devchain-cli 0.24.1 → 0.24.2

package/dist/server/modules/remotes/host/host-docker.dto.js

@@ -1,8 +1,9 @@
 "use strict";
 Object.defineProperty(exports, "__esModule", { value: true });
-exports.DockerScanRequestSchema = exports.DockerImageLoadResultSchema = exports.DockerArchiveWriteResultSchema = exports.DockerBindPrepareSchema = exports.DockerCapacityRequestSchema = exports.DOCKER_ARCHIVE_SHA256_TRAILER = exports.DOCKER_API_VERSION_HEADER = exports.COMPOSE_PROJECT_LABEL = exports.DOCKER_PROJECT_LABEL = exports.DockerResourceIdSchema = exports.DockerArchiveRequestSchema = exports.DockerContainerCreateSchema = exports.DockerNetworkCreateSchema = exports.DockerVolumeCreateSchema = exports.DockerIdsSchema = exports.DockerOwnerSchema = void 0;
+exports.DockerScanRequestSchema = exports.DockerImageLoadResultSchema = exports.DockerArchiveWriteResultSchema = exports.DockerBindPrepareSchema = exports.DockerCapacityRequestSchema = exports.DOCKER_ARCHIVE_SHA256_TRAILER = exports.DOCKER_API_VERSION_HEADER = exports.COMPOSE_SERVICE_LABEL = exports.COMPOSE_PROJECT_LABEL = exports.DOCKER_PROJECT_LABEL = exports.DockerResourceIdSchema = exports.DockerArchiveRequestSchema = exports.DockerContainerCreateSchema = exports.DockerNetworkCreateSchema = exports.DockerVolumeCreateSchema = exports.DockerImageMatchResultSchema = exports.DockerImageMatchRequestSchema = exports.DockerIdsSchema = exports.DockerOwnerSchema = void 0;
 const zod_1 = require("zod");
 const node_path_1 = require("node:path");
+const docker_image_metadata_1 = require("../../core/controllers/docker-image-metadata");
 const identifier = zod_1.z
     .string()
     .min(1)
@@ -10,8 +11,34 @@ const identifier = zod_1.z
     .regex(/^[a-zA-Z0-9][a-zA-Z0-9_.:-]*$/);
 const projectId = zod_1.z.string().uuid();
 const labels = zod_1.z.record(zod_1.z.string()).default({});
-exports.DockerOwnerSchema = zod_1.z.object({ projectId }).strict();
+const scanPath = zod_1.z
+    .string()
+    .min(1)
+    .max(4096)
+    .refine((path) => (0, node_path_1.isAbsolute)(path) && (0, node_path_1.normalize)(path) === path && !path.includes('\0'));
+exports.DockerOwnerSchema = zod_1.z.object({ projectId, projectRoot: scanPath.optional() }).strict();
 exports.DockerIdsSchema = zod_1.z.object({ ids: zod_1.z.array(identifier).max(10000) }).strict();
+const imageReference = zod_1.z
+    .string()
+    .min(1)
+    .max(4096)
+    .regex(/^(?:\[[0-9a-fA-F:]+\]|[a-zA-Z0-9])[a-zA-Z0-9_.:/@-]*$/);
+exports.DockerImageMatchRequestSchema = zod_1.z
+    .object({ refs: zod_1.z.array(imageReference).max(10000) })
+    .strict();
+exports.DockerImageMatchResultSchema = zod_1.z
+    .object({
+    images: zod_1.z
+        .array(zod_1.z
+        .object({
+        ref: imageReference,
+        id: identifier,
+        metadata: docker_image_metadata_1.DockerImageMetadataSchema,
+    })
+        .strict())
+        .max(10000),
+})
+    .strict();
 exports.DockerVolumeCreateSchema = zod_1.z.object({ projectId, name: identifier, labels }).strict();
 exports.DockerNetworkCreateSchema = zod_1.z
     .object({
@@ -21,6 +48,21 @@ exports.DockerNetworkCreateSchema = zod_1.z
     internal: zod_1.z.boolean().default(false),
     attachable: zod_1.z.boolean().default(false),
     options: zod_1.z.record(zod_1.z.string()).default({}),
+    ipam: zod_1.z
+        .object({
+        Config: zod_1.z
+            .array(zod_1.z
+            .object({
+            Subnet: zod_1.z.string().min(1).max(64),
+            Gateway: zod_1.z.string().ip({ version: 'v4' }).optional(),
+            IPRange: zod_1.z.string().min(1).max(64).optional(),
+        })
+            .strict())
+            .min(1),
+    })
+        .strict()
+        .optional(),
+    shared: zod_1.z.literal(true).optional(),
 })
     .strict();
 exports.DockerContainerCreateSchema = zod_1.z
@@ -41,16 +83,12 @@ exports.DockerArchiveRequestSchema = zod_1.z
 exports.DockerResourceIdSchema = identifier;
 exports.DOCKER_PROJECT_LABEL = 'dev.devchain.project';
 exports.COMPOSE_PROJECT_LABEL = 'com.docker.compose.project';
+exports.COMPOSE_SERVICE_LABEL = 'com.docker.compose.service';
 exports.DOCKER_API_VERSION_HEADER = 'x-devchain-docker-api-version';
 exports.DOCKER_ARCHIVE_SHA256_TRAILER = 'x-devchain-archive-sha256';
 exports.DockerCapacityRequestSchema = zod_1.z
     .object({ paths: zod_1.z.array(zod_1.z.string().min(1).max(4096)).max(64) })
     .strict();
-const scanPath = zod_1.z
-    .string()
-    .min(1)
-    .max(4096)
-    .refine((path) => (0, node_path_1.isAbsolute)(path) && (0, node_path_1.normalize)(path) === path && !path.includes('\0'));
 exports.DockerBindPrepareSchema = zod_1.z
     .object({
     projectId,
@@ -78,6 +116,7 @@ exports.DockerImageLoadResultSchema = zod_1.z
         .object({
         id: zod_1.z.string().min(1).max(256),
         layers: zod_1.z.array(zod_1.z.string().min(1).max(256)).max(10000),
+        references: zod_1.z.array(zod_1.z.string().min(1).max(256)).max(10000).optional(),
     })
         .strict())
         .max(10000),
@@ -87,6 +126,7 @@ exports.DockerScanRequestSchema = zod_1.z
     .object({
     paths: zod_1.z.array(scanPath).max(64).default([]),
     volumes: zod_1.z.array(identifier).max(10000).optional(),
+    networks: zod_1.z.array(identifier).max(10000).optional(),
 })
     .strict();
 //# sourceMappingURL=host-docker.dto.js.map

package/dist/server/modules/remotes/host/host-docker.dto.js.map

@@ -1 +1 @@
-{"version":3,"file":"host-docker.dto.js","sourceRoot":"","sources":["../../../../src/modules/remotes/host/host-docker.dto.ts"],"names":[],"mappings":";;;AAAA,6BAAwB;AACxB,yCAAkD;AAGlD,MAAM,UAAU,GAAG,OAAC;KACjB,MAAM,EAAE;KACR,GAAG,CAAC,CAAC,CAAC;KACN,GAAG,CAAC,GAAG,CAAC;KACR,KAAK,CAAC,+BAA+B,CAAC,CAAC;AAC1C,MAAM,SAAS,GAAG,OAAC,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,CAAC;AACpC,MAAM,MAAM,GAAG,OAAC,CAAC,MAAM,CAAC,OAAC,CAAC,MAAM,EAAE,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC;AACnC,QAAA,iBAAiB,GAAG,OAAC,CAAC,MAAM,CAAC,EAAE,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC;AACrD,QAAA,eAAe,GAAG,OAAC,CAAC,MAAM,CAAC,EAAE,GAAG,EAAE,OAAC,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC;AAC7E,QAAA,wBAAwB,GAAG,OAAC,CAAC,MAAM,CAAC,EAAE,SAAS,EAAE,IAAI,EAAE,UAAU,EAAE,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC;AACtF,QAAA,yBAAyB,GAAG,OAAC;KACvC,MAAM,CAAC;IACN,SAAS;IACT,IAAI,EAAE,UAAU;IAChB,MAAM;IACN,QAAQ,EAAE,OAAC,CAAC,OAAO,EAAE,CAAC,OAAO,CAAC,KAAK,CAAC;IACpC,UAAU,EAAE,OAAC,CAAC,OAAO,EAAE,CAAC,OAAO,CAAC,KAAK,CAAC;IACtC,OAAO,EAAE,OAAC,CAAC,MAAM,CAAC,OAAC,CAAC,MAAM,EAAE,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC;CAC1C,CAAC;KACD,MAAM,EAAE,CAAC;AACC,QAAA,2BAA2B,GAAG,OAAC;KACzC,MAAM,CAAC;IACN,SAAS;IACT,IAAI,EAAE,UAAU;IAChB,MAAM,EAAE,OAAC,CAAC,MAAM,CAAC,OAAC,CAAC,OAAO,EAAE,CAAC;CAC9B,CAAC;KACD,MAAM,EAAE,CAAC;AACC,QAAA,0BAA0B,GAAG,OAAC;KACxC,MAAM,CAAC;IACN,SAAS;IACT,KAAK,EAAE,UAAU;IAEjB,SAAS,EAAE,OAAC,CAAC,IAAI,CAAC,CAAC,QAAQ,EAAE,MAAM,EAAE,MAAM,CAAC,CAAC;IAC7C,MAAM,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC;CACpC,CAAC;KACD,MAAM,EAAE,CAAC;AACC,QAAA,sBAAsB,GAAG,UAAU,CAAC;AASpC,QAAA,oBAAoB,GAAG,sBAAsB,CAAC;AAC9C,QAAA,qBAAqB,GAAG,4BAA4B,CAAC;AAMrD,QAAA,yBAAyB,GAAG,+BAA+B,CAAC;AAE5D,QAAA,6BAA6B,GAAG,2BAA2B,CAAC;AAE5D,QAAA,2BAA2B,GAAG,OAAC;KACzC,MAAM,CAAC,EAAE,KAAK,EAAE,OAAC,CAAC,KAAK,CAAC,OAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,GAAG,CAAC,EAAE,CAAC,EAAE,CAAC;KAC/D,MAAM,EAAE,CAAC;AAMZ,MAAM,QAAQ,GAAG,OAAC;KACf,MAAM,EAAE;KACR,GAAG,CAAC,CAAC,CAAC;KACN,GAAG,CAAC,IAAI,CAAC;KACT,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAA,sBAAU,EAAC,IAAI,CAAC,IAAI,IAAA,qBAAS,EAAC,IAAI,CAAC,KAAK,IAAI,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC;AAC7E,QAAA,uBAAuB,GAAG,OAAC;KACrC,MAAM,CAAC;IACN,SAAS;IACT,KAAK,EAAE,OAAC;SACL,KAAK,CACJ,OAAC;SACE,MAAM,CAAC;QACN,IAAI,EAAE,QAAQ;QACd,OAAO,EAAE,OAAC,CAAC,OAAO,EAAE;QACpB,KAAK,EAAE,UAAU,CAAC,QAAQ,EAAE;QAE5B,IAAI,EAAE,OAAC,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,QAAQ,EAAE;KACjC,CAAC;SACD,MAAM,EAAE;SAER,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,IAAI,CAAC,OAAO,IAAI,IAAI,CAAC,KAAK,KAAK,SAAS,CAAC,CAC/D;SACA,GAAG,CAAC,CAAC,CAAC;SACN,GAAG,CAAC,EAAE,CAAC;CACX,CAAC;KACD,MAAM,EAAE,CAAC;AAEC,QAAA,8BAA8B,GAAG,OAAC;KAC5C,MAAM,CAAC,EAAE,MAAM,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,KAAK,CAAC,gBAAgB,CAAC,EAAE,KAAK,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,WAAW,EAAE,EAAE,CAAC;KAC7F,MAAM,EAAE,CAAC;AAQC,QAAA,2BAA2B,GAAG,OAAC;KACzC,MAAM,CAAC;IACN,MAAM,EAAE,OAAC;SACN,KAAK,CACJ,OAAC;SACE,MAAM,CAAC;QACN,EAAE,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC;QAC9B,MAAM,EAAE,OAAC,CAAC,KAAK,CAAC,OAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC;KACvD,CAAC;SACD,MAAM,EAAE,CACZ;SACA,GAAG,CAAC,KAAK,CAAC;CACd,CAAC;KACD,MAAM,EAAE,CAAC;AAGC,QAAA,uBAAuB,GAAG,OAAC;KACrC,MAAM,CAAC;IACN,KAAK,EAAE,OAAC,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC;IAC5C,OAAO,EAAE,OAAC,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,QAAQ,EAAE;CACnD,CAAC;KACD,MAAM,EAAE,CAAC"}
+{"version":3,"file":"host-docker.dto.js","sourceRoot":"","sources":["../../../../src/modules/remotes/host/host-docker.dto.ts"],"names":[],"mappings":";;;AAAA,6BAAwB;AACxB,yCAAkD;AAElD,wFAAyF;AAEzF,MAAM,UAAU,GAAG,OAAC;KACjB,MAAM,EAAE;KACR,GAAG,CAAC,CAAC,CAAC;KACN,GAAG,CAAC,GAAG,CAAC;KACR,KAAK,CAAC,+BAA+B,CAAC,CAAC;AAC1C,MAAM,SAAS,GAAG,OAAC,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,CAAC;AACpC,MAAM,MAAM,GAAG,OAAC,CAAC,MAAM,CAAC,OAAC,CAAC,MAAM,EAAE,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC;AAChD,MAAM,QAAQ,GAAG,OAAC;KACf,MAAM,EAAE;KACR,GAAG,CAAC,CAAC,CAAC;KACN,GAAG,CAAC,IAAI,CAAC;KACT,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAA,sBAAU,EAAC,IAAI,CAAC,IAAI,IAAA,qBAAS,EAAC,IAAI,CAAC,KAAK,IAAI,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC;AAC7E,QAAA,iBAAiB,GAAG,OAAC,CAAC,MAAM,CAAC,EAAE,SAAS,EAAE,WAAW,EAAE,QAAQ,CAAC,QAAQ,EAAE,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC;AACvF,QAAA,eAAe,GAAG,OAAC,CAAC,MAAM,CAAC,EAAE,GAAG,EAAE,OAAC,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC;AAE1F,MAAM,cAAc,GAAG,OAAC;KACrB,MAAM,EAAE;KACR,GAAG,CAAC,CAAC,CAAC;KACN,GAAG,CAAC,IAAI,CAAC;KACT,KAAK,CAAC,uDAAuD,CAAC,CAAC;AACrD,QAAA,6BAA6B,GAAG,OAAC;KAC3C,MAAM,CAAC,EAAE,IAAI,EAAE,OAAC,CAAC,KAAK,CAAC,cAAc,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,EAAE,CAAC;KACpD,MAAM,EAAE,CAAC;AACC,QAAA,4BAA4B,GAAG,OAAC;KAC1C,MAAM,CAAC;IACN,MAAM,EAAE,OAAC;SACN,KAAK,CACJ,OAAC;SACE,MAAM,CAAC;QACN,GAAG,EAAE,cAAc;QACnB,EAAE,EAAE,UAAU;QACd,QAAQ,EAAE,iDAAyB;KACpC,CAAC;SACD,MAAM,EAAE,CACZ;SACA,GAAG,CAAC,KAAK,CAAC;CACd,CAAC;KACD,MAAM,EAAE,CAAC;AAEC,QAAA,wBAAwB,GAAG,OAAC,CAAC,MAAM,CAAC,EAAE,SAAS,EAAE,IAAI,EAAE,UAAU,EAAE,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC;AACtF,QAAA,yBAAyB,GAAG,OAAC;KACvC,MAAM,CAAC;IACN,SAAS;IACT,IAAI,EAAE,UAAU;IAChB,MAAM;IACN,QAAQ,EAAE,OAAC,CAAC,OAAO,EAAE,CAAC,OAAO,CAAC,KAAK,CAAC;IACpC,UAAU,EAAE,OAAC,CAAC,OAAO,EAAE,CAAC,OAAO,CAAC,KAAK,CAAC;IACtC,OAAO,EAAE,OAAC,CAAC,MAAM,CAAC,OAAC,CAAC,MAAM,EAAE,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC;IACzC,IAAI,EAAE,OAAC;SACJ,MAAM,CAAC;QACN,MAAM,EAAE,OAAC;aACN,KAAK,CACJ,OAAC;aACE,MAAM,CAAC;YACN,MAAM,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,EAAE,CAAC;YACjC,OAAO,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,EAAE,CAAC,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC,CAAC,QAAQ,EAAE;YACpD,OAAO,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,QAAQ,EAAE;SAC9C,CAAC;aACD,MAAM,EAAE,CACZ;aACA,GAAG,CAAC,CAAC,CAAC;KACV,CAAC;SACD,MAAM,EAAE;SACR,QAAQ,EAAE;IAEb,MAAM,EAAE,OAAC,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,QAAQ,EAAE;CACnC,CAAC;KACD,MAAM,EAAE,CAAC;AACC,QAAA,2BAA2B,GAAG,OAAC;KACzC,MAAM,CAAC;IACN,SAAS;IACT,IAAI,EAAE,UAAU;IAChB,MAAM,EAAE,OAAC,CAAC,MAAM,CAAC,OAAC,CAAC,OAAO,EAAE,CAAC;CAC9B,CAAC;KACD,MAAM,EAAE,CAAC;AACC,QAAA,0BAA0B,GAAG,OAAC;KACxC,MAAM,CAAC;IACN,SAAS;IACT,KAAK,EAAE,UAAU;IAEjB,SAAS,EAAE,OAAC,CAAC,IAAI,CAAC,CAAC,QAAQ,EAAE,MAAM,EAAE,MAAM,CAAC,CAAC;IAC7C,MAAM,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC;CACpC,CAAC;KACD,MAAM,EAAE,CAAC;AACC,QAAA,sBAAsB,GAAG,UAAU,CAAC;AASpC,QAAA,oBAAoB,GAAG,sBAAsB,CAAC;AAC9C,QAAA,qBAAqB,GAAG,4BAA4B,CAAC;AACrD,QAAA,qBAAqB,GAAG,4BAA4B,CAAC;AASrD,QAAA,yBAAyB,GAAG,+BAA+B,CAAC;AAE5D,QAAA,6BAA6B,GAAG,2BAA2B,CAAC;AAE5D,QAAA,2BAA2B,GAAG,OAAC;KACzC,MAAM,CAAC,EAAE,KAAK,EAAE,OAAC,CAAC,KAAK,CAAC,OAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,GAAG,CAAC,EAAE,CAAC,EAAE,CAAC;KAC/D,MAAM,EAAE,CAAC;AAMC,QAAA,uBAAuB,GAAG,OAAC;KACrC,MAAM,CAAC;IACN,SAAS;IACT,KAAK,EAAE,OAAC;SACL,KAAK,CACJ,OAAC;SACE,MAAM,CAAC;QACN,IAAI,EAAE,QAAQ;QACd,OAAO,EAAE,OAAC,CAAC,OAAO,EAAE;QACpB,KAAK,EAAE,UAAU,CAAC,QAAQ,EAAE;QAE5B,IAAI,EAAE,OAAC,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,QAAQ,EAAE;KACjC,CAAC;SACD,MAAM,EAAE;SAER,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,IAAI,CAAC,OAAO,IAAI,IAAI,CAAC,KAAK,KAAK,SAAS,CAAC,CAC/D;SACA,GAAG,CAAC,CAAC,CAAC;SACN,GAAG,CAAC,EAAE,CAAC;CACX,CAAC;KACD,MAAM,EAAE,CAAC;AAEC,QAAA,8BAA8B,GAAG,OAAC;KAC5C,MAAM,CAAC,EAAE,MAAM,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,KAAK,CAAC,gBAAgB,CAAC,EAAE,KAAK,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,WAAW,EAAE,EAAE,CAAC;KAC7F,MAAM,EAAE,CAAC;AAQC,QAAA,2BAA2B,GAAG,OAAC;KACzC,MAAM,CAAC;IACN,MAAM,EAAE,OAAC;SACN,KAAK,CACJ,OAAC;SACE,MAAM,CAAC;QACN,EAAE,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC;QAC9B,MAAM,EAAE,OAAC,CAAC,KAAK,CAAC,OAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC;QACtD,UAAU,EAAE,OAAC,CAAC,KAAK,CAAC,OAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,QAAQ,EAAE;KACtE,CAAC;SACD,MAAM,EAAE,CACZ;SACA,GAAG,CAAC,KAAK,CAAC;CACd,CAAC;KACD,MAAM,EAAE,CAAC;AAGC,QAAA,uBAAuB,GAAG,OAAC;KACrC,MAAM,CAAC;IACN,KAAK,EAAE,OAAC,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC;IAC5C,OAAO,EAAE,OAAC,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,QAAQ,EAAE;IAClD,QAAQ,EAAE,OAAC,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,QAAQ,EAAE;CACpD,CAAC;KACD,MAAM,EAAE,CAAC"}

package/dist/server/modules/remotes/host/host-docker.service.d.ts

@@ -2,22 +2,33 @@ import { DockerArchiveJournal } from '../../core/controllers/docker-archive-jour
 import { Readable } from 'node:stream';
 import { DockerVersion } from '../../core/controllers/docker-engine.client';
 import { DockerArchiveRequest, DockerContainerCreate, DockerNetworkCreate, DockerVolumeCreate, DockerVolumeHolder, DockerCapacityResult, DockerScanResult, DockerArchiveWriteResult, DockerBindPrepare, DockerImageLoadResult } from './host-docker.dto';
+import { type HostIPv4RouteReader } from './host-ipv4-routes';
 type Labels = Record<string, string>;
 type Volume = {
     Name: string;
     Labels?: Labels;
 };
+type MatchedImage = {
+    ref: string;
+    id: string;
+    metadata: Record<string, unknown>;
+};
 export declare class HostDockerService {
     private readonly archives;
-    constructor(archives: DockerArchiveJournal);
+    private readonly routes;
+    constructor(archives: DockerArchiveJournal, routes?: HostIPv4RouteReader);
     version(signal?: AbortSignal): Promise<DockerVersion>;
     private engine;
-    scan(paths: string[], signal?: AbortSignal, apiVersion?: string, holderVolumes?: string[]): Promise<DockerScanResult>;
+    scan(paths: string[], signal?: AbortSignal, apiVersion?: string, holderVolumes?: string[], networkNames?: string[]): Promise<DockerScanResult>;
     capacity(paths: string[], signal?: AbortSignal): Promise<DockerCapacityResult>;
     imagesPresent(ids: string[], signal?: AbortSignal, apiVersion?: string): Promise<{
         ids: string[];
     }>;
+    matchImages(refs: string[], signal?: AbortSignal, apiVersion?: string): Promise<{
+        images: MatchedImage[];
+    }>;
     loadImage(body: Readable, signal?: AbortSignal, apiVersion?: string): Promise<DockerImageLoadResult>;
+    private loadReferences;
     saveImage(id: string, signal?: AbortSignal, apiVersion?: string): Promise<Readable>;
     createVolume(input: DockerVolumeCreate, signal?: AbortSignal, apiVersion?: string): Promise<Volume>;
     createNetwork(input: DockerNetworkCreate, signal?: AbortSignal, apiVersion?: string): Promise<{
@@ -30,15 +41,16 @@ export declare class HostDockerService {
     holders(name: string, signal?: AbortSignal, apiVersion?: string): Promise<{
         holders: DockerVolumeHolder[];
     }>;
-    remove(kind: 'volumes' | 'containers' | 'networks', id: string, projectId: string, signal?: AbortSignal, apiVersion?: string): Promise<void>;
+    remove(kind: 'volumes' | 'containers' | 'networks', id: string, projectId: string, signal?: AbortSignal, apiVersion?: string, projectRoot?: string): Promise<void>;
     writeArchive(input: DockerArchiveRequest, body: Readable, signal?: AbortSignal, apiVersion?: string): Promise<DockerArchiveWriteResult>;
     prepareBinds(input: DockerBindPrepare, signal?: AbortSignal, apiVersion?: string): Promise<void>;
     private clearBind;
     stopProject(projectId: string, signal?: AbortSignal, apiVersion?: string): Promise<{
         stopped: string[];
     }>;
-    stopContainer(id: string, projectId: string, signal?: AbortSignal, apiVersion?: string): Promise<void>;
+    stopContainer(id: string, projectId: string, signal?: AbortSignal, apiVersion?: string, projectRoot?: string): Promise<void>;
     readArchive(input: DockerArchiveRequest, signal?: AbortSignal, apiVersion?: string): Promise<Readable>;
+    private validateProjectRoot;
     private requireOwner;
     private composeOwnsProjectVolume;
     private composeHolder;

package/dist/server/modules/remotes/host/host-docker.service.js

@@ -8,26 +8,36 @@ var __decorate = (this && this.__decorate) || function (decorators, target, key,
 var __metadata = (this && this.__metadata) || function (k, v) {
     if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
 };
+var __param = (this && this.__param) || function (paramIndex, decorator) {
+    return function (target, key) { decorator(target, key, paramIndex); }
+};
 Object.defineProperty(exports, "__esModule", { value: true });
 exports.HostDockerService = void 0;
+const docker_project_compose_1 = require("../docker/docker-project-compose");
 const docker_archive_journal_1 = require("../../core/controllers/docker-archive-journal");
 const common_1 = require("@nestjs/common");
 const node_crypto_1 = require("node:crypto");
 const promises_1 = require("node:fs/promises");
 const node_os_1 = require("node:os");
+const node_net_1 = require("node:net");
 const node_path_1 = require("node:path");
 const node_stream_1 = require("node:stream");
 const promises_2 = require("node:stream/promises");
 const error_types_1 = require("../../../common/errors/error-types");
+const vm_home_path_1 = require("../../../common/filesystem/vm-home-path");
 const docker_engine_client_1 = require("../../core/controllers/docker-engine.client");
 const docker_archive_1 = require("../../core/controllers/docker-archive");
 const docker_runtime_1 = require("../../core/controllers/docker-runtime");
+const docker_image_metadata_1 = require("../../core/controllers/docker-image-metadata");
 const docker_settings_1 = require("../../core/controllers/docker-settings");
 const host_docker_dto_1 = require("./host-docker.dto");
+const host_ipv4_routes_1 = require("./host-ipv4-routes");
 let HostDockerService = class HostDockerService {
     archives;
-    constructor(archives) {
+    routes;
+    constructor(archives, routes = host_ipv4_routes_1.readHostIPv4Routes) {
         this.archives = archives;
+        this.routes = routes;
     }
     async version(signal) {
         return (await docker_engine_client_1.DockerEngineClient.connect(signal)).version(signal);
@@ -41,13 +51,32 @@ let HostDockerService = class HostDockerService {
             });
         return client;
     }
-    async scan(paths, signal, apiVersion, holderVolumes) {
+    async scan(paths, signal, apiVersion, holderVolumes, networkNames) {
         const client = await this.engine(signal, apiVersion);
         const info = client.connectedInfo ?? (await client.info(signal));
         if (!info.Architecture)
             throw new docker_engine_client_1.DockerEngineError('invalid-response', 'Docker architecture is unavailable');
         const containers = await client.json('GET', '/containers/json?all=true', undefined, { signal });
         const volumes = await client.json('GET', '/volumes', undefined, { signal });
+        let networks;
+        let routes;
+        if (networkNames) {
+            const listed = await client.json('GET', '/networks', undefined, { signal });
+            networks = await Promise.all(listed.map(async (network) => {
+                const subnets = (0, docker_settings_1.ipv4Ranges)(network.IPAM?.Config).map((range) => range.Subnet);
+                if (!networkNames.includes(network.Name))
+                    return { name: network.Name, subnets };
+                const inspect = await client.json('GET', `/networks/${encodeURIComponent(network.Name)}`, undefined, { signal });
+                const addresses = Object.entries(inspect.Containers ?? {}).flatMap(([containerId, endpoint]) => {
+                    const address = endpoint.IPv4Address?.split('/')[0];
+                    return address && (0, node_net_1.isIPv4)(address)
+                        ? [{ address, containerId, containerName: endpoint.Name.replace(/^\//, '') }]
+                        : [];
+                });
+                return { name: network.Name, subnets, addresses };
+            }));
+            routes = await this.routes(signal);
+        }
         const existence = [];
         for (const path of paths) {
             signal?.throwIfAborted();
@@ -66,7 +95,7 @@ let HostDockerService = class HostDockerService {
             const holders = containers.filter((container) => container.Mounts?.some((m) => (m.Type === 'volume' && m.Name && holderVolumes.includes(m.Name)) ||
                 (m.Type === 'bind' &&
                     m.Source &&
-                    paths.some((p) => inside(p, m.Source) || inside(m.Source, p)))));
+                    paths.some((p) => (0, vm_home_path_1.inside)(p, m.Source) || (0, vm_home_path_1.inside)(m.Source, p)))));
             await Promise.all(holders.map(async (container) => {
                 try {
                     const inspect = await client.json('GET', `/containers/${encodeURIComponent(container.Id)}/json`, undefined, { signal });
@@ -87,6 +116,7 @@ let HostDockerService = class HostDockerService {
             architecture: info.Architecture,
             containers: containers.map((container) => ({
                 id: container.Id,
+                ...(container.ImageID ? { image: container.ImageID } : {}),
                 ...(metadata.has(container.Id) && { metadata: metadata.get(container.Id) }),
                 name: container.Names[0]?.replace(/^\//, '') ?? container.Id,
                 labels: container.Labels ?? {},
@@ -103,6 +133,7 @@ let HostDockerService = class HostDockerService {
                 labels: volume.Labels ?? {},
             })),
             paths: existence,
+            ...(networks ? { networks, routes } : {}),
         };
     }
     async capacity(paths, signal) {
@@ -110,7 +141,7 @@ let HostDockerService = class HostDockerService {
         if (paths.some((path) => !(0, node_path_1.isAbsolute)(path) ||
             (0, node_path_1.normalize)(path) !== path ||
             path.includes('\0') ||
-            !inside(path, home)))
+            !(0, vm_home_path_1.inside)(path, home)))
             throw new error_types_1.AppError('Capacity paths must be absolute normalized paths under VM home', 'DOCKER_BIND_OUTSIDE_HOME', 403);
         const results = [];
         const canonicalHome = await (0, promises_1.realpath)(home).catch(() => null);
@@ -119,8 +150,8 @@ let HostDockerService = class HostDockerService {
             try {
                 if (canonicalHome === null)
                     throw new Error();
-                const resolved = await (0, promises_1.realpath)(await nearestExisting(path, home));
-                if (!inside(resolved, canonicalHome))
+                const resolved = await (0, promises_1.realpath)(await (0, vm_home_path_1.nearestExisting)(path, home));
+                if (!(0, vm_home_path_1.inside)(resolved, canonicalHome))
                     throw new Error();
                 const sample = await (0, docker_runtime_1.dockerFilesystem)(resolved);
                 if (!sample || !Number.isFinite(sample.freeBytes) || sample.freeBytes < 0)
@@ -149,10 +180,38 @@ let HostDockerService = class HostDockerService {
         }
         return { ids: present };
     }
+    async matchImages(refs, signal, apiVersion) {
+        const client = await this.engine(signal, apiVersion);
+        const images = [];
+        for (const ref of new Set(refs)) {
+            const image = await (0, docker_engine_client_1.optionalDockerJson)(client, `/images/${encodeURIComponent(ref)}/json`, signal);
+            if (image)
+                images.push({ ref, id: image.Id, metadata: (0, docker_image_metadata_1.dockerImageMetadata)(image) });
+        }
+        return { images };
+    }
     async loadImage(body, signal, apiVersion) {
         const client = await this.engine(signal, apiVersion);
+        const references = await uploadToEngine(body, (toEngine) => this.loadReferences(client, toEngine, signal));
+        const images = new Map();
+        for (const reference of references) {
+            const inspect = await (0, docker_engine_client_1.optionalDockerJson)(client, `/images/${encodeURIComponent(reference)}/json`, signal);
+            if (!inspect?.Id)
+                continue;
+            const image = images.get(inspect.Id) ?? {
+                id: inspect.Id,
+                layers: inspect.RootFS?.Layers ?? [],
+                references: [],
+            };
+            if (!image.references.includes(reference))
+                image.references.push(reference);
+            images.set(inspect.Id, image);
+        }
+        return { images: [...images.values()] };
+    }
+    async loadReferences(client, archive, signal) {
         const response = await client.stream('POST', '/images/load?quiet=1', {
-            body,
+            body: archive,
             headers: { 'Content-Type': 'application/x-tar' },
             signal,
         });
@@ -196,16 +255,7 @@ let HostDockerService = class HostDockerService {
         finally {
             response.destroy();
         }
-        const images = [];
-        const seen = new Set();
-        for (const reference of references) {
-            const inspect = await (0, docker_engine_client_1.optionalDockerJson)(client, `/images/${encodeURIComponent(reference)}/json`, signal);
-            if (!inspect?.Id || seen.has(inspect.Id))
-                continue;
-            seen.add(inspect.Id);
-            images.push({ id: inspect.Id, layers: inspect.RootFS?.Layers ?? [] });
-        }
-        return { images };
+        return references;
     }
     async saveImage(id, signal, apiVersion) {
         const client = await this.engine(signal, apiVersion);
@@ -226,16 +276,25 @@ let HostDockerService = class HostDockerService {
         const client = await this.engine(signal, apiVersion);
         const old = await (0, docker_engine_client_1.optionalDockerJson)(client, `/networks/${encodeURIComponent(input.name)}`, signal);
         if (old) {
-            this.requireOwner(old.Labels, input.projectId, true);
+            if (!input.shared)
+                this.requireOwner(old.Labels, input.projectId, true);
             return { Id: old.Id, created: false };
         }
+        if (input.ipam) {
+            const overlap = (0, docker_settings_1.overlappingIPv4Range)(input.ipam.Config.map((range) => range.Subnet), await this.routes(signal));
+            if (overlap)
+                throw new error_types_1.AppError(`Network ${input.name} home range overlaps VM on-link route ${overlap}. Change the network range on the PC, then connect again.`, 'DOCKER_NETWORK_ROUTE_OVERLAP', 409);
+        }
         const created = await client.json('POST', '/networks/create', {
             Name: input.name,
             Driver: 'bridge',
             Internal: input.internal,
             Attachable: input.attachable,
             Options: input.options,
-            Labels: { ...input.labels, [host_docker_dto_1.DOCKER_PROJECT_LABEL]: input.projectId },
+            ...(input.ipam ? { IPAM: input.ipam } : {}),
+            Labels: input.shared
+                ? input.labels
+                : { ...input.labels, [host_docker_dto_1.DOCKER_PROJECT_LABEL]: input.projectId },
         }, { signal });
         return { Id: created.Id, created: true };
     }
@@ -268,14 +327,15 @@ let HostDockerService = class HostDockerService {
                 .map((container) => ({ id: container.Id, labels: container.Labels ?? {} })),
         };
     }
-    async remove(kind, id, projectId, signal, apiVersion) {
+    async remove(kind, id, projectId, signal, apiVersion, projectRoot) {
+        await this.validateProjectRoot(projectRoot);
         const client = await this.engine(signal, apiVersion);
         const resource = await client.json('GET', `/${kind}/${encodeURIComponent(id)}${kind === 'containers' ? '/json' : ''}`, undefined, { signal });
         const labels = kind === 'containers' ? resource.Config.Labels : resource.Labels;
         if (labels?.[host_docker_dto_1.DOCKER_PROJECT_LABEL] !== projectId) {
             if (kind !== 'containers' ||
-                labels?.[host_docker_dto_1.DOCKER_PROJECT_LABEL] ||
-                !(await this.composeHolder(client, resource, projectId, signal)))
+                labels?.[host_docker_dto_1.DOCKER_PROJECT_LABEL] !== undefined ||
+                !(await this.composeHolder(client, resource, projectId, signal, projectRoot)))
                 this.requireOwner(labels, projectId);
         }
         const exactId = kind === 'volumes' ? id : resource.Id;
@@ -292,38 +352,11 @@ let HostDockerService = class HostDockerService {
         const helper = await this.archives.create(client, input.image, [layout.mount], signal);
         const hash = (0, node_crypto_1.createHash)('sha256');
         let bytes = 0;
-        const toEngine = new node_stream_1.PassThrough();
-        const received = (async () => {
-            for await (const chunk of body) {
+        try {
+            await uploadToEngine(body, (toEngine) => (0, docker_archive_1.writeDockerArchive)(client, helper.id, toEngine, signal, layout.writePath), (chunk) => {
                 hash.update(chunk);
                 bytes += chunk.length;
-                if (toEngine.destroyed || toEngine.writableEnded)
-                    continue;
-                if (!toEngine.write(chunk))
-                    await new Promise((done) => {
-                        const settle = () => {
-                            toEngine.off('drain', settle).off('close', settle);
-                            done();
-                        };
-                        toEngine.on('drain', settle).on('close', settle);
-                    });
-            }
-            if (!toEngine.destroyed)
-                toEngine.end();
-        })();
-        try {
-            await Promise.all([
-                received,
-                (0, docker_archive_1.writeDockerArchive)(client, helper.id, toEngine, signal, layout.writePath).catch((error) => {
-                    body.destroy();
-                    throw error;
-                }),
-            ]);
-        }
-        catch (error) {
-            toEngine.destroy();
-            await received.catch(() => undefined);
-            throw error;
+            });
         }
         finally {
             await this.archives.cleanup(client, helper);
@@ -331,18 +364,13 @@ let HostDockerService = class HostDockerService {
         return { sha256: hash.digest('hex'), bytes };
     }
     async prepareBinds(input, signal, apiVersion) {
-        const home = (0, node_os_1.homedir)();
-        const canonicalHome = await (0, promises_1.realpath)(home);
         for (const { path, replace, image, file } of input.paths) {
             signal?.throwIfAborted();
-            if (path === home || !inside(path, home))
-                throw new error_types_1.AppError('Bind paths must be under the VM home', 'DOCKER_BIND_OUTSIDE_HOME', 403);
-            const existing = await nearestExisting(path);
-            const resolved = await (0, promises_1.realpath)(existing);
-            if (!inside(resolved, canonicalHome))
-                throw new error_types_1.AppError('Bind paths must be under the VM home', 'DOCKER_BIND_OUTSIDE_HOME', 403);
-            if (existing === path && (await (0, promises_1.lstat)(path)).isSymbolicLink())
-                throw new error_types_1.AppError('Bind paths must not be links', 'DOCKER_BIND_OUTSIDE_HOME', 403);
+            const { existing, resolved } = await (0, vm_home_path_1.assertVmHomePath)(path, {
+                code: 'DOCKER_BIND_OUTSIDE_HOME',
+                message: 'Bind paths must be under the VM home',
+                linkMessage: 'Bind paths must not be links',
+            });
             if (file) {
                 await (0, promises_1.mkdir)((0, node_path_1.dirname)(path), { recursive: true });
                 continue;
@@ -382,15 +410,14 @@ let HostDockerService = class HostDockerService {
         }
         return { stopped };
     }
-    async stopContainer(id, projectId, signal, apiVersion) {
+    async stopContainer(id, projectId, signal, apiVersion, projectRoot) {
+        await this.validateProjectRoot(projectRoot);
         const client = await this.engine(signal, apiVersion);
         const container = await client.json('GET', `/containers/${encodeURIComponent(id)}/json`, undefined, { signal });
         const labels = container.Config.Labels ?? {};
         if (labels[host_docker_dto_1.DOCKER_PROJECT_LABEL] !== projectId) {
-            const compose = labels[host_docker_dto_1.COMPOSE_PROJECT_LABEL];
-            const owned = !labels[host_docker_dto_1.DOCKER_PROJECT_LABEL] &&
-                compose !== undefined &&
-                (await this.composeOwnsProjectVolume(client, compose, projectId, signal));
+            const owned = labels[host_docker_dto_1.DOCKER_PROJECT_LABEL] === undefined &&
+                (await this.composeOwnsProjectVolume(client, labels, projectId, signal, projectRoot));
             if (!owned)
                 this.requireOwner(labels, projectId);
         }
@@ -423,16 +450,42 @@ let HostDockerService = class HostDockerService {
         })();
         return output;
     }
+    async validateProjectRoot(root) {
+        if (root === undefined)
+            return;
+        const code = 'DOCKER_PROJECT_ROOT_INVALID';
+        if (!(0, node_path_1.isAbsolute)(root) || (0, node_path_1.normalize)(root) !== root || root.includes('\0'))
+            throw new error_types_1.AppError('Project root must be an absolute, normalized path', code, 400);
+        try {
+            await (0, vm_home_path_1.assertVmHomePath)(root, {
+                code,
+                message: 'Project root must be below the VM home and cannot be the home itself',
+                linkMessage: 'Project root must not be a link',
+            });
+        }
+        catch (error) {
+            if (error instanceof error_types_1.AppError)
+                throw new error_types_1.AppError(error.message, code, 400);
+            throw error;
+        }
+    }
     requireOwner(labels, projectId, conflict = false) {
         if (labels?.[host_docker_dto_1.DOCKER_PROJECT_LABEL] !== projectId)
             throw new error_types_1.AppError('Docker resource is not owned by this imported project', 'DOCKER_OWNERSHIP_REQUIRED', conflict ? 409 : 403);
     }
-    async composeOwnsProjectVolume(client, compose, projectId, signal) {
+    async composeOwnsProjectVolume(client, labels, projectId, signal, projectRoot) {
+        if (projectRoot && (0, docker_project_compose_1.projectCompose)(labels, projectRoot, projectId))
+            return true;
+        const compose = labels[host_docker_dto_1.COMPOSE_PROJECT_LABEL];
+        if (!compose)
+            return false;
         const { Volumes } = await client.json('GET', `/volumes?filters=${encodeURIComponent(JSON.stringify({ label: [`${host_docker_dto_1.DOCKER_PROJECT_LABEL}=${projectId}`] }))}`, undefined, { signal });
         return (Volumes?.some((volume) => volume.Labels?.[host_docker_dto_1.DOCKER_PROJECT_LABEL] === projectId &&
             volume.Labels?.[host_docker_dto_1.COMPOSE_PROJECT_LABEL] === compose) ?? false);
     }
-    async composeHolder(client, container, projectId, signal) {
+    async composeHolder(client, container, projectId, signal, projectRoot) {
+        if (projectRoot && (0, docker_project_compose_1.projectCompose)(container.Config.Labels ?? {}, projectRoot, projectId))
+            return true;
         const compose = container.Config.Labels?.[host_docker_dto_1.COMPOSE_PROJECT_LABEL];
         if (!compose)
             return false;
@@ -459,7 +512,7 @@ let HostDockerService = class HostDockerService {
                 (0, promises_1.realpath)((0, node_os_1.homedir)()),
                 (0, promises_1.realpath)(file ? (0, node_path_1.dirname)(requested) : requested),
             ]);
-            if (!inside(resolved, home))
+            if (!(0, vm_home_path_1.inside)(resolved, home))
                 throw new Error();
             return file ? (0, node_path_1.join)(resolved, (0, node_path_1.basename)(requested)) : resolved;
         }
@@ -471,21 +524,43 @@ let HostDockerService = class HostDockerService {
 exports.HostDockerService = HostDockerService;
 exports.HostDockerService = HostDockerService = __decorate([
     (0, common_1.Injectable)(),
-    __metadata("design:paramtypes", [docker_archive_journal_1.DockerArchiveJournal])
+    __param(1, (0, common_1.Optional)()),
+    __param(1, (0, common_1.Inject)(host_ipv4_routes_1.HOST_IPV4_ROUTES)),
+    __metadata("design:paramtypes", [docker_archive_journal_1.DockerArchiveJournal, Function])
 ], HostDockerService);
-function inside(path, root) {
-    return path === root || path.startsWith(root + node_path_1.sep);
-}
-async function nearestExisting(path, stop) {
-    for (let candidate = path;; candidate = (0, node_path_1.dirname)(candidate)) {
-        try {
-            await (0, promises_1.lstat)(candidate);
-            return candidate;
+async function uploadToEngine(body, send, onChunk) {
+    const toEngine = new node_stream_1.PassThrough();
+    const received = (async () => {
+        for await (const chunk of body) {
+            onChunk?.(chunk);
+            if (toEngine.destroyed || toEngine.writableEnded)
+                continue;
+            if (!toEngine.write(chunk))
+                await new Promise((done) => {
+                    const settle = () => {
+                        toEngine.off('drain', settle).off('close', settle);
+                        done();
+                    };
+                    toEngine.on('drain', settle).on('close', settle);
+                });
         }
-        catch (error) {
-            if (error.code !== 'ENOENT' || candidate === stop)
+        if (!toEngine.destroyed)
+            toEngine.end();
+    })();
+    try {
+        const [answer] = await Promise.all([
+            send(toEngine).catch((error) => {
+                body.destroy();
                 throw error;
-        }
+            }),
+            received,
+        ]);
+        return answer;
+    }
+    catch (error) {
+        toEngine.destroy();
+        await received.catch(() => undefined);
+        throw error;
     }
 }
 //# sourceMappingURL=host-docker.service.js.map