@qvac/harness 0.3.1 → 0.3.2

package/dist-lib/lib/tools/exec.js

@@ -4,6 +4,7 @@ import { AbortedError } from '../helpers/race-abort.js';
 import { spawnEnv } from '../helpers/spawn-path.js';
 import { checkPdfBuildSource, checkBareLengthArgs, checkPptxBuildSource, checkPythonSource, checkUnstagedRead, createPythonAdapter, isPythonLanguage, parseInputs, parseOutputs, parsePackages, parseWorkdir, pinned, runsThroughPyodide, unwrapPythonSource } from './exec/adapters/python/python-adapter.js';
 import { pythonCreateEffect } from './exec/adapters/python/create-effect.js';
+import { namedHosts } from './exec/adapters/python/named-hosts.js';
 import { pythonReachesNetwork } from './exec/adapters/python/net-shim.js';
 import { createShellAdapter } from './exec/adapters/shell/shell-adapter.js';
 import { routeObsidianCommand } from './exec/obsidian/route.js';
@@ -82,6 +83,34 @@ function checkFileArgs(args, python) {
 function truncateLabel(text) {
     return text.length > 120 ? `${text.slice(0, 120)}…` : text;
 }
+const CONNECT_ANSWER_MS = 60_000;
+function connectAsker(askUser) {
+    return async (host) => {
+        let timer;
+        const late = new Promise((resolve) => {
+            timer = setTimeout(() => resolve(null), CONNECT_ANSWER_MS);
+        });
+        try {
+            const answer = await Promise.race([
+                askUser({
+                    question: `This Python run wants to connect to ${host}, which its approved code does not name. Allow it for this run?`,
+                    options: ['Allow', 'Deny']
+                }),
+                late
+            ]);
+            return /^allow/i.test((answer ?? '').trim());
+        }
+        finally {
+            clearTimeout(timer);
+        }
+    };
+}
+function networkPrefix(source) {
+    const hosts = namedHosts(source);
+    if (hosts.length === 0)
+        return ' · network: no host named in the code';
+    return ` · network: ${hosts.join(', ')}`;
+}
 function packageSuffix(args) {
     if (!Array.isArray(args.packages) || args.packages.length === 0)
         return '';
@@ -428,7 +457,7 @@ export function createExecTool({ spawn, killProcess, loadPyodide, disablePyodide
                 return PACKAGES_NEED_PYTHON_ERROR;
             return checkFileArgs(rawArgs, python);
         },
-        resource(rawArgs) {
+        resource(rawArgs, ctx) {
             const args = withInferredLanguage(rawArgs, disablePyodide);
             const script = typeof args.script === 'string' ? args.script : '';
             if (script.trim() && !script.includes('\n')) {
@@ -438,8 +467,10 @@ export function createExecTool({ spawn, killProcess, loadPyodide, disablePyodide
             if (!command)
                 return null;
             const workdir = typeof args.workdir === 'string' && args.workdir.trim() ? args.workdir.trim() : null;
+            const source = unwrapPythonSource(command) ?? command;
+            const online = pythonNetwork && ctx?.sandboxMode !== true;
             const body = runsThroughPyodide(args.language, disablePyodide)
-                ? `python${packageSuffix(args)}${fileSuffix(args)}: ${(unwrapPythonSource(command) ?? command).slice(0, 120)}`
+                ? `python${online ? networkPrefix(source) : ''}${packageSuffix(args)}${fileSuffix(args)}: ${source.slice(0, 120)}`
                 : command;
             return {
                 kind: 'command',
@@ -515,7 +546,9 @@ export function createExecTool({ spawn, killProcess, loadPyodide, disablePyodide
                     turnImages: ctx?.turnImages,
                     runBudget: ctx?.runBudget,
                     sandboxMode: ctx?.sandboxMode,
-                    toolNames: ctx?.toolNames
+                    toolNames: ctx?.toolNames,
+                    approval: ctx?.approval,
+                    confirmConnect: ctx?.askUser ? connectAsker(ctx.askUser) : undefined
                 });
                 return await execution.run({
                     cwd,

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@qvac/harness",
-  "version": "0.3.1",
+  "version": "0.3.2",
   "type": "module",
   "description": "An AI harness implementing generate(context) via @qvac/sdk. Knows nothing about workbench, hyperdb, or chunks — just inference in, events out.",
   "exports": {
@@ -220,6 +220,10 @@
       "types": "./dist-lib/lib/tools/exec/adapters/python/guarded-fetch.d.ts",
       "default": "./dist-lib/lib/tools/exec/adapters/python/guarded-fetch.js"
     },
+    "./lib/tools/exec/adapters/python/interrupt-timer.ts": {
+      "types": "./dist-lib/lib/tools/exec/adapters/python/interrupt-timer.d.ts",
+      "default": "./dist-lib/lib/tools/exec/adapters/python/interrupt-timer.js"
+    },
     "./lib/tools/exec/adapters/python/loader.ts": {
       "types": "./dist-lib/lib/tools/exec/adapters/python/loader.d.ts",
       "default": "./dist-lib/lib/tools/exec/adapters/python/loader.js"
@@ -232,6 +236,10 @@
       "types": "./dist-lib/lib/tools/exec/adapters/python/module-distributions.d.ts",
       "default": "./dist-lib/lib/tools/exec/adapters/python/module-distributions.js"
     },
+    "./lib/tools/exec/adapters/python/named-hosts.ts": {
+      "types": "./dist-lib/lib/tools/exec/adapters/python/named-hosts.d.ts",
+      "default": "./dist-lib/lib/tools/exec/adapters/python/named-hosts.js"
+    },
     "./lib/tools/exec/adapters/python/net-shim.ts": {
       "types": "./dist-lib/lib/tools/exec/adapters/python/net-shim.d.ts",
       "default": "./dist-lib/lib/tools/exec/adapters/python/net-shim.js"
@@ -748,7 +756,9 @@
     "corestore": "^7.11.0",
     "holepunch-types": "^0.2.1",
     "hyperdrive": "^13.3.3",
+    "jsdom": "~30.0.1",
     "lunte": "^1.8.3",
+    "mermaid": "~11.16.1",
     "prettier": "^3.6.2",
     "prettier-config-holepunch": "^2.0.0",
     "prettytap": "^0.2.0",