@norskvideo/ctl-test-harness 0.1.6 → 0.1.7

package/launch.d.ts

@@ -0,0 +1,14 @@
+/** The `uid:gid` the current process runs as, for docker `--container-user`, or
+ *  undefined where POSIX uids don't exist (e.g. Windows, or Docker Desktop's VM
+ *  which maps bind-mount ownership itself and needs no explicit spec). */
+export declare function runnerContainerUser(): string | undefined;
+/** Default a launch's `containerUser` to the runner's uid:gid so bind-mounted
+ *  writes are user-owned, not root. An explicit containerUser always wins, and a
+ *  platform without POSIX uids is left untouched (returns opts unchanged). The
+ *  intersection parameter lets T absorb the caller's own launch-opts shape
+ *  without constraining it, so any launch options object passes through typed. */
+export declare function withContainerUser<T>(opts: T & {
+    containerUser?: string;
+}): T & {
+    containerUser?: string;
+};

package/launch.js

@@ -0,0 +1,32 @@
+// A launched product instance bind-mounts host dirs into the Studio + media
+// containers, which run as root by default -- so every file the container writes
+// under the working directory lands root-owned on the host. On a CI runner the
+// non-root user then cannot remove them, and the next checkout's `git clean`
+// EACCESes on the leftover tree (worst on a shared runner pool, where an
+// innocent sibling workflow inherits the mess). Launching the container as the
+// runner's own uid:gid keeps those writes user-owned, so cleanup stays clean.
+//
+// This is the prevention half; @norskvideo/ctl-test-harness/daemon's
+// cleanupDaemon is the tolerance half (root-nuke on teardown). Pairing the two
+// is the harness's whole "launch clean, tear down clean" story.
+/** The `uid:gid` the current process runs as, for docker `--container-user`, or
+ *  undefined where POSIX uids don't exist (e.g. Windows, or Docker Desktop's VM
+ *  which maps bind-mount ownership itself and needs no explicit spec). */
+export function runnerContainerUser() {
+    const getuid = process.getuid?.bind(process);
+    const getgid = process.getgid?.bind(process);
+    if (!getuid || !getgid)
+        return undefined;
+    return `${getuid()}:${getgid()}`;
+}
+/** Default a launch's `containerUser` to the runner's uid:gid so bind-mounted
+ *  writes are user-owned, not root. An explicit containerUser always wins, and a
+ *  platform without POSIX uids is left untouched (returns opts unchanged). The
+ *  intersection parameter lets T absorb the caller's own launch-opts shape
+ *  without constraining it, so any launch options object passes through typed. */
+export function withContainerUser(opts) {
+    if (opts.containerUser !== undefined)
+        return opts;
+    const user = runnerContainerUser();
+    return user === undefined ? opts : { ...opts, containerUser: user };
+}

package/package.json

@@ -1,12 +1,16 @@
 {
   "name": "@norskvideo/ctl-test-harness",
-  "version": "0.1.6",
+  "version": "0.1.7",
   "type": "module",
   "exports": {
     "./daemon": {
       "types": "./daemon.d.ts",
       "default": "./daemon.js"
     },
+    "./launch": {
+      "types": "./launch.d.ts",
+      "default": "./launch.js"
+    },
     "./source-pump": {
       "types": "./source-pump.d.ts",
       "default": "./source-pump.js"