@bo-agent/sandbox-local 0.0.1

package/README.md

@@ -0,0 +1,30 @@
+# @bo-agent/sandbox-local
+
+Local implementation of the [`@bo-agent/sandbox`](../sandbox/) seam. Selects and caches one platform runner: Linux prefers a working `bwrap` then Landlock; macOS uses Seatbelt (`sandbox-exec`); Windows uses the ACL restricted-token runner. Multiple candidates are probed in order; a sole candidate is selected directly.
+
+The package root exports the default and named `LocalSandboxProvider` plugin and `Config`; platform profile builders stay internal.
+
+## Fail-closed
+
+Unsupported platforms and unusable runners fail closed with `SANDBOX_UNAVAILABLE`; execution never silently falls through unconfined. Each wrap carries structured runner-failure rules so consumers can distinguish a broken sandbox from a command failure.
+
+Policy is per call; the provider stores only the mechanism and cached runner verdict. Each wrap reports enforcement completeness plus backend-specific denial signatures and runner-failure rules.
+
+## Backend specifics
+
+- **Bubblewrap / Seatbelt**: signature-only — neither public contract reserves a launcher-failure status, so the runner's child exit remains ordinary.
+- **Landlock**: requires exit 125 and a `landlock-run:` fatal line after excluding only the exact partial-enforcement notice; a notice with child exit 1, 2, or 125 remains a child outcome.
+- **Windows ACL**: keeps one deterministic write SID and standing ACE per workspace, but gives every live session/workspace pair a random private temp directory with a distinct SID and revocable ACE. A workspace equal to or containing the platform temp root fails before any ACL mutation because its inheritable workspace ACE would otherwise reach every private temp child.
+
+Consumers spawn the returned argv directly, so a missing or unexecutable runner is an out-of-band spawn failure while a successfully launched child exit 126 or 127 remains ordinary.
+
+## Vendored launcher
+
+[`@bo-agent/node-addon-landlock-run`](../../vendor/landlock-run/) supplies the Landlock platform launcher, functional probe, and CLI argument vocabulary. This provider owns only mode-to-grant mapping and runner selection. Keeping path resolution and probe parsing with the versioned binary prevents contract drift.
+
+## Known limitations
+
+- **Windows ACL enforcement is partial** — the restricted token must retain Everyone for process initialization, so external objects granting Everyone write access remain writable; NTFS hard links also alias one file object across workspace and external paths. Reported as `enforcement: 'partial'` rather than overstating that boundary as full.
+- **Landlock may be partial** — older supported kernel ABIs confine only the access classes they expose, reported as `enforcement: 'partial'`.
+- **Seatbelt depends on deprecated `sandbox-exec`** — macOS still ships it, but this provider cannot replace or probe that private policy engine if Apple removes it.
+- **Runner selection is cached for the provider lifetime** — installing, removing, or repairing a runner requires reloading the plugin before selection changes.

package/lib/.tsbuildinfo

@@ -0,0 +1 @@
+{"fileNames":["../../../node_modules/.pnpm/typescript@5.9.3/node_modules/typescript/lib/lib.es5.d.ts","../../../node_modules/.pnpm/typescript@5.9.3/node_modules/typescript/lib/lib.es2015.d.ts","../../../node_modules/.pnpm/typescript@5.9.3/node_modules/typescript/lib/lib.es2016.d.ts","../../../node_modules/.pnpm/typescript@5.9.3/node_modules/typescript/lib/lib.es2017.d.ts","../../../node_modules/.pnpm/typescript@5.9.3/node_modules/typescript/lib/lib.es2018.d.ts","../../../node_modules/.pnpm/typescript@5.9.3/node_modules/typescript/lib/lib.es2019.d.ts","../../../node_modules/.pnpm/typescript@5.9.3/node_modules/typescript/lib/lib.es2020.d.ts","../../../node_modules/.pnpm/typescript@5.9.3/node_modules/typescript/lib/lib.es2021.d.ts","../../../node_modules/.pnpm/typescript@5.9.3/node_modules/typescript/lib/lib.es2022.d.ts","../../../node_modules/.pnpm/typescript@5.9.3/node_modules/typescript/lib/lib.es2023.d.ts","../../../node_modules/.pnpm/typescript@5.9.3/node_modules/typescript/lib/lib.es2024.d.ts","../../../node_modules/.pnpm/typescript@5.9.3/node_modules/typescript/lib/lib.dom.d.ts","../../../node_modules/.pnpm/typescript@5.9.3/node_modules/typescript/lib/lib.dom.iterable.d.ts","../../../node_modules/.pnpm/typescript@5.9.3/node_modules/typescript/lib/lib.dom.asynciterable.d.ts","../../../node_modules/.pnpm/typescript@5.9.3/node_modules/typescript/lib/lib.webworker.importscripts.d.ts","../../../node_modules/.pnpm/typescript@5.9.3/node_modules/typescript/lib/lib.scripthost.d.ts","../../../node_modules/.pnpm/typescript@5.9.3/node_modules/typescript/lib/lib.es2015.core.d.ts","../../../node_modules/.pnpm/typescript@5.9.3/node_modules/typescript/lib/lib.es2015.collection.d.ts","../../../node_modules/.pnpm/typescript@5.9.3/node_modules/typescript/lib/lib.es2015.generator.d.ts","../../../node_modules/.pnpm/typescript@5.9.3/node_modules/typescript/lib/lib.es2015.iterable.d.ts","../../../node_modules/.pnpm/typescript@5.9.3/node_modules/typescript/lib/lib.es2015.promise.d.ts","../../../node_modules/.pnpm/typescript@5.9.3/node_modules/typescript/lib/lib.es2015.proxy.d.ts","../../../node_modules/.pnpm/typescript@5.9.3/node_modules/typescript/lib/lib.es2015.reflect.d.ts","../../../node_modules/.pnpm/typescript@5.9.3/node_modules/typescript/lib/lib.es2015.symbol.d.ts","../../../node_modules/.pnpm/typescript@5.9.3/node_modules/typescript/lib/lib.es2015.symbol.wellknown.d.ts","../../../node_modules/.pnpm/typescript@5.9.3/node_modules/typescript/lib/lib.es2016.array.include.d.ts","../../../node_modules/.pnpm/typescript@5.9.3/node_modules/typescript/lib/lib.es2016.intl.d.ts","../../../node_modules/.pnpm/typescript@5.9.3/node_modules/typescript/lib/lib.es2017.arraybuffer.d.ts","../../../node_modules/.pnpm/typescript@5.9.3/node_modules/typescript/lib/lib.es2017.date.d.ts","../../../node_modules/.pnpm/typescript@5.9.3/node_modules/typescript/lib/lib.es2017.object.d.ts","../../../node_modules/.pnpm/typescript@5.9.3/node_modules/typescript/lib/lib.es2017.sharedmemory.d.ts","../../../node_modules/.pnpm/typescript@5.9.3/node_modules/typescript/lib/lib.es2017.string.d.ts","../../../node_modules/.pnpm/typescript@5.9.3/node_modules/typescript/lib/lib.es2017.intl.d.ts","../../../node_modules/.pnpm/typescript@5.9.3/node_modules/typescript/lib/lib.es2017.typedarrays.d.ts","../../../node_modules/.pnpm/typescript@5.9.3/node_modules/typescript/lib/lib.es2018.asyncgenerator.d.ts","../../../node_modules/.pnpm/typescript@5.9.3/node_modules/typescript/lib/lib.es2018.asynciterable.d.ts","../../../node_modules/.pnpm/typescript@5.9.3/node_modules/typescript/lib/lib.es2018.intl.d.ts","../../../node_modules/.pnpm/typescript@5.9.3/node_modules/typescript/lib/lib.es2018.promise.d.ts","../../../node_modules/.pnpm/typescript@5.9.3/node_modules/typescript/lib/lib.es2018.regexp.d.ts","../../../node_modules/.pnpm/typescript@5.9.3/node_modules/typescript/lib/lib.es2019.array.d.ts","../../../node_modules/.pnpm/typescript@5.9.3/node_modules/typescript/lib/lib.es2019.object.d.ts","../../../node_modules/.pnpm/typescript@5.9.3/node_modules/typescript/lib/lib.es2019.string.d.ts","../../../node_modules/.pnpm/typescript@5.9.3/node_modules/typescript/lib/lib.es2019.symbol.d.ts","../../../node_modules/.pnpm/typescript@5.9.3/node_modules/typescript/lib/lib.es2019.intl.d.ts","../../../node_modules/.pnpm/typescript@5.9.3/node_modules/typescript/lib/lib.es2020.bigint.d.ts","../../../node_modules/.pnpm/typescript@5.9.3/node_modules/typescript/lib/lib.es2020.date.d.ts","../../../node_modules/.pnpm/typescript@5.9.3/node_modules/typescript/lib/lib.es2020.promise.d.ts","../../../node_modules/.pnpm/typescript@5.9.3/node_modules/typescript/lib/lib.es2020.sharedmemory.d.ts","../../../node_modules/.pnpm/typescript@5.9.3/node_modules/typescript/lib/lib.es2020.string.d.ts","../../../node_modules/.pnpm/typescript@5.9.3/node_modules/typescript/lib/lib.es2020.symbol.wellknown.d.ts","../../../node_modules/.pnpm/typescript@5.9.3/node_modules/typescript/lib/lib.es2020.intl.d.ts","../../../node_modules/.pnpm/typescript@5.9.3/node_modules/typescript/lib/lib.es2020.number.d.ts","../../../node_modules/.pnpm/typescript@5.9.3/node_modules/typescript/lib/lib.es2021.promise.d.ts","../../../node_modules/.pnpm/typescript@5.9.3/node_modules/typescript/lib/lib.es2021.string.d.ts","../../../node_modules/.pnpm/typescript@5.9.3/node_modules/typescript/lib/lib.es2021.weakref.d.ts","../../../node_modules/.pnpm/typescript@5.9.3/node_modules/typescript/lib/lib.es2021.intl.d.ts","../../../node_modules/.pnpm/typescript@5.9.3/node_modules/typescript/lib/lib.es2022.array.d.ts","../../../node_modules/.pnpm/typescript@5.9.3/node_modules/typescript/lib/lib.es2022.error.d.ts","../../../node_modules/.pnpm/typescript@5.9.3/node_modules/typescript/lib/lib.es2022.intl.d.ts","../../../node_modules/.pnpm/typescript@5.9.3/node_modules/typescript/lib/lib.es2022.object.d.ts","../../../node_modules/.pnpm/typescript@5.9.3/node_modules/typescript/lib/lib.es2022.string.d.ts","../../../node_modules/.pnpm/typescript@5.9.3/node_modules/typescript/lib/lib.es2022.regexp.d.ts","../../../node_modules/.pnpm/typescript@5.9.3/node_modules/typescript/lib/lib.es2023.array.d.ts","../../../node_modules/.pnpm/typescript@5.9.3/node_modules/typescript/lib/lib.es2023.collection.d.ts","../../../node_modules/.pnpm/typescript@5.9.3/node_modules/typescript/lib/lib.es2023.intl.d.ts","../../../node_modules/.pnpm/typescript@5.9.3/node_modules/typescript/lib/lib.es2024.arraybuffer.d.ts","../../../node_modules/.pnpm/typescript@5.9.3/node_modules/typescript/lib/lib.es2024.collection.d.ts","../../../node_modules/.pnpm/typescript@5.9.3/node_modules/typescript/lib/lib.es2024.object.d.ts","../../../node_modules/.pnpm/typescript@5.9.3/node_modules/typescript/lib/lib.es2024.promise.d.ts","../../../node_modules/.pnpm/typescript@5.9.3/node_modules/typescript/lib/lib.es2024.regexp.d.ts","../../../node_modules/.pnpm/typescript@5.9.3/node_modules/typescript/lib/lib.es2024.sharedmemory.d.ts","../../../node_modules/.pnpm/typescript@5.9.3/node_modules/typescript/lib/lib.es2024.string.d.ts","../../../node_modules/.pnpm/typescript@5.9.3/node_modules/typescript/lib/lib.decorators.d.ts","../../../node_modules/.pnpm/typescript@5.9.3/node_modules/typescript/lib/lib.decorators.legacy.d.ts","../../../node_modules/.pnpm/typescript@5.9.3/node_modules/typescript/lib/lib.es2024.full.d.ts","../../../vendor/landlock-run/lib/index.d.ts","../../../node_modules/.pnpm/cosmokit@1.8.1/node_modules/cosmokit/lib/index.d.ts","../../../node_modules/.pnpm/@standard-schema+spec@1.1.0/node_modules/@standard-schema/spec/dist/index.d.ts","../../../node_modules/.pnpm/cordis@4.0.0-rc.10/node_modules/cordis/lib/utils.d.ts","../../../node_modules/.pnpm/cordis@4.0.0-rc.10/node_modules/cordis/lib/registry.d.ts","../../../node_modules/.pnpm/cordis@4.0.0-rc.10/node_modules/cordis/lib/reflect.d.ts","../../../node_modules/.pnpm/cordis@4.0.0-rc.10/node_modules/cordis/lib/fiber.d.ts","../../../node_modules/.pnpm/cordis@4.0.0-rc.10/node_modules/cordis/lib/events.d.ts","../../../node_modules/.pnpm/cordis@4.0.0-rc.10/node_modules/cordis/lib/logger.d.ts","../../../node_modules/.pnpm/cordis@4.0.0-rc.10/node_modules/cordis/lib/context.d.ts","../../../node_modules/.pnpm/cordis@4.0.0-rc.10/node_modules/cordis/lib/service.d.ts","../../../node_modules/.pnpm/cordis@4.0.0-rc.10/node_modules/cordis/lib/index.d.ts","../../../node_modules/.pnpm/schemastery@3.18.0/node_modules/schemastery/lib/index.d.ts","../../inline/lib/harness-error.d.ts","../../inline/lib/assert-never.d.ts","../../inline/lib/session-id.d.ts","../../inline/lib/index.d.ts","../../sandbox/lib/escalation.d.ts","../../sandbox/lib/roots.d.ts","../../sandbox/lib/index.d.ts","../../../node_modules/.pnpm/koffi@3.2.1/node_modules/koffi/index.d.ts","../../sandbox-windows-acl/lib/ffi.d.ts","../../sandbox-windows-acl/lib/spawn.d.ts","../../sandbox-windows-acl/lib/grant.d.ts","../../sandbox-windows-acl/lib/path-boundary.d.ts","../../sandbox-windows-acl/lib/workspace-sid.d.ts","../../sandbox-windows-acl/lib/errors.d.ts","../../sandbox-windows-acl/lib/index.d.ts","../src/profiles.ts","../src/index.ts","../src/invariant.ts","../../../node_modules/.pnpm/@types+node@22.20.2/node_modules/@types/node/compatibility/disposable.d.ts","../../../node_modules/.pnpm/@types+node@22.20.2/node_modules/@types/node/compatibility/indexable.d.ts","../../../node_modules/.pnpm/@types+node@22.20.2/node_modules/@types/node/compatibility/iterators.d.ts","../../../node_modules/.pnpm/@types+node@22.20.2/node_modules/@types/node/compatibility/index.d.ts","../../../node_modules/.pnpm/@types+node@22.20.2/node_modules/@types/node/globals.typedarray.d.ts","../../../node_modules/.pnpm/@types+node@22.20.2/node_modules/@types/node/buffer.buffer.d.ts","../../../node_modules/.pnpm/@types+node@22.20.2/node_modules/@types/node/globals.d.ts","../../../node_modules/.pnpm/@types+node@22.20.2/node_modules/@types/node/web-globals/abortcontroller.d.ts","../../../node_modules/.pnpm/@types+node@22.20.2/node_modules/@types/node/web-globals/domexception.d.ts","../../../node_modules/.pnpm/@types+node@22.20.2/node_modules/@types/node/web-globals/events.d.ts","../../../node_modules/.pnpm/undici-types@6.21.0/node_modules/undici-types/header.d.ts","../../../node_modules/.pnpm/undici-types@6.21.0/node_modules/undici-types/readable.d.ts","../../../node_modules/.pnpm/undici-types@6.21.0/node_modules/undici-types/file.d.ts","../../../node_modules/.pnpm/undici-types@6.21.0/node_modules/undici-types/fetch.d.ts","../../../node_modules/.pnpm/undici-types@6.21.0/node_modules/undici-types/formdata.d.ts","../../../node_modules/.pnpm/undici-types@6.21.0/node_modules/undici-types/connector.d.ts","../../../node_modules/.pnpm/undici-types@6.21.0/node_modules/undici-types/client.d.ts","../../../node_modules/.pnpm/undici-types@6.21.0/node_modules/undici-types/errors.d.ts","../../../node_modules/.pnpm/undici-types@6.21.0/node_modules/undici-types/dispatcher.d.ts","../../../node_modules/.pnpm/undici-types@6.21.0/node_modules/undici-types/global-dispatcher.d.ts","../../../node_modules/.pnpm/undici-types@6.21.0/node_modules/undici-types/global-origin.d.ts","../../../node_modules/.pnpm/undici-types@6.21.0/node_modules/undici-types/pool-stats.d.ts","../../../node_modules/.pnpm/undici-types@6.21.0/node_modules/undici-types/pool.d.ts","../../../node_modules/.pnpm/undici-types@6.21.0/node_modules/undici-types/handlers.d.ts","../../../node_modules/.pnpm/undici-types@6.21.0/node_modules/undici-types/balanced-pool.d.ts","../../../node_modules/.pnpm/undici-types@6.21.0/node_modules/undici-types/agent.d.ts","../../../node_modules/.pnpm/undici-types@6.21.0/node_modules/undici-types/mock-interceptor.d.ts","../../../node_modules/.pnpm/undici-types@6.21.0/node_modules/undici-types/mock-agent.d.ts","../../../node_modules/.pnpm/undici-types@6.21.0/node_modules/undici-types/mock-client.d.ts","../../../node_modules/.pnpm/undici-types@6.21.0/node_modules/undici-types/mock-pool.d.ts","../../../node_modules/.pnpm/undici-types@6.21.0/node_modules/undici-types/mock-errors.d.ts","../../../node_modules/.pnpm/undici-types@6.21.0/node_modules/undici-types/proxy-agent.d.ts","../../../node_modules/.pnpm/undici-types@6.21.0/node_modules/undici-types/env-http-proxy-agent.d.ts","../../../node_modules/.pnpm/undici-types@6.21.0/node_modules/undici-types/retry-handler.d.ts","../../../node_modules/.pnpm/undici-types@6.21.0/node_modules/undici-types/retry-agent.d.ts","../../../node_modules/.pnpm/undici-types@6.21.0/node_modules/undici-types/api.d.ts","../../../node_modules/.pnpm/undici-types@6.21.0/node_modules/undici-types/interceptors.d.ts","../../../node_modules/.pnpm/undici-types@6.21.0/node_modules/undici-types/util.d.ts","../../../node_modules/.pnpm/undici-types@6.21.0/node_modules/undici-types/cookies.d.ts","../../../node_modules/.pnpm/undici-types@6.21.0/node_modules/undici-types/patch.d.ts","../../../node_modules/.pnpm/undici-types@6.21.0/node_modules/undici-types/websocket.d.ts","../../../node_modules/.pnpm/undici-types@6.21.0/node_modules/undici-types/eventsource.d.ts","../../../node_modules/.pnpm/undici-types@6.21.0/node_modules/undici-types/filereader.d.ts","../../../node_modules/.pnpm/undici-types@6.21.0/node_modules/undici-types/diagnostics-channel.d.ts","../../../node_modules/.pnpm/undici-types@6.21.0/node_modules/undici-types/content-type.d.ts","../../../node_modules/.pnpm/undici-types@6.21.0/node_modules/undici-types/cache.d.ts","../../../node_modules/.pnpm/undici-types@6.21.0/node_modules/undici-types/index.d.ts","../../../node_modules/.pnpm/@types+node@22.20.2/node_modules/@types/node/web-globals/fetch.d.ts","../../../node_modules/.pnpm/@types+node@22.20.2/node_modules/@types/node/web-globals/navigator.d.ts","../../../node_modules/.pnpm/@types+node@22.20.2/node_modules/@types/node/web-globals/storage.d.ts","../../../node_modules/.pnpm/@types+node@22.20.2/node_modules/@types/node/web-globals/streams.d.ts","../../../node_modules/.pnpm/@types+node@22.20.2/node_modules/@types/node/assert.d.ts","../../../node_modules/.pnpm/@types+node@22.20.2/node_modules/@types/node/assert/strict.d.ts","../../../node_modules/.pnpm/@types+node@22.20.2/node_modules/@types/node/async_hooks.d.ts","../../../node_modules/.pnpm/@types+node@22.20.2/node_modules/@types/node/buffer.d.ts","../../../node_modules/.pnpm/@types+node@22.20.2/node_modules/@types/node/child_process.d.ts","../../../node_modules/.pnpm/@types+node@22.20.2/node_modules/@types/node/cluster.d.ts","../../../node_modules/.pnpm/@types+node@22.20.2/node_modules/@types/node/console.d.ts","../../../node_modules/.pnpm/@types+node@22.20.2/node_modules/@types/node/constants.d.ts","../../../node_modules/.pnpm/@types+node@22.20.2/node_modules/@types/node/crypto.d.ts","../../../node_modules/.pnpm/@types+node@22.20.2/node_modules/@types/node/dgram.d.ts","../../../node_modules/.pnpm/@types+node@22.20.2/node_modules/@types/node/diagnostics_channel.d.ts","../../../node_modules/.pnpm/@types+node@22.20.2/node_modules/@types/node/dns.d.ts","../../../node_modules/.pnpm/@types+node@22.20.2/node_modules/@types/node/dns/promises.d.ts","../../../node_modules/.pnpm/@types+node@22.20.2/node_modules/@types/node/domain.d.ts","../../../node_modules/.pnpm/@types+node@22.20.2/node_modules/@types/node/events.d.ts","../../../node_modules/.pnpm/@types+node@22.20.2/node_modules/@types/node/fs.d.ts","../../../node_modules/.pnpm/@types+node@22.20.2/node_modules/@types/node/fs/promises.d.ts","../../../node_modules/.pnpm/@types+node@22.20.2/node_modules/@types/node/http.d.ts","../../../node_modules/.pnpm/@types+node@22.20.2/node_modules/@types/node/http2.d.ts","../../../node_modules/.pnpm/@types+node@22.20.2/node_modules/@types/node/https.d.ts","../../../node_modules/.pnpm/@types+node@22.20.2/node_modules/@types/node/inspector.d.ts","../../../node_modules/.pnpm/@types+node@22.20.2/node_modules/@types/node/inspector.generated.d.ts","../../../node_modules/.pnpm/@types+node@22.20.2/node_modules/@types/node/module.d.ts","../../../node_modules/.pnpm/@types+node@22.20.2/node_modules/@types/node/net.d.ts","../../../node_modules/.pnpm/@types+node@22.20.2/node_modules/@types/node/os.d.ts","../../../node_modules/.pnpm/@types+node@22.20.2/node_modules/@types/node/path.d.ts","../../../node_modules/.pnpm/@types+node@22.20.2/node_modules/@types/node/perf_hooks.d.ts","../../../node_modules/.pnpm/@types+node@22.20.2/node_modules/@types/node/process.d.ts","../../../node_modules/.pnpm/@types+node@22.20.2/node_modules/@types/node/punycode.d.ts","../../../node_modules/.pnpm/@types+node@22.20.2/node_modules/@types/node/querystring.d.ts","../../../node_modules/.pnpm/@types+node@22.20.2/node_modules/@types/node/readline.d.ts","../../../node_modules/.pnpm/@types+node@22.20.2/node_modules/@types/node/readline/promises.d.ts","../../../node_modules/.pnpm/@types+node@22.20.2/node_modules/@types/node/repl.d.ts","../../../node_modules/.pnpm/@types+node@22.20.2/node_modules/@types/node/sea.d.ts","../../../node_modules/.pnpm/@types+node@22.20.2/node_modules/@types/node/sqlite.d.ts","../../../node_modules/.pnpm/@types+node@22.20.2/node_modules/@types/node/stream.d.ts","../../../node_modules/.pnpm/@types+node@22.20.2/node_modules/@types/node/stream/promises.d.ts","../../../node_modules/.pnpm/@types+node@22.20.2/node_modules/@types/node/stream/consumers.d.ts","../../../node_modules/.pnpm/@types+node@22.20.2/node_modules/@types/node/stream/web.d.ts","../../../node_modules/.pnpm/@types+node@22.20.2/node_modules/@types/node/string_decoder.d.ts","../../../node_modules/.pnpm/@types+node@22.20.2/node_modules/@types/node/test.d.ts","../../../node_modules/.pnpm/@types+node@22.20.2/node_modules/@types/node/timers.d.ts","../../../node_modules/.pnpm/@types+node@22.20.2/node_modules/@types/node/timers/promises.d.ts","../../../node_modules/.pnpm/@types+node@22.20.2/node_modules/@types/node/tls.d.ts","../../../node_modules/.pnpm/@types+node@22.20.2/node_modules/@types/node/trace_events.d.ts","../../../node_modules/.pnpm/@types+node@22.20.2/node_modules/@types/node/tty.d.ts","../../../node_modules/.pnpm/@types+node@22.20.2/node_modules/@types/node/url.d.ts","../../../node_modules/.pnpm/@types+node@22.20.2/node_modules/@types/node/util.d.ts","../../../node_modules/.pnpm/@types+node@22.20.2/node_modules/@types/node/v8.d.ts","../../../node_modules/.pnpm/@types+node@22.20.2/node_modules/@types/node/vm.d.ts","../../../node_modules/.pnpm/@types+node@22.20.2/node_modules/@types/node/wasi.d.ts","../../../node_modules/.pnpm/@types+node@22.20.2/node_modules/@types/node/worker_threads.d.ts","../../../node_modules/.pnpm/@types+node@22.20.2/node_modules/@types/node/zlib.d.ts","../../../node_modules/.pnpm/@types+node@22.20.2/node_modules/@types/node/index.d.ts"],"fileIdsList":[[112,161,178,179],[112,158,159,161,178,179],[112,160,161,178,179],[161,178,179],[112,161,166,178,179,196],[112,161,162,167,172,178,179,181,193,204],[112,161,162,163,172,178,179,181],[107,108,109,112,161,178,179],[112,161,164,178,179,205],[112,161,165,166,173,178,179,182],[112,161,166,178,179,193,201],[112,161,167,169,172,178,179,181],[112,160,161,168,178,179],[112,161,169,170,178,179],[112,161,171,172,178,179],[112,160,161,172,178,179],[112,161,172,173,174,178,179,193,204],[112,161,172,173,174,178,179,188,193,196],[112,153,161,169,172,175,178,179,181,193,204],[112,161,172,173,175,176,178,179,181,193,201,204],[112,161,175,177,178,179,193,201,204],[110,111,112,113,114,115,116,154,155,156,157,158,159,160,161,162,163,164,165,166,167,168,169,170,171,172,173,174,175,176,177,178,179,180,181,182,183,184,185,186,187,188,189,190,191,192,193,194,195,196,197,198,199,200,201,202,203,204,205,206,207,208,209,210],[112,161,172,178,179],[112,161,178,179,180,204],[112,161,169,172,178,179,181,193],[112,161,178,179,182],[112,161,178,179,183],[112,160,161,178,179,184],[112,158,159,160,161,162,163,164,165,166,167,168,169,170,171,172,173,174,175,176,177,178,179,180,181,182,183,184,185,186,187,188,189,190,191,192,193,194,195,196,197,198,199,200,201,202,203,204,205,206,207,208,209,210],[112,161,178,179,186],[112,161,178,179,187],[112,161,172,178,179,188,189],[112,161,178,179,188,190,205,207],[112,161,173,178,179],[112,161,172,178,179,193,194,196],[112,161,178,179,195,196],[112,161,178,179,193,194],[112,161,178,179,196],[112,161,178,179,197],[112,158,161,178,179,193,198,204],[112,161,172,178,179,199,200],[112,161,178,179,199,200],[112,161,166,178,179,181,193,201],[112,161,178,179,202],[112,161,178,179,181,203],[112,161,175,178,179,187,204],[112,161,166,178,179,205],[112,161,178,179,193,206],[112,161,178,179,180,207],[112,161,178,179,208],[112,153,161,178,179],[112,153,161,172,174,178,179,184,193,196,204,206,207,209],[112,161,178,179,193,210],[77,79,80,81,82,83,84,112,161,178,179],[77,80,81,82,83,84,85,112,161,178,179],[77,78,79,80,81,82,83,84,85,112,161,178,179],[79,80,81,82,83,84,85,86,112,161,178,179],[79,80,81,82,83,84,85,112,161,178,179],[87,95,112,161,178,179],[77,78,112,161,178,179],[112,125,129,161,178,179,204],[112,125,161,178,179,193,204],[112,120,161,178,179],[112,122,125,161,178,179,201,204],[112,161,178,179,181,201],[112,161,178,179,211],[112,120,161,178,179,211],[112,122,125,161,178,179,181,204],[112,117,118,121,124,161,172,178,179,193,204],[112,125,132,161,178,179],[112,117,123,161,178,179],[112,125,146,147,161,178,179],[112,121,125,161,178,179,196,204,211],[112,146,161,178,179,211],[112,119,120,161,178,179,211],[112,125,161,178,179],[112,119,120,121,122,123,124,125,126,127,129,130,131,132,133,134,135,136,137,138,139,140,141,142,143,144,145,147,148,149,150,151,152,161,178,179],[112,125,140,161,178,179],[112,125,132,133,161,178,179],[112,123,125,133,134,161,178,179],[112,124,161,178,179],[112,117,120,125,161,178,179],[112,125,129,133,134,161,178,179],[112,129,161,178,179],[112,123,125,128,161,178,179,204],[112,117,122,125,132,161,178,179],[112,161,178,179,193],[112,120,125,146,161,178,179,209,211],[89,90,91,112,161,178,179],[76,87,88,92,95,103,104,112,161,162,173,178,179,182,183,204],[76,95,112,161,178,179],[96,112,161,178,179],[97,112,161,178,179],[98,99,100,101,102,112,161,178,179],[95,112,161,178,179],[87,92,93,94,95,112,161,178,179]],"fileInfos":[{"version":"c430d44666289dae81f30fa7b2edebf186ecc91a2d4c71266ea6ae76388792e1","affectsGlobalScope":true,"impliedFormat":1},{"version":"45b7ab580deca34ae9729e97c13cfd999df04416a79116c3bfb483804f85ded4","impliedFormat":1},{"version":"3facaf05f0c5fc569c5649dd359892c98a85557e3e0c847964caeb67076f4d75","impliedFormat":1},{"version":"e44bb8bbac7f10ecc786703fe0a6a4b952189f908707980ba8f3c8975a760962","impliedFormat":1},{"version":"5e1c4c362065a6b95ff952c0eab010f04dcd2c3494e813b493ecfd4fcb9fc0d8","impliedFormat":1},{"version":"68d73b4a11549f9c0b7d352d10e91e5dca8faa3322bfb77b661839c42b1ddec7","impliedFormat":1},{"version":"5efce4fc3c29ea84e8928f97adec086e3dc876365e0982cc8479a07954a3efd4","impliedFormat":1},{"version":"feecb1be483ed332fad555aff858affd90a48ab19ba7272ee084704eb7167569","impliedFormat":1},{"version":"ee7bad0c15b58988daa84371e0b89d313b762ab83cb5b31b8a2d1162e8eb41c2","impliedFormat":1},{"version":"27bdc30a0e32783366a5abeda841bc22757c1797de8681bbe81fbc735eeb1c10","impliedFormat":1},{"version":"8fd575e12870e9944c7e1d62e1f5a73fcf23dd8d3a321f2a2c74c20d022283fe","impliedFormat":1},{"version":"080941d9f9ff9307f7e27a83bcd888b7c8270716c39af943532438932ec1d0b9","affectsGlobalScope":true,"impliedFormat":1},{"version":"2e80ee7a49e8ac312cc11b77f1475804bee36b3b2bc896bead8b6e1266befb43","affectsGlobalScope":true,"impliedFormat":1},{"version":"d7a3c8b952931daebdfc7a2897c53c0a1c73624593fa070e46bd537e64dcd20a","affectsGlobalScope":true,"impliedFormat":1},{"version":"80e18897e5884b6723488d4f5652167e7bb5024f946743134ecc4aa4ee731f89","affectsGlobalScope":true,"impliedFormat":1},{"version":"cd034f499c6cdca722b60c04b5b1b78e058487a7085a8e0d6fb50809947ee573","affectsGlobalScope":true,"impliedFormat":1},{"version":"c57796738e7f83dbc4b8e65132f11a377649c00dd3eee333f672b8f0a6bea671","affectsGlobalScope":true,"impliedFormat":1},{"version":"dc2df20b1bcdc8c2d34af4926e2c3ab15ffe1160a63e58b7e09833f616efff44","affectsGlobalScope":true,"impliedFormat":1},{"version":"515d0b7b9bea2e31ea4ec968e9edd2c39d3eebf4a2d5cbd04e88639819ae3b71","affectsGlobalScope":true,"impliedFormat":1},{"version":"0559b1f683ac7505ae451f9a96ce4c3c92bdc71411651ca6ddb0e88baaaad6a3","affectsGlobalScope":true,"impliedFormat":1},{"version":"0dc1e7ceda9b8b9b455c3a2d67b0412feab00bd2f66656cd8850e8831b08b537","affectsGlobalScope":true,"impliedFormat":1},{"version":"ce691fb9e5c64efb9547083e4a34091bcbe5bdb41027e310ebba8f7d96a98671","affectsGlobalScope":true,"impliedFormat":1},{"version":"8d697a2a929a5fcb38b7a65594020fcef05ec1630804a33748829c5ff53640d0","affectsGlobalScope":true,"impliedFormat":1},{"version":"4ff2a353abf8a80ee399af572debb8faab2d33ad38c4b4474cff7f26e7653b8d","affectsGlobalScope":true,"impliedFormat":1},{"version":"fb0f136d372979348d59b3f5020b4cdb81b5504192b1cacff5d1fbba29378aa1","affectsGlobalScope":true,"impliedFormat":1},{"version":"d15bea3d62cbbdb9797079416b8ac375ae99162a7fba5de2c6c505446486ac0a","affectsGlobalScope":true,"impliedFormat":1},{"version":"68d18b664c9d32a7336a70235958b8997ebc1c3b8505f4f1ae2b7e7753b87618","affectsGlobalScope":true,"impliedFormat":1},{"version":"eb3d66c8327153d8fa7dd03f9c58d351107fe824c79e9b56b462935176cdf12a","affectsGlobalScope":true,"impliedFormat":1},{"version":"38f0219c9e23c915ef9790ab1d680440d95419ad264816fa15009a8851e79119","affectsGlobalScope":true,"impliedFormat":1},{"version":"69ab18c3b76cd9b1be3d188eaf8bba06112ebbe2f47f6c322b5105a6fbc45a2e","affectsGlobalScope":true,"impliedFormat":1},{"version":"a680117f487a4d2f30ea46f1b4b7f58bef1480456e18ba53ee85c2746eeca012","affectsGlobalScope":true,"impliedFormat":1},{"version":"2f11ff796926e0832f9ae148008138ad583bd181899ab7dd768a2666700b1893","affectsGlobalScope":true,"impliedFormat":1},{"version":"4de680d5bb41c17f7f68e0419412ca23c98d5749dcaaea1896172f06435891fc","affectsGlobalScope":true,"impliedFormat":1},{"version":"954296b30da6d508a104a3a0b5d96b76495c709785c1d11610908e63481ee667","affectsGlobalScope":true,"impliedFormat":1},{"version":"ac9538681b19688c8eae65811b329d3744af679e0bdfa5d842d0e32524c73e1c","affectsGlobalScope":true,"impliedFormat":1},{"version":"0a969edff4bd52585473d24995c5ef223f6652d6ef46193309b3921d65dd4376","affectsGlobalScope":true,"impliedFormat":1},{"version":"9e9fbd7030c440b33d021da145d3232984c8bb7916f277e8ffd3dc2e3eae2bdb","affectsGlobalScope":true,"impliedFormat":1},{"version":"811ec78f7fefcabbda4bfa93b3eb67d9ae166ef95f9bff989d964061cbf81a0c","affectsGlobalScope":true,"impliedFormat":1},{"version":"717937616a17072082152a2ef351cb51f98802fb4b2fdabd32399843875974ca","affectsGlobalScope":true,"impliedFormat":1},{"version":"d7e7d9b7b50e5f22c915b525acc5a49a7a6584cf8f62d0569e557c5cfc4b2ac2","affectsGlobalScope":true,"impliedFormat":1},{"version":"71c37f4c9543f31dfced6c7840e068c5a5aacb7b89111a4364b1d5276b852557","affectsGlobalScope":true,"impliedFormat":1},{"version":"576711e016cf4f1804676043e6a0a5414252560eb57de9faceee34d79798c850","affectsGlobalScope":true,"impliedFormat":1},{"version":"89c1b1281ba7b8a96efc676b11b264de7a8374c5ea1e6617f11880a13fc56dc6","affectsGlobalScope":true,"impliedFormat":1},{"version":"74f7fa2d027d5b33eb0471c8e82a6c87216223181ec31247c357a3e8e2fddc5b","affectsGlobalScope":true,"impliedFormat":1},{"version":"d6d7ae4d1f1f3772e2a3cde568ed08991a8ae34a080ff1151af28b7f798e22ca","affectsGlobalScope":true,"impliedFormat":1},{"version":"063600664504610fe3e99b717a1223f8b1900087fab0b4cad1496a114744f8df","affectsGlobalScope":true,"impliedFormat":1},{"version":"934019d7e3c81950f9a8426d093458b65d5aff2c7c1511233c0fd5b941e608ab","affectsGlobalScope":true,"impliedFormat":1},{"version":"52ada8e0b6e0482b728070b7639ee42e83a9b1c22d205992756fe020fd9f4a47","affectsGlobalScope":true,"impliedFormat":1},{"version":"3bdefe1bfd4d6dee0e26f928f93ccc128f1b64d5d501ff4a8cf3c6371200e5e6","affectsGlobalScope":true,"impliedFormat":1},{"version":"59fb2c069260b4ba00b5643b907ef5d5341b167e7d1dbf58dfd895658bda2867","affectsGlobalScope":true,"impliedFormat":1},{"version":"639e512c0dfc3fad96a84caad71b8834d66329a1f28dc95e3946c9b58176c73a","affectsGlobalScope":true,"impliedFormat":1},{"version":"368af93f74c9c932edd84c58883e736c9e3d53cec1fe24c0b0ff451f529ceab1","affectsGlobalScope":true,"impliedFormat":1},{"version":"af3dd424cf267428f30ccfc376f47a2c0114546b55c44d8c0f1d57d841e28d74","affectsGlobalScope":true,"impliedFormat":1},{"version":"995c005ab91a498455ea8dfb63aa9f83fa2ea793c3d8aa344be4a1678d06d399","affectsGlobalScope":true,"impliedFormat":1},{"version":"959d36cddf5e7d572a65045b876f2956c973a586da58e5d26cde519184fd9b8a","affectsGlobalScope":true,"impliedFormat":1},{"version":"965f36eae237dd74e6cca203a43e9ca801ce38824ead814728a2807b1910117d","affectsGlobalScope":true,"impliedFormat":1},{"version":"3925a6c820dcb1a06506c90b1577db1fdbf7705d65b62b99dce4be75c637e26b","affectsGlobalScope":true,"impliedFormat":1},{"version":"0a3d63ef2b853447ec4f749d3f368ce642264246e02911fcb1590d8c161b8005","affectsGlobalScope":true,"impliedFormat":1},{"version":"8cdf8847677ac7d20486e54dd3fcf09eda95812ac8ace44b4418da1bbbab6eb8","affectsGlobalScope":true,"impliedFormat":1},{"version":"8444af78980e3b20b49324f4a16ba35024fef3ee069a0eb67616ea6ca821c47a","affectsGlobalScope":true,"impliedFormat":1},{"version":"3287d9d085fbd618c3971944b65b4be57859f5415f495b33a6adc994edd2f004","affectsGlobalScope":true,"impliedFormat":1},{"version":"b4b67b1a91182421f5df999988c690f14d813b9850b40acd06ed44691f6727ad","affectsGlobalScope":true,"impliedFormat":1},{"version":"df83c2a6c73228b625b0beb6669c7ee2a09c914637e2d35170723ad49c0f5cd4","affectsGlobalScope":true,"impliedFormat":1},{"version":"436aaf437562f276ec2ddbee2f2cdedac7664c1e4c1d2c36839ddd582eeb3d0a","affectsGlobalScope":true,"impliedFormat":1},{"version":"8e3c06ea092138bf9fa5e874a1fdbc9d54805d074bee1de31b99a11e2fec239d","affectsGlobalScope":true,"impliedFormat":1},{"version":"87dc0f382502f5bbce5129bdc0aea21e19a3abbc19259e0b43ae038a9fc4e326","affectsGlobalScope":true,"impliedFormat":1},{"version":"b1cb28af0c891c8c96b2d6b7be76bd394fddcfdb4709a20ba05a7c1605eea0f9","affectsGlobalScope":true,"impliedFormat":1},{"version":"2fef54945a13095fdb9b84f705f2b5994597640c46afeb2ce78352fab4cb3279","affectsGlobalScope":true,"impliedFormat":1},{"version":"ac77cb3e8c6d3565793eb90a8373ee8033146315a3dbead3bde8db5eaf5e5ec6","affectsGlobalScope":true,"impliedFormat":1},{"version":"56e4ed5aab5f5920980066a9409bfaf53e6d21d3f8d020c17e4de584d29600ad","affectsGlobalScope":true,"impliedFormat":1},{"version":"4ece9f17b3866cc077099c73f4983bddbcb1dc7ddb943227f1ec070f529dedd1","affectsGlobalScope":true,"impliedFormat":1},{"version":"0a6282c8827e4b9a95f4bf4f5c205673ada31b982f50572d27103df8ceb8013c","affectsGlobalScope":true,"impliedFormat":1},{"version":"8e7f8264d0fb4c5339605a15daadb037bf238c10b654bb3eee14208f860a32ea","affectsGlobalScope":true,"impliedFormat":1},{"version":"782dec38049b92d4e85c1585fbea5474a219c6984a35b004963b00beb1aab538","affectsGlobalScope":true,"impliedFormat":1},{"version":"b3e9cef4eed59f8a2249ed834ba4aabe9d0d4e9037d4679487fa17dad99004a3","impliedFormat":1},"747f4ebe8bd5c0eb7fa4f2492f580ede9a4d32b4a610d10c0354a9151564cdd8",{"version":"0e7086243656ce24ba7dfe15a8d8e3cd4310afa6cbddb97dd06d5dc399794676","impliedFormat":99},{"version":"bdd14f07b4eca0b4b5203b85b8dbc4d084c749fa590bee5ea613e1641dcd3b29","impliedFormat":99},{"version":"1f9b9bc4eb18864e8c1628ecd0630442eb857e7b77322559a9a00004f1e39d80","impliedFormat":99},{"version":"598ee676b4645a043e7c4198d53221dd8c44bc628b12776efd8bc6fabd804ced","impliedFormat":99},{"version":"3de8c258acd8647678a8c96db4cee1151a16bc18626028a9c7b33b6bdd037db9","impliedFormat":99},{"version":"b7f6288c956d50a63f4d14610f39df7f7b1e9d481413a0e95c82c37179448ddc","impliedFormat":99},{"version":"18930b7045a527847a039cf29af8927c8079414527707396672ed3cd706fc399","impliedFormat":99},{"version":"7395b909d9b5c754cf8af3937a7ac783bd82eeea31c42a35a02bbcfb5db945a4","impliedFormat":99},{"version":"3a0bf69f6275288de8b20cc353c1e0e6c6d61644789ddec51b526d0d5166acc1","impliedFormat":99},{"version":"6adf2288c91294fe0c68828187e96820b0620fe5d78f79ccbff06d230d9b0c8e","impliedFormat":99},{"version":"8cc48b522565f226e5bdb0f6a4d4b1bcdc8f82ac72c32fd869831a96f583b3cc","impliedFormat":99},{"version":"d84b05b596aafd7be8867d29ff85e02cb690888a1f8aaa85afe5d5f01862efd8","affectsGlobalScope":true,"impliedFormat":1},"3207040072c5856d33d3f2f039436dc39a81b1dea1577702ff9b7d705bf2ceb5","8176d2ff27e0d895260bb1f1b3e094ab521819e7536c79bad057f6c475f00ee6","70b6cdce0800a89493f582f239c4cc49f4dba7e5b0e674f651d039476333fca0","e0ecc9ceeb052adc8590f8e527e58d572ae564f7b90a407295e4846b9bdb7b8a","eab4d0f1a497f676581d205a6019850414d7aac01f9ae05e8320d250d7409cf3","eb85ac6e1d061fa97b89e2cf810253e688a0f008a71bfd3a720f05788966d932","10f45007344ec6e7bd7384ab49b8b72feafcdc9df3d20d040ac058b0514f5a1b",{"version":"b4f749b16500797d1f0e9ed0f04e08e1b162cfbaf48e3efbacee8f27182b4ad1","impliedFormat":99},"ea06a43414e727e635a61d87a117c2a3a086869b911b78bd38d3830c042ed162","3f1bc0c48c0601694ff480d5160992355fd989557f121b30e27eb60e2eb77f3d","952f8bc7fe35a291be5883f15c3b4ccbbe7b41c077461e2d587df563b102950c","599a509f3547eb349b35c6761a639493eaa3095e39fde8cdee2ee2264c06f457","63e8e0876f60c128e25ef0f08ea7cd60327b197297039f903ac7e4efb38b47e6","a12f2c28fcf2c4702df1f423d87d18dd70f4553a07f86a05d73b9a5ced1e4b5d","f18c705ec1dc13d09c68cec1be3329bee7c602c7d6f7f3ee62575647f58e12cf",{"version":"9a73fc4f91d184ba575a609f630d4c167205d75e18bb85a3ef29a736aec5154f","signature":"8e72503eba91199ffea9061f7223a4c6061336e103a77a5612f39eb193a5771c"},{"version":"ad229d7dfc30f9be832fc5edd3df4d302b56becdcfcc7e35b8b289e94602ca05","signature":"9f6f00d0b651c063919d4148bf6e4f8118b2ff2ec65e9a4cc01985d22251be35"},{"version":"b0f5c6e9500b2d0bbd4e71dd797add5fe9bf753bcf40a041a27af1cf9e11d211","signature":"601fb95ab43f9ae583d91a551287e0e922e938f9a9b560ae136efd7c1f6acfdd"},{"version":"6c7176368037af28cb72f2392010fa1cef295d6d6744bca8cfb54985f3a18c3e","affectsGlobalScope":true,"impliedFormat":1},{"version":"ab41ef1f2cdafb8df48be20cd969d875602483859dc194e9c97c8a576892c052","affectsGlobalScope":true,"impliedFormat":1},{"version":"437e20f2ba32abaeb7985e0afe0002de1917bc74e949ba585e49feba65da6ca1","affectsGlobalScope":true,"impliedFormat":1},{"version":"21d819c173c0cf7cc3ce57c3276e77fd9a8a01d35a06ad87158781515c9a438a","impliedFormat":1},{"version":"98cffbf06d6bab333473c70a893770dbe990783904002c4f1a960447b4b53dca","affectsGlobalScope":true,"impliedFormat":1},{"version":"3af97acf03cc97de58a3a4bc91f8f616408099bc4233f6d0852e72a8ffb91ac9","affectsGlobalScope":true,"impliedFormat":1},{"version":"808069bba06b6768b62fd22429b53362e7af342da4a236ed2d2e1c89fcca3b4a","affectsGlobalScope":true,"impliedFormat":1},{"version":"1db0b7dca579049ca4193d034d835f6bfe73096c73663e5ef9a0b5779939f3d0","affectsGlobalScope":true,"impliedFormat":1},{"version":"9798340ffb0d067d69b1ae5b32faa17ab31b82466a3fc00d8f2f2df0c8554aaa","affectsGlobalScope":true,"impliedFormat":1},{"version":"f26b11d8d8e4b8028f1c7d618b22274c892e4b0ef5b3678a8ccbad85419aef43","affectsGlobalScope":true,"impliedFormat":1},{"version":"5929864ce17fba74232584d90cb721a89b7ad277220627cc97054ba15a98ea8f","impliedFormat":1},{"version":"763fe0f42b3d79b440a9b6e51e9ba3f3f91352469c1e4b3b67bfa4ff6352f3f4","impliedFormat":1},{"version":"25c8056edf4314820382a5fdb4bb7816999acdcb929c8f75e3f39473b87e85bc","impliedFormat":1},{"version":"c464d66b20788266e5353b48dc4aa6bc0dc4a707276df1e7152ab0c9ae21fad8","impliedFormat":1},{"version":"78d0d27c130d35c60b5e5566c9f1e5be77caf39804636bc1a40133919a949f21","impliedFormat":1},{"version":"c6fd2c5a395f2432786c9cb8deb870b9b0e8ff7e22c029954fabdd692bff6195","impliedFormat":1},{"version":"1d6e127068ea8e104a912e42fc0a110e2aa5a66a356a917a163e8cf9a65e4a75","impliedFormat":1},{"version":"5ded6427296cdf3b9542de4471d2aa8d3983671d4cac0f4bf9c637208d1ced43","impliedFormat":1},{"version":"7f182617db458e98fc18dfb272d40aa2fff3a353c44a89b2c0ccb3937709bfb5","impliedFormat":1},{"version":"cadc8aced301244057c4e7e73fbcae534b0f5b12a37b150d80e5a45aa4bebcbd","impliedFormat":1},{"version":"385aab901643aa54e1c36f5ef3107913b10d1b5bb8cbcd933d4263b80a0d7f20","impliedFormat":1},{"version":"9670d44354bab9d9982eca21945686b5c24a3f893db73c0dae0fd74217a4c219","impliedFormat":1},{"version":"0b8a9268adaf4da35e7fa830c8981cfa22adbbe5b3f6f5ab91f6658899e657a7","impliedFormat":1},{"version":"11396ed8a44c02ab9798b7dca436009f866e8dae3c9c25e8c1fbc396880bf1bb","impliedFormat":1},{"version":"ba7bc87d01492633cb5a0e5da8a4a42a1c86270e7b3d2dea5d156828a84e4882","impliedFormat":1},{"version":"4893a895ea92c85345017a04ed427cbd6a1710453338df26881a6019432febdd","impliedFormat":1},{"version":"c21dc52e277bcfc75fac0436ccb75c204f9e1b3fa5e12729670910639f27343e","impliedFormat":1},{"version":"13f6f39e12b1518c6650bbb220c8985999020fe0f21d818e28f512b7771d00f9","impliedFormat":1},{"version":"9b5369969f6e7175740bf51223112ff209f94ba43ecd3bb09eefff9fd675624a","impliedFormat":1},{"version":"4fe9e626e7164748e8769bbf74b538e09607f07ed17c2f20af8d680ee49fc1da","impliedFormat":1},{"version":"24515859bc0b836719105bb6cc3d68255042a9f02a6022b3187948b204946bd2","impliedFormat":1},{"version":"ea0148f897b45a76544ae179784c95af1bd6721b8610af9ffa467a518a086a43","impliedFormat":1},{"version":"24c6a117721e606c9984335f71711877293a9651e44f59f3d21c1ea0856f9cc9","impliedFormat":1},{"version":"dd3273ead9fbde62a72949c97dbec2247ea08e0c6952e701a483d74ef92d6a17","impliedFormat":1},{"version":"405822be75ad3e4d162e07439bac80c6bcc6dbae1929e179cf467ec0b9ee4e2e","impliedFormat":1},{"version":"0db18c6e78ea846316c012478888f33c11ffadab9efd1cc8bcc12daded7a60b6","impliedFormat":1},{"version":"e61be3f894b41b7baa1fbd6a66893f2579bfad01d208b4ff61daef21493ef0a8","impliedFormat":1},{"version":"bd0532fd6556073727d28da0edfd1736417a3f9f394877b6d5ef6ad88fba1d1a","impliedFormat":1},{"version":"89167d696a849fce5ca508032aabfe901c0868f833a8625d5a9c6e861ef935d2","impliedFormat":1},{"version":"615ba88d0128ed16bf83ef8ccbb6aff05c3ee2db1cc0f89ab50a4939bfc1943f","impliedFormat":1},{"version":"a4d551dbf8746780194d550c88f26cf937caf8d56f102969a110cfaed4b06656","impliedFormat":1},{"version":"8bd86b8e8f6a6aa6c49b71e14c4ffe1211a0e97c80f08d2c8cc98838006e4b88","impliedFormat":1},{"version":"317e63deeb21ac07f3992f5b50cdca8338f10acd4fbb7257ebf56735bf52ab00","impliedFormat":1},{"version":"4732aec92b20fb28c5fe9ad99521fb59974289ed1e45aecb282616202184064f","impliedFormat":1},{"version":"2e85db9e6fd73cfa3d7f28e0ab6b55417ea18931423bd47b409a96e4a169e8e6","impliedFormat":1},{"version":"c46e079fe54c76f95c67fb89081b3e399da2c7d109e7dca8e4b58d83e332e605","impliedFormat":1},{"version":"bf67d53d168abc1298888693338cb82854bdb2e69ef83f8a0092093c2d562107","impliedFormat":1},{"version":"b52476feb4a0cbcb25e5931b930fc73cb6643fb1a5060bf8a3dda0eeae5b4b68","affectsGlobalScope":true,"impliedFormat":1},{"version":"f9501cc13ce624c72b61f12b3963e84fad210fbdf0ffbc4590e08460a3f04eba","affectsGlobalScope":true,"impliedFormat":1},{"version":"e7721c4f69f93c91360c26a0a84ee885997d748237ef78ef665b153e622b36c1","affectsGlobalScope":true,"impliedFormat":1},{"version":"d97fb21da858fb18b8ae72c314e9743fd52f73ebe2764e12af1db32fc03f853f","affectsGlobalScope":true,"impliedFormat":1},{"version":"0fa06ada475b910e2106c98c68b10483dc8811d0c14a8a8dd36efb2672485b29","impliedFormat":1},{"version":"33e5e9aba62c3193d10d1d33ae1fa75c46a1171cf76fef750777377d53b0303f","impliedFormat":1},{"version":"2b06b93fd01bcd49d1a6bd1f9b65ddcae6480b9a86e9061634d6f8e354c1468f","impliedFormat":1},{"version":"6a0cd27e5dc2cfbe039e731cf879d12b0e2dded06d1b1dedad07f7712de0d7f4","affectsGlobalScope":true,"impliedFormat":1},{"version":"13f5c844119c43e51ce777c509267f14d6aaf31eafb2c2b002ca35584cd13b29","impliedFormat":1},{"version":"e60477649d6ad21542bd2dc7e3d9ff6853d0797ba9f689ba2f6653818999c264","impliedFormat":1},{"version":"c2510f124c0293ab80b1777c44d80f812b75612f297b9857406468c0f4dafe29","affectsGlobalScope":true,"impliedFormat":1},{"version":"5524481e56c48ff486f42926778c0a3cce1cc85dc46683b92b1271865bcf015a","impliedFormat":1},{"version":"4c829ab315f57c5442c6667b53769975acbf92003a66aef19bce151987675bd1","affectsGlobalScope":true,"impliedFormat":1},{"version":"b2ade7657e2db96d18315694789eff2ddd3d8aea7215b181f8a0b303277cc579","impliedFormat":1},{"version":"78dbea00e90d2df8ea3dbef0cc379d95b8be9b71cd6bde4c28728f306811803b","impliedFormat":1},{"version":"4d631b81fa2f07a0e63a9a143d6a82c25c5f051298651a9b69176ba28930756d","impliedFormat":1},{"version":"836a356aae992ff3c28a0212e3eabcb76dd4b0cc06bcb9607aeef560661b860d","impliedFormat":1},{"version":"1e0d1f8b0adfa0b0330e028c7941b5a98c08b600efe7f14d2d2a00854fb2f393","impliedFormat":1},{"version":"41670ee38943d9cbb4924e436f56fc19ee94232bc96108562de1a734af20dc2c","affectsGlobalScope":true,"impliedFormat":1},{"version":"8e1e46d0a9837ee058c100501080c920fa98081ea3956af0374308ba6f22a33e","impliedFormat":1},{"version":"272ca407e0c9068bdc5152552d876e68037ceae3de62e529306403e973dec8e1","impliedFormat":1},{"version":"fa7834c715d5357e4540cee40ce96c3250ddb67a7b879a6b7fa0e86d6696f121","impliedFormat":1},{"version":"22dfb07a7ab15b66ac043829056fe70124844636ae719551812ac631ba04985b","impliedFormat":1},{"version":"a10f0e1854f3316d7ee437b79649e5a6ae3ae14ffe6322b02d4987071a95362e","impliedFormat":1},{"version":"e208f73ef6a980104304b0d2ca5f6bf1b85de6009d2c7e404028b875020fa8f2","impliedFormat":1},{"version":"d163b6bc2372b4f07260747cbc6c0a6405ab3fbcea3852305e98ac43ca59f5bc","impliedFormat":1},{"version":"e6fa9ad47c5f71ff733744a029d1dc472c618de53804eae08ffc243b936f87ff","affectsGlobalScope":true,"impliedFormat":1},{"version":"a6f137d651076822d4fe884287e68fd61785a0d3d1fdb250a5059b691fa897db","impliedFormat":1},{"version":"24826ed94a78d5c64bd857570fdbd96229ad41b5cb654c08d75a9845e3ab7dde","impliedFormat":1},{"version":"8b479a130ccb62e98f11f136d3ac80f2984fdc07616516d29881f3061f2dd472","impliedFormat":1},{"version":"928af3d90454bf656a52a48679f199f64c1435247d6189d1caf4c68f2eaf921f","affectsGlobalScope":true,"impliedFormat":1},{"version":"bceb58df66ab8fb00170df20cd813978c5ab84be1d285710c4eb005d8e9d8efb","affectsGlobalScope":true,"impliedFormat":1},{"version":"3f16a7e4deafa527ed9995a772bb380eb7d3c2c0fd4ae178c5263ed18394db2c","impliedFormat":1},{"version":"933921f0bb0ec12ef45d1062a1fc0f27635318f4d294e4d99de9a5493e618ca2","impliedFormat":1},{"version":"71a0f3ad612c123b57239a7749770017ecfe6b66411488000aba83e4546fde25","impliedFormat":1},{"version":"77fbe5eecb6fac4b6242bbf6eebfc43e98ce5ccba8fa44e0ef6a95c945ff4d98","impliedFormat":1},{"version":"4f9d8ca0c417b67b69eeb54c7ca1bedd7b56034bb9bfd27c5d4f3bc4692daca7","impliedFormat":1},{"version":"0cb167c371eaa8c869f8a7656a7296f2e4fae43b4d8b803a680236b24794e5f9","impliedFormat":1},{"version":"0a839dba0287cc0481ad4beedd48a1c64acf1e212ae865d1315f7007ca215161","impliedFormat":1},{"version":"38dc4655376cd1a4bd6bb3763d92949233e33d38d3dd3cbea7bbf218175a38ef","impliedFormat":1},{"version":"37ba7b45141a45ce6e80e66f2a96c8a5ab1bcef0fc2d0f56bb58df96ec67e972","impliedFormat":1},{"version":"45650f47bfb376c8a8ed39d4bcda5902ab899a3150029684ee4c10676d9fbaee","impliedFormat":1},{"version":"208a6a0bfb227bdf8fb964799d0a206c75cf03ccd72e63bf5495c9331354c6d6","affectsGlobalScope":true,"impliedFormat":1},{"version":"18fd40412d102c5564136f29735e5d1c3b455b8a37f920da79561f1fde068208","impliedFormat":1},{"version":"48a679952eefe4cb776d5a0e1ccba2d3eb53b57448bbb7abc1fcebcbd5440188","impliedFormat":1},{"version":"f0be1b8078cd549d91f37c30c222c2a187ac1cf981d994fb476a1adc61387b14","affectsGlobalScope":true,"impliedFormat":1},{"version":"0aaed1d72199b01234152f7a60046bc947f1f37d78d182e9ae09c4289e06a592","impliedFormat":1},{"version":"2d14da6ecb49bf828d83948765ec2d3a579d476bbb9645e749610baa6ec880ca","impliedFormat":1},{"version":"66ba1b2c3e3a3644a1011cd530fb444a96b1b2dfe2f5e837a002d41a1a799e60","impliedFormat":1},{"version":"7e514f5b852fdbc166b539fdd1f4e9114f29911592a5eb10a94bb3a13ccac3c4","impliedFormat":1},{"version":"5b7aa3c4c1a5d81b411e8cb302b45507fea9358d3569196b27eb1a27ae3a90ef","affectsGlobalScope":true,"impliedFormat":1},{"version":"5987a903da92c7462e0b35704ce7da94d7fdc4b89a984871c0e2b87a8aae9e69","affectsGlobalScope":true,"impliedFormat":1},{"version":"ea08a0345023ade2b47fbff5a76d0d0ed8bff10bc9d22b83f40858a8e941501c","impliedFormat":1},{"version":"0aef708fb4c7a6b915e8305cbfac40cd207b032dbaabe9a01889a5fff3254681","impliedFormat":1},{"version":"ae062ce7d9510060c5d7e7952ae379224fb3f8f2dd74e88959878af2057c143b","impliedFormat":1},{"version":"ad9bdafb4e7abf14cc53ce7970486a84c87831e62891e5dfe798ddcd55e84701","affectsGlobalScope":true,"impliedFormat":1},{"version":"358765d5ea8afd285d4fd1532e78b88273f18cb3f87403a9b16fef61ac9fdcfe","impliedFormat":1},{"version":"71d3ae6a5e73ca4130762560425e00984ebaff64d5353a3333d1bb7eb86ef336","impliedFormat":1}],"root":[[104,106]],"options":{"allowImportingTsExtensions":true,"composite":true,"declaration":true,"declarationMap":true,"esModuleInterop":true,"exactOptionalPropertyTypes":true,"module":99,"noFallthroughCasesInSwitch":true,"noImplicitOverride":true,"noUncheckedIndexedAccess":true,"noUnusedLocals":false,"noUnusedParameters":false,"outDir":"./","rewriteRelativeImportExtensions":true,"rootDir":"../src","skipLibCheck":true,"sourceMap":true,"strict":true,"target":11,"tsBuildInfoFile":"./.tsbuildinfo","verbatimModuleSyntax":false},"referencedMap":[[78,1],[158,2],[159,2],[160,3],[112,4],[161,5],[162,6],[163,7],[107,1],[110,8],[108,1],[109,1],[164,9],[165,10],[166,11],[167,12],[168,13],[169,14],[170,14],[171,15],[172,16],[173,17],[174,18],[113,1],[111,1],[175,19],[176,20],[177,21],[211,22],[178,23],[179,1],[180,24],[181,25],[182,26],[183,27],[184,28],[185,29],[186,30],[187,31],[188,32],[189,32],[190,33],[191,1],[192,34],[193,35],[195,36],[194,37],[196,38],[197,39],[198,40],[199,41],[200,42],[201,43],[202,44],[203,45],[204,46],[205,47],[206,48],[207,49],[208,50],[114,1],[115,1],[116,1],[154,51],[155,1],[156,1],[157,38],[209,52],[210,53],[85,54],[83,55],[82,56],[87,57],[84,58],[81,55],[80,56],[86,58],[79,59],[77,1],[96,1],[88,60],[73,1],[74,1],[14,1],[12,1],[13,1],[18,1],[17,1],[2,1],[19,1],[20,1],[21,1],[22,1],[23,1],[24,1],[25,1],[26,1],[3,1],[27,1],[28,1],[4,1],[29,1],[33,1],[30,1],[31,1],[32,1],[34,1],[35,1],[36,1],[5,1],[37,1],[38,1],[39,1],[40,1],[6,1],[44,1],[41,1],[42,1],[43,1],[45,1],[7,1],[46,1],[51,1],[52,1],[47,1],[48,1],[49,1],[50,1],[8,1],[56,1],[53,1],[54,1],[55,1],[57,1],[9,1],[58,1],[59,1],[60,1],[62,1],[61,1],[63,1],[64,1],[10,1],[65,1],[66,1],[67,1],[11,1],[75,1],[68,1],[69,1],[70,1],[71,1],[72,1],[1,1],[16,1],[15,1],[132,61],[142,62],[131,61],[152,63],[123,64],[122,65],[151,66],[145,67],[150,68],[125,69],[139,70],[124,71],[148,72],[120,73],[119,66],[149,74],[121,75],[126,76],[127,1],[130,76],[117,1],[153,77],[143,78],[134,79],[135,80],[137,81],[133,82],[136,83],[146,66],[128,84],[129,85],[138,86],[118,87],[141,78],[140,76],[144,1],[147,88],[90,1],[89,1],[92,89],[91,1],[105,90],[106,1],[104,91],[102,1],[97,92],[99,93],[103,94],[100,1],[98,93],[101,1],[93,95],[95,96],[94,95],[76,1]],"latestChangedDtsFile":"./profiles.d.ts","version":"5.9.3"}

package/lib/index.d.ts

@@ -0,0 +1,184 @@
+/**
+ * Local sandbox backend. It selects the platform runner chain (Linux bwrap then
+ * Landlock; macOS Seatbelt; Windows the ACL restricted-token runner), functionally probes
+ * competing candidates once, and reports each wrap's enforcement and stderr
+ * classification facts. Missing or unusable confinement fails closed rather
+ * than returning the original argv.
+ *
+ * The windows-acl rung additionally owns the write grants: the write SID is
+ * the per-WORKSPACE identity derived from the canonical workspace path
+ * (`workspaceWriteSid`), while every live session receives a RANDOM private
+ * temp directory and its own derived capability (`tempWriteSid`). The
+ * workspace-root ACE materializes once per workspace per server lifetime
+ * and STANDS (the cross-session reuse cache — the exact-ACE skip makes
+ * every later provision O(1) instead of re-propagating the tree per
+ * session); the private-temp ACEs are revoked on dispose. The runner
+ * receives both SIDs (their presence marks the seam-managed contract) and
+ * stops managing DACLs itself. The rung reports partial enforcement because
+ * WRITE_RESTRICTED must retain Everyone in its
+ * restricting list and NTFS hard links alias one file object across paths.
+ * @module @bo-agent/sandbox-local
+ */
+import { Context } from 'cordis';
+import z from 'schemastery';
+import { SandboxProvider } from '@bo-agent/sandbox';
+import type { ConfinedArgv, SandboxEnforcement, SandboxPolicy } from '@bo-agent/sandbox';
+/** Plugin config. All optional — `static Config` supplies the defaults. */
+export interface Config {
+    /**
+     * Override the runner argv; bwrap-compatible profile arguments are appended. A
+     * non-empty override asserts full enforcement and skips built-in selection and
+     * probing. A runner that starts but refuses its profile must be identifiable by
+     * {@link runnerFailureSignatures}. Consumers classify a spawn rejection only after
+     * confirming the workdir is usable. `ENOENT` or `EACCES` identifies the runner when
+     * `error.path` equals argv[0] and `error.syscall` is `spawn` or `spawn <runner>`, or
+     * when `error.path` is absent and `error.syscall` is exactly `spawn <runner>`.
+     */
+    runnerCommand?: string[];
+    /**
+     * Case-insensitive stderr substrings emitted when a configured
+     * {@link runnerCommand} refuses its profile before executing the wrapped
+     * command. Required and non-empty with `runnerCommand`; rejected without
+     * it. Each entry is a non-empty, single-line, case-insensitive substring
+     * covering the executable runner's own failure dialect.
+     */
+    runnerFailureSignatures?: string[];
+    /** Positive timeout for each functional probe; zero would mean unbounded to Node. */
+    probeTimeoutMs?: number;
+}
+/** Test hook: inject probe verdicts / a fake launcher / a platform without real runners. */
+export interface SandboxInternals {
+    /** Replaces `process.platform` for chain selection (exercise any platform's chain from any host). */
+    platform?: string;
+    /** Replaces the platform's chain wholesale (walk mechanics — e.g. probing a rung the product chains only reach unprobed). */
+    chain?: readonly SelectedRunner['runner'][];
+    /** Replaces the functional `bwrap` probe (the Linux chain's first rung). */
+    probeBwrap?: () => boolean;
+    /** Replaces the functional Landlock launcher probe (the Linux chain's second rung). */
+    probeLandlock?: (launcher: string) => SandboxEnforcement | 'unusable';
+    /** Replaces the functional Seatbelt probe (the darwin chain's sole rung — only consulted if that chain ever grows). */
+    probeSeatbelt?: (seatbeltExec: string) => boolean;
+    /** Replaces the resolved `landlock-run` launcher path (a fake launcher script). */
+    landlockLauncher?: string;
+    /** Replaces the `sandbox-exec` executable the probe and wraps invoke (a fake script). */
+    seatbeltExec?: string;
+    /** Replaces the resolved windows-acl runner argv prefix (a fake runner). */
+    windowsAclRunnerArgs?: string[];
+    /** Replaces the resolved windows-acl runner built entry path (a fake lib/runner.js location). */
+    windowsAclRunnerEntry?: string;
+    /** Replaces the functional windows-acl probe (the win32 chain's sole rung — only consulted if that chain ever grows). */
+    probeWindowsAcl?: () => boolean;
+    /** Replaces the private-temp-directory removal at provider dispose (a throwing fake exercises the cleanup-failure path). */
+    rmTempDir?: (path: string) => void;
+}
+/** The chain's verdict: which runner confines, and how completely it enforces. */
+type SelectedRunner = {
+    runner: 'bwrap' | 'landlock' | 'seatbelt' | 'windows-acl';
+    enforcement: SandboxEnforcement;
+};
+/**
+ * Local process-sandbox provider. Registers as `ctx.sandbox`. Caches the
+ * chain verdict and, on the windows-acl rung, the write grants
+ * ({@link AclWriteGrant}: the standing workspace-root grant per workspace
+ * and the revocable private-temp grant per live session/workspace pair, the
+ * latter revoked on provider dispose); the one-time probes spawn nothing
+ * else.
+ */
+export declare class LocalSandboxProvider extends SandboxProvider {
+    static Config: z<Config>;
+    /** Test hook (mirrors the bash executors' `internals`). */
+    internals: SandboxInternals;
+    private readonly runnerCommand;
+    private readonly configuredRunnerFailureSignatures;
+    private readonly probeTimeoutMs;
+    /** Cached chain verdict; undefined until the first confined wrap needs it. */
+    private selectedRunner;
+    /**
+     * Server-lifetime write grants (windows-acl rung): the STANDING
+     * workspace-root grant per workspace (its ACE is the cross-session reuse
+     * cache and outlives the provider — never revoked) and the REVOCABLE
+     * private-temp grant per live session/workspace pair (revoked on provider
+     * dispose).
+     */
+    private readonly workspaceGrants;
+    private readonly tempCapabilities;
+    constructor(ctx: Context, config: Config);
+    /**
+     * Wrap `argv` in the selected runner's invocation for `policy` — the configured
+     * `runnerCommand` when present (the operator's assertion, no probe), else the platform
+     * chain's runner speaking its own profile dialect.
+     *
+     * @param argv - the exact argv the caller is about to spawn.
+     * @param policy - the file-effect policy this execution runs under.
+     * @returns the wrapped argv plus the selected backend's enforcement completeness, denial
+     *   signatures, and structured runner-failure rules; throws the fail-closed
+     *   `SANDBOX_UNAVAILABLE` error when the platform has no usable runner.
+     */
+    confine(argv: readonly string[], policy: SandboxPolicy): ConfinedArgv;
+    /** The selected rung's runner invocation (program + profile arguments) for one policy. */
+    private runnerArgv;
+    /**
+     * The windows-acl runner argv for one policy. With a calling session (the
+     * policy's `sessionId`) under workspace-write, the grants are materialized
+     * once per provider lifetime — the standing workspace-root grant per
+     * workspace and a revocable, RANDOM private-temp capability per live
+     * session/workspace pair. The runner receives `--write-sid` plus
+     * `--temp-write-sid` and grants nothing itself. Agentless workspace-write
+     * calls pass the ambient temp ROOT and no SID flags: the runner creates and
+     * removes a random private child directory for that one invocation.
+     * @param policy - the resolved per-call policy.
+     * @returns the runner invocation.
+     */
+    private windowsAclRunnerArgv;
+    /**
+     * Materialize one workspace-write policy's ACEs once per provider
+     * lifetime. The workspace SID and standing root grant are shared by the
+     * workspace. The temp directory is random and carries a distinct SID, so
+     * another session on the same workspace cannot use the shared workspace
+     * SID to enter it. A fresh provider always chooses a new path; crash
+     * residue therefore cannot collide with or authorize a resumed session.
+     * Fail-closed: a half-materialized temp grant is revoked and its directory
+     * removed before the error propagates.
+     * @param sessionId - the policy's calling-session identity.
+     * @param workspaceRoot - the resolved policy root.
+     * @returns the pair's private temp directory and write capability.
+     */
+    private materializeAclGrant;
+    /**
+     * Dispose every write grant (provider dispose): the revocable temp ACEs
+     * are revoked, the private temp directories this provider created are
+     * removed, and every SID allocation is freed; the standing workspace ACEs
+     * stay (the reuse cache). Cleanup failures are reported, not thrown:
+     * cordis teardown must not be aborted by grant cleanup. A crash skips all
+     * of it, but a new provider never reuses the residue's random path or SID;
+     * OS temp hygiene (or manual removal) eventually reclaims it.
+     */
+    private revokeAclGrants;
+    /** Remove one provider-owned private temp directory (injectable for cleanup tests). */
+    private removeTempDir;
+    /**
+     * Resolve which runner confines commands, once, for the provider's
+     * lifetime: this platform's chain ({@link PLATFORM_CHAINS}), its sole
+     * candidate selected directly, multiple candidates arbitrated by
+     * functional probes in chain order. Fail closed when the platform has no
+     * chain or no candidate passes — the command never runs.
+     */
+    private selectRunner;
+    /** Walk this platform's chain: sole candidate unprobed, several probed in order, none usable → unavailable. */
+    private chainVerdict;
+    /** One rung's functional probe (each at most once, via the chain walk). */
+    private probeRunner;
+    /** The Landlock launcher to probe and exec (test hook over the resolved one). */
+    private landlockLauncher;
+    /** The `sandbox-exec` executable to probe and exec (test hook over the system one). */
+    private seatbeltExec;
+    /**
+     * The windows-acl runner argv prefix: the built lib/runner.js entry when
+     * present (production), else the package source through tsx (development).
+     * The prefix stays `[node, runner, ...]` — a future native-exe runner keeps
+     * the same argv contract and only swaps these entries.
+     */
+    private windowsAclRunnerInvocation;
+}
+export default LocalSandboxProvider;
+//# sourceMappingURL=index.d.ts.map

package/lib/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;GAoBG;AAaH,OAAO,EAAE,OAAO,EAAE,MAAM,QAAQ,CAAA;AAChC,OAAO,CAAC,MAAM,aAAa,CAAA;AAE3B,OAAO,EAAE,eAAe,EAA2B,MAAM,mBAAmB,CAAA;AAC5E,OAAO,KAAK,EAAE,YAAY,EAA0C,kBAAkB,EAAE,aAAa,EAAE,MAAM,mBAAmB,CAAA;AAKhI,2EAA2E;AAC3E,MAAM,WAAW,MAAM;IACrB;;;;;;;;OAQG;IACH,aAAa,CAAC,EAAE,MAAM,EAAE,CAAA;IACxB;;;;;;OAMG;IACH,uBAAuB,CAAC,EAAE,MAAM,EAAE,CAAA;IAClC,qFAAqF;IACrF,cAAc,CAAC,EAAE,MAAM,CAAA;CACxB;AAiDD,4FAA4F;AAC5F,MAAM,WAAW,gBAAgB;IAC/B,qGAAqG;IACrG,QAAQ,CAAC,EAAE,MAAM,CAAA;IACjB,6HAA6H;IAC7H,KAAK,CAAC,EAAE,SAAS,cAAc,CAAC,QAAQ,CAAC,EAAE,CAAA;IAC3C,4EAA4E;IAC5E,UAAU,CAAC,EAAE,MAAM,OAAO,CAAA;IAC1B,uFAAuF;IACvF,aAAa,CAAC,EAAE,CAAC,QAAQ,EAAE,MAAM,KAAK,kBAAkB,GAAG,UAAU,CAAA;IACrE,uHAAuH;IACvH,aAAa,CAAC,EAAE,CAAC,YAAY,EAAE,MAAM,KAAK,OAAO,CAAA;IACjD,mFAAmF;IACnF,gBAAgB,CAAC,EAAE,MAAM,CAAA;IACzB,yFAAyF;IACzF,YAAY,CAAC,EAAE,MAAM,CAAA;IACrB,4EAA4E;IAC5E,oBAAoB,CAAC,EAAE,MAAM,EAAE,CAAA;IAC/B,iGAAiG;IACjG,qBAAqB,CAAC,EAAE,MAAM,CAAA;IAC9B,yHAAyH;IACzH,eAAe,CAAC,EAAE,MAAM,OAAO,CAAA;IAC/B,4HAA4H;IAC5H,SAAS,CAAC,EAAE,CAAC,IAAI,EAAE,MAAM,KAAK,IAAI,CAAA;CACnC;AAED,kFAAkF;AAClF,KAAK,cAAc,GAAG;IAAE,MAAM,EAAE,OAAO,GAAG,UAAU,GAAG,UAAU,GAAG,aAAa,CAAC;IAAC,WAAW,EAAE,kBAAkB,CAAA;CAAE,CAAA;AAqGpH;;;;;;;GAOG;AACH,qBAAa,oBAAqB,SAAQ,eAAe;IAEvD,MAAM,CAAC,MAAM,EAAE,CAAC,CAAC,MAAM,CAAC,CAItB;IAEF,2DAA2D;IAC3D,SAAS,EAAE,gBAAgB,CAAK;IAEhC,OAAO,CAAC,QAAQ,CAAC,aAAa,CAAsB;IACpD,OAAO,CAAC,QAAQ,CAAC,iCAAiC,CAAU;IAC5D,OAAO,CAAC,QAAQ,CAAC,cAAc,CAAQ;IACvC,8EAA8E;IAC9E,OAAO,CAAC,cAAc,CAA4C;IAClE;;;;;;OAMG;IACH,OAAO,CAAC,QAAQ,CAAC,eAAe,CAAmC;IACnE,OAAO,CAAC,QAAQ,CAAC,gBAAgB,CAAuC;gBAE5D,GAAG,EAAE,OAAO,EAAE,MAAM,EAAE,MAAM;IA6BxC;;;;;;;;;;OAUG;IACH,OAAO,CAAC,IAAI,EAAE,SAAS,MAAM,EAAE,EAAE,MAAM,EAAE,aAAa,GAAG,YAAY;IAmBrE,0FAA0F;IAC1F,OAAO,CAAC,UAAU;IAUlB;;;;;;;;;;;OAWG;IACH,OAAO,CAAC,oBAAoB;IAqB5B;;;;;;;;;;;;OAYG;IACH,OAAO,CAAC,mBAAmB;IAqD3B;;;;;;;;OAQG;IACH,OAAO,CAAC,eAAe;IAyBvB,uFAAuF;IACvF,OAAO,CAAC,aAAa;IAKrB;;;;;;OAMG;IACH,OAAO,CAAC,YAAY;IAMpB,+GAA+G;IAC/G,OAAO,CAAC,YAAY;IAapB,2EAA2E;IAC3E,OAAO,CAAC,WAAW;IA4BnB,iFAAiF;IACjF,OAAO,CAAC,gBAAgB;IAIxB,uFAAuF;IACvF,OAAO,CAAC,YAAY;IAIpB;;;;;OAKG;IACH,OAAO,CAAC,0BAA0B;CAQnC;AAED,eAAe,oBAAoB,CAAA"}

package/lib/index.js

@@ -0,0 +1,490 @@
+/**
+ * Local sandbox backend. It selects the platform runner chain (Linux bwrap then
+ * Landlock; macOS Seatbelt; Windows the ACL restricted-token runner), functionally probes
+ * competing candidates once, and reports each wrap's enforcement and stderr
+ * classification facts. Missing or unusable confinement fails closed rather
+ * than returning the original argv.
+ *
+ * The windows-acl rung additionally owns the write grants: the write SID is
+ * the per-WORKSPACE identity derived from the canonical workspace path
+ * (`workspaceWriteSid`), while every live session receives a RANDOM private
+ * temp directory and its own derived capability (`tempWriteSid`). The
+ * workspace-root ACE materializes once per workspace per server lifetime
+ * and STANDS (the cross-session reuse cache — the exact-ACE skip makes
+ * every later provision O(1) instead of re-propagating the tree per
+ * session); the private-temp ACEs are revoked on dispose. The runner
+ * receives both SIDs (their presence marks the seam-managed contract) and
+ * stops managing DACLs itself. The rung reports partial enforcement because
+ * WRITE_RESTRICTED must retain Everyone in its
+ * restricting list and NTFS hard links alias one file object across paths.
+ * @module @bo-agent/sandbox-local
+ */
+import { spawnSync } from 'node:child_process';
+import { existsSync, mkdtempSync, rmSync } from 'node:fs';
+import { tmpdir } from 'node:os';
+import { join } from 'node:path';
+import { fileURLToPath } from 'node:url';
+import { LAUNCHER_BIN, LAUNCHER_FAILURE_EXIT, launcherPath as landlockLauncherPath, probe as defaultProbeLandlock, } from '@bo-agent/node-addon-landlock-run';
+import z from 'schemastery';
+import { assertNever } from '@bo-agent/inline';
+import { SandboxProvider, SandboxUnavailableError } from '@bo-agent/sandbox';
+import { AclWriteGrant, assertTempRootOutsideWorkspace, tempWriteSid, workspaceWriteSid } from '@bo-agent/sandbox-windows-acl';
+import { bwrapProfileArgs, landlockProfileArgs, seatbeltProfileArgs } from "./profiles.js";
+/** Probe whether `bwrap` can create the profile; the provider caches the bounded result. */
+function defaultProbeBwrap(timeoutMs) {
+    const probe = spawnSync('bwrap', ['--ro-bind', '/', '/', '--dev', '/dev', '--proc', '/proc', '--die-with-parent', '--', 'true'], {
+        timeout: timeoutMs,
+        stdio: 'ignore',
+    });
+    return probe.status === 0;
+}
+/**
+ * Functional Seatbelt probe: apply the real `read-only` profile through
+ * `sandbox-exec -p` and run `true` under it — exit 0 means the kernel
+ * accepted and enforced the profile (`sandbox-exec` exits non-zero when
+ * `sandbox_init` refuses it). A missing `sandbox-exec` (every non-macOS
+ * host) fails the spawn and probes `unusable`, exactly like the other
+ * rungs' absent binaries. Apple marks the CLI deprecated but ships it on
+ * every macOS; if it ever disappears, this probe is what fails closed.
+ */
+function defaultProbeSeatbelt(seatbeltExec, timeoutMs) {
+    const probe = spawnSync(seatbeltExec, [...seatbeltProfileArgs({ mode: 'read-only', workspaceRoot: '/' }), '--', 'true'], {
+        timeout: timeoutMs,
+        stdio: 'ignore',
+    });
+    return probe.status === 0;
+}
+/**
+ * Functional windows-acl probe: run the runner in read-only mode (zero grants,
+ * no ACL mutation) around `cmd /c exit 0` — exit 0 means the runner created
+ * the restricted token and spawned the child under it. The win32 chain is a
+ * sole candidate, so the product never probes; the probe exists for override
+ * chains and mirrors the other rungs' shape.
+ */
+function defaultProbeWindowsAcl(runnerInvocation, timeoutMs) {
+    const program = runnerInvocation[0];
+    if (program === undefined)
+        return false;
+    const probe = spawnSync(program, [
+        ...runnerInvocation.slice(1),
+        '--workspace', tmpdir(), '--temp', tmpdir(), '--mode', 'read-only',
+        '--', 'cmd', '/c', 'exit', '0',
+    ], {
+        timeout: timeoutMs,
+        stdio: 'ignore',
+    });
+    return probe.status === 0;
+}
+/**
+ * The runner chain per platform — selection is BY PLATFORM first, probes
+ * second: a platform's chain is probed in preference order only when it has
+ * MORE than one candidate (probing arbitrates; it does not re-validate a
+ * choice that has no alternative). A platform with no chain fails closed at
+ * `confine()`. Linux prefers `bwrap` (its mount profile is closest to the
+ * mode vocabulary) over the Landlock launcher; darwin has exactly one
+ * candidate, selected without any probe.
+ */
+const PLATFORM_CHAINS = {
+    linux: ['bwrap', 'landlock'],
+    darwin: ['seatbelt'],
+    // The Windows restricted-token runner (@bo-agent/sandbox-windows-acl):
+    // a sole candidate, selected without a probe — its execution-time refusal
+    // fails closed through its stderr signature (windows-acl-run:) and exit 127.
+    win32: ['windows-acl'],
+};
+/**
+ * Enforcement completeness a rung claims when selected WITHOUT a probe (a
+ * chain of one). `bwrap` and Seatbelt govern every promised file effect by
+ * construction, so the claim is a profile fact; `landlock` is listed for the
+ * table's totality but is unreachable unprobed today (the Linux chain has
+ * two rungs, so it is only ever selected through its probe, whose report is
+ * what distinguishes full from per-ABI-partial — and the launcher additionally
+ * self-reports partial enforcement on stderr at every confined run).
+ */
+const STATIC_ENFORCEMENT = {
+    bwrap: 'full',
+    landlock: 'full',
+    seatbelt: 'full',
+    // WRITE_RESTRICTED needs Everyone in both restricting lists for process
+    // initialization. An external object that grants Everyone write access
+    // therefore remains writable, and NTFS hard links can alias a granted
+    // workspace file to a path outside it. The backend enforces the remaining
+    // ACL-addressable surface but must not advertise the absolute promise.
+    'windows-acl': 'partial',
+};
+/**
+ * A probe bound must be a positive finite number: Node treats
+ * `spawnSync({ timeout: 0 })` as NO timeout, so an unvalidated 0 would
+ * silently mean "unbounded" — the opposite of what the field promises.
+ */
+function assertPositiveFinite(name, value) {
+    if (!Number.isFinite(value) || value <= 0) {
+        throw new Error(`sandbox-local: ${name} must be a positive finite number`);
+    }
+}
+/**
+ * The denial dialect each runner's kernel speaks — the case-insensitive stderr substrings a
+ * denied file effect produces under it, carried on every wrap (the seam's
+ * `ConfinedArgv.denialSignatures`).
+ */
+const DENIAL_SIGNATURES = {
+    bwrap: ['read-only file system'],
+    landlock: ['permission denied'],
+    seatbelt: ['operation not permitted'],
+    // pwsh/.NET: "Access to the path '...' is denied."; cmd: "Access is denied.";
+    // node EACCES: "permission denied".
+    'windows-acl': ['access is denied', 'access to the path', 'permission denied'],
+    runnerCommand: ['read-only file system', 'permission denied'],
+};
+/** The windows-acl runner's documented failure exit (its own RUNNER_FAILURE_EXIT contract, distinct from Landlock's 125). */
+const WINDOWS_ACL_RUNNER_FAILURE_EXIT = 127;
+/**
+ * Runner-owned fatal diagnostics. Landlock has a versioned exit-125 plus
+ * fatal-line launcher-failure contract. Bubblewrap's current fatal paths exit
+ * 1 but its public contract does not reserve that status, while sandbox-exec
+ * publishes no launcher-failure status; those backends remain signature-only.
+ * The windows-acl runner prints `windows-acl-run: <detail>` on every
+ * runner-side failure and exits 127 — the rule is exit-gated on that status
+ * so a confined command that merely PRINTS the signature (or a runner
+ * cleanup failure reported on a non-zero child exit) is never misclassified
+ * as "the command did not run". Keep the Landlock tuple aligned with the
+ * assembled snapshot fixture at
+ * `examples/acp-agent/tests/fixtures/partial-landlock-sandbox.ts`.
+ */
+const RUNNER_FAILURE_RULES = {
+    bwrap: [{ fatalSignatures: ['bwrap: '] }],
+    landlock: [{
+            allowedExitCodes: [LAUNCHER_FAILURE_EXIT],
+            fatalSignatures: [`${LAUNCHER_BIN}: `],
+            informationalLines: [`${LAUNCHER_BIN}: partial enforcement (older Landlock ABI)`],
+        }],
+    seatbelt: [{ fatalSignatures: ['sandbox-exec: '] }],
+    'windows-acl': [{ allowedExitCodes: [WINDOWS_ACL_RUNNER_FAILURE_EXIT], fatalSignatures: ['windows-acl-run: '] }],
+};
+/**
+ * Local process-sandbox provider. Registers as `ctx.sandbox`. Caches the
+ * chain verdict and, on the windows-acl rung, the write grants
+ * ({@link AclWriteGrant}: the standing workspace-root grant per workspace
+ * and the revocable private-temp grant per live session/workspace pair, the
+ * latter revoked on provider dispose); the one-time probes spawn nothing
+ * else.
+ */
+export class LocalSandboxProvider extends SandboxProvider {
+    // Inline schema call: the config catalog walks `static Config` statically.
+    static Config = z.object({
+        runnerCommand: z.array(z.string()).default([]),
+        runnerFailureSignatures: z.array(z.string()).default([]),
+        probeTimeoutMs: z.natural().default(5_000),
+    });
+    /** Test hook (mirrors the bash executors' `internals`). */
+    internals = {};
+    runnerCommand;
+    configuredRunnerFailureSignatures;
+    probeTimeoutMs;
+    /** Cached chain verdict; undefined until the first confined wrap needs it. */
+    selectedRunner;
+    /**
+     * Server-lifetime write grants (windows-acl rung): the STANDING
+     * workspace-root grant per workspace (its ACE is the cross-session reuse
+     * cache and outlives the provider — never revoked) and the REVOCABLE
+     * private-temp grant per live session/workspace pair (revoked on provider
+     * dispose).
+     */
+    workspaceGrants = new Map();
+    tempCapabilities = new Map();
+    constructor(ctx, config) {
+        super(ctx);
+        // The schema (static Config) defaults every field — the casts record
+        // those runtime facts. An empty runnerCommand means "not configured":
+        // use the platform chain.
+        const runner = config.runnerCommand;
+        const runnerFailureSignatures = config.runnerFailureSignatures;
+        if (runner.length === 0 && runnerFailureSignatures.length > 0) {
+            throw new Error('sandbox-local: runnerFailureSignatures requires runnerCommand');
+        }
+        if (runner.length > 0 && runnerFailureSignatures.length === 0) {
+            throw new Error('sandbox-local: runnerCommand requires at least one runnerFailureSignatures entry');
+        }
+        if (runnerFailureSignatures.some(signature => signature.trim().length === 0 || /[\r\n]/u.test(signature))) {
+            throw new Error('sandbox-local: runnerFailureSignatures entries must be non-empty single-line strings');
+        }
+        this.runnerCommand = runner.length > 0 ? runner : undefined;
+        this.configuredRunnerFailureSignatures = runnerFailureSignatures;
+        this.probeTimeoutMs = config.probeTimeoutMs;
+        assertPositiveFinite('probeTimeoutMs', this.probeTimeoutMs);
+        // The temp grants are revoked with the provider: a clean server
+        // shutdown leaves no temp ACEs behind (workspace ACEs stand by design —
+        // the reuse cache; an unclean shutdown leaves them for the next
+        // provision's exact-ACE skip).
+        ctx.effect(() => () => {
+            this.revokeAclGrants();
+        });
+    }
+    /**
+     * Wrap `argv` in the selected runner's invocation for `policy` — the configured
+     * `runnerCommand` when present (the operator's assertion, no probe), else the platform
+     * chain's runner speaking its own profile dialect.
+     *
+     * @param argv - the exact argv the caller is about to spawn.
+     * @param policy - the file-effect policy this execution runs under.
+     * @returns the wrapped argv plus the selected backend's enforcement completeness, denial
+     *   signatures, and structured runner-failure rules; throws the fail-closed
+     *   `SANDBOX_UNAVAILABLE` error when the platform has no usable runner.
+     */
+    confine(argv, policy) {
+        if (this.runnerCommand !== undefined) {
+            return {
+                argv: [...this.runnerCommand, ...bwrapProfileArgs(policy), '--', ...argv],
+                enforcement: 'full',
+                denialSignatures: DENIAL_SIGNATURES.runnerCommand,
+                runnerFailureRules: [{ fatalSignatures: this.configuredRunnerFailureSignatures }],
+            };
+        }
+        const selected = this.selectRunner(policy.mode);
+        const runnerArgv = this.runnerArgv(selected.runner, policy);
+        return {
+            argv: [...runnerArgv, '--', ...argv],
+            enforcement: selected.enforcement,
+            denialSignatures: DENIAL_SIGNATURES[selected.runner],
+            runnerFailureRules: RUNNER_FAILURE_RULES[selected.runner],
+        };
+    }
+    /** The selected rung's runner invocation (program + profile arguments) for one policy. */
+    runnerArgv(runner, policy) {
+        switch (runner) {
+            case 'bwrap': return ['bwrap', ...bwrapProfileArgs(policy)];
+            case 'landlock': return [this.landlockLauncher(), ...landlockProfileArgs(policy)];
+            case 'seatbelt': return [this.seatbeltExec(), ...seatbeltProfileArgs(policy)];
+            case 'windows-acl': return this.windowsAclRunnerArgv(policy);
+            default: return assertNever(runner);
+        }
+    }
+    /**
+     * The windows-acl runner argv for one policy. With a calling session (the
+     * policy's `sessionId`) under workspace-write, the grants are materialized
+     * once per provider lifetime — the standing workspace-root grant per
+     * workspace and a revocable, RANDOM private-temp capability per live
+     * session/workspace pair. The runner receives `--write-sid` plus
+     * `--temp-write-sid` and grants nothing itself. Agentless workspace-write
+     * calls pass the ambient temp ROOT and no SID flags: the runner creates and
+     * removes a random private child directory for that one invocation.
+     * @param policy - the resolved per-call policy.
+     * @returns the runner invocation.
+     */
+    windowsAclRunnerArgv(policy) {
+        const sessionId = policy.sessionId;
+        if (sessionId === undefined || policy.mode === 'read-only') {
+            return [
+                ...this.windowsAclRunnerInvocation(),
+                '--workspace', policy.workspaceRoot,
+                '--temp', tmpdir(),
+                '--mode', policy.mode,
+            ];
+        }
+        const temp = this.materializeAclGrant(sessionId, policy.workspaceRoot);
+        return [
+            ...this.windowsAclRunnerInvocation(),
+            '--workspace', policy.workspaceRoot,
+            '--temp', temp.dir,
+            '--mode', policy.mode,
+            '--write-sid', workspaceWriteSid(policy.workspaceRoot),
+            '--temp-write-sid', temp.writeSid,
+        ];
+    }
+    /**
+     * Materialize one workspace-write policy's ACEs once per provider
+     * lifetime. The workspace SID and standing root grant are shared by the
+     * workspace. The temp directory is random and carries a distinct SID, so
+     * another session on the same workspace cannot use the shared workspace
+     * SID to enter it. A fresh provider always chooses a new path; crash
+     * residue therefore cannot collide with or authorize a resumed session.
+     * Fail-closed: a half-materialized temp grant is revoked and its directory
+     * removed before the error propagates.
+     * @param sessionId - the policy's calling-session identity.
+     * @param workspaceRoot - the resolved policy root.
+     * @returns the pair's private temp directory and write capability.
+     */
+    materializeAclGrant(sessionId, workspaceRoot) {
+        assertTempRootOutsideWorkspace(workspaceRoot, tmpdir());
+        const writeSid = workspaceWriteSid(workspaceRoot);
+        if (!this.workspaceGrants.has(workspaceRoot)) {
+            const grant = AclWriteGrant.create(writeSid);
+            try {
+                grant.add(workspaceRoot, true);
+            }
+            catch (error) {
+                // Free the SID; a standing ACE (if the apply succeeded before a
+                // post-apply throw) is the intended end state, not an error
+                // artifact — nothing to revoke.
+                try {
+                    grant.dispose();
+                }
+                catch (cleanupError) {
+                    throw new AggregateError([error, cleanupError], 'sandbox-local windows-acl workspace grant failed and its cleanup also failed');
+                }
+                throw error;
+            }
+            this.workspaceGrants.set(workspaceRoot, grant);
+        }
+        const key = JSON.stringify([String(sessionId), workspaceRoot]);
+        const existing = this.tempCapabilities.get(key);
+        if (existing !== undefined)
+            return existing;
+        const tempDir = mkdtempSync(join(tmpdir(), 'dsh-'));
+        const tempSid = tempWriteSid(tempDir);
+        let grant;
+        try {
+            grant = AclWriteGrant.create(tempSid);
+            grant.add(tempDir);
+        }
+        catch (error) {
+            const cleanupFailures = [];
+            if (grant !== undefined) {
+                try {
+                    grant.dispose();
+                }
+                catch (cleanupError) {
+                    cleanupFailures.push(cleanupError);
+                }
+            }
+            try {
+                this.removeTempDir(tempDir);
+            }
+            catch (cleanupError) {
+                cleanupFailures.push(cleanupError);
+            }
+            if (cleanupFailures.length > 0) {
+                throw new AggregateError([error, ...cleanupFailures], 'sandbox-local windows-acl temp grant materialization failed and its cleanup also failed');
+            }
+            throw error;
+        }
+        const capability = { dir: tempDir, writeSid: tempSid, grant };
+        this.tempCapabilities.set(key, capability);
+        return capability;
+    }
+    /**
+     * Dispose every write grant (provider dispose): the revocable temp ACEs
+     * are revoked, the private temp directories this provider created are
+     * removed, and every SID allocation is freed; the standing workspace ACEs
+     * stay (the reuse cache). Cleanup failures are reported, not thrown:
+     * cordis teardown must not be aborted by grant cleanup. A crash skips all
+     * of it, but a new provider never reuses the residue's random path or SID;
+     * OS temp hygiene (or manual removal) eventually reclaims it.
+     */
+    revokeAclGrants() {
+        if (this.workspaceGrants.size === 0 && this.tempCapabilities.size === 0)
+            return;
+        const failures = [];
+        for (const grant of [...this.workspaceGrants.values(), ...[...this.tempCapabilities.values()].map(capability => capability.grant)]) {
+            try {
+                grant.dispose();
+            }
+            catch (error) {
+                failures.push(error);
+            }
+        }
+        for (const { dir } of this.tempCapabilities.values()) {
+            try {
+                this.removeTempDir(dir);
+            }
+            catch (error) {
+                failures.push(error);
+            }
+        }
+        this.workspaceGrants.clear();
+        this.tempCapabilities.clear();
+        if (failures.length > 0) {
+            this.ctx.logger.warn(`sandbox-local: windows-acl grant cleanup completed with ${failures.length} failure(s)`);
+            for (const error of failures)
+                this.ctx.logger.warn(error);
+        }
+    }
+    /** Remove one provider-owned private temp directory (injectable for cleanup tests). */
+    removeTempDir(dir) {
+        const remove = this.internals.rmTempDir ?? ((path) => { rmSync(path, { recursive: true, force: true }); });
+        remove(dir);
+    }
+    /**
+     * Resolve which runner confines commands, once, for the provider's
+     * lifetime: this platform's chain ({@link PLATFORM_CHAINS}), its sole
+     * candidate selected directly, multiple candidates arbitrated by
+     * functional probes in chain order. Fail closed when the platform has no
+     * chain or no candidate passes — the command never runs.
+     */
+    selectRunner(mode) {
+        this.selectedRunner ??= this.chainVerdict();
+        if (this.selectedRunner === 'unavailable')
+            throw new SandboxUnavailableError(mode);
+        return this.selectedRunner;
+    }
+    /** Walk this platform's chain: sole candidate unprobed, several probed in order, none usable → unavailable. */
+    chainVerdict() {
+        const chain = this.internals.chain ?? PLATFORM_CHAINS[this.internals.platform ?? process.platform] ?? [];
+        const [first, ...rest] = chain;
+        if (first === undefined)
+            return 'unavailable';
+        // A sole candidate needs no arbitration; its execution-time refusal still fails closed.
+        if (rest.length === 0)
+            return { runner: first, enforcement: STATIC_ENFORCEMENT[first] };
+        for (const runner of chain) {
+            const enforcement = this.probeRunner(runner);
+            if (enforcement !== 'unusable')
+                return { runner, enforcement };
+        }
+        return 'unavailable';
+    }
+    /** One rung's functional probe (each at most once, via the chain walk). */
+    probeRunner(runner) {
+        // bwrap's mount profile and Seatbelt's deny-file-write* profile govern
+        // every promised file effect by construction, so their passing probes
+        // are always full enforcement; the Landlock launcher's probe report
+        // distinguishes full from per-ABI-partial, while windows-acl is always
+        // partial for its documented Everyone and hard-link boundaries.
+        switch (runner) {
+            case 'bwrap': {
+                const probe = this.internals.probeBwrap ?? (() => defaultProbeBwrap(this.probeTimeoutMs));
+                return probe() ? 'full' : 'unusable';
+            }
+            case 'landlock': {
+                const probe = this.internals.probeLandlock ?? (launcher => defaultProbeLandlock(launcher, { timeoutMs: this.probeTimeoutMs }));
+                return probe(this.landlockLauncher());
+            }
+            case 'seatbelt': {
+                const probe = this.internals.probeSeatbelt ?? (exec => defaultProbeSeatbelt(exec, this.probeTimeoutMs));
+                return probe(this.seatbeltExec()) ? 'full' : 'unusable';
+            }
+            case 'windows-acl': {
+                const probe = this.internals.probeWindowsAcl
+                    ?? (() => defaultProbeWindowsAcl(this.windowsAclRunnerInvocation(), this.probeTimeoutMs));
+                return probe() ? 'partial' : 'unusable';
+            }
+            default: return assertNever(runner);
+        }
+    }
+    /** The Landlock launcher to probe and exec (test hook over the resolved one). */
+    landlockLauncher() {
+        return this.internals.landlockLauncher ?? landlockLauncherPath();
+    }
+    /** The `sandbox-exec` executable to probe and exec (test hook over the system one). */
+    seatbeltExec() {
+        return this.internals.seatbeltExec ?? 'sandbox-exec';
+    }
+    /**
+     * The windows-acl runner argv prefix: the built lib/runner.js entry when
+     * present (production), else the package source through tsx (development).
+     * The prefix stays `[node, runner, ...]` — a future native-exe runner keeps
+     * the same argv contract and only swaps these entries.
+     */
+    windowsAclRunnerInvocation() {
+        const override = this.internals.windowsAclRunnerArgs;
+        if (override !== undefined)
+            return override;
+        const builtEntry = this.internals.windowsAclRunnerEntry ?? fileURLToPath(import.meta.resolve('@bo-agent/sandbox-windows-acl/runner'));
+        if (existsSync(builtEntry))
+            return [process.execPath, builtEntry];
+        const sourceEntry = fileURLToPath(import.meta.resolve('@bo-agent/sandbox-windows-acl/src/runner.ts'));
+        return [process.execPath, '--import', 'tsx/esm', sourceEntry];
+    }
+}
+export default LocalSandboxProvider;
+//# sourceMappingURL=index.js.map

package/lib/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;GAoBG;AAEH,OAAO,EAAE,SAAS,EAAE,MAAM,oBAAoB,CAAA;AAC9C,OAAO,EAAE,UAAU,EAAE,WAAW,EAAE,MAAM,EAAE,MAAM,SAAS,CAAA;AACzD,OAAO,EAAE,MAAM,EAAE,MAAM,SAAS,CAAA;AAChC,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAA;AAChC,OAAO,EAAE,aAAa,EAAE,MAAM,UAAU,CAAA;AACxC,OAAO,EACL,YAAY,EACZ,qBAAqB,EACrB,YAAY,IAAI,oBAAoB,EACpC,KAAK,IAAI,oBAAoB,GAC9B,MAAM,mCAAmC,CAAA;AAE1C,OAAO,CAAC,MAAM,aAAa,CAAA;AAC3B,OAAO,EAAE,WAAW,EAAE,MAAM,kBAAkB,CAAA;AAC9C,OAAO,EAAE,eAAe,EAAE,uBAAuB,EAAE,MAAM,mBAAmB,CAAA;AAG5E,OAAO,EAAE,aAAa,EAAE,8BAA8B,EAAE,YAAY,EAAE,iBAAiB,EAAE,MAAM,+BAA+B,CAAA;AAC9H,OAAO,EAAE,gBAAgB,EAAE,mBAAmB,EAAE,mBAAmB,EAAE,MAAM,eAAe,CAAA;AA0B1F,4FAA4F;AAC5F,SAAS,iBAAiB,CAAC,SAAiB;IAC1C,MAAM,KAAK,GAAG,SAAS,CAAC,OAAO,EAAE,CAAC,WAAW,EAAE,GAAG,EAAE,GAAG,EAAE,OAAO,EAAE,MAAM,EAAE,QAAQ,EAAE,OAAO,EAAE,mBAAmB,EAAE,IAAI,EAAE,MAAM,CAAC,EAAE;QAC/H,OAAO,EAAE,SAAS;QAClB,KAAK,EAAE,QAAQ;KAChB,CAAC,CAAA;IACF,OAAO,KAAK,CAAC,MAAM,KAAK,CAAC,CAAA;AAC3B,CAAC;AAED;;;;;;;;GAQG;AACH,SAAS,oBAAoB,CAAC,YAAoB,EAAE,SAAiB;IACnE,MAAM,KAAK,GAAG,SAAS,CAAC,YAAY,EAAE,CAAC,GAAG,mBAAmB,CAAC,EAAE,IAAI,EAAE,WAAW,EAAE,aAAa,EAAE,GAAG,EAAE,CAAC,EAAE,IAAI,EAAE,MAAM,CAAC,EAAE;QACvH,OAAO,EAAE,SAAS;QAClB,KAAK,EAAE,QAAQ;KAChB,CAAC,CAAA;IACF,OAAO,KAAK,CAAC,MAAM,KAAK,CAAC,CAAA;AAC3B,CAAC;AAED;;;;;;GAMG;AACH,SAAS,sBAAsB,CAAC,gBAA0B,EAAE,SAAiB;IAC3E,MAAM,OAAO,GAAG,gBAAgB,CAAC,CAAC,CAAC,CAAA;IACnC,IAAI,OAAO,KAAK,SAAS;QAAE,OAAO,KAAK,CAAA;IACvC,MAAM,KAAK,GAAG,SAAS,CAAC,OAAO,EAAE;QAC/B,GAAG,gBAAgB,CAAC,KAAK,CAAC,CAAC,CAAC;QAC5B,aAAa,EAAE,MAAM,EAAE,EAAE,QAAQ,EAAE,MAAM,EAAE,EAAE,QAAQ,EAAE,WAAW;QAClE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,MAAM,EAAE,GAAG;KAC/B,EAAE;QACD,OAAO,EAAE,SAAS;QAClB,KAAK,EAAE,QAAQ;KAChB,CAAC,CAAA;IACF,OAAO,KAAK,CAAC,MAAM,KAAK,CAAC,CAAA;AAC3B,CAAC;AAsCD;;;;;;;;GAQG;AACH,MAAM,eAAe,GAAwD;IAC3E,KAAK,EAAE,CAAC,OAAO,EAAE,UAAU,CAAC;IAC5B,MAAM,EAAE,CAAC,UAAU,CAAC;IACpB,uEAAuE;IACvE,0EAA0E;IAC1E,6EAA6E;IAC7E,KAAK,EAAE,CAAC,aAAa,CAAC;CACvB,CAAA;AAED;;;;;;;;GAQG;AACH,MAAM,kBAAkB,GAAyD;IAC/E,KAAK,EAAE,MAAM;IACb,QAAQ,EAAE,MAAM;IAChB,QAAQ,EAAE,MAAM;IAChB,wEAAwE;IACxE,uEAAuE;IACvE,sEAAsE;IACtE,0EAA0E;IAC1E,uEAAuE;IACvE,aAAa,EAAE,SAAS;CACzB,CAAA;AAED;;;;GAIG;AACH,SAAS,oBAAoB,CAAC,IAAY,EAAE,KAAa;IACvD,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC,IAAI,KAAK,IAAI,CAAC,EAAE,CAAC;QAC1C,MAAM,IAAI,KAAK,CAAC,kBAAkB,IAAI,mCAAmC,CAAC,CAAA;IAC5E,CAAC;AACH,CAAC;AAED;;;;GAIG;AACH,MAAM,iBAAiB,GAAG;IACxB,KAAK,EAAE,CAAC,uBAAuB,CAAC;IAChC,QAAQ,EAAE,CAAC,mBAAmB,CAAC;IAC/B,QAAQ,EAAE,CAAC,yBAAyB,CAAC;IACrC,8EAA8E;IAC9E,oCAAoC;IACpC,aAAa,EAAE,CAAC,kBAAkB,EAAE,oBAAoB,EAAE,mBAAmB,CAAC;IAC9E,aAAa,EAAE,CAAC,uBAAuB,EAAE,mBAAmB,CAAC;CAC2B,CAAA;AAE1F,6HAA6H;AAC7H,MAAM,+BAA+B,GAAG,GAAG,CAAA;AAE3C;;;;;;;;;;;;GAYG;AACH,MAAM,oBAAoB,GAAG;IAC3B,KAAK,EAAE,CAAC,EAAE,eAAe,EAAE,CAAC,SAAS,CAAC,EAAE,CAAC;IACzC,QAAQ,EAAE,CAAC;YACT,gBAAgB,EAAE,CAAC,qBAAqB,CAAC;YACzC,eAAe,EAAE,CAAC,GAAG,YAAY,IAAI,CAAC;YACtC,kBAAkB,EAAE,CAAC,GAAG,YAAY,4CAA4C,CAAC;SAClF,CAAC;IACF,QAAQ,EAAE,CAAC,EAAE,eAAe,EAAE,CAAC,gBAAgB,CAAC,EAAE,CAAC;IACnD,aAAa,EAAE,CAAC,EAAE,gBAAgB,EAAE,CAAC,+BAA+B,CAAC,EAAE,eAAe,EAAE,CAAC,mBAAmB,CAAC,EAAE,CAAC;CAC/B,CAAA;AAEnF;;;;;;;GAOG;AACH,MAAM,OAAO,oBAAqB,SAAQ,eAAe;IACvD,2EAA2E;IAC3E,MAAM,CAAC,MAAM,GAAc,CAAC,CAAC,MAAM,CAAC;QAClC,aAAa,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC;QAC9C,uBAAuB,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC;QACxD,cAAc,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,OAAO,CAAC,KAAK,CAAC;KAC3C,CAAC,CAAA;IAEF,2DAA2D;IAC3D,SAAS,GAAqB,EAAE,CAAA;IAEf,aAAa,CAAsB;IACnC,iCAAiC,CAAU;IAC3C,cAAc,CAAQ;IACvC,8EAA8E;IACtE,cAAc,CAA4C;IAClE;;;;;;OAMG;IACc,eAAe,GAAG,IAAI,GAAG,EAAyB,CAAA;IAClD,gBAAgB,GAAG,IAAI,GAAG,EAA6B,CAAA;IAExE,YAAY,GAAY,EAAE,MAAc;QACtC,KAAK,CAAC,GAAG,CAAC,CAAA;QACV,qEAAqE;QACrE,sEAAsE;QACtE,0BAA0B;QAC1B,MAAM,MAAM,GAAG,MAAM,CAAC,aAAyB,CAAA;QAC/C,MAAM,uBAAuB,GAAG,MAAM,CAAC,uBAAmC,CAAA;QAC1E,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC,IAAI,uBAAuB,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YAC9D,MAAM,IAAI,KAAK,CAAC,+DAA+D,CAAC,CAAA;QAClF,CAAC;QACD,IAAI,MAAM,CAAC,MAAM,GAAG,CAAC,IAAI,uBAAuB,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YAC9D,MAAM,IAAI,KAAK,CAAC,kFAAkF,CAAC,CAAA;QACrG,CAAC;QACD,IAAI,uBAAuB,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,CAAC,SAAS,CAAC,IAAI,EAAE,CAAC,MAAM,KAAK,CAAC,IAAI,SAAS,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,EAAE,CAAC;YAC1G,MAAM,IAAI,KAAK,CAAC,sFAAsF,CAAC,CAAA;QACzG,CAAC;QACD,IAAI,CAAC,aAAa,GAAG,MAAM,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,SAAS,CAAA;QAC3D,IAAI,CAAC,iCAAiC,GAAG,uBAAuB,CAAA;QAChE,IAAI,CAAC,cAAc,GAAG,MAAM,CAAC,cAAwB,CAAA;QACrD,oBAAoB,CAAC,gBAAgB,EAAE,IAAI,CAAC,cAAc,CAAC,CAAA;QAC3D,gEAAgE;QAChE,wEAAwE;QACxE,gEAAgE;QAChE,+BAA+B;QAC/B,GAAG,CAAC,MAAM,CAAC,GAAG,EAAE,CAAC,GAAG,EAAE;YACpB,IAAI,CAAC,eAAe,EAAE,CAAA;QACxB,CAAC,CAAC,CAAA;IACJ,CAAC;IAED;;;;;;;;;;OAUG;IACH,OAAO,CAAC,IAAuB,EAAE,MAAqB;QACpD,IAAI,IAAI,CAAC,aAAa,KAAK,SAAS,EAAE,CAAC;YACrC,OAAO;gBACL,IAAI,EAAE,CAAC,GAAG,IAAI,CAAC,aAAa,EAAE,GAAG,gBAAgB,CAAC,MAAM,CAAC,EAAE,IAAI,EAAE,GAAG,IAAI,CAAC;gBACzE,WAAW,EAAE,MAAM;gBACnB,gBAAgB,EAAE,iBAAiB,CAAC,aAAa;gBACjD,kBAAkB,EAAE,CAAC,EAAE,eAAe,EAAE,IAAI,CAAC,iCAAiC,EAAE,CAAC;aAClF,CAAA;QACH,CAAC;QACD,MAAM,QAAQ,GAAG,IAAI,CAAC,YAAY,CAAC,MAAM,CAAC,IAAI,CAAC,CAAA;QAC/C,MAAM,UAAU,GAAG,IAAI,CAAC,UAAU,CAAC,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC,CAAA;QAC3D,OAAO;YACL,IAAI,EAAE,CAAC,GAAG,UAAU,EAAE,IAAI,EAAE,GAAG,IAAI,CAAC;YACpC,WAAW,EAAE,QAAQ,CAAC,WAAW;YACjC,gBAAgB,EAAE,iBAAiB,CAAC,QAAQ,CAAC,MAAM,CAAC;YACpD,kBAAkB,EAAE,oBAAoB,CAAC,QAAQ,CAAC,MAAM,CAAC;SAC1D,CAAA;IACH,CAAC;IAED,0FAA0F;IAClF,UAAU,CAAC,MAAgC,EAAE,MAAqB;QACxE,QAAQ,MAAM,EAAE,CAAC;YACf,KAAK,OAAO,CAAC,CAAC,OAAO,CAAC,OAAO,EAAE,GAAG,gBAAgB,CAAC,MAAM,CAAC,CAAC,CAAA;YAC3D,KAAK,UAAU,CAAC,CAAC,OAAO,CAAC,IAAI,CAAC,gBAAgB,EAAE,EAAE,GAAG,mBAAmB,CAAC,MAAM,CAAC,CAAC,CAAA;YACjF,KAAK,UAAU,CAAC,CAAC,OAAO,CAAC,IAAI,CAAC,YAAY,EAAE,EAAE,GAAG,mBAAmB,CAAC,MAAM,CAAC,CAAC,CAAA;YAC7E,KAAK,aAAa,CAAC,CAAC,OAAO,IAAI,CAAC,oBAAoB,CAAC,MAAM,CAAC,CAAA;YAC5D,OAAO,CAAC,CAAC,OAAO,WAAW,CAAC,MAAM,CAAC,CAAA;QACrC,CAAC;IACH,CAAC;IAED;;;;;;;;;;;OAWG;IACK,oBAAoB,CAAC,MAAqB;QAChD,MAAM,SAAS,GAAG,MAAM,CAAC,SAAS,CAAA;QAClC,IAAI,SAAS,KAAK,SAAS,IAAI,MAAM,CAAC,IAAI,KAAK,WAAW,EAAE,CAAC;YAC3D,OAAO;gBACL,GAAG,IAAI,CAAC,0BAA0B,EAAE;gBACpC,aAAa,EAAE,MAAM,CAAC,aAAa;gBACnC,QAAQ,EAAE,MAAM,EAAE;gBAClB,QAAQ,EAAE,MAAM,CAAC,IAAI;aACtB,CAAA;QACH,CAAC;QACD,MAAM,IAAI,GAAG,IAAI,CAAC,mBAAmB,CAAC,SAAS,EAAE,MAAM,CAAC,aAAa,CAAC,CAAA;QACtE,OAAO;YACL,GAAG,IAAI,CAAC,0BAA0B,EAAE;YACpC,aAAa,EAAE,MAAM,CAAC,aAAa;YACnC,QAAQ,EAAE,IAAI,CAAC,GAAG;YAClB,QAAQ,EAAE,MAAM,CAAC,IAAI;YACrB,aAAa,EAAE,iBAAiB,CAAC,MAAM,CAAC,aAAa,CAAC;YACtD,kBAAkB,EAAE,IAAI,CAAC,QAAQ;SAClC,CAAA;IACH,CAAC;IAED;;;;;;;;;;;;OAYG;IACK,mBAAmB,CAAC,SAAoB,EAAE,aAAqB;QACrE,8BAA8B,CAAC,aAAa,EAAE,MAAM,EAAE,CAAC,CAAA;QACvD,MAAM,QAAQ,GAAG,iBAAiB,CAAC,aAAa,CAAC,CAAA;QACjD,IAAI,CAAC,IAAI,CAAC,eAAe,CAAC,GAAG,CAAC,aAAa,CAAC,EAAE,CAAC;YAC7C,MAAM,KAAK,GAAG,aAAa,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAA;YAC5C,IAAI,CAAC;gBACH,KAAK,CAAC,GAAG,CAAC,aAAa,EAAE,IAAI,CAAC,CAAA;YAChC,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,gEAAgE;gBAChE,4DAA4D;gBAC5D,gCAAgC;gBAChC,IAAI,CAAC;oBACH,KAAK,CAAC,OAAO,EAAE,CAAA;gBACjB,CAAC;gBAAC,OAAO,YAAY,EAAE,CAAC;oBACtB,MAAM,IAAI,cAAc,CAAC,CAAC,KAAK,EAAE,YAAY,CAAC,EAAE,8EAA8E,CAAC,CAAA;gBACjI,CAAC;gBACD,MAAM,KAAK,CAAA;YACb,CAAC;YACD,IAAI,CAAC,eAAe,CAAC,GAAG,CAAC,aAAa,EAAE,KAAK,CAAC,CAAA;QAChD,CAAC;QACD,MAAM,GAAG,GAAG,IAAI,CAAC,SAAS,CAAC,CAAC,MAAM,CAAC,SAAS,CAAC,EAAE,aAAa,CAAC,CAAC,CAAA;QAC9D,MAAM,QAAQ,GAAG,IAAI,CAAC,gBAAgB,CAAC,GAAG,CAAC,GAAG,CAAC,CAAA;QAC/C,IAAI,QAAQ,KAAK,SAAS;YAAE,OAAO,QAAQ,CAAA;QAC3C,MAAM,OAAO,GAAG,WAAW,CAAC,IAAI,CAAC,MAAM,EAAE,EAAE,MAAM,CAAC,CAAC,CAAA;QACnD,MAAM,OAAO,GAAG,YAAY,CAAC,OAAO,CAAC,CAAA;QACrC,IAAI,KAAgC,CAAA;QACpC,IAAI,CAAC;YACH,KAAK,GAAG,aAAa,CAAC,MAAM,CAAC,OAAO,CAAC,CAAA;YACrC,KAAK,CAAC,GAAG,CAAC,OAAO,CAAC,CAAA;QACpB,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,MAAM,eAAe,GAAc,EAAE,CAAA;YACrC,IAAI,KAAK,KAAK,SAAS,EAAE,CAAC;gBACxB,IAAI,CAAC;oBACH,KAAK,CAAC,OAAO,EAAE,CAAA;gBACjB,CAAC;gBAAC,OAAO,YAAY,EAAE,CAAC;oBACtB,eAAe,CAAC,IAAI,CAAC,YAAY,CAAC,CAAA;gBACpC,CAAC;YACH,CAAC;YACD,IAAI,CAAC;gBACH,IAAI,CAAC,aAAa,CAAC,OAAO,CAAC,CAAA;YAC7B,CAAC;YAAC,OAAO,YAAY,EAAE,CAAC;gBACtB,eAAe,CAAC,IAAI,CAAC,YAAY,CAAC,CAAA;YACpC,CAAC;YACD,IAAI,eAAe,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;gBAC/B,MAAM,IAAI,cAAc,CAAC,CAAC,KAAK,EAAE,GAAG,eAAe,CAAC,EAAE,yFAAyF,CAAC,CAAA;YAClJ,CAAC;YACD,MAAM,KAAK,CAAA;QACb,CAAC;QACD,MAAM,UAAU,GAAG,EAAE,GAAG,EAAE,OAAO,EAAE,QAAQ,EAAE,OAAO,EAAE,KAAK,EAAE,CAAA;QAC7D,IAAI,CAAC,gBAAgB,CAAC,GAAG,CAAC,GAAG,EAAE,UAAU,CAAC,CAAA;QAC1C,OAAO,UAAU,CAAA;IACnB,CAAC;IAED;;;;;;;;OAQG;IACK,eAAe;QACrB,IAAI,IAAI,CAAC,eAAe,CAAC,IAAI,KAAK,CAAC,IAAI,IAAI,CAAC,gBAAgB,CAAC,IAAI,KAAK,CAAC;YAAE,OAAM;QAC/E,MAAM,QAAQ,GAAc,EAAE,CAAA;QAC9B,KAAK,MAAM,KAAK,IAAI,CAAC,GAAG,IAAI,CAAC,eAAe,CAAC,MAAM,EAAE,EAAE,GAAG,CAAC,GAAG,IAAI,CAAC,gBAAgB,CAAC,MAAM,EAAE,CAAC,CAAC,GAAG,CAAC,UAAU,CAAC,EAAE,CAAC,UAAU,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC;YACnI,IAAI,CAAC;gBACH,KAAK,CAAC,OAAO,EAAE,CAAA;YACjB,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,QAAQ,CAAC,IAAI,CAAC,KAAK,CAAC,CAAA;YACtB,CAAC;QACH,CAAC;QACD,KAAK,MAAM,EAAE,GAAG,EAAE,IAAI,IAAI,CAAC,gBAAgB,CAAC,MAAM,EAAE,EAAE,CAAC;YACrD,IAAI,CAAC;gBACH,IAAI,CAAC,aAAa,CAAC,GAAG,CAAC,CAAA;YACzB,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,QAAQ,CAAC,IAAI,CAAC,KAAK,CAAC,CAAA;YACtB,CAAC;QACH,CAAC;QACD,IAAI,CAAC,eAAe,CAAC,KAAK,EAAE,CAAA;QAC5B,IAAI,CAAC,gBAAgB,CAAC,KAAK,EAAE,CAAA;QAC7B,IAAI,QAAQ,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YACxB,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,2DAA2D,QAAQ,CAAC,MAAM,aAAa,CAAC,CAAA;YAC7G,KAAK,MAAM,KAAK,IAAI,QAAQ;gBAAE,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAA;QAC3D,CAAC;IACH,CAAC;IAED,uFAAuF;IAC/E,aAAa,CAAC,GAAW;QAC/B,MAAM,MAAM,GAAG,IAAI,CAAC,SAAS,CAAC,SAAS,IAAI,CAAC,CAAC,IAAY,EAAE,EAAE,GAAG,MAAM,CAAC,IAAI,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAA,CAAC,CAAC,CAAC,CAAA;QACjH,MAAM,CAAC,GAAG,CAAC,CAAA;IACb,CAAC;IAED;;;;;;OAMG;IACK,YAAY,CAAC,IAAyB;QAC5C,IAAI,CAAC,cAAc,KAAK,IAAI,CAAC,YAAY,EAAE,CAAA;QAC3C,IAAI,IAAI,CAAC,cAAc,KAAK,aAAa;YAAE,MAAM,IAAI,uBAAuB,CAAC,IAAI,CAAC,CAAA;QAClF,OAAO,IAAI,CAAC,cAAc,CAAA;IAC5B,CAAC;IAED,+GAA+G;IACvG,YAAY;QAClB,MAAM,KAAK,GAAG,IAAI,CAAC,SAAS,CAAC,KAAK,IAAI,eAAe,CAAC,IAAI,CAAC,SAAS,CAAC,QAAQ,IAAI,OAAO,CAAC,QAAQ,CAAC,IAAI,EAAE,CAAA;QACxG,MAAM,CAAC,KAAK,EAAE,GAAG,IAAI,CAAC,GAAG,KAAK,CAAA;QAC9B,IAAI,KAAK,KAAK,SAAS;YAAE,OAAO,aAAa,CAAA;QAC7C,wFAAwF;QACxF,IAAI,IAAI,CAAC,MAAM,KAAK,CAAC;YAAE,OAAO,EAAE,MAAM,EAAE,KAAK,EAAE,WAAW,EAAE,kBAAkB,CAAC,KAAK,CAAC,EAAE,CAAA;QACvF,KAAK,MAAM,MAAM,IAAI,KAAK,EAAE,CAAC;YAC3B,MAAM,WAAW,GAAG,IAAI,CAAC,WAAW,CAAC,MAAM,CAAC,CAAA;YAC5C,IAAI,WAAW,KAAK,UAAU;gBAAE,OAAO,EAAE,MAAM,EAAE,WAAW,EAAE,CAAA;QAChE,CAAC;QACD,OAAO,aAAa,CAAA;IACtB,CAAC;IAED,2EAA2E;IACnE,WAAW,CAAC,MAAgC;QAClD,uEAAuE;QACvE,sEAAsE;QACtE,oEAAoE;QACpE,uEAAuE;QACvE,gEAAgE;QAChE,QAAQ,MAAM,EAAE,CAAC;YACf,KAAK,OAAO,CAAC,CAAC,CAAC;gBACb,MAAM,KAAK,GAAG,IAAI,CAAC,SAAS,CAAC,UAAU,IAAI,CAAC,GAAG,EAAE,CAAC,iBAAiB,CAAC,IAAI,CAAC,cAAc,CAAC,CAAC,CAAA;gBACzF,OAAO,KAAK,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,UAAU,CAAA;YACtC,CAAC;YACD,KAAK,UAAU,CAAC,CAAC,CAAC;gBAChB,MAAM,KAAK,GAAG,IAAI,CAAC,SAAS,CAAC,aAAa,IAAI,CAAC,QAAQ,CAAC,EAAE,CAAC,oBAAoB,CAAC,QAAQ,EAAE,EAAE,SAAS,EAAE,IAAI,CAAC,cAAc,EAAE,CAAC,CAAC,CAAA;gBAC9H,OAAO,KAAK,CAAC,IAAI,CAAC,gBAAgB,EAAE,CAAC,CAAA;YACvC,CAAC;YACD,KAAK,UAAU,CAAC,CAAC,CAAC;gBAChB,MAAM,KAAK,GAAG,IAAI,CAAC,SAAS,CAAC,aAAa,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,oBAAoB,CAAC,IAAI,EAAE,IAAI,CAAC,cAAc,CAAC,CAAC,CAAA;gBACvG,OAAO,KAAK,CAAC,IAAI,CAAC,YAAY,EAAE,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,UAAU,CAAA;YACzD,CAAC;YACD,KAAK,aAAa,CAAC,CAAC,CAAC;gBACnB,MAAM,KAAK,GAAG,IAAI,CAAC,SAAS,CAAC,eAAe;uBACvC,CAAC,GAAG,EAAE,CAAC,sBAAsB,CAAC,IAAI,CAAC,0BAA0B,EAAE,EAAE,IAAI,CAAC,cAAc,CAAC,CAAC,CAAA;gBAC3F,OAAO,KAAK,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,UAAU,CAAA;YACzC,CAAC;YACD,OAAO,CAAC,CAAC,OAAO,WAAW,CAAC,MAAM,CAAC,CAAA;QACrC,CAAC;IACH,CAAC;IAED,iFAAiF;IACzE,gBAAgB;QACtB,OAAO,IAAI,CAAC,SAAS,CAAC,gBAAgB,IAAI,oBAAoB,EAAE,CAAA;IAClE,CAAC;IAED,uFAAuF;IAC/E,YAAY;QAClB,OAAO,IAAI,CAAC,SAAS,CAAC,YAAY,IAAI,cAAc,CAAA;IACtD,CAAC;IAED;;;;;OAKG;IACK,0BAA0B;QAChC,MAAM,QAAQ,GAAG,IAAI,CAAC,SAAS,CAAC,oBAAoB,CAAA;QACpD,IAAI,QAAQ,KAAK,SAAS;YAAE,OAAO,QAAQ,CAAA;QAC3C,MAAM,UAAU,GAAG,IAAI,CAAC,SAAS,CAAC,qBAAqB,IAAI,aAAa,CAAC,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,sCAAsC,CAAC,CAAC,CAAA;QACrI,IAAI,UAAU,CAAC,UAAU,CAAC;YAAE,OAAO,CAAC,OAAO,CAAC,QAAQ,EAAE,UAAU,CAAC,CAAA;QACjE,MAAM,WAAW,GAAG,aAAa,CAAC,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,6CAA6C,CAAC,CAAC,CAAA;QACrG,OAAO,CAAC,OAAO,CAAC,QAAQ,EAAE,UAAU,EAAE,SAAS,EAAE,WAAW,CAAC,CAAA;IAC/D,CAAC;;AAGH,eAAe,oBAAoB,CAAA"}

package/lib/invariant.d.ts

@@ -0,0 +1,15 @@
+/**
+ * Package-owned invariant companion stub.
+ *
+ * This product does not enforce runtime invariants; the public contract
+ * exposed here is a structural declaration (`name`, `inject`, `apply`)
+ * rather than runtime behavior. The companion slots into a Cordis context
+ * without doing anything, so consumers that wire it up see the same surface
+ * shape regardless of whether invariants are turned on.
+ *
+ * @module @bo-agent/sandbox-local/invariant
+ */
+export declare const name = "sandbox-local-invariant";
+export declare const inject: string[];
+export declare const apply: () => Promise<() => void>;
+//# sourceMappingURL=invariant.d.ts.map

package/lib/invariant.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"invariant.d.ts","sourceRoot":"","sources":["../src/invariant.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AAGH,eAAO,MAAM,IAAI,4BAA4B,CAAA;AAC7C,eAAO,MAAM,MAAM,EAAE,MAAM,EAAO,CAAA;AAClC,eAAO,MAAM,KAAK,QAAa,OAAO,CAAC,MAAM,IAAI,CAAa,CAAA"}

package/lib/invariant.js

@@ -0,0 +1,17 @@
+/**
+ * Package-owned invariant companion stub.
+ *
+ * This product does not enforce runtime invariants; the public contract
+ * exposed here is a structural declaration (`name`, `inject`, `apply`)
+ * rather than runtime behavior. The companion slots into a Cordis context
+ * without doing anything, so consumers that wire it up see the same surface
+ * shape regardless of whether invariants are turned on.
+ *
+ * @module @bo-agent/sandbox-local/invariant
+ */
+/* eslint-disable @typescript-eslint/no-unused-vars */
+export const name = 'sandbox-local-invariant';
+export const inject = [];
+export const apply = async () => () => { };
+/* eslint-enable @typescript-eslint/no-unused-vars */
+//# sourceMappingURL=invariant.js.map

package/lib/invariant.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"invariant.js","sourceRoot":"","sources":["../src/invariant.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AAEH,sDAAsD;AACtD,MAAM,CAAC,MAAM,IAAI,GAAG,yBAAyB,CAAA;AAC7C,MAAM,CAAC,MAAM,MAAM,GAAa,EAAE,CAAA;AAClC,MAAM,CAAC,MAAM,KAAK,GAAG,KAAK,IAAyB,EAAE,CAAC,GAAG,EAAE,GAAE,CAAC,CAAA;AAC9D,qDAAqD"}

package/lib/profiles.d.ts

@@ -0,0 +1,28 @@
+/**
+ * Internal platform-profile builders for the local sandbox provider.
+ *
+ * @module @bo-agent/sandbox-local/profiles
+ */
+import type { SandboxPolicy } from '@bo-agent/sandbox';
+/**
+ * Build the bwrap profile arguments for one file-effect policy.
+ * @param policy - file-effect policy to express as bwrap mounts.
+ * @returns profile arguments before the trailing separator and command argv.
+ */
+export declare function bwrapProfileArgs(policy: SandboxPolicy): string[];
+/**
+ * Build the Landlock launcher grants for one file-effect policy.
+ * @param policy - file-effect policy to express as Landlock allow-list grants.
+ * @returns launcher grant arguments before the trailing separator and command argv.
+ */
+export declare function landlockProfileArgs(policy: SandboxPolicy): string[];
+/**
+ * Build the sandbox-exec arguments and SBPL profile for one policy. The
+ * writable roots come from the shared {@link writableRoots} helper (canonical,
+ * deduplicated) so the Seatbelt grant and any in-process fs fence stay in
+ * lockstep on the same allow-list.
+ * @param policy - file-effect policy to express as an SBPL profile.
+ * @returns sandbox-exec arguments before the trailing separator and command argv.
+ */
+export declare function seatbeltProfileArgs(policy: SandboxPolicy): string[];
+//# sourceMappingURL=profiles.d.ts.map

package/lib/profiles.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"profiles.d.ts","sourceRoot":"","sources":["../src/profiles.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAIH,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,mBAAmB,CAAA;AAEtD;;;;GAIG;AACH,wBAAgB,gBAAgB,CAAC,MAAM,EAAE,aAAa,GAAG,MAAM,EAAE,CAOhE;AAED;;;;GAIG;AACH,wBAAgB,mBAAmB,CAAC,MAAM,EAAE,aAAa,GAAG,MAAM,EAAE,CAMnE;AAOD;;;;;;;GAOG;AACH,wBAAgB,mBAAmB,CAAC,MAAM,EAAE,aAAa,GAAG,MAAM,EAAE,CAOnE"}

package/lib/profiles.js

@@ -0,0 +1,53 @@
+/**
+ * Internal platform-profile builders for the local sandbox provider.
+ *
+ * @module @bo-agent/sandbox-local/profiles
+ */
+import { grantArgs as landlockGrantArgs } from '@bo-agent/node-addon-landlock-run';
+import { writableRoots } from '@bo-agent/sandbox';
+/**
+ * Build the bwrap profile arguments for one file-effect policy.
+ * @param policy - file-effect policy to express as bwrap mounts.
+ * @returns profile arguments before the trailing separator and command argv.
+ */
+export function bwrapProfileArgs(policy) {
+    const args = ['--ro-bind', '/', '/', '--dev', '/dev', '--proc', '/proc', '--die-with-parent'];
+    if (policy.mode === 'workspace-write') {
+        args.push('--tmpfs', '/tmp');
+        args.push('--bind', policy.workspaceRoot, policy.workspaceRoot);
+    }
+    return args;
+}
+/**
+ * Build the Landlock launcher grants for one file-effect policy.
+ * @param policy - file-effect policy to express as Landlock allow-list grants.
+ * @returns launcher grant arguments before the trailing separator and command argv.
+ */
+export function landlockProfileArgs(policy) {
+    const readWrite = ['/dev/null'];
+    if (policy.mode === 'workspace-write') {
+        readWrite.push('/tmp', policy.workspaceRoot);
+    }
+    return landlockGrantArgs({ readOnly: ['/'], readWrite });
+}
+/** Quote one path as an SBPL string literal. */
+function sbplString(path) {
+    return `"${path.replaceAll('\\', String.raw `\\`).replaceAll('"', String.raw `\"`)}"`;
+}
+/**
+ * Build the sandbox-exec arguments and SBPL profile for one policy. The
+ * writable roots come from the shared {@link writableRoots} helper (canonical,
+ * deduplicated) so the Seatbelt grant and any in-process fs fence stay in
+ * lockstep on the same allow-list.
+ * @param policy - file-effect policy to express as an SBPL profile.
+ * @returns sandbox-exec arguments before the trailing separator and command argv.
+ */
+export function seatbeltProfileArgs(policy) {
+    const forms = ['(version 1)', '(allow default)', '(deny file-write*)', `(allow file-write* (literal ${sbplString('/dev/null')}))`];
+    const roots = writableRoots(policy);
+    if (roots.length > 0) {
+        forms.push(`(allow file-write* ${roots.map(root => `(subpath ${sbplString(root)})`).join(' ')})`);
+    }
+    return ['-p', forms.join(' ')];
+}
+//# sourceMappingURL=profiles.js.map

package/lib/profiles.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"profiles.js","sourceRoot":"","sources":["../src/profiles.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH,OAAO,EAAE,SAAS,IAAI,iBAAiB,EAAE,MAAM,mCAAmC,CAAA;AAClF,OAAO,EAAE,aAAa,EAAE,MAAM,mBAAmB,CAAA;AAGjD;;;;GAIG;AACH,MAAM,UAAU,gBAAgB,CAAC,MAAqB;IACpD,MAAM,IAAI,GAAG,CAAC,WAAW,EAAE,GAAG,EAAE,GAAG,EAAE,OAAO,EAAE,MAAM,EAAE,QAAQ,EAAE,OAAO,EAAE,mBAAmB,CAAC,CAAA;IAC7F,IAAI,MAAM,CAAC,IAAI,KAAK,iBAAiB,EAAE,CAAC;QACtC,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,MAAM,CAAC,CAAA;QAC5B,IAAI,CAAC,IAAI,CAAC,QAAQ,EAAE,MAAM,CAAC,aAAa,EAAE,MAAM,CAAC,aAAa,CAAC,CAAA;IACjE,CAAC;IACD,OAAO,IAAI,CAAA;AACb,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,mBAAmB,CAAC,MAAqB;IACvD,MAAM,SAAS,GAAG,CAAC,WAAW,CAAC,CAAA;IAC/B,IAAI,MAAM,CAAC,IAAI,KAAK,iBAAiB,EAAE,CAAC;QACtC,SAAS,CAAC,IAAI,CAAC,MAAM,EAAE,MAAM,CAAC,aAAa,CAAC,CAAA;IAC9C,CAAC;IACD,OAAO,iBAAiB,CAAC,EAAE,QAAQ,EAAE,CAAC,GAAG,CAAC,EAAE,SAAS,EAAE,CAAC,CAAA;AAC1D,CAAC;AAED,gDAAgD;AAChD,SAAS,UAAU,CAAC,IAAY;IAC9B,OAAO,IAAI,IAAI,CAAC,UAAU,CAAC,IAAI,EAAE,MAAM,CAAC,GAAG,CAAA,IAAI,CAAC,CAAC,UAAU,CAAC,GAAG,EAAE,MAAM,CAAC,GAAG,CAAA,IAAI,CAAC,GAAG,CAAA;AACrF,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,UAAU,mBAAmB,CAAC,MAAqB;IACvD,MAAM,KAAK,GAAG,CAAC,aAAa,EAAE,iBAAiB,EAAE,oBAAoB,EAAE,+BAA+B,UAAU,CAAC,WAAW,CAAC,IAAI,CAAC,CAAA;IAClI,MAAM,KAAK,GAAG,aAAa,CAAC,MAAM,CAAC,CAAA;IACnC,IAAI,KAAK,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACrB,KAAK,CAAC,IAAI,CAAC,sBAAsB,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC,YAAY,UAAU,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,CAAA;IACnG,CAAC;IACD,OAAO,CAAC,IAAI,EAAE,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAA;AAChC,CAAC"}

package/package.json

@@ -0,0 +1,36 @@
+{
+  "name": "@bo-agent/sandbox-local",
+  "description": "Local process-sandbox backends for the standalone sandbox product: bwrap, the npm-distributed landlock-run launcher, macOS Seatbelt, or the Windows ACL restricted-token runner — functionally probed, fail-closed",
+  "version": "0.0.1",
+  "type": "module",
+  "main": "lib/index.js",
+  "types": "lib/index.d.ts",
+  "exports": {
+    ".": {
+      "types": "./lib/index.d.ts",
+      "default": "./lib/index.js"
+    },
+    "./package.json": "./package.json"
+  },
+  "files": [
+    "lib/"
+  ],
+  "publishConfig": {
+    "access": "public"
+  },
+  "license": "MIT",
+  "dependencies": {
+    "cordis": "^4.0.0-rc.10",
+    "schemastery": "^3.18.0",
+    "@bo-agent/sandbox-windows-acl": "0.0.1",
+    "@bo-agent/sandbox": "0.0.1",
+    "@bo-agent/inline": "0.0.1",
+    "@bo-agent/node-addon-landlock-run": "0.0.1"
+  },
+  "peerDependencies": {
+    "cordis": "^4.0.0-rc.10",
+    "schemastery": "^3.18.0",
+    "@bo-agent/inline": "0.0.1",
+    "@bo-agent/sandbox": "0.0.1"
+  }
+}