@relayflows/sdk 2.0.29 → 2.0.30

package/dist/hosted-extension-protocol.js

@@ -0,0 +1,224 @@
+import { ChildProcess } from 'node:child_process';
+import { EventEmitter } from 'node:events';
+import { Readable, Writable } from 'node:stream';
+import { clearTimeout as nodeClearTimeout, setTimeout as nodeSetTimeout } from 'node:timers';
+import { snapshotJsonValue } from './json-value.js';
+import { PluginError } from './plugin-manifest.js';
+import { assertHostedPromiseSafety, frozenHostedPromiseValue, } from './hosted-promise-safety.js';
+const HOSTED_WRITE = 'cloud:babysitter-turn';
+const MAX_FRAME_BYTES = 256 * 1024;
+const MAX_STDERR_BYTES = 16 * 1024;
+const ARRAY_IS_ARRAY = Array.isArray;
+const BUFFER_BYTE_LENGTH = Buffer.byteLength;
+const CHILD_PROCESS_KILL = Function.prototype.call.bind(ChildProcess.prototype.kill);
+const EVENT_ON = Function.prototype.call.bind(EventEmitter.prototype.on);
+const ERROR_IS_INSTANCE = Function.prototype.call.bind(Function.prototype[Symbol.hasInstance], Error);
+const JSON_PARSE = JSON.parse;
+const JSON_STRINGIFY = JSON.stringify;
+const OBJECT_CREATE = Object.create;
+const OBJECT_HAS_OWN = Object.hasOwn;
+const OBJECT_KEYS = Object.keys;
+const OBJECT_FREEZE = Object.freeze;
+const PROMISE = Promise;
+const PROMISE_THEN = Function.prototype.call.bind(Promise.prototype.then);
+const READABLE_SET_ENCODING = Function.prototype.call.bind(Readable.prototype.setEncoding);
+const READABLE_RESUME = Function.prototype.call.bind(Readable.prototype.resume);
+const CLEAR_TIMEOUT = nodeClearTimeout;
+const SET_TIMEOUT = nodeSetTimeout;
+const TIMER_SAMPLE = SET_TIMEOUT(() => undefined, 0);
+const TIMER_UNREF = Function.prototype.call.bind(TIMER_SAMPLE.unref);
+CLEAR_TIMEOUT(TIMER_SAMPLE);
+const STRING = String;
+const STRING_INDEX_OF = Function.prototype.call.bind(String.prototype.indexOf);
+const STRING_SLICE = Function.prototype.call.bind(String.prototype.slice);
+const WRITABLE_END = Function.prototype.call.bind(Writable.prototype.end);
+const WRITABLE_WRITE = Function.prototype.call.bind(Writable.prototype.write);
+const SNAPSHOT_LIMITS = Object.freeze({
+    maxDepth: 64,
+    maxNodes: 262_144,
+    maxBytes: MAX_FRAME_BYTES,
+});
+/** A bounded JSON copy, stripped of prototypes and behavior. */
+export function boundedJsonSnapshot(value, what) {
+    let snapshot;
+    try {
+        snapshot = snapshotJsonValue(value, what, SNAPSHOT_LIMITS);
+    }
+    catch {
+        throw new PluginError('plugin_unsupported', `${what} is not bounded JSON data.`);
+    }
+    const encoded = JSON_STRINGIFY(snapshot);
+    if (BUFFER_BYTE_LENGTH(encoded) > MAX_FRAME_BYTES) {
+        throw new PluginError('plugin_unsupported', `${what} is not bounded JSON data.`);
+    }
+    return snapshot;
+}
+/**
+ * Exchange hostile child frames for one parent-owned capability invocation.
+ * Descriptor 3 is transport, never authority: every frame and both boundary
+ * payloads are validated by the parent. A child writing descriptor 3 directly
+ * can request only the same exact, single capability its context exposes.
+ */
+export async function exchangeHostedExtension(child, protocol, stdin, stderr, timeoutMs, request, invoke) {
+    assertHostedPromiseSafety('plugin_unsupported');
+    const requestSnapshot = boundedJsonSnapshot(request, 'hosted extension request');
+    let buffer = '';
+    let stderrText = '';
+    let calls = 0;
+    READABLE_SET_ENCODING(stderr, 'utf8');
+    EVENT_ON(stderr, 'data', chunk => {
+        stderrText = STRING_SLICE(stderrText + STRING(chunk), -MAX_STDERR_BYTES);
+    });
+    READABLE_RESUME(stderr);
+    READABLE_SET_ENCODING(protocol, 'utf8');
+    return await new PROMISE((resolvePromise, rejectPromise) => {
+        let settled = false;
+        let capabilityState = 'none';
+        let capabilityError;
+        let deferredProtocolError;
+        const finish = (error, result) => {
+            if (settled)
+                return;
+            settled = true;
+            CLEAR_TIMEOUT(timeout);
+            WRITABLE_END(stdin);
+            if (child.exitCode === null && child.signalCode === null)
+                CHILD_PROCESS_KILL(child, 'SIGKILL');
+            if (error !== undefined)
+                rejectPromise(error);
+            else
+                resolvePromise(result);
+        };
+        const failure = (error) => ERROR_IS_INSTANCE(error)
+            ? error
+            : new PluginError('plugin_unsupported', 'Hosted capability rejected with a non-error value.');
+        const refuse = (message) => {
+            const error = new PluginError('plugin_unsupported', message);
+            CHILD_PROCESS_KILL(child, 'SIGKILL');
+            if (capabilityState === 'pending') {
+                deferredProtocolError ??= error;
+                return;
+            }
+            finish(capabilityError ?? error);
+        };
+        const timeout = SET_TIMEOUT(() => {
+            CHILD_PROCESS_KILL(child, 'SIGKILL');
+            finish(new PluginError('plugin_unsupported', capabilityState === 'pending'
+                ? 'Hosted capability outcome is in doubt after the sandbox timeout.'
+                : 'Hosted extension sandbox timed out.'));
+        }, timeoutMs);
+        TIMER_UNREF(timeout);
+        EVENT_ON(stdin, 'error', () => refuse('Hosted extension capability channel closed.'));
+        EVENT_ON(protocol, 'error', () => refuse('Hosted extension protocol channel failed.'));
+        EVENT_ON(protocol, 'data', chunk => {
+            buffer += STRING(chunk);
+            if (BUFFER_BYTE_LENGTH(buffer) > MAX_FRAME_BYTES)
+                return refuse('Hosted extension protocol exceeded its size limit.');
+            for (;;) {
+                const end = STRING_INDEX_OF(buffer, '\n');
+                if (end < 0)
+                    break;
+                const line = STRING_SLICE(buffer, 0, end);
+                buffer = STRING_SLICE(buffer, end + 1);
+                let message;
+                try {
+                    const parsed = JSON_PARSE(line);
+                    if (typeof parsed !== 'object' || parsed === null || ARRAY_IS_ARRAY(parsed)) {
+                        return refuse('Hosted extension emitted a non-object protocol frame.');
+                    }
+                    message = boundedJsonSnapshot(parsed, 'hosted extension protocol frame');
+                }
+                catch {
+                    return refuse('Hosted extension emitted malformed protocol data.');
+                }
+                if (message.type === 'capability') {
+                    if (!hasExactKeys(message, ['type', 'id', 'name', 'request'])) {
+                        return refuse('Hosted extension emitted a malformed capability frame.');
+                    }
+                    calls += 1;
+                    if (calls !== 1 || capabilityState !== 'none' || message.name !== HOSTED_WRITE || message.id !== 1) {
+                        return refuse('Hosted extension requested an undeclared or repeated capability.');
+                    }
+                    capabilityState = 'pending';
+                    void PROMISE_THEN(invoke(message.request), value => {
+                        if (settled)
+                            return;
+                        try {
+                            const snapshot = boundedJsonSnapshot(value, 'hosted capability result');
+                            capabilityState = 'completed';
+                            if (deferredProtocolError !== undefined)
+                                return finish(deferredProtocolError);
+                            WRITABLE_WRITE(stdin, capabilityResultFrame(true, snapshot));
+                        }
+                        catch (error) {
+                            capabilityError = failure(error);
+                            capabilityState = 'failed';
+                            WRITABLE_WRITE(stdin, capabilityResultFrame(false));
+                            finish(capabilityError);
+                        }
+                    }, error => {
+                        if (settled)
+                            return;
+                        capabilityError = failure(error);
+                        capabilityState = 'failed';
+                        WRITABLE_WRITE(stdin, capabilityResultFrame(false));
+                        finish(capabilityError);
+                    });
+                }
+                else if (message.type === 'result') {
+                    if (!hasExactKeys(message, ['type', 'completionReason', 'capabilityCalls'])
+                        || calls !== 1 || capabilityState !== 'completed'
+                        || message.completionReason !== 'success' || message.capabilityCalls !== 1) {
+                        return refuse('Hosted extension reported a completion without exactly one capability call.');
+                    }
+                    finish(undefined, frozenHostedPromiseValue({ completionReason: 'success', capabilityCalls: 1 }));
+                }
+                else if (message.type === 'error') {
+                    if (!hasExactKeys(message, ['type', 'message']) || typeof message.message !== 'string') {
+                        return refuse('Hosted extension emitted a malformed error frame.');
+                    }
+                    const error = new PluginError('plugin_unsupported', `Hosted extension failed: ${STRING_SLICE(message.message, 0, 8192)}`);
+                    if (capabilityState === 'pending') {
+                        deferredProtocolError ??= error;
+                        return;
+                    }
+                    finish(capabilityError ?? error);
+                }
+                else
+                    return refuse('Hosted extension emitted an unknown protocol message.');
+            }
+        });
+        READABLE_RESUME(protocol);
+        EVENT_ON(child, 'error', () => refuse('Hosted extension sandbox could not start.'));
+        EVENT_ON(child, 'close', code => {
+            if (!settled)
+                refuse(`Hosted extension sandbox exited without a valid completion (exit ${code ?? 'signal'})`
+                    + (stderrText === '' ? '' : `: ${stderrText}`));
+        });
+        WRITABLE_WRITE(stdin, `${JSON_STRINGIFY(requestSnapshot)}\n`);
+    });
+}
+function capabilityResultFrame(ok, value) {
+    // JSON.stringify consults inherited `toJSON` before traversing an object.
+    // Protocol envelopes therefore never inherit from the ambient prototype;
+    // nested capability data is already a behavior-free bounded snapshot.
+    const envelope = OBJECT_CREATE(null);
+    envelope.type = 'capability-result';
+    envelope.id = 1;
+    envelope.ok = ok;
+    if (ok)
+        envelope.value = value;
+    else
+        envelope.error = 'hosted capability refused';
+    return `${JSON_STRINGIFY(envelope)}\n`;
+}
+function hasExactKeys(value, keys) {
+    if (OBJECT_KEYS(value).length !== keys.length)
+        return false;
+    for (let index = 0; index < keys.length; index += 1) {
+        if (!OBJECT_HAS_OWN(value, keys[index]))
+            return false;
+    }
+    return true;
+}
+//# sourceMappingURL=hosted-extension-protocol.js.map

package/dist/hosted-extension-protocol.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"hosted-extension-protocol.js","sourceRoot":"","sources":["../src/hosted-extension-protocol.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,YAAY,EAAE,MAAM,oBAAoB,CAAC;AAClD,OAAO,EAAE,YAAY,EAAE,MAAM,aAAa,CAAC;AAC3C,OAAO,EAAE,QAAQ,EAAE,QAAQ,EAAE,MAAM,aAAa,CAAC;AACjD,OAAO,EAAE,YAAY,IAAI,gBAAgB,EAAE,UAAU,IAAI,cAAc,EAAE,MAAM,aAAa,CAAC;AAC7F,OAAO,EAAE,iBAAiB,EAAE,MAAM,iBAAiB,CAAC;AACpD,OAAO,EAAE,WAAW,EAAE,MAAM,sBAAsB,CAAC;AACnD,OAAO,EACL,yBAAyB,EACzB,wBAAwB,GACzB,MAAM,4BAA4B,CAAC;AAEpC,MAAM,YAAY,GAAG,uBAAuB,CAAC;AAC7C,MAAM,eAAe,GAAG,GAAG,GAAG,IAAI,CAAC;AACnC,MAAM,gBAAgB,GAAG,EAAE,GAAG,IAAI,CAAC;AACnC,MAAM,cAAc,GAAG,KAAK,CAAC,OAAO,CAAC;AACrC,MAAM,kBAAkB,GAAG,MAAM,CAAC,UAAU,CAAC;AAC7C,MAAM,kBAAkB,GAAG,QAAQ,CAAC,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,YAAY,CAAC,SAAS,CAAC,IAAI,CAEvE,CAAC;AACb,MAAM,QAAQ,GAAG,QAAQ,CAAC,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,YAAY,CAAC,SAAS,CAAC,EAAE,CAEtD,CAAC;AAClB,MAAM,iBAAiB,GAAG,QAAQ,CAAC,SAAS,CAAC,IAAI,CAAC,IAAI,CACpD,QAAQ,CAAC,SAAS,CAAC,MAAM,CAAC,WAAW,CAAC,EACtC,KAAK,CACyB,CAAC;AACjC,MAAM,UAAU,GAAG,IAAI,CAAC,KAAK,CAAC;AAC9B,MAAM,cAAc,GAAG,IAAI,CAAC,SAAS,CAAC;AACtC,MAAM,aAAa,GAAG,MAAM,CAAC,MAAM,CAAC;AACpC,MAAM,cAAc,GAAG,MAAM,CAAC,MAAM,CAAC;AACrC,MAAM,WAAW,GAAG,MAAM,CAAC,IAAI,CAAC;AAChC,MAAM,aAAa,GAAG,MAAM,CAAC,MAAM,CAAC;AACpC,MAAM,OAAO,GAAG,OAAO,CAAC;AACxB,MAAM,YAAY,GAAG,QAAQ,CAAC,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,SAAS,CAAC,IAAI,CAInD,CAAC;AACtB,MAAM,qBAAqB,GAAG,QAAQ,CAAC,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,SAAS,CAAC,WAAW,CAE5E,CAAC;AACd,MAAM,eAAe,GAAG,QAAQ,CAAC,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,SAAS,CAAC,MAAM,CAEjE,CAAC;AACd,MAAM,aAAa,GAAG,gBAAgB,CAAC;AACvC,MAAM,WAAW,GAAG,cAAc,CAAC;AACnC,MAAM,YAAY,GAAG,WAAW,CAAC,GAAG,EAAE,CAAC,SAAS,EAAE,CAAC,CAAC,CAAC;AACrD,MAAM,WAAW,GAAG,QAAQ,CAAC,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,YAAY,CAAC,KAAK,CAEhC,CAAC;AACpC,aAAa,CAAC,YAAY,CAAC,CAAC;AAC5B,MAAM,MAAM,GAAG,MAAM,CAAC;AACtB,MAAM,eAAe,GAAG,QAAQ,CAAC,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,OAAO,CAElE,CAAC;AACZ,MAAM,YAAY,GAAG,QAAQ,CAAC,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,KAAK,CAE7D,CAAC;AACZ,MAAM,YAAY,GAAG,QAAQ,CAAC,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,SAAS,CAAC,GAAG,CAE3D,CAAC;AACd,MAAM,cAAc,GAAG,QAAQ,CAAC,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,SAAS,CAAC,KAAK,CAEhE,CAAC;AACb,MAAM,eAAe,GAAG,MAAM,CAAC,MAAM,CAAC;IACpC,QAAQ,EAAE,EAAE;IACZ,QAAQ,EAAE,OAAO;IACjB,QAAQ,EAAE,eAAe;CAC1B,CAAC,CAAC;AAOH,gEAAgE;AAChE,MAAM,UAAU,mBAAmB,CAAC,KAAc,EAAE,IAAY;IAC9D,IAAI,QAA8C,CAAC;IACnD,IAAI,CAAC;QAAC,QAAQ,GAAG,iBAAiB,CAAC,KAAK,EAAE,IAAI,EAAE,eAAe,CAAC,CAAC;IAAC,CAAC;IACnE,MAAM,CAAC;QACL,MAAM,IAAI,WAAW,CAAC,oBAAoB,EAAE,GAAG,IAAI,4BAA4B,CAAC,CAAC;IACnF,CAAC;IACD,MAAM,OAAO,GAAG,cAAc,CAAC,QAAQ,CAAC,CAAC;IACzC,IAAI,kBAAkB,CAAC,OAAO,CAAC,GAAG,eAAe,EAAE,CAAC;QAClD,MAAM,IAAI,WAAW,CAAC,oBAAoB,EAAE,GAAG,IAAI,4BAA4B,CAAC,CAAC;IACnF,CAAC;IACD,OAAO,QAAQ,CAAC;AAClB,CAAC;AAED;;;;;GAKG;AACH,MAAM,CAAC,KAAK,UAAU,uBAAuB,CAC3C,KAAmB,EACnB,QAAkB,EAClB,KAAe,EACf,MAAgB,EAChB,SAAiB,EACjB,OAAgB,EAChB,MAA8C;IAE9C,yBAAyB,CAAC,oBAAoB,CAAC,CAAC;IAChD,MAAM,eAAe,GAAG,mBAAmB,CAAC,OAAO,EAAE,0BAA0B,CAAC,CAAC;IACjF,IAAI,MAAM,GAAG,EAAE,CAAC;IAChB,IAAI,UAAU,GAAG,EAAE,CAAC;IACpB,IAAI,KAAK,GAAG,CAAC,CAAC;IACd,qBAAqB,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IACtC,QAAQ,CAAC,MAAM,EAAE,MAAM,EAAE,KAAK,CAAC,EAAE;QAC/B,UAAU,GAAG,YAAY,CAAC,UAAU,GAAG,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC,gBAAgB,CAAC,CAAC;IAC3E,CAAC,CAAC,CAAC;IACH,eAAe,CAAC,MAAM,CAAC,CAAC;IACxB,qBAAqB,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC;IAExC,OAAO,MAAM,IAAI,OAAO,CAAgC,CAAC,cAAc,EAAE,aAAa,EAAE,EAAE;QACxF,IAAI,OAAO,GAAG,KAAK,CAAC;QACpB,IAAI,eAAe,GAAgD,MAAM,CAAC;QAC1E,IAAI,eAAkC,CAAC;QACvC,IAAI,qBAAwC,CAAC;QAC7C,MAAM,MAAM,GAAG,CAAC,KAAa,EAAE,MAAsC,EAAE,EAAE;YACvE,IAAI,OAAO;gBAAE,OAAO;YACpB,OAAO,GAAG,IAAI,CAAC;YACf,aAAa,CAAC,OAAO,CAAC,CAAC;YACvB,YAAY,CAAC,KAAK,CAAC,CAAC;YACpB,IAAI,KAAK,CAAC,QAAQ,KAAK,IAAI,IAAI,KAAK,CAAC,UAAU,KAAK,IAAI;gBAAE,kBAAkB,CAAC,KAAK,EAAE,SAAS,CAAC,CAAC;YAC/F,IAAI,KAAK,KAAK,SAAS;gBAAE,aAAa,CAAC,KAAK,CAAC,CAAC;;gBACzC,cAAc,CAAC,MAAO,CAAC,CAAC;QAC/B,CAAC,CAAC;QACF,MAAM,OAAO,GAAG,CAAC,KAAc,EAAS,EAAE,CAAC,iBAAiB,CAAC,KAAK,CAAC;YACjE,CAAC,CAAC,KAAc;YAChB,CAAC,CAAC,IAAI,WAAW,CAAC,oBAAoB,EAAE,oDAAoD,CAAC,CAAC;QAChG,MAAM,MAAM,GAAG,CAAC,OAAe,EAAE,EAAE;YACjC,MAAM,KAAK,GAAG,IAAI,WAAW,CAAC,oBAAoB,EAAE,OAAO,CAAC,CAAC;YAC7D,kBAAkB,CAAC,KAAK,EAAE,SAAS,CAAC,CAAC;YACrC,IAAI,eAAe,KAAK,SAAS,EAAE,CAAC;gBAClC,qBAAqB,KAAK,KAAK,CAAC;gBAChC,OAAO;YACT,CAAC;YACD,MAAM,CAAC,eAAe,IAAI,KAAK,CAAC,CAAC;QACnC,CAAC,CAAC;QACF,MAAM,OAAO,GAAG,WAAW,CAAC,GAAG,EAAE;YAC/B,kBAAkB,CAAC,KAAK,EAAE,SAAS,CAAC,CAAC;YACrC,MAAM,CAAC,IAAI,WAAW,CACpB,oBAAoB,EACpB,eAAe,KAAK,SAAS;gBAC3B,CAAC,CAAC,kEAAkE;gBACpE,CAAC,CAAC,qCAAqC,CAC1C,CAAC,CAAC;QACL,CAAC,EAAE,SAAS,CAAC,CAAC;QACd,WAAW,CAAC,OAAO,CAAC,CAAC;QAErB,QAAQ,CAAC,KAAK,EAAE,OAAO,EAAE,GAAG,EAAE,CAAC,MAAM,CAAC,6CAA6C,CAAC,CAAC,CAAC;QACtF,QAAQ,CAAC,QAAQ,EAAE,OAAO,EAAE,GAAG,EAAE,CAAC,MAAM,CAAC,2CAA2C,CAAC,CAAC,CAAC;QACvF,QAAQ,CAAC,QAAQ,EAAE,MAAM,EAAE,KAAK,CAAC,EAAE;YACjC,MAAM,IAAI,MAAM,CAAC,KAAK,CAAC,CAAC;YACxB,IAAI,kBAAkB,CAAC,MAAM,CAAC,GAAG,eAAe;gBAAE,OAAO,MAAM,CAAC,oDAAoD,CAAC,CAAC;YACtH,SAAS,CAAC;gBACR,MAAM,GAAG,GAAG,eAAe,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC;gBAC1C,IAAI,GAAG,GAAG,CAAC;oBAAE,MAAM;gBACnB,MAAM,IAAI,GAAG,YAAY,CAAC,MAAM,EAAE,CAAC,EAAE,GAAG,CAAC,CAAC;gBAC1C,MAAM,GAAG,YAAY,CAAC,MAAM,EAAE,GAAG,GAAG,CAAC,CAAC,CAAC;gBACvC,IAAI,OAAgC,CAAC;gBACrC,IAAI,CAAC;oBACH,MAAM,MAAM,GAAG,UAAU,CAAC,IAAI,CAAY,CAAC;oBAC3C,IAAI,OAAO,MAAM,KAAK,QAAQ,IAAI,MAAM,KAAK,IAAI,IAAI,cAAc,CAAC,MAAM,CAAC,EAAE,CAAC;wBAC5E,OAAO,MAAM,CAAC,uDAAuD,CAAC,CAAC;oBACzE,CAAC;oBACD,OAAO,GAAG,mBAAmB,CAC3B,MAAM,EACN,iCAAiC,CACP,CAAC;gBAC/B,CAAC;gBAAC,MAAM,CAAC;oBAAC,OAAO,MAAM,CAAC,mDAAmD,CAAC,CAAC;gBAAC,CAAC;gBAE/E,IAAI,OAAO,CAAC,IAAI,KAAK,YAAY,EAAE,CAAC;oBAClC,IAAI,CAAC,YAAY,CAAC,OAAO,EAAE,CAAC,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,SAAS,CAAC,CAAC,EAAE,CAAC;wBAC9D,OAAO,MAAM,CAAC,wDAAwD,CAAC,CAAC;oBAC1E,CAAC;oBACD,KAAK,IAAI,CAAC,CAAC;oBACX,IAAI,KAAK,KAAK,CAAC,IAAI,eAAe,KAAK,MAAM,IAAI,OAAO,CAAC,IAAI,KAAK,YAAY,IAAI,OAAO,CAAC,EAAE,KAAK,CAAC,EAAE,CAAC;wBACnG,OAAO,MAAM,CAAC,kEAAkE,CAAC,CAAC;oBACpF,CAAC;oBACD,eAAe,GAAG,SAAS,CAAC;oBAC5B,KAAK,YAAY,CAAC,MAAM,CAAC,OAAO,CAAC,OAAO,CAAC,EACvC,KAAK,CAAC,EAAE;wBACN,IAAI,OAAO;4BAAE,OAAO;wBACpB,IAAI,CAAC;4BACH,MAAM,QAAQ,GAAG,mBAAmB,CAAC,KAAK,EAAE,0BAA0B,CAAC,CAAC;4BACxE,eAAe,GAAG,WAAW,CAAC;4BAC9B,IAAI,qBAAqB,KAAK,SAAS;gCAAE,OAAO,MAAM,CAAC,qBAAqB,CAAC,CAAC;4BAC9E,cAAc,CAAC,KAAK,EAAE,qBAAqB,CAAC,IAAI,EAAE,QAAQ,CAAC,CAAC,CAAC;wBAC/D,CAAC;wBAAC,OAAO,KAAK,EAAE,CAAC;4BACf,eAAe,GAAG,OAAO,CAAC,KAAK,CAAC,CAAC;4BACjC,eAAe,GAAG,QAAQ,CAAC;4BAC3B,cAAc,CAAC,KAAK,EAAE,qBAAqB,CAAC,KAAK,CAAC,CAAC,CAAC;4BACpD,MAAM,CAAC,eAAe,CAAC,CAAC;wBAC1B,CAAC;oBACH,CAAC,EACD,KAAK,CAAC,EAAE;wBACN,IAAI,OAAO;4BAAE,OAAO;wBACpB,eAAe,GAAG,OAAO,CAAC,KAAK,CAAC,CAAC;wBACjC,eAAe,GAAG,QAAQ,CAAC;wBAC3B,cAAc,CAAC,KAAK,EAAE,qBAAqB,CAAC,KAAK,CAAC,CAAC,CAAC;wBACpD,MAAM,CAAC,eAAe,CAAC,CAAC;oBAC1B,CAAC,CACF,CAAC;gBACJ,CAAC;qBAAM,IAAI,OAAO,CAAC,IAAI,KAAK,QAAQ,EAAE,CAAC;oBACrC,IAAI,CAAC,YAAY,CAAC,OAAO,EAAE,CAAC,MAAM,EAAE,kBAAkB,EAAE,iBAAiB,CAAC,CAAC;2BACtE,KAAK,KAAK,CAAC,IAAI,eAAe,KAAK,WAAW;2BAC9C,OAAO,CAAC,gBAAgB,KAAK,SAAS,IAAI,OAAO,CAAC,eAAe,KAAK,CAAC,EAAE,CAAC;wBAC7E,OAAO,MAAM,CAAC,6EAA6E,CAAC,CAAC;oBAC/F,CAAC;oBACD,MAAM,CAAC,SAAS,EAAE,wBAAwB,CAAC,EAAE,gBAAgB,EAAE,SAAS,EAAE,eAAe,EAAE,CAAC,EAAE,CAAC,CAAC,CAAC;gBACnG,CAAC;qBAAM,IAAI,OAAO,CAAC,IAAI,KAAK,OAAO,EAAE,CAAC;oBACpC,IAAI,CAAC,YAAY,CAAC,OAAO,EAAE,CAAC,MAAM,EAAE,SAAS,CAAC,CAAC,IAAI,OAAO,OAAO,CAAC,OAAO,KAAK,QAAQ,EAAE,CAAC;wBACvF,OAAO,MAAM,CAAC,mDAAmD,CAAC,CAAC;oBACrE,CAAC;oBACD,MAAM,KAAK,GAAG,IAAI,WAAW,CAC3B,oBAAoB,EACpB,4BAA4B,YAAY,CAAC,OAAO,CAAC,OAAO,EAAE,CAAC,EAAE,IAAI,CAAC,EAAE,CACrE,CAAC;oBACF,IAAI,eAAe,KAAK,SAAS,EAAE,CAAC;wBAClC,qBAAqB,KAAK,KAAK,CAAC;wBAChC,OAAO;oBACT,CAAC;oBACD,MAAM,CAAC,eAAe,IAAI,KAAK,CAAC,CAAC;gBACnC,CAAC;;oBAAM,OAAO,MAAM,CAAC,uDAAuD,CAAC,CAAC;YAChF,CAAC;QACH,CAAC,CAAC,CAAC;QACH,eAAe,CAAC,QAAQ,CAAC,CAAC;QAC1B,QAAQ,CAAC,KAAK,EAAE,OAAO,EAAE,GAAG,EAAE,CAAC,MAAM,CAAC,2CAA2C,CAAC,CAAC,CAAC;QACpF,QAAQ,CAAC,KAAK,EAAE,OAAO,EAAE,IAAI,CAAC,EAAE;YAC9B,IAAI,CAAC,OAAO;gBAAE,MAAM,CAClB,oEAAoE,IAAI,IAAI,QAAQ,GAAG;sBACrF,CAAC,UAAU,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,KAAK,UAAU,EAAE,CAAC,CAC/C,CAAC;QACJ,CAAC,CAAC,CAAC;QACH,cAAc,CAAC,KAAK,EAAE,GAAG,cAAc,CAAC,eAAe,CAAC,IAAI,CAAC,CAAC;IAChE,CAAC,CAAC,CAAC;AACL,CAAC;AAED,SAAS,qBAAqB,CAAC,EAAW,EAAE,KAAe;IACzD,0EAA0E;IAC1E,yEAAyE;IACzE,sEAAsE;IACtE,MAAM,QAAQ,GAAG,aAAa,CAAC,IAAI,CAA4B,CAAC;IAChE,QAAQ,CAAC,IAAI,GAAG,mBAAmB,CAAC;IACpC,QAAQ,CAAC,EAAE,GAAG,CAAC,CAAC;IAChB,QAAQ,CAAC,EAAE,GAAG,EAAE,CAAC;IACjB,IAAI,EAAE;QAAE,QAAQ,CAAC,KAAK,GAAG,KAAK,CAAC;;QAC1B,QAAQ,CAAC,KAAK,GAAG,2BAA2B,CAAC;IAClD,OAAO,GAAG,cAAc,CAAC,QAAQ,CAAC,IAAI,CAAC;AACzC,CAAC;AAED,SAAS,YAAY,CAAC,KAA8B,EAAE,IAAuB;IAC3E,IAAI,WAAW,CAAC,KAAK,CAAC,CAAC,MAAM,KAAK,IAAI,CAAC,MAAM;QAAE,OAAO,KAAK,CAAC;IAC5D,KAAK,IAAI,KAAK,GAAG,CAAC,EAAE,KAAK,GAAG,IAAI,CAAC,MAAM,EAAE,KAAK,IAAI,CAAC,EAAE,CAAC;QACpD,IAAI,CAAC,cAAc,CAAC,KAAK,EAAE,IAAI,CAAC,KAAK,CAAE,CAAC;YAAE,OAAO,KAAK,CAAC;IACzD,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC"}

package/dist/hosted-extension-runtime.d.ts

@@ -0,0 +1,30 @@
+export interface HostedExtensionArtifact {
+    readonly ref: string;
+    readonly name: string;
+    readonly version: string;
+    readonly directory: string;
+    readonly digest: string;
+    readonly manifestSha256: string;
+}
+export interface HostedExtensionInstallation {
+    readonly artifacts: readonly HostedExtensionArtifact[];
+}
+export interface HostedExtensionBase {
+    readonly name: string;
+    readonly version?: string;
+}
+export interface HostedExtensionRuntime {
+    readonly installation: HostedExtensionInstallation;
+    readonly base: HostedExtensionBase;
+}
+/** Load one base/installation generation that cannot be paired across redeploys. */
+export declare function loadHostedExtensionRuntime(flowPath: string): Promise<HostedExtensionRuntime>;
+/** @internal Metadata-only test seam; public hosted callers use the combined loader. */
+export declare function loadHostedExtensionArtifacts(flowPath: string): Promise<HostedExtensionInstallation>;
+/** @internal Base-only test seam; public hosted callers use the combined loader. */
+export declare function loadHostedExtensionBase(flowPath: string): Promise<HostedExtensionBase>;
+/** Validate both opaque values and refuse a cached generation after redeploy. */
+export declare function assertHostedRuntimeAuthority(installation: HostedExtensionInstallation, base: HostedExtensionBase): Promise<void>;
+/** @internal Validate a metadata-only installation used by selection tests. */
+export declare function assertHostedInstallationAuthority(value: unknown): asserts value is HostedExtensionInstallation;
+//# sourceMappingURL=hosted-extension-runtime.d.ts.map

package/dist/hosted-extension-runtime.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"hosted-extension-runtime.d.ts","sourceRoot":"","sources":["../src/hosted-extension-runtime.ts"],"names":[],"mappings":"AA2DA,MAAM,WAAW,uBAAuB;IACtC,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAC;IACrB,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,cAAc,EAAE,MAAM,CAAC;CACjC;AAED,MAAM,WAAW,2BAA2B;IAC1C,QAAQ,CAAC,SAAS,EAAE,SAAS,uBAAuB,EAAE,CAAC;CACxD;AAED,MAAM,WAAW,mBAAmB;IAClC,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,OAAO,CAAC,EAAE,MAAM,CAAC;CAC3B;AAED,MAAM,WAAW,sBAAsB;IACrC,QAAQ,CAAC,YAAY,EAAE,2BAA2B,CAAC;IACnD,QAAQ,CAAC,IAAI,EAAE,mBAAmB,CAAC;CACpC;AAED,oFAAoF;AACpF,wBAAsB,0BAA0B,CAAC,QAAQ,EAAE,MAAM,GAAG,OAAO,CAAC,sBAAsB,CAAC,CAgBlG;AAED,wFAAwF;AACxF,wBAAsB,4BAA4B,CAAC,QAAQ,EAAE,MAAM,GAAG,OAAO,CAAC,2BAA2B,CAAC,CAOzG;AAED,oFAAoF;AACpF,wBAAsB,uBAAuB,CAAC,QAAQ,EAAE,MAAM,GAAG,OAAO,CAAC,mBAAmB,CAAC,CAM5F;AAED,iFAAiF;AACjF,wBAAsB,4BAA4B,CAChD,YAAY,EAAE,2BAA2B,EACzC,IAAI,EAAE,mBAAmB,GACxB,OAAO,CAAC,IAAI,CAAC,CAyBf;AAED,+EAA+E;AAC/E,wBAAgB,iCAAiC,CAAC,KAAK,EAAE,OAAO,GAAG,OAAO,CAAC,KAAK,IAAI,2BAA2B,CAS9G"}

package/dist/hosted-extension-runtime.js

@@ -0,0 +1,167 @@
+import { realpath } from 'node:fs/promises';
+import { dirname, join, resolve } from 'node:path';
+import { canonicalize } from './canonical.js';
+import { createHostedBaseSnapshot, hostedBaseSourceDigest, removeHostedBaseSnapshot, } from './hosted-base-snapshot.js';
+import { appendIntrinsicArray } from './intrinsic-array.js';
+import { declarationSignature, hostedDeclaredExtensions, } from './hosted-extension-declarations.js';
+import { findHostedProject } from './hosted-project.js';
+import { assertHostedPromiseSafety, frozenHostedPromiseValue, } from './hosted-promise-safety.js';
+import { PluginError } from './plugin-manifest.js';
+import { pluginStoreDirectory, verifyStoredPlugin } from './plugin-store.js';
+const INSTALLATION_AUTHORITY = new WeakSet();
+const BASE_AUTHORITY = new WeakSet();
+const REALPATH = realpath;
+const PATH_DIRNAME = dirname;
+const PATH_JOIN = join;
+const PATH_RESOLVE = resolve;
+const SOFTWARE_FACTORY_SHA256 = '49c993220b9c34fab2d4b0e51911656f62b8b657f534d988691960d45bb9d9b6';
+const ARRAY_IS_ARRAY = Array.isArray;
+const OBJECT_FREEZE = Object.freeze;
+const WEAK_MAP_GET = Function.prototype.call.bind(WeakMap.prototype.get);
+const WEAK_MAP_SET = Function.prototype.call.bind(WeakMap.prototype.set);
+const WEAK_SET_ADD = Function.prototype.call.bind(WeakSet.prototype.add);
+const WEAK_SET_HAS = Function.prototype.call.bind(WeakSet.prototype.has);
+const INSTALLATION_GENERATION = new WeakMap();
+const BASE_GENERATION = new WeakMap();
+/** Load one base/installation generation that cannot be paired across redeploys. */
+export async function loadHostedExtensionRuntime(flowPath) {
+    assertHostedPromiseSafety('plugin_source_invalid');
+    const origin = await REALPATH(PATH_RESOLVE(flowPath));
+    const generation = newGeneration(origin);
+    const loaded = await installationAt(origin, generation);
+    generation.declarations = loaded.declarations;
+    const base = await baseAt(origin, generation);
+    if (loaded.declarations !== declaredExtensions(generation).signature) {
+        throw new PluginError('plugin_source_drift', 'Hosted extension declarations changed while their runtime generation was loaded.');
+    }
+    await assertCurrentGeneration(generation);
+    OBJECT_FREEZE(generation);
+    return frozenHostedPromiseValue({ installation: loaded.installation, base });
+}
+/** @internal Metadata-only test seam; public hosted callers use the combined loader. */
+export async function loadHostedExtensionArtifacts(flowPath) {
+    assertHostedPromiseSafety('plugin_source_invalid');
+    const origin = await REALPATH(PATH_RESOLVE(flowPath));
+    const generation = newGeneration(origin);
+    const loaded = await installationAt(origin, generation);
+    generation.declarations = loaded.declarations;
+    return loaded.installation;
+}
+/** @internal Base-only test seam; public hosted callers use the combined loader. */
+export async function loadHostedExtensionBase(flowPath) {
+    assertHostedPromiseSafety('plugin_source_invalid');
+    const origin = await REALPATH(PATH_RESOLVE(flowPath));
+    const generation = newGeneration(origin);
+    generation.declarations = declaredExtensions(generation).signature;
+    return await baseAt(origin, generation);
+}
+/** Validate both opaque values and refuse a cached generation after redeploy. */
+export async function assertHostedRuntimeAuthority(installation, base) {
+    if (typeof base !== 'object' || base === null || !WEAK_SET_HAS(BASE_AUTHORITY, base)) {
+        throw new PluginError('plugin_incompatible', 'Hosted extension base authority is malformed; use loadHostedExtensionRuntime.');
+    }
+    if (typeof installation !== 'object' ||
+        installation === null ||
+        !WEAK_SET_HAS(INSTALLATION_AUTHORITY, installation)) {
+        throw new PluginError('plugin_source_invalid', 'Hosted extension installation authority is malformed; use loadHostedExtensionRuntime.');
+    }
+    const generation = WEAK_MAP_GET(BASE_GENERATION, base);
+    if (generation === undefined || generation !== WEAK_MAP_GET(INSTALLATION_GENERATION, installation)) {
+        throw new PluginError('plugin_source_invalid', 'Hosted extension base and installation must originate from the same runtime generation.');
+    }
+    await assertCurrentGeneration(generation);
+}
+/** @internal Validate a metadata-only installation used by selection tests. */
+export function assertHostedInstallationAuthority(value) {
+    if (typeof value !== 'object' ||
+        value === null ||
+        !WEAK_SET_HAS(INSTALLATION_AUTHORITY, value) ||
+        !ARRAY_IS_ARRAY(value.artifacts)) {
+        throw new PluginError('plugin_source_invalid', 'Hosted extension installation authority is malformed.');
+    }
+}
+async function installationAt(origin, generation) {
+    const root = generation.projectRoot;
+    if (root === undefined)
+        return frozenHostedPromiseValue({
+            installation: installation([], generation),
+            declarations: canonicalize([]),
+        });
+    const artifacts = [];
+    const declared = hostedDeclaredExtensions(root);
+    for (let index = 0; index < declared.length; index += 1) {
+        const { ref, entry } = declared[index];
+        const directory = pluginStoreDirectory(root, entry.name, entry.digest);
+        await verifyStoredPlugin(directory, entry.digest);
+        appendIntrinsicArray(artifacts, OBJECT_FREEZE({
+            ref,
+            name: entry.name,
+            version: entry.version,
+            directory,
+            digest: entry.digest,
+            manifestSha256: entry.manifestSha256,
+        }));
+    }
+    return frozenHostedPromiseValue({
+        installation: installation(artifacts, generation),
+        declarations: declarationSignature(declared),
+    });
+}
+function declaredExtensions(generation) {
+    const root = generation.projectRoot;
+    return {
+        signature: root === undefined ? canonicalize([]) : declarationSignature(hostedDeclaredExtensions(root)),
+    };
+}
+function newGeneration(origin) {
+    return {
+        origin,
+        projectRoot: findHostedProject(PATH_DIRNAME(origin)),
+        declarations: canonicalize([]),
+        sourceRoots: OBJECT_FREEZE([]),
+        sourceSha256: '',
+    };
+}
+async function assertCurrentGeneration(generation) {
+    let currentSource;
+    try {
+        currentSource = await hostedBaseSourceDigest(generation.sourceRoots);
+    }
+    catch {
+        throw new PluginError('plugin_source_invalid', 'Hosted extension runtime generation is no longer readable.');
+    }
+    if (declaredExtensions(generation).signature !== generation.declarations ||
+        currentSource !== generation.sourceSha256) {
+        throw new PluginError('plugin_source_invalid', 'Hosted extension runtime generation is stale; reload the base and installation together.');
+    }
+}
+async function baseAt(origin, generation) {
+    const snapshot = await createHostedBaseSnapshot(origin, generation.projectRoot ?? PATH_DIRNAME(origin));
+    generation.sourceRoots = snapshot.liveSources;
+    generation.sourceSha256 = snapshot.liveDigest;
+    try {
+        if (snapshot.snapshotFlowSha256 !== SOFTWARE_FACTORY_SHA256) {
+            throw new PluginError('plugin_source_invalid', 'Hosted capability isolation accepts only the reviewed Software Factory base source.');
+        }
+        const value = frozenHostedPromiseValue({
+            name: 'software-factory',
+            version: '2.0.22',
+        });
+        WEAK_SET_ADD(BASE_AUTHORITY, value);
+        WEAK_MAP_SET(BASE_GENERATION, value, generation);
+        return value;
+    }
+    finally {
+        await removeHostedBaseSnapshot(snapshot);
+    }
+}
+function installation(artifacts, generation) {
+    const artifactCopy = [];
+    for (let index = 0; index < artifacts.length; index += 1)
+        appendIntrinsicArray(artifactCopy, artifacts[index]);
+    const value = frozenHostedPromiseValue({ artifacts: frozenHostedPromiseValue(artifactCopy) });
+    WEAK_SET_ADD(INSTALLATION_AUTHORITY, value);
+    WEAK_MAP_SET(INSTALLATION_GENERATION, value, generation);
+    return value;
+}
+//# sourceMappingURL=hosted-extension-runtime.js.map

package/dist/hosted-extension-runtime.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"hosted-extension-runtime.js","sourceRoot":"","sources":["../src/hosted-extension-runtime.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,MAAM,kBAAkB,CAAC;AAC5C,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AACnD,OAAO,EAAE,YAAY,EAAE,MAAM,gBAAgB,CAAC;AAC9C,OAAO,EACL,wBAAwB,EACxB,sBAAsB,EACtB,wBAAwB,GAEzB,MAAM,2BAA2B,CAAC;AACnC,OAAO,EAAE,oBAAoB,EAAE,MAAM,sBAAsB,CAAC;AAC5D,OAAO,EACL,oBAAoB,EACpB,wBAAwB,GACzB,MAAM,oCAAoC,CAAC;AAC5C,OAAO,EAAE,iBAAiB,EAAE,MAAM,qBAAqB,CAAC;AACxD,OAAO,EACL,yBAAyB,EACzB,wBAAwB,GACzB,MAAM,4BAA4B,CAAC;AACpC,OAAO,EAAE,WAAW,EAAE,MAAM,sBAAsB,CAAC;AACnD,OAAO,EAAE,oBAAoB,EAAE,kBAAkB,EAAE,MAAM,mBAAmB,CAAC;AAE7E,MAAM,sBAAsB,GAAG,IAAI,OAAO,EAAU,CAAC;AACrD,MAAM,cAAc,GAAG,IAAI,OAAO,EAAU,CAAC;AAC7C,MAAM,QAAQ,GAAG,QAAQ,CAAC;AAC1B,MAAM,YAAY,GAAG,OAAO,CAAC;AAC7B,MAAM,SAAS,GAAG,IAAI,CAAC;AACvB,MAAM,YAAY,GAAG,OAAO,CAAC;AAC7B,MAAM,uBAAuB,GAAG,kEAAkE,CAAC;AACnG,MAAM,cAAc,GAAG,KAAK,CAAC,OAAO,CAAC;AACrC,MAAM,aAAa,GAAG,MAAM,CAAC,MAAM,CAAC;AACpC,MAAM,YAAY,GAAG,QAAQ,CAAC,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,SAAS,CAAC,GAAG,CAGrD,CAAC;AACnB,MAAM,YAAY,GAAG,QAAQ,CAAC,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,SAAS,CAAC,GAAG,CAIrD,CAAC;AACnB,MAAM,YAAY,GAAG,QAAQ,CAAC,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,SAAS,CAAC,GAAG,CAGxD,CAAC;AAChB,MAAM,YAAY,GAAG,QAAQ,CAAC,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,SAAS,CAAC,GAAG,CAG3D,CAAC;AASb,MAAM,uBAAuB,GAAG,IAAI,OAAO,EAA6B,CAAC;AACzE,MAAM,eAAe,GAAG,IAAI,OAAO,EAA6B,CAAC;AAyBjE,oFAAoF;AACpF,MAAM,CAAC,KAAK,UAAU,0BAA0B,CAAC,QAAgB;IAC/D,yBAAyB,CAAC,uBAAuB,CAAC,CAAC;IACnD,MAAM,MAAM,GAAG,MAAM,QAAQ,CAAC,YAAY,CAAC,QAAQ,CAAC,CAAC,CAAC;IACtD,MAAM,UAAU,GAAG,aAAa,CAAC,MAAM,CAAC,CAAC;IACzC,MAAM,MAAM,GAAG,MAAM,cAAc,CAAC,MAAM,EAAE,UAAU,CAAC,CAAC;IACxD,UAAU,CAAC,YAAY,GAAG,MAAM,CAAC,YAAY,CAAC;IAC9C,MAAM,IAAI,GAAG,MAAM,MAAM,CAAC,MAAM,EAAE,UAAU,CAAC,CAAC;IAC9C,IAAI,MAAM,CAAC,YAAY,KAAK,kBAAkB,CAAC,UAAU,CAAC,CAAC,SAAS,EAAE,CAAC;QACrE,MAAM,IAAI,WAAW,CACnB,qBAAqB,EACrB,kFAAkF,CACnF,CAAC;IACJ,CAAC;IACD,MAAM,uBAAuB,CAAC,UAAU,CAAC,CAAC;IAC1C,aAAa,CAAC,UAAU,CAAC,CAAC;IAC1B,OAAO,wBAAwB,CAAC,EAAE,YAAY,EAAE,MAAM,CAAC,YAAY,EAAE,IAAI,EAAE,CAAC,CAAC;AAC/E,CAAC;AAED,wFAAwF;AACxF,MAAM,CAAC,KAAK,UAAU,4BAA4B,CAAC,QAAgB;IACjE,yBAAyB,CAAC,uBAAuB,CAAC,CAAC;IACnD,MAAM,MAAM,GAAG,MAAM,QAAQ,CAAC,YAAY,CAAC,QAAQ,CAAC,CAAC,CAAC;IACtD,MAAM,UAAU,GAAG,aAAa,CAAC,MAAM,CAAC,CAAC;IACzC,MAAM,MAAM,GAAG,MAAM,cAAc,CAAC,MAAM,EAAE,UAAU,CAAC,CAAC;IACxD,UAAU,CAAC,YAAY,GAAG,MAAM,CAAC,YAAY,CAAC;IAC9C,OAAO,MAAM,CAAC,YAAY,CAAC;AAC7B,CAAC;AAED,oFAAoF;AACpF,MAAM,CAAC,KAAK,UAAU,uBAAuB,CAAC,QAAgB;IAC5D,yBAAyB,CAAC,uBAAuB,CAAC,CAAC;IACnD,MAAM,MAAM,GAAG,MAAM,QAAQ,CAAC,YAAY,CAAC,QAAQ,CAAC,CAAC,CAAC;IACtD,MAAM,UAAU,GAAG,aAAa,CAAC,MAAM,CAAC,CAAC;IACzC,UAAU,CAAC,YAAY,GAAG,kBAAkB,CAAC,UAAU,CAAC,CAAC,SAAS,CAAC;IACnE,OAAO,MAAM,MAAM,CAAC,MAAM,EAAE,UAAU,CAAC,CAAC;AAC1C,CAAC;AAED,iFAAiF;AACjF,MAAM,CAAC,KAAK,UAAU,4BAA4B,CAChD,YAAyC,EACzC,IAAyB;IAEzB,IAAI,OAAO,IAAI,KAAK,QAAQ,IAAI,IAAI,KAAK,IAAI,IAAI,CAAC,YAAY,CAAC,cAAc,EAAE,IAAI,CAAC,EAAE,CAAC;QACrF,MAAM,IAAI,WAAW,CACnB,qBAAqB,EACrB,+EAA+E,CAChF,CAAC;IACJ,CAAC;IACD,IACE,OAAO,YAAY,KAAK,QAAQ;QAChC,YAAY,KAAK,IAAI;QACrB,CAAC,YAAY,CAAC,sBAAsB,EAAE,YAAY,CAAC,EACnD,CAAC;QACD,MAAM,IAAI,WAAW,CACnB,uBAAuB,EACvB,uFAAuF,CACxF,CAAC;IACJ,CAAC;IACD,MAAM,UAAU,GAAG,YAAY,CAAC,eAAe,EAAE,IAAI,CAAC,CAAC;IACvD,IAAI,UAAU,KAAK,SAAS,IAAI,UAAU,KAAK,YAAY,CAAC,uBAAuB,EAAE,YAAY,CAAC,EAAE,CAAC;QACnG,MAAM,IAAI,WAAW,CACnB,uBAAuB,EACvB,yFAAyF,CAC1F,CAAC;IACJ,CAAC;IACD,MAAM,uBAAuB,CAAC,UAAU,CAAC,CAAC;AAC5C,CAAC;AAED,+EAA+E;AAC/E,MAAM,UAAU,iCAAiC,CAAC,KAAc;IAC9D,IACE,OAAO,KAAK,KAAK,QAAQ;QACzB,KAAK,KAAK,IAAI;QACd,CAAC,YAAY,CAAC,sBAAsB,EAAE,KAAK,CAAC;QAC5C,CAAC,cAAc,CAAE,KAA8C,CAAC,SAAS,CAAC,EAC1E,CAAC;QACD,MAAM,IAAI,WAAW,CAAC,uBAAuB,EAAE,uDAAuD,CAAC,CAAC;IAC1G,CAAC;AACH,CAAC;AAED,KAAK,UAAU,cAAc,CAC3B,MAAc,EACd,UAA6B;IAK7B,MAAM,IAAI,GAAG,UAAU,CAAC,WAAW,CAAC;IACpC,IAAI,IAAI,KAAK,SAAS;QACpB,OAAO,wBAAwB,CAAC;YAC9B,YAAY,EAAE,YAAY,CAAC,EAAE,EAAE,UAAU,CAAC;YAC1C,YAAY,EAAE,YAAY,CAAC,EAAE,CAAC;SAC/B,CAAC,CAAC;IACL,MAAM,SAAS,GAA8B,EAAE,CAAC;IAChD,MAAM,QAAQ,GAAG,wBAAwB,CAAC,IAAI,CAAC,CAAC;IAChD,KAAK,IAAI,KAAK,GAAG,CAAC,EAAE,KAAK,GAAG,QAAQ,CAAC,MAAM,EAAE,KAAK,IAAI,CAAC,EAAE,CAAC;QACxD,MAAM,EAAE,GAAG,EAAE,KAAK,EAAE,GAAG,QAAQ,CAAC,KAAK,CAAE,CAAC;QACxC,MAAM,SAAS,GAAG,oBAAoB,CAAC,IAAI,EAAE,KAAK,CAAC,IAAI,EAAE,KAAK,CAAC,MAAM,CAAC,CAAC;QACvE,MAAM,kBAAkB,CAAC,SAAS,EAAE,KAAK,CAAC,MAAM,CAAC,CAAC;QAClD,oBAAoB,CAAC,SAAS,EAAE,aAAa,CAAC;YAC5C,GAAG;YACH,IAAI,EAAE,KAAK,CAAC,IAAI;YAChB,OAAO,EAAE,KAAK,CAAC,OAAO;YACtB,SAAS;YACT,MAAM,EAAE,KAAK,CAAC,MAAM;YACpB,cAAc,EAAE,KAAK,CAAC,cAAc;SACrC,CAAC,CAAC,CAAC;IACN,CAAC;IACD,OAAO,wBAAwB,CAAC;QAC9B,YAAY,EAAE,YAAY,CAAC,SAAS,EAAE,UAAU,CAAC;QACjD,YAAY,EAAE,oBAAoB,CAAC,QAAQ,CAAC;KAC7C,CAAC,CAAC;AACL,CAAC;AAED,SAAS,kBAAkB,CAAC,UAA6B;IACvD,MAAM,IAAI,GAAG,UAAU,CAAC,WAAW,CAAC;IACpC,OAAO;QACL,SAAS,EAAE,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,YAAY,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,oBAAoB,CAAC,wBAAwB,CAAC,IAAI,CAAC,CAAC;KACxG,CAAC;AACJ,CAAC;AAED,SAAS,aAAa,CAAC,MAAc;IACnC,OAAO;QACL,MAAM;QACN,WAAW,EAAE,iBAAiB,CAAC,YAAY,CAAC,MAAM,CAAC,CAAC;QACpD,YAAY,EAAE,YAAY,CAAC,EAAE,CAAC;QAC9B,WAAW,EAAE,aAAa,CAAC,EAAE,CAAC;QAC9B,YAAY,EAAE,EAAE;KACjB,CAAC;AACJ,CAAC;AAED,KAAK,UAAU,uBAAuB,CAAC,UAA6B;IAClE,IAAI,aAAqB,CAAC;IAC1B,IAAI,CAAC;QACH,aAAa,GAAG,MAAM,sBAAsB,CAAC,UAAU,CAAC,WAAW,CAAC,CAAC;IACvE,CAAC;IAAC,MAAM,CAAC;QACP,MAAM,IAAI,WAAW,CAAC,uBAAuB,EAAE,4DAA4D,CAAC,CAAC;IAC/G,CAAC;IACD,IACE,kBAAkB,CAAC,UAAU,CAAC,CAAC,SAAS,KAAK,UAAU,CAAC,YAAY;QACpE,aAAa,KAAK,UAAU,CAAC,YAAY,EACzC,CAAC;QACD,MAAM,IAAI,WAAW,CACnB,uBAAuB,EACvB,0FAA0F,CAC3F,CAAC;IACJ,CAAC;AACH,CAAC;AAED,KAAK,UAAU,MAAM,CAAC,MAAc,EAAE,UAA6B;IACjE,MAAM,QAAQ,GAAG,MAAM,wBAAwB,CAAC,MAAM,EAAE,UAAU,CAAC,WAAW,IAAI,YAAY,CAAC,MAAM,CAAC,CAAC,CAAC;IACxG,UAAU,CAAC,WAAW,GAAG,QAAQ,CAAC,WAAW,CAAC;IAC9C,UAAU,CAAC,YAAY,GAAG,QAAQ,CAAC,UAAU,CAAC;IAC9C,IAAI,CAAC;QACH,IAAI,QAAQ,CAAC,kBAAkB,KAAK,uBAAuB,EAAE,CAAC;YAC5D,MAAM,IAAI,WAAW,CACnB,uBAAuB,EACvB,qFAAqF,CACtF,CAAC;QACJ,CAAC;QACD,MAAM,KAAK,GAAG,wBAAwB,CAAC;YACrC,IAAI,EAAE,kBAAkB;YACxB,OAAO,EAAE,QAAQ;SAClB,CAAC,CAAC;QACH,YAAY,CAAC,cAAc,EAAE,KAAK,CAAC,CAAC;QACpC,YAAY,CAAC,eAAe,EAAE,KAAK,EAAE,UAAU,CAAC,CAAC;QACjD,OAAO,KAAK,CAAC;IACf,CAAC;YAAS,CAAC;QACT,MAAM,wBAAwB,CAAC,QAAQ,CAAC,CAAC;IAC3C,CAAC;AACH,CAAC;AAED,SAAS,YAAY,CACnB,SAA6C,EAC7C,UAA6B;IAE7B,MAAM,YAAY,GAA8B,EAAE,CAAC;IACnD,KAAK,IAAI,KAAK,GAAG,CAAC,EAAE,KAAK,GAAG,SAAS,CAAC,MAAM,EAAE,KAAK,IAAI,CAAC;QAAE,oBAAoB,CAAC,YAAY,EAAE,SAAS,CAAC,KAAK,CAAE,CAAC,CAAC;IAChH,MAAM,KAAK,GAAG,wBAAwB,CAAC,EAAE,SAAS,EAAE,wBAAwB,CAAC,YAAY,CAAC,EAAE,CAAC,CAAC;IAC9F,YAAY,CAAC,sBAAsB,EAAE,KAAK,CAAC,CAAC;IAC5C,YAAY,CAAC,uBAAuB,EAAE,KAAK,EAAE,UAAU,CAAC,CAAC;IACzD,OAAO,KAAK,CAAC;AACf,CAAC"}

package/dist/hosted-extension-sandbox-source.d.ts

@@ -0,0 +1,9 @@
+/**
+ * Source for the process that imports one hosted extension inside the Linux
+ * namespace assembled by hosted-extension-isolation.ts.
+ *
+ * Keep this dependency-free. The parent writes it to a private file and
+ * mounts that file read-only; the extension is not imported by the host.
+ */
+export declare const HOSTED_EXTENSION_SANDBOX_SOURCE: string;
+//# sourceMappingURL=hosted-extension-sandbox-source.d.ts.map

package/dist/hosted-extension-sandbox-source.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"hosted-extension-sandbox-source.d.ts","sourceRoot":"","sources":["../src/hosted-extension-sandbox-source.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AACH,eAAO,MAAM,+BAA+B,QAsF3C,CAAC"}

package/dist/hosted-extension-sandbox-source.js

@@ -0,0 +1,95 @@
+/**
+ * Source for the process that imports one hosted extension inside the Linux
+ * namespace assembled by hosted-extension-isolation.ts.
+ *
+ * Keep this dependency-free. The parent writes it to a private file and
+ * mounts that file read-only; the extension is not imported by the host.
+ */
+export const HOSTED_EXTENSION_SANDBOX_SOURCE = String.raw `
+import { createReadStream, writeSync } from 'node:fs';
+import { createInterface } from 'node:readline';
+import { pathToFileURL } from 'node:url';
+
+const lines = createInterface({ input: createReadStream(null, { fd: 0 }), crlfDelay: Infinity });
+const iterator = lines[Symbol.asyncIterator]();
+const send = value => writeSync(3, JSON.stringify(value) + '\n');
+const receive = async () => {
+  const next = await iterator.next();
+  if (next.done) throw new Error('hosted capability channel closed');
+  return JSON.parse(next.value);
+};
+const subscriptionOf = handler => {
+  const trigger = handler?.trigger;
+  const filter = trigger?.filter;
+  if (trigger?.kind !== 'webhook' || filter === undefined
+    || typeof filter.provider !== 'string' || filter.provider !== trigger.name
+    || typeof filter.type !== 'string') return undefined;
+  const action = typeof filter.payload === 'object' && filter.payload !== null && !Array.isArray(filter.payload)
+    ? filter.payload.action : undefined;
+  if (action !== undefined && typeof action !== 'string') return undefined;
+  return action === undefined
+    ? { provider: filter.provider, event: filter.type }
+    : { provider: filter.provider, event: filter.type, action };
+};
+const matches = (subscription, identity) => subscription !== undefined
+  && subscription.provider === identity.provider
+  && subscription.event === identity.event
+  && (subscription.action === undefined || subscription.action === identity.action);
+
+try {
+  const request = await receive();
+  if (request?.type !== 'execute' || typeof request.entry !== 'string'
+    || typeof request.surfaceRuntime !== 'string' || typeof request.capability !== 'string') {
+    throw new Error('malformed hosted extension execution request');
+  }
+  const runtime = await import(pathToFileURL(request.surfaceRuntime).href);
+  const authored = await import(pathToFileURL(request.entry).href);
+  const definition = runtime.getFlowDefinition(authored.default);
+  const selected = definition.handlers.filter(handler => matches(subscriptionOf(handler), request.identity));
+  if (selected.length !== 1) throw new Error('hosted event must match exactly one isolated extension handler');
+
+  let nextCall = 1;
+  let capabilityCalls = 0;
+  let completion;
+  const invoke = async value => {
+    capabilityCalls += 1;
+    if (capabilityCalls !== 1) throw new Error('hosted extension may invoke its capability once');
+    const id = nextCall++;
+    send({ type: 'capability', id, name: request.capability, request: value });
+    const response = await receive();
+    if (response?.type !== 'capability-result' || response.id !== id || typeof response.ok !== 'boolean') {
+      throw new Error('malformed hosted capability response');
+    }
+    if (!response.ok) throw new Error(typeof response.error === 'string' ? response.error : 'hosted capability refused');
+    return response.value;
+  };
+  const capabilities = Object.freeze({
+    cloud: Object.freeze({ babysitterTurn: Object.freeze({ queue: invoke }) }),
+  });
+  const available = Object.freeze({
+    capabilities,
+    done(reason) {
+      if (completion !== undefined) throw new Error('hosted extension completed more than once');
+      completion = reason;
+    },
+  });
+  const context = new Proxy(available, {
+    get(target, property, receiver) {
+      if (property !== 'capabilities' && property !== 'done') {
+        throw new Error('hosted extension context denies ' + String(property));
+      }
+      return Reflect.get(target, property, receiver);
+    },
+    has(_target, property) { return property === 'capabilities' || property === 'done'; },
+    ownKeys() { return ['capabilities', 'done']; },
+  });
+  await selected[0].body(context, request.input);
+  if (capabilityCalls !== 1) throw new Error('hosted extension did not invoke its capability exactly once');
+  if (completion !== 'success') throw new Error('hosted extension did not complete with success');
+  send({ type: 'result', completionReason: completion, capabilityCalls });
+} catch (error) {
+  send({ type: 'error', message: error instanceof Error ? (error.stack ?? error.message) : String(error) });
+  process.exitCode = 1;
+}
+`;
+//# sourceMappingURL=hosted-extension-sandbox-source.js.map

package/dist/hosted-extension-sandbox-source.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"hosted-extension-sandbox-source.js","sourceRoot":"","sources":["../src/hosted-extension-sandbox-source.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AACH,MAAM,CAAC,MAAM,+BAA+B,GAAG,MAAM,CAAC,GAAG,CAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;CAsFxD,CAAC"}

package/dist/hosted-extension-sandbox.d.ts

@@ -0,0 +1,39 @@
+import { type BigIntStats } from 'node:fs';
+import { type HostedExtensionProtocolResult } from './hosted-extension-protocol.js';
+export interface CapturedExecutable {
+    readonly descriptor: number;
+    readonly sha256: string;
+    readonly stat: BigIntStats;
+}
+export interface RunHostedExtensionSandboxOptions {
+    readonly artifactDirectory: string;
+    readonly artifactDigest: string;
+    readonly entry: string;
+    readonly surfaceVersion: string;
+    readonly identity: {
+        readonly provider: string;
+        readonly event: string;
+        readonly action?: string;
+    };
+    readonly input: unknown;
+    readonly invoke: (request: unknown) => Promise<unknown>;
+    readonly timeoutMs?: number;
+    readonly bubblewrapPath?: string;
+    readonly nodePath?: string;
+    readonly prlimitPath?: string;
+    /** @internal Test seam for a package root with the exact pinned runtime bytes. */
+    readonly surfaceRoot?: string;
+    /** @internal Last parent-side authority check after private snapshots exist. */
+    readonly beforeLaunch?: () => Promise<void>;
+}
+export declare function runHostedExtensionSandbox(options: RunHostedExtensionSandboxOptions): Promise<HostedExtensionProtocolResult>;
+/** @internal Pure construction seam for hostile-intrinsic regressions. */
+export declare function sandboxArguments(input: {
+    dataDestinations: readonly string[];
+}): string[];
+/** @internal Descriptor-pinning seam for the executable replacement regression. */
+export declare function captureExecutable(path: string, name: string): CapturedExecutable;
+/** @internal Reads the inode captured before authored code could replace its path. */
+export declare function readCapturedExecutable(capture: CapturedExecutable, name: string): Buffer;
+export declare function supportsHostedSandboxFlags(version: string): boolean;
+//# sourceMappingURL=hosted-extension-sandbox.d.ts.map

package/dist/hosted-extension-sandbox.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"hosted-extension-sandbox.d.ts","sourceRoot":"","sources":["../src/hosted-extension-sandbox.ts"],"names":[],"mappings":"AACA,OAAO,EASL,KAAK,WAAW,EACjB,MAAM,SAAS,CAAC;AAsBjB,OAAO,EAEL,KAAK,6BAA6B,EACnC,MAAM,gCAAgC,CAAC;AA0FxC,MAAM,WAAW,kBAAkB;IACjC,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,IAAI,EAAE,WAAW,CAAC;CAC5B;AAED,MAAM,WAAW,gCAAgC;IAC/C,QAAQ,CAAC,iBAAiB,EAAE,MAAM,CAAC;IACnC,QAAQ,CAAC,cAAc,EAAE,MAAM,CAAC;IAChC,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,cAAc,EAAE,MAAM,CAAC;IAChC,QAAQ,CAAC,QAAQ,EAAE;QAAE,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;QAAC,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;QAAC,QAAQ,CAAC,MAAM,CAAC,EAAE,MAAM,CAAA;KAAE,CAAC;IACnG,QAAQ,CAAC,KAAK,EAAE,OAAO,CAAC;IACxB,QAAQ,CAAC,MAAM,EAAE,CAAC,OAAO,EAAE,OAAO,KAAK,OAAO,CAAC,OAAO,CAAC,CAAC;IACxD,QAAQ,CAAC,SAAS,CAAC,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,cAAc,CAAC,EAAE,MAAM,CAAC;IACjC,QAAQ,CAAC,QAAQ,CAAC,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,WAAW,CAAC,EAAE,MAAM,CAAC;IAC9B,kFAAkF;IAClF,QAAQ,CAAC,WAAW,CAAC,EAAE,MAAM,CAAC;IAC9B,gFAAgF;IAChF,QAAQ,CAAC,YAAY,CAAC,EAAE,MAAM,OAAO,CAAC,IAAI,CAAC,CAAC;CAC7C;AAED,wBAAsB,yBAAyB,CAC7C,OAAO,EAAE,gCAAgC,GACxC,OAAO,CAAC,6BAA6B,CAAC,CAgGxC;AAsGD,0EAA0E;AAC1E,wBAAgB,gBAAgB,CAAC,KAAK,EAAE;IACtC,gBAAgB,EAAE,SAAS,MAAM,EAAE,CAAC;CACrC,GAAG,MAAM,EAAE,CAuDX;AAOD,mFAAmF;AACnF,wBAAgB,iBAAiB,CAAC,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,GAAG,kBAAkB,CAuBhF;AAED,sFAAsF;AACtF,wBAAgB,sBAAsB,CAAC,OAAO,EAAE,kBAAkB,EAAE,IAAI,EAAE,MAAM,GAAG,MAAM,CASxF;AA2BD,wBAAgB,0BAA0B,CAAC,OAAO,EAAE,MAAM,GAAG,OAAO,CAMnE"}