@hybridaione/hybridclaw 0.1.5

package/dist/ipc.js

@@ -0,0 +1,142 @@
+import fs from 'fs';
+import path from 'path';
+import { CONTAINER_MAX_OUTPUT_SIZE, DATA_DIR } from './config.js';
+import { logger } from './logger.js';
+/**
+ * Get session directory, creating it if needed.
+ */
+function sessionDir(sessionId) {
+    const safe = sessionId.replace(/[^a-zA-Z0-9_-]/g, '_');
+    const dir = path.join(DATA_DIR, 'sessions', safe);
+    return dir;
+}
+function ipcDir(sessionId) {
+    return path.join(sessionDir(sessionId), 'ipc');
+}
+function agentDir(agentId) {
+    const safe = agentId.replace(/[^a-zA-Z0-9_-]/g, '_');
+    return path.join(DATA_DIR, 'agents', safe);
+}
+export function agentWorkspaceDir(agentId) {
+    return path.join(agentDir(agentId), 'workspace');
+}
+/**
+ * Ensure session directories exist (IPC only).
+ */
+export function ensureSessionDirs(sessionId) {
+    fs.mkdirSync(ipcDir(sessionId), { recursive: true });
+}
+/**
+ * Ensure agent workspace directory exists.
+ */
+export function ensureAgentDirs(agentId) {
+    fs.mkdirSync(agentWorkspaceDir(agentId), { recursive: true });
+}
+/**
+ * Write input for the container agent.
+ * When omitApiKey is set, the apiKey field is excluded from the file on disk
+ * (the container already has the key in memory from the initial stdin payload).
+ */
+export function writeInput(sessionId, input, opts) {
+    const dir = ipcDir(sessionId);
+    const inputPath = path.join(dir, 'input.json');
+    const toWrite = opts?.omitApiKey ? { ...input, apiKey: '' } : input;
+    fs.writeFileSync(inputPath, JSON.stringify(toWrite, null, 2));
+    logger.debug({ sessionId, path: inputPath }, 'Wrote IPC input');
+    return inputPath;
+}
+/**
+ * Read output from the container agent. Polls until file appears or timeout.
+ */
+function interruptedOutput() {
+    return {
+        status: 'error',
+        result: null,
+        toolsUsed: [],
+        error: 'Interrupted by user.',
+    };
+}
+async function sleepWithAbort(ms, signal) {
+    if (!signal) {
+        await new Promise((resolve) => setTimeout(resolve, ms));
+        return false;
+    }
+    if (signal.aborted)
+        return true;
+    return new Promise((resolve) => {
+        const timer = setTimeout(() => {
+            signal.removeEventListener('abort', onAbort);
+            resolve(false);
+        }, ms);
+        const onAbort = () => {
+            clearTimeout(timer);
+            signal.removeEventListener('abort', onAbort);
+            resolve(true);
+        };
+        signal.addEventListener('abort', onAbort, { once: true });
+    });
+}
+export async function readOutput(sessionId, timeoutMs, opts) {
+    const dir = ipcDir(sessionId);
+    const outputPath = path.join(dir, 'output.json');
+    const signal = opts?.signal;
+    const start = Date.now();
+    const pollInterval = 250;
+    if (signal?.aborted)
+        return interruptedOutput();
+    while (Date.now() - start < timeoutMs) {
+        if (signal?.aborted)
+            return interruptedOutput();
+        if (fs.existsSync(outputPath)) {
+            const stat = fs.statSync(outputPath);
+            if (stat.size > CONTAINER_MAX_OUTPUT_SIZE) {
+                fs.unlinkSync(outputPath);
+                logger.warn({ sessionId, size: stat.size, limit: CONTAINER_MAX_OUTPUT_SIZE }, 'Container output exceeded size limit');
+                return { status: 'error', result: null, toolsUsed: [], error: `Output too large (${stat.size} bytes, limit ${CONTAINER_MAX_OUTPUT_SIZE})` };
+            }
+            try {
+                const raw = fs.readFileSync(outputPath, 'utf-8');
+                const output = JSON.parse(raw);
+                // Clean up output file after reading
+                fs.unlinkSync(outputPath);
+                logger.debug({ sessionId }, 'Read IPC output');
+                return output;
+            }
+            catch (err) {
+                // File might be partially written, wait and retry
+                logger.debug({ sessionId, err }, 'Output file not ready, retrying');
+            }
+        }
+        const aborted = await sleepWithAbort(pollInterval, signal);
+        if (aborted)
+            return interruptedOutput();
+    }
+    return {
+        status: 'error',
+        result: null,
+        toolsUsed: [],
+        error: `Timeout waiting for container output after ${timeoutMs}ms`,
+    };
+}
+/**
+ * Clean up IPC files for a session.
+ */
+export function cleanupIpc(sessionId) {
+    const dir = ipcDir(sessionId);
+    for (const file of ['input.json', 'output.json', 'history.json']) {
+        const filePath = path.join(dir, file);
+        if (fs.existsSync(filePath)) {
+            fs.unlinkSync(filePath);
+        }
+    }
+}
+/**
+ * Get host paths for container mounting.
+ */
+export function getSessionPaths(sessionId, agentId) {
+    return {
+        ipcPath: path.resolve(ipcDir(sessionId)),
+        workspacePath: path.resolve(agentWorkspaceDir(agentId)),
+    };
+}
+//# sourceMappingURL=ipc.js.map

package/dist/ipc.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"ipc.js","sourceRoot":"","sources":["../src/ipc.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,IAAI,CAAC;AACpB,OAAO,IAAI,MAAM,MAAM,CAAC;AAExB,OAAO,EAAE,yBAAyB,EAAE,QAAQ,EAAE,MAAM,aAAa,CAAC;AAClE,OAAO,EAAE,MAAM,EAAE,MAAM,aAAa,CAAC;AAGrC;;GAEG;AACH,SAAS,UAAU,CAAC,SAAiB;IACnC,MAAM,IAAI,GAAG,SAAS,CAAC,OAAO,CAAC,iBAAiB,EAAE,GAAG,CAAC,CAAC;IACvD,MAAM,GAAG,GAAG,IAAI,CAAC,IAAI,CAAC,QAAQ,EAAE,UAAU,EAAE,IAAI,CAAC,CAAC;IAClD,OAAO,GAAG,CAAC;AACb,CAAC;AAED,SAAS,MAAM,CAAC,SAAiB;IAC/B,OAAO,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,SAAS,CAAC,EAAE,KAAK,CAAC,CAAC;AACjD,CAAC;AAED,SAAS,QAAQ,CAAC,OAAe;IAC/B,MAAM,IAAI,GAAG,OAAO,CAAC,OAAO,CAAC,iBAAiB,EAAE,GAAG,CAAC,CAAC;IACrD,OAAO,IAAI,CAAC,IAAI,CAAC,QAAQ,EAAE,QAAQ,EAAE,IAAI,CAAC,CAAC;AAC7C,CAAC;AAED,MAAM,UAAU,iBAAiB,CAAC,OAAe;IAC/C,OAAO,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,EAAE,WAAW,CAAC,CAAC;AACnD,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,iBAAiB,CAAC,SAAiB;IACjD,EAAE,CAAC,SAAS,CAAC,MAAM,CAAC,SAAS,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;AACvD,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,eAAe,CAAC,OAAe;IAC7C,EAAE,CAAC,SAAS,CAAC,iBAAiB,CAAC,OAAO,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;AAChE,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,UAAU,CAAC,SAAiB,EAAE,KAAqB,EAAE,IAA+B;IAClG,MAAM,GAAG,GAAG,MAAM,CAAC,SAAS,CAAC,CAAC;IAC9B,MAAM,SAAS,GAAG,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,YAAY,CAAC,CAAC;IAC/C,MAAM,OAAO,GAAG,IAAI,EAAE,UAAU,CAAC,CAAC,CAAC,EAAE,GAAG,KAAK,EAAE,MAAM,EAAE,EAAE,EAAE,CAAC,CAAC,CAAC,KAAK,CAAC;IACpE,EAAE,CAAC,aAAa,CAAC,SAAS,EAAE,IAAI,CAAC,SAAS,CAAC,OAAO,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC;IAC9D,MAAM,CAAC,KAAK,CAAC,EAAE,SAAS,EAAE,IAAI,EAAE,SAAS,EAAE,EAAE,iBAAiB,CAAC,CAAC;IAChE,OAAO,SAAS,CAAC;AACnB,CAAC;AAED;;GAEG;AACH,SAAS,iBAAiB;IACxB,OAAO;QACL,MAAM,EAAE,OAAO;QACf,MAAM,EAAE,IAAI;QACZ,SAAS,EAAE,EAAE;QACb,KAAK,EAAE,sBAAsB;KAC9B,CAAC;AACJ,CAAC;AAED,KAAK,UAAU,cAAc,CAAC,EAAU,EAAE,MAAoB;IAC5D,IAAI,CAAC,MAAM,EAAE,CAAC;QACZ,MAAM,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,UAAU,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC,CAAC;QACxD,OAAO,KAAK,CAAC;IACf,CAAC;IACD,IAAI,MAAM,CAAC,OAAO;QAAE,OAAO,IAAI,CAAC;IAEhC,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,EAAE;QAC7B,MAAM,KAAK,GAAG,UAAU,CAAC,GAAG,EAAE;YAC5B,MAAM,CAAC,mBAAmB,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;YAC7C,OAAO,CAAC,KAAK,CAAC,CAAC;QACjB,CAAC,EAAE,EAAE,CAAC,CAAC;QACP,MAAM,OAAO,GAAG,GAAG,EAAE;YACnB,YAAY,CAAC,KAAK,CAAC,CAAC;YACpB,MAAM,CAAC,mBAAmB,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;YAC7C,OAAO,CAAC,IAAI,CAAC,CAAC;QAChB,CAAC,CAAC;QACF,MAAM,CAAC,gBAAgB,CAAC,OAAO,EAAE,OAAO,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC;IAC5D,CAAC,CAAC,CAAC;AACL,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,UAAU,CAC9B,SAAiB,EACjB,SAAiB,EACjB,IAA+B;IAE/B,MAAM,GAAG,GAAG,MAAM,CAAC,SAAS,CAAC,CAAC;IAC9B,MAAM,UAAU,GAAG,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,aAAa,CAAC,CAAC;IACjD,MAAM,MAAM,GAAG,IAAI,EAAE,MAAM,CAAC;IAE5B,MAAM,KAAK,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;IACzB,MAAM,YAAY,GAAG,GAAG,CAAC;IAEzB,IAAI,MAAM,EAAE,OAAO;QAAE,OAAO,iBAAiB,EAAE,CAAC;IAEhD,OAAO,IAAI,CAAC,GAAG,EAAE,GAAG,KAAK,GAAG,SAAS,EAAE,CAAC;QACtC,IAAI,MAAM,EAAE,OAAO;YAAE,OAAO,iBAAiB,EAAE,CAAC;QAEhD,IAAI,EAAE,CAAC,UAAU,CAAC,UAAU,CAAC,EAAE,CAAC;YAC9B,MAAM,IAAI,GAAG,EAAE,CAAC,QAAQ,CAAC,UAAU,CAAC,CAAC;YACrC,IAAI,IAAI,CAAC,IAAI,GAAG,yBAAyB,EAAE,CAAC;gBAC1C,EAAE,CAAC,UAAU,CAAC,UAAU,CAAC,CAAC;gBAC1B,MAAM,CAAC,IAAI,CAAC,EAAE,SAAS,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE,KAAK,EAAE,yBAAyB,EAAE,EAAE,sCAAsC,CAAC,CAAC;gBACtH,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,IAAI,EAAE,SAAS,EAAE,EAAE,EAAE,KAAK,EAAE,qBAAqB,IAAI,CAAC,IAAI,iBAAiB,yBAAyB,GAAG,EAAE,CAAC;YAC9I,CAAC;YACD,IAAI,CAAC;gBACH,MAAM,GAAG,GAAG,EAAE,CAAC,YAAY,CAAC,UAAU,EAAE,OAAO,CAAC,CAAC;gBACjD,MAAM,MAAM,GAAoB,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;gBAChD,qCAAqC;gBACrC,EAAE,CAAC,UAAU,CAAC,UAAU,CAAC,CAAC;gBAC1B,MAAM,CAAC,KAAK,CAAC,EAAE,SAAS,EAAE,EAAE,iBAAiB,CAAC,CAAC;gBAC/C,OAAO,MAAM,CAAC;YAChB,CAAC;YAAC,OAAO,GAAG,EAAE,CAAC;gBACb,kDAAkD;gBAClD,MAAM,CAAC,KAAK,CAAC,EAAE,SAAS,EAAE,GAAG,EAAE,EAAE,iCAAiC,CAAC,CAAC;YACtE,CAAC;QACH,CAAC;QACD,MAAM,OAAO,GAAG,MAAM,cAAc,CAAC,YAAY,EAAE,MAAM,CAAC,CAAC;QAC3D,IAAI,OAAO;YAAE,OAAO,iBAAiB,EAAE,CAAC;IAC1C,CAAC;IAED,OAAO;QACL,MAAM,EAAE,OAAO;QACf,MAAM,EAAE,IAAI;QACZ,SAAS,EAAE,EAAE;QACb,KAAK,EAAE,8CAA8C,SAAS,IAAI;KACnE,CAAC;AACJ,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,UAAU,CAAC,SAAiB;IAC1C,MAAM,GAAG,GAAG,MAAM,CAAC,SAAS,CAAC,CAAC;IAC9B,KAAK,MAAM,IAAI,IAAI,CAAC,YAAY,EAAE,aAAa,EAAE,cAAc,CAAC,EAAE,CAAC;QACjE,MAAM,QAAQ,GAAG,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC;QACtC,IAAI,EAAE,CAAC,UAAU,CAAC,QAAQ,CAAC,EAAE,CAAC;YAC5B,EAAE,CAAC,UAAU,CAAC,QAAQ,CAAC,CAAC;QAC1B,CAAC;IACH,CAAC;AACH,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,eAAe,CAAC,SAAiB,EAAE,OAAe;IAIhE,OAAO;QACL,OAAO,EAAE,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC;QACxC,aAAa,EAAE,IAAI,CAAC,OAAO,CAAC,iBAAiB,CAAC,OAAO,CAAC,CAAC;KACxD,CAAC;AACJ,CAAC"}

package/dist/logger.d.ts

@@ -0,0 +1,3 @@
+import pino from 'pino';
+export declare const logger: pino.Logger<never, boolean>;
+//# sourceMappingURL=logger.d.ts.map

package/dist/logger.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"logger.d.ts","sourceRoot":"","sources":["../src/logger.ts"],"names":[],"mappings":"AAAA,OAAO,IAAI,MAAM,MAAM,CAAC;AAMxB,eAAO,MAAM,MAAM,6BAGjB,CAAC"}

package/dist/logger.js

@@ -0,0 +1,21 @@
+import pino from 'pino';
+import { getRuntimeConfig, onRuntimeConfigChange } from './runtime-config.js';
+const initialLevel = getRuntimeConfig().ops.logLevel;
+export const logger = pino({
+    level: initialLevel,
+    transport: { target: 'pino-pretty', options: { colorize: true } },
+});
+onRuntimeConfigChange((next, prev) => {
+    if (next.ops.logLevel !== prev.ops.logLevel) {
+        logger.level = next.ops.logLevel;
+        logger.info({ level: next.ops.logLevel }, 'Logger level updated from config.json');
+    }
+});
+process.on('uncaughtException', (err) => {
+    logger.fatal({ err }, 'Uncaught exception');
+    process.exit(1);
+});
+process.on('unhandledRejection', (reason) => {
+    logger.error({ err: reason }, 'Unhandled rejection');
+});
+//# sourceMappingURL=logger.js.map

package/dist/logger.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"logger.js","sourceRoot":"","sources":["../src/logger.ts"],"names":[],"mappings":"AAAA,OAAO,IAAI,MAAM,MAAM,CAAC;AAExB,OAAO,EAAE,gBAAgB,EAAE,qBAAqB,EAAE,MAAM,qBAAqB,CAAC;AAE9E,MAAM,YAAY,GAAG,gBAAgB,EAAE,CAAC,GAAG,CAAC,QAAQ,CAAC;AAErD,MAAM,CAAC,MAAM,MAAM,GAAG,IAAI,CAAC;IACzB,KAAK,EAAE,YAAY;IACnB,SAAS,EAAE,EAAE,MAAM,EAAE,aAAa,EAAE,OAAO,EAAE,EAAE,QAAQ,EAAE,IAAI,EAAE,EAAE;CAClE,CAAC,CAAC;AAEH,qBAAqB,CAAC,CAAC,IAAI,EAAE,IAAI,EAAE,EAAE;IACnC,IAAI,IAAI,CAAC,GAAG,CAAC,QAAQ,KAAK,IAAI,CAAC,GAAG,CAAC,QAAQ,EAAE,CAAC;QAC5C,MAAM,CAAC,KAAK,GAAG,IAAI,CAAC,GAAG,CAAC,QAAQ,CAAC;QACjC,MAAM,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,IAAI,CAAC,GAAG,CAAC,QAAQ,EAAE,EAAE,uCAAuC,CAAC,CAAC;IACrF,CAAC;AACH,CAAC,CAAC,CAAC;AAEH,OAAO,CAAC,EAAE,CAAC,mBAAmB,EAAE,CAAC,GAAG,EAAE,EAAE;IACtC,MAAM,CAAC,KAAK,CAAC,EAAE,GAAG,EAAE,EAAE,oBAAoB,CAAC,CAAC;IAC5C,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;AAClB,CAAC,CAAC,CAAC;AAEH,OAAO,CAAC,EAAE,CAAC,oBAAoB,EAAE,CAAC,MAAM,EAAE,EAAE;IAC1C,MAAM,CAAC,KAAK,CAAC,EAAE,GAAG,EAAE,MAAM,EAAE,EAAE,qBAAqB,CAAC,CAAC;AACvD,CAAC,CAAC,CAAC"}

package/dist/mount-security.d.ts

@@ -0,0 +1,28 @@
+import type { AdditionalMount, MountAllowlist } from './types.js';
+/**
+ * Load the mount allowlist from the external config location.
+ * Returns null if the file doesn't exist or is invalid.
+ * Result is cached in memory for the lifetime of the process.
+ */
+export declare function loadMountAllowlist(): MountAllowlist | null;
+export interface MountValidationResult {
+    allowed: boolean;
+    reason: string;
+    realHostPath?: string;
+    resolvedContainerPath?: string;
+    effectiveReadonly?: boolean;
+}
+/**
+ * Validate a single additional mount against the allowlist.
+ */
+export declare function validateMount(mount: AdditionalMount): MountValidationResult;
+/**
+ * Validate all additional mounts.
+ * Returns only mounts that passed validation; logs warnings for rejected ones.
+ */
+export declare function validateAdditionalMounts(mounts: AdditionalMount[]): Array<{
+    hostPath: string;
+    containerPath: string;
+    readonly: boolean;
+}>;
+//# sourceMappingURL=mount-security.d.ts.map

package/dist/mount-security.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"mount-security.d.ts","sourceRoot":"","sources":["../src/mount-security.ts"],"names":[],"mappings":"AAaA,OAAO,KAAK,EAAE,eAAe,EAAe,cAAc,EAAE,MAAM,YAAY,CAAC;AA0B/E;;;;GAIG;AACH,wBAAgB,kBAAkB,IAAI,cAAc,GAAG,IAAI,CA2C1D;AA6CD,MAAM,WAAW,qBAAqB;IACpC,OAAO,EAAE,OAAO,CAAC;IACjB,MAAM,EAAE,MAAM,CAAC;IACf,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,qBAAqB,CAAC,EAAE,MAAM,CAAC;IAC/B,iBAAiB,CAAC,EAAE,OAAO,CAAC;CAC7B;AAED;;GAEG;AACH,wBAAgB,aAAa,CAAC,KAAK,EAAE,eAAe,GAAG,qBAAqB,CA6C3E;AAED;;;GAGG;AACH,wBAAgB,wBAAwB,CACtC,MAAM,EAAE,eAAe,EAAE,GACxB,KAAK,CAAC;IAAE,QAAQ,EAAE,MAAM,CAAC;IAAC,aAAa,EAAE,MAAM,CAAC;IAAC,QAAQ,EAAE,OAAO,CAAA;CAAE,CAAC,CAkBvE"}

package/dist/mount-security.js

@@ -0,0 +1,187 @@
+/**
+ * Mount Security — validates additional mounts against an allowlist stored
+ * OUTSIDE the project root, preventing container agents from modifying
+ * security configuration.
+ *
+ * Allowlist location: ~/.config/hybridclaw/mount-allowlist.json
+ */
+import fs from 'fs';
+import os from 'os';
+import path from 'path';
+import { MOUNT_ALLOWLIST_PATH } from './config.js';
+import { logger } from './logger.js';
+// Cache the allowlist in memory — only reloads on process restart
+let cachedAllowlist = null;
+let allowlistLoadError = null;
+const DEFAULT_BLOCKED_PATTERNS = [
+    '.ssh',
+    '.gnupg',
+    '.gpg',
+    '.aws',
+    '.azure',
+    '.gcloud',
+    '.kube',
+    '.docker',
+    'credentials',
+    '.env',
+    '.netrc',
+    '.npmrc',
+    '.pypirc',
+    'id_rsa',
+    'id_ed25519',
+    'private_key',
+    '.secret',
+];
+/**
+ * Load the mount allowlist from the external config location.
+ * Returns null if the file doesn't exist or is invalid.
+ * Result is cached in memory for the lifetime of the process.
+ */
+export function loadMountAllowlist() {
+    if (cachedAllowlist !== null)
+        return cachedAllowlist;
+    if (allowlistLoadError !== null)
+        return null;
+    try {
+        if (!fs.existsSync(MOUNT_ALLOWLIST_PATH)) {
+            allowlistLoadError = `Mount allowlist not found at ${MOUNT_ALLOWLIST_PATH}`;
+            logger.warn({ path: MOUNT_ALLOWLIST_PATH }, 'Mount allowlist not found — additional mounts will be BLOCKED. Create the file to enable additional mounts.');
+            return null;
+        }
+        const content = fs.readFileSync(MOUNT_ALLOWLIST_PATH, 'utf-8');
+        const allowlist = JSON.parse(content);
+        if (!Array.isArray(allowlist.allowedRoots)) {
+            throw new Error('allowedRoots must be an array');
+        }
+        if (!Array.isArray(allowlist.blockedPatterns)) {
+            throw new Error('blockedPatterns must be an array');
+        }
+        // Merge with default blocked patterns
+        allowlist.blockedPatterns = [
+            ...new Set([...DEFAULT_BLOCKED_PATTERNS, ...allowlist.blockedPatterns]),
+        ];
+        cachedAllowlist = allowlist;
+        logger.info({ path: MOUNT_ALLOWLIST_PATH, allowedRoots: allowlist.allowedRoots.length, blockedPatterns: allowlist.blockedPatterns.length }, 'Mount allowlist loaded');
+        return cachedAllowlist;
+    }
+    catch (err) {
+        allowlistLoadError = err instanceof Error ? err.message : String(err);
+        logger.error({ path: MOUNT_ALLOWLIST_PATH, error: allowlistLoadError }, 'Failed to load mount allowlist — additional mounts will be BLOCKED');
+        return null;
+    }
+}
+function expandPath(p) {
+    const homeDir = process.env.HOME || os.homedir();
+    if (p.startsWith('~/'))
+        return path.join(homeDir, p.slice(2));
+    if (p === '~')
+        return homeDir;
+    return path.resolve(p);
+}
+function getRealPath(p) {
+    try {
+        return fs.realpathSync(p);
+    }
+    catch {
+        return null;
+    }
+}
+function matchesBlockedPattern(realPath, blockedPatterns) {
+    const pathParts = realPath.split(path.sep);
+    for (const pattern of blockedPatterns) {
+        for (const part of pathParts) {
+            if (part === pattern || part.includes(pattern))
+                return pattern;
+        }
+        if (realPath.includes(pattern))
+            return pattern;
+    }
+    return null;
+}
+function findAllowedRoot(realPath, allowedRoots) {
+    for (const root of allowedRoots) {
+        const realRoot = getRealPath(expandPath(root.path));
+        if (realRoot === null)
+            continue;
+        const relative = path.relative(realRoot, realPath);
+        if (!relative.startsWith('..') && !path.isAbsolute(relative))
+            return root;
+    }
+    return null;
+}
+function isValidContainerPath(containerPath) {
+    if (containerPath.includes('..'))
+        return false;
+    if (containerPath.startsWith('/'))
+        return false;
+    if (!containerPath || containerPath.trim() === '')
+        return false;
+    return true;
+}
+/**
+ * Validate a single additional mount against the allowlist.
+ */
+export function validateMount(mount) {
+    const allowlist = loadMountAllowlist();
+    if (allowlist === null) {
+        return { allowed: false, reason: `No mount allowlist configured at ${MOUNT_ALLOWLIST_PATH}` };
+    }
+    const containerPath = mount.containerPath || path.basename(mount.hostPath);
+    if (!isValidContainerPath(containerPath)) {
+        return { allowed: false, reason: `Invalid container path: "${containerPath}" — must be relative, non-empty, and not contain ".."` };
+    }
+    const expandedPath = expandPath(mount.hostPath);
+    const realPath = getRealPath(expandedPath);
+    if (realPath === null) {
+        return { allowed: false, reason: `Host path does not exist: "${mount.hostPath}" (expanded: "${expandedPath}")` };
+    }
+    const blockedMatch = matchesBlockedPattern(realPath, allowlist.blockedPatterns);
+    if (blockedMatch !== null) {
+        return { allowed: false, reason: `Path matches blocked pattern "${blockedMatch}": "${realPath}"` };
+    }
+    const allowedRoot = findAllowedRoot(realPath, allowlist.allowedRoots);
+    if (allowedRoot === null) {
+        return {
+            allowed: false,
+            reason: `Path "${realPath}" is not under any allowed root. Allowed roots: ${allowlist.allowedRoots.map((r) => expandPath(r.path)).join(', ')}`,
+        };
+    }
+    // Determine effective readonly status
+    let effectiveReadonly = true;
+    if (mount.readonly === false && allowedRoot.allowReadWrite) {
+        effectiveReadonly = false;
+    }
+    else if (mount.readonly === false && !allowedRoot.allowReadWrite) {
+        logger.info({ mount: mount.hostPath, root: allowedRoot.path }, 'Mount forced to read-only — root does not allow read-write');
+    }
+    return {
+        allowed: true,
+        reason: `Allowed under root "${allowedRoot.path}"${allowedRoot.description ? ` (${allowedRoot.description})` : ''}`,
+        realHostPath: realPath,
+        resolvedContainerPath: containerPath,
+        effectiveReadonly,
+    };
+}
+/**
+ * Validate all additional mounts.
+ * Returns only mounts that passed validation; logs warnings for rejected ones.
+ */
+export function validateAdditionalMounts(mounts) {
+    const validated = [];
+    for (const mount of mounts) {
+        const result = validateMount(mount);
+        if (result.allowed) {
+            validated.push({
+                hostPath: result.realHostPath,
+                containerPath: `/workspace/extra/${result.resolvedContainerPath}`,
+                readonly: result.effectiveReadonly,
+            });
+            logger.debug({ hostPath: result.realHostPath, containerPath: result.resolvedContainerPath, readonly: result.effectiveReadonly }, 'Mount validated');
+        }
+        else {
+            logger.warn({ requestedPath: mount.hostPath, containerPath: mount.containerPath, reason: result.reason }, 'Additional mount REJECTED');
+        }
+    }
+    return validated;
+}
+//# sourceMappingURL=mount-security.js.map

package/dist/mount-security.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"mount-security.js","sourceRoot":"","sources":["../src/mount-security.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AACH,OAAO,EAAE,MAAM,IAAI,CAAC;AACpB,OAAO,EAAE,MAAM,IAAI,CAAC;AACpB,OAAO,IAAI,MAAM,MAAM,CAAC;AAExB,OAAO,EAAE,oBAAoB,EAAE,MAAM,aAAa,CAAC;AACnD,OAAO,EAAE,MAAM,EAAE,MAAM,aAAa,CAAC;AAGrC,kEAAkE;AAClE,IAAI,eAAe,GAA0B,IAAI,CAAC;AAClD,IAAI,kBAAkB,GAAkB,IAAI,CAAC;AAE7C,MAAM,wBAAwB,GAAG;IAC/B,MAAM;IACN,QAAQ;IACR,MAAM;IACN,MAAM;IACN,QAAQ;IACR,SAAS;IACT,OAAO;IACP,SAAS;IACT,aAAa;IACb,MAAM;IACN,QAAQ;IACR,QAAQ;IACR,SAAS;IACT,QAAQ;IACR,YAAY;IACZ,aAAa;IACb,SAAS;CACV,CAAC;AAEF;;;;GAIG;AACH,MAAM,UAAU,kBAAkB;IAChC,IAAI,eAAe,KAAK,IAAI;QAAE,OAAO,eAAe,CAAC;IACrD,IAAI,kBAAkB,KAAK,IAAI;QAAE,OAAO,IAAI,CAAC;IAE7C,IAAI,CAAC;QACH,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,oBAAoB,CAAC,EAAE,CAAC;YACzC,kBAAkB,GAAG,gCAAgC,oBAAoB,EAAE,CAAC;YAC5E,MAAM,CAAC,IAAI,CACT,EAAE,IAAI,EAAE,oBAAoB,EAAE,EAC9B,6GAA6G,CAC9G,CAAC;YACF,OAAO,IAAI,CAAC;QACd,CAAC;QAED,MAAM,OAAO,GAAG,EAAE,CAAC,YAAY,CAAC,oBAAoB,EAAE,OAAO,CAAC,CAAC;QAC/D,MAAM,SAAS,GAAG,IAAI,CAAC,KAAK,CAAC,OAAO,CAAmB,CAAC;QAExD,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,SAAS,CAAC,YAAY,CAAC,EAAE,CAAC;YAC3C,MAAM,IAAI,KAAK,CAAC,+BAA+B,CAAC,CAAC;QACnD,CAAC;QACD,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,SAAS,CAAC,eAAe,CAAC,EAAE,CAAC;YAC9C,MAAM,IAAI,KAAK,CAAC,kCAAkC,CAAC,CAAC;QACtD,CAAC;QAED,sCAAsC;QACtC,SAAS,CAAC,eAAe,GAAG;YAC1B,GAAG,IAAI,GAAG,CAAC,CAAC,GAAG,wBAAwB,EAAE,GAAG,SAAS,CAAC,eAAe,CAAC,CAAC;SACxE,CAAC;QAEF,eAAe,GAAG,SAAS,CAAC;QAC5B,MAAM,CAAC,IAAI,CACT,EAAE,IAAI,EAAE,oBAAoB,EAAE,YAAY,EAAE,SAAS,CAAC,YAAY,CAAC,MAAM,EAAE,eAAe,EAAE,SAAS,CAAC,eAAe,CAAC,MAAM,EAAE,EAC9H,wBAAwB,CACzB,CAAC;QACF,OAAO,eAAe,CAAC;IACzB,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,kBAAkB,GAAG,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;QACtE,MAAM,CAAC,KAAK,CACV,EAAE,IAAI,EAAE,oBAAoB,EAAE,KAAK,EAAE,kBAAkB,EAAE,EACzD,oEAAoE,CACrE,CAAC;QACF,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC;AAED,SAAS,UAAU,CAAC,CAAS;IAC3B,MAAM,OAAO,GAAG,OAAO,CAAC,GAAG,CAAC,IAAI,IAAI,EAAE,CAAC,OAAO,EAAE,CAAC;IACjD,IAAI,CAAC,CAAC,UAAU,CAAC,IAAI,CAAC;QAAE,OAAO,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC;IAC9D,IAAI,CAAC,KAAK,GAAG;QAAE,OAAO,OAAO,CAAC;IAC9B,OAAO,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC;AACzB,CAAC;AAED,SAAS,WAAW,CAAC,CAAS;IAC5B,IAAI,CAAC;QACH,OAAO,EAAE,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC;IAC5B,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC;AAED,SAAS,qBAAqB,CAAC,QAAgB,EAAE,eAAyB;IACxE,MAAM,SAAS,GAAG,QAAQ,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IAC3C,KAAK,MAAM,OAAO,IAAI,eAAe,EAAE,CAAC;QACtC,KAAK,MAAM,IAAI,IAAI,SAAS,EAAE,CAAC;YAC7B,IAAI,IAAI,KAAK,OAAO,IAAI,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC;gBAAE,OAAO,OAAO,CAAC;QACjE,CAAC;QACD,IAAI,QAAQ,CAAC,QAAQ,CAAC,OAAO,CAAC;YAAE,OAAO,OAAO,CAAC;IACjD,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED,SAAS,eAAe,CAAC,QAAgB,EAAE,YAA2B;IACpE,KAAK,MAAM,IAAI,IAAI,YAAY,EAAE,CAAC;QAChC,MAAM,QAAQ,GAAG,WAAW,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC;QACpD,IAAI,QAAQ,KAAK,IAAI;YAAE,SAAS;QAChC,MAAM,QAAQ,GAAG,IAAI,CAAC,QAAQ,CAAC,QAAQ,EAAE,QAAQ,CAAC,CAAC;QACnD,IAAI,CAAC,QAAQ,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,QAAQ,CAAC;YAAE,OAAO,IAAI,CAAC;IAC5E,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED,SAAS,oBAAoB,CAAC,aAAqB;IACjD,IAAI,aAAa,CAAC,QAAQ,CAAC,IAAI,CAAC;QAAE,OAAO,KAAK,CAAC;IAC/C,IAAI,aAAa,CAAC,UAAU,CAAC,GAAG,CAAC;QAAE,OAAO,KAAK,CAAC;IAChD,IAAI,CAAC,aAAa,IAAI,aAAa,CAAC,IAAI,EAAE,KAAK,EAAE;QAAE,OAAO,KAAK,CAAC;IAChE,OAAO,IAAI,CAAC;AACd,CAAC;AAUD;;GAEG;AACH,MAAM,UAAU,aAAa,CAAC,KAAsB;IAClD,MAAM,SAAS,GAAG,kBAAkB,EAAE,CAAC;IACvC,IAAI,SAAS,KAAK,IAAI,EAAE,CAAC;QACvB,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,MAAM,EAAE,oCAAoC,oBAAoB,EAAE,EAAE,CAAC;IAChG,CAAC;IAED,MAAM,aAAa,GAAG,KAAK,CAAC,aAAa,IAAI,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC;IAC3E,IAAI,CAAC,oBAAoB,CAAC,aAAa,CAAC,EAAE,CAAC;QACzC,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,MAAM,EAAE,4BAA4B,aAAa,uDAAuD,EAAE,CAAC;IACtI,CAAC;IAED,MAAM,YAAY,GAAG,UAAU,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC;IAChD,MAAM,QAAQ,GAAG,WAAW,CAAC,YAAY,CAAC,CAAC;IAC3C,IAAI,QAAQ,KAAK,IAAI,EAAE,CAAC;QACtB,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,MAAM,EAAE,8BAA8B,KAAK,CAAC,QAAQ,iBAAiB,YAAY,IAAI,EAAE,CAAC;IACnH,CAAC;IAED,MAAM,YAAY,GAAG,qBAAqB,CAAC,QAAQ,EAAE,SAAS,CAAC,eAAe,CAAC,CAAC;IAChF,IAAI,YAAY,KAAK,IAAI,EAAE,CAAC;QAC1B,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,MAAM,EAAE,iCAAiC,YAAY,OAAO,QAAQ,GAAG,EAAE,CAAC;IACrG,CAAC;IAED,MAAM,WAAW,GAAG,eAAe,CAAC,QAAQ,EAAE,SAAS,CAAC,YAAY,CAAC,CAAC;IACtE,IAAI,WAAW,KAAK,IAAI,EAAE,CAAC;QACzB,OAAO;YACL,OAAO,EAAE,KAAK;YACd,MAAM,EAAE,SAAS,QAAQ,mDAAmD,SAAS,CAAC,YAAY,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,UAAU,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE;SAC/I,CAAC;IACJ,CAAC;IAED,sCAAsC;IACtC,IAAI,iBAAiB,GAAG,IAAI,CAAC;IAC7B,IAAI,KAAK,CAAC,QAAQ,KAAK,KAAK,IAAI,WAAW,CAAC,cAAc,EAAE,CAAC;QAC3D,iBAAiB,GAAG,KAAK,CAAC;IAC5B,CAAC;SAAM,IAAI,KAAK,CAAC,QAAQ,KAAK,KAAK,IAAI,CAAC,WAAW,CAAC,cAAc,EAAE,CAAC;QACnE,MAAM,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,KAAK,CAAC,QAAQ,EAAE,IAAI,EAAE,WAAW,CAAC,IAAI,EAAE,EAAE,4DAA4D,CAAC,CAAC;IAC/H,CAAC;IAED,OAAO;QACL,OAAO,EAAE,IAAI;QACb,MAAM,EAAE,uBAAuB,WAAW,CAAC,IAAI,IAAI,WAAW,CAAC,WAAW,CAAC,CAAC,CAAC,KAAK,WAAW,CAAC,WAAW,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE;QACnH,YAAY,EAAE,QAAQ;QACtB,qBAAqB,EAAE,aAAa;QACpC,iBAAiB;KAClB,CAAC;AACJ,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,wBAAwB,CACtC,MAAyB;IAEzB,MAAM,SAAS,GAA0E,EAAE,CAAC;IAE5F,KAAK,MAAM,KAAK,IAAI,MAAM,EAAE,CAAC;QAC3B,MAAM,MAAM,GAAG,aAAa,CAAC,KAAK,CAAC,CAAC;QACpC,IAAI,MAAM,CAAC,OAAO,EAAE,CAAC;YACnB,SAAS,CAAC,IAAI,CAAC;gBACb,QAAQ,EAAE,MAAM,CAAC,YAAa;gBAC9B,aAAa,EAAE,oBAAoB,MAAM,CAAC,qBAAqB,EAAE;gBACjE,QAAQ,EAAE,MAAM,CAAC,iBAAkB;aACpC,CAAC,CAAC;YACH,MAAM,CAAC,KAAK,CAAC,EAAE,QAAQ,EAAE,MAAM,CAAC,YAAY,EAAE,aAAa,EAAE,MAAM,CAAC,qBAAqB,EAAE,QAAQ,EAAE,MAAM,CAAC,iBAAiB,EAAE,EAAE,iBAAiB,CAAC,CAAC;QACtJ,CAAC;aAAM,CAAC;YACN,MAAM,CAAC,IAAI,CAAC,EAAE,aAAa,EAAE,KAAK,CAAC,QAAQ,EAAE,aAAa,EAAE,KAAK,CAAC,aAAa,EAAE,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,EAAE,2BAA2B,CAAC,CAAC;QACzI,CAAC;IACH,CAAC;IAED,OAAO,SAAS,CAAC;AACnB,CAAC"}

package/dist/onboarding.d.ts

@@ -0,0 +1,7 @@
+interface OnboardingOptions {
+    force?: boolean;
+    commandName?: string;
+}
+export declare function ensureHybridAICredentials(options?: OnboardingOptions): Promise<void>;
+export {};
+//# sourceMappingURL=onboarding.d.ts.map

package/dist/onboarding.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"onboarding.d.ts","sourceRoot":"","sources":["../src/onboarding.ts"],"names":[],"mappings":"AA2BA,UAAU,iBAAiB;IACzB,KAAK,CAAC,EAAE,OAAO,CAAC;IAChB,WAAW,CAAC,EAAE,MAAM,CAAC;CACtB;AAwXD,wBAAsB,yBAAyB,CAAC,OAAO,GAAE,iBAAsB,GAAG,OAAO,CAAC,IAAI,CAAC,CAkK9F"}