC,MAAM,CAAC,QAAQ,CAAC;QACnB,CAAC,CAAC,CAAC,MAAM,CAAC,QAAQ,IAAI,EAAE,CAAC,CAAC;IAC9B,MAAM,IAAI,GAAG;QACX,QAAQ;QACR,QAAQ;QACR,IAAI;QACJ,QAAQ;QACR,QAAQ;QACR,GAAG,IAAI,CAAC,GAAG,IAAI,IAAI,CAAC,GAAG,EAAE;QACzB,GAAG,CAAC,MAAM,KAAK,QAAQ;YACvB,MAAM,CAAC,MAAM,KAAK,KAAK;YACvB,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,MAAM,KAAK,SAAS,CAAC;YACvD,CAAC,CAAC;gBACE,UAAU;gBACV,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,eAAe,IAAI,CAAC,GAAG,QAAQ,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC,SAAS;aACpE;YACH,CAAC,CAAC,EAAE,CAAC;QACP,WAAW;QACX,MAAM,CAAC,cAAc,KAAK,UAAU,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI;QACjD,YAAY;QACZ,KAAK;QACL,GAAG,CAAC,WAAW,CAAC,IAAI;YACpB,MAAM,CAAC,MAAM,EAAE,MAAM;YACrB,MAAM,CAAC,cAAc,KAAK,UAAU;YAClC,CAAC,CAAC,CAAC,WAAW,EAAE,OAAO,CAAC;YACxB,CAAC,CAAC,EAAE,CAAC;QACP,gBAAgB;QAChB,mBAAmB;QACnB,SAAS;QACT,MAAM,KAAK,QAAQ;YACjB,CAAC,CAAC,0BAA0B;YAC5B,CAAC,CAAC,sBAAsB,WAAW,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,QAAQ,WAAW,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,YAAY;QAC5G,GAAG,OAAO;QACV,GAAG,QAAQ,CAAC,OAAO,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC,WAAW,EAAE,OAAO,CAAC,CAAC;QACxD,GAAG,CAAC,MAAM,CAAC,MAAM,IAAI,EAAE,CAAC,CAAC,OAAO,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC,aAAa,EAAE,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC;QAC3E,GAAG,CAAC,MAAM,CAAC,OAAO,IAAI,EAAE,CAAC,CAAC,OAAO,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,UAAU,EAAE,MAAM,CAAC,CAAC;QACnE,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;QACvD,GAAG,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,UAAU,EAAE,GAAG,MAAM,CAAC,QAAQ,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;QAC/D,cAAc;QACd,OAAO;QACP,KAAK;QACL,UAAU;KACX,CAAC;IAEF,OAAO,IAAI,CAAC;AACd,CAAC","sourcesContent":["import type { ContainerPlanOptions } from \"./container.types.ts\";\n\nexport function containerPlan({\n  config,\n  engine,\n  user,\n  root,\n  name,\n  image,\n  volumes,\n  fileParents,\n}: ContainerPlanOptions): string[] {\n  const networks =\n    typeof config.networks === \"string\"\n      ? [config.networks]\n      : (config.networks ?? []);\n  const args = [\n    \"create\",\n    \"--name\",\n    name,\n    \"--init\",\n    \"--user\",\n    `${user.uid}:${user.gid}`,\n    ...(engine === \"podman\" &&\n    config.userns !== false &&\n    (process.getuid?.() !== 0 || config.userns === \"keep-id\")\n      ? [\n          \"--userns\",\n          config.user ? `keep-id:uid=${user.uid},gid=${user.gid}` : \"keep-id\",\n        ]\n      : []),\n    \"--workdir\",\n    config.repositoryMode === \"isolated\" ? \"/\" : root,\n    \"--cap-drop\",\n    \"ALL\",\n    ...(fileParents.size ||\n    config.caches?.length ||\n    config.repositoryMode === \"isolated\"\n      ? [\"--cap-add\", \"CHOWN\"]\n      : []),\n    \"--security-opt\",\n    \"no-new-privileges\",\n    \"--tmpfs\",\n    engine === \"podman\"\n      ? \"/home/agent:rw,mode=1777\"\n      : `/home/agent:rw,uid=${fileParents.size ? 0 : user.uid},gid=${fileParents.size ? 0 : user.gid},mode=0700`,\n    ...volumes,\n    ...networks.flatMap((network) => [\"--network\", network]),\n    ...(config.groups ?? []).flatMap((group) => [\"--group-add\", String(group)]),\n    ...(config.devices ?? []).flatMap((device) => [\"--device\", device]),\n    ...(config.cpus ? [\"--cpus\", String(config.cpus)] : []),\n    ...(config.memoryMb ? [\"--memory\", `${config.memoryMb}m`] : []),\n    \"--entrypoint\",\n    \"sleep\",\n    image,\n    \"infinity\",\n  ];\n\n  return args;\n}\n"]}
+{"version":3,"file":"container-plan.js","sourceRoot":"","sources":["../../src/providers/container-plan.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,sBAAsB,EAAE,MAAM,uBAAuB,CAAC;AAE/D,MAAM,UAAU,aAAa,CAAC,EAC5B,MAAM,EACN,MAAM,EACN,IAAI,EACJ,IAAI,EACJ,IAAI,EACJ,KAAK,EACL,OAAO,EACP,WAAW,GACU;IACrB,MAAM,QAAQ,GACZ,OAAO,MAAM,CAAC,QAAQ,KAAK,QAAQ;QACjC,CAAC,CAAC,CAAC,MAAM,CAAC,QAAQ,CAAC;QACnB,CAAC,CAAC,CAAC,MAAM,CAAC,QAAQ,IAAI,EAAE,CAAC,CAAC;IAC9B,MAAM,IAAI,GAAG;QACX,QAAQ;QACR,QAAQ;QACR,IAAI;QACJ,QAAQ;QACR,QAAQ;QACR,GAAG,IAAI,CAAC,GAAG,IAAI,IAAI,CAAC,GAAG,EAAE;QACzB,GAAG,CAAC,MAAM,KAAK,QAAQ,IAAI,MAAM,CAAC,MAAM,EAAE,IAAI,KAAK,WAAW;YAC5D,CAAC,CAAC,CAAC,UAAU,EAAE,aAAa,IAAI,SAAS,CAAC;YAC1C,CAAC,CAAC,sBAAsB,CAAC,MAAM,EAAE,MAAM,EAAE,IAAI,CAAC,CAAC;QACjD,WAAW;QACX,MAAM,CAAC,cAAc,KAAK,UAAU,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI;QACjD,YAAY;QACZ,KAAK;QACL,GAAG,CAAC,MAAM,KAAK,QAAQ;YACvB,WAAW,CAAC,IAAI;YAChB,MAAM,CAAC,MAAM,EAAE,MAAM;YACrB,MAAM,CAAC,cAAc,KAAK,UAAU;YAClC,CAAC,CAAC,CAAC,WAAW,EAAE,OAAO,CAAC;YACxB,CAAC,CAAC,EAAE,CAAC;QACP,gBAAgB;QAChB,mBAAmB;QACnB,SAAS;QACT,MAAM,KAAK,QAAQ;YACjB,CAAC,CAAC,0BAA0B;YAC5B,CAAC,CAAC,sBAAsB,WAAW,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,QAAQ,WAAW,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,YAAY;QAC5G,GAAG,OAAO;QACV,GAAG,QAAQ,CAAC,OAAO,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC,WAAW,EAAE,OAAO,CAAC,CAAC;QACxD,GAAG,CAAC,MAAM,CAAC,MAAM,IAAI,EAAE,CAAC,CAAC,OAAO,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC,aAAa,EAAE,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC;QAC3E,GAAG,CAAC,MAAM,CAAC,OAAO,IAAI,EAAE,CAAC,CAAC,OAAO,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,UAAU,EAAE,MAAM,CAAC,CAAC;QACnE,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;QACvD,GAAG,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,UAAU,EAAE,GAAG,MAAM,CAAC,QAAQ,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;QAC/D,cAAc;QACd,OAAO;QACP,KAAK;QACL,UAAU;KACX,CAAC;IAEF,OAAO,IAAI,CAAC;AACd,CAAC","sourcesContent":["import type { ContainerPlanOptions } from \"./container.types.ts\";\nimport { containerUserNamespace } from \"./container-egress.ts\";\n\nexport function containerPlan({\n  config,\n  engine,\n  user,\n  root,\n  name,\n  image,\n  volumes,\n  fileParents,\n}: ContainerPlanOptions): string[] {\n  const networks =\n    typeof config.networks === \"string\"\n      ? [config.networks]\n      : (config.networks ?? []);\n  const args = [\n    \"create\",\n    \"--name\",\n    name,\n    \"--init\",\n    \"--user\",\n    `${user.uid}:${user.gid}`,\n    ...(engine === \"podman\" && config.egress?.mode === \"allowlist\"\n      ? [\"--userns\", `container:${name}-egress`]\n      : containerUserNamespace(engine, config, user)),\n    \"--workdir\",\n    config.repositoryMode === \"isolated\" ? \"/\" : root,\n    \"--cap-drop\",\n    \"ALL\",\n    ...(engine === \"podman\" ||\n    fileParents.size ||\n    config.caches?.length ||\n    config.repositoryMode === \"isolated\"\n      ? [\"--cap-add\", \"CHOWN\"]\n      : []),\n    \"--security-opt\",\n    \"no-new-privileges\",\n    \"--tmpfs\",\n    engine === \"podman\"\n      ? \"/home/agent:rw,mode=0700\"\n      : `/home/agent:rw,uid=${fileParents.size ? 0 : user.uid},gid=${fileParents.size ? 0 : user.gid},mode=0700`,\n    ...volumes,\n    ...networks.flatMap((network) => [\"--network\", network]),\n    ...(config.groups ?? []).flatMap((group) => [\"--group-add\", String(group)]),\n    ...(config.devices ?? []).flatMap((device) => [\"--device\", device]),\n    ...(config.cpus ? [\"--cpus\", String(config.cpus)] : []),\n    ...(config.memoryMb ? [\"--memory\", `${config.memoryMb}m`] : []),\n    \"--entrypoint\",\n    \"sleep\",\n    image,\n    \"infinity\",\n  ];\n\n  return args;\n}\n"]}

package/dist/providers/container-recovery.js

@@ -14,7 +14,7 @@ export async function recoverContainer(engine, executor, resourceId, options = {
             "ls",
             "--all",
             "--filter",
-            `name=^${resourceId}$`,
+            `name=^${resourceId}(-egress)?$`,
             "--format",
             "{{.Names}}",
         ],
@@ -22,7 +22,12 @@ export async function recoverContainer(engine, executor, resourceId, options = {
     }, executor);
     if (!result.stdout.trim())
         return;
-    invariant(result.stdout.trim() === resourceId, "Recoverable container identity mismatch");
-    await requireSuccess({ executable: engine, arguments: ["rm", "--force", resourceId], ...limits }, executor);
+    const names = result.stdout.trim().split(/\r?\n/);
+    invariant(names.every((name) => name === resourceId || name === `${resourceId}-egress`), "Recoverable container identity mismatch");
+    for (const name of [resourceId, `${resourceId}-egress`]) {
+        if (!names.includes(name))
+            continue;
+        await requireSuccess({ executable: engine, arguments: ["rm", "--force", name], ...limits }, executor);
+    }
 }
 //# sourceMappingURL=container-recovery.js.map

package/dist/providers/container-recovery.js.map

@@ -1 +1 @@
-{"version":3,"file":"container-recovery.js","sourceRoot":"","sources":["../../src/providers/container-recovery.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,SAAS,EAAE,MAAM,qBAAqB,CAAC;AAEhD,OAAO,EAAE,cAAc,EAAE,MAAM,8BAA8B,CAAC;AAE9D,OAAO,EAAE,iBAAiB,EAAE,MAAM,0BAA0B,CAAC;AAG7D,MAAM,CAAC,KAAK,UAAU,gBAAgB,CACpC,MAAuB,EACvB,QAAkB,EAClB,UAAkB,EAClB,UAA2B,EAAE;IAE7B,SAAS,CACP,yBAAyB,CAAC,IAAI,CAAC,UAAU,CAAC,EAC1C,wCAAwC,CACzC,CAAC;IACF,MAAM,MAAM,GAAG;QACb,UAAU,EAAE,OAAO,CAAC,UAAU,IAAI,iBAAiB,CAAC,SAAS;QAC7D,GAAG,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,OAAO,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KACtD,CAAC;IACF,MAAM,MAAM,GAAG,MAAM,cAAc,CACjC;QACE,UAAU,EAAE,MAAM;QAClB,SAAS,EAAE;YACT,WAAW;YACX,IAAI;YACJ,OAAO;YACP,UAAU;YACV,SAAS,UAAU,GAAG;YACtB,UAAU;YACV,YAAY;SACb;QACD,GAAG,MAAM;KACV,EACD,QAAQ,CACT,CAAC;IACF,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,IAAI,EAAE;QAAE,OAAO;IAClC,SAAS,CACP,MAAM,CAAC,MAAM,CAAC,IAAI,EAAE,KAAK,UAAU,EACnC,yCAAyC,CAC1C,CAAC;IACF,MAAM,cAAc,CAClB,EAAE,UAAU,EAAE,MAAM,EAAE,SAAS,EAAE,CAAC,IAAI,EAAE,SAAS,EAAE,UAAU,CAAC,EAAE,GAAG,MAAM,EAAE,EAC3E,QAAQ,CACT,CAAC;AACJ,CAAC","sourcesContent":["import { invariant } from \"../domain/errors.ts\";\nimport type { TransferOptions } from \"../domain/sandbox.types.ts\";\nimport { requireSuccess } from \"../infrastructure/process.ts\";\nimport type { Executor } from \"../infrastructure/process.types.ts\";\nimport { containerDefaults } from \"./container.constants.ts\";\nimport type { ContainerEngine } from \"./container.types.ts\";\n\nexport async function recoverContainer(\n  engine: ContainerEngine,\n  executor: Executor,\n  resourceId: string,\n  options: TransferOptions = {},\n): Promise<void> {\n  invariant(\n    /^outpost-[a-f0-9-]{36}$/.test(resourceId),\n    \"Invalid recoverable container identity\",\n  );\n  const limits = {\n    deadlineMs: options.deadlineMs ?? containerDefaults.cleanupMs,\n    ...(options.signal ? { signal: options.signal } : {}),\n  };\n  const result = await requireSuccess(\n    {\n      executable: engine,\n      arguments: [\n        \"container\",\n        \"ls\",\n        \"--all\",\n        \"--filter\",\n        `name=^${resourceId}$`,\n        \"--format\",\n        \"{{.Names}}\",\n      ],\n      ...limits,\n    },\n    executor,\n  );\n  if (!result.stdout.trim()) return;\n  invariant(\n    result.stdout.trim() === resourceId,\n    \"Recoverable container identity mismatch\",\n  );\n  await requireSuccess(\n    { executable: engine, arguments: [\"rm\", \"--force\", resourceId], ...limits },\n    executor,\n  );\n}\n"]}
+{"version":3,"file":"container-recovery.js","sourceRoot":"","sources":["../../src/providers/container-recovery.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,SAAS,EAAE,MAAM,qBAAqB,CAAC;AAEhD,OAAO,EAAE,cAAc,EAAE,MAAM,8BAA8B,CAAC;AAE9D,OAAO,EAAE,iBAAiB,EAAE,MAAM,0BAA0B,CAAC;AAG7D,MAAM,CAAC,KAAK,UAAU,gBAAgB,CACpC,MAAuB,EACvB,QAAkB,EAClB,UAAkB,EAClB,UAA2B,EAAE;IAE7B,SAAS,CACP,yBAAyB,CAAC,IAAI,CAAC,UAAU,CAAC,EAC1C,wCAAwC,CACzC,CAAC;IACF,MAAM,MAAM,GAAG;QACb,UAAU,EAAE,OAAO,CAAC,UAAU,IAAI,iBAAiB,CAAC,SAAS;QAC7D,GAAG,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,OAAO,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KACtD,CAAC;IACF,MAAM,MAAM,GAAG,MAAM,cAAc,CACjC;QACE,UAAU,EAAE,MAAM;QAClB,SAAS,EAAE;YACT,WAAW;YACX,IAAI;YACJ,OAAO;YACP,UAAU;YACV,SAAS,UAAU,aAAa;YAChC,UAAU;YACV,YAAY;SACb;QACD,GAAG,MAAM;KACV,EACD,QAAQ,CACT,CAAC;IACF,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,IAAI,EAAE;QAAE,OAAO;IAClC,MAAM,KAAK,GAAG,MAAM,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;IAClD,SAAS,CACP,KAAK,CAAC,KAAK,CACT,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,KAAK,UAAU,IAAI,IAAI,KAAK,GAAG,UAAU,SAAS,CACjE,EACD,yCAAyC,CAC1C,CAAC;IACF,KAAK,MAAM,IAAI,IAAI,CAAC,UAAU,EAAE,GAAG,UAAU,SAAS,CAAC,EAAE,CAAC;QACxD,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,IAAI,CAAC;YAAE,SAAS;QACpC,MAAM,cAAc,CAClB,EAAE,UAAU,EAAE,MAAM,EAAE,SAAS,EAAE,CAAC,IAAI,EAAE,SAAS,EAAE,IAAI,CAAC,EAAE,GAAG,MAAM,EAAE,EACrE,QAAQ,CACT,CAAC;IACJ,CAAC;AACH,CAAC","sourcesContent":["import { invariant } from \"../domain/errors.ts\";\nimport type { TransferOptions } from \"../domain/sandbox.types.ts\";\nimport { requireSuccess } from \"../infrastructure/process.ts\";\nimport type { Executor } from \"../infrastructure/process.types.ts\";\nimport { containerDefaults } from \"./container.constants.ts\";\nimport type { ContainerEngine } from \"./container.types.ts\";\n\nexport async function recoverContainer(\n  engine: ContainerEngine,\n  executor: Executor,\n  resourceId: string,\n  options: TransferOptions = {},\n): Promise<void> {\n  invariant(\n    /^outpost-[a-f0-9-]{36}$/.test(resourceId),\n    \"Invalid recoverable container identity\",\n  );\n  const limits = {\n    deadlineMs: options.deadlineMs ?? containerDefaults.cleanupMs,\n    ...(options.signal ? { signal: options.signal } : {}),\n  };\n  const result = await requireSuccess(\n    {\n      executable: engine,\n      arguments: [\n        \"container\",\n        \"ls\",\n        \"--all\",\n        \"--filter\",\n        `name=^${resourceId}(-egress)?$`,\n        \"--format\",\n        \"{{.Names}}\",\n      ],\n      ...limits,\n    },\n    executor,\n  );\n  if (!result.stdout.trim()) return;\n  const names = result.stdout.trim().split(/\\r?\\n/);\n  invariant(\n    names.every(\n      (name) => name === resourceId || name === `${resourceId}-egress`,\n    ),\n    \"Recoverable container identity mismatch\",\n  );\n  for (const name of [resourceId, `${resourceId}-egress`]) {\n    if (!names.includes(name)) continue;\n    await requireSuccess(\n      { executable: engine, arguments: [\"rm\", \"--force\", name], ...limits },\n      executor,\n    );\n  }\n}\n"]}

package/dist/providers/container.js

@@ -1,8 +1,12 @@
+import { validateContainerImage } from "../domain/container-image.js";
 import { recoverContainer } from "./container-recovery.js";
 import { execFileSync } from "node:child_process";
 import { randomUUID } from "node:crypto";
 import { basename } from "node:path";
 import { containerNetworks } from "./container-network.js";
+import { validateEgress } from "../domain/egress.js";
+import { createContainerEgress } from "./container-egress.js";
+import { egressVariables } from "./egress/egress.constants.js";
 import { invariant } from "../domain/errors.js";
 import { executeProcess, quote, requireSuccess, } from "../infrastructure/process.js";
 import { registerCleanup } from "../infrastructure/shutdown.js";
@@ -21,11 +25,22 @@ export function imageName(repository) {
         .replace(/[^a-z0-9_.-]/g, "-") || "workspace"}`;
 }
 export function containerProvider(engine, options = {}, executor = executeProcess, platform = process.platform) {
+    if (options.image !== undefined)
+        validateContainerImage(options.image);
+    const policy = validateEgress(options.egress);
     const config = {
         ...options,
+        ...(policy ? { egress: policy } : {}),
         networks: containerNetworks(options),
         caches: (options.caches ?? []).map((cache) => ({ ...cache })),
     };
+    if (config.egressImage !== undefined) {
+        invariant(config.egress?.mode === "allowlist", "egressImage requires an egress allowlist");
+        invariant(typeof config.egressImage === "string" &&
+            config.egressImage.length > 0 &&
+            !config.egressImage.startsWith("-") &&
+            !/\s/.test(config.egressImage), "Invalid egressImage reference");
+    }
     invariant(config.repositoryMode === undefined ||
         config.repositoryMode === "mounted" ||
         config.repositoryMode === "isolated", "repositoryMode must be mounted or isolated");
@@ -67,11 +82,18 @@ export function containerProvider(engine, options = {}, executor = executeProces
                 ? containerDefaults.isolatedRoot
                 : containerDefaults.root, home = containerDefaults.home;
             const { env, volumes, fileParents } = await containerMounts(context, config, platform, root, home);
+            const egress = config.egress?.mode === "allowlist"
+                ? createContainerEgress(call, name, config, engine, user)
+                : undefined;
+            if (egress)
+                Object.assign(env, egressVariables);
             const caches = await cacheMounts(config.caches ?? [], context.repository, image, user, context.workspaceIdentity);
             for (const cache of caches)
                 volumes.push("--volume", `${cache.volume}:${cache.target}:nocopy`);
             const args = containerPlan({
-                config,
+                config: egress
+                    ? { ...config, networks: [`container:${egress.name}`] }
+                    : config,
                 engine,
                 user,
                 root,
@@ -81,10 +103,17 @@ export function containerProvider(engine, options = {}, executor = executeProces
                 fileParents,
             });
             let closed = false, releasing;
+            let attempted = false;
             let unregister = () => { };
             const release = () => {
                 closed = true;
-                releasing ??= call(["rm", "--force", name])
+                releasing ??= (async () => {
+                    if (attempted) {
+                        await call(["rm", "--force", name]);
+                        attempted = false;
+                    }
+                    await egress?.release();
+                })()
                     .then(() => {
                     unregister();
                 })
@@ -106,6 +135,8 @@ export function containerProvider(engine, options = {}, executor = executeProces
                     ], context.signal ? { signal: context.signal } : {});
                 await context.registerRecovery?.(name);
                 context.signal?.throwIfAborted();
+                await egress?.start(context.signal);
+                attempted = true;
                 await call(args, {
                     ...(context.signal ? { signal: context.signal } : {}),
                 });
@@ -132,7 +163,7 @@ export function containerProvider(engine, options = {}, executor = executeProces
                         "-c",
                         `mkdir -p ${quote(parent)} && chown ${user.uid}:${user.gid} ${quote(parent)}`,
                     ]);
-                if (fileParents.size)
+                if (engine === "podman" || fileParents.size)
                     await call([
                         "exec",
                         "--user",
@@ -170,8 +201,8 @@ export function containerProvider(engine, options = {}, executor = executeProces
                 throw cause;
             }
             unregister = registerCleanup(release, () => {
-                if (!closed)
-                    execFileSync(engine, ["rm", "--force", name], {
+                if (attempted)
+                    execFileSync(engine, ["rm", "--force", name, ...(egress ? [egress.name] : [])], {
                         timeout: containerDefaults.cleanupMs,
                         stdio: "ignore",
                         windowsHide: true,