@dsh-enhanced/assistant-verifier 0.1.48 → 0.1.53

package/lib/native-behavior-artifact.js

@@ -0,0 +1,144 @@
+import { gunzipSync } from 'node:zlib';
+const MAX_TAR_BYTES = 16 * 1024 * 1024;
+const MAX_FILES = 256;
+const MAX_PATH = 256;
+function fail() { throw new Error('invalid native behavior artifact'); }
+function field(bytes) {
+    const end = bytes.indexOf(0);
+    const value = end < 0 ? bytes : bytes.subarray(0, end);
+    const text = new TextDecoder('utf-8', { fatal: true }).decode(value);
+    if (!text.isWellFormed())
+        fail();
+    return text;
+}
+function octal(bytes) {
+    const text = field(bytes).trim();
+    if (!/^[0-7]+$/u.test(text))
+        fail();
+    const value = Number.parseInt(text, 8);
+    if (!Number.isSafeInteger(value))
+        fail();
+    return value;
+}
+function pax(bytes) {
+    const result = Object.create(null);
+    for (let at = 0; at < bytes.length;) {
+        const space = bytes.indexOf(32, at);
+        if (space < 0)
+            fail();
+        const length = Number(bytes.subarray(at, space).toString('ascii'));
+        if (!Number.isSafeInteger(length) || length <= space - at + 2 || at + length > bytes.length
+            || bytes[at + length - 1] !== 10)
+            fail();
+        const row = new TextDecoder('utf-8', { fatal: true }).decode(bytes.subarray(space + 1, at + length - 1));
+        const equals = row.indexOf('=');
+        if (equals < 1 || Object.hasOwn(result, row.slice(0, equals)))
+            fail();
+        result[row.slice(0, equals)] = row.slice(equals + 1);
+        at += length;
+    }
+    return result;
+}
+function safePath(name) {
+    return name.length <= MAX_PATH && name.startsWith('package/')
+        && name.slice(8).split('/').every(part => /^[A-Za-z0-9._-]+$/u.test(part) && part !== '.' && part !== '..');
+}
+/** Parse only regular UTF-8 npm package members. The runner stages these exact bytes; no archive links enter its workspace. */
+export function nativeBehaviorFiles(artifact) {
+    let tar;
+    try {
+        tar = gunzipSync(artifact, { maxOutputLength: MAX_TAR_BYTES });
+    }
+    catch {
+        fail();
+    }
+    let at = 0;
+    let local = {};
+    let global = {};
+    let members = 0;
+    const entries = new Map();
+    const seen = new Set();
+    while (at + 512 <= tar.length) {
+        const header = tar.subarray(at, at + 512);
+        if (header.every(byte => byte === 0))
+            break;
+        if (++members > MAX_FILES)
+            fail();
+        let checksum = 0;
+        for (let i = 0; i < 512; i++)
+            checksum += i >= 148 && i < 156 ? 32 : header[i];
+        if (checksum !== octal(header.subarray(148, 156)))
+            fail();
+        const size = octal(header.subarray(124, 136));
+        const end = at + 512 + size;
+        if (!Number.isSafeInteger(end) || end > tar.length)
+            fail();
+        const kind = String.fromCharCode(header[156] || 48);
+        if (kind === 'g' || kind === 'x') {
+            if (size > 1_048_576)
+                fail();
+            const values = pax(tar.subarray(at + 512, end));
+            if (kind === 'g')
+                global = { ...global, ...values };
+            else
+                local = values;
+        }
+        else {
+            const attrs = { ...global, ...local };
+            if (Object.keys(attrs).some(key => !['path', 'mtime', 'atime', 'ctime', 'comment', 'uid', 'gid', 'uname', 'gname', 'mode'].includes(key)))
+                fail();
+            const prefix = field(header.subarray(345, 500));
+            const headerName = field(header.subarray(0, 100));
+            const rawName = attrs.path ?? (prefix ? `${prefix}/${headerName}` : headerName);
+            const name = rawName.endsWith('/') ? rawName.slice(0, -1) : rawName;
+            if ((name !== 'package' && !safePath(name)) || seen.has(name))
+                fail();
+            seen.add(name);
+            if (kind === '0' || kind === '7') {
+                if (name === 'package')
+                    fail();
+                entries.set(name, tar.subarray(at + 512, end));
+            }
+            else if (kind !== '5')
+                fail();
+            local = {};
+        }
+        at = Math.ceil(end / 512) * 512;
+    }
+    if (at + 1024 > tar.length || !tar.subarray(at).every(byte => byte === 0))
+        fail();
+    const manifestBytes = entries.get('package/package.json');
+    if (!manifestBytes)
+        fail();
+    let manifest;
+    try {
+        manifest = JSON.parse(new TextDecoder('utf-8', { fatal: true }).decode(manifestBytes));
+    }
+    catch {
+        fail();
+    }
+    if (!manifest || typeof manifest !== 'object' || Array.isArray(manifest)
+        || typeof manifest.main !== 'string')
+        fail();
+    const main = manifest.main;
+    if (!/^\.\/lib\/[A-Za-z0-9._/-]+\.js$/u.test(main) || main.split('/').includes('..'))
+        fail();
+    const entry = `package/${main.slice(2)}`;
+    if (!entries.has(entry))
+        fail();
+    const files = [];
+    for (const [path, bytes] of entries) {
+        if (bytes.length > 1024 * 1024)
+            fail();
+        let content;
+        try {
+            content = new TextDecoder('utf-8', { fatal: true }).decode(bytes);
+        }
+        catch {
+            fail();
+        }
+        files.push({ path, content });
+    }
+    return { entry, files };
+}
+//# sourceMappingURL=native-behavior-artifact.js.map

package/lib/native-behavior-artifact.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"native-behavior-artifact.js","sourceRoot":"","sources":["../src/native-behavior-artifact.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,WAAW,CAAA;AAEtC,MAAM,aAAa,GAAG,EAAE,GAAG,IAAI,GAAG,IAAI,CAAA;AACtC,MAAM,SAAS,GAAG,GAAG,CAAA;AACrB,MAAM,QAAQ,GAAG,GAAG,CAAA;AAEpB,SAAS,IAAI,KAAY,MAAM,IAAI,KAAK,CAAC,kCAAkC,CAAC,CAAA,CAAC,CAAC;AAC9E,SAAS,KAAK,CAAC,KAAa;IAC1B,MAAM,GAAG,GAAG,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,CAAA;IAC5B,MAAM,KAAK,GAAG,GAAG,GAAG,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC,EAAE,GAAG,CAAC,CAAA;IACtD,MAAM,IAAI,GAAG,IAAI,WAAW,CAAC,OAAO,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAA;IACpE,IAAI,CAAC,IAAI,CAAC,YAAY,EAAE;QAAE,IAAI,EAAE,CAAA;IAChC,OAAO,IAAI,CAAA;AACb,CAAC;AACD,SAAS,KAAK,CAAC,KAAa;IAC1B,MAAM,IAAI,GAAG,KAAK,CAAC,KAAK,CAAC,CAAC,IAAI,EAAE,CAAA;IAChC,IAAI,CAAC,WAAW,CAAC,IAAI,CAAC,IAAI,CAAC;QAAE,IAAI,EAAE,CAAA;IACnC,MAAM,KAAK,GAAG,MAAM,CAAC,QAAQ,CAAC,IAAI,EAAE,CAAC,CAAC,CAAA;IACtC,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,KAAK,CAAC;QAAE,IAAI,EAAE,CAAA;IACxC,OAAO,KAAK,CAAA;AACd,CAAC;AACD,SAAS,GAAG,CAAC,KAAa;IACxB,MAAM,MAAM,GAA2B,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,CAAA;IAC1D,KAAK,IAAI,EAAE,GAAG,CAAC,EAAE,EAAE,GAAG,KAAK,CAAC,MAAM,GAAG,CAAC;QACpC,MAAM,KAAK,GAAG,KAAK,CAAC,OAAO,CAAC,EAAE,EAAE,EAAE,CAAC,CAAA;QACnC,IAAI,KAAK,GAAG,CAAC;YAAE,IAAI,EAAE,CAAA;QACrB,MAAM,MAAM,GAAG,MAAM,CAAC,KAAK,CAAC,QAAQ,CAAC,EAAE,EAAE,KAAK,CAAC,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC,CAAA;QAClE,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,MAAM,CAAC,IAAI,MAAM,IAAI,KAAK,GAAG,EAAE,GAAG,CAAC,IAAI,EAAE,GAAG,MAAM,GAAG,KAAK,CAAC,MAAM;eACtF,KAAK,CAAC,EAAE,GAAG,MAAM,GAAG,CAAC,CAAC,KAAK,EAAE;YAAE,IAAI,EAAE,CAAA;QAC1C,MAAM,GAAG,GAAG,IAAI,WAAW,CAAC,OAAO,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,QAAQ,CAAC,KAAK,GAAG,CAAC,EAAE,EAAE,GAAG,MAAM,GAAG,CAAC,CAAC,CAAC,CAAA;QACxG,MAAM,MAAM,GAAG,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,CAAA;QAC/B,IAAI,MAAM,GAAG,CAAC,IAAI,MAAM,CAAC,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,KAAK,CAAC,CAAC,EAAE,MAAM,CAAC,CAAC;YAAE,IAAI,EAAE,CAAA;QACrE,MAAM,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,EAAE,MAAM,CAAC,CAAC,GAAG,GAAG,CAAC,KAAK,CAAC,MAAM,GAAG,CAAC,CAAC,CAAA;QACpD,EAAE,IAAI,MAAM,CAAA;IACd,CAAC;IACD,OAAO,MAAM,CAAA;AACf,CAAC;AACD,SAAS,QAAQ,CAAC,IAAY;IAC5B,OAAO,IAAI,CAAC,MAAM,IAAI,QAAQ,IAAI,IAAI,CAAC,UAAU,CAAC,UAAU,CAAC;WACxD,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,oBAAoB,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,IAAI,KAAK,GAAG,IAAI,IAAI,KAAK,IAAI,CAAC,CAAA;AAC/G,CAAC;AAED,+HAA+H;AAC/H,MAAM,UAAU,mBAAmB,CAAC,QAAgB;IAClD,IAAI,GAAW,CAAA;IACf,IAAI,CAAC;QAAC,GAAG,GAAG,UAAU,CAAC,QAAQ,EAAE,EAAE,eAAe,EAAE,aAAa,EAAE,CAAC,CAAA;IAAC,CAAC;IACtE,MAAM,CAAC;QAAC,IAAI,EAAE,CAAA;IAAC,CAAC;IAChB,IAAI,EAAE,GAAG,CAAC,CAAC;IAAC,IAAI,KAAK,GAA2B,EAAE,CAAC;IAAC,IAAI,MAAM,GAA2B,EAAE,CAAA;IAC3F,IAAI,OAAO,GAAG,CAAC,CAAA;IACf,MAAM,OAAO,GAAG,IAAI,GAAG,EAAkB,CAAA;IACzC,MAAM,IAAI,GAAG,IAAI,GAAG,EAAU,CAAA;IAC9B,OAAO,EAAE,GAAG,GAAG,IAAI,GAAG,CAAC,MAAM,EAAE,CAAC;QAC9B,MAAM,MAAM,GAAG,GAAG,CAAC,QAAQ,CAAC,EAAE,EAAE,EAAE,GAAG,GAAG,CAAC,CAAA;QACzC,IAAI,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,IAAI,KAAK,CAAC,CAAC;YAAE,MAAK;QAC3C,IAAI,EAAE,OAAO,GAAG,SAAS;YAAE,IAAI,EAAE,CAAA;QACjC,IAAI,QAAQ,GAAG,CAAC,CAAA;QAChB,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,GAAG,EAAE,CAAC,EAAE;YAAE,QAAQ,IAAI,CAAC,IAAI,GAAG,IAAI,CAAC,GAAG,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAE,CAAA;QAC/E,IAAI,QAAQ,KAAK,KAAK,CAAC,MAAM,CAAC,QAAQ,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC;YAAE,IAAI,EAAE,CAAA;QACzD,MAAM,IAAI,GAAG,KAAK,CAAC,MAAM,CAAC,QAAQ,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC,CAAA;QAC7C,MAAM,GAAG,GAAG,EAAE,GAAG,GAAG,GAAG,IAAI,CAAA;QAC3B,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,GAAG,CAAC,IAAI,GAAG,GAAG,GAAG,CAAC,MAAM;YAAE,IAAI,EAAE,CAAA;QAC1D,MAAM,IAAI,GAAG,MAAM,CAAC,YAAY,CAAC,MAAM,CAAC,GAAG,CAAC,IAAI,EAAE,CAAC,CAAA;QACnD,IAAI,IAAI,KAAK,GAAG,IAAI,IAAI,KAAK,GAAG,EAAE,CAAC;YACjC,IAAI,IAAI,GAAG,SAAS;gBAAE,IAAI,EAAE,CAAA;YAC5B,MAAM,MAAM,GAAG,GAAG,CAAC,GAAG,CAAC,QAAQ,CAAC,EAAE,GAAG,GAAG,EAAE,GAAG,CAAC,CAAC,CAAA;YAC/C,IAAI,IAAI,KAAK,GAAG;gBAAE,MAAM,GAAG,EAAE,GAAG,MAAM,EAAE,GAAG,MAAM,EAAE,CAAA;;gBAC9C,KAAK,GAAG,MAAM,CAAA;QACrB,CAAC;aAAM,CAAC;YACN,MAAM,KAAK,GAAG,EAAE,GAAG,MAAM,EAAE,GAAG,KAAK,EAAE,CAAA;YACrC,IAAI,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,CAAC,MAAM,EAAE,OAAO,EAAE,OAAO,EAAE,OAAO,EAAE,SAAS,EAAE,KAAK,EAAE,KAAK,EAAE,OAAO,EAAE,OAAO,EAAE,MAAM,CAAC,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC;gBAAE,IAAI,EAAE,CAAA;YACjJ,MAAM,MAAM,GAAG,KAAK,CAAC,MAAM,CAAC,QAAQ,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC,CAAA;YAC/C,MAAM,UAAU,GAAG,KAAK,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC,CAAA;YACjD,MAAM,OAAO,GAAG,KAAK,CAAC,IAAI,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,GAAG,MAAM,IAAI,UAAU,EAAE,CAAC,CAAC,CAAC,UAAU,CAAC,CAAA;YAC/E,MAAM,IAAI,GAAG,OAAO,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAA;YACnE,IAAI,CAAC,IAAI,KAAK,SAAS,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,IAAI,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC;gBAAE,IAAI,EAAE,CAAA;YACrE,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,CAAA;YACd,IAAI,IAAI,KAAK,GAAG,IAAI,IAAI,KAAK,GAAG,EAAE,CAAC;gBACjC,IAAI,IAAI,KAAK,SAAS;oBAAE,IAAI,EAAE,CAAA;gBAC9B,OAAO,CAAC,GAAG,CAAC,IAAI,EAAE,GAAG,CAAC,QAAQ,CAAC,EAAE,GAAG,GAAG,EAAE,GAAG,CAAC,CAAC,CAAA;YAChD,CAAC;iBAAM,IAAI,IAAI,KAAK,GAAG;gBAAE,IAAI,EAAE,CAAA;YAC/B,KAAK,GAAG,EAAE,CAAA;QACZ,CAAC;QACD,EAAE,GAAG,IAAI,CAAC,IAAI,CAAC,GAAG,GAAG,GAAG,CAAC,GAAG,GAAG,CAAA;IACjC,CAAC;IACD,IAAI,EAAE,GAAG,IAAI,GAAG,GAAG,CAAC,MAAM,IAAI,CAAC,GAAG,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,IAAI,KAAK,CAAC,CAAC;QAAE,IAAI,EAAE,CAAA;IACjF,MAAM,aAAa,GAAG,OAAO,CAAC,GAAG,CAAC,sBAAsB,CAAC,CAAA;IACzD,IAAI,CAAC,aAAa;QAAE,IAAI,EAAE,CAAA;IAC1B,IAAI,QAAiB,CAAA;IACrB,IAAI,CAAC;QAAC,QAAQ,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,WAAW,CAAC,OAAO,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC,MAAM,CAAC,aAAa,CAAC,CAAC,CAAA;IAAC,CAAC;IAC9F,MAAM,CAAC;QAAC,IAAI,EAAE,CAAA;IAAC,CAAC;IAChB,IAAI,CAAC,QAAQ,IAAI,OAAO,QAAQ,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,QAAQ,CAAC;WACnE,OAAQ,QAA+B,CAAC,IAAI,KAAK,QAAQ;QAAE,IAAI,EAAE,CAAA;IACtE,MAAM,IAAI,GAAI,QAA6B,CAAC,IAAI,CAAA;IAChD,IAAI,CAAC,kCAAkC,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC;QAAE,IAAI,EAAE,CAAA;IAC5F,MAAM,KAAK,GAAG,WAAW,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,CAAA;IACxC,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC;QAAE,IAAI,EAAE,CAAA;IAC/B,MAAM,KAAK,GAAwC,EAAE,CAAA;IACrD,KAAK,MAAM,CAAC,IAAI,EAAE,KAAK,CAAC,IAAI,OAAO,EAAE,CAAC;QACpC,IAAI,KAAK,CAAC,MAAM,GAAG,IAAI,GAAG,IAAI;YAAE,IAAI,EAAE,CAAA;QACtC,IAAI,OAAe,CAAA;QACnB,IAAI,CAAC;YAAC,OAAO,GAAG,IAAI,WAAW,CAAC,OAAO,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAA;QAAC,CAAC;QACzE,MAAM,CAAC;YAAC,IAAI,EAAE,CAAA;QAAC,CAAC;QAChB,KAAK,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,OAAO,EAAE,CAAC,CAAA;IAC/B,CAAC;IACD,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,CAAA;AACzB,CAAC"}

package/lib/native-behavior-worker.d.ts

@@ -0,0 +1,3 @@
+/** Fixed source passed to the native Seatbelt runner. Candidate files are staged read-only by the trusted runner. */
+export declare const NATIVE_BEHAVIOR_SOURCE: string;
+//# sourceMappingURL=native-behavior-worker.d.ts.map

package/lib/native-behavior-worker.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"native-behavior-worker.d.ts","sourceRoot":"","sources":["../src/native-behavior-worker.ts"],"names":[],"mappings":"AAAA,qHAAqH;AACrH,eAAO,MAAM,sBAAsB,QA2GlC,CAAA"}

package/lib/native-behavior-worker.js

@@ -0,0 +1,110 @@
+/** Fixed source passed to the native Seatbelt runner. Candidate files are staged read-only by the trusted runner. */
+export const NATIVE_BEHAVIOR_SOURCE = String.raw `
+import { createHash } from 'node:crypto'
+import { createRequire, registerHooks } from 'node:module'
+import { readdirSync, writeSync } from 'node:fs'
+import { join } from 'node:path'
+import { pathToFileURL } from 'node:url'
+
+const stringify = JSON.stringify.bind(JSON)
+const createNull = Object.create.bind(Object)
+const assign = Object.assign.bind(Object)
+const digest = value => createHash('sha256').update(value).digest('hex')
+const safeTool = /^[a-z][a-z0-9_-]{0,95}$/
+let frame
+let nonce
+let artifactSha256
+let operationDigest
+let fiber
+let ctx
+let disposed = true
+try {
+  const chunks = []
+  let bytes = 0
+  for await (const chunk of process.stdin) {
+    bytes += chunk.length
+    if (bytes > 65536) throw new Error('candidate-input-too-large')
+    chunks.push(chunk)
+  }
+  const request = JSON.parse(Buffer.concat(chunks).toString('utf8'))
+  if (!request || request.schemaVersion !== 1 || typeof request.nonce !== 'string'
+    || !/^[a-f0-9]{64}$/.test(request.nonce) || typeof request.artifactSha256 !== 'string'
+    || !/^[a-f0-9]{64}$/.test(request.artifactSha256) || typeof request.entry !== 'string'
+    || !/^package\/lib\/[A-Za-z0-9._/-]+\.js$/.test(request.entry)
+    || request.entry.split('/').includes('..') || typeof request.modulesPath !== 'string'
+    || !request.modulesPath.startsWith('/') || !request.operation || !['discover', 'invoke'].includes(request.operation.kind))
+    throw new Error('candidate-input-invalid')
+  nonce = request.nonce
+  artifactSha256 = request.artifactSha256
+  operationDigest = digest(stringify(request.operation))
+  const resolver = createRequire(pathToFileURL(join(request.modulesPath, '__native_resolver__.cjs')))
+  const approved = new Map()
+  for (const entry of readdirSync(request.modulesPath)) {
+    if (entry.startsWith('.')) continue
+    const names = entry.startsWith('@')
+      ? readdirSync(join(request.modulesPath, entry)).map(name => entry + '/' + name) : [entry]
+    for (const name of names) {
+      try { approved.set(name, resolver.resolve(name)) } catch { /* package has no runtime entry */ }
+    }
+  }
+  const candidateRoot = pathToFileURL(join(process.cwd(), 'package') + '/').href
+  registerHooks({ resolve(specifier, context, nextResolve) {
+    if (context.parentURL?.startsWith(candidateRoot)
+      && !specifier.startsWith('node:') && !specifier.startsWith('.')
+      && !specifier.startsWith('/') && !specifier.startsWith('file:')) {
+      const target = approved.get(specifier)
+      if (!target) throw new Error('candidate-bare-import-not-approved')
+      return nextResolve(pathToFileURL(target).href, context)
+    }
+    return nextResolve(specifier, context)
+  } })
+  const { Context } = await import(pathToFileURL(approved.get('@deepseek-ai/cordis')).href)
+  const { default: SystemPrompt } = await import(pathToFileURL(approved.get('@deepseek-ai/dsh-system-prompt')).href)
+  const { default: ToolRuntime } = await import(pathToFileURL(approved.get('@deepseek-ai/dsh-tools')).href)
+  ctx = new Context()
+  await ctx.plugin(SystemPrompt, { includeHarnessIdentity: false, includeRuntimeContext: false, personaPrefix: '' })
+  await ctx.plugin(ToolRuntime, { mode: 'native' })
+  const module = await import(pathToFileURL(join(process.cwd(), request.entry)).href)
+  fiber = ctx.plugin(module.default ?? module)
+  let timer
+  try {
+    await Promise.race([fiber, new Promise((_, reject) => {
+      timer = setTimeout(() => reject(new Error('plugin-activation-timeout')), 5000)
+    })])
+  } finally { clearTimeout(timer) }
+  if (fiber.state !== 2) throw new Error('plugin-fiber-not-active')
+  const schemas = (await ctx.systemPrompt.assemble({})).tools
+  if (!Array.isArray(schemas) || schemas.length < 1 || schemas.length > 64) throw new Error('invalid-tool-schemas')
+  const names = new Set()
+  for (const schema of schemas) {
+    if (!schema || !safeTool.test(schema.name) || names.has(schema.name)) throw new Error('invalid-tool-schemas')
+    names.add(schema.name)
+  }
+  const schemaDigest = digest(stringify(schemas))
+  if (request.operation.kind === 'invoke' && request.operation.schemaDigest !== schemaDigest)
+    throw new Error('schema-digest-changed')
+  if (request.operation.kind === 'discover') frame = { status: 'result', schemaDigest, schemas }
+  else {
+    const calls = []
+    for (const call of request.operation.calls) {
+      if (!names.has(call.toolName)) throw new Error('unknown-invoked-tool')
+      const result = await ctx.tools.execute({ callId: call.id, name: call.toolName,
+        arguments: call.arguments, signal: new AbortController().signal })
+      calls.push({ id: call.id, toolName: call.toolName, result })
+    }
+    frame = { status: 'result', schemaDigest, calls }
+  }
+} catch (error) {
+  frame = { status: 'unknown', reason: error instanceof Error ? error.message.slice(0, 128) : 'candidate-error' }
+} finally {
+  try { if (fiber) await fiber.dispose() } catch { disposed = false }
+  try { if (ctx) await ctx.fiber.dispose() } catch { disposed = false }
+}
+if (!disposed) frame = { status: 'unknown', reason: 'plugin-disposal-unconfirmed' }
+try {
+  const output = stringify(assign(createNull(null), { wireVersion: 1, nonce, artifactSha256, operationDigest }, frame))
+  if (Buffer.byteLength(output) > 60000) throw new Error('candidate-output-too-large')
+  writeSync(1, output + '\n')
+} catch { process.exitCode = 1 }
+`;
+//# sourceMappingURL=native-behavior-worker.js.map

package/lib/native-behavior-worker.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"native-behavior-worker.js","sourceRoot":"","sources":["../src/native-behavior-worker.ts"],"names":[],"mappings":"AAAA,qHAAqH;AACrH,MAAM,CAAC,MAAM,sBAAsB,GAAG,MAAM,CAAC,GAAG,CAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;CA2G/C,CAAA"}

package/lib/plugin-behavior-config.d.ts

@@ -0,0 +1,10 @@
+import type { IsolatedVerifierRunnerConfig, NativeMacRuntime, NativeMacVerifierRunnerConfig } from '@dsh-enhanced/assistant-isolation';
+export declare const NATIVE_BEHAVIOR_BOUNDARY = "macos-seatbelt-single-process-v1";
+export type PluginBehaviorRunnerConfig = Omit<IsolatedVerifierRunnerConfig, 'command'> | Omit<NativeMacVerifierRunnerConfig, 'source'>;
+export type PluginBehaviorDeploymentConfig = Omit<IsolatedVerifierRunnerConfig, 'command' | 'authorityDigest'> | Omit<NativeMacVerifierRunnerConfig, 'source' | 'authorityDigest'>;
+export declare function behaviorNativeRuntimeDigest(runtime: NativeMacRuntime): string;
+/** Synchronous shape validation; the native runner rehashes approved runtime bytes before each dispatch. */
+export declare function validatePluginBehaviorRunnerConfig(value: unknown): PluginBehaviorRunnerConfig;
+/** Deployment values omit the digest, which the authenticated owner binds at construction. */
+export declare function validatePluginBehaviorDeploymentConfig(value: unknown): PluginBehaviorDeploymentConfig;
+//# sourceMappingURL=plugin-behavior-config.d.ts.map

package/lib/plugin-behavior-config.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"plugin-behavior-config.d.ts","sourceRoot":"","sources":["../src/plugin-behavior-config.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,4BAA4B,EAAE,gBAAgB,EAC1D,6BAA6B,EAAE,MAAM,mCAAmC,CAAA;AAE1E,eAAO,MAAM,wBAAwB,qCAAqC,CAAA;AAC1E,MAAM,MAAM,0BAA0B,GAAG,IAAI,CAAC,4BAA4B,EAAE,SAAS,CAAC,GAClF,IAAI,CAAC,6BAA6B,EAAE,QAAQ,CAAC,CAAA;AACjD,MAAM,MAAM,8BAA8B,GAAG,IAAI,CAAC,4BAA4B,EAAE,SAAS,GAAG,iBAAiB,CAAC,GAC1G,IAAI,CAAC,6BAA6B,EAAE,QAAQ,GAAG,iBAAiB,CAAC,CAAA;AAoCrE,wBAAgB,2BAA2B,CAAC,OAAO,EAAE,gBAAgB,GAAG,MAAM,CAG7E;AAED,4GAA4G;AAC5G,wBAAgB,kCAAkC,CAAC,KAAK,EAAE,OAAO,GAAG,0BAA0B,CAmB7F;AAED,8FAA8F;AAC9F,wBAAgB,sCAAsC,CAAC,KAAK,EAAE,OAAO,GAAG,8BAA8B,CAQrG"}

package/lib/plugin-behavior-config.js

@@ -0,0 +1,73 @@
+import { createHash } from 'node:crypto';
+import { isAbsolute, resolve, sep } from 'node:path';
+export const NATIVE_BEHAVIOR_BOUNDARY = 'macos-seatbelt-single-process-v1';
+function exactKeys(value, required, optional = []) {
+    return !!value && typeof value === 'object' && !Array.isArray(value)
+        && Object.getPrototypeOf(value) === Object.prototype
+        && required.every(key => Object.hasOwn(value, key))
+        && Object.keys(value).every(key => required.includes(key) || optional.includes(key))
+        && Object.values(Object.getOwnPropertyDescriptors(value)).every(item => item.enumerable && 'value' in item);
+}
+function positive(value, max) { return Number.isSafeInteger(value) && Number(value) >= 1 && Number(value) <= max; }
+function absolute(value) {
+    return typeof value === 'string' && isAbsolute(value) && resolve(value) === value && !value.includes('\0');
+}
+function nativeRuntime(value) {
+    if (!exactKeys(value, ['schemaVersion', 'platform', 'nodePath', 'nodeSha256', 'roots', 'modulesPath', 'versions'])
+        || value.schemaVersion !== 1 || value.platform !== `darwin-${process.arch}`
+        || !absolute(value.nodePath) || !absolute(value.modulesPath)
+        || typeof value.nodeSha256 !== 'string' || !/^[a-f0-9]{64}$/u.test(value.nodeSha256)
+        || !Array.isArray(value.roots) || value.roots.length < 1 || value.roots.length > 32
+        || !exactKeys(value.versions, ['node', 'typescript', 'cordis', 'tools', 'systemPrompt'])
+        || Object.values(value.versions).some(version => typeof version !== 'string' || version.length < 1 || version.length > 128)) {
+        throw new Error('invalid native plugin behavior runtime');
+    }
+    const roots = value.roots;
+    if (roots.some(root => !exactKeys(root, ['path', 'dev', 'ino', 'sha256']) || !absolute(root.path)
+        || root.path === '/' || !Number.isSafeInteger(root.dev) || Number(root.dev) < 0
+        || !Number.isSafeInteger(root.ino) || Number(root.ino) < 0
+        || typeof root.sha256 !== 'string' || !/^[a-f0-9]{64}$/u.test(root.sha256))
+        || new Set(roots.map(root => root.path)).size !== roots.length
+        || !roots.some(root => value.nodePath.startsWith(root.path + sep))
+        || !roots.some(root => value.modulesPath === root.path
+            || value.modulesPath.startsWith(root.path + sep))) {
+        throw new Error('invalid native plugin behavior runtime');
+    }
+}
+export function behaviorNativeRuntimeDigest(runtime) {
+    nativeRuntime(runtime);
+    return createHash('sha256').update(JSON.stringify(runtime)).digest('hex');
+}
+/** Synchronous shape validation; the native runner rehashes approved runtime bytes before each dispatch. */
+export function validatePluginBehaviorRunnerConfig(value) {
+    const common = ['stateRoot', 'authorityDigest', 'expiresAt', 'maxRuns', 'maxTotalDurationMs', 'maxDurationMs', 'maxOutputBytes'];
+    const native = !!value && typeof value === 'object'
+        && Object.getOwnPropertyDescriptor(value, 'backend')?.value === 'macos-seatbelt';
+    if (!exactKeys(value, [...common, ...(native ? ['backend', 'runtime'] : ['image', 'dockerPath'])], native ? [] : ['socketPath'])
+        || !absolute(value.stateRoot) || typeof value.authorityDigest !== 'string' || !/^[a-f0-9]{64}$/u.test(value.authorityDigest)
+        || !positive(value.expiresAt, 8_640_000_000_000_000) || !positive(value.maxRuns, 10_000)
+        || !positive(value.maxTotalDurationMs, 86_400_000) || !positive(value.maxDurationMs, 300_000)
+        || Number(value.maxDurationMs) > Number(value.maxTotalDurationMs)
+        || !positive(value.maxOutputBytes, 262_144) || Number(value.maxOutputBytes) < 65_536) {
+        throw new Error('invalid plugin behavior runner config');
+    }
+    if (native)
+        nativeRuntime(value.runtime);
+    else if (typeof value.image !== 'string' || !/^sha256:[a-f0-9]{64}$/u.test(value.image)
+        || !absolute(value.dockerPath) || Object.hasOwn(value, 'socketPath')
+        && (!absolute(value.socketPath) || /[\p{Cc},]/u.test(value.socketPath) || value.socketPath.includes('://'))) {
+        throw new Error('invalid plugin behavior Docker config');
+    }
+    return structuredClone(value);
+}
+/** Deployment values omit the digest, which the authenticated owner binds at construction. */
+export function validatePluginBehaviorDeploymentConfig(value) {
+    if (!value || typeof value !== 'object' || Array.isArray(value) || Object.getPrototypeOf(value) !== Object.prototype
+        || Object.hasOwn(value, 'authorityDigest')
+        || !Object.values(Object.getOwnPropertyDescriptors(value)).every(item => item.enumerable && 'value' in item))
+        throw new Error('invalid plugin behavior deployment config');
+    const checked = validatePluginBehaviorRunnerConfig({ ...value, authorityDigest: '0'.repeat(64) });
+    const { authorityDigest: _authorityDigest, ...deployment } = checked;
+    return deployment;
+}
+//# sourceMappingURL=plugin-behavior-config.js.map

package/lib/plugin-behavior-config.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"plugin-behavior-config.js","sourceRoot":"","sources":["../src/plugin-behavior-config.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAA;AACxC,OAAO,EAAE,UAAU,EAAE,OAAO,EAAE,GAAG,EAAE,MAAM,WAAW,CAAA;AAIpD,MAAM,CAAC,MAAM,wBAAwB,GAAG,kCAAkC,CAAA;AAM1E,SAAS,SAAS,CAAC,KAAc,EAAE,QAAkB,EAAE,WAAqB,EAAE;IAC5E,OAAO,CAAC,CAAC,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC;WAC/D,MAAM,CAAC,cAAc,CAAC,KAAK,CAAC,KAAK,MAAM,CAAC,SAAS;WACjD,QAAQ,CAAC,KAAK,CAAC,GAAG,CAAC,EAAE,CAAC,MAAM,CAAC,MAAM,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC;WAChD,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,EAAE,CAAC,QAAQ,CAAC,QAAQ,CAAC,GAAG,CAAC,IAAI,QAAQ,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC;WACjF,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,yBAAyB,CAAC,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,IAAI,CAAC,UAAU,IAAI,OAAO,IAAI,IAAI,CAAC,CAAA;AAC/G,CAAC;AACD,SAAS,QAAQ,CAAC,KAAc,EAAE,GAAW,IAAa,OAAO,MAAM,CAAC,aAAa,CAAC,KAAK,CAAC,IAAI,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,MAAM,CAAC,KAAK,CAAC,IAAI,GAAG,CAAA,CAAC,CAAC;AAC5I,SAAS,QAAQ,CAAC,KAAc;IAC9B,OAAO,OAAO,KAAK,KAAK,QAAQ,IAAI,UAAU,CAAC,KAAK,CAAC,IAAI,OAAO,CAAC,KAAK,CAAC,KAAK,KAAK,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAA;AAC5G,CAAC;AACD,SAAS,aAAa,CAAC,KAAc;IACnC,IAAI,CAAC,SAAS,CAAC,KAAK,EAAE,CAAC,eAAe,EAAC,UAAU,EAAC,UAAU,EAAC,YAAY,EAAC,OAAO,EAAC,aAAa,EAAC,UAAU,CAAC,CAAC;WACvG,KAAK,CAAC,aAAa,KAAK,CAAC,IAAI,KAAK,CAAC,QAAQ,KAAK,UAAU,OAAO,CAAC,IAAI,EAAE;WACxE,CAAC,QAAQ,CAAC,KAAK,CAAC,QAAQ,CAAC,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,WAAW,CAAC;WACzD,OAAO,KAAK,CAAC,UAAU,KAAK,QAAQ,IAAI,CAAC,iBAAiB,CAAC,IAAI,CAAC,KAAK,CAAC,UAAU,CAAC;WACjF,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,KAAK,CAAC,IAAI,KAAK,CAAC,KAAK,CAAC,MAAM,GAAG,CAAC,IAAI,KAAK,CAAC,KAAK,CAAC,MAAM,GAAG,EAAE;WAChF,CAAC,SAAS,CAAC,KAAK,CAAC,QAAQ,EAAE,CAAC,MAAM,EAAC,YAAY,EAAC,QAAQ,EAAC,OAAO,EAAC,cAAc,CAAC,CAAC;WACjF,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC,OAAO,OAAO,KAAK,QAAQ,IAAI,OAAO,CAAC,MAAM,GAAG,CAAC,IAAI,OAAO,CAAC,MAAM,GAAG,GAAG,CAAC,EAAE,CAAC;QAC9H,MAAM,IAAI,KAAK,CAAC,wCAAwC,CAAC,CAAA;IAC3D,CAAC;IACD,MAAM,KAAK,GAAG,KAAK,CAAC,KAAkB,CAAA;IACtC,IAAI,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,SAAS,CAAC,IAAI,EAAE,CAAC,MAAM,EAAC,KAAK,EAAC,KAAK,EAAC,QAAQ,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC;WACzF,IAAI,CAAC,IAAI,KAAK,GAAG,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC;WAC5E,CAAC,MAAM,CAAC,aAAa,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC;WACvD,OAAO,IAAI,CAAC,MAAM,KAAK,QAAQ,IAAI,CAAC,iBAAiB,CAAC,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;WACxE,IAAI,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAE,IAAyB,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,KAAK,KAAK,CAAC,MAAM;WACjF,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAE,KAAK,CAAC,QAAmB,CAAC,UAAU,CAAE,IAAyB,CAAC,IAAI,GAAG,GAAG,CAAC,CAAC;WACjG,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,KAAK,CAAC,WAAW,KAAM,IAAyB,CAAC,IAAI;eACtE,KAAK,CAAC,WAAsB,CAAC,UAAU,CAAE,IAAyB,CAAC,IAAI,GAAG,GAAG,CAAC,CAAC,EAAE,CAAC;QACxF,MAAM,IAAI,KAAK,CAAC,wCAAwC,CAAC,CAAA;IAC3D,CAAC;AACH,CAAC;AAED,MAAM,UAAU,2BAA2B,CAAC,OAAyB;IACnE,aAAa,CAAC,OAAO,CAAC,CAAA;IACtB,OAAO,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAA;AAC3E,CAAC;AAED,4GAA4G;AAC5G,MAAM,UAAU,kCAAkC,CAAC,KAAc;IAC/D,MAAM,MAAM,GAAG,CAAC,WAAW,EAAE,iBAAiB,EAAE,WAAW,EAAE,SAAS,EAAE,oBAAoB,EAAE,eAAe,EAAE,gBAAgB,CAAC,CAAA;IAChI,MAAM,MAAM,GAAG,CAAC,CAAC,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ;WAC9C,MAAM,CAAC,wBAAwB,CAAC,KAAK,EAAE,SAAS,CAAC,EAAE,KAAK,KAAK,gBAAgB,CAAA;IAClF,IAAI,CAAC,SAAS,CAAC,KAAK,EAAE,CAAC,GAAG,MAAM,EAAE,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,SAAS,EAAE,SAAS,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,EAAE,YAAY,CAAC,CAAC,CAAC,EAAE,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC;WAC3H,CAAC,QAAQ,CAAC,KAAK,CAAC,SAAS,CAAC,IAAI,OAAO,KAAK,CAAC,eAAe,KAAK,QAAQ,IAAI,CAAC,iBAAiB,CAAC,IAAI,CAAC,KAAK,CAAC,eAAe,CAAC;WACzH,CAAC,QAAQ,CAAC,KAAK,CAAC,SAAS,EAAE,qBAAqB,CAAC,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,OAAO,EAAE,MAAM,CAAC;WACrF,CAAC,QAAQ,CAAC,KAAK,CAAC,kBAAkB,EAAE,UAAU,CAAC,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,aAAa,EAAE,OAAO,CAAC;WAC1F,MAAM,CAAC,KAAK,CAAC,aAAa,CAAC,GAAG,MAAM,CAAC,KAAK,CAAC,kBAAkB,CAAC;WAC9D,CAAC,QAAQ,CAAC,KAAK,CAAC,cAAc,EAAE,OAAO,CAAC,IAAI,MAAM,CAAC,KAAK,CAAC,cAAc,CAAC,GAAG,MAAM,EAAE,CAAC;QACvF,MAAM,IAAI,KAAK,CAAC,uCAAuC,CAAC,CAAA;IAC1D,CAAC;IACD,IAAI,MAAM;QAAE,aAAa,CAAC,KAAK,CAAC,OAAO,CAAC,CAAA;SACnC,IAAI,OAAO,KAAK,CAAC,KAAK,KAAK,QAAQ,IAAI,CAAC,wBAAwB,CAAC,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC;WAClF,CAAC,QAAQ,CAAC,KAAK,CAAC,UAAU,CAAC,IAAI,MAAM,CAAC,MAAM,CAAC,KAAK,EAAE,YAAY,CAAC;WAC/D,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,UAAU,CAAC,IAAI,YAAY,CAAC,IAAI,CAAC,KAAK,CAAC,UAAU,CAAC,IAAI,KAAK,CAAC,UAAU,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC;QAChH,MAAM,IAAI,KAAK,CAAC,uCAAuC,CAAC,CAAA;IAC1D,CAAC;IACD,OAAO,eAAe,CAAC,KAAK,CAA+B,CAAA;AAC7D,CAAC;AAED,8FAA8F;AAC9F,MAAM,UAAU,sCAAsC,CAAC,KAAc;IACnE,IAAI,CAAC,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,IAAI,MAAM,CAAC,cAAc,CAAC,KAAK,CAAC,KAAK,MAAM,CAAC,SAAS;WAC/G,MAAM,CAAC,MAAM,CAAC,KAAK,EAAE,iBAAiB,CAAC;WACvC,CAAC,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,yBAAyB,CAAC,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,IAAI,CAAC,UAAU,IAAI,OAAO,IAAI,IAAI,CAAC;QAC5G,MAAM,IAAI,KAAK,CAAC,2CAA2C,CAAC,CAAA;IAC9D,MAAM,OAAO,GAAG,kCAAkC,CAAC,EAAE,GAAG,KAAK,EAAE,eAAe,EAAE,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC,EAAE,CAAC,CAAA;IACjG,MAAM,EAAE,eAAe,EAAE,gBAAgB,EAAE,GAAG,UAAU,EAAE,GAAG,OAAO,CAAA;IACpE,OAAO,UAA4C,CAAA;AACrD,CAAC"}

package/lib/plugin-behavior-runner.d.ts

@@ -0,0 +1,51 @@
+import { NATIVE_BEHAVIOR_BOUNDARY, type PluginBehaviorRunnerConfig } from './plugin-behavior-config.js';
+export { NATIVE_BEHAVIOR_BOUNDARY, validatePluginBehaviorRunnerConfig, validatePluginBehaviorDeploymentConfig } from './plugin-behavior-config.js';
+export type { PluginBehaviorRunnerConfig, PluginBehaviorDeploymentConfig } from './plugin-behavior-config.js';
+declare const BOUNDARY = "process-seccomp-v1";
+export type PluginBehaviorOperation = {
+    readonly kind: 'discover';
+} | {
+    readonly kind: 'invoke';
+    readonly schemaDigest: string;
+    readonly calls: readonly {
+        readonly id: string;
+        readonly toolName: string;
+        readonly arguments: unknown;
+    }[];
+};
+export interface PluginBehaviorObservation {
+    readonly status: 'observed' | 'unknown';
+    readonly quiescent: boolean;
+    readonly jobId?: string;
+    readonly artifactSha256: string;
+    readonly boundary?: typeof BOUNDARY | typeof NATIVE_BEHAVIOR_BOUNDARY;
+    readonly runtimeDigest?: string;
+    readonly reason?: string;
+    readonly environment?: Readonly<{
+        node: string;
+        cordis: string;
+        tools: string;
+        systemPrompt: string;
+    }>;
+    readonly schemaDigest?: string;
+    readonly schemas?: readonly unknown[];
+    readonly calls?: readonly {
+        readonly id: string;
+        readonly toolName: string;
+        readonly result: unknown;
+    }[];
+}
+export interface PluginBehaviorRunnerInput {
+    readonly key: string;
+    readonly artifact: Buffer;
+    readonly operation: PluginBehaviorOperation;
+    readonly signal: AbortSignal;
+}
+/** Host-only behavior observation. The candidate and worker receive no oracle or promotion authority. */
+export declare class PluginBehaviorRunner {
+    #private;
+    constructor(input: PluginBehaviorRunnerConfig);
+    run(input: PluginBehaviorRunnerInput): Promise<PluginBehaviorObservation>;
+    close(): Promise<void>;
+}
+//# sourceMappingURL=plugin-behavior-runner.d.ts.map

package/lib/plugin-behavior-runner.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"plugin-behavior-runner.d.ts","sourceRoot":"","sources":["../src/plugin-behavior-runner.ts"],"names":[],"mappings":"AAGA,OAAO,EAA+B,wBAAwB,EAC5D,KAAK,0BAA0B,EAAE,MAAM,6BAA6B,CAAA;AACtE,OAAO,EAAE,wBAAwB,EAAE,kCAAkC,EAAE,sCAAsC,EAAE,MAAM,6BAA6B,CAAA;AAClJ,YAAY,EAAE,0BAA0B,EAAE,8BAA8B,EAAE,MAAM,6BAA6B,CAAA;AAW7G,QAAA,MAAM,QAAQ,uBAAuB,CAAA;AACrC,MAAM,MAAM,uBAAuB,GAC/B;IAAE,QAAQ,CAAC,IAAI,EAAE,UAAU,CAAA;CAAE,GAC7B;IAAE,QAAQ,CAAC,IAAI,EAAE,QAAQ,CAAC;IAAC,QAAQ,CAAC,YAAY,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,KAAK,EAAE,SAAS;QACnF,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAC;QAAC,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;QAAC,QAAQ,CAAC,SAAS,EAAE,OAAO,CAAA;KAC5E,EAAE,CAAA;CAAE,CAAA;AAEP,MAAM,WAAW,yBAAyB;IACxC,QAAQ,CAAC,MAAM,EAAE,UAAU,GAAG,SAAS,CAAA;IACvC,QAAQ,CAAC,SAAS,EAAE,OAAO,CAAA;IAC3B,QAAQ,CAAC,KAAK,CAAC,EAAE,MAAM,CAAA;IACvB,QAAQ,CAAC,cAAc,EAAE,MAAM,CAAA;IAC/B,QAAQ,CAAC,QAAQ,CAAC,EAAE,OAAO,QAAQ,GAAG,OAAO,wBAAwB,CAAA;IACrE,QAAQ,CAAC,aAAa,CAAC,EAAE,MAAM,CAAA;IAC/B,QAAQ,CAAC,MAAM,CAAC,EAAE,MAAM,CAAA;IACxB,QAAQ,CAAC,WAAW,CAAC,EAAE,QAAQ,CAAC;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,MAAM,EAAE,MAAM,CAAC;QAAC,KAAK,EAAE,MAAM,CAAC;QAAC,YAAY,EAAE,MAAM,CAAA;KAAE,CAAC,CAAA;IACtG,QAAQ,CAAC,YAAY,CAAC,EAAE,MAAM,CAAA;IAC9B,QAAQ,CAAC,OAAO,CAAC,EAAE,SAAS,OAAO,EAAE,CAAA;IACrC,QAAQ,CAAC,KAAK,CAAC,EAAE,SAAS;QAAE,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAC;QAAC,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;QAAC,QAAQ,CAAC,MAAM,EAAE,OAAO,CAAA;KAAE,EAAE,CAAA;CACzG;AAED,MAAM,WAAW,yBAAyB;IACxC,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAA;IACpB,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAA;IACzB,QAAQ,CAAC,SAAS,EAAE,uBAAuB,CAAA;IAC3C,QAAQ,CAAC,MAAM,EAAE,WAAW,CAAA;CAC7B;AAwED,yGAAyG;AACzG,qBAAa,oBAAoB;;gBAOnB,KAAK,EAAE,0BAA0B;IAavC,GAAG,CAAC,KAAK,EAAE,yBAAyB,GAAG,OAAO,CAAC,yBAAyB,CAAC;IAsF/E,KAAK,IAAI,OAAO,CAAC,IAAI,CAAC;CACvB"}