@frontmcp/ui 0.5.1 → 0.6.0

package/bundler/sandbox/enclave-adapter.d.ts

@@ -0,0 +1,121 @@
+/**
+ * Enclave-VM Secure Code Executor
+ *
+ * Executes bundled code in a secure sandbox using enclave-vm.
+ * Provides defense-in-depth security with:
+ * - AST-based validation (81+ blocked attack vectors)
+ * - Timeout enforcement (default 5000ms)
+ * - Resource limits (maxIterations, maxToolCalls)
+ * - Six security layers
+ *
+ * @packageDocumentation
+ */
+import type { SecurityPolicy } from '../types';
+/**
+ * Context for code execution.
+ */
+export interface ExecutionContext {
+    /**
+     * React module to inject.
+     */
+    React?: unknown;
+    /**
+     * ReactDOM module to inject.
+     */
+    ReactDOM?: unknown;
+    /**
+     * Additional modules to inject.
+     */
+    modules?: Record<string, unknown>;
+    /**
+     * Additional global variables.
+     */
+    globals?: Record<string, unknown>;
+    /**
+     * Security policy to enforce.
+     */
+    security?: SecurityPolicy;
+    /**
+     * Execution timeout in milliseconds.
+     * @default 5000
+     */
+    timeout?: number;
+    /**
+     * Maximum loop iterations allowed.
+     * @default 10000
+     */
+    maxIterations?: number;
+}
+/**
+ * Result of code execution.
+ */
+export interface ExecutionResult<T = unknown> {
+    /**
+     * Exported value from the code.
+     */
+    exports: T;
+    /**
+     * Execution time in ms.
+     */
+    executionTime: number;
+    /**
+     * Console output captured during execution.
+     */
+    consoleOutput?: string[];
+}
+/**
+ * Execute bundled code in a secure enclave-vm sandbox.
+ *
+ * Provides a sandboxed execution context with:
+ * - AST-based code validation (81+ attack vectors blocked)
+ * - Timeout enforcement (default 5000ms)
+ * - Resource limits (maxIterations)
+ * - Six security layers (defense-in-depth)
+ *
+ * @param code - Bundled JavaScript code
+ * @param context - Execution context
+ * @returns Execution result with exports
+ *
+ * @example
+ * ```typescript
+ * const code = `
+ *   const React = require('react');
+ *   function Widget({ data }) {
+ *     return React.createElement('div', null, data.message);
+ *   }
+ *   module.exports = Widget;
+ * `;
+ *
+ * const result = await executeCode(code, {
+ *   React: require('react'),
+ *   timeout: 3000,
+ * });
+ *
+ * console.log(result.exports); // Widget function
+ * ```
+ */
+export declare function executeCode<T = unknown>(code: string, context?: ExecutionContext): Promise<ExecutionResult<T>>;
+/**
+ * Execute bundled code and extract the default export.
+ *
+ * Convenience wrapper around executeCode that extracts
+ * the default export.
+ *
+ * @param code - Bundled JavaScript code
+ * @param context - Execution context
+ * @returns Default export from the code
+ */
+export declare function executeDefault<T = unknown>(code: string, context?: ExecutionContext): Promise<T>;
+/**
+ * Error thrown during code execution.
+ */
+export declare class ExecutionError extends Error {
+    /** Error code for categorization */
+    code?: string;
+    constructor(message: string, cause?: unknown);
+}
+/**
+ * Check if an error is an ExecutionError.
+ */
+export declare function isExecutionError(error: unknown): error is ExecutionError;
+//# sourceMappingURL=enclave-adapter.d.ts.map

package/bundler/sandbox/enclave-adapter.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"enclave-adapter.d.ts","sourceRoot":"","sources":["../../../src/bundler/sandbox/enclave-adapter.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AAGH,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,UAAU,CAAC;AAE/C;;GAEG;AACH,MAAM,WAAW,gBAAgB;IAC/B;;OAEG;IACH,KAAK,CAAC,EAAE,OAAO,CAAC;IAEhB;;OAEG;IACH,QAAQ,CAAC,EAAE,OAAO,CAAC;IAEnB;;OAEG;IACH,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAElC;;OAEG;IACH,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAElC;;OAEG;IACH,QAAQ,CAAC,EAAE,cAAc,CAAC;IAE1B;;;OAGG;IACH,OAAO,CAAC,EAAE,MAAM,CAAC;IAEjB;;;OAGG;IACH,aAAa,CAAC,EAAE,MAAM,CAAC;CACxB;AAED;;GAEG;AACH,MAAM,WAAW,eAAe,CAAC,CAAC,GAAG,OAAO;IAC1C;;OAEG;IACH,OAAO,EAAE,CAAC,CAAC;IAEX;;OAEG;IACH,aAAa,EAAE,MAAM,CAAC;IAEtB;;OAEG;IACH,aAAa,CAAC,EAAE,MAAM,EAAE,CAAC;CAC1B;AA6LD;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA8BG;AACH,wBAAsB,WAAW,CAAC,CAAC,GAAG,OAAO,EAC3C,IAAI,EAAE,MAAM,EACZ,OAAO,GAAE,gBAAqB,GAC7B,OAAO,CAAC,eAAe,CAAC,CAAC,CAAC,CAAC,CAqH7B;AAED;;;;;;;;;GASG;AACH,wBAAsB,cAAc,CAAC,CAAC,GAAG,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,OAAO,GAAE,gBAAqB,GAAG,OAAO,CAAC,CAAC,CAAC,CAuB1G;AAED;;GAEG;AACH,qBAAa,cAAe,SAAQ,KAAK;IACvC,oCAAoC;IACpC,IAAI,CAAC,EAAE,MAAM,CAAC;gBAEF,OAAO,EAAE,MAAM,EAAE,KAAK,CAAC,EAAE,OAAO;CAS7C;AAED;;GAEG;AACH,wBAAgB,gBAAgB,CAAC,KAAK,EAAE,OAAO,GAAG,KAAK,IAAI,cAAc,CAExE"}

package/bundler/sandbox/executor.d.ts

@@ -0,0 +1,14 @@
+/**
+ * Secure Code Executor
+ *
+ * Executes bundled code in a secure sandbox using enclave-vm.
+ * Provides defense-in-depth security with:
+ * - AST-based validation (81+ blocked attack vectors)
+ * - Timeout enforcement (default 5000ms)
+ * - Resource limits (maxIterations)
+ * - Six security layers
+ *
+ * @packageDocumentation
+ */
+export { executeCode, executeDefault, ExecutionError, isExecutionError, type ExecutionContext, type ExecutionResult, } from './enclave-adapter';
+//# sourceMappingURL=executor.d.ts.map

package/bundler/sandbox/executor.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"executor.d.ts","sourceRoot":"","sources":["../../../src/bundler/sandbox/executor.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AAGH,OAAO,EACL,WAAW,EACX,cAAc,EACd,cAAc,EACd,gBAAgB,EAChB,KAAK,gBAAgB,EACrB,KAAK,eAAe,GACrB,MAAM,mBAAmB,CAAC"}

package/bundler/sandbox/policy.d.ts

@@ -0,0 +1,62 @@
+/**
+ * Sandbox Security Policy
+ *
+ * Defines and validates security policies for bundler execution.
+ *
+ * @packageDocumentation
+ */
+import type { SecurityPolicy, SecurityViolation } from '../types';
+/**
+ * Validate source code against a security policy.
+ *
+ * @param source - Source code to validate
+ * @param policy - Security policy to enforce
+ * @returns Array of security violations (empty if valid)
+ *
+ * @example
+ * ```typescript
+ * const violations = validateSource(code, DEFAULT_SECURITY_POLICY);
+ * if (violations.length > 0) {
+ *   throw new Error(`Security violations: ${violations.map(v => v.message).join(', ')}`);
+ * }
+ * ```
+ */
+export declare function validateSource(source: string, policy?: SecurityPolicy): SecurityViolation[];
+/**
+ * Validate import statements against policy.
+ *
+ * @param source - Source code to check
+ * @param policy - Security policy
+ * @returns Array of import violations
+ */
+export declare function validateImports(source: string, policy?: SecurityPolicy): SecurityViolation[];
+/**
+ * Validate bundle size against policy.
+ *
+ * @param size - Bundle size in bytes
+ * @param policy - Security policy
+ * @returns Violation if size exceeds limit, undefined otherwise
+ */
+export declare function validateSize(size: number, policy?: SecurityPolicy): SecurityViolation | undefined;
+/**
+ * Create a merged security policy with defaults.
+ *
+ * @param userPolicy - User-provided policy overrides
+ * @returns Merged policy with defaults
+ */
+export declare function mergePolicy(userPolicy?: Partial<SecurityPolicy>): SecurityPolicy;
+/**
+ * Security error thrown when policy is violated.
+ */
+export declare class SecurityError extends Error {
+    readonly violations: SecurityViolation[];
+    constructor(message: string, violations: SecurityViolation[]);
+}
+/**
+ * Throw if any violations exist.
+ *
+ * @param violations - Array of violations to check
+ * @throws SecurityError if violations exist
+ */
+export declare function throwOnViolations(violations: SecurityViolation[]): void;
+//# sourceMappingURL=policy.d.ts.map

package/bundler/sandbox/policy.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"policy.d.ts","sourceRoot":"","sources":["../../../src/bundler/sandbox/policy.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAEH,OAAO,KAAK,EAAE,cAAc,EAAE,iBAAiB,EAAE,MAAM,UAAU,CAAC;AAoBlE;;;;;;;;;;;;;;GAcG;AACH,wBAAgB,cAAc,CAAC,MAAM,EAAE,MAAM,EAAE,MAAM,GAAE,cAAwC,GAAG,iBAAiB,EAAE,CAyDpH;AAED;;;;;;GAMG;AACH,wBAAgB,eAAe,CAAC,MAAM,EAAE,MAAM,EAAE,MAAM,GAAE,cAAwC,GAAG,iBAAiB,EAAE,CAqDrH;AAED;;;;;;GAMG;AACH,wBAAgB,YAAY,CAC1B,IAAI,EAAE,MAAM,EACZ,MAAM,GAAE,cAAwC,GAC/C,iBAAiB,GAAG,SAAS,CAY/B;AAED;;;;;GAKG;AACH,wBAAgB,WAAW,CAAC,UAAU,CAAC,EAAE,OAAO,CAAC,cAAc,CAAC,GAAG,cAAc,CAehF;AAsBD;;GAEG;AACH,qBAAa,aAAc,SAAQ,KAAK;IACtC,QAAQ,CAAC,UAAU,EAAE,iBAAiB,EAAE,CAAC;gBAE7B,OAAO,EAAE,MAAM,EAAE,UAAU,EAAE,iBAAiB,EAAE;CAK7D;AAED;;;;;GAKG;AACH,wBAAgB,iBAAiB,CAAC,UAAU,EAAE,iBAAiB,EAAE,GAAG,IAAI,CAKvE"}