lastlight 0.16.0 → 0.16.2

package/dist/sandbox/docker.js

@@ -1,517 +0,0 @@
-import { execFileSync, execFile as execFileCb, spawn } from "child_process";
-import { promisify } from "util";
-import { existsSync, readFileSync } from "fs";
-import { dirname, isAbsolute, join, relative, resolve } from "path";
-import { randomUUID } from "crypto";
-const execFileAsync = promisify(execFileCb);
-const WORKSPACE_DIR = "/home/agent/workspace";
-/** Shared package-manager download cache mount (issue #107). */
-const PKG_CACHE_DIR = "/cache";
-export class DockerSandbox {
-    config;
-    activeContainers = new Map();
-    constructor(config) {
-        this.config = config;
-    }
-    /**
-     * Create and start a sandbox container for a task.
-     */
-    async create(opts) {
-        const containerName = `lastlight-sandbox-${opts.taskId}-${randomUUID().slice(0, 8)}`;
-        const worktreePath = resolve(opts.worktreePath);
-        // Shared data — mounted at /data inside the sandbox. Contains secrets
-        // (app.pem) and the opencode-home session-jsonl tree (see
-        // deploy/sandbox-entrypoint.sh for the layout it expects).
-        //
-        // SANDBOX_DATA_VOLUME accepts either:
-        //   - a Docker named volume name (e.g. "lastlight_agent-data") — used in
-        //     production where the harness runs in the same compose stack
-        //   - a host filesystem path (relative or absolute, starting with `/`,
-        //     `.`, or `~`) — used in local dev so the host can inspect/edit the
-        //     same dir without copying things in and out of a named volume
-        //
-        // Default is the production named volume, so existing behavior is preserved.
-        const dataVolumeRaw = process.env.SANDBOX_DATA_VOLUME || "lastlight_agent-data";
-        const dataMount = isPathLike(dataVolumeRaw)
-            ? resolveHostPath(dataVolumeRaw) // bind mount → absolute host path
-            : dataVolumeRaw; // named volume → pass through
-        // /data is the same volume the workspace is carved out of (or the same
-        // host path), so the same -v form covers both — bind for path mode,
-        // named volume for volume mode. The workspace itself needs the more
-        // precise `--mount … volume-subpath=…` form in volume mode so the
-        // sandbox sees the harness's sandboxes/<taskId>/ dir rather than an
-        // empty docker-auto-created bind target on the host filesystem (the
-        // bug that made staged skills invisible — the two paths look identical
-        // but live in different physical locations).
-        const dockerArgs = ["-v", `${dataMount}:/data`];
-        if (opts.workspaceMount.type === "bind") {
-            dockerArgs.push("-v", `${opts.workspaceMount.hostPath}:${WORKSPACE_DIR}`);
-        }
-        else {
-            const { volume, subpath } = opts.workspaceMount;
-            dockerArgs.push("--mount", `type=volume,source=${volume},target=${WORKSPACE_DIR},volume-subpath=${subpath}`);
-        }
-        // Shared package-manager cache, mounted at /cache and shared across every
-        // sandbox (issue #107). Each ecosystem's download cache is content-
-        // addressed, so sharing across repos is safe and avoids re-fetching the
-        // same tarballs on every run. We point npm / pnpm / yarn at subdirs of it
-        // via env below; the entrypoint chowns them to the agent user. This is the
-        // *download* cache only — per-workspace `node_modules` stays per-workspace
-        // (a shared store can't hardlink across separate container mounts anyway).
-        //
-        // A Docker named volume (auto-created on first use); override the name with
-        // LASTLIGHT_PKG_CACHE_VOLUME. In local path-mode this is still a named
-        // volume — it needs no host-path view, so the volume/bind split that the
-        // workspace mount needs doesn't apply here.
-        const pkgCacheVolume = process.env.LASTLIGHT_PKG_CACHE_VOLUME || "lastlight_pkg-cache";
-        dockerArgs.push("-v", `${pkgCacheVolume}:${PKG_CACHE_DIR}`);
-        // Point each package manager at its shared subdir. npm reads npm_config_cache;
-        // pnpm reads npm-style env config (npm_config_store_dir → store-dir); yarn
-        // (classic + berry) reads YARN_CACHE_FOLDER; uv (python `type: script`
-        // phases) reads UV_CACHE_DIR. The agent already picks the PM from the repo's
-        // lockfile (see skills/pr-review/SKILL.md), so all are wired regardless of
-        // which one a given repo uses.
-        dockerArgs.push("-e", `npm_config_cache=${PKG_CACHE_DIR}/npm`, "-e", `npm_config_store_dir=${PKG_CACHE_DIR}/pnpm`, "-e", `YARN_CACHE_FOLDER=${PKG_CACHE_DIR}/yarn`, "-e", `UV_CACHE_DIR=${PKG_CACHE_DIR}/uv`, 
-        // uv resolves PEP 723 deps from PyPI (pypi.org / pythonhosted.org are in
-        // the strict egress allowlist). Pin it to the baked-in system python3 so
-        // it never tries to fetch a managed interpreter from astral.sh / GitHub
-        // (not guaranteed reachable under strict egress).
-        "-e", "UV_PYTHON_DOWNLOADS=never");
-        // Resolve git mounts for worktrees (if .git is a file pointing elsewhere).
-        // In volume-subpath mode these are still emitted as bind mounts; the
-        // gitMounts path is only hit for git worktrees that live alongside the
-        // sandbox in the same data dir, so for the named-volume case the
-        // sources would also be invisible from the daemon's view. The codebase
-        // doesn't currently exercise that combination — pre-clones always
-        // produce a real .git directory inside worktreePath — so leaving the
-        // bind form here keeps the existing path mode working without adding
-        // dead complexity to the named-volume path. If we ever wire a real
-        // git worktree under volume mode this needs the same translation.
-        const gitMounts = this.resolveGitMounts(worktreePath).flatMap((m) => ["-v", m]);
-        dockerArgs.push(...gitMounts);
-        // Env flags — passed to entrypoint for MCP config template expansion.
-        // No proxy env (HTTPS_PROXY etc.) is injected: the sandbox-egress
-        // network has no route to the public internet, and the coredns
-        // sidecar referenced by --dns below sinkholes allowlisted hosts to
-        // the nginx-egress firewall IP. Clients dial real hostnames; the
-        // network routes them transparently. See egress-firewall-config.ts.
-        const envFlags = Object.entries(this.config.env).flatMap(([k, v]) => ["-e", `${k}=${v}`]);
-        // Per-sandbox memory cap. Without this, a runaway agent (or a hot
-        // `npm install` / vite build inside the workspace) can OOM the host
-        // and take every other container with it. We set --memory-swap to the
-        // same value so swap can't be used to silently exceed the cap.
-        const memoryLimit = this.config.memoryLimit || "2g";
-        // Network attachment. Default is the `internal: true` sandbox-egress
-        // network declared in docker-compose.yml, which has no host route —
-        // the only outbound path is through nginx-egress, reached via the
-        // DNS sinkhole. Override via LASTLIGHT_SANDBOX_NETWORK for setups
-        // (local dev, alt orchestration) where the harness was started
-        // outside docker-compose and the network hasn't been created.
-        const network = this.config.network ||
-            process.env.LASTLIGHT_SANDBOX_NETWORK ||
-            "lastlight_sandbox-egress";
-        const networkArgs = network === "default" ? [] : ["--network", network];
-        // DNS resolver. Points at coredns-strict or coredns-open depending on
-        // the phase's egress policy. The whole filtering scheme hinges on
-        // this — every name lookup happens against our sinkhole, and
-        // allowlisted hosts get answered with the nginx-egress IP rather
-        // than the real one.
-        const dnsArgs = this.config.dnsIp ? ["--dns", this.config.dnsIp] : [];
-        // The entrypoint runs as root to fix permissions, then drops to agent via gosu.
-        // No --user flag needed.
-        const args = [
-            "run", "-d",
-            "--name", containerName,
-            "--memory", memoryLimit,
-            "--memory-swap", memoryLimit,
-            ...networkArgs,
-            ...dnsArgs,
-            ...envFlags,
-            ...dockerArgs,
-            "-w", WORKSPACE_DIR,
-            this.config.imageName,
-        ];
-        try {
-            // The entrypoint handles all setup: AGENTS.md, opencode.json, app.pem
-            // materialization, and git config. No docker exec calls needed.
-            const containerId = execCmd("docker", args).trim();
-            const info = { containerId, containerName, worktreePath };
-            this.activeContainers.set(opts.taskId, info);
-            console.log(`[sandbox] Created: ${containerName}`);
-            // Wait for entrypoint to finish setting up auth, skills, MCP config.
-            // The entrypoint drops to `gosu agent sleep infinity` when done —
-            // we detect readiness by checking for the .credentials.json symlink.
-            await this.waitForReady(containerName);
-            return info;
-        }
-        catch (err) {
-            throw new Error(`Failed to create sandbox: ${err.message}`);
-        }
-    }
-    /**
-     * Wait for the sandbox entrypoint to finish setup. The entrypoint touches
-     * `$WORKSPACE/.ready` as its last step before exec'ing the agent shell.
-     */
-    async waitForReady(containerName, timeoutMs = 15000) {
-        const start = Date.now();
-        const interval = 500;
-        while (Date.now() - start < timeoutMs) {
-            try {
-                await execFileAsync("docker", [
-                    "exec", "--user", "agent", containerName,
-                    "test", "-f", `${WORKSPACE_DIR}/.ready`,
-                ], { timeout: 5000 });
-                return;
-            }
-            catch {
-                await new Promise((r) => setTimeout(r, interval));
-            }
-        }
-        console.warn(`[sandbox] Timed out waiting for ${containerName} to be ready — proceeding anyway`);
-    }
-    /**
-     * Run the agentic-pi CLI inside the sandbox with a prompt.
-     *
-     * Streams stdout line-by-line so the caller can react to JSON events
-     * (e.g. capture the top-level `session` record's id) before the agent
-     * has finished. The full stdout is also buffered and returned for
-     * post-run parsing of the usage_snapshot rollup.
-     */
-    async runAgent(taskId, prompt, opts) {
-        const info = this.activeContainers.get(taskId);
-        if (!info)
-            throw new Error(`No sandbox for task ${taskId}`);
-        const model = opts?.model || "anthropic/claude-sonnet-4-6";
-        const timeout = this.config.timeoutSeconds || 1800;
-        // `cmd` is interpolated into `sh -c <cmd>` below, so any value we
-        // append here is shell-parsed. Assert each opt-supplied flag against
-        // a tight allowlist before embedding — defense in depth in case any
-        // of these ever gets sourced from user input.
-        const THINKING = new Set(["off", "minimal", "low", "medium", "high", "xhigh"]);
-        const PROFILES = new Set(["read", "issues-write", "review-write", "repo-write"]);
-        const WEB_SEARCH_PROVIDERS = new Set(["tavily", "brave", "exa"]);
-        const extraArgs = [];
-        if (opts?.thinking) {
-            if (!THINKING.has(opts.thinking)) {
-                throw new Error(`Refusing to pass thinking "${opts.thinking}" — must be one of ${[...THINKING].join("|")}`);
-            }
-            extraArgs.push("--thinking", opts.thinking);
-        }
-        if (opts?.profile) {
-            if (!PROFILES.has(opts.profile)) {
-                throw new Error(`Refusing to pass profile "${opts.profile}" — must be one of ${[...PROFILES].join("|")}`);
-            }
-            extraArgs.push("--profile", opts.profile);
-        }
-        // Web search defaults off — agentic-pi's auto-enable triggers on any
-        // provider key env var, so silence it explicitly when the caller didn't
-        // opt in. When opted in, omit the flag and let agentic-pi pick up the
-        // forwarded TAVILY_API_KEY / BRAVE_SEARCH_API_KEY / EXA_API_KEY.
-        if (opts?.webSearch === true) {
-            if (opts.webSearchProvider) {
-                if (!WEB_SEARCH_PROVIDERS.has(opts.webSearchProvider)) {
-                    throw new Error(`Refusing to pass web-search-provider "${opts.webSearchProvider}" — must be one of ${[...WEB_SEARCH_PROVIDERS].join("|")}`);
-                }
-                extraArgs.push("--web-search-provider", opts.webSearchProvider);
-            }
-        }
-        else {
-            extraArgs.push("--no-web-search");
-        }
-        // Per-phase skill bundles. Each must be an in-container path under the
-        // workspace root; assert the charset + prefix before it's embedded into
-        // the `sh -c` command, mirroring the agentCwd guard below.
-        for (const dir of opts?.skillDirs ?? []) {
-            if (!dir.startsWith(WORKSPACE_DIR) || !/^[A-Za-z0-9/_.-]+$/.test(dir)) {
-                throw new Error(`Refusing to pass skill dir "${dir}" — must live under ${WORKSPACE_DIR}`);
-            }
-            extraArgs.push("--skill", dir);
-        }
-        if (!/^[A-Za-z0-9/_.-]+$/.test(model)) {
-            throw new Error(`Refusing to pass model "${model}" — bad charset`);
-        }
-        for (const [k, v] of Object.entries(opts?.sandboxEnv ?? {})) {
-            if (!/^[A-Z_][A-Z0-9_]*$/.test(k)) {
-                throw new Error(`Refusing sandbox-env key "${k}" — must be UPPER_SNAKE`);
-            }
-            // Values are shell-quoted below. Reject newlines and the closing
-            // quote (single-quote) defensively — both would break the `'…'` wrap.
-            if (/[\n\r']/.test(v)) {
-                throw new Error(`Refusing sandbox-env value for "${k}" — contains newline or quote`);
-            }
-            extraArgs.push("--sandbox-env", `${k}='${v}'`);
-        }
-        const cmd = [
-            "agentic-pi", "run",
-            "--model", model,
-            "--sandbox", "none",
-            ...extraArgs,
-        ].join(" ");
-        // Resolve the agent's cwd. Defaults to the workspace root; callers may
-        // pass a `<WORKSPACE_DIR>/<repo>` subdir when the harness pre-cloned the
-        // target repo. Asserted against an allowlist before going into
-        // `docker exec -w` (which is a separate argv slot, but defensive
-        // narrowing keeps surprise paths out).
-        const workdir = opts?.agentCwd ?? WORKSPACE_DIR;
-        if (!workdir.startsWith(WORKSPACE_DIR) || !/^[A-Za-z0-9/_.-]+$/.test(workdir)) {
-            throw new Error(`Refusing to pass agent cwd "${workdir}" — must live under ${WORKSPACE_DIR}`);
-        }
-        // -i connects stdin so the prompt can be written to the container process.
-        // Run as agent user so workspace writes land with the right ownership.
-        const args = ["exec", "-i", "--user", "agent", "-w", workdir, info.containerName, "sh", "-c", cmd];
-        // The structured event stream is consumed line-by-line via `onLine` and
-        // mirrored to the AgenticShim, which writes envelope jsonl to
-        // `<sessionsDir>/projects/.../` (read by the admin SessionReader).
-        // That is the on-disk log. We deliberately do NOT buffer the full stdout
-        // here — for a "read a large repo" run the stream is hundreds of MB and
-        // accumulating it in a single string is what OOM'd the harness.
-        //
-        // We keep only a small bounded tail of stderr so the error-path message
-        // is still useful.
-        const STDERR_TAIL_BYTES = 8 * 1024;
-        return await new Promise((resolvePromise, reject) => {
-            const child = spawn("docker", args, { stdio: ["pipe", "pipe", "pipe"] });
-            child.stdin.write(prompt);
-            child.stdin.end();
-            let stderrTail = "";
-            let buf = "";
-            const timer = setTimeout(() => {
-                child.kill("SIGKILL");
-                reject(new Error(`Sandbox agent timed out after ${timeout}s`));
-            }, timeout * 1000);
-            child.stdout.setEncoding("utf-8");
-            child.stdout.on("data", (chunk) => {
-                if (!opts?.onLine)
-                    return;
-                // Emit complete lines to the caller as they arrive — keeps a partial
-                // tail in `buf` for the next chunk.
-                buf += chunk;
-                let nl;
-                while ((nl = buf.indexOf("\n")) >= 0) {
-                    const line = buf.slice(0, nl);
-                    buf = buf.slice(nl + 1);
-                    if (line.length > 0) {
-                        try {
-                            opts.onLine(line);
-                        }
-                        catch { /* swallow listener errors */ }
-                    }
-                }
-            });
-            child.stderr.setEncoding("utf-8");
-            child.stderr.on("data", (chunk) => {
-                stderrTail += chunk;
-                if (stderrTail.length > STDERR_TAIL_BYTES) {
-                    stderrTail = stderrTail.slice(-STDERR_TAIL_BYTES);
-                }
-            });
-            child.on("error", (err) => {
-                clearTimeout(timer);
-                reject(new Error(`Sandbox agent spawn failed: ${err.message}`));
-            });
-            child.on("close", (code) => {
-                clearTimeout(timer);
-                // Flush any trailing partial line
-                if (buf.length > 0 && opts?.onLine) {
-                    try {
-                        opts.onLine(buf);
-                    }
-                    catch { /* ignore */ }
-                    buf = "";
-                }
-                if (code === 0) {
-                    resolvePromise();
-                }
-                else {
-                    reject(new Error(`Sandbox agent failed (exit ${code}): ${stderrTail || "no output"}`));
-                }
-            });
-        });
-    }
-    /**
-     * Run a deterministic shell command inside an already-provisioned sandbox
-     * container and return its exit code + captured output. This is the
-     * non-agent sibling of {@link runAgent}: same `docker exec --user agent -w
-     * <workdir> … sh -c <cmd>` machinery, but it captures a bounded stdout tail
-     * (runAgent discards stdout) and RESOLVES with the exit code instead of
-     * rejecting on non-zero — the caller decides success/failure.
-     *
-     * Powers `type: bash` / `type: script` workflow phases (and the in-sandbox
-     * `generic_loop.until_bash` check). `command` is passed as a single argv slot
-     * to `sh -c`, so it is NOT re-parsed by the host shell — it is the script we
-     * intend to run. Env is forwarded via `docker exec -e KEY=VALUE` (argv, not
-     * shell-interpolated); keys are charset-asserted defensively.
-     */
-    async runCommand(taskId, command, opts) {
-        const info = this.activeContainers.get(taskId);
-        if (!info)
-            throw new Error(`No sandbox for task ${taskId}`);
-        const timeout = opts?.timeoutSeconds || this.config.timeoutSeconds || 1800;
-        const workdir = opts?.cwd ?? WORKSPACE_DIR;
-        if (!workdir.startsWith(WORKSPACE_DIR) || !/^[A-Za-z0-9/_.-]+$/.test(workdir)) {
-            throw new Error(`Refusing to run command in cwd "${workdir}" — must live under ${WORKSPACE_DIR}`);
-        }
-        const envFlags = [];
-        for (const [k, v] of Object.entries(opts?.sandboxEnv ?? {})) {
-            if (!/^[A-Z_][A-Z0-9_]*$/.test(k)) {
-                throw new Error(`Refusing sandbox-env key "${k}" — must be UPPER_SNAKE`);
-            }
-            // Values travel as argv (no shell re-parse), so any value is safe — but a
-            // newline would let a value smuggle a second `-e` token in some shells;
-            // reject defensively to match runAgent's posture.
-            if (/[\n\r]/.test(v)) {
-                throw new Error(`Refusing sandbox-env value for "${k}" — contains newline`);
-            }
-            envFlags.push("-e", `${k}=${v}`);
-        }
-        const args = ["exec", "--user", "agent", "-w", workdir, ...envFlags, info.containerName, "sh", "-c", command];
-        // Bounded tails so a runaway command (e.g. a build dumping MB of logs)
-        // can't OOM the harness — keep enough stdout for the downstream
-        // `{{phaseOutputs.*}}` reference to be useful.
-        const STDOUT_TAIL_BYTES = 256 * 1024;
-        const STDERR_TAIL_BYTES = 32 * 1024;
-        return await new Promise((resolvePromise, reject) => {
-            const child = spawn("docker", args, { stdio: ["ignore", "pipe", "pipe"] });
-            let stdoutTail = "";
-            let stderrTail = "";
-            let buf = "";
-            let timedOut = false;
-            const timer = setTimeout(() => {
-                timedOut = true;
-                child.kill("SIGKILL");
-            }, timeout * 1000);
-            child.stdout.setEncoding("utf-8");
-            child.stdout.on("data", (chunk) => {
-                stdoutTail += chunk;
-                if (stdoutTail.length > STDOUT_TAIL_BYTES)
-                    stdoutTail = stdoutTail.slice(-STDOUT_TAIL_BYTES);
-                if (!opts?.onLine)
-                    return;
-                buf += chunk;
-                let nl;
-                while ((nl = buf.indexOf("\n")) >= 0) {
-                    const line = buf.slice(0, nl);
-                    buf = buf.slice(nl + 1);
-                    if (line.length > 0) {
-                        try {
-                            opts.onLine(line);
-                        }
-                        catch { /* swallow listener errors */ }
-                    }
-                }
-            });
-            child.stderr.setEncoding("utf-8");
-            child.stderr.on("data", (chunk) => {
-                stderrTail += chunk;
-                if (stderrTail.length > STDERR_TAIL_BYTES)
-                    stderrTail = stderrTail.slice(-STDERR_TAIL_BYTES);
-            });
-            child.on("error", (err) => {
-                clearTimeout(timer);
-                reject(new Error(`Sandbox command spawn failed: ${err.message}`));
-            });
-            child.on("close", (code) => {
-                clearTimeout(timer);
-                if (buf.length > 0 && opts?.onLine) {
-                    try {
-                        opts.onLine(buf);
-                    }
-                    catch { /* ignore */ }
-                }
-                resolvePromise({
-                    exitCode: timedOut ? 124 : (code ?? 1),
-                    stdout: stdoutTail,
-                    stderr: stderrTail,
-                    timedOut,
-                });
-            });
-        });
-    }
-    /**
-     * Remove a sandbox container.
-     */
-    async destroy(taskId) {
-        const info = this.activeContainers.get(taskId);
-        if (!info)
-            return;
-        execSafe("docker", ["rm", "-f", info.containerName]);
-        this.activeContainers.delete(taskId);
-        console.log(`[sandbox] Destroyed: ${info.containerName}`);
-    }
-    async destroyAll() {
-        for (const taskId of this.activeContainers.keys()) {
-            await this.destroy(taskId);
-        }
-    }
-    resolveGitMounts(worktreePath) {
-        const gitPath = join(worktreePath, ".git");
-        if (!existsSync(gitPath))
-            return [];
-        try {
-            const content = readFileSync(gitPath, "utf-8").trim();
-            const match = content.match(/^gitdir:\s*(.+)$/);
-            if (match) {
-                // Resolve relative to the .git file location (not process cwd).
-                const gitdirPath = resolve(dirname(gitPath), match[1]);
-                const parentGitDir = resolve(gitdirPath, "..", "..");
-                const sandboxRoot = resolve(worktreePath, "..");
-                if (!isSubpath(sandboxRoot, parentGitDir)) {
-                    console.warn(`[sandbox] Blocking unsafe gitdir mount outside sandbox root: ${parentGitDir}`);
-                    return [];
-                }
-                if (!existsSync(parentGitDir)) {
-                    console.warn(`[sandbox] Skipping missing gitdir parent mount: ${parentGitDir}`);
-                    return [];
-                }
-                return [
-                    `${gitPath}:${gitPath}`,
-                    `${parentGitDir}:${parentGitDir}`,
-                ];
-            }
-        }
-        catch { /* fall through */ }
-        // Normal repo clone with a real .git directory needs no extra mount.
-        return [];
-    }
-}
-function execCmd(cmd, args, opts) {
-    return execFileSync(cmd, args, {
-        encoding: "utf-8",
-        stdio: ["pipe", "pipe", "pipe"],
-        timeout: opts?.timeout,
-    });
-}
-function execSafe(cmd, args) {
-    try {
-        execFileSync(cmd, args, { stdio: "ignore" });
-    }
-    catch { /* ignore */ }
-}
-function isSubpath(parent, child) {
-    const rel = relative(parent, child);
-    return rel === "" || (!rel.startsWith("..") && !isAbsolute(rel));
-}
-/**
- * A SANDBOX_DATA_VOLUME value is a host filesystem path (rather than a Docker
- * named volume) when it begins with `/`, `./`, `../`, or `~`. Named volumes
- * cannot contain those characters, so this disambiguation is unambiguous.
- */
-function isPathLike(value) {
-    return value.startsWith("/") ||
-        value.startsWith("./") ||
-        value.startsWith("../") ||
-        value.startsWith("~");
-}
-/**
- * Resolve a path-like SANDBOX_DATA_VOLUME value to an absolute host path
- * suitable for `docker run -v <host>:/data`. Expands `~` and resolves
- * relative paths against the harness cwd.
- */
-function resolveHostPath(value) {
-    let p = value;
-    if (p.startsWith("~")) {
-        p = (process.env.HOME || "") + p.slice(1);
-    }
-    return resolve(p);
-}
-//# sourceMappingURL=docker.js.map

package/dist/sandbox/docker.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"docker.js","sourceRoot":"","sources":["../../src/sandbox/docker.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,YAAY,EAAE,QAAQ,IAAI,UAAU,EAAE,KAAK,EAAE,MAAM,eAAe,CAAC;AAC5E,OAAO,EAAE,SAAS,EAAE,MAAM,MAAM,CAAC;AACjC,OAAO,EAAE,UAAU,EAAE,YAAY,EAAE,MAAM,IAAI,CAAC;AAC9C,OAAO,EAAE,OAAO,EAAE,UAAU,EAAE,IAAI,EAAE,QAAQ,EAAE,OAAO,EAAE,MAAM,MAAM,CAAC;AACpE,OAAO,EAAE,UAAU,EAAE,MAAM,QAAQ,CAAC;AAEpC,MAAM,aAAa,GAAG,SAAS,CAAC,UAAU,CAAC,CAAC;AA0E5C,MAAM,aAAa,GAAG,uBAAuB,CAAC;AAC9C,gEAAgE;AAChE,MAAM,aAAa,GAAG,QAAQ,CAAC;AAE/B,MAAM,OAAO,aAAa;IAChB,MAAM,CAAgB;IACtB,gBAAgB,GAA6B,IAAI,GAAG,EAAE,CAAC;IAE/D,YAAY,MAAqB;QAC/B,IAAI,CAAC,MAAM,GAAG,MAAM,CAAC;IACvB,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,MAAM,CAAC,IAIZ;QACC,MAAM,aAAa,GAAG,qBAAqB,IAAI,CAAC,MAAM,IAAI,UAAU,EAAE,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE,CAAC;QACrF,MAAM,YAAY,GAAG,OAAO,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC;QAEhD,sEAAsE;QACtE,0DAA0D;QAC1D,2DAA2D;QAC3D,EAAE;QACF,sCAAsC;QACtC,yEAAyE;QACzE,kEAAkE;QAClE,uEAAuE;QACvE,wEAAwE;QACxE,mEAAmE;QACnE,EAAE;QACF,6EAA6E;QAC7E,MAAM,aAAa,GAAG,OAAO,CAAC,GAAG,CAAC,mBAAmB,IAAI,sBAAsB,CAAC;QAChF,MAAM,SAAS,GAAG,UAAU,CAAC,aAAa,CAAC;YACzC,CAAC,CAAC,eAAe,CAAC,aAAa,CAAC,CAAE,kCAAkC;YACpE,CAAC,CAAC,aAAa,CAAC,CAAkB,8BAA8B;QAElE,uEAAuE;QACvE,oEAAoE;QACpE,oEAAoE;QACpE,kEAAkE;QAClE,oEAAoE;QACpE,oEAAoE;QACpE,uEAAuE;QACvE,6CAA6C;QAC7C,MAAM,UAAU,GAAa,CAAC,IAAI,EAAE,GAAG,SAAS,QAAQ,CAAC,CAAC;QAC1D,IAAI,IAAI,CAAC,cAAc,CAAC,IAAI,KAAK,MAAM,EAAE,CAAC;YACxC,UAAU,CAAC,IAAI,CAAC,IAAI,EAAE,GAAG,IAAI,CAAC,cAAc,CAAC,QAAQ,IAAI,aAAa,EAAE,CAAC,CAAC;QAC5E,CAAC;aAAM,CAAC;YACN,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,GAAG,IAAI,CAAC,cAAc,CAAC;YAChD,UAAU,CAAC,IAAI,CACb,SAAS,EACT,sBAAsB,MAAM,WAAW,aAAa,mBAAmB,OAAO,EAAE,CACjF,CAAC;QACJ,CAAC;QAED,0EAA0E;QAC1E,oEAAoE;QACpE,wEAAwE;QACxE,0EAA0E;QAC1E,2EAA2E;QAC3E,2EAA2E;QAC3E,2EAA2E;QAC3E,EAAE;QACF,4EAA4E;QAC5E,uEAAuE;QACvE,yEAAyE;QACzE,4CAA4C;QAC5C,MAAM,cAAc,GAAG,OAAO,CAAC,GAAG,CAAC,0BAA0B,IAAI,qBAAqB,CAAC;QACvF,UAAU,CAAC,IAAI,CAAC,IAAI,EAAE,GAAG,cAAc,IAAI,aAAa,EAAE,CAAC,CAAC;QAC5D,+EAA+E;QAC/E,2EAA2E;QAC3E,uEAAuE;QACvE,6EAA6E;QAC7E,2EAA2E;QAC3E,+BAA+B;QAC/B,UAAU,CAAC,IAAI,CACb,IAAI,EAAE,oBAAoB,aAAa,MAAM,EAC7C,IAAI,EAAE,wBAAwB,aAAa,OAAO,EAClD,IAAI,EAAE,qBAAqB,aAAa,OAAO,EAC/C,IAAI,EAAE,gBAAgB,aAAa,KAAK;QACxC,yEAAyE;QACzE,yEAAyE;QACzE,wEAAwE;QACxE,kDAAkD;QAClD,IAAI,EAAE,2BAA2B,CAClC,CAAC;QAEF,2EAA2E;QAC3E,qEAAqE;QACrE,uEAAuE;QACvE,iEAAiE;QACjE,uEAAuE;QACvE,kEAAkE;QAClE,qEAAqE;QACrE,qEAAqE;QACrE,mEAAmE;QACnE,kEAAkE;QAClE,MAAM,SAAS,GAAG,IAAI,CAAC,gBAAgB,CAAC,YAAY,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC;QAChF,UAAU,CAAC,IAAI,CAAC,GAAG,SAAS,CAAC,CAAC;QAE9B,sEAAsE;QACtE,kEAAkE;QAClE,+DAA+D;QAC/D,mEAAmE;QACnE,iEAAiE;QACjE,oEAAoE;QACpE,MAAM,QAAQ,GAAG,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,IAAI,EAAE,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC;QAE1F,kEAAkE;QAClE,oEAAoE;QACpE,sEAAsE;QACtE,+DAA+D;QAC/D,MAAM,WAAW,GAAG,IAAI,CAAC,MAAM,CAAC,WAAW,IAAI,IAAI,CAAC;QAEpD,qEAAqE;QACrE,oEAAoE;QACpE,kEAAkE;QAClE,kEAAkE;QAClE,+DAA+D;QAC/D,8DAA8D;QAC9D,MAAM,OAAO,GACX,IAAI,CAAC,MAAM,CAAC,OAAO;YACnB,OAAO,CAAC,GAAG,CAAC,yBAAyB;YACrC,0BAA0B,CAAC;QAC7B,MAAM,WAAW,GAAG,OAAO,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,WAAW,EAAE,OAAO,CAAC,CAAC;QAExE,sEAAsE;QACtE,kEAAkE;QAClE,6DAA6D;QAC7D,iEAAiE;QACjE,qBAAqB;QACrB,MAAM,OAAO,GAAG,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,OAAO,EAAE,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;QAEtE,gFAAgF;QAChF,yBAAyB;QACzB,MAAM,IAAI,GAAG;YACX,KAAK,EAAE,IAAI;YACX,QAAQ,EAAE,aAAa;YACvB,UAAU,EAAE,WAAW;YACvB,eAAe,EAAE,WAAW;YAC5B,GAAG,WAAW;YACd,GAAG,OAAO;YACV,GAAG,QAAQ;YACX,GAAG,UAAU;YACb,IAAI,EAAE,aAAa;YACnB,IAAI,CAAC,MAAM,CAAC,SAAS;SACtB,CAAC;QAEF,IAAI,CAAC;YACH,sEAAsE;YACtE,gEAAgE;YAChE,MAAM,WAAW,GAAG,OAAO,CAAC,QAAQ,EAAE,IAAI,CAAC,CAAC,IAAI,EAAE,CAAC;YAEnD,MAAM,IAAI,GAAgB,EAAE,WAAW,EAAE,aAAa,EAAE,YAAY,EAAE,CAAC;YACvE,IAAI,CAAC,gBAAgB,CAAC,GAAG,CAAC,IAAI,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC;YAC7C,OAAO,CAAC,GAAG,CAAC,sBAAsB,aAAa,EAAE,CAAC,CAAC;YAEnD,qEAAqE;YACrE,kEAAkE;YAClE,qEAAqE;YACrE,MAAM,IAAI,CAAC,YAAY,CAAC,aAAa,CAAC,CAAC;YAEvC,OAAO,IAAI,CAAC;QACd,CAAC;QAAC,OAAO,GAAQ,EAAE,CAAC;YAClB,MAAM,IAAI,KAAK,CAAC,6BAA6B,GAAG,CAAC,OAAO,EAAE,CAAC,CAAC;QAC9D,CAAC;IACH,CAAC;IAED;;;OAGG;IACK,KAAK,CAAC,YAAY,CAAC,aAAqB,EAAE,SAAS,GAAG,KAAK;QACjE,MAAM,KAAK,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QACzB,MAAM,QAAQ,GAAG,GAAG,CAAC;QAErB,OAAO,IAAI,CAAC,GAAG,EAAE,GAAG,KAAK,GAAG,SAAS,EAAE,CAAC;YACtC,IAAI,CAAC;gBACH,MAAM,aAAa,CAAC,QAAQ,EAAE;oBAC5B,MAAM,EAAE,QAAQ,EAAE,OAAO,EAAE,aAAa;oBACxC,MAAM,EAAE,IAAI,EAAE,GAAG,aAAa,SAAS;iBACxC,EAAE,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC,CAAC;gBACtB,OAAO;YACT,CAAC;YAAC,MAAM,CAAC;gBACP,MAAM,IAAI,OAAO,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,UAAU,CAAC,CAAC,EAAE,QAAQ,CAAC,CAAC,CAAC;YACpD,CAAC;QACH,CAAC;QAED,OAAO,CAAC,IAAI,CAAC,mCAAmC,aAAa,kCAAkC,CAAC,CAAC;IACnG,CAAC;IAED;;;;;;;OAOG;IACH,KAAK,CAAC,QAAQ,CACZ,MAAc,EACd,MAAc,EACd,IA0CC;QAED,MAAM,IAAI,GAAG,IAAI,CAAC,gBAAgB,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;QAC/C,IAAI,CAAC,IAAI;YAAE,MAAM,IAAI,KAAK,CAAC,uBAAuB,MAAM,EAAE,CAAC,CAAC;QAE5D,MAAM,KAAK,GAAG,IAAI,EAAE,KAAK,IAAI,6BAA6B,CAAC;QAC3D,MAAM,OAAO,GAAG,IAAI,CAAC,MAAM,CAAC,cAAc,IAAI,IAAI,CAAC;QAEnD,kEAAkE;QAClE,qEAAqE;QACrE,oEAAoE;QACpE,8CAA8C;QAC9C,MAAM,QAAQ,GAAG,IAAI,GAAG,CAAC,CAAC,KAAK,EAAE,SAAS,EAAE,KAAK,EAAE,QAAQ,EAAE,MAAM,EAAE,OAAO,CAAC,CAAC,CAAC;QAC/E,MAAM,QAAQ,GAAG,IAAI,GAAG,CAAC,CAAC,MAAM,EAAE,cAAc,EAAE,cAAc,EAAE,YAAY,CAAC,CAAC,CAAC;QACjF,MAAM,oBAAoB,GAAG,IAAI,GAAG,CAAC,CAAC,QAAQ,EAAE,OAAO,EAAE,KAAK,CAAC,CAAC,CAAC;QAEjE,MAAM,SAAS,GAAa,EAAE,CAAC;QAC/B,IAAI,IAAI,EAAE,QAAQ,EAAE,CAAC;YACnB,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,IAAI,CAAC,QAAQ,CAAC,EAAE,CAAC;gBACjC,MAAM,IAAI,KAAK,CAAC,8BAA8B,IAAI,CAAC,QAAQ,sBAAsB,CAAC,GAAG,QAAQ,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;YAC9G,CAAC;YACD,SAAS,CAAC,IAAI,CAAC,YAAY,EAAE,IAAI,CAAC,QAAQ,CAAC,CAAC;QAC9C,CAAC;QACD,IAAI,IAAI,EAAE,OAAO,EAAE,CAAC;YAClB,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC;gBAChC,MAAM,IAAI,KAAK,CAAC,6BAA6B,IAAI,CAAC,OAAO,sBAAsB,CAAC,GAAG,QAAQ,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;YAC5G,CAAC;YACD,SAAS,CAAC,IAAI,CAAC,WAAW,EAAE,IAAI,CAAC,OAAO,CAAC,CAAC;QAC5C,CAAC;QACD,qEAAqE;QACrE,wEAAwE;QACxE,sEAAsE;QACtE,iEAAiE;QACjE,IAAI,IAAI,EAAE,SAAS,KAAK,IAAI,EAAE,CAAC;YAC7B,IAAI,IAAI,CAAC,iBAAiB,EAAE,CAAC;gBAC3B,IAAI,CAAC,oBAAoB,CAAC,GAAG,CAAC,IAAI,CAAC,iBAAiB,CAAC,EAAE,CAAC;oBACtD,MAAM,IAAI,KAAK,CACb,yCAAyC,IAAI,CAAC,iBAAiB,sBAAsB,CAAC,GAAG,oBAAoB,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAC3H,CAAC;gBACJ,CAAC;gBACD,SAAS,CAAC,IAAI,CAAC,uBAAuB,EAAE,IAAI,CAAC,iBAAiB,CAAC,CAAC;YAClE,CAAC;QACH,CAAC;aAAM,CAAC;YACN,SAAS,CAAC,IAAI,CAAC,iBAAiB,CAAC,CAAC;QACpC,CAAC;QACD,uEAAuE;QACvE,wEAAwE;QACxE,2DAA2D;QAC3D,KAAK,MAAM,GAAG,IAAI,IAAI,EAAE,SAAS,IAAI,EAAE,EAAE,CAAC;YACxC,IAAI,CAAC,GAAG,CAAC,UAAU,CAAC,aAAa,CAAC,IAAI,CAAC,oBAAoB,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC;gBACtE,MAAM,IAAI,KAAK,CAAC,+BAA+B,GAAG,uBAAuB,aAAa,EAAE,CAAC,CAAC;YAC5F,CAAC;YACD,SAAS,CAAC,IAAI,CAAC,SAAS,EAAE,GAAG,CAAC,CAAC;QACjC,CAAC;QACD,IAAI,CAAC,oBAAoB,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC;YACtC,MAAM,IAAI,KAAK,CAAC,2BAA2B,KAAK,iBAAiB,CAAC,CAAC;QACrE,CAAC;QACD,KAAK,MAAM,CAAC,CAAC,EAAE,CAAC,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,IAAI,EAAE,UAAU,IAAI,EAAE,CAAC,EAAE,CAAC;YAC5D,IAAI,CAAC,oBAAoB,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC;gBAClC,MAAM,IAAI,KAAK,CAAC,6BAA6B,CAAC,yBAAyB,CAAC,CAAC;YAC3E,CAAC;YACD,iEAAiE;YACjE,sEAAsE;YACtE,IAAI,SAAS,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC;gBACtB,MAAM,IAAI,KAAK,CAAC,mCAAmC,CAAC,+BAA+B,CAAC,CAAC;YACvF,CAAC;YACD,SAAS,CAAC,IAAI,CAAC,eAAe,EAAE,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;QACjD,CAAC;QAED,MAAM,GAAG,GAAG;YACV,YAAY,EAAE,KAAK;YACnB,SAAS,EAAE,KAAK;YAChB,WAAW,EAAE,MAAM;YACnB,GAAG,SAAS;SACb,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QAEZ,uEAAuE;QACvE,yEAAyE;QACzE,+DAA+D;QAC/D,iEAAiE;QACjE,uCAAuC;QACvC,MAAM,OAAO,GAAG,IAAI,EAAE,QAAQ,IAAI,aAAa,CAAC;QAChD,IAAI,CAAC,OAAO,CAAC,UAAU,CAAC,aAAa,CAAC,IAAI,CAAC,oBAAoB,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC;YAC9E,MAAM,IAAI,KAAK,CAAC,+BAA+B,OAAO,uBAAuB,aAAa,EAAE,CAAC,CAAC;QAChG,CAAC;QACD,2EAA2E;QAC3E,uEAAuE;QACvE,MAAM,IAAI,GAAG,CAAC,MAAM,EAAE,IAAI,EAAE,QAAQ,EAAE,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,IAAI,CAAC,aAAa,EAAE,IAAI,EAAE,IAAI,EAAE,GAAG,CAAC,CAAC;QAEnG,wEAAwE;QACxE,8DAA8D;QAC9D,mEAAmE;QACnE,yEAAyE;QACzE,wEAAwE;QACxE,gEAAgE;QAChE,EAAE;QACF,wEAAwE;QACxE,mBAAmB;QACnB,MAAM,iBAAiB,GAAG,CAAC,GAAG,IAAI,CAAC;QACnC,OAAO,MAAM,IAAI,OAAO,CAAO,CAAC,cAAc,EAAE,MAAM,EAAE,EAAE;YACxD,MAAM,KAAK,GAAG,KAAK,CAAC,QAAQ,EAAE,IAAI,EAAE,EAAE,KAAK,EAAE,CAAC,MAAM,EAAE,MAAM,EAAE,MAAM,CAAC,EAAE,CAAC,CAAC;YACzE,KAAK,CAAC,KAAK,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;YAC1B,KAAK,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC;YAClB,IAAI,UAAU,GAAG,EAAE,CAAC;YACpB,IAAI,GAAG,GAAG,EAAE,CAAC;YAEb,MAAM,KAAK,GAAG,UAAU,CAAC,GAAG,EAAE;gBAC5B,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;gBACtB,MAAM,CAAC,IAAI,KAAK,CAAC,iCAAiC,OAAO,GAAG,CAAC,CAAC,CAAC;YACjE,CAAC,EAAE,OAAO,GAAG,IAAI,CAAC,CAAC;YAEnB,KAAK,CAAC,MAAM,CAAC,WAAW,CAAC,OAAO,CAAC,CAAC;YAClC,KAAK,CAAC,MAAM,CAAC,EAAE,CAAC,MAAM,EAAE,CAAC,KAAa,EAAE,EAAE;gBACxC,IAAI,CAAC,IAAI,EAAE,MAAM;oBAAE,OAAO;gBAC1B,qEAAqE;gBACrE,oCAAoC;gBACpC,GAAG,IAAI,KAAK,CAAC;gBACb,IAAI,EAAU,CAAC;gBACf,OAAO,CAAC,EAAE,GAAG,GAAG,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC;oBACrC,MAAM,IAAI,GAAG,GAAG,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;oBAC9B,GAAG,GAAG,GAAG,CAAC,KAAK,CAAC,EAAE,GAAG,CAAC,CAAC,CAAC;oBACxB,IAAI,IAAI,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;wBACpB,IAAI,CAAC;4BAAC,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;wBAAC,CAAC;wBAAC,MAAM,CAAC,CAAC,6BAA6B,CAAC,CAAC;oBACpE,CAAC;gBACH,CAAC;YACH,CAAC,CAAC,CAAC;YAEH,KAAK,CAAC,MAAM,CAAC,WAAW,CAAC,OAAO,CAAC,CAAC;YAClC,KAAK,CAAC,MAAM,CAAC,EAAE,CAAC,MAAM,EAAE,CAAC,KAAa,EAAE,EAAE;gBACxC,UAAU,IAAI,KAAK,CAAC;gBACpB,IAAI,UAAU,CAAC,MAAM,GAAG,iBAAiB,EAAE,CAAC;oBAC1C,UAAU,GAAG,UAAU,CAAC,KAAK,CAAC,CAAC,iBAAiB,CAAC,CAAC;gBACpD,CAAC;YACH,CAAC,CAAC,CAAC;YAEH,KAAK,CAAC,EAAE,CAAC,OAAO,EAAE,CAAC,GAAG,EAAE,EAAE;gBACxB,YAAY,CAAC,KAAK,CAAC,CAAC;gBACpB,MAAM,CAAC,IAAI,KAAK,CAAC,+BAA+B,GAAG,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC;YAClE,CAAC,CAAC,CAAC;YAEH,KAAK,CAAC,EAAE,CAAC,OAAO,EAAE,CAAC,IAAI,EAAE,EAAE;gBACzB,YAAY,CAAC,KAAK,CAAC,CAAC;gBACpB,kCAAkC;gBAClC,IAAI,GAAG,CAAC,MAAM,GAAG,CAAC,IAAI,IAAI,EAAE,MAAM,EAAE,CAAC;oBACnC,IAAI,CAAC;wBAAC,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;oBAAC,CAAC;oBAAC,MAAM,CAAC,CAAC,YAAY,CAAC,CAAC;oBAChD,GAAG,GAAG,EAAE,CAAC;gBACX,CAAC;gBACD,IAAI,IAAI,KAAK,CAAC,EAAE,CAAC;oBACf,cAAc,EAAE,CAAC;gBACnB,CAAC;qBAAM,CAAC;oBACN,MAAM,CAAC,IAAI,KAAK,CAAC,8BAA8B,IAAI,MAAM,UAAU,IAAI,WAAW,EAAE,CAAC,CAAC,CAAC;gBACzF,CAAC;YACH,CAAC,CAAC,CAAC;QACL,CAAC,CAAC,CAAC;IACL,CAAC;IAED;;;;;;;;;;;;;OAaG;IACH,KAAK,CAAC,UAAU,CACd,MAAc,EACd,OAAe,EACf,IAYC;QAED,MAAM,IAAI,GAAG,IAAI,CAAC,gBAAgB,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;QAC/C,IAAI,CAAC,IAAI;YAAE,MAAM,IAAI,KAAK,CAAC,uBAAuB,MAAM,EAAE,CAAC,CAAC;QAE5D,MAAM,OAAO,GAAG,IAAI,EAAE,cAAc,IAAI,IAAI,CAAC,MAAM,CAAC,cAAc,IAAI,IAAI,CAAC;QAE3E,MAAM,OAAO,GAAG,IAAI,EAAE,GAAG,IAAI,aAAa,CAAC;QAC3C,IAAI,CAAC,OAAO,CAAC,UAAU,CAAC,aAAa,CAAC,IAAI,CAAC,oBAAoB,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC;YAC9E,MAAM,IAAI,KAAK,CAAC,mCAAmC,OAAO,uBAAuB,aAAa,EAAE,CAAC,CAAC;QACpG,CAAC;QAED,MAAM,QAAQ,GAAa,EAAE,CAAC;QAC9B,KAAK,MAAM,CAAC,CAAC,EAAE,CAAC,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,IAAI,EAAE,UAAU,IAAI,EAAE,CAAC,EAAE,CAAC;YAC5D,IAAI,CAAC,oBAAoB,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC;gBAClC,MAAM,IAAI,KAAK,CAAC,6BAA6B,CAAC,yBAAyB,CAAC,CAAC;YAC3E,CAAC;YACD,0EAA0E;YAC1E,wEAAwE;YACxE,kDAAkD;YAClD,IAAI,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC;gBACrB,MAAM,IAAI,KAAK,CAAC,mCAAmC,CAAC,sBAAsB,CAAC,CAAC;YAC9E,CAAC;YACD,QAAQ,CAAC,IAAI,CAAC,IAAI,EAAE,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QACnC,CAAC;QAED,MAAM,IAAI,GAAG,CAAC,MAAM,EAAE,QAAQ,EAAE,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,GAAG,QAAQ,EAAE,IAAI,CAAC,aAAa,EAAE,IAAI,EAAE,IAAI,EAAE,OAAO,CAAC,CAAC;QAE9G,uEAAuE;QACvE,gEAAgE;QAChE,+CAA+C;QAC/C,MAAM,iBAAiB,GAAG,GAAG,GAAG,IAAI,CAAC;QACrC,MAAM,iBAAiB,GAAG,EAAE,GAAG,IAAI,CAAC;QACpC,OAAO,MAAM,IAAI,OAAO,CAAC,CAAC,cAAc,EAAE,MAAM,EAAE,EAAE;YAClD,MAAM,KAAK,GAAG,KAAK,CAAC,QAAQ,EAAE,IAAI,EAAE,EAAE,KAAK,EAAE,CAAC,QAAQ,EAAE,MAAM,EAAE,MAAM,CAAC,EAAE,CAAC,CAAC;YAC3E,IAAI,UAAU,GAAG,EAAE,CAAC;YACpB,IAAI,UAAU,GAAG,EAAE,CAAC;YACpB,IAAI,GAAG,GAAG,EAAE,CAAC;YACb,IAAI,QAAQ,GAAG,KAAK,CAAC;YAErB,MAAM,KAAK,GAAG,UAAU,CAAC,GAAG,EAAE;gBAC5B,QAAQ,GAAG,IAAI,CAAC;gBAChB,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;YACxB,CAAC,EAAE,OAAO,GAAG,IAAI,CAAC,CAAC;YAEnB,KAAK,CAAC,MAAM,CAAC,WAAW,CAAC,OAAO,CAAC,CAAC;YAClC,KAAK,CAAC,MAAM,CAAC,EAAE,CAAC,MAAM,EAAE,CAAC,KAAa,EAAE,EAAE;gBACxC,UAAU,IAAI,KAAK,CAAC;gBACpB,IAAI,UAAU,CAAC,MAAM,GAAG,iBAAiB;oBAAE,UAAU,GAAG,UAAU,CAAC,KAAK,CAAC,CAAC,iBAAiB,CAAC,CAAC;gBAC7F,IAAI,CAAC,IAAI,EAAE,MAAM;oBAAE,OAAO;gBAC1B,GAAG,IAAI,KAAK,CAAC;gBACb,IAAI,EAAU,CAAC;gBACf,OAAO,CAAC,EAAE,GAAG,GAAG,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC;oBACrC,MAAM,IAAI,GAAG,GAAG,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;oBAC9B,GAAG,GAAG,GAAG,CAAC,KAAK,CAAC,EAAE,GAAG,CAAC,CAAC,CAAC;oBACxB,IAAI,IAAI,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;wBACpB,IAAI,CAAC;4BAAC,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;wBAAC,CAAC;wBAAC,MAAM,CAAC,CAAC,6BAA6B,CAAC,CAAC;oBACpE,CAAC;gBACH,CAAC;YACH,CAAC,CAAC,CAAC;YAEH,KAAK,CAAC,MAAM,CAAC,WAAW,CAAC,OAAO,CAAC,CAAC;YAClC,KAAK,CAAC,MAAM,CAAC,EAAE,CAAC,MAAM,EAAE,CAAC,KAAa,EAAE,EAAE;gBACxC,UAAU,IAAI,KAAK,CAAC;gBACpB,IAAI,UAAU,CAAC,MAAM,GAAG,iBAAiB;oBAAE,UAAU,GAAG,UAAU,CAAC,KAAK,CAAC,CAAC,iBAAiB,CAAC,CAAC;YAC/F,CAAC,CAAC,CAAC;YAEH,KAAK,CAAC,EAAE,CAAC,OAAO,EAAE,CAAC,GAAG,EAAE,EAAE;gBACxB,YAAY,CAAC,KAAK,CAAC,CAAC;gBACpB,MAAM,CAAC,IAAI,KAAK,CAAC,iCAAiC,GAAG,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC;YACpE,CAAC,CAAC,CAAC;YAEH,KAAK,CAAC,EAAE,CAAC,OAAO,EAAE,CAAC,IAAI,EAAE,EAAE;gBACzB,YAAY,CAAC,KAAK,CAAC,CAAC;gBACpB,IAAI,GAAG,CAAC,MAAM,GAAG,CAAC,IAAI,IAAI,EAAE,MAAM,EAAE,CAAC;oBACnC,IAAI,CAAC;wBAAC,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;oBAAC,CAAC;oBAAC,MAAM,CAAC,CAAC,YAAY,CAAC,CAAC;gBAClD,CAAC;gBACD,cAAc,CAAC;oBACb,QAAQ,EAAE,QAAQ,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,IAAI,CAAC,CAAC;oBACtC,MAAM,EAAE,UAAU;oBAClB,MAAM,EAAE,UAAU;oBAClB,QAAQ;iBACT,CAAC,CAAC;YACL,CAAC,CAAC,CAAC;QACL,CAAC,CAAC,CAAC;IACL,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,OAAO,CAAC,MAAc;QAC1B,MAAM,IAAI,GAAG,IAAI,CAAC,gBAAgB,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;QAC/C,IAAI,CAAC,IAAI;YAAE,OAAO;QAElB,QAAQ,CAAC,QAAQ,EAAE,CAAC,IAAI,EAAE,IAAI,EAAE,IAAI,CAAC,aAAa,CAAC,CAAC,CAAC;QACrD,IAAI,CAAC,gBAAgB,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;QACrC,OAAO,CAAC,GAAG,CAAC,wBAAwB,IAAI,CAAC,aAAa,EAAE,CAAC,CAAC;IAC5D,CAAC;IAED,KAAK,CAAC,UAAU;QACd,KAAK,MAAM,MAAM,IAAI,IAAI,CAAC,gBAAgB,CAAC,IAAI,EAAE,EAAE,CAAC;YAClD,MAAM,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;QAC7B,CAAC;IACH,CAAC;IAEO,gBAAgB,CAAC,YAAoB;QAC3C,MAAM,OAAO,GAAG,IAAI,CAAC,YAAY,EAAE,MAAM,CAAC,CAAC;QAC3C,IAAI,CAAC,UAAU,CAAC,OAAO,CAAC;YAAE,OAAO,EAAE,CAAC;QAEpC,IAAI,CAAC;YACH,MAAM,OAAO,GAAG,YAAY,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC,IAAI,EAAE,CAAC;YACtD,MAAM,KAAK,GAAG,OAAO,CAAC,KAAK,CAAC,kBAAkB,CAAC,CAAC;YAChD,IAAI,KAAK,EAAE,CAAC;gBACV,gEAAgE;gBAChE,MAAM,UAAU,GAAG,OAAO,CAAC,OAAO,CAAC,OAAO,CAAC,EAAE,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC;gBACvD,MAAM,YAAY,GAAG,OAAO,CAAC,UAAU,EAAE,IAAI,EAAE,IAAI,CAAC,CAAC;gBACrD,MAAM,WAAW,GAAG,OAAO,CAAC,YAAY,EAAE,IAAI,CAAC,CAAC;gBAChD,IAAI,CAAC,SAAS,CAAC,WAAW,EAAE,YAAY,CAAC,EAAE,CAAC;oBAC1C,OAAO,CAAC,IAAI,CACV,gEAAgE,YAAY,EAAE,CAC/E,CAAC;oBACF,OAAO,EAAE,CAAC;gBACZ,CAAC;gBACD,IAAI,CAAC,UAAU,CAAC,YAAY,CAAC,EAAE,CAAC;oBAC9B,OAAO,CAAC,IAAI,CAAC,mDAAmD,YAAY,EAAE,CAAC,CAAC;oBAChF,OAAO,EAAE,CAAC;gBACZ,CAAC;gBACD,OAAO;oBACL,GAAG,OAAO,IAAI,OAAO,EAAE;oBACvB,GAAG,YAAY,IAAI,YAAY,EAAE;iBAClC,CAAC;YACJ,CAAC;QACH,CAAC;QAAC,MAAM,CAAC,CAAC,kBAAkB,CAAC,CAAC;QAE9B,qEAAqE;QACrE,OAAO,EAAE,CAAC;IACZ,CAAC;CACF;AAED,SAAS,OAAO,CAAC,GAAW,EAAE,IAAc,EAAE,IAA2B;IACvE,OAAO,YAAY,CAAC,GAAG,EAAE,IAAI,EAAE;QAC7B,QAAQ,EAAE,OAAO;QACjB,KAAK,EAAE,CAAC,MAAM,EAAE,MAAM,EAAE,MAAM,CAAC;QAC/B,OAAO,EAAE,IAAI,EAAE,OAAO;KACvB,CAAC,CAAC;AACL,CAAC;AAED,SAAS,QAAQ,CAAC,GAAW,EAAE,IAAc;IAC3C,IAAI,CAAC;QAAC,YAAY,CAAC,GAAG,EAAE,IAAI,EAAE,EAAE,KAAK,EAAE,QAAQ,EAAE,CAAC,CAAC;IAAC,CAAC;IAAC,MAAM,CAAC,CAAC,YAAY,CAAC,CAAC;AAC9E,CAAC;AAED,SAAS,SAAS,CAAC,MAAc,EAAE,KAAa;IAC9C,MAAM,GAAG,GAAG,QAAQ,CAAC,MAAM,EAAE,KAAK,CAAC,CAAC;IACpC,OAAO,GAAG,KAAK,EAAE,IAAI,CAAC,CAAC,GAAG,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC;AACnE,CAAC;AAED;;;;GAIG;AACH,SAAS,UAAU,CAAC,KAAa;IAC/B,OAAO,KAAK,CAAC,UAAU,CAAC,GAAG,CAAC;QAC1B,KAAK,CAAC,UAAU,CAAC,IAAI,CAAC;QACtB,KAAK,CAAC,UAAU,CAAC,KAAK,CAAC;QACvB,KAAK,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC;AAC1B,CAAC;AAED;;;;GAIG;AACH,SAAS,eAAe,CAAC,KAAa;IACpC,IAAI,CAAC,GAAG,KAAK,CAAC;IACd,IAAI,CAAC,CAAC,UAAU,CAAC,GAAG,CAAC,EAAE,CAAC;QACtB,CAAC,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,IAAI,IAAI,EAAE,CAAC,GAAG,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;IAC5C,CAAC;IACD,OAAO,OAAO,CAAC,CAAC,CAAC,CAAC;AACpB,CAAC"}

package/dist/sandbox/egress-allowlist.d.ts

@@ -1,74 +0,0 @@
-/**
- * Single source of truth for sandbox HTTP egress allowlists.
- *
- * Both sandbox backends consume this list:
- *   - gondolin: passed verbatim to `agenticRun({ allowedHttpHosts })` so the
- *     QEMU-layer HTTP interceptor 502s anything off-list.
- *   - docker: nginx-egress + coredns configs are generated from these hosts
- *     at harness boot. Sandbox containers spawn with `--dns <coredns-ip>`;
- *     coredns sinkholes allowlisted hostnames to the nginx firewall IP,
- *     which peeks SNI and tunnels to the real upstream. See
- *     `src/sandbox/egress-firewall-config.ts` for the full architecture.
- *
- * The lists are intentionally split so callers can compose tighter policies
- * (e.g. a read-only profile that doesn't need package registries). The
- * everyday default is `DEFAULT_ALLOWLIST`.
- *
- * ## Convention: every entry matches the apex AND all subdomains
- *
- * `openai.com`  → matches openai.com, api.openai.com, platform.openai.com, …
- * `npmjs.org`   → matches npmjs.org, registry.npmjs.org, auth.npmjs.org, …
- *
- * Bare hostnames only — no leading dot, no `*.` prefix. The config
- * generator emits the right syntax for each backend (nginx's
- * `.example.com` map form, CoreDNS regex `(^|\.)example\.com\.$`).
- *
- * Exact-only matching isn't currently supported because we haven't
- * needed it — every host in the list is one we want apex+subdomain
- * access to. If we ever do, we'd add an explicit type (e.g. an `exact:`
- * prefix) so the loose-by-default convention stays unambiguous.
- *
- * A workflow phase can declare `unrestricted_egress: true` to bypass the
- * allowlist entirely — see `src/workflows` for the phase schema.
- */
-/** GitHub HTTPS endpoints used by `git`, `gh`, and agentic-pi's github tools. */
-export declare const GITHUB_HOSTS: readonly string[];
-/**
- * LLM provider hosts.
- *
- * Required for the docker backend because `agentic-pi run` executes inside
- * the sandbox container there (`src/sandbox/docker.ts` runs `agentic-pi run
- * --sandbox none`), so the LLM HTTP call originates from inside the
- * container. The gondolin backend runs agentic-pi in the harness process,
- * so the call originates from the host and these hosts aren't strictly
- * required inside the VM — they're kept here so a single allowlist can
- * cover both paths without surprises.
- *
- * The list is derived from the provider registry (`src/providers.ts`) —
- * every wizard-able provider has a `host` entry there, so adding a new
- * provider automatically seeds this allowlist. Each entry matches the
- * apex AND all subdomains (see `normalizeAllowlistHost`).
- */
-export declare const PROVIDER_HOSTS: readonly string[];
-/**
- * Public package registries the executor may hit during `npm install`,
- * etc. Apex-plus-subdomain matching covers auth / CDN / mirror
- * subdomains without needing separate entries.
- */
-export declare const PACKAGE_REGISTRY_HOSTS: readonly string[];
-/**
- * Combined allowlist used by both backends when a phase has not opted into
- * unrestricted egress. Order is preserved across imports so generated
- * configs are stable.
- */
-export declare const DEFAULT_ALLOWLIST: readonly string[];
-/**
- * Sentinel value recognized by agentic-pi/gondolin (post the `"*"` patch)
- * meaning "allow every host". Used when a phase sets `unrestricted_egress`.
- *
- * On the docker backend, unrestricted egress routes through the open
- * nginx-egress + coredns-open pair — this sentinel is for gondolin only.
- */
-export declare const ALLOW_ALL_SENTINEL = "*";
-export declare function normalizeAllowlistHost(host: string): string | null;
-export declare function mergeAllowlist(base: readonly string[], extra?: readonly string[]): string[];