@layerzerolabs/vm-tooling 0.2.52 → 0.2.54

package/dist/{4YAYQFZC.js → ANEAMHXM.js}

@@ -1,5 +1,5 @@
 import { displayVersionCombinations, displayToolVersionInfo } from './HVWLZZTF.js';
-import { executeToolCommand } from './55NXWILT.js';
+import { executeToolCommand } from './JEAIQIUM.js';
 import { volumeMappingSchema } from './46I6PSJ7.js';
 import { getToolDefaultVersion, getToolSupportedVersions } from './KWRJPB5T.js';
 import { init_esm_shims, __name } from './6AHA7PAZ.js';
@@ -89,7 +89,10 @@ var createCli = /* @__PURE__ */ __name((context, registerExtraCommands) => {
         name
       })
     ];
-  }, []).option("-p, --publish <host_port:container_port>", "Publish a container's port(s) to the host");
+  }, []).option("-p, --publish <host_port:container_port>", "Publish a container's port(s) to the host (repeatable)", (value, previous) => [
+    ...previous,
+    value
+  ], []);
   for (const tool of tools) {
     const defaultVersion = getToolDefaultVersion(context, tool.name);
     const supportedVersions = getToolSupportedVersions(context, tool.name);
@@ -117,5 +120,5 @@ var runCli = /* @__PURE__ */ __name(async (config, registerExtraCommands) => {
 }, "runCli");
 
 export { runCli };
-//# sourceMappingURL=4YAYQFZC.js.map
-//# sourceMappingURL=4YAYQFZC.js.map
+//# sourceMappingURL=ANEAMHXM.js.map
+//# sourceMappingURL=ANEAMHXM.js.map

package/dist/ANEAMHXM.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/cli.ts"],"names":["createCli","context","registerExtraCommands","tools","toolVersionOptions","Object","fromEntries","map","name","camelCase","parseGlobalOptions","command","cwd","volume","options","opts","process","volumes","versions","entries","version","filter","tool","program","Command","description","enablePositionalOptions","argv","includes","displayVersionCombinations","exit","option","input","Error","path","isAbsolute","fs","existsSync","statSync","isDirectory","variables","valueParts","split","length","value","join","type","hostPath","containerPath","volumeMappingSchema","parse","previous","defaultVersion","getToolDefaultVersion","supportedVersions","getToolSupportedVersions","action","toolName","displayToolVersionInfo","isDefault","passThroughOptions","allowUnknownOption","helpOption","argument","args","executeToolCommand","runCli","config","parseAsync","error","console"],"mappings":";;;;;;;;;;;;AAAA,cAAA,EAAA;AA4BA,IAAMA,SAAAA,mBAAY,MAAA,CAAA,CACdC,OAAAA,EACAC,qBAAAA,KAAAA;AAEA,EAAA,MAAM,EAAEC,OAAK,GAAKF,OAAAA;AAClB,EAAA,MAAMG,kBAAAA,GAAqBC,OAAOC,WAAAA,CAC9BH,KAAAA,CAAMI,IAAI,CAAC,EAAEC,MAAI,KAAO;IAAC,CAAA,EAAGC,SAAAA,CAAUD,IAAAA,CAAAA,CAAAA,OAAAA,CAAAA;AAAgBA,IAAAA;GAAK,CAAA,CAAA;AAG/D,EAAA,MAAME,kBAAAA,2BAAsBC,OAAAA,KAAAA;AACxB,IAAA,MAAM,EAAEC,GAAAA,EAAKC,MAAAA,EAAQ,GAAGC,OAAAA,EAAAA,GAAYH,QAAQI,IAAAA,EAAI;AAEhD,IAAA,OAAO;MACH,GAAGD,OAAAA;MACHF,GAAAA,EAAKA,GAAAA,IAAOI,QAAQJ,GAAAA,EAAG;MACvBK,OAAAA,EAASJ,MAAAA;MACTK,QAAAA,EAAUb,MAAAA,CAAOC,WAAAA,CACbD,MAAAA,CAAOc,OAAAA,CAAQL,OAAAA,CAAAA,CACVP,GAAAA,CAAI,CAAC,CAACC,IAAAA,EAAMY,OAAAA,CAAAA,KAAa;AAAChB,QAAAA,kBAAAA,CAAmBI,IAAAA,CAAAA;AAAOY,QAAAA;AAAQ,OAAA,CAAA,CAC5DC,OAAO,CAAC,CAACC,IAAAA,CAAAA,KAAUA,IAAAA,CAAAA;AAEhC,KAAA;EACJ,CAAA,EAb2B,oBAAA,CAAA;AAe3B,EAAA,MAAMC,OAAAA,GAAU,IAAIC,OAAAA,EAAAA;AAEpBD,EAAAA,OAAAA,CACKf,IAAAA,CAAK,SAAA,CAAA,CACLiB,WAAAA,CACG,6RASI,CAAA,CAEPL,OAAAA,CAAQ,OAAA,CAAA,CACRM,uBAAAA,EAAuB;AAG5B,EAAA,IAAIV,OAAAA,CAAQW,IAAAA,CAAKC,QAAAA,CAAS,iBAAA,CAAA,EAAoB;AAC1CC,IAAAA,0BAAAA,CAA2B5B,OAAAA,CAAAA;AAC3Be,IAAAA,OAAAA,CAAQc,KAAK,CAAA,CAAA;AACjB,EAAA;AAGAP,EAAAA,OAAAA,CACKQ,MAAAA,CAAO,kBAAA,EAAoB,2BAAA,EAA6B,CAACC,KAAAA,KAAAA;AACtD,IAAA,IAAI,OAAOA,UAAU,QAAA,EAAU;AAC3B,MAAA,MAAM,IAAIC,MAAM,2BAAA,CAAA;AACpB,IAAA;AAEA,IAAA,IAAI,CAACC,IAAAA,CAAKC,UAAAA,CAAWH,KAAAA,CAAAA,EAAQ;AACzB,MAAA,MAAM,IAAIC,MAAM,0CAAA,CAAA;AACpB,IAAA;AAEA,IAAA,IAAI,CAACG,EAAAA,CAAGC,UAAAA,CAAWL,KAAAA,CAAAA,EAAQ;AACvB,MAAA,MAAM,IAAIC,MAAM,oBAAA,CAAA;AACpB,IAAA;AAEA,IAAA,IAAI,CAACG,EAAAA,CAAGE,QAAAA,CAASN,KAAAA,CAAAA,CAAOO,aAAW,EAAI;AACnC,MAAA,MAAM,IAAIN,MAAM,yBAAA,CAAA;AACpB,IAAA;AAEA,IAAA,OAAOD,KAAAA;AACX,EAAA,CAAA,CAAA,CACCD,MAAAA,CACG,sCAAA,EACA,qDAAA,EAEHA,MAAAA,CACG,mBAAA,EACA,0GAAA,CAAA,CAEHA,MAAAA,CACG,oBAAA,EACA,kFAAA,EACA,CAACC,OAAeQ,SAAAA,KAAAA;AACZ,IAAA,MAAM,CAAChC,IAAAA,EAAM,GAAGiC,UAAAA,CAAAA,GAAcT,KAAAA,CAAMU,MAAM,GAAA,CAAA;AAE1C,IAAA,IAAI,CAAClC,IAAAA,IAAQ,CAACiC,UAAAA,CAAWE,MAAAA,EAAQ;AAC7B,MAAA,MAAM,IAAIV,KAAAA,CACN,CAAA,qCAAA,EAAwCD,KAAAA,CAAAA,sBAAAA,CAA6B,CAAA;AAE7E,IAAA;AAEA,IAAA,OAAO;AAAIQ,MAAAA,GAAAA,SAAAA;AAAW,MAAA;AAAEhC,QAAAA,IAAAA;QAAMoC,KAAAA,EAAOH,UAAAA,CAAWI,KAAK,GAAA;AAAK;;EAC9D,CAAA,EACA,EAAE,CAAA,CAELd,MAAAA,CACG,qDACA,iJAAA,EACA,CAACC,OAAef,OAAAA,KAAAA;AACZ,IAAA,MAAM,CAAC6B,MAAMC,QAAAA,EAAUC,aAAAA,EAAexC,IAAAA,CAAAA,GAAQwB,KAAAA,CAAMU,MAAM,GAAA,CAAA;AAE1D,IAAA,QAAQI,IAAAA;MACJ,KAAK,MAAA;AACD,QAAA,IAAI,CAACC,QAAAA,EAAU;AACX,UAAA,MAAM,IAAId,MAAM,CAAA,4CAAA,CAA8C,CAAA;AAClE,QAAA;AACA,QAAA;MACJ,KAAK,SAAA;AACD,QAAA,IAAI,CAACzB,IAAAA,EAAM;AACP,UAAA,MAAM,IAAIyB,MAAM,CAAA,0CAAA,CAA4C,CAAA;AAChE,QAAA;AACA,QAAA;AACJ,MAAA;AACI,QAAA,MAAM,IAAIA,KAAAA,CAAM,CAAA,qBAAA,EAAwBa,IAAAA,CAAAA,CAAM,CAAA;AACtD;AAEA,IAAA,IAAI,CAACE,aAAAA,EAAe;AAChB,MAAA,MAAM,IAAIf,MAAM,CAAA,0BAAA,CAA4B,CAAA;AAChD,IAAA;AAEA,IAAA,OAAO;AACAhB,MAAAA,GAAAA,OAAAA;AACHgC,MAAAA,mBAAAA,CAAoBC,KAAAA,CAAM;AAAEJ,QAAAA,IAAAA;AAAMC,QAAAA,QAAAA;AAAUC,QAAAA,aAAAA;AAAexC,QAAAA;OAAK;;EAExE,CAAA,EACA,EAAE,CAAA,CAELuB,MAAAA,CACG,4CACA,wDAAA,EACA,CAACa,OAAeO,QAAAA,KAAuB;AAAIA,IAAAA,GAAAA,QAAAA;AAAUP,IAAAA;AACrD,GAAA,EAAA,EAAE,CAAA;AAIV,EAAA,KAAA,MAAWtB,QAAQnB,KAAAA,EAAO;AACtB,IAAA,MAAMiD,cAAAA,GAAiBC,qBAAAA,CAAsBpD,OAAAA,EAASqB,IAAAA,CAAKd,IAAI,CAAA;AAC/D,IAAA,MAAM8C,iBAAAA,GAAoBC,wBAAAA,CAAyBtD,OAAAA,EAASqB,IAAAA,CAAKd,IAAI,CAAA;AAErEe,IAAAA,OAAAA,CAAQQ,MAAAA,CACJ,CAAA,EAAA,EAAKT,IAAAA,CAAKd,IAAI,sBACd,CAAA,QAAA,EAAWc,IAAAA,CAAKd,IAAI,CAAA,mBAAA,EAAsB4C,cAAAA,CAAAA,aAAAA,EAA8BE,iBAAAA,CAAkBT,IAAAA,CAAK,IAAA,CAAA,CAAA,CAAA,CAAQ,CAAA;AAE/G,EAAA;AAGAtB,EAAAA,OAAAA,CAAQQ,MAAAA,CAAO,mBAAmB,qDAAA,CAAA;AAGlCR,EAAAA,OAAAA,CACKZ,OAAAA,CAAQ,qBAAA,CAAA,CACRc,WAAAA,CAAY,0DAAA,CAAA,CACZ+B,MAAAA,CAAO,CAACC,QAAAA,KAAqBC,sBAAAA,CAAuBzD,OAAAA,EAASwD,QAAAA,CAAAA,CAAAA;AAElE,EAAA,KAAA,MAAWnC,QAAQnB,KAAAA,EAAO;AAGtBoB,IAAAA,OAAAA,CACKZ,OAAAA,CAAQW,KAAKd,IAAAA,EAAM;MAAEmD,SAAAA,EAAW;KAAM,CAAA,CACtClC,YAAY,CAAA,IAAA,EAAOH,IAAAA,CAAKd,IAAI,CAAA,sBAAA,CAAwB,CAAA,CACpDoD,mBAAmB,IAAA,CAAA,CACnBC,oBAAkB,CAClBC,UAAAA,CAAW,KAAA,CAAA,CACXC,QAAAA,CAAS,aAAa,+BAAA,CAAA,CACtBP,MAAAA,CAAO,OAAOQ,IAAAA,KAAAA;AACX,MAAA,MAAMC,mBAAmBhE,OAAAA,EAASqB,IAAAA,CAAKd,MAAMwD,IAAAA,EAAMtD,kBAAAA,CAAmBa,OAAAA,CAAAA,CAAAA;IAC1E,CAAA,CAAA;AACR,EAAA;AAGArB,EAAAA,qBAAAA,GAAwBqB,SAASb,kBAAAA,CAAAA;AAEjC,EAAA,OAAOa,OAAAA;AACX,CAAA,EA5KkB,WAAA,CAAA;AA8KX,IAAM2C,MAAAA,mBAAS,MAAA,CAAA,OAClBC,MAAAA,EACAjE,qBAAAA,KAAAA;AAEA,EAAA,IAAI;AACA,IAAA,MAAMF,SAAAA,CAAoBmE,MAAAA,EAAQjE,qBAAAA,CAAAA,CAAuBkE,UAAAA,EAAU;AACvE,EAAA,CAAA,CAAA,OAASC,KAAAA,EAAO;AACZC,IAAAA,OAAAA,CAAQD,KAAAA,CAAM,mCAA8BA,KAAAA,CAAAA;AAC5CrD,IAAAA,OAAAA,CAAQc,KAAK,CAAA,CAAA;AACjB,EAAA;AACJ,CAAA,EAVsB,QAAA","file":"ANEAMHXM.js","sourcesContent":["import { Command } from 'commander';\nimport { camelCase } from 'es-toolkit';\nimport fs from 'node:fs';\nimport path from 'node:path';\nimport process from 'node:process';\n\nimport type { EnvironmentVariable, VolumeMapping } from './config';\nimport { volumeMappingSchema } from './config';\nimport type { ChainContext } from './context';\nimport type { ToolCommandExecutionOptions } from './core';\nimport { executeToolCommand } from './core';\nimport { displayToolVersionInfo, displayVersionCombinations } from './display';\nimport { getToolDefaultVersion, getToolSupportedVersions } from './utils/finder';\n\ninterface GlobalOptions {\n    cwd?: string;\n    volume: VolumeMapping[];\n    env: EnvironmentVariable[];\n    publish?: string[];\n    script?: string;\n    customEntrypoint?: string;\n}\n\ntype RegisterExtraCommands = (\n    program: Command,\n    parseGlobalOptions: (command: Command) => ToolCommandExecutionOptions,\n) => void;\n\nconst createCli = <TImageId extends string>(\n    context: ChainContext<TImageId>,\n    registerExtraCommands?: RegisterExtraCommands,\n): Command => {\n    const { tools } = context;\n    const toolVersionOptions = Object.fromEntries(\n        tools.map(({ name }) => [`${camelCase(name)}Version`, name]),\n    );\n\n    const parseGlobalOptions = (command: Command): ToolCommandExecutionOptions => {\n        const { cwd, volume, ...options } = command.opts<GlobalOptions>();\n\n        return {\n            ...options,\n            cwd: cwd ?? process.cwd(),\n            volumes: volume,\n            versions: Object.fromEntries(\n                Object.entries(options)\n                    .map(([name, version]) => [toolVersionOptions[name], version])\n                    .filter(([tool]) => tool),\n            ),\n        };\n    };\n\n    const program = new Command();\n\n    program\n        .name('lz-tool')\n        .description(\n            '🚀 LayerZero VM tooling with intelligent version management\\n' +\n                '\\n' +\n                'Usage pattern:\\n' +\n                '  lz-tool [global-options] <tool> [tool-args...]\\n' +\n                '\\n' +\n                'Examples:\\n' +\n                '  lz-tool -e bash sui --help\\n' +\n                '  lz-tool --sui-version 1.38.0 sui client\\n' +\n                '\\n' +\n                'Note: All lz-tool options must appear BEFORE the tool name.',\n        )\n        .version('1.0.0')\n        .enablePositionalOptions(); // Required for passThroughOptions to work\n\n    // Check for --list-versions before parsing to avoid help display\n    if (process.argv.includes('--list-versions')) {\n        displayVersionCombinations(context);\n        process.exit(0);\n    }\n\n    // Add global options.\n    program\n        .option('-c, --cwd <path>', 'Current working directory', (input: string) => {\n            if (typeof input !== 'string') {\n                throw new Error('cwd flag must be a string');\n            }\n\n            if (!path.isAbsolute(input)) {\n                throw new Error('cwd must be an absolute path if provided');\n            }\n\n            if (!fs.existsSync(input)) {\n                throw new Error('cwd does not exist');\n            }\n\n            if (!fs.statSync(input).isDirectory()) {\n                throw new Error('cwd must be a directory');\n            }\n\n            return input;\n        })\n        .option(\n            '-e, --custom-entrypoint <entrypoint>',\n            'Override the default Docker entrypoint for the tool',\n        )\n        .option(\n            '--script <script>',\n            'Execute a custom script using bash -c in the Docker container (e.g., --script \"npm install && npm test\")',\n        )\n        .option(\n            '--env <name=value>',\n            'Set environment variables for Docker container (e.g., --env NODE_ENV=production)',\n            (input: string, variables: EnvironmentVariable[]) => {\n                const [name, ...valueParts] = input.split('=');\n\n                if (!name || !valueParts.length) {\n                    throw new Error(\n                        `Invalid environment variable format: ${input}. Use --env NAME=VALUE`,\n                    );\n                }\n\n                return [...variables, { name, value: valueParts.join('=') }];\n            },\n            [],\n        )\n        .option(\n            '-v, --volume <type:hostPath:containerPath[:name]>',\n            'Volume mappings in the format type:hostPath:containerPath[:name] (e.g., host:/host/path:/container/path or isolate::/container/path:volumeName)',\n            (input: string, volumes: VolumeMapping[]) => {\n                const [type, hostPath, containerPath, name] = input.split(':');\n\n                switch (type) {\n                    case 'host':\n                        if (!hostPath) {\n                            throw new Error(`Host path is required for volume type 'host'`);\n                        }\n                        break;\n                    case 'isolate':\n                        if (!name) {\n                            throw new Error(`Name is required for volume type 'isolate'`);\n                        }\n                        break;\n                    default:\n                        throw new Error(`Invalid volume type: ${type}`);\n                }\n\n                if (!containerPath) {\n                    throw new Error(`Container path is required`);\n                }\n\n                return [\n                    ...volumes,\n                    volumeMappingSchema.parse({ type, hostPath, containerPath, name }),\n                ];\n            },\n            [],\n        )\n        .option(\n            '-p, --publish <host_port:container_port>',\n            \"Publish a container's port(s) to the host (repeatable)\",\n            (value: string, previous: string[]) => [...previous, value],\n            [],\n        );\n\n    // Add version options for each tool dynamically\n    for (const tool of tools) {\n        const defaultVersion = getToolDefaultVersion(context, tool.name);\n        const supportedVersions = getToolSupportedVersions(context, tool.name);\n\n        program.option(\n            `--${tool.name}-version <version>`,\n            `Specify ${tool.name} version (default: ${defaultVersion}, supported: ${supportedVersions.join(', ')})`,\n        );\n    }\n\n    // Add utility options\n    program.option('--list-versions', 'Display all supported version combinations and exit');\n\n    // Add version info command\n    program\n        .command('version-info <tool>')\n        .description('Display detailed version information for a specific tool')\n        .action((toolName: string) => displayToolVersionInfo(context, toolName));\n\n    for (const tool of tools) {\n        // Don't add any options to the subcommand level.\n        // All lz-tool options must be specified before the subcommand.\n        program\n            .command(tool.name, { isDefault: false })\n            .description(`Run ${tool.name} with version checking`)\n            .passThroughOptions(true) // Pass through all options after the subcommand\n            .allowUnknownOption()\n            .helpOption(false) // Disable automatic help option to pass --help to the tool\n            .argument('[args...]', 'Arguments to pass to the tool')\n            .action(async (args: string[]) => {\n                await executeToolCommand(context, tool.name, args, parseGlobalOptions(program));\n            });\n    }\n\n    // Allow external registration of extra commands\n    registerExtraCommands?.(program, parseGlobalOptions);\n\n    return program;\n};\n\nexport const runCli = async <TImageId extends string>(\n    config: ChainContext<TImageId>,\n    registerExtraCommands?: RegisterExtraCommands,\n): Promise<void> => {\n    try {\n        await createCli<TImageId>(config, registerExtraCommands).parseAsync();\n    } catch (error) {\n        console.error('❌ VM tool execution failed', error);\n        process.exit(1);\n    }\n};\n"]}

package/dist/{5BNKRW3P.cjs → G3PSQ4E6.cjs}

@@ -1,7 +1,7 @@
 'use strict';
 
 var O2P6E7GR_cjs = require('./O2P6E7GR.cjs');
-var I4DRCDSO_cjs = require('./I4DRCDSO.cjs');
+var NT6J6VGZ_cjs = require('./NT6J6VGZ.cjs');
 var _2NTYK3VO_cjs = require('./2NTYK3VO.cjs');
 var _5GPMTH2I_cjs = require('./5GPMTH2I.cjs');
 var _24WEKBY3_cjs = require('./24WEKBY3.cjs');
@@ -97,7 +97,10 @@ var createCli = /* @__PURE__ */ _24WEKBY3_cjs.__name((context, registerExtraComm
         name
       })
     ];
-  }, []).option("-p, --publish <host_port:container_port>", "Publish a container's port(s) to the host");
+  }, []).option("-p, --publish <host_port:container_port>", "Publish a container's port(s) to the host (repeatable)", (value, previous) => [
+    ...previous,
+    value
+  ], []);
   for (const tool of tools) {
     const defaultVersion = _5GPMTH2I_cjs.getToolDefaultVersion(context, tool.name);
     const supportedVersions = _5GPMTH2I_cjs.getToolSupportedVersions(context, tool.name);
@@ -109,7 +112,7 @@ var createCli = /* @__PURE__ */ _24WEKBY3_cjs.__name((context, registerExtraComm
     program.command(tool.name, {
       isDefault: false
     }).description(`Run ${tool.name} with version checking`).passThroughOptions(true).allowUnknownOption().helpOption(false).argument("[args...]", "Arguments to pass to the tool").action(async (args) => {
-      await I4DRCDSO_cjs.executeToolCommand(context, tool.name, args, parseGlobalOptions(program));
+      await NT6J6VGZ_cjs.executeToolCommand(context, tool.name, args, parseGlobalOptions(program));
     });
   }
   registerExtraCommands?.(program, parseGlobalOptions);
@@ -125,5 +128,5 @@ var runCli = /* @__PURE__ */ _24WEKBY3_cjs.__name(async (config, registerExtraCo
 }, "runCli");
 
 exports.runCli = runCli;
-//# sourceMappingURL=5BNKRW3P.cjs.map
-//# sourceMappingURL=5BNKRW3P.cjs.map
+//# sourceMappingURL=G3PSQ4E6.cjs.map
+//# sourceMappingURL=G3PSQ4E6.cjs.map

package/dist/G3PSQ4E6.cjs.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/cli.ts"],"names":["init_cjs_shims","createCli","__name","context","registerExtraCommands","tools","toolVersionOptions","Object","fromEntries","map","name","camelCase","parseGlobalOptions","command","cwd","volume","options","opts","process","volumes","versions","entries","version","filter","tool","program","Command","description","enablePositionalOptions","argv","includes","displayVersionCombinations","exit","option","input","Error","path","isAbsolute","fs","existsSync","statSync","isDirectory","variables","valueParts","split","length","value","join","type","hostPath","containerPath","volumeMappingSchema","parse","previous","defaultVersion","getToolDefaultVersion","supportedVersions","getToolSupportedVersions","action","toolName","displayToolVersionInfo","isDefault","passThroughOptions","allowUnknownOption","helpOption","argument","args","executeToolCommand","runCli","config","parseAsync","error","console"],"mappings":";;;;;;;;;;;;;;;;;;;;AAAAA,4BAAA,EAAA;AA4BA,IAAMC,SAAAA,mBAAYC,oBAAA,CAAA,CACdC,OAAAA,EACAC,qBAAAA,KAAAA;AAEA,EAAA,MAAM,EAAEC,OAAK,GAAKF,OAAAA;AAClB,EAAA,MAAMG,kBAAAA,GAAqBC,OAAOC,WAAAA,CAC9BH,KAAAA,CAAMI,IAAI,CAAC,EAAEC,MAAI,KAAO;IAAC,CAAA,EAAGC,mBAAAA,CAAUD,IAAAA,CAAAA,CAAAA,OAAAA,CAAAA;AAAgBA,IAAAA;GAAK,CAAA,CAAA;AAG/D,EAAA,MAAME,kBAAAA,yCAAsBC,OAAAA,KAAAA;AACxB,IAAA,MAAM,EAAEC,GAAAA,EAAKC,MAAAA,EAAQ,GAAGC,OAAAA,EAAAA,GAAYH,QAAQI,IAAAA,EAAI;AAEhD,IAAA,OAAO;MACH,GAAGD,OAAAA;MACHF,GAAAA,EAAKA,GAAAA,IAAOI,yBAAQJ,GAAAA,EAAG;MACvBK,OAAAA,EAASJ,MAAAA;MACTK,QAAAA,EAAUb,MAAAA,CAAOC,WAAAA,CACbD,MAAAA,CAAOc,OAAAA,CAAQL,OAAAA,CAAAA,CACVP,GAAAA,CAAI,CAAC,CAACC,IAAAA,EAAMY,OAAAA,CAAAA,KAAa;AAAChB,QAAAA,kBAAAA,CAAmBI,IAAAA,CAAAA;AAAOY,QAAAA;AAAQ,OAAA,CAAA,CAC5DC,OAAO,CAAC,CAACC,IAAAA,CAAAA,KAAUA,IAAAA,CAAAA;AAEhC,KAAA;EACJ,CAAA,EAb2B,oBAAA,CAAA;AAe3B,EAAA,MAAMC,OAAAA,GAAU,IAAIC,iBAAAA,EAAAA;AAEpBD,EAAAA,OAAAA,CACKf,IAAAA,CAAK,SAAA,CAAA,CACLiB,WAAAA,CACG,6RASI,CAAA,CAEPL,OAAAA,CAAQ,OAAA,CAAA,CACRM,uBAAAA,EAAuB;AAG5B,EAAA,IAAIV,wBAAAA,CAAQW,IAAAA,CAAKC,QAAAA,CAAS,iBAAA,CAAA,EAAoB;AAC1CC,IAAAA,uCAAAA,CAA2B5B,OAAAA,CAAAA;AAC3Be,IAAAA,wBAAAA,CAAQc,KAAK,CAAA,CAAA;AACjB,EAAA;AAGAP,EAAAA,OAAAA,CACKQ,MAAAA,CAAO,kBAAA,EAAoB,2BAAA,EAA6B,CAACC,KAAAA,KAAAA;AACtD,IAAA,IAAI,OAAOA,UAAU,QAAA,EAAU;AAC3B,MAAA,MAAM,IAAIC,MAAM,2BAAA,CAAA;AACpB,IAAA;AAEA,IAAA,IAAI,CAACC,qBAAAA,CAAKC,UAAAA,CAAWH,KAAAA,CAAAA,EAAQ;AACzB,MAAA,MAAM,IAAIC,MAAM,0CAAA,CAAA;AACpB,IAAA;AAEA,IAAA,IAAI,CAACG,mBAAAA,CAAGC,UAAAA,CAAWL,KAAAA,CAAAA,EAAQ;AACvB,MAAA,MAAM,IAAIC,MAAM,oBAAA,CAAA;AACpB,IAAA;AAEA,IAAA,IAAI,CAACG,mBAAAA,CAAGE,QAAAA,CAASN,KAAAA,CAAAA,CAAOO,aAAW,EAAI;AACnC,MAAA,MAAM,IAAIN,MAAM,yBAAA,CAAA;AACpB,IAAA;AAEA,IAAA,OAAOD,KAAAA;AACX,EAAA,CAAA,CAAA,CACCD,MAAAA,CACG,sCAAA,EACA,qDAAA,EAEHA,MAAAA,CACG,mBAAA,EACA,0GAAA,CAAA,CAEHA,MAAAA,CACG,oBAAA,EACA,kFAAA,EACA,CAACC,OAAeQ,SAAAA,KAAAA;AACZ,IAAA,MAAM,CAAChC,IAAAA,EAAM,GAAGiC,UAAAA,CAAAA,GAAcT,KAAAA,CAAMU,MAAM,GAAA,CAAA;AAE1C,IAAA,IAAI,CAAClC,IAAAA,IAAQ,CAACiC,UAAAA,CAAWE,MAAAA,EAAQ;AAC7B,MAAA,MAAM,IAAIV,KAAAA,CACN,CAAA,qCAAA,EAAwCD,KAAAA,CAAAA,sBAAAA,CAA6B,CAAA;AAE7E,IAAA;AAEA,IAAA,OAAO;AAAIQ,MAAAA,GAAAA,SAAAA;AAAW,MAAA;AAAEhC,QAAAA,IAAAA;QAAMoC,KAAAA,EAAOH,UAAAA,CAAWI,KAAK,GAAA;AAAK;;EAC9D,CAAA,EACA,EAAE,CAAA,CAELd,MAAAA,CACG,qDACA,iJAAA,EACA,CAACC,OAAef,OAAAA,KAAAA;AACZ,IAAA,MAAM,CAAC6B,MAAMC,QAAAA,EAAUC,aAAAA,EAAexC,IAAAA,CAAAA,GAAQwB,KAAAA,CAAMU,MAAM,GAAA,CAAA;AAE1D,IAAA,QAAQI,IAAAA;MACJ,KAAK,MAAA;AACD,QAAA,IAAI,CAACC,QAAAA,EAAU;AACX,UAAA,MAAM,IAAId,MAAM,CAAA,4CAAA,CAA8C,CAAA;AAClE,QAAA;AACA,QAAA;MACJ,KAAK,SAAA;AACD,QAAA,IAAI,CAACzB,IAAAA,EAAM;AACP,UAAA,MAAM,IAAIyB,MAAM,CAAA,0CAAA,CAA4C,CAAA;AAChE,QAAA;AACA,QAAA;AACJ,MAAA;AACI,QAAA,MAAM,IAAIA,KAAAA,CAAM,CAAA,qBAAA,EAAwBa,IAAAA,CAAAA,CAAM,CAAA;AACtD;AAEA,IAAA,IAAI,CAACE,aAAAA,EAAe;AAChB,MAAA,MAAM,IAAIf,MAAM,CAAA,0BAAA,CAA4B,CAAA;AAChD,IAAA;AAEA,IAAA,OAAO;AACAhB,MAAAA,GAAAA,OAAAA;AACHgC,MAAAA,iCAAAA,CAAoBC,KAAAA,CAAM;AAAEJ,QAAAA,IAAAA;AAAMC,QAAAA,QAAAA;AAAUC,QAAAA,aAAAA;AAAexC,QAAAA;OAAK;;EAExE,CAAA,EACA,EAAE,CAAA,CAELuB,MAAAA,CACG,4CACA,wDAAA,EACA,CAACa,OAAeO,QAAAA,KAAuB;AAAIA,IAAAA,GAAAA,QAAAA;AAAUP,IAAAA;AACrD,GAAA,EAAA,EAAE,CAAA;AAIV,EAAA,KAAA,MAAWtB,QAAQnB,KAAAA,EAAO;AACtB,IAAA,MAAMiD,cAAAA,GAAiBC,mCAAAA,CAAsBpD,OAAAA,EAASqB,IAAAA,CAAKd,IAAI,CAAA;AAC/D,IAAA,MAAM8C,iBAAAA,GAAoBC,sCAAAA,CAAyBtD,OAAAA,EAASqB,IAAAA,CAAKd,IAAI,CAAA;AAErEe,IAAAA,OAAAA,CAAQQ,MAAAA,CACJ,CAAA,EAAA,EAAKT,IAAAA,CAAKd,IAAI,sBACd,CAAA,QAAA,EAAWc,IAAAA,CAAKd,IAAI,CAAA,mBAAA,EAAsB4C,cAAAA,CAAAA,aAAAA,EAA8BE,iBAAAA,CAAkBT,IAAAA,CAAK,IAAA,CAAA,CAAA,CAAA,CAAQ,CAAA;AAE/G,EAAA;AAGAtB,EAAAA,OAAAA,CAAQQ,MAAAA,CAAO,mBAAmB,qDAAA,CAAA;AAGlCR,EAAAA,OAAAA,CACKZ,OAAAA,CAAQ,qBAAA,CAAA,CACRc,WAAAA,CAAY,0DAAA,CAAA,CACZ+B,MAAAA,CAAO,CAACC,QAAAA,KAAqBC,mCAAAA,CAAuBzD,OAAAA,EAASwD,QAAAA,CAAAA,CAAAA;AAElE,EAAA,KAAA,MAAWnC,QAAQnB,KAAAA,EAAO;AAGtBoB,IAAAA,OAAAA,CACKZ,OAAAA,CAAQW,KAAKd,IAAAA,EAAM;MAAEmD,SAAAA,EAAW;KAAM,CAAA,CACtClC,YAAY,CAAA,IAAA,EAAOH,IAAAA,CAAKd,IAAI,CAAA,sBAAA,CAAwB,CAAA,CACpDoD,mBAAmB,IAAA,CAAA,CACnBC,oBAAkB,CAClBC,UAAAA,CAAW,KAAA,CAAA,CACXC,QAAAA,CAAS,aAAa,+BAAA,CAAA,CACtBP,MAAAA,CAAO,OAAOQ,IAAAA,KAAAA;AACX,MAAA,MAAMC,gCAAmBhE,OAAAA,EAASqB,IAAAA,CAAKd,MAAMwD,IAAAA,EAAMtD,kBAAAA,CAAmBa,OAAAA,CAAAA,CAAAA;IAC1E,CAAA,CAAA;AACR,EAAA;AAGArB,EAAAA,qBAAAA,GAAwBqB,SAASb,kBAAAA,CAAAA;AAEjC,EAAA,OAAOa,OAAAA;AACX,CAAA,EA5KkB,WAAA,CAAA;AA8KX,IAAM2C,MAAAA,mBAASlE,oBAAA,CAAA,OAClBmE,MAAAA,EACAjE,qBAAAA,KAAAA;AAEA,EAAA,IAAI;AACA,IAAA,MAAMH,SAAAA,CAAoBoE,MAAAA,EAAQjE,qBAAAA,CAAAA,CAAuBkE,UAAAA,EAAU;AACvE,EAAA,CAAA,CAAA,OAASC,KAAAA,EAAO;AACZC,IAAAA,OAAAA,CAAQD,KAAAA,CAAM,mCAA8BA,KAAAA,CAAAA;AAC5CrD,IAAAA,wBAAAA,CAAQc,KAAK,CAAA,CAAA;AACjB,EAAA;AACJ,CAAA,EAVsB,QAAA","file":"G3PSQ4E6.cjs","sourcesContent":["import { Command } from 'commander';\nimport { camelCase } from 'es-toolkit';\nimport fs from 'node:fs';\nimport path from 'node:path';\nimport process from 'node:process';\n\nimport type { EnvironmentVariable, VolumeMapping } from './config';\nimport { volumeMappingSchema } from './config';\nimport type { ChainContext } from './context';\nimport type { ToolCommandExecutionOptions } from './core';\nimport { executeToolCommand } from './core';\nimport { displayToolVersionInfo, displayVersionCombinations } from './display';\nimport { getToolDefaultVersion, getToolSupportedVersions } from './utils/finder';\n\ninterface GlobalOptions {\n    cwd?: string;\n    volume: VolumeMapping[];\n    env: EnvironmentVariable[];\n    publish?: string[];\n    script?: string;\n    customEntrypoint?: string;\n}\n\ntype RegisterExtraCommands = (\n    program: Command,\n    parseGlobalOptions: (command: Command) => ToolCommandExecutionOptions,\n) => void;\n\nconst createCli = <TImageId extends string>(\n    context: ChainContext<TImageId>,\n    registerExtraCommands?: RegisterExtraCommands,\n): Command => {\n    const { tools } = context;\n    const toolVersionOptions = Object.fromEntries(\n        tools.map(({ name }) => [`${camelCase(name)}Version`, name]),\n    );\n\n    const parseGlobalOptions = (command: Command): ToolCommandExecutionOptions => {\n        const { cwd, volume, ...options } = command.opts<GlobalOptions>();\n\n        return {\n            ...options,\n            cwd: cwd ?? process.cwd(),\n            volumes: volume,\n            versions: Object.fromEntries(\n                Object.entries(options)\n                    .map(([name, version]) => [toolVersionOptions[name], version])\n                    .filter(([tool]) => tool),\n            ),\n        };\n    };\n\n    const program = new Command();\n\n    program\n        .name('lz-tool')\n        .description(\n            '🚀 LayerZero VM tooling with intelligent version management\\n' +\n                '\\n' +\n                'Usage pattern:\\n' +\n                '  lz-tool [global-options] <tool> [tool-args...]\\n' +\n                '\\n' +\n                'Examples:\\n' +\n                '  lz-tool -e bash sui --help\\n' +\n                '  lz-tool --sui-version 1.38.0 sui client\\n' +\n                '\\n' +\n                'Note: All lz-tool options must appear BEFORE the tool name.',\n        )\n        .version('1.0.0')\n        .enablePositionalOptions(); // Required for passThroughOptions to work\n\n    // Check for --list-versions before parsing to avoid help display\n    if (process.argv.includes('--list-versions')) {\n        displayVersionCombinations(context);\n        process.exit(0);\n    }\n\n    // Add global options.\n    program\n        .option('-c, --cwd <path>', 'Current working directory', (input: string) => {\n            if (typeof input !== 'string') {\n                throw new Error('cwd flag must be a string');\n            }\n\n            if (!path.isAbsolute(input)) {\n                throw new Error('cwd must be an absolute path if provided');\n            }\n\n            if (!fs.existsSync(input)) {\n                throw new Error('cwd does not exist');\n            }\n\n            if (!fs.statSync(input).isDirectory()) {\n                throw new Error('cwd must be a directory');\n            }\n\n            return input;\n        })\n        .option(\n            '-e, --custom-entrypoint <entrypoint>',\n            'Override the default Docker entrypoint for the tool',\n        )\n        .option(\n            '--script <script>',\n            'Execute a custom script using bash -c in the Docker container (e.g., --script \"npm install && npm test\")',\n        )\n        .option(\n            '--env <name=value>',\n            'Set environment variables for Docker container (e.g., --env NODE_ENV=production)',\n            (input: string, variables: EnvironmentVariable[]) => {\n                const [name, ...valueParts] = input.split('=');\n\n                if (!name || !valueParts.length) {\n                    throw new Error(\n                        `Invalid environment variable format: ${input}. Use --env NAME=VALUE`,\n                    );\n                }\n\n                return [...variables, { name, value: valueParts.join('=') }];\n            },\n            [],\n        )\n        .option(\n            '-v, --volume <type:hostPath:containerPath[:name]>',\n            'Volume mappings in the format type:hostPath:containerPath[:name] (e.g., host:/host/path:/container/path or isolate::/container/path:volumeName)',\n            (input: string, volumes: VolumeMapping[]) => {\n                const [type, hostPath, containerPath, name] = input.split(':');\n\n                switch (type) {\n                    case 'host':\n                        if (!hostPath) {\n                            throw new Error(`Host path is required for volume type 'host'`);\n                        }\n                        break;\n                    case 'isolate':\n                        if (!name) {\n                            throw new Error(`Name is required for volume type 'isolate'`);\n                        }\n                        break;\n                    default:\n                        throw new Error(`Invalid volume type: ${type}`);\n                }\n\n                if (!containerPath) {\n                    throw new Error(`Container path is required`);\n                }\n\n                return [\n                    ...volumes,\n                    volumeMappingSchema.parse({ type, hostPath, containerPath, name }),\n                ];\n            },\n            [],\n        )\n        .option(\n            '-p, --publish <host_port:container_port>',\n            \"Publish a container's port(s) to the host (repeatable)\",\n            (value: string, previous: string[]) => [...previous, value],\n            [],\n        );\n\n    // Add version options for each tool dynamically\n    for (const tool of tools) {\n        const defaultVersion = getToolDefaultVersion(context, tool.name);\n        const supportedVersions = getToolSupportedVersions(context, tool.name);\n\n        program.option(\n            `--${tool.name}-version <version>`,\n            `Specify ${tool.name} version (default: ${defaultVersion}, supported: ${supportedVersions.join(', ')})`,\n        );\n    }\n\n    // Add utility options\n    program.option('--list-versions', 'Display all supported version combinations and exit');\n\n    // Add version info command\n    program\n        .command('version-info <tool>')\n        .description('Display detailed version information for a specific tool')\n        .action((toolName: string) => displayToolVersionInfo(context, toolName));\n\n    for (const tool of tools) {\n        // Don't add any options to the subcommand level.\n        // All lz-tool options must be specified before the subcommand.\n        program\n            .command(tool.name, { isDefault: false })\n            .description(`Run ${tool.name} with version checking`)\n            .passThroughOptions(true) // Pass through all options after the subcommand\n            .allowUnknownOption()\n            .helpOption(false) // Disable automatic help option to pass --help to the tool\n            .argument('[args...]', 'Arguments to pass to the tool')\n            .action(async (args: string[]) => {\n                await executeToolCommand(context, tool.name, args, parseGlobalOptions(program));\n            });\n    }\n\n    // Allow external registration of extra commands\n    registerExtraCommands?.(program, parseGlobalOptions);\n\n    return program;\n};\n\nexport const runCli = async <TImageId extends string>(\n    config: ChainContext<TImageId>,\n    registerExtraCommands?: RegisterExtraCommands,\n): Promise<void> => {\n    try {\n        await createCli<TImageId>(config, registerExtraCommands).parseAsync();\n    } catch (error) {\n        console.error('❌ VM tool execution failed', error);\n        process.exit(1);\n    }\n};\n"]}

package/dist/{55NXWILT.js → JEAIQIUM.js}

@@ -168,10 +168,10 @@ async function executeToolCommand(context, toolName, args, { cwd, volumes: userV
     `${workspaceRoot}:/workspace`,
     "-w",
     `/workspace/${relativePath}`,
-    ...publish ? [
+    ...(publish ?? []).flatMap((p) => [
       "-p",
-      publish.trim()
-    ] : [],
+      p.trim()
+    ]),
     ...resolveVolumePaths(volumes, workspaceRoot).flatMap((volume) => [
       "-v",
       getVolumeName(volume)
@@ -193,12 +193,14 @@ async function executeToolCommand(context, toolName, args, { cwd, volumes: userV
     return result;
   });
   if (output.exitCode) {
-    throw new Error(`Failed to run Docker container (exit code: ${output.exitCode})`);
+    const stdout = output.stdout.trim();
+    throw new Error(`Failed to run Docker container (exit code: ${output.exitCode})${stdout ? `
+${stdout}` : ""}`);
   }
   return output;
 }
 __name(executeToolCommand, "executeToolCommand");
 
 export { executeToolCommand };
-//# sourceMappingURL=55NXWILT.js.map
-//# sourceMappingURL=55NXWILT.js.map
+//# sourceMappingURL=JEAIQIUM.js.map
+//# sourceMappingURL=JEAIQIUM.js.map

package/dist/JEAIQIUM.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/core/tool-executor.ts"],"names":["getHostUserIds","userInfo","os","uid","gid","undefined","$","verbose","stdio","process","stderr","mergeVolumes","defaultVolumes","userVolumes","uniqBy","volume","containerPath","resolveVolumePaths","volumes","workspaceRoot","map","type","hostPath","path","resolve","replace","homedir","ensureDockerImage","imageUri","output","nothrow","exitCode","console","info","error","Error","stringifyError","join","executeToolCommand","context","toolName","args","cwd","customEntrypoint","entrypoint","env","customEnvVars","script","publish","versions","tool","findToolByName","preExecute","length","name","overrides","filter","uv","some","dv","resolvedVersion","resolveTypeVersions","getSecondaryVersion","secondaryVersion","satisfies","warn","getImageUriForTool","findWorkspaceRoot","relativePath","relative","trim","defaultEnv","hasDockerSocketMount","v","dockerSocketEnv","value","envArgs","flatMap","hostUserIds","userIdEnvArgs","finalArgs","dockerArgs","privileged","p","getVolumeName","lockMany","locked","label","time","result","timeEnd","stdout"],"mappings":";;;;;;;;;;;;;;;AAAA,cAAA,EAAA;AAqBA,IAAMA,iCAAiB,MAAA,CAAA,MAAA;AAEnB,EAAA,MAAMC,QAAAA,GAAWC,GAAGD,QAAAA,EAAQ;AAC5B,EAAA,IAAIA,QAAAA,CAASE,GAAAA,KAAQ,EAAA,IAAMF,QAAAA,CAASG,QAAQ,EAAA,EAAI;AAC5C,IAAA,OAAOC,MAAAA;AACX,EAAA;AACA,EAAA,OAAO;AAAEF,IAAAA,GAAAA,EAAKF,QAAAA,CAASE,GAAAA;AAAKC,IAAAA,GAAAA,EAAKH,QAAAA,CAASG;AAAI,GAAA;AAClD,CAAA,EAPuB,gBAAA,CAAA;AAUvBE,CAAAA,CAAEC,OAAAA,GAAU,IAAA;AACZD,CAAAA,CAAEE,KAAAA,GAAQ;AAAC,EAAA,SAAA;AAAW,EAAA,MAAA;EAAQC,OAAAA,CAAQC;;AAMtC,IAAMC,YAAAA,mBAAe,MAAA,CAAA,CACjBC,cAAAA,EACAC,WAAAA,KACkBC,MAAAA,CAAO;AAAID,EAAAA,GAAAA,WAAAA;AAAgBD,EAAAA,GAAAA;GAAiB,CAACG,MAAAA,KAAWA,MAAAA,CAAOC,aAAa,CAAA,EAH7E,cAAA,CAAA;AAWrB,IAAMC,kBAAAA,mBAAqB,MAAA,CAAA,CAACC,OAAAA,EAA0BC,aAAAA,KAClDD,OAAAA,CAAQE,IAAI,CAACL,MAAAA,KACTA,MAAAA,CAAOM,IAAAA,KAAS,MAAA,GACV;EACI,GAAGN,MAAAA;EACHO,QAAAA,EAAUC,IAAAA,CAAKC,OAAAA,CACXL,aAAAA,EACAJ,MAAAA,CAAOO,QAAAA,CAASG,QAAQ,IAAA,EAAMvB,EAAAA,CAAGwB,OAAAA,EAAO,CAAA;AAEhD,CAAA,GACAX,MAAAA,CAAAA,EAVa,oBAAA,CAAA;AAa3B,IAAMY,iBAAAA,iCAA2BC,QAAAA,KAAAA;AAC7B,EAAA,IAAIC,MAAAA;AAEJ,EAAA,IAAI;AAOAA,IAAAA,MAAAA,GAAS,MAAMvB,CAAAA,CAAAA,sCAAAA,EAA0CsB,QAAAA,CAAAA,CAAAA,CAAWE,OAAAA,EAAO;AAC3E,IAAA,IAAI,CAACD,OAAOE,QAAAA,EAAU;AAClBC,MAAAA,OAAAA,CAAQC,IAAAA,CAAK,CAAA,kCAAA,EAAgCL,QAAAA,CAAAA,CAAU,CAAA;AACvD,MAAA;AACJ,IAAA;AAEAI,IAAAA,OAAAA,CAAQC,IAAAA,CAAK,wCAAiCL,QAAAA,CAAAA;AAC9CC,IAAAA,MAAAA,GAAS,MAAMvB,CAAAA,CAAAA,YAAAA,EAAgBsB,QAAAA,CAAAA,CAAAA,CAAWE,OAAAA,EAAO;AACrD,EAAA,CAAA,CAAA,OAASI,KAAAA,EAAgB;AACrB,IAAA,MAAM,IAAIC,MAAM,CAAA,4BAAA,EAA+BP,QAAAA,KAAaQ,cAAAA,CAAeF,KAAAA,CAAAA,CAAAA,CAAQ,CAAA;AACvF,EAAA;AAEA,EAAA,IAAIL,OAAOE,QAAAA,EAAU;AACjB,IAAA,MAAM,IAAII,KAAAA,CACN;AACI,MAAA,6BAAA;AACA,MAAA,CAAA,WAAA,EAAcP,QAAAA,CAAAA,cAAAA,CAAAA;AACd,MAAA;AACFS,KAAAA,CAAAA,IAAAA,CAAK,IAAA,CAAA,CAAA;AAEf,EAAA;AAEAL,EAAAA,OAAAA,CAAQC,IAAAA,CAAK,CAAA,4BAAA,EAA0BL,QAAAA,CAAAA,CAAU,CAAA;AACrD,CAAA,EAjC0B,mBAAA,CAAA;AAiD1B,eAAsBU,mBAClBC,OAAAA,EACAC,QAAAA,EACAC,IAAAA,EACA,EACIC,KACAxB,OAAAA,EAASL,WAAAA,EACT8B,gBAAAA,EAAkBC,UAAAA,EAClBC,KAAKC,aAAAA,EACLC,MAAAA,EACAC,SACAC,QAAAA,GAAW,IAAE,EACa;AAE9B,EAAA,MAAMC,IAAAA,GAAOC,cAAAA,CAAeZ,OAAAA,EAASC,QAAAA,CAAAA;AAGrC,EAAA,IAAIU,KAAKE,UAAAA,EAAY;AACjB,IAAA,MAAMF,IAAAA,CAAKE,WAAWb,OAAAA,EAAS;AAC3BG,MAAAA,GAAAA;AACAD,MAAAA,IAAAA;MACAvB,OAAAA,EAASL,WAAAA;MACTgC,GAAAA,EAAKC,aAAAA;AACLC,MAAAA,MAAAA;AACAC,MAAAA,OAAAA;AACAC,MAAAA;KACJ,CAAA;AACJ,EAAA;AAGA,EAAA,MAAMrC,cAAAA,GAAiBsC,IAAAA,CAAKtC,cAAAA,IAAkB,EAAA;AAC9C,EAAA,MAAMM,OAAAA,GAAUP,YAAAA,CAAaC,cAAAA,EAAgBC,WAAAA,CAAAA;AAE7C,EAAA,IAAID,cAAAA,CAAeyC,SAAS,CAAA,EAAG;AAC3BrB,IAAAA,OAAAA,CAAQC,KAAK,CAAA,gBAAA,EAAYrB,cAAAA,CAAeyC,MAAM,CAAA,6BAAA,EAAgCH,IAAAA,CAAKI,IAAI,CAAA,CAAE,CAAA;AACzF,IAAA,IAAIzC,WAAAA,CAAYwC,SAAS,CAAA,EAAG;AACxB,MAAA,MAAME,SAAAA,GAAY1C,WAAAA,CAAY2C,MAAAA,CAAO,CAACC,EAAAA,KAClC7C,cAAAA,CAAe8C,IAAAA,CAAK,CAACC,EAAAA,KAAOA,EAAAA,CAAG3C,aAAAA,KAAkByC,EAAAA,CAAGzC,aAAa,CAAA,CAAA;AAErE,MAAA,IAAIuC,SAAAA,CAAUF,SAAS,CAAA,EAAG;AACtBrB,QAAAA,OAAAA,CAAQC,IAAAA,CAAK,CAAA,gCAAA,EAA4BsB,SAAAA,CAAUF,MAAM,CAAA,kBAAA,CAAoB,CAAA;AACjF,MAAA;AACJ,IAAA;AACJ,EAAA;AAGA,EAAA,MAAMO,kBAAkBC,mBAAAA,CAAoBtB,OAAAA,EAASU,QAAAA,CAAAA,CAAUC,KAAKI,IAAI,CAAA;AAExE,EAAA,IAAI,CAACM,eAAAA,EAAiB;AAClB,IAAA,MAAM,IAAIzB,KAAAA,CAAM,CAAA,6BAAA,EAAgCe,IAAAA,CAAKI,IAAI,CAAA,CAAE,CAAA;AAC/D,EAAA;AAEAtB,EAAAA,OAAAA,CAAQC,KAAK,CAAA,UAAA,EAAMiB,IAAAA,CAAKI,IAAI,CAAA,UAAA,EAAaM,eAAAA,CAAAA,CAAiB,CAAA;AAG1D,EAAA,IAAIV,KAAKY,mBAAAA,EAAqB;AAC1B,IAAA,IAAI;AACA,MAAA,MAAMC,gBAAAA,GAAmB,MAAMb,IAAAA,CAAKY,mBAAAA,CAAoB;AAAEpB,QAAAA;OAAI,CAAA;AAE9D,MAAA,IAAI,CAAQsB,MAAAA,CAAAA,SAAAA,CAAUD,gBAAAA,EAAkBH,eAAAA,CAAAA,EAAkB;AACtD5B,QAAAA,OAAAA,CAAQiC,IAAAA,CACJ,CAAA,sCAAA,EAAyCF,gBAAAA,CAAAA,iCAAAA,EAAoDH,eAAAA,CAAAA,CAAAA,CAAkB,CAAA;AAEvH,MAAA;AACJ,IAAA,CAAA,CAAA,OAAS1B,KAAAA,EAAO;AAEZF,MAAAA,OAAAA,CAAQiC,IAAAA,CAAK,uCAAA,EAAyC7B,cAAAA,CAAeF,KAAAA,CAAAA,CAAAA;AACzE,IAAA;AACJ,EAAA;AAGA,EAAA,MAAMN,WAAW,MAAMsC,kBAAAA,CAAmB3B,OAAAA,EAASW,IAAAA,CAAKI,MAAMM,eAAAA,CAAAA;AAC9D,EAAA,MAAMzC,aAAAA,GAAgB,MAAMgD,iBAAAA,CAAkBzB,GAAAA,CAAAA;AAC9C,EAAA,MAAM0B,YAAAA,GAAe7C,IAAAA,CAAK8C,QAAAA,CAASlD,aAAAA,EAAeuB,GAAAA,CAAAA;AAElD,EAAA,MAAMf,kBAAkBC,QAAAA,CAAAA;AAExB,EAAA,IAAIgB,UAAAA,EAAY0B,MAAAA,EAAQ;AACpBtC,IAAAA,OAAAA,CAAQC,IAAAA,CAAK,CAAA,mCAAA,EAA+BW,UAAAA,CAAAA,CAAY,CAAA;AAC5D,EAAA;AAGA,EAAA,MAAM2B,UAAAA,GAAarB,IAAAA,CAAKqB,UAAAA,IAAc,EAAA;AAItC,EAAA,MAAMC,oBAAAA,GAAuBtD,OAAAA,CAAQwC,IAAAA,CACjC,CAACe,CAAAA,KAAMA,EAAEpD,IAAAA,KAAS,MAAA,IAAUoD,CAAAA,CAAEzD,aAAAA,KAAkB,sBAAA,CAAA;AAEpD,EAAA,MAAM0D,kBAAyCF,oBAAAA,GACzC;AACI,IAAA;MAAElB,IAAAA,EAAM,UAAA;MAAYqB,KAAAA,EAAOjC;AAAI,KAAA;AAC/B,IAAA;MAAEY,IAAAA,EAAM,qBAAA;MAAuBqB,KAAAA,EAAOxD;AAAc;MAExD,EAAA;AAEN,EAAA,MAAMyD,UAAU9D,MAAAA,CACZ;AAAIgC,IAAAA,GAAAA,aAAAA;AAAkB4B,IAAAA,GAAAA,eAAAA;AAAoBH,IAAAA,GAAAA;KAC1C,CAAC,EAAEjB,IAAAA,EAAI,KAAOA,IAAAA,CAAAA,CAChBuB,QAAQ,CAAC,EAAEvB,IAAAA,EAAMqB,KAAAA,EAAK,KAAO;AAAC,IAAA,IAAA;IAAM,CAAA,EAAGrB,IAAAA,IAAQqB,KAAAA,CAAAA;AAAQ,GAAA,CAAA;AAKzD,EAAA,MAAMG,cAAc9E,cAAAA,EAAAA;AACpB,EAAA,MAAM+E,gBAAgBD,WAAAA,GAChB;AAAC,IAAA,IAAA;AAAM,IAAA,CAAA,UAAA,EAAaA,YAAY3E,GAAG,CAAA,CAAA;AAAI,IAAA,IAAA;AAAM,IAAA,CAAA,UAAA,EAAa2E,YAAY1E,GAAG,CAAA;MACzE,EAAA;AAEN4B,EAAAA,OAAAA,CAAQC,KAAK,CAAA,uCAAA,EAAmC6C,WAAAA,EAAa3E,GAAAA,CAAAA,CAAAA,EAAO2E,WAAAA,EAAa1E,GAAAA,CAAAA,CAAK,CAAA;AAEtF,EAAA,IAAImE,UAAAA,CAAWlB,SAAS,CAAA,EAAG;AACvBrB,IAAAA,OAAAA,CAAQC,KACJ,CAAA,gBAAA,EAAYsC,UAAAA,CAAWlB,MAAM,CAAA,qCAAA,EAAwCH,IAAAA,CAAKI,IAAI,CAAA,CAAE,CAAA;AAExF,EAAA;AACA,EAAA,IAAIR,aAAAA,CAAcO,SAAS,CAAA,EAAG;AAC1BrB,IAAAA,OAAAA,CAAQC,IAAAA,CAAK,CAAA,gBAAA,EAAYa,aAAAA,CAAcO,MAAM,CAAA,+BAAA,CAAiC,CAAA;AAClF,EAAA;AAGA,EAAA,IAAI2B,SAAAA;AACJ,EAAA,IAAIjC,MAAAA,IAAUA,MAAAA,CAAOuB,IAAAA,EAAI,KAAO,EAAA,EAAI;AAChCtC,IAAAA,OAAAA,CAAQC,IAAAA,CAAK,CAAA,mCAAA,EAA+Bc,MAAAA,CAAAA,CAAQ,CAAA;AACpDiC,IAAAA,SAAAA,GAAY;AAAC,MAAA,MAAA;AAAQ,MAAA,IAAA;AAAMjC,MAAAA;;EAC/B,CAAA,MAAO;AACHiC,IAAAA,SAAAA,GAAYpC,eAAevC,MAAAA,GAAY;MAAC6C,IAAAA,CAAKI,IAAAA;AAASb,MAAAA,GAAAA;AAAQA,KAAAA,GAAAA,IAAAA;AAClE,EAAA;AAGA,EAAA,MAAMwC,UAAAA,GAAa;AACf,IAAA,KAAA;AACI/B,IAAAA,GAAAA,IAAAA,CAAKgC,UAAAA,GAAa;AAAC,MAAA;QAAkB,EAAA;AACzC,IAAA,MAAA;AACGN,IAAAA,GAAAA,OAAAA;AACAG,IAAAA,GAAAA,aAAAA;AACH,IAAA,IAAA;AACA,IAAA,CAAA,EAAG5D,aAAAA,CAAAA,WAAAA,CAAAA;AACH,IAAA,IAAA;AACA,IAAA,CAAA,WAAA,EAAciD,YAAAA,CAAAA,CAAAA;AACVpB,IAAAA,GAAAA,CAAAA,OAAAA,IAAW,EAAA,EAAI6B,OAAAA,CAAQ,CAACM,CAAAA,KAAM;AAAC,MAAA,IAAA;AAAMA,MAAAA,CAAAA,CAAEb,IAAAA;AAAO,KAAA,CAAA;AAC/CrD,IAAAA,GAAAA,kBAAAA,CAAmBC,OAAAA,EAASC,aAAAA,CAAAA,CAAe0D,OAAAA,CAAQ,CAAC9D,MAAAA,KAAW;AAC9D,MAAA,IAAA;AACAqE,MAAAA,aAAAA,CAAcrE,MAAAA;AACjB,KAAA,CAAA;OACG6B,UAAAA,GAAa;AAAC,MAAA,cAAA;AAAgBA,MAAAA;QAAc,EAAA;AAChDhB,IAAAA,QAAAA;AACGoD,IAAAA,GAAAA;;AAGP,EAAA,MAAMnD,MAAAA,GAAS,MAAMwD,QAAAA,CACjBnE,OAAAA,CAAQ2D,OAAAA,CAAQ,CAAC9D,MAAAA,KACbA,MAAAA,CAAOM,IAAAA,KAAS,SAAA,IAAaN,MAAAA,CAAOuE,MAAAA,GAAS;IAACvE,MAAAA,CAAOuC;MAAQ,EAAE,GAEnE,YAAA;AACI,IAAA,MAAMiC,KAAAA,GAAQ,CAAA,aAAA,EAAMP,SAAAA,CAAU3C,IAAAA,CAAK,GAAA,CAAA,CAAA,CAAA;AACnCL,IAAAA,OAAAA,CAAQwD,KAAKD,KAAAA,CAAAA;AACb,IAAA,MAAME,MAAAA,GAAS,MAAMnF,CAAAA,CAAAA,OAAAA,EAAW2E,UAAAA,GAAanD,OAAAA,EAAO;AACpDE,IAAAA,OAAAA,CAAQ0D,QAAQH,KAAAA,CAAAA;AAEhB,IAAA,OAAOE,MAAAA;EACX,CAAA,CAAA;AAGJ,EAAA,IAAI5D,OAAOE,QAAAA,EAAU;AACjB,IAAA,MAAM4D,MAAAA,GAAS9D,MAAAA,CAAO8D,MAAAA,CAAOrB,IAAAA,EAAI;AACjC,IAAA,MAAM,IAAInC,KAAAA,CACN,CAAA,2CAAA,EAA8CN,MAAAA,CAAOE,QAAQ,IAAI4D,MAAAA,GAAS;EAAKA,MAAAA,CAAAA,CAAAA,GAAW,EAAA,CAAA,CAAI,CAAA;AAEtG,EAAA;AAEA,EAAA,OAAO9D,MAAAA;AACX;AA5KsBS,MAAAA,CAAAA,kBAAAA,EAAAA,oBAAAA,CAAAA","file":"JEAIQIUM.js","sourcesContent":["import { uniqBy } from 'es-toolkit';\nimport os from 'node:os';\nimport path from 'node:path';\nimport process from 'node:process';\nimport * as semver from 'semver';\nimport { $, type ProcessOutput } from 'zx';\n\nimport type { EnvironmentVariable, VolumeMapping } from '../config';\nimport type { ChainContext } from '../context';\nimport { findWorkspaceRoot } from '../utils';\nimport { getImageUriForTool, getVolumeName } from '../utils/docker';\nimport { stringifyError } from '../utils/error';\nimport { findToolByName } from '../utils/finder';\nimport { lockMany } from './lock';\nimport { resolveTypeVersions } from './version-resolver';\n\n/**\n * Get the current user's UID and GID for Docker container user matching.\n * This prevents permission issues when containers write to bind-mounted directories.\n * On Windows, returns undefined as UID/GID matching is not needed.\n */\nconst getHostUserIds = (): { uid: number; gid: number } | undefined => {\n    // os.userInfo() returns uid/gid on POSIX systems, -1 on Windows\n    const userInfo = os.userInfo();\n    if (userInfo.uid === -1 || userInfo.gid === -1) {\n        return undefined;\n    }\n    return { uid: userInfo.uid, gid: userInfo.gid };\n};\n\n// Configure zx to inherit stdio by default (moved from original setup)\n$.verbose = true;\n$.stdio = ['inherit', 'pipe', process.stderr];\n\n/**\n * Merge default volumes with user-specified volumes\n * User volumes take precedence when containerPath conflicts\n */\nconst mergeVolumes = (\n    defaultVolumes: readonly VolumeMapping[],\n    userVolumes: readonly VolumeMapping[],\n): VolumeMapping[] => uniqBy([...userVolumes, ...defaultVolumes], (volume) => volume.containerPath);\n\n/**\n * Resolve host paths in volumes to absolute paths\n * - Paths starting with ~ are resolved to home directory\n * - Relative paths (starting with . or no prefix) are resolved to workspace root\n * - Absolute paths are left unchanged\n */\nconst resolveVolumePaths = (volumes: VolumeMapping[], workspaceRoot: string): VolumeMapping[] =>\n    volumes.map((volume) =>\n        volume.type === 'host'\n            ? {\n                  ...volume,\n                  hostPath: path.resolve(\n                      workspaceRoot,\n                      volume.hostPath.replace(/^~/, os.homedir()),\n                  ),\n              }\n            : volume,\n    );\n\nconst ensureDockerImage = async (imageUri: string): Promise<void> => {\n    let output: ProcessOutput;\n\n    try {\n        // Check local images first.\n        //\n        // NOTE: `docker image ls <ref>` prints repository/tag in separate columns, so\n        // `stdout.includes(<full-ref>)` is not reliable. Use `inspect` instead: exitCode=0\n        // means the image exists locally.\n        // Keep output minimal to avoid dumping full inspect JSON into CI logs.\n        output = await $`docker image inspect --format {{.Id}} ${imageUri}`.nothrow();\n        if (!output.exitCode) {\n            console.info(`✅ Using cached Docker image: ${imageUri}`);\n            return;\n        }\n\n        console.info('📥 Pulling Docker image from:', imageUri);\n        output = await $`docker pull ${imageUri}`.nothrow();\n    } catch (error: unknown) {\n        throw new Error(`Failed to pull Docker image ${imageUri}: ${stringifyError(error)}`);\n    }\n\n    if (output.exitCode) {\n        throw new Error(\n            [\n                'Docker image not available:',\n                `  - Image: ${imageUri} (pull failed)`,\n                '  - Check if the image tag exists in image registry.',\n            ].join('\\n'),\n        );\n    }\n\n    console.info(`✅ Successfully pulled: ${imageUri}`);\n};\n\nexport interface ToolCommandExecutionOptions {\n    cwd: string;\n    volumes: readonly VolumeMapping[];\n    customEntrypoint?: string;\n    env: EnvironmentVariable[];\n    args?: string[];\n    script?: string;\n    publish?: string[];\n    versions?: Record<string, string>;\n}\n\n/**\n * Enhanced tool command execution using the new version compatibility matrix system\n */\nexport async function executeToolCommand<TImageId extends string>(\n    context: ChainContext<TImageId>,\n    toolName: string,\n    args: string[],\n    {\n        cwd,\n        volumes: userVolumes,\n        customEntrypoint: entrypoint,\n        env: customEnvVars,\n        script,\n        publish,\n        versions = {},\n    }: ToolCommandExecutionOptions,\n): Promise<ProcessOutput> {\n    const tool = findToolByName(context, toolName);\n\n    // Run pre-execution hook if defined (e.g., toolchain sync)\n    if (tool.preExecute) {\n        await tool.preExecute(context, {\n            cwd,\n            args,\n            volumes: userVolumes,\n            env: customEnvVars,\n            script,\n            publish,\n            versions,\n        });\n    }\n\n    // Merge default volumes with user-specified volumes\n    const defaultVolumes = tool.defaultVolumes ?? [];\n    const volumes = mergeVolumes(defaultVolumes, userVolumes);\n\n    if (defaultVolumes.length > 0) {\n        console.info(`📦 Using ${defaultVolumes.length} default cache volume(s) for ${tool.name}`);\n        if (userVolumes.length > 0) {\n            const overrides = userVolumes.filter((uv) =>\n                defaultVolumes.some((dv) => dv.containerPath === uv.containerPath),\n            );\n            if (overrides.length > 0) {\n                console.info(`🔧 User volumes override ${overrides.length} default volume(s)`);\n            }\n        }\n    }\n\n    // Get the resolved version for the current tool.\n    const resolvedVersion = resolveTypeVersions(context, versions)[tool.name];\n\n    if (!resolvedVersion) {\n        throw new Error(`No version resolved for tool ${tool.name}`);\n    }\n\n    console.info(`🔧 ${tool.name} version: ${resolvedVersion}`);\n\n    // Check secondary version validation if available\n    if (tool.getSecondaryVersion) {\n        try {\n            const secondaryVersion = await tool.getSecondaryVersion({ cwd });\n\n            if (!semver.satisfies(secondaryVersion, resolvedVersion)) {\n                console.warn(\n                    `Warning: Local configuration version (${secondaryVersion}) differs from resolved version (${resolvedVersion})`,\n                );\n            }\n        } catch (error) {\n            // Secondary version check failed, but continue with resolved version\n            console.warn('Could not validate secondary version:', stringifyError(error));\n        }\n    }\n\n    // Use Docker image with merged volumes\n    const imageUri = await getImageUriForTool(context, tool.name, resolvedVersion);\n    const workspaceRoot = await findWorkspaceRoot(cwd);\n    const relativePath = path.relative(workspaceRoot, cwd);\n\n    await ensureDockerImage(imageUri);\n\n    if (entrypoint?.trim()) {\n        console.info(`🔧 Using custom entrypoint: ${entrypoint}`);\n    }\n\n    // Merge default env vars with custom env vars (custom takes precedence)\n    const defaultEnv = tool.defaultEnv ?? [];\n\n    // Check if Docker socket is mounted (for tools that spawn Docker containers like anchor --verifiable)\n    // If so, inject HOST_CWD and HOST_WORKSPACE_ROOT so the inner container knows the host paths\n    const hasDockerSocketMount = volumes.some(\n        (v) => v.type === 'host' && v.containerPath === '/var/run/docker.sock',\n    );\n    const dockerSocketEnv: EnvironmentVariable[] = hasDockerSocketMount\n        ? [\n              { name: 'HOST_CWD', value: cwd },\n              { name: 'HOST_WORKSPACE_ROOT', value: workspaceRoot },\n          ]\n        : [];\n\n    const envArgs = uniqBy(\n        [...customEnvVars, ...dockerSocketEnv, ...defaultEnv],\n        ({ name }) => name,\n    ).flatMap(({ name, value }) => ['-e', `${name}=${value}`]);\n\n    // Add host user UID/GID for permission matching on Linux/macOS\n    // This prevents artifacts created in containers from having root ownership\n    // Currently only used for stellar which has an entrypoint that handles UID/GID\n    const hostUserIds = getHostUserIds();\n    const userIdEnvArgs = hostUserIds\n        ? ['-e', `LOCAL_UID=${hostUserIds.uid}`, '-e', `LOCAL_GID=${hostUserIds.gid}`]\n        : [];\n\n    console.info(`👤 Running container as UID:GID ${hostUserIds?.uid}:${hostUserIds?.gid}`);\n\n    if (defaultEnv.length > 0) {\n        console.info(\n            `🌍 Using ${defaultEnv.length} default environment variable(s) for ${tool.name}`,\n        );\n    }\n    if (customEnvVars.length > 0) {\n        console.info(`🌍 Using ${customEnvVars.length} custom environment variable(s)`);\n    }\n\n    // Handle custom script execution\n    let finalArgs: string[];\n    if (script && script.trim() !== '') {\n        console.info(`📜 Executing custom script: ${script}`);\n        finalArgs = ['bash', '-c', script];\n    } else {\n        finalArgs = entrypoint === undefined ? [tool.name, ...args] : args;\n    }\n\n    // Build the Docker command with proper argument separation\n    const dockerArgs = [\n        'run',\n        ...(tool.privileged ? ['--privileged'] : []),\n        '--rm',\n        ...envArgs,\n        ...userIdEnvArgs,\n        '-v',\n        `${workspaceRoot}:/workspace`,\n        '-w',\n        `/workspace/${relativePath}`,\n        ...(publish ?? []).flatMap((p) => ['-p', p.trim()]),\n        ...resolveVolumePaths(volumes, workspaceRoot).flatMap((volume) => [\n            '-v',\n            getVolumeName(volume),\n        ]),\n        ...(entrypoint ? ['--entrypoint', entrypoint] : []),\n        imageUri,\n        ...finalArgs,\n    ];\n\n    const output = await lockMany(\n        volumes.flatMap((volume) =>\n            volume.type === 'isolate' && volume.locked ? [volume.name] : [],\n        ),\n        async () => {\n            const label = `⏱️ ${finalArgs.join(' ')}`;\n            console.time(label);\n            const result = await $`docker ${dockerArgs}`.nothrow();\n            console.timeEnd(label);\n\n            return result;\n        },\n    );\n\n    if (output.exitCode) {\n        const stdout = output.stdout.trim();\n        throw new Error(\n            `Failed to run Docker container (exit code: ${output.exitCode})${stdout ? `\\n${stdout}` : ''}`,\n        );\n    }\n\n    return output;\n}\n"]}

package/dist/{I4DRCDSO.cjs → NT6J6VGZ.cjs}

@@ -195,10 +195,10 @@ async function executeToolCommand(context, toolName, args, { cwd, volumes: userV
     `${workspaceRoot}:/workspace`,
     "-w",
     `/workspace/${relativePath}`,
-    ...publish ? [
+    ...(publish ?? []).flatMap((p) => [
       "-p",
-      publish.trim()
-    ] : [],
+      p.trim()
+    ]),
     ...resolveVolumePaths(volumes, workspaceRoot).flatMap((volume) => [
       "-v",
       _533SFXIE_cjs.getVolumeName(volume)
@@ -220,12 +220,14 @@ async function executeToolCommand(context, toolName, args, { cwd, volumes: userV
     return result;
   });
   if (output.exitCode) {
-    throw new Error(`Failed to run Docker container (exit code: ${output.exitCode})`);
+    const stdout = output.stdout.trim();
+    throw new Error(`Failed to run Docker container (exit code: ${output.exitCode})${stdout ? `
+${stdout}` : ""}`);
   }
   return output;
 }
 _24WEKBY3_cjs.__name(executeToolCommand, "executeToolCommand");
 
 exports.executeToolCommand = executeToolCommand;
-//# sourceMappingURL=I4DRCDSO.cjs.map
-//# sourceMappingURL=I4DRCDSO.cjs.map
+//# sourceMappingURL=NT6J6VGZ.cjs.map
+//# sourceMappingURL=NT6J6VGZ.cjs.map

package/dist/NT6J6VGZ.cjs.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/core/tool-executor.ts"],"names":["init_cjs_shims","getHostUserIds","__name","userInfo","os","uid","gid","undefined","$","verbose","stdio","process","stderr","mergeVolumes","defaultVolumes","userVolumes","uniqBy","volume","containerPath","resolveVolumePaths","volumes","workspaceRoot","map","type","hostPath","path","resolve","replace","homedir","ensureDockerImage","imageUri","output","nothrow","exitCode","console","info","error","Error","stringifyError","join","executeToolCommand","context","toolName","args","cwd","customEntrypoint","entrypoint","env","customEnvVars","script","publish","versions","tool","findToolByName","preExecute","length","name","overrides","filter","uv","some","dv","resolvedVersion","resolveTypeVersions","getSecondaryVersion","secondaryVersion","satisfies","warn","getImageUriForTool","findWorkspaceRoot","relativePath","relative","trim","defaultEnv","hasDockerSocketMount","v","dockerSocketEnv","value","envArgs","flatMap","hostUserIds","userIdEnvArgs","finalArgs","dockerArgs","privileged","p","getVolumeName","lockMany","locked","label","time","result","timeEnd","stdout"],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAAAA,4BAAA,EAAA;AAqBA,IAAMC,iCAAiBC,oBAAA,CAAA,MAAA;AAEnB,EAAA,MAAMC,QAAAA,GAAWC,oBAAGD,QAAAA,EAAQ;AAC5B,EAAA,IAAIA,QAAAA,CAASE,GAAAA,KAAQ,EAAA,IAAMF,QAAAA,CAASG,QAAQ,EAAA,EAAI;AAC5C,IAAA,OAAOC,MAAAA;AACX,EAAA;AACA,EAAA,OAAO;AAAEF,IAAAA,GAAAA,EAAKF,QAAAA,CAASE,GAAAA;AAAKC,IAAAA,GAAAA,EAAKH,QAAAA,CAASG;AAAI,GAAA;AAClD,CAAA,EAPuB,gBAAA,CAAA;AAUvBE,IAAAA,CAAEC,OAAAA,GAAU,IAAA;AACZD,IAAAA,CAAEE,KAAAA,GAAQ;AAAC,EAAA,SAAA;AAAW,EAAA,MAAA;EAAQC,wBAAAA,CAAQC;;AAMtC,IAAMC,YAAAA,mBAAeX,oBAAA,CAAA,CACjBY,cAAAA,EACAC,WAAAA,KACkBC,gBAAAA,CAAO;AAAID,EAAAA,GAAAA,WAAAA;AAAgBD,EAAAA,GAAAA;GAAiB,CAACG,MAAAA,KAAWA,MAAAA,CAAOC,aAAa,CAAA,EAH7E,cAAA,CAAA;AAWrB,IAAMC,kBAAAA,mBAAqBjB,oBAAA,CAAA,CAACkB,OAAAA,EAA0BC,aAAAA,KAClDD,OAAAA,CAAQE,IAAI,CAACL,MAAAA,KACTA,MAAAA,CAAOM,IAAAA,KAAS,MAAA,GACV;EACI,GAAGN,MAAAA;EACHO,QAAAA,EAAUC,qBAAAA,CAAKC,OAAAA,CACXL,aAAAA,EACAJ,MAAAA,CAAOO,QAAAA,CAASG,QAAQ,IAAA,EAAMvB,mBAAAA,CAAGwB,OAAAA,EAAO,CAAA;AAEhD,CAAA,GACAX,MAAAA,CAAAA,EAVa,oBAAA,CAAA;AAa3B,IAAMY,iBAAAA,+CAA2BC,QAAAA,KAAAA;AAC7B,EAAA,IAAIC,MAAAA;AAEJ,EAAA,IAAI;AAOAA,IAAAA,MAAAA,GAAS,MAAMvB,IAAAA,CAAAA,sCAAAA,EAA0CsB,QAAAA,CAAAA,CAAAA,CAAWE,OAAAA,EAAO;AAC3E,IAAA,IAAI,CAACD,OAAOE,QAAAA,EAAU;AAClBC,MAAAA,OAAAA,CAAQC,IAAAA,CAAK,CAAA,kCAAA,EAAgCL,QAAAA,CAAAA,CAAU,CAAA;AACvD,MAAA;AACJ,IAAA;AAEAI,IAAAA,OAAAA,CAAQC,IAAAA,CAAK,wCAAiCL,QAAAA,CAAAA;AAC9CC,IAAAA,MAAAA,GAAS,MAAMvB,IAAAA,CAAAA,YAAAA,EAAgBsB,QAAAA,CAAAA,CAAAA,CAAWE,OAAAA,EAAO;AACrD,EAAA,CAAA,CAAA,OAASI,KAAAA,EAAgB;AACrB,IAAA,MAAM,IAAIC,MAAM,CAAA,4BAAA,EAA+BP,QAAAA,KAAaQ,2BAAAA,CAAeF,KAAAA,CAAAA,CAAAA,CAAQ,CAAA;AACvF,EAAA;AAEA,EAAA,IAAIL,OAAOE,QAAAA,EAAU;AACjB,IAAA,MAAM,IAAII,KAAAA,CACN;AACI,MAAA,6BAAA;AACA,MAAA,CAAA,WAAA,EAAcP,QAAAA,CAAAA,cAAAA,CAAAA;AACd,MAAA;AACFS,KAAAA,CAAAA,IAAAA,CAAK,IAAA,CAAA,CAAA;AAEf,EAAA;AAEAL,EAAAA,OAAAA,CAAQC,IAAAA,CAAK,CAAA,4BAAA,EAA0BL,QAAAA,CAAAA,CAAU,CAAA;AACrD,CAAA,EAjC0B,mBAAA,CAAA;AAiD1B,eAAsBU,mBAClBC,OAAAA,EACAC,QAAAA,EACAC,IAAAA,EACA,EACIC,KACAxB,OAAAA,EAASL,WAAAA,EACT8B,gBAAAA,EAAkBC,UAAAA,EAClBC,KAAKC,aAAAA,EACLC,MAAAA,EACAC,SACAC,QAAAA,GAAW,IAAE,EACa;AAE9B,EAAA,MAAMC,IAAAA,GAAOC,4BAAAA,CAAeZ,OAAAA,EAASC,QAAAA,CAAAA;AAGrC,EAAA,IAAIU,KAAKE,UAAAA,EAAY;AACjB,IAAA,MAAMF,IAAAA,CAAKE,WAAWb,OAAAA,EAAS;AAC3BG,MAAAA,GAAAA;AACAD,MAAAA,IAAAA;MACAvB,OAAAA,EAASL,WAAAA;MACTgC,GAAAA,EAAKC,aAAAA;AACLC,MAAAA,MAAAA;AACAC,MAAAA,OAAAA;AACAC,MAAAA;KACJ,CAAA;AACJ,EAAA;AAGA,EAAA,MAAMrC,cAAAA,GAAiBsC,IAAAA,CAAKtC,cAAAA,IAAkB,EAAA;AAC9C,EAAA,MAAMM,OAAAA,GAAUP,YAAAA,CAAaC,cAAAA,EAAgBC,WAAAA,CAAAA;AAE7C,EAAA,IAAID,cAAAA,CAAeyC,SAAS,CAAA,EAAG;AAC3BrB,IAAAA,OAAAA,CAAQC,KAAK,CAAA,gBAAA,EAAYrB,cAAAA,CAAeyC,MAAM,CAAA,6BAAA,EAAgCH,IAAAA,CAAKI,IAAI,CAAA,CAAE,CAAA;AACzF,IAAA,IAAIzC,WAAAA,CAAYwC,SAAS,CAAA,EAAG;AACxB,MAAA,MAAME,SAAAA,GAAY1C,WAAAA,CAAY2C,MAAAA,CAAO,CAACC,EAAAA,KAClC7C,cAAAA,CAAe8C,IAAAA,CAAK,CAACC,EAAAA,KAAOA,EAAAA,CAAG3C,aAAAA,KAAkByC,EAAAA,CAAGzC,aAAa,CAAA,CAAA;AAErE,MAAA,IAAIuC,SAAAA,CAAUF,SAAS,CAAA,EAAG;AACtBrB,QAAAA,OAAAA,CAAQC,IAAAA,CAAK,CAAA,gCAAA,EAA4BsB,SAAAA,CAAUF,MAAM,CAAA,kBAAA,CAAoB,CAAA;AACjF,MAAA;AACJ,IAAA;AACJ,EAAA;AAGA,EAAA,MAAMO,kBAAkBC,gCAAAA,CAAoBtB,OAAAA,EAASU,QAAAA,CAAAA,CAAUC,KAAKI,IAAI,CAAA;AAExE,EAAA,IAAI,CAACM,eAAAA,EAAiB;AAClB,IAAA,MAAM,IAAIzB,KAAAA,CAAM,CAAA,6BAAA,EAAgCe,IAAAA,CAAKI,IAAI,CAAA,CAAE,CAAA;AAC/D,EAAA;AAEAtB,EAAAA,OAAAA,CAAQC,KAAK,CAAA,UAAA,EAAMiB,IAAAA,CAAKI,IAAI,CAAA,UAAA,EAAaM,eAAAA,CAAAA,CAAiB,CAAA;AAG1D,EAAA,IAAIV,KAAKY,mBAAAA,EAAqB;AAC1B,IAAA,IAAI;AACA,MAAA,MAAMC,gBAAAA,GAAmB,MAAMb,IAAAA,CAAKY,mBAAAA,CAAoB;AAAEpB,QAAAA;OAAI,CAAA;AAE9D,MAAA,IAAI,CAAQsB,iBAAAA,CAAAA,SAAAA,CAAUD,gBAAAA,EAAkBH,eAAAA,CAAAA,EAAkB;AACtD5B,QAAAA,OAAAA,CAAQiC,IAAAA,CACJ,CAAA,sCAAA,EAAyCF,gBAAAA,CAAAA,iCAAAA,EAAoDH,eAAAA,CAAAA,CAAAA,CAAkB,CAAA;AAEvH,MAAA;AACJ,IAAA,CAAA,CAAA,OAAS1B,KAAAA,EAAO;AAEZF,MAAAA,OAAAA,CAAQiC,IAAAA,CAAK,uCAAA,EAAyC7B,2BAAAA,CAAeF,KAAAA,CAAAA,CAAAA;AACzE,IAAA;AACJ,EAAA;AAGA,EAAA,MAAMN,WAAW,MAAMsC,gCAAAA,CAAmB3B,OAAAA,EAASW,IAAAA,CAAKI,MAAMM,eAAAA,CAAAA;AAC9D,EAAA,MAAMzC,aAAAA,GAAgB,MAAMgD,+BAAAA,CAAkBzB,GAAAA,CAAAA;AAC9C,EAAA,MAAM0B,YAAAA,GAAe7C,qBAAAA,CAAK8C,QAAAA,CAASlD,aAAAA,EAAeuB,GAAAA,CAAAA;AAElD,EAAA,MAAMf,kBAAkBC,QAAAA,CAAAA;AAExB,EAAA,IAAIgB,UAAAA,EAAY0B,MAAAA,EAAQ;AACpBtC,IAAAA,OAAAA,CAAQC,IAAAA,CAAK,CAAA,mCAAA,EAA+BW,UAAAA,CAAAA,CAAY,CAAA;AAC5D,EAAA;AAGA,EAAA,MAAM2B,UAAAA,GAAarB,IAAAA,CAAKqB,UAAAA,IAAc,EAAA;AAItC,EAAA,MAAMC,oBAAAA,GAAuBtD,OAAAA,CAAQwC,IAAAA,CACjC,CAACe,CAAAA,KAAMA,EAAEpD,IAAAA,KAAS,MAAA,IAAUoD,CAAAA,CAAEzD,aAAAA,KAAkB,sBAAA,CAAA;AAEpD,EAAA,MAAM0D,kBAAyCF,oBAAAA,GACzC;AACI,IAAA;MAAElB,IAAAA,EAAM,UAAA;MAAYqB,KAAAA,EAAOjC;AAAI,KAAA;AAC/B,IAAA;MAAEY,IAAAA,EAAM,qBAAA;MAAuBqB,KAAAA,EAAOxD;AAAc;MAExD,EAAA;AAEN,EAAA,MAAMyD,UAAU9D,gBAAAA,CACZ;AAAIgC,IAAAA,GAAAA,aAAAA;AAAkB4B,IAAAA,GAAAA,eAAAA;AAAoBH,IAAAA,GAAAA;KAC1C,CAAC,EAAEjB,IAAAA,EAAI,KAAOA,IAAAA,CAAAA,CAChBuB,QAAQ,CAAC,EAAEvB,IAAAA,EAAMqB,KAAAA,EAAK,KAAO;AAAC,IAAA,IAAA;IAAM,CAAA,EAAGrB,IAAAA,IAAQqB,KAAAA,CAAAA;AAAQ,GAAA,CAAA;AAKzD,EAAA,MAAMG,cAAc/E,cAAAA,EAAAA;AACpB,EAAA,MAAMgF,gBAAgBD,WAAAA,GAChB;AAAC,IAAA,IAAA;AAAM,IAAA,CAAA,UAAA,EAAaA,YAAY3E,GAAG,CAAA,CAAA;AAAI,IAAA,IAAA;AAAM,IAAA,CAAA,UAAA,EAAa2E,YAAY1E,GAAG,CAAA;MACzE,EAAA;AAEN4B,EAAAA,OAAAA,CAAQC,KAAK,CAAA,uCAAA,EAAmC6C,WAAAA,EAAa3E,GAAAA,CAAAA,CAAAA,EAAO2E,WAAAA,EAAa1E,GAAAA,CAAAA,CAAK,CAAA;AAEtF,EAAA,IAAImE,UAAAA,CAAWlB,SAAS,CAAA,EAAG;AACvBrB,IAAAA,OAAAA,CAAQC,KACJ,CAAA,gBAAA,EAAYsC,UAAAA,CAAWlB,MAAM,CAAA,qCAAA,EAAwCH,IAAAA,CAAKI,IAAI,CAAA,CAAE,CAAA;AAExF,EAAA;AACA,EAAA,IAAIR,aAAAA,CAAcO,SAAS,CAAA,EAAG;AAC1BrB,IAAAA,OAAAA,CAAQC,IAAAA,CAAK,CAAA,gBAAA,EAAYa,aAAAA,CAAcO,MAAM,CAAA,+BAAA,CAAiC,CAAA;AAClF,EAAA;AAGA,EAAA,IAAI2B,SAAAA;AACJ,EAAA,IAAIjC,MAAAA,IAAUA,MAAAA,CAAOuB,IAAAA,EAAI,KAAO,EAAA,EAAI;AAChCtC,IAAAA,OAAAA,CAAQC,IAAAA,CAAK,CAAA,mCAAA,EAA+Bc,MAAAA,CAAAA,CAAQ,CAAA;AACpDiC,IAAAA,SAAAA,GAAY;AAAC,MAAA,MAAA;AAAQ,MAAA,IAAA;AAAMjC,MAAAA;;EAC/B,CAAA,MAAO;AACHiC,IAAAA,SAAAA,GAAYpC,eAAevC,MAAAA,GAAY;MAAC6C,IAAAA,CAAKI,IAAAA;AAASb,MAAAA,GAAAA;AAAQA,KAAAA,GAAAA,IAAAA;AAClE,EAAA;AAGA,EAAA,MAAMwC,UAAAA,GAAa;AACf,IAAA,KAAA;AACI/B,IAAAA,GAAAA,IAAAA,CAAKgC,UAAAA,GAAa;AAAC,MAAA;QAAkB,EAAA;AACzC,IAAA,MAAA;AACGN,IAAAA,GAAAA,OAAAA;AACAG,IAAAA,GAAAA,aAAAA;AACH,IAAA,IAAA;AACA,IAAA,CAAA,EAAG5D,aAAAA,CAAAA,WAAAA,CAAAA;AACH,IAAA,IAAA;AACA,IAAA,CAAA,WAAA,EAAciD,YAAAA,CAAAA,CAAAA;AACVpB,IAAAA,GAAAA,CAAAA,OAAAA,IAAW,EAAA,EAAI6B,OAAAA,CAAQ,CAACM,CAAAA,KAAM;AAAC,MAAA,IAAA;AAAMA,MAAAA,CAAAA,CAAEb,IAAAA;AAAO,KAAA,CAAA;AAC/CrD,IAAAA,GAAAA,kBAAAA,CAAmBC,OAAAA,EAASC,aAAAA,CAAAA,CAAe0D,OAAAA,CAAQ,CAAC9D,MAAAA,KAAW;AAC9D,MAAA,IAAA;AACAqE,MAAAA,2BAAAA,CAAcrE,MAAAA;AACjB,KAAA,CAAA;OACG6B,UAAAA,GAAa;AAAC,MAAA,cAAA;AAAgBA,MAAAA;QAAc,EAAA;AAChDhB,IAAAA,QAAAA;AACGoD,IAAAA,GAAAA;;AAGP,EAAA,MAAMnD,MAAAA,GAAS,MAAMwD,qBAAAA,CACjBnE,OAAAA,CAAQ2D,OAAAA,CAAQ,CAAC9D,MAAAA,KACbA,MAAAA,CAAOM,IAAAA,KAAS,SAAA,IAAaN,MAAAA,CAAOuE,MAAAA,GAAS;IAACvE,MAAAA,CAAOuC;MAAQ,EAAE,GAEnE,YAAA;AACI,IAAA,MAAMiC,KAAAA,GAAQ,CAAA,aAAA,EAAMP,SAAAA,CAAU3C,IAAAA,CAAK,GAAA,CAAA,CAAA,CAAA;AACnCL,IAAAA,OAAAA,CAAQwD,KAAKD,KAAAA,CAAAA;AACb,IAAA,MAAME,MAAAA,GAAS,MAAMnF,IAAAA,CAAAA,OAAAA,EAAW2E,UAAAA,GAAanD,OAAAA,EAAO;AACpDE,IAAAA,OAAAA,CAAQ0D,QAAQH,KAAAA,CAAAA;AAEhB,IAAA,OAAOE,MAAAA;EACX,CAAA,CAAA;AAGJ,EAAA,IAAI5D,OAAOE,QAAAA,EAAU;AACjB,IAAA,MAAM4D,MAAAA,GAAS9D,MAAAA,CAAO8D,MAAAA,CAAOrB,IAAAA,EAAI;AACjC,IAAA,MAAM,IAAInC,KAAAA,CACN,CAAA,2CAAA,EAA8CN,MAAAA,CAAOE,QAAQ,IAAI4D,MAAAA,GAAS;EAAKA,MAAAA,CAAAA,CAAAA,GAAW,EAAA,CAAA,CAAI,CAAA;AAEtG,EAAA;AAEA,EAAA,OAAO9D,MAAAA;AACX;AA5KsBS,oBAAAA,CAAAA,kBAAAA,EAAAA,oBAAAA,CAAAA","file":"NT6J6VGZ.cjs","sourcesContent":["import { uniqBy } from 'es-toolkit';\nimport os from 'node:os';\nimport path from 'node:path';\nimport process from 'node:process';\nimport * as semver from 'semver';\nimport { $, type ProcessOutput } from 'zx';\n\nimport type { EnvironmentVariable, VolumeMapping } from '../config';\nimport type { ChainContext } from '../context';\nimport { findWorkspaceRoot } from '../utils';\nimport { getImageUriForTool, getVolumeName } from '../utils/docker';\nimport { stringifyError } from '../utils/error';\nimport { findToolByName } from '../utils/finder';\nimport { lockMany } from './lock';\nimport { resolveTypeVersions } from './version-resolver';\n\n/**\n * Get the current user's UID and GID for Docker container user matching.\n * This prevents permission issues when containers write to bind-mounted directories.\n * On Windows, returns undefined as UID/GID matching is not needed.\n */\nconst getHostUserIds = (): { uid: number; gid: number } | undefined => {\n    // os.userInfo() returns uid/gid on POSIX systems, -1 on Windows\n    const userInfo = os.userInfo();\n    if (userInfo.uid === -1 || userInfo.gid === -1) {\n        return undefined;\n    }\n    return { uid: userInfo.uid, gid: userInfo.gid };\n};\n\n// Configure zx to inherit stdio by default (moved from original setup)\n$.verbose = true;\n$.stdio = ['inherit', 'pipe', process.stderr];\n\n/**\n * Merge default volumes with user-specified volumes\n * User volumes take precedence when containerPath conflicts\n */\nconst mergeVolumes = (\n    defaultVolumes: readonly VolumeMapping[],\n    userVolumes: readonly VolumeMapping[],\n): VolumeMapping[] => uniqBy([...userVolumes, ...defaultVolumes], (volume) => volume.containerPath);\n\n/**\n * Resolve host paths in volumes to absolute paths\n * - Paths starting with ~ are resolved to home directory\n * - Relative paths (starting with . or no prefix) are resolved to workspace root\n * - Absolute paths are left unchanged\n */\nconst resolveVolumePaths = (volumes: VolumeMapping[], workspaceRoot: string): VolumeMapping[] =>\n    volumes.map((volume) =>\n        volume.type === 'host'\n            ? {\n                  ...volume,\n                  hostPath: path.resolve(\n                      workspaceRoot,\n                      volume.hostPath.replace(/^~/, os.homedir()),\n                  ),\n              }\n            : volume,\n    );\n\nconst ensureDockerImage = async (imageUri: string): Promise<void> => {\n    let output: ProcessOutput;\n\n    try {\n        // Check local images first.\n        //\n        // NOTE: `docker image ls <ref>` prints repository/tag in separate columns, so\n        // `stdout.includes(<full-ref>)` is not reliable. Use `inspect` instead: exitCode=0\n        // means the image exists locally.\n        // Keep output minimal to avoid dumping full inspect JSON into CI logs.\n        output = await $`docker image inspect --format {{.Id}} ${imageUri}`.nothrow();\n        if (!output.exitCode) {\n            console.info(`✅ Using cached Docker image: ${imageUri}`);\n            return;\n        }\n\n        console.info('📥 Pulling Docker image from:', imageUri);\n        output = await $`docker pull ${imageUri}`.nothrow();\n    } catch (error: unknown) {\n        throw new Error(`Failed to pull Docker image ${imageUri}: ${stringifyError(error)}`);\n    }\n\n    if (output.exitCode) {\n        throw new Error(\n            [\n                'Docker image not available:',\n                `  - Image: ${imageUri} (pull failed)`,\n                '  - Check if the image tag exists in image registry.',\n            ].join('\\n'),\n        );\n    }\n\n    console.info(`✅ Successfully pulled: ${imageUri}`);\n};\n\nexport interface ToolCommandExecutionOptions {\n    cwd: string;\n    volumes: readonly VolumeMapping[];\n    customEntrypoint?: string;\n    env: EnvironmentVariable[];\n    args?: string[];\n    script?: string;\n    publish?: string[];\n    versions?: Record<string, string>;\n}\n\n/**\n * Enhanced tool command execution using the new version compatibility matrix system\n */\nexport async function executeToolCommand<TImageId extends string>(\n    context: ChainContext<TImageId>,\n    toolName: string,\n    args: string[],\n    {\n        cwd,\n        volumes: userVolumes,\n        customEntrypoint: entrypoint,\n        env: customEnvVars,\n        script,\n        publish,\n        versions = {},\n    }: ToolCommandExecutionOptions,\n): Promise<ProcessOutput> {\n    const tool = findToolByName(context, toolName);\n\n    // Run pre-execution hook if defined (e.g., toolchain sync)\n    if (tool.preExecute) {\n        await tool.preExecute(context, {\n            cwd,\n            args,\n            volumes: userVolumes,\n            env: customEnvVars,\n            script,\n            publish,\n            versions,\n        });\n    }\n\n    // Merge default volumes with user-specified volumes\n    const defaultVolumes = tool.defaultVolumes ?? [];\n    const volumes = mergeVolumes(defaultVolumes, userVolumes);\n\n    if (defaultVolumes.length > 0) {\n        console.info(`📦 Using ${defaultVolumes.length} default cache volume(s) for ${tool.name}`);\n        if (userVolumes.length > 0) {\n            const overrides = userVolumes.filter((uv) =>\n                defaultVolumes.some((dv) => dv.containerPath === uv.containerPath),\n            );\n            if (overrides.length > 0) {\n                console.info(`🔧 User volumes override ${overrides.length} default volume(s)`);\n            }\n        }\n    }\n\n    // Get the resolved version for the current tool.\n    const resolvedVersion = resolveTypeVersions(context, versions)[tool.name];\n\n    if (!resolvedVersion) {\n        throw new Error(`No version resolved for tool ${tool.name}`);\n    }\n\n    console.info(`🔧 ${tool.name} version: ${resolvedVersion}`);\n\n    // Check secondary version validation if available\n    if (tool.getSecondaryVersion) {\n        try {\n            const secondaryVersion = await tool.getSecondaryVersion({ cwd });\n\n            if (!semver.satisfies(secondaryVersion, resolvedVersion)) {\n                console.warn(\n                    `Warning: Local configuration version (${secondaryVersion}) differs from resolved version (${resolvedVersion})`,\n                );\n            }\n        } catch (error) {\n            // Secondary version check failed, but continue with resolved version\n            console.warn('Could not validate secondary version:', stringifyError(error));\n        }\n    }\n\n    // Use Docker image with merged volumes\n    const imageUri = await getImageUriForTool(context, tool.name, resolvedVersion);\n    const workspaceRoot = await findWorkspaceRoot(cwd);\n    const relativePath = path.relative(workspaceRoot, cwd);\n\n    await ensureDockerImage(imageUri);\n\n    if (entrypoint?.trim()) {\n        console.info(`🔧 Using custom entrypoint: ${entrypoint}`);\n    }\n\n    // Merge default env vars with custom env vars (custom takes precedence)\n    const defaultEnv = tool.defaultEnv ?? [];\n\n    // Check if Docker socket is mounted (for tools that spawn Docker containers like anchor --verifiable)\n    // If so, inject HOST_CWD and HOST_WORKSPACE_ROOT so the inner container knows the host paths\n    const hasDockerSocketMount = volumes.some(\n        (v) => v.type === 'host' && v.containerPath === '/var/run/docker.sock',\n    );\n    const dockerSocketEnv: EnvironmentVariable[] = hasDockerSocketMount\n        ? [\n              { name: 'HOST_CWD', value: cwd },\n              { name: 'HOST_WORKSPACE_ROOT', value: workspaceRoot },\n          ]\n        : [];\n\n    const envArgs = uniqBy(\n        [...customEnvVars, ...dockerSocketEnv, ...defaultEnv],\n        ({ name }) => name,\n    ).flatMap(({ name, value }) => ['-e', `${name}=${value}`]);\n\n    // Add host user UID/GID for permission matching on Linux/macOS\n    // This prevents artifacts created in containers from having root ownership\n    // Currently only used for stellar which has an entrypoint that handles UID/GID\n    const hostUserIds = getHostUserIds();\n    const userIdEnvArgs = hostUserIds\n        ? ['-e', `LOCAL_UID=${hostUserIds.uid}`, '-e', `LOCAL_GID=${hostUserIds.gid}`]\n        : [];\n\n    console.info(`👤 Running container as UID:GID ${hostUserIds?.uid}:${hostUserIds?.gid}`);\n\n    if (defaultEnv.length > 0) {\n        console.info(\n            `🌍 Using ${defaultEnv.length} default environment variable(s) for ${tool.name}`,\n        );\n    }\n    if (customEnvVars.length > 0) {\n        console.info(`🌍 Using ${customEnvVars.length} custom environment variable(s)`);\n    }\n\n    // Handle custom script execution\n    let finalArgs: string[];\n    if (script && script.trim() !== '') {\n        console.info(`📜 Executing custom script: ${script}`);\n        finalArgs = ['bash', '-c', script];\n    } else {\n        finalArgs = entrypoint === undefined ? [tool.name, ...args] : args;\n    }\n\n    // Build the Docker command with proper argument separation\n    const dockerArgs = [\n        'run',\n        ...(tool.privileged ? ['--privileged'] : []),\n        '--rm',\n        ...envArgs,\n        ...userIdEnvArgs,\n        '-v',\n        `${workspaceRoot}:/workspace`,\n        '-w',\n        `/workspace/${relativePath}`,\n        ...(publish ?? []).flatMap((p) => ['-p', p.trim()]),\n        ...resolveVolumePaths(volumes, workspaceRoot).flatMap((volume) => [\n            '-v',\n            getVolumeName(volume),\n        ]),\n        ...(entrypoint ? ['--entrypoint', entrypoint] : []),\n        imageUri,\n        ...finalArgs,\n    ];\n\n    const output = await lockMany(\n        volumes.flatMap((volume) =>\n            volume.type === 'isolate' && volume.locked ? [volume.name] : [],\n        ),\n        async () => {\n            const label = `⏱️ ${finalArgs.join(' ')}`;\n            console.time(label);\n            const result = await $`docker ${dockerArgs}`.nothrow();\n            console.timeEnd(label);\n\n            return result;\n        },\n    );\n\n    if (output.exitCode) {\n        const stdout = output.stdout.trim();\n        throw new Error(\n            `Failed to run Docker container (exit code: ${output.exitCode})${stdout ? `\\n${stdout}` : ''}`,\n        );\n    }\n\n    return output;\n}\n"]}

package/dist/{WWFZTYPP.js → PKAOFTZV.js}

@@ -7,7 +7,7 @@ import * as z from 'zod';
 // src/test.ts
 init_esm_shims();
 var COMMAND_TIMEOUT = 5 * 6e4;
-var MANIFEST_TEST_TIMEOUT = 2e4;
+var MANIFEST_TEST_TIMEOUT = 6e4;
 var VERSION_TEST_TIMEOUT = 15 * 6e4;
 var PULL_TIMEOUT = 10 * 6e4;
 var slsaSchema = z.object({
@@ -116,5 +116,5 @@ var testTools = /* @__PURE__ */ __name(({ describe, expect, it, beforeAll }, ima
 }, "testTools");
 
 export { testTools };
-//# sourceMappingURL=WWFZTYPP.js.map
-//# sourceMappingURL=WWFZTYPP.js.map
+//# sourceMappingURL=PKAOFTZV.js.map
+//# sourceMappingURL=PKAOFTZV.js.map

package/dist/{WWFZTYPP.js.map → PKAOFTZV.js.map}

@@ -1 +1 @@
-{"version":3,"sources":["../src/test.ts"],"names":["COMMAND_TIMEOUT","MANIFEST_TEST_TIMEOUT","VERSION_TEST_TIMEOUT","PULL_TIMEOUT","slsaSchema","object","SLSA","provenanceSchema","runCommand","command","args","timeout","promisify","execFile","killSignal","stdout","trim","isImageCached","uri","pullLocks","Map","ensureImagePulled","existingPull","get","console","log","pullPromise","finally","delete","set","testTools","describe","expect","it","beforeAll","images","_versionCombinations","versionCommands","name","image","Object","entries","getImageTag","join","toBe","literalImage","values","unreleased","imageUri","getImageUri","tool","expectedVersion","versions","Array","Error","version","toContain","id","safeParse","JSON","parse","success"],"mappings":";;;;;;;AAAA,cAAA,EAAA;AASA,IAAMA,kBAAkB,CAAA,GAAI,GAAA;AAC5B,IAAMC,qBAAAA,GAAwB,GAAA;AAC9B,IAAMC,uBAAuB,EAAA,GAAK,GAAA;AAClC,IAAMC,eAAe,EAAA,GAAK,GAAA;AAE1B,IAAMC,aAAeC,CAAAA,CAAAA,MAAAA,CAAO;EACxBC,IAAAA,EAAQD,CAAAA,CAAAA,MAAAA,CAAO,EAAC;AACpB,CAAA,CAAA;AAGA,IAAME,mBAAqBF,CAAAA,CAAAA,MAAAA,CAAO;AAC9B,EAAA,CAAC,aAAA,GAAgBD,UAAAA;AACjB,EAAA,CAAC,aAAA,GAAgBA;AACrB,CAAA,CAAA;AAEA,IAAMI,UAAAA,mBAAa,MAAA,CAAA,OACfC,OAAAA,EACAC,IAAAA,EACAC,OAAAA,GAAUX,eAAAA,KAAAA,CAGN,MAAMY,SAAAA,CAAUC,QAAAA,CAAAA,CAAUJ,OAAAA,EAASC,IAAAA,EAAM;AACrCC,EAAAA,OAAAA;EACAG,UAAAA,EAAY;AAChB,CAAA,CAAA,EACFC,MAAAA,CAAOC,IAAAA,EAAI,EAVE,YAAA,CAAA;AAYnB,IAAMC,aAAAA,iCAAuBC,GAAAA,KAAAA;AACzB,EAAA,IAAI;AACA,IAAA,MAAMV,WAAW,QAAA,EAAU;AAAC,MAAA,OAAA;AAAS,MAAA,SAAA;AAAWU,MAAAA;AAAI,KAAA,CAAA;AACpD,IAAA,OAAO,IAAA;EACX,CAAA,CAAA,MAAQ;AACJ,IAAA,OAAO,KAAA;AACX,EAAA;AACJ,CAAA,EAPsB,eAAA,CAAA;AAStB,IAAMC,SAAAA,uBAAgBC,GAAAA,EAAAA;AAEtB,IAAMC,iBAAAA,iCAA2BH,GAAAA,KAAAA;AAC7B,EAAA,MAAMI,YAAAA,GAAeH,SAAAA,CAAUI,GAAAA,CAAIL,GAAAA,CAAAA;AACnC,EAAA,IAAII,YAAAA,EAAc;AACdE,IAAAA,OAAAA,CAAQC,GAAAA,CAAI,CAAA,oCAAA,EAAkCP,GAAAA,CAAAA,CAAK,CAAA;AACnD,IAAA,OAAOI,YAAAA;AACX,EAAA;AAEA,EAAA,MAAMI,eAAe,YAAA;AACjB,IAAA,IAAI,MAAMT,aAAAA,CAAcC,GAAAA,CAAAA,EAAM;AAC1BM,MAAAA,OAAAA,CAAQC,GAAAA,CAAI,CAAA,6BAAA,EAA2BP,GAAAA,CAAAA,CAAK,CAAA;AAC5C,MAAA;AACJ,IAAA;AACAM,IAAAA,OAAAA,CAAQC,GAAAA,CAAI,CAAA,yBAAA,EAAqBP,GAAAA,CAAAA,CAAK,CAAA;AACtC,IAAA,MAAMV,WAAW,QAAA,EAAU;AAAC,MAAA,MAAA;AAAQU,MAAAA;OAAMf,YAAAA,CAAAA;AAC9C,EAAA,CAAA,IAAKwB,OAAAA,CAAQ,MAAMR,SAAAA,CAAUS,MAAAA,CAAOV,GAAAA,CAAAA,CAAAA;AAEpCC,EAAAA,SAAAA,CAAUU,GAAAA,CAAIX,KAAKQ,WAAAA,CAAAA;AACnB,EAAA,OAAOA,WAAAA;AACX,CAAA,EAlB0B,mBAAA,CAAA;AAoBnB,IAAMI,SAAAA,mBAAY,MAAA,CAAA,CACrB,EAAEC,QAAAA,EAAUC,MAAAA,EAAQC,IAAIC,SAAAA,EAAS,EACjCC,MAAAA,EACAC,oBAAAA,EACAC,eAAAA,KAAAA;AAEAN,EAAAA,QAAAA,CAAS,oBAAoB,MAAA;AACzB,IAAA,KAAA,MAAW,CAACO,IAAAA,EAAMC,KAAAA,KAAUC,MAAAA,CAAOC,OAAAA,CAAQN,MAAAA,CAAAA,EAAS;AAChDF,MAAAA,EAAAA,CAAG,CAAA,mBAAA,EAAsBK,IAAAA,CAAAA,CAAAA,EAAQ,MAAA;AAC7BN,QAAAA,MAAAA,CAAO;UAACO,KAAAA,CAAMD,IAAAA;AAAMI,UAAAA,WAAAA,CAAYH,OAAO,GAAA;AAAMI,SAAAA,CAAAA,IAAAA,CAAK,GAAA,CAAA,CAAA,CAAMC,IAAAA,CAAKN,IAAAA,CAAAA;MACjE,CAAA,CAAA;AACJ,IAAA;EACJ,CAAA,CAAA;AAEAP,EAAAA,QAAAA,CAAS,iBAAiB,MAAA;AACtB,IAAA,KAAA,MAAWc,YAAAA,IAAgBL,MAAAA,CAAOM,MAAAA,CAAOX,MAAAA,CAAAA,EAAS;AAC9C,MAAA,MAAMI,KAAAA,GAAeM,YAAAA;AAErB,MAAA,IAAIN,MAAMQ,UAAAA,EAAY;AAClB,QAAA;AACJ,MAAA;AAEAhB,MAAAA,QAAAA,CAASW,WAAAA,CAAYH,KAAAA,CAAAA,EAAQ,MAAA;AACzB,QAAA,IAAIS,QAAAA;AAEJd,QAAAA,SAAAA,CAAU,YAAA;AACNc,UAAAA,QAAAA,GAAW,MAAMC,WAAAA,CAAYV,KAAAA,EAAO,GAAA,CAAA;AACpC,UAAA,MAAMlB,kBAAkB2B,QAAAA,CAAAA;AAC5B,QAAA,CAAA,EAAG7C,YAAAA,CAAAA;AAEH,QAAA,KAAA,MAAW,CAAC+C,MAAMC,eAAAA,CAAAA,IAAoBX,OAAOC,OAAAA,CAAQF,KAAAA,CAAMa,QAAQ,CAAA,EAAG;AAClEnB,UAAAA,EAAAA,CACI,CAAA,YAAA,EAAeiB,IAAAA,CAAAA,YAAAA,EAAmBC,eAAAA,IAClC,YAAA;AACI,YAAA,IAAI,EAAEd,eAAAA,CAAgBa,IAAAA,CAAAA,YAAiBG,KAAAA,CAAAA,EAAQ;AAC3C,cAAA,MAAM,IAAIC,MAAM,yBAAA,CAAA;AACpB,YAAA;AAEA,YAAA,MAAMC,OAAAA,GAAU,MAAM/C,UAAAA,CAAW,QAAA,EAAU;AACvC,cAAA,KAAA;AACA,cAAA,MAAA;AACA,cAAA,cAAA;AACAwC,cAAAA,QAAAA;AACGX,cAAAA,GAAAA,eAAAA,CAAgBa,IAAAA;AACtB,aAAA,CAAA;AAEDlB,YAAAA,MAAAA,CAAOuB,OAAAA,CAAAA,CAASC,SAAAA,CAAUL,eAAAA,CAAAA;AAC9B,UAAA,CAAA,EACAjD,oBAAAA,CAAAA;AAER,QAAA;MACJ,CAAA,CAAA;AACJ,IAAA;EACJ,CAAA,CAAA;AAEA6B,EAAAA,QAAAA,CAAS,0BAA0B,MAAA;AAC/B,IAAA,KAAA,MAAW,CAAC0B,EAAAA,EAAIlB,KAAAA,KAAUC,MAAAA,CAAOC,OAAAA,CAAQN,MAAAA,CAAAA,EAAS;AAC9C,MAAA,IAAII,MAAMQ,UAAAA,EAAY;AAClB,QAAA;AACJ,MAAA;AAEAd,MAAAA,EAAAA,CACI,CAAA,yBAAA,EAA4BwB,EAAAA,CAAAA,CAAAA,EAC5B,YAAA;AACI,QAAA,MAAM,EAAE1C,MAAAA,EAAM,GAAK,MAAMH,SAAAA,CAAUC,QAAAA,EAAU,QAAA,EAAU;AACnD,UAAA,QAAA;AACA,UAAA,YAAA;AACA,UAAA,SAAA;AACA,UAAA,UAAA;AACA,UAAA,wBAAA;UACA,MAAMoC,WAAAA,CAAYV,OAAO,GAAA;AAC5B,SAAA,CAAA;AAEDP,QAAAA,MAAAA,CAAOzB,gBAAAA,CAAiBmD,SAAAA,CAAUC,IAAAA,CAAKC,KAAAA,CAAM7C,MAAAA,CAAAA,CAAAA,CAAS8C,OAAO,CAAA,CAAEjB,IAAAA,CAAK,IAAA,CAAA;AACxE,MAAA,CAAA,EACA3C,qBAAAA,CAAAA;AAER,IAAA;EACJ,CAAA,CAAA;AACJ,CAAA,EA/EyB,WAAA","file":"WWFZTYPP.js","sourcesContent":["import { execFile } from 'node:child_process';\nimport { promisify } from 'node:util';\nimport type * as vitest from 'vitest';\nimport * as z from 'zod';\n\nimport type { VersionCombination } from './config';\nimport { type Image } from './config';\nimport { getImageTag, getImageUri } from './utils/docker';\n\nconst COMMAND_TIMEOUT = 5 * 60_000;\nconst MANIFEST_TEST_TIMEOUT = 20_000;\nconst VERSION_TEST_TIMEOUT = 15 * 60_000;\nconst PULL_TIMEOUT = 10 * 60_000;\n\nconst slsaSchema = z.object({\n    SLSA: z.object({}),\n});\n\n// TODO Require provenance by GitHub Actions.\nconst provenanceSchema = z.object({\n    ['linux/amd64']: slsaSchema,\n    ['linux/arm64']: slsaSchema,\n});\n\nconst runCommand = async (\n    command: string,\n    args: string[],\n    timeout = COMMAND_TIMEOUT,\n): Promise<string> =>\n    (\n        await promisify(execFile)(command, args, {\n            timeout,\n            killSignal: 'SIGKILL', // Force kill if timeout\n        })\n    ).stdout.trim();\n\nconst isImageCached = async (uri: string): Promise<boolean> => {\n    try {\n        await runCommand('docker', ['image', 'inspect', uri]);\n        return true;\n    } catch {\n        return false;\n    }\n};\n\nconst pullLocks = new Map<string, Promise<void>>();\n\nconst ensureImagePulled = async (uri: string): Promise<void> => {\n    const existingPull = pullLocks.get(uri);\n    if (existingPull) {\n        console.log(`⏳ Waiting for concurrent pull: ${uri}`);\n        return existingPull;\n    }\n\n    const pullPromise = (async () => {\n        if (await isImageCached(uri)) {\n            console.log(`✅ Image already cached: ${uri}`);\n            return;\n        }\n        console.log(`📥 Pulling image: ${uri}`);\n        await runCommand('docker', ['pull', uri], PULL_TIMEOUT);\n    })().finally(() => pullLocks.delete(uri));\n\n    pullLocks.set(uri, pullPromise);\n    return pullPromise;\n};\n\nexport const testTools = (\n    { describe, expect, it, beforeAll }: typeof vitest,\n    images: Record<string, Image>,\n    _versionCombinations: VersionCombination<string>[],\n    versionCommands: Record<string, string[]>,\n): void => {\n    describe('Docker image IDs', () => {\n        for (const [name, image] of Object.entries(images)) {\n            it(`has an image ID of ${name}`, () => {\n                expect([image.name, getImageTag(image, '-')].join(':')).toBe(name);\n            });\n        }\n    });\n\n    describe('Tool versions', () => {\n        for (const literalImage of Object.values(images)) {\n            const image: Image = literalImage;\n\n            if (image.unreleased) {\n                continue;\n            }\n\n            describe(getImageTag(image), () => {\n                let imageUri: string;\n\n                beforeAll(async () => {\n                    imageUri = await getImageUri(image, '_');\n                    await ensureImagePulled(imageUri);\n                }, PULL_TIMEOUT);\n\n                for (const [tool, expectedVersion] of Object.entries(image.versions)) {\n                    it(\n                        `should have ${tool} of version ${expectedVersion}`,\n                        async () => {\n                            if (!(versionCommands[tool] instanceof Array)) {\n                                throw new Error('Missing version command');\n                            }\n\n                            const version = await runCommand('docker', [\n                                'run',\n                                '--rm',\n                                '--privileged',\n                                imageUri,\n                                ...versionCommands[tool],\n                            ]);\n\n                            expect(version).toContain(expectedVersion);\n                        },\n                        VERSION_TEST_TIMEOUT,\n                    );\n                }\n            });\n        }\n    });\n\n    describe('Docker image manifests', () => {\n        for (const [id, image] of Object.entries(images)) {\n            if (image.unreleased) {\n                continue;\n            }\n\n            it(\n                `has a valid manifest for ${id}`,\n                async () => {\n                    const { stdout } = await promisify(execFile)('docker', [\n                        'buildx',\n                        'imagetools',\n                        'inspect',\n                        '--format',\n                        '{{ json .Provenance }}',\n                        await getImageUri(image, '_'),\n                    ]);\n\n                    expect(provenanceSchema.safeParse(JSON.parse(stdout)).success).toBe(true);\n                },\n                MANIFEST_TEST_TIMEOUT,\n            );\n        }\n    });\n};\n"]}
+{"version":3,"sources":["../src/test.ts"],"names":["COMMAND_TIMEOUT","MANIFEST_TEST_TIMEOUT","VERSION_TEST_TIMEOUT","PULL_TIMEOUT","slsaSchema","object","SLSA","provenanceSchema","runCommand","command","args","timeout","promisify","execFile","killSignal","stdout","trim","isImageCached","uri","pullLocks","Map","ensureImagePulled","existingPull","get","console","log","pullPromise","finally","delete","set","testTools","describe","expect","it","beforeAll","images","_versionCombinations","versionCommands","name","image","Object","entries","getImageTag","join","toBe","literalImage","values","unreleased","imageUri","getImageUri","tool","expectedVersion","versions","Array","Error","version","toContain","id","safeParse","JSON","parse","success"],"mappings":";;;;;;;AAAA,cAAA,EAAA;AASA,IAAMA,kBAAkB,CAAA,GAAI,GAAA;AAC5B,IAAMC,qBAAAA,GAAwB,GAAA;AAC9B,IAAMC,uBAAuB,EAAA,GAAK,GAAA;AAClC,IAAMC,eAAe,EAAA,GAAK,GAAA;AAE1B,IAAMC,aAAeC,CAAAA,CAAAA,MAAAA,CAAO;EACxBC,IAAAA,EAAQD,CAAAA,CAAAA,MAAAA,CAAO,EAAC;AACpB,CAAA,CAAA;AAGA,IAAME,mBAAqBF,CAAAA,CAAAA,MAAAA,CAAO;AAC9B,EAAA,CAAC,aAAA,GAAgBD,UAAAA;AACjB,EAAA,CAAC,aAAA,GAAgBA;AACrB,CAAA,CAAA;AAEA,IAAMI,UAAAA,mBAAa,MAAA,CAAA,OACfC,OAAAA,EACAC,IAAAA,EACAC,OAAAA,GAAUX,eAAAA,KAAAA,CAGN,MAAMY,SAAAA,CAAUC,QAAAA,CAAAA,CAAUJ,OAAAA,EAASC,IAAAA,EAAM;AACrCC,EAAAA,OAAAA;EACAG,UAAAA,EAAY;AAChB,CAAA,CAAA,EACFC,MAAAA,CAAOC,IAAAA,EAAI,EAVE,YAAA,CAAA;AAYnB,IAAMC,aAAAA,iCAAuBC,GAAAA,KAAAA;AACzB,EAAA,IAAI;AACA,IAAA,MAAMV,WAAW,QAAA,EAAU;AAAC,MAAA,OAAA;AAAS,MAAA,SAAA;AAAWU,MAAAA;AAAI,KAAA,CAAA;AACpD,IAAA,OAAO,IAAA;EACX,CAAA,CAAA,MAAQ;AACJ,IAAA,OAAO,KAAA;AACX,EAAA;AACJ,CAAA,EAPsB,eAAA,CAAA;AAStB,IAAMC,SAAAA,uBAAgBC,GAAAA,EAAAA;AAEtB,IAAMC,iBAAAA,iCAA2BH,GAAAA,KAAAA;AAC7B,EAAA,MAAMI,YAAAA,GAAeH,SAAAA,CAAUI,GAAAA,CAAIL,GAAAA,CAAAA;AACnC,EAAA,IAAII,YAAAA,EAAc;AACdE,IAAAA,OAAAA,CAAQC,GAAAA,CAAI,CAAA,oCAAA,EAAkCP,GAAAA,CAAAA,CAAK,CAAA;AACnD,IAAA,OAAOI,YAAAA;AACX,EAAA;AAEA,EAAA,MAAMI,eAAe,YAAA;AACjB,IAAA,IAAI,MAAMT,aAAAA,CAAcC,GAAAA,CAAAA,EAAM;AAC1BM,MAAAA,OAAAA,CAAQC,GAAAA,CAAI,CAAA,6BAAA,EAA2BP,GAAAA,CAAAA,CAAK,CAAA;AAC5C,MAAA;AACJ,IAAA;AACAM,IAAAA,OAAAA,CAAQC,GAAAA,CAAI,CAAA,yBAAA,EAAqBP,GAAAA,CAAAA,CAAK,CAAA;AACtC,IAAA,MAAMV,WAAW,QAAA,EAAU;AAAC,MAAA,MAAA;AAAQU,MAAAA;OAAMf,YAAAA,CAAAA;AAC9C,EAAA,CAAA,IAAKwB,OAAAA,CAAQ,MAAMR,SAAAA,CAAUS,MAAAA,CAAOV,GAAAA,CAAAA,CAAAA;AAEpCC,EAAAA,SAAAA,CAAUU,GAAAA,CAAIX,KAAKQ,WAAAA,CAAAA;AACnB,EAAA,OAAOA,WAAAA;AACX,CAAA,EAlB0B,mBAAA,CAAA;AAoBnB,IAAMI,SAAAA,mBAAY,MAAA,CAAA,CACrB,EAAEC,QAAAA,EAAUC,MAAAA,EAAQC,IAAIC,SAAAA,EAAS,EACjCC,MAAAA,EACAC,oBAAAA,EACAC,eAAAA,KAAAA;AAEAN,EAAAA,QAAAA,CAAS,oBAAoB,MAAA;AACzB,IAAA,KAAA,MAAW,CAACO,IAAAA,EAAMC,KAAAA,KAAUC,MAAAA,CAAOC,OAAAA,CAAQN,MAAAA,CAAAA,EAAS;AAChDF,MAAAA,EAAAA,CAAG,CAAA,mBAAA,EAAsBK,IAAAA,CAAAA,CAAAA,EAAQ,MAAA;AAC7BN,QAAAA,MAAAA,CAAO;UAACO,KAAAA,CAAMD,IAAAA;AAAMI,UAAAA,WAAAA,CAAYH,OAAO,GAAA;AAAMI,SAAAA,CAAAA,IAAAA,CAAK,GAAA,CAAA,CAAA,CAAMC,IAAAA,CAAKN,IAAAA,CAAAA;MACjE,CAAA,CAAA;AACJ,IAAA;EACJ,CAAA,CAAA;AAEAP,EAAAA,QAAAA,CAAS,iBAAiB,MAAA;AACtB,IAAA,KAAA,MAAWc,YAAAA,IAAgBL,MAAAA,CAAOM,MAAAA,CAAOX,MAAAA,CAAAA,EAAS;AAC9C,MAAA,MAAMI,KAAAA,GAAeM,YAAAA;AAErB,MAAA,IAAIN,MAAMQ,UAAAA,EAAY;AAClB,QAAA;AACJ,MAAA;AAEAhB,MAAAA,QAAAA,CAASW,WAAAA,CAAYH,KAAAA,CAAAA,EAAQ,MAAA;AACzB,QAAA,IAAIS,QAAAA;AAEJd,QAAAA,SAAAA,CAAU,YAAA;AACNc,UAAAA,QAAAA,GAAW,MAAMC,WAAAA,CAAYV,KAAAA,EAAO,GAAA,CAAA;AACpC,UAAA,MAAMlB,kBAAkB2B,QAAAA,CAAAA;AAC5B,QAAA,CAAA,EAAG7C,YAAAA,CAAAA;AAEH,QAAA,KAAA,MAAW,CAAC+C,MAAMC,eAAAA,CAAAA,IAAoBX,OAAOC,OAAAA,CAAQF,KAAAA,CAAMa,QAAQ,CAAA,EAAG;AAClEnB,UAAAA,EAAAA,CACI,CAAA,YAAA,EAAeiB,IAAAA,CAAAA,YAAAA,EAAmBC,eAAAA,IAClC,YAAA;AACI,YAAA,IAAI,EAAEd,eAAAA,CAAgBa,IAAAA,CAAAA,YAAiBG,KAAAA,CAAAA,EAAQ;AAC3C,cAAA,MAAM,IAAIC,MAAM,yBAAA,CAAA;AACpB,YAAA;AAEA,YAAA,MAAMC,OAAAA,GAAU,MAAM/C,UAAAA,CAAW,QAAA,EAAU;AACvC,cAAA,KAAA;AACA,cAAA,MAAA;AACA,cAAA,cAAA;AACAwC,cAAAA,QAAAA;AACGX,cAAAA,GAAAA,eAAAA,CAAgBa,IAAAA;AACtB,aAAA,CAAA;AAEDlB,YAAAA,MAAAA,CAAOuB,OAAAA,CAAAA,CAASC,SAAAA,CAAUL,eAAAA,CAAAA;AAC9B,UAAA,CAAA,EACAjD,oBAAAA,CAAAA;AAER,QAAA;MACJ,CAAA,CAAA;AACJ,IAAA;EACJ,CAAA,CAAA;AAEA6B,EAAAA,QAAAA,CAAS,0BAA0B,MAAA;AAC/B,IAAA,KAAA,MAAW,CAAC0B,EAAAA,EAAIlB,KAAAA,KAAUC,MAAAA,CAAOC,OAAAA,CAAQN,MAAAA,CAAAA,EAAS;AAC9C,MAAA,IAAII,MAAMQ,UAAAA,EAAY;AAClB,QAAA;AACJ,MAAA;AAEAd,MAAAA,EAAAA,CACI,CAAA,yBAAA,EAA4BwB,EAAAA,CAAAA,CAAAA,EAC5B,YAAA;AACI,QAAA,MAAM,EAAE1C,MAAAA,EAAM,GAAK,MAAMH,SAAAA,CAAUC,QAAAA,EAAU,QAAA,EAAU;AACnD,UAAA,QAAA;AACA,UAAA,YAAA;AACA,UAAA,SAAA;AACA,UAAA,UAAA;AACA,UAAA,wBAAA;UACA,MAAMoC,WAAAA,CAAYV,OAAO,GAAA;AAC5B,SAAA,CAAA;AAEDP,QAAAA,MAAAA,CAAOzB,gBAAAA,CAAiBmD,SAAAA,CAAUC,IAAAA,CAAKC,KAAAA,CAAM7C,MAAAA,CAAAA,CAAAA,CAAS8C,OAAO,CAAA,CAAEjB,IAAAA,CAAK,IAAA,CAAA;AACxE,MAAA,CAAA,EACA3C,qBAAAA,CAAAA;AAER,IAAA;EACJ,CAAA,CAAA;AACJ,CAAA,EA/EyB,WAAA","file":"PKAOFTZV.js","sourcesContent":["import { execFile } from 'node:child_process';\nimport { promisify } from 'node:util';\nimport type * as vitest from 'vitest';\nimport * as z from 'zod';\n\nimport type { VersionCombination } from './config';\nimport { type Image } from './config';\nimport { getImageTag, getImageUri } from './utils/docker';\n\nconst COMMAND_TIMEOUT = 5 * 60_000;\nconst MANIFEST_TEST_TIMEOUT = 60_000;\nconst VERSION_TEST_TIMEOUT = 15 * 60_000;\nconst PULL_TIMEOUT = 10 * 60_000;\n\nconst slsaSchema = z.object({\n    SLSA: z.object({}),\n});\n\n// TODO Require provenance by GitHub Actions.\nconst provenanceSchema = z.object({\n    ['linux/amd64']: slsaSchema,\n    ['linux/arm64']: slsaSchema,\n});\n\nconst runCommand = async (\n    command: string,\n    args: string[],\n    timeout = COMMAND_TIMEOUT,\n): Promise<string> =>\n    (\n        await promisify(execFile)(command, args, {\n            timeout,\n            killSignal: 'SIGKILL', // Force kill if timeout\n        })\n    ).stdout.trim();\n\nconst isImageCached = async (uri: string): Promise<boolean> => {\n    try {\n        await runCommand('docker', ['image', 'inspect', uri]);\n        return true;\n    } catch {\n        return false;\n    }\n};\n\nconst pullLocks = new Map<string, Promise<void>>();\n\nconst ensureImagePulled = async (uri: string): Promise<void> => {\n    const existingPull = pullLocks.get(uri);\n    if (existingPull) {\n        console.log(`⏳ Waiting for concurrent pull: ${uri}`);\n        return existingPull;\n    }\n\n    const pullPromise = (async () => {\n        if (await isImageCached(uri)) {\n            console.log(`✅ Image already cached: ${uri}`);\n            return;\n        }\n        console.log(`📥 Pulling image: ${uri}`);\n        await runCommand('docker', ['pull', uri], PULL_TIMEOUT);\n    })().finally(() => pullLocks.delete(uri));\n\n    pullLocks.set(uri, pullPromise);\n    return pullPromise;\n};\n\nexport const testTools = (\n    { describe, expect, it, beforeAll }: typeof vitest,\n    images: Record<string, Image>,\n    _versionCombinations: VersionCombination<string>[],\n    versionCommands: Record<string, string[]>,\n): void => {\n    describe('Docker image IDs', () => {\n        for (const [name, image] of Object.entries(images)) {\n            it(`has an image ID of ${name}`, () => {\n                expect([image.name, getImageTag(image, '-')].join(':')).toBe(name);\n            });\n        }\n    });\n\n    describe('Tool versions', () => {\n        for (const literalImage of Object.values(images)) {\n            const image: Image = literalImage;\n\n            if (image.unreleased) {\n                continue;\n            }\n\n            describe(getImageTag(image), () => {\n                let imageUri: string;\n\n                beforeAll(async () => {\n                    imageUri = await getImageUri(image, '_');\n                    await ensureImagePulled(imageUri);\n                }, PULL_TIMEOUT);\n\n                for (const [tool, expectedVersion] of Object.entries(image.versions)) {\n                    it(\n                        `should have ${tool} of version ${expectedVersion}`,\n                        async () => {\n                            if (!(versionCommands[tool] instanceof Array)) {\n                                throw new Error('Missing version command');\n                            }\n\n                            const version = await runCommand('docker', [\n                                'run',\n                                '--rm',\n                                '--privileged',\n                                imageUri,\n                                ...versionCommands[tool],\n                            ]);\n\n                            expect(version).toContain(expectedVersion);\n                        },\n                        VERSION_TEST_TIMEOUT,\n                    );\n                }\n            });\n        }\n    });\n\n    describe('Docker image manifests', () => {\n        for (const [id, image] of Object.entries(images)) {\n            if (image.unreleased) {\n                continue;\n            }\n\n            it(\n                `has a valid manifest for ${id}`,\n                async () => {\n                    const { stdout } = await promisify(execFile)('docker', [\n                        'buildx',\n                        'imagetools',\n                        'inspect',\n                        '--format',\n                        '{{ json .Provenance }}',\n                        await getImageUri(image, '_'),\n                    ]);\n\n                    expect(provenanceSchema.safeParse(JSON.parse(stdout)).success).toBe(true);\n                },\n                MANIFEST_TEST_TIMEOUT,\n            );\n        }\n    });\n};\n"]}

package/dist/{2YYNJNXU.cjs → Q6HPQZPT.cjs}

@@ -29,7 +29,7 @@ var z__namespace = /*#__PURE__*/_interopNamespace(z);
 // src/test.ts
 _24WEKBY3_cjs.init_cjs_shims();
 var COMMAND_TIMEOUT = 5 * 6e4;
-var MANIFEST_TEST_TIMEOUT = 2e4;
+var MANIFEST_TEST_TIMEOUT = 6e4;
 var VERSION_TEST_TIMEOUT = 15 * 6e4;
 var PULL_TIMEOUT = 10 * 6e4;
 var slsaSchema = z__namespace.object({
@@ -138,5 +138,5 @@ var testTools = /* @__PURE__ */ _24WEKBY3_cjs.__name(({ describe, expect, it, be
 }, "testTools");
 
 exports.testTools = testTools;
-//# sourceMappingURL=2YYNJNXU.cjs.map
-//# sourceMappingURL=2YYNJNXU.cjs.map
+//# sourceMappingURL=Q6HPQZPT.cjs.map
+//# sourceMappingURL=Q6HPQZPT.cjs.map

package/dist/{2YYNJNXU.cjs.map → Q6HPQZPT.cjs.map}

@@ -1 +1 @@
-{"version":3,"sources":["../src/test.ts"],"names":["init_cjs_shims","COMMAND_TIMEOUT","MANIFEST_TEST_TIMEOUT","VERSION_TEST_TIMEOUT","PULL_TIMEOUT","slsaSchema","object","SLSA","provenanceSchema","runCommand","__name","command","args","timeout","promisify","execFile","killSignal","stdout","trim","isImageCached","uri","pullLocks","Map","ensureImagePulled","existingPull","get","console","log","pullPromise","finally","delete","set","testTools","describe","expect","it","beforeAll","images","_versionCombinations","versionCommands","name","image","Object","entries","getImageTag","join","toBe","literalImage","values","unreleased","imageUri","getImageUri","tool","expectedVersion","versions","Array","Error","version","toContain","id","safeParse","JSON","parse","success"],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAAAA,4BAAA,EAAA;AASA,IAAMC,kBAAkB,CAAA,GAAI,GAAA;AAC5B,IAAMC,qBAAAA,GAAwB,GAAA;AAC9B,IAAMC,uBAAuB,EAAA,GAAK,GAAA;AAClC,IAAMC,eAAe,EAAA,GAAK,GAAA;AAE1B,IAAMC,aAAeC,YAAAA,CAAAA,MAAAA,CAAO;EACxBC,IAAAA,EAAQD,YAAAA,CAAAA,MAAAA,CAAO,EAAC;AACpB,CAAA,CAAA;AAGA,IAAME,mBAAqBF,YAAAA,CAAAA,MAAAA,CAAO;AAC9B,EAAA,CAAC,aAAA,GAAgBD,UAAAA;AACjB,EAAA,CAAC,aAAA,GAAgBA;AACrB,CAAA,CAAA;AAEA,IAAMI,UAAAA,mBAAaC,oBAAA,CAAA,OACfC,OAAAA,EACAC,IAAAA,EACAC,OAAAA,GAAUZ,eAAAA,KAAAA,CAGN,MAAMa,cAAAA,CAAUC,sBAAAA,CAAAA,CAAUJ,OAAAA,EAASC,IAAAA,EAAM;AACrCC,EAAAA,OAAAA;EACAG,UAAAA,EAAY;AAChB,CAAA,CAAA,EACFC,MAAAA,CAAOC,IAAAA,EAAI,EAVE,YAAA,CAAA;AAYnB,IAAMC,aAAAA,+CAAuBC,GAAAA,KAAAA;AACzB,EAAA,IAAI;AACA,IAAA,MAAMX,WAAW,QAAA,EAAU;AAAC,MAAA,OAAA;AAAS,MAAA,SAAA;AAAWW,MAAAA;AAAI,KAAA,CAAA;AACpD,IAAA,OAAO,IAAA;EACX,CAAA,CAAA,MAAQ;AACJ,IAAA,OAAO,KAAA;AACX,EAAA;AACJ,CAAA,EAPsB,eAAA,CAAA;AAStB,IAAMC,SAAAA,uBAAgBC,GAAAA,EAAAA;AAEtB,IAAMC,iBAAAA,+CAA2BH,GAAAA,KAAAA;AAC7B,EAAA,MAAMI,YAAAA,GAAeH,SAAAA,CAAUI,GAAAA,CAAIL,GAAAA,CAAAA;AACnC,EAAA,IAAII,YAAAA,EAAc;AACdE,IAAAA,OAAAA,CAAQC,GAAAA,CAAI,CAAA,oCAAA,EAAkCP,GAAAA,CAAAA,CAAK,CAAA;AACnD,IAAA,OAAOI,YAAAA;AACX,EAAA;AAEA,EAAA,MAAMI,eAAe,YAAA;AACjB,IAAA,IAAI,MAAMT,aAAAA,CAAcC,GAAAA,CAAAA,EAAM;AAC1BM,MAAAA,OAAAA,CAAQC,GAAAA,CAAI,CAAA,6BAAA,EAA2BP,GAAAA,CAAAA,CAAK,CAAA;AAC5C,MAAA;AACJ,IAAA;AACAM,IAAAA,OAAAA,CAAQC,GAAAA,CAAI,CAAA,yBAAA,EAAqBP,GAAAA,CAAAA,CAAK,CAAA;AACtC,IAAA,MAAMX,WAAW,QAAA,EAAU;AAAC,MAAA,MAAA;AAAQW,MAAAA;OAAMhB,YAAAA,CAAAA;AAC9C,EAAA,CAAA,IAAKyB,OAAAA,CAAQ,MAAMR,SAAAA,CAAUS,MAAAA,CAAOV,GAAAA,CAAAA,CAAAA;AAEpCC,EAAAA,SAAAA,CAAUU,GAAAA,CAAIX,KAAKQ,WAAAA,CAAAA;AACnB,EAAA,OAAOA,WAAAA;AACX,CAAA,EAlB0B,mBAAA,CAAA;AAoBnB,IAAMI,SAAAA,mBAAYtB,oBAAA,CAAA,CACrB,EAAEuB,QAAAA,EAAUC,MAAAA,EAAQC,IAAIC,SAAAA,EAAS,EACjCC,MAAAA,EACAC,oBAAAA,EACAC,eAAAA,KAAAA;AAEAN,EAAAA,QAAAA,CAAS,oBAAoB,MAAA;AACzB,IAAA,KAAA,MAAW,CAACO,IAAAA,EAAMC,KAAAA,KAAUC,MAAAA,CAAOC,OAAAA,CAAQN,MAAAA,CAAAA,EAAS;AAChDF,MAAAA,EAAAA,CAAG,CAAA,mBAAA,EAAsBK,IAAAA,CAAAA,CAAAA,EAAQ,MAAA;AAC7BN,QAAAA,MAAAA,CAAO;UAACO,KAAAA,CAAMD,IAAAA;AAAMI,UAAAA,yBAAAA,CAAYH,OAAO,GAAA;AAAMI,SAAAA,CAAAA,IAAAA,CAAK,GAAA,CAAA,CAAA,CAAMC,IAAAA,CAAKN,IAAAA,CAAAA;MACjE,CAAA,CAAA;AACJ,IAAA;EACJ,CAAA,CAAA;AAEAP,EAAAA,QAAAA,CAAS,iBAAiB,MAAA;AACtB,IAAA,KAAA,MAAWc,YAAAA,IAAgBL,MAAAA,CAAOM,MAAAA,CAAOX,MAAAA,CAAAA,EAAS;AAC9C,MAAA,MAAMI,KAAAA,GAAeM,YAAAA;AAErB,MAAA,IAAIN,MAAMQ,UAAAA,EAAY;AAClB,QAAA;AACJ,MAAA;AAEAhB,MAAAA,QAAAA,CAASW,yBAAAA,CAAYH,KAAAA,CAAAA,EAAQ,MAAA;AACzB,QAAA,IAAIS,QAAAA;AAEJd,QAAAA,SAAAA,CAAU,YAAA;AACNc,UAAAA,QAAAA,GAAW,MAAMC,yBAAAA,CAAYV,KAAAA,EAAO,GAAA,CAAA;AACpC,UAAA,MAAMlB,kBAAkB2B,QAAAA,CAAAA;AAC5B,QAAA,CAAA,EAAG9C,YAAAA,CAAAA;AAEH,QAAA,KAAA,MAAW,CAACgD,MAAMC,eAAAA,CAAAA,IAAoBX,OAAOC,OAAAA,CAAQF,KAAAA,CAAMa,QAAQ,CAAA,EAAG;AAClEnB,UAAAA,EAAAA,CACI,CAAA,YAAA,EAAeiB,IAAAA,CAAAA,YAAAA,EAAmBC,eAAAA,IAClC,YAAA;AACI,YAAA,IAAI,EAAEd,eAAAA,CAAgBa,IAAAA,CAAAA,YAAiBG,KAAAA,CAAAA,EAAQ;AAC3C,cAAA,MAAM,IAAIC,MAAM,yBAAA,CAAA;AACpB,YAAA;AAEA,YAAA,MAAMC,OAAAA,GAAU,MAAMhD,UAAAA,CAAW,QAAA,EAAU;AACvC,cAAA,KAAA;AACA,cAAA,MAAA;AACA,cAAA,cAAA;AACAyC,cAAAA,QAAAA;AACGX,cAAAA,GAAAA,eAAAA,CAAgBa,IAAAA;AACtB,aAAA,CAAA;AAEDlB,YAAAA,MAAAA,CAAOuB,OAAAA,CAAAA,CAASC,SAAAA,CAAUL,eAAAA,CAAAA;AAC9B,UAAA,CAAA,EACAlD,oBAAAA,CAAAA;AAER,QAAA;MACJ,CAAA,CAAA;AACJ,IAAA;EACJ,CAAA,CAAA;AAEA8B,EAAAA,QAAAA,CAAS,0BAA0B,MAAA;AAC/B,IAAA,KAAA,MAAW,CAAC0B,EAAAA,EAAIlB,KAAAA,KAAUC,MAAAA,CAAOC,OAAAA,CAAQN,MAAAA,CAAAA,EAAS;AAC9C,MAAA,IAAII,MAAMQ,UAAAA,EAAY;AAClB,QAAA;AACJ,MAAA;AAEAd,MAAAA,EAAAA,CACI,CAAA,yBAAA,EAA4BwB,EAAAA,CAAAA,CAAAA,EAC5B,YAAA;AACI,QAAA,MAAM,EAAE1C,MAAAA,EAAM,GAAK,MAAMH,cAAAA,CAAUC,sBAAAA,EAAU,QAAA,EAAU;AACnD,UAAA,QAAA;AACA,UAAA,YAAA;AACA,UAAA,SAAA;AACA,UAAA,UAAA;AACA,UAAA,wBAAA;UACA,MAAMoC,yBAAAA,CAAYV,OAAO,GAAA;AAC5B,SAAA,CAAA;AAEDP,QAAAA,MAAAA,CAAO1B,gBAAAA,CAAiBoD,SAAAA,CAAUC,IAAAA,CAAKC,KAAAA,CAAM7C,MAAAA,CAAAA,CAAAA,CAAS8C,OAAO,CAAA,CAAEjB,IAAAA,CAAK,IAAA,CAAA;AACxE,MAAA,CAAA,EACA5C,qBAAAA,CAAAA;AAER,IAAA;EACJ,CAAA,CAAA;AACJ,CAAA,EA/EyB,WAAA","file":"2YYNJNXU.cjs","sourcesContent":["import { execFile } from 'node:child_process';\nimport { promisify } from 'node:util';\nimport type * as vitest from 'vitest';\nimport * as z from 'zod';\n\nimport type { VersionCombination } from './config';\nimport { type Image } from './config';\nimport { getImageTag, getImageUri } from './utils/docker';\n\nconst COMMAND_TIMEOUT = 5 * 60_000;\nconst MANIFEST_TEST_TIMEOUT = 20_000;\nconst VERSION_TEST_TIMEOUT = 15 * 60_000;\nconst PULL_TIMEOUT = 10 * 60_000;\n\nconst slsaSchema = z.object({\n    SLSA: z.object({}),\n});\n\n// TODO Require provenance by GitHub Actions.\nconst provenanceSchema = z.object({\n    ['linux/amd64']: slsaSchema,\n    ['linux/arm64']: slsaSchema,\n});\n\nconst runCommand = async (\n    command: string,\n    args: string[],\n    timeout = COMMAND_TIMEOUT,\n): Promise<string> =>\n    (\n        await promisify(execFile)(command, args, {\n            timeout,\n            killSignal: 'SIGKILL', // Force kill if timeout\n        })\n    ).stdout.trim();\n\nconst isImageCached = async (uri: string): Promise<boolean> => {\n    try {\n        await runCommand('docker', ['image', 'inspect', uri]);\n        return true;\n    } catch {\n        return false;\n    }\n};\n\nconst pullLocks = new Map<string, Promise<void>>();\n\nconst ensureImagePulled = async (uri: string): Promise<void> => {\n    const existingPull = pullLocks.get(uri);\n    if (existingPull) {\n        console.log(`⏳ Waiting for concurrent pull: ${uri}`);\n        return existingPull;\n    }\n\n    const pullPromise = (async () => {\n        if (await isImageCached(uri)) {\n            console.log(`✅ Image already cached: ${uri}`);\n            return;\n        }\n        console.log(`📥 Pulling image: ${uri}`);\n        await runCommand('docker', ['pull', uri], PULL_TIMEOUT);\n    })().finally(() => pullLocks.delete(uri));\n\n    pullLocks.set(uri, pullPromise);\n    return pullPromise;\n};\n\nexport const testTools = (\n    { describe, expect, it, beforeAll }: typeof vitest,\n    images: Record<string, Image>,\n    _versionCombinations: VersionCombination<string>[],\n    versionCommands: Record<string, string[]>,\n): void => {\n    describe('Docker image IDs', () => {\n        for (const [name, image] of Object.entries(images)) {\n            it(`has an image ID of ${name}`, () => {\n                expect([image.name, getImageTag(image, '-')].join(':')).toBe(name);\n            });\n        }\n    });\n\n    describe('Tool versions', () => {\n        for (const literalImage of Object.values(images)) {\n            const image: Image = literalImage;\n\n            if (image.unreleased) {\n                continue;\n            }\n\n            describe(getImageTag(image), () => {\n                let imageUri: string;\n\n                beforeAll(async () => {\n                    imageUri = await getImageUri(image, '_');\n                    await ensureImagePulled(imageUri);\n                }, PULL_TIMEOUT);\n\n                for (const [tool, expectedVersion] of Object.entries(image.versions)) {\n                    it(\n                        `should have ${tool} of version ${expectedVersion}`,\n                        async () => {\n                            if (!(versionCommands[tool] instanceof Array)) {\n                                throw new Error('Missing version command');\n                            }\n\n                            const version = await runCommand('docker', [\n                                'run',\n                                '--rm',\n                                '--privileged',\n                                imageUri,\n                                ...versionCommands[tool],\n                            ]);\n\n                            expect(version).toContain(expectedVersion);\n                        },\n                        VERSION_TEST_TIMEOUT,\n                    );\n                }\n            });\n        }\n    });\n\n    describe('Docker image manifests', () => {\n        for (const [id, image] of Object.entries(images)) {\n            if (image.unreleased) {\n                continue;\n            }\n\n            it(\n                `has a valid manifest for ${id}`,\n                async () => {\n                    const { stdout } = await promisify(execFile)('docker', [\n                        'buildx',\n                        'imagetools',\n                        'inspect',\n                        '--format',\n                        '{{ json .Provenance }}',\n                        await getImageUri(image, '_'),\n                    ]);\n\n                    expect(provenanceSchema.safeParse(JSON.parse(stdout)).success).toBe(true);\n                },\n                MANIFEST_TEST_TIMEOUT,\n            );\n        }\n    });\n};\n"]}
+{"version":3,"sources":["../src/test.ts"],"names":["init_cjs_shims","COMMAND_TIMEOUT","MANIFEST_TEST_TIMEOUT","VERSION_TEST_TIMEOUT","PULL_TIMEOUT","slsaSchema","object","SLSA","provenanceSchema","runCommand","__name","command","args","timeout","promisify","execFile","killSignal","stdout","trim","isImageCached","uri","pullLocks","Map","ensureImagePulled","existingPull","get","console","log","pullPromise","finally","delete","set","testTools","describe","expect","it","beforeAll","images","_versionCombinations","versionCommands","name","image","Object","entries","getImageTag","join","toBe","literalImage","values","unreleased","imageUri","getImageUri","tool","expectedVersion","versions","Array","Error","version","toContain","id","safeParse","JSON","parse","success"],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAAAA,4BAAA,EAAA;AASA,IAAMC,kBAAkB,CAAA,GAAI,GAAA;AAC5B,IAAMC,qBAAAA,GAAwB,GAAA;AAC9B,IAAMC,uBAAuB,EAAA,GAAK,GAAA;AAClC,IAAMC,eAAe,EAAA,GAAK,GAAA;AAE1B,IAAMC,aAAeC,YAAAA,CAAAA,MAAAA,CAAO;EACxBC,IAAAA,EAAQD,YAAAA,CAAAA,MAAAA,CAAO,EAAC;AACpB,CAAA,CAAA;AAGA,IAAME,mBAAqBF,YAAAA,CAAAA,MAAAA,CAAO;AAC9B,EAAA,CAAC,aAAA,GAAgBD,UAAAA;AACjB,EAAA,CAAC,aAAA,GAAgBA;AACrB,CAAA,CAAA;AAEA,IAAMI,UAAAA,mBAAaC,oBAAA,CAAA,OACfC,OAAAA,EACAC,IAAAA,EACAC,OAAAA,GAAUZ,eAAAA,KAAAA,CAGN,MAAMa,cAAAA,CAAUC,sBAAAA,CAAAA,CAAUJ,OAAAA,EAASC,IAAAA,EAAM;AACrCC,EAAAA,OAAAA;EACAG,UAAAA,EAAY;AAChB,CAAA,CAAA,EACFC,MAAAA,CAAOC,IAAAA,EAAI,EAVE,YAAA,CAAA;AAYnB,IAAMC,aAAAA,+CAAuBC,GAAAA,KAAAA;AACzB,EAAA,IAAI;AACA,IAAA,MAAMX,WAAW,QAAA,EAAU;AAAC,MAAA,OAAA;AAAS,MAAA,SAAA;AAAWW,MAAAA;AAAI,KAAA,CAAA;AACpD,IAAA,OAAO,IAAA;EACX,CAAA,CAAA,MAAQ;AACJ,IAAA,OAAO,KAAA;AACX,EAAA;AACJ,CAAA,EAPsB,eAAA,CAAA;AAStB,IAAMC,SAAAA,uBAAgBC,GAAAA,EAAAA;AAEtB,IAAMC,iBAAAA,+CAA2BH,GAAAA,KAAAA;AAC7B,EAAA,MAAMI,YAAAA,GAAeH,SAAAA,CAAUI,GAAAA,CAAIL,GAAAA,CAAAA;AACnC,EAAA,IAAII,YAAAA,EAAc;AACdE,IAAAA,OAAAA,CAAQC,GAAAA,CAAI,CAAA,oCAAA,EAAkCP,GAAAA,CAAAA,CAAK,CAAA;AACnD,IAAA,OAAOI,YAAAA;AACX,EAAA;AAEA,EAAA,MAAMI,eAAe,YAAA;AACjB,IAAA,IAAI,MAAMT,aAAAA,CAAcC,GAAAA,CAAAA,EAAM;AAC1BM,MAAAA,OAAAA,CAAQC,GAAAA,CAAI,CAAA,6BAAA,EAA2BP,GAAAA,CAAAA,CAAK,CAAA;AAC5C,MAAA;AACJ,IAAA;AACAM,IAAAA,OAAAA,CAAQC,GAAAA,CAAI,CAAA,yBAAA,EAAqBP,GAAAA,CAAAA,CAAK,CAAA;AACtC,IAAA,MAAMX,WAAW,QAAA,EAAU;AAAC,MAAA,MAAA;AAAQW,MAAAA;OAAMhB,YAAAA,CAAAA;AAC9C,EAAA,CAAA,IAAKyB,OAAAA,CAAQ,MAAMR,SAAAA,CAAUS,MAAAA,CAAOV,GAAAA,CAAAA,CAAAA;AAEpCC,EAAAA,SAAAA,CAAUU,GAAAA,CAAIX,KAAKQ,WAAAA,CAAAA;AACnB,EAAA,OAAOA,WAAAA;AACX,CAAA,EAlB0B,mBAAA,CAAA;AAoBnB,IAAMI,SAAAA,mBAAYtB,oBAAA,CAAA,CACrB,EAAEuB,QAAAA,EAAUC,MAAAA,EAAQC,IAAIC,SAAAA,EAAS,EACjCC,MAAAA,EACAC,oBAAAA,EACAC,eAAAA,KAAAA;AAEAN,EAAAA,QAAAA,CAAS,oBAAoB,MAAA;AACzB,IAAA,KAAA,MAAW,CAACO,IAAAA,EAAMC,KAAAA,KAAUC,MAAAA,CAAOC,OAAAA,CAAQN,MAAAA,CAAAA,EAAS;AAChDF,MAAAA,EAAAA,CAAG,CAAA,mBAAA,EAAsBK,IAAAA,CAAAA,CAAAA,EAAQ,MAAA;AAC7BN,QAAAA,MAAAA,CAAO;UAACO,KAAAA,CAAMD,IAAAA;AAAMI,UAAAA,yBAAAA,CAAYH,OAAO,GAAA;AAAMI,SAAAA,CAAAA,IAAAA,CAAK,GAAA,CAAA,CAAA,CAAMC,IAAAA,CAAKN,IAAAA,CAAAA;MACjE,CAAA,CAAA;AACJ,IAAA;EACJ,CAAA,CAAA;AAEAP,EAAAA,QAAAA,CAAS,iBAAiB,MAAA;AACtB,IAAA,KAAA,MAAWc,YAAAA,IAAgBL,MAAAA,CAAOM,MAAAA,CAAOX,MAAAA,CAAAA,EAAS;AAC9C,MAAA,MAAMI,KAAAA,GAAeM,YAAAA;AAErB,MAAA,IAAIN,MAAMQ,UAAAA,EAAY;AAClB,QAAA;AACJ,MAAA;AAEAhB,MAAAA,QAAAA,CAASW,yBAAAA,CAAYH,KAAAA,CAAAA,EAAQ,MAAA;AACzB,QAAA,IAAIS,QAAAA;AAEJd,QAAAA,SAAAA,CAAU,YAAA;AACNc,UAAAA,QAAAA,GAAW,MAAMC,yBAAAA,CAAYV,KAAAA,EAAO,GAAA,CAAA;AACpC,UAAA,MAAMlB,kBAAkB2B,QAAAA,CAAAA;AAC5B,QAAA,CAAA,EAAG9C,YAAAA,CAAAA;AAEH,QAAA,KAAA,MAAW,CAACgD,MAAMC,eAAAA,CAAAA,IAAoBX,OAAOC,OAAAA,CAAQF,KAAAA,CAAMa,QAAQ,CAAA,EAAG;AAClEnB,UAAAA,EAAAA,CACI,CAAA,YAAA,EAAeiB,IAAAA,CAAAA,YAAAA,EAAmBC,eAAAA,IAClC,YAAA;AACI,YAAA,IAAI,EAAEd,eAAAA,CAAgBa,IAAAA,CAAAA,YAAiBG,KAAAA,CAAAA,EAAQ;AAC3C,cAAA,MAAM,IAAIC,MAAM,yBAAA,CAAA;AACpB,YAAA;AAEA,YAAA,MAAMC,OAAAA,GAAU,MAAMhD,UAAAA,CAAW,QAAA,EAAU;AACvC,cAAA,KAAA;AACA,cAAA,MAAA;AACA,cAAA,cAAA;AACAyC,cAAAA,QAAAA;AACGX,cAAAA,GAAAA,eAAAA,CAAgBa,IAAAA;AACtB,aAAA,CAAA;AAEDlB,YAAAA,MAAAA,CAAOuB,OAAAA,CAAAA,CAASC,SAAAA,CAAUL,eAAAA,CAAAA;AAC9B,UAAA,CAAA,EACAlD,oBAAAA,CAAAA;AAER,QAAA;MACJ,CAAA,CAAA;AACJ,IAAA;EACJ,CAAA,CAAA;AAEA8B,EAAAA,QAAAA,CAAS,0BAA0B,MAAA;AAC/B,IAAA,KAAA,MAAW,CAAC0B,EAAAA,EAAIlB,KAAAA,KAAUC,MAAAA,CAAOC,OAAAA,CAAQN,MAAAA,CAAAA,EAAS;AAC9C,MAAA,IAAII,MAAMQ,UAAAA,EAAY;AAClB,QAAA;AACJ,MAAA;AAEAd,MAAAA,EAAAA,CACI,CAAA,yBAAA,EAA4BwB,EAAAA,CAAAA,CAAAA,EAC5B,YAAA;AACI,QAAA,MAAM,EAAE1C,MAAAA,EAAM,GAAK,MAAMH,cAAAA,CAAUC,sBAAAA,EAAU,QAAA,EAAU;AACnD,UAAA,QAAA;AACA,UAAA,YAAA;AACA,UAAA,SAAA;AACA,UAAA,UAAA;AACA,UAAA,wBAAA;UACA,MAAMoC,yBAAAA,CAAYV,OAAO,GAAA;AAC5B,SAAA,CAAA;AAEDP,QAAAA,MAAAA,CAAO1B,gBAAAA,CAAiBoD,SAAAA,CAAUC,IAAAA,CAAKC,KAAAA,CAAM7C,MAAAA,CAAAA,CAAAA,CAAS8C,OAAO,CAAA,CAAEjB,IAAAA,CAAK,IAAA,CAAA;AACxE,MAAA,CAAA,EACA5C,qBAAAA,CAAAA;AAER,IAAA;EACJ,CAAA,CAAA;AACJ,CAAA,EA/EyB,WAAA","file":"Q6HPQZPT.cjs","sourcesContent":["import { execFile } from 'node:child_process';\nimport { promisify } from 'node:util';\nimport type * as vitest from 'vitest';\nimport * as z from 'zod';\n\nimport type { VersionCombination } from './config';\nimport { type Image } from './config';\nimport { getImageTag, getImageUri } from './utils/docker';\n\nconst COMMAND_TIMEOUT = 5 * 60_000;\nconst MANIFEST_TEST_TIMEOUT = 60_000;\nconst VERSION_TEST_TIMEOUT = 15 * 60_000;\nconst PULL_TIMEOUT = 10 * 60_000;\n\nconst slsaSchema = z.object({\n    SLSA: z.object({}),\n});\n\n// TODO Require provenance by GitHub Actions.\nconst provenanceSchema = z.object({\n    ['linux/amd64']: slsaSchema,\n    ['linux/arm64']: slsaSchema,\n});\n\nconst runCommand = async (\n    command: string,\n    args: string[],\n    timeout = COMMAND_TIMEOUT,\n): Promise<string> =>\n    (\n        await promisify(execFile)(command, args, {\n            timeout,\n            killSignal: 'SIGKILL', // Force kill if timeout\n        })\n    ).stdout.trim();\n\nconst isImageCached = async (uri: string): Promise<boolean> => {\n    try {\n        await runCommand('docker', ['image', 'inspect', uri]);\n        return true;\n    } catch {\n        return false;\n    }\n};\n\nconst pullLocks = new Map<string, Promise<void>>();\n\nconst ensureImagePulled = async (uri: string): Promise<void> => {\n    const existingPull = pullLocks.get(uri);\n    if (existingPull) {\n        console.log(`⏳ Waiting for concurrent pull: ${uri}`);\n        return existingPull;\n    }\n\n    const pullPromise = (async () => {\n        if (await isImageCached(uri)) {\n            console.log(`✅ Image already cached: ${uri}`);\n            return;\n        }\n        console.log(`📥 Pulling image: ${uri}`);\n        await runCommand('docker', ['pull', uri], PULL_TIMEOUT);\n    })().finally(() => pullLocks.delete(uri));\n\n    pullLocks.set(uri, pullPromise);\n    return pullPromise;\n};\n\nexport const testTools = (\n    { describe, expect, it, beforeAll }: typeof vitest,\n    images: Record<string, Image>,\n    _versionCombinations: VersionCombination<string>[],\n    versionCommands: Record<string, string[]>,\n): void => {\n    describe('Docker image IDs', () => {\n        for (const [name, image] of Object.entries(images)) {\n            it(`has an image ID of ${name}`, () => {\n                expect([image.name, getImageTag(image, '-')].join(':')).toBe(name);\n            });\n        }\n    });\n\n    describe('Tool versions', () => {\n        for (const literalImage of Object.values(images)) {\n            const image: Image = literalImage;\n\n            if (image.unreleased) {\n                continue;\n            }\n\n            describe(getImageTag(image), () => {\n                let imageUri: string;\n\n                beforeAll(async () => {\n                    imageUri = await getImageUri(image, '_');\n                    await ensureImagePulled(imageUri);\n                }, PULL_TIMEOUT);\n\n                for (const [tool, expectedVersion] of Object.entries(image.versions)) {\n                    it(\n                        `should have ${tool} of version ${expectedVersion}`,\n                        async () => {\n                            if (!(versionCommands[tool] instanceof Array)) {\n                                throw new Error('Missing version command');\n                            }\n\n                            const version = await runCommand('docker', [\n                                'run',\n                                '--rm',\n                                '--privileged',\n                                imageUri,\n                                ...versionCommands[tool],\n                            ]);\n\n                            expect(version).toContain(expectedVersion);\n                        },\n                        VERSION_TEST_TIMEOUT,\n                    );\n                }\n            });\n        }\n    });\n\n    describe('Docker image manifests', () => {\n        for (const [id, image] of Object.entries(images)) {\n            if (image.unreleased) {\n                continue;\n            }\n\n            it(\n                `has a valid manifest for ${id}`,\n                async () => {\n                    const { stdout } = await promisify(execFile)('docker', [\n                        'buildx',\n                        'imagetools',\n                        'inspect',\n                        '--format',\n                        '{{ json .Provenance }}',\n                        await getImageUri(image, '_'),\n                    ]);\n\n                    expect(provenanceSchema.safeParse(JSON.parse(stdout)).success).toBe(true);\n                },\n                MANIFEST_TEST_TIMEOUT,\n            );\n        }\n    });\n};\n"]}

package/dist/cli.cjs

@@ -1,11 +1,11 @@
 'use strict';
 
-var _5BNKRW3P_cjs = require('./5BNKRW3P.cjs');
+var G3PSQ4E6_cjs = require('./G3PSQ4E6.cjs');
 require('./Y76LNXBO.cjs');
 require('./O2P6E7GR.cjs');
 require('./IPYOACCU.cjs');
 require('./24NWZBNF.cjs');
-require('./I4DRCDSO.cjs');
+require('./NT6J6VGZ.cjs');
 require('./T3GK7LED.cjs');
 require('./A5X4BLYY.cjs');
 require('./533SFXIE.cjs');
@@ -19,7 +19,7 @@ require('./24WEKBY3.cjs');
 
 Object.defineProperty(exports, "runCli", {
   enumerable: true,
-  get: function () { return _5BNKRW3P_cjs.runCli; }
+  get: function () { return G3PSQ4E6_cjs.runCli; }
 });
 //# sourceMappingURL=cli.cjs.map
 //# sourceMappingURL=cli.cjs.map

package/dist/cli.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"cli.d.ts","sourceRoot":"","sources":["../src/cli.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAQpC,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,WAAW,CAAC;AAC9C,OAAO,KAAK,EAAE,2BAA2B,EAAE,MAAM,QAAQ,CAAC;AAa1D,KAAK,qBAAqB,GAAG,CACzB,OAAO,EAAE,OAAO,EAChB,kBAAkB,EAAE,CAAC,OAAO,EAAE,OAAO,KAAK,2BAA2B,KACpE,IAAI,CAAC;AA8KV,eAAO,MAAM,MAAM,GAAU,QAAQ,SAAS,MAAM,EAChD,QAAQ,YAAY,CAAC,QAAQ,CAAC,EAC9B,wBAAwB,qBAAqB,KAC9C,OAAO,CAAC,IAAI,CAOd,CAAC"}
+{"version":3,"file":"cli.d.ts","sourceRoot":"","sources":["../src/cli.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAQpC,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,WAAW,CAAC;AAC9C,OAAO,KAAK,EAAE,2BAA2B,EAAE,MAAM,QAAQ,CAAC;AAc1D,KAAK,qBAAqB,GAAG,CACzB,OAAO,EAAE,OAAO,EAChB,kBAAkB,EAAE,CAAC,OAAO,EAAE,OAAO,KAAK,2BAA2B,KACpE,IAAI,CAAC;AAgLV,eAAO,MAAM,MAAM,GAAU,QAAQ,SAAS,MAAM,EAChD,QAAQ,YAAY,CAAC,QAAQ,CAAC,EAC9B,wBAAwB,qBAAqB,KAC9C,OAAO,CAAC,IAAI,CAOd,CAAC"}

package/dist/cli.js

@@ -1,9 +1,9 @@
-export { runCli } from './4YAYQFZC.js';
+export { runCli } from './ANEAMHXM.js';
 import './XROMTYOP.js';
 import './HVWLZZTF.js';
 import './77VFG7S6.js';
 import './22DCFDRO.js';
-import './55NXWILT.js';
+import './JEAIQIUM.js';
 import './7XVJ6B7B.js';
 import './ZO7WI2XS.js';
 import './GPDDKHCR.js';

package/dist/core/index.cjs

@@ -1,7 +1,7 @@
 'use strict';
 
 require('../24NWZBNF.cjs');
-var I4DRCDSO_cjs = require('../I4DRCDSO.cjs');
+var NT6J6VGZ_cjs = require('../NT6J6VGZ.cjs');
 require('../T3GK7LED.cjs');
 var A5X4BLYY_cjs = require('../A5X4BLYY.cjs');
 require('../533SFXIE.cjs');
@@ -15,7 +15,7 @@ require('../24WEKBY3.cjs');
 
 Object.defineProperty(exports, "executeToolCommand", {
   enumerable: true,
-  get: function () { return I4DRCDSO_cjs.executeToolCommand; }
+  get: function () { return NT6J6VGZ_cjs.executeToolCommand; }
 });
 Object.defineProperty(exports, "resolveTypeVersions", {
   enumerable: true,

package/dist/core/index.js

@@ -1,5 +1,5 @@
 import '../22DCFDRO.js';
-export { executeToolCommand } from '../55NXWILT.js';
+export { executeToolCommand } from '../JEAIQIUM.js';
 import '../7XVJ6B7B.js';
 export { resolveTypeVersions } from '../ZO7WI2XS.js';
 import '../GPDDKHCR.js';

package/dist/core/tool-executor.cjs

@@ -1,6 +1,6 @@
 'use strict';
 
-var I4DRCDSO_cjs = require('../I4DRCDSO.cjs');
+var NT6J6VGZ_cjs = require('../NT6J6VGZ.cjs');
 require('../T3GK7LED.cjs');
 require('../A5X4BLYY.cjs');
 require('../533SFXIE.cjs');
@@ -14,7 +14,7 @@ require('../24WEKBY3.cjs');
 
 Object.defineProperty(exports, "executeToolCommand", {
   enumerable: true,
-  get: function () { return I4DRCDSO_cjs.executeToolCommand; }
+  get: function () { return NT6J6VGZ_cjs.executeToolCommand; }
 });
 //# sourceMappingURL=tool-executor.cjs.map
 //# sourceMappingURL=tool-executor.cjs.map

package/dist/core/tool-executor.d.ts

@@ -8,7 +8,7 @@ export interface ToolCommandExecutionOptions {
     env: EnvironmentVariable[];
     args?: string[];
     script?: string;
-    publish?: string;
+    publish?: string[];
     versions?: Record<string, string>;
 }
 /**

package/dist/core/tool-executor.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"tool-executor.d.ts","sourceRoot":"","sources":["../../src/core/tool-executor.ts"],"names":[],"mappings":"AAKA,OAAO,EAAK,KAAK,aAAa,EAAE,MAAM,IAAI,CAAC;AAE3C,OAAO,KAAK,EAAE,mBAAmB,EAAE,aAAa,EAAE,MAAM,WAAW,CAAC;AACpE,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,YAAY,CAAC;AAyF/C,MAAM,WAAW,2BAA2B;IACxC,GAAG,EAAE,MAAM,CAAC;IACZ,OAAO,EAAE,SAAS,aAAa,EAAE,CAAC;IAClC,gBAAgB,CAAC,EAAE,MAAM,CAAC;IAC1B,GAAG,EAAE,mBAAmB,EAAE,CAAC;IAC3B,IAAI,CAAC,EAAE,MAAM,EAAE,CAAC;IAChB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,QAAQ,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;CACrC;AAED;;GAEG;AACH,wBAAsB,kBAAkB,CAAC,QAAQ,SAAS,MAAM,EAC5D,OAAO,EAAE,YAAY,CAAC,QAAQ,CAAC,EAC/B,QAAQ,EAAE,MAAM,EAChB,IAAI,EAAE,MAAM,EAAE,EACd,EACI,GAAG,EACH,OAAO,EAAE,WAAW,EACpB,gBAAgB,EAAE,UAAU,EAC5B,GAAG,EAAE,aAAa,EAClB,MAAM,EACN,OAAO,EACP,QAAa,GAChB,EAAE,2BAA2B,GAC/B,OAAO,CAAC,aAAa,CAAC,CA4JxB"}
+{"version":3,"file":"tool-executor.d.ts","sourceRoot":"","sources":["../../src/core/tool-executor.ts"],"names":[],"mappings":"AAKA,OAAO,EAAK,KAAK,aAAa,EAAE,MAAM,IAAI,CAAC;AAE3C,OAAO,KAAK,EAAE,mBAAmB,EAAE,aAAa,EAAE,MAAM,WAAW,CAAC;AACpE,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,YAAY,CAAC;AAyF/C,MAAM,WAAW,2BAA2B;IACxC,GAAG,EAAE,MAAM,CAAC;IACZ,OAAO,EAAE,SAAS,aAAa,EAAE,CAAC;IAClC,gBAAgB,CAAC,EAAE,MAAM,CAAC;IAC1B,GAAG,EAAE,mBAAmB,EAAE,CAAC;IAC3B,IAAI,CAAC,EAAE,MAAM,EAAE,CAAC;IAChB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,OAAO,CAAC,EAAE,MAAM,EAAE,CAAC;IACnB,QAAQ,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;CACrC;AAED;;GAEG;AACH,wBAAsB,kBAAkB,CAAC,QAAQ,SAAS,MAAM,EAC5D,OAAO,EAAE,YAAY,CAAC,QAAQ,CAAC,EAC/B,QAAQ,EAAE,MAAM,EAChB,IAAI,EAAE,MAAM,EAAE,EACd,EACI,GAAG,EACH,OAAO,EAAE,WAAW,EACpB,gBAAgB,EAAE,UAAU,EAC5B,GAAG,EAAE,aAAa,EAClB,MAAM,EACN,OAAO,EACP,QAAa,GAChB,EAAE,2BAA2B,GAC/B,OAAO,CAAC,aAAa,CAAC,CA+JxB"}

package/dist/core/tool-executor.js

@@ -1,4 +1,4 @@
-export { executeToolCommand } from '../55NXWILT.js';
+export { executeToolCommand } from '../JEAIQIUM.js';
 import '../7XVJ6B7B.js';
 import '../ZO7WI2XS.js';
 import '../GPDDKHCR.js';

package/dist/index.cjs

@@ -2,13 +2,13 @@
 
 var _33TVTWFZ_cjs = require('./33TVTWFZ.cjs');
 require('./7FZK5RET.cjs');
-var _5BNKRW3P_cjs = require('./5BNKRW3P.cjs');
+var G3PSQ4E6_cjs = require('./G3PSQ4E6.cjs');
 require('./Y76LNXBO.cjs');
 require('./O2P6E7GR.cjs');
 require('./IPYOACCU.cjs');
-var _2YYNJNXU_cjs = require('./2YYNJNXU.cjs');
+var Q6HPQZPT_cjs = require('./Q6HPQZPT.cjs');
 require('./24NWZBNF.cjs');
-var I4DRCDSO_cjs = require('./I4DRCDSO.cjs');
+var NT6J6VGZ_cjs = require('./NT6J6VGZ.cjs');
 require('./T3GK7LED.cjs');
 var A5X4BLYY_cjs = require('./A5X4BLYY.cjs');
 require('./533SFXIE.cjs');
@@ -27,15 +27,15 @@ Object.defineProperty(exports, "runGithubMatrixGenerator", {
 });
 Object.defineProperty(exports, "runCli", {
   enumerable: true,
-  get: function () { return _5BNKRW3P_cjs.runCli; }
+  get: function () { return G3PSQ4E6_cjs.runCli; }
 });
 Object.defineProperty(exports, "testTools", {
   enumerable: true,
-  get: function () { return _2YYNJNXU_cjs.testTools; }
+  get: function () { return Q6HPQZPT_cjs.testTools; }
 });
 Object.defineProperty(exports, "executeToolCommand", {
   enumerable: true,
-  get: function () { return I4DRCDSO_cjs.executeToolCommand; }
+  get: function () { return NT6J6VGZ_cjs.executeToolCommand; }
 });
 Object.defineProperty(exports, "resolveTypeVersions", {
   enumerable: true,

package/dist/index.js

@@ -1,12 +1,12 @@
 export { runGithubMatrixGenerator } from './M2CDZILC.js';
 import './VF2UWSC3.js';
-export { runCli } from './4YAYQFZC.js';
+export { runCli } from './ANEAMHXM.js';
 import './XROMTYOP.js';
 import './HVWLZZTF.js';
 import './77VFG7S6.js';
-export { testTools } from './WWFZTYPP.js';
+export { testTools } from './PKAOFTZV.js';
 import './22DCFDRO.js';
-export { executeToolCommand } from './55NXWILT.js';
+export { executeToolCommand } from './JEAIQIUM.js';
 import './7XVJ6B7B.js';
 export { resolveTypeVersions } from './ZO7WI2XS.js';
 import './GPDDKHCR.js';

package/dist/test.cjs

@@ -1,6 +1,6 @@
 'use strict';
 
-var _2YYNJNXU_cjs = require('./2YYNJNXU.cjs');
+var Q6HPQZPT_cjs = require('./Q6HPQZPT.cjs');
 require('./533SFXIE.cjs');
 require('./2NTYK3VO.cjs');
 require('./5GPMTH2I.cjs');
@@ -10,7 +10,7 @@ require('./24WEKBY3.cjs');
 
 Object.defineProperty(exports, "testTools", {
   enumerable: true,
-  get: function () { return _2YYNJNXU_cjs.testTools; }
+  get: function () { return Q6HPQZPT_cjs.testTools; }
 });
 //# sourceMappingURL=test.cjs.map
 //# sourceMappingURL=test.cjs.map

package/dist/test.js

@@ -1,4 +1,4 @@
-export { testTools } from './WWFZTYPP.js';
+export { testTools } from './PKAOFTZV.js';
 import './GPDDKHCR.js';
 import './46I6PSJ7.js';
 import './KWRJPB5T.js';

package/package.json

@@ -22,7 +22,7 @@
     "semver": "^7.5.4",
     "zod": "4.3.5",
     "zx": "^8.8.5",
-    "@layerzerolabs/common-node-utils": "0.2.52"
+    "@layerzerolabs/common-node-utils": "0.2.54"
   },
   "devDependencies": {
     "@jest/globals": "^29.7.0",
@@ -34,8 +34,8 @@
     "tsx": "^4.19.3",
     "typescript": "^5.8.2",
     "vitest": "^3.2.3",
-    "@layerzerolabs/tsup-configuration": "0.2.52",
-    "@layerzerolabs/typescript-configuration": "0.2.52"
+    "@layerzerolabs/typescript-configuration": "0.2.54",
+    "@layerzerolabs/tsup-configuration": "0.2.54"
   },
   "publishConfig": {
     "access": "restricted",
@@ -50,7 +50,7 @@
       "onesig-client"
     ]
   },
-  "version": "0.2.52",
+  "version": "0.2.54",
   "scripts": {
     "build": "tsup",
     "lint": "eslint . --max-warnings 0 || (eslint . --fix --max-warnings 0 && false)",

package/dist/4YAYQFZC.js.map

@@ -1 +0,0 @@
-{"version":3,"sources":["../src/cli.ts"],"names":["createCli","context","registerExtraCommands","tools","toolVersionOptions","Object","fromEntries","map","name","camelCase","parseGlobalOptions","command","cwd","volume","options","opts","process","volumes","versions","entries","version","filter","tool","program","Command","description","enablePositionalOptions","argv","includes","displayVersionCombinations","exit","option","input","Error","path","isAbsolute","fs","existsSync","statSync","isDirectory","variables","valueParts","split","length","value","join","type","hostPath","containerPath","volumeMappingSchema","parse","defaultVersion","getToolDefaultVersion","supportedVersions","getToolSupportedVersions","action","toolName","displayToolVersionInfo","isDefault","passThroughOptions","allowUnknownOption","helpOption","argument","args","executeToolCommand","runCli","config","parseAsync","error","console"],"mappings":";;;;;;;;;;;;AAAA,cAAA,EAAA;AA2BA,IAAMA,SAAAA,mBAAY,MAAA,CAAA,CACdC,OAAAA,EACAC,qBAAAA,KAAAA;AAEA,EAAA,MAAM,EAAEC,OAAK,GAAKF,OAAAA;AAClB,EAAA,MAAMG,kBAAAA,GAAqBC,OAAOC,WAAAA,CAC9BH,KAAAA,CAAMI,IAAI,CAAC,EAAEC,MAAI,KAAO;IAAC,CAAA,EAAGC,SAAAA,CAAUD,IAAAA,CAAAA,CAAAA,OAAAA,CAAAA;AAAgBA,IAAAA;GAAK,CAAA,CAAA;AAG/D,EAAA,MAAME,kBAAAA,2BAAsBC,OAAAA,KAAAA;AACxB,IAAA,MAAM,EAAEC,GAAAA,EAAKC,MAAAA,EAAQ,GAAGC,OAAAA,EAAAA,GAAYH,QAAQI,IAAAA,EAAI;AAEhD,IAAA,OAAO;MACH,GAAGD,OAAAA;MACHF,GAAAA,EAAKA,GAAAA,IAAOI,QAAQJ,GAAAA,EAAG;MACvBK,OAAAA,EAASJ,MAAAA;MACTK,QAAAA,EAAUb,MAAAA,CAAOC,WAAAA,CACbD,MAAAA,CAAOc,OAAAA,CAAQL,OAAAA,CAAAA,CACVP,GAAAA,CAAI,CAAC,CAACC,IAAAA,EAAMY,OAAAA,CAAAA,KAAa;AAAChB,QAAAA,kBAAAA,CAAmBI,IAAAA,CAAAA;AAAOY,QAAAA;AAAQ,OAAA,CAAA,CAC5DC,OAAO,CAAC,CAACC,IAAAA,CAAAA,KAAUA,IAAAA,CAAAA;AAEhC,KAAA;EACJ,CAAA,EAb2B,oBAAA,CAAA;AAe3B,EAAA,MAAMC,OAAAA,GAAU,IAAIC,OAAAA,EAAAA;AAEpBD,EAAAA,OAAAA,CACKf,IAAAA,CAAK,SAAA,CAAA,CACLiB,WAAAA,CACG,6RASI,CAAA,CAEPL,OAAAA,CAAQ,OAAA,CAAA,CACRM,uBAAAA,EAAuB;AAG5B,EAAA,IAAIV,OAAAA,CAAQW,IAAAA,CAAKC,QAAAA,CAAS,iBAAA,CAAA,EAAoB;AAC1CC,IAAAA,0BAAAA,CAA2B5B,OAAAA,CAAAA;AAC3Be,IAAAA,OAAAA,CAAQc,KAAK,CAAA,CAAA;AACjB,EAAA;AAGAP,EAAAA,OAAAA,CACKQ,MAAAA,CAAO,kBAAA,EAAoB,2BAAA,EAA6B,CAACC,KAAAA,KAAAA;AACtD,IAAA,IAAI,OAAOA,UAAU,QAAA,EAAU;AAC3B,MAAA,MAAM,IAAIC,MAAM,2BAAA,CAAA;AACpB,IAAA;AAEA,IAAA,IAAI,CAACC,IAAAA,CAAKC,UAAAA,CAAWH,KAAAA,CAAAA,EAAQ;AACzB,MAAA,MAAM,IAAIC,MAAM,0CAAA,CAAA;AACpB,IAAA;AAEA,IAAA,IAAI,CAACG,EAAAA,CAAGC,UAAAA,CAAWL,KAAAA,CAAAA,EAAQ;AACvB,MAAA,MAAM,IAAIC,MAAM,oBAAA,CAAA;AACpB,IAAA;AAEA,IAAA,IAAI,CAACG,EAAAA,CAAGE,QAAAA,CAASN,KAAAA,CAAAA,CAAOO,aAAW,EAAI;AACnC,MAAA,MAAM,IAAIN,MAAM,yBAAA,CAAA;AACpB,IAAA;AAEA,IAAA,OAAOD,KAAAA;AACX,EAAA,CAAA,CAAA,CACCD,MAAAA,CACG,sCAAA,EACA,qDAAA,EAEHA,MAAAA,CACG,mBAAA,EACA,0GAAA,CAAA,CAEHA,MAAAA,CACG,oBAAA,EACA,kFAAA,EACA,CAACC,OAAeQ,SAAAA,KAAAA;AACZ,IAAA,MAAM,CAAChC,IAAAA,EAAM,GAAGiC,UAAAA,CAAAA,GAAcT,KAAAA,CAAMU,MAAM,GAAA,CAAA;AAE1C,IAAA,IAAI,CAAClC,IAAAA,IAAQ,CAACiC,UAAAA,CAAWE,MAAAA,EAAQ;AAC7B,MAAA,MAAM,IAAIV,KAAAA,CACN,CAAA,qCAAA,EAAwCD,KAAAA,CAAAA,sBAAAA,CAA6B,CAAA;AAE7E,IAAA;AAEA,IAAA,OAAO;AAAIQ,MAAAA,GAAAA,SAAAA;AAAW,MAAA;AAAEhC,QAAAA,IAAAA;QAAMoC,KAAAA,EAAOH,UAAAA,CAAWI,KAAK,GAAA;AAAK;;EAC9D,CAAA,EACA,EAAE,CAAA,CAELd,MAAAA,CACG,qDACA,iJAAA,EACA,CAACC,OAAef,OAAAA,KAAAA;AACZ,IAAA,MAAM,CAAC6B,MAAMC,QAAAA,EAAUC,aAAAA,EAAexC,IAAAA,CAAAA,GAAQwB,KAAAA,CAAMU,MAAM,GAAA,CAAA;AAE1D,IAAA,QAAQI,IAAAA;MACJ,KAAK,MAAA;AACD,QAAA,IAAI,CAACC,QAAAA,EAAU;AACX,UAAA,MAAM,IAAId,MAAM,CAAA,4CAAA,CAA8C,CAAA;AAClE,QAAA;AACA,QAAA;MACJ,KAAK,SAAA;AACD,QAAA,IAAI,CAACzB,IAAAA,EAAM;AACP,UAAA,MAAM,IAAIyB,MAAM,CAAA,0CAAA,CAA4C,CAAA;AAChE,QAAA;AACA,QAAA;AACJ,MAAA;AACI,QAAA,MAAM,IAAIA,KAAAA,CAAM,CAAA,qBAAA,EAAwBa,IAAAA,CAAAA,CAAM,CAAA;AACtD;AAEA,IAAA,IAAI,CAACE,aAAAA,EAAe;AAChB,MAAA,MAAM,IAAIf,MAAM,CAAA,0BAAA,CAA4B,CAAA;AAChD,IAAA;AAEA,IAAA,OAAO;AACAhB,MAAAA,GAAAA,OAAAA;AACHgC,MAAAA,mBAAAA,CAAoBC,KAAAA,CAAM;AAAEJ,QAAAA,IAAAA;AAAMC,QAAAA,QAAAA;AAAUC,QAAAA,aAAAA;AAAexC,QAAAA;OAAK;;AAExE,EAAA,CAAA,EACA,EAAE,CAAA,CAELuB,MAAAA,CACG,4CACA,2CAAA,CAAA;AAIR,EAAA,KAAA,MAAWT,QAAQnB,KAAAA,EAAO;AACtB,IAAA,MAAMgD,cAAAA,GAAiBC,qBAAAA,CAAsBnD,OAAAA,EAASqB,IAAAA,CAAKd,IAAI,CAAA;AAC/D,IAAA,MAAM6C,iBAAAA,GAAoBC,wBAAAA,CAAyBrD,OAAAA,EAASqB,IAAAA,CAAKd,IAAI,CAAA;AAErEe,IAAAA,OAAAA,CAAQQ,MAAAA,CACJ,CAAA,EAAA,EAAKT,IAAAA,CAAKd,IAAI,sBACd,CAAA,QAAA,EAAWc,IAAAA,CAAKd,IAAI,CAAA,mBAAA,EAAsB2C,cAAAA,CAAAA,aAAAA,EAA8BE,iBAAAA,CAAkBR,IAAAA,CAAK,IAAA,CAAA,CAAA,CAAA,CAAQ,CAAA;AAE/G,EAAA;AAGAtB,EAAAA,OAAAA,CAAQQ,MAAAA,CAAO,mBAAmB,qDAAA,CAAA;AAGlCR,EAAAA,OAAAA,CACKZ,OAAAA,CAAQ,qBAAA,CAAA,CACRc,WAAAA,CAAY,0DAAA,CAAA,CACZ8B,MAAAA,CAAO,CAACC,QAAAA,KAAqBC,sBAAAA,CAAuBxD,OAAAA,EAASuD,QAAAA,CAAAA,CAAAA;AAElE,EAAA,KAAA,MAAWlC,QAAQnB,KAAAA,EAAO;AAGtBoB,IAAAA,OAAAA,CACKZ,OAAAA,CAAQW,KAAKd,IAAAA,EAAM;MAAEkD,SAAAA,EAAW;KAAM,CAAA,CACtCjC,YAAY,CAAA,IAAA,EAAOH,IAAAA,CAAKd,IAAI,CAAA,sBAAA,CAAwB,CAAA,CACpDmD,mBAAmB,IAAA,CAAA,CACnBC,oBAAkB,CAClBC,UAAAA,CAAW,KAAA,CAAA,CACXC,QAAAA,CAAS,aAAa,+BAAA,CAAA,CACtBP,MAAAA,CAAO,OAAOQ,IAAAA,KAAAA;AACX,MAAA,MAAMC,mBAAmB/D,OAAAA,EAASqB,IAAAA,CAAKd,MAAMuD,IAAAA,EAAMrD,kBAAAA,CAAmBa,OAAAA,CAAAA,CAAAA;IAC1E,CAAA,CAAA;AACR,EAAA;AAGArB,EAAAA,qBAAAA,GAAwBqB,SAASb,kBAAAA,CAAAA;AAEjC,EAAA,OAAOa,OAAAA;AACX,CAAA,EA1KkB,WAAA,CAAA;AA4KX,IAAM0C,MAAAA,mBAAS,MAAA,CAAA,OAClBC,MAAAA,EACAhE,qBAAAA,KAAAA;AAEA,EAAA,IAAI;AACA,IAAA,MAAMF,SAAAA,CAAoBkE,MAAAA,EAAQhE,qBAAAA,CAAAA,CAAuBiE,UAAAA,EAAU;AACvE,EAAA,CAAA,CAAA,OAASC,KAAAA,EAAO;AACZC,IAAAA,OAAAA,CAAQD,KAAAA,CAAM,mCAA8BA,KAAAA,CAAAA;AAC5CpD,IAAAA,OAAAA,CAAQc,KAAK,CAAA,CAAA;AACjB,EAAA;AACJ,CAAA,EAVsB,QAAA","file":"4YAYQFZC.js","sourcesContent":["import { Command } from 'commander';\nimport { camelCase } from 'es-toolkit';\nimport fs from 'node:fs';\nimport path from 'node:path';\nimport process from 'node:process';\n\nimport type { EnvironmentVariable, VolumeMapping } from './config';\nimport { volumeMappingSchema } from './config';\nimport type { ChainContext } from './context';\nimport type { ToolCommandExecutionOptions } from './core';\nimport { executeToolCommand } from './core';\nimport { displayToolVersionInfo, displayVersionCombinations } from './display';\nimport { getToolDefaultVersion, getToolSupportedVersions } from './utils/finder';\n\ninterface GlobalOptions {\n    cwd?: string;\n    volume: VolumeMapping[];\n    env: EnvironmentVariable[];\n    script?: string;\n    customEntrypoint?: string;\n}\n\ntype RegisterExtraCommands = (\n    program: Command,\n    parseGlobalOptions: (command: Command) => ToolCommandExecutionOptions,\n) => void;\n\nconst createCli = <TImageId extends string>(\n    context: ChainContext<TImageId>,\n    registerExtraCommands?: RegisterExtraCommands,\n): Command => {\n    const { tools } = context;\n    const toolVersionOptions = Object.fromEntries(\n        tools.map(({ name }) => [`${camelCase(name)}Version`, name]),\n    );\n\n    const parseGlobalOptions = (command: Command): ToolCommandExecutionOptions => {\n        const { cwd, volume, ...options } = command.opts<GlobalOptions>();\n\n        return {\n            ...options,\n            cwd: cwd ?? process.cwd(),\n            volumes: volume,\n            versions: Object.fromEntries(\n                Object.entries(options)\n                    .map(([name, version]) => [toolVersionOptions[name], version])\n                    .filter(([tool]) => tool),\n            ),\n        };\n    };\n\n    const program = new Command();\n\n    program\n        .name('lz-tool')\n        .description(\n            '🚀 LayerZero VM tooling with intelligent version management\\n' +\n                '\\n' +\n                'Usage pattern:\\n' +\n                '  lz-tool [global-options] <tool> [tool-args...]\\n' +\n                '\\n' +\n                'Examples:\\n' +\n                '  lz-tool -e bash sui --help\\n' +\n                '  lz-tool --sui-version 1.38.0 sui client\\n' +\n                '\\n' +\n                'Note: All lz-tool options must appear BEFORE the tool name.',\n        )\n        .version('1.0.0')\n        .enablePositionalOptions(); // Required for passThroughOptions to work\n\n    // Check for --list-versions before parsing to avoid help display\n    if (process.argv.includes('--list-versions')) {\n        displayVersionCombinations(context);\n        process.exit(0);\n    }\n\n    // Add global options.\n    program\n        .option('-c, --cwd <path>', 'Current working directory', (input: string) => {\n            if (typeof input !== 'string') {\n                throw new Error('cwd flag must be a string');\n            }\n\n            if (!path.isAbsolute(input)) {\n                throw new Error('cwd must be an absolute path if provided');\n            }\n\n            if (!fs.existsSync(input)) {\n                throw new Error('cwd does not exist');\n            }\n\n            if (!fs.statSync(input).isDirectory()) {\n                throw new Error('cwd must be a directory');\n            }\n\n            return input;\n        })\n        .option(\n            '-e, --custom-entrypoint <entrypoint>',\n            'Override the default Docker entrypoint for the tool',\n        )\n        .option(\n            '--script <script>',\n            'Execute a custom script using bash -c in the Docker container (e.g., --script \"npm install && npm test\")',\n        )\n        .option(\n            '--env <name=value>',\n            'Set environment variables for Docker container (e.g., --env NODE_ENV=production)',\n            (input: string, variables: EnvironmentVariable[]) => {\n                const [name, ...valueParts] = input.split('=');\n\n                if (!name || !valueParts.length) {\n                    throw new Error(\n                        `Invalid environment variable format: ${input}. Use --env NAME=VALUE`,\n                    );\n                }\n\n                return [...variables, { name, value: valueParts.join('=') }];\n            },\n            [],\n        )\n        .option(\n            '-v, --volume <type:hostPath:containerPath[:name]>',\n            'Volume mappings in the format type:hostPath:containerPath[:name] (e.g., host:/host/path:/container/path or isolate::/container/path:volumeName)',\n            (input: string, volumes: VolumeMapping[]) => {\n                const [type, hostPath, containerPath, name] = input.split(':');\n\n                switch (type) {\n                    case 'host':\n                        if (!hostPath) {\n                            throw new Error(`Host path is required for volume type 'host'`);\n                        }\n                        break;\n                    case 'isolate':\n                        if (!name) {\n                            throw new Error(`Name is required for volume type 'isolate'`);\n                        }\n                        break;\n                    default:\n                        throw new Error(`Invalid volume type: ${type}`);\n                }\n\n                if (!containerPath) {\n                    throw new Error(`Container path is required`);\n                }\n\n                return [\n                    ...volumes,\n                    volumeMappingSchema.parse({ type, hostPath, containerPath, name }),\n                ];\n            },\n            [],\n        )\n        .option(\n            '-p, --publish <host_port:container_port>',\n            \"Publish a container's port(s) to the host\",\n        );\n\n    // Add version options for each tool dynamically\n    for (const tool of tools) {\n        const defaultVersion = getToolDefaultVersion(context, tool.name);\n        const supportedVersions = getToolSupportedVersions(context, tool.name);\n\n        program.option(\n            `--${tool.name}-version <version>`,\n            `Specify ${tool.name} version (default: ${defaultVersion}, supported: ${supportedVersions.join(', ')})`,\n        );\n    }\n\n    // Add utility options\n    program.option('--list-versions', 'Display all supported version combinations and exit');\n\n    // Add version info command\n    program\n        .command('version-info <tool>')\n        .description('Display detailed version information for a specific tool')\n        .action((toolName: string) => displayToolVersionInfo(context, toolName));\n\n    for (const tool of tools) {\n        // Don't add any options to the subcommand level.\n        // All lz-tool options must be specified before the subcommand.\n        program\n            .command(tool.name, { isDefault: false })\n            .description(`Run ${tool.name} with version checking`)\n            .passThroughOptions(true) // Pass through all options after the subcommand\n            .allowUnknownOption()\n            .helpOption(false) // Disable automatic help option to pass --help to the tool\n            .argument('[args...]', 'Arguments to pass to the tool')\n            .action(async (args: string[]) => {\n                await executeToolCommand(context, tool.name, args, parseGlobalOptions(program));\n            });\n    }\n\n    // Allow external registration of extra commands\n    registerExtraCommands?.(program, parseGlobalOptions);\n\n    return program;\n};\n\nexport const runCli = async <TImageId extends string>(\n    config: ChainContext<TImageId>,\n    registerExtraCommands?: RegisterExtraCommands,\n): Promise<void> => {\n    try {\n        await createCli<TImageId>(config, registerExtraCommands).parseAsync();\n    } catch (error) {\n        console.error('❌ VM tool execution failed', error);\n        process.exit(1);\n    }\n};\n"]}

package/dist/55NXWILT.js.map

@@ -1 +0,0 @@
-{"version":3,"sources":["../src/core/tool-executor.ts"],"names":["getHostUserIds","userInfo","os","uid","gid","undefined","$","verbose","stdio","process","stderr","mergeVolumes","defaultVolumes","userVolumes","uniqBy","volume","containerPath","resolveVolumePaths","volumes","workspaceRoot","map","type","hostPath","path","resolve","replace","homedir","ensureDockerImage","imageUri","output","nothrow","exitCode","console","info","error","Error","stringifyError","join","executeToolCommand","context","toolName","args","cwd","customEntrypoint","entrypoint","env","customEnvVars","script","publish","versions","tool","findToolByName","preExecute","length","name","overrides","filter","uv","some","dv","resolvedVersion","resolveTypeVersions","getSecondaryVersion","secondaryVersion","satisfies","warn","getImageUriForTool","findWorkspaceRoot","relativePath","relative","trim","defaultEnv","hasDockerSocketMount","v","dockerSocketEnv","value","envArgs","flatMap","hostUserIds","userIdEnvArgs","finalArgs","dockerArgs","privileged","getVolumeName","lockMany","locked","label","time","result","timeEnd"],"mappings":";;;;;;;;;;;;;;;AAAA,cAAA,EAAA;AAqBA,IAAMA,iCAAiB,MAAA,CAAA,MAAA;AAEnB,EAAA,MAAMC,QAAAA,GAAWC,GAAGD,QAAAA,EAAQ;AAC5B,EAAA,IAAIA,QAAAA,CAASE,GAAAA,KAAQ,EAAA,IAAMF,QAAAA,CAASG,QAAQ,EAAA,EAAI;AAC5C,IAAA,OAAOC,MAAAA;AACX,EAAA;AACA,EAAA,OAAO;AAAEF,IAAAA,GAAAA,EAAKF,QAAAA,CAASE,GAAAA;AAAKC,IAAAA,GAAAA,EAAKH,QAAAA,CAASG;AAAI,GAAA;AAClD,CAAA,EAPuB,gBAAA,CAAA;AAUvBE,CAAAA,CAAEC,OAAAA,GAAU,IAAA;AACZD,CAAAA,CAAEE,KAAAA,GAAQ;AAAC,EAAA,SAAA;AAAW,EAAA,MAAA;EAAQC,OAAAA,CAAQC;;AAMtC,IAAMC,YAAAA,mBAAe,MAAA,CAAA,CACjBC,cAAAA,EACAC,WAAAA,KACkBC,MAAAA,CAAO;AAAID,EAAAA,GAAAA,WAAAA;AAAgBD,EAAAA,GAAAA;GAAiB,CAACG,MAAAA,KAAWA,MAAAA,CAAOC,aAAa,CAAA,EAH7E,cAAA,CAAA;AAWrB,IAAMC,kBAAAA,mBAAqB,MAAA,CAAA,CAACC,OAAAA,EAA0BC,aAAAA,KAClDD,OAAAA,CAAQE,IAAI,CAACL,MAAAA,KACTA,MAAAA,CAAOM,IAAAA,KAAS,MAAA,GACV;EACI,GAAGN,MAAAA;EACHO,QAAAA,EAAUC,IAAAA,CAAKC,OAAAA,CACXL,aAAAA,EACAJ,MAAAA,CAAOO,QAAAA,CAASG,QAAQ,IAAA,EAAMvB,EAAAA,CAAGwB,OAAAA,EAAO,CAAA;AAEhD,CAAA,GACAX,MAAAA,CAAAA,EAVa,oBAAA,CAAA;AAa3B,IAAMY,iBAAAA,iCAA2BC,QAAAA,KAAAA;AAC7B,EAAA,IAAIC,MAAAA;AAEJ,EAAA,IAAI;AAOAA,IAAAA,MAAAA,GAAS,MAAMvB,CAAAA,CAAAA,sCAAAA,EAA0CsB,QAAAA,CAAAA,CAAAA,CAAWE,OAAAA,EAAO;AAC3E,IAAA,IAAI,CAACD,OAAOE,QAAAA,EAAU;AAClBC,MAAAA,OAAAA,CAAQC,IAAAA,CAAK,CAAA,kCAAA,EAAgCL,QAAAA,CAAAA,CAAU,CAAA;AACvD,MAAA;AACJ,IAAA;AAEAI,IAAAA,OAAAA,CAAQC,IAAAA,CAAK,wCAAiCL,QAAAA,CAAAA;AAC9CC,IAAAA,MAAAA,GAAS,MAAMvB,CAAAA,CAAAA,YAAAA,EAAgBsB,QAAAA,CAAAA,CAAAA,CAAWE,OAAAA,EAAO;AACrD,EAAA,CAAA,CAAA,OAASI,KAAAA,EAAgB;AACrB,IAAA,MAAM,IAAIC,MAAM,CAAA,4BAAA,EAA+BP,QAAAA,KAAaQ,cAAAA,CAAeF,KAAAA,CAAAA,CAAAA,CAAQ,CAAA;AACvF,EAAA;AAEA,EAAA,IAAIL,OAAOE,QAAAA,EAAU;AACjB,IAAA,MAAM,IAAII,KAAAA,CACN;AACI,MAAA,6BAAA;AACA,MAAA,CAAA,WAAA,EAAcP,QAAAA,CAAAA,cAAAA,CAAAA;AACd,MAAA;AACFS,KAAAA,CAAAA,IAAAA,CAAK,IAAA,CAAA,CAAA;AAEf,EAAA;AAEAL,EAAAA,OAAAA,CAAQC,IAAAA,CAAK,CAAA,4BAAA,EAA0BL,QAAAA,CAAAA,CAAU,CAAA;AACrD,CAAA,EAjC0B,mBAAA,CAAA;AAiD1B,eAAsBU,mBAClBC,OAAAA,EACAC,QAAAA,EACAC,IAAAA,EACA,EACIC,KACAxB,OAAAA,EAASL,WAAAA,EACT8B,gBAAAA,EAAkBC,UAAAA,EAClBC,KAAKC,aAAAA,EACLC,MAAAA,EACAC,SACAC,QAAAA,GAAW,IAAE,EACa;AAE9B,EAAA,MAAMC,IAAAA,GAAOC,cAAAA,CAAeZ,OAAAA,EAASC,QAAAA,CAAAA;AAGrC,EAAA,IAAIU,KAAKE,UAAAA,EAAY;AACjB,IAAA,MAAMF,IAAAA,CAAKE,WAAWb,OAAAA,EAAS;AAC3BG,MAAAA,GAAAA;AACAD,MAAAA,IAAAA;MACAvB,OAAAA,EAASL,WAAAA;MACTgC,GAAAA,EAAKC,aAAAA;AACLC,MAAAA,MAAAA;AACAC,MAAAA,OAAAA;AACAC,MAAAA;KACJ,CAAA;AACJ,EAAA;AAGA,EAAA,MAAMrC,cAAAA,GAAiBsC,IAAAA,CAAKtC,cAAAA,IAAkB,EAAA;AAC9C,EAAA,MAAMM,OAAAA,GAAUP,YAAAA,CAAaC,cAAAA,EAAgBC,WAAAA,CAAAA;AAE7C,EAAA,IAAID,cAAAA,CAAeyC,SAAS,CAAA,EAAG;AAC3BrB,IAAAA,OAAAA,CAAQC,KAAK,CAAA,gBAAA,EAAYrB,cAAAA,CAAeyC,MAAM,CAAA,6BAAA,EAAgCH,IAAAA,CAAKI,IAAI,CAAA,CAAE,CAAA;AACzF,IAAA,IAAIzC,WAAAA,CAAYwC,SAAS,CAAA,EAAG;AACxB,MAAA,MAAME,SAAAA,GAAY1C,WAAAA,CAAY2C,MAAAA,CAAO,CAACC,EAAAA,KAClC7C,cAAAA,CAAe8C,IAAAA,CAAK,CAACC,EAAAA,KAAOA,EAAAA,CAAG3C,aAAAA,KAAkByC,EAAAA,CAAGzC,aAAa,CAAA,CAAA;AAErE,MAAA,IAAIuC,SAAAA,CAAUF,SAAS,CAAA,EAAG;AACtBrB,QAAAA,OAAAA,CAAQC,IAAAA,CAAK,CAAA,gCAAA,EAA4BsB,SAAAA,CAAUF,MAAM,CAAA,kBAAA,CAAoB,CAAA;AACjF,MAAA;AACJ,IAAA;AACJ,EAAA;AAGA,EAAA,MAAMO,kBAAkBC,mBAAAA,CAAoBtB,OAAAA,EAASU,QAAAA,CAAAA,CAAUC,KAAKI,IAAI,CAAA;AAExE,EAAA,IAAI,CAACM,eAAAA,EAAiB;AAClB,IAAA,MAAM,IAAIzB,KAAAA,CAAM,CAAA,6BAAA,EAAgCe,IAAAA,CAAKI,IAAI,CAAA,CAAE,CAAA;AAC/D,EAAA;AAEAtB,EAAAA,OAAAA,CAAQC,KAAK,CAAA,UAAA,EAAMiB,IAAAA,CAAKI,IAAI,CAAA,UAAA,EAAaM,eAAAA,CAAAA,CAAiB,CAAA;AAG1D,EAAA,IAAIV,KAAKY,mBAAAA,EAAqB;AAC1B,IAAA,IAAI;AACA,MAAA,MAAMC,gBAAAA,GAAmB,MAAMb,IAAAA,CAAKY,mBAAAA,CAAoB;AAAEpB,QAAAA;OAAI,CAAA;AAE9D,MAAA,IAAI,CAAQsB,MAAAA,CAAAA,SAAAA,CAAUD,gBAAAA,EAAkBH,eAAAA,CAAAA,EAAkB;AACtD5B,QAAAA,OAAAA,CAAQiC,IAAAA,CACJ,CAAA,sCAAA,EAAyCF,gBAAAA,CAAAA,iCAAAA,EAAoDH,eAAAA,CAAAA,CAAAA,CAAkB,CAAA;AAEvH,MAAA;AACJ,IAAA,CAAA,CAAA,OAAS1B,KAAAA,EAAO;AAEZF,MAAAA,OAAAA,CAAQiC,IAAAA,CAAK,uCAAA,EAAyC7B,cAAAA,CAAeF,KAAAA,CAAAA,CAAAA;AACzE,IAAA;AACJ,EAAA;AAGA,EAAA,MAAMN,WAAW,MAAMsC,kBAAAA,CAAmB3B,OAAAA,EAASW,IAAAA,CAAKI,MAAMM,eAAAA,CAAAA;AAC9D,EAAA,MAAMzC,aAAAA,GAAgB,MAAMgD,iBAAAA,CAAkBzB,GAAAA,CAAAA;AAC9C,EAAA,MAAM0B,YAAAA,GAAe7C,IAAAA,CAAK8C,QAAAA,CAASlD,aAAAA,EAAeuB,GAAAA,CAAAA;AAElD,EAAA,MAAMf,kBAAkBC,QAAAA,CAAAA;AAExB,EAAA,IAAIgB,UAAAA,EAAY0B,MAAAA,EAAQ;AACpBtC,IAAAA,OAAAA,CAAQC,IAAAA,CAAK,CAAA,mCAAA,EAA+BW,UAAAA,CAAAA,CAAY,CAAA;AAC5D,EAAA;AAGA,EAAA,MAAM2B,UAAAA,GAAarB,IAAAA,CAAKqB,UAAAA,IAAc,EAAA;AAItC,EAAA,MAAMC,oBAAAA,GAAuBtD,OAAAA,CAAQwC,IAAAA,CACjC,CAACe,CAAAA,KAAMA,EAAEpD,IAAAA,KAAS,MAAA,IAAUoD,CAAAA,CAAEzD,aAAAA,KAAkB,sBAAA,CAAA;AAEpD,EAAA,MAAM0D,kBAAyCF,oBAAAA,GACzC;AACI,IAAA;MAAElB,IAAAA,EAAM,UAAA;MAAYqB,KAAAA,EAAOjC;AAAI,KAAA;AAC/B,IAAA;MAAEY,IAAAA,EAAM,qBAAA;MAAuBqB,KAAAA,EAAOxD;AAAc;MAExD,EAAA;AAEN,EAAA,MAAMyD,UAAU9D,MAAAA,CACZ;AAAIgC,IAAAA,GAAAA,aAAAA;AAAkB4B,IAAAA,GAAAA,eAAAA;AAAoBH,IAAAA,GAAAA;KAC1C,CAAC,EAAEjB,IAAAA,EAAI,KAAOA,IAAAA,CAAAA,CAChBuB,QAAQ,CAAC,EAAEvB,IAAAA,EAAMqB,KAAAA,EAAK,KAAO;AAAC,IAAA,IAAA;IAAM,CAAA,EAAGrB,IAAAA,IAAQqB,KAAAA,CAAAA;AAAQ,GAAA,CAAA;AAKzD,EAAA,MAAMG,cAAc9E,cAAAA,EAAAA;AACpB,EAAA,MAAM+E,gBAAgBD,WAAAA,GAChB;AAAC,IAAA,IAAA;AAAM,IAAA,CAAA,UAAA,EAAaA,YAAY3E,GAAG,CAAA,CAAA;AAAI,IAAA,IAAA;AAAM,IAAA,CAAA,UAAA,EAAa2E,YAAY1E,GAAG,CAAA;MACzE,EAAA;AAEN4B,EAAAA,OAAAA,CAAQC,KAAK,CAAA,uCAAA,EAAmC6C,WAAAA,EAAa3E,GAAAA,CAAAA,CAAAA,EAAO2E,WAAAA,EAAa1E,GAAAA,CAAAA,CAAK,CAAA;AAEtF,EAAA,IAAImE,UAAAA,CAAWlB,SAAS,CAAA,EAAG;AACvBrB,IAAAA,OAAAA,CAAQC,KACJ,CAAA,gBAAA,EAAYsC,UAAAA,CAAWlB,MAAM,CAAA,qCAAA,EAAwCH,IAAAA,CAAKI,IAAI,CAAA,CAAE,CAAA;AAExF,EAAA;AACA,EAAA,IAAIR,aAAAA,CAAcO,SAAS,CAAA,EAAG;AAC1BrB,IAAAA,OAAAA,CAAQC,IAAAA,CAAK,CAAA,gBAAA,EAAYa,aAAAA,CAAcO,MAAM,CAAA,+BAAA,CAAiC,CAAA;AAClF,EAAA;AAGA,EAAA,IAAI2B,SAAAA;AACJ,EAAA,IAAIjC,MAAAA,IAAUA,MAAAA,CAAOuB,IAAAA,EAAI,KAAO,EAAA,EAAI;AAChCtC,IAAAA,OAAAA,CAAQC,IAAAA,CAAK,CAAA,mCAAA,EAA+Bc,MAAAA,CAAAA,CAAQ,CAAA;AACpDiC,IAAAA,SAAAA,GAAY;AAAC,MAAA,MAAA;AAAQ,MAAA,IAAA;AAAMjC,MAAAA;;EAC/B,CAAA,MAAO;AACHiC,IAAAA,SAAAA,GAAYpC,eAAevC,MAAAA,GAAY;MAAC6C,IAAAA,CAAKI,IAAAA;AAASb,MAAAA,GAAAA;AAAQA,KAAAA,GAAAA,IAAAA;AAClE,EAAA;AAGA,EAAA,MAAMwC,UAAAA,GAAa;AACf,IAAA,KAAA;AACI/B,IAAAA,GAAAA,IAAAA,CAAKgC,UAAAA,GAAa;AAAC,MAAA;QAAkB,EAAA;AACzC,IAAA,MAAA;AACGN,IAAAA,GAAAA,OAAAA;AACAG,IAAAA,GAAAA,aAAAA;AACH,IAAA,IAAA;AACA,IAAA,CAAA,EAAG5D,aAAAA,CAAAA,WAAAA,CAAAA;AACH,IAAA,IAAA;AACA,IAAA,CAAA,WAAA,EAAciD,YAAAA,CAAAA,CAAAA;OACVpB,OAAAA,GAAU;AAAC,MAAA,IAAA;AAAMA,MAAAA,OAAAA,CAAQsB,IAAAA;QAAU,EAAA;AACpCrD,IAAAA,GAAAA,kBAAAA,CAAmBC,OAAAA,EAASC,aAAAA,CAAAA,CAAe0D,OAAAA,CAAQ,CAAC9D,MAAAA,KAAW;AAC9D,MAAA,IAAA;AACAoE,MAAAA,aAAAA,CAAcpE,MAAAA;AACjB,KAAA,CAAA;OACG6B,UAAAA,GAAa;AAAC,MAAA,cAAA;AAAgBA,MAAAA;QAAc,EAAA;AAChDhB,IAAAA,QAAAA;AACGoD,IAAAA,GAAAA;;AAGP,EAAA,MAAMnD,MAAAA,GAAS,MAAMuD,QAAAA,CACjBlE,OAAAA,CAAQ2D,OAAAA,CAAQ,CAAC9D,MAAAA,KACbA,MAAAA,CAAOM,IAAAA,KAAS,SAAA,IAAaN,MAAAA,CAAOsE,MAAAA,GAAS;IAACtE,MAAAA,CAAOuC;MAAQ,EAAE,GAEnE,YAAA;AACI,IAAA,MAAMgC,KAAAA,GAAQ,CAAA,aAAA,EAAMN,SAAAA,CAAU3C,IAAAA,CAAK,GAAA,CAAA,CAAA,CAAA;AACnCL,IAAAA,OAAAA,CAAQuD,KAAKD,KAAAA,CAAAA;AACb,IAAA,MAAME,MAAAA,GAAS,MAAMlF,CAAAA,CAAAA,OAAAA,EAAW2E,UAAAA,GAAanD,OAAAA,EAAO;AACpDE,IAAAA,OAAAA,CAAQyD,QAAQH,KAAAA,CAAAA;AAEhB,IAAA,OAAOE,MAAAA;EACX,CAAA,CAAA;AAGJ,EAAA,IAAI3D,OAAOE,QAAAA,EAAU;AACjB,IAAA,MAAM,IAAII,KAAAA,CAAM,CAAA,2CAAA,EAA8CN,MAAAA,CAAOE,QAAQ,CAAA,CAAA,CAAG,CAAA;AACpF,EAAA;AAEA,EAAA,OAAOF,MAAAA;AACX;AAzKsBS,MAAAA,CAAAA,kBAAAA,EAAAA,oBAAAA,CAAAA","file":"55NXWILT.js","sourcesContent":["import { uniqBy } from 'es-toolkit';\nimport os from 'node:os';\nimport path from 'node:path';\nimport process from 'node:process';\nimport * as semver from 'semver';\nimport { $, type ProcessOutput } from 'zx';\n\nimport type { EnvironmentVariable, VolumeMapping } from '../config';\nimport type { ChainContext } from '../context';\nimport { findWorkspaceRoot } from '../utils';\nimport { getImageUriForTool, getVolumeName } from '../utils/docker';\nimport { stringifyError } from '../utils/error';\nimport { findToolByName } from '../utils/finder';\nimport { lockMany } from './lock';\nimport { resolveTypeVersions } from './version-resolver';\n\n/**\n * Get the current user's UID and GID for Docker container user matching.\n * This prevents permission issues when containers write to bind-mounted directories.\n * On Windows, returns undefined as UID/GID matching is not needed.\n */\nconst getHostUserIds = (): { uid: number; gid: number } | undefined => {\n    // os.userInfo() returns uid/gid on POSIX systems, -1 on Windows\n    const userInfo = os.userInfo();\n    if (userInfo.uid === -1 || userInfo.gid === -1) {\n        return undefined;\n    }\n    return { uid: userInfo.uid, gid: userInfo.gid };\n};\n\n// Configure zx to inherit stdio by default (moved from original setup)\n$.verbose = true;\n$.stdio = ['inherit', 'pipe', process.stderr];\n\n/**\n * Merge default volumes with user-specified volumes\n * User volumes take precedence when containerPath conflicts\n */\nconst mergeVolumes = (\n    defaultVolumes: readonly VolumeMapping[],\n    userVolumes: readonly VolumeMapping[],\n): VolumeMapping[] => uniqBy([...userVolumes, ...defaultVolumes], (volume) => volume.containerPath);\n\n/**\n * Resolve host paths in volumes to absolute paths\n * - Paths starting with ~ are resolved to home directory\n * - Relative paths (starting with . or no prefix) are resolved to workspace root\n * - Absolute paths are left unchanged\n */\nconst resolveVolumePaths = (volumes: VolumeMapping[], workspaceRoot: string): VolumeMapping[] =>\n    volumes.map((volume) =>\n        volume.type === 'host'\n            ? {\n                  ...volume,\n                  hostPath: path.resolve(\n                      workspaceRoot,\n                      volume.hostPath.replace(/^~/, os.homedir()),\n                  ),\n              }\n            : volume,\n    );\n\nconst ensureDockerImage = async (imageUri: string): Promise<void> => {\n    let output: ProcessOutput;\n\n    try {\n        // Check local images first.\n        //\n        // NOTE: `docker image ls <ref>` prints repository/tag in separate columns, so\n        // `stdout.includes(<full-ref>)` is not reliable. Use `inspect` instead: exitCode=0\n        // means the image exists locally.\n        // Keep output minimal to avoid dumping full inspect JSON into CI logs.\n        output = await $`docker image inspect --format {{.Id}} ${imageUri}`.nothrow();\n        if (!output.exitCode) {\n            console.info(`✅ Using cached Docker image: ${imageUri}`);\n            return;\n        }\n\n        console.info('📥 Pulling Docker image from:', imageUri);\n        output = await $`docker pull ${imageUri}`.nothrow();\n    } catch (error: unknown) {\n        throw new Error(`Failed to pull Docker image ${imageUri}: ${stringifyError(error)}`);\n    }\n\n    if (output.exitCode) {\n        throw new Error(\n            [\n                'Docker image not available:',\n                `  - Image: ${imageUri} (pull failed)`,\n                '  - Check if the image tag exists in image registry.',\n            ].join('\\n'),\n        );\n    }\n\n    console.info(`✅ Successfully pulled: ${imageUri}`);\n};\n\nexport interface ToolCommandExecutionOptions {\n    cwd: string;\n    volumes: readonly VolumeMapping[];\n    customEntrypoint?: string;\n    env: EnvironmentVariable[];\n    args?: string[];\n    script?: string;\n    publish?: string;\n    versions?: Record<string, string>;\n}\n\n/**\n * Enhanced tool command execution using the new version compatibility matrix system\n */\nexport async function executeToolCommand<TImageId extends string>(\n    context: ChainContext<TImageId>,\n    toolName: string,\n    args: string[],\n    {\n        cwd,\n        volumes: userVolumes,\n        customEntrypoint: entrypoint,\n        env: customEnvVars,\n        script,\n        publish,\n        versions = {},\n    }: ToolCommandExecutionOptions,\n): Promise<ProcessOutput> {\n    const tool = findToolByName(context, toolName);\n\n    // Run pre-execution hook if defined (e.g., toolchain sync)\n    if (tool.preExecute) {\n        await tool.preExecute(context, {\n            cwd,\n            args,\n            volumes: userVolumes,\n            env: customEnvVars,\n            script,\n            publish,\n            versions,\n        });\n    }\n\n    // Merge default volumes with user-specified volumes\n    const defaultVolumes = tool.defaultVolumes ?? [];\n    const volumes = mergeVolumes(defaultVolumes, userVolumes);\n\n    if (defaultVolumes.length > 0) {\n        console.info(`📦 Using ${defaultVolumes.length} default cache volume(s) for ${tool.name}`);\n        if (userVolumes.length > 0) {\n            const overrides = userVolumes.filter((uv) =>\n                defaultVolumes.some((dv) => dv.containerPath === uv.containerPath),\n            );\n            if (overrides.length > 0) {\n                console.info(`🔧 User volumes override ${overrides.length} default volume(s)`);\n            }\n        }\n    }\n\n    // Get the resolved version for the current tool.\n    const resolvedVersion = resolveTypeVersions(context, versions)[tool.name];\n\n    if (!resolvedVersion) {\n        throw new Error(`No version resolved for tool ${tool.name}`);\n    }\n\n    console.info(`🔧 ${tool.name} version: ${resolvedVersion}`);\n\n    // Check secondary version validation if available\n    if (tool.getSecondaryVersion) {\n        try {\n            const secondaryVersion = await tool.getSecondaryVersion({ cwd });\n\n            if (!semver.satisfies(secondaryVersion, resolvedVersion)) {\n                console.warn(\n                    `Warning: Local configuration version (${secondaryVersion}) differs from resolved version (${resolvedVersion})`,\n                );\n            }\n        } catch (error) {\n            // Secondary version check failed, but continue with resolved version\n            console.warn('Could not validate secondary version:', stringifyError(error));\n        }\n    }\n\n    // Use Docker image with merged volumes\n    const imageUri = await getImageUriForTool(context, tool.name, resolvedVersion);\n    const workspaceRoot = await findWorkspaceRoot(cwd);\n    const relativePath = path.relative(workspaceRoot, cwd);\n\n    await ensureDockerImage(imageUri);\n\n    if (entrypoint?.trim()) {\n        console.info(`🔧 Using custom entrypoint: ${entrypoint}`);\n    }\n\n    // Merge default env vars with custom env vars (custom takes precedence)\n    const defaultEnv = tool.defaultEnv ?? [];\n\n    // Check if Docker socket is mounted (for tools that spawn Docker containers like anchor --verifiable)\n    // If so, inject HOST_CWD and HOST_WORKSPACE_ROOT so the inner container knows the host paths\n    const hasDockerSocketMount = volumes.some(\n        (v) => v.type === 'host' && v.containerPath === '/var/run/docker.sock',\n    );\n    const dockerSocketEnv: EnvironmentVariable[] = hasDockerSocketMount\n        ? [\n              { name: 'HOST_CWD', value: cwd },\n              { name: 'HOST_WORKSPACE_ROOT', value: workspaceRoot },\n          ]\n        : [];\n\n    const envArgs = uniqBy(\n        [...customEnvVars, ...dockerSocketEnv, ...defaultEnv],\n        ({ name }) => name,\n    ).flatMap(({ name, value }) => ['-e', `${name}=${value}`]);\n\n    // Add host user UID/GID for permission matching on Linux/macOS\n    // This prevents artifacts created in containers from having root ownership\n    // Currently only used for stellar which has an entrypoint that handles UID/GID\n    const hostUserIds = getHostUserIds();\n    const userIdEnvArgs = hostUserIds\n        ? ['-e', `LOCAL_UID=${hostUserIds.uid}`, '-e', `LOCAL_GID=${hostUserIds.gid}`]\n        : [];\n\n    console.info(`👤 Running container as UID:GID ${hostUserIds?.uid}:${hostUserIds?.gid}`);\n\n    if (defaultEnv.length > 0) {\n        console.info(\n            `🌍 Using ${defaultEnv.length} default environment variable(s) for ${tool.name}`,\n        );\n    }\n    if (customEnvVars.length > 0) {\n        console.info(`🌍 Using ${customEnvVars.length} custom environment variable(s)`);\n    }\n\n    // Handle custom script execution\n    let finalArgs: string[];\n    if (script && script.trim() !== '') {\n        console.info(`📜 Executing custom script: ${script}`);\n        finalArgs = ['bash', '-c', script];\n    } else {\n        finalArgs = entrypoint === undefined ? [tool.name, ...args] : args;\n    }\n\n    // Build the Docker command with proper argument separation\n    const dockerArgs = [\n        'run',\n        ...(tool.privileged ? ['--privileged'] : []),\n        '--rm',\n        ...envArgs,\n        ...userIdEnvArgs,\n        '-v',\n        `${workspaceRoot}:/workspace`,\n        '-w',\n        `/workspace/${relativePath}`,\n        ...(publish ? ['-p', publish.trim()] : []),\n        ...resolveVolumePaths(volumes, workspaceRoot).flatMap((volume) => [\n            '-v',\n            getVolumeName(volume),\n        ]),\n        ...(entrypoint ? ['--entrypoint', entrypoint] : []),\n        imageUri,\n        ...finalArgs,\n    ];\n\n    const output = await lockMany(\n        volumes.flatMap((volume) =>\n            volume.type === 'isolate' && volume.locked ? [volume.name] : [],\n        ),\n        async () => {\n            const label = `⏱️ ${finalArgs.join(' ')}`;\n            console.time(label);\n            const result = await $`docker ${dockerArgs}`.nothrow();\n            console.timeEnd(label);\n\n            return result;\n        },\n    );\n\n    if (output.exitCode) {\n        throw new Error(`Failed to run Docker container (exit code: ${output.exitCode})`);\n    }\n\n    return output;\n}\n"]}

package/dist/5BNKRW3P.cjs.map

@@ -1 +0,0 @@
-{"version":3,"sources":["../src/cli.ts"],"names":["init_cjs_shims","createCli","__name","context","registerExtraCommands","tools","toolVersionOptions","Object","fromEntries","map","name","camelCase","parseGlobalOptions","command","cwd","volume","options","opts","process","volumes","versions","entries","version","filter","tool","program","Command","description","enablePositionalOptions","argv","includes","displayVersionCombinations","exit","option","input","Error","path","isAbsolute","fs","existsSync","statSync","isDirectory","variables","valueParts","split","length","value","join","type","hostPath","containerPath","volumeMappingSchema","parse","defaultVersion","getToolDefaultVersion","supportedVersions","getToolSupportedVersions","action","toolName","displayToolVersionInfo","isDefault","passThroughOptions","allowUnknownOption","helpOption","argument","args","executeToolCommand","runCli","config","parseAsync","error","console"],"mappings":";;;;;;;;;;;;;;;;;;;;AAAAA,4BAAA,EAAA;AA2BA,IAAMC,SAAAA,mBAAYC,oBAAA,CAAA,CACdC,OAAAA,EACAC,qBAAAA,KAAAA;AAEA,EAAA,MAAM,EAAEC,OAAK,GAAKF,OAAAA;AAClB,EAAA,MAAMG,kBAAAA,GAAqBC,OAAOC,WAAAA,CAC9BH,KAAAA,CAAMI,IAAI,CAAC,EAAEC,MAAI,KAAO;IAAC,CAAA,EAAGC,mBAAAA,CAAUD,IAAAA,CAAAA,CAAAA,OAAAA,CAAAA;AAAgBA,IAAAA;GAAK,CAAA,CAAA;AAG/D,EAAA,MAAME,kBAAAA,yCAAsBC,OAAAA,KAAAA;AACxB,IAAA,MAAM,EAAEC,GAAAA,EAAKC,MAAAA,EAAQ,GAAGC,OAAAA,EAAAA,GAAYH,QAAQI,IAAAA,EAAI;AAEhD,IAAA,OAAO;MACH,GAAGD,OAAAA;MACHF,GAAAA,EAAKA,GAAAA,IAAOI,yBAAQJ,GAAAA,EAAG;MACvBK,OAAAA,EAASJ,MAAAA;MACTK,QAAAA,EAAUb,MAAAA,CAAOC,WAAAA,CACbD,MAAAA,CAAOc,OAAAA,CAAQL,OAAAA,CAAAA,CACVP,GAAAA,CAAI,CAAC,CAACC,IAAAA,EAAMY,OAAAA,CAAAA,KAAa;AAAChB,QAAAA,kBAAAA,CAAmBI,IAAAA,CAAAA;AAAOY,QAAAA;AAAQ,OAAA,CAAA,CAC5DC,OAAO,CAAC,CAACC,IAAAA,CAAAA,KAAUA,IAAAA,CAAAA;AAEhC,KAAA;EACJ,CAAA,EAb2B,oBAAA,CAAA;AAe3B,EAAA,MAAMC,OAAAA,GAAU,IAAIC,iBAAAA,EAAAA;AAEpBD,EAAAA,OAAAA,CACKf,IAAAA,CAAK,SAAA,CAAA,CACLiB,WAAAA,CACG,6RASI,CAAA,CAEPL,OAAAA,CAAQ,OAAA,CAAA,CACRM,uBAAAA,EAAuB;AAG5B,EAAA,IAAIV,wBAAAA,CAAQW,IAAAA,CAAKC,QAAAA,CAAS,iBAAA,CAAA,EAAoB;AAC1CC,IAAAA,uCAAAA,CAA2B5B,OAAAA,CAAAA;AAC3Be,IAAAA,wBAAAA,CAAQc,KAAK,CAAA,CAAA;AACjB,EAAA;AAGAP,EAAAA,OAAAA,CACKQ,MAAAA,CAAO,kBAAA,EAAoB,2BAAA,EAA6B,CAACC,KAAAA,KAAAA;AACtD,IAAA,IAAI,OAAOA,UAAU,QAAA,EAAU;AAC3B,MAAA,MAAM,IAAIC,MAAM,2BAAA,CAAA;AACpB,IAAA;AAEA,IAAA,IAAI,CAACC,qBAAAA,CAAKC,UAAAA,CAAWH,KAAAA,CAAAA,EAAQ;AACzB,MAAA,MAAM,IAAIC,MAAM,0CAAA,CAAA;AACpB,IAAA;AAEA,IAAA,IAAI,CAACG,mBAAAA,CAAGC,UAAAA,CAAWL,KAAAA,CAAAA,EAAQ;AACvB,MAAA,MAAM,IAAIC,MAAM,oBAAA,CAAA;AACpB,IAAA;AAEA,IAAA,IAAI,CAACG,mBAAAA,CAAGE,QAAAA,CAASN,KAAAA,CAAAA,CAAOO,aAAW,EAAI;AACnC,MAAA,MAAM,IAAIN,MAAM,yBAAA,CAAA;AACpB,IAAA;AAEA,IAAA,OAAOD,KAAAA;AACX,EAAA,CAAA,CAAA,CACCD,MAAAA,CACG,sCAAA,EACA,qDAAA,EAEHA,MAAAA,CACG,mBAAA,EACA,0GAAA,CAAA,CAEHA,MAAAA,CACG,oBAAA,EACA,kFAAA,EACA,CAACC,OAAeQ,SAAAA,KAAAA;AACZ,IAAA,MAAM,CAAChC,IAAAA,EAAM,GAAGiC,UAAAA,CAAAA,GAAcT,KAAAA,CAAMU,MAAM,GAAA,CAAA;AAE1C,IAAA,IAAI,CAAClC,IAAAA,IAAQ,CAACiC,UAAAA,CAAWE,MAAAA,EAAQ;AAC7B,MAAA,MAAM,IAAIV,KAAAA,CACN,CAAA,qCAAA,EAAwCD,KAAAA,CAAAA,sBAAAA,CAA6B,CAAA;AAE7E,IAAA;AAEA,IAAA,OAAO;AAAIQ,MAAAA,GAAAA,SAAAA;AAAW,MAAA;AAAEhC,QAAAA,IAAAA;QAAMoC,KAAAA,EAAOH,UAAAA,CAAWI,KAAK,GAAA;AAAK;;EAC9D,CAAA,EACA,EAAE,CAAA,CAELd,MAAAA,CACG,qDACA,iJAAA,EACA,CAACC,OAAef,OAAAA,KAAAA;AACZ,IAAA,MAAM,CAAC6B,MAAMC,QAAAA,EAAUC,aAAAA,EAAexC,IAAAA,CAAAA,GAAQwB,KAAAA,CAAMU,MAAM,GAAA,CAAA;AAE1D,IAAA,QAAQI,IAAAA;MACJ,KAAK,MAAA;AACD,QAAA,IAAI,CAACC,QAAAA,EAAU;AACX,UAAA,MAAM,IAAId,MAAM,CAAA,4CAAA,CAA8C,CAAA;AAClE,QAAA;AACA,QAAA;MACJ,KAAK,SAAA;AACD,QAAA,IAAI,CAACzB,IAAAA,EAAM;AACP,UAAA,MAAM,IAAIyB,MAAM,CAAA,0CAAA,CAA4C,CAAA;AAChE,QAAA;AACA,QAAA;AACJ,MAAA;AACI,QAAA,MAAM,IAAIA,KAAAA,CAAM,CAAA,qBAAA,EAAwBa,IAAAA,CAAAA,CAAM,CAAA;AACtD;AAEA,IAAA,IAAI,CAACE,aAAAA,EAAe;AAChB,MAAA,MAAM,IAAIf,MAAM,CAAA,0BAAA,CAA4B,CAAA;AAChD,IAAA;AAEA,IAAA,OAAO;AACAhB,MAAAA,GAAAA,OAAAA;AACHgC,MAAAA,iCAAAA,CAAoBC,KAAAA,CAAM;AAAEJ,QAAAA,IAAAA;AAAMC,QAAAA,QAAAA;AAAUC,QAAAA,aAAAA;AAAexC,QAAAA;OAAK;;AAExE,EAAA,CAAA,EACA,EAAE,CAAA,CAELuB,MAAAA,CACG,4CACA,2CAAA,CAAA;AAIR,EAAA,KAAA,MAAWT,QAAQnB,KAAAA,EAAO;AACtB,IAAA,MAAMgD,cAAAA,GAAiBC,mCAAAA,CAAsBnD,OAAAA,EAASqB,IAAAA,CAAKd,IAAI,CAAA;AAC/D,IAAA,MAAM6C,iBAAAA,GAAoBC,sCAAAA,CAAyBrD,OAAAA,EAASqB,IAAAA,CAAKd,IAAI,CAAA;AAErEe,IAAAA,OAAAA,CAAQQ,MAAAA,CACJ,CAAA,EAAA,EAAKT,IAAAA,CAAKd,IAAI,sBACd,CAAA,QAAA,EAAWc,IAAAA,CAAKd,IAAI,CAAA,mBAAA,EAAsB2C,cAAAA,CAAAA,aAAAA,EAA8BE,iBAAAA,CAAkBR,IAAAA,CAAK,IAAA,CAAA,CAAA,CAAA,CAAQ,CAAA;AAE/G,EAAA;AAGAtB,EAAAA,OAAAA,CAAQQ,MAAAA,CAAO,mBAAmB,qDAAA,CAAA;AAGlCR,EAAAA,OAAAA,CACKZ,OAAAA,CAAQ,qBAAA,CAAA,CACRc,WAAAA,CAAY,0DAAA,CAAA,CACZ8B,MAAAA,CAAO,CAACC,QAAAA,KAAqBC,mCAAAA,CAAuBxD,OAAAA,EAASuD,QAAAA,CAAAA,CAAAA;AAElE,EAAA,KAAA,MAAWlC,QAAQnB,KAAAA,EAAO;AAGtBoB,IAAAA,OAAAA,CACKZ,OAAAA,CAAQW,KAAKd,IAAAA,EAAM;MAAEkD,SAAAA,EAAW;KAAM,CAAA,CACtCjC,YAAY,CAAA,IAAA,EAAOH,IAAAA,CAAKd,IAAI,CAAA,sBAAA,CAAwB,CAAA,CACpDmD,mBAAmB,IAAA,CAAA,CACnBC,oBAAkB,CAClBC,UAAAA,CAAW,KAAA,CAAA,CACXC,QAAAA,CAAS,aAAa,+BAAA,CAAA,CACtBP,MAAAA,CAAO,OAAOQ,IAAAA,KAAAA;AACX,MAAA,MAAMC,gCAAmB/D,OAAAA,EAASqB,IAAAA,CAAKd,MAAMuD,IAAAA,EAAMrD,kBAAAA,CAAmBa,OAAAA,CAAAA,CAAAA;IAC1E,CAAA,CAAA;AACR,EAAA;AAGArB,EAAAA,qBAAAA,GAAwBqB,SAASb,kBAAAA,CAAAA;AAEjC,EAAA,OAAOa,OAAAA;AACX,CAAA,EA1KkB,WAAA,CAAA;AA4KX,IAAM0C,MAAAA,mBAASjE,oBAAA,CAAA,OAClBkE,MAAAA,EACAhE,qBAAAA,KAAAA;AAEA,EAAA,IAAI;AACA,IAAA,MAAMH,SAAAA,CAAoBmE,MAAAA,EAAQhE,qBAAAA,CAAAA,CAAuBiE,UAAAA,EAAU;AACvE,EAAA,CAAA,CAAA,OAASC,KAAAA,EAAO;AACZC,IAAAA,OAAAA,CAAQD,KAAAA,CAAM,mCAA8BA,KAAAA,CAAAA;AAC5CpD,IAAAA,wBAAAA,CAAQc,KAAK,CAAA,CAAA;AACjB,EAAA;AACJ,CAAA,EAVsB,QAAA","file":"5BNKRW3P.cjs","sourcesContent":["import { Command } from 'commander';\nimport { camelCase } from 'es-toolkit';\nimport fs from 'node:fs';\nimport path from 'node:path';\nimport process from 'node:process';\n\nimport type { EnvironmentVariable, VolumeMapping } from './config';\nimport { volumeMappingSchema } from './config';\nimport type { ChainContext } from './context';\nimport type { ToolCommandExecutionOptions } from './core';\nimport { executeToolCommand } from './core';\nimport { displayToolVersionInfo, displayVersionCombinations } from './display';\nimport { getToolDefaultVersion, getToolSupportedVersions } from './utils/finder';\n\ninterface GlobalOptions {\n    cwd?: string;\n    volume: VolumeMapping[];\n    env: EnvironmentVariable[];\n    script?: string;\n    customEntrypoint?: string;\n}\n\ntype RegisterExtraCommands = (\n    program: Command,\n    parseGlobalOptions: (command: Command) => ToolCommandExecutionOptions,\n) => void;\n\nconst createCli = <TImageId extends string>(\n    context: ChainContext<TImageId>,\n    registerExtraCommands?: RegisterExtraCommands,\n): Command => {\n    const { tools } = context;\n    const toolVersionOptions = Object.fromEntries(\n        tools.map(({ name }) => [`${camelCase(name)}Version`, name]),\n    );\n\n    const parseGlobalOptions = (command: Command): ToolCommandExecutionOptions => {\n        const { cwd, volume, ...options } = command.opts<GlobalOptions>();\n\n        return {\n            ...options,\n            cwd: cwd ?? process.cwd(),\n            volumes: volume,\n            versions: Object.fromEntries(\n                Object.entries(options)\n                    .map(([name, version]) => [toolVersionOptions[name], version])\n                    .filter(([tool]) => tool),\n            ),\n        };\n    };\n\n    const program = new Command();\n\n    program\n        .name('lz-tool')\n        .description(\n            '🚀 LayerZero VM tooling with intelligent version management\\n' +\n                '\\n' +\n                'Usage pattern:\\n' +\n                '  lz-tool [global-options] <tool> [tool-args...]\\n' +\n                '\\n' +\n                'Examples:\\n' +\n                '  lz-tool -e bash sui --help\\n' +\n                '  lz-tool --sui-version 1.38.0 sui client\\n' +\n                '\\n' +\n                'Note: All lz-tool options must appear BEFORE the tool name.',\n        )\n        .version('1.0.0')\n        .enablePositionalOptions(); // Required for passThroughOptions to work\n\n    // Check for --list-versions before parsing to avoid help display\n    if (process.argv.includes('--list-versions')) {\n        displayVersionCombinations(context);\n        process.exit(0);\n    }\n\n    // Add global options.\n    program\n        .option('-c, --cwd <path>', 'Current working directory', (input: string) => {\n            if (typeof input !== 'string') {\n                throw new Error('cwd flag must be a string');\n            }\n\n            if (!path.isAbsolute(input)) {\n                throw new Error('cwd must be an absolute path if provided');\n            }\n\n            if (!fs.existsSync(input)) {\n                throw new Error('cwd does not exist');\n            }\n\n            if (!fs.statSync(input).isDirectory()) {\n                throw new Error('cwd must be a directory');\n            }\n\n            return input;\n        })\n        .option(\n            '-e, --custom-entrypoint <entrypoint>',\n            'Override the default Docker entrypoint for the tool',\n        )\n        .option(\n            '--script <script>',\n            'Execute a custom script using bash -c in the Docker container (e.g., --script \"npm install && npm test\")',\n        )\n        .option(\n            '--env <name=value>',\n            'Set environment variables for Docker container (e.g., --env NODE_ENV=production)',\n            (input: string, variables: EnvironmentVariable[]) => {\n                const [name, ...valueParts] = input.split('=');\n\n                if (!name || !valueParts.length) {\n                    throw new Error(\n                        `Invalid environment variable format: ${input}. Use --env NAME=VALUE`,\n                    );\n                }\n\n                return [...variables, { name, value: valueParts.join('=') }];\n            },\n            [],\n        )\n        .option(\n            '-v, --volume <type:hostPath:containerPath[:name]>',\n            'Volume mappings in the format type:hostPath:containerPath[:name] (e.g., host:/host/path:/container/path or isolate::/container/path:volumeName)',\n            (input: string, volumes: VolumeMapping[]) => {\n                const [type, hostPath, containerPath, name] = input.split(':');\n\n                switch (type) {\n                    case 'host':\n                        if (!hostPath) {\n                            throw new Error(`Host path is required for volume type 'host'`);\n                        }\n                        break;\n                    case 'isolate':\n                        if (!name) {\n                            throw new Error(`Name is required for volume type 'isolate'`);\n                        }\n                        break;\n                    default:\n                        throw new Error(`Invalid volume type: ${type}`);\n                }\n\n                if (!containerPath) {\n                    throw new Error(`Container path is required`);\n                }\n\n                return [\n                    ...volumes,\n                    volumeMappingSchema.parse({ type, hostPath, containerPath, name }),\n                ];\n            },\n            [],\n        )\n        .option(\n            '-p, --publish <host_port:container_port>',\n            \"Publish a container's port(s) to the host\",\n        );\n\n    // Add version options for each tool dynamically\n    for (const tool of tools) {\n        const defaultVersion = getToolDefaultVersion(context, tool.name);\n        const supportedVersions = getToolSupportedVersions(context, tool.name);\n\n        program.option(\n            `--${tool.name}-version <version>`,\n            `Specify ${tool.name} version (default: ${defaultVersion}, supported: ${supportedVersions.join(', ')})`,\n        );\n    }\n\n    // Add utility options\n    program.option('--list-versions', 'Display all supported version combinations and exit');\n\n    // Add version info command\n    program\n        .command('version-info <tool>')\n        .description('Display detailed version information for a specific tool')\n        .action((toolName: string) => displayToolVersionInfo(context, toolName));\n\n    for (const tool of tools) {\n        // Don't add any options to the subcommand level.\n        // All lz-tool options must be specified before the subcommand.\n        program\n            .command(tool.name, { isDefault: false })\n            .description(`Run ${tool.name} with version checking`)\n            .passThroughOptions(true) // Pass through all options after the subcommand\n            .allowUnknownOption()\n            .helpOption(false) // Disable automatic help option to pass --help to the tool\n            .argument('[args...]', 'Arguments to pass to the tool')\n            .action(async (args: string[]) => {\n                await executeToolCommand(context, tool.name, args, parseGlobalOptions(program));\n            });\n    }\n\n    // Allow external registration of extra commands\n    registerExtraCommands?.(program, parseGlobalOptions);\n\n    return program;\n};\n\nexport const runCli = async <TImageId extends string>(\n    config: ChainContext<TImageId>,\n    registerExtraCommands?: RegisterExtraCommands,\n): Promise<void> => {\n    try {\n        await createCli<TImageId>(config, registerExtraCommands).parseAsync();\n    } catch (error) {\n        console.error('❌ VM tool execution failed', error);\n        process.exit(1);\n    }\n};\n"]}

package/dist/I4DRCDSO.cjs.map

@@ -1 +0,0 @@
-{"version":3,"sources":["../src/core/tool-executor.ts"],"names":["init_cjs_shims","getHostUserIds","__name","userInfo","os","uid","gid","undefined","$","verbose","stdio","process","stderr","mergeVolumes","defaultVolumes","userVolumes","uniqBy","volume","containerPath","resolveVolumePaths","volumes","workspaceRoot","map","type","hostPath","path","resolve","replace","homedir","ensureDockerImage","imageUri","output","nothrow","exitCode","console","info","error","Error","stringifyError","join","executeToolCommand","context","toolName","args","cwd","customEntrypoint","entrypoint","env","customEnvVars","script","publish","versions","tool","findToolByName","preExecute","length","name","overrides","filter","uv","some","dv","resolvedVersion","resolveTypeVersions","getSecondaryVersion","secondaryVersion","satisfies","warn","getImageUriForTool","findWorkspaceRoot","relativePath","relative","trim","defaultEnv","hasDockerSocketMount","v","dockerSocketEnv","value","envArgs","flatMap","hostUserIds","userIdEnvArgs","finalArgs","dockerArgs","privileged","getVolumeName","lockMany","locked","label","time","result","timeEnd"],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAAAA,4BAAA,EAAA;AAqBA,IAAMC,iCAAiBC,oBAAA,CAAA,MAAA;AAEnB,EAAA,MAAMC,QAAAA,GAAWC,oBAAGD,QAAAA,EAAQ;AAC5B,EAAA,IAAIA,QAAAA,CAASE,GAAAA,KAAQ,EAAA,IAAMF,QAAAA,CAASG,QAAQ,EAAA,EAAI;AAC5C,IAAA,OAAOC,MAAAA;AACX,EAAA;AACA,EAAA,OAAO;AAAEF,IAAAA,GAAAA,EAAKF,QAAAA,CAASE,GAAAA;AAAKC,IAAAA,GAAAA,EAAKH,QAAAA,CAASG;AAAI,GAAA;AAClD,CAAA,EAPuB,gBAAA,CAAA;AAUvBE,IAAAA,CAAEC,OAAAA,GAAU,IAAA;AACZD,IAAAA,CAAEE,KAAAA,GAAQ;AAAC,EAAA,SAAA;AAAW,EAAA,MAAA;EAAQC,wBAAAA,CAAQC;;AAMtC,IAAMC,YAAAA,mBAAeX,oBAAA,CAAA,CACjBY,cAAAA,EACAC,WAAAA,KACkBC,gBAAAA,CAAO;AAAID,EAAAA,GAAAA,WAAAA;AAAgBD,EAAAA,GAAAA;GAAiB,CAACG,MAAAA,KAAWA,MAAAA,CAAOC,aAAa,CAAA,EAH7E,cAAA,CAAA;AAWrB,IAAMC,kBAAAA,mBAAqBjB,oBAAA,CAAA,CAACkB,OAAAA,EAA0BC,aAAAA,KAClDD,OAAAA,CAAQE,IAAI,CAACL,MAAAA,KACTA,MAAAA,CAAOM,IAAAA,KAAS,MAAA,GACV;EACI,GAAGN,MAAAA;EACHO,QAAAA,EAAUC,qBAAAA,CAAKC,OAAAA,CACXL,aAAAA,EACAJ,MAAAA,CAAOO,QAAAA,CAASG,QAAQ,IAAA,EAAMvB,mBAAAA,CAAGwB,OAAAA,EAAO,CAAA;AAEhD,CAAA,GACAX,MAAAA,CAAAA,EAVa,oBAAA,CAAA;AAa3B,IAAMY,iBAAAA,+CAA2BC,QAAAA,KAAAA;AAC7B,EAAA,IAAIC,MAAAA;AAEJ,EAAA,IAAI;AAOAA,IAAAA,MAAAA,GAAS,MAAMvB,IAAAA,CAAAA,sCAAAA,EAA0CsB,QAAAA,CAAAA,CAAAA,CAAWE,OAAAA,EAAO;AAC3E,IAAA,IAAI,CAACD,OAAOE,QAAAA,EAAU;AAClBC,MAAAA,OAAAA,CAAQC,IAAAA,CAAK,CAAA,kCAAA,EAAgCL,QAAAA,CAAAA,CAAU,CAAA;AACvD,MAAA;AACJ,IAAA;AAEAI,IAAAA,OAAAA,CAAQC,IAAAA,CAAK,wCAAiCL,QAAAA,CAAAA;AAC9CC,IAAAA,MAAAA,GAAS,MAAMvB,IAAAA,CAAAA,YAAAA,EAAgBsB,QAAAA,CAAAA,CAAAA,CAAWE,OAAAA,EAAO;AACrD,EAAA,CAAA,CAAA,OAASI,KAAAA,EAAgB;AACrB,IAAA,MAAM,IAAIC,MAAM,CAAA,4BAAA,EAA+BP,QAAAA,KAAaQ,2BAAAA,CAAeF,KAAAA,CAAAA,CAAAA,CAAQ,CAAA;AACvF,EAAA;AAEA,EAAA,IAAIL,OAAOE,QAAAA,EAAU;AACjB,IAAA,MAAM,IAAII,KAAAA,CACN;AACI,MAAA,6BAAA;AACA,MAAA,CAAA,WAAA,EAAcP,QAAAA,CAAAA,cAAAA,CAAAA;AACd,MAAA;AACFS,KAAAA,CAAAA,IAAAA,CAAK,IAAA,CAAA,CAAA;AAEf,EAAA;AAEAL,EAAAA,OAAAA,CAAQC,IAAAA,CAAK,CAAA,4BAAA,EAA0BL,QAAAA,CAAAA,CAAU,CAAA;AACrD,CAAA,EAjC0B,mBAAA,CAAA;AAiD1B,eAAsBU,mBAClBC,OAAAA,EACAC,QAAAA,EACAC,IAAAA,EACA,EACIC,KACAxB,OAAAA,EAASL,WAAAA,EACT8B,gBAAAA,EAAkBC,UAAAA,EAClBC,KAAKC,aAAAA,EACLC,MAAAA,EACAC,SACAC,QAAAA,GAAW,IAAE,EACa;AAE9B,EAAA,MAAMC,IAAAA,GAAOC,4BAAAA,CAAeZ,OAAAA,EAASC,QAAAA,CAAAA;AAGrC,EAAA,IAAIU,KAAKE,UAAAA,EAAY;AACjB,IAAA,MAAMF,IAAAA,CAAKE,WAAWb,OAAAA,EAAS;AAC3BG,MAAAA,GAAAA;AACAD,MAAAA,IAAAA;MACAvB,OAAAA,EAASL,WAAAA;MACTgC,GAAAA,EAAKC,aAAAA;AACLC,MAAAA,MAAAA;AACAC,MAAAA,OAAAA;AACAC,MAAAA;KACJ,CAAA;AACJ,EAAA;AAGA,EAAA,MAAMrC,cAAAA,GAAiBsC,IAAAA,CAAKtC,cAAAA,IAAkB,EAAA;AAC9C,EAAA,MAAMM,OAAAA,GAAUP,YAAAA,CAAaC,cAAAA,EAAgBC,WAAAA,CAAAA;AAE7C,EAAA,IAAID,cAAAA,CAAeyC,SAAS,CAAA,EAAG;AAC3BrB,IAAAA,OAAAA,CAAQC,KAAK,CAAA,gBAAA,EAAYrB,cAAAA,CAAeyC,MAAM,CAAA,6BAAA,EAAgCH,IAAAA,CAAKI,IAAI,CAAA,CAAE,CAAA;AACzF,IAAA,IAAIzC,WAAAA,CAAYwC,SAAS,CAAA,EAAG;AACxB,MAAA,MAAME,SAAAA,GAAY1C,WAAAA,CAAY2C,MAAAA,CAAO,CAACC,EAAAA,KAClC7C,cAAAA,CAAe8C,IAAAA,CAAK,CAACC,EAAAA,KAAOA,EAAAA,CAAG3C,aAAAA,KAAkByC,EAAAA,CAAGzC,aAAa,CAAA,CAAA;AAErE,MAAA,IAAIuC,SAAAA,CAAUF,SAAS,CAAA,EAAG;AACtBrB,QAAAA,OAAAA,CAAQC,IAAAA,CAAK,CAAA,gCAAA,EAA4BsB,SAAAA,CAAUF,MAAM,CAAA,kBAAA,CAAoB,CAAA;AACjF,MAAA;AACJ,IAAA;AACJ,EAAA;AAGA,EAAA,MAAMO,kBAAkBC,gCAAAA,CAAoBtB,OAAAA,EAASU,QAAAA,CAAAA,CAAUC,KAAKI,IAAI,CAAA;AAExE,EAAA,IAAI,CAACM,eAAAA,EAAiB;AAClB,IAAA,MAAM,IAAIzB,KAAAA,CAAM,CAAA,6BAAA,EAAgCe,IAAAA,CAAKI,IAAI,CAAA,CAAE,CAAA;AAC/D,EAAA;AAEAtB,EAAAA,OAAAA,CAAQC,KAAK,CAAA,UAAA,EAAMiB,IAAAA,CAAKI,IAAI,CAAA,UAAA,EAAaM,eAAAA,CAAAA,CAAiB,CAAA;AAG1D,EAAA,IAAIV,KAAKY,mBAAAA,EAAqB;AAC1B,IAAA,IAAI;AACA,MAAA,MAAMC,gBAAAA,GAAmB,MAAMb,IAAAA,CAAKY,mBAAAA,CAAoB;AAAEpB,QAAAA;OAAI,CAAA;AAE9D,MAAA,IAAI,CAAQsB,iBAAAA,CAAAA,SAAAA,CAAUD,gBAAAA,EAAkBH,eAAAA,CAAAA,EAAkB;AACtD5B,QAAAA,OAAAA,CAAQiC,IAAAA,CACJ,CAAA,sCAAA,EAAyCF,gBAAAA,CAAAA,iCAAAA,EAAoDH,eAAAA,CAAAA,CAAAA,CAAkB,CAAA;AAEvH,MAAA;AACJ,IAAA,CAAA,CAAA,OAAS1B,KAAAA,EAAO;AAEZF,MAAAA,OAAAA,CAAQiC,IAAAA,CAAK,uCAAA,EAAyC7B,2BAAAA,CAAeF,KAAAA,CAAAA,CAAAA;AACzE,IAAA;AACJ,EAAA;AAGA,EAAA,MAAMN,WAAW,MAAMsC,gCAAAA,CAAmB3B,OAAAA,EAASW,IAAAA,CAAKI,MAAMM,eAAAA,CAAAA;AAC9D,EAAA,MAAMzC,aAAAA,GAAgB,MAAMgD,+BAAAA,CAAkBzB,GAAAA,CAAAA;AAC9C,EAAA,MAAM0B,YAAAA,GAAe7C,qBAAAA,CAAK8C,QAAAA,CAASlD,aAAAA,EAAeuB,GAAAA,CAAAA;AAElD,EAAA,MAAMf,kBAAkBC,QAAAA,CAAAA;AAExB,EAAA,IAAIgB,UAAAA,EAAY0B,MAAAA,EAAQ;AACpBtC,IAAAA,OAAAA,CAAQC,IAAAA,CAAK,CAAA,mCAAA,EAA+BW,UAAAA,CAAAA,CAAY,CAAA;AAC5D,EAAA;AAGA,EAAA,MAAM2B,UAAAA,GAAarB,IAAAA,CAAKqB,UAAAA,IAAc,EAAA;AAItC,EAAA,MAAMC,oBAAAA,GAAuBtD,OAAAA,CAAQwC,IAAAA,CACjC,CAACe,CAAAA,KAAMA,EAAEpD,IAAAA,KAAS,MAAA,IAAUoD,CAAAA,CAAEzD,aAAAA,KAAkB,sBAAA,CAAA;AAEpD,EAAA,MAAM0D,kBAAyCF,oBAAAA,GACzC;AACI,IAAA;MAAElB,IAAAA,EAAM,UAAA;MAAYqB,KAAAA,EAAOjC;AAAI,KAAA;AAC/B,IAAA;MAAEY,IAAAA,EAAM,qBAAA;MAAuBqB,KAAAA,EAAOxD;AAAc;MAExD,EAAA;AAEN,EAAA,MAAMyD,UAAU9D,gBAAAA,CACZ;AAAIgC,IAAAA,GAAAA,aAAAA;AAAkB4B,IAAAA,GAAAA,eAAAA;AAAoBH,IAAAA,GAAAA;KAC1C,CAAC,EAAEjB,IAAAA,EAAI,KAAOA,IAAAA,CAAAA,CAChBuB,QAAQ,CAAC,EAAEvB,IAAAA,EAAMqB,KAAAA,EAAK,KAAO;AAAC,IAAA,IAAA;IAAM,CAAA,EAAGrB,IAAAA,IAAQqB,KAAAA,CAAAA;AAAQ,GAAA,CAAA;AAKzD,EAAA,MAAMG,cAAc/E,cAAAA,EAAAA;AACpB,EAAA,MAAMgF,gBAAgBD,WAAAA,GAChB;AAAC,IAAA,IAAA;AAAM,IAAA,CAAA,UAAA,EAAaA,YAAY3E,GAAG,CAAA,CAAA;AAAI,IAAA,IAAA;AAAM,IAAA,CAAA,UAAA,EAAa2E,YAAY1E,GAAG,CAAA;MACzE,EAAA;AAEN4B,EAAAA,OAAAA,CAAQC,KAAK,CAAA,uCAAA,EAAmC6C,WAAAA,EAAa3E,GAAAA,CAAAA,CAAAA,EAAO2E,WAAAA,EAAa1E,GAAAA,CAAAA,CAAK,CAAA;AAEtF,EAAA,IAAImE,UAAAA,CAAWlB,SAAS,CAAA,EAAG;AACvBrB,IAAAA,OAAAA,CAAQC,KACJ,CAAA,gBAAA,EAAYsC,UAAAA,CAAWlB,MAAM,CAAA,qCAAA,EAAwCH,IAAAA,CAAKI,IAAI,CAAA,CAAE,CAAA;AAExF,EAAA;AACA,EAAA,IAAIR,aAAAA,CAAcO,SAAS,CAAA,EAAG;AAC1BrB,IAAAA,OAAAA,CAAQC,IAAAA,CAAK,CAAA,gBAAA,EAAYa,aAAAA,CAAcO,MAAM,CAAA,+BAAA,CAAiC,CAAA;AAClF,EAAA;AAGA,EAAA,IAAI2B,SAAAA;AACJ,EAAA,IAAIjC,MAAAA,IAAUA,MAAAA,CAAOuB,IAAAA,EAAI,KAAO,EAAA,EAAI;AAChCtC,IAAAA,OAAAA,CAAQC,IAAAA,CAAK,CAAA,mCAAA,EAA+Bc,MAAAA,CAAAA,CAAQ,CAAA;AACpDiC,IAAAA,SAAAA,GAAY;AAAC,MAAA,MAAA;AAAQ,MAAA,IAAA;AAAMjC,MAAAA;;EAC/B,CAAA,MAAO;AACHiC,IAAAA,SAAAA,GAAYpC,eAAevC,MAAAA,GAAY;MAAC6C,IAAAA,CAAKI,IAAAA;AAASb,MAAAA,GAAAA;AAAQA,KAAAA,GAAAA,IAAAA;AAClE,EAAA;AAGA,EAAA,MAAMwC,UAAAA,GAAa;AACf,IAAA,KAAA;AACI/B,IAAAA,GAAAA,IAAAA,CAAKgC,UAAAA,GAAa;AAAC,MAAA;QAAkB,EAAA;AACzC,IAAA,MAAA;AACGN,IAAAA,GAAAA,OAAAA;AACAG,IAAAA,GAAAA,aAAAA;AACH,IAAA,IAAA;AACA,IAAA,CAAA,EAAG5D,aAAAA,CAAAA,WAAAA,CAAAA;AACH,IAAA,IAAA;AACA,IAAA,CAAA,WAAA,EAAciD,YAAAA,CAAAA,CAAAA;OACVpB,OAAAA,GAAU;AAAC,MAAA,IAAA;AAAMA,MAAAA,OAAAA,CAAQsB,IAAAA;QAAU,EAAA;AACpCrD,IAAAA,GAAAA,kBAAAA,CAAmBC,OAAAA,EAASC,aAAAA,CAAAA,CAAe0D,OAAAA,CAAQ,CAAC9D,MAAAA,KAAW;AAC9D,MAAA,IAAA;AACAoE,MAAAA,2BAAAA,CAAcpE,MAAAA;AACjB,KAAA,CAAA;OACG6B,UAAAA,GAAa;AAAC,MAAA,cAAA;AAAgBA,MAAAA;QAAc,EAAA;AAChDhB,IAAAA,QAAAA;AACGoD,IAAAA,GAAAA;;AAGP,EAAA,MAAMnD,MAAAA,GAAS,MAAMuD,qBAAAA,CACjBlE,OAAAA,CAAQ2D,OAAAA,CAAQ,CAAC9D,MAAAA,KACbA,MAAAA,CAAOM,IAAAA,KAAS,SAAA,IAAaN,MAAAA,CAAOsE,MAAAA,GAAS;IAACtE,MAAAA,CAAOuC;MAAQ,EAAE,GAEnE,YAAA;AACI,IAAA,MAAMgC,KAAAA,GAAQ,CAAA,aAAA,EAAMN,SAAAA,CAAU3C,IAAAA,CAAK,GAAA,CAAA,CAAA,CAAA;AACnCL,IAAAA,OAAAA,CAAQuD,KAAKD,KAAAA,CAAAA;AACb,IAAA,MAAME,MAAAA,GAAS,MAAMlF,IAAAA,CAAAA,OAAAA,EAAW2E,UAAAA,GAAanD,OAAAA,EAAO;AACpDE,IAAAA,OAAAA,CAAQyD,QAAQH,KAAAA,CAAAA;AAEhB,IAAA,OAAOE,MAAAA;EACX,CAAA,CAAA;AAGJ,EAAA,IAAI3D,OAAOE,QAAAA,EAAU;AACjB,IAAA,MAAM,IAAII,KAAAA,CAAM,CAAA,2CAAA,EAA8CN,MAAAA,CAAOE,QAAQ,CAAA,CAAA,CAAG,CAAA;AACpF,EAAA;AAEA,EAAA,OAAOF,MAAAA;AACX;AAzKsBS,oBAAAA,CAAAA,kBAAAA,EAAAA,oBAAAA,CAAAA","file":"I4DRCDSO.cjs","sourcesContent":["import { uniqBy } from 'es-toolkit';\nimport os from 'node:os';\nimport path from 'node:path';\nimport process from 'node:process';\nimport * as semver from 'semver';\nimport { $, type ProcessOutput } from 'zx';\n\nimport type { EnvironmentVariable, VolumeMapping } from '../config';\nimport type { ChainContext } from '../context';\nimport { findWorkspaceRoot } from '../utils';\nimport { getImageUriForTool, getVolumeName } from '../utils/docker';\nimport { stringifyError } from '../utils/error';\nimport { findToolByName } from '../utils/finder';\nimport { lockMany } from './lock';\nimport { resolveTypeVersions } from './version-resolver';\n\n/**\n * Get the current user's UID and GID for Docker container user matching.\n * This prevents permission issues when containers write to bind-mounted directories.\n * On Windows, returns undefined as UID/GID matching is not needed.\n */\nconst getHostUserIds = (): { uid: number; gid: number } | undefined => {\n    // os.userInfo() returns uid/gid on POSIX systems, -1 on Windows\n    const userInfo = os.userInfo();\n    if (userInfo.uid === -1 || userInfo.gid === -1) {\n        return undefined;\n    }\n    return { uid: userInfo.uid, gid: userInfo.gid };\n};\n\n// Configure zx to inherit stdio by default (moved from original setup)\n$.verbose = true;\n$.stdio = ['inherit', 'pipe', process.stderr];\n\n/**\n * Merge default volumes with user-specified volumes\n * User volumes take precedence when containerPath conflicts\n */\nconst mergeVolumes = (\n    defaultVolumes: readonly VolumeMapping[],\n    userVolumes: readonly VolumeMapping[],\n): VolumeMapping[] => uniqBy([...userVolumes, ...defaultVolumes], (volume) => volume.containerPath);\n\n/**\n * Resolve host paths in volumes to absolute paths\n * - Paths starting with ~ are resolved to home directory\n * - Relative paths (starting with . or no prefix) are resolved to workspace root\n * - Absolute paths are left unchanged\n */\nconst resolveVolumePaths = (volumes: VolumeMapping[], workspaceRoot: string): VolumeMapping[] =>\n    volumes.map((volume) =>\n        volume.type === 'host'\n            ? {\n                  ...volume,\n                  hostPath: path.resolve(\n                      workspaceRoot,\n                      volume.hostPath.replace(/^~/, os.homedir()),\n                  ),\n              }\n            : volume,\n    );\n\nconst ensureDockerImage = async (imageUri: string): Promise<void> => {\n    let output: ProcessOutput;\n\n    try {\n        // Check local images first.\n        //\n        // NOTE: `docker image ls <ref>` prints repository/tag in separate columns, so\n        // `stdout.includes(<full-ref>)` is not reliable. Use `inspect` instead: exitCode=0\n        // means the image exists locally.\n        // Keep output minimal to avoid dumping full inspect JSON into CI logs.\n        output = await $`docker image inspect --format {{.Id}} ${imageUri}`.nothrow();\n        if (!output.exitCode) {\n            console.info(`✅ Using cached Docker image: ${imageUri}`);\n            return;\n        }\n\n        console.info('📥 Pulling Docker image from:', imageUri);\n        output = await $`docker pull ${imageUri}`.nothrow();\n    } catch (error: unknown) {\n        throw new Error(`Failed to pull Docker image ${imageUri}: ${stringifyError(error)}`);\n    }\n\n    if (output.exitCode) {\n        throw new Error(\n            [\n                'Docker image not available:',\n                `  - Image: ${imageUri} (pull failed)`,\n                '  - Check if the image tag exists in image registry.',\n            ].join('\\n'),\n        );\n    }\n\n    console.info(`✅ Successfully pulled: ${imageUri}`);\n};\n\nexport interface ToolCommandExecutionOptions {\n    cwd: string;\n    volumes: readonly VolumeMapping[];\n    customEntrypoint?: string;\n    env: EnvironmentVariable[];\n    args?: string[];\n    script?: string;\n    publish?: string;\n    versions?: Record<string, string>;\n}\n\n/**\n * Enhanced tool command execution using the new version compatibility matrix system\n */\nexport async function executeToolCommand<TImageId extends string>(\n    context: ChainContext<TImageId>,\n    toolName: string,\n    args: string[],\n    {\n        cwd,\n        volumes: userVolumes,\n        customEntrypoint: entrypoint,\n        env: customEnvVars,\n        script,\n        publish,\n        versions = {},\n    }: ToolCommandExecutionOptions,\n): Promise<ProcessOutput> {\n    const tool = findToolByName(context, toolName);\n\n    // Run pre-execution hook if defined (e.g., toolchain sync)\n    if (tool.preExecute) {\n        await tool.preExecute(context, {\n            cwd,\n            args,\n            volumes: userVolumes,\n            env: customEnvVars,\n            script,\n            publish,\n            versions,\n        });\n    }\n\n    // Merge default volumes with user-specified volumes\n    const defaultVolumes = tool.defaultVolumes ?? [];\n    const volumes = mergeVolumes(defaultVolumes, userVolumes);\n\n    if (defaultVolumes.length > 0) {\n        console.info(`📦 Using ${defaultVolumes.length} default cache volume(s) for ${tool.name}`);\n        if (userVolumes.length > 0) {\n            const overrides = userVolumes.filter((uv) =>\n                defaultVolumes.some((dv) => dv.containerPath === uv.containerPath),\n            );\n            if (overrides.length > 0) {\n                console.info(`🔧 User volumes override ${overrides.length} default volume(s)`);\n            }\n        }\n    }\n\n    // Get the resolved version for the current tool.\n    const resolvedVersion = resolveTypeVersions(context, versions)[tool.name];\n\n    if (!resolvedVersion) {\n        throw new Error(`No version resolved for tool ${tool.name}`);\n    }\n\n    console.info(`🔧 ${tool.name} version: ${resolvedVersion}`);\n\n    // Check secondary version validation if available\n    if (tool.getSecondaryVersion) {\n        try {\n            const secondaryVersion = await tool.getSecondaryVersion({ cwd });\n\n            if (!semver.satisfies(secondaryVersion, resolvedVersion)) {\n                console.warn(\n                    `Warning: Local configuration version (${secondaryVersion}) differs from resolved version (${resolvedVersion})`,\n                );\n            }\n        } catch (error) {\n            // Secondary version check failed, but continue with resolved version\n            console.warn('Could not validate secondary version:', stringifyError(error));\n        }\n    }\n\n    // Use Docker image with merged volumes\n    const imageUri = await getImageUriForTool(context, tool.name, resolvedVersion);\n    const workspaceRoot = await findWorkspaceRoot(cwd);\n    const relativePath = path.relative(workspaceRoot, cwd);\n\n    await ensureDockerImage(imageUri);\n\n    if (entrypoint?.trim()) {\n        console.info(`🔧 Using custom entrypoint: ${entrypoint}`);\n    }\n\n    // Merge default env vars with custom env vars (custom takes precedence)\n    const defaultEnv = tool.defaultEnv ?? [];\n\n    // Check if Docker socket is mounted (for tools that spawn Docker containers like anchor --verifiable)\n    // If so, inject HOST_CWD and HOST_WORKSPACE_ROOT so the inner container knows the host paths\n    const hasDockerSocketMount = volumes.some(\n        (v) => v.type === 'host' && v.containerPath === '/var/run/docker.sock',\n    );\n    const dockerSocketEnv: EnvironmentVariable[] = hasDockerSocketMount\n        ? [\n              { name: 'HOST_CWD', value: cwd },\n              { name: 'HOST_WORKSPACE_ROOT', value: workspaceRoot },\n          ]\n        : [];\n\n    const envArgs = uniqBy(\n        [...customEnvVars, ...dockerSocketEnv, ...defaultEnv],\n        ({ name }) => name,\n    ).flatMap(({ name, value }) => ['-e', `${name}=${value}`]);\n\n    // Add host user UID/GID for permission matching on Linux/macOS\n    // This prevents artifacts created in containers from having root ownership\n    // Currently only used for stellar which has an entrypoint that handles UID/GID\n    const hostUserIds = getHostUserIds();\n    const userIdEnvArgs = hostUserIds\n        ? ['-e', `LOCAL_UID=${hostUserIds.uid}`, '-e', `LOCAL_GID=${hostUserIds.gid}`]\n        : [];\n\n    console.info(`👤 Running container as UID:GID ${hostUserIds?.uid}:${hostUserIds?.gid}`);\n\n    if (defaultEnv.length > 0) {\n        console.info(\n            `🌍 Using ${defaultEnv.length} default environment variable(s) for ${tool.name}`,\n        );\n    }\n    if (customEnvVars.length > 0) {\n        console.info(`🌍 Using ${customEnvVars.length} custom environment variable(s)`);\n    }\n\n    // Handle custom script execution\n    let finalArgs: string[];\n    if (script && script.trim() !== '') {\n        console.info(`📜 Executing custom script: ${script}`);\n        finalArgs = ['bash', '-c', script];\n    } else {\n        finalArgs = entrypoint === undefined ? [tool.name, ...args] : args;\n    }\n\n    // Build the Docker command with proper argument separation\n    const dockerArgs = [\n        'run',\n        ...(tool.privileged ? ['--privileged'] : []),\n        '--rm',\n        ...envArgs,\n        ...userIdEnvArgs,\n        '-v',\n        `${workspaceRoot}:/workspace`,\n        '-w',\n        `/workspace/${relativePath}`,\n        ...(publish ? ['-p', publish.trim()] : []),\n        ...resolveVolumePaths(volumes, workspaceRoot).flatMap((volume) => [\n            '-v',\n            getVolumeName(volume),\n        ]),\n        ...(entrypoint ? ['--entrypoint', entrypoint] : []),\n        imageUri,\n        ...finalArgs,\n    ];\n\n    const output = await lockMany(\n        volumes.flatMap((volume) =>\n            volume.type === 'isolate' && volume.locked ? [volume.name] : [],\n        ),\n        async () => {\n            const label = `⏱️ ${finalArgs.join(' ')}`;\n            console.time(label);\n            const result = await $`docker ${dockerArgs}`.nothrow();\n            console.timeEnd(label);\n\n            return result;\n        },\n    );\n\n    if (output.exitCode) {\n        throw new Error(`Failed to run Docker container (exit code: ${output.exitCode})`);\n    }\n\n    return output;\n}\n"]}