@skillsmith/core 0.5.6 → 0.5.7

package/dist/security/AuditLogger.d.ts

@@ -1,126 +0,0 @@
-/**
- * SMI-733: Audit Logging System
- *
- * Provides structured audit logging for security-relevant events.
- * Stores audit trails in SQLite database for compliance and forensics.
- *
- * Schema defined in docs/security/index.md §3.2
- */
-import type { Database as DatabaseType } from '../db/database-interface.js';
-import type { AuditEventType, AuditActor, AuditResult, AuditLogEntry, AuditQueryFilter, AuditLoggerConfig, AuditStats } from './audit-types.js';
-import { MIN_RETENTION_DAYS, MAX_RETENTION_DAYS } from './audit-types.js';
-export type { AuditEventType, AuditActor, AuditResult, AuditLogEntry, AuditQueryFilter, AuditLoggerConfig, AuditStats, };
-export { MIN_RETENTION_DAYS, MAX_RETENTION_DAYS };
-/**
- * Audit Logger implementation with SQLite backend
- *
- * @example
- * ```typescript
- * const auditLogger = new AuditLogger(db)
- *
- * // Log URL fetch
- * await auditLogger.log({
- *   event_type: 'url_fetch',
- *   actor: 'adapter',
- *   resource: 'https://example.com/skill.yaml',
- *   action: 'fetch',
- *   result: 'success',
- *   metadata: { status: 200, duration: 123 }
- * })
- *
- * // Query audit trail
- * const recentBlocks = await auditLogger.query({
- *   result: 'blocked',
- *   since: new Date(Date.now() - 24 * 60 * 60 * 1000)
- * })
- * ```
- */
-export declare class AuditLogger {
-    private db;
-    private config;
-    private stmts;
-    constructor(db: DatabaseType, config?: AuditLoggerConfig);
-    /**
-     * Prepare SQL statements for performance
-     */
-    private prepareStatements;
-    /**
-     * Ensure the audit_logs table exists
-     */
-    private ensureTableExists;
-    /**
-     * Log an audit event
-     *
-     * @param entry - Audit log entry (id, timestamp, created_at are auto-generated)
-     */
-    log(entry: Omit<AuditLogEntry, 'id' | 'timestamp' | 'created_at'> & {
-        timestamp?: string;
-    }): void;
-    /**
-     * Query audit logs with filters
-     *
-     * @param filter - Query filters
-     * @returns Array of matching audit log entries
-     */
-    query(filter?: AuditQueryFilter): AuditLogEntry[];
-    /**
-     * Get audit statistics
-     *
-     * @returns Statistics about audit log entries
-     */
-    getStats(): AuditStats;
-    /**
-     * Clean up old audit logs (internal implementation)
-     *
-     * @param olderThan - Delete logs older than this date
-     * @param skipMetaLog - Skip meta-logging (used internally to prevent recursion)
-     * @returns Number of deleted entries
-     */
-    private cleanupInternal;
-    /**
-     * Clean up old audit logs
-     *
-     * @deprecated Use cleanupOldLogs() instead for validated retention-based cleanup
-     * @param olderThan - Delete logs older than this date
-     * @returns Number of deleted entries
-     */
-    cleanup(olderThan: Date): number;
-    /**
-     * Validate retention days parameter
-     *
-     * @param retentionDays - Number of days to validate
-     * @throws Error if retentionDays is invalid
-     */
-    private validateRetentionDays;
-    /**
-     * Clean up old audit logs based on retention policy
-     *
-     * SMI-1012: Audit log retention policy with input validation
-     *
-     * @param retentionDays - Number of days to retain logs (default: 90, min: 1, max: 3650)
-     * @returns Number of deleted rows
-     * @throws Error if retentionDays is invalid (< 1, > 3650, or non-integer)
-     *
-     * @example
-     * ```typescript
-     * // Delete logs older than 90 days (default)
-     * const deleted = auditLogger.cleanupOldLogs()
-     *
-     * // Delete logs older than 30 days
-     * const deleted = auditLogger.cleanupOldLogs(30)
-     *
-     * // These will throw errors:
-     * auditLogger.cleanupOldLogs(0)  // Error: minimum is 1 day
-     * auditLogger.cleanupOldLogs(-5) // Error: minimum is 1 day
-     * ```
-     */
-    cleanupOldLogs(retentionDays?: number): number;
-    /**
-     * Export audit logs to JSON
-     *
-     * @param filter - Query filters
-     * @returns JSON string of audit logs
-     */
-    export(filter?: AuditQueryFilter): string;
-}
-//# sourceMappingURL=AuditLogger.d.ts.map

package/dist/security/AuditLogger.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"AuditLogger.d.ts","sourceRoot":"","sources":["../../src/security/AuditLogger.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAEH,OAAO,KAAK,EAAE,QAAQ,IAAI,YAAY,EAAE,MAAM,6BAA6B,CAAA;AAG3E,OAAO,KAAK,EACV,cAAc,EACd,UAAU,EACV,WAAW,EAEX,aAAa,EACb,gBAAgB,EAChB,iBAAiB,EACjB,UAAU,EACX,MAAM,kBAAkB,CAAA;AACzB,OAAO,EAAE,kBAAkB,EAAE,kBAAkB,EAAE,MAAM,kBAAkB,CAAA;AAGzE,YAAY,EACV,cAAc,EACd,UAAU,EACV,WAAW,EACX,aAAa,EACb,gBAAgB,EAChB,iBAAiB,EACjB,UAAU,GACX,CAAA;AACD,OAAO,EAAE,kBAAkB,EAAE,kBAAkB,EAAE,CAAA;AAIjD;;;;;;;;;;;;;;;;;;;;;;;GAuBG;AACH,qBAAa,WAAW;IACtB,OAAO,CAAC,EAAE,CAAc;IACxB,OAAO,CAAC,MAAM,CAAmB;IACjC,OAAO,CAAC,KAAK,CAGZ;gBAEW,EAAE,EAAE,YAAY,EAAE,MAAM,GAAE,iBAAsB;IAwC5D;;OAEG;IACH,OAAO,CAAC,iBAAiB;IAsBzB;;OAEG;IACH,OAAO,CAAC,iBAAiB;IAsBzB;;;;OAIG;IACH,GAAG,CACD,KAAK,EAAE,IAAI,CAAC,aAAa,EAAE,IAAI,GAAG,WAAW,GAAG,YAAY,CAAC,GAAG;QAC9D,SAAS,CAAC,EAAE,MAAM,CAAA;KACnB,GACA,IAAI;IA8BP;;;;;OAKG;IACH,KAAK,CAAC,MAAM,GAAE,gBAAqB,GAAG,aAAa,EAAE;IAmCrD;;;;OAIG;IACH,QAAQ,IAAI,UAAU;IA+DtB;;;;;;OAMG;IACH,OAAO,CAAC,eAAe;IAwCvB;;;;;;OAMG;IACH,OAAO,CAAC,SAAS,EAAE,IAAI,GAAG,MAAM;IAIhC;;;;;OAKG;IACH,OAAO,CAAC,qBAAqB;IAmB7B;;;;;;;;;;;;;;;;;;;;;OAqBG;IACH,cAAc,CAAC,aAAa,GAAE,MAAW,GAAG,MAAM;IAiElD;;;;;OAKG;IACH,MAAM,CAAC,MAAM,GAAE,gBAAqB,GAAG,MAAM;CAI9C"}

package/dist/security/AuditLogger.js

@@ -1,389 +0,0 @@
-/**
- * SMI-733: Audit Logging System
- *
- * Provides structured audit logging for security-relevant events.
- * Stores audit trails in SQLite database for compliance and forensics.
- *
- * Schema defined in docs/security/index.md §3.2
- */
-import { randomUUID } from 'crypto';
-import { createLogger } from '../utils/logger.js';
-import { MIN_RETENTION_DAYS, MAX_RETENTION_DAYS } from './audit-types.js';
-export { MIN_RETENTION_DAYS, MAX_RETENTION_DAYS };
-const logger = createLogger('AuditLogger');
-/**
- * Audit Logger implementation with SQLite backend
- *
- * @example
- * ```typescript
- * const auditLogger = new AuditLogger(db)
- *
- * // Log URL fetch
- * await auditLogger.log({
- *   event_type: 'url_fetch',
- *   actor: 'adapter',
- *   resource: 'https://example.com/skill.yaml',
- *   action: 'fetch',
- *   result: 'success',
- *   metadata: { status: 200, duration: 123 }
- * })
- *
- * // Query audit trail
- * const recentBlocks = await auditLogger.query({
- *   result: 'blocked',
- *   since: new Date(Date.now() - 24 * 60 * 60 * 1000)
- * })
- * ```
- */
-export class AuditLogger {
-    db;
-    config;
-    stmts;
-    constructor(db, config = {}) {
-        this.db = db;
-        this.config = {
-            autoCleanup: config.autoCleanup ?? false,
-            retentionDays: config.retentionDays ?? 90,
-        };
-        this.ensureTableExists();
-        this.prepareStatements();
-        // Validate config retention days early
-        if (this.config.retentionDays !== undefined) {
-            if (this.config.retentionDays < MIN_RETENTION_DAYS ||
-                this.config.retentionDays > MAX_RETENTION_DAYS) {
-                throw new Error(`Invalid retentionDays config: must be between ${MIN_RETENTION_DAYS} and ${MAX_RETENTION_DAYS}, got ${this.config.retentionDays}`);
-            }
-        }
-        // Run auto-cleanup if enabled
-        if (this.config.autoCleanup) {
-            try {
-                const deleted = this.cleanupOldLogs(this.config.retentionDays);
-                if (deleted > 0) {
-                    logger.info('Auto-cleanup completed on initialization', {
-                        deleted,
-                        retentionDays: this.config.retentionDays,
-                    });
-                }
-            }
-            catch (err) {
-                // Log but don't throw - don't fail initialization due to cleanup issues
-                logger.error('Auto-cleanup failed on initialization', err, {
-                    retentionDays: this.config.retentionDays,
-                });
-            }
-        }
-    }
-    /**
-     * Prepare SQL statements for performance
-     */
-    prepareStatements() {
-        this.stmts = {
-            insert: this.db.prepare(`
-        INSERT INTO audit_logs (id, event_type, timestamp, actor, resource, action, result, metadata, created_at)
-        VALUES (?, ?, ?, ?, ?, ?, ?, ?, ?)
-      `),
-            query: this.db.prepare(`
-        SELECT * FROM audit_logs
-        WHERE 1=1
-          AND (? IS NULL OR event_type = ?)
-          AND (? IS NULL OR actor = ?)
-          AND (? IS NULL OR resource LIKE ?)
-          AND (? IS NULL OR result = ?)
-          AND (? IS NULL OR timestamp >= ?)
-          AND (? IS NULL OR timestamp <= ?)
-        ORDER BY timestamp DESC
-        LIMIT ? OFFSET ?
-      `),
-        };
-    }
-    /**
-     * Ensure the audit_logs table exists
-     */
-    ensureTableExists() {
-        this.db.exec(`
-      CREATE TABLE IF NOT EXISTS audit_logs (
-        id TEXT PRIMARY KEY,
-        event_type TEXT NOT NULL,
-        timestamp TEXT NOT NULL DEFAULT (datetime('now')),
-        actor TEXT,
-        resource TEXT,
-        action TEXT,
-        result TEXT,
-        metadata TEXT,
-        created_at TEXT NOT NULL DEFAULT (datetime('now'))
-      );
-
-      CREATE INDEX IF NOT EXISTS idx_audit_event_type ON audit_logs(event_type);
-      CREATE INDEX IF NOT EXISTS idx_audit_timestamp ON audit_logs(timestamp);
-      CREATE INDEX IF NOT EXISTS idx_audit_resource ON audit_logs(resource);
-      CREATE INDEX IF NOT EXISTS idx_audit_result ON audit_logs(result);
-      CREATE INDEX IF NOT EXISTS idx_audit_actor ON audit_logs(actor);
-    `);
-    }
-    /**
-     * Log an audit event
-     *
-     * @param entry - Audit log entry (id, timestamp, created_at are auto-generated)
-     */
-    log(entry) {
-        const id = randomUUID();
-        const timestamp = entry.timestamp || new Date().toISOString();
-        const created_at = new Date().toISOString();
-        const metadata = entry.metadata ? JSON.stringify(entry.metadata) : null;
-        try {
-            this.stmts.insert.run(id, entry.event_type, timestamp, entry.actor, entry.resource, entry.action, entry.result, metadata, created_at);
-            logger.debug('Audit log entry created', {
-                id,
-                event_type: entry.event_type,
-                resource: entry.resource,
-            });
-        }
-        catch (err) {
-            logger.error('Failed to write audit log', err, { entry });
-            throw err;
-        }
-    }
-    /**
-     * Query audit logs with filters
-     *
-     * @param filter - Query filters
-     * @returns Array of matching audit log entries
-     */
-    query(filter = {}) {
-        const { event_type, actor, resource, result, since, until, limit = 100, offset = 0 } = filter;
-        const resourcePattern = resource ? `%${resource}%` : null;
-        const sinceIso = since?.toISOString() || null;
-        const untilIso = until?.toISOString() || null;
-        try {
-            const rows = this.stmts.query.all(event_type || null, event_type || null, actor || null, actor || null, resourcePattern, resourcePattern, result || null, result || null, sinceIso, sinceIso, untilIso, untilIso, limit, offset);
-            return rows.map((row) => ({
-                ...row,
-                metadata: row.metadata ? JSON.parse(row.metadata) : undefined,
-            }));
-        }
-        catch (err) {
-            logger.error('Failed to query audit logs', err, { filter });
-            throw err;
-        }
-    }
-    /**
-     * Get audit statistics
-     *
-     * @returns Statistics about audit log entries
-     */
-    getStats() {
-        try {
-            // Total events
-            const totalResult = this.db.prepare('SELECT COUNT(*) as count FROM audit_logs').get();
-            // Events by type
-            const typeResults = this.db
-                .prepare(`SELECT event_type, COUNT(*) as count FROM audit_logs GROUP BY event_type`)
-                .all();
-            const events_by_type = typeResults.reduce((acc, row) => {
-                acc[row.event_type] = row.count;
-                return acc;
-            }, {});
-            // Events by result
-            const resultResults = this.db
-                .prepare(`SELECT result, COUNT(*) as count FROM audit_logs GROUP BY result`)
-                .all();
-            const events_by_result = resultResults.reduce((acc, row) => {
-                acc[row.result] = row.count;
-                return acc;
-            }, {});
-            // Blocked events
-            const blockedResult = this.db
-                .prepare(`SELECT COUNT(*) as count FROM audit_logs WHERE result = 'blocked'`)
-                .get();
-            // Error events
-            const errorResult = this.db
-                .prepare(`SELECT COUNT(*) as count FROM audit_logs WHERE result = 'error'`)
-                .get();
-            // Oldest and newest events
-            const rangeResult = this.db
-                .prepare(`SELECT MIN(timestamp) as oldest, MAX(timestamp) as newest FROM audit_logs`)
-                .get();
-            return {
-                total_events: totalResult.count,
-                events_by_type,
-                events_by_result,
-                blocked_events: blockedResult.count,
-                error_events: errorResult.count,
-                oldest_event: rangeResult.oldest,
-                newest_event: rangeResult.newest,
-            };
-        }
-        catch (err) {
-            logger.error('Failed to get audit stats', err);
-            throw err;
-        }
-    }
-    /**
-     * Clean up old audit logs (internal implementation)
-     *
-     * @param olderThan - Delete logs older than this date
-     * @param skipMetaLog - Skip meta-logging (used internally to prevent recursion)
-     * @returns Number of deleted entries
-     */
-    cleanupInternal(olderThan, skipMetaLog = false) {
-        const olderThanIso = olderThan.toISOString();
-        try {
-            const result = this.db.prepare(`DELETE FROM audit_logs WHERE timestamp < ?`).run(olderThanIso);
-            logger.info('Audit logs cleaned up', {
-                deleted: result.changes,
-                olderThan: olderThanIso,
-            });
-            // Meta-log the cleanup operation (unless skipped to prevent recursion)
-            if (!skipMetaLog && result.changes > 0) {
-                try {
-                    this.log({
-                        event_type: 'config_change',
-                        actor: 'system',
-                        resource: 'audit_logs',
-                        action: 'cleanup_internal',
-                        result: 'success',
-                        metadata: {
-                            cutoffDate: olderThanIso,
-                            deletedCount: result.changes,
-                        },
-                    });
-                }
-                catch {
-                    // Meta-logging failure should not affect cleanup result
-                    logger.warn('Failed to meta-log cleanup operation');
-                }
-            }
-            return result.changes;
-        }
-        catch (err) {
-            logger.error('Failed to cleanup audit logs', err, {
-                olderThan: olderThan.toISOString(),
-            });
-            throw err;
-        }
-    }
-    /**
-     * Clean up old audit logs
-     *
-     * @deprecated Use cleanupOldLogs() instead for validated retention-based cleanup
-     * @param olderThan - Delete logs older than this date
-     * @returns Number of deleted entries
-     */
-    cleanup(olderThan) {
-        return this.cleanupInternal(olderThan);
-    }
-    /**
-     * Validate retention days parameter
-     *
-     * @param retentionDays - Number of days to validate
-     * @throws Error if retentionDays is invalid
-     */
-    validateRetentionDays(retentionDays) {
-        if (!Number.isFinite(retentionDays)) {
-            throw new Error(`Invalid retention days: must be a finite number, got ${retentionDays}`);
-        }
-        if (!Number.isInteger(retentionDays)) {
-            throw new Error(`Invalid retention days: must be an integer, got ${retentionDays}`);
-        }
-        if (retentionDays < MIN_RETENTION_DAYS) {
-            throw new Error(`Invalid retention days: minimum is ${MIN_RETENTION_DAYS} day(s), got ${retentionDays}`);
-        }
-        if (retentionDays > MAX_RETENTION_DAYS) {
-            throw new Error(`Invalid retention days: maximum is ${MAX_RETENTION_DAYS} days, got ${retentionDays}`);
-        }
-    }
-    /**
-     * Clean up old audit logs based on retention policy
-     *
-     * SMI-1012: Audit log retention policy with input validation
-     *
-     * @param retentionDays - Number of days to retain logs (default: 90, min: 1, max: 3650)
-     * @returns Number of deleted rows
-     * @throws Error if retentionDays is invalid (< 1, > 3650, or non-integer)
-     *
-     * @example
-     * ```typescript
-     * // Delete logs older than 90 days (default)
-     * const deleted = auditLogger.cleanupOldLogs()
-     *
-     * // Delete logs older than 30 days
-     * const deleted = auditLogger.cleanupOldLogs(30)
-     *
-     * // These will throw errors:
-     * auditLogger.cleanupOldLogs(0)  // Error: minimum is 1 day
-     * auditLogger.cleanupOldLogs(-5) // Error: minimum is 1 day
-     * ```
-     */
-    cleanupOldLogs(retentionDays = 90) {
-        // Validate input to prevent accidental data loss
-        this.validateRetentionDays(retentionDays);
-        const cutoffDate = new Date(Date.now() - retentionDays * 24 * 60 * 60 * 1000);
-        const _originalError = null;
-        try {
-            // Use internal cleanup to skip double meta-logging
-            const deleted = this.cleanupInternal(cutoffDate, true);
-            // Meta-logging: Log the cleanup operation using the audit logger itself
-            try {
-                this.log({
-                    event_type: 'config_change',
-                    actor: 'system',
-                    resource: 'audit_logs',
-                    action: 'cleanup',
-                    result: 'success',
-                    metadata: {
-                        retentionDays,
-                        cutoffDate: cutoffDate.toISOString(),
-                        deletedCount: deleted,
-                    },
-                });
-            }
-            catch (metaLogErr) {
-                // Meta-logging failure should not affect cleanup result
-                logger.warn('Failed to meta-log successful cleanup', {
-                    error: metaLogErr.message,
-                    deleted,
-                });
-            }
-            return deleted;
-        }
-        catch (err) {
-            // Store original error before attempting meta-logging
-            const cleanupError = err;
-            // Try to log failed cleanup attempt (best effort)
-            try {
-                this.log({
-                    event_type: 'config_change',
-                    actor: 'system',
-                    resource: 'audit_logs',
-                    action: 'cleanup',
-                    result: 'error',
-                    metadata: {
-                        retentionDays,
-                        cutoffDate: cutoffDate.toISOString(),
-                        error: cleanupError.message,
-                    },
-                });
-            }
-            catch (metaLogErr) {
-                // Log meta-logging failure but preserve original error
-                logger.warn('Failed to meta-log cleanup error', {
-                    originalError: cleanupError.message,
-                    metaLogError: metaLogErr.message,
-                });
-            }
-            // Always throw the original cleanup error
-            throw cleanupError;
-        }
-    }
-    /**
-     * Export audit logs to JSON
-     *
-     * @param filter - Query filters
-     * @returns JSON string of audit logs
-     */
-    export(filter = {}) {
-        const logs = this.query({ ...filter, limit: filter.limit || 10000 });
-        return JSON.stringify(logs, null, 2);
-    }
-}
-//# sourceMappingURL=AuditLogger.js.map

package/dist/security/AuditLogger.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"AuditLogger.js","sourceRoot":"","sources":["../../src/security/AuditLogger.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAGH,OAAO,EAAE,UAAU,EAAE,MAAM,QAAQ,CAAA;AACnC,OAAO,EAAE,YAAY,EAAE,MAAM,oBAAoB,CAAA;AAWjD,OAAO,EAAE,kBAAkB,EAAE,kBAAkB,EAAE,MAAM,kBAAkB,CAAA;AAYzE,OAAO,EAAE,kBAAkB,EAAE,kBAAkB,EAAE,CAAA;AAEjD,MAAM,MAAM,GAAG,YAAY,CAAC,aAAa,CAAC,CAAA;AAE1C;;;;;;;;;;;;;;;;;;;;;;;GAuBG;AACH,MAAM,OAAO,WAAW;IACd,EAAE,CAAc;IAChB,MAAM,CAAmB;IACzB,KAAK,CAGZ;IAED,YAAY,EAAgB,EAAE,SAA4B,EAAE;QAC1D,IAAI,CAAC,EAAE,GAAG,EAAE,CAAA;QACZ,IAAI,CAAC,MAAM,GAAG;YACZ,WAAW,EAAE,MAAM,CAAC,WAAW,IAAI,KAAK;YACxC,aAAa,EAAE,MAAM,CAAC,aAAa,IAAI,EAAE;SAC1C,CAAA;QACD,IAAI,CAAC,iBAAiB,EAAE,CAAA;QACxB,IAAI,CAAC,iBAAiB,EAAE,CAAA;QAExB,uCAAuC;QACvC,IAAI,IAAI,CAAC,MAAM,CAAC,aAAa,KAAK,SAAS,EAAE,CAAC;YAC5C,IACE,IAAI,CAAC,MAAM,CAAC,aAAa,GAAG,kBAAkB;gBAC9C,IAAI,CAAC,MAAM,CAAC,aAAa,GAAG,kBAAkB,EAC9C,CAAC;gBACD,MAAM,IAAI,KAAK,CACb,iDAAiD,kBAAkB,QAAQ,kBAAkB,SAAS,IAAI,CAAC,MAAM,CAAC,aAAa,EAAE,CAClI,CAAA;YACH,CAAC;QACH,CAAC;QAED,8BAA8B;QAC9B,IAAI,IAAI,CAAC,MAAM,CAAC,WAAW,EAAE,CAAC;YAC5B,IAAI,CAAC;gBACH,MAAM,OAAO,GAAG,IAAI,CAAC,cAAc,CAAC,IAAI,CAAC,MAAM,CAAC,aAAc,CAAC,CAAA;gBAC/D,IAAI,OAAO,GAAG,CAAC,EAAE,CAAC;oBAChB,MAAM,CAAC,IAAI,CAAC,0CAA0C,EAAE;wBACtD,OAAO;wBACP,aAAa,EAAE,IAAI,CAAC,MAAM,CAAC,aAAa;qBACzC,CAAC,CAAA;gBACJ,CAAC;YACH,CAAC;YAAC,OAAO,GAAG,EAAE,CAAC;gBACb,wEAAwE;gBACxE,MAAM,CAAC,KAAK,CAAC,uCAAuC,EAAE,GAAY,EAAE;oBAClE,aAAa,EAAE,IAAI,CAAC,MAAM,CAAC,aAAa;iBACzC,CAAC,CAAA;YACJ,CAAC;QACH,CAAC;IACH,CAAC;IAED;;OAEG;IACK,iBAAiB;QACvB,IAAI,CAAC,KAAK,GAAG;YACX,MAAM,EAAE,IAAI,CAAC,EAAE,CAAC,OAAO,CAAC;;;OAGvB,CAAwC;YAEzC,KAAK,EAAE,IAAI,CAAC,EAAE,CAAC,OAAO,CAAC;;;;;;;;;;;OAWtB,CAAuC;SACzC,CAAA;IACH,CAAC;IAED;;OAEG;IACK,iBAAiB;QACvB,IAAI,CAAC,EAAE,CAAC,IAAI,CAAC;;;;;;;;;;;;;;;;;;KAkBZ,CAAC,CAAA;IACJ,CAAC;IAED;;;;OAIG;IACH,GAAG,CACD,KAEC;QAED,MAAM,EAAE,GAAG,UAAU,EAAE,CAAA;QACvB,MAAM,SAAS,GAAG,KAAK,CAAC,SAAS,IAAI,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAA;QAC7D,MAAM,UAAU,GAAG,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAA;QAC3C,MAAM,QAAQ,GAAG,KAAK,CAAC,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,IAAI,CAAA;QAEvE,IAAI,CAAC;YACH,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,GAAG,CACnB,EAAE,EACF,KAAK,CAAC,UAAU,EAChB,SAAS,EACT,KAAK,CAAC,KAAK,EACX,KAAK,CAAC,QAAQ,EACd,KAAK,CAAC,MAAM,EACZ,KAAK,CAAC,MAAM,EACZ,QAAQ,EACR,UAAU,CACX,CAAA;YAED,MAAM,CAAC,KAAK,CAAC,yBAAyB,EAAE;gBACtC,EAAE;gBACF,UAAU,EAAE,KAAK,CAAC,UAAU;gBAC5B,QAAQ,EAAE,KAAK,CAAC,QAAQ;aACzB,CAAC,CAAA;QACJ,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,MAAM,CAAC,KAAK,CAAC,2BAA2B,EAAE,GAAY,EAAE,EAAE,KAAK,EAAE,CAAC,CAAA;YAClE,MAAM,GAAG,CAAA;QACX,CAAC;IACH,CAAC;IAED;;;;;OAKG;IACH,KAAK,CAAC,SAA2B,EAAE;QACjC,MAAM,EAAE,UAAU,EAAE,KAAK,EAAE,QAAQ,EAAE,MAAM,EAAE,KAAK,EAAE,KAAK,EAAE,KAAK,GAAG,GAAG,EAAE,MAAM,GAAG,CAAC,EAAE,GAAG,MAAM,CAAA;QAE7F,MAAM,eAAe,GAAG,QAAQ,CAAC,CAAC,CAAC,IAAI,QAAQ,GAAG,CAAC,CAAC,CAAC,IAAI,CAAA;QACzD,MAAM,QAAQ,GAAG,KAAK,EAAE,WAAW,EAAE,IAAI,IAAI,CAAA;QAC7C,MAAM,QAAQ,GAAG,KAAK,EAAE,WAAW,EAAE,IAAI,IAAI,CAAA;QAE7C,IAAI,CAAC;YACH,MAAM,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,GAAG,CAC/B,UAAU,IAAI,IAAI,EAClB,UAAU,IAAI,IAAI,EAClB,KAAK,IAAI,IAAI,EACb,KAAK,IAAI,IAAI,EACb,eAAe,EACf,eAAe,EACf,MAAM,IAAI,IAAI,EACd,MAAM,IAAI,IAAI,EACd,QAAQ,EACR,QAAQ,EACR,QAAQ,EACR,QAAQ,EACR,KAAK,EACL,MAAM,CACP,CAAA;YAED,OAAO,IAAI,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC;gBACxB,GAAG,GAAG;gBACN,QAAQ,EAAE,GAAG,CAAC,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,SAAS;aAC9D,CAAC,CAAC,CAAA;QACL,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,MAAM,CAAC,KAAK,CAAC,4BAA4B,EAAE,GAAY,EAAE,EAAE,MAAM,EAAE,CAAC,CAAA;YACpE,MAAM,GAAG,CAAA;QACX,CAAC;IACH,CAAC;IAED;;;;OAIG;IACH,QAAQ;QACN,IAAI,CAAC;YACH,eAAe;YACf,MAAM,WAAW,GAAG,IAAI,CAAC,EAAE,CAAC,OAAO,CAAC,0CAA0C,CAAC,CAAC,GAAG,EAElF,CAAA;YAED,iBAAiB;YACjB,MAAM,WAAW,GAAG,IAAI,CAAC,EAAE;iBACxB,OAAO,CAAC,0EAA0E,CAAC;iBACnF,GAAG,EAA0D,CAAA;YAEhE,MAAM,cAAc,GAAG,WAAW,CAAC,MAAM,CACvC,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE;gBACX,GAAG,CAAC,GAAG,CAAC,UAAU,CAAC,GAAG,GAAG,CAAC,KAAK,CAAA;gBAC/B,OAAO,GAAG,CAAA;YACZ,CAAC,EACD,EAAoC,CACrC,CAAA;YAED,mBAAmB;YACnB,MAAM,aAAa,GAAG,IAAI,CAAC,EAAE;iBAC1B,OAAO,CAAC,kEAAkE,CAAC;iBAC3E,GAAG,EAAmD,CAAA;YAEzD,MAAM,gBAAgB,GAAG,aAAa,CAAC,MAAM,CAC3C,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE;gBACX,GAAG,CAAC,GAAG,CAAC,MAAM,CAAC,GAAG,GAAG,CAAC,KAAK,CAAA;gBAC3B,OAAO,GAAG,CAAA;YACZ,CAAC,EACD,EAAiC,CAClC,CAAA;YAED,iBAAiB;YACjB,MAAM,aAAa,GAAG,IAAI,CAAC,EAAE;iBAC1B,OAAO,CAAC,mEAAmE,CAAC;iBAC5E,GAAG,EAAuB,CAAA;YAE7B,eAAe;YACf,MAAM,WAAW,GAAG,IAAI,CAAC,EAAE;iBACxB,OAAO,CAAC,iEAAiE,CAAC;iBAC1E,GAAG,EAAuB,CAAA;YAE7B,2BAA2B;YAC3B,MAAM,WAAW,GAAG,IAAI,CAAC,EAAE;iBACxB,OAAO,CAAC,2EAA2E,CAAC;iBACpF,GAAG,EAAsD,CAAA;YAE5D,OAAO;gBACL,YAAY,EAAE,WAAW,CAAC,KAAK;gBAC/B,cAAc;gBACd,gBAAgB;gBAChB,cAAc,EAAE,aAAa,CAAC,KAAK;gBACnC,YAAY,EAAE,WAAW,CAAC,KAAK;gBAC/B,YAAY,EAAE,WAAW,CAAC,MAAM;gBAChC,YAAY,EAAE,WAAW,CAAC,MAAM;aACjC,CAAA;QACH,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,MAAM,CAAC,KAAK,CAAC,2BAA2B,EAAE,GAAY,CAAC,CAAA;YACvD,MAAM,GAAG,CAAA;QACX,CAAC;IACH,CAAC;IAED;;;;;;OAMG;IACK,eAAe,CAAC,SAAe,EAAE,WAAW,GAAG,KAAK;QAC1D,MAAM,YAAY,GAAG,SAAS,CAAC,WAAW,EAAE,CAAA;QAE5C,IAAI,CAAC;YACH,MAAM,MAAM,GAAG,IAAI,CAAC,EAAE,CAAC,OAAO,CAAC,4CAA4C,CAAC,CAAC,GAAG,CAAC,YAAY,CAAC,CAAA;YAE9F,MAAM,CAAC,IAAI,CAAC,uBAAuB,EAAE;gBACnC,OAAO,EAAE,MAAM,CAAC,OAAO;gBACvB,SAAS,EAAE,YAAY;aACxB,CAAC,CAAA;YAEF,uEAAuE;YACvE,IAAI,CAAC,WAAW,IAAI,MAAM,CAAC,OAAO,GAAG,CAAC,EAAE,CAAC;gBACvC,IAAI,CAAC;oBACH,IAAI,CAAC,GAAG,CAAC;wBACP,UAAU,EAAE,eAAe;wBAC3B,KAAK,EAAE,QAAQ;wBACf,QAAQ,EAAE,YAAY;wBACtB,MAAM,EAAE,kBAAkB;wBAC1B,MAAM,EAAE,SAAS;wBACjB,QAAQ,EAAE;4BACR,UAAU,EAAE,YAAY;4BACxB,YAAY,EAAE,MAAM,CAAC,OAAO;yBAC7B;qBACF,CAAC,CAAA;gBACJ,CAAC;gBAAC,MAAM,CAAC;oBACP,wDAAwD;oBACxD,MAAM,CAAC,IAAI,CAAC,sCAAsC,CAAC,CAAA;gBACrD,CAAC;YACH,CAAC;YAED,OAAO,MAAM,CAAC,OAAO,CAAA;QACvB,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,MAAM,CAAC,KAAK,CAAC,8BAA8B,EAAE,GAAY,EAAE;gBACzD,SAAS,EAAE,SAAS,CAAC,WAAW,EAAE;aACnC,CAAC,CAAA;YACF,MAAM,GAAG,CAAA;QACX,CAAC;IACH,CAAC;IAED;;;;;;OAMG;IACH,OAAO,CAAC,SAAe;QACrB,OAAO,IAAI,CAAC,eAAe,CAAC,SAAS,CAAC,CAAA;IACxC,CAAC;IAED;;;;;OAKG;IACK,qBAAqB,CAAC,aAAqB;QACjD,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,aAAa,CAAC,EAAE,CAAC;YACpC,MAAM,IAAI,KAAK,CAAC,wDAAwD,aAAa,EAAE,CAAC,CAAA;QAC1F,CAAC;QACD,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,aAAa,CAAC,EAAE,CAAC;YACrC,MAAM,IAAI,KAAK,CAAC,mDAAmD,aAAa,EAAE,CAAC,CAAA;QACrF,CAAC;QACD,IAAI,aAAa,GAAG,kBAAkB,EAAE,CAAC;YACvC,MAAM,IAAI,KAAK,CACb,sCAAsC,kBAAkB,gBAAgB,aAAa,EAAE,CACxF,CAAA;QACH,CAAC;QACD,IAAI,aAAa,GAAG,kBAAkB,EAAE,CAAC;YACvC,MAAM,IAAI,KAAK,CACb,sCAAsC,kBAAkB,cAAc,aAAa,EAAE,CACtF,CAAA;QACH,CAAC;IACH,CAAC;IAED;;;;;;;;;;;;;;;;;;;;;OAqBG;IACH,cAAc,CAAC,gBAAwB,EAAE;QACvC,iDAAiD;QACjD,IAAI,CAAC,qBAAqB,CAAC,aAAa,CAAC,CAAA;QAEzC,MAAM,UAAU,GAAG,IAAI,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,aAAa,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,IAAI,CAAC,CAAA;QAC7E,MAAM,cAAc,GAAiB,IAAI,CAAA;QAEzC,IAAI,CAAC;YACH,mDAAmD;YACnD,MAAM,OAAO,GAAG,IAAI,CAAC,eAAe,CAAC,UAAU,EAAE,IAAI,CAAC,CAAA;YAEtD,wEAAwE;YACxE,IAAI,CAAC;gBACH,IAAI,CAAC,GAAG,CAAC;oBACP,UAAU,EAAE,eAAe;oBAC3B,KAAK,EAAE,QAAQ;oBACf,QAAQ,EAAE,YAAY;oBACtB,MAAM,EAAE,SAAS;oBACjB,MAAM,EAAE,SAAS;oBACjB,QAAQ,EAAE;wBACR,aAAa;wBACb,UAAU,EAAE,UAAU,CAAC,WAAW,EAAE;wBACpC,YAAY,EAAE,OAAO;qBACtB;iBACF,CAAC,CAAA;YACJ,CAAC;YAAC,OAAO,UAAU,EAAE,CAAC;gBACpB,wDAAwD;gBACxD,MAAM,CAAC,IAAI,CAAC,uCAAuC,EAAE;oBACnD,KAAK,EAAG,UAAoB,CAAC,OAAO;oBACpC,OAAO;iBACR,CAAC,CAAA;YACJ,CAAC;YAED,OAAO,OAAO,CAAA;QAChB,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,sDAAsD;YACtD,MAAM,YAAY,GAAG,GAAY,CAAA;YAEjC,kDAAkD;YAClD,IAAI,CAAC;gBACH,IAAI,CAAC,GAAG,CAAC;oBACP,UAAU,EAAE,eAAe;oBAC3B,KAAK,EAAE,QAAQ;oBACf,QAAQ,EAAE,YAAY;oBACtB,MAAM,EAAE,SAAS;oBACjB,MAAM,EAAE,OAAO;oBACf,QAAQ,EAAE;wBACR,aAAa;wBACb,UAAU,EAAE,UAAU,CAAC,WAAW,EAAE;wBACpC,KAAK,EAAE,YAAY,CAAC,OAAO;qBAC5B;iBACF,CAAC,CAAA;YACJ,CAAC;YAAC,OAAO,UAAU,EAAE,CAAC;gBACpB,uDAAuD;gBACvD,MAAM,CAAC,IAAI,CAAC,kCAAkC,EAAE;oBAC9C,aAAa,EAAE,YAAY,CAAC,OAAO;oBACnC,YAAY,EAAG,UAAoB,CAAC,OAAO;iBAC5C,CAAC,CAAA;YACJ,CAAC;YAED,0CAA0C;YAC1C,MAAM,YAAY,CAAA;QACpB,CAAC;IACH,CAAC;IAED;;;;;OAKG;IACH,MAAM,CAAC,SAA2B,EAAE;QAClC,MAAM,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,EAAE,GAAG,MAAM,EAAE,KAAK,EAAE,MAAM,CAAC,KAAK,IAAI,KAAK,EAAE,CAAC,CAAA;QACpE,OAAO,IAAI,CAAC,SAAS,CAAC,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC,CAAA;IACtC,CAAC;CACF"}

package/dist/security/SkillSandbox.d.ts

@@ -1,156 +0,0 @@
-/**
- * SMI-1534: E2B Sandbox Execution for Skill Testing
- *
- * Provides isolated execution environment for testing untrusted skills.
- * Uses E2B (e2b.dev) sandboxes for secure, containerized execution.
- *
- * Features:
- * - Isolated filesystem per skill test
- * - Network isolation
- * - Resource limits (CPU, memory)
- * - Automatic cleanup after test
- * - Configurable timeout (default: 30s)
- */
-/**
- * Configuration options for sandbox creation
- */
-export interface SandboxOptions {
-    /** Timeout in milliseconds (default: 30000) */
-    timeout?: number;
-    /** Memory limit in MB (default: 256) */
-    memoryMB?: number;
-    /** Whether to allow network access (default: false for security) */
-    allowNetwork?: boolean;
-    /** Environment variables to inject */
-    env?: Record<string, string>;
-}
-/**
- * Result from executing code in sandbox
- */
-export interface ExecutionResult {
-    /** Whether execution completed successfully */
-    success: boolean;
-    /** Exit code from the process */
-    exitCode: number;
-    /** Standard output */
-    stdout: string;
-    /** Standard error */
-    stderr: string;
-    /** Execution time in milliseconds */
-    durationMs: number;
-    /** Whether execution timed out */
-    timedOut: boolean;
-    /** Any error that occurred */
-    error?: string;
-}
-/**
- * Represents a file to be copied into the sandbox
- */
-export interface SandboxFile {
-    /** Path within the sandbox */
-    path: string;
-    /** File content */
-    content: string;
-}
-/**
- * E2B Sandbox wrapper for skill testing
- *
- * @example
- * ```typescript
- * const sandbox = new SkillSandbox({ timeout: 60000 })
- * try {
- *   await sandbox.create()
- *   await sandbox.copyFiles([
- *     { path: '/skill/SKILL.md', content: skillContent },
- *     { path: '/skill/test.ts', content: testCode }
- *   ])
- *   const result = await sandbox.execute('node /skill/test.ts')
- *   console.log(result.stdout)
- * } finally {
- *   await sandbox.destroy()
- * }
- * ```
- */
-export declare class SkillSandbox {
-    private options;
-    private sandbox;
-    private created;
-    constructor(options?: SandboxOptions);
-    /**
-     * Create and initialize the sandbox environment
-     * @throws Error if sandbox creation fails or E2B is unavailable
-     */
-    create(): Promise<void>;
-    /**
-     * Copy files into the sandbox filesystem
-     * @param files - Array of files to copy
-     */
-    copyFiles(files: SandboxFile[]): Promise<void>;
-    /**
-     * Copy a skill directory into the sandbox
-     * @param skillPath - Local path to skill directory
-     * @param destPath - Destination path in sandbox (default: /skill)
-     */
-    copySkill(skillContent: string, destPath?: string): Promise<void>;
-    /**
-     * Execute a command in the sandbox
-     * @param command - Command to execute
-     * @param workingDir - Working directory (default: /skill)
-     * @returns Execution result
-     */
-    execute(command: string, workingDir?: string): Promise<ExecutionResult>;
-    /**
-     * Execute TypeScript/JavaScript code directly
-     * @param code - Code to execute
-     * @returns Execution result
-     */
-    executeCode(code: string): Promise<ExecutionResult>;
-    /**
-     * Destroy the sandbox and clean up resources
-     * Should always be called in a finally block
-     */
-    destroy(): Promise<void>;
-    /**
-     * Check if sandbox is active
-     */
-    isActive(): boolean;
-    /**
-     * Get sandbox status
-     */
-    getStatus(): SandboxStatus;
-    private ensureCreated;
-    /**
-     * SMI-1534: Verify network isolation is actually in effect
-     * Attempts to make a network request and expects it to fail
-     */
-    private verifyNetworkIsolation;
-}
-/**
- * Sandbox status information
- */
-export interface SandboxStatus {
-    created: boolean;
-    active: boolean;
-    options: Required<SandboxOptions>;
-}
-/**
- * Error thrown when E2B sandbox is not available
- */
-export declare class SandboxUnavailableError extends Error {
-    constructor(message: string);
-}
-/**
- * Factory function for creating sandboxes with proper cleanup
- * Ensures sandbox is destroyed even if test throws
- *
- * @example
- * ```typescript
- * const result = await withSandbox(async (sandbox) => {
- *   await sandbox.copySkill(skillContent)
- *   return sandbox.execute('node test.js')
- * })
- * ```
- */
-export declare function withSandbox<T>(fn: (sandbox: SkillSandbox) => Promise<T>, options?: SandboxOptions): Promise<T>;
-export default SkillSandbox;
-//# sourceMappingURL=SkillSandbox.d.ts.map