@tangle-network/agent-runtime 0.196.0 → 0.198.1

package/dist/authored-code-URmkdgjv.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"authored-code-URmkdgjv.js","names":[],"sources":["../src/runtime/authored-code.ts"],"sourcesContent":["/**\n * The ONE lint over model-authored source.\n *\n * Two features have a model write code the runtime then runs: `authorStrategy` (an authored\n * optimization strategy, since 0.60) and code mode's `execute` (a program over the coordination\n * verbs). Both need the same refusals; this module is the single copy both import.\n *\n * A LINT, NOT A SANDBOX — it reads text and cannot constrain what running code does, and trivial\n * concatenation defeats any token match. Its only job is refusing the obvious escapes so a typo or\n * a lazy model does not run; it is never the security boundary. Isolation, where required, is the\n * execution boundary's job (a jailed runner, a sandboxed loader), never this check's.\n */\nimport { ValidationError } from '../errors'\n\nexport interface AuthoredCodeOptions {\n  /** Import specifiers an authored module may name. Empty (the default) bans every import. A\n   *  specifier admits ANY import form of that module (named, namespace, default) — the lint\n   *  gates WHICH module, not the syntax used to reach it. */\n  readonly allowedImports?: ReadonlyArray<string>\n  /** Names the refusal, e.g. `code mode (node-1)`. Defaults to `authored code`. */\n  readonly context?: string\n}\n\n/** Refuse the obvious escapes in authored source. See the module doc for what this is NOT. */\nexport function assertAuthoredCode(code: string, options: AuthoredCodeOptions = {}): void {\n  const context = options.context ?? 'authored code'\n  const allowed = options.allowedImports ?? []\n  for (const line of code.split('\\n')) {\n    if (!/^\\s*import\\s/.test(line)) continue\n    const named = allowed.some(\n      (specifier) => line.includes(`'${specifier}'`) || line.includes(`\"${specifier}\"`),\n    )\n    if (!named) {\n      throw new ValidationError(\n        `${context} rejected: foreign import — ${line.trim().slice(0, 120)}${\n          allowed.length === 0\n            ? ' (no import is allowed here)'\n            : ` (allowed: ${allowed.join(', ')})`\n        }`,\n      )\n    }\n  }\n  const banned: ReadonlyArray<readonly [RegExp, string]> = [\n    [/\\brequire\\s*\\(/, 'require()'],\n    [/\\bimport\\s*\\(/, 'dynamic import()'],\n    [/\\beval\\s*\\(/, 'eval()'],\n    [/new\\s+Function\\s*\\(/, 'new Function()'],\n    [/\\bprocess\\s*[.[]/, 'process access'],\n    [/\\bglobalThis\\s*[.[]/, 'globalThis access'],\n    [/\\bfetch\\s*\\(/, 'network access'],\n    [/child_process|node:fs|node:net|node:http|worker_threads/, 'node builtin access'],\n  ]\n  for (const [pattern, what] of banned) {\n    if (pattern.test(code)) throw new ValidationError(`${context} rejected: ${what}`)\n  }\n}\n"],"mappings":";;;;;;;;;;;;;;;AAwBA,SAAgB,mBAAmB,MAAc,UAA+B,CAAC,GAAS;CACxF,MAAM,UAAU,QAAQ,WAAW;CACnC,MAAM,UAAU,QAAQ,kBAAkB,CAAC;CAC3C,KAAK,MAAM,QAAQ,KAAK,MAAM,IAAI,GAAG;EACnC,IAAI,CAAC,eAAe,KAAK,IAAI,GAAG;EAIhC,IAAI,CAHU,QAAQ,MACnB,cAAc,KAAK,SAAS,IAAI,UAAU,EAAE,KAAK,KAAK,SAAS,IAAI,UAAU,EAAE,CAEzE,GACP,MAAM,IAAI,gBACR,GAAG,QAAQ,8BAA8B,KAAK,KAAK,CAAC,CAAC,MAAM,GAAG,GAAG,IAC/D,QAAQ,WAAW,IACf,iCACA,cAAc,QAAQ,KAAK,IAAI,EAAE,IAEzC;CAEJ;CAWA,KAAK,MAAM,CAAC,SAAS,SAAS;EAT5B,CAAC,kBAAkB,WAAW;EAC9B,CAAC,iBAAiB,kBAAkB;EACpC,CAAC,eAAe,QAAQ;EACxB,CAAC,uBAAuB,gBAAgB;EACxC,CAAC,oBAAoB,gBAAgB;EACrC,CAAC,uBAAuB,mBAAmB;EAC3C,CAAC,gBAAgB,gBAAgB;EACjC,CAAC,2DAA2D,qBAAqB;CAEhD,GACjC,IAAI,QAAQ,KAAK,IAAI,GAAG,MAAM,IAAI,gBAAgB,GAAG,QAAQ,aAAa,MAAM;AAEpF"}