swarm-orchestrator 14.0.2 → 14.2.0

package/dist/evidence/verify-report.js

@@ -1,8 +1,10 @@
 import { readFile } from "node:fs/promises";
 import { join } from "node:path";
-import { verifyAttestation } from "./attestation.js";
-import { bundleFileNames } from "./bundle-manifest.js";
+import { invalidAttestation, verifyAttestation } from "./attestation.js";
+import { bundleFileNames, bundleManifestSchema } from "./bundle-manifest.js";
 import { judgeSigner } from "./signer-trust.js";
+import { rederiveBundle } from "./verifier/rederive.mjs";
+import { verifyBundle } from "./verifier/verify.mjs";
 /**
  * Reads a bundle and reports the two questions separately, because they are two questions.
  * Integrity is what the bundle can prove about itself; the signer is what it cannot, and the
@@ -11,7 +13,7 @@ import { judgeSigner } from "./signer-trust.js";
 export async function verifyBundleAt(directory, expectedSigners) {
     let manifest;
     try {
-        manifest = JSON.parse(await readFile(join(directory, bundleFileNames.manifest), "utf8"));
+        manifest = bundleManifestSchema.parse(JSON.parse(await readFile(join(directory, bundleFileNames.manifest), "utf8")));
     }
     catch (cause) {
         return {
@@ -42,14 +44,27 @@ export async function verifyBundleAt(directory, expectedSigners) {
         };
     }
     const judgement = judgeSigner(manifest.chainHead, signature, policy);
-    const integrity = judgement.signer === "invalid" ? "invalid" : "valid";
+    const checks = [];
+    let verified = false;
+    try {
+        verified = verifyBundle(directory, (line) => checks.push(line)) === 0;
+        if (verified)
+            verified = rederiveBundle(directory, (line) => checks.push(line)) === 0;
+    }
+    catch (cause) {
+        checks.push(`verification failed: ${cause instanceof Error ? cause.message : String(cause)}`);
+    }
     const attested = await readAttestation(directory, policy);
+    const integrity = verified && judgement.signer !== "invalid" && attested?.integrity !== "invalid"
+        ? "valid"
+        : "invalid";
     return {
         integrity,
         signerJudgement: judgement,
         attestation: attested,
         lines: [
-            `integrity:  ${integrity} (the signature over the chain head ${integrity === "valid" ? "verifies" : "does not verify"})`,
+            `integrity:  ${integrity} (installed verifier checked the ledger, payloads and recorded verdicts)`,
+            ...checks,
             `signer:     ${judgement.signer}`,
             `            ${judgement.reason}`,
             `fingerprint: ${judgement.fingerprint}`,
@@ -67,7 +82,7 @@ export async function verifyBundleAt(directory, expectedSigners) {
                     "it was written. It says nothing about whether the machine that wrote it was sound.",
                 ]),
         ],
-        exitCode: judgement.signer === "trusted" ? 0 : 1,
+        exitCode: integrity === "valid" && judgement.signer === "trusted" ? 0 : 1,
     };
 }
 /**
@@ -80,8 +95,10 @@ async function readAttestation(directory, policy) {
         const envelope = JSON.parse(await readFile(join(directory, bundleFileNames.attestation), "utf8"));
         return verifyAttestation(envelope, policy);
     }
-    catch {
-        return null;
+    catch (cause) {
+        return cause.code === "ENOENT"
+            ? null
+            : invalidAttestation(`attestation could not be read: ${String(cause)}`);
     }
 }
 //# sourceMappingURL=verify-report.js.map

package/dist/evidence/verify-report.js.map

@@ -1 +1 @@
-{"version":3,"file":"verify-report.js","sourceRoot":"","sources":["../../src/evidence/verify-report.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,MAAM,kBAAkB,CAAC;AAC5C,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AACjC,OAAO,EAA6B,iBAAiB,EAAE,MAAM,kBAAkB,CAAC;AAChF,OAAO,EAAE,eAAe,EAAE,MAAM,sBAAsB,CAAC;AACvD,OAAO,EAAE,WAAW,EAA0C,MAAM,mBAAmB,CAAC;AAYxF;;;;GAIG;AACH,MAAM,CAAC,KAAK,UAAU,cAAc,CAClC,SAAiB,EACjB,eAAkC;IAElC,IAAI,QAAqD,CAAC;IAC1D,IAAI,CAAC;QACH,QAAQ,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,QAAQ,CAAC,IAAI,CAAC,SAAS,EAAE,eAAe,CAAC,QAAQ,CAAC,EAAE,MAAM,CAAC,CAAC,CAAC;IAC3F,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,OAAO;YACL,SAAS,EAAE,YAAY;YACvB,eAAe,EAAE,IAAI;YACrB,WAAW,EAAE,IAAI;YACjB,KAAK,EAAE;gBACL,2BAA2B,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,GAAG;gBACpF,yEAAyE;aAC1E;YACD,QAAQ,EAAE,CAAC;SACZ,CAAC;IACJ,CAAC;IAED,MAAM,MAAM,GACV,eAAe,CAAC,MAAM,KAAK,CAAC;QAC1B,CAAC,CAAC,EAAE,IAAI,EAAE,SAAS,EAAE;QACrB,CAAC,CAAC,EAAE,IAAI,EAAE,kBAAkB,EAAE,OAAO,EAAE,eAAe,EAAE,CAAC;IAE7D,MAAM,SAAS,GAAG,QAAQ,CAAC,SAA0D,CAAC;IACtF,IAAI,SAAS,KAAK,SAAS,IAAI,OAAO,QAAQ,CAAC,SAAS,KAAK,QAAQ,EAAE,CAAC;QACtE,OAAO;YACL,SAAS,EAAE,YAAY;YACvB,eAAe,EAAE,IAAI;YACrB,WAAW,EAAE,IAAI;YACjB,KAAK,EAAE;gBACL,6EAA6E;gBAC7E,0DAA0D;aAC3D;YACD,QAAQ,EAAE,CAAC;SACZ,CAAC;IACJ,CAAC;IAED,MAAM,SAAS,GAAG,WAAW,CAAC,QAAQ,CAAC,SAAS,EAAE,SAAS,EAAE,MAAM,CAAC,CAAC;IACrE,MAAM,SAAS,GAAG,SAAS,CAAC,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,OAAO,CAAC;IACvE,MAAM,QAAQ,GAAG,MAAM,eAAe,CAAC,SAAS,EAAE,MAAM,CAAC,CAAC;IAE1D,OAAO;QACL,SAAS;QACT,eAAe,EAAE,SAAS;QAC1B,WAAW,EAAE,QAAQ;QACrB,KAAK,EAAE;YACL,eAAe,SAAS,uCACtB,SAAS,KAAK,OAAO,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,iBACvC,GAAG;YACH,eAAe,SAAS,CAAC,MAAM,EAAE;YACjC,eAAe,SAAS,CAAC,MAAM,EAAE;YACjC,gBAAgB,SAAS,CAAC,WAAW,EAAE;YACvC,QAAQ,KAAK,IAAI;gBACf,CAAC,CAAC,sFAAsF;oBACtF,8DAA8D;gBAChE,CAAC,CAAC,gBAAgB,QAAQ,CAAC,SAAS,YAAY,QAAQ,CAAC,MAAM,IAAI;oBACjE,2BAA2B,MAAM,CAAC,QAAQ,CAAC,SAAS,EAAE,OAAO,CAAC,CAAC,CAAC,EAAE,MAAM,CAAC,MAAM,IAAI,GAAG,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,IAAI;oBACxG,aAAa,MAAM,CAAC,QAAQ,CAAC,SAAS,EAAE,SAAS,CAAC,YAAY,IAAI,GAAG,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,GAAG;YAC1F,GAAG,CAAC,SAAS,CAAC,MAAM,KAAK,SAAS;gBAChC,CAAC,CAAC,EAAE;gBACJ,CAAC,CAAC;oBACE,EAAE;oBACF,oFAAoF;oBACpF,oFAAoF;iBACrF,CAAC;SACP;QACD,QAAQ,EAAE,SAAS,CAAC,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;KACjD,CAAC;AACJ,CAAC;AAED;;;;GAIG;AACH,KAAK,UAAU,eAAe,CAC5B,SAAiB,EACjB,MAAmB;IAEnB,IAAI,CAAC;QACH,MAAM,QAAQ,GAAG,IAAI,CAAC,KAAK,CACzB,MAAM,QAAQ,CAAC,IAAI,CAAC,SAAS,EAAE,eAAe,CAAC,WAAW,CAAC,EAAE,MAAM,CAAC,CACrE,CAAC;QACF,OAAO,iBAAiB,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC;IAC7C,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC"}
+{"version":3,"file":"verify-report.js","sourceRoot":"","sources":["../../src/evidence/verify-report.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,MAAM,kBAAkB,CAAC;AAC5C,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AACjC,OAAO,EAA6B,kBAAkB,EAAE,iBAAiB,EAAE,MAAM,kBAAkB,CAAC;AACpG,OAAO,EAAE,eAAe,EAAE,oBAAoB,EAAE,MAAM,sBAAsB,CAAC;AAC7E,OAAO,EAAE,WAAW,EAA0C,MAAM,mBAAmB,CAAC;AACxF,OAAO,EAAE,cAAc,EAAE,MAAM,yBAAyB,CAAC;AACzD,OAAO,EAAE,YAAY,EAAE,MAAM,uBAAuB,CAAC;AAYrD;;;;GAIG;AACH,MAAM,CAAC,KAAK,UAAU,cAAc,CAClC,SAAiB,EACjB,eAAkC;IAElC,IAAI,QAAqD,CAAC;IAC1D,IAAI,CAAC;QACH,QAAQ,GAAG,oBAAoB,CAAC,KAAK,CACnC,IAAI,CAAC,KAAK,CAAC,MAAM,QAAQ,CAAC,IAAI,CAAC,SAAS,EAAE,eAAe,CAAC,QAAQ,CAAC,EAAE,MAAM,CAAC,CAAC,CAC9E,CAAC;IACJ,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,OAAO;YACL,SAAS,EAAE,YAAY;YACvB,eAAe,EAAE,IAAI;YACrB,WAAW,EAAE,IAAI;YACjB,KAAK,EAAE;gBACL,2BAA2B,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,GAAG;gBACpF,yEAAyE;aAC1E;YACD,QAAQ,EAAE,CAAC;SACZ,CAAC;IACJ,CAAC;IAED,MAAM,MAAM,GACV,eAAe,CAAC,MAAM,KAAK,CAAC;QAC1B,CAAC,CAAC,EAAE,IAAI,EAAE,SAAS,EAAE;QACrB,CAAC,CAAC,EAAE,IAAI,EAAE,kBAAkB,EAAE,OAAO,EAAE,eAAe,EAAE,CAAC;IAE7D,MAAM,SAAS,GAAG,QAAQ,CAAC,SAA0D,CAAC;IACtF,IAAI,SAAS,KAAK,SAAS,IAAI,OAAO,QAAQ,CAAC,SAAS,KAAK,QAAQ,EAAE,CAAC;QACtE,OAAO;YACL,SAAS,EAAE,YAAY;YACvB,eAAe,EAAE,IAAI;YACrB,WAAW,EAAE,IAAI;YACjB,KAAK,EAAE;gBACL,6EAA6E;gBAC7E,0DAA0D;aAC3D;YACD,QAAQ,EAAE,CAAC;SACZ,CAAC;IACJ,CAAC;IAED,MAAM,SAAS,GAAG,WAAW,CAAC,QAAQ,CAAC,SAAS,EAAE,SAAS,EAAE,MAAM,CAAC,CAAC;IACrE,MAAM,MAAM,GAAa,EAAE,CAAC;IAC5B,IAAI,QAAQ,GAAG,KAAK,CAAC;IACrB,IAAI,CAAC;QACH,QAAQ,GAAG,YAAY,CAAC,SAAS,EAAE,CAAC,IAAI,EAAE,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,KAAK,CAAC,CAAC;QACtE,IAAI,QAAQ;YAAE,QAAQ,GAAG,cAAc,CAAC,SAAS,EAAE,CAAC,IAAI,EAAE,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,KAAK,CAAC,CAAC;IACxF,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,MAAM,CAAC,IAAI,CAAC,wBAAwB,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;IAChG,CAAC;IACD,MAAM,QAAQ,GAAG,MAAM,eAAe,CAAC,SAAS,EAAE,MAAM,CAAC,CAAC;IAC1D,MAAM,SAAS,GACb,QAAQ,IAAI,SAAS,CAAC,MAAM,KAAK,SAAS,IAAI,QAAQ,EAAE,SAAS,KAAK,SAAS;QAC7E,CAAC,CAAC,OAAO;QACT,CAAC,CAAC,SAAS,CAAC;IAEhB,OAAO;QACL,SAAS;QACT,eAAe,EAAE,SAAS;QAC1B,WAAW,EAAE,QAAQ;QACrB,KAAK,EAAE;YACL,eAAe,SAAS,0EAA0E;YAClG,GAAG,MAAM;YACT,eAAe,SAAS,CAAC,MAAM,EAAE;YACjC,eAAe,SAAS,CAAC,MAAM,EAAE;YACjC,gBAAgB,SAAS,CAAC,WAAW,EAAE;YACvC,QAAQ,KAAK,IAAI;gBACf,CAAC,CAAC,sFAAsF;oBACtF,8DAA8D;gBAChE,CAAC,CAAC,gBAAgB,QAAQ,CAAC,SAAS,YAAY,QAAQ,CAAC,MAAM,IAAI;oBACjE,2BAA2B,MAAM,CAAC,QAAQ,CAAC,SAAS,EAAE,OAAO,CAAC,CAAC,CAAC,EAAE,MAAM,CAAC,MAAM,IAAI,GAAG,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,IAAI;oBACxG,aAAa,MAAM,CAAC,QAAQ,CAAC,SAAS,EAAE,SAAS,CAAC,YAAY,IAAI,GAAG,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,GAAG;YAC1F,GAAG,CAAC,SAAS,CAAC,MAAM,KAAK,SAAS;gBAChC,CAAC,CAAC,EAAE;gBACJ,CAAC,CAAC;oBACE,EAAE;oBACF,oFAAoF;oBACpF,oFAAoF;iBACrF,CAAC;SACP;QACD,QAAQ,EAAE,SAAS,KAAK,OAAO,IAAI,SAAS,CAAC,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;KAC1E,CAAC;AACJ,CAAC;AAED;;;;GAIG;AACH,KAAK,UAAU,eAAe,CAC5B,SAAiB,EACjB,MAAmB;IAEnB,IAAI,CAAC;QACH,MAAM,QAAQ,GAAG,IAAI,CAAC,KAAK,CACzB,MAAM,QAAQ,CAAC,IAAI,CAAC,SAAS,EAAE,eAAe,CAAC,WAAW,CAAC,EAAE,MAAM,CAAC,CACrE,CAAC;QACF,OAAO,iBAAiB,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC;IAC7C,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,OAAQ,KAA+B,CAAC,IAAI,KAAK,QAAQ;YACvD,CAAC,CAAC,IAAI;YACN,CAAC,CAAC,kBAAkB,CAAC,kCAAkC,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;IAC5E,CAAC;AACH,CAAC"}

package/dist/exec/child-environment.js

@@ -72,6 +72,10 @@ export function childEnvironment(inherited, options) {
         }
     }
     const variables = {
+        COREPACK_ENABLE_NETWORK: "0",
+        COREPACK_ENABLE_DOWNLOAD_PROMPT: "0",
+        COREPACK_ENABLE_AUTO_PIN: "0",
+        UV_PYTHON_DOWNLOADS: "never",
         HOME: options.homeDir,
         // The system scratch directory, which exists and holds no credential. A TMPDIR naming a
         // directory that is not there does not fail loudly: node's test runner writes a zero-byte
@@ -96,6 +100,42 @@ export function childEnvironment(inherited, options) {
     }
     return { variables, withheld };
 }
+/**
+ * The one name under `NODE_` an overlay may carry: where node writes its coverage artifact.
+ *
+ * It decides where the process writes, never what it loads, and the directory is one the harness
+ * named outside the workspace. The blanket refusal of the rest of the family stays, because that
+ * family is where a preload arrives under whatever spelling comes next.
+ */
+const coverageDestinationName = "NODE_V8_COVERAGE";
+/**
+ * One command's own additions to the environment the harness built for it.
+ *
+ * A measurement sometimes needs a name the run as a whole has no business carrying: the oracle's
+ * reach is read from a coverage artifact, and the runner that writes it is told where by an
+ * environment name rather than by a flag. The overlay is where that name goes, and it is held to
+ * the same refusals as an authorized pass-through, so a caller cannot put back through it what
+ * the build withheld. Refused rather than filtered: a name dropped quietly is a measurement taken
+ * under conditions nobody declared.
+ */
+export function overlaidEnvironment(built, overlay) {
+    const overlaid = { ...built };
+    for (const [name, value] of Object.entries(overlay)) {
+        const folded = name.toUpperCase();
+        if (folded !== coverageDestinationName &&
+            (nodeLoaderNames.has(folded) || folded.startsWith("NODE_"))) {
+            throw new UnauthorizableEnvironmentName(name, "it decides what node loads");
+        }
+        if (preloadNames.has(folded)) {
+            throw new UnauthorizableEnvironmentName(name, "it decides what any process loads");
+        }
+        if (isCredentialName(name)) {
+            throw new UnauthorizableEnvironmentName(name, "it is a credential name");
+        }
+        overlaid[name] = value;
+    }
+    return overlaid;
+}
 /**
  * The environment for a child process the harness itself spawns: a gate command, the embedded
  * verifier, a merge-queue check. One place decides it, because a second copy is how one arm

package/dist/exec/child-environment.js.map

@@ -1 +1 @@
-{"version":3,"file":"child-environment.js","sourceRoot":"","sources":["../../src/exec/child-environment.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,SAAS,EAAE,MAAM,SAAS,CAAC;AACpC,OAAO,EAAE,MAAM,EAAE,MAAM,SAAS,CAAC;AACjC,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AACjC,OAAO,EAAE,gBAAgB,EAAE,MAAM,sBAAsB,CAAC;AAExD;;;;;;;;GAQG;AACH,MAAM,aAAa,GAAwB,IAAI,GAAG,CAAC;IACjD,MAAM;IACN,MAAM;IACN,UAAU;IACV,QAAQ;IACR,UAAU;IACV,IAAI;IACJ,MAAM;CACP,CAAC,CAAC;AAEH;;;;GAIG;AACH,MAAM,eAAe,GAAwB,IAAI,GAAG,CAAC;IACnD,cAAc;IACd,WAAW;IACX,2BAA2B;IAC3B,qBAAqB;CACtB,CAAC,CAAC;AAEH;;;;;;GAMG;AACH,MAAM,YAAY,GAAwB,IAAI,GAAG,CAAC;IAChD,YAAY;IACZ,iBAAiB;IACjB,UAAU;IACV,uBAAuB;IACvB,mBAAmB;IACnB,qBAAqB;CACtB,CAAC,CAAC;AAiBH,kGAAkG;AAClG,MAAM,OAAO,6BAA8B,SAAQ,KAAK;IACtD,uDAAuD;IAC9C,YAAY,CAAS;IAE9B,YAAY,YAAoB,EAAE,MAAc;QAC9C,KAAK,CACH,GAAG,YAAY,yCAAyC,MAAM,IAAI;YAChE,wDAAwD,CAC3D,CAAC;QACF,IAAI,CAAC,IAAI,GAAG,+BAA+B,CAAC;QAC5C,IAAI,CAAC,YAAY,GAAG,YAAY,CAAC;IACnC,CAAC;CACF;AAED,MAAM,UAAU,gBAAgB,CAC9B,SAAuD,EACvD,OAAgC;IAEhC,MAAM,UAAU,GAAG,IAAI,GAAG,CAAC,OAAO,CAAC,WAAW,IAAI,EAAE,CAAC,CAAC;IACtD,KAAK,MAAM,IAAI,IAAI,UAAU,EAAE,CAAC;QAC9B,MAAM,MAAM,GAAG,IAAI,CAAC,WAAW,EAAE,CAAC;QAClC,IAAI,eAAe,CAAC,GAAG,CAAC,MAAM,CAAC,IAAI,MAAM,CAAC,UAAU,CAAC,OAAO,CAAC,EAAE,CAAC;YAC9D,MAAM,IAAI,6BAA6B,CAAC,IAAI,EAAE,4BAA4B,CAAC,CAAC;QAC9E,CAAC;QACD,IAAI,YAAY,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC;YAC7B,MAAM,IAAI,6BAA6B,CAAC,IAAI,EAAE,mCAAmC,CAAC,CAAC;QACrF,CAAC;QACD,IAAI,gBAAgB,CAAC,IAAI,CAAC,EAAE,CAAC;YAC3B,MAAM,IAAI,6BAA6B,CAAC,IAAI,EAAE,yBAAyB,CAAC,CAAC;QAC3E,CAAC;IACH,CAAC;IAED,MAAM,SAAS,GAA2B;QACxC,IAAI,EAAE,OAAO,CAAC,OAAO;QACrB,wFAAwF;QACxF,0FAA0F;QAC1F,2FAA2F;QAC3F,0BAA0B;QAC1B,MAAM,EAAE,OAAO,CAAC,MAAM,IAAI,MAAM,EAAE;KACnC,CAAC;IACF,MAAM,QAAQ,GAAa,EAAE,CAAC;IAE9B,KAAK,MAAM,CAAC,IAAI,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,SAAS,CAAC,EAAE,CAAC;QACtD,IAAI,KAAK,KAAK,SAAS,EAAE,CAAC;YACxB,SAAS;QACX,CAAC;QACD,IAAI,IAAI,KAAK,MAAM,IAAI,IAAI,KAAK,QAAQ,EAAE,CAAC;YACzC,8EAA8E;YAC9E,SAAS;QACX,CAAC;QACD,IAAI,aAAa,CAAC,GAAG,CAAC,IAAI,CAAC,WAAW,EAAE,CAAC,IAAI,UAAU,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC;YAClE,SAAS,CAAC,IAAI,CAAC,GAAG,KAAK,CAAC;YACxB,SAAS;QACX,CAAC;QACD,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IACtB,CAAC;IAED,OAAO,EAAE,SAAS,EAAE,QAAQ,EAAE,CAAC;AACjC,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,uBAAuB,CAAC,OAGvC;IACC,OAAO,gBAAgB,CAAC,OAAO,CAAC,GAAG,EAAE;QACnC,OAAO,EAAE,OAAO,EAAE,OAAO,IAAI,gBAAgB,EAAE;QAC/C,GAAG,CAAC,OAAO,EAAE,WAAW,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,WAAW,EAAE,OAAO,CAAC,WAAW,EAAE,CAAC;KACpF,CAAC,CAAC;AACL,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,gBAAgB;IAC9B,MAAM,IAAI,GAAG,IAAI,CAAC,MAAM,EAAE,EAAE,kBAAkB,CAAC,CAAC;IAChD,SAAS,CAAC,IAAI,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;IAClD,OAAO,IAAI,CAAC;AACd,CAAC"}
+{"version":3,"file":"child-environment.js","sourceRoot":"","sources":["../../src/exec/child-environment.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,SAAS,EAAE,MAAM,SAAS,CAAC;AACpC,OAAO,EAAE,MAAM,EAAE,MAAM,SAAS,CAAC;AACjC,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AACjC,OAAO,EAAE,gBAAgB,EAAE,MAAM,sBAAsB,CAAC;AAExD;;;;;;;;GAQG;AACH,MAAM,aAAa,GAAwB,IAAI,GAAG,CAAC;IACjD,MAAM;IACN,MAAM;IACN,UAAU;IACV,QAAQ;IACR,UAAU;IACV,IAAI;IACJ,MAAM;CACP,CAAC,CAAC;AAEH;;;;GAIG;AACH,MAAM,eAAe,GAAwB,IAAI,GAAG,CAAC;IACnD,cAAc;IACd,WAAW;IACX,2BAA2B;IAC3B,qBAAqB;CACtB,CAAC,CAAC;AAEH;;;;;;GAMG;AACH,MAAM,YAAY,GAAwB,IAAI,GAAG,CAAC;IAChD,YAAY;IACZ,iBAAiB;IACjB,UAAU;IACV,uBAAuB;IACvB,mBAAmB;IACnB,qBAAqB;CACtB,CAAC,CAAC;AAiBH,kGAAkG;AAClG,MAAM,OAAO,6BAA8B,SAAQ,KAAK;IACtD,uDAAuD;IAC9C,YAAY,CAAS;IAE9B,YAAY,YAAoB,EAAE,MAAc;QAC9C,KAAK,CACH,GAAG,YAAY,yCAAyC,MAAM,IAAI;YAChE,wDAAwD,CAC3D,CAAC;QACF,IAAI,CAAC,IAAI,GAAG,+BAA+B,CAAC;QAC5C,IAAI,CAAC,YAAY,GAAG,YAAY,CAAC;IACnC,CAAC;CACF;AAED,MAAM,UAAU,gBAAgB,CAC9B,SAAuD,EACvD,OAAgC;IAEhC,MAAM,UAAU,GAAG,IAAI,GAAG,CAAC,OAAO,CAAC,WAAW,IAAI,EAAE,CAAC,CAAC;IACtD,KAAK,MAAM,IAAI,IAAI,UAAU,EAAE,CAAC;QAC9B,MAAM,MAAM,GAAG,IAAI,CAAC,WAAW,EAAE,CAAC;QAClC,IAAI,eAAe,CAAC,GAAG,CAAC,MAAM,CAAC,IAAI,MAAM,CAAC,UAAU,CAAC,OAAO,CAAC,EAAE,CAAC;YAC9D,MAAM,IAAI,6BAA6B,CAAC,IAAI,EAAE,4BAA4B,CAAC,CAAC;QAC9E,CAAC;QACD,IAAI,YAAY,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC;YAC7B,MAAM,IAAI,6BAA6B,CAAC,IAAI,EAAE,mCAAmC,CAAC,CAAC;QACrF,CAAC;QACD,IAAI,gBAAgB,CAAC,IAAI,CAAC,EAAE,CAAC;YAC3B,MAAM,IAAI,6BAA6B,CAAC,IAAI,EAAE,yBAAyB,CAAC,CAAC;QAC3E,CAAC;IACH,CAAC;IAED,MAAM,SAAS,GAA2B;QACxC,uBAAuB,EAAE,GAAG;QAC5B,+BAA+B,EAAE,GAAG;QACpC,wBAAwB,EAAE,GAAG;QAC7B,mBAAmB,EAAE,OAAO;QAC5B,IAAI,EAAE,OAAO,CAAC,OAAO;QACrB,wFAAwF;QACxF,0FAA0F;QAC1F,2FAA2F;QAC3F,0BAA0B;QAC1B,MAAM,EAAE,OAAO,CAAC,MAAM,IAAI,MAAM,EAAE;KACnC,CAAC;IACF,MAAM,QAAQ,GAAa,EAAE,CAAC;IAE9B,KAAK,MAAM,CAAC,IAAI,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,SAAS,CAAC,EAAE,CAAC;QACtD,IAAI,KAAK,KAAK,SAAS,EAAE,CAAC;YACxB,SAAS;QACX,CAAC;QACD,IAAI,IAAI,KAAK,MAAM,IAAI,IAAI,KAAK,QAAQ,EAAE,CAAC;YACzC,8EAA8E;YAC9E,SAAS;QACX,CAAC;QACD,IAAI,aAAa,CAAC,GAAG,CAAC,IAAI,CAAC,WAAW,EAAE,CAAC,IAAI,UAAU,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC;YAClE,SAAS,CAAC,IAAI,CAAC,GAAG,KAAK,CAAC;YACxB,SAAS;QACX,CAAC;QACD,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IACtB,CAAC;IAED,OAAO,EAAE,SAAS,EAAE,QAAQ,EAAE,CAAC;AACjC,CAAC;AAED;;;;;;GAMG;AACH,MAAM,uBAAuB,GAAG,kBAAkB,CAAC;AAEnD;;;;;;;;;GASG;AACH,MAAM,UAAU,mBAAmB,CACjC,KAAuC,EACvC,OAAyC;IAEzC,MAAM,QAAQ,GAAG,EAAE,GAAG,KAAK,EAAE,CAAC;IAC9B,KAAK,MAAM,CAAC,IAAI,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,OAAO,CAAC,EAAE,CAAC;QACpD,MAAM,MAAM,GAAG,IAAI,CAAC,WAAW,EAAE,CAAC;QAClC,IACE,MAAM,KAAK,uBAAuB;YAClC,CAAC,eAAe,CAAC,GAAG,CAAC,MAAM,CAAC,IAAI,MAAM,CAAC,UAAU,CAAC,OAAO,CAAC,CAAC,EAC3D,CAAC;YACD,MAAM,IAAI,6BAA6B,CAAC,IAAI,EAAE,4BAA4B,CAAC,CAAC;QAC9E,CAAC;QACD,IAAI,YAAY,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC;YAC7B,MAAM,IAAI,6BAA6B,CAAC,IAAI,EAAE,mCAAmC,CAAC,CAAC;QACrF,CAAC;QACD,IAAI,gBAAgB,CAAC,IAAI,CAAC,EAAE,CAAC;YAC3B,MAAM,IAAI,6BAA6B,CAAC,IAAI,EAAE,yBAAyB,CAAC,CAAC;QAC3E,CAAC;QACD,QAAQ,CAAC,IAAI,CAAC,GAAG,KAAK,CAAC;IACzB,CAAC;IACD,OAAO,QAAQ,CAAC;AAClB,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,uBAAuB,CAAC,OAGvC;IACC,OAAO,gBAAgB,CAAC,OAAO,CAAC,GAAG,EAAE;QACnC,OAAO,EAAE,OAAO,EAAE,OAAO,IAAI,gBAAgB,EAAE;QAC/C,GAAG,CAAC,OAAO,EAAE,WAAW,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,WAAW,EAAE,OAAO,CAAC,WAAW,EAAE,CAAC;KACpF,CAAC,CAAC;AACL,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,gBAAgB;IAC9B,MAAM,IAAI,GAAG,IAAI,CAAC,MAAM,EAAE,EAAE,kBAAkB,CAAC,CAAC;IAChD,SAAS,CAAC,IAAI,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;IAClD,OAAO,IAAI,CAAC;AACd,CAAC"}

package/dist/exec/container-backend.js

@@ -1,45 +1,141 @@
 import { execFileSync } from "node:child_process";
+import { randomUUID } from "node:crypto";
+import { lstat, realpath } from "node:fs/promises";
+import { isAbsolute, relative } from "node:path";
+import { overlaidEnvironment } from "./child-environment.js";
+import { containerImageSchema } from "./container-image.js";
 import { runProcessGroup } from "./run-process.js";
 const workspaceMountPoint = "/workspace";
+const environmentNames = ["LANG", "TZ", "PLAYWRIGHT_BROWSERS_PATH"];
 export function createContainerBackend(options) {
+    containerImageSchema.parse(options.image);
     return {
         name: `${options.runtime}:${options.image}`,
         nodeProgram: "node",
-        run: (argv, runOptions) => runProcessGroup(options.runtime, [
-            "run",
-            "--rm",
-            // No network at all unless a run explicitly asked for one, which is an approval and
-            // not a default: a command that can reach the internet can exfiltrate what it read.
-            `--network=${options.network ?? "none"}`,
-            // The image's own filesystem is read-only. Only the mounts below can be written.
-            "--read-only",
-            `--volume=${options.workspaceRoot}:${workspaceMountPoint}:rw`,
-            // Somewhere to write that is not the workspace and does not survive the run.
-            "--tmpfs=/tmp:rw,size=256m",
-            `--workdir=${workspaceMountPoint}`,
-            `--user=${options.user}`,
-            "--cap-drop=ALL",
-            // Stops a process gaining privileges through a setuid binary in the image.
-            "--security-opt=no-new-privileges",
-            `--memory=${options.memory ?? "2g"}`,
-            `--pids-limit=${options.processLimit ?? 256}`,
-            // A shell inside the container would re-read the arguments; there is none, and the
-            // vector below is the process, argument for argument.
-            "--entrypoint",
-            argv[0] ?? "true",
-            options.image,
-            ...argv.slice(1),
-        ], {
-            cwd: runOptions.cwd,
-            // The runtime client needs PATH and its own configuration directory to find the
-            // daemon; nothing from here reaches the container, which gets the image's own.
-            env: {
-                PATH: process.env.PATH ?? "",
-                ...(process.env.HOME === undefined ? {} : { HOME: process.env.HOME }),
-            },
-            timeoutMs: runOptions.timeoutMs,
-            maxOutputBytes: 4_000_000,
-        }),
+        protectsReadOnlyFiles: true,
+        immutableRuntime: true,
+        environmentNames,
+        run: async (argv, runOptions) => {
+            const execute = options.runProcess ?? runProcessGroup;
+            const subdirectory = relative(options.workspaceRoot, runOptions.cwd);
+            if (subdirectory.startsWith("..") || isAbsolute(subdirectory)) {
+                return {
+                    stdout: "",
+                    stderr: "",
+                    exitCode: 127,
+                    timedOut: false,
+                    cancelled: false,
+                    truncated: false,
+                    startFailure: "requested directory is outside the backend workspace; create a backend for this checkout",
+                };
+            }
+            if (runOptions.signal?.aborted) {
+                return {
+                    stdout: "",
+                    stderr: "cancelled before container creation",
+                    exitCode: 128,
+                    timedOut: false,
+                    cancelled: true,
+                    truncated: false,
+                    startFailure: null,
+                };
+            }
+            const overlay = runOptions.environment ?? {};
+            if (Object.keys(overlay).some((name) => !environmentNames.includes(name)))
+                throw new Error("container backend does not support the requested environment overlay");
+            const variables = overlaidEnvironment({
+                PATH: "/usr/local/bin:/usr/bin:/bin",
+                HOME: "/tmp",
+                TMPDIR: "/tmp",
+                COREPACK_ENABLE_NETWORK: "0",
+                COREPACK_ENABLE_DOWNLOAD_PROMPT: "0",
+                COREPACK_ENABLE_AUTO_PIN: "0",
+                UV_PYTHON_DOWNLOADS: "never",
+            }, overlay);
+            const readOnlyMounts = [];
+            for (const file of runOptions.readOnlyFiles ?? []) {
+                const path = relative(options.workspaceRoot, file);
+                if (path.startsWith("..") ||
+                    isAbsolute(path) ||
+                    /[:,\r\n]/.test(file) ||
+                    !(await lstat(file)).isFile() ||
+                    (await realpath(file)) !== file)
+                    throw new Error("read-only acceptance file must be an ordinary file inside the checkout");
+                readOnlyMounts.push(`--volume=${file}:${workspaceMountPoint}/${path}:ro`);
+            }
+            const deadline = Date.now() + runOptions.timeoutMs;
+            const identity = `swarm-${randomUUID()}`;
+            const runtimeOptions = {
+                cwd: options.workspaceRoot,
+                env: containerClientEnvironment(),
+                timeoutMs: 15_000,
+                maxOutputBytes: 4_000_000,
+            };
+            await options.observeLifecycle?.({ identity, phase: "create-intent" });
+            let ran;
+            let cleanupFailure = null;
+            let creationUncertain = false;
+            try {
+                const created = await execute(options.runtime, [
+                    "create",
+                    ...(runOptions.stdin === undefined ? [] : ["--interactive"]),
+                    `--name=${identity}`,
+                    "--label=dev.swarm.runtime=true",
+                    ...(options.sessionId === undefined
+                        ? []
+                        : [`--label=dev.swarm.session=${options.sessionId}`]),
+                    `--network=${options.network ?? "none"}`,
+                    "--read-only",
+                    `--volume=${options.workspaceRoot}:${workspaceMountPoint}:rw`,
+                    ...readOnlyMounts,
+                    "--tmpfs=/tmp:rw,size=256m",
+                    `--workdir=${workspaceMountPoint}${subdirectory ? `/${subdirectory}` : ""}`,
+                    `--user=${options.user}`,
+                    "--cap-drop=ALL",
+                    "--security-opt=no-new-privileges",
+                    `--memory=${options.memory ?? "2g"}`,
+                    `--pids-limit=${options.processLimit ?? 256}`,
+                    "--entrypoint",
+                    "/usr/bin/env",
+                    options.image,
+                    "-i",
+                    ...Object.entries(variables).map(([name, value]) => `${name}=${value}`),
+                    ...argv.map((argument, index) => index === 0 && argument === process.execPath ? "node" : argument),
+                ], { ...runtimeOptions, timeoutMs: runOptions.timeoutMs });
+                creationUncertain = created.timedOut || created.startFailure !== null;
+                if (created.exitCode === 0)
+                    await options.observeLifecycle?.({ identity, phase: "created" });
+                ran =
+                    created.exitCode === 0
+                        ? await execute(options.runtime, [
+                            "start",
+                            "--attach",
+                            ...(runOptions.stdin === undefined ? [] : ["--interactive"]),
+                            identity,
+                        ], {
+                            ...runtimeOptions,
+                            timeoutMs: Math.max(0, deadline - Date.now()),
+                            signal: runOptions.signal,
+                            ...(runOptions.stdin === undefined ? {} : { stdin: runOptions.stdin }),
+                            maxOutputBytes: runOptions.maxOutputBytes ?? runtimeOptions.maxOutputBytes,
+                        })
+                        : created;
+            }
+            finally {
+                await execute(options.runtime, ["rm", "--force", identity], runtimeOptions);
+                const inspected = await execute(options.runtime, ["ps", "--all", "--quiet", "--filter", `name=^/${identity}$`], runtimeOptions);
+                const removed = !creationUncertain && inspected.exitCode === 0 && inspected.stdout.trim() === "";
+                await options.observeLifecycle?.({
+                    identity,
+                    phase: removed ? "removed" : "cleanup-failed",
+                });
+                if (!removed)
+                    cleanupFailure = new Error(`container ${identity} cleanup could not be confirmed; stop dispatch and repair this runtime resource`);
+            }
+            if (cleanupFailure !== null)
+                throw cleanupFailure;
+            return ran;
+        },
     };
 }
 /** Whether the runtime is installed and answering, checked once rather than at the first run. */
@@ -55,4 +151,11 @@ export function containerRuntimeAvailable(runtime) {
         return false;
     }
 }
+/** Runtime administration may read its own configuration; workspace children receive a separate environment. */
+export function containerClientEnvironment() {
+    return {
+        PATH: process.env.PATH ?? "",
+        ...(process.env.HOME === undefined ? {} : { HOME: process.env.HOME }),
+    };
+}
 //# sourceMappingURL=container-backend.js.map

package/dist/exec/container-backend.js.map

@@ -1 +1 @@
-{"version":3,"file":"container-backend.js","sourceRoot":"","sources":["../../src/exec/container-backend.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,YAAY,EAAE,MAAM,oBAAoB,CAAC;AAElD,OAAO,EAAE,eAAe,EAAE,MAAM,kBAAkB,CAAC;AAwBnD,MAAM,mBAAmB,GAAG,YAAY,CAAC;AAEzC,MAAM,UAAU,sBAAsB,CAAC,OAAgC;IACrE,OAAO;QACL,IAAI,EAAE,GAAG,OAAO,CAAC,OAAO,IAAI,OAAO,CAAC,KAAK,EAAE;QAC3C,WAAW,EAAE,MAAM;QACnB,GAAG,EAAE,CAAC,IAAI,EAAE,UAAU,EAAE,EAAE,CACxB,eAAe,CACb,OAAO,CAAC,OAAO,EACf;YACE,KAAK;YACL,MAAM;YACN,oFAAoF;YACpF,oFAAoF;YACpF,aAAa,OAAO,CAAC,OAAO,IAAI,MAAM,EAAE;YACxC,iFAAiF;YACjF,aAAa;YACb,YAAY,OAAO,CAAC,aAAa,IAAI,mBAAmB,KAAK;YAC7D,6EAA6E;YAC7E,2BAA2B;YAC3B,aAAa,mBAAmB,EAAE;YAClC,UAAU,OAAO,CAAC,IAAI,EAAE;YACxB,gBAAgB;YAChB,2EAA2E;YAC3E,kCAAkC;YAClC,YAAY,OAAO,CAAC,MAAM,IAAI,IAAI,EAAE;YACpC,gBAAgB,OAAO,CAAC,YAAY,IAAI,GAAG,EAAE;YAC7C,mFAAmF;YACnF,sDAAsD;YACtD,cAAc;YACd,IAAI,CAAC,CAAC,CAAC,IAAI,MAAM;YACjB,OAAO,CAAC,KAAK;YACb,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC;SACjB,EACD;YACE,GAAG,EAAE,UAAU,CAAC,GAAG;YACnB,gFAAgF;YAChF,+EAA+E;YAC/E,GAAG,EAAE;gBACH,IAAI,EAAE,OAAO,CAAC,GAAG,CAAC,IAAI,IAAI,EAAE;gBAC5B,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,OAAO,CAAC,GAAG,CAAC,IAAI,EAAE,CAAC;aACtE;YACD,SAAS,EAAE,UAAU,CAAC,SAAS;YAC/B,cAAc,EAAE,SAAS;SAC1B,CACF;KACJ,CAAC;AACJ,CAAC;AAED,iGAAiG;AACjG,MAAM,UAAU,yBAAyB,CAAC,OAAe;IACvD,IAAI,CAAC;QACH,YAAY,CAAC,OAAO,EAAE,CAAC,SAAS,EAAE,UAAU,EAAE,qBAAqB,CAAC,EAAE;YACpE,KAAK,EAAE,CAAC,QAAQ,EAAE,QAAQ,EAAE,QAAQ,CAAC;YACrC,OAAO,EAAE,MAAM;SAChB,CAAC,CAAC;QACH,OAAO,IAAI,CAAC;IACd,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,KAAK,CAAC;IACf,CAAC;AACH,CAAC"}
+{"version":3,"file":"container-backend.js","sourceRoot":"","sources":["../../src/exec/container-backend.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,YAAY,EAAE,MAAM,oBAAoB,CAAC;AAClD,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACzC,OAAO,EAAE,KAAK,EAAE,QAAQ,EAAE,MAAM,kBAAkB,CAAC;AACnD,OAAO,EAAE,UAAU,EAAE,QAAQ,EAAE,MAAM,WAAW,CAAC;AACjD,OAAO,EAAE,mBAAmB,EAAE,MAAM,wBAAwB,CAAC;AAC7D,OAAO,EAAE,oBAAoB,EAAE,MAAM,sBAAsB,CAAC;AAE5D,OAAO,EAAE,eAAe,EAAE,MAAM,kBAAkB,CAAC;AA8BnD,MAAM,mBAAmB,GAAG,YAAY,CAAC;AACzC,MAAM,gBAAgB,GAAG,CAAC,MAAM,EAAE,IAAI,EAAE,0BAA0B,CAAU,CAAC;AAE7E,MAAM,UAAU,sBAAsB,CAAC,OAAgC;IACrE,oBAAoB,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;IAC1C,OAAO;QACL,IAAI,EAAE,GAAG,OAAO,CAAC,OAAO,IAAI,OAAO,CAAC,KAAK,EAAE;QAC3C,WAAW,EAAE,MAAM;QACnB,qBAAqB,EAAE,IAAI;QAC3B,gBAAgB,EAAE,IAAI;QACtB,gBAAgB;QAChB,GAAG,EAAE,KAAK,EAAE,IAAI,EAAE,UAAU,EAAE,EAAE;YAC9B,MAAM,OAAO,GAAG,OAAO,CAAC,UAAU,IAAI,eAAe,CAAC;YACtD,MAAM,YAAY,GAAG,QAAQ,CAAC,OAAO,CAAC,aAAa,EAAE,UAAU,CAAC,GAAG,CAAC,CAAC;YACrE,IAAI,YAAY,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,UAAU,CAAC,YAAY,CAAC,EAAE,CAAC;gBAC9D,OAAO;oBACL,MAAM,EAAE,EAAE;oBACV,MAAM,EAAE,EAAE;oBACV,QAAQ,EAAE,GAAG;oBACb,QAAQ,EAAE,KAAK;oBACf,SAAS,EAAE,KAAK;oBAChB,SAAS,EAAE,KAAK;oBAChB,YAAY,EACV,0FAA0F;iBAC7F,CAAC;YACJ,CAAC;YACD,IAAI,UAAU,CAAC,MAAM,EAAE,OAAO,EAAE,CAAC;gBAC/B,OAAO;oBACL,MAAM,EAAE,EAAE;oBACV,MAAM,EAAE,qCAAqC;oBAC7C,QAAQ,EAAE,GAAG;oBACb,QAAQ,EAAE,KAAK;oBACf,SAAS,EAAE,IAAI;oBACf,SAAS,EAAE,KAAK;oBAChB,YAAY,EAAE,IAAI;iBACnB,CAAC;YACJ,CAAC;YACD,MAAM,OAAO,GAAG,UAAU,CAAC,WAAW,IAAI,EAAE,CAAC;YAC7C,IACE,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAE,gBAAsC,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC;gBAE5F,MAAM,IAAI,KAAK,CAAC,sEAAsE,CAAC,CAAC;YAC1F,MAAM,SAAS,GAAG,mBAAmB,CACnC;gBACE,IAAI,EAAE,8BAA8B;gBACpC,IAAI,EAAE,MAAM;gBACZ,MAAM,EAAE,MAAM;gBACd,uBAAuB,EAAE,GAAG;gBAC5B,+BAA+B,EAAE,GAAG;gBACpC,wBAAwB,EAAE,GAAG;gBAC7B,mBAAmB,EAAE,OAAO;aAC7B,EACD,OAAO,CACR,CAAC;YACF,MAAM,cAAc,GAAa,EAAE,CAAC;YACpC,KAAK,MAAM,IAAI,IAAI,UAAU,CAAC,aAAa,IAAI,EAAE,EAAE,CAAC;gBAClD,MAAM,IAAI,GAAG,QAAQ,CAAC,OAAO,CAAC,aAAa,EAAE,IAAI,CAAC,CAAC;gBACnD,IACE,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC;oBACrB,UAAU,CAAC,IAAI,CAAC;oBAChB,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC;oBACrB,CAAC,CAAC,MAAM,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,MAAM,EAAE;oBAC7B,CAAC,MAAM,QAAQ,CAAC,IAAI,CAAC,CAAC,KAAK,IAAI;oBAE/B,MAAM,IAAI,KAAK,CAAC,wEAAwE,CAAC,CAAC;gBAC5F,cAAc,CAAC,IAAI,CAAC,YAAY,IAAI,IAAI,mBAAmB,IAAI,IAAI,KAAK,CAAC,CAAC;YAC5E,CAAC;YACD,MAAM,QAAQ,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,UAAU,CAAC,SAAS,CAAC;YACnD,MAAM,QAAQ,GAAG,SAAS,UAAU,EAAE,EAAE,CAAC;YACzC,MAAM,cAAc,GAAG;gBACrB,GAAG,EAAE,OAAO,CAAC,aAAa;gBAC1B,GAAG,EAAE,0BAA0B,EAAE;gBACjC,SAAS,EAAE,MAAM;gBACjB,cAAc,EAAE,SAAS;aAC1B,CAAC;YACF,MAAM,OAAO,CAAC,gBAAgB,EAAE,CAAC,EAAE,QAAQ,EAAE,KAAK,EAAE,eAAe,EAAE,CAAC,CAAC;YACvE,IAAI,GAAgD,CAAC;YACrD,IAAI,cAAc,GAAiB,IAAI,CAAC;YACxC,IAAI,iBAAiB,GAAG,KAAK,CAAC;YAC9B,IAAI,CAAC;gBACH,MAAM,OAAO,GAAG,MAAM,OAAO,CAC3B,OAAO,CAAC,OAAO,EACf;oBACE,QAAQ;oBACR,GAAG,CAAC,UAAU,CAAC,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,eAAe,CAAC,CAAC;oBAC5D,UAAU,QAAQ,EAAE;oBACpB,gCAAgC;oBAChC,GAAG,CAAC,OAAO,CAAC,SAAS,KAAK,SAAS;wBACjC,CAAC,CAAC,EAAE;wBACJ,CAAC,CAAC,CAAC,6BAA6B,OAAO,CAAC,SAAS,EAAE,CAAC,CAAC;oBACvD,aAAa,OAAO,CAAC,OAAO,IAAI,MAAM,EAAE;oBACxC,aAAa;oBACb,YAAY,OAAO,CAAC,aAAa,IAAI,mBAAmB,KAAK;oBAC7D,GAAG,cAAc;oBACjB,2BAA2B;oBAC3B,aAAa,mBAAmB,GAAG,YAAY,CAAC,CAAC,CAAC,IAAI,YAAY,EAAE,CAAC,CAAC,CAAC,EAAE,EAAE;oBAC3E,UAAU,OAAO,CAAC,IAAI,EAAE;oBACxB,gBAAgB;oBAChB,kCAAkC;oBAClC,YAAY,OAAO,CAAC,MAAM,IAAI,IAAI,EAAE;oBACpC,gBAAgB,OAAO,CAAC,YAAY,IAAI,GAAG,EAAE;oBAC7C,cAAc;oBACd,cAAc;oBACd,OAAO,CAAC,KAAK;oBACb,IAAI;oBACJ,GAAG,MAAM,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,EAAE,KAAK,CAAC,EAAE,EAAE,CAAC,GAAG,IAAI,IAAI,KAAK,EAAE,CAAC;oBACvE,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,QAAQ,EAAE,KAAK,EAAE,EAAE,CAC9B,KAAK,KAAK,CAAC,IAAI,QAAQ,KAAK,OAAO,CAAC,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,QAAQ,CACjE;iBACF,EACD,EAAE,GAAG,cAAc,EAAE,SAAS,EAAE,UAAU,CAAC,SAAS,EAAE,CACvD,CAAC;gBACF,iBAAiB,GAAG,OAAO,CAAC,QAAQ,IAAI,OAAO,CAAC,YAAY,KAAK,IAAI,CAAC;gBACtE,IAAI,OAAO,CAAC,QAAQ,KAAK,CAAC;oBACxB,MAAM,OAAO,CAAC,gBAAgB,EAAE,CAAC,EAAE,QAAQ,EAAE,KAAK,EAAE,SAAS,EAAE,CAAC,CAAC;gBACnE,GAAG;oBACD,OAAO,CAAC,QAAQ,KAAK,CAAC;wBACpB,CAAC,CAAC,MAAM,OAAO,CACX,OAAO,CAAC,OAAO,EACf;4BACE,OAAO;4BACP,UAAU;4BACV,GAAG,CAAC,UAAU,CAAC,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,eAAe,CAAC,CAAC;4BAC5D,QAAQ;yBACT,EACD;4BACE,GAAG,cAAc;4BACjB,SAAS,EAAE,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,QAAQ,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;4BAC7C,MAAM,EAAE,UAAU,CAAC,MAAM;4BACzB,GAAG,CAAC,UAAU,CAAC,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,UAAU,CAAC,KAAK,EAAE,CAAC;4BACtE,cAAc,EAAE,UAAU,CAAC,cAAc,IAAI,cAAc,CAAC,cAAc;yBAC3E,CACF;wBACH,CAAC,CAAC,OAAO,CAAC;YAChB,CAAC;oBAAS,CAAC;gBACT,MAAM,OAAO,CAAC,OAAO,CAAC,OAAO,EAAE,CAAC,IAAI,EAAE,SAAS,EAAE,QAAQ,CAAC,EAAE,cAAc,CAAC,CAAC;gBAC5E,MAAM,SAAS,GAAG,MAAM,OAAO,CAC7B,OAAO,CAAC,OAAO,EACf,CAAC,IAAI,EAAE,OAAO,EAAE,SAAS,EAAE,UAAU,EAAE,UAAU,QAAQ,GAAG,CAAC,EAC7D,cAAc,CACf,CAAC;gBACF,MAAM,OAAO,GACX,CAAC,iBAAiB,IAAI,SAAS,CAAC,QAAQ,KAAK,CAAC,IAAI,SAAS,CAAC,MAAM,CAAC,IAAI,EAAE,KAAK,EAAE,CAAC;gBACnF,MAAM,OAAO,CAAC,gBAAgB,EAAE,CAAC;oBAC/B,QAAQ;oBACR,KAAK,EAAE,OAAO,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,gBAAgB;iBAC9C,CAAC,CAAC;gBACH,IAAI,CAAC,OAAO;oBACV,cAAc,GAAG,IAAI,KAAK,CACxB,aAAa,QAAQ,iFAAiF,CACvG,CAAC;YACN,CAAC;YACD,IAAI,cAAc,KAAK,IAAI;gBAAE,MAAM,cAAc,CAAC;YAClD,OAAO,GAAG,CAAC;QACb,CAAC;KACF,CAAC;AACJ,CAAC;AAED,iGAAiG;AACjG,MAAM,UAAU,yBAAyB,CAAC,OAAe;IACvD,IAAI,CAAC;QACH,YAAY,CAAC,OAAO,EAAE,CAAC,SAAS,EAAE,UAAU,EAAE,qBAAqB,CAAC,EAAE;YACpE,KAAK,EAAE,CAAC,QAAQ,EAAE,QAAQ,EAAE,QAAQ,CAAC;YACrC,OAAO,EAAE,MAAM;SAChB,CAAC,CAAC;QACH,OAAO,IAAI,CAAC;IACd,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,KAAK,CAAC;IACf,CAAC;AACH,CAAC;AAED,gHAAgH;AAChH,MAAM,UAAU,0BAA0B;IACxC,OAAO;QACL,IAAI,EAAE,OAAO,CAAC,GAAG,CAAC,IAAI,IAAI,EAAE;QAC5B,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,OAAO,CAAC,GAAG,CAAC,IAAI,EAAE,CAAC;KACtE,CAAC;AACJ,CAAC"}

package/dist/exec/container-image.js

@@ -0,0 +1,7 @@
+import { z } from "zod";
+/** Image identities cannot carry runtime options or shell syntax. */
+export const containerImageSchema = z
+    .string()
+    .max(512)
+    .regex(/^[A-Za-z0-9][A-Za-z0-9._/@:-]*$/, "use a container image reference, not options or shell syntax");
+//# sourceMappingURL=container-image.js.map

package/dist/exec/container-image.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"container-image.js","sourceRoot":"","sources":["../../src/exec/container-image.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB,qEAAqE;AACrE,MAAM,CAAC,MAAM,oBAAoB,GAAG,CAAC;KAClC,MAAM,EAAE;KACR,GAAG,CAAC,GAAG,CAAC;KACR,KAAK,CACJ,iCAAiC,EACjC,8DAA8D,CAC/D,CAAC"}

package/dist/exec/controlled-network.js

@@ -0,0 +1,39 @@
+import { randomUUID } from "node:crypto";
+import { createServer } from "node:net";
+import { networkInterfaces } from "node:os";
+/** A short-lived synthetic endpoint, closed before the containment self-test returns. */
+export async function controlledNetworkTarget() {
+    let address;
+    try {
+        address = Object.values(networkInterfaces())
+            .flat()
+            .find((entry) => entry?.family === "IPv4" && !entry.internal)?.address;
+    }
+    catch {
+        // Some hosts refuse enumeration. No reachable control means no network measurement.
+        return null;
+    }
+    if (address === undefined)
+        return null;
+    const challenge = randomUUID();
+    const listener = createServer((socket) => socket.end(challenge));
+    try {
+        await new Promise((resolve, reject) => {
+            listener.once("error", reject);
+            listener.listen(0, address, () => resolve());
+        });
+    }
+    catch {
+        return null;
+    }
+    const binding = listener.address();
+    if (binding === null || typeof binding === "string") {
+        listener.close();
+        return null;
+    }
+    return {
+        script: `const s=require("node:net").connect(${binding.port},${JSON.stringify(address)});let value="";s.setTimeout(2000);s.on("data",b=>value+=b);s.on("end",()=>{if(value===${JSON.stringify(challenge)})process.stdout.write("connected")});s.on("error",()=>{});s.on("timeout",()=>s.destroy());`,
+        close: () => new Promise((resolve) => listener.close(() => resolve())),
+    };
+}
+//# sourceMappingURL=controlled-network.js.map

package/dist/exec/controlled-network.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"controlled-network.js","sourceRoot":"","sources":["../../src/exec/controlled-network.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACzC,OAAO,EAAE,YAAY,EAAE,MAAM,UAAU,CAAC;AACxC,OAAO,EAAE,iBAAiB,EAAE,MAAM,SAAS,CAAC;AAE5C,yFAAyF;AACzF,MAAM,CAAC,KAAK,UAAU,uBAAuB;IAC3C,IAAI,OAA2B,CAAC;IAChC,IAAI,CAAC;QACH,OAAO,GAAG,MAAM,CAAC,MAAM,CAAC,iBAAiB,EAAE,CAAC;aACzC,IAAI,EAAE;aACN,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,EAAE,MAAM,KAAK,MAAM,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,EAAE,OAAO,CAAC;IAC3E,CAAC;IAAC,MAAM,CAAC;QACP,oFAAoF;QACpF,OAAO,IAAI,CAAC;IACd,CAAC;IACD,IAAI,OAAO,KAAK,SAAS;QAAE,OAAO,IAAI,CAAC;IACvC,MAAM,SAAS,GAAG,UAAU,EAAE,CAAC;IAC/B,MAAM,QAAQ,GAAG,YAAY,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC,CAAC;IACjE,IAAI,CAAC;QACH,MAAM,IAAI,OAAO,CAAO,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;YAC1C,QAAQ,CAAC,IAAI,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;YAC/B,QAAQ,CAAC,MAAM,CAAC,CAAC,EAAE,OAAO,EAAE,GAAG,EAAE,CAAC,OAAO,EAAE,CAAC,CAAC;QAC/C,CAAC,CAAC,CAAC;IACL,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;IACD,MAAM,OAAO,GAAG,QAAQ,CAAC,OAAO,EAAE,CAAC;IACnC,IAAI,OAAO,KAAK,IAAI,IAAI,OAAO,OAAO,KAAK,QAAQ,EAAE,CAAC;QACpD,QAAQ,CAAC,KAAK,EAAE,CAAC;QACjB,OAAO,IAAI,CAAC;IACd,CAAC;IACD,OAAO;QACL,MAAM,EAAE,uCAAuC,OAAO,CAAC,IAAI,IAAI,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,yFAAyF,IAAI,CAAC,SAAS,CAAC,SAAS,CAAC,4FAA4F;QACpS,KAAK,EAAE,GAAG,EAAE,CAAC,IAAI,OAAO,CAAO,CAAC,OAAO,EAAE,EAAE,CAAC,QAAQ,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,OAAO,EAAE,CAAC,CAAC;KAC7E,CAAC;AACJ,CAAC"}

package/dist/exec/execution-mode.js

@@ -1,5 +1,6 @@
 import { readFileSync } from "node:fs";
 import { childEnvironment, defaultChildHome } from "./child-environment.js";
+import { controlledNetworkTarget } from "./controlled-network.js";
 import { runProcessGroup } from "./run-process.js";
 /** The host, with nothing in front of it. What every run gets today. */
 export const hostExecutionBackend = {
@@ -22,6 +23,7 @@ export const hostExecutionBackend = {
             cwd: options.cwd,
             env: childEnvironment(process.env, { homeDir: defaultChildHome() }).variables,
             timeoutMs: options.timeoutMs,
+            signal: options.signal,
             maxOutputBytes: 64_000,
         });
     },
@@ -51,16 +53,10 @@ export async function selfTestContainment(backend, options) {
             // exit code called that an escape: the probe wrote somewhere, and somewhere is not here.
             landedOnHost: () => hostFileSays(writeTarget, "reached"),
         }),
-        runProbe(backend, options, timeoutMs, {
-            id: "network-egress",
-            attempted: "opening a network connection to a host outside the machine",
-            script: 'const s=require("node:net").connect(443,"example.com");' +
-                's.setTimeout(4000);s.on("connect",()=>{process.stdout.write("connected");s.destroy()});' +
-                's.on("error",()=>process.stderr.write("refused"));s.on("timeout",()=>{process.stderr.write("timed out");s.destroy()})',
-        }),
+        networkProbe(backend, options, timeoutMs),
     ]);
     const workspaceReachable = await canReachWorkspace(backend, options, timeoutMs);
-    const escaped = probes.filter((probe) => !probe.contained);
+    const escaped = probes.filter((probe) => probe.contained === false);
     // Reachability first. A backend that refused every escape because the command could see
     // nothing at all has measured nothing about containment, and saying `isolated` there would
     // be a pass earned by the work being impossible.
@@ -75,13 +71,16 @@ export async function selfTestContainment(backend, options) {
                 "cannot do the work. Check the mount before reading this as isolation.",
         };
     }
-    const mode = escaped.length === 0 ? "isolated" : "restricted";
-    const summary = escaped.length === 0
-        ? `${backend.name} refused every escape and still reached its workspace, so this run is isolated.`
-        : `${backend.name} has no kernel-enforced boundary in front of it: ${escaped
-            .map((probe) => probe.id)
-            .join(", ")} got through. Commands are ruled on by a lexical path and program ` +
-            "policy, which is a real check and is not a sandbox.";
+    const unknown = probes.some((probe) => probe.contained === null);
+    const mode = escaped.length > 0 ? "restricted" : unknown ? "unknown" : "isolated";
+    const summary = mode === "unknown"
+        ? `${backend.name} has incomplete containment measurements; inspect the unknown probes.`
+        : escaped.length === 0
+            ? `${backend.name} refused every escape and still reached its workspace, so this run is isolated.`
+            : `${backend.name} has no kernel-enforced boundary in front of it: ${escaped
+                .map((probe) => probe.id)
+                .join(", ")} got through. Commands are ruled on by a lexical path and program ` +
+                "policy, which is a real check and is not a sandbox.";
     return { backend: backend.name, mode, probes, workspaceReachable, summary };
 }
 /**
@@ -116,11 +115,11 @@ async function runProbe(backend, options, timeoutMs, probe) {
     // Contained means the attempt ran and did not succeed. A probe that could not start is not
     // evidence of containment: it is a probe that measured nothing, and reading it as
     // containment is how a backend comes to look isolated because its node was missing.
-    if (ran.startFailure !== null) {
+    if (ran.startFailure !== null || ran.cancelled || ran.timedOut) {
         return {
             id: probe.id,
             attempted: probe.attempted,
-            contained: false,
+            contained: null,
             observed: `the probe could not start (${ran.startFailure}), so nothing was shown`,
         };
     }
@@ -147,13 +146,17 @@ async function runProbe(backend, options, timeoutMs, probe) {
  * out from the absence of a warning that there was no boundary.
  */
 export function describeExecutionEnvelope(input) {
-    const networkEscaped = input.selfTest.probes.some((probe) => probe.id === "network-egress" && !probe.contained);
+    const networkProbe = input.selfTest.probes.find((probe) => probe.id === "network-egress");
     return {
         mode: input.selfTest.mode,
         backend: input.selfTest.backend,
         writablePaths: [input.workspaceRoot],
         readOnlyPaths: input.readOnlyPaths ?? [],
-        network: networkEscaped ? "unrestricted" : "denied",
+        network: networkProbe?.contained === true
+            ? "denied"
+            : networkProbe?.contained === false
+                ? "unrestricted"
+                : "unknown",
         environmentPolicy: "built",
         credentialNamesWithheld: input.withheldEnvironmentNames.length,
         repositoryConfigTrusted: input.repositoryConfigTrusted,
@@ -161,4 +164,28 @@ export function describeExecutionEnvelope(input) {
         summary: input.selfTest.summary,
     };
 }
+async function networkProbe(backend, options, timeoutMs) {
+    const target = await controlledNetworkTarget();
+    const unknown = {
+        id: "network-egress",
+        attempted: "connecting to a controlled host endpoint",
+        contained: null,
+        observed: "no matched reachable host control; network containment is unknown",
+    };
+    if (target === null)
+        return unknown;
+    try {
+        const control = await hostExecutionBackend.run([hostExecutionBackend.nodeProgram, "-e", target.script], { cwd: options.workspaceRoot, timeoutMs });
+        if (control.exitCode !== 0 || control.stdout !== "connected")
+            return unknown;
+        return await runProbe(backend, options, timeoutMs, {
+            id: "network-egress",
+            attempted: "connecting to the same controlled endpoint reached by the host control",
+            script: target.script,
+        });
+    }
+    finally {
+        await target.close();
+    }
+}
 //# sourceMappingURL=execution-mode.js.map

package/dist/exec/execution-mode.js.map

@@ -1 +1 @@
-{"version":3,"file":"execution-mode.js","sourceRoot":"","sources":["../../src/exec/execution-mode.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,YAAY,EAAE,MAAM,SAAS,CAAC;AACvC,OAAO,EAAE,gBAAgB,EAAE,gBAAgB,EAAE,MAAM,wBAAwB,CAAC;AAC5E,OAAO,EAAyB,eAAe,EAAE,MAAM,kBAAkB,CAAC;AAiE1E,wEAAwE;AACxE,MAAM,CAAC,MAAM,oBAAoB,GAAqB;IACpD,IAAI,EAAE,MAAM;IACZ,WAAW,EAAE,OAAO,CAAC,QAAQ;IAC7B,GAAG,EAAE,CAAC,IAAI,EAAE,OAAO,EAAE,EAAE;QACrB,MAAM,CAAC,OAAO,EAAE,GAAG,IAAI,CAAC,GAAG,IAAI,CAAC;QAChC,IAAI,OAAO,KAAK,SAAS,EAAE,CAAC;YAC1B,OAAO,OAAO,CAAC,OAAO,CAAC;gBACrB,MAAM,EAAE,EAAE;gBACV,MAAM,EAAE,EAAE;gBACV,QAAQ,EAAE,GAAG;gBACb,QAAQ,EAAE,KAAK;gBACf,SAAS,EAAE,KAAK;gBAChB,SAAS,EAAE,KAAK;gBAChB,YAAY,EAAE,sCAAsC;aACrD,CAAC,CAAC;QACL,CAAC;QACD,OAAO,eAAe,CAAC,OAAO,EAAE,IAAI,EAAE;YACpC,GAAG,EAAE,OAAO,CAAC,GAAG;YAChB,GAAG,EAAE,gBAAgB,CAAC,OAAO,CAAC,GAAG,EAAE,EAAE,OAAO,EAAE,gBAAgB,EAAE,EAAE,CAAC,CAAC,SAAS;YAC7E,SAAS,EAAE,OAAO,CAAC,SAAS;YAC5B,cAAc,EAAE,MAAM;SACvB,CAAC,CAAC;IACL,CAAC;CACF,CAAC;AAEF;;;;GAIG;AACH,MAAM,CAAC,KAAK,UAAU,mBAAmB,CACvC,OAAyB,EACzB,OAAwB;IAExB,MAAM,SAAS,GAAG,OAAO,CAAC,SAAS,IAAI,MAAM,CAAC;IAC9C,4FAA4F;IAC5F,sCAAsC;IACtC,MAAM,WAAW,GAAG,GAAG,OAAO,CAAC,wBAAwB,cAAc,CAAC;IACtE,MAAM,MAAM,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC;QAC/B,QAAQ,CAAC,OAAO,EAAE,OAAO,EAAE,SAAS,EAAE;YACpC,EAAE,EAAE,gBAAgB;YACpB,SAAS,EAAE,WAAW,OAAO,CAAC,wBAAwB,kCAAkC;YACxF,MAAM,EAAE,wDAAwD,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,wBAAwB,CAAC,YAAY;SAC7H,CAAC;QACF,QAAQ,CAAC,OAAO,EAAE,OAAO,EAAE,SAAS,EAAE;YACpC,EAAE,EAAE,iBAAiB;YACrB,SAAS,EAAE,WAAW,WAAW,kCAAkC;YACnE,MAAM,EAAE,oCAAoC,IAAI,CAAC,SAAS,CAAC,WAAW,CAAC,2CAA2C;YAClH,wFAAwF;YACxF,yFAAyF;YACzF,yFAAyF;YACzF,YAAY,EAAE,GAAG,EAAE,CAAC,YAAY,CAAC,WAAW,EAAE,SAAS,CAAC;SACzD,CAAC;QACF,QAAQ,CAAC,OAAO,EAAE,OAAO,EAAE,SAAS,EAAE;YACpC,EAAE,EAAE,gBAAgB;YACpB,SAAS,EAAE,4DAA4D;YACvE,MAAM,EACJ,yDAAyD;gBACzD,yFAAyF;gBACzF,uHAAuH;SAC1H,CAAC;KACH,CAAC,CAAC;IAEH,MAAM,kBAAkB,GAAG,MAAM,iBAAiB,CAAC,OAAO,EAAE,OAAO,EAAE,SAAS,CAAC,CAAC;IAChF,MAAM,OAAO,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC;IAE3D,wFAAwF;IACxF,2FAA2F;IAC3F,iDAAiD;IACjD,IAAI,CAAC,kBAAkB,EAAE,CAAC;QACxB,OAAO;YACL,OAAO,EAAE,OAAO,CAAC,IAAI;YACrB,IAAI,EAAE,SAAS;YACf,MAAM;YACN,kBAAkB;YAClB,OAAO,EACL,GAAG,OAAO,CAAC,IAAI,8DAA8D;gBAC7E,mFAAmF;gBACnF,uEAAuE;SAC1E,CAAC;IACJ,CAAC;IAED,MAAM,IAAI,GAAkB,OAAO,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,YAAY,CAAC;IAC7E,MAAM,OAAO,GACX,OAAO,CAAC,MAAM,KAAK,CAAC;QAClB,CAAC,CAAC,GAAG,OAAO,CAAC,IAAI,iFAAiF;QAClG,CAAC,CAAC,GAAG,OAAO,CAAC,IAAI,oDAAoD,OAAO;aACvE,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,EAAE,CAAC;aACxB,IAAI,CAAC,IAAI,CAAC,oEAAoE;YACjF,qDAAqD,CAAC;IAE5D,OAAO,EAAE,OAAO,EAAE,OAAO,CAAC,IAAI,EAAE,IAAI,EAAE,MAAM,EAAE,kBAAkB,EAAE,OAAO,EAAE,CAAC;AAC9E,CAAC;AAED;;;;GAIG;AACH,KAAK,UAAU,iBAAiB,CAC9B,OAAyB,EACzB,OAAwB,EACxB,SAAiB;IAEjB,MAAM,GAAG,GAAG,MAAM,OAAO,CAAC,GAAG,CAC3B;QACE,OAAO,CAAC,WAAW;QACnB,IAAI;QACJ,sFAAsF;YACpF,4EAA4E;YAC5E,4CAA4C;KAC/C,EACD,EAAE,GAAG,EAAE,OAAO,CAAC,aAAa,EAAE,SAAS,EAAE,CAC1C,CAAC;IACF,OAAO,GAAG,CAAC,QAAQ,KAAK,CAAC,IAAI,GAAG,CAAC,MAAM,CAAC,IAAI,EAAE,KAAK,SAAS,CAAC;AAC/D,CAAC;AAED,qFAAqF;AACrF,SAAS,YAAY,CAAC,IAAY,EAAE,QAAgB;IAClD,IAAI,CAAC;QACH,OAAO,YAAY,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC;IACvD,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,KAAK,CAAC;IACf,CAAC;AACH,CAAC;AAED,KAAK,UAAU,QAAQ,CACrB,OAAyB,EACzB,OAAwB,EACxB,SAAiB,EACjB,KAWC;IAED,MAAM,GAAG,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC,CAAC,OAAO,CAAC,WAAW,EAAE,IAAI,EAAE,KAAK,CAAC,MAAM,CAAC,EAAE;QACvE,GAAG,EAAE,OAAO,CAAC,aAAa;QAC1B,SAAS;KACV,CAAC,CAAC;IACH,2FAA2F;IAC3F,kFAAkF;IAClF,oFAAoF;IACpF,IAAI,GAAG,CAAC,YAAY,KAAK,IAAI,EAAE,CAAC;QAC9B,OAAO;YACL,EAAE,EAAE,KAAK,CAAC,EAAE;YACZ,SAAS,EAAE,KAAK,CAAC,SAAS;YAC1B,SAAS,EAAE,KAAK;YAChB,QAAQ,EAAE,8BAA8B,GAAG,CAAC,YAAY,yBAAyB;SAClF,CAAC;IACJ,CAAC;IACD,IAAI,KAAK,CAAC,YAAY,KAAK,SAAS,EAAE,CAAC;QACrC,MAAM,MAAM,GAAG,KAAK,CAAC,YAAY,EAAE,CAAC;QACpC,OAAO;YACL,EAAE,EAAE,KAAK,CAAC,EAAE;YACZ,SAAS,EAAE,KAAK,CAAC,SAAS;YAC1B,SAAS,EAAE,CAAC,MAAM;YAClB,QAAQ,EAAE,MAAM,CAAC,CAAC,CAAC,gDAAgD,CAAC,CAAC,CAAC,EAAE;SACzE,CAAC;IACJ,CAAC;IAED,MAAM,SAAS,GAAG,GAAG,CAAC,QAAQ,KAAK,CAAC,IAAI,GAAG,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC,MAAM,KAAK,CAAC,CAAC;IACvE,OAAO;QACL,EAAE,EAAE,KAAK,CAAC,EAAE;QACZ,SAAS,EAAE,KAAK,CAAC,SAAS;QAC1B,SAAS;QACT,QAAQ,EAAE,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,IAAI,EAAE;KAC7C,CAAC;AACJ,CAAC;AAiBD;;;;GAIG;AACH,MAAM,UAAU,yBAAyB,CAAC,KAMzC;IACC,MAAM,cAAc,GAAG,KAAK,CAAC,QAAQ,CAAC,MAAM,CAAC,IAAI,CAC/C,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,EAAE,KAAK,gBAAgB,IAAI,CAAC,KAAK,CAAC,SAAS,CAC7D,CAAC;IACF,OAAO;QACL,IAAI,EAAE,KAAK,CAAC,QAAQ,CAAC,IAAI;QACzB,OAAO,EAAE,KAAK,CAAC,QAAQ,CAAC,OAAO;QAC/B,aAAa,EAAE,CAAC,KAAK,CAAC,aAAa,CAAC;QACpC,aAAa,EAAE,KAAK,CAAC,aAAa,IAAI,EAAE;QACxC,OAAO,EAAE,cAAc,CAAC,CAAC,CAAC,cAAc,CAAC,CAAC,CAAC,QAAQ;QACnD,iBAAiB,EAAE,OAAO;QAC1B,uBAAuB,EAAE,KAAK,CAAC,wBAAwB,CAAC,MAAM;QAC9D,uBAAuB,EAAE,KAAK,CAAC,uBAAuB;QACtD,MAAM,EAAE,KAAK,CAAC,QAAQ,CAAC,MAAM;QAC7B,OAAO,EAAE,KAAK,CAAC,QAAQ,CAAC,OAAO;KAChC,CAAC;AACJ,CAAC"}
+{"version":3,"file":"execution-mode.js","sourceRoot":"","sources":["../../src/exec/execution-mode.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,YAAY,EAAE,MAAM,SAAS,CAAC;AACvC,OAAO,EAAE,gBAAgB,EAAE,gBAAgB,EAAE,MAAM,wBAAwB,CAAC;AAC5E,OAAO,EAAE,uBAAuB,EAAE,MAAM,yBAAyB,CAAC;AAClE,OAAO,EAAyB,eAAe,EAAE,MAAM,kBAAkB,CAAC;AA4E1E,wEAAwE;AACxE,MAAM,CAAC,MAAM,oBAAoB,GAAqB;IACpD,IAAI,EAAE,MAAM;IACZ,WAAW,EAAE,OAAO,CAAC,QAAQ;IAC7B,GAAG,EAAE,CAAC,IAAI,EAAE,OAAO,EAAE,EAAE;QACrB,MAAM,CAAC,OAAO,EAAE,GAAG,IAAI,CAAC,GAAG,IAAI,CAAC;QAChC,IAAI,OAAO,KAAK,SAAS,EAAE,CAAC;YAC1B,OAAO,OAAO,CAAC,OAAO,CAAC;gBACrB,MAAM,EAAE,EAAE;gBACV,MAAM,EAAE,EAAE;gBACV,QAAQ,EAAE,GAAG;gBACb,QAAQ,EAAE,KAAK;gBACf,SAAS,EAAE,KAAK;gBAChB,SAAS,EAAE,KAAK;gBAChB,YAAY,EAAE,sCAAsC;aACrD,CAAC,CAAC;QACL,CAAC;QACD,OAAO,eAAe,CAAC,OAAO,EAAE,IAAI,EAAE;YACpC,GAAG,EAAE,OAAO,CAAC,GAAG;YAChB,GAAG,EAAE,gBAAgB,CAAC,OAAO,CAAC,GAAG,EAAE,EAAE,OAAO,EAAE,gBAAgB,EAAE,EAAE,CAAC,CAAC,SAAS;YAC7E,SAAS,EAAE,OAAO,CAAC,SAAS;YAC5B,MAAM,EAAE,OAAO,CAAC,MAAM;YACtB,cAAc,EAAE,MAAM;SACvB,CAAC,CAAC;IACL,CAAC;CACF,CAAC;AAEF;;;;GAIG;AACH,MAAM,CAAC,KAAK,UAAU,mBAAmB,CACvC,OAAyB,EACzB,OAAwB;IAExB,MAAM,SAAS,GAAG,OAAO,CAAC,SAAS,IAAI,MAAM,CAAC;IAC9C,4FAA4F;IAC5F,sCAAsC;IACtC,MAAM,WAAW,GAAG,GAAG,OAAO,CAAC,wBAAwB,cAAc,CAAC;IACtE,MAAM,MAAM,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC;QAC/B,QAAQ,CAAC,OAAO,EAAE,OAAO,EAAE,SAAS,EAAE;YACpC,EAAE,EAAE,gBAAgB;YACpB,SAAS,EAAE,WAAW,OAAO,CAAC,wBAAwB,kCAAkC;YACxF,MAAM,EAAE,wDAAwD,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,wBAAwB,CAAC,YAAY;SAC7H,CAAC;QACF,QAAQ,CAAC,OAAO,EAAE,OAAO,EAAE,SAAS,EAAE;YACpC,EAAE,EAAE,iBAAiB;YACrB,SAAS,EAAE,WAAW,WAAW,kCAAkC;YACnE,MAAM,EAAE,oCAAoC,IAAI,CAAC,SAAS,CAAC,WAAW,CAAC,2CAA2C;YAClH,wFAAwF;YACxF,yFAAyF;YACzF,yFAAyF;YACzF,YAAY,EAAE,GAAG,EAAE,CAAC,YAAY,CAAC,WAAW,EAAE,SAAS,CAAC;SACzD,CAAC;QACF,YAAY,CAAC,OAAO,EAAE,OAAO,EAAE,SAAS,CAAC;KAC1C,CAAC,CAAC;IAEH,MAAM,kBAAkB,GAAG,MAAM,iBAAiB,CAAC,OAAO,EAAE,OAAO,EAAE,SAAS,CAAC,CAAC;IAChF,MAAM,OAAO,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,SAAS,KAAK,KAAK,CAAC,CAAC;IAEpE,wFAAwF;IACxF,2FAA2F;IAC3F,iDAAiD;IACjD,IAAI,CAAC,kBAAkB,EAAE,CAAC;QACxB,OAAO;YACL,OAAO,EAAE,OAAO,CAAC,IAAI;YACrB,IAAI,EAAE,SAAS;YACf,MAAM;YACN,kBAAkB;YAClB,OAAO,EACL,GAAG,OAAO,CAAC,IAAI,8DAA8D;gBAC7E,mFAAmF;gBACnF,uEAAuE;SAC1E,CAAC;IACJ,CAAC;IAED,MAAM,OAAO,GAAG,MAAM,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,SAAS,KAAK,IAAI,CAAC,CAAC;IACjE,MAAM,IAAI,GAAkB,OAAO,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,UAAU,CAAC;IACjG,MAAM,OAAO,GACX,IAAI,KAAK,SAAS;QAChB,CAAC,CAAC,GAAG,OAAO,CAAC,IAAI,uEAAuE;QACxF,CAAC,CAAC,OAAO,CAAC,MAAM,KAAK,CAAC;YACpB,CAAC,CAAC,GAAG,OAAO,CAAC,IAAI,iFAAiF;YAClG,CAAC,CAAC,GAAG,OAAO,CAAC,IAAI,oDAAoD,OAAO;iBACvE,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,EAAE,CAAC;iBACxB,IAAI,CAAC,IAAI,CAAC,oEAAoE;gBACjF,qDAAqD,CAAC;IAE9D,OAAO,EAAE,OAAO,EAAE,OAAO,CAAC,IAAI,EAAE,IAAI,EAAE,MAAM,EAAE,kBAAkB,EAAE,OAAO,EAAE,CAAC;AAC9E,CAAC;AAED;;;;GAIG;AACH,KAAK,UAAU,iBAAiB,CAC9B,OAAyB,EACzB,OAAwB,EACxB,SAAiB;IAEjB,MAAM,GAAG,GAAG,MAAM,OAAO,CAAC,GAAG,CAC3B;QACE,OAAO,CAAC,WAAW;QACnB,IAAI;QACJ,sFAAsF;YACpF,4EAA4E;YAC5E,4CAA4C;KAC/C,EACD,EAAE,GAAG,EAAE,OAAO,CAAC,aAAa,EAAE,SAAS,EAAE,CAC1C,CAAC;IACF,OAAO,GAAG,CAAC,QAAQ,KAAK,CAAC,IAAI,GAAG,CAAC,MAAM,CAAC,IAAI,EAAE,KAAK,SAAS,CAAC;AAC/D,CAAC;AAED,qFAAqF;AACrF,SAAS,YAAY,CAAC,IAAY,EAAE,QAAgB;IAClD,IAAI,CAAC;QACH,OAAO,YAAY,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC;IACvD,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,KAAK,CAAC;IACf,CAAC;AACH,CAAC;AAED,KAAK,UAAU,QAAQ,CACrB,OAAyB,EACzB,OAAwB,EACxB,SAAiB,EACjB,KAWC;IAED,MAAM,GAAG,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC,CAAC,OAAO,CAAC,WAAW,EAAE,IAAI,EAAE,KAAK,CAAC,MAAM,CAAC,EAAE;QACvE,GAAG,EAAE,OAAO,CAAC,aAAa;QAC1B,SAAS;KACV,CAAC,CAAC;IACH,2FAA2F;IAC3F,kFAAkF;IAClF,oFAAoF;IACpF,IAAI,GAAG,CAAC,YAAY,KAAK,IAAI,IAAI,GAAG,CAAC,SAAS,IAAI,GAAG,CAAC,QAAQ,EAAE,CAAC;QAC/D,OAAO;YACL,EAAE,EAAE,KAAK,CAAC,EAAE;YACZ,SAAS,EAAE,KAAK,CAAC,SAAS;YAC1B,SAAS,EAAE,IAAI;YACf,QAAQ,EAAE,8BAA8B,GAAG,CAAC,YAAY,yBAAyB;SAClF,CAAC;IACJ,CAAC;IACD,IAAI,KAAK,CAAC,YAAY,KAAK,SAAS,EAAE,CAAC;QACrC,MAAM,MAAM,GAAG,KAAK,CAAC,YAAY,EAAE,CAAC;QACpC,OAAO;YACL,EAAE,EAAE,KAAK,CAAC,EAAE;YACZ,SAAS,EAAE,KAAK,CAAC,SAAS;YAC1B,SAAS,EAAE,CAAC,MAAM;YAClB,QAAQ,EAAE,MAAM,CAAC,CAAC,CAAC,gDAAgD,CAAC,CAAC,CAAC,EAAE;SACzE,CAAC;IACJ,CAAC;IAED,MAAM,SAAS,GAAG,GAAG,CAAC,QAAQ,KAAK,CAAC,IAAI,GAAG,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC,MAAM,KAAK,CAAC,CAAC;IACvE,OAAO;QACL,EAAE,EAAE,KAAK,CAAC,EAAE;QACZ,SAAS,EAAE,KAAK,CAAC,SAAS;QAC1B,SAAS;QACT,QAAQ,EAAE,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,IAAI,EAAE;KAC7C,CAAC;AACJ,CAAC;AAiBD;;;;GAIG;AACH,MAAM,UAAU,yBAAyB,CAAC,KAMzC;IACC,MAAM,YAAY,GAAG,KAAK,CAAC,QAAQ,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,EAAE,KAAK,gBAAgB,CAAC,CAAC;IAC1F,OAAO;QACL,IAAI,EAAE,KAAK,CAAC,QAAQ,CAAC,IAAI;QACzB,OAAO,EAAE,KAAK,CAAC,QAAQ,CAAC,OAAO;QAC/B,aAAa,EAAE,CAAC,KAAK,CAAC,aAAa,CAAC;QACpC,aAAa,EAAE,KAAK,CAAC,aAAa,IAAI,EAAE;QACxC,OAAO,EACL,YAAY,EAAE,SAAS,KAAK,IAAI;YAC9B,CAAC,CAAC,QAAQ;YACV,CAAC,CAAC,YAAY,EAAE,SAAS,KAAK,KAAK;gBACjC,CAAC,CAAC,cAAc;gBAChB,CAAC,CAAC,SAAS;QACjB,iBAAiB,EAAE,OAAO;QAC1B,uBAAuB,EAAE,KAAK,CAAC,wBAAwB,CAAC,MAAM;QAC9D,uBAAuB,EAAE,KAAK,CAAC,uBAAuB;QACtD,MAAM,EAAE,KAAK,CAAC,QAAQ,CAAC,MAAM;QAC7B,OAAO,EAAE,KAAK,CAAC,QAAQ,CAAC,OAAO;KAChC,CAAC;AACJ,CAAC;AAED,KAAK,UAAU,YAAY,CACzB,OAAyB,EACzB,OAAwB,EACxB,SAAiB;IAEjB,MAAM,MAAM,GAAG,MAAM,uBAAuB,EAAE,CAAC;IAC/C,MAAM,OAAO,GAAqB;QAChC,EAAE,EAAE,gBAAgB;QACpB,SAAS,EAAE,0CAA0C;QACrD,SAAS,EAAE,IAAI;QACf,QAAQ,EAAE,mEAAmE;KAC9E,CAAC;IACF,IAAI,MAAM,KAAK,IAAI;QAAE,OAAO,OAAO,CAAC;IACpC,IAAI,CAAC;QACH,MAAM,OAAO,GAAG,MAAM,oBAAoB,CAAC,GAAG,CAC5C,CAAC,oBAAoB,CAAC,WAAW,EAAE,IAAI,EAAE,MAAM,CAAC,MAAM,CAAC,EACvD,EAAE,GAAG,EAAE,OAAO,CAAC,aAAa,EAAE,SAAS,EAAE,CAC1C,CAAC;QACF,IAAI,OAAO,CAAC,QAAQ,KAAK,CAAC,IAAI,OAAO,CAAC,MAAM,KAAK,WAAW;YAAE,OAAO,OAAO,CAAC;QAC7E,OAAO,MAAM,QAAQ,CAAC,OAAO,EAAE,OAAO,EAAE,SAAS,EAAE;YACjD,EAAE,EAAE,gBAAgB;YACpB,SAAS,EAAE,wEAAwE;YACnF,MAAM,EAAE,MAAM,CAAC,MAAM;SACtB,CAAC,CAAC;IACL,CAAC;YAAS,CAAC;QACT,MAAM,MAAM,CAAC,KAAK,EAAE,CAAC;IACvB,CAAC;AACH,CAAC"}

package/dist/exec/isolation-option.js

@@ -1,4 +1,5 @@
 import { containerRuntimeAvailable } from "./container-backend.js";
+import { containerImageSchema } from "./container-image.js";
 /**
  * `--isolation docker`, `--isolation podman:python:3.12-bookworm`, or `none`.
  *
@@ -21,13 +22,14 @@ isAvailable = containerRuntimeAvailable) {
             `Use one of: ${supportedRuntimes.join(", ")}, optionally with an image ` +
             `("docker:python:3.12-bookworm"), or "none" to run on the host.`);
     }
+    const image = containerImageSchema.parse(imageParts.length === 0 ? defaultImage : imageParts.join(":"));
     if (!isAvailable(runtime)) {
         throw new Error(`--isolation "${value}" needs ${runtime}, which is not installed or is not answering. ` +
             `Start it, or pass --isolation none to run on the host and accept the restricted mode.`);
     }
     return {
         runtime,
-        image: imageParts.length === 0 ? defaultImage : imageParts.join(":"),
+        image,
         workspaceRoot,
         // The person who started the run, so files the command writes belong to them rather than
         // to root, which is what a container writes as by default and what leaves a workspace the

package/dist/exec/isolation-option.js.map

@@ -1 +1 @@
-{"version":3,"file":"isolation-option.js","sourceRoot":"","sources":["../../src/exec/isolation-option.ts"],"names":[],"mappings":"AAAA,OAAO,EAAgC,yBAAyB,EAAE,MAAM,wBAAwB,CAAC;AAEjG;;;;;;;GAOG;AACH,MAAM,iBAAiB,GAAG,CAAC,QAAQ,EAAE,QAAQ,EAAE,SAAS,CAAU,CAAC;AACnE,MAAM,YAAY,GAAG,kBAAkB,CAAC;AAExC,MAAM,UAAU,oBAAoB,CAClC,KAAoB,EACpB,aAAqB;AACrB,sFAAsF;AACtF,WAAW,GAAiC,yBAAyB;IAErE,IAAI,KAAK,KAAK,IAAI,IAAI,KAAK,KAAK,MAAM,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAC7D,OAAO,IAAI,CAAC;IACd,CAAC;IAED,MAAM,CAAC,OAAO,EAAE,GAAG,UAAU,CAAC,GAAG,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;IAClD,IAAI,OAAO,KAAK,SAAS,IAAI,CAAC,iBAAiB,CAAC,QAAQ,CAAC,OAAgB,CAAC,EAAE,CAAC;QAC3E,MAAM,IAAI,KAAK,CACb,gBAAgB,KAAK,uCAAuC;YAC1D,eAAe,iBAAiB,CAAC,IAAI,CAAC,IAAI,CAAC,6BAA6B;YACxE,gEAAgE,CACnE,CAAC;IACJ,CAAC;IACD,IAAI,CAAC,WAAW,CAAC,OAAO,CAAC,EAAE,CAAC;QAC1B,MAAM,IAAI,KAAK,CACb,gBAAgB,KAAK,WAAW,OAAO,gDAAgD;YACrF,uFAAuF,CAC1F,CAAC;IACJ,CAAC;IAED,OAAO;QACL,OAAO;QACP,KAAK,EAAE,UAAU,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,UAAU,CAAC,IAAI,CAAC,GAAG,CAAC;QACpE,aAAa;QACb,yFAAyF;QACzF,0FAA0F;QAC1F,6BAA6B;QAC7B,IAAI,EAAE,GAAG,OAAO,CAAC,MAAM,EAAE,EAAE,IAAI,CAAC,IAAI,OAAO,CAAC,MAAM,EAAE,EAAE,IAAI,CAAC,EAAE;KAC9D,CAAC;AACJ,CAAC"}
+{"version":3,"file":"isolation-option.js","sourceRoot":"","sources":["../../src/exec/isolation-option.ts"],"names":[],"mappings":"AAAA,OAAO,EAAgC,yBAAyB,EAAE,MAAM,wBAAwB,CAAC;AACjG,OAAO,EAAE,oBAAoB,EAAE,MAAM,sBAAsB,CAAC;AAE5D;;;;;;;GAOG;AACH,MAAM,iBAAiB,GAAG,CAAC,QAAQ,EAAE,QAAQ,EAAE,SAAS,CAAU,CAAC;AACnE,MAAM,YAAY,GAAG,kBAAkB,CAAC;AAExC,MAAM,UAAU,oBAAoB,CAClC,KAAoB,EACpB,aAAqB;AACrB,sFAAsF;AACtF,WAAW,GAAiC,yBAAyB;IAErE,IAAI,KAAK,KAAK,IAAI,IAAI,KAAK,KAAK,MAAM,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAC7D,OAAO,IAAI,CAAC;IACd,CAAC;IAED,MAAM,CAAC,OAAO,EAAE,GAAG,UAAU,CAAC,GAAG,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;IAClD,IAAI,OAAO,KAAK,SAAS,IAAI,CAAC,iBAAiB,CAAC,QAAQ,CAAC,OAAgB,CAAC,EAAE,CAAC;QAC3E,MAAM,IAAI,KAAK,CACb,gBAAgB,KAAK,uCAAuC;YAC1D,eAAe,iBAAiB,CAAC,IAAI,CAAC,IAAI,CAAC,6BAA6B;YACxE,gEAAgE,CACnE,CAAC;IACJ,CAAC;IACD,MAAM,KAAK,GAAG,oBAAoB,CAAC,KAAK,CACtC,UAAU,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,UAAU,CAAC,IAAI,CAAC,GAAG,CAAC,CAC9D,CAAC;IACF,IAAI,CAAC,WAAW,CAAC,OAAO,CAAC,EAAE,CAAC;QAC1B,MAAM,IAAI,KAAK,CACb,gBAAgB,KAAK,WAAW,OAAO,gDAAgD;YACrF,uFAAuF,CAC1F,CAAC;IACJ,CAAC;IAED,OAAO;QACL,OAAO;QACP,KAAK;QACL,aAAa;QACb,yFAAyF;QACzF,0FAA0F;QAC1F,6BAA6B;QAC7B,IAAI,EAAE,GAAG,OAAO,CAAC,MAAM,EAAE,EAAE,IAAI,CAAC,IAAI,OAAO,CAAC,MAAM,EAAE,EAAE,IAAI,CAAC,EAAE;KAC9D,CAAC;AACJ,CAAC"}