devchain-cli 0.23.3 → 0.24.0

package/dist/server/modules/core/controllers/docker-settings.js

@@ -0,0 +1,282 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.INSPECT_ONLY_FIELDS = exports.CANNOT_MOVE_FIELDS = exports.HOST_CONFIG_ALLOWLIST = exports.CONFIG_ALLOWLIST = void 0;
+exports.projectDockerCreate = projectDockerCreate;
+const node_path_1 = require("node:path");
+const docker_engine_client_1 = require("./docker-engine.client");
+exports.CONFIG_ALLOWLIST = [
+    'Hostname',
+    'Domainname',
+    'User',
+    'AttachStdin',
+    'AttachStdout',
+    'AttachStderr',
+    'ExposedPorts',
+    'Tty',
+    'OpenStdin',
+    'StdinOnce',
+    'Env',
+    'Cmd',
+    'Healthcheck',
+    'ArgsEscaped',
+    'Image',
+    'Volumes',
+    'WorkingDir',
+    'Entrypoint',
+    'NetworkDisabled',
+    'OnBuild',
+    'Labels',
+    'StopSignal',
+    'StopTimeout',
+    'Shell',
+];
+exports.HOST_CONFIG_ALLOWLIST = [
+    'Binds',
+    'Mounts',
+    'PortBindings',
+    'RestartPolicy',
+    'NetworkMode',
+    'LogConfig',
+    'AutoRemove',
+    'VolumeDriver',
+    'VolumesFrom',
+    'ConsoleSize',
+    'CapAdd',
+    'CapDrop',
+    'Dns',
+    'DnsOptions',
+    'DnsSearch',
+    'ExtraHosts',
+    'GroupAdd',
+    'OomScoreAdj',
+    'ReadonlyRootfs',
+    'PublishAllPorts',
+    'ShmSize',
+    'Sysctls',
+    'Tmpfs',
+    'Ulimits',
+    'Init',
+    'Isolation',
+    'MaskedPaths',
+    'ReadonlyPaths',
+    'CgroupnsMode',
+    'CpuShares',
+    'Memory',
+    'NanoCpus',
+    'CpuPeriod',
+    'CpuQuota',
+    'CpuRealtimePeriod',
+    'CpuRealtimeRuntime',
+    'CpusetCpus',
+    'CpusetMems',
+    'MemoryReservation',
+    'MemorySwap',
+    'MemorySwappiness',
+    'OomKillDisable',
+    'PidsLimit',
+    'StorageOpt',
+    'BlkioWeight',
+];
+exports.CANNOT_MOVE_FIELDS = [
+    'Devices',
+    'Binds',
+    'Mounts',
+    'NetworkMode',
+    'Privileged',
+    'DeviceRequests',
+    'PidMode',
+    'IpcMode',
+    'UsernsMode',
+    'Runtime',
+    'CgroupParent',
+    'SecurityOpt',
+    'Links',
+];
+exports.INSPECT_ONLY_FIELDS = [
+    'Id',
+    'Created',
+    'State',
+    'Path',
+    'Args',
+    'ResolvConfPath',
+    'HostnamePath',
+    'HostsPath',
+    'LogPath',
+    'GraphDriver',
+    'Storage',
+    'Mounts',
+    'NetworkSettings',
+    'Size',
+    'SizeRw',
+    'SizeRootFs',
+    'Name',
+    'RestartCount',
+    'Driver',
+    'Platform',
+    'AppArmorProfile',
+    'ProcessLabel',
+    'MountLabel',
+    'ExecIDs',
+    'ImageManifestDescriptor',
+];
+function set(value) {
+    if (value === undefined || value === null || value === false || value === '' || value === 0)
+        return false;
+    if (Array.isArray(value))
+        return value.some(set);
+    if (typeof value === 'object')
+        return Object.values(value).some(set);
+    return true;
+}
+function unsupported(name) {
+    throw new docker_engine_client_1.DockerEngineError('unsupported', `unsupported setting ${name}`);
+}
+function object(value, name) {
+    if (!value || typeof value !== 'object' || Array.isArray(value))
+        return unsupported(name);
+    return value;
+}
+function checkFields(values, allowed, prefix) {
+    for (const [key, value] of Object.entries(values)) {
+        if (set(value) && !allowed.includes(key))
+            unsupported(`${prefix}${key}`);
+    }
+}
+function cannotMove(field) {
+    throw new docker_engine_client_1.DockerEngineError('cannot-move', `Container cannot move: ${field}`);
+}
+function dockerSocket(path, socketPath) {
+    if (typeof path !== 'string')
+        return false;
+    const normalized = node_path_1.posix.normalize(path);
+    return normalized === node_path_1.posix.normalize(socketPath) || node_path_1.posix.basename(normalized) === 'docker.sock';
+}
+function projectDockerCreate(inspect, socketPath = '/var/run/docker.sock') {
+    checkFields(inspect, [...exports.INSPECT_ONLY_FIELDS, 'Config', 'HostConfig', 'Image'], '');
+    const config = object(inspect.Config, 'Config');
+    const host = object(inspect.HostConfig, 'HostConfig');
+    checkFields(config, exports.CONFIG_ALLOWLIST, 'Config.');
+    checkFields(host, [...exports.HOST_CONFIG_ALLOWLIST, ...exports.CANNOT_MOVE_FIELDS], 'HostConfig.');
+    for (const field of [
+        'Devices',
+        'Privileged',
+        'DeviceRequests',
+        'CgroupParent',
+        'SecurityOpt',
+        'Links',
+    ]) {
+        if (set(host[field]))
+            cannotMove(`HostConfig.${field}`);
+    }
+    if (host.NetworkMode === 'host' || String(host.NetworkMode).startsWith('container:'))
+        cannotMove('HostConfig.NetworkMode');
+    for (const field of ['PidMode', 'IpcMode', 'UsernsMode']) {
+        if (host[field] === 'host')
+            cannotMove(`HostConfig.${field}`);
+        if (set(host[field]) && !['private', 'shareable'].includes(String(host[field])))
+            unsupported(`HostConfig.${field}`);
+    }
+    if (set(host.Runtime) && host.Runtime !== 'runc')
+        cannotMove('HostConfig.Runtime');
+    if (set(host.VolumesFrom))
+        unsupported('HostConfig.VolumesFrom');
+    if (host.CgroupnsMode === 'host')
+        unsupported('HostConfig.CgroupnsMode');
+    if (set(host.Isolation) && host.Isolation !== 'default')
+        unsupported('HostConfig.Isolation');
+    if (host.AutoRemove === true)
+        cannotMove('HostConfig.AutoRemove (temporary container)');
+    if (Array.isArray(host.Binds))
+        for (const bind of host.Binds) {
+            if (typeof bind !== 'string')
+                unsupported('HostConfig.Binds');
+            if (bind
+                .split(':')
+                .slice(0, 2)
+                .some((path) => dockerSocket(path, socketPath)))
+                cannotMove('HostConfig.Binds (Docker socket)');
+        }
+    if (Array.isArray(host.Mounts))
+        for (const entry of host.Mounts) {
+            const mount = object(entry, 'HostConfig.Mounts');
+            checkFields(mount, [
+                'Type',
+                'Source',
+                'Target',
+                'ReadOnly',
+                'Consistency',
+                'BindOptions',
+                'VolumeOptions',
+                'TmpfsOptions',
+            ], 'HostConfig.Mounts.');
+            if (mount.Type === 'bind' &&
+                (dockerSocket(mount.Source, socketPath) || dockerSocket(mount.Target, socketPath)))
+                cannotMove('HostConfig.Mounts (Docker socket)');
+            if (!['bind', 'volume', 'tmpfs'].includes(String(mount.Type)))
+                unsupported('HostConfig.Mounts.Type');
+            for (const [key, fields] of Object.entries({
+                BindOptions: [
+                    'Propagation',
+                    'NonRecursive',
+                    'CreateMountpoint',
+                    'ReadOnlyNonRecursive',
+                    'ReadOnlyForceRecursive',
+                ],
+                VolumeOptions: ['NoCopy', 'Labels', 'Subpath', 'DriverConfig'],
+                TmpfsOptions: ['SizeBytes', 'Mode', 'Options'],
+            }))
+                if (mount[key])
+                    checkFields(object(mount[key], `HostConfig.Mounts.${key}`), fields, `HostConfig.Mounts.${key}.`);
+        }
+    for (const [key, fields] of Object.entries({
+        RestartPolicy: ['Name', 'MaximumRetryCount'],
+        LogConfig: ['Type', 'Config'],
+    }))
+        if (host[key])
+            checkFields(object(host[key], `HostConfig.${key}`), fields, `HostConfig.${key}.`);
+    if (config.Healthcheck)
+        checkFields(object(config.Healthcheck, 'Config.Healthcheck'), ['Test', 'Interval', 'Timeout', 'Retries', 'StartPeriod', 'StartInterval'], 'Config.Healthcheck.');
+    const endpoints = {};
+    for (const [name, endpoint] of Object.entries(inspect.NetworkSettings?.Networks ?? {})) {
+        checkFields(endpoint, [
+            'Aliases',
+            'IPAMConfig',
+            'Links',
+            'DriverOpts',
+            'GwPriority',
+            'NetworkID',
+            'EndpointID',
+            'Gateway',
+            'IPAddress',
+            'IPPrefixLen',
+            'IPv6Gateway',
+            'GlobalIPv6Address',
+            'GlobalIPv6PrefixLen',
+            'MacAddress',
+            'DNSNames',
+        ], `NetworkSettings.Networks.${name}.`);
+        for (const field of ['IPAMConfig', 'Links', 'DriverOpts', 'GwPriority'])
+            if (set(endpoint[field]))
+                unsupported(`NetworkSettings.Networks.${name}.${field}`);
+        endpoints[name] =
+            endpoint.Aliases == null ? {} : { Aliases: structuredClone(endpoint.Aliases) };
+    }
+    const projectedHost = {};
+    for (const key of new Set([
+        ...exports.HOST_CONFIG_ALLOWLIST,
+        'PidMode',
+        'IpcMode',
+        'UsernsMode',
+        'Runtime',
+    ])) {
+        if (host[key] !== undefined)
+            projectedHost[key] = structuredClone(host[key]);
+    }
+    return {
+        ...structuredClone(config),
+        Image: inspect.Image,
+        HostConfig: projectedHost,
+        NetworkingConfig: { EndpointsConfig: endpoints },
+    };
+}
+//# sourceMappingURL=docker-settings.js.map

package/dist/server/modules/core/controllers/docker-settings.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"docker-settings.js","sourceRoot":"","sources":["../../../../src/modules/core/controllers/docker-settings.ts"],"names":[],"mappings":";;;AA8JA,kDA+IC;AA7SD,yCAAkC;AAClC,iEAA2D;AAU9C,QAAA,gBAAgB,GAAG;IAC9B,UAAU;IACV,YAAY;IACZ,MAAM;IACN,aAAa;IACb,cAAc;IACd,cAAc;IACd,cAAc;IACd,KAAK;IACL,WAAW;IACX,WAAW;IACX,KAAK;IACL,KAAK;IACL,aAAa;IACb,aAAa;IACb,OAAO;IACP,SAAS;IACT,YAAY;IACZ,YAAY;IACZ,iBAAiB;IACjB,SAAS;IACT,QAAQ;IACR,YAAY;IACZ,aAAa;IACb,OAAO;CACC,CAAC;AACE,QAAA,qBAAqB,GAAG;IACnC,OAAO;IACP,QAAQ;IACR,cAAc;IACd,eAAe;IACf,aAAa;IACb,WAAW;IACX,YAAY;IACZ,cAAc;IACd,aAAa;IACb,aAAa;IACb,QAAQ;IACR,SAAS;IACT,KAAK;IACL,YAAY;IACZ,WAAW;IACX,YAAY;IACZ,UAAU;IACV,aAAa;IACb,gBAAgB;IAChB,iBAAiB;IACjB,SAAS;IACT,SAAS;IACT,OAAO;IACP,SAAS;IACT,MAAM;IACN,WAAW;IACX,aAAa;IACb,eAAe;IACf,cAAc;IACd,WAAW;IACX,QAAQ;IACR,UAAU;IACV,WAAW;IACX,UAAU;IACV,mBAAmB;IACnB,oBAAoB;IACpB,YAAY;IACZ,YAAY;IACZ,mBAAmB;IACnB,YAAY;IACZ,kBAAkB;IAClB,gBAAgB;IAChB,WAAW;IACX,YAAY;IACZ,aAAa;CACL,CAAC;AACE,QAAA,kBAAkB,GAAG;IAChC,SAAS;IACT,OAAO;IACP,QAAQ;IACR,aAAa;IACb,YAAY;IACZ,gBAAgB;IAChB,SAAS;IACT,SAAS;IACT,YAAY;IACZ,SAAS;IACT,cAAc;IACd,aAAa;IACb,OAAO;CACC,CAAC;AACE,QAAA,mBAAmB,GAAG;IACjC,IAAI;IACJ,SAAS;IACT,OAAO;IACP,MAAM;IACN,MAAM;IACN,gBAAgB;IAChB,cAAc;IACd,WAAW;IACX,SAAS;IACT,aAAa;IACb,SAAS;IACT,QAAQ;IACR,iBAAiB;IACjB,MAAM;IACN,QAAQ;IACR,YAAY;IACZ,MAAM;IACN,cAAc;IACd,QAAQ;IACR,UAAU;IACV,iBAAiB;IACjB,cAAc;IACd,YAAY;IACZ,SAAS;IACT,yBAAyB;CACjB,CAAC;AAEX,SAAS,GAAG,CAAC,KAAc;IACzB,IAAI,KAAK,KAAK,SAAS,IAAI,KAAK,KAAK,IAAI,IAAI,KAAK,KAAK,KAAK,IAAI,KAAK,KAAK,EAAE,IAAI,KAAK,KAAK,CAAC;QACzF,OAAO,KAAK,CAAC;IACf,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC;QAAE,OAAO,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IACjD,IAAI,OAAO,KAAK,KAAK,QAAQ;QAAE,OAAO,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IACrE,OAAO,IAAI,CAAC;AACd,CAAC;AACD,SAAS,WAAW,CAAC,IAAY;IAE/B,MAAM,IAAI,wCAAiB,CAAC,aAAa,EAAE,uBAAuB,IAAI,EAAE,CAAC,CAAC;AAC5E,CAAC;AACD,SAAS,MAAM,CAAC,KAAc,EAAE,IAAY;IAC1C,IAAI,CAAC,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC;QAAE,OAAO,WAAW,CAAC,IAAI,CAAC,CAAC;IAC1F,OAAO,KAAuB,CAAC;AACjC,CAAC;AACD,SAAS,WAAW,CAAC,MAAsB,EAAE,OAA0B,EAAE,MAAc;IACrF,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC;QAClD,IAAI,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,GAAG,CAAC;YAAE,WAAW,CAAC,GAAG,MAAM,GAAG,GAAG,EAAE,CAAC,CAAC;IAC3E,CAAC;AACH,CAAC;AACD,SAAS,UAAU,CAAC,KAAa;IAC/B,MAAM,IAAI,wCAAiB,CAAC,aAAa,EAAE,0BAA0B,KAAK,EAAE,CAAC,CAAC;AAChF,CAAC;AAED,SAAS,YAAY,CAAC,IAAa,EAAE,UAAkB;IACrD,IAAI,OAAO,IAAI,KAAK,QAAQ;QAAE,OAAO,KAAK,CAAC;IAC3C,MAAM,UAAU,GAAG,iBAAK,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC;IACzC,OAAO,UAAU,KAAK,iBAAK,CAAC,SAAS,CAAC,UAAU,CAAC,IAAI,iBAAK,CAAC,QAAQ,CAAC,UAAU,CAAC,KAAK,aAAa,CAAC;AACpG,CAAC;AAGD,SAAgB,mBAAmB,CACjC,OAA+B,EAC/B,UAAU,GAAG,sBAAsB;IAEnC,WAAW,CAAC,OAAO,EAAE,CAAC,GAAG,2BAAmB,EAAE,QAAQ,EAAE,YAAY,EAAE,OAAO,CAAC,EAAE,EAAE,CAAC,CAAC;IACpF,MAAM,MAAM,GAAG,MAAM,CAAC,OAAO,CAAC,MAAM,EAAE,QAAQ,CAAC,CAAC;IAChD,MAAM,IAAI,GAAG,MAAM,CAAC,OAAO,CAAC,UAAU,EAAE,YAAY,CAAC,CAAC;IACtD,WAAW,CAAC,MAAM,EAAE,wBAAgB,EAAE,SAAS,CAAC,CAAC;IACjD,WAAW,CAAC,IAAI,EAAE,CAAC,GAAG,6BAAqB,EAAE,GAAG,0BAAkB,CAAC,EAAE,aAAa,CAAC,CAAC;IACpF,KAAK,MAAM,KAAK,IAAI;QAClB,SAAS;QACT,YAAY;QACZ,gBAAgB;QAChB,cAAc;QACd,aAAa;QACb,OAAO;KACR,EAAE,CAAC;QACF,IAAI,GAAG,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;YAAE,UAAU,CAAC,cAAc,KAAK,EAAE,CAAC,CAAC;IAC1D,CAAC;IACD,IAAI,IAAI,CAAC,WAAW,KAAK,MAAM,IAAI,MAAM,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC,UAAU,CAAC,YAAY,CAAC;QAClF,UAAU,CAAC,wBAAwB,CAAC,CAAC;IACvC,KAAK,MAAM,KAAK,IAAI,CAAC,SAAS,EAAE,SAAS,EAAE,YAAY,CAAC,EAAE,CAAC;QACzD,IAAI,IAAI,CAAC,KAAK,CAAC,KAAK,MAAM;YAAE,UAAU,CAAC,cAAc,KAAK,EAAE,CAAC,CAAC;QAC9D,IAAI,GAAG,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,CAAC,SAAS,EAAE,WAAW,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC;YAC7E,WAAW,CAAC,cAAc,KAAK,EAAE,CAAC,CAAC;IACvC,CAAC;IACD,IAAI,GAAG,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,IAAI,CAAC,OAAO,KAAK,MAAM;QAAE,UAAU,CAAC,oBAAoB,CAAC,CAAC;IACnF,IAAI,GAAG,CAAC,IAAI,CAAC,WAAW,CAAC;QAAE,WAAW,CAAC,wBAAwB,CAAC,CAAC;IACjE,IAAI,IAAI,CAAC,YAAY,KAAK,MAAM;QAAE,WAAW,CAAC,yBAAyB,CAAC,CAAC;IACzE,IAAI,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,IAAI,IAAI,CAAC,SAAS,KAAK,SAAS;QAAE,WAAW,CAAC,sBAAsB,CAAC,CAAC;IAC7F,IAAI,IAAI,CAAC,UAAU,KAAK,IAAI;QAAE,UAAU,CAAC,6CAA6C,CAAC,CAAC;IAExF,IAAI,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC;QAC3B,KAAK,MAAM,IAAI,IAAI,IAAI,CAAC,KAAK,EAAE,CAAC;YAC9B,IAAI,OAAO,IAAI,KAAK,QAAQ;gBAAE,WAAW,CAAC,kBAAkB,CAAC,CAAC;YAC9D,IACE,IAAI;iBACD,KAAK,CAAC,GAAG,CAAC;iBACV,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC;iBACX,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,YAAY,CAAC,IAAI,EAAE,UAAU,CAAC,CAAC;gBAEjD,UAAU,CAAC,kCAAkC,CAAC,CAAC;QACnD,CAAC;IACH,IAAI,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,MAAM,CAAC;QAC5B,KAAK,MAAM,KAAK,IAAI,IAAI,CAAC,MAAM,EAAE,CAAC;YAChC,MAAM,KAAK,GAAG,MAAM,CAAC,KAAK,EAAE,mBAAmB,CAAC,CAAC;YACjD,WAAW,CACT,KAAK,EACL;gBACE,MAAM;gBACN,QAAQ;gBACR,QAAQ;gBACR,UAAU;gBACV,aAAa;gBACb,aAAa;gBACb,eAAe;gBACf,cAAc;aACf,EACD,oBAAoB,CACrB,CAAC;YACF,IACE,KAAK,CAAC,IAAI,KAAK,MAAM;gBACrB,CAAC,YAAY,CAAC,KAAK,CAAC,MAAM,EAAE,UAAU,CAAC,IAAI,YAAY,CAAC,KAAK,CAAC,MAAM,EAAE,UAAU,CAAC,CAAC;gBAElF,UAAU,CAAC,mCAAmC,CAAC,CAAC;YAClD,IAAI,CAAC,CAAC,MAAM,EAAE,QAAQ,EAAE,OAAO,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;gBAC3D,WAAW,CAAC,wBAAwB,CAAC,CAAC;YACxC,KAAK,MAAM,CAAC,GAAG,EAAE,MAAM,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC;gBACzC,WAAW,EAAE;oBACX,aAAa;oBACb,cAAc;oBACd,kBAAkB;oBAClB,sBAAsB;oBACtB,wBAAwB;iBACzB;gBACD,aAAa,EAAE,CAAC,QAAQ,EAAE,QAAQ,EAAE,SAAS,EAAE,cAAc,CAAC;gBAC9D,YAAY,EAAE,CAAC,WAAW,EAAE,MAAM,EAAE,SAAS,CAAC;aAC/C,CAAC;gBACA,IAAI,KAAK,CAAC,GAAG,CAAC;oBACZ,WAAW,CACT,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC,EAAE,qBAAqB,GAAG,EAAE,CAAC,EAC9C,MAAM,EACN,qBAAqB,GAAG,GAAG,CAC5B,CAAC;QACR,CAAC;IACH,KAAK,MAAM,CAAC,GAAG,EAAE,MAAM,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC;QACzC,aAAa,EAAE,CAAC,MAAM,EAAE,mBAAmB,CAAC;QAC5C,SAAS,EAAE,CAAC,MAAM,EAAE,QAAQ,CAAC;KAC9B,CAAC;QACA,IAAI,IAAI,CAAC,GAAG,CAAC;YACX,WAAW,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,cAAc,GAAG,EAAE,CAAC,EAAE,MAAM,EAAE,cAAc,GAAG,GAAG,CAAC,CAAC;IACtF,IAAI,MAAM,CAAC,WAAW;QACpB,WAAW,CACT,MAAM,CAAC,MAAM,CAAC,WAAW,EAAE,oBAAoB,CAAC,EAChD,CAAC,MAAM,EAAE,UAAU,EAAE,SAAS,EAAE,SAAS,EAAE,aAAa,EAAE,eAAe,CAAC,EAC1E,qBAAqB,CACtB,CAAC;IAEJ,MAAM,SAAS,GAA0C,EAAE,CAAC;IAC5D,KAAK,MAAM,CAAC,IAAI,EAAE,QAAQ,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,OAAO,CAAC,eAAe,EAAE,QAAQ,IAAI,EAAE,CAAC,EAAE,CAAC;QAEvF,WAAW,CACT,QAAQ,EACR;YACE,SAAS;YACT,YAAY;YACZ,OAAO;YACP,YAAY;YACZ,YAAY;YACZ,WAAW;YACX,YAAY;YACZ,SAAS;YACT,WAAW;YACX,aAAa;YACb,aAAa;YACb,mBAAmB;YACnB,qBAAqB;YACrB,YAAY;YACZ,UAAU;SACX,EACD,4BAA4B,IAAI,GAAG,CACpC,CAAC;QACF,KAAK,MAAM,KAAK,IAAI,CAAC,YAAY,EAAE,OAAO,EAAE,YAAY,EAAE,YAAY,CAAC;YACrE,IAAI,GAAG,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;gBAAE,WAAW,CAAC,4BAA4B,IAAI,IAAI,KAAK,EAAE,CAAC,CAAC;QACrF,SAAS,CAAC,IAAI,CAAC;YACb,QAAQ,CAAC,OAAO,IAAI,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,eAAe,CAAC,QAAQ,CAAC,OAAO,CAAC,EAAE,CAAC;IACnF,CAAC;IACD,MAAM,aAAa,GAAmB,EAAE,CAAC;IACzC,KAAK,MAAM,GAAG,IAAI,IAAI,GAAG,CAAC;QACxB,GAAG,6BAAqB;QACxB,SAAS;QACT,SAAS;QACT,YAAY;QACZ,SAAS;KACV,CAAC,EAAE,CAAC;QACH,IAAI,IAAI,CAAC,GAAG,CAAC,KAAK,SAAS;YAAE,aAAa,CAAC,GAAG,CAAC,GAAG,eAAe,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC;IAC/E,CAAC;IACD,OAAO;QACL,GAAG,eAAe,CAAC,MAAM,CAAC;QAC1B,KAAK,EAAE,OAAO,CAAC,KAAK;QACpB,UAAU,EAAE,aAAa;QACzB,gBAAgB,EAAE,EAAE,eAAe,EAAE,SAAS,EAAE;KACjD,CAAC;AACJ,CAAC"}

package/dist/server/modules/core/controllers/host-cli-versions.d.ts

@@ -0,0 +1 @@
+export declare function readHostCliVersions(file?: string): Record<string, string> | null;

package/dist/server/modules/core/controllers/host-cli-versions.js

@@ -0,0 +1,27 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.readHostCliVersions = readHostCliVersions;
+const node_fs_1 = require("node:fs");
+const node_path_1 = require("node:path");
+const env_config_1 = require("../../../common/config/env.config");
+const CLI_NAMES = ['claude', 'codex', 'copilot', 'opencode', 'agy'];
+function readHostCliVersions(file = (0, node_path_1.join)((0, env_config_1.getEnvConfig)().DEVCHAIN_HOST_ETC_DIR, 'claim.json')) {
+    try {
+        const record = JSON.parse((0, node_fs_1.readFileSync)(file, 'utf8'));
+        const versions = record.cliVersions;
+        if (!versions || typeof versions !== 'object' || Array.isArray(versions))
+            return null;
+        const result = {};
+        for (const name of CLI_NAMES) {
+            const version = versions[name];
+            if (typeof version !== 'string' || version.length === 0)
+                return null;
+            result[name] = version;
+        }
+        return result;
+    }
+    catch {
+        return null;
+    }
+}
+//# sourceMappingURL=host-cli-versions.js.map

package/dist/server/modules/core/controllers/host-cli-versions.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"host-cli-versions.js","sourceRoot":"","sources":["../../../../src/modules/core/controllers/host-cli-versions.ts"],"names":[],"mappings":";;AAMA,kDAiBC;AAvBD,qCAAuC;AACvC,yCAAiC;AACjC,kEAAiE;AAEjE,MAAM,SAAS,GAAG,CAAC,QAAQ,EAAE,OAAO,EAAE,SAAS,EAAE,UAAU,EAAE,KAAK,CAAU,CAAC;AAE7E,SAAgB,mBAAmB,CACjC,IAAI,GAAG,IAAA,gBAAI,EAAC,IAAA,yBAAY,GAAE,CAAC,qBAAqB,EAAE,YAAY,CAAC;IAE/D,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,IAAA,sBAAY,EAAC,IAAI,EAAE,MAAM,CAAC,CAA8B,CAAC;QACnF,MAAM,QAAQ,GAAG,MAAM,CAAC,WAAW,CAAC;QACpC,IAAI,CAAC,QAAQ,IAAI,OAAO,QAAQ,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,QAAQ,CAAC;YAAE,OAAO,IAAI,CAAC;QACtF,MAAM,MAAM,GAA2B,EAAE,CAAC;QAC1C,KAAK,MAAM,IAAI,IAAI,SAAS,EAAE,CAAC;YAC7B,MAAM,OAAO,GAAI,QAAoC,CAAC,IAAI,CAAC,CAAC;YAC5D,IAAI,OAAO,OAAO,KAAK,QAAQ,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC;gBAAE,OAAO,IAAI,CAAC;YACrE,MAAM,CAAC,IAAI,CAAC,GAAG,OAAO,CAAC;QACzB,CAAC;QACD,OAAO,MAAM,CAAC;IAChB,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC"}

package/dist/server/modules/core/controllers/host-stats.controller.d.ts

@@ -0,0 +1,8 @@
+import type { HostStats } from '../models/host-stats.model';
+export declare class HostStatsController {
+    private previousCpuTotals;
+    getStats(): Promise<HostStats>;
+    private readCpuPercent;
+    private sampleCpuOverWindow;
+    private readDiskStats;
+}

package/dist/server/modules/core/controllers/host-stats.controller.js

@@ -0,0 +1,139 @@
+"use strict";
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __setModuleDefault = (this && this.__setModuleDefault) || (Object.create ? (function(o, v) {
+    Object.defineProperty(o, "default", { enumerable: true, value: v });
+}) : function(o, v) {
+    o["default"] = v;
+});
+var __decorate = (this && this.__decorate) || function (decorators, target, key, desc) {
+    var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
+    if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
+    else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
+    return c > 3 && r && Object.defineProperty(target, key, r), r;
+};
+var __importStar = (this && this.__importStar) || (function () {
+    var ownKeys = function(o) {
+        ownKeys = Object.getOwnPropertyNames || function (o) {
+            var ar = [];
+            for (var k in o) if (Object.prototype.hasOwnProperty.call(o, k)) ar[ar.length] = k;
+            return ar;
+        };
+        return ownKeys(o);
+    };
+    return function (mod) {
+        if (mod && mod.__esModule) return mod;
+        var result = {};
+        if (mod != null) for (var k = ownKeys(mod), i = 0; i < k.length; i++) if (k[i] !== "default") __createBinding(result, mod, k[i]);
+        __setModuleDefault(result, mod);
+        return result;
+    };
+})();
+var __metadata = (this && this.__metadata) || function (k, v) {
+    if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.HostStatsController = void 0;
+const common_1 = require("@nestjs/common");
+const swagger_1 = require("@nestjs/swagger");
+const os = __importStar(require("node:os"));
+const promises_1 = require("node:fs/promises");
+const node_path_1 = require("node:path");
+const db_config_1 = require("../../storage/db/db.config");
+const logger_1 = require("../../../common/logging/logger");
+const logger = (0, logger_1.createLogger)('HostStatsController');
+const CPU_SAMPLE_WINDOW_MS = 100;
+const CPU_BASELINE_MIN_AGE_MS = 1000;
+const CPU_BASELINE_MAX_AGE_MS = 60000;
+function readCpuTimeTotals() {
+    return os.cpus().reduce((acc, cpu) => {
+        acc.idle += cpu.times.idle;
+        acc.total += cpu.times.user + cpu.times.nice + cpu.times.sys + cpu.times.idle + cpu.times.irq;
+        return acc;
+    }, { idle: 0, total: 0 });
+}
+function busyPercentBetween(start, end) {
+    const idleDelta = end.idle - start.idle;
+    const totalDelta = end.total - start.total;
+    if (totalDelta <= 0)
+        return null;
+    return Math.max(0, Math.min(100, ((totalDelta - idleDelta) / totalDelta) * 100));
+}
+let HostStatsController = class HostStatsController {
+    previousCpuTotals = null;
+    async getStats() {
+        const [cpuPercent, disk] = await Promise.all([this.readCpuPercent(), this.readDiskStats()]);
+        const [load1, load5] = os.loadavg();
+        const memTotalBytes = os.totalmem();
+        const memUsedBytes = memTotalBytes - os.freemem();
+        return {
+            cpuPercent: Math.round(cpuPercent * 100) / 100,
+            load1,
+            load5,
+            memTotalBytes,
+            memUsedBytes,
+            diskTotalBytes: disk.total,
+            diskUsedBytes: disk.used,
+            diskAvailBytes: disk.avail,
+            uptimeSec: Math.floor(os.uptime()),
+            sampledAt: new Date().toISOString(),
+        };
+    }
+    async readCpuPercent() {
+        const totals = readCpuTimeTotals();
+        const now = Date.now();
+        const previous = this.previousCpuTotals;
+        this.previousCpuTotals = { totals, at: now };
+        if (previous) {
+            const ageMs = now - previous.at;
+            if (ageMs >= CPU_BASELINE_MIN_AGE_MS && ageMs <= CPU_BASELINE_MAX_AGE_MS) {
+                const average = busyPercentBetween(previous.totals, totals);
+                if (average !== null)
+                    return average;
+            }
+        }
+        return this.sampleCpuOverWindow();
+    }
+    async sampleCpuOverWindow() {
+        const start = readCpuTimeTotals();
+        await new Promise((resolve) => setTimeout(resolve, CPU_SAMPLE_WINDOW_MS));
+        return busyPercentBetween(start, readCpuTimeTotals()) ?? 0;
+    }
+    async readDiskStats() {
+        try {
+            const dataDir = (0, node_path_1.dirname)((0, db_config_1.getDbConfig)().dbPath);
+            const stats = await (0, promises_1.statfs)(dataDir);
+            const total = stats.blocks * stats.bsize;
+            const free = stats.bfree * stats.bsize;
+            const avail = stats.bavail * stats.bsize;
+            return { total, used: Math.max(0, total - free), avail };
+        }
+        catch (error) {
+            logger.warn({ error: String(error) }, 'Failed to read disk stats for the data directory');
+            return { total: 0, used: 0, avail: 0 };
+        }
+    }
+};
+exports.HostStatsController = HostStatsController;
+__decorate([
+    (0, common_1.Get)('stats'),
+    (0, swagger_1.ApiOperation)({ summary: 'Get this instance host resource stats' }),
+    (0, swagger_1.ApiResponse)({ status: 200, description: 'Host resource stats' }),
+    __metadata("design:type", Function),
+    __metadata("design:paramtypes", []),
+    __metadata("design:returntype", Promise)
+], HostStatsController.prototype, "getStats", null);
+exports.HostStatsController = HostStatsController = __decorate([
+    (0, swagger_1.ApiTags)('host'),
+    (0, common_1.Controller)('api/host')
+], HostStatsController);
+//# sourceMappingURL=host-stats.controller.js.map

package/dist/server/modules/core/controllers/host-stats.controller.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"host-stats.controller.js","sourceRoot":"","sources":["../../../../src/modules/core/controllers/host-stats.controller.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAAA,2CAAiD;AACjD,6CAAqE;AACrE,4CAA8B;AAC9B,+CAA0C;AAC1C,yCAAoC;AACpC,0DAAyD;AACzD,2DAA8D;AAG9D,MAAM,MAAM,GAAG,IAAA,qBAAY,EAAC,qBAAqB,CAAC,CAAC;AAInD,MAAM,oBAAoB,GAAG,GAAG,CAAC;AAIjC,MAAM,uBAAuB,GAAG,IAAI,CAAC;AACrC,MAAM,uBAAuB,GAAG,KAAK,CAAC;AAOtC,SAAS,iBAAiB;IACxB,OAAO,EAAE,CAAC,IAAI,EAAE,CAAC,MAAM,CACrB,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE;QACX,GAAG,CAAC,IAAI,IAAI,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC;QAC3B,GAAG,CAAC,KAAK,IAAI,GAAG,CAAC,KAAK,CAAC,IAAI,GAAG,GAAG,CAAC,KAAK,CAAC,IAAI,GAAG,GAAG,CAAC,KAAK,CAAC,GAAG,GAAG,GAAG,CAAC,KAAK,CAAC,IAAI,GAAG,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC;QAC9F,OAAO,GAAG,CAAC;IACb,CAAC,EACD,EAAE,IAAI,EAAE,CAAC,EAAE,KAAK,EAAE,CAAC,EAAE,CACtB,CAAC;AACJ,CAAC;AAGD,SAAS,kBAAkB,CAAC,KAAoB,EAAE,GAAkB;IAClE,MAAM,SAAS,GAAG,GAAG,CAAC,IAAI,GAAG,KAAK,CAAC,IAAI,CAAC;IACxC,MAAM,UAAU,GAAG,GAAG,CAAC,KAAK,GAAG,KAAK,CAAC,KAAK,CAAC;IAC3C,IAAI,UAAU,IAAI,CAAC;QAAE,OAAO,IAAI,CAAC;IACjC,OAAO,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,CAAC,GAAG,CAAC,GAAG,EAAE,CAAC,CAAC,UAAU,GAAG,SAAS,CAAC,GAAG,UAAU,CAAC,GAAG,GAAG,CAAC,CAAC,CAAC;AACnF,CAAC;AAIM,IAAM,mBAAmB,GAAzB,MAAM,mBAAmB;IACtB,iBAAiB,GAAiD,IAAI,CAAC;IAKzE,AAAN,KAAK,CAAC,QAAQ;QACZ,MAAM,CAAC,UAAU,EAAE,IAAI,CAAC,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,cAAc,EAAE,EAAE,IAAI,CAAC,aAAa,EAAE,CAAC,CAAC,CAAC;QAC5F,MAAM,CAAC,KAAK,EAAE,KAAK,CAAC,GAAG,EAAE,CAAC,OAAO,EAAE,CAAC;QACpC,MAAM,aAAa,GAAG,EAAE,CAAC,QAAQ,EAAE,CAAC;QACpC,MAAM,YAAY,GAAG,aAAa,GAAG,EAAE,CAAC,OAAO,EAAE,CAAC;QAElD,OAAO;YACL,UAAU,EAAE,IAAI,CAAC,KAAK,CAAC,UAAU,GAAG,GAAG,CAAC,GAAG,GAAG;YAC9C,KAAK;YACL,KAAK;YACL,aAAa;YACb,YAAY;YACZ,cAAc,EAAE,IAAI,CAAC,KAAK;YAC1B,aAAa,EAAE,IAAI,CAAC,IAAI;YACxB,cAAc,EAAE,IAAI,CAAC,KAAK;YAC1B,SAAS,EAAE,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC,MAAM,EAAE,CAAC;YAClC,SAAS,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;SACpC,CAAC;IACJ,CAAC;IAEO,KAAK,CAAC,cAAc;QAC1B,MAAM,MAAM,GAAG,iBAAiB,EAAE,CAAC;QACnC,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QACvB,MAAM,QAAQ,GAAG,IAAI,CAAC,iBAAiB,CAAC;QACxC,IAAI,CAAC,iBAAiB,GAAG,EAAE,MAAM,EAAE,EAAE,EAAE,GAAG,EAAE,CAAC;QAE7C,IAAI,QAAQ,EAAE,CAAC;YACb,MAAM,KAAK,GAAG,GAAG,GAAG,QAAQ,CAAC,EAAE,CAAC;YAChC,IAAI,KAAK,IAAI,uBAAuB,IAAI,KAAK,IAAI,uBAAuB,EAAE,CAAC;gBAEzE,MAAM,OAAO,GAAG,kBAAkB,CAAC,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;gBAC5D,IAAI,OAAO,KAAK,IAAI;oBAAE,OAAO,OAAO,CAAC;YACvC,CAAC;QACH,CAAC;QACD,OAAO,IAAI,CAAC,mBAAmB,EAAE,CAAC;IACpC,CAAC;IAEO,KAAK,CAAC,mBAAmB;QAC/B,MAAM,KAAK,GAAG,iBAAiB,EAAE,CAAC;QAClC,MAAM,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,UAAU,CAAC,OAAO,EAAE,oBAAoB,CAAC,CAAC,CAAC;QAC1E,OAAO,kBAAkB,CAAC,KAAK,EAAE,iBAAiB,EAAE,CAAC,IAAI,CAAC,CAAC;IAC7D,CAAC;IAEO,KAAK,CAAC,aAAa;QACzB,IAAI,CAAC;YACH,MAAM,OAAO,GAAG,IAAA,mBAAO,EAAC,IAAA,uBAAW,GAAE,CAAC,MAAM,CAAC,CAAC;YAC9C,MAAM,KAAK,GAAG,MAAM,IAAA,iBAAM,EAAC,OAAO,CAAC,CAAC;YACpC,MAAM,KAAK,GAAG,KAAK,CAAC,MAAM,GAAG,KAAK,CAAC,KAAK,CAAC;YACzC,MAAM,IAAI,GAAG,KAAK,CAAC,KAAK,GAAG,KAAK,CAAC,KAAK,CAAC;YACvC,MAAM,KAAK,GAAG,KAAK,CAAC,MAAM,GAAG,KAAK,CAAC,KAAK,CAAC;YACzC,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,KAAK,GAAG,IAAI,CAAC,EAAE,KAAK,EAAE,CAAC;QAC3D,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,MAAM,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,MAAM,CAAC,KAAK,CAAC,EAAE,EAAE,kDAAkD,CAAC,CAAC;YAC1F,OAAO,EAAE,KAAK,EAAE,CAAC,EAAE,IAAI,EAAE,CAAC,EAAE,KAAK,EAAE,CAAC,EAAE,CAAC;QACzC,CAAC;IACH,CAAC;CACF,CAAA;AA9DY,kDAAmB;AAMxB;IAHL,IAAA,YAAG,EAAC,OAAO,CAAC;IACZ,IAAA,sBAAY,EAAC,EAAE,OAAO,EAAE,uCAAuC,EAAE,CAAC;IAClE,IAAA,qBAAW,EAAC,EAAE,MAAM,EAAE,GAAG,EAAE,WAAW,EAAE,qBAAqB,EAAE,CAAC;;;;mDAmBhE;8BAxBU,mBAAmB;IAF/B,IAAA,iBAAO,EAAC,MAAM,CAAC;IACf,IAAA,mBAAU,EAAC,UAAU,CAAC;GACV,mBAAmB,CA8D/B"}

package/dist/server/modules/core/controllers/runtime.controller.d.ts

@@ -1,23 +1,58 @@
-import { ModuleRef } from '@nestjs/core';
-import { OrchestratorDockerService } from '../../orchestrator/docker/services/docker.service';
+import { ProviderCliInstallStateService } from '../../providers/services/provider-cli-install-state.service';
+import { SyncthingManager } from '../../file-sync/syncthing-manager.service';
+import { type HostEnvOverrideReportStorage } from '../../remotes/host/host-env-override-report';
 export declare class RuntimeController {
-    private readonly dockerService?;
-    private readonly moduleRef?;
-    private dockerAvailabilityCache;
-    private dockerAvailabilityPending;
-    private resolvedDockerService?;
-    constructor(dockerService?: OrchestratorDockerService | undefined, moduleRef?: ModuleRef | undefined);
+    private readonly syncthing;
+    private readonly providerClis;
+    private readonly storage;
+    constructor(syncthing: SyncthingManager, providerClis: ProviderCliInstallStateService, storage: HostEnvOverrideReportStorage);
     getRuntime(): Promise<{
         runtimeToken?: string | undefined;
-        mode: "normal" | "main";
         version: string;
+        homePath: string;
+        uid: number | null;
+        gid: number | null;
         bootId: string;
-        dockerAvailable: boolean;
         features: {
             cloudUi: boolean;
         };
-        integrationAdmission: import("../../../common/config/container-scope").IntegrationAdmission;
+        integrationAdmission: import("../../../common/config/integration-admission").IntegrationAdmission;
+        fileSync: import("../../file-sync/syncthing-manager.service").SyncthingState;
+        cliVersions: Record<string, string> | null;
+        providerClis: {
+            [k: string]: {
+                desiredVersion: string;
+                installedVersion: string | null;
+                state: "idle" | "installing" | "failed";
+                error: string | null;
+                checkedAt: string | null;
+            };
+        };
+        docker: {
+            installed: boolean;
+            engineVersion: string | null;
+            composeVersion: string | null;
+            userInGroup: boolean;
+            dataRootFreeBytes: number | null;
+            capacity?: {
+                dockerRoot: {
+                    path: string;
+                    filesystemId: string;
+                    freeBytes: number;
+                } | null;
+                imageStore: {
+                    path: string;
+                    filesystemId: string;
+                    freeBytes: number;
+                } | null;
+                home: {
+                    path: string;
+                    filesystemId: string;
+                    freeBytes: number;
+                } | null;
+            } | undefined;
+        };
+        build: import("./build-info").BuildInfo | null;
+        providerEnvOverrides: import("../../remotes/host/host-env-override-report").HostEnvOverrideEntry[];
     }>;
-    private resolveDockerService;
-    private resolveDockerAvailability;
 }