@su-record/vibe 2.7.10 → 2.7.11

package/dist/pc/sandbox/ContainerManager.test.js

@@ -0,0 +1,249 @@
+/**
+ * ContainerManager Tests — Phase 5-6
+ */
+import { describe, it, expect, vi, beforeEach, afterEach } from 'vitest';
+import { ContainerManager } from './ContainerManager.js';
+import { DEFAULT_CONTAINER_CONFIG } from './types.js';
+// ============================================================================
+// Mock Dockerode
+// ============================================================================
+function createMockContainer(id) {
+    return {
+        id,
+        start: vi.fn().mockResolvedValue(undefined),
+        stop: vi.fn().mockResolvedValue(undefined),
+        remove: vi.fn().mockResolvedValue(undefined),
+        inspect: vi.fn().mockResolvedValue({ State: { Status: 'running' } }),
+        exec: vi.fn().mockResolvedValue({
+            start: vi.fn().mockResolvedValue({
+                on: vi.fn((event, handler) => {
+                    if (event === 'data')
+                        handler(Buffer.from('v22.0.0'));
+                    if (event === 'end')
+                        setTimeout(() => handler(), 10);
+                }),
+            }),
+        }),
+    };
+}
+function createMockDocker() {
+    let containerCount = 0;
+    const containers = new Map();
+    return {
+        ping: vi.fn().mockResolvedValue('OK'),
+        createContainer: vi.fn().mockImplementation(() => {
+            const id = `container-${++containerCount}`;
+            const mock = createMockContainer(id);
+            containers.set(id, mock);
+            return Promise.resolve(mock);
+        }),
+        listContainers: vi.fn().mockResolvedValue([]),
+        getContainer: vi.fn().mockImplementation((id) => {
+            return containers.get(id) ?? createMockContainer(id);
+        }),
+    };
+}
+// ============================================================================
+// Tests
+// ============================================================================
+describe('ContainerManager', () => {
+    let logger;
+    let manager;
+    beforeEach(() => {
+        logger = vi.fn();
+        manager = new ContainerManager(logger);
+    });
+    afterEach(async () => {
+        await manager.shutdown();
+    });
+    describe('init', () => {
+        it('Docker 데몬 미실행 시 DOCKER_NOT_RUNNING 에러', async () => {
+            // init will try to load dockerode which is not installed in test env
+            await expect(manager.init()).rejects.toThrow();
+        });
+    });
+    describe('create (with mock)', () => {
+        let mockDocker;
+        beforeEach(() => {
+            mockDocker = createMockDocker();
+            // Inject mock docker instance
+            manager.docker = mockDocker;
+        });
+        it('사용자별 컨테이너 생성', async () => {
+            const info = await manager.create('user-123');
+            expect(info.userId).toBe('user-123');
+            expect(info.state).toBe('creating');
+            expect(info.cpuLimit).toBe(DEFAULT_CONTAINER_CONFIG.cpuLimit);
+            expect(info.memoryLimitMb).toBe(DEFAULT_CONTAINER_CONFIG.memoryLimitMb);
+            expect(info.pidLimit).toBe(DEFAULT_CONTAINER_CONFIG.pidLimit);
+        });
+        it('리소스 제한이 적용됨', async () => {
+            const info = await manager.create('user-123', {
+                cpuLimit: 1.0,
+                memoryLimitMb: 1024,
+                pidLimit: 200,
+            });
+            expect(info.cpuLimit).toBe(1.0);
+            expect(info.memoryLimitMb).toBe(1024);
+            expect(info.pidLimit).toBe(200);
+        });
+        it('사용자별 라벨이 포함됨', async () => {
+            const info = await manager.create('user-456');
+            expect(info.labels['vibe-user-id']).toBe('user-456');
+            expect(info.labels['vibe-scope']).toBe('user');
+            expect(info.labels['vibe-session-id']).toMatch(/^session-/);
+        });
+        it('커스텀 라벨 병합', async () => {
+            const info = await manager.create('user-789', {
+                labels: { 'custom-label': 'value' },
+            });
+            expect(info.labels['custom-label']).toBe('value');
+            expect(info.labels['vibe-user-id']).toBe('user-789');
+        });
+        it('컨테이너 시작', async () => {
+            const info = await manager.create('user-123');
+            await manager.start(info.containerId);
+            const containers = manager.getUserContainers('user-123');
+            expect(containers[0].state).toBe('running');
+        });
+        it('컨테이너 중지', async () => {
+            const info = await manager.create('user-123');
+            await manager.start(info.containerId);
+            await manager.stop(info.containerId);
+            const containers = manager.getUserContainers('user-123');
+            expect(containers[0].state).toBe('stopped');
+        });
+        it('컨테이너 삭제', async () => {
+            const info = await manager.create('user-123');
+            await manager.remove(info.containerId);
+            expect(manager.getUserContainers('user-123').length).toBe(0);
+        });
+        it('존재하지 않는 컨테이너 에러', async () => {
+            await expect(manager.start('nonexistent')).rejects.toThrow('컨테이너를 찾을 수 없습니다');
+        });
+    });
+    describe('container limits', () => {
+        let mockDocker;
+        beforeEach(() => {
+            mockDocker = createMockDocker();
+            manager.docker = mockDocker;
+        });
+        it('사용자당 최대 컨테이너 수 제한', async () => {
+            await manager.create('user-A');
+            await manager.create('user-A');
+            await expect(manager.create('user-A')).rejects.toThrow('사용자당 최대 컨테이너 수');
+        });
+        it('전체 최대 컨테이너 수 제한', async () => {
+            // Create up to maxContainersTotal
+            for (let i = 0; i < DEFAULT_CONTAINER_CONFIG.maxContainersTotal; i++) {
+                await manager.create(`user-${i}`);
+            }
+            await expect(manager.create('user-overflow')).rejects.toThrow('최대 컨테이너 수');
+        });
+    });
+    describe('exec', () => {
+        let mockDocker;
+        beforeEach(() => {
+            mockDocker = createMockDocker();
+            manager.docker = mockDocker;
+        });
+        it('실행 중인 컨테이너에서 명령 실행', async () => {
+            const info = await manager.create('user-123');
+            await manager.start(info.containerId);
+            const result = await manager.exec(info.containerId, ['node', '--version']);
+            expect(result.timedOut).toBe(false);
+            expect(result.durationMs).toBeGreaterThanOrEqual(0);
+        });
+        it('중지된 컨테이너에서 실행 시 에러', async () => {
+            const info = await manager.create('user-123');
+            // state is 'creating', not 'running'
+            await expect(manager.exec(info.containerId, ['echo', 'hello'])).rejects.toThrow('실행 중이 아닙니다');
+        });
+    });
+    describe('cleanup', () => {
+        let mockDocker;
+        beforeEach(() => {
+            mockDocker = createMockDocker();
+            manager.docker = mockDocker;
+        });
+        it('비활성 컨테이너 정리', async () => {
+            const info = await manager.create('user-123');
+            await manager.start(info.containerId);
+            // Manually set lastActivityAt to 31 minutes ago
+            const containers = manager.getContainers();
+            const oldTime = new Date(Date.now() - 31 * 60 * 1000).toISOString();
+            containers[0].lastActivityAt = oldTime;
+            const removed = await manager.cleanup();
+            expect(removed).toBe(1);
+            expect(manager.getContainers().length).toBe(0);
+        });
+        it('활성 컨테이너는 정리하지 않음', async () => {
+            const info = await manager.create('user-123');
+            await manager.start(info.containerId);
+            // lastActivityAt is just now
+            const removed = await manager.cleanup();
+            expect(removed).toBe(0);
+            expect(manager.getContainers().length).toBe(1);
+        });
+    });
+    describe('shutdown', () => {
+        let mockDocker;
+        beforeEach(() => {
+            mockDocker = createMockDocker();
+            manager.docker = mockDocker;
+        });
+        it('모든 컨테이너 삭제 및 정리', async () => {
+            await manager.create('user-A');
+            await manager.create('user-B');
+            expect(manager.getContainers().length).toBe(2);
+            await manager.shutdown();
+            expect(manager.getContainers().length).toBe(0);
+        });
+    });
+    describe('getUserContainers', () => {
+        let mockDocker;
+        beforeEach(() => {
+            mockDocker = createMockDocker();
+            manager.docker = mockDocker;
+        });
+        it('특정 사용자의 컨테이너만 필터링', async () => {
+            await manager.create('user-A');
+            await manager.create('user-B');
+            await manager.create('user-A');
+            expect(manager.getUserContainers('user-A').length).toBe(2);
+            expect(manager.getUserContainers('user-B').length).toBe(1);
+            expect(manager.getUserContainers('user-C').length).toBe(0);
+        });
+    });
+    describe('create retry', () => {
+        it('생성 실패 시 재시도', async () => {
+            let callCount = 0;
+            const failingDocker = {
+                ping: vi.fn().mockResolvedValue('OK'),
+                createContainer: vi.fn().mockImplementation(() => {
+                    callCount++;
+                    if (callCount <= 1)
+                        throw new Error('Network error');
+                    return Promise.resolve(createMockContainer('retry-success'));
+                }),
+                listContainers: vi.fn().mockResolvedValue([]),
+                getContainer: vi.fn(),
+            };
+            manager.docker = failingDocker;
+            const info = await manager.create('user-retry');
+            expect(info.containerId).toBe('retry-success');
+            expect(callCount).toBe(2);
+        });
+        it('재시도 초과 시 에러', async () => {
+            const alwaysFailDocker = {
+                ping: vi.fn().mockResolvedValue('OK'),
+                createContainer: vi.fn().mockRejectedValue(new Error('Persistent error')),
+                listContainers: vi.fn().mockResolvedValue([]),
+                getContainer: vi.fn(),
+            };
+            manager.docker = alwaysFailDocker;
+            await expect(manager.create('user-fail')).rejects.toThrow('컨테이너 생성 실패');
+        });
+    });
+});
+//# sourceMappingURL=ContainerManager.test.js.map

package/dist/pc/sandbox/ContainerManager.test.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"ContainerManager.test.js","sourceRoot":"","sources":["../../../src/pc/sandbox/ContainerManager.test.ts"],"names":[],"mappings":"AAAA;;GAEG;AACH,OAAO,EAAE,QAAQ,EAAE,EAAE,EAAE,MAAM,EAAE,EAAE,EAAE,UAAU,EAAE,SAAS,EAAE,MAAM,QAAQ,CAAC;AACzE,OAAO,EAAE,gBAAgB,EAAE,MAAM,uBAAuB,CAAC;AAEzD,OAAO,EAAE,wBAAwB,EAAE,MAAM,YAAY,CAAC;AAEtD,+EAA+E;AAC/E,iBAAiB;AACjB,+EAA+E;AAE/E,SAAS,mBAAmB,CAAC,EAAU;IACrC,OAAO;QACL,EAAE;QACF,KAAK,EAAE,EAAE,CAAC,EAAE,EAAE,CAAC,iBAAiB,CAAC,SAAS,CAAC;QAC3C,IAAI,EAAE,EAAE,CAAC,EAAE,EAAE,CAAC,iBAAiB,CAAC,SAAS,CAAC;QAC1C,MAAM,EAAE,EAAE,CAAC,EAAE,EAAE,CAAC,iBAAiB,CAAC,SAAS,CAAC;QAC5C,OAAO,EAAE,EAAE,CAAC,EAAE,EAAE,CAAC,iBAAiB,CAAC,EAAE,KAAK,EAAE,EAAE,MAAM,EAAE,SAAS,EAAE,EAAE,CAAC;QACpE,IAAI,EAAE,EAAE,CAAC,EAAE,EAAE,CAAC,iBAAiB,CAAC;YAC9B,KAAK,EAAE,EAAE,CAAC,EAAE,EAAE,CAAC,iBAAiB,CAAC;gBAC/B,EAAE,EAAE,EAAE,CAAC,EAAE,CAAC,CAAC,KAAa,EAAE,OAAqC,EAAE,EAAE;oBACjE,IAAI,KAAK,KAAK,MAAM;wBAAE,OAAO,CAAC,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC;oBACtD,IAAI,KAAK,KAAK,KAAK;wBAAE,UAAU,CAAC,GAAG,EAAE,CAAC,OAAO,EAAE,EAAE,EAAE,CAAC,CAAC;gBACvD,CAAC,CAAC;aACH,CAAC;SACH,CAAC;KACH,CAAC;AACJ,CAAC;AAED,SAAS,gBAAgB;IACvB,IAAI,cAAc,GAAG,CAAC,CAAC;IACvB,MAAM,UAAU,GAAG,IAAI,GAAG,EAAkD,CAAC;IAE7E,OAAO;QACL,IAAI,EAAE,EAAE,CAAC,EAAE,EAAE,CAAC,iBAAiB,CAAC,IAAI,CAAC;QACrC,eAAe,EAAE,EAAE,CAAC,EAAE,EAAE,CAAC,kBAAkB,CAAC,GAAG,EAAE;YAC/C,MAAM,EAAE,GAAG,aAAa,EAAE,cAAc,EAAE,CAAC;YAC3C,MAAM,IAAI,GAAG,mBAAmB,CAAC,EAAE,CAAC,CAAC;YACrC,UAAU,CAAC,GAAG,CAAC,EAAE,EAAE,IAAI,CAAC,CAAC;YACzB,OAAO,OAAO,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;QAC/B,CAAC,CAAC;QACF,cAAc,EAAE,EAAE,CAAC,EAAE,EAAE,CAAC,iBAAiB,CAAC,EAAE,CAAC;QAC7C,YAAY,EAAE,EAAE,CAAC,EAAE,EAAE,CAAC,kBAAkB,CAAC,CAAC,EAAU,EAAE,EAAE;YACtD,OAAO,UAAU,CAAC,GAAG,CAAC,EAAE,CAAC,IAAI,mBAAmB,CAAC,EAAE,CAAC,CAAC;QACvD,CAAC,CAAC;KACH,CAAC;AACJ,CAAC;AAED,+EAA+E;AAC/E,QAAQ;AACR,+EAA+E;AAE/E,QAAQ,CAAC,kBAAkB,EAAE,GAAG,EAAE;IAChC,IAAI,MAAqB,CAAC;IAC1B,IAAI,OAAyB,CAAC;IAE9B,UAAU,CAAC,GAAG,EAAE;QACd,MAAM,GAAG,EAAE,CAAC,EAAE,EAAE,CAAC;QACjB,OAAO,GAAG,IAAI,gBAAgB,CAAC,MAAM,CAAC,CAAC;IACzC,CAAC,CAAC,CAAC;IAEH,SAAS,CAAC,KAAK,IAAI,EAAE;QACnB,MAAM,OAAO,CAAC,QAAQ,EAAE,CAAC;IAC3B,CAAC,CAAC,CAAC;IAEH,QAAQ,CAAC,MAAM,EAAE,GAAG,EAAE;QACpB,EAAE,CAAC,uCAAuC,EAAE,KAAK,IAAI,EAAE;YACrD,qEAAqE;YACrE,MAAM,MAAM,CAAC,OAAO,CAAC,IAAI,EAAE,CAAC,CAAC,OAAO,CAAC,OAAO,EAAE,CAAC;QACjD,CAAC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;IAEH,QAAQ,CAAC,oBAAoB,EAAE,GAAG,EAAE;QAClC,IAAI,UAA+C,CAAC;QAEpD,UAAU,CAAC,GAAG,EAAE;YACd,UAAU,GAAG,gBAAgB,EAAE,CAAC;YAChC,8BAA8B;YAC7B,OAA0C,CAAC,MAAM,GAAG,UAAU,CAAC;QAClE,CAAC,CAAC,CAAC;QAEH,EAAE,CAAC,cAAc,EAAE,KAAK,IAAI,EAAE;YAC5B,MAAM,IAAI,GAAG,MAAM,OAAO,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC;YAC9C,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;YACrC,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;YACpC,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,IAAI,CAAC,wBAAwB,CAAC,QAAQ,CAAC,CAAC;YAC9D,MAAM,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC,IAAI,CAAC,wBAAwB,CAAC,aAAa,CAAC,CAAC;YACxE,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,IAAI,CAAC,wBAAwB,CAAC,QAAQ,CAAC,CAAC;QAChE,CAAC,CAAC,CAAC;QAEH,EAAE,CAAC,aAAa,EAAE,KAAK,IAAI,EAAE;YAC3B,MAAM,IAAI,GAAG,MAAM,OAAO,CAAC,MAAM,CAAC,UAAU,EAAE;gBAC5C,QAAQ,EAAE,GAAG;gBACb,aAAa,EAAE,IAAI;gBACnB,QAAQ,EAAE,GAAG;aACd,CAAC,CAAC;YACH,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;YAChC,MAAM,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YACtC,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QAClC,CAAC,CAAC,CAAC;QAEH,EAAE,CAAC,cAAc,EAAE,KAAK,IAAI,EAAE;YAC5B,MAAM,IAAI,GAAG,MAAM,OAAO,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC;YAC9C,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,cAAc,CAAC,CAAC,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;YACrD,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,YAAY,CAAC,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;YAC/C,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,iBAAiB,CAAC,CAAC,CAAC,OAAO,CAAC,WAAW,CAAC,CAAC;QAC9D,CAAC,CAAC,CAAC;QAEH,EAAE,CAAC,WAAW,EAAE,KAAK,IAAI,EAAE;YACzB,MAAM,IAAI,GAAG,MAAM,OAAO,CAAC,MAAM,CAAC,UAAU,EAAE;gBAC5C,MAAM,EAAE,EAAE,cAAc,EAAE,OAAO,EAAE;aACpC,CAAC,CAAC;YACH,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,cAAc,CAAC,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;YAClD,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,cAAc,CAAC,CAAC,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;QACvD,CAAC,CAAC,CAAC;QAEH,EAAE,CAAC,SAAS,EAAE,KAAK,IAAI,EAAE;YACvB,MAAM,IAAI,GAAG,MAAM,OAAO,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC;YAC9C,MAAM,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC;YACtC,MAAM,UAAU,GAAG,OAAO,CAAC,iBAAiB,CAAC,UAAU,CAAC,CAAC;YACzD,MAAM,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;QAC9C,CAAC,CAAC,CAAC;QAEH,EAAE,CAAC,SAAS,EAAE,KAAK,IAAI,EAAE;YACvB,MAAM,IAAI,GAAG,MAAM,OAAO,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC;YAC9C,MAAM,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC;YACtC,MAAM,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC;YACrC,MAAM,UAAU,GAAG,OAAO,CAAC,iBAAiB,CAAC,UAAU,CAAC,CAAC;YACzD,MAAM,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;QAC9C,CAAC,CAAC,CAAC;QAEH,EAAE,CAAC,SAAS,EAAE,KAAK,IAAI,EAAE;YACvB,MAAM,IAAI,GAAG,MAAM,OAAO,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC;YAC9C,MAAM,OAAO,CAAC,MAAM,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC;YACvC,MAAM,CAAC,OAAO,CAAC,iBAAiB,CAAC,UAAU,CAAC,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QAC/D,CAAC,CAAC,CAAC;QAEH,EAAE,CAAC,iBAAiB,EAAE,KAAK,IAAI,EAAE;YAC/B,MAAM,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,aAAa,CAAC,CAAC,CAAC,OAAO,CAAC,OAAO,CAAC,iBAAiB,CAAC,CAAC;QAChF,CAAC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;IAEH,QAAQ,CAAC,kBAAkB,EAAE,GAAG,EAAE;QAChC,IAAI,UAA+C,CAAC;QAEpD,UAAU,CAAC,GAAG,EAAE;YACd,UAAU,GAAG,gBAAgB,EAAE,CAAC;YAC/B,OAA0C,CAAC,MAAM,GAAG,UAAU,CAAC;QAClE,CAAC,CAAC,CAAC;QAEH,EAAE,CAAC,mBAAmB,EAAE,KAAK,IAAI,EAAE;YACjC,MAAM,OAAO,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;YAC/B,MAAM,OAAO,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;YAC/B,MAAM,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC,OAAO,CAAC,OAAO,CAAC,gBAAgB,CAAC,CAAC;QAC3E,CAAC,CAAC,CAAC;QAEH,EAAE,CAAC,iBAAiB,EAAE,KAAK,IAAI,EAAE;YAC/B,kCAAkC;YAClC,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,wBAAwB,CAAC,kBAAkB,EAAE,CAAC,EAAE,EAAE,CAAC;gBACrE,MAAM,OAAO,CAAC,MAAM,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC;YACpC,CAAC;YACD,MAAM,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,eAAe,CAAC,CAAC,CAAC,OAAO,CAAC,OAAO,CAAC,WAAW,CAAC,CAAC;QAC7E,CAAC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;IAEH,QAAQ,CAAC,MAAM,EAAE,GAAG,EAAE;QACpB,IAAI,UAA+C,CAAC;QAEpD,UAAU,CAAC,GAAG,EAAE;YACd,UAAU,GAAG,gBAAgB,EAAE,CAAC;YAC/B,OAA0C,CAAC,MAAM,GAAG,UAAU,CAAC;QAClE,CAAC,CAAC,CAAC;QAEH,EAAE,CAAC,oBAAoB,EAAE,KAAK,IAAI,EAAE;YAClC,MAAM,IAAI,GAAG,MAAM,OAAO,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC;YAC9C,MAAM,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC;YACtC,MAAM,MAAM,GAAG,MAAM,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,WAAW,EAAE,CAAC,MAAM,EAAE,WAAW,CAAC,CAAC,CAAC;YAC3E,MAAM,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;YACpC,MAAM,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC,sBAAsB,CAAC,CAAC,CAAC,CAAC;QACtD,CAAC,CAAC,CAAC;QAEH,EAAE,CAAC,oBAAoB,EAAE,KAAK,IAAI,EAAE;YAClC,MAAM,IAAI,GAAG,MAAM,OAAO,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC;YAC9C,qCAAqC;YACrC,MAAM,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,WAAW,EAAE,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,OAAO,CAAC,YAAY,CAAC,CAAC;QAChG,CAAC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;IAEH,QAAQ,CAAC,SAAS,EAAE,GAAG,EAAE;QACvB,IAAI,UAA+C,CAAC;QAEpD,UAAU,CAAC,GAAG,EAAE;YACd,UAAU,GAAG,gBAAgB,EAAE,CAAC;YAC/B,OAA0C,CAAC,MAAM,GAAG,UAAU,CAAC;QAClE,CAAC,CAAC,CAAC;QAEH,EAAE,CAAC,aAAa,EAAE,KAAK,IAAI,EAAE;YAC3B,MAAM,IAAI,GAAG,MAAM,OAAO,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC;YAC9C,MAAM,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC;YAEtC,gDAAgD;YAChD,MAAM,UAAU,GAAG,OAAO,CAAC,aAAa,EAAE,CAAC;YAC3C,MAAM,OAAO,GAAG,IAAI,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,IAAI,CAAC,CAAC,WAAW,EAAE,CAAC;YACnE,UAAU,CAAC,CAAC,CAAgC,CAAC,cAAc,GAAG,OAAO,CAAC;YAEvE,MAAM,OAAO,GAAG,MAAM,OAAO,CAAC,OAAO,EAAE,CAAC;YACxC,MAAM,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;YACxB,MAAM,CAAC,OAAO,CAAC,aAAa,EAAE,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QACjD,CAAC,CAAC,CAAC;QAEH,EAAE,CAAC,kBAAkB,EAAE,KAAK,IAAI,EAAE;YAChC,MAAM,IAAI,GAAG,MAAM,OAAO,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC;YAC9C,MAAM,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC;YACtC,6BAA6B;YAC7B,MAAM,OAAO,GAAG,MAAM,OAAO,CAAC,OAAO,EAAE,CAAC;YACxC,MAAM,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;YACxB,MAAM,CAAC,OAAO,CAAC,aAAa,EAAE,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QACjD,CAAC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;IAEH,QAAQ,CAAC,UAAU,EAAE,GAAG,EAAE;QACxB,IAAI,UAA+C,CAAC;QAEpD,UAAU,CAAC,GAAG,EAAE;YACd,UAAU,GAAG,gBAAgB,EAAE,CAAC;YAC/B,OAA0C,CAAC,MAAM,GAAG,UAAU,CAAC;QAClE,CAAC,CAAC,CAAC;QAEH,EAAE,CAAC,iBAAiB,EAAE,KAAK,IAAI,EAAE;YAC/B,MAAM,OAAO,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;YAC/B,MAAM,OAAO,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;YAC/B,MAAM,CAAC,OAAO,CAAC,aAAa,EAAE,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;YAE/C,MAAM,OAAO,CAAC,QAAQ,EAAE,CAAC;YACzB,MAAM,CAAC,OAAO,CAAC,aAAa,EAAE,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QACjD,CAAC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;IAEH,QAAQ,CAAC,mBAAmB,EAAE,GAAG,EAAE;QACjC,IAAI,UAA+C,CAAC;QAEpD,UAAU,CAAC,GAAG,EAAE;YACd,UAAU,GAAG,gBAAgB,EAAE,CAAC;YAC/B,OAA0C,CAAC,MAAM,GAAG,UAAU,CAAC;QAClE,CAAC,CAAC,CAAC;QAEH,EAAE,CAAC,mBAAmB,EAAE,KAAK,IAAI,EAAE;YACjC,MAAM,OAAO,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;YAC/B,MAAM,OAAO,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;YAC/B,MAAM,OAAO,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;YAE/B,MAAM,CAAC,OAAO,CAAC,iBAAiB,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;YAC3D,MAAM,CAAC,OAAO,CAAC,iBAAiB,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;YAC3D,MAAM,CAAC,OAAO,CAAC,iBAAiB,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QAC7D,CAAC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;IAEH,QAAQ,CAAC,cAAc,EAAE,GAAG,EAAE;QAC5B,EAAE,CAAC,aAAa,EAAE,KAAK,IAAI,EAAE;YAC3B,IAAI,SAAS,GAAG,CAAC,CAAC;YAClB,MAAM,aAAa,GAAG;gBACpB,IAAI,EAAE,EAAE,CAAC,EAAE,EAAE,CAAC,iBAAiB,CAAC,IAAI,CAAC;gBACrC,eAAe,EAAE,EAAE,CAAC,EAAE,EAAE,CAAC,kBAAkB,CAAC,GAAG,EAAE;oBAC/C,SAAS,EAAE,CAAC;oBACZ,IAAI,SAAS,IAAI,CAAC;wBAAE,MAAM,IAAI,KAAK,CAAC,eAAe,CAAC,CAAC;oBACrD,OAAO,OAAO,CAAC,OAAO,CAAC,mBAAmB,CAAC,eAAe,CAAC,CAAC,CAAC;gBAC/D,CAAC,CAAC;gBACF,cAAc,EAAE,EAAE,CAAC,EAAE,EAAE,CAAC,iBAAiB,CAAC,EAAE,CAAC;gBAC7C,YAAY,EAAE,EAAE,CAAC,EAAE,EAAE;aACtB,CAAC;YACD,OAA0C,CAAC,MAAM,GAAG,aAAa,CAAC;YAEnE,MAAM,IAAI,GAAG,MAAM,OAAO,CAAC,MAAM,CAAC,YAAY,CAAC,CAAC;YAChD,MAAM,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC,IAAI,CAAC,eAAe,CAAC,CAAC;YAC/C,MAAM,CAAC,SAAS,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QAC5B,CAAC,CAAC,CAAC;QAEH,EAAE,CAAC,aAAa,EAAE,KAAK,IAAI,EAAE;YAC3B,MAAM,gBAAgB,GAAG;gBACvB,IAAI,EAAE,EAAE,CAAC,EAAE,EAAE,CAAC,iBAAiB,CAAC,IAAI,CAAC;gBACrC,eAAe,EAAE,EAAE,CAAC,EAAE,EAAE,CAAC,iBAAiB,CAAC,IAAI,KAAK,CAAC,kBAAkB,CAAC,CAAC;gBACzE,cAAc,EAAE,EAAE,CAAC,EAAE,EAAE,CAAC,iBAAiB,CAAC,EAAE,CAAC;gBAC7C,YAAY,EAAE,EAAE,CAAC,EAAE,EAAE;aACtB,CAAC;YACD,OAA0C,CAAC,MAAM,GAAG,gBAAgB,CAAC;YAEtE,MAAM,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,WAAW,CAAC,CAAC,CAAC,OAAO,CAAC,OAAO,CAAC,YAAY,CAAC,CAAC;QAC1E,CAAC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC"}

package/dist/pc/sandbox/ExecAllowlist.d.ts

@@ -0,0 +1,35 @@
+/**
+ * Exec Allowlist — Phase 5-3
+ *
+ * Command execution allowlist with pattern matching.
+ * Blocks dangerous patterns: redirections, subshells, etc.
+ */
+import type { AllowlistEntry, ApprovalRequest, SandboxLogger } from './types.js';
+export declare class ExecAllowlist {
+    private entries;
+    private pendingApprovals;
+    private logger;
+    constructor(logger: SandboxLogger, customEntries?: AllowlistEntry[]);
+    /**
+     * Check if a command is allowed.
+     * Returns: 'allowed' | 'denied' | 'ask'
+     */
+    check(command: string): 'allowed' | 'denied' | 'ask';
+    /** Check if command contains dangerous patterns */
+    isDangerous(command: string): boolean;
+    /** Parse command string into argv (simple split) */
+    parseCommand(command: string): string[];
+    /** Check if binary is in the allowlist */
+    isInAllowlist(binary: string): boolean;
+    /** Add a new entry to the allowlist */
+    addEntry(pattern: string, description?: string, addedBy?: 'user' | 'auto'): void;
+    /** Create an approval request for review */
+    createApproval(command: string, userId: string): ApprovalRequest;
+    /** Resolve an approval request */
+    resolveApproval(requestId: string, status: 'approved' | 'denied', alwaysAllow?: boolean): ApprovalRequest | undefined;
+    /** Get all entries */
+    getEntries(): AllowlistEntry[];
+    /** Get pending approvals */
+    getPendingApprovals(): ApprovalRequest[];
+}
+//# sourceMappingURL=ExecAllowlist.d.ts.map

package/dist/pc/sandbox/ExecAllowlist.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"ExecAllowlist.d.ts","sourceRoot":"","sources":["../../../src/pc/sandbox/ExecAllowlist.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,OAAO,KAAK,EACV,cAAc,EACd,eAAe,EAEf,aAAa,EACd,MAAM,YAAY,CAAC;AA+CpB,qBAAa,aAAa;IACxB,OAAO,CAAC,OAAO,CAAmB;IAClC,OAAO,CAAC,gBAAgB,CAAsC;IAC9D,OAAO,CAAC,MAAM,CAAgB;gBAElB,MAAM,EAAE,aAAa,EAAE,aAAa,CAAC,EAAE,cAAc,EAAE;IAQnE;;;OAGG;IACH,KAAK,CAAC,OAAO,EAAE,MAAM,GAAG,SAAS,GAAG,QAAQ,GAAG,KAAK;IAsBpD,mDAAmD;IACnD,WAAW,CAAC,OAAO,EAAE,MAAM,GAAG,OAAO;IAIrC,oDAAoD;IACpD,YAAY,CAAC,OAAO,EAAE,MAAM,GAAG,MAAM,EAAE;IAIvC,0CAA0C;IAC1C,aAAa,CAAC,MAAM,EAAE,MAAM,GAAG,OAAO;IAatC,uCAAuC;IACvC,QAAQ,CAAC,OAAO,EAAE,MAAM,EAAE,WAAW,CAAC,EAAE,MAAM,EAAE,OAAO,GAAE,MAAM,GAAG,MAAe,GAAG,IAAI;IASxF,4CAA4C;IAC5C,cAAc,CAAC,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,GAAG,eAAe;IAahE,kCAAkC;IAClC,eAAe,CAAC,SAAS,EAAE,MAAM,EAAE,MAAM,EAAE,UAAU,GAAG,QAAQ,EAAE,WAAW,CAAC,EAAE,OAAO,GAAG,eAAe,GAAG,SAAS;IAmBrH,sBAAsB;IACtB,UAAU,IAAI,cAAc,EAAE;IAI9B,4BAA4B;IAC5B,mBAAmB,IAAI,eAAe,EAAE;CAGzC"}

package/dist/pc/sandbox/ExecAllowlist.js

@@ -0,0 +1,148 @@
+/**
+ * Exec Allowlist — Phase 5-3
+ *
+ * Command execution allowlist with pattern matching.
+ * Blocks dangerous patterns: redirections, subshells, etc.
+ */
+// ============================================================================
+// Default safe binaries
+// ============================================================================
+const DEFAULT_SAFE_BINS = [
+    { pattern: '/usr/bin/git', description: 'Git version control', addedAt: '', addedBy: 'default' },
+    { pattern: '/usr/bin/node', description: 'Node.js runtime', addedAt: '', addedBy: 'default' },
+    { pattern: '/usr/bin/npm', description: 'npm package manager', addedAt: '', addedBy: 'default' },
+    { pattern: '/usr/local/bin/pnpm', description: 'pnpm package manager', addedAt: '', addedBy: 'default' },
+    { pattern: '/usr/bin/grep', description: 'Text search', addedAt: '', addedBy: 'default' },
+    { pattern: '/usr/bin/jq', description: 'JSON processor', addedAt: '', addedBy: 'default' },
+    { pattern: '/usr/bin/curl', description: 'HTTP client', addedAt: '', addedBy: 'default' },
+    { pattern: '/usr/bin/cat', description: 'File concatenation', addedAt: '', addedBy: 'default' },
+    { pattern: '/usr/bin/ls', description: 'List directory', addedAt: '', addedBy: 'default' },
+    { pattern: '/usr/bin/find', description: 'Find files', addedAt: '', addedBy: 'default' },
+];
+// ============================================================================
+// Dangerous patterns
+// ============================================================================
+const DANGEROUS_PATTERNS = [
+    /\0/, // Null byte injection
+    /[>|]/, // Redirections and pipes
+    /\$\(/, // Command substitution
+    /`/, // Backtick substitution
+    /;\s*/, // Command chaining with semicolons
+    /&&/, // Logical AND chaining
+    /\|\|/, // Logical OR chaining
+    /\brm\b.*-[rR]f/, // Recursive force delete
+    /\bkill\b.*-9/, // Force kill
+    /\bchmod\b.*777/, // World-writable permissions
+    /\bdd\b/, // Disk destroyer
+    /\bmkfs\b/, // Filesystem creation
+    /\bformat\b/, // Format command
+    /\/dev\//, // Device access
+    /\/proc\//, // Proc filesystem
+    /\/sys\//, // Sys filesystem
+];
+// ============================================================================
+// Exec Allowlist
+// ============================================================================
+export class ExecAllowlist {
+    entries;
+    pendingApprovals = new Map();
+    logger;
+    constructor(logger, customEntries) {
+        this.logger = logger;
+        this.entries = [
+            ...DEFAULT_SAFE_BINS.map(e => ({ ...e, addedAt: new Date().toISOString() })),
+            ...(customEntries ?? []),
+        ];
+    }
+    /**
+     * Check if a command is allowed.
+     * Returns: 'allowed' | 'denied' | 'ask'
+     */
+    check(command) {
+        // Check dangerous patterns first
+        if (this.isDangerous(command)) {
+            this.logger('warn', `Dangerous command blocked: ${command}`);
+            return 'denied';
+        }
+        // Parse command to get binary
+        const argv = this.parseCommand(command);
+        if (argv.length === 0)
+            return 'denied';
+        const binary = argv[0];
+        // Check allowlist
+        if (this.isInAllowlist(binary)) {
+            return 'allowed';
+        }
+        // Not in allowlist → ask for approval
+        return 'ask';
+    }
+    /** Check if command contains dangerous patterns */
+    isDangerous(command) {
+        return DANGEROUS_PATTERNS.some(pattern => pattern.test(command));
+    }
+    /** Parse command string into argv (simple split) */
+    parseCommand(command) {
+        return command.trim().split(/\s+/).filter(Boolean);
+    }
+    /** Check if binary is in the allowlist */
+    isInAllowlist(binary) {
+        return this.entries.some(entry => {
+            if (entry.pattern.includes('*')) {
+                const regex = new RegExp('^' + entry.pattern.replace(/\*/g, '.*') + '$');
+                return regex.test(binary);
+            }
+            // Match by full path or basename
+            const basename = binary.split('/').pop() ?? binary;
+            const entryBasename = entry.pattern.split('/').pop() ?? entry.pattern;
+            return entry.pattern === binary || entryBasename === basename;
+        });
+    }
+    /** Add a new entry to the allowlist */
+    addEntry(pattern, description, addedBy = 'user') {
+        this.entries.push({
+            pattern,
+            description,
+            addedAt: new Date().toISOString(),
+            addedBy,
+        });
+    }
+    /** Create an approval request for review */
+    createApproval(command, userId) {
+        const request = {
+            requestId: `approval-${Date.now()}-${Math.random().toString(36).slice(2, 8)}`,
+            command,
+            userId,
+            status: 'pending',
+            createdAt: new Date().toISOString(),
+            alwaysAllow: false,
+        };
+        this.pendingApprovals.set(request.requestId, request);
+        return request;
+    }
+    /** Resolve an approval request */
+    resolveApproval(requestId, status, alwaysAllow) {
+        const request = this.pendingApprovals.get(requestId);
+        if (!request)
+            return undefined;
+        request.status = status;
+        request.respondedAt = new Date().toISOString();
+        request.alwaysAllow = alwaysAllow ?? false;
+        if (status === 'approved' && alwaysAllow) {
+            const argv = this.parseCommand(request.command);
+            if (argv.length > 0) {
+                this.addEntry(argv[0], `Auto-added from approval: ${request.command}`, 'auto');
+            }
+        }
+        this.pendingApprovals.delete(requestId);
+        return request;
+    }
+    /** Get all entries */
+    getEntries() {
+        return [...this.entries];
+    }
+    /** Get pending approvals */
+    getPendingApprovals() {
+        return Array.from(this.pendingApprovals.values());
+    }
+}
+//# sourceMappingURL=ExecAllowlist.js.map

package/dist/pc/sandbox/ExecAllowlist.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"ExecAllowlist.js","sourceRoot":"","sources":["../../../src/pc/sandbox/ExecAllowlist.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAUH,+EAA+E;AAC/E,wBAAwB;AACxB,+EAA+E;AAE/E,MAAM,iBAAiB,GAAqB;IAC1C,EAAE,OAAO,EAAE,cAAc,EAAE,WAAW,EAAE,qBAAqB,EAAE,OAAO,EAAE,EAAE,EAAE,OAAO,EAAE,SAAS,EAAE;IAChG,EAAE,OAAO,EAAE,eAAe,EAAE,WAAW,EAAE,iBAAiB,EAAE,OAAO,EAAE,EAAE,EAAE,OAAO,EAAE,SAAS,EAAE;IAC7F,EAAE,OAAO,EAAE,cAAc,EAAE,WAAW,EAAE,qBAAqB,EAAE,OAAO,EAAE,EAAE,EAAE,OAAO,EAAE,SAAS,EAAE;IAChG,EAAE,OAAO,EAAE,qBAAqB,EAAE,WAAW,EAAE,sBAAsB,EAAE,OAAO,EAAE,EAAE,EAAE,OAAO,EAAE,SAAS,EAAE;IACxG,EAAE,OAAO,EAAE,eAAe,EAAE,WAAW,EAAE,aAAa,EAAE,OAAO,EAAE,EAAE,EAAE,OAAO,EAAE,SAAS,EAAE;IACzF,EAAE,OAAO,EAAE,aAAa,EAAE,WAAW,EAAE,gBAAgB,EAAE,OAAO,EAAE,EAAE,EAAE,OAAO,EAAE,SAAS,EAAE;IAC1F,EAAE,OAAO,EAAE,eAAe,EAAE,WAAW,EAAE,aAAa,EAAE,OAAO,EAAE,EAAE,EAAE,OAAO,EAAE,SAAS,EAAE;IACzF,EAAE,OAAO,EAAE,cAAc,EAAE,WAAW,EAAE,oBAAoB,EAAE,OAAO,EAAE,EAAE,EAAE,OAAO,EAAE,SAAS,EAAE;IAC/F,EAAE,OAAO,EAAE,aAAa,EAAE,WAAW,EAAE,gBAAgB,EAAE,OAAO,EAAE,EAAE,EAAE,OAAO,EAAE,SAAS,EAAE;IAC1F,EAAE,OAAO,EAAE,eAAe,EAAE,WAAW,EAAE,YAAY,EAAE,OAAO,EAAE,EAAE,EAAE,OAAO,EAAE,SAAS,EAAE;CACzF,CAAC;AAEF,+EAA+E;AAC/E,qBAAqB;AACrB,+EAA+E;AAE/E,MAAM,kBAAkB,GAAG;IACzB,IAAI,EAAE,sBAAsB;IAC5B,MAAM,EAAE,yBAAyB;IACjC,MAAM,EAAE,uBAAuB;IAC/B,GAAG,EAAE,wBAAwB;IAC7B,MAAM,EAAE,mCAAmC;IAC3C,IAAI,EAAE,uBAAuB;IAC7B,MAAM,EAAE,sBAAsB;IAC9B,gBAAgB,EAAE,yBAAyB;IAC3C,cAAc,EAAE,aAAa;IAC7B,gBAAgB,EAAE,6BAA6B;IAC/C,QAAQ,EAAE,iBAAiB;IAC3B,UAAU,EAAE,sBAAsB;IAClC,YAAY,EAAE,iBAAiB;IAC/B,SAAS,EAAE,gBAAgB;IAC3B,UAAU,EAAE,kBAAkB;IAC9B,SAAS,EAAE,iBAAiB;CAC7B,CAAC;AAEF,+EAA+E;AAC/E,iBAAiB;AACjB,+EAA+E;AAE/E,MAAM,OAAO,aAAa;IAChB,OAAO,CAAmB;IAC1B,gBAAgB,GAAG,IAAI,GAAG,EAA2B,CAAC;IACtD,MAAM,CAAgB;IAE9B,YAAY,MAAqB,EAAE,aAAgC;QACjE,IAAI,CAAC,MAAM,GAAG,MAAM,CAAC;QACrB,IAAI,CAAC,OAAO,GAAG;YACb,GAAG,iBAAiB,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE,GAAG,CAAC,EAAE,OAAO,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,EAAE,CAAC,CAAC;YAC5E,GAAG,CAAC,aAAa,IAAI,EAAE,CAAC;SACzB,CAAC;IACJ,CAAC;IAED;;;OAGG;IACH,KAAK,CAAC,OAAe;QACnB,iCAAiC;QACjC,IAAI,IAAI,CAAC,WAAW,CAAC,OAAO,CAAC,EAAE,CAAC;YAC9B,IAAI,CAAC,MAAM,CAAC,MAAM,EAAE,8BAA8B,OAAO,EAAE,CAAC,CAAC;YAC7D,OAAO,QAAQ,CAAC;QAClB,CAAC;QAED,8BAA8B;QAC9B,MAAM,IAAI,GAAG,IAAI,CAAC,YAAY,CAAC,OAAO,CAAC,CAAC;QACxC,IAAI,IAAI,CAAC,MAAM,KAAK,CAAC;YAAE,OAAO,QAAQ,CAAC;QAEvC,MAAM,MAAM,GAAG,IAAI,CAAC,CAAC,CAAC,CAAC;QAEvB,kBAAkB;QAClB,IAAI,IAAI,CAAC,aAAa,CAAC,MAAM,CAAC,EAAE,CAAC;YAC/B,OAAO,SAAS,CAAC;QACnB,CAAC;QAED,sCAAsC;QACtC,OAAO,KAAK,CAAC;IACf,CAAC;IAED,mDAAmD;IACnD,WAAW,CAAC,OAAe;QACzB,OAAO,kBAAkB,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC;IACnE,CAAC;IAED,oDAAoD;IACpD,YAAY,CAAC,OAAe;QAC1B,OAAO,OAAO,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;IACrD,CAAC;IAED,0CAA0C;IAC1C,aAAa,CAAC,MAAc;QAC1B,OAAO,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE;YAC/B,IAAI,KAAK,CAAC,OAAO,CAAC,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC;gBAChC,MAAM,KAAK,GAAG,IAAI,MAAM,CAAC,GAAG,GAAG,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC,KAAK,EAAE,IAAI,CAAC,GAAG,GAAG,CAAC,CAAC;gBACzE,OAAO,KAAK,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;YAC5B,CAAC;YACD,iCAAiC;YACjC,MAAM,QAAQ,GAAG,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,IAAI,MAAM,CAAC;YACnD,MAAM,aAAa,GAAG,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,IAAI,KAAK,CAAC,OAAO,CAAC;YACtE,OAAO,KAAK,CAAC,OAAO,KAAK,MAAM,IAAI,aAAa,KAAK,QAAQ,CAAC;QAChE,CAAC,CAAC,CAAC;IACL,CAAC;IAED,uCAAuC;IACvC,QAAQ,CAAC,OAAe,EAAE,WAAoB,EAAE,UAA2B,MAAM;QAC/E,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC;YAChB,OAAO;YACP,WAAW;YACX,OAAO,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;YACjC,OAAO;SACR,CAAC,CAAC;IACL,CAAC;IAED,4CAA4C;IAC5C,cAAc,CAAC,OAAe,EAAE,MAAc;QAC5C,MAAM,OAAO,GAAoB;YAC/B,SAAS,EAAE,YAAY,IAAI,CAAC,GAAG,EAAE,IAAI,IAAI,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE;YAC7E,OAAO;YACP,MAAM;YACN,MAAM,EAAE,SAAS;YACjB,SAAS,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;YACnC,WAAW,EAAE,KAAK;SACnB,CAAC;QACF,IAAI,CAAC,gBAAgB,CAAC,GAAG,CAAC,OAAO,CAAC,SAAS,EAAE,OAAO,CAAC,CAAC;QACtD,OAAO,OAAO,CAAC;IACjB,CAAC;IAED,kCAAkC;IAClC,eAAe,CAAC,SAAiB,EAAE,MAA6B,EAAE,WAAqB;QACrF,MAAM,OAAO,GAAG,IAAI,CAAC,gBAAgB,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;QACrD,IAAI,CAAC,OAAO;YAAE,OAAO,SAAS,CAAC;QAE/B,OAAO,CAAC,MAAM,GAAG,MAAM,CAAC;QACxB,OAAO,CAAC,WAAW,GAAG,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;QAC/C,OAAO,CAAC,WAAW,GAAG,WAAW,IAAI,KAAK,CAAC;QAE3C,IAAI,MAAM,KAAK,UAAU,IAAI,WAAW,EAAE,CAAC;YACzC,MAAM,IAAI,GAAG,IAAI,CAAC,YAAY,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC;YAChD,IAAI,IAAI,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;gBACpB,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,6BAA6B,OAAO,CAAC,OAAO,EAAE,EAAE,MAAM,CAAC,CAAC;YACjF,CAAC;QACH,CAAC;QAED,IAAI,CAAC,gBAAgB,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC;QACxC,OAAO,OAAO,CAAC;IACjB,CAAC;IAED,sBAAsB;IACtB,UAAU;QACR,OAAO,CAAC,GAAG,IAAI,CAAC,OAAO,CAAC,CAAC;IAC3B,CAAC;IAED,4BAA4B;IAC5B,mBAAmB;QACjB,OAAO,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,gBAAgB,CAAC,MAAM,EAAE,CAAC,CAAC;IACpD,CAAC;CACF"}

package/dist/pc/sandbox/ExecAllowlist.test.d.ts

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=ExecAllowlist.test.d.ts.map

package/dist/pc/sandbox/ExecAllowlist.test.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"ExecAllowlist.test.d.ts","sourceRoot":"","sources":["../../../src/pc/sandbox/ExecAllowlist.test.ts"],"names":[],"mappings":""}