fix(compose): forward port mappings to container run (-p)

[itxtoledo]

Fixes #19.

Problem

mocker compose up showed port mappings in mocker compose ps output but no ports were actually reachable on the host — every published port returned ECONNREFUSED. Meanwhile, the native container run -p <port> worked correctly.

Root cause

ContainerEngine.buildRunArguments() never included -p flags when building the container run argument list. Instead, it relied on PortProxy — a background subprocess (mocker __proxy) that creates a NWListener to relay TCP traffic to the container IP. This proxy fails because:

1. The mocker CLI binary lacks the com.apple.security.network.server entitlement needed to bind host ports
2. NWListener requires App Sandbox or the network server entitlement, neither of which the CLI has

The native container CLI already handles port forwarding correctly when invoked with -p, so the simplest fix is to pass the port mappings directly.

Changes

Sources/MockerKit/Container/ContainerEngine.swift — Added -p flags to buildRunArguments() (4 lines):

for port in containerConfig.ports {
    args += ["-p", port.description]
}

Tests/MockerKitTests/ContainerEngineTests.swift — New unit test testRunArgumentsIncludePortMappings (16 lines) verifies:

• -p flag is present in the argument list
• Port values appear in the expected host:container/protocol format

Tests

• swift build — compiles without errors
• swift test — 82 tests in 9 suites pass (including new test)
• Manual end-to-end verification: clean mocker compose down && mocker compose up -d with a 5-service compose file — all 5 ports respond OPEN (previously all ECONNREFUSED)
• Minimal reproduction: single nginx service — port 18080:80 confirmed reachable

[us]

Thank you so much for this, @itxtoledo! 🙏💚

You nailed the exact same root cause and fix — buildRunArguments was missing -p and falling back to the broken PortProxy. We landed it in #22 (which also picked up the ip:host:container / bare-port parsing and a couple of extra tests), so I'm closing this as superseded — but the diagnosis and direction were 100% yours, and the credit goes to you.

This is shipping in v0.3.3. Please don't let a closed PR discourage you — your report + PR moved this forward fast, and contributions like this are exactly what makes the project better. Hope to see you around here again! 🚀