labgate 0.5.3 → 0.5.4

package/dist/lib/policy.js

@@ -0,0 +1,321 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.getSystemPolicyDir = getSystemPolicyDir;
+exports.getSystemPolicyPath = getSystemPolicyPath;
+exports.findPolicyFile = findPolicyFile;
+exports.loadPolicy = loadPolicy;
+exports.validatePolicy = validatePolicy;
+exports.checkIsAdmin = checkIsAdmin;
+exports.mergeWithPolicy = mergeWithPolicy;
+exports.savePolicy = savePolicy;
+const fs_1 = require("fs");
+const path_1 = require("path");
+const os_1 = require("os");
+const crypto_1 = require("crypto");
+// ── Constants ─────────────────────────────────────────────
+const SYSTEM_POLICY_DIR = '/etc/labgate';
+const SYSTEM_POLICY_FILE = 'policy.json';
+// ── File discovery ────────────────────────────────────────
+function getSystemPolicyDir() {
+    return process.env.LABGATE_POLICY_DIR ?? SYSTEM_POLICY_DIR;
+}
+function getSystemPolicyPath() {
+    const envPath = process.env.LABGATE_POLICY_PATH;
+    if (envPath)
+        return envPath;
+    return (0, path_1.join)(getSystemPolicyDir(), SYSTEM_POLICY_FILE);
+}
+/**
+ * Search for a policy file. Returns the path if found, null otherwise.
+ */
+function findPolicyFile() {
+    const candidates = [];
+    // 1. Env var override
+    const envPath = process.env.LABGATE_POLICY_PATH;
+    if (envPath) {
+        candidates.push(envPath);
+    }
+    else {
+        // 2. System-wide location (respects LABGATE_POLICY_DIR override)
+        candidates.push(getSystemPolicyPath());
+    }
+    for (const p of candidates) {
+        if ((0, fs_1.existsSync)(p))
+            return p;
+    }
+    return null;
+}
+// ── Security checks ───────────────────────────────────────
+/**
+ * Check if a file is world-writable (other-write bit set).
+ * Returns true if the file is safe to load.
+ */
+function isFileSecure(filePath) {
+    try {
+        const stats = (0, fs_1.statSync)(filePath);
+        // Check if "others" have write permission (mode & 0o002)
+        const othersWrite = stats.mode & 0o002;
+        return othersWrite === 0;
+    }
+    catch {
+        // If we can't stat, treat as insecure
+        return false;
+    }
+}
+// ── Loading ───────────────────────────────────────────────
+/**
+ * Load and validate the admin policy file.
+ * Returns null if no policy file exists or if it's invalid/insecure.
+ */
+function loadPolicy() {
+    const policyPath = findPolicyFile();
+    if (!policyPath)
+        return null;
+    // Security: refuse world-writable policy files
+    if (!isFileSecure(policyPath)) {
+        console.error(`Warning: policy file ${policyPath} is world-writable. ` +
+            'Refusing to load — fix permissions: chmod 644 ' + policyPath);
+        return null;
+    }
+    try {
+        const rawText = (0, fs_1.readFileSync)(policyPath, 'utf-8');
+        // Strip full-line // comments (same as config)
+        const stripped = rawText
+            .split('\n')
+            .filter(line => !line.trimStart().startsWith('//'))
+            .join('\n');
+        const raw = JSON.parse(stripped);
+        const errors = validatePolicy(raw);
+        if (errors.length > 0) {
+            console.error(`Warning: invalid policy in ${policyPath}:`);
+            for (const e of errors)
+                console.error(`  - ${e}`);
+            return null;
+        }
+        return raw;
+    }
+    catch (err) {
+        console.error(`Warning: could not parse policy ${policyPath}: ${err.message}`);
+        return null;
+    }
+}
+// ── Validation ────────────────────────────────────────────
+const VALID_RUNTIMES = ['auto', 'apptainer', 'singularity', 'docker'];
+const VALID_NETWORK_MODES = ['none', 'filtered', 'host'];
+function validatePolicy(raw) {
+    const errors = [];
+    if (!raw || typeof raw !== 'object') {
+        return ['policy must be a JSON object'];
+    }
+    const p = raw;
+    if (p.version !== 1) {
+        errors.push('version must be 1');
+    }
+    if (p.institution !== undefined && typeof p.institution !== 'string') {
+        errors.push('institution must be a string');
+    }
+    // admins
+    if (!p.admins || typeof p.admins !== 'object') {
+        errors.push('admins must be an object');
+    }
+    else {
+        const admins = p.admins;
+        if (!Array.isArray(admins.usernames)) {
+            errors.push('admins.usernames must be an array of strings');
+        }
+        else {
+            for (const u of admins.usernames) {
+                if (typeof u !== 'string') {
+                    errors.push('each admins.usernames entry must be a string');
+                    break;
+                }
+            }
+        }
+    }
+    // force
+    if (p.force !== undefined) {
+        if (typeof p.force !== 'object' || p.force === null) {
+            errors.push('force must be an object');
+        }
+        else {
+            const f = p.force;
+            if (f.runtime !== undefined && !VALID_RUNTIMES.includes(f.runtime)) {
+                errors.push(`force.runtime must be one of: ${VALID_RUNTIMES.join(', ')}`);
+            }
+            if (f.image !== undefined && typeof f.image !== 'string') {
+                errors.push('force.image must be a string');
+            }
+            if (f.network_mode !== undefined && !VALID_NETWORK_MODES.includes(f.network_mode)) {
+                errors.push(`force.network_mode must be one of: ${VALID_NETWORK_MODES.join(', ')}`);
+            }
+            if (f.audit_enabled !== undefined && typeof f.audit_enabled !== 'boolean') {
+                errors.push('force.audit_enabled must be a boolean');
+            }
+            if (f.audit_log_dir !== undefined && typeof f.audit_log_dir !== 'string') {
+                errors.push('force.audit_log_dir must be a string');
+            }
+            if (f.slurm_enabled !== undefined && typeof f.slurm_enabled !== 'boolean') {
+                errors.push('force.slurm_enabled must be a boolean');
+            }
+        }
+    }
+    // constraints
+    if (p.constraints !== undefined) {
+        if (typeof p.constraints !== 'object' || p.constraints === null) {
+            errors.push('constraints must be an object');
+        }
+        else {
+            const c = p.constraints;
+            if (c.max_session_timeout_hours !== undefined) {
+                if (typeof c.max_session_timeout_hours !== 'number' || c.max_session_timeout_hours <= 0) {
+                    errors.push('constraints.max_session_timeout_hours must be a positive number');
+                }
+            }
+            for (const field of ['min_blocked_patterns', 'min_command_blacklist', 'allowed_images', 'min_allowed_domains', 'max_allowed_domains']) {
+                if (c[field] !== undefined && !Array.isArray(c[field])) {
+                    errors.push(`constraints.${field} must be an array`);
+                    continue;
+                }
+                if (Array.isArray(c[field])) {
+                    const values = c[field];
+                    for (const value of values) {
+                        if (typeof value !== 'string' || value.trim().length === 0) {
+                            errors.push(`constraints.${field} entries must be non-empty strings`);
+                            break;
+                        }
+                    }
+                }
+            }
+        }
+    }
+    // shared dirs
+    if (p.shared_sessions_dir !== undefined && typeof p.shared_sessions_dir !== 'string') {
+        errors.push('shared_sessions_dir must be a string');
+    }
+    if (p.shared_audit_dir !== undefined && typeof p.shared_audit_dir !== 'string') {
+        errors.push('shared_audit_dir must be a string');
+    }
+    return errors;
+}
+// ── Admin detection ───────────────────────────────────────
+/**
+ * Check if the current user is an admin according to the policy.
+ */
+function checkIsAdmin(policy) {
+    const currentUser = (0, os_1.userInfo)().username;
+    return policy.admins.usernames.includes(currentUser);
+}
+// ── Policy merging ────────────────────────────────────────
+/**
+ * Merge a user config with the admin policy.
+ * Returns the effective config with locked field tracking.
+ */
+function mergeWithPolicy(userConfig, policy) {
+    // Deep clone so we don't mutate the original
+    const config = JSON.parse(JSON.stringify(userConfig));
+    const lockedFields = new Set();
+    const lockedListItems = {
+        blocked_patterns: [],
+        blacklist: [],
+        allowed_domains: [],
+    };
+    const constraints = {};
+    const force = policy.force;
+    const cons = policy.constraints;
+    // ── Force fields ──────────────────────────────────────
+    if (force?.runtime !== undefined) {
+        config.runtime = force.runtime;
+        lockedFields.add('runtime');
+    }
+    if (force?.image !== undefined) {
+        config.image = force.image;
+        lockedFields.add('image');
+    }
+    if (force?.network_mode !== undefined) {
+        config.network.mode = force.network_mode;
+        lockedFields.add('network.mode');
+    }
+    if (force?.audit_enabled !== undefined) {
+        config.audit.enabled = force.audit_enabled;
+        lockedFields.add('audit.enabled');
+    }
+    if (force?.audit_log_dir !== undefined) {
+        config.audit.log_dir = force.audit_log_dir;
+        lockedFields.add('audit.log_dir');
+    }
+    if (force?.slurm_enabled !== undefined) {
+        config.slurm.enabled = force.slurm_enabled;
+        lockedFields.add('slurm.enabled');
+    }
+    // ── Constraints ───────────────────────────────────────
+    // Session timeout cap
+    if (cons?.max_session_timeout_hours !== undefined) {
+        constraints.max_session_timeout_hours = cons.max_session_timeout_hours;
+        if (config.session_timeout_hours > cons.max_session_timeout_hours) {
+            config.session_timeout_hours = cons.max_session_timeout_hours;
+        }
+    }
+    // Image whitelist
+    if (cons?.allowed_images !== undefined && cons.allowed_images.length > 0) {
+        constraints.allowed_images = cons.allowed_images;
+        // If force.image is set, it takes precedence (already applied above)
+        if (!lockedFields.has('image')) {
+            if (!cons.allowed_images.includes(config.image)) {
+                config.image = cons.allowed_images[0];
+            }
+        }
+    }
+    // Minimum blocked patterns (union with user's, admin items are non-removable)
+    if (cons?.min_blocked_patterns !== undefined) {
+        const minSet = new Set(cons.min_blocked_patterns);
+        lockedListItems.blocked_patterns = [...minSet];
+        for (const pattern of minSet) {
+            if (!config.filesystem.blocked_patterns.includes(pattern)) {
+                config.filesystem.blocked_patterns.push(pattern);
+            }
+        }
+    }
+    // Minimum command blacklist
+    if (cons?.min_command_blacklist !== undefined) {
+        const minSet = new Set(cons.min_command_blacklist);
+        lockedListItems.blacklist = [...minSet];
+        for (const cmd of minSet) {
+            if (!config.commands.blacklist.includes(cmd)) {
+                config.commands.blacklist.push(cmd);
+            }
+        }
+    }
+    // Minimum allowed domains
+    if (cons?.min_allowed_domains !== undefined) {
+        const minSet = new Set(cons.min_allowed_domains);
+        lockedListItems.allowed_domains = [...minSet];
+        for (const domain of minSet) {
+            if (!config.network.allowed_domains.includes(domain)) {
+                config.network.allowed_domains.push(domain);
+            }
+        }
+    }
+    // Maximum allowed domains (intersect)
+    if (cons?.max_allowed_domains !== undefined) {
+        const maxSet = new Set(cons.max_allowed_domains);
+        // Keep only domains that are in the max set OR in the min set
+        const minSet = new Set(cons.min_allowed_domains ?? []);
+        config.network.allowed_domains = config.network.allowed_domains.filter(d => maxSet.has(d) || minSet.has(d));
+    }
+    return { config, lockedFields, lockedListItems, constraints };
+}
+// ── Save policy ───────────────────────────────────────────
+/**
+ * Save a policy file. Uses atomic write (temp + rename) for safety on NFS.
+ */
+function savePolicy(policy, filePath) {
+    const target = filePath ?? getSystemPolicyPath();
+    const dir = (0, path_1.dirname)(target);
+    const tmpPath = (0, path_1.join)(dir, `.policy-${(0, crypto_1.randomBytes)(4).toString('hex')}.tmp`);
+    (0, fs_1.writeFileSync)(tmpPath, JSON.stringify(policy, null, 2) + '\n', {
+        encoding: 'utf-8',
+        mode: 0o644,
+    });
+    (0, fs_1.renameSync)(tmpPath, target);
+}
+//# sourceMappingURL=policy.js.map

package/dist/lib/policy.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"policy.js","sourceRoot":"","sources":["../../src/lib/policy.ts"],"names":[],"mappings":";;AAgFA,gDAEC;AAED,kDAIC;AAKD,wCAgBC;AA0BD,gCAkCC;AAOD,wCAmGC;AAOD,oCAGC;AAQD,0CAkHC;AAOD,gCAUC;AAxaD,2BAAmF;AACnF,+BAAqC;AACrC,2BAAuC;AACvC,mCAAqC;AAsErC,6DAA6D;AAE7D,MAAM,iBAAiB,GAAG,cAAc,CAAC;AACzC,MAAM,kBAAkB,GAAG,aAAa,CAAC;AAEzC,6DAA6D;AAE7D,SAAgB,kBAAkB;IAChC,OAAO,OAAO,CAAC,GAAG,CAAC,kBAAkB,IAAI,iBAAiB,CAAC;AAC7D,CAAC;AAED,SAAgB,mBAAmB;IACjC,MAAM,OAAO,GAAG,OAAO,CAAC,GAAG,CAAC,mBAAmB,CAAC;IAChD,IAAI,OAAO;QAAE,OAAO,OAAO,CAAC;IAC5B,OAAO,IAAA,WAAI,EAAC,kBAAkB,EAAE,EAAE,kBAAkB,CAAC,CAAC;AACxD,CAAC;AAED;;GAEG;AACH,SAAgB,cAAc;IAC5B,MAAM,UAAU,GAAa,EAAE,CAAC;IAEhC,sBAAsB;IACtB,MAAM,OAAO,GAAG,OAAO,CAAC,GAAG,CAAC,mBAAmB,CAAC;IAChD,IAAI,OAAO,EAAE,CAAC;QACZ,UAAU,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;IAC3B,CAAC;SAAM,CAAC;QACN,iEAAiE;QACjE,UAAU,CAAC,IAAI,CAAC,mBAAmB,EAAE,CAAC,CAAC;IACzC,CAAC;IAED,KAAK,MAAM,CAAC,IAAI,UAAU,EAAE,CAAC;QAC3B,IAAI,IAAA,eAAU,EAAC,CAAC,CAAC;YAAE,OAAO,CAAC,CAAC;IAC9B,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED,6DAA6D;AAE7D;;;GAGG;AACH,SAAS,YAAY,CAAC,QAAgB;IACpC,IAAI,CAAC;QACH,MAAM,KAAK,GAAG,IAAA,aAAQ,EAAC,QAAQ,CAAC,CAAC;QACjC,yDAAyD;QACzD,MAAM,WAAW,GAAG,KAAK,CAAC,IAAI,GAAG,KAAK,CAAC;QACvC,OAAO,WAAW,KAAK,CAAC,CAAC;IAC3B,CAAC;IAAC,MAAM,CAAC;QACP,sCAAsC;QACtC,OAAO,KAAK,CAAC;IACf,CAAC;AACH,CAAC;AAED,6DAA6D;AAE7D;;;GAGG;AACH,SAAgB,UAAU;IACxB,MAAM,UAAU,GAAG,cAAc,EAAE,CAAC;IACpC,IAAI,CAAC,UAAU;QAAE,OAAO,IAAI,CAAC;IAE7B,+CAA+C;IAC/C,IAAI,CAAC,YAAY,CAAC,UAAU,CAAC,EAAE,CAAC;QAC9B,OAAO,CAAC,KAAK,CACX,wBAAwB,UAAU,sBAAsB;YACxD,gDAAgD,GAAG,UAAU,CAC9D,CAAC;QACF,OAAO,IAAI,CAAC;IACd,CAAC;IAED,IAAI,CAAC;QACH,MAAM,OAAO,GAAG,IAAA,iBAAY,EAAC,UAAU,EAAE,OAAO,CAAC,CAAC;QAClD,+CAA+C;QAC/C,MAAM,QAAQ,GAAG,OAAO;aACrB,KAAK,CAAC,IAAI,CAAC;aACX,MAAM,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,IAAI,CAAC,SAAS,EAAE,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC;aAClD,IAAI,CAAC,IAAI,CAAC,CAAC;QACd,MAAM,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC;QAEjC,MAAM,MAAM,GAAG,cAAc,CAAC,GAAG,CAAC,CAAC;QACnC,IAAI,MAAM,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YACtB,OAAO,CAAC,KAAK,CAAC,8BAA8B,UAAU,GAAG,CAAC,CAAC;YAC3D,KAAK,MAAM,CAAC,IAAI,MAAM;gBAAE,OAAO,CAAC,KAAK,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC;YAClD,OAAO,IAAI,CAAC;QACd,CAAC;QAED,OAAO,GAAoB,CAAC;IAC9B,CAAC;IAAC,OAAO,GAAQ,EAAE,CAAC;QAClB,OAAO,CAAC,KAAK,CAAC,mCAAmC,UAAU,KAAK,GAAG,CAAC,OAAO,EAAE,CAAC,CAAC;QAC/E,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC;AAED,6DAA6D;AAE7D,MAAM,cAAc,GAAwB,CAAC,MAAM,EAAE,WAAW,EAAE,aAAa,EAAE,QAAQ,CAAC,CAAC;AAC3F,MAAM,mBAAmB,GAAG,CAAC,MAAM,EAAE,UAAU,EAAE,MAAM,CAAC,CAAC;AAEzD,SAAgB,cAAc,CAAC,GAAY;IACzC,MAAM,MAAM,GAAa,EAAE,CAAC;IAE5B,IAAI,CAAC,GAAG,IAAI,OAAO,GAAG,KAAK,QAAQ,EAAE,CAAC;QACpC,OAAO,CAAC,8BAA8B,CAAC,CAAC;IAC1C,CAAC;IAED,MAAM,CAAC,GAAG,GAA8B,CAAC;IAEzC,IAAI,CAAC,CAAC,OAAO,KAAK,CAAC,EAAE,CAAC;QACpB,MAAM,CAAC,IAAI,CAAC,mBAAmB,CAAC,CAAC;IACnC,CAAC;IAED,IAAI,CAAC,CAAC,WAAW,KAAK,SAAS,IAAI,OAAO,CAAC,CAAC,WAAW,KAAK,QAAQ,EAAE,CAAC;QACrE,MAAM,CAAC,IAAI,CAAC,8BAA8B,CAAC,CAAC;IAC9C,CAAC;IAED,SAAS;IACT,IAAI,CAAC,CAAC,CAAC,MAAM,IAAI,OAAO,CAAC,CAAC,MAAM,KAAK,QAAQ,EAAE,CAAC;QAC9C,MAAM,CAAC,IAAI,CAAC,0BAA0B,CAAC,CAAC;IAC1C,CAAC;SAAM,CAAC;QACN,MAAM,MAAM,GAAG,CAAC,CAAC,MAAiC,CAAC;QACnD,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,SAAS,CAAC,EAAE,CAAC;YACrC,MAAM,CAAC,IAAI,CAAC,8CAA8C,CAAC,CAAC;QAC9D,CAAC;aAAM,CAAC;YACN,KAAK,MAAM,CAAC,IAAI,MAAM,CAAC,SAAS,EAAE,CAAC;gBACjC,IAAI,OAAO,CAAC,KAAK,QAAQ,EAAE,CAAC;oBAC1B,MAAM,CAAC,IAAI,CAAC,8CAA8C,CAAC,CAAC;oBAC5D,MAAM;gBACR,CAAC;YACH,CAAC;QACH,CAAC;IACH,CAAC;IAED,QAAQ;IACR,IAAI,CAAC,CAAC,KAAK,KAAK,SAAS,EAAE,CAAC;QAC1B,IAAI,OAAO,CAAC,CAAC,KAAK,KAAK,QAAQ,IAAI,CAAC,CAAC,KAAK,KAAK,IAAI,EAAE,CAAC;YACpD,MAAM,CAAC,IAAI,CAAC,yBAAyB,CAAC,CAAC;QACzC,CAAC;aAAM,CAAC;YACN,MAAM,CAAC,GAAG,CAAC,CAAC,KAAgC,CAAC;YAC7C,IAAI,CAAC,CAAC,OAAO,KAAK,SAAS,IAAI,CAAC,cAAc,CAAC,QAAQ,CAAC,CAAC,CAAC,OAA4B,CAAC,EAAE,CAAC;gBACxF,MAAM,CAAC,IAAI,CAAC,iCAAiC,cAAc,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;YAC5E,CAAC;YACD,IAAI,CAAC,CAAC,KAAK,KAAK,SAAS,IAAI,OAAO,CAAC,CAAC,KAAK,KAAK,QAAQ,EAAE,CAAC;gBACzD,MAAM,CAAC,IAAI,CAAC,8BAA8B,CAAC,CAAC;YAC9C,CAAC;YACD,IAAI,CAAC,CAAC,YAAY,KAAK,SAAS,IAAI,CAAC,mBAAmB,CAAC,QAAQ,CAAC,CAAC,CAAC,YAAsB,CAAC,EAAE,CAAC;gBAC5F,MAAM,CAAC,IAAI,CAAC,sCAAsC,mBAAmB,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;YACtF,CAAC;YACD,IAAI,CAAC,CAAC,aAAa,KAAK,SAAS,IAAI,OAAO,CAAC,CAAC,aAAa,KAAK,SAAS,EAAE,CAAC;gBAC1E,MAAM,CAAC,IAAI,CAAC,uCAAuC,CAAC,CAAC;YACvD,CAAC;YACD,IAAI,CAAC,CAAC,aAAa,KAAK,SAAS,IAAI,OAAO,CAAC,CAAC,aAAa,KAAK,QAAQ,EAAE,CAAC;gBACzE,MAAM,CAAC,IAAI,CAAC,sCAAsC,CAAC,CAAC;YACtD,CAAC;YACD,IAAI,CAAC,CAAC,aAAa,KAAK,SAAS,IAAI,OAAO,CAAC,CAAC,aAAa,KAAK,SAAS,EAAE,CAAC;gBAC1E,MAAM,CAAC,IAAI,CAAC,uCAAuC,CAAC,CAAC;YACvD,CAAC;QACH,CAAC;IACH,CAAC;IAED,cAAc;IACd,IAAI,CAAC,CAAC,WAAW,KAAK,SAAS,EAAE,CAAC;QAChC,IAAI,OAAO,CAAC,CAAC,WAAW,KAAK,QAAQ,IAAI,CAAC,CAAC,WAAW,KAAK,IAAI,EAAE,CAAC;YAChE,MAAM,CAAC,IAAI,CAAC,+BAA+B,CAAC,CAAC;QAC/C,CAAC;aAAM,CAAC;YACN,MAAM,CAAC,GAAG,CAAC,CAAC,WAAsC,CAAC;YACnD,IAAI,CAAC,CAAC,yBAAyB,KAAK,SAAS,EAAE,CAAC;gBAC9C,IAAI,OAAO,CAAC,CAAC,yBAAyB,KAAK,QAAQ,IAAI,CAAC,CAAC,yBAAyB,IAAI,CAAC,EAAE,CAAC;oBACxF,MAAM,CAAC,IAAI,CAAC,iEAAiE,CAAC,CAAC;gBACjF,CAAC;YACH,CAAC;YACD,KAAK,MAAM,KAAK,IAAI,CAAC,sBAAsB,EAAE,uBAAuB,EAAE,gBAAgB,EAAE,qBAAqB,EAAE,qBAAqB,CAAC,EAAE,CAAC;gBACtI,IAAI,CAAC,CAAC,KAAK,CAAC,KAAK,SAAS,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC;oBACvD,MAAM,CAAC,IAAI,CAAC,eAAe,KAAK,mBAAmB,CAAC,CAAC;oBACrD,SAAS;gBACX,CAAC;gBACD,IAAI,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC;oBAC5B,MAAM,MAAM,GAAG,CAAC,CAAC,KAAK,CAAc,CAAC;oBACrC,KAAK,MAAM,KAAK,IAAI,MAAM,EAAE,CAAC;wBAC3B,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,IAAI,EAAE,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;4BAC3D,MAAM,CAAC,IAAI,CAAC,eAAe,KAAK,oCAAoC,CAAC,CAAC;4BACtE,MAAM;wBACR,CAAC;oBACH,CAAC;gBACH,CAAC;YACH,CAAC;QACH,CAAC;IACH,CAAC;IAED,cAAc;IACd,IAAI,CAAC,CAAC,mBAAmB,KAAK,SAAS,IAAI,OAAO,CAAC,CAAC,mBAAmB,KAAK,QAAQ,EAAE,CAAC;QACrF,MAAM,CAAC,IAAI,CAAC,sCAAsC,CAAC,CAAC;IACtD,CAAC;IACD,IAAI,CAAC,CAAC,gBAAgB,KAAK,SAAS,IAAI,OAAO,CAAC,CAAC,gBAAgB,KAAK,QAAQ,EAAE,CAAC;QAC/E,MAAM,CAAC,IAAI,CAAC,mCAAmC,CAAC,CAAC;IACnD,CAAC;IAED,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,6DAA6D;AAE7D;;GAEG;AACH,SAAgB,YAAY,CAAC,MAAqB;IAChD,MAAM,WAAW,GAAG,IAAA,aAAQ,GAAE,CAAC,QAAQ,CAAC;IACxC,OAAO,MAAM,CAAC,MAAM,CAAC,SAAS,CAAC,QAAQ,CAAC,WAAW,CAAC,CAAC;AACvD,CAAC;AAED,6DAA6D;AAE7D;;;GAGG;AACH,SAAgB,eAAe,CAC7B,UAAyB,EACzB,MAAqB;IAErB,6CAA6C;IAC7C,MAAM,MAAM,GAAkB,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,UAAU,CAAC,CAAC,CAAC;IACrE,MAAM,YAAY,GAAG,IAAI,GAAG,EAAU,CAAC;IACvC,MAAM,eAAe,GAAG;QACtB,gBAAgB,EAAE,EAAc;QAChC,SAAS,EAAE,EAAc;QACzB,eAAe,EAAE,EAAc;KAChC,CAAC;IACF,MAAM,WAAW,GAAqC,EAAE,CAAC;IAEzD,MAAM,KAAK,GAAG,MAAM,CAAC,KAAK,CAAC;IAC3B,MAAM,IAAI,GAAG,MAAM,CAAC,WAAW,CAAC;IAEhC,yDAAyD;IAEzD,IAAI,KAAK,EAAE,OAAO,KAAK,SAAS,EAAE,CAAC;QACjC,MAAM,CAAC,OAAO,GAAG,KAAK,CAAC,OAAO,CAAC;QAC/B,YAAY,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;IAC9B,CAAC;IAED,IAAI,KAAK,EAAE,KAAK,KAAK,SAAS,EAAE,CAAC;QAC/B,MAAM,CAAC,KAAK,GAAG,KAAK,CAAC,KAAK,CAAC;QAC3B,YAAY,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;IAC5B,CAAC;IAED,IAAI,KAAK,EAAE,YAAY,KAAK,SAAS,EAAE,CAAC;QACtC,MAAM,CAAC,OAAO,CAAC,IAAI,GAAG,KAAK,CAAC,YAAY,CAAC;QACzC,YAAY,CAAC,GAAG,CAAC,cAAc,CAAC,CAAC;IACnC,CAAC;IAED,IAAI,KAAK,EAAE,aAAa,KAAK,SAAS,EAAE,CAAC;QACvC,MAAM,CAAC,KAAK,CAAC,OAAO,GAAG,KAAK,CAAC,aAAa,CAAC;QAC3C,YAAY,CAAC,GAAG,CAAC,eAAe,CAAC,CAAC;IACpC,CAAC;IAED,IAAI,KAAK,EAAE,aAAa,KAAK,SAAS,EAAE,CAAC;QACvC,MAAM,CAAC,KAAK,CAAC,OAAO,GAAG,KAAK,CAAC,aAAa,CAAC;QAC3C,YAAY,CAAC,GAAG,CAAC,eAAe,CAAC,CAAC;IACpC,CAAC;IAED,IAAI,KAAK,EAAE,aAAa,KAAK,SAAS,EAAE,CAAC;QACvC,MAAM,CAAC,KAAK,CAAC,OAAO,GAAG,KAAK,CAAC,aAAa,CAAC;QAC3C,YAAY,CAAC,GAAG,CAAC,eAAe,CAAC,CAAC;IACpC,CAAC;IAED,yDAAyD;IAEzD,sBAAsB;IACtB,IAAI,IAAI,EAAE,yBAAyB,KAAK,SAAS,EAAE,CAAC;QAClD,WAAW,CAAC,yBAAyB,GAAG,IAAI,CAAC,yBAAyB,CAAC;QACvE,IAAI,MAAM,CAAC,qBAAqB,GAAG,IAAI,CAAC,yBAAyB,EAAE,CAAC;YAClE,MAAM,CAAC,qBAAqB,GAAG,IAAI,CAAC,yBAAyB,CAAC;QAChE,CAAC;IACH,CAAC;IAED,kBAAkB;IAClB,IAAI,IAAI,EAAE,cAAc,KAAK,SAAS,IAAI,IAAI,CAAC,cAAc,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACzE,WAAW,CAAC,cAAc,GAAG,IAAI,CAAC,cAAc,CAAC;QACjD,qEAAqE;QACrE,IAAI,CAAC,YAAY,CAAC,GAAG,CAAC,OAAO,CAAC,EAAE,CAAC;YAC/B,IAAI,CAAC,IAAI,CAAC,cAAc,CAAC,QAAQ,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC;gBAChD,MAAM,CAAC,KAAK,GAAG,IAAI,CAAC,cAAc,CAAC,CAAC,CAAC,CAAC;YACxC,CAAC;QACH,CAAC;IACH,CAAC;IAED,8EAA8E;IAC9E,IAAI,IAAI,EAAE,oBAAoB,KAAK,SAAS,EAAE,CAAC;QAC7C,MAAM,MAAM,GAAG,IAAI,GAAG,CAAC,IAAI,CAAC,oBAAoB,CAAC,CAAC;QAClD,eAAe,CAAC,gBAAgB,GAAG,CAAC,GAAG,MAAM,CAAC,CAAC;QAC/C,KAAK,MAAM,OAAO,IAAI,MAAM,EAAE,CAAC;YAC7B,IAAI,CAAC,MAAM,CAAC,UAAU,CAAC,gBAAgB,CAAC,QAAQ,CAAC,OAAO,CAAC,EAAE,CAAC;gBAC1D,MAAM,CAAC,UAAU,CAAC,gBAAgB,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;YACnD,CAAC;QACH,CAAC;IACH,CAAC;IAED,4BAA4B;IAC5B,IAAI,IAAI,EAAE,qBAAqB,KAAK,SAAS,EAAE,CAAC;QAC9C,MAAM,MAAM,GAAG,IAAI,GAAG,CAAC,IAAI,CAAC,qBAAqB,CAAC,CAAC;QACnD,eAAe,CAAC,SAAS,GAAG,CAAC,GAAG,MAAM,CAAC,CAAC;QACxC,KAAK,MAAM,GAAG,IAAI,MAAM,EAAE,CAAC;YACzB,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,SAAS,CAAC,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC;gBAC7C,MAAM,CAAC,QAAQ,CAAC,SAAS,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;YACtC,CAAC;QACH,CAAC;IACH,CAAC;IAED,0BAA0B;IAC1B,IAAI,IAAI,EAAE,mBAAmB,KAAK,SAAS,EAAE,CAAC;QAC5C,MAAM,MAAM,GAAG,IAAI,GAAG,CAAC,IAAI,CAAC,mBAAmB,CAAC,CAAC;QACjD,eAAe,CAAC,eAAe,GAAG,CAAC,GAAG,MAAM,CAAC,CAAC;QAC9C,KAAK,MAAM,MAAM,IAAI,MAAM,EAAE,CAAC;YAC5B,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC,eAAe,CAAC,QAAQ,CAAC,MAAM,CAAC,EAAE,CAAC;gBACrD,MAAM,CAAC,OAAO,CAAC,eAAe,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;YAC9C,CAAC;QACH,CAAC;IACH,CAAC;IAED,sCAAsC;IACtC,IAAI,IAAI,EAAE,mBAAmB,KAAK,SAAS,EAAE,CAAC;QAC5C,MAAM,MAAM,GAAG,IAAI,GAAG,CAAC,IAAI,CAAC,mBAAmB,CAAC,CAAC;QACjD,8DAA8D;QAC9D,MAAM,MAAM,GAAG,IAAI,GAAG,CAAC,IAAI,CAAC,mBAAmB,IAAI,EAAE,CAAC,CAAC;QACvD,MAAM,CAAC,OAAO,CAAC,eAAe,GAAG,MAAM,CAAC,OAAO,CAAC,eAAe,CAAC,MAAM,CACpE,CAAC,CAAC,EAAE,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,CACpC,CAAC;IACJ,CAAC;IAED,OAAO,EAAE,MAAM,EAAE,YAAY,EAAE,eAAe,EAAE,WAAW,EAAE,CAAC;AAChE,CAAC;AAED,6DAA6D;AAE7D;;GAEG;AACH,SAAgB,UAAU,CAAC,MAAqB,EAAE,QAAiB;IACjE,MAAM,MAAM,GAAG,QAAQ,IAAI,mBAAmB,EAAE,CAAC;IACjD,MAAM,GAAG,GAAG,IAAA,cAAO,EAAC,MAAM,CAAC,CAAC;IAC5B,MAAM,OAAO,GAAG,IAAA,WAAI,EAAC,GAAG,EAAE,WAAW,IAAA,oBAAW,EAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;IAE3E,IAAA,kBAAa,EAAC,OAAO,EAAE,IAAI,CAAC,SAAS,CAAC,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC,GAAG,IAAI,EAAE;QAC7D,QAAQ,EAAE,OAAO;QACjB,IAAI,EAAE,KAAK;KACZ,CAAC,CAAC;IACH,IAAA,eAAU,EAAC,OAAO,EAAE,MAAM,CAAC,CAAC;AAC9B,CAAC"}

package/dist/lib/runtime.d.ts

@@ -1,5 +1,5 @@
 import { RuntimePreference } from './config.js';
-export type RuntimeType = 'apptainer' | 'singularity' | 'podman' | 'docker';
+export type RuntimeType = 'apptainer' | 'singularity' | 'docker';
 export interface RuntimeCheck {
     ok: boolean;
     runtime?: RuntimeType;
@@ -8,7 +8,7 @@ export interface RuntimeCheck {
 }
 /** Apptainer or Singularity — SIF-based runtimes */
 export declare function isApptainerFamily(rt: RuntimeType): boolean;
-/** Podman or Docker — OCI container runtimes */
+/** Docker — OCI container runtime */
 export declare function isOciFamily(rt: RuntimeType): boolean;
 export declare function checkRuntime(preferred?: RuntimePreference): RuntimeCheck;
 /**

package/dist/lib/runtime.js

@@ -46,17 +46,17 @@ const log = __importStar(require("./log.js"));
 function isApptainerFamily(rt) {
     return rt === 'apptainer' || rt === 'singularity';
 }
-/** Podman or Docker — OCI container runtimes */
+/** Docker — OCI container runtime */
 function isOciFamily(rt) {
-    return rt === 'podman' || rt === 'docker';
+    return rt === 'docker';
 }
 /**
  * Detection order when preference is 'auto':
- *   apptainer → singularity → podman
+ *   apptainer → singularity
  * Docker is not auto-detected (requires root/group on most HPC systems).
  * Users can still set runtime: "docker" explicitly if needed.
  */
-const AUTO_ORDER = ['apptainer', 'singularity', 'podman'];
+const AUTO_ORDER = ['apptainer', 'singularity'];
 function tryRuntime(cmd) {
     try {
         const version = (0, child_process_1.execFileSync)(cmd, ['--version'], {
@@ -65,7 +65,7 @@ function tryRuntime(cmd) {
         }).trim();
         // For OCI runtimes, verify daemon access — `docker --version` succeeds
         // even without permission to the Docker socket
-        if (cmd === 'docker' || cmd === 'podman') {
+        if (cmd === 'docker') {
             (0, child_process_1.execFileSync)(cmd, ['info'], { stdio: 'ignore', timeout: 10000 });
         }
         return { ok: true, runtime: cmd, version };
@@ -97,11 +97,12 @@ function checkRuntime(preferred) {
             '',
             'LabGate needs a container runtime. Install one of:',
             '  apptainer — https://apptainer.org/docs/admin/main/installation.html',
-            '  podman    — https://podman.io/getting-started/installation',
+            '  singularity — https://docs.sylabs.io/guides/latest/user-guide/quick_start.html',
+            '  docker (optional) — https://docs.docker.com/engine/install/',
             '',
             'On HPC clusters, apptainer is usually pre-installed (module load apptainer).',
-            'On RHEL/CentOS/Fedora:  sudo dnf install podman',
-            'On Ubuntu/Debian:       sudo apt install podman',
+            'On Ubuntu/Debian:       sudo apt install apptainer',
+            'On RHEL/CentOS/Fedora:  sudo dnf install apptainer',
         ].join('\n'),
     };
 }
@@ -137,34 +138,7 @@ function prompt(question) {
 function getInstallOptions() {
     const os = (0, os_1.platform)();
     const options = [];
-    if (os === 'darwin') {
-        if (hasCommand('brew')) {
-            options.push({
-                name: 'podman',
-                description: 'Podman via Homebrew (recommended for macOS)',
-                commands: [
-                    'brew install podman',
-                    'podman machine init',
-                    'podman machine start',
-                ],
-            });
-        }
-    }
-    else if (os === 'linux') {
-        if (hasCommand('apt-get')) {
-            options.push({
-                name: 'podman',
-                description: 'Podman via apt',
-                commands: ['sudo apt-get update', 'sudo apt-get install -y podman'],
-            });
-        }
-        else if (hasCommand('dnf')) {
-            options.push({
-                name: 'podman',
-                description: 'Podman via dnf',
-                commands: ['sudo dnf install -y podman'],
-            });
-        }
+    if (os === 'linux') {
         // Apptainer on Linux via apt/dnf repos
         if (hasCommand('apt-get')) {
             options.push({
@@ -179,6 +153,15 @@ function getInstallOptions() {
                 ],
             });
         }
+        else if (hasCommand('dnf')) {
+            options.push({
+                name: 'apptainer',
+                description: 'Apptainer via dnf',
+                commands: [
+                    'sudo dnf install -y apptainer',
+                ],
+            });
+        }
     }
     return options;
 }

package/dist/lib/runtime.js.map

@@ -1 +1 @@
-{"version":3,"file":"runtime.js","sourceRoot":"","sources":["../../src/lib/runtime.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAgBA,8CAEC;AAGD,kCAEC;AA6BD,oCA8BC;AAMD,gCAIC;AAkFD,sCA8CC;AA5ND,iDAAuD;AACvD,uCAA2C;AAC3C,2BAA8B;AAE9B,8CAAgC;AAWhC,oDAAoD;AACpD,SAAgB,iBAAiB,CAAC,EAAe;IAC/C,OAAO,EAAE,KAAK,WAAW,IAAI,EAAE,KAAK,aAAa,CAAC;AACpD,CAAC;AAED,gDAAgD;AAChD,SAAgB,WAAW,CAAC,EAAe;IACzC,OAAO,EAAE,KAAK,QAAQ,IAAI,EAAE,KAAK,QAAQ,CAAC;AAC5C,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,GAAkB,CAAC,WAAW,EAAE,aAAa,EAAE,QAAQ,CAAC,CAAC;AAEzE,SAAS,UAAU,CAAC,GAAgB;IAClC,IAAI,CAAC;QACH,MAAM,OAAO,GAAG,IAAA,4BAAY,EAAC,GAAG,EAAE,CAAC,WAAW,CAAC,EAAE;YAC/C,QAAQ,EAAE,OAAO;YACjB,OAAO,EAAE,IAAI;SACd,CAAC,CAAC,IAAI,EAAE,CAAC;QAEV,uEAAuE;QACvE,+CAA+C;QAC/C,IAAI,GAAG,KAAK,QAAQ,IAAI,GAAG,KAAK,QAAQ,EAAE,CAAC;YACzC,IAAA,4BAAY,EAAC,GAAG,EAAE,CAAC,MAAM,CAAC,EAAE,EAAE,KAAK,EAAE,QAAQ,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC,CAAC;QACnE,CAAC;QAED,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,GAAG,EAAE,OAAO,EAAE,CAAC;IAC7C,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC;AAED,SAAgB,YAAY,CAAC,SAA6B;IACxD,IAAI,SAAS,IAAI,SAAS,KAAK,MAAM,EAAE,CAAC;QACtC,MAAM,MAAM,GAAG,UAAU,CAAC,SAAwB,CAAC,CAAC;QACpD,IAAI,MAAM;YAAE,OAAO,MAAM,CAAC;QAC1B,2DAA2D;QAC3D,OAAO;YACL,EAAE,EAAE,KAAK;YACT,KAAK,EAAE,6BAA6B,SAAS,wFAAwF;SACtI,CAAC;IACJ,CAAC;IAED,KAAK,MAAM,GAAG,IAAI,UAAU,EAAE,CAAC;QAC7B,MAAM,MAAM,GAAG,UAAU,CAAC,GAAG,CAAC,CAAC;QAC/B,IAAI,MAAM;YAAE,OAAO,MAAM,CAAC;IAC5B,CAAC;IAED,OAAO;QACL,EAAE,EAAE,KAAK;QACT,KAAK,EAAE;YACL,4CAA4C;YAC5C,EAAE;YACF,oDAAoD;YACpD,uEAAuE;YACvE,8DAA8D;YAC9D,EAAE;YACF,8EAA8E;YAC9E,iDAAiD;YACjD,iDAAiD;SAClD,CAAC,IAAI,CAAC,IAAI,CAAC;KACb,CAAC;AACJ,CAAC;AAED;;;GAGG;AACH,SAAgB,UAAU,CAAC,SAA6B;IACtD,MAAM,KAAK,GAAG,YAAY,CAAC,SAAS,CAAC,CAAC;IACtC,IAAI,CAAC,KAAK,CAAC,EAAE;QAAE,MAAM,IAAI,KAAK,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;IAC5C,OAAO,KAAK,CAAC,OAAQ,CAAC;AACxB,CAAC;AAED,6DAA6D;AAE7D,SAAS,UAAU,CAAC,GAAW;IAC7B,IAAI,CAAC;QACH,IAAA,4BAAY,EAAC,OAAO,EAAE,CAAC,GAAG,CAAC,EAAE,EAAE,KAAK,EAAE,QAAQ,EAAE,CAAC,CAAC;QAClD,OAAO,IAAI,CAAC;IACd,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,KAAK,CAAC;IACf,CAAC;AACH,CAAC;AAED,SAAS,MAAM,CAAC,QAAgB;IAC9B,MAAM,EAAE,GAAG,IAAA,0BAAe,EAAC,EAAE,KAAK,EAAE,OAAO,CAAC,KAAK,EAAE,MAAM,EAAE,OAAO,CAAC,MAAM,EAAE,CAAC,CAAC;IAC7E,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,EAAE;QAC7B,EAAE,CAAC,QAAQ,CAAC,QAAQ,EAAE,CAAC,MAAM,EAAE,EAAE;YAC/B,EAAE,CAAC,KAAK,EAAE,CAAC;YACX,OAAO,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC,CAAC;QACvC,CAAC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;AACL,CAAC;AAQD,SAAS,iBAAiB;IACxB,MAAM,EAAE,GAAG,IAAA,aAAQ,GAAE,CAAC;IACtB,MAAM,OAAO,GAAoB,EAAE,CAAC;IAEpC,IAAI,EAAE,KAAK,QAAQ,EAAE,CAAC;QACpB,IAAI,UAAU,CAAC,MAAM,CAAC,EAAE,CAAC;YACvB,OAAO,CAAC,IAAI,CAAC;gBACX,IAAI,EAAE,QAAQ;gBACd,WAAW,EAAE,6CAA6C;gBAC1D,QAAQ,EAAE;oBACR,qBAAqB;oBACrB,qBAAqB;oBACrB,sBAAsB;iBACvB;aACF,CAAC,CAAC;QACL,CAAC;IACH,CAAC;SAAM,IAAI,EAAE,KAAK,OAAO,EAAE,CAAC;QAC1B,IAAI,UAAU,CAAC,SAAS,CAAC,EAAE,CAAC;YAC1B,OAAO,CAAC,IAAI,CAAC;gBACX,IAAI,EAAE,QAAQ;gBACd,WAAW,EAAE,gBAAgB;gBAC7B,QAAQ,EAAE,CAAC,qBAAqB,EAAE,gCAAgC,CAAC;aACpE,CAAC,CAAC;QACL,CAAC;aAAM,IAAI,UAAU,CAAC,KAAK,CAAC,EAAE,CAAC;YAC7B,OAAO,CAAC,IAAI,CAAC;gBACX,IAAI,EAAE,QAAQ;gBACd,WAAW,EAAE,gBAAgB;gBAC7B,QAAQ,EAAE,CAAC,4BAA4B,CAAC;aACzC,CAAC,CAAC;QACL,CAAC;QACD,uCAAuC;QACvC,IAAI,UAAU,CAAC,SAAS,CAAC,EAAE,CAAC;YAC1B,OAAO,CAAC,IAAI,CAAC;gBACX,IAAI,EAAE,WAAW;gBACjB,WAAW,EAAE,6BAA6B;gBAC1C,QAAQ,EAAE;oBACR,qBAAqB;oBACrB,oDAAoD;oBACpD,8CAA8C;oBAC9C,qBAAqB;oBACrB,mCAAmC;iBACpC;aACF,CAAC,CAAC;QACL,CAAC;IACH,CAAC;IAED,OAAO,OAAO,CAAC;AACjB,CAAC;AAED;;;GAGG;AACI,KAAK,UAAU,aAAa,CAAC,SAA6B;IAC/D,0CAA0C;IAC1C,MAAM,QAAQ,GAAG,YAAY,CAAC,SAAS,CAAC,CAAC;IACzC,IAAI,QAAQ,CAAC,EAAE;QAAE,OAAO,QAAQ,CAAC;IAEjC,MAAM,OAAO,GAAG,iBAAiB,EAAE,CAAC;IAEpC,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACzB,gDAAgD;QAChD,OAAO,CAAC,KAAK,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;QAC9B,OAAO,QAAQ,CAAC;IAClB,CAAC;IAED,GAAG,CAAC,IAAI,CAAC,+BAA+B,CAAC,CAAC;IAC1C,OAAO,CAAC,KAAK,CAAC,4BAA4B,CAAC,CAAC;IAC5C,OAAO,CAAC,OAAO,CAAC,CAAC,GAAG,EAAE,CAAC,EAAE,EAAE;QACzB,OAAO,CAAC,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,KAAK,GAAG,CAAC,WAAW,EAAE,CAAC,CAAC;IAClD,CAAC,CAAC,CAAC;IACH,OAAO,CAAC,KAAK,CAAC,kBAAkB,CAAC,CAAC;IAClC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;IAElB,MAAM,MAAM,GAAG,MAAM,MAAM,CAAC,qBAAqB,CAAC,CAAC;IACnD,MAAM,MAAM,GAAG,MAAM,KAAK,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;IAExD,IAAI,KAAK,CAAC,MAAM,CAAC,IAAI,MAAM,KAAK,CAAC,IAAI,MAAM,GAAG,OAAO,CAAC,MAAM,EAAE,CAAC;QAC7D,OAAO,CAAC,KAAK,CAAC,kCAAkC,CAAC,CAAC;QAClD,OAAO,QAAQ,CAAC;IAClB,CAAC;IAED,MAAM,QAAQ,GAAG,OAAO,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC;IACrC,GAAG,CAAC,IAAI,CAAC,cAAc,QAAQ,CAAC,IAAI,KAAK,CAAC,CAAC;IAE3C,KAAK,MAAM,GAAG,IAAI,QAAQ,CAAC,QAAQ,EAAE,CAAC;QACpC,OAAO,CAAC,GAAG,CAAC,KAAK,GAAG,EAAE,CAAC,CAAC;QACxB,IAAI,CAAC;YACH,IAAA,wBAAQ,EAAC,GAAG,EAAE,EAAE,KAAK,EAAE,SAAS,EAAE,CAAC,CAAC;QACtC,CAAC;QAAC,OAAO,GAAQ,EAAE,CAAC;YAClB,OAAO,CAAC,KAAK,CAAC,qBAAqB,GAAG,CAAC,OAAO,EAAE,CAAC,CAAC;YAClD,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,cAAc,QAAQ,CAAC,IAAI,UAAU,EAAE,CAAC;QACrE,CAAC;IACH,CAAC;IAED,GAAG,CAAC,OAAO,CAAC,GAAG,QAAQ,CAAC,IAAI,aAAa,CAAC,CAAC;IAE3C,WAAW;IACX,OAAO,YAAY,CAAC,SAAS,CAAC,CAAC;AACjC,CAAC"}
+{"version":3,"file":"runtime.js","sourceRoot":"","sources":["../../src/lib/runtime.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAgBA,8CAEC;AAGD,kCAEC;AA6BD,oCA+BC;AAMD,gCAIC;AAiED,sCA8CC;AA5MD,iDAAuD;AACvD,uCAA2C;AAC3C,2BAA8B;AAE9B,8CAAgC;AAWhC,oDAAoD;AACpD,SAAgB,iBAAiB,CAAC,EAAe;IAC/C,OAAO,EAAE,KAAK,WAAW,IAAI,EAAE,KAAK,aAAa,CAAC;AACpD,CAAC;AAED,qCAAqC;AACrC,SAAgB,WAAW,CAAC,EAAe;IACzC,OAAO,EAAE,KAAK,QAAQ,CAAC;AACzB,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,GAAkB,CAAC,WAAW,EAAE,aAAa,CAAC,CAAC;AAE/D,SAAS,UAAU,CAAC,GAAgB;IAClC,IAAI,CAAC;QACH,MAAM,OAAO,GAAG,IAAA,4BAAY,EAAC,GAAG,EAAE,CAAC,WAAW,CAAC,EAAE;YAC/C,QAAQ,EAAE,OAAO;YACjB,OAAO,EAAE,IAAI;SACd,CAAC,CAAC,IAAI,EAAE,CAAC;QAEV,uEAAuE;QACvE,+CAA+C;QAC/C,IAAI,GAAG,KAAK,QAAQ,EAAE,CAAC;YACrB,IAAA,4BAAY,EAAC,GAAG,EAAE,CAAC,MAAM,CAAC,EAAE,EAAE,KAAK,EAAE,QAAQ,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC,CAAC;QACnE,CAAC;QAED,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,GAAG,EAAE,OAAO,EAAE,CAAC;IAC7C,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC;AAED,SAAgB,YAAY,CAAC,SAA6B;IACxD,IAAI,SAAS,IAAI,SAAS,KAAK,MAAM,EAAE,CAAC;QACtC,MAAM,MAAM,GAAG,UAAU,CAAC,SAAwB,CAAC,CAAC;QACpD,IAAI,MAAM;YAAE,OAAO,MAAM,CAAC;QAC1B,2DAA2D;QAC3D,OAAO;YACL,EAAE,EAAE,KAAK;YACT,KAAK,EAAE,6BAA6B,SAAS,wFAAwF;SACtI,CAAC;IACJ,CAAC;IAED,KAAK,MAAM,GAAG,IAAI,UAAU,EAAE,CAAC;QAC7B,MAAM,MAAM,GAAG,UAAU,CAAC,GAAG,CAAC,CAAC;QAC/B,IAAI,MAAM;YAAE,OAAO,MAAM,CAAC;IAC5B,CAAC;IAED,OAAO;QACL,EAAE,EAAE,KAAK;QACT,KAAK,EAAE;YACL,4CAA4C;YAC5C,EAAE;YACF,oDAAoD;YACpD,uEAAuE;YACvE,kFAAkF;YAClF,+DAA+D;YAC/D,EAAE;YACF,8EAA8E;YAC9E,oDAAoD;YACpD,oDAAoD;SACrD,CAAC,IAAI,CAAC,IAAI,CAAC;KACb,CAAC;AACJ,CAAC;AAED;;;GAGG;AACH,SAAgB,UAAU,CAAC,SAA6B;IACtD,MAAM,KAAK,GAAG,YAAY,CAAC,SAAS,CAAC,CAAC;IACtC,IAAI,CAAC,KAAK,CAAC,EAAE;QAAE,MAAM,IAAI,KAAK,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;IAC5C,OAAO,KAAK,CAAC,OAAQ,CAAC;AACxB,CAAC;AAED,6DAA6D;AAE7D,SAAS,UAAU,CAAC,GAAW;IAC7B,IAAI,CAAC;QACH,IAAA,4BAAY,EAAC,OAAO,EAAE,CAAC,GAAG,CAAC,EAAE,EAAE,KAAK,EAAE,QAAQ,EAAE,CAAC,CAAC;QAClD,OAAO,IAAI,CAAC;IACd,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,KAAK,CAAC;IACf,CAAC;AACH,CAAC;AAED,SAAS,MAAM,CAAC,QAAgB;IAC9B,MAAM,EAAE,GAAG,IAAA,0BAAe,EAAC,EAAE,KAAK,EAAE,OAAO,CAAC,KAAK,EAAE,MAAM,EAAE,OAAO,CAAC,MAAM,EAAE,CAAC,CAAC;IAC7E,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,EAAE;QAC7B,EAAE,CAAC,QAAQ,CAAC,QAAQ,EAAE,CAAC,MAAM,EAAE,EAAE;YAC/B,EAAE,CAAC,KAAK,EAAE,CAAC;YACX,OAAO,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC,CAAC;QACvC,CAAC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;AACL,CAAC;AAQD,SAAS,iBAAiB;IACxB,MAAM,EAAE,GAAG,IAAA,aAAQ,GAAE,CAAC;IACtB,MAAM,OAAO,GAAoB,EAAE,CAAC;IAEpC,IAAI,EAAE,KAAK,OAAO,EAAE,CAAC;QACnB,uCAAuC;QACvC,IAAI,UAAU,CAAC,SAAS,CAAC,EAAE,CAAC;YAC1B,OAAO,CAAC,IAAI,CAAC;gBACX,IAAI,EAAE,WAAW;gBACjB,WAAW,EAAE,6BAA6B;gBAC1C,QAAQ,EAAE;oBACR,qBAAqB;oBACrB,oDAAoD;oBACpD,8CAA8C;oBAC9C,qBAAqB;oBACrB,mCAAmC;iBACpC;aACF,CAAC,CAAC;QACL,CAAC;aAAM,IAAI,UAAU,CAAC,KAAK,CAAC,EAAE,CAAC;YAC7B,OAAO,CAAC,IAAI,CAAC;gBACX,IAAI,EAAE,WAAW;gBACjB,WAAW,EAAE,mBAAmB;gBAChC,QAAQ,EAAE;oBACR,+BAA+B;iBAChC;aACF,CAAC,CAAC;QACL,CAAC;IACH,CAAC;IAED,OAAO,OAAO,CAAC;AACjB,CAAC;AAED;;;GAGG;AACI,KAAK,UAAU,aAAa,CAAC,SAA6B;IAC/D,0CAA0C;IAC1C,MAAM,QAAQ,GAAG,YAAY,CAAC,SAAS,CAAC,CAAC;IACzC,IAAI,QAAQ,CAAC,EAAE;QAAE,OAAO,QAAQ,CAAC;IAEjC,MAAM,OAAO,GAAG,iBAAiB,EAAE,CAAC;IAEpC,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACzB,gDAAgD;QAChD,OAAO,CAAC,KAAK,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;QAC9B,OAAO,QAAQ,CAAC;IAClB,CAAC;IAED,GAAG,CAAC,IAAI,CAAC,+BAA+B,CAAC,CAAC;IAC1C,OAAO,CAAC,KAAK,CAAC,4BAA4B,CAAC,CAAC;IAC5C,OAAO,CAAC,OAAO,CAAC,CAAC,GAAG,EAAE,CAAC,EAAE,EAAE;QACzB,OAAO,CAAC,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,KAAK,GAAG,CAAC,WAAW,EAAE,CAAC,CAAC;IAClD,CAAC,CAAC,CAAC;IACH,OAAO,CAAC,KAAK,CAAC,kBAAkB,CAAC,CAAC;IAClC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;IAElB,MAAM,MAAM,GAAG,MAAM,MAAM,CAAC,qBAAqB,CAAC,CAAC;IACnD,MAAM,MAAM,GAAG,MAAM,KAAK,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;IAExD,IAAI,KAAK,CAAC,MAAM,CAAC,IAAI,MAAM,KAAK,CAAC,IAAI,MAAM,GAAG,OAAO,CAAC,MAAM,EAAE,CAAC;QAC7D,OAAO,CAAC,KAAK,CAAC,kCAAkC,CAAC,CAAC;QAClD,OAAO,QAAQ,CAAC;IAClB,CAAC;IAED,MAAM,QAAQ,GAAG,OAAO,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC;IACrC,GAAG,CAAC,IAAI,CAAC,cAAc,QAAQ,CAAC,IAAI,KAAK,CAAC,CAAC;IAE3C,KAAK,MAAM,GAAG,IAAI,QAAQ,CAAC,QAAQ,EAAE,CAAC;QACpC,OAAO,CAAC,GAAG,CAAC,KAAK,GAAG,EAAE,CAAC,CAAC;QACxB,IAAI,CAAC;YACH,IAAA,wBAAQ,EAAC,GAAG,EAAE,EAAE,KAAK,EAAE,SAAS,EAAE,CAAC,CAAC;QACtC,CAAC;QAAC,OAAO,GAAQ,EAAE,CAAC;YAClB,OAAO,CAAC,KAAK,CAAC,qBAAqB,GAAG,CAAC,OAAO,EAAE,CAAC,CAAC;YAClD,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,cAAc,QAAQ,CAAC,IAAI,UAAU,EAAE,CAAC;QACrE,CAAC;IACH,CAAC;IAED,GAAG,CAAC,OAAO,CAAC,GAAG,QAAQ,CAAC,IAAI,aAAa,CAAC,CAAC;IAE3C,WAAW;IACX,OAAO,YAAY,CAAC,SAAS,CAAC,CAAC;AACjC,CAAC"}

package/dist/lib/slurm-db.d.ts

@@ -0,0 +1,51 @@
+export type SlurmJobState = 'PENDING' | 'RUNNING' | 'COMPLETING' | 'COMPLETED' | 'FAILED' | 'CANCELLED' | 'TIMEOUT' | 'NODE_FAIL' | 'PREEMPTED' | 'OUT_OF_MEMORY' | 'SUSPENDED' | 'UNKNOWN';
+export declare const TERMINAL_STATES: ReadonlySet<string>;
+export interface SlurmJob {
+    job_id: string;
+    name: string | null;
+    state: SlurmJobState;
+    submit_time: string;
+    start_time: string | null;
+    end_time: string | null;
+    partition: string | null;
+    nodes: string | null;
+    num_nodes: number | null;
+    num_tasks: number | null;
+    cpus_per_task: number | null;
+    mem: string | null;
+    stdout_path: string | null;
+    stderr_path: string | null;
+    stdout_size: number | null;
+    stderr_size: number | null;
+    command: string | null;
+    script_path: string | null;
+    session_id: string | null;
+    workdir: string | null;
+    exit_code: number | null;
+    account: string | null;
+    qos: string | null;
+    time_limit: string | null;
+    notes: string | null;
+    discovered_at: string;
+    updated_at: string;
+}
+export interface ListJobsOptions {
+    state?: string;
+    session_id?: string;
+    search?: string;
+    limit?: number;
+    offset?: number;
+}
+export declare class SlurmJobDB {
+    private db;
+    constructor(dbPath: string);
+    upsertJob(job: Partial<SlurmJob> & {
+        job_id: string;
+    }): void;
+    updateJobNotes(jobId: string, notes: string | null): boolean;
+    getJob(jobId: string): SlurmJob | null;
+    listJobs(opts?: ListJobsOptions): SlurmJob[];
+    getActiveJobIds(): string[];
+    getJobCount(state?: string): number;
+    close(): void;
+}