@elie-laloum/outpost 3.0.0 → 4.0.0

package/dist/infrastructure/transfer.js.map

@@ -1 +1 @@
-{"version":3,"file":"transfer.js","sourceRoot":"","sources":["../../src/infrastructure/transfer.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,SAAS,EAAE,YAAY,EAAE,MAAM,qBAAqB,CAAC;AAE9D,OAAO,EAAE,aAAa,EAAE,MAAM,YAAY,CAAC;AAC3C,OAAO,EAAE,gBAAgB,EAAE,MAAM,yBAAyB,CAAC;AAE3D,MAAM,CAAC,KAAK,UAAU,QAAQ,CAC5B,OAAwB,EACxB,OAA4C;IAE5C,OAAO,CAAC,MAAM,EAAE,cAAc,EAAE,CAAC;IACjC,MAAM,UAAU,GAAG,OAAO,CAAC,UAAU,IAAI,gBAAgB,CAAC,UAAU,CAAC;IACrE,SAAS,CACP,MAAM,CAAC,QAAQ,CAAC,UAAU,CAAC,IAAI,UAAU,GAAG,CAAC,EAC7C,oCAAoC,CACrC,CAAC;IACF,MAAM,IAAI,GAAG,IAAI,eAAe,EAAE,CAAC;IACnC,MAAM,MAAM,GAAG,OAAO,CAAC,MAAM;QAC3B,CAAC,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC,OAAO,CAAC,MAAM,EAAE,IAAI,CAAC,MAAM,CAAC,CAAC;QAChD,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC;IAChB,MAAM,KAAK,GAAG,UAAU,CACtB,GAAG,EAAE,CACH,IAAI,CAAC,KAAK,CACR,IAAI,YAAY,CAAC,SAAS,EAAE,yBAAyB,EAAE,EAAE,UAAU,EAAE,CAAC,CACvE,EACH,UAAU,CACX,CAAC;IACF,IAAI,CAAC;QACH,OAAO,MAAM,aAAa,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,MAAM,CAAC,CAAC;IACtD,CAAC;YAAS,CAAC;QACT,YAAY,CAAC,KAAK,CAAC,CAAC;IACtB,CAAC;AACH,CAAC;AAED,MAAM,UAAU,gBAAgB,CAC9B,KAAmB,EACnB,QAAyB;IAEzB,MAAM,IAAI,GACR,CAAC,MAA6B,EAAE,EAAE,CAClC,CAAC,MAAc,EAAE,WAAmB,EAAE,UAA2B,EAAE,EAAE,EAAE,CACrE,QAAQ,CAAC,EAAE,GAAG,QAAQ,EAAE,GAAG,OAAO,EAAE,EAAE,CAAC,MAAM,EAAE,EAAE,CAC/C,KAAK,CAAC,MAAM,CAAC,CAAC,MAAM,EAAE,WAAW,EAAE,EAAE,GAAG,QAAQ,EAAE,GAAG,OAAO,EAAE,MAAM,EAAE,CAAC,CACxE,CAAC;IACN,OAAO;QACL,GAAG,KAAK;QACR,MAAM,EAAE,KAAK,CAAC,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC;QAChC,OAAO,EAAE,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC;QAClC,MAAM,EAAE,IAAI,CAAC,QAAQ,CAAC;QACtB,QAAQ,EAAE,IAAI,CAAC,UAAU,CAAC;QAC1B,GAAG,CAAC,KAAK,CAAC,aAAa;YACrB,CAAC,CAAC;gBACE,aAAa,EAAE;oBACb,QAAQ,EAAE,CAAC,MAAM,EAAE,KAAK,EAAE,OAAO,GAAG,EAAE,EAAE,EAAE,CACxC,QAAQ,CAAC,EAAE,GAAG,QAAQ,EAAE,GAAG,OAAO,EAAE,EAAE,CAAC,MAAM,EAAE,EAAE,CAC/C,KAAK,CAAC,aAAc,CAAC,QAAQ,CAAC,MAAM,EAAE,KAAK,EAAE;wBAC3C,GAAG,QAAQ;wBACX,GAAG,OAAO;wBACV,MAAM;qBACP,CAAC,CACH;oBACH,aAAa,EAAE,CAAC,MAAM,EAAE,OAAO,EAAE,WAAW,EAAE,OAAO,GAAG,EAAE,EAAE,EAAE,CAC5D,QAAQ,CAAC,EAAE,GAAG,QAAQ,EAAE,GAAG,OAAO,EAAE,EAAE,CAAC,MAAM,EAAE,EAAE,CAC/C,KAAK,CAAC,aAAc,CAAC,aAAa,CAChC,MAAM,EACN,OAAO,EACP,WAAW,EACX,EAAE,GAAG,QAAQ,EAAE,GAAG,OAAO,EAAE,MAAM,EAAE,CACpC,CACF;iBACJ;aACF;YACH,CAAC,CAAC,EAAE,CAAC;KACR,CAAC;AACJ,CAAC","sourcesContent":["import { invariant, OutpostError } from \"../domain/errors.ts\";\nimport type { SandboxLease, TransferOptions } from \"../domain/sandbox.types.ts\";\nimport { interruptible } from \"./abort.ts\";\nimport { transferDefaults } from \"./transfer.constants.ts\";\n\nexport async function transfer<T>(\n  options: TransferOptions,\n  perform: (signal: AbortSignal) => Promise<T>,\n): Promise<T> {\n  options.signal?.throwIfAborted();\n  const deadlineMs = options.deadlineMs ?? transferDefaults.deadlineMs;\n  invariant(\n    Number.isFinite(deadlineMs) && deadlineMs > 0,\n    \"Transfer deadline must be positive\",\n  );\n  const stop = new AbortController();\n  const signal = options.signal\n    ? AbortSignal.any([options.signal, stop.signal])\n    : stop.signal;\n  const timer = setTimeout(\n    () =>\n      stop.abort(\n        new OutpostError(\"timeout\", \"File transfer timed out\", { deadlineMs }),\n      ),\n    deadlineMs,\n  );\n  try {\n    return await interruptible(perform(signal), signal);\n  } finally {\n    clearTimeout(timer);\n  }\n}\n\nexport function boundedTransfers(\n  lease: SandboxLease,\n  defaults: TransferOptions,\n): SandboxLease {\n  const copy =\n    (method: \"upload\" | \"download\") =>\n    (source: string, destination: string, options: TransferOptions = {}) =>\n      transfer({ ...defaults, ...options }, (signal) =>\n        lease[method](source, destination, { ...defaults, ...options, signal }),\n      );\n  return {\n    ...lease,\n    invoke: lease.invoke.bind(lease),\n    release: lease.release.bind(lease),\n    upload: copy(\"upload\"),\n    download: copy(\"download\"),\n    ...(lease.fileTransfers\n      ? {\n          fileTransfers: {\n            manifest: (source, paths, options = {}) =>\n              transfer({ ...defaults, ...options }, (signal) =>\n                lease.fileTransfers!.manifest(source, paths, {\n                  ...defaults,\n                  ...options,\n                  signal,\n                }),\n              ),\n            downloadBatch: (source, entries, destination, options = {}) =>\n              transfer({ ...defaults, ...options }, (signal) =>\n                lease.fileTransfers!.downloadBatch(\n                  source,\n                  entries,\n                  destination,\n                  { ...defaults, ...options, signal },\n                ),\n              ),\n          },\n        }\n      : {}),\n  };\n}\n"]}
+{"version":3,"file":"transfer.js","sourceRoot":"","sources":["../../src/infrastructure/transfer.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,SAAS,EAAE,YAAY,EAAE,MAAM,qBAAqB,CAAC;AAM9D,OAAO,EAAE,aAAa,EAAE,MAAM,YAAY,CAAC;AAC3C,OAAO,EAAE,gBAAgB,EAAE,MAAM,yBAAyB,CAAC;AAE3D,MAAM,CAAC,KAAK,UAAU,QAAQ,CAC5B,OAAwB,EACxB,OAA4C;IAE5C,OAAO,CAAC,MAAM,EAAE,cAAc,EAAE,CAAC;IACjC,MAAM,UAAU,GAAG,OAAO,CAAC,UAAU,IAAI,gBAAgB,CAAC,UAAU,CAAC;IACrE,SAAS,CACP,MAAM,CAAC,QAAQ,CAAC,UAAU,CAAC,IAAI,UAAU,GAAG,CAAC,EAC7C,oCAAoC,CACrC,CAAC;IACF,MAAM,IAAI,GAAG,IAAI,eAAe,EAAE,CAAC;IACnC,MAAM,MAAM,GAAG,OAAO,CAAC,MAAM;QAC3B,CAAC,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC,OAAO,CAAC,MAAM,EAAE,IAAI,CAAC,MAAM,CAAC,CAAC;QAChD,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC;IAChB,MAAM,KAAK,GAAG,UAAU,CACtB,GAAG,EAAE,CACH,IAAI,CAAC,KAAK,CACR,IAAI,YAAY,CAAC,SAAS,EAAE,yBAAyB,EAAE,EAAE,UAAU,EAAE,CAAC,CACvE,EACH,UAAU,CACX,CAAC;IACF,IAAI,CAAC;QACH,OAAO,MAAM,aAAa,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,MAAM,CAAC,CAAC;IACtD,CAAC;YAAS,CAAC;QACT,YAAY,CAAC,KAAK,CAAC,CAAC;IACtB,CAAC;AACH,CAAC;AAED,MAAM,UAAU,gBAAgB,CAC9B,KAAmB,EACnB,QAAyB;IAEzB,MAAM,IAAI,GACR,CAAC,MAA6B,EAAE,EAAE,CAClC,CAAC,MAAc,EAAE,WAAmB,EAAE,UAA2B,EAAE,EAAE,EAAE,CACrE,QAAQ,CAAC,EAAE,GAAG,QAAQ,EAAE,GAAG,OAAO,EAAE,EAAE,CAAC,MAAM,EAAE,EAAE,CAC/C,KAAK,CAAC,MAAM,CAAC,CAAC,MAAM,EAAE,WAAW,EAAE,EAAE,GAAG,QAAQ,EAAE,GAAG,OAAO,EAAE,MAAM,EAAE,CAAC,CACxE,CAAC;IACN,OAAO;QACL,GAAG,KAAK;QACR,MAAM,EAAE,KAAK,CAAC,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC;QAChC,OAAO,EAAE,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC;QAClC,MAAM,EAAE,IAAI,CAAC,QAAQ,CAAC;QACtB,QAAQ,EAAE,IAAI,CAAC,UAAU,CAAC;QAC1B,GAAG,CAAC,KAAK,CAAC,aAAa;YACrB,CAAC,CAAC;gBACE,aAAa,EAAE;oBACb,GAAG,CAAC,KAAK,CAAC,aAAa,CAAC,WAAW;wBACjC,CAAC,CAAC;4BACE,WAAW,EAAE,CACX,MAAc,EACd,OAAqC,EACrC,WAAmB,EACnB,UAA2B,EAAE,EAC7B,EAAE,CACF,QAAQ,CAAC,EAAE,GAAG,QAAQ,EAAE,GAAG,OAAO,EAAE,EAAE,CAAC,MAAM,EAAE,EAAE,CAC/C,KAAK,CAAC,aAAc,CAAC,WAAY,CAC/B,MAAM,EACN,OAAO,EACP,WAAW,EACX,EAAE,GAAG,QAAQ,EAAE,GAAG,OAAO,EAAE,MAAM,EAAE,CACpC,CACF;yBACJ;wBACH,CAAC,CAAC,EAAE,CAAC;oBACP,QAAQ,EAAE,CAAC,MAAM,EAAE,KAAK,EAAE,OAAO,GAAG,EAAE,EAAE,EAAE,CACxC,QAAQ,CAAC,EAAE,GAAG,QAAQ,EAAE,GAAG,OAAO,EAAE,EAAE,CAAC,MAAM,EAAE,EAAE,CAC/C,KAAK,CAAC,aAAc,CAAC,QAAQ,CAAC,MAAM,EAAE,KAAK,EAAE;wBAC3C,GAAG,QAAQ;wBACX,GAAG,OAAO;wBACV,MAAM;qBACP,CAAC,CACH;oBACH,aAAa,EAAE,CAAC,MAAM,EAAE,OAAO,EAAE,WAAW,EAAE,OAAO,GAAG,EAAE,EAAE,EAAE,CAC5D,QAAQ,CAAC,EAAE,GAAG,QAAQ,EAAE,GAAG,OAAO,EAAE,EAAE,CAAC,MAAM,EAAE,EAAE,CAC/C,KAAK,CAAC,aAAc,CAAC,aAAa,CAChC,MAAM,EACN,OAAO,EACP,WAAW,EACX,EAAE,GAAG,QAAQ,EAAE,GAAG,OAAO,EAAE,MAAM,EAAE,CACpC,CACF;iBACJ;aACF;YACH,CAAC,CAAC,EAAE,CAAC;KACR,CAAC;AACJ,CAAC","sourcesContent":["import { invariant, OutpostError } from \"../domain/errors.ts\";\nimport type {\n  FileManifestEntry,\n  SandboxLease,\n  TransferOptions,\n} from \"../domain/sandbox.types.ts\";\nimport { interruptible } from \"./abort.ts\";\nimport { transferDefaults } from \"./transfer.constants.ts\";\n\nexport async function transfer<T>(\n  options: TransferOptions,\n  perform: (signal: AbortSignal) => Promise<T>,\n): Promise<T> {\n  options.signal?.throwIfAborted();\n  const deadlineMs = options.deadlineMs ?? transferDefaults.deadlineMs;\n  invariant(\n    Number.isFinite(deadlineMs) && deadlineMs > 0,\n    \"Transfer deadline must be positive\",\n  );\n  const stop = new AbortController();\n  const signal = options.signal\n    ? AbortSignal.any([options.signal, stop.signal])\n    : stop.signal;\n  const timer = setTimeout(\n    () =>\n      stop.abort(\n        new OutpostError(\"timeout\", \"File transfer timed out\", { deadlineMs }),\n      ),\n    deadlineMs,\n  );\n  try {\n    return await interruptible(perform(signal), signal);\n  } finally {\n    clearTimeout(timer);\n  }\n}\n\nexport function boundedTransfers(\n  lease: SandboxLease,\n  defaults: TransferOptions,\n): SandboxLease {\n  const copy =\n    (method: \"upload\" | \"download\") =>\n    (source: string, destination: string, options: TransferOptions = {}) =>\n      transfer({ ...defaults, ...options }, (signal) =>\n        lease[method](source, destination, { ...defaults, ...options, signal }),\n      );\n  return {\n    ...lease,\n    invoke: lease.invoke.bind(lease),\n    release: lease.release.bind(lease),\n    upload: copy(\"upload\"),\n    download: copy(\"download\"),\n    ...(lease.fileTransfers\n      ? {\n          fileTransfers: {\n            ...(lease.fileTransfers.uploadBatch\n              ? {\n                  uploadBatch: (\n                    source: string,\n                    entries: readonly FileManifestEntry[],\n                    destination: string,\n                    options: TransferOptions = {},\n                  ) =>\n                    transfer({ ...defaults, ...options }, (signal) =>\n                      lease.fileTransfers!.uploadBatch!(\n                        source,\n                        entries,\n                        destination,\n                        { ...defaults, ...options, signal },\n                      ),\n                    ),\n                }\n              : {}),\n            manifest: (source, paths, options = {}) =>\n              transfer({ ...defaults, ...options }, (signal) =>\n                lease.fileTransfers!.manifest(source, paths, {\n                  ...defaults,\n                  ...options,\n                  signal,\n                }),\n              ),\n            downloadBatch: (source, entries, destination, options = {}) =>\n              transfer({ ...defaults, ...options }, (signal) =>\n                lease.fileTransfers!.downloadBatch(\n                  source,\n                  entries,\n                  destination,\n                  { ...defaults, ...options, signal },\n                ),\n              ),\n          },\n        }\n      : {}),\n  };\n}\n"]}

package/dist/infrastructure/workflow-checkpoint.constants.d.ts

@@ -0,0 +1 @@
+export declare const workflowCheckpointMaxBytes: number;

package/dist/infrastructure/workflow-checkpoint.constants.js

@@ -0,0 +1,2 @@
+export const workflowCheckpointMaxBytes = 16 * 1024 * 1024;
+//# sourceMappingURL=workflow-checkpoint.constants.js.map

package/dist/infrastructure/workflow-checkpoint.constants.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"workflow-checkpoint.constants.js","sourceRoot":"","sources":["../../src/infrastructure/workflow-checkpoint.constants.ts"],"names":[],"mappings":"AAAA,MAAM,CAAC,MAAM,0BAA0B,GAAG,EAAE,GAAG,IAAI,GAAG,IAAI,CAAC","sourcesContent":["export const workflowCheckpointMaxBytes = 16 * 1024 * 1024;\n"]}

package/dist/infrastructure/workflow-checkpoint.d.ts

@@ -0,0 +1,3 @@
+import type { WorkflowCheckpointStore } from "../domain/workflow/checkpoint.types.ts";
+import type { FileWorkflowCheckpointOptions } from "./workflow-checkpoint.types.ts";
+export declare function fileWorkflowCheckpointStore(options: FileWorkflowCheckpointOptions): WorkflowCheckpointStore;

package/dist/infrastructure/workflow-checkpoint.js

@@ -0,0 +1,77 @@
+import { readInspectionFile } from "./inspection-file.js";
+import { workflowCheckpointMaxBytes } from "./workflow-checkpoint.constants.js";
+import { createHash, randomUUID } from "node:crypto";
+import { mkdir, open, realpath, rename, rm } from "node:fs/promises";
+import { join, resolve } from "node:path";
+import { lock } from "./git/lock.js";
+export function fileWorkflowCheckpointStore(options) {
+    const configuredDirectory = resolve(options.directory);
+    return {
+        async acquire(runId) {
+            if (!runId.trim())
+                throw new Error("Checkpoint runId must not be empty");
+            await mkdir(configuredDirectory, { recursive: true, mode: 0o700 });
+            const directory = await realpath(configuredDirectory);
+            const release = await lock(directory, `workflow:${runId}`);
+            const path = join(directory, `${createHash("sha256").update(runId).digest("hex")}.json`);
+            let released = false;
+            const assertOwned = () => {
+                if (released)
+                    throw new Error("Checkpoint lease has been released");
+            };
+            return {
+                async read() {
+                    assertOwned();
+                    try {
+                        return JSON.parse((await readInspectionFile(path, workflowCheckpointMaxBytes)).toString("utf8"));
+                    }
+                    catch (error) {
+                        if (error &&
+                            typeof error === "object" &&
+                            "code" in error &&
+                            error.code === "ENOENT")
+                            return undefined;
+                        throw error;
+                    }
+                },
+                async write(checkpoint) {
+                    assertOwned();
+                    const data = JSON.stringify(checkpoint);
+                    if (Buffer.byteLength(data) > workflowCheckpointMaxBytes)
+                        throw new Error("Workflow checkpoint exceeds 16 MiB; store large artifacts separately");
+                    const temporary = `${path}.${randomUUID()}.tmp`;
+                    try {
+                        const file = await open(temporary, "wx", 0o600);
+                        try {
+                            await file.writeFile(data);
+                            await file.sync();
+                        }
+                        finally {
+                            await file.close();
+                        }
+                        await rename(temporary, path);
+                        if (process.platform !== "win32") {
+                            const parent = await open(directory, "r");
+                            try {
+                                await parent.sync();
+                            }
+                            finally {
+                                await parent.close();
+                            }
+                        }
+                    }
+                    finally {
+                        await rm(temporary, { force: true });
+                    }
+                },
+                async release() {
+                    if (released)
+                        return;
+                    released = true;
+                    await release();
+                },
+            };
+        },
+    };
+}
+//# sourceMappingURL=workflow-checkpoint.js.map

package/dist/infrastructure/workflow-checkpoint.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"workflow-checkpoint.js","sourceRoot":"","sources":["../../src/infrastructure/workflow-checkpoint.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,kBAAkB,EAAE,MAAM,sBAAsB,CAAC;AAC1D,OAAO,EAAE,0BAA0B,EAAE,MAAM,oCAAoC,CAAC;AAChF,OAAO,EAAE,UAAU,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACrD,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,QAAQ,EAAE,MAAM,EAAE,EAAE,EAAE,MAAM,kBAAkB,CAAC;AACrE,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAG1C,OAAO,EAAE,IAAI,EAAE,MAAM,eAAe,CAAC;AAErC,MAAM,UAAU,2BAA2B,CACzC,OAAsC;IAEtC,MAAM,mBAAmB,GAAG,OAAO,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC;IACvD,OAAO;QACL,KAAK,CAAC,OAAO,CAAC,KAAK;YACjB,IAAI,CAAC,KAAK,CAAC,IAAI,EAAE;gBAAE,MAAM,IAAI,KAAK,CAAC,oCAAoC,CAAC,CAAC;YACzE,MAAM,KAAK,CAAC,mBAAmB,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;YACnE,MAAM,SAAS,GAAG,MAAM,QAAQ,CAAC,mBAAmB,CAAC,CAAC;YACtD,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,SAAS,EAAE,YAAY,KAAK,EAAE,CAAC,CAAC;YAC3D,MAAM,IAAI,GAAG,IAAI,CACf,SAAS,EACT,GAAG,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,OAAO,CAC3D,CAAC;YACF,IAAI,QAAQ,GAAG,KAAK,CAAC;YACrB,MAAM,WAAW,GAAG,GAAG,EAAE;gBACvB,IAAI,QAAQ;oBAAE,MAAM,IAAI,KAAK,CAAC,oCAAoC,CAAC,CAAC;YACtE,CAAC,CAAC;YACF,OAAO;gBACL,KAAK,CAAC,IAAI;oBACR,WAAW,EAAE,CAAC;oBACd,IAAI,CAAC;wBACH,OAAO,IAAI,CAAC,KAAK,CACf,CACE,MAAM,kBAAkB,CAAC,IAAI,EAAE,0BAA0B,CAAC,CAC3D,CAAC,QAAQ,CAAC,MAAM,CAAC,CACR,CAAC;oBACf,CAAC;oBAAC,OAAO,KAAK,EAAE,CAAC;wBACf,IACE,KAAK;4BACL,OAAO,KAAK,KAAK,QAAQ;4BACzB,MAAM,IAAI,KAAK;4BACf,KAAK,CAAC,IAAI,KAAK,QAAQ;4BAEvB,OAAO,SAAS,CAAC;wBACnB,MAAM,KAAK,CAAC;oBACd,CAAC;gBACH,CAAC;gBACD,KAAK,CAAC,KAAK,CAAC,UAAU;oBACpB,WAAW,EAAE,CAAC;oBACd,MAAM,IAAI,GAAG,IAAI,CAAC,SAAS,CAAC,UAAU,CAAC,CAAC;oBACxC,IAAI,MAAM,CAAC,UAAU,CAAC,IAAI,CAAC,GAAG,0BAA0B;wBACtD,MAAM,IAAI,KAAK,CACb,sEAAsE,CACvE,CAAC;oBACJ,MAAM,SAAS,GAAG,GAAG,IAAI,IAAI,UAAU,EAAE,MAAM,CAAC;oBAChD,IAAI,CAAC;wBACH,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,SAAS,EAAE,IAAI,EAAE,KAAK,CAAC,CAAC;wBAChD,IAAI,CAAC;4BACH,MAAM,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC;4BAC3B,MAAM,IAAI,CAAC,IAAI,EAAE,CAAC;wBACpB,CAAC;gCAAS,CAAC;4BACT,MAAM,IAAI,CAAC,KAAK,EAAE,CAAC;wBACrB,CAAC;wBACD,MAAM,MAAM,CAAC,SAAS,EAAE,IAAI,CAAC,CAAC;wBAC9B,IAAI,OAAO,CAAC,QAAQ,KAAK,OAAO,EAAE,CAAC;4BACjC,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,SAAS,EAAE,GAAG,CAAC,CAAC;4BAC1C,IAAI,CAAC;gCACH,MAAM,MAAM,CAAC,IAAI,EAAE,CAAC;4BACtB,CAAC;oCAAS,CAAC;gCACT,MAAM,MAAM,CAAC,KAAK,EAAE,CAAC;4BACvB,CAAC;wBACH,CAAC;oBACH,CAAC;4BAAS,CAAC;wBACT,MAAM,EAAE,CAAC,SAAS,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;oBACvC,CAAC;gBACH,CAAC;gBACD,KAAK,CAAC,OAAO;oBACX,IAAI,QAAQ;wBAAE,OAAO;oBACrB,QAAQ,GAAG,IAAI,CAAC;oBAChB,MAAM,OAAO,EAAE,CAAC;gBAClB,CAAC;aACF,CAAC;QACJ,CAAC;KACF,CAAC;AACJ,CAAC","sourcesContent":["import { readInspectionFile } from \"./inspection-file.ts\";\nimport { workflowCheckpointMaxBytes } from \"./workflow-checkpoint.constants.ts\";\nimport { createHash, randomUUID } from \"node:crypto\";\nimport { mkdir, open, realpath, rename, rm } from \"node:fs/promises\";\nimport { join, resolve } from \"node:path\";\nimport type { WorkflowCheckpointStore } from \"../domain/workflow/checkpoint.types.ts\";\nimport type { FileWorkflowCheckpointOptions } from \"./workflow-checkpoint.types.ts\";\nimport { lock } from \"./git/lock.ts\";\n\nexport function fileWorkflowCheckpointStore(\n  options: FileWorkflowCheckpointOptions,\n): WorkflowCheckpointStore {\n  const configuredDirectory = resolve(options.directory);\n  return {\n    async acquire(runId) {\n      if (!runId.trim()) throw new Error(\"Checkpoint runId must not be empty\");\n      await mkdir(configuredDirectory, { recursive: true, mode: 0o700 });\n      const directory = await realpath(configuredDirectory);\n      const release = await lock(directory, `workflow:${runId}`);\n      const path = join(\n        directory,\n        `${createHash(\"sha256\").update(runId).digest(\"hex\")}.json`,\n      );\n      let released = false;\n      const assertOwned = () => {\n        if (released) throw new Error(\"Checkpoint lease has been released\");\n      };\n      return {\n        async read() {\n          assertOwned();\n          try {\n            return JSON.parse(\n              (\n                await readInspectionFile(path, workflowCheckpointMaxBytes)\n              ).toString(\"utf8\"),\n            ) as unknown;\n          } catch (error) {\n            if (\n              error &&\n              typeof error === \"object\" &&\n              \"code\" in error &&\n              error.code === \"ENOENT\"\n            )\n              return undefined;\n            throw error;\n          }\n        },\n        async write(checkpoint) {\n          assertOwned();\n          const data = JSON.stringify(checkpoint);\n          if (Buffer.byteLength(data) > workflowCheckpointMaxBytes)\n            throw new Error(\n              \"Workflow checkpoint exceeds 16 MiB; store large artifacts separately\",\n            );\n          const temporary = `${path}.${randomUUID()}.tmp`;\n          try {\n            const file = await open(temporary, \"wx\", 0o600);\n            try {\n              await file.writeFile(data);\n              await file.sync();\n            } finally {\n              await file.close();\n            }\n            await rename(temporary, path);\n            if (process.platform !== \"win32\") {\n              const parent = await open(directory, \"r\");\n              try {\n                await parent.sync();\n              } finally {\n                await parent.close();\n              }\n            }\n          } finally {\n            await rm(temporary, { force: true });\n          }\n        },\n        async release() {\n          if (released) return;\n          released = true;\n          await release();\n        },\n      };\n    },\n  };\n}\n"]}

package/dist/infrastructure/workflow-checkpoint.types.d.ts

@@ -0,0 +1,4 @@
+export interface FileWorkflowCheckpointOptions {
+    /** Private directory for checkpoint data and local process ownership locks. */
+    readonly directory: string;
+}

package/dist/infrastructure/workflow-checkpoint.types.js

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=workflow-checkpoint.types.js.map

package/dist/infrastructure/workflow-checkpoint.types.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"workflow-checkpoint.types.js","sourceRoot":"","sources":["../../src/infrastructure/workflow-checkpoint.types.ts"],"names":[],"mappings":"","sourcesContent":["export interface FileWorkflowCheckpointOptions {\n  /** Private directory for checkpoint data and local process ownership locks. */\n  readonly directory: string;\n}\n"]}

package/dist/providers/agents.d.ts

@@ -1,3 +1,5 @@
 export { claude } from "../adapters/agents/claude-adapter.ts";
 export { codex } from "../adapters/agents/codex-adapter.ts";
+export { gemini } from "../adapters/agents/gemini-adapter.ts";
+export type { GeminiSettings } from "../adapters/agents/gemini.types.ts";
 export type { ClaudeSettings, CodexSettings, } from "../adapters/agents/settings.types.ts";

package/dist/providers/agents.js

@@ -1,3 +1,4 @@
 export { claude } from "../adapters/agents/claude-adapter.js";
 export { codex } from "../adapters/agents/codex-adapter.js";
+export { gemini } from "../adapters/agents/gemini-adapter.js";
 //# sourceMappingURL=agents.js.map

package/dist/providers/agents.js.map

@@ -1 +1 @@
-{"version":3,"file":"agents.js","sourceRoot":"","sources":["../../src/providers/agents.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,EAAE,MAAM,sCAAsC,CAAC;AAC9D,OAAO,EAAE,KAAK,EAAE,MAAM,qCAAqC,CAAC","sourcesContent":["export { claude } from \"../adapters/agents/claude-adapter.ts\";\nexport { codex } from \"../adapters/agents/codex-adapter.ts\";\nexport type {\n  ClaudeSettings,\n  CodexSettings,\n} from \"../adapters/agents/settings.types.ts\";\n"]}
+{"version":3,"file":"agents.js","sourceRoot":"","sources":["../../src/providers/agents.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,EAAE,MAAM,sCAAsC,CAAC;AAC9D,OAAO,EAAE,KAAK,EAAE,MAAM,qCAAqC,CAAC;AAC5D,OAAO,EAAE,MAAM,EAAE,MAAM,sCAAsC,CAAC","sourcesContent":["export { claude } from \"../adapters/agents/claude-adapter.ts\";\nexport { codex } from \"../adapters/agents/codex-adapter.ts\";\nexport { gemini } from \"../adapters/agents/gemini-adapter.ts\";\nexport type { GeminiSettings } from \"../adapters/agents/gemini.types.ts\";\nexport type {\n  ClaudeSettings,\n  CodexSettings,\n} from \"../adapters/agents/settings.types.ts\";\n"]}

package/dist/providers/container-isolation.d.ts

@@ -0,0 +1,2 @@
+import type { SandboxContext } from "../domain/sandbox.types.ts";
+export declare function validateIsolatedMount(context: SandboxContext, source: string, target: string): Promise<void>;

package/dist/providers/container-isolation.js

@@ -0,0 +1,29 @@
+import { realpath } from "node:fs/promises";
+import { isAbsolute, relative, posix } from "node:path";
+import { invariant } from "../domain/errors.js";
+function contains(parent, child) {
+    const offset = relative(parent, child);
+    return (!isAbsolute(offset) &&
+        offset !== ".." &&
+        !offset.startsWith("../") &&
+        !offset.startsWith("..\\"));
+}
+export async function validateIsolatedMount(context, source, target) {
+    const canonical = await realpath(source);
+    for (const path of [
+        context.repository,
+        context.directory,
+        ...context.gitDirectories,
+    ]) {
+        const protectedPath = await realpath(path);
+        invariant(!contains(canonical, protectedPath) &&
+            !contains(protectedPath, canonical), "Isolated repository mounts must not expose the host repository, workspace or Git metadata");
+    }
+    for (const protectedPath of ["/outpost", "/tmp"]) {
+        const offset = posix.relative(protectedPath, target);
+        const reverse = posix.relative(target, protectedPath);
+        invariant((offset === ".." || offset.startsWith("../")) &&
+            (reverse === ".." || reverse.startsWith("../")), "Isolated repository mounts must not overlap workspace or control directories");
+    }
+}
+//# sourceMappingURL=container-isolation.js.map

package/dist/providers/container-isolation.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"container-isolation.js","sourceRoot":"","sources":["../../src/providers/container-isolation.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,MAAM,kBAAkB,CAAC;AAC5C,OAAO,EAAE,UAAU,EAAE,QAAQ,EAAE,KAAK,EAAE,MAAM,WAAW,CAAC;AACxD,OAAO,EAAE,SAAS,EAAE,MAAM,qBAAqB,CAAC;AAGhD,SAAS,QAAQ,CAAC,MAAc,EAAE,KAAa;IAC7C,MAAM,MAAM,GAAG,QAAQ,CAAC,MAAM,EAAE,KAAK,CAAC,CAAC;IACvC,OAAO,CACL,CAAC,UAAU,CAAC,MAAM,CAAC;QACnB,MAAM,KAAK,IAAI;QACf,CAAC,MAAM,CAAC,UAAU,CAAC,KAAK,CAAC;QACzB,CAAC,MAAM,CAAC,UAAU,CAAC,MAAM,CAAC,CAC3B,CAAC;AACJ,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,qBAAqB,CACzC,OAAuB,EACvB,MAAc,EACd,MAAc;IAEd,MAAM,SAAS,GAAG,MAAM,QAAQ,CAAC,MAAM,CAAC,CAAC;IACzC,KAAK,MAAM,IAAI,IAAI;QACjB,OAAO,CAAC,UAAU;QAClB,OAAO,CAAC,SAAS;QACjB,GAAG,OAAO,CAAC,cAAc;KAC1B,EAAE,CAAC;QACF,MAAM,aAAa,GAAG,MAAM,QAAQ,CAAC,IAAI,CAAC,CAAC;QAC3C,SAAS,CACP,CAAC,QAAQ,CAAC,SAAS,EAAE,aAAa,CAAC;YACjC,CAAC,QAAQ,CAAC,aAAa,EAAE,SAAS,CAAC,EACrC,2FAA2F,CAC5F,CAAC;IACJ,CAAC;IACD,KAAK,MAAM,aAAa,IAAI,CAAC,UAAU,EAAE,MAAM,CAAC,EAAE,CAAC;QACjD,MAAM,MAAM,GAAG,KAAK,CAAC,QAAQ,CAAC,aAAa,EAAE,MAAM,CAAC,CAAC;QACrD,MAAM,OAAO,GAAG,KAAK,CAAC,QAAQ,CAAC,MAAM,EAAE,aAAa,CAAC,CAAC;QACtD,SAAS,CACP,CAAC,MAAM,KAAK,IAAI,IAAI,MAAM,CAAC,UAAU,CAAC,KAAK,CAAC,CAAC;YAC3C,CAAC,OAAO,KAAK,IAAI,IAAI,OAAO,CAAC,UAAU,CAAC,KAAK,CAAC,CAAC,EACjD,8EAA8E,CAC/E,CAAC;IACJ,CAAC;AACH,CAAC","sourcesContent":["import { realpath } from \"node:fs/promises\";\nimport { isAbsolute, relative, posix } from \"node:path\";\nimport { invariant } from \"../domain/errors.ts\";\nimport type { SandboxContext } from \"../domain/sandbox.types.ts\";\n\nfunction contains(parent: string, child: string): boolean {\n  const offset = relative(parent, child);\n  return (\n    !isAbsolute(offset) &&\n    offset !== \"..\" &&\n    !offset.startsWith(\"../\") &&\n    !offset.startsWith(\"..\\\\\")\n  );\n}\n\nexport async function validateIsolatedMount(\n  context: SandboxContext,\n  source: string,\n  target: string,\n): Promise<void> {\n  const canonical = await realpath(source);\n  for (const path of [\n    context.repository,\n    context.directory,\n    ...context.gitDirectories,\n  ]) {\n    const protectedPath = await realpath(path);\n    invariant(\n      !contains(canonical, protectedPath) &&\n        !contains(protectedPath, canonical),\n      \"Isolated repository mounts must not expose the host repository, workspace or Git metadata\",\n    );\n  }\n  for (const protectedPath of [\"/outpost\", \"/tmp\"]) {\n    const offset = posix.relative(protectedPath, target);\n    const reverse = posix.relative(target, protectedPath);\n    invariant(\n      (offset === \"..\" || offset.startsWith(\"../\")) &&\n        (reverse === \"..\" || reverse.startsWith(\"../\")),\n      \"Isolated repository mounts must not overlap workspace or control directories\",\n    );\n  }\n}\n"]}

package/dist/providers/container-mounts.js

@@ -2,6 +2,7 @@ import { stat } from "node:fs/promises";
 import { isAbsolute, posix, relative } from "node:path";
 import { invariant, OutpostError } from "../domain/errors.js";
 import { expandPath } from "../infrastructure/files.js";
+import { validateIsolatedMount } from "./container-isolation.js";
 export async function containerMounts(context, config, platform, root, home) {
     const env = {
         ...context.variables,
@@ -10,8 +11,10 @@ export async function containerMounts(context, config, platform, root, home) {
         GIT_CONFIG_KEY_0: "safe.directory",
         GIT_CONFIG_VALUE_0: "*",
     };
-    const internal = [{ source: context.directory, target: root }];
-    if (context.gitDirectories.length) {
+    const internal = config.repositoryMode === "isolated"
+        ? []
+        : [{ source: context.directory, target: root }];
+    if (config.repositoryMode !== "isolated" && context.gitDirectories.length) {
         const common = context.gitDirectories.at(-1);
         const offset = relative(common, context.gitDirectories[0]);
         const nested = !isAbsolute(offset) &&
@@ -46,6 +49,8 @@ export async function containerMounts(context, config, platform, root, home) {
             : destination.startsWith("~/")
                 ? posix.resolve(home, destination.slice(2))
                 : posix.resolve(root, destination);
+        if (config.repositoryMode === "isolated")
+            await validateIsolatedMount(context, source, target);
         if (info.isFile() && !internal.includes(volume)) {
             const parent = posix.dirname(target);
             invariant(parent === home || parent.startsWith(home + "/"), "File mounts must live inside the agent home; mount the containing directory for other destinations");

package/dist/providers/container-mounts.js.map

@@ -1 +1 @@
-{"version":3,"file":"container-mounts.js","sourceRoot":"","sources":["../../src/providers/container-mounts.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,IAAI,EAAE,MAAM,kBAAkB,CAAC;AACxC,OAAO,EAAE,UAAU,EAAE,KAAK,EAAE,QAAQ,EAAE,MAAM,WAAW,CAAC;AACxD,OAAO,EAAE,SAAS,EAAE,YAAY,EAAE,MAAM,qBAAqB,CAAC;AAE9D,OAAO,EAAE,UAAU,EAAE,MAAM,4BAA4B,CAAC;AAGxD,MAAM,CAAC,KAAK,UAAU,eAAe,CACnC,OAAuB,EACvB,MAAwB,EACxB,QAAyB,EACzB,IAAY,EACZ,IAAY;IAEZ,MAAM,GAAG,GAA2B;QAClC,GAAG,OAAO,CAAC,SAAS;QACpB,IAAI,EAAE,IAAI;QACV,gBAAgB,EAAE,GAAG;QACrB,gBAAgB,EAAE,gBAAgB;QAClC,kBAAkB,EAAE,GAAG;KACxB,CAAC;IACF,MAAM,QAAQ,GAAa,CAAC,EAAE,MAAM,EAAE,OAAO,CAAC,SAAS,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC;IACzE,IAAI,OAAO,CAAC,cAAc,CAAC,MAAM,EAAE,CAAC;QAClC,MAAM,MAAM,GAAG,OAAO,CAAC,cAAc,CAAC,EAAE,CAAC,CAAC,CAAC,CAAE,CAAC;QAC9C,MAAM,MAAM,GAAG,QAAQ,CAAC,MAAM,EAAE,OAAO,CAAC,cAAc,CAAC,CAAC,CAAE,CAAC,CAAC;QAC5D,MAAM,MAAM,GACV,CAAC,UAAU,CAAC,MAAM,CAAC;YACnB,MAAM,KAAK,IAAI;YACf,CAAC,MAAM,CAAC,UAAU,CAAC,MAAM,CAAC;YAC1B,CAAC,MAAM,CAAC,UAAU,CAAC,KAAK,CAAC,CAAC;QAC5B,QAAQ,CAAC,IAAI,CAAC;YACZ,MAAM,EAAE,MAAM;YACd,MAAM,EAAE,qBAAqB;SAC9B,CAAC,CAAC;QACH,IAAI,CAAC,MAAM;YACT,QAAQ,CAAC,IAAI,CAAC;gBACZ,MAAM,EAAE,OAAO,CAAC,cAAc,CAAC,CAAC,CAAE;gBAClC,MAAM,EAAE,uBAAuB;aAChC,CAAC,CAAC;QACL,GAAG,CAAC,OAAO,GAAG,MAAM;YAClB,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,qBAAqB,EAAE,MAAM,CAAC,UAAU,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC;YACjE,CAAC,CAAC,uBAAuB,CAAC;QAC5B,GAAG,CAAC,cAAc,GAAG,qBAAqB,CAAC;QAC3C,GAAG,CAAC,aAAa,GAAG,IAAI,CAAC;IAC3B,CAAC;IACD,MAAM,OAAO,GAAa,EAAE,CAAC;IAC7B,MAAM,WAAW,GAAG,IAAI,GAAG,EAAU,CAAC;IACtC,KAAK,MAAM,MAAM,IAAI,CAAC,GAAG,QAAQ,EAAE,GAAG,CAAC,MAAM,CAAC,OAAO,IAAI,EAAE,CAAC,CAAC,EAAE,CAAC;QAC9D,MAAM,MAAM,GAAG,UAAU,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,UAAU,CAAC,CAAC;QAC7D,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC;QACvD,IAAI,CAAC,IAAI;YACP,MAAM,IAAI,YAAY,CACpB,UAAU,EACV,gCAAgC,MAAM,EAAE,CACzC,CAAC;QACJ,MAAM,WAAW,GAAG,MAAM,CAAC,MAAM,CAAC,UAAU,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC;QACxD,MAAM,MAAM,GACV,WAAW,KAAK,GAAG;YACjB,CAAC,CAAC,IAAI;YACN,CAAC,CAAC,WAAW,CAAC,UAAU,CAAC,IAAI,CAAC;gBAC5B,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,IAAI,EAAE,WAAW,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;gBAC3C,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,IAAI,EAAE,WAAW,CAAC,CAAC;QACzC,IAAI,IAAI,CAAC,MAAM,EAAE,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC,MAAM,CAAC,EAAE,CAAC;YAChD,MAAM,MAAM,GAAG,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;YACrC,SAAS,CACP,MAAM,KAAK,IAAI,IAAI,MAAM,CAAC,UAAU,CAAC,IAAI,GAAG,GAAG,CAAC,EAChD,oGAAoG,CACrG,CAAC;YACF,KAAK,IAAI,MAAM,GAAG,MAAM,EAAE,MAAM,KAAK,IAAI,EAAE,MAAM,GAAG,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC;gBACvE,WAAW,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;QAC5B,CAAC;QACD,SAAS,CACP,CAAC,MAAM,CAAC,QAAQ,CAAC,GAAG,CAAC,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,GAAG,CAAC,EAC9C,mCAAmC,CACpC,CAAC;QACF,IAAI,MAAM,CAAC,KAAK,KAAK,KAAK,IAAI,QAAQ,KAAK,OAAO;YAChD,OAAO,CAAC,IAAI,CACV,SAAS,EACT,oBAAoB,MAAM,WAAW,MAAM,GAAG,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,EAAE,EAAE,CACnF,CAAC;;YAEF,OAAO,CAAC,IAAI,CACV,UAAU,EACV,GAAG,MAAM,IAAI,MAAM,IAAI,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,GAAG,MAAM,CAAC,KAAK,IAAI,GAAG,EAAE,CAC5E,CAAC;IACN,CAAC;IAED,OAAO,EAAE,GAAG,EAAE,OAAO,EAAE,WAAW,EAAE,CAAC;AACvC,CAAC","sourcesContent":["import { stat } from \"node:fs/promises\";\nimport { isAbsolute, posix, relative } from \"node:path\";\nimport { invariant, OutpostError } from \"../domain/errors.ts\";\nimport type { SandboxContext, Volume } from \"../domain/sandbox.types.ts\";\nimport { expandPath } from \"../infrastructure/files.ts\";\nimport type { ContainerMounts, ContainerOptions } from \"./container.types.ts\";\n\nexport async function containerMounts(\n  context: SandboxContext,\n  config: ContainerOptions,\n  platform: NodeJS.Platform,\n  root: string,\n  home: string,\n): Promise<ContainerMounts> {\n  const env: Record<string, string> = {\n    ...context.variables,\n    HOME: home,\n    GIT_CONFIG_COUNT: \"1\",\n    GIT_CONFIG_KEY_0: \"safe.directory\",\n    GIT_CONFIG_VALUE_0: \"*\",\n  };\n  const internal: Volume[] = [{ source: context.directory, target: root }];\n  if (context.gitDirectories.length) {\n    const common = context.gitDirectories.at(-1)!;\n    const offset = relative(common, context.gitDirectories[0]!);\n    const nested =\n      !isAbsolute(offset) &&\n      offset !== \"..\" &&\n      !offset.startsWith(\"..\\\\\") &&\n      !offset.startsWith(\"../\");\n    internal.push({\n      source: common,\n      target: \"/outpost/git/common\",\n    });\n    if (!nested)\n      internal.push({\n        source: context.gitDirectories[0]!,\n        target: \"/outpost/git/worktree\",\n      });\n    env.GIT_DIR = nested\n      ? posix.join(\"/outpost/git/common\", offset.replaceAll(\"\\\\\", \"/\"))\n      : \"/outpost/git/worktree\";\n    env.GIT_COMMON_DIR = \"/outpost/git/common\";\n    env.GIT_WORK_TREE = root;\n  }\n  const volumes: string[] = [];\n  const fileParents = new Set<string>();\n  for (const volume of [...internal, ...(config.volumes ?? [])]) {\n    const source = expandPath(volume.source, context.repository);\n    const info = await stat(source).catch(() => undefined);\n    if (!info)\n      throw new OutpostError(\n        \"provider\",\n        `Mount source is unavailable: ${source}`,\n      );\n    const destination = volume.target.replaceAll(\"\\\\\", \"/\");\n    const target =\n      destination === \"~\"\n        ? home\n        : destination.startsWith(\"~/\")\n          ? posix.resolve(home, destination.slice(2))\n          : posix.resolve(root, destination);\n    if (info.isFile() && !internal.includes(volume)) {\n      const parent = posix.dirname(target);\n      invariant(\n        parent === home || parent.startsWith(home + \"/\"),\n        \"File mounts must live inside the agent home; mount the containing directory for other destinations\",\n      );\n      for (let folder = parent; folder !== home; folder = posix.dirname(folder))\n        fileParents.add(folder);\n    }\n    invariant(\n      !source.includes(\",\") && !target.includes(\",\"),\n      \"Mount paths cannot contain commas\",\n    );\n    if (config.label === false || platform !== \"linux\")\n      volumes.push(\n        \"--mount\",\n        `type=bind,source=${source},target=${target}${volume.readOnly ? \",readonly\" : \"\"}`,\n      );\n    else\n      volumes.push(\n        \"--volume\",\n        `${source}:${target}:${volume.readOnly ? \"ro,\" : \"\"}${config.label ?? \"z\"}`,\n      );\n  }\n\n  return { env, volumes, fileParents };\n}\n"]}
+{"version":3,"file":"container-mounts.js","sourceRoot":"","sources":["../../src/providers/container-mounts.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,IAAI,EAAE,MAAM,kBAAkB,CAAC;AACxC,OAAO,EAAE,UAAU,EAAE,KAAK,EAAE,QAAQ,EAAE,MAAM,WAAW,CAAC;AACxD,OAAO,EAAE,SAAS,EAAE,YAAY,EAAE,MAAM,qBAAqB,CAAC;AAE9D,OAAO,EAAE,UAAU,EAAE,MAAM,4BAA4B,CAAC;AACxD,OAAO,EAAE,qBAAqB,EAAE,MAAM,0BAA0B,CAAC;AAGjE,MAAM,CAAC,KAAK,UAAU,eAAe,CACnC,OAAuB,EACvB,MAAwB,EACxB,QAAyB,EACzB,IAAY,EACZ,IAAY;IAEZ,MAAM,GAAG,GAA2B;QAClC,GAAG,OAAO,CAAC,SAAS;QACpB,IAAI,EAAE,IAAI;QACV,gBAAgB,EAAE,GAAG;QACrB,gBAAgB,EAAE,gBAAgB;QAClC,kBAAkB,EAAE,GAAG;KACxB,CAAC;IACF,MAAM,QAAQ,GACZ,MAAM,CAAC,cAAc,KAAK,UAAU;QAClC,CAAC,CAAC,EAAE;QACJ,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,OAAO,CAAC,SAAS,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC;IACpD,IAAI,MAAM,CAAC,cAAc,KAAK,UAAU,IAAI,OAAO,CAAC,cAAc,CAAC,MAAM,EAAE,CAAC;QAC1E,MAAM,MAAM,GAAG,OAAO,CAAC,cAAc,CAAC,EAAE,CAAC,CAAC,CAAC,CAAE,CAAC;QAC9C,MAAM,MAAM,GAAG,QAAQ,CAAC,MAAM,EAAE,OAAO,CAAC,cAAc,CAAC,CAAC,CAAE,CAAC,CAAC;QAC5D,MAAM,MAAM,GACV,CAAC,UAAU,CAAC,MAAM,CAAC;YACnB,MAAM,KAAK,IAAI;YACf,CAAC,MAAM,CAAC,UAAU,CAAC,MAAM,CAAC;YAC1B,CAAC,MAAM,CAAC,UAAU,CAAC,KAAK,CAAC,CAAC;QAC5B,QAAQ,CAAC,IAAI,CAAC;YACZ,MAAM,EAAE,MAAM;YACd,MAAM,EAAE,qBAAqB;SAC9B,CAAC,CAAC;QACH,IAAI,CAAC,MAAM;YACT,QAAQ,CAAC,IAAI,CAAC;gBACZ,MAAM,EAAE,OAAO,CAAC,cAAc,CAAC,CAAC,CAAE;gBAClC,MAAM,EAAE,uBAAuB;aAChC,CAAC,CAAC;QACL,GAAG,CAAC,OAAO,GAAG,MAAM;YAClB,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,qBAAqB,EAAE,MAAM,CAAC,UAAU,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC;YACjE,CAAC,CAAC,uBAAuB,CAAC;QAC5B,GAAG,CAAC,cAAc,GAAG,qBAAqB,CAAC;QAC3C,GAAG,CAAC,aAAa,GAAG,IAAI,CAAC;IAC3B,CAAC;IACD,MAAM,OAAO,GAAa,EAAE,CAAC;IAC7B,MAAM,WAAW,GAAG,IAAI,GAAG,EAAU,CAAC;IACtC,KAAK,MAAM,MAAM,IAAI,CAAC,GAAG,QAAQ,EAAE,GAAG,CAAC,MAAM,CAAC,OAAO,IAAI,EAAE,CAAC,CAAC,EAAE,CAAC;QAC9D,MAAM,MAAM,GAAG,UAAU,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,UAAU,CAAC,CAAC;QAC7D,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC;QACvD,IAAI,CAAC,IAAI;YACP,MAAM,IAAI,YAAY,CACpB,UAAU,EACV,gCAAgC,MAAM,EAAE,CACzC,CAAC;QACJ,MAAM,WAAW,GAAG,MAAM,CAAC,MAAM,CAAC,UAAU,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC;QACxD,MAAM,MAAM,GACV,WAAW,KAAK,GAAG;YACjB,CAAC,CAAC,IAAI;YACN,CAAC,CAAC,WAAW,CAAC,UAAU,CAAC,IAAI,CAAC;gBAC5B,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,IAAI,EAAE,WAAW,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;gBAC3C,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,IAAI,EAAE,WAAW,CAAC,CAAC;QACzC,IAAI,MAAM,CAAC,cAAc,KAAK,UAAU;YACtC,MAAM,qBAAqB,CAAC,OAAO,EAAE,MAAM,EAAE,MAAM,CAAC,CAAC;QACvD,IAAI,IAAI,CAAC,MAAM,EAAE,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC,MAAM,CAAC,EAAE,CAAC;YAChD,MAAM,MAAM,GAAG,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;YACrC,SAAS,CACP,MAAM,KAAK,IAAI,IAAI,MAAM,CAAC,UAAU,CAAC,IAAI,GAAG,GAAG,CAAC,EAChD,oGAAoG,CACrG,CAAC;YACF,KAAK,IAAI,MAAM,GAAG,MAAM,EAAE,MAAM,KAAK,IAAI,EAAE,MAAM,GAAG,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC;gBACvE,WAAW,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;QAC5B,CAAC;QACD,SAAS,CACP,CAAC,MAAM,CAAC,QAAQ,CAAC,GAAG,CAAC,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,GAAG,CAAC,EAC9C,mCAAmC,CACpC,CAAC;QACF,IAAI,MAAM,CAAC,KAAK,KAAK,KAAK,IAAI,QAAQ,KAAK,OAAO;YAChD,OAAO,CAAC,IAAI,CACV,SAAS,EACT,oBAAoB,MAAM,WAAW,MAAM,GAAG,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,EAAE,EAAE,CACnF,CAAC;;YAEF,OAAO,CAAC,IAAI,CACV,UAAU,EACV,GAAG,MAAM,IAAI,MAAM,IAAI,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,GAAG,MAAM,CAAC,KAAK,IAAI,GAAG,EAAE,CAC5E,CAAC;IACN,CAAC;IAED,OAAO,EAAE,GAAG,EAAE,OAAO,EAAE,WAAW,EAAE,CAAC;AACvC,CAAC","sourcesContent":["import { stat } from \"node:fs/promises\";\nimport { isAbsolute, posix, relative } from \"node:path\";\nimport { invariant, OutpostError } from \"../domain/errors.ts\";\nimport type { SandboxContext, Volume } from \"../domain/sandbox.types.ts\";\nimport { expandPath } from \"../infrastructure/files.ts\";\nimport { validateIsolatedMount } from \"./container-isolation.ts\";\nimport type { ContainerMounts, ContainerOptions } from \"./container.types.ts\";\n\nexport async function containerMounts(\n  context: SandboxContext,\n  config: ContainerOptions,\n  platform: NodeJS.Platform,\n  root: string,\n  home: string,\n): Promise<ContainerMounts> {\n  const env: Record<string, string> = {\n    ...context.variables,\n    HOME: home,\n    GIT_CONFIG_COUNT: \"1\",\n    GIT_CONFIG_KEY_0: \"safe.directory\",\n    GIT_CONFIG_VALUE_0: \"*\",\n  };\n  const internal: Volume[] =\n    config.repositoryMode === \"isolated\"\n      ? []\n      : [{ source: context.directory, target: root }];\n  if (config.repositoryMode !== \"isolated\" && context.gitDirectories.length) {\n    const common = context.gitDirectories.at(-1)!;\n    const offset = relative(common, context.gitDirectories[0]!);\n    const nested =\n      !isAbsolute(offset) &&\n      offset !== \"..\" &&\n      !offset.startsWith(\"..\\\\\") &&\n      !offset.startsWith(\"../\");\n    internal.push({\n      source: common,\n      target: \"/outpost/git/common\",\n    });\n    if (!nested)\n      internal.push({\n        source: context.gitDirectories[0]!,\n        target: \"/outpost/git/worktree\",\n      });\n    env.GIT_DIR = nested\n      ? posix.join(\"/outpost/git/common\", offset.replaceAll(\"\\\\\", \"/\"))\n      : \"/outpost/git/worktree\";\n    env.GIT_COMMON_DIR = \"/outpost/git/common\";\n    env.GIT_WORK_TREE = root;\n  }\n  const volumes: string[] = [];\n  const fileParents = new Set<string>();\n  for (const volume of [...internal, ...(config.volumes ?? [])]) {\n    const source = expandPath(volume.source, context.repository);\n    const info = await stat(source).catch(() => undefined);\n    if (!info)\n      throw new OutpostError(\n        \"provider\",\n        `Mount source is unavailable: ${source}`,\n      );\n    const destination = volume.target.replaceAll(\"\\\\\", \"/\");\n    const target =\n      destination === \"~\"\n        ? home\n        : destination.startsWith(\"~/\")\n          ? posix.resolve(home, destination.slice(2))\n          : posix.resolve(root, destination);\n    if (config.repositoryMode === \"isolated\")\n      await validateIsolatedMount(context, source, target);\n    if (info.isFile() && !internal.includes(volume)) {\n      const parent = posix.dirname(target);\n      invariant(\n        parent === home || parent.startsWith(home + \"/\"),\n        \"File mounts must live inside the agent home; mount the containing directory for other destinations\",\n      );\n      for (let folder = parent; folder !== home; folder = posix.dirname(folder))\n        fileParents.add(folder);\n    }\n    invariant(\n      !source.includes(\",\") && !target.includes(\",\"),\n      \"Mount paths cannot contain commas\",\n    );\n    if (config.label === false || platform !== \"linux\")\n      volumes.push(\n        \"--mount\",\n        `type=bind,source=${source},target=${target}${volume.readOnly ? \",readonly\" : \"\"}`,\n      );\n    else\n      volumes.push(\n        \"--volume\",\n        `${source}:${target}:${volume.readOnly ? \"ro,\" : \"\"}${config.label ?? \"z\"}`,\n      );\n  }\n\n  return { env, volumes, fileParents };\n}\n"]}

package/dist/providers/container-network.d.ts

@@ -0,0 +1,2 @@
+import type { ContainerOptions } from "./container.types.ts";
+export declare function containerNetworks(options: ContainerOptions): readonly string[];

package/dist/providers/container-network.js

@@ -0,0 +1,14 @@
+import { validateEgress } from "../domain/egress.js";
+import { invariant } from "../domain/errors.js";
+export function containerNetworks(options) {
+    const policy = validateEgress(options.egress);
+    const networks = typeof options.networks === "string"
+        ? [options.networks]
+        : [...(options.networks ?? [])];
+    if (!policy)
+        return networks;
+    invariant(policy.mode === "deny-all", "Docker/Podman cannot enforce egress allowlists; use Vercel or an externally managed firewall");
+    invariant(networks.every((network) => network === "none"), "egress deny-all conflicts with configured networks");
+    return ["none"];
+}
+//# sourceMappingURL=container-network.js.map

package/dist/providers/container-network.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"container-network.js","sourceRoot":"","sources":["../../src/providers/container-network.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,cAAc,EAAE,MAAM,qBAAqB,CAAC;AACrD,OAAO,EAAE,SAAS,EAAE,MAAM,qBAAqB,CAAC;AAGhD,MAAM,UAAU,iBAAiB,CAC/B,OAAyB;IAEzB,MAAM,MAAM,GAAG,cAAc,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;IAC9C,MAAM,QAAQ,GACZ,OAAO,OAAO,CAAC,QAAQ,KAAK,QAAQ;QAClC,CAAC,CAAC,CAAC,OAAO,CAAC,QAAQ,CAAC;QACpB,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,QAAQ,IAAI,EAAE,CAAC,CAAC,CAAC;IACpC,IAAI,CAAC,MAAM;QAAE,OAAO,QAAQ,CAAC;IAC7B,SAAS,CACP,MAAM,CAAC,IAAI,KAAK,UAAU,EAC1B,8FAA8F,CAC/F,CAAC;IACF,SAAS,CACP,QAAQ,CAAC,KAAK,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,OAAO,KAAK,MAAM,CAAC,EAC/C,oDAAoD,CACrD,CAAC;IACF,OAAO,CAAC,MAAM,CAAC,CAAC;AAClB,CAAC","sourcesContent":["import { validateEgress } from \"../domain/egress.ts\";\nimport { invariant } from \"../domain/errors.ts\";\nimport type { ContainerOptions } from \"./container.types.ts\";\n\nexport function containerNetworks(\n  options: ContainerOptions,\n): readonly string[] {\n  const policy = validateEgress(options.egress);\n  const networks =\n    typeof options.networks === \"string\"\n      ? [options.networks]\n      : [...(options.networks ?? [])];\n  if (!policy) return networks;\n  invariant(\n    policy.mode === \"deny-all\",\n    \"Docker/Podman cannot enforce egress allowlists; use Vercel or an externally managed firewall\",\n  );\n  invariant(\n    networks.every((network) => network === \"none\"),\n    \"egress deny-all conflicts with configured networks\",\n  );\n  return [\"none\"];\n}\n"]}

package/dist/providers/container-plan.js

@@ -18,10 +18,12 @@ export function containerPlan({ config, engine, user, root, name, image, volumes
             ]
             : []),
         "--workdir",
-        root,
+        config.repositoryMode === "isolated" ? "/" : root,
         "--cap-drop",
         "ALL",
-        ...(fileParents.size || config.caches?.length
+        ...(fileParents.size ||
+            config.caches?.length ||
+            config.repositoryMode === "isolated"
             ? ["--cap-add", "CHOWN"]
             : []),
         "--security-opt",

package/dist/providers/container-plan.js.map

@@ -1 +1 @@
-{"version":3,"file":"container-plan.js","sourceRoot":"","sources":["../../src/providers/container-plan.ts"],"names":[],"mappings":"AAEA,MAAM,UAAU,aAAa,CAAC,EAC5B,MAAM,EACN,MAAM,EACN,IAAI,EACJ,IAAI,EACJ,IAAI,EACJ,KAAK,EACL,OAAO,EACP,WAAW,GACU;IACrB,MAAM,QAAQ,GACZ,OAAO,MAAM,CAAC,QAAQ,KAAK,QAAQ;QACjC,CAAC,CAAC,CAAC,MAAM,CAAC,QAAQ,CAAC;QACnB,CAAC,CAAC,CAAC,MAAM,CAAC,QAAQ,IAAI,EAAE,CAAC,CAAC;IAC9B,MAAM,IAAI,GAAG;QACX,QAAQ;QACR,QAAQ;QACR,IAAI;QACJ,QAAQ;QACR,QAAQ;QACR,GAAG,IAAI,CAAC,GAAG,IAAI,IAAI,CAAC,GAAG,EAAE;QACzB,GAAG,CAAC,MAAM,KAAK,QAAQ;YACvB,MAAM,CAAC,MAAM,KAAK,KAAK;YACvB,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,MAAM,KAAK,SAAS,CAAC;YACvD,CAAC,CAAC;gBACE,UAAU;gBACV,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,eAAe,IAAI,CAAC,GAAG,QAAQ,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC,SAAS;aACpE;YACH,CAAC,CAAC,EAAE,CAAC;QACP,WAAW;QACX,IAAI;QACJ,YAAY;QACZ,KAAK;QACL,GAAG,CAAC,WAAW,CAAC,IAAI,IAAI,MAAM,CAAC,MAAM,EAAE,MAAM;YAC3C,CAAC,CAAC,CAAC,WAAW,EAAE,OAAO,CAAC;YACxB,CAAC,CAAC,EAAE,CAAC;QACP,gBAAgB;QAChB,mBAAmB;QACnB,SAAS;QACT,MAAM,KAAK,QAAQ;YACjB,CAAC,CAAC,0BAA0B;YAC5B,CAAC,CAAC,sBAAsB,WAAW,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,QAAQ,WAAW,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,YAAY;QAC5G,GAAG,OAAO;QACV,GAAG,QAAQ,CAAC,OAAO,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC,WAAW,EAAE,OAAO,CAAC,CAAC;QACxD,GAAG,CAAC,MAAM,CAAC,MAAM,IAAI,EAAE,CAAC,CAAC,OAAO,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC,aAAa,EAAE,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC;QAC3E,GAAG,CAAC,MAAM,CAAC,OAAO,IAAI,EAAE,CAAC,CAAC,OAAO,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,UAAU,EAAE,MAAM,CAAC,CAAC;QACnE,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;QACvD,GAAG,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,UAAU,EAAE,GAAG,MAAM,CAAC,QAAQ,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;QAC/D,cAAc;QACd,OAAO;QACP,KAAK;QACL,UAAU;KACX,CAAC;IAEF,OAAO,IAAI,CAAC;AACd,CAAC","sourcesContent":["import type { ContainerPlanOptions } from \"./container.types.ts\";\n\nexport function containerPlan({\n  config,\n  engine,\n  user,\n  root,\n  name,\n  image,\n  volumes,\n  fileParents,\n}: ContainerPlanOptions): string[] {\n  const networks =\n    typeof config.networks === \"string\"\n      ? [config.networks]\n      : (config.networks ?? []);\n  const args = [\n    \"create\",\n    \"--name\",\n    name,\n    \"--init\",\n    \"--user\",\n    `${user.uid}:${user.gid}`,\n    ...(engine === \"podman\" &&\n    config.userns !== false &&\n    (process.getuid?.() !== 0 || config.userns === \"keep-id\")\n      ? [\n          \"--userns\",\n          config.user ? `keep-id:uid=${user.uid},gid=${user.gid}` : \"keep-id\",\n        ]\n      : []),\n    \"--workdir\",\n    root,\n    \"--cap-drop\",\n    \"ALL\",\n    ...(fileParents.size || config.caches?.length\n      ? [\"--cap-add\", \"CHOWN\"]\n      : []),\n    \"--security-opt\",\n    \"no-new-privileges\",\n    \"--tmpfs\",\n    engine === \"podman\"\n      ? \"/home/agent:rw,mode=1777\"\n      : `/home/agent:rw,uid=${fileParents.size ? 0 : user.uid},gid=${fileParents.size ? 0 : user.gid},mode=0700`,\n    ...volumes,\n    ...networks.flatMap((network) => [\"--network\", network]),\n    ...(config.groups ?? []).flatMap((group) => [\"--group-add\", String(group)]),\n    ...(config.devices ?? []).flatMap((device) => [\"--device\", device]),\n    ...(config.cpus ? [\"--cpus\", String(config.cpus)] : []),\n    ...(config.memoryMb ? [\"--memory\", `${config.memoryMb}m`] : []),\n    \"--entrypoint\",\n    \"sleep\",\n    image,\n    \"infinity\",\n  ];\n\n  return args;\n}\n"]}
+{"version":3,"file":"container-plan.js","sourceRoot":"","sources":["../../src/providers/container-plan.ts"],"names":[],"mappings":"AAEA,MAAM,UAAU,aAAa,CAAC,EAC5B,MAAM,EACN,MAAM,EACN,IAAI,EACJ,IAAI,EACJ,IAAI,EACJ,KAAK,EACL,OAAO,EACP,WAAW,GACU;IACrB,MAAM,QAAQ,GACZ,OAAO,MAAM,CAAC,QAAQ,KAAK,QAAQ;QACjC,CAAC,CAAC,CAAC,MAAM,CAAC,QAAQ,CAAC;QACnB,CAAC,CAAC,CAAC,MAAM,CAAC,QAAQ,IAAI,EAAE,CAAC,CAAC;IAC9B,MAAM,IAAI,GAAG;QACX,QAAQ;QACR,QAAQ;QACR,IAAI;QACJ,QAAQ;QACR,QAAQ;QACR,GAAG,IAAI,CAAC,GAAG,IAAI,IAAI,CAAC,GAAG,EAAE;QACzB,GAAG,CAAC,MAAM,KAAK,QAAQ;YACvB,MAAM,CAAC,MAAM,KAAK,KAAK;YACvB,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,MAAM,KAAK,SAAS,CAAC;YACvD,CAAC,CAAC;gBACE,UAAU;gBACV,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,eAAe,IAAI,CAAC,GAAG,QAAQ,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC,SAAS;aACpE;YACH,CAAC,CAAC,EAAE,CAAC;QACP,WAAW;QACX,MAAM,CAAC,cAAc,KAAK,UAAU,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI;QACjD,YAAY;QACZ,KAAK;QACL,GAAG,CAAC,WAAW,CAAC,IAAI;YACpB,MAAM,CAAC,MAAM,EAAE,MAAM;YACrB,MAAM,CAAC,cAAc,KAAK,UAAU;YAClC,CAAC,CAAC,CAAC,WAAW,EAAE,OAAO,CAAC;YACxB,CAAC,CAAC,EAAE,CAAC;QACP,gBAAgB;QAChB,mBAAmB;QACnB,SAAS;QACT,MAAM,KAAK,QAAQ;YACjB,CAAC,CAAC,0BAA0B;YAC5B,CAAC,CAAC,sBAAsB,WAAW,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,QAAQ,WAAW,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,YAAY;QAC5G,GAAG,OAAO;QACV,GAAG,QAAQ,CAAC,OAAO,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC,WAAW,EAAE,OAAO,CAAC,CAAC;QACxD,GAAG,CAAC,MAAM,CAAC,MAAM,IAAI,EAAE,CAAC,CAAC,OAAO,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC,aAAa,EAAE,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC;QAC3E,GAAG,CAAC,MAAM,CAAC,OAAO,IAAI,EAAE,CAAC,CAAC,OAAO,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,UAAU,EAAE,MAAM,CAAC,CAAC;QACnE,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;QACvD,GAAG,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,UAAU,EAAE,GAAG,MAAM,CAAC,QAAQ,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;QAC/D,cAAc;QACd,OAAO;QACP,KAAK;QACL,UAAU;KACX,CAAC;IAEF,OAAO,IAAI,CAAC;AACd,CAAC","sourcesContent":["import type { ContainerPlanOptions } from \"./container.types.ts\";\n\nexport function containerPlan({\n  config,\n  engine,\n  user,\n  root,\n  name,\n  image,\n  volumes,\n  fileParents,\n}: ContainerPlanOptions): string[] {\n  const networks =\n    typeof config.networks === \"string\"\n      ? [config.networks]\n      : (config.networks ?? []);\n  const args = [\n    \"create\",\n    \"--name\",\n    name,\n    \"--init\",\n    \"--user\",\n    `${user.uid}:${user.gid}`,\n    ...(engine === \"podman\" &&\n    config.userns !== false &&\n    (process.getuid?.() !== 0 || config.userns === \"keep-id\")\n      ? [\n          \"--userns\",\n          config.user ? `keep-id:uid=${user.uid},gid=${user.gid}` : \"keep-id\",\n        ]\n      : []),\n    \"--workdir\",\n    config.repositoryMode === \"isolated\" ? \"/\" : root,\n    \"--cap-drop\",\n    \"ALL\",\n    ...(fileParents.size ||\n    config.caches?.length ||\n    config.repositoryMode === \"isolated\"\n      ? [\"--cap-add\", \"CHOWN\"]\n      : []),\n    \"--security-opt\",\n    \"no-new-privileges\",\n    \"--tmpfs\",\n    engine === \"podman\"\n      ? \"/home/agent:rw,mode=1777\"\n      : `/home/agent:rw,uid=${fileParents.size ? 0 : user.uid},gid=${fileParents.size ? 0 : user.gid},mode=0700`,\n    ...volumes,\n    ...networks.flatMap((network) => [\"--network\", network]),\n    ...(config.groups ?? []).flatMap((group) => [\"--group-add\", String(group)]),\n    ...(config.devices ?? []).flatMap((device) => [\"--device\", device]),\n    ...(config.cpus ? [\"--cpus\", String(config.cpus)] : []),\n    ...(config.memoryMb ? [\"--memory\", `${config.memoryMb}m`] : []),\n    \"--entrypoint\",\n    \"sleep\",\n    image,\n    \"infinity\",\n  ];\n\n  return args;\n}\n"]}

package/dist/providers/container.constants.d.ts

@@ -5,6 +5,7 @@ export declare const containerDefaults: Readonly<{
     cleanupMs: 10000;
     retainBytes: 65536;
     root: "/workspace";
+    isolatedRoot: "/tmp/outpost/workspace";
     home: "/home/agent";
     minimumMemoryMb: 64;
 }>;

package/dist/providers/container.constants.js

@@ -5,6 +5,7 @@ export const containerDefaults = Object.freeze({
     cleanupMs: 10_000,
     retainBytes: 65_536,
     root: "/workspace",
+    isolatedRoot: "/tmp/outpost/workspace",
     home: "/home/agent",
     minimumMemoryMb: 64,
 });

package/dist/providers/container.constants.js.map

@@ -1 +1 @@
-{"version":3,"file":"container.constants.js","sourceRoot":"","sources":["../../src/providers/container.constants.ts"],"names":[],"mappings":"AAAA,MAAM,CAAC,MAAM,iBAAiB,GAAG,MAAM,CAAC,MAAM,CAAC;IAC7C,GAAG,EAAE,IAAI;IACT,GAAG,EAAE,IAAI;IACT,UAAU,EAAE,MAAM;IAClB,SAAS,EAAE,MAAM;IACjB,WAAW,EAAE,MAAM;IACnB,IAAI,EAAE,YAAY;IAClB,IAAI,EAAE,aAAa;IACnB,eAAe,EAAE,EAAE;CACpB,CAAC,CAAC","sourcesContent":["export const containerDefaults = Object.freeze({\n  uid: 1000,\n  gid: 1000,\n  deadlineMs: 60_000,\n  cleanupMs: 10_000,\n  retainBytes: 65_536,\n  root: \"/workspace\",\n  home: \"/home/agent\",\n  minimumMemoryMb: 64,\n});\n"]}
+{"version":3,"file":"container.constants.js","sourceRoot":"","sources":["../../src/providers/container.constants.ts"],"names":[],"mappings":"AAAA,MAAM,CAAC,MAAM,iBAAiB,GAAG,MAAM,CAAC,MAAM,CAAC;IAC7C,GAAG,EAAE,IAAI;IACT,GAAG,EAAE,IAAI;IACT,UAAU,EAAE,MAAM;IAClB,SAAS,EAAE,MAAM;IACjB,WAAW,EAAE,MAAM;IACnB,IAAI,EAAE,YAAY;IAClB,YAAY,EAAE,wBAAwB;IACtC,IAAI,EAAE,aAAa;IACnB,eAAe,EAAE,EAAE;CACpB,CAAC,CAAC","sourcesContent":["export const containerDefaults = Object.freeze({\n  uid: 1000,\n  gid: 1000,\n  deadlineMs: 60_000,\n  cleanupMs: 10_000,\n  retainBytes: 65_536,\n  root: \"/workspace\",\n  isolatedRoot: \"/tmp/outpost/workspace\",\n  home: \"/home/agent\",\n  minimumMemoryMb: 64,\n});\n"]}

package/dist/providers/container.js

@@ -1,6 +1,7 @@
 import { execFileSync } from "node:child_process";
 import { randomUUID } from "node:crypto";
 import { basename } from "node:path";
+import { containerNetworks } from "./container-network.js";
 import { invariant } from "../domain/errors.js";
 import { executeProcess, quote, requireSuccess, } from "../infrastructure/process.js";
 import { registerCleanup } from "../infrastructure/shutdown.js";
@@ -20,8 +21,12 @@ export function imageName(repository) {
 export function containerProvider(engine, options = {}, executor = executeProcess, platform = process.platform) {
     const config = {
         ...options,
+        networks: containerNetworks(options),
         caches: (options.caches ?? []).map((cache) => ({ ...cache })),
     };
+    invariant(config.repositoryMode === undefined ||
+        config.repositoryMode === "mounted" ||
+        config.repositoryMode === "isolated", "repositoryMode must be mounted or isolated");
     validateCaches(config);
     if (config.cpus !== undefined)
         invariant(Number.isFinite(config.cpus) && config.cpus > 0, "cpus must be positive");
@@ -30,7 +35,7 @@ export function containerProvider(engine, options = {}, executor = executeProces
             config.memoryMb >= containerDefaults.minimumMemoryMb, "memoryMb must be at least 64");
     return {
         name: engine,
-        placement: "mounted",
+        placement: config.repositoryMode === "isolated" ? "remote" : "mounted",
         variables: { ...config.variables },
         async acquire(context) {
             context.signal?.throwIfAborted();
@@ -51,7 +56,9 @@ export function containerProvider(engine, options = {}, executor = executeProces
                 ...extra,
             }, executor);
             await containerPreflight(engine, platform, call, config, image, user);
-            const root = containerDefaults.root, home = containerDefaults.home;
+            const root = config.repositoryMode === "isolated"
+                ? containerDefaults.isolatedRoot
+                : containerDefaults.root, home = containerDefaults.home;
             const { env, volumes, fileParents } = await containerMounts(context, config, platform, root, home);
             const caches = await cacheMounts(config.caches ?? [], context.repository, image, user);
             for (const cache of caches)
@@ -126,6 +133,16 @@ export function containerProvider(engine, options = {}, executor = executeProces
                         `${user.uid}:${user.gid}`,
                         home,
                     ]);
+                if (config.repositoryMode === "isolated")
+                    await call([
+                        "exec",
+                        "--user",
+                        "0:0",
+                        name,
+                        "sh",
+                        "-c",
+                        `mkdir -p ${quote(root)} && chmod 700 ${quote(root)} /tmp/outpost && chown ${user.uid}:${user.gid} ${quote(root)} /tmp/outpost`,
+                    ], context.signal ? { signal: context.signal } : {});
                 await call([
                     "exec",
                     name,

package/dist/providers/container.js.map

@@ -1 +1 @@
-{"version":3,"file":"container.js","sourceRoot":"","sources":["../../src/providers/container.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,YAAY,EAAE,MAAM,oBAAoB,CAAC;AAClD,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACzC,OAAO,EAAE,QAAQ,EAAE,MAAM,WAAW,CAAC;AAErC,OAAO,EAAE,SAAS,EAAE,MAAM,qBAAqB,CAAC;AAEhD,OAAO,EACL,cAAc,EACd,KAAK,EACL,cAAc,GACf,MAAM,8BAA8B,CAAC;AAEtC,OAAO,EAAE,eAAe,EAAE,MAAM,+BAA+B,CAAC;AAChE,OAAO,EAAE,WAAW,EAAE,cAAc,EAAE,MAAM,sBAAsB,CAAC;AACnE,OAAO,EACL,kBAAkB,EAClB,aAAa,GACd,MAAM,gCAAgC,CAAC;AACxC,OAAO,EAAE,gBAAgB,EAAE,MAAM,wBAAwB,CAAC;AAC1D,OAAO,EAAE,cAAc,EAAE,MAAM,sBAAsB,CAAC;AACtD,OAAO,EAAE,eAAe,EAAE,MAAM,uBAAuB,CAAC;AACxD,OAAO,EAAE,aAAa,EAAE,MAAM,qBAAqB,CAAC;AACpD,OAAO,EAAE,kBAAkB,EAAE,MAAM,0BAA0B,CAAC;AAC9D,OAAO,EAAE,iBAAiB,EAAE,MAAM,0BAA0B,CAAC;AAK7D,MAAM,UAAU,SAAS,CAAC,UAAkB;IAC1C,OAAO,WACL,QAAQ,CAAC,UAAU,CAAC;SACjB,WAAW,EAAE;SACb,OAAO,CAAC,eAAe,EAAE,GAAG,CAAC,IAAI,WACtC,EAAE,CAAC;AACL,CAAC;AAED,MAAM,UAAU,iBAAiB,CAC/B,MAAuB,EACvB,UAA4B,EAAE,EAC9B,WAAqB,cAAc,EACnC,WAA4B,OAAO,CAAC,QAAQ;IAE5C,MAAM,MAAM,GAAG;QACb,GAAG,OAAO;QACV,MAAM,EAAE,CAAC,OAAO,CAAC,MAAM,IAAI,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC,EAAE,GAAG,KAAK,EAAE,CAAC,CAAC;KAC9D,CAAC;IACF,cAAc,CAAC,MAAM,CAAC,CAAC;IACvB,IAAI,MAAM,CAAC,IAAI,KAAK,SAAS;QAC3B,SAAS,CACP,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,MAAM,CAAC,IAAI,GAAG,CAAC,EAC/C,uBAAuB,CACxB,CAAC;IACJ,IAAI,MAAM,CAAC,QAAQ,KAAK,SAAS;QAC/B,SAAS,CACP,MAAM,CAAC,aAAa,CAAC,MAAM,CAAC,QAAQ,CAAC;YACnC,MAAM,CAAC,QAAQ,IAAI,iBAAiB,CAAC,eAAe,EACtD,8BAA8B,CAC/B,CAAC;IACJ,OAAO;QACL,IAAI,EAAE,MAAM;QACZ,SAAS,EAAE,SAAS;QACpB,SAAS,EAAE,EAAE,GAAG,MAAM,CAAC,SAAS,EAAE;QAClC,KAAK,CAAC,OAAO,CAAC,OAAO;YACnB,OAAO,CAAC,MAAM,EAAE,cAAc,EAAE,CAAC;YACjC,MAAM,IAAI,GAAG,WAAW,UAAU,EAAE,EAAE,CAAC;YACvC,MAAM,KAAK,GAAG,MAAM,CAAC,KAAK,IAAI,SAAS,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC;YAC5D,MAAM,IAAI,GAAG,MAAM,CAAC,IAAI,IAAI;gBAC1B,GAAG,EAAE,OAAO,CAAC,MAAM,EAAE,EAAE,IAAI,iBAAiB,CAAC,GAAG;gBAChD,GAAG,EAAE,OAAO,CAAC,MAAM,EAAE,EAAE,IAAI,iBAAiB,CAAC,GAAG;aACjD,CAAC;YACF,SAAS,CACP,MAAM,CAAC,SAAS,CAAC,IAAI,CAAC,GAAG,CAAC;gBACxB,IAAI,CAAC,GAAG,IAAI,CAAC;gBACb,MAAM,CAAC,SAAS,CAAC,IAAI,CAAC,GAAG,CAAC;gBAC1B,IAAI,CAAC,GAAG,IAAI,CAAC,EACf,wBAAwB,CACzB,CAAC;YACF,MAAM,IAAI,GAAG,CAAC,IAAuB,EAAE,QAA0B,EAAE,EAAE,EAAE,CACrE,cAAc,CACZ;gBACE,UAAU,EAAE,MAAM;gBAClB,SAAS,EAAE,IAAI;gBACf,UAAU,EAAE,iBAAiB,CAAC,UAAU;gBACxC,GAAG,KAAK;aACT,EACD,QAAQ,CACT,CAAC;YACJ,MAAM,kBAAkB,CAAC,MAAM,EAAE,QAAQ,EAAE,IAAI,EAAE,MAAM,EAAE,KAAK,EAAE,IAAI,CAAC,CAAC;YACtE,MAAM,IAAI,GAAG,iBAAiB,CAAC,IAAI,EACjC,IAAI,GAAG,iBAAiB,CAAC,IAAI,CAAC;YAChC,MAAM,EAAE,GAAG,EAAE,OAAO,EAAE,WAAW,EAAE,GAAG,MAAM,eAAe,CACzD,OAAO,EACP,MAAM,EACN,QAAQ,EACR,IAAI,EACJ,IAAI,CACL,CAAC;YACF,MAAM,MAAM,GAAG,MAAM,WAAW,CAC9B,MAAM,CAAC,MAAM,IAAI,EAAE,EACnB,OAAO,CAAC,UAAU,EAClB,KAAK,EACL,IAAI,CACL,CAAC;YACF,KAAK,MAAM,KAAK,IAAI,MAAM;gBACxB,OAAO,CAAC,IAAI,CAAC,UAAU,EAAE,GAAG,KAAK,CAAC,MAAM,IAAI,KAAK,CAAC,MAAM,SAAS,CAAC,CAAC;YACrE,MAAM,IAAI,GAAG,aAAa,CAAC;gBACzB,MAAM;gBACN,MAAM;gBACN,IAAI;gBACJ,IAAI;gBACJ,IAAI;gBACJ,KAAK;gBACL,OAAO;gBACP,WAAW;aACZ,CAAC,CAAC;YACH,IAAI,MAAM,GAAG,KAAK,EAChB,SAAoC,CAAC;YACvC,IAAI,UAAU,GAAG,GAAG,EAAE,GAAE,CAAC,CAAC;YAC1B,MAAM,OAAO,GAAG,GAAkB,EAAE;gBAClC,MAAM,GAAG,IAAI,CAAC;gBACd,SAAS,KAAK,IAAI,CAAC,CAAC,IAAI,EAAE,SAAS,EAAE,IAAI,CAAC,CAAC;qBACxC,IAAI,CAAC,GAAG,EAAE;oBACT,UAAU,EAAE,CAAC;gBACf,CAAC,CAAC;qBACD,KAAK,CAAC,CAAC,KAAK,EAAE,EAAE;oBACf,SAAS,GAAG,SAAS,CAAC;oBACtB,MAAM,KAAK,CAAC;gBACd,CAAC,CAAC,CAAC;gBACL,OAAO,SAAS,CAAC;YACnB,CAAC,CAAC;YACF,IAAI,CAAC;gBACH,KAAK,MAAM,KAAK,IAAI,MAAM;oBACxB,MAAM,IAAI,CACR;wBACE,QAAQ;wBACR,QAAQ;wBACR,GAAG,kBAAkB,CAAC,MAAM,CAAC;wBAC7B,SAAS;wBACT,GAAG,aAAa,CAAC,KAAK,OAAO;wBAC7B,KAAK,CAAC,MAAM;qBACb,EACD,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,OAAO,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CACjD,CAAC;gBACJ,MAAM,IAAI,CAAC,IAAI,EAAE;oBACf,GAAG,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,OAAO,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;iBACtD,CAAC,CAAC;gBACH,MAAM,IAAI,CACR,CAAC,OAAO,EAAE,IAAI,CAAC,EACf,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,OAAO,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CACjD,CAAC;gBACF,KAAK,MAAM,KAAK,IAAI,MAAM,EAAE,CAAC;oBAC3B,MAAM,IAAI,CACR;wBACE,MAAM;wBACN,QAAQ;wBACR,KAAK;wBACL,IAAI;wBACJ,OAAO;wBACP,GAAG,IAAI,CAAC,GAAG,IAAI,IAAI,CAAC,GAAG,EAAE;wBACzB,KAAK,CAAC,MAAM;qBACb,EACD,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,OAAO,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CACjD,CAAC;oBACF,MAAM,IAAI,CACR,CAAC,MAAM,EAAE,IAAI,EAAE,OAAO,EAAE,KAAK,EAAE,KAAK,CAAC,MAAM,CAAC,EAC5C,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,OAAO,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CACjD,CAAC;gBACJ,CAAC;gBACD,KAAK,MAAM,MAAM,IAAI,WAAW;oBAC9B,MAAM,IAAI,CAAC;wBACT,MAAM;wBACN,QAAQ;wBACR,KAAK;wBACL,IAAI;wBACJ,IAAI;wBACJ,IAAI;wBACJ,YAAY,KAAK,CAAC,MAAM,CAAC,aAAa,IAAI,CAAC,GAAG,IAAI,IAAI,CAAC,GAAG,IAAI,KAAK,CAAC,MAAM,CAAC,EAAE;qBAC9E,CAAC,CAAC;gBACL,IAAI,WAAW,CAAC,IAAI;oBAClB,MAAM,IAAI,CAAC;wBACT,MAAM;wBACN,QAAQ;wBACR,KAAK;wBACL,IAAI;wBACJ,OAAO;wBACP,GAAG,IAAI,CAAC,GAAG,IAAI,IAAI,CAAC,GAAG,EAAE;wBACzB,IAAI;qBACL,CAAC,CAAC;gBACL,MAAM,IAAI,CAAC;oBACT,MAAM;oBACN,IAAI;oBACJ,IAAI;oBACJ,IAAI;oBACJ,qHAAqH;iBACtH,CAAC,CAAC;YACL,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,IAAI,CAAC;oBACH,MAAM,OAAO,EAAE,CAAC;gBAClB,CAAC;gBAAC,OAAO,OAAO,EAAE,CAAC;oBACjB,MAAM,IAAI,cAAc,CACtB,CAAC,KAAK,EAAE,OAAO,CAAC,EAChB,yCAAyC,CAC1C,CAAC;gBACJ,CAAC;gBACD,MAAM,KAAK,CAAC;YACd,CAAC;YACD,UAAU,GAAG,eAAe,CAAC,OAAO,EAAE,GAAG,EAAE;gBACzC,IAAI,CAAC,MAAM;oBACT,YAAY,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,SAAS,EAAE,IAAI,CAAC,EAAE;wBAC5C,OAAO,EAAE,iBAAiB,CAAC,SAAS;wBACpC,KAAK,EAAE,QAAQ;wBACf,WAAW,EAAE,IAAI;qBAClB,CAAC,CAAC;YACP,CAAC,CAAC,CAAC;YACH,OAAO;gBACL,IAAI;gBACJ,IAAI;gBACJ,MAAM,EAAE,gBAAgB,CAAC;oBACvB,MAAM;oBACN,MAAM;oBACN,QAAQ;oBACR,IAAI;oBACJ,IAAI;oBACJ,GAAG;oBACH,IAAI;oBACJ,QAAQ,EAAE,GAAG,EAAE,CAAC,MAAM;iBACvB,CAAC;gBACF,GAAG,cAAc,CAAC;oBAChB,MAAM;oBACN,MAAM;oBACN,QAAQ;oBACR,IAAI;oBACJ,IAAI;oBACJ,GAAG;oBACH,IAAI;oBACJ,QAAQ,EAAE,GAAG,EAAE,CAAC,MAAM;iBACvB,CAAC;gBACF,OAAO;aACR,CAAC;QACJ,CAAC;KACF,CAAC;AACJ,CAAC","sourcesContent":["import { execFileSync } from \"node:child_process\";\nimport { randomUUID } from \"node:crypto\";\nimport { basename } from \"node:path\";\nimport type { Command } from \"../domain/command.types.ts\";\nimport { invariant } from \"../domain/errors.ts\";\nimport type { SandboxProvider } from \"../domain/sandbox.types.ts\";\nimport {\n  executeProcess,\n  quote,\n  requireSuccess,\n} from \"../infrastructure/process.ts\";\nimport type { Executor } from \"../infrastructure/process.types.ts\";\nimport { registerCleanup } from \"../infrastructure/shutdown.ts\";\nimport { cacheMounts, validateCaches } from \"./container-cache.ts\";\nimport {\n  cacheCreateOptions,\n  cacheDefaults,\n} from \"./container-cache.constants.ts\";\nimport { containerCommand } from \"./container-command.ts\";\nimport { containerFiles } from \"./container-files.ts\";\nimport { containerMounts } from \"./container-mounts.ts\";\nimport { containerPlan } from \"./container-plan.ts\";\nimport { containerPreflight } from \"./container-preflight.ts\";\nimport { containerDefaults } from \"./container.constants.ts\";\nimport type { ContainerEngine, ContainerOptions } from \"./container.types.ts\";\n\nexport type { ContainerOptions } from \"./container.types.ts\";\n\nexport function imageName(repository: string): string {\n  return `outpost:${\n    basename(repository)\n      .toLowerCase()\n      .replace(/[^a-z0-9_.-]/g, \"-\") || \"workspace\"\n  }`;\n}\n\nexport function containerProvider(\n  engine: ContainerEngine,\n  options: ContainerOptions = {},\n  executor: Executor = executeProcess,\n  platform: NodeJS.Platform = process.platform,\n): SandboxProvider {\n  const config = {\n    ...options,\n    caches: (options.caches ?? []).map((cache) => ({ ...cache })),\n  };\n  validateCaches(config);\n  if (config.cpus !== undefined)\n    invariant(\n      Number.isFinite(config.cpus) && config.cpus > 0,\n      \"cpus must be positive\",\n    );\n  if (config.memoryMb !== undefined)\n    invariant(\n      Number.isSafeInteger(config.memoryMb) &&\n        config.memoryMb >= containerDefaults.minimumMemoryMb,\n      \"memoryMb must be at least 64\",\n    );\n  return {\n    name: engine,\n    placement: \"mounted\",\n    variables: { ...config.variables },\n    async acquire(context) {\n      context.signal?.throwIfAborted();\n      const name = `outpost-${randomUUID()}`;\n      const image = config.image ?? imageName(context.repository);\n      const user = config.user ?? {\n        uid: process.getuid?.() ?? containerDefaults.uid,\n        gid: process.getgid?.() ?? containerDefaults.gid,\n      };\n      invariant(\n        Number.isInteger(user.uid) &&\n          user.uid >= 0 &&\n          Number.isInteger(user.gid) &&\n          user.gid >= 0,\n        \"Invalid container user\",\n      );\n      const call = (args: readonly string[], extra: Partial<Command> = {}) =>\n        requireSuccess(\n          {\n            executable: engine,\n            arguments: args,\n            deadlineMs: containerDefaults.deadlineMs,\n            ...extra,\n          },\n          executor,\n        );\n      await containerPreflight(engine, platform, call, config, image, user);\n      const root = containerDefaults.root,\n        home = containerDefaults.home;\n      const { env, volumes, fileParents } = await containerMounts(\n        context,\n        config,\n        platform,\n        root,\n        home,\n      );\n      const caches = await cacheMounts(\n        config.caches ?? [],\n        context.repository,\n        image,\n        user,\n      );\n      for (const cache of caches)\n        volumes.push(\"--volume\", `${cache.volume}:${cache.target}:nocopy`);\n      const args = containerPlan({\n        config,\n        engine,\n        user,\n        root,\n        name,\n        image,\n        volumes,\n        fileParents,\n      });\n      let closed = false,\n        releasing: Promise<void> | undefined;\n      let unregister = () => {};\n      const release = (): Promise<void> => {\n        closed = true;\n        releasing ??= call([\"rm\", \"--force\", name])\n          .then(() => {\n            unregister();\n          })\n          .catch((error) => {\n            releasing = undefined;\n            throw error;\n          });\n        return releasing;\n      };\n      try {\n        for (const cache of caches)\n          await call(\n            [\n              \"volume\",\n              \"create\",\n              ...cacheCreateOptions[engine],\n              \"--label\",\n              `${cacheDefaults.label}=true`,\n              cache.volume,\n            ],\n            context.signal ? { signal: context.signal } : {},\n          );\n        await call(args, {\n          ...(context.signal ? { signal: context.signal } : {}),\n        });\n        await call(\n          [\"start\", name],\n          context.signal ? { signal: context.signal } : {},\n        );\n        for (const cache of caches) {\n          await call(\n            [\n              \"exec\",\n              \"--user\",\n              \"0:0\",\n              name,\n              \"chown\",\n              `${user.uid}:${user.gid}`,\n              cache.target,\n            ],\n            context.signal ? { signal: context.signal } : {},\n          );\n          await call(\n            [\"exec\", name, \"chmod\", \"700\", cache.target],\n            context.signal ? { signal: context.signal } : {},\n          );\n        }\n        for (const parent of fileParents)\n          await call([\n            \"exec\",\n            \"--user\",\n            \"0:0\",\n            name,\n            \"sh\",\n            \"-c\",\n            `mkdir -p ${quote(parent)} && chown ${user.uid}:${user.gid} ${quote(parent)}`,\n          ]);\n        if (fileParents.size)\n          await call([\n            \"exec\",\n            \"--user\",\n            \"0:0\",\n            name,\n            \"chown\",\n            `${user.uid}:${user.gid}`,\n            home,\n          ]);\n        await call([\n          \"exec\",\n          name,\n          \"sh\",\n          \"-c\",\n          \"command -v setsid >/dev/null && command -v kill >/dev/null && command -v tar >/dev/null && command -v cp >/dev/null\",\n        ]);\n      } catch (cause) {\n        try {\n          await release();\n        } catch (cleanup) {\n          throw new AggregateError(\n            [cause, cleanup],\n            \"Sandbox provisioning and cleanup failed\",\n          );\n        }\n        throw cause;\n      }\n      unregister = registerCleanup(release, () => {\n        if (!closed)\n          execFileSync(engine, [\"rm\", \"--force\", name], {\n            timeout: containerDefaults.cleanupMs,\n            stdio: \"ignore\",\n            windowsHide: true,\n          });\n      });\n      return {\n        root,\n        home,\n        invoke: containerCommand({\n          engine,\n          config,\n          executor,\n          root,\n          name,\n          env,\n          call,\n          isClosed: () => closed,\n        }),\n        ...containerFiles({\n          engine,\n          config,\n          executor,\n          root,\n          name,\n          env,\n          call,\n          isClosed: () => closed,\n        }),\n        release,\n      };\n    },\n  };\n}\n"]}
+{"version":3,"file":"container.js","sourceRoot":"","sources":["../../src/providers/container.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,YAAY,EAAE,MAAM,oBAAoB,CAAC;AAClD,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACzC,OAAO,EAAE,QAAQ,EAAE,MAAM,WAAW,CAAC;AAErC,OAAO,EAAE,iBAAiB,EAAE,MAAM,wBAAwB,CAAC;AAC3D,OAAO,EAAE,SAAS,EAAE,MAAM,qBAAqB,CAAC;AAEhD,OAAO,EACL,cAAc,EACd,KAAK,EACL,cAAc,GACf,MAAM,8BAA8B,CAAC;AAEtC,OAAO,EAAE,eAAe,EAAE,MAAM,+BAA+B,CAAC;AAChE,OAAO,EAAE,WAAW,EAAE,cAAc,EAAE,MAAM,sBAAsB,CAAC;AACnE,OAAO,EACL,kBAAkB,EAClB,aAAa,GACd,MAAM,gCAAgC,CAAC;AACxC,OAAO,EAAE,gBAAgB,EAAE,MAAM,wBAAwB,CAAC;AAC1D,OAAO,EAAE,cAAc,EAAE,MAAM,sBAAsB,CAAC;AACtD,OAAO,EAAE,eAAe,EAAE,MAAM,uBAAuB,CAAC;AACxD,OAAO,EAAE,aAAa,EAAE,MAAM,qBAAqB,CAAC;AACpD,OAAO,EAAE,kBAAkB,EAAE,MAAM,0BAA0B,CAAC;AAC9D,OAAO,EAAE,iBAAiB,EAAE,MAAM,0BAA0B,CAAC;AAK7D,MAAM,UAAU,SAAS,CAAC,UAAkB;IAC1C,OAAO,WACL,QAAQ,CAAC,UAAU,CAAC;SACjB,WAAW,EAAE;SACb,OAAO,CAAC,eAAe,EAAE,GAAG,CAAC,IAAI,WACtC,EAAE,CAAC;AACL,CAAC;AAED,MAAM,UAAU,iBAAiB,CAC/B,MAAuB,EACvB,UAA4B,EAAE,EAC9B,WAAqB,cAAc,EACnC,WAA4B,OAAO,CAAC,QAAQ;IAE5C,MAAM,MAAM,GAAG;QACb,GAAG,OAAO;QACV,QAAQ,EAAE,iBAAiB,CAAC,OAAO,CAAC;QACpC,MAAM,EAAE,CAAC,OAAO,CAAC,MAAM,IAAI,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC,EAAE,GAAG,KAAK,EAAE,CAAC,CAAC;KAC9D,CAAC;IACF,SAAS,CACP,MAAM,CAAC,cAAc,KAAK,SAAS;QACjC,MAAM,CAAC,cAAc,KAAK,SAAS;QACnC,MAAM,CAAC,cAAc,KAAK,UAAU,EACtC,4CAA4C,CAC7C,CAAC;IACF,cAAc,CAAC,MAAM,CAAC,CAAC;IACvB,IAAI,MAAM,CAAC,IAAI,KAAK,SAAS;QAC3B,SAAS,CACP,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,MAAM,CAAC,IAAI,GAAG,CAAC,EAC/C,uBAAuB,CACxB,CAAC;IACJ,IAAI,MAAM,CAAC,QAAQ,KAAK,SAAS;QAC/B,SAAS,CACP,MAAM,CAAC,aAAa,CAAC,MAAM,CAAC,QAAQ,CAAC;YACnC,MAAM,CAAC,QAAQ,IAAI,iBAAiB,CAAC,eAAe,EACtD,8BAA8B,CAC/B,CAAC;IACJ,OAAO;QACL,IAAI,EAAE,MAAM;QACZ,SAAS,EAAE,MAAM,CAAC,cAAc,KAAK,UAAU,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,SAAS;QACtE,SAAS,EAAE,EAAE,GAAG,MAAM,CAAC,SAAS,EAAE;QAClC,KAAK,CAAC,OAAO,CAAC,OAAO;YACnB,OAAO,CAAC,MAAM,EAAE,cAAc,EAAE,CAAC;YACjC,MAAM,IAAI,GAAG,WAAW,UAAU,EAAE,EAAE,CAAC;YACvC,MAAM,KAAK,GAAG,MAAM,CAAC,KAAK,IAAI,SAAS,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC;YAC5D,MAAM,IAAI,GAAG,MAAM,CAAC,IAAI,IAAI;gBAC1B,GAAG,EAAE,OAAO,CAAC,MAAM,EAAE,EAAE,IAAI,iBAAiB,CAAC,GAAG;gBAChD,GAAG,EAAE,OAAO,CAAC,MAAM,EAAE,EAAE,IAAI,iBAAiB,CAAC,GAAG;aACjD,CAAC;YACF,SAAS,CACP,MAAM,CAAC,SAAS,CAAC,IAAI,CAAC,GAAG,CAAC;gBACxB,IAAI,CAAC,GAAG,IAAI,CAAC;gBACb,MAAM,CAAC,SAAS,CAAC,IAAI,CAAC,GAAG,CAAC;gBAC1B,IAAI,CAAC,GAAG,IAAI,CAAC,EACf,wBAAwB,CACzB,CAAC;YACF,MAAM,IAAI,GAAG,CAAC,IAAuB,EAAE,QAA0B,EAAE,EAAE,EAAE,CACrE,cAAc,CACZ;gBACE,UAAU,EAAE,MAAM;gBAClB,SAAS,EAAE,IAAI;gBACf,UAAU,EAAE,iBAAiB,CAAC,UAAU;gBACxC,GAAG,KAAK;aACT,EACD,QAAQ,CACT,CAAC;YACJ,MAAM,kBAAkB,CAAC,MAAM,EAAE,QAAQ,EAAE,IAAI,EAAE,MAAM,EAAE,KAAK,EAAE,IAAI,CAAC,CAAC;YACtE,MAAM,IAAI,GACN,MAAM,CAAC,cAAc,KAAK,UAAU;gBAClC,CAAC,CAAC,iBAAiB,CAAC,YAAY;gBAChC,CAAC,CAAC,iBAAiB,CAAC,IAAI,EAC5B,IAAI,GAAG,iBAAiB,CAAC,IAAI,CAAC;YAChC,MAAM,EAAE,GAAG,EAAE,OAAO,EAAE,WAAW,EAAE,GAAG,MAAM,eAAe,CACzD,OAAO,EACP,MAAM,EACN,QAAQ,EACR,IAAI,EACJ,IAAI,CACL,CAAC;YACF,MAAM,MAAM,GAAG,MAAM,WAAW,CAC9B,MAAM,CAAC,MAAM,IAAI,EAAE,EACnB,OAAO,CAAC,UAAU,EAClB,KAAK,EACL,IAAI,CACL,CAAC;YACF,KAAK,MAAM,KAAK,IAAI,MAAM;gBACxB,OAAO,CAAC,IAAI,CAAC,UAAU,EAAE,GAAG,KAAK,CAAC,MAAM,IAAI,KAAK,CAAC,MAAM,SAAS,CAAC,CAAC;YACrE,MAAM,IAAI,GAAG,aAAa,CAAC;gBACzB,MAAM;gBACN,MAAM;gBACN,IAAI;gBACJ,IAAI;gBACJ,IAAI;gBACJ,KAAK;gBACL,OAAO;gBACP,WAAW;aACZ,CAAC,CAAC;YACH,IAAI,MAAM,GAAG,KAAK,EAChB,SAAoC,CAAC;YACvC,IAAI,UAAU,GAAG,GAAG,EAAE,GAAE,CAAC,CAAC;YAC1B,MAAM,OAAO,GAAG,GAAkB,EAAE;gBAClC,MAAM,GAAG,IAAI,CAAC;gBACd,SAAS,KAAK,IAAI,CAAC,CAAC,IAAI,EAAE,SAAS,EAAE,IAAI,CAAC,CAAC;qBACxC,IAAI,CAAC,GAAG,EAAE;oBACT,UAAU,EAAE,CAAC;gBACf,CAAC,CAAC;qBACD,KAAK,CAAC,CAAC,KAAK,EAAE,EAAE;oBACf,SAAS,GAAG,SAAS,CAAC;oBACtB,MAAM,KAAK,CAAC;gBACd,CAAC,CAAC,CAAC;gBACL,OAAO,SAAS,CAAC;YACnB,CAAC,CAAC;YACF,IAAI,CAAC;gBACH,KAAK,MAAM,KAAK,IAAI,MAAM;oBACxB,MAAM,IAAI,CACR;wBACE,QAAQ;wBACR,QAAQ;wBACR,GAAG,kBAAkB,CAAC,MAAM,CAAC;wBAC7B,SAAS;wBACT,GAAG,aAAa,CAAC,KAAK,OAAO;wBAC7B,KAAK,CAAC,MAAM;qBACb,EACD,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,OAAO,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CACjD,CAAC;gBACJ,MAAM,IAAI,CAAC,IAAI,EAAE;oBACf,GAAG,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,OAAO,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;iBACtD,CAAC,CAAC;gBACH,MAAM,IAAI,CACR,CAAC,OAAO,EAAE,IAAI,CAAC,EACf,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,OAAO,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CACjD,CAAC;gBACF,KAAK,MAAM,KAAK,IAAI,MAAM,EAAE,CAAC;oBAC3B,MAAM,IAAI,CACR;wBACE,MAAM;wBACN,QAAQ;wBACR,KAAK;wBACL,IAAI;wBACJ,OAAO;wBACP,GAAG,IAAI,CAAC,GAAG,IAAI,IAAI,CAAC,GAAG,EAAE;wBACzB,KAAK,CAAC,MAAM;qBACb,EACD,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,OAAO,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CACjD,CAAC;oBACF,MAAM,IAAI,CACR,CAAC,MAAM,EAAE,IAAI,EAAE,OAAO,EAAE,KAAK,EAAE,KAAK,CAAC,MAAM,CAAC,EAC5C,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,OAAO,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CACjD,CAAC;gBACJ,CAAC;gBACD,KAAK,MAAM,MAAM,IAAI,WAAW;oBAC9B,MAAM,IAAI,CAAC;wBACT,MAAM;wBACN,QAAQ;wBACR,KAAK;wBACL,IAAI;wBACJ,IAAI;wBACJ,IAAI;wBACJ,YAAY,KAAK,CAAC,MAAM,CAAC,aAAa,IAAI,CAAC,GAAG,IAAI,IAAI,CAAC,GAAG,IAAI,KAAK,CAAC,MAAM,CAAC,EAAE;qBAC9E,CAAC,CAAC;gBACL,IAAI,WAAW,CAAC,IAAI;oBAClB,MAAM,IAAI,CAAC;wBACT,MAAM;wBACN,QAAQ;wBACR,KAAK;wBACL,IAAI;wBACJ,OAAO;wBACP,GAAG,IAAI,CAAC,GAAG,IAAI,IAAI,CAAC,GAAG,EAAE;wBACzB,IAAI;qBACL,CAAC,CAAC;gBACL,IAAI,MAAM,CAAC,cAAc,KAAK,UAAU;oBACtC,MAAM,IAAI,CACR;wBACE,MAAM;wBACN,QAAQ;wBACR,KAAK;wBACL,IAAI;wBACJ,IAAI;wBACJ,IAAI;wBACJ,YAAY,KAAK,CAAC,IAAI,CAAC,iBAAiB,KAAK,CAAC,IAAI,CAAC,0BAA0B,IAAI,CAAC,GAAG,IAAI,IAAI,CAAC,GAAG,IAAI,KAAK,CAAC,IAAI,CAAC,eAAe;qBAChI,EACD,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,OAAO,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CACjD,CAAC;gBACJ,MAAM,IAAI,CAAC;oBACT,MAAM;oBACN,IAAI;oBACJ,IAAI;oBACJ,IAAI;oBACJ,qHAAqH;iBACtH,CAAC,CAAC;YACL,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,IAAI,CAAC;oBACH,MAAM,OAAO,EAAE,CAAC;gBAClB,CAAC;gBAAC,OAAO,OAAO,EAAE,CAAC;oBACjB,MAAM,IAAI,cAAc,CACtB,CAAC,KAAK,EAAE,OAAO,CAAC,EAChB,yCAAyC,CAC1C,CAAC;gBACJ,CAAC;gBACD,MAAM,KAAK,CAAC;YACd,CAAC;YACD,UAAU,GAAG,eAAe,CAAC,OAAO,EAAE,GAAG,EAAE;gBACzC,IAAI,CAAC,MAAM;oBACT,YAAY,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,SAAS,EAAE,IAAI,CAAC,EAAE;wBAC5C,OAAO,EAAE,iBAAiB,CAAC,SAAS;wBACpC,KAAK,EAAE,QAAQ;wBACf,WAAW,EAAE,IAAI;qBAClB,CAAC,CAAC;YACP,CAAC,CAAC,CAAC;YACH,OAAO;gBACL,IAAI;gBACJ,IAAI;gBACJ,MAAM,EAAE,gBAAgB,CAAC;oBACvB,MAAM;oBACN,MAAM;oBACN,QAAQ;oBACR,IAAI;oBACJ,IAAI;oBACJ,GAAG;oBACH,IAAI;oBACJ,QAAQ,EAAE,GAAG,EAAE,CAAC,MAAM;iBACvB,CAAC;gBACF,GAAG,cAAc,CAAC;oBAChB,MAAM;oBACN,MAAM;oBACN,QAAQ;oBACR,IAAI;oBACJ,IAAI;oBACJ,GAAG;oBACH,IAAI;oBACJ,QAAQ,EAAE,GAAG,EAAE,CAAC,MAAM;iBACvB,CAAC;gBACF,OAAO;aACR,CAAC;QACJ,CAAC;KACF,CAAC;AACJ,CAAC","sourcesContent":["import { execFileSync } from \"node:child_process\";\nimport { randomUUID } from \"node:crypto\";\nimport { basename } from \"node:path\";\nimport type { Command } from \"../domain/command.types.ts\";\nimport { containerNetworks } from \"./container-network.ts\";\nimport { invariant } from \"../domain/errors.ts\";\nimport type { SandboxProvider } from \"../domain/sandbox.types.ts\";\nimport {\n  executeProcess,\n  quote,\n  requireSuccess,\n} from \"../infrastructure/process.ts\";\nimport type { Executor } from \"../infrastructure/process.types.ts\";\nimport { registerCleanup } from \"../infrastructure/shutdown.ts\";\nimport { cacheMounts, validateCaches } from \"./container-cache.ts\";\nimport {\n  cacheCreateOptions,\n  cacheDefaults,\n} from \"./container-cache.constants.ts\";\nimport { containerCommand } from \"./container-command.ts\";\nimport { containerFiles } from \"./container-files.ts\";\nimport { containerMounts } from \"./container-mounts.ts\";\nimport { containerPlan } from \"./container-plan.ts\";\nimport { containerPreflight } from \"./container-preflight.ts\";\nimport { containerDefaults } from \"./container.constants.ts\";\nimport type { ContainerEngine, ContainerOptions } from \"./container.types.ts\";\n\nexport type { ContainerOptions } from \"./container.types.ts\";\n\nexport function imageName(repository: string): string {\n  return `outpost:${\n    basename(repository)\n      .toLowerCase()\n      .replace(/[^a-z0-9_.-]/g, \"-\") || \"workspace\"\n  }`;\n}\n\nexport function containerProvider(\n  engine: ContainerEngine,\n  options: ContainerOptions = {},\n  executor: Executor = executeProcess,\n  platform: NodeJS.Platform = process.platform,\n): SandboxProvider {\n  const config = {\n    ...options,\n    networks: containerNetworks(options),\n    caches: (options.caches ?? []).map((cache) => ({ ...cache })),\n  };\n  invariant(\n    config.repositoryMode === undefined ||\n      config.repositoryMode === \"mounted\" ||\n      config.repositoryMode === \"isolated\",\n    \"repositoryMode must be mounted or isolated\",\n  );\n  validateCaches(config);\n  if (config.cpus !== undefined)\n    invariant(\n      Number.isFinite(config.cpus) && config.cpus > 0,\n      \"cpus must be positive\",\n    );\n  if (config.memoryMb !== undefined)\n    invariant(\n      Number.isSafeInteger(config.memoryMb) &&\n        config.memoryMb >= containerDefaults.minimumMemoryMb,\n      \"memoryMb must be at least 64\",\n    );\n  return {\n    name: engine,\n    placement: config.repositoryMode === \"isolated\" ? \"remote\" : \"mounted\",\n    variables: { ...config.variables },\n    async acquire(context) {\n      context.signal?.throwIfAborted();\n      const name = `outpost-${randomUUID()}`;\n      const image = config.image ?? imageName(context.repository);\n      const user = config.user ?? {\n        uid: process.getuid?.() ?? containerDefaults.uid,\n        gid: process.getgid?.() ?? containerDefaults.gid,\n      };\n      invariant(\n        Number.isInteger(user.uid) &&\n          user.uid >= 0 &&\n          Number.isInteger(user.gid) &&\n          user.gid >= 0,\n        \"Invalid container user\",\n      );\n      const call = (args: readonly string[], extra: Partial<Command> = {}) =>\n        requireSuccess(\n          {\n            executable: engine,\n            arguments: args,\n            deadlineMs: containerDefaults.deadlineMs,\n            ...extra,\n          },\n          executor,\n        );\n      await containerPreflight(engine, platform, call, config, image, user);\n      const root =\n          config.repositoryMode === \"isolated\"\n            ? containerDefaults.isolatedRoot\n            : containerDefaults.root,\n        home = containerDefaults.home;\n      const { env, volumes, fileParents } = await containerMounts(\n        context,\n        config,\n        platform,\n        root,\n        home,\n      );\n      const caches = await cacheMounts(\n        config.caches ?? [],\n        context.repository,\n        image,\n        user,\n      );\n      for (const cache of caches)\n        volumes.push(\"--volume\", `${cache.volume}:${cache.target}:nocopy`);\n      const args = containerPlan({\n        config,\n        engine,\n        user,\n        root,\n        name,\n        image,\n        volumes,\n        fileParents,\n      });\n      let closed = false,\n        releasing: Promise<void> | undefined;\n      let unregister = () => {};\n      const release = (): Promise<void> => {\n        closed = true;\n        releasing ??= call([\"rm\", \"--force\", name])\n          .then(() => {\n            unregister();\n          })\n          .catch((error) => {\n            releasing = undefined;\n            throw error;\n          });\n        return releasing;\n      };\n      try {\n        for (const cache of caches)\n          await call(\n            [\n              \"volume\",\n              \"create\",\n              ...cacheCreateOptions[engine],\n              \"--label\",\n              `${cacheDefaults.label}=true`,\n              cache.volume,\n            ],\n            context.signal ? { signal: context.signal } : {},\n          );\n        await call(args, {\n          ...(context.signal ? { signal: context.signal } : {}),\n        });\n        await call(\n          [\"start\", name],\n          context.signal ? { signal: context.signal } : {},\n        );\n        for (const cache of caches) {\n          await call(\n            [\n              \"exec\",\n              \"--user\",\n              \"0:0\",\n              name,\n              \"chown\",\n              `${user.uid}:${user.gid}`,\n              cache.target,\n            ],\n            context.signal ? { signal: context.signal } : {},\n          );\n          await call(\n            [\"exec\", name, \"chmod\", \"700\", cache.target],\n            context.signal ? { signal: context.signal } : {},\n          );\n        }\n        for (const parent of fileParents)\n          await call([\n            \"exec\",\n            \"--user\",\n            \"0:0\",\n            name,\n            \"sh\",\n            \"-c\",\n            `mkdir -p ${quote(parent)} && chown ${user.uid}:${user.gid} ${quote(parent)}`,\n          ]);\n        if (fileParents.size)\n          await call([\n            \"exec\",\n            \"--user\",\n            \"0:0\",\n            name,\n            \"chown\",\n            `${user.uid}:${user.gid}`,\n            home,\n          ]);\n        if (config.repositoryMode === \"isolated\")\n          await call(\n            [\n              \"exec\",\n              \"--user\",\n              \"0:0\",\n              name,\n              \"sh\",\n              \"-c\",\n              `mkdir -p ${quote(root)} && chmod 700 ${quote(root)} /tmp/outpost && chown ${user.uid}:${user.gid} ${quote(root)} /tmp/outpost`,\n            ],\n            context.signal ? { signal: context.signal } : {},\n          );\n        await call([\n          \"exec\",\n          name,\n          \"sh\",\n          \"-c\",\n          \"command -v setsid >/dev/null && command -v kill >/dev/null && command -v tar >/dev/null && command -v cp >/dev/null\",\n        ]);\n      } catch (cause) {\n        try {\n          await release();\n        } catch (cleanup) {\n          throw new AggregateError(\n            [cause, cleanup],\n            \"Sandbox provisioning and cleanup failed\",\n          );\n        }\n        throw cause;\n      }\n      unregister = registerCleanup(release, () => {\n        if (!closed)\n          execFileSync(engine, [\"rm\", \"--force\", name], {\n            timeout: containerDefaults.cleanupMs,\n            stdio: \"ignore\",\n            windowsHide: true,\n          });\n      });\n      return {\n        root,\n        home,\n        invoke: containerCommand({\n          engine,\n          config,\n          executor,\n          root,\n          name,\n          env,\n          call,\n          isClosed: () => closed,\n        }),\n        ...containerFiles({\n          engine,\n          config,\n          executor,\n          root,\n          name,\n          env,\n          call,\n          isClosed: () => closed,\n        }),\n        release,\n      };\n    },\n  };\n}\n"]}

package/dist/providers/container.types.d.ts

@@ -1,8 +1,11 @@
+import type { EgressPolicy } from "../domain/egress.types.ts";
 import type { Command, CommandResult, Variables } from "../domain/command.types.ts";
 import type { Volume } from "../domain/sandbox.types.ts";
 import type { Executor } from "../infrastructure/process.types.ts";
 import type { DependencyCache } from "./container-cache.types.ts";
 export interface ContainerOptions {
+    readonly egress?: EgressPolicy;
+    readonly repositoryMode?: "mounted" | "isolated";
     readonly caches?: readonly DependencyCache[];
     readonly image?: string;
     readonly user?: {

package/dist/providers/container.types.js.map

@@ -1 +1 @@
-{"version":3,"file":"container.types.js","sourceRoot":"","sources":["../../src/providers/container.types.ts"],"names":[],"mappings":"","sourcesContent":["import type {\n  Command,\n  CommandResult,\n  Variables,\n} from \"../domain/command.types.ts\";\nimport type { Volume } from \"../domain/sandbox.types.ts\";\nimport type { Executor } from \"../infrastructure/process.types.ts\";\nimport type { DependencyCache } from \"./container-cache.types.ts\";\n\nexport interface ContainerOptions {\n  readonly caches?: readonly DependencyCache[];\n  readonly image?: string;\n  readonly user?: { readonly uid: number; readonly gid: number };\n  readonly volumes?: readonly Volume[];\n  readonly variables?: Variables;\n  readonly networks?: string | readonly string[];\n  readonly groups?: readonly (string | number)[];\n  readonly devices?: readonly string[];\n  readonly cpus?: number;\n  readonly memoryMb?: number;\n  readonly label?: \"z\" | \"Z\" | false;\n  readonly retain?: number;\n  readonly userns?: \"keep-id\" | false;\n}\n\nexport type ContainerEngine = \"docker\" | \"podman\";\nexport type ContainerCall = (\n  args: readonly string[],\n  extra?: Partial<Command>,\n) => Promise<CommandResult>;\nexport interface ContainerRuntime {\n  readonly engine: ContainerEngine;\n  readonly config: ContainerOptions;\n  readonly executor: Executor;\n  readonly root: string;\n  readonly name: string;\n  readonly env: Record<string, string>;\n  readonly call: ContainerCall;\n  readonly isClosed: () => boolean;\n}\nexport interface ContainerMounts {\n  readonly env: Record<string, string>;\n  readonly volumes: string[];\n  readonly fileParents: Set<string>;\n}\n\nexport interface ContainerUser {\n  readonly uid: number;\n  readonly gid: number;\n}\nexport interface ContainerPlanOptions {\n  readonly config: ContainerOptions;\n  readonly engine: ContainerEngine;\n  readonly user: ContainerUser;\n  readonly root: string;\n  readonly name: string;\n  readonly image: string;\n  readonly volumes: readonly string[];\n  readonly fileParents: ReadonlySet<string>;\n}\n"]}
+{"version":3,"file":"container.types.js","sourceRoot":"","sources":["../../src/providers/container.types.ts"],"names":[],"mappings":"","sourcesContent":["import type { EgressPolicy } from \"../domain/egress.types.ts\";\nimport type {\n  Command,\n  CommandResult,\n  Variables,\n} from \"../domain/command.types.ts\";\nimport type { Volume } from \"../domain/sandbox.types.ts\";\nimport type { Executor } from \"../infrastructure/process.types.ts\";\nimport type { DependencyCache } from \"./container-cache.types.ts\";\n\nexport interface ContainerOptions {\n  readonly egress?: EgressPolicy;\n  readonly repositoryMode?: \"mounted\" | \"isolated\";\n  readonly caches?: readonly DependencyCache[];\n  readonly image?: string;\n  readonly user?: { readonly uid: number; readonly gid: number };\n  readonly volumes?: readonly Volume[];\n  readonly variables?: Variables;\n  readonly networks?: string | readonly string[];\n  readonly groups?: readonly (string | number)[];\n  readonly devices?: readonly string[];\n  readonly cpus?: number;\n  readonly memoryMb?: number;\n  readonly label?: \"z\" | \"Z\" | false;\n  readonly retain?: number;\n  readonly userns?: \"keep-id\" | false;\n}\n\nexport type ContainerEngine = \"docker\" | \"podman\";\nexport type ContainerCall = (\n  args: readonly string[],\n  extra?: Partial<Command>,\n) => Promise<CommandResult>;\nexport interface ContainerRuntime {\n  readonly engine: ContainerEngine;\n  readonly config: ContainerOptions;\n  readonly executor: Executor;\n  readonly root: string;\n  readonly name: string;\n  readonly env: Record<string, string>;\n  readonly call: ContainerCall;\n  readonly isClosed: () => boolean;\n}\nexport interface ContainerMounts {\n  readonly env: Record<string, string>;\n  readonly volumes: string[];\n  readonly fileParents: Set<string>;\n}\n\nexport interface ContainerUser {\n  readonly uid: number;\n  readonly gid: number;\n}\nexport interface ContainerPlanOptions {\n  readonly config: ContainerOptions;\n  readonly engine: ContainerEngine;\n  readonly user: ContainerUser;\n  readonly root: string;\n  readonly name: string;\n  readonly image: string;\n  readonly volumes: readonly string[];\n  readonly fileParents: ReadonlySet<string>;\n}\n"]}

package/dist/providers/daytona-command.js

@@ -4,13 +4,12 @@ import { OutpostError } from "../domain/errors.js";
 import { interruptible } from "../infrastructure/abort.js";
 import { quote } from "../infrastructure/process.js";
 import { cloudDefaults } from "./cloud.constants.js";
+import { daytonaTerminal } from "./daytona-terminal.js";
 export function daytonaCommand(runtime) {
     const { sandbox, root, options, context, isClosed } = runtime;
     return async (command) => {
         if (isClosed())
             throw new OutpostError("provider", "Cloud sandbox is closed");
-        if (command.interactive)
-            throw new OutpostError("provider", "Interactive terminals require a mounted or local provider");
         const signal = command.signal
             ? AbortSignal.any([
                 command.signal,
@@ -18,6 +17,8 @@ export function daytonaCommand(runtime) {
             ])
             : AbortSignal.timeout(command.deadlineMs ?? cloudDefaults.deadlineMs);
         signal.throwIfAborted();
+        if (command.interactive)
+            return daytonaTerminal(runtime, command, signal);
         const id = `outpost-${randomUUID()}`;
         const input = `/tmp/${id}.stdin`;
         const pid = `/tmp/${id}.pid`;

package/dist/providers/daytona-command.js.map

@@ -1 +1 @@
-{"version":3,"file":"daytona-command.js","sourceRoot":"","sources":["../../src/providers/daytona-command.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,sBAAsB,CAAC;AAClD,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACzC,OAAO,EAAE,YAAY,EAAE,MAAM,qBAAqB,CAAC;AAEnD,OAAO,EAAE,aAAa,EAAE,MAAM,4BAA4B,CAAC;AAC3D,OAAO,EAAE,KAAK,EAAE,MAAM,8BAA8B,CAAC;AACrD,OAAO,EAAE,aAAa,EAAE,MAAM,sBAAsB,CAAC;AAGrD,MAAM,UAAU,cAAc,CAC5B,OAAuB;IAEvB,MAAM,EAAE,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,OAAO,EAAE,QAAQ,EAAE,GAAG,OAAO,CAAC;IAC9D,OAAO,KAAK,EAAE,OAAO,EAAE,EAAE;QACvB,IAAI,QAAQ,EAAE;YACZ,MAAM,IAAI,YAAY,CAAC,UAAU,EAAE,yBAAyB,CAAC,CAAC;QAChE,IAAI,OAAO,CAAC,WAAW;YACrB,MAAM,IAAI,YAAY,CACpB,UAAU,EACV,2DAA2D,CAC5D,CAAC;QACJ,MAAM,MAAM,GAAG,OAAO,CAAC,MAAM;YAC3B,CAAC,CAAC,WAAW,CAAC,GAAG,CAAC;gBACd,OAAO,CAAC,MAAM;gBACd,WAAW,CAAC,OAAO,CAAC,OAAO,CAAC,UAAU,IAAI,aAAa,CAAC,UAAU,CAAC;aACpE,CAAC;YACJ,CAAC,CAAC,WAAW,CAAC,OAAO,CAAC,OAAO,CAAC,UAAU,IAAI,aAAa,CAAC,UAAU,CAAC,CAAC;QACxE,MAAM,CAAC,cAAc,EAAE,CAAC;QACxB,MAAM,EAAE,GAAG,WAAW,UAAU,EAAE,EAAE,CAAC;QACrC,MAAM,KAAK,GAAG,QAAQ,EAAE,QAAQ,CAAC;QACjC,MAAM,GAAG,GAAG,QAAQ,EAAE,MAAM,CAAC;QAC7B,IAAI,OAAO,CAAC,KAAK,KAAK,SAAS;YAC7B,MAAM,OAAO,CAAC,EAAE,CAAC,UAAU,CAAC,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,KAAK,CAAC,CAAC;QACjE,MAAM,SAAS,GAAG,EAAE,GAAG,OAAO,CAAC,SAAS,EAAE,GAAG,OAAO,CAAC,SAAS,EAAE,CAAC;QACjE,MAAM,OAAO,GAAG;YACd,GAAG,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,MAAM,EAAE,IAAI,EAAE,IAAI,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;YACjD,OAAO,CAAC,UAAU;YAClB,GAAG,CAAC,OAAO,CAAC,SAAS,IAAI,EAAE,CAAC;SAC7B;aACE,GAAG,CAAC,KAAK,CAAC;aACV,IAAI,CAAC,GAAG,CAAC,CAAC;QACb,MAAM,MAAM,GAAG,MAAM,KAAK,CAAC,OAAO,CAAC,SAAS,IAAI,IAAI,CAAC,gBAAgB,MAAM,CAAC,OAAO,CACjF,SAAS,CACV;aACE,GAAG,CAAC,CAAC,CAAC,GAAG,EAAE,KAAK,CAAC,EAAE,EAAE,CAAC,KAAK,CAAC,GAAG,GAAG,IAAI,KAAK,EAAE,CAAC,CAAC;aAC/C,IAAI,CACH,GAAG,CACJ,iBAAiB,KAAK,CAAC,aAAa,KAAK,CAAC,GAAG,CAAC,eAAe,KAAK,CAAC,GAAG,GAAG,SAAS,CAAC,sBAAsB,OAAO,GAAG,OAAO,CAAC,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,MAAM,KAAK,CAAC,KAAK,CAAC,EAAE,EAAE,CAAC,EAAE,CAAC;QACnL,MAAM,MAAM,GAAG,EAAE,MAAM,EAAE,EAAE,EAAE,MAAM,EAAE,EAAE,EAAE,CAAC;QAC1C,IAAI,YAA0C,CAAC;QAC/C,MAAM,MAAM,GAAG,GAAG,EAAE;YAClB,YAAY,KAAK,OAAO,CAAC,OAAO,CAAC,cAAc,CAC7C,SAAS,KAAK,CAAC,GAAG,GAAG,SAAS,CAAC,aAAa,KAAK,CAAC,GAAG,CAAC,8BAA8B,KAAK,CAAC,GAAG,CAAC,2BAA2B,CAC1H,CAAC;YACF,KAAK,YAAY,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC;QAC3C,CAAC,CAAC;QACF,MAAM,OAAO,CAAC,OAAO,CAAC,aAAa,CAAC,EAAE,CAAC,CAAC;QACxC,IAAI,CAAC;YACH,MAAM,CAAC,gBAAgB,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC;YACzD,IAAI,MAAM,CAAC,OAAO;gBAAE,MAAM,EAAE,CAAC;YAC7B,MAAM,CAAC,cAAc,EAAE,CAAC;YACxB,MAAM,QAAQ,GAAG,MAAM,aAAa,CAClC,OAAO,CAAC,OAAO,CAAC,qBAAqB,CAAC,EAAE,EAAE;gBACxC,OAAO,EAAE,MAAM;gBACf,KAAK,EAAE,IAAI;aACZ,CAAC,EACF,MAAM,CACP,CAAC;YACF,IAAI,CAAC,QAAQ,CAAC,KAAK;gBACjB,MAAM,IAAI,YAAY,CACpB,UAAU,EACV,+CAA+C,CAChD,CAAC;YACJ,MAAM,OAAO,GAAG,CAAC,OAA4B,EAAE,EAAE,CAAC,CAAC,KAAa,EAAE,EAAE;gBAClE,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,OAAO,CAAC,GAAG,KAAK,CAAC,CAAC,KAAK,CAC/C,CAAC,CAAC,OAAO,CAAC,MAAM,IAAI,OAAO,CAAC,MAAM,IAAI,aAAa,CAAC,WAAW,CAAC,CACjE,CAAC;gBACF,OAAO,CAAC,OAAO,EAAE,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC;YACpC,CAAC,CAAC;YACF,MAAM,aAAa,CACjB,OAAO,CAAC,OAAO,CAAC,qBAAqB,CACnC,EAAE,EACF,QAAQ,CAAC,KAAK,EACd,OAAO,CAAC,QAAQ,CAAC,EACjB,OAAO,CAAC,QAAQ,CAAC,CAClB,EACD,MAAM,CACP,CAAC;YACF,IAAI,YAAY;gBAAE,MAAM,YAAY,CAAC;YACrC,MAAM,CAAC,cAAc,EAAE,CAAC;YACxB,OAAO,IAAI,EAAE,CAAC;gBACZ,MAAM,MAAM,GAAG,MAAM,aAAa,CAChC,OAAO,CAAC,OAAO,CAAC,iBAAiB,CAAC,EAAE,EAAE,QAAQ,CAAC,KAAK,CAAC,EACrD,MAAM,CACP,CAAC;gBACF,IAAI,MAAM,CAAC,QAAQ,KAAK,SAAS;oBAC/B,OAAO,EAAE,MAAM,EAAE,MAAM,CAAC,QAAQ,EAAE,GAAG,MAAM,EAAE,CAAC;gBAChD,MAAM,UAAU,CAAC,aAAa,CAAC,MAAM,EAAE,SAAS,EAAE,EAAE,MAAM,EAAE,CAAC,CAAC;YAChE,CAAC;QACH,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,MAAM,EAAE,CAAC;YACT,IAAI,CAAC;gBACH,MAAM,aAAa,CACjB,YAAa,EACb,WAAW,CAAC,OAAO,CAAC,aAAa,CAAC,cAAc,CAAC,CAClD,CAAC;YACJ,CAAC;YAAC,OAAO,OAAO,EAAE,CAAC;gBACjB,MAAM,IAAI,cAAc,CACtB,CAAC,KAAK,EAAE,OAAO,CAAC,EAChB,2CAA2C,CAC5C,CAAC;YACJ,CAAC;YACD,MAAM,KAAK,CAAC;QACd,CAAC;gBAAS,CAAC;YACT,MAAM,CAAC,mBAAmB,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;YAC5C,MAAM,OAAO,CAAC,OAAO,CAAC,aAAa,CAAC,EAAE,CAAC,CAAC;YACxC,MAAM,OAAO,CAAC,OAAO;iBAClB,cAAc,CAAC,SAAS,KAAK,CAAC,KAAK,CAAC,IAAI,KAAK,CAAC,GAAG,CAAC,EAAE,CAAC;iBACrD,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC;QAC5B,CAAC;IACH,CAAC,CAAC;AACJ,CAAC","sourcesContent":["import { setTimeout } from \"node:timers/promises\";\nimport { randomUUID } from \"node:crypto\";\nimport { OutpostError } from \"../domain/errors.ts\";\nimport type { SandboxLease } from \"../domain/sandbox.types.ts\";\nimport { interruptible } from \"../infrastructure/abort.ts\";\nimport { quote } from \"../infrastructure/process.ts\";\nimport { cloudDefaults } from \"./cloud.constants.ts\";\nimport type { DaytonaRuntime } from \"./daytona.types.ts\";\n\nexport function daytonaCommand(\n  runtime: DaytonaRuntime,\n): SandboxLease[\"invoke\"] {\n  const { sandbox, root, options, context, isClosed } = runtime;\n  return async (command) => {\n    if (isClosed())\n      throw new OutpostError(\"provider\", \"Cloud sandbox is closed\");\n    if (command.interactive)\n      throw new OutpostError(\n        \"provider\",\n        \"Interactive terminals require a mounted or local provider\",\n      );\n    const signal = command.signal\n      ? AbortSignal.any([\n          command.signal,\n          AbortSignal.timeout(command.deadlineMs ?? cloudDefaults.deadlineMs),\n        ])\n      : AbortSignal.timeout(command.deadlineMs ?? cloudDefaults.deadlineMs);\n    signal.throwIfAborted();\n    const id = `outpost-${randomUUID()}`;\n    const input = `/tmp/${id}.stdin`;\n    const pid = `/tmp/${id}.pid`;\n    if (command.stdin !== undefined)\n      await sandbox.fs.uploadFile(Buffer.from(command.stdin), input);\n    const variables = { ...context.variables, ...command.variables };\n    const program = [\n      ...(command.elevated ? [\"sudo\", \"-n\", \"--\"] : []),\n      command.executable,\n      ...(command.arguments ?? []),\n    ]\n      .map(quote)\n      .join(\" \");\n    const script = `cd ${quote(command.directory ?? root)} && exec env ${Object.entries(\n      variables,\n    )\n      .map(([key, value]) => quote(`${key}=${value}`))\n      .join(\n        \" \",\n      )} setsid sh -c ${quote(`echo $$ > ${quote(pid)}; test ! -f ${quote(pid + \".cancel\")} || exit 130; exec ${program}${command.stdin === undefined ? \"\" : ` < ${quote(input)}`}`)}`;\n    const output = { stdout: \"\", stderr: \"\" };\n    let cancellation: Promise<unknown> | undefined;\n    const cancel = () => {\n      cancellation ??= sandbox.process.executeCommand(\n        `touch ${quote(pid + \".cancel\")}; if [ -f ${quote(pid)} ]; then kill -KILL -$(cat ${quote(pid)}) 2>/dev/null || true; fi`,\n      );\n      void cancellation.catch(() => undefined);\n    };\n    await sandbox.process.createSession(id);\n    try {\n      signal.addEventListener(\"abort\", cancel, { once: true });\n      if (signal.aborted) cancel();\n      signal.throwIfAborted();\n      const response = await interruptible(\n        sandbox.process.executeSessionCommand(id, {\n          command: script,\n          async: true,\n        }),\n        signal,\n      );\n      if (!response.cmdId)\n        throw new OutpostError(\n          \"provider\",\n          \"Cloud provider returned no command identifier\",\n        );\n      const consume = (channel: \"stdout\" | \"stderr\") => (chunk: string) => {\n        output[channel] = (output[channel] + chunk).slice(\n          -(command.retain ?? options.retain ?? cloudDefaults.retainBytes),\n        );\n        command.observe?.(channel, chunk);\n      };\n      await interruptible(\n        sandbox.process.getSessionCommandLogs(\n          id,\n          response.cmdId,\n          consume(\"stdout\"),\n          consume(\"stderr\"),\n        ),\n        signal,\n      );\n      if (cancellation) await cancellation;\n      signal.throwIfAborted();\n      while (true) {\n        const result = await interruptible(\n          sandbox.process.getSessionCommand(id, response.cmdId),\n          signal,\n        );\n        if (result.exitCode !== undefined)\n          return { status: result.exitCode, ...output };\n        await setTimeout(cloudDefaults.pollMs, undefined, { signal });\n      }\n    } catch (cause) {\n      cancel();\n      try {\n        await interruptible(\n          cancellation!,\n          AbortSignal.timeout(cloudDefaults.cancellationMs),\n        );\n      } catch (cleanup) {\n        throw new AggregateError(\n          [cause, cleanup],\n          \"Cloud cancellation could not be confirmed\",\n        );\n      }\n      throw cause;\n    } finally {\n      signal.removeEventListener(\"abort\", cancel);\n      await sandbox.process.deleteSession(id);\n      await sandbox.process\n        .executeCommand(`rm -f ${quote(input)} ${quote(pid)}`)\n        .catch(() => undefined);\n    }\n  };\n}\n"]}
+{"version":3,"file":"daytona-command.js","sourceRoot":"","sources":["../../src/providers/daytona-command.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,sBAAsB,CAAC;AAClD,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACzC,OAAO,EAAE,YAAY,EAAE,MAAM,qBAAqB,CAAC;AAEnD,OAAO,EAAE,aAAa,EAAE,MAAM,4BAA4B,CAAC;AAC3D,OAAO,EAAE,KAAK,EAAE,MAAM,8BAA8B,CAAC;AACrD,OAAO,EAAE,aAAa,EAAE,MAAM,sBAAsB,CAAC;AACrD,OAAO,EAAE,eAAe,EAAE,MAAM,uBAAuB,CAAC;AAGxD,MAAM,UAAU,cAAc,CAC5B,OAAuB;IAEvB,MAAM,EAAE,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,OAAO,EAAE,QAAQ,EAAE,GAAG,OAAO,CAAC;IAC9D,OAAO,KAAK,EAAE,OAAO,EAAE,EAAE;QACvB,IAAI,QAAQ,EAAE;YACZ,MAAM,IAAI,YAAY,CAAC,UAAU,EAAE,yBAAyB,CAAC,CAAC;QAChE,MAAM,MAAM,GAAG,OAAO,CAAC,MAAM;YAC3B,CAAC,CAAC,WAAW,CAAC,GAAG,CAAC;gBACd,OAAO,CAAC,MAAM;gBACd,WAAW,CAAC,OAAO,CAAC,OAAO,CAAC,UAAU,IAAI,aAAa,CAAC,UAAU,CAAC;aACpE,CAAC;YACJ,CAAC,CAAC,WAAW,CAAC,OAAO,CAAC,OAAO,CAAC,UAAU,IAAI,aAAa,CAAC,UAAU,CAAC,CAAC;QACxE,MAAM,CAAC,cAAc,EAAE,CAAC;QACxB,IAAI,OAAO,CAAC,WAAW;YAAE,OAAO,eAAe,CAAC,OAAO,EAAE,OAAO,EAAE,MAAM,CAAC,CAAC;QAC1E,MAAM,EAAE,GAAG,WAAW,UAAU,EAAE,EAAE,CAAC;QACrC,MAAM,KAAK,GAAG,QAAQ,EAAE,QAAQ,CAAC;QACjC,MAAM,GAAG,GAAG,QAAQ,EAAE,MAAM,CAAC;QAC7B,IAAI,OAAO,CAAC,KAAK,KAAK,SAAS;YAC7B,MAAM,OAAO,CAAC,EAAE,CAAC,UAAU,CAAC,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,KAAK,CAAC,CAAC;QACjE,MAAM,SAAS,GAAG,EAAE,GAAG,OAAO,CAAC,SAAS,EAAE,GAAG,OAAO,CAAC,SAAS,EAAE,CAAC;QACjE,MAAM,OAAO,GAAG;YACd,GAAG,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,MAAM,EAAE,IAAI,EAAE,IAAI,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;YACjD,OAAO,CAAC,UAAU;YAClB,GAAG,CAAC,OAAO,CAAC,SAAS,IAAI,EAAE,CAAC;SAC7B;aACE,GAAG,CAAC,KAAK,CAAC;aACV,IAAI,CAAC,GAAG,CAAC,CAAC;QACb,MAAM,MAAM,GAAG,MAAM,KAAK,CAAC,OAAO,CAAC,SAAS,IAAI,IAAI,CAAC,gBAAgB,MAAM,CAAC,OAAO,CACjF,SAAS,CACV;aACE,GAAG,CAAC,CAAC,CAAC,GAAG,EAAE,KAAK,CAAC,EAAE,EAAE,CAAC,KAAK,CAAC,GAAG,GAAG,IAAI,KAAK,EAAE,CAAC,CAAC;aAC/C,IAAI,CACH,GAAG,CACJ,iBAAiB,KAAK,CAAC,aAAa,KAAK,CAAC,GAAG,CAAC,eAAe,KAAK,CAAC,GAAG,GAAG,SAAS,CAAC,sBAAsB,OAAO,GAAG,OAAO,CAAC,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,MAAM,KAAK,CAAC,KAAK,CAAC,EAAE,EAAE,CAAC,EAAE,CAAC;QACnL,MAAM,MAAM,GAAG,EAAE,MAAM,EAAE,EAAE,EAAE,MAAM,EAAE,EAAE,EAAE,CAAC;QAC1C,IAAI,YAA0C,CAAC;QAC/C,MAAM,MAAM,GAAG,GAAG,EAAE;YAClB,YAAY,KAAK,OAAO,CAAC,OAAO,CAAC,cAAc,CAC7C,SAAS,KAAK,CAAC,GAAG,GAAG,SAAS,CAAC,aAAa,KAAK,CAAC,GAAG,CAAC,8BAA8B,KAAK,CAAC,GAAG,CAAC,2BAA2B,CAC1H,CAAC;YACF,KAAK,YAAY,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC;QAC3C,CAAC,CAAC;QACF,MAAM,OAAO,CAAC,OAAO,CAAC,aAAa,CAAC,EAAE,CAAC,CAAC;QACxC,IAAI,CAAC;YACH,MAAM,CAAC,gBAAgB,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC;YACzD,IAAI,MAAM,CAAC,OAAO;gBAAE,MAAM,EAAE,CAAC;YAC7B,MAAM,CAAC,cAAc,EAAE,CAAC;YACxB,MAAM,QAAQ,GAAG,MAAM,aAAa,CAClC,OAAO,CAAC,OAAO,CAAC,qBAAqB,CAAC,EAAE,EAAE;gBACxC,OAAO,EAAE,MAAM;gBACf,KAAK,EAAE,IAAI;aACZ,CAAC,EACF,MAAM,CACP,CAAC;YACF,IAAI,CAAC,QAAQ,CAAC,KAAK;gBACjB,MAAM,IAAI,YAAY,CACpB,UAAU,EACV,+CAA+C,CAChD,CAAC;YACJ,MAAM,OAAO,GAAG,CAAC,OAA4B,EAAE,EAAE,CAAC,CAAC,KAAa,EAAE,EAAE;gBAClE,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,OAAO,CAAC,GAAG,KAAK,CAAC,CAAC,KAAK,CAC/C,CAAC,CAAC,OAAO,CAAC,MAAM,IAAI,OAAO,CAAC,MAAM,IAAI,aAAa,CAAC,WAAW,CAAC,CACjE,CAAC;gBACF,OAAO,CAAC,OAAO,EAAE,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC;YACpC,CAAC,CAAC;YACF,MAAM,aAAa,CACjB,OAAO,CAAC,OAAO,CAAC,qBAAqB,CACnC,EAAE,EACF,QAAQ,CAAC,KAAK,EACd,OAAO,CAAC,QAAQ,CAAC,EACjB,OAAO,CAAC,QAAQ,CAAC,CAClB,EACD,MAAM,CACP,CAAC;YACF,IAAI,YAAY;gBAAE,MAAM,YAAY,CAAC;YACrC,MAAM,CAAC,cAAc,EAAE,CAAC;YACxB,OAAO,IAAI,EAAE,CAAC;gBACZ,MAAM,MAAM,GAAG,MAAM,aAAa,CAChC,OAAO,CAAC,OAAO,CAAC,iBAAiB,CAAC,EAAE,EAAE,QAAQ,CAAC,KAAK,CAAC,EACrD,MAAM,CACP,CAAC;gBACF,IAAI,MAAM,CAAC,QAAQ,KAAK,SAAS;oBAC/B,OAAO,EAAE,MAAM,EAAE,MAAM,CAAC,QAAQ,EAAE,GAAG,MAAM,EAAE,CAAC;gBAChD,MAAM,UAAU,CAAC,aAAa,CAAC,MAAM,EAAE,SAAS,EAAE,EAAE,MAAM,EAAE,CAAC,CAAC;YAChE,CAAC;QACH,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,MAAM,EAAE,CAAC;YACT,IAAI,CAAC;gBACH,MAAM,aAAa,CACjB,YAAa,EACb,WAAW,CAAC,OAAO,CAAC,aAAa,CAAC,cAAc,CAAC,CAClD,CAAC;YACJ,CAAC;YAAC,OAAO,OAAO,EAAE,CAAC;gBACjB,MAAM,IAAI,cAAc,CACtB,CAAC,KAAK,EAAE,OAAO,CAAC,EAChB,2CAA2C,CAC5C,CAAC;YACJ,CAAC;YACD,MAAM,KAAK,CAAC;QACd,CAAC;gBAAS,CAAC;YACT,MAAM,CAAC,mBAAmB,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;YAC5C,MAAM,OAAO,CAAC,OAAO,CAAC,aAAa,CAAC,EAAE,CAAC,CAAC;YACxC,MAAM,OAAO,CAAC,OAAO;iBAClB,cAAc,CAAC,SAAS,KAAK,CAAC,KAAK,CAAC,IAAI,KAAK,CAAC,GAAG,CAAC,EAAE,CAAC;iBACrD,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC;QAC5B,CAAC;IACH,CAAC,CAAC;AACJ,CAAC","sourcesContent":["import { setTimeout } from \"node:timers/promises\";\nimport { randomUUID } from \"node:crypto\";\nimport { OutpostError } from \"../domain/errors.ts\";\nimport type { SandboxLease } from \"../domain/sandbox.types.ts\";\nimport { interruptible } from \"../infrastructure/abort.ts\";\nimport { quote } from \"../infrastructure/process.ts\";\nimport { cloudDefaults } from \"./cloud.constants.ts\";\nimport { daytonaTerminal } from \"./daytona-terminal.ts\";\nimport type { DaytonaRuntime } from \"./daytona.types.ts\";\n\nexport function daytonaCommand(\n  runtime: DaytonaRuntime,\n): SandboxLease[\"invoke\"] {\n  const { sandbox, root, options, context, isClosed } = runtime;\n  return async (command) => {\n    if (isClosed())\n      throw new OutpostError(\"provider\", \"Cloud sandbox is closed\");\n    const signal = command.signal\n      ? AbortSignal.any([\n          command.signal,\n          AbortSignal.timeout(command.deadlineMs ?? cloudDefaults.deadlineMs),\n        ])\n      : AbortSignal.timeout(command.deadlineMs ?? cloudDefaults.deadlineMs);\n    signal.throwIfAborted();\n    if (command.interactive) return daytonaTerminal(runtime, command, signal);\n    const id = `outpost-${randomUUID()}`;\n    const input = `/tmp/${id}.stdin`;\n    const pid = `/tmp/${id}.pid`;\n    if (command.stdin !== undefined)\n      await sandbox.fs.uploadFile(Buffer.from(command.stdin), input);\n    const variables = { ...context.variables, ...command.variables };\n    const program = [\n      ...(command.elevated ? [\"sudo\", \"-n\", \"--\"] : []),\n      command.executable,\n      ...(command.arguments ?? []),\n    ]\n      .map(quote)\n      .join(\" \");\n    const script = `cd ${quote(command.directory ?? root)} && exec env ${Object.entries(\n      variables,\n    )\n      .map(([key, value]) => quote(`${key}=${value}`))\n      .join(\n        \" \",\n      )} setsid sh -c ${quote(`echo $$ > ${quote(pid)}; test ! -f ${quote(pid + \".cancel\")} || exit 130; exec ${program}${command.stdin === undefined ? \"\" : ` < ${quote(input)}`}`)}`;\n    const output = { stdout: \"\", stderr: \"\" };\n    let cancellation: Promise<unknown> | undefined;\n    const cancel = () => {\n      cancellation ??= sandbox.process.executeCommand(\n        `touch ${quote(pid + \".cancel\")}; if [ -f ${quote(pid)} ]; then kill -KILL -$(cat ${quote(pid)}) 2>/dev/null || true; fi`,\n      );\n      void cancellation.catch(() => undefined);\n    };\n    await sandbox.process.createSession(id);\n    try {\n      signal.addEventListener(\"abort\", cancel, { once: true });\n      if (signal.aborted) cancel();\n      signal.throwIfAborted();\n      const response = await interruptible(\n        sandbox.process.executeSessionCommand(id, {\n          command: script,\n          async: true,\n        }),\n        signal,\n      );\n      if (!response.cmdId)\n        throw new OutpostError(\n          \"provider\",\n          \"Cloud provider returned no command identifier\",\n        );\n      const consume = (channel: \"stdout\" | \"stderr\") => (chunk: string) => {\n        output[channel] = (output[channel] + chunk).slice(\n          -(command.retain ?? options.retain ?? cloudDefaults.retainBytes),\n        );\n        command.observe?.(channel, chunk);\n      };\n      await interruptible(\n        sandbox.process.getSessionCommandLogs(\n          id,\n          response.cmdId,\n          consume(\"stdout\"),\n          consume(\"stderr\"),\n        ),\n        signal,\n      );\n      if (cancellation) await cancellation;\n      signal.throwIfAborted();\n      while (true) {\n        const result = await interruptible(\n          sandbox.process.getSessionCommand(id, response.cmdId),\n          signal,\n        );\n        if (result.exitCode !== undefined)\n          return { status: result.exitCode, ...output };\n        await setTimeout(cloudDefaults.pollMs, undefined, { signal });\n      }\n    } catch (cause) {\n      cancel();\n      try {\n        await interruptible(\n          cancellation!,\n          AbortSignal.timeout(cloudDefaults.cancellationMs),\n        );\n      } catch (cleanup) {\n        throw new AggregateError(\n          [cause, cleanup],\n          \"Cloud cancellation could not be confirmed\",\n        );\n      }\n      throw cause;\n    } finally {\n      signal.removeEventListener(\"abort\", cancel);\n      await sandbox.process.deleteSession(id);\n      await sandbox.process\n        .executeCommand(`rm -f ${quote(input)} ${quote(pid)}`)\n        .catch(() => undefined);\n    }\n  };\n}\n"]}