@securecode-ai/mcp 0.5.5 → 0.5.7

package/dist/utils/testCommandPolicy.js

@@ -0,0 +1,252 @@
+"use strict";
+/**
+ * Test command policy — strict validation for existing-test mode of run_tests.
+ *
+ * Allows only known package-manager test commands (npm/pnpm/yarn/bun test,
+ * pytest) with optional file/pattern arguments. Rejects shell operators,
+ * arbitrary executables, lifecycle commands other than test, absolute paths
+ * outside the workspace, and path traversal.
+ *
+ * Security rules:
+ *   - No shell operators (&&, ||, ;, |, >, <, $(), backticks)
+ *   - Only the `test` lifecycle command (no build/install/publish/run/exec)
+ *   - No --shell/--script-shell escape flags
+ *   - All file paths workspace-confined via resolveWorkspacePath
+ *   - Output is a validated executable + args array (never a shell string)
+ */
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __setModuleDefault = (this && this.__setModuleDefault) || (Object.create ? (function(o, v) {
+    Object.defineProperty(o, "default", { enumerable: true, value: v });
+}) : function(o, v) {
+    o["default"] = v;
+});
+var __importStar = (this && this.__importStar) || (function () {
+    var ownKeys = function(o) {
+        ownKeys = Object.getOwnPropertyNames || function (o) {
+            var ar = [];
+            for (var k in o) if (Object.prototype.hasOwnProperty.call(o, k)) ar[ar.length] = k;
+            return ar;
+        };
+        return ownKeys(o);
+    };
+    return function (mod) {
+        if (mod && mod.__esModule) return mod;
+        var result = {};
+        if (mod != null) for (var k = ownKeys(mod), i = 0; i < k.length; i++) if (k[i] !== "default") __createBinding(result, mod, k[i]);
+        __setModuleDefault(result, mod);
+        return result;
+    };
+})();
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.validateTestCommand = validateTestCommand;
+exports.formatValidatedCommand = formatValidatedCommand;
+const path = __importStar(require("path"));
+const files_1 = require("./files");
+const SUPPORTED_PMS = ['npm', 'pnpm', 'yarn', 'bun', 'pytest'];
+const SHELL_OPERATORS = ['&&', '||', ';', '|', '>', '<', '$(', '`', '>&', '<&'];
+const BLOCKED_FLAGS = new Set([
+    '--shell', '--script-shell', '--foreground-scripts', '--no-shell',
+    '-S', '--bash', '--sh', '--cmd', '--exec', '--host',
+]);
+const NPM_TEST_SUBCOMMANDS = new Set(['test', 't', 'tst']);
+const NPM_FORBIDDEN_SUBCOMMANDS = new Set([
+    'run', 'run-script', 'exec', 'x', 'install', 'i', 'add', 'isntall',
+    'uninstall', 'r', 'rm', 'publish', 'unpublish', 'build', 'rebuild',
+    'start', 'stop', 'restart', 'pack', 'ci', 'fund', 'link', 'unlink',
+    'create', 'init', 'hook', 'org', 'team', 'token', 'owner', 'access',
+    'dist-tag', 'version', 'deprecate', 'profile', 'config', 'cache',
+    'clean-install', 'ci-install', 'force-clean-install',
+]);
+const MAX_PATTERN_LENGTH = 200;
+const MAX_FILES = 50;
+const DEFAULT_TIMEOUT_MS = 60_000;
+const MAX_TIMEOUT_MS = 300_000;
+function isWorkspaceRelative(p) {
+    if (!p)
+        return false;
+    if (path.isAbsolute(p))
+        return false;
+    if (p.includes('..'))
+        return false;
+    if (p.startsWith('~'))
+        return false;
+    return true;
+}
+function isSafeFilePath(p, workspaceRoot) {
+    if (!isWorkspaceRelative(p))
+        return false;
+    try {
+        (0, files_1.resolveWorkspacePath)(workspaceRoot, p);
+        return true;
+    }
+    catch {
+        return false;
+    }
+}
+function containsShellOperators(s) {
+    return SHELL_OPERATORS.some(op => s.includes(op));
+}
+function normalizePackageManager(pm) {
+    const lower = (pm || '').toLowerCase();
+    return SUPPORTED_PMS.includes(lower) ? lower : null;
+}
+function validateTimeoutMs(timeoutMs) {
+    if (timeoutMs === undefined || timeoutMs === null)
+        return DEFAULT_TIMEOUT_MS;
+    const n = Number(timeoutMs);
+    if (!Number.isFinite(n) || n <= 0)
+        return DEFAULT_TIMEOUT_MS;
+    return Math.min(Math.floor(n), MAX_TIMEOUT_MS);
+}
+function buildNpmArgs(testFiles, testPattern) {
+    const args = ['test'];
+    if (testFiles.length > 0 || testPattern) {
+        args.push('--');
+        if (testPattern)
+            args.push(testPattern);
+        for (const f of testFiles)
+            args.push(f);
+    }
+    return args;
+}
+function buildPnpmArgs(testFiles, testPattern) {
+    const args = ['test'];
+    if (testFiles.length > 0 || testPattern) {
+        args.push('--');
+        if (testPattern)
+            args.push(testPattern);
+        for (const f of testFiles)
+            args.push(f);
+    }
+    return args;
+}
+function buildYarnArgs(testFiles, testPattern) {
+    const args = ['test'];
+    if (testPattern)
+        args.push(testPattern);
+    for (const f of testFiles)
+        args.push(f);
+    return args;
+}
+function buildBunArgs(testFiles, testPattern) {
+    const args = ['test'];
+    if (testPattern)
+        args.push(testPattern);
+    for (const f of testFiles)
+        args.push(f);
+    return args;
+}
+function buildPytestArgs(testFiles, testPattern) {
+    const args = [];
+    if (testPattern)
+        args.push('-k', testPattern);
+    for (const f of testFiles)
+        args.push(f);
+    return args;
+}
+function detectSubcommand(arg) {
+    if (NPM_TEST_SUBCOMMANDS.has(arg))
+        return 'test';
+    if (NPM_FORBIDDEN_SUBCOMMANDS.has(arg))
+        return arg;
+    return null;
+}
+function validateTestCommand(input, workspaceRoot) {
+    const pm = input.packageManager
+        ? normalizePackageManager(input.packageManager)
+        : null;
+    if (input.packageManager && !pm) {
+        return { ok: false, error: `Unsupported package manager: ${input.packageManager}. Supported: ${SUPPORTED_PMS.join(', ')}` };
+    }
+    const testFilesRaw = Array.isArray(input.testFiles) ? input.testFiles : [];
+    if (testFilesRaw.length > MAX_FILES) {
+        return { ok: false, error: `Too many test files (max ${MAX_FILES})` };
+    }
+    const testPattern = input.testPattern;
+    if (testPattern !== undefined && testPattern !== null) {
+        if (typeof testPattern !== 'string') {
+            return { ok: false, error: 'testPattern must be a string' };
+        }
+        if (testPattern.length > MAX_PATTERN_LENGTH) {
+            return { ok: false, error: `testPattern too long (max ${MAX_PATTERN_LENGTH} chars)` };
+        }
+        if (containsShellOperators(testPattern)) {
+            return { ok: false, error: `testPattern contains forbidden shell operators` };
+        }
+    }
+    const testFiles = [];
+    for (const f of testFilesRaw) {
+        if (typeof f !== 'string' || f.length === 0) {
+            return { ok: false, error: 'testFiles must be non-empty strings' };
+        }
+        if (containsShellOperators(f)) {
+            return { ok: false, error: `test file path contains forbidden shell operators: ${f}` };
+        }
+        if (!isSafeFilePath(f, workspaceRoot)) {
+            return { ok: false, error: `test file path is outside workspace or unsafe: ${f}` };
+        }
+        testFiles.push(f.replace(/\\/g, '/'));
+    }
+    const timeoutMs = validateTimeoutMs(input.timeoutMs);
+    const packageManager = pm || 'npm';
+    let executable;
+    let args;
+    switch (packageManager) {
+        case 'npm':
+            executable = 'npm';
+            args = buildNpmArgs(testFiles, testPattern);
+            break;
+        case 'pnpm':
+            executable = 'pnpm';
+            args = buildPnpmArgs(testFiles, testPattern);
+            break;
+        case 'yarn':
+            executable = 'yarn';
+            args = buildYarnArgs(testFiles, testPattern);
+            break;
+        case 'bun':
+            executable = 'bun';
+            args = buildBunArgs(testFiles, testPattern);
+            break;
+        case 'pytest':
+            executable = 'pytest';
+            args = buildPytestArgs(testFiles, testPattern);
+            break;
+        default:
+            return { ok: false, error: `Unhandled package manager: ${packageManager}` };
+    }
+    for (const a of args) {
+        if (BLOCKED_FLAGS.has(a)) {
+            return { ok: false, error: `Forbidden flag in test command: ${a}` };
+        }
+    }
+    const sub = detectSubcommand(args[0] || '');
+    if (sub && sub !== 'test') {
+        return { ok: false, error: `Forbidden npm subcommand: ${sub}. Only "test" is allowed.` };
+    }
+    return {
+        ok: true,
+        command: {
+            packageManager,
+            executable,
+            args,
+            cwd: workspaceRoot,
+            selectedFiles: testFiles,
+            timeoutMs,
+        },
+    };
+}
+function formatValidatedCommand(cmd) {
+    return `${cmd.executable} ${cmd.args.join(' ')}`;
+}
+//# sourceMappingURL=testCommandPolicy.js.map

package/dist/utils/testCommandPolicy.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"testCommandPolicy.js","sourceRoot":"","sources":["../../src/utils/testCommandPolicy.ts"],"names":[],"mappings":";AAAA;;;;;;;;;;;;;;GAcG;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAgIH,kDAoGC;AAED,wDAEC;AAtOD,2CAA6B;AAC7B,mCAA+C;AAmB/C,MAAM,aAAa,GAAyB,CAAC,KAAK,EAAE,MAAM,EAAE,MAAM,EAAE,KAAK,EAAE,QAAQ,CAAC,CAAC;AAErF,MAAM,eAAe,GAAG,CAAC,IAAI,EAAE,IAAI,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,IAAI,EAAE,GAAG,EAAE,IAAI,EAAE,IAAI,CAAC,CAAC;AAEhF,MAAM,aAAa,GAAG,IAAI,GAAG,CAAC;IAC1B,SAAS,EAAE,gBAAgB,EAAE,sBAAsB,EAAE,YAAY;IACjE,IAAI,EAAE,QAAQ,EAAE,MAAM,EAAE,OAAO,EAAE,QAAQ,EAAE,QAAQ;CACtD,CAAC,CAAC;AAEH,MAAM,oBAAoB,GAAG,IAAI,GAAG,CAAC,CAAC,MAAM,EAAE,GAAG,EAAE,KAAK,CAAC,CAAC,CAAC;AAE3D,MAAM,yBAAyB,GAAG,IAAI,GAAG,CAAC;IACtC,KAAK,EAAE,YAAY,EAAE,MAAM,EAAE,GAAG,EAAE,SAAS,EAAE,GAAG,EAAE,KAAK,EAAE,SAAS;IAClE,WAAW,EAAE,GAAG,EAAE,IAAI,EAAE,SAAS,EAAE,WAAW,EAAE,OAAO,EAAE,SAAS;IAClE,OAAO,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,QAAQ;IAClE,QAAQ,EAAE,MAAM,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,OAAO,EAAE,OAAO,EAAE,QAAQ;IACnE,UAAU,EAAE,SAAS,EAAE,WAAW,EAAE,SAAS,EAAE,QAAQ,EAAE,OAAO;IAChE,eAAe,EAAE,YAAY,EAAE,qBAAqB;CACvD,CAAC,CAAC;AAEH,MAAM,kBAAkB,GAAG,GAAG,CAAC;AAC/B,MAAM,SAAS,GAAG,EAAE,CAAC;AACrB,MAAM,kBAAkB,GAAG,MAAM,CAAC;AAClC,MAAM,cAAc,GAAG,OAAO,CAAC;AAE/B,SAAS,mBAAmB,CAAC,CAAS;IAClC,IAAI,CAAC,CAAC;QAAE,OAAO,KAAK,CAAC;IACrB,IAAI,IAAI,CAAC,UAAU,CAAC,CAAC,CAAC;QAAE,OAAO,KAAK,CAAC;IACrC,IAAI,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC;QAAE,OAAO,KAAK,CAAC;IACnC,IAAI,CAAC,CAAC,UAAU,CAAC,GAAG,CAAC;QAAE,OAAO,KAAK,CAAC;IACpC,OAAO,IAAI,CAAC;AAChB,CAAC;AAED,SAAS,cAAc,CAAC,CAAS,EAAE,aAAqB;IACpD,IAAI,CAAC,mBAAmB,CAAC,CAAC,CAAC;QAAE,OAAO,KAAK,CAAC;IAC1C,IAAI,CAAC;QACD,IAAA,4BAAoB,EAAC,aAAa,EAAE,CAAC,CAAC,CAAC;QACvC,OAAO,IAAI,CAAC;IAChB,CAAC;IAAC,MAAM,CAAC;QACL,OAAO,KAAK,CAAC;IACjB,CAAC;AACL,CAAC;AAED,SAAS,sBAAsB,CAAC,CAAS;IACrC,OAAO,eAAe,CAAC,IAAI,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,CAAC;AACtD,CAAC;AAED,SAAS,uBAAuB,CAAC,EAAU;IACvC,MAAM,KAAK,GAAG,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,WAAW,EAAE,CAAC;IACvC,OAAO,aAAa,CAAC,QAAQ,CAAC,KAA2B,CAAC,CAAC,CAAC,CAAE,KAA4B,CAAC,CAAC,CAAC,IAAI,CAAC;AACtG,CAAC;AAED,SAAS,iBAAiB,CAAC,SAAc;IACrC,IAAI,SAAS,KAAK,SAAS,IAAI,SAAS,KAAK,IAAI;QAAE,OAAO,kBAAkB,CAAC;IAC7E,MAAM,CAAC,GAAG,MAAM,CAAC,SAAS,CAAC,CAAC;IAC5B,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC;QAAE,OAAO,kBAAkB,CAAC;IAC7D,OAAO,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,cAAc,CAAC,CAAC;AACnD,CAAC;AAED,SAAS,YAAY,CAAC,SAAmB,EAAE,WAA+B;IACtE,MAAM,IAAI,GAAG,CAAC,MAAM,CAAC,CAAC;IACtB,IAAI,SAAS,CAAC,MAAM,GAAG,CAAC,IAAI,WAAW,EAAE,CAAC;QACtC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAChB,IAAI,WAAW;YAAE,IAAI,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC;QACxC,KAAK,MAAM,CAAC,IAAI,SAAS;YAAE,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAC5C,CAAC;IACD,OAAO,IAAI,CAAC;AAChB,CAAC;AAED,SAAS,aAAa,CAAC,SAAmB,EAAE,WAA+B;IACvE,MAAM,IAAI,GAAG,CAAC,MAAM,CAAC,CAAC;IACtB,IAAI,SAAS,CAAC,MAAM,GAAG,CAAC,IAAI,WAAW,EAAE,CAAC;QACtC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAChB,IAAI,WAAW;YAAE,IAAI,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC;QACxC,KAAK,MAAM,CAAC,IAAI,SAAS;YAAE,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAC5C,CAAC;IACD,OAAO,IAAI,CAAC;AAChB,CAAC;AAED,SAAS,aAAa,CAAC,SAAmB,EAAE,WAA+B;IACvE,MAAM,IAAI,GAAG,CAAC,MAAM,CAAC,CAAC;IACtB,IAAI,WAAW;QAAE,IAAI,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC;IACxC,KAAK,MAAM,CAAC,IAAI,SAAS;QAAE,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IACxC,OAAO,IAAI,CAAC;AAChB,CAAC;AAED,SAAS,YAAY,CAAC,SAAmB,EAAE,WAA+B;IACtE,MAAM,IAAI,GAAG,CAAC,MAAM,CAAC,CAAC;IACtB,IAAI,WAAW;QAAE,IAAI,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC;IACxC,KAAK,MAAM,CAAC,IAAI,SAAS;QAAE,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IACxC,OAAO,IAAI,CAAC;AAChB,CAAC;AAED,SAAS,eAAe,CAAC,SAAmB,EAAE,WAA+B;IACzE,MAAM,IAAI,GAAa,EAAE,CAAC;IAC1B,IAAI,WAAW;QAAE,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,WAAW,CAAC,CAAC;IAC9C,KAAK,MAAM,CAAC,IAAI,SAAS;QAAE,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IACxC,OAAO,IAAI,CAAC;AAChB,CAAC;AAED,SAAS,gBAAgB,CAAC,GAAW;IACjC,IAAI,oBAAoB,CAAC,GAAG,CAAC,GAAG,CAAC;QAAE,OAAO,MAAM,CAAC;IACjD,IAAI,yBAAyB,CAAC,GAAG,CAAC,GAAG,CAAC;QAAE,OAAO,GAAG,CAAC;IACnD,OAAO,IAAI,CAAC;AAChB,CAAC;AAED,SAAgB,mBAAmB,CAC/B,KAKC,EACD,aAAqB;IAErB,MAAM,EAAE,GAAG,KAAK,CAAC,cAAc;QAC3B,CAAC,CAAC,uBAAuB,CAAC,KAAK,CAAC,cAAc,CAAC;QAC/C,CAAC,CAAC,IAAI,CAAC;IACX,IAAI,KAAK,CAAC,cAAc,IAAI,CAAC,EAAE,EAAE,CAAC;QAC9B,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,gCAAgC,KAAK,CAAC,cAAc,gBAAgB,aAAa,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,EAAE,CAAC;IAChI,CAAC;IAED,MAAM,YAAY,GAAG,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC;IAC3E,IAAI,YAAY,CAAC,MAAM,GAAG,SAAS,EAAE,CAAC;QAClC,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,4BAA4B,SAAS,GAAG,EAAE,CAAC;IAC1E,CAAC;IAED,MAAM,WAAW,GAAG,KAAK,CAAC,WAAW,CAAC;IACtC,IAAI,WAAW,KAAK,SAAS,IAAI,WAAW,KAAK,IAAI,EAAE,CAAC;QACpD,IAAI,OAAO,WAAW,KAAK,QAAQ,EAAE,CAAC;YAClC,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,8BAA8B,EAAE,CAAC;QAChE,CAAC;QACD,IAAI,WAAW,CAAC,MAAM,GAAG,kBAAkB,EAAE,CAAC;YAC1C,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,6BAA6B,kBAAkB,SAAS,EAAE,CAAC;QAC1F,CAAC;QACD,IAAI,sBAAsB,CAAC,WAAW,CAAC,EAAE,CAAC;YACtC,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,gDAAgD,EAAE,CAAC;QAClF,CAAC;IACL,CAAC;IAED,MAAM,SAAS,GAAa,EAAE,CAAC;IAC/B,KAAK,MAAM,CAAC,IAAI,YAAY,EAAE,CAAC;QAC3B,IAAI,OAAO,CAAC,KAAK,QAAQ,IAAI,CAAC,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YAC1C,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,qCAAqC,EAAE,CAAC;QACvE,CAAC;QACD,IAAI,sBAAsB,CAAC,CAAC,CAAC,EAAE,CAAC;YAC5B,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,sDAAsD,CAAC,EAAE,EAAE,CAAC;QAC3F,CAAC;QACD,IAAI,CAAC,cAAc,CAAC,CAAC,EAAE,aAAa,CAAC,EAAE,CAAC;YACpC,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,kDAAkD,CAAC,EAAE,EAAE,CAAC;QACvF,CAAC;QACD,SAAS,CAAC,IAAI,CAAC,CAAC,CAAC,OAAO,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC,CAAC;IAC1C,CAAC;IAED,MAAM,SAAS,GAAG,iBAAiB,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC;IACrD,MAAM,cAAc,GAAG,EAAE,IAAI,KAAK,CAAC;IACnC,IAAI,UAAkB,CAAC;IACvB,IAAI,IAAc,CAAC;IAEnB,QAAQ,cAAc,EAAE,CAAC;QACrB,KAAK,KAAK;YACN,UAAU,GAAG,KAAK,CAAC;YACnB,IAAI,GAAG,YAAY,CAAC,SAAS,EAAE,WAAW,CAAC,CAAC;YAC5C,MAAM;QACV,KAAK,MAAM;YACP,UAAU,GAAG,MAAM,CAAC;YACpB,IAAI,GAAG,aAAa,CAAC,SAAS,EAAE,WAAW,CAAC,CAAC;YAC7C,MAAM;QACV,KAAK,MAAM;YACP,UAAU,GAAG,MAAM,CAAC;YACpB,IAAI,GAAG,aAAa,CAAC,SAAS,EAAE,WAAW,CAAC,CAAC;YAC7C,MAAM;QACV,KAAK,KAAK;YACN,UAAU,GAAG,KAAK,CAAC;YACnB,IAAI,GAAG,YAAY,CAAC,SAAS,EAAE,WAAW,CAAC,CAAC;YAC5C,MAAM;QACV,KAAK,QAAQ;YACT,UAAU,GAAG,QAAQ,CAAC;YACtB,IAAI,GAAG,eAAe,CAAC,SAAS,EAAE,WAAW,CAAC,CAAC;YAC/C,MAAM;QACV;YACI,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,8BAA8B,cAAc,EAAE,EAAE,CAAC;IACpF,CAAC;IAED,KAAK,MAAM,CAAC,IAAI,IAAI,EAAE,CAAC;QACnB,IAAI,aAAa,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC;YACvB,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,mCAAmC,CAAC,EAAE,EAAE,CAAC;QACxE,CAAC;IACL,CAAC;IAED,MAAM,GAAG,GAAG,gBAAgB,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC;IAC5C,IAAI,GAAG,IAAI,GAAG,KAAK,MAAM,EAAE,CAAC;QACxB,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,6BAA6B,GAAG,2BAA2B,EAAE,CAAC;IAC7F,CAAC;IAED,OAAO;QACH,EAAE,EAAE,IAAI;QACR,OAAO,EAAE;YACL,cAAc;YACd,UAAU;YACV,IAAI;YACJ,GAAG,EAAE,aAAa;YAClB,aAAa,EAAE,SAAS;YACxB,SAAS;SACZ;KACJ,CAAC;AACN,CAAC;AAED,SAAgB,sBAAsB,CAAC,GAAyB;IAC5D,OAAO,GAAG,GAAG,CAAC,UAAU,IAAI,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC;AACrD,CAAC"}

package/dist/utils/testRunner.d.ts

@@ -0,0 +1,56 @@
+/**
+ * Shared test runner — the core service for run_tests (both public MCP tool
+ * and agent action). Handles:
+ *   - Request validation
+ *   - Human approval (every execution, no exceptions)
+ *   - Sandbox execution via localTestRunner (generated) or runTestCommand (existing)
+ *   - Bounded, redacted output
+ *
+ * Security model:
+ *   - Approval is required before every execution — no batch grants, no timed grants.
+ *   - The approval hash binds to mode, command/script hash, runner, timeout, workspace.
+ *   - No execution occurs if approval is denied or times out.
+ *   - No host fallback when no sandbox is available.
+ */
+import { ApprovalBroker } from '../approval/broker';
+import { type ValidatedTestCommand } from './testCommandPolicy';
+export type RunTestsMode = 'existing' | 'generated';
+export interface RunTestsRequest {
+    mode: RunTestsMode;
+    testFiles?: string[];
+    testPattern?: string;
+    packageManager?: string;
+    script?: string;
+    runner?: string;
+    setupScript?: string;
+    timeoutMs?: number;
+}
+export type RunTestsStatus = 'passed' | 'failed' | 'error' | 'timeout' | 'blocked' | 'sandbox-unavailable' | 'denied';
+export interface RunTestsResult {
+    approved: boolean;
+    requestId?: string;
+    mode: RunTestsMode;
+    status: RunTestsStatus;
+    exitCode: number;
+    output: string;
+    backend?: string;
+    command?: {
+        executable: string;
+        args: string[];
+    };
+    durationMs: number;
+}
+export interface ValidationFailure {
+    ok: false;
+    error: string;
+}
+export declare function validateRunTestsRequest(req: RunTestsRequest, workspaceRoot: string): {
+    ok: true;
+    command?: ValidatedTestCommand;
+} | ValidationFailure;
+export declare function runTests(req: RunTestsRequest, workspaceRoot: string, options?: {
+    signal?: AbortSignal;
+    sandboxBackend?: any;
+    /** Skip approval — for agent executor internal use only when the broker is managed externally. */
+    broker?: ApprovalBroker;
+}): Promise<RunTestsResult>;

package/dist/utils/testRunner.js

@@ -0,0 +1,246 @@
+"use strict";
+/**
+ * Shared test runner — the core service for run_tests (both public MCP tool
+ * and agent action). Handles:
+ *   - Request validation
+ *   - Human approval (every execution, no exceptions)
+ *   - Sandbox execution via localTestRunner (generated) or runTestCommand (existing)
+ *   - Bounded, redacted output
+ *
+ * Security model:
+ *   - Approval is required before every execution — no batch grants, no timed grants.
+ *   - The approval hash binds to mode, command/script hash, runner, timeout, workspace.
+ *   - No execution occurs if approval is denied or times out.
+ *   - No host fallback when no sandbox is available.
+ */
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __setModuleDefault = (this && this.__setModuleDefault) || (Object.create ? (function(o, v) {
+    Object.defineProperty(o, "default", { enumerable: true, value: v });
+}) : function(o, v) {
+    o["default"] = v;
+});
+var __importStar = (this && this.__importStar) || (function () {
+    var ownKeys = function(o) {
+        ownKeys = Object.getOwnPropertyNames || function (o) {
+            var ar = [];
+            for (var k in o) if (Object.prototype.hasOwnProperty.call(o, k)) ar[ar.length] = k;
+            return ar;
+        };
+        return ownKeys(o);
+    };
+    return function (mod) {
+        if (mod && mod.__esModule) return mod;
+        var result = {};
+        if (mod != null) for (var k = ownKeys(mod), i = 0; i < k.length; i++) if (k[i] !== "default") __createBinding(result, mod, k[i]);
+        __setModuleDefault(result, mod);
+        return result;
+    };
+})();
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.validateRunTestsRequest = validateRunTestsRequest;
+exports.runTests = runTests;
+const crypto = __importStar(require("crypto"));
+const fs = __importStar(require("fs"));
+const path = __importStar(require("path"));
+const broker_1 = require("../approval/broker");
+const localTestRunner_1 = require("./localTestRunner");
+const testCommandPolicy_1 = require("./testCommandPolicy");
+const testSafety_1 = require("./testSafety");
+const MAX_SCRIPT_SIZE = 64 * 1024;
+const MAX_SETUP_SCRIPT_SIZE = 32 * 1024;
+const MAX_OUTPUT = 16 * 1024;
+const DEFAULT_TIMEOUT_MS = 60_000;
+const SAFE_RUNNERS = new Set(['node', 'tsx', 'bun', 'deno', 'python', 'python3']);
+function sha256Prefix(s) {
+    return crypto.createHash('sha256').update(s).digest('hex').substring(0, 16);
+}
+function hashWorkspaceFile(workspaceRoot, relPath) {
+    try {
+        const p = path.join(workspaceRoot, relPath);
+        if (!fs.existsSync(p))
+            return null;
+        const content = fs.readFileSync(p, 'utf8').slice(0, 65536);
+        return sha256Prefix(content);
+    }
+    catch {
+        return null;
+    }
+}
+function workspaceContentHash(workspaceRoot) {
+    const pkg = hashWorkspaceFile(workspaceRoot, 'package.json');
+    const lock = hashWorkspaceFile(workspaceRoot, 'package-lock.json')
+        || hashWorkspaceFile(workspaceRoot, 'pnpm-lock.yaml')
+        || hashWorkspaceFile(workspaceRoot, 'yarn.lock')
+        || hashWorkspaceFile(workspaceRoot, 'bun.lock')
+        || hashWorkspaceFile(workspaceRoot, 'requirements.txt')
+        || hashWorkspaceFile(workspaceRoot, 'pyproject.toml');
+    if (!pkg && !lock)
+        return null;
+    return `${pkg || 'none'}:${lock || 'none'}`;
+}
+function truncateOutput(s) {
+    if (s.length <= MAX_OUTPUT)
+        return s;
+    return s.slice(0, MAX_OUTPUT) + '\n… [truncated]';
+}
+function mapVerdict(verdict) {
+    switch (verdict) {
+        case 'pass': return 'passed';
+        case 'fail': return 'failed';
+        case 'error': return 'error';
+        case 'timeout': return 'timeout';
+        case 'blocked': return 'blocked';
+        case 'sandbox-unavailable': return 'sandbox-unavailable';
+        default: return 'error';
+    }
+}
+function validateRunTestsRequest(req, workspaceRoot) {
+    if (!req.mode || (req.mode !== 'existing' && req.mode !== 'generated')) {
+        return { ok: false, error: 'mode must be "existing" or "generated"' };
+    }
+    if (req.mode === 'existing') {
+        const result = (0, testCommandPolicy_1.validateTestCommand)({
+            packageManager: req.packageManager,
+            testFiles: req.testFiles,
+            testPattern: req.testPattern,
+            timeoutMs: req.timeoutMs,
+        }, workspaceRoot);
+        if (!result.ok)
+            return { ok: false, error: result.error };
+        return { ok: true, command: result.command };
+    }
+    // Generated mode
+    if (!req.script || req.script.trim().length === 0) {
+        return { ok: false, error: 'generated mode requires "script" (non-empty string)' };
+    }
+    if (req.script.length > MAX_SCRIPT_SIZE) {
+        return { ok: false, error: `script too large (max ${MAX_SCRIPT_SIZE} bytes, got ${req.script.length})` };
+    }
+    if (!req.runner || !SAFE_RUNNERS.has(req.runner)) {
+        return { ok: false, error: `runner must be one of: ${[...SAFE_RUNNERS].join(', ')}. Got: ${req.runner || '(none)'}` };
+    }
+    if (req.setupScript && req.setupScript.length > MAX_SETUP_SCRIPT_SIZE) {
+        return { ok: false, error: `setupScript too large (max ${MAX_SETUP_SCRIPT_SIZE} bytes)` };
+    }
+    const safety = (0, testSafety_1.checkTestSafety)(req.script, workspaceRoot);
+    if (!safety.allowed) {
+        return { ok: false, error: `script blocked by safety check: ${safety.reason}` };
+    }
+    if (req.setupScript) {
+        const setupSafety = (0, testSafety_1.checkTestSafety)(req.setupScript, workspaceRoot);
+        if (!setupSafety.allowed) {
+            return { ok: false, error: `setupScript blocked by safety check: ${setupSafety.reason}` };
+        }
+    }
+    return { ok: true };
+}
+function buildApprovalSummary(req, command) {
+    if (req.mode === 'existing' && command) {
+        const files = command.selectedFiles.length > 0
+            ? `\nFiles: ${command.selectedFiles.join(', ')}`
+            : '';
+        const pattern = req.testPattern ? `\nPattern: ${req.testPattern}` : '';
+        return `Run existing tests in sandbox\nCommand: ${(0, testCommandPolicy_1.formatValidatedCommand)(command)}\nTimeout: ${command.timeoutMs}ms${files}${pattern}`;
+    }
+    const setupInfo = req.setupScript ? `\nSetup script: ${req.setupScript.length} bytes` : '';
+    return `Run generated test script in sandbox\nRunner: ${req.runner}\nScript: ${req.script.length} bytes (hash ${sha256Prefix(req.script)})${setupInfo}\nTimeout: ${req.timeoutMs || DEFAULT_TIMEOUT_MS}ms`;
+}
+function buildOperationParts(req, command, workspaceRoot) {
+    const wsHash = workspaceContentHash(workspaceRoot);
+    if (req.mode === 'existing' && command) {
+        return [
+            req.mode,
+            command.executable,
+            command.args,
+            command.selectedFiles,
+            req.testPattern,
+            command.timeoutMs,
+            wsHash,
+        ];
+    }
+    return [
+        req.mode,
+        req.runner,
+        req.script ? sha256Prefix(req.script) : null,
+        req.setupScript ? sha256Prefix(req.setupScript) : null,
+        req.timeoutMs || DEFAULT_TIMEOUT_MS,
+        wsHash,
+    ];
+}
+async function runTests(req, workspaceRoot, options) {
+    const startTime = Date.now();
+    const validation = validateRunTestsRequest(req, workspaceRoot);
+    if (!validation.ok) {
+        return {
+            approved: false,
+            mode: req.mode,
+            status: 'denied',
+            exitCode: -1,
+            output: `Validation error: ${validation.error}`,
+            durationMs: Date.now() - startTime,
+        };
+    }
+    const command = validation.command;
+    const summary = buildApprovalSummary(req, command);
+    const operationParts = buildOperationParts(req, command, workspaceRoot);
+    const ownsBroker = !options?.broker;
+    const broker = options?.broker ?? new broker_1.ApprovalBroker();
+    if (ownsBroker)
+        await broker.start();
+    try {
+        const approval = await broker.requestApproval('securecode.run-tests', summary, operationParts, 60_000, 'paid-generation', workspaceRoot);
+        if (!approval.approved) {
+            return {
+                approved: false,
+                requestId: approval.requestId,
+                mode: req.mode,
+                status: 'denied',
+                exitCode: -1,
+                output: `Test execution ${approval.reason}.`,
+                durationMs: Date.now() - startTime,
+            };
+        }
+        let testResult;
+        if (req.mode === 'existing' && command) {
+            testResult = await (0, localTestRunner_1.runTestCommand)(command.executable, command.args, workspaceRoot, {
+                timeoutMs: command.timeoutMs,
+                signal: options?.signal,
+                sandboxBackend: options?.sandboxBackend,
+            });
+        }
+        else {
+            testResult = await (0, localTestRunner_1.runLocalTest)(req.script, req.runner, workspaceRoot, {
+                setupScript: req.setupScript || null,
+                timeoutMs: req.timeoutMs || DEFAULT_TIMEOUT_MS,
+                signal: options?.signal,
+                sandboxBackend: options?.sandboxBackend,
+            });
+        }
+        return {
+            approved: true,
+            requestId: approval.requestId,
+            mode: req.mode,
+            status: mapVerdict(testResult.verdict),
+            exitCode: testResult.exitCode,
+            output: truncateOutput(testResult.output),
+            backend: testResult.backend,
+            command: command ? { executable: command.executable, args: command.args } : undefined,
+            durationMs: Date.now() - startTime,
+        };
+    }
+    finally {
+        if (ownsBroker)
+            await broker.stop();
+    }
+}
+//# sourceMappingURL=testRunner.js.map

package/dist/utils/testRunner.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"testRunner.js","sourceRoot":"","sources":["../../src/utils/testRunner.ts"],"names":[],"mappings":";AAAA;;;;;;;;;;;;;GAaG;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAuGH,0DA0CC;AAqCD,4BA6FC;AAjRD,+CAAiC;AACjC,uCAAyB;AACzB,2CAA6B;AAC7B,+CAAoD;AACpD,uDAAuF;AACvF,2DAA6G;AAC7G,6CAA+C;AAE/C,MAAM,eAAe,GAAG,EAAE,GAAG,IAAI,CAAC;AAClC,MAAM,qBAAqB,GAAG,EAAE,GAAG,IAAI,CAAC;AACxC,MAAM,UAAU,GAAG,EAAE,GAAG,IAAI,CAAC;AAC7B,MAAM,kBAAkB,GAAG,MAAM,CAAC;AAElC,MAAM,YAAY,GAAG,IAAI,GAAG,CAAC,CAAC,MAAM,EAAE,KAAK,EAAE,KAAK,EAAE,MAAM,EAAE,QAAQ,EAAE,SAAS,CAAC,CAAC,CAAC;AAuClF,SAAS,YAAY,CAAC,CAAS;IAC3B,OAAO,MAAM,CAAC,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,SAAS,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;AAChF,CAAC;AAED,SAAS,iBAAiB,CAAC,aAAqB,EAAE,OAAe;IAC7D,IAAI,CAAC;QACD,MAAM,CAAC,GAAG,IAAI,CAAC,IAAI,CAAC,aAAa,EAAE,OAAO,CAAC,CAAC;QAC5C,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,CAAC,CAAC;YAAE,OAAO,IAAI,CAAC;QACnC,MAAM,OAAO,GAAG,EAAE,CAAC,YAAY,CAAC,CAAC,EAAE,MAAM,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,KAAK,CAAC,CAAC;QAC3D,OAAO,YAAY,CAAC,OAAO,CAAC,CAAC;IACjC,CAAC;IAAC,MAAM,CAAC;QACL,OAAO,IAAI,CAAC;IAChB,CAAC;AACL,CAAC;AAED,SAAS,oBAAoB,CAAC,aAAqB;IAC/C,MAAM,GAAG,GAAG,iBAAiB,CAAC,aAAa,EAAE,cAAc,CAAC,CAAC;IAC7D,MAAM,IAAI,GAAG,iBAAiB,CAAC,aAAa,EAAE,mBAAmB,CAAC;WAC3D,iBAAiB,CAAC,aAAa,EAAE,gBAAgB,CAAC;WAClD,iBAAiB,CAAC,aAAa,EAAE,WAAW,CAAC;WAC7C,iBAAiB,CAAC,aAAa,EAAE,UAAU,CAAC;WAC5C,iBAAiB,CAAC,aAAa,EAAE,kBAAkB,CAAC;WACpD,iBAAiB,CAAC,aAAa,EAAE,gBAAgB,CAAC,CAAC;IAC1D,IAAI,CAAC,GAAG,IAAI,CAAC,IAAI;QAAE,OAAO,IAAI,CAAC;IAC/B,OAAO,GAAG,GAAG,IAAI,MAAM,IAAI,IAAI,IAAI,MAAM,EAAE,CAAC;AAChD,CAAC;AAED,SAAS,cAAc,CAAC,CAAS;IAC7B,IAAI,CAAC,CAAC,MAAM,IAAI,UAAU;QAAE,OAAO,CAAC,CAAC;IACrC,OAAO,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,UAAU,CAAC,GAAG,iBAAiB,CAAC;AACtD,CAAC;AAED,SAAS,UAAU,CAAC,OAAmC;IACnD,QAAQ,OAAO,EAAE,CAAC;QACd,KAAK,MAAM,CAAC,CAAC,OAAO,QAAQ,CAAC;QAC7B,KAAK,MAAM,CAAC,CAAC,OAAO,QAAQ,CAAC;QAC7B,KAAK,OAAO,CAAC,CAAC,OAAO,OAAO,CAAC;QAC7B,KAAK,SAAS,CAAC,CAAC,OAAO,SAAS,CAAC;QACjC,KAAK,SAAS,CAAC,CAAC,OAAO,SAAS,CAAC;QACjC,KAAK,qBAAqB,CAAC,CAAC,OAAO,qBAAqB,CAAC;QACzD,OAAO,CAAC,CAAC,OAAO,OAAO,CAAC;IAC5B,CAAC;AACL,CAAC;AAOD,SAAgB,uBAAuB,CAAC,GAAoB,EAAE,aAAqB;IAC/E,IAAI,CAAC,GAAG,CAAC,IAAI,IAAI,CAAC,GAAG,CAAC,IAAI,KAAK,UAAU,IAAI,GAAG,CAAC,IAAI,KAAK,WAAW,CAAC,EAAE,CAAC;QACrE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,wCAAwC,EAAE,CAAC;IAC1E,CAAC;IAED,IAAI,GAAG,CAAC,IAAI,KAAK,UAAU,EAAE,CAAC;QAC1B,MAAM,MAAM,GAAG,IAAA,uCAAmB,EAAC;YAC/B,cAAc,EAAE,GAAG,CAAC,cAAc;YAClC,SAAS,EAAE,GAAG,CAAC,SAAS;YACxB,WAAW,EAAE,GAAG,CAAC,WAAW;YAC5B,SAAS,EAAE,GAAG,CAAC,SAAS;SAC3B,EAAE,aAAa,CAAC,CAAC;QAClB,IAAI,CAAC,MAAM,CAAC,EAAE;YAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,MAAM,CAAC,KAAM,EAAE,CAAC;QAC3D,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,MAAM,CAAC,OAAO,EAAE,CAAC;IACjD,CAAC;IAED,iBAAiB;IACjB,IAAI,CAAC,GAAG,CAAC,MAAM,IAAI,GAAG,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAChD,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,qDAAqD,EAAE,CAAC;IACvF,CAAC;IACD,IAAI,GAAG,CAAC,MAAM,CAAC,MAAM,GAAG,eAAe,EAAE,CAAC;QACtC,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,yBAAyB,eAAe,eAAe,GAAG,CAAC,MAAM,CAAC,MAAM,GAAG,EAAE,CAAC;IAC7G,CAAC;IACD,IAAI,CAAC,GAAG,CAAC,MAAM,IAAI,CAAC,YAAY,CAAC,GAAG,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC;QAC/C,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,0BAA0B,CAAC,GAAG,YAAY,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,UAAU,GAAG,CAAC,MAAM,IAAI,QAAQ,EAAE,EAAE,CAAC;IAC1H,CAAC;IACD,IAAI,GAAG,CAAC,WAAW,IAAI,GAAG,CAAC,WAAW,CAAC,MAAM,GAAG,qBAAqB,EAAE,CAAC;QACpE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,8BAA8B,qBAAqB,SAAS,EAAE,CAAC;IAC9F,CAAC;IAED,MAAM,MAAM,GAAG,IAAA,4BAAe,EAAC,GAAG,CAAC,MAAM,EAAE,aAAa,CAAC,CAAC;IAC1D,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;QAClB,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,mCAAmC,MAAM,CAAC,MAAM,EAAE,EAAE,CAAC;IACpF,CAAC;IACD,IAAI,GAAG,CAAC,WAAW,EAAE,CAAC;QAClB,MAAM,WAAW,GAAG,IAAA,4BAAe,EAAC,GAAG,CAAC,WAAW,EAAE,aAAa,CAAC,CAAC;QACpE,IAAI,CAAC,WAAW,CAAC,OAAO,EAAE,CAAC;YACvB,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,wCAAwC,WAAW,CAAC,MAAM,EAAE,EAAE,CAAC;QAC9F,CAAC;IACL,CAAC;IAED,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,CAAC;AACxB,CAAC;AAED,SAAS,oBAAoB,CAAC,GAAoB,EAAE,OAA8B;IAC9E,IAAI,GAAG,CAAC,IAAI,KAAK,UAAU,IAAI,OAAO,EAAE,CAAC;QACrC,MAAM,KAAK,GAAG,OAAO,CAAC,aAAa,CAAC,MAAM,GAAG,CAAC;YAC1C,CAAC,CAAC,YAAY,OAAO,CAAC,aAAa,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE;YAChD,CAAC,CAAC,EAAE,CAAC;QACT,MAAM,OAAO,GAAG,GAAG,CAAC,WAAW,CAAC,CAAC,CAAC,cAAc,GAAG,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACvE,OAAO,2CAA2C,IAAA,0CAAsB,EAAC,OAAO,CAAC,cAAc,OAAO,CAAC,SAAS,KAAK,KAAK,GAAG,OAAO,EAAE,CAAC;IAC3I,CAAC;IACD,MAAM,SAAS,GAAG,GAAG,CAAC,WAAW,CAAC,CAAC,CAAC,mBAAmB,GAAG,CAAC,WAAW,CAAC,MAAM,QAAQ,CAAC,CAAC,CAAC,EAAE,CAAC;IAC3F,OAAO,iDAAiD,GAAG,CAAC,MAAM,aAAa,GAAG,CAAC,MAAO,CAAC,MAAM,gBAAgB,YAAY,CAAC,GAAG,CAAC,MAAO,CAAC,IAAI,SAAS,cAAc,GAAG,CAAC,SAAS,IAAI,kBAAkB,IAAI,CAAC;AACjN,CAAC;AAED,SAAS,mBAAmB,CAAC,GAAoB,EAAE,OAAyC,EAAE,aAAqB;IAC/G,MAAM,MAAM,GAAG,oBAAoB,CAAC,aAAa,CAAC,CAAC;IACnD,IAAI,GAAG,CAAC,IAAI,KAAK,UAAU,IAAI,OAAO,EAAE,CAAC;QACrC,OAAO;YACH,GAAG,CAAC,IAAI;YACR,OAAO,CAAC,UAAU;YAClB,OAAO,CAAC,IAAI;YACZ,OAAO,CAAC,aAAa;YACrB,GAAG,CAAC,WAAW;YACf,OAAO,CAAC,SAAS;YACjB,MAAM;SACT,CAAC;IACN,CAAC;IACD,OAAO;QACH,GAAG,CAAC,IAAI;QACR,GAAG,CAAC,MAAM;QACV,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,YAAY,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,IAAI;QAC5C,GAAG,CAAC,WAAW,CAAC,CAAC,CAAC,YAAY,CAAC,GAAG,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC,IAAI;QACtD,GAAG,CAAC,SAAS,IAAI,kBAAkB;QACnC,MAAM;KACT,CAAC;AACN,CAAC;AAEM,KAAK,UAAU,QAAQ,CAC1B,GAAoB,EACpB,aAAqB,EACrB,OAKC;IAED,MAAM,SAAS,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;IAC7B,MAAM,UAAU,GAAG,uBAAuB,CAAC,GAAG,EAAE,aAAa,CAAC,CAAC;IAC/D,IAAI,CAAC,UAAU,CAAC,EAAE,EAAE,CAAC;QACjB,OAAO;YACH,QAAQ,EAAE,KAAK;YACf,IAAI,EAAE,GAAG,CAAC,IAAI;YACd,MAAM,EAAE,QAAQ;YAChB,QAAQ,EAAE,CAAC,CAAC;YACZ,MAAM,EAAE,qBAAqB,UAAU,CAAC,KAAK,EAAE;YAC/C,UAAU,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,SAAS;SACrC,CAAC;IACN,CAAC;IAED,MAAM,OAAO,GAAG,UAAU,CAAC,OAAO,CAAC;IACnC,MAAM,OAAO,GAAG,oBAAoB,CAAC,GAAG,EAAE,OAAO,CAAC,CAAC;IAC/C,MAAM,cAAc,GAAG,mBAAmB,CAAC,GAAG,EAAE,OAAO,EAAE,aAAa,CAAC,CAAC;IAE5E,MAAM,UAAU,GAAG,CAAC,OAAO,EAAE,MAAM,CAAC;IACpC,MAAM,MAAM,GAAG,OAAO,EAAE,MAAM,IAAI,IAAI,uBAAc,EAAE,CAAC;IACvD,IAAI,UAAU;QAAE,MAAM,MAAM,CAAC,KAAK,EAAE,CAAC;IAErC,IAAI,CAAC;QACD,MAAM,QAAQ,GAAG,MAAM,MAAM,CAAC,eAAe,CACzC,sBAAsB,EACtB,OAAO,EACP,cAAc,EACd,MAAM,EACN,iBAAiB,EACjB,aAAa,CAChB,CAAC;QAEF,IAAI,CAAC,QAAQ,CAAC,QAAQ,EAAE,CAAC;YACrB,OAAO;gBACH,QAAQ,EAAE,KAAK;gBACf,SAAS,EAAE,QAAQ,CAAC,SAAS;gBAC7B,IAAI,EAAE,GAAG,CAAC,IAAI;gBACd,MAAM,EAAE,QAAQ;gBAChB,QAAQ,EAAE,CAAC,CAAC;gBACZ,MAAM,EAAE,kBAAkB,QAAQ,CAAC,MAAM,GAAG;gBAC5C,UAAU,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,SAAS;aACrC,CAAC;QACN,CAAC;QAED,IAAI,UAA2B,CAAC;QAChC,IAAI,GAAG,CAAC,IAAI,KAAK,UAAU,IAAI,OAAO,EAAE,CAAC;YACrC,UAAU,GAAG,MAAM,IAAA,gCAAc,EAC7B,OAAO,CAAC,UAAU,EAClB,OAAO,CAAC,IAAI,EACZ,aAAa,EACb;gBACI,SAAS,EAAE,OAAO,CAAC,SAAS;gBAC5B,MAAM,EAAE,OAAO,EAAE,MAAM;gBACvB,cAAc,EAAE,OAAO,EAAE,cAAc;aAC1C,CACJ,CAAC;QACN,CAAC;aAAM,CAAC;YACJ,UAAU,GAAG,MAAM,IAAA,8BAAY,EAC3B,GAAG,CAAC,MAAO,EACX,GAAG,CAAC,MAAO,EACX,aAAa,EACb;gBACI,WAAW,EAAE,GAAG,CAAC,WAAW,IAAI,IAAI;gBACpC,SAAS,EAAE,GAAG,CAAC,SAAS,IAAI,kBAAkB;gBAC9C,MAAM,EAAE,OAAO,EAAE,MAAM;gBACvB,cAAc,EAAE,OAAO,EAAE,cAAc;aAC1C,CACJ,CAAC;QACN,CAAC;QAED,OAAO;YACH,QAAQ,EAAE,IAAI;YACd,SAAS,EAAE,QAAQ,CAAC,SAAS;YAC7B,IAAI,EAAE,GAAG,CAAC,IAAI;YACd,MAAM,EAAE,UAAU,CAAC,UAAU,CAAC,OAAO,CAAC;YACtC,QAAQ,EAAE,UAAU,CAAC,QAAQ;YAC7B,MAAM,EAAE,cAAc,CAAC,UAAU,CAAC,MAAM,CAAC;YACzC,OAAO,EAAE,UAAU,CAAC,OAAO;YAC3B,OAAO,EAAE,OAAO,CAAC,CAAC,CAAC,EAAE,UAAU,EAAE,OAAO,CAAC,UAAU,EAAE,IAAI,EAAE,OAAO,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,SAAS;YACrF,UAAU,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,SAAS;SACrC,CAAC;IACN,CAAC;YAAS,CAAC;QACP,IAAI,UAAU;YAAE,MAAM,MAAM,CAAC,IAAI,EAAE,CAAC;IACxC,CAAC;AACL,CAAC"}

package/dist/utils/testSafety.d.ts

@@ -1,4 +1,42 @@
-export declare function checkTestSafety(script: string, _workspaceRoot: string): {
+/**
+ * Static test safety analyzer — defense-in-depth, NOT a security boundary.
+ *
+ * The real boundary is the verification sandbox (`verificationSandbox.ts`):
+ * Docker with `--network=none --read-only`, or Deno with `--allow-none`.
+ * This module exists to reject obviously dangerous scripts *before* we
+ * pay for a sandbox spawn, and as a second layer in case a sandbox backend
+ * is somehow misconfigured.
+ *
+ * Policy: deny-by-default. Only specific known-safe imports and globals
+ * are permitted. Anything else is blocked. The previous implementation
+ * was allow-by-default with a 4-module blocklist — it let `http`, `https`,
+ * `fs`, `dns`, `os`, `tls`, `vm`, `dgram`, `fetch`, `eval`, `new Function`,
+ * dynamic `import()`, and `process.env` access all pass. That gap is the
+ * reason this module was rewritten.
+ *
+ * What this analyzer checks (in priority order):
+ *   1. Static import / require specifiers — against an allowlist.
+ *   2. Dynamic require/import — blocked outright (cannot be statically
+ *      analyzed).
+ *   3. Global function calls that execute strings as code — `eval`,
+ *      `new Function`, `setTimeout(string)`, `setInterval(string)`,
+ *      `setImmediate(string)`.
+ *   4. Network-related globals and Node built-ins (covered by #1 for
+ *      imports; here for member-style access like `globalThis.fetch`).
+ *   5. Process/env access — `process.env`, `process.argv`, `process.cwd`,
+ *      `process.execPath`, `process.cwd()`.
+ *   6. Reflection tricks that resolve to dangerous globals —
+ *      `globalThis['eval']`, `globalThis['Function']`, `this['eval']`,
+ *      bracket access with string literals that match dangerous names.
+ *
+ * Obfuscation handling: we catch literal bracket access like
+ * `globalThis["eval"]` and `process["env"]`. We do NOT attempt to defeat
+ * arbitrary runtime-computed string construction (e.g., `String.fromCharCode`
+ * to build a name) — that is the sandbox's job. This analyzer only catches
+ * what a defender can see statically.
+ */
+export interface TestSafetyResult {
     allowed: boolean;
     reason: string;
-};
+}
+export declare function checkTestSafety(script: string, _workspaceRoot: string): TestSafetyResult;