Module docker_cleanup 

Attempt-scoped Docker accounting for native Linux runners.

The journal is outside the disposable workspace. Only creations passing through the private proxy are attributed; absence of a container reference or an old creation date is never evidence that a volume is ours.

Modules

http

Small bounded HTTP/1 framing for local Docker JSON requests. Streaming endpoints are relayed by the proxy without buffering their payloads.

Structs

Config

DockerCleanup

Intent

Journal

Reply

Resource

ResourceDetail

SweepReport

Enums

Kind

Mode

Constants

ATTEMPT_LABEL

HOST_LABEL

OPERATION_LABEL

RETAIN_LABEL

Traits

Engine

Narrow Docker API port; cleanup never invokes global prune endpoints.

Functions

capture_created

Record only exact owned IDs and implicit anonymous mounts not supplied by the workflow. Called before releasing a successful create response.

clean_resources

Caller must prove the authoritative attempt is cleaned and the proxy gone. Docker’s unforced volume/network delete is the final atomic in-use check.

creation_intent

Return an intent only for disposable creations. Explicit named volumes and builder state are persistent by default, even if no container uses them now.

internal_proxy_entry

Handle the private companion invocation before the ordinary CLI. The only argument is a local journal path, never a request body or credential.

write_json