@descryy/runtime-controller 0.2.1 → 0.3.1

package/dist/sandbox.js

@@ -1,71 +1,57 @@
 /**
- * §21's execution boundary, real isolation half (the sandbox-isolation
- * lane, superseding the "sandbox platform is a separate architectural
- * decision, not built here" deferral). RT-070 and RT-193 gave this runtime
- * a *named* boundary (trusted-local, resource limits, privilege reporting)
- * but not an *isolating* one -- nothing stopped a spawned process from
- * reading any file the invoking user could read, or reaching any host the
- * invoking user's network could reach. This module closes that gap for
- * real, on Linux, for processes this runtime SPAWNS.
+ * §21's execution boundary, real isolation half. RT-070/RT-193 gave this runtime a
+ * *named* boundary (trusted-local, resource limits, privilege reporting) but not an
+ * *isolating* one -- nothing stopped a spawned process from reading any file, or
+ * reaching any host, the invoking user could. This module closes that gap for real,
+ * on Linux, for processes this runtime SPAWNS.
  *
- * **The architectural constraint this module does not try to solve
- * around:** isolation can only wrap a process Descry itself launches.
- * Attach-mode (`attach-to-running-process.ts`, `attach-to-running-node-
- * process.ts`, `attach-to-running-jvm-process.ts`) reaches a process that
- * was already running, unconfined, before Descry touched it -- there is no
- * honest way to retroactively contain it (ptrace-based interception was
- * investigated and rejected elsewhere in this repo as "not honestly
- * generalizable"). Spawn-mode gets real isolation via this module.
- * Attach-mode stays permanently and explicitly unsandboxed --
- * `SANDBOX_BOUNDARY_DISCLOSURE` in `execution-safety.ts` says so in-product,
- * and this module does not (and structurally cannot) change that.
+ * **Architectural constraint this module cannot solve around:** isolation can only
+ * wrap a process Descry itself launches. Attach-mode reaches a process already
+ * running, unconfined, before Descry touched it -- there is no honest way to
+ * retroactively contain it (ptrace-based interception was investigated and rejected
+ * elsewhere as not honestly generalizable). Attach-mode stays permanently and
+ * explicitly unsandboxed -- `SANDBOX_BOUNDARY_DISCLOSURE` in `execution-safety.ts`
+ * discloses this in-product; this module does not and structurally cannot change it.
  *
- * **Mechanism: bubblewrap (bwrap), not raw `unshare`/`clone`.** bwrap is
- * the unprivileged sandboxing helper behind Flatpak and used by many
- * developer tools directly -- a small (tens of KB), auditable, actively
- * maintained binary, not a bespoke native module this repo would need to
- * build and ship per-platform. It runs setuid-free on any kernel with
- * unprivileged user namespaces enabled (checked below, not assumed) and
- * gives one process a new mount namespace (real filesystem visibility
- * control) and network namespace (real network denial) in one exec,
- * composing cleanly with `applyResourceLimits`'s `prlimit` wrap and with
- * this package's existing process-group kill mechanism (`detached: true` +
- * `process.kill(-pid, …)`) -- verified directly: bwrap does not create a
- * new process group unless asked to, so the group-kill in
- * `process-manager.ts` reaches it and everything it started, unchanged.
- * The one dependency this buys: `bwrap` must be on `PATH`. Reported as a
- * capability, exactly like `prlimit` -- refused, never silently
- * unconstrained, when requested and absent.
+ * **Mechanism: bubblewrap (bwrap), not raw `unshare`/`clone`.** bwrap is the
+ * unprivileged sandboxing helper behind Flatpak -- small, auditable, actively
+ * maintained, not a bespoke native module this repo builds per-platform. Runs
+ * setuid-free on any kernel with unprivileged user namespaces enabled (checked
+ * below, never assumed) and gives one process a new mount namespace (real
+ * filesystem visibility control) and network namespace (real network denial) in one
+ * exec. Composes with `applyResourceLimits`'s `prlimit` wrap and with
+ * `process-manager.ts`'s process-group kill -- verified directly: bwrap does not
+ * create a new process group unless asked, so the existing group-kill reaches it
+ * unchanged. The one dependency this buys: `bwrap` must be on PATH, reported as a
+ * capability exactly like `prlimit` -- refused, never silently unconstrained, when
+ * requested and absent.
  *
- * **What this module does NOT attempt, and where that gap actually closes:**
- * a *native* macOS or Windows sandbox for this mechanism (`sandbox-exec`/
- * Seatbelt -- deprecated public API; the Endpoint Security Framework --
- * needs a special Apple entitlement this project does not have; Windows Job
- * Objects + restricted tokens/AppContainer + WFP network enforcement -- a
- * second and third bespoke native sandbox to build and maintain). That is
- * not "researched but not built here, someday" -- it is an explicit
- * architecture decision NOT to build native sandboxes for those two
- * platforms at all. `../container-sandbox.ts` closes the gap instead, by
- * routing macOS and Windows through a real Docker container that reuses
- * THIS module's own proven Linux mechanism underneath (Docker Desktop's
- * Linux VM on macOS, WSL2/Docker Desktop's Windows backend on Windows) --
- * see that module's own doc comment for exactly what is real-tested there
- * versus unverified on real macOS/Windows hardware. `filesystemIsolationCapability`/
- * `networkIsolationCapability` below still report `unavailable` with a
- * reason on non-Linux platforms -- this module never silently claims to
- * cover them; `container-sandbox.ts` is the module a non-Linux caller
- * actually wants.
+ * **NOT attempted, deliberately: a native macOS or Windows sandbox.** `sandbox-exec`/
+ * Seatbelt is deprecated with no public API replacement; the Endpoint Security
+ * Framework needs an Apple entitlement this project doesn't have; Windows Job
+ * Objects + AppContainer + WFP would be a second and third bespoke native sandbox.
+ * This is an explicit decision not to build native sandboxes for those platforms at
+ * all -- `../container-sandbox.ts` closes the gap instead, routing macOS/Windows
+ * through a real Docker container that reuses this module's proven Linux mechanism
+ * (see that module's doc for what's real-tested there vs unverified on real
+ * hardware). `filesystemIsolationCapability`/`networkIsolationCapability` below
+ * still report `unavailable` with a reason on non-Linux -- never silently claimed
+ * as covered.
  */
 import { execFileSync } from "node:child_process";
 import { accessSync, constants as fsConstants, readFileSync, realpathSync } from "node:fs";
 import { dirname, isAbsolute, join, relative } from "node:path";
 /**
- * Whether unprivileged user namespaces -- the kernel feature bwrap needs to
- * build a mount/network namespace without running setuid-root -- are
- * actually enabled on this host, not merely assumed from "the kernel
- * supports namespaces in general." Two independent sysctls can each
- * disable it; neither file existing at all is itself evidence of a
- * restriction (most non-Debian-derived distros never gate this at all).
+ * Whether unprivileged user namespaces -- the kernel feature bwrap needs to build a
+ * mount/network namespace without running setuid-root -- are actually enabled on
+ * this host, never merely assumed from "the kernel supports namespaces in general."
+ * Two independent sysctls can each disable it. IMPORTANT: a sysctl file not existing
+ * is NOT evidence it's unrestricted -- only Debian/Ubuntu-derived kernels gate it
+ * through `unprivileged_userns_clone` at all, so a missing file proves nothing
+ * either way. We can't tell from absence, so we don't read it as a positive signal:
+ * `ok: true` here means "neither sysctl was found to explicitly disable it," not
+ * "isolation is confirmed available" -- it only rules out these two specific,
+ * explicit-disable signals.
  */
 function unprivilegedUserNamespaceStatus() {
     try {
@@ -75,8 +61,7 @@ function unprivilegedUserNamespaceStatus() {
         }
     }
     catch {
-        // Sysctl doesn't exist on this kernel -- not evidence of a restriction,
-        // only Debian/Ubuntu-derived kernels gate it through this specific file.
+        // Sysctl absent -- not evidence either way, not just non-Debian kernels.
     }
     try {
         const max = readFileSync("/proc/sys/user/max_user_namespaces", "utf8").trim();
@@ -85,17 +70,11 @@ function unprivilegedUserNamespaceStatus() {
         }
     }
     catch {
-        // Same reasoning.
+        // Same reasoning: absent is not evidence of a restriction.
     }
     return { ok: true, reason: null };
 }
-/**
- * Real capability check, matching `resourceLimitCapability`'s own shape and
- * precedent exactly: existence on `PATH` first (fast, matches
- * `prlimit --version`'s pattern), then the one Linux-specific precondition
- * that existence alone doesn't prove -- unprivileged user namespaces
- * actually being usable, not just bwrap being installed.
- */
+/** Real capability check, same shape as `resourceLimitCapability`: PATH existence first, then the Linux-specific precondition existence alone doesn't prove -- unprivileged user namespaces actually usable, not just bwrap installed. */
 export function filesystemIsolationCapability(env = process.env, platform = process.platform) {
     if (platform !== "linux") {
         return {
@@ -118,27 +97,16 @@ export function filesystemIsolationCapability(env = process.env, platform = proc
     }
     return { availability: "available", reason: null };
 }
-/**
- * The same underlying mechanism as `filesystemIsolationCapability` --
- * bwrap building one namespace set covers both a restricted mount view and
- * a network namespace in the same exec -- so this delegates rather than
- * duplicating the check. Kept as its own named function because the two
- * policies are declared, refused, and reasoned about independently
- * (`NetworkPolicy` only supports one shape; see `unsupportedNetworkPolicyReason`),
- * even though today they share one mechanism underneath.
- */
+/** Same underlying mechanism as `filesystemIsolationCapability` (one bwrap namespace set covers both) -- delegates rather than duplicating. Kept as its own function because the two policies are declared and reasoned about independently. */
 export function networkIsolationCapability(env = process.env, platform = process.platform) {
     return filesystemIsolationCapability(env, platform);
 }
 /**
- * `NetworkPolicy`'s general shape (arbitrary allow/deny host lists) is not
- * what this iteration's mechanism enforces -- only full denial. Returns the
- * reason a given policy cannot be applied, or `null` if it is the one
- * shape that can. Checked independently of `networkIsolationCapability`:
- * a policy can be shape-unsupported on a platform where the mechanism
- * itself is otherwise available, and the two refusals are different
- * claims ("nothing here can enforce any network policy" vs. "this specific
- * policy asks for something the real mechanism doesn't do yet").
+ * `NetworkPolicy`'s general shape (arbitrary allow/deny host lists) is not what
+ * this mechanism enforces -- only full denial. Returns the reason a policy can't be
+ * applied, or `null` if it's the one shape that can. Checked independently of
+ * `networkIsolationCapability`: "nothing here can enforce any policy" and "this
+ * specific policy asks for something not built yet" are different claims.
  */
 export function unsupportedNetworkPolicyReason(policy) {
     if (policy.mode === "allow" && policy.hosts.length === 0)
@@ -153,17 +121,12 @@ function isWithin(root, target) {
 }
 /**
  * Resolves the real, symlink-followed directory containing the executable
- * `command` would run as -- the one piece of host filesystem a sandboxed
- * process needs beyond the standard OS directories and whatever the caller
- * declared, and the one this function computes generically rather than by
- * naming a language: an interpreter installed outside `/usr` (nvm, rbenv,
- * pyenv, sdkman -- all common, all under a user's home directory) would
- * otherwise be invisible inside the sandbox no matter which language it
- * is, which is exactly the kind of per-language special case §IR-boundary
- * rules out. Returns `null` when `command` cannot be resolved (already
- * absolute-looking and missing, or not found on `PATH`) -- the caller
- * proceeds without an extra bind in that case; the exec itself will fail
- * inside the sandbox the same honest way it would outside one.
+ * `command` would run as -- the one extra host path a sandboxed process needs
+ * beyond standard OS dirs and whatever the caller declared. Computed generically,
+ * not per-language: an interpreter installed outside `/usr` (nvm, rbenv, pyenv,
+ * sdkman) would otherwise be invisible inside the sandbox regardless of language.
+ * Returns `null` when unresolvable -- the caller proceeds without an extra bind;
+ * the exec fails inside the sandbox the same honest way it would outside one.
  */
 export function resolveExecutableDirectory(command, cwd, env) {
     let candidate = null;
@@ -196,23 +159,18 @@ export function resolveExecutableDirectory(command, cwd, env) {
     }
 }
 /**
- * Wraps `command`/`args` with `bwrap` so the OS enforces `filesystemPolicy`
- * and/or `networkPolicy`. Neither declared returns `command`/`args`
- * unchanged -- every execution before this lane keeps behaving exactly as
- * before unless it opts in, the same non-regression contract
- * `applyResourceLimits` already established for resource limits.
+ * Wraps `command`/`args` with `bwrap` so the OS enforces `filesystemPolicy`/
+ * `networkPolicy`. Neither declared returns them unchanged -- same non-regression
+ * contract as `applyResourceLimits`.
  *
- * **Throws rather than silently spawning unconstrained** -- same
- * `tokenizeCommand`/`applyResourceLimits` precedent -- when a policy is
- * requested and the real mechanism cannot back it, whether because the
- * platform has no mechanism at all or because the declared shape is one
- * this mechanism doesn't implement (`unsupportedNetworkPolicyReason`).
+ * **Throws rather than silently spawning unconstrained** when a policy is
+ * requested and the real mechanism can't back it -- no mechanism on this platform,
+ * or a declared shape this mechanism doesn't implement.
  *
- * Composes with `applyResourceLimits`: this function wraps *outside* it
- * (`bwrap … -- prlimit … -- realCommand`), because the mount namespace must
- * exist before `prlimit` or the real command run inside it, and `prlimit`
- * itself (in `/usr/bin`) is reachable through the same base OS binding
- * every sandboxed process gets.
+ * Composes with `applyResourceLimits` by wrapping *outside* it (`bwrap … --
+ * prlimit … -- realCommand`) -- the mount namespace must exist before `prlimit` or
+ * the real command run inside it; `prlimit` (in `/usr/bin`) is reachable through
+ * the same base OS binding every sandboxed process gets.
  */
 export function applySandbox(options) {
     const { filesystemPolicy, networkPolicy } = options;
@@ -250,21 +208,20 @@ export function applySandbox(options) {
         }
     }
     else {
-        // No filesystem restriction declared -- mirror the host root exactly,
-        // matching FilesystemPolicy's own "absent means unconstrained" default.
-        // A mount namespace is still created here (bwrap always builds one, and
-        // --unshare-net below needs it), so /proc, /dev and /tmp are remounted
-        // explicitly rather than inherited: a plain `--bind / /` is not
-        // recursive and would otherwise leave them looking empty inside.
+        // No filesystem restriction declared -- mirror the host root exactly (matches
+        // FilesystemPolicy's "absent means unconstrained" default). A mount namespace
+        // is still created (bwrap always builds one; --unshare-net below needs it), so
+        // /proc, /dev, /tmp are remounted explicitly -- a plain `--bind / /` is not
+        // recursive and would leave them looking empty inside otherwise.
         bwrapArgs.push("--bind", "/", "/", "--dev", "/dev", "--proc", "/proc", "--bind", "/tmp", "/tmp");
     }
     bwrapArgs.push("--chdir", options.cwd);
     if (networkPolicy !== undefined) {
         bwrapArgs.push("--unshare-net");
     }
-    // Kills the sandboxed tree with the sandbox itself if bwrap's own parent
-    // (this Node process) dies unexpectedly -- a second, independent backstop
-    // alongside process-manager.ts's own group-kill, not a replacement for it.
+    // Kills the sandboxed tree if bwrap's parent (this Node process) dies
+    // unexpectedly -- a second, independent backstop alongside process-manager.ts's
+    // group-kill, not a replacement for it.
     bwrapArgs.push("--die-with-parent", "--", options.command, ...options.args);
     return { command: "bwrap", args: bwrapArgs };
 }

package/dist/sandbox.js.map

@@ -1 +1 @@
-{"version":3,"file":"sandbox.js","sourceRoot":"","sources":["../src/sandbox.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAyDG;AAEH,OAAO,EAAE,YAAY,EAAE,MAAM,oBAAoB,CAAC;AAClD,OAAO,EAAE,UAAU,EAAE,SAAS,IAAI,WAAW,EAAE,YAAY,EAAE,YAAY,EAAE,MAAM,SAAS,CAAC;AAC3F,OAAO,EAAE,OAAO,EAAE,UAAU,EAAE,IAAI,EAAE,QAAQ,EAAE,MAAM,WAAW,CAAC;AAGhE;;;;;;;GAOG;AACH,SAAS,+BAA+B;IACtC,IAAI,CAAC;QACH,MAAM,KAAK,GAAG,YAAY,CAAC,4CAA4C,EAAE,MAAM,CAAC,CAAC,IAAI,EAAE,CAAC;QACxF,IAAI,KAAK,KAAK,GAAG,EAAE,CAAC;YAClB,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,8FAA8F,EAAE,CAAC;QAC/H,CAAC;IACH,CAAC;IAAC,MAAM,CAAC;QACP,wEAAwE;QACxE,yEAAyE;IAC3E,CAAC;IACD,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,YAAY,CAAC,oCAAoC,EAAE,MAAM,CAAC,CAAC,IAAI,EAAE,CAAC;QAC9E,IAAI,GAAG,KAAK,GAAG,EAAE,CAAC;YAChB,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,sFAAsF,EAAE,CAAC;QACvH,CAAC;IACH,CAAC;IAAC,MAAM,CAAC;QACP,kBAAkB;IACpB,CAAC;IACD,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC;AACpC,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,6BAA6B,CAAC,MAAyB,OAAO,CAAC,GAAG,EAAE,WAA4B,OAAO,CAAC,QAAQ;IAC9H,IAAI,QAAQ,KAAK,OAAO,EAAE,CAAC;QACzB,OAAO;YACL,YAAY,EAAE,aAAa;YAC3B,MAAM,EAAE,qDAAqD,QAAQ,+KAA+K,QAAQ,2CAA2C;SACxS,CAAC;IACJ,CAAC;IACD,IAAI,CAAC;QACH,YAAY,CAAC,OAAO,EAAE,CAAC,WAAW,CAAC,EAAE,EAAE,GAAG,EAAE,KAAK,EAAE,QAAQ,EAAE,CAAC,CAAC;IACjE,CAAC;IAAC,MAAM,CAAC;QACP,OAAO;YACL,YAAY,EAAE,aAAa;YAC3B,MAAM,EAAE,yFAAyF;SAClG,CAAC;IACJ,CAAC;IACD,MAAM,MAAM,GAAG,+BAA+B,EAAE,CAAC;IACjD,IAAI,CAAC,MAAM,CAAC,EAAE,EAAE,CAAC;QACf,OAAO,EAAE,YAAY,EAAE,aAAa,EAAE,MAAM,EAAE,6EAA6E,MAAM,CAAC,MAAM,EAAE,EAAE,CAAC;IAC/I,CAAC;IACD,OAAO,EAAE,YAAY,EAAE,WAAW,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC;AACrD,CAAC;AAED;;;;;;;;GAQG;AACH,MAAM,UAAU,0BAA0B,CAAC,MAAyB,OAAO,CAAC,GAAG,EAAE,WAA4B,OAAO,CAAC,QAAQ;IAC3H,OAAO,6BAA6B,CAAC,GAAG,EAAE,QAAQ,CAAC,CAAC;AACtD,CAAC;AAED;;;;;;;;;GASG;AACH,MAAM,UAAU,8BAA8B,CAAC,MAAqB;IAClE,IAAI,MAAM,CAAC,IAAI,KAAK,OAAO,IAAI,MAAM,CAAC,KAAK,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,IAAI,CAAC;IACtE,OAAO,CACL,6GAA6G;QAC7G,8GAA8G;QAC9G,4DAA4D,CAC7D,CAAC;AACJ,CAAC;AAED,SAAS,QAAQ,CAAC,IAAY,EAAE,MAAc;IAC5C,MAAM,GAAG,GAAG,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;IACnC,OAAO,GAAG,KAAK,EAAE,IAAI,CAAC,CAAC,GAAG,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC;AACnE,CAAC;AAED;;;;;;;;;;;;;GAaG;AACH,MAAM,UAAU,0BAA0B,CAAC,OAAe,EAAE,GAAW,EAAE,GAAsB;IAC7F,IAAI,SAAS,GAAkB,IAAI,CAAC;IACpC,IAAI,OAAO,CAAC,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC;QAC1B,SAAS,GAAG,UAAU,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,EAAE,OAAO,CAAC,CAAC;IACjE,CAAC;SAAM,CAAC;QACN,MAAM,OAAO,GAAG,GAAG,CAAC,IAAI,IAAI,EAAE,CAAC;QAC/B,KAAK,MAAM,GAAG,IAAI,OAAO,CAAC,KAAK,CAAC,GAAG,CAAC,EAAE,CAAC;YACrC,IAAI,GAAG,KAAK,EAAE;gBAAE,SAAS;YACzB,MAAM,IAAI,GAAG,IAAI,CAAC,GAAG,EAAE,OAAO,CAAC,CAAC;YAChC,IAAI,CAAC;gBACH,UAAU,CAAC,IAAI,EAAE,WAAW,CAAC,IAAI,CAAC,CAAC;gBACnC,SAAS,GAAG,IAAI,CAAC;gBACjB,MAAM;YACR,CAAC;YAAC,MAAM,CAAC;gBACP,SAAS;YACX,CAAC;QACH,CAAC;IACH,CAAC;IACD,IAAI,SAAS,KAAK,IAAI;QAAE,OAAO,IAAI,CAAC;IACpC,IAAI,CAAC;QACH,OAAO,OAAO,CAAC,YAAY,CAAC,SAAS,CAAC,CAAC,CAAC;IAC1C,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC;AAeD;;;;;;;;;;;;;;;;;;GAkBG;AACH,MAAM,UAAU,YAAY,CAAC,OAAuB;IAClD,MAAM,EAAE,gBAAgB,EAAE,aAAa,EAAE,GAAG,OAAO,CAAC;IACpD,IAAI,gBAAgB,KAAK,SAAS,IAAI,aAAa,KAAK,SAAS,EAAE,CAAC;QAClE,OAAO,EAAE,OAAO,EAAE,OAAO,CAAC,OAAO,EAAE,IAAI,EAAE,OAAO,CAAC,IAAI,EAAE,CAAC;IAC1D,CAAC;IAED,MAAM,GAAG,GAAG,OAAO,CAAC,GAAG,IAAI,OAAO,CAAC,GAAG,CAAC;IACvC,MAAM,QAAQ,GAAG,OAAO,CAAC,QAAQ,IAAI,OAAO,CAAC,QAAQ,CAAC;IAEtD,IAAI,aAAa,KAAK,SAAS,EAAE,CAAC;QAChC,MAAM,WAAW,GAAG,8BAA8B,CAAC,aAAa,CAAC,CAAC;QAClE,IAAI,WAAW,KAAK,IAAI,EAAE,CAAC;YACzB,MAAM,IAAI,KAAK,CAAC,wDAAwD,WAAW,EAAE,CAAC,CAAC;QACzF,CAAC;QACD,MAAM,UAAU,GAAG,0BAA0B,CAAC,GAAG,EAAE,QAAQ,CAAC,CAAC;QAC7D,IAAI,UAAU,CAAC,YAAY,KAAK,WAAW,EAAE,CAAC;YAC5C,MAAM,IAAI,KAAK,CAAC,yEAAyE,UAAU,CAAC,MAAM,EAAE,CAAC,CAAC;QAChH,CAAC;IACH,CAAC;IAED,IAAI,gBAAgB,KAAK,SAAS,EAAE,CAAC;QACnC,MAAM,UAAU,GAAG,6BAA6B,CAAC,GAAG,EAAE,QAAQ,CAAC,CAAC;QAChE,IAAI,UAAU,CAAC,YAAY,KAAK,WAAW,EAAE,CAAC;YAC5C,MAAM,IAAI,KAAK,CAAC,4EAA4E,UAAU,CAAC,MAAM,EAAE,CAAC,CAAC;QACnH,CAAC;IACH,CAAC;IAED,MAAM,SAAS,GAAa,EAAE,CAAC;IAE/B,IAAI,gBAAgB,KAAK,SAAS,EAAE,CAAC;QACnC,SAAS,CAAC,IAAI,CACZ,WAAW,EACX,MAAM,EACN,MAAM,EACN,WAAW,EACX,UAAU,EACV,MAAM,EACN,WAAW,EACX,UAAU,EACV,MAAM,EACN,WAAW,EACX,YAAY,EACZ,QAAQ,EACR,QAAQ,EACR,OAAO,EACP,OAAO,EACP,MAAM,EACN,SAAS,EACT,MAAM,EACN,QAAQ,EACR,OAAO,CAAC,GAAG,EACX,OAAO,CAAC,GAAG,CACZ,CAAC;QACF,MAAM,UAAU,GAAG,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,EAAE,GAAG,gBAAgB,CAAC,YAAY,CAAC,CAAC;QAC3E,KAAK,MAAM,IAAI,IAAI,gBAAgB,CAAC,YAAY,EAAE,CAAC;YACjD,SAAS,CAAC,IAAI,CAAC,QAAQ,EAAE,IAAI,EAAE,IAAI,CAAC,CAAC;QACvC,CAAC;QACD,MAAM,cAAc,GAAG,0BAA0B,CAAC,OAAO,CAAC,kBAAkB,EAAE,OAAO,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC;QAChG,IAAI,cAAc,KAAK,IAAI,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,QAAQ,CAAC,IAAI,EAAE,cAAc,CAAC,CAAC,EAAE,CAAC;YAC1F,SAAS,CAAC,IAAI,CAAC,WAAW,EAAE,cAAc,EAAE,cAAc,CAAC,CAAC;QAC9D,CAAC;IACH,CAAC;SAAM,CAAC;QACN,sEAAsE;QACtE,wEAAwE;QACxE,wEAAwE;QACxE,uEAAuE;QACvE,gEAAgE;QAChE,iEAAiE;QACjE,SAAS,CAAC,IAAI,CAAC,QAAQ,EAAE,GAAG,EAAE,GAAG,EAAE,OAAO,EAAE,MAAM,EAAE,QAAQ,EAAE,OAAO,EAAE,QAAQ,EAAE,MAAM,EAAE,MAAM,CAAC,CAAC;IACnG,CAAC;IAED,SAAS,CAAC,IAAI,CAAC,SAAS,EAAE,OAAO,CAAC,GAAG,CAAC,CAAC;IAEvC,IAAI,aAAa,KAAK,SAAS,EAAE,CAAC;QAChC,SAAS,CAAC,IAAI,CAAC,eAAe,CAAC,CAAC;IAClC,CAAC;IAED,yEAAyE;IACzE,0EAA0E;IAC1E,2EAA2E;IAC3E,SAAS,CAAC,IAAI,CAAC,mBAAmB,EAAE,IAAI,EAAE,OAAO,CAAC,OAAO,EAAE,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAE5E,OAAO,EAAE,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,CAAC;AAC/C,CAAC"}
+{"version":3,"file":"sandbox.js","sourceRoot":"","sources":["../src/sandbox.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAuCG;AAEH,OAAO,EAAE,YAAY,EAAE,MAAM,oBAAoB,CAAC;AAClD,OAAO,EAAE,UAAU,EAAE,SAAS,IAAI,WAAW,EAAE,YAAY,EAAE,YAAY,EAAE,MAAM,SAAS,CAAC;AAC3F,OAAO,EAAE,OAAO,EAAE,UAAU,EAAE,IAAI,EAAE,QAAQ,EAAE,MAAM,WAAW,CAAC;AAGhE;;;;;;;;;;;GAWG;AACH,SAAS,+BAA+B;IACtC,IAAI,CAAC;QACH,MAAM,KAAK,GAAG,YAAY,CAAC,4CAA4C,EAAE,MAAM,CAAC,CAAC,IAAI,EAAE,CAAC;QACxF,IAAI,KAAK,KAAK,GAAG,EAAE,CAAC;YAClB,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,8FAA8F,EAAE,CAAC;QAC/H,CAAC;IACH,CAAC;IAAC,MAAM,CAAC;QACP,yEAAyE;IAC3E,CAAC;IACD,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,YAAY,CAAC,oCAAoC,EAAE,MAAM,CAAC,CAAC,IAAI,EAAE,CAAC;QAC9E,IAAI,GAAG,KAAK,GAAG,EAAE,CAAC;YAChB,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,sFAAsF,EAAE,CAAC;QACvH,CAAC;IACH,CAAC;IAAC,MAAM,CAAC;QACP,2DAA2D;IAC7D,CAAC;IACD,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC;AACpC,CAAC;AAED,0OAA0O;AAC1O,MAAM,UAAU,6BAA6B,CAAC,MAAyB,OAAO,CAAC,GAAG,EAAE,WAA4B,OAAO,CAAC,QAAQ;IAC9H,IAAI,QAAQ,KAAK,OAAO,EAAE,CAAC;QACzB,OAAO;YACL,YAAY,EAAE,aAAa;YAC3B,MAAM,EAAE,qDAAqD,QAAQ,+KAA+K,QAAQ,2CAA2C;SACxS,CAAC;IACJ,CAAC;IACD,IAAI,CAAC;QACH,YAAY,CAAC,OAAO,EAAE,CAAC,WAAW,CAAC,EAAE,EAAE,GAAG,EAAE,KAAK,EAAE,QAAQ,EAAE,CAAC,CAAC;IACjE,CAAC;IAAC,MAAM,CAAC;QACP,OAAO;YACL,YAAY,EAAE,aAAa;YAC3B,MAAM,EAAE,yFAAyF;SAClG,CAAC;IACJ,CAAC;IACD,MAAM,MAAM,GAAG,+BAA+B,EAAE,CAAC;IACjD,IAAI,CAAC,MAAM,CAAC,EAAE,EAAE,CAAC;QACf,OAAO,EAAE,YAAY,EAAE,aAAa,EAAE,MAAM,EAAE,6EAA6E,MAAM,CAAC,MAAM,EAAE,EAAE,CAAC;IAC/I,CAAC;IACD,OAAO,EAAE,YAAY,EAAE,WAAW,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC;AACrD,CAAC;AAED,gPAAgP;AAChP,MAAM,UAAU,0BAA0B,CAAC,MAAyB,OAAO,CAAC,GAAG,EAAE,WAA4B,OAAO,CAAC,QAAQ;IAC3H,OAAO,6BAA6B,CAAC,GAAG,EAAE,QAAQ,CAAC,CAAC;AACtD,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,8BAA8B,CAAC,MAAqB;IAClE,IAAI,MAAM,CAAC,IAAI,KAAK,OAAO,IAAI,MAAM,CAAC,KAAK,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,IAAI,CAAC;IACtE,OAAO,CACL,6GAA6G;QAC7G,8GAA8G;QAC9G,4DAA4D,CAC7D,CAAC;AACJ,CAAC;AAED,SAAS,QAAQ,CAAC,IAAY,EAAE,MAAc;IAC5C,MAAM,GAAG,GAAG,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;IACnC,OAAO,GAAG,KAAK,EAAE,IAAI,CAAC,CAAC,GAAG,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC;AACnE,CAAC;AAED;;;;;;;;GAQG;AACH,MAAM,UAAU,0BAA0B,CAAC,OAAe,EAAE,GAAW,EAAE,GAAsB;IAC7F,IAAI,SAAS,GAAkB,IAAI,CAAC;IACpC,IAAI,OAAO,CAAC,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC;QAC1B,SAAS,GAAG,UAAU,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,EAAE,OAAO,CAAC,CAAC;IACjE,CAAC;SAAM,CAAC;QACN,MAAM,OAAO,GAAG,GAAG,CAAC,IAAI,IAAI,EAAE,CAAC;QAC/B,KAAK,MAAM,GAAG,IAAI,OAAO,CAAC,KAAK,CAAC,GAAG,CAAC,EAAE,CAAC;YACrC,IAAI,GAAG,KAAK,EAAE;gBAAE,SAAS;YACzB,MAAM,IAAI,GAAG,IAAI,CAAC,GAAG,EAAE,OAAO,CAAC,CAAC;YAChC,IAAI,CAAC;gBACH,UAAU,CAAC,IAAI,EAAE,WAAW,CAAC,IAAI,CAAC,CAAC;gBACnC,SAAS,GAAG,IAAI,CAAC;gBACjB,MAAM;YACR,CAAC;YAAC,MAAM,CAAC;gBACP,SAAS;YACX,CAAC;QACH,CAAC;IACH,CAAC;IACD,IAAI,SAAS,KAAK,IAAI;QAAE,OAAO,IAAI,CAAC;IACpC,IAAI,CAAC;QACH,OAAO,OAAO,CAAC,YAAY,CAAC,SAAS,CAAC,CAAC,CAAC;IAC1C,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC;AAeD;;;;;;;;;;;;;GAaG;AACH,MAAM,UAAU,YAAY,CAAC,OAAuB;IAClD,MAAM,EAAE,gBAAgB,EAAE,aAAa,EAAE,GAAG,OAAO,CAAC;IACpD,IAAI,gBAAgB,KAAK,SAAS,IAAI,aAAa,KAAK,SAAS,EAAE,CAAC;QAClE,OAAO,EAAE,OAAO,EAAE,OAAO,CAAC,OAAO,EAAE,IAAI,EAAE,OAAO,CAAC,IAAI,EAAE,CAAC;IAC1D,CAAC;IAED,MAAM,GAAG,GAAG,OAAO,CAAC,GAAG,IAAI,OAAO,CAAC,GAAG,CAAC;IACvC,MAAM,QAAQ,GAAG,OAAO,CAAC,QAAQ,IAAI,OAAO,CAAC,QAAQ,CAAC;IAEtD,IAAI,aAAa,KAAK,SAAS,EAAE,CAAC;QAChC,MAAM,WAAW,GAAG,8BAA8B,CAAC,aAAa,CAAC,CAAC;QAClE,IAAI,WAAW,KAAK,IAAI,EAAE,CAAC;YACzB,MAAM,IAAI,KAAK,CAAC,wDAAwD,WAAW,EAAE,CAAC,CAAC;QACzF,CAAC;QACD,MAAM,UAAU,GAAG,0BAA0B,CAAC,GAAG,EAAE,QAAQ,CAAC,CAAC;QAC7D,IAAI,UAAU,CAAC,YAAY,KAAK,WAAW,EAAE,CAAC;YAC5C,MAAM,IAAI,KAAK,CAAC,yEAAyE,UAAU,CAAC,MAAM,EAAE,CAAC,CAAC;QAChH,CAAC;IACH,CAAC;IAED,IAAI,gBAAgB,KAAK,SAAS,EAAE,CAAC;QACnC,MAAM,UAAU,GAAG,6BAA6B,CAAC,GAAG,EAAE,QAAQ,CAAC,CAAC;QAChE,IAAI,UAAU,CAAC,YAAY,KAAK,WAAW,EAAE,CAAC;YAC5C,MAAM,IAAI,KAAK,CAAC,4EAA4E,UAAU,CAAC,MAAM,EAAE,CAAC,CAAC;QACnH,CAAC;IACH,CAAC;IAED,MAAM,SAAS,GAAa,EAAE,CAAC;IAE/B,IAAI,gBAAgB,KAAK,SAAS,EAAE,CAAC;QACnC,SAAS,CAAC,IAAI,CACZ,WAAW,EACX,MAAM,EACN,MAAM,EACN,WAAW,EACX,UAAU,EACV,MAAM,EACN,WAAW,EACX,UAAU,EACV,MAAM,EACN,WAAW,EACX,YAAY,EACZ,QAAQ,EACR,QAAQ,EACR,OAAO,EACP,OAAO,EACP,MAAM,EACN,SAAS,EACT,MAAM,EACN,QAAQ,EACR,OAAO,CAAC,GAAG,EACX,OAAO,CAAC,GAAG,CACZ,CAAC;QACF,MAAM,UAAU,GAAG,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,EAAE,GAAG,gBAAgB,CAAC,YAAY,CAAC,CAAC;QAC3E,KAAK,MAAM,IAAI,IAAI,gBAAgB,CAAC,YAAY,EAAE,CAAC;YACjD,SAAS,CAAC,IAAI,CAAC,QAAQ,EAAE,IAAI,EAAE,IAAI,CAAC,CAAC;QACvC,CAAC;QACD,MAAM,cAAc,GAAG,0BAA0B,CAAC,OAAO,CAAC,kBAAkB,EAAE,OAAO,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC;QAChG,IAAI,cAAc,KAAK,IAAI,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,QAAQ,CAAC,IAAI,EAAE,cAAc,CAAC,CAAC,EAAE,CAAC;YAC1F,SAAS,CAAC,IAAI,CAAC,WAAW,EAAE,cAAc,EAAE,cAAc,CAAC,CAAC;QAC9D,CAAC;IACH,CAAC;SAAM,CAAC;QACN,8EAA8E;QAC9E,8EAA8E;QAC9E,+EAA+E;QAC/E,4EAA4E;QAC5E,iEAAiE;QACjE,SAAS,CAAC,IAAI,CAAC,QAAQ,EAAE,GAAG,EAAE,GAAG,EAAE,OAAO,EAAE,MAAM,EAAE,QAAQ,EAAE,OAAO,EAAE,QAAQ,EAAE,MAAM,EAAE,MAAM,CAAC,CAAC;IACnG,CAAC;IAED,SAAS,CAAC,IAAI,CAAC,SAAS,EAAE,OAAO,CAAC,GAAG,CAAC,CAAC;IAEvC,IAAI,aAAa,KAAK,SAAS,EAAE,CAAC;QAChC,SAAS,CAAC,IAAI,CAAC,eAAe,CAAC,CAAC;IAClC,CAAC;IAED,sEAAsE;IACtE,gFAAgF;IAChF,wCAAwC;IACxC,SAAS,CAAC,IAAI,CAAC,mBAAmB,EAAE,IAAI,EAAE,OAAO,CAAC,OAAO,EAAE,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAE5E,OAAO,EAAE,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,CAAC;AAC/C,CAAC"}

package/package.json

@@ -1,9 +1,14 @@
 {
   "name": "@descryy/runtime-controller",
-  "version": "0.2.1",
+  "version": "0.3.1",
   "type": "module",
-  "description": "Runtime controller: process manager, readiness, timeout/cancellation, execution IDs, cleanup. Deliverable 2 of the runtime phase \u2014 depends on @descryy/runtime-contracts, builds no collectors.",
+  "description": "Runtime controller: process manager, readiness, timeout/cancellation, execution IDs, cleanup. Deliverable 2 of the runtime phase — depends on @descryy/runtime-contracts, builds no collectors.",
   "license": "UNLICENSED",
+  "repository": {
+    "type": "git",
+    "url": "git+https://github.com/descryhq-wq/descry-runtime.git",
+    "directory": "packages/controller"
+  },
   "engines": {
     "node": ">=22.5"
   },
@@ -24,6 +29,6 @@
     "build": "tsc -b"
   },
   "dependencies": {
-    "@descryy/runtime-contracts": "0.2.0"
+    "@descryy/runtime-contracts": "0.3.1"
   }
 }