tensorlake 0.5.13 → 0.5.17

package/dist/{sandbox-image-BepgJl5u.d.cts → sandbox-image-BBcx3bSx.d.cts}

@@ -219,6 +219,12 @@ interface SandboxPoolInfo {
     createdAt?: Date;
     updatedAt?: Date;
 }
+interface ProcessUserSpec {
+    name?: string;
+    uid?: number;
+    gid?: number;
+}
+type ProcessUser = string | ProcessUserSpec;
 interface StartProcessOptions {
     args?: string[];
     env?: Record<string, string>;
@@ -226,6 +232,7 @@ interface StartProcessOptions {
     stdinMode?: StdinMode;
     stdoutMode?: OutputMode;
     stderrMode?: OutputMode;
+    user?: ProcessUser;
 }
 interface ProcessInfo {
     pid: number;
@@ -256,6 +263,7 @@ interface RunOptions {
     env?: Record<string, string>;
     workingDir?: string;
     timeout?: number;
+    user?: ProcessUser;
 }
 interface CommandResult {
     exitCode: number;
@@ -426,11 +434,13 @@ interface BuildSandbox {
         env?: Record<string, string>;
         workingDir?: string;
         timeout?: number;
+        user?: ProcessUser;
     }): Promise<CommandResult>;
     startProcess(command: string, options?: {
         args?: string[];
         env?: Record<string, string>;
         workingDir?: string;
+        user?: ProcessUser;
     }): Promise<ProcessInfo>;
     getStdout(pid: number): Promise<OutputResponse>;
     getStderr(pid: number): Promise<OutputResponse>;
@@ -464,4 +474,4 @@ declare function registerImage(context: BuildContext, name: string, dockerfile:
 declare function createSandboxImage(source: SandboxImageSource, options?: CreateSandboxImageOptions, deps?: CreateSandboxImageDeps): Promise<Record<string, unknown>>;
 declare function runCreateSandboxImageCli(argv?: string[]): Promise<void>;
 
-export { type SnapshotWaitCondition as $, type ArchivedSandboxInfo as A, type ContainerResourcesInfo as B, type CreatePtySessionOptions as C, type DaemonInfo as D, ContainerState as E, type CreateSandboxImageOptions as F, type DirectoryEntry as G, type HealthResponse as H, type DockerfileBuildPlan as I, type DockerfileInstruction as J, Image as K, type ListDirectoryResponse as L, type ImageBuildOperation as M, ImageBuildOperationType as N, type OutputResponse as O, type ProcessInfo as P, type ImageOptions as Q, type RunOptions as R, type SandboxOptions as S, type NetworkConfig as T, type UpdateSandboxOptions as U, OutputMode as V, type PoolContainerInfo as W, ProcessStatus as X, type SandboxImageSource as Y, SnapshotStatus as Z, type SnapshotType as _, type CreateAndConnectOptions as a, StdinMode as a0, createSandboxImage as a1, dockerfileContent as a2, type BuildContext as a3, defaultRegisteredName as a4, loadDockerfilePlan as a5, loadImagePlan as a6, logicalDockerfileLines as a7, registerImage as a8, runCreateSandboxImageCli as a9, type SandboxClientOptions as b, type ConnectOptions as c, type SnapshotInfo as d, type SandboxInfo as e, SandboxStatus as f, type SuspendResumeOptions as g, type CheckpointOptions as h, type CommandResult as i, type StartProcessOptions as j, type SendSignalResponse as k, type OutputEvent as l, type PtySessionInfo as m, type CreateSandboxOptions as n, type CreateSandboxResponse as o, type ListArchivedSandboxesOptions as p, type ListArchivedSandboxesResponse as q, type SandboxPortAccess as r, type SnapshotOptions as s, type CreateSnapshotResponse as t, type SnapshotAndWaitOptions as u, type CreatePoolOptions as v, type CreateSandboxPoolResponse as w, type SandboxPoolInfo as x, type UpdatePoolOptions as y, type CheckpointType as z };
+export { SnapshotStatus as $, type ArchivedSandboxInfo as A, type ContainerResourcesInfo as B, type CreatePtySessionOptions as C, type DaemonInfo as D, ContainerState as E, type CreateSandboxImageOptions as F, type DirectoryEntry as G, type HealthResponse as H, type DockerfileBuildPlan as I, type DockerfileInstruction as J, Image as K, type ListDirectoryResponse as L, type ImageBuildOperation as M, ImageBuildOperationType as N, type OutputResponse as O, type ProcessInfo as P, type ImageOptions as Q, type RunOptions as R, type SandboxOptions as S, type NetworkConfig as T, type UpdateSandboxOptions as U, OutputMode as V, type PoolContainerInfo as W, ProcessStatus as X, type ProcessUser as Y, type ProcessUserSpec as Z, type SandboxImageSource as _, type CreateAndConnectOptions as a, type SnapshotType as a0, type SnapshotWaitCondition as a1, StdinMode as a2, createSandboxImage as a3, dockerfileContent as a4, type BuildContext as a5, defaultRegisteredName as a6, loadDockerfilePlan as a7, loadImagePlan as a8, logicalDockerfileLines as a9, registerImage as aa, runCreateSandboxImageCli as ab, type SandboxClientOptions as b, type ConnectOptions as c, type SnapshotInfo as d, type SandboxInfo as e, SandboxStatus as f, type SuspendResumeOptions as g, type CheckpointOptions as h, type CommandResult as i, type StartProcessOptions as j, type SendSignalResponse as k, type OutputEvent as l, type PtySessionInfo as m, type CreateSandboxOptions as n, type CreateSandboxResponse as o, type ListArchivedSandboxesOptions as p, type ListArchivedSandboxesResponse as q, type SandboxPortAccess as r, type SnapshotOptions as s, type CreateSnapshotResponse as t, type SnapshotAndWaitOptions as u, type CreatePoolOptions as v, type CreateSandboxPoolResponse as w, type SandboxPoolInfo as x, type UpdatePoolOptions as y, type CheckpointType as z };

package/dist/{sandbox-image-BepgJl5u.d.ts → sandbox-image-BBcx3bSx.d.ts}

@@ -219,6 +219,12 @@ interface SandboxPoolInfo {
     createdAt?: Date;
     updatedAt?: Date;
 }
+interface ProcessUserSpec {
+    name?: string;
+    uid?: number;
+    gid?: number;
+}
+type ProcessUser = string | ProcessUserSpec;
 interface StartProcessOptions {
     args?: string[];
     env?: Record<string, string>;
@@ -226,6 +232,7 @@ interface StartProcessOptions {
     stdinMode?: StdinMode;
     stdoutMode?: OutputMode;
     stderrMode?: OutputMode;
+    user?: ProcessUser;
 }
 interface ProcessInfo {
     pid: number;
@@ -256,6 +263,7 @@ interface RunOptions {
     env?: Record<string, string>;
     workingDir?: string;
     timeout?: number;
+    user?: ProcessUser;
 }
 interface CommandResult {
     exitCode: number;
@@ -426,11 +434,13 @@ interface BuildSandbox {
         env?: Record<string, string>;
         workingDir?: string;
         timeout?: number;
+        user?: ProcessUser;
     }): Promise<CommandResult>;
     startProcess(command: string, options?: {
         args?: string[];
         env?: Record<string, string>;
         workingDir?: string;
+        user?: ProcessUser;
     }): Promise<ProcessInfo>;
     getStdout(pid: number): Promise<OutputResponse>;
     getStderr(pid: number): Promise<OutputResponse>;
@@ -464,4 +474,4 @@ declare function registerImage(context: BuildContext, name: string, dockerfile:
 declare function createSandboxImage(source: SandboxImageSource, options?: CreateSandboxImageOptions, deps?: CreateSandboxImageDeps): Promise<Record<string, unknown>>;
 declare function runCreateSandboxImageCli(argv?: string[]): Promise<void>;
 
-export { type SnapshotWaitCondition as $, type ArchivedSandboxInfo as A, type ContainerResourcesInfo as B, type CreatePtySessionOptions as C, type DaemonInfo as D, ContainerState as E, type CreateSandboxImageOptions as F, type DirectoryEntry as G, type HealthResponse as H, type DockerfileBuildPlan as I, type DockerfileInstruction as J, Image as K, type ListDirectoryResponse as L, type ImageBuildOperation as M, ImageBuildOperationType as N, type OutputResponse as O, type ProcessInfo as P, type ImageOptions as Q, type RunOptions as R, type SandboxOptions as S, type NetworkConfig as T, type UpdateSandboxOptions as U, OutputMode as V, type PoolContainerInfo as W, ProcessStatus as X, type SandboxImageSource as Y, SnapshotStatus as Z, type SnapshotType as _, type CreateAndConnectOptions as a, StdinMode as a0, createSandboxImage as a1, dockerfileContent as a2, type BuildContext as a3, defaultRegisteredName as a4, loadDockerfilePlan as a5, loadImagePlan as a6, logicalDockerfileLines as a7, registerImage as a8, runCreateSandboxImageCli as a9, type SandboxClientOptions as b, type ConnectOptions as c, type SnapshotInfo as d, type SandboxInfo as e, SandboxStatus as f, type SuspendResumeOptions as g, type CheckpointOptions as h, type CommandResult as i, type StartProcessOptions as j, type SendSignalResponse as k, type OutputEvent as l, type PtySessionInfo as m, type CreateSandboxOptions as n, type CreateSandboxResponse as o, type ListArchivedSandboxesOptions as p, type ListArchivedSandboxesResponse as q, type SandboxPortAccess as r, type SnapshotOptions as s, type CreateSnapshotResponse as t, type SnapshotAndWaitOptions as u, type CreatePoolOptions as v, type CreateSandboxPoolResponse as w, type SandboxPoolInfo as x, type UpdatePoolOptions as y, type CheckpointType as z };
+export { SnapshotStatus as $, type ArchivedSandboxInfo as A, type ContainerResourcesInfo as B, type CreatePtySessionOptions as C, type DaemonInfo as D, ContainerState as E, type CreateSandboxImageOptions as F, type DirectoryEntry as G, type HealthResponse as H, type DockerfileBuildPlan as I, type DockerfileInstruction as J, Image as K, type ListDirectoryResponse as L, type ImageBuildOperation as M, ImageBuildOperationType as N, type OutputResponse as O, type ProcessInfo as P, type ImageOptions as Q, type RunOptions as R, type SandboxOptions as S, type NetworkConfig as T, type UpdateSandboxOptions as U, OutputMode as V, type PoolContainerInfo as W, ProcessStatus as X, type ProcessUser as Y, type ProcessUserSpec as Z, type SandboxImageSource as _, type CreateAndConnectOptions as a, type SnapshotType as a0, type SnapshotWaitCondition as a1, StdinMode as a2, createSandboxImage as a3, dockerfileContent as a4, type BuildContext as a5, defaultRegisteredName as a6, loadDockerfilePlan as a7, loadImagePlan as a8, logicalDockerfileLines as a9, registerImage as aa, runCreateSandboxImageCli as ab, type SandboxClientOptions as b, type ConnectOptions as c, type SnapshotInfo as d, type SandboxInfo as e, SandboxStatus as f, type SuspendResumeOptions as g, type CheckpointOptions as h, type CommandResult as i, type StartProcessOptions as j, type SendSignalResponse as k, type OutputEvent as l, type PtySessionInfo as m, type CreateSandboxOptions as n, type CreateSandboxResponse as o, type ListArchivedSandboxesOptions as p, type ListArchivedSandboxesResponse as q, type SandboxPortAccess as r, type SnapshotOptions as s, type CreateSnapshotResponse as t, type SnapshotAndWaitOptions as u, type CreatePoolOptions as v, type CreateSandboxPoolResponse as w, type SandboxPoolInfo as x, type UpdatePoolOptions as y, type CheckpointType as z };

package/dist/sandbox-image.cjs

@@ -83,7 +83,7 @@ var SDK_VERSION, API_URL, API_KEY, NAMESPACE, SANDBOX_PROXY_URL, DEFAULT_HTTP_TI
 var init_defaults = __esm({
   "src/defaults.ts"() {
     "use strict";
-    SDK_VERSION = "0.5.13";
+    SDK_VERSION = "0.5.17";
     API_URL = process.env.TENSORLAKE_API_URL ?? "https://api.tensorlake.ai";
     API_KEY = process.env.TENSORLAKE_API_KEY ?? void 0;
     NAMESPACE = process.env.INDEXIFY_NAMESPACE ?? "default";
@@ -2933,6 +2933,15 @@ var init_url = __esm({
 });
 
 // src/sandbox.ts
+function processUserPayload(user) {
+  if (user == null) {
+    return DEFAULT_PROCESS_USER;
+  }
+  if (typeof user === "string" && user.trim() === "") {
+    throw new SandboxError("process user must not be empty");
+  }
+  return user;
+}
 function normalizePtyMessage(message) {
   if (Buffer.isBuffer(message)) return message;
   if (Array.isArray(message)) {
@@ -2956,7 +2965,7 @@ function sendPtyFrame(socket, frame) {
     socket.send(frame, (error) => error ? reject(error) : resolve());
   });
 }
-var import_ws2, PTY_OP_DATA, PTY_OP_RESIZE, PTY_OP_READY, PTY_OP_EXIT, Pty, Sandbox;
+var import_ws2, DEFAULT_PROCESS_USER, PTY_OP_DATA, PTY_OP_RESIZE, PTY_OP_READY, PTY_OP_EXIT, Pty, Sandbox;
 var init_sandbox = __esm({
   "src/sandbox.ts"() {
     "use strict";
@@ -2969,6 +2978,7 @@ var init_sandbox = __esm({
     init_sse();
     init_url();
     import_ws2 = __toESM(require("ws"), 1);
+    DEFAULT_PROCESS_USER = "tl-user";
     PTY_OP_DATA = 0;
     PTY_OP_RESIZE = 1;
     PTY_OP_READY = 2;
@@ -3389,6 +3399,8 @@ var init_sandbox = __esm({
         if (options?.env) body.env = options.env;
         if (options?.workingDir) body.working_dir = options.workingDir;
         if (options?.timeout != null) body.timeout = options.timeout;
+        const user = processUserPayload(options?.user);
+        body.user = user;
         const sseStream = await this.http.requestStream(
           "POST",
           "/api/v1/processes/run",
@@ -3432,6 +3444,8 @@ var init_sandbox = __esm({
         if (options?.args != null) payload.args = options.args;
         if (options?.env != null) payload.env = options.env;
         if (options?.workingDir != null) payload.working_dir = options.workingDir;
+        const user = processUserPayload(options?.user);
+        payload.user = user;
         if (options?.stdinMode != null && options.stdinMode !== "closed" /* CLOSED */) {
           payload.stdin_mode = options.stdinMode;
         }
@@ -4922,12 +4936,16 @@ function optionalNumber(object, key) {
   }
   return value;
 }
-async function runChecked(sandbox, command, args, env, workingDir) {
-  const result = await sandbox.run(command, {
+async function runChecked(sandbox, command, args, env, workingDir, user) {
+  const options = {
     args,
     env,
     workingDir
-  });
+  };
+  if (user != null) {
+    options.user = user;
+  }
+  const result = await sandbox.run(command, options);
   if (result.exitCode !== 0) {
     throw new Error(
       `Command '${command} ${args.join(" ")}' failed with exit code ${result.exitCode}`
@@ -4939,7 +4957,8 @@ async function runStreaming(sandbox, emit, sleep3, command, args = [], env, work
   const proc = await sandbox.startProcess(command, {
     args,
     env,
-    workingDir
+    workingDir,
+    user: ROOTFS_BUILDER_PROCESS_USER
   });
   let stdoutSeen = 0;
   let stderrSeen = 0;
@@ -4981,13 +5000,37 @@ function emitOutputLines(emit, stream, response, seen) {
     emit({ type: "build_log", stream, message: line });
   }
 }
+async function ensureRemoteBuildRoot(sandbox) {
+  await runChecked(
+    sandbox,
+    "mkdir",
+    ["-p", REMOTE_BUILD_DIR],
+    void 0,
+    void 0,
+    ROOTFS_BUILDER_PROCESS_USER
+  );
+  await runChecked(
+    sandbox,
+    "chmod",
+    ["0777", REMOTE_BUILD_DIR],
+    void 0,
+    void 0,
+    ROOTFS_BUILDER_PROCESS_USER
+  );
+}
+async function ensureRemoteDirectory(sandbox, remotePath) {
+  await runChecked(sandbox, "mkdir", ["-p", remotePath]);
+}
+async function ensureRemoteParentDir(sandbox, remotePath) {
+  await ensureRemoteDirectory(sandbox, import_node_path.default.posix.dirname(remotePath));
+}
 async function copyLocalPathToSandbox(sandbox, localPath, remotePath) {
   const fileStats = await (0, import_promises.stat)(localPath).catch(() => null);
   if (!fileStats) {
     throw new Error(`Local path not found: ${localPath}`);
   }
   if (fileStats.isFile()) {
-    await runChecked(sandbox, "mkdir", ["-p", import_node_path.default.posix.dirname(remotePath)]);
+    await ensureRemoteParentDir(sandbox, remotePath);
     await sandbox.writeFile(remotePath, await (0, import_promises.readFile)(localPath));
     return;
   }
@@ -4999,14 +5042,10 @@ async function copyLocalPathToSandbox(sandbox, localPath, remotePath) {
     const sourcePath = import_node_path.default.join(localPath, entry.name);
     const destinationPath = import_node_path.default.posix.join(remotePath, entry.name);
     if (entry.isDirectory()) {
-      await runChecked(sandbox, "mkdir", ["-p", destinationPath]);
+      await ensureRemoteDirectory(sandbox, destinationPath);
       await copyLocalPathToSandbox(sandbox, sourcePath, destinationPath);
     } else if (entry.isFile()) {
-      await runChecked(
-        sandbox,
-        "mkdir",
-        ["-p", import_node_path.default.posix.dirname(destinationPath)]
-      );
+      await ensureRemoteParentDir(sandbox, destinationPath);
       await sandbox.writeFile(destinationPath, await (0, import_promises.readFile)(sourcePath));
     }
   }
@@ -5103,6 +5142,7 @@ async function createSandboxImage(source, options = {}, deps = {}) {
       message: `Rootfs builder sandbox ${sandbox.sandboxId} is running`
     });
     emit({ type: "status", message: "Uploading build context..." });
+    await ensureRemoteBuildRoot(sandbox);
     await copyLocalPathToSandbox(sandbox, plan.contextDir, REMOTE_CONTEXT_DIR);
     const spec = await buildRootfsSpec(
       preparedSpec,
@@ -5110,7 +5150,7 @@ async function createSandboxImage(source, options = {}, deps = {}) {
       plan,
       options.diskMb
     );
-    await runChecked(sandbox, "mkdir", ["-p", import_node_path.default.posix.dirname(REMOTE_SPEC_PATH)]);
+    await ensureRemoteParentDir(sandbox, REMOTE_SPEC_PATH);
     await sandbox.writeFile(
       REMOTE_SPEC_PATH,
       new TextEncoder().encode(JSON.stringify(spec, null, 2))
@@ -5193,7 +5233,7 @@ async function runCreateSandboxImageCli(argv = process.argv.slice(2)) {
     { emit: ndjsonStdoutEmit }
   );
 }
-var import_promises, import_node_os, import_node_path, import_node_util, DEFAULT_ROOTFS_DISK_MB, REMOTE_BUILD_DIR, REMOTE_CONTEXT_DIR, REMOTE_SPEC_PATH, REMOTE_METADATA_PATH, ROOTFS_BUILDER_BIN_DIR, ROOTFS_BUILDER_PATH, ROOTFS_BUILDER_COMMAND, UNSUPPORTED_DOCKERFILE_INSTRUCTIONS;
+var import_promises, import_node_os, import_node_path, import_node_util, DEFAULT_ROOTFS_DISK_MB, REMOTE_BUILD_DIR, REMOTE_CONTEXT_DIR, REMOTE_SPEC_PATH, REMOTE_METADATA_PATH, ROOTFS_BUILDER_BIN_DIR, ROOTFS_BUILDER_PATH, ROOTFS_BUILDER_COMMAND, ROOTFS_BUILDER_PROCESS_USER, UNSUPPORTED_DOCKERFILE_INSTRUCTIONS;
 var init_sandbox_image = __esm({
   "src/sandbox-image.ts"() {
     import_promises = require("fs/promises");
@@ -5211,6 +5251,7 @@ var init_sandbox_image = __esm({
     ROOTFS_BUILDER_BIN_DIR = "/usr/local/bin";
     ROOTFS_BUILDER_PATH = "/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin";
     ROOTFS_BUILDER_COMMAND = "tl-rootfs-build";
+    ROOTFS_BUILDER_PROCESS_USER = "root";
     UNSUPPORTED_DOCKERFILE_INSTRUCTIONS = /* @__PURE__ */ new Set([
       "ARG",
       "ONBUILD",