@relayflows/sdk 2.0.28 → 2.0.30

package/dist/hosted-extension-runtime.js

@@ -0,0 +1,167 @@
+import { realpath } from 'node:fs/promises';
+import { dirname, join, resolve } from 'node:path';
+import { canonicalize } from './canonical.js';
+import { createHostedBaseSnapshot, hostedBaseSourceDigest, removeHostedBaseSnapshot, } from './hosted-base-snapshot.js';
+import { appendIntrinsicArray } from './intrinsic-array.js';
+import { declarationSignature, hostedDeclaredExtensions, } from './hosted-extension-declarations.js';
+import { findHostedProject } from './hosted-project.js';
+import { assertHostedPromiseSafety, frozenHostedPromiseValue, } from './hosted-promise-safety.js';
+import { PluginError } from './plugin-manifest.js';
+import { pluginStoreDirectory, verifyStoredPlugin } from './plugin-store.js';
+const INSTALLATION_AUTHORITY = new WeakSet();
+const BASE_AUTHORITY = new WeakSet();
+const REALPATH = realpath;
+const PATH_DIRNAME = dirname;
+const PATH_JOIN = join;
+const PATH_RESOLVE = resolve;
+const SOFTWARE_FACTORY_SHA256 = '49c993220b9c34fab2d4b0e51911656f62b8b657f534d988691960d45bb9d9b6';
+const ARRAY_IS_ARRAY = Array.isArray;
+const OBJECT_FREEZE = Object.freeze;
+const WEAK_MAP_GET = Function.prototype.call.bind(WeakMap.prototype.get);
+const WEAK_MAP_SET = Function.prototype.call.bind(WeakMap.prototype.set);
+const WEAK_SET_ADD = Function.prototype.call.bind(WeakSet.prototype.add);
+const WEAK_SET_HAS = Function.prototype.call.bind(WeakSet.prototype.has);
+const INSTALLATION_GENERATION = new WeakMap();
+const BASE_GENERATION = new WeakMap();
+/** Load one base/installation generation that cannot be paired across redeploys. */
+export async function loadHostedExtensionRuntime(flowPath) {
+    assertHostedPromiseSafety('plugin_source_invalid');
+    const origin = await REALPATH(PATH_RESOLVE(flowPath));
+    const generation = newGeneration(origin);
+    const loaded = await installationAt(origin, generation);
+    generation.declarations = loaded.declarations;
+    const base = await baseAt(origin, generation);
+    if (loaded.declarations !== declaredExtensions(generation).signature) {
+        throw new PluginError('plugin_source_drift', 'Hosted extension declarations changed while their runtime generation was loaded.');
+    }
+    await assertCurrentGeneration(generation);
+    OBJECT_FREEZE(generation);
+    return frozenHostedPromiseValue({ installation: loaded.installation, base });
+}
+/** @internal Metadata-only test seam; public hosted callers use the combined loader. */
+export async function loadHostedExtensionArtifacts(flowPath) {
+    assertHostedPromiseSafety('plugin_source_invalid');
+    const origin = await REALPATH(PATH_RESOLVE(flowPath));
+    const generation = newGeneration(origin);
+    const loaded = await installationAt(origin, generation);
+    generation.declarations = loaded.declarations;
+    return loaded.installation;
+}
+/** @internal Base-only test seam; public hosted callers use the combined loader. */
+export async function loadHostedExtensionBase(flowPath) {
+    assertHostedPromiseSafety('plugin_source_invalid');
+    const origin = await REALPATH(PATH_RESOLVE(flowPath));
+    const generation = newGeneration(origin);
+    generation.declarations = declaredExtensions(generation).signature;
+    return await baseAt(origin, generation);
+}
+/** Validate both opaque values and refuse a cached generation after redeploy. */
+export async function assertHostedRuntimeAuthority(installation, base) {
+    if (typeof base !== 'object' || base === null || !WEAK_SET_HAS(BASE_AUTHORITY, base)) {
+        throw new PluginError('plugin_incompatible', 'Hosted extension base authority is malformed; use loadHostedExtensionRuntime.');
+    }
+    if (typeof installation !== 'object' ||
+        installation === null ||
+        !WEAK_SET_HAS(INSTALLATION_AUTHORITY, installation)) {
+        throw new PluginError('plugin_source_invalid', 'Hosted extension installation authority is malformed; use loadHostedExtensionRuntime.');
+    }
+    const generation = WEAK_MAP_GET(BASE_GENERATION, base);
+    if (generation === undefined || generation !== WEAK_MAP_GET(INSTALLATION_GENERATION, installation)) {
+        throw new PluginError('plugin_source_invalid', 'Hosted extension base and installation must originate from the same runtime generation.');
+    }
+    await assertCurrentGeneration(generation);
+}
+/** @internal Validate a metadata-only installation used by selection tests. */
+export function assertHostedInstallationAuthority(value) {
+    if (typeof value !== 'object' ||
+        value === null ||
+        !WEAK_SET_HAS(INSTALLATION_AUTHORITY, value) ||
+        !ARRAY_IS_ARRAY(value.artifacts)) {
+        throw new PluginError('plugin_source_invalid', 'Hosted extension installation authority is malformed.');
+    }
+}
+async function installationAt(origin, generation) {
+    const root = generation.projectRoot;
+    if (root === undefined)
+        return frozenHostedPromiseValue({
+            installation: installation([], generation),
+            declarations: canonicalize([]),
+        });
+    const artifacts = [];
+    const declared = hostedDeclaredExtensions(root);
+    for (let index = 0; index < declared.length; index += 1) {
+        const { ref, entry } = declared[index];
+        const directory = pluginStoreDirectory(root, entry.name, entry.digest);
+        await verifyStoredPlugin(directory, entry.digest);
+        appendIntrinsicArray(artifacts, OBJECT_FREEZE({
+            ref,
+            name: entry.name,
+            version: entry.version,
+            directory,
+            digest: entry.digest,
+            manifestSha256: entry.manifestSha256,
+        }));
+    }
+    return frozenHostedPromiseValue({
+        installation: installation(artifacts, generation),
+        declarations: declarationSignature(declared),
+    });
+}
+function declaredExtensions(generation) {
+    const root = generation.projectRoot;
+    return {
+        signature: root === undefined ? canonicalize([]) : declarationSignature(hostedDeclaredExtensions(root)),
+    };
+}
+function newGeneration(origin) {
+    return {
+        origin,
+        projectRoot: findHostedProject(PATH_DIRNAME(origin)),
+        declarations: canonicalize([]),
+        sourceRoots: OBJECT_FREEZE([]),
+        sourceSha256: '',
+    };
+}
+async function assertCurrentGeneration(generation) {
+    let currentSource;
+    try {
+        currentSource = await hostedBaseSourceDigest(generation.sourceRoots);
+    }
+    catch {
+        throw new PluginError('plugin_source_invalid', 'Hosted extension runtime generation is no longer readable.');
+    }
+    if (declaredExtensions(generation).signature !== generation.declarations ||
+        currentSource !== generation.sourceSha256) {
+        throw new PluginError('plugin_source_invalid', 'Hosted extension runtime generation is stale; reload the base and installation together.');
+    }
+}
+async function baseAt(origin, generation) {
+    const snapshot = await createHostedBaseSnapshot(origin, generation.projectRoot ?? PATH_DIRNAME(origin));
+    generation.sourceRoots = snapshot.liveSources;
+    generation.sourceSha256 = snapshot.liveDigest;
+    try {
+        if (snapshot.snapshotFlowSha256 !== SOFTWARE_FACTORY_SHA256) {
+            throw new PluginError('plugin_source_invalid', 'Hosted capability isolation accepts only the reviewed Software Factory base source.');
+        }
+        const value = frozenHostedPromiseValue({
+            name: 'software-factory',
+            version: '2.0.22',
+        });
+        WEAK_SET_ADD(BASE_AUTHORITY, value);
+        WEAK_MAP_SET(BASE_GENERATION, value, generation);
+        return value;
+    }
+    finally {
+        await removeHostedBaseSnapshot(snapshot);
+    }
+}
+function installation(artifacts, generation) {
+    const artifactCopy = [];
+    for (let index = 0; index < artifacts.length; index += 1)
+        appendIntrinsicArray(artifactCopy, artifacts[index]);
+    const value = frozenHostedPromiseValue({ artifacts: frozenHostedPromiseValue(artifactCopy) });
+    WEAK_SET_ADD(INSTALLATION_AUTHORITY, value);
+    WEAK_MAP_SET(INSTALLATION_GENERATION, value, generation);
+    return value;
+}
+//# sourceMappingURL=hosted-extension-runtime.js.map

package/dist/hosted-extension-runtime.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"hosted-extension-runtime.js","sourceRoot":"","sources":["../src/hosted-extension-runtime.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,MAAM,kBAAkB,CAAC;AAC5C,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AACnD,OAAO,EAAE,YAAY,EAAE,MAAM,gBAAgB,CAAC;AAC9C,OAAO,EACL,wBAAwB,EACxB,sBAAsB,EACtB,wBAAwB,GAEzB,MAAM,2BAA2B,CAAC;AACnC,OAAO,EAAE,oBAAoB,EAAE,MAAM,sBAAsB,CAAC;AAC5D,OAAO,EACL,oBAAoB,EACpB,wBAAwB,GACzB,MAAM,oCAAoC,CAAC;AAC5C,OAAO,EAAE,iBAAiB,EAAE,MAAM,qBAAqB,CAAC;AACxD,OAAO,EACL,yBAAyB,EACzB,wBAAwB,GACzB,MAAM,4BAA4B,CAAC;AACpC,OAAO,EAAE,WAAW,EAAE,MAAM,sBAAsB,CAAC;AACnD,OAAO,EAAE,oBAAoB,EAAE,kBAAkB,EAAE,MAAM,mBAAmB,CAAC;AAE7E,MAAM,sBAAsB,GAAG,IAAI,OAAO,EAAU,CAAC;AACrD,MAAM,cAAc,GAAG,IAAI,OAAO,EAAU,CAAC;AAC7C,MAAM,QAAQ,GAAG,QAAQ,CAAC;AAC1B,MAAM,YAAY,GAAG,OAAO,CAAC;AAC7B,MAAM,SAAS,GAAG,IAAI,CAAC;AACvB,MAAM,YAAY,GAAG,OAAO,CAAC;AAC7B,MAAM,uBAAuB,GAAG,kEAAkE,CAAC;AACnG,MAAM,cAAc,GAAG,KAAK,CAAC,OAAO,CAAC;AACrC,MAAM,aAAa,GAAG,MAAM,CAAC,MAAM,CAAC;AACpC,MAAM,YAAY,GAAG,QAAQ,CAAC,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,SAAS,CAAC,GAAG,CAGrD,CAAC;AACnB,MAAM,YAAY,GAAG,QAAQ,CAAC,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,SAAS,CAAC,GAAG,CAIrD,CAAC;AACnB,MAAM,YAAY,GAAG,QAAQ,CAAC,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,SAAS,CAAC,GAAG,CAGxD,CAAC;AAChB,MAAM,YAAY,GAAG,QAAQ,CAAC,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,SAAS,CAAC,GAAG,CAG3D,CAAC;AASb,MAAM,uBAAuB,GAAG,IAAI,OAAO,EAA6B,CAAC;AACzE,MAAM,eAAe,GAAG,IAAI,OAAO,EAA6B,CAAC;AAyBjE,oFAAoF;AACpF,MAAM,CAAC,KAAK,UAAU,0BAA0B,CAAC,QAAgB;IAC/D,yBAAyB,CAAC,uBAAuB,CAAC,CAAC;IACnD,MAAM,MAAM,GAAG,MAAM,QAAQ,CAAC,YAAY,CAAC,QAAQ,CAAC,CAAC,CAAC;IACtD,MAAM,UAAU,GAAG,aAAa,CAAC,MAAM,CAAC,CAAC;IACzC,MAAM,MAAM,GAAG,MAAM,cAAc,CAAC,MAAM,EAAE,UAAU,CAAC,CAAC;IACxD,UAAU,CAAC,YAAY,GAAG,MAAM,CAAC,YAAY,CAAC;IAC9C,MAAM,IAAI,GAAG,MAAM,MAAM,CAAC,MAAM,EAAE,UAAU,CAAC,CAAC;IAC9C,IAAI,MAAM,CAAC,YAAY,KAAK,kBAAkB,CAAC,UAAU,CAAC,CAAC,SAAS,EAAE,CAAC;QACrE,MAAM,IAAI,WAAW,CACnB,qBAAqB,EACrB,kFAAkF,CACnF,CAAC;IACJ,CAAC;IACD,MAAM,uBAAuB,CAAC,UAAU,CAAC,CAAC;IAC1C,aAAa,CAAC,UAAU,CAAC,CAAC;IAC1B,OAAO,wBAAwB,CAAC,EAAE,YAAY,EAAE,MAAM,CAAC,YAAY,EAAE,IAAI,EAAE,CAAC,CAAC;AAC/E,CAAC;AAED,wFAAwF;AACxF,MAAM,CAAC,KAAK,UAAU,4BAA4B,CAAC,QAAgB;IACjE,yBAAyB,CAAC,uBAAuB,CAAC,CAAC;IACnD,MAAM,MAAM,GAAG,MAAM,QAAQ,CAAC,YAAY,CAAC,QAAQ,CAAC,CAAC,CAAC;IACtD,MAAM,UAAU,GAAG,aAAa,CAAC,MAAM,CAAC,CAAC;IACzC,MAAM,MAAM,GAAG,MAAM,cAAc,CAAC,MAAM,EAAE,UAAU,CAAC,CAAC;IACxD,UAAU,CAAC,YAAY,GAAG,MAAM,CAAC,YAAY,CAAC;IAC9C,OAAO,MAAM,CAAC,YAAY,CAAC;AAC7B,CAAC;AAED,oFAAoF;AACpF,MAAM,CAAC,KAAK,UAAU,uBAAuB,CAAC,QAAgB;IAC5D,yBAAyB,CAAC,uBAAuB,CAAC,CAAC;IACnD,MAAM,MAAM,GAAG,MAAM,QAAQ,CAAC,YAAY,CAAC,QAAQ,CAAC,CAAC,CAAC;IACtD,MAAM,UAAU,GAAG,aAAa,CAAC,MAAM,CAAC,CAAC;IACzC,UAAU,CAAC,YAAY,GAAG,kBAAkB,CAAC,UAAU,CAAC,CAAC,SAAS,CAAC;IACnE,OAAO,MAAM,MAAM,CAAC,MAAM,EAAE,UAAU,CAAC,CAAC;AAC1C,CAAC;AAED,iFAAiF;AACjF,MAAM,CAAC,KAAK,UAAU,4BAA4B,CAChD,YAAyC,EACzC,IAAyB;IAEzB,IAAI,OAAO,IAAI,KAAK,QAAQ,IAAI,IAAI,KAAK,IAAI,IAAI,CAAC,YAAY,CAAC,cAAc,EAAE,IAAI,CAAC,EAAE,CAAC;QACrF,MAAM,IAAI,WAAW,CACnB,qBAAqB,EACrB,+EAA+E,CAChF,CAAC;IACJ,CAAC;IACD,IACE,OAAO,YAAY,KAAK,QAAQ;QAChC,YAAY,KAAK,IAAI;QACrB,CAAC,YAAY,CAAC,sBAAsB,EAAE,YAAY,CAAC,EACnD,CAAC;QACD,MAAM,IAAI,WAAW,CACnB,uBAAuB,EACvB,uFAAuF,CACxF,CAAC;IACJ,CAAC;IACD,MAAM,UAAU,GAAG,YAAY,CAAC,eAAe,EAAE,IAAI,CAAC,CAAC;IACvD,IAAI,UAAU,KAAK,SAAS,IAAI,UAAU,KAAK,YAAY,CAAC,uBAAuB,EAAE,YAAY,CAAC,EAAE,CAAC;QACnG,MAAM,IAAI,WAAW,CACnB,uBAAuB,EACvB,yFAAyF,CAC1F,CAAC;IACJ,CAAC;IACD,MAAM,uBAAuB,CAAC,UAAU,CAAC,CAAC;AAC5C,CAAC;AAED,+EAA+E;AAC/E,MAAM,UAAU,iCAAiC,CAAC,KAAc;IAC9D,IACE,OAAO,KAAK,KAAK,QAAQ;QACzB,KAAK,KAAK,IAAI;QACd,CAAC,YAAY,CAAC,sBAAsB,EAAE,KAAK,CAAC;QAC5C,CAAC,cAAc,CAAE,KAA8C,CAAC,SAAS,CAAC,EAC1E,CAAC;QACD,MAAM,IAAI,WAAW,CAAC,uBAAuB,EAAE,uDAAuD,CAAC,CAAC;IAC1G,CAAC;AACH,CAAC;AAED,KAAK,UAAU,cAAc,CAC3B,MAAc,EACd,UAA6B;IAK7B,MAAM,IAAI,GAAG,UAAU,CAAC,WAAW,CAAC;IACpC,IAAI,IAAI,KAAK,SAAS;QACpB,OAAO,wBAAwB,CAAC;YAC9B,YAAY,EAAE,YAAY,CAAC,EAAE,EAAE,UAAU,CAAC;YAC1C,YAAY,EAAE,YAAY,CAAC,EAAE,CAAC;SAC/B,CAAC,CAAC;IACL,MAAM,SAAS,GAA8B,EAAE,CAAC;IAChD,MAAM,QAAQ,GAAG,wBAAwB,CAAC,IAAI,CAAC,CAAC;IAChD,KAAK,IAAI,KAAK,GAAG,CAAC,EAAE,KAAK,GAAG,QAAQ,CAAC,MAAM,EAAE,KAAK,IAAI,CAAC,EAAE,CAAC;QACxD,MAAM,EAAE,GAAG,EAAE,KAAK,EAAE,GAAG,QAAQ,CAAC,KAAK,CAAE,CAAC;QACxC,MAAM,SAAS,GAAG,oBAAoB,CAAC,IAAI,EAAE,KAAK,CAAC,IAAI,EAAE,KAAK,CAAC,MAAM,CAAC,CAAC;QACvE,MAAM,kBAAkB,CAAC,SAAS,EAAE,KAAK,CAAC,MAAM,CAAC,CAAC;QAClD,oBAAoB,CAAC,SAAS,EAAE,aAAa,CAAC;YAC5C,GAAG;YACH,IAAI,EAAE,KAAK,CAAC,IAAI;YAChB,OAAO,EAAE,KAAK,CAAC,OAAO;YACtB,SAAS;YACT,MAAM,EAAE,KAAK,CAAC,MAAM;YACpB,cAAc,EAAE,KAAK,CAAC,cAAc;SACrC,CAAC,CAAC,CAAC;IACN,CAAC;IACD,OAAO,wBAAwB,CAAC;QAC9B,YAAY,EAAE,YAAY,CAAC,SAAS,EAAE,UAAU,CAAC;QACjD,YAAY,EAAE,oBAAoB,CAAC,QAAQ,CAAC;KAC7C,CAAC,CAAC;AACL,CAAC;AAED,SAAS,kBAAkB,CAAC,UAA6B;IACvD,MAAM,IAAI,GAAG,UAAU,CAAC,WAAW,CAAC;IACpC,OAAO;QACL,SAAS,EAAE,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,YAAY,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,oBAAoB,CAAC,wBAAwB,CAAC,IAAI,CAAC,CAAC;KACxG,CAAC;AACJ,CAAC;AAED,SAAS,aAAa,CAAC,MAAc;IACnC,OAAO;QACL,MAAM;QACN,WAAW,EAAE,iBAAiB,CAAC,YAAY,CAAC,MAAM,CAAC,CAAC;QACpD,YAAY,EAAE,YAAY,CAAC,EAAE,CAAC;QAC9B,WAAW,EAAE,aAAa,CAAC,EAAE,CAAC;QAC9B,YAAY,EAAE,EAAE;KACjB,CAAC;AACJ,CAAC;AAED,KAAK,UAAU,uBAAuB,CAAC,UAA6B;IAClE,IAAI,aAAqB,CAAC;IAC1B,IAAI,CAAC;QACH,aAAa,GAAG,MAAM,sBAAsB,CAAC,UAAU,CAAC,WAAW,CAAC,CAAC;IACvE,CAAC;IAAC,MAAM,CAAC;QACP,MAAM,IAAI,WAAW,CAAC,uBAAuB,EAAE,4DAA4D,CAAC,CAAC;IAC/G,CAAC;IACD,IACE,kBAAkB,CAAC,UAAU,CAAC,CAAC,SAAS,KAAK,UAAU,CAAC,YAAY;QACpE,aAAa,KAAK,UAAU,CAAC,YAAY,EACzC,CAAC;QACD,MAAM,IAAI,WAAW,CACnB,uBAAuB,EACvB,0FAA0F,CAC3F,CAAC;IACJ,CAAC;AACH,CAAC;AAED,KAAK,UAAU,MAAM,CAAC,MAAc,EAAE,UAA6B;IACjE,MAAM,QAAQ,GAAG,MAAM,wBAAwB,CAAC,MAAM,EAAE,UAAU,CAAC,WAAW,IAAI,YAAY,CAAC,MAAM,CAAC,CAAC,CAAC;IACxG,UAAU,CAAC,WAAW,GAAG,QAAQ,CAAC,WAAW,CAAC;IAC9C,UAAU,CAAC,YAAY,GAAG,QAAQ,CAAC,UAAU,CAAC;IAC9C,IAAI,CAAC;QACH,IAAI,QAAQ,CAAC,kBAAkB,KAAK,uBAAuB,EAAE,CAAC;YAC5D,MAAM,IAAI,WAAW,CACnB,uBAAuB,EACvB,qFAAqF,CACtF,CAAC;QACJ,CAAC;QACD,MAAM,KAAK,GAAG,wBAAwB,CAAC;YACrC,IAAI,EAAE,kBAAkB;YACxB,OAAO,EAAE,QAAQ;SAClB,CAAC,CAAC;QACH,YAAY,CAAC,cAAc,EAAE,KAAK,CAAC,CAAC;QACpC,YAAY,CAAC,eAAe,EAAE,KAAK,EAAE,UAAU,CAAC,CAAC;QACjD,OAAO,KAAK,CAAC;IACf,CAAC;YAAS,CAAC;QACT,MAAM,wBAAwB,CAAC,QAAQ,CAAC,CAAC;IAC3C,CAAC;AACH,CAAC;AAED,SAAS,YAAY,CACnB,SAA6C,EAC7C,UAA6B;IAE7B,MAAM,YAAY,GAA8B,EAAE,CAAC;IACnD,KAAK,IAAI,KAAK,GAAG,CAAC,EAAE,KAAK,GAAG,SAAS,CAAC,MAAM,EAAE,KAAK,IAAI,CAAC;QAAE,oBAAoB,CAAC,YAAY,EAAE,SAAS,CAAC,KAAK,CAAE,CAAC,CAAC;IAChH,MAAM,KAAK,GAAG,wBAAwB,CAAC,EAAE,SAAS,EAAE,wBAAwB,CAAC,YAAY,CAAC,EAAE,CAAC,CAAC;IAC9F,YAAY,CAAC,sBAAsB,EAAE,KAAK,CAAC,CAAC;IAC5C,YAAY,CAAC,uBAAuB,EAAE,KAAK,EAAE,UAAU,CAAC,CAAC;IACzD,OAAO,KAAK,CAAC;AACf,CAAC"}

package/dist/hosted-extension-sandbox-source.d.ts

@@ -0,0 +1,9 @@
+/**
+ * Source for the process that imports one hosted extension inside the Linux
+ * namespace assembled by hosted-extension-isolation.ts.
+ *
+ * Keep this dependency-free. The parent writes it to a private file and
+ * mounts that file read-only; the extension is not imported by the host.
+ */
+export declare const HOSTED_EXTENSION_SANDBOX_SOURCE: string;
+//# sourceMappingURL=hosted-extension-sandbox-source.d.ts.map

package/dist/hosted-extension-sandbox-source.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"hosted-extension-sandbox-source.d.ts","sourceRoot":"","sources":["../src/hosted-extension-sandbox-source.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AACH,eAAO,MAAM,+BAA+B,QAsF3C,CAAC"}

package/dist/hosted-extension-sandbox-source.js

@@ -0,0 +1,95 @@
+/**
+ * Source for the process that imports one hosted extension inside the Linux
+ * namespace assembled by hosted-extension-isolation.ts.
+ *
+ * Keep this dependency-free. The parent writes it to a private file and
+ * mounts that file read-only; the extension is not imported by the host.
+ */
+export const HOSTED_EXTENSION_SANDBOX_SOURCE = String.raw `
+import { createReadStream, writeSync } from 'node:fs';
+import { createInterface } from 'node:readline';
+import { pathToFileURL } from 'node:url';
+
+const lines = createInterface({ input: createReadStream(null, { fd: 0 }), crlfDelay: Infinity });
+const iterator = lines[Symbol.asyncIterator]();
+const send = value => writeSync(3, JSON.stringify(value) + '\n');
+const receive = async () => {
+  const next = await iterator.next();
+  if (next.done) throw new Error('hosted capability channel closed');
+  return JSON.parse(next.value);
+};
+const subscriptionOf = handler => {
+  const trigger = handler?.trigger;
+  const filter = trigger?.filter;
+  if (trigger?.kind !== 'webhook' || filter === undefined
+    || typeof filter.provider !== 'string' || filter.provider !== trigger.name
+    || typeof filter.type !== 'string') return undefined;
+  const action = typeof filter.payload === 'object' && filter.payload !== null && !Array.isArray(filter.payload)
+    ? filter.payload.action : undefined;
+  if (action !== undefined && typeof action !== 'string') return undefined;
+  return action === undefined
+    ? { provider: filter.provider, event: filter.type }
+    : { provider: filter.provider, event: filter.type, action };
+};
+const matches = (subscription, identity) => subscription !== undefined
+  && subscription.provider === identity.provider
+  && subscription.event === identity.event
+  && (subscription.action === undefined || subscription.action === identity.action);
+
+try {
+  const request = await receive();
+  if (request?.type !== 'execute' || typeof request.entry !== 'string'
+    || typeof request.surfaceRuntime !== 'string' || typeof request.capability !== 'string') {
+    throw new Error('malformed hosted extension execution request');
+  }
+  const runtime = await import(pathToFileURL(request.surfaceRuntime).href);
+  const authored = await import(pathToFileURL(request.entry).href);
+  const definition = runtime.getFlowDefinition(authored.default);
+  const selected = definition.handlers.filter(handler => matches(subscriptionOf(handler), request.identity));
+  if (selected.length !== 1) throw new Error('hosted event must match exactly one isolated extension handler');
+
+  let nextCall = 1;
+  let capabilityCalls = 0;
+  let completion;
+  const invoke = async value => {
+    capabilityCalls += 1;
+    if (capabilityCalls !== 1) throw new Error('hosted extension may invoke its capability once');
+    const id = nextCall++;
+    send({ type: 'capability', id, name: request.capability, request: value });
+    const response = await receive();
+    if (response?.type !== 'capability-result' || response.id !== id || typeof response.ok !== 'boolean') {
+      throw new Error('malformed hosted capability response');
+    }
+    if (!response.ok) throw new Error(typeof response.error === 'string' ? response.error : 'hosted capability refused');
+    return response.value;
+  };
+  const capabilities = Object.freeze({
+    cloud: Object.freeze({ babysitterTurn: Object.freeze({ queue: invoke }) }),
+  });
+  const available = Object.freeze({
+    capabilities,
+    done(reason) {
+      if (completion !== undefined) throw new Error('hosted extension completed more than once');
+      completion = reason;
+    },
+  });
+  const context = new Proxy(available, {
+    get(target, property, receiver) {
+      if (property !== 'capabilities' && property !== 'done') {
+        throw new Error('hosted extension context denies ' + String(property));
+      }
+      return Reflect.get(target, property, receiver);
+    },
+    has(_target, property) { return property === 'capabilities' || property === 'done'; },
+    ownKeys() { return ['capabilities', 'done']; },
+  });
+  await selected[0].body(context, request.input);
+  if (capabilityCalls !== 1) throw new Error('hosted extension did not invoke its capability exactly once');
+  if (completion !== 'success') throw new Error('hosted extension did not complete with success');
+  send({ type: 'result', completionReason: completion, capabilityCalls });
+} catch (error) {
+  send({ type: 'error', message: error instanceof Error ? (error.stack ?? error.message) : String(error) });
+  process.exitCode = 1;
+}
+`;
+//# sourceMappingURL=hosted-extension-sandbox-source.js.map

package/dist/hosted-extension-sandbox-source.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"hosted-extension-sandbox-source.js","sourceRoot":"","sources":["../src/hosted-extension-sandbox-source.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AACH,MAAM,CAAC,MAAM,+BAA+B,GAAG,MAAM,CAAC,GAAG,CAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;CAsFxD,CAAC"}

package/dist/hosted-extension-sandbox.d.ts

@@ -0,0 +1,39 @@
+import { type BigIntStats } from 'node:fs';
+import { type HostedExtensionProtocolResult } from './hosted-extension-protocol.js';
+export interface CapturedExecutable {
+    readonly descriptor: number;
+    readonly sha256: string;
+    readonly stat: BigIntStats;
+}
+export interface RunHostedExtensionSandboxOptions {
+    readonly artifactDirectory: string;
+    readonly artifactDigest: string;
+    readonly entry: string;
+    readonly surfaceVersion: string;
+    readonly identity: {
+        readonly provider: string;
+        readonly event: string;
+        readonly action?: string;
+    };
+    readonly input: unknown;
+    readonly invoke: (request: unknown) => Promise<unknown>;
+    readonly timeoutMs?: number;
+    readonly bubblewrapPath?: string;
+    readonly nodePath?: string;
+    readonly prlimitPath?: string;
+    /** @internal Test seam for a package root with the exact pinned runtime bytes. */
+    readonly surfaceRoot?: string;
+    /** @internal Last parent-side authority check after private snapshots exist. */
+    readonly beforeLaunch?: () => Promise<void>;
+}
+export declare function runHostedExtensionSandbox(options: RunHostedExtensionSandboxOptions): Promise<HostedExtensionProtocolResult>;
+/** @internal Pure construction seam for hostile-intrinsic regressions. */
+export declare function sandboxArguments(input: {
+    dataDestinations: readonly string[];
+}): string[];
+/** @internal Descriptor-pinning seam for the executable replacement regression. */
+export declare function captureExecutable(path: string, name: string): CapturedExecutable;
+/** @internal Reads the inode captured before authored code could replace its path. */
+export declare function readCapturedExecutable(capture: CapturedExecutable, name: string): Buffer;
+export declare function supportsHostedSandboxFlags(version: string): boolean;
+//# sourceMappingURL=hosted-extension-sandbox.d.ts.map

package/dist/hosted-extension-sandbox.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"hosted-extension-sandbox.d.ts","sourceRoot":"","sources":["../src/hosted-extension-sandbox.ts"],"names":[],"mappings":"AACA,OAAO,EASL,KAAK,WAAW,EACjB,MAAM,SAAS,CAAC;AAsBjB,OAAO,EAEL,KAAK,6BAA6B,EACnC,MAAM,gCAAgC,CAAC;AA0FxC,MAAM,WAAW,kBAAkB;IACjC,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,IAAI,EAAE,WAAW,CAAC;CAC5B;AAED,MAAM,WAAW,gCAAgC;IAC/C,QAAQ,CAAC,iBAAiB,EAAE,MAAM,CAAC;IACnC,QAAQ,CAAC,cAAc,EAAE,MAAM,CAAC;IAChC,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,cAAc,EAAE,MAAM,CAAC;IAChC,QAAQ,CAAC,QAAQ,EAAE;QAAE,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;QAAC,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;QAAC,QAAQ,CAAC,MAAM,CAAC,EAAE,MAAM,CAAA;KAAE,CAAC;IACnG,QAAQ,CAAC,KAAK,EAAE,OAAO,CAAC;IACxB,QAAQ,CAAC,MAAM,EAAE,CAAC,OAAO,EAAE,OAAO,KAAK,OAAO,CAAC,OAAO,CAAC,CAAC;IACxD,QAAQ,CAAC,SAAS,CAAC,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,cAAc,CAAC,EAAE,MAAM,CAAC;IACjC,QAAQ,CAAC,QAAQ,CAAC,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,WAAW,CAAC,EAAE,MAAM,CAAC;IAC9B,kFAAkF;IAClF,QAAQ,CAAC,WAAW,CAAC,EAAE,MAAM,CAAC;IAC9B,gFAAgF;IAChF,QAAQ,CAAC,YAAY,CAAC,EAAE,MAAM,OAAO,CAAC,IAAI,CAAC,CAAC;CAC7C;AAED,wBAAsB,yBAAyB,CAC7C,OAAO,EAAE,gCAAgC,GACxC,OAAO,CAAC,6BAA6B,CAAC,CAgGxC;AAsGD,0EAA0E;AAC1E,wBAAgB,gBAAgB,CAAC,KAAK,EAAE;IACtC,gBAAgB,EAAE,SAAS,MAAM,EAAE,CAAC;CACrC,GAAG,MAAM,EAAE,CAuDX;AAOD,mFAAmF;AACnF,wBAAgB,iBAAiB,CAAC,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,GAAG,kBAAkB,CAuBhF;AAED,sFAAsF;AACtF,wBAAgB,sBAAsB,CAAC,OAAO,EAAE,kBAAkB,EAAE,IAAI,EAAE,MAAM,GAAG,MAAM,CASxF;AA2BD,wBAAgB,0BAA0B,CAAC,OAAO,EAAE,MAAM,GAAG,OAAO,CAMnE"}