@ellery/terminal-mcp 0.2.1 → 0.3.0

package/dist/sandbox/config.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"config.js","sourceRoot":"","sources":["../../src/sandbox/config.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,MAAM,IAAI,CAAC;AACzB,OAAO,KAAK,EAAE,MAAM,IAAI,CAAC;AACzB,OAAO,KAAK,IAAI,MAAM,MAAM,CAAC;AAgC7B;;;;GAIG;AACH,MAAM,CAAC,MAAM,mBAAmB,GAAuB;IACrD,UAAU,EAAE;QACV,SAAS,EAAE;YACT,aAAa;YACb,GAAG,EAAe,4BAA4B;YAC9C,MAAM,EAAY,aAAa;YAE/B,kBAAkB;YAClB,UAAU,EAAQ,gCAAgC;YAClD,UAAU,EAAQ,kBAAkB;YACpC,gBAAgB,EAAE,cAAc;YAChC,iBAAiB,EAAE,eAAe;YAClC,sBAAsB,EAAE,oBAAoB;YAC5C,mBAAmB,EAAE,iBAAiB;YAEtC,mBAAmB;YACnB,QAAQ;YACR,SAAS;YACT,SAAS;YACT,QAAQ;SACT;QACD,QAAQ,EAAE;YACR,GAAG,EAAe,uCAAuC;SAC1D;QACD,OAAO,EAAE;YACP,UAAU;YACV,QAAQ;YACR,UAAU;YAEV,oBAAoB;YACpB,QAAQ;YACR,kBAAkB;YAClB,UAAU;YACV,SAAS;YAET,kBAAkB;YAClB,cAAc;YAEd,cAAc;YACd,UAAU;YACV,UAAU;YACV,uBAAuB;SACxB;KACF;IACD,OAAO,EAAE;QACP,IAAI,EAAE,KAAK;KACZ;CACF,CAAC;AAEF;;GAEG;AACH,MAAM,UAAU,UAAU,CAAC,CAAS;IAClC,IAAI,CAAC,CAAC,UAAU,CAAC,IAAI,CAAC,EAAE,CAAC;QACvB,OAAO,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC;IAC7C,CAAC;IACD,IAAI,CAAC,KAAK,GAAG,EAAE,CAAC;QACd,OAAO,EAAE,CAAC,OAAO,EAAE,CAAC;IACtB,CAAC;IACD,IAAI,CAAC,KAAK,GAAG,EAAE,CAAC;QACd,OAAO,OAAO,CAAC,GAAG,EAAE,CAAC;IACvB,CAAC;IACD,OAAO,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC;AACzB,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,kBAAkB,CAAC,QAAgB;IACjD,MAAM,YAAY,GAAG,UAAU,CAAC,QAAQ,CAAC,CAAC;IAE1C,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,YAAY,CAAC,EAAE,CAAC;QACjC,MAAM,IAAI,KAAK,CAAC,kCAAkC,YAAY,EAAE,CAAC,CAAC;IACpE,CAAC;IAED,MAAM,OAAO,GAAG,EAAE,CAAC,YAAY,CAAC,YAAY,EAAE,OAAO,CAAC,CAAC;IACvD,IAAI,MAAe,CAAC;IAEpB,IAAI,CAAC;QACH,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;IAC/B,CAAC;IAAC,MAAM,CAAC;QACP,MAAM,IAAI,KAAK,CAAC,wCAAwC,YAAY,EAAE,CAAC,CAAC;IAC1E,CAAC;IAED,OAAO,cAAc,CAAC,MAAM,CAAC,CAAC;AAChC,CAAC;AAED;;GAEG;AACH,SAAS,cAAc,CAAC,MAAe;IACrC,IAAI,OAAO,MAAM,KAAK,QAAQ,IAAI,MAAM,KAAK,IAAI,EAAE,CAAC;QAClD,MAAM,IAAI,KAAK,CAAC,kCAAkC,CAAC,CAAC;IACtD,CAAC;IAED,MAAM,GAAG,GAAG,MAAiC,CAAC;IAC9C,MAAM,MAAM,GAAuB;QACjC,UAAU,EAAE;YACV,SAAS,EAAE,EAAE;YACb,QAAQ,EAAE,EAAE;YACZ,OAAO,EAAE,EAAE;SACZ;QACD,OAAO,EAAE;YACP,IAAI,EAAE,KAAK;SACZ;KACF,CAAC;IAEF,6BAA6B;IAC7B,IAAI,GAAG,CAAC,UAAU,IAAI,OAAO,GAAG,CAAC,UAAU,KAAK,QAAQ,EAAE,CAAC;QACzD,MAAM,EAAE,GAAG,GAAG,CAAC,UAAqC,CAAC;QAErD,IAAI,KAAK,CAAC,OAAO,CAAC,EAAE,CAAC,SAAS,CAAC,EAAE,CAAC;YAChC,MAAM,CAAC,UAAU,CAAC,SAAS,GAAG,EAAE,CAAC,SAAS,CAAC,MAAM,CAC/C,CAAC,CAAC,EAAe,EAAE,CAAC,OAAO,CAAC,KAAK,QAAQ,CAC1C,CAAC;QACJ,CAAC;QAED,IAAI,KAAK,CAAC,OAAO,CAAC,EAAE,CAAC,QAAQ,CAAC,EAAE,CAAC;YAC/B,MAAM,CAAC,UAAU,CAAC,QAAQ,GAAG,EAAE,CAAC,QAAQ,CAAC,MAAM,CAC7C,CAAC,CAAC,EAAe,EAAE,CAAC,OAAO,CAAC,KAAK,QAAQ,CAC1C,CAAC;QACJ,CAAC;QAED,IAAI,KAAK,CAAC,OAAO,CAAC,EAAE,CAAC,OAAO,CAAC,EAAE,CAAC;YAC9B,MAAM,CAAC,UAAU,CAAC,OAAO,GAAG,EAAE,CAAC,OAAO,CAAC,MAAM,CAC3C,CAAC,CAAC,EAAe,EAAE,CAAC,OAAO,CAAC,KAAK,QAAQ,CAC1C,CAAC;QACJ,CAAC;IACH,CAAC;IAED,0BAA0B;IAC1B,IAAI,GAAG,CAAC,OAAO,IAAI,OAAO,GAAG,CAAC,OAAO,KAAK,QAAQ,EAAE,CAAC;QACnD,MAAM,GAAG,GAAG,GAAG,CAAC,OAAkC,CAAC;QAEnD,IAAI,GAAG,CAAC,IAAI,KAAK,KAAK,IAAI,GAAG,CAAC,IAAI,KAAK,MAAM,IAAI,GAAG,CAAC,IAAI,KAAK,WAAW,EAAE,CAAC;YAC1E,MAAM,CAAC,OAAO,CAAC,IAAI,GAAG,GAAG,CAAC,IAAI,CAAC;QACjC,CAAC;QAED,IAAI,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,cAAc,CAAC,EAAE,CAAC;YACtC,MAAM,CAAC,OAAO,CAAC,cAAc,GAAG,GAAG,CAAC,cAAc,CAAC,MAAM,CACvD,CAAC,CAAC,EAAe,EAAE,CAAC,OAAO,CAAC,KAAK,QAAQ,CAC1C,CAAC;QACJ,CAAC;IACH,CAAC;IAED,OAAO,MAAM,CAAC;AAChB,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,gBAAgB,CAC9B,IAAwB,EACxB,SAAsC;IAEtC,OAAO;QACL,UAAU,EAAE;YACV,SAAS,EAAE,SAAS,CAAC,UAAU,EAAE,SAAS,IAAI,IAAI,CAAC,UAAU,CAAC,SAAS;YACvE,QAAQ,EAAE,SAAS,CAAC,UAAU,EAAE,QAAQ,IAAI,IAAI,CAAC,UAAU,CAAC,QAAQ;YACpE,OAAO,EAAE,SAAS,CAAC,UAAU,EAAE,OAAO,IAAI,IAAI,CAAC,UAAU,CAAC,OAAO;SAClE;QACD,OAAO,EAAE;YACP,IAAI,EAAE,SAAS,CAAC,OAAO,EAAE,IAAI,IAAI,IAAI,CAAC,OAAO,CAAC,IAAI;YAClD,cAAc,EAAE,SAAS,CAAC,OAAO,EAAE,cAAc,IAAI,IAAI,CAAC,OAAO,CAAC,cAAc;SACjF;KACF,CAAC;AACJ,CAAC"}

package/dist/sandbox/controller.d.ts

@@ -0,0 +1,72 @@
+import { SandboxPermissions } from "./config.js";
+export type SandboxPlatform = "darwin" | "linux" | "win32" | "unsupported";
+export interface SandboxStatus {
+    enabled: boolean;
+    platform: SandboxPlatform;
+    reason?: string;
+}
+/**
+ * Controller that wraps sandbox-runtime for terminal-mcp
+ * Manages sandbox lifecycle and command wrapping
+ */
+export declare class SandboxController {
+    private initialized;
+    private permissions;
+    private platform;
+    constructor();
+    /**
+     * Get the current platform
+     */
+    getPlatform(): SandboxPlatform;
+    /**
+     * Check if sandboxing is supported on this platform
+     */
+    isSupported(): boolean;
+    /**
+     * Check if Linux dependencies are available
+     */
+    checkLinuxDependencies(): {
+        supported: boolean;
+        message?: string;
+    };
+    /**
+     * Clean up sandbox artifacts left by previous runs.
+     *
+     * Workaround for sandbox-runtime bug: when sandbox binds /dev/null to .claude,
+     * it leaves a 0-byte file artifact. On the next run, sandbox-runtime tries to
+     * create .claude/commands inside this file, which fails with "Not a directory".
+     *
+     * This removes the .claude artifact if it's a 0-byte file (not a real directory).
+     */
+    cleanupSandboxArtifacts(): void;
+    /**
+     * Convert our permission model to sandbox-runtime config format
+     */
+    private toSandboxConfig;
+    /**
+     * Initialize the sandbox with given permissions
+     * Returns status indicating whether sandbox is active
+     */
+    initialize(permissions: SandboxPermissions): Promise<SandboxStatus>;
+    /**
+     * Wrap a shell command with sandbox restrictions
+     * Returns the wrapped command string to execute
+     */
+    wrapShellCommand(shell: string, args: string[]): Promise<{
+        cmd: string;
+        args: string[];
+    }>;
+    /**
+     * Check if sandbox is currently active
+     */
+    isActive(): boolean;
+    /**
+     * Get current permissions (if initialized)
+     */
+    getPermissions(): SandboxPermissions | null;
+    /**
+     * Cleanup sandbox resources
+     */
+    cleanup(): Promise<void>;
+}
+//# sourceMappingURL=controller.d.ts.map

package/dist/sandbox/controller.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"controller.d.ts","sourceRoot":"","sources":["../../src/sandbox/controller.ts"],"names":[],"mappings":"AAIA,OAAO,EAAE,kBAAkB,EAAc,MAAM,aAAa,CAAC;AAI7D,MAAM,MAAM,eAAe,GAAG,QAAQ,GAAG,OAAO,GAAG,OAAO,GAAG,aAAa,CAAC;AAE3E,MAAM,WAAW,aAAa;IAC5B,OAAO,EAAE,OAAO,CAAC;IACjB,QAAQ,EAAE,eAAe,CAAC;IAC1B,MAAM,CAAC,EAAE,MAAM,CAAC;CACjB;AAED;;;GAGG;AACH,qBAAa,iBAAiB;IAC5B,OAAO,CAAC,WAAW,CAAS;IAC5B,OAAO,CAAC,WAAW,CAAmC;IACtD,OAAO,CAAC,QAAQ,CAAkB;;IAYlC;;OAEG;IACH,WAAW,IAAI,eAAe;IAI9B;;OAEG;IACH,WAAW,IAAI,OAAO;IAItB;;OAEG;IACH,sBAAsB,IAAI;QAAE,SAAS,EAAE,OAAO,CAAC;QAAC,OAAO,CAAC,EAAE,MAAM,CAAA;KAAE;IAUlE;;;;;;;;OAQG;IACH,uBAAuB,IAAI,IAAI;IAgB/B;;OAEG;IACH,OAAO,CAAC,eAAe;IA6CvB;;;OAGG;IACG,UAAU,CAAC,WAAW,EAAE,kBAAkB,GAAG,OAAO,CAAC,aAAa,CAAC;IAkDzE;;;OAGG;IACG,gBAAgB,CACpB,KAAK,EAAE,MAAM,EACb,IAAI,EAAE,MAAM,EAAE,GACb,OAAO,CAAC;QAAE,GAAG,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,MAAM,EAAE,CAAA;KAAE,CAAC;IA2B3C;;OAEG;IACH,QAAQ,IAAI,OAAO;IAInB;;OAEG;IACH,cAAc,IAAI,kBAAkB,GAAG,IAAI;IAI3C;;OAEG;IACG,OAAO,IAAI,OAAO,CAAC,IAAI,CAAC;CAO/B"}

package/dist/sandbox/controller.js

@@ -0,0 +1,208 @@
+import { SandboxManager, } from "@anthropic-ai/sandbox-runtime";
+import { expandPath } from "./config.js";
+import * as fs from "fs";
+import * as path from "path";
+/**
+ * Controller that wraps sandbox-runtime for terminal-mcp
+ * Manages sandbox lifecycle and command wrapping
+ */
+export class SandboxController {
+    initialized = false;
+    permissions = null;
+    platform;
+    constructor() {
+        // Get platform from Node
+        const nodePlatform = process.platform;
+        if (nodePlatform === "darwin" || nodePlatform === "linux" || nodePlatform === "win32") {
+            this.platform = nodePlatform;
+        }
+        else {
+            this.platform = "unsupported";
+        }
+    }
+    /**
+     * Get the current platform
+     */
+    getPlatform() {
+        return this.platform;
+    }
+    /**
+     * Check if sandboxing is supported on this platform
+     */
+    isSupported() {
+        return SandboxManager.isSupportedPlatform();
+    }
+    /**
+     * Check if Linux dependencies are available
+     */
+    checkLinuxDependencies() {
+        if (this.platform !== "linux") {
+            return { supported: true };
+        }
+        const depCheck = SandboxManager.checkDependencies();
+        const supported = depCheck.errors.length === 0;
+        const message = supported ? undefined : depCheck.errors.join("; ");
+        return { supported, message };
+    }
+    /**
+     * Clean up sandbox artifacts left by previous runs.
+     *
+     * Workaround for sandbox-runtime bug: when sandbox binds /dev/null to .claude,
+     * it leaves a 0-byte file artifact. On the next run, sandbox-runtime tries to
+     * create .claude/commands inside this file, which fails with "Not a directory".
+     *
+     * This removes the .claude artifact if it's a 0-byte file (not a real directory).
+     */
+    cleanupSandboxArtifacts() {
+        const claudePath = path.join(process.cwd(), ".claude");
+        try {
+            const stat = fs.statSync(claudePath);
+            // If .claude is a file (not directory) and 0 bytes, it's a sandbox artifact
+            if (stat.isFile() && stat.size === 0) {
+                fs.unlinkSync(claudePath);
+                if (process.env.DEBUG_SANDBOX) {
+                    console.error("[sandbox-debug] Cleaned up .claude artifact (0-byte file from previous sandbox run)");
+                }
+            }
+        }
+        catch {
+            // File doesn't exist or can't be accessed - that's fine
+        }
+    }
+    /**
+     * Convert our permission model to sandbox-runtime config format
+     */
+    toSandboxConfig(permissions) {
+        // Expand all paths
+        const expandPaths = (paths) => paths.map((p) => expandPath(p));
+        // Configure network based on mode
+        let allowedDomains;
+        let deniedDomains = [];
+        switch (permissions.network.mode) {
+            case "none":
+                // Block all network by using empty allowed list
+                allowedDomains = [];
+                break;
+            case "allowlist":
+                allowedDomains = permissions.network.allowedDomains ?? [];
+                break;
+            case "all":
+            default:
+                // Allow all network access with wildcard
+                allowedDomains = ["*"];
+                break;
+        }
+        const config = {
+            filesystem: {
+                // Read/write paths go to allowWrite
+                allowWrite: expandPaths(permissions.filesystem.readWrite),
+                // Blocked paths go to denyRead (blocks both read and write)
+                denyRead: expandPaths(permissions.filesystem.blocked),
+                // Read-only paths: we want to allow read but deny write
+                // Paths not in allowWrite are read-only by default
+                denyWrite: [],
+            },
+            network: {
+                allowedDomains,
+                deniedDomains,
+            },
+            // Enable PTY support since we're spawning a shell
+            allowPty: true,
+        };
+        return config;
+    }
+    /**
+     * Initialize the sandbox with given permissions
+     * Returns status indicating whether sandbox is active
+     */
+    async initialize(permissions) {
+        // Check platform support
+        if (!this.isSupported()) {
+            return {
+                enabled: false,
+                platform: this.platform,
+                reason: this.platform === "win32"
+                    ? "Sandbox not available on Windows"
+                    : `Platform ${this.platform} is not supported`,
+            };
+        }
+        // Check Linux dependencies
+        if (this.platform === "linux") {
+            const depCheck = this.checkLinuxDependencies();
+            if (!depCheck.supported) {
+                return {
+                    enabled: false,
+                    platform: this.platform,
+                    reason: depCheck.message ?? "Linux sandbox dependencies not available",
+                };
+            }
+        }
+        // Clean up any sandbox artifacts from previous runs
+        // This works around a sandbox-runtime bug where .claude becomes a 0-byte file
+        this.cleanupSandboxArtifacts();
+        try {
+            const config = this.toSandboxConfig(permissions);
+            await SandboxManager.initialize(config, undefined, true);
+            this.initialized = true;
+            this.permissions = permissions;
+            return {
+                enabled: true,
+                platform: this.platform,
+            };
+        }
+        catch (error) {
+            const message = error instanceof Error ? error.message : String(error);
+            return {
+                enabled: false,
+                platform: this.platform,
+                reason: `Failed to initialize sandbox: ${message}`,
+            };
+        }
+    }
+    /**
+     * Wrap a shell command with sandbox restrictions
+     * Returns the wrapped command string to execute
+     */
+    async wrapShellCommand(shell, args) {
+        if (!this.initialized) {
+            throw new Error("Sandbox not initialized");
+        }
+        // Build the full command string
+        const fullCommand = [shell, ...args].join(" ");
+        // Wrap with sandbox
+        const sandboxedCommand = await SandboxManager.wrapWithSandbox(fullCommand, shell);
+        // Debug: log the generated command
+        if (process.env.DEBUG_SANDBOX) {
+            console.error("[sandbox-debug] Generated command:", sandboxedCommand);
+        }
+        // The sandboxed command should be executed via shell
+        // Return it as a shell -c command
+        return {
+            cmd: "/bin/sh",
+            args: ["-c", sandboxedCommand],
+        };
+    }
+    /**
+     * Check if sandbox is currently active
+     */
+    isActive() {
+        return this.initialized;
+    }
+    /**
+     * Get current permissions (if initialized)
+     */
+    getPermissions() {
+        return this.permissions;
+    }
+    /**
+     * Cleanup sandbox resources
+     */
+    async cleanup() {
+        if (this.initialized) {
+            await SandboxManager.reset();
+            this.initialized = false;
+            this.permissions = null;
+        }
+    }
+}
+//# sourceMappingURL=controller.js.map

package/dist/sandbox/controller.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"controller.js","sourceRoot":"","sources":["../../src/sandbox/controller.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,cAAc,GAEf,MAAM,+BAA+B,CAAC;AACvC,OAAO,EAAsB,UAAU,EAAE,MAAM,aAAa,CAAC;AAC7D,OAAO,KAAK,EAAE,MAAM,IAAI,CAAC;AACzB,OAAO,KAAK,IAAI,MAAM,MAAM,CAAC;AAU7B;;;GAGG;AACH,MAAM,OAAO,iBAAiB;IACpB,WAAW,GAAG,KAAK,CAAC;IACpB,WAAW,GAA8B,IAAI,CAAC;IAC9C,QAAQ,CAAkB;IAElC;QACE,yBAAyB;QACzB,MAAM,YAAY,GAAG,OAAO,CAAC,QAAQ,CAAC;QACtC,IAAI,YAAY,KAAK,QAAQ,IAAI,YAAY,KAAK,OAAO,IAAI,YAAY,KAAK,OAAO,EAAE,CAAC;YACtF,IAAI,CAAC,QAAQ,GAAG,YAAY,CAAC;QAC/B,CAAC;aAAM,CAAC;YACN,IAAI,CAAC,QAAQ,GAAG,aAAa,CAAC;QAChC,CAAC;IACH,CAAC;IAED;;OAEG;IACH,WAAW;QACT,OAAO,IAAI,CAAC,QAAQ,CAAC;IACvB,CAAC;IAED;;OAEG;IACH,WAAW;QACT,OAAO,cAAc,CAAC,mBAAmB,EAAE,CAAC;IAC9C,CAAC;IAED;;OAEG;IACH,sBAAsB;QACpB,IAAI,IAAI,CAAC,QAAQ,KAAK,OAAO,EAAE,CAAC;YAC9B,OAAO,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC;QAC7B,CAAC;QACD,MAAM,QAAQ,GAAG,cAAc,CAAC,iBAAiB,EAAE,CAAC;QACpD,MAAM,SAAS,GAAG,QAAQ,CAAC,MAAM,CAAC,MAAM,KAAK,CAAC,CAAC;QAC/C,MAAM,OAAO,GAAG,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACnE,OAAO,EAAE,SAAS,EAAE,OAAO,EAAE,CAAC;IAChC,CAAC;IAED;;;;;;;;OAQG;IACH,uBAAuB;QACrB,MAAM,UAAU,GAAG,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,GAAG,EAAE,EAAE,SAAS,CAAC,CAAC;QACvD,IAAI,CAAC;YACH,MAAM,IAAI,GAAG,EAAE,CAAC,QAAQ,CAAC,UAAU,CAAC,CAAC;YACrC,4EAA4E;YAC5E,IAAI,IAAI,CAAC,MAAM,EAAE,IAAI,IAAI,CAAC,IAAI,KAAK,CAAC,EAAE,CAAC;gBACrC,EAAE,CAAC,UAAU,CAAC,UAAU,CAAC,CAAC;gBAC1B,IAAI,OAAO,CAAC,GAAG,CAAC,aAAa,EAAE,CAAC;oBAC9B,OAAO,CAAC,KAAK,CAAC,qFAAqF,CAAC,CAAC;gBACvG,CAAC;YACH,CAAC;QACH,CAAC;QAAC,MAAM,CAAC;YACP,wDAAwD;QAC1D,CAAC;IACH,CAAC;IAED;;OAEG;IACK,eAAe,CAAC,WAA+B;QACrD,mBAAmB;QACnB,MAAM,WAAW,GAAG,CAAC,KAAe,EAAY,EAAE,CAChD,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,CAAC;QAElC,kCAAkC;QAClC,IAAI,cAAwB,CAAC;QAC7B,IAAI,aAAa,GAAa,EAAE,CAAC;QAEjC,QAAQ,WAAW,CAAC,OAAO,CAAC,IAAI,EAAE,CAAC;YACjC,KAAK,MAAM;gBACT,gDAAgD;gBAChD,cAAc,GAAG,EAAE,CAAC;gBACpB,MAAM;YACR,KAAK,WAAW;gBACd,cAAc,GAAG,WAAW,CAAC,OAAO,CAAC,cAAc,IAAI,EAAE,CAAC;gBAC1D,MAAM;YACR,KAAK,KAAK,CAAC;YACX;gBACE,yCAAyC;gBACzC,cAAc,GAAG,CAAC,GAAG,CAAC,CAAC;gBACvB,MAAM;QACV,CAAC;QAED,MAAM,MAAM,GAAyB;YACnC,UAAU,EAAE;gBACV,oCAAoC;gBACpC,UAAU,EAAE,WAAW,CAAC,WAAW,CAAC,UAAU,CAAC,SAAS,CAAC;gBACzD,4DAA4D;gBAC5D,QAAQ,EAAE,WAAW,CAAC,WAAW,CAAC,UAAU,CAAC,OAAO,CAAC;gBACrD,wDAAwD;gBACxD,mDAAmD;gBACnD,SAAS,EAAE,EAAE;aACd;YACD,OAAO,EAAE;gBACP,cAAc;gBACd,aAAa;aACd;YACD,kDAAkD;YAClD,QAAQ,EAAE,IAAI;SACf,CAAC;QAEF,OAAO,MAAM,CAAC;IAChB,CAAC;IAED;;;OAGG;IACH,KAAK,CAAC,UAAU,CAAC,WAA+B;QAC9C,yBAAyB;QACzB,IAAI,CAAC,IAAI,CAAC,WAAW,EAAE,EAAE,CAAC;YACxB,OAAO;gBACL,OAAO,EAAE,KAAK;gBACd,QAAQ,EAAE,IAAI,CAAC,QAAQ;gBACvB,MAAM,EACJ,IAAI,CAAC,QAAQ,KAAK,OAAO;oBACvB,CAAC,CAAC,kCAAkC;oBACpC,CAAC,CAAC,YAAY,IAAI,CAAC,QAAQ,mBAAmB;aACnD,CAAC;QACJ,CAAC;QAED,2BAA2B;QAC3B,IAAI,IAAI,CAAC,QAAQ,KAAK,OAAO,EAAE,CAAC;YAC9B,MAAM,QAAQ,GAAG,IAAI,CAAC,sBAAsB,EAAE,CAAC;YAC/C,IAAI,CAAC,QAAQ,CAAC,SAAS,EAAE,CAAC;gBACxB,OAAO;oBACL,OAAO,EAAE,KAAK;oBACd,QAAQ,EAAE,IAAI,CAAC,QAAQ;oBACvB,MAAM,EAAE,QAAQ,CAAC,OAAO,IAAI,0CAA0C;iBACvE,CAAC;YACJ,CAAC;QACH,CAAC;QAED,oDAAoD;QACpD,8EAA8E;QAC9E,IAAI,CAAC,uBAAuB,EAAE,CAAC;QAE/B,IAAI,CAAC;YACH,MAAM,MAAM,GAAG,IAAI,CAAC,eAAe,CAAC,WAAW,CAAC,CAAC;YACjD,MAAM,cAAc,CAAC,UAAU,CAAC,MAAM,EAAE,SAAS,EAAE,IAAI,CAAC,CAAC;YAEzD,IAAI,CAAC,WAAW,GAAG,IAAI,CAAC;YACxB,IAAI,CAAC,WAAW,GAAG,WAAW,CAAC;YAE/B,OAAO;gBACL,OAAO,EAAE,IAAI;gBACb,QAAQ,EAAE,IAAI,CAAC,QAAQ;aACxB,CAAC;QACJ,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,MAAM,OAAO,GAAG,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;YACvE,OAAO;gBACL,OAAO,EAAE,KAAK;gBACd,QAAQ,EAAE,IAAI,CAAC,QAAQ;gBACvB,MAAM,EAAE,iCAAiC,OAAO,EAAE;aACnD,CAAC;QACJ,CAAC;IACH,CAAC;IAED;;;OAGG;IACH,KAAK,CAAC,gBAAgB,CACpB,KAAa,EACb,IAAc;QAEd,IAAI,CAAC,IAAI,CAAC,WAAW,EAAE,CAAC;YACtB,MAAM,IAAI,KAAK,CAAC,yBAAyB,CAAC,CAAC;QAC7C,CAAC;QAED,gCAAgC;QAChC,MAAM,WAAW,GAAG,CAAC,KAAK,EAAE,GAAG,IAAI,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QAE/C,oBAAoB;QACpB,MAAM,gBAAgB,GAAG,MAAM,cAAc,CAAC,eAAe,CAC3D,WAAW,EACX,KAAK,CACN,CAAC;QAEF,mCAAmC;QACnC,IAAI,OAAO,CAAC,GAAG,CAAC,aAAa,EAAE,CAAC;YAC9B,OAAO,CAAC,KAAK,CAAC,oCAAoC,EAAE,gBAAgB,CAAC,CAAC;QACxE,CAAC;QAED,qDAAqD;QACrD,kCAAkC;QAClC,OAAO;YACL,GAAG,EAAE,SAAS;YACd,IAAI,EAAE,CAAC,IAAI,EAAE,gBAAgB,CAAC;SAC/B,CAAC;IACJ,CAAC;IAED;;OAEG;IACH,QAAQ;QACN,OAAO,IAAI,CAAC,WAAW,CAAC;IAC1B,CAAC;IAED;;OAEG;IACH,cAAc;QACZ,OAAO,IAAI,CAAC,WAAW,CAAC;IAC1B,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,OAAO;QACX,IAAI,IAAI,CAAC,WAAW,EAAE,CAAC;YACrB,MAAM,cAAc,CAAC,KAAK,EAAE,CAAC;YAC7B,IAAI,CAAC,WAAW,GAAG,KAAK,CAAC;YACzB,IAAI,CAAC,WAAW,GAAG,IAAI,CAAC;QAC1B,CAAC;IACH,CAAC;CACF"}

package/dist/sandbox/index.d.ts

@@ -0,0 +1,6 @@
+export type { SandboxPermissions, FilesystemPermissions, NetworkPermissions, } from "./config.js";
+export { DEFAULT_PERMISSIONS, loadConfigFromFile, expandPath, mergePermissions, } from "./config.js";
+export type { SandboxPlatform, SandboxStatus, } from "./controller.js";
+export { SandboxController, } from "./controller.js";
+export { promptForPermissions, displayPermissionsSummary, } from "./prompt.js";
+//# sourceMappingURL=index.d.ts.map

package/dist/sandbox/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/sandbox/index.ts"],"names":[],"mappings":"AAAA,YAAY,EACV,kBAAkB,EAClB,qBAAqB,EACrB,kBAAkB,GACnB,MAAM,aAAa,CAAC;AAErB,OAAO,EACL,mBAAmB,EACnB,kBAAkB,EAClB,UAAU,EACV,gBAAgB,GACjB,MAAM,aAAa,CAAC;AAErB,YAAY,EACV,eAAe,EACf,aAAa,GACd,MAAM,iBAAiB,CAAC;AAEzB,OAAO,EACL,iBAAiB,GAClB,MAAM,iBAAiB,CAAC;AAEzB,OAAO,EACL,oBAAoB,EACpB,yBAAyB,GAC1B,MAAM,aAAa,CAAC"}

package/dist/sandbox/index.js

@@ -0,0 +1,4 @@
+export { DEFAULT_PERMISSIONS, loadConfigFromFile, expandPath, mergePermissions, } from "./config.js";
+export { SandboxController, } from "./controller.js";
+export { promptForPermissions, displayPermissionsSummary, } from "./prompt.js";
+//# sourceMappingURL=index.js.map

package/dist/sandbox/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/sandbox/index.ts"],"names":[],"mappings":"AAMA,OAAO,EACL,mBAAmB,EACnB,kBAAkB,EAClB,UAAU,EACV,gBAAgB,GACjB,MAAM,aAAa,CAAC;AAOrB,OAAO,EACL,iBAAiB,GAClB,MAAM,iBAAiB,CAAC;AAEzB,OAAO,EACL,oBAAoB,EACpB,yBAAyB,GAC1B,MAAM,aAAa,CAAC"}

package/dist/sandbox/prompt.d.ts

@@ -0,0 +1,10 @@
+import { SandboxPermissions } from "./config.js";
+/**
+ * Interactive permission selection prompt
+ */
+export declare function promptForPermissions(): Promise<SandboxPermissions>;
+/**
+ * Display a summary of the sandbox permissions
+ */
+export declare function displayPermissionsSummary(permissions: SandboxPermissions): void;
+//# sourceMappingURL=prompt.d.ts.map

package/dist/sandbox/prompt.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"prompt.d.ts","sourceRoot":"","sources":["../../src/sandbox/prompt.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,kBAAkB,EAAE,MAAM,aAAa,CAAC;AAiEjD;;GAEG;AACH,wBAAsB,oBAAoB,IAAI,OAAO,CAAC,kBAAkB,CAAC,CA+VxE;AAoED;;GAEG;AACH,wBAAgB,yBAAyB,CAAC,WAAW,EAAE,kBAAkB,GAAG,IAAI,CAmB/E"}