@intentic/sandbox-run 1.313.0 → 1.315.0
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/README.md +2 -0
- package/dist/fly.d.ts +1 -43
- package/dist/fly.d.ts.map +1 -1
- package/dist/fly.js +0 -24
- package/dist/fly.js.map +1 -1
- package/package.json +2 -2
package/README.md
CHANGED
|
@@ -25,6 +25,8 @@ flowchart LR
|
|
|
25
25
|
- `DATA_MOUNTS` names where a sandbox's stored data lives in its container and the state planner's flag for each; the
|
|
26
26
|
update pre-flight in `ic` mounts exactly these, read-only, and its copy is held to `golden/data-mounts.json`.
|
|
27
27
|
- `./quote` holds the shell, SQL and env-file quoters the daemon, providers and CLI share.
|
|
28
|
+
- `flyMachineConfig` declares no Fly service or check: a hosted machine is reached only down the tunnel its daemon
|
|
29
|
+
dials to the edge, like every other sandbox, so nothing on Fly routes to it.
|
|
28
30
|
|
|
29
31
|
## Key files
|
|
30
32
|
|
package/dist/fly.d.ts
CHANGED
|
@@ -1,4 +1,4 @@
|
|
|
1
|
-
import {
|
|
1
|
+
import type { HostedShape } from "@intentic/constants";
|
|
2
2
|
export declare const FLY_VOLUME_PATH = "/data";
|
|
3
3
|
export declare const FLY_VOLUME_LAYOUT: {
|
|
4
4
|
readonly workspace: "/data/work";
|
|
@@ -13,41 +13,6 @@ export interface FlyMachineRun {
|
|
|
13
13
|
readonly guest: Omit<HostedShape, "volumeGb">;
|
|
14
14
|
readonly volumeId: string;
|
|
15
15
|
readonly env?: readonly (readonly [string, string])[];
|
|
16
|
-
readonly frontDoor?: {
|
|
17
|
-
readonly hostname: string;
|
|
18
|
-
};
|
|
19
|
-
}
|
|
20
|
-
export interface FlyMachineService {
|
|
21
|
-
readonly protocol: "tcp";
|
|
22
|
-
readonly internal_port: number;
|
|
23
|
-
readonly autostart: boolean;
|
|
24
|
-
readonly autostop: "off" | "stop" | "suspend";
|
|
25
|
-
readonly concurrency: {
|
|
26
|
-
readonly type: "connections" | "requests";
|
|
27
|
-
readonly soft_limit: number;
|
|
28
|
-
readonly hard_limit: number;
|
|
29
|
-
};
|
|
30
|
-
readonly ports: readonly {
|
|
31
|
-
readonly port: number;
|
|
32
|
-
readonly handlers: readonly ("tls" | "http")[];
|
|
33
|
-
readonly force_https?: boolean;
|
|
34
|
-
readonly tls_options?: {
|
|
35
|
-
readonly alpn: readonly string[];
|
|
36
|
-
};
|
|
37
|
-
}[];
|
|
38
|
-
}
|
|
39
|
-
export interface FlyMachineCheck {
|
|
40
|
-
readonly type: "http";
|
|
41
|
-
readonly port: number;
|
|
42
|
-
readonly method: "GET";
|
|
43
|
-
readonly path: string;
|
|
44
|
-
readonly interval: string;
|
|
45
|
-
readonly timeout: string;
|
|
46
|
-
readonly grace_period: string;
|
|
47
|
-
readonly headers: readonly {
|
|
48
|
-
readonly name: string;
|
|
49
|
-
readonly values: readonly string[];
|
|
50
|
-
}[];
|
|
51
16
|
}
|
|
52
17
|
export interface FlyMachineFile {
|
|
53
18
|
readonly guest_path: string;
|
|
@@ -78,14 +43,7 @@ export interface FlyMachineConfig {
|
|
|
78
43
|
};
|
|
79
44
|
readonly files?: readonly FlyMachineFile[];
|
|
80
45
|
readonly metadata?: Record<string, string>;
|
|
81
|
-
readonly services?: readonly FlyMachineService[];
|
|
82
|
-
readonly checks?: Readonly<Record<string, FlyMachineCheck>>;
|
|
83
46
|
}
|
|
84
|
-
export declare const FRONT_DOOR_CONCURRENCY: {
|
|
85
|
-
readonly type: "connections";
|
|
86
|
-
readonly soft_limit: 1000;
|
|
87
|
-
readonly hard_limit: 2000;
|
|
88
|
-
};
|
|
89
47
|
export declare const flyMachineConfig: (run: FlyMachineRun) => FlyMachineConfig;
|
|
90
48
|
export interface FlyBuildRun {
|
|
91
49
|
readonly image: string;
|
package/dist/fly.d.ts.map
CHANGED
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"fly.d.ts","sourceRoot":"","sources":["../src/fly.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,
|
|
1
|
+
{"version":3,"file":"fly.d.ts","sourceRoot":"","sources":["../src/fly.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,qBAAqB,CAAC;AASvD,eAAO,MAAM,eAAe,UAAU,CAAC;AACvC,eAAO,MAAM,iBAAiB;aAC1B,SAAS;aACT,OAAO;aACP,MAAM;CACA,CAAC;AAEX,MAAM,WAAW,aAAa;IAE1B,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IAEvB,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAE3B,QAAQ,CAAC,eAAe,CAAC,EAAE,MAAM,CAAC;IAGlC,QAAQ,CAAC,KAAK,EAAE,IAAI,CAAC,WAAW,EAAE,UAAU,CAAC,CAAC;IAE9C,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAE1B,QAAQ,CAAC,GAAG,CAAC,EAAE,SAAS,CAAC,SAAS,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,EAAE,CAAC;CACzD;AAGD,MAAM,WAAW,cAAc;IAC3B,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;CAC9B;AAGD,MAAM,WAAW,gBAAgB;IAC7B,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,KAAK,EAAE;QAAE,QAAQ,CAAC,QAAQ,EAAE,QAAQ,GAAG,aAAa,CAAC;QAAC,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;QAAC,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAA;KAAE,CAAC;IACnH,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IACrC,QAAQ,CAAC,MAAM,EAAE,SAAS;QAAE,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;QAAC,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAA;KAAE,EAAE,CAAC;IAE/E,QAAQ,CAAC,OAAO,EAAE;QAAE,QAAQ,CAAC,MAAM,EAAE,YAAY,CAAC;QAAC,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAA;KAAE,GAAG;QAAE,QAAQ,CAAC,MAAM,EAAE,IAAI,CAAA;KAAE,CAAC;IAE9G,QAAQ,CAAC,YAAY,EAAE,KAAK,CAAC;IAE7B,QAAQ,CAAC,IAAI,CAAC,EAAE;QAAE,QAAQ,CAAC,IAAI,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;QAAC,QAAQ,CAAC,UAAU,CAAC,EAAE,SAAS,MAAM,EAAE,CAAA;KAAE,CAAC;IAC/F,QAAQ,CAAC,KAAK,CAAC,EAAE,SAAS,cAAc,EAAE,CAAC;IAE3C,QAAQ,CAAC,QAAQ,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;CAC9C;AAED,eAAO,MAAM,gBAAgB,QAAS,aAAa,KAAG,gBAepD,CAAC;AAIH,MAAM,WAAW,WAAW;IAExB,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IAEvB,QAAQ,CAAC,KAAK,EAAE,IAAI,CAAC,WAAW,EAAE,UAAU,CAAC,CAAC;IAE9C,QAAQ,CAAC,KAAK,EAAE,SAAS;QAAE,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;QAAC,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAA;KAAE,EAAE,CAAC;IAE/E,QAAQ,CAAC,UAAU,EAAE,SAAS,MAAM,EAAE,CAAC;IAEvC,QAAQ,CAAC,GAAG,CAAC,EAAE,SAAS,CAAC,SAAS,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,EAAE,CAAC;CACzD;AAED,eAAO,MAAM,qBAAqB,QAAS,WAAW,KAAG,gBASvD,CAAC"}
|
package/dist/fly.js
CHANGED
|
@@ -1,32 +1,9 @@
|
|
|
1
|
-
import { PREVIEW_PORT } from "@intentic/constants";
|
|
2
1
|
export const FLY_VOLUME_PATH = "/data";
|
|
3
2
|
export const FLY_VOLUME_LAYOUT = {
|
|
4
3
|
workspace: `${FLY_VOLUME_PATH}/work`,
|
|
5
4
|
history: `${FLY_VOLUME_PATH}/history`,
|
|
6
5
|
docker: `${FLY_VOLUME_PATH}/docker`,
|
|
7
6
|
};
|
|
8
|
-
export const FRONT_DOOR_CONCURRENCY = { type: "connections", soft_limit: 1000, hard_limit: 2000 };
|
|
9
|
-
const frontDoorService = () => ({
|
|
10
|
-
protocol: "tcp",
|
|
11
|
-
internal_port: PREVIEW_PORT,
|
|
12
|
-
autostart: false,
|
|
13
|
-
autostop: "off",
|
|
14
|
-
concurrency: FRONT_DOOR_CONCURRENCY,
|
|
15
|
-
ports: [
|
|
16
|
-
{ port: 443, handlers: ["tls", "http"], tls_options: { alpn: ["h2", "http/1.1"] } },
|
|
17
|
-
{ port: 80, handlers: ["http"], force_https: true },
|
|
18
|
-
],
|
|
19
|
-
});
|
|
20
|
-
const frontDoorCheck = (hostname) => ({
|
|
21
|
-
type: "http",
|
|
22
|
-
port: PREVIEW_PORT,
|
|
23
|
-
method: "GET",
|
|
24
|
-
path: "/health",
|
|
25
|
-
interval: "15s",
|
|
26
|
-
timeout: "5s",
|
|
27
|
-
grace_period: "10s",
|
|
28
|
-
headers: [{ name: "Host", values: [hostname] }],
|
|
29
|
-
});
|
|
30
7
|
export const flyMachineConfig = (run) => ({
|
|
31
8
|
image: run.image,
|
|
32
9
|
guest: { cpu_kind: run.guest.cpuKind, cpus: run.guest.cpus, memory_mb: run.guest.memoryMb },
|
|
@@ -41,7 +18,6 @@ export const flyMachineConfig = (run) => ({
|
|
|
41
18
|
mounts: [{ volume: run.volumeId, path: FLY_VOLUME_PATH }],
|
|
42
19
|
restart: { policy: "on-failure", max_retries: 3 },
|
|
43
20
|
auto_destroy: false,
|
|
44
|
-
...(run.frontDoor === undefined ? {} : { services: [frontDoorService()], checks: { "front-door": frontDoorCheck(run.frontDoor.hostname) } }),
|
|
45
21
|
});
|
|
46
22
|
export const flyBuildMachineConfig = (run) => ({
|
|
47
23
|
image: run.image,
|
package/dist/fly.js.map
CHANGED
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"fly.js","sourceRoot":"","sources":["../src/fly.ts"],"names":[],"mappings":"
|
|
1
|
+
{"version":3,"file":"fly.js","sourceRoot":"","sources":["../src/fly.ts"],"names":[],"mappings":"AASA,MAAM,CAAC,MAAM,eAAe,GAAG,OAAO,CAAC;AACvC,MAAM,CAAC,MAAM,iBAAiB,GAAG;IAC7B,SAAS,EAAE,GAAG,eAAe,OAAO;IACpC,OAAO,EAAE,GAAG,eAAe,UAAU;IACrC,MAAM,EAAE,GAAG,eAAe,SAAS;CAC7B,CAAC;AA0CX,MAAM,CAAC,MAAM,gBAAgB,GAAG,CAAC,GAAkB,EAAoB,EAAE,CAAC,CAAC;IACvE,KAAK,EAAE,GAAG,CAAC,KAAK;IAChB,KAAK,EAAE,EAAE,QAAQ,EAAE,GAAG,CAAC,KAAK,CAAC,OAAO,EAAE,IAAI,EAAE,GAAG,CAAC,KAAK,CAAC,IAAI,EAAE,SAAS,EAAE,GAAG,CAAC,KAAK,CAAC,QAAQ,EAAE;IAC3F,GAAG,EAAE,MAAM,CAAC,WAAW,CAAC;QACpB,CAAC,cAAc,EAAE,GAAG,CAAC,IAAI,CAAC;QAC1B,CAAC,eAAe,EAAE,GAAG,CAAC,KAAK,CAAC;QAC5B,CAAC,oBAAoB,EAAE,GAAG,CAAC,SAAS,CAAC;QACrC,GAAG,CAAC,GAAG,CAAC,eAAe,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,0BAA0B,EAAE,GAAG,CAAC,eAAe,CAAU,CAAC,CAAC;QAE1G,CAAC,YAAY,EAAE,GAAG,CAAC;QACnB,GAAG,CAAC,GAAG,CAAC,GAAG,IAAI,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,KAAK,CAAC,EAAE,EAAE,CAAC,KAAK,KAAK,EAAE,CAAC;KACzD,CAAC;IACF,MAAM,EAAE,CAAC,EAAE,MAAM,EAAE,GAAG,CAAC,QAAQ,EAAE,IAAI,EAAE,eAAe,EAAE,CAAC;IACzD,OAAO,EAAE,EAAE,MAAM,EAAE,YAAY,EAAE,WAAW,EAAE,CAAC,EAAE;IACjD,YAAY,EAAE,KAAK;CACtB,CAAC,CAAC;AAiBH,MAAM,CAAC,MAAM,qBAAqB,GAAG,CAAC,GAAgB,EAAoB,EAAE,CAAC,CAAC;IAC1E,KAAK,EAAE,GAAG,CAAC,KAAK;IAChB,KAAK,EAAE,EAAE,QAAQ,EAAE,GAAG,CAAC,KAAK,CAAC,OAAO,EAAE,IAAI,EAAE,GAAG,CAAC,KAAK,CAAC,IAAI,EAAE,SAAS,EAAE,GAAG,CAAC,KAAK,CAAC,QAAQ,EAAE;IAC3F,GAAG,EAAE,MAAM,CAAC,WAAW,CAAC,CAAC,GAAG,CAAC,GAAG,IAAI,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,KAAK,CAAC,EAAE,EAAE,CAAC,KAAK,KAAK,EAAE,CAAC,CAAC;IAC5E,MAAM,EAAE,EAAE;IACV,OAAO,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE;IACzB,YAAY,EAAE,KAAK;IACnB,IAAI,EAAE,EAAE,UAAU,EAAE,CAAC,GAAG,GAAG,CAAC,UAAU,CAAC,EAAE;IACzC,KAAK,EAAE,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,EAAE,OAAO,EAAE,EAAE,EAAE,CAAC,CAAC,EAAE,UAAU,EAAE,IAAI,EAAE,SAAS,EAAE,MAAM,CAAC,IAAI,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC,QAAQ,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC;CAClI,CAAC,CAAC"}
|
package/package.json
CHANGED
|
@@ -1,6 +1,6 @@
|
|
|
1
1
|
{
|
|
2
2
|
"name": "@intentic/sandbox-run",
|
|
3
|
-
"version": "1.
|
|
3
|
+
"version": "1.315.0",
|
|
4
4
|
"description": "The sandbox container's run contract, names, capability posture, env allowlist, runtime directives, and the docker-run emitter every creation path composes from",
|
|
5
5
|
"license": "MIT",
|
|
6
6
|
"type": "module",
|
|
@@ -52,7 +52,7 @@
|
|
|
52
52
|
}
|
|
53
53
|
},
|
|
54
54
|
"dependencies": {
|
|
55
|
-
"@intentic/constants": "1.
|
|
55
|
+
"@intentic/constants": "1.315.0",
|
|
56
56
|
"tslib": "2.8.1"
|
|
57
57
|
},
|
|
58
58
|
"devDependencies": {
|