isol8 0.12.0-alpha.0 → 0.12.1

package/dist/cli.js

@@ -6318,7 +6318,7 @@ var require_bcrypt_pbkdf = __commonJS((exports, module) => {
 
 // node_modules/cpu-features/build/Release/cpufeatures.node
 var require_cpufeatures = __commonJS((exports, module) => {
-  module.exports = __require("./cpufeatures-8g73ch7n.node");
+  module.exports = __require("./cpufeatures-tjjrgpt7.node");
 });
 
 // node_modules/cpu-features/lib/index.js
@@ -6931,12 +6931,12 @@ var require_utils2 = __commonJS((exports, module) => {
 
 // node_modules/ssh2/lib/protocol/crypto/build/Release/sshcrypto.node
 var require_sshcrypto = __commonJS((exports, module) => {
-  module.exports = __require("./sshcrypto-f6atjna1.node");
+  module.exports = __require("./sshcrypto-0209sx47.node");
 });
 
 // node_modules/ssh2/lib/protocol/crypto/poly1305.js
 var require_poly1305 = __commonJS((exports, module) => {
-  var __dirname = "/Users/dhruv/Developer/Projects/isol8/node_modules/ssh2/lib/protocol/crypto", __filename = "/Users/dhruv/Developer/Projects/isol8/node_modules/ssh2/lib/protocol/crypto/poly1305.js";
+  var __dirname = "/home/runner/work/isol8/isol8/node_modules/ssh2/lib/protocol/crypto", __filename = "/home/runner/work/isol8/isol8/node_modules/ssh2/lib/protocol/crypto/poly1305.js";
   var createPoly1305 = function() {
     var _scriptDir = typeof document !== "undefined" && document.currentScript ? document.currentScript.src : undefined;
     if (typeof __filename !== "undefined")
@@ -8681,7 +8681,7 @@ ${formatted}-----END ${type} KEY-----`;
       }
       return Buffer.from(hex, "hex");
     }
-    return function genOpenSSLRSAPriv(n, e, d, iqmp, p, q) {
+    return function genOpenSSLRSAPriv2(n, e, d, iqmp, p, q) {
       const bn_d = bigIntFromBuffer(d);
       const dmp1 = bigIntToBuffer(bn_d % (bigIntFromBuffer(p) - 1n));
       const dmq1 = bigIntToBuffer(bn_d % (bigIntFromBuffer(q) - 1n));
@@ -9709,7 +9709,7 @@ ${formatted}-----END ${type} KEY-----`;
 
 // node_modules/ssh2/lib/agent.js
 var require_agent = __commonJS((exports, module) => {
-  var __dirname = "/Users/dhruv/Developer/Projects/isol8/node_modules/ssh2/lib";
+  var __dirname = "/home/runner/work/isol8/isol8/node_modules/ssh2/lib";
   var { Socket } = __require("net");
   var { Duplex } = __require("stream");
   var { resolve } = __require("path");
@@ -21682,7 +21682,7 @@ var require__stream_writable = __commonJS((exports, module) => {
       }
     });
   } else {
-    realHasInstance = function realHasInstance(object) {
+    realHasInstance = function realHasInstance2(object) {
       return object instanceof this;
     };
   }
@@ -22480,28 +22480,28 @@ var require_end_of_stream = __commonJS((exports, module) => {
     callback = once(callback || noop);
     var readable = opts.readable || opts.readable !== false && stream.readable;
     var writable = opts.writable || opts.writable !== false && stream.writable;
-    var onlegacyfinish = function onlegacyfinish() {
+    var onlegacyfinish = function onlegacyfinish2() {
       if (!stream.writable)
         onfinish();
     };
     var writableEnded = stream._writableState && stream._writableState.finished;
-    var onfinish = function onfinish() {
+    var onfinish = function onfinish2() {
       writable = false;
       writableEnded = true;
       if (!readable)
         callback.call(stream);
     };
     var readableEnded = stream._readableState && stream._readableState.endEmitted;
-    var onend = function onend() {
+    var onend = function onend2() {
       readable = false;
       readableEnded = true;
       if (!writable)
         callback.call(stream);
     };
-    var onerror = function onerror(err) {
+    var onerror = function onerror2(err) {
       callback.call(stream, err);
     };
-    var onclose = function onclose() {
+    var onclose = function onclose2() {
       var err;
       if (readable && !readableEnded) {
         if (!stream._readableState || !stream._readableState.ended)
@@ -22514,7 +22514,7 @@ var require_end_of_stream = __commonJS((exports, module) => {
         return callback.call(stream, err);
       }
     };
-    var onrequest = function onrequest() {
+    var onrequest = function onrequest2() {
       stream.req.on("finish", onfinish);
     };
     if (isRequest(stream)) {
@@ -22671,7 +22671,7 @@ var require_async_iterator = __commonJS((exports, module) => {
       });
     });
   }), _Object$setPrototypeO), AsyncIteratorPrototype);
-  var createReadableStreamAsyncIterator = function createReadableStreamAsyncIterator(stream) {
+  var createReadableStreamAsyncIterator = function createReadableStreamAsyncIterator2(stream) {
     var _Object$create;
     var iterator = Object.create(ReadableStreamAsyncIteratorPrototype, (_Object$create = {}, _defineProperty(_Object$create, kStream, {
       value: stream,
@@ -22860,7 +22860,7 @@ var require__stream_readable = __commonJS((exports, module) => {
   var Duplex;
   Readable.ReadableState = ReadableState;
   var EE = __require("events").EventEmitter;
-  var EElistenerCount = function EElistenerCount(emitter, type) {
+  var EElistenerCount = function EElistenerCount2(emitter, type) {
     return emitter.listeners(type).length;
   };
   var Stream = __require("stream");
@@ -22877,7 +22877,7 @@ var require__stream_readable = __commonJS((exports, module) => {
   if (debugUtil && debugUtil.debuglog) {
     debug = debugUtil.debuglog("stream");
   } else {
-    debug = function debug() {};
+    debug = function debug2() {};
   }
   var BufferList = require_buffer_list();
   var destroyImpl = require_destroy();
@@ -25535,14 +25535,14 @@ var require_BufferList = __commonJS((exports, module) => {
     if (srcEnd <= 0) {
       return dst || Buffer2.alloc(0);
     }
-    const copy = !!dst;
+    const copy2 = !!dst;
     const off = this._offset(srcStart);
     const len = srcEnd - srcStart;
     let bytes = len;
-    let bufoff = copy && dstStart || 0;
+    let bufoff = copy2 && dstStart || 0;
     let start = off[1];
     if (srcStart === 0 && srcEnd === this.length) {
-      if (!copy) {
+      if (!copy2) {
         return this._bufs.length === 1 ? this._bufs[0] : Buffer2.concat(this._bufs, this.length);
       }
       for (let i = 0;i < this._bufs.length; i++) {
@@ -25552,9 +25552,9 @@ var require_BufferList = __commonJS((exports, module) => {
       return dst;
     }
     if (bytes <= this._bufs[off[0]].length - start) {
-      return copy ? this._bufs[off[0]].copy(dst, dstStart, start, start + bytes) : this._bufs[off[0]].slice(start, start + bytes);
+      return copy2 ? this._bufs[off[0]].copy(dst, dstStart, start, start + bytes) : this._bufs[off[0]].slice(start, start + bytes);
     }
-    if (!copy) {
+    if (!copy2) {
       dst = Buffer2.allocUnsafe(len);
     }
     for (let i = off[0];i < this._bufs.length; i++) {
@@ -25776,7 +25776,7 @@ var require_bl = __commonJS((exports, module) => {
     }
     if (typeof callback === "function") {
       this._callback = callback;
-      const piper = function piper(err) {
+      const piper = function piper2(err) {
         if (this._callback) {
           this._callback(err);
           this._callback = null;
@@ -34839,7 +34839,7 @@ var require_writer2 = __commonJS((exports, module) => {
     this.tail = this.head;
     this.states = null;
   }
-  var create = function create() {
+  var create = function create2() {
     return util.Buffer ? function create_buffer_setup() {
       return (Writer.create = function create_buffer() {
         return new BufferWriter;
@@ -35063,12 +35063,12 @@ var require_reader2 = __commonJS((exports, module) => {
     if (buffer instanceof Uint8Array || Array.isArray(buffer))
       return new Reader(buffer);
     throw Error("illegal buffer");
-  } : function create_array(buffer) {
+  } : function create_array2(buffer) {
     if (Array.isArray(buffer))
       return new Reader(buffer);
     throw Error("illegal buffer");
   };
-  var create = function create() {
+  var create = function create2() {
     return util.Buffer ? function create_buffer_setup(buffer) {
       return (Reader.create = function create_buffer(buffer2) {
         return util.Buffer.isBuffer(buffer2) ? new BufferReader(buffer2) : create_array(buffer2);
@@ -35494,10 +35494,10 @@ var require_fetch = __commonJS((exports, module) => {
 // node_modules/@protobufjs/path/index.js
 var require_path = __commonJS((exports) => {
   var path = exports;
-  var isAbsolute = path.isAbsolute = function isAbsolute(path2) {
+  var isAbsolute = path.isAbsolute = function isAbsolute2(path2) {
     return /^(?:\/|\w+:)/.test(path2);
   };
-  var normalize = path.normalize = function normalize(path2) {
+  var normalize = path.normalize = function normalize2(path2) {
     path2 = path2.replace(/\\/g, "/").replace(/\/{2,}/g, "/");
     var parts = path2.split("/"), absolute = isAbsolute(path2), prefix = "";
     if (absolute)
@@ -35662,7 +35662,7 @@ var require_namespace = __commonJS((exports, module) => {
     object.onRemove(this);
     return clearCache(this);
   };
-  Namespace.prototype.define = function define(path, json) {
+  Namespace.prototype.define = function define2(path, json) {
     if (util.isString(path))
       path = path.split(".");
     else if (!Array.isArray(path))
@@ -42478,7 +42478,7 @@ var require_src3 = __commonJS((exports) => {
 
 // node_modules/@grpc/grpc-js/build/src/channelz.js
 var require_channelz = __commonJS((exports) => {
-  var __dirname = "/Users/dhruv/Developer/Projects/isol8/node_modules/@grpc/grpc-js/build/src";
+  var __dirname = "/home/runner/work/isol8/isol8/node_modules/@grpc/grpc-js/build/src";
   Object.defineProperty(exports, "__esModule", { value: true });
   exports.registerChannelzSocket = exports.registerChannelzServer = exports.registerChannelzSubchannel = exports.registerChannelzChannel = exports.ChannelzCallTrackerStub = exports.ChannelzCallTracker = exports.ChannelzChildrenTrackerStub = exports.ChannelzChildrenTracker = exports.ChannelzTrace = exports.ChannelzTraceStub = undefined;
   exports.unregisterChannelzRef = unregisterChannelzRef;
@@ -47881,7 +47881,7 @@ var require_duration = __commonJS((exports) => {
 
 // node_modules/@grpc/grpc-js/build/src/orca.js
 var require_orca = __commonJS((exports) => {
-  var __dirname = "/Users/dhruv/Developer/Projects/isol8/node_modules/@grpc/grpc-js/build/src";
+  var __dirname = "/home/runner/work/isol8/isol8/node_modules/@grpc/grpc-js/build/src";
   Object.defineProperty(exports, "__esModule", { value: true });
   exports.OrcaOobMetricsSubchannelWrapper = exports.GRPC_METRICS_HEADER = exports.ServerMetricRecorder = exports.PerRequestMetricRecorder = undefined;
   exports.createOrcaClient = createOrcaClient;
@@ -53270,7 +53270,7 @@ var require_dist = __commonJS((exports) => {
 
 // node_modules/dockerode/lib/session.js
 var require_session = __commonJS((exports, module) => {
-  var __dirname = "/Users/dhruv/Developer/Projects/isol8/node_modules/dockerode/lib";
+  var __dirname = "/home/runner/work/isol8/isol8/node_modules/dockerode/lib";
   var grpc = require_src4();
   var protoLoader = require_src5();
   var path = __require("path");
@@ -54496,7 +54496,7 @@ var require_docker = __commonJS((exports, module) => {
         stream: true,
         stdout: true,
         stderr: true
-      }, function handler(err2, stream) {
+      }, function handler2(err2, stream) {
         if (err2)
           return callback(err2, null, container);
         hub.emit("stream", stream);
@@ -55592,15 +55592,6 @@ function validatePackageName(name) {
 }
 
 // src/engine/image-builder.ts
-var exports_image_builder = {};
-__export(exports_image_builder, {
-  normalizePackages: () => normalizePackages,
-  imageExists: () => imageExists,
-  getCustomImageTag: () => getCustomImageTag,
-  ensureImages: () => ensureImages,
-  buildCustomImages: () => buildCustomImages,
-  buildBaseImages: () => buildBaseImages
-});
 import { createHash as createHash2 } from "node:crypto";
 import { existsSync as existsSync3, readFileSync as readFileSync2 } from "node:fs";
 import { join as join3 } from "node:path";
@@ -55659,9 +55650,8 @@ async function removeImage(docker, imageId) {
     logger.debug(`[ImageBuilder] Could not remove image ${imageId.slice(0, 12)}: ${err}`);
   }
 }
-async function buildBaseImages(docker, onProgress, force = false, onlyRuntimes) {
-  const allRuntimes = RuntimeRegistry.list();
-  const runtimes = onlyRuntimes ? allRuntimes.filter((r) => onlyRuntimes.includes(r.name)) : allRuntimes;
+async function buildBaseImages(docker, onProgress, force = false) {
+  const runtimes = RuntimeRegistry.list();
   const dockerHash = computeDockerDirHash();
   logger.debug(`[ImageBuilder] Docker directory hash: ${dockerHash.slice(0, 16)}...`);
   for (const adapter of runtimes) {
@@ -55811,26 +55801,6 @@ ${installCmd}
   }
   onProgress?.({ runtime, status: "done" });
 }
-async function imageExists(docker, imageName) {
-  try {
-    await docker.getImage(imageName).inspect();
-    return true;
-  } catch {
-    return false;
-  }
-}
-async function ensureImages(docker, onProgress) {
-  const runtimes = RuntimeRegistry.list();
-  const missing = [];
-  for (const adapter of runtimes) {
-    if (!await imageExists(docker, adapter.image)) {
-      missing.push(adapter.name);
-    }
-  }
-  if (missing.length > 0) {
-    await buildBaseImages(docker, onProgress, false, missing);
-  }
-}
 var DOCKERFILE_DIR, LABELS, DOCKER_BUILD_FILES;
 var init_image_builder = __esm(() => {
   init_runtime();
@@ -56729,26 +56699,6 @@ class DockerIsol8 {
         resolvedImage = legacyCustomTag;
       } catch {}
     }
-    try {
-      await this.docker.getImage(resolvedImage).inspect();
-    } catch {
-      logger.debug(`[ImageBuilder] Image ${resolvedImage} not found. Building...`);
-      const { buildBaseImages: buildBaseImages2, buildCustomImages: buildCustomImages2 } = await Promise.resolve().then(() => (init_image_builder(), exports_image_builder));
-      if (resolvedImage !== adapter.image && normalizedDeps.length > 0) {
-        try {
-          await this.docker.getImage(adapter.image).inspect();
-        } catch {
-          logger.debug(`[ImageBuilder] Base image ${adapter.image} missing. Building...`);
-          await buildBaseImages2(this.docker, undefined, false, [adapter.name]);
-        }
-        logger.debug(`[ImageBuilder] Building custom image for ${adapter.name}...`);
-        const dummyConfig = { dependencies: { [adapter.name]: normalizedDeps } };
-        await buildCustomImages2(this.docker, dummyConfig, undefined, false);
-      } else {
-        logger.debug(`[ImageBuilder] Building base image for ${adapter.name}...`);
-        await buildBaseImages2(this.docker, undefined, false, [adapter.name]);
-      }
-    }
     this.imageCache.set(cacheKey, resolvedImage);
     return resolvedImage;
   }
@@ -57306,7 +57256,6 @@ class DockerIsol8 {
 }
 var import_dockerode, SANDBOX_WORKDIR = "/sandbox", MAX_OUTPUT_BYTES, PROXY_PORT = 8118, PROXY_STARTUP_TIMEOUT_MS = 5000, PROXY_POLL_INTERVAL_MS = 100;
 var init_docker = __esm(() => {
-  import_dockerode = __toESM(require_docker(), 1);
   init_runtime();
   init_logger();
   init_audit();
@@ -57314,6 +57263,7 @@ var init_docker = __esm(() => {
   init_default_seccomp_profile();
   init_image_builder();
   init_pool();
+  import_dockerode = __toESM(require_docker(), 1);
   MAX_OUTPUT_BYTES = 1024 * 1024;
 });
 
@@ -57322,7 +57272,7 @@ var package_default;
 var init_package = __esm(() => {
   package_default = {
     name: "isol8",
-    version: "0.12.0-alpha.0",
+    version: "0.12.0",
     description: "Secure code execution engine for AI agents",
     author: "Illusion47586",
     license: "MIT",
@@ -59954,7 +59904,7 @@ onetime.callCount = (function_) => {
 };
 var onetime_default = onetime;
 
-// node_modules/restore-cursor/node_modules/signal-exit/dist/mjs/signals.js
+// node_modules/signal-exit/dist/mjs/signals.js
 var signals = [];
 signals.push("SIGHUP", "SIGINT", "SIGTERM");
 if (process.platform !== "win32") {
@@ -59964,7 +59914,7 @@ if (process.platform === "linux") {
   signals.push("SIGIO", "SIGPOLL", "SIGPWR", "SIGSTKFLT");
 }
 
-// node_modules/restore-cursor/node_modules/signal-exit/dist/mjs/index.js
+// node_modules/signal-exit/dist/mjs/index.js
 var processOk = (process3) => !!process3 && typeof process3 === "object" && typeof process3.removeListener === "function" && typeof process3.emit === "function" && typeof process3.reallyExit === "function" && typeof process3.listeners === "function" && typeof process3.kill === "function" && typeof process3.pid === "number" && typeof process3.on === "function";
 var kExitEmitter = Symbol.for("signal-exit emitter");
 var global2 = globalThis;
@@ -63080,7 +63030,13 @@ async function downloadServerBinary(binaryPath) {
   logger.debug(`[Serve] Download URL: ${url}`);
   const spinner = ora(`Downloading isol8 server v${VERSION}...`).start();
   try {
-    const response = await fetch(url, { redirect: "follow" });
+    let response = await fetch(url, { redirect: "follow" });
+    if (response.status === 404) {
+      const fallbackUrl = `https://github.com/Illusion47586/isol8/releases/latest/download/${binaryName}`;
+      logger.debug(`[Serve] Binary not found for v${VERSION}, trying latest from ${fallbackUrl}`);
+      spinner.text = `v${VERSION} not found, downloading latest available version...`;
+      response = await fetch(fallbackUrl, { redirect: "follow" });
+    }
     if (!response.ok) {
       spinner.fail(`Failed to download server binary (HTTP ${response.status})`);
       if (response.status === 404) {
@@ -63615,4 +63571,4 @@ if (!process.argv.slice(2).length) {
 }
 program2.parse();
 
-//# debugId=3F3ACB896496CF6F64756E2164756E21
+//# debugId=0B5A0E438410953564756E2164756E21

package/dist/index.js

@@ -1,20 +1,4 @@
-import { createRequire } from "node:module";
-var __create = Object.create;
-var __getProtoOf = Object.getPrototypeOf;
 var __defProp = Object.defineProperty;
-var __getOwnPropNames = Object.getOwnPropertyNames;
-var __hasOwnProp = Object.prototype.hasOwnProperty;
-var __toESM = (mod, isNodeMode, target) => {
-  target = mod != null ? __create(__getProtoOf(mod)) : {};
-  const to = isNodeMode || !mod || !mod.__esModule ? __defProp(target, "default", { value: mod, enumerable: true }) : target;
-  for (let key of __getOwnPropNames(mod))
-    if (!__hasOwnProp.call(to, key))
-      __defProp(to, key, {
-        get: () => mod[key],
-        enumerable: true
-      });
-  return to;
-};
 var __export = (target, all) => {
   for (var name in all)
     __defProp(target, name, {
@@ -25,7 +9,6 @@ var __export = (target, all) => {
     });
 };
 var __esm = (fn, res) => () => (fn && (res = fn(fn = 0)), res);
-var __require = /* @__PURE__ */ createRequire(import.meta.url);
 
 // src/runtime/adapter.ts
 var adapters, extensionMap, RuntimeRegistry;
@@ -630,124 +613,9 @@ var init_default_seccomp_profile = __esm(() => {
   });
 });
 
-// src/engine/utils.ts
-var exports_utils = {};
-__export(exports_utils, {
-  validatePackageName: () => validatePackageName,
-  truncateOutput: () => truncateOutput,
-  parseMemoryLimit: () => parseMemoryLimit,
-  maskSecrets: () => maskSecrets,
-  extractFromTar: () => extractFromTar,
-  createTarBuffer: () => createTarBuffer
-});
-function parseMemoryLimit(limit) {
-  const match = limit.match(/^(\d+(?:\.\d+)?)\s*([kmgt]?)b?$/i);
-  if (!match) {
-    throw new Error(`Invalid memory limit format: "${limit}". Use e.g. "512m", "1g".`);
-  }
-  const value = Number.parseFloat(match[1]);
-  const unit = (match[2] || "b").toLowerCase();
-  const multipliers = {
-    b: 1,
-    k: 1024,
-    m: 1024 ** 2,
-    g: 1024 ** 3,
-    t: 1024 ** 4
-  };
-  return Math.floor(value * (multipliers[unit] ?? 1));
-}
-function truncateOutput(output, maxBytes) {
-  const encoder = new TextEncoder;
-  const bytes = encoder.encode(output);
-  if (bytes.length <= maxBytes) {
-    return { text: output, truncated: false };
-  }
-  const decoder = new TextDecoder("utf-8", { fatal: false });
-  const truncated = decoder.decode(bytes.slice(0, maxBytes));
-  return {
-    text: `${truncated}
-
---- OUTPUT TRUNCATED (${bytes.length} bytes, limit: ${maxBytes}) ---`,
-    truncated: true
-  };
-}
-function maskSecrets(text, secrets) {
-  let result = text;
-  for (const value of Object.values(secrets)) {
-    if (value.length > 0) {
-      result = result.replaceAll(value, "***");
-    }
-  }
-  return result;
-}
-function createTarBuffer(filePath, content) {
-  const data = typeof content === "string" ? Buffer.from(content, "utf-8") : content;
-  const headerSize = 512;
-  const dataBlocks = Math.ceil(data.length / 512);
-  const totalSize = headerSize + dataBlocks * 512 + 1024;
-  const buf = Buffer.alloc(totalSize);
-  buf.write(filePath.replace(/^\//, ""), 0, 100, "utf-8");
-  buf.write("0000644\x00", 100, 8, "utf-8");
-  buf.write("0000000\x00", 108, 8, "utf-8");
-  buf.write("0000000\x00", 116, 8, "utf-8");
-  buf.write(`${data.length.toString(8).padStart(11, "0")}\x00`, 124, 12, "utf-8");
-  buf.write(`${Math.floor(Date.now() / 1000).toString(8).padStart(11, "0")}\x00`, 136, 12, "utf-8");
-  buf.write("0", 156, 1, "utf-8");
-  buf.write("ustar\x00", 257, 6, "utf-8");
-  buf.write("00", 263, 2, "utf-8");
-  buf.write("        ", 148, 8, "utf-8");
-  let checksum = 0;
-  for (let i = 0;i < headerSize; i++) {
-    checksum += buf[i];
-  }
-  buf.write(`${checksum.toString(8).padStart(6, "0")}\x00 `, 148, 8, "utf-8");
-  data.copy(buf, headerSize);
-  return buf;
-}
-function extractFromTar(tarBuffer, targetPath) {
-  const normalizedTarget = targetPath.replace(/^\//, "");
-  const basename = targetPath.split("/").pop() ?? targetPath;
-  let offset = 0;
-  while (offset < tarBuffer.length - 512) {
-    const nameEnd = tarBuffer.indexOf(0, offset);
-    const name = tarBuffer.subarray(offset, Math.min(nameEnd, offset + 100)).toString("utf-8");
-    if (name.length === 0) {
-      break;
-    }
-    const sizeStr = tarBuffer.subarray(offset + 124, offset + 136).toString("utf-8").trim();
-    const size = Number.parseInt(sizeStr, 8);
-    if (Number.isNaN(size)) {
-      break;
-    }
-    const dataStart = offset + 512;
-    const dataBlocks = Math.ceil(size / 512);
-    if (name === normalizedTarget || name.endsWith(`/${normalizedTarget}`) || name === basename) {
-      return Buffer.from(tarBuffer.subarray(dataStart, dataStart + size));
-    }
-    offset = dataStart + dataBlocks * 512;
-  }
-  throw new Error(`File "${targetPath}" not found in tar archive`);
-}
-function validatePackageName(name) {
-  if (!/^[@a-zA-Z0-9_./\-=]+$/.test(name)) {
-    throw new Error(`Invalid package name: "${name}". Only alphanumeric, -, _, ., /, @, and = are allowed.`);
-  }
-  return name;
-}
-
 // src/engine/image-builder.ts
-var exports_image_builder = {};
-__export(exports_image_builder, {
-  normalizePackages: () => normalizePackages,
-  imageExists: () => imageExists,
-  getCustomImageTag: () => getCustomImageTag,
-  ensureImages: () => ensureImages,
-  buildCustomImages: () => buildCustomImages,
-  buildBaseImages: () => buildBaseImages
-});
 import { createHash as createHash2 } from "node:crypto";
 import { existsSync as existsSync3, readFileSync as readFileSync2 } from "node:fs";
-import { join as join3 } from "node:path";
 function resolveDockerDir() {
   const fromBundled = new URL("./docker", import.meta.url).pathname;
   if (existsSync3(fromBundled)) {
@@ -755,19 +623,6 @@ function resolveDockerDir() {
   }
   return new URL("../../docker", import.meta.url).pathname;
 }
-function computeDockerDirHash() {
-  const hash = createHash2("sha256");
-  const files = [...DOCKER_BUILD_FILES].sort();
-  for (const file of files) {
-    const filePath = join3(DOCKERFILE_DIR, file);
-    if (existsSync3(filePath)) {
-      const content = readFileSync2(filePath);
-      hash.update(file);
-      hash.update(content);
-    }
-  }
-  return hash.digest("hex");
-}
 function computeDepsHash(runtime, packages) {
   const hash = createHash2("sha256");
   hash.update(runtime);
@@ -785,206 +640,11 @@ function getCustomImageTag(runtime, packages) {
   const shortHash = depsHash.slice(0, 12);
   return `isol8:${runtime}-custom-${shortHash}`;
 }
-async function getImageLabels(docker, imageName) {
-  try {
-    const image = docker.getImage(imageName);
-    const inspect = await image.inspect();
-    return inspect.Config?.Labels ?? {};
-  } catch {
-    return null;
-  }
-}
-async function removeImage(docker, imageId) {
-  try {
-    const image = docker.getImage(imageId);
-    await image.remove();
-    logger.debug(`[ImageBuilder] Removed old image: ${imageId.slice(0, 12)}`);
-  } catch (err) {
-    logger.debug(`[ImageBuilder] Could not remove image ${imageId.slice(0, 12)}: ${err}`);
-  }
-}
-async function buildBaseImages(docker, onProgress, force = false, onlyRuntimes) {
-  const allRuntimes = RuntimeRegistry.list();
-  const runtimes = onlyRuntimes ? allRuntimes.filter((r) => onlyRuntimes.includes(r.name)) : allRuntimes;
-  const dockerHash = computeDockerDirHash();
-  logger.debug(`[ImageBuilder] Docker directory hash: ${dockerHash.slice(0, 16)}...`);
-  for (const adapter of runtimes) {
-    const target = adapter.name;
-    const imageName = adapter.image;
-    if (!force) {
-      const labels = await getImageLabels(docker, imageName);
-      if (labels && labels[LABELS.dockerHash] === dockerHash) {
-        logger.debug(`[ImageBuilder] Base image ${target} is up to date, skipping build`);
-        onProgress?.({ runtime: target, status: "done", message: "Up to date" });
-        continue;
-      }
-    }
-    let oldImageId = null;
-    try {
-      const oldImage = await docker.getImage(imageName).inspect();
-      oldImageId = oldImage.Id;
-      logger.debug(`[ImageBuilder] Existing image ${target} ID: ${oldImageId.slice(0, 12)}`);
-    } catch {
-      logger.debug(`[ImageBuilder] No existing image for ${target}`);
-    }
-    onProgress?.({ runtime: target, status: "building" });
-    try {
-      const stream = await docker.buildImage({ context: DOCKERFILE_DIR, src: DOCKER_BUILD_FILES }, {
-        t: imageName,
-        target,
-        dockerfile: "Dockerfile",
-        labels: {
-          [LABELS.dockerHash]: dockerHash
-        }
-      });
-      await new Promise((resolve2, reject) => {
-        docker.modem.followProgress(stream, (err) => {
-          if (err) {
-            reject(err);
-          } else {
-            resolve2();
-          }
-        });
-      });
-      if (oldImageId) {
-        await removeImage(docker, oldImageId);
-      }
-      onProgress?.({ runtime: target, status: "done" });
-    } catch (err) {
-      const message = err instanceof Error ? err.message : String(err);
-      onProgress?.({ runtime: target, status: "error", message });
-      throw new Error(`Failed to build image for ${target}: ${message}`);
-    }
-  }
-}
-async function buildCustomImages(docker, config, onProgress, force = false) {
-  const deps = config.dependencies;
-  const python = deps.python ? normalizePackages(deps.python) : [];
-  const node = deps.node ? normalizePackages(deps.node) : [];
-  const bun = deps.bun ? normalizePackages(deps.bun) : [];
-  const deno = deps.deno ? normalizePackages(deps.deno) : [];
-  const bash = deps.bash ? normalizePackages(deps.bash) : [];
-  if (python.length) {
-    await buildCustomImage(docker, "python", python, onProgress, force);
-  }
-  if (node.length) {
-    await buildCustomImage(docker, "node", node, onProgress, force);
-  }
-  if (bun.length) {
-    await buildCustomImage(docker, "bun", bun, onProgress, force);
-  }
-  if (deno.length) {
-    await buildCustomImage(docker, "deno", deno, onProgress, force);
-  }
-  if (bash.length) {
-    await buildCustomImage(docker, "bash", bash, onProgress, force);
-  }
-}
-async function buildCustomImage(docker, runtime, packages, onProgress, force = false) {
-  const normalizedPackages = normalizePackages(packages);
-  const tag = getCustomImageTag(runtime, normalizedPackages);
-  const depsHash = computeDepsHash(runtime, normalizedPackages);
-  logger.debug(`[ImageBuilder] ${runtime} custom deps hash: ${depsHash.slice(0, 16)}...`);
-  if (!force) {
-    const labels = await getImageLabels(docker, tag);
-    if (labels && labels[LABELS.depsHash] === depsHash) {
-      logger.debug(`[ImageBuilder] Custom image ${runtime} is up to date, skipping build`);
-      onProgress?.({ runtime, status: "done", message: "Up to date" });
-      return;
-    }
-  }
-  let oldImageId = null;
-  try {
-    const oldImage = await docker.getImage(tag).inspect();
-    oldImageId = oldImage.Id;
-    logger.debug(`[ImageBuilder] Existing custom image ${runtime} ID: ${oldImageId.slice(0, 12)}`);
-  } catch {
-    logger.debug(`[ImageBuilder] No existing custom image for ${runtime}`);
-  }
-  onProgress?.({
-    runtime,
-    status: "building",
-    message: `Custom: ${normalizedPackages.join(", ")}`
-  });
-  let installCmd;
-  switch (runtime) {
-    case "python":
-      installCmd = `RUN pip install --no-cache-dir ${normalizedPackages.join(" ")}`;
-      break;
-    case "node":
-      installCmd = `RUN npm install -g ${normalizedPackages.join(" ")}`;
-      break;
-    case "bun":
-      installCmd = `RUN bun install -g ${normalizedPackages.join(" ")}`;
-      break;
-    case "deno":
-      installCmd = normalizedPackages.map((p) => `RUN deno cache ${p}`).join(`
-`);
-      break;
-    case "bash":
-      installCmd = `RUN apk add --no-cache ${normalizedPackages.join(" ")}`;
-      break;
-    default:
-      throw new Error(`Unknown runtime: ${runtime}`);
-  }
-  const dockerfileContent = `FROM isol8:${runtime}
-${installCmd}
-`;
-  const { createTarBuffer: createTarBuffer2, validatePackageName: validatePackageName2 } = await Promise.resolve().then(() => exports_utils);
-  const { Readable } = await import("node:stream");
-  normalizedPackages.forEach(validatePackageName2);
-  const tarBuffer = createTarBuffer2("Dockerfile", dockerfileContent);
-  const stream = await docker.buildImage(Readable.from(tarBuffer), {
-    t: tag,
-    dockerfile: "Dockerfile",
-    labels: {
-      [LABELS.depsHash]: depsHash
-    }
-  });
-  await new Promise((resolve2, reject) => {
-    docker.modem.followProgress(stream, (err) => {
-      if (err) {
-        reject(err);
-      } else {
-        resolve2();
-      }
-    });
-  });
-  if (oldImageId) {
-    await removeImage(docker, oldImageId);
-  }
-  onProgress?.({ runtime, status: "done" });
-}
-async function imageExists(docker, imageName) {
-  try {
-    await docker.getImage(imageName).inspect();
-    return true;
-  } catch {
-    return false;
-  }
-}
-async function ensureImages(docker, onProgress) {
-  const runtimes = RuntimeRegistry.list();
-  const missing = [];
-  for (const adapter of runtimes) {
-    if (!await imageExists(docker, adapter.image)) {
-      missing.push(adapter.name);
-    }
-  }
-  if (missing.length > 0) {
-    await buildBaseImages(docker, onProgress, false, missing);
-  }
-}
-var DOCKERFILE_DIR, LABELS, DOCKER_BUILD_FILES;
+var DOCKERFILE_DIR;
 var init_image_builder = __esm(() => {
   init_runtime();
   init_logger();
   DOCKERFILE_DIR = resolveDockerDir();
-  LABELS = {
-    dockerHash: "org.isol8.build.hash",
-    depsHash: "org.isol8.deps.hash"
-  };
-  DOCKER_BUILD_FILES = ["Dockerfile", "proxy.sh", "proxy-handler.sh"];
 });
 
 // src/engine/pool.ts
@@ -1266,6 +926,96 @@ function calculateResourceDelta(before, after) {
   };
 }
 
+// src/engine/utils.ts
+function parseMemoryLimit(limit) {
+  const match = limit.match(/^(\d+(?:\.\d+)?)\s*([kmgt]?)b?$/i);
+  if (!match) {
+    throw new Error(`Invalid memory limit format: "${limit}". Use e.g. "512m", "1g".`);
+  }
+  const value = Number.parseFloat(match[1]);
+  const unit = (match[2] || "b").toLowerCase();
+  const multipliers = {
+    b: 1,
+    k: 1024,
+    m: 1024 ** 2,
+    g: 1024 ** 3,
+    t: 1024 ** 4
+  };
+  return Math.floor(value * (multipliers[unit] ?? 1));
+}
+function truncateOutput(output, maxBytes) {
+  const encoder = new TextEncoder;
+  const bytes = encoder.encode(output);
+  if (bytes.length <= maxBytes) {
+    return { text: output, truncated: false };
+  }
+  const decoder = new TextDecoder("utf-8", { fatal: false });
+  const truncated = decoder.decode(bytes.slice(0, maxBytes));
+  return {
+    text: `${truncated}
+
+--- OUTPUT TRUNCATED (${bytes.length} bytes, limit: ${maxBytes}) ---`,
+    truncated: true
+  };
+}
+function maskSecrets(text, secrets) {
+  let result = text;
+  for (const value of Object.values(secrets)) {
+    if (value.length > 0) {
+      result = result.replaceAll(value, "***");
+    }
+  }
+  return result;
+}
+function createTarBuffer(filePath, content) {
+  const data = typeof content === "string" ? Buffer.from(content, "utf-8") : content;
+  const headerSize = 512;
+  const dataBlocks = Math.ceil(data.length / 512);
+  const totalSize = headerSize + dataBlocks * 512 + 1024;
+  const buf = Buffer.alloc(totalSize);
+  buf.write(filePath.replace(/^\//, ""), 0, 100, "utf-8");
+  buf.write("0000644\x00", 100, 8, "utf-8");
+  buf.write("0000000\x00", 108, 8, "utf-8");
+  buf.write("0000000\x00", 116, 8, "utf-8");
+  buf.write(`${data.length.toString(8).padStart(11, "0")}\x00`, 124, 12, "utf-8");
+  buf.write(`${Math.floor(Date.now() / 1000).toString(8).padStart(11, "0")}\x00`, 136, 12, "utf-8");
+  buf.write("0", 156, 1, "utf-8");
+  buf.write("ustar\x00", 257, 6, "utf-8");
+  buf.write("00", 263, 2, "utf-8");
+  buf.write("        ", 148, 8, "utf-8");
+  let checksum = 0;
+  for (let i = 0;i < headerSize; i++) {
+    checksum += buf[i];
+  }
+  buf.write(`${checksum.toString(8).padStart(6, "0")}\x00 `, 148, 8, "utf-8");
+  data.copy(buf, headerSize);
+  return buf;
+}
+function extractFromTar(tarBuffer, targetPath) {
+  const normalizedTarget = targetPath.replace(/^\//, "");
+  const basename = targetPath.split("/").pop() ?? targetPath;
+  let offset = 0;
+  while (offset < tarBuffer.length - 512) {
+    const nameEnd = tarBuffer.indexOf(0, offset);
+    const name = tarBuffer.subarray(offset, Math.min(nameEnd, offset + 100)).toString("utf-8");
+    if (name.length === 0) {
+      break;
+    }
+    const sizeStr = tarBuffer.subarray(offset + 124, offset + 136).toString("utf-8").trim();
+    const size = Number.parseInt(sizeStr, 8);
+    if (Number.isNaN(size)) {
+      break;
+    }
+    const dataStart = offset + 512;
+    const dataBlocks = Math.ceil(size / 512);
+    if (name === normalizedTarget || name.endsWith(`/${normalizedTarget}`) || name === basename) {
+      return Buffer.from(tarBuffer.subarray(dataStart, dataStart + size));
+    }
+    offset = dataStart + dataBlocks * 512;
+  }
+  throw new Error(`File "${targetPath}" not found in tar archive`);
+}
+
 // src/engine/docker.ts
 var exports_docker = {};
 __export(exports_docker, {
@@ -1874,26 +1624,6 @@ class DockerIsol8 {
         resolvedImage = legacyCustomTag;
       } catch {}
     }
-    try {
-      await this.docker.getImage(resolvedImage).inspect();
-    } catch {
-      logger.debug(`[ImageBuilder] Image ${resolvedImage} not found. Building...`);
-      const { buildBaseImages: buildBaseImages2, buildCustomImages: buildCustomImages2 } = await Promise.resolve().then(() => (init_image_builder(), exports_image_builder));
-      if (resolvedImage !== adapter.image && normalizedDeps.length > 0) {
-        try {
-          await this.docker.getImage(adapter.image).inspect();
-        } catch {
-          logger.debug(`[ImageBuilder] Base image ${adapter.image} missing. Building...`);
-          await buildBaseImages2(this.docker, undefined, false, [adapter.name]);
-        }
-        logger.debug(`[ImageBuilder] Building custom image for ${adapter.name}...`);
-        const dummyConfig = { dependencies: { [adapter.name]: normalizedDeps } };
-        await buildCustomImages2(this.docker, dummyConfig, undefined, false);
-      } else {
-        logger.debug(`[ImageBuilder] Building base image for ${adapter.name}...`);
-        await buildBaseImages2(this.docker, undefined, false, [adapter.name]);
-      }
-    }
     this.imageCache.set(cacheKey, resolvedImage);
     return resolvedImage;
   }
@@ -2715,7 +2445,7 @@ init_logger();
 // package.json
 var package_default = {
   name: "isol8",
-  version: "0.12.0-alpha.0",
+  version: "0.12.0",
   description: "Secure code execution engine for AI agents",
   author: "Illusion47586",
   license: "MIT",
@@ -3148,4 +2878,4 @@ export {
   BunAdapter
 };
 
-//# debugId=8EC327761CD2C45664756E2164756E21
+//# debugId=3AEBA9C5B41F55B064756E2164756E21

package/dist/src/engine/docker.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"docker.d.ts","sourceRoot":"","sources":["../../../src/engine/docker.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAKH,OAAO,MAAM,MAAM,WAAW,CAAC;AAG/B,OAAO,KAAK,EACV,gBAAgB,EAChB,eAAe,EAEf,WAAW,EAEX,YAAY,EAKZ,YAAY,EACZ,WAAW,EACZ,MAAM,UAAU,CAAC;AAuWlB,2HAA2H;AAC3H,MAAM,WAAW,kBAAmB,SAAQ,YAAY;IACtD,oFAAoF;IACpF,MAAM,CAAC,EAAE,MAAM,CAAC;CACjB;AAED;;;;;;;;;;;;;;GAcG;AACH,qBAAa,WAAY,YAAW,WAAW;IAC7C,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAS;IAChC,OAAO,CAAC,QAAQ,CAAC,IAAI,CAAY;IACjC,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAc;IACtC,OAAO,CAAC,QAAQ,CAAC,aAAa,CAAC,CAAsB;IACrD,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAAS;IAClC,OAAO,CAAC,QAAQ,CAAC,WAAW,CAAS;IACrC,OAAO,CAAC,QAAQ,CAAC,SAAS,CAAS;IACnC,OAAO,CAAC,QAAQ,CAAC,cAAc,CAAU;IACzC,OAAO,CAAC,QAAQ,CAAC,aAAa,CAAS;IACvC,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAyB;IACjD,OAAO,CAAC,QAAQ,CAAC,gBAAgB,CAAS;IAC1C,OAAO,CAAC,QAAQ,CAAC,aAAa,CAAC,CAAS;IACxC,OAAO,CAAC,QAAQ,CAAC,SAAS,CAAY;IACtC,OAAO,CAAC,QAAQ,CAAC,WAAW,CAAS;IACrC,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAS;IACjC,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAAiB;IAC1C,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAU;IAClC,OAAO,CAAC,QAAQ,CAAC,UAAU,CAAU;IACrC,OAAO,CAAC,QAAQ,CAAC,YAAY,CAAoB;IACjD,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAA4C;IACrE,OAAO,CAAC,QAAQ,CAAC,YAAY,CAAoB;IACjD,OAAO,CAAC,QAAQ,CAAC,WAAW,CAAC,CAAc;IAC3C,OAAO,CAAC,QAAQ,CAAC,gBAAgB,CAAmB;IAEpD,OAAO,CAAC,SAAS,CAAiC;IAClD,OAAO,CAAC,iBAAiB,CAA+B;IACxD,OAAO,CAAC,IAAI,CAA8B;IAC1C,OAAO,CAAC,QAAQ,CAAC,UAAU,CAA6B;YAE1C,uBAAuB;IA6BrC;;;OAGG;gBACS,OAAO,GAAE,kBAAuB,EAAE,aAAa,SAAK;IA4ChE;;;;;OAKG;IACG,KAAK,CAAC,OAAO,GAAE,YAAiB,GAAG,OAAO,CAAC,IAAI,CAAC;IAsCtD,kFAAkF;IAC5E,IAAI,IAAI,OAAO,CAAC,IAAI,CAAC;IAuB3B;;;OAGG;IACG,OAAO,CAAC,GAAG,EAAE,gBAAgB,GAAG,OAAO,CAAC,eAAe,CAAC;IAgB9D;;OAEG;YACW,WAAW;IAoDzB;;OAEG;YACW,qBAAqB;IA8CnC;;OAEG;YACW,kBAAkB;IA+DhC;;;;;;;OAOG;IACG,OAAO,CAAC,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,GAAG,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAYpE;;;;;;OAMG;IACG,OAAO,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC;IAmB5C,6GAA6G;IAC7G,IAAI,WAAW,IAAI,MAAM,GAAG,IAAI,CAE/B;IAED;;;OAGG;IACI,aAAa,CAAC,GAAG,EAAE,gBAAgB,GAAG,aAAa,CAAC,WAAW,CAAC;YAuFzD,YAAY;IAmE1B,OAAO,CAAC,UAAU;YAsBJ,gBAAgB;YAgKhB,iBAAiB;YAwIjB,aAAa;YAkBb,oBAAoB;YASpB,wBAAwB;IA4BtC,OAAO,CAAC,UAAU;IAIlB,OAAO,CAAC,eAAe;IA2BvB,OAAO,CAAC,iBAAiB;IA+BzB,OAAO,CAAC,yBAAyB;IA6BjC,OAAO,CAAC,QAAQ;YAwCD,gBAAgB;YA8EjB,iBAAiB;IAiG/B,OAAO,CAAC,iBAAiB;IAYzB;;;;;;;;;;;;;;;;;;;;OAoBG;WACU,OAAO,CAClB,MAAM,CAAC,EAAE,MAAM,GACd,OAAO,CAAC;QAAE,OAAO,EAAE,MAAM,CAAC;QAAC,MAAM,EAAE,MAAM,CAAC;QAAC,MAAM,EAAE,MAAM,EAAE,CAAA;KAAE,CAAC;IA0BjE;;;;;OAKG;WACU,aAAa,CACxB,MAAM,CAAC,EAAE,MAAM,GACd,OAAO,CAAC;QAAE,OAAO,EAAE,MAAM,CAAC;QAAC,MAAM,EAAE,MAAM,CAAC;QAAC,MAAM,EAAE,MAAM,EAAE,CAAA;KAAE,CAAC;CA2BlE"}
+{"version":3,"file":"docker.d.ts","sourceRoot":"","sources":["../../../src/engine/docker.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAKH,OAAO,MAAM,MAAM,WAAW,CAAC;AAG/B,OAAO,KAAK,EACV,gBAAgB,EAChB,eAAe,EAEf,WAAW,EAEX,YAAY,EAKZ,YAAY,EACZ,WAAW,EACZ,MAAM,UAAU,CAAC;AAuWlB,2HAA2H;AAC3H,MAAM,WAAW,kBAAmB,SAAQ,YAAY;IACtD,oFAAoF;IACpF,MAAM,CAAC,EAAE,MAAM,CAAC;CACjB;AAED;;;;;;;;;;;;;;GAcG;AACH,qBAAa,WAAY,YAAW,WAAW;IAC7C,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAS;IAChC,OAAO,CAAC,QAAQ,CAAC,IAAI,CAAY;IACjC,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAc;IACtC,OAAO,CAAC,QAAQ,CAAC,aAAa,CAAC,CAAsB;IACrD,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAAS;IAClC,OAAO,CAAC,QAAQ,CAAC,WAAW,CAAS;IACrC,OAAO,CAAC,QAAQ,CAAC,SAAS,CAAS;IACnC,OAAO,CAAC,QAAQ,CAAC,cAAc,CAAU;IACzC,OAAO,CAAC,QAAQ,CAAC,aAAa,CAAS;IACvC,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAyB;IACjD,OAAO,CAAC,QAAQ,CAAC,gBAAgB,CAAS;IAC1C,OAAO,CAAC,QAAQ,CAAC,aAAa,CAAC,CAAS;IACxC,OAAO,CAAC,QAAQ,CAAC,SAAS,CAAY;IACtC,OAAO,CAAC,QAAQ,CAAC,WAAW,CAAS;IACrC,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAS;IACjC,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAAiB;IAC1C,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAU;IAClC,OAAO,CAAC,QAAQ,CAAC,UAAU,CAAU;IACrC,OAAO,CAAC,QAAQ,CAAC,YAAY,CAAoB;IACjD,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAA4C;IACrE,OAAO,CAAC,QAAQ,CAAC,YAAY,CAAoB;IACjD,OAAO,CAAC,QAAQ,CAAC,WAAW,CAAC,CAAc;IAC3C,OAAO,CAAC,QAAQ,CAAC,gBAAgB,CAAmB;IAEpD,OAAO,CAAC,SAAS,CAAiC;IAClD,OAAO,CAAC,iBAAiB,CAA+B;IACxD,OAAO,CAAC,IAAI,CAA8B;IAC1C,OAAO,CAAC,QAAQ,CAAC,UAAU,CAA6B;YAE1C,uBAAuB;IA6BrC;;;OAGG;gBACS,OAAO,GAAE,kBAAuB,EAAE,aAAa,SAAK;IA4ChE;;;;;OAKG;IACG,KAAK,CAAC,OAAO,GAAE,YAAiB,GAAG,OAAO,CAAC,IAAI,CAAC;IAsCtD,kFAAkF;IAC5E,IAAI,IAAI,OAAO,CAAC,IAAI,CAAC;IAuB3B;;;OAGG;IACG,OAAO,CAAC,GAAG,EAAE,gBAAgB,GAAG,OAAO,CAAC,eAAe,CAAC;IAgB9D;;OAEG;YACW,WAAW;IAoDzB;;OAEG;YACW,qBAAqB;IA8CnC;;OAEG;YACW,kBAAkB;IA+DhC;;;;;;;OAOG;IACG,OAAO,CAAC,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,GAAG,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAYpE;;;;;;OAMG;IACG,OAAO,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC;IAmB5C,6GAA6G;IAC7G,IAAI,WAAW,IAAI,MAAM,GAAG,IAAI,CAE/B;IAED;;;OAGG;IACI,aAAa,CAAC,GAAG,EAAE,gBAAgB,GAAG,aAAa,CAAC,WAAW,CAAC;YAuFzD,YAAY;IA0C1B,OAAO,CAAC,UAAU;YAsBJ,gBAAgB;YAgKhB,iBAAiB;YAwIjB,aAAa;YAkBb,oBAAoB;YASpB,wBAAwB;IA4BtC,OAAO,CAAC,UAAU;IAIlB,OAAO,CAAC,eAAe;IA2BvB,OAAO,CAAC,iBAAiB;IA+BzB,OAAO,CAAC,yBAAyB;IA6BjC,OAAO,CAAC,QAAQ;YAwCD,gBAAgB;YA8EjB,iBAAiB;IAiG/B,OAAO,CAAC,iBAAiB;IAYzB;;;;;;;;;;;;;;;;;;;;OAoBG;WACU,OAAO,CAClB,MAAM,CAAC,EAAE,MAAM,GACd,OAAO,CAAC;QAAE,OAAO,EAAE,MAAM,CAAC;QAAC,MAAM,EAAE,MAAM,CAAC;QAAC,MAAM,EAAE,MAAM,EAAE,CAAA;KAAE,CAAC;IA0BjE;;;;;OAKG;WACU,aAAa,CACxB,MAAM,CAAC,EAAE,MAAM,GACd,OAAO,CAAC;QAAE,OAAO,EAAE,MAAM,CAAC;QAAC,MAAM,EAAE,MAAM,CAAC;QAAC,MAAM,EAAE,MAAM,EAAE,CAAA;KAAE,CAAC;CA2BlE"}

package/dist/src/engine/image-builder.d.ts

@@ -43,7 +43,7 @@ type ProgressCallback = (progress: BuildProgress) => void;
  * @param onProgress - Optional callback for build progress updates.
  * @param force - If true, always rebuild even if image is up to date.
  */
-export declare function buildBaseImages(docker: Docker, onProgress?: ProgressCallback, force?: boolean, onlyRuntimes?: string[]): Promise<void>;
+export declare function buildBaseImages(docker: Docker, onProgress?: ProgressCallback, force?: boolean): Promise<void>;
 /**
  * Builds custom images with user-specified dependencies layered on top of
  * the base images. Reads package lists from the config's `dependencies` field.

package/dist/src/engine/image-builder.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"image-builder.d.ts","sourceRoot":"","sources":["../../../src/engine/image-builder.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAKH,OAAO,KAAK,MAAM,MAAM,WAAW,CAAC;AAEpC,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,UAAU,CAAC;AAmE5C;;;;;;GAMG;AACH,wBAAgB,iBAAiB,CAAC,QAAQ,EAAE,MAAM,EAAE,GAAG,MAAM,EAAE,CAE9D;AAED;;;;GAIG;AACH,wBAAgB,iBAAiB,CAAC,OAAO,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,EAAE,GAAG,MAAM,CAK7E;AAkCD,mDAAmD;AACnD,UAAU,aAAa;IACrB,6CAA6C;IAC7C,OAAO,EAAE,MAAM,CAAC;IAChB,4BAA4B;IAC5B,MAAM,EAAE,UAAU,GAAG,MAAM,GAAG,OAAO,CAAC;IACtC,+DAA+D;IAC/D,OAAO,CAAC,EAAE,MAAM,CAAC;CAClB;AAED,KAAK,gBAAgB,GAAG,CAAC,QAAQ,EAAE,aAAa,KAAK,IAAI,CAAC;AAE1D;;;;;;;;;;;GAWG;AACH,wBAAsB,eAAe,CACnC,MAAM,EAAE,MAAM,EACd,UAAU,CAAC,EAAE,gBAAgB,EAC7B,KAAK,UAAQ,EACb,YAAY,CAAC,EAAE,MAAM,EAAE,GACtB,OAAO,CAAC,IAAI,CAAC,CAuEf;AAED;;;;;;;;;;;;GAYG;AACH,wBAAsB,iBAAiB,CACrC,MAAM,EAAE,MAAM,EACd,MAAM,EAAE,WAAW,EACnB,UAAU,CAAC,EAAE,gBAAgB,EAC7B,KAAK,UAAQ,GACZ,OAAO,CAAC,IAAI,CAAC,CAwBf;AAqGD;;GAEG;AACH,wBAAsB,WAAW,CAAC,MAAM,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC,CAOrF;AAED;;GAEG;AACH,wBAAsB,YAAY,CAAC,MAAM,EAAE,MAAM,EAAE,UAAU,CAAC,EAAE,gBAAgB,GAAG,OAAO,CAAC,IAAI,CAAC,CAa/F"}
+{"version":3,"file":"image-builder.d.ts","sourceRoot":"","sources":["../../../src/engine/image-builder.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAKH,OAAO,KAAK,MAAM,MAAM,WAAW,CAAC;AAEpC,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,UAAU,CAAC;AAmE5C;;;;;;GAMG;AACH,wBAAgB,iBAAiB,CAAC,QAAQ,EAAE,MAAM,EAAE,GAAG,MAAM,EAAE,CAE9D;AAED;;;;GAIG;AACH,wBAAgB,iBAAiB,CAAC,OAAO,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,EAAE,GAAG,MAAM,CAK7E;AAkCD,mDAAmD;AACnD,UAAU,aAAa;IACrB,6CAA6C;IAC7C,OAAO,EAAE,MAAM,CAAC;IAChB,4BAA4B;IAC5B,MAAM,EAAE,UAAU,GAAG,MAAM,GAAG,OAAO,CAAC;IACtC,+DAA+D;IAC/D,OAAO,CAAC,EAAE,MAAM,CAAC;CAClB;AAED,KAAK,gBAAgB,GAAG,CAAC,QAAQ,EAAE,aAAa,KAAK,IAAI,CAAC;AAE1D;;;;;;;;;;;GAWG;AACH,wBAAsB,eAAe,CACnC,MAAM,EAAE,MAAM,EACd,UAAU,CAAC,EAAE,gBAAgB,EAC7B,KAAK,UAAQ,GACZ,OAAO,CAAC,IAAI,CAAC,CAoEf;AAED;;;;;;;;;;;;GAYG;AACH,wBAAsB,iBAAiB,CACrC,MAAM,EAAE,MAAM,EACd,MAAM,EAAE,WAAW,EACnB,UAAU,CAAC,EAAE,gBAAgB,EAC7B,KAAK,UAAQ,GACZ,OAAO,CAAC,IAAI,CAAC,CAwBf;AAqGD;;GAEG;AACH,wBAAsB,WAAW,CAAC,MAAM,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC,CAOrF;AAED;;GAEG;AACH,wBAAsB,YAAY,CAAC,MAAM,EAAE,MAAM,EAAE,UAAU,CAAC,EAAE,gBAAgB,GAAG,OAAO,CAAC,IAAI,CAAC,CAa/F"}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "isol8",
-  "version": "0.12.0-alpha.0",
+  "version": "0.12.1",
   "description": "Secure code execution engine for AI agents",
   "author": "Illusion47586",
   "license": "MIT",
@@ -115,4 +115,4 @@
       "ultracite fix"
     ]
   }
-}
+}