@rockclaver/sandcastle 0.7.0

package/dist/chunk-FKX3DRTL.js

@@ -0,0 +1,362 @@
+import { createRequire } from 'node:module';
+import { Effect_exports, resolveUserMounts, processFileMountParents, defaultImageName, registerShutdown, DockerError, formatVolumeMount } from './chunk-VAKEM3U2.js';
+import { createBindMountSandboxProvider } from './chunk-BIWNFKGV.js';
+import { MAX_TAIL_CHARS, BoundedTail } from './chunk-NGBM7T3E.js';
+import { execFile, execFileSync, spawn } from 'child_process';
+import { randomUUID } from 'crypto';
+import { createInterface } from 'readline';
+import { resolve } from 'path';
+
+createRequire(import.meta.url);
+var dockerExec = (args) => Effect_exports.async((resume) => {
+  execFile(
+    "docker",
+    args,
+    { maxBuffer: 10 * 1024 * 1024 },
+    (error, stdout, stderr) => {
+      if (error) {
+        resume(
+          Effect_exports.fail(
+            new DockerError({
+              message: `docker ${args[0]} failed: ${stderr?.toString() || error.message}`
+            })
+          )
+        );
+      } else {
+        resume(Effect_exports.succeed(stdout.toString()));
+      }
+    }
+  );
+});
+var buildImage = (imageName, dockerfileDir, options) => Effect_exports.gen(function* () {
+  const buildArgFlags = Object.entries(options?.buildArgs ?? {}).flatMap(
+    ([k, v]) => ["--build-arg", `${k}=${v}`]
+  );
+  if (options?.dockerfile) {
+    yield* dockerExec([
+      "build",
+      "-t",
+      imageName,
+      ...buildArgFlags,
+      "-f",
+      resolve(options.dockerfile),
+      process.cwd()
+    ]);
+  } else {
+    yield* dockerExec([
+      "build",
+      "-t",
+      imageName,
+      ...buildArgFlags,
+      resolve(dockerfileDir)
+    ]);
+  }
+});
+var startContainer = (containerName, imageName, env, options) => Effect_exports.gen(function* () {
+  const existing = yield* dockerExec([
+    "ps",
+    "-a",
+    "--filter",
+    `name=^${containerName}$`,
+    "--format",
+    "{{.Names}}"
+  ]);
+  if (existing.trim() === containerName) {
+    yield* Effect_exports.fail(
+      new DockerError({
+        message: `Container '${containerName}' already exists. Run cleanup first.`
+      })
+    );
+  }
+  const envFlags = Object.entries(env).flatMap(([k, v]) => [
+    "-e",
+    `${k}=${v}`
+  ]);
+  const selinuxLabel = options?.selinuxLabel ?? "z";
+  const volumeFlags = (options?.volumeMounts ?? []).flatMap((mount) => [
+    "-v",
+    formatVolumeMount(mount, selinuxLabel)
+  ]);
+  const workdirFlags = options?.workdir ? ["-w", options.workdir] : [];
+  const userFlags = options?.user ? ["--user", options.user] : [];
+  const networks = options?.network ? Array.isArray(options.network) ? options.network : [options.network] : [];
+  const networkFlags = networks.flatMap((n) => ["--network", n]);
+  const groupAddFlags = (options?.groups ?? []).flatMap((g) => [
+    "--group-add",
+    String(g)
+  ]);
+  const deviceFlags = (options?.devices ?? []).flatMap((d) => [
+    "--device",
+    d
+  ]);
+  const cpusFlags = options?.cpus !== void 0 ? ["--cpus", String(options.cpus)] : [];
+  yield* dockerExec([
+    "run",
+    "-d",
+    "--name",
+    containerName,
+    ...envFlags,
+    ...volumeFlags,
+    ...workdirFlags,
+    ...userFlags,
+    ...networkFlags,
+    ...groupAddFlags,
+    ...deviceFlags,
+    ...cpusFlags,
+    imageName
+  ]);
+});
+var removeContainer = (containerName) => Effect_exports.gen(function* () {
+  yield* Effect_exports.ignore(dockerExec(["stop", containerName]));
+  yield* Effect_exports.ignore(dockerExec(["rm", containerName]));
+});
+var removeImage = (imageName) => Effect_exports.gen(function* () {
+  yield* dockerExec(["rmi", imageName]);
+});
+
+// src/sandboxes/docker.ts
+var docker = (options) => {
+  const configuredImageName = options?.imageName;
+  const selinuxLabel = options?.selinuxLabel ?? "z";
+  const maxOutputTailChars = options?.maxOutputTailChars ?? MAX_TAIL_CHARS;
+  const sandboxHomedir = "/home/agent";
+  const userMounts = options?.mounts ? resolveUserMounts(options.mounts, sandboxHomedir) : [];
+  const parentDirsToCreate = processFileMountParents(
+    userMounts,
+    sandboxHomedir
+  );
+  return createBindMountSandboxProvider({
+    name: "docker",
+    env: options?.env,
+    sandboxHomedir,
+    create: async (createOptions) => {
+      const containerName = `sandcastle-${randomUUID()}`;
+      const worktreePath = createOptions.mounts.find(
+        (m) => m.hostPath === createOptions.worktreePath
+      )?.sandboxPath ?? "/home/agent/workspace";
+      const allMounts = [...createOptions.mounts, ...userMounts];
+      const volumeMounts = allMounts.map((m) => ({
+        hostPath: m.hostPath,
+        sandboxPath: m.sandboxPath,
+        readonly: m.readonly
+      }));
+      const imageName = configuredImageName ?? defaultImageName(createOptions.hostRepoPath);
+      const containerUid = options?.containerUid ?? process.getuid?.() ?? 1e3;
+      const containerGid = options?.containerGid ?? process.getgid?.() ?? 1e3;
+      await checkImageUid(imageName, containerUid);
+      await Effect_exports.runPromise(
+        startContainer(
+          containerName,
+          imageName,
+          {
+            ...createOptions.env,
+            HOME: "/home/agent"
+          },
+          {
+            volumeMounts,
+            workdir: worktreePath,
+            user: `${containerUid}:${containerGid}`,
+            network: options?.network,
+            groups: options?.groups,
+            devices: options?.devices,
+            cpus: options?.cpus,
+            selinuxLabel
+          }
+        )
+      );
+      for (const dir of parentDirsToCreate) {
+        await new Promise((resolve2, reject) => {
+          execFile(
+            "docker",
+            [
+              "exec",
+              "--user",
+              "0:0",
+              containerName,
+              "sh",
+              "-c",
+              `mkdir -p "$1" && chown "$2" "$1"`,
+              "sh",
+              dir,
+              `${containerUid}:${containerGid}`
+            ],
+            (error) => {
+              if (error) {
+                reject(
+                  new Error(
+                    `Failed to create parent directory '${dir}' in container: ${error.message}`
+                  )
+                );
+              } else {
+                resolve2();
+              }
+            }
+          );
+        });
+      }
+      const removeContainerSync = () => {
+        try {
+          execFileSync("docker", ["rm", "-f", containerName], {
+            stdio: "ignore"
+          });
+        } catch {
+        }
+      };
+      const unregisterShutdown = registerShutdown(removeContainerSync);
+      const handle = {
+        worktreePath,
+        exec: (command, opts) => {
+          const effectiveCommand = opts?.sudo ? `sudo ${command}` : command;
+          const args = ["exec"];
+          if (opts?.stdin !== void 0) args.push("-i");
+          if (opts?.cwd) args.push("-w", opts.cwd);
+          args.push(containerName, "sh", "-c", effectiveCommand);
+          return new Promise((resolve2, reject) => {
+            const proc = spawn("docker", args, {
+              stdio: [
+                opts?.stdin !== void 0 ? "pipe" : "ignore",
+                "pipe",
+                "pipe"
+              ]
+            });
+            if (opts?.stdin !== void 0) {
+              proc.stdin.write(opts.stdin);
+              proc.stdin.end();
+            }
+            proc.on("error", (error) => {
+              reject(new Error(`docker exec failed: ${error.message}`));
+            });
+            if (opts?.onLine) {
+              const onLine = opts.onLine;
+              const stdoutTail = new BoundedTail(maxOutputTailChars, "\n");
+              const stderrTail = new BoundedTail(maxOutputTailChars, "");
+              const rl = createInterface({ input: proc.stdout });
+              rl.on("line", (line) => {
+                stdoutTail.push(line);
+                onLine(line);
+              });
+              proc.stderr.on("data", (chunk) => {
+                stderrTail.push(chunk.toString());
+              });
+              proc.on("close", (code) => {
+                resolve2({
+                  stdout: stdoutTail.toString(),
+                  stderr: stderrTail.toString(),
+                  exitCode: code ?? 0
+                });
+              });
+            } else {
+              const stdoutChunks = [];
+              const stderrChunks = [];
+              proc.stdout.on("data", (chunk) => {
+                stdoutChunks.push(chunk.toString());
+              });
+              proc.stderr.on("data", (chunk) => {
+                stderrChunks.push(chunk.toString());
+              });
+              proc.on("close", (code) => {
+                resolve2({
+                  stdout: stdoutChunks.join(""),
+                  stderr: stderrChunks.join(""),
+                  exitCode: code ?? 0
+                });
+              });
+            }
+          });
+        },
+        interactiveExec: (args, opts) => {
+          return new Promise((resolve2, reject) => {
+            const dockerArgs = ["exec"];
+            if ("isTTY" in opts.stdin && opts.stdin.isTTY) {
+              dockerArgs.push("-it");
+            } else {
+              dockerArgs.push("-i");
+            }
+            if (opts.cwd) dockerArgs.push("-w", opts.cwd);
+            dockerArgs.push(containerName, ...args);
+            const proc = spawn("docker", dockerArgs, {
+              stdio: [opts.stdin, opts.stdout, opts.stderr]
+            });
+            proc.on("error", (error) => {
+              reject(new Error(`docker exec failed: ${error.message}`));
+            });
+            proc.on("close", (code) => {
+              resolve2({ exitCode: code ?? 0 });
+            });
+          });
+        },
+        copyFileIn: (hostPath, sandboxPath) => new Promise((resolve2, reject) => {
+          execFile(
+            "docker",
+            ["cp", hostPath, `${containerName}:${sandboxPath}`],
+            (error) => {
+              if (error) {
+                reject(new Error(`docker cp (in) failed: ${error.message}`));
+              } else {
+                resolve2();
+              }
+            }
+          );
+        }),
+        copyFileOut: (sandboxPath, hostPath) => new Promise((resolve2, reject) => {
+          execFile(
+            "docker",
+            ["cp", `${containerName}:${sandboxPath}`, hostPath],
+            (error) => {
+              if (error) {
+                reject(new Error(`docker cp (out) failed: ${error.message}`));
+              } else {
+                resolve2();
+              }
+            }
+          );
+        }),
+        close: async () => {
+          unregisterShutdown();
+          await Effect_exports.runPromise(removeContainer(containerName));
+        }
+      };
+      return handle;
+    }
+  });
+};
+var checkImageUid = (imageName, expectedUid) => new Promise((resolve2, reject) => {
+  execFile(
+    "docker",
+    ["image", "inspect", imageName, "--format", "{{.Config.User}}"],
+    (error, stdout) => {
+      if (error) {
+        reject(
+          new Error(
+            `Image '${imageName}' not found locally. Build it first with 'sandcastle docker build-image'.`
+          )
+        );
+        return;
+      }
+      const imageUser = (stdout ?? "").toString().trim();
+      if (!imageUser) {
+        resolve2();
+        return;
+      }
+      const uidPart = imageUser.split(":")[0];
+      const imageUid = parseInt(uidPart, 10);
+      if (isNaN(imageUid)) {
+        resolve2();
+        return;
+      }
+      if (imageUid !== expectedUid) {
+        reject(
+          new Error(
+            `UID mismatch: image '${imageName}' was built with UID ${imageUid}, but the expected UID is ${expectedUid}. Rebuild the image with 'sandcastle docker build-image', or pass containerUid: ${imageUid} to docker() to match the image.`
+          )
+        );
+      } else {
+        resolve2();
+      }
+    }
+  );
+});
+
+export { buildImage, docker, removeImage };
+//# sourceMappingURL=chunk-FKX3DRTL.js.map
+//# sourceMappingURL=chunk-FKX3DRTL.js.map

package/dist/chunk-FKX3DRTL.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/DockerLifecycle.ts","../src/sandboxes/docker.ts"],"names":["resolve","execFile"],"mappings":";;;;;;;;;;AAMA,IAAM,aAAa,CAAC,IAAA,KAClB,cAAA,CAAO,KAAA,CAAM,CAAC,MAAA,KAAW;AACvB,EAAA,QAAA;AAAA,IACE,QAAA;AAAA,IACA,IAAA;AAAA,IACA,EAAE,SAAA,EAAW,EAAA,GAAK,IAAA,GAAO,IAAA,EAAK;AAAA,IAC9B,CAAC,KAAA,EAAO,MAAA,EAAQ,MAAA,KAAW;AACzB,MAAA,IAAI,KAAA,EAAO;AACT,QAAA,MAAA;AAAA,UACE,cAAA,CAAO,IAAA;AAAA,YACL,IAAI,WAAA,CAAY;AAAA,cACd,OAAA,EAAS,CAAA,OAAA,EAAU,IAAA,CAAK,CAAC,CAAC,YAAY,MAAA,EAAQ,QAAA,EAAS,IAAK,KAAA,CAAM,OAAO,CAAA;AAAA,aAC1E;AAAA;AACH,SACF;AAAA,MACF,CAAA,MAAO;AACL,QAAA,MAAA,CAAO,cAAA,CAAO,OAAA,CAAQ,MAAA,CAAO,QAAA,EAAU,CAAC,CAAA;AAAA,MAC1C;AAAA,IACF;AAAA,GACF;AACF,CAAC,CAAA;AASI,IAAM,aAAa,CACxB,SAAA,EACA,eACA,OAAA,KAKA,cAAA,CAAO,IAAI,aAAa;AACtB,EAAA,MAAM,gBAAgB,MAAA,CAAO,OAAA,CAAQ,SAAS,SAAA,IAAa,EAAE,CAAA,CAAE,OAAA;AAAA,IAC7D,CAAC,CAAC,CAAA,EAAG,CAAC,CAAA,KAAM,CAAC,aAAA,EAAe,CAAA,EAAG,CAAC,CAAA,CAAA,EAAI,CAAC,CAAA,CAAE;AAAA,GACzC;AACA,EAAA,IAAI,SAAS,UAAA,EAAY;AACvB,IAAA,OAAO,UAAA,CAAW;AAAA,MAChB,OAAA;AAAA,MACA,IAAA;AAAA,MACA,SAAA;AAAA,MACA,GAAG,aAAA;AAAA,MACH,IAAA;AAAA,MACA,OAAA,CAAQ,QAAQ,UAAU,CAAA;AAAA,MAC1B,QAAQ,GAAA;AAAI,KACb,CAAA;AAAA,EACH,CAAA,MAAO;AACL,IAAA,OAAO,UAAA,CAAW;AAAA,MAChB,OAAA;AAAA,MACA,IAAA;AAAA,MACA,SAAA;AAAA,MACA,GAAG,aAAA;AAAA,MACH,QAAQ,aAAa;AAAA,KACtB,CAAA;AAAA,EACH;AACF,CAAC;AAkCI,IAAM,cAAA,GAAiB,CAC5B,aAAA,EACA,SAAA,EACA,KACA,OAAA,KAEA,cAAA,CAAO,IAAI,aAAa;AAEtB,EAAA,MAAM,QAAA,GAAW,OAAO,UAAA,CAAW;AAAA,IACjC,IAAA;AAAA,IACA,IAAA;AAAA,IACA,UAAA;AAAA,IACA,SAAS,aAAa,CAAA,CAAA,CAAA;AAAA,IACtB,UAAA;AAAA,IACA;AAAA,GACD,CAAA;AAED,EAAA,IAAI,QAAA,CAAS,IAAA,EAAK,KAAM,aAAA,EAAe;AACrC,IAAA,OAAO,cAAA,CAAO,IAAA;AAAA,MACZ,IAAI,WAAA,CAAY;AAAA,QACd,OAAA,EAAS,cAAc,aAAa,CAAA,oCAAA;AAAA,OACrC;AAAA,KACH;AAAA,EACF;AAEA,EAAA,MAAM,QAAA,GAAW,MAAA,CAAO,OAAA,CAAQ,GAAG,CAAA,CAAE,QAAQ,CAAC,CAAC,CAAA,EAAG,CAAC,CAAA,KAAM;AAAA,IACvD,IAAA;AAAA,IACA,CAAA,EAAG,CAAC,CAAA,CAAA,EAAI,CAAC,CAAA;AAAA,GACV,CAAA;AAED,EAAA,MAAM,YAAA,GAAe,SAAS,YAAA,IAAgB,GAAA;AAC9C,EAAA,MAAM,eAAe,OAAA,EAAS,YAAA,IAAgB,EAAC,EAAG,OAAA,CAAQ,CAAC,KAAA,KAAU;AAAA,IACnE,IAAA;AAAA,IACA,iBAAA,CAAkB,OAAO,YAAY;AAAA,GACtC,CAAA;AAED,EAAA,MAAM,YAAA,GAAe,SAAS,OAAA,GAAU,CAAC,MAAM,OAAA,CAAQ,OAAO,IAAI,EAAC;AACnE,EAAA,MAAM,SAAA,GAAY,SAAS,IAAA,GAAO,CAAC,UAAU,OAAA,CAAQ,IAAI,IAAI,EAAC;AAC9D,EAAA,MAAM,QAAA,GAAW,OAAA,EAAS,OAAA,GACtB,KAAA,CAAM,QAAQ,OAAA,CAAQ,OAAO,CAAA,GAC3B,OAAA,CAAQ,OAAA,GACR,CAAC,OAAA,CAAQ,OAAO,IAClB,EAAC;AACL,EAAA,MAAM,YAAA,GAAe,SAAS,OAAA,CAAQ,CAAC,MAAM,CAAC,WAAA,EAAa,CAAC,CAAC,CAAA;AAC7D,EAAA,MAAM,iBAAiB,OAAA,EAAS,MAAA,IAAU,EAAC,EAAG,OAAA,CAAQ,CAAC,CAAA,KAAM;AAAA,IAC3D,aAAA;AAAA,IACA,OAAO,CAAC;AAAA,GACT,CAAA;AACD,EAAA,MAAM,eAAe,OAAA,EAAS,OAAA,IAAW,EAAC,EAAG,OAAA,CAAQ,CAAC,CAAA,KAAM;AAAA,IAC1D,UAAA;AAAA,IACA;AAAA,GACD,CAAA;AACD,EAAA,MAAM,SAAA,GACJ,OAAA,EAAS,IAAA,KAAS,MAAA,GAAY,CAAC,QAAA,EAAU,MAAA,CAAO,OAAA,CAAQ,IAAI,CAAC,CAAA,GAAI,EAAC;AAEpE,EAAA,OAAO,UAAA,CAAW;AAAA,IAChB,KAAA;AAAA,IACA,IAAA;AAAA,IACA,QAAA;AAAA,IACA,aAAA;AAAA,IACA,GAAG,QAAA;AAAA,IACH,GAAG,WAAA;AAAA,IACH,GAAG,YAAA;AAAA,IACH,GAAG,SAAA;AAAA,IACH,GAAG,YAAA;AAAA,IACH,GAAG,aAAA;AAAA,IACH,GAAG,WAAA;AAAA,IACH,GAAG,SAAA;AAAA,IACH;AAAA,GACD,CAAA;AACH,CAAC,CAAA;AAKI,IAAM,eAAA,GAAkB,CAC7B,aAAA,KAEA,cAAA,CAAO,IAAI,aAAa;AAEtB,EAAA,OAAO,eAAO,MAAA,CAAO,UAAA,CAAW,CAAC,MAAA,EAAQ,aAAa,CAAC,CAAC,CAAA;AAExD,EAAA,OAAO,eAAO,MAAA,CAAO,UAAA,CAAW,CAAC,IAAA,EAAM,aAAa,CAAC,CAAC,CAAA;AACxD,CAAC,CAAA;AAKI,IAAM,WAAA,GAAc,CACzB,SAAA,KAEA,cAAA,CAAO,IAAI,aAAa;AACtB,EAAA,OAAO,UAAA,CAAW,CAAC,KAAA,EAAO,SAAS,CAAC,CAAA;AACtC,CAAC;;;AC9DI,IAAM,MAAA,GAAS,CAAC,OAAA,KAA6C;AAClE,EAAA,MAAM,sBAAsB,OAAA,EAAS,SAAA;AACrC,EAAA,MAAM,YAAA,GAAe,SAAS,YAAA,IAAgB,GAAA;AAC9C,EAAA,MAAM,kBAAA,GAAqB,SAAS,kBAAA,IAAsB,cAAA;AAC1D,EAAA,MAAM,cAAA,GAAiB,aAAA;AACvB,EAAA,MAAM,UAAA,GAAa,SAAS,MAAA,GACxB,iBAAA,CAAkB,QAAQ,MAAA,EAAQ,cAAc,IAChD,EAAC;AAGL,EAAA,MAAM,kBAAA,GAAqB,uBAAA;AAAA,IACzB,UAAA;AAAA,IACA;AAAA,GACF;AAEA,EAAA,OAAO,8BAAA,CAA+B;AAAA,IACpC,IAAA,EAAM,QAAA;AAAA,IACN,KAAK,OAAA,EAAS,GAAA;AAAA,IACd,cAAA;AAAA,IACA,MAAA,EAAQ,OACN,aAAA,KACoC;AACpC,MAAA,MAAM,aAAA,GAAgB,CAAA,WAAA,EAAc,UAAA,EAAY,CAAA,CAAA;AAEhD,MAAA,MAAM,YAAA,GACJ,cAAc,MAAA,CAAO,IAAA;AAAA,QACnB,CAAC,CAAA,KAAM,CAAA,CAAE,QAAA,KAAa,aAAA,CAAc;AAAA,SACnC,WAAA,IAAe,uBAAA;AAGpB,MAAA,MAAM,YAAY,CAAC,GAAG,aAAA,CAAc,MAAA,EAAQ,GAAG,UAAU,CAAA;AACzD,MAAA,MAAM,YAAA,GAAe,SAAA,CAAU,GAAA,CAAI,CAAC,CAAA,MAAO;AAAA,QACzC,UAAU,CAAA,CAAE,QAAA;AAAA,QACZ,aAAa,CAAA,CAAE,WAAA;AAAA,QACf,UAAU,CAAA,CAAE;AAAA,OACd,CAAE,CAAA;AAGF,MAAA,MAAM,SAAA,GACJ,mBAAA,IAAuB,gBAAA,CAAiB,aAAA,CAAc,YAAY,CAAA;AAEpE,MAAA,MAAM,YAAA,GAAe,OAAA,EAAS,YAAA,IAAgB,OAAA,CAAQ,UAAS,IAAK,GAAA;AACpE,MAAA,MAAM,YAAA,GAAe,OAAA,EAAS,YAAA,IAAgB,OAAA,CAAQ,UAAS,IAAK,GAAA;AAGpE,MAAA,MAAM,aAAA,CAAc,WAAW,YAAY,CAAA;AAG3C,MAAA,MAAM,cAAA,CAAO,UAAA;AAAA,QACX,cAAA;AAAA,UACE,aAAA;AAAA,UACA,SAAA;AAAA,UACA;AAAA,YACE,GAAG,aAAA,CAAc,GAAA;AAAA,YACjB,IAAA,EAAM;AAAA,WACR;AAAA,UACA;AAAA,YACE,YAAA;AAAA,YACA,OAAA,EAAS,YAAA;AAAA,YACT,IAAA,EAAM,CAAA,EAAG,YAAY,CAAA,CAAA,EAAI,YAAY,CAAA,CAAA;AAAA,YACrC,SAAS,OAAA,EAAS,OAAA;AAAA,YAClB,QAAQ,OAAA,EAAS,MAAA;AAAA,YACjB,SAAS,OAAA,EAAS,OAAA;AAAA,YAClB,MAAM,OAAA,EAAS,IAAA;AAAA,YACf;AAAA;AACF;AACF,OACF;AAGA,MAAA,KAAA,MAAW,OAAO,kBAAA,EAAoB;AACpC,QAAA,MAAM,IAAI,OAAA,CAAc,CAACA,QAAAA,EAAS,MAAA,KAAW;AAC3C,UAAAC,QAAAA;AAAA,YACE,QAAA;AAAA,YACA;AAAA,cACE,MAAA;AAAA,cACA,QAAA;AAAA,cACA,KAAA;AAAA,cACA,aAAA;AAAA,cACA,IAAA;AAAA,cACA,IAAA;AAAA,cACA,CAAA,gCAAA,CAAA;AAAA,cACA,IAAA;AAAA,cACA,GAAA;AAAA,cACA,CAAA,EAAG,YAAY,CAAA,CAAA,EAAI,YAAY,CAAA;AAAA,aACjC;AAAA,YACA,CAAC,KAAA,KAAU;AACT,cAAA,IAAI,KAAA,EAAO;AACT,gBAAA,MAAA;AAAA,kBACE,IAAI,KAAA;AAAA,oBACF,CAAA,mCAAA,EAAsC,GAAG,CAAA,gBAAA,EAAmB,KAAA,CAAM,OAAO,CAAA;AAAA;AAC3E,iBACF;AAAA,cACF,CAAA,MAAO;AACL,gBAAAD,QAAAA,EAAQ;AAAA,cACV;AAAA,YACF;AAAA,WACF;AAAA,QACF,CAAC,CAAA;AAAA,MACH;AAKA,MAAA,MAAM,sBAAsB,MAAM;AAChC,QAAA,IAAI;AACF,UAAA,YAAA,CAAa,QAAA,EAAU,CAAC,IAAA,EAAM,IAAA,EAAM,aAAa,CAAA,EAAG;AAAA,YAClD,KAAA,EAAO;AAAA,WACR,CAAA;AAAA,QACH,CAAA,CAAA,MAAQ;AAAA,QAER;AAAA,MACF,CAAA;AACA,MAAA,MAAM,kBAAA,GAAqB,iBAAiB,mBAAmB,CAAA;AAE/D,MAAA,MAAM,MAAA,GAAiC;AAAA,QACrC,YAAA;AAAA,QAEA,IAAA,EAAM,CACJ,OAAA,EACA,IAAA,KAMwB;AACxB,UAAA,MAAM,gBAAA,GAAmB,IAAA,EAAM,IAAA,GAAO,CAAA,KAAA,EAAQ,OAAO,CAAA,CAAA,GAAK,OAAA;AAC1D,UAAA,MAAM,IAAA,GAAO,CAAC,MAAM,CAAA;AACpB,UAAA,IAAI,IAAA,EAAM,KAAA,KAAU,MAAA,EAAW,IAAA,CAAK,KAAK,IAAI,CAAA;AAC7C,UAAA,IAAI,MAAM,GAAA,EAAK,IAAA,CAAK,IAAA,CAAK,IAAA,EAAM,KAAK,GAAG,CAAA;AACvC,UAAA,IAAA,CAAK,IAAA,CAAK,aAAA,EAAe,IAAA,EAAM,IAAA,EAAM,gBAAgB,CAAA;AAErD,UAAA,OAAO,IAAI,OAAA,CAAQ,CAACA,QAAAA,EAAS,MAAA,KAAW;AACtC,YAAA,MAAM,IAAA,GAAO,KAAA,CAAM,QAAA,EAAU,IAAA,EAAM;AAAA,cACjC,KAAA,EAAO;AAAA,gBACL,IAAA,EAAM,KAAA,KAAU,MAAA,GAAY,MAAA,GAAS,QAAA;AAAA,gBACrC,MAAA;AAAA,gBACA;AAAA;AACF,aACD,CAAA;AAED,YAAA,IAAI,IAAA,EAAM,UAAU,MAAA,EAAW;AAC7B,cAAA,IAAA,CAAK,KAAA,CAAO,KAAA,CAAM,IAAA,CAAK,KAAK,CAAA;AAC5B,cAAA,IAAA,CAAK,MAAO,GAAA,EAAI;AAAA,YAClB;AAEA,YAAA,IAAA,CAAK,EAAA,CAAG,OAAA,EAAS,CAAC,KAAA,KAAU;AAC1B,cAAA,MAAA,CAAO,IAAI,KAAA,CAAM,CAAA,oBAAA,EAAuB,KAAA,CAAM,OAAO,EAAE,CAAC,CAAA;AAAA,YAC1D,CAAC,CAAA;AAED,YAAA,IAAI,MAAM,MAAA,EAAQ;AAChB,cAAA,MAAM,SAAS,IAAA,CAAK,MAAA;AACpB,cAAA,MAAM,UAAA,GAAa,IAAI,WAAA,CAAY,kBAAA,EAAoB,IAAI,CAAA;AAC3D,cAAA,MAAM,UAAA,GAAa,IAAI,WAAA,CAAY,kBAAA,EAAoB,EAAE,CAAA;AACzD,cAAA,MAAM,KAAK,eAAA,CAAgB,EAAE,KAAA,EAAO,IAAA,CAAK,QAAS,CAAA;AAClD,cAAA,EAAA,CAAG,EAAA,CAAG,MAAA,EAAQ,CAAC,IAAA,KAAS;AACtB,gBAAA,UAAA,CAAW,KAAK,IAAI,CAAA;AACpB,gBAAA,MAAA,CAAO,IAAI,CAAA;AAAA,cACb,CAAC,CAAA;AACD,cAAA,IAAA,CAAK,MAAA,CAAQ,EAAA,CAAG,MAAA,EAAQ,CAAC,KAAA,KAAkB;AACzC,gBAAA,UAAA,CAAW,IAAA,CAAK,KAAA,CAAM,QAAA,EAAU,CAAA;AAAA,cAClC,CAAC,CAAA;AACD,cAAA,IAAA,CAAK,EAAA,CAAG,OAAA,EAAS,CAAC,IAAA,KAAS;AACzB,gBAAAA,QAAAA,CAAQ;AAAA,kBACN,MAAA,EAAQ,WAAW,QAAA,EAAS;AAAA,kBAC5B,MAAA,EAAQ,WAAW,QAAA,EAAS;AAAA,kBAC5B,UAAU,IAAA,IAAQ;AAAA,iBACnB,CAAA;AAAA,cACH,CAAC,CAAA;AAAA,YACH,CAAA,MAAO;AACL,cAAA,MAAM,eAAyB,EAAC;AAChC,cAAA,MAAM,eAAyB,EAAC;AAChC,cAAA,IAAA,CAAK,MAAA,CAAQ,EAAA,CAAG,MAAA,EAAQ,CAAC,KAAA,KAAkB;AACzC,gBAAA,YAAA,CAAa,IAAA,CAAK,KAAA,CAAM,QAAA,EAAU,CAAA;AAAA,cACpC,CAAC,CAAA;AACD,cAAA,IAAA,CAAK,MAAA,CAAQ,EAAA,CAAG,MAAA,EAAQ,CAAC,KAAA,KAAkB;AACzC,gBAAA,YAAA,CAAa,IAAA,CAAK,KAAA,CAAM,QAAA,EAAU,CAAA;AAAA,cACpC,CAAC,CAAA;AACD,cAAA,IAAA,CAAK,EAAA,CAAG,OAAA,EAAS,CAAC,IAAA,KAAS;AACzB,gBAAAA,QAAAA,CAAQ;AAAA,kBACN,MAAA,EAAQ,YAAA,CAAa,IAAA,CAAK,EAAE,CAAA;AAAA,kBAC5B,MAAA,EAAQ,YAAA,CAAa,IAAA,CAAK,EAAE,CAAA;AAAA,kBAC5B,UAAU,IAAA,IAAQ;AAAA,iBACnB,CAAA;AAAA,cACH,CAAC,CAAA;AAAA,YACH;AAAA,UACF,CAAC,CAAA;AAAA,QACH,CAAA;AAAA,QAEA,eAAA,EAAiB,CACf,IAAA,EACA,IAAA,KACkC;AAClC,UAAA,OAAO,IAAI,OAAA,CAAQ,CAACA,QAAAA,EAAS,MAAA,KAAW;AACtC,YAAA,MAAM,UAAA,GAAa,CAAC,MAAM,CAAA;AAE1B,YAAA,IACE,OAAA,IAAW,IAAA,CAAK,KAAA,IACf,IAAA,CAAK,MAA8B,KAAA,EACpC;AACA,cAAA,UAAA,CAAW,KAAK,KAAK,CAAA;AAAA,YACvB,CAAA,MAAO;AACL,cAAA,UAAA,CAAW,KAAK,IAAI,CAAA;AAAA,YACtB;AACA,YAAA,IAAI,KAAK,GAAA,EAAK,UAAA,CAAW,IAAA,CAAK,IAAA,EAAM,KAAK,GAAG,CAAA;AAC5C,YAAA,UAAA,CAAW,IAAA,CAAK,aAAA,EAAe,GAAG,IAAI,CAAA;AAEtC,YAAA,MAAM,IAAA,GAAO,KAAA,CAAM,QAAA,EAAU,UAAA,EAAY;AAAA,cACvC,OAAO,CAAC,IAAA,CAAK,OAAO,IAAA,CAAK,MAAA,EAAQ,KAAK,MAAM;AAAA,aAC7C,CAAA;AAED,YAAA,IAAA,CAAK,EAAA,CAAG,OAAA,EAAS,CAAC,KAAA,KAAiB;AACjC,cAAA,MAAA,CAAO,IAAI,KAAA,CAAM,CAAA,oBAAA,EAAuB,KAAA,CAAM,OAAO,EAAE,CAAC,CAAA;AAAA,YAC1D,CAAC,CAAA;AAED,YAAA,IAAA,CAAK,EAAA,CAAG,OAAA,EAAS,CAAC,IAAA,KAAwB;AACxC,cAAAA,QAAAA,CAAQ,EAAE,QAAA,EAAU,IAAA,IAAQ,GAAG,CAAA;AAAA,YACjC,CAAC,CAAA;AAAA,UACH,CAAC,CAAA;AAAA,QACH,CAAA;AAAA,QAEA,UAAA,EAAY,CAAC,QAAA,EAAkB,WAAA,KAC7B,IAAI,OAAA,CAAQ,CAACA,UAAS,MAAA,KAAW;AAC/B,UAAAC,QAAAA;AAAA,YACE,QAAA;AAAA,YACA,CAAC,IAAA,EAAM,QAAA,EAAU,GAAG,aAAa,CAAA,CAAA,EAAI,WAAW,CAAA,CAAE,CAAA;AAAA,YAClD,CAAC,KAAA,KAAU;AACT,cAAA,IAAI,KAAA,EAAO;AACT,gBAAA,MAAA,CAAO,IAAI,KAAA,CAAM,CAAA,uBAAA,EAA0B,KAAA,CAAM,OAAO,EAAE,CAAC,CAAA;AAAA,cAC7D,CAAA,MAAO;AACL,gBAAAD,QAAAA,EAAQ;AAAA,cACV;AAAA,YACF;AAAA,WACF;AAAA,QACF,CAAC,CAAA;AAAA,QAEH,WAAA,EAAa,CAAC,WAAA,EAAqB,QAAA,KACjC,IAAI,OAAA,CAAQ,CAACA,UAAS,MAAA,KAAW;AAC/B,UAAAC,QAAAA;AAAA,YACE,QAAA;AAAA,YACA,CAAC,IAAA,EAAM,CAAA,EAAG,aAAa,CAAA,CAAA,EAAI,WAAW,IAAI,QAAQ,CAAA;AAAA,YAClD,CAAC,KAAA,KAAU;AACT,cAAA,IAAI,KAAA,EAAO;AACT,gBAAA,MAAA,CAAO,IAAI,KAAA,CAAM,CAAA,wBAAA,EAA2B,KAAA,CAAM,OAAO,EAAE,CAAC,CAAA;AAAA,cAC9D,CAAA,MAAO;AACL,gBAAAD,QAAAA,EAAQ;AAAA,cACV;AAAA,YACF;AAAA,WACF;AAAA,QACF,CAAC,CAAA;AAAA,QAEH,OAAO,YAA2B;AAChC,UAAA,kBAAA,EAAmB;AACnB,UAAA,MAAM,cAAA,CAAO,UAAA,CAAW,eAAA,CAAgB,aAAa,CAAC,CAAA;AAAA,QACxD;AAAA,OACF;AAEA,MAAA,OAAO,MAAA;AAAA,IACT;AAAA,GACD,CAAA;AACH;AAKA,IAAM,aAAA,GAAgB,CAAC,SAAA,EAAmB,WAAA,KACxC,IAAI,OAAA,CAAc,CAACA,UAAS,MAAA,KAAW;AACrC,EAAAC,QAAAA;AAAA,IACE,QAAA;AAAA,IACA,CAAC,OAAA,EAAS,SAAA,EAAW,SAAA,EAAW,YAAY,kBAAkB,CAAA;AAAA,IAC9D,CAAC,OAAO,MAAA,KAAW;AACjB,MAAA,IAAI,KAAA,EAAO;AACT,QAAA,MAAA;AAAA,UACE,IAAI,KAAA;AAAA,YACF,UAAU,SAAS,CAAA,yEAAA;AAAA;AACrB,SACF;AACA,QAAA;AAAA,MACF;AACA,MAAA,MAAM,SAAA,GAAA,CAAa,MAAA,IAAU,EAAA,EAAI,QAAA,GAAW,IAAA,EAAK;AACjD,MAAA,IAAI,CAAC,SAAA,EAAW;AAEd,QAAAD,QAAAA,EAAQ;AACR,QAAA;AAAA,MACF;AACA,MAAA,MAAM,OAAA,GAAU,SAAA,CAAU,KAAA,CAAM,GAAG,EAAE,CAAC,CAAA;AACtC,MAAA,MAAM,QAAA,GAAW,QAAA,CAAS,OAAA,EAAS,EAAE,CAAA;AACrC,MAAA,IAAI,KAAA,CAAM,QAAQ,CAAA,EAAG;AAEnB,QAAAA,QAAAA,EAAQ;AACR,QAAA;AAAA,MACF;AACA,MAAA,IAAI,aAAa,WAAA,EAAa;AAC5B,QAAA,MAAA;AAAA,UACE,IAAI,KAAA;AAAA,YACF,wBAAwB,SAAS,CAAA,qBAAA,EAAwB,QAAQ,CAAA,0BAAA,EACpC,WAAW,mFAEb,QAAQ,CAAA,gCAAA;AAAA;AACrC,SACF;AAAA,MACF,CAAA,MAAO;AACL,QAAAA,QAAAA,EAAQ;AAAA,MACV;AAAA,IACF;AAAA,GACF;AACF,CAAC,CAAA","file":"chunk-FKX3DRTL.js","sourcesContent":["import { Effect } from \"effect\";\nimport { execFile } from \"node:child_process\";\nimport { resolve } from \"node:path\";\nimport { DockerError } from \"./errors.js\";\nimport { formatVolumeMount, type SelinuxLabel } from \"./mountUtils.js\";\n\nconst dockerExec = (args: string[]): Effect.Effect<string, DockerError> =>\n  Effect.async((resume) => {\n    execFile(\n      \"docker\",\n      args,\n      { maxBuffer: 10 * 1024 * 1024 },\n      (error, stdout, stderr) => {\n        if (error) {\n          resume(\n            Effect.fail(\n              new DockerError({\n                message: `docker ${args[0]} failed: ${stderr?.toString() || error.message}`,\n              }),\n            ),\n          );\n        } else {\n          resume(Effect.succeed(stdout.toString()));\n        }\n      },\n    );\n  });\n\n/**\n * Build the sandcastle Docker image.\n *\n * When `dockerfile` is provided, uses `docker build -f <dockerfile> <cwd>`\n * so COPY instructions resolve relative to the current working directory.\n * Otherwise, uses `docker build <dockerfileDir>` (the default .sandcastle/ directory).\n */\nexport const buildImage = (\n  imageName: string,\n  dockerfileDir: string,\n  options?: {\n    readonly dockerfile?: string;\n    readonly buildArgs?: Record<string, string>;\n  },\n): Effect.Effect<void, DockerError> =>\n  Effect.gen(function* () {\n    const buildArgFlags = Object.entries(options?.buildArgs ?? {}).flatMap(\n      ([k, v]) => [\"--build-arg\", `${k}=${v}`],\n    );\n    if (options?.dockerfile) {\n      yield* dockerExec([\n        \"build\",\n        \"-t\",\n        imageName,\n        ...buildArgFlags,\n        \"-f\",\n        resolve(options.dockerfile),\n        process.cwd(),\n      ]);\n    } else {\n      yield* dockerExec([\n        \"build\",\n        \"-t\",\n        imageName,\n        ...buildArgFlags,\n        resolve(dockerfileDir),\n      ]);\n    }\n  });\n\nexport interface VolumeMount {\n  readonly hostPath: string;\n  readonly sandboxPath: string;\n  readonly readonly?: boolean;\n}\n\nexport interface StartContainerOptions {\n  readonly volumeMounts?: readonly VolumeMount[];\n  readonly workdir?: string;\n  /** Run the container as this uid:gid instead of the Dockerfile's USER. */\n  readonly user?: string;\n  /** Docker network(s) to attach the container to. Passed as `--network` flags. */\n  readonly network?: string | readonly string[];\n  /** Supplementary groups to add the container user to. Passed as `--group-add` flags. */\n  readonly groups?: readonly (string | number)[];\n  /** Host devices to expose to the container. Passed as `--device` flags. */\n  readonly devices?: readonly string[];\n  /** Limit CPU resources via `--cpus` (e.g. `1.5`). Fractional values allowed. */\n  readonly cpus?: number;\n  /**\n   * SELinux volume label suffix applied to bind mounts (default `\"z\"`).\n   *\n   * - `\"z\"` — shared label. No-op on non-SELinux systems.\n   * - `\"Z\"` — private label; only this container can access the mount.\n   * - `false` — disable labeling entirely.\n   */\n  readonly selinuxLabel?: SelinuxLabel;\n}\n\n/**\n * Start a new container with environment variables injected.\n */\nexport const startContainer = (\n  containerName: string,\n  imageName: string,\n  env: Record<string, string>,\n  options?: StartContainerOptions,\n): Effect.Effect<void, DockerError> =>\n  Effect.gen(function* () {\n    // Check if container already exists\n    const existing = yield* dockerExec([\n      \"ps\",\n      \"-a\",\n      \"--filter\",\n      `name=^${containerName}$`,\n      \"--format\",\n      \"{{.Names}}\",\n    ]);\n\n    if (existing.trim() === containerName) {\n      yield* Effect.fail(\n        new DockerError({\n          message: `Container '${containerName}' already exists. Run cleanup first.`,\n        }),\n      );\n    }\n\n    const envFlags = Object.entries(env).flatMap(([k, v]) => [\n      \"-e\",\n      `${k}=${v}`,\n    ]);\n\n    const selinuxLabel = options?.selinuxLabel ?? \"z\";\n    const volumeFlags = (options?.volumeMounts ?? []).flatMap((mount) => [\n      \"-v\",\n      formatVolumeMount(mount, selinuxLabel),\n    ]);\n\n    const workdirFlags = options?.workdir ? [\"-w\", options.workdir] : [];\n    const userFlags = options?.user ? [\"--user\", options.user] : [];\n    const networks = options?.network\n      ? Array.isArray(options.network)\n        ? options.network\n        : [options.network]\n      : [];\n    const networkFlags = networks.flatMap((n) => [\"--network\", n]);\n    const groupAddFlags = (options?.groups ?? []).flatMap((g) => [\n      \"--group-add\",\n      String(g),\n    ]);\n    const deviceFlags = (options?.devices ?? []).flatMap((d) => [\n      \"--device\",\n      d,\n    ]);\n    const cpusFlags =\n      options?.cpus !== undefined ? [\"--cpus\", String(options.cpus)] : [];\n\n    yield* dockerExec([\n      \"run\",\n      \"-d\",\n      \"--name\",\n      containerName,\n      ...envFlags,\n      ...volumeFlags,\n      ...workdirFlags,\n      ...userFlags,\n      ...networkFlags,\n      ...groupAddFlags,\n      ...deviceFlags,\n      ...cpusFlags,\n      imageName,\n    ]);\n  });\n\n/**\n * Stop and remove a container without removing the image.\n */\nexport const removeContainer = (\n  containerName: string,\n): Effect.Effect<void, DockerError> =>\n  Effect.gen(function* () {\n    // Stop container (ignore errors if already stopped)\n    yield* Effect.ignore(dockerExec([\"stop\", containerName]));\n    // Remove container (ignore errors if not found)\n    yield* Effect.ignore(dockerExec([\"rm\", containerName]));\n  });\n\n/**\n * Remove a Docker image.\n */\nexport const removeImage = (\n  imageName: string,\n): Effect.Effect<void, DockerError> =>\n  Effect.gen(function* () {\n    yield* dockerExec([\"rmi\", imageName]);\n  });\n","/**\n * Docker sandbox provider — wraps DockerLifecycle into a SandboxProvider.\n *\n * Usage:\n *   import { docker } from \"sandcastle/sandboxes/docker\";\n *   await run({ agent: claudeCode(\"claude-opus-4-7\"), sandbox: docker() });\n */\n\nimport {\n  execFile,\n  execFileSync,\n  spawn,\n  type StdioOptions,\n} from \"node:child_process\";\nimport { randomUUID } from \"node:crypto\";\nimport { createInterface } from \"node:readline\";\nimport { Effect } from \"effect\";\nimport { startContainer, removeContainer } from \"../DockerLifecycle.js\";\nimport {\n  createBindMountSandboxProvider,\n  type SandboxProvider,\n  type BindMountCreateOptions,\n  type BindMountSandboxHandle,\n  type ExecResult,\n  type InteractiveExecOptions,\n} from \"../SandboxProvider.js\";\nimport type { MountConfig } from \"../MountConfig.js\";\nimport type { SelinuxLabel } from \"../mountUtils.js\";\nimport {\n  defaultImageName,\n  resolveUserMounts,\n  processFileMountParents,\n} from \"../mountUtils.js\";\nimport { BoundedTail, MAX_TAIL_CHARS } from \"../boundedTail.js\";\nimport { registerShutdown } from \"../shutdownRegistry.js\";\n\nexport interface DockerOptions {\n  /** Docker image name (default: derived from repo directory name). */\n  readonly imageName?: string;\n  /**\n   * The UID of the `agent` user inside the container image (default: host UID via `process.getuid()`, or 1000).\n   *\n   * Must match the UID baked into the image at build time. Used as the `--user` flag value\n   * and checked against the image's configured UID in the pre-flight diagnostic.\n   */\n  readonly containerUid?: number;\n  /**\n   * The GID of the `agent` user inside the container image (default: host GID via `process.getgid()`, or 1000).\n   *\n   * Must match the GID baked into the image at build time. Used as the `--user` flag value.\n   */\n  readonly containerGid?: number;\n  /**\n   * SELinux volume label suffix applied to bind mounts.\n   *\n   * - `\"z\"` — shared label (default). No-op on non-SELinux systems.\n   * - `\"Z\"` — private label; only this container can access the mount.\n   * - `false` — disable labeling entirely.\n   */\n  readonly selinuxLabel?: SelinuxLabel;\n  /**\n   * Additional host directories to bind-mount into the sandbox.\n   *\n   * Each entry specifies a `hostPath` (tilde-expanded) and `sandboxPath`.\n   * If `hostPath` does not exist, sandbox creation fails with a clear error.\n   */\n  readonly mounts?: readonly MountConfig[];\n  /** Environment variables injected by this provider. Merged at launch time with env resolver and agent provider env. */\n  readonly env?: Record<string, string>;\n  /**\n   * Docker network(s) to attach the container to.\n   *\n   * - `\"my-network\"` → `--network my-network`\n   * - `[\"net1\", \"net2\"]` → `--network net1 --network net2`\n   *\n   * When omitted, Docker's default bridge network is used.\n   */\n  readonly network?: string | readonly string[];\n  /**\n   * Supplementary groups to add the container user to, via `--group-add`.\n   *\n   * Accepts group names or numeric GIDs:\n   *\n   * - `[\"docker\"]` → `--group-add docker`\n   * - `[999]` → `--group-add 999`\n   * - `[\"docker\", 999]` → `--group-add docker --group-add 999`\n   *\n   * Useful for granting access to a bind-mounted Docker socket (Docker-outside-of-Docker).\n   * When omitted, no `--group-add` flags are added.\n   */\n  readonly groups?: readonly (string | number)[];\n  /**\n   * Host devices to expose to the container, via `--device`.\n   *\n   * Each entry is a full device spec in `host[:container[:permissions]]` form:\n   *\n   * - `[\"/dev/kvm\"]` → `--device /dev/kvm`\n   * - `[\"/dev/sda:/dev/xvda:rwm\"]` → `--device /dev/sda:/dev/xvda:rwm`\n   * - `[\"/dev/kvm\", \"/dev/fuse\"]` → `--device /dev/kvm --device /dev/fuse`\n   *\n   * When omitted, no `--device` flags are added.\n   */\n  readonly devices?: readonly string[];\n  /**\n   * Maximum number of characters of streamed `exec` output retained per stream\n   * (stdout and stderr) when an `onLine` callback is supplied (default: 64KiB).\n   *\n   * Output is delivered live to `onLine` regardless; this only bounds the tail\n   * returned in `ExecResult`, preventing a long-running agent's output from\n   * overflowing V8's max string length and crashing the run.\n   */\n  readonly maxOutputTailChars?: number;\n  /**\n   * Limit the CPU resources available to the container, via `--cpus`.\n   *\n   * Maps directly to `docker run --cpus`. Accepts fractional values:\n   *\n   * - `2` → `--cpus 2` (at most 2 CPUs)\n   * - `1.5` → `--cpus 1.5` (at most 1.5 CPUs)\n   *\n   * When omitted, no `--cpus` flag is added and the container is unconstrained.\n   */\n  readonly cpus?: number;\n}\n\n/**\n * Create a Docker sandbox provider.\n *\n * The returned provider creates Docker containers with bind-mounts\n * for the worktree and git directories.\n */\nexport const docker = (options?: DockerOptions): SandboxProvider => {\n  const configuredImageName = options?.imageName;\n  const selinuxLabel = options?.selinuxLabel ?? \"z\";\n  const maxOutputTailChars = options?.maxOutputTailChars ?? MAX_TAIL_CHARS;\n  const sandboxHomedir = \"/home/agent\";\n  const userMounts = options?.mounts\n    ? resolveUserMounts(options.mounts, sandboxHomedir)\n    : [];\n  // Validate file mounts and collect parent dirs to create at container start.\n  // Throws at construction time if any file mount parent is outside sandboxHomedir.\n  const parentDirsToCreate = processFileMountParents(\n    userMounts,\n    sandboxHomedir,\n  );\n\n  return createBindMountSandboxProvider({\n    name: \"docker\",\n    env: options?.env,\n    sandboxHomedir,\n    create: async (\n      createOptions: BindMountCreateOptions,\n    ): Promise<BindMountSandboxHandle> => {\n      const containerName = `sandcastle-${randomUUID()}`;\n\n      const worktreePath =\n        createOptions.mounts.find(\n          (m) => m.hostPath === createOptions.worktreePath,\n        )?.sandboxPath ?? \"/home/agent/workspace\";\n\n      // Build volume mount list (internal mounts + user-provided mounts)\n      const allMounts = [...createOptions.mounts, ...userMounts];\n      const volumeMounts = allMounts.map((m) => ({\n        hostPath: m.hostPath,\n        sandboxPath: m.sandboxPath,\n        readonly: m.readonly,\n      }));\n\n      // Resolve image name\n      const imageName =\n        configuredImageName ?? defaultImageName(createOptions.hostRepoPath);\n\n      const containerUid = options?.containerUid ?? process.getuid?.() ?? 1000;\n      const containerGid = options?.containerGid ?? process.getgid?.() ?? 1000;\n\n      // Pre-flight: verify image exists and UID matches\n      await checkImageUid(imageName, containerUid);\n\n      // Start container\n      await Effect.runPromise(\n        startContainer(\n          containerName,\n          imageName,\n          {\n            ...createOptions.env,\n            HOME: \"/home/agent\",\n          },\n          {\n            volumeMounts,\n            workdir: worktreePath,\n            user: `${containerUid}:${containerGid}`,\n            network: options?.network,\n            groups: options?.groups,\n            devices: options?.devices,\n            cpus: options?.cpus,\n            selinuxLabel,\n          },\n        ),\n      );\n\n      // Create parent directories for file mounts and chown to the container user\n      for (const dir of parentDirsToCreate) {\n        await new Promise<void>((resolve, reject) => {\n          execFile(\n            \"docker\",\n            [\n              \"exec\",\n              \"--user\",\n              \"0:0\",\n              containerName,\n              \"sh\",\n              \"-c\",\n              `mkdir -p \"$1\" && chown \"$2\" \"$1\"`,\n              \"sh\",\n              dir,\n              `${containerUid}:${containerGid}`,\n            ],\n            (error) => {\n              if (error) {\n                reject(\n                  new Error(\n                    `Failed to create parent directory '${dir}' in container: ${error.message}`,\n                  ),\n                );\n              } else {\n                resolve();\n              }\n            },\n          );\n        });\n      }\n\n      // Register synchronous container cleanup via the shared shutdown registry\n      // so concurrent sandboxes share a single exit/SIGINT/SIGTERM listener\n      // instead of tripping Node's MaxListenersExceededWarning.\n      const removeContainerSync = () => {\n        try {\n          execFileSync(\"docker\", [\"rm\", \"-f\", containerName], {\n            stdio: \"ignore\",\n          });\n        } catch {\n          /* best-effort */\n        }\n      };\n      const unregisterShutdown = registerShutdown(removeContainerSync);\n\n      const handle: BindMountSandboxHandle = {\n        worktreePath,\n\n        exec: (\n          command: string,\n          opts?: {\n            onLine?: (line: string) => void;\n            cwd?: string;\n            sudo?: boolean;\n            stdin?: string;\n          },\n        ): Promise<ExecResult> => {\n          const effectiveCommand = opts?.sudo ? `sudo ${command}` : command;\n          const args = [\"exec\"];\n          if (opts?.stdin !== undefined) args.push(\"-i\");\n          if (opts?.cwd) args.push(\"-w\", opts.cwd);\n          args.push(containerName, \"sh\", \"-c\", effectiveCommand);\n\n          return new Promise((resolve, reject) => {\n            const proc = spawn(\"docker\", args, {\n              stdio: [\n                opts?.stdin !== undefined ? \"pipe\" : \"ignore\",\n                \"pipe\",\n                \"pipe\",\n              ],\n            });\n\n            if (opts?.stdin !== undefined) {\n              proc.stdin!.write(opts.stdin);\n              proc.stdin!.end();\n            }\n\n            proc.on(\"error\", (error) => {\n              reject(new Error(`docker exec failed: ${error.message}`));\n            });\n\n            if (opts?.onLine) {\n              const onLine = opts.onLine;\n              const stdoutTail = new BoundedTail(maxOutputTailChars, \"\\n\");\n              const stderrTail = new BoundedTail(maxOutputTailChars, \"\");\n              const rl = createInterface({ input: proc.stdout! });\n              rl.on(\"line\", (line) => {\n                stdoutTail.push(line);\n                onLine(line);\n              });\n              proc.stderr!.on(\"data\", (chunk: Buffer) => {\n                stderrTail.push(chunk.toString());\n              });\n              proc.on(\"close\", (code) => {\n                resolve({\n                  stdout: stdoutTail.toString(),\n                  stderr: stderrTail.toString(),\n                  exitCode: code ?? 0,\n                });\n              });\n            } else {\n              const stdoutChunks: string[] = [];\n              const stderrChunks: string[] = [];\n              proc.stdout!.on(\"data\", (chunk: Buffer) => {\n                stdoutChunks.push(chunk.toString());\n              });\n              proc.stderr!.on(\"data\", (chunk: Buffer) => {\n                stderrChunks.push(chunk.toString());\n              });\n              proc.on(\"close\", (code) => {\n                resolve({\n                  stdout: stdoutChunks.join(\"\"),\n                  stderr: stderrChunks.join(\"\"),\n                  exitCode: code ?? 0,\n                });\n              });\n            }\n          });\n        },\n\n        interactiveExec: (\n          args: string[],\n          opts: InteractiveExecOptions,\n        ): Promise<{ exitCode: number }> => {\n          return new Promise((resolve, reject) => {\n            const dockerArgs = [\"exec\"];\n            // Allocate a pseudo-terminal when stdin looks like a TTY\n            if (\n              \"isTTY\" in opts.stdin &&\n              (opts.stdin as { isTTY?: boolean }).isTTY\n            ) {\n              dockerArgs.push(\"-it\");\n            } else {\n              dockerArgs.push(\"-i\");\n            }\n            if (opts.cwd) dockerArgs.push(\"-w\", opts.cwd);\n            dockerArgs.push(containerName, ...args);\n\n            const proc = spawn(\"docker\", dockerArgs, {\n              stdio: [opts.stdin, opts.stdout, opts.stderr] as StdioOptions,\n            });\n\n            proc.on(\"error\", (error: Error) => {\n              reject(new Error(`docker exec failed: ${error.message}`));\n            });\n\n            proc.on(\"close\", (code: number | null) => {\n              resolve({ exitCode: code ?? 0 });\n            });\n          });\n        },\n\n        copyFileIn: (hostPath: string, sandboxPath: string): Promise<void> =>\n          new Promise((resolve, reject) => {\n            execFile(\n              \"docker\",\n              [\"cp\", hostPath, `${containerName}:${sandboxPath}`],\n              (error) => {\n                if (error) {\n                  reject(new Error(`docker cp (in) failed: ${error.message}`));\n                } else {\n                  resolve();\n                }\n              },\n            );\n          }),\n\n        copyFileOut: (sandboxPath: string, hostPath: string): Promise<void> =>\n          new Promise((resolve, reject) => {\n            execFile(\n              \"docker\",\n              [\"cp\", `${containerName}:${sandboxPath}`, hostPath],\n              (error) => {\n                if (error) {\n                  reject(new Error(`docker cp (out) failed: ${error.message}`));\n                } else {\n                  resolve();\n                }\n              },\n            );\n          }),\n\n        close: async (): Promise<void> => {\n          unregisterShutdown();\n          await Effect.runPromise(removeContainer(containerName));\n        },\n      };\n\n      return handle;\n    },\n  });\n};\n\n// Re-export for backwards compatibility\nexport { defaultImageName };\n\nconst checkImageUid = (imageName: string, expectedUid: number): Promise<void> =>\n  new Promise<void>((resolve, reject) => {\n    execFile(\n      \"docker\",\n      [\"image\", \"inspect\", imageName, \"--format\", \"{{.Config.User}}\"],\n      (error, stdout) => {\n        if (error) {\n          reject(\n            new Error(\n              `Image '${imageName}' not found locally. Build it first with 'sandcastle docker build-image'.`,\n            ),\n          );\n          return;\n        }\n        const imageUser = (stdout ?? \"\").toString().trim();\n        if (!imageUser) {\n          // No USER directive in image — skip check\n          resolve();\n          return;\n        }\n        const uidPart = imageUser.split(\":\")[0]!;\n        const imageUid = parseInt(uidPart, 10);\n        if (isNaN(imageUid)) {\n          // Non-numeric user (e.g. \"agent\") — can't compare, skip check\n          resolve();\n          return;\n        }\n        if (imageUid !== expectedUid) {\n          reject(\n            new Error(\n              `UID mismatch: image '${imageName}' was built with UID ${imageUid}, ` +\n                `but the expected UID is ${expectedUid}. ` +\n                `Rebuild the image with 'sandcastle docker build-image', ` +\n                `or pass containerUid: ${imageUid} to docker() to match the image.`,\n            ),\n          );\n        } else {\n          resolve();\n        }\n      },\n    );\n  });\n"]}

package/dist/chunk-NGBM7T3E.js

@@ -0,0 +1,76 @@
+import { createRequire } from 'node:module';
+
+const require$1 = createRequire(import.meta.url);
+var __create = Object.create;
+var __defProp = Object.defineProperty;
+var __getOwnPropDesc = Object.getOwnPropertyDescriptor;
+var __getOwnPropNames = Object.getOwnPropertyNames;
+var __getProtoOf = Object.getPrototypeOf;
+var __hasOwnProp = Object.prototype.hasOwnProperty;
+var __require = /* @__PURE__ */ ((x) => typeof require$1 !== "undefined" ? require$1 : typeof Proxy !== "undefined" ? new Proxy(x, {
+  get: (a, b) => (typeof require$1 !== "undefined" ? require$1 : a)[b]
+}) : x)(function(x) {
+  if (typeof require$1 !== "undefined") return require$1.apply(this, arguments);
+  throw Error('Dynamic require of "' + x + '" is not supported');
+});
+var __commonJS = (cb, mod) => function __require2() {
+  return mod || (0, cb[__getOwnPropNames(cb)[0]])((mod = { exports: {} }).exports, mod), mod.exports;
+};
+var __export = (target, all) => {
+  for (var name in all)
+    __defProp(target, name, { get: all[name], enumerable: true });
+};
+var __copyProps = (to, from, except, desc) => {
+  if (from && typeof from === "object" || typeof from === "function") {
+    for (let key of __getOwnPropNames(from))
+      if (!__hasOwnProp.call(to, key) && key !== except)
+        __defProp(to, key, { get: () => from[key], enumerable: !(desc = __getOwnPropDesc(from, key)) || desc.enumerable });
+  }
+  return to;
+};
+var __reExport = (target, mod, secondTarget) => (__copyProps(target, mod, "default"), secondTarget && __copyProps(secondTarget, mod, "default"));
+var __toESM = (mod, isNodeMode, target) => (target = mod != null ? __create(__getProtoOf(mod)) : {}, __copyProps(
+  // If the importer is in node compatibility mode or this is not an ESM
+  // file that has been converted to a CommonJS file using a Babel-
+  // compatible transform (i.e. "__esModule" has not been set), then set
+  // "default" to the CommonJS "module.exports" for node compatibility.
+  isNodeMode || !mod || !mod.__esModule ? __defProp(target, "default", { value: mod, enumerable: true }) : target,
+  mod
+));
+
+// src/boundedTail.ts
+var MAX_TAIL_CHARS = 64 * 1024;
+var BoundedTail = class {
+  items = [];
+  totalChars = 0;
+  maxChars;
+  separator;
+  /**
+   * @param maxChars Maximum length of the joined tail. Defaults to {@link MAX_TAIL_CHARS}.
+   * @param separator String placed between items by {@link toString}. Must match
+   *   how the caller would otherwise have joined the accumulated chunks (e.g.
+   *   `"\n"` for line streams, `""` for raw chunk streams).
+   */
+  constructor(maxChars = MAX_TAIL_CHARS, separator = "") {
+    this.maxChars = maxChars;
+    this.separator = separator;
+  }
+  /** Append one item to the tail, evicting oldest items to stay within budget. */
+  push(item) {
+    const bounded = item.length > this.maxChars ? item.slice(item.length - this.maxChars) : item;
+    this.totalChars += bounded.length + (this.items.length > 0 ? this.separator.length : 0);
+    this.items.push(bounded);
+    while (this.totalChars > this.maxChars && this.items.length > 1) {
+      const dropped = this.items.shift();
+      this.totalChars -= dropped.length + this.separator.length;
+    }
+  }
+  /** Join the retained tail into a single string (length ≤ `maxChars`). */
+  toString() {
+    return this.items.join(this.separator);
+  }
+};
+
+export { BoundedTail, MAX_TAIL_CHARS, __commonJS, __export, __reExport, __require, __toESM };
+//# sourceMappingURL=chunk-NGBM7T3E.js.map
+//# sourceMappingURL=chunk-NGBM7T3E.js.map

package/dist/chunk-NGBM7T3E.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/boundedTail.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAmBO,IAAM,iBAAiB,EAAA,GAAK;AAa5B,IAAM,cAAN,MAAkB;AAAA,EACN,QAAkB,EAAC;AAAA,EAC5B,UAAA,GAAa,CAAA;AAAA,EACJ,QAAA;AAAA,EACA,SAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAQjB,WAAA,CAAY,QAAA,GAAmB,cAAA,EAAgB,SAAA,GAAY,EAAA,EAAI;AAC7D,IAAA,IAAA,CAAK,QAAA,GAAW,QAAA;AAChB,IAAA,IAAA,CAAK,SAAA,GAAY,SAAA;AAAA,EACnB;AAAA;AAAA,EAGA,KAAK,IAAA,EAAoB;AACvB,IAAA,MAAM,OAAA,GACJ,IAAA,CAAK,MAAA,GAAS,IAAA,CAAK,QAAA,GACf,IAAA,CAAK,KAAA,CAAM,IAAA,CAAK,MAAA,GAAS,IAAA,CAAK,QAAQ,CAAA,GACtC,IAAA;AACN,IAAA,IAAA,CAAK,UAAA,IACH,QAAQ,MAAA,IAAU,IAAA,CAAK,MAAM,MAAA,GAAS,CAAA,GAAI,IAAA,CAAK,SAAA,CAAU,MAAA,GAAS,CAAA,CAAA;AACpE,IAAA,IAAA,CAAK,KAAA,CAAM,KAAK,OAAO,CAAA;AACvB,IAAA,OAAO,KAAK,UAAA,GAAa,IAAA,CAAK,YAAY,IAAA,CAAK,KAAA,CAAM,SAAS,CAAA,EAAG;AAC/D,MAAA,MAAM,OAAA,GAAU,IAAA,CAAK,KAAA,CAAM,KAAA,EAAM;AACjC,MAAA,IAAA,CAAK,UAAA,IAAc,OAAA,CAAQ,MAAA,GAAS,IAAA,CAAK,SAAA,CAAU,MAAA;AAAA,IACrD;AAAA,EACF;AAAA;AAAA,EAGA,QAAA,GAAmB;AACjB,IAAA,OAAO,IAAA,CAAK,KAAA,CAAM,IAAA,CAAK,IAAA,CAAK,SAAS,CAAA;AAAA,EACvC;AACF","file":"chunk-NGBM7T3E.js","sourcesContent":["/**\n * A bounded, rolling tail of streamed output — a pure, provider-agnostic\n * utility shared by every sandbox provider that streams `exec` output.\n *\n * When a provider streams output line-by-line, it accumulates the stream only\n * to build the returned `ExecResult.stdout`/`stderr`. Consumers read just the\n * tail of that value (e.g. the last lines of an error, or a fallback for the\n * agent's final result), so retaining the whole stream is unnecessary — and,\n * once the accumulated string passes V8's ~512MB max string length, fatal: a\n * naive `chunks.join()` throws `RangeError: Invalid string length`, which on a\n * long agent run crashes the whole orchestration.\n */\n\n/**\n * Default maximum number of characters retained in a bounded output tail.\n *\n * 64KiB sits comfortably above any agent completion signal or structured-output\n * payload while staying far below V8's max string length.\n */\nexport const MAX_TAIL_CHARS = 64 * 1024;\n\n/**\n * A fixed-size rolling tail of strings, bounded by total character length.\n *\n * `push` appends to the tail; once the joined length would exceed `maxChars`,\n * the oldest items are dropped from the front. A single item longer than\n * `maxChars` is truncated to its own tail, so a newline-free blob can't\n * overflow on one push. `toString` joins the retained items, and its length is\n * always at most `maxChars`.\n *\n * The running length counter is encapsulated so callers can't desync it.\n */\nexport class BoundedTail {\n  private readonly items: string[] = [];\n  private totalChars = 0;\n  private readonly maxChars: number;\n  private readonly separator: string;\n\n  /**\n   * @param maxChars Maximum length of the joined tail. Defaults to {@link MAX_TAIL_CHARS}.\n   * @param separator String placed between items by {@link toString}. Must match\n   *   how the caller would otherwise have joined the accumulated chunks (e.g.\n   *   `\"\\n\"` for line streams, `\"\"` for raw chunk streams).\n   */\n  constructor(maxChars: number = MAX_TAIL_CHARS, separator = \"\") {\n    this.maxChars = maxChars;\n    this.separator = separator;\n  }\n\n  /** Append one item to the tail, evicting oldest items to stay within budget. */\n  push(item: string): void {\n    const bounded =\n      item.length > this.maxChars\n        ? item.slice(item.length - this.maxChars)\n        : item;\n    this.totalChars +=\n      bounded.length + (this.items.length > 0 ? this.separator.length : 0);\n    this.items.push(bounded);\n    while (this.totalChars > this.maxChars && this.items.length > 1) {\n      const dropped = this.items.shift()!;\n      this.totalChars -= dropped.length + this.separator.length;\n    }\n  }\n\n  /** Join the retained tail into a single string (length ≤ `maxChars`). */\n  toString(): string {\n    return this.items.join(this.separator);\n  }\n}\n"]}