dsh-pentester 0.0.1 → 1.0.0

package/lib/container-listing-BI6Xj8l2.js

@@ -0,0 +1,56 @@
+import { a as PENTESTER_RUNTIME_PROFILE_LABEL, n as PENTESTER_ENGAGEMENT_LABEL } from "./engagement-container-store-Cf-h0B4F.js";
+//#region src/tools/container-listing.ts
+/**
+* Container listing helpers used by the P0-B GC. The engine's
+* `listContainers` returns id + labels + name + image; filtering by the
+* dsh.pentester.* labels is done here so the GC never parses container names
+* for ownership (labels are the single source of truth).
+*/
+async function listContainersByLabel(engine, label, value) {
+	const containers = await engine.listContainers({
+		label: `${label}=${value}`,
+		all: true
+	});
+	const out = [];
+	for (const container of containers) {
+		const engagementId = container.labels?.[PENTESTER_ENGAGEMENT_LABEL];
+		const profile = container.labels?.[PENTESTER_RUNTIME_PROFILE_LABEL];
+		if (engagementId === void 0 || profile === void 0) continue;
+		out.push({
+			containerId: container.id,
+			engagementId,
+			profile,
+			name: container.name
+		});
+	}
+	return out;
+}
+/**
+* Legacy candidates from the OLD 1-AgentRun=1-container scheme:
+*   - image == dsh-pentester/kali:latest
+*   - name matches `dsh-<engagement>--<run>--<toolbox>` (no managed label)
+* Ownership is confirmed only by the caller (engagement dir exists); anything
+* ambiguous is reported, never deleted.
+*/
+const LEGACY_NAME = /^dsh-([a-zA-Z0-9_.-]{8,40})--[a-zA-Z0-9_.-]{8,40}--[a-zA-Z0-9_.-]{1,24}$/;
+async function listLegacyPentesterContainers(engine) {
+	const containers = await engine.listContainers({ all: true });
+	const out = [];
+	for (const container of containers) {
+		if (container.labels?.["dsh.pentester.managed"] === "true") continue;
+		if (!container.image.includes("dsh-pentester/kali")) continue;
+		const match = LEGACY_NAME.exec(container.name);
+		if (match === null) continue;
+		out.push({
+			containerId: container.id,
+			name: container.name,
+			image: container.image,
+			engagementId: match[1]
+		});
+	}
+	return out;
+}
+//#endregion
+export { listContainersByLabel, listLegacyPentesterContainers };
+
+//# sourceMappingURL=container-listing-BI6Xj8l2.js.map

package/lib/container-listing-BI6Xj8l2.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"container-listing-BI6Xj8l2.js","names":[],"sources":["../src/tools/container-listing.ts"],"sourcesContent":["import type { DockerEngineClient } from './docker-engine.js'\nimport {\n  PENTESTER_ENGAGEMENT_LABEL,\n  PENTESTER_MANAGED_LABEL,\n  PENTESTER_MANAGED_TRUE,\n  PENTESTER_RUNTIME_PROFILE_LABEL,\n} from './engagement-container-store.js'\nimport type { LegacyContainerCandidate, ManagedContainerEntry } from './container-gc.js'\n\n/**\n * Container listing helpers used by the P0-B GC. The engine's\n * `listContainers` returns id + labels + name + image; filtering by the\n * dsh.pentester.* labels is done here so the GC never parses container names\n * for ownership (labels are the single source of truth).\n */\n\nexport async function listContainersByLabel(\n  engine: DockerEngineClient,\n  label: string,\n  value: string,\n): Promise<readonly ManagedContainerEntry[]> {\n  const containers = await engine.listContainers({ label: `${label}=${value}`, all: true })\n  const out: ManagedContainerEntry[] = []\n  for (const container of containers) {\n    const engagementId = container.labels?.[PENTESTER_ENGAGEMENT_LABEL]\n    const profile = container.labels?.[PENTESTER_RUNTIME_PROFILE_LABEL]\n    if (engagementId === undefined || profile === undefined) {\n      continue\n    }\n    out.push({ containerId: container.id, engagementId, profile, name: container.name })\n  }\n  return out\n}\n\n/**\n * Legacy candidates from the OLD 1-AgentRun=1-container scheme:\n *   - image == dsh-pentester/kali:latest\n *   - name matches `dsh-<engagement>--<run>--<toolbox>` (no managed label)\n * Ownership is confirmed only by the caller (engagement dir exists); anything\n * ambiguous is reported, never deleted.\n */\nconst LEGACY_NAME = /^dsh-([a-zA-Z0-9_.-]{8,40})--[a-zA-Z0-9_.-]{8,40}--[a-zA-Z0-9_.-]{1,24}$/\n\nexport async function listLegacyPentesterContainers(\n  engine: DockerEngineClient,\n): Promise<readonly LegacyContainerCandidate[]> {\n  const containers = await engine.listContainers({ all: true })\n  const out: LegacyContainerCandidate[] = []\n  for (const container of containers) {\n    if (container.labels?.[PENTESTER_MANAGED_LABEL] === PENTESTER_MANAGED_TRUE) {\n      // Managed containers are handled by the new-scheme scan, never legacy.\n      continue\n    }\n    if (!container.image.includes('dsh-pentester/kali')) {\n      continue\n    }\n    const match = LEGACY_NAME.exec(container.name)\n    if (match === null) {\n      continue\n    }\n    out.push({\n      containerId: container.id,\n      name: container.name,\n      image: container.image,\n      engagementId: match[1],\n    })\n  }\n  return out\n}\n"],"mappings":";;;;;;;;AAgBA,eAAsB,sBACpB,QACA,OACA,OAC2C;CAC3C,MAAM,aAAa,MAAM,OAAO,eAAe;EAAE,OAAO,GAAG,MAAM,GAAG;EAAS,KAAK;CAAK,CAAC;CACxF,MAAM,MAA+B,CAAC;CACtC,KAAK,MAAM,aAAa,YAAY;EAClC,MAAM,eAAe,UAAU,SAAS;EACxC,MAAM,UAAU,UAAU,SAAS;EACnC,IAAI,iBAAiB,KAAA,KAAa,YAAY,KAAA,GAC5C;EAEF,IAAI,KAAK;GAAE,aAAa,UAAU;GAAI;GAAc;GAAS,MAAM,UAAU;EAAK,CAAC;CACrF;CACA,OAAO;AACT;;;;;;;;AASA,MAAM,cAAc;AAEpB,eAAsB,8BACpB,QAC8C;CAC9C,MAAM,aAAa,MAAM,OAAO,eAAe,EAAE,KAAK,KAAK,CAAC;CAC5D,MAAM,MAAkC,CAAC;CACzC,KAAK,MAAM,aAAa,YAAY;EAClC,IAAI,UAAU,SAAA,6BAAA,QAEZ;EAEF,IAAI,CAAC,UAAU,MAAM,SAAS,oBAAoB,GAChD;EAEF,MAAM,QAAQ,YAAY,KAAK,UAAU,IAAI;EAC7C,IAAI,UAAU,MACZ;EAEF,IAAI,KAAK;GACP,aAAa,UAAU;GACvB,MAAM,UAAU;GAChB,OAAO,UAAU;GACjB,cAAc,MAAM;EACtB,CAAC;CACH;CACA,OAAO;AACT"}

package/lib/container-listing-BWZoBnN_.js

@@ -0,0 +1,56 @@
+import { a as PENTESTER_RUNTIME_PROFILE_LABEL, n as PENTESTER_ENGAGEMENT_LABEL } from "./engagement-container-store-L_Gms-zi.js";
+//#region src/tools/container-listing.ts
+/**
+* Container listing helpers used by the P0-B GC. The engine's
+* `listContainers` returns id + labels + name + image; filtering by the
+* dsh.pentester.* labels is done here so the GC never parses container names
+* for ownership (labels are the single source of truth).
+*/
+async function listContainersByLabel(engine, label, value) {
+	const containers = await engine.listContainers({
+		label: `${label}=${value}`,
+		all: true
+	});
+	const out = [];
+	for (const container of containers) {
+		const engagementId = container.labels?.[PENTESTER_ENGAGEMENT_LABEL];
+		const profile = container.labels?.[PENTESTER_RUNTIME_PROFILE_LABEL];
+		if (engagementId === void 0 || profile === void 0) continue;
+		out.push({
+			containerId: container.id,
+			engagementId,
+			profile,
+			name: container.name
+		});
+	}
+	return out;
+}
+/**
+* Legacy candidates from the OLD 1-AgentRun=1-container scheme:
+*   - image == dsh-pentester/kali:latest
+*   - name matches `dsh-<engagement>--<run>--<toolbox>` (no managed label)
+* Ownership is confirmed only by the caller (engagement dir exists); anything
+* ambiguous is reported, never deleted.
+*/
+const LEGACY_NAME = /^dsh-([a-zA-Z0-9_.-]{8,40})--[a-zA-Z0-9_.-]{8,40}--[a-zA-Z0-9_.-]{1,24}$/;
+async function listLegacyPentesterContainers(engine) {
+	const containers = await engine.listContainers({ all: true });
+	const out = [];
+	for (const container of containers) {
+		if (container.labels?.["dsh.pentester.managed"] === "true") continue;
+		if (!container.image.includes("dsh-pentester/kali")) continue;
+		const match = LEGACY_NAME.exec(container.name);
+		if (match === null) continue;
+		out.push({
+			containerId: container.id,
+			name: container.name,
+			image: container.image,
+			engagementId: match[1]
+		});
+	}
+	return out;
+}
+//#endregion
+export { listContainersByLabel, listLegacyPentesterContainers };
+
+//# sourceMappingURL=container-listing-BWZoBnN_.js.map

package/lib/container-listing-BWZoBnN_.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"container-listing-BWZoBnN_.js","names":[],"sources":["../src/tools/container-listing.ts"],"sourcesContent":["import type { DockerEngineClient } from './docker-engine.js'\nimport {\n  PENTESTER_ENGAGEMENT_LABEL,\n  PENTESTER_MANAGED_LABEL,\n  PENTESTER_MANAGED_TRUE,\n  PENTESTER_RUNTIME_PROFILE_LABEL,\n} from './engagement-container-store.js'\nimport type { LegacyContainerCandidate, ManagedContainerEntry } from './container-gc.js'\n\n/**\n * Container listing helpers used by the P0-B GC. The engine's\n * `listContainers` returns id + labels + name + image; filtering by the\n * dsh.pentester.* labels is done here so the GC never parses container names\n * for ownership (labels are the single source of truth).\n */\n\nexport async function listContainersByLabel(\n  engine: DockerEngineClient,\n  label: string,\n  value: string,\n): Promise<readonly ManagedContainerEntry[]> {\n  const containers = await engine.listContainers({ label: `${label}=${value}`, all: true })\n  const out: ManagedContainerEntry[] = []\n  for (const container of containers) {\n    const engagementId = container.labels?.[PENTESTER_ENGAGEMENT_LABEL]\n    const profile = container.labels?.[PENTESTER_RUNTIME_PROFILE_LABEL]\n    if (engagementId === undefined || profile === undefined) {\n      continue\n    }\n    out.push({ containerId: container.id, engagementId, profile, name: container.name })\n  }\n  return out\n}\n\n/**\n * Legacy candidates from the OLD 1-AgentRun=1-container scheme:\n *   - image == dsh-pentester/kali:latest\n *   - name matches `dsh-<engagement>--<run>--<toolbox>` (no managed label)\n * Ownership is confirmed only by the caller (engagement dir exists); anything\n * ambiguous is reported, never deleted.\n */\nconst LEGACY_NAME = /^dsh-([a-zA-Z0-9_.-]{8,40})--[a-zA-Z0-9_.-]{8,40}--[a-zA-Z0-9_.-]{1,24}$/\n\nexport async function listLegacyPentesterContainers(\n  engine: DockerEngineClient,\n): Promise<readonly LegacyContainerCandidate[]> {\n  const containers = await engine.listContainers({ all: true })\n  const out: LegacyContainerCandidate[] = []\n  for (const container of containers) {\n    if (container.labels?.[PENTESTER_MANAGED_LABEL] === PENTESTER_MANAGED_TRUE) {\n      // Managed containers are handled by the new-scheme scan, never legacy.\n      continue\n    }\n    if (!container.image.includes('dsh-pentester/kali')) {\n      continue\n    }\n    const match = LEGACY_NAME.exec(container.name)\n    if (match === null) {\n      continue\n    }\n    out.push({\n      containerId: container.id,\n      name: container.name,\n      image: container.image,\n      engagementId: match[1],\n    })\n  }\n  return out\n}\n"],"mappings":";;;;;;;;AAgBA,eAAsB,sBACpB,QACA,OACA,OAC2C;CAC3C,MAAM,aAAa,MAAM,OAAO,eAAe;EAAE,OAAO,GAAG,MAAM,GAAG;EAAS,KAAK;CAAK,CAAC;CACxF,MAAM,MAA+B,CAAC;CACtC,KAAK,MAAM,aAAa,YAAY;EAClC,MAAM,eAAe,UAAU,SAAS;EACxC,MAAM,UAAU,UAAU,SAAS;EACnC,IAAI,iBAAiB,KAAA,KAAa,YAAY,KAAA,GAC5C;EAEF,IAAI,KAAK;GAAE,aAAa,UAAU;GAAI;GAAc;GAAS,MAAM,UAAU;EAAK,CAAC;CACrF;CACA,OAAO;AACT;;;;;;;;AASA,MAAM,cAAc;AAEpB,eAAsB,8BACpB,QAC8C;CAC9C,MAAM,aAAa,MAAM,OAAO,eAAe,EAAE,KAAK,KAAK,CAAC;CAC5D,MAAM,MAAkC,CAAC;CACzC,KAAK,MAAM,aAAa,YAAY;EAClC,IAAI,UAAU,SAAA,6BAAA,QAEZ;EAEF,IAAI,CAAC,UAAU,MAAM,SAAS,oBAAoB,GAChD;EAEF,MAAM,QAAQ,YAAY,KAAK,UAAU,IAAI;EAC7C,IAAI,UAAU,MACZ;EAEF,IAAI,KAAK;GACP,aAAa,UAAU;GACvB,MAAM,UAAU;GAChB,OAAO,UAAU;GACjB,cAAc,MAAM;EACtB,CAAC;CACH;CACA,OAAO;AACT"}

package/lib/container-listing-CE5t-Y_H.js

@@ -0,0 +1,56 @@
+import { a as PENTESTER_RUNTIME_PROFILE_LABEL, n as PENTESTER_ENGAGEMENT_LABEL } from "./engagement-container-store-Cu1wuur1.js";
+//#region src/tools/container-listing.ts
+/**
+* Container listing helpers used by the P0-B GC. The engine's
+* `listContainers` returns id + labels + name + image; filtering by the
+* dsh.pentester.* labels is done here so the GC never parses container names
+* for ownership (labels are the single source of truth).
+*/
+async function listContainersByLabel(engine, label, value) {
+	const containers = await engine.listContainers({
+		label: `${label}=${value}`,
+		all: true
+	});
+	const out = [];
+	for (const container of containers) {
+		const engagementId = container.labels?.[PENTESTER_ENGAGEMENT_LABEL];
+		const profile = container.labels?.[PENTESTER_RUNTIME_PROFILE_LABEL];
+		if (engagementId === void 0 || profile === void 0) continue;
+		out.push({
+			containerId: container.id,
+			engagementId,
+			profile,
+			name: container.name
+		});
+	}
+	return out;
+}
+/**
+* Legacy candidates from the OLD 1-AgentRun=1-container scheme:
+*   - image == dsh-pentester/kali:latest
+*   - name matches `dsh-<engagement>--<run>--<toolbox>` (no managed label)
+* Ownership is confirmed only by the caller (engagement dir exists); anything
+* ambiguous is reported, never deleted.
+*/
+const LEGACY_NAME = /^dsh-([a-zA-Z0-9_.-]{8,40})--[a-zA-Z0-9_.-]{8,40}--[a-zA-Z0-9_.-]{1,24}$/;
+async function listLegacyPentesterContainers(engine) {
+	const containers = await engine.listContainers({ all: true });
+	const out = [];
+	for (const container of containers) {
+		if (container.labels?.["dsh.pentester.managed"] === "true") continue;
+		if (!container.image.includes("dsh-pentester/kali")) continue;
+		const match = LEGACY_NAME.exec(container.name);
+		if (match === null) continue;
+		out.push({
+			containerId: container.id,
+			name: container.name,
+			image: container.image,
+			engagementId: match[1]
+		});
+	}
+	return out;
+}
+//#endregion
+export { listContainersByLabel, listLegacyPentesterContainers };
+
+//# sourceMappingURL=container-listing-CE5t-Y_H.js.map

package/lib/container-listing-CE5t-Y_H.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"container-listing-CE5t-Y_H.js","names":[],"sources":["../src/tools/container-listing.ts"],"sourcesContent":["import type { DockerEngineClient } from './docker-engine.js'\nimport {\n  PENTESTER_ENGAGEMENT_LABEL,\n  PENTESTER_MANAGED_LABEL,\n  PENTESTER_MANAGED_TRUE,\n  PENTESTER_RUNTIME_PROFILE_LABEL,\n} from './engagement-container-store.js'\nimport type { LegacyContainerCandidate, ManagedContainerEntry } from './container-gc.js'\n\n/**\n * Container listing helpers used by the P0-B GC. The engine's\n * `listContainers` returns id + labels + name + image; filtering by the\n * dsh.pentester.* labels is done here so the GC never parses container names\n * for ownership (labels are the single source of truth).\n */\n\nexport async function listContainersByLabel(\n  engine: DockerEngineClient,\n  label: string,\n  value: string,\n): Promise<readonly ManagedContainerEntry[]> {\n  const containers = await engine.listContainers({ label: `${label}=${value}`, all: true })\n  const out: ManagedContainerEntry[] = []\n  for (const container of containers) {\n    const engagementId = container.labels?.[PENTESTER_ENGAGEMENT_LABEL]\n    const profile = container.labels?.[PENTESTER_RUNTIME_PROFILE_LABEL]\n    if (engagementId === undefined || profile === undefined) {\n      continue\n    }\n    out.push({ containerId: container.id, engagementId, profile, name: container.name })\n  }\n  return out\n}\n\n/**\n * Legacy candidates from the OLD 1-AgentRun=1-container scheme:\n *   - image == dsh-pentester/kali:latest\n *   - name matches `dsh-<engagement>--<run>--<toolbox>` (no managed label)\n * Ownership is confirmed only by the caller (engagement dir exists); anything\n * ambiguous is reported, never deleted.\n */\nconst LEGACY_NAME = /^dsh-([a-zA-Z0-9_.-]{8,40})--[a-zA-Z0-9_.-]{8,40}--[a-zA-Z0-9_.-]{1,24}$/\n\nexport async function listLegacyPentesterContainers(\n  engine: DockerEngineClient,\n): Promise<readonly LegacyContainerCandidate[]> {\n  const containers = await engine.listContainers({ all: true })\n  const out: LegacyContainerCandidate[] = []\n  for (const container of containers) {\n    if (container.labels?.[PENTESTER_MANAGED_LABEL] === PENTESTER_MANAGED_TRUE) {\n      // Managed containers are handled by the new-scheme scan, never legacy.\n      continue\n    }\n    if (!container.image.includes('dsh-pentester/kali')) {\n      continue\n    }\n    const match = LEGACY_NAME.exec(container.name)\n    if (match === null) {\n      continue\n    }\n    out.push({\n      containerId: container.id,\n      name: container.name,\n      image: container.image,\n      engagementId: match[1],\n    })\n  }\n  return out\n}\n"],"mappings":";;;;;;;;AAgBA,eAAsB,sBACpB,QACA,OACA,OAC2C;CAC3C,MAAM,aAAa,MAAM,OAAO,eAAe;EAAE,OAAO,GAAG,MAAM,GAAG;EAAS,KAAK;CAAK,CAAC;CACxF,MAAM,MAA+B,CAAC;CACtC,KAAK,MAAM,aAAa,YAAY;EAClC,MAAM,eAAe,UAAU,SAAS;EACxC,MAAM,UAAU,UAAU,SAAS;EACnC,IAAI,iBAAiB,KAAA,KAAa,YAAY,KAAA,GAC5C;EAEF,IAAI,KAAK;GAAE,aAAa,UAAU;GAAI;GAAc;GAAS,MAAM,UAAU;EAAK,CAAC;CACrF;CACA,OAAO;AACT;;;;;;;;AASA,MAAM,cAAc;AAEpB,eAAsB,8BACpB,QAC8C;CAC9C,MAAM,aAAa,MAAM,OAAO,eAAe,EAAE,KAAK,KAAK,CAAC;CAC5D,MAAM,MAAkC,CAAC;CACzC,KAAK,MAAM,aAAa,YAAY;EAClC,IAAI,UAAU,SAAA,6BAAA,QAEZ;EAEF,IAAI,CAAC,UAAU,MAAM,SAAS,oBAAoB,GAChD;EAEF,MAAM,QAAQ,YAAY,KAAK,UAAU,IAAI;EAC7C,IAAI,UAAU,MACZ;EAEF,IAAI,KAAK;GACP,aAAa,UAAU;GACvB,MAAM,UAAU;GAChB,OAAO,UAAU;GACjB,cAAc,MAAM;EACtB,CAAC;CACH;CACA,OAAO;AACT"}

package/lib/container-listing-DZPBvrLD.js

@@ -0,0 +1,56 @@
+import { a as PENTESTER_RUNTIME_PROFILE_LABEL, n as PENTESTER_ENGAGEMENT_LABEL } from "./engagement-container-store-B9D8g0wq.js";
+//#region src/tools/container-listing.ts
+/**
+* Container listing helpers used by the P0-B GC. The engine's
+* `listContainers` returns id + labels + name + image; filtering by the
+* dsh.pentester.* labels is done here so the GC never parses container names
+* for ownership (labels are the single source of truth).
+*/
+async function listContainersByLabel(engine, label, value) {
+	const containers = await engine.listContainers({
+		label: `${label}=${value}`,
+		all: true
+	});
+	const out = [];
+	for (const container of containers) {
+		const engagementId = container.labels?.[PENTESTER_ENGAGEMENT_LABEL];
+		const profile = container.labels?.[PENTESTER_RUNTIME_PROFILE_LABEL];
+		if (engagementId === void 0 || profile === void 0) continue;
+		out.push({
+			containerId: container.id,
+			engagementId,
+			profile,
+			name: container.name
+		});
+	}
+	return out;
+}
+/**
+* Legacy candidates from the OLD 1-AgentRun=1-container scheme:
+*   - image == dsh-pentester/kali:latest
+*   - name matches `dsh-<engagement>--<run>--<toolbox>` (no managed label)
+* Ownership is confirmed only by the caller (engagement dir exists); anything
+* ambiguous is reported, never deleted.
+*/
+const LEGACY_NAME = /^dsh-([a-zA-Z0-9_.-]{8,40})--[a-zA-Z0-9_.-]{8,40}--[a-zA-Z0-9_.-]{1,24}$/;
+async function listLegacyPentesterContainers(engine) {
+	const containers = await engine.listContainers({ all: true });
+	const out = [];
+	for (const container of containers) {
+		if (container.labels?.["dsh.pentester.managed"] === "true") continue;
+		if (!container.image.includes("dsh-pentester/kali")) continue;
+		const match = LEGACY_NAME.exec(container.name);
+		if (match === null) continue;
+		out.push({
+			containerId: container.id,
+			name: container.name,
+			image: container.image,
+			engagementId: match[1]
+		});
+	}
+	return out;
+}
+//#endregion
+export { listContainersByLabel, listLegacyPentesterContainers };
+
+//# sourceMappingURL=container-listing-DZPBvrLD.js.map

package/lib/container-listing-DZPBvrLD.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"container-listing-DZPBvrLD.js","names":[],"sources":["../src/tools/container-listing.ts"],"sourcesContent":["import type { DockerEngineClient } from './docker-engine.js'\nimport {\n  PENTESTER_ENGAGEMENT_LABEL,\n  PENTESTER_MANAGED_LABEL,\n  PENTESTER_MANAGED_TRUE,\n  PENTESTER_RUNTIME_PROFILE_LABEL,\n} from './engagement-container-store.js'\nimport type { LegacyContainerCandidate, ManagedContainerEntry } from './container-gc.js'\n\n/**\n * Container listing helpers used by the P0-B GC. The engine's\n * `listContainers` returns id + labels + name + image; filtering by the\n * dsh.pentester.* labels is done here so the GC never parses container names\n * for ownership (labels are the single source of truth).\n */\n\nexport async function listContainersByLabel(\n  engine: DockerEngineClient,\n  label: string,\n  value: string,\n): Promise<readonly ManagedContainerEntry[]> {\n  const containers = await engine.listContainers({ label: `${label}=${value}`, all: true })\n  const out: ManagedContainerEntry[] = []\n  for (const container of containers) {\n    const engagementId = container.labels?.[PENTESTER_ENGAGEMENT_LABEL]\n    const profile = container.labels?.[PENTESTER_RUNTIME_PROFILE_LABEL]\n    if (engagementId === undefined || profile === undefined) {\n      continue\n    }\n    out.push({ containerId: container.id, engagementId, profile, name: container.name })\n  }\n  return out\n}\n\n/**\n * Legacy candidates from the OLD 1-AgentRun=1-container scheme:\n *   - image == dsh-pentester/kali:latest\n *   - name matches `dsh-<engagement>--<run>--<toolbox>` (no managed label)\n * Ownership is confirmed only by the caller (engagement dir exists); anything\n * ambiguous is reported, never deleted.\n */\nconst LEGACY_NAME = /^dsh-([a-zA-Z0-9_.-]{8,40})--[a-zA-Z0-9_.-]{8,40}--[a-zA-Z0-9_.-]{1,24}$/\n\nexport async function listLegacyPentesterContainers(\n  engine: DockerEngineClient,\n): Promise<readonly LegacyContainerCandidate[]> {\n  const containers = await engine.listContainers({ all: true })\n  const out: LegacyContainerCandidate[] = []\n  for (const container of containers) {\n    if (container.labels?.[PENTESTER_MANAGED_LABEL] === PENTESTER_MANAGED_TRUE) {\n      // Managed containers are handled by the new-scheme scan, never legacy.\n      continue\n    }\n    if (!container.image.includes('dsh-pentester/kali')) {\n      continue\n    }\n    const match = LEGACY_NAME.exec(container.name)\n    if (match === null) {\n      continue\n    }\n    out.push({\n      containerId: container.id,\n      name: container.name,\n      image: container.image,\n      engagementId: match[1],\n    })\n  }\n  return out\n}\n"],"mappings":";;;;;;;;AAgBA,eAAsB,sBACpB,QACA,OACA,OAC2C;CAC3C,MAAM,aAAa,MAAM,OAAO,eAAe;EAAE,OAAO,GAAG,MAAM,GAAG;EAAS,KAAK;CAAK,CAAC;CACxF,MAAM,MAA+B,CAAC;CACtC,KAAK,MAAM,aAAa,YAAY;EAClC,MAAM,eAAe,UAAU,SAAS;EACxC,MAAM,UAAU,UAAU,SAAS;EACnC,IAAI,iBAAiB,KAAA,KAAa,YAAY,KAAA,GAC5C;EAEF,IAAI,KAAK;GAAE,aAAa,UAAU;GAAI;GAAc;GAAS,MAAM,UAAU;EAAK,CAAC;CACrF;CACA,OAAO;AACT;;;;;;;;AASA,MAAM,cAAc;AAEpB,eAAsB,8BACpB,QAC8C;CAC9C,MAAM,aAAa,MAAM,OAAO,eAAe,EAAE,KAAK,KAAK,CAAC;CAC5D,MAAM,MAAkC,CAAC;CACzC,KAAK,MAAM,aAAa,YAAY;EAClC,IAAI,UAAU,SAAA,6BAAA,QAEZ;EAEF,IAAI,CAAC,UAAU,MAAM,SAAS,oBAAoB,GAChD;EAEF,MAAM,QAAQ,YAAY,KAAK,UAAU,IAAI;EAC7C,IAAI,UAAU,MACZ;EAEF,IAAI,KAAK;GACP,aAAa,UAAU;GACvB,MAAM,UAAU;GAChB,OAAO,UAAU;GACjB,cAAc,MAAM;EACtB,CAAC;CACH;CACA,OAAO;AACT"}

package/lib/docker-tar-_wf8UrSj.js

@@ -0,0 +1,66 @@
+import { readFile, readdir, stat } from "node:fs/promises";
+import { join, posix, relative } from "node:path";
+//#region src/tools/docker-tar.ts
+function octal(value, size) {
+	return value.toString(8).padStart(size - 1, "0") + "\0";
+}
+function checksum(header) {
+	let sum = 0;
+	for (const byte of header) sum += byte;
+	return sum;
+}
+function fileHeader(name, size, mode = 420) {
+	const header = Buffer.alloc(512, 0);
+	header.write(name, 0, 100, "utf8");
+	header.write(octal(mode, 8), 100, 8, "utf8");
+	header.write(octal(0, 8), 108, 8, "utf8");
+	header.write(octal(0, 8), 116, 8, "utf8");
+	header.write(octal(size, 12), 124, 12, "utf8");
+	header.write(octal(Math.floor(Date.now() / 1e3), 12), 136, 12, "utf8");
+	header.write("        ", 148, 8, "utf8");
+	header.write("0", 156, 1, "utf8");
+	header.write("ustar\0", 257, 6, "utf8");
+	header.write("00", 263, 2, "utf8");
+	const sum = checksum(header);
+	header.write(`${sum.toString(8).padStart(6, "0")}\0 `, 148, 8, "utf8");
+	return header;
+}
+function align512(size) {
+	return Math.ceil(size / 512) * 512;
+}
+async function packDockerContext(contextDir, dockerfileName) {
+	const files = [];
+	async function walk(dir) {
+		const entries = await readdir(dir, { withFileTypes: true });
+		for (const entry of entries) {
+			const full = join(dir, entry.name);
+			if (entry.isDirectory()) {
+				await walk(full);
+				continue;
+			}
+			if (!entry.isFile()) continue;
+			const info = await stat(full);
+			const name = posix.normalize(relative(contextDir, full).split("\\").join("/"));
+			files.push({
+				name,
+				data: await readFile(full),
+				mode: info.mode & 511
+			});
+		}
+	}
+	await walk(contextDir);
+	if (!files.some((file) => file.name === dockerfileName || file.name.endsWith(`/${dockerfileName}`))) throw new Error(`dockerfile ${dockerfileName} missing in ${contextDir}`);
+	const chunks = [];
+	for (const file of files) {
+		const header = fileHeader(file.name, file.data.length, file.mode);
+		const padded = Buffer.alloc(align512(file.data.length));
+		file.data.copy(padded);
+		chunks.push(header, padded);
+	}
+	chunks.push(Buffer.alloc(1024, 0));
+	return Buffer.concat(chunks);
+}
+//#endregion
+export { packDockerContext };
+
+//# sourceMappingURL=docker-tar-_wf8UrSj.js.map

package/lib/docker-tar-_wf8UrSj.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"docker-tar-_wf8UrSj.js","names":[],"sources":["../src/tools/docker-tar.ts"],"sourcesContent":["import { readFile, readdir, stat } from 'node:fs/promises'\nimport { join, relative, posix } from 'node:path'\n\nfunction pad(value: string, size: number): Buffer {\n  const buf = Buffer.alloc(size, 0)\n  buf.write(value, 0, 'utf8')\n  return buf\n}\n\nfunction octal(value: number, size: number): string {\n  const body = value.toString(8)\n  return body.padStart(size - 1, '0') + '\\0'\n}\n\nfunction checksum(header: Buffer): number {\n  let sum = 0\n  for (const byte of header) {\n    sum += byte\n  }\n  return sum\n}\n\nfunction fileHeader(name: string, size: number, mode = 0o644): Buffer {\n  const header = Buffer.alloc(512, 0)\n  header.write(name, 0, 100, 'utf8')\n  header.write(octal(mode, 8), 100, 8, 'utf8')\n  header.write(octal(0, 8), 108, 8, 'utf8')\n  header.write(octal(0, 8), 116, 8, 'utf8')\n  header.write(octal(size, 12), 124, 12, 'utf8')\n  header.write(octal(Math.floor(Date.now() / 1000), 12), 136, 12, 'utf8')\n  header.write('        ', 148, 8, 'utf8')\n  header.write('0', 156, 1, 'utf8')\n  header.write('ustar\\0', 257, 6, 'utf8')\n  header.write('00', 263, 2, 'utf8')\n  const sum = checksum(header)\n  header.write(`${sum.toString(8).padStart(6, '0')}\\0 `, 148, 8, 'utf8')\n  return header\n}\n\nfunction align512(size: number): number {\n  return Math.ceil(size / 512) * 512\n}\n\nexport async function packDockerContext(contextDir: string, dockerfileName: string): Promise<Buffer> {\n  const files: Array<{ name: string; data: Buffer; mode: number }> = []\n  async function walk(dir: string): Promise<void> {\n    const entries = await readdir(dir, { withFileTypes: true })\n    for (const entry of entries) {\n      const full = join(dir, entry.name)\n      if (entry.isDirectory()) {\n        await walk(full)\n        continue\n      }\n      if (!entry.isFile()) {\n        continue\n      }\n      const info = await stat(full)\n      const name = posix.normalize(relative(contextDir, full).split('\\\\').join('/'))\n      files.push({ name, data: await readFile(full), mode: info.mode & 0o777 })\n    }\n  }\n  await walk(contextDir)\n  if (!files.some((file) => file.name === dockerfileName || file.name.endsWith(`/${dockerfileName}`))) {\n    throw new Error(`dockerfile ${dockerfileName} missing in ${contextDir}`)\n  }\n  const chunks: Buffer[] = []\n  for (const file of files) {\n    const header = fileHeader(file.name, file.data.length, file.mode)\n    const padded = Buffer.alloc(align512(file.data.length))\n    file.data.copy(padded)\n    chunks.push(header, padded)\n  }\n  chunks.push(Buffer.alloc(1024, 0))\n  return Buffer.concat(chunks)\n}\n"],"mappings":";;;AASA,SAAS,MAAM,OAAe,MAAsB;CAElD,OADa,MAAM,SAAS,CAClB,CAAC,CAAC,SAAS,OAAO,GAAG,GAAG,IAAI;AACxC;AAEA,SAAS,SAAS,QAAwB;CACxC,IAAI,MAAM;CACV,KAAK,MAAM,QAAQ,QACjB,OAAO;CAET,OAAO;AACT;AAEA,SAAS,WAAW,MAAc,MAAc,OAAO,KAAe;CACpE,MAAM,SAAS,OAAO,MAAM,KAAK,CAAC;CAClC,OAAO,MAAM,MAAM,GAAG,KAAK,MAAM;CACjC,OAAO,MAAM,MAAM,MAAM,CAAC,GAAG,KAAK,GAAG,MAAM;CAC3C,OAAO,MAAM,MAAM,GAAG,CAAC,GAAG,KAAK,GAAG,MAAM;CACxC,OAAO,MAAM,MAAM,GAAG,CAAC,GAAG,KAAK,GAAG,MAAM;CACxC,OAAO,MAAM,MAAM,MAAM,EAAE,GAAG,KAAK,IAAI,MAAM;CAC7C,OAAO,MAAM,MAAM,KAAK,MAAM,KAAK,IAAI,IAAI,GAAI,GAAG,EAAE,GAAG,KAAK,IAAI,MAAM;CACtE,OAAO,MAAM,YAAY,KAAK,GAAG,MAAM;CACvC,OAAO,MAAM,KAAK,KAAK,GAAG,MAAM;CAChC,OAAO,MAAM,WAAW,KAAK,GAAG,MAAM;CACtC,OAAO,MAAM,MAAM,KAAK,GAAG,MAAM;CACjC,MAAM,MAAM,SAAS,MAAM;CAC3B,OAAO,MAAM,GAAG,IAAI,SAAS,CAAC,CAAC,CAAC,SAAS,GAAG,GAAG,EAAE,MAAM,KAAK,GAAG,MAAM;CACrE,OAAO;AACT;AAEA,SAAS,SAAS,MAAsB;CACtC,OAAO,KAAK,KAAK,OAAO,GAAG,IAAI;AACjC;AAEA,eAAsB,kBAAkB,YAAoB,gBAAyC;CACnG,MAAM,QAA6D,CAAC;CACpE,eAAe,KAAK,KAA4B;EAC9C,MAAM,UAAU,MAAM,QAAQ,KAAK,EAAE,eAAe,KAAK,CAAC;EAC1D,KAAK,MAAM,SAAS,SAAS;GAC3B,MAAM,OAAO,KAAK,KAAK,MAAM,IAAI;GACjC,IAAI,MAAM,YAAY,GAAG;IACvB,MAAM,KAAK,IAAI;IACf;GACF;GACA,IAAI,CAAC,MAAM,OAAO,GAChB;GAEF,MAAM,OAAO,MAAM,KAAK,IAAI;GAC5B,MAAM,OAAO,MAAM,UAAU,SAAS,YAAY,IAAI,CAAC,CAAC,MAAM,IAAI,CAAC,CAAC,KAAK,GAAG,CAAC;GAC7E,MAAM,KAAK;IAAE;IAAM,MAAM,MAAM,SAAS,IAAI;IAAG,MAAM,KAAK,OAAO;GAAM,CAAC;EAC1E;CACF;CACA,MAAM,KAAK,UAAU;CACrB,IAAI,CAAC,MAAM,MAAM,SAAS,KAAK,SAAS,kBAAkB,KAAK,KAAK,SAAS,IAAI,gBAAgB,CAAC,GAChG,MAAM,IAAI,MAAM,cAAc,eAAe,cAAc,YAAY;CAEzE,MAAM,SAAmB,CAAC;CAC1B,KAAK,MAAM,QAAQ,OAAO;EACxB,MAAM,SAAS,WAAW,KAAK,MAAM,KAAK,KAAK,QAAQ,KAAK,IAAI;EAChE,MAAM,SAAS,OAAO,MAAM,SAAS,KAAK,KAAK,MAAM,CAAC;EACtD,KAAK,KAAK,KAAK,MAAM;EACrB,OAAO,KAAK,QAAQ,MAAM;CAC5B;CACA,OAAO,KAAK,OAAO,MAAM,MAAM,CAAC,CAAC;CACjC,OAAO,OAAO,OAAO,MAAM;AAC7B"}