@elie-laloum/outpost 2.0.0 → 4.0.0

package/dist/providers/container-cache.js

@@ -0,0 +1,48 @@
+import { createHash } from "node:crypto";
+import { realpath } from "node:fs/promises";
+import { posix } from "node:path";
+import { invariant } from "../domain/errors.js";
+import { cacheDefaults } from "./container-cache.constants.js";
+export function validateCaches(config) {
+    const names = new Set();
+    for (const cache of config.caches ?? []) {
+        invariant(typeof cache.name === "string" &&
+            cacheDefaults.namePattern.test(cache.name), "Cache names must start with a lowercase letter and contain at most 48 lowercase letters, digits or hyphens");
+        invariant(!names.has(cache.name), `Duplicate cache name: ${cache.name}`);
+        invariant(typeof cache.key === "string" &&
+            cache.key.trim().length > 0 &&
+            cache.key.length <= cacheDefaults.maximumKeyLength, "Cache keys must be nonempty strings of at most 1024 characters");
+        names.add(cache.name);
+    }
+    if (!names.size)
+        return;
+    for (const volume of config.volumes ?? []) {
+        const target = posix.resolve("/workspace", volume.target.replaceAll("\\", "/"));
+        invariant(!(target === cacheDefaults.root ||
+            target.startsWith(cacheDefaults.root + "/") ||
+            cacheDefaults.root.startsWith(target.replace(/\/$/, "") + "/")), "Explicit volumes must not overlap dependency caches");
+    }
+}
+export async function cacheMounts(caches, repository, image, user) {
+    if (!caches.length)
+        return [];
+    const canonical = await realpath(repository);
+    return caches.map(({ name, key }) => {
+        const digest = createHash("sha256")
+            .update(JSON.stringify([
+            cacheDefaults.version,
+            canonical,
+            image,
+            user.uid,
+            user.gid,
+            name,
+            key,
+        ]))
+            .digest("hex");
+        return {
+            volume: `outpost-cache-${name}-${digest}`,
+            target: `${cacheDefaults.root}/${name}`,
+        };
+    });
+}
+//# sourceMappingURL=container-cache.js.map

package/dist/providers/container-cache.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"container-cache.js","sourceRoot":"","sources":["../../src/providers/container-cache.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACzC,OAAO,EAAE,QAAQ,EAAE,MAAM,kBAAkB,CAAC;AAC5C,OAAO,EAAE,KAAK,EAAE,MAAM,WAAW,CAAC;AAClC,OAAO,EAAE,SAAS,EAAE,MAAM,qBAAqB,CAAC;AAChD,OAAO,EAAE,aAAa,EAAE,MAAM,gCAAgC,CAAC;AAO/D,MAAM,UAAU,cAAc,CAAC,MAAwB;IACrD,MAAM,KAAK,GAAG,IAAI,GAAG,EAAU,CAAC;IAChC,KAAK,MAAM,KAAK,IAAI,MAAM,CAAC,MAAM,IAAI,EAAE,EAAE,CAAC;QACxC,SAAS,CACP,OAAO,KAAK,CAAC,IAAI,KAAK,QAAQ;YAC5B,aAAa,CAAC,WAAW,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,EAC5C,4GAA4G,CAC7G,CAAC;QACF,SAAS,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,yBAAyB,KAAK,CAAC,IAAI,EAAE,CAAC,CAAC;QACzE,SAAS,CACP,OAAO,KAAK,CAAC,GAAG,KAAK,QAAQ;YAC3B,KAAK,CAAC,GAAG,CAAC,IAAI,EAAE,CAAC,MAAM,GAAG,CAAC;YAC3B,KAAK,CAAC,GAAG,CAAC,MAAM,IAAI,aAAa,CAAC,gBAAgB,EACpD,gEAAgE,CACjE,CAAC;QACF,KAAK,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;IACxB,CAAC;IACD,IAAI,CAAC,KAAK,CAAC,IAAI;QAAE,OAAO;IACxB,KAAK,MAAM,MAAM,IAAI,MAAM,CAAC,OAAO,IAAI,EAAE,EAAE,CAAC;QAC1C,MAAM,MAAM,GAAG,KAAK,CAAC,OAAO,CAC1B,YAAY,EACZ,MAAM,CAAC,MAAM,CAAC,UAAU,CAAC,IAAI,EAAE,GAAG,CAAC,CACpC,CAAC;QACF,SAAS,CACP,CAAC,CACC,MAAM,KAAK,aAAa,CAAC,IAAI;YAC7B,MAAM,CAAC,UAAU,CAAC,aAAa,CAAC,IAAI,GAAG,GAAG,CAAC;YAC3C,aAAa,CAAC,IAAI,CAAC,UAAU,CAAC,MAAM,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,GAAG,GAAG,CAAC,CAC/D,EACD,qDAAqD,CACtD,CAAC;IACJ,CAAC;AACH,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,WAAW,CAC/B,MAAkC,EAClC,UAAkB,EAClB,KAAa,EACb,IAAmB;IAEnB,IAAI,CAAC,MAAM,CAAC,MAAM;QAAE,OAAO,EAAE,CAAC;IAC9B,MAAM,SAAS,GAAG,MAAM,QAAQ,CAAC,UAAU,CAAC,CAAC;IAC7C,OAAO,MAAM,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,EAAE,GAAG,EAAE,EAAE,EAAE;QAClC,MAAM,MAAM,GAAG,UAAU,CAAC,QAAQ,CAAC;aAChC,MAAM,CACL,IAAI,CAAC,SAAS,CAAC;YACb,aAAa,CAAC,OAAO;YACrB,SAAS;YACT,KAAK;YACL,IAAI,CAAC,GAAG;YACR,IAAI,CAAC,GAAG;YACR,IAAI;YACJ,GAAG;SACJ,CAAC,CACH;aACA,MAAM,CAAC,KAAK,CAAC,CAAC;QACjB,OAAO;YACL,MAAM,EAAE,iBAAiB,IAAI,IAAI,MAAM,EAAE;YACzC,MAAM,EAAE,GAAG,aAAa,CAAC,IAAI,IAAI,IAAI,EAAE;SACxC,CAAC;IACJ,CAAC,CAAC,CAAC;AACL,CAAC","sourcesContent":["import { createHash } from \"node:crypto\";\nimport { realpath } from \"node:fs/promises\";\nimport { posix } from \"node:path\";\nimport { invariant } from \"../domain/errors.ts\";\nimport { cacheDefaults } from \"./container-cache.constants.ts\";\nimport type {\n  DependencyCache,\n  ContainerCacheMount,\n} from \"./container-cache.types.ts\";\nimport type { ContainerOptions, ContainerUser } from \"./container.types.ts\";\n\nexport function validateCaches(config: ContainerOptions): void {\n  const names = new Set<string>();\n  for (const cache of config.caches ?? []) {\n    invariant(\n      typeof cache.name === \"string\" &&\n        cacheDefaults.namePattern.test(cache.name),\n      \"Cache names must start with a lowercase letter and contain at most 48 lowercase letters, digits or hyphens\",\n    );\n    invariant(!names.has(cache.name), `Duplicate cache name: ${cache.name}`);\n    invariant(\n      typeof cache.key === \"string\" &&\n        cache.key.trim().length > 0 &&\n        cache.key.length <= cacheDefaults.maximumKeyLength,\n      \"Cache keys must be nonempty strings of at most 1024 characters\",\n    );\n    names.add(cache.name);\n  }\n  if (!names.size) return;\n  for (const volume of config.volumes ?? []) {\n    const target = posix.resolve(\n      \"/workspace\",\n      volume.target.replaceAll(\"\\\\\", \"/\"),\n    );\n    invariant(\n      !(\n        target === cacheDefaults.root ||\n        target.startsWith(cacheDefaults.root + \"/\") ||\n        cacheDefaults.root.startsWith(target.replace(/\\/$/, \"\") + \"/\")\n      ),\n      \"Explicit volumes must not overlap dependency caches\",\n    );\n  }\n}\n\nexport async function cacheMounts(\n  caches: readonly DependencyCache[],\n  repository: string,\n  image: string,\n  user: ContainerUser,\n): Promise<ContainerCacheMount[]> {\n  if (!caches.length) return [];\n  const canonical = await realpath(repository);\n  return caches.map(({ name, key }) => {\n    const digest = createHash(\"sha256\")\n      .update(\n        JSON.stringify([\n          cacheDefaults.version,\n          canonical,\n          image,\n          user.uid,\n          user.gid,\n          name,\n          key,\n        ]),\n      )\n      .digest(\"hex\");\n    return {\n      volume: `outpost-cache-${name}-${digest}`,\n      target: `${cacheDefaults.root}/${name}`,\n    };\n  });\n}\n"]}

package/dist/providers/container-cache.types.d.ts

@@ -0,0 +1,8 @@
+export interface DependencyCache {
+    readonly name: string;
+    readonly key: string;
+}
+export interface ContainerCacheMount {
+    readonly volume: string;
+    readonly target: string;
+}

package/dist/providers/container-cache.types.js

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=container-cache.types.js.map

package/dist/providers/container-cache.types.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"container-cache.types.js","sourceRoot":"","sources":["../../src/providers/container-cache.types.ts"],"names":[],"mappings":"","sourcesContent":["export interface DependencyCache {\n  readonly name: string;\n  readonly key: string;\n}\n\nexport interface ContainerCacheMount {\n  readonly volume: string;\n  readonly target: string;\n}\n"]}

package/dist/providers/container-isolation.d.ts

@@ -0,0 +1,2 @@
+import type { SandboxContext } from "../domain/sandbox.types.ts";
+export declare function validateIsolatedMount(context: SandboxContext, source: string, target: string): Promise<void>;

package/dist/providers/container-isolation.js

@@ -0,0 +1,29 @@
+import { realpath } from "node:fs/promises";
+import { isAbsolute, relative, posix } from "node:path";
+import { invariant } from "../domain/errors.js";
+function contains(parent, child) {
+    const offset = relative(parent, child);
+    return (!isAbsolute(offset) &&
+        offset !== ".." &&
+        !offset.startsWith("../") &&
+        !offset.startsWith("..\\"));
+}
+export async function validateIsolatedMount(context, source, target) {
+    const canonical = await realpath(source);
+    for (const path of [
+        context.repository,
+        context.directory,
+        ...context.gitDirectories,
+    ]) {
+        const protectedPath = await realpath(path);
+        invariant(!contains(canonical, protectedPath) &&
+            !contains(protectedPath, canonical), "Isolated repository mounts must not expose the host repository, workspace or Git metadata");
+    }
+    for (const protectedPath of ["/outpost", "/tmp"]) {
+        const offset = posix.relative(protectedPath, target);
+        const reverse = posix.relative(target, protectedPath);
+        invariant((offset === ".." || offset.startsWith("../")) &&
+            (reverse === ".." || reverse.startsWith("../")), "Isolated repository mounts must not overlap workspace or control directories");
+    }
+}
+//# sourceMappingURL=container-isolation.js.map

package/dist/providers/container-isolation.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"container-isolation.js","sourceRoot":"","sources":["../../src/providers/container-isolation.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,MAAM,kBAAkB,CAAC;AAC5C,OAAO,EAAE,UAAU,EAAE,QAAQ,EAAE,KAAK,EAAE,MAAM,WAAW,CAAC;AACxD,OAAO,EAAE,SAAS,EAAE,MAAM,qBAAqB,CAAC;AAGhD,SAAS,QAAQ,CAAC,MAAc,EAAE,KAAa;IAC7C,MAAM,MAAM,GAAG,QAAQ,CAAC,MAAM,EAAE,KAAK,CAAC,CAAC;IACvC,OAAO,CACL,CAAC,UAAU,CAAC,MAAM,CAAC;QACnB,MAAM,KAAK,IAAI;QACf,CAAC,MAAM,CAAC,UAAU,CAAC,KAAK,CAAC;QACzB,CAAC,MAAM,CAAC,UAAU,CAAC,MAAM,CAAC,CAC3B,CAAC;AACJ,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,qBAAqB,CACzC,OAAuB,EACvB,MAAc,EACd,MAAc;IAEd,MAAM,SAAS,GAAG,MAAM,QAAQ,CAAC,MAAM,CAAC,CAAC;IACzC,KAAK,MAAM,IAAI,IAAI;QACjB,OAAO,CAAC,UAAU;QAClB,OAAO,CAAC,SAAS;QACjB,GAAG,OAAO,CAAC,cAAc;KAC1B,EAAE,CAAC;QACF,MAAM,aAAa,GAAG,MAAM,QAAQ,CAAC,IAAI,CAAC,CAAC;QAC3C,SAAS,CACP,CAAC,QAAQ,CAAC,SAAS,EAAE,aAAa,CAAC;YACjC,CAAC,QAAQ,CAAC,aAAa,EAAE,SAAS,CAAC,EACrC,2FAA2F,CAC5F,CAAC;IACJ,CAAC;IACD,KAAK,MAAM,aAAa,IAAI,CAAC,UAAU,EAAE,MAAM,CAAC,EAAE,CAAC;QACjD,MAAM,MAAM,GAAG,KAAK,CAAC,QAAQ,CAAC,aAAa,EAAE,MAAM,CAAC,CAAC;QACrD,MAAM,OAAO,GAAG,KAAK,CAAC,QAAQ,CAAC,MAAM,EAAE,aAAa,CAAC,CAAC;QACtD,SAAS,CACP,CAAC,MAAM,KAAK,IAAI,IAAI,MAAM,CAAC,UAAU,CAAC,KAAK,CAAC,CAAC;YAC3C,CAAC,OAAO,KAAK,IAAI,IAAI,OAAO,CAAC,UAAU,CAAC,KAAK,CAAC,CAAC,EACjD,8EAA8E,CAC/E,CAAC;IACJ,CAAC;AACH,CAAC","sourcesContent":["import { realpath } from \"node:fs/promises\";\nimport { isAbsolute, relative, posix } from \"node:path\";\nimport { invariant } from \"../domain/errors.ts\";\nimport type { SandboxContext } from \"../domain/sandbox.types.ts\";\n\nfunction contains(parent: string, child: string): boolean {\n  const offset = relative(parent, child);\n  return (\n    !isAbsolute(offset) &&\n    offset !== \"..\" &&\n    !offset.startsWith(\"../\") &&\n    !offset.startsWith(\"..\\\\\")\n  );\n}\n\nexport async function validateIsolatedMount(\n  context: SandboxContext,\n  source: string,\n  target: string,\n): Promise<void> {\n  const canonical = await realpath(source);\n  for (const path of [\n    context.repository,\n    context.directory,\n    ...context.gitDirectories,\n  ]) {\n    const protectedPath = await realpath(path);\n    invariant(\n      !contains(canonical, protectedPath) &&\n        !contains(protectedPath, canonical),\n      \"Isolated repository mounts must not expose the host repository, workspace or Git metadata\",\n    );\n  }\n  for (const protectedPath of [\"/outpost\", \"/tmp\"]) {\n    const offset = posix.relative(protectedPath, target);\n    const reverse = posix.relative(target, protectedPath);\n    invariant(\n      (offset === \"..\" || offset.startsWith(\"../\")) &&\n        (reverse === \"..\" || reverse.startsWith(\"../\")),\n      \"Isolated repository mounts must not overlap workspace or control directories\",\n    );\n  }\n}\n"]}

package/dist/providers/container-mounts.js

@@ -2,6 +2,7 @@ import { stat } from "node:fs/promises";
 import { isAbsolute, posix, relative } from "node:path";
 import { invariant, OutpostError } from "../domain/errors.js";
 import { expandPath } from "../infrastructure/files.js";
+import { validateIsolatedMount } from "./container-isolation.js";
 export async function containerMounts(context, config, platform, root, home) {
     const env = {
         ...context.variables,
@@ -10,8 +11,10 @@ export async function containerMounts(context, config, platform, root, home) {
         GIT_CONFIG_KEY_0: "safe.directory",
         GIT_CONFIG_VALUE_0: "*",
     };
-    const internal = [{ source: context.directory, target: root }];
-    if (context.gitDirectories.length) {
+    const internal = config.repositoryMode === "isolated"
+        ? []
+        : [{ source: context.directory, target: root }];
+    if (config.repositoryMode !== "isolated" && context.gitDirectories.length) {
         const common = context.gitDirectories.at(-1);
         const offset = relative(common, context.gitDirectories[0]);
         const nested = !isAbsolute(offset) &&
@@ -46,6 +49,8 @@ export async function containerMounts(context, config, platform, root, home) {
             : destination.startsWith("~/")
                 ? posix.resolve(home, destination.slice(2))
                 : posix.resolve(root, destination);
+        if (config.repositoryMode === "isolated")
+            await validateIsolatedMount(context, source, target);
         if (info.isFile() && !internal.includes(volume)) {
             const parent = posix.dirname(target);
             invariant(parent === home || parent.startsWith(home + "/"), "File mounts must live inside the agent home; mount the containing directory for other destinations");

package/dist/providers/container-mounts.js.map

@@ -1 +1 @@
-{"version":3,"file":"container-mounts.js","sourceRoot":"","sources":["../../src/providers/container-mounts.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,IAAI,EAAE,MAAM,kBAAkB,CAAC;AACxC,OAAO,EAAE,UAAU,EAAE,KAAK,EAAE,QAAQ,EAAE,MAAM,WAAW,CAAC;AACxD,OAAO,EAAE,SAAS,EAAE,YAAY,EAAE,MAAM,qBAAqB,CAAC;AAE9D,OAAO,EAAE,UAAU,EAAE,MAAM,4BAA4B,CAAC;AAGxD,MAAM,CAAC,KAAK,UAAU,eAAe,CACnC,OAAuB,EACvB,MAAwB,EACxB,QAAyB,EACzB,IAAY,EACZ,IAAY;IAEZ,MAAM,GAAG,GAA2B;QAClC,GAAG,OAAO,CAAC,SAAS;QACpB,IAAI,EAAE,IAAI;QACV,gBAAgB,EAAE,GAAG;QACrB,gBAAgB,EAAE,gBAAgB;QAClC,kBAAkB,EAAE,GAAG;KACxB,CAAC;IACF,MAAM,QAAQ,GAAa,CAAC,EAAE,MAAM,EAAE,OAAO,CAAC,SAAS,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC;IACzE,IAAI,OAAO,CAAC,cAAc,CAAC,MAAM,EAAE,CAAC;QAClC,MAAM,MAAM,GAAG,OAAO,CAAC,cAAc,CAAC,EAAE,CAAC,CAAC,CAAC,CAAE,CAAC;QAC9C,MAAM,MAAM,GAAG,QAAQ,CAAC,MAAM,EAAE,OAAO,CAAC,cAAc,CAAC,CAAC,CAAE,CAAC,CAAC;QAC5D,MAAM,MAAM,GACV,CAAC,UAAU,CAAC,MAAM,CAAC;YACnB,MAAM,KAAK,IAAI;YACf,CAAC,MAAM,CAAC,UAAU,CAAC,MAAM,CAAC;YAC1B,CAAC,MAAM,CAAC,UAAU,CAAC,KAAK,CAAC,CAAC;QAC5B,QAAQ,CAAC,IAAI,CAAC;YACZ,MAAM,EAAE,MAAM;YACd,MAAM,EAAE,qBAAqB;SAC9B,CAAC,CAAC;QACH,IAAI,CAAC,MAAM;YACT,QAAQ,CAAC,IAAI,CAAC;gBACZ,MAAM,EAAE,OAAO,CAAC,cAAc,CAAC,CAAC,CAAE;gBAClC,MAAM,EAAE,uBAAuB;aAChC,CAAC,CAAC;QACL,GAAG,CAAC,OAAO,GAAG,MAAM;YAClB,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,qBAAqB,EAAE,MAAM,CAAC,UAAU,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC;YACjE,CAAC,CAAC,uBAAuB,CAAC;QAC5B,GAAG,CAAC,cAAc,GAAG,qBAAqB,CAAC;QAC3C,GAAG,CAAC,aAAa,GAAG,IAAI,CAAC;IAC3B,CAAC;IACD,MAAM,OAAO,GAAa,EAAE,CAAC;IAC7B,MAAM,WAAW,GAAG,IAAI,GAAG,EAAU,CAAC;IACtC,KAAK,MAAM,MAAM,IAAI,CAAC,GAAG,QAAQ,EAAE,GAAG,CAAC,MAAM,CAAC,OAAO,IAAI,EAAE,CAAC,CAAC,EAAE,CAAC;QAC9D,MAAM,MAAM,GAAG,UAAU,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,UAAU,CAAC,CAAC;QAC7D,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC;QACvD,IAAI,CAAC,IAAI;YACP,MAAM,IAAI,YAAY,CACpB,UAAU,EACV,gCAAgC,MAAM,EAAE,CACzC,CAAC;QACJ,MAAM,WAAW,GAAG,MAAM,CAAC,MAAM,CAAC,UAAU,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC;QACxD,MAAM,MAAM,GACV,WAAW,KAAK,GAAG;YACjB,CAAC,CAAC,IAAI;YACN,CAAC,CAAC,WAAW,CAAC,UAAU,CAAC,IAAI,CAAC;gBAC5B,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,IAAI,EAAE,WAAW,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;gBAC3C,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,IAAI,EAAE,WAAW,CAAC,CAAC;QACzC,IAAI,IAAI,CAAC,MAAM,EAAE,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC,MAAM,CAAC,EAAE,CAAC;YAChD,MAAM,MAAM,GAAG,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;YACrC,SAAS,CACP,MAAM,KAAK,IAAI,IAAI,MAAM,CAAC,UAAU,CAAC,IAAI,GAAG,GAAG,CAAC,EAChD,oGAAoG,CACrG,CAAC;YACF,KAAK,IAAI,MAAM,GAAG,MAAM,EAAE,MAAM,KAAK,IAAI,EAAE,MAAM,GAAG,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC;gBACvE,WAAW,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;QAC5B,CAAC;QACD,SAAS,CACP,CAAC,MAAM,CAAC,QAAQ,CAAC,GAAG,CAAC,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,GAAG,CAAC,EAC9C,mCAAmC,CACpC,CAAC;QACF,IAAI,MAAM,CAAC,KAAK,KAAK,KAAK,IAAI,QAAQ,KAAK,OAAO;YAChD,OAAO,CAAC,IAAI,CACV,SAAS,EACT,oBAAoB,MAAM,WAAW,MAAM,GAAG,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,EAAE,EAAE,CACnF,CAAC;;YAEF,OAAO,CAAC,IAAI,CACV,UAAU,EACV,GAAG,MAAM,IAAI,MAAM,IAAI,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,GAAG,MAAM,CAAC,KAAK,IAAI,GAAG,EAAE,CAC5E,CAAC;IACN,CAAC;IAED,OAAO,EAAE,GAAG,EAAE,OAAO,EAAE,WAAW,EAAE,CAAC;AACvC,CAAC","sourcesContent":["import { stat } from \"node:fs/promises\";\nimport { isAbsolute, posix, relative } from \"node:path\";\nimport { invariant, OutpostError } from \"../domain/errors.ts\";\nimport type { SandboxContext, Volume } from \"../domain/sandbox.types.ts\";\nimport { expandPath } from \"../infrastructure/files.ts\";\nimport type { ContainerMounts, ContainerOptions } from \"./container.types.ts\";\n\nexport async function containerMounts(\n  context: SandboxContext,\n  config: ContainerOptions,\n  platform: NodeJS.Platform,\n  root: string,\n  home: string,\n): Promise<ContainerMounts> {\n  const env: Record<string, string> = {\n    ...context.variables,\n    HOME: home,\n    GIT_CONFIG_COUNT: \"1\",\n    GIT_CONFIG_KEY_0: \"safe.directory\",\n    GIT_CONFIG_VALUE_0: \"*\",\n  };\n  const internal: Volume[] = [{ source: context.directory, target: root }];\n  if (context.gitDirectories.length) {\n    const common = context.gitDirectories.at(-1)!;\n    const offset = relative(common, context.gitDirectories[0]!);\n    const nested =\n      !isAbsolute(offset) &&\n      offset !== \"..\" &&\n      !offset.startsWith(\"..\\\\\") &&\n      !offset.startsWith(\"../\");\n    internal.push({\n      source: common,\n      target: \"/outpost/git/common\",\n    });\n    if (!nested)\n      internal.push({\n        source: context.gitDirectories[0]!,\n        target: \"/outpost/git/worktree\",\n      });\n    env.GIT_DIR = nested\n      ? posix.join(\"/outpost/git/common\", offset.replaceAll(\"\\\\\", \"/\"))\n      : \"/outpost/git/worktree\";\n    env.GIT_COMMON_DIR = \"/outpost/git/common\";\n    env.GIT_WORK_TREE = root;\n  }\n  const volumes: string[] = [];\n  const fileParents = new Set<string>();\n  for (const volume of [...internal, ...(config.volumes ?? [])]) {\n    const source = expandPath(volume.source, context.repository);\n    const info = await stat(source).catch(() => undefined);\n    if (!info)\n      throw new OutpostError(\n        \"provider\",\n        `Mount source is unavailable: ${source}`,\n      );\n    const destination = volume.target.replaceAll(\"\\\\\", \"/\");\n    const target =\n      destination === \"~\"\n        ? home\n        : destination.startsWith(\"~/\")\n          ? posix.resolve(home, destination.slice(2))\n          : posix.resolve(root, destination);\n    if (info.isFile() && !internal.includes(volume)) {\n      const parent = posix.dirname(target);\n      invariant(\n        parent === home || parent.startsWith(home + \"/\"),\n        \"File mounts must live inside the agent home; mount the containing directory for other destinations\",\n      );\n      for (let folder = parent; folder !== home; folder = posix.dirname(folder))\n        fileParents.add(folder);\n    }\n    invariant(\n      !source.includes(\",\") && !target.includes(\",\"),\n      \"Mount paths cannot contain commas\",\n    );\n    if (config.label === false || platform !== \"linux\")\n      volumes.push(\n        \"--mount\",\n        `type=bind,source=${source},target=${target}${volume.readOnly ? \",readonly\" : \"\"}`,\n      );\n    else\n      volumes.push(\n        \"--volume\",\n        `${source}:${target}:${volume.readOnly ? \"ro,\" : \"\"}${config.label ?? \"z\"}`,\n      );\n  }\n\n  return { env, volumes, fileParents };\n}\n"]}
+{"version":3,"file":"container-mounts.js","sourceRoot":"","sources":["../../src/providers/container-mounts.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,IAAI,EAAE,MAAM,kBAAkB,CAAC;AACxC,OAAO,EAAE,UAAU,EAAE,KAAK,EAAE,QAAQ,EAAE,MAAM,WAAW,CAAC;AACxD,OAAO,EAAE,SAAS,EAAE,YAAY,EAAE,MAAM,qBAAqB,CAAC;AAE9D,OAAO,EAAE,UAAU,EAAE,MAAM,4BAA4B,CAAC;AACxD,OAAO,EAAE,qBAAqB,EAAE,MAAM,0BAA0B,CAAC;AAGjE,MAAM,CAAC,KAAK,UAAU,eAAe,CACnC,OAAuB,EACvB,MAAwB,EACxB,QAAyB,EACzB,IAAY,EACZ,IAAY;IAEZ,MAAM,GAAG,GAA2B;QAClC,GAAG,OAAO,CAAC,SAAS;QACpB,IAAI,EAAE,IAAI;QACV,gBAAgB,EAAE,GAAG;QACrB,gBAAgB,EAAE,gBAAgB;QAClC,kBAAkB,EAAE,GAAG;KACxB,CAAC;IACF,MAAM,QAAQ,GACZ,MAAM,CAAC,cAAc,KAAK,UAAU;QAClC,CAAC,CAAC,EAAE;QACJ,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,OAAO,CAAC,SAAS,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC;IACpD,IAAI,MAAM,CAAC,cAAc,KAAK,UAAU,IAAI,OAAO,CAAC,cAAc,CAAC,MAAM,EAAE,CAAC;QAC1E,MAAM,MAAM,GAAG,OAAO,CAAC,cAAc,CAAC,EAAE,CAAC,CAAC,CAAC,CAAE,CAAC;QAC9C,MAAM,MAAM,GAAG,QAAQ,CAAC,MAAM,EAAE,OAAO,CAAC,cAAc,CAAC,CAAC,CAAE,CAAC,CAAC;QAC5D,MAAM,MAAM,GACV,CAAC,UAAU,CAAC,MAAM,CAAC;YACnB,MAAM,KAAK,IAAI;YACf,CAAC,MAAM,CAAC,UAAU,CAAC,MAAM,CAAC;YAC1B,CAAC,MAAM,CAAC,UAAU,CAAC,KAAK,CAAC,CAAC;QAC5B,QAAQ,CAAC,IAAI,CAAC;YACZ,MAAM,EAAE,MAAM;YACd,MAAM,EAAE,qBAAqB;SAC9B,CAAC,CAAC;QACH,IAAI,CAAC,MAAM;YACT,QAAQ,CAAC,IAAI,CAAC;gBACZ,MAAM,EAAE,OAAO,CAAC,cAAc,CAAC,CAAC,CAAE;gBAClC,MAAM,EAAE,uBAAuB;aAChC,CAAC,CAAC;QACL,GAAG,CAAC,OAAO,GAAG,MAAM;YAClB,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,qBAAqB,EAAE,MAAM,CAAC,UAAU,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC;YACjE,CAAC,CAAC,uBAAuB,CAAC;QAC5B,GAAG,CAAC,cAAc,GAAG,qBAAqB,CAAC;QAC3C,GAAG,CAAC,aAAa,GAAG,IAAI,CAAC;IAC3B,CAAC;IACD,MAAM,OAAO,GAAa,EAAE,CAAC;IAC7B,MAAM,WAAW,GAAG,IAAI,GAAG,EAAU,CAAC;IACtC,KAAK,MAAM,MAAM,IAAI,CAAC,GAAG,QAAQ,EAAE,GAAG,CAAC,MAAM,CAAC,OAAO,IAAI,EAAE,CAAC,CAAC,EAAE,CAAC;QAC9D,MAAM,MAAM,GAAG,UAAU,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,UAAU,CAAC,CAAC;QAC7D,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC;QACvD,IAAI,CAAC,IAAI;YACP,MAAM,IAAI,YAAY,CACpB,UAAU,EACV,gCAAgC,MAAM,EAAE,CACzC,CAAC;QACJ,MAAM,WAAW,GAAG,MAAM,CAAC,MAAM,CAAC,UAAU,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC;QACxD,MAAM,MAAM,GACV,WAAW,KAAK,GAAG;YACjB,CAAC,CAAC,IAAI;YACN,CAAC,CAAC,WAAW,CAAC,UAAU,CAAC,IAAI,CAAC;gBAC5B,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,IAAI,EAAE,WAAW,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;gBAC3C,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,IAAI,EAAE,WAAW,CAAC,CAAC;QACzC,IAAI,MAAM,CAAC,cAAc,KAAK,UAAU;YACtC,MAAM,qBAAqB,CAAC,OAAO,EAAE,MAAM,EAAE,MAAM,CAAC,CAAC;QACvD,IAAI,IAAI,CAAC,MAAM,EAAE,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC,MAAM,CAAC,EAAE,CAAC;YAChD,MAAM,MAAM,GAAG,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;YACrC,SAAS,CACP,MAAM,KAAK,IAAI,IAAI,MAAM,CAAC,UAAU,CAAC,IAAI,GAAG,GAAG,CAAC,EAChD,oGAAoG,CACrG,CAAC;YACF,KAAK,IAAI,MAAM,GAAG,MAAM,EAAE,MAAM,KAAK,IAAI,EAAE,MAAM,GAAG,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC;gBACvE,WAAW,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;QAC5B,CAAC;QACD,SAAS,CACP,CAAC,MAAM,CAAC,QAAQ,CAAC,GAAG,CAAC,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,GAAG,CAAC,EAC9C,mCAAmC,CACpC,CAAC;QACF,IAAI,MAAM,CAAC,KAAK,KAAK,KAAK,IAAI,QAAQ,KAAK,OAAO;YAChD,OAAO,CAAC,IAAI,CACV,SAAS,EACT,oBAAoB,MAAM,WAAW,MAAM,GAAG,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,EAAE,EAAE,CACnF,CAAC;;YAEF,OAAO,CAAC,IAAI,CACV,UAAU,EACV,GAAG,MAAM,IAAI,MAAM,IAAI,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,GAAG,MAAM,CAAC,KAAK,IAAI,GAAG,EAAE,CAC5E,CAAC;IACN,CAAC;IAED,OAAO,EAAE,GAAG,EAAE,OAAO,EAAE,WAAW,EAAE,CAAC;AACvC,CAAC","sourcesContent":["import { stat } from \"node:fs/promises\";\nimport { isAbsolute, posix, relative } from \"node:path\";\nimport { invariant, OutpostError } from \"../domain/errors.ts\";\nimport type { SandboxContext, Volume } from \"../domain/sandbox.types.ts\";\nimport { expandPath } from \"../infrastructure/files.ts\";\nimport { validateIsolatedMount } from \"./container-isolation.ts\";\nimport type { ContainerMounts, ContainerOptions } from \"./container.types.ts\";\n\nexport async function containerMounts(\n  context: SandboxContext,\n  config: ContainerOptions,\n  platform: NodeJS.Platform,\n  root: string,\n  home: string,\n): Promise<ContainerMounts> {\n  const env: Record<string, string> = {\n    ...context.variables,\n    HOME: home,\n    GIT_CONFIG_COUNT: \"1\",\n    GIT_CONFIG_KEY_0: \"safe.directory\",\n    GIT_CONFIG_VALUE_0: \"*\",\n  };\n  const internal: Volume[] =\n    config.repositoryMode === \"isolated\"\n      ? []\n      : [{ source: context.directory, target: root }];\n  if (config.repositoryMode !== \"isolated\" && context.gitDirectories.length) {\n    const common = context.gitDirectories.at(-1)!;\n    const offset = relative(common, context.gitDirectories[0]!);\n    const nested =\n      !isAbsolute(offset) &&\n      offset !== \"..\" &&\n      !offset.startsWith(\"..\\\\\") &&\n      !offset.startsWith(\"../\");\n    internal.push({\n      source: common,\n      target: \"/outpost/git/common\",\n    });\n    if (!nested)\n      internal.push({\n        source: context.gitDirectories[0]!,\n        target: \"/outpost/git/worktree\",\n      });\n    env.GIT_DIR = nested\n      ? posix.join(\"/outpost/git/common\", offset.replaceAll(\"\\\\\", \"/\"))\n      : \"/outpost/git/worktree\";\n    env.GIT_COMMON_DIR = \"/outpost/git/common\";\n    env.GIT_WORK_TREE = root;\n  }\n  const volumes: string[] = [];\n  const fileParents = new Set<string>();\n  for (const volume of [...internal, ...(config.volumes ?? [])]) {\n    const source = expandPath(volume.source, context.repository);\n    const info = await stat(source).catch(() => undefined);\n    if (!info)\n      throw new OutpostError(\n        \"provider\",\n        `Mount source is unavailable: ${source}`,\n      );\n    const destination = volume.target.replaceAll(\"\\\\\", \"/\");\n    const target =\n      destination === \"~\"\n        ? home\n        : destination.startsWith(\"~/\")\n          ? posix.resolve(home, destination.slice(2))\n          : posix.resolve(root, destination);\n    if (config.repositoryMode === \"isolated\")\n      await validateIsolatedMount(context, source, target);\n    if (info.isFile() && !internal.includes(volume)) {\n      const parent = posix.dirname(target);\n      invariant(\n        parent === home || parent.startsWith(home + \"/\"),\n        \"File mounts must live inside the agent home; mount the containing directory for other destinations\",\n      );\n      for (let folder = parent; folder !== home; folder = posix.dirname(folder))\n        fileParents.add(folder);\n    }\n    invariant(\n      !source.includes(\",\") && !target.includes(\",\"),\n      \"Mount paths cannot contain commas\",\n    );\n    if (config.label === false || platform !== \"linux\")\n      volumes.push(\n        \"--mount\",\n        `type=bind,source=${source},target=${target}${volume.readOnly ? \",readonly\" : \"\"}`,\n      );\n    else\n      volumes.push(\n        \"--volume\",\n        `${source}:${target}:${volume.readOnly ? \"ro,\" : \"\"}${config.label ?? \"z\"}`,\n      );\n  }\n\n  return { env, volumes, fileParents };\n}\n"]}

package/dist/providers/container-network.d.ts

@@ -0,0 +1,2 @@
+import type { ContainerOptions } from "./container.types.ts";
+export declare function containerNetworks(options: ContainerOptions): readonly string[];

package/dist/providers/container-network.js

@@ -0,0 +1,14 @@
+import { validateEgress } from "../domain/egress.js";
+import { invariant } from "../domain/errors.js";
+export function containerNetworks(options) {
+    const policy = validateEgress(options.egress);
+    const networks = typeof options.networks === "string"
+        ? [options.networks]
+        : [...(options.networks ?? [])];
+    if (!policy)
+        return networks;
+    invariant(policy.mode === "deny-all", "Docker/Podman cannot enforce egress allowlists; use Vercel or an externally managed firewall");
+    invariant(networks.every((network) => network === "none"), "egress deny-all conflicts with configured networks");
+    return ["none"];
+}
+//# sourceMappingURL=container-network.js.map

package/dist/providers/container-network.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"container-network.js","sourceRoot":"","sources":["../../src/providers/container-network.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,cAAc,EAAE,MAAM,qBAAqB,CAAC;AACrD,OAAO,EAAE,SAAS,EAAE,MAAM,qBAAqB,CAAC;AAGhD,MAAM,UAAU,iBAAiB,CAC/B,OAAyB;IAEzB,MAAM,MAAM,GAAG,cAAc,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;IAC9C,MAAM,QAAQ,GACZ,OAAO,OAAO,CAAC,QAAQ,KAAK,QAAQ;QAClC,CAAC,CAAC,CAAC,OAAO,CAAC,QAAQ,CAAC;QACpB,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,QAAQ,IAAI,EAAE,CAAC,CAAC,CAAC;IACpC,IAAI,CAAC,MAAM;QAAE,OAAO,QAAQ,CAAC;IAC7B,SAAS,CACP,MAAM,CAAC,IAAI,KAAK,UAAU,EAC1B,8FAA8F,CAC/F,CAAC;IACF,SAAS,CACP,QAAQ,CAAC,KAAK,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,OAAO,KAAK,MAAM,CAAC,EAC/C,oDAAoD,CACrD,CAAC;IACF,OAAO,CAAC,MAAM,CAAC,CAAC;AAClB,CAAC","sourcesContent":["import { validateEgress } from \"../domain/egress.ts\";\nimport { invariant } from \"../domain/errors.ts\";\nimport type { ContainerOptions } from \"./container.types.ts\";\n\nexport function containerNetworks(\n  options: ContainerOptions,\n): readonly string[] {\n  const policy = validateEgress(options.egress);\n  const networks =\n    typeof options.networks === \"string\"\n      ? [options.networks]\n      : [...(options.networks ?? [])];\n  if (!policy) return networks;\n  invariant(\n    policy.mode === \"deny-all\",\n    \"Docker/Podman cannot enforce egress allowlists; use Vercel or an externally managed firewall\",\n  );\n  invariant(\n    networks.every((network) => network === \"none\"),\n    \"egress deny-all conflicts with configured networks\",\n  );\n  return [\"none\"];\n}\n"]}

package/dist/providers/container-plan.js

@@ -18,10 +18,14 @@ export function containerPlan({ config, engine, user, root, name, image, volumes
             ]
             : []),
         "--workdir",
-        root,
+        config.repositoryMode === "isolated" ? "/" : root,
         "--cap-drop",
         "ALL",
-        ...(fileParents.size ? ["--cap-add", "CHOWN"] : []),
+        ...(fileParents.size ||
+            config.caches?.length ||
+            config.repositoryMode === "isolated"
+            ? ["--cap-add", "CHOWN"]
+            : []),
         "--security-opt",
         "no-new-privileges",
         "--tmpfs",

package/dist/providers/container-plan.js.map

@@ -1 +1 @@
-{"version":3,"file":"container-plan.js","sourceRoot":"","sources":["../../src/providers/container-plan.ts"],"names":[],"mappings":"AAEA,MAAM,UAAU,aAAa,CAAC,EAC5B,MAAM,EACN,MAAM,EACN,IAAI,EACJ,IAAI,EACJ,IAAI,EACJ,KAAK,EACL,OAAO,EACP,WAAW,GACU;IACrB,MAAM,QAAQ,GACZ,OAAO,MAAM,CAAC,QAAQ,KAAK,QAAQ;QACjC,CAAC,CAAC,CAAC,MAAM,CAAC,QAAQ,CAAC;QACnB,CAAC,CAAC,CAAC,MAAM,CAAC,QAAQ,IAAI,EAAE,CAAC,CAAC;IAC9B,MAAM,IAAI,GAAG;QACX,QAAQ;QACR,QAAQ;QACR,IAAI;QACJ,QAAQ;QACR,QAAQ;QACR,GAAG,IAAI,CAAC,GAAG,IAAI,IAAI,CAAC,GAAG,EAAE;QACzB,GAAG,CAAC,MAAM,KAAK,QAAQ;YACvB,MAAM,CAAC,MAAM,KAAK,KAAK;YACvB,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,MAAM,KAAK,SAAS,CAAC;YACvD,CAAC,CAAC;gBACE,UAAU;gBACV,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,eAAe,IAAI,CAAC,GAAG,QAAQ,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC,SAAS;aACpE;YACH,CAAC,CAAC,EAAE,CAAC;QACP,WAAW;QACX,IAAI;QACJ,YAAY;QACZ,KAAK;QACL,GAAG,CAAC,WAAW,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,WAAW,EAAE,OAAO,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;QACnD,gBAAgB;QAChB,mBAAmB;QACnB,SAAS;QACT,MAAM,KAAK,QAAQ;YACjB,CAAC,CAAC,0BAA0B;YAC5B,CAAC,CAAC,sBAAsB,WAAW,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,QAAQ,WAAW,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,YAAY;QAC5G,GAAG,OAAO;QACV,GAAG,QAAQ,CAAC,OAAO,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC,WAAW,EAAE,OAAO,CAAC,CAAC;QACxD,GAAG,CAAC,MAAM,CAAC,MAAM,IAAI,EAAE,CAAC,CAAC,OAAO,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC,aAAa,EAAE,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC;QAC3E,GAAG,CAAC,MAAM,CAAC,OAAO,IAAI,EAAE,CAAC,CAAC,OAAO,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,UAAU,EAAE,MAAM,CAAC,CAAC;QACnE,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;QACvD,GAAG,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,UAAU,EAAE,GAAG,MAAM,CAAC,QAAQ,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;QAC/D,cAAc;QACd,OAAO;QACP,KAAK;QACL,UAAU;KACX,CAAC;IAEF,OAAO,IAAI,CAAC;AACd,CAAC","sourcesContent":["import type { ContainerPlanOptions } from \"./container.types.ts\";\n\nexport function containerPlan({\n  config,\n  engine,\n  user,\n  root,\n  name,\n  image,\n  volumes,\n  fileParents,\n}: ContainerPlanOptions): string[] {\n  const networks =\n    typeof config.networks === \"string\"\n      ? [config.networks]\n      : (config.networks ?? []);\n  const args = [\n    \"create\",\n    \"--name\",\n    name,\n    \"--init\",\n    \"--user\",\n    `${user.uid}:${user.gid}`,\n    ...(engine === \"podman\" &&\n    config.userns !== false &&\n    (process.getuid?.() !== 0 || config.userns === \"keep-id\")\n      ? [\n          \"--userns\",\n          config.user ? `keep-id:uid=${user.uid},gid=${user.gid}` : \"keep-id\",\n        ]\n      : []),\n    \"--workdir\",\n    root,\n    \"--cap-drop\",\n    \"ALL\",\n    ...(fileParents.size ? [\"--cap-add\", \"CHOWN\"] : []),\n    \"--security-opt\",\n    \"no-new-privileges\",\n    \"--tmpfs\",\n    engine === \"podman\"\n      ? \"/home/agent:rw,mode=1777\"\n      : `/home/agent:rw,uid=${fileParents.size ? 0 : user.uid},gid=${fileParents.size ? 0 : user.gid},mode=0700`,\n    ...volumes,\n    ...networks.flatMap((network) => [\"--network\", network]),\n    ...(config.groups ?? []).flatMap((group) => [\"--group-add\", String(group)]),\n    ...(config.devices ?? []).flatMap((device) => [\"--device\", device]),\n    ...(config.cpus ? [\"--cpus\", String(config.cpus)] : []),\n    ...(config.memoryMb ? [\"--memory\", `${config.memoryMb}m`] : []),\n    \"--entrypoint\",\n    \"sleep\",\n    image,\n    \"infinity\",\n  ];\n\n  return args;\n}\n"]}
+{"version":3,"file":"container-plan.js","sourceRoot":"","sources":["../../src/providers/container-plan.ts"],"names":[],"mappings":"AAEA,MAAM,UAAU,aAAa,CAAC,EAC5B,MAAM,EACN,MAAM,EACN,IAAI,EACJ,IAAI,EACJ,IAAI,EACJ,KAAK,EACL,OAAO,EACP,WAAW,GACU;IACrB,MAAM,QAAQ,GACZ,OAAO,MAAM,CAAC,QAAQ,KAAK,QAAQ;QACjC,CAAC,CAAC,CAAC,MAAM,CAAC,QAAQ,CAAC;QACnB,CAAC,CAAC,CAAC,MAAM,CAAC,QAAQ,IAAI,EAAE,CAAC,CAAC;IAC9B,MAAM,IAAI,GAAG;QACX,QAAQ;QACR,QAAQ;QACR,IAAI;QACJ,QAAQ;QACR,QAAQ;QACR,GAAG,IAAI,CAAC,GAAG,IAAI,IAAI,CAAC,GAAG,EAAE;QACzB,GAAG,CAAC,MAAM,KAAK,QAAQ;YACvB,MAAM,CAAC,MAAM,KAAK,KAAK;YACvB,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,MAAM,KAAK,SAAS,CAAC;YACvD,CAAC,CAAC;gBACE,UAAU;gBACV,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,eAAe,IAAI,CAAC,GAAG,QAAQ,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC,SAAS;aACpE;YACH,CAAC,CAAC,EAAE,CAAC;QACP,WAAW;QACX,MAAM,CAAC,cAAc,KAAK,UAAU,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI;QACjD,YAAY;QACZ,KAAK;QACL,GAAG,CAAC,WAAW,CAAC,IAAI;YACpB,MAAM,CAAC,MAAM,EAAE,MAAM;YACrB,MAAM,CAAC,cAAc,KAAK,UAAU;YAClC,CAAC,CAAC,CAAC,WAAW,EAAE,OAAO,CAAC;YACxB,CAAC,CAAC,EAAE,CAAC;QACP,gBAAgB;QAChB,mBAAmB;QACnB,SAAS;QACT,MAAM,KAAK,QAAQ;YACjB,CAAC,CAAC,0BAA0B;YAC5B,CAAC,CAAC,sBAAsB,WAAW,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,QAAQ,WAAW,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,YAAY;QAC5G,GAAG,OAAO;QACV,GAAG,QAAQ,CAAC,OAAO,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC,WAAW,EAAE,OAAO,CAAC,CAAC;QACxD,GAAG,CAAC,MAAM,CAAC,MAAM,IAAI,EAAE,CAAC,CAAC,OAAO,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC,aAAa,EAAE,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC;QAC3E,GAAG,CAAC,MAAM,CAAC,OAAO,IAAI,EAAE,CAAC,CAAC,OAAO,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,UAAU,EAAE,MAAM,CAAC,CAAC;QACnE,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;QACvD,GAAG,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,UAAU,EAAE,GAAG,MAAM,CAAC,QAAQ,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;QAC/D,cAAc;QACd,OAAO;QACP,KAAK;QACL,UAAU;KACX,CAAC;IAEF,OAAO,IAAI,CAAC;AACd,CAAC","sourcesContent":["import type { ContainerPlanOptions } from \"./container.types.ts\";\n\nexport function containerPlan({\n  config,\n  engine,\n  user,\n  root,\n  name,\n  image,\n  volumes,\n  fileParents,\n}: ContainerPlanOptions): string[] {\n  const networks =\n    typeof config.networks === \"string\"\n      ? [config.networks]\n      : (config.networks ?? []);\n  const args = [\n    \"create\",\n    \"--name\",\n    name,\n    \"--init\",\n    \"--user\",\n    `${user.uid}:${user.gid}`,\n    ...(engine === \"podman\" &&\n    config.userns !== false &&\n    (process.getuid?.() !== 0 || config.userns === \"keep-id\")\n      ? [\n          \"--userns\",\n          config.user ? `keep-id:uid=${user.uid},gid=${user.gid}` : \"keep-id\",\n        ]\n      : []),\n    \"--workdir\",\n    config.repositoryMode === \"isolated\" ? \"/\" : root,\n    \"--cap-drop\",\n    \"ALL\",\n    ...(fileParents.size ||\n    config.caches?.length ||\n    config.repositoryMode === \"isolated\"\n      ? [\"--cap-add\", \"CHOWN\"]\n      : []),\n    \"--security-opt\",\n    \"no-new-privileges\",\n    \"--tmpfs\",\n    engine === \"podman\"\n      ? \"/home/agent:rw,mode=1777\"\n      : `/home/agent:rw,uid=${fileParents.size ? 0 : user.uid},gid=${fileParents.size ? 0 : user.gid},mode=0700`,\n    ...volumes,\n    ...networks.flatMap((network) => [\"--network\", network]),\n    ...(config.groups ?? []).flatMap((group) => [\"--group-add\", String(group)]),\n    ...(config.devices ?? []).flatMap((device) => [\"--device\", device]),\n    ...(config.cpus ? [\"--cpus\", String(config.cpus)] : []),\n    ...(config.memoryMb ? [\"--memory\", `${config.memoryMb}m`] : []),\n    \"--entrypoint\",\n    \"sleep\",\n    image,\n    \"infinity\",\n  ];\n\n  return args;\n}\n"]}

package/dist/providers/container.constants.d.ts

@@ -5,6 +5,7 @@ export declare const containerDefaults: Readonly<{
     cleanupMs: 10000;
     retainBytes: 65536;
     root: "/workspace";
+    isolatedRoot: "/tmp/outpost/workspace";
     home: "/home/agent";
     minimumMemoryMb: 64;
 }>;

package/dist/providers/container.constants.js

@@ -5,6 +5,7 @@ export const containerDefaults = Object.freeze({
     cleanupMs: 10_000,
     retainBytes: 65_536,
     root: "/workspace",
+    isolatedRoot: "/tmp/outpost/workspace",
     home: "/home/agent",
     minimumMemoryMb: 64,
 });

package/dist/providers/container.constants.js.map

@@ -1 +1 @@
-{"version":3,"file":"container.constants.js","sourceRoot":"","sources":["../../src/providers/container.constants.ts"],"names":[],"mappings":"AAAA,MAAM,CAAC,MAAM,iBAAiB,GAAG,MAAM,CAAC,MAAM,CAAC;IAC7C,GAAG,EAAE,IAAI;IACT,GAAG,EAAE,IAAI;IACT,UAAU,EAAE,MAAM;IAClB,SAAS,EAAE,MAAM;IACjB,WAAW,EAAE,MAAM;IACnB,IAAI,EAAE,YAAY;IAClB,IAAI,EAAE,aAAa;IACnB,eAAe,EAAE,EAAE;CACpB,CAAC,CAAC","sourcesContent":["export const containerDefaults = Object.freeze({\n  uid: 1000,\n  gid: 1000,\n  deadlineMs: 60_000,\n  cleanupMs: 10_000,\n  retainBytes: 65_536,\n  root: \"/workspace\",\n  home: \"/home/agent\",\n  minimumMemoryMb: 64,\n});\n"]}
+{"version":3,"file":"container.constants.js","sourceRoot":"","sources":["../../src/providers/container.constants.ts"],"names":[],"mappings":"AAAA,MAAM,CAAC,MAAM,iBAAiB,GAAG,MAAM,CAAC,MAAM,CAAC;IAC7C,GAAG,EAAE,IAAI;IACT,GAAG,EAAE,IAAI;IACT,UAAU,EAAE,MAAM;IAClB,SAAS,EAAE,MAAM;IACjB,WAAW,EAAE,MAAM;IACnB,IAAI,EAAE,YAAY;IAClB,YAAY,EAAE,wBAAwB;IACtC,IAAI,EAAE,aAAa;IACnB,eAAe,EAAE,EAAE;CACpB,CAAC,CAAC","sourcesContent":["export const containerDefaults = Object.freeze({\n  uid: 1000,\n  gid: 1000,\n  deadlineMs: 60_000,\n  cleanupMs: 10_000,\n  retainBytes: 65_536,\n  root: \"/workspace\",\n  isolatedRoot: \"/tmp/outpost/workspace\",\n  home: \"/home/agent\",\n  minimumMemoryMb: 64,\n});\n"]}

package/dist/providers/container.js

@@ -1,9 +1,12 @@
 import { execFileSync } from "node:child_process";
 import { randomUUID } from "node:crypto";
 import { basename } from "node:path";
+import { containerNetworks } from "./container-network.js";
 import { invariant } from "../domain/errors.js";
 import { executeProcess, quote, requireSuccess, } from "../infrastructure/process.js";
 import { registerCleanup } from "../infrastructure/shutdown.js";
+import { cacheMounts, validateCaches } from "./container-cache.js";
+import { cacheCreateOptions, cacheDefaults, } from "./container-cache.constants.js";
 import { containerCommand } from "./container-command.js";
 import { containerFiles } from "./container-files.js";
 import { containerMounts } from "./container-mounts.js";
@@ -16,7 +19,15 @@ export function imageName(repository) {
         .replace(/[^a-z0-9_.-]/g, "-") || "workspace"}`;
 }
 export function containerProvider(engine, options = {}, executor = executeProcess, platform = process.platform) {
-    const config = { ...options };
+    const config = {
+        ...options,
+        networks: containerNetworks(options),
+        caches: (options.caches ?? []).map((cache) => ({ ...cache })),
+    };
+    invariant(config.repositoryMode === undefined ||
+        config.repositoryMode === "mounted" ||
+        config.repositoryMode === "isolated", "repositoryMode must be mounted or isolated");
+    validateCaches(config);
     if (config.cpus !== undefined)
         invariant(Number.isFinite(config.cpus) && config.cpus > 0, "cpus must be positive");
     if (config.memoryMb !== undefined)
@@ -24,7 +35,7 @@ export function containerProvider(engine, options = {}, executor = executeProces
             config.memoryMb >= containerDefaults.minimumMemoryMb, "memoryMb must be at least 64");
     return {
         name: engine,
-        placement: "mounted",
+        placement: config.repositoryMode === "isolated" ? "remote" : "mounted",
         variables: { ...config.variables },
         async acquire(context) {
             context.signal?.throwIfAborted();
@@ -45,8 +56,13 @@ export function containerProvider(engine, options = {}, executor = executeProces
                 ...extra,
             }, executor);
             await containerPreflight(engine, platform, call, config, image, user);
-            const root = containerDefaults.root, home = containerDefaults.home;
+            const root = config.repositoryMode === "isolated"
+                ? containerDefaults.isolatedRoot
+                : containerDefaults.root, home = containerDefaults.home;
             const { env, volumes, fileParents } = await containerMounts(context, config, platform, root, home);
+            const caches = await cacheMounts(config.caches ?? [], context.repository, image, user);
+            for (const cache of caches)
+                volumes.push("--volume", `${cache.volume}:${cache.target}:nocopy`);
             const args = containerPlan({
                 config,
                 engine,
@@ -72,10 +88,31 @@ export function containerProvider(engine, options = {}, executor = executeProces
                 return releasing;
             };
             try {
+                for (const cache of caches)
+                    await call([
+                        "volume",
+                        "create",
+                        ...cacheCreateOptions[engine],
+                        "--label",
+                        `${cacheDefaults.label}=true`,
+                        cache.volume,
+                    ], context.signal ? { signal: context.signal } : {});
                 await call(args, {
                     ...(context.signal ? { signal: context.signal } : {}),
                 });
                 await call(["start", name], context.signal ? { signal: context.signal } : {});
+                for (const cache of caches) {
+                    await call([
+                        "exec",
+                        "--user",
+                        "0:0",
+                        name,
+                        "chown",
+                        `${user.uid}:${user.gid}`,
+                        cache.target,
+                    ], context.signal ? { signal: context.signal } : {});
+                    await call(["exec", name, "chmod", "700", cache.target], context.signal ? { signal: context.signal } : {});
+                }
                 for (const parent of fileParents)
                     await call([
                         "exec",
@@ -96,6 +133,16 @@ export function containerProvider(engine, options = {}, executor = executeProces
                         `${user.uid}:${user.gid}`,
                         home,
                     ]);
+                if (config.repositoryMode === "isolated")
+                    await call([
+                        "exec",
+                        "--user",
+                        "0:0",
+                        name,
+                        "sh",
+                        "-c",
+                        `mkdir -p ${quote(root)} && chmod 700 ${quote(root)} /tmp/outpost && chown ${user.uid}:${user.gid} ${quote(root)} /tmp/outpost`,
+                    ], context.signal ? { signal: context.signal } : {});
                 await call([
                     "exec",
                     name,

package/dist/providers/container.js.map

@@ -1 +1 @@
-{"version":3,"file":"container.js","sourceRoot":"","sources":["../../src/providers/container.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,YAAY,EAAE,MAAM,oBAAoB,CAAC;AAClD,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACzC,OAAO,EAAE,QAAQ,EAAE,MAAM,WAAW,CAAC;AAErC,OAAO,EAAE,SAAS,EAAE,MAAM,qBAAqB,CAAC;AAEhD,OAAO,EACL,cAAc,EACd,KAAK,EACL,cAAc,GACf,MAAM,8BAA8B,CAAC;AAEtC,OAAO,EAAE,eAAe,EAAE,MAAM,+BAA+B,CAAC;AAChE,OAAO,EAAE,gBAAgB,EAAE,MAAM,wBAAwB,CAAC;AAC1D,OAAO,EAAE,cAAc,EAAE,MAAM,sBAAsB,CAAC;AACtD,OAAO,EAAE,eAAe,EAAE,MAAM,uBAAuB,CAAC;AACxD,OAAO,EAAE,aAAa,EAAE,MAAM,qBAAqB,CAAC;AACpD,OAAO,EAAE,kBAAkB,EAAE,MAAM,0BAA0B,CAAC;AAC9D,OAAO,EAAE,iBAAiB,EAAE,MAAM,0BAA0B,CAAC;AAK7D,MAAM,UAAU,SAAS,CAAC,UAAkB;IAC1C,OAAO,WACL,QAAQ,CAAC,UAAU,CAAC;SACjB,WAAW,EAAE;SACb,OAAO,CAAC,eAAe,EAAE,GAAG,CAAC,IAAI,WACtC,EAAE,CAAC;AACL,CAAC;AAED,MAAM,UAAU,iBAAiB,CAC/B,MAAuB,EACvB,UAA4B,EAAE,EAC9B,WAAqB,cAAc,EACnC,WAA4B,OAAO,CAAC,QAAQ;IAE5C,MAAM,MAAM,GAAG,EAAE,GAAG,OAAO,EAAE,CAAC;IAC9B,IAAI,MAAM,CAAC,IAAI,KAAK,SAAS;QAC3B,SAAS,CACP,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,MAAM,CAAC,IAAI,GAAG,CAAC,EAC/C,uBAAuB,CACxB,CAAC;IACJ,IAAI,MAAM,CAAC,QAAQ,KAAK,SAAS;QAC/B,SAAS,CACP,MAAM,CAAC,aAAa,CAAC,MAAM,CAAC,QAAQ,CAAC;YACnC,MAAM,CAAC,QAAQ,IAAI,iBAAiB,CAAC,eAAe,EACtD,8BAA8B,CAC/B,CAAC;IACJ,OAAO;QACL,IAAI,EAAE,MAAM;QACZ,SAAS,EAAE,SAAS;QACpB,SAAS,EAAE,EAAE,GAAG,MAAM,CAAC,SAAS,EAAE;QAClC,KAAK,CAAC,OAAO,CAAC,OAAO;YACnB,OAAO,CAAC,MAAM,EAAE,cAAc,EAAE,CAAC;YACjC,MAAM,IAAI,GAAG,WAAW,UAAU,EAAE,EAAE,CAAC;YACvC,MAAM,KAAK,GAAG,MAAM,CAAC,KAAK,IAAI,SAAS,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC;YAC5D,MAAM,IAAI,GAAG,MAAM,CAAC,IAAI,IAAI;gBAC1B,GAAG,EAAE,OAAO,CAAC,MAAM,EAAE,EAAE,IAAI,iBAAiB,CAAC,GAAG;gBAChD,GAAG,EAAE,OAAO,CAAC,MAAM,EAAE,EAAE,IAAI,iBAAiB,CAAC,GAAG;aACjD,CAAC;YACF,SAAS,CACP,MAAM,CAAC,SAAS,CAAC,IAAI,CAAC,GAAG,CAAC;gBACxB,IAAI,CAAC,GAAG,IAAI,CAAC;gBACb,MAAM,CAAC,SAAS,CAAC,IAAI,CAAC,GAAG,CAAC;gBAC1B,IAAI,CAAC,GAAG,IAAI,CAAC,EACf,wBAAwB,CACzB,CAAC;YACF,MAAM,IAAI,GAAG,CAAC,IAAuB,EAAE,QAA0B,EAAE,EAAE,EAAE,CACrE,cAAc,CACZ;gBACE,UAAU,EAAE,MAAM;gBAClB,SAAS,EAAE,IAAI;gBACf,UAAU,EAAE,iBAAiB,CAAC,UAAU;gBACxC,GAAG,KAAK;aACT,EACD,QAAQ,CACT,CAAC;YACJ,MAAM,kBAAkB,CAAC,MAAM,EAAE,QAAQ,EAAE,IAAI,EAAE,MAAM,EAAE,KAAK,EAAE,IAAI,CAAC,CAAC;YACtE,MAAM,IAAI,GAAG,iBAAiB,CAAC,IAAI,EACjC,IAAI,GAAG,iBAAiB,CAAC,IAAI,CAAC;YAChC,MAAM,EAAE,GAAG,EAAE,OAAO,EAAE,WAAW,EAAE,GAAG,MAAM,eAAe,CACzD,OAAO,EACP,MAAM,EACN,QAAQ,EACR,IAAI,EACJ,IAAI,CACL,CAAC;YACF,MAAM,IAAI,GAAG,aAAa,CAAC;gBACzB,MAAM;gBACN,MAAM;gBACN,IAAI;gBACJ,IAAI;gBACJ,IAAI;gBACJ,KAAK;gBACL,OAAO;gBACP,WAAW;aACZ,CAAC,CAAC;YACH,IAAI,MAAM,GAAG,KAAK,EAChB,SAAoC,CAAC;YACvC,IAAI,UAAU,GAAG,GAAG,EAAE,GAAE,CAAC,CAAC;YAC1B,MAAM,OAAO,GAAG,GAAkB,EAAE;gBAClC,MAAM,GAAG,IAAI,CAAC;gBACd,SAAS,KAAK,IAAI,CAAC,CAAC,IAAI,EAAE,SAAS,EAAE,IAAI,CAAC,CAAC;qBACxC,IAAI,CAAC,GAAG,EAAE;oBACT,UAAU,EAAE,CAAC;gBACf,CAAC,CAAC;qBACD,KAAK,CAAC,CAAC,KAAK,EAAE,EAAE;oBACf,SAAS,GAAG,SAAS,CAAC;oBACtB,MAAM,KAAK,CAAC;gBACd,CAAC,CAAC,CAAC;gBACL,OAAO,SAAS,CAAC;YACnB,CAAC,CAAC;YACF,IAAI,CAAC;gBACH,MAAM,IAAI,CAAC,IAAI,EAAE;oBACf,GAAG,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,OAAO,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;iBACtD,CAAC,CAAC;gBACH,MAAM,IAAI,CACR,CAAC,OAAO,EAAE,IAAI,CAAC,EACf,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,OAAO,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CACjD,CAAC;gBACF,KAAK,MAAM,MAAM,IAAI,WAAW;oBAC9B,MAAM,IAAI,CAAC;wBACT,MAAM;wBACN,QAAQ;wBACR,KAAK;wBACL,IAAI;wBACJ,IAAI;wBACJ,IAAI;wBACJ,YAAY,KAAK,CAAC,MAAM,CAAC,aAAa,IAAI,CAAC,GAAG,IAAI,IAAI,CAAC,GAAG,IAAI,KAAK,CAAC,MAAM,CAAC,EAAE;qBAC9E,CAAC,CAAC;gBACL,IAAI,WAAW,CAAC,IAAI;oBAClB,MAAM,IAAI,CAAC;wBACT,MAAM;wBACN,QAAQ;wBACR,KAAK;wBACL,IAAI;wBACJ,OAAO;wBACP,GAAG,IAAI,CAAC,GAAG,IAAI,IAAI,CAAC,GAAG,EAAE;wBACzB,IAAI;qBACL,CAAC,CAAC;gBACL,MAAM,IAAI,CAAC;oBACT,MAAM;oBACN,IAAI;oBACJ,IAAI;oBACJ,IAAI;oBACJ,qHAAqH;iBACtH,CAAC,CAAC;YACL,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,IAAI,CAAC;oBACH,MAAM,OAAO,EAAE,CAAC;gBAClB,CAAC;gBAAC,OAAO,OAAO,EAAE,CAAC;oBACjB,MAAM,IAAI,cAAc,CACtB,CAAC,KAAK,EAAE,OAAO,CAAC,EAChB,yCAAyC,CAC1C,CAAC;gBACJ,CAAC;gBACD,MAAM,KAAK,CAAC;YACd,CAAC;YACD,UAAU,GAAG,eAAe,CAAC,OAAO,EAAE,GAAG,EAAE;gBACzC,IAAI,CAAC,MAAM;oBACT,YAAY,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,SAAS,EAAE,IAAI,CAAC,EAAE;wBAC5C,OAAO,EAAE,iBAAiB,CAAC,SAAS;wBACpC,KAAK,EAAE,QAAQ;wBACf,WAAW,EAAE,IAAI;qBAClB,CAAC,CAAC;YACP,CAAC,CAAC,CAAC;YACH,OAAO;gBACL,IAAI;gBACJ,IAAI;gBACJ,MAAM,EAAE,gBAAgB,CAAC;oBACvB,MAAM;oBACN,MAAM;oBACN,QAAQ;oBACR,IAAI;oBACJ,IAAI;oBACJ,GAAG;oBACH,IAAI;oBACJ,QAAQ,EAAE,GAAG,EAAE,CAAC,MAAM;iBACvB,CAAC;gBACF,GAAG,cAAc,CAAC;oBAChB,MAAM;oBACN,MAAM;oBACN,QAAQ;oBACR,IAAI;oBACJ,IAAI;oBACJ,GAAG;oBACH,IAAI;oBACJ,QAAQ,EAAE,GAAG,EAAE,CAAC,MAAM;iBACvB,CAAC;gBACF,OAAO;aACR,CAAC;QACJ,CAAC;KACF,CAAC;AACJ,CAAC","sourcesContent":["import { execFileSync } from \"node:child_process\";\nimport { randomUUID } from \"node:crypto\";\nimport { basename } from \"node:path\";\nimport type { Command } from \"../domain/command.types.ts\";\nimport { invariant } from \"../domain/errors.ts\";\nimport type { SandboxProvider } from \"../domain/sandbox.types.ts\";\nimport {\n  executeProcess,\n  quote,\n  requireSuccess,\n} from \"../infrastructure/process.ts\";\nimport type { Executor } from \"../infrastructure/process.types.ts\";\nimport { registerCleanup } from \"../infrastructure/shutdown.ts\";\nimport { containerCommand } from \"./container-command.ts\";\nimport { containerFiles } from \"./container-files.ts\";\nimport { containerMounts } from \"./container-mounts.ts\";\nimport { containerPlan } from \"./container-plan.ts\";\nimport { containerPreflight } from \"./container-preflight.ts\";\nimport { containerDefaults } from \"./container.constants.ts\";\nimport type { ContainerEngine, ContainerOptions } from \"./container.types.ts\";\n\nexport type { ContainerOptions } from \"./container.types.ts\";\n\nexport function imageName(repository: string): string {\n  return `outpost:${\n    basename(repository)\n      .toLowerCase()\n      .replace(/[^a-z0-9_.-]/g, \"-\") || \"workspace\"\n  }`;\n}\n\nexport function containerProvider(\n  engine: ContainerEngine,\n  options: ContainerOptions = {},\n  executor: Executor = executeProcess,\n  platform: NodeJS.Platform = process.platform,\n): SandboxProvider {\n  const config = { ...options };\n  if (config.cpus !== undefined)\n    invariant(\n      Number.isFinite(config.cpus) && config.cpus > 0,\n      \"cpus must be positive\",\n    );\n  if (config.memoryMb !== undefined)\n    invariant(\n      Number.isSafeInteger(config.memoryMb) &&\n        config.memoryMb >= containerDefaults.minimumMemoryMb,\n      \"memoryMb must be at least 64\",\n    );\n  return {\n    name: engine,\n    placement: \"mounted\",\n    variables: { ...config.variables },\n    async acquire(context) {\n      context.signal?.throwIfAborted();\n      const name = `outpost-${randomUUID()}`;\n      const image = config.image ?? imageName(context.repository);\n      const user = config.user ?? {\n        uid: process.getuid?.() ?? containerDefaults.uid,\n        gid: process.getgid?.() ?? containerDefaults.gid,\n      };\n      invariant(\n        Number.isInteger(user.uid) &&\n          user.uid >= 0 &&\n          Number.isInteger(user.gid) &&\n          user.gid >= 0,\n        \"Invalid container user\",\n      );\n      const call = (args: readonly string[], extra: Partial<Command> = {}) =>\n        requireSuccess(\n          {\n            executable: engine,\n            arguments: args,\n            deadlineMs: containerDefaults.deadlineMs,\n            ...extra,\n          },\n          executor,\n        );\n      await containerPreflight(engine, platform, call, config, image, user);\n      const root = containerDefaults.root,\n        home = containerDefaults.home;\n      const { env, volumes, fileParents } = await containerMounts(\n        context,\n        config,\n        platform,\n        root,\n        home,\n      );\n      const args = containerPlan({\n        config,\n        engine,\n        user,\n        root,\n        name,\n        image,\n        volumes,\n        fileParents,\n      });\n      let closed = false,\n        releasing: Promise<void> | undefined;\n      let unregister = () => {};\n      const release = (): Promise<void> => {\n        closed = true;\n        releasing ??= call([\"rm\", \"--force\", name])\n          .then(() => {\n            unregister();\n          })\n          .catch((error) => {\n            releasing = undefined;\n            throw error;\n          });\n        return releasing;\n      };\n      try {\n        await call(args, {\n          ...(context.signal ? { signal: context.signal } : {}),\n        });\n        await call(\n          [\"start\", name],\n          context.signal ? { signal: context.signal } : {},\n        );\n        for (const parent of fileParents)\n          await call([\n            \"exec\",\n            \"--user\",\n            \"0:0\",\n            name,\n            \"sh\",\n            \"-c\",\n            `mkdir -p ${quote(parent)} && chown ${user.uid}:${user.gid} ${quote(parent)}`,\n          ]);\n        if (fileParents.size)\n          await call([\n            \"exec\",\n            \"--user\",\n            \"0:0\",\n            name,\n            \"chown\",\n            `${user.uid}:${user.gid}`,\n            home,\n          ]);\n        await call([\n          \"exec\",\n          name,\n          \"sh\",\n          \"-c\",\n          \"command -v setsid >/dev/null && command -v kill >/dev/null && command -v tar >/dev/null && command -v cp >/dev/null\",\n        ]);\n      } catch (cause) {\n        try {\n          await release();\n        } catch (cleanup) {\n          throw new AggregateError(\n            [cause, cleanup],\n            \"Sandbox provisioning and cleanup failed\",\n          );\n        }\n        throw cause;\n      }\n      unregister = registerCleanup(release, () => {\n        if (!closed)\n          execFileSync(engine, [\"rm\", \"--force\", name], {\n            timeout: containerDefaults.cleanupMs,\n            stdio: \"ignore\",\n            windowsHide: true,\n          });\n      });\n      return {\n        root,\n        home,\n        invoke: containerCommand({\n          engine,\n          config,\n          executor,\n          root,\n          name,\n          env,\n          call,\n          isClosed: () => closed,\n        }),\n        ...containerFiles({\n          engine,\n          config,\n          executor,\n          root,\n          name,\n          env,\n          call,\n          isClosed: () => closed,\n        }),\n        release,\n      };\n    },\n  };\n}\n"]}
+{"version":3,"file":"container.js","sourceRoot":"","sources":["../../src/providers/container.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,YAAY,EAAE,MAAM,oBAAoB,CAAC;AAClD,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACzC,OAAO,EAAE,QAAQ,EAAE,MAAM,WAAW,CAAC;AAErC,OAAO,EAAE,iBAAiB,EAAE,MAAM,wBAAwB,CAAC;AAC3D,OAAO,EAAE,SAAS,EAAE,MAAM,qBAAqB,CAAC;AAEhD,OAAO,EACL,cAAc,EACd,KAAK,EACL,cAAc,GACf,MAAM,8BAA8B,CAAC;AAEtC,OAAO,EAAE,eAAe,EAAE,MAAM,+BAA+B,CAAC;AAChE,OAAO,EAAE,WAAW,EAAE,cAAc,EAAE,MAAM,sBAAsB,CAAC;AACnE,OAAO,EACL,kBAAkB,EAClB,aAAa,GACd,MAAM,gCAAgC,CAAC;AACxC,OAAO,EAAE,gBAAgB,EAAE,MAAM,wBAAwB,CAAC;AAC1D,OAAO,EAAE,cAAc,EAAE,MAAM,sBAAsB,CAAC;AACtD,OAAO,EAAE,eAAe,EAAE,MAAM,uBAAuB,CAAC;AACxD,OAAO,EAAE,aAAa,EAAE,MAAM,qBAAqB,CAAC;AACpD,OAAO,EAAE,kBAAkB,EAAE,MAAM,0BAA0B,CAAC;AAC9D,OAAO,EAAE,iBAAiB,EAAE,MAAM,0BAA0B,CAAC;AAK7D,MAAM,UAAU,SAAS,CAAC,UAAkB;IAC1C,OAAO,WACL,QAAQ,CAAC,UAAU,CAAC;SACjB,WAAW,EAAE;SACb,OAAO,CAAC,eAAe,EAAE,GAAG,CAAC,IAAI,WACtC,EAAE,CAAC;AACL,CAAC;AAED,MAAM,UAAU,iBAAiB,CAC/B,MAAuB,EACvB,UAA4B,EAAE,EAC9B,WAAqB,cAAc,EACnC,WAA4B,OAAO,CAAC,QAAQ;IAE5C,MAAM,MAAM,GAAG;QACb,GAAG,OAAO;QACV,QAAQ,EAAE,iBAAiB,CAAC,OAAO,CAAC;QACpC,MAAM,EAAE,CAAC,OAAO,CAAC,MAAM,IAAI,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC,EAAE,GAAG,KAAK,EAAE,CAAC,CAAC;KAC9D,CAAC;IACF,SAAS,CACP,MAAM,CAAC,cAAc,KAAK,SAAS;QACjC,MAAM,CAAC,cAAc,KAAK,SAAS;QACnC,MAAM,CAAC,cAAc,KAAK,UAAU,EACtC,4CAA4C,CAC7C,CAAC;IACF,cAAc,CAAC,MAAM,CAAC,CAAC;IACvB,IAAI,MAAM,CAAC,IAAI,KAAK,SAAS;QAC3B,SAAS,CACP,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,MAAM,CAAC,IAAI,GAAG,CAAC,EAC/C,uBAAuB,CACxB,CAAC;IACJ,IAAI,MAAM,CAAC,QAAQ,KAAK,SAAS;QAC/B,SAAS,CACP,MAAM,CAAC,aAAa,CAAC,MAAM,CAAC,QAAQ,CAAC;YACnC,MAAM,CAAC,QAAQ,IAAI,iBAAiB,CAAC,eAAe,EACtD,8BAA8B,CAC/B,CAAC;IACJ,OAAO;QACL,IAAI,EAAE,MAAM;QACZ,SAAS,EAAE,MAAM,CAAC,cAAc,KAAK,UAAU,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,SAAS;QACtE,SAAS,EAAE,EAAE,GAAG,MAAM,CAAC,SAAS,EAAE;QAClC,KAAK,CAAC,OAAO,CAAC,OAAO;YACnB,OAAO,CAAC,MAAM,EAAE,cAAc,EAAE,CAAC;YACjC,MAAM,IAAI,GAAG,WAAW,UAAU,EAAE,EAAE,CAAC;YACvC,MAAM,KAAK,GAAG,MAAM,CAAC,KAAK,IAAI,SAAS,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC;YAC5D,MAAM,IAAI,GAAG,MAAM,CAAC,IAAI,IAAI;gBAC1B,GAAG,EAAE,OAAO,CAAC,MAAM,EAAE,EAAE,IAAI,iBAAiB,CAAC,GAAG;gBAChD,GAAG,EAAE,OAAO,CAAC,MAAM,EAAE,EAAE,IAAI,iBAAiB,CAAC,GAAG;aACjD,CAAC;YACF,SAAS,CACP,MAAM,CAAC,SAAS,CAAC,IAAI,CAAC,GAAG,CAAC;gBACxB,IAAI,CAAC,GAAG,IAAI,CAAC;gBACb,MAAM,CAAC,SAAS,CAAC,IAAI,CAAC,GAAG,CAAC;gBAC1B,IAAI,CAAC,GAAG,IAAI,CAAC,EACf,wBAAwB,CACzB,CAAC;YACF,MAAM,IAAI,GAAG,CAAC,IAAuB,EAAE,QAA0B,EAAE,EAAE,EAAE,CACrE,cAAc,CACZ;gBACE,UAAU,EAAE,MAAM;gBAClB,SAAS,EAAE,IAAI;gBACf,UAAU,EAAE,iBAAiB,CAAC,UAAU;gBACxC,GAAG,KAAK;aACT,EACD,QAAQ,CACT,CAAC;YACJ,MAAM,kBAAkB,CAAC,MAAM,EAAE,QAAQ,EAAE,IAAI,EAAE,MAAM,EAAE,KAAK,EAAE,IAAI,CAAC,CAAC;YACtE,MAAM,IAAI,GACN,MAAM,CAAC,cAAc,KAAK,UAAU;gBAClC,CAAC,CAAC,iBAAiB,CAAC,YAAY;gBAChC,CAAC,CAAC,iBAAiB,CAAC,IAAI,EAC5B,IAAI,GAAG,iBAAiB,CAAC,IAAI,CAAC;YAChC,MAAM,EAAE,GAAG,EAAE,OAAO,EAAE,WAAW,EAAE,GAAG,MAAM,eAAe,CACzD,OAAO,EACP,MAAM,EACN,QAAQ,EACR,IAAI,EACJ,IAAI,CACL,CAAC;YACF,MAAM,MAAM,GAAG,MAAM,WAAW,CAC9B,MAAM,CAAC,MAAM,IAAI,EAAE,EACnB,OAAO,CAAC,UAAU,EAClB,KAAK,EACL,IAAI,CACL,CAAC;YACF,KAAK,MAAM,KAAK,IAAI,MAAM;gBACxB,OAAO,CAAC,IAAI,CAAC,UAAU,EAAE,GAAG,KAAK,CAAC,MAAM,IAAI,KAAK,CAAC,MAAM,SAAS,CAAC,CAAC;YACrE,MAAM,IAAI,GAAG,aAAa,CAAC;gBACzB,MAAM;gBACN,MAAM;gBACN,IAAI;gBACJ,IAAI;gBACJ,IAAI;gBACJ,KAAK;gBACL,OAAO;gBACP,WAAW;aACZ,CAAC,CAAC;YACH,IAAI,MAAM,GAAG,KAAK,EAChB,SAAoC,CAAC;YACvC,IAAI,UAAU,GAAG,GAAG,EAAE,GAAE,CAAC,CAAC;YAC1B,MAAM,OAAO,GAAG,GAAkB,EAAE;gBAClC,MAAM,GAAG,IAAI,CAAC;gBACd,SAAS,KAAK,IAAI,CAAC,CAAC,IAAI,EAAE,SAAS,EAAE,IAAI,CAAC,CAAC;qBACxC,IAAI,CAAC,GAAG,EAAE;oBACT,UAAU,EAAE,CAAC;gBACf,CAAC,CAAC;qBACD,KAAK,CAAC,CAAC,KAAK,EAAE,EAAE;oBACf,SAAS,GAAG,SAAS,CAAC;oBACtB,MAAM,KAAK,CAAC;gBACd,CAAC,CAAC,CAAC;gBACL,OAAO,SAAS,CAAC;YACnB,CAAC,CAAC;YACF,IAAI,CAAC;gBACH,KAAK,MAAM,KAAK,IAAI,MAAM;oBACxB,MAAM,IAAI,CACR;wBACE,QAAQ;wBACR,QAAQ;wBACR,GAAG,kBAAkB,CAAC,MAAM,CAAC;wBAC7B,SAAS;wBACT,GAAG,aAAa,CAAC,KAAK,OAAO;wBAC7B,KAAK,CAAC,MAAM;qBACb,EACD,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,OAAO,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CACjD,CAAC;gBACJ,MAAM,IAAI,CAAC,IAAI,EAAE;oBACf,GAAG,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,OAAO,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;iBACtD,CAAC,CAAC;gBACH,MAAM,IAAI,CACR,CAAC,OAAO,EAAE,IAAI,CAAC,EACf,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,OAAO,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CACjD,CAAC;gBACF,KAAK,MAAM,KAAK,IAAI,MAAM,EAAE,CAAC;oBAC3B,MAAM,IAAI,CACR;wBACE,MAAM;wBACN,QAAQ;wBACR,KAAK;wBACL,IAAI;wBACJ,OAAO;wBACP,GAAG,IAAI,CAAC,GAAG,IAAI,IAAI,CAAC,GAAG,EAAE;wBACzB,KAAK,CAAC,MAAM;qBACb,EACD,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,OAAO,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CACjD,CAAC;oBACF,MAAM,IAAI,CACR,CAAC,MAAM,EAAE,IAAI,EAAE,OAAO,EAAE,KAAK,EAAE,KAAK,CAAC,MAAM,CAAC,EAC5C,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,OAAO,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CACjD,CAAC;gBACJ,CAAC;gBACD,KAAK,MAAM,MAAM,IAAI,WAAW;oBAC9B,MAAM,IAAI,CAAC;wBACT,MAAM;wBACN,QAAQ;wBACR,KAAK;wBACL,IAAI;wBACJ,IAAI;wBACJ,IAAI;wBACJ,YAAY,KAAK,CAAC,MAAM,CAAC,aAAa,IAAI,CAAC,GAAG,IAAI,IAAI,CAAC,GAAG,IAAI,KAAK,CAAC,MAAM,CAAC,EAAE;qBAC9E,CAAC,CAAC;gBACL,IAAI,WAAW,CAAC,IAAI;oBAClB,MAAM,IAAI,CAAC;wBACT,MAAM;wBACN,QAAQ;wBACR,KAAK;wBACL,IAAI;wBACJ,OAAO;wBACP,GAAG,IAAI,CAAC,GAAG,IAAI,IAAI,CAAC,GAAG,EAAE;wBACzB,IAAI;qBACL,CAAC,CAAC;gBACL,IAAI,MAAM,CAAC,cAAc,KAAK,UAAU;oBACtC,MAAM,IAAI,CACR;wBACE,MAAM;wBACN,QAAQ;wBACR,KAAK;wBACL,IAAI;wBACJ,IAAI;wBACJ,IAAI;wBACJ,YAAY,KAAK,CAAC,IAAI,CAAC,iBAAiB,KAAK,CAAC,IAAI,CAAC,0BAA0B,IAAI,CAAC,GAAG,IAAI,IAAI,CAAC,GAAG,IAAI,KAAK,CAAC,IAAI,CAAC,eAAe;qBAChI,EACD,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,OAAO,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CACjD,CAAC;gBACJ,MAAM,IAAI,CAAC;oBACT,MAAM;oBACN,IAAI;oBACJ,IAAI;oBACJ,IAAI;oBACJ,qHAAqH;iBACtH,CAAC,CAAC;YACL,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,IAAI,CAAC;oBACH,MAAM,OAAO,EAAE,CAAC;gBAClB,CAAC;gBAAC,OAAO,OAAO,EAAE,CAAC;oBACjB,MAAM,IAAI,cAAc,CACtB,CAAC,KAAK,EAAE,OAAO,CAAC,EAChB,yCAAyC,CAC1C,CAAC;gBACJ,CAAC;gBACD,MAAM,KAAK,CAAC;YACd,CAAC;YACD,UAAU,GAAG,eAAe,CAAC,OAAO,EAAE,GAAG,EAAE;gBACzC,IAAI,CAAC,MAAM;oBACT,YAAY,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,SAAS,EAAE,IAAI,CAAC,EAAE;wBAC5C,OAAO,EAAE,iBAAiB,CAAC,SAAS;wBACpC,KAAK,EAAE,QAAQ;wBACf,WAAW,EAAE,IAAI;qBAClB,CAAC,CAAC;YACP,CAAC,CAAC,CAAC;YACH,OAAO;gBACL,IAAI;gBACJ,IAAI;gBACJ,MAAM,EAAE,gBAAgB,CAAC;oBACvB,MAAM;oBACN,MAAM;oBACN,QAAQ;oBACR,IAAI;oBACJ,IAAI;oBACJ,GAAG;oBACH,IAAI;oBACJ,QAAQ,EAAE,GAAG,EAAE,CAAC,MAAM;iBACvB,CAAC;gBACF,GAAG,cAAc,CAAC;oBAChB,MAAM;oBACN,MAAM;oBACN,QAAQ;oBACR,IAAI;oBACJ,IAAI;oBACJ,GAAG;oBACH,IAAI;oBACJ,QAAQ,EAAE,GAAG,EAAE,CAAC,MAAM;iBACvB,CAAC;gBACF,OAAO;aACR,CAAC;QACJ,CAAC;KACF,CAAC;AACJ,CAAC","sourcesContent":["import { execFileSync } from \"node:child_process\";\nimport { randomUUID } from \"node:crypto\";\nimport { basename } from \"node:path\";\nimport type { Command } from \"../domain/command.types.ts\";\nimport { containerNetworks } from \"./container-network.ts\";\nimport { invariant } from \"../domain/errors.ts\";\nimport type { SandboxProvider } from \"../domain/sandbox.types.ts\";\nimport {\n  executeProcess,\n  quote,\n  requireSuccess,\n} from \"../infrastructure/process.ts\";\nimport type { Executor } from \"../infrastructure/process.types.ts\";\nimport { registerCleanup } from \"../infrastructure/shutdown.ts\";\nimport { cacheMounts, validateCaches } from \"./container-cache.ts\";\nimport {\n  cacheCreateOptions,\n  cacheDefaults,\n} from \"./container-cache.constants.ts\";\nimport { containerCommand } from \"./container-command.ts\";\nimport { containerFiles } from \"./container-files.ts\";\nimport { containerMounts } from \"./container-mounts.ts\";\nimport { containerPlan } from \"./container-plan.ts\";\nimport { containerPreflight } from \"./container-preflight.ts\";\nimport { containerDefaults } from \"./container.constants.ts\";\nimport type { ContainerEngine, ContainerOptions } from \"./container.types.ts\";\n\nexport type { ContainerOptions } from \"./container.types.ts\";\n\nexport function imageName(repository: string): string {\n  return `outpost:${\n    basename(repository)\n      .toLowerCase()\n      .replace(/[^a-z0-9_.-]/g, \"-\") || \"workspace\"\n  }`;\n}\n\nexport function containerProvider(\n  engine: ContainerEngine,\n  options: ContainerOptions = {},\n  executor: Executor = executeProcess,\n  platform: NodeJS.Platform = process.platform,\n): SandboxProvider {\n  const config = {\n    ...options,\n    networks: containerNetworks(options),\n    caches: (options.caches ?? []).map((cache) => ({ ...cache })),\n  };\n  invariant(\n    config.repositoryMode === undefined ||\n      config.repositoryMode === \"mounted\" ||\n      config.repositoryMode === \"isolated\",\n    \"repositoryMode must be mounted or isolated\",\n  );\n  validateCaches(config);\n  if (config.cpus !== undefined)\n    invariant(\n      Number.isFinite(config.cpus) && config.cpus > 0,\n      \"cpus must be positive\",\n    );\n  if (config.memoryMb !== undefined)\n    invariant(\n      Number.isSafeInteger(config.memoryMb) &&\n        config.memoryMb >= containerDefaults.minimumMemoryMb,\n      \"memoryMb must be at least 64\",\n    );\n  return {\n    name: engine,\n    placement: config.repositoryMode === \"isolated\" ? \"remote\" : \"mounted\",\n    variables: { ...config.variables },\n    async acquire(context) {\n      context.signal?.throwIfAborted();\n      const name = `outpost-${randomUUID()}`;\n      const image = config.image ?? imageName(context.repository);\n      const user = config.user ?? {\n        uid: process.getuid?.() ?? containerDefaults.uid,\n        gid: process.getgid?.() ?? containerDefaults.gid,\n      };\n      invariant(\n        Number.isInteger(user.uid) &&\n          user.uid >= 0 &&\n          Number.isInteger(user.gid) &&\n          user.gid >= 0,\n        \"Invalid container user\",\n      );\n      const call = (args: readonly string[], extra: Partial<Command> = {}) =>\n        requireSuccess(\n          {\n            executable: engine,\n            arguments: args,\n            deadlineMs: containerDefaults.deadlineMs,\n            ...extra,\n          },\n          executor,\n        );\n      await containerPreflight(engine, platform, call, config, image, user);\n      const root =\n          config.repositoryMode === \"isolated\"\n            ? containerDefaults.isolatedRoot\n            : containerDefaults.root,\n        home = containerDefaults.home;\n      const { env, volumes, fileParents } = await containerMounts(\n        context,\n        config,\n        platform,\n        root,\n        home,\n      );\n      const caches = await cacheMounts(\n        config.caches ?? [],\n        context.repository,\n        image,\n        user,\n      );\n      for (const cache of caches)\n        volumes.push(\"--volume\", `${cache.volume}:${cache.target}:nocopy`);\n      const args = containerPlan({\n        config,\n        engine,\n        user,\n        root,\n        name,\n        image,\n        volumes,\n        fileParents,\n      });\n      let closed = false,\n        releasing: Promise<void> | undefined;\n      let unregister = () => {};\n      const release = (): Promise<void> => {\n        closed = true;\n        releasing ??= call([\"rm\", \"--force\", name])\n          .then(() => {\n            unregister();\n          })\n          .catch((error) => {\n            releasing = undefined;\n            throw error;\n          });\n        return releasing;\n      };\n      try {\n        for (const cache of caches)\n          await call(\n            [\n              \"volume\",\n              \"create\",\n              ...cacheCreateOptions[engine],\n              \"--label\",\n              `${cacheDefaults.label}=true`,\n              cache.volume,\n            ],\n            context.signal ? { signal: context.signal } : {},\n          );\n        await call(args, {\n          ...(context.signal ? { signal: context.signal } : {}),\n        });\n        await call(\n          [\"start\", name],\n          context.signal ? { signal: context.signal } : {},\n        );\n        for (const cache of caches) {\n          await call(\n            [\n              \"exec\",\n              \"--user\",\n              \"0:0\",\n              name,\n              \"chown\",\n              `${user.uid}:${user.gid}`,\n              cache.target,\n            ],\n            context.signal ? { signal: context.signal } : {},\n          );\n          await call(\n            [\"exec\", name, \"chmod\", \"700\", cache.target],\n            context.signal ? { signal: context.signal } : {},\n          );\n        }\n        for (const parent of fileParents)\n          await call([\n            \"exec\",\n            \"--user\",\n            \"0:0\",\n            name,\n            \"sh\",\n            \"-c\",\n            `mkdir -p ${quote(parent)} && chown ${user.uid}:${user.gid} ${quote(parent)}`,\n          ]);\n        if (fileParents.size)\n          await call([\n            \"exec\",\n            \"--user\",\n            \"0:0\",\n            name,\n            \"chown\",\n            `${user.uid}:${user.gid}`,\n            home,\n          ]);\n        if (config.repositoryMode === \"isolated\")\n          await call(\n            [\n              \"exec\",\n              \"--user\",\n              \"0:0\",\n              name,\n              \"sh\",\n              \"-c\",\n              `mkdir -p ${quote(root)} && chmod 700 ${quote(root)} /tmp/outpost && chown ${user.uid}:${user.gid} ${quote(root)} /tmp/outpost`,\n            ],\n            context.signal ? { signal: context.signal } : {},\n          );\n        await call([\n          \"exec\",\n          name,\n          \"sh\",\n          \"-c\",\n          \"command -v setsid >/dev/null && command -v kill >/dev/null && command -v tar >/dev/null && command -v cp >/dev/null\",\n        ]);\n      } catch (cause) {\n        try {\n          await release();\n        } catch (cleanup) {\n          throw new AggregateError(\n            [cause, cleanup],\n            \"Sandbox provisioning and cleanup failed\",\n          );\n        }\n        throw cause;\n      }\n      unregister = registerCleanup(release, () => {\n        if (!closed)\n          execFileSync(engine, [\"rm\", \"--force\", name], {\n            timeout: containerDefaults.cleanupMs,\n            stdio: \"ignore\",\n            windowsHide: true,\n          });\n      });\n      return {\n        root,\n        home,\n        invoke: containerCommand({\n          engine,\n          config,\n          executor,\n          root,\n          name,\n          env,\n          call,\n          isClosed: () => closed,\n        }),\n        ...containerFiles({\n          engine,\n          config,\n          executor,\n          root,\n          name,\n          env,\n          call,\n          isClosed: () => closed,\n        }),\n        release,\n      };\n    },\n  };\n}\n"]}

package/dist/providers/container.types.d.ts

@@ -1,7 +1,12 @@
+import type { EgressPolicy } from "../domain/egress.types.ts";
 import type { Command, CommandResult, Variables } from "../domain/command.types.ts";
 import type { Volume } from "../domain/sandbox.types.ts";
 import type { Executor } from "../infrastructure/process.types.ts";
+import type { DependencyCache } from "./container-cache.types.ts";
 export interface ContainerOptions {
+    readonly egress?: EgressPolicy;
+    readonly repositoryMode?: "mounted" | "isolated";
+    readonly caches?: readonly DependencyCache[];
     readonly image?: string;
     readonly user?: {
         readonly uid: number;

package/dist/providers/container.types.js.map

@@ -1 +1 @@
-{"version":3,"file":"container.types.js","sourceRoot":"","sources":["../../src/providers/container.types.ts"],"names":[],"mappings":"","sourcesContent":["import type {\n  Command,\n  CommandResult,\n  Variables,\n} from \"../domain/command.types.ts\";\nimport type { Volume } from \"../domain/sandbox.types.ts\";\nimport type { Executor } from \"../infrastructure/process.types.ts\";\n\nexport interface ContainerOptions {\n  readonly image?: string;\n  readonly user?: { readonly uid: number; readonly gid: number };\n  readonly volumes?: readonly Volume[];\n  readonly variables?: Variables;\n  readonly networks?: string | readonly string[];\n  readonly groups?: readonly (string | number)[];\n  readonly devices?: readonly string[];\n  readonly cpus?: number;\n  readonly memoryMb?: number;\n  readonly label?: \"z\" | \"Z\" | false;\n  readonly retain?: number;\n  readonly userns?: \"keep-id\" | false;\n}\n\nexport type ContainerEngine = \"docker\" | \"podman\";\nexport type ContainerCall = (\n  args: readonly string[],\n  extra?: Partial<Command>,\n) => Promise<CommandResult>;\nexport interface ContainerRuntime {\n  readonly engine: ContainerEngine;\n  readonly config: ContainerOptions;\n  readonly executor: Executor;\n  readonly root: string;\n  readonly name: string;\n  readonly env: Record<string, string>;\n  readonly call: ContainerCall;\n  readonly isClosed: () => boolean;\n}\nexport interface ContainerMounts {\n  readonly env: Record<string, string>;\n  readonly volumes: string[];\n  readonly fileParents: Set<string>;\n}\n\nexport interface ContainerUser {\n  readonly uid: number;\n  readonly gid: number;\n}\nexport interface ContainerPlanOptions {\n  readonly config: ContainerOptions;\n  readonly engine: ContainerEngine;\n  readonly user: ContainerUser;\n  readonly root: string;\n  readonly name: string;\n  readonly image: string;\n  readonly volumes: readonly string[];\n  readonly fileParents: ReadonlySet<string>;\n}\n"]}
+{"version":3,"file":"container.types.js","sourceRoot":"","sources":["../../src/providers/container.types.ts"],"names":[],"mappings":"","sourcesContent":["import type { EgressPolicy } from \"../domain/egress.types.ts\";\nimport type {\n  Command,\n  CommandResult,\n  Variables,\n} from \"../domain/command.types.ts\";\nimport type { Volume } from \"../domain/sandbox.types.ts\";\nimport type { Executor } from \"../infrastructure/process.types.ts\";\nimport type { DependencyCache } from \"./container-cache.types.ts\";\n\nexport interface ContainerOptions {\n  readonly egress?: EgressPolicy;\n  readonly repositoryMode?: \"mounted\" | \"isolated\";\n  readonly caches?: readonly DependencyCache[];\n  readonly image?: string;\n  readonly user?: { readonly uid: number; readonly gid: number };\n  readonly volumes?: readonly Volume[];\n  readonly variables?: Variables;\n  readonly networks?: string | readonly string[];\n  readonly groups?: readonly (string | number)[];\n  readonly devices?: readonly string[];\n  readonly cpus?: number;\n  readonly memoryMb?: number;\n  readonly label?: \"z\" | \"Z\" | false;\n  readonly retain?: number;\n  readonly userns?: \"keep-id\" | false;\n}\n\nexport type ContainerEngine = \"docker\" | \"podman\";\nexport type ContainerCall = (\n  args: readonly string[],\n  extra?: Partial<Command>,\n) => Promise<CommandResult>;\nexport interface ContainerRuntime {\n  readonly engine: ContainerEngine;\n  readonly config: ContainerOptions;\n  readonly executor: Executor;\n  readonly root: string;\n  readonly name: string;\n  readonly env: Record<string, string>;\n  readonly call: ContainerCall;\n  readonly isClosed: () => boolean;\n}\nexport interface ContainerMounts {\n  readonly env: Record<string, string>;\n  readonly volumes: string[];\n  readonly fileParents: Set<string>;\n}\n\nexport interface ContainerUser {\n  readonly uid: number;\n  readonly gid: number;\n}\nexport interface ContainerPlanOptions {\n  readonly config: ContainerOptions;\n  readonly engine: ContainerEngine;\n  readonly user: ContainerUser;\n  readonly root: string;\n  readonly name: string;\n  readonly image: string;\n  readonly volumes: readonly string[];\n  readonly fileParents: ReadonlySet<string>;\n}\n"]}

package/dist/providers/daytona-command.js

@@ -1,15 +1,15 @@
+import { setTimeout } from "node:timers/promises";
 import { randomUUID } from "node:crypto";
 import { OutpostError } from "../domain/errors.js";
 import { interruptible } from "../infrastructure/abort.js";
 import { quote } from "../infrastructure/process.js";
 import { cloudDefaults } from "./cloud.constants.js";
+import { daytonaTerminal } from "./daytona-terminal.js";
 export function daytonaCommand(runtime) {
     const { sandbox, root, options, context, isClosed } = runtime;
     return async (command) => {
         if (isClosed())
             throw new OutpostError("provider", "Cloud sandbox is closed");
-        if (command.interactive)
-            throw new OutpostError("provider", "Interactive terminals require a mounted or local provider");
         const signal = command.signal
             ? AbortSignal.any([
                 command.signal,
@@ -17,6 +17,8 @@ export function daytonaCommand(runtime) {
             ])
             : AbortSignal.timeout(command.deadlineMs ?? cloudDefaults.deadlineMs);
         signal.throwIfAborted();
+        if (command.interactive)
+            return daytonaTerminal(runtime, command, signal);
         const id = `outpost-${randomUUID()}`;
         const input = `/tmp/${id}.stdin`;
         const pid = `/tmp/${id}.pid`;
@@ -59,10 +61,12 @@ export function daytonaCommand(runtime) {
             if (cancellation)
                 await cancellation;
             signal.throwIfAborted();
-            const result = await sandbox.process.getSessionCommand(id, response.cmdId);
-            if (result.exitCode === undefined)
-                throw new OutpostError("provider", "Cloud command ended without an exit status");
-            return { status: result.exitCode, ...output };
+            while (true) {
+                const result = await interruptible(sandbox.process.getSessionCommand(id, response.cmdId), signal);
+                if (result.exitCode !== undefined)
+                    return { status: result.exitCode, ...output };
+                await setTimeout(cloudDefaults.pollMs, undefined, { signal });
+            }
         }
         catch (cause) {
             cancel();

package/dist/providers/daytona-command.js.map

@@ -1 +1 @@
-{"version":3,"file":"daytona-command.js","sourceRoot":"","sources":["../../src/providers/daytona-command.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACzC,OAAO,EAAE,YAAY,EAAE,MAAM,qBAAqB,CAAC;AAEnD,OAAO,EAAE,aAAa,EAAE,MAAM,4BAA4B,CAAC;AAC3D,OAAO,EAAE,KAAK,EAAE,MAAM,8BAA8B,CAAC;AACrD,OAAO,EAAE,aAAa,EAAE,MAAM,sBAAsB,CAAC;AAGrD,MAAM,UAAU,cAAc,CAC5B,OAAuB;IAEvB,MAAM,EAAE,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,OAAO,EAAE,QAAQ,EAAE,GAAG,OAAO,CAAC;IAC9D,OAAO,KAAK,EAAE,OAAO,EAAE,EAAE;QACvB,IAAI,QAAQ,EAAE;YACZ,MAAM,IAAI,YAAY,CAAC,UAAU,EAAE,yBAAyB,CAAC,CAAC;QAChE,IAAI,OAAO,CAAC,WAAW;YACrB,MAAM,IAAI,YAAY,CACpB,UAAU,EACV,2DAA2D,CAC5D,CAAC;QACJ,MAAM,MAAM,GAAG,OAAO,CAAC,MAAM;YAC3B,CAAC,CAAC,WAAW,CAAC,GAAG,CAAC;gBACd,OAAO,CAAC,MAAM;gBACd,WAAW,CAAC,OAAO,CAAC,OAAO,CAAC,UAAU,IAAI,aAAa,CAAC,UAAU,CAAC;aACpE,CAAC;YACJ,CAAC,CAAC,WAAW,CAAC,OAAO,CAAC,OAAO,CAAC,UAAU,IAAI,aAAa,CAAC,UAAU,CAAC,CAAC;QACxE,MAAM,CAAC,cAAc,EAAE,CAAC;QACxB,MAAM,EAAE,GAAG,WAAW,UAAU,EAAE,EAAE,CAAC;QACrC,MAAM,KAAK,GAAG,QAAQ,EAAE,QAAQ,CAAC;QACjC,MAAM,GAAG,GAAG,QAAQ,EAAE,MAAM,CAAC;QAC7B,IAAI,OAAO,CAAC,KAAK,KAAK,SAAS;YAC7B,MAAM,OAAO,CAAC,EAAE,CAAC,UAAU,CAAC,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,KAAK,CAAC,CAAC;QACjE,MAAM,SAAS,GAAG,EAAE,GAAG,OAAO,CAAC,SAAS,EAAE,GAAG,OAAO,CAAC,SAAS,EAAE,CAAC;QACjE,MAAM,OAAO,GAAG;YACd,GAAG,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,MAAM,EAAE,IAAI,EAAE,IAAI,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;YACjD,OAAO,CAAC,UAAU;YAClB,GAAG,CAAC,OAAO,CAAC,SAAS,IAAI,EAAE,CAAC;SAC7B;aACE,GAAG,CAAC,KAAK,CAAC;aACV,IAAI,CAAC,GAAG,CAAC,CAAC;QACb,MAAM,MAAM,GAAG,MAAM,KAAK,CAAC,OAAO,CAAC,SAAS,IAAI,IAAI,CAAC,gBAAgB,MAAM,CAAC,OAAO,CACjF,SAAS,CACV;aACE,GAAG,CAAC,CAAC,CAAC,GAAG,EAAE,KAAK,CAAC,EAAE,EAAE,CAAC,KAAK,CAAC,GAAG,GAAG,IAAI,KAAK,EAAE,CAAC,CAAC;aAC/C,IAAI,CACH,GAAG,CACJ,iBAAiB,KAAK,CAAC,aAAa,KAAK,CAAC,GAAG,CAAC,eAAe,KAAK,CAAC,GAAG,GAAG,SAAS,CAAC,sBAAsB,OAAO,GAAG,OAAO,CAAC,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,MAAM,KAAK,CAAC,KAAK,CAAC,EAAE,EAAE,CAAC,EAAE,CAAC;QACnL,MAAM,MAAM,GAAG,EAAE,MAAM,EAAE,EAAE,EAAE,MAAM,EAAE,EAAE,EAAE,CAAC;QAC1C,IAAI,YAA0C,CAAC;QAC/C,MAAM,MAAM,GAAG,GAAG,EAAE;YAClB,YAAY,KAAK,OAAO,CAAC,OAAO,CAAC,cAAc,CAC7C,SAAS,KAAK,CAAC,GAAG,GAAG,SAAS,CAAC,aAAa,KAAK,CAAC,GAAG,CAAC,8BAA8B,KAAK,CAAC,GAAG,CAAC,2BAA2B,CAC1H,CAAC;YACF,KAAK,YAAY,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC;QAC3C,CAAC,CAAC;QACF,MAAM,OAAO,CAAC,OAAO,CAAC,aAAa,CAAC,EAAE,CAAC,CAAC;QACxC,IAAI,CAAC;YACH,MAAM,CAAC,gBAAgB,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC;YACzD,IAAI,MAAM,CAAC,OAAO;gBAAE,MAAM,EAAE,CAAC;YAC7B,MAAM,CAAC,cAAc,EAAE,CAAC;YACxB,MAAM,QAAQ,GAAG,MAAM,aAAa,CAClC,OAAO,CAAC,OAAO,CAAC,qBAAqB,CAAC,EAAE,EAAE;gBACxC,OAAO,EAAE,MAAM;gBACf,KAAK,EAAE,IAAI;aACZ,CAAC,EACF,MAAM,CACP,CAAC;YACF,IAAI,CAAC,QAAQ,CAAC,KAAK;gBACjB,MAAM,IAAI,YAAY,CACpB,UAAU,EACV,+CAA+C,CAChD,CAAC;YACJ,MAAM,OAAO,GAAG,CAAC,OAA4B,EAAE,EAAE,CAAC,CAAC,KAAa,EAAE,EAAE;gBAClE,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,OAAO,CAAC,GAAG,KAAK,CAAC,CAAC,KAAK,CAC/C,CAAC,CAAC,OAAO,CAAC,MAAM,IAAI,OAAO,CAAC,MAAM,IAAI,aAAa,CAAC,WAAW,CAAC,CACjE,CAAC;gBACF,OAAO,CAAC,OAAO,EAAE,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC;YACpC,CAAC,CAAC;YACF,MAAM,aAAa,CACjB,OAAO,CAAC,OAAO,CAAC,qBAAqB,CACnC,EAAE,EACF,QAAQ,CAAC,KAAK,EACd,OAAO,CAAC,QAAQ,CAAC,EACjB,OAAO,CAAC,QAAQ,CAAC,CAClB,EACD,MAAM,CACP,CAAC;YACF,IAAI,YAAY;gBAAE,MAAM,YAAY,CAAC;YACrC,MAAM,CAAC,cAAc,EAAE,CAAC;YACxB,MAAM,MAAM,GAAG,MAAM,OAAO,CAAC,OAAO,CAAC,iBAAiB,CACpD,EAAE,EACF,QAAQ,CAAC,KAAK,CACf,CAAC;YACF,IAAI,MAAM,CAAC,QAAQ,KAAK,SAAS;gBAC/B,MAAM,IAAI,YAAY,CACpB,UAAU,EACV,4CAA4C,CAC7C,CAAC;YACJ,OAAO,EAAE,MAAM,EAAE,MAAM,CAAC,QAAQ,EAAE,GAAG,MAAM,EAAE,CAAC;QAChD,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,MAAM,EAAE,CAAC;YACT,IAAI,CAAC;gBACH,MAAM,aAAa,CACjB,YAAa,EACb,WAAW,CAAC,OAAO,CAAC,aAAa,CAAC,cAAc,CAAC,CAClD,CAAC;YACJ,CAAC;YAAC,OAAO,OAAO,EAAE,CAAC;gBACjB,MAAM,IAAI,cAAc,CACtB,CAAC,KAAK,EAAE,OAAO,CAAC,EAChB,2CAA2C,CAC5C,CAAC;YACJ,CAAC;YACD,MAAM,KAAK,CAAC;QACd,CAAC;gBAAS,CAAC;YACT,MAAM,CAAC,mBAAmB,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;YAC5C,MAAM,OAAO,CAAC,OAAO,CAAC,aAAa,CAAC,EAAE,CAAC,CAAC;YACxC,MAAM,OAAO,CAAC,OAAO;iBAClB,cAAc,CAAC,SAAS,KAAK,CAAC,KAAK,CAAC,IAAI,KAAK,CAAC,GAAG,CAAC,EAAE,CAAC;iBACrD,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC;QAC5B,CAAC;IACH,CAAC,CAAC;AACJ,CAAC","sourcesContent":["import { randomUUID } from \"node:crypto\";\nimport { OutpostError } from \"../domain/errors.ts\";\nimport type { SandboxLease } from \"../domain/sandbox.types.ts\";\nimport { interruptible } from \"../infrastructure/abort.ts\";\nimport { quote } from \"../infrastructure/process.ts\";\nimport { cloudDefaults } from \"./cloud.constants.ts\";\nimport type { DaytonaRuntime } from \"./daytona.types.ts\";\n\nexport function daytonaCommand(\n  runtime: DaytonaRuntime,\n): SandboxLease[\"invoke\"] {\n  const { sandbox, root, options, context, isClosed } = runtime;\n  return async (command) => {\n    if (isClosed())\n      throw new OutpostError(\"provider\", \"Cloud sandbox is closed\");\n    if (command.interactive)\n      throw new OutpostError(\n        \"provider\",\n        \"Interactive terminals require a mounted or local provider\",\n      );\n    const signal = command.signal\n      ? AbortSignal.any([\n          command.signal,\n          AbortSignal.timeout(command.deadlineMs ?? cloudDefaults.deadlineMs),\n        ])\n      : AbortSignal.timeout(command.deadlineMs ?? cloudDefaults.deadlineMs);\n    signal.throwIfAborted();\n    const id = `outpost-${randomUUID()}`;\n    const input = `/tmp/${id}.stdin`;\n    const pid = `/tmp/${id}.pid`;\n    if (command.stdin !== undefined)\n      await sandbox.fs.uploadFile(Buffer.from(command.stdin), input);\n    const variables = { ...context.variables, ...command.variables };\n    const program = [\n      ...(command.elevated ? [\"sudo\", \"-n\", \"--\"] : []),\n      command.executable,\n      ...(command.arguments ?? []),\n    ]\n      .map(quote)\n      .join(\" \");\n    const script = `cd ${quote(command.directory ?? root)} && exec env ${Object.entries(\n      variables,\n    )\n      .map(([key, value]) => quote(`${key}=${value}`))\n      .join(\n        \" \",\n      )} setsid sh -c ${quote(`echo $$ > ${quote(pid)}; test ! -f ${quote(pid + \".cancel\")} || exit 130; exec ${program}${command.stdin === undefined ? \"\" : ` < ${quote(input)}`}`)}`;\n    const output = { stdout: \"\", stderr: \"\" };\n    let cancellation: Promise<unknown> | undefined;\n    const cancel = () => {\n      cancellation ??= sandbox.process.executeCommand(\n        `touch ${quote(pid + \".cancel\")}; if [ -f ${quote(pid)} ]; then kill -KILL -$(cat ${quote(pid)}) 2>/dev/null || true; fi`,\n      );\n      void cancellation.catch(() => undefined);\n    };\n    await sandbox.process.createSession(id);\n    try {\n      signal.addEventListener(\"abort\", cancel, { once: true });\n      if (signal.aborted) cancel();\n      signal.throwIfAborted();\n      const response = await interruptible(\n        sandbox.process.executeSessionCommand(id, {\n          command: script,\n          async: true,\n        }),\n        signal,\n      );\n      if (!response.cmdId)\n        throw new OutpostError(\n          \"provider\",\n          \"Cloud provider returned no command identifier\",\n        );\n      const consume = (channel: \"stdout\" | \"stderr\") => (chunk: string) => {\n        output[channel] = (output[channel] + chunk).slice(\n          -(command.retain ?? options.retain ?? cloudDefaults.retainBytes),\n        );\n        command.observe?.(channel, chunk);\n      };\n      await interruptible(\n        sandbox.process.getSessionCommandLogs(\n          id,\n          response.cmdId,\n          consume(\"stdout\"),\n          consume(\"stderr\"),\n        ),\n        signal,\n      );\n      if (cancellation) await cancellation;\n      signal.throwIfAborted();\n      const result = await sandbox.process.getSessionCommand(\n        id,\n        response.cmdId,\n      );\n      if (result.exitCode === undefined)\n        throw new OutpostError(\n          \"provider\",\n          \"Cloud command ended without an exit status\",\n        );\n      return { status: result.exitCode, ...output };\n    } catch (cause) {\n      cancel();\n      try {\n        await interruptible(\n          cancellation!,\n          AbortSignal.timeout(cloudDefaults.cancellationMs),\n        );\n      } catch (cleanup) {\n        throw new AggregateError(\n          [cause, cleanup],\n          \"Cloud cancellation could not be confirmed\",\n        );\n      }\n      throw cause;\n    } finally {\n      signal.removeEventListener(\"abort\", cancel);\n      await sandbox.process.deleteSession(id);\n      await sandbox.process\n        .executeCommand(`rm -f ${quote(input)} ${quote(pid)}`)\n        .catch(() => undefined);\n    }\n  };\n}\n"]}
+{"version":3,"file":"daytona-command.js","sourceRoot":"","sources":["../../src/providers/daytona-command.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,sBAAsB,CAAC;AAClD,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACzC,OAAO,EAAE,YAAY,EAAE,MAAM,qBAAqB,CAAC;AAEnD,OAAO,EAAE,aAAa,EAAE,MAAM,4BAA4B,CAAC;AAC3D,OAAO,EAAE,KAAK,EAAE,MAAM,8BAA8B,CAAC;AACrD,OAAO,EAAE,aAAa,EAAE,MAAM,sBAAsB,CAAC;AACrD,OAAO,EAAE,eAAe,EAAE,MAAM,uBAAuB,CAAC;AAGxD,MAAM,UAAU,cAAc,CAC5B,OAAuB;IAEvB,MAAM,EAAE,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,OAAO,EAAE,QAAQ,EAAE,GAAG,OAAO,CAAC;IAC9D,OAAO,KAAK,EAAE,OAAO,EAAE,EAAE;QACvB,IAAI,QAAQ,EAAE;YACZ,MAAM,IAAI,YAAY,CAAC,UAAU,EAAE,yBAAyB,CAAC,CAAC;QAChE,MAAM,MAAM,GAAG,OAAO,CAAC,MAAM;YAC3B,CAAC,CAAC,WAAW,CAAC,GAAG,CAAC;gBACd,OAAO,CAAC,MAAM;gBACd,WAAW,CAAC,OAAO,CAAC,OAAO,CAAC,UAAU,IAAI,aAAa,CAAC,UAAU,CAAC;aACpE,CAAC;YACJ,CAAC,CAAC,WAAW,CAAC,OAAO,CAAC,OAAO,CAAC,UAAU,IAAI,aAAa,CAAC,UAAU,CAAC,CAAC;QACxE,MAAM,CAAC,cAAc,EAAE,CAAC;QACxB,IAAI,OAAO,CAAC,WAAW;YAAE,OAAO,eAAe,CAAC,OAAO,EAAE,OAAO,EAAE,MAAM,CAAC,CAAC;QAC1E,MAAM,EAAE,GAAG,WAAW,UAAU,EAAE,EAAE,CAAC;QACrC,MAAM,KAAK,GAAG,QAAQ,EAAE,QAAQ,CAAC;QACjC,MAAM,GAAG,GAAG,QAAQ,EAAE,MAAM,CAAC;QAC7B,IAAI,OAAO,CAAC,KAAK,KAAK,SAAS;YAC7B,MAAM,OAAO,CAAC,EAAE,CAAC,UAAU,CAAC,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,KAAK,CAAC,CAAC;QACjE,MAAM,SAAS,GAAG,EAAE,GAAG,OAAO,CAAC,SAAS,EAAE,GAAG,OAAO,CAAC,SAAS,EAAE,CAAC;QACjE,MAAM,OAAO,GAAG;YACd,GAAG,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,MAAM,EAAE,IAAI,EAAE,IAAI,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;YACjD,OAAO,CAAC,UAAU;YAClB,GAAG,CAAC,OAAO,CAAC,SAAS,IAAI,EAAE,CAAC;SAC7B;aACE,GAAG,CAAC,KAAK,CAAC;aACV,IAAI,CAAC,GAAG,CAAC,CAAC;QACb,MAAM,MAAM,GAAG,MAAM,KAAK,CAAC,OAAO,CAAC,SAAS,IAAI,IAAI,CAAC,gBAAgB,MAAM,CAAC,OAAO,CACjF,SAAS,CACV;aACE,GAAG,CAAC,CAAC,CAAC,GAAG,EAAE,KAAK,CAAC,EAAE,EAAE,CAAC,KAAK,CAAC,GAAG,GAAG,IAAI,KAAK,EAAE,CAAC,CAAC;aAC/C,IAAI,CACH,GAAG,CACJ,iBAAiB,KAAK,CAAC,aAAa,KAAK,CAAC,GAAG,CAAC,eAAe,KAAK,CAAC,GAAG,GAAG,SAAS,CAAC,sBAAsB,OAAO,GAAG,OAAO,CAAC,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,MAAM,KAAK,CAAC,KAAK,CAAC,EAAE,EAAE,CAAC,EAAE,CAAC;QACnL,MAAM,MAAM,GAAG,EAAE,MAAM,EAAE,EAAE,EAAE,MAAM,EAAE,EAAE,EAAE,CAAC;QAC1C,IAAI,YAA0C,CAAC;QAC/C,MAAM,MAAM,GAAG,GAAG,EAAE;YAClB,YAAY,KAAK,OAAO,CAAC,OAAO,CAAC,cAAc,CAC7C,SAAS,KAAK,CAAC,GAAG,GAAG,SAAS,CAAC,aAAa,KAAK,CAAC,GAAG,CAAC,8BAA8B,KAAK,CAAC,GAAG,CAAC,2BAA2B,CAC1H,CAAC;YACF,KAAK,YAAY,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC;QAC3C,CAAC,CAAC;QACF,MAAM,OAAO,CAAC,OAAO,CAAC,aAAa,CAAC,EAAE,CAAC,CAAC;QACxC,IAAI,CAAC;YACH,MAAM,CAAC,gBAAgB,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC;YACzD,IAAI,MAAM,CAAC,OAAO;gBAAE,MAAM,EAAE,CAAC;YAC7B,MAAM,CAAC,cAAc,EAAE,CAAC;YACxB,MAAM,QAAQ,GAAG,MAAM,aAAa,CAClC,OAAO,CAAC,OAAO,CAAC,qBAAqB,CAAC,EAAE,EAAE;gBACxC,OAAO,EAAE,MAAM;gBACf,KAAK,EAAE,IAAI;aACZ,CAAC,EACF,MAAM,CACP,CAAC;YACF,IAAI,CAAC,QAAQ,CAAC,KAAK;gBACjB,MAAM,IAAI,YAAY,CACpB,UAAU,EACV,+CAA+C,CAChD,CAAC;YACJ,MAAM,OAAO,GAAG,CAAC,OAA4B,EAAE,EAAE,CAAC,CAAC,KAAa,EAAE,EAAE;gBAClE,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,OAAO,CAAC,GAAG,KAAK,CAAC,CAAC,KAAK,CAC/C,CAAC,CAAC,OAAO,CAAC,MAAM,IAAI,OAAO,CAAC,MAAM,IAAI,aAAa,CAAC,WAAW,CAAC,CACjE,CAAC;gBACF,OAAO,CAAC,OAAO,EAAE,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC;YACpC,CAAC,CAAC;YACF,MAAM,aAAa,CACjB,OAAO,CAAC,OAAO,CAAC,qBAAqB,CACnC,EAAE,EACF,QAAQ,CAAC,KAAK,EACd,OAAO,CAAC,QAAQ,CAAC,EACjB,OAAO,CAAC,QAAQ,CAAC,CAClB,EACD,MAAM,CACP,CAAC;YACF,IAAI,YAAY;gBAAE,MAAM,YAAY,CAAC;YACrC,MAAM,CAAC,cAAc,EAAE,CAAC;YACxB,OAAO,IAAI,EAAE,CAAC;gBACZ,MAAM,MAAM,GAAG,MAAM,aAAa,CAChC,OAAO,CAAC,OAAO,CAAC,iBAAiB,CAAC,EAAE,EAAE,QAAQ,CAAC,KAAK,CAAC,EACrD,MAAM,CACP,CAAC;gBACF,IAAI,MAAM,CAAC,QAAQ,KAAK,SAAS;oBAC/B,OAAO,EAAE,MAAM,EAAE,MAAM,CAAC,QAAQ,EAAE,GAAG,MAAM,EAAE,CAAC;gBAChD,MAAM,UAAU,CAAC,aAAa,CAAC,MAAM,EAAE,SAAS,EAAE,EAAE,MAAM,EAAE,CAAC,CAAC;YAChE,CAAC;QACH,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,MAAM,EAAE,CAAC;YACT,IAAI,CAAC;gBACH,MAAM,aAAa,CACjB,YAAa,EACb,WAAW,CAAC,OAAO,CAAC,aAAa,CAAC,cAAc,CAAC,CAClD,CAAC;YACJ,CAAC;YAAC,OAAO,OAAO,EAAE,CAAC;gBACjB,MAAM,IAAI,cAAc,CACtB,CAAC,KAAK,EAAE,OAAO,CAAC,EAChB,2CAA2C,CAC5C,CAAC;YACJ,CAAC;YACD,MAAM,KAAK,CAAC;QACd,CAAC;gBAAS,CAAC;YACT,MAAM,CAAC,mBAAmB,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;YAC5C,MAAM,OAAO,CAAC,OAAO,CAAC,aAAa,CAAC,EAAE,CAAC,CAAC;YACxC,MAAM,OAAO,CAAC,OAAO;iBAClB,cAAc,CAAC,SAAS,KAAK,CAAC,KAAK,CAAC,IAAI,KAAK,CAAC,GAAG,CAAC,EAAE,CAAC;iBACrD,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC;QAC5B,CAAC;IACH,CAAC,CAAC;AACJ,CAAC","sourcesContent":["import { setTimeout } from \"node:timers/promises\";\nimport { randomUUID } from \"node:crypto\";\nimport { OutpostError } from \"../domain/errors.ts\";\nimport type { SandboxLease } from \"../domain/sandbox.types.ts\";\nimport { interruptible } from \"../infrastructure/abort.ts\";\nimport { quote } from \"../infrastructure/process.ts\";\nimport { cloudDefaults } from \"./cloud.constants.ts\";\nimport { daytonaTerminal } from \"./daytona-terminal.ts\";\nimport type { DaytonaRuntime } from \"./daytona.types.ts\";\n\nexport function daytonaCommand(\n  runtime: DaytonaRuntime,\n): SandboxLease[\"invoke\"] {\n  const { sandbox, root, options, context, isClosed } = runtime;\n  return async (command) => {\n    if (isClosed())\n      throw new OutpostError(\"provider\", \"Cloud sandbox is closed\");\n    const signal = command.signal\n      ? AbortSignal.any([\n          command.signal,\n          AbortSignal.timeout(command.deadlineMs ?? cloudDefaults.deadlineMs),\n        ])\n      : AbortSignal.timeout(command.deadlineMs ?? cloudDefaults.deadlineMs);\n    signal.throwIfAborted();\n    if (command.interactive) return daytonaTerminal(runtime, command, signal);\n    const id = `outpost-${randomUUID()}`;\n    const input = `/tmp/${id}.stdin`;\n    const pid = `/tmp/${id}.pid`;\n    if (command.stdin !== undefined)\n      await sandbox.fs.uploadFile(Buffer.from(command.stdin), input);\n    const variables = { ...context.variables, ...command.variables };\n    const program = [\n      ...(command.elevated ? [\"sudo\", \"-n\", \"--\"] : []),\n      command.executable,\n      ...(command.arguments ?? []),\n    ]\n      .map(quote)\n      .join(\" \");\n    const script = `cd ${quote(command.directory ?? root)} && exec env ${Object.entries(\n      variables,\n    )\n      .map(([key, value]) => quote(`${key}=${value}`))\n      .join(\n        \" \",\n      )} setsid sh -c ${quote(`echo $$ > ${quote(pid)}; test ! -f ${quote(pid + \".cancel\")} || exit 130; exec ${program}${command.stdin === undefined ? \"\" : ` < ${quote(input)}`}`)}`;\n    const output = { stdout: \"\", stderr: \"\" };\n    let cancellation: Promise<unknown> | undefined;\n    const cancel = () => {\n      cancellation ??= sandbox.process.executeCommand(\n        `touch ${quote(pid + \".cancel\")}; if [ -f ${quote(pid)} ]; then kill -KILL -$(cat ${quote(pid)}) 2>/dev/null || true; fi`,\n      );\n      void cancellation.catch(() => undefined);\n    };\n    await sandbox.process.createSession(id);\n    try {\n      signal.addEventListener(\"abort\", cancel, { once: true });\n      if (signal.aborted) cancel();\n      signal.throwIfAborted();\n      const response = await interruptible(\n        sandbox.process.executeSessionCommand(id, {\n          command: script,\n          async: true,\n        }),\n        signal,\n      );\n      if (!response.cmdId)\n        throw new OutpostError(\n          \"provider\",\n          \"Cloud provider returned no command identifier\",\n        );\n      const consume = (channel: \"stdout\" | \"stderr\") => (chunk: string) => {\n        output[channel] = (output[channel] + chunk).slice(\n          -(command.retain ?? options.retain ?? cloudDefaults.retainBytes),\n        );\n        command.observe?.(channel, chunk);\n      };\n      await interruptible(\n        sandbox.process.getSessionCommandLogs(\n          id,\n          response.cmdId,\n          consume(\"stdout\"),\n          consume(\"stderr\"),\n        ),\n        signal,\n      );\n      if (cancellation) await cancellation;\n      signal.throwIfAborted();\n      while (true) {\n        const result = await interruptible(\n          sandbox.process.getSessionCommand(id, response.cmdId),\n          signal,\n        );\n        if (result.exitCode !== undefined)\n          return { status: result.exitCode, ...output };\n        await setTimeout(cloudDefaults.pollMs, undefined, { signal });\n      }\n    } catch (cause) {\n      cancel();\n      try {\n        await interruptible(\n          cancellation!,\n          AbortSignal.timeout(cloudDefaults.cancellationMs),\n        );\n      } catch (cleanup) {\n        throw new AggregateError(\n          [cause, cleanup],\n          \"Cloud cancellation could not be confirmed\",\n        );\n      }\n      throw cause;\n    } finally {\n      signal.removeEventListener(\"abort\", cancel);\n      await sandbox.process.deleteSession(id);\n      await sandbox.process\n        .executeCommand(`rm -f ${quote(input)} ${quote(pid)}`)\n        .catch(() => undefined);\n    }\n  };\n}\n"]}

package/dist/providers/daytona-terminal.d.ts

@@ -0,0 +1,3 @@
+import type { Command, CommandResult } from "../domain/command.types.ts";
+import type { DaytonaRuntime } from "./daytona.types.ts";
+export declare function daytonaTerminal(runtime: DaytonaRuntime, command: Command, signal: AbortSignal): Promise<CommandResult>;