cdk-local 0.149.5 → 0.149.7

package/dist/cli.js

@@ -1,10 +1,10 @@
 #!/usr/bin/env node
-import { D as createLocalStartAgentCoreCommand, F as createLocalStartCloudFrontCommand, Mn as createLocalInvokeCommand, Ot as createLocalStartServiceCommand, Pn as createLocalStartApiCommand, St as createLocalStartAlbCommand, a as createLocalStudioCommand, jt as createLocalRunTaskCommand, sn as createLocalInvokeAgentCoreCommand, w as createLocalListCommand } from "./local-studio-CV21zLBM.js";
+import { D as createLocalStartAgentCoreCommand, F as createLocalStartCloudFrontCommand, Mn as createLocalInvokeCommand, Ot as createLocalStartServiceCommand, Pn as createLocalStartApiCommand, St as createLocalStartAlbCommand, a as createLocalStudioCommand, jt as createLocalRunTaskCommand, sn as createLocalInvokeAgentCoreCommand, w as createLocalListCommand } from "./local-studio-U-gD2HSf.js";
 import { Command } from "commander";
 
 //#region src/cli/index.ts
 const program = new Command();
-program.name("cdkl").description("Run AWS CDK stacks locally with Docker.").version("0.149.5");
+program.name("cdkl").description("Run AWS CDK stacks locally with Docker.").version("0.149.7");
 program.addCommand(createLocalInvokeCommand());
 program.addCommand(createLocalInvokeAgentCoreCommand());
 program.addCommand(createLocalStartApiCommand());

package/dist/{docker-cmd-B5yU__zC.js → docker-cmd-leyvDn1u.js}

@@ -1109,11 +1109,16 @@ function displayUntrustedValue(value) {
 //#endregion
 //#region src/utils/docker-cmd.ts
 var docker_cmd_exports = /* @__PURE__ */ __exportAll({
+	DOCKER_CLIENT_ENV_KEYS: () => DOCKER_CLIENT_ENV_KEYS,
+	DOCKER_CLIENT_ENV_PREFIXES: () => DOCKER_CLIENT_ENV_PREFIXES,
+	DOCKER_CLIENT_ENV_PREFIX_EXEMPTIONS: () => DOCKER_CLIENT_ENV_PREFIX_EXEMPTIONS,
 	allowSecretsOnArgvEnvName: () => allowSecretsOnArgvEnvName,
 	finchSecretArgvRefusal: () => finchSecretArgvRefusal,
 	formatDockerLoginError: () => formatDockerLoginError,
 	getDockerCmd: () => getDockerCmd,
+	isDockerClientEnvKey: () => isDockerClientEnvKey,
 	isFinchVmClient: () => isFinchVmClient,
+	isMalformedEnvKey: () => isMalformedEnvKey,
 	runDockerForeground: () => runDockerForeground,
 	runDockerStreaming: () => runDockerStreaming,
 	spawnForeground: () => spawnForeground,
@@ -1423,7 +1428,232 @@ function mergeEnv(overrides) {
 	else merged[k] = v;
 	return merged;
 }
+/**
+* Env vars the container CLI itself reads to decide how / where to run — the
+* binary {@link getDockerCmd} resolves, i.e. `docker` or whatever `CDK_DOCKER`
+* names (podman / nerdctl / finch). A resolved ECS secret (or SecureString)
+* whose NAME collides with one of these must NOT override it in the client's
+* own process environment: a secret named `DOCKER_HOST` (or podman's
+* `CONTAINER_HOST`) would redirect the client to a different daemon, and `PATH`
+* would break locating the binary. See issues
+* go-to-k/cdkd#2183 and go-to-k/cdkd#2188.
+*
+* Ported from cdkd's `src/utils/docker-cmd.ts` (go-to-k/cdk-local#772) with its
+* lists, prefix families and rationale intact; issue references in these
+* comments point at cdkd, where each entry was decided. Keep the two copies
+* in sync.
+*
+* RULE for additions: anything a supported container CLIENT (or a credential /
+* connection helper it execs) reads to decide WHAT CODE IT LOADS, WHAT IT
+* TRUSTS, or WHERE / HOW IT CONNECTS. The docker CLI's documented set is kept
+* whole, behaviour toggles included; beyond it, a var that only tunes
+* behaviour (a storage driver, a snapshotter, a temp dir, an experimental
+* toggle) is OUT, because dropping a colliding secret costs the user that
+* secret. The operator's OWN value is never touched — the spawn
+* env starts from `process.env` — so adding a key costs only a secret of that
+* name.
+*/
+const DOCKER_CLIENT_ENV_KEYS = /* @__PURE__ */ new Set([
+	"PATH",
+	"PATHEXT",
+	"HOME",
+	"USERPROFILE",
+	"HOMEDRIVE",
+	"HOMEPATH",
+	"DOCKER_HOST",
+	"DOCKER_CONTEXT",
+	"DOCKER_CONFIG",
+	"DOCKER_CERT_PATH",
+	"DOCKER_TLS",
+	"DOCKER_TLS_VERIFY",
+	"DOCKER_API_VERSION",
+	"DOCKER_AUTH_CONFIG",
+	"DOCKER_DEFAULT_PLATFORM",
+	"DOCKER_CUSTOM_HEADERS",
+	"DOCKER_CONTENT_TRUST",
+	"DOCKER_CONTENT_TRUST_SERVER",
+	"DOCKER_HIDE_LEGACY_COMMANDS",
+	"BUILDKIT_PROGRESS",
+	"GLIBC_TUNABLES",
+	"GCONV_PATH",
+	"BASH_ENV",
+	"SHELLOPTS",
+	"PS4",
+	"PYTHONPATH",
+	"PYTHONHOME",
+	"PYTHONUSERBASE",
+	"PYTHONPYCACHEPREFIX",
+	"PYTHONPLATLIBDIR",
+	"PYTHONWARNINGS",
+	"BROWSER",
+	"REQUESTS_CA_BUNDLE",
+	"CURL_CA_BUNDLE",
+	"HTTPLIB2_CA_CERTS",
+	"SSLKEYLOGFILE",
+	"GCE_METADATA_HOST",
+	"GCE_METADATA_ROOT",
+	"GCE_METADATA_IP",
+	"NODE_OPTIONS",
+	"NODE_PATH",
+	"NODE_COMPILE_CACHE",
+	"NODE_EXTRA_CA_CERTS",
+	"NODE_TLS_REJECT_UNAUTHORIZED",
+	"RUBYOPT",
+	"RUBYLIB",
+	"GEM_PATH",
+	"GEM_HOME",
+	"RUBYGEMS_GEMDEPS",
+	"PERL5OPT",
+	"PERL5LIB",
+	"PERLLIB",
+	"PERL5DB",
+	"OPENSSL_CONF",
+	"OPENSSL_MODULES",
+	"OPENSSL_ENGINES",
+	"SSH_AUTH_SOCK",
+	"SSH_ASKPASS",
+	"SSH_ASKPASS_REQUIRE",
+	"SSH_SK_HELPER",
+	"SSH_SK_PROVIDER",
+	"SSH_PKCS11_HELPER",
+	"SSH_AGENT_PID",
+	"AWS_ENDPOINT_URL",
+	"AWS_CA_BUNDLE",
+	"AWS_PROFILE",
+	"AWS_CONFIG_FILE",
+	"AWS_SHARED_CREDENTIALS_FILE",
+	"AWS_WEB_IDENTITY_TOKEN_FILE",
+	"AWS_CONTAINER_CREDENTIALS_FULL_URI",
+	"AWS_ROLE_ARN",
+	"AWS_EC2_METADATA_SERVICE_ENDPOINT",
+	"AWS_ECR_CACHE_DIR",
+	"CONTAINER_HOST",
+	"CONTAINER_CONNECTION",
+	"CONTAINER_SSHKEY",
+	"PODMAN_CONNECTIONS_CONF",
+	"CONTAINER_PROXY",
+	"CONTAINERS_SSH_CONF",
+	"CONTAINERS_CONF",
+	"CONTAINERS_CONF_OVERRIDE",
+	"CONTAINERS_REGISTRIES_CONF",
+	"CONTAINERS_REGISTRIES_CONF_OVERRIDE",
+	"REGISTRIES_CONFIG_PATH",
+	"CONTAINERS_STORAGE_CONF",
+	"CONTAINERS_STORAGE_CONF_OVERRIDE",
+	"CONTAINERS_POLICY_JSON",
+	"STORAGE_OPTS",
+	"CONTAINERS_HELPER_BINARY_DIR",
+	"REGISTRY_AUTH_FILE",
+	"DBUS_SESSION_BUS_ADDRESS",
+	"NOTIFY_SOCKET",
+	"XDG_CONFIG_HOME",
+	"XDG_RUNTIME_DIR",
+	"APPDATA",
+	"PROGRAMDATA",
+	"PROGRAMFILES",
+	"LOCALAPPDATA",
+	"SSH",
+	"CONTAINERD_ADDRESS",
+	"CONTAINERD_NAMESPACE",
+	"NERDCTL_TOML",
+	"CNI_PATH",
+	"NETCONFPATH",
+	"ROOTLESSKIT_STATE_DIR",
+	"NERDCTL_LOG_FILE",
+	"SSL_CERT_FILE",
+	"SSL_CERT_DIR",
+	"GODEBUG",
+	"HTTP_PROXY",
+	"HTTPS_PROXY",
+	"NO_PROXY",
+	"FTP_PROXY",
+	"ALL_PROXY"
+]);
+const DOCKER_CLIENT_ENV_KEYS_UPPER = new Set([...DOCKER_CLIENT_ENV_KEYS].map((k) => k.toUpperCase()));
+/**
+* Env-var prefixes whose WHOLE family the docker client (or a helper it execs)
+* reads, so a NAMED list is always one release behind and a colliding secret in
+* ANY member is a hazard. `LD_*` / `DYLD_*` are the dynamic loader (code
+* injection, glibc + macOS); `AWS_ENDPOINT_URL_*` is the per-service endpoint
+* family aws-sdk-go-v2 (and so `docker-credential-ecr-login`) honours — a
+* secret named `AWS_ENDPOINT_URL_ECR` walks around the exact
+* `AWS_ENDPOINT_URL` entry and redirects a request signed with the operator's
+* real credentials (go-to-k/cdkd#2186 round 4). `CLOUDSDK_` is gcloud's (go-to-k/cdkd#3599): every
+* gcloud property is settable as `CLOUDSDK_<SECTION>_<NAME>`, which covers
+* its token host, API endpoint overrides, proxy, CA bundle and account, and
+* the `docker-credential-gcloud` wrapper execs `$CLOUDSDK_PYTHON
+* $CLOUDSDK_PYTHON_ARGS`. `BASH_FUNC_` is bash's exported-function family.
+* No plausible secret name collides with these, apart from the one listed in
+* {@link DOCKER_CLIENT_ENV_PREFIX_EXEMPTIONS}. Matched by prefix rather than
+* enumerated (issue go-to-k/cdkd#2183 review). `SSH_` was a prefix here and was demoted to
+* an EXACT enumeration in {@link DOCKER_CLIENT_ENV_KEYS} (go-to-k/cdkd#2186 review round
+* 3): the family is not
+* uniformly dangerous and is not growing, while the prefix broke realistic,
+* currently-working secrets (`SSH_PRIVATE_KEY`, GitLab CI's canonical
+* deploy-key spelling). Exported so the test fence can assert the EXACT
+* contents — a hardcoded copy in the test made the anti-shadowing fence
+* one-directional (go-to-k/cdkd#2186 round 4 finding 2).
+*/
+const DOCKER_CLIENT_ENV_PREFIXES = [
+	"LD_",
+	"DYLD_",
+	"AWS_ENDPOINT_URL_",
+	"CLOUDSDK_",
+	"BASH_FUNC_"
+];
+/**
+* Exact names inside a {@link DOCKER_CLIENT_ENV_PREFIXES} family that are still
+* delivered. An entry must be a realistic secret name AND harmless to the
+* helper that reads it. `CLOUDSDK_AUTH_ACCESS_TOKEN` is gcloud's own variable
+* for a caller-supplied access token (go-to-k/cdkd#3599). Given to `docker-credential-gcloud`,
+* it only changes which token gcloud hands docker, with no network call of its
+* own. gcloud's `auth docker-helper` answers only for a registry in its own
+* supported list unless `artifacts/allow_unrecognized_registry` is set, and
+* that property, the token host, the universe domain and every other variable
+* that could redirect or weaken the exchange stay refused by the `CLOUDSDK_`
+* prefix. Stored upper-case and matched case-insensitively. Never exempt an
+* exact {@link DOCKER_CLIENT_ENV_KEYS} member: the exact list wins.
+*/
+const DOCKER_CLIENT_ENV_PREFIX_EXEMPTIONS = /* @__PURE__ */ new Set(["CLOUDSDK_AUTH_ACCESS_TOKEN"]);
+/**
+* Is `key` the name of a var the docker client reads? Case-INSENSITIVE, because
+* Windows environment lookups are, so a lowercase `docker_host` must be caught
+* too (issue go-to-k/cdkd#2183). Matches the exact denylist OR a prefixed family — the
+* prefix families are fail-closed on the whole prefix, so an unlisted `LD_*` /
+* `DYLD_*` / `AWS_ENDPOINT_URL_*` / `CLOUDSDK_*` / `BASH_FUNC_*` secret is
+* dropped (with a rename warning) rather than reaching the client, except for
+* a name in {@link DOCKER_CLIENT_ENV_PREFIX_EXEMPTIONS}.
+*/
+function isDockerClientEnvKey(key) {
+	const upper = key.toUpperCase();
+	if (DOCKER_CLIENT_ENV_KEYS_UPPER.has(upper)) return true;
+	if (DOCKER_CLIENT_ENV_PREFIX_EXEMPTIONS.has(upper)) return false;
+	return DOCKER_CLIENT_ENV_PREFIXES.some((prefix) => upper.startsWith(prefix));
+}
+/**
+* A well-formed `docker run -e` variable NAME: non-empty, and containing
+* neither `=` (the OS parses the environ entry's name as everything before the
+* first one) nor NUL (Node refuses to spawn). A newline IS accepted, because it
+* is inside the class — not because of the anchor: JS `$` without the `m` flag
+* matches only at end of input (`/^abc$/.test('abc\n') === false`). That
+* matches the clause list this replaced, i.e. deliberately not stricter.
+*/
+const WELL_FORMED_ENV_KEY = /^[^=\u0000]+$/;
+/**
+* Is `key` a shape that cannot be a well-formed `docker run -e` variable NAME?
+* Defined POSITIVELY as {@link WELL_FORMED_ENV_KEY}'s complement (go-to-k/cdkd#2186 rounds
+* 5-6). Enumerating the bad spellings one at a time closed `=` in round 4 and
+* left the empty key (`-e ''` — docker rejects it with an opaque error naming
+* no secret) and a NUL-bearing key still open; the complement closes any
+* further bad shape without another clause. A sensitive key matching this
+* takes the same fail-closed
+* collision path as a docker-client-var name: no `-e` flag, no spawn-env entry,
+* reported in `collisions`. (This is the NAME only.)
+*/
+function isMalformedEnvKey(key) {
+	return !WELL_FORMED_ENV_KEY.test(key);
+}
 
 //#endregion
-export { resolveConfiguredLogLevel as C, setEmbedConfig as E, getLogger as S, resetEmbedConfig as T, describeCredentialLoadFailure as _, runDockerForeground as a, sanitizeServiceExceptionMessage as b, warnFinchArgvExposure as c, displayUntrustedValue as d, namesTheSameDirectory as f, describeAwsFailureForWarn as g, clampErrorName as h, getDockerCmd as i, absoluteAssemblyPathEscape as l, resolveAssemblyPath as m, finchSecretArgvRefusal as n, runDockerStreaming as o, renderAssemblyPathEscape as p, formatDockerLoginError as r, spawnStreaming as s, docker_cmd_exports as t, assemblyPathEscape as u, flattenToOneLine as v, getEmbedConfig as w, stringifyThrown as x, isAwsServiceException as y };
-//# sourceMappingURL=docker-cmd-B5yU__zC.js.map
+export { stringifyThrown as C, resetEmbedConfig as D, getEmbedConfig as E, setEmbedConfig as O, sanitizeServiceExceptionMessage as S, resolveConfiguredLogLevel as T, clampErrorName as _, isDockerClientEnvKey as a, flattenToOneLine as b, runDockerStreaming as c, absoluteAssemblyPathEscape as d, assemblyPathEscape as f, resolveAssemblyPath as g, renderAssemblyPathEscape as h, getDockerCmd as i, spawnStreaming as l, namesTheSameDirectory as m, finchSecretArgvRefusal as n, isMalformedEnvKey as o, displayUntrustedValue as p, formatDockerLoginError as r, runDockerForeground as s, docker_cmd_exports as t, warnFinchArgvExposure as u, describeAwsFailureForWarn as v, getLogger as w, isAwsServiceException as x, describeCredentialLoadFailure as y };
+//# sourceMappingURL=docker-cmd-leyvDn1u.js.map