@machina.ai/cell-cli-core 1.36.0-rc1 → 1.38.1-rc2

package/dist/src/services/sandboxManagerFactory.js

@@ -8,35 +8,25 @@ import { NoopSandboxManager, LocalSandboxManager, } from './sandboxManager.js';
 import { LinuxSandboxManager } from '../sandbox/linux/LinuxSandboxManager.js';
 import { MacOsSandboxManager } from '../sandbox/macos/MacOsSandboxManager.js';
 import { WindowsSandboxManager } from '../sandbox/windows/WindowsSandboxManager.js';
-import {} from '../policy/sandboxPolicyManager.js';
 /**
  * Creates a sandbox manager based on the provided settings.
  */
-export function createSandboxManager(sandbox, workspace, policyManager, approvalMode) {
-    if (approvalMode === 'yolo') {
-        return new NoopSandboxManager();
-    }
-    const isWindows = os.platform() === 'win32';
-    if (isWindows &&
-        (sandbox?.enabled || sandbox?.command === 'windows-native')) {
-        return new WindowsSandboxManager({ workspace });
+export function createSandboxManager(sandbox, options, approvalMode) {
+    if (!options.modeConfig && options.policyManager && approvalMode) {
+        options.modeConfig = options.policyManager.getModeConfig(approvalMode);
     }
     if (sandbox?.enabled) {
-        if (os.platform() === 'linux') {
-            return new LinuxSandboxManager({ workspace });
+        if (os.platform() === 'win32') {
+            return new WindowsSandboxManager(options);
+        }
+        else if (os.platform() === 'linux') {
+            return new LinuxSandboxManager(options);
         }
-        if (os.platform() === 'darwin') {
-            const modeConfig = policyManager && approvalMode
-                ? policyManager.getModeConfig(approvalMode)
-                : undefined;
-            return new MacOsSandboxManager({
-                workspace,
-                modeConfig,
-                policyManager,
-            });
+        else if (os.platform() === 'darwin') {
+            return new MacOsSandboxManager(options);
         }
-        return new LocalSandboxManager();
+        return new LocalSandboxManager(options);
     }
-    return new NoopSandboxManager();
+    return new NoopSandboxManager(options);
 }
 //# sourceMappingURL=sandboxManagerFactory.js.map

package/dist/src/services/sandboxManagerFactory.js.map

@@ -1 +1 @@
-{"version":3,"file":"sandboxManagerFactory.js","sourceRoot":"","sources":["../../../src/services/sandboxManagerFactory.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH,OAAO,EAAE,MAAM,SAAS,CAAC;AACzB,OAAO,EAEL,kBAAkB,EAClB,mBAAmB,GACpB,MAAM,qBAAqB,CAAC;AAC7B,OAAO,EAAE,mBAAmB,EAAE,MAAM,yCAAyC,CAAC;AAC9E,OAAO,EAAE,mBAAmB,EAAE,MAAM,yCAAyC,CAAC;AAC9E,OAAO,EAAE,qBAAqB,EAAE,MAAM,6CAA6C,CAAC;AAEpF,OAAO,EAA6B,MAAM,mCAAmC,CAAC;AAE9E;;GAEG;AACH,MAAM,UAAU,oBAAoB,CAClC,OAAkC,EAClC,SAAiB,EACjB,aAAoC,EACpC,YAAqB;IAErB,IAAI,YAAY,KAAK,MAAM,EAAE,CAAC;QAC5B,OAAO,IAAI,kBAAkB,EAAE,CAAC;IAClC,CAAC;IAED,MAAM,SAAS,GAAG,EAAE,CAAC,QAAQ,EAAE,KAAK,OAAO,CAAC;IAE5C,IACE,SAAS;QACT,CAAC,OAAO,EAAE,OAAO,IAAI,OAAO,EAAE,OAAO,KAAK,gBAAgB,CAAC,EAC3D,CAAC;QACD,OAAO,IAAI,qBAAqB,CAAC,EAAE,SAAS,EAAE,CAAC,CAAC;IAClD,CAAC;IAED,IAAI,OAAO,EAAE,OAAO,EAAE,CAAC;QACrB,IAAI,EAAE,CAAC,QAAQ,EAAE,KAAK,OAAO,EAAE,CAAC;YAC9B,OAAO,IAAI,mBAAmB,CAAC,EAAE,SAAS,EAAE,CAAC,CAAC;QAChD,CAAC;QACD,IAAI,EAAE,CAAC,QAAQ,EAAE,KAAK,QAAQ,EAAE,CAAC;YAC/B,MAAM,UAAU,GACd,aAAa,IAAI,YAAY;gBAC3B,CAAC,CAAC,aAAa,CAAC,aAAa,CAAC,YAAY,CAAC;gBAC3C,CAAC,CAAC,SAAS,CAAC;YAChB,OAAO,IAAI,mBAAmB,CAAC;gBAC7B,SAAS;gBACT,UAAU;gBACV,aAAa;aACd,CAAC,CAAC;QACL,CAAC;QACD,OAAO,IAAI,mBAAmB,EAAE,CAAC;IACnC,CAAC;IAED,OAAO,IAAI,kBAAkB,EAAE,CAAC;AAClC,CAAC"}
+{"version":3,"file":"sandboxManagerFactory.js","sourceRoot":"","sources":["../../../src/services/sandboxManagerFactory.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH,OAAO,EAAE,MAAM,SAAS,CAAC;AACzB,OAAO,EAEL,kBAAkB,EAClB,mBAAmB,GAEpB,MAAM,qBAAqB,CAAC;AAC7B,OAAO,EAAE,mBAAmB,EAAE,MAAM,yCAAyC,CAAC;AAC9E,OAAO,EAAE,mBAAmB,EAAE,MAAM,yCAAyC,CAAC;AAC9E,OAAO,EAAE,qBAAqB,EAAE,MAAM,6CAA6C,CAAC;AAGpF;;GAEG;AACH,MAAM,UAAU,oBAAoB,CAClC,OAAkC,EAClC,OAA6B,EAC7B,YAAqB;IAErB,IAAI,CAAC,OAAO,CAAC,UAAU,IAAI,OAAO,CAAC,aAAa,IAAI,YAAY,EAAE,CAAC;QACjE,OAAO,CAAC,UAAU,GAAG,OAAO,CAAC,aAAa,CAAC,aAAa,CAAC,YAAY,CAAC,CAAC;IACzE,CAAC;IAED,IAAI,OAAO,EAAE,OAAO,EAAE,CAAC;QACrB,IAAI,EAAE,CAAC,QAAQ,EAAE,KAAK,OAAO,EAAE,CAAC;YAC9B,OAAO,IAAI,qBAAqB,CAAC,OAAO,CAAC,CAAC;QAC5C,CAAC;aAAM,IAAI,EAAE,CAAC,QAAQ,EAAE,KAAK,OAAO,EAAE,CAAC;YACrC,OAAO,IAAI,mBAAmB,CAAC,OAAO,CAAC,CAAC;QAC1C,CAAC;aAAM,IAAI,EAAE,CAAC,QAAQ,EAAE,KAAK,QAAQ,EAAE,CAAC;YACtC,OAAO,IAAI,mBAAmB,CAAC,OAAO,CAAC,CAAC;QAC1C,CAAC;QACD,OAAO,IAAI,mBAAmB,CAAC,OAAO,CAAC,CAAC;IAC1C,CAAC;IAED,OAAO,IAAI,kBAAkB,CAAC,OAAO,CAAC,CAAC;AACzC,CAAC"}

package/dist/src/services/sandboxedFileSystemService.d.ts

@@ -12,6 +12,7 @@ export declare class SandboxedFileSystemService implements FileSystemService {
     private sandboxManager;
     private cwd;
     constructor(sandboxManager: SandboxManager, cwd: string);
+    private sanitizeAndValidatePath;
     readTextFile(filePath: string): Promise<string>;
     writeTextFile(filePath: string, content: string): Promise<void>;
 }

package/dist/src/services/sandboxedFileSystemService.js

@@ -8,6 +8,7 @@ import {} from './fileSystemService.js';
 import {} from './sandboxManager.js';
 import { debugLogger } from '../utils/debugLogger.js';
 import { isNodeError } from '../utils/errors.js';
+import { resolveToRealPath, isSubpath } from '../utils/paths.js';
 /**
  * A FileSystemService implementation that performs operations through a sandbox.
  */
@@ -18,12 +19,34 @@ export class SandboxedFileSystemService {
         this.sandboxManager = sandboxManager;
         this.cwd = cwd;
     }
+    sanitizeAndValidatePath(filePath) {
+        const resolvedPath = resolveToRealPath(filePath);
+        const workspace = resolveToRealPath(this.sandboxManager.getWorkspace());
+        if (isSubpath(workspace, resolvedPath) || workspace === resolvedPath) {
+            return resolvedPath;
+        }
+        // Check if the path is explicitly allowed by the sandbox manager
+        const options = this.sandboxManager.getOptions();
+        const allowedPaths = options?.includeDirectories ?? [];
+        for (const allowed of allowedPaths) {
+            const resolvedAllowed = resolveToRealPath(allowed);
+            if (isSubpath(resolvedAllowed, resolvedPath) ||
+                resolvedAllowed === resolvedPath) {
+                return resolvedPath;
+            }
+        }
+        throw new Error(`Access denied: Path '${filePath}' is outside the workspace and not in allowed paths.`);
+    }
     async readTextFile(filePath) {
+        const safePath = this.sanitizeAndValidatePath(filePath);
         const prepared = await this.sandboxManager.prepareCommand({
             command: '__read',
-            args: [filePath],
+            args: [safePath],
             cwd: this.cwd,
             env: process.env,
+            policy: {
+                allowedPaths: [safePath],
+            },
         });
         return new Promise((resolve, reject) => {
             // Direct spawn is necessary here for streaming large file contents.
@@ -44,7 +67,15 @@ export class SandboxedFileSystemService {
                     resolve(output);
                 }
                 else {
-                    reject(new Error(`Sandbox Error: read_file failed for '${filePath}'. Exit code ${code}. ${error ? 'Details: ' + error : ''}`));
+                    const isEnoent = error.toLowerCase().includes('no such file or directory') ||
+                        error.toLowerCase().includes('enoent') ||
+                        error.toLowerCase().includes('could not find file') ||
+                        error.toLowerCase().includes('could not find a part of the path');
+                    const err = new Error(`Sandbox Error: read_file failed for '${filePath}'. Exit code ${code}. ${error ? 'Details: ' + error : ''}`);
+                    if (isEnoent) {
+                        Object.assign(err, { code: 'ENOENT' });
+                    }
+                    reject(err);
                 }
             });
             child.on('error', (err) => {
@@ -53,11 +84,20 @@ export class SandboxedFileSystemService {
         });
     }
     async writeTextFile(filePath, content) {
+        const safePath = this.sanitizeAndValidatePath(filePath);
         const prepared = await this.sandboxManager.prepareCommand({
             command: '__write',
-            args: [filePath],
+            args: [safePath],
             cwd: this.cwd,
             env: process.env,
+            policy: {
+                allowedPaths: [safePath],
+                additionalPermissions: {
+                    fileSystem: {
+                        write: [safePath],
+                    },
+                },
+            },
         });
         return new Promise((resolve, reject) => {
             // Direct spawn is necessary here for streaming large file contents.

package/dist/src/services/sandboxedFileSystemService.js.map

@@ -1 +1 @@
-{"version":3,"file":"sandboxedFileSystemService.js","sourceRoot":"","sources":["../../../src/services/sandboxedFileSystemService.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH,OAAO,EAAE,KAAK,EAAE,MAAM,oBAAoB,CAAC;AAC3C,OAAO,EAA0B,MAAM,wBAAwB,CAAC;AAChE,OAAO,EAAuB,MAAM,qBAAqB,CAAC;AAC1D,OAAO,EAAE,WAAW,EAAE,MAAM,yBAAyB,CAAC;AACtD,OAAO,EAAE,WAAW,EAAE,MAAM,oBAAoB,CAAC;AAEjD;;GAEG;AACH,MAAM,OAAO,0BAA0B;IAE3B;IACA;IAFV,YACU,cAA8B,EAC9B,GAAW;QADX,mBAAc,GAAd,cAAc,CAAgB;QAC9B,QAAG,GAAH,GAAG,CAAQ;IAClB,CAAC;IAEJ,KAAK,CAAC,YAAY,CAAC,QAAgB;QACjC,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,cAAc,CAAC,cAAc,CAAC;YACxD,OAAO,EAAE,QAAQ;YACjB,IAAI,EAAE,CAAC,QAAQ,CAAC;YAChB,GAAG,EAAE,IAAI,CAAC,GAAG;YACb,GAAG,EAAE,OAAO,CAAC,GAAG;SACjB,CAAC,CAAC;QAEH,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;YACrC,oEAAoE;YAEpE,MAAM,KAAK,GAAG,KAAK,CAAC,QAAQ,CAAC,OAAO,EAAE,QAAQ,CAAC,IAAI,EAAE;gBACnD,GAAG,EAAE,IAAI,CAAC,GAAG;gBACb,GAAG,EAAE,QAAQ,CAAC,GAAG;aAClB,CAAC,CAAC;YAEH,IAAI,MAAM,GAAG,EAAE,CAAC;YAChB,IAAI,KAAK,GAAG,EAAE,CAAC;YAEf,KAAK,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,EAAE;gBAChC,MAAM,IAAI,IAAI,CAAC,QAAQ,EAAE,CAAC;YAC5B,CAAC,CAAC,CAAC;YAEH,KAAK,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,EAAE;gBAChC,KAAK,IAAI,IAAI,CAAC,QAAQ,EAAE,CAAC;YAC3B,CAAC,CAAC,CAAC;YAEH,KAAK,CAAC,EAAE,CAAC,OAAO,EAAE,CAAC,IAAI,EAAE,EAAE;gBACzB,IAAI,IAAI,KAAK,CAAC,EAAE,CAAC;oBACf,OAAO,CAAC,MAAM,CAAC,CAAC;gBAClB,CAAC;qBAAM,CAAC;oBACN,MAAM,CACJ,IAAI,KAAK,CACP,wCAAwC,QAAQ,gBAAgB,IAAI,KAAK,KAAK,CAAC,CAAC,CAAC,WAAW,GAAG,KAAK,CAAC,CAAC,CAAC,EAAE,EAAE,CAC5G,CACF,CAAC;gBACJ,CAAC;YACH,CAAC,CAAC,CAAC;YAEH,KAAK,CAAC,EAAE,CAAC,OAAO,EAAE,CAAC,GAAG,EAAE,EAAE;gBACxB,MAAM,CACJ,IAAI,KAAK,CACP,iDAAiD,QAAQ,MAAM,GAAG,CAAC,OAAO,EAAE,CAC7E,CACF,CAAC;YACJ,CAAC,CAAC,CAAC;QACL,CAAC,CAAC,CAAC;IACL,CAAC;IAED,KAAK,CAAC,aAAa,CAAC,QAAgB,EAAE,OAAe;QACnD,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,cAAc,CAAC,cAAc,CAAC;YACxD,OAAO,EAAE,SAAS;YAClB,IAAI,EAAE,CAAC,QAAQ,CAAC;YAChB,GAAG,EAAE,IAAI,CAAC,GAAG;YACb,GAAG,EAAE,OAAO,CAAC,GAAG;SACjB,CAAC,CAAC;QAEH,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;YACrC,oEAAoE;YAEpE,MAAM,KAAK,GAAG,KAAK,CAAC,QAAQ,CAAC,OAAO,EAAE,QAAQ,CAAC,IAAI,EAAE;gBACnD,GAAG,EAAE,IAAI,CAAC,GAAG;gBACb,GAAG,EAAE,QAAQ,CAAC,GAAG;aAClB,CAAC,CAAC;YAEH,KAAK,CAAC,KAAK,EAAE,EAAE,CAAC,OAAO,EAAE,CAAC,GAAG,EAAE,EAAE;gBAC/B,kGAAkG;gBAClG,IAAI,WAAW,CAAC,GAAG,CAAC,IAAI,GAAG,CAAC,IAAI,KAAK,OAAO,EAAE,CAAC;oBAC7C,OAAO;gBACT,CAAC;gBACD,WAAW,CAAC,KAAK,CACf,mCAAmC,QAAQ,MACzC,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CACjD,EAAE,CACH,CAAC;YACJ,CAAC,CAAC,CAAC;YAEH,KAAK,CAAC,KAAK,EAAE,KAAK,CAAC,OAAO,CAAC,CAAC;YAC5B,KAAK,CAAC,KAAK,EAAE,GAAG,EAAE,CAAC;YAEnB,IAAI,KAAK,GAAG,EAAE,CAAC;YACf,KAAK,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,EAAE;gBAChC,KAAK,IAAI,IAAI,CAAC,QAAQ,EAAE,CAAC;YAC3B,CAAC,CAAC,CAAC;YAEH,KAAK,CAAC,EAAE,CAAC,OAAO,EAAE,CAAC,IAAI,EAAE,EAAE;gBACzB,IAAI,IAAI,KAAK,CAAC,EAAE,CAAC;oBACf,OAAO,EAAE,CAAC;gBACZ,CAAC;qBAAM,CAAC;oBACN,MAAM,CACJ,IAAI,KAAK,CACP,yCAAyC,QAAQ,gBAAgB,IAAI,KAAK,KAAK,CAAC,CAAC,CAAC,WAAW,GAAG,KAAK,CAAC,CAAC,CAAC,EAAE,EAAE,CAC7G,CACF,CAAC;gBACJ,CAAC;YACH,CAAC,CAAC,CAAC;YAEH,KAAK,CAAC,EAAE,CAAC,OAAO,EAAE,CAAC,GAAG,EAAE,EAAE;gBACxB,MAAM,CACJ,IAAI,KAAK,CACP,kDAAkD,QAAQ,MAAM,GAAG,CAAC,OAAO,EAAE,CAC9E,CACF,CAAC;YACJ,CAAC,CAAC,CAAC;QACL,CAAC,CAAC,CAAC;IACL,CAAC;CACF"}
+{"version":3,"file":"sandboxedFileSystemService.js","sourceRoot":"","sources":["../../../src/services/sandboxedFileSystemService.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH,OAAO,EAAE,KAAK,EAAE,MAAM,oBAAoB,CAAC;AAC3C,OAAO,EAA0B,MAAM,wBAAwB,CAAC;AAChE,OAAO,EAAuB,MAAM,qBAAqB,CAAC;AAC1D,OAAO,EAAE,WAAW,EAAE,MAAM,yBAAyB,CAAC;AACtD,OAAO,EAAE,WAAW,EAAE,MAAM,oBAAoB,CAAC;AACjD,OAAO,EAAE,iBAAiB,EAAE,SAAS,EAAE,MAAM,mBAAmB,CAAC;AAEjE;;GAEG;AACH,MAAM,OAAO,0BAA0B;IAE3B;IACA;IAFV,YACU,cAA8B,EAC9B,GAAW;QADX,mBAAc,GAAd,cAAc,CAAgB;QAC9B,QAAG,GAAH,GAAG,CAAQ;IAClB,CAAC;IAEI,uBAAuB,CAAC,QAAgB;QAC9C,MAAM,YAAY,GAAG,iBAAiB,CAAC,QAAQ,CAAC,CAAC;QACjD,MAAM,SAAS,GAAG,iBAAiB,CAAC,IAAI,CAAC,cAAc,CAAC,YAAY,EAAE,CAAC,CAAC;QAExE,IAAI,SAAS,CAAC,SAAS,EAAE,YAAY,CAAC,IAAI,SAAS,KAAK,YAAY,EAAE,CAAC;YACrE,OAAO,YAAY,CAAC;QACtB,CAAC;QAED,iEAAiE;QACjE,MAAM,OAAO,GAAG,IAAI,CAAC,cAAc,CAAC,UAAU,EAAE,CAAC;QACjD,MAAM,YAAY,GAAG,OAAO,EAAE,kBAAkB,IAAI,EAAE,CAAC;QAEvD,KAAK,MAAM,OAAO,IAAI,YAAY,EAAE,CAAC;YACnC,MAAM,eAAe,GAAG,iBAAiB,CAAC,OAAO,CAAC,CAAC;YACnD,IACE,SAAS,CAAC,eAAe,EAAE,YAAY,CAAC;gBACxC,eAAe,KAAK,YAAY,EAChC,CAAC;gBACD,OAAO,YAAY,CAAC;YACtB,CAAC;QACH,CAAC;QAED,MAAM,IAAI,KAAK,CACb,wBAAwB,QAAQ,sDAAsD,CACvF,CAAC;IACJ,CAAC;IAED,KAAK,CAAC,YAAY,CAAC,QAAgB;QACjC,MAAM,QAAQ,GAAG,IAAI,CAAC,uBAAuB,CAAC,QAAQ,CAAC,CAAC;QACxD,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,cAAc,CAAC,cAAc,CAAC;YACxD,OAAO,EAAE,QAAQ;YACjB,IAAI,EAAE,CAAC,QAAQ,CAAC;YAChB,GAAG,EAAE,IAAI,CAAC,GAAG;YACb,GAAG,EAAE,OAAO,CAAC,GAAG;YAChB,MAAM,EAAE;gBACN,YAAY,EAAE,CAAC,QAAQ,CAAC;aACzB;SACF,CAAC,CAAC;QAEH,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;YACrC,oEAAoE;YAEpE,MAAM,KAAK,GAAG,KAAK,CAAC,QAAQ,CAAC,OAAO,EAAE,QAAQ,CAAC,IAAI,EAAE;gBACnD,GAAG,EAAE,IAAI,CAAC,GAAG;gBACb,GAAG,EAAE,QAAQ,CAAC,GAAG;aAClB,CAAC,CAAC;YAEH,IAAI,MAAM,GAAG,EAAE,CAAC;YAChB,IAAI,KAAK,GAAG,EAAE,CAAC;YAEf,KAAK,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,EAAE;gBAChC,MAAM,IAAI,IAAI,CAAC,QAAQ,EAAE,CAAC;YAC5B,CAAC,CAAC,CAAC;YAEH,KAAK,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,EAAE;gBAChC,KAAK,IAAI,IAAI,CAAC,QAAQ,EAAE,CAAC;YAC3B,CAAC,CAAC,CAAC;YAEH,KAAK,CAAC,EAAE,CAAC,OAAO,EAAE,CAAC,IAAI,EAAE,EAAE;gBACzB,IAAI,IAAI,KAAK,CAAC,EAAE,CAAC;oBACf,OAAO,CAAC,MAAM,CAAC,CAAC;gBAClB,CAAC;qBAAM,CAAC;oBACN,MAAM,QAAQ,GACZ,KAAK,CAAC,WAAW,EAAE,CAAC,QAAQ,CAAC,2BAA2B,CAAC;wBACzD,KAAK,CAAC,WAAW,EAAE,CAAC,QAAQ,CAAC,QAAQ,CAAC;wBACtC,KAAK,CAAC,WAAW,EAAE,CAAC,QAAQ,CAAC,qBAAqB,CAAC;wBACnD,KAAK,CAAC,WAAW,EAAE,CAAC,QAAQ,CAAC,mCAAmC,CAAC,CAAC;oBACpE,MAAM,GAAG,GAAG,IAAI,KAAK,CACnB,wCAAwC,QAAQ,gBAAgB,IAAI,KAAK,KAAK,CAAC,CAAC,CAAC,WAAW,GAAG,KAAK,CAAC,CAAC,CAAC,EAAE,EAAE,CAC5G,CAAC;oBACF,IAAI,QAAQ,EAAE,CAAC;wBACb,MAAM,CAAC,MAAM,CAAC,GAAG,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,CAAC,CAAC;oBACzC,CAAC;oBACD,MAAM,CAAC,GAAG,CAAC,CAAC;gBACd,CAAC;YACH,CAAC,CAAC,CAAC;YAEH,KAAK,CAAC,EAAE,CAAC,OAAO,EAAE,CAAC,GAAG,EAAE,EAAE;gBACxB,MAAM,CACJ,IAAI,KAAK,CACP,iDAAiD,QAAQ,MAAM,GAAG,CAAC,OAAO,EAAE,CAC7E,CACF,CAAC;YACJ,CAAC,CAAC,CAAC;QACL,CAAC,CAAC,CAAC;IACL,CAAC;IAED,KAAK,CAAC,aAAa,CAAC,QAAgB,EAAE,OAAe;QACnD,MAAM,QAAQ,GAAG,IAAI,CAAC,uBAAuB,CAAC,QAAQ,CAAC,CAAC;QACxD,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,cAAc,CAAC,cAAc,CAAC;YACxD,OAAO,EAAE,SAAS;YAClB,IAAI,EAAE,CAAC,QAAQ,CAAC;YAChB,GAAG,EAAE,IAAI,CAAC,GAAG;YACb,GAAG,EAAE,OAAO,CAAC,GAAG;YAChB,MAAM,EAAE;gBACN,YAAY,EAAE,CAAC,QAAQ,CAAC;gBACxB,qBAAqB,EAAE;oBACrB,UAAU,EAAE;wBACV,KAAK,EAAE,CAAC,QAAQ,CAAC;qBAClB;iBACF;aACF;SACF,CAAC,CAAC;QAEH,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;YACrC,oEAAoE;YAEpE,MAAM,KAAK,GAAG,KAAK,CAAC,QAAQ,CAAC,OAAO,EAAE,QAAQ,CAAC,IAAI,EAAE;gBACnD,GAAG,EAAE,IAAI,CAAC,GAAG;gBACb,GAAG,EAAE,QAAQ,CAAC,GAAG;aAClB,CAAC,CAAC;YAEH,KAAK,CAAC,KAAK,EAAE,EAAE,CAAC,OAAO,EAAE,CAAC,GAAG,EAAE,EAAE;gBAC/B,kGAAkG;gBAClG,IAAI,WAAW,CAAC,GAAG,CAAC,IAAI,GAAG,CAAC,IAAI,KAAK,OAAO,EAAE,CAAC;oBAC7C,OAAO;gBACT,CAAC;gBACD,WAAW,CAAC,KAAK,CACf,mCAAmC,QAAQ,MACzC,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CACjD,EAAE,CACH,CAAC;YACJ,CAAC,CAAC,CAAC;YAEH,KAAK,CAAC,KAAK,EAAE,KAAK,CAAC,OAAO,CAAC,CAAC;YAC5B,KAAK,CAAC,KAAK,EAAE,GAAG,EAAE,CAAC;YAEnB,IAAI,KAAK,GAAG,EAAE,CAAC;YACf,KAAK,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,EAAE;gBAChC,KAAK,IAAI,IAAI,CAAC,QAAQ,EAAE,CAAC;YAC3B,CAAC,CAAC,CAAC;YAEH,KAAK,CAAC,EAAE,CAAC,OAAO,EAAE,CAAC,IAAI,EAAE,EAAE;gBACzB,IAAI,IAAI,KAAK,CAAC,EAAE,CAAC;oBACf,OAAO,EAAE,CAAC;gBACZ,CAAC;qBAAM,CAAC;oBACN,MAAM,CACJ,IAAI,KAAK,CACP,yCAAyC,QAAQ,gBAAgB,IAAI,KAAK,KAAK,CAAC,CAAC,CAAC,WAAW,GAAG,KAAK,CAAC,CAAC,CAAC,EAAE,EAAE,CAC7G,CACF,CAAC;gBACJ,CAAC;YACH,CAAC,CAAC,CAAC;YAEH,KAAK,CAAC,EAAE,CAAC,OAAO,EAAE,CAAC,GAAG,EAAE,EAAE;gBACxB,MAAM,CACJ,IAAI,KAAK,CACP,kDAAkD,QAAQ,MAAM,GAAG,CAAC,OAAO,EAAE,CAC9E,CACF,CAAC;YACJ,CAAC,CAAC,CAAC;QACL,CAAC,CAAC,CAAC;IACL,CAAC;CACF"}

package/dist/src/services/sandboxedFileSystemService.test.js

@@ -7,22 +7,39 @@ import { describe, it, expect, vi, beforeEach, afterEach, } from 'vitest';
 import { SandboxedFileSystemService } from './sandboxedFileSystemService.js';
 import { spawn } from 'node:child_process';
 import { EventEmitter } from 'node:events';
+import path from 'node:path';
 vi.mock('node:child_process', () => ({
     spawn: vi.fn(),
 }));
 class MockSandboxManager {
-    async prepareCommand(req) {
+    prepareCommand = vi.fn(async (req) => ({
+        program: 'sandbox.exe',
+        args: ['0', req.cwd, req.command, ...req.args],
+        env: req.env || {},
+    }));
+    isKnownSafeCommand() {
+        return false;
+    }
+    isDangerousCommand() {
+        return false;
+    }
+    parseDenials() {
+        return undefined;
+    }
+    getWorkspace() {
+        return path.resolve('/workspace');
+    }
+    getOptions() {
         return {
-            program: 'sandbox.exe',
-            args: ['0', req.cwd, req.command, ...req.args],
-            env: req.env || {},
+            workspace: path.resolve('/workspace'),
+            includeDirectories: [path.resolve('/test/cwd')],
         };
     }
 }
 describe('SandboxedFileSystemService', () => {
     let sandboxManager;
     let service;
-    const cwd = '/test/cwd';
+    const cwd = path.resolve('/test/cwd');
     beforeEach(() => {
         sandboxManager = new MockSandboxManager();
         service = new SandboxedFileSystemService(sandboxManager, cwd);
@@ -38,7 +55,8 @@ describe('SandboxedFileSystemService', () => {
             stderr: new EventEmitter(),
         });
         vi.mocked(spawn).mockReturnValue(mockChild);
-        const readPromise = service.readTextFile('/test/file.txt');
+        const testFile = path.resolve('/test/cwd/file.txt');
+        const readPromise = service.readTextFile(testFile);
         // Use setImmediate to ensure events are emitted after the promise starts executing
         setImmediate(() => {
             mockChild.stdout.emit('data', Buffer.from('file content'));
@@ -46,7 +64,14 @@ describe('SandboxedFileSystemService', () => {
         });
         const content = await readPromise;
         expect(content).toBe('file content');
-        expect(spawn).toHaveBeenCalledWith('sandbox.exe', ['0', cwd, '__read', '/test/file.txt'], expect.any(Object));
+        expect(vi.mocked(sandboxManager.prepareCommand)).toHaveBeenCalledWith(expect.objectContaining({
+            command: '__read',
+            args: [testFile],
+            policy: {
+                allowedPaths: [testFile],
+            },
+        }));
+        expect(spawn).toHaveBeenCalledWith('sandbox.exe', ['0', cwd, '__read', testFile], expect.any(Object));
     });
     it('should write a file through the sandbox', async () => {
         const mockChild = new EventEmitter();
@@ -60,14 +85,27 @@ describe('SandboxedFileSystemService', () => {
             stderr: new EventEmitter(),
         });
         vi.mocked(spawn).mockReturnValue(mockChild);
-        const writePromise = service.writeTextFile('/test/file.txt', 'new content');
+        const testFile = path.resolve('/test/cwd/file.txt');
+        const writePromise = service.writeTextFile(testFile, 'new content');
         setImmediate(() => {
             mockChild.emit('close', 0);
         });
         await writePromise;
         expect(mockStdin.write).toHaveBeenCalledWith('new content');
         expect(mockStdin.end).toHaveBeenCalled();
-        expect(spawn).toHaveBeenCalledWith('sandbox.exe', ['0', cwd, '__write', '/test/file.txt'], expect.any(Object));
+        expect(vi.mocked(sandboxManager.prepareCommand)).toHaveBeenCalledWith(expect.objectContaining({
+            command: '__write',
+            args: [testFile],
+            policy: {
+                allowedPaths: [testFile],
+                additionalPermissions: {
+                    fileSystem: {
+                        write: [testFile],
+                    },
+                },
+            },
+        }));
+        expect(spawn).toHaveBeenCalledWith('sandbox.exe', ['0', cwd, '__write', testFile], expect.any(Object));
     });
     it('should reject if sandbox command fails', async () => {
         const mockChild = new EventEmitter();
@@ -76,12 +114,60 @@ describe('SandboxedFileSystemService', () => {
             stderr: new EventEmitter(),
         });
         vi.mocked(spawn).mockReturnValue(mockChild);
-        const readPromise = service.readTextFile('/test/file.txt');
+        const testFile = path.resolve('/test/cwd/file.txt');
+        const readPromise = service.readTextFile(testFile);
         setImmediate(() => {
             mockChild.stderr.emit('data', Buffer.from('access denied'));
             mockChild.emit('close', 1);
         });
-        await expect(readPromise).rejects.toThrow("Sandbox Error: read_file failed for '/test/file.txt'. Exit code 1. Details: access denied");
+        await expect(readPromise).rejects.toThrow(`Sandbox Error: read_file failed for '${testFile}'. Exit code 1. Details: access denied`);
+    });
+    it('should set ENOENT code when file does not exist', async () => {
+        const mockChild = new EventEmitter();
+        Object.assign(mockChild, {
+            stdout: new EventEmitter(),
+            stderr: new EventEmitter(),
+        });
+        vi.mocked(spawn).mockReturnValue(mockChild);
+        const testFile = path.resolve('/test/cwd/missing.txt');
+        const readPromise = service.readTextFile(testFile);
+        setImmediate(() => {
+            mockChild.stderr.emit('data', Buffer.from('No such file or directory'));
+            mockChild.emit('close', 1);
+        });
+        try {
+            await readPromise;
+            expect.fail('Should have rejected');
+        }
+        catch (err) {
+            // @ts-expect-error - Checking message and code on unknown error
+            expect(err.message).toContain('No such file or directory');
+            // @ts-expect-error - Checking message and code on unknown error
+            expect(err.code).toBe('ENOENT');
+        }
+    });
+    it('should set ENOENT code when file does not exist on Windows', async () => {
+        const mockChild = new EventEmitter();
+        Object.assign(mockChild, {
+            stdout: new EventEmitter(),
+            stderr: new EventEmitter(),
+        });
+        vi.mocked(spawn).mockReturnValue(mockChild);
+        const testFile = path.resolve('/test/cwd/missing.txt');
+        const readPromise = service.readTextFile(testFile);
+        setImmediate(() => {
+            mockChild.stderr.emit('data', Buffer.from('Could not find a part of the path'));
+            mockChild.emit('close', 1);
+        });
+        try {
+            await readPromise;
+            expect.fail('Should have rejected');
+        }
+        catch (err) {
+            const error = err;
+            expect(error.message).toContain('Could not find a part of the path');
+            expect(error.code).toBe('ENOENT');
+        }
     });
 });
 //# sourceMappingURL=sandboxedFileSystemService.test.js.map

package/dist/src/services/sandboxedFileSystemService.test.js.map

@@ -1 +1 @@
-{"version":3,"file":"sandboxedFileSystemService.test.js","sourceRoot":"","sources":["../../../src/services/sandboxedFileSystemService.test.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH,OAAO,EACL,QAAQ,EACR,EAAE,EACF,MAAM,EACN,EAAE,EACF,UAAU,EACV,SAAS,GAEV,MAAM,QAAQ,CAAC;AAChB,OAAO,EAAE,0BAA0B,EAAE,MAAM,iCAAiC,CAAC;AAM7E,OAAO,EAAE,KAAK,EAAqB,MAAM,oBAAoB,CAAC;AAC9D,OAAO,EAAE,YAAY,EAAE,MAAM,aAAa,CAAC;AAG3C,EAAE,CAAC,IAAI,CAAC,oBAAoB,EAAE,GAAG,EAAE,CAAC,CAAC;IACnC,KAAK,EAAE,EAAE,CAAC,EAAE,EAAE;CACf,CAAC,CAAC,CAAC;AAEJ,MAAM,kBAAkB;IACtB,KAAK,CAAC,cAAc,CAAC,GAAmB;QACtC,OAAO;YACL,OAAO,EAAE,aAAa;YACtB,IAAI,EAAE,CAAC,GAAG,EAAE,GAAG,CAAC,GAAG,EAAE,GAAG,CAAC,OAAO,EAAE,GAAG,GAAG,CAAC,IAAI,CAAC;YAC9C,GAAG,EAAE,GAAG,CAAC,GAAG,IAAI,EAAE;SACnB,CAAC;IACJ,CAAC;CACF;AAED,QAAQ,CAAC,4BAA4B,EAAE,GAAG,EAAE;IAC1C,IAAI,cAAkC,CAAC;IACvC,IAAI,OAAmC,CAAC;IACxC,MAAM,GAAG,GAAG,WAAW,CAAC;IAExB,UAAU,CAAC,GAAG,EAAE;QACd,cAAc,GAAG,IAAI,kBAAkB,EAAE,CAAC;QAC1C,OAAO,GAAG,IAAI,0BAA0B,CAAC,cAAc,EAAE,GAAG,CAAC,CAAC;QAC9D,EAAE,CAAC,aAAa,EAAE,CAAC;IACrB,CAAC,CAAC,CAAC;IAEH,SAAS,CAAC,GAAG,EAAE;QACb,EAAE,CAAC,eAAe,EAAE,CAAC;IACvB,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,wCAAwC,EAAE,KAAK,IAAI,EAAE;QACtD,MAAM,SAAS,GAAG,IAAI,YAAY,EAA6B,CAAC;QAChE,MAAM,CAAC,MAAM,CAAC,SAAS,EAAE;YACvB,MAAM,EAAE,IAAI,YAAY,EAAE;YAC1B,MAAM,EAAE,IAAI,YAAY,EAAE;SAC3B,CAAC,CAAC;QAEH,EAAE,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,eAAe,CAAC,SAAS,CAAC,CAAC;QAE5C,MAAM,WAAW,GAAG,OAAO,CAAC,YAAY,CAAC,gBAAgB,CAAC,CAAC;QAE3D,mFAAmF;QACnF,YAAY,CAAC,GAAG,EAAE;YAChB,SAAS,CAAC,MAAO,CAAC,IAAI,CAAC,MAAM,EAAE,MAAM,CAAC,IAAI,CAAC,cAAc,CAAC,CAAC,CAAC;YAC5D,SAAS,CAAC,IAAI,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC;QAC7B,CAAC,CAAC,CAAC;QAEH,MAAM,OAAO,GAAG,MAAM,WAAW,CAAC;QAClC,MAAM,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,cAAc,CAAC,CAAC;QACrC,MAAM,CAAC,KAAK,CAAC,CAAC,oBAAoB,CAChC,aAAa,EACb,CAAC,GAAG,EAAE,GAAG,EAAE,QAAQ,EAAE,gBAAgB,CAAC,EACtC,MAAM,CAAC,GAAG,CAAC,MAAM,CAAC,CACnB,CAAC;IACJ,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,yCAAyC,EAAE,KAAK,IAAI,EAAE;QACvD,MAAM,SAAS,GAAG,IAAI,YAAY,EAA6B,CAAC;QAChE,MAAM,SAAS,GAAG,IAAI,YAAY,EAAE,CAAC;QACrC,MAAM,CAAC,MAAM,CAAC,SAAS,EAAE;YACvB,KAAK,EAAE,EAAE,CAAC,EAAE,EAAE;YACd,GAAG,EAAE,EAAE,CAAC,EAAE,EAAE;SACb,CAAC,CAAC;QACH,MAAM,CAAC,MAAM,CAAC,SAAS,EAAE;YACvB,KAAK,EAAE,SAAgC;YACvC,MAAM,EAAE,IAAI,YAAY,EAAE;SAC3B,CAAC,CAAC;QAEH,EAAE,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,eAAe,CAAC,SAAS,CAAC,CAAC;QAE5C,MAAM,YAAY,GAAG,OAAO,CAAC,aAAa,CAAC,gBAAgB,EAAE,aAAa,CAAC,CAAC;QAE5E,YAAY,CAAC,GAAG,EAAE;YAChB,SAAS,CAAC,IAAI,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC;QAC7B,CAAC,CAAC,CAAC;QAEH,MAAM,YAAY,CAAC;QACnB,MAAM,CACH,SAAwC,CAAC,KAAK,CAChD,CAAC,oBAAoB,CAAC,aAAa,CAAC,CAAC;QACtC,MAAM,CAAE,SAAsC,CAAC,GAAG,CAAC,CAAC,gBAAgB,EAAE,CAAC;QACvE,MAAM,CAAC,KAAK,CAAC,CAAC,oBAAoB,CAChC,aAAa,EACb,CAAC,GAAG,EAAE,GAAG,EAAE,SAAS,EAAE,gBAAgB,CAAC,EACvC,MAAM,CAAC,GAAG,CAAC,MAAM,CAAC,CACnB,CAAC;IACJ,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,wCAAwC,EAAE,KAAK,IAAI,EAAE;QACtD,MAAM,SAAS,GAAG,IAAI,YAAY,EAA6B,CAAC;QAChE,MAAM,CAAC,MAAM,CAAC,SAAS,EAAE;YACvB,MAAM,EAAE,IAAI,YAAY,EAAE;YAC1B,MAAM,EAAE,IAAI,YAAY,EAAE;SAC3B,CAAC,CAAC;QAEH,EAAE,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,eAAe,CAAC,SAAS,CAAC,CAAC;QAE5C,MAAM,WAAW,GAAG,OAAO,CAAC,YAAY,CAAC,gBAAgB,CAAC,CAAC;QAE3D,YAAY,CAAC,GAAG,EAAE;YAChB,SAAS,CAAC,MAAO,CAAC,IAAI,CAAC,MAAM,EAAE,MAAM,CAAC,IAAI,CAAC,eAAe,CAAC,CAAC,CAAC;YAC7D,SAAS,CAAC,IAAI,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC;QAC7B,CAAC,CAAC,CAAC;QAEH,MAAM,MAAM,CAAC,WAAW,CAAC,CAAC,OAAO,CAAC,OAAO,CACvC,2FAA2F,CAC5F,CAAC;IACJ,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC"}
+{"version":3,"file":"sandboxedFileSystemService.test.js","sourceRoot":"","sources":["../../../src/services/sandboxedFileSystemService.test.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH,OAAO,EACL,QAAQ,EACR,EAAE,EACF,MAAM,EACN,EAAE,EACF,UAAU,EACV,SAAS,GAEV,MAAM,QAAQ,CAAC;AAChB,OAAO,EAAE,0BAA0B,EAAE,MAAM,iCAAiC,CAAC;AAO7E,OAAO,EAAE,KAAK,EAAqB,MAAM,oBAAoB,CAAC;AAC9D,OAAO,EAAE,YAAY,EAAE,MAAM,aAAa,CAAC;AAE3C,OAAO,IAAI,MAAM,WAAW,CAAC;AAE7B,EAAE,CAAC,IAAI,CAAC,oBAAoB,EAAE,GAAG,EAAE,CAAC,CAAC;IACnC,KAAK,EAAE,EAAE,CAAC,EAAE,EAAE;CACf,CAAC,CAAC,CAAC;AAEJ,MAAM,kBAAkB;IACtB,cAAc,GAAG,EAAE,CAAC,EAAE,CACpB,KAAK,EAAE,GAAmB,EAA6B,EAAE,CAAC,CAAC;QACzD,OAAO,EAAE,aAAa;QACtB,IAAI,EAAE,CAAC,GAAG,EAAE,GAAG,CAAC,GAAG,EAAE,GAAG,CAAC,OAAO,EAAE,GAAG,GAAG,CAAC,IAAI,CAAC;QAC9C,GAAG,EAAE,GAAG,CAAC,GAAG,IAAI,EAAE;KACnB,CAAC,CACH,CAAC;IAEF,kBAAkB;QAChB,OAAO,KAAK,CAAC;IACf,CAAC;IAED,kBAAkB;QAChB,OAAO,KAAK,CAAC;IACf,CAAC;IAED,YAAY;QACV,OAAO,SAAS,CAAC;IACnB,CAAC;IAED,YAAY;QACV,OAAO,IAAI,CAAC,OAAO,CAAC,YAAY,CAAC,CAAC;IACpC,CAAC;IAED,UAAU;QACR,OAAO;YACL,SAAS,EAAE,IAAI,CAAC,OAAO,CAAC,YAAY,CAAC;YACrC,kBAAkB,EAAE,CAAC,IAAI,CAAC,OAAO,CAAC,WAAW,CAAC,CAAC;SAChD,CAAC;IACJ,CAAC;CACF;AAED,QAAQ,CAAC,4BAA4B,EAAE,GAAG,EAAE;IAC1C,IAAI,cAAkC,CAAC;IACvC,IAAI,OAAmC,CAAC;IACxC,MAAM,GAAG,GAAG,IAAI,CAAC,OAAO,CAAC,WAAW,CAAC,CAAC;IAEtC,UAAU,CAAC,GAAG,EAAE;QACd,cAAc,GAAG,IAAI,kBAAkB,EAAE,CAAC;QAC1C,OAAO,GAAG,IAAI,0BAA0B,CAAC,cAAc,EAAE,GAAG,CAAC,CAAC;QAC9D,EAAE,CAAC,aAAa,EAAE,CAAC;IACrB,CAAC,CAAC,CAAC;IAEH,SAAS,CAAC,GAAG,EAAE;QACb,EAAE,CAAC,eAAe,EAAE,CAAC;IACvB,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,wCAAwC,EAAE,KAAK,IAAI,EAAE;QACtD,MAAM,SAAS,GAAG,IAAI,YAAY,EAA6B,CAAC;QAChE,MAAM,CAAC,MAAM,CAAC,SAAS,EAAE;YACvB,MAAM,EAAE,IAAI,YAAY,EAAE;YAC1B,MAAM,EAAE,IAAI,YAAY,EAAE;SAC3B,CAAC,CAAC;QAEH,EAAE,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,eAAe,CAAC,SAAS,CAAC,CAAC;QAE5C,MAAM,QAAQ,GAAG,IAAI,CAAC,OAAO,CAAC,oBAAoB,CAAC,CAAC;QACpD,MAAM,WAAW,GAAG,OAAO,CAAC,YAAY,CAAC,QAAQ,CAAC,CAAC;QAEnD,mFAAmF;QACnF,YAAY,CAAC,GAAG,EAAE;YAChB,SAAS,CAAC,MAAO,CAAC,IAAI,CAAC,MAAM,EAAE,MAAM,CAAC,IAAI,CAAC,cAAc,CAAC,CAAC,CAAC;YAC5D,SAAS,CAAC,IAAI,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC;QAC7B,CAAC,CAAC,CAAC;QAEH,MAAM,OAAO,GAAG,MAAM,WAAW,CAAC;QAClC,MAAM,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,cAAc,CAAC,CAAC;QACrC,MAAM,CAAC,EAAE,CAAC,MAAM,CAAC,cAAc,CAAC,cAAc,CAAC,CAAC,CAAC,oBAAoB,CACnE,MAAM,CAAC,gBAAgB,CAAC;YACtB,OAAO,EAAE,QAAQ;YACjB,IAAI,EAAE,CAAC,QAAQ,CAAC;YAChB,MAAM,EAAE;gBACN,YAAY,EAAE,CAAC,QAAQ,CAAC;aACzB;SACF,CAAC,CACH,CAAC;QACF,MAAM,CAAC,KAAK,CAAC,CAAC,oBAAoB,CAChC,aAAa,EACb,CAAC,GAAG,EAAE,GAAG,EAAE,QAAQ,EAAE,QAAQ,CAAC,EAC9B,MAAM,CAAC,GAAG,CAAC,MAAM,CAAC,CACnB,CAAC;IACJ,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,yCAAyC,EAAE,KAAK,IAAI,EAAE;QACvD,MAAM,SAAS,GAAG,IAAI,YAAY,EAA6B,CAAC;QAChE,MAAM,SAAS,GAAG,IAAI,YAAY,EAAE,CAAC;QACrC,MAAM,CAAC,MAAM,CAAC,SAAS,EAAE;YACvB,KAAK,EAAE,EAAE,CAAC,EAAE,EAAE;YACd,GAAG,EAAE,EAAE,CAAC,EAAE,EAAE;SACb,CAAC,CAAC;QACH,MAAM,CAAC,MAAM,CAAC,SAAS,EAAE;YACvB,KAAK,EAAE,SAAgC;YACvC,MAAM,EAAE,IAAI,YAAY,EAAE;SAC3B,CAAC,CAAC;QAEH,EAAE,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,eAAe,CAAC,SAAS,CAAC,CAAC;QAE5C,MAAM,QAAQ,GAAG,IAAI,CAAC,OAAO,CAAC,oBAAoB,CAAC,CAAC;QACpD,MAAM,YAAY,GAAG,OAAO,CAAC,aAAa,CAAC,QAAQ,EAAE,aAAa,CAAC,CAAC;QAEpE,YAAY,CAAC,GAAG,EAAE;YAChB,SAAS,CAAC,IAAI,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC;QAC7B,CAAC,CAAC,CAAC;QAEH,MAAM,YAAY,CAAC;QACnB,MAAM,CACH,SAAwC,CAAC,KAAK,CAChD,CAAC,oBAAoB,CAAC,aAAa,CAAC,CAAC;QACtC,MAAM,CAAE,SAAsC,CAAC,GAAG,CAAC,CAAC,gBAAgB,EAAE,CAAC;QACvE,MAAM,CAAC,EAAE,CAAC,MAAM,CAAC,cAAc,CAAC,cAAc,CAAC,CAAC,CAAC,oBAAoB,CACnE,MAAM,CAAC,gBAAgB,CAAC;YACtB,OAAO,EAAE,SAAS;YAClB,IAAI,EAAE,CAAC,QAAQ,CAAC;YAChB,MAAM,EAAE;gBACN,YAAY,EAAE,CAAC,QAAQ,CAAC;gBACxB,qBAAqB,EAAE;oBACrB,UAAU,EAAE;wBACV,KAAK,EAAE,CAAC,QAAQ,CAAC;qBAClB;iBACF;aACF;SACF,CAAC,CACH,CAAC;QACF,MAAM,CAAC,KAAK,CAAC,CAAC,oBAAoB,CAChC,aAAa,EACb,CAAC,GAAG,EAAE,GAAG,EAAE,SAAS,EAAE,QAAQ,CAAC,EAC/B,MAAM,CAAC,GAAG,CAAC,MAAM,CAAC,CACnB,CAAC;IACJ,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,wCAAwC,EAAE,KAAK,IAAI,EAAE;QACtD,MAAM,SAAS,GAAG,IAAI,YAAY,EAA6B,CAAC;QAChE,MAAM,CAAC,MAAM,CAAC,SAAS,EAAE;YACvB,MAAM,EAAE,IAAI,YAAY,EAAE;YAC1B,MAAM,EAAE,IAAI,YAAY,EAAE;SAC3B,CAAC,CAAC;QAEH,EAAE,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,eAAe,CAAC,SAAS,CAAC,CAAC;QAE5C,MAAM,QAAQ,GAAG,IAAI,CAAC,OAAO,CAAC,oBAAoB,CAAC,CAAC;QACpD,MAAM,WAAW,GAAG,OAAO,CAAC,YAAY,CAAC,QAAQ,CAAC,CAAC;QAEnD,YAAY,CAAC,GAAG,EAAE;YAChB,SAAS,CAAC,MAAO,CAAC,IAAI,CAAC,MAAM,EAAE,MAAM,CAAC,IAAI,CAAC,eAAe,CAAC,CAAC,CAAC;YAC7D,SAAS,CAAC,IAAI,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC;QAC7B,CAAC,CAAC,CAAC;QAEH,MAAM,MAAM,CAAC,WAAW,CAAC,CAAC,OAAO,CAAC,OAAO,CACvC,wCAAwC,QAAQ,wCAAwC,CACzF,CAAC;IACJ,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,iDAAiD,EAAE,KAAK,IAAI,EAAE;QAC/D,MAAM,SAAS,GAAG,IAAI,YAAY,EAA6B,CAAC;QAChE,MAAM,CAAC,MAAM,CAAC,SAAS,EAAE;YACvB,MAAM,EAAE,IAAI,YAAY,EAAE;YAC1B,MAAM,EAAE,IAAI,YAAY,EAAE;SAC3B,CAAC,CAAC;QAEH,EAAE,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,eAAe,CAAC,SAAS,CAAC,CAAC;QAE5C,MAAM,QAAQ,GAAG,IAAI,CAAC,OAAO,CAAC,uBAAuB,CAAC,CAAC;QACvD,MAAM,WAAW,GAAG,OAAO,CAAC,YAAY,CAAC,QAAQ,CAAC,CAAC;QAEnD,YAAY,CAAC,GAAG,EAAE;YAChB,SAAS,CAAC,MAAO,CAAC,IAAI,CAAC,MAAM,EAAE,MAAM,CAAC,IAAI,CAAC,2BAA2B,CAAC,CAAC,CAAC;YACzE,SAAS,CAAC,IAAI,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC;QAC7B,CAAC,CAAC,CAAC;QAEH,IAAI,CAAC;YACH,MAAM,WAAW,CAAC;YAClB,MAAM,CAAC,IAAI,CAAC,sBAAsB,CAAC,CAAC;QACtC,CAAC;QAAC,OAAO,GAAY,EAAE,CAAC;YACtB,gEAAgE;YAChE,MAAM,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,SAAS,CAAC,2BAA2B,CAAC,CAAC;YAC3D,gEAAgE;YAChE,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;QAClC,CAAC;IACH,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,4DAA4D,EAAE,KAAK,IAAI,EAAE;QAC1E,MAAM,SAAS,GAAG,IAAI,YAAY,EAA6B,CAAC;QAChE,MAAM,CAAC,MAAM,CAAC,SAAS,EAAE;YACvB,MAAM,EAAE,IAAI,YAAY,EAAE;YAC1B,MAAM,EAAE,IAAI,YAAY,EAAE;SAC3B,CAAC,CAAC;QAEH,EAAE,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,eAAe,CAAC,SAAS,CAAC,CAAC;QAE5C,MAAM,QAAQ,GAAG,IAAI,CAAC,OAAO,CAAC,uBAAuB,CAAC,CAAC;QACvD,MAAM,WAAW,GAAG,OAAO,CAAC,YAAY,CAAC,QAAQ,CAAC,CAAC;QAEnD,YAAY,CAAC,GAAG,EAAE;YAChB,SAAS,CAAC,MAAO,CAAC,IAAI,CACpB,MAAM,EACN,MAAM,CAAC,IAAI,CAAC,mCAAmC,CAAC,CACjD,CAAC;YACF,SAAS,CAAC,IAAI,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC;QAC7B,CAAC,CAAC,CAAC;QAEH,IAAI,CAAC;YACH,MAAM,WAAW,CAAC;YAClB,MAAM,CAAC,IAAI,CAAC,sBAAsB,CAAC,CAAC;QACtC,CAAC;QAAC,OAAO,GAAY,EAAE,CAAC;YACtB,MAAM,KAAK,GAAG,GAAyC,CAAC;YACxD,MAAM,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,SAAS,CAAC,mCAAmC,CAAC,CAAC;YACrE,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;QACpC,CAAC;IACH,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC"}

package/dist/src/services/shellExecutionService.d.ts

@@ -36,6 +36,9 @@ export interface ShellExecutionConfig {
     scrollback?: number;
     maxSerializedLines?: number;
     sandboxConfig?: SandboxConfig;
+    backgroundCompletionBehavior?: 'inject' | 'notify' | 'silent';
+    originalCommand?: string;
+    sessionId?: string;
 }
 /**
  * Describes a structured event emitted during shell command execution.
@@ -46,12 +49,25 @@ export type ShellOutputEvent = ExecutionOutputEvent;
  * management, cross-platform compatibility, and streaming output capabilities.
  *
  */
+export type BackgroundProcess = {
+    pid: number;
+    command: string;
+    status: 'running' | 'exited';
+    exitCode?: number | null;
+    signal?: number | null;
+};
+export type BackgroundProcessRecord = Omit<BackgroundProcess, 'pid'> & {
+    startTime: number;
+    endTime?: number;
+};
 export declare class ShellExecutionService {
     private static activePtys;
     private static activeChildProcesses;
     private static backgroundLogPids;
     private static backgroundLogStreams;
+    private static backgroundProcessHistory;
     static getLogDir(): string;
+    private static formatShellBackgroundCompletion;
     static getLogFilePath(pid: number): string;
     private static syncBackgroundLog;
     private static cleanupLogStream;
@@ -99,7 +115,7 @@ export declare class ShellExecutionService {
      *
      * @param pid The process ID of the target PTY.
      */
-    static background(pid: number): void;
+    static background(pid: number, sessionId?: string, command?: string): void;
     static subscribe(pid: number, listener: (event: ShellOutputEvent) => void): () => void;
     /**
      * Resizes the pseudo-terminal (PTY) of a running process.
@@ -116,4 +132,5 @@ export declare class ShellExecutionService {
      * @param lines The number of lines to scroll.
      */
     static scrollPty(pid: number, lines: number): void;
+    static listBackgroundProcesses(sessionId: string): BackgroundProcess[];
 }