isol8 0.2.0 → 0.3.1

package/README.md

@@ -101,6 +101,7 @@ isol8 run script.py --host http://server:3000 --key my-api-key
 | `--allow <regex>` | Whitelist regex (repeatable, for `filtered`) | — |
 | `--deny <regex>` | Blacklist regex (repeatable, for `filtered`) | — |
 | `--out <file>` | Write stdout to file | — |
+| `--stream` | Stream output in real-time | `false` |
 | `--persistent` | Keep container alive between runs | `false` |
 | `--timeout <ms>` | Execution timeout in milliseconds | `30000` |
 | `--memory <limit>` | Memory limit (e.g. `512m`, `1g`) | `512m` |

package/dist/cli.js

@@ -6929,6 +6929,11 @@ var require_utils2 = __commonJS((exports, module) => {
   };
 });
 
+// node_modules/ssh2/lib/protocol/crypto/build/Release/sshcrypto.node
+var require_sshcrypto = __commonJS((exports, module) => {
+  module.exports = __require("./sshcrypto-0209sx47.node");
+});
+
 // node_modules/ssh2/lib/protocol/crypto/poly1305.js
 var require_poly1305 = __commonJS((exports, module) => {
   var __dirname = "/home/runner/work/isol8/isol8/node_modules/ssh2/lib/protocol/crypto", __filename = "/home/runner/work/isol8/isol8/node_modules/ssh2/lib/protocol/crypto/poly1305.js";
@@ -7415,7 +7420,7 @@ var require_crypto = __commonJS((exports, module) => {
   var ChaChaPolyDecipher;
   var GenericDecipher;
   try {
-    binding = (()=>{throw new Error("Cannot require module "+"./crypto/build/Release/sshcrypto.node");})();
+    binding = require_sshcrypto();
     ({
       AESGCMCipher,
       ChaChaPolyCipher,
@@ -55013,6 +55018,7 @@ class ContainerPool {
   createOptions;
   pools = new Map;
   replenishing = new Set;
+  pendingReplenishments = new Set;
   constructor(options) {
     this.docker = options.docker;
     this.poolSize = options.poolSize ?? 2;
@@ -55062,6 +55068,7 @@ class ContainerPool {
     await Promise.all(promises);
   }
   async drain() {
+    await Promise.all(this.pendingReplenishments);
     const promises = [];
     for (const [, pool] of this.pools) {
       for (const entry of pool) {
@@ -55076,26 +55083,20 @@ class ContainerPool {
       ...this.createOptions,
       Image: image
     });
-    console.log(`[Pool] Container ${container.id} created for image: ${image}`);
     await container.start();
-    console.log(`[Pool] Container ${container.id} started.`);
     return container;
   }
   replenish(image) {
     if (this.replenishing.has(image)) {
-      console.log(`[Pool] Replenishment for ${image} already in progress.`);
       return;
     }
     this.replenishing.add(image);
-    console.log(`[Pool] Starting background replenishment for image: ${image}`);
-    this.createContainer(image).then((container) => {
+    const promise = this.createContainer(image).then((container) => {
       const pool = this.pools.get(image) ?? [];
       if (pool.length < this.poolSize) {
         pool.push({ container, createdAt: Date.now() });
         this.pools.set(image, pool);
-        console.log(`[Pool] Replenished container ${container.id} added to pool for ${image}. Current pool size: ${pool.length}`);
       } else {
-        console.log(`[Pool] Replenished container ${container.id} not needed (pool for ${image} is full), destroying.`);
         container.remove({ force: true }).catch((err) => {
           console.error(`[Pool] Error destroying unneeded replenished container ${container.id}:`, err);
         });
@@ -55104,7 +55105,9 @@ class ContainerPool {
       console.error(`[Pool] Error during replenishment for ${image}:`, err);
     }).finally(() => {
       this.replenishing.delete(image);
+      this.pendingReplenishments.delete(promise);
     });
+    this.pendingReplenishments.add(promise);
   }
 }
 
@@ -61218,7 +61221,7 @@ program2.command("setup").description("Check Docker and build isol8 images").opt
   console.log(`
 [DONE] Setup complete!`);
 });
-program2.command("run").description("Execute code in isol8").argument("[file]", "Script file to execute").option("-e, --eval <code>", "Execute inline code string").option("-r, --runtime <name>", "Force runtime (python, node, bun, deno, bash)").option("--net <mode>", "Network mode: none, host, filtered", "none").option("--allow <regex>", "Whitelist regex for filtered mode (repeatable)", collect, []).option("--deny <regex>", "Blacklist regex for filtered mode (repeatable)", collect, []).option("--out <file>", "Write output to file").option("--persistent", "Use persistent container").option("--timeout <ms>", "Execution timeout in milliseconds").option("--memory <limit>", "Memory limit (e.g. 512m, 1g)").option("--cpu <limit>", "CPU limit as fraction (e.g. 0.5, 2.0)").option("--image <name>", "Override Docker image").option("--pids-limit <n>", "Maximum number of processes").option("--writable", "Disable read-only root filesystem").option("--max-output <bytes>", "Maximum output size in bytes").option("--secret <KEY=VALUE>", "Secret env var (repeatable, values masked)", collect, []).option("--sandbox-size <size>", "Sandbox tmpfs size (e.g. 128m)").option("--tmp-size <size>", "Tmp tmpfs size (e.g. 256m, 512m)").option("--stdin <data>", "Data to pipe to stdin").option("--install <package>", "Install package for runtime (repeatable)", collect, []).option("--host <url>", "Execute on remote server").option("--key <key>", "API key for remote server").action(async (file, opts) => {
+program2.command("run").description("Execute code in isol8").argument("[file]", "Script file to execute").option("-e, --eval <code>", "Execute inline code string").option("-r, --runtime <name>", "Force runtime (python, node, bun, deno, bash)").option("--net <mode>", "Network mode: none, host, filtered", "none").option("--allow <regex>", "Whitelist regex for filtered mode (repeatable)", collect, []).option("--deny <regex>", "Blacklist regex for filtered mode (repeatable)", collect, []).option("--out <file>", "Write output to file").option("--persistent", "Use persistent container").option("--timeout <ms>", "Execution timeout in milliseconds").option("--memory <limit>", "Memory limit (e.g. 512m, 1g)").option("--cpu <limit>", "CPU limit as fraction (e.g. 0.5, 2.0)").option("--image <name>", "Override Docker image").option("--pids-limit <n>", "Maximum number of processes").option("--writable", "Disable read-only root filesystem").option("--max-output <bytes>", "Maximum output size in bytes").option("--secret <KEY=VALUE>", "Secret env var (repeatable, values masked)", collect, []).option("--sandbox-size <size>", "Sandbox tmpfs size (e.g. 128m)").option("--tmp-size <size>", "Tmp tmpfs size (e.g. 256m, 512m)").option("--stdin <data>", "Data to pipe to stdin").option("--install <package>", "Install package for runtime (repeatable)", collect, []).option("--host <url>", "Execute on remote server").option("--key <key>", "API key for remote server").option("--stream", "Stream output in real-time").action(async (file, opts) => {
   const { code, runtime, engineOptions, engine, stdinData } = await resolveRunInput(file, opts);
   const spinner = ora("Starting execution...").start();
   try {
@@ -61231,23 +61234,42 @@ program2.command("run").description("Execute code in isol8").argument("[file]",
       ...stdinData ? { stdin: stdinData } : {},
       ...opts.install.length > 0 ? { installPackages: opts.install } : {}
     };
-    const result = await engine.execute(req);
-    spinner.stop();
-    if (result.stdout) {
-      console.log(result.stdout);
-    }
-    if (result.stderr) {
-      console.error(result.stderr);
-    }
-    if (result.truncated) {
-      console.error("[WARN] Output was truncated");
-    }
-    if (opts.out && result.stdout) {
-      writeFileSync(opts.out, result.stdout, "utf-8");
-      console.error(`[INFO] Output written to ${opts.out}`);
-    }
-    if (result.exitCode !== 0) {
-      process.exit(result.exitCode);
+    if (opts.stream) {
+      spinner.stop();
+      const stream = engine.executeStream(req);
+      for await (const event of stream) {
+        if (event.type === "stdout") {
+          process.stdout.write(event.data);
+        } else if (event.type === "stderr") {
+          process.stderr.write(event.data);
+        } else if (event.type === "exit") {
+          if (event.data !== "0") {
+            process.exit(Number.parseInt(event.data, 10));
+          }
+        } else if (event.type === "error") {
+          console.error(`[ERR] ${event.data}`);
+          process.exit(1);
+        }
+      }
+    } else {
+      const result = await engine.execute(req);
+      spinner.stop();
+      if (result.stdout) {
+        console.log(result.stdout);
+      }
+      if (result.stderr) {
+        console.error(result.stderr);
+      }
+      if (result.truncated) {
+        console.error("[WARN] Output was truncated");
+      }
+      if (opts.out && result.stdout) {
+        writeFileSync(opts.out, result.stdout, "utf-8");
+        console.error(`[INFO] Output written to ${opts.out}`);
+      }
+      if (result.exitCode !== 0) {
+        process.exit(result.exitCode);
+      }
     }
   } catch (err) {
     spinner.stop();
@@ -61483,4 +61505,4 @@ if (!process.argv.slice(2).length) {
 }
 program2.parse();
 
-//# debugId=420EBE4C8706C16E64756E2164756E21
+//# debugId=32DEDFAE67B3C8B564756E2164756E21