@dexto/core 1.1.10 → 1.2.0

package/dist/process/process-service.cjs

@@ -0,0 +1,443 @@
+"use strict";
+var __create = Object.create;
+var __defProp = Object.defineProperty;
+var __getOwnPropDesc = Object.getOwnPropertyDescriptor;
+var __getOwnPropNames = Object.getOwnPropertyNames;
+var __getProtoOf = Object.getPrototypeOf;
+var __hasOwnProp = Object.prototype.hasOwnProperty;
+var __export = (target, all) => {
+  for (var name in all)
+    __defProp(target, name, { get: all[name], enumerable: true });
+};
+var __copyProps = (to, from, except, desc) => {
+  if (from && typeof from === "object" || typeof from === "function") {
+    for (let key of __getOwnPropNames(from))
+      if (!__hasOwnProp.call(to, key) && key !== except)
+        __defProp(to, key, { get: () => from[key], enumerable: !(desc = __getOwnPropDesc(from, key)) || desc.enumerable });
+  }
+  return to;
+};
+var __toESM = (mod, isNodeMode, target) => (target = mod != null ? __create(__getProtoOf(mod)) : {}, __copyProps(
+  // If the importer is in node compatibility mode or this is not an ESM
+  // file that has been converted to a CommonJS file using a Babel-
+  // compatible transform (i.e. "__esModule" has not been set), then set
+  // "default" to the CommonJS "module.exports" for node compatibility.
+  isNodeMode || !mod || !mod.__esModule ? __defProp(target, "default", { value: mod, enumerable: true }) : target,
+  mod
+));
+var __toCommonJS = (mod) => __copyProps(__defProp({}, "__esModule", { value: true }), mod);
+var process_service_exports = {};
+__export(process_service_exports, {
+  ProcessService: () => ProcessService
+});
+module.exports = __toCommonJS(process_service_exports);
+var import_node_child_process = require("node:child_process");
+var crypto = __toESM(require("node:crypto"), 1);
+var path = __toESM(require("node:path"), 1);
+var import_command_validator = require("./command-validator.js");
+var import_errors = require("./errors.js");
+var import_logger = require("../logger/index.js");
+const DEFAULT_TIMEOUT = 12e4;
+const DEFAULT_MAX_TIMEOUT = 6e5;
+const DEFAULT_MAX_CONCURRENT_PROCESSES = 5;
+const DEFAULT_MAX_OUTPUT_BUFFER = 1024 * 1024;
+class ProcessService {
+  config;
+  commandValidator;
+  initialized = false;
+  backgroundProcesses = /* @__PURE__ */ new Map();
+  constructor(config = {}) {
+    this.config = {
+      securityLevel: config.securityLevel || "moderate",
+      maxTimeout: config.maxTimeout || DEFAULT_MAX_TIMEOUT,
+      maxConcurrentProcesses: config.maxConcurrentProcesses || DEFAULT_MAX_CONCURRENT_PROCESSES,
+      maxOutputBuffer: config.maxOutputBuffer || DEFAULT_MAX_OUTPUT_BUFFER,
+      allowedCommands: config.allowedCommands || [],
+      blockedCommands: config.blockedCommands || [],
+      environment: config.environment || {},
+      workingDirectory: config.workingDirectory
+    };
+    this.commandValidator = new import_command_validator.CommandValidator(this.config);
+  }
+  /**
+   * Initialize the service
+   */
+  async initialize() {
+    if (this.initialized) {
+      import_logger.logger.debug("ProcessService already initialized");
+      return;
+    }
+    this.backgroundProcesses.clear();
+    this.initialized = true;
+    import_logger.logger.info("ProcessService initialized successfully");
+  }
+  /**
+   * Execute a command
+   */
+  async executeCommand(command, options = {}) {
+    if (!this.initialized) {
+      throw import_errors.ProcessError.notInitialized();
+    }
+    const validation = this.commandValidator.validateCommand(command);
+    if (!validation.isValid || !validation.normalizedCommand) {
+      throw import_errors.ProcessError.invalidCommand(command, validation.error || "Unknown error");
+    }
+    const normalizedCommand = validation.normalizedCommand;
+    if (validation.requiresApproval) {
+      if (!options.approvalFunction) {
+        throw import_errors.ProcessError.approvalRequired(
+          normalizedCommand,
+          "Command requires approval but no approval mechanism provided"
+        );
+      }
+      import_logger.logger.info(
+        `Command requires approval: ${normalizedCommand} - requesting user confirmation`
+      );
+      const approved = await options.approvalFunction(normalizedCommand);
+      if (!approved) {
+        import_logger.logger.info(`Command approval denied: ${normalizedCommand}`);
+        throw import_errors.ProcessError.approvalDenied(normalizedCommand);
+      }
+      import_logger.logger.info(`Command approved: ${normalizedCommand}`);
+    }
+    const rawTimeout = options.timeout !== void 0 && Number.isFinite(options.timeout) ? options.timeout : DEFAULT_TIMEOUT;
+    const timeout = Math.max(1, Math.min(rawTimeout, this.config.maxTimeout));
+    const cwd = this.resolveSafeCwd(options.cwd);
+    const env = {};
+    for (const [key, value] of Object.entries({
+      ...process.env,
+      ...this.config.environment,
+      ...options.env
+    })) {
+      if (value !== void 0) {
+        env[key] = value;
+      }
+    }
+    if (options.runInBackground) {
+      return await this.executeInBackground(normalizedCommand, options);
+    }
+    return await this.executeForeground(normalizedCommand, {
+      cwd,
+      timeout,
+      env,
+      ...options.description !== void 0 && { description: options.description }
+    });
+  }
+  /**
+   * Execute command in foreground with timeout
+   */
+  executeForeground(command, options) {
+    return new Promise((resolve, reject) => {
+      const startTime = Date.now();
+      let stdout = "";
+      let stderr = "";
+      let killed = false;
+      let closed = false;
+      import_logger.logger.debug(`Executing command: ${command}`);
+      const child = (0, import_node_child_process.spawn)(command, {
+        cwd: options.cwd,
+        env: options.env,
+        shell: true
+      });
+      const timeoutHandle = setTimeout(() => {
+        killed = true;
+        child.kill("SIGTERM");
+        setTimeout(() => {
+          if (!closed && child.exitCode === null) {
+            child.kill("SIGKILL");
+          }
+        }, 5e3);
+      }, options.timeout);
+      child.stdout?.on("data", (data) => {
+        stdout += data.toString();
+      });
+      child.stderr?.on("data", (data) => {
+        stderr += data.toString();
+      });
+      child.on("close", (code, signal) => {
+        closed = true;
+        clearTimeout(timeoutHandle);
+        const duration = Date.now() - startTime;
+        if (killed) {
+          reject(import_errors.ProcessError.timeout(command, options.timeout));
+          return;
+        }
+        let exitCode = typeof code === "number" ? code : 1;
+        if (code === null) {
+          stderr += `
+Process terminated by signal ${signal ?? "UNKNOWN"}`;
+        }
+        import_logger.logger.debug(
+          `Command completed with exit code ${exitCode} in ${duration}ms: ${command}`
+        );
+        resolve({
+          stdout,
+          stderr,
+          exitCode,
+          duration
+        });
+      });
+      child.on("error", (error) => {
+        clearTimeout(timeoutHandle);
+        if (error.code === "ENOENT") {
+          reject(import_errors.ProcessError.commandNotFound(command));
+        } else if (error.code === "EACCES") {
+          reject(import_errors.ProcessError.permissionDenied(command));
+        } else {
+          reject(import_errors.ProcessError.executionFailed(command, error.message));
+        }
+      });
+    });
+  }
+  /**
+   * Execute command in background
+   */
+  async executeInBackground(command, options) {
+    const runningCount = Array.from(this.backgroundProcesses.values()).filter(
+      (p) => p.status === "running"
+    ).length;
+    if (runningCount >= this.config.maxConcurrentProcesses) {
+      throw import_errors.ProcessError.tooManyProcesses(runningCount, this.config.maxConcurrentProcesses);
+    }
+    const processId = crypto.randomBytes(4).toString("hex");
+    const cwd = this.resolveSafeCwd(options.cwd);
+    const env = {};
+    for (const [key, value] of Object.entries({
+      ...process.env,
+      ...this.config.environment,
+      ...options.env
+    })) {
+      if (value !== void 0) {
+        env[key] = value;
+      }
+    }
+    import_logger.logger.debug(`Starting background process ${processId}: ${command}`);
+    const child = (0, import_node_child_process.spawn)(command, {
+      cwd,
+      env,
+      shell: true,
+      detached: false
+    });
+    const outputBuffer = {
+      stdout: [],
+      stderr: [],
+      complete: false,
+      lastRead: Date.now(),
+      bytesUsed: 0,
+      truncated: false
+    };
+    const bgProcess = {
+      processId,
+      command,
+      child,
+      startedAt: /* @__PURE__ */ new Date(),
+      status: "running",
+      outputBuffer,
+      description: options.description
+    };
+    this.backgroundProcesses.set(processId, bgProcess);
+    const bgTimeout = Math.max(
+      1,
+      Math.min(options.timeout || DEFAULT_TIMEOUT, this.config.maxTimeout)
+    );
+    const killTimer = setTimeout(() => {
+      if (bgProcess.status === "running") {
+        import_logger.logger.warn(
+          `Background process ${processId} timed out after ${bgTimeout}ms, sending SIGTERM`
+        );
+        child.kill("SIGTERM");
+        setTimeout(() => {
+          if (bgProcess.status === "running") {
+            import_logger.logger.warn(
+              `Background process ${processId} did not respond to SIGTERM, sending SIGKILL`
+            );
+            child.kill("SIGKILL");
+          }
+        }, 5e3);
+      }
+    }, bgTimeout);
+    child.stdout?.on("data", (data) => {
+      const chunk = data.toString();
+      const chunkBytes = Buffer.byteLength(chunk, "utf8");
+      if (outputBuffer.bytesUsed + chunkBytes <= this.config.maxOutputBuffer) {
+        outputBuffer.stdout.push(chunk);
+        outputBuffer.bytesUsed += chunkBytes;
+      } else {
+        if (!outputBuffer.truncated) {
+          outputBuffer.truncated = true;
+          import_logger.logger.warn(`Output buffer full for process ${processId}`);
+        }
+      }
+    });
+    child.stderr?.on("data", (data) => {
+      const chunk = data.toString();
+      const chunkBytes = Buffer.byteLength(chunk, "utf8");
+      if (outputBuffer.bytesUsed + chunkBytes <= this.config.maxOutputBuffer) {
+        outputBuffer.stderr.push(chunk);
+        outputBuffer.bytesUsed += chunkBytes;
+      } else {
+        if (!outputBuffer.truncated) {
+          outputBuffer.truncated = true;
+          import_logger.logger.warn(`Error buffer full for process ${processId}`);
+        }
+      }
+    });
+    child.on("close", (code) => {
+      clearTimeout(killTimer);
+      bgProcess.status = code === 0 ? "completed" : "failed";
+      bgProcess.exitCode = code ?? void 0;
+      bgProcess.completedAt = /* @__PURE__ */ new Date();
+      bgProcess.outputBuffer.complete = true;
+      import_logger.logger.debug(`Background process ${processId} completed with exit code ${code}`);
+    });
+    child.on("error", (error) => {
+      clearTimeout(killTimer);
+      bgProcess.status = "failed";
+      bgProcess.completedAt = /* @__PURE__ */ new Date();
+      bgProcess.outputBuffer.complete = true;
+      const chunk = `Error: ${error.message}`;
+      const chunkBytes = Buffer.byteLength(chunk, "utf8");
+      if (bgProcess.outputBuffer.bytesUsed + chunkBytes <= this.config.maxOutputBuffer) {
+        bgProcess.outputBuffer.stderr.push(chunk);
+        bgProcess.outputBuffer.bytesUsed += chunkBytes;
+      } else {
+        if (!bgProcess.outputBuffer.truncated) {
+          bgProcess.outputBuffer.truncated = true;
+          import_logger.logger.warn(`Error buffer full for process ${processId}`);
+        }
+      }
+      import_logger.logger.error(`Background process ${processId} failed: ${error.message}`);
+    });
+    return {
+      processId,
+      command,
+      pid: child.pid,
+      startedAt: bgProcess.startedAt,
+      description: options.description
+    };
+  }
+  /**
+   * Get output from a background process
+   */
+  async getProcessOutput(processId) {
+    if (!this.initialized) {
+      throw import_errors.ProcessError.notInitialized();
+    }
+    const bgProcess = this.backgroundProcesses.get(processId);
+    if (!bgProcess) {
+      throw import_errors.ProcessError.processNotFound(processId);
+    }
+    const stdout = bgProcess.outputBuffer.stdout.join("");
+    const stderr = bgProcess.outputBuffer.stderr.join("");
+    bgProcess.outputBuffer.stdout = [];
+    bgProcess.outputBuffer.stderr = [];
+    bgProcess.outputBuffer.lastRead = Date.now();
+    bgProcess.outputBuffer.bytesUsed = 0;
+    return {
+      stdout,
+      stderr,
+      status: bgProcess.status,
+      exitCode: bgProcess.exitCode,
+      duration: bgProcess.completedAt ? bgProcess.completedAt.getTime() - bgProcess.startedAt.getTime() : void 0
+    };
+  }
+  /**
+   * Kill a background process
+   */
+  async killProcess(processId) {
+    if (!this.initialized) {
+      throw import_errors.ProcessError.notInitialized();
+    }
+    const bgProcess = this.backgroundProcesses.get(processId);
+    if (!bgProcess) {
+      throw import_errors.ProcessError.processNotFound(processId);
+    }
+    if (bgProcess.status !== "running") {
+      import_logger.logger.debug(`Process ${processId} is not running (status: ${bgProcess.status})`);
+      return;
+    }
+    try {
+      bgProcess.child.kill("SIGTERM");
+      setTimeout(() => {
+        if (bgProcess.child.exitCode === null) {
+          bgProcess.child.kill("SIGKILL");
+        }
+      }, 5e3);
+      import_logger.logger.debug(`Process ${processId} sent SIGTERM`);
+    } catch (error) {
+      throw import_errors.ProcessError.killFailed(
+        processId,
+        error instanceof Error ? error.message : String(error)
+      );
+    }
+  }
+  /**
+   * List all background processes
+   */
+  async listProcesses() {
+    if (!this.initialized) {
+      throw import_errors.ProcessError.notInitialized();
+    }
+    return Array.from(this.backgroundProcesses.values()).map((bgProcess) => ({
+      processId: bgProcess.processId,
+      command: bgProcess.command,
+      pid: bgProcess.child.pid,
+      status: bgProcess.status,
+      startedAt: bgProcess.startedAt,
+      completedAt: bgProcess.completedAt,
+      exitCode: bgProcess.exitCode,
+      description: bgProcess.description
+    }));
+  }
+  /**
+   * Get buffer size in bytes
+   */
+  getBufferSize(buffer) {
+    const stdoutSize = buffer.stdout.reduce((sum, line) => sum + line.length, 0);
+    const stderrSize = buffer.stderr.reduce((sum, line) => sum + line.length, 0);
+    return stdoutSize + stderrSize;
+  }
+  /**
+   * Get service configuration
+   */
+  getConfig() {
+    return { ...this.config };
+  }
+  /**
+   * Resolve and confine cwd to the configured working directory
+   */
+  resolveSafeCwd(cwd) {
+    const baseDir = this.config.workingDirectory || process.cwd();
+    if (!cwd) return baseDir;
+    const candidate = path.isAbsolute(cwd) ? path.resolve(cwd) : path.resolve(baseDir, cwd);
+    const rel = path.relative(baseDir, candidate);
+    const outside = rel.startsWith("..") || path.isAbsolute(rel);
+    if (outside) {
+      throw import_errors.ProcessError.invalidWorkingDirectory(
+        cwd,
+        `Working directory must be within ${baseDir}`
+      );
+    }
+    return candidate;
+  }
+  /**
+   * Cleanup completed processes
+   */
+  async cleanup() {
+    const now = Date.now();
+    const CLEANUP_AGE = 36e5;
+    for (const [processId, bgProcess] of this.backgroundProcesses.entries()) {
+      if (bgProcess.status !== "running" && bgProcess.completedAt) {
+        const age = now - bgProcess.completedAt.getTime();
+        if (age > CLEANUP_AGE) {
+          this.backgroundProcesses.delete(processId);
+          import_logger.logger.debug(`Cleaned up old process ${processId}`);
+        }
+      }
+    }
+  }
+}
+// Annotate the CommonJS export names for ESM import in node:
+0 && (module.exports = {
+  ProcessService
+});

package/dist/process/process-service.d.ts

@@ -0,0 +1,62 @@
+/**
+ * Process Service
+ *
+ * Secure command execution and process management for Dexto internal tools
+ */
+import { ProcessConfig, ExecuteOptions, ProcessResult, ProcessHandle, ProcessOutput, ProcessInfo } from './types.js';
+/**
+ * ProcessService - Handles command execution and process management
+ * TODO: Add tests for this class
+ */
+export declare class ProcessService {
+    private config;
+    private commandValidator;
+    private initialized;
+    private backgroundProcesses;
+    constructor(config?: Partial<ProcessConfig>);
+    /**
+     * Initialize the service
+     */
+    initialize(): Promise<void>;
+    /**
+     * Execute a command
+     */
+    executeCommand(command: string, options?: ExecuteOptions): Promise<ProcessResult | ProcessHandle>;
+    /**
+     * Execute command in foreground with timeout
+     */
+    private executeForeground;
+    /**
+     * Execute command in background
+     */
+    private executeInBackground;
+    /**
+     * Get output from a background process
+     */
+    getProcessOutput(processId: string): Promise<ProcessOutput>;
+    /**
+     * Kill a background process
+     */
+    killProcess(processId: string): Promise<void>;
+    /**
+     * List all background processes
+     */
+    listProcesses(): Promise<ProcessInfo[]>;
+    /**
+     * Get buffer size in bytes
+     */
+    private getBufferSize;
+    /**
+     * Get service configuration
+     */
+    getConfig(): Readonly<ProcessConfig>;
+    /**
+     * Resolve and confine cwd to the configured working directory
+     */
+    private resolveSafeCwd;
+    /**
+     * Cleanup completed processes
+     */
+    cleanup(): Promise<void>;
+}
+//# sourceMappingURL=process-service.d.ts.map

package/dist/process/process-service.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"process-service.d.ts","sourceRoot":"","sources":["../../src/process/process-service.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAKH,OAAO,EACH,aAAa,EACb,cAAc,EACd,aAAa,EACb,aAAa,EACb,aAAa,EACb,WAAW,EAEd,MAAM,YAAY,CAAC;AAyBpB;;;GAGG;AACH,qBAAa,cAAc;IACvB,OAAO,CAAC,MAAM,CAAgB;IAC9B,OAAO,CAAC,gBAAgB,CAAmB;IAC3C,OAAO,CAAC,WAAW,CAAkB;IACrC,OAAO,CAAC,mBAAmB,CAA6C;gBAE5D,MAAM,GAAE,OAAO,CAAC,aAAa,CAAM;IAiB/C;;OAEG;IACG,UAAU,IAAI,OAAO,CAAC,IAAI,CAAC;IAajC;;OAEG;IACG,cAAc,CAChB,OAAO,EAAE,MAAM,EACf,OAAO,GAAE,cAAmB,GAC7B,OAAO,CAAC,aAAa,GAAG,aAAa,CAAC;IAwEzC;;OAEG;IACH,OAAO,CAAC,iBAAiB;IAsFzB;;OAEG;YACW,mBAAmB;IAiKjC;;OAEG;IACG,gBAAgB,CAAC,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC,aAAa,CAAC;IA+BjE;;OAEG;IACG,WAAW,CAAC,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAmCnD;;OAEG;IACG,aAAa,IAAI,OAAO,CAAC,WAAW,EAAE,CAAC;IAiB7C;;OAEG;IACH,OAAO,CAAC,aAAa;IAMrB;;OAEG;IACH,SAAS,IAAI,QAAQ,CAAC,aAAa,CAAC;IAIpC;;OAEG;IACH,OAAO,CAAC,cAAc;IAetB;;OAEG;IACG,OAAO,IAAI,OAAO,CAAC,IAAI,CAAC;CAcjC"}