npm - niceeval - Versions diffs - 0.17.0 → 0.18.0 - Mend

niceeval 0.17.0 → 0.18.0

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.

Files changed (89) hide show

package/INDEX.md +1 -0
package/dist/adapter.cjs +4 -0
package/dist/adapter.cjs.map +1 -1
package/dist/adapter.d.cts +25 -14
package/dist/adapter.d.mts +25 -14
package/dist/adapter.d.ts +25 -14
package/dist/assertions/measurements.cjs +45 -0
package/dist/assertions/measurements.cjs.map +1 -0
package/dist/assertions/measurements.d.cts +17 -0
package/dist/assertions/measurements.d.mts +17 -0
package/dist/assertions/measurements.d.ts +17 -0
package/dist/assertions/measurements.js +8 -0
package/dist/assertions/measurements.js.map +1 -0
package/dist/define.cjs +2 -0
package/dist/define.cjs.map +1 -1
package/dist/expect/index.cjs +4 -1
package/dist/expect/index.cjs.map +1 -1
package/dist/expect/index.d.cts +3 -1
package/dist/expect/index.d.mts +3 -1
package/dist/expect/index.d.ts +3 -1
package/dist/expect/index.js +20 -16
package/dist/expect/index.mjs +20 -16
package/dist/experiment/host/operations.cjs +3 -1
package/dist/experiment/host/operations.cjs.map +1 -1
package/dist/experiment/host/runtime.cjs +3 -1
package/dist/experiment/host/runtime.cjs.map +1 -1
package/dist/experiment/host/teardown.cjs +1 -0
package/dist/experiment/host/teardown.cjs.map +1 -1
package/dist/index.cjs +3 -19
package/dist/index.cjs.map +1 -1
package/dist/index.d.cts +3 -7
package/dist/index.d.mts +3 -7
package/dist/index.d.ts +3 -7
package/dist/index.js +12 -34
package/dist/index.mjs +12 -34
package/dist/model-slots.cjs +19 -0
package/dist/model-slots.cjs.map +1 -1
package/dist/model-slots.d.cts +7 -0
package/dist/model-slots.d.mts +7 -0
package/dist/model-slots.d.ts +7 -0
package/dist/model-slots.js +8 -2
package/dist/o11y/eval-usage.cjs +20 -2
package/dist/o11y/eval-usage.cjs.map +1 -1
package/dist/o11y/eval-usage.d.cts +7 -2
package/dist/o11y/eval-usage.d.mts +7 -2
package/dist/o11y/eval-usage.d.ts +7 -2
package/dist/runner/adoption.cjs +1 -0
package/dist/runner/adoption.cjs.map +1 -1
package/dist/runner/eval-selection.cjs +15 -1
package/dist/runner/eval-selection.cjs.map +1 -1
package/dist/runner/eval-selection.d.cts +4 -0
package/dist/runner/eval-selection.d.mts +4 -0
package/dist/runner/eval-selection.d.ts +4 -0
package/dist/runner/lock.cjs +1 -3
package/dist/runner/lock.cjs.map +1 -1
package/dist/runner/lock.d.cts +0 -2
package/dist/runner/lock.d.mts +0 -2
package/dist/runner/lock.d.ts +0 -2
package/dist/runner/lock.js +14 -16
package/dist/runner/types.cjs.map +1 -1
package/dist/runner/types.d.cts +1 -0
package/dist/runner/types.d.mts +1 -0
package/dist/runner/types.d.ts +1 -0
package/dist/sandbox/docker-profile/registry.cjs +1 -2
package/dist/sandbox/docker-profile/registry.cjs.map +1 -1
package/dist/sandbox/docker-profile/registry.d.cts +0 -1
package/dist/sandbox/docker-profile/registry.d.mts +0 -1
package/dist/sandbox/docker-profile/registry.d.ts +0 -1
package/dist/sandbox/docker-profile/registry.js +2 -4
package/dist/sandbox/index.cjs +1 -2
package/dist/sandbox/index.cjs.map +1 -1
package/dist/sandbox/index.d.cts +1 -1
package/dist/sandbox/index.d.mts +1 -1
package/dist/sandbox/index.d.ts +1 -1
package/dist/sandbox/index.js +32 -34
package/dist/sandbox/index.mjs +32 -34
package/docs-site/zh/examples/integrations/ai-sdk-v7.mdx +5 -5
package/docs-site/zh/examples/integrations/claude-sdk.mdx +5 -5
package/docs-site/zh/examples/integrations/langgraph.mdx +3 -3
package/docs-site/zh/examples/integrations/pi-sdk.mdx +5 -5
package/docs-site/zh/explanation/judge.mdx +1 -1
package/docs-site/zh/index.mdx +18 -0
package/docs-site/zh/introduction.mdx +2 -1
package/docs-site/zh/reference/define-agent.mdx +2 -2
package/docs-site/zh/tutorials/authoring.mdx +2 -1
package/docs-site/zh/tutorials/control-run-cost.mdx +84 -5
package/docs-site/zh/tutorials/upgrade-0-18.mdx +64 -0
package/docs-site/zh/tutorials/verify-judge.mdx +2 -1
package/package.json +1 -1

package/dist/sandbox/docker-profile/registry.cjs.map CHANGED Viewed

	@@ -1 +1 @@
1	- {"version":3,"file":"registry.js","sourceRoot":"","sources":["registry.ts"],"names":[],"mappings":";;;AAmSA,kDA8BC;AAiDD,oDAWC;AAKD,oEAqBC;AAvZD,2CAAsE;AACtE,2CAA4H;AAiC5H,SAAS,QAAQ,CAAC,KAAc;IAC5B,IAAI,KAAK,KAAK,IAAI,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC;QACnE,OAAO,KAAK,CAAC;IACjB,MAAM,SAAS,GAAG,MAAM,CAAC,cAAc,CAAC,KAAK,CAAC,CAAC;IAC/C,OAAO,SAAS,KAAK,MAAM,CAAC,SAAS,IAAI,SAAS,KAAK,IAAI,CAAC;AAChE,CAAC;AACD,SAAS,MAAM,CAAC,MAA0C,EAAE,GAAW;IACnE,OAAO,MAAM,CAAC,SAAS,CAAC,cAAc,CAAC,IAAI,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC;AAC7D,CAAC;AACD,SAAS,aAAa,CAAC,KAAc,EAAE,IAAY;IAC/C,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,CAAC;QACnD,MAAM,IAAA,8BAAkB,EAAC;YACrB,IAAI,EAAE,+CAA+C;YACrD,IAAI;YACJ,OAAO,EAAE,GAAG,IAAI,4BAA4B;SAC/C,CAAC,CAAC;IACP,CAAC;IACD,IAAI,KAAK,CAAC,QAAQ,CAAC,QAAQ,CAAC,IAAI,KAAK,CAAC,QAAQ,CAAC,GAAG,CAAC,IAAI,KAAK,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAC;QAC1E,MAAM,IAAA,8BAAkB,EAAC;YACrB,IAAI,EAAE,+CAA+C;YACrD,IAAI;YACJ,OAAO,EAAE,GAAG,IAAI,2CAA2C;SAC9D,CAAC,CAAC;IACP,CAAC;IACD,OAAO,KAAK,CAAC;AACjB,CAAC;AACD,SAAS,cAAc,CAAC,KAAc,EAAE,IAAY;IAChD,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,IAAI,EAAE,KAAK,EAAE,IAAI,KAAK,CAAC,QAAQ,CAAC,QAAQ,CAAC,EAAE,CAAC;QAC/E,MAAM,IAAA,8BAAkB,EAAC;YACrB,IAAI,EAAE,+CAA+C;YACrD,IAAI;YACJ,OAAO,EAAE,GAAG,IAAI,gDAAgD;SACnE,CAAC,CAAC;IACP,CAAC;IACD,OAAO,KAAK,CAAC;AACjB,CAAC;AACD,SAAS,gBAAgB,CAAC,KAAc,EAAE,IAAY;IAClD,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,IAAI,EAAE,KAAK,EAAE,IAAI,KAAK,CAAC,QAAQ,CAAC,QAAQ,CAAC,EAAE,CAAC;QAC/E,MAAM,IAAA,8BAAkB,EAAC;YACrB,IAAI,EAAE,+CAA+C;YACrD,IAAI;YACJ,OAAO,EAAE,GAAG,IAAI,2CAA2C;SAC9D,CAAC,CAAC;IACP,CAAC;IACD,OAAO,KAAK,CAAC;AACjB,CAAC;AACD,SAAS,WAAW,CAAC,KAAc,EAAE,IAAY;IAC7C,IAAI,KAAK,KAAK,SAAS;QACnB,OAAO,SAAS,CAAC;IACrB,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC;QACnB,MAAM,IAAA,8BAAkB,EAAC;YACrB,IAAI,EAAE,+CAA+C;YACrD,IAAI;YACJ,OAAO,EAAE,GAAG,IAAI,yBAAyB;SAC5C,CAAC,CAAC;IACP,CAAC;IACD,MAAM,OAAO,GAAG,IAAI,GAAG,CAAC,CAAC,WAAW,EAAE,UAAU,EAAE,MAAM,EAAE,gBAAgB,EAAE,aAAa,CAAC,CAAC,CAAC;IAC5F,MAAM,WAAW,GAAG,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC;IACxE,IAAI,WAAW,KAAK,SAAS,EAAE,CAAC;QAC5B,MAAM,IAAA,8BAAkB,EAAC;YACrB,IAAI,EAAE,+CAA+C;YACrD,IAAI,EAAE,GAAG,IAAI,IAAI,WAAW,EAAE;YAC9B,OAAO,EAAE,GAAG,IAAI,IAAI,WAAW,mBAAmB;SACrD,CAAC,CAAC;IACP,CAAC;IACD,IAAI,KAAK,CAAC,SAAS,KAAK,SAAS,IAAI,OAAO,KAAK,CAAC,SAAS,KAAK,SAAS,EAAE,CAAC;QACxE,MAAM,IAAA,8BAAkB,EAAC;YACrB,IAAI,EAAE,+CAA+C;YACrD,IAAI,EAAE,GAAG,IAAI,YAAY;YACzB,OAAO,EAAE,GAAG,IAAI,4BAA4B;SAC/C,CAAC,CAAC;IACP,CAAC;IACD,MAAM,QAAQ,GAAG,KAAK,CAAC,QAAQ,CAAC;IAChC,IAAI,QAAQ,KAAK,SAAS,IAAI,CAAC,OAAO,QAAQ,KAAK,QAAQ,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,QAAQ,CAAC,IAAI,QAAQ,GAAG,CAAC,CAAC,EAAE,CAAC;QAC9G,MAAM,IAAA,8BAAkB,EAAC;YACrB,IAAI,EAAE,+CAA+C;YACrD,IAAI,EAAE,GAAG,IAAI,WAAW;YACxB,OAAO,EAAE,GAAG,IAAI,+CAA+C;SAClE,CAAC,CAAC;IACP,CAAC;IACD,MAAM,IAAI,GAAG,KAAK,CAAC,IAAI,CAAC;IACxB,IAAI,IAAI,KAAK,SAAS,IAAI,CAAC,OAAO,IAAI,KAAK,QAAQ,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,IAAI,CAAC,IAAI,IAAI,GAAG,CAAC,IAAI,IAAI,GAAG,MAAM,CAAC,EAAE,CAAC;QAC3G,MAAM,IAAA,8BAAkB,EAAC;YACrB,IAAI,EAAE,+CAA+C;YACrD,IAAI,EAAE,GAAG,IAAI,OAAO;YACpB,OAAO,EAAE,GAAG,IAAI,+CAA+C;SAClE,CAAC,CAAC;IACP,CAAC;IACD,IAAI,KAAK,CAAC,cAAc,KAAK,SAAS,IAAI,OAAO,KAAK,CAAC,cAAc,KAAK,SAAS,EAAE,CAAC;QAClF,MAAM,IAAA,8BAAkB,EAAC;YACrB,IAAI,EAAE,+CAA+C;YACrD,IAAI,EAAE,GAAG,IAAI,iBAAiB;YAC9B,OAAO,EAAE,GAAG,IAAI,iCAAiC;SACpD,CAAC,CAAC;IACP,CAAC;IACD,MAAM,WAAW,GAAG,KAAK,CAAC,WAAW,CAAC;IACtC,IAAI,WAAW,KAAK,SAAS,IAAI,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,WAAW,CAAC,IAAI,WAAW,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,OAAO,IAAI,KAAK,QAAQ,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,IAAI,CAAC,IAAI,IAAI,GAAG,CAAC,IAAI,IAAI,GAAG,MAAM,CAAC,CAAC,EAAE,CAAC;QAC7K,MAAM,IAAA,8BAAkB,EAAC;YACrB,IAAI,EAAE,+CAA+C;YACrD,IAAI,EAAE,GAAG,IAAI,cAAc;YAC3B,OAAO,EAAE,GAAG,IAAI,sCAAsC;SACzD,CAAC,CAAC;IACP,CAAC;IACD,OAAO,MAAM,CAAC,MAAM,CAAC;QACjB,GAAG,CAAC,KAAK,CAAC,SAAS,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,KAAK,CAAC,SAAS,EAAE,CAAC;QACxE,GAAG,CAAC,QAAQ,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,CAAC;QAC/C,GAAG,CAAC,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,CAAC;QACvC,GAAG,CAAC,KAAK,CAAC,cAAc,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,cAAc,EAAE,KAAK,CAAC,cAAc,EAAE,CAAC;QACvF,GAAG,CAAC,WAAW,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,WAAW,EAAE,MAAM,CAAC,MAAM,CAAC,CAAC,GAAG,WAAW,CAAC,CAAC,EAAE,CAAC;KACzF,CAAC,CAAC;AACP,CAAC;AACD,SAAS,gBAAgB,CAAC,KAAiD,EAAE,IAAY,EAAE,gBAAwB;IAC/G,IAAI,KAAK,KAAK,SAAS;QACnB,OAAO;IACX,IAAI,KAAK,CAAC,SAAS,KAAK,IAAI,EAAE,CAAC;QAC3B,MAAM,IAAA,8BAAkB,EAAC;YACrB,IAAI,EAAE,yCAAyC;YAC/C,IAAI;YACJ,OAAO,EAAE,uEAAuE;SACnF,CAAC,CAAC;IACP,CAAC;IACD,IAAI,KAAK,CAAC,QAAQ,KAAK,SAAS,IAAI,KAAK,CAAC,QAAQ,KAAK,gBAAgB,EAAE,CAAC;QACtE,MAAM,IAAA,8BAAkB,EAAC;YACrB,IAAI,EAAE,+CAA+C;YACrD,IAAI;YACJ,OAAO,EAAE,kDAAkD,gBAAgB,EAAE;YAC7E,OAAO,EAAE,EAAE,gBAAgB,EAAE,cAAc,EAAE,KAAK,CAAC,QAAQ,EAAE;SAChE,CAAC,CAAC;IACP,CAAC;IACD,IAAI,KAAK,CAAC,IAAI,KAAK,SAAS,IAAI,CAAC,KAAK,CAAC,IAAI,GAAG,KAAK,CAAC,KAAK,CAAC,EAAE,CAAC;QACzD,MAAM,IAAA,8BAAkB,EAAC;YACrB,IAAI,EAAE,8CAA8C;YACpD,IAAI;YACJ,OAAO,EAAE,kFAAkF;YAC3F,OAAO,EAAE,EAAE,IAAI,EAAE,KAAK,CAAC,IAAI,EAAE;SAChC,CAAC,CAAC;IACP,CAAC;IACD,IAAI,KAAK,CAAC,cAAc,KAAK,IAAI,IAAI,KAAK,CAAC,WAAW,EAAE,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,IAAI,GAAG,KAAK,CAAC,KAAK,CAAC,CAAC,KAAK,IAAI,EAAE,CAAC;QACpG,MAAM,IAAA,8BAAkB,EAAC;YACrB,IAAI,EAAE,iDAAiD;YACvD,IAAI;YACJ,OAAO,EAAE,mFAAmF;SAC/F,CAAC,CAAC;IACP,CAAC;AACL,CAAC;AACD,SAAS,cAAc,CAAC,KAAc,EAAE,KAAa;IACjD,MAAM,IAAI,GAAG,oBAAoB,KAAK,GAAG,CAAC;IAC1C,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC;QACnB,MAAM,IAAA,8BAAkB,EAAC;YACrB,IAAI,EAAE,+CAA+C;YACrD,IAAI;YACJ,OAAO,EAAE,GAAG,IAAI,yBAAyB;SAC5C,CAAC,CAAC;IACP,CAAC;IACD,MAAM,OAAO,GAAG,IAAI,GAAG,CAAC,CAAC,OAAO,EAAE,SAAS,EAAE,YAAY,EAAE,QAAQ,EAAE,WAAW,CAAC,CAAC,CAAC;IACnF,MAAM,WAAW,GAAG,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC;IACxE,IAAI,WAAW,KAAK,SAAS,EAAE,CAAC;QAC5B,MAAM,IAAA,8BAAkB,EAAC;YACrB,IAAI,EAAE,+CAA+C;YACrD,IAAI,EAAE,GAAG,IAAI,IAAI,WAAW,EAAE;YAC9B,OAAO,EAAE,GAAG,IAAI,IAAI,WAAW,mBAAmB;SACrD,CAAC,CAAC;IACP,CAAC;IACD,IAAI,MAAM,CAAC,KAAK,EAAE,SAAS,CAAC,IAAI,MAAM,CAAC,KAAK,EAAE,YAAY,CAAC,EAAE,CAAC;QAC1D,MAAM,IAAA,8BAAkB,EAAC;YACrB,IAAI,EAAE,+CAA+C;YACrD,IAAI;YACJ,OAAO,EAAE,GAAG,IAAI,sDAAsD;SACzE,CAAC,CAAC;IACP,CAAC;IACD,IAAI,CAAC,MAAM,CAAC,KAAK,EAAE,SAAS,CAAC,IAAI,CAAC,MAAM,CAAC,KAAK,EAAE,YAAY,CAAC,EAAE,CAAC;QAC5D,MAAM,IAAA,8BAAkB,EAAC;YACrB,IAAI,EAAE,+CAA+C;YACrD,IAAI;YACJ,OAAO,EAAE,GAAG,IAAI,qCAAqC;SACxD,CAAC,CAAC;IACP,CAAC;IACD,MAAM,OAAO,GAAG,MAAM,CAAC,KAAK,EAAE,SAAS,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,KAAK,CAAC,UAAU,CAAC;IAC5E,OAAO,MAAM,CAAC,MAAM,CAAC;QACjB,KAAK,EAAE,aAAa,CAAC,KAAK,CAAC,KAAK,EAAE,GAAG,IAAI,QAAQ,CAAC;QAClD,OAAO;QACP,GAAG,CAAC,KAAK,CAAC,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,cAAc,CAAC,KAAK,CAAC,MAAM,EAAE,GAAG,IAAI,SAAS,CAAC,EAAE,CAAC;QACjG,GAAG,CAAC,KAAK,CAAC,SAAS,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,WAAW,CAAC,KAAK,CAAC,SAAS,EAAE,GAAG,IAAI,YAAY,CAAC,EAAE,CAAC;KAC7G,CAAC,CAAC;AACP,CAAC;AACD,SAAS,cAAc,CAAC,KAAa,EAAE,KAAc;IACjD,MAAM,eAAe,GAAG,aAAa,CAAC,KAAK,EAAE,YAAY,KAAK,EAAE,CAAC,CAAC;IAClE,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;QACvB,OAAO,KAAK,CAAC,GAAG,CAAC,CAAC,SAAS,EAAE,EAAE,CAAC,MAAM,CAAC,MAAM,CAAC,EAAE,KAAK,EAAE,eAAe,EAAE,OAAO,EAAE,SAAS,EAAE,CAAC,CAAC,CAAC;IACnG,CAAC;IACD,OAAO,CAAC,MAAM,CAAC,MAAM,CAAC,EAAE,KAAK,EAAE,eAAe,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC,CAAC,CAAC;AACvE,CAAC;AACD,SAAS,UAAU,CAAC,KAAc;IAC9B,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC;QACpB,OAAO,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC,cAAc,CAAC,CAAC,CAAC;IACpD,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC;QACnB,MAAM,IAAA,8BAAkB,EAAC;YACrB,IAAI,EAAE,+CAA+C;YACrD,IAAI,EAAE,UAAU;YAChB,OAAO,EAAE,oEAAoE;SAChF,CAAC,CAAC;IACP,CAAC;IACD,IAAI,MAAM,CAAC,KAAK,EAAE,SAAS,CAAC,EAAE,CAAC;QAC3B,MAAM,WAAW,GAAG,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,KAAK,SAAS,CAAC,CAAC;QACxE,IAAI,WAAW,KAAK,SAAS,EAAE,CAAC;YAC5B,MAAM,IAAA,8BAAkB,EAAC;gBACrB,IAAI,EAAE,+CAA+C;gBACrD,IAAI,EAAE,YAAY,WAAW,EAAE;gBAC/B,OAAO,EAAE,YAAY,WAAW,mBAAmB;aACtD,CAAC,CAAC;QACP,CAAC;QACD,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,OAAO,CAAC,EAAE,CAAC;YAChC,MAAM,IAAA,8BAAkB,EAAC;gBACrB,IAAI,EAAE,+CAA+C;gBACrD,IAAI,EAAE,kBAAkB;gBACxB,OAAO,EAAE,mCAAmC;aAC/C,CAAC,CAAC;QACP,CAAC;QACD,OAAO,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,cAAc,CAAC,CAAC,CAAC;IAC5D,CAAC;IACD,MAAM,OAAO,GAAG,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,KAAK,EAAE,OAAO,CAAC,EAAE,EAAE,CAAC,cAAc,CAAC,KAAK,EAAE,OAAO,CAAC,CAAC,CAAC;IACpG,OAAO,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;AAClC,CAAC;AACD,SAAS,SAAS,CAAC,KAAyB,EAAE,KAAa;IACvD,OAAO,IAAA,8BAAkB,EAAC;QACtB,IAAI,EAAE,KAAK,CAAC,IAAI;QAChB,OAAO,EAAE,wBAAwB,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,KAAK,KAAK,CAAC,OAAO,EAAE;QAC1E,GAAG,CAAC,KAAK,CAAC,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,KAAK,CAAC,IAAI,EAAE,CAAC;QACzD,KAAK;QACL,GAAG,CAAC,KAAK,CAAC,SAAS,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,KAAK,CAAC,SAAS,EAAE,CAAC;QACxE,GAAG,CAAC,KAAK,CAAC,UAAU,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,UAAU,EAAE,KAAK,CAAC,UAAU,EAAE,CAAC;QAC3E,GAAG,CAAC,KAAK,CAAC,OAAO,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,KAAK,CAAC,OAAO,EAAE,CAAC;KACrE,CAAC,CAAC;AACP,CAAC;AACD,SAAS,YAAY,CAAC,KAAiC,EAAE,KAAa,EAAE,OAAqC;IACzG,MAAM,KAAK,GAAG,aAAa,CAAC,KAAK,CAAC,KAAK,EAAE,oBAAoB,KAAK,SAAS,CAAC,CAAC;IAC7E,gBAAgB,CAAC,KAAK,CAAC,SAAS,EAAE,oBAAoB,KAAK,GAAG,EAAE,OAAO,CAAC,gBAAgB,IAAI,CAAC,CAAC,CAAC;IAC/F,IAAI,CAAC;QACD,MAAM,OAAO,GAAG,IAAA,yCAA6B,EAAC,KAAK,CAAC,OAAO,CAAC,CAAC;QAC7D,OAAO,MAAM,CAAC,MAAM,CAAC;YACjB,KAAK;YACL,OAAO;YACP,SAAS,EAAE,OAAO,CAAC,SAAS;YAC5B,gBAAgB,EAAE,IAAA,0CAA8B,EAAC,OAAO,CAAC;YACzD,GAAG,CAAC,KAAK,CAAC,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,KAAK,CAAC,MAAM,EAAE,CAAC;SAClE,CAAC,CAAC;IACP,CAAC;IACD,OAAO,KAAK,EAAE,CAAC;QACX,IAAI,KAAK,YAAY,8BAAkB;YACnC,MAAM,SAAS,CAAC,KAAK,EAAE,KAAK,CAAC,CAAC;QAClC,MAAM,KAAK,CAAC;IAChB,CAAC;AACL,CAAC;AACD,+DAA+D;AAC/D,gDAAgD;AAChD,sEAAsE;AACtE,2EAA2E;AAC3E,SAAgB,mBAAmB,CAAC,KAA2C,EAAE,UAAwC,EAAE;IACvH,MAAM,OAAO,GAAG,UAAU,CAAC,KAAK,CAAC,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,KAAK,EAAE,EAAE,CAAC,YAAY,CAAC,KAAK,EAAE,KAAK,EAAE,OAAO,CAAC,CAAC,CAAC;IAC7F,MAAM,OAAO,GAAG,IAAI,GAAG,EAAwC,CAAC;IAChE,MAAM,WAAW,GAAG,IAAI,GAAG,EAAwC,CAAC;IACpE,KAAK,MAAM,KAAK,IAAI,OAAO,EAAE,CAAC;QAC1B,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,KAAK,EAAE,CAAC,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC,EAAE,KAAK,CAAC,CAAC,CAAC;QACvE,WAAW,CAAC,GAAG,CAAC,KAAK,CAAC,SAAS,EAAE,CAAC,GAAG,CAAC,WAAW,CAAC,GAAG,CAAC,KAAK,CAAC,SAAS,CAAC,IAAI,EAAE,CAAC,EAAE,KAAK,CAAC,CAAC,CAAC;IAC3F,CAAC;IACD,MAAM,SAAS,GAAG,CAAC,GAAG,OAAO,CAAC,OAAO,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,UAAU,CAAC,EAAE,EAAE,CAAC,UAAU,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC;IACzF,IAAI,SAAS,KAAK,SAAS,EAAE,CAAC;QAC1B,MAAM,CAAC,KAAK,EAAE,UAAU,CAAC,GAAG,SAAS,CAAC;QACtC,MAAM,IAAA,8BAAkB,EAAC;YACrB,IAAI,EAAE,iDAAiD;YACvD,KAAK;YACL,UAAU,EAAE,UAAU,CAAC,GAAG,CAAC,CAAC,SAAS,EAAE,EAAE,CAAC,SAAS,CAAC,SAAS,CAAC;YAC9D,OAAO,EAAE,wBAAwB,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,mCAAmC;SAC5F,CAAC,CAAC;IACP,CAAC;IACD,MAAM,SAAS,GAAG,CAAC,GAAG,WAAW,CAAC,OAAO,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,UAAU,CAAC,EAAE,EAAE,CAAC,UAAU,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC;IAC7F,IAAI,SAAS,KAAK,SAAS,EAAE,CAAC;QAC1B,MAAM,CAAC,SAAS,EAAE,UAAU,CAAC,GAAG,SAAS,CAAC;QAC1C,MAAM,IAAA,8BAAkB,EAAC;YACrB,IAAI,EAAE,8CAA8C;YACpD,SAAS;YACT,KAAK,EAAE,UAAU,CAAC,CAAC,CAAC,EAAE,KAAK;YAC3B,UAAU,EAAE,UAAU,CAAC,GAAG,CAAC,CAAC,SAAS,EAAE,EAAE,CAAC,SAAS,CAAC,KAAK,CAAC;YAC1D,OAAO,EAAE,4BAA4B,IAAI,CAAC,SAAS,CAAC,SAAS,CAAC,+BAA+B;SAChG,CAAC,CAAC;IACP,CAAC;IACD,OAAO,MAAM,CAAC,MAAM,CAAC,EAAE,OAAO,EAAE,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC;AAC9D,CAAC;AACY,QAAA,2BAA2B,GAAG,mBAAmB,CAAC;AAClD,QAAA,0BAA0B,GAAG,mBAAmB,CAAC;AAC9D,SAAS,eAAe,CAAC,KAAc;IACnC,OAAO,QAAQ,CAAC,KAAK,CAAC,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,OAAO,CAAC,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,QAAQ,CAAC,KAAK,CAAC;QACpG,OAAO,KAAK,CAAC,KAAK,KAAK,QAAQ;QAC/B,QAAQ,CAAC,KAAK,CAAC,OAAO,CAAC;QACvB,OAAO,KAAK,CAAC,SAAS,KAAK,QAAQ;QACnC,OAAO,KAAK,CAAC,gBAAgB,KAAK,QAAQ,CAAC,CAAC;AACpD,CAAC;AACD,SAAS,OAAO,CAAC,KAAwE;IACrF,IAAI,eAAe,CAAC,KAAK,CAAC,EAAE,CAAC;QACzB,MAAM,OAAO,GAAG,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,KAAK,EAAE,EAAE;YAC/C,MAAM,KAAK,GAAG,aAAa,CAAC,KAAK,CAAC,KAAK,EAAE,oBAAoB,KAAK,SAAS,CAAC,CAAC;YAC7E,IAAI,CAAC;gBACD,MAAM,OAAO,GAAG,IAAA,yCAA6B,EAAC,KAAK,CAAC,OAAO,CAAC,CAAC;gBAC7D,MAAM,gBAAgB,GAAG,IAAA,0CAA8B,EAAC,OAAO,CAAC,CAAC;gBACjE,IAAI,KAAK,CAAC,SAAS,KAAK,OAAO,CAAC,SAAS,IAAI,KAAK,CAAC,gBAAgB,KAAK,gBAAgB,EAAE,CAAC;oBACvF,MAAM,IAAA,8BAAkB,EAAC;wBACrB,IAAI,EAAE,+CAA+C;wBACrD,IAAI,EAAE,oBAAoB,KAAK,GAAG;wBAClC,OAAO,EAAE,4EAA4E;wBACrF,OAAO,EAAE;4BACL,iBAAiB,EAAE,OAAO,CAAC,SAAS;4BACpC,eAAe,EAAE,KAAK,CAAC,SAAS;4BAChC,wBAAwB,EAAE,gBAAgB;4BAC1C,sBAAsB,EAAE,KAAK,CAAC,gBAAgB;yBACjD;qBACJ,CAAC,CAAC;gBACP,CAAC;gBACD,OAAO,MAAM,CAAC,MAAM,CAAC;oBACjB,KAAK;oBACL,OAAO;oBACP,GAAG,CAAC,KAAK,CAAC,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,cAAc,CAAC,KAAK,CAAC,MAAM,EAAE,oBAAoB,KAAK,UAAU,CAAC,EAAE,CAAC;iBACvH,CAAC,CAAC;YACP,CAAC;YACD,OAAO,KAAK,EAAE,CAAC;gBACX,IAAI,KAAK,YAAY,8BAAkB;oBACnC,MAAM,SAAS,CAAC,KAAK,EAAE,KAAK,CAAC,CAAC;gBAClC,MAAM,KAAK,CAAC;YAChB,CAAC;QACL,CAAC,CAAC,CAAC;QACH,OAAO,mBAAmB,CAAC,OAAO,CAAC,CAAC;IACxC,CAAC;IACD,OAAO,mBAAmB,CAAC,KAAK,CAAC,CAAC;AACtC,CAAC;AACD,iEAAiE;AACjE,kDAAkD;AAClD,sEAAsE;AACtE,SAAgB,oBAAoB,CAAC,QAA2E,EAAE,KAAa;IAC3H,MAAM,eAAe,GAAG,aAAa,CAAC,KAAK,EAAE,eAAe,CAAC,CAAC;IAC9D,MAAM,KAAK,GAAG,OAAO,CAAC,QAAQ,CAAC,CAAC;IAChC,MAAM,KAAK,GAAG,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,KAAK,KAAK,eAAe,CAAC,CAAC;IAC7E,IAAI,KAAK,KAAK,SAAS;QACnB,OAAO,KAAK,CAAC;IACjB,MAAM,IAAA,8BAAkB,EAAC;QACrB,IAAI,EAAE,iDAAiD;QACvD,KAAK,EAAE,eAAe;QACtB,OAAO,EAAE,uDAAuD,IAAI,CAAC,SAAS,CAAC,eAAe,CAAC,EAAE;KACpG,CAAC,CAAC;AACP,CAAC;AACY,QAAA,yBAAyB,GAAG,oBAAoB,CAAC;AAC9D,sEAAsE;AACtE,iDAAiD;AACjD,sEAAsE;AACtE,SAAgB,4BAA4B,CAAC,QAA2E,EAAE,QAAgB;IACtI,MAAM,kBAAkB,GAAG,gBAAgB,CAAC,QAAQ,EAAE,kBAAkB,CAAC,CAAC;IAC1E,MAAM,KAAK,GAAG,OAAO,CAAC,QAAQ,CAAC,CAAC;IAChC,MAAM,OAAO,GAAG,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,KAAK,KAAK,kBAAkB,IAAI,KAAK,CAAC,SAAS,KAAK,kBAAkB,CAAC,CAAC;IAC9H,MAAM,KAAK,GAAG,OAAO,CAAC,CAAC,CAAC,CAAC;IACzB,IAAI,KAAK,KAAK,SAAS,EAAE,CAAC;QACtB,MAAM,IAAA,8BAAkB,EAAC;YACrB,IAAI,EAAE,iDAAiD;YACvD,KAAK,EAAE,kBAAkB;YACzB,OAAO,EAAE,gDAAgD,IAAI,CAAC,SAAS,CAAC,kBAAkB,CAAC,EAAE;SAChG,CAAC,CAAC;IACP,CAAC;IACD,IAAI,OAAO,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACrB,MAAM,IAAA,8BAAkB,EAAC;YACrB,IAAI,EAAE,iDAAiD;YACvD,KAAK,EAAE,kBAAkB;YACzB,UAAU,EAAE,OAAO,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,KAAK,CAAC;YAC/C,OAAO,EAAE,2BAA2B,IAAI,CAAC,SAAS,CAAC,kBAAkB,CAAC,eAAe;SACxF,CAAC,CAAC;IACP,CAAC;IACD,OAAO,KAAK,CAAC;AACjB,CAAC;AACY,QAAA,6BAA6B,GAAG,oBAAoB,CAAC","sourcesContent":["import { dockerProfileError, DockerProfileError, } from \"./errors.ts\";\nimport { dockerExecutionProfileV1Digest, parseDockerExecutionProfileV1, type DockerExecutionProfileV1, } from \"./schema.ts\";\n/** 由宿主 registry loader 提供的文件事实；本模块不会自行读文件或执行路径。 /\nexport interface DockerProfileRegistryFileFacts {\n readonly isSymlink?: boolean;\n readonly ownerUid?: number;\n readonly mode?: number;\n readonly parentWritable?: boolean;\n readonly parentModes?: readonly number[];\n}\nexport interface DockerProfileRegistryEntry {\n readonly alias: string;\n readonly profile?: unknown;\n readonly descriptor?: unknown;\n readonly source?: string;\n readonly fileFacts?: DockerProfileRegistryFileFacts;\n}\nexport interface DockerProfileRegistryOptions {\n /* descriptor 必须由 root 持有；未提供 file facts 时纯解析不会臆造权限事实。 /\n readonly expectedOwnerUid?: number;\n}\nexport interface ResolvedDockerProfileEntry {\n readonly alias: string;\n readonly profile: DockerExecutionProfileV1;\n readonly profileId: string;\n readonly descriptorDigest: string;\n readonly source?: string;\n}\nexport interface DockerProfileRegistryIndex {\n readonly entries: readonly ResolvedDockerProfileEntry[];\n}\nexport type DockerProfileRegistryInput = readonly DockerProfileRegistryEntry[] \| Readonly<globalThis.Record<string, unknown>> \| {\n readonly entries: readonly DockerProfileRegistryEntry[];\n};\nfunction isRecord(value: unknown): value is globalThis.Record<string, unknown> {\n if (value === null \|\| typeof value !== \"object\" \|\| Array.isArray(value))\n return false;\n const prototype = Object.getPrototypeOf(value);\n return prototype === Object.prototype \|\| prototype === null;\n}\nfunction hasOwn(record: globalThis.Record<string, unknown>, key: string): boolean {\n return Object.prototype.hasOwnProperty.call(record, key);\n}\nfunction requiredAlias(value: unknown, path: string): string {\n if (typeof value !== \"string\" \|\| value.trim() === \"\") {\n throw dockerProfileError({\n code: \"sandbox.docker-profile-registry-entry-invalid\",\n path,\n message: `${path} must be a non-empty alias`,\n });\n }\n if (value.includes(\"\\u0000\") \|\| value.includes(\"/\") \|\| value.includes(\"\\\\\")) {\n throw dockerProfileError({\n code: \"sandbox.docker-profile-registry-entry-invalid\",\n path,\n message: `${path} must be a single non-empty alias segment`,\n });\n }\n return value;\n}\nfunction requiredSource(value: unknown, path: string): string {\n if (typeof value !== \"string\" \|\| value.trim() === \"\" \|\| value.includes(\"\\u0000\")) {\n throw dockerProfileError({\n code: \"sandbox.docker-profile-registry-entry-invalid\",\n path,\n message: `${path} must be a non-empty source string without NUL`,\n });\n }\n return value;\n}\nfunction requiredSelector(value: unknown, path: string): string {\n if (typeof value !== \"string\" \|\| value.trim() === \"\" \|\| value.includes(\"\\u0000\")) {\n throw dockerProfileError({\n code: \"sandbox.docker-profile-registry-entry-invalid\",\n path,\n message: `${path} must be a non-empty selector without NUL`,\n });\n }\n return value;\n}\nfunction sourceFacts(value: unknown, path: string): DockerProfileRegistryFileFacts \| undefined {\n if (value === undefined)\n return undefined;\n if (!isRecord(value)) {\n throw dockerProfileError({\n code: \"sandbox.docker-profile-registry-entry-invalid\",\n path,\n message: `${path} must be a plain object`,\n });\n }\n const allowed = new Set([\"isSymlink\", \"ownerUid\", \"mode\", \"parentWritable\", \"parentModes\"]);\n const unsupported = Object.keys(value).find((key) => !allowed.has(key));\n if (unsupported !== undefined) {\n throw dockerProfileError({\n code: \"sandbox.docker-profile-registry-entry-invalid\",\n path: `${path}.${unsupported}`,\n message: `${path}.${unsupported} is not supported`,\n });\n }\n if (value.isSymlink !== undefined && typeof value.isSymlink !== \"boolean\") {\n throw dockerProfileError({\n code: \"sandbox.docker-profile-registry-entry-invalid\",\n path: `${path}.isSymlink`,\n message: `${path}.isSymlink must be boolean`,\n });\n }\n const ownerUid = value.ownerUid;\n if (ownerUid !== undefined && (typeof ownerUid !== \"number\" \|\| !Number.isSafeInteger(ownerUid) \|\| ownerUid < 0)) {\n throw dockerProfileError({\n code: \"sandbox.docker-profile-registry-entry-invalid\",\n path: `${path}.ownerUid`,\n message: `${path}.ownerUid must be a non-negative safe integer`,\n });\n }\n const mode = value.mode;\n if (mode !== undefined && (typeof mode !== \"number\" \|\| !Number.isInteger(mode) \|\| mode < 0 \|\| mode > 0o7777)) {\n throw dockerProfileError({\n code: \"sandbox.docker-profile-registry-entry-invalid\",\n path: `${path}.mode`,\n message: `${path}.mode must be an integer between 0 and 0o7777`,\n });\n }\n if (value.parentWritable !== undefined && typeof value.parentWritable !== \"boolean\") {\n throw dockerProfileError({\n code: \"sandbox.docker-profile-registry-entry-invalid\",\n path: `${path}.parentWritable`,\n message: `${path}.parentWritable must be boolean`,\n });\n }\n const parentModes = value.parentModes;\n if (parentModes !== undefined && (!Array.isArray(parentModes) \|\| parentModes.some((mode) => typeof mode !== \"number\" \|\| !Number.isInteger(mode) \|\| mode < 0 \|\| mode > 0o7777))) {\n throw dockerProfileError({\n code: \"sandbox.docker-profile-registry-entry-invalid\",\n path: `${path}.parentModes`,\n message: `${path}.parentModes must contain file modes`,\n });\n }\n return Object.freeze({\n ...(value.isSymlink === undefined ? {} : { isSymlink: value.isSymlink }),\n ...(ownerUid === undefined ? {} : { ownerUid }),\n ...(mode === undefined ? {} : { mode }),\n ...(value.parentWritable === undefined ? {} : { parentWritable: value.parentWritable }),\n ...(parentModes === undefined ? {} : { parentModes: Object.freeze([...parentModes]) }),\n });\n}\nfunction checkSourceFacts(facts: DockerProfileRegistryFileFacts \| undefined, path: string, expectedOwnerUid: number): void {\n if (facts === undefined)\n return;\n if (facts.isSymlink === true) {\n throw dockerProfileError({\n code: \"sandbox.docker-profile-registry-symlink\",\n path,\n message: \"Docker profile descriptor must be a regular file, not a symbolic link\",\n });\n }\n if (facts.ownerUid !== undefined && facts.ownerUid !== expectedOwnerUid) {\n throw dockerProfileError({\n code: \"sandbox.docker-profile-registry-owner-invalid\",\n path,\n message: `Docker profile descriptor must be owned by UID ${expectedOwnerUid}`,\n details: { expectedOwnerUid, actualOwnerUid: facts.ownerUid },\n });\n }\n if (facts.mode !== undefined && (facts.mode & 0o022) !== 0) {\n throw dockerProfileError({\n code: \"sandbox.docker-profile-registry-mode-invalid\",\n path,\n message: \"Docker profile descriptor and registry file must not be group- or world-writable\",\n details: { mode: facts.mode },\n });\n }\n if (facts.parentWritable === true \|\| facts.parentModes?.some((mode) => (mode & 0o022) !== 0) === true) {\n throw dockerProfileError({\n code: \"sandbox.docker-profile-registry-parent-writable\",\n path,\n message: \"Docker profile descriptor parent directories must not be group- or world-writable\",\n });\n }\n}\nfunction entryFromArray(value: unknown, index: number): DockerProfileRegistryEntry {\n const path = `registry.entries[${index}]`;\n if (!isRecord(value)) {\n throw dockerProfileError({\n code: \"sandbox.docker-profile-registry-entry-invalid\",\n path,\n message: `${path} must be a plain object`,\n });\n }\n const allowed = new Set([\"alias\", \"profile\", \"descriptor\", \"source\", \"fileFacts\"]);\n const unsupported = Object.keys(value).find((key) => !allowed.has(key));\n if (unsupported !== undefined) {\n throw dockerProfileError({\n code: \"sandbox.docker-profile-registry-entry-invalid\",\n path: `${path}.${unsupported}`,\n message: `${path}.${unsupported} is not supported`,\n });\n }\n if (hasOwn(value, \"profile\") && hasOwn(value, \"descriptor\")) {\n throw dockerProfileError({\n code: \"sandbox.docker-profile-registry-entry-invalid\",\n path,\n message: `${path} must provide either profile or descriptor, not both`,\n });\n }\n if (!hasOwn(value, \"profile\") && !hasOwn(value, \"descriptor\")) {\n throw dockerProfileError({\n code: \"sandbox.docker-profile-registry-entry-invalid\",\n path,\n message: `${path} must provide profile or descriptor`,\n });\n }\n const profile = hasOwn(value, \"profile\") ? value.profile : value.descriptor;\n return Object.freeze({\n alias: requiredAlias(value.alias, `${path}.alias`),\n profile,\n ...(value.source === undefined ? {} : { source: requiredSource(value.source, `${path}.source`) }),\n ...(value.fileFacts === undefined ? {} : { fileFacts: sourceFacts(value.fileFacts, `${path}.fileFacts`) }),\n });\n}\nfunction entryFromAlias(alias: string, value: unknown): DockerProfileRegistryEntry[] {\n const normalizedAlias = requiredAlias(alias, `registry.${alias}`);\n if (Array.isArray(value)) {\n return value.map((candidate) => Object.freeze({ alias: normalizedAlias, profile: candidate }));\n }\n return [Object.freeze({ alias: normalizedAlias, profile: value })];\n}\nfunction rawEntries(input: unknown): readonly DockerProfileRegistryEntry[] {\n if (Array.isArray(input))\n return Object.freeze(input.map(entryFromArray));\n if (!isRecord(input)) {\n throw dockerProfileError({\n code: \"sandbox.docker-profile-registry-entry-invalid\",\n path: \"registry\",\n message: \"registry must be an entries array or an alias-to-descriptor object\",\n });\n }\n if (hasOwn(input, \"entries\")) {\n const unsupported = Object.keys(input).find((key) => key !== \"entries\");\n if (unsupported !== undefined) {\n throw dockerProfileError({\n code: \"sandbox.docker-profile-registry-entry-invalid\",\n path: `registry.${unsupported}`,\n message: `registry.${unsupported} is not supported`,\n });\n }\n if (!Array.isArray(input.entries)) {\n throw dockerProfileError({\n code: \"sandbox.docker-profile-registry-entry-invalid\",\n path: \"registry.entries\",\n message: \"registry.entries must be an array\",\n });\n }\n return Object.freeze(input.entries.map(entryFromArray));\n }\n const entries = Object.entries(input).flatMap(([alias, profile]) => entryFromAlias(alias, profile));\n return Object.freeze(entries);\n}\nfunction withAlias(error: DockerProfileError, alias: string): DockerProfileError {\n return dockerProfileError({\n code: error.code,\n message: `Docker profile alias ${JSON.stringify(alias)}: ${error.message}`,\n ...(error.path === undefined ? {} : { path: error.path }),\n alias,\n ...(error.profileId === undefined ? {} : { profileId: error.profileId }),\n ...(error.candidates === undefined ? {} : { candidates: error.candidates }),\n ...(error.details === undefined ? {} : { details: error.details }),\n });\n}\nfunction resolveEntry(entry: DockerProfileRegistryEntry, index: number, options: DockerProfileRegistryOptions): ResolvedDockerProfileEntry {\n const alias = requiredAlias(entry.alias, `registry.entries[${index}].alias`);\n checkSourceFacts(entry.fileFacts, `registry.entries[${index}]`, options.expectedOwnerUid ?? 0);\n try {\n const profile = parseDockerExecutionProfileV1(entry.profile);\n return Object.freeze({\n alias,\n profile,\n profileId: profile.profileId,\n descriptorDigest: dockerExecutionProfileV1Digest(profile),\n ...(entry.source === undefined ? {} : { source: entry.source }),\n });\n }\n catch (error) {\n if (error instanceof DockerProfileError)\n throw withAlias(error, alias);\n throw error;\n }\n}\n/* 构造只含规范化 descriptor 的 registry index；不读文件、不执行 profile 内容。 /\n// @concord-code ne-sandbox-docker-profile-index\n// @concord-implements docs/feature/sandbox-docker-profiles/library.md\n// @concord-implements docs/feature/sandbox-docker-profiles/architecture.md\nexport function indexDockerProfiles(input: DockerProfileRegistryInput \| unknown, options: DockerProfileRegistryOptions = {}): DockerProfileRegistryIndex {\n const entries = rawEntries(input).map((entry, index) => resolveEntry(entry, index, options));\n const byAlias = new Map<string, ResolvedDockerProfileEntry[]>();\n const byProfileId = new Map<string, ResolvedDockerProfileEntry[]>();\n for (const entry of entries) {\n byAlias.set(entry.alias, [...(byAlias.get(entry.alias) ?? []), entry]);\n byProfileId.set(entry.profileId, [...(byProfileId.get(entry.profileId) ?? []), entry]);\n }\n const ambiguous = [...byAlias.entries()].find(([, candidates]) => candidates.length > 1);\n if (ambiguous !== undefined) {\n const [alias, candidates] = ambiguous;\n throw dockerProfileError({\n code: \"sandbox.docker-profile-registry-ambiguous-alias\",\n alias,\n candidates: candidates.map((candidate) => candidate.profileId),\n message: `Docker profile alias ${JSON.stringify(alias)} resolves to multiple descriptors`,\n });\n }\n const duplicate = [...byProfileId.entries()].find(([, candidates]) => candidates.length > 1);\n if (duplicate !== undefined) {\n const [profileId, candidates] = duplicate;\n throw dockerProfileError({\n code: \"sandbox.docker-profile-registry-duplicate-id\",\n profileId,\n alias: candidates[0]?.alias,\n candidates: candidates.map((candidate) => candidate.alias),\n message: `Docker profile stable ID ${JSON.stringify(profileId)} is registered more than once`,\n });\n }\n return Object.freeze({ entries: Object.freeze(entries) });\n}\nexport const createDockerProfileRegistry = indexDockerProfiles;\nexport const parseDockerProfileRegistry = indexDockerProfiles;\nfunction isRegistryIndex(value: unknown): value is DockerProfileRegistryIndex {\n return isRecord(value) && Array.isArray(value.entries) && value.entries.every((entry) => isRecord(entry) &&\n typeof entry.alias === \"string\" &&\n isRecord(entry.profile) &&\n typeof entry.profileId === \"string\" &&\n typeof entry.descriptorDigest === \"string\");\n}\nfunction indexOf(input: DockerProfileRegistryIndex \| DockerProfileRegistryInput \| unknown): DockerProfileRegistryIndex {\n if (isRegistryIndex(input)) {\n const entries = input.entries.map((entry, index) => {\n const alias = requiredAlias(entry.alias, `registry.entries[${index}].alias`);\n try {\n const profile = parseDockerExecutionProfileV1(entry.profile);\n const descriptorDigest = dockerExecutionProfileV1Digest(profile);\n if (entry.profileId !== profile.profileId \|\| entry.descriptorDigest !== descriptorDigest) {\n throw dockerProfileError({\n code: \"sandbox.docker-profile-registry-entry-invalid\",\n path: `registry.entries[${index}]`,\n message: \"registry index profileId or descriptorDigest does not match its descriptor\",\n details: {\n expectedProfileId: profile.profileId,\n actualProfileId: entry.profileId,\n expectedDescriptorDigest: descriptorDigest,\n actualDescriptorDigest: entry.descriptorDigest,\n },\n });\n }\n return Object.freeze({\n alias,\n profile,\n ...(entry.source === undefined ? {} : { source: requiredSource(entry.source, `registry.entries[${index}].source`) }),\n });\n }\n catch (error) {\n if (error instanceof DockerProfileError)\n throw withAlias(error, alias);\n throw error;\n }\n });\n return indexDockerProfiles(entries);\n }\n return indexDockerProfiles(input);\n}\n/* 只按宿主 alias 查找；没有 alias 时不猜 profile ID 或默认 Docker endpoint。 /\n// @concord-code ne-sandbox-docker-profile-resolve\n// @concord-implements docs/feature/sandbox-docker-profiles/library.md\nexport function resolveDockerProfile(registry: DockerProfileRegistryIndex \| DockerProfileRegistryInput \| unknown, alias: string): ResolvedDockerProfileEntry {\n const normalizedAlias = requiredAlias(alias, \"profile alias\");\n const index = indexOf(registry);\n const match = index.entries.find((entry) => entry.alias === normalizedAlias);\n if (match !== undefined)\n return match;\n throw dockerProfileError({\n code: \"sandbox.docker-profile-registry-alias-not-found\",\n alias: normalizedAlias,\n message: `No Docker execution profile is registered for alias ${JSON.stringify(normalizedAlias)}`,\n });\n}\nexport const resolveDockerProfileAlias = resolveDockerProfile;\n/* detached 读面可显式按 alias 或 stable ID 查找；两者同时命中不同 descriptor 时拒绝猜测。 */\n// @concord-code ne-sandbox-docker-profile-select\n// @concord-implements docs/feature/sandbox-docker-profiles/library.md\nexport function resolveDockerProfileSelector(registry: DockerProfileRegistryIndex \| DockerProfileRegistryInput \| unknown, selector: string): ResolvedDockerProfileEntry {\n const normalizedSelector = requiredSelector(selector, \"profile selector\");\n const index = indexOf(registry);\n const matches = index.entries.filter((entry) => entry.alias === normalizedSelector \|\| entry.profileId === normalizedSelector);\n const first = matches[0];\n if (first === undefined) {\n throw dockerProfileError({\n code: \"sandbox.docker-profile-registry-alias-not-found\",\n alias: normalizedSelector,\n message: `No Docker execution profile matches selector ${JSON.stringify(normalizedSelector)}`,\n });\n }\n if (matches.length > 1) {\n throw dockerProfileError({\n code: \"sandbox.docker-profile-registry-ambiguous-alias\",\n alias: normalizedSelector,\n candidates: matches.map((match) => match.alias),\n message: `Docker profile selector ${JSON.stringify(normalizedSelector)} is ambiguous`,\n });\n }\n return first;\n}\nexport const resolveDockerExecutionProfile = resolveDockerProfile;\n"]}
1	+ {"version":3,"file":"registry.js","sourceRoot":"","sources":["registry.ts"],"names":[],"mappings":";;;AAmSA,kDA8BC;AAiDD,oDAWC;AAID,oEAqBC;AAtZD,2CAAsE;AACtE,2CAA4H;AAiC5H,SAAS,QAAQ,CAAC,KAAc;IAC5B,IAAI,KAAK,KAAK,IAAI,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC;QACnE,OAAO,KAAK,CAAC;IACjB,MAAM,SAAS,GAAG,MAAM,CAAC,cAAc,CAAC,KAAK,CAAC,CAAC;IAC/C,OAAO,SAAS,KAAK,MAAM,CAAC,SAAS,IAAI,SAAS,KAAK,IAAI,CAAC;AAChE,CAAC;AACD,SAAS,MAAM,CAAC,MAA0C,EAAE,GAAW;IACnE,OAAO,MAAM,CAAC,SAAS,CAAC,cAAc,CAAC,IAAI,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC;AAC7D,CAAC;AACD,SAAS,aAAa,CAAC,KAAc,EAAE,IAAY;IAC/C,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,CAAC;QACnD,MAAM,IAAA,8BAAkB,EAAC;YACrB,IAAI,EAAE,+CAA+C;YACrD,IAAI;YACJ,OAAO,EAAE,GAAG,IAAI,4BAA4B;SAC/C,CAAC,CAAC;IACP,CAAC;IACD,IAAI,KAAK,CAAC,QAAQ,CAAC,QAAQ,CAAC,IAAI,KAAK,CAAC,QAAQ,CAAC,GAAG,CAAC,IAAI,KAAK,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAC;QAC1E,MAAM,IAAA,8BAAkB,EAAC;YACrB,IAAI,EAAE,+CAA+C;YACrD,IAAI;YACJ,OAAO,EAAE,GAAG,IAAI,2CAA2C;SAC9D,CAAC,CAAC;IACP,CAAC;IACD,OAAO,KAAK,CAAC;AACjB,CAAC;AACD,SAAS,cAAc,CAAC,KAAc,EAAE,IAAY;IAChD,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,IAAI,EAAE,KAAK,EAAE,IAAI,KAAK,CAAC,QAAQ,CAAC,QAAQ,CAAC,EAAE,CAAC;QAC/E,MAAM,IAAA,8BAAkB,EAAC;YACrB,IAAI,EAAE,+CAA+C;YACrD,IAAI;YACJ,OAAO,EAAE,GAAG,IAAI,gDAAgD;SACnE,CAAC,CAAC;IACP,CAAC;IACD,OAAO,KAAK,CAAC;AACjB,CAAC;AACD,SAAS,gBAAgB,CAAC,KAAc,EAAE,IAAY;IAClD,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,IAAI,EAAE,KAAK,EAAE,IAAI,KAAK,CAAC,QAAQ,CAAC,QAAQ,CAAC,EAAE,CAAC;QAC/E,MAAM,IAAA,8BAAkB,EAAC;YACrB,IAAI,EAAE,+CAA+C;YACrD,IAAI;YACJ,OAAO,EAAE,GAAG,IAAI,2CAA2C;SAC9D,CAAC,CAAC;IACP,CAAC;IACD,OAAO,KAAK,CAAC;AACjB,CAAC;AACD,SAAS,WAAW,CAAC,KAAc,EAAE,IAAY;IAC7C,IAAI,KAAK,KAAK,SAAS;QACnB,OAAO,SAAS,CAAC;IACrB,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC;QACnB,MAAM,IAAA,8BAAkB,EAAC;YACrB,IAAI,EAAE,+CAA+C;YACrD,IAAI;YACJ,OAAO,EAAE,GAAG,IAAI,yBAAyB;SAC5C,CAAC,CAAC;IACP,CAAC;IACD,MAAM,OAAO,GAAG,IAAI,GAAG,CAAC,CAAC,WAAW,EAAE,UAAU,EAAE,MAAM,EAAE,gBAAgB,EAAE,aAAa,CAAC,CAAC,CAAC;IAC5F,MAAM,WAAW,GAAG,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC;IACxE,IAAI,WAAW,KAAK,SAAS,EAAE,CAAC;QAC5B,MAAM,IAAA,8BAAkB,EAAC;YACrB,IAAI,EAAE,+CAA+C;YACrD,IAAI,EAAE,GAAG,IAAI,IAAI,WAAW,EAAE;YAC9B,OAAO,EAAE,GAAG,IAAI,IAAI,WAAW,mBAAmB;SACrD,CAAC,CAAC;IACP,CAAC;IACD,IAAI,KAAK,CAAC,SAAS,KAAK,SAAS,IAAI,OAAO,KAAK,CAAC,SAAS,KAAK,SAAS,EAAE,CAAC;QACxE,MAAM,IAAA,8BAAkB,EAAC;YACrB,IAAI,EAAE,+CAA+C;YACrD,IAAI,EAAE,GAAG,IAAI,YAAY;YACzB,OAAO,EAAE,GAAG,IAAI,4BAA4B;SAC/C,CAAC,CAAC;IACP,CAAC;IACD,MAAM,QAAQ,GAAG,KAAK,CAAC,QAAQ,CAAC;IAChC,IAAI,QAAQ,KAAK,SAAS,IAAI,CAAC,OAAO,QAAQ,KAAK,QAAQ,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,QAAQ,CAAC,IAAI,QAAQ,GAAG,CAAC,CAAC,EAAE,CAAC;QAC9G,MAAM,IAAA,8BAAkB,EAAC;YACrB,IAAI,EAAE,+CAA+C;YACrD,IAAI,EAAE,GAAG,IAAI,WAAW;YACxB,OAAO,EAAE,GAAG,IAAI,+CAA+C;SAClE,CAAC,CAAC;IACP,CAAC;IACD,MAAM,IAAI,GAAG,KAAK,CAAC,IAAI,CAAC;IACxB,IAAI,IAAI,KAAK,SAAS,IAAI,CAAC,OAAO,IAAI,KAAK,QAAQ,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,IAAI,CAAC,IAAI,IAAI,GAAG,CAAC,IAAI,IAAI,GAAG,MAAM,CAAC,EAAE,CAAC;QAC3G,MAAM,IAAA,8BAAkB,EAAC;YACrB,IAAI,EAAE,+CAA+C;YACrD,IAAI,EAAE,GAAG,IAAI,OAAO;YACpB,OAAO,EAAE,GAAG,IAAI,+CAA+C;SAClE,CAAC,CAAC;IACP,CAAC;IACD,IAAI,KAAK,CAAC,cAAc,KAAK,SAAS,IAAI,OAAO,KAAK,CAAC,cAAc,KAAK,SAAS,EAAE,CAAC;QAClF,MAAM,IAAA,8BAAkB,EAAC;YACrB,IAAI,EAAE,+CAA+C;YACrD,IAAI,EAAE,GAAG,IAAI,iBAAiB;YAC9B,OAAO,EAAE,GAAG,IAAI,iCAAiC;SACpD,CAAC,CAAC;IACP,CAAC;IACD,MAAM,WAAW,GAAG,KAAK,CAAC,WAAW,CAAC;IACtC,IAAI,WAAW,KAAK,SAAS,IAAI,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,WAAW,CAAC,IAAI,WAAW,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,OAAO,IAAI,KAAK,QAAQ,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,IAAI,CAAC,IAAI,IAAI,GAAG,CAAC,IAAI,IAAI,GAAG,MAAM,CAAC,CAAC,EAAE,CAAC;QAC7K,MAAM,IAAA,8BAAkB,EAAC;YACrB,IAAI,EAAE,+CAA+C;YACrD,IAAI,EAAE,GAAG,IAAI,cAAc;YAC3B,OAAO,EAAE,GAAG,IAAI,sCAAsC;SACzD,CAAC,CAAC;IACP,CAAC;IACD,OAAO,MAAM,CAAC,MAAM,CAAC;QACjB,GAAG,CAAC,KAAK,CAAC,SAAS,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,KAAK,CAAC,SAAS,EAAE,CAAC;QACxE,GAAG,CAAC,QAAQ,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,CAAC;QAC/C,GAAG,CAAC,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,CAAC;QACvC,GAAG,CAAC,KAAK,CAAC,cAAc,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,cAAc,EAAE,KAAK,CAAC,cAAc,EAAE,CAAC;QACvF,GAAG,CAAC,WAAW,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,WAAW,EAAE,MAAM,CAAC,MAAM,CAAC,CAAC,GAAG,WAAW,CAAC,CAAC,EAAE,CAAC;KACzF,CAAC,CAAC;AACP,CAAC;AACD,SAAS,gBAAgB,CAAC,KAAiD,EAAE,IAAY,EAAE,gBAAwB;IAC/G,IAAI,KAAK,KAAK,SAAS;QACnB,OAAO;IACX,IAAI,KAAK,CAAC,SAAS,KAAK,IAAI,EAAE,CAAC;QAC3B,MAAM,IAAA,8BAAkB,EAAC;YACrB,IAAI,EAAE,yCAAyC;YAC/C,IAAI;YACJ,OAAO,EAAE,uEAAuE;SACnF,CAAC,CAAC;IACP,CAAC;IACD,IAAI,KAAK,CAAC,QAAQ,KAAK,SAAS,IAAI,KAAK,CAAC,QAAQ,KAAK,gBAAgB,EAAE,CAAC;QACtE,MAAM,IAAA,8BAAkB,EAAC;YACrB,IAAI,EAAE,+CAA+C;YACrD,IAAI;YACJ,OAAO,EAAE,kDAAkD,gBAAgB,EAAE;YAC7E,OAAO,EAAE,EAAE,gBAAgB,EAAE,cAAc,EAAE,KAAK,CAAC,QAAQ,EAAE;SAChE,CAAC,CAAC;IACP,CAAC;IACD,IAAI,KAAK,CAAC,IAAI,KAAK,SAAS,IAAI,CAAC,KAAK,CAAC,IAAI,GAAG,KAAK,CAAC,KAAK,CAAC,EAAE,CAAC;QACzD,MAAM,IAAA,8BAAkB,EAAC;YACrB,IAAI,EAAE,8CAA8C;YACpD,IAAI;YACJ,OAAO,EAAE,kFAAkF;YAC3F,OAAO,EAAE,EAAE,IAAI,EAAE,KAAK,CAAC,IAAI,EAAE;SAChC,CAAC,CAAC;IACP,CAAC;IACD,IAAI,KAAK,CAAC,cAAc,KAAK,IAAI,IAAI,KAAK,CAAC,WAAW,EAAE,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,IAAI,GAAG,KAAK,CAAC,KAAK,CAAC,CAAC,KAAK,IAAI,EAAE,CAAC;QACpG,MAAM,IAAA,8BAAkB,EAAC;YACrB,IAAI,EAAE,iDAAiD;YACvD,IAAI;YACJ,OAAO,EAAE,mFAAmF;SAC/F,CAAC,CAAC;IACP,CAAC;AACL,CAAC;AACD,SAAS,cAAc,CAAC,KAAc,EAAE,KAAa;IACjD,MAAM,IAAI,GAAG,oBAAoB,KAAK,GAAG,CAAC;IAC1C,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC;QACnB,MAAM,IAAA,8BAAkB,EAAC;YACrB,IAAI,EAAE,+CAA+C;YACrD,IAAI;YACJ,OAAO,EAAE,GAAG,IAAI,yBAAyB;SAC5C,CAAC,CAAC;IACP,CAAC;IACD,MAAM,OAAO,GAAG,IAAI,GAAG,CAAC,CAAC,OAAO,EAAE,SAAS,EAAE,YAAY,EAAE,QAAQ,EAAE,WAAW,CAAC,CAAC,CAAC;IACnF,MAAM,WAAW,GAAG,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC;IACxE,IAAI,WAAW,KAAK,SAAS,EAAE,CAAC;QAC5B,MAAM,IAAA,8BAAkB,EAAC;YACrB,IAAI,EAAE,+CAA+C;YACrD,IAAI,EAAE,GAAG,IAAI,IAAI,WAAW,EAAE;YAC9B,OAAO,EAAE,GAAG,IAAI,IAAI,WAAW,mBAAmB;SACrD,CAAC,CAAC;IACP,CAAC;IACD,IAAI,MAAM,CAAC,KAAK,EAAE,SAAS,CAAC,IAAI,MAAM,CAAC,KAAK,EAAE,YAAY,CAAC,EAAE,CAAC;QAC1D,MAAM,IAAA,8BAAkB,EAAC;YACrB,IAAI,EAAE,+CAA+C;YACrD,IAAI;YACJ,OAAO,EAAE,GAAG,IAAI,sDAAsD;SACzE,CAAC,CAAC;IACP,CAAC;IACD,IAAI,CAAC,MAAM,CAAC,KAAK,EAAE,SAAS,CAAC,IAAI,CAAC,MAAM,CAAC,KAAK,EAAE,YAAY,CAAC,EAAE,CAAC;QAC5D,MAAM,IAAA,8BAAkB,EAAC;YACrB,IAAI,EAAE,+CAA+C;YACrD,IAAI;YACJ,OAAO,EAAE,GAAG,IAAI,qCAAqC;SACxD,CAAC,CAAC;IACP,CAAC;IACD,MAAM,OAAO,GAAG,MAAM,CAAC,KAAK,EAAE,SAAS,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,KAAK,CAAC,UAAU,CAAC;IAC5E,OAAO,MAAM,CAAC,MAAM,CAAC;QACjB,KAAK,EAAE,aAAa,CAAC,KAAK,CAAC,KAAK,EAAE,GAAG,IAAI,QAAQ,CAAC;QAClD,OAAO;QACP,GAAG,CAAC,KAAK,CAAC,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,cAAc,CAAC,KAAK,CAAC,MAAM,EAAE,GAAG,IAAI,SAAS,CAAC,EAAE,CAAC;QACjG,GAAG,CAAC,KAAK,CAAC,SAAS,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,WAAW,CAAC,KAAK,CAAC,SAAS,EAAE,GAAG,IAAI,YAAY,CAAC,EAAE,CAAC;KAC7G,CAAC,CAAC;AACP,CAAC;AACD,SAAS,cAAc,CAAC,KAAa,EAAE,KAAc;IACjD,MAAM,eAAe,GAAG,aAAa,CAAC,KAAK,EAAE,YAAY,KAAK,EAAE,CAAC,CAAC;IAClE,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;QACvB,OAAO,KAAK,CAAC,GAAG,CAAC,CAAC,SAAS,EAAE,EAAE,CAAC,MAAM,CAAC,MAAM,CAAC,EAAE,KAAK,EAAE,eAAe,EAAE,OAAO,EAAE,SAAS,EAAE,CAAC,CAAC,CAAC;IACnG,CAAC;IACD,OAAO,CAAC,MAAM,CAAC,MAAM,CAAC,EAAE,KAAK,EAAE,eAAe,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC,CAAC,CAAC;AACvE,CAAC;AACD,SAAS,UAAU,CAAC,KAAc;IAC9B,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC;QACpB,OAAO,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC,cAAc,CAAC,CAAC,CAAC;IACpD,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC;QACnB,MAAM,IAAA,8BAAkB,EAAC;YACrB,IAAI,EAAE,+CAA+C;YACrD,IAAI,EAAE,UAAU;YAChB,OAAO,EAAE,oEAAoE;SAChF,CAAC,CAAC;IACP,CAAC;IACD,IAAI,MAAM,CAAC,KAAK,EAAE,SAAS,CAAC,EAAE,CAAC;QAC3B,MAAM,WAAW,GAAG,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,KAAK,SAAS,CAAC,CAAC;QACxE,IAAI,WAAW,KAAK,SAAS,EAAE,CAAC;YAC5B,MAAM,IAAA,8BAAkB,EAAC;gBACrB,IAAI,EAAE,+CAA+C;gBACrD,IAAI,EAAE,YAAY,WAAW,EAAE;gBAC/B,OAAO,EAAE,YAAY,WAAW,mBAAmB;aACtD,CAAC,CAAC;QACP,CAAC;QACD,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,OAAO,CAAC,EAAE,CAAC;YAChC,MAAM,IAAA,8BAAkB,EAAC;gBACrB,IAAI,EAAE,+CAA+C;gBACrD,IAAI,EAAE,kBAAkB;gBACxB,OAAO,EAAE,mCAAmC;aAC/C,CAAC,CAAC;QACP,CAAC;QACD,OAAO,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,cAAc,CAAC,CAAC,CAAC;IAC5D,CAAC;IACD,MAAM,OAAO,GAAG,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,KAAK,EAAE,OAAO,CAAC,EAAE,EAAE,CAAC,cAAc,CAAC,KAAK,EAAE,OAAO,CAAC,CAAC,CAAC;IACpG,OAAO,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;AAClC,CAAC;AACD,SAAS,SAAS,CAAC,KAAyB,EAAE,KAAa;IACvD,OAAO,IAAA,8BAAkB,EAAC;QACtB,IAAI,EAAE,KAAK,CAAC,IAAI;QAChB,OAAO,EAAE,wBAAwB,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,KAAK,KAAK,CAAC,OAAO,EAAE;QAC1E,GAAG,CAAC,KAAK,CAAC,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,KAAK,CAAC,IAAI,EAAE,CAAC;QACzD,KAAK;QACL,GAAG,CAAC,KAAK,CAAC,SAAS,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,KAAK,CAAC,SAAS,EAAE,CAAC;QACxE,GAAG,CAAC,KAAK,CAAC,UAAU,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,UAAU,EAAE,KAAK,CAAC,UAAU,EAAE,CAAC;QAC3E,GAAG,CAAC,KAAK,CAAC,OAAO,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,KAAK,CAAC,OAAO,EAAE,CAAC;KACrE,CAAC,CAAC;AACP,CAAC;AACD,SAAS,YAAY,CAAC,KAAiC,EAAE,KAAa,EAAE,OAAqC;IACzG,MAAM,KAAK,GAAG,aAAa,CAAC,KAAK,CAAC,KAAK,EAAE,oBAAoB,KAAK,SAAS,CAAC,CAAC;IAC7E,gBAAgB,CAAC,KAAK,CAAC,SAAS,EAAE,oBAAoB,KAAK,GAAG,EAAE,OAAO,CAAC,gBAAgB,IAAI,CAAC,CAAC,CAAC;IAC/F,IAAI,CAAC;QACD,MAAM,OAAO,GAAG,IAAA,yCAA6B,EAAC,KAAK,CAAC,OAAO,CAAC,CAAC;QAC7D,OAAO,MAAM,CAAC,MAAM,CAAC;YACjB,KAAK;YACL,OAAO;YACP,SAAS,EAAE,OAAO,CAAC,SAAS;YAC5B,gBAAgB,EAAE,IAAA,0CAA8B,EAAC,OAAO,CAAC;YACzD,GAAG,CAAC,KAAK,CAAC,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,KAAK,CAAC,MAAM,EAAE,CAAC;SAClE,CAAC,CAAC;IACP,CAAC;IACD,OAAO,KAAK,EAAE,CAAC;QACX,IAAI,KAAK,YAAY,8BAAkB;YACnC,MAAM,SAAS,CAAC,KAAK,EAAE,KAAK,CAAC,CAAC;QAClC,MAAM,KAAK,CAAC;IAChB,CAAC;AACL,CAAC;AACD,+DAA+D;AAC/D,gDAAgD;AAChD,sEAAsE;AACtE,2EAA2E;AAC3E,SAAgB,mBAAmB,CAAC,KAA2C,EAAE,UAAwC,EAAE;IACvH,MAAM,OAAO,GAAG,UAAU,CAAC,KAAK,CAAC,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,KAAK,EAAE,EAAE,CAAC,YAAY,CAAC,KAAK,EAAE,KAAK,EAAE,OAAO,CAAC,CAAC,CAAC;IAC7F,MAAM,OAAO,GAAG,IAAI,GAAG,EAAwC,CAAC;IAChE,MAAM,WAAW,GAAG,IAAI,GAAG,EAAwC,CAAC;IACpE,KAAK,MAAM,KAAK,IAAI,OAAO,EAAE,CAAC;QAC1B,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,KAAK,EAAE,CAAC,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC,EAAE,KAAK,CAAC,CAAC,CAAC;QACvE,WAAW,CAAC,GAAG,CAAC,KAAK,CAAC,SAAS,EAAE,CAAC,GAAG,CAAC,WAAW,CAAC,GAAG,CAAC,KAAK,CAAC,SAAS,CAAC,IAAI,EAAE,CAAC,EAAE,KAAK,CAAC,CAAC,CAAC;IAC3F,CAAC;IACD,MAAM,SAAS,GAAG,CAAC,GAAG,OAAO,CAAC,OAAO,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,UAAU,CAAC,EAAE,EAAE,CAAC,UAAU,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC;IACzF,IAAI,SAAS,KAAK,SAAS,EAAE,CAAC;QAC1B,MAAM,CAAC,KAAK,EAAE,UAAU,CAAC,GAAG,SAAS,CAAC;QACtC,MAAM,IAAA,8BAAkB,EAAC;YACrB,IAAI,EAAE,iDAAiD;YACvD,KAAK;YACL,UAAU,EAAE,UAAU,CAAC,GAAG,CAAC,CAAC,SAAS,EAAE,EAAE,CAAC,SAAS,CAAC,SAAS,CAAC;YAC9D,OAAO,EAAE,wBAAwB,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,mCAAmC;SAC5F,CAAC,CAAC;IACP,CAAC;IACD,MAAM,SAAS,GAAG,CAAC,GAAG,WAAW,CAAC,OAAO,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,UAAU,CAAC,EAAE,EAAE,CAAC,UAAU,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC;IAC7F,IAAI,SAAS,KAAK,SAAS,EAAE,CAAC;QAC1B,MAAM,CAAC,SAAS,EAAE,UAAU,CAAC,GAAG,SAAS,CAAC;QAC1C,MAAM,IAAA,8BAAkB,EAAC;YACrB,IAAI,EAAE,8CAA8C;YACpD,SAAS;YACT,KAAK,EAAE,UAAU,CAAC,CAAC,CAAC,EAAE,KAAK;YAC3B,UAAU,EAAE,UAAU,CAAC,GAAG,CAAC,CAAC,SAAS,EAAE,EAAE,CAAC,SAAS,CAAC,KAAK,CAAC;YAC1D,OAAO,EAAE,4BAA4B,IAAI,CAAC,SAAS,CAAC,SAAS,CAAC,+BAA+B;SAChG,CAAC,CAAC;IACP,CAAC;IACD,OAAO,MAAM,CAAC,MAAM,CAAC,EAAE,OAAO,EAAE,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC;AAC9D,CAAC;AACY,QAAA,2BAA2B,GAAG,mBAAmB,CAAC;AAClD,QAAA,0BAA0B,GAAG,mBAAmB,CAAC;AAC9D,SAAS,eAAe,CAAC,KAAc;IACnC,OAAO,QAAQ,CAAC,KAAK,CAAC,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,OAAO,CAAC,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,QAAQ,CAAC,KAAK,CAAC;QACpG,OAAO,KAAK,CAAC,KAAK,KAAK,QAAQ;QAC/B,QAAQ,CAAC,KAAK,CAAC,OAAO,CAAC;QACvB,OAAO,KAAK,CAAC,SAAS,KAAK,QAAQ;QACnC,OAAO,KAAK,CAAC,gBAAgB,KAAK,QAAQ,CAAC,CAAC;AACpD,CAAC;AACD,SAAS,OAAO,CAAC,KAAwE;IACrF,IAAI,eAAe,CAAC,KAAK,CAAC,EAAE,CAAC;QACzB,MAAM,OAAO,GAAG,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,KAAK,EAAE,EAAE;YAC/C,MAAM,KAAK,GAAG,aAAa,CAAC,KAAK,CAAC,KAAK,EAAE,oBAAoB,KAAK,SAAS,CAAC,CAAC;YAC7E,IAAI,CAAC;gBACD,MAAM,OAAO,GAAG,IAAA,yCAA6B,EAAC,KAAK,CAAC,OAAO,CAAC,CAAC;gBAC7D,MAAM,gBAAgB,GAAG,IAAA,0CAA8B,EAAC,OAAO,CAAC,CAAC;gBACjE,IAAI,KAAK,CAAC,SAAS,KAAK,OAAO,CAAC,SAAS,IAAI,KAAK,CAAC,gBAAgB,KAAK,gBAAgB,EAAE,CAAC;oBACvF,MAAM,IAAA,8BAAkB,EAAC;wBACrB,IAAI,EAAE,+CAA+C;wBACrD,IAAI,EAAE,oBAAoB,KAAK,GAAG;wBAClC,OAAO,EAAE,4EAA4E;wBACrF,OAAO,EAAE;4BACL,iBAAiB,EAAE,OAAO,CAAC,SAAS;4BACpC,eAAe,EAAE,KAAK,CAAC,SAAS;4BAChC,wBAAwB,EAAE,gBAAgB;4BAC1C,sBAAsB,EAAE,KAAK,CAAC,gBAAgB;yBACjD;qBACJ,CAAC,CAAC;gBACP,CAAC;gBACD,OAAO,MAAM,CAAC,MAAM,CAAC;oBACjB,KAAK;oBACL,OAAO;oBACP,GAAG,CAAC,KAAK,CAAC,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,cAAc,CAAC,KAAK,CAAC,MAAM,EAAE,oBAAoB,KAAK,UAAU,CAAC,EAAE,CAAC;iBACvH,CAAC,CAAC;YACP,CAAC;YACD,OAAO,KAAK,EAAE,CAAC;gBACX,IAAI,KAAK,YAAY,8BAAkB;oBACnC,MAAM,SAAS,CAAC,KAAK,EAAE,KAAK,CAAC,CAAC;gBAClC,MAAM,KAAK,CAAC;YAChB,CAAC;QACL,CAAC,CAAC,CAAC;QACH,OAAO,mBAAmB,CAAC,OAAO,CAAC,CAAC;IACxC,CAAC;IACD,OAAO,mBAAmB,CAAC,KAAK,CAAC,CAAC;AACtC,CAAC;AACD,iEAAiE;AACjE,kDAAkD;AAClD,sEAAsE;AACtE,SAAgB,oBAAoB,CAAC,QAA2E,EAAE,KAAa;IAC3H,MAAM,eAAe,GAAG,aAAa,CAAC,KAAK,EAAE,eAAe,CAAC,CAAC;IAC9D,MAAM,KAAK,GAAG,OAAO,CAAC,QAAQ,CAAC,CAAC;IAChC,MAAM,KAAK,GAAG,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,KAAK,KAAK,eAAe,CAAC,CAAC;IAC7E,IAAI,KAAK,KAAK,SAAS;QACnB,OAAO,KAAK,CAAC;IACjB,MAAM,IAAA,8BAAkB,EAAC;QACrB,IAAI,EAAE,iDAAiD;QACvD,KAAK,EAAE,eAAe;QACtB,OAAO,EAAE,uDAAuD,IAAI,CAAC,SAAS,CAAC,eAAe,CAAC,EAAE;KACpG,CAAC,CAAC;AACP,CAAC;AACD,sEAAsE;AACtE,iDAAiD;AACjD,sEAAsE;AACtE,SAAgB,4BAA4B,CAAC,QAA2E,EAAE,QAAgB;IACtI,MAAM,kBAAkB,GAAG,gBAAgB,CAAC,QAAQ,EAAE,kBAAkB,CAAC,CAAC;IAC1E,MAAM,KAAK,GAAG,OAAO,CAAC,QAAQ,CAAC,CAAC;IAChC,MAAM,OAAO,GAAG,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,KAAK,KAAK,kBAAkB,IAAI,KAAK,CAAC,SAAS,KAAK,kBAAkB,CAAC,CAAC;IAC9H,MAAM,KAAK,GAAG,OAAO,CAAC,CAAC,CAAC,CAAC;IACzB,IAAI,KAAK,KAAK,SAAS,EAAE,CAAC;QACtB,MAAM,IAAA,8BAAkB,EAAC;YACrB,IAAI,EAAE,iDAAiD;YACvD,KAAK,EAAE,kBAAkB;YACzB,OAAO,EAAE,gDAAgD,IAAI,CAAC,SAAS,CAAC,kBAAkB,CAAC,EAAE;SAChG,CAAC,CAAC;IACP,CAAC;IACD,IAAI,OAAO,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACrB,MAAM,IAAA,8BAAkB,EAAC;YACrB,IAAI,EAAE,iDAAiD;YACvD,KAAK,EAAE,kBAAkB;YACzB,UAAU,EAAE,OAAO,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,KAAK,CAAC;YAC/C,OAAO,EAAE,2BAA2B,IAAI,CAAC,SAAS,CAAC,kBAAkB,CAAC,eAAe;SACxF,CAAC,CAAC;IACP,CAAC;IACD,OAAO,KAAK,CAAC;AACjB,CAAC;AACY,QAAA,6BAA6B,GAAG,oBAAoB,CAAC","sourcesContent":["import { dockerProfileError, DockerProfileError, } from \"./errors.ts\";\nimport { dockerExecutionProfileV1Digest, parseDockerExecutionProfileV1, type DockerExecutionProfileV1, } from \"./schema.ts\";\n/** 由宿主 registry loader 提供的文件事实；本模块不会自行读文件或执行路径。 /\nexport interface DockerProfileRegistryFileFacts {\n readonly isSymlink?: boolean;\n readonly ownerUid?: number;\n readonly mode?: number;\n readonly parentWritable?: boolean;\n readonly parentModes?: readonly number[];\n}\nexport interface DockerProfileRegistryEntry {\n readonly alias: string;\n readonly profile?: unknown;\n readonly descriptor?: unknown;\n readonly source?: string;\n readonly fileFacts?: DockerProfileRegistryFileFacts;\n}\nexport interface DockerProfileRegistryOptions {\n /* descriptor 必须由 root 持有；未提供 file facts 时纯解析不会臆造权限事实。 /\n readonly expectedOwnerUid?: number;\n}\nexport interface ResolvedDockerProfileEntry {\n readonly alias: string;\n readonly profile: DockerExecutionProfileV1;\n readonly profileId: string;\n readonly descriptorDigest: string;\n readonly source?: string;\n}\nexport interface DockerProfileRegistryIndex {\n readonly entries: readonly ResolvedDockerProfileEntry[];\n}\nexport type DockerProfileRegistryInput = readonly DockerProfileRegistryEntry[] \| Readonly<globalThis.Record<string, unknown>> \| {\n readonly entries: readonly DockerProfileRegistryEntry[];\n};\nfunction isRecord(value: unknown): value is globalThis.Record<string, unknown> {\n if (value === null \|\| typeof value !== \"object\" \|\| Array.isArray(value))\n return false;\n const prototype = Object.getPrototypeOf(value);\n return prototype === Object.prototype \|\| prototype === null;\n}\nfunction hasOwn(record: globalThis.Record<string, unknown>, key: string): boolean {\n return Object.prototype.hasOwnProperty.call(record, key);\n}\nfunction requiredAlias(value: unknown, path: string): string {\n if (typeof value !== \"string\" \|\| value.trim() === \"\") {\n throw dockerProfileError({\n code: \"sandbox.docker-profile-registry-entry-invalid\",\n path,\n message: `${path} must be a non-empty alias`,\n });\n }\n if (value.includes(\"\\u0000\") \|\| value.includes(\"/\") \|\| value.includes(\"\\\\\")) {\n throw dockerProfileError({\n code: \"sandbox.docker-profile-registry-entry-invalid\",\n path,\n message: `${path} must be a single non-empty alias segment`,\n });\n }\n return value;\n}\nfunction requiredSource(value: unknown, path: string): string {\n if (typeof value !== \"string\" \|\| value.trim() === \"\" \|\| value.includes(\"\\u0000\")) {\n throw dockerProfileError({\n code: \"sandbox.docker-profile-registry-entry-invalid\",\n path,\n message: `${path} must be a non-empty source string without NUL`,\n });\n }\n return value;\n}\nfunction requiredSelector(value: unknown, path: string): string {\n if (typeof value !== \"string\" \|\| value.trim() === \"\" \|\| value.includes(\"\\u0000\")) {\n throw dockerProfileError({\n code: \"sandbox.docker-profile-registry-entry-invalid\",\n path,\n message: `${path} must be a non-empty selector without NUL`,\n });\n }\n return value;\n}\nfunction sourceFacts(value: unknown, path: string): DockerProfileRegistryFileFacts \| undefined {\n if (value === undefined)\n return undefined;\n if (!isRecord(value)) {\n throw dockerProfileError({\n code: \"sandbox.docker-profile-registry-entry-invalid\",\n path,\n message: `${path} must be a plain object`,\n });\n }\n const allowed = new Set([\"isSymlink\", \"ownerUid\", \"mode\", \"parentWritable\", \"parentModes\"]);\n const unsupported = Object.keys(value).find((key) => !allowed.has(key));\n if (unsupported !== undefined) {\n throw dockerProfileError({\n code: \"sandbox.docker-profile-registry-entry-invalid\",\n path: `${path}.${unsupported}`,\n message: `${path}.${unsupported} is not supported`,\n });\n }\n if (value.isSymlink !== undefined && typeof value.isSymlink !== \"boolean\") {\n throw dockerProfileError({\n code: \"sandbox.docker-profile-registry-entry-invalid\",\n path: `${path}.isSymlink`,\n message: `${path}.isSymlink must be boolean`,\n });\n }\n const ownerUid = value.ownerUid;\n if (ownerUid !== undefined && (typeof ownerUid !== \"number\" \|\| !Number.isSafeInteger(ownerUid) \|\| ownerUid < 0)) {\n throw dockerProfileError({\n code: \"sandbox.docker-profile-registry-entry-invalid\",\n path: `${path}.ownerUid`,\n message: `${path}.ownerUid must be a non-negative safe integer`,\n });\n }\n const mode = value.mode;\n if (mode !== undefined && (typeof mode !== \"number\" \|\| !Number.isInteger(mode) \|\| mode < 0 \|\| mode > 0o7777)) {\n throw dockerProfileError({\n code: \"sandbox.docker-profile-registry-entry-invalid\",\n path: `${path}.mode`,\n message: `${path}.mode must be an integer between 0 and 0o7777`,\n });\n }\n if (value.parentWritable !== undefined && typeof value.parentWritable !== \"boolean\") {\n throw dockerProfileError({\n code: \"sandbox.docker-profile-registry-entry-invalid\",\n path: `${path}.parentWritable`,\n message: `${path}.parentWritable must be boolean`,\n });\n }\n const parentModes = value.parentModes;\n if (parentModes !== undefined && (!Array.isArray(parentModes) \|\| parentModes.some((mode) => typeof mode !== \"number\" \|\| !Number.isInteger(mode) \|\| mode < 0 \|\| mode > 0o7777))) {\n throw dockerProfileError({\n code: \"sandbox.docker-profile-registry-entry-invalid\",\n path: `${path}.parentModes`,\n message: `${path}.parentModes must contain file modes`,\n });\n }\n return Object.freeze({\n ...(value.isSymlink === undefined ? {} : { isSymlink: value.isSymlink }),\n ...(ownerUid === undefined ? {} : { ownerUid }),\n ...(mode === undefined ? {} : { mode }),\n ...(value.parentWritable === undefined ? {} : { parentWritable: value.parentWritable }),\n ...(parentModes === undefined ? {} : { parentModes: Object.freeze([...parentModes]) }),\n });\n}\nfunction checkSourceFacts(facts: DockerProfileRegistryFileFacts \| undefined, path: string, expectedOwnerUid: number): void {\n if (facts === undefined)\n return;\n if (facts.isSymlink === true) {\n throw dockerProfileError({\n code: \"sandbox.docker-profile-registry-symlink\",\n path,\n message: \"Docker profile descriptor must be a regular file, not a symbolic link\",\n });\n }\n if (facts.ownerUid !== undefined && facts.ownerUid !== expectedOwnerUid) {\n throw dockerProfileError({\n code: \"sandbox.docker-profile-registry-owner-invalid\",\n path,\n message: `Docker profile descriptor must be owned by UID ${expectedOwnerUid}`,\n details: { expectedOwnerUid, actualOwnerUid: facts.ownerUid },\n });\n }\n if (facts.mode !== undefined && (facts.mode & 0o022) !== 0) {\n throw dockerProfileError({\n code: \"sandbox.docker-profile-registry-mode-invalid\",\n path,\n message: \"Docker profile descriptor and registry file must not be group- or world-writable\",\n details: { mode: facts.mode },\n });\n }\n if (facts.parentWritable === true \|\| facts.parentModes?.some((mode) => (mode & 0o022) !== 0) === true) {\n throw dockerProfileError({\n code: \"sandbox.docker-profile-registry-parent-writable\",\n path,\n message: \"Docker profile descriptor parent directories must not be group- or world-writable\",\n });\n }\n}\nfunction entryFromArray(value: unknown, index: number): DockerProfileRegistryEntry {\n const path = `registry.entries[${index}]`;\n if (!isRecord(value)) {\n throw dockerProfileError({\n code: \"sandbox.docker-profile-registry-entry-invalid\",\n path,\n message: `${path} must be a plain object`,\n });\n }\n const allowed = new Set([\"alias\", \"profile\", \"descriptor\", \"source\", \"fileFacts\"]);\n const unsupported = Object.keys(value).find((key) => !allowed.has(key));\n if (unsupported !== undefined) {\n throw dockerProfileError({\n code: \"sandbox.docker-profile-registry-entry-invalid\",\n path: `${path}.${unsupported}`,\n message: `${path}.${unsupported} is not supported`,\n });\n }\n if (hasOwn(value, \"profile\") && hasOwn(value, \"descriptor\")) {\n throw dockerProfileError({\n code: \"sandbox.docker-profile-registry-entry-invalid\",\n path,\n message: `${path} must provide either profile or descriptor, not both`,\n });\n }\n if (!hasOwn(value, \"profile\") && !hasOwn(value, \"descriptor\")) {\n throw dockerProfileError({\n code: \"sandbox.docker-profile-registry-entry-invalid\",\n path,\n message: `${path} must provide profile or descriptor`,\n });\n }\n const profile = hasOwn(value, \"profile\") ? value.profile : value.descriptor;\n return Object.freeze({\n alias: requiredAlias(value.alias, `${path}.alias`),\n profile,\n ...(value.source === undefined ? {} : { source: requiredSource(value.source, `${path}.source`) }),\n ...(value.fileFacts === undefined ? {} : { fileFacts: sourceFacts(value.fileFacts, `${path}.fileFacts`) }),\n });\n}\nfunction entryFromAlias(alias: string, value: unknown): DockerProfileRegistryEntry[] {\n const normalizedAlias = requiredAlias(alias, `registry.${alias}`);\n if (Array.isArray(value)) {\n return value.map((candidate) => Object.freeze({ alias: normalizedAlias, profile: candidate }));\n }\n return [Object.freeze({ alias: normalizedAlias, profile: value })];\n}\nfunction rawEntries(input: unknown): readonly DockerProfileRegistryEntry[] {\n if (Array.isArray(input))\n return Object.freeze(input.map(entryFromArray));\n if (!isRecord(input)) {\n throw dockerProfileError({\n code: \"sandbox.docker-profile-registry-entry-invalid\",\n path: \"registry\",\n message: \"registry must be an entries array or an alias-to-descriptor object\",\n });\n }\n if (hasOwn(input, \"entries\")) {\n const unsupported = Object.keys(input).find((key) => key !== \"entries\");\n if (unsupported !== undefined) {\n throw dockerProfileError({\n code: \"sandbox.docker-profile-registry-entry-invalid\",\n path: `registry.${unsupported}`,\n message: `registry.${unsupported} is not supported`,\n });\n }\n if (!Array.isArray(input.entries)) {\n throw dockerProfileError({\n code: \"sandbox.docker-profile-registry-entry-invalid\",\n path: \"registry.entries\",\n message: \"registry.entries must be an array\",\n });\n }\n return Object.freeze(input.entries.map(entryFromArray));\n }\n const entries = Object.entries(input).flatMap(([alias, profile]) => entryFromAlias(alias, profile));\n return Object.freeze(entries);\n}\nfunction withAlias(error: DockerProfileError, alias: string): DockerProfileError {\n return dockerProfileError({\n code: error.code,\n message: `Docker profile alias ${JSON.stringify(alias)}: ${error.message}`,\n ...(error.path === undefined ? {} : { path: error.path }),\n alias,\n ...(error.profileId === undefined ? {} : { profileId: error.profileId }),\n ...(error.candidates === undefined ? {} : { candidates: error.candidates }),\n ...(error.details === undefined ? {} : { details: error.details }),\n });\n}\nfunction resolveEntry(entry: DockerProfileRegistryEntry, index: number, options: DockerProfileRegistryOptions): ResolvedDockerProfileEntry {\n const alias = requiredAlias(entry.alias, `registry.entries[${index}].alias`);\n checkSourceFacts(entry.fileFacts, `registry.entries[${index}]`, options.expectedOwnerUid ?? 0);\n try {\n const profile = parseDockerExecutionProfileV1(entry.profile);\n return Object.freeze({\n alias,\n profile,\n profileId: profile.profileId,\n descriptorDigest: dockerExecutionProfileV1Digest(profile),\n ...(entry.source === undefined ? {} : { source: entry.source }),\n });\n }\n catch (error) {\n if (error instanceof DockerProfileError)\n throw withAlias(error, alias);\n throw error;\n }\n}\n/* 构造只含规范化 descriptor 的 registry index；不读文件、不执行 profile 内容。 /\n// @concord-code ne-sandbox-docker-profile-index\n// @concord-implements docs/feature/sandbox-docker-profiles/library.md\n// @concord-implements docs/feature/sandbox-docker-profiles/architecture.md\nexport function indexDockerProfiles(input: DockerProfileRegistryInput \| unknown, options: DockerProfileRegistryOptions = {}): DockerProfileRegistryIndex {\n const entries = rawEntries(input).map((entry, index) => resolveEntry(entry, index, options));\n const byAlias = new Map<string, ResolvedDockerProfileEntry[]>();\n const byProfileId = new Map<string, ResolvedDockerProfileEntry[]>();\n for (const entry of entries) {\n byAlias.set(entry.alias, [...(byAlias.get(entry.alias) ?? []), entry]);\n byProfileId.set(entry.profileId, [...(byProfileId.get(entry.profileId) ?? []), entry]);\n }\n const ambiguous = [...byAlias.entries()].find(([, candidates]) => candidates.length > 1);\n if (ambiguous !== undefined) {\n const [alias, candidates] = ambiguous;\n throw dockerProfileError({\n code: \"sandbox.docker-profile-registry-ambiguous-alias\",\n alias,\n candidates: candidates.map((candidate) => candidate.profileId),\n message: `Docker profile alias ${JSON.stringify(alias)} resolves to multiple descriptors`,\n });\n }\n const duplicate = [...byProfileId.entries()].find(([, candidates]) => candidates.length > 1);\n if (duplicate !== undefined) {\n const [profileId, candidates] = duplicate;\n throw dockerProfileError({\n code: \"sandbox.docker-profile-registry-duplicate-id\",\n profileId,\n alias: candidates[0]?.alias,\n candidates: candidates.map((candidate) => candidate.alias),\n message: `Docker profile stable ID ${JSON.stringify(profileId)} is registered more than once`,\n });\n }\n return Object.freeze({ entries: Object.freeze(entries) });\n}\nexport const createDockerProfileRegistry = indexDockerProfiles;\nexport const parseDockerProfileRegistry = indexDockerProfiles;\nfunction isRegistryIndex(value: unknown): value is DockerProfileRegistryIndex {\n return isRecord(value) && Array.isArray(value.entries) && value.entries.every((entry) => isRecord(entry) &&\n typeof entry.alias === \"string\" &&\n isRecord(entry.profile) &&\n typeof entry.profileId === \"string\" &&\n typeof entry.descriptorDigest === \"string\");\n}\nfunction indexOf(input: DockerProfileRegistryIndex \| DockerProfileRegistryInput \| unknown): DockerProfileRegistryIndex {\n if (isRegistryIndex(input)) {\n const entries = input.entries.map((entry, index) => {\n const alias = requiredAlias(entry.alias, `registry.entries[${index}].alias`);\n try {\n const profile = parseDockerExecutionProfileV1(entry.profile);\n const descriptorDigest = dockerExecutionProfileV1Digest(profile);\n if (entry.profileId !== profile.profileId \|\| entry.descriptorDigest !== descriptorDigest) {\n throw dockerProfileError({\n code: \"sandbox.docker-profile-registry-entry-invalid\",\n path: `registry.entries[${index}]`,\n message: \"registry index profileId or descriptorDigest does not match its descriptor\",\n details: {\n expectedProfileId: profile.profileId,\n actualProfileId: entry.profileId,\n expectedDescriptorDigest: descriptorDigest,\n actualDescriptorDigest: entry.descriptorDigest,\n },\n });\n }\n return Object.freeze({\n alias,\n profile,\n ...(entry.source === undefined ? {} : { source: requiredSource(entry.source, `registry.entries[${index}].source`) }),\n });\n }\n catch (error) {\n if (error instanceof DockerProfileError)\n throw withAlias(error, alias);\n throw error;\n }\n });\n return indexDockerProfiles(entries);\n }\n return indexDockerProfiles(input);\n}\n/* 只按宿主 alias 查找；没有 alias 时不猜 profile ID 或默认 Docker endpoint。 /\n// @concord-code ne-sandbox-docker-profile-resolve\n// @concord-implements docs/feature/sandbox-docker-profiles/library.md\nexport function resolveDockerProfile(registry: DockerProfileRegistryIndex \| DockerProfileRegistryInput \| unknown, alias: string): ResolvedDockerProfileEntry {\n const normalizedAlias = requiredAlias(alias, \"profile alias\");\n const index = indexOf(registry);\n const match = index.entries.find((entry) => entry.alias === normalizedAlias);\n if (match !== undefined)\n return match;\n throw dockerProfileError({\n code: \"sandbox.docker-profile-registry-alias-not-found\",\n alias: normalizedAlias,\n message: `No Docker execution profile is registered for alias ${JSON.stringify(normalizedAlias)}`,\n });\n}\n/* detached 读面可显式按 alias 或 stable ID 查找；两者同时命中不同 descriptor 时拒绝猜测。 */\n// @concord-code ne-sandbox-docker-profile-select\n// @concord-implements docs/feature/sandbox-docker-profiles/library.md\nexport function resolveDockerProfileSelector(registry: DockerProfileRegistryIndex \| DockerProfileRegistryInput \| unknown, selector: string): ResolvedDockerProfileEntry {\n const normalizedSelector = requiredSelector(selector, \"profile selector\");\n const index = indexOf(registry);\n const matches = index.entries.filter((entry) => entry.alias === normalizedSelector \|\| entry.profileId === normalizedSelector);\n const first = matches[0];\n if (first === undefined) {\n throw dockerProfileError({\n code: \"sandbox.docker-profile-registry-alias-not-found\",\n alias: normalizedSelector,\n message: `No Docker execution profile matches selector ${JSON.stringify(normalizedSelector)}`,\n });\n }\n if (matches.length > 1) {\n throw dockerProfileError({\n code: \"sandbox.docker-profile-registry-ambiguous-alias\",\n alias: normalizedSelector,\n candidates: matches.map((match) => match.alias),\n message: `Docker profile selector ${JSON.stringify(normalizedSelector)} is ambiguous`,\n });\n }\n return first;\n}\nexport const resolveDockerExecutionProfile = resolveDockerProfile;\n"]}

package/dist/sandbox/docker-profile/registry.d.cts CHANGED Viewed

@@ -37,7 +37,6 @@ export declare const createDockerProfileRegistry: typeof indexDockerProfiles;
 export declare const parseDockerProfileRegistry: typeof indexDockerProfiles;
 /** 只按宿主 alias 查找；没有 alias 时不猜 profile ID 或默认 Docker endpoint。 */
 export declare function resolveDockerProfile(registry: DockerProfileRegistryIndex | DockerProfileRegistryInput | unknown, alias: string): ResolvedDockerProfileEntry;
-export declare const resolveDockerProfileAlias: typeof resolveDockerProfile;
 /** detached 读面可显式按 alias 或 stable ID 查找；两者同时命中不同 descriptor 时拒绝猜测。 */
 export declare function resolveDockerProfileSelector(registry: DockerProfileRegistryIndex | DockerProfileRegistryInput | unknown, selector: string): ResolvedDockerProfileEntry;
 export declare const resolveDockerExecutionProfile: typeof resolveDockerProfile;

package/dist/sandbox/docker-profile/registry.d.mts CHANGED Viewed

@@ -37,7 +37,6 @@ export declare const createDockerProfileRegistry: typeof indexDockerProfiles;
 export declare const parseDockerProfileRegistry: typeof indexDockerProfiles;
 /** 只按宿主 alias 查找；没有 alias 时不猜 profile ID 或默认 Docker endpoint。 */
 export declare function resolveDockerProfile(registry: DockerProfileRegistryIndex | DockerProfileRegistryInput | unknown, alias: string): ResolvedDockerProfileEntry;
-export declare const resolveDockerProfileAlias: typeof resolveDockerProfile;
 /** detached 读面可显式按 alias 或 stable ID 查找；两者同时命中不同 descriptor 时拒绝猜测。 */
 export declare function resolveDockerProfileSelector(registry: DockerProfileRegistryIndex | DockerProfileRegistryInput | unknown, selector: string): ResolvedDockerProfileEntry;
 export declare const resolveDockerExecutionProfile: typeof resolveDockerProfile;

package/dist/sandbox/docker-profile/registry.d.ts CHANGED Viewed

@@ -37,7 +37,6 @@ export declare const createDockerProfileRegistry: typeof indexDockerProfiles;
 export declare const parseDockerProfileRegistry: typeof indexDockerProfiles;
 /** 只按宿主 alias 查找；没有 alias 时不猜 profile ID 或默认 Docker endpoint。 */
 export declare function resolveDockerProfile(registry: DockerProfileRegistryIndex | DockerProfileRegistryInput | unknown, alias: string): ResolvedDockerProfileEntry;
-export declare const resolveDockerProfileAlias: typeof resolveDockerProfile;
 /** detached 读面可显式按 alias 或 stable ID 查找；两者同时命中不同 descriptor 时拒绝猜测。 */
 export declare function resolveDockerProfileSelector(registry: DockerProfileRegistryIndex | DockerProfileRegistryInput | unknown, selector: string): ResolvedDockerProfileEntry;
 export declare const resolveDockerExecutionProfile: typeof resolveDockerProfile;

package/dist/sandbox/docker-profile/registry.js CHANGED Viewed

@@ -11,8 +11,6 @@ const __niceevalExport3 = __niceevalCanonical["resolveDockerExecutionProfile"];
 export { __niceevalExport3 as resolveDockerExecutionProfile };
 const __niceevalExport4 = __niceevalCanonical["resolveDockerProfile"];
 export { __niceevalExport4 as resolveDockerProfile };
-const __niceevalExport5 = __niceevalCanonical["resolveDockerProfileAlias"];
-export { __niceevalExport5 as resolveDockerProfileAlias };
-const __niceevalExport6 = __niceevalCanonical["resolveDockerProfileSelector"];
-export { __niceevalExport6 as resolveDockerProfileSelector };
+const __niceevalExport5 = __niceevalCanonical["resolveDockerProfileSelector"];
+export { __niceevalExport5 as resolveDockerProfileSelector };
 //# sourceMappingURL=registry.js.map

package/dist/sandbox/index.cjs CHANGED Viewed

@@ -1,7 +1,7 @@
 "use strict";
 Object.defineProperty(exports, "__esModule", { value: true });
 exports.restoreCheckpoint = exports.createCheckpoint = exports.buildFailureOrigin = exports.startSandboxBuilds = exports.prepareSandboxBuilds = exports.SANDBOX_BUILD_ACTIVITY = exports.looksLikeDigestRef = exports.assertPureDataIdentity = exports.credentialIdentityContribution = exports.resolveFloatingImageTag = exports.computeCaseKey = exports.computeBuildKey = exports.materializeDockerComposeProviderCase = exports.buildComposeOverlay = exports.findComposeBlacklistViolations = exports.assertComposeBlacklist = exports.inspectComposeYaml = exports.leakGateHintsFromComposeFile = exports.collectComposeBuilds = exports.dockerComposeBuildProvider = exports.COMPOSE_MATERIALIZER_REVISION = exports.sandboxContent = exports.registerSandboxContent = exports.SandboxCommandExitError = exports.installTool = exports.checkout = exports.writeText = exports.writeBytes = exports.uploadFile = exports.uploadDirectory = exports.SandboxActionDefinitionError = exports.sandboxState = exports.sandboxStep = exports.gitCheckout = exports.defineSandboxAction = exports.changeFrequency = exports.actionRef = exports.defineSandboxCommand = exports.shell = exports.command = exports.incusSandbox = exports.defineSandboxCase = exports.vercelSandbox = exports.e2bSandbox = exports.dockerComposeSandbox = exports.dockerSandbox = exports.sandboxRequirements = exports.sandboxLayer = exports.CustomSandboxMaterializationError = exports.defineSandbox = void 0;
-exports.resolveDockerProfileSelector = exports.resolveDockerProfileAlias = exports.resolveDockerProfile = exports.resolveDockerExecutionProfile = exports.parseDockerProfileRegistry = exports.indexDockerProfiles = exports.createDockerProfileRegistry = exports.parseDockerExecutionProfileV1 = exports.parseDockerExecutionProfile = exports.makeDockerExecutionProfileV1 = exports.isDockerExecutionProfileV1 = exports.dockerProfilePublicSummaryOf = exports.dockerProfileDigestOf = exports.dockerExecutionProfileV1Digest = exports.dockerProfileSemanticPolicyRevisionOf = exports.dockerExecutionProfileSemanticPolicyRevisionOf = exports.decodeDockerExecutionProfileV1 = exports.createDockerExecutionProfileV1 = exports.DockerExecutionProfileSchema = exports.DockerExecutionProfileV1Schema = exports.DOCKER_PROFILE_NETWORK_DENY_CIDRS = exports.DOCKER_PROFILE_NETWORK_POLICY_VERSION = exports.DOCKER_PROFILE_SCHEMA_VERSION = exports.DOCKER_EXECUTION_PROFILE_SCHEMA_VERSION = exports.dockerProfileError = exports.DockerProfileError = exports.sandboxBuildRef = exports.materializationScopeId = exports.NICEEVAL_DEEPSEEK_HARNESS_DOCKER_IMAGE = exports.NICEEVAL_OMP_DOCKER_IMAGE = exports.NICEEVAL_OPENCODE_DOCKER_IMAGE = exports.NICEEVAL_OPENCLAW_DOCKER_IMAGE = exports.NICEEVAL_HERMES_DOCKER_IMAGE = exports.NICEEVAL_CODEX_DOCKER_IMAGE = exports.NICEEVAL_CLAUDE_CODE_DOCKER_IMAGE = exports.NICEEVAL_BUB_DOCKER_IMAGE = exports.normalizeSandboxCapture = void 0;
+exports.resolveDockerProfileSelector = exports.resolveDockerProfile = exports.resolveDockerExecutionProfile = exports.parseDockerProfileRegistry = exports.indexDockerProfiles = exports.createDockerProfileRegistry = exports.parseDockerExecutionProfileV1 = exports.parseDockerExecutionProfile = exports.makeDockerExecutionProfileV1 = exports.isDockerExecutionProfileV1 = exports.dockerProfilePublicSummaryOf = exports.dockerProfileDigestOf = exports.dockerExecutionProfileV1Digest = exports.dockerProfileSemanticPolicyRevisionOf = exports.dockerExecutionProfileSemanticPolicyRevisionOf = exports.decodeDockerExecutionProfileV1 = exports.createDockerExecutionProfileV1 = exports.DockerExecutionProfileSchema = exports.DockerExecutionProfileV1Schema = exports.DOCKER_PROFILE_NETWORK_DENY_CIDRS = exports.DOCKER_PROFILE_NETWORK_POLICY_VERSION = exports.DOCKER_PROFILE_SCHEMA_VERSION = exports.DOCKER_EXECUTION_PROFILE_SCHEMA_VERSION = exports.dockerProfileError = exports.DockerProfileError = exports.sandboxBuildRef = exports.materializationScopeId = exports.NICEEVAL_DEEPSEEK_HARNESS_DOCKER_IMAGE = exports.NICEEVAL_OMP_DOCKER_IMAGE = exports.NICEEVAL_OPENCODE_DOCKER_IMAGE = exports.NICEEVAL_OPENCLAW_DOCKER_IMAGE = exports.NICEEVAL_HERMES_DOCKER_IMAGE = exports.NICEEVAL_CODEX_DOCKER_IMAGE = exports.NICEEVAL_CLAUDE_CODE_DOCKER_IMAGE = exports.NICEEVAL_BUB_DOCKER_IMAGE = exports.normalizeSandboxCapture = void 0;
 // niceeval/sandbox 公开导出:「在哪里跑」相关的类型 + 工厂 + 扩展点。
 // 具体 provider 实现类(DockerSandbox / VercelSandbox / E2BSandbox)是内部实现细节,不在此导出——
 // 需要自定义 provider 时用 defineSandbox(),不需要直接 new 内置实现类。
@@ -108,6 +108,5 @@ Object.defineProperty(exports, "indexDockerProfiles", { enumerable: true, get: f
 Object.defineProperty(exports, "parseDockerProfileRegistry", { enumerable: true, get: function () { return registry_ts_1.parseDockerProfileRegistry; } });
 Object.defineProperty(exports, "resolveDockerExecutionProfile", { enumerable: true, get: function () { return registry_ts_1.resolveDockerExecutionProfile; } });
 Object.defineProperty(exports, "resolveDockerProfile", { enumerable: true, get: function () { return registry_ts_1.resolveDockerProfile; } });
-Object.defineProperty(exports, "resolveDockerProfileAlias", { enumerable: true, get: function () { return registry_ts_1.resolveDockerProfileAlias; } });
 Object.defineProperty(exports, "resolveDockerProfileSelector", { enumerable: true, get: function () { return registry_ts_1.resolveDockerProfileSelector; } });
 //# sourceMappingURL=index.cjs.map

package/dist/sandbox/index.cjs.map CHANGED Viewed

	@@ -1 +1 @@
1	- {"version":3,"file":"index.js","sourceRoot":"","sources":["index.ts"],"names":[],"mappings":";;;;AAAA,gDAAgD;AAChD,6EAA6E;AAC7E,qDAAqD;AACrD,0CAA6C;AAApC,0GAAA,aAAa,OAAA;AACtB,uCAAsL;AAA7K,6HAAA,iCAAiC,OAAA;AAAE,wGAAA,YAAY,OAAA;AAAE,+GAAA,mBAAmB,OAAA;AAAE,yGAAA,aAAa,OAAA;AAAE,gHAAA,oBAAoB,OAAA;AAAE,sGAAA,UAAU,OAAA;AAAE,yGAAA,aAAa,OAAA;AAAE,6GAAA,iBAAiB,OAAA;AAChK,uCAA0C;AAAjC,wGAAA,YAAY,OAAA;AACrB,6CAAqE;AAA5D,sGAAA,OAAO,OAAA;AAAE,oGAAA,KAAK,OAAA;AAAE,mHAAA,oBAAoB,OAAA;AAC7C,yCAAyM;AAAhM,sGAAA,SAAS,OAAA;AAAE,4GAAA,eAAe,OAAA;AAAE,gHAAA,mBAAmB,OAAA;AAAE,wGAAA,WAAW,OAAA;AAAE,wGAAA,WAAW,OAAA;AAAE,yGAAA,YAAY,OAAA;AAAE,yHAAA,4BAA4B,OAAA;AAAE,4GAAA,eAAe,OAAA;AAAE,uGAAA,UAAU,OAAA;AAAE,uGAAA,UAAU,OAAA;AAAE,sGAAA,SAAS,OAAA;AAClL,6DAA8D;AAArD,+GAAA,QAAQ,OAAA;AAAE,kHAAA,WAAW,OAAA;AAC9B,iDAA0D;AAAjD,wHAAA,uBAAuB,OAAA;AAChC,2CAAsE;AAA7D,oHAAA,sBAAsB,OAAA;AAAE,4GAAA,cAAc,OAAA;AAC/C,2CAAqR;AAA5Q,2HAAA,6BAA6B,OAAA;AAAE,wHAAA,0BAA0B,OAAA;AAAE,kHAAA,oBAAoB,OAAA;AAAE,0HAAA,4BAA4B,OAAA;AAAE,gHAAA,kBAAkB,OAAA;AAAE,oHAAA,sBAAsB,OAAA;AAAE,4HAAA,8BAA8B,OAAA;AAAE,iHAAA,mBAAmB,OAAA;AAAE,kIAAA,oCAAoC,OAAA;AAC7P,6CAAsK;AAA7J,8GAAA,eAAe,OAAA;AAAE,6GAAA,cAAc,OAAA;AAAE,sHAAA,uBAAuB,OAAA;AAAE,6HAAA,8BAA8B,OAAA;AAAE,qHAAA,sBAAsB,OAAA;AAAE,iHAAA,kBAAkB,OAAA;AAC7I,+DAA+H;AAAtH,8HAAA,sBAAsB,OAAA;AAAE,4HAAA,oBAAoB,OAAA;AAAE,0HAAA,kBAAkB,OAAA;AAAE,0HAAA,kBAAkB,OAAA;AAC7F,iDAAsE;AAA7D,iHAAA,gBAAgB,OAAA;AAAE,kHAAA,iBAAiB,OAAA;AAC5C,wDAAkE;AAAzD,wHAAA,uBAAuB,OAAA;AAEhC,iEAAsS;AAA7R,kIAAA,yBAAyB,OAAA;AAAE,0IAAA,iCAAiC,OAAA;AAAE,oIAAA,2BAA2B,OAAA;AAAE,qIAAA,4BAA4B,OAAA;AAAE,uIAAA,8BAA8B,OAAA;AAAE,uIAAA,8BAA8B,OAAA;AAAE,kIAAA,yBAAyB,OAAA;AAAE,+IAAA,sCAAsC,OAAA;AAanQ,+DAAiF;AAAxE,8HAAA,sBAAsB,OAAA;AAAE,uHAAA,eAAe,OAAA;AAChD,wDAAqF;AAA5E,+GAAA,kBAAkB,OAAA;AAAE,+GAAA,kBAAkB,OAAA;AAE/C,wDAA+lB;AAAtlB,oIAAA,uCAAuC,OAAA;AAAE,0HAAA,6BAA6B,OAAA;AAAE,kIAAA,qCAAqC,OAAA;AAAE,8HAAA,iCAAiC,OAAA;AAAE,2HAAA,8BAA8B,OAAA;AAAE,yHAAA,4BAA4B,OAAA;AAAE,2HAAA,8BAA8B,OAAA;AAAE,2HAAA,8BAA8B,OAAA;AAAE,2IAAA,8CAA8C,OAAA;AAAE,kIAAA,qCAAqC,OAAA;AAAE,2HAAA,8BAA8B,OAAA;AAAE,kHAAA,qBAAqB,OAAA;AAAE,yHAAA,4BAA4B,OAAA;AAAE,uHAAA,0BAA0B,OAAA;AAAE,yHAAA,4BAA4B,OAAA;AAAE,wHAAA,2BAA2B,OAAA;AAAE,0HAAA,6BAA6B,OAAA;AAEzjB,~~4DAA2O~~;~~AAAlO~~,0HAAA,2BAA2B,OAAA;AAAE,kHAAA,mBAAmB,OAAA;AAAE,yHAAA,0BAA0B,OAAA;AAAE,4HAAA,6BAA6B,OAAA;AAAE,mHAAA,oBAAoB,OAAA;AAAE,~~wHAAA,yBAAyB,OAAA;AAAE,~~2HAAA,4BAA4B,OAAA","sourcesContent":["// niceeval/sandbox 公开导出:「在哪里跑」相关的类型 + 工厂 + 扩展点。\n// 具体 provider 实现类(DockerSandbox / VercelSandbox / E2BSandbox)是内部实现细节,不在此导出——\n// 需要自定义 provider 时用 defineSandbox(),不需要直接 new 内置实现类。\nexport { defineSandbox } from \"../define.ts\";\nexport { CustomSandboxMaterializationError, sandboxLayer, sandboxRequirements, dockerSandbox, dockerComposeSandbox, e2bSandbox, vercelSandbox, defineSandboxCase, } from \"./layer.ts\";\nexport { incusSandbox } from \"./incus.ts\";\nexport { command, shell, defineSandboxCommand } from \"./commands.ts\";\nexport { actionRef, changeFrequency, defineSandboxAction, gitCheckout, sandboxStep, sandboxState, SandboxActionDefinitionError, uploadDirectory, uploadFile, writeBytes, writeText, } from \"./action.ts\";\nexport { checkout, installTool } from \"./prepare-commands.ts\";\nexport { SandboxCommandExitError } from \"./operations.ts\";\nexport { registerSandboxContent, sandboxContent } from \"./content.ts\";\nexport { COMPOSE_MATERIALIZER_REVISION, dockerComposeBuildProvider, collectComposeBuilds, leakGateHintsFromComposeFile, inspectComposeYaml, assertComposeBlacklist, findComposeBlacklistViolations, buildComposeOverlay, materializeDockerComposeProviderCase, } from \"./compose.ts\";\nexport { computeBuildKey, computeCaseKey, resolveFloatingImageTag, credentialIdentityContribution, assertPureDataIdentity, looksLikeDigestRef, } from \"./identity.ts\";\nexport { SANDBOX_BUILD_ACTIVITY, prepareSandboxBuilds, startSandboxBuilds, buildFailureOrigin, } from \"./build-coordinator.ts\";\nexport { createCheckpoint, restoreCheckpoint } from \"./checkpoint.ts\";\nexport { normalizeSandboxCapture, } from \"./record/attachment.ts\";\nexport type { SandboxCaptureInput, SandboxCaptureInputError, } from \"./record/attachment.ts\";\nexport { NICEEVAL_BUB_DOCKER_IMAGE, NICEEVAL_CLAUDE_CODE_DOCKER_IMAGE, NICEEVAL_CODEX_DOCKER_IMAGE, NICEEVAL_HERMES_DOCKER_IMAGE, NICEEVAL_OPENCLAW_DOCKER_IMAGE, NICEEVAL_OPENCODE_DOCKER_IMAGE, NICEEVAL_OMP_DOCKER_IMAGE, NICEEVAL_DEEPSEEK_HARNESS_DOCKER_IMAGE, } from \"./docker-agent-image.ts\";\nexport type { SandboxLayer, SandboxLayerKind, SandboxRequirementsOptions, SandboxRequirement, DockerExecutionRequirement, DockerImageSource, DockerfileSource, DockerSandboxSource, DockerSandboxAccess, DockerSandboxOptions, DockerSandboxCommonOptions, DockerSandboxReadiness, ManagedDockerResources, DockerComposeSandboxOptions, DockerSandboxResources, DockerSandboxTmpfsOptions, E2BSandboxOptions, VercelSandboxOptions, CustomProviderSandboxOptions, CustomCaseSandboxOptions, CustomCaseServices, CustomCaseMaterializedServices, CustomCaseMaterializeResult, SandboxTargetPlatform, SandboxLeakGate, } from \"./layer.ts\";\nexport type { IncusSandboxOptions, IncusSandboxResources } from \"./incus.ts\";\nexport type { SandboxCommand, SandboxCommandContext, SandboxCommandTarget, SandboxCleanupCommand, SandboxCommandIdentity, SandboxCommandDefinition, SandboxCommandIdentityValue, SandboxCommandOptions, SandboxExecOptions, CommandActionOptions, CommandAfterActionOptions, CommandActionFactory, ShellActionInput, ShellAfterActionInput, ShellActionFactory, StableSandboxCommand, AttemptRef, } from \"./commands.ts\";\nexport type { CheckoutGitSandboxStepInput, ExecSandboxStepInput, NonEmptySandboxSteps, PutBytesSandboxStepInput, PutTextSandboxStepInput, SandboxAction, SandboxActionDefinition, SandboxActionFamily, SandboxActionFingerprintPlan, SandboxActionPlan, SandboxActionRef, SandboxActionState, SandboxState, SandboxActionInstanceOptions, SandboxAfterAction, SandboxAfterActionOptions, SandboxBeforeActionOptions, SandboxCapability, SandboxChangeFrequency, SandboxStep, SandboxStepPlan, SandboxTransferSource, TransferDirectorySandboxStepInput, TransferFileSandboxStepInput, GitCheckoutActionFactory, GitCheckoutActionInput, GitCheckoutAfterActionInput, UploadDirectoryActionFactory, UploadDirectoryActionInput, UploadDirectoryAfterActionInput, UploadFileActionFactory, UploadFileActionInput, UploadFileAfterActionInput, WriteBytesActionFactory, WriteBytesActionInput, WriteBytesAfterActionInput, WriteTextActionFactory, WriteTextActionInput, WriteTextAfterActionInput, } from \"./action.ts\";\nexport type { CheckoutOptions, InstallToolOptions } from \"./prepare-commands.ts\";\nexport type { CustomProviderSandbox } from \"./types.ts\";\nexport type { RegisteredSandboxContent, SandboxContent, SandboxContentFactory, } from \"./content.ts\";\nexport type { Sandbox, SandboxOperations, SandboxTransferOperations, SandboxProvider, SandboxRuntime, CommandResult, CommandOptions, SuccessfulCommandResult, } from \"../types.ts\";\nexport type { SandboxCaseKind, ServiceController, MaterializedSandboxCase, SandboxGroupEntry, SandboxResourceGroup, SandboxMaterializeContext, } from \"./case-types.ts\";\nexport type { BuildKey, CaseKey, BuildKeyInput, CaseKeyInput, ImageRefResolution, CredentialRef, } from \"./identity.ts\";\nexport type { ComposeBuildCollection, ComposeInspection, ComposeServiceInspection, ComposeBlacklistFinding, ComposeOverlay, MaterializeComposeOpts, } from \"./compose.ts\";\nexport type { SandboxBuildWork, SandboxBuildProvider, SandboxBuildRef, MaterializationScopeId, SandboxBuildLookup, SandboxBuildArtifactSource, SandboxBuildUseHandle, SandboxBuildExecutionContext, SandboxBuildPreparation, SandboxBuildFailure, PrepareSandboxBuildsOptions, } from \"./build-coordinator.ts\";\nexport { materializationScopeId, sandboxBuildRef } from \"./build-coordinator.ts\";\nexport { DockerProfileError, dockerProfileError, } from \"./docker-profile/errors.ts\";\nexport type { DockerProfileErrorCode, DockerProfileErrorOptions, } from \"./docker-profile/errors.ts\";\nexport { DOCKER_EXECUTION_PROFILE_SCHEMA_VERSION, DOCKER_PROFILE_SCHEMA_VERSION, DOCKER_PROFILE_NETWORK_POLICY_VERSION, DOCKER_PROFILE_NETWORK_DENY_CIDRS, DockerExecutionProfileV1Schema, DockerExecutionProfileSchema, createDockerExecutionProfileV1, decodeDockerExecutionProfileV1, dockerExecutionProfileSemanticPolicyRevisionOf, dockerProfileSemanticPolicyRevisionOf, dockerExecutionProfileV1Digest, dockerProfileDigestOf, dockerProfilePublicSummaryOf, isDockerExecutionProfileV1, makeDockerExecutionProfileV1, parseDockerExecutionProfile, parseDockerExecutionProfileV1, } from \"./docker-profile/schema.ts\";\nexport type { DockerExecutionProfileSecurityLevel, DockerExecutionProfileV1, DockerExecutionProfileV1Draft, DockerProfileNetworkPolicy, DockerProfilePublicSummary, DockerProfileUnixEndpoint, } from \"./docker-profile/schema.ts\";\nexport { createDockerProfileRegistry, indexDockerProfiles, parseDockerProfileRegistry, resolveDockerExecutionProfile, resolveDockerProfile, ~~resolveDockerProfileAlias,~~ resolveDockerProfileSelector, } from \"./docker-profile/registry.ts\";\nexport type { DockerProfileRegistryEntry, DockerProfileRegistryFileFacts, DockerProfileRegistryIndex, DockerProfileRegistryInput, DockerProfileRegistryOptions, ResolvedDockerProfileEntry, } from \"./docker-profile/registry.ts\";\n"]}
1	+ {"version":3,"file":"index.js","sourceRoot":"","sources":["index.ts"],"names":[],"mappings":";;;;AAAA,gDAAgD;AAChD,6EAA6E;AAC7E,qDAAqD;AACrD,0CAA6C;AAApC,0GAAA,aAAa,OAAA;AACtB,uCAAsL;AAA7K,6HAAA,iCAAiC,OAAA;AAAE,wGAAA,YAAY,OAAA;AAAE,+GAAA,mBAAmB,OAAA;AAAE,yGAAA,aAAa,OAAA;AAAE,gHAAA,oBAAoB,OAAA;AAAE,sGAAA,UAAU,OAAA;AAAE,yGAAA,aAAa,OAAA;AAAE,6GAAA,iBAAiB,OAAA;AAChK,uCAA0C;AAAjC,wGAAA,YAAY,OAAA;AACrB,6CAAqE;AAA5D,sGAAA,OAAO,OAAA;AAAE,oGAAA,KAAK,OAAA;AAAE,mHAAA,oBAAoB,OAAA;AAC7C,yCAAyM;AAAhM,sGAAA,SAAS,OAAA;AAAE,4GAAA,eAAe,OAAA;AAAE,gHAAA,mBAAmB,OAAA;AAAE,wGAAA,WAAW,OAAA;AAAE,wGAAA,WAAW,OAAA;AAAE,yGAAA,YAAY,OAAA;AAAE,yHAAA,4BAA4B,OAAA;AAAE,4GAAA,eAAe,OAAA;AAAE,uGAAA,UAAU,OAAA;AAAE,uGAAA,UAAU,OAAA;AAAE,sGAAA,SAAS,OAAA;AAClL,6DAA8D;AAArD,+GAAA,QAAQ,OAAA;AAAE,kHAAA,WAAW,OAAA;AAC9B,iDAA0D;AAAjD,wHAAA,uBAAuB,OAAA;AAChC,2CAAsE;AAA7D,oHAAA,sBAAsB,OAAA;AAAE,4GAAA,cAAc,OAAA;AAC/C,2CAAqR;AAA5Q,2HAAA,6BAA6B,OAAA;AAAE,wHAAA,0BAA0B,OAAA;AAAE,kHAAA,oBAAoB,OAAA;AAAE,0HAAA,4BAA4B,OAAA;AAAE,gHAAA,kBAAkB,OAAA;AAAE,oHAAA,sBAAsB,OAAA;AAAE,4HAAA,8BAA8B,OAAA;AAAE,iHAAA,mBAAmB,OAAA;AAAE,kIAAA,oCAAoC,OAAA;AAC7P,6CAAsK;AAA7J,8GAAA,eAAe,OAAA;AAAE,6GAAA,cAAc,OAAA;AAAE,sHAAA,uBAAuB,OAAA;AAAE,6HAAA,8BAA8B,OAAA;AAAE,qHAAA,sBAAsB,OAAA;AAAE,iHAAA,kBAAkB,OAAA;AAC7I,+DAA+H;AAAtH,8HAAA,sBAAsB,OAAA;AAAE,4HAAA,oBAAoB,OAAA;AAAE,0HAAA,kBAAkB,OAAA;AAAE,0HAAA,kBAAkB,OAAA;AAC7F,iDAAsE;AAA7D,iHAAA,gBAAgB,OAAA;AAAE,kHAAA,iBAAiB,OAAA;AAC5C,wDAAkE;AAAzD,wHAAA,uBAAuB,OAAA;AAEhC,iEAAsS;AAA7R,kIAAA,yBAAyB,OAAA;AAAE,0IAAA,iCAAiC,OAAA;AAAE,oIAAA,2BAA2B,OAAA;AAAE,qIAAA,4BAA4B,OAAA;AAAE,uIAAA,8BAA8B,OAAA;AAAE,uIAAA,8BAA8B,OAAA;AAAE,kIAAA,yBAAyB,OAAA;AAAE,+IAAA,sCAAsC,OAAA;AAanQ,+DAAiF;AAAxE,8HAAA,sBAAsB,OAAA;AAAE,uHAAA,eAAe,OAAA;AAChD,wDAAqF;AAA5E,+GAAA,kBAAkB,OAAA;AAAE,+GAAA,kBAAkB,OAAA;AAE/C,wDAA+lB;AAAtlB,oIAAA,uCAAuC,OAAA;AAAE,0HAAA,6BAA6B,OAAA;AAAE,kIAAA,qCAAqC,OAAA;AAAE,8HAAA,iCAAiC,OAAA;AAAE,2HAAA,8BAA8B,OAAA;AAAE,yHAAA,4BAA4B,OAAA;AAAE,2HAAA,8BAA8B,OAAA;AAAE,2HAAA,8BAA8B,OAAA;AAAE,2IAAA,8CAA8C,OAAA;AAAE,kIAAA,qCAAqC,OAAA;AAAE,2HAAA,8BAA8B,OAAA;AAAE,kHAAA,qBAAqB,OAAA;AAAE,yHAAA,4BAA4B,OAAA;AAAE,uHAAA,0BAA0B,OAAA;AAAE,yHAAA,4BAA4B,OAAA;AAAE,wHAAA,2BAA2B,OAAA;AAAE,0HAAA,6BAA6B,OAAA;AAEzjB,4DAAgN;AAAvM,0HAAA,2BAA2B,OAAA;AAAE,kHAAA,mBAAmB,OAAA;AAAE,yHAAA,0BAA0B,OAAA;AAAE,4HAAA,6BAA6B,OAAA;AAAE,mHAAA,oBAAoB,OAAA;AAAE,2HAAA,4BAA4B,OAAA","sourcesContent":["// niceeval/sandbox 公开导出:「在哪里跑」相关的类型 + 工厂 + 扩展点。\n// 具体 provider 实现类(DockerSandbox / VercelSandbox / E2BSandbox)是内部实现细节,不在此导出——\n// 需要自定义 provider 时用 defineSandbox(),不需要直接 new 内置实现类。\nexport { defineSandbox } from \"../define.ts\";\nexport { CustomSandboxMaterializationError, sandboxLayer, sandboxRequirements, dockerSandbox, dockerComposeSandbox, e2bSandbox, vercelSandbox, defineSandboxCase, } from \"./layer.ts\";\nexport { incusSandbox } from \"./incus.ts\";\nexport { command, shell, defineSandboxCommand } from \"./commands.ts\";\nexport { actionRef, changeFrequency, defineSandboxAction, gitCheckout, sandboxStep, sandboxState, SandboxActionDefinitionError, uploadDirectory, uploadFile, writeBytes, writeText, } from \"./action.ts\";\nexport { checkout, installTool } from \"./prepare-commands.ts\";\nexport { SandboxCommandExitError } from \"./operations.ts\";\nexport { registerSandboxContent, sandboxContent } from \"./content.ts\";\nexport { COMPOSE_MATERIALIZER_REVISION, dockerComposeBuildProvider, collectComposeBuilds, leakGateHintsFromComposeFile, inspectComposeYaml, assertComposeBlacklist, findComposeBlacklistViolations, buildComposeOverlay, materializeDockerComposeProviderCase, } from \"./compose.ts\";\nexport { computeBuildKey, computeCaseKey, resolveFloatingImageTag, credentialIdentityContribution, assertPureDataIdentity, looksLikeDigestRef, } from \"./identity.ts\";\nexport { SANDBOX_BUILD_ACTIVITY, prepareSandboxBuilds, startSandboxBuilds, buildFailureOrigin, } from \"./build-coordinator.ts\";\nexport { createCheckpoint, restoreCheckpoint } from \"./checkpoint.ts\";\nexport { normalizeSandboxCapture, } from \"./record/attachment.ts\";\nexport type { SandboxCaptureInput, SandboxCaptureInputError, } from \"./record/attachment.ts\";\nexport { NICEEVAL_BUB_DOCKER_IMAGE, NICEEVAL_CLAUDE_CODE_DOCKER_IMAGE, NICEEVAL_CODEX_DOCKER_IMAGE, NICEEVAL_HERMES_DOCKER_IMAGE, NICEEVAL_OPENCLAW_DOCKER_IMAGE, NICEEVAL_OPENCODE_DOCKER_IMAGE, NICEEVAL_OMP_DOCKER_IMAGE, NICEEVAL_DEEPSEEK_HARNESS_DOCKER_IMAGE, } from \"./docker-agent-image.ts\";\nexport type { SandboxLayer, SandboxLayerKind, SandboxRequirementsOptions, SandboxRequirement, DockerExecutionRequirement, DockerImageSource, DockerfileSource, DockerSandboxSource, DockerSandboxAccess, DockerSandboxOptions, DockerSandboxCommonOptions, DockerSandboxReadiness, ManagedDockerResources, DockerComposeSandboxOptions, DockerSandboxResources, DockerSandboxTmpfsOptions, E2BSandboxOptions, VercelSandboxOptions, CustomProviderSandboxOptions, CustomCaseSandboxOptions, CustomCaseServices, CustomCaseMaterializedServices, CustomCaseMaterializeResult, SandboxTargetPlatform, SandboxLeakGate, } from \"./layer.ts\";\nexport type { IncusSandboxOptions, IncusSandboxResources } from \"./incus.ts\";\nexport type { SandboxCommand, SandboxCommandContext, SandboxCommandTarget, SandboxCleanupCommand, SandboxCommandIdentity, SandboxCommandDefinition, SandboxCommandIdentityValue, SandboxCommandOptions, SandboxExecOptions, CommandActionOptions, CommandAfterActionOptions, CommandActionFactory, ShellActionInput, ShellAfterActionInput, ShellActionFactory, StableSandboxCommand, AttemptRef, } from \"./commands.ts\";\nexport type { CheckoutGitSandboxStepInput, ExecSandboxStepInput, NonEmptySandboxSteps, PutBytesSandboxStepInput, PutTextSandboxStepInput, SandboxAction, SandboxActionDefinition, SandboxActionFamily, SandboxActionFingerprintPlan, SandboxActionPlan, SandboxActionRef, SandboxActionState, SandboxState, SandboxActionInstanceOptions, SandboxAfterAction, SandboxAfterActionOptions, SandboxBeforeActionOptions, SandboxCapability, SandboxChangeFrequency, SandboxStep, SandboxStepPlan, SandboxTransferSource, TransferDirectorySandboxStepInput, TransferFileSandboxStepInput, GitCheckoutActionFactory, GitCheckoutActionInput, GitCheckoutAfterActionInput, UploadDirectoryActionFactory, UploadDirectoryActionInput, UploadDirectoryAfterActionInput, UploadFileActionFactory, UploadFileActionInput, UploadFileAfterActionInput, WriteBytesActionFactory, WriteBytesActionInput, WriteBytesAfterActionInput, WriteTextActionFactory, WriteTextActionInput, WriteTextAfterActionInput, } from \"./action.ts\";\nexport type { CheckoutOptions, InstallToolOptions } from \"./prepare-commands.ts\";\nexport type { CustomProviderSandbox } from \"./types.ts\";\nexport type { RegisteredSandboxContent, SandboxContent, SandboxContentFactory, } from \"./content.ts\";\nexport type { Sandbox, SandboxOperations, SandboxTransferOperations, SandboxProvider, SandboxRuntime, CommandResult, CommandOptions, SuccessfulCommandResult, } from \"../types.ts\";\nexport type { SandboxCaseKind, ServiceController, MaterializedSandboxCase, SandboxGroupEntry, SandboxResourceGroup, SandboxMaterializeContext, } from \"./case-types.ts\";\nexport type { BuildKey, CaseKey, BuildKeyInput, CaseKeyInput, ImageRefResolution, CredentialRef, } from \"./identity.ts\";\nexport type { ComposeBuildCollection, ComposeInspection, ComposeServiceInspection, ComposeBlacklistFinding, ComposeOverlay, MaterializeComposeOpts, } from \"./compose.ts\";\nexport type { SandboxBuildWork, SandboxBuildProvider, SandboxBuildRef, MaterializationScopeId, SandboxBuildLookup, SandboxBuildArtifactSource, SandboxBuildUseHandle, SandboxBuildExecutionContext, SandboxBuildPreparation, SandboxBuildFailure, PrepareSandboxBuildsOptions, } from \"./build-coordinator.ts\";\nexport { materializationScopeId, sandboxBuildRef } from \"./build-coordinator.ts\";\nexport { DockerProfileError, dockerProfileError, } from \"./docker-profile/errors.ts\";\nexport type { DockerProfileErrorCode, DockerProfileErrorOptions, } from \"./docker-profile/errors.ts\";\nexport { DOCKER_EXECUTION_PROFILE_SCHEMA_VERSION, DOCKER_PROFILE_SCHEMA_VERSION, DOCKER_PROFILE_NETWORK_POLICY_VERSION, DOCKER_PROFILE_NETWORK_DENY_CIDRS, DockerExecutionProfileV1Schema, DockerExecutionProfileSchema, createDockerExecutionProfileV1, decodeDockerExecutionProfileV1, dockerExecutionProfileSemanticPolicyRevisionOf, dockerProfileSemanticPolicyRevisionOf, dockerExecutionProfileV1Digest, dockerProfileDigestOf, dockerProfilePublicSummaryOf, isDockerExecutionProfileV1, makeDockerExecutionProfileV1, parseDockerExecutionProfile, parseDockerExecutionProfileV1, } from \"./docker-profile/schema.ts\";\nexport type { DockerExecutionProfileSecurityLevel, DockerExecutionProfileV1, DockerExecutionProfileV1Draft, DockerProfileNetworkPolicy, DockerProfilePublicSummary, DockerProfileUnixEndpoint, } from \"./docker-profile/schema.ts\";\nexport { createDockerProfileRegistry, indexDockerProfiles, parseDockerProfileRegistry, resolveDockerExecutionProfile, resolveDockerProfile, resolveDockerProfileSelector, } from \"./docker-profile/registry.ts\";\nexport type { DockerProfileRegistryEntry, DockerProfileRegistryFileFacts, DockerProfileRegistryIndex, DockerProfileRegistryInput, DockerProfileRegistryOptions, ResolvedDockerProfileEntry, } from \"./docker-profile/registry.ts\";\n"]}

package/dist/sandbox/index.d.cts CHANGED Viewed

@@ -30,5 +30,5 @@ export { DockerProfileError, dockerProfileError, } from "./docker-profile/errors
 export type { DockerProfileErrorCode, DockerProfileErrorOptions, } from "./docker-profile/errors.cjs";
 export { DOCKER_EXECUTION_PROFILE_SCHEMA_VERSION, DOCKER_PROFILE_SCHEMA_VERSION, DOCKER_PROFILE_NETWORK_POLICY_VERSION, DOCKER_PROFILE_NETWORK_DENY_CIDRS, DockerExecutionProfileV1Schema, DockerExecutionProfileSchema, createDockerExecutionProfileV1, decodeDockerExecutionProfileV1, dockerExecutionProfileSemanticPolicyRevisionOf, dockerProfileSemanticPolicyRevisionOf, dockerExecutionProfileV1Digest, dockerProfileDigestOf, dockerProfilePublicSummaryOf, isDockerExecutionProfileV1, makeDockerExecutionProfileV1, parseDockerExecutionProfile, parseDockerExecutionProfileV1, } from "./docker-profile/schema.cjs";
 export type { DockerExecutionProfileSecurityLevel, DockerExecutionProfileV1, DockerExecutionProfileV1Draft, DockerProfileNetworkPolicy, DockerProfilePublicSummary, DockerProfileUnixEndpoint, } from "./docker-profile/schema.cjs";
-export { createDockerProfileRegistry, indexDockerProfiles, parseDockerProfileRegistry, resolveDockerExecutionProfile, resolveDockerProfile, resolveDockerProfileAlias, resolveDockerProfileSelector, } from "./docker-profile/registry.cjs";
+export { createDockerProfileRegistry, indexDockerProfiles, parseDockerProfileRegistry, resolveDockerExecutionProfile, resolveDockerProfile, resolveDockerProfileSelector, } from "./docker-profile/registry.cjs";
 export type { DockerProfileRegistryEntry, DockerProfileRegistryFileFacts, DockerProfileRegistryIndex, DockerProfileRegistryInput, DockerProfileRegistryOptions, ResolvedDockerProfileEntry, } from "./docker-profile/registry.cjs";

package/dist/sandbox/index.d.mts CHANGED Viewed

@@ -30,5 +30,5 @@ export { DockerProfileError, dockerProfileError, } from "./docker-profile/errors
 export type { DockerProfileErrorCode, DockerProfileErrorOptions, } from "./docker-profile/errors.mjs";
 export { DOCKER_EXECUTION_PROFILE_SCHEMA_VERSION, DOCKER_PROFILE_SCHEMA_VERSION, DOCKER_PROFILE_NETWORK_POLICY_VERSION, DOCKER_PROFILE_NETWORK_DENY_CIDRS, DockerExecutionProfileV1Schema, DockerExecutionProfileSchema, createDockerExecutionProfileV1, decodeDockerExecutionProfileV1, dockerExecutionProfileSemanticPolicyRevisionOf, dockerProfileSemanticPolicyRevisionOf, dockerExecutionProfileV1Digest, dockerProfileDigestOf, dockerProfilePublicSummaryOf, isDockerExecutionProfileV1, makeDockerExecutionProfileV1, parseDockerExecutionProfile, parseDockerExecutionProfileV1, } from "./docker-profile/schema.mjs";
 export type { DockerExecutionProfileSecurityLevel, DockerExecutionProfileV1, DockerExecutionProfileV1Draft, DockerProfileNetworkPolicy, DockerProfilePublicSummary, DockerProfileUnixEndpoint, } from "./docker-profile/schema.mjs";
-export { createDockerProfileRegistry, indexDockerProfiles, parseDockerProfileRegistry, resolveDockerExecutionProfile, resolveDockerProfile, resolveDockerProfileAlias, resolveDockerProfileSelector, } from "./docker-profile/registry.mjs";
+export { createDockerProfileRegistry, indexDockerProfiles, parseDockerProfileRegistry, resolveDockerExecutionProfile, resolveDockerProfile, resolveDockerProfileSelector, } from "./docker-profile/registry.mjs";
 export type { DockerProfileRegistryEntry, DockerProfileRegistryFileFacts, DockerProfileRegistryIndex, DockerProfileRegistryInput, DockerProfileRegistryOptions, ResolvedDockerProfileEntry, } from "./docker-profile/registry.mjs";

package/dist/sandbox/index.d.ts CHANGED Viewed

@@ -30,5 +30,5 @@ export { DockerProfileError, dockerProfileError, } from "./docker-profile/errors
 export type { DockerProfileErrorCode, DockerProfileErrorOptions, } from "./docker-profile/errors.js";
 export { DOCKER_EXECUTION_PROFILE_SCHEMA_VERSION, DOCKER_PROFILE_SCHEMA_VERSION, DOCKER_PROFILE_NETWORK_POLICY_VERSION, DOCKER_PROFILE_NETWORK_DENY_CIDRS, DockerExecutionProfileV1Schema, DockerExecutionProfileSchema, createDockerExecutionProfileV1, decodeDockerExecutionProfileV1, dockerExecutionProfileSemanticPolicyRevisionOf, dockerProfileSemanticPolicyRevisionOf, dockerExecutionProfileV1Digest, dockerProfileDigestOf, dockerProfilePublicSummaryOf, isDockerExecutionProfileV1, makeDockerExecutionProfileV1, parseDockerExecutionProfile, parseDockerExecutionProfileV1, } from "./docker-profile/schema.js";
 export type { DockerExecutionProfileSecurityLevel, DockerExecutionProfileV1, DockerExecutionProfileV1Draft, DockerProfileNetworkPolicy, DockerProfilePublicSummary, DockerProfileUnixEndpoint, } from "./docker-profile/schema.js";
-export { createDockerProfileRegistry, indexDockerProfiles, parseDockerProfileRegistry, resolveDockerExecutionProfile, resolveDockerProfile, resolveDockerProfileAlias, resolveDockerProfileSelector, } from "./docker-profile/registry.js";
+export { createDockerProfileRegistry, indexDockerProfiles, parseDockerProfileRegistry, resolveDockerExecutionProfile, resolveDockerProfile, resolveDockerProfileSelector, } from "./docker-profile/registry.js";
 export type { DockerProfileRegistryEntry, DockerProfileRegistryFileFacts, DockerProfileRegistryIndex, DockerProfileRegistryInput, DockerProfileRegistryOptions, ResolvedDockerProfileEntry, } from "./docker-profile/registry.js";

package/dist/sandbox/index.js CHANGED Viewed

@@ -141,38 +141,36 @@ const __niceevalExport68 = __niceevalCanonical["resolveDockerExecutionProfile"];
 export { __niceevalExport68 as resolveDockerExecutionProfile };
 const __niceevalExport69 = __niceevalCanonical["resolveDockerProfile"];
 export { __niceevalExport69 as resolveDockerProfile };
-const __niceevalExport70 = __niceevalCanonical["resolveDockerProfileAlias"];
-export { __niceevalExport70 as resolveDockerProfileAlias };
-const __niceevalExport71 = __niceevalCanonical["resolveDockerProfileSelector"];
-export { __niceevalExport71 as resolveDockerProfileSelector };
-const __niceevalExport72 = __niceevalCanonical["resolveFloatingImageTag"];
-export { __niceevalExport72 as resolveFloatingImageTag };
-const __niceevalExport73 = __niceevalCanonical["restoreCheckpoint"];
-export { __niceevalExport73 as restoreCheckpoint };
-const __niceevalExport74 = __niceevalCanonical["sandboxBuildRef"];
-export { __niceevalExport74 as sandboxBuildRef };
-const __niceevalExport75 = __niceevalCanonical["sandboxContent"];
-export { __niceevalExport75 as sandboxContent };
-const __niceevalExport76 = __niceevalCanonical["sandboxLayer"];
-export { __niceevalExport76 as sandboxLayer };
-const __niceevalExport77 = __niceevalCanonical["sandboxRequirements"];
-export { __niceevalExport77 as sandboxRequirements };
-const __niceevalExport78 = __niceevalCanonical["sandboxState"];
-export { __niceevalExport78 as sandboxState };
-const __niceevalExport79 = __niceevalCanonical["sandboxStep"];
-export { __niceevalExport79 as sandboxStep };
-const __niceevalExport80 = __niceevalCanonical["shell"];
-export { __niceevalExport80 as shell };
-const __niceevalExport81 = __niceevalCanonical["startSandboxBuilds"];
-export { __niceevalExport81 as startSandboxBuilds };
-const __niceevalExport82 = __niceevalCanonical["uploadDirectory"];
-export { __niceevalExport82 as uploadDirectory };
-const __niceevalExport83 = __niceevalCanonical["uploadFile"];
-export { __niceevalExport83 as uploadFile };
-const __niceevalExport84 = __niceevalCanonical["vercelSandbox"];
-export { __niceevalExport84 as vercelSandbox };
-const __niceevalExport85 = __niceevalCanonical["writeBytes"];
-export { __niceevalExport85 as writeBytes };
-const __niceevalExport86 = __niceevalCanonical["writeText"];
-export { __niceevalExport86 as writeText };
+const __niceevalExport70 = __niceevalCanonical["resolveDockerProfileSelector"];
+export { __niceevalExport70 as resolveDockerProfileSelector };
+const __niceevalExport71 = __niceevalCanonical["resolveFloatingImageTag"];
+export { __niceevalExport71 as resolveFloatingImageTag };
+const __niceevalExport72 = __niceevalCanonical["restoreCheckpoint"];
+export { __niceevalExport72 as restoreCheckpoint };
+const __niceevalExport73 = __niceevalCanonical["sandboxBuildRef"];
+export { __niceevalExport73 as sandboxBuildRef };
+const __niceevalExport74 = __niceevalCanonical["sandboxContent"];
+export { __niceevalExport74 as sandboxContent };
+const __niceevalExport75 = __niceevalCanonical["sandboxLayer"];
+export { __niceevalExport75 as sandboxLayer };
+const __niceevalExport76 = __niceevalCanonical["sandboxRequirements"];
+export { __niceevalExport76 as sandboxRequirements };
+const __niceevalExport77 = __niceevalCanonical["sandboxState"];
+export { __niceevalExport77 as sandboxState };
+const __niceevalExport78 = __niceevalCanonical["sandboxStep"];
+export { __niceevalExport78 as sandboxStep };
+const __niceevalExport79 = __niceevalCanonical["shell"];
+export { __niceevalExport79 as shell };
+const __niceevalExport80 = __niceevalCanonical["startSandboxBuilds"];
+export { __niceevalExport80 as startSandboxBuilds };
+const __niceevalExport81 = __niceevalCanonical["uploadDirectory"];
+export { __niceevalExport81 as uploadDirectory };
+const __niceevalExport82 = __niceevalCanonical["uploadFile"];
+export { __niceevalExport82 as uploadFile };
+const __niceevalExport83 = __niceevalCanonical["vercelSandbox"];
+export { __niceevalExport83 as vercelSandbox };
+const __niceevalExport84 = __niceevalCanonical["writeBytes"];
+export { __niceevalExport84 as writeBytes };
+const __niceevalExport85 = __niceevalCanonical["writeText"];
+export { __niceevalExport85 as writeText };
 //# sourceMappingURL=index.js.map

package/dist/sandbox/index.mjs CHANGED Viewed

@@ -141,38 +141,36 @@ const __niceevalExport68 = __niceevalCanonical["resolveDockerExecutionProfile"];
 export { __niceevalExport68 as resolveDockerExecutionProfile };
 const __niceevalExport69 = __niceevalCanonical["resolveDockerProfile"];
 export { __niceevalExport69 as resolveDockerProfile };
-const __niceevalExport70 = __niceevalCanonical["resolveDockerProfileAlias"];
-export { __niceevalExport70 as resolveDockerProfileAlias };
-const __niceevalExport71 = __niceevalCanonical["resolveDockerProfileSelector"];
-export { __niceevalExport71 as resolveDockerProfileSelector };
-const __niceevalExport72 = __niceevalCanonical["resolveFloatingImageTag"];
-export { __niceevalExport72 as resolveFloatingImageTag };
-const __niceevalExport73 = __niceevalCanonical["restoreCheckpoint"];
-export { __niceevalExport73 as restoreCheckpoint };
-const __niceevalExport74 = __niceevalCanonical["sandboxBuildRef"];
-export { __niceevalExport74 as sandboxBuildRef };
-const __niceevalExport75 = __niceevalCanonical["sandboxContent"];
-export { __niceevalExport75 as sandboxContent };
-const __niceevalExport76 = __niceevalCanonical["sandboxLayer"];
-export { __niceevalExport76 as sandboxLayer };
-const __niceevalExport77 = __niceevalCanonical["sandboxRequirements"];
-export { __niceevalExport77 as sandboxRequirements };
-const __niceevalExport78 = __niceevalCanonical["sandboxState"];
-export { __niceevalExport78 as sandboxState };
-const __niceevalExport79 = __niceevalCanonical["sandboxStep"];
-export { __niceevalExport79 as sandboxStep };
-const __niceevalExport80 = __niceevalCanonical["shell"];
-export { __niceevalExport80 as shell };
-const __niceevalExport81 = __niceevalCanonical["startSandboxBuilds"];
-export { __niceevalExport81 as startSandboxBuilds };
-const __niceevalExport82 = __niceevalCanonical["uploadDirectory"];
-export { __niceevalExport82 as uploadDirectory };
-const __niceevalExport83 = __niceevalCanonical["uploadFile"];
-export { __niceevalExport83 as uploadFile };
-const __niceevalExport84 = __niceevalCanonical["vercelSandbox"];
-export { __niceevalExport84 as vercelSandbox };
-const __niceevalExport85 = __niceevalCanonical["writeBytes"];
-export { __niceevalExport85 as writeBytes };
-const __niceevalExport86 = __niceevalCanonical["writeText"];
-export { __niceevalExport86 as writeText };
+const __niceevalExport70 = __niceevalCanonical["resolveDockerProfileSelector"];
+export { __niceevalExport70 as resolveDockerProfileSelector };
+const __niceevalExport71 = __niceevalCanonical["resolveFloatingImageTag"];
+export { __niceevalExport71 as resolveFloatingImageTag };
+const __niceevalExport72 = __niceevalCanonical["restoreCheckpoint"];
+export { __niceevalExport72 as restoreCheckpoint };
+const __niceevalExport73 = __niceevalCanonical["sandboxBuildRef"];
+export { __niceevalExport73 as sandboxBuildRef };
+const __niceevalExport74 = __niceevalCanonical["sandboxContent"];
+export { __niceevalExport74 as sandboxContent };
+const __niceevalExport75 = __niceevalCanonical["sandboxLayer"];
+export { __niceevalExport75 as sandboxLayer };
+const __niceevalExport76 = __niceevalCanonical["sandboxRequirements"];
+export { __niceevalExport76 as sandboxRequirements };
+const __niceevalExport77 = __niceevalCanonical["sandboxState"];
+export { __niceevalExport77 as sandboxState };
+const __niceevalExport78 = __niceevalCanonical["sandboxStep"];
+export { __niceevalExport78 as sandboxStep };
+const __niceevalExport79 = __niceevalCanonical["shell"];
+export { __niceevalExport79 as shell };
+const __niceevalExport80 = __niceevalCanonical["startSandboxBuilds"];
+export { __niceevalExport80 as startSandboxBuilds };
+const __niceevalExport81 = __niceevalCanonical["uploadDirectory"];
+export { __niceevalExport81 as uploadDirectory };
+const __niceevalExport82 = __niceevalCanonical["uploadFile"];
+export { __niceevalExport82 as uploadFile };
+const __niceevalExport83 = __niceevalCanonical["vercelSandbox"];
+export { __niceevalExport83 as vercelSandbox };
+const __niceevalExport84 = __niceevalCanonical["writeBytes"];
+export { __niceevalExport84 as writeBytes };
+const __niceevalExport85 = __niceevalCanonical["writeText"];
+export { __niceevalExport85 as writeText };
 //# sourceMappingURL=index.mjs.map