@arnilo/prism-tools 0.0.0-stage → 0.13.1

package/coding/src/security/index.ts

@@ -0,0 +1,199 @@
+export type { CommandRule, CommandRuleAction, CommandRuleEvaluation } from "./command-rules.js";
+export {
+  evaluateCommandRules,
+  hasShellMetacharacters,
+} from "./command-rules.js";
+export type { DockerCliRequest, DockerCliResult, DockerRunner } from "./docker-cli.js";
+export { createSecretRedactor, DockerCliError } from "./docker-cli.js";
+export type {
+  CreateDockerSandboxOptions,
+  DockerNetworkConfig,
+  DockerProcessRecoveryBackendOptions,
+  DockerProcessRefData,
+} from "./docker-sandbox.js";
+export {
+  assertBrowserSandboxNetwork,
+  assertEgressAttestation,
+  composeEgressSandboxNetwork,
+  computeCommandFingerprint,
+  createDockerProcessRecoveryBackend,
+  createDockerSandbox,
+  DockerSandboxError,
+  decodeDockerProcessRef,
+  encodeDockerProcessRef,
+  resolveDockerCapabilities,
+} from "./docker-sandbox.js";
+export type {
+  ConnectE2BSandboxOptions,
+  CreateE2BSandboxOptions,
+  E2BClient,
+  E2BConnectOpts,
+  E2BCreateOpts,
+  E2BProcessRecoveryBackendOptions,
+  E2BProcessRefData,
+  E2BSandboxInfo,
+  E2BSandboxInstance,
+  E2BSandboxStatic,
+} from "./e2b-sandbox.js";
+export {
+  argvCommand,
+  connectE2BSandbox,
+  createE2BProcessRecoveryBackend,
+  createE2BSandbox,
+  decodeE2BProcessRef,
+  E2B_PEER_VERSION,
+  E2BSandboxError,
+  encodeE2BProcessRef,
+  posixQuote,
+  resolveE2BCapabilities,
+} from "./e2b-sandbox.js";
+export type {
+  AddressResolver,
+  CreateAllowListEgressProxyOptions,
+  CreateEgressPolicyOptions,
+  EgressAttestation,
+  EgressAuditRecord,
+  EgressErrorCode,
+  EgressLimitOptions,
+  EgressPolicy,
+  EgressPreset,
+  EgressProtocol,
+  EgressProxy,
+  EgressProxyEndpoint,
+  EgressProxyStats,
+  EgressRule,
+  ResolvedEgressLimits,
+} from "./egress/index.js";
+export {
+  assertPinned,
+  createAllowListEgressProxy,
+  createEgressPolicy,
+  EGRESS_PRESETS,
+  EgressError,
+  isMetadataAddress,
+  isPrivateAddress,
+  normalizeAddress,
+  resolveEgressLimits,
+  resolvePinned,
+} from "./egress/index.js";
+export {
+  DEFAULT_MAX_EGRESS_CONCURRENT_CONNECTIONS,
+  DEFAULT_MAX_EGRESS_REDIRECT_HOPS,
+  DEFAULT_MAX_EGRESS_REQUEST_BYTES,
+  DEFAULT_MAX_EGRESS_RESPONSE_BYTES,
+  DEFAULT_MAX_EGRESS_RULES,
+  DEFAULT_MAX_EGRESS_TRANSFER_TIME_MS,
+  HARD_MAX_EGRESS_CONCURRENT_CONNECTIONS,
+  HARD_MAX_EGRESS_REDIRECT_HOPS,
+  HARD_MAX_EGRESS_REQUEST_BYTES,
+  HARD_MAX_EGRESS_RESPONSE_BYTES,
+  HARD_MAX_EGRESS_RULES,
+  HARD_MAX_EGRESS_TRANSFER_TIME_MS,
+} from "./egress/limits.js";
+export type {
+  CreateNativeSandboxOptions,
+  NativeSandboxLimitOptions,
+  NativeSpawnCommand,
+  NativeUnshareMode,
+  ResolvedNativeSandboxLimits,
+} from "./native-sandbox.js";
+export {
+  buildNativeSpawnCommand,
+  createNativeSandbox,
+  NativeSandboxError,
+  resolveNativeSandboxLimits,
+} from "./native-sandbox.js";
+export {
+  assertPathInsideRoots,
+  isPathInside,
+  isPathInsideReal,
+} from "./path-containment.js";
+export type {
+  DisposableSandbox,
+  SandboxAdapter,
+  SandboxCapabilities,
+  SandboxCloseOptions,
+  SandboxExecFileRequest,
+  SandboxExecRequest,
+  SandboxExportMetadata,
+  SandboxPauseResult,
+  SandboxProcessHandle,
+  SandboxSnapshotKind,
+  SandboxStatus,
+  SandboxStatusState,
+} from "./sandbox.js";
+export { createSandboxBashOperations, SandboxExecutionError } from "./sandbox.js";
+export type {
+  SandboxCodingComposition,
+  SandboxCodingCompositionResult,
+  SandboxCodingToolsOptions,
+  WorkspaceMode,
+} from "./sandbox-coding-operations.js";
+export {
+  createSandboxCodingComposition,
+  createSandboxCodingTools,
+  createSandboxReadOnlyComposition,
+  createSandboxReadOnlyTools,
+  resolveSandboxCapabilities,
+  SandboxCodingCompositionError,
+} from "./sandbox-coding-operations.js";
+export type {
+  SandboxFsOperationsOptions,
+  SandboxRepositoryOperationsOptions,
+} from "./sandbox-fs-operations.js";
+export {
+  assertSandboxPath,
+  createSandboxFilesystemOperations,
+  createSandboxRepositoryOperations,
+  SANDBOX_FS_SCRIPTS,
+  SandboxFsError,
+} from "./sandbox-fs-operations.js";
+export type {
+  DockerSandboxLimitOptions,
+  ResolvedDockerSandboxLimits,
+} from "./sandbox-limits.js";
+export {
+  DEFAULT_CLEANUP_DEADLINE_MS,
+  DEFAULT_CPUS,
+  DEFAULT_DOWNLOAD_BYTES,
+  DEFAULT_IDLE_TIMEOUT_MS,
+  DEFAULT_MAX_COMMANDS,
+  DEFAULT_MAX_CONCURRENT_EXECS,
+  DEFAULT_MAX_ENV_BYTES,
+  DEFAULT_MAX_ENV_NAMES,
+  DEFAULT_MAX_EXPORT_BYTES,
+  DEFAULT_MAX_EXPORT_ENTRIES,
+  DEFAULT_MAX_FDS,
+  DEFAULT_MAX_OUTPUT_BYTES,
+  DEFAULT_MAX_PIDS,
+  DEFAULT_MAX_RETAINED_ARTIFACTS,
+  DEFAULT_MEMORY_BYTES,
+  DEFAULT_STARTUP_TIMEOUT_MS,
+  DEFAULT_STOP_GRACE_MS,
+  DEFAULT_TMP_BYTES,
+  DEFAULT_WALL_TIME_MS,
+  DEFAULT_WORKSPACE_BYTES,
+  HARD_CLEANUP_DEADLINE_MS,
+  HARD_CPUS,
+  HARD_DOWNLOAD_BYTES,
+  HARD_IDLE_TIMEOUT_MS,
+  HARD_MAX_COMMANDS,
+  HARD_MAX_CONCURRENT_EXECS,
+  HARD_MAX_ENV_BYTES,
+  HARD_MAX_ENV_NAMES,
+  HARD_MAX_EXPORT_BYTES,
+  HARD_MAX_EXPORT_ENTRIES,
+  HARD_MAX_FDS,
+  HARD_MAX_OUTPUT_BYTES,
+  HARD_MAX_PIDS,
+  HARD_MAX_RETAINED_ARTIFACTS,
+  HARD_MEMORY_BYTES,
+  HARD_STARTUP_TIMEOUT_MS,
+  HARD_STOP_GRACE_MS,
+  HARD_TMP_BYTES,
+  HARD_WALL_TIME_MS,
+  HARD_WORKSPACE_BYTES,
+  resolveDockerSandboxLimits,
+  validateSandboxLimit,
+} from "./sandbox-limits.js";
+export { createImportTarStream, SandboxTarError, summarizeTarStream } from "./sandbox-tar.js";