@rulvar/planner 1.36.0 → 1.38.0

package/dist/{compile-BtCY9wfO.js → compile-BOStPCrA.js}

@@ -164,6 +164,42 @@ function scanImports(source, blanked, allowImports) {
 	}
 	return diagnostics;
 }
+const CODEGEN_WORD = /\b(eval|Function)\b/g;
+const CONSTRUCTOR_ACCESS = /\.\s*constructor\b/g;
+/**
+* Rejects dynamic code generation. `eval` and the Function constructor
+* compile attacker supplied text in a fresh scope where the import
+* expression, ambient time, and host capability are back in reach, so
+* banning `import` while allowing `new Function("return import(x)")` closes
+* nothing. `.constructor` access is the same vector by another name: every
+* function value exposes the Function constructor as its `.constructor`
+* ((function(){}).constructor === Function). Literals and comments are
+* blanked before the scan, so a banned word inside a string never matches;
+* the identifier form (not just calls) is rejected because a captured
+* reference (`const f = Function`) is the trivial workaround.
+*/
+function scanCodegen(source, blanked) {
+	const diagnostics = [];
+	for (let match = CODEGEN_WORD.exec(blanked); match !== null; match = CODEGEN_WORD.exec(blanked)) {
+		const at = positionAt(source, match.index);
+		if (match[1] === "eval") diagnostics.push({
+			ruleId: "no-eval",
+			message: "eval is not part of the sandbox dialect; dynamically generated code reopens the import allowlist and the ambient capability surface the dialect closes",
+			...at
+		});
+		else diagnostics.push({
+			ruleId: "no-function-constructor",
+			message: "the Function constructor is not part of the sandbox dialect; it compiles arbitrary code that bypasses the import allowlist (use only the curated globals)",
+			...at
+		});
+	}
+	for (let match = CONSTRUCTOR_ACCESS.exec(blanked); match !== null; match = CONSTRUCTOR_ACCESS.exec(blanked)) diagnostics.push({
+		ruleId: "no-constructor-access",
+		message: ".constructor access is not part of the sandbox dialect; it reaches the Function constructor from any function value and reopens dynamic code generation",
+		...positionAt(source, match.index)
+	});
+	return diagnostics;
+}
 /**
 * Validates and compiles planner-generated source into a CompiledWorkflow.
 * The source is an async function body over the sandbox
@@ -180,6 +216,7 @@ function compileScript(source, o) {
 	}] } });
 	const blanked = blankLiterals(source);
 	diagnostics.push(...scanImports(source, blanked, allowImports));
+	diagnostics.push(...scanCodegen(source, blanked));
 	try {
 		new AsyncFunctionCtor(...SANDBOX_GLOBALS, source);
 	} catch (error) {

package/dist/index.js

@@ -1,4 +1,4 @@
-import { n as compileScript, r as scriptDiagnosticsOf, t as SANDBOX_GLOBALS } from "./compile-BtCY9wfO.js";
+import { n as compileScript, r as scriptDiagnosticsOf, t as SANDBOX_GLOBALS } from "./compile-BOStPCrA.js";
 import { ConfigError, InMemoryStore, SANDBOX_AGENT_OPT_KEYS, SandboxError, ScriptRejected, createEngine, createSandboxBridge, defineWorkflow, readRunMeta, toJournalValue } from "@rulvar/core";
 import { createHash } from "node:crypto";
 import { Linter } from "eslint";

package/dist/sandbox-worker.js

@@ -1,4 +1,4 @@
-import { t as SANDBOX_GLOBALS } from "./compile-BtCY9wfO.js";
+import { t as SANDBOX_GLOBALS } from "./compile-BOStPCrA.js";
 import { NonSerializableValueError, toJournalValue } from "@rulvar/core";
 import { createHash } from "node:crypto";
 import { parentPort } from "node:worker_threads";
@@ -135,6 +135,8 @@ function main(port, init) {
 	Math.random = shimRandom;
 	Reflect.set(globalThis, "fetch", void 0);
 	Reflect.set(globalThis, "process", void 0);
+	Reflect.set(globalThis, "eval", void 0);
+	Reflect.set(globalThis, "Function", void 0);
 	const sandboxGlobals = {
 		agent: (prompt, opts) => callHost("agent", {
 			prompt,

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@rulvar/planner",
-  "version": "1.36.0",
+  "version": "1.38.0",
   "description": "Rulvar flagship hybrid mode: plan agent, compileScript, WorkerSandboxRunner, self-repair loop.",
   "type": "module",
   "license": "Apache-2.0",
@@ -23,14 +23,14 @@
   },
   "dependencies": {
     "eslint": "^9.39.4",
-    "@rulvar/core": "1.36.0",
-    "eslint-plugin-rulvar": "1.36.0"
+    "eslint-plugin-rulvar": "1.38.0",
+    "@rulvar/core": "1.38.0"
   },
   "devDependencies": {
     "@types/node": "^22.20.0",
     "tsdown": "^0.22.3",
     "typescript": "~6.0.3",
-    "@rulvar/testing": "1.36.0"
+    "@rulvar/testing": "1.38.0"
   },
   "repository": {
     "type": "git",