lastlight 0.1.15 → 0.2.0

package/dist/sandbox/docker.js

@@ -5,6 +5,8 @@ import { dirname, isAbsolute, join, relative, resolve } from "path";
 import { randomUUID } from "crypto";
 const execFileAsync = promisify(execFileCb);
 const WORKSPACE_DIR = "/home/agent/workspace";
+/** Shared package-manager download cache mount (issue #107). */
+const PKG_CACHE_DIR = "/cache";
 export class DockerSandbox {
     config;
     activeContainers = new Map();
@@ -17,9 +19,9 @@ export class DockerSandbox {
     async create(opts) {
         const containerName = `lastlight-sandbox-${opts.taskId}-${randomUUID().slice(0, 8)}`;
         const worktreePath = resolve(opts.worktreePath);
-        // Shared data — mounted at /data inside the sandbox. Contains claude auth,
-        // session logs, etc. (see deploy/sandbox-entrypoint.sh for the layout it
-        // expects).
+        // Shared data — mounted at /data inside the sandbox. Contains secrets
+        // (app.pem) and the opencode-home session-jsonl tree (see
+        // deploy/sandbox-entrypoint.sh for the layout it expects).
         //
         // SANDBOX_DATA_VOLUME accepts either:
         //   - a Docker named volume name (e.g. "lastlight_agent-data") — used in
@@ -33,28 +35,99 @@ export class DockerSandbox {
         const dataMount = isPathLike(dataVolumeRaw)
             ? resolveHostPath(dataVolumeRaw) // bind mount → absolute host path
             : dataVolumeRaw; // named volume → pass through
-        const volumes = [
-            `${dataMount}:/data`, // shared state (claude-home, sessions)
-            `${worktreePath}:${WORKSPACE_DIR}`, // task worktree
-        ];
-        // Resolve git mounts for worktrees (if .git is a file pointing elsewhere)
-        const gitMounts = this.resolveGitMounts(worktreePath);
-        volumes.push(...gitMounts);
-        // Env flags — passed to entrypoint for MCP config template expansion
+        // /data is the same volume the workspace is carved out of (or the same
+        // host path), so the same -v form covers both — bind for path mode,
+        // named volume for volume mode. The workspace itself needs the more
+        // precise `--mount … volume-subpath=…` form in volume mode so the
+        // sandbox sees the harness's sandboxes/<taskId>/ dir rather than an
+        // empty docker-auto-created bind target on the host filesystem (the
+        // bug that made staged skills invisible — the two paths look identical
+        // but live in different physical locations).
+        const dockerArgs = ["-v", `${dataMount}:/data`];
+        if (opts.workspaceMount.type === "bind") {
+            dockerArgs.push("-v", `${opts.workspaceMount.hostPath}:${WORKSPACE_DIR}`);
+        }
+        else {
+            const { volume, subpath } = opts.workspaceMount;
+            dockerArgs.push("--mount", `type=volume,source=${volume},target=${WORKSPACE_DIR},volume-subpath=${subpath}`);
+        }
+        // Shared package-manager cache, mounted at /cache and shared across every
+        // sandbox (issue #107). Each ecosystem's download cache is content-
+        // addressed, so sharing across repos is safe and avoids re-fetching the
+        // same tarballs on every run. We point npm / pnpm / yarn at subdirs of it
+        // via env below; the entrypoint chowns them to the agent user. This is the
+        // *download* cache only — per-workspace `node_modules` stays per-workspace
+        // (a shared store can't hardlink across separate container mounts anyway).
+        //
+        // A Docker named volume (auto-created on first use); override the name with
+        // LASTLIGHT_PKG_CACHE_VOLUME. In local path-mode this is still a named
+        // volume — it needs no host-path view, so the volume/bind split that the
+        // workspace mount needs doesn't apply here.
+        const pkgCacheVolume = process.env.LASTLIGHT_PKG_CACHE_VOLUME || "lastlight_pkg-cache";
+        dockerArgs.push("-v", `${pkgCacheVolume}:${PKG_CACHE_DIR}`);
+        // Point each package manager at its shared subdir. npm reads npm_config_cache;
+        // pnpm reads npm-style env config (npm_config_store_dir → store-dir); yarn
+        // (classic + berry) reads YARN_CACHE_FOLDER. The agent already picks the PM
+        // from the repo's lockfile (see skills/pr-review/SKILL.md), so all three are
+        // wired regardless of which one a given repo uses.
+        dockerArgs.push("-e", `npm_config_cache=${PKG_CACHE_DIR}/npm`, "-e", `npm_config_store_dir=${PKG_CACHE_DIR}/pnpm`, "-e", `YARN_CACHE_FOLDER=${PKG_CACHE_DIR}/yarn`);
+        // Resolve git mounts for worktrees (if .git is a file pointing elsewhere).
+        // In volume-subpath mode these are still emitted as bind mounts; the
+        // gitMounts path is only hit for git worktrees that live alongside the
+        // sandbox in the same data dir, so for the named-volume case the
+        // sources would also be invisible from the daemon's view. The codebase
+        // doesn't currently exercise that combination — pre-clones always
+        // produce a real .git directory inside worktreePath — so leaving the
+        // bind form here keeps the existing path mode working without adding
+        // dead complexity to the named-volume path. If we ever wire a real
+        // git worktree under volume mode this needs the same translation.
+        const gitMounts = this.resolveGitMounts(worktreePath).flatMap((m) => ["-v", m]);
+        dockerArgs.push(...gitMounts);
+        // Env flags — passed to entrypoint for MCP config template expansion.
+        // No proxy env (HTTPS_PROXY etc.) is injected: the sandbox-egress
+        // network has no route to the public internet, and the coredns
+        // sidecar referenced by --dns below sinkholes allowlisted hosts to
+        // the nginx-egress firewall IP. Clients dial real hostnames; the
+        // network routes them transparently. See egress-firewall-config.ts.
         const envFlags = Object.entries(this.config.env).flatMap(([k, v]) => ["-e", `${k}=${v}`]);
+        // Per-sandbox memory cap. Without this, a runaway agent (or a hot
+        // `npm install` / vite build inside the workspace) can OOM the host
+        // and take every other container with it. We set --memory-swap to the
+        // same value so swap can't be used to silently exceed the cap.
+        const memoryLimit = this.config.memoryLimit || "2g";
+        // Network attachment. Default is the `internal: true` sandbox-egress
+        // network declared in docker-compose.yml, which has no host route —
+        // the only outbound path is through nginx-egress, reached via the
+        // DNS sinkhole. Override via LASTLIGHT_SANDBOX_NETWORK for setups
+        // (local dev, alt orchestration) where the harness was started
+        // outside docker-compose and the network hasn't been created.
+        const network = this.config.network ||
+            process.env.LASTLIGHT_SANDBOX_NETWORK ||
+            "lastlight_sandbox-egress";
+        const networkArgs = network === "default" ? [] : ["--network", network];
+        // DNS resolver. Points at coredns-strict or coredns-open depending on
+        // the phase's egress policy. The whole filtering scheme hinges on
+        // this — every name lookup happens against our sinkhole, and
+        // allowlisted hosts get answered with the nginx-egress IP rather
+        // than the real one.
+        const dnsArgs = this.config.dnsIp ? ["--dns", this.config.dnsIp] : [];
         // The entrypoint runs as root to fix permissions, then drops to agent via gosu.
         // No --user flag needed.
         const args = [
             "run", "-d",
             "--name", containerName,
+            "--memory", memoryLimit,
+            "--memory-swap", memoryLimit,
+            ...networkArgs,
+            ...dnsArgs,
             ...envFlags,
-            ...volumes.flatMap(v => ["-v", v]),
+            ...dockerArgs,
             "-w", WORKSPACE_DIR,
             this.config.imageName,
         ];
         try {
-            // The entrypoint handles all setup: claude auth, skills, CLAUDE.md,
-            // .mcp.json, and git config. No docker exec calls needed.
+            // The entrypoint handles all setup: AGENTS.md, opencode.json, app.pem
+            // materialization, and git config. No docker exec calls needed.
             const containerId = execCmd("docker", args).trim();
             const info = { containerId, containerName, worktreePath };
             this.activeContainers.set(opts.taskId, info);
@@ -70,57 +143,131 @@ export class DockerSandbox {
         }
     }
     /**
-     * Wait for the sandbox entrypoint to finish setup.
-     * Polls for the credentials symlink in the agent's home directory.
+     * Wait for the sandbox entrypoint to finish setup. The entrypoint touches
+     * `$WORKSPACE/.ready` as its last step before exec'ing the agent shell.
      */
     async waitForReady(containerName, timeoutMs = 15000) {
         const start = Date.now();
         const interval = 500;
         while (Date.now() - start < timeoutMs) {
             try {
-                const { stdout } = await execFileAsync("docker", [
+                await execFileAsync("docker", [
                     "exec", "--user", "agent", containerName,
-                    "test", "-f", "/home/agent/.claude/.credentials.json",
+                    "test", "-f", `${WORKSPACE_DIR}/.ready`,
                 ], { timeout: 5000 });
-                // File exists — entrypoint is done
                 return;
             }
             catch {
-                // Not ready yet — wait and retry
                 await new Promise((r) => setTimeout(r, interval));
             }
         }
         console.warn(`[sandbox] Timed out waiting for ${containerName} to be ready — proceeding anyway`);
     }
     /**
-     * Run the Claude CLI inside the sandbox with a prompt.
+     * Run the agentic-pi CLI inside the sandbox with a prompt.
      *
-     * Streams stdout line-by-line so the caller can react to stream-json events
-     * (e.g. capture the session id from the `system/init` line) before the
-     * agent has finished. The full stdout is also buffered and returned for
-     * post-run parsing of the `result` line.
+     * Streams stdout line-by-line so the caller can react to JSON events
+     * (e.g. capture the top-level `session` record's id) before the agent
+     * has finished. The full stdout is also buffered and returned for
+     * post-run parsing of the usage_snapshot rollup.
      */
     async runAgent(taskId, prompt, opts) {
         const info = this.activeContainers.get(taskId);
         if (!info)
             throw new Error(`No sandbox for task ${taskId}`);
-        const model = opts?.model || "claude-sonnet-4-6";
+        const model = opts?.model || "anthropic/claude-sonnet-4-6";
         const timeout = this.config.timeoutSeconds || 1800;
-        const escapedPrompt = prompt.replace(/'/g, "'\\''");
+        // `cmd` is interpolated into `sh -c <cmd>` below, so any value we
+        // append here is shell-parsed. Assert each opt-supplied flag against
+        // a tight allowlist before embedding — defense in depth in case any
+        // of these ever gets sourced from user input.
+        const THINKING = new Set(["off", "minimal", "low", "medium", "high", "xhigh"]);
+        const PROFILES = new Set(["read", "issues-write", "review-write", "repo-write"]);
+        const WEB_SEARCH_PROVIDERS = new Set(["tavily", "brave", "exa"]);
+        const extraArgs = [];
+        if (opts?.thinking) {
+            if (!THINKING.has(opts.thinking)) {
+                throw new Error(`Refusing to pass thinking "${opts.thinking}" — must be one of ${[...THINKING].join("|")}`);
+            }
+            extraArgs.push("--thinking", opts.thinking);
+        }
+        if (opts?.profile) {
+            if (!PROFILES.has(opts.profile)) {
+                throw new Error(`Refusing to pass profile "${opts.profile}" — must be one of ${[...PROFILES].join("|")}`);
+            }
+            extraArgs.push("--profile", opts.profile);
+        }
+        // Web search defaults off — agentic-pi's auto-enable triggers on any
+        // provider key env var, so silence it explicitly when the caller didn't
+        // opt in. When opted in, omit the flag and let agentic-pi pick up the
+        // forwarded TAVILY_API_KEY / BRAVE_SEARCH_API_KEY / EXA_API_KEY.
+        if (opts?.webSearch === true) {
+            if (opts.webSearchProvider) {
+                if (!WEB_SEARCH_PROVIDERS.has(opts.webSearchProvider)) {
+                    throw new Error(`Refusing to pass web-search-provider "${opts.webSearchProvider}" — must be one of ${[...WEB_SEARCH_PROVIDERS].join("|")}`);
+                }
+                extraArgs.push("--web-search-provider", opts.webSearchProvider);
+            }
+        }
+        else {
+            extraArgs.push("--no-web-search");
+        }
+        // Per-phase skill bundles. Each must be an in-container path under the
+        // workspace root; assert the charset + prefix before it's embedded into
+        // the `sh -c` command, mirroring the agentCwd guard below.
+        for (const dir of opts?.skillDirs ?? []) {
+            if (!dir.startsWith(WORKSPACE_DIR) || !/^[A-Za-z0-9/_.-]+$/.test(dir)) {
+                throw new Error(`Refusing to pass skill dir "${dir}" — must live under ${WORKSPACE_DIR}`);
+            }
+            extraArgs.push("--skill", dir);
+        }
+        if (!/^[A-Za-z0-9/_.-]+$/.test(model)) {
+            throw new Error(`Refusing to pass model "${model}" — bad charset`);
+        }
+        for (const [k, v] of Object.entries(opts?.sandboxEnv ?? {})) {
+            if (!/^[A-Z_][A-Z0-9_]*$/.test(k)) {
+                throw new Error(`Refusing sandbox-env key "${k}" — must be UPPER_SNAKE`);
+            }
+            // Values are shell-quoted below. Reject newlines and the closing
+            // quote (single-quote) defensively — both would break the `'…'` wrap.
+            if (/[\n\r']/.test(v)) {
+                throw new Error(`Refusing sandbox-env value for "${k}" — contains newline or quote`);
+            }
+            extraArgs.push("--sandbox-env", `${k}='${v}'`);
+        }
         const cmd = [
-            "claude",
-            "--print", "--verbose",
-            "--dangerously-skip-permissions",
-            "--output-format", "stream-json",
+            "agentic-pi", "run",
             "--model", model,
-            "-p", `'${escapedPrompt}'`,
+            "--sandbox", "none",
+            ...extraArgs,
         ].join(" ");
-        // Run as agent user — Claude Code blocks --dangerously-skip-permissions as root
-        const args = ["exec", "--user", "agent", "-w", WORKSPACE_DIR, info.containerName, "sh", "-c", cmd];
+        // Resolve the agent's cwd. Defaults to the workspace root; callers may
+        // pass a `<WORKSPACE_DIR>/<repo>` subdir when the harness pre-cloned the
+        // target repo. Asserted against an allowlist before going into
+        // `docker exec -w` (which is a separate argv slot, but defensive
+        // narrowing keeps surprise paths out).
+        const workdir = opts?.agentCwd ?? WORKSPACE_DIR;
+        if (!workdir.startsWith(WORKSPACE_DIR) || !/^[A-Za-z0-9/_.-]+$/.test(workdir)) {
+            throw new Error(`Refusing to pass agent cwd "${workdir}" — must live under ${WORKSPACE_DIR}`);
+        }
+        // -i connects stdin so the prompt can be written to the container process.
+        // Run as agent user so workspace writes land with the right ownership.
+        const args = ["exec", "-i", "--user", "agent", "-w", workdir, info.containerName, "sh", "-c", cmd];
+        // The structured event stream is consumed line-by-line via `onLine` and
+        // mirrored to the AgenticShim, which writes envelope jsonl to
+        // `<sessionsDir>/projects/.../` (read by the admin SessionReader).
+        // That is the on-disk log. We deliberately do NOT buffer the full stdout
+        // here — for a "read a large repo" run the stream is hundreds of MB and
+        // accumulating it in a single string is what OOM'd the harness.
+        //
+        // We keep only a small bounded tail of stderr so the error-path message
+        // is still useful.
+        const STDERR_TAIL_BYTES = 8 * 1024;
         return await new Promise((resolvePromise, reject) => {
-            const child = spawn("docker", args, { stdio: ["ignore", "pipe", "pipe"] });
-            let stdout = "";
-            let stderr = "";
+            const child = spawn("docker", args, { stdio: ["pipe", "pipe", "pipe"] });
+            child.stdin.write(prompt);
+            child.stdin.end();
+            let stderrTail = "";
             let buf = "";
             const timer = setTimeout(() => {
                 child.kill("SIGKILL");
@@ -128,7 +275,6 @@ export class DockerSandbox {
             }, timeout * 1000);
             child.stdout.setEncoding("utf-8");
             child.stdout.on("data", (chunk) => {
-                stdout += chunk;
                 if (!opts?.onLine)
                     return;
                 // Emit complete lines to the caller as they arrive — keeps a partial
@@ -147,7 +293,12 @@ export class DockerSandbox {
                 }
             });
             child.stderr.setEncoding("utf-8");
-            child.stderr.on("data", (chunk) => { stderr += chunk; });
+            child.stderr.on("data", (chunk) => {
+                stderrTail += chunk;
+                if (stderrTail.length > STDERR_TAIL_BYTES) {
+                    stderrTail = stderrTail.slice(-STDERR_TAIL_BYTES);
+                }
+            });
             child.on("error", (err) => {
                 clearTimeout(timer);
                 reject(new Error(`Sandbox agent spawn failed: ${err.message}`));
@@ -163,10 +314,10 @@ export class DockerSandbox {
                     buf = "";
                 }
                 if (code === 0) {
-                    resolvePromise(stdout);
+                    resolvePromise();
                 }
                 else {
-                    reject(new Error(`Sandbox agent failed (exit ${code}): ${stderr || stdout || "no output"}`));
+                    reject(new Error(`Sandbox agent failed (exit ${code}): ${stderrTail || "no output"}`));
                 }
             });
         });

package/dist/sandbox/docker.js.map

@@ -1 +1 @@
-{"version":3,"file":"docker.js","sourceRoot":"","sources":["../../src/sandbox/docker.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,YAAY,EAAE,QAAQ,IAAI,UAAU,EAAE,KAAK,EAAE,MAAM,eAAe,CAAC;AAC5E,OAAO,EAAE,SAAS,EAAE,MAAM,MAAM,CAAC;AACjC,OAAO,EAAE,UAAU,EAAE,YAAY,EAAE,MAAM,IAAI,CAAC;AAC9C,OAAO,EAAE,OAAO,EAAE,UAAU,EAAE,IAAI,EAAE,QAAQ,EAAE,OAAO,EAAE,MAAM,MAAM,CAAC;AACpE,OAAO,EAAE,UAAU,EAAE,MAAM,QAAQ,CAAC;AAEpC,MAAM,aAAa,GAAG,SAAS,CAAC,UAAU,CAAC,CAAC;AA6B5C,MAAM,aAAa,GAAG,uBAAuB,CAAC;AAE9C,MAAM,OAAO,aAAa;IAChB,MAAM,CAAgB;IACtB,gBAAgB,GAA6B,IAAI,GAAG,EAAE,CAAC;IAE/D,YAAY,MAAqB;QAC/B,IAAI,CAAC,MAAM,GAAG,MAAM,CAAC;IACvB,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,MAAM,CAAC,IAGZ;QACC,MAAM,aAAa,GAAG,qBAAqB,IAAI,CAAC,MAAM,IAAI,UAAU,EAAE,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE,CAAC;QACrF,MAAM,YAAY,GAAG,OAAO,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC;QAEhD,2EAA2E;QAC3E,yEAAyE;QACzE,YAAY;QACZ,EAAE;QACF,sCAAsC;QACtC,yEAAyE;QACzE,kEAAkE;QAClE,uEAAuE;QACvE,wEAAwE;QACxE,mEAAmE;QACnE,EAAE;QACF,6EAA6E;QAC7E,MAAM,aAAa,GAAG,OAAO,CAAC,GAAG,CAAC,mBAAmB,IAAI,sBAAsB,CAAC;QAChF,MAAM,SAAS,GAAG,UAAU,CAAC,aAAa,CAAC;YACzC,CAAC,CAAC,eAAe,CAAC,aAAa,CAAC,CAAE,kCAAkC;YACpE,CAAC,CAAC,aAAa,CAAC,CAAkB,8BAA8B;QAElE,MAAM,OAAO,GAAG;YACd,GAAG,SAAS,QAAQ,EAAqB,uCAAuC;YAChF,GAAG,YAAY,IAAI,aAAa,EAAE,EAAO,gBAAgB;SAC1D,CAAC;QAEF,0EAA0E;QAC1E,MAAM,SAAS,GAAG,IAAI,CAAC,gBAAgB,CAAC,YAAY,CAAC,CAAC;QACtD,OAAO,CAAC,IAAI,CAAC,GAAG,SAAS,CAAC,CAAC;QAE3B,qEAAqE;QACrE,MAAM,QAAQ,GAAG,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,IAAI,EAAE,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC;QAE1F,gFAAgF;QAChF,yBAAyB;QACzB,MAAM,IAAI,GAAG;YACX,KAAK,EAAE,IAAI;YACX,QAAQ,EAAE,aAAa;YACvB,GAAG,QAAQ;YACX,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC;YAClC,IAAI,EAAE,aAAa;YACnB,IAAI,CAAC,MAAM,CAAC,SAAS;SACtB,CAAC;QAEF,IAAI,CAAC;YACH,oEAAoE;YACpE,0DAA0D;YAC1D,MAAM,WAAW,GAAG,OAAO,CAAC,QAAQ,EAAE,IAAI,CAAC,CAAC,IAAI,EAAE,CAAC;YAEnD,MAAM,IAAI,GAAgB,EAAE,WAAW,EAAE,aAAa,EAAE,YAAY,EAAE,CAAC;YACvE,IAAI,CAAC,gBAAgB,CAAC,GAAG,CAAC,IAAI,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC;YAC7C,OAAO,CAAC,GAAG,CAAC,sBAAsB,aAAa,EAAE,CAAC,CAAC;YAEnD,qEAAqE;YACrE,kEAAkE;YAClE,qEAAqE;YACrE,MAAM,IAAI,CAAC,YAAY,CAAC,aAAa,CAAC,CAAC;YAEvC,OAAO,IAAI,CAAC;QACd,CAAC;QAAC,OAAO,GAAQ,EAAE,CAAC;YAClB,MAAM,IAAI,KAAK,CAAC,6BAA6B,GAAG,CAAC,OAAO,EAAE,CAAC,CAAC;QAC9D,CAAC;IACH,CAAC;IAED;;;OAGG;IACK,KAAK,CAAC,YAAY,CAAC,aAAqB,EAAE,SAAS,GAAG,KAAK;QACjE,MAAM,KAAK,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QACzB,MAAM,QAAQ,GAAG,GAAG,CAAC;QAErB,OAAO,IAAI,CAAC,GAAG,EAAE,GAAG,KAAK,GAAG,SAAS,EAAE,CAAC;YACtC,IAAI,CAAC;gBACH,MAAM,EAAE,MAAM,EAAE,GAAG,MAAM,aAAa,CAAC,QAAQ,EAAE;oBAC/C,MAAM,EAAE,QAAQ,EAAE,OAAO,EAAE,aAAa;oBACxC,MAAM,EAAE,IAAI,EAAE,uCAAuC;iBACtD,EAAE,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC,CAAC;gBACtB,mCAAmC;gBACnC,OAAO;YACT,CAAC;YAAC,MAAM,CAAC;gBACP,iCAAiC;gBACjC,MAAM,IAAI,OAAO,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,UAAU,CAAC,CAAC,EAAE,QAAQ,CAAC,CAAC,CAAC;YACpD,CAAC;QACH,CAAC;QAED,OAAO,CAAC,IAAI,CAAC,mCAAmC,aAAa,kCAAkC,CAAC,CAAC;IACnG,CAAC;IAED;;;;;;;OAOG;IACH,KAAK,CAAC,QAAQ,CACZ,MAAc,EACd,MAAc,EACd,IAIC;QAED,MAAM,IAAI,GAAG,IAAI,CAAC,gBAAgB,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;QAC/C,IAAI,CAAC,IAAI;YAAE,MAAM,IAAI,KAAK,CAAC,uBAAuB,MAAM,EAAE,CAAC,CAAC;QAE5D,MAAM,KAAK,GAAG,IAAI,EAAE,KAAK,IAAI,mBAAmB,CAAC;QACjD,MAAM,OAAO,GAAG,IAAI,CAAC,MAAM,CAAC,cAAc,IAAI,IAAI,CAAC;QAEnD,MAAM,aAAa,GAAG,MAAM,CAAC,OAAO,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;QACpD,MAAM,GAAG,GAAG;YACV,QAAQ;YACR,SAAS,EAAE,WAAW;YACtB,gCAAgC;YAChC,iBAAiB,EAAE,aAAa;YAChC,SAAS,EAAE,KAAK;YAChB,IAAI,EAAE,IAAI,aAAa,GAAG;SAC3B,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QAEZ,gFAAgF;QAChF,MAAM,IAAI,GAAG,CAAC,MAAM,EAAE,QAAQ,EAAE,OAAO,EAAE,IAAI,EAAE,aAAa,EAAE,IAAI,CAAC,aAAa,EAAE,IAAI,EAAE,IAAI,EAAE,GAAG,CAAC,CAAC;QAEnG,OAAO,MAAM,IAAI,OAAO,CAAS,CAAC,cAAc,EAAE,MAAM,EAAE,EAAE;YAC1D,MAAM,KAAK,GAAG,KAAK,CAAC,QAAQ,EAAE,IAAI,EAAE,EAAE,KAAK,EAAE,CAAC,QAAQ,EAAE,MAAM,EAAE,MAAM,CAAC,EAAE,CAAC,CAAC;YAC3E,IAAI,MAAM,GAAG,EAAE,CAAC;YAChB,IAAI,MAAM,GAAG,EAAE,CAAC;YAChB,IAAI,GAAG,GAAG,EAAE,CAAC;YAEb,MAAM,KAAK,GAAG,UAAU,CAAC,GAAG,EAAE;gBAC5B,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;gBACtB,MAAM,CAAC,IAAI,KAAK,CAAC,iCAAiC,OAAO,GAAG,CAAC,CAAC,CAAC;YACjE,CAAC,EAAE,OAAO,GAAG,IAAI,CAAC,CAAC;YAEnB,KAAK,CAAC,MAAM,CAAC,WAAW,CAAC,OAAO,CAAC,CAAC;YAClC,KAAK,CAAC,MAAM,CAAC,EAAE,CAAC,MAAM,EAAE,CAAC,KAAa,EAAE,EAAE;gBACxC,MAAM,IAAI,KAAK,CAAC;gBAChB,IAAI,CAAC,IAAI,EAAE,MAAM;oBAAE,OAAO;gBAC1B,qEAAqE;gBACrE,oCAAoC;gBACpC,GAAG,IAAI,KAAK,CAAC;gBACb,IAAI,EAAU,CAAC;gBACf,OAAO,CAAC,EAAE,GAAG,GAAG,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC;oBACrC,MAAM,IAAI,GAAG,GAAG,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;oBAC9B,GAAG,GAAG,GAAG,CAAC,KAAK,CAAC,EAAE,GAAG,CAAC,CAAC,CAAC;oBACxB,IAAI,IAAI,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;wBACpB,IAAI,CAAC;4BAAC,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;wBAAC,CAAC;wBAAC,MAAM,CAAC,CAAC,6BAA6B,CAAC,CAAC;oBACpE,CAAC;gBACH,CAAC;YACH,CAAC,CAAC,CAAC;YAEH,KAAK,CAAC,MAAM,CAAC,WAAW,CAAC,OAAO,CAAC,CAAC;YAClC,KAAK,CAAC,MAAM,CAAC,EAAE,CAAC,MAAM,EAAE,CAAC,KAAa,EAAE,EAAE,GAAG,MAAM,IAAI,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC;YAEjE,KAAK,CAAC,EAAE,CAAC,OAAO,EAAE,CAAC,GAAG,EAAE,EAAE;gBACxB,YAAY,CAAC,KAAK,CAAC,CAAC;gBACpB,MAAM,CAAC,IAAI,KAAK,CAAC,+BAA+B,GAAG,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC;YAClE,CAAC,CAAC,CAAC;YAEH,KAAK,CAAC,EAAE,CAAC,OAAO,EAAE,CAAC,IAAI,EAAE,EAAE;gBACzB,YAAY,CAAC,KAAK,CAAC,CAAC;gBACpB,kCAAkC;gBAClC,IAAI,GAAG,CAAC,MAAM,GAAG,CAAC,IAAI,IAAI,EAAE,MAAM,EAAE,CAAC;oBACnC,IAAI,CAAC;wBAAC,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;oBAAC,CAAC;oBAAC,MAAM,CAAC,CAAC,YAAY,CAAC,CAAC;oBAChD,GAAG,GAAG,EAAE,CAAC;gBACX,CAAC;gBACD,IAAI,IAAI,KAAK,CAAC,EAAE,CAAC;oBACf,cAAc,CAAC,MAAM,CAAC,CAAC;gBACzB,CAAC;qBAAM,CAAC;oBACN,MAAM,CAAC,IAAI,KAAK,CAAC,8BAA8B,IAAI,MAAM,MAAM,IAAI,MAAM,IAAI,WAAW,EAAE,CAAC,CAAC,CAAC;gBAC/F,CAAC;YACH,CAAC,CAAC,CAAC;QACL,CAAC,CAAC,CAAC;IACL,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,OAAO,CAAC,MAAc;QAC1B,MAAM,IAAI,GAAG,IAAI,CAAC,gBAAgB,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;QAC/C,IAAI,CAAC,IAAI;YAAE,OAAO;QAElB,QAAQ,CAAC,QAAQ,EAAE,CAAC,IAAI,EAAE,IAAI,EAAE,IAAI,CAAC,aAAa,CAAC,CAAC,CAAC;QACrD,IAAI,CAAC,gBAAgB,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;QACrC,OAAO,CAAC,GAAG,CAAC,wBAAwB,IAAI,CAAC,aAAa,EAAE,CAAC,CAAC;IAC5D,CAAC;IAED,KAAK,CAAC,UAAU;QACd,KAAK,MAAM,MAAM,IAAI,IAAI,CAAC,gBAAgB,CAAC,IAAI,EAAE,EAAE,CAAC;YAClD,MAAM,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;QAC7B,CAAC;IACH,CAAC;IAEO,gBAAgB,CAAC,YAAoB;QAC3C,MAAM,OAAO,GAAG,IAAI,CAAC,YAAY,EAAE,MAAM,CAAC,CAAC;QAC3C,IAAI,CAAC,UAAU,CAAC,OAAO,CAAC;YAAE,OAAO,EAAE,CAAC;QAEpC,IAAI,CAAC;YACH,MAAM,OAAO,GAAG,YAAY,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC,IAAI,EAAE,CAAC;YACtD,MAAM,KAAK,GAAG,OAAO,CAAC,KAAK,CAAC,kBAAkB,CAAC,CAAC;YAChD,IAAI,KAAK,EAAE,CAAC;gBACV,gEAAgE;gBAChE,MAAM,UAAU,GAAG,OAAO,CAAC,OAAO,CAAC,OAAO,CAAC,EAAE,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC;gBACvD,MAAM,YAAY,GAAG,OAAO,CAAC,UAAU,EAAE,IAAI,EAAE,IAAI,CAAC,CAAC;gBACrD,MAAM,WAAW,GAAG,OAAO,CAAC,YAAY,EAAE,IAAI,CAAC,CAAC;gBAChD,IAAI,CAAC,SAAS,CAAC,WAAW,EAAE,YAAY,CAAC,EAAE,CAAC;oBAC1C,OAAO,CAAC,IAAI,CACV,gEAAgE,YAAY,EAAE,CAC/E,CAAC;oBACF,OAAO,EAAE,CAAC;gBACZ,CAAC;gBACD,IAAI,CAAC,UAAU,CAAC,YAAY,CAAC,EAAE,CAAC;oBAC9B,OAAO,CAAC,IAAI,CAAC,mDAAmD,YAAY,EAAE,CAAC,CAAC;oBAChF,OAAO,EAAE,CAAC;gBACZ,CAAC;gBACD,OAAO;oBACL,GAAG,OAAO,IAAI,OAAO,EAAE;oBACvB,GAAG,YAAY,IAAI,YAAY,EAAE;iBAClC,CAAC;YACJ,CAAC;QACH,CAAC;QAAC,MAAM,CAAC,CAAC,kBAAkB,CAAC,CAAC;QAE9B,qEAAqE;QACrE,OAAO,EAAE,CAAC;IACZ,CAAC;CACF;AAED,SAAS,OAAO,CAAC,GAAW,EAAE,IAAc,EAAE,IAA2B;IACvE,OAAO,YAAY,CAAC,GAAG,EAAE,IAAI,EAAE;QAC7B,QAAQ,EAAE,OAAO;QACjB,KAAK,EAAE,CAAC,MAAM,EAAE,MAAM,EAAE,MAAM,CAAC;QAC/B,OAAO,EAAE,IAAI,EAAE,OAAO;KACvB,CAAC,CAAC;AACL,CAAC;AAED,SAAS,QAAQ,CAAC,GAAW,EAAE,IAAc;IAC3C,IAAI,CAAC;QAAC,YAAY,CAAC,GAAG,EAAE,IAAI,EAAE,EAAE,KAAK,EAAE,QAAQ,EAAE,CAAC,CAAC;IAAC,CAAC;IAAC,MAAM,CAAC,CAAC,YAAY,CAAC,CAAC;AAC9E,CAAC;AAED,SAAS,SAAS,CAAC,MAAc,EAAE,KAAa;IAC9C,MAAM,GAAG,GAAG,QAAQ,CAAC,MAAM,EAAE,KAAK,CAAC,CAAC;IACpC,OAAO,GAAG,KAAK,EAAE,IAAI,CAAC,CAAC,GAAG,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC;AACnE,CAAC;AAED;;;;GAIG;AACH,SAAS,UAAU,CAAC,KAAa;IAC/B,OAAO,KAAK,CAAC,UAAU,CAAC,GAAG,CAAC;QAC1B,KAAK,CAAC,UAAU,CAAC,IAAI,CAAC;QACtB,KAAK,CAAC,UAAU,CAAC,KAAK,CAAC;QACvB,KAAK,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC;AAC1B,CAAC;AAED;;;;GAIG;AACH,SAAS,eAAe,CAAC,KAAa;IACpC,IAAI,CAAC,GAAG,KAAK,CAAC;IACd,IAAI,CAAC,CAAC,UAAU,CAAC,GAAG,CAAC,EAAE,CAAC;QACtB,CAAC,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,IAAI,IAAI,EAAE,CAAC,GAAG,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;IAC5C,CAAC;IACD,OAAO,OAAO,CAAC,CAAC,CAAC,CAAC;AACpB,CAAC"}
+{"version":3,"file":"docker.js","sourceRoot":"","sources":["../../src/sandbox/docker.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,YAAY,EAAE,QAAQ,IAAI,UAAU,EAAE,KAAK,EAAE,MAAM,eAAe,CAAC;AAC5E,OAAO,EAAE,SAAS,EAAE,MAAM,MAAM,CAAC;AACjC,OAAO,EAAE,UAAU,EAAE,YAAY,EAAE,MAAM,IAAI,CAAC;AAC9C,OAAO,EAAE,OAAO,EAAE,UAAU,EAAE,IAAI,EAAE,QAAQ,EAAE,OAAO,EAAE,MAAM,MAAM,CAAC;AACpE,OAAO,EAAE,UAAU,EAAE,MAAM,QAAQ,CAAC;AAEpC,MAAM,aAAa,GAAG,SAAS,CAAC,UAAU,CAAC,CAAC;AA0E5C,MAAM,aAAa,GAAG,uBAAuB,CAAC;AAC9C,gEAAgE;AAChE,MAAM,aAAa,GAAG,QAAQ,CAAC;AAE/B,MAAM,OAAO,aAAa;IAChB,MAAM,CAAgB;IACtB,gBAAgB,GAA6B,IAAI,GAAG,EAAE,CAAC;IAE/D,YAAY,MAAqB;QAC/B,IAAI,CAAC,MAAM,GAAG,MAAM,CAAC;IACvB,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,MAAM,CAAC,IAIZ;QACC,MAAM,aAAa,GAAG,qBAAqB,IAAI,CAAC,MAAM,IAAI,UAAU,EAAE,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE,CAAC;QACrF,MAAM,YAAY,GAAG,OAAO,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC;QAEhD,sEAAsE;QACtE,0DAA0D;QAC1D,2DAA2D;QAC3D,EAAE;QACF,sCAAsC;QACtC,yEAAyE;QACzE,kEAAkE;QAClE,uEAAuE;QACvE,wEAAwE;QACxE,mEAAmE;QACnE,EAAE;QACF,6EAA6E;QAC7E,MAAM,aAAa,GAAG,OAAO,CAAC,GAAG,CAAC,mBAAmB,IAAI,sBAAsB,CAAC;QAChF,MAAM,SAAS,GAAG,UAAU,CAAC,aAAa,CAAC;YACzC,CAAC,CAAC,eAAe,CAAC,aAAa,CAAC,CAAE,kCAAkC;YACpE,CAAC,CAAC,aAAa,CAAC,CAAkB,8BAA8B;QAElE,uEAAuE;QACvE,oEAAoE;QACpE,oEAAoE;QACpE,kEAAkE;QAClE,oEAAoE;QACpE,oEAAoE;QACpE,uEAAuE;QACvE,6CAA6C;QAC7C,MAAM,UAAU,GAAa,CAAC,IAAI,EAAE,GAAG,SAAS,QAAQ,CAAC,CAAC;QAC1D,IAAI,IAAI,CAAC,cAAc,CAAC,IAAI,KAAK,MAAM,EAAE,CAAC;YACxC,UAAU,CAAC,IAAI,CAAC,IAAI,EAAE,GAAG,IAAI,CAAC,cAAc,CAAC,QAAQ,IAAI,aAAa,EAAE,CAAC,CAAC;QAC5E,CAAC;aAAM,CAAC;YACN,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,GAAG,IAAI,CAAC,cAAc,CAAC;YAChD,UAAU,CAAC,IAAI,CACb,SAAS,EACT,sBAAsB,MAAM,WAAW,aAAa,mBAAmB,OAAO,EAAE,CACjF,CAAC;QACJ,CAAC;QAED,0EAA0E;QAC1E,oEAAoE;QACpE,wEAAwE;QACxE,0EAA0E;QAC1E,2EAA2E;QAC3E,2EAA2E;QAC3E,2EAA2E;QAC3E,EAAE;QACF,4EAA4E;QAC5E,uEAAuE;QACvE,yEAAyE;QACzE,4CAA4C;QAC5C,MAAM,cAAc,GAAG,OAAO,CAAC,GAAG,CAAC,0BAA0B,IAAI,qBAAqB,CAAC;QACvF,UAAU,CAAC,IAAI,CAAC,IAAI,EAAE,GAAG,cAAc,IAAI,aAAa,EAAE,CAAC,CAAC;QAC5D,+EAA+E;QAC/E,2EAA2E;QAC3E,4EAA4E;QAC5E,6EAA6E;QAC7E,mDAAmD;QACnD,UAAU,CAAC,IAAI,CACb,IAAI,EAAE,oBAAoB,aAAa,MAAM,EAC7C,IAAI,EAAE,wBAAwB,aAAa,OAAO,EAClD,IAAI,EAAE,qBAAqB,aAAa,OAAO,CAChD,CAAC;QAEF,2EAA2E;QAC3E,qEAAqE;QACrE,uEAAuE;QACvE,iEAAiE;QACjE,uEAAuE;QACvE,kEAAkE;QAClE,qEAAqE;QACrE,qEAAqE;QACrE,mEAAmE;QACnE,kEAAkE;QAClE,MAAM,SAAS,GAAG,IAAI,CAAC,gBAAgB,CAAC,YAAY,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC;QAChF,UAAU,CAAC,IAAI,CAAC,GAAG,SAAS,CAAC,CAAC;QAE9B,sEAAsE;QACtE,kEAAkE;QAClE,+DAA+D;QAC/D,mEAAmE;QACnE,iEAAiE;QACjE,oEAAoE;QACpE,MAAM,QAAQ,GAAG,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,IAAI,EAAE,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC;QAE1F,kEAAkE;QAClE,oEAAoE;QACpE,sEAAsE;QACtE,+DAA+D;QAC/D,MAAM,WAAW,GAAG,IAAI,CAAC,MAAM,CAAC,WAAW,IAAI,IAAI,CAAC;QAEpD,qEAAqE;QACrE,oEAAoE;QACpE,kEAAkE;QAClE,kEAAkE;QAClE,+DAA+D;QAC/D,8DAA8D;QAC9D,MAAM,OAAO,GACX,IAAI,CAAC,MAAM,CAAC,OAAO;YACnB,OAAO,CAAC,GAAG,CAAC,yBAAyB;YACrC,0BAA0B,CAAC;QAC7B,MAAM,WAAW,GAAG,OAAO,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,WAAW,EAAE,OAAO,CAAC,CAAC;QAExE,sEAAsE;QACtE,kEAAkE;QAClE,6DAA6D;QAC7D,iEAAiE;QACjE,qBAAqB;QACrB,MAAM,OAAO,GAAG,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,OAAO,EAAE,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;QAEtE,gFAAgF;QAChF,yBAAyB;QACzB,MAAM,IAAI,GAAG;YACX,KAAK,EAAE,IAAI;YACX,QAAQ,EAAE,aAAa;YACvB,UAAU,EAAE,WAAW;YACvB,eAAe,EAAE,WAAW;YAC5B,GAAG,WAAW;YACd,GAAG,OAAO;YACV,GAAG,QAAQ;YACX,GAAG,UAAU;YACb,IAAI,EAAE,aAAa;YACnB,IAAI,CAAC,MAAM,CAAC,SAAS;SACtB,CAAC;QAEF,IAAI,CAAC;YACH,sEAAsE;YACtE,gEAAgE;YAChE,MAAM,WAAW,GAAG,OAAO,CAAC,QAAQ,EAAE,IAAI,CAAC,CAAC,IAAI,EAAE,CAAC;YAEnD,MAAM,IAAI,GAAgB,EAAE,WAAW,EAAE,aAAa,EAAE,YAAY,EAAE,CAAC;YACvE,IAAI,CAAC,gBAAgB,CAAC,GAAG,CAAC,IAAI,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC;YAC7C,OAAO,CAAC,GAAG,CAAC,sBAAsB,aAAa,EAAE,CAAC,CAAC;YAEnD,qEAAqE;YACrE,kEAAkE;YAClE,qEAAqE;YACrE,MAAM,IAAI,CAAC,YAAY,CAAC,aAAa,CAAC,CAAC;YAEvC,OAAO,IAAI,CAAC;QACd,CAAC;QAAC,OAAO,GAAQ,EAAE,CAAC;YAClB,MAAM,IAAI,KAAK,CAAC,6BAA6B,GAAG,CAAC,OAAO,EAAE,CAAC,CAAC;QAC9D,CAAC;IACH,CAAC;IAED;;;OAGG;IACK,KAAK,CAAC,YAAY,CAAC,aAAqB,EAAE,SAAS,GAAG,KAAK;QACjE,MAAM,KAAK,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QACzB,MAAM,QAAQ,GAAG,GAAG,CAAC;QAErB,OAAO,IAAI,CAAC,GAAG,EAAE,GAAG,KAAK,GAAG,SAAS,EAAE,CAAC;YACtC,IAAI,CAAC;gBACH,MAAM,aAAa,CAAC,QAAQ,EAAE;oBAC5B,MAAM,EAAE,QAAQ,EAAE,OAAO,EAAE,aAAa;oBACxC,MAAM,EAAE,IAAI,EAAE,GAAG,aAAa,SAAS;iBACxC,EAAE,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC,CAAC;gBACtB,OAAO;YACT,CAAC;YAAC,MAAM,CAAC;gBACP,MAAM,IAAI,OAAO,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,UAAU,CAAC,CAAC,EAAE,QAAQ,CAAC,CAAC,CAAC;YACpD,CAAC;QACH,CAAC;QAED,OAAO,CAAC,IAAI,CAAC,mCAAmC,aAAa,kCAAkC,CAAC,CAAC;IACnG,CAAC;IAED;;;;;;;OAOG;IACH,KAAK,CAAC,QAAQ,CACZ,MAAc,EACd,MAAc,EACd,IA0CC;QAED,MAAM,IAAI,GAAG,IAAI,CAAC,gBAAgB,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;QAC/C,IAAI,CAAC,IAAI;YAAE,MAAM,IAAI,KAAK,CAAC,uBAAuB,MAAM,EAAE,CAAC,CAAC;QAE5D,MAAM,KAAK,GAAG,IAAI,EAAE,KAAK,IAAI,6BAA6B,CAAC;QAC3D,MAAM,OAAO,GAAG,IAAI,CAAC,MAAM,CAAC,cAAc,IAAI,IAAI,CAAC;QAEnD,kEAAkE;QAClE,qEAAqE;QACrE,oEAAoE;QACpE,8CAA8C;QAC9C,MAAM,QAAQ,GAAG,IAAI,GAAG,CAAC,CAAC,KAAK,EAAE,SAAS,EAAE,KAAK,EAAE,QAAQ,EAAE,MAAM,EAAE,OAAO,CAAC,CAAC,CAAC;QAC/E,MAAM,QAAQ,GAAG,IAAI,GAAG,CAAC,CAAC,MAAM,EAAE,cAAc,EAAE,cAAc,EAAE,YAAY,CAAC,CAAC,CAAC;QACjF,MAAM,oBAAoB,GAAG,IAAI,GAAG,CAAC,CAAC,QAAQ,EAAE,OAAO,EAAE,KAAK,CAAC,CAAC,CAAC;QAEjE,MAAM,SAAS,GAAa,EAAE,CAAC;QAC/B,IAAI,IAAI,EAAE,QAAQ,EAAE,CAAC;YACnB,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,IAAI,CAAC,QAAQ,CAAC,EAAE,CAAC;gBACjC,MAAM,IAAI,KAAK,CAAC,8BAA8B,IAAI,CAAC,QAAQ,sBAAsB,CAAC,GAAG,QAAQ,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;YAC9G,CAAC;YACD,SAAS,CAAC,IAAI,CAAC,YAAY,EAAE,IAAI,CAAC,QAAQ,CAAC,CAAC;QAC9C,CAAC;QACD,IAAI,IAAI,EAAE,OAAO,EAAE,CAAC;YAClB,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC;gBAChC,MAAM,IAAI,KAAK,CAAC,6BAA6B,IAAI,CAAC,OAAO,sBAAsB,CAAC,GAAG,QAAQ,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;YAC5G,CAAC;YACD,SAAS,CAAC,IAAI,CAAC,WAAW,EAAE,IAAI,CAAC,OAAO,CAAC,CAAC;QAC5C,CAAC;QACD,qEAAqE;QACrE,wEAAwE;QACxE,sEAAsE;QACtE,iEAAiE;QACjE,IAAI,IAAI,EAAE,SAAS,KAAK,IAAI,EAAE,CAAC;YAC7B,IAAI,IAAI,CAAC,iBAAiB,EAAE,CAAC;gBAC3B,IAAI,CAAC,oBAAoB,CAAC,GAAG,CAAC,IAAI,CAAC,iBAAiB,CAAC,EAAE,CAAC;oBACtD,MAAM,IAAI,KAAK,CACb,yCAAyC,IAAI,CAAC,iBAAiB,sBAAsB,CAAC,GAAG,oBAAoB,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAC3H,CAAC;gBACJ,CAAC;gBACD,SAAS,CAAC,IAAI,CAAC,uBAAuB,EAAE,IAAI,CAAC,iBAAiB,CAAC,CAAC;YAClE,CAAC;QACH,CAAC;aAAM,CAAC;YACN,SAAS,CAAC,IAAI,CAAC,iBAAiB,CAAC,CAAC;QACpC,CAAC;QACD,uEAAuE;QACvE,wEAAwE;QACxE,2DAA2D;QAC3D,KAAK,MAAM,GAAG,IAAI,IAAI,EAAE,SAAS,IAAI,EAAE,EAAE,CAAC;YACxC,IAAI,CAAC,GAAG,CAAC,UAAU,CAAC,aAAa,CAAC,IAAI,CAAC,oBAAoB,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC;gBACtE,MAAM,IAAI,KAAK,CAAC,+BAA+B,GAAG,uBAAuB,aAAa,EAAE,CAAC,CAAC;YAC5F,CAAC;YACD,SAAS,CAAC,IAAI,CAAC,SAAS,EAAE,GAAG,CAAC,CAAC;QACjC,CAAC;QACD,IAAI,CAAC,oBAAoB,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC;YACtC,MAAM,IAAI,KAAK,CAAC,2BAA2B,KAAK,iBAAiB,CAAC,CAAC;QACrE,CAAC;QACD,KAAK,MAAM,CAAC,CAAC,EAAE,CAAC,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,IAAI,EAAE,UAAU,IAAI,EAAE,CAAC,EAAE,CAAC;YAC5D,IAAI,CAAC,oBAAoB,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC;gBAClC,MAAM,IAAI,KAAK,CAAC,6BAA6B,CAAC,yBAAyB,CAAC,CAAC;YAC3E,CAAC;YACD,iEAAiE;YACjE,sEAAsE;YACtE,IAAI,SAAS,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC;gBACtB,MAAM,IAAI,KAAK,CAAC,mCAAmC,CAAC,+BAA+B,CAAC,CAAC;YACvF,CAAC;YACD,SAAS,CAAC,IAAI,CAAC,eAAe,EAAE,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;QACjD,CAAC;QAED,MAAM,GAAG,GAAG;YACV,YAAY,EAAE,KAAK;YACnB,SAAS,EAAE,KAAK;YAChB,WAAW,EAAE,MAAM;YACnB,GAAG,SAAS;SACb,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QAEZ,uEAAuE;QACvE,yEAAyE;QACzE,+DAA+D;QAC/D,iEAAiE;QACjE,uCAAuC;QACvC,MAAM,OAAO,GAAG,IAAI,EAAE,QAAQ,IAAI,aAAa,CAAC;QAChD,IAAI,CAAC,OAAO,CAAC,UAAU,CAAC,aAAa,CAAC,IAAI,CAAC,oBAAoB,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC;YAC9E,MAAM,IAAI,KAAK,CAAC,+BAA+B,OAAO,uBAAuB,aAAa,EAAE,CAAC,CAAC;QAChG,CAAC;QACD,2EAA2E;QAC3E,uEAAuE;QACvE,MAAM,IAAI,GAAG,CAAC,MAAM,EAAE,IAAI,EAAE,QAAQ,EAAE,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,IAAI,CAAC,aAAa,EAAE,IAAI,EAAE,IAAI,EAAE,GAAG,CAAC,CAAC;QAEnG,wEAAwE;QACxE,8DAA8D;QAC9D,mEAAmE;QACnE,yEAAyE;QACzE,wEAAwE;QACxE,gEAAgE;QAChE,EAAE;QACF,wEAAwE;QACxE,mBAAmB;QACnB,MAAM,iBAAiB,GAAG,CAAC,GAAG,IAAI,CAAC;QACnC,OAAO,MAAM,IAAI,OAAO,CAAO,CAAC,cAAc,EAAE,MAAM,EAAE,EAAE;YACxD,MAAM,KAAK,GAAG,KAAK,CAAC,QAAQ,EAAE,IAAI,EAAE,EAAE,KAAK,EAAE,CAAC,MAAM,EAAE,MAAM,EAAE,MAAM,CAAC,EAAE,CAAC,CAAC;YACzE,KAAK,CAAC,KAAK,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;YAC1B,KAAK,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC;YAClB,IAAI,UAAU,GAAG,EAAE,CAAC;YACpB,IAAI,GAAG,GAAG,EAAE,CAAC;YAEb,MAAM,KAAK,GAAG,UAAU,CAAC,GAAG,EAAE;gBAC5B,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;gBACtB,MAAM,CAAC,IAAI,KAAK,CAAC,iCAAiC,OAAO,GAAG,CAAC,CAAC,CAAC;YACjE,CAAC,EAAE,OAAO,GAAG,IAAI,CAAC,CAAC;YAEnB,KAAK,CAAC,MAAM,CAAC,WAAW,CAAC,OAAO,CAAC,CAAC;YAClC,KAAK,CAAC,MAAM,CAAC,EAAE,CAAC,MAAM,EAAE,CAAC,KAAa,EAAE,EAAE;gBACxC,IAAI,CAAC,IAAI,EAAE,MAAM;oBAAE,OAAO;gBAC1B,qEAAqE;gBACrE,oCAAoC;gBACpC,GAAG,IAAI,KAAK,CAAC;gBACb,IAAI,EAAU,CAAC;gBACf,OAAO,CAAC,EAAE,GAAG,GAAG,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC;oBACrC,MAAM,IAAI,GAAG,GAAG,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;oBAC9B,GAAG,GAAG,GAAG,CAAC,KAAK,CAAC,EAAE,GAAG,CAAC,CAAC,CAAC;oBACxB,IAAI,IAAI,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;wBACpB,IAAI,CAAC;4BAAC,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;wBAAC,CAAC;wBAAC,MAAM,CAAC,CAAC,6BAA6B,CAAC,CAAC;oBACpE,CAAC;gBACH,CAAC;YACH,CAAC,CAAC,CAAC;YAEH,KAAK,CAAC,MAAM,CAAC,WAAW,CAAC,OAAO,CAAC,CAAC;YAClC,KAAK,CAAC,MAAM,CAAC,EAAE,CAAC,MAAM,EAAE,CAAC,KAAa,EAAE,EAAE;gBACxC,UAAU,IAAI,KAAK,CAAC;gBACpB,IAAI,UAAU,CAAC,MAAM,GAAG,iBAAiB,EAAE,CAAC;oBAC1C,UAAU,GAAG,UAAU,CAAC,KAAK,CAAC,CAAC,iBAAiB,CAAC,CAAC;gBACpD,CAAC;YACH,CAAC,CAAC,CAAC;YAEH,KAAK,CAAC,EAAE,CAAC,OAAO,EAAE,CAAC,GAAG,EAAE,EAAE;gBACxB,YAAY,CAAC,KAAK,CAAC,CAAC;gBACpB,MAAM,CAAC,IAAI,KAAK,CAAC,+BAA+B,GAAG,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC;YAClE,CAAC,CAAC,CAAC;YAEH,KAAK,CAAC,EAAE,CAAC,OAAO,EAAE,CAAC,IAAI,EAAE,EAAE;gBACzB,YAAY,CAAC,KAAK,CAAC,CAAC;gBACpB,kCAAkC;gBAClC,IAAI,GAAG,CAAC,MAAM,GAAG,CAAC,IAAI,IAAI,EAAE,MAAM,EAAE,CAAC;oBACnC,IAAI,CAAC;wBAAC,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;oBAAC,CAAC;oBAAC,MAAM,CAAC,CAAC,YAAY,CAAC,CAAC;oBAChD,GAAG,GAAG,EAAE,CAAC;gBACX,CAAC;gBACD,IAAI,IAAI,KAAK,CAAC,EAAE,CAAC;oBACf,cAAc,EAAE,CAAC;gBACnB,CAAC;qBAAM,CAAC;oBACN,MAAM,CAAC,IAAI,KAAK,CAAC,8BAA8B,IAAI,MAAM,UAAU,IAAI,WAAW,EAAE,CAAC,CAAC,CAAC;gBACzF,CAAC;YACH,CAAC,CAAC,CAAC;QACL,CAAC,CAAC,CAAC;IACL,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,OAAO,CAAC,MAAc;QAC1B,MAAM,IAAI,GAAG,IAAI,CAAC,gBAAgB,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;QAC/C,IAAI,CAAC,IAAI;YAAE,OAAO;QAElB,QAAQ,CAAC,QAAQ,EAAE,CAAC,IAAI,EAAE,IAAI,EAAE,IAAI,CAAC,aAAa,CAAC,CAAC,CAAC;QACrD,IAAI,CAAC,gBAAgB,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;QACrC,OAAO,CAAC,GAAG,CAAC,wBAAwB,IAAI,CAAC,aAAa,EAAE,CAAC,CAAC;IAC5D,CAAC;IAED,KAAK,CAAC,UAAU;QACd,KAAK,MAAM,MAAM,IAAI,IAAI,CAAC,gBAAgB,CAAC,IAAI,EAAE,EAAE,CAAC;YAClD,MAAM,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;QAC7B,CAAC;IACH,CAAC;IAEO,gBAAgB,CAAC,YAAoB;QAC3C,MAAM,OAAO,GAAG,IAAI,CAAC,YAAY,EAAE,MAAM,CAAC,CAAC;QAC3C,IAAI,CAAC,UAAU,CAAC,OAAO,CAAC;YAAE,OAAO,EAAE,CAAC;QAEpC,IAAI,CAAC;YACH,MAAM,OAAO,GAAG,YAAY,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC,IAAI,EAAE,CAAC;YACtD,MAAM,KAAK,GAAG,OAAO,CAAC,KAAK,CAAC,kBAAkB,CAAC,CAAC;YAChD,IAAI,KAAK,EAAE,CAAC;gBACV,gEAAgE;gBAChE,MAAM,UAAU,GAAG,OAAO,CAAC,OAAO,CAAC,OAAO,CAAC,EAAE,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC;gBACvD,MAAM,YAAY,GAAG,OAAO,CAAC,UAAU,EAAE,IAAI,EAAE,IAAI,CAAC,CAAC;gBACrD,MAAM,WAAW,GAAG,OAAO,CAAC,YAAY,EAAE,IAAI,CAAC,CAAC;gBAChD,IAAI,CAAC,SAAS,CAAC,WAAW,EAAE,YAAY,CAAC,EAAE,CAAC;oBAC1C,OAAO,CAAC,IAAI,CACV,gEAAgE,YAAY,EAAE,CAC/E,CAAC;oBACF,OAAO,EAAE,CAAC;gBACZ,CAAC;gBACD,IAAI,CAAC,UAAU,CAAC,YAAY,CAAC,EAAE,CAAC;oBAC9B,OAAO,CAAC,IAAI,CAAC,mDAAmD,YAAY,EAAE,CAAC,CAAC;oBAChF,OAAO,EAAE,CAAC;gBACZ,CAAC;gBACD,OAAO;oBACL,GAAG,OAAO,IAAI,OAAO,EAAE;oBACvB,GAAG,YAAY,IAAI,YAAY,EAAE;iBAClC,CAAC;YACJ,CAAC;QACH,CAAC;QAAC,MAAM,CAAC,CAAC,kBAAkB,CAAC,CAAC;QAE9B,qEAAqE;QACrE,OAAO,EAAE,CAAC;IACZ,CAAC;CACF;AAED,SAAS,OAAO,CAAC,GAAW,EAAE,IAAc,EAAE,IAA2B;IACvE,OAAO,YAAY,CAAC,GAAG,EAAE,IAAI,EAAE;QAC7B,QAAQ,EAAE,OAAO;QACjB,KAAK,EAAE,CAAC,MAAM,EAAE,MAAM,EAAE,MAAM,CAAC;QAC/B,OAAO,EAAE,IAAI,EAAE,OAAO;KACvB,CAAC,CAAC;AACL,CAAC;AAED,SAAS,QAAQ,CAAC,GAAW,EAAE,IAAc;IAC3C,IAAI,CAAC;QAAC,YAAY,CAAC,GAAG,EAAE,IAAI,EAAE,EAAE,KAAK,EAAE,QAAQ,EAAE,CAAC,CAAC;IAAC,CAAC;IAAC,MAAM,CAAC,CAAC,YAAY,CAAC,CAAC;AAC9E,CAAC;AAED,SAAS,SAAS,CAAC,MAAc,EAAE,KAAa;IAC9C,MAAM,GAAG,GAAG,QAAQ,CAAC,MAAM,EAAE,KAAK,CAAC,CAAC;IACpC,OAAO,GAAG,KAAK,EAAE,IAAI,CAAC,CAAC,GAAG,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC;AACnE,CAAC;AAED;;;;GAIG;AACH,SAAS,UAAU,CAAC,KAAa;IAC/B,OAAO,KAAK,CAAC,UAAU,CAAC,GAAG,CAAC;QAC1B,KAAK,CAAC,UAAU,CAAC,IAAI,CAAC;QACtB,KAAK,CAAC,UAAU,CAAC,KAAK,CAAC;QACvB,KAAK,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC;AAC1B,CAAC;AAED;;;;GAIG;AACH,SAAS,eAAe,CAAC,KAAa;IACpC,IAAI,CAAC,GAAG,KAAK,CAAC;IACd,IAAI,CAAC,CAAC,UAAU,CAAC,GAAG,CAAC,EAAE,CAAC;QACtB,CAAC,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,IAAI,IAAI,EAAE,CAAC,GAAG,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;IAC5C,CAAC;IACD,OAAO,OAAO,CAAC,CAAC,CAAC,CAAC;AACpB,CAAC"}

package/dist/sandbox/docker.test.d.ts

@@ -0,0 +1 @@
+export {};

package/dist/sandbox/docker.test.js

@@ -0,0 +1,137 @@
+import { describe, it, expect, vi, beforeEach } from "vitest";
+import { EventEmitter } from "events";
+vi.mock("child_process", async (importOriginal) => {
+    const actual = await importOriginal();
+    return {
+        ...actual,
+        spawn: vi.fn(),
+        // create() runs `docker run` via execFileSync and polls readiness via
+        // execFile (promisified). Stub both so create() can be exercised without a
+        // real docker daemon.
+        execFileSync: vi.fn().mockReturnValue("container-xyz\n"),
+        execFile: vi.fn((_cmd, _args, opts, cb) => {
+            const done = (typeof opts === "function" ? opts : cb);
+            done(null, { stdout: "", stderr: "" });
+        }),
+    };
+});
+vi.mock("fs", async (importOriginal) => {
+    const actual = await importOriginal();
+    return { ...actual, existsSync: vi.fn().mockReturnValue(true), readFileSync: vi.fn().mockReturnValue("{}") };
+});
+import { spawn, execFileSync } from "child_process";
+import { DockerSandbox } from "./docker.js";
+const mockSpawn = vi.mocked(spawn);
+const mockExecFileSync = vi.mocked(execFileSync);
+function makeFakeChild() {
+    const stdin = { write: vi.fn(), end: vi.fn() };
+    const stdout = Object.assign(new EventEmitter(), { setEncoding: vi.fn() });
+    const stderr = Object.assign(new EventEmitter(), { setEncoding: vi.fn() });
+    const child = Object.assign(new EventEmitter(), { stdin, stdout, stderr, kill: vi.fn() });
+    return child;
+}
+describe("DockerSandbox.runAgent — prompt via stdin, not shell arg", () => {
+    let manager;
+    let fakeChild;
+    beforeEach(() => {
+        vi.clearAllMocks();
+        fakeChild = makeFakeChild();
+        mockSpawn.mockReturnValue(fakeChild);
+        manager = new DockerSandbox({
+            imageName: "test-image",
+            env: {},
+            timeoutSeconds: 5,
+        });
+        manager
+            .activeContainers.set("task-001", {
+            containerId: "abc123",
+            containerName: "test-container",
+            worktreePath: "/tmp/work",
+        });
+    });
+    it("spawn is called with stdin: 'pipe'", async () => {
+        const runPromise = manager.runAgent("task-001", "hello world");
+        process.nextTick(() => fakeChild.emit("close", 0));
+        await runPromise;
+        const spawnOpts = mockSpawn.mock.calls[0][2];
+        expect(spawnOpts.stdio[0]).toBe("pipe");
+    });
+    it("prompt is written to child.stdin", async () => {
+        const prompt = "Do something dangerous'; rm -rf /; echo '";
+        const runPromise = manager.runAgent("task-001", prompt);
+        process.nextTick(() => fakeChild.emit("close", 0));
+        await runPromise;
+        expect(fakeChild.stdin.write).toHaveBeenCalledWith(prompt);
+        expect(fakeChild.stdin.end).toHaveBeenCalled();
+    });
+    it("prompt is not embedded in the docker exec args", async () => {
+        const prompt = "secret'; rm -rf /;'";
+        const runPromise = manager.runAgent("task-001", prompt);
+        process.nextTick(() => fakeChild.emit("close", 0));
+        await runPromise;
+        const dockerArgs = mockSpawn.mock.calls[0][1].join(" ");
+        expect(dockerArgs).not.toContain(prompt);
+        expect(dockerArgs).not.toContain("rm -rf");
+    });
+    it("docker exec args contain -i flag for stdin", async () => {
+        const runPromise = manager.runAgent("task-001", "test prompt");
+        process.nextTick(() => fakeChild.emit("close", 0));
+        await runPromise;
+        const dockerArgs = mockSpawn.mock.calls[0][1];
+        expect(dockerArgs).toContain("-i");
+    });
+    it("agentic-pi command runs in --sandbox none mode and does not embed the prompt", async () => {
+        const runPromise = manager.runAgent("task-001", "test prompt");
+        process.nextTick(() => fakeChild.emit("close", 0));
+        await runPromise;
+        const dockerArgs = mockSpawn.mock.calls[0][1];
+        const shCmd = dockerArgs[dockerArgs.length - 1];
+        expect(shCmd).toContain("agentic-pi run");
+        expect(shCmd).toContain("--sandbox none");
+        expect(shCmd).not.toContain("--no-file-search");
+        expect(shCmd).not.toContain("test prompt");
+    });
+});
+describe("DockerSandbox.create — shared package cache (issue #107)", () => {
+    beforeEach(() => {
+        vi.clearAllMocks();
+        mockExecFileSync.mockReturnValue("container-xyz\n");
+    });
+    function dockerRunArgv() {
+        const call = mockExecFileSync.mock.calls.find((c) => Array.isArray(c[1]) && c[1][0] === "run");
+        return call?.[1] ?? [];
+    }
+    it("mounts the shared cache volume and wires npm/pnpm/yarn env", async () => {
+        const manager = new DockerSandbox({ imageName: "img", env: {} });
+        await manager.create({
+            taskId: "repo-1-pr-review",
+            worktreePath: "/tmp/work",
+            workspaceMount: { type: "bind", hostPath: "/tmp/work" },
+        });
+        const argv = dockerRunArgv();
+        expect(argv).toContain("lastlight_pkg-cache:/cache");
+        expect(argv).toContain("npm_config_cache=/cache/npm");
+        expect(argv).toContain("npm_config_store_dir=/cache/pnpm");
+        expect(argv).toContain("YARN_CACHE_FOLDER=/cache/yarn");
+    });
+    it("honours LASTLIGHT_PKG_CACHE_VOLUME override", async () => {
+        const prev = process.env.LASTLIGHT_PKG_CACHE_VOLUME;
+        process.env.LASTLIGHT_PKG_CACHE_VOLUME = "my-cache";
+        try {
+            const manager = new DockerSandbox({ imageName: "img", env: {} });
+            await manager.create({
+                taskId: "t",
+                worktreePath: "/tmp/work",
+                workspaceMount: { type: "bind", hostPath: "/tmp/work" },
+            });
+            expect(dockerRunArgv()).toContain("my-cache:/cache");
+        }
+        finally {
+            if (prev === undefined)
+                delete process.env.LASTLIGHT_PKG_CACHE_VOLUME;
+            else
+                process.env.LASTLIGHT_PKG_CACHE_VOLUME = prev;
+        }
+    });
+});
+//# sourceMappingURL=docker.test.js.map

package/dist/sandbox/docker.test.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"docker.test.js","sourceRoot":"","sources":["../../src/sandbox/docker.test.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,EAAE,EAAE,MAAM,EAAE,EAAE,EAAE,UAAU,EAAE,MAAM,QAAQ,CAAC;AAC9D,OAAO,EAAE,YAAY,EAAE,MAAM,QAAQ,CAAC;AAEtC,EAAE,CAAC,IAAI,CAAC,eAAe,EAAE,KAAK,EAAE,cAAc,EAAE,EAAE;IAChD,MAAM,MAAM,GAAG,MAAM,cAAc,EAAkC,CAAC;IACtE,OAAO;QACL,GAAG,MAAM;QACT,KAAK,EAAE,EAAE,CAAC,EAAE,EAAE;QACd,sEAAsE;QACtE,2EAA2E;QAC3E,sBAAsB;QACtB,YAAY,EAAE,EAAE,CAAC,EAAE,EAAE,CAAC,eAAe,CAAC,iBAAiB,CAAC;QACxD,QAAQ,EAAE,EAAE,CAAC,EAAE,CAAC,CAAC,IAAY,EAAE,KAAe,EAAE,IAAa,EAAE,EAAY,EAAE,EAAE;YAC7E,MAAM,IAAI,GAAG,CAAC,OAAO,IAAI,KAAK,UAAU,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAqC,CAAC;YAC1F,IAAI,CAAC,IAAI,EAAE,EAAE,MAAM,EAAE,EAAE,EAAE,MAAM,EAAE,EAAE,EAAE,CAAC,CAAC;QACzC,CAAC,CAAC;KACH,CAAC;AACJ,CAAC,CAAC,CAAC;AAEH,EAAE,CAAC,IAAI,CAAC,IAAI,EAAE,KAAK,EAAE,cAAc,EAAE,EAAE;IACrC,MAAM,MAAM,GAAG,MAAM,cAAc,EAAuB,CAAC;IAC3D,OAAO,EAAE,GAAG,MAAM,EAAE,UAAU,EAAE,EAAE,CAAC,EAAE,EAAE,CAAC,eAAe,CAAC,IAAI,CAAC,EAAE,YAAY,EAAE,EAAE,CAAC,EAAE,EAAE,CAAC,eAAe,CAAC,IAAI,CAAC,EAAE,CAAC;AAC/G,CAAC,CAAC,CAAC;AAEH,OAAO,EAAE,KAAK,EAAE,YAAY,EAAE,MAAM,eAAe,CAAC;AACpD,OAAO,EAAE,aAAa,EAAE,MAAM,aAAa,CAAC;AAE5C,MAAM,SAAS,GAAG,EAAE,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;AACnC,MAAM,gBAAgB,GAAG,EAAE,CAAC,MAAM,CAAC,YAAY,CAAC,CAAC;AAEjD,SAAS,aAAa;IACpB,MAAM,KAAK,GAAG,EAAE,KAAK,EAAE,EAAE,CAAC,EAAE,EAAE,EAAE,GAAG,EAAE,EAAE,CAAC,EAAE,EAAE,EAAE,CAAC;IAC/C,MAAM,MAAM,GAAG,MAAM,CAAC,MAAM,CAAC,IAAI,YAAY,EAAE,EAAE,EAAE,WAAW,EAAE,EAAE,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC;IAC3E,MAAM,MAAM,GAAG,MAAM,CAAC,MAAM,CAAC,IAAI,YAAY,EAAE,EAAE,EAAE,WAAW,EAAE,EAAE,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC;IAC3E,MAAM,KAAK,GAAG,MAAM,CAAC,MAAM,CAAC,IAAI,YAAY,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,EAAE,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC;IAC1F,OAAO,KAIN,CAAC;AACJ,CAAC;AAED,QAAQ,CAAC,0DAA0D,EAAE,GAAG,EAAE;IACxE,IAAI,OAAsB,CAAC;IAC3B,IAAI,SAA2C,CAAC;IAEhD,UAAU,CAAC,GAAG,EAAE;QACd,EAAE,CAAC,aAAa,EAAE,CAAC;QACnB,SAAS,GAAG,aAAa,EAAE,CAAC;QAC5B,SAAS,CAAC,eAAe,CAAC,SAAgD,CAAC,CAAC;QAE5E,OAAO,GAAG,IAAI,aAAa,CAAC;YAC1B,SAAS,EAAE,YAAY;YACvB,GAAG,EAAE,EAAE;YACP,cAAc,EAAE,CAAC;SAClB,CAAC,CAAC;QACF,OAAiE;aAC/D,gBAAgB,CAAC,GAAG,CAAC,UAAU,EAAE;YAChC,WAAW,EAAE,QAAQ;YACrB,aAAa,EAAE,gBAAgB;YAC/B,YAAY,EAAE,WAAW;SAC1B,CAAC,CAAC;IACP,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,oCAAoC,EAAE,KAAK,IAAI,EAAE;QAClD,MAAM,UAAU,GAAG,OAAO,CAAC,QAAQ,CAAC,UAAU,EAAE,aAAa,CAAC,CAAC;QAC/D,OAAO,CAAC,QAAQ,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,IAAI,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,CAAC;QACnD,MAAM,UAAU,CAAC;QAEjB,MAAM,SAAS,GAAG,SAAS,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAyB,CAAC;QACrE,MAAM,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;IAC1C,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,kCAAkC,EAAE,KAAK,IAAI,EAAE;QAChD,MAAM,MAAM,GAAG,2CAA2C,CAAC;QAC3D,MAAM,UAAU,GAAG,OAAO,CAAC,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC,CAAC;QACxD,OAAO,CAAC,QAAQ,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,IAAI,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,CAAC;QACnD,MAAM,UAAU,CAAC;QAEjB,MAAM,CAAC,SAAS,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,oBAAoB,CAAC,MAAM,CAAC,CAAC;QAC3D,MAAM,CAAC,SAAS,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,gBAAgB,EAAE,CAAC;IACjD,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,gDAAgD,EAAE,KAAK,IAAI,EAAE;QAC9D,MAAM,MAAM,GAAG,qBAAqB,CAAC;QACrC,MAAM,UAAU,GAAG,OAAO,CAAC,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC,CAAC;QACxD,OAAO,CAAC,QAAQ,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,IAAI,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,CAAC;QACnD,MAAM,UAAU,CAAC;QAEjB,MAAM,UAAU,GAAI,SAAS,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAc,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QACtE,MAAM,CAAC,UAAU,CAAC,CAAC,GAAG,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC;QACzC,MAAM,CAAC,UAAU,CAAC,CAAC,GAAG,CAAC,SAAS,CAAC,QAAQ,CAAC,CAAC;IAC7C,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,4CAA4C,EAAE,KAAK,IAAI,EAAE;QAC1D,MAAM,UAAU,GAAG,OAAO,CAAC,QAAQ,CAAC,UAAU,EAAE,aAAa,CAAC,CAAC;QAC/D,OAAO,CAAC,QAAQ,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,IAAI,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,CAAC;QACnD,MAAM,UAAU,CAAC;QAEjB,MAAM,UAAU,GAAG,SAAS,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAa,CAAC;QAC1D,MAAM,CAAC,UAAU,CAAC,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC;IACrC,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,8EAA8E,EAAE,KAAK,IAAI,EAAE;QAC5F,MAAM,UAAU,GAAG,OAAO,CAAC,QAAQ,CAAC,UAAU,EAAE,aAAa,CAAC,CAAC;QAC/D,OAAO,CAAC,QAAQ,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,IAAI,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,CAAC;QACnD,MAAM,UAAU,CAAC;QAEjB,MAAM,UAAU,GAAG,SAAS,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAa,CAAC;QAC1D,MAAM,KAAK,GAAG,UAAU,CAAC,UAAU,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC;QAChD,MAAM,CAAC,KAAK,CAAC,CAAC,SAAS,CAAC,gBAAgB,CAAC,CAAC;QAC1C,MAAM,CAAC,KAAK,CAAC,CAAC,SAAS,CAAC,gBAAgB,CAAC,CAAC;QAC1C,MAAM,CAAC,KAAK,CAAC,CAAC,GAAG,CAAC,SAAS,CAAC,kBAAkB,CAAC,CAAC;QAChD,MAAM,CAAC,KAAK,CAAC,CAAC,GAAG,CAAC,SAAS,CAAC,aAAa,CAAC,CAAC;IAC7C,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC;AAEH,QAAQ,CAAC,0DAA0D,EAAE,GAAG,EAAE;IACxE,UAAU,CAAC,GAAG,EAAE;QACd,EAAE,CAAC,aAAa,EAAE,CAAC;QACnB,gBAAgB,CAAC,eAAe,CAAC,iBAAiB,CAAC,CAAC;IACtD,CAAC,CAAC,CAAC;IAEH,SAAS,aAAa;QACpB,MAAM,IAAI,GAAG,gBAAgB,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAC3C,CAAC,CAAC,EAAE,EAAE,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAK,CAAC,CAAC,CAAC,CAAc,CAAC,CAAC,CAAC,KAAK,KAAK,CAC9D,CAAC;QACF,OAAQ,IAAI,EAAE,CAAC,CAAC,CAAc,IAAI,EAAE,CAAC;IACvC,CAAC;IAED,EAAE,CAAC,4DAA4D,EAAE,KAAK,IAAI,EAAE;QAC1E,MAAM,OAAO,GAAG,IAAI,aAAa,CAAC,EAAE,SAAS,EAAE,KAAK,EAAE,GAAG,EAAE,EAAE,EAAE,CAAC,CAAC;QACjE,MAAM,OAAO,CAAC,MAAM,CAAC;YACnB,MAAM,EAAE,kBAAkB;YAC1B,YAAY,EAAE,WAAW;YACzB,cAAc,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,QAAQ,EAAE,WAAW,EAAE;SACxD,CAAC,CAAC;QACH,MAAM,IAAI,GAAG,aAAa,EAAE,CAAC;QAC7B,MAAM,CAAC,IAAI,CAAC,CAAC,SAAS,CAAC,4BAA4B,CAAC,CAAC;QACrD,MAAM,CAAC,IAAI,CAAC,CAAC,SAAS,CAAC,6BAA6B,CAAC,CAAC;QACtD,MAAM,CAAC,IAAI,CAAC,CAAC,SAAS,CAAC,kCAAkC,CAAC,CAAC;QAC3D,MAAM,CAAC,IAAI,CAAC,CAAC,SAAS,CAAC,+BAA+B,CAAC,CAAC;IAC1D,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,6CAA6C,EAAE,KAAK,IAAI,EAAE;QAC3D,MAAM,IAAI,GAAG,OAAO,CAAC,GAAG,CAAC,0BAA0B,CAAC;QACpD,OAAO,CAAC,GAAG,CAAC,0BAA0B,GAAG,UAAU,CAAC;QACpD,IAAI,CAAC;YACH,MAAM,OAAO,GAAG,IAAI,aAAa,CAAC,EAAE,SAAS,EAAE,KAAK,EAAE,GAAG,EAAE,EAAE,EAAE,CAAC,CAAC;YACjE,MAAM,OAAO,CAAC,MAAM,CAAC;gBACnB,MAAM,EAAE,GAAG;gBACX,YAAY,EAAE,WAAW;gBACzB,cAAc,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,QAAQ,EAAE,WAAW,EAAE;aACxD,CAAC,CAAC;YACH,MAAM,CAAC,aAAa,EAAE,CAAC,CAAC,SAAS,CAAC,iBAAiB,CAAC,CAAC;QACvD,CAAC;gBAAS,CAAC;YACT,IAAI,IAAI,KAAK,SAAS;gBAAE,OAAO,OAAO,CAAC,GAAG,CAAC,0BAA0B,CAAC;;gBACjE,OAAO,CAAC,GAAG,CAAC,0BAA0B,GAAG,IAAI,CAAC;QACrD,CAAC;IACH,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC"}

package/dist/sandbox/egress-allowlist.d.ts

@@ -0,0 +1,69 @@
+/**
+ * Single source of truth for sandbox HTTP egress allowlists.
+ *
+ * Both sandbox backends consume this list:
+ *   - gondolin: passed verbatim to `agenticRun({ allowedHttpHosts })` so the
+ *     QEMU-layer HTTP interceptor 502s anything off-list.
+ *   - docker: nginx-egress + coredns configs are generated from these hosts
+ *     at harness boot. Sandbox containers spawn with `--dns <coredns-ip>`;
+ *     coredns sinkholes allowlisted hostnames to the nginx firewall IP,
+ *     which peeks SNI and tunnels to the real upstream. See
+ *     `src/sandbox/egress-firewall-config.ts` for the full architecture.
+ *
+ * The lists are intentionally split so callers can compose tighter policies
+ * (e.g. a read-only profile that doesn't need package registries). The
+ * everyday default is `DEFAULT_ALLOWLIST`.
+ *
+ * ## Convention: every entry matches the apex AND all subdomains
+ *
+ * `openai.com`  → matches openai.com, api.openai.com, platform.openai.com, …
+ * `npmjs.org`   → matches npmjs.org, registry.npmjs.org, auth.npmjs.org, …
+ *
+ * Bare hostnames only — no leading dot, no `*.` prefix. The config
+ * generator emits the right syntax for each backend (nginx's
+ * `.example.com` map form, CoreDNS regex `(^|\.)example\.com\.$`).
+ *
+ * Exact-only matching isn't currently supported because we haven't
+ * needed it — every host in the list is one we want apex+subdomain
+ * access to. If we ever do, we'd add an explicit type (e.g. an `exact:`
+ * prefix) so the loose-by-default convention stays unambiguous.
+ *
+ * A workflow phase can declare `unrestricted_egress: true` to bypass the
+ * allowlist entirely — see `src/workflows` for the phase schema.
+ */
+/** GitHub HTTPS endpoints used by `git`, `gh`, and agentic-pi's github tools. */
+export declare const GITHUB_HOSTS: readonly string[];
+/**
+ * LLM provider hosts.
+ *
+ * Required for the docker backend because `agentic-pi run` executes inside
+ * the sandbox container there (`src/sandbox/docker.ts` runs `agentic-pi run
+ * --sandbox none`), so the LLM HTTP call originates from inside the
+ * container. The gondolin backend runs agentic-pi in the harness process,
+ * so the call originates from the host and these hosts aren't strictly
+ * required inside the VM — they're kept here so a single allowlist can
+ * cover both paths without surprises.
+ */
+export declare const PROVIDER_HOSTS: readonly string[];
+/**
+ * Public package registries the executor may hit during `npm install`,
+ * etc. Apex-plus-subdomain matching covers auth / CDN / mirror
+ * subdomains without needing separate entries.
+ */
+export declare const PACKAGE_REGISTRY_HOSTS: readonly string[];
+/**
+ * Combined allowlist used by both backends when a phase has not opted into
+ * unrestricted egress. Order is preserved across imports so generated
+ * configs are stable.
+ */
+export declare const DEFAULT_ALLOWLIST: readonly string[];
+/**
+ * Sentinel value recognized by agentic-pi/gondolin (post the `"*"` patch)
+ * meaning "allow every host". Used when a phase sets `unrestricted_egress`.
+ *
+ * On the docker backend, unrestricted egress routes through the open
+ * nginx-egress + coredns-open pair — this sentinel is for gondolin only.
+ */
+export declare const ALLOW_ALL_SENTINEL = "*";
+export declare function normalizeAllowlistHost(host: string): string | null;
+export declare function mergeAllowlist(base: readonly string[], extra?: readonly string[]): string[];