@letterblack/lbe-exec 1.2.2

package/dist/wasm.lock.json

@@ -0,0 +1,4 @@
+{
+  "wasm_sha256": "feb93a2ea76a02584048a588305ba0a192683fd58c1da8f539aeb49b41d0a254",
+  "entrypoint": "lbe_execute"
+}

package/package.json

@@ -0,0 +1,28 @@
+{
+  "name": "@letterblack/lbe-exec",
+  "version": "1.2.2",
+  "description": "Local host-signed execution layer for LetterBlack LBE.",
+  "type": "module",
+  "main": "dist/index.js",
+  "types": "types.d.ts",
+  "exports": {
+    ".": {
+      "types": "./types.d.ts",
+      "default": "./dist/index.js"
+    }
+  },
+  "files": [
+    "dist/",
+    "README.md",
+    "types.d.ts",
+    "LICENSE"
+  ],
+  "dependencies": {
+    "tweetnacl": "^1.0.3",
+    "json-canonicalize": "^1.0.4"
+  },
+  "license": "SEE LICENSE IN LICENSE",
+  "engines": {
+    "node": ">=20.9.0"
+  }
+}

package/types.d.ts

@@ -0,0 +1,19 @@
+export type LBEExecutionIntent = 'read_file' | 'write_file' | 'patch_file' | 'delete_file' | 'run_shell';
+export interface LBERequest {
+  id?: string; actor?: string; intent: LBEExecutionIntent; target?: string; content?: string; patch?: unknown;
+  command?: { cmd: string; args: string[]; cwd?: string; timeoutMs?: number; maxOutputBytes?: number }; reason?: string;
+}
+export interface LBEResult {
+  ok: boolean; decision: 'allow' | 'deny' | 'observe'; executed: boolean; dryRun: boolean;
+  error?: { code: string; message: string; recoverable: boolean }; matchedRules?: string[]; auditId?: string;
+  rollback?: { available: boolean; performed: boolean; backupId?: string };
+}
+export interface LocalExecutor {
+  rootDir: string;
+  validate(request: LBERequest): Promise<LBEResult>;
+  dryRun(request: LBERequest): Promise<LBEResult>;
+  execute(request: LBERequest): Promise<LBEResult>;
+  policy: { read(): unknown; proposeRule(rule: { effect: 'allow' | 'deny'; type: 'path' | 'command'; pattern: string; from: string }): unknown; addRule(rule: { effect: 'allow' | 'deny'; type: 'path' | 'command'; pattern: string; from: string }): unknown };
+  audit: { verify(): unknown };
+}
+export function createLocalExecutor(options?: { rootDir?: string; keyId?: string; mode?: 'observe' | 'enforce'; shell?: { allowCommands?: string[]; denyCommands?: string[]; maxRequests?: number } }): LocalExecutor;