tensorlake 0.5.13 → 0.5.17

package/dist/index.d.cts

@@ -1,5 +1,5 @@
-import { C as CreatePtySessionOptions, S as SandboxOptions, a as CreateAndConnectOptions, b as SandboxClientOptions, c as ConnectOptions, d as SnapshotInfo, e as SandboxInfo, f as SandboxStatus, U as UpdateSandboxOptions, g as SuspendResumeOptions, h as CheckpointOptions, R as RunOptions, i as CommandResult, j as StartProcessOptions, P as ProcessInfo, k as SendSignalResponse, O as OutputResponse, l as OutputEvent, L as ListDirectoryResponse, m as PtySessionInfo, H as HealthResponse, D as DaemonInfo, n as CreateSandboxOptions, o as CreateSandboxResponse, p as ListArchivedSandboxesOptions, q as ListArchivedSandboxesResponse, A as ArchivedSandboxInfo, r as SandboxPortAccess, s as SnapshotOptions, t as CreateSnapshotResponse, u as SnapshotAndWaitOptions, v as CreatePoolOptions, w as CreateSandboxPoolResponse, x as SandboxPoolInfo, y as UpdatePoolOptions } from './sandbox-image-BepgJl5u.cjs';
-export { z as CheckpointType, B as ContainerResourcesInfo, E as ContainerState, F as CreateSandboxImageOptions, G as DirectoryEntry, I as DockerfileBuildPlan, J as DockerfileInstruction, K as Image, M as ImageBuildOperation, N as ImageBuildOperationType, N as ImageBuildOperationTypeValue, Q as ImageOptions, T as NetworkConfig, V as OutputMode, W as PoolContainerInfo, X as ProcessStatus, Y as SandboxImageSource, Z as SnapshotStatus, _ as SnapshotType, $ as SnapshotWaitCondition, a0 as StdinMode, a1 as createSandboxImage, a2 as dockerfileContent } from './sandbox-image-BepgJl5u.cjs';
+import { C as CreatePtySessionOptions, S as SandboxOptions, a as CreateAndConnectOptions, b as SandboxClientOptions, c as ConnectOptions, d as SnapshotInfo, e as SandboxInfo, f as SandboxStatus, U as UpdateSandboxOptions, g as SuspendResumeOptions, h as CheckpointOptions, R as RunOptions, i as CommandResult, j as StartProcessOptions, P as ProcessInfo, k as SendSignalResponse, O as OutputResponse, l as OutputEvent, L as ListDirectoryResponse, m as PtySessionInfo, H as HealthResponse, D as DaemonInfo, n as CreateSandboxOptions, o as CreateSandboxResponse, p as ListArchivedSandboxesOptions, q as ListArchivedSandboxesResponse, A as ArchivedSandboxInfo, r as SandboxPortAccess, s as SnapshotOptions, t as CreateSnapshotResponse, u as SnapshotAndWaitOptions, v as CreatePoolOptions, w as CreateSandboxPoolResponse, x as SandboxPoolInfo, y as UpdatePoolOptions } from './sandbox-image-BBcx3bSx.cjs';
+export { z as CheckpointType, B as ContainerResourcesInfo, E as ContainerState, F as CreateSandboxImageOptions, G as DirectoryEntry, I as DockerfileBuildPlan, J as DockerfileInstruction, K as Image, M as ImageBuildOperation, N as ImageBuildOperationType, N as ImageBuildOperationTypeValue, Q as ImageOptions, T as NetworkConfig, V as OutputMode, W as PoolContainerInfo, X as ProcessStatus, Y as ProcessUser, Z as ProcessUserSpec, _ as SandboxImageSource, $ as SnapshotStatus, a0 as SnapshotType, a1 as SnapshotWaitCondition, a2 as StdinMode, a3 as createSandboxImage, a4 as dockerfileContent } from './sandbox-image-BBcx3bSx.cjs';
 
 /**
  * The return value of every SDK operation. Carries the W3C `trace_id` so callers

package/dist/index.d.ts

@@ -1,5 +1,5 @@
-import { C as CreatePtySessionOptions, S as SandboxOptions, a as CreateAndConnectOptions, b as SandboxClientOptions, c as ConnectOptions, d as SnapshotInfo, e as SandboxInfo, f as SandboxStatus, U as UpdateSandboxOptions, g as SuspendResumeOptions, h as CheckpointOptions, R as RunOptions, i as CommandResult, j as StartProcessOptions, P as ProcessInfo, k as SendSignalResponse, O as OutputResponse, l as OutputEvent, L as ListDirectoryResponse, m as PtySessionInfo, H as HealthResponse, D as DaemonInfo, n as CreateSandboxOptions, o as CreateSandboxResponse, p as ListArchivedSandboxesOptions, q as ListArchivedSandboxesResponse, A as ArchivedSandboxInfo, r as SandboxPortAccess, s as SnapshotOptions, t as CreateSnapshotResponse, u as SnapshotAndWaitOptions, v as CreatePoolOptions, w as CreateSandboxPoolResponse, x as SandboxPoolInfo, y as UpdatePoolOptions } from './sandbox-image-BepgJl5u.js';
-export { z as CheckpointType, B as ContainerResourcesInfo, E as ContainerState, F as CreateSandboxImageOptions, G as DirectoryEntry, I as DockerfileBuildPlan, J as DockerfileInstruction, K as Image, M as ImageBuildOperation, N as ImageBuildOperationType, N as ImageBuildOperationTypeValue, Q as ImageOptions, T as NetworkConfig, V as OutputMode, W as PoolContainerInfo, X as ProcessStatus, Y as SandboxImageSource, Z as SnapshotStatus, _ as SnapshotType, $ as SnapshotWaitCondition, a0 as StdinMode, a1 as createSandboxImage, a2 as dockerfileContent } from './sandbox-image-BepgJl5u.js';
+import { C as CreatePtySessionOptions, S as SandboxOptions, a as CreateAndConnectOptions, b as SandboxClientOptions, c as ConnectOptions, d as SnapshotInfo, e as SandboxInfo, f as SandboxStatus, U as UpdateSandboxOptions, g as SuspendResumeOptions, h as CheckpointOptions, R as RunOptions, i as CommandResult, j as StartProcessOptions, P as ProcessInfo, k as SendSignalResponse, O as OutputResponse, l as OutputEvent, L as ListDirectoryResponse, m as PtySessionInfo, H as HealthResponse, D as DaemonInfo, n as CreateSandboxOptions, o as CreateSandboxResponse, p as ListArchivedSandboxesOptions, q as ListArchivedSandboxesResponse, A as ArchivedSandboxInfo, r as SandboxPortAccess, s as SnapshotOptions, t as CreateSnapshotResponse, u as SnapshotAndWaitOptions, v as CreatePoolOptions, w as CreateSandboxPoolResponse, x as SandboxPoolInfo, y as UpdatePoolOptions } from './sandbox-image-BBcx3bSx.js';
+export { z as CheckpointType, B as ContainerResourcesInfo, E as ContainerState, F as CreateSandboxImageOptions, G as DirectoryEntry, I as DockerfileBuildPlan, J as DockerfileInstruction, K as Image, M as ImageBuildOperation, N as ImageBuildOperationType, N as ImageBuildOperationTypeValue, Q as ImageOptions, T as NetworkConfig, V as OutputMode, W as PoolContainerInfo, X as ProcessStatus, Y as ProcessUser, Z as ProcessUserSpec, _ as SandboxImageSource, $ as SnapshotStatus, a0 as SnapshotType, a1 as SnapshotWaitCondition, a2 as StdinMode, a3 as createSandboxImage, a4 as dockerfileContent } from './sandbox-image-BBcx3bSx.js';
 
 /**
  * The return value of every SDK operation. Carries the W3C `trace_id` so callers

package/dist/index.js

@@ -13,7 +13,7 @@ var SDK_VERSION, API_URL, API_KEY, NAMESPACE, SANDBOX_PROXY_URL, DEFAULT_HTTP_TI
 var init_defaults = __esm({
   "src/defaults.ts"() {
     "use strict";
-    SDK_VERSION = "0.5.13";
+    SDK_VERSION = "0.5.17";
     API_URL = process.env.TENSORLAKE_API_URL ?? "https://api.tensorlake.ai";
     API_KEY = process.env.TENSORLAKE_API_KEY ?? void 0;
     NAMESPACE = process.env.INDEXIFY_NAMESPACE ?? "default";
@@ -2978,6 +2978,15 @@ var init_url = __esm({
 
 // src/sandbox.ts
 import WebSocket2 from "ws";
+function processUserPayload(user) {
+  if (user == null) {
+    return DEFAULT_PROCESS_USER;
+  }
+  if (typeof user === "string" && user.trim() === "") {
+    throw new SandboxError("process user must not be empty");
+  }
+  return user;
+}
 function normalizePtyMessage(message) {
   if (Buffer.isBuffer(message)) return message;
   if (Array.isArray(message)) {
@@ -3001,7 +3010,7 @@ function sendPtyFrame(socket, frame) {
     socket.send(frame, (error) => error ? reject(error) : resolve());
   });
 }
-var PTY_OP_DATA, PTY_OP_RESIZE, PTY_OP_READY, PTY_OP_EXIT, Pty, Sandbox;
+var DEFAULT_PROCESS_USER, PTY_OP_DATA, PTY_OP_RESIZE, PTY_OP_READY, PTY_OP_EXIT, Pty, Sandbox;
 var init_sandbox = __esm({
   "src/sandbox.ts"() {
     "use strict";
@@ -3013,6 +3022,7 @@ var init_sandbox = __esm({
     init_tunnel();
     init_sse();
     init_url();
+    DEFAULT_PROCESS_USER = "tl-user";
     PTY_OP_DATA = 0;
     PTY_OP_RESIZE = 1;
     PTY_OP_READY = 2;
@@ -3433,6 +3443,8 @@ var init_sandbox = __esm({
         if (options?.env) body.env = options.env;
         if (options?.workingDir) body.working_dir = options.workingDir;
         if (options?.timeout != null) body.timeout = options.timeout;
+        const user = processUserPayload(options?.user);
+        body.user = user;
         const sseStream = await this.http.requestStream(
           "POST",
           "/api/v1/processes/run",
@@ -3476,6 +3488,8 @@ var init_sandbox = __esm({
         if (options?.args != null) payload.args = options.args;
         if (options?.env != null) payload.env = options.env;
         if (options?.workingDir != null) payload.working_dir = options.workingDir;
+        const user = processUserPayload(options?.user);
+        payload.user = user;
         if (options?.stdinMode != null && options.stdinMode !== "closed" /* CLOSED */) {
           payload.stdin_mode = options.stdinMode;
         }
@@ -5063,12 +5077,16 @@ function optionalNumber(object, key) {
   }
   return value;
 }
-async function runChecked(sandbox, command, args, env, workingDir) {
-  const result = await sandbox.run(command, {
+async function runChecked(sandbox, command, args, env, workingDir, user) {
+  const options = {
     args,
     env,
     workingDir
-  });
+  };
+  if (user != null) {
+    options.user = user;
+  }
+  const result = await sandbox.run(command, options);
   if (result.exitCode !== 0) {
     throw new Error(
       `Command '${command} ${args.join(" ")}' failed with exit code ${result.exitCode}`
@@ -5080,7 +5098,8 @@ async function runStreaming(sandbox, emit, sleep3, command, args = [], env, work
   const proc = await sandbox.startProcess(command, {
     args,
     env,
-    workingDir
+    workingDir,
+    user: ROOTFS_BUILDER_PROCESS_USER
   });
   let stdoutSeen = 0;
   let stderrSeen = 0;
@@ -5122,13 +5141,37 @@ function emitOutputLines(emit, stream, response, seen) {
     emit({ type: "build_log", stream, message: line });
   }
 }
+async function ensureRemoteBuildRoot(sandbox) {
+  await runChecked(
+    sandbox,
+    "mkdir",
+    ["-p", REMOTE_BUILD_DIR],
+    void 0,
+    void 0,
+    ROOTFS_BUILDER_PROCESS_USER
+  );
+  await runChecked(
+    sandbox,
+    "chmod",
+    ["0777", REMOTE_BUILD_DIR],
+    void 0,
+    void 0,
+    ROOTFS_BUILDER_PROCESS_USER
+  );
+}
+async function ensureRemoteDirectory(sandbox, remotePath) {
+  await runChecked(sandbox, "mkdir", ["-p", remotePath]);
+}
+async function ensureRemoteParentDir(sandbox, remotePath) {
+  await ensureRemoteDirectory(sandbox, path.posix.dirname(remotePath));
+}
 async function copyLocalPathToSandbox(sandbox, localPath, remotePath) {
   const fileStats = await stat(localPath).catch(() => null);
   if (!fileStats) {
     throw new Error(`Local path not found: ${localPath}`);
   }
   if (fileStats.isFile()) {
-    await runChecked(sandbox, "mkdir", ["-p", path.posix.dirname(remotePath)]);
+    await ensureRemoteParentDir(sandbox, remotePath);
     await sandbox.writeFile(remotePath, await readFile(localPath));
     return;
   }
@@ -5140,14 +5183,10 @@ async function copyLocalPathToSandbox(sandbox, localPath, remotePath) {
     const sourcePath = path.join(localPath, entry.name);
     const destinationPath = path.posix.join(remotePath, entry.name);
     if (entry.isDirectory()) {
-      await runChecked(sandbox, "mkdir", ["-p", destinationPath]);
+      await ensureRemoteDirectory(sandbox, destinationPath);
       await copyLocalPathToSandbox(sandbox, sourcePath, destinationPath);
     } else if (entry.isFile()) {
-      await runChecked(
-        sandbox,
-        "mkdir",
-        ["-p", path.posix.dirname(destinationPath)]
-      );
+      await ensureRemoteParentDir(sandbox, destinationPath);
       await sandbox.writeFile(destinationPath, await readFile(sourcePath));
     }
   }
@@ -5244,6 +5283,7 @@ async function createSandboxImage(source, options = {}, deps = {}) {
       message: `Rootfs builder sandbox ${sandbox.sandboxId} is running`
     });
     emit({ type: "status", message: "Uploading build context..." });
+    await ensureRemoteBuildRoot(sandbox);
     await copyLocalPathToSandbox(sandbox, plan.contextDir, REMOTE_CONTEXT_DIR);
     const spec = await buildRootfsSpec(
       preparedSpec,
@@ -5251,7 +5291,7 @@ async function createSandboxImage(source, options = {}, deps = {}) {
       plan,
       options.diskMb
     );
-    await runChecked(sandbox, "mkdir", ["-p", path.posix.dirname(REMOTE_SPEC_PATH)]);
+    await ensureRemoteParentDir(sandbox, REMOTE_SPEC_PATH);
     await sandbox.writeFile(
       REMOTE_SPEC_PATH,
       new TextEncoder().encode(JSON.stringify(spec, null, 2))
@@ -5334,7 +5374,7 @@ async function runCreateSandboxImageCli(argv = process.argv.slice(2)) {
     { emit: ndjsonStdoutEmit }
   );
 }
-var DEFAULT_ROOTFS_DISK_MB, REMOTE_BUILD_DIR, REMOTE_CONTEXT_DIR, REMOTE_SPEC_PATH, REMOTE_METADATA_PATH, ROOTFS_BUILDER_BIN_DIR, ROOTFS_BUILDER_PATH, ROOTFS_BUILDER_COMMAND, UNSUPPORTED_DOCKERFILE_INSTRUCTIONS;
+var DEFAULT_ROOTFS_DISK_MB, REMOTE_BUILD_DIR, REMOTE_CONTEXT_DIR, REMOTE_SPEC_PATH, REMOTE_METADATA_PATH, ROOTFS_BUILDER_BIN_DIR, ROOTFS_BUILDER_PATH, ROOTFS_BUILDER_COMMAND, ROOTFS_BUILDER_PROCESS_USER, UNSUPPORTED_DOCKERFILE_INSTRUCTIONS;
 var init_sandbox_image = __esm({
   "src/sandbox-image.ts"() {
     "use strict";
@@ -5349,6 +5389,7 @@ var init_sandbox_image = __esm({
     ROOTFS_BUILDER_BIN_DIR = "/usr/local/bin";
     ROOTFS_BUILDER_PATH = "/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin";
     ROOTFS_BUILDER_COMMAND = "tl-rootfs-build";
+    ROOTFS_BUILDER_PROCESS_USER = "root";
     UNSUPPORTED_DOCKERFILE_INSTRUCTIONS = /* @__PURE__ */ new Set([
       "ARG",
       "ONBUILD",