@su-record/vibe 2.7.11 → 2.7.13

package/dist/pc/sandbox/ExecAllowlist.test.js

@@ -1,210 +0,0 @@
-/**
- * ExecAllowlist Tests — Phase 5-6
- */
-import { describe, it, expect, vi, beforeEach } from 'vitest';
-import { ExecAllowlist } from './ExecAllowlist.js';
-// ============================================================================
-// Tests
-// ============================================================================
-describe('ExecAllowlist', () => {
-    let logger;
-    let allowlist;
-    beforeEach(() => {
-        logger = vi.fn();
-        allowlist = new ExecAllowlist(logger);
-    });
-    describe('check', () => {
-        it('기본 안전 바이너리 허용 (git)', () => {
-            expect(allowlist.check('git status')).toBe('allowed');
-        });
-        it('기본 안전 바이너리 허용 (node)', () => {
-            expect(allowlist.check('node --version')).toBe('allowed');
-        });
-        it('기본 안전 바이너리 허용 (npm)', () => {
-            expect(allowlist.check('npm install')).toBe('allowed');
-        });
-        it('기본 안전 바이너리 허용 (grep)', () => {
-            expect(allowlist.check('grep -r pattern')).toBe('allowed');
-        });
-        it('기본 안전 바이너리 허용 (ls)', () => {
-            expect(allowlist.check('ls -la')).toBe('allowed');
-        });
-        it('기본 안전 바이너리 허용 (cat)', () => {
-            expect(allowlist.check('cat file.txt')).toBe('allowed');
-        });
-        it('기본 안전 바이너리 허용 (curl)', () => {
-            expect(allowlist.check('curl https://example.com')).toBe('allowed');
-        });
-        it('미등록 바이너리는 ask 반환', () => {
-            expect(allowlist.check('python script.py')).toBe('ask');
-        });
-        it('전체경로로도 매칭 (basename)', () => {
-            expect(allowlist.check('/usr/bin/git status')).toBe('allowed');
-        });
-    });
-    describe('dangerous patterns', () => {
-        it('리다이렉션 차단 (>)', () => {
-            expect(allowlist.check('echo hello > file.txt')).toBe('denied');
-        });
-        it('파이프 차단 (|)', () => {
-            expect(allowlist.check('cat file | grep test')).toBe('denied');
-        });
-        it('명령 치환 차단 ($())', () => {
-            expect(allowlist.check('echo $(whoami)')).toBe('denied');
-        });
-        it('백틱 치환 차단', () => {
-            expect(allowlist.check('echo `whoami`')).toBe('denied');
-        });
-        it('세미콜론 체이닝 차단', () => {
-            expect(allowlist.check('ls; rm -rf /')).toBe('denied');
-        });
-        it('&& 체이닝 차단', () => {
-            expect(allowlist.check('ls && rm -rf /')).toBe('denied');
-        });
-        it('|| 체이닝 차단', () => {
-            expect(allowlist.check('ls || rm -rf /')).toBe('denied');
-        });
-        it('null byte injection 차단', () => {
-            expect(allowlist.check('git\0 --help')).toBe('denied');
-        });
-        it('rm -rf 차단', () => {
-            expect(allowlist.check('rm -rf /')).toBe('denied');
-        });
-        it('rm -Rf 차단', () => {
-            expect(allowlist.check('rm -Rf /tmp')).toBe('denied');
-        });
-        it('kill -9 차단', () => {
-            expect(allowlist.check('kill -9 1234')).toBe('denied');
-        });
-        it('chmod 777 차단', () => {
-            expect(allowlist.check('chmod 777 /tmp/file')).toBe('denied');
-        });
-        it('dd 차단', () => {
-            expect(allowlist.check('dd if=/dev/zero of=/dev/sda')).toBe('denied');
-        });
-        it('mkfs 차단', () => {
-            expect(allowlist.check('mkfs.ext4 /dev/sda1')).toBe('denied');
-        });
-        it('/dev/ 접근 차단', () => {
-            expect(allowlist.check('cat /dev/urandom')).toBe('denied');
-        });
-        it('/proc/ 접근 차단', () => {
-            expect(allowlist.check('cat /proc/meminfo')).toBe('denied');
-        });
-        it('/sys/ 접근 차단', () => {
-            expect(allowlist.check('cat /sys/class/net')).toBe('denied');
-        });
-    });
-    describe('isDangerous', () => {
-        it('안전한 명령은 false', () => {
-            expect(allowlist.isDangerous('git status')).toBe(false);
-            expect(allowlist.isDangerous('node --version')).toBe(false);
-            expect(allowlist.isDangerous('ls -la')).toBe(false);
-        });
-        it('위험한 명령은 true', () => {
-            expect(allowlist.isDangerous('rm -rf /')).toBe(true);
-            expect(allowlist.isDangerous('echo hello > file')).toBe(true);
-            expect(allowlist.isDangerous('cat /dev/zero')).toBe(true);
-        });
-    });
-    describe('parseCommand', () => {
-        it('단순 명령 파싱', () => {
-            expect(allowlist.parseCommand('git status')).toEqual(['git', 'status']);
-        });
-        it('여러 인자 파싱', () => {
-            expect(allowlist.parseCommand('node --version --help')).toEqual(['node', '--version', '--help']);
-        });
-        it('공백 정리', () => {
-            expect(allowlist.parseCommand('  git   status  ')).toEqual(['git', 'status']);
-        });
-        it('빈 명령', () => {
-            expect(allowlist.parseCommand('')).toEqual([]);
-        });
-    });
-    describe('isInAllowlist', () => {
-        it('basename으로 매칭', () => {
-            expect(allowlist.isInAllowlist('git')).toBe(true);
-            expect(allowlist.isInAllowlist('node')).toBe(true);
-        });
-        it('전체 경로로 매칭', () => {
-            expect(allowlist.isInAllowlist('/usr/bin/git')).toBe(true);
-            expect(allowlist.isInAllowlist('/usr/bin/node')).toBe(true);
-        });
-        it('미등록 바이너리', () => {
-            expect(allowlist.isInAllowlist('python')).toBe(false);
-            expect(allowlist.isInAllowlist('ruby')).toBe(false);
-        });
-    });
-    describe('addEntry', () => {
-        it('새 항목 추가', () => {
-            allowlist.addEntry('python', 'Python runtime');
-            expect(allowlist.check('python script.py')).toBe('allowed');
-        });
-        it('와일드카드 패턴 추가', () => {
-            allowlist.addEntry('/usr/local/bin/*', 'Local binaries');
-            expect(allowlist.isInAllowlist('/usr/local/bin/python')).toBe(true);
-        });
-        it('getEntries에 포함됨', () => {
-            const before = allowlist.getEntries().length;
-            allowlist.addEntry('ruby', 'Ruby runtime');
-            expect(allowlist.getEntries().length).toBe(before + 1);
-        });
-    });
-    describe('approval flow', () => {
-        it('승인 요청 생성', () => {
-            const request = allowlist.createApproval('python script.py', 'user-123');
-            expect(request.requestId).toMatch(/^approval-/);
-            expect(request.command).toBe('python script.py');
-            expect(request.userId).toBe('user-123');
-            expect(request.status).toBe('pending');
-            expect(request.alwaysAllow).toBe(false);
-        });
-        it('대기 중인 승인 목록', () => {
-            allowlist.createApproval('cmd1', 'user-1');
-            allowlist.createApproval('cmd2', 'user-2');
-            expect(allowlist.getPendingApprovals().length).toBe(2);
-        });
-        it('승인 해결 (approved)', () => {
-            const request = allowlist.createApproval('python script.py', 'user-123');
-            const resolved = allowlist.resolveApproval(request.requestId, 'approved');
-            expect(resolved?.status).toBe('approved');
-            expect(resolved?.respondedAt).toBeDefined();
-            expect(allowlist.getPendingApprovals().length).toBe(0);
-        });
-        it('승인 해결 (denied)', () => {
-            const request = allowlist.createApproval('bad-cmd', 'user-123');
-            const resolved = allowlist.resolveApproval(request.requestId, 'denied');
-            expect(resolved?.status).toBe('denied');
-        });
-        it('always-allow 시 자동 Allowlist 추가', () => {
-            const request = allowlist.createApproval('python script.py', 'user-123');
-            allowlist.resolveApproval(request.requestId, 'approved', true);
-            expect(allowlist.check('python other.py')).toBe('allowed');
-        });
-        it('존재하지 않는 요청 ID 처리', () => {
-            const resolved = allowlist.resolveApproval('nonexistent', 'approved');
-            expect(resolved).toBeUndefined();
-        });
-    });
-    describe('getEntries', () => {
-        it('기본 엔트리 포함', () => {
-            const entries = allowlist.getEntries();
-            expect(entries.length).toBeGreaterThanOrEqual(10); // 10 default bins
-            expect(entries.some(e => e.pattern.includes('git'))).toBe(true);
-        });
-        it('반환값은 복사본', () => {
-            const entries1 = allowlist.getEntries();
-            const entries2 = allowlist.getEntries();
-            expect(entries1).not.toBe(entries2);
-        });
-    });
-    describe('custom entries', () => {
-        it('생성자에서 커스텀 엔트리 추가', () => {
-            const custom = new ExecAllowlist(logger, [
-                { pattern: 'python', description: 'Python', addedAt: '', addedBy: 'user' },
-            ]);
-            expect(custom.check('python script.py')).toBe('allowed');
-        });
-    });
-});
-//# sourceMappingURL=ExecAllowlist.test.js.map

package/dist/pc/sandbox/ExecAllowlist.test.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"ExecAllowlist.test.js","sourceRoot":"","sources":["../../../src/pc/sandbox/ExecAllowlist.test.ts"],"names":[],"mappings":"AAAA;;GAEG;AACH,OAAO,EAAE,QAAQ,EAAE,EAAE,EAAE,MAAM,EAAE,EAAE,EAAE,UAAU,EAAE,MAAM,QAAQ,CAAC;AAC9D,OAAO,EAAE,aAAa,EAAE,MAAM,oBAAoB,CAAC;AAGnD,+EAA+E;AAC/E,QAAQ;AACR,+EAA+E;AAE/E,QAAQ,CAAC,eAAe,EAAE,GAAG,EAAE;IAC7B,IAAI,MAAqB,CAAC;IAC1B,IAAI,SAAwB,CAAC;IAE7B,UAAU,CAAC,GAAG,EAAE;QACd,MAAM,GAAG,EAAE,CAAC,EAAE,EAAE,CAAC;QACjB,SAAS,GAAG,IAAI,aAAa,CAAC,MAAM,CAAC,CAAC;IACxC,CAAC,CAAC,CAAC;IAEH,QAAQ,CAAC,OAAO,EAAE,GAAG,EAAE;QACrB,EAAE,CAAC,qBAAqB,EAAE,GAAG,EAAE;YAC7B,MAAM,CAAC,SAAS,CAAC,KAAK,CAAC,YAAY,CAAC,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;QACxD,CAAC,CAAC,CAAC;QAEH,EAAE,CAAC,sBAAsB,EAAE,GAAG,EAAE;YAC9B,MAAM,CAAC,SAAS,CAAC,KAAK,CAAC,gBAAgB,CAAC,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;QAC5D,CAAC,CAAC,CAAC;QAEH,EAAE,CAAC,qBAAqB,EAAE,GAAG,EAAE;YAC7B,MAAM,CAAC,SAAS,CAAC,KAAK,CAAC,aAAa,CAAC,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;QACzD,CAAC,CAAC,CAAC;QAEH,EAAE,CAAC,sBAAsB,EAAE,GAAG,EAAE;YAC9B,MAAM,CAAC,SAAS,CAAC,KAAK,CAAC,iBAAiB,CAAC,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;QAC7D,CAAC,CAAC,CAAC;QAEH,EAAE,CAAC,oBAAoB,EAAE,GAAG,EAAE;YAC5B,MAAM,CAAC,SAAS,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;QACpD,CAAC,CAAC,CAAC;QAEH,EAAE,CAAC,qBAAqB,EAAE,GAAG,EAAE;YAC7B,MAAM,CAAC,SAAS,CAAC,KAAK,CAAC,cAAc,CAAC,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;QAC1D,CAAC,CAAC,CAAC;QAEH,EAAE,CAAC,sBAAsB,EAAE,GAAG,EAAE;YAC9B,MAAM,CAAC,SAAS,CAAC,KAAK,CAAC,0BAA0B,CAAC,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;QACtE,CAAC,CAAC,CAAC;QAEH,EAAE,CAAC,kBAAkB,EAAE,GAAG,EAAE;YAC1B,MAAM,CAAC,SAAS,CAAC,KAAK,CAAC,kBAAkB,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QAC1D,CAAC,CAAC,CAAC;QAEH,EAAE,CAAC,sBAAsB,EAAE,GAAG,EAAE;YAC9B,MAAM,CAAC,SAAS,CAAC,KAAK,CAAC,qBAAqB,CAAC,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;QACjE,CAAC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;IAEH,QAAQ,CAAC,oBAAoB,EAAE,GAAG,EAAE;QAClC,EAAE,CAAC,cAAc,EAAE,GAAG,EAAE;YACtB,MAAM,CAAC,SAAS,CAAC,KAAK,CAAC,uBAAuB,CAAC,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;QAClE,CAAC,CAAC,CAAC;QAEH,EAAE,CAAC,YAAY,EAAE,GAAG,EAAE;YACpB,MAAM,CAAC,SAAS,CAAC,KAAK,CAAC,sBAAsB,CAAC,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;QACjE,CAAC,CAAC,CAAC;QAEH,EAAE,CAAC,gBAAgB,EAAE,GAAG,EAAE;YACxB,MAAM,CAAC,SAAS,CAAC,KAAK,CAAC,gBAAgB,CAAC,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;QAC3D,CAAC,CAAC,CAAC;QAEH,EAAE,CAAC,UAAU,EAAE,GAAG,EAAE;YAClB,MAAM,CAAC,SAAS,CAAC,KAAK,CAAC,eAAe,CAAC,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;QAC1D,CAAC,CAAC,CAAC;QAEH,EAAE,CAAC,aAAa,EAAE,GAAG,EAAE;YACrB,MAAM,CAAC,SAAS,CAAC,KAAK,CAAC,cAAc,CAAC,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;QACzD,CAAC,CAAC,CAAC;QAEH,EAAE,CAAC,WAAW,EAAE,GAAG,EAAE;YACnB,MAAM,CAAC,SAAS,CAAC,KAAK,CAAC,gBAAgB,CAAC,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;QAC3D,CAAC,CAAC,CAAC;QAEH,EAAE,CAAC,WAAW,EAAE,GAAG,EAAE;YACnB,MAAM,CAAC,SAAS,CAAC,KAAK,CAAC,gBAAgB,CAAC,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;QAC3D,CAAC,CAAC,CAAC;QAEH,EAAE,CAAC,wBAAwB,EAAE,GAAG,EAAE;YAChC,MAAM,CAAC,SAAS,CAAC,KAAK,CAAC,cAAc,CAAC,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;QACzD,CAAC,CAAC,CAAC;QAEH,EAAE,CAAC,WAAW,EAAE,GAAG,EAAE;YACnB,MAAM,CAAC,SAAS,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;QACrD,CAAC,CAAC,CAAC;QAEH,EAAE,CAAC,WAAW,EAAE,GAAG,EAAE;YACnB,MAAM,CAAC,SAAS,CAAC,KAAK,CAAC,aAAa,CAAC,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;QACxD,CAAC,CAAC,CAAC;QAEH,EAAE,CAAC,YAAY,EAAE,GAAG,EAAE;YACpB,MAAM,CAAC,SAAS,CAAC,KAAK,CAAC,cAAc,CAAC,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;QACzD,CAAC,CAAC,CAAC;QAEH,EAAE,CAAC,cAAc,EAAE,GAAG,EAAE;YACtB,MAAM,CAAC,SAAS,CAAC,KAAK,CAAC,qBAAqB,CAAC,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;QAChE,CAAC,CAAC,CAAC;QAEH,EAAE,CAAC,OAAO,EAAE,GAAG,EAAE;YACf,MAAM,CAAC,SAAS,CAAC,KAAK,CAAC,6BAA6B,CAAC,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;QACxE,CAAC,CAAC,CAAC;QAEH,EAAE,CAAC,SAAS,EAAE,GAAG,EAAE;YACjB,MAAM,CAAC,SAAS,CAAC,KAAK,CAAC,qBAAqB,CAAC,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;QAChE,CAAC,CAAC,CAAC;QAEH,EAAE,CAAC,aAAa,EAAE,GAAG,EAAE;YACrB,MAAM,CAAC,SAAS,CAAC,KAAK,CAAC,kBAAkB,CAAC,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;QAC7D,CAAC,CAAC,CAAC;QAEH,EAAE,CAAC,cAAc,EAAE,GAAG,EAAE;YACtB,MAAM,CAAC,SAAS,CAAC,KAAK,CAAC,mBAAmB,CAAC,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;QAC9D,CAAC,CAAC,CAAC;QAEH,EAAE,CAAC,aAAa,EAAE,GAAG,EAAE;YACrB,MAAM,CAAC,SAAS,CAAC,KAAK,CAAC,oBAAoB,CAAC,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;QAC/D,CAAC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;IAEH,QAAQ,CAAC,aAAa,EAAE,GAAG,EAAE;QAC3B,EAAE,CAAC,eAAe,EAAE,GAAG,EAAE;YACvB,MAAM,CAAC,SAAS,CAAC,WAAW,CAAC,YAAY,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;YACxD,MAAM,CAAC,SAAS,CAAC,WAAW,CAAC,gBAAgB,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;YAC5D,MAAM,CAAC,SAAS,CAAC,WAAW,CAAC,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QACtD,CAAC,CAAC,CAAC;QAEH,EAAE,CAAC,cAAc,EAAE,GAAG,EAAE;YACtB,MAAM,CAAC,SAAS,CAAC,WAAW,CAAC,UAAU,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YACrD,MAAM,CAAC,SAAS,CAAC,WAAW,CAAC,mBAAmB,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YAC9D,MAAM,CAAC,SAAS,CAAC,WAAW,CAAC,eAAe,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAC5D,CAAC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;IAEH,QAAQ,CAAC,cAAc,EAAE,GAAG,EAAE;QAC5B,EAAE,CAAC,UAAU,EAAE,GAAG,EAAE;YAClB,MAAM,CAAC,SAAS,CAAC,YAAY,CAAC,YAAY,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,KAAK,EAAE,QAAQ,CAAC,CAAC,CAAC;QAC1E,CAAC,CAAC,CAAC;QAEH,EAAE,CAAC,UAAU,EAAE,GAAG,EAAE;YAClB,MAAM,CAAC,SAAS,CAAC,YAAY,CAAC,uBAAuB,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,MAAM,EAAE,WAAW,EAAE,QAAQ,CAAC,CAAC,CAAC;QACnG,CAAC,CAAC,CAAC;QAEH,EAAE,CAAC,OAAO,EAAE,GAAG,EAAE;YACf,MAAM,CAAC,SAAS,CAAC,YAAY,CAAC,kBAAkB,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,KAAK,EAAE,QAAQ,CAAC,CAAC,CAAC;QAChF,CAAC,CAAC,CAAC;QAEH,EAAE,CAAC,MAAM,EAAE,GAAG,EAAE;YACd,MAAM,CAAC,SAAS,CAAC,YAAY,CAAC,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC;QACjD,CAAC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;IAEH,QAAQ,CAAC,eAAe,EAAE,GAAG,EAAE;QAC7B,EAAE,CAAC,eAAe,EAAE,GAAG,EAAE;YACvB,MAAM,CAAC,SAAS,CAAC,aAAa,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YAClD,MAAM,CAAC,SAAS,CAAC,aAAa,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACrD,CAAC,CAAC,CAAC;QAEH,EAAE,CAAC,WAAW,EAAE,GAAG,EAAE;YACnB,MAAM,CAAC,SAAS,CAAC,aAAa,CAAC,cAAc,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YAC3D,MAAM,CAAC,SAAS,CAAC,aAAa,CAAC,eAAe,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAC9D,CAAC,CAAC,CAAC;QAEH,EAAE,CAAC,UAAU,EAAE,GAAG,EAAE;YAClB,MAAM,CAAC,SAAS,CAAC,aAAa,CAAC,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;YACtD,MAAM,CAAC,SAAS,CAAC,aAAa,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QACtD,CAAC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;IAEH,QAAQ,CAAC,UAAU,EAAE,GAAG,EAAE;QACxB,EAAE,CAAC,SAAS,EAAE,GAAG,EAAE;YACjB,SAAS,CAAC,QAAQ,CAAC,QAAQ,EAAE,gBAAgB,CAAC,CAAC;YAC/C,MAAM,CAAC,SAAS,CAAC,KAAK,CAAC,kBAAkB,CAAC,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;QAC9D,CAAC,CAAC,CAAC;QAEH,EAAE,CAAC,aAAa,EAAE,GAAG,EAAE;YACrB,SAAS,CAAC,QAAQ,CAAC,kBAAkB,EAAE,gBAAgB,CAAC,CAAC;YACzD,MAAM,CAAC,SAAS,CAAC,aAAa,CAAC,uBAAuB,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACtE,CAAC,CAAC,CAAC;QAEH,EAAE,CAAC,iBAAiB,EAAE,GAAG,EAAE;YACzB,MAAM,MAAM,GAAG,SAAS,CAAC,UAAU,EAAE,CAAC,MAAM,CAAC;YAC7C,SAAS,CAAC,QAAQ,CAAC,MAAM,EAAE,cAAc,CAAC,CAAC;YAC3C,MAAM,CAAC,SAAS,CAAC,UAAU,EAAE,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC;QACzD,CAAC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;IAEH,QAAQ,CAAC,eAAe,EAAE,GAAG,EAAE;QAC7B,EAAE,CAAC,UAAU,EAAE,GAAG,EAAE;YAClB,MAAM,OAAO,GAAG,SAAS,CAAC,cAAc,CAAC,kBAAkB,EAAE,UAAU,CAAC,CAAC;YACzE,MAAM,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC,OAAO,CAAC,YAAY,CAAC,CAAC;YAChD,MAAM,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,kBAAkB,CAAC,CAAC;YACjD,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;YACxC,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;YACvC,MAAM,CAAC,OAAO,CAAC,WAAW,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QAC1C,CAAC,CAAC,CAAC;QAEH,EAAE,CAAC,aAAa,EAAE,GAAG,EAAE;YACrB,SAAS,CAAC,cAAc,CAAC,MAAM,EAAE,QAAQ,CAAC,CAAC;YAC3C,SAAS,CAAC,cAAc,CAAC,MAAM,EAAE,QAAQ,CAAC,CAAC;YAC3C,MAAM,CAAC,SAAS,CAAC,mBAAmB,EAAE,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QACzD,CAAC,CAAC,CAAC;QAEH,EAAE,CAAC,kBAAkB,EAAE,GAAG,EAAE;YAC1B,MAAM,OAAO,GAAG,SAAS,CAAC,cAAc,CAAC,kBAAkB,EAAE,UAAU,CAAC,CAAC;YACzE,MAAM,QAAQ,GAAG,SAAS,CAAC,eAAe,CAAC,OAAO,CAAC,SAAS,EAAE,UAAU,CAAC,CAAC;YAC1E,MAAM,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;YAC1C,MAAM,CAAC,QAAQ,EAAE,WAAW,CAAC,CAAC,WAAW,EAAE,CAAC;YAC5C,MAAM,CAAC,SAAS,CAAC,mBAAmB,EAAE,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QACzD,CAAC,CAAC,CAAC;QAEH,EAAE,CAAC,gBAAgB,EAAE,GAAG,EAAE;YACxB,MAAM,OAAO,GAAG,SAAS,CAAC,cAAc,CAAC,SAAS,EAAE,UAAU,CAAC,CAAC;YAChE,MAAM,QAAQ,GAAG,SAAS,CAAC,eAAe,CAAC,OAAO,CAAC,SAAS,EAAE,QAAQ,CAAC,CAAC;YACxE,MAAM,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;QAC1C,CAAC,CAAC,CAAC;QAEH,EAAE,CAAC,gCAAgC,EAAE,GAAG,EAAE;YACxC,MAAM,OAAO,GAAG,SAAS,CAAC,cAAc,CAAC,kBAAkB,EAAE,UAAU,CAAC,CAAC;YACzE,SAAS,CAAC,eAAe,CAAC,OAAO,CAAC,SAAS,EAAE,UAAU,EAAE,IAAI,CAAC,CAAC;YAC/D,MAAM,CAAC,SAAS,CAAC,KAAK,CAAC,iBAAiB,CAAC,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;QAC7D,CAAC,CAAC,CAAC;QAEH,EAAE,CAAC,kBAAkB,EAAE,GAAG,EAAE;YAC1B,MAAM,QAAQ,GAAG,SAAS,CAAC,eAAe,CAAC,aAAa,EAAE,UAAU,CAAC,CAAC;YACtE,MAAM,CAAC,QAAQ,CAAC,CAAC,aAAa,EAAE,CAAC;QACnC,CAAC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;IAEH,QAAQ,CAAC,YAAY,EAAE,GAAG,EAAE;QAC1B,EAAE,CAAC,WAAW,EAAE,GAAG,EAAE;YACnB,MAAM,OAAO,GAAG,SAAS,CAAC,UAAU,EAAE,CAAC;YACvC,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,sBAAsB,CAAC,EAAE,CAAC,CAAC,CAAC,kBAAkB;YACrE,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAClE,CAAC,CAAC,CAAC;QAEH,EAAE,CAAC,UAAU,EAAE,GAAG,EAAE;YAClB,MAAM,QAAQ,GAAG,SAAS,CAAC,UAAU,EAAE,CAAC;YACxC,MAAM,QAAQ,GAAG,SAAS,CAAC,UAAU,EAAE,CAAC;YACxC,MAAM,CAAC,QAAQ,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;QACtC,CAAC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;IAEH,QAAQ,CAAC,gBAAgB,EAAE,GAAG,EAAE;QAC9B,EAAE,CAAC,kBAAkB,EAAE,GAAG,EAAE;YAC1B,MAAM,MAAM,GAAG,IAAI,aAAa,CAAC,MAAM,EAAE;gBACvC,EAAE,OAAO,EAAE,QAAQ,EAAE,WAAW,EAAE,QAAQ,EAAE,OAAO,EAAE,EAAE,EAAE,OAAO,EAAE,MAAM,EAAE;aAC3E,CAAC,CAAC;YACH,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,kBAAkB,CAAC,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;QAC3D,CAAC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC"}

package/dist/pc/sandbox/SandboxBrowser.d.ts

@@ -1,29 +0,0 @@
-/**
- * Sandbox Browser — Phase 5-2
- *
- * Container-based Chromium with CDP port mapping.
- * Independent browser instance per user.
- */
-import type { SandboxLogger } from './types.js';
-import { ContainerManager } from './ContainerManager.js';
-export interface SandboxBrowserInfo {
-    containerId: string;
-    userId: string;
-    cdpPort: number;
-    cdpUrl: string;
-    state: string;
-}
-export declare class SandboxBrowser {
-    private manager;
-    private logger;
-    private browsers;
-    private nextPort;
-    constructor(manager: ContainerManager, logger: SandboxLogger);
-    create(userId: string): Promise<SandboxBrowserInfo>;
-    destroy(userId: string): Promise<void>;
-    get(userId: string): SandboxBrowserInfo | undefined;
-    getAll(): SandboxBrowserInfo[];
-    destroyAll(): Promise<void>;
-    private allocatePort;
-}
-//# sourceMappingURL=SandboxBrowser.d.ts.map

package/dist/pc/sandbox/SandboxBrowser.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"SandboxBrowser.d.ts","sourceRoot":"","sources":["../../../src/pc/sandbox/SandboxBrowser.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,YAAY,CAAC;AAEhD,OAAO,EAAE,gBAAgB,EAAE,MAAM,uBAAuB,CAAC;AAKzD,MAAM,WAAW,kBAAkB;IACjC,WAAW,EAAE,MAAM,CAAC;IACpB,MAAM,EAAE,MAAM,CAAC;IACf,OAAO,EAAE,MAAM,CAAC;IAChB,MAAM,EAAE,MAAM,CAAC;IACf,KAAK,EAAE,MAAM,CAAC;CACf;AAED,qBAAa,cAAc;IACzB,OAAO,CAAC,OAAO,CAAmB;IAClC,OAAO,CAAC,MAAM,CAAgB;IAC9B,OAAO,CAAC,QAAQ,CAAyC;IACzD,OAAO,CAAC,QAAQ,CAAS;gBAEb,OAAO,EAAE,gBAAgB,EAAE,MAAM,EAAE,aAAa;IAKtD,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,kBAAkB,CAAC;IA+BnD,OAAO,CAAC,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAc5C,GAAG,CAAC,MAAM,EAAE,MAAM,GAAG,kBAAkB,GAAG,SAAS;IAInD,MAAM,IAAI,kBAAkB,EAAE;IAIxB,UAAU,IAAI,OAAO,CAAC,IAAI,CAAC;IAMjC,OAAO,CAAC,YAAY;CAGrB"}

package/dist/pc/sandbox/SandboxBrowser.js

@@ -1,72 +0,0 @@
-/**
- * Sandbox Browser — Phase 5-2
- *
- * Container-based Chromium with CDP port mapping.
- * Independent browser instance per user.
- */
-const SANDBOX_BROWSER_IMAGE = 'vibe-sandbox-browser:latest';
-const CDP_INTERNAL_PORT = 9222;
-export class SandboxBrowser {
-    manager;
-    logger;
-    browsers = new Map();
-    nextPort = 19222;
-    constructor(manager, logger) {
-        this.manager = manager;
-        this.logger = logger;
-    }
-    async create(userId) {
-        const existing = this.browsers.get(userId);
-        if (existing) {
-            return existing;
-        }
-        const cdpPort = this.allocatePort();
-        const info = await this.manager.create(userId, {
-            scope: 'user',
-            image: SANDBOX_BROWSER_IMAGE,
-            labels: {
-                'vibe-type': 'browser',
-                'vibe-cdp-port': String(cdpPort),
-            },
-        });
-        await this.manager.start(info.containerId);
-        const browserInfo = {
-            containerId: info.containerId,
-            userId,
-            cdpPort,
-            cdpUrl: `http://127.0.0.1:${cdpPort}`,
-            state: 'running',
-        };
-        this.browsers.set(userId, browserInfo);
-        this.logger('info', `Sandbox browser created for ${userId} on port ${cdpPort}`);
-        return browserInfo;
-    }
-    async destroy(userId) {
-        const browser = this.browsers.get(userId);
-        if (!browser)
-            return;
-        try {
-            await this.manager.stop(browser.containerId);
-            await this.manager.remove(browser.containerId);
-        }
-        catch (err) {
-            this.logger('warn', `Failed to destroy sandbox browser: ${err instanceof Error ? err.message : String(err)}`);
-        }
-        this.browsers.delete(userId);
-    }
-    get(userId) {
-        return this.browsers.get(userId);
-    }
-    getAll() {
-        return Array.from(this.browsers.values());
-    }
-    async destroyAll() {
-        for (const userId of this.browsers.keys()) {
-            await this.destroy(userId);
-        }
-    }
-    allocatePort() {
-        return this.nextPort++;
-    }
-}
-//# sourceMappingURL=SandboxBrowser.js.map

package/dist/pc/sandbox/SandboxBrowser.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"SandboxBrowser.js","sourceRoot":"","sources":["../../../src/pc/sandbox/SandboxBrowser.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAMH,MAAM,qBAAqB,GAAG,6BAA6B,CAAC;AAC5D,MAAM,iBAAiB,GAAG,IAAI,CAAC;AAU/B,MAAM,OAAO,cAAc;IACjB,OAAO,CAAmB;IAC1B,MAAM,CAAgB;IACtB,QAAQ,GAAG,IAAI,GAAG,EAA8B,CAAC;IACjD,QAAQ,GAAG,KAAK,CAAC;IAEzB,YAAY,OAAyB,EAAE,MAAqB;QAC1D,IAAI,CAAC,OAAO,GAAG,OAAO,CAAC;QACvB,IAAI,CAAC,MAAM,GAAG,MAAM,CAAC;IACvB,CAAC;IAED,KAAK,CAAC,MAAM,CAAC,MAAc;QACzB,MAAM,QAAQ,GAAG,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;QAC3C,IAAI,QAAQ,EAAE,CAAC;YACb,OAAO,QAAQ,CAAC;QAClB,CAAC;QAED,MAAM,OAAO,GAAG,IAAI,CAAC,YAAY,EAAE,CAAC;QACpC,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,MAAM,EAAE;YAC7C,KAAK,EAAE,MAAM;YACb,KAAK,EAAE,qBAAqB;YAC5B,MAAM,EAAE;gBACN,WAAW,EAAE,SAAS;gBACtB,eAAe,EAAE,MAAM,CAAC,OAAO,CAAC;aACjC;SACF,CAAC,CAAC;QAEH,MAAM,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC;QAE3C,MAAM,WAAW,GAAuB;YACtC,WAAW,EAAE,IAAI,CAAC,WAAW;YAC7B,MAAM;YACN,OAAO;YACP,MAAM,EAAE,oBAAoB,OAAO,EAAE;YACrC,KAAK,EAAE,SAAS;SACjB,CAAC;QAEF,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,MAAM,EAAE,WAAW,CAAC,CAAC;QACvC,IAAI,CAAC,MAAM,CAAC,MAAM,EAAE,+BAA+B,MAAM,YAAY,OAAO,EAAE,CAAC,CAAC;QAChF,OAAO,WAAW,CAAC;IACrB,CAAC;IAED,KAAK,CAAC,OAAO,CAAC,MAAc;QAC1B,MAAM,OAAO,GAAG,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;QAC1C,IAAI,CAAC,OAAO;YAAE,OAAO;QAErB,IAAI,CAAC;YACH,MAAM,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC,WAAW,CAAC,CAAC;YAC7C,MAAM,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,OAAO,CAAC,WAAW,CAAC,CAAC;QACjD,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,IAAI,CAAC,MAAM,CAAC,MAAM,EAAE,sCAAsC,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;QAChH,CAAC;QAED,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;IAC/B,CAAC;IAED,GAAG,CAAC,MAAc;QAChB,OAAO,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;IACnC,CAAC;IAED,MAAM;QACJ,OAAO,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,MAAM,EAAE,CAAC,CAAC;IAC5C,CAAC;IAED,KAAK,CAAC,UAAU;QACd,KAAK,MAAM,MAAM,IAAI,IAAI,CAAC,QAAQ,CAAC,IAAI,EAAE,EAAE,CAAC;YAC1C,MAAM,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;QAC7B,CAAC;IACH,CAAC;IAEO,YAAY;QAClB,OAAO,IAAI,CAAC,QAAQ,EAAE,CAAC;IACzB,CAAC;CACF"}

package/dist/pc/sandbox/ToolPolicy.d.ts

@@ -1,24 +0,0 @@
-/**
- * Tool Policy — Phase 5-3
- *
- * 6-stage policy chain: Profile → Global → User → Channel → Sandbox → SubAgent.
- * Wildcard pattern matching for tool groups.
- */
-import type { PolicyLayer, PolicyEvalResult, SandboxLogger } from './types.js';
-/** Match tool name against pattern (supports wildcards and groups) */
-export declare function matchPattern(pattern: string, toolName: string): boolean;
-export declare class ToolPolicyEvaluator {
-    private layers;
-    private logger;
-    constructor(logger: SandboxLogger);
-    /** Set policy layers (ordered: profile first, subagent last) */
-    setLayers(layers: PolicyLayer[]): void;
-    addLayer(layer: PolicyLayer): void;
-    /** Evaluate tool against all policy layers */
-    evaluate(toolName: string): PolicyEvalResult;
-    /** Get all layers */
-    getLayers(): PolicyLayer[];
-}
-export declare function getDefaultSaaSPolicy(): PolicyLayer[];
-export declare function getDefaultLocalPolicy(): PolicyLayer[];
-//# sourceMappingURL=ToolPolicy.d.ts.map

package/dist/pc/sandbox/ToolPolicy.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"ToolPolicy.d.ts","sourceRoot":"","sources":["../../../src/pc/sandbox/ToolPolicy.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,OAAO,KAAK,EAIV,WAAW,EACX,gBAAgB,EAChB,aAAa,EACd,MAAM,YAAY,CAAC;AAmBpB,sEAAsE;AACtE,wBAAgB,YAAY,CAAC,OAAO,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,GAAG,OAAO,CAevE;AAMD,qBAAa,mBAAmB;IAC9B,OAAO,CAAC,MAAM,CAAqB;IACnC,OAAO,CAAC,MAAM,CAAgB;gBAElB,MAAM,EAAE,aAAa;IAIjC,gEAAgE;IAChE,SAAS,CAAC,MAAM,EAAE,WAAW,EAAE,GAAG,IAAI;IAItC,QAAQ,CAAC,KAAK,EAAE,WAAW,GAAG,IAAI;IAOlC,8CAA8C;IAC9C,QAAQ,CAAC,QAAQ,EAAE,MAAM,GAAG,gBAAgB;IA2B5C,qBAAqB;IACrB,SAAS,IAAI,WAAW,EAAE;CAG3B;AAMD,wBAAgB,oBAAoB,IAAI,WAAW,EAAE,CA2BpD;AAED,wBAAgB,qBAAqB,IAAI,WAAW,EAAE,CASrD"}

package/dist/pc/sandbox/ToolPolicy.js

@@ -1,127 +0,0 @@
-/**
- * Tool Policy — Phase 5-3
- *
- * 6-stage policy chain: Profile → Global → User → Channel → Sandbox → SubAgent.
- * Wildcard pattern matching for tool groups.
- */
-// ============================================================================
-// Tool Groups
-// ============================================================================
-const TOOL_GROUPS = {
-    'group:fs': ['core_find_symbol', 'core_find_references', 'core_analyze_dependency_graph'],
-    'group:runtime': ['core_sandbox_exec'],
-    'group:browser': ['core_browser_snapshot', 'core_browser_act', 'core_browser_navigate', 'core_browser_screenshot', 'core_browser_status'],
-    'group:google': ['core_google_auth', 'core_google_gmail_send', 'core_google_gmail_search', 'core_google_drive_upload', 'core_google_drive_download', 'core_google_sheets_read', 'core_google_sheets_write', 'core_google_calendar_list', 'core_google_calendar_create'],
-    'group:voice': ['core_voice_status', 'core_tts_speak', 'core_stt_transcribe'],
-    'group:vision': ['core_vision_start', 'core_vision_stop', 'core_vision_mode', 'core_vision_snapshot', 'core_vision_ask'],
-};
-// ============================================================================
-// Pattern Matching
-// ============================================================================
-/** Match tool name against pattern (supports wildcards and groups) */
-export function matchPattern(pattern, toolName) {
-    // Group expansion
-    if (pattern.startsWith('group:')) {
-        const tools = TOOL_GROUPS[pattern];
-        return tools ? tools.includes(toolName) : false;
-    }
-    // Wildcard pattern (e.g., `core_browser_*`)
-    if (pattern.includes('*')) {
-        const regex = new RegExp('^' + pattern.replace(/\*/g, '.*') + '$');
-        return regex.test(toolName);
-    }
-    // Exact match
-    return pattern === toolName;
-}
-// ============================================================================
-// Policy Evaluator
-// ============================================================================
-export class ToolPolicyEvaluator {
-    layers = [];
-    logger;
-    constructor(logger) {
-        this.logger = logger;
-    }
-    /** Set policy layers (ordered: profile first, subagent last) */
-    setLayers(layers) {
-        this.layers = layers;
-    }
-    addLayer(layer) {
-        this.layers.push(layer);
-        // Re-sort to maintain correct order
-        const order = ['profile', 'global', 'user', 'channel', 'sandbox', 'subagent'];
-        this.layers.sort((a, b) => order.indexOf(a.level) - order.indexOf(b.level));
-    }
-    /** Evaluate tool against all policy layers */
-    evaluate(toolName) {
-        for (const layer of this.layers) {
-            for (const rule of layer.rules) {
-                if (matchPattern(rule.pattern, toolName)) {
-                    const result = {
-                        allowed: rule.action === 'allow',
-                        action: rule.action,
-                        matchedLevel: layer.level,
-                        matchedPattern: rule.pattern,
-                        reason: rule.reason,
-                    };
-                    this.logger('debug', `Policy eval: ${toolName} → ${rule.action} at ${layer.level}`);
-                    return result;
-                }
-            }
-        }
-        // Default: deny if no rule matches
-        return {
-            allowed: false,
-            action: 'deny',
-            matchedLevel: 'profile',
-            matchedPattern: '*',
-            reason: '일치하는 정책 규칙이 없습니다.',
-        };
-    }
-    /** Get all layers */
-    getLayers() {
-        return [...this.layers];
-    }
-}
-// ============================================================================
-// Default Policies
-// ============================================================================
-export function getDefaultSaaSPolicy() {
-    return [
-        {
-            level: 'profile',
-            rules: [
-                { pattern: 'group:browser', action: 'allow' },
-                { pattern: 'group:google', action: 'allow' },
-                { pattern: 'group:voice', action: 'allow' },
-                { pattern: 'group:vision', action: 'allow' },
-            ],
-        },
-        {
-            level: 'global',
-            rules: [
-                { pattern: 'core_sandbox_exec', action: 'ask', reason: '명령 실행은 승인이 필요합니다.' },
-            ],
-        },
-        {
-            level: 'sandbox',
-            rules: [
-                { pattern: 'core_browser_*', action: 'allow' },
-                { pattern: 'core_google_*', action: 'allow' },
-                { pattern: 'core_voice_*', action: 'allow' },
-                { pattern: 'core_vision_*', action: 'allow' },
-            ],
-        },
-    ];
-}
-export function getDefaultLocalPolicy() {
-    return [
-        {
-            level: 'profile',
-            rules: [
-                { pattern: '*', action: 'allow', reason: '로컬 모드: 모든 도구 허용' },
-            ],
-        },
-    ];
-}
-//# sourceMappingURL=ToolPolicy.js.map

package/dist/pc/sandbox/ToolPolicy.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"ToolPolicy.js","sourceRoot":"","sources":["../../../src/pc/sandbox/ToolPolicy.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAWH,+EAA+E;AAC/E,cAAc;AACd,+EAA+E;AAE/E,MAAM,WAAW,GAA6B;IAC5C,UAAU,EAAE,CAAC,kBAAkB,EAAE,sBAAsB,EAAE,+BAA+B,CAAC;IACzF,eAAe,EAAE,CAAC,mBAAmB,CAAC;IACtC,eAAe,EAAE,CAAC,uBAAuB,EAAE,kBAAkB,EAAE,uBAAuB,EAAE,yBAAyB,EAAE,qBAAqB,CAAC;IACzI,cAAc,EAAE,CAAC,kBAAkB,EAAE,wBAAwB,EAAE,0BAA0B,EAAE,0BAA0B,EAAE,4BAA4B,EAAE,yBAAyB,EAAE,0BAA0B,EAAE,2BAA2B,EAAE,6BAA6B,CAAC;IACvQ,aAAa,EAAE,CAAC,mBAAmB,EAAE,gBAAgB,EAAE,qBAAqB,CAAC;IAC7E,cAAc,EAAE,CAAC,mBAAmB,EAAE,kBAAkB,EAAE,kBAAkB,EAAE,sBAAsB,EAAE,iBAAiB,CAAC;CACzH,CAAC;AAEF,+EAA+E;AAC/E,mBAAmB;AACnB,+EAA+E;AAE/E,sEAAsE;AACtE,MAAM,UAAU,YAAY,CAAC,OAAe,EAAE,QAAgB;IAC5D,kBAAkB;IAClB,IAAI,OAAO,CAAC,UAAU,CAAC,QAAQ,CAAC,EAAE,CAAC;QACjC,MAAM,KAAK,GAAG,WAAW,CAAC,OAAO,CAAC,CAAC;QACnC,OAAO,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC;IAClD,CAAC;IAED,4CAA4C;IAC5C,IAAI,OAAO,CAAC,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC;QAC1B,MAAM,KAAK,GAAG,IAAI,MAAM,CAAC,GAAG,GAAG,OAAO,CAAC,OAAO,CAAC,KAAK,EAAE,IAAI,CAAC,GAAG,GAAG,CAAC,CAAC;QACnE,OAAO,KAAK,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;IAC9B,CAAC;IAED,cAAc;IACd,OAAO,OAAO,KAAK,QAAQ,CAAC;AAC9B,CAAC;AAED,+EAA+E;AAC/E,mBAAmB;AACnB,+EAA+E;AAE/E,MAAM,OAAO,mBAAmB;IACtB,MAAM,GAAkB,EAAE,CAAC;IAC3B,MAAM,CAAgB;IAE9B,YAAY,MAAqB;QAC/B,IAAI,CAAC,MAAM,GAAG,MAAM,CAAC;IACvB,CAAC;IAED,gEAAgE;IAChE,SAAS,CAAC,MAAqB;QAC7B,IAAI,CAAC,MAAM,GAAG,MAAM,CAAC;IACvB,CAAC;IAED,QAAQ,CAAC,KAAkB;QACzB,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QACxB,oCAAoC;QACpC,MAAM,KAAK,GAAkB,CAAC,SAAS,EAAE,QAAQ,EAAE,MAAM,EAAE,SAAS,EAAE,SAAS,EAAE,UAAU,CAAC,CAAC;QAC7F,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,KAAK,CAAC,GAAG,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC;IAC9E,CAAC;IAED,8CAA8C;IAC9C,QAAQ,CAAC,QAAgB;QACvB,KAAK,MAAM,KAAK,IAAI,IAAI,CAAC,MAAM,EAAE,CAAC;YAChC,KAAK,MAAM,IAAI,IAAI,KAAK,CAAC,KAAK,EAAE,CAAC;gBAC/B,IAAI,YAAY,CAAC,IAAI,CAAC,OAAO,EAAE,QAAQ,CAAC,EAAE,CAAC;oBACzC,MAAM,MAAM,GAAqB;wBAC/B,OAAO,EAAE,IAAI,CAAC,MAAM,KAAK,OAAO;wBAChC,MAAM,EAAE,IAAI,CAAC,MAAM;wBACnB,YAAY,EAAE,KAAK,CAAC,KAAK;wBACzB,cAAc,EAAE,IAAI,CAAC,OAAO;wBAC5B,MAAM,EAAE,IAAI,CAAC,MAAM;qBACpB,CAAC;oBACF,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,gBAAgB,QAAQ,MAAM,IAAI,CAAC,MAAM,OAAO,KAAK,CAAC,KAAK,EAAE,CAAC,CAAC;oBACpF,OAAO,MAAM,CAAC;gBAChB,CAAC;YACH,CAAC;QACH,CAAC;QAED,mCAAmC;QACnC,OAAO;YACL,OAAO,EAAE,KAAK;YACd,MAAM,EAAE,MAAM;YACd,YAAY,EAAE,SAAS;YACvB,cAAc,EAAE,GAAG;YACnB,MAAM,EAAE,mBAAmB;SAC5B,CAAC;IACJ,CAAC;IAED,qBAAqB;IACrB,SAAS;QACP,OAAO,CAAC,GAAG,IAAI,CAAC,MAAM,CAAC,CAAC;IAC1B,CAAC;CACF;AAED,+EAA+E;AAC/E,mBAAmB;AACnB,+EAA+E;AAE/E,MAAM,UAAU,oBAAoB;IAClC,OAAO;QACL;YACE,KAAK,EAAE,SAAS;YAChB,KAAK,EAAE;gBACL,EAAE,OAAO,EAAE,eAAe,EAAE,MAAM,EAAE,OAAO,EAAE;gBAC7C,EAAE,OAAO,EAAE,cAAc,EAAE,MAAM,EAAE,OAAO,EAAE;gBAC5C,EAAE,OAAO,EAAE,aAAa,EAAE,MAAM,EAAE,OAAO,EAAE;gBAC3C,EAAE,OAAO,EAAE,cAAc,EAAE,MAAM,EAAE,OAAO,EAAE;aAC7C;SACF;QACD;YACE,KAAK,EAAE,QAAQ;YACf,KAAK,EAAE;gBACL,EAAE,OAAO,EAAE,mBAAmB,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,mBAAmB,EAAE;aAC7E;SACF;QACD;YACE,KAAK,EAAE,SAAS;YAChB,KAAK,EAAE;gBACL,EAAE,OAAO,EAAE,gBAAgB,EAAE,MAAM,EAAE,OAAO,EAAE;gBAC9C,EAAE,OAAO,EAAE,eAAe,EAAE,MAAM,EAAE,OAAO,EAAE;gBAC7C,EAAE,OAAO,EAAE,cAAc,EAAE,MAAM,EAAE,OAAO,EAAE;gBAC5C,EAAE,OAAO,EAAE,eAAe,EAAE,MAAM,EAAE,OAAO,EAAE;aAC9C;SACF;KACF,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,qBAAqB;IACnC,OAAO;QACL;YACE,KAAK,EAAE,SAAS;YAChB,KAAK,EAAE;gBACL,EAAE,OAAO,EAAE,GAAG,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,iBAAiB,EAAE;aAC7D;SACF;KACF,CAAC;AACJ,CAAC"}

package/dist/pc/sandbox/ToolPolicy.test.d.ts

@@ -1,2 +0,0 @@
-export {};
-//# sourceMappingURL=ToolPolicy.test.d.ts.map

package/dist/pc/sandbox/ToolPolicy.test.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"ToolPolicy.test.d.ts","sourceRoot":"","sources":["../../../src/pc/sandbox/ToolPolicy.test.ts"],"names":[],"mappings":""}