zidane 5.10.13 → 5.11.1
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/README.md +31 -5
- package/dist/{agent-BHkvYIH9.d.ts → agent-D0W9yClt.d.ts} +114 -27
- package/dist/agent-D0W9yClt.d.ts.map +1 -0
- package/dist/chat/pure.d.ts +3 -3
- package/dist/chat.d.ts +7 -7
- package/dist/chat.js +2 -2
- package/dist/contexts/docker.d.ts +1 -1
- package/dist/contexts/docker.d.ts.map +1 -1
- package/dist/contexts/docker.js +53 -14
- package/dist/contexts/docker.js.map +1 -1
- package/dist/contexts/e2b.d.ts +168 -0
- package/dist/contexts/e2b.d.ts.map +1 -0
- package/dist/contexts/e2b.js +261 -0
- package/dist/contexts/e2b.js.map +1 -0
- package/dist/{contexts-BJVgG0LY.js → contexts-DglWSzmR.js} +59 -9
- package/dist/contexts-DglWSzmR.js.map +1 -0
- package/dist/contexts.d.ts +3 -3
- package/dist/contexts.js +1 -1
- package/dist/eval.d.ts +1 -1
- package/dist/eval.js +5 -5
- package/dist/eval.js.map +1 -1
- package/dist/{headless-CPaunZsU.js → headless-Bb5gU8AR.js} +6 -6
- package/dist/{headless-CPaunZsU.js.map → headless-Bb5gU8AR.js.map} +1 -1
- package/dist/headless.d.ts +1 -1
- package/dist/headless.js +1 -1
- package/dist/{index-C_t8tW_X.d.ts → index-CrMb8jCE.d.ts} +2 -2
- package/dist/{index-C_t8tW_X.d.ts.map → index-CrMb8jCE.d.ts.map} +1 -1
- package/dist/{index-BIo67xLV.d.ts → index-D60tX5XC.d.ts} +10 -3
- package/dist/index-D60tX5XC.d.ts.map +1 -0
- package/dist/{index-C4aT2kO_.d.ts → index-DZR99FD4.d.ts} +30 -111
- package/dist/index-DZR99FD4.d.ts.map +1 -0
- package/dist/index.d.ts +7 -6
- package/dist/index.js +11 -10
- package/dist/index.js.map +1 -1
- package/dist/{interpolate-Dy7Lunvg.js → interpolate-CTfr0GdR.js} +19 -1
- package/dist/{interpolate-Dy7Lunvg.js.map → interpolate-CTfr0GdR.js.map} +1 -1
- package/dist/logger-Ktm-lj1s.js +300 -0
- package/dist/logger-Ktm-lj1s.js.map +1 -0
- package/dist/logger-n4LsLISE.d.ts +102 -0
- package/dist/logger-n4LsLISE.d.ts.map +1 -0
- package/dist/{login-0jP1pnSJ.js → login-BHhOdTp9.js} +4 -301
- package/dist/login-BHhOdTp9.js.map +1 -0
- package/dist/{mcp-tevNihk_.js → mcp-Cy9mgCcr.js} +22 -9
- package/dist/mcp-Cy9mgCcr.js.map +1 -0
- package/dist/mcp.d.ts +1 -1
- package/dist/mcp.js +1 -1
- package/dist/{messages-C_1AmSpk.js → messages-RPKrEPvH.js} +6 -2
- package/dist/messages-RPKrEPvH.js.map +1 -0
- package/dist/output/stream-json.d.ts +2 -2
- package/dist/output/stream-json.js +1 -1
- package/dist/output/terminal.d.ts +2 -2
- package/dist/output/terminal.js +1 -0
- package/dist/output/terminal.js.map +1 -1
- package/dist/{presets-Cm2BPJaU.js → presets-D5ibZTml.js} +2 -2
- package/dist/{presets-Cm2BPJaU.js.map → presets-D5ibZTml.js.map} +1 -1
- package/dist/presets.d.ts +2 -2
- package/dist/presets.js +1 -1
- package/dist/{providers-BGBB18zz.js → providers-C2cxujp_.js} +85 -20
- package/dist/providers-C2cxujp_.js.map +1 -0
- package/dist/providers.d.ts +1 -1
- package/dist/providers.js +2 -2
- package/dist/restate.d.ts +2 -2
- package/dist/restate.js +4 -1
- package/dist/restate.js.map +1 -1
- package/dist/session/sqlite.d.ts +1 -1
- package/dist/session/sqlite.d.ts.map +1 -1
- package/dist/session/sqlite.js +36 -4
- package/dist/session/sqlite.js.map +1 -1
- package/dist/{session-CtAWwwkn.js → session-Do_TQV7c.js} +70 -22
- package/dist/session-Do_TQV7c.js.map +1 -0
- package/dist/session.d.ts +2 -2
- package/dist/session.js +3 -3
- package/dist/shell-quote-BmnhZmdM.js +33 -0
- package/dist/shell-quote-BmnhZmdM.js.map +1 -0
- package/dist/skills.d.ts +3 -3
- package/dist/skills.js +1 -1
- package/dist/skills.js.map +1 -1
- package/dist/{tool-formatters-D_fX6FGl.d.ts → tool-formatters-RT5-gyE2.d.ts} +2 -2
- package/dist/{tool-formatters-D_fX6FGl.d.ts.map → tool-formatters-RT5-gyE2.d.ts.map} +1 -1
- package/dist/tools/fetch-url.d.ts +1 -1
- package/dist/tools/web-search.d.ts +1 -1
- package/dist/{tools-NxnEmzYg.js → tools-ZHKOh44k.js} +342 -123
- package/dist/tools-ZHKOh44k.js.map +1 -0
- package/dist/tools.d.ts +2 -2
- package/dist/tools.js +1 -1
- package/dist/{transcript-anchors-DA6XawEU.d.ts → transcript-anchors-B4FxkG-8.d.ts} +10 -4
- package/dist/transcript-anchors-B4FxkG-8.d.ts.map +1 -0
- package/dist/{transcript-anchors-B_c7gWot.js → transcript-anchors-CS46ul6X.js} +10 -10
- package/dist/transcript-anchors-CS46ul6X.js.map +1 -0
- package/dist/tui.d.ts +3 -3
- package/dist/tui.d.ts.map +1 -1
- package/dist/tui.js +167 -41
- package/dist/tui.js.map +1 -1
- package/dist/{turn-operations-CCl7rpbT.d.ts → turn-operations-CoRj3mYZ.d.ts} +3 -3
- package/dist/{turn-operations-CCl7rpbT.d.ts.map → turn-operations-CoRj3mYZ.d.ts.map} +1 -1
- package/dist/{types-BibzMDjX.d.ts → types-B39tBba1.d.ts} +69 -2
- package/dist/types-B39tBba1.d.ts.map +1 -0
- package/dist/types-BiobHM1D.js.map +1 -1
- package/dist/types.d.ts +5 -5
- package/docs/ARCHITECTURE.md +1 -1
- package/docs/CHAT.md +3 -3
- package/docs/EXECUTION_CONTEXT.md +257 -0
- package/docs/RUN_IN_BACKGROUND.md +8 -0
- package/docs/SKILL.md +3 -3
- package/package.json +57 -24
- package/dist/agent-BHkvYIH9.d.ts.map +0 -1
- package/dist/contexts-BJVgG0LY.js.map +0 -1
- package/dist/index-BIo67xLV.d.ts.map +0 -1
- package/dist/index-C4aT2kO_.d.ts.map +0 -1
- package/dist/login-0jP1pnSJ.js.map +0 -1
- package/dist/mcp-tevNihk_.js.map +0 -1
- package/dist/messages-C_1AmSpk.js.map +0 -1
- package/dist/providers-BGBB18zz.js.map +0 -1
- package/dist/session-CtAWwwkn.js.map +0 -1
- package/dist/tools-NxnEmzYg.js.map +0 -1
- package/dist/transcript-anchors-B_c7gWot.js.map +0 -1
- package/dist/transcript-anchors-DA6XawEU.d.ts.map +0 -1
- package/dist/types-BibzMDjX.d.ts.map +0 -1
|
@@ -1,5 +1,5 @@
|
|
|
1
|
-
import {
|
|
2
|
-
import { D as Owner, E as EditPayload, G as ProviderKey, L as CompletionProvider, M as StreamEvent, R as CompletionReference, W as ProviderAuth, Y as ModelInfo, l as ApprovalDecision, w as EditOutcome } from "./tool-formatters-
|
|
1
|
+
import { An as ToolResultContent, Cn as SessionTurn, Fn as TurnUsage, k as SkillConfig } from "./agent-D0W9yClt.js";
|
|
2
|
+
import { D as Owner, E as EditPayload, G as ProviderKey, L as CompletionProvider, M as StreamEvent, R as CompletionReference, W as ProviderAuth, Y as ModelInfo, l as ApprovalDecision, w as EditOutcome } from "./tool-formatters-RT5-gyE2.js";
|
|
3
3
|
|
|
4
4
|
//#region src/chat/color-gradient.d.ts
|
|
5
5
|
/**
|
|
@@ -660,4 +660,4 @@ declare function countNeighbors(turnIds: readonly string[], turnId: string): {
|
|
|
660
660
|
} | null;
|
|
661
661
|
//#endregion
|
|
662
662
|
export { uniqueFilesFromReferences as $, buildUnifiedDiff as A, buildEditOutcomesAnnotation as B, EditSummary as C, PreviewResult as D, InlineSegment as E, previewEditPayload as F, rewriteMultiEditHeader as G, mergeApprovalAndBodyOutcomes as H, splitLines as I, SKILLS_TRIGGER as J, stripEditOutcomesAnnotation as K, summarizeEditPayload as L, computeLineDiff as M, extractEditPayload as N, applyEditPayload as O, filetypeFromPath as P, createFilesCompletionProvider as Q, tokenize as R, EditHunkSummary as S, InlineDiff as T, parseEditOutcomesFromResult as U, maskToOutcomeKinds as V, resolveApprovalForPayload as W, uniqueSkillNamesFromReferences as X, createSkillsCompletionProvider as Y, FILES_TRIGGER as Z, formatTaskSummary as _, finalizeStreamingMarkdown as a, DiffLine as b, CatalogEntry as c, indexOfEntry as d, FileEntry as et, ageString as f, formatTaskStatus as g, formatDuration as h, turnAsText as i, buildLinearRamp as it, computeInlineDiff as j, buildContextualDiff as k, buildModelCatalog as l, fmtTokens as m, deleteTurnSafely as n, listProjectFiles as nt, finalizeStreamingMarkdownForOwner as o, compactPath as p, summarizeOutcomes as q, truncateTurnsAt as r, blendHsl as rt, turnContextSize as s, countNeighbors as t, ListProjectFilesOptions as tt, filterModelCatalog as u, previewLine as v, HunkResolution as w, DiffOp as x, shortId as y, ResolvedApproval as z };
|
|
663
|
-
//# sourceMappingURL=turn-operations-
|
|
663
|
+
//# sourceMappingURL=turn-operations-CoRj3mYZ.d.ts.map
|
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"turn-operations-
|
|
1
|
+
{"version":3,"file":"turn-operations-CoRj3mYZ.d.ts","names":[],"sources":["../src/chat/color-gradient.ts","../src/chat/files-discovery.ts","../src/chat/completion-files.ts","../src/chat/completion-skills.ts","../src/chat/edit-approval.ts","../src/tools/edit-utils.ts","../src/chat/edit-diff.ts","../src/chat/format.ts","../src/chat/model-catalog.ts","../src/chat/streaming-pure.ts","../src/chat/turn-operations.ts"],"mappings":";;;;;;;;iBAmFgB,QAAA,CAAS,IAAA,UAAc,EAAA,UAAY,CAAA;AAAnD;;;;;AAAA,iBAuBgB,eAAA,CAAgB,IAAA,UAAc,EAAA,UAAY,CAAA;;;;;;;;AAvB1D;;;;;;;;AAA4D;AAAA,UC9D3C,SAAA;EDqFc;ECnF7B,IAAA;EDmF6B;ECjF7B,IAAA;EDiF4C;EC/E5C,MAAA;AAAA;AD+EiE;AAAA,UClClD,uBAAA;;EAEf,GAAA;EArDe;EAuDf,QAAA;;EAEA,MAAA,GAAS,WAAW;AAAA;;;;AAnDd;AA6CR;;;;;iBAkBsB,gBAAA,CAAiB,IAAA,GAAM,uBAAA,GAA+B,OAAA,CAAQ,SAAA;;;;cCrEvE,aAAA;AFqFb;;;;;;;;AAAmE;;;;ACrFnE;;;ADqFA,iBE8BgB,6BAAA,CAA8B,IAAA;EDjH5C,qFCmHA,UAAA,iBAA2B,SAAA;ED/G3B;;AAAM;AA6CR;;;;;;;;;EC+EE,aAAA,SAAsB,OAAA,UAAiB,SAAA,KD7DnB;EC+DpB,KAAA;;;;;;;;;;;;EAYA,UAAA,IAAc,KAAA,EAAO,SAAA;AAAA,IACnB,kBAAA,CAAmB,SAAA;;;AAjJvB;;;iBA0OgB,yBAAA,CACd,UAAA,WAAqB,mBAAA,cACpB,SAAS;;;AF9KgD;AAAA,cG7D/C,cAAA;;;;;;;;AHoFsD;iBGVnD,8BAAA,CAA+B,IAAA;gFAE7C,UAAA,iBAA2B,WAAA,IF7EZ;EE+Ef,UAAA;;;;;;;AFzEM;AA6CR;;;EEuCE,aAAA,SAAsB,OAAA,UAAiB,WAAA;AAAA,IACrC,kBAAA,CAAmB,WAAA;;;;;AFlCD;iBEiGN,8BAAA,CACd,UAAmD,WAA9B,mBAAmB;;;;;AH7FkB;AAuB5D;;;;;iBIrFgB,kBAAA,CACd,IAAA,sBACA,cAAA,UACA,YAAA,YACC,WAAW;;;AJiFqD;;;;ACrFnE;;;;;UGyBiB,gBAAA;EHnBf;EGqBA,QAAA,EAAU,WAAA;EHrBJ;EGuBN,WAAA;EHsBsC;;;;;;;EGdtC,cAAA,EAAgB,WAAW;AAAA;AAAA,iBAGb,yBAAA,CACd,QAAA,EAAU,gBAAA,EACV,OAAA,EAAS,WAAA,GACR,gBAAA;;;;;;;iBAqEa,2BAAA,CAA4B,QAAgC,WAAb,WAAW;;;;;;AH3CmB;;;iBGgE7E,2BAAA,CACd,MAAA,oBAA0B,iBAAA,KACzB,WAAW;AFvId;;;;AAA0B;AAmH1B;;;;;;;;;;AAnHA,iBE2MgB,2BAAA,CAA4B,IAAY;;;;;;;;;;;;;;AF1DxB;AAyFhC;;;;;;;;iBEkBgB,4BAAA,CACd,QAAA,WAAmB,WAAA,IACnB,IAAA,WAAe,WAAA,YACd,WAAA;;;;AD9PH;;;;AAA2B;AA0E3B;;;;;;;;;iBCsNgB,sBAAA,CACd,IAAA,UACA,MAAA,WAAiB,WAAW,IAC5B,IAAA;;;;;;iBA8Cc,iBAAA,CAAkB,QAAA,WAAmB,WAAW;EAC9D,OAAA;EACA,MAAA;EACA,OAAA;EACA,MAAA;EACA,OAAA;EACA,KAAA;AAAA;;;AHxVF;;;;;;;;AAMQ;AA6CR;;;;;;;;;AAMsB;AAYtB;;;;;;;;AArEA,UIwHiB,aAAA;EACf,MAAA;EACA,WAAA;EJrDkF;EIuDlF,GAAA;AAAA;;;iBClHc,kBAAA,CACd,IAAA,UACA,KAAA,EAAO,MAAA,mBACP,YAAA,YACC,WAAW;AAAA,KA0EF,MAAA;AAAA,UAEK,QAAA;EACf,EAAA,EAAI,MAAM;EACV,IAAA;AAAA;AAAA,iBAGc,eAAA,CAAgB,SAAA,UAAmB,SAAA,WAAoB,QAAQ;;;;;ANjCnB;iBMkF5C,UAAA,CAAW,CAAS;AAAA,UAwBnB,aAAA;EACf,IAAA;EACA,OAAO;AAAA;AAAA,UAGQ,UAAA;EACf,WAAA,EAAa,aAAA;EACb,WAAA,EAAa,aAAa;AAAA;AAAA,iBAGZ,iBAAA,CAAkB,OAAA,UAAiB,OAAA,WAAkB,UAAU;;;ALlL/E;;;;;;iBKoPgB,QAAA,CAAS,CAAS;;AL9O1B;AA6CR;;;;;;;iBKwOgB,gBAAA,CAAiB,OAAA,EAAS,WAAW,EAAE,YAAA;;ALlOjC;AAYtB;;;;;;;;;;;;;AAA6F;;;;ACrE7F;;iBI0TgB,mBAAA,CACd,OAAA,EAAS,WAAW,EACpB,YAAA,UACA,YAAA;AAAA,UAmFe,eAAA;EJhZS;EIkZxB,IAAA;EJ/R2C;EIiS3C,KAAA;EJ/R2B;EIiS3B,OAAA;EJpRsB;EIsRtB,QAAA;EJvQqB;EIyQrB,QAAA;AAAA;AAAA,UAGe,WAAA;EACf,UAAA;EACA,YAAA;EACA,KAAA,EAAO,eAAe;AAAA;;;;;;;;;;AJ/QQ;AAyFhC;;;iBIsMgB,oBAAA,CAAqB,OAAA,EAAS,WAAA,GAAc,WAAW;AAAA,UA+GtD,cAAA;EJpTf;;;AACU;;EIyTV,QAAA;;EAEA,GAAA,GAAM,aAAa;EHtiBM;EGwiBzB,WAAA;EHxiByB;EG0iBzB,SAAA;AAAA;AAAA,UAGe,aAAA;;EAEf,QAAA;EHtduC;EGwdvC,UAAA,EAAY,cAAA;EHvdS;;;;;;EG8drB,WAAA;EH/dA;;;;;;EGseA,eAAA,EAAiB,WAAW;AAAA;AAAA,iBAGd,kBAAA,CACd,OAAA,EAAS,WAAA,EACT,YAAA,UACA,YAAA,YACC,aAAa;AAAA,iBA8EA,gBAAA,CAAiB,OAAoB,EAAX,WAAW;AAAA,iBA4DrC,gBAAA,CAAiB,IAAY;;;;iBCztB7B,SAAA,CAAU,CAAS;;iBASnB,SAAA,CAAU,EAAA,UAAY,GAAwB;;iBAa9C,OAAA,CAAQ,EAAU;;;;;;;;APgD0B;AAuB5D;;;;;;;;AAAmE;;iBOjDnD,WAAA,CAAY,CAAA,UAAW,GAAW;;ANpClD;;;;;;;;AAMQ;AA6CR;;;;;;;iBMSgB,cAAA,CAAe,EAAU;;ANHnB;AAYtB;;;;;;;iBMgBgB,gBAAA,CAAiB,IAAA;EAC/B,MAAA;EACA,QAAA;EACA,MAAA,GAAS,MAAA,CAAO,OAAO;AAAA;;ANnBoE;;;;ACrE7F;;;;AAA0B;AAmH1B;iBKTgB,iBAAA,CAAkB,IAAA;EAChC,OAAA;EACA,MAAA;EACA,QAAA;EACA,MAAA,GAAS,MAAA,CAAO,OAAO;EACvB,UAAA;AAAA,GACC,eAAA;;;;;;;;;;;;;;;iBAkBa,WAAA,CAAY,IAAA,UAAc,QAAA,WAAmB,IAAA;;;APpED;AAAA,UQnE3C,YAAA;EACf,WAAA,EAAa,WAAA;EACb,aAAA;EACA,KAAA,EAAO,SAAS;ERuFc;;;;AAAmC;;;EQ/EjE,YAAA;AAAA;;;;;;;;APAM;AA6CR;;;;;iBO7BgB,iBAAA,CAAkB,IAAA;EAChC,SAAA,WAAoB,YAAA;EACpB,SAAA,GAAY,GAAA,EAAK,WAAA,cAAyB,SAAA,IPiCtB;EO/BpB,OAAA;IAAY,WAAA,EAAa,WAAA;IAAa,OAAA;EAAA;AAAA,IACpC,YAAA;;;;;;;;;;AP0CyF;iBOD7E,kBAAA,CACd,OAAA,WAAkB,YAAA,IAClB,KAAA,WACC,YAAY;;;ANvEf;;;iBMoFgB,YAAA,CACd,OAAA,WAAkB,YAAA,IAClB,MAAA;EAAU,WAAA,EAAa,WAAW;EAAE,OAAA;AAAA;;;;iBCvFtB,yBAAA,CAA0B,MAAA,EAAQ,WAAA,KAAgB,WAAW;AT+DjB;AAAA,iBSlD5C,iCAAA,CAAkC,MAAA,EAAQ,WAAA,IAAe,KAAA,EAAO,KAAA,GAAQ,WAAA;;;;;;;;ATyErB;;;;ACrFnE;iBQwCgB,eAAA,CAAgB,KAA4B,EAArB,SAAS;;;AT6ChD;;;;;;;;AAAmE;;;;ACrFnE;;;;;ADqFA,iBUzEgB,eAAA,CAAgB,KAAA,WAAgB,WAAA,IAAe,MAAA,WAAiB,WAAW;;;ATNnF;AA6CR;;;;;;;;;AAMsB;AAYtB;;;;iBShCgB,gBAAA,CAAiB,KAAA,WAAgB,WAAA,IAAe,MAAA,WAAiB,WAAW;;;;;;;;;iBAwD5E,UAAA,CAAW,IAAiB,EAAX,WAAW;;;;AR7F5C;;iBQ4HgB,cAAA,CACd,OAAA,qBACA,MAAA;EACG,MAAA;EAAgB,KAAA;AAAA"}
|
|
@@ -60,8 +60,31 @@ interface ExecResult {
|
|
|
60
60
|
interface SpawnConfig {
|
|
61
61
|
/** Working directory (created if it doesn't exist) */
|
|
62
62
|
cwd?: string;
|
|
63
|
+
/**
|
|
64
|
+
* Optional workspace-containment root for the file methods (`readFile`,
|
|
65
|
+
* `writeFile`, `listFiles`) of the process context.
|
|
66
|
+
*
|
|
67
|
+
* When set, a resolved path that escapes this root (via absolute path,
|
|
68
|
+
* `..`, or a symlink pointing outside) is rejected before any I/O. Default
|
|
69
|
+
* unset = no containment (back-compat; the agent can read/write anywhere
|
|
70
|
+
* the host process can). Set this for untrusted workloads to confine file
|
|
71
|
+
* tools to a directory. Shell commands are not covered — use a sandbox /
|
|
72
|
+
* docker context for full isolation.
|
|
73
|
+
*/
|
|
74
|
+
workspaceRoot?: string;
|
|
63
75
|
/** Environment variables */
|
|
64
76
|
env?: Record<string, string>;
|
|
77
|
+
/**
|
|
78
|
+
* Whether spawned shells inherit the parent `process.env` (process context).
|
|
79
|
+
*
|
|
80
|
+
* Default `true` (preserves existing behavior — children see the parent
|
|
81
|
+
* environment including anything Bun auto-loaded from `.env`). Set `false`
|
|
82
|
+
* for untrusted workloads so secrets in the parent environment aren't
|
|
83
|
+
* readable by tool commands; only `env` / per-call env plus a minimal base
|
|
84
|
+
* (`PATH`, `HOME`, `SHELL`, `LANG`, `LC_ALL`, `USER`, `TERM`, `TMPDIR`) are
|
|
85
|
+
* passed through.
|
|
86
|
+
*/
|
|
87
|
+
inheritEnv?: boolean;
|
|
65
88
|
/** Docker image (only for 'docker' context) */
|
|
66
89
|
image?: string;
|
|
67
90
|
/** Docker container name prefix (only for 'docker' context) */
|
|
@@ -78,6 +101,12 @@ interface SpawnConfig {
|
|
|
78
101
|
sandbox?: {
|
|
79
102
|
provider: string;
|
|
80
103
|
apiKey?: string;
|
|
104
|
+
/**
|
|
105
|
+
* Attach to a pre-existing sandbox by id rather than creating one
|
|
106
|
+
* (provider-specific; E2B maps it to `Sandbox.connect`). The provider
|
|
107
|
+
* leaves a connected sandbox running on teardown.
|
|
108
|
+
*/
|
|
109
|
+
sandboxId?: string;
|
|
81
110
|
[key: string]: unknown;
|
|
82
111
|
};
|
|
83
112
|
/**
|
|
@@ -128,6 +157,44 @@ interface SpawnConfig {
|
|
|
128
157
|
* a label they own: `docker ps -aq --filter label=my-app=true`.
|
|
129
158
|
*/
|
|
130
159
|
labels?: Record<string, string>;
|
|
160
|
+
/**
|
|
161
|
+
* Container hardening options (docker context only).
|
|
162
|
+
*
|
|
163
|
+
* All fields are opt-in and OFF by default to preserve existing behavior
|
|
164
|
+
* (containers run with the image's default user/capabilities). Enable them
|
|
165
|
+
* for untrusted workloads. `dropAllCapabilities` and a non-root `user`
|
|
166
|
+
* (see {@link SpawnConfig.user}) can break images that expect root or
|
|
167
|
+
* specific capabilities, so they are not applied unless requested.
|
|
168
|
+
*/
|
|
169
|
+
hardening?: ContextHardening;
|
|
170
|
+
}
|
|
171
|
+
/**
|
|
172
|
+
* Opt-in container hardening for the docker context. Every field defaults to
|
|
173
|
+
* "unset" so an omitted `hardening` (or omitted field) reproduces the prior,
|
|
174
|
+
* unrestricted behavior — this keeps the option purely additive.
|
|
175
|
+
*/
|
|
176
|
+
interface ContextHardening {
|
|
177
|
+
/**
|
|
178
|
+
* Drop all Linux capabilities (`CapDrop: ['ALL']`). Strong isolation, but
|
|
179
|
+
* breaks images needing capabilities (e.g. binding low ports, `ping`).
|
|
180
|
+
* Default: `false`.
|
|
181
|
+
*/
|
|
182
|
+
dropAllCapabilities?: boolean;
|
|
183
|
+
/**
|
|
184
|
+
* Set `no-new-privileges` so processes can't gain privileges via setuid
|
|
185
|
+
* binaries. Low blast radius; safe for most workloads. Default: `false`.
|
|
186
|
+
*/
|
|
187
|
+
noNewPrivileges?: boolean;
|
|
188
|
+
/**
|
|
189
|
+
* Mount the container root filesystem read-only. Pair with writable mounts
|
|
190
|
+
* for scratch space. Default: `false`.
|
|
191
|
+
*/
|
|
192
|
+
readonlyRootfs?: boolean;
|
|
193
|
+
/**
|
|
194
|
+
* Max number of processes (`PidsLimit`) — caps fork-bombs. Default: unset
|
|
195
|
+
* (no limit). A few hundred is usually plenty for an agent sandbox.
|
|
196
|
+
*/
|
|
197
|
+
pidsLimit?: number;
|
|
131
198
|
}
|
|
132
199
|
interface ContextMount {
|
|
133
200
|
/** Absolute host path to mount. */
|
|
@@ -420,5 +487,5 @@ interface TaskStallInfo {
|
|
|
420
487
|
bytesWritten: number;
|
|
421
488
|
}
|
|
422
489
|
//#endregion
|
|
423
|
-
export {
|
|
424
|
-
//# sourceMappingURL=types-
|
|
490
|
+
export { ContextType as a, ExecutionContext as c, TaskEntry as d, TaskExitInfo as f, resolveDetachedTasksCapability as h, ContextMount as i, ExecutionHandle as l, TaskStallInfo as m, ContextCapabilities as n, DetachedTasksCapability as o, TaskHandle as p, ContextHardening as r, ExecResult as s, BackgroundTaskStatus as t, SpawnConfig as u };
|
|
491
|
+
//# sourceMappingURL=types-B39tBba1.d.ts.map
|
|
@@ -0,0 +1 @@
|
|
|
1
|
+
{"version":3,"file":"types-B39tBba1.d.ts","names":[],"sources":["../src/contexts/types.ts"],"mappings":";;AA4BA;;;;AAAmC;AAEnC;;;;;;;;;;;AAeyC;AAOzC;;;;;KAxBY,uBAAA;AAAA,UAEK,mBAAA;EAsBiF;EApBhG,KAAA;EA8Be;EA5Bf,UAAA;;EAEA,OAAA;EA2BA;EAzBA,GAAA;EA0BM;;;AAEH;AAOL;;EA5BE,aAAA,GAAgB,uBAAuB;AAAA;;;;;iBAOzB,8BAAA,CAA+B,OAAA,EAAS,gBAAA,GAAmB,uBAAuB;AA+BlG;AAAA,UArBiB,eAAA;EACf,EAAA;EACA,IAAA,EAAM,WAAW;EAoDR;EAlDT,GAAA;AAAA;AAAA,UAOe,UAAA;EACf,MAAA;EACA,MAAA;EACA,QAAA;AAAA;AAAA,UAOe,WAAA;EAgBT;EAdN,GAAA;EA2BA;;;;;;;;;;;EAfA,aAAA;EAuCG;EArCH,GAAA,GAAM,MAAA;EA0DN;;;;;;;;;;EA/CA,UAAA;EAuF4B;EArF5B,KAAA;EA6Fe;EA3Ff,IAAA;;EAEA,MAAA,GAAS,YAAA;EA+FT;EA7FA,MAAA;IAuGA,yBArGE,MAAA,WA0GO;IAxGP,GAAA,WA2Ga;IAzGb,OAAA;EAAA;EAyGyB;EAtG3B,OAAA;IACE,QAAA;IACA,MAAA;IAiHF;;AAAM;AAOR;;IAlHI,SAAA;IAAA,CACC,GAAA;EAAA;EAmHY;;;;;;;;EAxGf,cAAA;EAmIiF;;;;;;;;EAzHjF,KAAA,GAAQ,KAAA;IAAQ,SAAA;IAAmB,IAAA;IAAe,KAAA;EAAA;EAiNxC;;;;;;;;;EAtMV,IAAA;EA6PsB;;;;;;;EApPtB,OAAA;EAsQuE;;;;;;;EA7PvE,MAAA,GAAS,MAAA;EA8QoC;;;;;;;;;EAnQ7C,SAAA,GAAY,gBAAA;AAAA;;;;;;UAQG,gBAAA;EAyE0F;;;;;EAnEzG,mBAAA;EAkGA;;;;EA7FA,eAAA;EAkGI;;;;EA7FJ,cAAA;EAuGc;;;;EAlGd,SAAA;AAAA;AAAA,UAGe,YAAA;EAkHV;EAhHL,MAAA;EA4HA;EA1HA,MAAA;EA2HE;EAzHF,QAAA;EA2HK;;;;;;EApHL,MAAA;AAAA;AAAA,KAOU,WAAA;AAAA,UAEK,gBAAA;EAyIb;EAAA,SAvIO,IAAA,EAAM,WAAA;EAwImB;EAAA,SArIzB,YAAA,EAAc,mBAAA;EAqIrB;EAlIF,KAAA,GAAQ,MAAA,GAAS,WAAA,KAAgB,OAAA,CAAQ,eAAA;EAmI5B;;;;;;;;;;;;;;;;;EAhHb,IAAA,GAAO,MAAA,EAAQ,eAAA,EAAiB,OAAA,UAAiB,OAAA;IAAY,GAAA;IAAc,GAAA,GAAM,MAAA;IAAwB,OAAA;IAAkB,MAAA,GAAS,WAAA;EAAA,MAAkB,OAAA,CAAQ,UAAA;EAiK1I;;;;;;;;;;;;;;;;;;;;AAiByB;AAiB/C;;;;AAAgC;AAUhC;;;EA9KE,cAAA,IACE,MAAA,EAAQ,eAAA,EACR,OAAA,UACA,OAAA;IACE,GAAA;IACA,GAAA,GAAM,MAAA;IAoLV;;AAAU;AAaZ;;;;IAzLM,SAAA,UA6LK;IA3LL,MAAA,IAAU,IAAA,EAAM,YAAA;IA2LG;;;;;;IApLnB,cAAA;IAoLK;;;;;;AAKF;IAjLH,cAAA,WAyLoB;IAvLpB,OAAA,IAAW,IAAA,EAAM,aAAA;EAAA,MAEhB,OAAA,CAAQ,UAAA;EAsLb;;;;;;;;;;EA1KA,cAAA,IACE,MAAA,EAAQ,eAAA,EACR,MAAA,aACG,OAAA,CAAQ,YAAA;EAqLJ;;;;AAEG;EAhLZ,cAAA,IACE,MAAA,EAAQ,eAAA,KACL,OAAA,UAAiB,SAAA;EAuLM;;;;;;;;;AAOhB;;;;;;;;EA3KZ,cAAA,IACE,MAAA,EAAQ,eAAA,EACR,MAAA,UACA,OAAA;IAAY,SAAA;IAAoB,MAAA,GAAS,WAAA;EAAA,MACtC,OAAA,CAAQ,YAAA;;;;;;;;;;;;;;;;;;;;;;;;;;EA2Bb,uBAAA,IACE,UAAA,EAAY,eAAA,EACZ,QAAA,EAAU,eAAA,EACV,SAAA,IAAa,IAAA,EAAM,YAAA,cAChB,OAAA,UAAiB,SAAA;;EAGtB,QAAA,GAAW,MAAA,EAAQ,eAAA,EAAiB,IAAA,aAAiB,OAAA;;;;;;;;;;;EAYrD,cAAA,IAAkB,MAAA,EAAQ,eAAA,EAAiB,IAAA,aAAiB,OAAA,CAAQ,UAAA;;EAGpE,SAAA,GAAY,MAAA,EAAQ,eAAA,EAAiB,IAAA,UAAc,OAAA,aAAoB,OAAA;;EAGvE,SAAA,GAAY,MAAA,EAAQ,eAAA,EAAiB,IAAA,aAAiB,OAAA;;;;;;;;;;EAWtD,aAAA,IAAiB,MAAA,EAAQ,eAAA,EAAiB,aAAA,aAA0B,OAAA;;EAGpE,OAAA,GAAU,MAAA,EAAQ,eAAA,KAAoB,OAAA;AAAA;;;;;;;;;;;KAiB5B,oBAAA;;;;;;;;;UAUK,UAAA;;;;;;;EAOf,MAAA;;EAEA,GAAA;;EAEA,UAAA;AAAA;;;;;;;;;;;UAae,YAAA;EACf,MAAA;EACA,MAAA,EAAQ,OAAA,CAAQ,oBAAA;EAChB,QAAA;EACA,MAAA,GAAS,MAAA,CAAO,OAAA;EAChB,UAAA;;EAEA,UAAA;;EAEA,OAAA;AAAA;;;;;;UAQe,SAAA;EACf,MAAA;EACA,GAAA;EACA,OAAA;EACA,GAAA;EACA,SAAA;;;;;;EAMA,OAAA;EACA,UAAA;EACA,MAAA,EAAQ,oBAAA;EACR,QAAA;EACA,MAAA,GAAS,MAAA,CAAO,OAAO;;EAEvB,YAAA;AAAA;;;;;;;UASe,aAAA;EACf,MAAA;EACA,OAAA;EACA,UAAA;;EAEA,YAAA;;EAEA,YAAA;AAAA"}
|