@overkill-dev/run 0.0.64 → 0.0.66
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/attachments/attachment-context.js +41 -0
- package/attachments/attachment-context.js.map +1 -0
- package/attachments/failure-artifact-stream.js +53 -0
- package/attachments/failure-artifact-stream.js.map +1 -0
- package/attachments/resource-failure-context.js +41 -0
- package/attachments/resource-failure-context.js.map +1 -0
- package/engine/case-execution.d.ts +1 -0
- package/engine/case-execution.d.ts.map +1 -1
- package/engine/case-execution.js +17 -29
- package/engine/case-execution.js.map +1 -1
- package/engine/recorded-assertion-failure.js +30 -0
- package/engine/recorded-assertion-failure.js.map +1 -0
- package/engine/run-artifact.d.ts +2 -2
- package/engine/run-artifact.d.ts.map +1 -1
- package/engine/run-result.d.ts +5 -1
- package/engine/run-result.d.ts.map +1 -1
- package/engine/run-result.js.map +1 -1
- package/engine/runtime-attachment.d.ts +82 -0
- package/engine/runtime-attachment.d.ts.map +1 -0
- package/engine/runtime-attachment.js +7 -0
- package/engine/runtime-attachment.js.map +1 -0
- package/package-version.js +31 -0
- package/package-version.js.map +1 -0
- package/package.json +29 -3
- package/packages/resources/attachment-context.entry-point.js +2 -0
- package/packages/resources/attachment-context.entry-point.js.map +1 -0
- package/packages/run/config.entry-point.d.ts +1 -1
- package/packages/run/config.entry-point.d.ts.map +1 -1
- package/packages/run/run.entry-point.d.ts +1 -1
- package/packages/run/run.entry-point.d.ts.map +1 -1
- package/packages/simulation/transcript.entry-point.js +2 -0
- package/packages/simulation/transcript.entry-point.js.map +1 -1
- package/readme.md +41 -7
- package/reporters/human-reporter-rendering.js +59 -15
- package/reporters/human-reporter-rendering.js.map +1 -1
- package/resources/failure-artifacts.js +9 -0
- package/resources/failure-artifacts.js.map +1 -0
- package/resources/resource-definition-brand.js +1 -1
- package/resources/resource-definition-brand.js.map +1 -1
- package/resources/resource-definition-types.d.ts.map +1 -1
- package/resources/resource-scenario-binding.js +2 -0
- package/resources/resource-scenario-binding.js.map +1 -1
- package/resources/resource-session.d.ts.map +1 -1
- package/resources/runtime-definition.d.ts.map +1 -1
- package/resources/runtime-definition.js +1 -1
- package/resources/runtime-definition.js.map +1 -1
- package/resources/runtime-matrix-definition.d.ts.map +1 -1
- package/resources/runtime-matrix-definition.js +2 -2
- package/resources/runtime-matrix-definition.js.map +1 -1
- package/run/assertion-result-schema.js +69 -0
- package/run/assertion-result-schema.js.map +1 -0
- package/run/attachment-connection.js +108 -0
- package/run/attachment-connection.js.map +1 -0
- package/run/attachment-coordinator-context.js +9 -0
- package/run/attachment-coordinator-context.js.map +1 -0
- package/run/attachment-coordinator.js +81 -0
- package/run/attachment-coordinator.js.map +1 -0
- package/run/attachment-eligibility.js +21 -0
- package/run/attachment-eligibility.js.map +1 -0
- package/run/attachment-execution.js +302 -0
- package/run/attachment-execution.js.map +1 -0
- package/run/attachment-failure.js +63 -0
- package/run/attachment-failure.js.map +1 -0
- package/run/attachment-frames.js +22 -0
- package/run/attachment-frames.js.map +1 -0
- package/run/attachment-json.js +118 -0
- package/run/attachment-json.js.map +1 -0
- package/run/attachment-protocol.js +9 -0
- package/run/attachment-protocol.js.map +1 -0
- package/run/attachment-record.js +60 -0
- package/run/attachment-record.js.map +1 -0
- package/run/attachment-reporter.js +40 -0
- package/run/attachment-reporter.js.map +1 -0
- package/run/attachment-results.js +111 -0
- package/run/attachment-results.js.map +1 -0
- package/run/attachment-retention.js +153 -0
- package/run/attachment-retention.js.map +1 -0
- package/run/attachment-run.js +36 -0
- package/run/attachment-run.js.map +1 -0
- package/run/attachment-server.js +136 -0
- package/run/attachment-server.js.map +1 -0
- package/run/attachment-storage-session.js +22 -0
- package/run/attachment-storage-session.js.map +1 -0
- package/run/attachment-storage-writer.js +128 -0
- package/run/attachment-storage-writer.js.map +1 -0
- package/run/attachment-store.js +287 -0
- package/run/attachment-store.js.map +1 -0
- package/run/attachment-wire-schema.js +159 -0
- package/run/attachment-wire-schema.js.map +1 -0
- package/run/attachment-worker-context.js +49 -0
- package/run/attachment-worker-context.js.map +1 -0
- package/run/attachment-writer.js +119 -0
- package/run/attachment-writer.js.map +1 -0
- package/run/capability-policy-snapshots.d.ts +3 -2
- package/run/capability-policy-snapshots.d.ts.map +1 -1
- package/run/capability-policy-snapshots.js.map +1 -1
- package/run/capability-policy.js +48 -38
- package/run/capability-policy.js.map +1 -1
- package/run/child-process-protocol.js +17 -13
- package/run/child-process-protocol.js.map +1 -1
- package/run/child-process-shutdown.js +54 -0
- package/run/child-process-shutdown.js.map +1 -0
- package/run/collected-run-plan-schema.js +90 -0
- package/run/collected-run-plan-schema.js.map +1 -0
- package/run/coverage-config-schema.d.ts +6 -6
- package/run/coverage-runtime-source.js +5 -0
- package/run/coverage-runtime-source.js.map +1 -1
- package/run/coverage-source-selection.js +6 -2
- package/run/coverage-source-selection.js.map +1 -1
- package/run/current-process-run-orchestrator.js +7 -11
- package/run/current-process-run-orchestrator.js.map +1 -1
- package/run/diff-schema.js +78 -0
- package/run/diff-schema.js.map +1 -0
- package/run/failure-artifact-retention.js +76 -0
- package/run/failure-artifact-retention.js.map +1 -0
- package/run/node-child-process-starters.js +8 -1
- package/run/node-child-process-starters.js.map +1 -1
- package/run/node-process-policy-observation.js +43 -0
- package/run/node-process-policy-observation.js.map +1 -0
- package/run/permission-denial-runtime-policy.js +3 -0
- package/run/permission-denial-runtime-policy.js.map +1 -1
- package/run/reporter-event-schema.js +42 -0
- package/run/reporter-event-schema.js.map +1 -0
- package/run/resource-disposal-error.js +27 -0
- package/run/resource-disposal-error.js.map +1 -0
- package/run/resource-failure-preparation.js +86 -0
- package/run/resource-failure-preparation.js.map +1 -0
- package/run/resource-lifecycle-disposal.js +132 -0
- package/run/resource-lifecycle-disposal.js.map +1 -0
- package/run/resource-lifecycle-projection.js +6 -2
- package/run/resource-lifecycle-projection.js.map +1 -1
- package/run/resource-lifecycle-session-acquirer.js +31 -8
- package/run/resource-lifecycle-session-acquirer.js.map +1 -1
- package/run/resource-lifecycle-startup-budget.js +1 -0
- package/run/resource-lifecycle-startup-budget.js.map +1 -1
- package/run/resource-lifecycle-state.d.ts +2 -1
- package/run/resource-lifecycle-state.d.ts.map +1 -1
- package/run/resource-lifecycle-state.js +40 -1
- package/run/resource-lifecycle-state.js.map +1 -1
- package/run/resource-lifecycle.js +47 -107
- package/run/resource-lifecycle.js.map +1 -1
- package/run/retry-artifact-retention.js.map +1 -1
- package/run/run-artifact-id-schema.js +27 -0
- package/run/run-artifact-id-schema.js.map +1 -0
- package/run/run-artifact-schema.js +74 -0
- package/run/run-artifact-schema.js.map +1 -0
- package/run/run-collection-error-result.js +1 -1
- package/run/run-collection-error-result.js.map +1 -1
- package/run/run-command-schema.js +60 -0
- package/run/run-command-schema.js.map +1 -0
- package/run/run-config-schema.d.ts +25 -6
- package/run/run-config-schema.d.ts.map +1 -1
- package/run/run-config-schema.js +11 -0
- package/run/run-config-schema.js.map +1 -1
- package/run/run-config.d.ts +7 -5
- package/run/run-config.d.ts.map +1 -1
- package/run/run-config.js +2 -1
- package/run/run-config.js.map +1 -1
- package/run/run-engine-primitives.d.ts +12 -1
- package/run/run-engine-primitives.d.ts.map +1 -1
- package/run/run-errors.d.ts +2 -0
- package/run/run-errors.d.ts.map +1 -1
- package/run/run-errors.js +17 -0
- package/run/run-errors.js.map +1 -1
- package/run/run-facts.js +1 -0
- package/run/run-facts.js.map +1 -1
- package/run/run-identity-schema.js +38 -0
- package/run/run-identity-schema.js.map +1 -0
- package/run/run-isolated-command.js +1 -0
- package/run/run-isolated-command.js.map +1 -1
- package/run/run-local-command.js +20 -4
- package/run/run-local-command.js.map +1 -1
- package/run/run-local-coverage.js +16 -3
- package/run/run-local-coverage.js.map +1 -1
- package/run/run-local-execution.js +2 -1
- package/run/run-local-execution.js.map +1 -1
- package/run/run-local-resolution.js.map +1 -1
- package/run/run-orchestrator.d.ts +2 -2
- package/run/run-orchestrator.d.ts.map +1 -1
- package/run/run-orchestrator.js +2 -2
- package/run/run-orchestrator.js.map +1 -1
- package/run/run-record-input.js.map +1 -1
- package/run/run-record-outcomes.d.ts +4 -1
- package/run/run-record-outcomes.d.ts.map +1 -1
- package/run/run-record-versions.js +1 -30
- package/run/run-record-versions.js.map +1 -1
- package/run/run-record.js.map +1 -1
- package/run/run-result-schema.js +65 -0
- package/run/run-result-schema.js.map +1 -0
- package/run/run-runtime-schema.js +64 -0
- package/run/run-runtime-schema.js.map +1 -0
- package/run/run-support.js +10 -1
- package/run/run-support.js.map +1 -1
- package/run/run-types.d.ts +3 -4
- package/run/run-types.d.ts.map +1 -1
- package/run/run-types.js.map +1 -1
- package/run/run-validation.js +9 -0
- package/run/run-validation.js.map +1 -1
- package/run/runtime-attachment-boundary.js +11 -0
- package/run/runtime-attachment-boundary.js.map +1 -0
- package/run/serialized-value-schema.js +76 -0
- package/run/serialized-value-schema.js.map +1 -0
- package/run/simulation-witness.js +38 -0
- package/run/simulation-witness.js.map +1 -0
- package/run/supervised-child-failure.js +26 -0
- package/run/supervised-child-failure.js.map +1 -0
- package/run/supervised-child-process.d.ts +3 -0
- package/run/supervised-child-process.d.ts.map +1 -1
- package/run/supervised-child-process.js +2 -0
- package/run/supervised-child-process.js.map +1 -1
- package/run/supervised-child-transport.js +125 -0
- package/run/supervised-child-transport.js.map +1 -0
- package/run/supervised-child.entry-point.js +38 -33
- package/run/supervised-child.entry-point.js.map +1 -1
- package/run/supervised-child.js +13 -11
- package/run/supervised-child.js.map +1 -1
- package/run/supervised-protocol-schema.js +42 -0
- package/run/supervised-protocol-schema.js.map +1 -0
- package/run/supervised-protocol.js.map +1 -1
- package/run/supervised-run-collection.js +33 -30
- package/run/supervised-run-collection.js.map +1 -1
- package/run/supervised-run-runtime.js +36 -12
- package/run/supervised-run-runtime.js.map +1 -1
- package/run/supervised-run-state.js +43 -22
- package/run/supervised-run-state.js.map +1 -1
- package/run/supervised-run.js +80 -39
- package/run/supervised-run.js.map +1 -1
- package/run/worker-pool-command.js +1 -0
- package/run/worker-pool-command.js.map +1 -1
- package/run/worker-pool-execution.js +12 -5
- package/run/worker-pool-execution.js.map +1 -1
- package/run/worker-pool-hedged-arbitration.js +7 -2
- package/run/worker-pool-hedged-arbitration.js.map +1 -1
- package/run/worker-pool-host-process.js +50 -20
- package/run/worker-pool-host-process.js.map +1 -1
- package/run/worker-pool-host-protocol-schema.js +80 -0
- package/run/worker-pool-host-protocol-schema.js.map +1 -0
- package/run/worker-pool-host-protocol.js.map +1 -1
- package/run/worker-pool-host-task.js +20 -11
- package/run/worker-pool-host-task.js.map +1 -1
- package/run/worker-pool-host-transport.js +96 -0
- package/run/worker-pool-host-transport.js.map +1 -0
- package/run/worker-pool-host.entry-point.js +37 -5
- package/run/worker-pool-host.entry-point.js.map +1 -1
- package/run/worker-pool-protocol.js +3 -0
- package/run/worker-pool-protocol.js.map +1 -1
- package/run/worker-pool-resource-lifecycle-execution.js +66 -1
- package/run/worker-pool-resource-lifecycle-execution.js.map +1 -1
- package/run/worker-pool-routing.js +2 -1
- package/run/worker-pool-routing.js.map +1 -1
- package/run/worker-pool-run.js +8 -1
- package/run/worker-pool-run.js.map +1 -1
- package/run/worker-pool-runtime.js +3 -7
- package/run/worker-pool-runtime.js.map +1 -1
- package/run/worker-pool-task-events.js +20 -14
- package/run/worker-pool-task-events.js.map +1 -1
- package/run/worker-pool-task-schema.js +61 -0
- package/run/worker-pool-task-schema.js.map +1 -0
- package/run/worker-pool-task-validation.js +1 -0
- package/run/worker-pool-task-validation.js.map +1 -1
- package/run/worker-pool-worker-resources.js +68 -0
- package/run/worker-pool-worker-resources.js.map +1 -1
- package/run/worker-pool-worker.js +25 -8
- package/run/worker-pool-worker.js.map +1 -1
- package/sbom.cdx.json +5 -5
- package/stored-value.js +12 -0
- package/stored-value.js.map +1 -0
- package/transcript/http-transcript-artifact.js +2 -0
- package/transcript/http-transcript-artifact.js.map +1 -0
- package/transcript/transcript-store.d.ts +1 -1
- package/transcript/transcript-store.d.ts.map +1 -1
- package/transcript/transcript-store.js +29 -3
- package/transcript/transcript-store.js.map +1 -1
- package/run/node-process-capability-restrictions.js +0 -92
- package/run/node-process-capability-restrictions.js.map +0 -1
|
@@ -1,6 +1,20 @@
|
|
|
1
1
|
import { AsyncLocalStorage } from 'node:async_hooks';
|
|
2
|
+
const transcriptObservationKey = Symbol.for('@overkill-dev/transcript-observation/v1');
|
|
2
3
|
const transcriptIdentity = Symbol.for('@overkill-dev/transcript');
|
|
3
|
-
const
|
|
4
|
+
const scopeStorageKey = Symbol.for('@overkill-dev/transcript-scope/v1');
|
|
5
|
+
function isTranscriptScopeStorage(value) {
|
|
6
|
+
return value instanceof AsyncLocalStorage;
|
|
7
|
+
}
|
|
8
|
+
function sharedTranscriptScope() {
|
|
9
|
+
const existing = Reflect.get(globalThis, scopeStorageKey);
|
|
10
|
+
if (isTranscriptScopeStorage(existing)) {
|
|
11
|
+
return existing;
|
|
12
|
+
}
|
|
13
|
+
const created = new AsyncLocalStorage();
|
|
14
|
+
Object.defineProperty(globalThis, scopeStorageKey, { value: created });
|
|
15
|
+
return created;
|
|
16
|
+
}
|
|
17
|
+
const activeTranscriptScope = sharedTranscriptScope();
|
|
4
18
|
const noEntries = Object.freeze([]);
|
|
5
19
|
function validIndex(index) {
|
|
6
20
|
return Number.isSafeInteger(index) && index >= 0;
|
|
@@ -18,8 +32,14 @@ export function currentTranscriptScope() {
|
|
|
18
32
|
export async function runWithTranscriptScope(scope, run) {
|
|
19
33
|
return await activeTranscriptScope.run(scope, run);
|
|
20
34
|
}
|
|
21
|
-
function brandedView(currentEntries) {
|
|
35
|
+
function brandedView(currentEntries, listeners) {
|
|
22
36
|
const view = {
|
|
37
|
+
[transcriptObservationKey](observe) {
|
|
38
|
+
listeners.add(observe);
|
|
39
|
+
return function stopTranscriptObservation() {
|
|
40
|
+
listeners.delete(observe);
|
|
41
|
+
};
|
|
42
|
+
},
|
|
23
43
|
get entries() {
|
|
24
44
|
return currentEntries();
|
|
25
45
|
},
|
|
@@ -40,9 +60,13 @@ function brandedView(currentEntries) {
|
|
|
40
60
|
}
|
|
41
61
|
export function createTranscriptStore() {
|
|
42
62
|
const entries = [];
|
|
63
|
+
const listeners = new Set();
|
|
43
64
|
let scopedEntries = new WeakMap();
|
|
44
65
|
function recordInScope(scope, entry) {
|
|
45
66
|
entries.push(entry);
|
|
67
|
+
for (const observe of listeners) {
|
|
68
|
+
observe(entry, scope);
|
|
69
|
+
}
|
|
46
70
|
if (scope !== null) {
|
|
47
71
|
const scopeEntries = scopedEntries.get(scope) ?? [];
|
|
48
72
|
scopeEntries.push(entry);
|
|
@@ -53,6 +77,7 @@ export function createTranscriptStore() {
|
|
|
53
77
|
const scope = currentTranscriptScope();
|
|
54
78
|
return scope === null ? entries : scopedEntries.get(scope) ?? noEntries;
|
|
55
79
|
}
|
|
80
|
+
const view = brandedView(currentEntries, listeners);
|
|
56
81
|
return Object.freeze({
|
|
57
82
|
record(...entry) {
|
|
58
83
|
recordInScope(currentTranscriptScope(), entry);
|
|
@@ -64,10 +89,11 @@ export function createTranscriptStore() {
|
|
|
64
89
|
entries.length = 0;
|
|
65
90
|
scopedEntries = new WeakMap();
|
|
66
91
|
},
|
|
67
|
-
view
|
|
92
|
+
view
|
|
68
93
|
});
|
|
69
94
|
}
|
|
70
95
|
export function isTranscriptView(value) {
|
|
71
96
|
return typeof value === 'object' && value !== null && Reflect.get(value, transcriptIdentity) === true;
|
|
72
97
|
}
|
|
98
|
+
|
|
73
99
|
//# sourceMappingURL=transcript-store.js.map
|
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"transcript-store.js","sourceRoot":"","sources":["../../../../source/transcript/transcript-store.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,iBAAiB,EAAE,MAAM,kBAAkB,CAAC;AAErD,MAAM,kBAAkB,GAAG,MAAM,CAAC,GAAG,CAAC,0BAA0B,CAAC,CAAC;
|
|
1
|
+
{"version":3,"file":"transcript-store.js","sourceRoot":"","sources":["../../../../source/transcript/transcript-store.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,iBAAiB,EAAE,MAAM,kBAAkB,CAAC;AAErD,MAAM,wBAAwB,GAAG,MAAM,CAAC,GAAG,CAAC,yCAAyC,CAAC,CAAC;AACvF,MAAM,kBAAkB,GAAG,MAAM,CAAC,GAAG,CAAC,0BAA0B,CAAC,CAAC;AAsBlE,MAAM,eAAe,GAAG,MAAM,CAAC,GAAG,CAAC,mCAAmC,CAAC,CAAC;AACxE,SAAS,wBAAwB,CAAC,KAAc;IAC5C,OAAO,KAAK,YAAY,iBAAiB,CAAC;AAC9C,CAAC;AACD,SAAS,qBAAqB;IAC1B,MAAM,QAAQ,GAAY,OAAO,CAAC,GAAG,CAAC,UAAU,EAAE,eAAe,CAAC,CAAC;IACnE,IAAI,wBAAwB,CAAC,QAAQ,CAAC,EAAE,CAAC;QACrC,OAAO,QAAQ,CAAC;IACpB,CAAC;IACD,MAAM,OAAO,GAAG,IAAI,iBAAiB,EAA0B,CAAC;IAChE,MAAM,CAAC,cAAc,CAAC,UAAU,EAAE,eAAe,EAAE,EAAE,KAAK,EAAE,OAAO,EAAE,CAAC,CAAC;IACvE,OAAO,OAAO,CAAC;AACnB,CAAC;AACD,MAAM,qBAAqB,GAAG,qBAAqB,EAAE,CAAC;AACtD,MAAM,SAAS,GAAG,MAAM,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;AAMpC,SAAS,UAAU,CAAC,KAAa;IAC7B,OAAO,MAAM,CAAC,aAAa,CAAC,KAAK,CAAC,IAAI,KAAK,IAAI,CAAC,CAAC;AACrD,CAAC;AAED,MAAM,UAAU,mBAAmB,CAAiC,OAAgB;IAChF,MAAM,CAAC,cAAc,CAAC,OAAO,EAAE,kBAAkB,EAAE;QAC/C,UAAU,EAAE,KAAK;QACjB,KAAK,EAAE,IAAI;KACd,CAAC,CAAC;IAEH,OAAO,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;AAClC,CAAC;AAED,MAAM,UAAU,sBAAsB;IAClC,OAAO,qBAAqB,CAAC,QAAQ,EAAE,IAAI,IAAI,CAAC;AACpD,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,sBAAsB,CACxC,KAA6B,EAC7B,GAAyB;IAEzB,OAAO,MAAM,qBAAqB,CAAC,GAAG,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC;AACvD,CAAC;AAMD,SAAS,WAAW,CAChB,cAAsC,EACtC,SAAqC;IAErC,MAAM,IAAI,GAAG;QACT,CAAC,wBAAwB,CAAC,CAAC,OAAkC;YACzD,SAAS,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;YACvB,OAAO,SAAS,yBAAyB;gBACrC,SAAS,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;YAC9B,CAAC,CAAC;QACN,CAAC;QACD,IAAI,OAAO;YACP,OAAO,cAAc,EAAE,CAAC;QAC5B,CAAC;QACD,IAAI,UAAU;YACV,OAAO,cAAc,EAAE,CAAC,MAAM,CAAC;QACnC,CAAC;QACD,IAAI,UAAU;YACV,OAAO,cAAc,EAAE,CAAC,CAAC,CAAC,IAAI,IAAI,CAAC;QACvC,CAAC;QACD,IAAI,SAAS;YACT,OAAO,cAAc,EAAE,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,IAAI,IAAI,CAAC;QAC3C,CAAC;QACD,QAAQ,CAAC,KAAa;YAClB,OAAO,UAAU,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,cAAc,EAAE,CAAC,KAAK,CAAC,IAAI,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC;QACtE,CAAC;KACJ,CAAC;IAEF,OAAO,mBAAmB,CAAC,IAAI,CAAC,CAAC;AACrC,CAAC;AAED,MAAM,UAAU,qBAAqB;IACjC,MAAM,OAAO,GAAY,EAAE,CAAC;IAC5B,MAAM,SAAS,GAAG,IAAI,GAAG,EAA6B,CAAC;IACvD,IAAI,aAAa,GAAG,IAAI,OAAO,EAA4B,CAAC;IAE5D,SAAS,aAAa,CAAC,KAA6B,EAAE,KAAY;QAC9D,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QACpB,KAAK,MAAM,OAAO,IAAI,SAAS,EAAE,CAAC;YAC9B,OAAO,CAAC,KAAK,EAAE,KAAK,CAAC,CAAC;QAC1B,CAAC;QACD,IAAI,KAAK,KAAK,IAAI,EAAE,CAAC;YACjB,MAAM,YAAY,GAAG,aAAa,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC;YAEpD,YAAY,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;YACzB,aAAa,CAAC,GAAG,CAAC,KAAK,EAAE,YAAY,CAAC,CAAC;QAC3C,CAAC;IACL,CAAC;IAED,SAAS,cAAc;QACnB,MAAM,KAAK,GAAG,sBAAsB,EAAE,CAAC;QAEvC,OAAO,KAAK,KAAK,IAAI,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,aAAa,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,SAAS,CAAC;IAC5E,CAAC;IAED,MAAM,IAAI,GAAG,WAAW,CAAC,cAAc,EAAE,SAAS,CAAC,CAAC;IACpD,OAAO,MAAM,CAAC,MAAM,CAAC;QACjB,MAAM,CAAC,GAAG,KAAY;YAClB,aAAa,CAAC,sBAAsB,EAAE,EAAE,KAAK,CAAC,CAAC;QACnD,CAAC;QACD,aAAa,CAAC,KAAK,EAAE,GAAG,KAAY;YAChC,aAAa,CAAC,KAAK,EAAE,KAAK,CAAC,CAAC;QAChC,CAAC;QACD,KAAK;YACD,OAAO,CAAC,MAAM,GAAG,CAAC,CAAC;YACnB,aAAa,GAAG,IAAI,OAAO,EAAE,CAAC;QAClC,CAAC;QACD,IAAI;KACP,CAAC,CAAC;AACP,CAAC;AAED,MAAM,UAAU,gBAAgB,CAAC,KAAc;IAC3C,OAAO,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,IAAI,IAAI,OAAO,CAAC,GAAG,CAAC,KAAK,EAAE,kBAAkB,CAAC,KAAK,IAAI,CAAC;AAC1G,CAAC"}
|
|
@@ -1,92 +0,0 @@
|
|
|
1
|
-
const processExecuteFunctionName = ['exec', 've'].join('');
|
|
2
|
-
function readProcessExecutionMethods(processObject) {
|
|
3
|
-
return {
|
|
4
|
-
abort: processObject.abort,
|
|
5
|
-
execute: Reflect.get(processObject, processExecuteFunctionName),
|
|
6
|
-
exit: processObject.exit,
|
|
7
|
-
kill: processObject.kill
|
|
8
|
-
};
|
|
9
|
-
}
|
|
10
|
-
function restoreProcessExecutionMethods(processObject, originals) {
|
|
11
|
-
Reflect.set(processObject, 'abort', originals.abort);
|
|
12
|
-
Reflect.set(processObject, processExecuteFunctionName, originals.execute);
|
|
13
|
-
Reflect.set(processObject, 'exit', originals.exit);
|
|
14
|
-
Reflect.set(processObject, 'kill', originals.kill);
|
|
15
|
-
}
|
|
16
|
-
function replaceProcessExecutionMethods(processObject, originals, record) {
|
|
17
|
-
const blocked = new Error('Runtime policy violation: process execution is restricted.');
|
|
18
|
-
Reflect.set(processObject, 'abort', function restrictedProcessAbort() {
|
|
19
|
-
record('Runtime policy violation: process.abort() was called.');
|
|
20
|
-
throw blocked;
|
|
21
|
-
});
|
|
22
|
-
Reflect.set(processObject, 'exit', function restrictedProcessExit(code) {
|
|
23
|
-
record(`Runtime policy violation: process.exit(${String(code ?? '')}) was called.`);
|
|
24
|
-
throw blocked;
|
|
25
|
-
});
|
|
26
|
-
Reflect.set(processObject, 'kill', function restrictedProcessKill(pid, signal) {
|
|
27
|
-
record(`Runtime policy violation: process.kill(${String(pid)}, ${String(signal ?? '')}) was called.`);
|
|
28
|
-
return false;
|
|
29
|
-
});
|
|
30
|
-
if (typeof originals.execute === 'function') {
|
|
31
|
-
Reflect.set(processObject, processExecuteFunctionName, function restrictedProcessExecute() {
|
|
32
|
-
record(`Runtime policy violation: process.${processExecuteFunctionName}() was called.`);
|
|
33
|
-
throw blocked;
|
|
34
|
-
});
|
|
35
|
-
}
|
|
36
|
-
}
|
|
37
|
-
export function installProcessExecutionRestriction(processObject, record) {
|
|
38
|
-
const originals = readProcessExecutionMethods(processObject);
|
|
39
|
-
replaceProcessExecutionMethods(processObject, originals, record);
|
|
40
|
-
return function restoreProcessExecutionRestriction() {
|
|
41
|
-
restoreProcessExecutionMethods(processObject, originals);
|
|
42
|
-
};
|
|
43
|
-
}
|
|
44
|
-
function readProcessIpcMethods(processObject) {
|
|
45
|
-
return {
|
|
46
|
-
addListener: processObject.addListener,
|
|
47
|
-
on: processObject.on,
|
|
48
|
-
once: processObject.once,
|
|
49
|
-
prependListener: processObject.prependListener,
|
|
50
|
-
prependOnceListener: processObject.prependOnceListener,
|
|
51
|
-
send: processObject.send
|
|
52
|
-
};
|
|
53
|
-
}
|
|
54
|
-
function restoreProcessIpcMethods(processObject, originals) {
|
|
55
|
-
Reflect.set(processObject, 'addListener', originals.addListener);
|
|
56
|
-
Reflect.set(processObject, 'on', originals.on);
|
|
57
|
-
Reflect.set(processObject, 'once', originals.once);
|
|
58
|
-
Reflect.set(processObject, 'prependListener', originals.prependListener);
|
|
59
|
-
Reflect.set(processObject, 'prependOnceListener', originals.prependOnceListener);
|
|
60
|
-
Reflect.set(processObject, 'send', originals.send);
|
|
61
|
-
}
|
|
62
|
-
function restrictedMessageListener(processObject, original, record) {
|
|
63
|
-
return function restrictedListener(eventName, ...listenerArguments) {
|
|
64
|
-
if (eventName === 'message') {
|
|
65
|
-
record('Runtime policy violation: process message listener registration was blocked.');
|
|
66
|
-
return processObject;
|
|
67
|
-
}
|
|
68
|
-
if (typeof original === 'function') {
|
|
69
|
-
Reflect.apply(original, processObject, [eventName, ...listenerArguments]);
|
|
70
|
-
}
|
|
71
|
-
return processObject;
|
|
72
|
-
};
|
|
73
|
-
}
|
|
74
|
-
function replaceProcessIpcMethods(processObject, originals, record) {
|
|
75
|
-
Reflect.set(processObject, 'addListener', restrictedMessageListener(processObject, originals.addListener, record));
|
|
76
|
-
Reflect.set(processObject, 'on', restrictedMessageListener(processObject, originals.on, record));
|
|
77
|
-
Reflect.set(processObject, 'once', restrictedMessageListener(processObject, originals.once, record));
|
|
78
|
-
Reflect.set(processObject, 'prependListener', restrictedMessageListener(processObject, originals.prependListener, record));
|
|
79
|
-
Reflect.set(processObject, 'prependOnceListener', restrictedMessageListener(processObject, originals.prependOnceListener, record));
|
|
80
|
-
Reflect.set(processObject, 'send', function restrictedProcessSend() {
|
|
81
|
-
record('Runtime policy violation: process.send() was blocked.');
|
|
82
|
-
return false;
|
|
83
|
-
});
|
|
84
|
-
}
|
|
85
|
-
export function installIpcRestriction(processObject, record) {
|
|
86
|
-
const originals = readProcessIpcMethods(processObject);
|
|
87
|
-
replaceProcessIpcMethods(processObject, originals, record);
|
|
88
|
-
return function restoreIpcRestriction() {
|
|
89
|
-
restoreProcessIpcMethods(processObject, originals);
|
|
90
|
-
};
|
|
91
|
-
}
|
|
92
|
-
//# sourceMappingURL=node-process-capability-restrictions.js.map
|
|
@@ -1 +0,0 @@
|
|
|
1
|
-
{"version":3,"file":"node-process-capability-restrictions.js","sourceRoot":"","sources":["../../../../source/run/node-process-capability-restrictions.ts"],"names":[],"mappings":"AA4BA,MAAM,0BAA0B,GAAG,CAAE,MAAM,EAAE,IAAI,CAAE,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;AAE7D,SAAS,2BAA2B,CAAC,aAA0B;IAC3D,OAAO;QACH,KAAK,EAAE,aAAa,CAAC,KAAK;QAC1B,OAAO,EAAE,OAAO,CAAC,GAAG,CAAC,aAAa,EAAE,0BAA0B,CAAC;QAC/D,IAAI,EAAE,aAAa,CAAC,IAAI;QACxB,IAAI,EAAE,aAAa,CAAC,IAAI;KAC3B,CAAC;AACN,CAAC;AAED,SAAS,8BAA8B,CAAC,aAA0B,EAAE,SAAkC;IAClG,OAAO,CAAC,GAAG,CAAC,aAAa,EAAE,OAAO,EAAE,SAAS,CAAC,KAAK,CAAC,CAAC;IACrD,OAAO,CAAC,GAAG,CAAC,aAAa,EAAE,0BAA0B,EAAE,SAAS,CAAC,OAAO,CAAC,CAAC;IAC1E,OAAO,CAAC,GAAG,CAAC,aAAa,EAAE,MAAM,EAAE,SAAS,CAAC,IAAI,CAAC,CAAC;IACnD,OAAO,CAAC,GAAG,CAAC,aAAa,EAAE,MAAM,EAAE,SAAS,CAAC,IAAI,CAAC,CAAC;AACvD,CAAC;AAED,SAAS,8BAA8B,CACnC,aAA0B,EAC1B,SAAkC,EAClC,MAAiC;IAEjC,MAAM,OAAO,GAAG,IAAI,KAAK,CAAC,4DAA4D,CAAC,CAAC;IAExF,OAAO,CAAC,GAAG,CAAC,aAAa,EAAE,OAAO,EAAE,SAAS,sBAAsB;QAC/D,MAAM,CAAC,uDAAuD,CAAC,CAAC;QAChE,MAAM,OAAO,CAAC;IAClB,CAAC,CAAC,CAAC;IACH,OAAO,CAAC,GAAG,CAAC,aAAa,EAAE,MAAM,EAAE,SAAS,qBAAqB,CAAC,IAA6B;QAC3F,MAAM,CAAC,0CAA0C,MAAM,CAAC,IAAI,IAAI,EAAE,CAAC,eAAe,CAAC,CAAC;QACpF,MAAM,OAAO,CAAC;IAClB,CAAC,CAAC,CAAC;IACH,OAAO,CAAC,GAAG,CAAC,aAAa,EAAE,MAAM,EAAE,SAAS,qBAAqB,CAAC,GAAW,EAAE,MAAwB;QACnG,MAAM,CAAC,0CAA0C,MAAM,CAAC,GAAG,CAAC,KAAK,MAAM,CAAC,MAAM,IAAI,EAAE,CAAC,eAAe,CAAC,CAAC;QAEtG,OAAO,KAAK,CAAC;IACjB,CAAC,CAAC,CAAC;IAEH,IAAI,OAAO,SAAS,CAAC,OAAO,KAAK,UAAU,EAAE,CAAC;QAC1C,OAAO,CAAC,GAAG,CAAC,aAAa,EAAE,0BAA0B,EAAE,SAAS,wBAAwB;YACpF,MAAM,CAAC,qCAAqC,0BAA0B,gBAAgB,CAAC,CAAC;YACxF,MAAM,OAAO,CAAC;QAClB,CAAC,CAAC,CAAC;IACP,CAAC;AACL,CAAC;AAED,MAAM,UAAU,kCAAkC,CAC9C,aAA0B,EAC1B,MAAiC;IAEjC,MAAM,SAAS,GAAG,2BAA2B,CAAC,aAAa,CAAC,CAAC;IAE7D,8BAA8B,CAAC,aAAa,EAAE,SAAS,EAAE,MAAM,CAAC,CAAC;IAEjE,OAAO,SAAS,kCAAkC;QAC9C,8BAA8B,CAAC,aAAa,EAAE,SAAS,CAAC,CAAC;IAC7D,CAAC,CAAC;AACN,CAAC;AAED,SAAS,qBAAqB,CAAC,aAA0B;IACrD,OAAO;QACH,WAAW,EAAE,aAAa,CAAC,WAAW;QACtC,EAAE,EAAE,aAAa,CAAC,EAAE;QACpB,IAAI,EAAE,aAAa,CAAC,IAAI;QACxB,eAAe,EAAE,aAAa,CAAC,eAAe;QAC9C,mBAAmB,EAAE,aAAa,CAAC,mBAAmB;QACtD,IAAI,EAAE,aAAa,CAAC,IAAI;KAC3B,CAAC;AACN,CAAC;AAED,SAAS,wBAAwB,CAAC,aAA0B,EAAE,SAA4B;IACtF,OAAO,CAAC,GAAG,CAAC,aAAa,EAAE,aAAa,EAAE,SAAS,CAAC,WAAW,CAAC,CAAC;IACjE,OAAO,CAAC,GAAG,CAAC,aAAa,EAAE,IAAI,EAAE,SAAS,CAAC,EAAE,CAAC,CAAC;IAC/C,OAAO,CAAC,GAAG,CAAC,aAAa,EAAE,MAAM,EAAE,SAAS,CAAC,IAAI,CAAC,CAAC;IACnD,OAAO,CAAC,GAAG,CAAC,aAAa,EAAE,iBAAiB,EAAE,SAAS,CAAC,eAAe,CAAC,CAAC;IACzE,OAAO,CAAC,GAAG,CAAC,aAAa,EAAE,qBAAqB,EAAE,SAAS,CAAC,mBAAmB,CAAC,CAAC;IACjF,OAAO,CAAC,GAAG,CAAC,aAAa,EAAE,MAAM,EAAE,SAAS,CAAC,IAAI,CAAC,CAAC;AACvD,CAAC;AAED,SAAS,yBAAyB,CAC9B,aAA0B,EAC1B,QAAiB,EACjB,MAAiC;IAEjC,OAAO,SAAS,kBAAkB,CAAC,SAAS,EAAE,GAAG,iBAAiB;QAC9D,IAAI,SAAS,KAAK,SAAS,EAAE,CAAC;YAC1B,MAAM,CAAC,8EAA8E,CAAC,CAAC;YAEvF,OAAO,aAAa,CAAC;QACzB,CAAC;QAED,IAAI,OAAO,QAAQ,KAAK,UAAU,EAAE,CAAC;YACjC,OAAO,CAAC,KAAK,CAAC,QAAQ,EAAE,aAAa,EAAE,CAAE,SAAS,EAAE,GAAG,iBAAiB,CAAE,CAAC,CAAC;QAChF,CAAC;QAED,OAAO,aAAa,CAAC;IACzB,CAAC,CAAC;AACN,CAAC;AAED,SAAS,wBAAwB,CAC7B,aAA0B,EAC1B,SAA4B,EAC5B,MAAiC;IAEjC,OAAO,CAAC,GAAG,CAAC,aAAa,EAAE,aAAa,EAAE,yBAAyB,CAAC,aAAa,EAAE,SAAS,CAAC,WAAW,EAAE,MAAM,CAAC,CAAC,CAAC;IACnH,OAAO,CAAC,GAAG,CAAC,aAAa,EAAE,IAAI,EAAE,yBAAyB,CAAC,aAAa,EAAE,SAAS,CAAC,EAAE,EAAE,MAAM,CAAC,CAAC,CAAC;IACjG,OAAO,CAAC,GAAG,CAAC,aAAa,EAAE,MAAM,EAAE,yBAAyB,CAAC,aAAa,EAAE,SAAS,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC,CAAC;IACrG,OAAO,CAAC,GAAG,CACP,aAAa,EACb,iBAAiB,EACjB,yBAAyB,CAAC,aAAa,EAAE,SAAS,CAAC,eAAe,EAAE,MAAM,CAAC,CAC9E,CAAC;IACF,OAAO,CAAC,GAAG,CACP,aAAa,EACb,qBAAqB,EACrB,yBAAyB,CAAC,aAAa,EAAE,SAAS,CAAC,mBAAmB,EAAE,MAAM,CAAC,CAClF,CAAC;IACF,OAAO,CAAC,GAAG,CAAC,aAAa,EAAE,MAAM,EAAE,SAAS,qBAAqB;QAC7D,MAAM,CAAC,uDAAuD,CAAC,CAAC;QAEhE,OAAO,KAAK,CAAC;IACjB,CAAC,CAAC,CAAC;AACP,CAAC;AAED,MAAM,UAAU,qBAAqB,CACjC,aAA0B,EAC1B,MAAiC;IAEjC,MAAM,SAAS,GAAG,qBAAqB,CAAC,aAAa,CAAC,CAAC;IAEvD,wBAAwB,CAAC,aAAa,EAAE,SAAS,EAAE,MAAM,CAAC,CAAC;IAE3D,OAAO,SAAS,qBAAqB;QACjC,wBAAwB,CAAC,aAAa,EAAE,SAAS,CAAC,CAAC;IACvD,CAAC,CAAC;AACN,CAAC"}
|