@intentic/sandbox-run 1.230.3 → 1.232.0
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/README.md +4 -0
- package/dist/index.d.ts +4 -7
- package/dist/index.d.ts.map +1 -1
- package/dist/index.js +13 -19
- package/dist/index.js.map +1 -1
- package/package.json +2 -2
package/README.md
CHANGED
|
@@ -17,6 +17,10 @@ app); this package is why they cannot disagree about what one is.
|
|
|
17
17
|
browser-importable; the caller that can measure passes the result as `memory`/`memorySwap`, and one that
|
|
18
18
|
cannot gets `LOCAL_SANDBOX_MEMORY`. Hosted providers keep owning their machine limits.
|
|
19
19
|
- Define the environment allowlist: what is allowed to cross into the box.
|
|
20
|
+
- Carry an optional sandbox definition (`definition`, a `sandbox.toml` text) into the box as
|
|
21
|
+
`SANDBOX_DEFINITION_SEED` (base64, so its quotes and newlines never meet a shell): the daemon seeds an EMPTY
|
|
22
|
+
workspace from it on first boot — repos cloned, connections listed unauthenticated, the overlay parked at the
|
|
23
|
+
approval gate — which is how one definition stamps out a fleet.
|
|
20
24
|
- Emit the `docker run` invocation, correctly quoted.
|
|
21
25
|
|
|
22
26
|
## Key files
|
package/dist/index.d.ts
CHANGED
|
@@ -10,11 +10,8 @@ export interface SandboxNames {
|
|
|
10
10
|
export declare const sandboxNames: (slug: string) => SandboxNames;
|
|
11
11
|
export declare const SANDBOX_CAPABILITIES: readonly ["SYS_ADMIN", "SYS_PTRACE"];
|
|
12
12
|
export declare const LOCAL_SANDBOX_MEMORY = "7g";
|
|
13
|
-
export declare const
|
|
14
|
-
export declare const localSandboxMemory: (totalBytes: number, override?: string) =>
|
|
15
|
-
readonly memory: string;
|
|
16
|
-
readonly memorySwap: string;
|
|
17
|
-
};
|
|
13
|
+
export declare const SANDBOX_MEMORY_SWAP = "-1";
|
|
14
|
+
export declare const localSandboxMemory: (totalBytes: number, override?: string) => string;
|
|
18
15
|
export declare const RUNTIME_DIRECTIVE_PREFIX = "# intentic:runtime ";
|
|
19
16
|
export declare const RUNTIME_DIRECTIVES: readonly ["--device=/dev/net/tun", "--cap-add=NET_ADMIN", "--privileged", "--gpus=all"];
|
|
20
17
|
export interface OptionalDirective {
|
|
@@ -32,7 +29,7 @@ export interface OptionalDirective {
|
|
|
32
29
|
export declare const OPTIONAL_DIRECTIVES: readonly OptionalDirective[];
|
|
33
30
|
export declare const optionalDirective: (token: string) => OptionalDirective | undefined;
|
|
34
31
|
export declare const runtimeDirectivesOf: (overlay: string) => string[];
|
|
35
|
-
export declare const REPLAY_ENV: readonly ["WORKSPACE_ROOT", "HISTORY_ROOT", "AGENT_AUTH_DIR", "SANDBOX_HOST", "SANDBOX_PORT", "SANDBOX_NAME", "PREVIEW_PORT", "GOOGLE_CLIENT_ID", "CONNECT_TOKEN", "OWNER_EMAIL", "WEB_ORIGIN", "SANDBOX_PUBLIC_URL", "PLATFORM_URL", "ZROK_TOKEN", "ZROK_API", "ZROK_NAMESPACE", "CLOUDFLARE_API_TOKEN", "HOST_SSH_KEY", "SELF_HOST_USER", "SYNC_PAIR_TOKEN", "HOST_PAIR_TOKEN", "HOST_PLATFORM", "HOST_LABEL", "SELF_HOST_ADDRESS", "SELF_HOST_VIA", "SANDBOX_MEMORY"];
|
|
32
|
+
export declare const REPLAY_ENV: readonly ["WORKSPACE_ROOT", "HISTORY_ROOT", "AGENT_AUTH_DIR", "SANDBOX_HOST", "SANDBOX_PORT", "SANDBOX_NAME", "PREVIEW_PORT", "GOOGLE_CLIENT_ID", "CONNECT_TOKEN", "OWNER_EMAIL", "WEB_ORIGIN", "SANDBOX_PUBLIC_URL", "PLATFORM_URL", "ZROK_TOKEN", "ZROK_API", "ZROK_NAMESPACE", "CLOUDFLARE_API_TOKEN", "HOST_SSH_KEY", "SELF_HOST_USER", "SYNC_PAIR_TOKEN", "HOST_PAIR_TOKEN", "HOST_PLATFORM", "HOST_LABEL", "SELF_HOST_ADDRESS", "SELF_HOST_VIA", "SANDBOX_MEMORY", "RUNNER_PARENT_URL", "RUNNER_PAIR_TOKEN"];
|
|
36
33
|
export declare const parseNulEnv: (dump: string) => [string, string][];
|
|
37
34
|
export declare const replayableEnv: (pairs: readonly (readonly [string, string])[]) => [string, string][];
|
|
38
35
|
export declare const HEALTH: {
|
|
@@ -50,11 +47,11 @@ export interface SandboxRun {
|
|
|
50
47
|
readonly environmentHash?: string;
|
|
51
48
|
readonly channel?: string;
|
|
52
49
|
readonly previousImage?: string;
|
|
50
|
+
readonly definition?: string;
|
|
53
51
|
readonly env?: readonly (readonly [string, string])[];
|
|
54
52
|
readonly runtime?: readonly string[];
|
|
55
53
|
readonly mounts?: readonly string[];
|
|
56
54
|
readonly memory?: string;
|
|
57
|
-
readonly memorySwap?: string;
|
|
58
55
|
readonly ports?: readonly string[];
|
|
59
56
|
readonly labels?: readonly string[];
|
|
60
57
|
readonly dns?: readonly string[];
|
package/dist/index.d.ts.map
CHANGED
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AA6BA,eAAO,MAAM,WAAW,+BAA+B,CAAC;AAExD,MAAM,WAAW,YAAY;IACzB,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,eAAe,EAAE,MAAM,CAAC;IACjC,QAAQ,CAAC,eAAe,EAAE,MAAM,CAAC;IACjC,QAAQ,CAAC,aAAa,EAAE,MAAM,CAAC;IAC/B,QAAQ,CAAC,YAAY,EAAE,MAAM,CAAC;IAC9B,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;CAC5B;AAED,eAAO,MAAM,YAAY,SAAU,MAAM,KAAG,YAO1C,CAAC;AAkBH,eAAO,MAAM,oBAAoB,YAAI,WAAW,EAAE,YAAY,CAAU,CAAC;
|
|
1
|
+
{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AA6BA,eAAO,MAAM,WAAW,+BAA+B,CAAC;AAExD,MAAM,WAAW,YAAY;IACzB,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,eAAe,EAAE,MAAM,CAAC;IACjC,QAAQ,CAAC,eAAe,EAAE,MAAM,CAAC;IACjC,QAAQ,CAAC,aAAa,EAAE,MAAM,CAAC;IAC/B,QAAQ,CAAC,YAAY,EAAE,MAAM,CAAC;IAC9B,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;CAC5B;AAED,eAAO,MAAM,YAAY,SAAU,MAAM,KAAG,YAO1C,CAAC;AAkBH,eAAO,MAAM,oBAAoB,YAAI,WAAW,EAAE,YAAY,CAAU,CAAC;AAiBzE,eAAO,MAAM,oBAAoB,OAAO,CAAC;AA8BzC,eAAO,MAAM,mBAAmB,OAAO,CAAC;AA4CxC,eAAO,MAAM,kBAAkB,eAAgB,MAAM,aAAa,MAAM,KAAG,MAS1E,CAAC;AAUF,eAAO,MAAM,wBAAwB,wBAAwB,CAAC;AAC9D,eAAO,MAAM,kBAAkB,YAAI,uBAAuB,EAAE,qBAAqB,EAAE,cAAc,EAAE,YAAY,CAAU,CAAC;AA6B1H,MAAM,WAAW,iBAAiB;IAE9B,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IAEvB,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IAGtB,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAC;IACrB,QAAQ,CAAC,KAAK,EAAE;QAAE,QAAQ,CAAC,IAAI,EAAE,SAAS,CAAC;QAAC,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAA;KAAE,GAAG;QAAE,QAAQ,CAAC,IAAI,EAAE,QAAQ,CAAC;QAAC,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAA;KAAE,CAAC;CAC5H;AAED,eAAO,MAAM,mBAAmB,EAAE,SAAS,iBAAiB,EAO3D,CAAC;AAEF,eAAO,MAAM,iBAAiB,UAAW,MAAM,KAAG,iBAAiB,GAAG,SAAuE,CAAC;AAS9I,eAAO,MAAM,mBAAmB,YAAa,MAAM,KAAG,MAAM,EAc3D,CAAC;AAOF,eAAO,MAAM,UAAU,YACnB,gBAAgB,EAChB,cAAc,EACd,gBAAgB,EAChB,cAAc,EACd,cAAc,EACd,cAAc,EACd,cAAc,EACd,kBAAkB,EAClB,eAAe,EACf,aAAa,EACb,YAAY,EACZ,oBAAoB,EACpB,cAAc,EAGd,YAAY,EACZ,UAAU,EACV,gBAAgB,EAChB,sBAAsB,EACtB,cAAc,EACd,gBAAgB,EAChB,iBAAiB,EAGjB,iBAAiB,EACjB,eAAe,EACf,YAAY,EACZ,mBAAmB,EACnB,eAAe,EAWf,gBAAgB,EAMhB,mBAAmB,EACnB,mBAAmB,CACb,CAAC;AAIX,eAAO,MAAM,WAAW,SAAU,MAAM,KAAG,CAAC,MAAM,EAAE,MAAM,CAAC,EAOjD,CAAC;AAKX,eAAO,MAAM,aAAa,UAAW,SAAS,CAAC,SAAS,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,EAAE,KAAG,CAAC,MAAM,EAAE,MAAM,CAAC,EAIxF,CAAC;AAKP,eAAO,MAAM,MAAM;aAAK,GAAG;aAA4C,QAAQ,EAAE,EAAE;aAAE,eAAe,EAAE,CAAC;CAAW,CAAC;AAyBnH,eAAO,MAAM,eAAe,cAAe,MAAM,KAAG,MAA0F,CAAC;AAS/I,eAAO,MAAM,cAAc,cAAe,MAAM,QAAQ,MAAM,GAAG,SAAS,KAAG,MAAM,GAAG,SACgC,CAAC;AAEvH,eAAO,MAAM,sBAAsB,cAAe,MAAM,KAAG,MAA0D,CAAC;AAGtH,MAAM,WAAW,UAAU;IACvB,QAAQ,CAAC,KAAK,EAAE,YAAY,CAAC;IAC7B,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IAGvB,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAG3B,QAAQ,CAAC,eAAe,CAAC,EAAE,MAAM,CAAC;IAOlC,QAAQ,CAAC,OAAO,CAAC,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,aAAa,CAAC,EAAE,MAAM,CAAC;IAMhC,QAAQ,CAAC,UAAU,CAAC,EAAE,MAAM,CAAC;IAE7B,QAAQ,CAAC,GAAG,CAAC,EAAE,SAAS,CAAC,SAAS,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,EAAE,CAAC;IAEtD,QAAQ,CAAC,OAAO,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;IAErC,QAAQ,CAAC,MAAM,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;IAOpC,QAAQ,CAAC,MAAM,CAAC,EAAE,MAAM,CAAC;IAEzB,QAAQ,CAAC,KAAK,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;IACnC,QAAQ,CAAC,MAAM,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;IACpC,QAAQ,CAAC,GAAG,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;IAGjC,QAAQ,CAAC,SAAS,CAAC,EAAE,MAAM,CAAC;IAG5B,QAAQ,CAAC,YAAY,CAAC,EAAE,OAAO,CAAC;IAUhC,QAAQ,CAAC,WAAW,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;IAGzC,QAAQ,CAAC,IAAI,CAAC,EAAE,OAAO,CAAC;IACxB,QAAQ,CAAC,KAAK,CAAC,EAAE,OAAO,CAAC;CAC5B;AAKD,eAAO,MAAM,cAAc,QAAS,UAAU,KAAG,MAAM,EA0DtD,CAAC;AAIF,eAAO,MAAM,iBAAiB,QAAS,UAAU,KAAG,MAAsE,CAAC"}
|
package/dist/index.js
CHANGED
|
@@ -11,37 +11,28 @@ export const sandboxNames = (slug) => ({
|
|
|
11
11
|
});
|
|
12
12
|
export const SANDBOX_CAPABILITIES = ["SYS_ADMIN", "SYS_PTRACE"];
|
|
13
13
|
export const LOCAL_SANDBOX_MEMORY = "7g";
|
|
14
|
-
export const LOCAL_SANDBOX_MEMORY_SWAP = "9g";
|
|
15
14
|
const GIB = 1024 ** 3;
|
|
16
|
-
const
|
|
15
|
+
const SANDBOX_MEMORY_RESERVE = 3 * GIB;
|
|
17
16
|
const SANDBOX_MEMORY_FLOOR = 4 * GIB;
|
|
18
|
-
const
|
|
19
|
-
const
|
|
20
|
-
const SANDBOX_SWAP_CEILING = 4 * GIB;
|
|
21
|
-
const SANDBOX_MEMORY_OVERRIDE_SHARE = 0.6;
|
|
22
|
-
const capStrings = (capBytes) => {
|
|
23
|
-
const memoryGib = Math.max(1, Math.floor(capBytes / GIB));
|
|
24
|
-
const swapGib = Math.max(1, Math.ceil(Math.min(memoryGib * GIB * SANDBOX_SWAP_SHARE, SANDBOX_SWAP_CEILING) / GIB));
|
|
25
|
-
return { memory: `${memoryGib}g`, memorySwap: `${memoryGib + swapGib}g` };
|
|
26
|
-
};
|
|
17
|
+
export const SANDBOX_MEMORY_SWAP = "-1";
|
|
18
|
+
const capString = (capBytes) => `${Math.max(1, Math.floor(capBytes / GIB))}g`;
|
|
27
19
|
const overrideCapBytes = (override, totalBytes) => {
|
|
28
20
|
const asked = /^(\d+)g$/u.exec(override.trim());
|
|
29
21
|
if (asked === null) {
|
|
30
22
|
throw new Error(`SANDBOX_MEMORY must be whole GiB spelled '<n>g' (e.g. '10g'), got '${override}'`);
|
|
31
23
|
}
|
|
32
|
-
const
|
|
33
|
-
|
|
34
|
-
|
|
35
|
-
return Math.min(Math.max(Number(asked[1]) * GIB, SANDBOX_MEMORY_FLOOR), ceiling);
|
|
24
|
+
const askedBytes = Math.max(Number(asked[1]) * GIB, SANDBOX_MEMORY_FLOOR);
|
|
25
|
+
const measured = Number.isFinite(totalBytes) && totalBytes > 0;
|
|
26
|
+
return measured ? Math.min(askedBytes, Math.max(totalBytes - SANDBOX_MEMORY_RESERVE, SANDBOX_MEMORY_FLOOR)) : askedBytes;
|
|
36
27
|
};
|
|
37
28
|
export const localSandboxMemory = (totalBytes, override) => {
|
|
38
29
|
if (override !== undefined && override.trim() !== "") {
|
|
39
|
-
return
|
|
30
|
+
return capString(overrideCapBytes(override, totalBytes));
|
|
40
31
|
}
|
|
41
32
|
if (!Number.isFinite(totalBytes) || totalBytes <= 0) {
|
|
42
|
-
return
|
|
33
|
+
return LOCAL_SANDBOX_MEMORY;
|
|
43
34
|
}
|
|
44
|
-
return
|
|
35
|
+
return capString(Math.max(totalBytes - SANDBOX_MEMORY_RESERVE, SANDBOX_MEMORY_FLOOR));
|
|
45
36
|
};
|
|
46
37
|
export const RUNTIME_DIRECTIVE_PREFIX = "# intentic:runtime ";
|
|
47
38
|
export const RUNTIME_DIRECTIVES = ["--device=/dev/net/tun", "--cap-add=NET_ADMIN", "--privileged", "--gpus=all"];
|
|
@@ -96,6 +87,8 @@ export const REPLAY_ENV = [
|
|
|
96
87
|
"SELF_HOST_ADDRESS",
|
|
97
88
|
"SELF_HOST_VIA",
|
|
98
89
|
"SANDBOX_MEMORY",
|
|
90
|
+
"RUNNER_PARENT_URL",
|
|
91
|
+
"RUNNER_PAIR_TOKEN",
|
|
99
92
|
];
|
|
100
93
|
export const parseNulEnv = (dump) => dump
|
|
101
94
|
.split("\0")
|
|
@@ -136,7 +129,7 @@ export const sandboxRunArgv = (run) => {
|
|
|
136
129
|
"max-size=10m",
|
|
137
130
|
"--log-opt",
|
|
138
131
|
"max-file=3",
|
|
139
|
-
...(run.init === false ? [] : ["--memory", run.memory ?? LOCAL_SANDBOX_MEMORY, "--memory-swap",
|
|
132
|
+
...(run.init === false ? [] : ["--memory", run.memory ?? LOCAL_SANDBOX_MEMORY, "--memory-swap", SANDBOX_MEMORY_SWAP]),
|
|
140
133
|
...SANDBOX_CAPABILITIES.map((cap) => `--cap-add=${cap}`),
|
|
141
134
|
...(run.runtime ?? []).filter((token) => !dropped.has(token)),
|
|
142
135
|
...(run.ports ?? []).flatMap((port) => ["-p", port]),
|
|
@@ -157,6 +150,7 @@ export const sandboxRunArgv = (run) => {
|
|
|
157
150
|
...(run.environmentHash === undefined ? [] : ["-e", `SANDBOX_ENVIRONMENT_HASH=${run.environmentHash}`]),
|
|
158
151
|
...(run.channel === undefined ? [] : ["-e", `SANDBOX_CHANNEL=${run.channel}`]),
|
|
159
152
|
...(run.previousImage === undefined ? [] : ["-e", `SANDBOX_PREVIOUS_IMAGE=${run.previousImage}`]),
|
|
153
|
+
...(run.definition === undefined ? [] : ["-e", `SANDBOX_DEFINITION_SEED=${Buffer.from(run.definition, "utf8").toString("base64")}`]),
|
|
160
154
|
...asked.flatMap((entry) => ["-e", `${entry.env}=${dropped.has(entry.token) ? "unsupported" : "all"}`]),
|
|
161
155
|
...(run.env ?? []).flatMap(([name, value]) => ["-e", `${name}=${value}`]),
|
|
162
156
|
run.image,
|
package/dist/index.js.map
CHANGED
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,WAAW,EAAE,UAAU,EAAE,MAAM,qBAAqB,CAAC;AAC9D,OAAO,EAAE,UAAU,EAAE,MAAM,YAAY,CAAC;AA4BxC,MAAM,CAAC,MAAM,WAAW,GAAG,4BAA4B,CAAC;AAWxD,MAAM,CAAC,MAAM,YAAY,GAAG,CAAC,IAAY,EAAgB,EAAE,CAAC,CAAC;IACzD,SAAS,EAAE,oBAAoB,IAAI,EAAE;IACrC,eAAe,EAAE,2BAA2B,IAAI,EAAE;IAClD,eAAe,EAAE,sBAAsB,IAAI,EAAE;IAC7C,aAAa,EAAE,oBAAoB,IAAI,EAAE;IACzC,YAAY,EAAE,mBAAmB,IAAI,EAAE;IACvC,OAAO,EAAE,sBAAsB,IAAI,EAAE;CACxC,CAAC,CAAC;AAkBH,MAAM,CAAC,MAAM,oBAAoB,GAAG,CAAC,WAAW,EAAE,YAAY,CAAU,CAAC;
|
|
1
|
+
{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,WAAW,EAAE,UAAU,EAAE,MAAM,qBAAqB,CAAC;AAC9D,OAAO,EAAE,UAAU,EAAE,MAAM,YAAY,CAAC;AA4BxC,MAAM,CAAC,MAAM,WAAW,GAAG,4BAA4B,CAAC;AAWxD,MAAM,CAAC,MAAM,YAAY,GAAG,CAAC,IAAY,EAAgB,EAAE,CAAC,CAAC;IACzD,SAAS,EAAE,oBAAoB,IAAI,EAAE;IACrC,eAAe,EAAE,2BAA2B,IAAI,EAAE;IAClD,eAAe,EAAE,sBAAsB,IAAI,EAAE;IAC7C,aAAa,EAAE,oBAAoB,IAAI,EAAE;IACzC,YAAY,EAAE,mBAAmB,IAAI,EAAE;IACvC,OAAO,EAAE,sBAAsB,IAAI,EAAE;CACxC,CAAC,CAAC;AAkBH,MAAM,CAAC,MAAM,oBAAoB,GAAG,CAAC,WAAW,EAAE,YAAY,CAAU,CAAC;AAiBzE,MAAM,CAAC,MAAM,oBAAoB,GAAG,IAAI,CAAC;AAEzC,MAAM,GAAG,GAAG,IAAI,IAAI,CAAC,CAAC;AAStB,MAAM,sBAAsB,GAAG,CAAC,GAAG,GAAG,CAAC;AACvC,MAAM,oBAAoB,GAAG,CAAC,GAAG,GAAG,CAAC;AAkBrC,MAAM,CAAC,MAAM,mBAAmB,GAAG,IAAI,CAAC;AAIxC,MAAM,SAAS,GAAG,CAAC,QAAgB,EAAU,EAAE,CAAC,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,CAAC,KAAK,CAAC,QAAQ,GAAG,GAAG,CAAC,CAAC,GAAG,CAAC;AAa9F,MAAM,gBAAgB,GAAG,CAAC,QAAgB,EAAE,UAAkB,EAAU,EAAE;IACtE,MAAM,KAAK,GAAG,WAAW,CAAC,IAAI,CAAC,QAAQ,CAAC,IAAI,EAAE,CAAC,CAAC;IAChD,IAAI,KAAK,KAAK,IAAI,EAAE,CAAC;QACjB,MAAM,IAAI,KAAK,CAAC,sEAAsE,QAAQ,GAAG,CAAC,CAAC;IACvG,CAAC;IACD,MAAM,UAAU,GAAG,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,GAAG,GAAG,EAAE,oBAAoB,CAAC,CAAC;IAC1E,MAAM,QAAQ,GAAG,MAAM,CAAC,QAAQ,CAAC,UAAU,CAAC,IAAI,UAAU,GAAG,CAAC,CAAC;IAC/D,OAAO,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,UAAU,EAAE,IAAI,CAAC,GAAG,CAAC,UAAU,GAAG,sBAAsB,EAAE,oBAAoB,CAAC,CAAC,CAAC,CAAC,CAAC,UAAU,CAAC;AAC7H,CAAC,CAAC;AAmBF,MAAM,CAAC,MAAM,kBAAkB,GAAG,CAAC,UAAkB,EAAE,QAAiB,EAAU,EAAE;IAEhF,IAAI,QAAQ,KAAK,SAAS,IAAI,QAAQ,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,CAAC;QACnD,OAAO,SAAS,CAAC,gBAAgB,CAAC,QAAQ,EAAE,UAAU,CAAC,CAAC,CAAC;IAC7D,CAAC;IACD,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,UAAU,CAAC,IAAI,UAAU,IAAI,CAAC,EAAE,CAAC;QAClD,OAAO,oBAAoB,CAAC;IAChC,CAAC;IACD,OAAO,SAAS,CAAC,IAAI,CAAC,GAAG,CAAC,UAAU,GAAG,sBAAsB,EAAE,oBAAoB,CAAC,CAAC,CAAC;AAC1F,CAAC,CAAC;AAUF,MAAM,CAAC,MAAM,wBAAwB,GAAG,qBAAqB,CAAC;AAC9D,MAAM,CAAC,MAAM,kBAAkB,GAAG,CAAC,uBAAuB,EAAE,qBAAqB,EAAE,cAAc,EAAE,YAAY,CAAU,CAAC;AAwC1H,MAAM,CAAC,MAAM,mBAAmB,GAAiC;IAC7D;QACI,KAAK,EAAE,YAAY;QACnB,IAAI,EAAE,mBAAmB;QACzB,GAAG,EAAE,aAAa;QAClB,KAAK,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE,IAAI,EAAE,QAAQ,EAAE;KAC7C;CACJ,CAAC;AAEF,MAAM,CAAC,MAAM,iBAAiB,GAAG,CAAC,KAAa,EAAiC,EAAE,CAAC,mBAAmB,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,KAAK,KAAK,KAAK,CAAC,CAAC;AAS9I,MAAM,CAAC,MAAM,mBAAmB,GAAG,CAAC,OAAe,EAAY,EAAE;IAC7D,MAAM,MAAM,GAAG,IAAI,GAAG,EAAU,CAAC;IACjC,KAAK,MAAM,IAAI,IAAI,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC;QACrC,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,wBAAwB,CAAC,EAAE,CAAC;YAC7C,SAAS;QACb,CAAC;QACD,KAAK,MAAM,KAAK,IAAI,IAAI,CAAC,KAAK,CAAC,wBAAwB,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,KAAK,CAAC,EAAE,CAAC;YAClF,IAAI,CAAE,kBAAwC,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC;gBAC7D,MAAM,IAAI,KAAK,CAAC,kCAAkC,KAAK,2BAA2B,CAAC,CAAC;YACxF,CAAC;YACD,MAAM,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;QACtB,CAAC;IACL,CAAC;IACD,OAAO,CAAC,GAAG,MAAM,CAAC,CAAC;AACvB,CAAC,CAAC;AAOF,MAAM,CAAC,MAAM,UAAU,GAAG;IACtB,gBAAgB;IAChB,cAAc;IACd,gBAAgB;IAChB,cAAc;IACd,cAAc;IACd,cAAc;IACd,cAAc;IACd,kBAAkB;IAClB,eAAe;IACf,aAAa;IACb,YAAY;IACZ,oBAAoB;IACpB,cAAc;IAGd,YAAY;IACZ,UAAU;IACV,gBAAgB;IAChB,sBAAsB;IACtB,cAAc;IACd,gBAAgB;IAChB,iBAAiB;IAGjB,iBAAiB;IACjB,eAAe;IACf,YAAY;IACZ,mBAAmB;IACnB,eAAe;IAWf,gBAAgB;IAMhB,mBAAmB;IACnB,mBAAmB;CACb,CAAC;AAIX,MAAM,CAAC,MAAM,WAAW,GAAG,CAAC,IAAY,EAAsB,EAAE,CAC5D,IAAI;KACC,KAAK,CAAC,IAAI,CAAC;KACX,MAAM,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC;KACtC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE;IACX,MAAM,EAAE,GAAG,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;IAC9B,OAAO,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,EAAE,KAAK,CAAC,KAAK,CAAC,EAAE,GAAG,CAAC,CAAC,CAAC,CAAC;AACrD,CAAC,CAAC,CAAC;AAKX,MAAM,CAAC,MAAM,aAAa,GAAG,CAAC,KAA6C,EAAsB,EAAE,CAC/F,UAAU,CAAC,OAAO,CAAC,CAAC,IAAI,EAAE,EAAE;IACxB,MAAM,KAAK,GAAG,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,GAAG,CAAC,EAAE,EAAE,CAAC,GAAG,KAAK,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC;IACvD,OAAO,KAAK,KAAK,SAAS,IAAI,KAAK,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,KAAK,CAAqB,CAAC,CAAC;AAC1F,CAAC,CAAC,CAAC;AAKP,MAAM,CAAC,MAAM,MAAM,GAAG,EAAE,GAAG,EAAE,oBAAoB,WAAW,SAAS,EAAE,QAAQ,EAAE,EAAE,EAAE,eAAe,EAAE,CAAC,EAAW,CAAC;AAmBnH,MAAM,eAAe,GAAG,KAAK,CAAC;AAC9B,MAAM,eAAe,GAAG,IAAI,CAAC;AAK7B,MAAM,CAAC,MAAM,eAAe,GAAG,CAAC,SAAiB,EAAU,EAAE,CAAC,eAAe,GAAG,CAAC,MAAM,CAAC,QAAQ,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,GAAG,eAAe,CAAC,CAAC;AAS/I,MAAM,CAAC,MAAM,cAAc,GAAG,CAAC,SAAiB,EAAE,IAAwB,EAAsB,EAAE,CAC9F,IAAI,KAAK,SAAS,IAAI,IAAI,KAAK,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,iBAAiB,SAAS,IAAI,IAAI,IAAI,eAAe,CAAC,SAAS,CAAC,EAAE,CAAC;AAEvH,MAAM,CAAC,MAAM,sBAAsB,GAAG,CAAC,SAAiB,EAAU,EAAE,CAAC,oBAAoB,eAAe,CAAC,SAAS,CAAC,EAAE,CAAC;AAoEtH,MAAM,CAAC,MAAM,cAAc,GAAG,CAAC,GAAe,EAAY,EAAE;IAKxD,MAAM,KAAK,GAAG,mBAAmB,CAAC,MAAM,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC,GAAG,CAAC,OAAO,IAAI,EAAE,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC;IAC/F,MAAM,OAAO,GAAG,IAAI,GAAG,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC,GAAG,CAAC,WAAW,IAAI,EAAE,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC;IAC5H,OAAO;QACH,KAAK;QACL,IAAI;QACJ,GAAG,CAAC,GAAG,CAAC,IAAI,KAAK,KAAK,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC;QACzC,WAAW;QACX,gBAAgB;QAChB,QAAQ;QACR,GAAG,CAAC,KAAK,CAAC,SAAS;QACnB,GAAG,CAAC,GAAG,CAAC,MAAM,IAAI,EAAE,CAAC,CAAC,OAAO,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC,SAAS,EAAE,KAAK,CAAC,CAAC;QAC5D,WAAW;QACX,GAAG,CAAC,KAAK,CAAC,OAAO;QACjB,GAAG,CAAC,GAAG,CAAC,KAAK,KAAK,KAAK,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,iBAAiB,EAAE,WAAW,CAAC,CAAC;QAChE,YAAY;QACZ,mCAAmC;QACnC,GAAG,CAAC,GAAG,CAAC,GAAG,IAAI,EAAE,CAAC,CAAC,OAAO,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;QACzD,WAAW;QACX,cAAc;QACd,WAAW;QACX,YAAY;QAGZ,GAAG,CAAC,GAAG,CAAC,IAAI,KAAK,KAAK,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,UAAU,EAAE,GAAG,CAAC,MAAM,IAAI,oBAAoB,EAAE,eAAe,EAAE,mBAAmB,CAAC,CAAC;QACrH,GAAG,oBAAoB,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,aAAa,GAAG,EAAE,CAAC;QACxD,GAAG,CAAC,GAAG,CAAC,OAAO,IAAI,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;QAC7D,GAAG,CAAC,GAAG,CAAC,KAAK,IAAI,EAAE,CAAC,CAAC,OAAO,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;QACpD,GAAG,CAAC,GAAG,CAAC,SAAS,KAAK,SAAS,IAAI,GAAG,CAAC,YAAY,KAAK,KAAK,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,aAAa,eAAe,CAAC,GAAG,CAAC,SAAS,CAAC,IAAI,UAAU,EAAE,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;QACzI,IAAI;QACJ,GAAG,GAAG,CAAC,KAAK,CAAC,eAAe,QAAQ;QAKpC,IAAI;QACJ,GAAG,GAAG,CAAC,KAAK,CAAC,aAAa,WAAW;QACrC,IAAI;QACJ,GAAG,GAAG,CAAC,KAAK,CAAC,YAAY,kBAAkB;QAC3C,GAAG,CAAC,GAAG,CAAC,MAAM,IAAI,EAAE,CAAC,CAAC,OAAO,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC;QACvD,IAAI;QACJ,gBAAgB,GAAG,CAAC,KAAK,CAAC,SAAS,EAAE;QACrC,IAAI;QACJ,iBAAiB,GAAG,CAAC,KAAK,EAAE;QAC5B,IAAI;QACJ,sBAAsB,GAAG,CAAC,SAAS,EAAE;QACrC,GAAG,CAAC,GAAG,CAAC,eAAe,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,4BAA4B,GAAG,CAAC,eAAe,EAAE,CAAC,CAAC;QACvG,GAAG,CAAC,GAAG,CAAC,OAAO,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,mBAAmB,GAAG,CAAC,OAAO,EAAE,CAAC,CAAC;QAC9E,GAAG,CAAC,GAAG,CAAC,aAAa,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,0BAA0B,GAAG,CAAC,aAAa,EAAE,CAAC,CAAC;QACjG,GAAG,CAAC,GAAG,CAAC,UAAU,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,2BAA2B,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,UAAU,EAAE,MAAM,CAAC,CAAC,QAAQ,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC;QACpI,GAAG,KAAK,CAAC,OAAO,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC,IAAI,EAAE,GAAG,KAAK,CAAC,GAAG,IAAI,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,aAAa,CAAC,CAAC,CAAC,KAAK,EAAE,CAAC,CAAC;QACvG,GAAG,CAAC,GAAG,CAAC,GAAG,IAAI,EAAE,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,IAAI,EAAE,KAAK,CAAC,EAAE,EAAE,CAAC,CAAC,IAAI,EAAE,GAAG,IAAI,IAAI,KAAK,EAAE,CAAC,CAAC;QACzE,GAAG,CAAC,KAAK;KACZ,CAAC;AACN,CAAC,CAAC;AAIF,MAAM,CAAC,MAAM,iBAAiB,GAAG,CAAC,GAAe,EAAU,EAAE,CAAC,CAAC,QAAQ,EAAE,GAAG,cAAc,CAAC,GAAG,CAAC,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC"}
|
package/package.json
CHANGED
|
@@ -1,6 +1,6 @@
|
|
|
1
1
|
{
|
|
2
2
|
"name": "@intentic/sandbox-run",
|
|
3
|
-
"version": "1.
|
|
3
|
+
"version": "1.232.0",
|
|
4
4
|
"description": "The sandbox container's run contract, names, capability posture, env allowlist, runtime directives, and the docker-run emitter every creation path composes from",
|
|
5
5
|
"license": "MIT",
|
|
6
6
|
"type": "module",
|
|
@@ -53,7 +53,7 @@
|
|
|
53
53
|
},
|
|
54
54
|
"dependencies": {
|
|
55
55
|
"tslib": "2.8.1",
|
|
56
|
-
"@intentic/constants": "1.
|
|
56
|
+
"@intentic/constants": "1.232.0"
|
|
57
57
|
},
|
|
58
58
|
"devDependencies": {
|
|
59
59
|
"@types/node": "24.13.2",
|