rightsize 0.1.0

package/dist/core/network.js

@@ -0,0 +1,84 @@
+import { randomBytes } from "node:crypto";
+/**
+ * Alias-based connectivity between containers, on both backends. Docker
+ * implements it with a native bridge network; msb — where each container is
+ * a fully isolated microVM — emulates it with an `/etc/hosts` alias plus a
+ * TCP relay over the sandbox's exec channel. `Network.resolve` returns the
+ * same `"alias:port"` string either way, so code written against it doesn't
+ * need to know which backend is active.
+ *
+ * Implements `Symbol.asyncDispose`, so `await using net = Network.newNetwork()`
+ * tears the network down at scope exit alongside its member containers.
+ */
+export class Network {
+    /** This network's process-unique id, `rz-net-<8hex>`. */
+    id;
+    aliasPorts = new Map();
+    members = [];
+    lastBackend;
+    constructor(id) {
+        this.id = id;
+    }
+    /** Creates a new network with a process-unique id (`rz-net-<8hex>`). Pass it to `withNetwork` on each member container. */
+    static newNetwork() {
+        return new Network(`rz-net-${randomBytes(4).toString("hex")}`);
+    }
+    /** "alias:guestPort" for a registered (alias, guestPort) pair; throws naming the alias otherwise. */
+    resolve(alias, guestPort) {
+        const ports = this.aliasPorts.get(alias);
+        if (ports === undefined || !ports.has(guestPort)) {
+            throw new Error(`no container registered on network '${this.id}' with alias '${alias}' exposing guest port ${guestPort}`);
+        }
+        return `${alias}:${guestPort}`;
+    }
+    /**
+     * Links a newly-starting container needs installed toward every ALREADY
+     * RUNNING sibling, computed before `register` runs — so a container can
+     * never end up linked to itself, and only genuinely-running siblings
+     * (never a half-started or already-stopped one) contribute links.
+     */
+    linksForNewMember() {
+        const links = [];
+        for (const { member } of this.members) {
+            if (!member.isRunning) {
+                continue;
+            }
+            for (const alias of member.aliases) {
+                for (const guestPort of member.exposedGuestPorts) {
+                    links.push({ alias, guestPort, targetHostPort: member.mappedPort(guestPort) });
+                }
+            }
+        }
+        return links;
+    }
+    /**
+     * Registers a container as a network member AFTER its links to existing
+     * siblings were computed and installed — never before, or the ordering
+     * that prevents self-links breaks.
+     */
+    register(member, aliases, backend) {
+        this.lastBackend = backend;
+        this.members.push({ member });
+        for (const alias of aliases) {
+            let ports = this.aliasPorts.get(alias);
+            if (ports === undefined) {
+                ports = new Map();
+                this.aliasPorts.set(alias, ports);
+            }
+            for (const guestPort of member.exposedGuestPorts) {
+                ports.set(guestPort, member.mappedPort(guestPort));
+            }
+        }
+    }
+    /** Removes the backend-native network. Best-effort: safe to call even if no member ever started. */
+    async close() {
+        if (this.lastBackend !== undefined) {
+            await this.lastBackend.removeNetwork(this.id);
+        }
+    }
+    /** `= close()`. What `await using net = Network.newNetwork()` calls at scope exit. */
+    async [Symbol.asyncDispose]() {
+        await this.close();
+    }
+}
+//# sourceMappingURL=network.js.map

package/dist/core/network.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"network.js","sourceRoot":"","sources":["../../src/core/network.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,WAAW,EAAE,MAAM,aAAa,CAAC;AAwB1C;;;;;;;;;;GAUG;AACH,MAAM,OAAO,OAAO;IAClB,yDAAyD;IAChD,EAAE,CAAS;IACH,UAAU,GAAG,IAAI,GAAG,EAA+B,CAAC;IACpD,OAAO,GAAuB,EAAE,CAAC;IAC1C,WAAW,CAA6B;IAEhD,YAAoB,EAAU;QAC5B,IAAI,CAAC,EAAE,GAAG,EAAE,CAAC;IACf,CAAC;IAED,2HAA2H;IAC3H,MAAM,CAAC,UAAU;QACf,OAAO,IAAI,OAAO,CAAC,UAAU,WAAW,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;IACjE,CAAC;IAED,qGAAqG;IACrG,OAAO,CAAC,KAAa,EAAE,SAAiB;QACtC,MAAM,KAAK,GAAG,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;QACzC,IAAI,KAAK,KAAK,SAAS,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,SAAS,CAAC,EAAE,CAAC;YACjD,MAAM,IAAI,KAAK,CAAC,uCAAuC,IAAI,CAAC,EAAE,iBAAiB,KAAK,yBAAyB,SAAS,EAAE,CAAC,CAAC;QAC5H,CAAC;QACD,OAAO,GAAG,KAAK,IAAI,SAAS,EAAE,CAAC;IACjC,CAAC;IAED;;;;;OAKG;IACH,iBAAiB;QACf,MAAM,KAAK,GAAkB,EAAE,CAAC;QAChC,KAAK,MAAM,EAAE,MAAM,EAAE,IAAI,IAAI,CAAC,OAAO,EAAE,CAAC;YACtC,IAAI,CAAC,MAAM,CAAC,SAAS,EAAE,CAAC;gBACtB,SAAS;YACX,CAAC;YACD,KAAK,MAAM,KAAK,IAAI,MAAM,CAAC,OAAO,EAAE,CAAC;gBACnC,KAAK,MAAM,SAAS,IAAI,MAAM,CAAC,iBAAiB,EAAE,CAAC;oBACjD,KAAK,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,SAAS,EAAE,cAAc,EAAE,MAAM,CAAC,UAAU,CAAC,SAAS,CAAC,EAAE,CAAC,CAAC;gBACjF,CAAC;YACH,CAAC;QACH,CAAC;QACD,OAAO,KAAK,CAAC;IACf,CAAC;IAED;;;;OAIG;IACH,QAAQ,CAAC,MAAqB,EAAE,OAA8B,EAAE,OAAuB;QACrF,IAAI,CAAC,WAAW,GAAG,OAAO,CAAC;QAC3B,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,CAAC,CAAC;QAC9B,KAAK,MAAM,KAAK,IAAI,OAAO,EAAE,CAAC;YAC5B,IAAI,KAAK,GAAG,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;YACvC,IAAI,KAAK,KAAK,SAAS,EAAE,CAAC;gBACxB,KAAK,GAAG,IAAI,GAAG,EAAE,CAAC;gBAClB,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,KAAK,EAAE,KAAK,CAAC,CAAC;YACpC,CAAC;YACD,KAAK,MAAM,SAAS,IAAI,MAAM,CAAC,iBAAiB,EAAE,CAAC;gBACjD,KAAK,CAAC,GAAG,CAAC,SAAS,EAAE,MAAM,CAAC,UAAU,CAAC,SAAS,CAAC,CAAC,CAAC;YACrD,CAAC;QACH,CAAC;IACH,CAAC;IAED,oGAAoG;IACpG,KAAK,CAAC,KAAK;QACT,IAAI,IAAI,CAAC,WAAW,KAAK,SAAS,EAAE,CAAC;YACnC,MAAM,IAAI,CAAC,WAAW,CAAC,aAAa,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QAChD,CAAC;IACH,CAAC;IAED,sFAAsF;IACtF,KAAK,CAAC,CAAC,MAAM,CAAC,YAAY,CAAC;QACzB,MAAM,IAAI,CAAC,KAAK,EAAE,CAAC;IACrB,CAAC;CACF"}

package/dist/core/run-id.d.ts

@@ -0,0 +1,18 @@
+/**
+ * One value per process, computed once at module load and re-exported from
+ * `src/index.ts` so BOTH backend modules import the SAME value rather than
+ * each computing their own. This is a correctness requirement, not a style choice: the
+ * msb orphan reaper (`sweepOrphans`) and the docker label cleanup both
+ * filter container names/labels against `RunId.value` to distinguish "this
+ * run's own live containers" from "leftovers of a crashed prior run." If a
+ * backend computed its own run id instead of importing this one, the two
+ * values would differ and the reaper would either delete this run's own
+ * containers (treating them as someone else's orphan) or never clean up the
+ * other backend's leftovers at all — a silent correctness failure, not a
+ * compile error.
+ */
+export declare const RunId: {
+    /** 8 lowercase hex characters, stable for the lifetime of this process. */
+    readonly value: string;
+};
+//# sourceMappingURL=run-id.d.ts.map

package/dist/core/run-id.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"run-id.d.ts","sourceRoot":"","sources":["../../src/core/run-id.ts"],"names":[],"mappings":"AAEA;;;;;;;;;;;;GAYG;AACH,eAAO,MAAM,KAAK,EAAE;IAClB,2EAA2E;IAC3E,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;CAGxB,CAAC"}

package/dist/core/run-id.js

@@ -0,0 +1,18 @@
+import { randomBytes } from "node:crypto";
+/**
+ * One value per process, computed once at module load and re-exported from
+ * `src/index.ts` so BOTH backend modules import the SAME value rather than
+ * each computing their own. This is a correctness requirement, not a style choice: the
+ * msb orphan reaper (`sweepOrphans`) and the docker label cleanup both
+ * filter container names/labels against `RunId.value` to distinguish "this
+ * run's own live containers" from "leftovers of a crashed prior run." If a
+ * backend computed its own run id instead of importing this one, the two
+ * values would differ and the reaper would either delete this run's own
+ * containers (treating them as someone else's orphan) or never clean up the
+ * other backend's leftovers at all — a silent correctness failure, not a
+ * compile error.
+ */
+export const RunId = {
+    value: randomBytes(4).toString("hex"),
+};
+//# sourceMappingURL=run-id.js.map

package/dist/core/run-id.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"run-id.js","sourceRoot":"","sources":["../../src/core/run-id.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,WAAW,EAAE,MAAM,aAAa,CAAC;AAE1C;;;;;;;;;;;;GAYG;AACH,MAAM,CAAC,MAAM,KAAK,GAGd;IACF,KAAK,EAAE,WAAW,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC;CACtC,CAAC"}

package/dist/core/wait.d.ts

@@ -0,0 +1,59 @@
+/** The read-only view of a starting container a `WaitStrategy` probes against. `GenericContainer` implements this internally; modules never construct one. */
+export interface WaitTarget {
+    /** The container's host, always `"127.0.0.1"`. */
+    readonly host: string;
+    /** The host port bound to `guestPort`. */
+    mappedPort(guestPort: number): number;
+    /** Every guest port this container published via `withExposedPorts`. */
+    readonly exposedGuestPorts: ReadonlyArray<number>;
+    /** The workload's logs so far. May throw or return an empty string before the workload has produced any output. */
+    currentLogs(): Promise<string>;
+    /** A short human-readable identifier for this container, used in timeout messages. */
+    describe(): string;
+}
+/** A pluggable readiness check passed to `GenericContainer.waitingFor`. Construct one via `Wait.*`, not directly. */
+export interface WaitStrategy {
+    /** Poll until ready or throw `ContainerLaunchError` (with `describe()` and the last 50 log lines) at the deadline. */
+    waitUntilReady(target: WaitTarget): Promise<void>;
+    /** Override the default 60s deadline. Returns the same strategy for chaining. */
+    withStartupTimeout(ms: number): WaitStrategy;
+}
+/**
+ * Owns the deadline/poll-interval/log-tail plumbing shared by every wait
+ * strategy: probe once immediately (a sub-interval timeout must still get
+ * one chance to succeed — the off-by-one every naive port-wait gets wrong),
+ * then keep polling until either a probe reports ready or the deadline
+ * passes.
+ */
+declare abstract class AbstractWaitStrategy implements WaitStrategy {
+    /** The current startup deadline in milliseconds; defaults to 60s, overridden by `withStartupTimeout`. */
+    protected timeoutMs: number;
+    withStartupTimeout(ms: number): this;
+    /** One readiness check attempt; ready iff it resolves `true`. Implemented by each concrete strategy. */
+    protected abstract probe(target: WaitTarget): Promise<boolean>;
+    waitUntilReady(target: WaitTarget): Promise<void>;
+}
+/** Readiness = an HTTP GET against the container returning the expected status code (200 by default). Build via `Wait.forHttp`. */
+export declare class HttpWaitStrategy extends AbstractWaitStrategy {
+    private path;
+    private port;
+    private expectedStatus;
+    constructor(path: string);
+    /** Probe this guest port instead of the first exposed one. */
+    forPort(port: number): this;
+    /** Expect this status code instead of 200. */
+    forStatusCode(status: number): this;
+    /** One HTTP GET attempt; ready iff the response status matches `forStatusCode` (default 200). Internal — called by the base class's poll loop. */
+    protected probe(target: WaitTarget): Promise<boolean>;
+}
+/** Factory namespace for the built-in wait strategies; pass the result to `GenericContainer.waitingFor`. */
+export declare const Wait: {
+    /** Ready once every exposed port accepts a real peer (read-probed, not just connect — see `readProbe` above). The default strategy when none is set. */
+    forListeningPort(): WaitStrategy;
+    /** Ready once an HTTP GET to `path` returns the expected status. Chain `.forPort(n)` / `.forStatusCode(n)`. */
+    forHttp(path: string): HttpWaitStrategy;
+    /** Ready once `pattern` has matched at least `times` distinct log lines (default 1). `times=0` is ready immediately, without needing logs to be fetchable yet. */
+    forLogMessage(pattern: string, times?: number): WaitStrategy;
+};
+export {};
+//# sourceMappingURL=wait.d.ts.map

package/dist/core/wait.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"wait.d.ts","sourceRoot":"","sources":["../../src/core/wait.ts"],"names":[],"mappings":"AAIA,8JAA8J;AAC9J,MAAM,WAAW,UAAU;IACzB,kDAAkD;IAClD,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,0CAA0C;IAC1C,UAAU,CAAC,SAAS,EAAE,MAAM,GAAG,MAAM,CAAC;IACtC,wEAAwE;IACxE,QAAQ,CAAC,iBAAiB,EAAE,aAAa,CAAC,MAAM,CAAC,CAAC;IAClD,mHAAmH;IACnH,WAAW,IAAI,OAAO,CAAC,MAAM,CAAC,CAAC;IAC/B,sFAAsF;IACtF,QAAQ,IAAI,MAAM,CAAC;CACpB;AAED,qHAAqH;AACrH,MAAM,WAAW,YAAY;IAC3B,sHAAsH;IACtH,cAAc,CAAC,MAAM,EAAE,UAAU,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAClD,iFAAiF;IACjF,kBAAkB,CAAC,EAAE,EAAE,MAAM,GAAG,YAAY,CAAC;CAC9C;AAkCD;;;;;;GAMG;AACH,uBAAe,oBAAqB,YAAW,YAAY;IACzD,yGAAyG;IACzG,SAAS,CAAC,SAAS,SAAsB;IAEzC,kBAAkB,CAAC,EAAE,EAAE,MAAM,GAAG,IAAI;IAKpC,wGAAwG;IACxG,SAAS,CAAC,QAAQ,CAAC,KAAK,CAAC,MAAM,EAAE,UAAU,GAAG,OAAO,CAAC,OAAO,CAAC;IAExD,cAAc,CAAC,MAAM,EAAE,UAAU,GAAG,OAAO,CAAC,IAAI,CAAC;CAexD;AA8ED,mIAAmI;AACnI,qBAAa,gBAAiB,SAAQ,oBAAoB;IACxD,OAAO,CAAC,IAAI,CAAS;IACrB,OAAO,CAAC,IAAI,CAAqB;IACjC,OAAO,CAAC,cAAc,CAAO;gBAEjB,IAAI,EAAE,MAAM;IAKxB,8DAA8D;IAC9D,OAAO,CAAC,IAAI,EAAE,MAAM,GAAG,IAAI;IAK3B,8CAA8C;IAC9C,aAAa,CAAC,MAAM,EAAE,MAAM,GAAG,IAAI;IAKnC,kJAAkJ;cAClI,KAAK,CAAC,MAAM,EAAE,UAAU,GAAG,OAAO,CAAC,OAAO,CAAC;CAsC5D;AAoCD,4GAA4G;AAC5G,eAAO,MAAM,IAAI;IACf,wJAAwJ;wBACpI,YAAY;IAGhC,+GAA+G;kBACjG,MAAM,GAAG,gBAAgB;IAGvC,kKAAkK;2BAC3I,MAAM,mBAAc,YAAY;CAGxD,CAAC"}

package/dist/core/wait.js

@@ -0,0 +1,239 @@
+import * as net from "node:net";
+import * as http from "node:http";
+import { ContainerLaunchError } from "./errors.js";
+const DEFAULT_TIMEOUT_MS = 60_000;
+const POLL_INTERVAL_MS = 250;
+const LOG_TAIL_LINES = 50;
+const READ_PROBE_TIMEOUT_MS = 200;
+// Bounds the connect phase itself (before any byte has arrived), distinct
+// from READ_PROBE_TIMEOUT_MS which bounds the post-connect idle read below.
+// A short but non-trivial ceiling: a loopback connect to an already-bound
+// port normally settles in well under a millisecond, so this is generous
+// headroom for a slow host, not a tight budget.
+const CONNECT_PROBE_TIMEOUT_MS = 2_000;
+const HTTP_PROBE_TIMEOUT_MS = 1_000;
+function sleep(ms) {
+    return new Promise((r) => setTimeout(r, ms));
+}
+async function logTail(target) {
+    let logs;
+    try {
+        logs = await target.currentLogs();
+    }
+    catch {
+        return "";
+    }
+    const lines = logs.split("\n");
+    return lines.slice(-LOG_TAIL_LINES).join("\n");
+}
+async function timeoutError(target) {
+    const tail = await logTail(target);
+    return new ContainerLaunchError(`Timed out waiting for ${target.describe()} to become ready.\n${tail}`);
+}
+/**
+ * Owns the deadline/poll-interval/log-tail plumbing shared by every wait
+ * strategy: probe once immediately (a sub-interval timeout must still get
+ * one chance to succeed — the off-by-one every naive port-wait gets wrong),
+ * then keep polling until either a probe reports ready or the deadline
+ * passes.
+ */
+class AbstractWaitStrategy {
+    /** The current startup deadline in milliseconds; defaults to 60s, overridden by `withStartupTimeout`. */
+    timeoutMs = DEFAULT_TIMEOUT_MS;
+    withStartupTimeout(ms) {
+        this.timeoutMs = ms;
+        return this;
+    }
+    async waitUntilReady(target) {
+        const deadline = Date.now() + this.timeoutMs;
+        // do-while: always probe at least once, even if the deadline has
+        // already passed by the time we get here (a 1ms timeout must still
+        // get its one shot).
+        for (;;) {
+            if (await this.probe(target)) {
+                return;
+            }
+            if (Date.now() >= deadline) {
+                throw await timeoutError(target);
+            }
+            await sleep(POLL_INTERVAL_MS);
+        }
+    }
+}
+/**
+ * A bare TCP connect succeeds against docker's userland proxy the instant
+ * the host port is published — before the guest process has bound its own
+ * listening socket. Connect-then-read distinguishes the two: an
+ * accept-with-nobody-behind-it proxy closes immediately (EOF/RST) on a
+ * zero-byte read, while a real peer either sends data or simply holds the
+ * connection open past the read timeout.
+ */
+function readProbe(host, port) {
+    return new Promise((resolveProbe) => {
+        const socket = new net.Socket();
+        let settled = false;
+        // First-event-wins: whichever of data/timeout/end/error fires first
+        // decides the verdict; every listener is torn down immediately so a
+        // later event on the same socket can never flip an already-resolved
+        // verdict (a chatty peer emitting `data` then `end` must resolve ready
+        // on the `data` and ignore the trailing `end`).
+        const finish = (ready) => {
+            if (settled) {
+                return;
+            }
+            settled = true;
+            clearTimeout(hardTimer);
+            socket.removeAllListeners();
+            socket.destroy();
+            resolveProbe(ready);
+        };
+        // Hard backstop, independent of socket.setTimeout(): the socket-level
+        // timeout below is only armed AFTER connect succeeds, so a connect that
+        // neither succeeds nor errors — just hangs — has nothing to bound it,
+        // and a plain JS timer costs nothing to add as a second line of defense
+        // regardless. This one call's own AbstractWaitStrategy poll loop can't
+        // rescue a probe() that never resolves at all; every module that uses
+        // the default Wait.forListeningPort() depends on this call actually
+        // settling every time.
+        const hardTimer = setTimeout(() => finish(false), READ_PROBE_TIMEOUT_MS + CONNECT_PROBE_TIMEOUT_MS);
+        // The connect-phase timeout listener is named (not `.once`) so it can be
+        // explicitly removed once connect succeeds — leaving it attached would
+        // otherwise also fire on the READ-phase timeout re-armed below and race
+        // against that timeout's own "ready" verdict (this connect-phase one
+        // means not-ready; the post-connect one means ready — two different
+        // meanings for the same event name on the same socket).
+        const onConnectTimeout = () => finish(false);
+        socket.setTimeout(CONNECT_PROBE_TIMEOUT_MS);
+        socket.once("error", () => finish(false));
+        socket.once("timeout", onConnectTimeout);
+        socket.connect(port, host, () => {
+            socket.removeListener("timeout", onConnectTimeout);
+            socket.setTimeout(READ_PROBE_TIMEOUT_MS);
+            socket.once("data", () => finish(true));
+            socket.once("timeout", () => finish(true));
+            socket.once("end", () => finish(false));
+            socket.once("error", () => finish(false));
+        });
+    });
+}
+class ListeningPortWaitStrategy extends AbstractWaitStrategy {
+    async probe(target) {
+        if (target.exposedGuestPorts.length === 0) {
+            // No exposed ports: nothing to wait for on the network — vacuously ready.
+            return true;
+        }
+        for (const guestPort of target.exposedGuestPorts) {
+            const hostPort = target.mappedPort(guestPort);
+            if (!(await readProbe(target.host, hostPort))) {
+                return false;
+            }
+        }
+        return true;
+    }
+}
+/** Readiness = an HTTP GET against the container returning the expected status code (200 by default). Build via `Wait.forHttp`. */
+export class HttpWaitStrategy extends AbstractWaitStrategy {
+    path;
+    port;
+    expectedStatus = 200;
+    constructor(path) {
+        super();
+        this.path = path;
+    }
+    /** Probe this guest port instead of the first exposed one. */
+    forPort(port) {
+        this.port = port;
+        return this;
+    }
+    /** Expect this status code instead of 200. */
+    forStatusCode(status) {
+        this.expectedStatus = status;
+        return this;
+    }
+    /** One HTTP GET attempt; ready iff the response status matches `forStatusCode` (default 200). Internal — called by the base class's poll loop. */
+    async probe(target) {
+        const guestPort = this.port ?? target.exposedGuestPorts[0];
+        if (guestPort === undefined) {
+            return false;
+        }
+        const hostPort = target.mappedPort(guestPort);
+        return new Promise((resolveProbe) => {
+            let settled = false;
+            const finish = (ready) => {
+                if (settled) {
+                    return;
+                }
+                settled = true;
+                clearTimeout(hardTimer);
+                resolveProbe(ready);
+            };
+            // Hard backstop alongside the `timeout` option below — see readProbe's
+            // comment in this same file for why a socket-level timeout alone isn't
+            // trusted as the only bound here.
+            const hardTimer = setTimeout(() => {
+                req.destroy();
+                finish(false);
+            }, HTTP_PROBE_TIMEOUT_MS + 500);
+            const req = http.request({ host: target.host, port: hostPort, path: this.path, method: "GET", timeout: HTTP_PROBE_TIMEOUT_MS }, (res) => {
+                res.resume();
+                finish(res.statusCode === this.expectedStatus);
+            });
+            req.once("timeout", () => {
+                req.destroy();
+                finish(false);
+            });
+            req.once("error", () => finish(false));
+            req.end();
+        });
+    }
+}
+class LogMessageWaitStrategy extends AbstractWaitStrategy {
+    pattern;
+    times;
+    constructor(pattern, times) {
+        super();
+        this.pattern = pattern;
+        this.times = times;
+    }
+    async probe(target) {
+        // times === 0 means "ready on the first probe, regardless of whether
+        // logs are even fetchable yet" — a command-only container's first probe
+        // may see currentLogs() throw or return "", and count() >= 0 is
+        // trivially true, so this branch never needs to touch the logs.
+        if (this.times === 0) {
+            return true;
+        }
+        let logs;
+        try {
+            logs = await target.currentLogs();
+        }
+        catch {
+            return false;
+        }
+        let matches = 0;
+        for (const line of logs.split("\n")) {
+            // A line matching both whole-line and as a substring still counts
+            // once per line — `test()` on the whole line, not a global exec loop.
+            if (this.pattern.test(line)) {
+                matches++;
+            }
+        }
+        return matches >= this.times;
+    }
+}
+/** Factory namespace for the built-in wait strategies; pass the result to `GenericContainer.waitingFor`. */
+export const Wait = {
+    /** Ready once every exposed port accepts a real peer (read-probed, not just connect — see `readProbe` above). The default strategy when none is set. */
+    forListeningPort() {
+        return new ListeningPortWaitStrategy();
+    },
+    /** Ready once an HTTP GET to `path` returns the expected status. Chain `.forPort(n)` / `.forStatusCode(n)`. */
+    forHttp(path) {
+        return new HttpWaitStrategy(path);
+    },
+    /** Ready once `pattern` has matched at least `times` distinct log lines (default 1). `times=0` is ready immediately, without needing logs to be fetchable yet. */
+    forLogMessage(pattern, times = 1) {
+        return new LogMessageWaitStrategy(new RegExp(pattern), times);
+    },
+};
+//# sourceMappingURL=wait.js.map

package/dist/core/wait.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"wait.js","sourceRoot":"","sources":["../../src/core/wait.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,GAAG,MAAM,UAAU,CAAC;AAChC,OAAO,KAAK,IAAI,MAAM,WAAW,CAAC;AAClC,OAAO,EAAE,oBAAoB,EAAE,MAAM,aAAa,CAAC;AAwBnD,MAAM,kBAAkB,GAAG,MAAM,CAAC;AAClC,MAAM,gBAAgB,GAAG,GAAG,CAAC;AAC7B,MAAM,cAAc,GAAG,EAAE,CAAC;AAC1B,MAAM,qBAAqB,GAAG,GAAG,CAAC;AAClC,0EAA0E;AAC1E,4EAA4E;AAC5E,0EAA0E;AAC1E,yEAAyE;AACzE,gDAAgD;AAChD,MAAM,wBAAwB,GAAG,KAAK,CAAC;AACvC,MAAM,qBAAqB,GAAG,KAAK,CAAC;AAEpC,SAAS,KAAK,CAAC,EAAU;IACvB,OAAO,IAAI,OAAO,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,UAAU,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC;AAC/C,CAAC;AAED,KAAK,UAAU,OAAO,CAAC,MAAkB;IACvC,IAAI,IAAY,CAAC;IACjB,IAAI,CAAC;QACH,IAAI,GAAG,MAAM,MAAM,CAAC,WAAW,EAAE,CAAC;IACpC,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,EAAE,CAAC;IACZ,CAAC;IACD,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;IAC/B,OAAO,KAAK,CAAC,KAAK,CAAC,CAAC,cAAc,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AACjD,CAAC;AAED,KAAK,UAAU,YAAY,CAAC,MAAkB;IAC5C,MAAM,IAAI,GAAG,MAAM,OAAO,CAAC,MAAM,CAAC,CAAC;IACnC,OAAO,IAAI,oBAAoB,CAAC,yBAAyB,MAAM,CAAC,QAAQ,EAAE,sBAAsB,IAAI,EAAE,CAAC,CAAC;AAC1G,CAAC;AAED;;;;;;GAMG;AACH,MAAe,oBAAoB;IACjC,yGAAyG;IAC/F,SAAS,GAAG,kBAAkB,CAAC;IAEzC,kBAAkB,CAAC,EAAU;QAC3B,IAAI,CAAC,SAAS,GAAG,EAAE,CAAC;QACpB,OAAO,IAAI,CAAC;IACd,CAAC;IAKD,KAAK,CAAC,cAAc,CAAC,MAAkB;QACrC,MAAM,QAAQ,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,SAAS,CAAC;QAC7C,iEAAiE;QACjE,mEAAmE;QACnE,qBAAqB;QACrB,SAAS,CAAC;YACR,IAAI,MAAM,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,EAAE,CAAC;gBAC7B,OAAO;YACT,CAAC;YACD,IAAI,IAAI,CAAC,GAAG,EAAE,IAAI,QAAQ,EAAE,CAAC;gBAC3B,MAAM,MAAM,YAAY,CAAC,MAAM,CAAC,CAAC;YACnC,CAAC;YACD,MAAM,KAAK,CAAC,gBAAgB,CAAC,CAAC;QAChC,CAAC;IACH,CAAC;CACF;AAED;;;;;;;GAOG;AACH,SAAS,SAAS,CAAC,IAAY,EAAE,IAAY;IAC3C,OAAO,IAAI,OAAO,CAAC,CAAC,YAAY,EAAE,EAAE;QAClC,MAAM,MAAM,GAAG,IAAI,GAAG,CAAC,MAAM,EAAE,CAAC;QAChC,IAAI,OAAO,GAAG,KAAK,CAAC;QAEpB,oEAAoE;QACpE,oEAAoE;QACpE,oEAAoE;QACpE,uEAAuE;QACvE,gDAAgD;QAChD,MAAM,MAAM,GAAG,CAAC,KAAc,EAAQ,EAAE;YACtC,IAAI,OAAO,EAAE,CAAC;gBACZ,OAAO;YACT,CAAC;YACD,OAAO,GAAG,IAAI,CAAC;YACf,YAAY,CAAC,SAAS,CAAC,CAAC;YACxB,MAAM,CAAC,kBAAkB,EAAE,CAAC;YAC5B,MAAM,CAAC,OAAO,EAAE,CAAC;YACjB,YAAY,CAAC,KAAK,CAAC,CAAC;QACtB,CAAC,CAAC;QAEF,sEAAsE;QACtE,wEAAwE;QACxE,sEAAsE;QACtE,wEAAwE;QACxE,uEAAuE;QACvE,sEAAsE;QACtE,oEAAoE;QACpE,uBAAuB;QACvB,MAAM,SAAS,GAAG,UAAU,CAAC,GAAG,EAAE,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,qBAAqB,GAAG,wBAAwB,CAAC,CAAC;QAEpG,yEAAyE;QACzE,uEAAuE;QACvE,wEAAwE;QACxE,qEAAqE;QACrE,oEAAoE;QACpE,wDAAwD;QACxD,MAAM,gBAAgB,GAAG,GAAS,EAAE,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;QACnD,MAAM,CAAC,UAAU,CAAC,wBAAwB,CAAC,CAAC;QAC5C,MAAM,CAAC,IAAI,CAAC,OAAO,EAAE,GAAG,EAAE,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC;QAC1C,MAAM,CAAC,IAAI,CAAC,SAAS,EAAE,gBAAgB,CAAC,CAAC;QACzC,MAAM,CAAC,OAAO,CAAC,IAAI,EAAE,IAAI,EAAE,GAAG,EAAE;YAC9B,MAAM,CAAC,cAAc,CAAC,SAAS,EAAE,gBAAgB,CAAC,CAAC;YACnD,MAAM,CAAC,UAAU,CAAC,qBAAqB,CAAC,CAAC;YACzC,MAAM,CAAC,IAAI,CAAC,MAAM,EAAE,GAAG,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC;YACxC,MAAM,CAAC,IAAI,CAAC,SAAS,EAAE,GAAG,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC;YAC3C,MAAM,CAAC,IAAI,CAAC,KAAK,EAAE,GAAG,EAAE,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC;YACxC,MAAM,CAAC,IAAI,CAAC,OAAO,EAAE,GAAG,EAAE,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC;QAC5C,CAAC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;AACL,CAAC;AAED,MAAM,yBAA0B,SAAQ,oBAAoB;IAChD,KAAK,CAAC,KAAK,CAAC,MAAkB;QACtC,IAAI,MAAM,CAAC,iBAAiB,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YAC1C,0EAA0E;YAC1E,OAAO,IAAI,CAAC;QACd,CAAC;QACD,KAAK,MAAM,SAAS,IAAI,MAAM,CAAC,iBAAiB,EAAE,CAAC;YACjD,MAAM,QAAQ,GAAG,MAAM,CAAC,UAAU,CAAC,SAAS,CAAC,CAAC;YAC9C,IAAI,CAAC,CAAC,MAAM,SAAS,CAAC,MAAM,CAAC,IAAI,EAAE,QAAQ,CAAC,CAAC,EAAE,CAAC;gBAC9C,OAAO,KAAK,CAAC;YACf,CAAC;QACH,CAAC;QACD,OAAO,IAAI,CAAC;IACd,CAAC;CACF;AAED,mIAAmI;AACnI,MAAM,OAAO,gBAAiB,SAAQ,oBAAoB;IAChD,IAAI,CAAS;IACb,IAAI,CAAqB;IACzB,cAAc,GAAG,GAAG,CAAC;IAE7B,YAAY,IAAY;QACtB,KAAK,EAAE,CAAC;QACR,IAAI,CAAC,IAAI,GAAG,IAAI,CAAC;IACnB,CAAC;IAED,8DAA8D;IAC9D,OAAO,CAAC,IAAY;QAClB,IAAI,CAAC,IAAI,GAAG,IAAI,CAAC;QACjB,OAAO,IAAI,CAAC;IACd,CAAC;IAED,8CAA8C;IAC9C,aAAa,CAAC,MAAc;QAC1B,IAAI,CAAC,cAAc,GAAG,MAAM,CAAC;QAC7B,OAAO,IAAI,CAAC;IACd,CAAC;IAED,kJAAkJ;IACxI,KAAK,CAAC,KAAK,CAAC,MAAkB;QACtC,MAAM,SAAS,GAAG,IAAI,CAAC,IAAI,IAAI,MAAM,CAAC,iBAAiB,CAAC,CAAC,CAAC,CAAC;QAC3D,IAAI,SAAS,KAAK,SAAS,EAAE,CAAC;YAC5B,OAAO,KAAK,CAAC;QACf,CAAC;QACD,MAAM,QAAQ,GAAG,MAAM,CAAC,UAAU,CAAC,SAAS,CAAC,CAAC;QAC9C,OAAO,IAAI,OAAO,CAAC,CAAC,YAAY,EAAE,EAAE;YAClC,IAAI,OAAO,GAAG,KAAK,CAAC;YACpB,MAAM,MAAM,GAAG,CAAC,KAAc,EAAQ,EAAE;gBACtC,IAAI,OAAO,EAAE,CAAC;oBACZ,OAAO;gBACT,CAAC;gBACD,OAAO,GAAG,IAAI,CAAC;gBACf,YAAY,CAAC,SAAS,CAAC,CAAC;gBACxB,YAAY,CAAC,KAAK,CAAC,CAAC;YACtB,CAAC,CAAC;YACF,uEAAuE;YACvE,uEAAuE;YACvE,kCAAkC;YAClC,MAAM,SAAS,GAAG,UAAU,CAAC,GAAG,EAAE;gBAChC,GAAG,CAAC,OAAO,EAAE,CAAC;gBACd,MAAM,CAAC,KAAK,CAAC,CAAC;YAChB,CAAC,EAAE,qBAAqB,GAAG,GAAG,CAAC,CAAC;YAChC,MAAM,GAAG,GAAG,IAAI,CAAC,OAAO,CACtB,EAAE,IAAI,EAAE,MAAM,CAAC,IAAI,EAAE,IAAI,EAAE,QAAQ,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE,MAAM,EAAE,KAAK,EAAE,OAAO,EAAE,qBAAqB,EAAE,EACrG,CAAC,GAAG,EAAE,EAAE;gBACN,GAAG,CAAC,MAAM,EAAE,CAAC;gBACb,MAAM,CAAC,GAAG,CAAC,UAAU,KAAK,IAAI,CAAC,cAAc,CAAC,CAAC;YACjD,CAAC,CACF,CAAC;YACF,GAAG,CAAC,IAAI,CAAC,SAAS,EAAE,GAAG,EAAE;gBACvB,GAAG,CAAC,OAAO,EAAE,CAAC;gBACd,MAAM,CAAC,KAAK,CAAC,CAAC;YAChB,CAAC,CAAC,CAAC;YACH,GAAG,CAAC,IAAI,CAAC,OAAO,EAAE,GAAG,EAAE,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC;YACvC,GAAG,CAAC,GAAG,EAAE,CAAC;QACZ,CAAC,CAAC,CAAC;IACL,CAAC;CACF;AAED,MAAM,sBAAuB,SAAQ,oBAAoB;IAEpC;IACA;IAFnB,YACmB,OAAe,EACf,KAAa;QAE9B,KAAK,EAAE,CAAC;QAHS,YAAO,GAAP,OAAO,CAAQ;QACf,UAAK,GAAL,KAAK,CAAQ;IAGhC,CAAC;IAES,KAAK,CAAC,KAAK,CAAC,MAAkB;QACtC,qEAAqE;QACrE,wEAAwE;QACxE,gEAAgE;QAChE,gEAAgE;QAChE,IAAI,IAAI,CAAC,KAAK,KAAK,CAAC,EAAE,CAAC;YACrB,OAAO,IAAI,CAAC;QACd,CAAC;QACD,IAAI,IAAY,CAAC;QACjB,IAAI,CAAC;YACH,IAAI,GAAG,MAAM,MAAM,CAAC,WAAW,EAAE,CAAC;QACpC,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,KAAK,CAAC;QACf,CAAC;QACD,IAAI,OAAO,GAAG,CAAC,CAAC;QAChB,KAAK,MAAM,IAAI,IAAI,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC;YACpC,kEAAkE;YAClE,sEAAsE;YACtE,IAAI,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;gBAC5B,OAAO,EAAE,CAAC;YACZ,CAAC;QACH,CAAC;QACD,OAAO,OAAO,IAAI,IAAI,CAAC,KAAK,CAAC;IAC/B,CAAC;CACF;AAED,4GAA4G;AAC5G,MAAM,CAAC,MAAM,IAAI,GAAG;IAClB,wJAAwJ;IACxJ,gBAAgB;QACd,OAAO,IAAI,yBAAyB,EAAE,CAAC;IACzC,CAAC;IACD,+GAA+G;IAC/G,OAAO,CAAC,IAAY;QAClB,OAAO,IAAI,gBAAgB,CAAC,IAAI,CAAC,CAAC;IACpC,CAAC;IACD,kKAAkK;IAClK,aAAa,CAAC,OAAe,EAAE,KAAK,GAAG,CAAC;QACtC,OAAO,IAAI,sBAAsB,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,EAAE,KAAK,CAAC,CAAC;IAChE,CAAC;CACF,CAAC"}

package/dist/index.d.ts

@@ -0,0 +1,26 @@
+/**
+ * `rightsize` — the core entry point.
+ *
+ * Owns the public API surface every consumer builds on: `GenericContainer`
+ * (the builder + async-dispose lifecycle guard), `Network`, the `Wait`
+ * strategies, `FreePorts`, `RunId`, the `SandboxBackend`/`BackendProvider`
+ * contracts plus the `registerBackend` registry, and the typed error
+ * classes. This module depends on no backend — import `rightsize/backend-msb`
+ * and/or `rightsize/backend-docker` to register one, or `rightsize/modules`
+ * for the eighteen preconfigured containers built on top of this surface.
+ *
+ * @packageDocumentation
+ */
+export { UnsupportedByBackendError, PortBindConflictError, ContainerLaunchError, BackendError, ProvisionError, } from "./core/errors.js";
+export type { PortBinding, FileMount, ExecResult, ContainerSpec } from "./core/model.js";
+export type { NetworkLink, SandboxHandle, FollowHandle, SandboxBackend, BackendProvider } from "./core/backend.js";
+export { registerBackend, Backends } from "./core/backends.js";
+export { FreePorts } from "./core/free-ports.js";
+export { Wait, HttpWaitStrategy } from "./core/wait.js";
+export type { WaitTarget, WaitStrategy } from "./core/wait.js";
+export { RunId } from "./core/run-id.js";
+export { Network } from "./core/network.js";
+export type { NetworkMember } from "./core/network.js";
+export { MountableFile } from "./core/mountable-file.js";
+export { GenericContainer } from "./core/generic-container.js";
+//# sourceMappingURL=index.d.ts.map

package/dist/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;GAYG;AACH,OAAO,EACL,yBAAyB,EACzB,qBAAqB,EACrB,oBAAoB,EACpB,YAAY,EACZ,cAAc,GACf,MAAM,kBAAkB,CAAC;AAC1B,YAAY,EAAE,WAAW,EAAE,SAAS,EAAE,UAAU,EAAE,aAAa,EAAE,MAAM,iBAAiB,CAAC;AACzF,YAAY,EAAE,WAAW,EAAE,aAAa,EAAE,YAAY,EAAE,cAAc,EAAE,eAAe,EAAE,MAAM,mBAAmB,CAAC;AACnH,OAAO,EAAE,eAAe,EAAE,QAAQ,EAAE,MAAM,oBAAoB,CAAC;AAC/D,OAAO,EAAE,SAAS,EAAE,MAAM,sBAAsB,CAAC;AACjD,OAAO,EAAE,IAAI,EAAE,gBAAgB,EAAE,MAAM,gBAAgB,CAAC;AACxD,YAAY,EAAE,UAAU,EAAE,YAAY,EAAE,MAAM,gBAAgB,CAAC;AAC/D,OAAO,EAAE,KAAK,EAAE,MAAM,kBAAkB,CAAC;AACzC,OAAO,EAAE,OAAO,EAAE,MAAM,mBAAmB,CAAC;AAC5C,YAAY,EAAE,aAAa,EAAE,MAAM,mBAAmB,CAAC;AACvD,OAAO,EAAE,aAAa,EAAE,MAAM,0BAA0B,CAAC;AACzD,OAAO,EAAE,gBAAgB,EAAE,MAAM,6BAA6B,CAAC"}

package/dist/index.js

@@ -0,0 +1,22 @@
+/**
+ * `rightsize` — the core entry point.
+ *
+ * Owns the public API surface every consumer builds on: `GenericContainer`
+ * (the builder + async-dispose lifecycle guard), `Network`, the `Wait`
+ * strategies, `FreePorts`, `RunId`, the `SandboxBackend`/`BackendProvider`
+ * contracts plus the `registerBackend` registry, and the typed error
+ * classes. This module depends on no backend — import `rightsize/backend-msb`
+ * and/or `rightsize/backend-docker` to register one, or `rightsize/modules`
+ * for the eighteen preconfigured containers built on top of this surface.
+ *
+ * @packageDocumentation
+ */
+export { UnsupportedByBackendError, PortBindConflictError, ContainerLaunchError, BackendError, ProvisionError, } from "./core/errors.js";
+export { registerBackend, Backends } from "./core/backends.js";
+export { FreePorts } from "./core/free-ports.js";
+export { Wait, HttpWaitStrategy } from "./core/wait.js";
+export { RunId } from "./core/run-id.js";
+export { Network } from "./core/network.js";
+export { MountableFile } from "./core/mountable-file.js";
+export { GenericContainer } from "./core/generic-container.js";
+//# sourceMappingURL=index.js.map

package/dist/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;GAYG;AACH,OAAO,EACL,yBAAyB,EACzB,qBAAqB,EACrB,oBAAoB,EACpB,YAAY,EACZ,cAAc,GACf,MAAM,kBAAkB,CAAC;AAG1B,OAAO,EAAE,eAAe,EAAE,QAAQ,EAAE,MAAM,oBAAoB,CAAC;AAC/D,OAAO,EAAE,SAAS,EAAE,MAAM,sBAAsB,CAAC;AACjD,OAAO,EAAE,IAAI,EAAE,gBAAgB,EAAE,MAAM,gBAAgB,CAAC;AAExD,OAAO,EAAE,KAAK,EAAE,MAAM,kBAAkB,CAAC;AACzC,OAAO,EAAE,OAAO,EAAE,MAAM,mBAAmB,CAAC;AAE5C,OAAO,EAAE,aAAa,EAAE,MAAM,0BAA0B,CAAC;AACzD,OAAO,EAAE,gBAAgB,EAAE,MAAM,6BAA6B,CAAC"}

package/dist/modules/arango.d.ts

@@ -0,0 +1,14 @@
+import { GenericContainer } from "../core/generic-container.js";
+import type { ContainerSpec } from "../core/model.js";
+/** A single-node ArangoDB container. Auth is disabled by default; see `withRootPassword` to enable it. */
+export declare class ArangoContainer extends GenericContainer {
+    private rootPassword;
+    constructor(image?: string);
+    static start(image?: string): Promise<ArangoContainer>;
+    /** Enables auth with the given root password, instead of the default no-auth setup. */
+    withRootPassword(password: string): this;
+    protected customizeSpec(spec: ContainerSpec, _mapped: (guest: number) => number): ContainerSpec;
+    /** The HTTP API endpoint for the running container. */
+    get endpoint(): string;
+}
+//# sourceMappingURL=arango.d.ts.map

package/dist/modules/arango.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"arango.d.ts","sourceRoot":"","sources":["../../src/modules/arango.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,gBAAgB,EAAE,MAAM,8BAA8B,CAAC;AAEhE,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,kBAAkB,CAAC;AAItD,0GAA0G;AAC1G,qBAAa,eAAgB,SAAQ,gBAAgB;IACnD,OAAO,CAAC,YAAY,CAAqB;gBAE7B,KAAK,SAAkB;WAOb,KAAK,CAAC,KAAK,SAAkB,GAAG,OAAO,CAAC,eAAe,CAAC;IAI9E,uFAAuF;IACvF,gBAAgB,CAAC,QAAQ,EAAE,MAAM,GAAG,IAAI;cAUrB,aAAa,CAAC,IAAI,EAAE,aAAa,EAAE,OAAO,EAAE,CAAC,KAAK,EAAE,MAAM,KAAK,MAAM,GAAG,aAAa;IAOxG,uDAAuD;IACvD,IAAI,QAAQ,IAAI,MAAM,CAErB;CACF"}

package/dist/modules/arango.js

@@ -0,0 +1,37 @@
+import { GenericContainer } from "../core/generic-container.js";
+import { Wait } from "../core/wait.js";
+const GUEST_PORT = 8529;
+/** A single-node ArangoDB container. Auth is disabled by default; see `withRootPassword` to enable it. */
+export class ArangoContainer extends GenericContainer {
+    rootPassword;
+    constructor(image = "arangodb:3.11") {
+        super(image);
+        this.withExposedPorts(GUEST_PORT)
+            .withEnv("ARANGO_NO_AUTH", "1")
+            .waitingFor(Wait.forHttp("/_api/version").forPort(GUEST_PORT).forStatusCode(200));
+    }
+    static async start(image = "arangodb:3.11") {
+        return (await new ArangoContainer(image).start());
+    }
+    /** Enables auth with the given root password, instead of the default no-auth setup. */
+    withRootPassword(password) {
+        this.rootPassword = password;
+        return this.withEnv("ARANGO_ROOT_PASSWORD", password);
+    }
+    // ARANGO_NO_AUTH and ARANGO_ROOT_PASSWORD are mutually exclusive on the
+    // image; GenericContainer has no env-removal builder, so the no-auth
+    // default is dropped here, at spec-build time, once a root password has
+    // actually been requested — rather than threading a removeEnv method
+    // through the base class for one module's one edge case.
+    customizeSpec(spec, _mapped) {
+        if (this.rootPassword === undefined) {
+            return spec;
+        }
+        return { ...spec, env: spec.env.filter(([key]) => key !== "ARANGO_NO_AUTH") };
+    }
+    /** The HTTP API endpoint for the running container. */
+    get endpoint() {
+        return `http://${this.host}:${this.getMappedPort(GUEST_PORT)}`;
+    }
+}
+//# sourceMappingURL=arango.js.map

package/dist/modules/arango.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"arango.js","sourceRoot":"","sources":["../../src/modules/arango.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,gBAAgB,EAAE,MAAM,8BAA8B,CAAC;AAChE,OAAO,EAAE,IAAI,EAAE,MAAM,iBAAiB,CAAC;AAGvC,MAAM,UAAU,GAAG,IAAI,CAAC;AAExB,0GAA0G;AAC1G,MAAM,OAAO,eAAgB,SAAQ,gBAAgB;IAC3C,YAAY,CAAqB;IAEzC,YAAY,KAAK,GAAG,eAAe;QACjC,KAAK,CAAC,KAAK,CAAC,CAAC;QACb,IAAI,CAAC,gBAAgB,CAAC,UAAU,CAAC;aAC9B,OAAO,CAAC,gBAAgB,EAAE,GAAG,CAAC;aAC9B,UAAU,CAAC,IAAI,CAAC,OAAO,CAAC,eAAe,CAAC,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC,aAAa,CAAC,GAAG,CAAC,CAAC,CAAC;IACtF,CAAC;IAED,MAAM,CAAU,KAAK,CAAC,KAAK,CAAC,KAAK,GAAG,eAAe;QACjD,OAAO,CAAC,MAAM,IAAI,eAAe,CAAC,KAAK,CAAC,CAAC,KAAK,EAAE,CAAoB,CAAC;IACvE,CAAC;IAED,uFAAuF;IACvF,gBAAgB,CAAC,QAAgB;QAC/B,IAAI,CAAC,YAAY,GAAG,QAAQ,CAAC;QAC7B,OAAO,IAAI,CAAC,OAAO,CAAC,sBAAsB,EAAE,QAAQ,CAAC,CAAC;IACxD,CAAC;IAED,wEAAwE;IACxE,qEAAqE;IACrE,wEAAwE;IACxE,qEAAqE;IACrE,yDAAyD;IACtC,aAAa,CAAC,IAAmB,EAAE,OAAkC;QACtF,IAAI,IAAI,CAAC,YAAY,KAAK,SAAS,EAAE,CAAC;YACpC,OAAO,IAAI,CAAC;QACd,CAAC;QACD,OAAO,EAAE,GAAG,IAAI,EAAE,GAAG,EAAE,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,GAAG,CAAC,EAAE,EAAE,CAAC,GAAG,KAAK,gBAAgB,CAAC,EAAE,CAAC;IAChF,CAAC;IAED,uDAAuD;IACvD,IAAI,QAAQ;QACV,OAAO,UAAU,IAAI,CAAC,IAAI,IAAI,IAAI,CAAC,aAAa,CAAC,UAAU,CAAC,EAAE,CAAC;IACjE,CAAC;CACF"}

package/dist/modules/clickhouse.d.ts

@@ -0,0 +1,37 @@
+import { GenericContainer } from "../core/generic-container.js";
+/**
+ * A single-node ClickHouse container, ready-checked via `/ping` (returns
+ * the literal body `Ok.` on 200 — `Wait.forHttp`'s status-code check is all
+ * that's needed here). Exposes both the HTTP interface (8123, what the
+ * helpers here use) and the native protocol port (9000) for consumers that
+ * want a native-protocol client instead.
+ *
+ * `CLICKHOUSE_USER`/`CLICKHOUSE_PASSWORD`/`CLICKHOUSE_DB` (verified against
+ * the entrypoint's own logging: `create new user 'test' instead 'default'`,
+ * `create database 'test'`) replace the image's default `default` user
+ * entirely — once set, the unauthenticated `default` user's usual
+ * passwordless access is gone, and every query needs the configured
+ * credentials.
+ */
+export declare class ClickHouseContainer extends GenericContainer {
+    private usernameState;
+    private passwordState;
+    private databaseState;
+    constructor(image?: string);
+    static start(image?: string): Promise<ClickHouseContainer>;
+    /** Overrides `CLICKHOUSE_USER` (default `test`). */
+    withUsername(username: string): this;
+    /** Overrides `CLICKHOUSE_PASSWORD` (default `test`). */
+    withPassword(password: string): this;
+    /** Overrides `CLICKHOUSE_DB` (default `test`). */
+    withDatabase(database: string): this;
+    /** The configured user (default `test`). */
+    get username(): string;
+    /** The configured password (default `test`). */
+    get password(): string;
+    /** The configured database name (default `test`). */
+    get databaseName(): string;
+    /** The HTTP interface's base URL for the running container. */
+    get httpUrl(): string;
+}
+//# sourceMappingURL=clickhouse.d.ts.map

package/dist/modules/clickhouse.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"clickhouse.d.ts","sourceRoot":"","sources":["../../src/modules/clickhouse.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,gBAAgB,EAAE,MAAM,8BAA8B,CAAC;AAMhE;;;;;;;;;;;;;GAaG;AACH,qBAAa,mBAAoB,SAAQ,gBAAgB;IACvD,OAAO,CAAC,aAAa,CAAU;IAC/B,OAAO,CAAC,aAAa,CAAU;IAC/B,OAAO,CAAC,aAAa,CAAU;gBAEnB,KAAK,SAAsC;WAYjC,KAAK,CAAC,KAAK,SAAsC,GAAG,OAAO,CAAC,mBAAmB,CAAC;IAItG,oDAAoD;IACpD,YAAY,CAAC,QAAQ,EAAE,MAAM,GAAG,IAAI;IAKpC,wDAAwD;IACxD,YAAY,CAAC,QAAQ,EAAE,MAAM,GAAG,IAAI;IAKpC,kDAAkD;IAClD,YAAY,CAAC,QAAQ,EAAE,MAAM,GAAG,IAAI;IAKpC,4CAA4C;IAC5C,IAAI,QAAQ,IAAI,MAAM,CAErB;IAED,gDAAgD;IAChD,IAAI,QAAQ,IAAI,MAAM,CAErB;IAED,qDAAqD;IACrD,IAAI,YAAY,IAAI,MAAM,CAEzB;IAED,+DAA+D;IAC/D,IAAI,OAAO,IAAI,MAAM,CAEpB;CACF"}