siclaw 0.1.0 → 0.1.2
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/README.md +75 -114
- package/dist/agentbox/gateway-client.d.ts +2 -1
- package/dist/agentbox/gateway-client.js +6 -2
- package/dist/agentbox/gateway-client.js.map +1 -1
- package/dist/agentbox/http-server.js +184 -19
- package/dist/agentbox/http-server.js.map +1 -1
- package/dist/agentbox/resource-handlers.d.ts +1 -0
- package/dist/agentbox/resource-handlers.js +23 -23
- package/dist/agentbox/resource-handlers.js.map +1 -1
- package/dist/agentbox/session.js +85 -5
- package/dist/agentbox/session.js.map +1 -1
- package/dist/agentbox-main.d.ts +2 -1
- package/dist/agentbox-main.js +65 -18
- package/dist/agentbox-main.js.map +1 -1
- package/dist/cli-credentials.d.ts +1 -0
- package/dist/cli-credentials.js +109 -0
- package/dist/cli-credentials.js.map +1 -0
- package/dist/cli-first-run.d.ts +11 -0
- package/dist/cli-first-run.js +99 -0
- package/dist/cli-first-run.js.map +1 -0
- package/dist/cli-main.js +33 -11
- package/dist/cli-main.js.map +1 -1
- package/dist/cli-setup.d.ts +5 -11
- package/dist/cli-setup.js +12 -225
- package/dist/cli-setup.js.map +1 -1
- package/dist/core/agent-factory.d.ts +4 -0
- package/dist/core/agent-factory.js +102 -151
- package/dist/core/agent-factory.js.map +1 -1
- package/dist/core/config.d.ts +10 -3
- package/dist/core/config.js +11 -95
- package/dist/core/config.js.map +1 -1
- package/dist/core/extensions/deep-investigation.d.ts +2 -1
- package/dist/core/extensions/deep-investigation.js +144 -24
- package/dist/core/extensions/deep-investigation.js.map +1 -1
- package/dist/core/extensions/setup.d.ts +8 -0
- package/dist/core/extensions/setup.js +669 -0
- package/dist/core/extensions/setup.js.map +1 -0
- package/dist/core/llm-proxy.js +7 -3
- package/dist/core/llm-proxy.js.map +1 -1
- package/dist/core/mcp-client.d.ts +0 -10
- package/dist/core/mcp-client.js +0 -65
- package/dist/core/mcp-client.js.map +1 -1
- package/dist/core/prompt.d.ts +1 -1
- package/dist/core/prompt.js +42 -5
- package/dist/core/prompt.js.map +1 -1
- package/dist/core/provider-presets.d.ts +14 -0
- package/dist/core/provider-presets.js +81 -0
- package/dist/core/provider-presets.js.map +1 -0
- package/dist/cron/cron-coordinator.d.ts +2 -0
- package/dist/cron/cron-coordinator.js +46 -14
- package/dist/cron/cron-coordinator.js.map +1 -1
- package/dist/cron/cron-executor.js +33 -8
- package/dist/cron/cron-executor.js.map +1 -1
- package/dist/cron/cron-scheduler.d.ts +1 -1
- package/dist/cron/gateway-client.d.ts +5 -0
- package/dist/cron/gateway-client.js +43 -8
- package/dist/cron/gateway-client.js.map +1 -1
- package/dist/cron-main.js +39 -9
- package/dist/cron-main.js.map +1 -1
- package/dist/gateway/agentbox/client.d.ts +11 -0
- package/dist/gateway/agentbox/client.js +18 -0
- package/dist/gateway/agentbox/client.js.map +1 -1
- package/dist/gateway/agentbox/k8s-spawner.d.ts +11 -2
- package/dist/gateway/agentbox/k8s-spawner.js +95 -52
- package/dist/gateway/agentbox/k8s-spawner.js.map +1 -1
- package/dist/gateway/agentbox/local-spawner.d.ts +1 -1
- package/dist/gateway/agentbox/local-spawner.js +4 -2
- package/dist/gateway/agentbox/local-spawner.js.map +1 -1
- package/dist/gateway/agentbox/manager.d.ts +0 -10
- package/dist/gateway/agentbox/manager.js +11 -30
- package/dist/gateway/agentbox/manager.js.map +1 -1
- package/dist/gateway/agentbox/types.d.ts +6 -4
- package/dist/gateway/cron/cron-service.d.ts +49 -0
- package/dist/gateway/cron/cron-service.js +259 -0
- package/dist/gateway/cron/cron-service.js.map +1 -0
- package/dist/gateway/db/init-schema.js +44 -0
- package/dist/gateway/db/init-schema.js.map +1 -1
- package/dist/gateway/db/migrate-sqlite.js +73 -4
- package/dist/gateway/db/migrate-sqlite.js.map +1 -1
- package/dist/gateway/db/repositories/chat-repo.d.ts +56 -2
- package/dist/gateway/db/repositories/chat-repo.js +132 -2
- package/dist/gateway/db/repositories/chat-repo.js.map +1 -1
- package/dist/gateway/db/repositories/config-repo.d.ts +31 -2
- package/dist/gateway/db/repositories/config-repo.js +57 -7
- package/dist/gateway/db/repositories/config-repo.js.map +1 -1
- package/dist/gateway/db/repositories/env-repo.d.ts +14 -0
- package/dist/gateway/db/repositories/env-repo.js +15 -2
- package/dist/gateway/db/repositories/env-repo.js.map +1 -1
- package/dist/gateway/db/repositories/model-config-repo.d.ts +1 -1
- package/dist/gateway/db/repositories/model-config-repo.js +26 -12
- package/dist/gateway/db/repositories/model-config-repo.js.map +1 -1
- package/dist/gateway/db/repositories/skill-repo.d.ts +0 -5
- package/dist/gateway/db/repositories/skill-review-repo.d.ts +1 -0
- package/dist/gateway/db/repositories/skill-review-repo.js +4 -1
- package/dist/gateway/db/repositories/skill-review-repo.js.map +1 -1
- package/dist/gateway/db/repositories/skill-version-repo.js +0 -1
- package/dist/gateway/db/repositories/skill-version-repo.js.map +1 -1
- package/dist/gateway/db/repositories/system-config-repo.d.ts +1 -1
- package/dist/gateway/db/repositories/system-config-repo.js +2 -1
- package/dist/gateway/db/repositories/system-config-repo.js.map +1 -1
- package/dist/gateway/db/repositories/user-env-config-repo.d.ts +13 -0
- package/dist/gateway/db/repositories/user-env-config-repo.js +11 -0
- package/dist/gateway/db/repositories/user-env-config-repo.js.map +1 -1
- package/dist/gateway/db/repositories/workspace-repo.d.ts +3 -2
- package/dist/gateway/db/repositories/workspace-repo.js +6 -2
- package/dist/gateway/db/repositories/workspace-repo.js.map +1 -1
- package/dist/gateway/db/schema-mysql.d.ts +473 -51
- package/dist/gateway/db/schema-mysql.js +35 -4
- package/dist/gateway/db/schema-mysql.js.map +1 -1
- package/dist/gateway/db/schema-sqlite.d.ts +522 -57
- package/dist/gateway/db/schema-sqlite.js +38 -6
- package/dist/gateway/db/schema-sqlite.js.map +1 -1
- package/dist/gateway/db/schema.d.ts +471 -51
- package/dist/gateway/db/schema.js +1 -1
- package/dist/gateway/db/schema.js.map +1 -1
- package/dist/gateway/metrics-aggregator.d.ts +65 -0
- package/dist/gateway/metrics-aggregator.js +244 -0
- package/dist/gateway/metrics-aggregator.js.map +1 -0
- package/dist/gateway/plugins/channel-bridge.d.ts +4 -1
- package/dist/gateway/plugins/channel-bridge.js +78 -86
- package/dist/gateway/plugins/channel-bridge.js.map +1 -1
- package/dist/gateway/rpc-methods.d.ts +4 -2
- package/dist/gateway/rpc-methods.js +962 -163
- package/dist/gateway/rpc-methods.js.map +1 -1
- package/dist/gateway/security/cert-manager.d.ts +2 -2
- package/dist/gateway/security/cert-manager.js +4 -2
- package/dist/gateway/security/cert-manager.js.map +1 -1
- package/dist/gateway/server.d.ts +4 -8
- package/dist/gateway/server.js +297 -261
- package/dist/gateway/server.js.map +1 -1
- package/dist/gateway/skills/file-writer.js +17 -11
- package/dist/gateway/skills/file-writer.js.map +1 -1
- package/dist/gateway/skills/script-evaluator.js +12 -9
- package/dist/gateway/skills/script-evaluator.js.map +1 -1
- package/dist/gateway/web/dist/assets/index-0p17ZeTP.js +740 -0
- package/dist/gateway/web/dist/assets/index-9eP6nPUq.js +741 -0
- package/dist/gateway/web/dist/assets/index-9eP6nPUq.js.map +1 -0
- package/dist/gateway/web/dist/assets/index-CAmSY91d.js +675 -0
- package/dist/gateway/web/dist/assets/index-DMFEh8Pp.css +1 -0
- package/dist/gateway/web/dist/assets/index-DyowBCEj.css +1 -0
- package/dist/gateway/web/dist/assets/index-PDK5JJDO.css +1 -0
- package/dist/gateway/web/dist/index.html +2 -2
- package/dist/gateway-main.js +27 -10
- package/dist/gateway-main.js.map +1 -1
- package/dist/memory/embeddings.js +5 -4
- package/dist/memory/embeddings.js.map +1 -1
- package/dist/memory/indexer.d.ts +23 -3
- package/dist/memory/indexer.js +235 -23
- package/dist/memory/indexer.js.map +1 -1
- package/dist/memory/schema.js +15 -1
- package/dist/memory/schema.js.map +1 -1
- package/dist/memory/types.d.ts +18 -0
- package/dist/memory/types.js +6 -1
- package/dist/memory/types.js.map +1 -1
- package/dist/shared/detect-language.d.ts +12 -0
- package/dist/shared/detect-language.js +78 -0
- package/dist/shared/detect-language.js.map +1 -0
- package/dist/shared/diagnostic-events.d.ts +70 -0
- package/dist/shared/diagnostic-events.js +38 -0
- package/dist/shared/diagnostic-events.js.map +1 -0
- package/dist/shared/local-collector.d.ts +56 -0
- package/dist/shared/local-collector.js +284 -0
- package/dist/shared/local-collector.js.map +1 -0
- package/dist/shared/metrics-types.d.ts +64 -0
- package/dist/shared/metrics-types.js +25 -0
- package/dist/shared/metrics-types.js.map +1 -0
- package/dist/shared/metrics.d.ts +19 -0
- package/dist/shared/metrics.js +185 -0
- package/dist/shared/metrics.js.map +1 -0
- package/dist/shared/path-utils.d.ts +15 -0
- package/dist/shared/path-utils.js +23 -0
- package/dist/shared/path-utils.js.map +1 -0
- package/dist/shared/retry.d.ts +35 -0
- package/dist/shared/retry.js +61 -0
- package/dist/shared/retry.js.map +1 -0
- package/dist/tools/command-sets.d.ts +18 -2
- package/dist/tools/command-sets.js +207 -32
- package/dist/tools/command-sets.js.map +1 -1
- package/dist/tools/command-validator.d.ts +56 -0
- package/dist/tools/command-validator.js +357 -0
- package/dist/tools/command-validator.js.map +1 -0
- package/dist/tools/create-skill.js +26 -1
- package/dist/tools/create-skill.js.map +1 -1
- package/dist/tools/credential-list.js +1 -23
- package/dist/tools/credential-list.js.map +1 -1
- package/dist/tools/credential-manager.d.ts +98 -0
- package/dist/tools/credential-manager.js +313 -0
- package/dist/tools/credential-manager.js.map +1 -0
- package/dist/tools/deep-search/engine.js +184 -127
- package/dist/tools/deep-search/engine.js.map +1 -1
- package/dist/tools/deep-search/prompts.d.ts +10 -2
- package/dist/tools/deep-search/prompts.js +37 -36
- package/dist/tools/deep-search/prompts.js.map +1 -1
- package/dist/tools/deep-search/schemas.d.ts +87 -0
- package/dist/tools/deep-search/schemas.js +85 -0
- package/dist/tools/deep-search/schemas.js.map +1 -0
- package/dist/tools/deep-search/sub-agent.d.ts +21 -0
- package/dist/tools/deep-search/sub-agent.js +153 -4
- package/dist/tools/deep-search/sub-agent.js.map +1 -1
- package/dist/tools/deep-search/tool.js +1 -0
- package/dist/tools/deep-search/tool.js.map +1 -1
- package/dist/tools/deep-search/types.d.ts +2 -0
- package/dist/tools/deep-search/types.js.map +1 -1
- package/dist/tools/dp-tools.js +29 -5
- package/dist/tools/dp-tools.js.map +1 -1
- package/dist/tools/exec-utils.d.ts +85 -0
- package/dist/tools/exec-utils.js +294 -0
- package/dist/tools/exec-utils.js.map +1 -0
- package/dist/tools/fork-skill.js +14 -2
- package/dist/tools/fork-skill.js.map +1 -1
- package/dist/tools/investigation-feedback.d.ts +3 -0
- package/dist/tools/investigation-feedback.js +71 -0
- package/dist/tools/investigation-feedback.js.map +1 -0
- package/dist/tools/manage-schedule.js +16 -6
- package/dist/tools/manage-schedule.js.map +1 -1
- package/dist/tools/netns-script.js +27 -281
- package/dist/tools/netns-script.js.map +1 -1
- package/dist/tools/node-exec.d.ts +2 -14
- package/dist/tools/node-exec.js +18 -225
- package/dist/tools/node-exec.js.map +1 -1
- package/dist/tools/node-script.js +14 -168
- package/dist/tools/node-script.js.map +1 -1
- package/dist/tools/pod-exec.d.ts +1 -1
- package/dist/tools/pod-exec.js +10 -26
- package/dist/tools/pod-exec.js.map +1 -1
- package/dist/tools/pod-nsenter-exec.js +21 -225
- package/dist/tools/pod-nsenter-exec.js.map +1 -1
- package/dist/tools/pod-script.js +10 -19
- package/dist/tools/pod-script.js.map +1 -1
- package/dist/tools/restricted-bash.d.ts +1 -17
- package/dist/tools/restricted-bash.js +38 -252
- package/dist/tools/restricted-bash.js.map +1 -1
- package/dist/tools/run-skill.d.ts +3 -1
- package/dist/tools/run-skill.js +21 -1
- package/dist/tools/run-skill.js.map +1 -1
- package/dist/tools/script-resolver.d.ts +3 -1
- package/dist/tools/script-resolver.js +74 -30
- package/dist/tools/script-resolver.js.map +1 -1
- package/dist/tools/update-skill.js +17 -6
- package/dist/tools/update-skill.js.map +1 -1
- package/package.json +8 -6
- package/siclaw.mjs +10 -1
- package/skills/core/cluster-events/SKILL.md +1 -1
- package/skills/core/deep-investigation/SKILL.md +11 -0
- package/skills/core/deployment-rollout-debug/SKILL.md +1 -1
- package/skills/core/dns-debug/SKILL.md +1 -0
- package/skills/core/meta.json +12 -1
- package/skills/core/networkpolicy-debug/SKILL.md +332 -0
- package/skills/core/node-logs/scripts/get-node-logs.sh +19 -9
- package/skills/core/pod-pending-debug/SKILL.md +1 -0
- package/skills/core/quota-debug/SKILL.md +203 -0
- package/skills/core/service-debug/SKILL.md +1 -0
- package/skills/core/statefulset-debug/SKILL.md +280 -0
- package/skills/core/volcano-diagnose-pod/SKILL.md +196 -0
- package/skills/core/volcano-diagnose-pod/scripts/diagnose-pod.sh +175 -0
- package/skills/core/volcano-gang-scheduling/SKILL.md +299 -0
- package/skills/core/volcano-job-diagnose/SKILL.md +319 -0
- package/skills/core/volcano-job-diagnose/scripts/diagnose-job.sh +253 -0
- package/skills/core/volcano-node-resources/SKILL.md +334 -0
- package/skills/core/volcano-node-resources/scripts/get-node-resources.sh +281 -0
- package/skills/core/volcano-queue-diagnose/SKILL.md +294 -0
- package/skills/core/volcano-queue-diagnose/scripts/diagnose-queue.sh +283 -0
- package/skills/core/volcano-resource-insufficient/SKILL.md +315 -0
- package/skills/core/volcano-scheduler-config/SKILL.md +371 -0
- package/skills/core/volcano-scheduler-config/scripts/get-scheduler-config.sh +297 -0
- package/skills/core/volcano-scheduler-logs/SKILL.md +241 -0
- package/skills/core/volcano-scheduler-logs/scripts/get-scheduler-logs.sh +159 -0
- package/skills/platform/create-skill/SKILL.md +35 -3
- package/skills/platform/manage-skill/SKILL.md +9 -2
- package/skills/platform/update-skill/SKILL.md +17 -6
package/dist/tools/node-exec.js
CHANGED
|
@@ -1,114 +1,16 @@
|
|
|
1
1
|
import { Type } from "@sinclair/typebox";
|
|
2
|
-
import { spawn } from "node:child_process";
|
|
3
|
-
import { randomBytes } from "node:crypto";
|
|
4
2
|
import { Text } from "@mariozechner/pi-tui";
|
|
5
|
-
import { renderTextResult
|
|
6
|
-
import { checkNodeReady
|
|
7
|
-
import { resolveKubeconfigPath } from "./kubeconfig-resolver.js";
|
|
8
|
-
import { sanitizeEnv } from "./sanitize-env.js";
|
|
3
|
+
import { renderTextResult } from "./tool-render.js";
|
|
4
|
+
import { checkNodeReady } from "./k8s-checks.js";
|
|
9
5
|
import { loadConfig } from "../core/config.js";
|
|
10
|
-
import {
|
|
11
|
-
import {
|
|
12
|
-
|
|
13
|
-
return new Promise((resolve, reject) => {
|
|
14
|
-
let stdout = "";
|
|
15
|
-
let stderr = "";
|
|
16
|
-
const child = spawn(cmd, args, {
|
|
17
|
-
stdio: ["ignore", "pipe", "pipe"],
|
|
18
|
-
env,
|
|
19
|
-
});
|
|
20
|
-
const onAbort = () => child.kill("SIGKILL");
|
|
21
|
-
signal?.addEventListener("abort", onAbort, { once: true });
|
|
22
|
-
child.stdout.on("data", (chunk) => {
|
|
23
|
-
stdout += chunk.toString();
|
|
24
|
-
});
|
|
25
|
-
child.stderr.on("data", (chunk) => {
|
|
26
|
-
stderr += chunk.toString();
|
|
27
|
-
});
|
|
28
|
-
const timer = setTimeout(() => {
|
|
29
|
-
child.kill("SIGKILL");
|
|
30
|
-
}, timeout);
|
|
31
|
-
child.on("close", (code) => {
|
|
32
|
-
clearTimeout(timer);
|
|
33
|
-
signal?.removeEventListener("abort", onAbort);
|
|
34
|
-
if (code === 0)
|
|
35
|
-
resolve({ stdout, stderr });
|
|
36
|
-
else
|
|
37
|
-
reject(Object.assign(new Error(`exit ${code}`), { code, stdout, stderr }));
|
|
38
|
-
});
|
|
39
|
-
child.on("error", (err) => {
|
|
40
|
-
clearTimeout(timer);
|
|
41
|
-
signal?.removeEventListener("abort", onAbort);
|
|
42
|
-
reject(err);
|
|
43
|
-
});
|
|
44
|
-
});
|
|
45
|
-
}
|
|
6
|
+
import { parseArgs } from "./command-sets.js";
|
|
7
|
+
import { validateCommand, extractCommands } from "./command-validator.js";
|
|
8
|
+
import { validateNodeName, prepareExecEnv, runInDebugPod, formatExecOutput, } from "./exec-utils.js";
|
|
46
9
|
const DEFAULT_IMAGE = loadConfig().debugImage;
|
|
47
|
-
// Re-export
|
|
10
|
+
// Re-export for backward compatibility (tests + downstream imports)
|
|
48
11
|
export { ALLOWED_COMMANDS } from "./command-sets.js";
|
|
49
|
-
|
|
50
|
-
|
|
51
|
-
/**
|
|
52
|
-
* Validate a Kubernetes node name.
|
|
53
|
-
* Returns an error message if invalid, or null if valid.
|
|
54
|
-
*/
|
|
55
|
-
export function validateNodeName(node) {
|
|
56
|
-
if (!node || !node.trim()) {
|
|
57
|
-
return "Node name must not be empty.";
|
|
58
|
-
}
|
|
59
|
-
if (!NODE_NAME_RE.test(node)) {
|
|
60
|
-
return `Invalid node name "${node}". Node names may only contain letters, digits, hyphens, and dots.`;
|
|
61
|
-
}
|
|
62
|
-
return null;
|
|
63
|
-
}
|
|
64
|
-
/**
|
|
65
|
-
* Validate a command intended for node-exec.
|
|
66
|
-
* Uses the same validation pipeline as restricted-bash:
|
|
67
|
-
* 1. validateShellOperators — blocks dangerous shell constructs
|
|
68
|
-
* 2. extractCommands — splits pipelines
|
|
69
|
-
* 3. Per-command: whitelist check + validateCommandRestrictions
|
|
70
|
-
* Returns an error message if blocked, or null if allowed.
|
|
71
|
-
*/
|
|
72
|
-
export function validateCommand(command) {
|
|
73
|
-
if (!command || !command.trim()) {
|
|
74
|
-
return "Command must not be empty.";
|
|
75
|
-
}
|
|
76
|
-
// Block dangerous shell operators ($(), backticks, redirections, process substitution)
|
|
77
|
-
const shellOpErr = validateShellOperators(command);
|
|
78
|
-
if (shellOpErr)
|
|
79
|
-
return shellOpErr;
|
|
80
|
-
// Split pipelines (|, &&, ;, ||) and validate each sub-command
|
|
81
|
-
const commands = extractCommands(command);
|
|
82
|
-
if (commands.length === 0) {
|
|
83
|
-
return "Command must not be empty.";
|
|
84
|
-
}
|
|
85
|
-
for (const cmd of commands) {
|
|
86
|
-
const baseName = getCommandBinary(cmd);
|
|
87
|
-
if (!baseName)
|
|
88
|
-
continue;
|
|
89
|
-
if (!ALLOWED_COMMANDS.has(baseName)) {
|
|
90
|
-
return JSON.stringify({
|
|
91
|
-
error: `Command "${baseName}" is not in the allowed command list.`,
|
|
92
|
-
allowed_categories: {
|
|
93
|
-
network: "ip, ifconfig, ping, traceroute, tracepath, ss, netstat, route, arp, ethtool, mtr, bridge, tc, conntrack, nslookup, dig, host, curl",
|
|
94
|
-
rdma: "ibstat, ibstatus, ibv_devinfo, ibv_devices, rdma, ibaddr, iblinkinfo, ibportstate, ibswitches, ibroute, show_gids, ibdev2netdev",
|
|
95
|
-
perftest: "ib_write_bw, ib_write_lat, ib_read_bw, ib_read_lat, ib_send_bw, ib_send_lat, ib_atomic_bw, ib_atomic_lat, raw_ethernet_bw, raw_ethernet_lat, raw_ethernet_burst_lat",
|
|
96
|
-
gpu: "nvidia-smi, gpustat, nvtopo",
|
|
97
|
-
hardware: "lspci, lsusb, lsblk, lscpu, lsmem, lshw, dmidecode",
|
|
98
|
-
kernel: "uname, hostname, uptime, dmesg, sysctl, lsmod, modinfo",
|
|
99
|
-
process: "ps, pgrep, top, free, vmstat, iostat, mpstat, df, du, mount, findmnt, nproc",
|
|
100
|
-
file: "cat, ls, pwd, stat, file, find, readlink, realpath, basename, dirname, diff, md5sum, sha256sum",
|
|
101
|
-
general: "date, whoami, id, env, printenv, which",
|
|
102
|
-
},
|
|
103
|
-
}, null, 2);
|
|
104
|
-
}
|
|
105
|
-
// Apply unified command-level restrictions (find -exec, sysctl -w, curl -o, etc.)
|
|
106
|
-
const restrictionErr = validateCommandRestrictions(cmd);
|
|
107
|
-
if (restrictionErr)
|
|
108
|
-
return restrictionErr;
|
|
109
|
-
}
|
|
110
|
-
return null;
|
|
111
|
-
}
|
|
12
|
+
export { validateNodeName, validatePodName } from "./exec-utils.js";
|
|
13
|
+
export { validateCommand } from "./command-validator.js";
|
|
112
14
|
export function createNodeExecTool(kubeconfigRef) {
|
|
113
15
|
return {
|
|
114
16
|
name: "node_exec",
|
|
@@ -185,13 +87,7 @@ Examples:
|
|
|
185
87
|
renderResult: renderTextResult,
|
|
186
88
|
async execute(_toolCallId, rawParams, signal) {
|
|
187
89
|
const params = rawParams;
|
|
188
|
-
const
|
|
189
|
-
const kubeconfigArgs = kubeconfigPath ? [`--kubeconfig=${kubeconfigPath}`] : [];
|
|
190
|
-
const childEnv = {
|
|
191
|
-
...sanitizeEnv(process.env),
|
|
192
|
-
...(kubeconfigRef?.credentialsDir ? { SICLAW_CREDENTIALS_DIR: kubeconfigRef.credentialsDir } : {}),
|
|
193
|
-
KUBECONFIG: "/dev/null",
|
|
194
|
-
};
|
|
90
|
+
const env = prepareExecEnv(kubeconfigRef);
|
|
195
91
|
// Validate node name
|
|
196
92
|
const nodeErr = validateNodeName(params.node);
|
|
197
93
|
if (nodeErr) {
|
|
@@ -201,15 +97,15 @@ Examples:
|
|
|
201
97
|
};
|
|
202
98
|
}
|
|
203
99
|
// Validate command
|
|
204
|
-
const cmdErr = validateCommand(params.command);
|
|
100
|
+
const cmdErr = validateCommand(params.command, { context: "node" });
|
|
205
101
|
if (cmdErr) {
|
|
206
102
|
return {
|
|
207
103
|
content: [{ type: "text", text: cmdErr }],
|
|
208
104
|
details: { blocked: true, reason: "command_blocked" },
|
|
209
105
|
};
|
|
210
106
|
}
|
|
211
|
-
// Check node exists and is Ready
|
|
212
|
-
const nodeCheckErr = await checkNodeReady(params.node, childEnv, kubeconfigPath ?? undefined);
|
|
107
|
+
// Check node exists and is Ready
|
|
108
|
+
const nodeCheckErr = await checkNodeReady(params.node, env.childEnv, env.kubeconfigPath ?? undefined);
|
|
213
109
|
if (nodeCheckErr) {
|
|
214
110
|
return {
|
|
215
111
|
content: [{ type: "text", text: JSON.stringify({ error: nodeCheckErr }, null, 2) }],
|
|
@@ -221,122 +117,19 @@ Examples:
|
|
|
221
117
|
const commands = extractCommands(params.command);
|
|
222
118
|
const needsShell = commands.length > 1;
|
|
223
119
|
const cmdArgs = parseArgs(params.command);
|
|
224
|
-
//
|
|
225
|
-
const podId = randomBytes(4).toString("hex");
|
|
226
|
-
const podName = `node-debug-${podId}`;
|
|
227
|
-
const cleanup = () => {
|
|
228
|
-
spawnAsync("kubectl", [
|
|
229
|
-
...kubeconfigArgs, "delete", "pod", podName, "--force", "--grace-period=0",
|
|
230
|
-
], 10_000, childEnv).catch(() => { });
|
|
231
|
-
};
|
|
232
|
-
// Build overrides: privileged + hostPID + hostNetwork + nsenter
|
|
233
|
-
// Single command: pass args directly (no shell overhead)
|
|
234
|
-
// Pipeline: wrap in sh -c for shell interpretation
|
|
120
|
+
// Build nsenter command
|
|
235
121
|
const nsenterCmd = needsShell
|
|
236
122
|
? ["nsenter", "-t", "1", "-m", "-u", "-i", "-n", "-p", "--", "sh", "-c", params.command]
|
|
237
123
|
: ["nsenter", "-t", "1", "-m", "-u", "-i", "-n", "-p", "--", ...cmdArgs];
|
|
238
|
-
const
|
|
239
|
-
|
|
240
|
-
nodeName: params.node,
|
|
241
|
-
hostPID: true,
|
|
242
|
-
hostNetwork: true,
|
|
243
|
-
containers: [{
|
|
244
|
-
name: podName,
|
|
245
|
-
image,
|
|
246
|
-
securityContext: { privileged: true },
|
|
247
|
-
command: nsenterCmd,
|
|
248
|
-
}],
|
|
249
|
-
},
|
|
250
|
-
});
|
|
251
|
-
try {
|
|
252
|
-
// Phase 1: Create pod
|
|
253
|
-
await spawnAsync("kubectl", [
|
|
254
|
-
...kubeconfigArgs,
|
|
255
|
-
"run", podName,
|
|
256
|
-
"--restart=Never",
|
|
257
|
-
`--image=${image}`,
|
|
258
|
-
`--overrides=${overrides}`,
|
|
259
|
-
], 30_000, childEnv, signal);
|
|
260
|
-
// Phase 2: Wait for pod to reach terminal phase (Succeeded or Failed)
|
|
261
|
-
try {
|
|
262
|
-
await waitForPodDone(podName, timeout, childEnv, signal, kubeconfigPath ?? undefined);
|
|
263
|
-
}
|
|
264
|
-
catch {
|
|
265
|
-
// Timed out — still fetch logs before cleanup
|
|
266
|
-
}
|
|
267
|
-
if (signal?.aborted) {
|
|
268
|
-
cleanup();
|
|
269
|
-
return {
|
|
270
|
-
content: [{ type: "text", text: "Aborted." }],
|
|
271
|
-
details: { error: true },
|
|
272
|
-
};
|
|
273
|
-
}
|
|
274
|
-
// Phase 3: Fetch logs
|
|
275
|
-
let stdout = "";
|
|
276
|
-
let stderr = "";
|
|
277
|
-
try {
|
|
278
|
-
const logsResult = await spawnAsync("kubectl", [
|
|
279
|
-
...kubeconfigArgs, "logs", podName,
|
|
280
|
-
], 10_000, childEnv);
|
|
281
|
-
stdout = logsResult.stdout;
|
|
282
|
-
stderr = logsResult.stderr;
|
|
283
|
-
}
|
|
284
|
-
catch (logErr) {
|
|
285
|
-
stdout = logErr.stdout ?? "";
|
|
286
|
-
stderr = logErr.stderr ?? "";
|
|
287
|
-
}
|
|
288
|
-
// Phase 4: Get exit code from pod status
|
|
289
|
-
let exitCode = null;
|
|
290
|
-
try {
|
|
291
|
-
const statusResult = await spawnAsync("kubectl", [
|
|
292
|
-
...kubeconfigArgs, "get", "pod", podName,
|
|
293
|
-
"-o", "jsonpath={.status.containerStatuses[0].state.terminated.exitCode}",
|
|
294
|
-
], 5_000, childEnv);
|
|
295
|
-
const code = parseInt(statusResult.stdout.trim(), 10);
|
|
296
|
-
if (!isNaN(code))
|
|
297
|
-
exitCode = code;
|
|
298
|
-
}
|
|
299
|
-
catch {
|
|
300
|
-
// ignore — exitCode stays null
|
|
301
|
-
}
|
|
302
|
-
// Phase 5: Cleanup
|
|
303
|
-
cleanup();
|
|
304
|
-
const filteredStderr = filterPodNoise(stderr);
|
|
305
|
-
const output = stdout.trim() + (filteredStderr ? `\n\nSTDERR:\n${filteredStderr}` : "");
|
|
306
|
-
if (exitCode === 0 || (exitCode === null && stdout.trim())) {
|
|
307
|
-
return {
|
|
308
|
-
content: [{ type: "text", text: processToolOutput(output) }],
|
|
309
|
-
details: { exitCode: exitCode ?? 0 },
|
|
310
|
-
};
|
|
311
|
-
}
|
|
312
|
-
else {
|
|
313
|
-
const errOutput = `Exit code: ${exitCode ?? "unknown"}\n${output}`;
|
|
314
|
-
return {
|
|
315
|
-
content: [{ type: "text", text: processToolOutput(errOutput) }],
|
|
316
|
-
details: { exitCode, error: true },
|
|
317
|
-
};
|
|
318
|
-
}
|
|
319
|
-
}
|
|
320
|
-
catch (err) {
|
|
321
|
-
cleanup();
|
|
322
|
-
const output = `Exit code: ${err.code ?? "unknown"}\n${err.stdout?.trim() ?? ""}\n${err.stderr?.trim() ?? err.message}`;
|
|
124
|
+
const execResult = await runInDebugPod({ nodeName: params.node, command: nsenterCmd, image }, env, { timeoutMs: timeout, signal });
|
|
125
|
+
if (signal?.aborted) {
|
|
323
126
|
return {
|
|
324
|
-
content: [{ type: "text", text:
|
|
325
|
-
details: {
|
|
127
|
+
content: [{ type: "text", text: "Aborted." }],
|
|
128
|
+
details: { error: true },
|
|
326
129
|
};
|
|
327
130
|
}
|
|
131
|
+
return formatExecOutput(execResult);
|
|
328
132
|
},
|
|
329
133
|
};
|
|
330
134
|
}
|
|
331
|
-
/**
|
|
332
|
-
* Filter out kubectl run informational lines from stderr
|
|
333
|
-
* (e.g. 'pod "node-debug-xxx" deleted').
|
|
334
|
-
*/
|
|
335
|
-
function filterPodNoise(stderr) {
|
|
336
|
-
return stderr
|
|
337
|
-
.split("\n")
|
|
338
|
-
.filter((line) => !line.match(/^pod "node-debug-.*" deleted$/))
|
|
339
|
-
.join("\n")
|
|
340
|
-
.trim();
|
|
341
|
-
}
|
|
342
135
|
//# sourceMappingURL=node-exec.js.map
|
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"node-exec.js","sourceRoot":"","sources":["../../src/tools/node-exec.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,IAAI,EAAE,MAAM,mBAAmB,CAAC;AACzC,OAAO,EAAE,
|
|
1
|
+
{"version":3,"file":"node-exec.js","sourceRoot":"","sources":["../../src/tools/node-exec.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,IAAI,EAAE,MAAM,mBAAmB,CAAC;AACzC,OAAO,EAAE,IAAI,EAAE,MAAM,sBAAsB,CAAC;AAG5C,OAAO,EAAE,gBAAgB,EAAE,MAAM,kBAAkB,CAAC;AACpD,OAAO,EAAE,cAAc,EAAE,MAAM,iBAAiB,CAAC;AACjD,OAAO,EAAE,UAAU,EAAE,MAAM,mBAAmB,CAAC;AAC/C,OAAO,EAAE,SAAS,EAAE,MAAM,mBAAmB,CAAC;AAC9C,OAAO,EAAE,eAAe,EAAE,eAAe,EAAE,MAAM,wBAAwB,CAAC;AAC1E,OAAO,EACL,gBAAgB,EAChB,cAAc,EACd,aAAa,EACb,gBAAgB,GACjB,MAAM,iBAAiB,CAAC;AAEzB,MAAM,aAAa,GAAG,UAAU,EAAE,CAAC,UAAU,CAAC;AAE9C,oEAAoE;AACpE,OAAO,EAAE,gBAAgB,EAAE,MAAM,mBAAmB,CAAC;AACrD,OAAO,EAAE,gBAAgB,EAAE,eAAe,EAAE,MAAM,iBAAiB,CAAC;AACpE,OAAO,EAAE,eAAe,EAAE,MAAM,wBAAwB,CAAC;AASzD,MAAM,UAAU,kBAAkB,CAAC,aAA6B;IAC9D,OAAO;QACL,IAAI,EAAE,WAAW;QACjB,KAAK,EAAE,WAAW;QAClB,WAAW,EAAE;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;uEA8CsD;QACnE,UAAU,EAAE,IAAI,CAAC,MAAM,CAAC;YACtB,IAAI,EAAE,IAAI,CAAC,MAAM,CAAC;gBAChB,WAAW,EAAE,+BAA+B;aAC7C,CAAC;YACF,OAAO,EAAE,IAAI,CAAC,MAAM,CAAC;gBACnB,WAAW,EACT,2EAA2E;aAC9E,CAAC;YACF,KAAK,EAAE,IAAI,CAAC,QAAQ,CAClB,IAAI,CAAC,MAAM,CAAC;gBACV,WAAW,EAAE,mCAAmC,aAAa,GAAG;aACjE,CAAC,CACH;YACD,eAAe,EAAE,IAAI,CAAC,QAAQ,CAC5B,IAAI,CAAC,MAAM,CAAC;gBACV,WAAW,EAAE,4CAA4C;aAC1D,CAAC,CACH;SACF,CAAC;QACF,UAAU,CAAC,IAAS,EAAE,KAAU;YAC9B,MAAM,IAAI,GAAG,IAAI,EAAE,IAAI,IAAI,KAAK,CAAC;YACjC,MAAM,GAAG,GAAG,IAAI,EAAE,OAAO,IAAI,KAAK,CAAC;YACnC,OAAO,IAAI,IAAI,CACb,KAAK,CAAC,EAAE,CAAC,WAAW,EAAE,KAAK,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC;gBAC5C,GAAG,GAAG,KAAK,CAAC,EAAE,CAAC,QAAQ,EAAE,IAAI,CAAC;gBAC9B,GAAG,GAAG,KAAK,CAAC,EAAE,CAAC,WAAW,EAAE,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;gBAC5C,GAAG,GAAG,GAAG,EACX,CAAC,EAAE,CAAC,CACL,CAAC;QACJ,CAAC;QACD,YAAY,EAAE,gBAAgB;QAC9B,KAAK,CAAC,OAAO,CAAC,WAAW,EAAE,SAAS,EAAE,MAAM;YAC1C,MAAM,MAAM,GAAG,SAA2B,CAAC;YAC3C,MAAM,GAAG,GAAG,cAAc,CAAC,aAAa,CAAC,CAAC;YAE1C,qBAAqB;YACrB,MAAM,OAAO,GAAG,gBAAgB,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;YAC9C,IAAI,OAAO,EAAE,CAAC;gBACZ,OAAO;oBACL,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,EAAE,KAAK,EAAE,OAAO,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC,EAAE,CAAC;oBAC9E,OAAO,EAAE,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,mBAAmB,EAAE;iBACxD,CAAC;YACJ,CAAC;YAED,mBAAmB;YACnB,MAAM,MAAM,GAAG,eAAe,CAAC,MAAM,CAAC,OAAO,EAAE,EAAE,OAAO,EAAE,MAAM,EAAE,CAAC,CAAC;YACpE,IAAI,MAAM,EAAE,CAAC;gBACX,OAAO;oBACL,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC;oBACzC,OAAO,EAAE,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,iBAAiB,EAAE;iBACtD,CAAC;YACJ,CAAC;YAED,iCAAiC;YACjC,MAAM,YAAY,GAAG,MAAM,cAAc,CACvC,MAAM,CAAC,IAAI,EAAE,GAAG,CAAC,QAAQ,EAAE,GAAG,CAAC,cAAc,IAAI,SAAS,CAC3D,CAAC;YACF,IAAI,YAAY,EAAE,CAAC;gBACjB,OAAO;oBACL,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,EAAE,KAAK,EAAE,YAAY,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC,EAAE,CAAC;oBACnF,OAAO,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE;iBACzB,CAAC;YACJ,CAAC;YAED,MAAM,KAAK,GAAG,MAAM,CAAC,KAAK,IAAI,aAAa,CAAC;YAC5C,MAAM,OAAO,GAAG,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC,eAAe,IAAI,EAAE,EAAE,GAAG,CAAC,GAAG,IAAI,CAAC;YACnE,MAAM,QAAQ,GAAG,eAAe,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;YACjD,MAAM,UAAU,GAAG,QAAQ,CAAC,MAAM,GAAG,CAAC,CAAC;YACvC,MAAM,OAAO,GAAG,SAAS,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;YAE1C,wBAAwB;YACxB,MAAM,UAAU,GAAG,UAAU;gBAC3B,CAAC,CAAC,CAAC,SAAS,EAAE,IAAI,EAAE,GAAG,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,MAAM,CAAC,OAAO,CAAC;gBACxF,CAAC,CAAC,CAAC,SAAS,EAAE,IAAI,EAAE,GAAG,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,GAAG,OAAO,CAAC,CAAC;YAE3E,MAAM,UAAU,GAAG,MAAM,aAAa,CACpC,EAAE,QAAQ,EAAE,MAAM,CAAC,IAAI,EAAE,OAAO,EAAE,UAAU,EAAE,KAAK,EAAE,EACrD,GAAG,EACH,EAAE,SAAS,EAAE,OAAO,EAAE,MAAM,EAAE,CAC/B,CAAC;YAEF,IAAI,MAAM,EAAE,OAAO,EAAE,CAAC;gBACpB,OAAO;oBACL,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,UAAU,EAAE,CAAC;oBAC7C,OAAO,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE;iBACzB,CAAC;YACJ,CAAC;YAED,OAAO,gBAAgB,CAAC,UAAU,CAAC,CAAC;QACtC,CAAC;KACF,CAAC;AACJ,CAAC"}
|
|
@@ -1,57 +1,12 @@
|
|
|
1
1
|
import { Type } from "@sinclair/typebox";
|
|
2
|
-
import { spawn } from "node:child_process";
|
|
3
|
-
import { randomBytes } from "node:crypto";
|
|
4
2
|
import { Text } from "@mariozechner/pi-tui";
|
|
5
|
-
import {
|
|
6
|
-
import { checkNodeReady, waitForPodDone } from "./k8s-checks.js";
|
|
7
|
-
import { resolveKubeconfigPath } from "./kubeconfig-resolver.js";
|
|
8
|
-
import { sanitizeEnv } from "./sanitize-env.js";
|
|
3
|
+
import { checkNodeReady } from "./k8s-checks.js";
|
|
9
4
|
import { resolveScript } from "./script-resolver.js";
|
|
10
|
-
import {
|
|
5
|
+
import { renderTextResult } from "./tool-render.js";
|
|
11
6
|
import { loadConfig } from "../core/config.js";
|
|
12
7
|
import { parseArgs, shellEscape } from "./command-sets.js";
|
|
8
|
+
import { validateNodeName, prepareExecEnv, runInDebugPod, formatExecOutput, } from "./exec-utils.js";
|
|
13
9
|
const DEFAULT_IMAGE = loadConfig().debugImage;
|
|
14
|
-
function spawnAsync(cmd, args, timeout, env, signal) {
|
|
15
|
-
return new Promise((resolve, reject) => {
|
|
16
|
-
let stdout = "";
|
|
17
|
-
let stderr = "";
|
|
18
|
-
const child = spawn(cmd, args, {
|
|
19
|
-
stdio: ["ignore", "pipe", "pipe"],
|
|
20
|
-
env,
|
|
21
|
-
});
|
|
22
|
-
const onAbort = () => child.kill("SIGKILL");
|
|
23
|
-
signal?.addEventListener("abort", onAbort, { once: true });
|
|
24
|
-
child.stdout.on("data", (chunk) => {
|
|
25
|
-
stdout += chunk.toString();
|
|
26
|
-
});
|
|
27
|
-
child.stderr.on("data", (chunk) => {
|
|
28
|
-
stderr += chunk.toString();
|
|
29
|
-
});
|
|
30
|
-
const timer = setTimeout(() => {
|
|
31
|
-
child.kill("SIGKILL");
|
|
32
|
-
}, timeout);
|
|
33
|
-
child.on("close", (code) => {
|
|
34
|
-
clearTimeout(timer);
|
|
35
|
-
signal?.removeEventListener("abort", onAbort);
|
|
36
|
-
if (code === 0)
|
|
37
|
-
resolve({ stdout, stderr });
|
|
38
|
-
else
|
|
39
|
-
reject(Object.assign(new Error(`exit ${code}`), { code, stdout, stderr }));
|
|
40
|
-
});
|
|
41
|
-
child.on("error", (err) => {
|
|
42
|
-
clearTimeout(timer);
|
|
43
|
-
signal?.removeEventListener("abort", onAbort);
|
|
44
|
-
reject(err);
|
|
45
|
-
});
|
|
46
|
-
});
|
|
47
|
-
}
|
|
48
|
-
function filterPodNoise(stderr) {
|
|
49
|
-
return stderr
|
|
50
|
-
.split("\n")
|
|
51
|
-
.filter((line) => !line.match(/^pod "node-debug-.*" deleted$/))
|
|
52
|
-
.join("\n")
|
|
53
|
-
.trim();
|
|
54
|
-
}
|
|
55
10
|
export function createNodeScriptTool(kubeconfigRef) {
|
|
56
11
|
return {
|
|
57
12
|
name: "node_script",
|
|
@@ -99,13 +54,7 @@ Examples:
|
|
|
99
54
|
}),
|
|
100
55
|
async execute(_toolCallId, rawParams, signal) {
|
|
101
56
|
const params = rawParams;
|
|
102
|
-
const
|
|
103
|
-
const kubeconfigArgs = kubeconfigPath ? [`--kubeconfig=${kubeconfigPath}`] : [];
|
|
104
|
-
const env = {
|
|
105
|
-
...sanitizeEnv(process.env),
|
|
106
|
-
...(kubeconfigRef?.credentialsDir ? { SICLAW_CREDENTIALS_DIR: kubeconfigRef.credentialsDir } : {}),
|
|
107
|
-
KUBECONFIG: "/dev/null",
|
|
108
|
-
};
|
|
57
|
+
const env = prepareExecEnv(kubeconfigRef);
|
|
109
58
|
// Validate node name format
|
|
110
59
|
const nodeErr = validateNodeName(params.node);
|
|
111
60
|
if (nodeErr) {
|
|
@@ -115,7 +64,7 @@ Examples:
|
|
|
115
64
|
};
|
|
116
65
|
}
|
|
117
66
|
// Check node exists and is Ready
|
|
118
|
-
const nodeCheckErr = await checkNodeReady(params.node, env, kubeconfigPath ?? undefined);
|
|
67
|
+
const nodeCheckErr = await checkNodeReady(params.node, env.childEnv, env.kubeconfigPath ?? undefined);
|
|
119
68
|
if (nodeCheckErr) {
|
|
120
69
|
return {
|
|
121
70
|
content: [{ type: "text", text: `Error: ${nodeCheckErr}` }],
|
|
@@ -145,121 +94,18 @@ Examples:
|
|
|
145
94
|
const innerCmd = escapedArgs
|
|
146
95
|
? `echo '${b64}' | base64 -d > /tmp/_s${ext} && ${resolved.interpreter} /tmp/_s${ext} ${escapedArgs}`
|
|
147
96
|
: `echo '${b64}' | base64 -d > /tmp/_s${ext} && ${resolved.interpreter} /tmp/_s${ext}`;
|
|
148
|
-
const
|
|
149
|
-
|
|
150
|
-
|
|
151
|
-
|
|
152
|
-
};
|
|
153
|
-
|
|
154
|
-
spec: {
|
|
155
|
-
nodeName: params.node,
|
|
156
|
-
hostPID: true,
|
|
157
|
-
hostNetwork: true,
|
|
158
|
-
containers: [
|
|
159
|
-
{
|
|
160
|
-
name: podName,
|
|
161
|
-
image,
|
|
162
|
-
securityContext: { privileged: true },
|
|
163
|
-
command: [
|
|
164
|
-
"nsenter",
|
|
165
|
-
"-t",
|
|
166
|
-
"1",
|
|
167
|
-
"-m",
|
|
168
|
-
"-u",
|
|
169
|
-
"-i",
|
|
170
|
-
"-n",
|
|
171
|
-
"-p",
|
|
172
|
-
"--",
|
|
173
|
-
"sh",
|
|
174
|
-
"-c",
|
|
175
|
-
innerCmd,
|
|
176
|
-
],
|
|
177
|
-
},
|
|
178
|
-
],
|
|
179
|
-
restartPolicy: "Never",
|
|
180
|
-
},
|
|
181
|
-
});
|
|
182
|
-
try {
|
|
183
|
-
// Phase 1: Create pod
|
|
184
|
-
await spawnAsync("kubectl", [
|
|
185
|
-
...kubeconfigArgs,
|
|
186
|
-
"run",
|
|
187
|
-
podName,
|
|
188
|
-
"--restart=Never",
|
|
189
|
-
`--image=${image}`,
|
|
190
|
-
`--overrides=${overrides}`,
|
|
191
|
-
], 30_000, env, signal);
|
|
192
|
-
// Phase 2: Wait for pod to reach terminal phase (Succeeded or Failed)
|
|
193
|
-
try {
|
|
194
|
-
await waitForPodDone(podName, timeout, env, signal, kubeconfigPath ?? undefined);
|
|
195
|
-
}
|
|
196
|
-
catch {
|
|
197
|
-
// Timed out — still fetch logs before cleanup
|
|
198
|
-
}
|
|
199
|
-
if (signal?.aborted) {
|
|
200
|
-
cleanup();
|
|
201
|
-
return {
|
|
202
|
-
content: [{ type: "text", text: "Aborted." }],
|
|
203
|
-
details: { error: true },
|
|
204
|
-
};
|
|
205
|
-
}
|
|
206
|
-
// Phase 3: Fetch logs
|
|
207
|
-
let stdout = "";
|
|
208
|
-
let stderr = "";
|
|
209
|
-
try {
|
|
210
|
-
const logsResult = await spawnAsync("kubectl", [...kubeconfigArgs, "logs", podName], 10_000, env);
|
|
211
|
-
stdout = logsResult.stdout;
|
|
212
|
-
stderr = logsResult.stderr;
|
|
213
|
-
}
|
|
214
|
-
catch (logErr) {
|
|
215
|
-
stdout = logErr.stdout ?? "";
|
|
216
|
-
stderr = logErr.stderr ?? "";
|
|
217
|
-
}
|
|
218
|
-
// Phase 4: Get exit code
|
|
219
|
-
let exitCode = null;
|
|
220
|
-
try {
|
|
221
|
-
const statusResult = await spawnAsync("kubectl", [
|
|
222
|
-
...kubeconfigArgs,
|
|
223
|
-
"get",
|
|
224
|
-
"pod",
|
|
225
|
-
podName,
|
|
226
|
-
"-o",
|
|
227
|
-
"jsonpath={.status.containerStatuses[0].state.terminated.exitCode}",
|
|
228
|
-
], 5_000, env);
|
|
229
|
-
const code = parseInt(statusResult.stdout.trim(), 10);
|
|
230
|
-
if (!isNaN(code))
|
|
231
|
-
exitCode = code;
|
|
232
|
-
}
|
|
233
|
-
catch {
|
|
234
|
-
// ignore
|
|
235
|
-
}
|
|
236
|
-
// Phase 5: Cleanup
|
|
237
|
-
cleanup();
|
|
238
|
-
const filteredStderr = filterPodNoise(stderr);
|
|
239
|
-
const output = stdout.trim() +
|
|
240
|
-
(filteredStderr ? `\n\nSTDERR:\n${filteredStderr}` : "");
|
|
241
|
-
if (exitCode === 0 || (exitCode === null && stdout.trim())) {
|
|
242
|
-
return {
|
|
243
|
-
content: [{ type: "text", text: processToolOutput(output) }],
|
|
244
|
-
details: { exitCode: exitCode ?? 0 },
|
|
245
|
-
};
|
|
246
|
-
}
|
|
247
|
-
else {
|
|
248
|
-
const errOutput = `Exit code: ${exitCode ?? "unknown"}\n${output}`;
|
|
249
|
-
return {
|
|
250
|
-
content: [{ type: "text", text: processToolOutput(errOutput) }],
|
|
251
|
-
details: { exitCode, error: true },
|
|
252
|
-
};
|
|
253
|
-
}
|
|
254
|
-
}
|
|
255
|
-
catch (err) {
|
|
256
|
-
cleanup();
|
|
257
|
-
const output = `Exit code: ${err.code ?? "unknown"}\n${err.stdout?.trim() ?? ""}\n${err.stderr?.trim() ?? err.message}`;
|
|
97
|
+
const nsenterCmd = [
|
|
98
|
+
"nsenter", "-t", "1", "-m", "-u", "-i", "-n", "-p",
|
|
99
|
+
"--", "sh", "-c", innerCmd,
|
|
100
|
+
];
|
|
101
|
+
const execResult = await runInDebugPod({ nodeName: params.node, command: nsenterCmd, image }, env, { timeoutMs: timeout, signal });
|
|
102
|
+
if (signal?.aborted) {
|
|
258
103
|
return {
|
|
259
|
-
content: [{ type: "text", text:
|
|
260
|
-
details: {
|
|
104
|
+
content: [{ type: "text", text: "Aborted." }],
|
|
105
|
+
details: { error: true },
|
|
261
106
|
};
|
|
262
107
|
}
|
|
108
|
+
return formatExecOutput(execResult);
|
|
263
109
|
},
|
|
264
110
|
};
|
|
265
111
|
}
|
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"node-script.js","sourceRoot":"","sources":["../../src/tools/node-script.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,IAAI,EAAE,MAAM,mBAAmB,CAAC;
|
|
1
|
+
{"version":3,"file":"node-script.js","sourceRoot":"","sources":["../../src/tools/node-script.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,IAAI,EAAE,MAAM,mBAAmB,CAAC;AAEzC,OAAO,EAAE,IAAI,EAAE,MAAM,sBAAsB,CAAC;AAE5C,OAAO,EAAE,cAAc,EAAE,MAAM,iBAAiB,CAAC;AACjD,OAAO,EAAE,aAAa,EAAE,MAAM,sBAAsB,CAAC;AACrD,OAAO,EAAE,gBAAgB,EAAE,MAAM,kBAAkB,CAAC;AACpD,OAAO,EAAE,UAAU,EAAE,MAAM,mBAAmB,CAAC;AAC/C,OAAO,EAAE,SAAS,EAAE,WAAW,EAAE,MAAM,mBAAmB,CAAC;AAC3D,OAAO,EACL,gBAAgB,EAChB,cAAc,EACd,aAAa,EACb,gBAAgB,GACjB,MAAM,iBAAiB,CAAC;AAEzB,MAAM,aAAa,GAAG,UAAU,EAAE,CAAC,UAAU,CAAC;AAW9C,MAAM,UAAU,oBAAoB,CAAC,aAA6B;IAChE,OAAO;QACL,IAAI,EAAE,aAAa;QACnB,KAAK,EAAE,aAAa;QACpB,UAAU,CAAC,IAAS,EAAE,KAAU;YAC9B,OAAO,IAAI,IAAI,CACb,KAAK,CAAC,EAAE,CAAC,WAAW,EAAE,KAAK,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC;gBAC9C,GAAG,GAAG,KAAK,CAAC,EAAE,CAAC,QAAQ,EAAE,IAAI,EAAE,IAAI,IAAI,EAAE,CAAC;gBAC1C,GAAG,GAAG,KAAK,CAAC,EAAE,CAAC,OAAO,EAAE,CAAC,IAAI,EAAE,KAAK,IAAI,EAAE,CAAC,GAAG,GAAG,GAAG,CAAC,IAAI,EAAE,MAAM,IAAI,EAAE,CAAC,CAAC;gBACzE,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC,CAAC,GAAG,GAAG,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EACrC,CAAC,EAAE,CAAC,CACL,CAAC;QACJ,CAAC;QACD,YAAY,EAAE,gBAAgB;QAC9B,WAAW,EAAE;;;;;;;;;;;;;;;;;;;wCAmBuB;QACpC,UAAU,EAAE,IAAI,CAAC,MAAM,CAAC;YACtB,IAAI,EAAE,IAAI,CAAC,MAAM,CAAC,EAAE,WAAW,EAAE,sBAAsB,EAAE,CAAC;YAC1D,KAAK,EAAE,IAAI,CAAC,QAAQ,CAClB,IAAI,CAAC,MAAM,CAAC;gBACV,WAAW,EAAE,uCAAuC;aACrD,CAAC,CACH;YACD,MAAM,EAAE,IAAI,CAAC,MAAM,CAAC,EAAE,WAAW,EAAE,iBAAiB,EAAE,CAAC;YACvD,IAAI,EAAE,IAAI,CAAC,QAAQ,CACjB,IAAI,CAAC,MAAM,CAAC,EAAE,WAAW,EAAE,iCAAiC,EAAE,CAAC,CAChE;YACD,KAAK,EAAE,IAAI,CAAC,QAAQ,CAClB,IAAI,CAAC,MAAM,CAAC;gBACV,WAAW,EAAE,mCAAmC,aAAa,GAAG;aACjE,CAAC,CACH;YACD,eAAe,EAAE,IAAI,CAAC,QAAQ,CAC5B,IAAI,CAAC,MAAM,CAAC;gBACV,WAAW,EAAE,6CAA6C;aAC3D,CAAC,CACH;SACF,CAAC;QACF,KAAK,CAAC,OAAO,CAAC,WAAW,EAAE,SAAS,EAAE,MAAM;YAC1C,MAAM,MAAM,GAAG,SAA6B,CAAC;YAC7C,MAAM,GAAG,GAAG,cAAc,CAAC,aAAa,CAAC,CAAC;YAE1C,4BAA4B;YAC5B,MAAM,OAAO,GAAG,gBAAgB,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;YAC9C,IAAI,OAAO,EAAE,CAAC;gBACZ,OAAO;oBACL,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,UAAU,OAAO,EAAE,EAAE,CAAC;oBACtD,OAAO,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE;iBACzB,CAAC;YACJ,CAAC;YAED,iCAAiC;YACjC,MAAM,YAAY,GAAG,MAAM,cAAc,CACvC,MAAM,CAAC,IAAI,EAAE,GAAG,CAAC,QAAQ,EAAE,GAAG,CAAC,cAAc,IAAI,SAAS,CAC3D,CAAC;YACF,IAAI,YAAY,EAAE,CAAC;gBACjB,OAAO;oBACL,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,UAAU,YAAY,EAAE,EAAE,CAAC;oBAC3D,OAAO,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE;iBACzB,CAAC;YACJ,CAAC;YAED,iBAAiB;YACjB,MAAM,QAAQ,GAAG,aAAa,CAAC;gBAC7B,KAAK,EAAE,MAAM,CAAC,KAAK;gBACnB,MAAM,EAAE,MAAM,CAAC,MAAM;aACtB,CAAC,CAAC;YACH,IAAI,OAAO,IAAI,QAAQ,EAAE,CAAC;gBACxB,OAAO;oBACL,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,UAAU,QAAQ,CAAC,KAAK,EAAE,EAAE,CAAC;oBAC7D,OAAO,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE;iBACzB,CAAC;YACJ,CAAC;YAED,MAAM,KAAK,GAAG,MAAM,CAAC,KAAK,IAAI,aAAa,CAAC;YAC5C,MAAM,OAAO,GAAG,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC,eAAe,IAAI,GAAG,EAAE,GAAG,CAAC,GAAG,IAAI,CAAC;YACpE,MAAM,IAAI,GAAG,MAAM,CAAC,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC;YACvC,+EAA+E;YAC/E,MAAM,WAAW,GAAG,IAAI,CAAC,CAAC,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,WAAW,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;YAE3E,+BAA+B;YAC/B,MAAM,GAAG,GAAG,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC;YAE7D,6CAA6C;YAC7C,MAAM,GAAG,GAAG,QAAQ,CAAC,WAAW,KAAK,SAAS,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC;YAC/D,MAAM,QAAQ,GAAG,WAAW;gBAC1B,CAAC,CAAC,SAAS,GAAG,0BAA0B,GAAG,OAAO,QAAQ,CAAC,WAAW,WAAW,GAAG,IAAI,WAAW,EAAE;gBACrG,CAAC,CAAC,SAAS,GAAG,0BAA0B,GAAG,OAAO,QAAQ,CAAC,WAAW,WAAW,GAAG,EAAE,CAAC;YAEzF,MAAM,UAAU,GAAG;gBACjB,SAAS,EAAE,IAAI,EAAE,GAAG,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI;gBAClD,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,QAAQ;aAC3B,CAAC;YAEF,MAAM,UAAU,GAAG,MAAM,aAAa,CACpC,EAAE,QAAQ,EAAE,MAAM,CAAC,IAAI,EAAE,OAAO,EAAE,UAAU,EAAE,KAAK,EAAE,EACrD,GAAG,EACH,EAAE,SAAS,EAAE,OAAO,EAAE,MAAM,EAAE,CAC/B,CAAC;YAEF,IAAI,MAAM,EAAE,OAAO,EAAE,CAAC;gBACpB,OAAO;oBACL,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,UAAU,EAAE,CAAC;oBAC7C,OAAO,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE;iBACzB,CAAC;YACJ,CAAC;YAED,OAAO,gBAAgB,CAAC,UAAU,CAAC,CAAC;QACtC,CAAC;KACF,CAAC;AACJ,CAAC"}
|
package/dist/tools/pod-exec.d.ts
CHANGED
|
@@ -1,4 +1,4 @@
|
|
|
1
1
|
import type { ToolDefinition } from "@mariozechner/pi-coding-agent";
|
|
2
2
|
import type { KubeconfigRef } from "../core/agent-factory.js";
|
|
3
|
-
export
|
|
3
|
+
export { validatePodName } from "./exec-utils.js";
|
|
4
4
|
export declare function createPodExecTool(kubeconfigRef?: KubeconfigRef): ToolDefinition;
|