@geminixiang/mama 0.1.10 → 0.2.0-beta.1

package/dist/vault.js

@@ -0,0 +1,389 @@
+import { chmodSync, closeSync, constants as fsConstants, existsSync, mkdirSync, openSync, readFileSync, renameSync, unlinkSync, writeSync, } from "fs";
+import { randomBytes } from "crypto";
+import { basename, dirname, isAbsolute, join, normalize, sep } from "path";
+const PRIVATE_DIR_MODE = 0o700;
+const PRIVATE_FILE_MODE = 0o600;
+// ── parseEnvFile ───────────────────────────────────────────────────────────────
+/**
+ * Parse a KEY=VALUE env file. Supports:
+ * - Lines starting with # are comments
+ * - Empty lines are skipped
+ * - Values can be quoted with single or double quotes (quotes are stripped)
+ * - No variable expansion
+ * - The value is everything after the first `=` to end of line (no inline comments)
+ */
+export function parseEnvFile(content) {
+    const env = {};
+    const lines = content.replace(/\r\n/g, "\n").replace(/\r/g, "\n").split("\n");
+    for (const line of lines) {
+        const trimmed = line.trim();
+        if (!trimmed || trimmed.startsWith("#"))
+            continue;
+        const eqIndex = trimmed.indexOf("=");
+        if (eqIndex === -1)
+            continue;
+        const key = trimmed.slice(0, eqIndex).trim();
+        if (!key)
+            continue;
+        let value = trimmed.slice(eqIndex + 1);
+        // Strip matching quotes
+        if ((value.startsWith('"') && value.endsWith('"')) ||
+            (value.startsWith("'") && value.endsWith("'"))) {
+            value = value.slice(1, -1);
+        }
+        env[key] = value;
+    }
+    return env;
+}
+// ── FileVaultManager ───────────────────────────────────────────────────────────
+export class FileVaultManager {
+    constructor(stateDir) {
+        this.config = null;
+        this.vaultsDir = join(stateDir, "vaults");
+        this.configPath = join(this.vaultsDir, "vault.json");
+        this.reload();
+    }
+    reload() {
+        if (!existsSync(this.configPath)) {
+            this.config = null;
+            return;
+        }
+        try {
+            const raw = readFileSync(this.configPath, "utf-8");
+            const parsed = JSON.parse(raw);
+            if (!parsed ||
+                typeof parsed !== "object" ||
+                !parsed.vaults ||
+                typeof parsed.vaults !== "object") {
+                console.error(`vault: malformed vault.json — expected { vaults: { ... } }`);
+                this.config = null;
+                return;
+            }
+            this.config = parsed;
+            this.warnUnsupportedSandboxTypes();
+        }
+        catch (err) {
+            console.error(`vault: failed to read ${this.configPath}:`, err);
+            this.config = null;
+        }
+    }
+    /** Warn for legacy or insecure vault sandbox overrides that are no longer allowed. */
+    warnUnsupportedSandboxTypes() {
+        if (!this.config)
+            return;
+        for (const [key, entry] of Object.entries(this.config.vaults)) {
+            if (entry.sandbox?.type === "host") {
+                console.error(`vault: "${key}" uses sandbox.type=host, which is blocked for credential isolation. ` +
+                    "Use sandbox.type=image or sandbox.type=firecracker.");
+            }
+            if (entry.sandbox?.type === "container" || entry.sandbox?.type === "docker") {
+                console.error(`vault: "${key}" uses sandbox.type=${entry.sandbox.type}, which is blocked for credential isolation. ` +
+                    "Use sandbox.type=image for per-user containers or sandbox.type=firecracker.");
+            }
+        }
+    }
+    isEnabled() {
+        return this.config !== null;
+    }
+    hasEntry(key) {
+        return !!this.config?.vaults[key];
+    }
+    resolve(userId) {
+        const entry = this.config?.vaults[userId];
+        if (!entry)
+            return undefined;
+        return this.buildResolved(userId, entry);
+    }
+    getSandboxConfig(userId, baseConfig) {
+        const vault = this.resolve(userId);
+        if (!vault?.sandboxOverride)
+            return baseConfig;
+        const override = vault.sandboxOverride;
+        if (override.type === "image") {
+            if (baseConfig.type !== "image") {
+                throw new Error(`vault "${userId}" sets sandbox.type=image, but base sandbox is "${baseConfig.type}". ` +
+                    "Use --sandbox=image:<image> to enable per-user managed containers.");
+            }
+            const container = override.container || `mama-sandbox-${userId}`;
+            return { type: "container", container };
+        }
+        if (override.type === "firecracker") {
+            if (!override.vmId)
+                return baseConfig;
+            if (baseConfig.type !== "firecracker") {
+                throw new Error(`vault "${userId}" sets sandbox.type=firecracker, but base sandbox is "${baseConfig.type}". ` +
+                    "Use --sandbox=firecracker:<vm-id>:<host-path> so /workspace stays mapped to the real workspace.");
+            }
+            return {
+                type: "firecracker",
+                vmId: override.vmId,
+                hostPath: baseConfig.hostPath,
+                sshUser: override.sshUser,
+                sshPort: override.sshPort,
+            };
+        }
+        if (override.type === "host") {
+            throw new Error(`vault "${userId}" uses sandbox.type=host, which is blocked for credential isolation. ` +
+                "Use sandbox.type=image or sandbox.type=firecracker.");
+        }
+        if (override.type === "container" || override.type === "docker") {
+            throw new Error(`vault "${userId}" uses sandbox.type=${override.type}, which is blocked for credential isolation. ` +
+                "Use sandbox.type=image for per-user containers or sandbox.type=firecracker.");
+        }
+        // No type override — return base config unchanged
+        return baseConfig;
+    }
+    list() {
+        if (!this.config)
+            return [];
+        const results = [];
+        for (const [key, entry] of Object.entries(this.config.vaults)) {
+            results.push(this.buildResolved(key, entry));
+        }
+        return results;
+    }
+    addEntry(key, entry) {
+        if (!this.config) {
+            this.config = { vaults: {} };
+        }
+        // Idempotent: skip if already exists
+        if (this.config.vaults[key])
+            return;
+        this.config.vaults[key] = entry;
+        this.persistConfig();
+    }
+    ensureImageSandboxEntry(key, entry) {
+        if (entry.sandbox?.type !== "image") {
+            throw new Error(`vault: ensureImageSandboxEntry requires sandbox.type=image for "${key}"`);
+        }
+        if (!this.config) {
+            this.config = { vaults: {} };
+        }
+        const existing = this.config.vaults[key];
+        if (!existing) {
+            this.config.vaults[key] = entry;
+            this.persistConfig();
+            return;
+        }
+        let nextEntry = existing;
+        let changed = false;
+        if (!existing.platform && entry.platform) {
+            nextEntry = { ...nextEntry, platform: entry.platform };
+            changed = true;
+        }
+        const existingSandbox = existing.sandbox;
+        if (!existingSandbox?.type) {
+            nextEntry = { ...nextEntry, sandbox: entry.sandbox };
+            changed = true;
+        }
+        else if (existingSandbox.type === "image" &&
+            !existingSandbox.container &&
+            entry.sandbox.container) {
+            nextEntry = {
+                ...nextEntry,
+                sandbox: { ...existingSandbox, container: entry.sandbox.container },
+            };
+            changed = true;
+        }
+        if (!changed) {
+            return;
+        }
+        this.config.vaults[key] = nextEntry;
+        this.persistConfig();
+    }
+    upsertEnv(key, env) {
+        const dir = join(this.vaultsDir, key);
+        const envPath = join(dir, "env");
+        ensurePrivateDir(this.vaultsDir);
+        ensurePrivateDir(dir);
+        const existing = existsSync(envPath)
+            ? parseEnvFile(readFileSync(envPath, "utf-8"))
+            : {};
+        const merged = { ...existing, ...env };
+        const content = Object.entries(merged)
+            .sort(([left], [right]) => left.localeCompare(right))
+            .map(([envKey, value]) => `${envKey}=${value}`)
+            .join("\n") + "\n";
+        atomicWritePrivateFile(envPath, content);
+    }
+    upsertFile(key, relativePath, content, targetPath) {
+        const normalizedPath = normalizeVaultRelativePath(relativePath);
+        const normalizedTarget = normalizeVaultTargetPath(targetPath);
+        if (!normalizedPath || (targetPath !== undefined && !normalizedTarget)) {
+            throw new Error(`vault: invalid relative secret file path for "${key}": ${relativePath}`);
+        }
+        const dir = join(this.vaultsDir, key);
+        const filePath = join(dir, normalizedPath);
+        ensurePrivateDir(this.vaultsDir);
+        ensurePrivateDir(dir);
+        const parentDir = dirname(filePath);
+        if (parentDir !== dir)
+            ensurePrivateDir(parentDir);
+        atomicWritePrivateFile(filePath, content);
+        this.ensureMountEntry(key, normalizedPath, normalizedTarget);
+    }
+    // ── private ────────────────────────────────────────────────────────────────
+    persistConfig() {
+        ensurePrivateDir(this.vaultsDir);
+        // Preserve concurrent external edits: pull in any entries that appear on
+        // disk but not in our in-memory view, so a background edit (e.g. another
+        // admin adding a user) is not silently dropped by the next upsert here.
+        // Individual field edits still follow last-writer-wins per key.
+        const onDisk = this.readConfigFromDisk();
+        if (onDisk && this.config) {
+            for (const [key, entry] of Object.entries(onDisk.vaults)) {
+                if (!(key in this.config.vaults)) {
+                    this.config.vaults[key] = entry;
+                }
+            }
+        }
+        atomicWritePrivateFile(this.configPath, JSON.stringify(this.config, null, 2) + "\n");
+    }
+    readConfigFromDisk() {
+        if (!existsSync(this.configPath))
+            return null;
+        try {
+            const parsed = JSON.parse(readFileSync(this.configPath, "utf-8"));
+            if (!parsed ||
+                typeof parsed !== "object" ||
+                !parsed.vaults ||
+                typeof parsed.vaults !== "object") {
+                return null;
+            }
+            return parsed;
+        }
+        catch {
+            return null;
+        }
+    }
+    ensureMountEntry(key, relativePath, targetPath) {
+        if (!this.config?.vaults[key]) {
+            throw new Error(`vault: cannot add mount "${relativePath}" for missing entry "${key}"`);
+        }
+        const existing = this.config.vaults[key];
+        const mounts = existing.mounts ?? [];
+        if (mounts.some((mount) => typeof mount === "string"
+            ? mount === relativePath && !targetPath
+            : mount.source === relativePath && mount.target === targetPath)) {
+            return;
+        }
+        this.config.vaults[key] = {
+            ...existing,
+            mounts: [...mounts, targetPath ? { source: relativePath, target: targetPath } : relativePath],
+        };
+        this.persistConfig();
+    }
+    buildResolved(key, entry) {
+        const dir = join(this.vaultsDir, key);
+        const mounts = (entry.mounts ?? [])
+            .map((mount) => this.resolveMountEntry(dir, mount))
+            .filter((mount) => mount !== undefined);
+        let env = {};
+        const envPath = join(dir, "env");
+        if (entry.envFile !== false && existsSync(envPath)) {
+            try {
+                env = parseEnvFile(readFileSync(envPath, "utf-8"));
+            }
+            catch (err) {
+                console.error(`vault: failed to parse env file for "${key}":`, err);
+            }
+        }
+        return {
+            userId: key,
+            displayName: entry.displayName,
+            dir,
+            mounts,
+            env,
+            sandboxOverride: entry.sandbox,
+        };
+    }
+    resolveMountEntry(dir, mount) {
+        if (typeof mount === "string") {
+            const normalizedSource = normalizeVaultRelativePath(mount);
+            if (!normalizedSource)
+                return undefined;
+            return {
+                source: join(dir, normalizedSource),
+                target: defaultVaultTargetPath(normalizedSource),
+            };
+        }
+        if (!mount || typeof mount !== "object")
+            return undefined;
+        const normalizedSource = normalizeVaultRelativePath(mount.source);
+        if (!normalizedSource)
+            return undefined;
+        const normalizedTarget = normalizeVaultTargetPath(mount.target);
+        return {
+            source: join(dir, normalizedSource),
+            target: normalizedTarget ?? defaultVaultTargetPath(normalizedSource),
+        };
+    }
+}
+function ensurePrivateDir(path) {
+    mkdirSync(path, { recursive: true, mode: PRIVATE_DIR_MODE });
+    chmodSync(path, PRIVATE_DIR_MODE);
+}
+/**
+ * Write `content` to `targetPath` with mode 0600, even when `targetPath`
+ * already exists. Uses O_CREAT|O_EXCL on a temp sibling (so the kernel
+ * guarantees permissions at creation, not after a racy chmod) and then
+ * rename(2) into place for atomicity. Readers never see a torn write.
+ */
+function atomicWritePrivateFile(targetPath, content) {
+    const dir = dirname(targetPath);
+    const tmpPath = join(dir, `.${basename(targetPath)}.${process.pid}.${randomBytes(8).toString("hex")}.tmp`);
+    const fd = openSync(tmpPath, fsConstants.O_WRONLY | fsConstants.O_CREAT | fsConstants.O_EXCL, PRIVATE_FILE_MODE);
+    try {
+        writeSync(fd, content);
+    }
+    catch (err) {
+        try {
+            unlinkSync(tmpPath);
+        }
+        catch {
+            // ignore — original error is more informative
+        }
+        throw err;
+    }
+    finally {
+        closeSync(fd);
+    }
+    try {
+        renameSync(tmpPath, targetPath);
+    }
+    catch (err) {
+        try {
+            unlinkSync(tmpPath);
+        }
+        catch {
+            // ignore
+        }
+        throw err;
+    }
+}
+function normalizeVaultRelativePath(relativePath) {
+    const trimmed = relativePath.trim();
+    if (!trimmed || isAbsolute(trimmed))
+        return undefined;
+    const normalized = normalize(trimmed).split(sep).join("/");
+    if (!normalized || normalized === "." || normalized === ".." || normalized.startsWith("../")) {
+        return undefined;
+    }
+    return normalized;
+}
+function normalizeVaultTargetPath(targetPath) {
+    if (targetPath === undefined) {
+        return undefined;
+    }
+    const trimmed = targetPath.trim();
+    if (!trimmed || !trimmed.startsWith("/")) {
+        return undefined;
+    }
+    const normalized = normalize(trimmed).split(sep).join("/");
+    return normalized.startsWith("/") ? normalized : undefined;
+}
+export function defaultVaultTargetPath(relativePath) {
+    const normalized = normalizeVaultRelativePath(relativePath) ?? relativePath.replace(/^\/+/, "");
+    return `/root/${normalized}`;
+}
+//# sourceMappingURL=vault.js.map

package/dist/vault.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"vault.js","sourceRoot":"","sources":["../src/vault.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,SAAS,EACT,SAAS,EACT,SAAS,IAAI,WAAW,EACxB,UAAU,EACV,SAAS,EACT,QAAQ,EACR,YAAY,EACZ,UAAU,EACV,UAAU,EACV,SAAS,GACV,MAAM,IAAI,CAAC;AACZ,OAAO,EAAE,WAAW,EAAE,MAAM,QAAQ,CAAC;AACrC,OAAO,EAAE,QAAQ,EAAE,OAAO,EAAE,UAAU,EAAE,IAAI,EAAE,SAAS,EAAE,GAAG,EAAE,MAAM,MAAM,CAAC;AAG3E,MAAM,gBAAgB,GAAG,KAAK,CAAC;AAC/B,MAAM,iBAAiB,GAAG,KAAK,CAAC;AAiFhC,kFAAkF;AAElF;;;;;;;GAOG;AACH,MAAM,UAAU,YAAY,CAAC,OAAe;IAC1C,MAAM,GAAG,GAA2B,EAAE,CAAC;IACvC,MAAM,KAAK,GAAG,OAAO,CAAC,OAAO,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC,OAAO,CAAC,KAAK,EAAE,IAAI,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;IAE9E,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;QACzB,MAAM,OAAO,GAAG,IAAI,CAAC,IAAI,EAAE,CAAC;QAC5B,IAAI,CAAC,OAAO,IAAI,OAAO,CAAC,UAAU,CAAC,GAAG,CAAC;YAAE,SAAS;QAElD,MAAM,OAAO,GAAG,OAAO,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;QACrC,IAAI,OAAO,KAAK,CAAC,CAAC;YAAE,SAAS;QAE7B,MAAM,GAAG,GAAG,OAAO,CAAC,KAAK,CAAC,CAAC,EAAE,OAAO,CAAC,CAAC,IAAI,EAAE,CAAC;QAC7C,IAAI,CAAC,GAAG;YAAE,SAAS;QAEnB,IAAI,KAAK,GAAG,OAAO,CAAC,KAAK,CAAC,OAAO,GAAG,CAAC,CAAC,CAAC;QAEvC,wBAAwB;QACxB,IACE,CAAC,KAAK,CAAC,UAAU,CAAC,GAAG,CAAC,IAAI,KAAK,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC;YAC9C,CAAC,KAAK,CAAC,UAAU,CAAC,GAAG,CAAC,IAAI,KAAK,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,EAC9C,CAAC;YACD,KAAK,GAAG,KAAK,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC;QAC7B,CAAC;QAED,GAAG,CAAC,GAAG,CAAC,GAAG,KAAK,CAAC;IACnB,CAAC;IAED,OAAO,GAAG,CAAC;AACb,CAAC;AAED,kFAAkF;AAElF,MAAM,OAAO,gBAAgB;IAK3B,YAAY,QAAgB;QAJpB,WAAM,GAAuB,IAAI,CAAC;QAKxC,IAAI,CAAC,SAAS,GAAG,IAAI,CAAC,QAAQ,EAAE,QAAQ,CAAC,CAAC;QAC1C,IAAI,CAAC,UAAU,GAAG,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,YAAY,CAAC,CAAC;QACrD,IAAI,CAAC,MAAM,EAAE,CAAC;IAChB,CAAC;IAED,MAAM;QACJ,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,UAAU,CAAC,EAAE,CAAC;YACjC,IAAI,CAAC,MAAM,GAAG,IAAI,CAAC;YACnB,OAAO;QACT,CAAC;QAED,IAAI,CAAC;YACH,MAAM,GAAG,GAAG,YAAY,CAAC,IAAI,CAAC,UAAU,EAAE,OAAO,CAAC,CAAC;YACnD,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;YAE/B,IACE,CAAC,MAAM;gBACP,OAAO,MAAM,KAAK,QAAQ;gBAC1B,CAAC,MAAM,CAAC,MAAM;gBACd,OAAO,MAAM,CAAC,MAAM,KAAK,QAAQ,EACjC,CAAC;gBACD,OAAO,CAAC,KAAK,CAAC,4DAA4D,CAAC,CAAC;gBAC5E,IAAI,CAAC,MAAM,GAAG,IAAI,CAAC;gBACnB,OAAO;YACT,CAAC;YAED,IAAI,CAAC,MAAM,GAAG,MAAqB,CAAC;YACpC,IAAI,CAAC,2BAA2B,EAAE,CAAC;QACrC,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,OAAO,CAAC,KAAK,CAAC,yBAAyB,IAAI,CAAC,UAAU,GAAG,EAAE,GAAG,CAAC,CAAC;YAChE,IAAI,CAAC,MAAM,GAAG,IAAI,CAAC;QACrB,CAAC;IACH,CAAC;IAED,sFAAsF;IAC9E,2BAA2B;QACjC,IAAI,CAAC,IAAI,CAAC,MAAM;YAAE,OAAO;QACzB,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,EAAE,CAAC;YAC9D,IAAI,KAAK,CAAC,OAAO,EAAE,IAAI,KAAK,MAAM,EAAE,CAAC;gBACnC,OAAO,CAAC,KAAK,CACX,WAAW,GAAG,uEAAuE;oBACnF,qDAAqD,CACxD,CAAC;YACJ,CAAC;YACD,IAAI,KAAK,CAAC,OAAO,EAAE,IAAI,KAAK,WAAW,IAAI,KAAK,CAAC,OAAO,EAAE,IAAI,KAAK,QAAQ,EAAE,CAAC;gBAC5E,OAAO,CAAC,KAAK,CACX,WAAW,GAAG,uBAAuB,KAAK,CAAC,OAAO,CAAC,IAAI,+CAA+C;oBACpG,6EAA6E,CAChF,CAAC;YACJ,CAAC;QACH,CAAC;IACH,CAAC;IAED,SAAS;QACP,OAAO,IAAI,CAAC,MAAM,KAAK,IAAI,CAAC;IAC9B,CAAC;IAED,QAAQ,CAAC,GAAW;QAClB,OAAO,CAAC,CAAC,IAAI,CAAC,MAAM,EAAE,MAAM,CAAC,GAAG,CAAC,CAAC;IACpC,CAAC;IAED,OAAO,CAAC,MAAc;QACpB,MAAM,KAAK,GAAG,IAAI,CAAC,MAAM,EAAE,MAAM,CAAC,MAAM,CAAC,CAAC;QAC1C,IAAI,CAAC,KAAK;YAAE,OAAO,SAAS,CAAC;QAC7B,OAAO,IAAI,CAAC,aAAa,CAAC,MAAM,EAAE,KAAK,CAAC,CAAC;IAC3C,CAAC;IAED,gBAAgB,CAAC,MAAc,EAAE,UAAyB;QACxD,MAAM,KAAK,GAAG,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;QACnC,IAAI,CAAC,KAAK,EAAE,eAAe;YAAE,OAAO,UAAU,CAAC;QAE/C,MAAM,QAAQ,GAAG,KAAK,CAAC,eAAe,CAAC;QAEvC,IAAI,QAAQ,CAAC,IAAI,KAAK,OAAO,EAAE,CAAC;YAC9B,IAAI,UAAU,CAAC,IAAI,KAAK,OAAO,EAAE,CAAC;gBAChC,MAAM,IAAI,KAAK,CACb,UAAU,MAAM,mDAAmD,UAAU,CAAC,IAAI,KAAK;oBACrF,oEAAoE,CACvE,CAAC;YACJ,CAAC;YACD,MAAM,SAAS,GAAG,QAAQ,CAAC,SAAS,IAAI,gBAAgB,MAAM,EAAE,CAAC;YACjE,OAAO,EAAE,IAAI,EAAE,WAAW,EAAE,SAAS,EAAE,CAAC;QAC1C,CAAC;QAED,IAAI,QAAQ,CAAC,IAAI,KAAK,aAAa,EAAE,CAAC;YACpC,IAAI,CAAC,QAAQ,CAAC,IAAI;gBAAE,OAAO,UAAU,CAAC;YACtC,IAAI,UAAU,CAAC,IAAI,KAAK,aAAa,EAAE,CAAC;gBACtC,MAAM,IAAI,KAAK,CACb,UAAU,MAAM,yDAAyD,UAAU,CAAC,IAAI,KAAK;oBAC3F,iGAAiG,CACpG,CAAC;YACJ,CAAC;YACD,OAAO;gBACL,IAAI,EAAE,aAAa;gBACnB,IAAI,EAAE,QAAQ,CAAC,IAAI;gBACnB,QAAQ,EAAE,UAAU,CAAC,QAAQ;gBAC7B,OAAO,EAAE,QAAQ,CAAC,OAAO;gBACzB,OAAO,EAAE,QAAQ,CAAC,OAAO;aAC1B,CAAC;QACJ,CAAC;QAED,IAAI,QAAQ,CAAC,IAAI,KAAK,MAAM,EAAE,CAAC;YAC7B,MAAM,IAAI,KAAK,CACb,UAAU,MAAM,uEAAuE;gBACrF,qDAAqD,CACxD,CAAC;QACJ,CAAC;QAED,IAAI,QAAQ,CAAC,IAAI,KAAK,WAAW,IAAI,QAAQ,CAAC,IAAI,KAAK,QAAQ,EAAE,CAAC;YAChE,MAAM,IAAI,KAAK,CACb,UAAU,MAAM,uBAAuB,QAAQ,CAAC,IAAI,+CAA+C;gBACjG,6EAA6E,CAChF,CAAC;QACJ,CAAC;QAED,kDAAkD;QAClD,OAAO,UAAU,CAAC;IACpB,CAAC;IAED,IAAI;QACF,IAAI,CAAC,IAAI,CAAC,MAAM;YAAE,OAAO,EAAE,CAAC;QAE5B,MAAM,OAAO,GAAoB,EAAE,CAAC;QACpC,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,EAAE,CAAC;YAC9D,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,aAAa,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC,CAAC;QAC/C,CAAC;QACD,OAAO,OAAO,CAAC;IACjB,CAAC;IAED,QAAQ,CAAC,GAAW,EAAE,KAAiB;QACrC,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,CAAC;YACjB,IAAI,CAAC,MAAM,GAAG,EAAE,MAAM,EAAE,EAAE,EAAE,CAAC;QAC/B,CAAC;QACD,qCAAqC;QACrC,IAAI,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,GAAG,CAAC;YAAE,OAAO;QACpC,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,GAAG,CAAC,GAAG,KAAK,CAAC;QAChC,IAAI,CAAC,aAAa,EAAE,CAAC;IACvB,CAAC;IAED,uBAAuB,CAAC,GAAW,EAAE,KAAiB;QACpD,IAAI,KAAK,CAAC,OAAO,EAAE,IAAI,KAAK,OAAO,EAAE,CAAC;YACpC,MAAM,IAAI,KAAK,CAAC,mEAAmE,GAAG,GAAG,CAAC,CAAC;QAC7F,CAAC;QAED,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,CAAC;YACjB,IAAI,CAAC,MAAM,GAAG,EAAE,MAAM,EAAE,EAAE,EAAE,CAAC;QAC/B,CAAC;QAED,MAAM,QAAQ,GAAG,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;QACzC,IAAI,CAAC,QAAQ,EAAE,CAAC;YACd,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,GAAG,CAAC,GAAG,KAAK,CAAC;YAChC,IAAI,CAAC,aAAa,EAAE,CAAC;YACrB,OAAO;QACT,CAAC;QAED,IAAI,SAAS,GAAG,QAAQ,CAAC;QACzB,IAAI,OAAO,GAAG,KAAK,CAAC;QAEpB,IAAI,CAAC,QAAQ,CAAC,QAAQ,IAAI,KAAK,CAAC,QAAQ,EAAE,CAAC;YACzC,SAAS,GAAG,EAAE,GAAG,SAAS,EAAE,QAAQ,EAAE,KAAK,CAAC,QAAQ,EAAE,CAAC;YACvD,OAAO,GAAG,IAAI,CAAC;QACjB,CAAC;QAED,MAAM,eAAe,GAAG,QAAQ,CAAC,OAAO,CAAC;QACzC,IAAI,CAAC,eAAe,EAAE,IAAI,EAAE,CAAC;YAC3B,SAAS,GAAG,EAAE,GAAG,SAAS,EAAE,OAAO,EAAE,KAAK,CAAC,OAAO,EAAE,CAAC;YACrD,OAAO,GAAG,IAAI,CAAC;QACjB,CAAC;aAAM,IACL,eAAe,CAAC,IAAI,KAAK,OAAO;YAChC,CAAC,eAAe,CAAC,SAAS;YAC1B,KAAK,CAAC,OAAO,CAAC,SAAS,EACvB,CAAC;YACD,SAAS,GAAG;gBACV,GAAG,SAAS;gBACZ,OAAO,EAAE,EAAE,GAAG,eAAe,EAAE,SAAS,EAAE,KAAK,CAAC,OAAO,CAAC,SAAS,EAAE;aACpE,CAAC;YACF,OAAO,GAAG,IAAI,CAAC;QACjB,CAAC;QAED,IAAI,CAAC,OAAO,EAAE,CAAC;YACb,OAAO;QACT,CAAC;QAED,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,GAAG,CAAC,GAAG,SAAS,CAAC;QACpC,IAAI,CAAC,aAAa,EAAE,CAAC;IACvB,CAAC;IAED,SAAS,CAAC,GAAW,EAAE,GAA2B;QAChD,MAAM,GAAG,GAAG,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,GAAG,CAAC,CAAC;QACtC,MAAM,OAAO,GAAG,IAAI,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC;QACjC,gBAAgB,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;QACjC,gBAAgB,CAAC,GAAG,CAAC,CAAC;QACtB,MAAM,QAAQ,GAAG,UAAU,CAAC,OAAO,CAAC;YAClC,CAAC,CAAC,YAAY,CAAC,YAAY,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;YAC9C,CAAC,CAAE,EAA6B,CAAC;QACnC,MAAM,MAAM,GAAG,EAAE,GAAG,QAAQ,EAAE,GAAG,GAAG,EAAE,CAAC;QACvC,MAAM,OAAO,GACX,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC;aACnB,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC,KAAK,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC,aAAa,CAAC,KAAK,CAAC,CAAC;aACpD,GAAG,CAAC,CAAC,CAAC,MAAM,EAAE,KAAK,CAAC,EAAE,EAAE,CAAC,GAAG,MAAM,IAAI,KAAK,EAAE,CAAC;aAC9C,IAAI,CAAC,IAAI,CAAC,GAAG,IAAI,CAAC;QACvB,sBAAsB,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;IAC3C,CAAC;IAED,UAAU,CAAC,GAAW,EAAE,YAAoB,EAAE,OAAe,EAAE,UAAmB;QAChF,MAAM,cAAc,GAAG,0BAA0B,CAAC,YAAY,CAAC,CAAC;QAChE,MAAM,gBAAgB,GAAG,wBAAwB,CAAC,UAAU,CAAC,CAAC;QAC9D,IAAI,CAAC,cAAc,IAAI,CAAC,UAAU,KAAK,SAAS,IAAI,CAAC,gBAAgB,CAAC,EAAE,CAAC;YACvE,MAAM,IAAI,KAAK,CAAC,iDAAiD,GAAG,MAAM,YAAY,EAAE,CAAC,CAAC;QAC5F,CAAC;QAED,MAAM,GAAG,GAAG,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,GAAG,CAAC,CAAC;QACtC,MAAM,QAAQ,GAAG,IAAI,CAAC,GAAG,EAAE,cAAc,CAAC,CAAC;QAE3C,gBAAgB,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;QACjC,gBAAgB,CAAC,GAAG,CAAC,CAAC;QACtB,MAAM,SAAS,GAAG,OAAO,CAAC,QAAQ,CAAC,CAAC;QACpC,IAAI,SAAS,KAAK,GAAG;YAAE,gBAAgB,CAAC,SAAS,CAAC,CAAC;QACnD,sBAAsB,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC;QAC1C,IAAI,CAAC,gBAAgB,CAAC,GAAG,EAAE,cAAc,EAAE,gBAAgB,CAAC,CAAC;IAC/D,CAAC;IAED,8EAA8E;IAEtE,aAAa;QACnB,gBAAgB,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;QAEjC,yEAAyE;QACzE,yEAAyE;QACzE,wEAAwE;QACxE,gEAAgE;QAChE,MAAM,MAAM,GAAG,IAAI,CAAC,kBAAkB,EAAE,CAAC;QACzC,IAAI,MAAM,IAAI,IAAI,CAAC,MAAM,EAAE,CAAC;YAC1B,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,MAAM,CAAC,EAAE,CAAC;gBACzD,IAAI,CAAC,CAAC,GAAG,IAAI,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,EAAE,CAAC;oBACjC,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,GAAG,CAAC,GAAG,KAAK,CAAC;gBAClC,CAAC;YACH,CAAC;QACH,CAAC;QAED,sBAAsB,CAAC,IAAI,CAAC,UAAU,EAAE,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC,GAAG,IAAI,CAAC,CAAC;IACvF,CAAC;IAEO,kBAAkB;QACxB,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,UAAU,CAAC;YAAE,OAAO,IAAI,CAAC;QAC9C,IAAI,CAAC;YACH,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,IAAI,CAAC,UAAU,EAAE,OAAO,CAAC,CAAC,CAAC;YAClE,IACE,CAAC,MAAM;gBACP,OAAO,MAAM,KAAK,QAAQ;gBAC1B,CAAC,MAAM,CAAC,MAAM;gBACd,OAAO,MAAM,CAAC,MAAM,KAAK,QAAQ,EACjC,CAAC;gBACD,OAAO,IAAI,CAAC;YACd,CAAC;YACD,OAAO,MAAqB,CAAC;QAC/B,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,IAAI,CAAC;QACd,CAAC;IACH,CAAC;IAEO,gBAAgB,CAAC,GAAW,EAAE,YAAoB,EAAE,UAAmB;QAC7E,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC;YAC9B,MAAM,IAAI,KAAK,CAAC,4BAA4B,YAAY,wBAAwB,GAAG,GAAG,CAAC,CAAC;QAC1F,CAAC;QAED,MAAM,QAAQ,GAAG,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;QACzC,MAAM,MAAM,GAAG,QAAQ,CAAC,MAAM,IAAI,EAAE,CAAC;QACrC,IACE,MAAM,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE,CACpB,OAAO,KAAK,KAAK,QAAQ;YACvB,CAAC,CAAC,KAAK,KAAK,YAAY,IAAI,CAAC,UAAU;YACvC,CAAC,CAAC,KAAK,CAAC,MAAM,KAAK,YAAY,IAAI,KAAK,CAAC,MAAM,KAAK,UAAU,CACjE,EACD,CAAC;YACD,OAAO;QACT,CAAC;QAED,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,GAAG,CAAC,GAAG;YACxB,GAAG,QAAQ;YACX,MAAM,EAAE,CAAC,GAAG,MAAM,EAAE,UAAU,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,YAAY,EAAE,MAAM,EAAE,UAAU,EAAE,CAAC,CAAC,CAAC,YAAY,CAAC;SAC9F,CAAC;QACF,IAAI,CAAC,aAAa,EAAE,CAAC;IACvB,CAAC;IAEO,aAAa,CAAC,GAAW,EAAE,KAAiB;QAClD,MAAM,GAAG,GAAG,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,GAAG,CAAC,CAAC;QAEtC,MAAM,MAAM,GAAG,CAAC,KAAK,CAAC,MAAM,IAAI,EAAE,CAAC;aAChC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,IAAI,CAAC,iBAAiB,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC;aAClD,MAAM,CAAC,CAAC,KAAK,EAA+B,EAAE,CAAC,KAAK,KAAK,SAAS,CAAC,CAAC;QAEvE,IAAI,GAAG,GAA2B,EAAE,CAAC;QACrC,MAAM,OAAO,GAAG,IAAI,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC;QACjC,IAAI,KAAK,CAAC,OAAO,KAAK,KAAK,IAAI,UAAU,CAAC,OAAO,CAAC,EAAE,CAAC;YACnD,IAAI,CAAC;gBACH,GAAG,GAAG,YAAY,CAAC,YAAY,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC,CAAC;YACrD,CAAC;YAAC,OAAO,GAAG,EAAE,CAAC;gBACb,OAAO,CAAC,KAAK,CAAC,wCAAwC,GAAG,IAAI,EAAE,GAAG,CAAC,CAAC;YACtE,CAAC;QACH,CAAC;QAED,OAAO;YACL,MAAM,EAAE,GAAG;YACX,WAAW,EAAE,KAAK,CAAC,WAAW;YAC9B,GAAG;YACH,MAAM;YACN,GAAG;YACH,eAAe,EAAE,KAAK,CAAC,OAAO;SAC/B,CAAC;IACJ,CAAC;IAEO,iBAAiB,CACvB,GAAW,EACX,KAA+B;QAE/B,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;YAC9B,MAAM,gBAAgB,GAAG,0BAA0B,CAAC,KAAK,CAAC,CAAC;YAC3D,IAAI,CAAC,gBAAgB;gBAAE,OAAO,SAAS,CAAC;YACxC,OAAO;gBACL,MAAM,EAAE,IAAI,CAAC,GAAG,EAAE,gBAAgB,CAAC;gBACnC,MAAM,EAAE,sBAAsB,CAAC,gBAAgB,CAAC;aACjD,CAAC;QACJ,CAAC;QAED,IAAI,CAAC,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ;YAAE,OAAO,SAAS,CAAC;QAC1D,MAAM,gBAAgB,GAAG,0BAA0B,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;QAClE,IAAI,CAAC,gBAAgB;YAAE,OAAO,SAAS,CAAC;QACxC,MAAM,gBAAgB,GAAG,wBAAwB,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;QAChE,OAAO;YACL,MAAM,EAAE,IAAI,CAAC,GAAG,EAAE,gBAAgB,CAAC;YACnC,MAAM,EAAE,gBAAgB,IAAI,sBAAsB,CAAC,gBAAgB,CAAC;SACrE,CAAC;IACJ,CAAC;CACF;AAED,SAAS,gBAAgB,CAAC,IAAY;IACpC,SAAS,CAAC,IAAI,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,IAAI,EAAE,gBAAgB,EAAE,CAAC,CAAC;IAC7D,SAAS,CAAC,IAAI,EAAE,gBAAgB,CAAC,CAAC;AACpC,CAAC;AAED;;;;;GAKG;AACH,SAAS,sBAAsB,CAAC,UAAkB,EAAE,OAAe;IACjE,MAAM,GAAG,GAAG,OAAO,CAAC,UAAU,CAAC,CAAC;IAChC,MAAM,OAAO,GAAG,IAAI,CAClB,GAAG,EACH,IAAI,QAAQ,CAAC,UAAU,CAAC,IAAI,OAAO,CAAC,GAAG,IAAI,WAAW,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,MAAM,CAChF,CAAC;IACF,MAAM,EAAE,GAAG,QAAQ,CACjB,OAAO,EACP,WAAW,CAAC,QAAQ,GAAG,WAAW,CAAC,OAAO,GAAG,WAAW,CAAC,MAAM,EAC/D,iBAAiB,CAClB,CAAC;IACF,IAAI,CAAC;QACH,SAAS,CAAC,EAAE,EAAE,OAAO,CAAC,CAAC;IACzB,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,IAAI,CAAC;YACH,UAAU,CAAC,OAAO,CAAC,CAAC;QACtB,CAAC;QAAC,MAAM,CAAC;YACP,8CAA8C;QAChD,CAAC;QACD,MAAM,GAAG,CAAC;IACZ,CAAC;YAAS,CAAC;QACT,SAAS,CAAC,EAAE,CAAC,CAAC;IAChB,CAAC;IACD,IAAI,CAAC;QACH,UAAU,CAAC,OAAO,EAAE,UAAU,CAAC,CAAC;IAClC,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,IAAI,CAAC;YACH,UAAU,CAAC,OAAO,CAAC,CAAC;QACtB,CAAC;QAAC,MAAM,CAAC;YACP,SAAS;QACX,CAAC;QACD,MAAM,GAAG,CAAC;IACZ,CAAC;AACH,CAAC;AAED,SAAS,0BAA0B,CAAC,YAAoB;IACtD,MAAM,OAAO,GAAG,YAAY,CAAC,IAAI,EAAE,CAAC;IACpC,IAAI,CAAC,OAAO,IAAI,UAAU,CAAC,OAAO,CAAC;QAAE,OAAO,SAAS,CAAC;IAEtD,MAAM,UAAU,GAAG,SAAS,CAAC,OAAO,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IAC3D,IAAI,CAAC,UAAU,IAAI,UAAU,KAAK,GAAG,IAAI,UAAU,KAAK,IAAI,IAAI,UAAU,CAAC,UAAU,CAAC,KAAK,CAAC,EAAE,CAAC;QAC7F,OAAO,SAAS,CAAC;IACnB,CAAC;IACD,OAAO,UAAU,CAAC;AACpB,CAAC;AAED,SAAS,wBAAwB,CAAC,UAAmB;IACnD,IAAI,UAAU,KAAK,SAAS,EAAE,CAAC;QAC7B,OAAO,SAAS,CAAC;IACnB,CAAC;IAED,MAAM,OAAO,GAAG,UAAU,CAAC,IAAI,EAAE,CAAC;IAClC,IAAI,CAAC,OAAO,IAAI,CAAC,OAAO,CAAC,UAAU,CAAC,GAAG,CAAC,EAAE,CAAC;QACzC,OAAO,SAAS,CAAC;IACnB,CAAC;IAED,MAAM,UAAU,GAAG,SAAS,CAAC,OAAO,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IAC3D,OAAO,UAAU,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,SAAS,CAAC;AAC7D,CAAC;AAED,MAAM,UAAU,sBAAsB,CAAC,YAAoB;IACzD,MAAM,UAAU,GAAG,0BAA0B,CAAC,YAAY,CAAC,IAAI,YAAY,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;IAChG,OAAO,SAAS,UAAU,EAAE,CAAC;AAC/B,CAAC","sourcesContent":["import {\n  chmodSync,\n  closeSync,\n  constants as fsConstants,\n  existsSync,\n  mkdirSync,\n  openSync,\n  readFileSync,\n  renameSync,\n  unlinkSync,\n  writeSync,\n} from \"fs\";\nimport { randomBytes } from \"crypto\";\nimport { basename, dirname, isAbsolute, join, normalize, sep } from \"path\";\nimport type { SandboxConfig } from \"./sandbox.js\";\n\nconst PRIVATE_DIR_MODE = 0o700;\nconst PRIVATE_FILE_MODE = 0o600;\n\n// ── Types ──────────────────────────────────────────────────────────────────────\n\n/** Shape of workspace/vaults/vault.json */\nexport interface VaultConfig {\n  vaults: Record<string, VaultEntry>;\n}\n\n/** Per-user vault mount entry in vault.json */\nexport interface VaultMountEntry {\n  source: string;\n  target?: string;\n}\n\n/** Per-user vault entry in vault.json */\nexport interface VaultEntry {\n  displayName: string;\n  platform?: \"slack\" | \"discord\" | \"telegram\";\n  /** Subdirs/files in vault dir to mount into sandbox (e.g. [\".gcloud\", \".ssh\", \".kube\"]) */\n  mounts?: Array<string | VaultMountEntry>;\n  /** Whether to load env file as environment variables (default: true if env file exists) */\n  envFile?: boolean;\n  /** Per-user sandbox config override */\n  sandbox?: {\n    type?: \"image\" | \"firecracker\" | \"host\" | \"container\" | \"docker\";\n    container?: string;\n    image?: string;\n    vmId?: string;\n    sshUser?: string;\n    sshPort?: number;\n  };\n}\n\nexport interface ResolvedVaultMount {\n  source: string;\n  target: string;\n}\n\n/** Resolved vault ready for use at runtime */\nexport interface ResolvedVault {\n  userId: string;\n  displayName: string;\n  /** Absolute path to vault directory */\n  dir: string;\n  /** Absolute mount specs */\n  mounts: ResolvedVaultMount[];\n  /** Parsed from env file */\n  env: Record<string, string>;\n  sandboxOverride?: VaultEntry[\"sandbox\"];\n}\n\nexport interface VaultManager {\n  /** Return true when vault.json contains this exact key. */\n  hasEntry(key: string): boolean;\n  /** Resolve vault for a user; returns undefined when no entry exists. */\n  resolve(userId: string): ResolvedVault | undefined;\n  /** Get sandbox config with credential injection for a user */\n  getSandboxConfig(userId: string, baseConfig: SandboxConfig): SandboxConfig;\n  /** List all configured vaults */\n  list(): ResolvedVault[];\n  /** Re-read vault.json without restart */\n  reload(): void;\n  /** Check if vault system is enabled (vault.json exists) */\n  isEnabled(): boolean;\n  /**\n   * Add a vault entry and persist to disk.\n   * No-op if the key already exists (idempotent).\n   */\n  addEntry(key: string, entry: VaultEntry): void;\n  /**\n   * Ensure a vault entry has image sandbox metadata.\n   * Creates the entry when missing and upgrades existing entries that lack sandbox.type.\n   */\n  ensureImageSandboxEntry(key: string, entry: VaultEntry): void;\n  /** Merge environment variables into vaults/<key>/env and persist them to disk. */\n  upsertEnv(key: string, env: Record<string, string>): void;\n  /** Write a private file into vaults/<key>/ and ensure it is mounted into the sandbox. */\n  upsertFile(key: string, relativePath: string, content: string, targetPath?: string): void;\n}\n\n// ── parseEnvFile ───────────────────────────────────────────────────────────────\n\n/**\n * Parse a KEY=VALUE env file. Supports:\n * - Lines starting with # are comments\n * - Empty lines are skipped\n * - Values can be quoted with single or double quotes (quotes are stripped)\n * - No variable expansion\n * - The value is everything after the first `=` to end of line (no inline comments)\n */\nexport function parseEnvFile(content: string): Record<string, string> {\n  const env: Record<string, string> = {};\n  const lines = content.replace(/\\r\\n/g, \"\\n\").replace(/\\r/g, \"\\n\").split(\"\\n\");\n\n  for (const line of lines) {\n    const trimmed = line.trim();\n    if (!trimmed || trimmed.startsWith(\"#\")) continue;\n\n    const eqIndex = trimmed.indexOf(\"=\");\n    if (eqIndex === -1) continue;\n\n    const key = trimmed.slice(0, eqIndex).trim();\n    if (!key) continue;\n\n    let value = trimmed.slice(eqIndex + 1);\n\n    // Strip matching quotes\n    if (\n      (value.startsWith('\"') && value.endsWith('\"')) ||\n      (value.startsWith(\"'\") && value.endsWith(\"'\"))\n    ) {\n      value = value.slice(1, -1);\n    }\n\n    env[key] = value;\n  }\n\n  return env;\n}\n\n// ── FileVaultManager ───────────────────────────────────────────────────────────\n\nexport class FileVaultManager implements VaultManager {\n  private config: VaultConfig | null = null;\n  private readonly vaultsDir: string;\n  private readonly configPath: string;\n\n  constructor(stateDir: string) {\n    this.vaultsDir = join(stateDir, \"vaults\");\n    this.configPath = join(this.vaultsDir, \"vault.json\");\n    this.reload();\n  }\n\n  reload(): void {\n    if (!existsSync(this.configPath)) {\n      this.config = null;\n      return;\n    }\n\n    try {\n      const raw = readFileSync(this.configPath, \"utf-8\");\n      const parsed = JSON.parse(raw);\n\n      if (\n        !parsed ||\n        typeof parsed !== \"object\" ||\n        !parsed.vaults ||\n        typeof parsed.vaults !== \"object\"\n      ) {\n        console.error(`vault: malformed vault.json — expected { vaults: { ... } }`);\n        this.config = null;\n        return;\n      }\n\n      this.config = parsed as VaultConfig;\n      this.warnUnsupportedSandboxTypes();\n    } catch (err) {\n      console.error(`vault: failed to read ${this.configPath}:`, err);\n      this.config = null;\n    }\n  }\n\n  /** Warn for legacy or insecure vault sandbox overrides that are no longer allowed. */\n  private warnUnsupportedSandboxTypes(): void {\n    if (!this.config) return;\n    for (const [key, entry] of Object.entries(this.config.vaults)) {\n      if (entry.sandbox?.type === \"host\") {\n        console.error(\n          `vault: \"${key}\" uses sandbox.type=host, which is blocked for credential isolation. ` +\n            \"Use sandbox.type=image or sandbox.type=firecracker.\",\n        );\n      }\n      if (entry.sandbox?.type === \"container\" || entry.sandbox?.type === \"docker\") {\n        console.error(\n          `vault: \"${key}\" uses sandbox.type=${entry.sandbox.type}, which is blocked for credential isolation. ` +\n            \"Use sandbox.type=image for per-user containers or sandbox.type=firecracker.\",\n        );\n      }\n    }\n  }\n\n  isEnabled(): boolean {\n    return this.config !== null;\n  }\n\n  hasEntry(key: string): boolean {\n    return !!this.config?.vaults[key];\n  }\n\n  resolve(userId: string): ResolvedVault | undefined {\n    const entry = this.config?.vaults[userId];\n    if (!entry) return undefined;\n    return this.buildResolved(userId, entry);\n  }\n\n  getSandboxConfig(userId: string, baseConfig: SandboxConfig): SandboxConfig {\n    const vault = this.resolve(userId);\n    if (!vault?.sandboxOverride) return baseConfig;\n\n    const override = vault.sandboxOverride;\n\n    if (override.type === \"image\") {\n      if (baseConfig.type !== \"image\") {\n        throw new Error(\n          `vault \"${userId}\" sets sandbox.type=image, but base sandbox is \"${baseConfig.type}\". ` +\n            \"Use --sandbox=image:<image> to enable per-user managed containers.\",\n        );\n      }\n      const container = override.container || `mama-sandbox-${userId}`;\n      return { type: \"container\", container };\n    }\n\n    if (override.type === \"firecracker\") {\n      if (!override.vmId) return baseConfig;\n      if (baseConfig.type !== \"firecracker\") {\n        throw new Error(\n          `vault \"${userId}\" sets sandbox.type=firecracker, but base sandbox is \"${baseConfig.type}\". ` +\n            \"Use --sandbox=firecracker:<vm-id>:<host-path> so /workspace stays mapped to the real workspace.\",\n        );\n      }\n      return {\n        type: \"firecracker\",\n        vmId: override.vmId,\n        hostPath: baseConfig.hostPath,\n        sshUser: override.sshUser,\n        sshPort: override.sshPort,\n      };\n    }\n\n    if (override.type === \"host\") {\n      throw new Error(\n        `vault \"${userId}\" uses sandbox.type=host, which is blocked for credential isolation. ` +\n          \"Use sandbox.type=image or sandbox.type=firecracker.\",\n      );\n    }\n\n    if (override.type === \"container\" || override.type === \"docker\") {\n      throw new Error(\n        `vault \"${userId}\" uses sandbox.type=${override.type}, which is blocked for credential isolation. ` +\n          \"Use sandbox.type=image for per-user containers or sandbox.type=firecracker.\",\n      );\n    }\n\n    // No type override — return base config unchanged\n    return baseConfig;\n  }\n\n  list(): ResolvedVault[] {\n    if (!this.config) return [];\n\n    const results: ResolvedVault[] = [];\n    for (const [key, entry] of Object.entries(this.config.vaults)) {\n      results.push(this.buildResolved(key, entry));\n    }\n    return results;\n  }\n\n  addEntry(key: string, entry: VaultEntry): void {\n    if (!this.config) {\n      this.config = { vaults: {} };\n    }\n    // Idempotent: skip if already exists\n    if (this.config.vaults[key]) return;\n    this.config.vaults[key] = entry;\n    this.persistConfig();\n  }\n\n  ensureImageSandboxEntry(key: string, entry: VaultEntry): void {\n    if (entry.sandbox?.type !== \"image\") {\n      throw new Error(`vault: ensureImageSandboxEntry requires sandbox.type=image for \"${key}\"`);\n    }\n\n    if (!this.config) {\n      this.config = { vaults: {} };\n    }\n\n    const existing = this.config.vaults[key];\n    if (!existing) {\n      this.config.vaults[key] = entry;\n      this.persistConfig();\n      return;\n    }\n\n    let nextEntry = existing;\n    let changed = false;\n\n    if (!existing.platform && entry.platform) {\n      nextEntry = { ...nextEntry, platform: entry.platform };\n      changed = true;\n    }\n\n    const existingSandbox = existing.sandbox;\n    if (!existingSandbox?.type) {\n      nextEntry = { ...nextEntry, sandbox: entry.sandbox };\n      changed = true;\n    } else if (\n      existingSandbox.type === \"image\" &&\n      !existingSandbox.container &&\n      entry.sandbox.container\n    ) {\n      nextEntry = {\n        ...nextEntry,\n        sandbox: { ...existingSandbox, container: entry.sandbox.container },\n      };\n      changed = true;\n    }\n\n    if (!changed) {\n      return;\n    }\n\n    this.config.vaults[key] = nextEntry;\n    this.persistConfig();\n  }\n\n  upsertEnv(key: string, env: Record<string, string>): void {\n    const dir = join(this.vaultsDir, key);\n    const envPath = join(dir, \"env\");\n    ensurePrivateDir(this.vaultsDir);\n    ensurePrivateDir(dir);\n    const existing = existsSync(envPath)\n      ? parseEnvFile(readFileSync(envPath, \"utf-8\"))\n      : ({} as Record<string, string>);\n    const merged = { ...existing, ...env };\n    const content =\n      Object.entries(merged)\n        .sort(([left], [right]) => left.localeCompare(right))\n        .map(([envKey, value]) => `${envKey}=${value}`)\n        .join(\"\\n\") + \"\\n\";\n    atomicWritePrivateFile(envPath, content);\n  }\n\n  upsertFile(key: string, relativePath: string, content: string, targetPath?: string): void {\n    const normalizedPath = normalizeVaultRelativePath(relativePath);\n    const normalizedTarget = normalizeVaultTargetPath(targetPath);\n    if (!normalizedPath || (targetPath !== undefined && !normalizedTarget)) {\n      throw new Error(`vault: invalid relative secret file path for \"${key}\": ${relativePath}`);\n    }\n\n    const dir = join(this.vaultsDir, key);\n    const filePath = join(dir, normalizedPath);\n\n    ensurePrivateDir(this.vaultsDir);\n    ensurePrivateDir(dir);\n    const parentDir = dirname(filePath);\n    if (parentDir !== dir) ensurePrivateDir(parentDir);\n    atomicWritePrivateFile(filePath, content);\n    this.ensureMountEntry(key, normalizedPath, normalizedTarget);\n  }\n\n  // ── private ────────────────────────────────────────────────────────────────\n\n  private persistConfig(): void {\n    ensurePrivateDir(this.vaultsDir);\n\n    // Preserve concurrent external edits: pull in any entries that appear on\n    // disk but not in our in-memory view, so a background edit (e.g. another\n    // admin adding a user) is not silently dropped by the next upsert here.\n    // Individual field edits still follow last-writer-wins per key.\n    const onDisk = this.readConfigFromDisk();\n    if (onDisk && this.config) {\n      for (const [key, entry] of Object.entries(onDisk.vaults)) {\n        if (!(key in this.config.vaults)) {\n          this.config.vaults[key] = entry;\n        }\n      }\n    }\n\n    atomicWritePrivateFile(this.configPath, JSON.stringify(this.config, null, 2) + \"\\n\");\n  }\n\n  private readConfigFromDisk(): VaultConfig | null {\n    if (!existsSync(this.configPath)) return null;\n    try {\n      const parsed = JSON.parse(readFileSync(this.configPath, \"utf-8\"));\n      if (\n        !parsed ||\n        typeof parsed !== \"object\" ||\n        !parsed.vaults ||\n        typeof parsed.vaults !== \"object\"\n      ) {\n        return null;\n      }\n      return parsed as VaultConfig;\n    } catch {\n      return null;\n    }\n  }\n\n  private ensureMountEntry(key: string, relativePath: string, targetPath?: string): void {\n    if (!this.config?.vaults[key]) {\n      throw new Error(`vault: cannot add mount \"${relativePath}\" for missing entry \"${key}\"`);\n    }\n\n    const existing = this.config.vaults[key];\n    const mounts = existing.mounts ?? [];\n    if (\n      mounts.some((mount) =>\n        typeof mount === \"string\"\n          ? mount === relativePath && !targetPath\n          : mount.source === relativePath && mount.target === targetPath,\n      )\n    ) {\n      return;\n    }\n\n    this.config.vaults[key] = {\n      ...existing,\n      mounts: [...mounts, targetPath ? { source: relativePath, target: targetPath } : relativePath],\n    };\n    this.persistConfig();\n  }\n\n  private buildResolved(key: string, entry: VaultEntry): ResolvedVault {\n    const dir = join(this.vaultsDir, key);\n\n    const mounts = (entry.mounts ?? [])\n      .map((mount) => this.resolveMountEntry(dir, mount))\n      .filter((mount): mount is ResolvedVaultMount => mount !== undefined);\n\n    let env: Record<string, string> = {};\n    const envPath = join(dir, \"env\");\n    if (entry.envFile !== false && existsSync(envPath)) {\n      try {\n        env = parseEnvFile(readFileSync(envPath, \"utf-8\"));\n      } catch (err) {\n        console.error(`vault: failed to parse env file for \"${key}\":`, err);\n      }\n    }\n\n    return {\n      userId: key,\n      displayName: entry.displayName,\n      dir,\n      mounts,\n      env,\n      sandboxOverride: entry.sandbox,\n    };\n  }\n\n  private resolveMountEntry(\n    dir: string,\n    mount: string | VaultMountEntry,\n  ): ResolvedVaultMount | undefined {\n    if (typeof mount === \"string\") {\n      const normalizedSource = normalizeVaultRelativePath(mount);\n      if (!normalizedSource) return undefined;\n      return {\n        source: join(dir, normalizedSource),\n        target: defaultVaultTargetPath(normalizedSource),\n      };\n    }\n\n    if (!mount || typeof mount !== \"object\") return undefined;\n    const normalizedSource = normalizeVaultRelativePath(mount.source);\n    if (!normalizedSource) return undefined;\n    const normalizedTarget = normalizeVaultTargetPath(mount.target);\n    return {\n      source: join(dir, normalizedSource),\n      target: normalizedTarget ?? defaultVaultTargetPath(normalizedSource),\n    };\n  }\n}\n\nfunction ensurePrivateDir(path: string): void {\n  mkdirSync(path, { recursive: true, mode: PRIVATE_DIR_MODE });\n  chmodSync(path, PRIVATE_DIR_MODE);\n}\n\n/**\n * Write `content` to `targetPath` with mode 0600, even when `targetPath`\n * already exists. Uses O_CREAT|O_EXCL on a temp sibling (so the kernel\n * guarantees permissions at creation, not after a racy chmod) and then\n * rename(2) into place for atomicity. Readers never see a torn write.\n */\nfunction atomicWritePrivateFile(targetPath: string, content: string): void {\n  const dir = dirname(targetPath);\n  const tmpPath = join(\n    dir,\n    `.${basename(targetPath)}.${process.pid}.${randomBytes(8).toString(\"hex\")}.tmp`,\n  );\n  const fd = openSync(\n    tmpPath,\n    fsConstants.O_WRONLY | fsConstants.O_CREAT | fsConstants.O_EXCL,\n    PRIVATE_FILE_MODE,\n  );\n  try {\n    writeSync(fd, content);\n  } catch (err) {\n    try {\n      unlinkSync(tmpPath);\n    } catch {\n      // ignore — original error is more informative\n    }\n    throw err;\n  } finally {\n    closeSync(fd);\n  }\n  try {\n    renameSync(tmpPath, targetPath);\n  } catch (err) {\n    try {\n      unlinkSync(tmpPath);\n    } catch {\n      // ignore\n    }\n    throw err;\n  }\n}\n\nfunction normalizeVaultRelativePath(relativePath: string): string | undefined {\n  const trimmed = relativePath.trim();\n  if (!trimmed || isAbsolute(trimmed)) return undefined;\n\n  const normalized = normalize(trimmed).split(sep).join(\"/\");\n  if (!normalized || normalized === \".\" || normalized === \"..\" || normalized.startsWith(\"../\")) {\n    return undefined;\n  }\n  return normalized;\n}\n\nfunction normalizeVaultTargetPath(targetPath?: string): string | undefined {\n  if (targetPath === undefined) {\n    return undefined;\n  }\n\n  const trimmed = targetPath.trim();\n  if (!trimmed || !trimmed.startsWith(\"/\")) {\n    return undefined;\n  }\n\n  const normalized = normalize(trimmed).split(sep).join(\"/\");\n  return normalized.startsWith(\"/\") ? normalized : undefined;\n}\n\nexport function defaultVaultTargetPath(relativePath: string): string {\n  const normalized = normalizeVaultRelativePath(relativePath) ?? relativePath.replace(/^\\/+/, \"\");\n  return `/root/${normalized}`;\n}\n"]}

package/dist/vault.test.d.ts

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=vault.test.d.ts.map

package/dist/vault.test.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"vault.test.d.ts","sourceRoot":"","sources":["../src/vault.test.ts"],"names":[],"mappings":"","sourcesContent":["import { mkdirSync, mkdtempSync, rmSync, writeFileSync } from \"fs\";\nimport { tmpdir } from \"os\";\nimport { join } from \"path\";\nimport { afterEach, describe, expect, it } from \"vitest\";\nimport { FileVaultManager } from \"./vault.js\";\n\ndescribe(\"FileVaultManager\", () => {\n  const tempDirs: string[] = [];\n\n  afterEach(() => {\n    while (tempDirs.length > 0) {\n      rmSync(tempDirs.pop()!, { recursive: true, force: true });\n    }\n  });\n\n  function createStateDir(): string {\n    const dir = mkdtempSync(join(tmpdir(), \"mama-vault-test-\"));\n    tempDirs.push(dir);\n    return dir;\n  }\n\n  it(\"reuses the base firecracker workspace hostPath for user overrides\", () => {\n    const stateDir = createStateDir();\n    const vaultsDir = join(stateDir, \"vaults\");\n    mkdirSync(vaultsDir, { recursive: true, mode: 0o700 });\n    writeFileSync(\n      join(vaultsDir, \"vault.json\"),\n      JSON.stringify(\n        {\n          vaults: {\n            alice: {\n              displayName: \"Alice\",\n              sandbox: { type: \"firecracker\", vmId: \"alice-vm\", sshUser: \"root\", sshPort: 2222 },\n            },\n          },\n        },\n        null,\n        2,\n      ) + \"\\n\",\n      { encoding: \"utf-8\", mode: 0o600 },\n    );\n\n    const manager = new FileVaultManager(stateDir);\n    expect(\n      manager.getSandboxConfig(\"alice\", {\n        type: \"firecracker\",\n        vmId: \"shared-vm\",\n        hostPath: \"/real/workspace\",\n        sshUser: \"root\",\n        sshPort: 22,\n      }),\n    ).toEqual({\n      type: \"firecracker\",\n      vmId: \"alice-vm\",\n      hostPath: \"/real/workspace\",\n      sshUser: \"root\",\n      sshPort: 2222,\n    });\n  });\n\n  it(\"rejects firecracker overrides when the base sandbox is not firecracker\", () => {\n    const stateDir = createStateDir();\n    const vaultsDir = join(stateDir, \"vaults\");\n    mkdirSync(vaultsDir, { recursive: true, mode: 0o700 });\n    writeFileSync(\n      join(vaultsDir, \"vault.json\"),\n      JSON.stringify(\n        {\n          vaults: {\n            alice: {\n              displayName: \"Alice\",\n              sandbox: { type: \"firecracker\", vmId: \"alice-vm\" },\n            },\n          },\n        },\n        null,\n        2,\n      ) + \"\\n\",\n      { encoding: \"utf-8\", mode: 0o600 },\n    );\n\n    const manager = new FileVaultManager(stateDir);\n    expect(() =>\n      manager.getSandboxConfig(\"alice\", { type: \"image\", image: \"alpine:3.20\" }),\n    ).toThrow(/base sandbox is \"image\"/);\n  });\n\n  it(\"throws on invalid secret file paths instead of silently succeeding\", () => {\n    const stateDir = createStateDir();\n    const manager = new FileVaultManager(stateDir);\n    manager.addEntry(\"alice\", { displayName: \"Alice\" });\n\n    expect(() => manager.upsertFile(\"alice\", \"../credentials.txt\", \"secret\")).toThrow(\n      /invalid relative secret file path/,\n    );\n  });\n});\n"]}

package/dist/vault.test.js

@@ -0,0 +1,67 @@
+import { mkdirSync, mkdtempSync, rmSync, writeFileSync } from "fs";
+import { tmpdir } from "os";
+import { join } from "path";
+import { afterEach, describe, expect, it } from "vitest";
+import { FileVaultManager } from "./vault.js";
+describe("FileVaultManager", () => {
+    const tempDirs = [];
+    afterEach(() => {
+        while (tempDirs.length > 0) {
+            rmSync(tempDirs.pop(), { recursive: true, force: true });
+        }
+    });
+    function createStateDir() {
+        const dir = mkdtempSync(join(tmpdir(), "mama-vault-test-"));
+        tempDirs.push(dir);
+        return dir;
+    }
+    it("reuses the base firecracker workspace hostPath for user overrides", () => {
+        const stateDir = createStateDir();
+        const vaultsDir = join(stateDir, "vaults");
+        mkdirSync(vaultsDir, { recursive: true, mode: 0o700 });
+        writeFileSync(join(vaultsDir, "vault.json"), JSON.stringify({
+            vaults: {
+                alice: {
+                    displayName: "Alice",
+                    sandbox: { type: "firecracker", vmId: "alice-vm", sshUser: "root", sshPort: 2222 },
+                },
+            },
+        }, null, 2) + "\n", { encoding: "utf-8", mode: 0o600 });
+        const manager = new FileVaultManager(stateDir);
+        expect(manager.getSandboxConfig("alice", {
+            type: "firecracker",
+            vmId: "shared-vm",
+            hostPath: "/real/workspace",
+            sshUser: "root",
+            sshPort: 22,
+        })).toEqual({
+            type: "firecracker",
+            vmId: "alice-vm",
+            hostPath: "/real/workspace",
+            sshUser: "root",
+            sshPort: 2222,
+        });
+    });
+    it("rejects firecracker overrides when the base sandbox is not firecracker", () => {
+        const stateDir = createStateDir();
+        const vaultsDir = join(stateDir, "vaults");
+        mkdirSync(vaultsDir, { recursive: true, mode: 0o700 });
+        writeFileSync(join(vaultsDir, "vault.json"), JSON.stringify({
+            vaults: {
+                alice: {
+                    displayName: "Alice",
+                    sandbox: { type: "firecracker", vmId: "alice-vm" },
+                },
+            },
+        }, null, 2) + "\n", { encoding: "utf-8", mode: 0o600 });
+        const manager = new FileVaultManager(stateDir);
+        expect(() => manager.getSandboxConfig("alice", { type: "image", image: "alpine:3.20" })).toThrow(/base sandbox is "image"/);
+    });
+    it("throws on invalid secret file paths instead of silently succeeding", () => {
+        const stateDir = createStateDir();
+        const manager = new FileVaultManager(stateDir);
+        manager.addEntry("alice", { displayName: "Alice" });
+        expect(() => manager.upsertFile("alice", "../credentials.txt", "secret")).toThrow(/invalid relative secret file path/);
+    });
+});
+//# sourceMappingURL=vault.test.js.map

package/dist/vault.test.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"vault.test.js","sourceRoot":"","sources":["../src/vault.test.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,SAAS,EAAE,WAAW,EAAE,MAAM,EAAE,aAAa,EAAE,MAAM,IAAI,CAAC;AACnE,OAAO,EAAE,MAAM,EAAE,MAAM,IAAI,CAAC;AAC5B,OAAO,EAAE,IAAI,EAAE,MAAM,MAAM,CAAC;AAC5B,OAAO,EAAE,SAAS,EAAE,QAAQ,EAAE,MAAM,EAAE,EAAE,EAAE,MAAM,QAAQ,CAAC;AACzD,OAAO,EAAE,gBAAgB,EAAE,MAAM,YAAY,CAAC;AAE9C,QAAQ,CAAC,kBAAkB,EAAE,GAAG,EAAE;IAChC,MAAM,QAAQ,GAAa,EAAE,CAAC;IAE9B,SAAS,CAAC,GAAG,EAAE;QACb,OAAO,QAAQ,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YAC3B,MAAM,CAAC,QAAQ,CAAC,GAAG,EAAG,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;QAC5D,CAAC;IACH,CAAC,CAAC,CAAC;IAEH,SAAS,cAAc;QACrB,MAAM,GAAG,GAAG,WAAW,CAAC,IAAI,CAAC,MAAM,EAAE,EAAE,kBAAkB,CAAC,CAAC,CAAC;QAC5D,QAAQ,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QACnB,OAAO,GAAG,CAAC;IACb,CAAC;IAED,EAAE,CAAC,mEAAmE,EAAE,GAAG,EAAE;QAC3E,MAAM,QAAQ,GAAG,cAAc,EAAE,CAAC;QAClC,MAAM,SAAS,GAAG,IAAI,CAAC,QAAQ,EAAE,QAAQ,CAAC,CAAC;QAC3C,SAAS,CAAC,SAAS,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;QACvD,aAAa,CACX,IAAI,CAAC,SAAS,EAAE,YAAY,CAAC,EAC7B,IAAI,CAAC,SAAS,CACZ;YACE,MAAM,EAAE;gBACN,KAAK,EAAE;oBACL,WAAW,EAAE,OAAO;oBACpB,OAAO,EAAE,EAAE,IAAI,EAAE,aAAa,EAAE,IAAI,EAAE,UAAU,EAAE,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,IAAI,EAAE;iBACnF;aACF;SACF,EACD,IAAI,EACJ,CAAC,CACF,GAAG,IAAI,EACR,EAAE,QAAQ,EAAE,OAAO,EAAE,IAAI,EAAE,KAAK,EAAE,CACnC,CAAC;QAEF,MAAM,OAAO,GAAG,IAAI,gBAAgB,CAAC,QAAQ,CAAC,CAAC;QAC/C,MAAM,CACJ,OAAO,CAAC,gBAAgB,CAAC,OAAO,EAAE;YAChC,IAAI,EAAE,aAAa;YACnB,IAAI,EAAE,WAAW;YACjB,QAAQ,EAAE,iBAAiB;YAC3B,OAAO,EAAE,MAAM;YACf,OAAO,EAAE,EAAE;SACZ,CAAC,CACH,CAAC,OAAO,CAAC;YACR,IAAI,EAAE,aAAa;YACnB,IAAI,EAAE,UAAU;YAChB,QAAQ,EAAE,iBAAiB;YAC3B,OAAO,EAAE,MAAM;YACf,OAAO,EAAE,IAAI;SACd,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,wEAAwE,EAAE,GAAG,EAAE;QAChF,MAAM,QAAQ,GAAG,cAAc,EAAE,CAAC;QAClC,MAAM,SAAS,GAAG,IAAI,CAAC,QAAQ,EAAE,QAAQ,CAAC,CAAC;QAC3C,SAAS,CAAC,SAAS,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;QACvD,aAAa,CACX,IAAI,CAAC,SAAS,EAAE,YAAY,CAAC,EAC7B,IAAI,CAAC,SAAS,CACZ;YACE,MAAM,EAAE;gBACN,KAAK,EAAE;oBACL,WAAW,EAAE,OAAO;oBACpB,OAAO,EAAE,EAAE,IAAI,EAAE,aAAa,EAAE,IAAI,EAAE,UAAU,EAAE;iBACnD;aACF;SACF,EACD,IAAI,EACJ,CAAC,CACF,GAAG,IAAI,EACR,EAAE,QAAQ,EAAE,OAAO,EAAE,IAAI,EAAE,KAAK,EAAE,CACnC,CAAC;QAEF,MAAM,OAAO,GAAG,IAAI,gBAAgB,CAAC,QAAQ,CAAC,CAAC;QAC/C,MAAM,CAAC,GAAG,EAAE,CACV,OAAO,CAAC,gBAAgB,CAAC,OAAO,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,KAAK,EAAE,aAAa,EAAE,CAAC,CAC3E,CAAC,OAAO,CAAC,yBAAyB,CAAC,CAAC;IACvC,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,oEAAoE,EAAE,GAAG,EAAE;QAC5E,MAAM,QAAQ,GAAG,cAAc,EAAE,CAAC;QAClC,MAAM,OAAO,GAAG,IAAI,gBAAgB,CAAC,QAAQ,CAAC,CAAC;QAC/C,OAAO,CAAC,QAAQ,CAAC,OAAO,EAAE,EAAE,WAAW,EAAE,OAAO,EAAE,CAAC,CAAC;QAEpD,MAAM,CAAC,GAAG,EAAE,CAAC,OAAO,CAAC,UAAU,CAAC,OAAO,EAAE,oBAAoB,EAAE,QAAQ,CAAC,CAAC,CAAC,OAAO,CAC/E,mCAAmC,CACpC,CAAC;IACJ,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC","sourcesContent":["import { mkdirSync, mkdtempSync, rmSync, writeFileSync } from \"fs\";\nimport { tmpdir } from \"os\";\nimport { join } from \"path\";\nimport { afterEach, describe, expect, it } from \"vitest\";\nimport { FileVaultManager } from \"./vault.js\";\n\ndescribe(\"FileVaultManager\", () => {\n  const tempDirs: string[] = [];\n\n  afterEach(() => {\n    while (tempDirs.length > 0) {\n      rmSync(tempDirs.pop()!, { recursive: true, force: true });\n    }\n  });\n\n  function createStateDir(): string {\n    const dir = mkdtempSync(join(tmpdir(), \"mama-vault-test-\"));\n    tempDirs.push(dir);\n    return dir;\n  }\n\n  it(\"reuses the base firecracker workspace hostPath for user overrides\", () => {\n    const stateDir = createStateDir();\n    const vaultsDir = join(stateDir, \"vaults\");\n    mkdirSync(vaultsDir, { recursive: true, mode: 0o700 });\n    writeFileSync(\n      join(vaultsDir, \"vault.json\"),\n      JSON.stringify(\n        {\n          vaults: {\n            alice: {\n              displayName: \"Alice\",\n              sandbox: { type: \"firecracker\", vmId: \"alice-vm\", sshUser: \"root\", sshPort: 2222 },\n            },\n          },\n        },\n        null,\n        2,\n      ) + \"\\n\",\n      { encoding: \"utf-8\", mode: 0o600 },\n    );\n\n    const manager = new FileVaultManager(stateDir);\n    expect(\n      manager.getSandboxConfig(\"alice\", {\n        type: \"firecracker\",\n        vmId: \"shared-vm\",\n        hostPath: \"/real/workspace\",\n        sshUser: \"root\",\n        sshPort: 22,\n      }),\n    ).toEqual({\n      type: \"firecracker\",\n      vmId: \"alice-vm\",\n      hostPath: \"/real/workspace\",\n      sshUser: \"root\",\n      sshPort: 2222,\n    });\n  });\n\n  it(\"rejects firecracker overrides when the base sandbox is not firecracker\", () => {\n    const stateDir = createStateDir();\n    const vaultsDir = join(stateDir, \"vaults\");\n    mkdirSync(vaultsDir, { recursive: true, mode: 0o700 });\n    writeFileSync(\n      join(vaultsDir, \"vault.json\"),\n      JSON.stringify(\n        {\n          vaults: {\n            alice: {\n              displayName: \"Alice\",\n              sandbox: { type: \"firecracker\", vmId: \"alice-vm\" },\n            },\n          },\n        },\n        null,\n        2,\n      ) + \"\\n\",\n      { encoding: \"utf-8\", mode: 0o600 },\n    );\n\n    const manager = new FileVaultManager(stateDir);\n    expect(() =>\n      manager.getSandboxConfig(\"alice\", { type: \"image\", image: \"alpine:3.20\" }),\n    ).toThrow(/base sandbox is \"image\"/);\n  });\n\n  it(\"throws on invalid secret file paths instead of silently succeeding\", () => {\n    const stateDir = createStateDir();\n    const manager = new FileVaultManager(stateDir);\n    manager.addEntry(\"alice\", { displayName: \"Alice\" });\n\n    expect(() => manager.upsertFile(\"alice\", \"../credentials.txt\", \"secret\")).toThrow(\n      /invalid relative secret file path/,\n    );\n  });\n});\n"]}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@geminixiang/mama",
-  "version": "0.1.10",
+  "version": "0.2.0-beta.1",
   "description": "Slack bot that delegates messages to the pi coding agent",
   "keywords": [
     "agent",
@@ -39,20 +39,22 @@
     "prepare": "husky"
   },
   "dependencies": {
-    "@anthropic-ai/sandbox-runtime": "^0.0.43",
+    "@anthropic-ai/sandbox-runtime": "^0.0.49",
     "@google-cloud/logging": "^11.2.1",
-    "@mariozechner/pi-agent-core": "^0.63.1",
-    "@mariozechner/pi-ai": "^0.63.1",
-    "@mariozechner/pi-coding-agent": "^0.63.1",
+    "@mariozechner/pi-agent-core": "^0.69.0",
+    "@mariozechner/pi-ai": "^0.69.0",
+    "@mariozechner/pi-coding-agent": "^0.69.0",
+    "@sentry/node": "^10.47.0",
     "@sinclair/typebox": "^0.34.49",
     "@slack/socket-mode": "^2.0.6",
     "@slack/web-api": "^7.15.0",
     "chalk": "^5.6.2",
     "croner": "^10.0.1",
     "diff": "^8.0.4",
-    "discord.js": "^14.25.1",
-    "grammy": "^1.41.1",
-    "pino": "^10.3.1"
+    "discord.js": "^14.26.2",
+    "grammy": "^1.42.0",
+    "pino": "^10.3.1",
+    "playwright": "^1.59.1"
   },
   "devDependencies": {
     "@types/diff": "^8.0.0",
@@ -60,11 +62,11 @@
     "@typescript/native-preview": "7.0.0-dev.20260328.1",
     "husky": "^9.1.7",
     "lint-staged": "^16.4.0",
-    "oxfmt": "^0.42.0",
-    "oxlint": "^1.57.0",
+    "oxfmt": "^0.44.0",
+    "oxlint": "^1.59.0",
     "shx": "^0.4.0",
     "typescript": "^6.0.2",
-    "vitest": "^4.1.2"
+    "vitest": "^4.1.3"
   },
   "lint-staged": {
     "*.ts": [