dsh-pentester 0.1.0-alpha.2 → 2.0.0

package/lib/container-listing-BI6Xj8l2.js

@@ -0,0 +1,56 @@
+import { a as PENTESTER_RUNTIME_PROFILE_LABEL, n as PENTESTER_ENGAGEMENT_LABEL } from "./engagement-container-store-Cf-h0B4F.js";
+//#region src/tools/container-listing.ts
+/**
+* Container listing helpers used by the P0-B GC. The engine's
+* `listContainers` returns id + labels + name + image; filtering by the
+* dsh.pentester.* labels is done here so the GC never parses container names
+* for ownership (labels are the single source of truth).
+*/
+async function listContainersByLabel(engine, label, value) {
+	const containers = await engine.listContainers({
+		label: `${label}=${value}`,
+		all: true
+	});
+	const out = [];
+	for (const container of containers) {
+		const engagementId = container.labels?.[PENTESTER_ENGAGEMENT_LABEL];
+		const profile = container.labels?.[PENTESTER_RUNTIME_PROFILE_LABEL];
+		if (engagementId === void 0 || profile === void 0) continue;
+		out.push({
+			containerId: container.id,
+			engagementId,
+			profile,
+			name: container.name
+		});
+	}
+	return out;
+}
+/**
+* Legacy candidates from the OLD 1-AgentRun=1-container scheme:
+*   - image == dsh-pentester/kali:latest
+*   - name matches `dsh-<engagement>--<run>--<toolbox>` (no managed label)
+* Ownership is confirmed only by the caller (engagement dir exists); anything
+* ambiguous is reported, never deleted.
+*/
+const LEGACY_NAME = /^dsh-([a-zA-Z0-9_.-]{8,40})--[a-zA-Z0-9_.-]{8,40}--[a-zA-Z0-9_.-]{1,24}$/;
+async function listLegacyPentesterContainers(engine) {
+	const containers = await engine.listContainers({ all: true });
+	const out = [];
+	for (const container of containers) {
+		if (container.labels?.["dsh.pentester.managed"] === "true") continue;
+		if (!container.image.includes("dsh-pentester/kali")) continue;
+		const match = LEGACY_NAME.exec(container.name);
+		if (match === null) continue;
+		out.push({
+			containerId: container.id,
+			name: container.name,
+			image: container.image,
+			engagementId: match[1]
+		});
+	}
+	return out;
+}
+//#endregion
+export { listContainersByLabel, listLegacyPentesterContainers };
+
+//# sourceMappingURL=container-listing-BI6Xj8l2.js.map

package/lib/container-listing-BI6Xj8l2.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"container-listing-BI6Xj8l2.js","names":[],"sources":["../src/tools/container-listing.ts"],"sourcesContent":["import type { DockerEngineClient } from './docker-engine.js'\nimport {\n  PENTESTER_ENGAGEMENT_LABEL,\n  PENTESTER_MANAGED_LABEL,\n  PENTESTER_MANAGED_TRUE,\n  PENTESTER_RUNTIME_PROFILE_LABEL,\n} from './engagement-container-store.js'\nimport type { LegacyContainerCandidate, ManagedContainerEntry } from './container-gc.js'\n\n/**\n * Container listing helpers used by the P0-B GC. The engine's\n * `listContainers` returns id + labels + name + image; filtering by the\n * dsh.pentester.* labels is done here so the GC never parses container names\n * for ownership (labels are the single source of truth).\n */\n\nexport async function listContainersByLabel(\n  engine: DockerEngineClient,\n  label: string,\n  value: string,\n): Promise<readonly ManagedContainerEntry[]> {\n  const containers = await engine.listContainers({ label: `${label}=${value}`, all: true })\n  const out: ManagedContainerEntry[] = []\n  for (const container of containers) {\n    const engagementId = container.labels?.[PENTESTER_ENGAGEMENT_LABEL]\n    const profile = container.labels?.[PENTESTER_RUNTIME_PROFILE_LABEL]\n    if (engagementId === undefined || profile === undefined) {\n      continue\n    }\n    out.push({ containerId: container.id, engagementId, profile, name: container.name })\n  }\n  return out\n}\n\n/**\n * Legacy candidates from the OLD 1-AgentRun=1-container scheme:\n *   - image == dsh-pentester/kali:latest\n *   - name matches `dsh-<engagement>--<run>--<toolbox>` (no managed label)\n * Ownership is confirmed only by the caller (engagement dir exists); anything\n * ambiguous is reported, never deleted.\n */\nconst LEGACY_NAME = /^dsh-([a-zA-Z0-9_.-]{8,40})--[a-zA-Z0-9_.-]{8,40}--[a-zA-Z0-9_.-]{1,24}$/\n\nexport async function listLegacyPentesterContainers(\n  engine: DockerEngineClient,\n): Promise<readonly LegacyContainerCandidate[]> {\n  const containers = await engine.listContainers({ all: true })\n  const out: LegacyContainerCandidate[] = []\n  for (const container of containers) {\n    if (container.labels?.[PENTESTER_MANAGED_LABEL] === PENTESTER_MANAGED_TRUE) {\n      // Managed containers are handled by the new-scheme scan, never legacy.\n      continue\n    }\n    if (!container.image.includes('dsh-pentester/kali')) {\n      continue\n    }\n    const match = LEGACY_NAME.exec(container.name)\n    if (match === null) {\n      continue\n    }\n    out.push({\n      containerId: container.id,\n      name: container.name,\n      image: container.image,\n      engagementId: match[1],\n    })\n  }\n  return out\n}\n"],"mappings":";;;;;;;;AAgBA,eAAsB,sBACpB,QACA,OACA,OAC2C;CAC3C,MAAM,aAAa,MAAM,OAAO,eAAe;EAAE,OAAO,GAAG,MAAM,GAAG;EAAS,KAAK;CAAK,CAAC;CACxF,MAAM,MAA+B,CAAC;CACtC,KAAK,MAAM,aAAa,YAAY;EAClC,MAAM,eAAe,UAAU,SAAS;EACxC,MAAM,UAAU,UAAU,SAAS;EACnC,IAAI,iBAAiB,KAAA,KAAa,YAAY,KAAA,GAC5C;EAEF,IAAI,KAAK;GAAE,aAAa,UAAU;GAAI;GAAc;GAAS,MAAM,UAAU;EAAK,CAAC;CACrF;CACA,OAAO;AACT;;;;;;;;AASA,MAAM,cAAc;AAEpB,eAAsB,8BACpB,QAC8C;CAC9C,MAAM,aAAa,MAAM,OAAO,eAAe,EAAE,KAAK,KAAK,CAAC;CAC5D,MAAM,MAAkC,CAAC;CACzC,KAAK,MAAM,aAAa,YAAY;EAClC,IAAI,UAAU,SAAA,6BAAA,QAEZ;EAEF,IAAI,CAAC,UAAU,MAAM,SAAS,oBAAoB,GAChD;EAEF,MAAM,QAAQ,YAAY,KAAK,UAAU,IAAI;EAC7C,IAAI,UAAU,MACZ;EAEF,IAAI,KAAK;GACP,aAAa,UAAU;GACvB,MAAM,UAAU;GAChB,OAAO,UAAU;GACjB,cAAc,MAAM;EACtB,CAAC;CACH;CACA,OAAO;AACT"}

package/lib/container-listing-BWZoBnN_.js

@@ -0,0 +1,56 @@
+import { a as PENTESTER_RUNTIME_PROFILE_LABEL, n as PENTESTER_ENGAGEMENT_LABEL } from "./engagement-container-store-L_Gms-zi.js";
+//#region src/tools/container-listing.ts
+/**
+* Container listing helpers used by the P0-B GC. The engine's
+* `listContainers` returns id + labels + name + image; filtering by the
+* dsh.pentester.* labels is done here so the GC never parses container names
+* for ownership (labels are the single source of truth).
+*/
+async function listContainersByLabel(engine, label, value) {
+	const containers = await engine.listContainers({
+		label: `${label}=${value}`,
+		all: true
+	});
+	const out = [];
+	for (const container of containers) {
+		const engagementId = container.labels?.[PENTESTER_ENGAGEMENT_LABEL];
+		const profile = container.labels?.[PENTESTER_RUNTIME_PROFILE_LABEL];
+		if (engagementId === void 0 || profile === void 0) continue;
+		out.push({
+			containerId: container.id,
+			engagementId,
+			profile,
+			name: container.name
+		});
+	}
+	return out;
+}
+/**
+* Legacy candidates from the OLD 1-AgentRun=1-container scheme:
+*   - image == dsh-pentester/kali:latest
+*   - name matches `dsh-<engagement>--<run>--<toolbox>` (no managed label)
+* Ownership is confirmed only by the caller (engagement dir exists); anything
+* ambiguous is reported, never deleted.
+*/
+const LEGACY_NAME = /^dsh-([a-zA-Z0-9_.-]{8,40})--[a-zA-Z0-9_.-]{8,40}--[a-zA-Z0-9_.-]{1,24}$/;
+async function listLegacyPentesterContainers(engine) {
+	const containers = await engine.listContainers({ all: true });
+	const out = [];
+	for (const container of containers) {
+		if (container.labels?.["dsh.pentester.managed"] === "true") continue;
+		if (!container.image.includes("dsh-pentester/kali")) continue;
+		const match = LEGACY_NAME.exec(container.name);
+		if (match === null) continue;
+		out.push({
+			containerId: container.id,
+			name: container.name,
+			image: container.image,
+			engagementId: match[1]
+		});
+	}
+	return out;
+}
+//#endregion
+export { listContainersByLabel, listLegacyPentesterContainers };
+
+//# sourceMappingURL=container-listing-BWZoBnN_.js.map

package/lib/container-listing-BWZoBnN_.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"container-listing-BWZoBnN_.js","names":[],"sources":["../src/tools/container-listing.ts"],"sourcesContent":["import type { DockerEngineClient } from './docker-engine.js'\nimport {\n  PENTESTER_ENGAGEMENT_LABEL,\n  PENTESTER_MANAGED_LABEL,\n  PENTESTER_MANAGED_TRUE,\n  PENTESTER_RUNTIME_PROFILE_LABEL,\n} from './engagement-container-store.js'\nimport type { LegacyContainerCandidate, ManagedContainerEntry } from './container-gc.js'\n\n/**\n * Container listing helpers used by the P0-B GC. The engine's\n * `listContainers` returns id + labels + name + image; filtering by the\n * dsh.pentester.* labels is done here so the GC never parses container names\n * for ownership (labels are the single source of truth).\n */\n\nexport async function listContainersByLabel(\n  engine: DockerEngineClient,\n  label: string,\n  value: string,\n): Promise<readonly ManagedContainerEntry[]> {\n  const containers = await engine.listContainers({ label: `${label}=${value}`, all: true })\n  const out: ManagedContainerEntry[] = []\n  for (const container of containers) {\n    const engagementId = container.labels?.[PENTESTER_ENGAGEMENT_LABEL]\n    const profile = container.labels?.[PENTESTER_RUNTIME_PROFILE_LABEL]\n    if (engagementId === undefined || profile === undefined) {\n      continue\n    }\n    out.push({ containerId: container.id, engagementId, profile, name: container.name })\n  }\n  return out\n}\n\n/**\n * Legacy candidates from the OLD 1-AgentRun=1-container scheme:\n *   - image == dsh-pentester/kali:latest\n *   - name matches `dsh-<engagement>--<run>--<toolbox>` (no managed label)\n * Ownership is confirmed only by the caller (engagement dir exists); anything\n * ambiguous is reported, never deleted.\n */\nconst LEGACY_NAME = /^dsh-([a-zA-Z0-9_.-]{8,40})--[a-zA-Z0-9_.-]{8,40}--[a-zA-Z0-9_.-]{1,24}$/\n\nexport async function listLegacyPentesterContainers(\n  engine: DockerEngineClient,\n): Promise<readonly LegacyContainerCandidate[]> {\n  const containers = await engine.listContainers({ all: true })\n  const out: LegacyContainerCandidate[] = []\n  for (const container of containers) {\n    if (container.labels?.[PENTESTER_MANAGED_LABEL] === PENTESTER_MANAGED_TRUE) {\n      // Managed containers are handled by the new-scheme scan, never legacy.\n      continue\n    }\n    if (!container.image.includes('dsh-pentester/kali')) {\n      continue\n    }\n    const match = LEGACY_NAME.exec(container.name)\n    if (match === null) {\n      continue\n    }\n    out.push({\n      containerId: container.id,\n      name: container.name,\n      image: container.image,\n      engagementId: match[1],\n    })\n  }\n  return out\n}\n"],"mappings":";;;;;;;;AAgBA,eAAsB,sBACpB,QACA,OACA,OAC2C;CAC3C,MAAM,aAAa,MAAM,OAAO,eAAe;EAAE,OAAO,GAAG,MAAM,GAAG;EAAS,KAAK;CAAK,CAAC;CACxF,MAAM,MAA+B,CAAC;CACtC,KAAK,MAAM,aAAa,YAAY;EAClC,MAAM,eAAe,UAAU,SAAS;EACxC,MAAM,UAAU,UAAU,SAAS;EACnC,IAAI,iBAAiB,KAAA,KAAa,YAAY,KAAA,GAC5C;EAEF,IAAI,KAAK;GAAE,aAAa,UAAU;GAAI;GAAc;GAAS,MAAM,UAAU;EAAK,CAAC;CACrF;CACA,OAAO;AACT;;;;;;;;AASA,MAAM,cAAc;AAEpB,eAAsB,8BACpB,QAC8C;CAC9C,MAAM,aAAa,MAAM,OAAO,eAAe,EAAE,KAAK,KAAK,CAAC;CAC5D,MAAM,MAAkC,CAAC;CACzC,KAAK,MAAM,aAAa,YAAY;EAClC,IAAI,UAAU,SAAA,6BAAA,QAEZ;EAEF,IAAI,CAAC,UAAU,MAAM,SAAS,oBAAoB,GAChD;EAEF,MAAM,QAAQ,YAAY,KAAK,UAAU,IAAI;EAC7C,IAAI,UAAU,MACZ;EAEF,IAAI,KAAK;GACP,aAAa,UAAU;GACvB,MAAM,UAAU;GAChB,OAAO,UAAU;GACjB,cAAc,MAAM;EACtB,CAAC;CACH;CACA,OAAO;AACT"}