@layerzerolabs/vm-tooling 0.2.37 → 0.2.38

package/dist/{I4UV4L75.js → 7CMHG46M.js}

@@ -1,6 +1,6 @@
 import { stringifyError } from './7XVJ6B7B.js';
 import { resolveTypeVersions } from './ZO7WI2XS.js';
-import { getImageUriForTool, getVolumeName } from './J2675KOZ.js';
+import { getImageUriForTool, getVolumeName } from './CPBLM36K.js';
 import { findWorkspaceRoot } from './WSGRZJVU.js';
 import { findToolByName } from './KWRJPB5T.js';
 import { lockMany } from './BAPGOHFS.js';
@@ -189,5 +189,5 @@ async function executeToolCommand(context, toolName, args, { cwd, volumes: userV
 __name(executeToolCommand, "executeToolCommand");
 
 export { executeToolCommand };
-//# sourceMappingURL=I4UV4L75.js.map
-//# sourceMappingURL=I4UV4L75.js.map
+//# sourceMappingURL=7CMHG46M.js.map
+//# sourceMappingURL=7CMHG46M.js.map

package/dist/{I4UV4L75.js.map → 7CMHG46M.js.map}

@@ -1 +1 @@
-{"version":3,"sources":["../src/core/tool-executor.ts"],"names":["getHostUserIds","userInfo","os","uid","gid","undefined","$","verbose","stdio","process","stderr","mergeVolumes","defaultVolumes","userVolumes","uniqBy","volume","containerPath","resolveVolumePaths","volumes","workspaceRoot","map","type","hostPath","path","resolve","replace","homedir","ensureDockerImage","imageUri","output","nothrow","exitCode","console","info","error","Error","stringifyError","join","executeToolCommand","context","toolName","args","cwd","customEntrypoint","entrypoint","env","customEnvVars","script","publish","versions","tool","findToolByName","length","name","overrides","filter","uv","some","dv","resolvedVersion","resolveTypeVersions","getSecondaryVersion","secondaryVersion","satisfies","warn","getImageUriForTool","findWorkspaceRoot","relativePath","relative","trim","defaultEnv","hasDockerSocketMount","v","dockerSocketEnv","value","envArgs","flatMap","hostUserIds","userIdEnvArgs","finalArgs","dockerArgs","privileged","getVolumeName","lockMany","locked","label","time","result","timeEnd"],"mappings":";;;;;;;;;;;;;;;AAAA,cAAA,EAAA;AAqBA,IAAMA,iCAAiB,MAAA,CAAA,MAAA;AAEnB,EAAA,MAAMC,QAAAA,GAAWC,GAAGD,QAAAA,EAAQ;AAC5B,EAAA,IAAIA,QAAAA,CAASE,GAAAA,KAAQ,EAAA,IAAMF,QAAAA,CAASG,QAAQ,EAAA,EAAI;AAC5C,IAAA,OAAOC,MAAAA;AACX,EAAA;AACA,EAAA,OAAO;AAAEF,IAAAA,GAAAA,EAAKF,QAAAA,CAASE,GAAAA;AAAKC,IAAAA,GAAAA,EAAKH,QAAAA,CAASG;AAAI,GAAA;AAClD,CAAA,EAPuB,gBAAA,CAAA;AAUvBE,CAAAA,CAAEC,OAAAA,GAAU,IAAA;AACZD,CAAAA,CAAEE,KAAAA,GAAQ;AAAC,EAAA,SAAA;AAAW,EAAA,MAAA;EAAQC,OAAAA,CAAQC;;AAMtC,IAAMC,YAAAA,mBAAe,MAAA,CAAA,CACjBC,cAAAA,EACAC,WAAAA,KACkBC,MAAAA,CAAO;AAAID,EAAAA,GAAAA,WAAAA;AAAgBD,EAAAA,GAAAA;GAAiB,CAACG,MAAAA,KAAWA,MAAAA,CAAOC,aAAa,CAAA,EAH7E,cAAA,CAAA;AAWrB,IAAMC,kBAAAA,mBAAqB,MAAA,CAAA,CAACC,OAAAA,EAA0BC,aAAAA,KAClDD,OAAAA,CAAQE,IAAI,CAACL,MAAAA,KACTA,MAAAA,CAAOM,IAAAA,KAAS,MAAA,GACV;EACI,GAAGN,MAAAA;EACHO,QAAAA,EAAUC,IAAAA,CAAKC,OAAAA,CACXL,aAAAA,EACAJ,MAAAA,CAAOO,QAAAA,CAASG,QAAQ,IAAA,EAAMvB,EAAAA,CAAGwB,OAAAA,EAAO,CAAA;AAEhD,CAAA,GACAX,MAAAA,CAAAA,EAVa,oBAAA,CAAA;AAa3B,IAAMY,iBAAAA,iCAA2BC,QAAAA,KAAAA;AAC7B,EAAA,IAAIC,MAAAA;AAEJ,EAAA,IAAI;AAOAA,IAAAA,MAAAA,GAAS,MAAMvB,CAAAA,CAAAA,sCAAAA,EAA0CsB,QAAAA,CAAAA,CAAAA,CAAWE,OAAAA,EAAO;AAC3E,IAAA,IAAI,CAACD,OAAOE,QAAAA,EAAU;AAClBC,MAAAA,OAAAA,CAAQC,IAAAA,CAAK,CAAA,kCAAA,EAAgCL,QAAAA,CAAAA,CAAU,CAAA;AACvD,MAAA;AACJ,IAAA;AAEAI,IAAAA,OAAAA,CAAQC,IAAAA,CAAK,wCAAiCL,QAAAA,CAAAA;AAC9CC,IAAAA,MAAAA,GAAS,MAAMvB,CAAAA,CAAAA,YAAAA,EAAgBsB,QAAAA,CAAAA,CAAAA,CAAWE,OAAAA,EAAO;AACrD,EAAA,CAAA,CAAA,OAASI,KAAAA,EAAgB;AACrB,IAAA,MAAM,IAAIC,MAAM,CAAA,4BAAA,EAA+BP,QAAAA,KAAaQ,cAAAA,CAAeF,KAAAA,CAAAA,CAAAA,CAAQ,CAAA;AACvF,EAAA;AAEA,EAAA,IAAIL,OAAOE,QAAAA,EAAU;AACjB,IAAA,MAAM,IAAII,KAAAA,CACN;AACI,MAAA,6BAAA;AACA,MAAA,CAAA,WAAA,EAAcP,QAAAA,CAAAA,cAAAA,CAAAA;AACd,MAAA;AACFS,KAAAA,CAAAA,IAAAA,CAAK,IAAA,CAAA,CAAA;AAEf,EAAA;AAEAL,EAAAA,OAAAA,CAAQC,IAAAA,CAAK,CAAA,4BAAA,EAA0BL,QAAAA,CAAAA,CAAU,CAAA;AACrD,CAAA,EAjC0B,mBAAA,CAAA;AAgD1B,eAAsBU,mBAClBC,OAAAA,EACAC,QAAAA,EACAC,IAAAA,EACA,EACIC,KACAxB,OAAAA,EAASL,WAAAA,EACT8B,gBAAAA,EAAkBC,UAAAA,EAClBC,KAAKC,aAAAA,EACLC,MAAAA,EACAC,SACAC,QAAAA,GAAW,IAAE,EACa;AAE9B,EAAA,MAAMC,IAAAA,GAAOC,cAAAA,CAAeZ,OAAAA,EAASC,QAAAA,CAAAA;AAGrC,EAAA,MAAM5B,cAAAA,GAAiBsC,IAAAA,CAAKtC,cAAAA,IAAkB,EAAA;AAC9C,EAAA,MAAMM,OAAAA,GAAUP,YAAAA,CAAaC,cAAAA,EAAgBC,WAAAA,CAAAA;AAE7C,EAAA,IAAID,cAAAA,CAAewC,SAAS,CAAA,EAAG;AAC3BpB,IAAAA,OAAAA,CAAQC,KAAK,CAAA,gBAAA,EAAYrB,cAAAA,CAAewC,MAAM,CAAA,6BAAA,EAAgCF,IAAAA,CAAKG,IAAI,CAAA,CAAE,CAAA;AACzF,IAAA,IAAIxC,WAAAA,CAAYuC,SAAS,CAAA,EAAG;AACxB,MAAA,MAAME,SAAAA,GAAYzC,WAAAA,CAAY0C,MAAAA,CAAO,CAACC,EAAAA,KAClC5C,cAAAA,CAAe6C,IAAAA,CAAK,CAACC,EAAAA,KAAOA,EAAAA,CAAG1C,aAAAA,KAAkBwC,EAAAA,CAAGxC,aAAa,CAAA,CAAA;AAErE,MAAA,IAAIsC,SAAAA,CAAUF,SAAS,CAAA,EAAG;AACtBpB,QAAAA,OAAAA,CAAQC,IAAAA,CAAK,CAAA,gCAAA,EAA4BqB,SAAAA,CAAUF,MAAM,CAAA,kBAAA,CAAoB,CAAA;AACjF,MAAA;AACJ,IAAA;AACJ,EAAA;AAGA,EAAA,MAAMO,kBAAkBC,mBAAAA,CAAoBrB,OAAAA,EAASU,QAAAA,CAAAA,CAAUC,KAAKG,IAAI,CAAA;AAExE,EAAA,IAAI,CAACM,eAAAA,EAAiB;AAClB,IAAA,MAAM,IAAIxB,KAAAA,CAAM,CAAA,6BAAA,EAAgCe,IAAAA,CAAKG,IAAI,CAAA,CAAE,CAAA;AAC/D,EAAA;AAEArB,EAAAA,OAAAA,CAAQC,KAAK,CAAA,UAAA,EAAMiB,IAAAA,CAAKG,IAAI,CAAA,UAAA,EAAaM,eAAAA,CAAAA,CAAiB,CAAA;AAG1D,EAAA,IAAIT,KAAKW,mBAAAA,EAAqB;AAC1B,IAAA,IAAI;AACA,MAAA,MAAMC,gBAAAA,GAAmB,MAAMZ,IAAAA,CAAKW,mBAAAA,CAAoB;AAAEnB,QAAAA;OAAI,CAAA;AAE9D,MAAA,IAAI,CAAQqB,MAAAA,CAAAA,SAAAA,CAAUD,gBAAAA,EAAkBH,eAAAA,CAAAA,EAAkB;AACtD3B,QAAAA,OAAAA,CAAQgC,IAAAA,CACJ,CAAA,sCAAA,EAAyCF,gBAAAA,CAAAA,iCAAAA,EAAoDH,eAAAA,CAAAA,CAAAA,CAAkB,CAAA;AAEvH,MAAA;AACJ,IAAA,CAAA,CAAA,OAASzB,KAAAA,EAAO;AAEZF,MAAAA,OAAAA,CAAQgC,IAAAA,CAAK,uCAAA,EAAyC5B,cAAAA,CAAeF,KAAAA,CAAAA,CAAAA;AACzE,IAAA;AACJ,EAAA;AAGA,EAAA,MAAMN,WAAW,MAAMqC,kBAAAA,CAAmB1B,OAAAA,EAASW,IAAAA,CAAKG,MAAMM,eAAAA,CAAAA;AAC9D,EAAA,MAAMxC,aAAAA,GAAgB,MAAM+C,iBAAAA,CAAkBxB,GAAAA,CAAAA;AAC9C,EAAA,MAAMyB,YAAAA,GAAe5C,IAAAA,CAAK6C,QAAAA,CAASjD,aAAAA,EAAeuB,GAAAA,CAAAA;AAElD,EAAA,MAAMf,kBAAkBC,QAAAA,CAAAA;AAExB,EAAA,IAAIgB,UAAAA,EAAYyB,MAAAA,EAAQ;AACpBrC,IAAAA,OAAAA,CAAQC,IAAAA,CAAK,CAAA,mCAAA,EAA+BW,UAAAA,CAAAA,CAAY,CAAA;AAC5D,EAAA;AAGA,EAAA,MAAM0B,UAAAA,GAAapB,IAAAA,CAAKoB,UAAAA,IAAc,EAAA;AAItC,EAAA,MAAMC,oBAAAA,GAAuBrD,OAAAA,CAAQuC,IAAAA,CACjC,CAACe,CAAAA,KAAMA,EAAEnD,IAAAA,KAAS,MAAA,IAAUmD,CAAAA,CAAExD,aAAAA,KAAkB,sBAAA,CAAA;AAEpD,EAAA,MAAMyD,kBAAyCF,oBAAAA,GACzC;AACI,IAAA;MAAElB,IAAAA,EAAM,UAAA;MAAYqB,KAAAA,EAAOhC;AAAI,KAAA;AAC/B,IAAA;MAAEW,IAAAA,EAAM,qBAAA;MAAuBqB,KAAAA,EAAOvD;AAAc;MAExD,EAAA;AAEN,EAAA,MAAMwD,UAAU7D,MAAAA,CACZ;AAAIgC,IAAAA,GAAAA,aAAAA;AAAkB2B,IAAAA,GAAAA,eAAAA;AAAoBH,IAAAA,GAAAA;KAC1C,CAAC,EAAEjB,IAAAA,EAAI,KAAOA,IAAAA,CAAAA,CAChBuB,QAAQ,CAAC,EAAEvB,IAAAA,EAAMqB,KAAAA,EAAK,KAAO;AAAC,IAAA,IAAA;IAAM,CAAA,EAAGrB,IAAAA,IAAQqB,KAAAA,CAAAA;AAAQ,GAAA,CAAA;AAKzD,EAAA,MAAMG,cAAc7E,cAAAA,EAAAA;AACpB,EAAA,MAAM8E,gBAAgBD,WAAAA,GAChB;AAAC,IAAA,IAAA;AAAM,IAAA,CAAA,UAAA,EAAaA,YAAY1E,GAAG,CAAA,CAAA;AAAI,IAAA,IAAA;AAAM,IAAA,CAAA,UAAA,EAAa0E,YAAYzE,GAAG,CAAA;MACzE,EAAA;AAEN4B,EAAAA,OAAAA,CAAQC,KAAK,CAAA,uCAAA,EAAmC4C,WAAAA,EAAa1E,GAAAA,CAAAA,CAAAA,EAAO0E,WAAAA,EAAazE,GAAAA,CAAAA,CAAK,CAAA;AAEtF,EAAA,IAAIkE,UAAAA,CAAWlB,SAAS,CAAA,EAAG;AACvBpB,IAAAA,OAAAA,CAAQC,KACJ,CAAA,gBAAA,EAAYqC,UAAAA,CAAWlB,MAAM,CAAA,qCAAA,EAAwCF,IAAAA,CAAKG,IAAI,CAAA,CAAE,CAAA;AAExF,EAAA;AACA,EAAA,IAAIP,aAAAA,CAAcM,SAAS,CAAA,EAAG;AAC1BpB,IAAAA,OAAAA,CAAQC,IAAAA,CAAK,CAAA,gBAAA,EAAYa,aAAAA,CAAcM,MAAM,CAAA,+BAAA,CAAiC,CAAA;AAClF,EAAA;AAGA,EAAA,IAAI2B,SAAAA;AACJ,EAAA,IAAIhC,MAAAA,IAAUA,MAAAA,CAAOsB,IAAAA,EAAI,KAAO,EAAA,EAAI;AAChCrC,IAAAA,OAAAA,CAAQC,IAAAA,CAAK,CAAA,mCAAA,EAA+Bc,MAAAA,CAAAA,CAAQ,CAAA;AACpDgC,IAAAA,SAAAA,GAAY;AAAC,MAAA,MAAA;AAAQ,MAAA,IAAA;AAAMhC,MAAAA;;EAC/B,CAAA,MAAO;AACHgC,IAAAA,SAAAA,GAAYnC,eAAevC,MAAAA,GAAY;MAAC6C,IAAAA,CAAKG,IAAAA;AAASZ,MAAAA,GAAAA;AAAQA,KAAAA,GAAAA,IAAAA;AAClE,EAAA;AAGA,EAAA,MAAMuC,UAAAA,GAAa;AACf,IAAA,KAAA;AACI9B,IAAAA,GAAAA,IAAAA,CAAK+B,UAAAA,GAAa;AAAC,MAAA;QAAkB,EAAA;AACzC,IAAA,MAAA;AACGN,IAAAA,GAAAA,OAAAA;AACAG,IAAAA,GAAAA,aAAAA;AACH,IAAA,IAAA;AACA,IAAA,CAAA,EAAG3D,aAAAA,CAAAA,WAAAA,CAAAA;AACH,IAAA,IAAA;AACA,IAAA,CAAA,WAAA,EAAcgD,YAAAA,CAAAA,CAAAA;OACVnB,OAAAA,GAAU;AAAC,MAAA,IAAA;AAAMA,MAAAA,OAAAA,CAAQqB,IAAAA;QAAU,EAAA;AACpCpD,IAAAA,GAAAA,kBAAAA,CAAmBC,OAAAA,EAASC,aAAAA,CAAAA,CAAeyD,OAAAA,CAAQ,CAAC7D,MAAAA,KAAW;AAC9D,MAAA,IAAA;AACAmE,MAAAA,aAAAA,CAAcnE,MAAAA;AACjB,KAAA,CAAA;OACG6B,UAAAA,GAAa;AAAC,MAAA,cAAA;AAAgBA,MAAAA;QAAc,EAAA;AAChDhB,IAAAA,QAAAA;AACGmD,IAAAA,GAAAA;;AAGP,EAAA,MAAMlD,MAAAA,GAAS,MAAMsD,QAAAA,CACjBjE,OAAAA,CAAQ0D,OAAAA,CAAQ,CAAC7D,MAAAA,KACbA,MAAAA,CAAOM,IAAAA,KAAS,SAAA,IAAaN,MAAAA,CAAOqE,MAAAA,GAAS;IAACrE,MAAAA,CAAOsC;MAAQ,EAAE,GAEnE,YAAA;AACI,IAAA,MAAMgC,KAAAA,GAAQ,CAAA,aAAA,EAAMN,SAAAA,CAAU1C,IAAAA,CAAK,GAAA,CAAA,CAAA,CAAA;AACnCL,IAAAA,OAAAA,CAAQsD,KAAKD,KAAAA,CAAAA;AACb,IAAA,MAAME,MAAAA,GAAS,MAAMjF,CAAAA,CAAAA,OAAAA,EAAW0E,UAAAA,GAAalD,OAAAA,EAAO;AACpDE,IAAAA,OAAAA,CAAQwD,QAAQH,KAAAA,CAAAA;AAEhB,IAAA,OAAOE,MAAAA;EACX,CAAA,CAAA;AAGJ,EAAA,IAAI1D,OAAOE,QAAAA,EAAU;AACjB,IAAA,MAAM,IAAII,KAAAA,CAAM,CAAA,2CAAA,EAA8CN,MAAAA,CAAOE,QAAQ,CAAA,CAAA,CAAG,CAAA;AACpF,EAAA;AAEA,EAAA,OAAOF,MAAAA;AACX;AA5JsBS,MAAAA,CAAAA,kBAAAA,EAAAA,oBAAAA,CAAAA","file":"I4UV4L75.js","sourcesContent":["import { uniqBy } from 'es-toolkit';\nimport os from 'node:os';\nimport path from 'node:path';\nimport process from 'node:process';\nimport * as semver from 'semver';\nimport { $, type ProcessOutput } from 'zx';\n\nimport type { EnvironmentVariable, VolumeMapping } from '../config';\nimport type { ChainContext } from '../context';\nimport { findWorkspaceRoot } from '../utils';\nimport { getImageUriForTool, getVolumeName } from '../utils/docker';\nimport { stringifyError } from '../utils/error';\nimport { findToolByName } from '../utils/finder';\nimport { lockMany } from './lock';\nimport { resolveTypeVersions } from './version-resolver';\n\n/**\n * Get the current user's UID and GID for Docker container user matching.\n * This prevents permission issues when containers write to bind-mounted directories.\n * On Windows, returns undefined as UID/GID matching is not needed.\n */\nconst getHostUserIds = (): { uid: number; gid: number } | undefined => {\n    // os.userInfo() returns uid/gid on POSIX systems, -1 on Windows\n    const userInfo = os.userInfo();\n    if (userInfo.uid === -1 || userInfo.gid === -1) {\n        return undefined;\n    }\n    return { uid: userInfo.uid, gid: userInfo.gid };\n};\n\n// Configure zx to inherit stdio by default (moved from original setup)\n$.verbose = true;\n$.stdio = ['inherit', 'pipe', process.stderr];\n\n/**\n * Merge default volumes with user-specified volumes\n * User volumes take precedence when containerPath conflicts\n */\nconst mergeVolumes = (\n    defaultVolumes: readonly VolumeMapping[],\n    userVolumes: readonly VolumeMapping[],\n): VolumeMapping[] => uniqBy([...userVolumes, ...defaultVolumes], (volume) => volume.containerPath);\n\n/**\n * Resolve host paths in volumes to absolute paths\n * - Paths starting with ~ are resolved to home directory\n * - Relative paths (starting with . or no prefix) are resolved to workspace root\n * - Absolute paths are left unchanged\n */\nconst resolveVolumePaths = (volumes: VolumeMapping[], workspaceRoot: string): VolumeMapping[] =>\n    volumes.map((volume) =>\n        volume.type === 'host'\n            ? {\n                  ...volume,\n                  hostPath: path.resolve(\n                      workspaceRoot,\n                      volume.hostPath.replace(/^~/, os.homedir()),\n                  ),\n              }\n            : volume,\n    );\n\nconst ensureDockerImage = async (imageUri: string): Promise<void> => {\n    let output: ProcessOutput;\n\n    try {\n        // Check local images first.\n        //\n        // NOTE: `docker image ls <ref>` prints repository/tag in separate columns, so\n        // `stdout.includes(<full-ref>)` is not reliable. Use `inspect` instead: exitCode=0\n        // means the image exists locally.\n        // Keep output minimal to avoid dumping full inspect JSON into CI logs.\n        output = await $`docker image inspect --format {{.Id}} ${imageUri}`.nothrow();\n        if (!output.exitCode) {\n            console.info(`✅ Using cached Docker image: ${imageUri}`);\n            return;\n        }\n\n        console.info('📥 Pulling Docker image from:', imageUri);\n        output = await $`docker pull ${imageUri}`.nothrow();\n    } catch (error: unknown) {\n        throw new Error(`Failed to pull Docker image ${imageUri}: ${stringifyError(error)}`);\n    }\n\n    if (output.exitCode) {\n        throw new Error(\n            [\n                'Docker image not available:',\n                `  - Image: ${imageUri} (pull failed)`,\n                '  - Check if the image tag exists in image registry.',\n            ].join('\\n'),\n        );\n    }\n\n    console.info(`✅ Successfully pulled: ${imageUri}`);\n};\n\nexport interface ToolCommandExecutionOptions {\n    cwd: string;\n    volumes: readonly VolumeMapping[];\n    customEntrypoint?: string;\n    env: EnvironmentVariable[];\n    script?: string;\n    publish?: string;\n    versions?: Record<string, string>;\n}\n\n/**\n * Enhanced tool command execution using the new version compatibility matrix system\n */\nexport async function executeToolCommand<TImageId extends string>(\n    context: ChainContext<TImageId>,\n    toolName: string,\n    args: string[],\n    {\n        cwd,\n        volumes: userVolumes,\n        customEntrypoint: entrypoint,\n        env: customEnvVars,\n        script,\n        publish,\n        versions = {},\n    }: ToolCommandExecutionOptions,\n): Promise<ProcessOutput> {\n    const tool = findToolByName(context, toolName);\n\n    // Merge default volumes with user-specified volumes\n    const defaultVolumes = tool.defaultVolumes ?? [];\n    const volumes = mergeVolumes(defaultVolumes, userVolumes);\n\n    if (defaultVolumes.length > 0) {\n        console.info(`📦 Using ${defaultVolumes.length} default cache volume(s) for ${tool.name}`);\n        if (userVolumes.length > 0) {\n            const overrides = userVolumes.filter((uv) =>\n                defaultVolumes.some((dv) => dv.containerPath === uv.containerPath),\n            );\n            if (overrides.length > 0) {\n                console.info(`🔧 User volumes override ${overrides.length} default volume(s)`);\n            }\n        }\n    }\n\n    // Get the resolved version for the current tool.\n    const resolvedVersion = resolveTypeVersions(context, versions)[tool.name];\n\n    if (!resolvedVersion) {\n        throw new Error(`No version resolved for tool ${tool.name}`);\n    }\n\n    console.info(`🔧 ${tool.name} version: ${resolvedVersion}`);\n\n    // Check secondary version validation if available\n    if (tool.getSecondaryVersion) {\n        try {\n            const secondaryVersion = await tool.getSecondaryVersion({ cwd });\n\n            if (!semver.satisfies(secondaryVersion, resolvedVersion)) {\n                console.warn(\n                    `Warning: Local configuration version (${secondaryVersion}) differs from resolved version (${resolvedVersion})`,\n                );\n            }\n        } catch (error) {\n            // Secondary version check failed, but continue with resolved version\n            console.warn('Could not validate secondary version:', stringifyError(error));\n        }\n    }\n\n    // Use Docker image with merged volumes\n    const imageUri = await getImageUriForTool(context, tool.name, resolvedVersion);\n    const workspaceRoot = await findWorkspaceRoot(cwd);\n    const relativePath = path.relative(workspaceRoot, cwd);\n\n    await ensureDockerImage(imageUri);\n\n    if (entrypoint?.trim()) {\n        console.info(`🔧 Using custom entrypoint: ${entrypoint}`);\n    }\n\n    // Merge default env vars with custom env vars (custom takes precedence)\n    const defaultEnv = tool.defaultEnv ?? [];\n\n    // Check if Docker socket is mounted (for tools that spawn Docker containers like anchor --verifiable)\n    // If so, inject HOST_CWD and HOST_WORKSPACE_ROOT so the inner container knows the host paths\n    const hasDockerSocketMount = volumes.some(\n        (v) => v.type === 'host' && v.containerPath === '/var/run/docker.sock',\n    );\n    const dockerSocketEnv: EnvironmentVariable[] = hasDockerSocketMount\n        ? [\n              { name: 'HOST_CWD', value: cwd },\n              { name: 'HOST_WORKSPACE_ROOT', value: workspaceRoot },\n          ]\n        : [];\n\n    const envArgs = uniqBy(\n        [...customEnvVars, ...dockerSocketEnv, ...defaultEnv],\n        ({ name }) => name,\n    ).flatMap(({ name, value }) => ['-e', `${name}=${value}`]);\n\n    // Add host user UID/GID for permission matching on Linux/macOS\n    // This prevents artifacts created in containers from having root ownership\n    // Currently only used for stellar which has an entrypoint that handles UID/GID\n    const hostUserIds = getHostUserIds();\n    const userIdEnvArgs = hostUserIds\n        ? ['-e', `LOCAL_UID=${hostUserIds.uid}`, '-e', `LOCAL_GID=${hostUserIds.gid}`]\n        : [];\n\n    console.info(`👤 Running container as UID:GID ${hostUserIds?.uid}:${hostUserIds?.gid}`);\n\n    if (defaultEnv.length > 0) {\n        console.info(\n            `🌍 Using ${defaultEnv.length} default environment variable(s) for ${tool.name}`,\n        );\n    }\n    if (customEnvVars.length > 0) {\n        console.info(`🌍 Using ${customEnvVars.length} custom environment variable(s)`);\n    }\n\n    // Handle custom script execution\n    let finalArgs: string[];\n    if (script && script.trim() !== '') {\n        console.info(`📜 Executing custom script: ${script}`);\n        finalArgs = ['bash', '-c', script];\n    } else {\n        finalArgs = entrypoint === undefined ? [tool.name, ...args] : args;\n    }\n\n    // Build the Docker command with proper argument separation\n    const dockerArgs = [\n        'run',\n        ...(tool.privileged ? ['--privileged'] : []),\n        '--rm',\n        ...envArgs,\n        ...userIdEnvArgs,\n        '-v',\n        `${workspaceRoot}:/workspace`,\n        '-w',\n        `/workspace/${relativePath}`,\n        ...(publish ? ['-p', publish.trim()] : []),\n        ...resolveVolumePaths(volumes, workspaceRoot).flatMap((volume) => [\n            '-v',\n            getVolumeName(volume),\n        ]),\n        ...(entrypoint ? ['--entrypoint', entrypoint] : []),\n        imageUri,\n        ...finalArgs,\n    ];\n\n    const output = await lockMany(\n        volumes.flatMap((volume) =>\n            volume.type === 'isolate' && volume.locked ? [volume.name] : [],\n        ),\n        async () => {\n            const label = `⏱️ ${finalArgs.join(' ')}`;\n            console.time(label);\n            const result = await $`docker ${dockerArgs}`.nothrow();\n            console.timeEnd(label);\n\n            return result;\n        },\n    );\n\n    if (output.exitCode) {\n        throw new Error(`Failed to run Docker container (exit code: ${output.exitCode})`);\n    }\n\n    return output;\n}\n"]}
+{"version":3,"sources":["../src/core/tool-executor.ts"],"names":["getHostUserIds","userInfo","os","uid","gid","undefined","$","verbose","stdio","process","stderr","mergeVolumes","defaultVolumes","userVolumes","uniqBy","volume","containerPath","resolveVolumePaths","volumes","workspaceRoot","map","type","hostPath","path","resolve","replace","homedir","ensureDockerImage","imageUri","output","nothrow","exitCode","console","info","error","Error","stringifyError","join","executeToolCommand","context","toolName","args","cwd","customEntrypoint","entrypoint","env","customEnvVars","script","publish","versions","tool","findToolByName","length","name","overrides","filter","uv","some","dv","resolvedVersion","resolveTypeVersions","getSecondaryVersion","secondaryVersion","satisfies","warn","getImageUriForTool","findWorkspaceRoot","relativePath","relative","trim","defaultEnv","hasDockerSocketMount","v","dockerSocketEnv","value","envArgs","flatMap","hostUserIds","userIdEnvArgs","finalArgs","dockerArgs","privileged","getVolumeName","lockMany","locked","label","time","result","timeEnd"],"mappings":";;;;;;;;;;;;;;;AAAA,cAAA,EAAA;AAqBA,IAAMA,iCAAiB,MAAA,CAAA,MAAA;AAEnB,EAAA,MAAMC,QAAAA,GAAWC,GAAGD,QAAAA,EAAQ;AAC5B,EAAA,IAAIA,QAAAA,CAASE,GAAAA,KAAQ,EAAA,IAAMF,QAAAA,CAASG,QAAQ,EAAA,EAAI;AAC5C,IAAA,OAAOC,MAAAA;AACX,EAAA;AACA,EAAA,OAAO;AAAEF,IAAAA,GAAAA,EAAKF,QAAAA,CAASE,GAAAA;AAAKC,IAAAA,GAAAA,EAAKH,QAAAA,CAASG;AAAI,GAAA;AAClD,CAAA,EAPuB,gBAAA,CAAA;AAUvBE,CAAAA,CAAEC,OAAAA,GAAU,IAAA;AACZD,CAAAA,CAAEE,KAAAA,GAAQ;AAAC,EAAA,SAAA;AAAW,EAAA,MAAA;EAAQC,OAAAA,CAAQC;;AAMtC,IAAMC,YAAAA,mBAAe,MAAA,CAAA,CACjBC,cAAAA,EACAC,WAAAA,KACkBC,MAAAA,CAAO;AAAID,EAAAA,GAAAA,WAAAA;AAAgBD,EAAAA,GAAAA;GAAiB,CAACG,MAAAA,KAAWA,MAAAA,CAAOC,aAAa,CAAA,EAH7E,cAAA,CAAA;AAWrB,IAAMC,kBAAAA,mBAAqB,MAAA,CAAA,CAACC,OAAAA,EAA0BC,aAAAA,KAClDD,OAAAA,CAAQE,IAAI,CAACL,MAAAA,KACTA,MAAAA,CAAOM,IAAAA,KAAS,MAAA,GACV;EACI,GAAGN,MAAAA;EACHO,QAAAA,EAAUC,IAAAA,CAAKC,OAAAA,CACXL,aAAAA,EACAJ,MAAAA,CAAOO,QAAAA,CAASG,QAAQ,IAAA,EAAMvB,EAAAA,CAAGwB,OAAAA,EAAO,CAAA;AAEhD,CAAA,GACAX,MAAAA,CAAAA,EAVa,oBAAA,CAAA;AAa3B,IAAMY,iBAAAA,iCAA2BC,QAAAA,KAAAA;AAC7B,EAAA,IAAIC,MAAAA;AAEJ,EAAA,IAAI;AAOAA,IAAAA,MAAAA,GAAS,MAAMvB,CAAAA,CAAAA,sCAAAA,EAA0CsB,QAAAA,CAAAA,CAAAA,CAAWE,OAAAA,EAAO;AAC3E,IAAA,IAAI,CAACD,OAAOE,QAAAA,EAAU;AAClBC,MAAAA,OAAAA,CAAQC,IAAAA,CAAK,CAAA,kCAAA,EAAgCL,QAAAA,CAAAA,CAAU,CAAA;AACvD,MAAA;AACJ,IAAA;AAEAI,IAAAA,OAAAA,CAAQC,IAAAA,CAAK,wCAAiCL,QAAAA,CAAAA;AAC9CC,IAAAA,MAAAA,GAAS,MAAMvB,CAAAA,CAAAA,YAAAA,EAAgBsB,QAAAA,CAAAA,CAAAA,CAAWE,OAAAA,EAAO;AACrD,EAAA,CAAA,CAAA,OAASI,KAAAA,EAAgB;AACrB,IAAA,MAAM,IAAIC,MAAM,CAAA,4BAAA,EAA+BP,QAAAA,KAAaQ,cAAAA,CAAeF,KAAAA,CAAAA,CAAAA,CAAQ,CAAA;AACvF,EAAA;AAEA,EAAA,IAAIL,OAAOE,QAAAA,EAAU;AACjB,IAAA,MAAM,IAAII,KAAAA,CACN;AACI,MAAA,6BAAA;AACA,MAAA,CAAA,WAAA,EAAcP,QAAAA,CAAAA,cAAAA,CAAAA;AACd,MAAA;AACFS,KAAAA,CAAAA,IAAAA,CAAK,IAAA,CAAA,CAAA;AAEf,EAAA;AAEAL,EAAAA,OAAAA,CAAQC,IAAAA,CAAK,CAAA,4BAAA,EAA0BL,QAAAA,CAAAA,CAAU,CAAA;AACrD,CAAA,EAjC0B,mBAAA,CAAA;AAgD1B,eAAsBU,mBAClBC,OAAAA,EACAC,QAAAA,EACAC,IAAAA,EACA,EACIC,KACAxB,OAAAA,EAASL,WAAAA,EACT8B,gBAAAA,EAAkBC,UAAAA,EAClBC,KAAKC,aAAAA,EACLC,MAAAA,EACAC,SACAC,QAAAA,GAAW,IAAE,EACa;AAE9B,EAAA,MAAMC,IAAAA,GAAOC,cAAAA,CAAeZ,OAAAA,EAASC,QAAAA,CAAAA;AAGrC,EAAA,MAAM5B,cAAAA,GAAiBsC,IAAAA,CAAKtC,cAAAA,IAAkB,EAAA;AAC9C,EAAA,MAAMM,OAAAA,GAAUP,YAAAA,CAAaC,cAAAA,EAAgBC,WAAAA,CAAAA;AAE7C,EAAA,IAAID,cAAAA,CAAewC,SAAS,CAAA,EAAG;AAC3BpB,IAAAA,OAAAA,CAAQC,KAAK,CAAA,gBAAA,EAAYrB,cAAAA,CAAewC,MAAM,CAAA,6BAAA,EAAgCF,IAAAA,CAAKG,IAAI,CAAA,CAAE,CAAA;AACzF,IAAA,IAAIxC,WAAAA,CAAYuC,SAAS,CAAA,EAAG;AACxB,MAAA,MAAME,SAAAA,GAAYzC,WAAAA,CAAY0C,MAAAA,CAAO,CAACC,EAAAA,KAClC5C,cAAAA,CAAe6C,IAAAA,CAAK,CAACC,EAAAA,KAAOA,EAAAA,CAAG1C,aAAAA,KAAkBwC,EAAAA,CAAGxC,aAAa,CAAA,CAAA;AAErE,MAAA,IAAIsC,SAAAA,CAAUF,SAAS,CAAA,EAAG;AACtBpB,QAAAA,OAAAA,CAAQC,IAAAA,CAAK,CAAA,gCAAA,EAA4BqB,SAAAA,CAAUF,MAAM,CAAA,kBAAA,CAAoB,CAAA;AACjF,MAAA;AACJ,IAAA;AACJ,EAAA;AAGA,EAAA,MAAMO,kBAAkBC,mBAAAA,CAAoBrB,OAAAA,EAASU,QAAAA,CAAAA,CAAUC,KAAKG,IAAI,CAAA;AAExE,EAAA,IAAI,CAACM,eAAAA,EAAiB;AAClB,IAAA,MAAM,IAAIxB,KAAAA,CAAM,CAAA,6BAAA,EAAgCe,IAAAA,CAAKG,IAAI,CAAA,CAAE,CAAA;AAC/D,EAAA;AAEArB,EAAAA,OAAAA,CAAQC,KAAK,CAAA,UAAA,EAAMiB,IAAAA,CAAKG,IAAI,CAAA,UAAA,EAAaM,eAAAA,CAAAA,CAAiB,CAAA;AAG1D,EAAA,IAAIT,KAAKW,mBAAAA,EAAqB;AAC1B,IAAA,IAAI;AACA,MAAA,MAAMC,gBAAAA,GAAmB,MAAMZ,IAAAA,CAAKW,mBAAAA,CAAoB;AAAEnB,QAAAA;OAAI,CAAA;AAE9D,MAAA,IAAI,CAAQqB,MAAAA,CAAAA,SAAAA,CAAUD,gBAAAA,EAAkBH,eAAAA,CAAAA,EAAkB;AACtD3B,QAAAA,OAAAA,CAAQgC,IAAAA,CACJ,CAAA,sCAAA,EAAyCF,gBAAAA,CAAAA,iCAAAA,EAAoDH,eAAAA,CAAAA,CAAAA,CAAkB,CAAA;AAEvH,MAAA;AACJ,IAAA,CAAA,CAAA,OAASzB,KAAAA,EAAO;AAEZF,MAAAA,OAAAA,CAAQgC,IAAAA,CAAK,uCAAA,EAAyC5B,cAAAA,CAAeF,KAAAA,CAAAA,CAAAA;AACzE,IAAA;AACJ,EAAA;AAGA,EAAA,MAAMN,WAAW,MAAMqC,kBAAAA,CAAmB1B,OAAAA,EAASW,IAAAA,CAAKG,MAAMM,eAAAA,CAAAA;AAC9D,EAAA,MAAMxC,aAAAA,GAAgB,MAAM+C,iBAAAA,CAAkBxB,GAAAA,CAAAA;AAC9C,EAAA,MAAMyB,YAAAA,GAAe5C,IAAAA,CAAK6C,QAAAA,CAASjD,aAAAA,EAAeuB,GAAAA,CAAAA;AAElD,EAAA,MAAMf,kBAAkBC,QAAAA,CAAAA;AAExB,EAAA,IAAIgB,UAAAA,EAAYyB,MAAAA,EAAQ;AACpBrC,IAAAA,OAAAA,CAAQC,IAAAA,CAAK,CAAA,mCAAA,EAA+BW,UAAAA,CAAAA,CAAY,CAAA;AAC5D,EAAA;AAGA,EAAA,MAAM0B,UAAAA,GAAapB,IAAAA,CAAKoB,UAAAA,IAAc,EAAA;AAItC,EAAA,MAAMC,oBAAAA,GAAuBrD,OAAAA,CAAQuC,IAAAA,CACjC,CAACe,CAAAA,KAAMA,EAAEnD,IAAAA,KAAS,MAAA,IAAUmD,CAAAA,CAAExD,aAAAA,KAAkB,sBAAA,CAAA;AAEpD,EAAA,MAAMyD,kBAAyCF,oBAAAA,GACzC;AACI,IAAA;MAAElB,IAAAA,EAAM,UAAA;MAAYqB,KAAAA,EAAOhC;AAAI,KAAA;AAC/B,IAAA;MAAEW,IAAAA,EAAM,qBAAA;MAAuBqB,KAAAA,EAAOvD;AAAc;MAExD,EAAA;AAEN,EAAA,MAAMwD,UAAU7D,MAAAA,CACZ;AAAIgC,IAAAA,GAAAA,aAAAA;AAAkB2B,IAAAA,GAAAA,eAAAA;AAAoBH,IAAAA,GAAAA;KAC1C,CAAC,EAAEjB,IAAAA,EAAI,KAAOA,IAAAA,CAAAA,CAChBuB,QAAQ,CAAC,EAAEvB,IAAAA,EAAMqB,KAAAA,EAAK,KAAO;AAAC,IAAA,IAAA;IAAM,CAAA,EAAGrB,IAAAA,IAAQqB,KAAAA,CAAAA;AAAQ,GAAA,CAAA;AAKzD,EAAA,MAAMG,cAAc7E,cAAAA,EAAAA;AACpB,EAAA,MAAM8E,gBAAgBD,WAAAA,GAChB;AAAC,IAAA,IAAA;AAAM,IAAA,CAAA,UAAA,EAAaA,YAAY1E,GAAG,CAAA,CAAA;AAAI,IAAA,IAAA;AAAM,IAAA,CAAA,UAAA,EAAa0E,YAAYzE,GAAG,CAAA;MACzE,EAAA;AAEN4B,EAAAA,OAAAA,CAAQC,KAAK,CAAA,uCAAA,EAAmC4C,WAAAA,EAAa1E,GAAAA,CAAAA,CAAAA,EAAO0E,WAAAA,EAAazE,GAAAA,CAAAA,CAAK,CAAA;AAEtF,EAAA,IAAIkE,UAAAA,CAAWlB,SAAS,CAAA,EAAG;AACvBpB,IAAAA,OAAAA,CAAQC,KACJ,CAAA,gBAAA,EAAYqC,UAAAA,CAAWlB,MAAM,CAAA,qCAAA,EAAwCF,IAAAA,CAAKG,IAAI,CAAA,CAAE,CAAA;AAExF,EAAA;AACA,EAAA,IAAIP,aAAAA,CAAcM,SAAS,CAAA,EAAG;AAC1BpB,IAAAA,OAAAA,CAAQC,IAAAA,CAAK,CAAA,gBAAA,EAAYa,aAAAA,CAAcM,MAAM,CAAA,+BAAA,CAAiC,CAAA;AAClF,EAAA;AAGA,EAAA,IAAI2B,SAAAA;AACJ,EAAA,IAAIhC,MAAAA,IAAUA,MAAAA,CAAOsB,IAAAA,EAAI,KAAO,EAAA,EAAI;AAChCrC,IAAAA,OAAAA,CAAQC,IAAAA,CAAK,CAAA,mCAAA,EAA+Bc,MAAAA,CAAAA,CAAQ,CAAA;AACpDgC,IAAAA,SAAAA,GAAY;AAAC,MAAA,MAAA;AAAQ,MAAA,IAAA;AAAMhC,MAAAA;;EAC/B,CAAA,MAAO;AACHgC,IAAAA,SAAAA,GAAYnC,eAAevC,MAAAA,GAAY;MAAC6C,IAAAA,CAAKG,IAAAA;AAASZ,MAAAA,GAAAA;AAAQA,KAAAA,GAAAA,IAAAA;AAClE,EAAA;AAGA,EAAA,MAAMuC,UAAAA,GAAa;AACf,IAAA,KAAA;AACI9B,IAAAA,GAAAA,IAAAA,CAAK+B,UAAAA,GAAa;AAAC,MAAA;QAAkB,EAAA;AACzC,IAAA,MAAA;AACGN,IAAAA,GAAAA,OAAAA;AACAG,IAAAA,GAAAA,aAAAA;AACH,IAAA,IAAA;AACA,IAAA,CAAA,EAAG3D,aAAAA,CAAAA,WAAAA,CAAAA;AACH,IAAA,IAAA;AACA,IAAA,CAAA,WAAA,EAAcgD,YAAAA,CAAAA,CAAAA;OACVnB,OAAAA,GAAU;AAAC,MAAA,IAAA;AAAMA,MAAAA,OAAAA,CAAQqB,IAAAA;QAAU,EAAA;AACpCpD,IAAAA,GAAAA,kBAAAA,CAAmBC,OAAAA,EAASC,aAAAA,CAAAA,CAAeyD,OAAAA,CAAQ,CAAC7D,MAAAA,KAAW;AAC9D,MAAA,IAAA;AACAmE,MAAAA,aAAAA,CAAcnE,MAAAA;AACjB,KAAA,CAAA;OACG6B,UAAAA,GAAa;AAAC,MAAA,cAAA;AAAgBA,MAAAA;QAAc,EAAA;AAChDhB,IAAAA,QAAAA;AACGmD,IAAAA,GAAAA;;AAGP,EAAA,MAAMlD,MAAAA,GAAS,MAAMsD,QAAAA,CACjBjE,OAAAA,CAAQ0D,OAAAA,CAAQ,CAAC7D,MAAAA,KACbA,MAAAA,CAAOM,IAAAA,KAAS,SAAA,IAAaN,MAAAA,CAAOqE,MAAAA,GAAS;IAACrE,MAAAA,CAAOsC;MAAQ,EAAE,GAEnE,YAAA;AACI,IAAA,MAAMgC,KAAAA,GAAQ,CAAA,aAAA,EAAMN,SAAAA,CAAU1C,IAAAA,CAAK,GAAA,CAAA,CAAA,CAAA;AACnCL,IAAAA,OAAAA,CAAQsD,KAAKD,KAAAA,CAAAA;AACb,IAAA,MAAME,MAAAA,GAAS,MAAMjF,CAAAA,CAAAA,OAAAA,EAAW0E,UAAAA,GAAalD,OAAAA,EAAO;AACpDE,IAAAA,OAAAA,CAAQwD,QAAQH,KAAAA,CAAAA;AAEhB,IAAA,OAAOE,MAAAA;EACX,CAAA,CAAA;AAGJ,EAAA,IAAI1D,OAAOE,QAAAA,EAAU;AACjB,IAAA,MAAM,IAAII,KAAAA,CAAM,CAAA,2CAAA,EAA8CN,MAAAA,CAAOE,QAAQ,CAAA,CAAA,CAAG,CAAA;AACpF,EAAA;AAEA,EAAA,OAAOF,MAAAA;AACX;AA5JsBS,MAAAA,CAAAA,kBAAAA,EAAAA,oBAAAA,CAAAA","file":"7CMHG46M.js","sourcesContent":["import { uniqBy } from 'es-toolkit';\nimport os from 'node:os';\nimport path from 'node:path';\nimport process from 'node:process';\nimport * as semver from 'semver';\nimport { $, type ProcessOutput } from 'zx';\n\nimport type { EnvironmentVariable, VolumeMapping } from '../config';\nimport type { ChainContext } from '../context';\nimport { findWorkspaceRoot } from '../utils';\nimport { getImageUriForTool, getVolumeName } from '../utils/docker';\nimport { stringifyError } from '../utils/error';\nimport { findToolByName } from '../utils/finder';\nimport { lockMany } from './lock';\nimport { resolveTypeVersions } from './version-resolver';\n\n/**\n * Get the current user's UID and GID for Docker container user matching.\n * This prevents permission issues when containers write to bind-mounted directories.\n * On Windows, returns undefined as UID/GID matching is not needed.\n */\nconst getHostUserIds = (): { uid: number; gid: number } | undefined => {\n    // os.userInfo() returns uid/gid on POSIX systems, -1 on Windows\n    const userInfo = os.userInfo();\n    if (userInfo.uid === -1 || userInfo.gid === -1) {\n        return undefined;\n    }\n    return { uid: userInfo.uid, gid: userInfo.gid };\n};\n\n// Configure zx to inherit stdio by default (moved from original setup)\n$.verbose = true;\n$.stdio = ['inherit', 'pipe', process.stderr];\n\n/**\n * Merge default volumes with user-specified volumes\n * User volumes take precedence when containerPath conflicts\n */\nconst mergeVolumes = (\n    defaultVolumes: readonly VolumeMapping[],\n    userVolumes: readonly VolumeMapping[],\n): VolumeMapping[] => uniqBy([...userVolumes, ...defaultVolumes], (volume) => volume.containerPath);\n\n/**\n * Resolve host paths in volumes to absolute paths\n * - Paths starting with ~ are resolved to home directory\n * - Relative paths (starting with . or no prefix) are resolved to workspace root\n * - Absolute paths are left unchanged\n */\nconst resolveVolumePaths = (volumes: VolumeMapping[], workspaceRoot: string): VolumeMapping[] =>\n    volumes.map((volume) =>\n        volume.type === 'host'\n            ? {\n                  ...volume,\n                  hostPath: path.resolve(\n                      workspaceRoot,\n                      volume.hostPath.replace(/^~/, os.homedir()),\n                  ),\n              }\n            : volume,\n    );\n\nconst ensureDockerImage = async (imageUri: string): Promise<void> => {\n    let output: ProcessOutput;\n\n    try {\n        // Check local images first.\n        //\n        // NOTE: `docker image ls <ref>` prints repository/tag in separate columns, so\n        // `stdout.includes(<full-ref>)` is not reliable. Use `inspect` instead: exitCode=0\n        // means the image exists locally.\n        // Keep output minimal to avoid dumping full inspect JSON into CI logs.\n        output = await $`docker image inspect --format {{.Id}} ${imageUri}`.nothrow();\n        if (!output.exitCode) {\n            console.info(`✅ Using cached Docker image: ${imageUri}`);\n            return;\n        }\n\n        console.info('📥 Pulling Docker image from:', imageUri);\n        output = await $`docker pull ${imageUri}`.nothrow();\n    } catch (error: unknown) {\n        throw new Error(`Failed to pull Docker image ${imageUri}: ${stringifyError(error)}`);\n    }\n\n    if (output.exitCode) {\n        throw new Error(\n            [\n                'Docker image not available:',\n                `  - Image: ${imageUri} (pull failed)`,\n                '  - Check if the image tag exists in image registry.',\n            ].join('\\n'),\n        );\n    }\n\n    console.info(`✅ Successfully pulled: ${imageUri}`);\n};\n\nexport interface ToolCommandExecutionOptions {\n    cwd: string;\n    volumes: readonly VolumeMapping[];\n    customEntrypoint?: string;\n    env: EnvironmentVariable[];\n    script?: string;\n    publish?: string;\n    versions?: Record<string, string>;\n}\n\n/**\n * Enhanced tool command execution using the new version compatibility matrix system\n */\nexport async function executeToolCommand<TImageId extends string>(\n    context: ChainContext<TImageId>,\n    toolName: string,\n    args: string[],\n    {\n        cwd,\n        volumes: userVolumes,\n        customEntrypoint: entrypoint,\n        env: customEnvVars,\n        script,\n        publish,\n        versions = {},\n    }: ToolCommandExecutionOptions,\n): Promise<ProcessOutput> {\n    const tool = findToolByName(context, toolName);\n\n    // Merge default volumes with user-specified volumes\n    const defaultVolumes = tool.defaultVolumes ?? [];\n    const volumes = mergeVolumes(defaultVolumes, userVolumes);\n\n    if (defaultVolumes.length > 0) {\n        console.info(`📦 Using ${defaultVolumes.length} default cache volume(s) for ${tool.name}`);\n        if (userVolumes.length > 0) {\n            const overrides = userVolumes.filter((uv) =>\n                defaultVolumes.some((dv) => dv.containerPath === uv.containerPath),\n            );\n            if (overrides.length > 0) {\n                console.info(`🔧 User volumes override ${overrides.length} default volume(s)`);\n            }\n        }\n    }\n\n    // Get the resolved version for the current tool.\n    const resolvedVersion = resolveTypeVersions(context, versions)[tool.name];\n\n    if (!resolvedVersion) {\n        throw new Error(`No version resolved for tool ${tool.name}`);\n    }\n\n    console.info(`🔧 ${tool.name} version: ${resolvedVersion}`);\n\n    // Check secondary version validation if available\n    if (tool.getSecondaryVersion) {\n        try {\n            const secondaryVersion = await tool.getSecondaryVersion({ cwd });\n\n            if (!semver.satisfies(secondaryVersion, resolvedVersion)) {\n                console.warn(\n                    `Warning: Local configuration version (${secondaryVersion}) differs from resolved version (${resolvedVersion})`,\n                );\n            }\n        } catch (error) {\n            // Secondary version check failed, but continue with resolved version\n            console.warn('Could not validate secondary version:', stringifyError(error));\n        }\n    }\n\n    // Use Docker image with merged volumes\n    const imageUri = await getImageUriForTool(context, tool.name, resolvedVersion);\n    const workspaceRoot = await findWorkspaceRoot(cwd);\n    const relativePath = path.relative(workspaceRoot, cwd);\n\n    await ensureDockerImage(imageUri);\n\n    if (entrypoint?.trim()) {\n        console.info(`🔧 Using custom entrypoint: ${entrypoint}`);\n    }\n\n    // Merge default env vars with custom env vars (custom takes precedence)\n    const defaultEnv = tool.defaultEnv ?? [];\n\n    // Check if Docker socket is mounted (for tools that spawn Docker containers like anchor --verifiable)\n    // If so, inject HOST_CWD and HOST_WORKSPACE_ROOT so the inner container knows the host paths\n    const hasDockerSocketMount = volumes.some(\n        (v) => v.type === 'host' && v.containerPath === '/var/run/docker.sock',\n    );\n    const dockerSocketEnv: EnvironmentVariable[] = hasDockerSocketMount\n        ? [\n              { name: 'HOST_CWD', value: cwd },\n              { name: 'HOST_WORKSPACE_ROOT', value: workspaceRoot },\n          ]\n        : [];\n\n    const envArgs = uniqBy(\n        [...customEnvVars, ...dockerSocketEnv, ...defaultEnv],\n        ({ name }) => name,\n    ).flatMap(({ name, value }) => ['-e', `${name}=${value}`]);\n\n    // Add host user UID/GID for permission matching on Linux/macOS\n    // This prevents artifacts created in containers from having root ownership\n    // Currently only used for stellar which has an entrypoint that handles UID/GID\n    const hostUserIds = getHostUserIds();\n    const userIdEnvArgs = hostUserIds\n        ? ['-e', `LOCAL_UID=${hostUserIds.uid}`, '-e', `LOCAL_GID=${hostUserIds.gid}`]\n        : [];\n\n    console.info(`👤 Running container as UID:GID ${hostUserIds?.uid}:${hostUserIds?.gid}`);\n\n    if (defaultEnv.length > 0) {\n        console.info(\n            `🌍 Using ${defaultEnv.length} default environment variable(s) for ${tool.name}`,\n        );\n    }\n    if (customEnvVars.length > 0) {\n        console.info(`🌍 Using ${customEnvVars.length} custom environment variable(s)`);\n    }\n\n    // Handle custom script execution\n    let finalArgs: string[];\n    if (script && script.trim() !== '') {\n        console.info(`📜 Executing custom script: ${script}`);\n        finalArgs = ['bash', '-c', script];\n    } else {\n        finalArgs = entrypoint === undefined ? [tool.name, ...args] : args;\n    }\n\n    // Build the Docker command with proper argument separation\n    const dockerArgs = [\n        'run',\n        ...(tool.privileged ? ['--privileged'] : []),\n        '--rm',\n        ...envArgs,\n        ...userIdEnvArgs,\n        '-v',\n        `${workspaceRoot}:/workspace`,\n        '-w',\n        `/workspace/${relativePath}`,\n        ...(publish ? ['-p', publish.trim()] : []),\n        ...resolveVolumePaths(volumes, workspaceRoot).flatMap((volume) => [\n            '-v',\n            getVolumeName(volume),\n        ]),\n        ...(entrypoint ? ['--entrypoint', entrypoint] : []),\n        imageUri,\n        ...finalArgs,\n    ];\n\n    const output = await lockMany(\n        volumes.flatMap((volume) =>\n            volume.type === 'isolate' && volume.locked ? [volume.name] : [],\n        ),\n        async () => {\n            const label = `⏱️ ${finalArgs.join(' ')}`;\n            console.time(label);\n            const result = await $`docker ${dockerArgs}`.nothrow();\n            console.timeEnd(label);\n\n            return result;\n        },\n    );\n\n    if (output.exitCode) {\n        throw new Error(`Failed to run Docker container (exit code: ${output.exitCode})`);\n    }\n\n    return output;\n}\n"]}

package/dist/{DW4CABTI.js → BWI3GU4X.js}

@@ -1,4 +1,4 @@
-import { generateGithubMatrix } from './3HN4X32S.js';
+import { generateGithubMatrix } from './QG2PKHGY.js';
 import { init_esm_shims, __name } from './6AHA7PAZ.js';
 import { stdout } from 'process';
 
@@ -11,5 +11,5 @@ var runGithubMatrixGenerator = /* @__PURE__ */ __name(async (images, directory,
 }, "runGithubMatrixGenerator");
 
 export { runGithubMatrixGenerator };
-//# sourceMappingURL=DW4CABTI.js.map
-//# sourceMappingURL=DW4CABTI.js.map
+//# sourceMappingURL=BWI3GU4X.js.map
+//# sourceMappingURL=BWI3GU4X.js.map

package/dist/{DW4CABTI.js.map → BWI3GU4X.js.map}

@@ -1 +1 @@
-{"version":3,"sources":["../src/github/index.ts"],"names":["runGithubMatrixGenerator","images","directory","versionCombinations","entries","generateGithubMatrix","console","warn","JSON","stringify","stdout","write"],"mappings":";;;;;AAAA,cAAA,EAAA;AAKO,IAAMA,wBAAAA,mBAA2B,MAAA,CAAA,OACpCC,MAAAA,EACAC,SAAAA,EACAC,mBAAAA,KAAAA;AAEA,EAAA,MAAMC,OAAAA,GAAUC,oBAAAA,CAAqBJ,MAAAA,EAAQC,SAAAA,EAAWC,mBAAAA,CAAAA;AAExDG,EAAAA,OAAAA,CAAQC,KAAK,iCAAA,EAAmCC,IAAAA,CAAKC,UAAUL,OAAAA,EAAS,IAAA,EAAM,CAAA,CAAA,CAAA;AAC9EM,EAAAA,MAAAA,CAAOC,KAAAA,CAAMH,IAAAA,CAAKC,SAAAA,CAAUL,OAAAA,CAAAA,CAAAA;AAChC,CAAA,EATwC,0BAAA","file":"DW4CABTI.js","sourcesContent":["import { stdout } from 'node:process';\n\nimport type { Image, VersionCombination } from '../config';\nimport { generateGithubMatrix } from './matrix';\n\nexport const runGithubMatrixGenerator = async (\n    images: Record<string, Image>,\n    directory: string,\n    versionCombinations?: VersionCombination<string>[],\n): Promise<void> => {\n    const entries = generateGithubMatrix(images, directory, versionCombinations);\n\n    console.warn('GitHub Action matrix generated:', JSON.stringify(entries, null, 2));\n    stdout.write(JSON.stringify(entries));\n};\n"]}
+{"version":3,"sources":["../src/github/index.ts"],"names":["runGithubMatrixGenerator","images","directory","versionCombinations","entries","generateGithubMatrix","console","warn","JSON","stringify","stdout","write"],"mappings":";;;;;AAAA,cAAA,EAAA;AAKO,IAAMA,wBAAAA,mBAA2B,MAAA,CAAA,OACpCC,MAAAA,EACAC,SAAAA,EACAC,mBAAAA,KAAAA;AAEA,EAAA,MAAMC,OAAAA,GAAUC,oBAAAA,CAAqBJ,MAAAA,EAAQC,SAAAA,EAAWC,mBAAAA,CAAAA;AAExDG,EAAAA,OAAAA,CAAQC,KAAK,iCAAA,EAAmCC,IAAAA,CAAKC,UAAUL,OAAAA,EAAS,IAAA,EAAM,CAAA,CAAA,CAAA;AAC9EM,EAAAA,MAAAA,CAAOC,KAAAA,CAAMH,IAAAA,CAAKC,SAAAA,CAAUL,OAAAA,CAAAA,CAAAA;AAChC,CAAA,EATwC,0BAAA","file":"BWI3GU4X.js","sourcesContent":["import { stdout } from 'node:process';\n\nimport type { Image, VersionCombination } from '../config';\nimport { generateGithubMatrix } from './matrix';\n\nexport const runGithubMatrixGenerator = async (\n    images: Record<string, Image>,\n    directory: string,\n    versionCombinations?: VersionCombination<string>[],\n): Promise<void> => {\n    const entries = generateGithubMatrix(images, directory, versionCombinations);\n\n    console.warn('GitHub Action matrix generated:', JSON.stringify(entries, null, 2));\n    stdout.write(JSON.stringify(entries));\n};\n"]}

package/dist/{GNUGNPEQ.js → COR7LUVV.js}

@@ -1,4 +1,4 @@
-import { getImageTag, getImageUri } from './J2675KOZ.js';
+import { getImageTag, getImageUri } from './CPBLM36K.js';
 import { init_esm_shims, __name } from './6AHA7PAZ.js';
 import { execFile } from 'child_process';
 import { promisify } from 'util';
@@ -116,5 +116,5 @@ var testTools = /* @__PURE__ */ __name(({ describe, expect, it, beforeAll }, ima
 }, "testTools");
 
 export { testTools };
-//# sourceMappingURL=GNUGNPEQ.js.map
-//# sourceMappingURL=GNUGNPEQ.js.map
+//# sourceMappingURL=COR7LUVV.js.map
+//# sourceMappingURL=COR7LUVV.js.map

package/dist/{GNUGNPEQ.js.map → COR7LUVV.js.map}

@@ -1 +1 @@
-{"version":3,"sources":["../src/test.ts"],"names":["COMMAND_TIMEOUT","MANIFEST_TEST_TIMEOUT","VERSION_TEST_TIMEOUT","PULL_TIMEOUT","slsaSchema","object","SLSA","provenanceSchema","runCommand","command","args","timeout","promisify","execFile","killSignal","stdout","trim","isImageCached","uri","pullLocks","Map","ensureImagePulled","existingPull","get","console","log","pullPromise","finally","delete","set","testTools","describe","expect","it","beforeAll","images","_versionCombinations","versionCommands","name","image","Object","entries","getImageTag","join","toBe","literalImage","values","unreleased","imageUri","getImageUri","tool","expectedVersion","versions","Array","Error","version","toContain","id","safeParse","JSON","parse","success"],"mappings":";;;;;;;AAAA,cAAA,EAAA;AASA,IAAMA,kBAAkB,CAAA,GAAI,GAAA;AAC5B,IAAMC,qBAAAA,GAAwB,GAAA;AAC9B,IAAMC,uBAAuB,EAAA,GAAK,GAAA;AAClC,IAAMC,eAAe,EAAA,GAAK,GAAA;AAE1B,IAAMC,aAAeC,CAAAA,CAAAA,MAAAA,CAAO;EACxBC,IAAAA,EAAQD,CAAAA,CAAAA,MAAAA,CAAO,EAAC;AACpB,CAAA,CAAA;AAGA,IAAME,mBAAqBF,CAAAA,CAAAA,MAAAA,CAAO;AAC9B,EAAA,CAAC,aAAA,GAAgBD,UAAAA;AACjB,EAAA,CAAC,aAAA,GAAgBA;AACrB,CAAA,CAAA;AAEA,IAAMI,UAAAA,mBAAa,MAAA,CAAA,OACfC,OAAAA,EACAC,IAAAA,EACAC,OAAAA,GAAUX,eAAAA,KAAAA,CAGN,MAAMY,SAAAA,CAAUC,QAAAA,CAAAA,CAAUJ,OAAAA,EAASC,IAAAA,EAAM;AACrCC,EAAAA,OAAAA;EACAG,UAAAA,EAAY;AAChB,CAAA,CAAA,EACFC,MAAAA,CAAOC,IAAAA,EAAI,EAVE,YAAA,CAAA;AAYnB,IAAMC,aAAAA,iCAAuBC,GAAAA,KAAAA;AACzB,EAAA,IAAI;AACA,IAAA,MAAMV,WAAW,QAAA,EAAU;AAAC,MAAA,OAAA;AAAS,MAAA,SAAA;AAAWU,MAAAA;AAAI,KAAA,CAAA;AACpD,IAAA,OAAO,IAAA;EACX,CAAA,CAAA,MAAQ;AACJ,IAAA,OAAO,KAAA;AACX,EAAA;AACJ,CAAA,EAPsB,eAAA,CAAA;AAStB,IAAMC,SAAAA,uBAAgBC,GAAAA,EAAAA;AAEtB,IAAMC,iBAAAA,iCAA2BH,GAAAA,KAAAA;AAC7B,EAAA,MAAMI,YAAAA,GAAeH,SAAAA,CAAUI,GAAAA,CAAIL,GAAAA,CAAAA;AACnC,EAAA,IAAII,YAAAA,EAAc;AACdE,IAAAA,OAAAA,CAAQC,GAAAA,CAAI,CAAA,oCAAA,EAAkCP,GAAAA,CAAAA,CAAK,CAAA;AACnD,IAAA,OAAOI,YAAAA;AACX,EAAA;AAEA,EAAA,MAAMI,eAAe,YAAA;AACjB,IAAA,IAAI,MAAMT,aAAAA,CAAcC,GAAAA,CAAAA,EAAM;AAC1BM,MAAAA,OAAAA,CAAQC,GAAAA,CAAI,CAAA,6BAAA,EAA2BP,GAAAA,CAAAA,CAAK,CAAA;AAC5C,MAAA;AACJ,IAAA;AACAM,IAAAA,OAAAA,CAAQC,GAAAA,CAAI,CAAA,yBAAA,EAAqBP,GAAAA,CAAAA,CAAK,CAAA;AACtC,IAAA,MAAMV,WAAW,QAAA,EAAU;AAAC,MAAA,MAAA;AAAQU,MAAAA;OAAMf,YAAAA,CAAAA;AAC9C,EAAA,CAAA,IAAKwB,OAAAA,CAAQ,MAAMR,SAAAA,CAAUS,MAAAA,CAAOV,GAAAA,CAAAA,CAAAA;AAEpCC,EAAAA,SAAAA,CAAUU,GAAAA,CAAIX,KAAKQ,WAAAA,CAAAA;AACnB,EAAA,OAAOA,WAAAA;AACX,CAAA,EAlB0B,mBAAA,CAAA;AAoBnB,IAAMI,SAAAA,mBAAY,MAAA,CAAA,CACrB,EAAEC,QAAAA,EAAUC,MAAAA,EAAQC,IAAIC,SAAAA,EAAS,EACjCC,MAAAA,EACAC,oBAAAA,EACAC,eAAAA,KAAAA;AAEAN,EAAAA,QAAAA,CAAS,oBAAoB,MAAA;AACzB,IAAA,KAAA,MAAW,CAACO,IAAAA,EAAMC,KAAAA,KAAUC,MAAAA,CAAOC,OAAAA,CAAQN,MAAAA,CAAAA,EAAS;AAChDF,MAAAA,EAAAA,CAAG,CAAA,mBAAA,EAAsBK,IAAAA,CAAAA,CAAAA,EAAQ,MAAA;AAC7BN,QAAAA,MAAAA,CAAO;UAACO,KAAAA,CAAMD,IAAAA;AAAMI,UAAAA,WAAAA,CAAYH,OAAO,GAAA;AAAMI,SAAAA,CAAAA,IAAAA,CAAK,GAAA,CAAA,CAAA,CAAMC,IAAAA,CAAKN,IAAAA,CAAAA;MACjE,CAAA,CAAA;AACJ,IAAA;EACJ,CAAA,CAAA;AAEAP,EAAAA,QAAAA,CAAS,iBAAiB,MAAA;AACtB,IAAA,KAAA,MAAWc,YAAAA,IAAgBL,MAAAA,CAAOM,MAAAA,CAAOX,MAAAA,CAAAA,EAAS;AAC9C,MAAA,MAAMI,KAAAA,GAAeM,YAAAA;AAErB,MAAA,IAAIN,MAAMQ,UAAAA,EAAY;AAClB,QAAA;AACJ,MAAA;AAEAhB,MAAAA,QAAAA,CAASW,WAAAA,CAAYH,KAAAA,CAAAA,EAAQ,MAAA;AACzB,QAAA,IAAIS,QAAAA;AAEJd,QAAAA,SAAAA,CAAU,YAAA;AACNc,UAAAA,QAAAA,GAAW,MAAMC,WAAAA,CAAYV,KAAAA,EAAO,GAAA,CAAA;AACpC,UAAA,MAAMlB,kBAAkB2B,QAAAA,CAAAA;AAC5B,QAAA,CAAA,EAAG7C,YAAAA,CAAAA;AAEH,QAAA,KAAA,MAAW,CAAC+C,MAAMC,eAAAA,CAAAA,IAAoBX,OAAOC,OAAAA,CAAQF,KAAAA,CAAMa,QAAQ,CAAA,EAAG;AAClEnB,UAAAA,EAAAA,CACI,CAAA,YAAA,EAAeiB,IAAAA,CAAAA,YAAAA,EAAmBC,eAAAA,IAClC,YAAA;AACI,YAAA,IAAI,EAAEd,eAAAA,CAAgBa,IAAAA,CAAAA,YAAiBG,KAAAA,CAAAA,EAAQ;AAC3C,cAAA,MAAM,IAAIC,MAAM,yBAAA,CAAA;AACpB,YAAA;AAEA,YAAA,MAAMC,OAAAA,GAAU,MAAM/C,UAAAA,CAAW,QAAA,EAAU;AACvC,cAAA,KAAA;AACA,cAAA,MAAA;AACA,cAAA,cAAA;AACAwC,cAAAA,QAAAA;AACGX,cAAAA,GAAAA,eAAAA,CAAgBa,IAAAA;AACtB,aAAA,CAAA;AAEDlB,YAAAA,MAAAA,CAAOuB,OAAAA,CAAAA,CAASC,SAAAA,CAAUL,eAAAA,CAAAA;AAC9B,UAAA,CAAA,EACAjD,oBAAAA,CAAAA;AAER,QAAA;MACJ,CAAA,CAAA;AACJ,IAAA;EACJ,CAAA,CAAA;AAEA6B,EAAAA,QAAAA,CAAS,0BAA0B,MAAA;AAC/B,IAAA,KAAA,MAAW,CAAC0B,EAAAA,EAAIlB,KAAAA,KAAUC,MAAAA,CAAOC,OAAAA,CAAQN,MAAAA,CAAAA,EAAS;AAC9C,MAAA,IAAII,MAAMQ,UAAAA,EAAY;AAClB,QAAA;AACJ,MAAA;AAEAd,MAAAA,EAAAA,CACI,CAAA,yBAAA,EAA4BwB,EAAAA,CAAAA,CAAAA,EAC5B,YAAA;AACI,QAAA,MAAM,EAAE1C,MAAAA,EAAM,GAAK,MAAMH,SAAAA,CAAUC,QAAAA,EAAU,QAAA,EAAU;AACnD,UAAA,QAAA;AACA,UAAA,YAAA;AACA,UAAA,SAAA;AACA,UAAA,UAAA;AACA,UAAA,wBAAA;UACA,MAAMoC,WAAAA,CAAYV,OAAO,GAAA;AAC5B,SAAA,CAAA;AAEDP,QAAAA,MAAAA,CAAOzB,gBAAAA,CAAiBmD,SAAAA,CAAUC,IAAAA,CAAKC,KAAAA,CAAM7C,MAAAA,CAAAA,CAAAA,CAAS8C,OAAO,CAAA,CAAEjB,IAAAA,CAAK,IAAA,CAAA;AACxE,MAAA,CAAA,EACA3C,qBAAAA,CAAAA;AAER,IAAA;EACJ,CAAA,CAAA;AACJ,CAAA,EA/EyB,WAAA","file":"GNUGNPEQ.js","sourcesContent":["import { execFile } from 'node:child_process';\nimport { promisify } from 'node:util';\nimport type * as vitest from 'vitest';\nimport * as z from 'zod';\n\nimport type { VersionCombination } from './config';\nimport { type Image } from './config';\nimport { getImageTag, getImageUri } from './utils/docker';\n\nconst COMMAND_TIMEOUT = 5 * 60_000;\nconst MANIFEST_TEST_TIMEOUT = 20_000;\nconst VERSION_TEST_TIMEOUT = 15 * 60_000;\nconst PULL_TIMEOUT = 10 * 60_000;\n\nconst slsaSchema = z.object({\n    SLSA: z.object({}),\n});\n\n// TODO Require provenance by GitHub Actions.\nconst provenanceSchema = z.object({\n    ['linux/amd64']: slsaSchema,\n    ['linux/arm64']: slsaSchema,\n});\n\nconst runCommand = async (\n    command: string,\n    args: string[],\n    timeout = COMMAND_TIMEOUT,\n): Promise<string> =>\n    (\n        await promisify(execFile)(command, args, {\n            timeout,\n            killSignal: 'SIGKILL', // Force kill if timeout\n        })\n    ).stdout.trim();\n\nconst isImageCached = async (uri: string): Promise<boolean> => {\n    try {\n        await runCommand('docker', ['image', 'inspect', uri]);\n        return true;\n    } catch {\n        return false;\n    }\n};\n\nconst pullLocks = new Map<string, Promise<void>>();\n\nconst ensureImagePulled = async (uri: string): Promise<void> => {\n    const existingPull = pullLocks.get(uri);\n    if (existingPull) {\n        console.log(`⏳ Waiting for concurrent pull: ${uri}`);\n        return existingPull;\n    }\n\n    const pullPromise = (async () => {\n        if (await isImageCached(uri)) {\n            console.log(`✅ Image already cached: ${uri}`);\n            return;\n        }\n        console.log(`📥 Pulling image: ${uri}`);\n        await runCommand('docker', ['pull', uri], PULL_TIMEOUT);\n    })().finally(() => pullLocks.delete(uri));\n\n    pullLocks.set(uri, pullPromise);\n    return pullPromise;\n};\n\nexport const testTools = (\n    { describe, expect, it, beforeAll }: typeof vitest,\n    images: Record<string, Image>,\n    _versionCombinations: VersionCombination<string>[],\n    versionCommands: Record<string, string[]>,\n): void => {\n    describe('Docker image IDs', () => {\n        for (const [name, image] of Object.entries(images)) {\n            it(`has an image ID of ${name}`, () => {\n                expect([image.name, getImageTag(image, '-')].join(':')).toBe(name);\n            });\n        }\n    });\n\n    describe('Tool versions', () => {\n        for (const literalImage of Object.values(images)) {\n            const image: Image = literalImage;\n\n            if (image.unreleased) {\n                continue;\n            }\n\n            describe(getImageTag(image), () => {\n                let imageUri: string;\n\n                beforeAll(async () => {\n                    imageUri = await getImageUri(image, '_');\n                    await ensureImagePulled(imageUri);\n                }, PULL_TIMEOUT);\n\n                for (const [tool, expectedVersion] of Object.entries(image.versions)) {\n                    it(\n                        `should have ${tool} of version ${expectedVersion}`,\n                        async () => {\n                            if (!(versionCommands[tool] instanceof Array)) {\n                                throw new Error('Missing version command');\n                            }\n\n                            const version = await runCommand('docker', [\n                                'run',\n                                '--rm',\n                                '--privileged',\n                                imageUri,\n                                ...versionCommands[tool],\n                            ]);\n\n                            expect(version).toContain(expectedVersion);\n                        },\n                        VERSION_TEST_TIMEOUT,\n                    );\n                }\n            });\n        }\n    });\n\n    describe('Docker image manifests', () => {\n        for (const [id, image] of Object.entries(images)) {\n            if (image.unreleased) {\n                continue;\n            }\n\n            it(\n                `has a valid manifest for ${id}`,\n                async () => {\n                    const { stdout } = await promisify(execFile)('docker', [\n                        'buildx',\n                        'imagetools',\n                        'inspect',\n                        '--format',\n                        '{{ json .Provenance }}',\n                        await getImageUri(image, '_'),\n                    ]);\n\n                    expect(provenanceSchema.safeParse(JSON.parse(stdout)).success).toBe(true);\n                },\n                MANIFEST_TEST_TIMEOUT,\n            );\n        }\n    });\n};\n"]}
+{"version":3,"sources":["../src/test.ts"],"names":["COMMAND_TIMEOUT","MANIFEST_TEST_TIMEOUT","VERSION_TEST_TIMEOUT","PULL_TIMEOUT","slsaSchema","object","SLSA","provenanceSchema","runCommand","command","args","timeout","promisify","execFile","killSignal","stdout","trim","isImageCached","uri","pullLocks","Map","ensureImagePulled","existingPull","get","console","log","pullPromise","finally","delete","set","testTools","describe","expect","it","beforeAll","images","_versionCombinations","versionCommands","name","image","Object","entries","getImageTag","join","toBe","literalImage","values","unreleased","imageUri","getImageUri","tool","expectedVersion","versions","Array","Error","version","toContain","id","safeParse","JSON","parse","success"],"mappings":";;;;;;;AAAA,cAAA,EAAA;AASA,IAAMA,kBAAkB,CAAA,GAAI,GAAA;AAC5B,IAAMC,qBAAAA,GAAwB,GAAA;AAC9B,IAAMC,uBAAuB,EAAA,GAAK,GAAA;AAClC,IAAMC,eAAe,EAAA,GAAK,GAAA;AAE1B,IAAMC,aAAeC,CAAAA,CAAAA,MAAAA,CAAO;EACxBC,IAAAA,EAAQD,CAAAA,CAAAA,MAAAA,CAAO,EAAC;AACpB,CAAA,CAAA;AAGA,IAAME,mBAAqBF,CAAAA,CAAAA,MAAAA,CAAO;AAC9B,EAAA,CAAC,aAAA,GAAgBD,UAAAA;AACjB,EAAA,CAAC,aAAA,GAAgBA;AACrB,CAAA,CAAA;AAEA,IAAMI,UAAAA,mBAAa,MAAA,CAAA,OACfC,OAAAA,EACAC,IAAAA,EACAC,OAAAA,GAAUX,eAAAA,KAAAA,CAGN,MAAMY,SAAAA,CAAUC,QAAAA,CAAAA,CAAUJ,OAAAA,EAASC,IAAAA,EAAM;AACrCC,EAAAA,OAAAA;EACAG,UAAAA,EAAY;AAChB,CAAA,CAAA,EACFC,MAAAA,CAAOC,IAAAA,EAAI,EAVE,YAAA,CAAA;AAYnB,IAAMC,aAAAA,iCAAuBC,GAAAA,KAAAA;AACzB,EAAA,IAAI;AACA,IAAA,MAAMV,WAAW,QAAA,EAAU;AAAC,MAAA,OAAA;AAAS,MAAA,SAAA;AAAWU,MAAAA;AAAI,KAAA,CAAA;AACpD,IAAA,OAAO,IAAA;EACX,CAAA,CAAA,MAAQ;AACJ,IAAA,OAAO,KAAA;AACX,EAAA;AACJ,CAAA,EAPsB,eAAA,CAAA;AAStB,IAAMC,SAAAA,uBAAgBC,GAAAA,EAAAA;AAEtB,IAAMC,iBAAAA,iCAA2BH,GAAAA,KAAAA;AAC7B,EAAA,MAAMI,YAAAA,GAAeH,SAAAA,CAAUI,GAAAA,CAAIL,GAAAA,CAAAA;AACnC,EAAA,IAAII,YAAAA,EAAc;AACdE,IAAAA,OAAAA,CAAQC,GAAAA,CAAI,CAAA,oCAAA,EAAkCP,GAAAA,CAAAA,CAAK,CAAA;AACnD,IAAA,OAAOI,YAAAA;AACX,EAAA;AAEA,EAAA,MAAMI,eAAe,YAAA;AACjB,IAAA,IAAI,MAAMT,aAAAA,CAAcC,GAAAA,CAAAA,EAAM;AAC1BM,MAAAA,OAAAA,CAAQC,GAAAA,CAAI,CAAA,6BAAA,EAA2BP,GAAAA,CAAAA,CAAK,CAAA;AAC5C,MAAA;AACJ,IAAA;AACAM,IAAAA,OAAAA,CAAQC,GAAAA,CAAI,CAAA,yBAAA,EAAqBP,GAAAA,CAAAA,CAAK,CAAA;AACtC,IAAA,MAAMV,WAAW,QAAA,EAAU;AAAC,MAAA,MAAA;AAAQU,MAAAA;OAAMf,YAAAA,CAAAA;AAC9C,EAAA,CAAA,IAAKwB,OAAAA,CAAQ,MAAMR,SAAAA,CAAUS,MAAAA,CAAOV,GAAAA,CAAAA,CAAAA;AAEpCC,EAAAA,SAAAA,CAAUU,GAAAA,CAAIX,KAAKQ,WAAAA,CAAAA;AACnB,EAAA,OAAOA,WAAAA;AACX,CAAA,EAlB0B,mBAAA,CAAA;AAoBnB,IAAMI,SAAAA,mBAAY,MAAA,CAAA,CACrB,EAAEC,QAAAA,EAAUC,MAAAA,EAAQC,IAAIC,SAAAA,EAAS,EACjCC,MAAAA,EACAC,oBAAAA,EACAC,eAAAA,KAAAA;AAEAN,EAAAA,QAAAA,CAAS,oBAAoB,MAAA;AACzB,IAAA,KAAA,MAAW,CAACO,IAAAA,EAAMC,KAAAA,KAAUC,MAAAA,CAAOC,OAAAA,CAAQN,MAAAA,CAAAA,EAAS;AAChDF,MAAAA,EAAAA,CAAG,CAAA,mBAAA,EAAsBK,IAAAA,CAAAA,CAAAA,EAAQ,MAAA;AAC7BN,QAAAA,MAAAA,CAAO;UAACO,KAAAA,CAAMD,IAAAA;AAAMI,UAAAA,WAAAA,CAAYH,OAAO,GAAA;AAAMI,SAAAA,CAAAA,IAAAA,CAAK,GAAA,CAAA,CAAA,CAAMC,IAAAA,CAAKN,IAAAA,CAAAA;MACjE,CAAA,CAAA;AACJ,IAAA;EACJ,CAAA,CAAA;AAEAP,EAAAA,QAAAA,CAAS,iBAAiB,MAAA;AACtB,IAAA,KAAA,MAAWc,YAAAA,IAAgBL,MAAAA,CAAOM,MAAAA,CAAOX,MAAAA,CAAAA,EAAS;AAC9C,MAAA,MAAMI,KAAAA,GAAeM,YAAAA;AAErB,MAAA,IAAIN,MAAMQ,UAAAA,EAAY;AAClB,QAAA;AACJ,MAAA;AAEAhB,MAAAA,QAAAA,CAASW,WAAAA,CAAYH,KAAAA,CAAAA,EAAQ,MAAA;AACzB,QAAA,IAAIS,QAAAA;AAEJd,QAAAA,SAAAA,CAAU,YAAA;AACNc,UAAAA,QAAAA,GAAW,MAAMC,WAAAA,CAAYV,KAAAA,EAAO,GAAA,CAAA;AACpC,UAAA,MAAMlB,kBAAkB2B,QAAAA,CAAAA;AAC5B,QAAA,CAAA,EAAG7C,YAAAA,CAAAA;AAEH,QAAA,KAAA,MAAW,CAAC+C,MAAMC,eAAAA,CAAAA,IAAoBX,OAAOC,OAAAA,CAAQF,KAAAA,CAAMa,QAAQ,CAAA,EAAG;AAClEnB,UAAAA,EAAAA,CACI,CAAA,YAAA,EAAeiB,IAAAA,CAAAA,YAAAA,EAAmBC,eAAAA,IAClC,YAAA;AACI,YAAA,IAAI,EAAEd,eAAAA,CAAgBa,IAAAA,CAAAA,YAAiBG,KAAAA,CAAAA,EAAQ;AAC3C,cAAA,MAAM,IAAIC,MAAM,yBAAA,CAAA;AACpB,YAAA;AAEA,YAAA,MAAMC,OAAAA,GAAU,MAAM/C,UAAAA,CAAW,QAAA,EAAU;AACvC,cAAA,KAAA;AACA,cAAA,MAAA;AACA,cAAA,cAAA;AACAwC,cAAAA,QAAAA;AACGX,cAAAA,GAAAA,eAAAA,CAAgBa,IAAAA;AACtB,aAAA,CAAA;AAEDlB,YAAAA,MAAAA,CAAOuB,OAAAA,CAAAA,CAASC,SAAAA,CAAUL,eAAAA,CAAAA;AAC9B,UAAA,CAAA,EACAjD,oBAAAA,CAAAA;AAER,QAAA;MACJ,CAAA,CAAA;AACJ,IAAA;EACJ,CAAA,CAAA;AAEA6B,EAAAA,QAAAA,CAAS,0BAA0B,MAAA;AAC/B,IAAA,KAAA,MAAW,CAAC0B,EAAAA,EAAIlB,KAAAA,KAAUC,MAAAA,CAAOC,OAAAA,CAAQN,MAAAA,CAAAA,EAAS;AAC9C,MAAA,IAAII,MAAMQ,UAAAA,EAAY;AAClB,QAAA;AACJ,MAAA;AAEAd,MAAAA,EAAAA,CACI,CAAA,yBAAA,EAA4BwB,EAAAA,CAAAA,CAAAA,EAC5B,YAAA;AACI,QAAA,MAAM,EAAE1C,MAAAA,EAAM,GAAK,MAAMH,SAAAA,CAAUC,QAAAA,EAAU,QAAA,EAAU;AACnD,UAAA,QAAA;AACA,UAAA,YAAA;AACA,UAAA,SAAA;AACA,UAAA,UAAA;AACA,UAAA,wBAAA;UACA,MAAMoC,WAAAA,CAAYV,OAAO,GAAA;AAC5B,SAAA,CAAA;AAEDP,QAAAA,MAAAA,CAAOzB,gBAAAA,CAAiBmD,SAAAA,CAAUC,IAAAA,CAAKC,KAAAA,CAAM7C,MAAAA,CAAAA,CAAAA,CAAS8C,OAAO,CAAA,CAAEjB,IAAAA,CAAK,IAAA,CAAA;AACxE,MAAA,CAAA,EACA3C,qBAAAA,CAAAA;AAER,IAAA;EACJ,CAAA,CAAA;AACJ,CAAA,EA/EyB,WAAA","file":"COR7LUVV.js","sourcesContent":["import { execFile } from 'node:child_process';\nimport { promisify } from 'node:util';\nimport type * as vitest from 'vitest';\nimport * as z from 'zod';\n\nimport type { VersionCombination } from './config';\nimport { type Image } from './config';\nimport { getImageTag, getImageUri } from './utils/docker';\n\nconst COMMAND_TIMEOUT = 5 * 60_000;\nconst MANIFEST_TEST_TIMEOUT = 20_000;\nconst VERSION_TEST_TIMEOUT = 15 * 60_000;\nconst PULL_TIMEOUT = 10 * 60_000;\n\nconst slsaSchema = z.object({\n    SLSA: z.object({}),\n});\n\n// TODO Require provenance by GitHub Actions.\nconst provenanceSchema = z.object({\n    ['linux/amd64']: slsaSchema,\n    ['linux/arm64']: slsaSchema,\n});\n\nconst runCommand = async (\n    command: string,\n    args: string[],\n    timeout = COMMAND_TIMEOUT,\n): Promise<string> =>\n    (\n        await promisify(execFile)(command, args, {\n            timeout,\n            killSignal: 'SIGKILL', // Force kill if timeout\n        })\n    ).stdout.trim();\n\nconst isImageCached = async (uri: string): Promise<boolean> => {\n    try {\n        await runCommand('docker', ['image', 'inspect', uri]);\n        return true;\n    } catch {\n        return false;\n    }\n};\n\nconst pullLocks = new Map<string, Promise<void>>();\n\nconst ensureImagePulled = async (uri: string): Promise<void> => {\n    const existingPull = pullLocks.get(uri);\n    if (existingPull) {\n        console.log(`⏳ Waiting for concurrent pull: ${uri}`);\n        return existingPull;\n    }\n\n    const pullPromise = (async () => {\n        if (await isImageCached(uri)) {\n            console.log(`✅ Image already cached: ${uri}`);\n            return;\n        }\n        console.log(`📥 Pulling image: ${uri}`);\n        await runCommand('docker', ['pull', uri], PULL_TIMEOUT);\n    })().finally(() => pullLocks.delete(uri));\n\n    pullLocks.set(uri, pullPromise);\n    return pullPromise;\n};\n\nexport const testTools = (\n    { describe, expect, it, beforeAll }: typeof vitest,\n    images: Record<string, Image>,\n    _versionCombinations: VersionCombination<string>[],\n    versionCommands: Record<string, string[]>,\n): void => {\n    describe('Docker image IDs', () => {\n        for (const [name, image] of Object.entries(images)) {\n            it(`has an image ID of ${name}`, () => {\n                expect([image.name, getImageTag(image, '-')].join(':')).toBe(name);\n            });\n        }\n    });\n\n    describe('Tool versions', () => {\n        for (const literalImage of Object.values(images)) {\n            const image: Image = literalImage;\n\n            if (image.unreleased) {\n                continue;\n            }\n\n            describe(getImageTag(image), () => {\n                let imageUri: string;\n\n                beforeAll(async () => {\n                    imageUri = await getImageUri(image, '_');\n                    await ensureImagePulled(imageUri);\n                }, PULL_TIMEOUT);\n\n                for (const [tool, expectedVersion] of Object.entries(image.versions)) {\n                    it(\n                        `should have ${tool} of version ${expectedVersion}`,\n                        async () => {\n                            if (!(versionCommands[tool] instanceof Array)) {\n                                throw new Error('Missing version command');\n                            }\n\n                            const version = await runCommand('docker', [\n                                'run',\n                                '--rm',\n                                '--privileged',\n                                imageUri,\n                                ...versionCommands[tool],\n                            ]);\n\n                            expect(version).toContain(expectedVersion);\n                        },\n                        VERSION_TEST_TIMEOUT,\n                    );\n                }\n            });\n        }\n    });\n\n    describe('Docker image manifests', () => {\n        for (const [id, image] of Object.entries(images)) {\n            if (image.unreleased) {\n                continue;\n            }\n\n            it(\n                `has a valid manifest for ${id}`,\n                async () => {\n                    const { stdout } = await promisify(execFile)('docker', [\n                        'buildx',\n                        'imagetools',\n                        'inspect',\n                        '--format',\n                        '{{ json .Provenance }}',\n                        await getImageUri(image, '_'),\n                    ]);\n\n                    expect(provenanceSchema.safeParse(JSON.parse(stdout)).success).toBe(true);\n                },\n                MANIFEST_TEST_TIMEOUT,\n            );\n        }\n    });\n};\n"]}

package/dist/{J2675KOZ.js → CPBLM36K.js}

@@ -1,4 +1,4 @@
-import { getRegistry, getImageDirectory } from './YI63OKDP.js';
+import { getRegistry, getImageDirectory } from './PZCC5OXV.js';
 import { findToolVersionsForCombination, getImageName } from './KWRJPB5T.js';
 import { init_esm_shims, __name } from './6AHA7PAZ.js';
 import { join, basename } from 'path';
@@ -48,5 +48,5 @@ var getVolumeName = /* @__PURE__ */ __name((volume) => {
 }, "getVolumeName");
 
 export { getImageTag, getImageUri, getImageUriForTool, getVolumeName };
-//# sourceMappingURL=J2675KOZ.js.map
-//# sourceMappingURL=J2675KOZ.js.map
+//# sourceMappingURL=CPBLM36K.js.map
+//# sourceMappingURL=CPBLM36K.js.map

package/dist/{J2675KOZ.js.map → CPBLM36K.js.map}

@@ -1 +1 @@
-{"version":3,"sources":["../src/utils/docker.ts"],"names":["getImageUriForTool","context","toolName","version","separator","image","versionCombinations","flatMap","combination","imageId","images","findToolVersionsForCombination","Error","getImageUri","join","getRegistry","getImageDirectory","getImageName","name","getImageTag","versions","patch","Object","entries","sort","flat","getVolumeName","volume","type","hostPath","containerPath","components","shared","packageName","process","env","npm_package_name","push","basename"],"mappings":";;;;;;AAAA,cAAA,EAAA;AAOO,IAAMA,qCAAqB,MAAA,CAAA,OAC9BC,OAAAA,EACAC,QAAAA,EACAC,OAAAA,EACAC,YAAuB,GAAA,KAAG;AAE1B,EAAA,MAAM,CAACC,KAAAA,CAAAA,GAASJ,QAAQK,mBAAAA,CAAoBC,OAAAA,CAAQ,CAACC,WAAAA,KAAAA;AACjD,IAAA,MAAMC,OAAAA,GAAUD,WAAAA,CAAYE,MAAAA,CAAOR,QAAAA,CAAAA;AAEnC,IAAA,IAAI,CAACO,OAAAA,EAAS;AACV,MAAA,OAAO,EAAA;AACX,IAAA;AAEA,IAAA,MAAMJ,MAAAA,GAAQJ,OAAAA,CAAQS,MAAAA,CAAOD,OAAAA,CAAAA;AAE7B,IAAA,OAAOJ,UAASM,8BAAAA,CAA+BV,OAAAA,EAASO,WAAAA,CAAAA,CAAaN,QAAAA,MAAcC,OAAAA,GAC7E;AAACE,MAAAA;QACD,EAAA;EACV,CAAA,CAAA;AAEA,EAAA,IAAI,CAACA,KAAAA,EAAO;AACR,IAAA,MAAM,IAAIO,KAAAA,CACN,CAAA,sCAAA,EAAyCV,QAAAA,CAAAA,cAAAA,EAAyBC,OAAAA,CAAAA,CAAS,CAAA;AAEnF,EAAA;AAEA,EAAA,OAAOU,WAAAA,CAAYR,OAAOD,SAAAA,CAAAA;AAC9B,CAAA,EA3BkC,oBAAA;AA6B3B,IAAMS,WAAAA,iCAAqBR,KAAAA,EAAcD,SAAAA,GAAuB,QACnEU,IAAAA,CACI,MAAMC,WAAAA,EAAAA,EACN,MAAMC,iBAAAA,IACN,CAAA,EAAGC,YAAAA,CAAaZ,KAAAA,CAAMa,IAAI,CAAA,CAAA,CAAA,EAAKC,YAAYd,KAAAA,EAAOD,SAAAA,CAAAA,CAAAA,CAAY,CAAA,EAJ3C,aAAA;AAOpB,IAAMe,8BAAc,MAAA,CAAA,CAAC,EAAEC,UAAUC,KAAAA,EAAK,EAAWjB,YAAuB,GAAA,KAC3E;AAAIkB,EAAAA,GAAAA,MAAAA,CAAOC,OAAAA,CAAQH,QAAAA,CAAAA,CAAUI,IAAAA,GAAOC,IAAAA,EAAI;KAAQJ,KAAAA,GAAQ;AAAC,IAAA,OAAA;AAASA,IAAAA;MAAS;AAAKP,CAAAA,CAAAA,IAAAA,CAAKV,SAAAA,CAAAA,EAD9D,aAAA;AAIpB,IAAMsB,aAAAA,2BAAiBC,MAAAA,KAAAA;AAC1B,EAAA,IAAIA,MAAAA,CAAOC,SAAS,MAAA,EAAQ;AACxB,IAAA,OAAO,CAAA,EAAGD,MAAAA,CAAOE,QAAQ,CAAA,CAAA,EAAIF,OAAOG,aAAa,CAAA,CAAA;AACrD,EAAA;AAEA,EAAA,MAAMC,UAAAA,GAAa;AAAC,IAAA,kBAAA;IAAoBJ,MAAAA,CAAOT;;AAE/C,EAAA,IAAI,CAACS,OAAOK,MAAAA,EAAQ;AAGhB,IAAA,MAAMC,WAAAA,GAAcC,QAAQC,GAAAA,CAAIC,gBAAAA;AAEhC,IAAA,IAAI,CAACH,WAAAA,EAAa;AACd,MAAA,MAAM,IAAIrB,MAAM,mDAAA,CAAA;AACpB,IAAA;AAEAmB,IAAAA,UAAAA,CAAWM,IAAAA,CAAKC,QAAAA,CAASL,WAAAA,CAAAA,CAAAA;AAC7B,EAAA;AAEA,EAAA,OAAO,GAAGF,UAAAA,CAAWjB,IAAAA,CAAK,GAAA,CAAA,CAAA,CAAA,EAAQa,OAAOG,aAAa,CAAA,CAAA;AAC1D,CAAA,EApB6B,eAAA","file":"J2675KOZ.js","sourcesContent":["import { basename, join } from 'node:path';\n\nimport type { Image, VolumeMapping } from '../config';\nimport { getImageDirectory, getRegistry } from '../config';\nimport type { ChainContext } from '../context';\nimport { findToolVersionsForCombination, getImageName } from './finder';\n\nexport const getImageUriForTool = async <TImageId extends string>(\n    context: ChainContext<TImageId>,\n    toolName: string,\n    version: string,\n    separator: '_' | '-' = '_',\n): Promise<string> => {\n    const [image] = context.versionCombinations.flatMap((combination) => {\n        const imageId = combination.images[toolName];\n\n        if (!imageId) {\n            return [];\n        }\n\n        const image = context.images[imageId];\n\n        return image && findToolVersionsForCombination(context, combination)[toolName] === version\n            ? [image]\n            : [];\n    });\n\n    if (!image) {\n        throw new Error(\n            `No version combination found for tool ${toolName} with version ${version}`,\n        );\n    }\n\n    return getImageUri(image, separator);\n};\n\nexport const getImageUri = async (image: Image, separator: '_' | '-' = '_'): Promise<string> =>\n    join(\n        await getRegistry(),\n        await getImageDirectory(),\n        `${getImageName(image.name)}:${getImageTag(image, separator)}`,\n    );\n\nexport const getImageTag = ({ versions, patch }: Image, separator: '_' | '-' = '_'): string =>\n    [...Object.entries(versions).sort().flat(), ...(patch ? ['patch', patch] : [])].join(separator);\n\n// passing workspaceRoot is necessary for host volumes to resolve relative paths to the workspace root\nexport const getVolumeName = (volume: VolumeMapping): string => {\n    if (volume.type === 'host') {\n        return `${volume.hostPath}:${volume.containerPath}`;\n    }\n\n    const components = ['lz-tooling-cache', volume.name];\n\n    if (!volume.shared) {\n        // This is the package name where the `lz-tool` command is executed.\n        // eslint-disable-next-line turbo/no-undeclared-env-vars\n        const packageName = process.env.npm_package_name;\n\n        if (!packageName) {\n            throw new Error('npm_package_name environment variable not defined');\n        }\n\n        components.push(basename(packageName));\n    }\n\n    return `${components.join('-')}:${volume.containerPath}`;\n};\n"]}
+{"version":3,"sources":["../src/utils/docker.ts"],"names":["getImageUriForTool","context","toolName","version","separator","image","versionCombinations","flatMap","combination","imageId","images","findToolVersionsForCombination","Error","getImageUri","join","getRegistry","getImageDirectory","getImageName","name","getImageTag","versions","patch","Object","entries","sort","flat","getVolumeName","volume","type","hostPath","containerPath","components","shared","packageName","process","env","npm_package_name","push","basename"],"mappings":";;;;;;AAAA,cAAA,EAAA;AAOO,IAAMA,qCAAqB,MAAA,CAAA,OAC9BC,OAAAA,EACAC,QAAAA,EACAC,OAAAA,EACAC,YAAuB,GAAA,KAAG;AAE1B,EAAA,MAAM,CAACC,KAAAA,CAAAA,GAASJ,QAAQK,mBAAAA,CAAoBC,OAAAA,CAAQ,CAACC,WAAAA,KAAAA;AACjD,IAAA,MAAMC,OAAAA,GAAUD,WAAAA,CAAYE,MAAAA,CAAOR,QAAAA,CAAAA;AAEnC,IAAA,IAAI,CAACO,OAAAA,EAAS;AACV,MAAA,OAAO,EAAA;AACX,IAAA;AAEA,IAAA,MAAMJ,MAAAA,GAAQJ,OAAAA,CAAQS,MAAAA,CAAOD,OAAAA,CAAAA;AAE7B,IAAA,OAAOJ,UAASM,8BAAAA,CAA+BV,OAAAA,EAASO,WAAAA,CAAAA,CAAaN,QAAAA,MAAcC,OAAAA,GAC7E;AAACE,MAAAA;QACD,EAAA;EACV,CAAA,CAAA;AAEA,EAAA,IAAI,CAACA,KAAAA,EAAO;AACR,IAAA,MAAM,IAAIO,KAAAA,CACN,CAAA,sCAAA,EAAyCV,QAAAA,CAAAA,cAAAA,EAAyBC,OAAAA,CAAAA,CAAS,CAAA;AAEnF,EAAA;AAEA,EAAA,OAAOU,WAAAA,CAAYR,OAAOD,SAAAA,CAAAA;AAC9B,CAAA,EA3BkC,oBAAA;AA6B3B,IAAMS,WAAAA,iCAAqBR,KAAAA,EAAcD,SAAAA,GAAuB,QACnEU,IAAAA,CACI,MAAMC,WAAAA,EAAAA,EACN,MAAMC,iBAAAA,IACN,CAAA,EAAGC,YAAAA,CAAaZ,KAAAA,CAAMa,IAAI,CAAA,CAAA,CAAA,EAAKC,YAAYd,KAAAA,EAAOD,SAAAA,CAAAA,CAAAA,CAAY,CAAA,EAJ3C,aAAA;AAOpB,IAAMe,8BAAc,MAAA,CAAA,CAAC,EAAEC,UAAUC,KAAAA,EAAK,EAAWjB,YAAuB,GAAA,KAC3E;AAAIkB,EAAAA,GAAAA,MAAAA,CAAOC,OAAAA,CAAQH,QAAAA,CAAAA,CAAUI,IAAAA,GAAOC,IAAAA,EAAI;KAAQJ,KAAAA,GAAQ;AAAC,IAAA,OAAA;AAASA,IAAAA;MAAS;AAAKP,CAAAA,CAAAA,IAAAA,CAAKV,SAAAA,CAAAA,EAD9D,aAAA;AAIpB,IAAMsB,aAAAA,2BAAiBC,MAAAA,KAAAA;AAC1B,EAAA,IAAIA,MAAAA,CAAOC,SAAS,MAAA,EAAQ;AACxB,IAAA,OAAO,CAAA,EAAGD,MAAAA,CAAOE,QAAQ,CAAA,CAAA,EAAIF,OAAOG,aAAa,CAAA,CAAA;AACrD,EAAA;AAEA,EAAA,MAAMC,UAAAA,GAAa;AAAC,IAAA,kBAAA;IAAoBJ,MAAAA,CAAOT;;AAE/C,EAAA,IAAI,CAACS,OAAOK,MAAAA,EAAQ;AAGhB,IAAA,MAAMC,WAAAA,GAAcC,QAAQC,GAAAA,CAAIC,gBAAAA;AAEhC,IAAA,IAAI,CAACH,WAAAA,EAAa;AACd,MAAA,MAAM,IAAIrB,MAAM,mDAAA,CAAA;AACpB,IAAA;AAEAmB,IAAAA,UAAAA,CAAWM,IAAAA,CAAKC,QAAAA,CAASL,WAAAA,CAAAA,CAAAA;AAC7B,EAAA;AAEA,EAAA,OAAO,GAAGF,UAAAA,CAAWjB,IAAAA,CAAK,GAAA,CAAA,CAAA,CAAA,EAAQa,OAAOG,aAAa,CAAA,CAAA;AAC1D,CAAA,EApB6B,eAAA","file":"CPBLM36K.js","sourcesContent":["import { basename, join } from 'node:path';\n\nimport type { Image, VolumeMapping } from '../config';\nimport { getImageDirectory, getRegistry } from '../config';\nimport type { ChainContext } from '../context';\nimport { findToolVersionsForCombination, getImageName } from './finder';\n\nexport const getImageUriForTool = async <TImageId extends string>(\n    context: ChainContext<TImageId>,\n    toolName: string,\n    version: string,\n    separator: '_' | '-' = '_',\n): Promise<string> => {\n    const [image] = context.versionCombinations.flatMap((combination) => {\n        const imageId = combination.images[toolName];\n\n        if (!imageId) {\n            return [];\n        }\n\n        const image = context.images[imageId];\n\n        return image && findToolVersionsForCombination(context, combination)[toolName] === version\n            ? [image]\n            : [];\n    });\n\n    if (!image) {\n        throw new Error(\n            `No version combination found for tool ${toolName} with version ${version}`,\n        );\n    }\n\n    return getImageUri(image, separator);\n};\n\nexport const getImageUri = async (image: Image, separator: '_' | '-' = '_'): Promise<string> =>\n    join(\n        await getRegistry(),\n        await getImageDirectory(),\n        `${getImageName(image.name)}:${getImageTag(image, separator)}`,\n    );\n\nexport const getImageTag = ({ versions, patch }: Image, separator: '_' | '-' = '_'): string =>\n    [...Object.entries(versions).sort().flat(), ...(patch ? ['patch', patch] : [])].join(separator);\n\n// passing workspaceRoot is necessary for host volumes to resolve relative paths to the workspace root\nexport const getVolumeName = (volume: VolumeMapping): string => {\n    if (volume.type === 'host') {\n        return `${volume.hostPath}:${volume.containerPath}`;\n    }\n\n    const components = ['lz-tooling-cache', volume.name];\n\n    if (!volume.shared) {\n        // This is the package name where the `lz-tool` command is executed.\n        // eslint-disable-next-line turbo/no-undeclared-env-vars\n        const packageName = process.env.npm_package_name;\n\n        if (!packageName) {\n            throw new Error('npm_package_name environment variable not defined');\n        }\n\n        components.push(basename(packageName));\n    }\n\n    return `${components.join('-')}:${volume.containerPath}`;\n};\n"]}

package/dist/{X53USKD4.cjs → CS4PDESK.cjs}

@@ -2,7 +2,7 @@
 
 var T3GK7LED_cjs = require('./T3GK7LED.cjs');
 var A5X4BLYY_cjs = require('./A5X4BLYY.cjs');
-var M7FR43QL_cjs = require('./M7FR43QL.cjs');
+var DHEIAR4N_cjs = require('./DHEIAR4N.cjs');
 var _2Z4Y2ZR3_cjs = require('./2Z4Y2ZR3.cjs');
 var _5GPMTH2I_cjs = require('./5GPMTH2I.cjs');
 var XFDJEDQJ_cjs = require('./XFDJEDQJ.cjs');
@@ -117,7 +117,7 @@ async function executeToolCommand(context, toolName, args, { cwd, volumes: userV
       console.warn("Could not validate secondary version:", T3GK7LED_cjs.stringifyError(error));
     }
   }
-  const imageUri = await M7FR43QL_cjs.getImageUriForTool(context, tool.name, resolvedVersion);
+  const imageUri = await DHEIAR4N_cjs.getImageUriForTool(context, tool.name, resolvedVersion);
   const workspaceRoot = await _2Z4Y2ZR3_cjs.findWorkspaceRoot(cwd);
   const relativePath = path__default.default.relative(workspaceRoot, cwd);
   await ensureDockerImage(imageUri);
@@ -190,7 +190,7 @@ async function executeToolCommand(context, toolName, args, { cwd, volumes: userV
     ] : [],
     ...resolveVolumePaths(volumes, workspaceRoot).flatMap((volume) => [
       "-v",
-      M7FR43QL_cjs.getVolumeName(volume)
+      DHEIAR4N_cjs.getVolumeName(volume)
     ]),
     ...entrypoint ? [
       "--entrypoint",
@@ -216,5 +216,5 @@ async function executeToolCommand(context, toolName, args, { cwd, volumes: userV
 _24WEKBY3_cjs.__name(executeToolCommand, "executeToolCommand");
 
 exports.executeToolCommand = executeToolCommand;
-//# sourceMappingURL=X53USKD4.cjs.map
-//# sourceMappingURL=X53USKD4.cjs.map
+//# sourceMappingURL=CS4PDESK.cjs.map
+//# sourceMappingURL=CS4PDESK.cjs.map

package/dist/{X53USKD4.cjs.map → CS4PDESK.cjs.map}

@@ -1 +1 @@
-{"version":3,"sources":["../src/core/tool-executor.ts"],"names":["init_cjs_shims","getHostUserIds","__name","userInfo","os","uid","gid","undefined","$","verbose","stdio","process","stderr","mergeVolumes","defaultVolumes","userVolumes","uniqBy","volume","containerPath","resolveVolumePaths","volumes","workspaceRoot","map","type","hostPath","path","resolve","replace","homedir","ensureDockerImage","imageUri","output","nothrow","exitCode","console","info","error","Error","stringifyError","join","executeToolCommand","context","toolName","args","cwd","customEntrypoint","entrypoint","env","customEnvVars","script","publish","versions","tool","findToolByName","length","name","overrides","filter","uv","some","dv","resolvedVersion","resolveTypeVersions","getSecondaryVersion","secondaryVersion","satisfies","warn","getImageUriForTool","findWorkspaceRoot","relativePath","relative","trim","defaultEnv","hasDockerSocketMount","v","dockerSocketEnv","value","envArgs","flatMap","hostUserIds","userIdEnvArgs","finalArgs","dockerArgs","privileged","getVolumeName","lockMany","locked","label","time","result","timeEnd"],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAAAA,4BAAA,EAAA;AAqBA,IAAMC,iCAAiBC,oBAAA,CAAA,MAAA;AAEnB,EAAA,MAAMC,QAAAA,GAAWC,oBAAGD,QAAAA,EAAQ;AAC5B,EAAA,IAAIA,QAAAA,CAASE,GAAAA,KAAQ,EAAA,IAAMF,QAAAA,CAASG,QAAQ,EAAA,EAAI;AAC5C,IAAA,OAAOC,MAAAA;AACX,EAAA;AACA,EAAA,OAAO;AAAEF,IAAAA,GAAAA,EAAKF,QAAAA,CAASE,GAAAA;AAAKC,IAAAA,GAAAA,EAAKH,QAAAA,CAASG;AAAI,GAAA;AAClD,CAAA,EAPuB,gBAAA,CAAA;AAUvBE,IAAAA,CAAEC,OAAAA,GAAU,IAAA;AACZD,IAAAA,CAAEE,KAAAA,GAAQ;AAAC,EAAA,SAAA;AAAW,EAAA,MAAA;EAAQC,wBAAAA,CAAQC;;AAMtC,IAAMC,YAAAA,mBAAeX,oBAAA,CAAA,CACjBY,cAAAA,EACAC,WAAAA,KACkBC,gBAAAA,CAAO;AAAID,EAAAA,GAAAA,WAAAA;AAAgBD,EAAAA,GAAAA;GAAiB,CAACG,MAAAA,KAAWA,MAAAA,CAAOC,aAAa,CAAA,EAH7E,cAAA,CAAA;AAWrB,IAAMC,kBAAAA,mBAAqBjB,oBAAA,CAAA,CAACkB,OAAAA,EAA0BC,aAAAA,KAClDD,OAAAA,CAAQE,IAAI,CAACL,MAAAA,KACTA,MAAAA,CAAOM,IAAAA,KAAS,MAAA,GACV;EACI,GAAGN,MAAAA;EACHO,QAAAA,EAAUC,qBAAAA,CAAKC,OAAAA,CACXL,aAAAA,EACAJ,MAAAA,CAAOO,QAAAA,CAASG,QAAQ,IAAA,EAAMvB,mBAAAA,CAAGwB,OAAAA,EAAO,CAAA;AAEhD,CAAA,GACAX,MAAAA,CAAAA,EAVa,oBAAA,CAAA;AAa3B,IAAMY,iBAAAA,+CAA2BC,QAAAA,KAAAA;AAC7B,EAAA,IAAIC,MAAAA;AAEJ,EAAA,IAAI;AAOAA,IAAAA,MAAAA,GAAS,MAAMvB,IAAAA,CAAAA,sCAAAA,EAA0CsB,QAAAA,CAAAA,CAAAA,CAAWE,OAAAA,EAAO;AAC3E,IAAA,IAAI,CAACD,OAAOE,QAAAA,EAAU;AAClBC,MAAAA,OAAAA,CAAQC,IAAAA,CAAK,CAAA,kCAAA,EAAgCL,QAAAA,CAAAA,CAAU,CAAA;AACvD,MAAA;AACJ,IAAA;AAEAI,IAAAA,OAAAA,CAAQC,IAAAA,CAAK,wCAAiCL,QAAAA,CAAAA;AAC9CC,IAAAA,MAAAA,GAAS,MAAMvB,IAAAA,CAAAA,YAAAA,EAAgBsB,QAAAA,CAAAA,CAAAA,CAAWE,OAAAA,EAAO;AACrD,EAAA,CAAA,CAAA,OAASI,KAAAA,EAAgB;AACrB,IAAA,MAAM,IAAIC,MAAM,CAAA,4BAAA,EAA+BP,QAAAA,KAAaQ,2BAAAA,CAAeF,KAAAA,CAAAA,CAAAA,CAAQ,CAAA;AACvF,EAAA;AAEA,EAAA,IAAIL,OAAOE,QAAAA,EAAU;AACjB,IAAA,MAAM,IAAII,KAAAA,CACN;AACI,MAAA,6BAAA;AACA,MAAA,CAAA,WAAA,EAAcP,QAAAA,CAAAA,cAAAA,CAAAA;AACd,MAAA;AACFS,KAAAA,CAAAA,IAAAA,CAAK,IAAA,CAAA,CAAA;AAEf,EAAA;AAEAL,EAAAA,OAAAA,CAAQC,IAAAA,CAAK,CAAA,4BAAA,EAA0BL,QAAAA,CAAAA,CAAU,CAAA;AACrD,CAAA,EAjC0B,mBAAA,CAAA;AAgD1B,eAAsBU,mBAClBC,OAAAA,EACAC,QAAAA,EACAC,IAAAA,EACA,EACIC,KACAxB,OAAAA,EAASL,WAAAA,EACT8B,gBAAAA,EAAkBC,UAAAA,EAClBC,KAAKC,aAAAA,EACLC,MAAAA,EACAC,SACAC,QAAAA,GAAW,IAAE,EACa;AAE9B,EAAA,MAAMC,IAAAA,GAAOC,4BAAAA,CAAeZ,OAAAA,EAASC,QAAAA,CAAAA;AAGrC,EAAA,MAAM5B,cAAAA,GAAiBsC,IAAAA,CAAKtC,cAAAA,IAAkB,EAAA;AAC9C,EAAA,MAAMM,OAAAA,GAAUP,YAAAA,CAAaC,cAAAA,EAAgBC,WAAAA,CAAAA;AAE7C,EAAA,IAAID,cAAAA,CAAewC,SAAS,CAAA,EAAG;AAC3BpB,IAAAA,OAAAA,CAAQC,KAAK,CAAA,gBAAA,EAAYrB,cAAAA,CAAewC,MAAM,CAAA,6BAAA,EAAgCF,IAAAA,CAAKG,IAAI,CAAA,CAAE,CAAA;AACzF,IAAA,IAAIxC,WAAAA,CAAYuC,SAAS,CAAA,EAAG;AACxB,MAAA,MAAME,SAAAA,GAAYzC,WAAAA,CAAY0C,MAAAA,CAAO,CAACC,EAAAA,KAClC5C,cAAAA,CAAe6C,IAAAA,CAAK,CAACC,EAAAA,KAAOA,EAAAA,CAAG1C,aAAAA,KAAkBwC,EAAAA,CAAGxC,aAAa,CAAA,CAAA;AAErE,MAAA,IAAIsC,SAAAA,CAAUF,SAAS,CAAA,EAAG;AACtBpB,QAAAA,OAAAA,CAAQC,IAAAA,CAAK,CAAA,gCAAA,EAA4BqB,SAAAA,CAAUF,MAAM,CAAA,kBAAA,CAAoB,CAAA;AACjF,MAAA;AACJ,IAAA;AACJ,EAAA;AAGA,EAAA,MAAMO,kBAAkBC,gCAAAA,CAAoBrB,OAAAA,EAASU,QAAAA,CAAAA,CAAUC,KAAKG,IAAI,CAAA;AAExE,EAAA,IAAI,CAACM,eAAAA,EAAiB;AAClB,IAAA,MAAM,IAAIxB,KAAAA,CAAM,CAAA,6BAAA,EAAgCe,IAAAA,CAAKG,IAAI,CAAA,CAAE,CAAA;AAC/D,EAAA;AAEArB,EAAAA,OAAAA,CAAQC,KAAK,CAAA,UAAA,EAAMiB,IAAAA,CAAKG,IAAI,CAAA,UAAA,EAAaM,eAAAA,CAAAA,CAAiB,CAAA;AAG1D,EAAA,IAAIT,KAAKW,mBAAAA,EAAqB;AAC1B,IAAA,IAAI;AACA,MAAA,MAAMC,gBAAAA,GAAmB,MAAMZ,IAAAA,CAAKW,mBAAAA,CAAoB;AAAEnB,QAAAA;OAAI,CAAA;AAE9D,MAAA,IAAI,CAAQqB,iBAAAA,CAAAA,SAAAA,CAAUD,gBAAAA,EAAkBH,eAAAA,CAAAA,EAAkB;AACtD3B,QAAAA,OAAAA,CAAQgC,IAAAA,CACJ,CAAA,sCAAA,EAAyCF,gBAAAA,CAAAA,iCAAAA,EAAoDH,eAAAA,CAAAA,CAAAA,CAAkB,CAAA;AAEvH,MAAA;AACJ,IAAA,CAAA,CAAA,OAASzB,KAAAA,EAAO;AAEZF,MAAAA,OAAAA,CAAQgC,IAAAA,CAAK,uCAAA,EAAyC5B,2BAAAA,CAAeF,KAAAA,CAAAA,CAAAA;AACzE,IAAA;AACJ,EAAA;AAGA,EAAA,MAAMN,WAAW,MAAMqC,+BAAAA,CAAmB1B,OAAAA,EAASW,IAAAA,CAAKG,MAAMM,eAAAA,CAAAA;AAC9D,EAAA,MAAMxC,aAAAA,GAAgB,MAAM+C,+BAAAA,CAAkBxB,GAAAA,CAAAA;AAC9C,EAAA,MAAMyB,YAAAA,GAAe5C,qBAAAA,CAAK6C,QAAAA,CAASjD,aAAAA,EAAeuB,GAAAA,CAAAA;AAElD,EAAA,MAAMf,kBAAkBC,QAAAA,CAAAA;AAExB,EAAA,IAAIgB,UAAAA,EAAYyB,MAAAA,EAAQ;AACpBrC,IAAAA,OAAAA,CAAQC,IAAAA,CAAK,CAAA,mCAAA,EAA+BW,UAAAA,CAAAA,CAAY,CAAA;AAC5D,EAAA;AAGA,EAAA,MAAM0B,UAAAA,GAAapB,IAAAA,CAAKoB,UAAAA,IAAc,EAAA;AAItC,EAAA,MAAMC,oBAAAA,GAAuBrD,OAAAA,CAAQuC,IAAAA,CACjC,CAACe,CAAAA,KAAMA,EAAEnD,IAAAA,KAAS,MAAA,IAAUmD,CAAAA,CAAExD,aAAAA,KAAkB,sBAAA,CAAA;AAEpD,EAAA,MAAMyD,kBAAyCF,oBAAAA,GACzC;AACI,IAAA;MAAElB,IAAAA,EAAM,UAAA;MAAYqB,KAAAA,EAAOhC;AAAI,KAAA;AAC/B,IAAA;MAAEW,IAAAA,EAAM,qBAAA;MAAuBqB,KAAAA,EAAOvD;AAAc;MAExD,EAAA;AAEN,EAAA,MAAMwD,UAAU7D,gBAAAA,CACZ;AAAIgC,IAAAA,GAAAA,aAAAA;AAAkB2B,IAAAA,GAAAA,eAAAA;AAAoBH,IAAAA,GAAAA;KAC1C,CAAC,EAAEjB,IAAAA,EAAI,KAAOA,IAAAA,CAAAA,CAChBuB,QAAQ,CAAC,EAAEvB,IAAAA,EAAMqB,KAAAA,EAAK,KAAO;AAAC,IAAA,IAAA;IAAM,CAAA,EAAGrB,IAAAA,IAAQqB,KAAAA,CAAAA;AAAQ,GAAA,CAAA;AAKzD,EAAA,MAAMG,cAAc9E,cAAAA,EAAAA;AACpB,EAAA,MAAM+E,gBAAgBD,WAAAA,GAChB;AAAC,IAAA,IAAA;AAAM,IAAA,CAAA,UAAA,EAAaA,YAAY1E,GAAG,CAAA,CAAA;AAAI,IAAA,IAAA;AAAM,IAAA,CAAA,UAAA,EAAa0E,YAAYzE,GAAG,CAAA;MACzE,EAAA;AAEN4B,EAAAA,OAAAA,CAAQC,KAAK,CAAA,uCAAA,EAAmC4C,WAAAA,EAAa1E,GAAAA,CAAAA,CAAAA,EAAO0E,WAAAA,EAAazE,GAAAA,CAAAA,CAAK,CAAA;AAEtF,EAAA,IAAIkE,UAAAA,CAAWlB,SAAS,CAAA,EAAG;AACvBpB,IAAAA,OAAAA,CAAQC,KACJ,CAAA,gBAAA,EAAYqC,UAAAA,CAAWlB,MAAM,CAAA,qCAAA,EAAwCF,IAAAA,CAAKG,IAAI,CAAA,CAAE,CAAA;AAExF,EAAA;AACA,EAAA,IAAIP,aAAAA,CAAcM,SAAS,CAAA,EAAG;AAC1BpB,IAAAA,OAAAA,CAAQC,IAAAA,CAAK,CAAA,gBAAA,EAAYa,aAAAA,CAAcM,MAAM,CAAA,+BAAA,CAAiC,CAAA;AAClF,EAAA;AAGA,EAAA,IAAI2B,SAAAA;AACJ,EAAA,IAAIhC,MAAAA,IAAUA,MAAAA,CAAOsB,IAAAA,EAAI,KAAO,EAAA,EAAI;AAChCrC,IAAAA,OAAAA,CAAQC,IAAAA,CAAK,CAAA,mCAAA,EAA+Bc,MAAAA,CAAAA,CAAQ,CAAA;AACpDgC,IAAAA,SAAAA,GAAY;AAAC,MAAA,MAAA;AAAQ,MAAA,IAAA;AAAMhC,MAAAA;;EAC/B,CAAA,MAAO;AACHgC,IAAAA,SAAAA,GAAYnC,eAAevC,MAAAA,GAAY;MAAC6C,IAAAA,CAAKG,IAAAA;AAASZ,MAAAA,GAAAA;AAAQA,KAAAA,GAAAA,IAAAA;AAClE,EAAA;AAGA,EAAA,MAAMuC,UAAAA,GAAa;AACf,IAAA,KAAA;AACI9B,IAAAA,GAAAA,IAAAA,CAAK+B,UAAAA,GAAa;AAAC,MAAA;QAAkB,EAAA;AACzC,IAAA,MAAA;AACGN,IAAAA,GAAAA,OAAAA;AACAG,IAAAA,GAAAA,aAAAA;AACH,IAAA,IAAA;AACA,IAAA,CAAA,EAAG3D,aAAAA,CAAAA,WAAAA,CAAAA;AACH,IAAA,IAAA;AACA,IAAA,CAAA,WAAA,EAAcgD,YAAAA,CAAAA,CAAAA;OACVnB,OAAAA,GAAU;AAAC,MAAA,IAAA;AAAMA,MAAAA,OAAAA,CAAQqB,IAAAA;QAAU,EAAA;AACpCpD,IAAAA,GAAAA,kBAAAA,CAAmBC,OAAAA,EAASC,aAAAA,CAAAA,CAAeyD,OAAAA,CAAQ,CAAC7D,MAAAA,KAAW;AAC9D,MAAA,IAAA;AACAmE,MAAAA,0BAAAA,CAAcnE,MAAAA;AACjB,KAAA,CAAA;OACG6B,UAAAA,GAAa;AAAC,MAAA,cAAA;AAAgBA,MAAAA;QAAc,EAAA;AAChDhB,IAAAA,QAAAA;AACGmD,IAAAA,GAAAA;;AAGP,EAAA,MAAMlD,MAAAA,GAAS,MAAMsD,qBAAAA,CACjBjE,OAAAA,CAAQ0D,OAAAA,CAAQ,CAAC7D,MAAAA,KACbA,MAAAA,CAAOM,IAAAA,KAAS,SAAA,IAAaN,MAAAA,CAAOqE,MAAAA,GAAS;IAACrE,MAAAA,CAAOsC;MAAQ,EAAE,GAEnE,YAAA;AACI,IAAA,MAAMgC,KAAAA,GAAQ,CAAA,aAAA,EAAMN,SAAAA,CAAU1C,IAAAA,CAAK,GAAA,CAAA,CAAA,CAAA;AACnCL,IAAAA,OAAAA,CAAQsD,KAAKD,KAAAA,CAAAA;AACb,IAAA,MAAME,MAAAA,GAAS,MAAMjF,IAAAA,CAAAA,OAAAA,EAAW0E,UAAAA,GAAalD,OAAAA,EAAO;AACpDE,IAAAA,OAAAA,CAAQwD,QAAQH,KAAAA,CAAAA;AAEhB,IAAA,OAAOE,MAAAA;EACX,CAAA,CAAA;AAGJ,EAAA,IAAI1D,OAAOE,QAAAA,EAAU;AACjB,IAAA,MAAM,IAAII,KAAAA,CAAM,CAAA,2CAAA,EAA8CN,MAAAA,CAAOE,QAAQ,CAAA,CAAA,CAAG,CAAA;AACpF,EAAA;AAEA,EAAA,OAAOF,MAAAA;AACX;AA5JsBS,oBAAAA,CAAAA,kBAAAA,EAAAA,oBAAAA,CAAAA","file":"X53USKD4.cjs","sourcesContent":["import { uniqBy } from 'es-toolkit';\nimport os from 'node:os';\nimport path from 'node:path';\nimport process from 'node:process';\nimport * as semver from 'semver';\nimport { $, type ProcessOutput } from 'zx';\n\nimport type { EnvironmentVariable, VolumeMapping } from '../config';\nimport type { ChainContext } from '../context';\nimport { findWorkspaceRoot } from '../utils';\nimport { getImageUriForTool, getVolumeName } from '../utils/docker';\nimport { stringifyError } from '../utils/error';\nimport { findToolByName } from '../utils/finder';\nimport { lockMany } from './lock';\nimport { resolveTypeVersions } from './version-resolver';\n\n/**\n * Get the current user's UID and GID for Docker container user matching.\n * This prevents permission issues when containers write to bind-mounted directories.\n * On Windows, returns undefined as UID/GID matching is not needed.\n */\nconst getHostUserIds = (): { uid: number; gid: number } | undefined => {\n    // os.userInfo() returns uid/gid on POSIX systems, -1 on Windows\n    const userInfo = os.userInfo();\n    if (userInfo.uid === -1 || userInfo.gid === -1) {\n        return undefined;\n    }\n    return { uid: userInfo.uid, gid: userInfo.gid };\n};\n\n// Configure zx to inherit stdio by default (moved from original setup)\n$.verbose = true;\n$.stdio = ['inherit', 'pipe', process.stderr];\n\n/**\n * Merge default volumes with user-specified volumes\n * User volumes take precedence when containerPath conflicts\n */\nconst mergeVolumes = (\n    defaultVolumes: readonly VolumeMapping[],\n    userVolumes: readonly VolumeMapping[],\n): VolumeMapping[] => uniqBy([...userVolumes, ...defaultVolumes], (volume) => volume.containerPath);\n\n/**\n * Resolve host paths in volumes to absolute paths\n * - Paths starting with ~ are resolved to home directory\n * - Relative paths (starting with . or no prefix) are resolved to workspace root\n * - Absolute paths are left unchanged\n */\nconst resolveVolumePaths = (volumes: VolumeMapping[], workspaceRoot: string): VolumeMapping[] =>\n    volumes.map((volume) =>\n        volume.type === 'host'\n            ? {\n                  ...volume,\n                  hostPath: path.resolve(\n                      workspaceRoot,\n                      volume.hostPath.replace(/^~/, os.homedir()),\n                  ),\n              }\n            : volume,\n    );\n\nconst ensureDockerImage = async (imageUri: string): Promise<void> => {\n    let output: ProcessOutput;\n\n    try {\n        // Check local images first.\n        //\n        // NOTE: `docker image ls <ref>` prints repository/tag in separate columns, so\n        // `stdout.includes(<full-ref>)` is not reliable. Use `inspect` instead: exitCode=0\n        // means the image exists locally.\n        // Keep output minimal to avoid dumping full inspect JSON into CI logs.\n        output = await $`docker image inspect --format {{.Id}} ${imageUri}`.nothrow();\n        if (!output.exitCode) {\n            console.info(`✅ Using cached Docker image: ${imageUri}`);\n            return;\n        }\n\n        console.info('📥 Pulling Docker image from:', imageUri);\n        output = await $`docker pull ${imageUri}`.nothrow();\n    } catch (error: unknown) {\n        throw new Error(`Failed to pull Docker image ${imageUri}: ${stringifyError(error)}`);\n    }\n\n    if (output.exitCode) {\n        throw new Error(\n            [\n                'Docker image not available:',\n                `  - Image: ${imageUri} (pull failed)`,\n                '  - Check if the image tag exists in image registry.',\n            ].join('\\n'),\n        );\n    }\n\n    console.info(`✅ Successfully pulled: ${imageUri}`);\n};\n\nexport interface ToolCommandExecutionOptions {\n    cwd: string;\n    volumes: readonly VolumeMapping[];\n    customEntrypoint?: string;\n    env: EnvironmentVariable[];\n    script?: string;\n    publish?: string;\n    versions?: Record<string, string>;\n}\n\n/**\n * Enhanced tool command execution using the new version compatibility matrix system\n */\nexport async function executeToolCommand<TImageId extends string>(\n    context: ChainContext<TImageId>,\n    toolName: string,\n    args: string[],\n    {\n        cwd,\n        volumes: userVolumes,\n        customEntrypoint: entrypoint,\n        env: customEnvVars,\n        script,\n        publish,\n        versions = {},\n    }: ToolCommandExecutionOptions,\n): Promise<ProcessOutput> {\n    const tool = findToolByName(context, toolName);\n\n    // Merge default volumes with user-specified volumes\n    const defaultVolumes = tool.defaultVolumes ?? [];\n    const volumes = mergeVolumes(defaultVolumes, userVolumes);\n\n    if (defaultVolumes.length > 0) {\n        console.info(`📦 Using ${defaultVolumes.length} default cache volume(s) for ${tool.name}`);\n        if (userVolumes.length > 0) {\n            const overrides = userVolumes.filter((uv) =>\n                defaultVolumes.some((dv) => dv.containerPath === uv.containerPath),\n            );\n            if (overrides.length > 0) {\n                console.info(`🔧 User volumes override ${overrides.length} default volume(s)`);\n            }\n        }\n    }\n\n    // Get the resolved version for the current tool.\n    const resolvedVersion = resolveTypeVersions(context, versions)[tool.name];\n\n    if (!resolvedVersion) {\n        throw new Error(`No version resolved for tool ${tool.name}`);\n    }\n\n    console.info(`🔧 ${tool.name} version: ${resolvedVersion}`);\n\n    // Check secondary version validation if available\n    if (tool.getSecondaryVersion) {\n        try {\n            const secondaryVersion = await tool.getSecondaryVersion({ cwd });\n\n            if (!semver.satisfies(secondaryVersion, resolvedVersion)) {\n                console.warn(\n                    `Warning: Local configuration version (${secondaryVersion}) differs from resolved version (${resolvedVersion})`,\n                );\n            }\n        } catch (error) {\n            // Secondary version check failed, but continue with resolved version\n            console.warn('Could not validate secondary version:', stringifyError(error));\n        }\n    }\n\n    // Use Docker image with merged volumes\n    const imageUri = await getImageUriForTool(context, tool.name, resolvedVersion);\n    const workspaceRoot = await findWorkspaceRoot(cwd);\n    const relativePath = path.relative(workspaceRoot, cwd);\n\n    await ensureDockerImage(imageUri);\n\n    if (entrypoint?.trim()) {\n        console.info(`🔧 Using custom entrypoint: ${entrypoint}`);\n    }\n\n    // Merge default env vars with custom env vars (custom takes precedence)\n    const defaultEnv = tool.defaultEnv ?? [];\n\n    // Check if Docker socket is mounted (for tools that spawn Docker containers like anchor --verifiable)\n    // If so, inject HOST_CWD and HOST_WORKSPACE_ROOT so the inner container knows the host paths\n    const hasDockerSocketMount = volumes.some(\n        (v) => v.type === 'host' && v.containerPath === '/var/run/docker.sock',\n    );\n    const dockerSocketEnv: EnvironmentVariable[] = hasDockerSocketMount\n        ? [\n              { name: 'HOST_CWD', value: cwd },\n              { name: 'HOST_WORKSPACE_ROOT', value: workspaceRoot },\n          ]\n        : [];\n\n    const envArgs = uniqBy(\n        [...customEnvVars, ...dockerSocketEnv, ...defaultEnv],\n        ({ name }) => name,\n    ).flatMap(({ name, value }) => ['-e', `${name}=${value}`]);\n\n    // Add host user UID/GID for permission matching on Linux/macOS\n    // This prevents artifacts created in containers from having root ownership\n    // Currently only used for stellar which has an entrypoint that handles UID/GID\n    const hostUserIds = getHostUserIds();\n    const userIdEnvArgs = hostUserIds\n        ? ['-e', `LOCAL_UID=${hostUserIds.uid}`, '-e', `LOCAL_GID=${hostUserIds.gid}`]\n        : [];\n\n    console.info(`👤 Running container as UID:GID ${hostUserIds?.uid}:${hostUserIds?.gid}`);\n\n    if (defaultEnv.length > 0) {\n        console.info(\n            `🌍 Using ${defaultEnv.length} default environment variable(s) for ${tool.name}`,\n        );\n    }\n    if (customEnvVars.length > 0) {\n        console.info(`🌍 Using ${customEnvVars.length} custom environment variable(s)`);\n    }\n\n    // Handle custom script execution\n    let finalArgs: string[];\n    if (script && script.trim() !== '') {\n        console.info(`📜 Executing custom script: ${script}`);\n        finalArgs = ['bash', '-c', script];\n    } else {\n        finalArgs = entrypoint === undefined ? [tool.name, ...args] : args;\n    }\n\n    // Build the Docker command with proper argument separation\n    const dockerArgs = [\n        'run',\n        ...(tool.privileged ? ['--privileged'] : []),\n        '--rm',\n        ...envArgs,\n        ...userIdEnvArgs,\n        '-v',\n        `${workspaceRoot}:/workspace`,\n        '-w',\n        `/workspace/${relativePath}`,\n        ...(publish ? ['-p', publish.trim()] : []),\n        ...resolveVolumePaths(volumes, workspaceRoot).flatMap((volume) => [\n            '-v',\n            getVolumeName(volume),\n        ]),\n        ...(entrypoint ? ['--entrypoint', entrypoint] : []),\n        imageUri,\n        ...finalArgs,\n    ];\n\n    const output = await lockMany(\n        volumes.flatMap((volume) =>\n            volume.type === 'isolate' && volume.locked ? [volume.name] : [],\n        ),\n        async () => {\n            const label = `⏱️ ${finalArgs.join(' ')}`;\n            console.time(label);\n            const result = await $`docker ${dockerArgs}`.nothrow();\n            console.timeEnd(label);\n\n            return result;\n        },\n    );\n\n    if (output.exitCode) {\n        throw new Error(`Failed to run Docker container (exit code: ${output.exitCode})`);\n    }\n\n    return output;\n}\n"]}
+{"version":3,"sources":["../src/core/tool-executor.ts"],"names":["init_cjs_shims","getHostUserIds","__name","userInfo","os","uid","gid","undefined","$","verbose","stdio","process","stderr","mergeVolumes","defaultVolumes","userVolumes","uniqBy","volume","containerPath","resolveVolumePaths","volumes","workspaceRoot","map","type","hostPath","path","resolve","replace","homedir","ensureDockerImage","imageUri","output","nothrow","exitCode","console","info","error","Error","stringifyError","join","executeToolCommand","context","toolName","args","cwd","customEntrypoint","entrypoint","env","customEnvVars","script","publish","versions","tool","findToolByName","length","name","overrides","filter","uv","some","dv","resolvedVersion","resolveTypeVersions","getSecondaryVersion","secondaryVersion","satisfies","warn","getImageUriForTool","findWorkspaceRoot","relativePath","relative","trim","defaultEnv","hasDockerSocketMount","v","dockerSocketEnv","value","envArgs","flatMap","hostUserIds","userIdEnvArgs","finalArgs","dockerArgs","privileged","getVolumeName","lockMany","locked","label","time","result","timeEnd"],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAAAA,4BAAA,EAAA;AAqBA,IAAMC,iCAAiBC,oBAAA,CAAA,MAAA;AAEnB,EAAA,MAAMC,QAAAA,GAAWC,oBAAGD,QAAAA,EAAQ;AAC5B,EAAA,IAAIA,QAAAA,CAASE,GAAAA,KAAQ,EAAA,IAAMF,QAAAA,CAASG,QAAQ,EAAA,EAAI;AAC5C,IAAA,OAAOC,MAAAA;AACX,EAAA;AACA,EAAA,OAAO;AAAEF,IAAAA,GAAAA,EAAKF,QAAAA,CAASE,GAAAA;AAAKC,IAAAA,GAAAA,EAAKH,QAAAA,CAASG;AAAI,GAAA;AAClD,CAAA,EAPuB,gBAAA,CAAA;AAUvBE,IAAAA,CAAEC,OAAAA,GAAU,IAAA;AACZD,IAAAA,CAAEE,KAAAA,GAAQ;AAAC,EAAA,SAAA;AAAW,EAAA,MAAA;EAAQC,wBAAAA,CAAQC;;AAMtC,IAAMC,YAAAA,mBAAeX,oBAAA,CAAA,CACjBY,cAAAA,EACAC,WAAAA,KACkBC,gBAAAA,CAAO;AAAID,EAAAA,GAAAA,WAAAA;AAAgBD,EAAAA,GAAAA;GAAiB,CAACG,MAAAA,KAAWA,MAAAA,CAAOC,aAAa,CAAA,EAH7E,cAAA,CAAA;AAWrB,IAAMC,kBAAAA,mBAAqBjB,oBAAA,CAAA,CAACkB,OAAAA,EAA0BC,aAAAA,KAClDD,OAAAA,CAAQE,IAAI,CAACL,MAAAA,KACTA,MAAAA,CAAOM,IAAAA,KAAS,MAAA,GACV;EACI,GAAGN,MAAAA;EACHO,QAAAA,EAAUC,qBAAAA,CAAKC,OAAAA,CACXL,aAAAA,EACAJ,MAAAA,CAAOO,QAAAA,CAASG,QAAQ,IAAA,EAAMvB,mBAAAA,CAAGwB,OAAAA,EAAO,CAAA;AAEhD,CAAA,GACAX,MAAAA,CAAAA,EAVa,oBAAA,CAAA;AAa3B,IAAMY,iBAAAA,+CAA2BC,QAAAA,KAAAA;AAC7B,EAAA,IAAIC,MAAAA;AAEJ,EAAA,IAAI;AAOAA,IAAAA,MAAAA,GAAS,MAAMvB,IAAAA,CAAAA,sCAAAA,EAA0CsB,QAAAA,CAAAA,CAAAA,CAAWE,OAAAA,EAAO;AAC3E,IAAA,IAAI,CAACD,OAAOE,QAAAA,EAAU;AAClBC,MAAAA,OAAAA,CAAQC,IAAAA,CAAK,CAAA,kCAAA,EAAgCL,QAAAA,CAAAA,CAAU,CAAA;AACvD,MAAA;AACJ,IAAA;AAEAI,IAAAA,OAAAA,CAAQC,IAAAA,CAAK,wCAAiCL,QAAAA,CAAAA;AAC9CC,IAAAA,MAAAA,GAAS,MAAMvB,IAAAA,CAAAA,YAAAA,EAAgBsB,QAAAA,CAAAA,CAAAA,CAAWE,OAAAA,EAAO;AACrD,EAAA,CAAA,CAAA,OAASI,KAAAA,EAAgB;AACrB,IAAA,MAAM,IAAIC,MAAM,CAAA,4BAAA,EAA+BP,QAAAA,KAAaQ,2BAAAA,CAAeF,KAAAA,CAAAA,CAAAA,CAAQ,CAAA;AACvF,EAAA;AAEA,EAAA,IAAIL,OAAOE,QAAAA,EAAU;AACjB,IAAA,MAAM,IAAII,KAAAA,CACN;AACI,MAAA,6BAAA;AACA,MAAA,CAAA,WAAA,EAAcP,QAAAA,CAAAA,cAAAA,CAAAA;AACd,MAAA;AACFS,KAAAA,CAAAA,IAAAA,CAAK,IAAA,CAAA,CAAA;AAEf,EAAA;AAEAL,EAAAA,OAAAA,CAAQC,IAAAA,CAAK,CAAA,4BAAA,EAA0BL,QAAAA,CAAAA,CAAU,CAAA;AACrD,CAAA,EAjC0B,mBAAA,CAAA;AAgD1B,eAAsBU,mBAClBC,OAAAA,EACAC,QAAAA,EACAC,IAAAA,EACA,EACIC,KACAxB,OAAAA,EAASL,WAAAA,EACT8B,gBAAAA,EAAkBC,UAAAA,EAClBC,KAAKC,aAAAA,EACLC,MAAAA,EACAC,SACAC,QAAAA,GAAW,IAAE,EACa;AAE9B,EAAA,MAAMC,IAAAA,GAAOC,4BAAAA,CAAeZ,OAAAA,EAASC,QAAAA,CAAAA;AAGrC,EAAA,MAAM5B,cAAAA,GAAiBsC,IAAAA,CAAKtC,cAAAA,IAAkB,EAAA;AAC9C,EAAA,MAAMM,OAAAA,GAAUP,YAAAA,CAAaC,cAAAA,EAAgBC,WAAAA,CAAAA;AAE7C,EAAA,IAAID,cAAAA,CAAewC,SAAS,CAAA,EAAG;AAC3BpB,IAAAA,OAAAA,CAAQC,KAAK,CAAA,gBAAA,EAAYrB,cAAAA,CAAewC,MAAM,CAAA,6BAAA,EAAgCF,IAAAA,CAAKG,IAAI,CAAA,CAAE,CAAA;AACzF,IAAA,IAAIxC,WAAAA,CAAYuC,SAAS,CAAA,EAAG;AACxB,MAAA,MAAME,SAAAA,GAAYzC,WAAAA,CAAY0C,MAAAA,CAAO,CAACC,EAAAA,KAClC5C,cAAAA,CAAe6C,IAAAA,CAAK,CAACC,EAAAA,KAAOA,EAAAA,CAAG1C,aAAAA,KAAkBwC,EAAAA,CAAGxC,aAAa,CAAA,CAAA;AAErE,MAAA,IAAIsC,SAAAA,CAAUF,SAAS,CAAA,EAAG;AACtBpB,QAAAA,OAAAA,CAAQC,IAAAA,CAAK,CAAA,gCAAA,EAA4BqB,SAAAA,CAAUF,MAAM,CAAA,kBAAA,CAAoB,CAAA;AACjF,MAAA;AACJ,IAAA;AACJ,EAAA;AAGA,EAAA,MAAMO,kBAAkBC,gCAAAA,CAAoBrB,OAAAA,EAASU,QAAAA,CAAAA,CAAUC,KAAKG,IAAI,CAAA;AAExE,EAAA,IAAI,CAACM,eAAAA,EAAiB;AAClB,IAAA,MAAM,IAAIxB,KAAAA,CAAM,CAAA,6BAAA,EAAgCe,IAAAA,CAAKG,IAAI,CAAA,CAAE,CAAA;AAC/D,EAAA;AAEArB,EAAAA,OAAAA,CAAQC,KAAK,CAAA,UAAA,EAAMiB,IAAAA,CAAKG,IAAI,CAAA,UAAA,EAAaM,eAAAA,CAAAA,CAAiB,CAAA;AAG1D,EAAA,IAAIT,KAAKW,mBAAAA,EAAqB;AAC1B,IAAA,IAAI;AACA,MAAA,MAAMC,gBAAAA,GAAmB,MAAMZ,IAAAA,CAAKW,mBAAAA,CAAoB;AAAEnB,QAAAA;OAAI,CAAA;AAE9D,MAAA,IAAI,CAAQqB,iBAAAA,CAAAA,SAAAA,CAAUD,gBAAAA,EAAkBH,eAAAA,CAAAA,EAAkB;AACtD3B,QAAAA,OAAAA,CAAQgC,IAAAA,CACJ,CAAA,sCAAA,EAAyCF,gBAAAA,CAAAA,iCAAAA,EAAoDH,eAAAA,CAAAA,CAAAA,CAAkB,CAAA;AAEvH,MAAA;AACJ,IAAA,CAAA,CAAA,OAASzB,KAAAA,EAAO;AAEZF,MAAAA,OAAAA,CAAQgC,IAAAA,CAAK,uCAAA,EAAyC5B,2BAAAA,CAAeF,KAAAA,CAAAA,CAAAA;AACzE,IAAA;AACJ,EAAA;AAGA,EAAA,MAAMN,WAAW,MAAMqC,+BAAAA,CAAmB1B,OAAAA,EAASW,IAAAA,CAAKG,MAAMM,eAAAA,CAAAA;AAC9D,EAAA,MAAMxC,aAAAA,GAAgB,MAAM+C,+BAAAA,CAAkBxB,GAAAA,CAAAA;AAC9C,EAAA,MAAMyB,YAAAA,GAAe5C,qBAAAA,CAAK6C,QAAAA,CAASjD,aAAAA,EAAeuB,GAAAA,CAAAA;AAElD,EAAA,MAAMf,kBAAkBC,QAAAA,CAAAA;AAExB,EAAA,IAAIgB,UAAAA,EAAYyB,MAAAA,EAAQ;AACpBrC,IAAAA,OAAAA,CAAQC,IAAAA,CAAK,CAAA,mCAAA,EAA+BW,UAAAA,CAAAA,CAAY,CAAA;AAC5D,EAAA;AAGA,EAAA,MAAM0B,UAAAA,GAAapB,IAAAA,CAAKoB,UAAAA,IAAc,EAAA;AAItC,EAAA,MAAMC,oBAAAA,GAAuBrD,OAAAA,CAAQuC,IAAAA,CACjC,CAACe,CAAAA,KAAMA,EAAEnD,IAAAA,KAAS,MAAA,IAAUmD,CAAAA,CAAExD,aAAAA,KAAkB,sBAAA,CAAA;AAEpD,EAAA,MAAMyD,kBAAyCF,oBAAAA,GACzC;AACI,IAAA;MAAElB,IAAAA,EAAM,UAAA;MAAYqB,KAAAA,EAAOhC;AAAI,KAAA;AAC/B,IAAA;MAAEW,IAAAA,EAAM,qBAAA;MAAuBqB,KAAAA,EAAOvD;AAAc;MAExD,EAAA;AAEN,EAAA,MAAMwD,UAAU7D,gBAAAA,CACZ;AAAIgC,IAAAA,GAAAA,aAAAA;AAAkB2B,IAAAA,GAAAA,eAAAA;AAAoBH,IAAAA,GAAAA;KAC1C,CAAC,EAAEjB,IAAAA,EAAI,KAAOA,IAAAA,CAAAA,CAChBuB,QAAQ,CAAC,EAAEvB,IAAAA,EAAMqB,KAAAA,EAAK,KAAO;AAAC,IAAA,IAAA;IAAM,CAAA,EAAGrB,IAAAA,IAAQqB,KAAAA,CAAAA;AAAQ,GAAA,CAAA;AAKzD,EAAA,MAAMG,cAAc9E,cAAAA,EAAAA;AACpB,EAAA,MAAM+E,gBAAgBD,WAAAA,GAChB;AAAC,IAAA,IAAA;AAAM,IAAA,CAAA,UAAA,EAAaA,YAAY1E,GAAG,CAAA,CAAA;AAAI,IAAA,IAAA;AAAM,IAAA,CAAA,UAAA,EAAa0E,YAAYzE,GAAG,CAAA;MACzE,EAAA;AAEN4B,EAAAA,OAAAA,CAAQC,KAAK,CAAA,uCAAA,EAAmC4C,WAAAA,EAAa1E,GAAAA,CAAAA,CAAAA,EAAO0E,WAAAA,EAAazE,GAAAA,CAAAA,CAAK,CAAA;AAEtF,EAAA,IAAIkE,UAAAA,CAAWlB,SAAS,CAAA,EAAG;AACvBpB,IAAAA,OAAAA,CAAQC,KACJ,CAAA,gBAAA,EAAYqC,UAAAA,CAAWlB,MAAM,CAAA,qCAAA,EAAwCF,IAAAA,CAAKG,IAAI,CAAA,CAAE,CAAA;AAExF,EAAA;AACA,EAAA,IAAIP,aAAAA,CAAcM,SAAS,CAAA,EAAG;AAC1BpB,IAAAA,OAAAA,CAAQC,IAAAA,CAAK,CAAA,gBAAA,EAAYa,aAAAA,CAAcM,MAAM,CAAA,+BAAA,CAAiC,CAAA;AAClF,EAAA;AAGA,EAAA,IAAI2B,SAAAA;AACJ,EAAA,IAAIhC,MAAAA,IAAUA,MAAAA,CAAOsB,IAAAA,EAAI,KAAO,EAAA,EAAI;AAChCrC,IAAAA,OAAAA,CAAQC,IAAAA,CAAK,CAAA,mCAAA,EAA+Bc,MAAAA,CAAAA,CAAQ,CAAA;AACpDgC,IAAAA,SAAAA,GAAY;AAAC,MAAA,MAAA;AAAQ,MAAA,IAAA;AAAMhC,MAAAA;;EAC/B,CAAA,MAAO;AACHgC,IAAAA,SAAAA,GAAYnC,eAAevC,MAAAA,GAAY;MAAC6C,IAAAA,CAAKG,IAAAA;AAASZ,MAAAA,GAAAA;AAAQA,KAAAA,GAAAA,IAAAA;AAClE,EAAA;AAGA,EAAA,MAAMuC,UAAAA,GAAa;AACf,IAAA,KAAA;AACI9B,IAAAA,GAAAA,IAAAA,CAAK+B,UAAAA,GAAa;AAAC,MAAA;QAAkB,EAAA;AACzC,IAAA,MAAA;AACGN,IAAAA,GAAAA,OAAAA;AACAG,IAAAA,GAAAA,aAAAA;AACH,IAAA,IAAA;AACA,IAAA,CAAA,EAAG3D,aAAAA,CAAAA,WAAAA,CAAAA;AACH,IAAA,IAAA;AACA,IAAA,CAAA,WAAA,EAAcgD,YAAAA,CAAAA,CAAAA;OACVnB,OAAAA,GAAU;AAAC,MAAA,IAAA;AAAMA,MAAAA,OAAAA,CAAQqB,IAAAA;QAAU,EAAA;AACpCpD,IAAAA,GAAAA,kBAAAA,CAAmBC,OAAAA,EAASC,aAAAA,CAAAA,CAAeyD,OAAAA,CAAQ,CAAC7D,MAAAA,KAAW;AAC9D,MAAA,IAAA;AACAmE,MAAAA,0BAAAA,CAAcnE,MAAAA;AACjB,KAAA,CAAA;OACG6B,UAAAA,GAAa;AAAC,MAAA,cAAA;AAAgBA,MAAAA;QAAc,EAAA;AAChDhB,IAAAA,QAAAA;AACGmD,IAAAA,GAAAA;;AAGP,EAAA,MAAMlD,MAAAA,GAAS,MAAMsD,qBAAAA,CACjBjE,OAAAA,CAAQ0D,OAAAA,CAAQ,CAAC7D,MAAAA,KACbA,MAAAA,CAAOM,IAAAA,KAAS,SAAA,IAAaN,MAAAA,CAAOqE,MAAAA,GAAS;IAACrE,MAAAA,CAAOsC;MAAQ,EAAE,GAEnE,YAAA;AACI,IAAA,MAAMgC,KAAAA,GAAQ,CAAA,aAAA,EAAMN,SAAAA,CAAU1C,IAAAA,CAAK,GAAA,CAAA,CAAA,CAAA;AACnCL,IAAAA,OAAAA,CAAQsD,KAAKD,KAAAA,CAAAA;AACb,IAAA,MAAME,MAAAA,GAAS,MAAMjF,IAAAA,CAAAA,OAAAA,EAAW0E,UAAAA,GAAalD,OAAAA,EAAO;AACpDE,IAAAA,OAAAA,CAAQwD,QAAQH,KAAAA,CAAAA;AAEhB,IAAA,OAAOE,MAAAA;EACX,CAAA,CAAA;AAGJ,EAAA,IAAI1D,OAAOE,QAAAA,EAAU;AACjB,IAAA,MAAM,IAAII,KAAAA,CAAM,CAAA,2CAAA,EAA8CN,MAAAA,CAAOE,QAAQ,CAAA,CAAA,CAAG,CAAA;AACpF,EAAA;AAEA,EAAA,OAAOF,MAAAA;AACX;AA5JsBS,oBAAAA,CAAAA,kBAAAA,EAAAA,oBAAAA,CAAAA","file":"CS4PDESK.cjs","sourcesContent":["import { uniqBy } from 'es-toolkit';\nimport os from 'node:os';\nimport path from 'node:path';\nimport process from 'node:process';\nimport * as semver from 'semver';\nimport { $, type ProcessOutput } from 'zx';\n\nimport type { EnvironmentVariable, VolumeMapping } from '../config';\nimport type { ChainContext } from '../context';\nimport { findWorkspaceRoot } from '../utils';\nimport { getImageUriForTool, getVolumeName } from '../utils/docker';\nimport { stringifyError } from '../utils/error';\nimport { findToolByName } from '../utils/finder';\nimport { lockMany } from './lock';\nimport { resolveTypeVersions } from './version-resolver';\n\n/**\n * Get the current user's UID and GID for Docker container user matching.\n * This prevents permission issues when containers write to bind-mounted directories.\n * On Windows, returns undefined as UID/GID matching is not needed.\n */\nconst getHostUserIds = (): { uid: number; gid: number } | undefined => {\n    // os.userInfo() returns uid/gid on POSIX systems, -1 on Windows\n    const userInfo = os.userInfo();\n    if (userInfo.uid === -1 || userInfo.gid === -1) {\n        return undefined;\n    }\n    return { uid: userInfo.uid, gid: userInfo.gid };\n};\n\n// Configure zx to inherit stdio by default (moved from original setup)\n$.verbose = true;\n$.stdio = ['inherit', 'pipe', process.stderr];\n\n/**\n * Merge default volumes with user-specified volumes\n * User volumes take precedence when containerPath conflicts\n */\nconst mergeVolumes = (\n    defaultVolumes: readonly VolumeMapping[],\n    userVolumes: readonly VolumeMapping[],\n): VolumeMapping[] => uniqBy([...userVolumes, ...defaultVolumes], (volume) => volume.containerPath);\n\n/**\n * Resolve host paths in volumes to absolute paths\n * - Paths starting with ~ are resolved to home directory\n * - Relative paths (starting with . or no prefix) are resolved to workspace root\n * - Absolute paths are left unchanged\n */\nconst resolveVolumePaths = (volumes: VolumeMapping[], workspaceRoot: string): VolumeMapping[] =>\n    volumes.map((volume) =>\n        volume.type === 'host'\n            ? {\n                  ...volume,\n                  hostPath: path.resolve(\n                      workspaceRoot,\n                      volume.hostPath.replace(/^~/, os.homedir()),\n                  ),\n              }\n            : volume,\n    );\n\nconst ensureDockerImage = async (imageUri: string): Promise<void> => {\n    let output: ProcessOutput;\n\n    try {\n        // Check local images first.\n        //\n        // NOTE: `docker image ls <ref>` prints repository/tag in separate columns, so\n        // `stdout.includes(<full-ref>)` is not reliable. Use `inspect` instead: exitCode=0\n        // means the image exists locally.\n        // Keep output minimal to avoid dumping full inspect JSON into CI logs.\n        output = await $`docker image inspect --format {{.Id}} ${imageUri}`.nothrow();\n        if (!output.exitCode) {\n            console.info(`✅ Using cached Docker image: ${imageUri}`);\n            return;\n        }\n\n        console.info('📥 Pulling Docker image from:', imageUri);\n        output = await $`docker pull ${imageUri}`.nothrow();\n    } catch (error: unknown) {\n        throw new Error(`Failed to pull Docker image ${imageUri}: ${stringifyError(error)}`);\n    }\n\n    if (output.exitCode) {\n        throw new Error(\n            [\n                'Docker image not available:',\n                `  - Image: ${imageUri} (pull failed)`,\n                '  - Check if the image tag exists in image registry.',\n            ].join('\\n'),\n        );\n    }\n\n    console.info(`✅ Successfully pulled: ${imageUri}`);\n};\n\nexport interface ToolCommandExecutionOptions {\n    cwd: string;\n    volumes: readonly VolumeMapping[];\n    customEntrypoint?: string;\n    env: EnvironmentVariable[];\n    script?: string;\n    publish?: string;\n    versions?: Record<string, string>;\n}\n\n/**\n * Enhanced tool command execution using the new version compatibility matrix system\n */\nexport async function executeToolCommand<TImageId extends string>(\n    context: ChainContext<TImageId>,\n    toolName: string,\n    args: string[],\n    {\n        cwd,\n        volumes: userVolumes,\n        customEntrypoint: entrypoint,\n        env: customEnvVars,\n        script,\n        publish,\n        versions = {},\n    }: ToolCommandExecutionOptions,\n): Promise<ProcessOutput> {\n    const tool = findToolByName(context, toolName);\n\n    // Merge default volumes with user-specified volumes\n    const defaultVolumes = tool.defaultVolumes ?? [];\n    const volumes = mergeVolumes(defaultVolumes, userVolumes);\n\n    if (defaultVolumes.length > 0) {\n        console.info(`📦 Using ${defaultVolumes.length} default cache volume(s) for ${tool.name}`);\n        if (userVolumes.length > 0) {\n            const overrides = userVolumes.filter((uv) =>\n                defaultVolumes.some((dv) => dv.containerPath === uv.containerPath),\n            );\n            if (overrides.length > 0) {\n                console.info(`🔧 User volumes override ${overrides.length} default volume(s)`);\n            }\n        }\n    }\n\n    // Get the resolved version for the current tool.\n    const resolvedVersion = resolveTypeVersions(context, versions)[tool.name];\n\n    if (!resolvedVersion) {\n        throw new Error(`No version resolved for tool ${tool.name}`);\n    }\n\n    console.info(`🔧 ${tool.name} version: ${resolvedVersion}`);\n\n    // Check secondary version validation if available\n    if (tool.getSecondaryVersion) {\n        try {\n            const secondaryVersion = await tool.getSecondaryVersion({ cwd });\n\n            if (!semver.satisfies(secondaryVersion, resolvedVersion)) {\n                console.warn(\n                    `Warning: Local configuration version (${secondaryVersion}) differs from resolved version (${resolvedVersion})`,\n                );\n            }\n        } catch (error) {\n            // Secondary version check failed, but continue with resolved version\n            console.warn('Could not validate secondary version:', stringifyError(error));\n        }\n    }\n\n    // Use Docker image with merged volumes\n    const imageUri = await getImageUriForTool(context, tool.name, resolvedVersion);\n    const workspaceRoot = await findWorkspaceRoot(cwd);\n    const relativePath = path.relative(workspaceRoot, cwd);\n\n    await ensureDockerImage(imageUri);\n\n    if (entrypoint?.trim()) {\n        console.info(`🔧 Using custom entrypoint: ${entrypoint}`);\n    }\n\n    // Merge default env vars with custom env vars (custom takes precedence)\n    const defaultEnv = tool.defaultEnv ?? [];\n\n    // Check if Docker socket is mounted (for tools that spawn Docker containers like anchor --verifiable)\n    // If so, inject HOST_CWD and HOST_WORKSPACE_ROOT so the inner container knows the host paths\n    const hasDockerSocketMount = volumes.some(\n        (v) => v.type === 'host' && v.containerPath === '/var/run/docker.sock',\n    );\n    const dockerSocketEnv: EnvironmentVariable[] = hasDockerSocketMount\n        ? [\n              { name: 'HOST_CWD', value: cwd },\n              { name: 'HOST_WORKSPACE_ROOT', value: workspaceRoot },\n          ]\n        : [];\n\n    const envArgs = uniqBy(\n        [...customEnvVars, ...dockerSocketEnv, ...defaultEnv],\n        ({ name }) => name,\n    ).flatMap(({ name, value }) => ['-e', `${name}=${value}`]);\n\n    // Add host user UID/GID for permission matching on Linux/macOS\n    // This prevents artifacts created in containers from having root ownership\n    // Currently only used for stellar which has an entrypoint that handles UID/GID\n    const hostUserIds = getHostUserIds();\n    const userIdEnvArgs = hostUserIds\n        ? ['-e', `LOCAL_UID=${hostUserIds.uid}`, '-e', `LOCAL_GID=${hostUserIds.gid}`]\n        : [];\n\n    console.info(`👤 Running container as UID:GID ${hostUserIds?.uid}:${hostUserIds?.gid}`);\n\n    if (defaultEnv.length > 0) {\n        console.info(\n            `🌍 Using ${defaultEnv.length} default environment variable(s) for ${tool.name}`,\n        );\n    }\n    if (customEnvVars.length > 0) {\n        console.info(`🌍 Using ${customEnvVars.length} custom environment variable(s)`);\n    }\n\n    // Handle custom script execution\n    let finalArgs: string[];\n    if (script && script.trim() !== '') {\n        console.info(`📜 Executing custom script: ${script}`);\n        finalArgs = ['bash', '-c', script];\n    } else {\n        finalArgs = entrypoint === undefined ? [tool.name, ...args] : args;\n    }\n\n    // Build the Docker command with proper argument separation\n    const dockerArgs = [\n        'run',\n        ...(tool.privileged ? ['--privileged'] : []),\n        '--rm',\n        ...envArgs,\n        ...userIdEnvArgs,\n        '-v',\n        `${workspaceRoot}:/workspace`,\n        '-w',\n        `/workspace/${relativePath}`,\n        ...(publish ? ['-p', publish.trim()] : []),\n        ...resolveVolumePaths(volumes, workspaceRoot).flatMap((volume) => [\n            '-v',\n            getVolumeName(volume),\n        ]),\n        ...(entrypoint ? ['--entrypoint', entrypoint] : []),\n        imageUri,\n        ...finalArgs,\n    ];\n\n    const output = await lockMany(\n        volumes.flatMap((volume) =>\n            volume.type === 'isolate' && volume.locked ? [volume.name] : [],\n        ),\n        async () => {\n            const label = `⏱️ ${finalArgs.join(' ')}`;\n            console.time(label);\n            const result = await $`docker ${dockerArgs}`.nothrow();\n            console.timeEnd(label);\n\n            return result;\n        },\n    );\n\n    if (output.exitCode) {\n        throw new Error(`Failed to run Docker container (exit code: ${output.exitCode})`);\n    }\n\n    return output;\n}\n"]}

package/dist/{VAGPJO44.cjs → D5GYEVDR.cjs}

@@ -1,6 +1,6 @@
 'use strict';
 
-var M7FR43QL_cjs = require('./M7FR43QL.cjs');
+var DHEIAR4N_cjs = require('./DHEIAR4N.cjs');
 var _24WEKBY3_cjs = require('./24WEKBY3.cjs');
 var child_process = require('child_process');
 var util = require('util');
@@ -82,7 +82,7 @@ var testTools = /* @__PURE__ */ _24WEKBY3_cjs.__name(({ describe, expect, it, be
       it(`has an image ID of ${name}`, () => {
         expect([
           image.name,
-          M7FR43QL_cjs.getImageTag(image, "-")
+          DHEIAR4N_cjs.getImageTag(image, "-")
         ].join(":")).toBe(name);
       });
     }
@@ -93,10 +93,10 @@ var testTools = /* @__PURE__ */ _24WEKBY3_cjs.__name(({ describe, expect, it, be
       if (image.unreleased) {
         continue;
       }
-      describe(M7FR43QL_cjs.getImageTag(image), () => {
+      describe(DHEIAR4N_cjs.getImageTag(image), () => {
         let imageUri;
         beforeAll(async () => {
-          imageUri = await M7FR43QL_cjs.getImageUri(image, "_");
+          imageUri = await DHEIAR4N_cjs.getImageUri(image, "_");
           await ensureImagePulled(imageUri);
         }, PULL_TIMEOUT);
         for (const [tool, expectedVersion] of Object.entries(image.versions)) {
@@ -129,7 +129,7 @@ var testTools = /* @__PURE__ */ _24WEKBY3_cjs.__name(({ describe, expect, it, be
           "inspect",
           "--format",
           "{{ json .Provenance }}",
-          await M7FR43QL_cjs.getImageUri(image, "_")
+          await DHEIAR4N_cjs.getImageUri(image, "_")
         ]);
         expect(provenanceSchema.safeParse(JSON.parse(stdout)).success).toBe(true);
       }, MANIFEST_TEST_TIMEOUT);
@@ -138,5 +138,5 @@ var testTools = /* @__PURE__ */ _24WEKBY3_cjs.__name(({ describe, expect, it, be
 }, "testTools");
 
 exports.testTools = testTools;
-//# sourceMappingURL=VAGPJO44.cjs.map
-//# sourceMappingURL=VAGPJO44.cjs.map
+//# sourceMappingURL=D5GYEVDR.cjs.map
+//# sourceMappingURL=D5GYEVDR.cjs.map

package/dist/{VAGPJO44.cjs.map → D5GYEVDR.cjs.map}

@@ -1 +1 @@
-{"version":3,"sources":["../src/test.ts"],"names":["init_cjs_shims","COMMAND_TIMEOUT","MANIFEST_TEST_TIMEOUT","VERSION_TEST_TIMEOUT","PULL_TIMEOUT","slsaSchema","object","SLSA","provenanceSchema","runCommand","__name","command","args","timeout","promisify","execFile","killSignal","stdout","trim","isImageCached","uri","pullLocks","Map","ensureImagePulled","existingPull","get","console","log","pullPromise","finally","delete","set","testTools","describe","expect","it","beforeAll","images","_versionCombinations","versionCommands","name","image","Object","entries","getImageTag","join","toBe","literalImage","values","unreleased","imageUri","getImageUri","tool","expectedVersion","versions","Array","Error","version","toContain","id","safeParse","JSON","parse","success"],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAAAA,4BAAA,EAAA;AASA,IAAMC,kBAAkB,CAAA,GAAI,GAAA;AAC5B,IAAMC,qBAAAA,GAAwB,GAAA;AAC9B,IAAMC,uBAAuB,EAAA,GAAK,GAAA;AAClC,IAAMC,eAAe,EAAA,GAAK,GAAA;AAE1B,IAAMC,aAAeC,YAAAA,CAAAA,MAAAA,CAAO;EACxBC,IAAAA,EAAQD,YAAAA,CAAAA,MAAAA,CAAO,EAAC;AACpB,CAAA,CAAA;AAGA,IAAME,mBAAqBF,YAAAA,CAAAA,MAAAA,CAAO;AAC9B,EAAA,CAAC,aAAA,GAAgBD,UAAAA;AACjB,EAAA,CAAC,aAAA,GAAgBA;AACrB,CAAA,CAAA;AAEA,IAAMI,UAAAA,mBAAaC,oBAAA,CAAA,OACfC,OAAAA,EACAC,IAAAA,EACAC,OAAAA,GAAUZ,eAAAA,KAAAA,CAGN,MAAMa,cAAAA,CAAUC,sBAAAA,CAAAA,CAAUJ,OAAAA,EAASC,IAAAA,EAAM;AACrCC,EAAAA,OAAAA;EACAG,UAAAA,EAAY;AAChB,CAAA,CAAA,EACFC,MAAAA,CAAOC,IAAAA,EAAI,EAVE,YAAA,CAAA;AAYnB,IAAMC,aAAAA,+CAAuBC,GAAAA,KAAAA;AACzB,EAAA,IAAI;AACA,IAAA,MAAMX,WAAW,QAAA,EAAU;AAAC,MAAA,OAAA;AAAS,MAAA,SAAA;AAAWW,MAAAA;AAAI,KAAA,CAAA;AACpD,IAAA,OAAO,IAAA;EACX,CAAA,CAAA,MAAQ;AACJ,IAAA,OAAO,KAAA;AACX,EAAA;AACJ,CAAA,EAPsB,eAAA,CAAA;AAStB,IAAMC,SAAAA,uBAAgBC,GAAAA,EAAAA;AAEtB,IAAMC,iBAAAA,+CAA2BH,GAAAA,KAAAA;AAC7B,EAAA,MAAMI,YAAAA,GAAeH,SAAAA,CAAUI,GAAAA,CAAIL,GAAAA,CAAAA;AACnC,EAAA,IAAII,YAAAA,EAAc;AACdE,IAAAA,OAAAA,CAAQC,GAAAA,CAAI,CAAA,oCAAA,EAAkCP,GAAAA,CAAAA,CAAK,CAAA;AACnD,IAAA,OAAOI,YAAAA;AACX,EAAA;AAEA,EAAA,MAAMI,eAAe,YAAA;AACjB,IAAA,IAAI,MAAMT,aAAAA,CAAcC,GAAAA,CAAAA,EAAM;AAC1BM,MAAAA,OAAAA,CAAQC,GAAAA,CAAI,CAAA,6BAAA,EAA2BP,GAAAA,CAAAA,CAAK,CAAA;AAC5C,MAAA;AACJ,IAAA;AACAM,IAAAA,OAAAA,CAAQC,GAAAA,CAAI,CAAA,yBAAA,EAAqBP,GAAAA,CAAAA,CAAK,CAAA;AACtC,IAAA,MAAMX,WAAW,QAAA,EAAU;AAAC,MAAA,MAAA;AAAQW,MAAAA;OAAMhB,YAAAA,CAAAA;AAC9C,EAAA,CAAA,IAAKyB,OAAAA,CAAQ,MAAMR,SAAAA,CAAUS,MAAAA,CAAOV,GAAAA,CAAAA,CAAAA;AAEpCC,EAAAA,SAAAA,CAAUU,GAAAA,CAAIX,KAAKQ,WAAAA,CAAAA;AACnB,EAAA,OAAOA,WAAAA;AACX,CAAA,EAlB0B,mBAAA,CAAA;AAoBnB,IAAMI,SAAAA,mBAAYtB,oBAAA,CAAA,CACrB,EAAEuB,QAAAA,EAAUC,MAAAA,EAAQC,IAAIC,SAAAA,EAAS,EACjCC,MAAAA,EACAC,oBAAAA,EACAC,eAAAA,KAAAA;AAEAN,EAAAA,QAAAA,CAAS,oBAAoB,MAAA;AACzB,IAAA,KAAA,MAAW,CAACO,IAAAA,EAAMC,KAAAA,KAAUC,MAAAA,CAAOC,OAAAA,CAAQN,MAAAA,CAAAA,EAAS;AAChDF,MAAAA,EAAAA,CAAG,CAAA,mBAAA,EAAsBK,IAAAA,CAAAA,CAAAA,EAAQ,MAAA;AAC7BN,QAAAA,MAAAA,CAAO;UAACO,KAAAA,CAAMD,IAAAA;AAAMI,UAAAA,wBAAAA,CAAYH,OAAO,GAAA;AAAMI,SAAAA,CAAAA,IAAAA,CAAK,GAAA,CAAA,CAAA,CAAMC,IAAAA,CAAKN,IAAAA,CAAAA;MACjE,CAAA,CAAA;AACJ,IAAA;EACJ,CAAA,CAAA;AAEAP,EAAAA,QAAAA,CAAS,iBAAiB,MAAA;AACtB,IAAA,KAAA,MAAWc,YAAAA,IAAgBL,MAAAA,CAAOM,MAAAA,CAAOX,MAAAA,CAAAA,EAAS;AAC9C,MAAA,MAAMI,KAAAA,GAAeM,YAAAA;AAErB,MAAA,IAAIN,MAAMQ,UAAAA,EAAY;AAClB,QAAA;AACJ,MAAA;AAEAhB,MAAAA,QAAAA,CAASW,wBAAAA,CAAYH,KAAAA,CAAAA,EAAQ,MAAA;AACzB,QAAA,IAAIS,QAAAA;AAEJd,QAAAA,SAAAA,CAAU,YAAA;AACNc,UAAAA,QAAAA,GAAW,MAAMC,wBAAAA,CAAYV,KAAAA,EAAO,GAAA,CAAA;AACpC,UAAA,MAAMlB,kBAAkB2B,QAAAA,CAAAA;AAC5B,QAAA,CAAA,EAAG9C,YAAAA,CAAAA;AAEH,QAAA,KAAA,MAAW,CAACgD,MAAMC,eAAAA,CAAAA,IAAoBX,OAAOC,OAAAA,CAAQF,KAAAA,CAAMa,QAAQ,CAAA,EAAG;AAClEnB,UAAAA,EAAAA,CACI,CAAA,YAAA,EAAeiB,IAAAA,CAAAA,YAAAA,EAAmBC,eAAAA,IAClC,YAAA;AACI,YAAA,IAAI,EAAEd,eAAAA,CAAgBa,IAAAA,CAAAA,YAAiBG,KAAAA,CAAAA,EAAQ;AAC3C,cAAA,MAAM,IAAIC,MAAM,yBAAA,CAAA;AACpB,YAAA;AAEA,YAAA,MAAMC,OAAAA,GAAU,MAAMhD,UAAAA,CAAW,QAAA,EAAU;AACvC,cAAA,KAAA;AACA,cAAA,MAAA;AACA,cAAA,cAAA;AACAyC,cAAAA,QAAAA;AACGX,cAAAA,GAAAA,eAAAA,CAAgBa,IAAAA;AACtB,aAAA,CAAA;AAEDlB,YAAAA,MAAAA,CAAOuB,OAAAA,CAAAA,CAASC,SAAAA,CAAUL,eAAAA,CAAAA;AAC9B,UAAA,CAAA,EACAlD,oBAAAA,CAAAA;AAER,QAAA;MACJ,CAAA,CAAA;AACJ,IAAA;EACJ,CAAA,CAAA;AAEA8B,EAAAA,QAAAA,CAAS,0BAA0B,MAAA;AAC/B,IAAA,KAAA,MAAW,CAAC0B,EAAAA,EAAIlB,KAAAA,KAAUC,MAAAA,CAAOC,OAAAA,CAAQN,MAAAA,CAAAA,EAAS;AAC9C,MAAA,IAAII,MAAMQ,UAAAA,EAAY;AAClB,QAAA;AACJ,MAAA;AAEAd,MAAAA,EAAAA,CACI,CAAA,yBAAA,EAA4BwB,EAAAA,CAAAA,CAAAA,EAC5B,YAAA;AACI,QAAA,MAAM,EAAE1C,MAAAA,EAAM,GAAK,MAAMH,cAAAA,CAAUC,sBAAAA,EAAU,QAAA,EAAU;AACnD,UAAA,QAAA;AACA,UAAA,YAAA;AACA,UAAA,SAAA;AACA,UAAA,UAAA;AACA,UAAA,wBAAA;UACA,MAAMoC,wBAAAA,CAAYV,OAAO,GAAA;AAC5B,SAAA,CAAA;AAEDP,QAAAA,MAAAA,CAAO1B,gBAAAA,CAAiBoD,SAAAA,CAAUC,IAAAA,CAAKC,KAAAA,CAAM7C,MAAAA,CAAAA,CAAAA,CAAS8C,OAAO,CAAA,CAAEjB,IAAAA,CAAK,IAAA,CAAA;AACxE,MAAA,CAAA,EACA5C,qBAAAA,CAAAA;AAER,IAAA;EACJ,CAAA,CAAA;AACJ,CAAA,EA/EyB,WAAA","file":"VAGPJO44.cjs","sourcesContent":["import { execFile } from 'node:child_process';\nimport { promisify } from 'node:util';\nimport type * as vitest from 'vitest';\nimport * as z from 'zod';\n\nimport type { VersionCombination } from './config';\nimport { type Image } from './config';\nimport { getImageTag, getImageUri } from './utils/docker';\n\nconst COMMAND_TIMEOUT = 5 * 60_000;\nconst MANIFEST_TEST_TIMEOUT = 20_000;\nconst VERSION_TEST_TIMEOUT = 15 * 60_000;\nconst PULL_TIMEOUT = 10 * 60_000;\n\nconst slsaSchema = z.object({\n    SLSA: z.object({}),\n});\n\n// TODO Require provenance by GitHub Actions.\nconst provenanceSchema = z.object({\n    ['linux/amd64']: slsaSchema,\n    ['linux/arm64']: slsaSchema,\n});\n\nconst runCommand = async (\n    command: string,\n    args: string[],\n    timeout = COMMAND_TIMEOUT,\n): Promise<string> =>\n    (\n        await promisify(execFile)(command, args, {\n            timeout,\n            killSignal: 'SIGKILL', // Force kill if timeout\n        })\n    ).stdout.trim();\n\nconst isImageCached = async (uri: string): Promise<boolean> => {\n    try {\n        await runCommand('docker', ['image', 'inspect', uri]);\n        return true;\n    } catch {\n        return false;\n    }\n};\n\nconst pullLocks = new Map<string, Promise<void>>();\n\nconst ensureImagePulled = async (uri: string): Promise<void> => {\n    const existingPull = pullLocks.get(uri);\n    if (existingPull) {\n        console.log(`⏳ Waiting for concurrent pull: ${uri}`);\n        return existingPull;\n    }\n\n    const pullPromise = (async () => {\n        if (await isImageCached(uri)) {\n            console.log(`✅ Image already cached: ${uri}`);\n            return;\n        }\n        console.log(`📥 Pulling image: ${uri}`);\n        await runCommand('docker', ['pull', uri], PULL_TIMEOUT);\n    })().finally(() => pullLocks.delete(uri));\n\n    pullLocks.set(uri, pullPromise);\n    return pullPromise;\n};\n\nexport const testTools = (\n    { describe, expect, it, beforeAll }: typeof vitest,\n    images: Record<string, Image>,\n    _versionCombinations: VersionCombination<string>[],\n    versionCommands: Record<string, string[]>,\n): void => {\n    describe('Docker image IDs', () => {\n        for (const [name, image] of Object.entries(images)) {\n            it(`has an image ID of ${name}`, () => {\n                expect([image.name, getImageTag(image, '-')].join(':')).toBe(name);\n            });\n        }\n    });\n\n    describe('Tool versions', () => {\n        for (const literalImage of Object.values(images)) {\n            const image: Image = literalImage;\n\n            if (image.unreleased) {\n                continue;\n            }\n\n            describe(getImageTag(image), () => {\n                let imageUri: string;\n\n                beforeAll(async () => {\n                    imageUri = await getImageUri(image, '_');\n                    await ensureImagePulled(imageUri);\n                }, PULL_TIMEOUT);\n\n                for (const [tool, expectedVersion] of Object.entries(image.versions)) {\n                    it(\n                        `should have ${tool} of version ${expectedVersion}`,\n                        async () => {\n                            if (!(versionCommands[tool] instanceof Array)) {\n                                throw new Error('Missing version command');\n                            }\n\n                            const version = await runCommand('docker', [\n                                'run',\n                                '--rm',\n                                '--privileged',\n                                imageUri,\n                                ...versionCommands[tool],\n                            ]);\n\n                            expect(version).toContain(expectedVersion);\n                        },\n                        VERSION_TEST_TIMEOUT,\n                    );\n                }\n            });\n        }\n    });\n\n    describe('Docker image manifests', () => {\n        for (const [id, image] of Object.entries(images)) {\n            if (image.unreleased) {\n                continue;\n            }\n\n            it(\n                `has a valid manifest for ${id}`,\n                async () => {\n                    const { stdout } = await promisify(execFile)('docker', [\n                        'buildx',\n                        'imagetools',\n                        'inspect',\n                        '--format',\n                        '{{ json .Provenance }}',\n                        await getImageUri(image, '_'),\n                    ]);\n\n                    expect(provenanceSchema.safeParse(JSON.parse(stdout)).success).toBe(true);\n                },\n                MANIFEST_TEST_TIMEOUT,\n            );\n        }\n    });\n};\n"]}
+{"version":3,"sources":["../src/test.ts"],"names":["init_cjs_shims","COMMAND_TIMEOUT","MANIFEST_TEST_TIMEOUT","VERSION_TEST_TIMEOUT","PULL_TIMEOUT","slsaSchema","object","SLSA","provenanceSchema","runCommand","__name","command","args","timeout","promisify","execFile","killSignal","stdout","trim","isImageCached","uri","pullLocks","Map","ensureImagePulled","existingPull","get","console","log","pullPromise","finally","delete","set","testTools","describe","expect","it","beforeAll","images","_versionCombinations","versionCommands","name","image","Object","entries","getImageTag","join","toBe","literalImage","values","unreleased","imageUri","getImageUri","tool","expectedVersion","versions","Array","Error","version","toContain","id","safeParse","JSON","parse","success"],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAAAA,4BAAA,EAAA;AASA,IAAMC,kBAAkB,CAAA,GAAI,GAAA;AAC5B,IAAMC,qBAAAA,GAAwB,GAAA;AAC9B,IAAMC,uBAAuB,EAAA,GAAK,GAAA;AAClC,IAAMC,eAAe,EAAA,GAAK,GAAA;AAE1B,IAAMC,aAAeC,YAAAA,CAAAA,MAAAA,CAAO;EACxBC,IAAAA,EAAQD,YAAAA,CAAAA,MAAAA,CAAO,EAAC;AACpB,CAAA,CAAA;AAGA,IAAME,mBAAqBF,YAAAA,CAAAA,MAAAA,CAAO;AAC9B,EAAA,CAAC,aAAA,GAAgBD,UAAAA;AACjB,EAAA,CAAC,aAAA,GAAgBA;AACrB,CAAA,CAAA;AAEA,IAAMI,UAAAA,mBAAaC,oBAAA,CAAA,OACfC,OAAAA,EACAC,IAAAA,EACAC,OAAAA,GAAUZ,eAAAA,KAAAA,CAGN,MAAMa,cAAAA,CAAUC,sBAAAA,CAAAA,CAAUJ,OAAAA,EAASC,IAAAA,EAAM;AACrCC,EAAAA,OAAAA;EACAG,UAAAA,EAAY;AAChB,CAAA,CAAA,EACFC,MAAAA,CAAOC,IAAAA,EAAI,EAVE,YAAA,CAAA;AAYnB,IAAMC,aAAAA,+CAAuBC,GAAAA,KAAAA;AACzB,EAAA,IAAI;AACA,IAAA,MAAMX,WAAW,QAAA,EAAU;AAAC,MAAA,OAAA;AAAS,MAAA,SAAA;AAAWW,MAAAA;AAAI,KAAA,CAAA;AACpD,IAAA,OAAO,IAAA;EACX,CAAA,CAAA,MAAQ;AACJ,IAAA,OAAO,KAAA;AACX,EAAA;AACJ,CAAA,EAPsB,eAAA,CAAA;AAStB,IAAMC,SAAAA,uBAAgBC,GAAAA,EAAAA;AAEtB,IAAMC,iBAAAA,+CAA2BH,GAAAA,KAAAA;AAC7B,EAAA,MAAMI,YAAAA,GAAeH,SAAAA,CAAUI,GAAAA,CAAIL,GAAAA,CAAAA;AACnC,EAAA,IAAII,YAAAA,EAAc;AACdE,IAAAA,OAAAA,CAAQC,GAAAA,CAAI,CAAA,oCAAA,EAAkCP,GAAAA,CAAAA,CAAK,CAAA;AACnD,IAAA,OAAOI,YAAAA;AACX,EAAA;AAEA,EAAA,MAAMI,eAAe,YAAA;AACjB,IAAA,IAAI,MAAMT,aAAAA,CAAcC,GAAAA,CAAAA,EAAM;AAC1BM,MAAAA,OAAAA,CAAQC,GAAAA,CAAI,CAAA,6BAAA,EAA2BP,GAAAA,CAAAA,CAAK,CAAA;AAC5C,MAAA;AACJ,IAAA;AACAM,IAAAA,OAAAA,CAAQC,GAAAA,CAAI,CAAA,yBAAA,EAAqBP,GAAAA,CAAAA,CAAK,CAAA;AACtC,IAAA,MAAMX,WAAW,QAAA,EAAU;AAAC,MAAA,MAAA;AAAQW,MAAAA;OAAMhB,YAAAA,CAAAA;AAC9C,EAAA,CAAA,IAAKyB,OAAAA,CAAQ,MAAMR,SAAAA,CAAUS,MAAAA,CAAOV,GAAAA,CAAAA,CAAAA;AAEpCC,EAAAA,SAAAA,CAAUU,GAAAA,CAAIX,KAAKQ,WAAAA,CAAAA;AACnB,EAAA,OAAOA,WAAAA;AACX,CAAA,EAlB0B,mBAAA,CAAA;AAoBnB,IAAMI,SAAAA,mBAAYtB,oBAAA,CAAA,CACrB,EAAEuB,QAAAA,EAAUC,MAAAA,EAAQC,IAAIC,SAAAA,EAAS,EACjCC,MAAAA,EACAC,oBAAAA,EACAC,eAAAA,KAAAA;AAEAN,EAAAA,QAAAA,CAAS,oBAAoB,MAAA;AACzB,IAAA,KAAA,MAAW,CAACO,IAAAA,EAAMC,KAAAA,KAAUC,MAAAA,CAAOC,OAAAA,CAAQN,MAAAA,CAAAA,EAAS;AAChDF,MAAAA,EAAAA,CAAG,CAAA,mBAAA,EAAsBK,IAAAA,CAAAA,CAAAA,EAAQ,MAAA;AAC7BN,QAAAA,MAAAA,CAAO;UAACO,KAAAA,CAAMD,IAAAA;AAAMI,UAAAA,wBAAAA,CAAYH,OAAO,GAAA;AAAMI,SAAAA,CAAAA,IAAAA,CAAK,GAAA,CAAA,CAAA,CAAMC,IAAAA,CAAKN,IAAAA,CAAAA;MACjE,CAAA,CAAA;AACJ,IAAA;EACJ,CAAA,CAAA;AAEAP,EAAAA,QAAAA,CAAS,iBAAiB,MAAA;AACtB,IAAA,KAAA,MAAWc,YAAAA,IAAgBL,MAAAA,CAAOM,MAAAA,CAAOX,MAAAA,CAAAA,EAAS;AAC9C,MAAA,MAAMI,KAAAA,GAAeM,YAAAA;AAErB,MAAA,IAAIN,MAAMQ,UAAAA,EAAY;AAClB,QAAA;AACJ,MAAA;AAEAhB,MAAAA,QAAAA,CAASW,wBAAAA,CAAYH,KAAAA,CAAAA,EAAQ,MAAA;AACzB,QAAA,IAAIS,QAAAA;AAEJd,QAAAA,SAAAA,CAAU,YAAA;AACNc,UAAAA,QAAAA,GAAW,MAAMC,wBAAAA,CAAYV,KAAAA,EAAO,GAAA,CAAA;AACpC,UAAA,MAAMlB,kBAAkB2B,QAAAA,CAAAA;AAC5B,QAAA,CAAA,EAAG9C,YAAAA,CAAAA;AAEH,QAAA,KAAA,MAAW,CAACgD,MAAMC,eAAAA,CAAAA,IAAoBX,OAAOC,OAAAA,CAAQF,KAAAA,CAAMa,QAAQ,CAAA,EAAG;AAClEnB,UAAAA,EAAAA,CACI,CAAA,YAAA,EAAeiB,IAAAA,CAAAA,YAAAA,EAAmBC,eAAAA,IAClC,YAAA;AACI,YAAA,IAAI,EAAEd,eAAAA,CAAgBa,IAAAA,CAAAA,YAAiBG,KAAAA,CAAAA,EAAQ;AAC3C,cAAA,MAAM,IAAIC,MAAM,yBAAA,CAAA;AACpB,YAAA;AAEA,YAAA,MAAMC,OAAAA,GAAU,MAAMhD,UAAAA,CAAW,QAAA,EAAU;AACvC,cAAA,KAAA;AACA,cAAA,MAAA;AACA,cAAA,cAAA;AACAyC,cAAAA,QAAAA;AACGX,cAAAA,GAAAA,eAAAA,CAAgBa,IAAAA;AACtB,aAAA,CAAA;AAEDlB,YAAAA,MAAAA,CAAOuB,OAAAA,CAAAA,CAASC,SAAAA,CAAUL,eAAAA,CAAAA;AAC9B,UAAA,CAAA,EACAlD,oBAAAA,CAAAA;AAER,QAAA;MACJ,CAAA,CAAA;AACJ,IAAA;EACJ,CAAA,CAAA;AAEA8B,EAAAA,QAAAA,CAAS,0BAA0B,MAAA;AAC/B,IAAA,KAAA,MAAW,CAAC0B,EAAAA,EAAIlB,KAAAA,KAAUC,MAAAA,CAAOC,OAAAA,CAAQN,MAAAA,CAAAA,EAAS;AAC9C,MAAA,IAAII,MAAMQ,UAAAA,EAAY;AAClB,QAAA;AACJ,MAAA;AAEAd,MAAAA,EAAAA,CACI,CAAA,yBAAA,EAA4BwB,EAAAA,CAAAA,CAAAA,EAC5B,YAAA;AACI,QAAA,MAAM,EAAE1C,MAAAA,EAAM,GAAK,MAAMH,cAAAA,CAAUC,sBAAAA,EAAU,QAAA,EAAU;AACnD,UAAA,QAAA;AACA,UAAA,YAAA;AACA,UAAA,SAAA;AACA,UAAA,UAAA;AACA,UAAA,wBAAA;UACA,MAAMoC,wBAAAA,CAAYV,OAAO,GAAA;AAC5B,SAAA,CAAA;AAEDP,QAAAA,MAAAA,CAAO1B,gBAAAA,CAAiBoD,SAAAA,CAAUC,IAAAA,CAAKC,KAAAA,CAAM7C,MAAAA,CAAAA,CAAAA,CAAS8C,OAAO,CAAA,CAAEjB,IAAAA,CAAK,IAAA,CAAA;AACxE,MAAA,CAAA,EACA5C,qBAAAA,CAAAA;AAER,IAAA;EACJ,CAAA,CAAA;AACJ,CAAA,EA/EyB,WAAA","file":"D5GYEVDR.cjs","sourcesContent":["import { execFile } from 'node:child_process';\nimport { promisify } from 'node:util';\nimport type * as vitest from 'vitest';\nimport * as z from 'zod';\n\nimport type { VersionCombination } from './config';\nimport { type Image } from './config';\nimport { getImageTag, getImageUri } from './utils/docker';\n\nconst COMMAND_TIMEOUT = 5 * 60_000;\nconst MANIFEST_TEST_TIMEOUT = 20_000;\nconst VERSION_TEST_TIMEOUT = 15 * 60_000;\nconst PULL_TIMEOUT = 10 * 60_000;\n\nconst slsaSchema = z.object({\n    SLSA: z.object({}),\n});\n\n// TODO Require provenance by GitHub Actions.\nconst provenanceSchema = z.object({\n    ['linux/amd64']: slsaSchema,\n    ['linux/arm64']: slsaSchema,\n});\n\nconst runCommand = async (\n    command: string,\n    args: string[],\n    timeout = COMMAND_TIMEOUT,\n): Promise<string> =>\n    (\n        await promisify(execFile)(command, args, {\n            timeout,\n            killSignal: 'SIGKILL', // Force kill if timeout\n        })\n    ).stdout.trim();\n\nconst isImageCached = async (uri: string): Promise<boolean> => {\n    try {\n        await runCommand('docker', ['image', 'inspect', uri]);\n        return true;\n    } catch {\n        return false;\n    }\n};\n\nconst pullLocks = new Map<string, Promise<void>>();\n\nconst ensureImagePulled = async (uri: string): Promise<void> => {\n    const existingPull = pullLocks.get(uri);\n    if (existingPull) {\n        console.log(`⏳ Waiting for concurrent pull: ${uri}`);\n        return existingPull;\n    }\n\n    const pullPromise = (async () => {\n        if (await isImageCached(uri)) {\n            console.log(`✅ Image already cached: ${uri}`);\n            return;\n        }\n        console.log(`📥 Pulling image: ${uri}`);\n        await runCommand('docker', ['pull', uri], PULL_TIMEOUT);\n    })().finally(() => pullLocks.delete(uri));\n\n    pullLocks.set(uri, pullPromise);\n    return pullPromise;\n};\n\nexport const testTools = (\n    { describe, expect, it, beforeAll }: typeof vitest,\n    images: Record<string, Image>,\n    _versionCombinations: VersionCombination<string>[],\n    versionCommands: Record<string, string[]>,\n): void => {\n    describe('Docker image IDs', () => {\n        for (const [name, image] of Object.entries(images)) {\n            it(`has an image ID of ${name}`, () => {\n                expect([image.name, getImageTag(image, '-')].join(':')).toBe(name);\n            });\n        }\n    });\n\n    describe('Tool versions', () => {\n        for (const literalImage of Object.values(images)) {\n            const image: Image = literalImage;\n\n            if (image.unreleased) {\n                continue;\n            }\n\n            describe(getImageTag(image), () => {\n                let imageUri: string;\n\n                beforeAll(async () => {\n                    imageUri = await getImageUri(image, '_');\n                    await ensureImagePulled(imageUri);\n                }, PULL_TIMEOUT);\n\n                for (const [tool, expectedVersion] of Object.entries(image.versions)) {\n                    it(\n                        `should have ${tool} of version ${expectedVersion}`,\n                        async () => {\n                            if (!(versionCommands[tool] instanceof Array)) {\n                                throw new Error('Missing version command');\n                            }\n\n                            const version = await runCommand('docker', [\n                                'run',\n                                '--rm',\n                                '--privileged',\n                                imageUri,\n                                ...versionCommands[tool],\n                            ]);\n\n                            expect(version).toContain(expectedVersion);\n                        },\n                        VERSION_TEST_TIMEOUT,\n                    );\n                }\n            });\n        }\n    });\n\n    describe('Docker image manifests', () => {\n        for (const [id, image] of Object.entries(images)) {\n            if (image.unreleased) {\n                continue;\n            }\n\n            it(\n                `has a valid manifest for ${id}`,\n                async () => {\n                    const { stdout } = await promisify(execFile)('docker', [\n                        'buildx',\n                        'imagetools',\n                        'inspect',\n                        '--format',\n                        '{{ json .Provenance }}',\n                        await getImageUri(image, '_'),\n                    ]);\n\n                    expect(provenanceSchema.safeParse(JSON.parse(stdout)).success).toBe(true);\n                },\n                MANIFEST_TEST_TIMEOUT,\n            );\n        }\n    });\n};\n"]}

package/dist/{M7FR43QL.cjs → DHEIAR4N.cjs}

@@ -1,6 +1,6 @@
 'use strict';
 
-var ICMHRFCX_cjs = require('./ICMHRFCX.cjs');
+var NAARBEQI_cjs = require('./NAARBEQI.cjs');
 var _5GPMTH2I_cjs = require('./5GPMTH2I.cjs');
 var _24WEKBY3_cjs = require('./24WEKBY3.cjs');
 var path = require('path');
@@ -23,7 +23,7 @@ var getImageUriForTool = /* @__PURE__ */ _24WEKBY3_cjs.__name(async (context, to
   }
   return getImageUri(image, separator);
 }, "getImageUriForTool");
-var getImageUri = /* @__PURE__ */ _24WEKBY3_cjs.__name(async (image, separator = "_") => path.join(await ICMHRFCX_cjs.getRegistry(), await ICMHRFCX_cjs.getImageDirectory(), `${_5GPMTH2I_cjs.getImageName(image.name)}:${getImageTag(image, separator)}`), "getImageUri");
+var getImageUri = /* @__PURE__ */ _24WEKBY3_cjs.__name(async (image, separator = "_") => path.join(await NAARBEQI_cjs.getRegistry(), await NAARBEQI_cjs.getImageDirectory(), `${_5GPMTH2I_cjs.getImageName(image.name)}:${getImageTag(image, separator)}`), "getImageUri");
 var getImageTag = /* @__PURE__ */ _24WEKBY3_cjs.__name(({ versions, patch }, separator = "_") => [
   ...Object.entries(versions).sort().flat(),
   ...patch ? [
@@ -53,5 +53,5 @@ exports.getImageTag = getImageTag;
 exports.getImageUri = getImageUri;
 exports.getImageUriForTool = getImageUriForTool;
 exports.getVolumeName = getVolumeName;
-//# sourceMappingURL=M7FR43QL.cjs.map
-//# sourceMappingURL=M7FR43QL.cjs.map
+//# sourceMappingURL=DHEIAR4N.cjs.map
+//# sourceMappingURL=DHEIAR4N.cjs.map

package/dist/{M7FR43QL.cjs.map → DHEIAR4N.cjs.map}

@@ -1 +1 @@
-{"version":3,"sources":["../src/utils/docker.ts"],"names":["init_cjs_shims","getImageUriForTool","__name","context","toolName","version","separator","image","versionCombinations","flatMap","combination","imageId","images","findToolVersionsForCombination","Error","getImageUri","join","getRegistry","getImageDirectory","getImageName","name","getImageTag","versions","patch","Object","entries","sort","flat","getVolumeName","volume","type","hostPath","containerPath","components","shared","packageName","process","env","npm_package_name","push","basename"],"mappings":";;;;;;;;AAAAA,4BAAA,EAAA;AAOO,IAAMC,qCAAqBC,oBAAA,CAAA,OAC9BC,OAAAA,EACAC,QAAAA,EACAC,OAAAA,EACAC,YAAuB,GAAA,KAAG;AAE1B,EAAA,MAAM,CAACC,KAAAA,CAAAA,GAASJ,QAAQK,mBAAAA,CAAoBC,OAAAA,CAAQ,CAACC,WAAAA,KAAAA;AACjD,IAAA,MAAMC,OAAAA,GAAUD,WAAAA,CAAYE,MAAAA,CAAOR,QAAAA,CAAAA;AAEnC,IAAA,IAAI,CAACO,OAAAA,EAAS;AACV,MAAA,OAAO,EAAA;AACX,IAAA;AAEA,IAAA,MAAMJ,MAAAA,GAAQJ,OAAAA,CAAQS,MAAAA,CAAOD,OAAAA,CAAAA;AAE7B,IAAA,OAAOJ,UAASM,4CAAAA,CAA+BV,OAAAA,EAASO,WAAAA,CAAAA,CAAaN,QAAAA,MAAcC,OAAAA,GAC7E;AAACE,MAAAA;QACD,EAAA;EACV,CAAA,CAAA;AAEA,EAAA,IAAI,CAACA,KAAAA,EAAO;AACR,IAAA,MAAM,IAAIO,KAAAA,CACN,CAAA,sCAAA,EAAyCV,QAAAA,CAAAA,cAAAA,EAAyBC,OAAAA,CAAAA,CAAS,CAAA;AAEnF,EAAA;AAEA,EAAA,OAAOU,WAAAA,CAAYR,OAAOD,SAAAA,CAAAA;AAC9B,CAAA,EA3BkC,oBAAA;AA6B3B,IAAMS,WAAAA,+CAAqBR,KAAAA,EAAcD,SAAAA,GAAuB,QACnEU,SAAAA,CACI,MAAMC,wBAAAA,EAAAA,EACN,MAAMC,8BAAAA,IACN,CAAA,EAAGC,0BAAAA,CAAaZ,KAAAA,CAAMa,IAAI,CAAA,CAAA,CAAA,EAAKC,YAAYd,KAAAA,EAAOD,SAAAA,CAAAA,CAAAA,CAAY,CAAA,EAJ3C,aAAA;AAOpB,IAAMe,8BAAcnB,oBAAA,CAAA,CAAC,EAAEoB,UAAUC,KAAAA,EAAK,EAAWjB,YAAuB,GAAA,KAC3E;AAAIkB,EAAAA,GAAAA,MAAAA,CAAOC,OAAAA,CAAQH,QAAAA,CAAAA,CAAUI,IAAAA,GAAOC,IAAAA,EAAI;KAAQJ,KAAAA,GAAQ;AAAC,IAAA,OAAA;AAASA,IAAAA;MAAS;AAAKP,CAAAA,CAAAA,IAAAA,CAAKV,SAAAA,CAAAA,EAD9D,aAAA;AAIpB,IAAMsB,aAAAA,yCAAiBC,MAAAA,KAAAA;AAC1B,EAAA,IAAIA,MAAAA,CAAOC,SAAS,MAAA,EAAQ;AACxB,IAAA,OAAO,CAAA,EAAGD,MAAAA,CAAOE,QAAQ,CAAA,CAAA,EAAIF,OAAOG,aAAa,CAAA,CAAA;AACrD,EAAA;AAEA,EAAA,MAAMC,UAAAA,GAAa;AAAC,IAAA,kBAAA;IAAoBJ,MAAAA,CAAOT;;AAE/C,EAAA,IAAI,CAACS,OAAOK,MAAAA,EAAQ;AAGhB,IAAA,MAAMC,WAAAA,GAAcC,QAAQC,GAAAA,CAAIC,gBAAAA;AAEhC,IAAA,IAAI,CAACH,WAAAA,EAAa;AACd,MAAA,MAAM,IAAIrB,MAAM,mDAAA,CAAA;AACpB,IAAA;AAEAmB,IAAAA,UAAAA,CAAWM,IAAAA,CAAKC,aAAAA,CAASL,WAAAA,CAAAA,CAAAA;AAC7B,EAAA;AAEA,EAAA,OAAO,GAAGF,UAAAA,CAAWjB,IAAAA,CAAK,GAAA,CAAA,CAAA,CAAA,EAAQa,OAAOG,aAAa,CAAA,CAAA;AAC1D,CAAA,EApB6B,eAAA","file":"M7FR43QL.cjs","sourcesContent":["import { basename, join } from 'node:path';\n\nimport type { Image, VolumeMapping } from '../config';\nimport { getImageDirectory, getRegistry } from '../config';\nimport type { ChainContext } from '../context';\nimport { findToolVersionsForCombination, getImageName } from './finder';\n\nexport const getImageUriForTool = async <TImageId extends string>(\n    context: ChainContext<TImageId>,\n    toolName: string,\n    version: string,\n    separator: '_' | '-' = '_',\n): Promise<string> => {\n    const [image] = context.versionCombinations.flatMap((combination) => {\n        const imageId = combination.images[toolName];\n\n        if (!imageId) {\n            return [];\n        }\n\n        const image = context.images[imageId];\n\n        return image && findToolVersionsForCombination(context, combination)[toolName] === version\n            ? [image]\n            : [];\n    });\n\n    if (!image) {\n        throw new Error(\n            `No version combination found for tool ${toolName} with version ${version}`,\n        );\n    }\n\n    return getImageUri(image, separator);\n};\n\nexport const getImageUri = async (image: Image, separator: '_' | '-' = '_'): Promise<string> =>\n    join(\n        await getRegistry(),\n        await getImageDirectory(),\n        `${getImageName(image.name)}:${getImageTag(image, separator)}`,\n    );\n\nexport const getImageTag = ({ versions, patch }: Image, separator: '_' | '-' = '_'): string =>\n    [...Object.entries(versions).sort().flat(), ...(patch ? ['patch', patch] : [])].join(separator);\n\n// passing workspaceRoot is necessary for host volumes to resolve relative paths to the workspace root\nexport const getVolumeName = (volume: VolumeMapping): string => {\n    if (volume.type === 'host') {\n        return `${volume.hostPath}:${volume.containerPath}`;\n    }\n\n    const components = ['lz-tooling-cache', volume.name];\n\n    if (!volume.shared) {\n        // This is the package name where the `lz-tool` command is executed.\n        // eslint-disable-next-line turbo/no-undeclared-env-vars\n        const packageName = process.env.npm_package_name;\n\n        if (!packageName) {\n            throw new Error('npm_package_name environment variable not defined');\n        }\n\n        components.push(basename(packageName));\n    }\n\n    return `${components.join('-')}:${volume.containerPath}`;\n};\n"]}
+{"version":3,"sources":["../src/utils/docker.ts"],"names":["init_cjs_shims","getImageUriForTool","__name","context","toolName","version","separator","image","versionCombinations","flatMap","combination","imageId","images","findToolVersionsForCombination","Error","getImageUri","join","getRegistry","getImageDirectory","getImageName","name","getImageTag","versions","patch","Object","entries","sort","flat","getVolumeName","volume","type","hostPath","containerPath","components","shared","packageName","process","env","npm_package_name","push","basename"],"mappings":";;;;;;;;AAAAA,4BAAA,EAAA;AAOO,IAAMC,qCAAqBC,oBAAA,CAAA,OAC9BC,OAAAA,EACAC,QAAAA,EACAC,OAAAA,EACAC,YAAuB,GAAA,KAAG;AAE1B,EAAA,MAAM,CAACC,KAAAA,CAAAA,GAASJ,QAAQK,mBAAAA,CAAoBC,OAAAA,CAAQ,CAACC,WAAAA,KAAAA;AACjD,IAAA,MAAMC,OAAAA,GAAUD,WAAAA,CAAYE,MAAAA,CAAOR,QAAAA,CAAAA;AAEnC,IAAA,IAAI,CAACO,OAAAA,EAAS;AACV,MAAA,OAAO,EAAA;AACX,IAAA;AAEA,IAAA,MAAMJ,MAAAA,GAAQJ,OAAAA,CAAQS,MAAAA,CAAOD,OAAAA,CAAAA;AAE7B,IAAA,OAAOJ,UAASM,4CAAAA,CAA+BV,OAAAA,EAASO,WAAAA,CAAAA,CAAaN,QAAAA,MAAcC,OAAAA,GAC7E;AAACE,MAAAA;QACD,EAAA;EACV,CAAA,CAAA;AAEA,EAAA,IAAI,CAACA,KAAAA,EAAO;AACR,IAAA,MAAM,IAAIO,KAAAA,CACN,CAAA,sCAAA,EAAyCV,QAAAA,CAAAA,cAAAA,EAAyBC,OAAAA,CAAAA,CAAS,CAAA;AAEnF,EAAA;AAEA,EAAA,OAAOU,WAAAA,CAAYR,OAAOD,SAAAA,CAAAA;AAC9B,CAAA,EA3BkC,oBAAA;AA6B3B,IAAMS,WAAAA,+CAAqBR,KAAAA,EAAcD,SAAAA,GAAuB,QACnEU,SAAAA,CACI,MAAMC,wBAAAA,EAAAA,EACN,MAAMC,8BAAAA,IACN,CAAA,EAAGC,0BAAAA,CAAaZ,KAAAA,CAAMa,IAAI,CAAA,CAAA,CAAA,EAAKC,YAAYd,KAAAA,EAAOD,SAAAA,CAAAA,CAAAA,CAAY,CAAA,EAJ3C,aAAA;AAOpB,IAAMe,8BAAcnB,oBAAA,CAAA,CAAC,EAAEoB,UAAUC,KAAAA,EAAK,EAAWjB,YAAuB,GAAA,KAC3E;AAAIkB,EAAAA,GAAAA,MAAAA,CAAOC,OAAAA,CAAQH,QAAAA,CAAAA,CAAUI,IAAAA,GAAOC,IAAAA,EAAI;KAAQJ,KAAAA,GAAQ;AAAC,IAAA,OAAA;AAASA,IAAAA;MAAS;AAAKP,CAAAA,CAAAA,IAAAA,CAAKV,SAAAA,CAAAA,EAD9D,aAAA;AAIpB,IAAMsB,aAAAA,yCAAiBC,MAAAA,KAAAA;AAC1B,EAAA,IAAIA,MAAAA,CAAOC,SAAS,MAAA,EAAQ;AACxB,IAAA,OAAO,CAAA,EAAGD,MAAAA,CAAOE,QAAQ,CAAA,CAAA,EAAIF,OAAOG,aAAa,CAAA,CAAA;AACrD,EAAA;AAEA,EAAA,MAAMC,UAAAA,GAAa;AAAC,IAAA,kBAAA;IAAoBJ,MAAAA,CAAOT;;AAE/C,EAAA,IAAI,CAACS,OAAOK,MAAAA,EAAQ;AAGhB,IAAA,MAAMC,WAAAA,GAAcC,QAAQC,GAAAA,CAAIC,gBAAAA;AAEhC,IAAA,IAAI,CAACH,WAAAA,EAAa;AACd,MAAA,MAAM,IAAIrB,MAAM,mDAAA,CAAA;AACpB,IAAA;AAEAmB,IAAAA,UAAAA,CAAWM,IAAAA,CAAKC,aAAAA,CAASL,WAAAA,CAAAA,CAAAA;AAC7B,EAAA;AAEA,EAAA,OAAO,GAAGF,UAAAA,CAAWjB,IAAAA,CAAK,GAAA,CAAA,CAAA,CAAA,EAAQa,OAAOG,aAAa,CAAA,CAAA;AAC1D,CAAA,EApB6B,eAAA","file":"DHEIAR4N.cjs","sourcesContent":["import { basename, join } from 'node:path';\n\nimport type { Image, VolumeMapping } from '../config';\nimport { getImageDirectory, getRegistry } from '../config';\nimport type { ChainContext } from '../context';\nimport { findToolVersionsForCombination, getImageName } from './finder';\n\nexport const getImageUriForTool = async <TImageId extends string>(\n    context: ChainContext<TImageId>,\n    toolName: string,\n    version: string,\n    separator: '_' | '-' = '_',\n): Promise<string> => {\n    const [image] = context.versionCombinations.flatMap((combination) => {\n        const imageId = combination.images[toolName];\n\n        if (!imageId) {\n            return [];\n        }\n\n        const image = context.images[imageId];\n\n        return image && findToolVersionsForCombination(context, combination)[toolName] === version\n            ? [image]\n            : [];\n    });\n\n    if (!image) {\n        throw new Error(\n            `No version combination found for tool ${toolName} with version ${version}`,\n        );\n    }\n\n    return getImageUri(image, separator);\n};\n\nexport const getImageUri = async (image: Image, separator: '_' | '-' = '_'): Promise<string> =>\n    join(\n        await getRegistry(),\n        await getImageDirectory(),\n        `${getImageName(image.name)}:${getImageTag(image, separator)}`,\n    );\n\nexport const getImageTag = ({ versions, patch }: Image, separator: '_' | '-' = '_'): string =>\n    [...Object.entries(versions).sort().flat(), ...(patch ? ['patch', patch] : [])].join(separator);\n\n// passing workspaceRoot is necessary for host volumes to resolve relative paths to the workspace root\nexport const getVolumeName = (volume: VolumeMapping): string => {\n    if (volume.type === 'host') {\n        return `${volume.hostPath}:${volume.containerPath}`;\n    }\n\n    const components = ['lz-tooling-cache', volume.name];\n\n    if (!volume.shared) {\n        // This is the package name where the `lz-tool` command is executed.\n        // eslint-disable-next-line turbo/no-undeclared-env-vars\n        const packageName = process.env.npm_package_name;\n\n        if (!packageName) {\n            throw new Error('npm_package_name environment variable not defined');\n        }\n\n        components.push(basename(packageName));\n    }\n\n    return `${components.join('-')}:${volume.containerPath}`;\n};\n"]}

package/dist/{5FQEEZQ7.js → E3J73F6I.js}

@@ -1,6 +1,6 @@
 import { displayVersionCombinations, displayToolVersionInfo } from './HVWLZZTF.js';
-import { executeToolCommand } from './I4UV4L75.js';
-import { volumeMappingSchema } from './YI63OKDP.js';
+import { executeToolCommand } from './7CMHG46M.js';
+import { volumeMappingSchema } from './PZCC5OXV.js';
 import { getToolDefaultVersion, getToolSupportedVersions } from './KWRJPB5T.js';
 import { init_esm_shims, __name } from './6AHA7PAZ.js';
 import { Command } from 'commander';
@@ -117,5 +117,5 @@ var runCli = /* @__PURE__ */ __name(async (config, registerExtraCommands) => {
 }, "runCli");
 
 export { runCli };
-//# sourceMappingURL=5FQEEZQ7.js.map
-//# sourceMappingURL=5FQEEZQ7.js.map
+//# sourceMappingURL=E3J73F6I.js.map
+//# sourceMappingURL=E3J73F6I.js.map