daycare-cli 0.0.0-canary.158c19a → 0.0.0-canary.1dc0f78

package/dist/config/configResolve.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"configResolve.d.ts","sourceRoot":"","sources":["../../sources/config/configResolve.ts"],"names":[],"mappings":"AAIA,OAAO,KAAK,EAA0B,cAAc,EAAE,MAAM,gBAAgB,CAAC;AAE7E,OAAO,KAAK,EAAE,MAAM,EAAE,eAAe,EAAE,MAAM,kBAAkB,CAAC;AAEhE;;;GAGG;AACH,wBAAgB,aAAa,CAAC,QAAQ,EAAE,cAAc,EAAE,YAAY,EAAE,MAAM,EAAE,SAAS,GAAE,eAAoB,GAAG,MAAM,CA0BrH"}
+{"version":3,"file":"configResolve.d.ts","sourceRoot":"","sources":["../../sources/config/configResolve.ts"],"names":[],"mappings":"AAIA,OAAO,KAAK,EAA0C,cAAc,EAAE,MAAM,gBAAgB,CAAC;AAE7F,OAAO,KAAK,EAAE,MAAM,EAAE,eAAe,EAAE,MAAM,kBAAkB,CAAC;AAMhE;;;GAGG;AACH,wBAAgB,aAAa,CAAC,QAAQ,EAAE,cAAc,EAAE,YAAY,EAAE,MAAM,EAAE,SAAS,GAAE,eAAoB,GAAG,MAAM,CA2BrH"}

package/dist/config/configResolve.js

@@ -2,6 +2,9 @@ import path from "node:path";
 import { resolveEngineSocketPath } from "../engine/ipc/socket.js";
 import { DEFAULT_DAYCARE_DIR } from "../paths.js";
 import { freezeDeep } from "../util/freezeDeep.js";
+const DEFAULT_DOCKER_IMAGE = "daycare-sandbox";
+const DEFAULT_DOCKER_TAG = "latest";
+const DEFAULT_DOCKER_ISOLATED_DNS_SERVERS = ["1.1.1.1", "8.8.8.8"];
 /**
  * Resolves derived paths and defaults into an immutable Config snapshot.
  * Expects: settingsPath is absolute; settings already validated.
@@ -27,6 +30,7 @@ export function configResolve(settings, settingsPath, overrides = {}) {
         dbPath,
         authPath,
         socketPath,
+        docker: frozenSettings.docker,
         features: frozenSettings.features,
         settings: frozenSettings,
         verbose
@@ -35,6 +39,7 @@ export function configResolve(settings, settingsPath, overrides = {}) {
 function resolveSettingsDefaults(settings) {
     const emergencyContextLimit = settings.agents?.emergencyContextLimit ?? 200_000;
     const appReviewerEnabled = settings.security?.appReviewerEnabled ?? false;
+    const docker = resolveDockerDefaults(settings.docker);
     return {
         ...settings,
         agents: {
@@ -49,7 +54,60 @@ function resolveSettingsDefaults(settings) {
             say: settings.features?.say ?? false,
             rlm: settings.features?.rlm ?? false,
             noTools: settings.features?.noTools ?? false
-        }
+        },
+        docker
+    };
+}
+function resolveDockerDefaults(docker) {
+    return {
+        enabled: docker?.enabled ?? false,
+        image: docker?.image ?? DEFAULT_DOCKER_IMAGE,
+        tag: docker?.tag ?? DEFAULT_DOCKER_TAG,
+        socketPath: docker?.socketPath,
+        runtime: docker?.runtime,
+        enableWeakerNestedSandbox: docker?.enableWeakerNestedSandbox ?? false,
+        readOnly: docker?.readOnly ?? false,
+        unconfinedSecurity: docker?.unconfinedSecurity ?? false,
+        capAdd: dockerCapabilityListNormalize(docker?.capAdd),
+        capDrop: dockerCapabilityListNormalize(docker?.capDrop),
+        allowLocalNetworkingForUsers: dockerUserIdListNormalize(docker?.allowLocalNetworkingForUsers),
+        isolatedDnsServers: dockerDnsListNormalize(docker?.isolatedDnsServers, DEFAULT_DOCKER_ISOLATED_DNS_SERVERS),
+        localDnsServers: dockerDnsListNormalize(docker?.localDnsServers, [])
     };
 }
+function dockerCapabilityListNormalize(input) {
+    if (!input || input.length === 0) {
+        return [];
+    }
+    return Array.from(new Set(input
+        .map((entry) => entry.trim())
+        .filter((entry) => entry.length > 0)
+        .sort()));
+}
+function dockerUserIdListNormalize(input) {
+    if (!input || input.length === 0) {
+        return [];
+    }
+    return Array.from(new Set(input
+        .map((entry) => entry.trim())
+        .filter((entry) => entry.length > 0)
+        .sort()));
+}
+function dockerDnsListNormalize(input, fallback) {
+    const source = input && input.length > 0 ? input : fallback;
+    if (source.length === 0) {
+        return [];
+    }
+    const seen = new Set();
+    const result = [];
+    for (const entry of source) {
+        const normalized = entry.trim();
+        if (normalized.length === 0 || seen.has(normalized)) {
+            continue;
+        }
+        seen.add(normalized);
+        result.push(normalized);
+    }
+    return result;
+}
 //# sourceMappingURL=configResolve.js.map

package/dist/config/configResolve.js.map

@@ -1 +1 @@
-{"version":3,"file":"configResolve.js","sourceRoot":"","sources":["../../sources/config/configResolve.ts"],"names":[],"mappings":"AAAA,OAAO,IAAI,MAAM,WAAW,CAAC;AAE7B,OAAO,EAAE,uBAAuB,EAAE,MAAM,yBAAyB,CAAC;AAClE,OAAO,EAAE,mBAAmB,EAAE,MAAM,aAAa,CAAC;AAElD,OAAO,EAAE,UAAU,EAAE,MAAM,uBAAuB,CAAC;AAGnD;;;GAGG;AACH,MAAM,UAAU,aAAa,CAAC,QAAwB,EAAE,YAAoB,EAAE,YAA6B,EAAE;IACzG,MAAM,gBAAgB,GAAG,uBAAuB,CAAC,QAAQ,CAAC,CAAC;IAC3D,MAAM,oBAAoB,GAAG,IAAI,CAAC,OAAO,CAAC,YAAY,CAAC,CAAC;IACxD,MAAM,SAAS,GAAG,IAAI,CAAC,OAAO,CAAC,oBAAoB,CAAC,CAAC;IACrD,MAAM,OAAO,GAAG,IAAI,CAAC,OAAO,CAAC,gBAAgB,CAAC,MAAM,EAAE,OAAO,IAAI,mBAAmB,CAAC,CAAC;IACtF,MAAM,SAAS,GAAG,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,QAAQ,CAAC,CAAC;IAC/C,MAAM,QAAQ,GAAG,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,OAAO,CAAC,CAAC;IAC/C,MAAM,MAAM,GAAG,IAAI,CAAC,OAAO,CAAC,gBAAgB,CAAC,MAAM,EAAE,MAAM,IAAI,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,YAAY,CAAC,CAAC,CAAC;IACjG,MAAM,QAAQ,GAAG,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,WAAW,CAAC,CAAC;IACjD,MAAM,UAAU,GAAG,uBAAuB,CAAC,gBAAgB,CAAC,MAAM,EAAE,UAAU,CAAC,CAAC;IAChF,MAAM,cAAc,GAAG,UAAU,CAAC,eAAe,CAAC,gBAAgB,CAAC,CAAC,CAAC;IACrE,MAAM,OAAO,GAAG,SAAS,CAAC,OAAO,IAAI,KAAK,CAAC;IAE3C,OAAO,UAAU,CAAC;QACd,YAAY,EAAE,oBAAoB;QAClC,SAAS;QACT,OAAO;QACP,SAAS;QACT,QAAQ;QACR,MAAM;QACN,QAAQ;QACR,UAAU;QACV,QAAQ,EAAE,cAAc,CAAC,QAAQ;QACjC,QAAQ,EAAE,cAAc;QACxB,OAAO;KACV,CAAC,CAAC;AACP,CAAC;AAED,SAAS,uBAAuB,CAAC,QAAwB;IACrD,MAAM,qBAAqB,GAAG,QAAQ,CAAC,MAAM,EAAE,qBAAqB,IAAI,OAAO,CAAC;IAChF,MAAM,kBAAkB,GAAG,QAAQ,CAAC,QAAQ,EAAE,kBAAkB,IAAI,KAAK,CAAC;IAC1E,OAAO;QACH,GAAG,QAAQ;QACX,MAAM,EAAE;YACJ,GAAG,QAAQ,CAAC,MAAM;YAClB,qBAAqB;SACxB;QACD,QAAQ,EAAE;YACN,GAAG,QAAQ,CAAC,QAAQ;YACpB,kBAAkB;SACrB;QACD,QAAQ,EAAE;YACN,GAAG,EAAE,QAAQ,CAAC,QAAQ,EAAE,GAAG,IAAI,KAAK;YACpC,GAAG,EAAE,QAAQ,CAAC,QAAQ,EAAE,GAAG,IAAI,KAAK;YACpC,OAAO,EAAE,QAAQ,CAAC,QAAQ,EAAE,OAAO,IAAI,KAAK;SAC/C;KACJ,CAAC;AACN,CAAC"}
+{"version":3,"file":"configResolve.js","sourceRoot":"","sources":["../../sources/config/configResolve.ts"],"names":[],"mappings":"AAAA,OAAO,IAAI,MAAM,WAAW,CAAC;AAE7B,OAAO,EAAE,uBAAuB,EAAE,MAAM,yBAAyB,CAAC;AAClE,OAAO,EAAE,mBAAmB,EAAE,MAAM,aAAa,CAAC;AAElD,OAAO,EAAE,UAAU,EAAE,MAAM,uBAAuB,CAAC;AAGnD,MAAM,oBAAoB,GAAG,iBAAiB,CAAC;AAC/C,MAAM,kBAAkB,GAAG,QAAQ,CAAC;AACpC,MAAM,mCAAmC,GAAG,CAAC,SAAS,EAAE,SAAS,CAAC,CAAC;AAEnE;;;GAGG;AACH,MAAM,UAAU,aAAa,CAAC,QAAwB,EAAE,YAAoB,EAAE,YAA6B,EAAE;IACzG,MAAM,gBAAgB,GAAG,uBAAuB,CAAC,QAAQ,CAAC,CAAC;IAC3D,MAAM,oBAAoB,GAAG,IAAI,CAAC,OAAO,CAAC,YAAY,CAAC,CAAC;IACxD,MAAM,SAAS,GAAG,IAAI,CAAC,OAAO,CAAC,oBAAoB,CAAC,CAAC;IACrD,MAAM,OAAO,GAAG,IAAI,CAAC,OAAO,CAAC,gBAAgB,CAAC,MAAM,EAAE,OAAO,IAAI,mBAAmB,CAAC,CAAC;IACtF,MAAM,SAAS,GAAG,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,QAAQ,CAAC,CAAC;IAC/C,MAAM,QAAQ,GAAG,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,OAAO,CAAC,CAAC;IAC/C,MAAM,MAAM,GAAG,IAAI,CAAC,OAAO,CAAC,gBAAgB,CAAC,MAAM,EAAE,MAAM,IAAI,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,YAAY,CAAC,CAAC,CAAC;IACjG,MAAM,QAAQ,GAAG,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,WAAW,CAAC,CAAC;IACjD,MAAM,UAAU,GAAG,uBAAuB,CAAC,gBAAgB,CAAC,MAAM,EAAE,UAAU,CAAC,CAAC;IAChF,MAAM,cAAc,GAAG,UAAU,CAAC,eAAe,CAAC,gBAAgB,CAAC,CAAC,CAAC;IACrE,MAAM,OAAO,GAAG,SAAS,CAAC,OAAO,IAAI,KAAK,CAAC;IAE3C,OAAO,UAAU,CAAC;QACd,YAAY,EAAE,oBAAoB;QAClC,SAAS;QACT,OAAO;QACP,SAAS;QACT,QAAQ;QACR,MAAM;QACN,QAAQ;QACR,UAAU;QACV,MAAM,EAAE,cAAc,CAAC,MAAM;QAC7B,QAAQ,EAAE,cAAc,CAAC,QAAQ;QACjC,QAAQ,EAAE,cAAc;QACxB,OAAO;KACV,CAAC,CAAC;AACP,CAAC;AAED,SAAS,uBAAuB,CAAC,QAAwB;IACrD,MAAM,qBAAqB,GAAG,QAAQ,CAAC,MAAM,EAAE,qBAAqB,IAAI,OAAO,CAAC;IAChF,MAAM,kBAAkB,GAAG,QAAQ,CAAC,QAAQ,EAAE,kBAAkB,IAAI,KAAK,CAAC;IAC1E,MAAM,MAAM,GAAG,qBAAqB,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;IACtD,OAAO;QACH,GAAG,QAAQ;QACX,MAAM,EAAE;YACJ,GAAG,QAAQ,CAAC,MAAM;YAClB,qBAAqB;SACxB;QACD,QAAQ,EAAE;YACN,GAAG,QAAQ,CAAC,QAAQ;YACpB,kBAAkB;SACrB;QACD,QAAQ,EAAE;YACN,GAAG,EAAE,QAAQ,CAAC,QAAQ,EAAE,GAAG,IAAI,KAAK;YACpC,GAAG,EAAE,QAAQ,CAAC,QAAQ,EAAE,GAAG,IAAI,KAAK;YACpC,OAAO,EAAE,QAAQ,CAAC,QAAQ,EAAE,OAAO,IAAI,KAAK;SAC/C;QACD,MAAM;KACT,CAAC;AACN,CAAC;AAED,SAAS,qBAAqB,CAAC,MAAkC;IAC7D,OAAO;QACH,OAAO,EAAE,MAAM,EAAE,OAAO,IAAI,KAAK;QACjC,KAAK,EAAE,MAAM,EAAE,KAAK,IAAI,oBAAoB;QAC5C,GAAG,EAAE,MAAM,EAAE,GAAG,IAAI,kBAAkB;QACtC,UAAU,EAAE,MAAM,EAAE,UAAU;QAC9B,OAAO,EAAE,MAAM,EAAE,OAAO;QACxB,yBAAyB,EAAE,MAAM,EAAE,yBAAyB,IAAI,KAAK;QACrE,QAAQ,EAAE,MAAM,EAAE,QAAQ,IAAI,KAAK;QACnC,kBAAkB,EAAE,MAAM,EAAE,kBAAkB,IAAI,KAAK;QACvD,MAAM,EAAE,6BAA6B,CAAC,MAAM,EAAE,MAAM,CAAC;QACrD,OAAO,EAAE,6BAA6B,CAAC,MAAM,EAAE,OAAO,CAAC;QACvD,4BAA4B,EAAE,yBAAyB,CAAC,MAAM,EAAE,4BAA4B,CAAC;QAC7F,kBAAkB,EAAE,sBAAsB,CAAC,MAAM,EAAE,kBAAkB,EAAE,mCAAmC,CAAC;QAC3G,eAAe,EAAE,sBAAsB,CAAC,MAAM,EAAE,eAAe,EAAE,EAAE,CAAC;KACvE,CAAC;AACN,CAAC;AAED,SAAS,6BAA6B,CAAC,KAA2B;IAC9D,IAAI,CAAC,KAAK,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAC/B,OAAO,EAAE,CAAC;IACd,CAAC;IACD,OAAO,KAAK,CAAC,IAAI,CACb,IAAI,GAAG,CACH,KAAK;SACA,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC;SAC5B,MAAM,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,MAAM,GAAG,CAAC,CAAC;SACnC,IAAI,EAAE,CACd,CACJ,CAAC;AACN,CAAC;AAED,SAAS,yBAAyB,CAAC,KAA2B;IAC1D,IAAI,CAAC,KAAK,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAC/B,OAAO,EAAE,CAAC;IACd,CAAC;IACD,OAAO,KAAK,CAAC,IAAI,CACb,IAAI,GAAG,CACH,KAAK;SACA,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC;SAC5B,MAAM,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,MAAM,GAAG,CAAC,CAAC;SACnC,IAAI,EAAE,CACd,CACJ,CAAC;AACN,CAAC;AAED,SAAS,sBAAsB,CAAC,KAA2B,EAAE,QAAkB;IAC3E,MAAM,MAAM,GAAG,KAAK,IAAI,KAAK,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,QAAQ,CAAC;IAC5D,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACtB,OAAO,EAAE,CAAC;IACd,CAAC;IACD,MAAM,IAAI,GAAG,IAAI,GAAG,EAAU,CAAC;IAC/B,MAAM,MAAM,GAAa,EAAE,CAAC;IAC5B,KAAK,MAAM,KAAK,IAAI,MAAM,EAAE,CAAC;QACzB,MAAM,UAAU,GAAG,KAAK,CAAC,IAAI,EAAE,CAAC;QAChC,IAAI,UAAU,CAAC,MAAM,KAAK,CAAC,IAAI,IAAI,CAAC,GAAG,CAAC,UAAU,CAAC,EAAE,CAAC;YAClD,SAAS;QACb,CAAC;QACD,IAAI,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC;QACrB,MAAM,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;IAC5B,CAAC;IACD,OAAO,MAAM,CAAC;AAClB,CAAC"}

package/dist/config/configResolve.spec.js

@@ -60,5 +60,112 @@ describe("configResolve", () => {
         const config = configResolve({ security: { appReviewerEnabled: false } }, configPath);
         expect(config.settings.security.appReviewerEnabled).toBe(false);
     });
+    it("defaults docker settings when missing", () => {
+        const configPath = path.join("/tmp/daycare", "settings.json");
+        const config = configResolve({}, configPath);
+        expect(config.docker).toEqual({
+            enabled: false,
+            image: "daycare-sandbox",
+            tag: "latest",
+            socketPath: undefined,
+            runtime: undefined,
+            enableWeakerNestedSandbox: false,
+            readOnly: false,
+            unconfinedSecurity: false,
+            capAdd: [],
+            capDrop: [],
+            allowLocalNetworkingForUsers: [],
+            isolatedDnsServers: ["1.1.1.1", "8.8.8.8"],
+            localDnsServers: []
+        });
+        expect(config.settings.docker).toEqual(config.docker);
+    });
+    it("resolves partial docker settings with defaults", () => {
+        const configPath = path.join("/tmp/daycare", "settings.json");
+        const config = configResolve({
+            docker: {
+                enabled: true,
+                image: "custom-sandbox"
+            }
+        }, configPath);
+        expect(config.docker).toEqual({
+            enabled: true,
+            image: "custom-sandbox",
+            tag: "latest",
+            socketPath: undefined,
+            runtime: undefined,
+            enableWeakerNestedSandbox: false,
+            readOnly: false,
+            unconfinedSecurity: false,
+            capAdd: [],
+            capDrop: [],
+            allowLocalNetworkingForUsers: [],
+            isolatedDnsServers: ["1.1.1.1", "8.8.8.8"],
+            localDnsServers: []
+        });
+    });
+    it("resolves full docker settings", () => {
+        const configPath = path.join("/tmp/daycare", "settings.json");
+        const config = configResolve({
+            docker: {
+                enabled: true,
+                image: "daycare-sandbox",
+                tag: "v2",
+                socketPath: "/var/run/docker.sock",
+                runtime: "runsc",
+                enableWeakerNestedSandbox: true,
+                readOnly: true,
+                unconfinedSecurity: true,
+                capAdd: ["NET_ADMIN"],
+                capDrop: ["MKNOD"]
+            }
+        }, configPath);
+        expect(config.docker).toEqual({
+            enabled: true,
+            image: "daycare-sandbox",
+            tag: "v2",
+            socketPath: "/var/run/docker.sock",
+            runtime: "runsc",
+            enableWeakerNestedSandbox: true,
+            readOnly: true,
+            unconfinedSecurity: true,
+            capAdd: ["NET_ADMIN"],
+            capDrop: ["MKNOD"],
+            allowLocalNetworkingForUsers: [],
+            isolatedDnsServers: ["1.1.1.1", "8.8.8.8"],
+            localDnsServers: []
+        });
+    });
+    it("normalizes docker capability lists", () => {
+        const configPath = path.join("/tmp/daycare", "settings.json");
+        const config = configResolve({
+            docker: {
+                capAdd: [" SYS_ADMIN ", "NET_ADMIN", "NET_ADMIN"],
+                capDrop: ["MKNOD", " MKNOD "]
+            }
+        }, configPath);
+        expect(config.docker.capAdd).toEqual(["NET_ADMIN", "SYS_ADMIN"]);
+        expect(config.docker.capDrop).toEqual(["MKNOD"]);
+    });
+    it("normalizes docker local-network user allowlist", () => {
+        const configPath = path.join("/tmp/daycare", "settings.json");
+        const config = configResolve({
+            docker: {
+                allowLocalNetworkingForUsers: [" user-b ", "user-a", "user-a", " "]
+            }
+        }, configPath);
+        expect(config.docker.allowLocalNetworkingForUsers).toEqual(["user-a", "user-b"]);
+    });
+    it("normalizes docker dns server lists", () => {
+        const configPath = path.join("/tmp/daycare", "settings.json");
+        const config = configResolve({
+            docker: {
+                isolatedDnsServers: [" 9.9.9.9 ", "1.1.1.1", "9.9.9.9", " "],
+                localDnsServers: [" 192.168.1.1 ", "8.8.8.8", "192.168.1.1"]
+            }
+        }, configPath);
+        expect(config.docker.isolatedDnsServers).toEqual(["9.9.9.9", "1.1.1.1"]);
+        expect(config.docker.localDnsServers).toEqual(["192.168.1.1", "8.8.8.8"]);
+    });
 });
 //# sourceMappingURL=configResolve.spec.js.map

package/dist/config/configResolve.spec.js.map

@@ -1 +1 @@
-{"version":3,"file":"configResolve.spec.js","sourceRoot":"","sources":["../../sources/config/configResolve.spec.ts"],"names":[],"mappings":"AAAA,OAAO,IAAI,MAAM,WAAW,CAAC;AAE7B,OAAO,EAAE,QAAQ,EAAE,MAAM,EAAE,EAAE,EAAE,MAAM,QAAQ,CAAC;AAE9C,OAAO,EAAE,aAAa,EAAE,MAAM,oBAAoB,CAAC;AAEnD,QAAQ,CAAC,eAAe,EAAE,GAAG,EAAE;IAC3B,EAAE,CAAC,4DAA4D,EAAE,GAAG,EAAE;QAClE,MAAM,UAAU,GAAG,IAAI,CAAC,IAAI,CAAC,cAAc,EAAE,eAAe,CAAC,CAAC;QAC9D,MAAM,MAAM,GAAG,aAAa,CACxB;YACI,MAAM,EAAE;gBACJ,OAAO,EAAE,uBAAuB;aACnC;SACJ,EACD,UAAU,CACb,CAAC;QAEF,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,uBAAuB,CAAC,CAAC,CAAC;QACnE,MAAM,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,8BAA8B,CAAC,CAAC,CAAC;QAC5E,MAAM,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,oBAAoB,CAAC,CAAC,CAAC;QACjE,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,kCAAkC,CAAC,CAAC,CAAC;IACjF,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,+BAA+B,EAAE,GAAG,EAAE;QACrC,MAAM,UAAU,GAAG,IAAI,CAAC,IAAI,CAAC,cAAc,EAAE,eAAe,CAAC,CAAC;QAC9D,MAAM,MAAM,GAAG,aAAa,CACxB;YACI,MAAM,EAAE;gBACJ,OAAO,EAAE,uBAAuB;gBAChC,MAAM,EAAE,gCAAgC;aAC3C;SACJ,EACD,UAAU,CACb,CAAC;QACF,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,gCAAgC,CAAC,CAAC,CAAC;IAC/E,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,gCAAgC,EAAE,GAAG,EAAE;QACtC,MAAM,UAAU,GAAG,IAAI,CAAC,IAAI,CAAC,cAAc,EAAE,eAAe,CAAC,CAAC;QAC9D,MAAM,MAAM,GAAG,aAAa,CAAC,EAAE,EAAE,UAAU,CAAC,CAAC;QAC7C,MAAM,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,OAAO,CAAC,EAAE,GAAG,EAAE,KAAK,EAAE,GAAG,EAAE,KAAK,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC,CAAC;IAChF,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,qCAAqC,EAAE,GAAG,EAAE;QAC3C,MAAM,UAAU,GAAG,IAAI,CAAC,IAAI,CAAC,cAAc,EAAE,eAAe,CAAC,CAAC;QAC9D,MAAM,MAAM,GAAG,aAAa,CAAC,EAAE,QAAQ,EAAE,EAAE,GAAG,EAAE,IAAI,EAAE,EAAE,EAAE,UAAU,CAAC,CAAC;QACtE,MAAM,CAAC,MAAM,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACvC,MAAM,CAAC,MAAM,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QACxC,MAAM,CAAC,MAAM,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IAChD,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,qCAAqC,EAAE,GAAG,EAAE;QAC3C,MAAM,UAAU,GAAG,IAAI,CAAC,IAAI,CAAC,cAAc,EAAE,eAAe,CAAC,CAAC;QAC9D,MAAM,MAAM,GAAG,aAAa,CAAC,EAAE,QAAQ,EAAE,EAAE,GAAG,EAAE,IAAI,EAAE,EAAE,EAAE,UAAU,CAAC,CAAC;QACtE,MAAM,CAAC,MAAM,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACvC,MAAM,CAAC,MAAM,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QACxC,MAAM,CAAC,MAAM,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IAChD,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,yCAAyC,EAAE,GAAG,EAAE;QAC/C,MAAM,UAAU,GAAG,IAAI,CAAC,IAAI,CAAC,cAAc,EAAE,eAAe,CAAC,CAAC;QAC9D,MAAM,MAAM,GAAG,aAAa,CAAC,EAAE,QAAQ,EAAE,EAAE,OAAO,EAAE,IAAI,EAAE,EAAE,EAAE,UAAU,CAAC,CAAC;QAC1E,MAAM,CAAC,MAAM,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAC3C,MAAM,CAAC,MAAM,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QACxC,MAAM,CAAC,MAAM,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IAC5C,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,+CAA+C,EAAE,GAAG,EAAE;QACrD,MAAM,UAAU,GAAG,IAAI,CAAC,IAAI,CAAC,cAAc,EAAE,eAAe,CAAC,CAAC;QAC9D,MAAM,MAAM,GAAG,aAAa,CAAC,EAAE,EAAE,UAAU,CAAC,CAAC;QAC7C,MAAM,CAAC,MAAM,CAAC,QAAQ,CAAC,QAAQ,CAAC,kBAAkB,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IACpE,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,oDAAoD,EAAE,GAAG,EAAE;QAC1D,MAAM,UAAU,GAAG,IAAI,CAAC,IAAI,CAAC,cAAc,EAAE,eAAe,CAAC,CAAC;QAC9D,MAAM,MAAM,GAAG,aAAa,CAAC,EAAE,QAAQ,EAAE,EAAE,kBAAkB,EAAE,KAAK,EAAE,EAAE,EAAE,UAAU,CAAC,CAAC;QACtF,MAAM,CAAC,MAAM,CAAC,QAAQ,CAAC,QAAQ,CAAC,kBAAkB,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IACpE,CAAC,CAAC,CAAC;AACP,CAAC,CAAC,CAAC"}
+{"version":3,"file":"configResolve.spec.js","sourceRoot":"","sources":["../../sources/config/configResolve.spec.ts"],"names":[],"mappings":"AAAA,OAAO,IAAI,MAAM,WAAW,CAAC;AAE7B,OAAO,EAAE,QAAQ,EAAE,MAAM,EAAE,EAAE,EAAE,MAAM,QAAQ,CAAC;AAE9C,OAAO,EAAE,aAAa,EAAE,MAAM,oBAAoB,CAAC;AAEnD,QAAQ,CAAC,eAAe,EAAE,GAAG,EAAE;IAC3B,EAAE,CAAC,4DAA4D,EAAE,GAAG,EAAE;QAClE,MAAM,UAAU,GAAG,IAAI,CAAC,IAAI,CAAC,cAAc,EAAE,eAAe,CAAC,CAAC;QAC9D,MAAM,MAAM,GAAG,aAAa,CACxB;YACI,MAAM,EAAE;gBACJ,OAAO,EAAE,uBAAuB;aACnC;SACJ,EACD,UAAU,CACb,CAAC;QAEF,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,uBAAuB,CAAC,CAAC,CAAC;QACnE,MAAM,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,8BAA8B,CAAC,CAAC,CAAC;QAC5E,MAAM,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,oBAAoB,CAAC,CAAC,CAAC;QACjE,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,kCAAkC,CAAC,CAAC,CAAC;IACjF,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,+BAA+B,EAAE,GAAG,EAAE;QACrC,MAAM,UAAU,GAAG,IAAI,CAAC,IAAI,CAAC,cAAc,EAAE,eAAe,CAAC,CAAC;QAC9D,MAAM,MAAM,GAAG,aAAa,CACxB;YACI,MAAM,EAAE;gBACJ,OAAO,EAAE,uBAAuB;gBAChC,MAAM,EAAE,gCAAgC;aAC3C;SACJ,EACD,UAAU,CACb,CAAC;QACF,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,gCAAgC,CAAC,CAAC,CAAC;IAC/E,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,gCAAgC,EAAE,GAAG,EAAE;QACtC,MAAM,UAAU,GAAG,IAAI,CAAC,IAAI,CAAC,cAAc,EAAE,eAAe,CAAC,CAAC;QAC9D,MAAM,MAAM,GAAG,aAAa,CAAC,EAAE,EAAE,UAAU,CAAC,CAAC;QAC7C,MAAM,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,OAAO,CAAC,EAAE,GAAG,EAAE,KAAK,EAAE,GAAG,EAAE,KAAK,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC,CAAC;IAChF,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,qCAAqC,EAAE,GAAG,EAAE;QAC3C,MAAM,UAAU,GAAG,IAAI,CAAC,IAAI,CAAC,cAAc,EAAE,eAAe,CAAC,CAAC;QAC9D,MAAM,MAAM,GAAG,aAAa,CAAC,EAAE,QAAQ,EAAE,EAAE,GAAG,EAAE,IAAI,EAAE,EAAE,EAAE,UAAU,CAAC,CAAC;QACtE,MAAM,CAAC,MAAM,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACvC,MAAM,CAAC,MAAM,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QACxC,MAAM,CAAC,MAAM,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IAChD,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,qCAAqC,EAAE,GAAG,EAAE;QAC3C,MAAM,UAAU,GAAG,IAAI,CAAC,IAAI,CAAC,cAAc,EAAE,eAAe,CAAC,CAAC;QAC9D,MAAM,MAAM,GAAG,aAAa,CAAC,EAAE,QAAQ,EAAE,EAAE,GAAG,EAAE,IAAI,EAAE,EAAE,EAAE,UAAU,CAAC,CAAC;QACtE,MAAM,CAAC,MAAM,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACvC,MAAM,CAAC,MAAM,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QACxC,MAAM,CAAC,MAAM,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IAChD,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,yCAAyC,EAAE,GAAG,EAAE;QAC/C,MAAM,UAAU,GAAG,IAAI,CAAC,IAAI,CAAC,cAAc,EAAE,eAAe,CAAC,CAAC;QAC9D,MAAM,MAAM,GAAG,aAAa,CAAC,EAAE,QAAQ,EAAE,EAAE,OAAO,EAAE,IAAI,EAAE,EAAE,EAAE,UAAU,CAAC,CAAC;QAC1E,MAAM,CAAC,MAAM,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAC3C,MAAM,CAAC,MAAM,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QACxC,MAAM,CAAC,MAAM,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IAC5C,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,+CAA+C,EAAE,GAAG,EAAE;QACrD,MAAM,UAAU,GAAG,IAAI,CAAC,IAAI,CAAC,cAAc,EAAE,eAAe,CAAC,CAAC;QAC9D,MAAM,MAAM,GAAG,aAAa,CAAC,EAAE,EAAE,UAAU,CAAC,CAAC;QAC7C,MAAM,CAAC,MAAM,CAAC,QAAQ,CAAC,QAAQ,CAAC,kBAAkB,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IACpE,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,oDAAoD,EAAE,GAAG,EAAE;QAC1D,MAAM,UAAU,GAAG,IAAI,CAAC,IAAI,CAAC,cAAc,EAAE,eAAe,CAAC,CAAC;QAC9D,MAAM,MAAM,GAAG,aAAa,CAAC,EAAE,QAAQ,EAAE,EAAE,kBAAkB,EAAE,KAAK,EAAE,EAAE,EAAE,UAAU,CAAC,CAAC;QACtF,MAAM,CAAC,MAAM,CAAC,QAAQ,CAAC,QAAQ,CAAC,kBAAkB,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IACpE,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,uCAAuC,EAAE,GAAG,EAAE;QAC7C,MAAM,UAAU,GAAG,IAAI,CAAC,IAAI,CAAC,cAAc,EAAE,eAAe,CAAC,CAAC;QAC9D,MAAM,MAAM,GAAG,aAAa,CAAC,EAAE,EAAE,UAAU,CAAC,CAAC;QAC7C,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,OAAO,CAAC;YAC1B,OAAO,EAAE,KAAK;YACd,KAAK,EAAE,iBAAiB;YACxB,GAAG,EAAE,QAAQ;YACb,UAAU,EAAE,SAAS;YACrB,OAAO,EAAE,SAAS;YAClB,yBAAyB,EAAE,KAAK;YAChC,QAAQ,EAAE,KAAK;YACf,kBAAkB,EAAE,KAAK;YACzB,MAAM,EAAE,EAAE;YACV,OAAO,EAAE,EAAE;YACX,4BAA4B,EAAE,EAAE;YAChC,kBAAkB,EAAE,CAAC,SAAS,EAAE,SAAS,CAAC;YAC1C,eAAe,EAAE,EAAE;SACtB,CAAC,CAAC;QACH,MAAM,CAAC,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,OAAO,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;IAC1D,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,gDAAgD,EAAE,GAAG,EAAE;QACtD,MAAM,UAAU,GAAG,IAAI,CAAC,IAAI,CAAC,cAAc,EAAE,eAAe,CAAC,CAAC;QAC9D,MAAM,MAAM,GAAG,aAAa,CACxB;YACI,MAAM,EAAE;gBACJ,OAAO,EAAE,IAAI;gBACb,KAAK,EAAE,gBAAgB;aAC1B;SACJ,EACD,UAAU,CACb,CAAC;QACF,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,OAAO,CAAC;YAC1B,OAAO,EAAE,IAAI;YACb,KAAK,EAAE,gBAAgB;YACvB,GAAG,EAAE,QAAQ;YACb,UAAU,EAAE,SAAS;YACrB,OAAO,EAAE,SAAS;YAClB,yBAAyB,EAAE,KAAK;YAChC,QAAQ,EAAE,KAAK;YACf,kBAAkB,EAAE,KAAK;YACzB,MAAM,EAAE,EAAE;YACV,OAAO,EAAE,EAAE;YACX,4BAA4B,EAAE,EAAE;YAChC,kBAAkB,EAAE,CAAC,SAAS,EAAE,SAAS,CAAC;YAC1C,eAAe,EAAE,EAAE;SACtB,CAAC,CAAC;IACP,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,+BAA+B,EAAE,GAAG,EAAE;QACrC,MAAM,UAAU,GAAG,IAAI,CAAC,IAAI,CAAC,cAAc,EAAE,eAAe,CAAC,CAAC;QAC9D,MAAM,MAAM,GAAG,aAAa,CACxB;YACI,MAAM,EAAE;gBACJ,OAAO,EAAE,IAAI;gBACb,KAAK,EAAE,iBAAiB;gBACxB,GAAG,EAAE,IAAI;gBACT,UAAU,EAAE,sBAAsB;gBAClC,OAAO,EAAE,OAAO;gBAChB,yBAAyB,EAAE,IAAI;gBAC/B,QAAQ,EAAE,IAAI;gBACd,kBAAkB,EAAE,IAAI;gBACxB,MAAM,EAAE,CAAC,WAAW,CAAC;gBACrB,OAAO,EAAE,CAAC,OAAO,CAAC;aACrB;SACJ,EACD,UAAU,CACb,CAAC;QACF,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,OAAO,CAAC;YAC1B,OAAO,EAAE,IAAI;YACb,KAAK,EAAE,iBAAiB;YACxB,GAAG,EAAE,IAAI;YACT,UAAU,EAAE,sBAAsB;YAClC,OAAO,EAAE,OAAO;YAChB,yBAAyB,EAAE,IAAI;YAC/B,QAAQ,EAAE,IAAI;YACd,kBAAkB,EAAE,IAAI;YACxB,MAAM,EAAE,CAAC,WAAW,CAAC;YACrB,OAAO,EAAE,CAAC,OAAO,CAAC;YAClB,4BAA4B,EAAE,EAAE;YAChC,kBAAkB,EAAE,CAAC,SAAS,EAAE,SAAS,CAAC;YAC1C,eAAe,EAAE,EAAE;SACtB,CAAC,CAAC;IACP,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,oCAAoC,EAAE,GAAG,EAAE;QAC1C,MAAM,UAAU,GAAG,IAAI,CAAC,IAAI,CAAC,cAAc,EAAE,eAAe,CAAC,CAAC;QAC9D,MAAM,MAAM,GAAG,aAAa,CACxB;YACI,MAAM,EAAE;gBACJ,MAAM,EAAE,CAAC,aAAa,EAAE,WAAW,EAAE,WAAW,CAAC;gBACjD,OAAO,EAAE,CAAC,OAAO,EAAE,SAAS,CAAC;aAChC;SACJ,EACD,UAAU,CACb,CAAC;QAEF,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,OAAO,CAAC,CAAC,WAAW,EAAE,WAAW,CAAC,CAAC,CAAC;QACjE,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,OAAO,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC;IACrD,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,gDAAgD,EAAE,GAAG,EAAE;QACtD,MAAM,UAAU,GAAG,IAAI,CAAC,IAAI,CAAC,cAAc,EAAE,eAAe,CAAC,CAAC;QAC9D,MAAM,MAAM,GAAG,aAAa,CACxB;YACI,MAAM,EAAE;gBACJ,4BAA4B,EAAE,CAAC,UAAU,EAAE,QAAQ,EAAE,QAAQ,EAAE,GAAG,CAAC;aACtE;SACJ,EACD,UAAU,CACb,CAAC;QAEF,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,4BAA4B,CAAC,CAAC,OAAO,CAAC,CAAC,QAAQ,EAAE,QAAQ,CAAC,CAAC,CAAC;IACrF,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,oCAAoC,EAAE,GAAG,EAAE;QAC1C,MAAM,UAAU,GAAG,IAAI,CAAC,IAAI,CAAC,cAAc,EAAE,eAAe,CAAC,CAAC;QAC9D,MAAM,MAAM,GAAG,aAAa,CACxB;YACI,MAAM,EAAE;gBACJ,kBAAkB,EAAE,CAAC,WAAW,EAAE,SAAS,EAAE,SAAS,EAAE,GAAG,CAAC;gBAC5D,eAAe,EAAE,CAAC,eAAe,EAAE,SAAS,EAAE,aAAa,CAAC;aAC/D;SACJ,EACD,UAAU,CACb,CAAC;QAEF,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,kBAAkB,CAAC,CAAC,OAAO,CAAC,CAAC,SAAS,EAAE,SAAS,CAAC,CAAC,CAAC;QACzE,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,eAAe,CAAC,CAAC,OAAO,CAAC,CAAC,aAAa,EAAE,SAAS,CAAC,CAAC,CAAC;IAC9E,CAAC,CAAC,CAAC;AACP,CAAC,CAAC,CAAC"}

package/dist/config/configSettingsParse.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"configSettingsParse.d.ts","sourceRoot":"","sources":["../../sources/config/configSettingsParse.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,gBAAgB,CAAC;AAErD;;;GAGG;AACH,wBAAgB,mBAAmB,CAAC,GAAG,EAAE,OAAO,GAAG,cAAc,CAqGhE"}
+{"version":3,"file":"configSettingsParse.d.ts","sourceRoot":"","sources":["../../sources/config/configSettingsParse.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,gBAAgB,CAAC;AAErD;;;GAGG;AACH,wBAAgB,mBAAmB,CAAC,GAAG,EAAE,OAAO,GAAG,cAAc,CAuHhE"}

package/dist/config/configSettingsParse.js

@@ -41,6 +41,24 @@ export function configSettingsParse(raw) {
         .passthrough();
     const settingsSchema = z
         .object({
+        docker: z
+            .object({
+            enabled: z.boolean().optional(),
+            image: z.string().min(1).optional(),
+            tag: z.string().min(1).optional(),
+            socketPath: z.string().min(1).optional(),
+            runtime: z.string().min(1).optional(),
+            enableWeakerNestedSandbox: z.boolean().optional(),
+            readOnly: z.boolean().optional(),
+            unconfinedSecurity: z.boolean().optional(),
+            capAdd: z.array(z.string().min(1)).optional(),
+            capDrop: z.array(z.string().min(1)).optional(),
+            allowLocalNetworkingForUsers: z.array(z.string().min(1)).optional(),
+            isolatedDnsServers: z.array(z.string().min(1)).optional(),
+            localDnsServers: z.array(z.string().min(1)).optional()
+        })
+            .passthrough()
+            .optional(),
         features: z
             .object({
             say: z.boolean().optional(),

package/dist/config/configSettingsParse.js.map

@@ -1 +1 @@
-{"version":3,"file":"configSettingsParse.js","sourceRoot":"","sources":["../../sources/config/configSettingsParse.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAIxB;;;GAGG;AACH,MAAM,UAAU,mBAAmB,CAAC,GAAY;IAC5C,MAAM,cAAc,GAAG,CAAC;SACnB,MAAM,CAAC;QACJ,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;QAC7B,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;QAC3B,OAAO,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,QAAQ,EAAE;QAC/B,QAAQ,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC,QAAQ,EAAE;KAC7C,CAAC;SACD,WAAW,EAAE,CAAC;IAEnB,MAAM,aAAa,GAAG,CAAC;SAClB,MAAM,CAAC;QACJ,OAAO,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,QAAQ,EAAE;QAC/B,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;QAC5B,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;QAC3B,OAAO,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,UAAU,EAAE,IAAI,CAAC,CAAC,CAAC,QAAQ,EAAE;QAC9C,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;QAC/B,YAAY,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;QACnC,YAAY,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;KACtC,CAAC;SACD,WAAW,EAAE,CAAC;IAEnB,MAAM,QAAQ,GAAG,CAAC;SACb,MAAM,CAAC;QACJ,EAAE,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;QACrB,OAAO,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,QAAQ,EAAE;QAC/B,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;QAC5B,OAAO,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC,QAAQ,EAAE;QACzC,KAAK,EAAE,aAAa,CAAC,QAAQ,EAAE;KAClC,CAAC;SACD,WAAW,EAAE,CAAC;IAEnB,MAAM,iBAAiB,GAAG,CAAC;SACtB,MAAM,CAAC;QACJ,EAAE,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;QACrB,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;QAC5B,OAAO,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC,QAAQ,EAAE;KAC5C,CAAC;SACD,WAAW,EAAE,CAAC;IAEnB,MAAM,cAAc,GAAG,CAAC;SACnB,MAAM,CAAC;QACJ,QAAQ,EAAE,CAAC;aACN,MAAM,CAAC;YACJ,GAAG,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,QAAQ,EAAE;YAC3B,GAAG,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,QAAQ,EAAE;YAC3B,OAAO,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,QAAQ,EAAE;SAClC,CAAC;aACD,WAAW,EAAE;aACb,QAAQ,EAAE;QACf,MAAM,EAAE,CAAC;aACJ,MAAM,CAAC;YACJ,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE;YACxC,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE;YACrC,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE;SACvC,CAAC;aACD,WAAW,EAAE;aACb,QAAQ,EAAE;QACf,SAAS,EAAE,CAAC;aACP,MAAM,CAAC;YACJ,YAAY,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE;SAC7C,CAAC;aACD,WAAW,EAAE;aACb,QAAQ,EAAE;QACf,MAAM,EAAE,CAAC;aACJ,MAAM,CAAC;YACJ,qBAAqB,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,EAAE;SAChE,CAAC;aACD,WAAW,EAAE;aACb,QAAQ,EAAE;QACf,QAAQ,EAAE,CAAC;aACN,MAAM,CAAC;YACJ,kBAAkB,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,QAAQ,EAAE;SAC7C,CAAC;aACD,WAAW,EAAE;aACb,QAAQ,EAAE;QACf,OAAO,EAAE,CAAC,CAAC,KAAK,CAAC,cAAc,CAAC,CAAC,QAAQ,EAAE;QAC3C,SAAS,EAAE,CAAC,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC,QAAQ,EAAE;QACvC,SAAS,EAAE,CAAC;aACP,MAAM,CAAC;YACJ,SAAS,EAAE,CAAC,CAAC,KAAK,CAAC,iBAAiB,CAAC,CAAC,QAAQ,EAAE;SACnD,CAAC;aACD,WAAW,EAAE;aACb,QAAQ,EAAE;QACf,IAAI,EAAE,CAAC;aACF,MAAM,CAAC;YACJ,KAAK,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,QAAQ,EAAE;SACnD,CAAC;aACD,WAAW,EAAE;aACb,QAAQ,EAAE;QACf,MAAM,EAAE,CAAC;aACJ,MAAM,CAAC;YACJ,OAAO,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,QAAQ,EAAE;YAC/B,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,EAAE;SACrD,CAAC;aACD,WAAW,EAAE;aACb,QAAQ,EAAE;KAClB,CAAC;SACD,WAAW,EAAE,CAAC;IAEnB,OAAO,cAAc,CAAC,KAAK,CAAC,GAAG,CAAmB,CAAC;AACvD,CAAC"}
+{"version":3,"file":"configSettingsParse.js","sourceRoot":"","sources":["../../sources/config/configSettingsParse.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAIxB;;;GAGG;AACH,MAAM,UAAU,mBAAmB,CAAC,GAAY;IAC5C,MAAM,cAAc,GAAG,CAAC;SACnB,MAAM,CAAC;QACJ,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;QAC7B,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;QAC3B,OAAO,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,QAAQ,EAAE;QAC/B,QAAQ,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC,QAAQ,EAAE;KAC7C,CAAC;SACD,WAAW,EAAE,CAAC;IAEnB,MAAM,aAAa,GAAG,CAAC;SAClB,MAAM,CAAC;QACJ,OAAO,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,QAAQ,EAAE;QAC/B,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;QAC5B,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;QAC3B,OAAO,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,UAAU,EAAE,IAAI,CAAC,CAAC,CAAC,QAAQ,EAAE;QAC9C,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;QAC/B,YAAY,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;QACnC,YAAY,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;KACtC,CAAC;SACD,WAAW,EAAE,CAAC;IAEnB,MAAM,QAAQ,GAAG,CAAC;SACb,MAAM,CAAC;QACJ,EAAE,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;QACrB,OAAO,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,QAAQ,EAAE;QAC/B,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;QAC5B,OAAO,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC,QAAQ,EAAE;QACzC,KAAK,EAAE,aAAa,CAAC,QAAQ,EAAE;KAClC,CAAC;SACD,WAAW,EAAE,CAAC;IAEnB,MAAM,iBAAiB,GAAG,CAAC;SACtB,MAAM,CAAC;QACJ,EAAE,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;QACrB,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;QAC5B,OAAO,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC,QAAQ,EAAE;KAC5C,CAAC;SACD,WAAW,EAAE,CAAC;IAEnB,MAAM,cAAc,GAAG,CAAC;SACnB,MAAM,CAAC;QACJ,MAAM,EAAE,CAAC;aACJ,MAAM,CAAC;YACJ,OAAO,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,QAAQ,EAAE;YAC/B,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE;YACnC,GAAG,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE;YACjC,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE;YACxC,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE;YACrC,yBAAyB,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,QAAQ,EAAE;YACjD,QAAQ,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,QAAQ,EAAE;YAChC,kBAAkB,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,QAAQ,EAAE;YAC1C,MAAM,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE;YAC7C,OAAO,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE;YAC9C,4BAA4B,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE;YACnE,kBAAkB,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE;YACzD,eAAe,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE;SACzD,CAAC;aACD,WAAW,EAAE;aACb,QAAQ,EAAE;QACf,QAAQ,EAAE,CAAC;aACN,MAAM,CAAC;YACJ,GAAG,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,QAAQ,EAAE;YAC3B,GAAG,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,QAAQ,EAAE;YAC3B,OAAO,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,QAAQ,EAAE;SAClC,CAAC;aACD,WAAW,EAAE;aACb,QAAQ,EAAE;QACf,MAAM,EAAE,CAAC;aACJ,MAAM,CAAC;YACJ,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE;YACxC,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE;YACrC,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE;SACvC,CAAC;aACD,WAAW,EAAE;aACb,QAAQ,EAAE;QACf,SAAS,EAAE,CAAC;aACP,MAAM,CAAC;YACJ,YAAY,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE;SAC7C,CAAC;aACD,WAAW,EAAE;aACb,QAAQ,EAAE;QACf,MAAM,EAAE,CAAC;aACJ,MAAM,CAAC;YACJ,qBAAqB,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,EAAE;SAChE,CAAC;aACD,WAAW,EAAE;aACb,QAAQ,EAAE;QACf,QAAQ,EAAE,CAAC;aACN,MAAM,CAAC;YACJ,kBAAkB,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,QAAQ,EAAE;SAC7C,CAAC;aACD,WAAW,EAAE;aACb,QAAQ,EAAE;QACf,OAAO,EAAE,CAAC,CAAC,KAAK,CAAC,cAAc,CAAC,CAAC,QAAQ,EAAE;QAC3C,SAAS,EAAE,CAAC,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC,QAAQ,EAAE;QACvC,SAAS,EAAE,CAAC;aACP,MAAM,CAAC;YACJ,SAAS,EAAE,CAAC,CAAC,KAAK,CAAC,iBAAiB,CAAC,CAAC,QAAQ,EAAE;SACnD,CAAC;aACD,WAAW,EAAE;aACb,QAAQ,EAAE;QACf,IAAI,EAAE,CAAC;aACF,MAAM,CAAC;YACJ,KAAK,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,QAAQ,EAAE;SACnD,CAAC;aACD,WAAW,EAAE;aACb,QAAQ,EAAE;QACf,MAAM,EAAE,CAAC;aACJ,MAAM,CAAC;YACJ,OAAO,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,QAAQ,EAAE;YAC/B,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,EAAE;SACrD,CAAC;aACD,WAAW,EAAE;aACb,QAAQ,EAAE;KAClB,CAAC;SACD,WAAW,EAAE,CAAC;IAEnB,OAAO,cAAc,CAAC,KAAK,CAAC,GAAG,CAAmB,CAAC;AACvD,CAAC"}

package/dist/config/configSettingsParse.spec.js

@@ -17,5 +17,71 @@ describe("configSettingsParse", () => {
         });
         expect(parsed.engine?.dbPath).toBe("/tmp/daycare/daycare.db");
     });
+    it("accepts full docker settings", () => {
+        const parsed = configSettingsParse({
+            docker: {
+                enabled: true,
+                image: "daycare-sandbox",
+                tag: "latest",
+                socketPath: "/var/run/docker.sock",
+                runtime: "runsc",
+                enableWeakerNestedSandbox: true,
+                readOnly: true,
+                unconfinedSecurity: true,
+                capAdd: ["NET_ADMIN"],
+                capDrop: ["MKNOD"],
+                allowLocalNetworkingForUsers: ["user-1", "user-2"],
+                isolatedDnsServers: ["1.1.1.1", "8.8.8.8"],
+                localDnsServers: ["192.168.0.1"]
+            }
+        });
+        expect(parsed.docker).toEqual({
+            enabled: true,
+            image: "daycare-sandbox",
+            tag: "latest",
+            socketPath: "/var/run/docker.sock",
+            runtime: "runsc",
+            enableWeakerNestedSandbox: true,
+            readOnly: true,
+            unconfinedSecurity: true,
+            capAdd: ["NET_ADMIN"],
+            capDrop: ["MKNOD"],
+            allowLocalNetworkingForUsers: ["user-1", "user-2"],
+            isolatedDnsServers: ["1.1.1.1", "8.8.8.8"],
+            localDnsServers: ["192.168.0.1"]
+        });
+    });
+    it("accepts missing docker settings", () => {
+        const parsed = configSettingsParse({});
+        expect(parsed.docker).toBeUndefined();
+    });
+    it("accepts partial docker settings", () => {
+        const parsed = configSettingsParse({
+            docker: {
+                enabled: true
+            }
+        });
+        expect(parsed.docker).toEqual({
+            enabled: true
+        });
+    });
+    it("accepts docker local-network user allowlist", () => {
+        const parsed = configSettingsParse({
+            docker: {
+                allowLocalNetworkingForUsers: ["user-1"]
+            }
+        });
+        expect(parsed.docker?.allowLocalNetworkingForUsers).toEqual(["user-1"]);
+    });
+    it("accepts docker dns settings", () => {
+        const parsed = configSettingsParse({
+            docker: {
+                isolatedDnsServers: ["9.9.9.9"],
+                localDnsServers: ["192.168.1.1"]
+            }
+        });
+        expect(parsed.docker?.isolatedDnsServers).toEqual(["9.9.9.9"]);
+        expect(parsed.docker?.localDnsServers).toEqual(["192.168.1.1"]);
+    });
 });
 //# sourceMappingURL=configSettingsParse.spec.js.map

package/dist/config/configSettingsParse.spec.js.map

@@ -1 +1 @@
-{"version":3,"file":"configSettingsParse.spec.js","sourceRoot":"","sources":["../../sources/config/configSettingsParse.spec.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,MAAM,EAAE,EAAE,EAAE,MAAM,QAAQ,CAAC;AAE9C,OAAO,EAAE,mBAAmB,EAAE,MAAM,0BAA0B,CAAC;AAE/D,QAAQ,CAAC,qBAAqB,EAAE,GAAG,EAAE;IACjC,EAAE,CAAC,0BAA0B,EAAE,GAAG,EAAE;QAChC,MAAM,MAAM,GAAG,mBAAmB,CAAC;YAC/B,QAAQ,EAAE;gBACN,OAAO,EAAE,IAAI;aAChB;SACJ,CAAC,CAAC;QAEH,MAAM,CAAC,MAAM,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IAChD,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,uBAAuB,EAAE,GAAG,EAAE;QAC7B,MAAM,MAAM,GAAG,mBAAmB,CAAC;YAC/B,MAAM,EAAE;gBACJ,MAAM,EAAE,yBAAyB;aACpC;SACJ,CAAC,CAAC;QAEH,MAAM,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,IAAI,CAAC,yBAAyB,CAAC,CAAC;IAClE,CAAC,CAAC,CAAC;AACP,CAAC,CAAC,CAAC"}
+{"version":3,"file":"configSettingsParse.spec.js","sourceRoot":"","sources":["../../sources/config/configSettingsParse.spec.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,MAAM,EAAE,EAAE,EAAE,MAAM,QAAQ,CAAC;AAE9C,OAAO,EAAE,mBAAmB,EAAE,MAAM,0BAA0B,CAAC;AAE/D,QAAQ,CAAC,qBAAqB,EAAE,GAAG,EAAE;IACjC,EAAE,CAAC,0BAA0B,EAAE,GAAG,EAAE;QAChC,MAAM,MAAM,GAAG,mBAAmB,CAAC;YAC/B,QAAQ,EAAE;gBACN,OAAO,EAAE,IAAI;aAChB;SACJ,CAAC,CAAC;QAEH,MAAM,CAAC,MAAM,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IAChD,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,uBAAuB,EAAE,GAAG,EAAE;QAC7B,MAAM,MAAM,GAAG,mBAAmB,CAAC;YAC/B,MAAM,EAAE;gBACJ,MAAM,EAAE,yBAAyB;aACpC;SACJ,CAAC,CAAC;QAEH,MAAM,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,IAAI,CAAC,yBAAyB,CAAC,CAAC;IAClE,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,8BAA8B,EAAE,GAAG,EAAE;QACpC,MAAM,MAAM,GAAG,mBAAmB,CAAC;YAC/B,MAAM,EAAE;gBACJ,OAAO,EAAE,IAAI;gBACb,KAAK,EAAE,iBAAiB;gBACxB,GAAG,EAAE,QAAQ;gBACb,UAAU,EAAE,sBAAsB;gBAClC,OAAO,EAAE,OAAO;gBAChB,yBAAyB,EAAE,IAAI;gBAC/B,QAAQ,EAAE,IAAI;gBACd,kBAAkB,EAAE,IAAI;gBACxB,MAAM,EAAE,CAAC,WAAW,CAAC;gBACrB,OAAO,EAAE,CAAC,OAAO,CAAC;gBAClB,4BAA4B,EAAE,CAAC,QAAQ,EAAE,QAAQ,CAAC;gBAClD,kBAAkB,EAAE,CAAC,SAAS,EAAE,SAAS,CAAC;gBAC1C,eAAe,EAAE,CAAC,aAAa,CAAC;aACnC;SACJ,CAAC,CAAC;QAEH,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,OAAO,CAAC;YAC1B,OAAO,EAAE,IAAI;YACb,KAAK,EAAE,iBAAiB;YACxB,GAAG,EAAE,QAAQ;YACb,UAAU,EAAE,sBAAsB;YAClC,OAAO,EAAE,OAAO;YAChB,yBAAyB,EAAE,IAAI;YAC/B,QAAQ,EAAE,IAAI;YACd,kBAAkB,EAAE,IAAI;YACxB,MAAM,EAAE,CAAC,WAAW,CAAC;YACrB,OAAO,EAAE,CAAC,OAAO,CAAC;YAClB,4BAA4B,EAAE,CAAC,QAAQ,EAAE,QAAQ,CAAC;YAClD,kBAAkB,EAAE,CAAC,SAAS,EAAE,SAAS,CAAC;YAC1C,eAAe,EAAE,CAAC,aAAa,CAAC;SACnC,CAAC,CAAC;IACP,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,iCAAiC,EAAE,GAAG,EAAE;QACvC,MAAM,MAAM,GAAG,mBAAmB,CAAC,EAAE,CAAC,CAAC;QACvC,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,aAAa,EAAE,CAAC;IAC1C,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,iCAAiC,EAAE,GAAG,EAAE;QACvC,MAAM,MAAM,GAAG,mBAAmB,CAAC;YAC/B,MAAM,EAAE;gBACJ,OAAO,EAAE,IAAI;aAChB;SACJ,CAAC,CAAC;QAEH,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,OAAO,CAAC;YAC1B,OAAO,EAAE,IAAI;SAChB,CAAC,CAAC;IACP,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,6CAA6C,EAAE,GAAG,EAAE;QACnD,MAAM,MAAM,GAAG,mBAAmB,CAAC;YAC/B,MAAM,EAAE;gBACJ,4BAA4B,EAAE,CAAC,QAAQ,CAAC;aAC3C;SACJ,CAAC,CAAC;QAEH,MAAM,CAAC,MAAM,CAAC,MAAM,EAAE,4BAA4B,CAAC,CAAC,OAAO,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC;IAC5E,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,6BAA6B,EAAE,GAAG,EAAE;QACnC,MAAM,MAAM,GAAG,mBAAmB,CAAC;YAC/B,MAAM,EAAE;gBACJ,kBAAkB,EAAE,CAAC,SAAS,CAAC;gBAC/B,eAAe,EAAE,CAAC,aAAa,CAAC;aACnC;SACJ,CAAC,CAAC;QAEH,MAAM,CAAC,MAAM,CAAC,MAAM,EAAE,kBAAkB,CAAC,CAAC,OAAO,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC;QAC/D,MAAM,CAAC,MAAM,CAAC,MAAM,EAAE,eAAe,CAAC,CAAC,OAAO,CAAC,CAAC,aAAa,CAAC,CAAC,CAAC;IACpE,CAAC,CAAC,CAAC;AACP,CAAC,CAAC,CAAC"}

package/dist/config/configTypes.d.ts

@@ -1,4 +1,4 @@
-import type { ResolvedFeaturesConfig, ResolvedSettingsConfig } from "../settings.js";
+import type { ResolvedDockerSettings, ResolvedFeaturesConfig, ResolvedSettingsConfig } from "../settings.js";
 export type Config = {
     settingsPath: string;
     configDir: string;
@@ -8,6 +8,7 @@ export type Config = {
     dbPath: string;
     authPath: string;
     socketPath: string;
+    docker: ResolvedDockerSettings;
     features: ResolvedFeaturesConfig;
     settings: ResolvedSettingsConfig;
     verbose: boolean;

package/dist/config/configTypes.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"configTypes.d.ts","sourceRoot":"","sources":["../../sources/config/configTypes.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,sBAAsB,EAAE,sBAAsB,EAAE,MAAM,gBAAgB,CAAC;AAErF,MAAM,MAAM,MAAM,GAAG;IACjB,YAAY,EAAE,MAAM,CAAC;IACrB,SAAS,EAAE,MAAM,CAAC;IAClB,OAAO,EAAE,MAAM,CAAC;IAChB,SAAS,EAAE,MAAM,CAAC;IAClB,QAAQ,EAAE,MAAM,CAAC;IACjB,MAAM,EAAE,MAAM,CAAC;IACf,QAAQ,EAAE,MAAM,CAAC;IACjB,UAAU,EAAE,MAAM,CAAC;IACnB,QAAQ,EAAE,sBAAsB,CAAC;IACjC,QAAQ,EAAE,sBAAsB,CAAC;IACjC,OAAO,EAAE,OAAO,CAAC;CACpB,CAAC;AAEF,MAAM,MAAM,eAAe,GAAG;IAC1B,OAAO,CAAC,EAAE,OAAO,CAAC;CACrB,CAAC"}
+{"version":3,"file":"configTypes.d.ts","sourceRoot":"","sources":["../../sources/config/configTypes.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,sBAAsB,EAAE,sBAAsB,EAAE,sBAAsB,EAAE,MAAM,gBAAgB,CAAC;AAE7G,MAAM,MAAM,MAAM,GAAG;IACjB,YAAY,EAAE,MAAM,CAAC;IACrB,SAAS,EAAE,MAAM,CAAC;IAClB,OAAO,EAAE,MAAM,CAAC;IAChB,SAAS,EAAE,MAAM,CAAC;IAClB,QAAQ,EAAE,MAAM,CAAC;IACjB,MAAM,EAAE,MAAM,CAAC;IACf,QAAQ,EAAE,MAAM,CAAC;IACjB,UAAU,EAAE,MAAM,CAAC;IACnB,MAAM,EAAE,sBAAsB,CAAC;IAC/B,QAAQ,EAAE,sBAAsB,CAAC;IACjC,QAAQ,EAAE,sBAAsB,CAAC;IACjC,OAAO,EAAE,OAAO,CAAC;CACpB,CAAC;AAEF,MAAM,MAAM,eAAe,GAAG;IAC1B,OAAO,CAAC,EAAE,OAAO,CAAC;CACrB,CAAC"}

package/dist/engine/agents/agent.d.ts

@@ -1,11 +1,12 @@
+import type { Context } from "@/types";
+import { Sandbox } from "../../sandbox/sandbox.js";
 import type { UserHome } from "../users/userHome.js";
 import type { AgentSystem } from "./agentSystem.js";
 import type { AgentDescriptor } from "./ops/agentDescriptorTypes.js";
 import type { AgentInbox } from "./ops/agentInbox.js";
 import type { AgentState } from "./ops/agentTypes.js";
 export declare class Agent {
-    readonly id: string;
-    readonly userId: string;
+    readonly ctx: Context;
     readonly descriptor: AgentDescriptor;
     readonly inbox: AgentInbox;
     readonly state: AgentState;
@@ -15,20 +16,22 @@ export declare class Agent {
     private started;
     private inferenceAbortController;
     private readonly userHome;
-    private readonly files;
+    readonly sandbox: Sandbox;
     private endTurnCount;
     private constructor();
     /**
      * Creates a new agent and persists descriptor + state + initial session row.
-     * Expects: agentId is a cuid2 value; descriptor is validated.
+     * Expects: ctx.agentId is a cuid2 value; descriptor is validated.
      */
-    static create(agentId: string, descriptor: AgentDescriptor, userId: string, inbox: AgentInbox, agentSystem: AgentSystem, userHome: UserHome): Promise<Agent>;
+    static create(ctx: Context, descriptor: AgentDescriptor, inbox: AgentInbox, agentSystem: AgentSystem, userHome: UserHome): Promise<Agent>;
     /**
      * Rehydrates an agent from persisted descriptor + state.
      * Rebuilds permissions from userHome to avoid stale legacy paths.
      * Expects: state and descriptor already validated.
      */
-    static restore(agentId: string, userId: string, descriptor: AgentDescriptor, state: AgentState, inbox: AgentInbox, agentSystem: AgentSystem, userHome: UserHome): Agent;
+    static restore(ctx: Context, descriptor: AgentDescriptor, state: AgentState, inbox: AgentInbox, agentSystem: AgentSystem, userHome: UserHome): Agent;
+    get id(): string;
+    get userId(): string;
     start(): void;
     isProcessing(): boolean;
     /**
@@ -73,7 +76,6 @@ export declare class Agent {
      * Expects: parent agent exists.
      */
     notifySubagentFailure(reason: string, error?: unknown): Promise<void>;
-    private messageFilesNormalize;
     private listContextTools;
     private resolveAgentKind;
     private resolveAgentProvider;

package/dist/engine/agents/agent.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"agent.d.ts","sourceRoot":"","sources":["../../../sources/engine/agents/agent.ts"],"names":[],"mappings":"AAgCA,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,sBAAsB,CAAC;AAErD,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,kBAAkB,CAAC;AAIpD,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,+BAA+B,CAAC;AAOrE,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,qBAAqB,CAAC;AAStD,OAAO,KAAK,EAWR,UAAU,EACb,MAAM,qBAAqB,CAAC;AAQ7B,qBAAa,KAAK;IACd,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAC;IACpB,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,UAAU,EAAE,eAAe,CAAC;IACrC,QAAQ,CAAC,KAAK,EAAE,UAAU,CAAC;IAC3B,QAAQ,CAAC,KAAK,EAAE,UAAU,CAAC;IAC3B,OAAO,CAAC,QAAQ,CAAC,WAAW,CAAc;IAC1C,OAAO,CAAC,UAAU,CAAuB;IACzC,OAAO,CAAC,UAAU,CAAS;IAC3B,OAAO,CAAC,OAAO,CAAS;IACxB,OAAO,CAAC,wBAAwB,CAAgC;IAChE,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAAW;IACpC,OAAO,CAAC,QAAQ,CAAC,KAAK,CAAQ;IAC9B,OAAO,CAAC,YAAY,CAAK;IAEzB,OAAO;IAsBP;;;OAGG;WACU,MAAM,CACf,OAAO,EAAE,MAAM,EACf,UAAU,EAAE,eAAe,EAC3B,MAAM,EAAE,MAAM,EACd,KAAK,EAAE,UAAU,EACjB,WAAW,EAAE,WAAW,EACxB,QAAQ,EAAE,QAAQ,GACnB,OAAO,CAAC,KAAK,CAAC;IAqCjB;;;;OAIG;IACH,MAAM,CAAC,OAAO,CACV,OAAO,EAAE,MAAM,EACf,MAAM,EAAE,MAAM,EACd,UAAU,EAAE,eAAe,EAC3B,KAAK,EAAE,UAAU,EACjB,KAAK,EAAE,UAAU,EACjB,WAAW,EAAE,WAAW,EACxB,QAAQ,EAAE,QAAQ,GACnB,KAAK;IAUR,KAAK,IAAI,IAAI;IAab,YAAY,IAAI,OAAO;IAIvB;;;OAGG;IACH,cAAc,IAAI,OAAO;YASX,OAAO;IA4CrB;;;OAGG;YACW,cAAc;IAc5B;;;OAGG;YACW,yBAAyB;YAoBzB,eAAe;YAuCf,mBAAmB;YAmBnB,aAAa;YAmQb,mBAAmB;YAmFnB,YAAY;YA0BZ,WAAW;YA6DX,gBAAgB;IAqB9B;;;OAGG;YACW,oBAAoB;YAyCpB,aAAa;YAab,mBAAmB;IAsDjC,OAAO,CAAC,oBAAoB;IAkB5B;;;OAGG;YACW,wBAAwB;IA8GtC,OAAO,CAAC,sBAAsB;IAyB9B;;;OAGG;IACG,qBAAqB,CAAC,MAAM,EAAE,MAAM,EAAE,KAAK,CAAC,EAAE,OAAO,GAAG,OAAO,CAAC,IAAI,CAAC;YA8B7D,qBAAqB;YAsBrB,gBAAgB;IA+B9B,OAAO,CAAC,gBAAgB;IAOxB,OAAO,CAAC,oBAAoB;IAe5B;;;OAGG;IACH,OAAO,CAAC,8BAA8B;YAYxB,mBAAmB;YAInB,sBAAsB;CA4CvC"}
+{"version":3,"file":"agent.d.ts","sourceRoot":"","sources":["../../../sources/engine/agents/agent.ts"],"names":[],"mappings":"AAKA,OAAO,KAAK,EAAE,OAAO,EAAwC,MAAM,SAAS,CAAC;AAI7E,OAAO,EAAE,OAAO,EAAE,MAAM,0BAA0B,CAAC;AAuBnD,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,sBAAsB,CAAC;AAErD,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,kBAAkB,CAAC;AAGpD,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,+BAA+B,CAAC;AAOrE,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,qBAAqB,CAAC;AAStD,OAAO,KAAK,EAWR,UAAU,EACb,MAAM,qBAAqB,CAAC;AAS7B,qBAAa,KAAK;IACd,QAAQ,CAAC,GAAG,EAAE,OAAO,CAAC;IACtB,QAAQ,CAAC,UAAU,EAAE,eAAe,CAAC;IACrC,QAAQ,CAAC,KAAK,EAAE,UAAU,CAAC;IAC3B,QAAQ,CAAC,KAAK,EAAE,UAAU,CAAC;IAC3B,OAAO,CAAC,QAAQ,CAAC,WAAW,CAAc;IAC1C,OAAO,CAAC,UAAU,CAAuB;IACzC,OAAO,CAAC,UAAU,CAAS;IAC3B,OAAO,CAAC,OAAO,CAAS;IACxB,OAAO,CAAC,wBAAwB,CAAgC;IAChE,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAAW;IACpC,QAAQ,CAAC,OAAO,EAAE,OAAO,CAAC;IAC1B,OAAO,CAAC,YAAY,CAAK;IAEzB,OAAO;IA2CP;;;OAGG;WACU,MAAM,CACf,GAAG,EAAE,OAAO,EACZ,UAAU,EAAE,eAAe,EAC3B,KAAK,EAAE,UAAU,EACjB,WAAW,EAAE,WAAW,EACxB,QAAQ,EAAE,QAAQ,GACnB,OAAO,CAAC,KAAK,CAAC;IAqCjB;;;;OAIG;IACH,MAAM,CAAC,OAAO,CACV,GAAG,EAAE,OAAO,EACZ,UAAU,EAAE,eAAe,EAC3B,KAAK,EAAE,UAAU,EACjB,KAAK,EAAE,UAAU,EACjB,WAAW,EAAE,WAAW,EACxB,QAAQ,EAAE,QAAQ,GACnB,KAAK;IAUR,IAAI,EAAE,IAAI,MAAM,CAEf;IAED,IAAI,MAAM,IAAI,MAAM,CAEnB;IAED,KAAK,IAAI,IAAI;IAab,YAAY,IAAI,OAAO;IAIvB;;;OAGG;IACH,cAAc,IAAI,OAAO;YASX,OAAO;IA4CrB;;;OAGG;YACW,cAAc;IAc5B;;;OAGG;YACW,yBAAyB;YAoBzB,eAAe;YAuCf,mBAAmB;YAmBnB,aAAa;YAqRb,mBAAmB;YAmFnB,YAAY;YA0BZ,WAAW;YA6DX,gBAAgB;IAqB9B;;;OAGG;YACW,oBAAoB;YAyCpB,aAAa;YAab,mBAAmB;IAsDjC,OAAO,CAAC,oBAAoB;IAkB5B;;;OAGG;YACW,wBAAwB;IA8GtC,OAAO,CAAC,sBAAsB;IAwB9B;;;OAGG;IACG,qBAAqB,CAAC,MAAM,EAAE,MAAM,EAAE,KAAK,CAAC,EAAE,OAAO,GAAG,OAAO,CAAC,IAAI,CAAC;YA+B7D,gBAAgB;IA+B9B,OAAO,CAAC,gBAAgB;IAOxB,OAAO,CAAC,oBAAoB;IAe5B;;;OAGG;IACH,OAAO,CAAC,8BAA8B;YAYxB,mBAAmB;YAInB,sBAAsB;CA4CvC"}