@machina.ai/cell-cli 1.59.0-rc2 → 1.64.0-rc1

package/dist/src/utils/sandboxUtils.js

@@ -4,10 +4,11 @@
  * SPDX-License-Identifier: Apache-2.0
  */
 import os from 'node:os';
+import path from 'node:path';
 import fs from 'node:fs';
 import { readFile } from 'node:fs/promises';
 import { quote } from 'shell-quote';
-import { debugLogger, CELL_DIR } from '@google/gemini-cli-core';
+import { debugLogger, CELL_DIR, homedir, resolveToRealPath, } from '@google/gemini-cli-core';
 export const LOCAL_DEV_SANDBOX_IMAGE_NAME = 'cell-cli-sandbox';
 export const SANDBOX_NETWORK_NAME = 'cell-cli-sandbox';
 export const SANDBOX_PROXY_NAME = 'cell-cli-sandbox-proxy';
@@ -21,6 +22,229 @@ export const BUILTIN_SEATBELT_PROFILES = [
     'strict-open',
     'strict-proxied',
 ];
+function isRecord(value) {
+    return typeof value === 'object' && value !== null && !Array.isArray(value);
+}
+/**
+ * Known sensitive or credential file names that must not be mounted into the sandbox container.
+ */
+export const SENSITIVE_SETTINGS_FILENAMES = new Set([
+    'oauth_creds.json',
+    'google_accounts.json',
+    'gemini-credentials.json',
+    'mcp-oauth-tokens.json',
+    'a2a-oauth-tokens.json',
+    'trusted_hooks.json',
+    'trustedfolders.json',
+    'trustedFolders.json',
+    'policy_integrity.json',
+]);
+/**
+ * Returns true if the given file or directory path corresponds to credentials or sensitive data
+ * that must not be mounted into the untrusted sandbox container.
+ */
+export function isCredentialOrSensitivePath(targetPath, rootDir) {
+    if (rootDir && path.resolve(targetPath) === path.resolve(rootDir)) {
+        return false;
+    }
+    const base = path.basename(targetPath).toLowerCase();
+    if (SENSITIVE_SETTINGS_FILENAMES.has(base)) {
+        return true;
+    }
+    const isRootChild = rootDir
+        ? path.dirname(path.resolve(targetPath)) === path.resolve(rootDir)
+        : true;
+    if (isRootChild && (base === 'history' || base === 'tmp' || base === 'bin')) {
+        return true;
+    }
+    const hasSensitiveSuffix = (s) => {
+        if (base === s)
+            return true;
+        if (base.endsWith(s)) {
+            const charBefore = base.charAt(base.length - s.length - 1);
+            return charBefore === '-' || charBefore === '_' || charBefore === '.';
+        }
+        return false;
+    };
+    if (base.endsWith('.credentials') ||
+        hasSensitiveSuffix('credentials') ||
+        hasSensitiveSuffix('credentials.json') ||
+        hasSensitiveSuffix('tokens.json') ||
+        hasSensitiveSuffix('token.json') ||
+        hasSensitiveSuffix('token') ||
+        hasSensitiveSuffix('creds.json') ||
+        hasSensitiveSuffix('cred.json') ||
+        base.endsWith('.env') ||
+        base.endsWith('.key') ||
+        base.endsWith('.pem') ||
+        base.endsWith('.p12') ||
+        hasSensitiveSuffix('key.json')) {
+        return true;
+    }
+    return false;
+}
+/**
+ * Resolves a path to its real path, falling back to path.resolve if it does not exist (ENOENT).
+ * Rethrows unrecoverable errors so callers can fail closed.
+ */
+function safeResolveToRealPath(targetPath) {
+    let current = path.resolve(targetPath);
+    const parts = [];
+    const visited = new Set();
+    while (current && current !== path.dirname(current)) {
+        const visitKey = os.platform() === 'win32' ? current.toLowerCase() : current;
+        if (visited.has(visitKey)) {
+            throw new Error('Circular symlink detected');
+        }
+        visited.add(visitKey);
+        try {
+            const real = resolveToRealPath(current);
+            return path.resolve(real, ...parts.slice().reverse());
+        }
+        catch (err) {
+            if (isRecord(err) && err['code'] === 'ENOENT') {
+                try {
+                    const stat = fs.lstatSync(current);
+                    if (stat?.isSymbolicLink?.()) {
+                        const target = fs.readlinkSync(current);
+                        current = path.resolve(path.dirname(current), target);
+                        continue;
+                    }
+                }
+                catch (lstatErr) {
+                    if (!isRecord(lstatErr) || lstatErr['code'] !== 'ENOENT') {
+                        throw lstatErr;
+                    }
+                }
+                parts.push(path.basename(current));
+                current = path.dirname(current);
+                continue;
+            }
+            throw err;
+        }
+    }
+    return path.resolve(targetPath);
+}
+/**
+ * Checks if a host path is sensitive and should be prohibited from mounting
+ * into the sandbox container. This protects ~/.cell-cli, user home directories,
+ * and sensitive credential files from being accessed or poisoned.
+ */
+export function isSensitiveHostPath(hostPath) {
+    try {
+        const rawHome = homedir();
+        if (!rawHome || rawHome.trim() === '') {
+            // If home directory cannot be determined, do not resolve it to process.cwd().
+            // Only block user-tilde notations and sensitive files.
+            if (hostPath === '~' ||
+                hostPath === '~/' ||
+                hostPath === '~\\' ||
+                hostPath === '~/.cell-cli' ||
+                hostPath.startsWith('~/.cell-cli/') ||
+                hostPath === '~\\.cell-cli' ||
+                hostPath.startsWith('~\\.cell-cli\\')) {
+                return true;
+            }
+            const resolvedPath = safeResolveToRealPath(hostPath);
+            const baseName = path.basename(resolvedPath).toLowerCase();
+            if (baseName === '.env' ||
+                baseName.startsWith('.env.') ||
+                SENSITIVE_SETTINGS_FILENAMES.has(baseName)) {
+                return true;
+            }
+            return false;
+        }
+        const home = safeResolveToRealPath(rawHome);
+        let expandedPath = hostPath;
+        if (hostPath === '~' || hostPath === '~/' || hostPath === '~\\') {
+            expandedPath = home;
+        }
+        else if (hostPath.startsWith('~/') || hostPath.startsWith('~\\')) {
+            expandedPath = path.join(home, hostPath.slice(2));
+        }
+        const normalized = safeResolveToRealPath(expandedPath);
+        const geminiDirCandidate = path.join(home, CELL_DIR);
+        const geminiDirOnHost = safeResolveToRealPath(geminiDirCandidate);
+        const isWindows = os.platform() === 'win32';
+        const arePathsEqual = (p1, p2) => isWindows
+            ? path.resolve(p1).toLowerCase() === path.resolve(p2).toLowerCase()
+            : path.resolve(p1) === path.resolve(p2);
+        const isSubpathOf = (child, parent) => {
+            const resolvedChild = path.resolve(child);
+            const resolvedParent = path.resolve(parent);
+            const parentWithSep = resolvedParent.endsWith(path.sep)
+                ? resolvedParent
+                : resolvedParent + path.sep;
+            return isWindows
+                ? resolvedChild.toLowerCase().startsWith(parentWithSep.toLowerCase())
+                : resolvedChild.startsWith(parentWithSep);
+        };
+        // Block mounting user home directory root directly or any of its parent directories (e.g. /home, /)
+        if (arePathsEqual(normalized, home) || isSubpathOf(home, normalized)) {
+            return true;
+        }
+        // Block mounting ~/.cell-cli, anything inside ~/.cell-cli, or any of its parent directories
+        if (arePathsEqual(normalized, geminiDirOnHost) ||
+            isSubpathOf(normalized, geminiDirOnHost) ||
+            isSubpathOf(geminiDirOnHost, normalized)) {
+            return true;
+        }
+        // Block sensitive secrets, credential stores, and environment files anywhere
+        const baseName = path.basename(normalized).toLowerCase();
+        if (baseName === '.env' ||
+            baseName.startsWith('.env.') ||
+            SENSITIVE_SETTINGS_FILENAMES.has(baseName)) {
+            return true;
+        }
+    }
+    catch {
+        return true; // Fail closed if path resolution fails
+    }
+    return false;
+}
+/**
+ * Sanitizes user settings for the sandbox by stripping unvalidated hooks,
+ * command hooks, API keys, and sensitive tokens.
+ */
+export function sanitizeSettingsForSandbox(settings) {
+    const sanitized = structuredClone(settings);
+    // Remove hooks to prevent configuration poisoning and unvalidated hook execution
+    delete sanitized['hooks'];
+    // Remove command execution hooks in tools if present
+    const tools = sanitized['tools'];
+    if (isRecord(tools)) {
+        const safeTools = { ...tools };
+        delete safeTools['discoveryCommand'];
+        delete safeTools['callCommand'];
+        sanitized['tools'] = safeTools;
+    }
+    // Remove sensitive keys and credentials
+    delete sanitized['apiKey'];
+    delete sanitized['geminiApiKey'];
+    delete sanitized['googleApiKey'];
+    return sanitized;
+}
+/**
+ * Creates an isolated settings directory in a temporary location, populated with non-sensitive
+ * configuration files from the user settings directory while excluding credential and auth files.
+ */
+export function prepareIsolatedSettingsDir(userSettingsDirOnHost) {
+    const baseTmpDir = os.tmpdir() || '/tmp';
+    const isolatedDir = fs.mkdtempSync(path.join(baseTmpDir, 'cell-sandbox-settings-'));
+    fs.chmodSync(isolatedDir, 0o700);
+    if (fs.existsSync(userSettingsDirOnHost)) {
+        try {
+            fs.cpSync(userSettingsDirOnHost, isolatedDir, {
+                recursive: true,
+                filter: (source) => !isCredentialOrSensitivePath(source, userSettingsDirOnHost),
+            });
+        }
+        catch (err) {
+            debugLogger.warn(`Failed to copy user settings to sandbox directory: ${err instanceof Error ? err.message : String(err)}`);
+        }
+    }
+    return isolatedDir;
+}
 export function getContainerPath(hostPath) {
     if (os.platform() !== 'win32') {
         return hostPath;

package/dist/src/utils/sandboxUtils.js.map

@@ -1 +1 @@
-{"version":3,"file":"sandboxUtils.js","sourceRoot":"","sources":["../../../src/utils/sandboxUtils.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH,OAAO,EAAE,MAAM,SAAS,CAAC;AACzB,OAAO,EAAE,MAAM,SAAS,CAAC;AACzB,OAAO,EAAE,QAAQ,EAAE,MAAM,kBAAkB,CAAC;AAC5C,OAAO,EAAE,KAAK,EAAE,MAAM,aAAa,CAAC;AACpC,OAAO,EAAE,WAAW,EAAE,QAAQ,EAAE,MAAM,yBAAyB,CAAC;AAEhE,MAAM,CAAC,MAAM,4BAA4B,GAAG,kBAAkB,CAAC;AAC/D,MAAM,CAAC,MAAM,oBAAoB,GAAG,kBAAkB,CAAC;AACvD,MAAM,CAAC,MAAM,kBAAkB,GAAG,wBAAwB,CAAC;AAC3D,MAAM,CAAC,MAAM,yBAAyB,GAAG;IACvC,iBAAiB;IACjB,mBAAmB;IACnB,oBAAoB;IACpB,kBAAkB;IAClB,oBAAoB;IACpB,qBAAqB;IACrB,aAAa;IACb,gBAAgB;CACjB,CAAC;AAEF,MAAM,UAAU,gBAAgB,CAAC,QAAgB;IAC/C,IAAI,EAAE,CAAC,QAAQ,EAAE,KAAK,OAAO,EAAE,CAAC;QAC9B,OAAO,QAAQ,CAAC;IAClB,CAAC;IAED,MAAM,kBAAkB,GAAG,QAAQ,CAAC,OAAO,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC;IACxD,MAAM,KAAK,GAAG,kBAAkB,CAAC,KAAK,CAAC,kBAAkB,CAAC,CAAC;IAC3D,IAAI,KAAK,EAAE,CAAC;QACV,OAAO,IAAI,KAAK,CAAC,CAAC,CAAC,CAAC,WAAW,EAAE,IAAI,KAAK,CAAC,CAAC,CAAC,EAAE,CAAC;IAClD,CAAC;IACD,OAAO,kBAAkB,CAAC;AAC5B,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,6BAA6B;IACjD,MAAM,MAAM,GAAG,OAAO,CAAC,GAAG,CAAC,qBAAqB,CAAC,EAAE,WAAW,EAAE,CAAC,IAAI,EAAE,CAAC;IAExE,IAAI,MAAM,KAAK,GAAG,IAAI,MAAM,KAAK,MAAM,EAAE,CAAC;QACxC,OAAO,IAAI,CAAC;IACd,CAAC;IACD,IAAI,MAAM,KAAK,GAAG,IAAI,MAAM,KAAK,OAAO,EAAE,CAAC;QACzC,OAAO,KAAK,CAAC;IACf,CAAC;IAED,+EAA+E;IAC/E,IAAI,EAAE,CAAC,QAAQ,EAAE,KAAK,OAAO,EAAE,CAAC;QAC9B,IAAI,CAAC;YACH,MAAM,gBAAgB,GAAG,MAAM,QAAQ,CAAC,iBAAiB,EAAE,MAAM,CAAC,CAAC;YACnE,MAAM,iBAAiB,GACrB,gBAAgB,CAAC,KAAK,CACpB,6DAA6D,CAC9D;gBACD,gBAAgB,CAAC,KAAK,CACpB,uDAAuD,CACxD,CAAC;YAEJ,IAAI,iBAAiB,EAAE,CAAC;gBACtB,WAAW,CAAC,GAAG,CACb,0EAA0E,CAC3E,CAAC;gBACF,OAAO,IAAI,CAAC;YACd,CAAC;YAED,6EAA6E;YAC7E,qDAAqD;YACrD,MAAM,GAAG,GAAG,EAAE,CAAC,QAAQ,EAAE,CAAC,GAAG,CAAC;YAC9B,IAAI,GAAG,KAAK,IAAI,IAAI,GAAG,KAAK,CAAC,EAAE,CAAC;gBAC9B,WAAW,CAAC,IAAI,CACd,qDAAqD,GAAG,KAAK;oBAC3D,0FAA0F,CAC7F,CAAC;YACJ,CAAC;QACH,CAAC;QAAC,MAAM,CAAC;YACP,iEAAiE;YACjE,oDAAoD;YACpD,WAAW,CAAC,IAAI,CACd,gGAAgG,CACjG,CAAC;QACJ,CAAC;IACH,CAAC;IACD,OAAO,KAAK,CAAC,CAAC,gDAAgD;AAChE,CAAC;AAED,MAAM,UAAU,cAAc,CAAC,KAAa;IAC1C,MAAM,CAAC,QAAQ,EAAE,GAAG,CAAC,GAAG,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;IACzC,MAAM,IAAI,GAAG,QAAQ,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,IAAI,eAAe,CAAC;IAC3D,OAAO,GAAG,CAAC,CAAC,CAAC,GAAG,IAAI,IAAI,GAAG,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC;AACvC,CAAC;AAED,MAAM,UAAU,KAAK;IACnB,OAAO,CAAC,OAAO,CAAC,GAAG,CAAC,eAAe,CAAC,IAAI,EAAE,CAAC;SACxC,KAAK,CAAC,GAAG,CAAC;SACV,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;SACvB,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC;AAC1B,CAAC;AAED,MAAM,UAAU,UAAU,CAAC,OAAe,EAAE,OAAiB;IAC3D,MAAM,SAAS,GAAG,EAAE,CAAC,QAAQ,EAAE,KAAK,OAAO,CAAC;IAC5C,MAAM,gBAAgB,GAAG,gBAAgB,CAAC,OAAO,CAAC,CAAC;IACnD,MAAM,SAAS,GAAG,EAAE,CAAC;IACrB,MAAM,aAAa,GAAG,SAAS,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC;IAE5C,IAAI,UAAU,GAAG,EAAE,CAAC;IACpB,IAAI,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC;QACxB,MAAM,KAAK,GAAG,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,KAAK,CAAC,aAAa,CAAC,CAAC;QACvD,KAAK,MAAM,CAAC,IAAI,KAAK,EAAE,CAAC;YACtB,MAAM,aAAa,GAAG,gBAAgB,CAAC,CAAC,CAAC,CAAC;YAC1C,IACE,aAAa,CAAC,WAAW,EAAE,CAAC,UAAU,CAAC,gBAAgB,CAAC,WAAW,EAAE,CAAC,EACtE,CAAC;gBACD,UAAU,IAAI,IAAI,aAAa,EAAE,CAAC;YACpC,CAAC;QACH,CAAC;IACH,CAAC;IACD,IAAI,UAAU,EAAE,CAAC;QACf,SAAS,CAAC,IAAI,CAAC,qBAAqB,UAAU,IAAI,CAAC,CAAC;IACtD,CAAC;IAED,IAAI,gBAAgB,GAAG,EAAE,CAAC;IAC1B,IAAI,OAAO,CAAC,GAAG,CAAC,YAAY,CAAC,EAAE,CAAC;QAC9B,MAAM,KAAK,GAAG,OAAO,CAAC,GAAG,CAAC,YAAY,CAAC,CAAC,KAAK,CAAC,aAAa,CAAC,CAAC;QAC7D,KAAK,MAAM,CAAC,IAAI,KAAK,EAAE,CAAC;YACtB,MAAM,aAAa,GAAG,gBAAgB,CAAC,CAAC,CAAC,CAAC;YAC1C,IACE,aAAa,CAAC,WAAW,EAAE,CAAC,UAAU,CAAC,gBAAgB,CAAC,WAAW,EAAE,CAAC,EACtE,CAAC;gBACD,gBAAgB,IAAI,IAAI,aAAa,EAAE,CAAC;YAC1C,CAAC;QACH,CAAC;IACH,CAAC;IACD,IAAI,gBAAgB,EAAE,CAAC;QACrB,SAAS,CAAC,IAAI,CAAC,iCAAiC,gBAAgB,IAAI,CAAC,CAAC;IACxE,CAAC;IAED,MAAM,oBAAoB,GAAG,GAAG,QAAQ,iBAAiB,CAAC;IAC1D,IAAI,EAAE,CAAC,UAAU,CAAC,oBAAoB,CAAC,EAAE,CAAC;QACxC,SAAS,CAAC,IAAI,CAAC,UAAU,gBAAgB,CAAC,oBAAoB,CAAC,GAAG,CAAC,CAAC;IACtE,CAAC;IAED,KAAK,EAAE,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,EAAE,CACpB,SAAS,CAAC,IAAI,CACZ,qBAAqB,CAAC,sDAAsD,CAAC,iBAAiB,CAC/F,CACF,CAAC;IAEF,MAAM,aAAa,GAAG,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,KAAK,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;IAClE,MAAM,WAAW,GACf,OAAO,CAAC,GAAG,CAAC,OAAO,CAAC,KAAK,MAAM,IAAI,OAAO,CAAC,GAAG,CAAC,OAAO,CAAC,KAAK,GAAG,CAAC;IAClE,MAAM,MAAM,GACV,OAAO,CAAC,GAAG,CAAC,UAAU,CAAC,KAAK,aAAa;QACvC,CAAC,CAAC,WAAW;YACX,CAAC,CAAC,kBAAkB;YACpB,CAAC,CAAC,iCAAiC;QACrC,CAAC,CAAC,WAAW;YACX,CAAC,CAAC,8BAA8B,OAAO,CAAC,GAAG,CAAC,YAAY,CAAC,IAAI,MAAM,kBAAkB;YACrF,CAAC,CAAC,QAAQ,CAAC;IAEjB,MAAM,IAAI,GAAG,CAAC,GAAG,SAAS,EAAE,MAAM,EAAE,GAAG,aAAa,CAAC,CAAC;IACtD,OAAO,CAAC,MAAM,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC;AACxC,CAAC"}
+{"version":3,"file":"sandboxUtils.js","sourceRoot":"","sources":["../../../src/utils/sandboxUtils.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH,OAAO,EAAE,MAAM,SAAS,CAAC;AACzB,OAAO,IAAI,MAAM,WAAW,CAAC;AAC7B,OAAO,EAAE,MAAM,SAAS,CAAC;AACzB,OAAO,EAAE,QAAQ,EAAE,MAAM,kBAAkB,CAAC;AAC5C,OAAO,EAAE,KAAK,EAAE,MAAM,aAAa,CAAC;AACpC,OAAO,EACL,WAAW,EACX,QAAQ,EACR,OAAO,EACP,iBAAiB,GAClB,MAAM,yBAAyB,CAAC;AAEjC,MAAM,CAAC,MAAM,4BAA4B,GAAG,kBAAkB,CAAC;AAC/D,MAAM,CAAC,MAAM,oBAAoB,GAAG,kBAAkB,CAAC;AACvD,MAAM,CAAC,MAAM,kBAAkB,GAAG,wBAAwB,CAAC;AAC3D,MAAM,CAAC,MAAM,yBAAyB,GAAG;IACvC,iBAAiB;IACjB,mBAAmB;IACnB,oBAAoB;IACpB,kBAAkB;IAClB,oBAAoB;IACpB,qBAAqB;IACrB,aAAa;IACb,gBAAgB;CACjB,CAAC;AAEF,SAAS,QAAQ,CAAC,KAAc;IAC9B,OAAO,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,IAAI,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;AAC9E,CAAC;AAED;;GAEG;AACH,MAAM,CAAC,MAAM,4BAA4B,GAAG,IAAI,GAAG,CAAC;IAClD,kBAAkB;IAClB,sBAAsB;IACtB,yBAAyB;IACzB,uBAAuB;IACvB,uBAAuB;IACvB,oBAAoB;IACpB,qBAAqB;IACrB,qBAAqB;IACrB,uBAAuB;CACxB,CAAC,CAAC;AAEH;;;GAGG;AACH,MAAM,UAAU,2BAA2B,CACzC,UAAkB,EAClB,OAAgB;IAEhB,IAAI,OAAO,IAAI,IAAI,CAAC,OAAO,CAAC,UAAU,CAAC,KAAK,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,EAAE,CAAC;QAClE,OAAO,KAAK,CAAC;IACf,CAAC;IACD,MAAM,IAAI,GAAG,IAAI,CAAC,QAAQ,CAAC,UAAU,CAAC,CAAC,WAAW,EAAE,CAAC;IACrD,IAAI,4BAA4B,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC;QAC3C,OAAO,IAAI,CAAC;IACd,CAAC;IACD,MAAM,WAAW,GAAG,OAAO;QACzB,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC,KAAK,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC;QAClE,CAAC,CAAC,IAAI,CAAC;IACT,IAAI,WAAW,IAAI,CAAC,IAAI,KAAK,SAAS,IAAI,IAAI,KAAK,KAAK,IAAI,IAAI,KAAK,KAAK,CAAC,EAAE,CAAC;QAC5E,OAAO,IAAI,CAAC;IACd,CAAC;IACD,MAAM,kBAAkB,GAAG,CAAC,CAAS,EAAE,EAAE;QACvC,IAAI,IAAI,KAAK,CAAC;YAAE,OAAO,IAAI,CAAC;QAC5B,IAAI,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,CAAC;YACrB,MAAM,UAAU,GAAG,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,MAAM,GAAG,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC;YAC3D,OAAO,UAAU,KAAK,GAAG,IAAI,UAAU,KAAK,GAAG,IAAI,UAAU,KAAK,GAAG,CAAC;QACxE,CAAC;QACD,OAAO,KAAK,CAAC;IACf,CAAC,CAAC;IAEF,IACE,IAAI,CAAC,QAAQ,CAAC,cAAc,CAAC;QAC7B,kBAAkB,CAAC,aAAa,CAAC;QACjC,kBAAkB,CAAC,kBAAkB,CAAC;QACtC,kBAAkB,CAAC,aAAa,CAAC;QACjC,kBAAkB,CAAC,YAAY,CAAC;QAChC,kBAAkB,CAAC,OAAO,CAAC;QAC3B,kBAAkB,CAAC,YAAY,CAAC;QAChC,kBAAkB,CAAC,WAAW,CAAC;QAC/B,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC;QACrB,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC;QACrB,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC;QACrB,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC;QACrB,kBAAkB,CAAC,UAAU,CAAC,EAC9B,CAAC;QACD,OAAO,IAAI,CAAC;IACd,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED;;;GAGG;AACH,SAAS,qBAAqB,CAAC,UAAkB;IAC/C,IAAI,OAAO,GAAG,IAAI,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC;IACvC,MAAM,KAAK,GAAa,EAAE,CAAC;IAC3B,MAAM,OAAO,GAAG,IAAI,GAAG,EAAU,CAAC;IAElC,OAAO,OAAO,IAAI,OAAO,KAAK,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,EAAE,CAAC;QACpD,MAAM,QAAQ,GACZ,EAAE,CAAC,QAAQ,EAAE,KAAK,OAAO,CAAC,CAAC,CAAC,OAAO,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC;QAC9D,IAAI,OAAO,CAAC,GAAG,CAAC,QAAQ,CAAC,EAAE,CAAC;YAC1B,MAAM,IAAI,KAAK,CAAC,2BAA2B,CAAC,CAAC;QAC/C,CAAC;QACD,OAAO,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;QAEtB,IAAI,CAAC;YACH,MAAM,IAAI,GAAG,iBAAiB,CAAC,OAAO,CAAC,CAAC;YACxC,OAAO,IAAI,CAAC,OAAO,CAAC,IAAI,EAAE,GAAG,KAAK,CAAC,KAAK,EAAE,CAAC,OAAO,EAAE,CAAC,CAAC;QACxD,CAAC;QAAC,OAAO,GAAY,EAAE,CAAC;YACtB,IAAI,QAAQ,CAAC,GAAG,CAAC,IAAI,GAAG,CAAC,MAAM,CAAC,KAAK,QAAQ,EAAE,CAAC;gBAC9C,IAAI,CAAC;oBACH,MAAM,IAAI,GAAG,EAAE,CAAC,SAAS,CAAC,OAAO,CAAC,CAAC;oBACnC,IAAI,IAAI,EAAE,cAAc,EAAE,EAAE,EAAE,CAAC;wBAC7B,MAAM,MAAM,GAAG,EAAE,CAAC,YAAY,CAAC,OAAO,CAAC,CAAC;wBACxC,OAAO,GAAG,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,EAAE,MAAM,CAAC,CAAC;wBACtD,SAAS;oBACX,CAAC;gBACH,CAAC;gBAAC,OAAO,QAAiB,EAAE,CAAC;oBAC3B,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC,IAAI,QAAQ,CAAC,MAAM,CAAC,KAAK,QAAQ,EAAE,CAAC;wBACzD,MAAM,QAAQ,CAAC;oBACjB,CAAC;gBACH,CAAC;gBACD,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC,CAAC;gBACnC,OAAO,GAAG,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC;gBAChC,SAAS;YACX,CAAC;YACD,MAAM,GAAG,CAAC;QACZ,CAAC;IACH,CAAC;IACD,OAAO,IAAI,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC;AAClC,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,mBAAmB,CAAC,QAAgB;IAClD,IAAI,CAAC;QACH,MAAM,OAAO,GAAG,OAAO,EAAE,CAAC;QAC1B,IAAI,CAAC,OAAO,IAAI,OAAO,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,CAAC;YACtC,8EAA8E;YAC9E,uDAAuD;YACvD,IACE,QAAQ,KAAK,GAAG;gBAChB,QAAQ,KAAK,IAAI;gBACjB,QAAQ,KAAK,KAAK;gBAClB,QAAQ,KAAK,aAAa;gBAC1B,QAAQ,CAAC,UAAU,CAAC,cAAc,CAAC;gBACnC,QAAQ,KAAK,cAAc;gBAC3B,QAAQ,CAAC,UAAU,CAAC,gBAAgB,CAAC,EACrC,CAAC;gBACD,OAAO,IAAI,CAAC;YACd,CAAC;YAED,MAAM,YAAY,GAAG,qBAAqB,CAAC,QAAQ,CAAC,CAAC;YAErD,MAAM,QAAQ,GAAG,IAAI,CAAC,QAAQ,CAAC,YAAY,CAAC,CAAC,WAAW,EAAE,CAAC;YAC3D,IACE,QAAQ,KAAK,MAAM;gBACnB,QAAQ,CAAC,UAAU,CAAC,OAAO,CAAC;gBAC5B,4BAA4B,CAAC,GAAG,CAAC,QAAQ,CAAC,EAC1C,CAAC;gBACD,OAAO,IAAI,CAAC;YACd,CAAC;YACD,OAAO,KAAK,CAAC;QACf,CAAC;QAED,MAAM,IAAI,GAAG,qBAAqB,CAAC,OAAO,CAAC,CAAC;QAE5C,IAAI,YAAY,GAAG,QAAQ,CAAC;QAC5B,IAAI,QAAQ,KAAK,GAAG,IAAI,QAAQ,KAAK,IAAI,IAAI,QAAQ,KAAK,KAAK,EAAE,CAAC;YAChE,YAAY,GAAG,IAAI,CAAC;QACtB,CAAC;aAAM,IAAI,QAAQ,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,QAAQ,CAAC,UAAU,CAAC,KAAK,CAAC,EAAE,CAAC;YACnE,YAAY,GAAG,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC;QACpD,CAAC;QAED,MAAM,UAAU,GAAG,qBAAqB,CAAC,YAAY,CAAC,CAAC;QAEvD,MAAM,kBAAkB,GAAG,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,QAAQ,CAAC,CAAC;QACrD,MAAM,eAAe,GAAG,qBAAqB,CAAC,kBAAkB,CAAC,CAAC;QAElE,MAAM,SAAS,GAAG,EAAE,CAAC,QAAQ,EAAE,KAAK,OAAO,CAAC;QAC5C,MAAM,aAAa,GAAG,CAAC,EAAU,EAAE,EAAU,EAAE,EAAE,CAC/C,SAAS;YACP,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC,WAAW,EAAE,KAAK,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC,WAAW,EAAE;YACnE,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC,KAAK,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC;QAC5C,MAAM,WAAW,GAAG,CAAC,KAAa,EAAE,MAAc,EAAE,EAAE;YACpD,MAAM,aAAa,GAAG,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;YAC1C,MAAM,cAAc,GAAG,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;YAC5C,MAAM,aAAa,GAAG,cAAc,CAAC,QAAQ,CAAC,IAAI,CAAC,GAAG,CAAC;gBACrD,CAAC,CAAC,cAAc;gBAChB,CAAC,CAAC,cAAc,GAAG,IAAI,CAAC,GAAG,CAAC;YAC9B,OAAO,SAAS;gBACd,CAAC,CAAC,aAAa,CAAC,WAAW,EAAE,CAAC,UAAU,CAAC,aAAa,CAAC,WAAW,EAAE,CAAC;gBACrE,CAAC,CAAC,aAAa,CAAC,UAAU,CAAC,aAAa,CAAC,CAAC;QAC9C,CAAC,CAAC;QAEF,oGAAoG;QACpG,IAAI,aAAa,CAAC,UAAU,EAAE,IAAI,CAAC,IAAI,WAAW,CAAC,IAAI,EAAE,UAAU,CAAC,EAAE,CAAC;YACrE,OAAO,IAAI,CAAC;QACd,CAAC;QAED,4FAA4F;QAC5F,IACE,aAAa,CAAC,UAAU,EAAE,eAAe,CAAC;YAC1C,WAAW,CAAC,UAAU,EAAE,eAAe,CAAC;YACxC,WAAW,CAAC,eAAe,EAAE,UAAU,CAAC,EACxC,CAAC;YACD,OAAO,IAAI,CAAC;QACd,CAAC;QAED,6EAA6E;QAC7E,MAAM,QAAQ,GAAG,IAAI,CAAC,QAAQ,CAAC,UAAU,CAAC,CAAC,WAAW,EAAE,CAAC;QACzD,IACE,QAAQ,KAAK,MAAM;YACnB,QAAQ,CAAC,UAAU,CAAC,OAAO,CAAC;YAC5B,4BAA4B,CAAC,GAAG,CAAC,QAAQ,CAAC,EAC1C,CAAC;YACD,OAAO,IAAI,CAAC;QACd,CAAC;IACH,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC,CAAC,uCAAuC;IACtD,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,0BAA0B,CACxC,QAAiC;IAEjC,MAAM,SAAS,GAAG,eAAe,CAAC,QAAQ,CAAC,CAAC;IAE5C,iFAAiF;IACjF,OAAO,SAAS,CAAC,OAAO,CAAC,CAAC;IAE1B,qDAAqD;IACrD,MAAM,KAAK,GAAG,SAAS,CAAC,OAAO,CAAC,CAAC;IACjC,IAAI,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC;QACpB,MAAM,SAAS,GAAG,EAAE,GAAG,KAAK,EAAE,CAAC;QAC/B,OAAO,SAAS,CAAC,kBAAkB,CAAC,CAAC;QACrC,OAAO,SAAS,CAAC,aAAa,CAAC,CAAC;QAChC,SAAS,CAAC,OAAO,CAAC,GAAG,SAAS,CAAC;IACjC,CAAC;IAED,wCAAwC;IACxC,OAAO,SAAS,CAAC,QAAQ,CAAC,CAAC;IAC3B,OAAO,SAAS,CAAC,cAAc,CAAC,CAAC;IACjC,OAAO,SAAS,CAAC,cAAc,CAAC,CAAC;IAEjC,OAAO,SAAS,CAAC;AACnB,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,0BAA0B,CACxC,qBAA6B;IAE7B,MAAM,UAAU,GAAG,EAAE,CAAC,MAAM,EAAE,IAAI,MAAM,CAAC;IACzC,MAAM,WAAW,GAAG,EAAE,CAAC,WAAW,CAChC,IAAI,CAAC,IAAI,CAAC,UAAU,EAAE,wBAAwB,CAAC,CAChD,CAAC;IACF,EAAE,CAAC,SAAS,CAAC,WAAW,EAAE,KAAK,CAAC,CAAC;IAEjC,IAAI,EAAE,CAAC,UAAU,CAAC,qBAAqB,CAAC,EAAE,CAAC;QACzC,IAAI,CAAC;YACH,EAAE,CAAC,MAAM,CAAC,qBAAqB,EAAE,WAAW,EAAE;gBAC5C,SAAS,EAAE,IAAI;gBACf,MAAM,EAAE,CAAC,MAAM,EAAE,EAAE,CACjB,CAAC,2BAA2B,CAAC,MAAM,EAAE,qBAAqB,CAAC;aAC9D,CAAC,CAAC;QACL,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,WAAW,CAAC,IAAI,CACd,sDAAsD,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,CACzG,CAAC;QACJ,CAAC;IACH,CAAC;IAED,OAAO,WAAW,CAAC;AACrB,CAAC;AAED,MAAM,UAAU,gBAAgB,CAAC,QAAgB;IAC/C,IAAI,EAAE,CAAC,QAAQ,EAAE,KAAK,OAAO,EAAE,CAAC;QAC9B,OAAO,QAAQ,CAAC;IAClB,CAAC;IAED,MAAM,kBAAkB,GAAG,QAAQ,CAAC,OAAO,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC;IACxD,MAAM,KAAK,GAAG,kBAAkB,CAAC,KAAK,CAAC,kBAAkB,CAAC,CAAC;IAC3D,IAAI,KAAK,EAAE,CAAC;QACV,OAAO,IAAI,KAAK,CAAC,CAAC,CAAC,CAAC,WAAW,EAAE,IAAI,KAAK,CAAC,CAAC,CAAC,EAAE,CAAC;IAClD,CAAC;IACD,OAAO,kBAAkB,CAAC;AAC5B,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,6BAA6B;IACjD,MAAM,MAAM,GAAG,OAAO,CAAC,GAAG,CAAC,qBAAqB,CAAC,EAAE,WAAW,EAAE,CAAC,IAAI,EAAE,CAAC;IAExE,IAAI,MAAM,KAAK,GAAG,IAAI,MAAM,KAAK,MAAM,EAAE,CAAC;QACxC,OAAO,IAAI,CAAC;IACd,CAAC;IACD,IAAI,MAAM,KAAK,GAAG,IAAI,MAAM,KAAK,OAAO,EAAE,CAAC;QACzC,OAAO,KAAK,CAAC;IACf,CAAC;IAED,+EAA+E;IAC/E,IAAI,EAAE,CAAC,QAAQ,EAAE,KAAK,OAAO,EAAE,CAAC;QAC9B,IAAI,CAAC;YACH,MAAM,gBAAgB,GAAG,MAAM,QAAQ,CAAC,iBAAiB,EAAE,MAAM,CAAC,CAAC;YACnE,MAAM,iBAAiB,GACrB,gBAAgB,CAAC,KAAK,CACpB,6DAA6D,CAC9D;gBACD,gBAAgB,CAAC,KAAK,CACpB,uDAAuD,CACxD,CAAC;YAEJ,IAAI,iBAAiB,EAAE,CAAC;gBACtB,WAAW,CAAC,GAAG,CACb,0EAA0E,CAC3E,CAAC;gBACF,OAAO,IAAI,CAAC;YACd,CAAC;YAED,6EAA6E;YAC7E,qDAAqD;YACrD,MAAM,GAAG,GAAG,EAAE,CAAC,QAAQ,EAAE,CAAC,GAAG,CAAC;YAC9B,IAAI,GAAG,KAAK,IAAI,IAAI,GAAG,KAAK,CAAC,EAAE,CAAC;gBAC9B,WAAW,CAAC,IAAI,CACd,qDAAqD,GAAG,KAAK;oBAC3D,0FAA0F,CAC7F,CAAC;YACJ,CAAC;QACH,CAAC;QAAC,MAAM,CAAC;YACP,iEAAiE;YACjE,oDAAoD;YACpD,WAAW,CAAC,IAAI,CACd,gGAAgG,CACjG,CAAC;QACJ,CAAC;IACH,CAAC;IACD,OAAO,KAAK,CAAC,CAAC,gDAAgD;AAChE,CAAC;AAED,MAAM,UAAU,cAAc,CAAC,KAAa;IAC1C,MAAM,CAAC,QAAQ,EAAE,GAAG,CAAC,GAAG,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;IACzC,MAAM,IAAI,GAAG,QAAQ,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,IAAI,eAAe,CAAC;IAC3D,OAAO,GAAG,CAAC,CAAC,CAAC,GAAG,IAAI,IAAI,GAAG,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC;AACvC,CAAC;AAED,MAAM,UAAU,KAAK;IACnB,OAAO,CAAC,OAAO,CAAC,GAAG,CAAC,eAAe,CAAC,IAAI,EAAE,CAAC;SACxC,KAAK,CAAC,GAAG,CAAC;SACV,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;SACvB,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC;AAC1B,CAAC;AAED,MAAM,UAAU,UAAU,CAAC,OAAe,EAAE,OAAiB;IAC3D,MAAM,SAAS,GAAG,EAAE,CAAC,QAAQ,EAAE,KAAK,OAAO,CAAC;IAC5C,MAAM,gBAAgB,GAAG,gBAAgB,CAAC,OAAO,CAAC,CAAC;IACnD,MAAM,SAAS,GAAG,EAAE,CAAC;IACrB,MAAM,aAAa,GAAG,SAAS,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC;IAE5C,IAAI,UAAU,GAAG,EAAE,CAAC;IACpB,IAAI,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC;QACxB,MAAM,KAAK,GAAG,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,KAAK,CAAC,aAAa,CAAC,CAAC;QACvD,KAAK,MAAM,CAAC,IAAI,KAAK,EAAE,CAAC;YACtB,MAAM,aAAa,GAAG,gBAAgB,CAAC,CAAC,CAAC,CAAC;YAC1C,IACE,aAAa,CAAC,WAAW,EAAE,CAAC,UAAU,CAAC,gBAAgB,CAAC,WAAW,EAAE,CAAC,EACtE,CAAC;gBACD,UAAU,IAAI,IAAI,aAAa,EAAE,CAAC;YACpC,CAAC;QACH,CAAC;IACH,CAAC;IACD,IAAI,UAAU,EAAE,CAAC;QACf,SAAS,CAAC,IAAI,CAAC,qBAAqB,UAAU,IAAI,CAAC,CAAC;IACtD,CAAC;IAED,IAAI,gBAAgB,GAAG,EAAE,CAAC;IAC1B,IAAI,OAAO,CAAC,GAAG,CAAC,YAAY,CAAC,EAAE,CAAC;QAC9B,MAAM,KAAK,GAAG,OAAO,CAAC,GAAG,CAAC,YAAY,CAAC,CAAC,KAAK,CAAC,aAAa,CAAC,CAAC;QAC7D,KAAK,MAAM,CAAC,IAAI,KAAK,EAAE,CAAC;YACtB,MAAM,aAAa,GAAG,gBAAgB,CAAC,CAAC,CAAC,CAAC;YAC1C,IACE,aAAa,CAAC,WAAW,EAAE,CAAC,UAAU,CAAC,gBAAgB,CAAC,WAAW,EAAE,CAAC,EACtE,CAAC;gBACD,gBAAgB,IAAI,IAAI,aAAa,EAAE,CAAC;YAC1C,CAAC;QACH,CAAC;IACH,CAAC;IACD,IAAI,gBAAgB,EAAE,CAAC;QACrB,SAAS,CAAC,IAAI,CAAC,iCAAiC,gBAAgB,IAAI,CAAC,CAAC;IACxE,CAAC;IAED,MAAM,oBAAoB,GAAG,GAAG,QAAQ,iBAAiB,CAAC;IAC1D,IAAI,EAAE,CAAC,UAAU,CAAC,oBAAoB,CAAC,EAAE,CAAC;QACxC,SAAS,CAAC,IAAI,CAAC,UAAU,gBAAgB,CAAC,oBAAoB,CAAC,GAAG,CAAC,CAAC;IACtE,CAAC;IAED,KAAK,EAAE,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,EAAE,CACpB,SAAS,CAAC,IAAI,CACZ,qBAAqB,CAAC,sDAAsD,CAAC,iBAAiB,CAC/F,CACF,CAAC;IAEF,MAAM,aAAa,GAAG,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,KAAK,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;IAClE,MAAM,WAAW,GACf,OAAO,CAAC,GAAG,CAAC,OAAO,CAAC,KAAK,MAAM,IAAI,OAAO,CAAC,GAAG,CAAC,OAAO,CAAC,KAAK,GAAG,CAAC;IAClE,MAAM,MAAM,GACV,OAAO,CAAC,GAAG,CAAC,UAAU,CAAC,KAAK,aAAa;QACvC,CAAC,CAAC,WAAW;YACX,CAAC,CAAC,kBAAkB;YACpB,CAAC,CAAC,iCAAiC;QACrC,CAAC,CAAC,WAAW;YACX,CAAC,CAAC,8BAA8B,OAAO,CAAC,GAAG,CAAC,YAAY,CAAC,IAAI,MAAM,kBAAkB;YACrF,CAAC,CAAC,QAAQ,CAAC;IAEjB,MAAM,IAAI,GAAG,CAAC,GAAG,SAAS,EAAE,MAAM,EAAE,GAAG,aAAa,CAAC,CAAC;IACtD,OAAO,CAAC,MAAM,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC;AACxC,CAAC"}

package/dist/src/utils/sandboxUtils.test.js

@@ -5,9 +5,11 @@
  */
 import { vi, describe, it, expect, beforeEach, afterEach } from 'vitest';
 import os from 'node:os';
+import path from 'node:path';
 import fs from 'node:fs';
 import { readFile } from 'node:fs/promises';
-import { getContainerPath, parseImageName, ports, entrypoint, shouldUseCurrentUserInSandbox, } from './sandboxUtils.js';
+import { resolveToRealPath, homedir } from '@google/gemini-cli-core';
+import { getContainerPath, parseImageName, ports, entrypoint, shouldUseCurrentUserInSandbox, isSensitiveHostPath, sanitizeSettingsForSandbox, isCredentialOrSensitivePath, prepareIsolatedSettingsDir, SENSITIVE_SETTINGS_FILENAMES, } from './sandboxUtils.js';
 vi.mock('node:os');
 vi.mock('node:fs');
 vi.mock('node:fs/promises');
@@ -17,15 +19,25 @@ vi.mock('@google/gemini-cli-core', () => ({
         warn: vi.fn(),
     },
     CELL_DIR: '.cell-cli',
+    homedir: vi.fn(() => os.homedir()),
+    resolveToRealPath: vi.fn((p) => path.resolve(p)),
 }));
 describe('sandboxUtils', () => {
     const originalEnv = process.env;
     beforeEach(() => {
         vi.clearAllMocks();
         process.env = { ...originalEnv };
+        vi.mocked(os.platform).mockReturnValue(process.platform);
+        vi.mocked(os.tmpdir).mockReturnValue('/tmp');
+        vi.mocked(homedir).mockImplementation(() => os.homedir());
+        vi.mocked(resolveToRealPath).mockImplementation((p) => path.resolve(p));
+        vi.mocked(fs.existsSync).mockReturnValue(true);
+        vi.mocked(fs.lstatSync).mockReset();
+        vi.mocked(fs.readlinkSync).mockReset();
         // Clean up these env vars that might affect tests
         delete process.env['NODE_ENV'];
         delete process.env['DEBUG'];
+        delete process.env['CELL_CLI_HOME'];
     });
     afterEach(() => {
         process.env = originalEnv;
@@ -186,5 +198,333 @@ describe('sandboxUtils', () => {
             expect(await shouldUseCurrentUserInSandbox()).toBe(false);
         });
     });
+    describe('isSensitiveHostPath', () => {
+        beforeEach(() => {
+            vi.mocked(fs.existsSync).mockReturnValue(true);
+        });
+        it('should detect ~/.cell-cli directory path', () => {
+            vi.mocked(os.homedir).mockReturnValue('/home/testuser');
+            expect(isSensitiveHostPath('/home/testuser/.cell-cli')).toBe(true);
+            expect(isSensitiveHostPath('/home/testuser/.cell-cli/settings.json')).toBe(true);
+            expect(isSensitiveHostPath('~/.cell-cli')).toBe(true);
+        });
+        it('should detect user home directory and its parent directories', () => {
+            vi.mocked(os.homedir).mockReturnValue('/home/testuser');
+            expect(isSensitiveHostPath('/home/testuser')).toBe(true);
+            expect(isSensitiveHostPath('~')).toBe(true);
+            expect(isSensitiveHostPath('/home')).toBe(true);
+            expect(isSensitiveHostPath('/')).toBe(true);
+        });
+        it('should detect sensitive credential files', () => {
+            expect(isSensitiveHostPath('/any/path/oauth_creds.json')).toBe(true);
+            expect(isSensitiveHostPath('/any/path/gemini-credentials.json')).toBe(true);
+            expect(isSensitiveHostPath('/any/path/mcp-oauth-tokens.json')).toBe(true);
+            expect(isSensitiveHostPath('/any/path/a2a-oauth-tokens.json')).toBe(true);
+            expect(isSensitiveHostPath('/any/path/google_accounts.json')).toBe(true);
+            expect(isSensitiveHostPath('/any/path/trusted_hooks.json')).toBe(true);
+            expect(isSensitiveHostPath('/any/path/trustedFolders.json')).toBe(true);
+            expect(isSensitiveHostPath('/any/path/trustedfolders.json')).toBe(true);
+            expect(isSensitiveHostPath('/any/path/policy_integrity.json')).toBe(true);
+        });
+        it('should detect environment files (.env)', () => {
+            expect(isSensitiveHostPath('/project/.env')).toBe(true);
+            expect(isSensitiveHostPath('/project/.env.local')).toBe(true);
+            expect(isSensitiveHostPath('/project/.env.production')).toBe(true);
+        });
+        it('should allow non-sensitive workspace and project paths', () => {
+            vi.mocked(os.homedir).mockReturnValue('/home/testuser');
+            expect(isSensitiveHostPath('/home/testuser/project')).toBe(false);
+            expect(isSensitiveHostPath('/workspace/app')).toBe(false);
+            expect(isSensitiveHostPath('/tmp/test-dir')).toBe(false);
+        });
+        it('should resolve symlinks to detect sensitive targets', () => {
+            const homeDir = path.resolve('/home/testuser');
+            const symlinkGemini = path.resolve('/var/symlink_to_gemini');
+            const symlinkHome = path.resolve('/var/symlink_to_home');
+            vi.mocked(os.homedir).mockReturnValue(homeDir);
+            vi.mocked(resolveToRealPath).mockImplementation((p) => {
+                const resolvedP = path.resolve(p);
+                if (resolvedP === symlinkGemini ||
+                    (os.platform() === 'win32' &&
+                        resolvedP.toLowerCase() === symlinkGemini.toLowerCase())) {
+                    return path.join(homeDir, '.cell-cli');
+                }
+                if (resolvedP === symlinkHome ||
+                    (os.platform() === 'win32' &&
+                        resolvedP.toLowerCase() === symlinkHome.toLowerCase())) {
+                    return homeDir;
+                }
+                return resolvedP;
+            });
+            expect(isSensitiveHostPath(symlinkGemini)).toBe(true);
+            expect(isSensitiveHostPath(symlinkHome)).toBe(true);
+        });
+        it('should fail closed when resolveToRealPath encounters an error', () => {
+            vi.mocked(os.homedir).mockReturnValue('/home/testuser');
+            vi.mocked(resolveToRealPath).mockImplementation(() => {
+                throw new Error('Unrecoverable resolution error');
+            });
+            expect(isSensitiveHostPath('/home/testuser/.cell-cli')).toBe(true);
+            expect(isSensitiveHostPath('/workspace/safe-path')).toBe(true);
+        });
+        it('should resolve non-existent paths cleanly via resolveToRealPath', () => {
+            const homeDir = path.resolve('/home/testuser');
+            const safeDir = path.resolve('/workspace/safe-path');
+            vi.mocked(os.homedir).mockReturnValue(homeDir);
+            vi.mocked(resolveToRealPath).mockImplementation((p) => path.resolve(p));
+            expect(isSensitiveHostPath(path.join(homeDir, '.cell-cli', 'non-existent-sub'))).toBe(true);
+            expect(isSensitiveHostPath(path.join(safeDir, 'non-existent-sub'))).toBe(false);
+        });
+        it('should fall back to path.resolve when resolveToRealPath encounters ENOENT', () => {
+            const homeDir = path.resolve('/home/testuser');
+            const safeDir = path.resolve('/workspace/safe-path');
+            vi.mocked(os.homedir).mockReturnValue(homeDir);
+            vi.mocked(resolveToRealPath).mockImplementation((p) => {
+                const resolvedP = path.resolve(p);
+                if (resolvedP.includes('non-existent')) {
+                    const err = new Error(`ENOENT: no such file or directory, realpath '${p}'`);
+                    err.code = 'ENOENT';
+                    throw err;
+                }
+                return resolvedP;
+            });
+            expect(isSensitiveHostPath(path.join(homeDir, '.cell-cli', 'non-existent-sub'))).toBe(true);
+            expect(isSensitiveHostPath(path.join(safeDir, 'non-existent-sub'))).toBe(false);
+        });
+        it('should detect broken symlinks pointing into ~/.cell-cli as sensitive', () => {
+            const homeDir = path.resolve('/home/testuser');
+            const brokenSymlink = path.resolve('/workspace/broken_symlink');
+            const targetFile = path.join(homeDir, '.cell-cli', 'trusted_hooks.json');
+            vi.mocked(os.homedir).mockReturnValue(homeDir);
+            const matchesBroken = (p) => {
+                const resolvedP = path.resolve(p);
+                return (resolvedP === brokenSymlink ||
+                    (os.platform() === 'win32' &&
+                        resolvedP.toLowerCase() === brokenSymlink.toLowerCase()));
+            };
+            vi.mocked(resolveToRealPath).mockImplementation((p) => {
+                if (matchesBroken(p)) {
+                    const err = new Error('ENOENT: no such file or directory');
+                    err.code = 'ENOENT';
+                    throw err;
+                }
+                return path.resolve(p);
+            });
+            vi.mocked(fs.lstatSync).mockImplementation((p) => {
+                if (matchesBroken(String(p))) {
+                    return {
+                        isSymbolicLink: () => true,
+                    };
+                }
+                const err = new Error('ENOENT: no such file or directory');
+                err.code = 'ENOENT';
+                throw err;
+            });
+            vi.mocked(fs.readlinkSync).mockImplementation((p) => {
+                if (matchesBroken(String(p))) {
+                    return targetFile;
+                }
+                throw new Error('EINVAL: not a symlink');
+            });
+            expect(isSensitiveHostPath(brokenSymlink)).toBe(true);
+        });
+        it('should fail closed and block mounts when circular symlinks are encountered', () => {
+            const homeDir = path.resolve('/home/testuser');
+            const circ1 = path.resolve('/workspace/circ1');
+            const circ2 = path.resolve('/workspace/circ2');
+            vi.mocked(os.homedir).mockReturnValue(homeDir);
+            const matchesCirc = (p, target) => {
+                const resolvedP = path.resolve(p);
+                return (resolvedP === target ||
+                    (os.platform() === 'win32' &&
+                        resolvedP.toLowerCase() === target.toLowerCase()));
+            };
+            vi.mocked(resolveToRealPath).mockImplementation((p) => {
+                if (matchesCirc(p, circ1) || matchesCirc(p, circ2)) {
+                    const err = new Error('ENOENT: no such file or directory');
+                    err.code = 'ENOENT';
+                    throw err;
+                }
+                return path.resolve(p);
+            });
+            vi.mocked(fs.lstatSync).mockImplementation((p) => {
+                const strP = String(p);
+                if (matchesCirc(strP, circ1) || matchesCirc(strP, circ2)) {
+                    return {
+                        isSymbolicLink: () => true,
+                    };
+                }
+                const err = new Error('ENOENT: no such file or directory');
+                err.code = 'ENOENT';
+                throw err;
+            });
+            vi.mocked(fs.readlinkSync).mockImplementation((p) => {
+                const strP = String(p);
+                if (matchesCirc(strP, circ1)) {
+                    return circ2;
+                }
+                if (matchesCirc(strP, circ2)) {
+                    return circ1;
+                }
+                throw new Error('EINVAL: not a symlink');
+            });
+            expect(isSensitiveHostPath(circ1)).toBe(true);
+        });
+        it('should handle empty or undetermined homedir without blocking working directory', () => {
+            vi.mocked(homedir).mockReturnValue('');
+            vi.mocked(os.homedir).mockReturnValue('');
+            expect(isSensitiveHostPath(process.cwd())).toBe(false);
+            expect(isSensitiveHostPath(path.join(process.cwd(), '.cell-cli'))).toBe(false);
+            expect(isSensitiveHostPath('/workspace/safe-project')).toBe(false);
+            // Still blocks ~ notations and sensitive credential files
+            expect(isSensitiveHostPath('~')).toBe(true);
+            expect(isSensitiveHostPath('~/.cell-cli')).toBe(true);
+            expect(isSensitiveHostPath('/workspace/.env')).toBe(true);
+            expect(isSensitiveHostPath('/workspace/oauth_creds.json')).toBe(true);
+            expect(isSensitiveHostPath('/workspace/google_accounts.json')).toBe(true);
+            expect(isSensitiveHostPath('/workspace/trustedFolders.json')).toBe(true);
+            expect(isSensitiveHostPath('/workspace/trustedfolders.json')).toBe(true);
+            expect(isSensitiveHostPath('/workspace/policy_integrity.json')).toBe(true);
+        });
+    });
+    describe('sanitizeSettingsForSandbox', () => {
+        it('should strip hooks and malicious execution commands', () => {
+            const rawSettings = {
+                theme: 'dark',
+                hooks: {
+                    beforeCommand: 'evil-script.sh',
+                },
+                tools: {
+                    allowed: ['read_file'],
+                    callCommand: '/bin/bash',
+                    discoveryCommand: '/bin/sh',
+                },
+                apiKey: 'secret-api-key',
+                geminiApiKey: 'secret-gemini-key',
+                googleApiKey: 'secret-google-key',
+                customConfig: {
+                    nestedKey: 'safe-value',
+                },
+            };
+            const sanitized = sanitizeSettingsForSandbox(rawSettings);
+            expect(sanitized['hooks']).toBeUndefined();
+            expect(sanitized['apiKey']).toBeUndefined();
+            expect(sanitized['geminiApiKey']).toBeUndefined();
+            expect(sanitized['googleApiKey']).toBeUndefined();
+            const tools = sanitized['tools'];
+            expect(tools['allowed']).toEqual(['read_file']);
+            expect(tools['callCommand']).toBeUndefined();
+            expect(tools['discoveryCommand']).toBeUndefined();
+            expect(sanitized['theme']).toBe('dark');
+            expect(sanitized['customConfig']['nestedKey']).toBe('safe-value');
+        });
+        it('should not mutate the original settings object', () => {
+            const original = {
+                hooks: { test: true },
+                tools: { callCommand: 'run' },
+            };
+            const copy = JSON.parse(JSON.stringify(original));
+            sanitizeSettingsForSandbox(original);
+            expect(original).toEqual(copy);
+        });
+        it('should handle tools property when it is an array without runtime errors', () => {
+            const rawSettings = {
+                tools: ['read_file', 'edit_file'],
+            };
+            const sanitized = sanitizeSettingsForSandbox(rawSettings);
+            expect(sanitized['tools']).toEqual(['read_file', 'edit_file']);
+        });
+    });
+    describe('isCredentialOrSensitivePath', () => {
+        it('should include known credential filenames in SENSITIVE_SETTINGS_FILENAMES', () => {
+            expect(SENSITIVE_SETTINGS_FILENAMES.has('oauth_creds.json')).toBe(true);
+            expect(SENSITIVE_SETTINGS_FILENAMES.has('google_accounts.json')).toBe(true);
+            expect(SENSITIVE_SETTINGS_FILENAMES.has('gemini-credentials.json')).toBe(true);
+            expect(SENSITIVE_SETTINGS_FILENAMES.has('mcp-oauth-tokens.json')).toBe(true);
+            expect(SENSITIVE_SETTINGS_FILENAMES.has('a2a-oauth-tokens.json')).toBe(true);
+            expect(SENSITIVE_SETTINGS_FILENAMES.has('trusted_hooks.json')).toBe(true);
+            expect(SENSITIVE_SETTINGS_FILENAMES.has('trustedFolders.json')).toBe(true);
+            expect(SENSITIVE_SETTINGS_FILENAMES.has('trustedfolders.json')).toBe(true);
+            expect(SENSITIVE_SETTINGS_FILENAMES.has('policy_integrity.json')).toBe(true);
+        });
+        it('should identify known credential and auth filenames as sensitive', () => {
+            expect(isCredentialOrSensitivePath('/home/user/.cell-cli/oauth_creds.json')).toBe(true);
+            expect(isCredentialOrSensitivePath('/home/user/.cell-cli/google_accounts.json')).toBe(true);
+            expect(isCredentialOrSensitivePath('/home/user/.cell-cli/gemini-credentials.json')).toBe(true);
+            expect(isCredentialOrSensitivePath('/home/user/.cell-cli/mcp-oauth-tokens.json')).toBe(true);
+            expect(isCredentialOrSensitivePath('/home/user/.cell-cli/a2a-oauth-tokens.json')).toBe(true);
+            expect(isCredentialOrSensitivePath('/home/user/.cell-cli/trusted_hooks.json')).toBe(true);
+            expect(isCredentialOrSensitivePath('/home/user/.cell-cli/trustedFolders.json')).toBe(true);
+            expect(isCredentialOrSensitivePath('/home/user/.cell-cli/trustedfolders.json')).toBe(true);
+            expect(isCredentialOrSensitivePath('/home/user/.cell-cli/policy_integrity.json')).toBe(true);
+        });
+        it('should identify tokens, credentials, and sensitive directories', () => {
+            expect(isCredentialOrSensitivePath('/home/user/.cell-cli/custom-tokens.json')).toBe(true);
+            expect(isCredentialOrSensitivePath('/home/user/.cell-cli/token.json')).toBe(true);
+            expect(isCredentialOrSensitivePath('/home/user/.cell-cli/github-token')).toBe(true);
+            expect(isCredentialOrSensitivePath('/home/user/.cell-cli/api.credentials')).toBe(true);
+            expect(isCredentialOrSensitivePath('/home/user/.cell-cli/user_creds.json')).toBe(true);
+            expect(isCredentialOrSensitivePath('/home/user/.cell-cli/user_cred.json')).toBe(true);
+            expect(isCredentialOrSensitivePath('/home/user/.cell-cli/.env')).toBe(true);
+            expect(isCredentialOrSensitivePath('/home/user/.cell-cli/private.key')).toBe(true);
+            expect(isCredentialOrSensitivePath('/home/user/.cell-cli/cert.pem')).toBe(true);
+            expect(isCredentialOrSensitivePath('/home/user/.cell-cli/service-account-key.json')).toBe(true);
+            expect(isCredentialOrSensitivePath('/home/user/.cell-cli/history')).toBe(true);
+            expect(isCredentialOrSensitivePath('/home/user/.cell-cli/tmp')).toBe(true);
+            expect(isCredentialOrSensitivePath('/home/user/.cell-cli/bin')).toBe(true);
+        });
+        it('should allow non-sensitive configuration files and directories', () => {
+            expect(isCredentialOrSensitivePath('/home/user/.cell-cli/settings.json')).toBe(false);
+            expect(isCredentialOrSensitivePath('/home/user/.cell-cli/keybindings.json')).toBe(false);
+            expect(isCredentialOrSensitivePath('/home/user/.cell-cli/commands')).toBe(false);
+            expect(isCredentialOrSensitivePath('/home/user/.cell-cli/skills')).toBe(false);
+            expect(isCredentialOrSensitivePath('/home/user/.cell-cli/policies')).toBe(false);
+            expect(isCredentialOrSensitivePath('/home/user/.cell-cli/agents')).toBe(false);
+        });
+        it('should not false-positive on user scripts containing credential in filename', () => {
+            expect(isCredentialOrSensitivePath('/home/user/.cell-cli/commands/setup-credentials.sh')).toBe(false);
+            expect(isCredentialOrSensitivePath('/home/user/.cell-cli/skills/credential-helper.js')).toBe(false);
+        });
+        it('should not false-positive on words sharing sensitive substrings without separators', () => {
+            expect(isCredentialOrSensitivePath('/home/user/.cell-cli/monkey.json')).toBe(false);
+            expect(isCredentialOrSensitivePath('/home/user/.cell-cli/sacred.json')).toBe(false);
+            expect(isCredentialOrSensitivePath('/home/user/.cell-cli/commands/tokenized.js')).toBe(false);
+        });
+        it('should not false-positive on nested bin or tmp directories inside commands or skills', () => {
+            const rootDir = '/home/user/.cell-cli';
+            expect(isCredentialOrSensitivePath('/home/user/.cell-cli/commands/bin', rootDir)).toBe(false);
+            expect(isCredentialOrSensitivePath('/home/user/.cell-cli/skills/tmp', rootDir)).toBe(false);
+        });
+        it('should not filter out the root directory itself', () => {
+            const rootDir = '/home/user/.cell-cli';
+            expect(isCredentialOrSensitivePath(rootDir, rootDir)).toBe(false);
+        });
+    });
+    describe('prepareIsolatedSettingsDir', () => {
+        it('should create an isolated directory and copy files with credential filter', () => {
+            const fakeHostSettingsDir = '/home/user/.cell-cli';
+            const fakeIsolatedDir = '/tmp/cell-sandbox-settings-xyz';
+            vi.mocked(fs.existsSync).mockReturnValue(true);
+            vi.mocked(fs.mkdtempSync).mockReturnValue(fakeIsolatedDir);
+            const result = prepareIsolatedSettingsDir(fakeHostSettingsDir);
+            expect(fs.mkdtempSync).toHaveBeenCalledWith(expect.stringContaining('cell-sandbox-settings-'));
+            expect(fs.chmodSync).toHaveBeenCalledWith(fakeIsolatedDir, 0o700);
+            expect(fs.cpSync).toHaveBeenCalledWith(fakeHostSettingsDir, fakeIsolatedDir, expect.objectContaining({
+                recursive: true,
+                filter: expect.any(Function),
+            }));
+            expect(result).toBe(fakeIsolatedDir);
+        });
+        it('should return isolated directory even if source settings directory does not exist', () => {
+            const fakeHostSettingsDir = '/home/user/.cell-cli';
+            const fakeIsolatedDir = '/tmp/cell-sandbox-settings-xyz';
+            vi.mocked(fs.existsSync).mockReturnValue(false);
+            vi.mocked(fs.mkdtempSync).mockReturnValue(fakeIsolatedDir);
+            const result = prepareIsolatedSettingsDir(fakeHostSettingsDir);
+            expect(fs.chmodSync).toHaveBeenCalledWith(fakeIsolatedDir, 0o700);
+            expect(result).toBe(fakeIsolatedDir);
+            expect(fs.cpSync).not.toHaveBeenCalled();
+        });
+    });
 });
 //# sourceMappingURL=sandboxUtils.test.js.map