isol8 0.10.0 → 0.10.2-alpha.0

package/dist/cli.js

@@ -6318,7 +6318,7 @@ var require_bcrypt_pbkdf = __commonJS((exports, module) => {
 
 // node_modules/cpu-features/build/Release/cpufeatures.node
 var require_cpufeatures = __commonJS((exports, module) => {
-  module.exports = __require("./cpufeatures-tjjrgpt7.node");
+  module.exports = __require("./cpufeatures-8g73ch7n.node");
 });
 
 // node_modules/cpu-features/lib/index.js
@@ -6931,12 +6931,12 @@ var require_utils2 = __commonJS((exports, module) => {
 
 // node_modules/ssh2/lib/protocol/crypto/build/Release/sshcrypto.node
 var require_sshcrypto = __commonJS((exports, module) => {
-  module.exports = __require("./sshcrypto-0209sx47.node");
+  module.exports = __require("./sshcrypto-f6atjna1.node");
 });
 
 // node_modules/ssh2/lib/protocol/crypto/poly1305.js
 var require_poly1305 = __commonJS((exports, module) => {
-  var __dirname = "/home/runner/work/isol8/isol8/node_modules/ssh2/lib/protocol/crypto", __filename = "/home/runner/work/isol8/isol8/node_modules/ssh2/lib/protocol/crypto/poly1305.js";
+  var __dirname = "/Users/dhruv/Developer/Projects/isol8/node_modules/ssh2/lib/protocol/crypto", __filename = "/Users/dhruv/Developer/Projects/isol8/node_modules/ssh2/lib/protocol/crypto/poly1305.js";
   var createPoly1305 = function() {
     var _scriptDir = typeof document !== "undefined" && document.currentScript ? document.currentScript.src : undefined;
     if (typeof __filename !== "undefined")
@@ -8681,7 +8681,7 @@ ${formatted}-----END ${type} KEY-----`;
       }
       return Buffer.from(hex, "hex");
     }
-    return function genOpenSSLRSAPriv2(n, e, d, iqmp, p, q) {
+    return function genOpenSSLRSAPriv(n, e, d, iqmp, p, q) {
       const bn_d = bigIntFromBuffer(d);
       const dmp1 = bigIntToBuffer(bn_d % (bigIntFromBuffer(p) - 1n));
       const dmq1 = bigIntToBuffer(bn_d % (bigIntFromBuffer(q) - 1n));
@@ -9709,7 +9709,7 @@ ${formatted}-----END ${type} KEY-----`;
 
 // node_modules/ssh2/lib/agent.js
 var require_agent = __commonJS((exports, module) => {
-  var __dirname = "/home/runner/work/isol8/isol8/node_modules/ssh2/lib";
+  var __dirname = "/Users/dhruv/Developer/Projects/isol8/node_modules/ssh2/lib";
   var { Socket } = __require("net");
   var { Duplex } = __require("stream");
   var { resolve } = __require("path");
@@ -21682,7 +21682,7 @@ var require__stream_writable = __commonJS((exports, module) => {
       }
     });
   } else {
-    realHasInstance = function realHasInstance2(object) {
+    realHasInstance = function realHasInstance(object) {
       return object instanceof this;
     };
   }
@@ -22480,28 +22480,28 @@ var require_end_of_stream = __commonJS((exports, module) => {
     callback = once(callback || noop);
     var readable = opts.readable || opts.readable !== false && stream.readable;
     var writable = opts.writable || opts.writable !== false && stream.writable;
-    var onlegacyfinish = function onlegacyfinish2() {
+    var onlegacyfinish = function onlegacyfinish() {
       if (!stream.writable)
         onfinish();
     };
     var writableEnded = stream._writableState && stream._writableState.finished;
-    var onfinish = function onfinish2() {
+    var onfinish = function onfinish() {
       writable = false;
       writableEnded = true;
       if (!readable)
         callback.call(stream);
     };
     var readableEnded = stream._readableState && stream._readableState.endEmitted;
-    var onend = function onend2() {
+    var onend = function onend() {
       readable = false;
       readableEnded = true;
       if (!writable)
         callback.call(stream);
     };
-    var onerror = function onerror2(err) {
+    var onerror = function onerror(err) {
       callback.call(stream, err);
     };
-    var onclose = function onclose2() {
+    var onclose = function onclose() {
       var err;
       if (readable && !readableEnded) {
         if (!stream._readableState || !stream._readableState.ended)
@@ -22514,7 +22514,7 @@ var require_end_of_stream = __commonJS((exports, module) => {
         return callback.call(stream, err);
       }
     };
-    var onrequest = function onrequest2() {
+    var onrequest = function onrequest() {
       stream.req.on("finish", onfinish);
     };
     if (isRequest(stream)) {
@@ -22671,7 +22671,7 @@ var require_async_iterator = __commonJS((exports, module) => {
       });
     });
   }), _Object$setPrototypeO), AsyncIteratorPrototype);
-  var createReadableStreamAsyncIterator = function createReadableStreamAsyncIterator2(stream) {
+  var createReadableStreamAsyncIterator = function createReadableStreamAsyncIterator(stream) {
     var _Object$create;
     var iterator = Object.create(ReadableStreamAsyncIteratorPrototype, (_Object$create = {}, _defineProperty(_Object$create, kStream, {
       value: stream,
@@ -22860,7 +22860,7 @@ var require__stream_readable = __commonJS((exports, module) => {
   var Duplex;
   Readable.ReadableState = ReadableState;
   var EE = __require("events").EventEmitter;
-  var EElistenerCount = function EElistenerCount2(emitter, type) {
+  var EElistenerCount = function EElistenerCount(emitter, type) {
     return emitter.listeners(type).length;
   };
   var Stream = __require("stream");
@@ -22877,7 +22877,7 @@ var require__stream_readable = __commonJS((exports, module) => {
   if (debugUtil && debugUtil.debuglog) {
     debug = debugUtil.debuglog("stream");
   } else {
-    debug = function debug2() {};
+    debug = function debug() {};
   }
   var BufferList = require_buffer_list();
   var destroyImpl = require_destroy();
@@ -25535,14 +25535,14 @@ var require_BufferList = __commonJS((exports, module) => {
     if (srcEnd <= 0) {
       return dst || Buffer2.alloc(0);
     }
-    const copy2 = !!dst;
+    const copy = !!dst;
     const off = this._offset(srcStart);
     const len = srcEnd - srcStart;
     let bytes = len;
-    let bufoff = copy2 && dstStart || 0;
+    let bufoff = copy && dstStart || 0;
     let start = off[1];
     if (srcStart === 0 && srcEnd === this.length) {
-      if (!copy2) {
+      if (!copy) {
         return this._bufs.length === 1 ? this._bufs[0] : Buffer2.concat(this._bufs, this.length);
       }
       for (let i = 0;i < this._bufs.length; i++) {
@@ -25552,9 +25552,9 @@ var require_BufferList = __commonJS((exports, module) => {
       return dst;
     }
     if (bytes <= this._bufs[off[0]].length - start) {
-      return copy2 ? this._bufs[off[0]].copy(dst, dstStart, start, start + bytes) : this._bufs[off[0]].slice(start, start + bytes);
+      return copy ? this._bufs[off[0]].copy(dst, dstStart, start, start + bytes) : this._bufs[off[0]].slice(start, start + bytes);
     }
-    if (!copy2) {
+    if (!copy) {
       dst = Buffer2.allocUnsafe(len);
     }
     for (let i = off[0];i < this._bufs.length; i++) {
@@ -25776,7 +25776,7 @@ var require_bl = __commonJS((exports, module) => {
     }
     if (typeof callback === "function") {
       this._callback = callback;
-      const piper = function piper2(err) {
+      const piper = function piper(err) {
         if (this._callback) {
           this._callback(err);
           this._callback = null;
@@ -34839,7 +34839,7 @@ var require_writer2 = __commonJS((exports, module) => {
     this.tail = this.head;
     this.states = null;
   }
-  var create = function create2() {
+  var create = function create() {
     return util.Buffer ? function create_buffer_setup() {
       return (Writer.create = function create_buffer() {
         return new BufferWriter;
@@ -35063,12 +35063,12 @@ var require_reader2 = __commonJS((exports, module) => {
     if (buffer instanceof Uint8Array || Array.isArray(buffer))
       return new Reader(buffer);
     throw Error("illegal buffer");
-  } : function create_array2(buffer) {
+  } : function create_array(buffer) {
     if (Array.isArray(buffer))
       return new Reader(buffer);
     throw Error("illegal buffer");
   };
-  var create = function create2() {
+  var create = function create() {
     return util.Buffer ? function create_buffer_setup(buffer) {
       return (Reader.create = function create_buffer(buffer2) {
         return util.Buffer.isBuffer(buffer2) ? new BufferReader(buffer2) : create_array(buffer2);
@@ -35494,10 +35494,10 @@ var require_fetch = __commonJS((exports, module) => {
 // node_modules/@protobufjs/path/index.js
 var require_path = __commonJS((exports) => {
   var path = exports;
-  var isAbsolute = path.isAbsolute = function isAbsolute2(path2) {
+  var isAbsolute = path.isAbsolute = function isAbsolute(path2) {
     return /^(?:\/|\w+:)/.test(path2);
   };
-  var normalize = path.normalize = function normalize2(path2) {
+  var normalize = path.normalize = function normalize(path2) {
     path2 = path2.replace(/\\/g, "/").replace(/\/{2,}/g, "/");
     var parts = path2.split("/"), absolute = isAbsolute(path2), prefix = "";
     if (absolute)
@@ -35662,7 +35662,7 @@ var require_namespace = __commonJS((exports, module) => {
     object.onRemove(this);
     return clearCache(this);
   };
-  Namespace.prototype.define = function define2(path, json) {
+  Namespace.prototype.define = function define(path, json) {
     if (util.isString(path))
       path = path.split(".");
     else if (!Array.isArray(path))
@@ -42478,7 +42478,7 @@ var require_src3 = __commonJS((exports) => {
 
 // node_modules/@grpc/grpc-js/build/src/channelz.js
 var require_channelz = __commonJS((exports) => {
-  var __dirname = "/home/runner/work/isol8/isol8/node_modules/@grpc/grpc-js/build/src";
+  var __dirname = "/Users/dhruv/Developer/Projects/isol8/node_modules/@grpc/grpc-js/build/src";
   Object.defineProperty(exports, "__esModule", { value: true });
   exports.registerChannelzSocket = exports.registerChannelzServer = exports.registerChannelzSubchannel = exports.registerChannelzChannel = exports.ChannelzCallTrackerStub = exports.ChannelzCallTracker = exports.ChannelzChildrenTrackerStub = exports.ChannelzChildrenTracker = exports.ChannelzTrace = exports.ChannelzTraceStub = undefined;
   exports.unregisterChannelzRef = unregisterChannelzRef;
@@ -47881,7 +47881,7 @@ var require_duration = __commonJS((exports) => {
 
 // node_modules/@grpc/grpc-js/build/src/orca.js
 var require_orca = __commonJS((exports) => {
-  var __dirname = "/home/runner/work/isol8/isol8/node_modules/@grpc/grpc-js/build/src";
+  var __dirname = "/Users/dhruv/Developer/Projects/isol8/node_modules/@grpc/grpc-js/build/src";
   Object.defineProperty(exports, "__esModule", { value: true });
   exports.OrcaOobMetricsSubchannelWrapper = exports.GRPC_METRICS_HEADER = exports.ServerMetricRecorder = exports.PerRequestMetricRecorder = undefined;
   exports.createOrcaClient = createOrcaClient;
@@ -53270,7 +53270,7 @@ var require_dist = __commonJS((exports) => {
 
 // node_modules/dockerode/lib/session.js
 var require_session = __commonJS((exports, module) => {
-  var __dirname = "/home/runner/work/isol8/isol8/node_modules/dockerode/lib";
+  var __dirname = "/Users/dhruv/Developer/Projects/isol8/node_modules/dockerode/lib";
   var grpc = require_src4();
   var protoLoader = require_src5();
   var path = __require("path");
@@ -54496,7 +54496,7 @@ var require_docker = __commonJS((exports, module) => {
         stream: true,
         stdout: true,
         stderr: true
-      }, function handler2(err2, stream) {
+      }, function handler(err2, stream) {
         if (err2)
           return callback(err2, null, container);
         hub.emit("stream", stream);
@@ -55213,47 +55213,129 @@ class Semaphore {
 // src/engine/pool.ts
 class ContainerPool {
   docker;
-  poolSize;
+  poolStrategy;
+  cleanPoolSize;
+  dirtyPoolSize;
   createOptions;
+  networkMode;
+  securityMode;
   pools = new Map;
   replenishing = new Set;
   pendingReplenishments = new Set;
+  cleaningInterval = null;
   constructor(options) {
     this.docker = options.docker;
-    this.poolSize = options.poolSize ?? 2;
+    this.poolStrategy = options.poolStrategy ?? "fast";
     this.createOptions = options.createOptions;
+    this.networkMode = options.networkMode;
+    this.securityMode = options.securityMode;
+    if (typeof options.poolSize === "number") {
+      this.cleanPoolSize = options.poolSize;
+      this.dirtyPoolSize = options.poolSize;
+    } else if (options.poolSize) {
+      this.cleanPoolSize = options.poolSize.clean ?? 1;
+      this.dirtyPoolSize = options.poolSize.dirty ?? 1;
+    } else {
+      this.cleanPoolSize = 1;
+      this.dirtyPoolSize = 1;
+    }
+    if (this.poolStrategy === "fast") {
+      this.startBackgroundCleaning();
+    }
   }
   async acquire(image) {
-    const pool = this.pools.get(image);
-    if (pool && pool.length > 0) {
-      const entry = pool.shift();
+    const pool = this.pools.get(image) ?? { clean: [], dirty: [] };
+    if (this.poolStrategy === "fast") {
+      if (pool.clean.length > 0) {
+        const entry = pool.clean.shift();
+        this.pools.set(image, pool);
+        this.replenish(image);
+        return entry.container;
+      }
+      if (pool.dirty.length > 0 && pool.clean.length < this.cleanPoolSize) {
+        await this.cleanDirtyImmediate(image);
+        const updatedPool = this.pools.get(image);
+        if (updatedPool && updatedPool.clean.length > 0) {
+          const entry = updatedPool.clean.shift();
+          this.pools.set(image, updatedPool);
+          this.replenish(image);
+          return entry.container;
+        }
+      }
+      return this.createContainer(image);
+    }
+    if (pool.clean && pool.clean.length > 0) {
+      const entry = pool.clean.shift();
+      this.pools.set(image, { clean: pool.clean, dirty: [] });
+      await this.cleanupContainer(entry.container);
       this.replenish(image);
       return entry.container;
     }
     return this.createContainer(image);
   }
   async release(container, image) {
-    const pool = this.pools.get(image) ?? [];
-    if (pool.length >= this.poolSize) {
-      await container.remove({ force: true }).catch(() => {});
+    let pool = this.pools.get(image);
+    if (!pool) {
+      pool = { clean: [], dirty: [] };
+      this.pools.set(image, pool);
+    }
+    if (this.poolStrategy === "fast") {
+      if (pool.dirty.length >= this.dirtyPoolSize) {
+        await container.remove({ force: true }).catch(() => {});
+        return;
+      }
+      pool.dirty.push({ container, createdAt: Date.now() });
+    } else {
+      if (pool.clean.length >= this.cleanPoolSize) {
+        await container.remove({ force: true }).catch(() => {});
+        return;
+      }
+      if (!pool.clean) {
+        pool.clean = [];
+      }
+      pool.clean.push({ container, createdAt: Date.now() });
+    }
+  }
+  startBackgroundCleaning() {
+    this.cleaningInterval = setInterval(async () => {
+      for (const [_image, pool] of this.pools) {
+        for (let i = 0;i < this.dirtyPoolSize; i++) {
+          if (pool.dirty.length > 0 && pool.clean.length < this.cleanPoolSize) {
+            const entry = pool.dirty.shift();
+            try {
+              await this.cleanupContainer(entry.container);
+              pool.clean.push(entry);
+            } catch {
+              entry.container.remove({ force: true }).catch(() => {});
+            }
+          }
+        }
+      }
+    }, 5000);
+  }
+  async cleanDirtyImmediate(image) {
+    const pool = this.pools.get(image);
+    if (!pool || pool.dirty.length === 0 || pool.clean.length >= this.cleanPoolSize) {
       return;
     }
+    const entry = pool.dirty.shift();
     try {
-      const killExec = await container.exec({
-        Cmd: [
-          "sh",
-          "-c",
-          "pkill -9 -u sandbox 2>/dev/null; /usr/sbin/iptables -F OUTPUT 2>/dev/null; true"
-        ]
-      });
-      await killExec.start({ Detach: true });
-      let killInfo = await killExec.inspect();
-      while (killInfo.Running) {
-        await new Promise((r) => setTimeout(r, 5));
-        killInfo = await killExec.inspect();
-      }
+      await this.cleanupContainer(entry.container);
+      pool.clean.push(entry);
+    } catch {
+      entry.container.remove({ force: true }).catch(() => {});
+    }
+  }
+  async cleanupContainer(container) {
+    const needsCleanup = this.securityMode === "strict";
+    const needsIptables = this.networkMode === "filtered" && needsCleanup;
+    if (!needsCleanup) {
+      return;
+    }
+    try {
+      const cleanupCmd = needsIptables ? "pkill -9 -u sandbox 2>/dev/null; /usr/sbin/iptables -F OUTPUT 2>/dev/null; rm -rf /sandbox/* /sandbox/.[!.]* 2>/dev/null; true" : "pkill -9 -u sandbox 2>/dev/null; rm -rf /sandbox/* /sandbox/.[!.]* 2>/dev/null; true";
       const cleanExec = await container.exec({
-        Cmd: ["sh", "-c", "rm -rf /sandbox/* /sandbox/.[!.]* 2>/dev/null; true"]
+        Cmd: ["sh", "-c", cleanupCmd]
       });
       await cleanExec.start({ Detach: true });
       let info2 = await cleanExec.inspect();
@@ -55261,29 +55343,45 @@ class ContainerPool {
         await new Promise((r) => setTimeout(r, 5));
         info2 = await cleanExec.inspect();
       }
-      pool.push({ container, createdAt: Date.now() });
-      this.pools.set(image, pool);
-    } catch {
-      await container.remove({ force: true }).catch(() => {});
-    }
+    } catch {}
   }
   async warm(image) {
-    const pool = this.pools.get(image) ?? [];
+    const pool = this.pools.get(image) ?? { clean: [], dirty: [] };
     this.pools.set(image, pool);
-    const needed = this.poolSize - pool.length;
+    const needed = this.poolStrategy === "fast" ? this.cleanPoolSize - pool.clean.length : this.cleanPoolSize - (pool.clean?.length ?? 0);
+    if (needed <= 0) {
+      return;
+    }
     const promises = [];
     for (let i = 0;i < needed; i++) {
       promises.push(this.createContainer(image).then((container) => {
-        pool.push({ container, createdAt: Date.now() });
+        if (this.poolStrategy === "fast") {
+          pool.clean.push({ container, createdAt: Date.now() });
+        } else {
+          if (!pool.clean) {
+            pool.clean = [];
+          }
+          pool.clean.push({ container, createdAt: Date.now() });
+        }
       }));
     }
     await Promise.all(promises);
   }
+  async stop() {
+    return this.drain();
+  }
   async drain() {
+    if (this.cleaningInterval) {
+      clearInterval(this.cleaningInterval);
+      this.cleaningInterval = null;
+    }
     await Promise.all(this.pendingReplenishments);
     const promises = [];
     for (const [, pool] of this.pools) {
-      for (const entry of pool) {
+      for (const entry of pool.clean ?? []) {
+        promises.push(entry.container.remove({ force: true }).catch(() => {}));
+      }
+      for (const entry of pool.dirty) {
         promises.push(entry.container.remove({ force: true }).catch(() => {}));
       }
     }
@@ -55302,30 +55400,46 @@ class ContainerPool {
   }
   replenish(image) {
     if (this.replenishing.has(image)) {
-      logger.debug(`[Pool] Replenishment for ${image} already in progress`);
-      return;
-    }
-    this.replenishing.add(image);
-    logger.debug(`[Pool] Starting background replenishment for image: ${image}`);
-    const promise = this.createContainer(image).then((container) => {
-      const pool = this.pools.get(image) ?? [];
-      if (pool.length < this.poolSize) {
-        pool.push({ container, createdAt: Date.now() });
-        this.pools.set(image, pool);
-        logger.debug(`[Pool] Replenished container ${container.id} added to pool for ${image}. Pool size: ${pool.length}`);
-      } else {
-        logger.debug(`[Pool] Replenished container ${container.id} not needed (pool for ${image} is full), destroying`);
-        container.remove({ force: true }).catch((err) => {
-          logger.error(`[Pool] Error destroying unneeded replenished container ${container.id}:`, err);
-        });
+      if (this.replenishing.has(image)) {
+        return;
       }
-    }).catch((err) => {
-      logger.error(`[Pool] Error during replenishment for ${image}:`, err);
-    }).finally(() => {
-      this.replenishing.delete(image);
-      this.pendingReplenishments.delete(promise);
-    });
-    this.pendingReplenishments.add(promise);
+      const pool = this.pools.get(image);
+      const currentSize = pool ? this.poolStrategy === "fast" ? pool.clean.length : pool.clean?.length ?? 0 : 0;
+      const targetSize = this.poolStrategy === "fast" ? this.cleanPoolSize : this.cleanPoolSize;
+      if (currentSize >= targetSize) {
+        return;
+      }
+      this.replenishing.add(image);
+      const promise = this.createContainer(image).then((container) => {
+        const p = this.pools.get(image);
+        if (!p) {
+          container.remove({ force: true }).catch(() => {});
+          return;
+        }
+        if (this.poolStrategy === "fast") {
+          if (p.clean.length < this.cleanPoolSize) {
+            p.clean.push({ container, createdAt: Date.now() });
+          } else {
+            container.remove({ force: true }).catch(() => {});
+          }
+        } else {
+          if (!p.clean) {
+            p.clean = [];
+          }
+          if (p.clean.length < this.cleanPoolSize) {
+            p.clean.push({ container, createdAt: Date.now() });
+          } else {
+            container.remove({ force: true }).catch(() => {});
+          }
+        }
+      }).catch((err) => {
+        logger.error(`[Pool] Error during replenishment for ${image}:`, err);
+      }).finally(() => {
+        this.replenishing.delete(image);
+        this.pendingReplenishments.delete(promise);
+      });
+      this.pendingReplenishments.add(promise);
+    }
   }
 }
 var init_pool = __esm(() => {
@@ -55487,31 +55601,52 @@ var exports_docker = {};
 __export(exports_docker, {
   DockerIsol8: () => DockerIsol8
 });
-import { spawn as spawn2 } from "node:child_process";
 import { randomUUID } from "node:crypto";
 import { existsSync as existsSync3, readFileSync as readFileSync2 } from "node:fs";
 import { PassThrough } from "node:stream";
 async function writeFileViaExec(container, filePath, content) {
   const data = typeof content === "string" ? Buffer.from(content, "utf-8") : content;
-  return new Promise((resolve2, reject) => {
-    const child = spawn2("docker", ["exec", "-i", "-u", "sandbox", container.id, "sh", "-c", `cat > ${filePath}`], {
-      stdio: ["pipe", "ignore", "pipe"]
-    });
-    child.on("error", (err) => {
-      reject(new Error(`Failed to spawn docker exec: ${err.message}`));
+  const b64 = data.toString("base64");
+  if (b64.length < 20000) {
+    const exec = await container.exec({
+      Cmd: ["sh", "-c", `printf '%s' '${b64}' | base64 -d > ${filePath}`],
+      User: "sandbox"
     });
-    let stderr = "";
-    child.stderr.on("data", (chunk) => stderr += chunk.toString());
-    child.stdin.write(data);
-    child.stdin.end();
-    child.on("close", (code) => {
-      if (code !== 0) {
-        reject(new Error(`Failed to write file ${filePath}: ${stderr} (exit code ${code})`));
-      } else {
-        resolve2();
-      }
+    await exec.start({ Detach: true });
+    let info3 = await exec.inspect();
+    while (info3.Running) {
+      await new Promise((r) => setTimeout(r, 5));
+      info3 = await exec.inspect();
+    }
+    if (info3.ExitCode !== 0) {
+      throw new Error(`Failed to write file ${filePath} in container (exit code ${info3.ExitCode})`);
+    }
+    return;
+  }
+  const tempPath = `/tmp/b64_${Date.now()}.tmp`;
+  const chunkSize = 8000;
+  for (let i = 0;i < b64.length; i += chunkSize) {
+    const chunk = b64.slice(i, i + chunkSize);
+    const exec = await container.exec({
+      Cmd: ["sh", "-c", `printf '%s' '${chunk}' >> ${tempPath}`],
+      User: "sandbox"
     });
+    await exec.start({ Detach: true });
+    await exec.inspect();
+  }
+  const decodeExec = await container.exec({
+    Cmd: ["sh", "-c", `base64 -d ${tempPath} > ${filePath} && rm ${tempPath}`],
+    User: "sandbox"
   });
+  await decodeExec.start({ Detach: true });
+  let info2 = await decodeExec.inspect();
+  while (info2.Running) {
+    await new Promise((r) => setTimeout(r, 5));
+    info2 = await decodeExec.inspect();
+  }
+  if (info2.ExitCode !== 0) {
+    throw new Error(`Failed to write file ${filePath} in container (exit code ${info2.ExitCode})`);
+  }
 }
 async function readFileViaExec(container, filePath) {
   const exec = await container.exec({
@@ -55681,10 +55816,13 @@ class DockerIsol8 {
   security;
   persist;
   logNetwork;
+  poolStrategy;
+  poolSize;
   auditLogger;
   container = null;
   persistentRuntime = null;
   pool = null;
+  imageCache = new Map;
   constructor(options = {}, maxConcurrent = 10) {
     this.docker = options.docker ?? new import_dockerode.default;
     this.mode = options.mode ?? "ephemeral";
@@ -55704,6 +55842,8 @@ class DockerIsol8 {
     this.persist = options.persist ?? false;
     this.security = options.security ?? { seccomp: "strict" };
     this.logNetwork = options.logNetwork ?? false;
+    this.poolStrategy = options.poolStrategy ?? "fast";
+    this.poolSize = options.poolSize ?? { clean: 1, dirty: 1 };
     if (options.audit) {
       this.auditLogger = new AuditLogger(options.audit);
     }
@@ -55953,13 +56093,21 @@ class DockerIsol8 {
     if (this.overrideImage) {
       return this.overrideImage;
     }
+    const cacheKey = adapter.image;
+    const cached = this.imageCache.get(cacheKey);
+    if (cached) {
+      return cached;
+    }
     const customTag = `${adapter.image}-custom`;
+    let resolvedImage;
     try {
       await this.docker.getImage(customTag).inspect();
-      return customTag;
+      resolvedImage = customTag;
     } catch {
-      return adapter.image;
+      resolvedImage = adapter.image;
     }
+    this.imageCache.set(cacheKey, resolvedImage);
+    return resolvedImage;
   }
   async executeEphemeral(req, startTime) {
     const adapter = this.getAdapter(req.runtime);
@@ -55968,7 +56116,10 @@ class DockerIsol8 {
     if (!this.pool) {
       this.pool = new ContainerPool({
         docker: this.docker,
-        poolSize: 2,
+        poolStrategy: this.poolStrategy,
+        poolSize: this.poolSize,
+        networkMode: this.network,
+        securityMode: this.security.seccomp ?? "strict",
         createOptions: {
           Cmd: ["sleep", "infinity"],
           WorkingDir: SANDBOX_WORKDIR,
@@ -56070,7 +56221,10 @@ class DockerIsol8 {
       if (this.persist) {
         logger.debug(`[Persist] Leaving container running for inspection: ${container.id}`);
       } else {
-        await this.pool.release(container, image);
+        this.pool.release(container, image).catch((err) => {
+          logger.debug(`[Pool] release failed: ${err}`);
+          container.remove({ force: true }).catch(() => {});
+        });
       }
     }
   }
@@ -56470,11 +56624,11 @@ class DockerIsol8 {
 }
 var import_dockerode, SANDBOX_WORKDIR = "/sandbox", MAX_OUTPUT_BYTES, PROXY_PORT = 8118, PROXY_STARTUP_TIMEOUT_MS = 5000, PROXY_POLL_INTERVAL_MS = 100;
 var init_docker = __esm(() => {
+  import_dockerode = __toESM(require_docker(), 1);
   init_runtime();
   init_logger();
   init_audit();
   init_pool();
-  import_dockerode = __toESM(require_docker(), 1);
   MAX_OUTPUT_BYTES = 1024 * 1024;
 });
 
@@ -56483,7 +56637,7 @@ var package_default;
 var init_package = __esm(() => {
   package_default = {
     name: "isol8",
-    version: "0.9.0",
+    version: "0.10.2-alpha.0",
     description: "Secure code execution engine for AI agents",
     author: "Illusion47586",
     license: "MIT",
@@ -59020,7 +59174,7 @@ onetime.callCount = (function_) => {
 };
 var onetime_default = onetime;
 
-// node_modules/signal-exit/dist/mjs/signals.js
+// node_modules/restore-cursor/node_modules/signal-exit/dist/mjs/signals.js
 var signals = [];
 signals.push("SIGHUP", "SIGINT", "SIGTERM");
 if (process.platform !== "win32") {
@@ -59030,7 +59184,7 @@ if (process.platform === "linux") {
   signals.push("SIGIO", "SIGPOLL", "SIGPWR", "SIGSTKFLT");
 }
 
-// node_modules/signal-exit/dist/mjs/index.js
+// node_modules/restore-cursor/node_modules/signal-exit/dist/mjs/index.js
 var processOk = (process3) => !!process3 && typeof process3 === "object" && typeof process3.removeListener === "function" && typeof process3.emit === "function" && typeof process3.reallyExit === "function" && typeof process3.listeners === "function" && typeof process3.kill === "function" && typeof process3.pid === "number" && typeof process3.on === "function";
 var kExitEmitter = Symbol.for("signal-exit emitter");
 var global2 = globalThis;
@@ -62020,7 +62174,7 @@ program2.command("setup").description("Check Docker and build isol8 images").opt
   console.log(`
 [DONE] Setup complete!`);
 });
-program2.command("run").description("Execute code in isol8").argument("[file]", "Script file to execute").option("-e, --eval <code>", "Execute inline code string").option("-r, --runtime <name>", "Force runtime (python, node, bun, deno, bash)").option("--net <mode>", "Network mode: none, host, filtered", "none").option("--allow <regex>", "Whitelist regex for filtered mode (repeatable)", collect, []).option("--deny <regex>", "Blacklist regex for filtered mode (repeatable)", collect, []).option("--out <file>", "Write output to file").option("--persistent", "Use persistent container").option("--timeout <ms>", "Execution timeout in milliseconds").option("--memory <limit>", "Memory limit (e.g. 512m, 1g)").option("--cpu <limit>", "CPU limit as fraction (e.g. 0.5, 2.0)").option("--image <name>", "Override Docker image").option("--pids-limit <n>", "Maximum number of processes").option("--writable", "Disable read-only root filesystem").option("--max-output <bytes>", "Maximum output size in bytes").option("--secret <KEY=VALUE>", "Secret env var (repeatable, values masked)", collect, []).option("--sandbox-size <size>", "Sandbox tmpfs size (e.g. 128m)").option("--tmp-size <size>", "Tmp tmpfs size (e.g. 256m, 512m)").option("--stdin <data>", "Data to pipe to stdin").option("--install <package>", "Install package for runtime (repeatable)", collect, []).option("--host <url>", "Execute on remote server").option("--key <key>", "API key for remote server").option("--no-stream", "Disable real-time output streaming").option("--debug", "Enable debug logging").option("--persist", "Keep container running after execution for inspection").option("--log-network", "Log all network requests (requires --net filtered)").action(async (file, opts) => {
+program2.command("run").description("Execute code in isol8").argument("[file]", "Script file to execute").option("-e, --eval <code>", "Execute inline code string").option("-r, --runtime <name>", "Force runtime (python, node, bun, deno, bash)").option("--net <mode>", "Network mode: none, host, filtered", "none").option("--allow <regex>", "Whitelist regex for filtered mode (repeatable)", collect, []).option("--deny <regex>", "Blacklist regex for filtered mode (repeatable)", collect, []).option("--out <file>", "Write output to file").option("--persistent", "Use persistent container").option("--timeout <ms>", "Execution timeout in milliseconds").option("--memory <limit>", "Memory limit (e.g. 512m, 1g)").option("--cpu <limit>", "CPU limit as fraction (e.g. 0.5, 2.0)").option("--image <name>", "Override Docker image").option("--pids-limit <n>", "Maximum number of processes").option("--writable", "Disable read-only root filesystem").option("--max-output <bytes>", "Maximum output size in bytes").option("--secret <KEY=VALUE>", "Secret env var (repeatable, values masked)", collect, []).option("--sandbox-size <size>", "Sandbox tmpfs size (e.g. 128m, 512m)").option("--tmp-size <size>", "Tmp tmpfs size (e.g. 256m, 512m)").option("--stdin <data>", "Data to pipe to stdin").option("--install <package>", "Install package for runtime (repeatable)", collect, []).option("--host <url>", "Execute on remote server").option("--key <key>", "API key for remote server").option("--no-stream", "Disable real-time output streaming").option("--debug", "Enable debug logging").option("--persist", "Keep container running after execution for inspection").option("--log-network", "Log all network requests (requires --net filtered)").option("--pool-strategy <mode>", "Pool strategy: fast (default) or secure", "fast").option("--pool-size <size>", "Pool size (number or 'clean,dirty' for fast mode)", "1,1").action(async (file, opts) => {
   const { code, runtime, engineOptions, engine, stdinData, fileExtension } = await resolveRunInput(file, opts);
   logger.debug(`[Run] Runtime: ${runtime}, mode: ${engineOptions.mode}`);
   logger.debug(`[Run] Network: ${engineOptions.network}, timeout: ${engineOptions.timeoutMs}ms`);
@@ -62457,7 +62611,12 @@ async function resolveRunInput(file, opts) {
     ...opts.tmpSize ? { tmpSize: opts.tmpSize } : {},
     debug: opts.debug ?? config.debug,
     persist: opts.persist ?? false,
-    ...opts.logNetwork ? { logNetwork: true } : {}
+    ...opts.logNetwork ? { logNetwork: true } : {},
+    poolStrategy: opts.poolStrategy === "secure" ? "secure" : "fast",
+    poolSize: opts.poolSize ? opts.poolSize.includes(",") ? {
+      clean: Number.parseInt(opts.poolSize.split(",")[0], 10),
+      dirty: Number.parseInt(opts.poolSize.split(",")[1], 10)
+    } : Number.parseInt(opts.poolSize, 10) : { clean: 1, dirty: 1 }
   };
   logger.debug(`[Run] Engine options: mode=${engineOptions.mode}, network=${engineOptions.network}`);
   let fileExtension;
@@ -62502,4 +62661,4 @@ if (!process.argv.slice(2).length) {
 }
 program2.parse();
 
-//# debugId=6CABAE4F2846DBE164756E2164756E21
+//# debugId=AB0B8F37F6C568CA64756E2164756E21