@telorun/k8s-runner 0.6.0

package/dist/k8s/pod-spec.js

@@ -0,0 +1,146 @@
+/** Port the workload's `--inspect` server binds inside the session container.
+ *  Reached by the runner over the cluster pod network (`http://<podIP>:<port>`);
+ *  never declared as a Service port — only the runner relays the stream out. */
+export const INSPECT_PORT = 9230;
+const APP_DIR = "/app";
+const WORK_DIR = "/work";
+/** Baked, read-only deps (`telo install` output). Set via TELO_CACHE_DIR, NOT
+ *  mounted — it lives on the image rootfs, so `telo run --no-cache-write` reads
+ *  it without writing. */
+const DEPS_DIR = "/telo-cache";
+/** Writable HOME / npm scratch under a read-only rootfs. Separate from DEPS_DIR
+ *  (which is now read-only baked deps, not scratch). */
+const HOME_DIR = "/home/telo";
+const TMP_MOUNT = "/tmp";
+/**
+ * Builds the session Pod. Hardening that needs no RuntimeClass is always on
+ * (non-root, read-only rootfs, drop-all caps, no service-account token,
+ * seccomp RuntimeDefault); a sandbox RuntimeClass is layered on when configured.
+ *
+ * The body-delivery initContainer fetches the session bundle into the writable
+ * `/app` emptyDir; the session container runs `telo run /app/<entry>
+ * --no-cache-write` reading its deps from the baked, read-only `/telo-cache`.
+ * `readOnlyRootFilesystem` stays on — every write lands on a mounted emptyDir.
+ */
+export function buildSessionPod(args) {
+    const { config, limits } = args;
+    const resources = {
+        limits: {
+            cpu: limits.cpu,
+            memory: limits.memory,
+            "ephemeral-storage": limits.ephemeralStorage,
+        },
+        requests: {
+            cpu: limits.cpu,
+            memory: limits.memory,
+        },
+    };
+    const envVars = Object.entries(args.env).map(([name, value]) => ({ name, value }));
+    // Read deps from the baked, read-only `/telo-cache`; keep HOME/npm scratch on a
+    // separate writable emptyDir under the read-only root filesystem.
+    envVars.push({ name: "TELO_CACHE_DIR", value: DEPS_DIR });
+    envVars.push({ name: "HOME", value: HOME_DIR });
+    envVars.push({ name: "npm_config_cache", value: `${HOME_DIR}/.npm` });
+    envVars.push({ name: "FORCE_COLOR", value: "1" });
+    const pod = {
+        apiVersion: "v1",
+        kind: "Pod",
+        metadata: {
+            name: args.podName,
+            namespace: config.sessionNamespace,
+            labels: {
+                "app.kubernetes.io/managed-by": config.managedByLabel,
+                "telo.run/session-id": args.sessionId,
+            },
+        },
+        spec: {
+            restartPolicy: "Never",
+            activeDeadlineSeconds: limits.ttlSeconds,
+            automountServiceAccountToken: false,
+            // Pull the per-app image from a private registry. The Secret must exist in
+            // the session namespace (pull secrets are namespace-scoped).
+            ...(config.build.imagePullSecret
+                ? { imagePullSecrets: [{ name: config.build.imagePullSecret }] }
+                : {}),
+            ...(config.runtimeClass ? { runtimeClassName: config.runtimeClass } : {}),
+            securityContext: {
+                runAsNonRoot: true,
+                runAsUser: 1000,
+                runAsGroup: 1000,
+                fsGroup: 1000,
+                seccompProfile: { type: "RuntimeDefault" },
+            },
+            initContainers: [
+                {
+                    // Deliver the per-session body into the writable /app emptyDir. The
+                    // image bakes only the dependency closure, so the body arrives here.
+                    name: "body-fetch",
+                    image: config.initImage,
+                    command: ["sh", "-c"],
+                    args: [
+                        `set -e; wget -qO /tmp/body.tgz "${args.bundleUrl}"; tar xzf /tmp/body.tgz -C ${APP_DIR}`,
+                    ],
+                    volumeMounts: [
+                        { name: "app", mountPath: APP_DIR },
+                        { name: "tmp", mountPath: TMP_MOUNT },
+                    ],
+                    securityContext: hardenedContainerSecurity(),
+                },
+            ],
+            containers: [
+                {
+                    name: "session",
+                    image: args.image,
+                    // The per-app tag is an immutable content hash, so IfNotPresent lets
+                    // the kubelet reuse a node-cached layer across runs of the same app.
+                    imagePullPolicy: "IfNotPresent",
+                    // Run the delivered body by absolute path; `--no-cache-write` reads
+                    // the baked deps from TELO_CACHE_DIR and validates in-memory without
+                    // touching the read-only cache. WORK_DIR is a writable emptyDir cwd so
+                    // the workload's relative paths resolve under readOnlyRootFilesystem.
+                    workingDir: WORK_DIR,
+                    // 0.0.0.0 (not the CLI's loopback default) lets the runner reach the
+                    // debug server across the pod network; the port is never published.
+                    command: [
+                        "telo",
+                        "run",
+                        `${APP_DIR}/${args.entryRelativePath}`,
+                        "--no-cache-write",
+                        ...(args.inspect ? ["--inspect", `0.0.0.0:${INSPECT_PORT}`, "--no-open"] : []),
+                    ],
+                    env: envVars,
+                    stdin: true,
+                    stdinOnce: false,
+                    tty: true,
+                    ...(args.ports.length > 0
+                        ? { ports: args.ports.map((p) => ({ containerPort: p.port, protocol: p.protocol.toUpperCase() })) }
+                        : {}),
+                    resources,
+                    volumeMounts: [
+                        { name: "app", mountPath: APP_DIR },
+                        { name: "work", mountPath: WORK_DIR },
+                        { name: "home", mountPath: HOME_DIR },
+                        { name: "tmp", mountPath: TMP_MOUNT },
+                    ],
+                    securityContext: hardenedContainerSecurity(),
+                },
+            ],
+            volumes: [
+                { name: "app", emptyDir: {} },
+                { name: "work", emptyDir: {} },
+                { name: "home", emptyDir: {} },
+                { name: "tmp", emptyDir: {} },
+            ],
+        },
+    };
+    return pod;
+}
+function hardenedContainerSecurity() {
+    return {
+        allowPrivilegeEscalation: false,
+        readOnlyRootFilesystem: true,
+        runAsNonRoot: true,
+        capabilities: { drop: ["ALL"] },
+    };
+}
+//# sourceMappingURL=pod-spec.js.map

package/dist/k8s/pod-spec.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"pod-spec.js","sourceRoot":"","sources":["../../src/k8s/pod-spec.ts"],"names":[],"mappings":"AA4BA;;gFAEgF;AAChF,MAAM,CAAC,MAAM,YAAY,GAAG,IAAI,CAAC;AAEjC,MAAM,OAAO,GAAG,MAAM,CAAC;AACvB,MAAM,QAAQ,GAAG,OAAO,CAAC;AACzB;;0BAE0B;AAC1B,MAAM,QAAQ,GAAG,aAAa,CAAC;AAC/B;wDACwD;AACxD,MAAM,QAAQ,GAAG,YAAY,CAAC;AAC9B,MAAM,SAAS,GAAG,MAAM,CAAC;AAEzB;;;;;;;;;GASG;AACH,MAAM,UAAU,eAAe,CAAC,IAAkB;IAChD,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,GAAG,IAAI,CAAC;IAEhC,MAAM,SAAS,GAAG;QAChB,MAAM,EAAE;YACN,GAAG,EAAE,MAAM,CAAC,GAAG;YACf,MAAM,EAAE,MAAM,CAAC,MAAM;YACrB,mBAAmB,EAAE,MAAM,CAAC,gBAAgB;SAC7C;QACD,QAAQ,EAAE;YACR,GAAG,EAAE,MAAM,CAAC,GAAG;YACf,MAAM,EAAE,MAAM,CAAC,MAAM;SACtB;KACF,CAAC;IAEF,MAAM,OAAO,GAAG,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,EAAE,KAAK,CAAC,EAAE,EAAE,CAAC,CAAC,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC,CAAC;IACnF,gFAAgF;IAChF,kEAAkE;IAClE,OAAO,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,gBAAgB,EAAE,KAAK,EAAE,QAAQ,EAAE,CAAC,CAAC;IAC1D,OAAO,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,KAAK,EAAE,QAAQ,EAAE,CAAC,CAAC;IAChD,OAAO,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,kBAAkB,EAAE,KAAK,EAAE,GAAG,QAAQ,OAAO,EAAE,CAAC,CAAC;IACtE,OAAO,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,aAAa,EAAE,KAAK,EAAE,GAAG,EAAE,CAAC,CAAC;IAElD,MAAM,GAAG,GAAU;QACjB,UAAU,EAAE,IAAI;QAChB,IAAI,EAAE,KAAK;QACX,QAAQ,EAAE;YACR,IAAI,EAAE,IAAI,CAAC,OAAO;YAClB,SAAS,EAAE,MAAM,CAAC,gBAAgB;YAClC,MAAM,EAAE;gBACN,8BAA8B,EAAE,MAAM,CAAC,cAAc;gBACrD,qBAAqB,EAAE,IAAI,CAAC,SAAS;aACtC;SACF;QACD,IAAI,EAAE;YACJ,aAAa,EAAE,OAAO;YACtB,qBAAqB,EAAE,MAAM,CAAC,UAAU;YACxC,4BAA4B,EAAE,KAAK;YACnC,2EAA2E;YAC3E,6DAA6D;YAC7D,GAAG,CAAC,MAAM,CAAC,KAAK,CAAC,eAAe;gBAC9B,CAAC,CAAC,EAAE,gBAAgB,EAAE,CAAC,EAAE,IAAI,EAAE,MAAM,CAAC,KAAK,CAAC,eAAe,EAAE,CAAC,EAAE;gBAChE,CAAC,CAAC,EAAE,CAAC;YACP,GAAG,CAAC,MAAM,CAAC,YAAY,CAAC,CAAC,CAAC,EAAE,gBAAgB,EAAE,MAAM,CAAC,YAAY,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YACzE,eAAe,EAAE;gBACf,YAAY,EAAE,IAAI;gBAClB,SAAS,EAAE,IAAI;gBACf,UAAU,EAAE,IAAI;gBAChB,OAAO,EAAE,IAAI;gBACb,cAAc,EAAE,EAAE,IAAI,EAAE,gBAAgB,EAAE;aAC3C;YACD,cAAc,EAAE;gBACd;oBACE,oEAAoE;oBACpE,qEAAqE;oBACrE,IAAI,EAAE,YAAY;oBAClB,KAAK,EAAE,MAAM,CAAC,SAAS;oBACvB,OAAO,EAAE,CAAC,IAAI,EAAE,IAAI,CAAC;oBACrB,IAAI,EAAE;wBACJ,mCAAmC,IAAI,CAAC,SAAS,+BAA+B,OAAO,EAAE;qBAC1F;oBACD,YAAY,EAAE;wBACZ,EAAE,IAAI,EAAE,KAAK,EAAE,SAAS,EAAE,OAAO,EAAE;wBACnC,EAAE,IAAI,EAAE,KAAK,EAAE,SAAS,EAAE,SAAS,EAAE;qBACtC;oBACD,eAAe,EAAE,yBAAyB,EAAE;iBAC7C;aACF;YACD,UAAU,EAAE;gBACV;oBACE,IAAI,EAAE,SAAS;oBACf,KAAK,EAAE,IAAI,CAAC,KAAK;oBACjB,qEAAqE;oBACrE,qEAAqE;oBACrE,eAAe,EAAE,cAAc;oBAC/B,oEAAoE;oBACpE,qEAAqE;oBACrE,uEAAuE;oBACvE,sEAAsE;oBACtE,UAAU,EAAE,QAAQ;oBACpB,qEAAqE;oBACrE,oEAAoE;oBACpE,OAAO,EAAE;wBACP,MAAM;wBACN,KAAK;wBACL,GAAG,OAAO,IAAI,IAAI,CAAC,iBAAiB,EAAE;wBACtC,kBAAkB;wBAClB,GAAG,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,WAAW,EAAE,WAAW,YAAY,EAAE,EAAE,WAAW,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;qBAC/E;oBACD,GAAG,EAAE,OAAO;oBACZ,KAAK,EAAE,IAAI;oBACX,SAAS,EAAE,KAAK;oBAChB,GAAG,EAAE,IAAI;oBACT,GAAG,CAAC,IAAI,CAAC,KAAK,CAAC,MAAM,GAAG,CAAC;wBACvB,CAAC,CAAC,EAAE,KAAK,EAAE,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,EAAE,aAAa,EAAE,CAAC,CAAC,IAAI,EAAE,QAAQ,EAAE,CAAC,CAAC,QAAQ,CAAC,WAAW,EAAE,EAAE,CAAC,CAAC,EAAE;wBACnG,CAAC,CAAC,EAAE,CAAC;oBACP,SAAS;oBACT,YAAY,EAAE;wBACZ,EAAE,IAAI,EAAE,KAAK,EAAE,SAAS,EAAE,OAAO,EAAE;wBACnC,EAAE,IAAI,EAAE,MAAM,EAAE,SAAS,EAAE,QAAQ,EAAE;wBACrC,EAAE,IAAI,EAAE,MAAM,EAAE,SAAS,EAAE,QAAQ,EAAE;wBACrC,EAAE,IAAI,EAAE,KAAK,EAAE,SAAS,EAAE,SAAS,EAAE;qBACtC;oBACD,eAAe,EAAE,yBAAyB,EAAE;iBAC7C;aACF;YACD,OAAO,EAAE;gBACP,EAAE,IAAI,EAAE,KAAK,EAAE,QAAQ,EAAE,EAAE,EAAE;gBAC7B,EAAE,IAAI,EAAE,MAAM,EAAE,QAAQ,EAAE,EAAE,EAAE;gBAC9B,EAAE,IAAI,EAAE,MAAM,EAAE,QAAQ,EAAE,EAAE,EAAE;gBAC9B,EAAE,IAAI,EAAE,KAAK,EAAE,QAAQ,EAAE,EAAE,EAAE;aAC9B;SACF;KACF,CAAC;IAEF,OAAO,GAAG,CAAC;AACb,CAAC;AAED,SAAS,yBAAyB;IAChC,OAAO;QACL,wBAAwB,EAAE,KAAK;QAC/B,sBAAsB,EAAE,IAAI;QAC5B,YAAY,EAAE,IAAI;QAClB,YAAY,EAAE,EAAE,IAAI,EAAE,CAAC,KAAK,CAAC,EAAE;KAChC,CAAC;AACJ,CAAC"}

package/dist/limits.d.ts

@@ -0,0 +1,25 @@
+import type { LimitCeilings } from "./config.js";
+/**
+ * Effective per-session resource limits. Requests may ask for LESS than the
+ * ceiling but never MORE — `min(requested, ceiling)`. Without a control plane
+ * the editor talks to the runner directly, so a raisable limit would void the
+ * cap; clamp-down-only is the load-bearing invariant.
+ */
+export interface ResolvedLimits {
+    cpu: string;
+    memory: string;
+    ttlSeconds: number;
+    ephemeralStorage: string;
+}
+export interface RequestedLimits {
+    cpu?: string;
+    memory?: string;
+    ttlSeconds?: number;
+    ephemeralStorage?: string;
+}
+export declare function clampLimits(ceilings: LimitCeilings, requested: RequestedLimits | undefined): ResolvedLimits;
+/** CPU → millicores. "500m" → 500; "1" → 1000; "0.5" → 500. */
+export declare function parseCpuMillis(q: string): number | null;
+/** Memory/storage quantity → bytes. Supports binary (Ki/Mi/Gi) and SI (K/M/G). */
+export declare function parseMemoryBytes(q: string): number | null;
+//# sourceMappingURL=limits.d.ts.map

package/dist/limits.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"limits.d.ts","sourceRoot":"","sources":["../src/limits.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,aAAa,CAAC;AAEjD;;;;;GAKG;AACH,MAAM,WAAW,cAAc;IAC7B,GAAG,EAAE,MAAM,CAAC;IACZ,MAAM,EAAE,MAAM,CAAC;IACf,UAAU,EAAE,MAAM,CAAC;IACnB,gBAAgB,EAAE,MAAM,CAAC;CAC1B;AAED,MAAM,WAAW,eAAe;IAC9B,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,gBAAgB,CAAC,EAAE,MAAM,CAAC;CAC3B;AAED,wBAAgB,WAAW,CACzB,QAAQ,EAAE,aAAa,EACvB,SAAS,EAAE,eAAe,GAAG,SAAS,GACrC,cAAc,CAchB;AAgBD,+DAA+D;AAC/D,wBAAgB,cAAc,CAAC,CAAC,EAAE,MAAM,GAAG,MAAM,GAAG,IAAI,CAQvD;AAcD,kFAAkF;AAClF,wBAAgB,gBAAgB,CAAC,CAAC,EAAE,MAAM,GAAG,MAAM,GAAG,IAAI,CAUzD"}

package/dist/limits.js

@@ -0,0 +1,58 @@
+export function clampLimits(ceilings, requested) {
+    return {
+        cpu: clampQuantity(ceilings.cpu, requested?.cpu, parseCpuMillis),
+        memory: clampQuantity(ceilings.memory, requested?.memory, parseMemoryBytes),
+        ephemeralStorage: clampQuantity(ceilings.ephemeralStorage, requested?.ephemeralStorage, parseMemoryBytes),
+        ttlSeconds: requested?.ttlSeconds && requested.ttlSeconds > 0
+            ? Math.min(requested.ttlSeconds, ceilings.ttlSeconds)
+            : ceilings.ttlSeconds,
+    };
+}
+/** Returns `requested` only when it parses AND is <= ceiling; otherwise the
+ *  ceiling. Any unparseable/oversized request silently clamps to the cap. */
+function clampQuantity(ceiling, requested, parse) {
+    if (!requested)
+        return ceiling;
+    const r = parse(requested);
+    const c = parse(ceiling);
+    if (r === null || c === null)
+        return ceiling;
+    return r <= c ? requested : ceiling;
+}
+/** CPU → millicores. "500m" → 500; "1" → 1000; "0.5" → 500. */
+export function parseCpuMillis(q) {
+    const s = q.trim();
+    if (s.endsWith("m")) {
+        const n = Number(s.slice(0, -1));
+        return Number.isFinite(n) ? n : null;
+    }
+    const n = Number(s);
+    return Number.isFinite(n) ? Math.round(n * 1000) : null;
+}
+const MEMORY_SUFFIXES = {
+    Ki: 1024,
+    Mi: 1024 ** 2,
+    Gi: 1024 ** 3,
+    Ti: 1024 ** 4,
+    K: 1000,
+    M: 1000 ** 2,
+    G: 1000 ** 3,
+    T: 1000 ** 4,
+    k: 1000,
+};
+/** Memory/storage quantity → bytes. Supports binary (Ki/Mi/Gi) and SI (K/M/G). */
+export function parseMemoryBytes(q) {
+    const s = q.trim();
+    const match = /^(\d+(?:\.\d+)?)\s*([A-Za-z]+)?$/.exec(s);
+    if (!match)
+        return null;
+    const value = Number(match[1]);
+    if (!Number.isFinite(value))
+        return null;
+    const suffix = match[2];
+    if (!suffix)
+        return value;
+    const mult = MEMORY_SUFFIXES[suffix];
+    return mult ? value * mult : null;
+}
+//# sourceMappingURL=limits.js.map

package/dist/limits.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"limits.js","sourceRoot":"","sources":["../src/limits.ts"],"names":[],"mappings":"AAsBA,MAAM,UAAU,WAAW,CACzB,QAAuB,EACvB,SAAsC;IAEtC,OAAO;QACL,GAAG,EAAE,aAAa,CAAC,QAAQ,CAAC,GAAG,EAAE,SAAS,EAAE,GAAG,EAAE,cAAc,CAAC;QAChE,MAAM,EAAE,aAAa,CAAC,QAAQ,CAAC,MAAM,EAAE,SAAS,EAAE,MAAM,EAAE,gBAAgB,CAAC;QAC3E,gBAAgB,EAAE,aAAa,CAC7B,QAAQ,CAAC,gBAAgB,EACzB,SAAS,EAAE,gBAAgB,EAC3B,gBAAgB,CACjB;QACD,UAAU,EACR,SAAS,EAAE,UAAU,IAAI,SAAS,CAAC,UAAU,GAAG,CAAC;YAC/C,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,SAAS,CAAC,UAAU,EAAE,QAAQ,CAAC,UAAU,CAAC;YACrD,CAAC,CAAC,QAAQ,CAAC,UAAU;KAC1B,CAAC;AACJ,CAAC;AAED;6EAC6E;AAC7E,SAAS,aAAa,CACpB,OAAe,EACf,SAA6B,EAC7B,KAAmC;IAEnC,IAAI,CAAC,SAAS;QAAE,OAAO,OAAO,CAAC;IAC/B,MAAM,CAAC,GAAG,KAAK,CAAC,SAAS,CAAC,CAAC;IAC3B,MAAM,CAAC,GAAG,KAAK,CAAC,OAAO,CAAC,CAAC;IACzB,IAAI,CAAC,KAAK,IAAI,IAAI,CAAC,KAAK,IAAI;QAAE,OAAO,OAAO,CAAC;IAC7C,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,OAAO,CAAC;AACtC,CAAC;AAED,+DAA+D;AAC/D,MAAM,UAAU,cAAc,CAAC,CAAS;IACtC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,CAAC;IACnB,IAAI,CAAC,CAAC,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC;QACpB,MAAM,CAAC,GAAG,MAAM,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC;QACjC,OAAO,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;IACvC,CAAC;IACD,MAAM,CAAC,GAAG,MAAM,CAAC,CAAC,CAAC,CAAC;IACpB,OAAO,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;AAC1D,CAAC;AAED,MAAM,eAAe,GAA2B;IAC9C,EAAE,EAAE,IAAI;IACR,EAAE,EAAE,IAAI,IAAI,CAAC;IACb,EAAE,EAAE,IAAI,IAAI,CAAC;IACb,EAAE,EAAE,IAAI,IAAI,CAAC;IACb,CAAC,EAAE,IAAI;IACP,CAAC,EAAE,IAAI,IAAI,CAAC;IACZ,CAAC,EAAE,IAAI,IAAI,CAAC;IACZ,CAAC,EAAE,IAAI,IAAI,CAAC;IACZ,CAAC,EAAE,IAAI;CACR,CAAC;AAEF,kFAAkF;AAClF,MAAM,UAAU,gBAAgB,CAAC,CAAS;IACxC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,CAAC;IACnB,MAAM,KAAK,GAAG,kCAAkC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IACzD,IAAI,CAAC,KAAK;QAAE,OAAO,IAAI,CAAC;IACxB,MAAM,KAAK,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC;IAC/B,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC;QAAE,OAAO,IAAI,CAAC;IACzC,MAAM,MAAM,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC;IACxB,IAAI,CAAC,MAAM;QAAE,OAAO,KAAK,CAAC;IAC1B,MAAM,IAAI,GAAG,eAAe,CAAC,MAAM,CAAC,CAAC;IACrC,OAAO,IAAI,CAAC,CAAC,CAAC,KAAK,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC;AACpC,CAAC"}

package/dist/server.d.ts

@@ -0,0 +1,13 @@
+import { BaseImageCatalog, type RunnerBackend, type ServerHandle } from "@telorun/runner-core";
+import { BundleStore } from "./bundle-store.js";
+import { type K8sRunnerConfig } from "./config.js";
+export interface ServerDeps {
+    backend: RunnerBackend;
+    config: K8sRunnerConfig;
+    bundleStore: BundleStore;
+    /** Base-image catalog whose resolved list becomes the advertised `image`
+     *  enum + the server-side allowlist. Omitted → `image` locks to defaultImage. */
+    catalog?: BaseImageCatalog;
+}
+export declare function buildServer(deps: ServerDeps): Promise<ServerHandle>;
+//# sourceMappingURL=server.d.ts.map

package/dist/server.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"server.d.ts","sourceRoot":"","sources":["../src/server.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,gBAAgB,EAIhB,KAAK,aAAa,EAClB,KAAK,YAAY,EAElB,MAAM,sBAAsB,CAAC;AAG9B,OAAO,EAAE,WAAW,EAAE,MAAM,mBAAmB,CAAC;AAEhD,OAAO,EAA0C,KAAK,eAAe,EAAE,MAAM,aAAa,CAAC;AAM3F,MAAM,WAAW,UAAU;IACzB,OAAO,EAAE,aAAa,CAAC;IACvB,MAAM,EAAE,eAAe,CAAC;IACxB,WAAW,EAAE,WAAW,CAAC;IACzB;qFACiF;IACjF,OAAO,CAAC,EAAE,gBAAgB,CAAC;CAC5B;AAED,wBAAsB,WAAW,CAAC,IAAI,EAAE,UAAU,GAAG,OAAO,CAAC,YAAY,CAAC,CAyBzE"}

package/dist/server.js

@@ -0,0 +1,93 @@
+import { BaseImageCatalog, buildServer as coreBuildServer, loadTermsFromEnv, stopAllSessions, } from "@telorun/runner-core";
+import packageJson from "../package.json" with { type: "json" };
+import { BundleStore } from "./bundle-store.js";
+import { kubernetesRunnerCapabilities } from "./capabilities.js";
+import { loadK8sRunnerConfig, RunnerConfigError } from "./config.js";
+import { createKubernetesBackend } from "./k8s/backend.js";
+import { createKubeClient } from "./k8s/client.js";
+const VERSION = packageJson.version;
+export async function buildServer(deps) {
+    const { catalog } = deps;
+    // Load terms once; the capabilities getter is re-resolved per request so a
+    // refreshed catalog (new tags) shows up without restarting the runner.
+    const terms = loadTermsFromEnv(process.env);
+    const handle = await coreBuildServer({
+        backend: deps.backend,
+        config: deps.config,
+        version: VERSION,
+        capabilities: () => kubernetesRunnerCapabilities(deps.config.defaultImage, terms, catalog?.current()),
+        defaultRegistryUrl: process.env.TELO_REGISTRY_URL,
+        validateConfig: catalog
+            ? (sessionConfig) => catalog.isAllowed(sessionConfig.image)
+                ? undefined
+                : `base image '${sessionConfig.image}' is not offered by this runner. ` +
+                    `Allowed images: ${catalog.current().join(", ")}`
+            : undefined,
+    });
+    // Mount the internal, tokenized fetch route on the same app so a build Job's
+    // initContainer can pull the build-context tarball (bundle + Dockerfile).
+    deps.bundleStore.registerRoute(handle.app);
+    return handle;
+}
+async function main() {
+    let config;
+    try {
+        config = loadK8sRunnerConfig(process.env);
+    }
+    catch (err) {
+        if (err instanceof RunnerConfigError) {
+            process.stderr.write(`${err.message}\n`);
+            process.exit(2);
+        }
+        throw err;
+    }
+    const kube = createKubeClient();
+    const bundleStore = new BundleStore(config.selfUrl);
+    const backend = createKubernetesBackend({ kube, config, bundleStore });
+    const catalog = config.baseImageCatalog.enabled
+        ? new BaseImageCatalog({
+            repository: config.baseImageCatalog.repository,
+            defaultRef: config.defaultImage,
+            filter: config.baseImageCatalog.filter,
+            limit: config.baseImageCatalog.limit,
+            refreshIntervalMs: config.baseImageCatalog.refreshIntervalMs,
+        })
+        : undefined;
+    const { app, registry } = await buildServer({ backend, config, bundleStore, catalog });
+    // Populate the catalog before serving so the first /v1/capabilities carries the
+    // full menu; a fetch failure degrades to the default image (surfaced, not
+    // swallowed) and the periodic refresh retries.
+    if (catalog) {
+        await catalog
+            .refresh()
+            .catch((err) => app.log.warn({ err }, "initial base-image catalog refresh failed; serving default image only"));
+        catalog.start((err) => app.log.warn({ err }, "base-image catalog refresh failed"));
+    }
+    // Reap pods orphaned by a prior runner process (in-memory registry).
+    if (backend.reapOrphans) {
+        await backend.reapOrphans().catch((err) => app.log.warn({ err }, "orphan reap failed"));
+    }
+    try {
+        await app.listen({ port: config.port, host: "0.0.0.0" });
+    }
+    catch (err) {
+        app.log.error(err);
+        process.exit(1);
+    }
+    const shutdown = async (signal) => {
+        app.log.info({ signal }, "shutting down");
+        catalog?.stop();
+        for (const entry of registry.list())
+            entry.userStopped = true;
+        await app.close();
+        await stopAllSessions(registry, app.log);
+        process.exit(0);
+    };
+    process.on("SIGTERM", () => void shutdown("SIGTERM"));
+    process.on("SIGINT", () => void shutdown("SIGINT"));
+}
+const isEntrypoint = import.meta.url === `file://${process.argv[1]}`;
+if (isEntrypoint) {
+    void main();
+}
+//# sourceMappingURL=server.js.map

package/dist/server.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"server.js","sourceRoot":"","sources":["../src/server.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,gBAAgB,EAChB,WAAW,IAAI,eAAe,EAC9B,gBAAgB,EAChB,eAAe,GAIhB,MAAM,sBAAsB,CAAC;AAE9B,OAAO,WAAW,MAAM,iBAAiB,CAAC,OAAO,IAAI,EAAE,MAAM,EAAE,CAAC;AAChE,OAAO,EAAE,WAAW,EAAE,MAAM,mBAAmB,CAAC;AAChD,OAAO,EAAE,4BAA4B,EAAE,MAAM,mBAAmB,CAAC;AACjE,OAAO,EAAE,mBAAmB,EAAE,iBAAiB,EAAwB,MAAM,aAAa,CAAC;AAC3F,OAAO,EAAE,uBAAuB,EAAE,MAAM,kBAAkB,CAAC;AAC3D,OAAO,EAAE,gBAAgB,EAAE,MAAM,iBAAiB,CAAC;AAEnD,MAAM,OAAO,GAAW,WAAW,CAAC,OAAO,CAAC;AAW5C,MAAM,CAAC,KAAK,UAAU,WAAW,CAAC,IAAgB;IAChD,MAAM,EAAE,OAAO,EAAE,GAAG,IAAI,CAAC;IACzB,2EAA2E;IAC3E,uEAAuE;IACvE,MAAM,KAAK,GAAG,gBAAgB,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;IAE5C,MAAM,MAAM,GAAG,MAAM,eAAe,CAAC;QACnC,OAAO,EAAE,IAAI,CAAC,OAAO;QACrB,MAAM,EAAE,IAAI,CAAC,MAAM;QACnB,OAAO,EAAE,OAAO;QAChB,YAAY,EAAE,GAAG,EAAE,CACjB,4BAA4B,CAAC,IAAI,CAAC,MAAM,CAAC,YAAY,EAAE,KAAK,EAAE,OAAO,EAAE,OAAO,EAAE,CAAC;QACnF,kBAAkB,EAAE,OAAO,CAAC,GAAG,CAAC,iBAAiB;QACjD,cAAc,EAAE,OAAO;YACrB,CAAC,CAAC,CAAC,aAA4B,EAAsB,EAAE,CACnD,OAAO,CAAC,SAAS,CAAC,aAAa,CAAC,KAAK,CAAC;gBACpC,CAAC,CAAC,SAAS;gBACX,CAAC,CAAC,eAAe,aAAa,CAAC,KAAK,mCAAmC;oBACrE,mBAAmB,OAAO,CAAC,OAAO,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE;YACzD,CAAC,CAAC,SAAS;KACd,CAAC,CAAC;IACH,6EAA6E;IAC7E,0EAA0E;IAC1E,IAAI,CAAC,WAAW,CAAC,aAAa,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;IAC3C,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,KAAK,UAAU,IAAI;IACjB,IAAI,MAAuB,CAAC;IAC5B,IAAI,CAAC;QACH,MAAM,GAAG,mBAAmB,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;IAC5C,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,IAAI,GAAG,YAAY,iBAAiB,EAAE,CAAC;YACrC,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,GAAG,GAAG,CAAC,OAAO,IAAI,CAAC,CAAC;YACzC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QAClB,CAAC;QACD,MAAM,GAAG,CAAC;IACZ,CAAC;IAED,MAAM,IAAI,GAAG,gBAAgB,EAAE,CAAC;IAChC,MAAM,WAAW,GAAG,IAAI,WAAW,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;IACpD,MAAM,OAAO,GAAG,uBAAuB,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,WAAW,EAAE,CAAC,CAAC;IAEvE,MAAM,OAAO,GAAG,MAAM,CAAC,gBAAgB,CAAC,OAAO;QAC7C,CAAC,CAAC,IAAI,gBAAgB,CAAC;YACnB,UAAU,EAAE,MAAM,CAAC,gBAAgB,CAAC,UAAU;YAC9C,UAAU,EAAE,MAAM,CAAC,YAAY;YAC/B,MAAM,EAAE,MAAM,CAAC,gBAAgB,CAAC,MAAM;YACtC,KAAK,EAAE,MAAM,CAAC,gBAAgB,CAAC,KAAK;YACpC,iBAAiB,EAAE,MAAM,CAAC,gBAAgB,CAAC,iBAAiB;SAC7D,CAAC;QACJ,CAAC,CAAC,SAAS,CAAC;IAEd,MAAM,EAAE,GAAG,EAAE,QAAQ,EAAE,GAAG,MAAM,WAAW,CAAC,EAAE,OAAO,EAAE,MAAM,EAAE,WAAW,EAAE,OAAO,EAAE,CAAC,CAAC;IAEvF,gFAAgF;IAChF,0EAA0E;IAC1E,+CAA+C;IAC/C,IAAI,OAAO,EAAE,CAAC;QACZ,MAAM,OAAO;aACV,OAAO,EAAE;aACT,KAAK,CAAC,CAAC,GAAG,EAAE,EAAE,CACb,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,GAAG,EAAE,EAAE,uEAAuE,CAAC,CAC/F,CAAC;QACJ,OAAO,CAAC,KAAK,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,GAAG,EAAE,EAAE,mCAAmC,CAAC,CAAC,CAAC;IACrF,CAAC;IAED,qEAAqE;IACrE,IAAI,OAAO,CAAC,WAAW,EAAE,CAAC;QACxB,MAAM,OAAO,CAAC,WAAW,EAAE,CAAC,KAAK,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,GAAG,EAAE,EAAE,oBAAoB,CAAC,CAAC,CAAC;IAC1F,CAAC;IAED,IAAI,CAAC;QACH,MAAM,GAAG,CAAC,MAAM,CAAC,EAAE,IAAI,EAAE,MAAM,CAAC,IAAI,EAAE,IAAI,EAAE,SAAS,EAAE,CAAC,CAAC;IAC3D,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,GAAG,CAAC,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;QACnB,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAClB,CAAC;IAED,MAAM,QAAQ,GAAG,KAAK,EAAE,MAAc,EAAiB,EAAE;QACvD,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,EAAE,eAAe,CAAC,CAAC;QAC1C,OAAO,EAAE,IAAI,EAAE,CAAC;QAChB,KAAK,MAAM,KAAK,IAAI,QAAQ,CAAC,IAAI,EAAE;YAAE,KAAK,CAAC,WAAW,GAAG,IAAI,CAAC;QAC9D,MAAM,GAAG,CAAC,KAAK,EAAE,CAAC;QAClB,MAAM,eAAe,CAAC,QAAQ,EAAE,GAAG,CAAC,GAAG,CAAC,CAAC;QACzC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAClB,CAAC,CAAC;IAEF,OAAO,CAAC,EAAE,CAAC,SAAS,EAAE,GAAG,EAAE,CAAC,KAAK,QAAQ,CAAC,SAAS,CAAC,CAAC,CAAC;IACtD,OAAO,CAAC,EAAE,CAAC,QAAQ,EAAE,GAAG,EAAE,CAAC,KAAK,QAAQ,CAAC,QAAQ,CAAC,CAAC,CAAC;AACtD,CAAC;AAED,MAAM,YAAY,GAAG,MAAM,CAAC,IAAI,CAAC,GAAG,KAAK,UAAU,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC;AACrE,IAAI,YAAY,EAAE,CAAC;IACjB,KAAK,IAAI,EAAE,CAAC;AACd,CAAC"}

package/dist/tar.d.ts

@@ -0,0 +1,10 @@
+import { type RunBundle } from "@telorun/runner-core";
+/**
+ * Minimal ustar + gzip writer — enough to ship a Telo bundle to a busybox
+ * `tar xzf` initContainer without pulling a tar dependency. Bundle paths are
+ * re-normalized (traversal-guarded) before they enter the archive. Gzip runs
+ * async so a large, user-controlled bundle doesn't block the event loop (and
+ * the runner's HTTP handling) during session creation.
+ */
+export declare function makeBundleTarGz(bundle: RunBundle): Promise<Buffer>;
+//# sourceMappingURL=tar.d.ts.map

package/dist/tar.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"tar.d.ts","sourceRoot":"","sources":["../src/tar.ts"],"names":[],"mappings":"AAGA,OAAO,EAAuB,KAAK,SAAS,EAAE,MAAM,sBAAsB,CAAC;AAK3E;;;;;;GAMG;AACH,wBAAsB,eAAe,CAAC,MAAM,EAAE,SAAS,GAAG,OAAO,CAAC,MAAM,CAAC,CAgBxE"}

package/dist/tar.js

@@ -0,0 +1,63 @@
+import { gzip } from "node:zlib";
+import { promisify } from "node:util";
+import { normalizeBundlePath } from "@telorun/runner-core";
+const BLOCK = 512;
+const gzipAsync = promisify(gzip);
+/**
+ * Minimal ustar + gzip writer — enough to ship a Telo bundle to a busybox
+ * `tar xzf` initContainer without pulling a tar dependency. Bundle paths are
+ * re-normalized (traversal-guarded) before they enter the archive. Gzip runs
+ * async so a large, user-controlled bundle doesn't block the event loop (and
+ * the runner's HTTP handling) during session creation.
+ */
+export async function makeBundleTarGz(bundle) {
+    const blocks = [];
+    for (const file of bundle.files) {
+        const name = normalizeBundlePath(file.relativePath);
+        // ustar names are capped at 100 bytes; truncating would risk path
+        // collisions, so reject instead of silently shortening.
+        if (Buffer.byteLength(name, "utf8") > 100) {
+            throw new Error(`bundle path too long for tar (max 100 bytes): '${name}'`);
+        }
+        const content = Buffer.from(file.contents, "utf8");
+        blocks.push(makeHeader(name, content.byteLength));
+        blocks.push(padToBlock(content));
+    }
+    // Two zero blocks terminate the archive.
+    blocks.push(Buffer.alloc(BLOCK * 2));
+    return gzipAsync(Buffer.concat(blocks));
+}
+function makeHeader(name, size) {
+    const header = Buffer.alloc(BLOCK);
+    writeString(header, name, 0, 100);
+    writeOctal(header, 0o644, 100, 8); // mode
+    writeOctal(header, 0, 108, 8); // uid
+    writeOctal(header, 0, 116, 8); // gid
+    writeOctal(header, size, 124, 12); // size
+    writeOctal(header, 0, 136, 12); // mtime (0 — reproducible)
+    header.write("        ", 148, 8, "ascii"); // checksum placeholder (spaces)
+    header.write("0", 156, 1, "ascii"); // typeflag: regular file
+    header.write("ustar\0", 257, 6, "ascii"); // magic
+    header.write("00", 263, 2, "ascii"); // version
+    let sum = 0;
+    for (let i = 0; i < BLOCK; i++)
+        sum += header[i];
+    writeOctal(header, sum, 148, 8);
+    return header;
+}
+function padToBlock(content) {
+    const remainder = content.byteLength % BLOCK;
+    if (remainder === 0)
+        return content;
+    return Buffer.concat([content, Buffer.alloc(BLOCK - remainder)]);
+}
+function writeString(buf, value, offset, length) {
+    buf.write(value, offset, length, "utf8");
+}
+/** ustar numeric fields are zero-padded octal, NUL-terminated. */
+function writeOctal(buf, value, offset, length) {
+    const octal = value.toString(8);
+    const padded = octal.padStart(length - 1, "0").slice(-(length - 1));
+    buf.write(padded + "\0", offset, length, "ascii");
+}
+//# sourceMappingURL=tar.js.map

package/dist/tar.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"tar.js","sourceRoot":"","sources":["../src/tar.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AACjC,OAAO,EAAE,SAAS,EAAE,MAAM,WAAW,CAAC;AAEtC,OAAO,EAAE,mBAAmB,EAAkB,MAAM,sBAAsB,CAAC;AAE3E,MAAM,KAAK,GAAG,GAAG,CAAC;AAClB,MAAM,SAAS,GAAG,SAAS,CAAC,IAAI,CAAC,CAAC;AAElC;;;;;;GAMG;AACH,MAAM,CAAC,KAAK,UAAU,eAAe,CAAC,MAAiB;IACrD,MAAM,MAAM,GAAa,EAAE,CAAC;IAC5B,KAAK,MAAM,IAAI,IAAI,MAAM,CAAC,KAAK,EAAE,CAAC;QAChC,MAAM,IAAI,GAAG,mBAAmB,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC;QACpD,kEAAkE;QAClE,wDAAwD;QACxD,IAAI,MAAM,CAAC,UAAU,CAAC,IAAI,EAAE,MAAM,CAAC,GAAG,GAAG,EAAE,CAAC;YAC1C,MAAM,IAAI,KAAK,CAAC,kDAAkD,IAAI,GAAG,CAAC,CAAC;QAC7E,CAAC;QACD,MAAM,OAAO,GAAG,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC;QACnD,MAAM,CAAC,IAAI,CAAC,UAAU,CAAC,IAAI,EAAE,OAAO,CAAC,UAAU,CAAC,CAAC,CAAC;QAClD,MAAM,CAAC,IAAI,CAAC,UAAU,CAAC,OAAO,CAAC,CAAC,CAAC;IACnC,CAAC;IACD,yCAAyC;IACzC,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,KAAK,GAAG,CAAC,CAAC,CAAC,CAAC;IACrC,OAAO,SAAS,CAAC,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC;AAC1C,CAAC;AAED,SAAS,UAAU,CAAC,IAAY,EAAE,IAAY;IAC5C,MAAM,MAAM,GAAG,MAAM,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;IACnC,WAAW,CAAC,MAAM,EAAE,IAAI,EAAE,CAAC,EAAE,GAAG,CAAC,CAAC;IAClC,UAAU,CAAC,MAAM,EAAE,KAAK,EAAE,GAAG,EAAE,CAAC,CAAC,CAAC,CAAC,OAAO;IAC1C,UAAU,CAAC,MAAM,EAAE,CAAC,EAAE,GAAG,EAAE,CAAC,CAAC,CAAC,CAAC,MAAM;IACrC,UAAU,CAAC,MAAM,EAAE,CAAC,EAAE,GAAG,EAAE,CAAC,CAAC,CAAC,CAAC,MAAM;IACrC,UAAU,CAAC,MAAM,EAAE,IAAI,EAAE,GAAG,EAAE,EAAE,CAAC,CAAC,CAAC,OAAO;IAC1C,UAAU,CAAC,MAAM,EAAE,CAAC,EAAE,GAAG,EAAE,EAAE,CAAC,CAAC,CAAC,2BAA2B;IAC3D,MAAM,CAAC,KAAK,CAAC,UAAU,EAAE,GAAG,EAAE,CAAC,EAAE,OAAO,CAAC,CAAC,CAAC,gCAAgC;IAC3E,MAAM,CAAC,KAAK,CAAC,GAAG,EAAE,GAAG,EAAE,CAAC,EAAE,OAAO,CAAC,CAAC,CAAC,yBAAyB;IAC7D,MAAM,CAAC,KAAK,CAAC,SAAS,EAAE,GAAG,EAAE,CAAC,EAAE,OAAO,CAAC,CAAC,CAAC,QAAQ;IAClD,MAAM,CAAC,KAAK,CAAC,IAAI,EAAE,GAAG,EAAE,CAAC,EAAE,OAAO,CAAC,CAAC,CAAC,UAAU;IAE/C,IAAI,GAAG,GAAG,CAAC,CAAC;IACZ,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,KAAK,EAAE,CAAC,EAAE;QAAE,GAAG,IAAI,MAAM,CAAC,CAAC,CAAE,CAAC;IAClD,UAAU,CAAC,MAAM,EAAE,GAAG,EAAE,GAAG,EAAE,CAAC,CAAC,CAAC;IAChC,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,SAAS,UAAU,CAAC,OAAe;IACjC,MAAM,SAAS,GAAG,OAAO,CAAC,UAAU,GAAG,KAAK,CAAC;IAC7C,IAAI,SAAS,KAAK,CAAC;QAAE,OAAO,OAAO,CAAC;IACpC,OAAO,MAAM,CAAC,MAAM,CAAC,CAAC,OAAO,EAAE,MAAM,CAAC,KAAK,CAAC,KAAK,GAAG,SAAS,CAAC,CAAC,CAAC,CAAC;AACnE,CAAC;AAED,SAAS,WAAW,CAAC,GAAW,EAAE,KAAa,EAAE,MAAc,EAAE,MAAc;IAC7E,GAAG,CAAC,KAAK,CAAC,KAAK,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,CAAC,CAAC;AAC3C,CAAC;AAED,kEAAkE;AAClE,SAAS,UAAU,CAAC,GAAW,EAAE,KAAa,EAAE,MAAc,EAAE,MAAc;IAC5E,MAAM,KAAK,GAAG,KAAK,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC;IAChC,MAAM,MAAM,GAAG,KAAK,CAAC,QAAQ,CAAC,MAAM,GAAG,CAAC,EAAE,GAAG,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC;IACpE,GAAG,CAAC,KAAK,CAAC,MAAM,GAAG,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,OAAO,CAAC,CAAC;AACpD,CAAC"}

package/package.json

@@ -0,0 +1,41 @@
+{
+  "name": "@telorun/k8s-runner",
+  "version": "0.6.0",
+  "description": "Telo Kubernetes Runner - HTTP service that runs Telo Applications as sandboxed Kubernetes Pods. A backend over @telorun/runner-core, sibling to docker-runner.",
+  "keywords": [
+    "telo",
+    "kubernetes",
+    "runner"
+  ],
+  "author": "Bartosz Pasiński <bartosz.pasinski@codenet.pl>",
+  "license": "SEE LICENSE IN LICENSE",
+  "repository": {
+    "type": "git",
+    "url": "git+https://github.com/telorun/telo.git",
+    "directory": "apps/k8s-runner"
+  },
+  "type": "module",
+  "main": "./dist/server.js",
+  "files": [
+    "dist/**",
+    "src/**"
+  ],
+  "dependencies": {
+    "@kubernetes/client-node": "^1.4.0",
+    "fastify": "^5.7.2",
+    "@telorun/runner-core": "0.5.2"
+  },
+  "devDependencies": {
+    "@types/node": "^20.0.0",
+    "tsx": "^4.19.2",
+    "typescript": "^5.0.0",
+    "vitest": "^2.1.8"
+  },
+  "scripts": {
+    "build": "tsc",
+    "dev": "tsx watch src/server.ts",
+    "start": "node dist/server.js",
+    "test": "vitest run",
+    "test:watch": "vitest"
+  }
+}

package/src/bundle-store.ts

@@ -0,0 +1,101 @@
+import { randomBytes, timingSafeEqual } from "node:crypto";
+
+import type { FastifyInstance } from "fastify";
+import type { RunBundle } from "@telorun/runner-core";
+
+import { makeBundleTarGz } from "./tar.js";
+
+interface StoredBundle {
+  token: string;
+  tarGz: Buffer;
+  evictTimer: NodeJS.Timeout;
+}
+
+/** Staged bundles are dropped after this long even if never fetched, so a
+ *  stuck/never-started Pod can't grow the store unbounded. */
+const STAGING_TTL_MS = 5 * 60 * 1000;
+
+/**
+ * Holds image-build contexts in memory and serves them over a tokenized,
+ * cluster-internal URL the build Job's initContainer fetches once. The
+ * per-build unguessable token prevents cross-build disclosure; the entry is
+ * dropped after first fetch (or explicitly on cleanup).
+ */
+export class BundleStore {
+  private readonly bundles = new Map<string, StoredBundle>();
+
+  constructor(private readonly selfUrl: string) {}
+
+  /**
+   * Stages an image-build context — the bundle plus a generated `Dockerfile` at
+   * the context root — and returns the tokenized, single-use URL the build Job's
+   * initContainer fetches. Keyed by `id` (a build id).
+   */
+  async stageBuildContext(id: string, bundle: RunBundle, dockerfile: string): Promise<string> {
+    return this.stage(id, {
+      entryRelativePath: bundle.entryRelativePath,
+      files: [...bundle.files, { relativePath: "Dockerfile", contents: dockerfile }],
+    });
+  }
+
+  /**
+   * Stages the raw session bundle (no Dockerfile) and returns the tokenized,
+   * single-use URL the session Pod's body-delivery initContainer fetches into
+   * `/app`. Keyed by `sessionId`. The image is keyed only on the dependency
+   * closure, so the per-session body is delivered here at boot rather than baked.
+   */
+  async stageSessionBundle(sessionId: string, bundle: RunBundle): Promise<string> {
+    return this.stage(sessionId, bundle);
+  }
+
+  private async stage(id: string, bundle: RunBundle): Promise<string> {
+    this.drop(id);
+    const token = randomBytes(24).toString("hex");
+    const tarGz = await makeBundleTarGz(bundle);
+    const evictTimer = setTimeout(() => this.bundles.delete(id), STAGING_TTL_MS);
+    evictTimer.unref?.();
+    this.bundles.set(id, { token, tarGz, evictTimer });
+    return `${this.selfUrl}/internal/bundles/${id}?token=${token}`;
+  }
+
+  drop(sessionId: string): void {
+    const existing = this.bundles.get(sessionId);
+    if (existing) clearTimeout(existing.evictTimer);
+    this.bundles.delete(sessionId);
+  }
+
+  private take(sessionId: string, token: string): Buffer | null {
+    const stored = this.bundles.get(sessionId);
+    if (!stored) return null;
+    if (!constantTimeEqual(stored.token, token)) return null;
+    // Single-use: drop after a successful authenticated fetch.
+    this.drop(sessionId);
+    return stored.tarGz;
+  }
+
+  /** Registers `GET /internal/bundles/:id` on the runner's Fastify app. */
+  registerRoute(app: FastifyInstance): void {
+    app.get<{ Params: { id: string }; Querystring: { token?: string } }>(
+      "/internal/bundles/:id",
+      async (req, reply) => {
+        const token = req.query.token ?? "";
+        const tarGz = this.take(req.params.id, token);
+        if (!tarGz) {
+          reply.code(404).send({ error: "not_found" });
+          return;
+        }
+        reply
+          .header("content-type", "application/gzip")
+          .header("cache-control", "no-store")
+          .send(tarGz);
+      },
+    );
+  }
+}
+
+function constantTimeEqual(a: string, b: string): boolean {
+  const ab = Buffer.from(a);
+  const bb = Buffer.from(b);
+  if (ab.byteLength !== bb.byteLength) return false;
+  return timingSafeEqual(ab, bb);
+}

package/src/capabilities.ts

@@ -0,0 +1,40 @@
+import {
+  sessionConfigSchema,
+  type RunnerCapabilities,
+  type RunnerTerms,
+} from "@telorun/runner-core";
+
+/** What k8s-runner advertises on `/v1/capabilities`. The runner serves
+ *  untrusted/anonymous code under a hard-ceiling policy. `image` is a base-image
+ *  picker: when an `imageEnum` is supplied (the resolved Docker Hub catalog) the
+ *  editor renders an editable dropdown constrained to that allowlist — which the
+ *  session route re-validates server-side. Without a catalog (disabled /
+ *  first-fetch failure) the list collapses to the single `defaultImage` (locked
+ *  via `enforced`). `pullPolicy` is client-editable: `always` re-pulls the base
+ *  image when its tag has moved upstream (rebuilding the per-app image), which
+ *  is how a picked moving tag like `latest-slim` stays current.
+ *
+ *  `terms`, when set (operator-provided via RUNNER_TERMS_*), are enforced: a
+ *  session won't start until the client acknowledges the current version. */
+export function kubernetesRunnerCapabilities(
+  defaultImage: string,
+  terms?: RunnerTerms,
+  imageEnum?: string[],
+): RunnerCapabilities {
+  return {
+    displayName: "Telo Public Cloud",
+    description:
+      "Runs the Telo application in sandboxed cloud environment with capped CPU and memory.",
+    config: {
+      schema: sessionConfigSchema({
+        imageDefault: defaultImage,
+        enforced: true,
+        imageEnum,
+        pullPolicyDescription:
+          "Base-image freshness. `always` rebuilds the session image when the base tag has moved upstream (Docker Hub only); `missing` and `never` reuse the cached build.",
+      }),
+    },
+    features: { io: true, ports: true },
+    terms,
+  };
+}