@fungi.computer/truffle 0.2.2 → 0.3.0

package/dist/private-local-sandbox-policy.d.ts

@@ -10,15 +10,35 @@ export declare function resolveAgentFolder(project: string, folder: string): {
 export type LocalSandboxPolicy = Readonly<{
     projectRoot: string;
     writableRoot: string;
+    /** Whole Git administration and Agent state, read-only in Workspace. */
     readOnly: readonly string[];
-    immovable: readonly string[];
 }>;
+/** The host, never project configuration, chooses every writable cache grant. */
+export type LinuxSandboxProfile = LocalSandboxPolicy & Readonly<{
+    mode: "workspace" | "read-only";
+    writable: readonly string[];
+    hidden: readonly string[];
+    temporaryDirectory: string;
+    /** Host-selected cache carve-out to prepare before rendering bwrap mounts. */
+    fungiCache: string | undefined;
+    sshAgentSocket: string | undefined;
+    sshAgentMask: string | undefined;
+}>;
+export declare function linuxSandboxProfile(policy: LocalSandboxPolicy, mode: "workspace" | "read-only", temporaryDirectory: string, host: NodeJS.ProcessEnv, 
+/** Pass the real passwd home in production; fixtures supply their own. */
+osHome: string, platform?: "linux" | "darwin"): LinuxSandboxProfile;
+/** Private persistent Agent temp, not the staging directory or host /tmp. */
+export declare function agentSandboxTemporaryDirectory(agentId: string, project: string): string;
 export declare class UnsafeNativePayload extends Error {
     readonly name = "UnsafeNativePayload";
 }
 export declare class UnsafeHostCode extends Error {
     readonly name = "UnsafeHostCode";
 }
+/** A symlinked Git marker cannot be protected by a bind on its logical name. */
+export declare class UnsafeGitMarker extends Error {
+    readonly name = "UnsafeGitMarker";
+}
 /**
  * Packed CLI identity is supplied by the Node bin wrapper, which loaded both
  * paths before spawning Bun. This is an admission check, not an integrity
@@ -28,15 +48,14 @@ export declare function assertHostCodeOutsideAgent(project: string, cli: string,
 /** Refuse both logical and resolved native source locations in the whole
  * Agent project or Git administration before verifying source bytes. */
 export declare function assertHostOwnedNativeFile(project: string, path: string): void;
-/** Host liveness check for private PID-named run reclamation. */
-export type NativeRunLivenessProbe = (pid: number) => void;
-/** New private inode, never a link or bind of an installed payload. */
-export declare function privateNativeDirectory(project: string, probe?: NativeRunLivenessProbe): string;
-export declare function stageNativeBytes(directory: string, label: string, bytes: Uint8Array): string;
 /** One logical/resolved authority for Files, bwrap and Seatbelt. */
 export declare function protectedSandboxPaths(paths: readonly string[]): string[];
-/**
- * Recompute for every command: the previous command may have initialized Git.
- * An internal caller may tighten the directory budget, never widen the ceiling.
- */
-export declare function sandboxPolicy(project: string, folder: string, directoryLimit?: number): LocalSandboxPolicy;
+/** Git owns the representation of the selected folder's worktree and common dir. */
+export declare function gitDirectories(project: string, root: string, path?: string): {
+    common: string;
+    worktree: string;
+} | undefined;
+/** Remote names from the protected common config only, never a racy worktree path. */
+export declare function protectedGitRemoteNames(project: string, common: string, path: string): ReadonlySet<string> | undefined;
+/** Recompute for each command: the prior command may have initialized Git. */
+export declare function sandboxPolicy(project: string, folder: string): LocalSandboxPolicy;