@relkit/compiler 0.0.0

package/dist/discovery/evaluator-child-utils.js

@@ -0,0 +1,48 @@
+import { isDescriptor } from "@relkit/contracts";
+import { snapshotDescriptor } from "./evaluator-snapshot.js";
+export function snapshotModule(module, candidate, request) {
+    const exports = [];
+    const manifestReferences = [];
+    for (const exportName of Object.keys(module).sort()) {
+        const value = module[exportName];
+        if (!isCompilerDescriptor(value))
+            continue;
+        const descriptor = snapshotDescriptor(value);
+        exports.push({ exportName, descriptor });
+        manifestReferences.push({
+            generationId: request.generationId,
+            descriptorId: descriptor.id,
+            kind: descriptor.kind,
+            module: candidate.file,
+            exportName,
+        });
+    }
+    return {
+        file: candidate.file,
+        exports: Object.freeze(exports),
+        manifestReferences: Object.freeze(manifestReferences),
+    };
+}
+function isCompilerDescriptor(value) {
+    if (isDescriptor(value))
+        return true;
+    if (!isRecord(value) || (value.kind !== "middleware" && value.kind !== "transform"))
+        return false;
+    return (typeof value.id === "string" &&
+        isRecord(value.ref) &&
+        value.ref.kind === value.kind &&
+        value.ref.id === value.id);
+}
+export function sideEffectFailure(sideEffects, module, request) {
+    return {
+        code: "RELKIT_EVALUATOR_SIDE_EFFECT",
+        message: `Candidate evaluation detected ${sideEffects.length} side effect(s).`,
+        generationId: request.generationId,
+        module,
+        sideEffects,
+    };
+}
+function isRecord(value) {
+    return value !== null && typeof value === "object" && !Array.isArray(value);
+}
+//# sourceMappingURL=evaluator-child-utils.js.map

package/dist/discovery/evaluator-child-utils.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"evaluator-child-utils.js","sourceRoot":"","sources":["../../src/discovery/evaluator-child-utils.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,YAAY,EAAE,MAAM,mBAAmB,CAAC;AASjD,OAAO,EAAE,kBAAkB,EAA+B,MAAM,yBAAyB,CAAC;AAE1F,MAAM,UAAU,cAAc,CAC5B,MAA+B,EAC/B,SAA6B,EAC7B,OAAyB;IAEzB,MAAM,OAAO,GAA+C,EAAE,CAAC;IAC/D,MAAM,kBAAkB,GAAiC,EAAE,CAAC;IAC5D,KAAK,MAAM,UAAU,IAAI,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC;QACpD,MAAM,KAAK,GAAG,MAAM,CAAC,UAAU,CAAC,CAAC;QACjC,IAAI,CAAC,oBAAoB,CAAC,KAAK,CAAC;YAAE,SAAS;QAC3C,MAAM,UAAU,GAAG,kBAAkB,CAAC,KAAK,CAAC,CAAC;QAC7C,OAAO,CAAC,IAAI,CAAC,EAAE,UAAU,EAAE,UAAU,EAAE,CAAC,CAAC;QACzC,kBAAkB,CAAC,IAAI,CAAC;YACtB,YAAY,EAAE,OAAO,CAAC,YAAY;YAClC,YAAY,EAAE,UAAU,CAAC,EAAE;YAC3B,IAAI,EAAE,UAAU,CAAC,IAAI;YACrB,MAAM,EAAE,SAAS,CAAC,IAAI;YACtB,UAAU;SACX,CAAC,CAAC;IACL,CAAC;IACD,OAAO;QACL,IAAI,EAAE,SAAS,CAAC,IAAI;QACpB,OAAO,EAAE,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC;QAC/B,kBAAkB,EAAE,MAAM,CAAC,MAAM,CAAC,kBAAkB,CAAC;KACtD,CAAC;AACJ,CAAC;AAED,SAAS,oBAAoB,CAAC,KAAc;IAC1C,IAAI,YAAY,CAAC,KAAK,CAAC;QAAE,OAAO,IAAI,CAAC;IACrC,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,KAAK,YAAY,IAAI,KAAK,CAAC,IAAI,KAAK,WAAW,CAAC;QAAE,OAAO,KAAK,CAAC;IAClG,OAAO,CACL,OAAO,KAAK,CAAC,EAAE,KAAK,QAAQ;QAC5B,QAAQ,CAAC,KAAK,CAAC,GAAG,CAAC;QACnB,KAAK,CAAC,GAAG,CAAC,IAAI,KAAK,KAAK,CAAC,IAAI;QAC7B,KAAK,CAAC,GAAG,CAAC,EAAE,KAAK,KAAK,CAAC,EAAE,CAC1B,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,iBAAiB,CAC/B,WAA2C,EAC3C,MAAc,EACd,OAAyB;IAEzB,OAAO;QACL,IAAI,EAAE,8BAA8B;QACpC,OAAO,EAAE,iCAAiC,WAAW,CAAC,MAAM,kBAAkB;QAC9E,YAAY,EAAE,OAAO,CAAC,YAAY;QAClC,MAAM;QACN,WAAW;KACZ,CAAC;AACJ,CAAC;AAED,SAAS,QAAQ,CAAC,KAAc;IAC9B,OAAO,KAAK,KAAK,IAAI,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;AAC9E,CAAC"}

package/dist/discovery/evaluator-child.d.ts

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=evaluator-child.d.ts.map

package/dist/discovery/evaluator-child.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"evaluator-child.d.ts","sourceRoot":"","sources":["../../src/discovery/evaluator-child.ts"],"names":[],"mappings":""}

package/dist/discovery/evaluator-child.js

@@ -0,0 +1,139 @@
+import { normalizeSourcePath } from "@relkit/contracts";
+import { EVALUATOR_DETECTOR_COVERAGE, EVALUATOR_PROTOCOL, EVALUATOR_PROTOCOL_VERSION, encodeEvaluatorFrame, isEvaluatorRequest, } from "./evaluator-protocol.js";
+import { relative, resolve } from "node:path";
+import { pathToFileURL } from "node:url";
+import { realpathSync } from "node:fs";
+import { installEvaluatorDetectors } from "./evaluator-detectors.js";
+import { sideEffectFailure, snapshotModule } from "./evaluator-child-utils.js";
+if (import.meta.main) {
+    const response = await evaluateFromStdin();
+    process.stdout.write(encodeEvaluatorFrame(response));
+    process.exitCode = response.status === "ok" ? 0 : 1;
+}
+async function evaluateFromStdin() {
+    let value;
+    try {
+        value = JSON.parse(await new Response(Bun.stdin).text());
+    }
+    catch (error) {
+        return failureResponse("unknown", false, requestFailure(error));
+    }
+    if (!isEvaluatorRequest(value)) {
+        return failureResponse("unknown", false, {
+            code: "RELKIT_EVALUATOR_REQUEST_INVALID",
+            message: "Evaluator request does not match the supported protocol.",
+            generationId: "unknown",
+        });
+    }
+    const request = value;
+    if (realpathSync(resolve(process.cwd())) !== realpathSync(resolve(request.projectRoot))) {
+        return failureResponse(request.generationId, request.sourceMaps, {
+            code: "RELKIT_EVALUATOR_ROOT_INVALID",
+            message: "Evaluator working directory does not match the requested project root.",
+            generationId: request.generationId,
+        });
+    }
+    return evaluateCandidates(request);
+}
+async function evaluateCandidates(request) {
+    const modules = [];
+    const failures = [];
+    let stdout = "";
+    let stderr = "";
+    for (const candidate of request.candidates) {
+        const result = await evaluateCandidate(candidate, request);
+        stdout += result.stdout;
+        stderr += result.stderr;
+        if (result.failure !== undefined)
+            failures.push(result.failure);
+        else if (result.module !== undefined)
+            modules.push(result.module);
+    }
+    return response(request, modules, failures, stdout, stderr);
+}
+async function evaluateCandidate(candidate, request) {
+    const file = normalizeCandidate(candidate.file, request.projectRoot);
+    const detector = installEvaluatorDetectors({
+        projectRoot: request.projectRoot,
+        generatedDirectory: resolve(request.projectRoot, request.generatedDirectory),
+        networkAllowlist: request.networkAllowlist,
+    });
+    try {
+        let module;
+        try {
+            module = (await import(`${pathToFileURL(file).href}?relkit_generation=${request.generationId}`));
+        }
+        catch (error) {
+            const report = detector.finish();
+            return {
+                module: undefined,
+                failure: report.sideEffects.length > 0
+                    ? sideEffectFailure(report.sideEffects, candidate.file, request)
+                    : importFailure(error, candidate.file, request),
+                stdout: report.stdout,
+                stderr: report.stderr,
+            };
+        }
+        const report = detector.finish();
+        if (report.sideEffects.length > 0) {
+            return {
+                module: undefined,
+                failure: sideEffectFailure(report.sideEffects, candidate.file, request),
+                stdout: report.stdout,
+                stderr: report.stderr,
+            };
+        }
+        return { module: snapshotModule(module, candidate, request), failure: undefined, ...report };
+    }
+    finally {
+        detector.restore();
+    }
+}
+function normalizeCandidate(file, projectRoot) {
+    const relativeFile = normalizeSourcePath(file, projectRoot);
+    const absolute = resolve(projectRoot, relativeFile);
+    const outside = relative(projectRoot, absolute);
+    if (outside.startsWith("..") || outside.includes("/../")) {
+        throw new Error("Candidate file must remain inside the project root.");
+    }
+    return absolute;
+}
+function importFailure(error, module, request) {
+    return {
+        code: "RELKIT_EVALUATOR_IMPORT_FAILED",
+        message: error instanceof Error ? error.message : String(error),
+        generationId: request.generationId,
+        module,
+        ...(error instanceof Error && error.stack
+            ? { stack: normalizeStack(error.stack, request.projectRoot) }
+            : {}),
+    };
+}
+function requestFailure(error) {
+    return {
+        code: "RELKIT_EVALUATOR_REQUEST_INVALID",
+        message: error instanceof Error ? error.message : String(error),
+        generationId: "unknown",
+    };
+}
+function normalizeStack(stack, projectRoot) {
+    return stack.replaceAll(projectRoot.replaceAll("\\", "/"), "").replaceAll("\\", "/");
+}
+function failureResponse(generationId, sourceMaps, failure) {
+    return response({ generationId, sourceMaps }, [], [failure], "", "");
+}
+function response(request, modules, failures, stdout, stderr) {
+    return {
+        protocol: EVALUATOR_PROTOCOL,
+        version: EVALUATOR_PROTOCOL_VERSION,
+        generationId: request.generationId,
+        sourceMaps: request.sourceMaps,
+        detectorCoverage: EVALUATOR_DETECTOR_COVERAGE,
+        status: failures.length === 0 ? "ok" : "failed",
+        modules: Object.freeze([...modules]),
+        failures: Object.freeze([...failures]),
+        stdout,
+        stderr,
+    };
+}
+//# sourceMappingURL=evaluator-child.js.map

package/dist/discovery/evaluator-child.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"evaluator-child.js","sourceRoot":"","sources":["../../src/discovery/evaluator-child.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,mBAAmB,EAAE,MAAM,mBAAmB,CAAC;AACxD,OAAO,EACL,2BAA2B,EAC3B,kBAAkB,EAClB,0BAA0B,EAM1B,oBAAoB,EACpB,kBAAkB,GACnB,MAAM,yBAAyB,CAAC;AACjC,OAAO,EAAE,QAAQ,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAC9C,OAAO,EAAE,aAAa,EAAE,MAAM,UAAU,CAAC;AACzC,OAAO,EAAE,YAAY,EAAE,MAAM,SAAS,CAAC;AACvC,OAAO,EAAE,yBAAyB,EAAE,MAAM,0BAA0B,CAAC;AACrE,OAAO,EAAE,iBAAiB,EAAE,cAAc,EAAE,MAAM,4BAA4B,CAAC;AAE/E,IAAI,MAAM,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC;IACrB,MAAM,QAAQ,GAAG,MAAM,iBAAiB,EAAE,CAAC;IAC3C,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,oBAAoB,CAAC,QAAQ,CAAC,CAAC,CAAC;IACrD,OAAO,CAAC,QAAQ,GAAG,QAAQ,CAAC,MAAM,KAAK,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;AACtD,CAAC;AAED,KAAK,UAAU,iBAAiB;IAC9B,IAAI,KAAc,CAAC;IACnB,IAAI,CAAC;QACH,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,IAAI,QAAQ,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC;IAC3D,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,OAAO,eAAe,CAAC,SAAS,EAAE,KAAK,EAAE,cAAc,CAAC,KAAK,CAAC,CAAC,CAAC;IAClE,CAAC;IACD,IAAI,CAAC,kBAAkB,CAAC,KAAK,CAAC,EAAE,CAAC;QAC/B,OAAO,eAAe,CAAC,SAAS,EAAE,KAAK,EAAE;YACvC,IAAI,EAAE,kCAAkC;YACxC,OAAO,EAAE,0DAA0D;YACnE,YAAY,EAAE,SAAS;SACxB,CAAC,CAAC;IACL,CAAC;IACD,MAAM,OAAO,GAAG,KAAK,CAAC;IACtB,IAAI,YAAY,CAAC,OAAO,CAAC,OAAO,CAAC,GAAG,EAAE,CAAC,CAAC,KAAK,YAAY,CAAC,OAAO,CAAC,OAAO,CAAC,WAAW,CAAC,CAAC,EAAE,CAAC;QACxF,OAAO,eAAe,CAAC,OAAO,CAAC,YAAY,EAAE,OAAO,CAAC,UAAU,EAAE;YAC/D,IAAI,EAAE,+BAA+B;YACrC,OAAO,EAAE,wEAAwE;YACjF,YAAY,EAAE,OAAO,CAAC,YAAY;SACnC,CAAC,CAAC;IACL,CAAC;IACD,OAAO,kBAAkB,CAAC,OAAO,CAAC,CAAC;AACrC,CAAC;AAED,KAAK,UAAU,kBAAkB,CAAC,OAAyB;IACzD,MAAM,OAAO,GAA4B,EAAE,CAAC;IAC5C,MAAM,QAAQ,GAAuB,EAAE,CAAC;IACxC,IAAI,MAAM,GAAG,EAAE,CAAC;IAChB,IAAI,MAAM,GAAG,EAAE,CAAC;IAChB,KAAK,MAAM,SAAS,IAAI,OAAO,CAAC,UAAU,EAAE,CAAC;QAC3C,MAAM,MAAM,GAAG,MAAM,iBAAiB,CAAC,SAAS,EAAE,OAAO,CAAC,CAAC;QAC3D,MAAM,IAAI,MAAM,CAAC,MAAM,CAAC;QACxB,MAAM,IAAI,MAAM,CAAC,MAAM,CAAC;QACxB,IAAI,MAAM,CAAC,OAAO,KAAK,SAAS;YAAE,QAAQ,CAAC,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;aAC3D,IAAI,MAAM,CAAC,MAAM,KAAK,SAAS;YAAE,OAAO,CAAC,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;IACpE,CAAC;IACD,OAAO,QAAQ,CAAC,OAAO,EAAE,OAAO,EAAE,QAAQ,EAAE,MAAM,EAAE,MAAM,CAAC,CAAC;AAC9D,CAAC;AASD,KAAK,UAAU,iBAAiB,CAC9B,SAA6B,EAC7B,OAAyB;IAEzB,MAAM,IAAI,GAAG,kBAAkB,CAAC,SAAS,CAAC,IAAI,EAAE,OAAO,CAAC,WAAW,CAAC,CAAC;IACrE,MAAM,QAAQ,GAAG,yBAAyB,CAAC;QACzC,WAAW,EAAE,OAAO,CAAC,WAAW;QAChC,kBAAkB,EAAE,OAAO,CAAC,OAAO,CAAC,WAAW,EAAE,OAAO,CAAC,kBAAkB,CAAC;QAC5E,gBAAgB,EAAE,OAAO,CAAC,gBAAgB;KAC3C,CAAC,CAAC;IACH,IAAI,CAAC;QACH,IAAI,MAA+B,CAAC;QACpC,IAAI,CAAC;YACH,MAAM,GAAG,CAAC,MAAM,MAAM,CACpB,GAAG,aAAa,CAAC,IAAI,CAAC,CAAC,IAAI,sBAAsB,OAAO,CAAC,YAAY,EAAE,CACxE,CAA4B,CAAC;QAChC,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,MAAM,MAAM,GAAG,QAAQ,CAAC,MAAM,EAAE,CAAC;YACjC,OAAO;gBACL,MAAM,EAAE,SAAS;gBACjB,OAAO,EACL,MAAM,CAAC,WAAW,CAAC,MAAM,GAAG,CAAC;oBAC3B,CAAC,CAAC,iBAAiB,CAAC,MAAM,CAAC,WAAW,EAAE,SAAS,CAAC,IAAI,EAAE,OAAO,CAAC;oBAChE,CAAC,CAAC,aAAa,CAAC,KAAK,EAAE,SAAS,CAAC,IAAI,EAAE,OAAO,CAAC;gBACnD,MAAM,EAAE,MAAM,CAAC,MAAM;gBACrB,MAAM,EAAE,MAAM,CAAC,MAAM;aACtB,CAAC;QACJ,CAAC;QACD,MAAM,MAAM,GAAG,QAAQ,CAAC,MAAM,EAAE,CAAC;QACjC,IAAI,MAAM,CAAC,WAAW,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YAClC,OAAO;gBACL,MAAM,EAAE,SAAS;gBACjB,OAAO,EAAE,iBAAiB,CAAC,MAAM,CAAC,WAAW,EAAE,SAAS,CAAC,IAAI,EAAE,OAAO,CAAC;gBACvE,MAAM,EAAE,MAAM,CAAC,MAAM;gBACrB,MAAM,EAAE,MAAM,CAAC,MAAM;aACtB,CAAC;QACJ,CAAC;QACD,OAAO,EAAE,MAAM,EAAE,cAAc,CAAC,MAAM,EAAE,SAAS,EAAE,OAAO,CAAC,EAAE,OAAO,EAAE,SAAS,EAAE,GAAG,MAAM,EAAE,CAAC;IAC/F,CAAC;YAAS,CAAC;QACT,QAAQ,CAAC,OAAO,EAAE,CAAC;IACrB,CAAC;AACH,CAAC;AAED,SAAS,kBAAkB,CAAC,IAAY,EAAE,WAAmB;IAC3D,MAAM,YAAY,GAAG,mBAAmB,CAAC,IAAI,EAAE,WAAW,CAAC,CAAC;IAC5D,MAAM,QAAQ,GAAG,OAAO,CAAC,WAAW,EAAE,YAAY,CAAC,CAAC;IACpD,MAAM,OAAO,GAAG,QAAQ,CAAC,WAAW,EAAE,QAAQ,CAAC,CAAC;IAChD,IAAI,OAAO,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAC,EAAE,CAAC;QACzD,MAAM,IAAI,KAAK,CAAC,qDAAqD,CAAC,CAAC;IACzE,CAAC;IACD,OAAO,QAAQ,CAAC;AAClB,CAAC;AAED,SAAS,aAAa,CACpB,KAAc,EACd,MAAc,EACd,OAAyB;IAEzB,OAAO;QACL,IAAI,EAAE,gCAAgC;QACtC,OAAO,EAAE,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC;QAC/D,YAAY,EAAE,OAAO,CAAC,YAAY;QAClC,MAAM;QACN,GAAG,CAAC,KAAK,YAAY,KAAK,IAAI,KAAK,CAAC,KAAK;YACvC,CAAC,CAAC,EAAE,KAAK,EAAE,cAAc,CAAC,KAAK,CAAC,KAAK,EAAE,OAAO,CAAC,WAAW,CAAC,EAAE;YAC7D,CAAC,CAAC,EAAE,CAAC;KACR,CAAC;AACJ,CAAC;AAED,SAAS,cAAc,CAAC,KAAc;IACpC,OAAO;QACL,IAAI,EAAE,kCAAkC;QACxC,OAAO,EAAE,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC;QAC/D,YAAY,EAAE,SAAS;KACxB,CAAC;AACJ,CAAC;AAED,SAAS,cAAc,CAAC,KAAa,EAAE,WAAmB;IACxD,OAAO,KAAK,CAAC,UAAU,CAAC,WAAW,CAAC,UAAU,CAAC,IAAI,EAAE,GAAG,CAAC,EAAE,EAAE,CAAC,CAAC,UAAU,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC;AACvF,CAAC;AAED,SAAS,eAAe,CACtB,YAAoB,EACpB,UAAmB,EACnB,OAAyB;IAEzB,OAAO,QAAQ,CAAC,EAAE,YAAY,EAAE,UAAU,EAAE,EAAE,EAAE,EAAE,CAAC,OAAO,CAAC,EAAE,EAAE,EAAE,EAAE,CAAC,CAAC;AACvE,CAAC;AAED,SAAS,QAAQ,CACf,OAA8D,EAC9D,OAAyC,EACzC,QAAqC,EACrC,MAAc,EACd,MAAc;IAEd,OAAO;QACL,QAAQ,EAAE,kBAAkB;QAC5B,OAAO,EAAE,0BAA0B;QACnC,YAAY,EAAE,OAAO,CAAC,YAAY;QAClC,UAAU,EAAE,OAAO,CAAC,UAAU;QAC9B,gBAAgB,EAAE,2BAA2B;QAC7C,MAAM,EAAE,QAAQ,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,QAAQ;QAC/C,OAAO,EAAE,MAAM,CAAC,MAAM,CAAC,CAAC,GAAG,OAAO,CAAC,CAAC;QACpC,QAAQ,EAAE,MAAM,CAAC,MAAM,CAAC,CAAC,GAAG,QAAQ,CAAC,CAAC;QACtC,MAAM;QACN,MAAM;KACP,CAAC;AACJ,CAAC"}

package/dist/discovery/evaluator-detector-files.d.ts

@@ -0,0 +1,9 @@
+import type { EvaluatorSideEffectKind } from "./evaluator-protocol.js";
+type Restore = () => void;
+type Violate = (kind: EvaluatorSideEffectKind, operation: string, target: string) => never;
+export declare function installFileDetectors(options: {
+    readonly projectRoot: string;
+    readonly generatedDirectory: string;
+}, restores: Restore[], violate: Violate): void;
+export {};
+//# sourceMappingURL=evaluator-detector-files.d.ts.map

package/dist/discovery/evaluator-detector-files.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"evaluator-detector-files.d.ts","sourceRoot":"","sources":["../../src/discovery/evaluator-detector-files.ts"],"names":[],"mappings":"AAGA,OAAO,KAAK,EAAE,uBAAuB,EAAE,MAAM,yBAAyB,CAAC;AAIvE,KAAK,OAAO,GAAG,MAAM,IAAI,CAAC;AAC1B,KAAK,OAAO,GAAG,CAAC,IAAI,EAAE,uBAAuB,EAAE,SAAS,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,KAAK,KAAK,CAAC;AA8B3F,wBAAgB,oBAAoB,CAClC,OAAO,EAAE;IAAE,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,kBAAkB,EAAE,MAAM,CAAA;CAAE,EAC9E,QAAQ,EAAE,OAAO,EAAE,EACnB,OAAO,EAAE,OAAO,GACf,IAAI,CAmBN"}

package/dist/discovery/evaluator-detector-files.js

@@ -0,0 +1,105 @@
+import fs from "node:fs";
+import { fileURLToPath } from "node:url";
+import { relative, resolve } from "node:path";
+const pathMethods = {
+    writeFile: [0],
+    writeFileSync: [0],
+    appendFile: [0],
+    appendFileSync: [0],
+    truncate: [0],
+    truncateSync: [0],
+    mkdir: [0],
+    mkdirSync: [0],
+    mkdtemp: [0],
+    mkdtempSync: [0],
+    rm: [0],
+    rmSync: [0],
+    rmdir: [0],
+    rmdirSync: [0],
+    unlink: [0],
+    unlinkSync: [0],
+    rename: [0, 1],
+    renameSync: [0, 1],
+    copyFile: [1],
+    copyFileSync: [1],
+    link: [1],
+    linkSync: [1],
+    symlink: [1],
+    symlinkSync: [1],
+    createWriteStream: [0],
+};
+export function installFileDetectors(options, restores, violate) {
+    const targets = [fs, (fs.promises ?? {})];
+    for (const target of targets) {
+        for (const [name, indices] of Object.entries(pathMethods)) {
+            patchPathMethod(target, name, indices, options, restores, violate);
+        }
+        patchOpen(target, options, restores, violate);
+    }
+    const bun = Bun;
+    if (typeof bun.write === "function") {
+        const original = bun.write;
+        bun.write = (...args) => {
+            guardPaths("Bun.write", [args[0]], options, violate);
+            return original(...args);
+        };
+        restores.push(() => {
+            bun.write = original;
+        });
+    }
+}
+function patchPathMethod(target, name, indices, options, restores, violate) {
+    const original = target[name];
+    if (typeof original !== "function")
+        return;
+    const method = original;
+    target[name] = function (...args) {
+        guardPaths(name, indices.map((index) => args[index]), options, violate);
+        return method.apply(this, args);
+    };
+    restores.push(() => {
+        target[name] = original;
+    });
+}
+function patchOpen(target, options, restores, violate) {
+    for (const name of ["open", "openSync"]) {
+        const original = target[name];
+        if (typeof original !== "function")
+            continue;
+        const method = original;
+        target[name] = function (...args) {
+            const flags = args[1];
+            if (typeof flags === "string" && /[wax+]/.test(flags)) {
+                guardPaths(name, [args[0]], options, violate);
+            }
+            return method.apply(this, args);
+        };
+        restores.push(() => {
+            target[name] = original;
+        });
+    }
+}
+function guardPaths(operation, values, options, violate) {
+    for (const value of values) {
+        const path = filePath(value);
+        if (path === undefined || isInside(path, options.generatedDirectory))
+            continue;
+        violate("write-outside-generated-sandbox", operation, displayPath(path, options.projectRoot));
+    }
+}
+function filePath(value) {
+    if (typeof value === "string")
+        return resolve(value);
+    if (value instanceof URL && value.protocol === "file:")
+        return fileURLToPath(value);
+    return undefined;
+}
+function isInside(path, generatedDirectory) {
+    const rest = relative(resolve(generatedDirectory), resolve(path));
+    return rest === "" || (!rest.startsWith("..") && !rest.startsWith("/"));
+}
+function displayPath(path, projectRoot) {
+    const projectRelative = relative(resolve(projectRoot), resolve(path));
+    return projectRelative === "" ? "." : projectRelative.replaceAll("\\", "/");
+}
+//# sourceMappingURL=evaluator-detector-files.js.map

package/dist/discovery/evaluator-detector-files.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"evaluator-detector-files.js","sourceRoot":"","sources":["../../src/discovery/evaluator-detector-files.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,SAAS,CAAC;AACzB,OAAO,EAAE,aAAa,EAAE,MAAM,UAAU,CAAC;AACzC,OAAO,EAAE,QAAQ,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAQ9C,MAAM,WAAW,GAAgD;IAC/D,SAAS,EAAE,CAAC,CAAC,CAAC;IACd,aAAa,EAAE,CAAC,CAAC,CAAC;IAClB,UAAU,EAAE,CAAC,CAAC,CAAC;IACf,cAAc,EAAE,CAAC,CAAC,CAAC;IACnB,QAAQ,EAAE,CAAC,CAAC,CAAC;IACb,YAAY,EAAE,CAAC,CAAC,CAAC;IACjB,KAAK,EAAE,CAAC,CAAC,CAAC;IACV,SAAS,EAAE,CAAC,CAAC,CAAC;IACd,OAAO,EAAE,CAAC,CAAC,CAAC;IACZ,WAAW,EAAE,CAAC,CAAC,CAAC;IAChB,EAAE,EAAE,CAAC,CAAC,CAAC;IACP,MAAM,EAAE,CAAC,CAAC,CAAC;IACX,KAAK,EAAE,CAAC,CAAC,CAAC;IACV,SAAS,EAAE,CAAC,CAAC,CAAC;IACd,MAAM,EAAE,CAAC,CAAC,CAAC;IACX,UAAU,EAAE,CAAC,CAAC,CAAC;IACf,MAAM,EAAE,CAAC,CAAC,EAAE,CAAC,CAAC;IACd,UAAU,EAAE,CAAC,CAAC,EAAE,CAAC,CAAC;IAClB,QAAQ,EAAE,CAAC,CAAC,CAAC;IACb,YAAY,EAAE,CAAC,CAAC,CAAC;IACjB,IAAI,EAAE,CAAC,CAAC,CAAC;IACT,QAAQ,EAAE,CAAC,CAAC,CAAC;IACb,OAAO,EAAE,CAAC,CAAC,CAAC;IACZ,WAAW,EAAE,CAAC,CAAC,CAAC;IAChB,iBAAiB,EAAE,CAAC,CAAC,CAAC;CACvB,CAAC;AAEF,MAAM,UAAU,oBAAoB,CAClC,OAA8E,EAC9E,QAAmB,EACnB,OAAgB;IAEhB,MAAM,OAAO,GAAG,CAAC,EAA8B,EAAE,CAAC,EAAE,CAAC,QAAQ,IAAI,EAAE,CAAkB,CAAC,CAAC;IACvF,KAAK,MAAM,MAAM,IAAI,OAAO,EAAE,CAAC;QAC7B,KAAK,MAAM,CAAC,IAAI,EAAE,OAAO,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,WAAW,CAAC,EAAE,CAAC;YAC1D,eAAe,CAAC,MAAM,EAAE,IAAI,EAAE,OAAO,EAAE,OAAO,EAAE,QAAQ,EAAE,OAAO,CAAC,CAAC;QACrE,CAAC;QACD,SAAS,CAAC,MAAM,EAAE,OAAO,EAAE,QAAQ,EAAE,OAAO,CAAC,CAAC;IAChD,CAAC;IACD,MAAM,GAAG,GAAG,GAA+B,CAAC;IAC5C,IAAI,OAAO,GAAG,CAAC,KAAK,KAAK,UAAU,EAAE,CAAC;QACpC,MAAM,QAAQ,GAAG,GAAG,CAAC,KAAwB,CAAC;QAC9C,GAAG,CAAC,KAAK,GAAG,CAAC,GAAG,IAAe,EAAE,EAAE;YACjC,UAAU,CAAC,WAAW,EAAE,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,OAAO,CAAC,CAAC;YACrD,OAAO,QAAQ,CAAC,GAAG,IAAI,CAAC,CAAC;QAC3B,CAAC,CAAC;QACF,QAAQ,CAAC,IAAI,CAAC,GAAG,EAAE;YACjB,GAAG,CAAC,KAAK,GAAG,QAAQ,CAAC;QACvB,CAAC,CAAC,CAAC;IACL,CAAC;AACH,CAAC;AAED,SAAS,eAAe,CACtB,MAAqB,EACrB,IAAY,EACZ,OAA0B,EAC1B,OAA8E,EAC9E,QAAmB,EACnB,OAAgB;IAEhB,MAAM,QAAQ,GAAG,MAAM,CAAC,IAAI,CAAC,CAAC;IAC9B,IAAI,OAAO,QAAQ,KAAK,UAAU;QAAE,OAAO;IAC3C,MAAM,MAAM,GAAG,QAA2B,CAAC;IAC3C,MAAM,CAAC,IAAI,CAAC,GAAG,UAAyB,GAAG,IAAe;QACxD,UAAU,CACR,IAAI,EACJ,OAAO,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,EACnC,OAAO,EACP,OAAO,CACR,CAAC;QACF,OAAO,MAAM,CAAC,KAAK,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;IAClC,CAAC,CAAC;IACF,QAAQ,CAAC,IAAI,CAAC,GAAG,EAAE;QACjB,MAAM,CAAC,IAAI,CAAC,GAAG,QAAQ,CAAC;IAC1B,CAAC,CAAC,CAAC;AACL,CAAC;AAED,SAAS,SAAS,CAChB,MAAqB,EACrB,OAA8E,EAC9E,QAAmB,EACnB,OAAgB;IAEhB,KAAK,MAAM,IAAI,IAAI,CAAC,MAAM,EAAE,UAAU,CAAC,EAAE,CAAC;QACxC,MAAM,QAAQ,GAAG,MAAM,CAAC,IAAI,CAAC,CAAC;QAC9B,IAAI,OAAO,QAAQ,KAAK,UAAU;YAAE,SAAS;QAC7C,MAAM,MAAM,GAAG,QAA2B,CAAC;QAC3C,MAAM,CAAC,IAAI,CAAC,GAAG,UAAyB,GAAG,IAAe;YACxD,MAAM,KAAK,GAAG,IAAI,CAAC,CAAC,CAAC,CAAC;YACtB,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,QAAQ,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC;gBACtD,UAAU,CAAC,IAAI,EAAE,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,OAAO,CAAC,CAAC;YAChD,CAAC;YACD,OAAO,MAAM,CAAC,KAAK,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;QAClC,CAAC,CAAC;QACF,QAAQ,CAAC,IAAI,CAAC,GAAG,EAAE;YACjB,MAAM,CAAC,IAAI,CAAC,GAAG,QAAQ,CAAC;QAC1B,CAAC,CAAC,CAAC;IACL,CAAC;AACH,CAAC;AAED,SAAS,UAAU,CACjB,SAAiB,EACjB,MAA0B,EAC1B,OAA8E,EAC9E,OAAgB;IAEhB,KAAK,MAAM,KAAK,IAAI,MAAM,EAAE,CAAC;QAC3B,MAAM,IAAI,GAAG,QAAQ,CAAC,KAAK,CAAC,CAAC;QAC7B,IAAI,IAAI,KAAK,SAAS,IAAI,QAAQ,CAAC,IAAI,EAAE,OAAO,CAAC,kBAAkB,CAAC;YAAE,SAAS;QAC/E,OAAO,CAAC,iCAAiC,EAAE,SAAS,EAAE,WAAW,CAAC,IAAI,EAAE,OAAO,CAAC,WAAW,CAAC,CAAC,CAAC;IAChG,CAAC;AACH,CAAC;AAED,SAAS,QAAQ,CAAC,KAAc;IAC9B,IAAI,OAAO,KAAK,KAAK,QAAQ;QAAE,OAAO,OAAO,CAAC,KAAK,CAAC,CAAC;IACrD,IAAI,KAAK,YAAY,GAAG,IAAI,KAAK,CAAC,QAAQ,KAAK,OAAO;QAAE,OAAO,aAAa,CAAC,KAAK,CAAC,CAAC;IACpF,OAAO,SAAS,CAAC;AACnB,CAAC;AAED,SAAS,QAAQ,CAAC,IAAY,EAAE,kBAA0B;IACxD,MAAM,IAAI,GAAG,QAAQ,CAAC,OAAO,CAAC,kBAAkB,CAAC,EAAE,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC;IAClE,OAAO,IAAI,KAAK,EAAE,IAAI,CAAC,CAAC,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC;AAC1E,CAAC;AAED,SAAS,WAAW,CAAC,IAAY,EAAE,WAAmB;IACpD,MAAM,eAAe,GAAG,QAAQ,CAAC,OAAO,CAAC,WAAW,CAAC,EAAE,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC;IACtE,OAAO,eAAe,KAAK,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,eAAe,CAAC,UAAU,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC;AAC9E,CAAC"}

package/dist/discovery/evaluator-detector-network.d.ts

@@ -0,0 +1,6 @@
+import type { EvaluatorSideEffectKind } from "./evaluator-protocol.js";
+type Restore = () => void;
+type Violate = (kind: EvaluatorSideEffectKind, operation: string, target: string) => never;
+export declare function installNetworkDetectors(allowlist: readonly string[], restores: Restore[], violate: Violate): void;
+export {};
+//# sourceMappingURL=evaluator-detector-network.d.ts.map

package/dist/discovery/evaluator-detector-network.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"evaluator-detector-network.d.ts","sourceRoot":"","sources":["../../src/discovery/evaluator-detector-network.ts"],"names":[],"mappings":"AAOA,OAAO,KAAK,EAAE,uBAAuB,EAAE,MAAM,yBAAyB,CAAC;AAIvE,KAAK,OAAO,GAAG,MAAM,IAAI,CAAC;AAC1B,KAAK,OAAO,GAAG,CAAC,IAAI,EAAE,uBAAuB,EAAE,SAAS,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,KAAK,KAAK,CAAC;AAE3F,wBAAgB,uBAAuB,CACrC,SAAS,EAAE,SAAS,MAAM,EAAE,EAC5B,QAAQ,EAAE,OAAO,EAAE,EACnB,OAAO,EAAE,OAAO,GACf,IAAI,CAmFN"}

package/dist/discovery/evaluator-detector-network.js

@@ -0,0 +1,109 @@
+import childProcess from "node:child_process";
+import dgram from "node:dgram";
+import dns from "node:dns";
+import http from "node:http";
+import https from "node:https";
+import net from "node:net";
+import tls from "node:tls";
+export function installNetworkDetectors(allowlist, restores, violate) {
+    const bun = Bun;
+    for (const name of ["listen", "serve"])
+        patchReject(bun, name, "listening-socket", restores, violate);
+    for (const name of ["spawn", "spawnSync", "$"])
+        patchReject(bun, name, "child-process", restores, violate);
+    patchChecked(bun, "connect", "unapproved-network", allowlist, restores, violate);
+    patchGlobalNetwork(allowlist, restores, violate);
+    for (const name of ["spawn", "spawnSync", "exec", "execFile", "fork"])
+        patchReject(childProcess, name, "child-process", restores, violate);
+    for (const name of ["request", "get"])
+        patchChecked(http, name, "unapproved-network", allowlist, restores, violate);
+    for (const name of ["request", "get"])
+        patchChecked(https, name, "unapproved-network", allowlist, restores, violate);
+    patchChecked(tls, "connect", "unapproved-network", allowlist, restores, violate);
+    patchReject(net.Server.prototype, "listen", "listening-socket", restores, violate);
+    patchChecked(net, "connect", "unapproved-network", allowlist, restores, violate);
+    patchChecked(net, "createConnection", "unapproved-network", allowlist, restores, violate);
+    patchReject(dgram.Socket.prototype, "bind", "listening-socket", restores, violate);
+    patchChecked(dgram.Socket.prototype, "connect", "unapproved-network", allowlist, restores, violate);
+    for (const name of ["lookup", "resolve", "reverse"])
+        patchChecked(dns, name, "unapproved-network", allowlist, restores, violate);
+}
+function patchGlobalNetwork(allowlist, restores, violate) {
+    const globalRecord = globalThis;
+    patchChecked(globalRecord, "fetch", "unapproved-network", allowlist, restores, violate);
+    for (const name of ["WebSocket", "EventSource", "XMLHttpRequest"])
+        patchChecked(globalRecord, name, "unapproved-network", allowlist, restores, violate);
+}
+function patchReject(target, name, kind, restores, violate) {
+    const original = target[name];
+    if (typeof original !== "function")
+        return;
+    target[name] = function (...args) {
+        violate(kind, name, targetFor(kind, args));
+    };
+    restores.push(() => {
+        target[name] = original;
+    });
+}
+function patchChecked(target, name, kind, allowlist, restores, violate) {
+    const original = target[name];
+    if (typeof original !== "function")
+        return;
+    const method = original;
+    target[name] = function (...args) {
+        const targetValue = targetFor(kind, args);
+        if (!isAllowed(targetValue, allowlist)) {
+            violate(kind, name, targetValue);
+        }
+        return method.apply(this, args);
+    };
+    restores.push(() => {
+        target[name] = original;
+    });
+}
+function targetFor(kind, args) {
+    if (kind === "child-process")
+        return commandTarget(args);
+    if (kind === "listening-socket")
+        return "listener";
+    const first = args[0];
+    if (first instanceof URL)
+        return first.toString();
+    if (typeof first === "string")
+        return first;
+    if (isRecord(first)) {
+        if (typeof first.url === "string")
+            return first.url;
+        if (typeof first.hostname === "string")
+            return `${first.hostname}:${String(first.port ?? "")}`;
+        if (typeof first.host === "string")
+            return `${first.host}:${String(first.port ?? "")}`;
+    }
+    if (typeof first === "number")
+        return `${String(args[1] ?? "localhost")}:${first}`;
+    return "unknown";
+}
+function commandTarget(args) {
+    const first = args[0];
+    if (Array.isArray(first))
+        return first.map(String).join(" ");
+    if (typeof first === "string")
+        return first;
+    return "child-process";
+}
+function isAllowed(target, allowlist) {
+    if (allowlist.length === 0 || target === "unknown")
+        return false;
+    if (allowlist.includes(target))
+        return true;
+    try {
+        return allowlist.includes(new URL(target).hostname);
+    }
+    catch {
+        return allowlist.includes(target.split(":", 1)[0] ?? target);
+    }
+}
+function isRecord(value) {
+    return value !== null && typeof value === "object" && !Array.isArray(value);
+}
+//# sourceMappingURL=evaluator-detector-network.js.map

package/dist/discovery/evaluator-detector-network.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"evaluator-detector-network.js","sourceRoot":"","sources":["../../src/discovery/evaluator-detector-network.ts"],"names":[],"mappings":"AAAA,OAAO,YAAY,MAAM,oBAAoB,CAAC;AAC9C,OAAO,KAAK,MAAM,YAAY,CAAC;AAC/B,OAAO,GAAG,MAAM,UAAU,CAAC;AAC3B,OAAO,IAAI,MAAM,WAAW,CAAC;AAC7B,OAAO,KAAK,MAAM,YAAY,CAAC;AAC/B,OAAO,GAAG,MAAM,UAAU,CAAC;AAC3B,OAAO,GAAG,MAAM,UAAU,CAAC;AAQ3B,MAAM,UAAU,uBAAuB,CACrC,SAA4B,EAC5B,QAAmB,EACnB,OAAgB;IAEhB,MAAM,GAAG,GAAG,GAA+B,CAAC;IAC5C,KAAK,MAAM,IAAI,IAAI,CAAC,QAAQ,EAAE,OAAO,CAAC;QACpC,WAAW,CAAC,GAAG,EAAE,IAAI,EAAE,kBAAkB,EAAE,QAAQ,EAAE,OAAO,CAAC,CAAC;IAChE,KAAK,MAAM,IAAI,IAAI,CAAC,OAAO,EAAE,WAAW,EAAE,GAAG,CAAC;QAC5C,WAAW,CAAC,GAAG,EAAE,IAAI,EAAE,eAAe,EAAE,QAAQ,EAAE,OAAO,CAAC,CAAC;IAC7D,YAAY,CAAC,GAAG,EAAE,SAAS,EAAE,oBAAoB,EAAE,SAAS,EAAE,QAAQ,EAAE,OAAO,CAAC,CAAC;IACjF,kBAAkB,CAAC,SAAS,EAAE,QAAQ,EAAE,OAAO,CAAC,CAAC;IACjD,KAAK,MAAM,IAAI,IAAI,CAAC,OAAO,EAAE,WAAW,EAAE,MAAM,EAAE,UAAU,EAAE,MAAM,CAAC;QACnE,WAAW,CAAC,YAAwC,EAAE,IAAI,EAAE,eAAe,EAAE,QAAQ,EAAE,OAAO,CAAC,CAAC;IAClG,KAAK,MAAM,IAAI,IAAI,CAAC,SAAS,EAAE,KAAK,CAAC;QACnC,YAAY,CACV,IAAgC,EAChC,IAAI,EACJ,oBAAoB,EACpB,SAAS,EACT,QAAQ,EACR,OAAO,CACR,CAAC;IACJ,KAAK,MAAM,IAAI,IAAI,CAAC,SAAS,EAAE,KAAK,CAAC;QACnC,YAAY,CACV,KAAiC,EACjC,IAAI,EACJ,oBAAoB,EACpB,SAAS,EACT,QAAQ,EACR,OAAO,CACR,CAAC;IACJ,YAAY,CACV,GAA+B,EAC/B,SAAS,EACT,oBAAoB,EACpB,SAAS,EACT,QAAQ,EACR,OAAO,CACR,CAAC;IACF,WAAW,CACT,GAAG,CAAC,MAAM,CAAC,SAAqC,EAChD,QAAQ,EACR,kBAAkB,EAClB,QAAQ,EACR,OAAO,CACR,CAAC;IACF,YAAY,CACV,GAA+B,EAC/B,SAAS,EACT,oBAAoB,EACpB,SAAS,EACT,QAAQ,EACR,OAAO,CACR,CAAC;IACF,YAAY,CACV,GAA+B,EAC/B,kBAAkB,EAClB,oBAAoB,EACpB,SAAS,EACT,QAAQ,EACR,OAAO,CACR,CAAC;IACF,WAAW,CACT,KAAK,CAAC,MAAM,CAAC,SAAqC,EAClD,MAAM,EACN,kBAAkB,EAClB,QAAQ,EACR,OAAO,CACR,CAAC;IACF,YAAY,CACV,KAAK,CAAC,MAAM,CAAC,SAAqC,EAClD,SAAS,EACT,oBAAoB,EACpB,SAAS,EACT,QAAQ,EACR,OAAO,CACR,CAAC;IACF,KAAK,MAAM,IAAI,IAAI,CAAC,QAAQ,EAAE,SAAS,EAAE,SAAS,CAAC;QACjD,YAAY,CACV,GAA+B,EAC/B,IAAI,EACJ,oBAAoB,EACpB,SAAS,EACT,QAAQ,EACR,OAAO,CACR,CAAC;AACN,CAAC;AAED,SAAS,kBAAkB,CACzB,SAA4B,EAC5B,QAAmB,EACnB,OAAgB;IAEhB,MAAM,YAAY,GAAG,UAAsC,CAAC;IAC5D,YAAY,CAAC,YAAY,EAAE,OAAO,EAAE,oBAAoB,EAAE,SAAS,EAAE,QAAQ,EAAE,OAAO,CAAC,CAAC;IACxF,KAAK,MAAM,IAAI,IAAI,CAAC,WAAW,EAAE,aAAa,EAAE,gBAAgB,CAAC;QAC/D,YAAY,CAAC,YAAY,EAAE,IAAI,EAAE,oBAAoB,EAAE,SAAS,EAAE,QAAQ,EAAE,OAAO,CAAC,CAAC;AACzF,CAAC;AAED,SAAS,WAAW,CAClB,MAAqB,EACrB,IAAY,EACZ,IAA6B,EAC7B,QAAmB,EACnB,OAAgB;IAEhB,MAAM,QAAQ,GAAG,MAAM,CAAC,IAAI,CAAC,CAAC;IAC9B,IAAI,OAAO,QAAQ,KAAK,UAAU;QAAE,OAAO;IAC3C,MAAM,CAAC,IAAI,CAAC,GAAG,UAAU,GAAG,IAAe;QACzC,OAAO,CAAC,IAAI,EAAE,IAAI,EAAE,SAAS,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC,CAAC;IAC7C,CAAC,CAAC;IACF,QAAQ,CAAC,IAAI,CAAC,GAAG,EAAE;QACjB,MAAM,CAAC,IAAI,CAAC,GAAG,QAAQ,CAAC;IAC1B,CAAC,CAAC,CAAC;AACL,CAAC;AAED,SAAS,YAAY,CACnB,MAAqB,EACrB,IAAY,EACZ,IAA6B,EAC7B,SAA4B,EAC5B,QAAmB,EACnB,OAAgB;IAEhB,MAAM,QAAQ,GAAG,MAAM,CAAC,IAAI,CAAC,CAAC;IAC9B,IAAI,OAAO,QAAQ,KAAK,UAAU;QAAE,OAAO;IAC3C,MAAM,MAAM,GAAG,QAA2B,CAAC;IAC3C,MAAM,CAAC,IAAI,CAAC,GAAG,UAAyB,GAAG,IAAe;QACxD,MAAM,WAAW,GAAG,SAAS,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;QAC1C,IAAI,CAAC,SAAS,CAAC,WAAW,EAAE,SAAS,CAAC,EAAE,CAAC;YACvC,OAAO,CAAC,IAAI,EAAE,IAAI,EAAE,WAAW,CAAC,CAAC;QACnC,CAAC;QACD,OAAO,MAAM,CAAC,KAAK,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;IAClC,CAAC,CAAC;IACF,QAAQ,CAAC,IAAI,CAAC,GAAG,EAAE;QACjB,MAAM,CAAC,IAAI,CAAC,GAAG,QAAQ,CAAC;IAC1B,CAAC,CAAC,CAAC;AACL,CAAC;AAED,SAAS,SAAS,CAAC,IAA6B,EAAE,IAAwB;IACxE,IAAI,IAAI,KAAK,eAAe;QAAE,OAAO,aAAa,CAAC,IAAI,CAAC,CAAC;IACzD,IAAI,IAAI,KAAK,kBAAkB;QAAE,OAAO,UAAU,CAAC;IACnD,MAAM,KAAK,GAAG,IAAI,CAAC,CAAC,CAAC,CAAC;IACtB,IAAI,KAAK,YAAY,GAAG;QAAE,OAAO,KAAK,CAAC,QAAQ,EAAE,CAAC;IAClD,IAAI,OAAO,KAAK,KAAK,QAAQ;QAAE,OAAO,KAAK,CAAC;IAC5C,IAAI,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC;QACpB,IAAI,OAAO,KAAK,CAAC,GAAG,KAAK,QAAQ;YAAE,OAAO,KAAK,CAAC,GAAG,CAAC;QACpD,IAAI,OAAO,KAAK,CAAC,QAAQ,KAAK,QAAQ;YAAE,OAAO,GAAG,KAAK,CAAC,QAAQ,IAAI,MAAM,CAAC,KAAK,CAAC,IAAI,IAAI,EAAE,CAAC,EAAE,CAAC;QAC/F,IAAI,OAAO,KAAK,CAAC,IAAI,KAAK,QAAQ;YAAE,OAAO,GAAG,KAAK,CAAC,IAAI,IAAI,MAAM,CAAC,KAAK,CAAC,IAAI,IAAI,EAAE,CAAC,EAAE,CAAC;IACzF,CAAC;IACD,IAAI,OAAO,KAAK,KAAK,QAAQ;QAAE,OAAO,GAAG,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,WAAW,CAAC,IAAI,KAAK,EAAE,CAAC;IACnF,OAAO,SAAS,CAAC;AACnB,CAAC;AAED,SAAS,aAAa,CAAC,IAAwB;IAC7C,MAAM,KAAK,GAAG,IAAI,CAAC,CAAC,CAAC,CAAC;IACtB,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC;QAAE,OAAO,KAAK,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IAC7D,IAAI,OAAO,KAAK,KAAK,QAAQ;QAAE,OAAO,KAAK,CAAC;IAC5C,OAAO,eAAe,CAAC;AACzB,CAAC;AAED,SAAS,SAAS,CAAC,MAAc,EAAE,SAA4B;IAC7D,IAAI,SAAS,CAAC,MAAM,KAAK,CAAC,IAAI,MAAM,KAAK,SAAS;QAAE,OAAO,KAAK,CAAC;IACjE,IAAI,SAAS,CAAC,QAAQ,CAAC,MAAM,CAAC;QAAE,OAAO,IAAI,CAAC;IAC5C,IAAI,CAAC;QACH,OAAO,SAAS,CAAC,QAAQ,CAAC,IAAI,GAAG,CAAC,MAAM,CAAC,CAAC,QAAQ,CAAC,CAAC;IACtD,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,SAAS,CAAC,QAAQ,CAAC,MAAM,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,MAAM,CAAC,CAAC;IAC/D,CAAC;AACH,CAAC;AAED,SAAS,QAAQ,CAAC,KAAc;IAC9B,OAAO,KAAK,KAAK,IAAI,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;AAC9E,CAAC"}

package/dist/discovery/evaluator-detector-timers.d.ts

@@ -0,0 +1,9 @@
+type Restore = () => void;
+export interface TimerRecord {
+    readonly kind: "setTimeout" | "setInterval" | "setImmediate";
+    readonly cancel: () => void;
+}
+export declare function installTimers(timersByHandle: Map<unknown, TimerRecord>, restores: Restore[]): void;
+export declare function installOutput(restores: Restore[], capture: (stream: "stdout" | "stderr", value: string) => void): void;
+export {};
+//# sourceMappingURL=evaluator-detector-timers.d.ts.map

package/dist/discovery/evaluator-detector-timers.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"evaluator-detector-timers.d.ts","sourceRoot":"","sources":["../../src/discovery/evaluator-detector-timers.ts"],"names":[],"mappings":"AAIA,KAAK,OAAO,GAAG,MAAM,IAAI,CAAC;AAE1B,MAAM,WAAW,WAAW;IAC1B,QAAQ,CAAC,IAAI,EAAE,YAAY,GAAG,aAAa,GAAG,cAAc,CAAC;IAC7D,QAAQ,CAAC,MAAM,EAAE,MAAM,IAAI,CAAC;CAC7B;AAED,wBAAgB,aAAa,CAC3B,cAAc,EAAE,GAAG,CAAC,OAAO,EAAE,WAAW,CAAC,EACzC,QAAQ,EAAE,OAAO,EAAE,GAClB,IAAI,CAUN;AAmED,wBAAgB,aAAa,CAC3B,QAAQ,EAAE,OAAO,EAAE,EACnB,OAAO,EAAE,CAAC,MAAM,EAAE,QAAQ,GAAG,QAAQ,EAAE,KAAK,EAAE,MAAM,KAAK,IAAI,GAC5D,IAAI,CAoCN"}

package/dist/discovery/evaluator-detector-timers.js

@@ -0,0 +1,105 @@
+import timers from "node:timers";
+export function installTimers(timersByHandle, restores) {
+    const targets = [globalThis, timers];
+    for (const target of targets) {
+        patchTimer(target, "setTimeout", "setTimeout", timersByHandle, restores);
+        patchTimer(target, "setInterval", "setInterval", timersByHandle, restores);
+        patchTimer(target, "setImmediate", "setImmediate", timersByHandle, restores);
+        patchClear(target, "clearTimeout", timersByHandle, restores);
+        patchClear(target, "clearInterval", timersByHandle, restores);
+        patchClear(target, "clearImmediate", timersByHandle, restores);
+    }
+}
+function patchTimer(target, name, kind, timersByHandle, restores) {
+    const original = target[name];
+    if (typeof original !== "function")
+        return;
+    const schedule = original;
+    replace(target, name, function (...args) {
+        let handle;
+        const callback = args[0];
+        const wrapped = typeof callback === "function"
+            ? (...callbackArgs) => {
+                if (kind !== "setInterval")
+                    timersByHandle.delete(handle);
+                return callback(...callbackArgs);
+            }
+            : callback;
+        handle = schedule.apply(this, [wrapped, ...args.slice(1)]);
+        timersByHandle.set(handle, {
+            kind,
+            cancel: () => scheduleClear(target, kind, handle),
+        });
+        return handle;
+    }, restores);
+}
+function patchClear(target, name, timersByHandle, restores) {
+    const original = target[name];
+    if (typeof original !== "function")
+        return;
+    const clear = original;
+    replace(target, name, function (handle) {
+        timersByHandle.delete(handle);
+        return clear.apply(this, [handle]);
+    }, restores);
+}
+function scheduleClear(target, kind, handle) {
+    const name = kind === "setInterval"
+        ? "clearInterval"
+        : kind === "setImmediate"
+            ? "clearImmediate"
+            : "clearTimeout";
+    const clear = target[name];
+    if (typeof clear === "function")
+        clear.call(target, handle);
+}
+export function installOutput(restores, capture) {
+    const processRecord = process;
+    for (const [name, stream] of [
+        ["stdout", "stdout"],
+        ["stderr", "stderr"],
+    ]) {
+        const output = processRecord[name];
+        if (output === null || typeof output !== "object")
+            continue;
+        const streamRecord = output;
+        if (typeof streamRecord.write === "function") {
+            replace(streamRecord, "write", function (chunk, ...args) {
+                capture(stream, textValue(chunk));
+                const callback = args.at(-1);
+                if (typeof callback === "function")
+                    callback(null);
+                return true;
+            }, restores);
+        }
+    }
+    const consoleRecord = console;
+    for (const name of ["log", "info", "debug", "warn", "error", "trace", "dir", "table"]) {
+        if (typeof consoleRecord[name] !== "function")
+            continue;
+        replace(consoleRecord, name, (...args) => {
+            const stream = name === "warn" || name === "error" ? "stderr" : "stdout";
+            capture(stream, `${args.map(textValue).join(" ")}\n`);
+        }, restores);
+    }
+}
+function replace(target, name, replacement, restores) {
+    const original = target[name];
+    target[name] = replacement;
+    restores.push(() => {
+        target[name] = original;
+    });
+}
+function textValue(value) {
+    if (typeof value === "string")
+        return value;
+    if (value instanceof Uint8Array)
+        return new TextDecoder().decode(value);
+    try {
+        return String(value);
+    }
+    catch {
+        return "[unprintable]";
+    }
+}
+//# sourceMappingURL=evaluator-detector-timers.js.map

package/dist/discovery/evaluator-detector-timers.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"evaluator-detector-timers.js","sourceRoot":"","sources":["../../src/discovery/evaluator-detector-timers.ts"],"names":[],"mappings":"AAAA,OAAO,MAAM,MAAM,aAAa,CAAC;AAWjC,MAAM,UAAU,aAAa,CAC3B,cAAyC,EACzC,QAAmB;IAEnB,MAAM,OAAO,GAAG,CAAC,UAAsC,EAAE,MAAkC,CAAC,CAAC;IAC7F,KAAK,MAAM,MAAM,IAAI,OAAO,EAAE,CAAC;QAC7B,UAAU,CAAC,MAAM,EAAE,YAAY,EAAE,YAAY,EAAE,cAAc,EAAE,QAAQ,CAAC,CAAC;QACzE,UAAU,CAAC,MAAM,EAAE,aAAa,EAAE,aAAa,EAAE,cAAc,EAAE,QAAQ,CAAC,CAAC;QAC3E,UAAU,CAAC,MAAM,EAAE,cAAc,EAAE,cAAc,EAAE,cAAc,EAAE,QAAQ,CAAC,CAAC;QAC7E,UAAU,CAAC,MAAM,EAAE,cAAc,EAAE,cAAc,EAAE,QAAQ,CAAC,CAAC;QAC7D,UAAU,CAAC,MAAM,EAAE,eAAe,EAAE,cAAc,EAAE,QAAQ,CAAC,CAAC;QAC9D,UAAU,CAAC,MAAM,EAAE,gBAAgB,EAAE,cAAc,EAAE,QAAQ,CAAC,CAAC;IACjE,CAAC;AACH,CAAC;AAED,SAAS,UAAU,CACjB,MAAqB,EACrB,IAAY,EACZ,IAAyB,EACzB,cAAyC,EACzC,QAAmB;IAEnB,MAAM,QAAQ,GAAG,MAAM,CAAC,IAAI,CAAC,CAAC;IAC9B,IAAI,OAAO,QAAQ,KAAK,UAAU;QAAE,OAAO;IAC3C,MAAM,QAAQ,GAAG,QAA2B,CAAC;IAC7C,OAAO,CACL,MAAM,EACN,IAAI,EACJ,UAAyB,GAAG,IAAe;QACzC,IAAI,MAAe,CAAC;QACpB,MAAM,QAAQ,GAAG,IAAI,CAAC,CAAC,CAAC,CAAC;QACzB,MAAM,OAAO,GACX,OAAO,QAAQ,KAAK,UAAU;YAC5B,CAAC,CAAC,CAAC,GAAG,YAAuB,EAAE,EAAE;gBAC7B,IAAI,IAAI,KAAK,aAAa;oBAAE,cAAc,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;gBAC1D,OAAO,QAAQ,CAAC,GAAG,YAAY,CAAC,CAAC;YACnC,CAAC;YACH,CAAC,CAAC,QAAQ,CAAC;QACf,MAAM,GAAG,QAAQ,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC,OAAO,EAAE,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;QAC3D,cAAc,CAAC,GAAG,CAAC,MAAM,EAAE;YACzB,IAAI;YACJ,MAAM,EAAE,GAAG,EAAE,CAAC,aAAa,CAAC,MAAM,EAAE,IAAI,EAAE,MAAM,CAAC;SAClD,CAAC,CAAC;QACH,OAAO,MAAM,CAAC;IAChB,CAAC,EACD,QAAQ,CACT,CAAC;AACJ,CAAC;AAED,SAAS,UAAU,CACjB,MAAqB,EACrB,IAAY,EACZ,cAAyC,EACzC,QAAmB;IAEnB,MAAM,QAAQ,GAAG,MAAM,CAAC,IAAI,CAAC,CAAC;IAC9B,IAAI,OAAO,QAAQ,KAAK,UAAU;QAAE,OAAO;IAC3C,MAAM,KAAK,GAAG,QAA2B,CAAC;IAC1C,OAAO,CACL,MAAM,EACN,IAAI,EACJ,UAAyB,MAAe;QACtC,cAAc,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;QAC9B,OAAO,KAAK,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC,MAAM,CAAC,CAAC,CAAC;IACrC,CAAC,EACD,QAAQ,CACT,CAAC;AACJ,CAAC;AAED,SAAS,aAAa,CAAC,MAAqB,EAAE,IAAyB,EAAE,MAAe;IACtF,MAAM,IAAI,GACR,IAAI,KAAK,aAAa;QACpB,CAAC,CAAC,eAAe;QACjB,CAAC,CAAC,IAAI,KAAK,cAAc;YACvB,CAAC,CAAC,gBAAgB;YAClB,CAAC,CAAC,cAAc,CAAC;IACvB,MAAM,KAAK,GAAG,MAAM,CAAC,IAAI,CAAC,CAAC;IAC3B,IAAI,OAAO,KAAK,KAAK,UAAU;QAAE,KAAK,CAAC,IAAI,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;AAC9D,CAAC;AAED,MAAM,UAAU,aAAa,CAC3B,QAAmB,EACnB,OAA6D;IAE7D,MAAM,aAAa,GAAG,OAAmC,CAAC;IAC1D,KAAK,MAAM,CAAC,IAAI,EAAE,MAAM,CAAC,IAAI;QAC3B,CAAC,QAAQ,EAAE,QAAQ,CAAC;QACpB,CAAC,QAAQ,EAAE,QAAQ,CAAC;KACZ,EAAE,CAAC;QACX,MAAM,MAAM,GAAG,aAAa,CAAC,IAAI,CAAC,CAAC;QACnC,IAAI,MAAM,KAAK,IAAI,IAAI,OAAO,MAAM,KAAK,QAAQ;YAAE,SAAS;QAC5D,MAAM,YAAY,GAAG,MAAuB,CAAC;QAC7C,IAAI,OAAO,YAAY,CAAC,KAAK,KAAK,UAAU,EAAE,CAAC;YAC7C,OAAO,CACL,YAAY,EACZ,OAAO,EACP,UAAyB,KAAc,EAAE,GAAG,IAAe;gBACzD,OAAO,CAAC,MAAM,EAAE,SAAS,CAAC,KAAK,CAAC,CAAC,CAAC;gBAClC,MAAM,QAAQ,GAAG,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC;gBAC7B,IAAI,OAAO,QAAQ,KAAK,UAAU;oBAAE,QAAQ,CAAC,IAAI,CAAC,CAAC;gBACnD,OAAO,IAAI,CAAC;YACd,CAAC,EACD,QAAQ,CACT,CAAC;QACJ,CAAC;IACH,CAAC;IACD,MAAM,aAAa,GAAG,OAAmC,CAAC;IAC1D,KAAK,MAAM,IAAI,IAAI,CAAC,KAAK,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,OAAO,CAAC,EAAE,CAAC;QACtF,IAAI,OAAO,aAAa,CAAC,IAAI,CAAC,KAAK,UAAU;YAAE,SAAS;QACxD,OAAO,CACL,aAAa,EACb,IAAI,EACJ,CAAC,GAAG,IAAe,EAAE,EAAE;YACrB,MAAM,MAAM,GAAG,IAAI,KAAK,MAAM,IAAI,IAAI,KAAK,OAAO,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,QAAQ,CAAC;YACzE,OAAO,CAAC,MAAM,EAAE,GAAG,IAAI,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;QACxD,CAAC,EACD,QAAQ,CACT,CAAC;IACJ,CAAC;AACH,CAAC;AAED,SAAS,OAAO,CACd,MAAqB,EACrB,IAAY,EACZ,WAA4B,EAC5B,QAAmB;IAEnB,MAAM,QAAQ,GAAG,MAAM,CAAC,IAAI,CAAC,CAAC;IAC9B,MAAM,CAAC,IAAI,CAAC,GAAG,WAAW,CAAC;IAC3B,QAAQ,CAAC,IAAI,CAAC,GAAG,EAAE;QACjB,MAAM,CAAC,IAAI,CAAC,GAAG,QAAQ,CAAC;IAC1B,CAAC,CAAC,CAAC;AACL,CAAC;AAED,SAAS,SAAS,CAAC,KAAc;IAC/B,IAAI,OAAO,KAAK,KAAK,QAAQ;QAAE,OAAO,KAAK,CAAC;IAC5C,IAAI,KAAK,YAAY,UAAU;QAAE,OAAO,IAAI,WAAW,EAAE,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;IACxE,IAAI,CAAC;QACH,OAAO,MAAM,CAAC,KAAK,CAAC,CAAC;IACvB,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,eAAe,CAAC;IACzB,CAAC;AACH,CAAC"}

package/dist/discovery/evaluator-detectors.d.ts

@@ -0,0 +1,18 @@
+import type { EvaluatorSideEffect } from "./evaluator-protocol.js";
+export interface EvaluatorDetectorOptions {
+    readonly projectRoot: string;
+    readonly generatedDirectory: string;
+    readonly networkAllowlist: readonly string[];
+}
+export interface EvaluatorDetectorReport {
+    readonly sideEffects: readonly EvaluatorSideEffect[];
+    readonly stdout: string;
+    readonly stderr: string;
+}
+export interface EvaluatorDetectorSession {
+    finish(): EvaluatorDetectorReport;
+    restore(): void;
+}
+/** Installs best-effort hooks for one candidate and restores them before framing. */
+export declare function installEvaluatorDetectors(options: EvaluatorDetectorOptions): EvaluatorDetectorSession;
+//# sourceMappingURL=evaluator-detectors.d.ts.map

package/dist/discovery/evaluator-detectors.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"evaluator-detectors.d.ts","sourceRoot":"","sources":["../../src/discovery/evaluator-detectors.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,mBAAmB,EAA2B,MAAM,yBAAyB,CAAC;AAO5F,MAAM,WAAW,wBAAwB;IACvC,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;IAC7B,QAAQ,CAAC,kBAAkB,EAAE,MAAM,CAAC;IACpC,QAAQ,CAAC,gBAAgB,EAAE,SAAS,MAAM,EAAE,CAAC;CAC9C;AAED,MAAM,WAAW,uBAAuB;IACtC,QAAQ,CAAC,WAAW,EAAE,SAAS,mBAAmB,EAAE,CAAC;IACrD,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;CACzB;AAED,MAAM,WAAW,wBAAwB;IACvC,MAAM,IAAI,uBAAuB,CAAC;IAClC,OAAO,IAAI,IAAI,CAAC;CACjB;AAED,qFAAqF;AACrF,wBAAgB,yBAAyB,CACvC,OAAO,EAAE,wBAAwB,GAChC,wBAAwB,CA8C1B"}