// Docker sandbox recreation tests cover config-hash labels, bind ordering, and

// mount labels used to decide when shared containers must be rebuilt.

import { EventEmitter } from "node:events";

import fs from "node:fs";

import os from "node:os";

}

function spawnDockerProcess(command: string, args: string[]) {

// The tests assert docker CLI arguments without requiring Docker; this mock

// implements only the inspect/create/start/rm calls used by ensureSandboxContainer.

spawnState.calls.push({ command, args });

const child = createMockDockerChild();

});

it("recreates shared container when array-order change alters hash", async () => {

// Docker flag order is part of the runtime contract, so order-sensitive

// config changes must invalidate a shared container.

const workspaceDir = makeTempDir();

const oldCfg = createSandboxConfig(["1.1.1.1", "8.8.8.8"], [

`${workspaceDir}:/workspace:rw`,

]);

const newCfg = createSandboxConfig(["8.8.8.8", "1.1.1.1"], [

`${workspaceDir}:/workspace:rw`,

]);

const oldCfg = createSandboxConfig(["1.1.1.1", "8.8.8.8"], [`${workspaceDir}:/workspace:rw`]);

const newCfg = createSandboxConfig(["8.8.8.8", "1.1.1.1"], [`${workspaceDir}:/workspace:rw`]);

const oldHash = computeSandboxConfigHash({

docker: oldCfg.docker,

const workspaceDir = makeTempDir();

const customRoot = makeTempDir();

const customUserFile = path.join(customRoot, "USER.md");

const cfg = createSandboxConfig(

["1.1.1.1"],

[`${customUserFile}:/workspace/USER.md:ro`],

);

const cfg = createSandboxConfig(["1.1.1.1"], [`${customUserFile}:/workspace/USER.md:ro`]);

cfg.docker.dangerouslyAllowExternalBindSources = true;

const expectedHash = computeSandboxConfigHash({

docker: cfg.docker,

});

it("applies read-only skill overlays after custom binds", async () => {

// Protected skill overlays must be appended last so even an overlapping

// custom bind cannot make checked-in skills writable.

const workspaceDir = makeTempDir();

const customRoot = makeTempDir();

fs.mkdirSync(path.join(workspaceDir, "skills", "demo"), { recursive: true });