@openclaw/mxc-sandbox 0.0.0 → 2026.7.2-beta.2

package/node_modules/@microsoft/mxc-sdk/dist/policy.js

@@ -0,0 +1,319 @@
+/**
+ * Policy discovery APIs for building sandbox filesystem policy.
+ *
+ * These functions enumerate the host environment to discover tool paths,
+ * user profile locations, and temporary storage — returning policy fragments
+ * that callers can merge into a {@link SandboxPolicy}.
+ */
+import * as fs from 'fs';
+import * as os from 'os';
+import * as path from 'path';
+import { execSync } from 'child_process';
+/** Split a path list using the platform-appropriate separator. */
+function splitPathList(value) {
+    const separator = os.platform() === 'win32' ? ';' : ':';
+    return value.split(separator).filter(p => p.length > 0);
+}
+/** Treat the entire value as a single directory path. */
+function singlePath(value) {
+    return value.trim() ? [value.trim()] : [];
+}
+/**
+ * Registry of well-known environment variables that point to tool
+ * installations, SDK roots, or language-specific resource directories.
+ * Each entry defines how to extract filesystem paths from the variable.
+ */
+const KNOWN_ENV_VARS = [
+    // Python
+    { name: 'PYTHONPATH', extractPaths: splitPathList },
+    { name: 'PYTHONHOME', extractPaths: singlePath },
+    // Visual Studio / MSVC
+    { name: 'VCINSTALLDIR', extractPaths: singlePath },
+    { name: 'VSINSTALLDIR', extractPaths: singlePath },
+    // PowerShell modules
+    { name: 'PSModulePath', extractPaths: splitPathList },
+    // vcpkg
+    { name: 'VCPKG_ROOT', extractPaths: singlePath },
+    // Go
+    { name: 'GOPATH', extractPaths: singlePath },
+    { name: 'GOROOT', extractPaths: singlePath },
+    // Rust
+    { name: 'CARGO_HOME', extractPaths: singlePath },
+    { name: 'RUSTUP_HOME', extractPaths: singlePath },
+    // Java
+    { name: 'JAVA_HOME', extractPaths: singlePath },
+    // Node.js
+    { name: 'NVM_HOME', extractPaths: singlePath },
+    { name: 'NVM_SYMLINK', extractPaths: singlePath },
+    { name: 'NODE_PATH', extractPaths: splitPathList },
+    // .NET
+    { name: 'DOTNET_ROOT', extractPaths: singlePath },
+    // Conda / Anaconda
+    { name: 'CONDA_PREFIX', extractPaths: singlePath },
+    // Linux-specific
+    { name: 'LD_LIBRARY_PATH', extractPaths: splitPathList },
+    { name: 'VIRTUAL_ENV', extractPaths: singlePath },
+    { name: 'PYENV_ROOT', extractPaths: singlePath },
+];
+// ---------------------------------------------------------------------------
+// Filtering helpers
+// ---------------------------------------------------------------------------
+function getWindowsDirectory() {
+    return process.env['WINDIR'] || process.env['windir'] || 'C:\\Windows';
+}
+/**
+ * Returns `true` if the path resides under system-critical locations.
+ * On Windows: under %WINDIR%. On Linux: /bin, /sbin, /boot, /proc, /sys, /dev, etc.
+ */
+function isSystemCriticalPath(dirPath) {
+    if (os.platform() === 'win32') {
+        const winDir = getWindowsDirectory().toLowerCase();
+        const normalized = path.resolve(dirPath).toLowerCase();
+        return normalized === winDir || normalized.startsWith(winDir + '\\');
+    }
+    // Linux: protect critical system paths
+    const normalized = path.resolve(dirPath);
+    const criticalPaths = ['/bin', '/sbin', '/usr/bin', '/usr/sbin', '/boot', '/proc', '/sys', '/dev'];
+    return criticalPaths.some(cp => normalized === cp || normalized.startsWith(cp + '/'));
+}
+/**
+ * Checks whether the directory ACL already grants access to the
+ * ALL_APPLICATION_PACKAGES well-known SID (S-1-15-2-1).
+ * Only applicable on Windows.
+ */
+function hasAllApplicationPackagesAccess(dirPath) {
+    if (os.platform() !== 'win32') {
+        return false; // Only applicable on Windows
+    }
+    try {
+        const output = execSync(`icacls "${dirPath}"`, {
+            encoding: 'utf-8',
+            stdio: 'pipe',
+            timeout: 5000,
+        });
+        return output.includes('ALL APPLICATION PACKAGES') || output.includes('S-1-15-2-1');
+    }
+    catch {
+        // If the check fails (access denied, timeout, etc.) assume the
+        // directory is NOT already accessible — safer to include it.
+        return false;
+    }
+}
+function directoryExists(dirPath) {
+    try {
+        return fs.statSync(dirPath).isDirectory();
+    }
+    catch {
+        return false;
+    }
+}
+/**
+ * Deduplicates an array of paths. Uses case-insensitive comparison on Windows,
+ * case-sensitive on other platforms. Paths are resolved to absolute form.
+ */
+function deduplicatePaths(paths) {
+    const isWindows = os.platform() === 'win32';
+    const seen = new Set();
+    const result = [];
+    for (const p of paths) {
+        const resolved = path.resolve(p);
+        const key = isWindows ? resolved.toLowerCase() : resolved;
+        if (!seen.has(key)) {
+            seen.add(key);
+            result.push(resolved);
+        }
+    }
+    return result;
+}
+// ---------------------------------------------------------------------------
+// PowerShell discovery
+// ---------------------------------------------------------------------------
+/**
+ * Check whether PowerShell (pwsh.exe) is available on the machine by scanning
+ * the supplied PATH directories for a `pwsh.exe` binary.
+ *
+ * When PowerShell is found, return a policy fragment with:
+ * - `C:\` in `readonlyPaths` — pwsh.exe enumerates the drive root on startup.
+ * - The PSReadLine history directory in `readwritePaths` so the PSReadLine
+ *   module can persist command history.
+ *
+ * On non-Windows platforms or when pwsh.exe is not found on PATH, returns an
+ * empty policy.
+ *
+ * @param pathDirs - The list of PATH directories already collected by the caller.
+ * @param env - Environment variable map (used to resolve `%USERPROFILE%`).
+ */
+function getPowerShellPolicy(pathDirs, env) {
+    if (os.platform() !== 'win32') {
+        return { readonlyPaths: [], readwritePaths: [] };
+    }
+    const pwshFound = pathDirs.some(dir => {
+        try {
+            return fs.existsSync(path.join(dir, 'pwsh.exe'));
+        }
+        catch {
+            return false;
+        }
+    });
+    if (!pwshFound) {
+        return { readonlyPaths: [], readwritePaths: [] };
+    }
+    const systemDrive = process.env["SystemDrive"] || 'C:';
+    const systemRoot = systemDrive + "\\";
+    const readonlyPaths = [systemRoot];
+    const readwritePaths = [];
+    const userProfile = env['USERPROFILE'];
+    if (userProfile) {
+        const psReadLineDir = path.join(userProfile, 'AppData', 'Roaming', 'Microsoft', 'Windows', 'PowerShell', 'PSReadLine');
+        readwritePaths.push(psReadLineDir);
+    }
+    return { readonlyPaths, readwritePaths };
+}
+// ---------------------------------------------------------------------------
+// Public API
+// ---------------------------------------------------------------------------
+/**
+ * Discover tool and SDK directories from the environment and return them as
+ * policy paths.
+ *
+ * Reads the `PATH` variable and a set of well-known tool / SDK environment
+ * variables, enumerates the directories they reference, then applies filters:
+ *
+ * 1. Directories that do not exist on disk are removed.
+ * 2. System-critical directories (under `%WINDIR%`) are removed.
+ * 3. When `options.containerType` is `'processcontainer'`, directories whose ACLs
+ *    already grant access to `ALL_APPLICATION_PACKAGES` are removed because
+ *    AppContainer processes can see them without explicit brokering.
+ *
+ * Additionally, if PowerShell (`pwsh.exe`) is found on PATH, the drive root
+ * (`C:\`) is added to `readonlyPaths` and the PSReadLine history directory
+ * is added to `readwritePaths` so that interactive PowerShell sessions work
+ * correctly inside the container.
+ *
+ * @param env - Environment variable map. Defaults to `process.env`.
+ * @param options - Filtering options.
+ * @returns A policy fragment with discovered paths.
+ */
+export function getAvailableToolsPolicy(env, options) {
+    const environment = env ?? process.env;
+    const collected = [];
+    // PATH directories
+    const pathValue = environment['PATH'] || environment['Path'] || '';
+    const pathDirs = splitPathList(pathValue);
+    collected.push(...pathDirs);
+    // Known environment variables
+    for (const knownVar of KNOWN_ENV_VARS) {
+        const value = environment[knownVar.name];
+        if (value) {
+            collected.push(...knownVar.extractPaths(value));
+        }
+    }
+    const unique = deduplicatePaths(collected);
+    // Filter out non-existent paths, system-critical paths, and (optionally)
+    // paths already accessible to containers.
+    const filtered = unique.filter(dirPath => {
+        if (!directoryExists(dirPath)) {
+            return false;
+        }
+        if (isSystemCriticalPath(dirPath)) {
+            return false;
+        }
+        if (options?.containerType === 'processcontainer' && hasAllApplicationPackagesAccess(dirPath)) {
+            return false;
+        }
+        return true;
+    });
+    // Merge PowerShell-specific paths when pwsh.exe is available
+    const pwshPolicy = getPowerShellPolicy(pathDirs, environment);
+    return {
+        readonlyPaths: deduplicatePaths([...filtered, ...pwshPolicy.readonlyPaths]),
+        readwritePaths: deduplicatePaths([...pwshPolicy.readwritePaths]),
+    };
+}
+/**
+ * Build read-only policy for standard user profile application data locations.
+ *
+ * Enumerates immediate subdirectories of `%LOCALAPPDATA%\Programs`
+ * (per-user installed developer tools) as additional read-only paths.
+ *
+ * @returns A policy fragment with user profile paths in `readonlyPaths`.
+ */
+export function getUserProfilePolicy() {
+    const readonlyPaths = [];
+    if (os.platform() === 'win32') {
+        /*  TODO: Need to think through the implications of granting access
+            to folders within APPDATA versus LOCALAPPDATA.
+        const appData = process.env['APPDATA'];
+        if (appData && directoryExists(appData)) {
+            readonlyPaths.push(path.resolve(appData));
+        }*/
+        const localAppData = process.env['LOCALAPPDATA'];
+        if (localAppData && directoryExists(localAppData)) {
+            // Enumerate per-user program installations
+            const programsDir = path.join(localAppData, 'Programs');
+            if (directoryExists(programsDir)) {
+                try {
+                    const entries = fs.readdirSync(programsDir, { withFileTypes: true });
+                    for (const entry of entries) {
+                        if (entry.isDirectory()) {
+                            readonlyPaths.push(path.join(programsDir, entry.name));
+                        }
+                    }
+                }
+                catch {
+                    // Ignore enumeration errors (e.g. permission denied)
+                }
+            }
+        }
+    }
+    else {
+        // Linux: enumerate ~/.local/bin and ~/.local/lib
+        const home = process.env['HOME'];
+        if (home) {
+            const localBin = path.join(home, '.local', 'bin');
+            if (directoryExists(localBin)) {
+                readonlyPaths.push(localBin);
+            }
+            const localLib = path.join(home, '.local', 'lib');
+            if (directoryExists(localLib)) {
+                readonlyPaths.push(localLib);
+            }
+        }
+    }
+    return {
+        readonlyPaths,
+        readwritePaths: [],
+    };
+}
+/**
+ * Generate a dedicated temporary directory for a container and return it as
+ * read-write policy.
+ *
+ * If the provided environment contains a `TEMP` (or `TMP`) variable, a
+ * uniquely-named subdirectory is created beneath that path and returned in
+ * `tempDirectory` and `readwritePaths`. If neither variable is set the
+ * container is assumed to manage its own temp directory, so the returned
+ * policy is empty.
+ *
+ * @param env - Environment variable map. Defaults to `process.env`.
+ * @returns Policy fragment with the temp directory in both `tempDirectory`
+ *          and `readwritePaths`, or empty values when no TEMP path is found.
+ */
+export function getTemporaryFilesPolicy(env) {
+    const environment = env ?? process.env;
+    // On Linux, prefer TMPDIR; on Windows, prefer TEMP/TMP
+    const tempRoot = os.platform() === 'win32'
+        ? (environment['TEMP'] || environment['TMP'])
+        : (environment['TMPDIR'] || '/tmp');
+    if (!tempRoot || !directoryExists(tempRoot)) {
+        return {
+            readonlyPaths: [],
+            readwritePaths: [],
+        };
+    }
+    return {
+        readonlyPaths: [],
+        readwritePaths: [tempRoot],
+    };
+}
+//# sourceMappingURL=policy.js.map

package/node_modules/@microsoft/mxc-sdk/dist/policy.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"policy.js","sourceRoot":"","sources":["../src/policy.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAEH,OAAO,KAAK,EAAE,MAAM,IAAI,CAAC;AACzB,OAAO,KAAK,EAAE,MAAM,IAAI,CAAC;AACzB,OAAO,KAAK,IAAI,MAAM,MAAM,CAAC;AAC7B,OAAO,EAAE,QAAQ,EAAE,MAAM,eAAe,CAAC;AA2CzC,kEAAkE;AAClE,SAAS,aAAa,CAAC,KAAa;IAChC,MAAM,SAAS,GAAG,EAAE,CAAC,QAAQ,EAAE,KAAK,OAAO,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC;IACxD,OAAO,KAAK,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC;AAC5D,CAAC;AAED,yDAAyD;AACzD,SAAS,UAAU,CAAC,KAAa;IAC7B,OAAO,KAAK,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;AAC9C,CAAC;AAED;;;;GAIG;AACH,MAAM,cAAc,GAAkB;IAClC,SAAS;IACT,EAAE,IAAI,EAAE,YAAY,EAAE,YAAY,EAAE,aAAa,EAAE;IACnD,EAAE,IAAI,EAAE,YAAY,EAAE,YAAY,EAAE,UAAU,EAAE;IAEhD,uBAAuB;IACvB,EAAE,IAAI,EAAE,cAAc,EAAE,YAAY,EAAE,UAAU,EAAE;IAClD,EAAE,IAAI,EAAE,cAAc,EAAE,YAAY,EAAE,UAAU,EAAE;IAElD,qBAAqB;IACrB,EAAE,IAAI,EAAE,cAAc,EAAE,YAAY,EAAE,aAAa,EAAE;IAErD,QAAQ;IACR,EAAE,IAAI,EAAE,YAAY,EAAE,YAAY,EAAE,UAAU,EAAE;IAEhD,KAAK;IACL,EAAE,IAAI,EAAE,QAAQ,EAAE,YAAY,EAAE,UAAU,EAAE;IAC5C,EAAE,IAAI,EAAE,QAAQ,EAAE,YAAY,EAAE,UAAU,EAAE;IAE5C,OAAO;IACP,EAAE,IAAI,EAAE,YAAY,EAAE,YAAY,EAAE,UAAU,EAAE;IAChD,EAAE,IAAI,EAAE,aAAa,EAAE,YAAY,EAAE,UAAU,EAAE;IAEjD,OAAO;IACP,EAAE,IAAI,EAAE,WAAW,EAAE,YAAY,EAAE,UAAU,EAAE;IAE/C,UAAU;IACV,EAAE,IAAI,EAAE,UAAU,EAAE,YAAY,EAAE,UAAU,EAAE;IAC9C,EAAE,IAAI,EAAE,aAAa,EAAE,YAAY,EAAE,UAAU,EAAE;IACjD,EAAE,IAAI,EAAE,WAAW,EAAE,YAAY,EAAE,aAAa,EAAE;IAElD,OAAO;IACP,EAAE,IAAI,EAAE,aAAa,EAAE,YAAY,EAAE,UAAU,EAAE;IAEjD,mBAAmB;IACnB,EAAE,IAAI,EAAE,cAAc,EAAE,YAAY,EAAE,UAAU,EAAE;IAElD,iBAAiB;IACjB,EAAE,IAAI,EAAE,iBAAiB,EAAE,YAAY,EAAE,aAAa,EAAE;IACxD,EAAE,IAAI,EAAE,aAAa,EAAE,YAAY,EAAE,UAAU,EAAE;IACjD,EAAE,IAAI,EAAE,YAAY,EAAE,YAAY,EAAE,UAAU,EAAE;CACnD,CAAC;AAEF,8EAA8E;AAC9E,oBAAoB;AACpB,8EAA8E;AAE9E,SAAS,mBAAmB;IACxB,OAAO,OAAO,CAAC,GAAG,CAAC,QAAQ,CAAC,IAAI,OAAO,CAAC,GAAG,CAAC,QAAQ,CAAC,IAAI,aAAa,CAAC;AAC3E,CAAC;AAED;;;GAGG;AACH,SAAS,oBAAoB,CAAC,OAAe;IACzC,IAAI,EAAE,CAAC,QAAQ,EAAE,KAAK,OAAO,EAAE,CAAC;QAC5B,MAAM,MAAM,GAAG,mBAAmB,EAAE,CAAC,WAAW,EAAE,CAAC;QACnD,MAAM,UAAU,GAAG,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC,WAAW,EAAE,CAAC;QACvD,OAAO,UAAU,KAAK,MAAM,IAAI,UAAU,CAAC,UAAU,CAAC,MAAM,GAAG,IAAI,CAAC,CAAC;IACzE,CAAC;IACD,uCAAuC;IACvC,MAAM,UAAU,GAAG,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC;IACzC,MAAM,aAAa,GAAG,CAAC,MAAM,EAAE,OAAO,EAAE,UAAU,EAAE,WAAW,EAAE,OAAO,EAAE,OAAO,EAAE,MAAM,EAAE,MAAM,CAAC,CAAC;IACnG,OAAO,aAAa,CAAC,IAAI,CAAC,EAAE,CAAC,EAAE,CAAC,UAAU,KAAK,EAAE,IAAI,UAAU,CAAC,UAAU,CAAC,EAAE,GAAG,GAAG,CAAC,CAAC,CAAC;AAC1F,CAAC;AAED;;;;GAIG;AACH,SAAS,+BAA+B,CAAC,OAAe;IACpD,IAAI,EAAE,CAAC,QAAQ,EAAE,KAAK,OAAO,EAAE,CAAC;QAC5B,OAAO,KAAK,CAAC,CAAC,6BAA6B;IAC/C,CAAC;IACD,IAAI,CAAC;QACD,MAAM,MAAM,GAAG,QAAQ,CAAC,WAAW,OAAO,GAAG,EAAE;YAC3C,QAAQ,EAAE,OAAO;YACjB,KAAK,EAAE,MAAM;YACb,OAAO,EAAE,IAAI;SAChB,CAAC,CAAC;QACH,OAAO,MAAM,CAAC,QAAQ,CAAC,0BAA0B,CAAC,IAAI,MAAM,CAAC,QAAQ,CAAC,YAAY,CAAC,CAAC;IACxF,CAAC;IAAC,MAAM,CAAC;QACL,+DAA+D;QAC/D,6DAA6D;QAC7D,OAAO,KAAK,CAAC;IACjB,CAAC;AACL,CAAC;AAED,SAAS,eAAe,CAAC,OAAe;IACpC,IAAI,CAAC;QACD,OAAO,EAAE,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC,WAAW,EAAE,CAAC;IAC9C,CAAC;IAAC,MAAM,CAAC;QACL,OAAO,KAAK,CAAC;IACjB,CAAC;AACL,CAAC;AAED;;;GAGG;AACH,SAAS,gBAAgB,CAAC,KAAe;IACrC,MAAM,SAAS,GAAG,EAAE,CAAC,QAAQ,EAAE,KAAK,OAAO,CAAC;IAC5C,MAAM,IAAI,GAAG,IAAI,GAAG,EAAU,CAAC;IAC/B,MAAM,MAAM,GAAa,EAAE,CAAC;IAC5B,KAAK,MAAM,CAAC,IAAI,KAAK,EAAE,CAAC;QACpB,MAAM,QAAQ,GAAG,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC;QACjC,MAAM,GAAG,GAAG,SAAS,CAAC,CAAC,CAAC,QAAQ,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC;QAC1D,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC;YACjB,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;YACd,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;QAC1B,CAAC;IACL,CAAC;IACD,OAAO,MAAM,CAAC;AAClB,CAAC;AAED,8EAA8E;AAC9E,uBAAuB;AACvB,8EAA8E;AAE9E;;;;;;;;;;;;;;GAcG;AACH,SAAS,mBAAmB,CACxB,QAAkB,EAClB,GAA0C;IAE1C,IAAI,EAAE,CAAC,QAAQ,EAAE,KAAK,OAAO,EAAE,CAAC;QAC5B,OAAO,EAAE,aAAa,EAAE,EAAE,EAAE,cAAc,EAAE,EAAE,EAAE,CAAC;IACrD,CAAC;IAED,MAAM,SAAS,GAAG,QAAQ,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE;QAClC,IAAI,CAAC;YACD,OAAO,EAAE,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,UAAU,CAAC,CAAC,CAAC;QACrD,CAAC;QAAC,MAAM,CAAC;YACL,OAAO,KAAK,CAAC;QACjB,CAAC;IACL,CAAC,CAAC,CAAC;IAEH,IAAI,CAAC,SAAS,EAAE,CAAC;QACb,OAAO,EAAE,aAAa,EAAE,EAAE,EAAE,cAAc,EAAE,EAAE,EAAE,CAAC;IACrD,CAAC;IAED,MAAM,WAAW,GAAG,OAAO,CAAC,GAAG,CAAC,aAAa,CAAC,IAAI,IAAI,CAAC;IACvD,MAAM,UAAU,GAAG,WAAW,GAAG,IAAI,CAAC;IACtC,MAAM,aAAa,GAAa,CAAC,UAAU,CAAC,CAAC;IAC7C,MAAM,cAAc,GAAa,EAAE,CAAC;IAEpC,MAAM,WAAW,GAAG,GAAG,CAAC,aAAa,CAAC,CAAC;IACvC,IAAI,WAAW,EAAE,CAAC;QACd,MAAM,aAAa,GAAG,IAAI,CAAC,IAAI,CAC3B,WAAW,EAAE,SAAS,EAAE,SAAS,EAAE,WAAW,EAAE,SAAS,EAAE,YAAY,EAAE,YAAY,CACxF,CAAC;QACF,cAAc,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC;IACvC,CAAC;IAED,OAAO,EAAE,aAAa,EAAE,cAAc,EAAE,CAAC;AAC7C,CAAC;AAED,8EAA8E;AAC9E,aAAa;AACb,8EAA8E;AAE9E;;;;;;;;;;;;;;;;;;;;;GAqBG;AACH,MAAM,UAAU,uBAAuB,CACnC,GAA2C,EAC3C,OAA4B;IAE5B,MAAM,WAAW,GAAG,GAAG,IAAI,OAAO,CAAC,GAAG,CAAC;IACvC,MAAM,SAAS,GAAa,EAAE,CAAC;IAE/B,mBAAmB;IACnB,MAAM,SAAS,GAAG,WAAW,CAAC,MAAM,CAAC,IAAI,WAAW,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC;IACnE,MAAM,QAAQ,GAAG,aAAa,CAAC,SAAS,CAAC,CAAC;IAC1C,SAAS,CAAC,IAAI,CAAC,GAAG,QAAQ,CAAC,CAAC;IAE5B,8BAA8B;IAC9B,KAAK,MAAM,QAAQ,IAAI,cAAc,EAAE,CAAC;QACpC,MAAM,KAAK,GAAG,WAAW,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC;QACzC,IAAI,KAAK,EAAE,CAAC;YACR,SAAS,CAAC,IAAI,CAAC,GAAG,QAAQ,CAAC,YAAY,CAAC,KAAK,CAAC,CAAC,CAAC;QACpD,CAAC;IACL,CAAC;IAED,MAAM,MAAM,GAAG,gBAAgB,CAAC,SAAS,CAAC,CAAC;IAE3C,yEAAyE;IACzE,0CAA0C;IAC1C,MAAM,QAAQ,GAAG,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,EAAE;QACrC,IAAI,CAAC,eAAe,CAAC,OAAO,CAAC,EAAE,CAAC;YAC5B,OAAO,KAAK,CAAC;QACjB,CAAC;QACD,IAAI,oBAAoB,CAAC,OAAO,CAAC,EAAE,CAAC;YAChC,OAAO,KAAK,CAAC;QACjB,CAAC;QACD,IAAI,OAAO,EAAE,aAAa,KAAK,kBAAkB,IAAI,+BAA+B,CAAC,OAAO,CAAC,EAAE,CAAC;YAC5F,OAAO,KAAK,CAAC;QACjB,CAAC;QACD,OAAO,IAAI,CAAC;IAChB,CAAC,CAAC,CAAC;IAEH,6DAA6D;IAC7D,MAAM,UAAU,GAAG,mBAAmB,CAAC,QAAQ,EAAE,WAAW,CAAC,CAAC;IAE9D,OAAO;QACH,aAAa,EAAE,gBAAgB,CAAC,CAAC,GAAG,QAAQ,EAAE,GAAG,UAAU,CAAC,aAAa,CAAC,CAAC;QAC3E,cAAc,EAAE,gBAAgB,CAAC,CAAC,GAAG,UAAU,CAAC,cAAc,CAAC,CAAC;KACnE,CAAC;AACN,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,UAAU,oBAAoB;IAChC,MAAM,aAAa,GAAa,EAAE,CAAC;IAEnC,IAAI,EAAE,CAAC,QAAQ,EAAE,KAAK,OAAO,EAAE,CAAC;QAC5B;;;;;WAKG;QAEH,MAAM,YAAY,GAAG,OAAO,CAAC,GAAG,CAAC,cAAc,CAAC,CAAC;QACjD,IAAI,YAAY,IAAI,eAAe,CAAC,YAAY,CAAC,EAAE,CAAC;YAChD,2CAA2C;YAC3C,MAAM,WAAW,GAAG,IAAI,CAAC,IAAI,CAAC,YAAY,EAAE,UAAU,CAAC,CAAC;YACxD,IAAI,eAAe,CAAC,WAAW,CAAC,EAAE,CAAC;gBAC/B,IAAI,CAAC;oBACD,MAAM,OAAO,GAAG,EAAE,CAAC,WAAW,CAAC,WAAW,EAAE,EAAE,aAAa,EAAE,IAAI,EAAE,CAAC,CAAC;oBACrE,KAAK,MAAM,KAAK,IAAI,OAAO,EAAE,CAAC;wBAC1B,IAAI,KAAK,CAAC,WAAW,EAAE,EAAE,CAAC;4BACtB,aAAa,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,WAAW,EAAE,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC;wBAC3D,CAAC;oBACL,CAAC;gBACL,CAAC;gBAAC,MAAM,CAAC;oBACL,qDAAqD;gBACzD,CAAC;YACL,CAAC;QACL,CAAC;IACL,CAAC;SAAM,CAAC;QACJ,iDAAiD;QACjD,MAAM,IAAI,GAAG,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;QACjC,IAAI,IAAI,EAAE,CAAC;YACP,MAAM,QAAQ,GAAG,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,QAAQ,EAAE,KAAK,CAAC,CAAC;YAClD,IAAI,eAAe,CAAC,QAAQ,CAAC,EAAE,CAAC;gBAC5B,aAAa,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;YACjC,CAAC;YACD,MAAM,QAAQ,GAAG,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,QAAQ,EAAE,KAAK,CAAC,CAAC;YAClD,IAAI,eAAe,CAAC,QAAQ,CAAC,EAAE,CAAC;gBAC5B,aAAa,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;YACjC,CAAC;QACL,CAAC;IACL,CAAC;IAED,OAAO;QACH,aAAa;QACb,cAAc,EAAE,EAAE;KACrB,CAAC;AACN,CAAC;AAED;;;;;;;;;;;;;GAaG;AACH,MAAM,UAAU,uBAAuB,CACnC,GAA2C;IAE3C,MAAM,WAAW,GAAG,GAAG,IAAI,OAAO,CAAC,GAAG,CAAC;IAEvC,uDAAuD;IACvD,MAAM,QAAQ,GAAG,EAAE,CAAC,QAAQ,EAAE,KAAK,OAAO;QACtC,CAAC,CAAC,CAAC,WAAW,CAAC,MAAM,CAAC,IAAI,WAAW,CAAC,KAAK,CAAC,CAAC;QAC7C,CAAC,CAAC,CAAC,WAAW,CAAC,QAAQ,CAAC,IAAI,MAAM,CAAC,CAAC;IAExC,IAAI,CAAC,QAAQ,IAAI,CAAC,eAAe,CAAC,QAAQ,CAAC,EAAE,CAAC;QAC1C,OAAO;YACH,aAAa,EAAE,EAAE;YACjB,cAAc,EAAE,EAAE;SACrB,CAAC;IACN,CAAC;IAED,OAAO;QACH,aAAa,EAAE,EAAE;QACjB,cAAc,EAAE,CAAC,QAAQ,CAAC;KAC7B,CAAC;AACN,CAAC"}

package/node_modules/@microsoft/mxc-sdk/dist/sandbox.d.ts

@@ -0,0 +1,189 @@
+import pty from 'node-pty';
+import { ChildProcess } from 'child_process';
+import { SandboxPolicy, ContainerConfig, ContainmentType, ContainmentBackend } from './types.js';
+/**
+ * Creates a ContainerConfig from a SandboxPolicy and optional containment type.
+ *
+ * This is the primary API for translating user-facing security intent (SandboxPolicy)
+ * into a backend-specific configuration (ContainerConfig). The returned config
+ * can be modified before passing to spawnSandboxFromConfig().
+ *
+ * @param policy - The sandbox policy expressing security intent
+ * @param containment - Containment backend type (default: "process")
+ * @param containerName - Optional container name; auto-generated if omitted
+ * @returns A fully populated ContainerConfig ready for modification or spawning
+ *
+ * @example
+ * ```typescript
+ * const policy: SandboxPolicy = {
+ *   version: '0.5.0-alpha',
+ *   network: { allowOutbound: true },
+ *   ui: { allowWindows: true, clipboard: 'read' },
+ * };
+ *
+ * // Simple: use defaults
+ * const config = createConfigFromPolicy(policy);
+ *
+ * // Advanced: tweak backend-specific settings
+ * const config = createConfigFromPolicy(policy, "process");
+ * config.processContainer!.ui!.isolation = "atoms";
+ * ```
+ */
+export declare function createConfigFromPolicy(policy: SandboxPolicy, containment?: ContainmentType | ContainmentBackend, containerName?: string): ContainerConfig;
+/**
+ * Builds a sandbox payload JSON object from the sandbox policy.
+ * @param script The command line script to execute
+ * @param policy The sandbox policy configuration
+ * @param workingDirectory Optional working directory path
+ * @param containerName Optional container name; if not provided, a random name will be generated
+ * @param containment Optional containment backend type
+ * @returns The sandbox payload object
+ */
+export declare function buildSandboxPayload(script: string, policy: SandboxPolicy, workingDirectory?: string, containerName?: string, containment?: ContainmentType | ContainmentBackend): ContainerConfig;
+/**
+ * Options for spawning a sandboxed process
+ */
+export interface SandboxSpawnOptions {
+    /**
+     * Enable debug output from wxc-exec
+     */
+    debug?: boolean;
+    /**
+     * Enable experimental features
+     */
+    experimental?: boolean;
+    /**
+     * Explicit path to the wxc-exec (or lxc-exec) binary.
+     * When set, the SDK uses this path directly instead of searching.
+     * Useful for packaged apps (e.g., Electron) where the binary
+     * is bundled in a known location.
+     */
+    executablePath?: string;
+    /**
+     * Skip platform support check. Use when you know the platform
+     * is compatible and want to bypass build version validation.
+     */
+    skipPlatformCheck?: boolean;
+    /**
+     * PTY options to pass to node-pty (only used by spawnSandbox)
+     */
+    ptyOptions?: pty.IPtyForkOptions;
+    /**
+     * Dry run mode: parse and validate config without executing.
+     * The native binary validates the config then exits.
+     */
+    dryRun?: boolean;
+    /**
+     * Directory for diagnostic log files
+     */
+    logDir?: string;
+    /**
+     * When false, uses child_process.spawn instead of node-pty.
+     * Provides reliable exit codes and separate stdout/stderr streams.
+     * Defaults to true (uses PTY).
+     */
+    usePty?: boolean;
+    /**
+     * Optional cancellation signal. When it aborts, the SDK kills the
+     * spawned executor process and rejects any pending result promise with
+     * the signal's reason. Honored by the state-aware lifecycle functions;
+     * one-shot spawn currently ignores it (kill the returned IPty /
+     * ChildProcess directly instead).
+     *
+     * Cancellation is best-effort: killing the executor mid-call leaves
+     * any backend-side state (e.g. a partially-provisioned IsolationSession)
+     * wherever it landed. Callers may need a follow-up `deprovisionSandbox`
+     * (or its equivalent) to clean up an orphaned sandbox after an abort.
+     */
+    signal?: AbortSignal;
+}
+/**
+ * Spawn a sandboxed process using wxc-exec with a PTY (node-pty) for
+ * interactive terminal I/O (colors, input forwarding).
+ *
+ * @param script The command line script to execute
+ * @param policy The sandbox policy
+ * @param options - Spawn options
+ * @param workingDirectory Optional working directory path
+ * @param containerName Optional container name; if not provided, a random name will be generated
+ * @param env Optional environment variables
+ * @returns IPty object for interacting with the sandboxed process
+ * @throws Error if platform is not supported or wxc-exec is not found
+ *
+ * @example
+ * ```typescript
+ * const script = 'python -c "import sys; print(sys.version)"';
+ * const policy: SandboxPolicy = { version: '0.4.0-alpha' };
+ *
+ * const ptyProcess = spawnSandbox(script, policy);
+ * ptyProcess.onData((data) => console.log(data));
+ * ptyProcess.onExit((e) => console.log('Exit code:', e.exitCode));
+ * ```
+ */
+export declare function spawnSandbox(script: string, policy: SandboxPolicy, options?: SandboxSpawnOptions, workingDirectory?: string, containerName?: string, env?: {
+    [key: string]: string | undefined;
+}): pty.IPty;
+/**
+ * Spawn a sandboxed process from a pre-built ContainerConfig.
+ *
+ * Use with `createConfigFromPolicy()` when you need to modify
+ * backend-specific settings before spawning. The config must have
+ * `process.commandLine` already set.
+ *
+ * @param config The container configuration (from createConfigFromPolicy)
+ * @param options - Spawn options
+ * @param workingDirectory Optional working directory path
+ * @returns IPty when usePty is true or unset; ChildProcess when usePty is false
+ *
+ * @example
+ * ```typescript
+ * const config = createConfigFromPolicy(policy, "process");
+ * config.process!.commandLine = 'echo hello';
+ * config.processContainer!.ui!.isolation = "atoms";
+ *
+ * // PTY mode (default) — returns IPty:
+ * const ptyProcess = spawnSandboxFromConfig(config);
+ *
+ * // Non-PTY mode — returns ChildProcess with reliable exit codes:
+ * const child = spawnSandboxFromConfig(config, { usePty: false });
+ * child.stdout?.on('data', (data) => console.log(data.toString()));
+ * ```
+ */
+export declare function spawnSandboxFromConfig(config: ContainerConfig, options: SandboxSpawnOptions & {
+    usePty: false;
+}, workingDirectory?: string, env?: {
+    [key: string]: string | undefined;
+}): ChildProcess;
+export declare function spawnSandboxFromConfig(config: ContainerConfig, options?: SandboxSpawnOptions, workingDirectory?: string, env?: {
+    [key: string]: string | undefined;
+}): pty.IPty;
+/**
+ * Spawn a sandboxed process and return a promise that resolves with output.
+ * Convenience wrapper around spawnSandbox for non-interactive use cases.
+ *
+ * @param script The command line script to execute
+ * @param policy The sandbox policy
+ * @param options - Spawn options
+ * @param workingDirectory Optional working directory path
+ * @param containerName Optional container name; if not provided, a random name will be generated
+ *
+ * @returns Promise that resolves with stdout/stderr and exit code
+ *
+ * @example
+ * ```typescript
+ * const policy: SandboxPolicy = {
+ *   version: '0.4.0-alpha',
+ *   filesystem: { readwritePaths: ['/workspace'] },
+ * };
+ *
+ * const result = await spawnSandboxAsync('echo hello', policy);
+ * console.log('Output:', result.stdout);
+ * console.log('Exit code:', result.exitCode);
+ * ```
+ */
+export declare function spawnSandboxAsync(script: string, policy: SandboxPolicy, options?: SandboxSpawnOptions, workingDirectory?: string, containerName?: string): Promise<{
+    stdout: string;
+    stderr: string;
+    exitCode: number;
+}>;
+//# sourceMappingURL=sandbox.d.ts.map

package/node_modules/@microsoft/mxc-sdk/dist/sandbox.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"sandbox.d.ts","sourceRoot":"","sources":["../src/sandbox.ts"],"names":[],"mappings":"AAGA,OAAO,GAAG,MAAM,UAAU,CAAC;AAE3B,OAAO,EAAS,YAAY,EAAE,MAAM,eAAe,CAAC;AAGpD,OAAO,EAAE,aAAa,EAAE,eAAe,EAAE,eAAe,EAAE,kBAAkB,EAAE,MAAM,YAAY,CAAC;AAuMjG;;;;;;;;;;;;;;;;;;;;;;;;;;;GA2BG;AACH,wBAAgB,sBAAsB,CAClC,MAAM,EAAE,aAAa,EACrB,WAAW,GAAE,eAAe,GAAG,kBAA8B,EAC7D,aAAa,CAAC,EAAE,MAAM,GACvB,eAAe,CAwIjB;AAED;;;;;;;;GAQG;AACH,wBAAgB,mBAAmB,CAC/B,MAAM,EAAE,MAAM,EACd,MAAM,EAAE,aAAa,EACrB,gBAAgB,CAAC,EAAE,MAAM,EACzB,aAAa,CAAC,EAAE,MAAM,EACtB,WAAW,GAAE,eAAe,GAAG,kBAA8B,GAC9D,eAAe,CAOjB;AAED;;GAEG;AACH,MAAM,WAAW,mBAAmB;IAClC;;OAEG;IACH,KAAK,CAAC,EAAE,OAAO,CAAC;IAEhB;;OAEG;IACH,YAAY,CAAC,EAAE,OAAO,CAAC;IAEvB;;;;;OAKG;IACH,cAAc,CAAC,EAAE,MAAM,CAAC;IAExB;;;OAGG;IACH,iBAAiB,CAAC,EAAE,OAAO,CAAC;IAE5B;;OAEG;IACH,UAAU,CAAC,EAAE,GAAG,CAAC,eAAe,CAAC;IAEjC;;;OAGG;IACH,MAAM,CAAC,EAAE,OAAO,CAAC;IAEjB;;OAEG;IACH,MAAM,CAAC,EAAE,MAAM,CAAC;IAEhB;;;;OAIG;IACH,MAAM,CAAC,EAAE,OAAO,CAAC;IAEjB;;;;;;;;;;;OAWG;IACH,MAAM,CAAC,EAAE,WAAW,CAAC;CACtB;AAqED;;;;;;;;;;;;;;;;;;;;;;GAsBG;AACH,wBAAgB,YAAY,CAC1B,MAAM,EAAE,MAAM,EACd,MAAM,EAAE,aAAa,EACrB,OAAO,GAAE,mBAAwB,EACjC,gBAAgB,CAAC,EAAE,MAAM,EACzB,aAAa,CAAC,EAAE,MAAM,EACtB,GAAG,CAAC,EAAE;IAAE,CAAC,GAAG,EAAE,MAAM,GAAG,MAAM,GAAG,SAAS,CAAA;CAAE,GAC1C,GAAG,CAAC,IAAI,CAGV;AAED;;;;;;;;;;;;;;;;;;;;;;;;;GAyBG;AACH,wBAAgB,sBAAsB,CACpC,MAAM,EAAE,eAAe,EACvB,OAAO,EAAE,mBAAmB,GAAG;IAAE,MAAM,EAAE,KAAK,CAAA;CAAE,EAChD,gBAAgB,CAAC,EAAE,MAAM,EACzB,GAAG,CAAC,EAAE;IAAE,CAAC,GAAG,EAAE,MAAM,GAAG,MAAM,GAAG,SAAS,CAAA;CAAE,GAC1C,YAAY,CAAC;AAChB,wBAAgB,sBAAsB,CACpC,MAAM,EAAE,eAAe,EACvB,OAAO,CAAC,EAAE,mBAAmB,EAC7B,gBAAgB,CAAC,EAAE,MAAM,EACzB,GAAG,CAAC,EAAE;IAAE,CAAC,GAAG,EAAE,MAAM,GAAG,MAAM,GAAG,SAAS,CAAA;CAAE,GAC1C,GAAG,CAAC,IAAI,CAAC;AAyCZ;;;;;;;;;;;;;;;;;;;;;;;GAuBG;AACH,wBAAgB,iBAAiB,CAC/B,MAAM,EAAE,MAAM,EACd,MAAM,EAAE,aAAa,EACrB,OAAO,GAAE,mBAAwB,EACjC,gBAAgB,CAAC,EAAE,MAAM,EACzB,aAAa,CAAC,EAAE,MAAM,GACrB,OAAO,CAAC;IAAE,MAAM,EAAE,MAAM,CAAC;IAAC,MAAM,EAAE,MAAM,CAAC;IAAC,QAAQ,EAAE,MAAM,CAAA;CAAE,CAAC,CAgC/D"}