@tokenfactory/acc-runner 0.44.8 → 0.44.10

package/dist/secure-execution/auto-lease.js

@@ -0,0 +1,116 @@
+import { timingSafeEqual } from "node:crypto";
+/** Bind the browser/control-plane issue receipt to the exact request sent to 0393. */
+export function bindIssuedAutoLease(input, receipt) {
+    return {
+        leaseId: receipt.lease_id, leaseToken: receipt.lease_token,
+        issueReceiptId: receipt.receipt_id, expiresAt: receipt.expires_at,
+        orgId: input.orgId, userId: input.userId, runnerId: input.runnerId,
+        repo: input.repo.toLowerCase(), paths: [...input.paths], commandClass: input.commandClass,
+        networkDestinations: [...input.networkDestinations], commandDigest: input.commandDigest,
+        limits: {
+            wallMs: receipt.ceilings.wall_seconds * 1_000,
+            cpuSeconds: receipt.ceilings.cpu_seconds,
+            memoryMb: receipt.ceilings.memory_mb,
+            outputBytes: receipt.ceilings.output_bytes,
+        },
+    };
+}
+function same(a, b) {
+    const canonical = (value) => {
+        if (Array.isArray(value))
+            return value.map(canonical);
+        if (value && typeof value === "object")
+            return Object.fromEntries(Object.entries(value).sort(([left], [right]) => left.localeCompare(right))
+                .map(([key, entry]) => [key, canonical(entry)]));
+        return value;
+    };
+    const left = Buffer.from(JSON.stringify(canonical(a)));
+    const right = Buffer.from(JSON.stringify(canonical(b)));
+    return left.length === right.length && timingSafeEqual(left, right);
+}
+function destinationStrings(values) {
+    return values.map((value) => `${value.protocol}://${value.host}:${value.port}`);
+}
+function denied(reason) { return { valid: false, reason }; }
+/** Service-role runner adapter for the single-use 0393 lease RPC. */
+export class SupabaseAutoLeaseVerifier {
+    db;
+    inFlight = new Set();
+    constructor(db) {
+        this.db = db;
+    }
+    async verify(lease, context) {
+        if (!lease.leaseToken || !lease.orgId || !lease.userId || !lease.commandClass || !lease.limits)
+            return denied("auto_lease_claims_missing");
+        if (this.inFlight.has(lease.leaseId))
+            return denied("auto_lease_replayed");
+        const tokenLeaseId = lease.leaseToken.split(".")[0];
+        if (tokenLeaseId !== lease.leaseId)
+            return denied("auto_lease_token_mismatch");
+        if (!same({ orgId: lease.orgId, userId: lease.userId, runnerId: lease.runnerId, repo: lease.repo }, { orgId: context.orgId, userId: context.userId, runnerId: context.runnerId, repo: context.repo }))
+            return denied("auto_lease_identity_mismatch");
+        if (!same(lease.paths ?? [], context.paths) || lease.commandClass !== context.commandClass
+            || lease.commandDigest !== context.commandDigest
+            || !same(lease.networkDestinations ?? [], destinationStrings(context.destinations))
+            || !same(lease.limits, { wallMs: context.limits.wallMs, outputBytes: context.limits.outputBytes, cpuSeconds: context.limits.cpuSeconds, memoryMb: context.limits.memoryMb })) {
+            return denied("auto_lease_claim_mismatch");
+        }
+        if (Date.parse(lease.expiresAt) <= context.now.getTime())
+            return denied("auto_lease_expired");
+        this.inFlight.add(lease.leaseId);
+        try {
+            const rowResult = await this.db.from("auto_execution_leases").select("id,org_id,profile_id,user_id,runner_id,repo,paths,command_class,network_destinations,command_fingerprint,expires_at,consumed_at,revoked_at").eq("id", lease.leaseId).maybeSingle();
+            const row = rowResult.data;
+            if (rowResult.error || !row)
+                return denied("auto_lease_unavailable");
+            if (row.consumed_at || row.revoked_at)
+                return denied("auto_lease_expired_revoked_or_replayed");
+            if (!same([row.org_id, row.user_id, row.runner_id, row.repo, row.paths, row.command_class, row.network_destinations, row.command_fingerprint, row.expires_at], [lease.orgId, lease.userId, lease.runnerId, lease.repo, lease.paths, lease.commandClass, lease.networkDestinations, lease.commandDigest, lease.expiresAt]))
+                return denied("auto_lease_database_drift");
+            const profileResult = await this.db.from("auto_profiles").select("id,enabled,revoked_at,command_classes,path_prefixes,network_destinations,max_wall_seconds,max_cpu_seconds,max_memory_mb,max_output_bytes").eq("id", row.profile_id).maybeSingle();
+            const profile = profileResult.data;
+            if (profileResult.error || !profile || profile.enabled !== true || profile.revoked_at)
+                return denied("auto_profile_drift");
+            const commandClasses = Array.isArray(profile.command_classes) ? profile.command_classes : [];
+            const pathPrefixes = Array.isArray(profile.path_prefixes) ? profile.path_prefixes.map(String) : [];
+            const allowedDestinations = Array.isArray(profile.network_destinations) ? profile.network_destinations : [];
+            const pathsStillAllowed = (lease.paths ?? []).every((path) => pathPrefixes.some((prefix) => path === prefix || path.startsWith(`${prefix}/`)));
+            const destinationsStillAllowed = (lease.networkDestinations ?? []).every((destination) => allowedDestinations.includes(destination));
+            if (!commandClasses.includes(lease.commandClass) || !pathsStillAllowed || !destinationsStillAllowed)
+                return denied("auto_profile_drift");
+            if (!same(lease.limits, {
+                wallMs: Number(profile.max_wall_seconds) * 1_000, cpuSeconds: Number(profile.max_cpu_seconds),
+                memoryMb: Number(profile.max_memory_mb), outputBytes: Number(profile.max_output_bytes),
+            }))
+                return denied("auto_profile_drift");
+            const consumed = await this.db.rpc("consume_auto_execution_lease", {
+                p_lease_token: lease.leaseToken, p_runner_id: context.runnerId, p_command_fingerprint: context.commandDigest,
+            });
+            if (consumed.error || consumed.data?.ok !== true || consumed.data.lease_id !== lease.leaseId)
+                return denied("auto_lease_expired_revoked_or_replayed");
+            return { valid: true, consumeReceiptId: String(consumed.data.receipt_id), profileId: String(consumed.data.profile_id) };
+        }
+        finally {
+            // Database consumption is the durable replay barrier. This local barrier
+            // only closes concurrent verification attempts within one runner.
+            this.inFlight.delete(lease.leaseId);
+        }
+    }
+}
+/** Durable callers can persist this shape; the in-memory implementation gives
+ * tests and single-process runners idempotent retry semantics. */
+export class MemoryCompletionOutbox {
+    pending = new Map();
+    async enqueue(record) { this.pending.set(record.idempotencyKey, record); }
+    size() { return this.pending.size; }
+    async flush(reporter) {
+        for (const [key, record] of this.pending) {
+            try {
+                await reporter.report(record);
+                this.pending.delete(key);
+            }
+            catch { /* retry later */ }
+        }
+    }
+}
+//# sourceMappingURL=auto-lease.js.map

package/dist/secure-execution/auto-lease.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"auto-lease.js","sourceRoot":"","sources":["../../src/secure-execution/auto-lease.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,eAAe,EAAE,MAAM,aAAa,CAAC;AAyB9C,sFAAsF;AACtF,MAAM,UAAU,mBAAmB,CAAC,KAGnC,EAAE,OAA+B;IAChC,OAAO;QACL,OAAO,EAAE,OAAO,CAAC,QAAQ,EAAE,UAAU,EAAE,OAAO,CAAC,WAAW;QAC1D,cAAc,EAAE,OAAO,CAAC,UAAU,EAAE,SAAS,EAAE,OAAO,CAAC,UAAU;QACjE,KAAK,EAAE,KAAK,CAAC,KAAK,EAAE,MAAM,EAAE,KAAK,CAAC,MAAM,EAAE,QAAQ,EAAE,KAAK,CAAC,QAAQ;QAClE,IAAI,EAAE,KAAK,CAAC,IAAI,CAAC,WAAW,EAAE,EAAE,KAAK,EAAE,CAAC,GAAG,KAAK,CAAC,KAAK,CAAC,EAAE,YAAY,EAAE,KAAK,CAAC,YAAY;QACzF,mBAAmB,EAAE,CAAC,GAAG,KAAK,CAAC,mBAAmB,CAAC,EAAE,aAAa,EAAE,KAAK,CAAC,aAAa;QACvF,MAAM,EAAE;YACN,MAAM,EAAE,OAAO,CAAC,QAAQ,CAAC,YAAY,GAAG,KAAK;YAC7C,UAAU,EAAE,OAAO,CAAC,QAAQ,CAAC,WAAW;YACxC,QAAQ,EAAE,OAAO,CAAC,QAAQ,CAAC,SAAS;YACpC,WAAW,EAAE,OAAO,CAAC,QAAQ,CAAC,YAAY;SAC3C;KACF,CAAC;AACJ,CAAC;AAED,SAAS,IAAI,CAAC,CAAU,EAAE,CAAU;IAClC,MAAM,SAAS,GAAG,CAAC,KAAc,EAAW,EAAE;QAC5C,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC;YAAE,OAAO,KAAK,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;QACtD,IAAI,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ;YAAE,OAAO,MAAM,CAAC,WAAW,CAC/D,MAAM,CAAC,OAAO,CAAC,KAAgC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC,KAAK,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC,aAAa,CAAC,KAAK,CAAC,CAAC;iBAClG,GAAG,CAAC,CAAC,CAAC,GAAG,EAAE,KAAK,CAAC,EAAE,EAAE,CAAC,CAAC,GAAG,EAAE,SAAS,CAAC,KAAK,CAAC,CAAC,CAAC,CAClD,CAAC;QACF,OAAO,KAAK,CAAC;IACf,CAAC,CAAC;IACF,MAAM,IAAI,GAAG,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;IAAC,MAAM,KAAK,GAAG,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;IAChH,OAAO,IAAI,CAAC,MAAM,KAAK,KAAK,CAAC,MAAM,IAAI,eAAe,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC;AACtE,CAAC;AACD,SAAS,kBAAkB,CAAC,MAA4B;IACtD,OAAO,MAAM,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,GAAG,KAAK,CAAC,QAAQ,MAAM,KAAK,CAAC,IAAI,IAAI,KAAK,CAAC,IAAI,EAAE,CAAC,CAAC;AAClF,CAAC;AACD,SAAS,MAAM,CAAC,MAAc,IAAsB,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,MAAM,EAAE,CAAC,CAAC,CAAC;AAEtF,qEAAqE;AACrE,MAAM,OAAO,yBAAyB;IAEP;IADZ,QAAQ,GAAG,IAAI,GAAG,EAAU,CAAC;IAC9C,YAA6B,EAAqB;QAArB,OAAE,GAAF,EAAE,CAAmB;IAAG,CAAC;IAEtD,KAAK,CAAC,MAAM,CAAC,KAAyB,EAAE,OAAqC;QAC3E,IAAI,CAAC,KAAK,CAAC,UAAU,IAAI,CAAC,KAAK,CAAC,KAAK,IAAI,CAAC,KAAK,CAAC,MAAM,IAAI,CAAC,KAAK,CAAC,YAAY,IAAI,CAAC,KAAK,CAAC,MAAM;YAAE,OAAO,MAAM,CAAC,2BAA2B,CAAC,CAAC;QAC3I,IAAI,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,KAAK,CAAC,OAAO,CAAC;YAAE,OAAO,MAAM,CAAC,qBAAqB,CAAC,CAAC;QAC3E,MAAM,YAAY,GAAG,KAAK,CAAC,UAAU,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC;QACpD,IAAI,YAAY,KAAK,KAAK,CAAC,OAAO;YAAE,OAAO,MAAM,CAAC,2BAA2B,CAAC,CAAC;QAC/E,IAAI,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,KAAK,CAAC,KAAK,EAAE,MAAM,EAAE,KAAK,CAAC,MAAM,EAAE,QAAQ,EAAE,KAAK,CAAC,QAAQ,EAAE,IAAI,EAAE,KAAK,CAAC,IAAI,EAAE,EAChG,EAAE,KAAK,EAAE,OAAO,CAAC,KAAK,EAAE,MAAM,EAAE,OAAO,CAAC,MAAM,EAAE,QAAQ,EAAE,OAAO,CAAC,QAAQ,EAAE,IAAI,EAAE,OAAO,CAAC,IAAI,EAAE,CAAC;YAAE,OAAO,MAAM,CAAC,8BAA8B,CAAC,CAAC;QACnJ,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,KAAK,IAAI,EAAE,EAAE,OAAO,CAAC,KAAK,CAAC,IAAI,KAAK,CAAC,YAAY,KAAK,OAAO,CAAC,YAAY;eACrF,KAAK,CAAC,aAAa,KAAK,OAAO,CAAC,aAAa;eAC7C,CAAC,IAAI,CAAC,KAAK,CAAC,mBAAmB,IAAI,EAAE,EAAE,kBAAkB,CAAC,OAAO,CAAC,YAAY,CAAC,CAAC;eAChF,CAAC,IAAI,CAAC,KAAK,CAAC,MAAM,EAAE,EAAE,MAAM,EAAE,OAAO,CAAC,MAAM,CAAC,MAAM,EAAE,WAAW,EAAE,OAAO,CAAC,MAAM,CAAC,WAAW,EAAE,UAAU,EAAE,OAAO,CAAC,MAAM,CAAC,UAAU,EAAE,QAAQ,EAAE,OAAO,CAAC,MAAM,CAAC,QAAQ,EAAE,CAAC,EAAE,CAAC;YAC/K,OAAO,MAAM,CAAC,2BAA2B,CAAC,CAAC;QAC7C,CAAC;QACD,IAAI,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,SAAS,CAAC,IAAI,OAAO,CAAC,GAAG,CAAC,OAAO,EAAE;YAAE,OAAO,MAAM,CAAC,oBAAoB,CAAC,CAAC;QAC9F,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;QACjC,IAAI,CAAC;YACH,MAAM,SAAS,GAAG,MAAM,IAAI,CAAC,EAAE,CAAC,IAAI,CAAC,uBAAuB,CAAC,CAAC,MAAM,CAAC,4IAA4I,CAAC,CAAC,EAAE,CAAC,IAAI,EAAE,KAAK,CAAC,OAAO,CAAC,CAAC,WAAW,EAAE,CAAC;YACzP,MAAM,GAAG,GAAG,SAAS,CAAC,IAAI,CAAC;YAC3B,IAAI,SAAS,CAAC,KAAK,IAAI,CAAC,GAAG;gBAAE,OAAO,MAAM,CAAC,wBAAwB,CAAC,CAAC;YACrE,IAAI,GAAG,CAAC,WAAW,IAAI,GAAG,CAAC,UAAU;gBAAE,OAAO,MAAM,CAAC,wCAAwC,CAAC,CAAC;YAC/F,IAAI,CAAC,IAAI,CACP,CAAC,GAAG,CAAC,MAAM,EAAE,GAAG,CAAC,OAAO,EAAE,GAAG,CAAC,SAAS,EAAE,GAAG,CAAC,IAAI,EAAE,GAAG,CAAC,KAAK,EAAE,GAAG,CAAC,aAAa,EAAE,GAAG,CAAC,oBAAoB,EAAE,GAAG,CAAC,mBAAmB,EAAE,GAAG,CAAC,UAAU,CAAC,EACnJ,CAAC,KAAK,CAAC,KAAK,EAAE,KAAK,CAAC,MAAM,EAAE,KAAK,CAAC,QAAQ,EAAE,KAAK,CAAC,IAAI,EAAE,KAAK,CAAC,KAAK,EAAE,KAAK,CAAC,YAAY,EAAE,KAAK,CAAC,mBAAmB,EAAE,KAAK,CAAC,aAAa,EAAE,KAAK,CAAC,SAAS,CAAC,CAC1J;gBAAE,OAAO,MAAM,CAAC,2BAA2B,CAAC,CAAC;YAC9C,MAAM,aAAa,GAAG,MAAM,IAAI,CAAC,EAAE,CAAC,IAAI,CAAC,eAAe,CAAC,CAAC,MAAM,CAAC,0IAA0I,CAAC,CAAC,EAAE,CAAC,IAAI,EAAE,GAAG,CAAC,UAAU,CAAC,CAAC,WAAW,EAAE,CAAC;YACpP,MAAM,OAAO,GAAG,aAAa,CAAC,IAAI,CAAC;YACnC,IAAI,aAAa,CAAC,KAAK,IAAI,CAAC,OAAO,IAAI,OAAO,CAAC,OAAO,KAAK,IAAI,IAAI,OAAO,CAAC,UAAU;gBAAE,OAAO,MAAM,CAAC,oBAAoB,CAAC,CAAC;YAC3H,MAAM,cAAc,GAAG,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC,eAAe,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,eAAe,CAAC,CAAC,CAAC,EAAE,CAAC;YAC7F,MAAM,YAAY,GAAG,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC,aAAa,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,aAAa,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;YACnG,MAAM,mBAAmB,GAAG,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC,oBAAoB,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,oBAAoB,CAAC,CAAC,CAAC,EAAE,CAAC;YAC5G,MAAM,iBAAiB,GAAG,CAAC,KAAK,CAAC,KAAK,IAAI,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,YAAY,CAAC,IAAI,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,IAAI,KAAK,MAAM,IAAI,IAAI,CAAC,UAAU,CAAC,GAAG,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC;YAC/I,MAAM,wBAAwB,GAAG,CAAC,KAAK,CAAC,mBAAmB,IAAI,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,WAAW,EAAE,EAAE,CAAC,mBAAmB,CAAC,QAAQ,CAAC,WAAW,CAAC,CAAC,CAAC;YACrI,IAAI,CAAC,cAAc,CAAC,QAAQ,CAAC,KAAK,CAAC,YAAY,CAAC,IAAI,CAAC,iBAAiB,IAAI,CAAC,wBAAwB;gBAAE,OAAO,MAAM,CAAC,oBAAoB,CAAC,CAAC;YACzI,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,MAAM,EAAE;gBACtB,MAAM,EAAE,MAAM,CAAC,OAAO,CAAC,gBAAgB,CAAC,GAAG,KAAK,EAAE,UAAU,EAAE,MAAM,CAAC,OAAO,CAAC,eAAe,CAAC;gBAC7F,QAAQ,EAAE,MAAM,CAAC,OAAO,CAAC,aAAa,CAAC,EAAE,WAAW,EAAE,MAAM,CAAC,OAAO,CAAC,gBAAgB,CAAC;aACvF,CAAC;gBAAE,OAAO,MAAM,CAAC,oBAAoB,CAAC,CAAC;YACxC,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,EAAE,CAAC,GAAG,CAAC,8BAA8B,EAAE;gBACjE,aAAa,EAAE,KAAK,CAAC,UAAU,EAAE,WAAW,EAAE,OAAO,CAAC,QAAQ,EAAE,qBAAqB,EAAE,OAAO,CAAC,aAAa;aAC7G,CAAC,CAAC;YACH,IAAI,QAAQ,CAAC,KAAK,IAAI,QAAQ,CAAC,IAAI,EAAE,EAAE,KAAK,IAAI,IAAI,QAAQ,CAAC,IAAI,CAAC,QAAQ,KAAK,KAAK,CAAC,OAAO;gBAAE,OAAO,MAAM,CAAC,wCAAwC,CAAC,CAAC;YACtJ,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,gBAAgB,EAAE,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC,UAAU,CAAC,EAAE,SAAS,EAAE,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC,UAAU,CAAC,EAAE,CAAC;QAC1H,CAAC;gBAAS,CAAC;YACT,yEAAyE;YACzE,kEAAkE;YAClE,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;QACtC,CAAC;IACH,CAAC;CACF;AAED;kEACkE;AAClE,MAAM,OAAO,sBAAsB;IAChB,OAAO,GAAG,IAAI,GAAG,EAAgC,CAAC;IACnE,KAAK,CAAC,OAAO,CAAC,MAA4B,IAAmB,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,cAAc,EAAE,MAAM,CAAC,CAAC,CAAC,CAAC;IAC/G,IAAI,KAAa,OAAO,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC;IAC5C,KAAK,CAAC,KAAK,CAAC,QAAgC;QAC1C,KAAK,MAAM,CAAC,GAAG,EAAE,MAAM,CAAC,IAAI,IAAI,CAAC,OAAO,EAAE,CAAC;YACzC,IAAI,CAAC;gBAAC,MAAM,QAAQ,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;gBAAC,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;YAAC,CAAC;YAAC,MAAM,CAAC,CAAC,iBAAiB,CAAC,CAAC;QAC9F,CAAC;IACH,CAAC;CACF"}

package/dist/secure-execution/command-policy.d.ts

@@ -0,0 +1,5 @@
+import type { SecureExecutionRequest } from "./types.js";
+/** Static half of AUTO's execution-time boundary. OS network and resource
+ * boundaries are installed separately by DestinationPolicy/ResourceController. */
+export declare function assertAutoExecutionPolicy(request: SecureExecutionRequest): void;
+//# sourceMappingURL=command-policy.d.ts.map

package/dist/secure-execution/command-policy.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"command-policy.d.ts","sourceRoot":"","sources":["../../src/secure-execution/command-policy.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,sBAAsB,EAAE,MAAM,YAAY,CAAC;AAoCzD;kFACkF;AAClF,wBAAgB,yBAAyB,CAAC,OAAO,EAAE,sBAAsB,GAAG,IAAI,CA+B/E"}

package/dist/secure-execution/command-policy.js

@@ -0,0 +1,95 @@
+import path from "node:path";
+const SHELLS = new Set(["sh", "bash", "zsh", "fish", "dash", "ksh", "cmd", "cmd.exe", "powershell", "powershell.exe", "pwsh"]);
+const PRIVILEGE = new Set(["sudo", "su", "doas", "pkexec", "runas"]);
+const DESTRUCTIVE = new Set(["rm", "rmdir", "dd", "mkfs", "shutdown", "reboot", "halt", "poweroff", "kill", "killall", "pkill"]);
+const INTERPRETERS = new Set(["node", "nodejs", "python", "python3", "ruby", "perl", "php"]);
+const SHELL_SYNTAX = /(?:\$\(|`|[;&|<>]|\r|\n)/;
+function tokens(command) {
+    const out = [];
+    let current = "";
+    let quote = null;
+    for (let i = 0; i < command.length; i += 1) {
+        const char = command[i];
+        if (quote) {
+            if (char === quote)
+                quote = null;
+            else if (char === "\\" && quote === '"' && i + 1 < command.length)
+                current += command[++i];
+            else
+                current += char;
+        }
+        else if (char === "'" || char === '"')
+            quote = char;
+        else if (/\s/.test(char)) {
+            if (current) {
+                out.push(current);
+                current = "";
+            }
+        }
+        else if (char === "\\" && i + 1 < command.length)
+            current += command[++i];
+        else
+            current += char;
+    }
+    if (quote)
+        throw new Error("auto_command_quote_unclosed");
+    if (current)
+        out.push(current);
+    return out;
+}
+function insideClaim(value, claims) {
+    const clean = path.posix.normalize(value.replaceAll("\\", "/")).replace(/^\.\//, "");
+    if (!clean || clean === ".")
+        return claims.some((claim) => claim === ".");
+    if (clean === ".." || clean.startsWith("../") || path.posix.isAbsolute(clean))
+        return false;
+    return claims.some((claim) => {
+        const prefix = path.posix.normalize(claim.replaceAll("\\", "/")).replace(/^\.\//, "");
+        return prefix === "." || clean === prefix || clean.startsWith(`${prefix}/`);
+    });
+}
+/** Static half of AUTO's execution-time boundary. OS network and resource
+ * boundaries are installed separately by DestinationPolicy/ResourceController. */
+export function assertAutoExecutionPolicy(request) {
+    if (request.mode !== "auto")
+        return;
+    if (SHELL_SYNTAX.test(request.command))
+        throw new Error("auto_command_shell_syntax_denied");
+    const argv = tokens(request.command);
+    if (!argv.length)
+        throw new Error("auto_command_invalid");
+    const executable = path.basename(argv[0]).toLowerCase();
+    if (SHELLS.has(executable))
+        throw new Error("auto_nested_shell_denied");
+    if (PRIVILEGE.has(executable))
+        throw new Error("auto_privilege_escalation_denied");
+    if (DESTRUCTIVE.has(executable))
+        throw new Error("auto_destructive_command_denied");
+    if (INTERPRETERS.has(executable) && argv.slice(1).some((arg) => ["-e", "--eval", "-c", "-m"].includes(arg))) {
+        throw new Error("auto_inline_interpreter_denied");
+    }
+    if (executable === "git") {
+        const verb = argv[1];
+        if (verb === "clean" || verb === "checkout" || verb === "restore"
+            || (verb === "reset" && argv.includes("--hard"))
+            || (verb === "branch" && argv.some((arg) => arg === "-D" || arg === "--delete"))
+            || (verb === "push" && argv.some((arg) => arg === "-f" || arg.startsWith("--force")))) {
+            throw new Error("auto_destructive_command_denied");
+        }
+    }
+    if (["npm", "pnpm", "yarn"].includes(executable) && ["publish", "unpublish", "remove", "uninstall"].includes(argv[1] ?? "")) {
+        throw new Error("auto_destructive_command_denied");
+    }
+    const claims = request.paths ?? [];
+    if (!claims.length || claims.some((claim) => !insideClaim(claim, ["."])))
+        throw new Error("auto_path_claim_invalid");
+    if (!insideClaim(request.cwd ?? ".", claims))
+        throw new Error("auto_cwd_outside_claim");
+    for (const arg of argv.slice(1)) {
+        if (arg.startsWith("-") || /^[a-z][a-z0-9+.-]*:\/\//i.test(arg))
+            continue;
+        if ((arg.includes("/") || arg.startsWith(".")) && !insideClaim(arg, claims))
+            throw new Error("auto_path_argument_denied");
+    }
+}
+//# sourceMappingURL=command-policy.js.map

package/dist/secure-execution/command-policy.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"command-policy.js","sourceRoot":"","sources":["../../src/secure-execution/command-policy.ts"],"names":[],"mappings":"AAAA,OAAO,IAAI,MAAM,WAAW,CAAC;AAG7B,MAAM,MAAM,GAAG,IAAI,GAAG,CAAC,CAAC,IAAI,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,MAAM,EAAE,KAAK,EAAE,KAAK,EAAE,SAAS,EAAE,YAAY,EAAE,gBAAgB,EAAE,MAAM,CAAC,CAAC,CAAC;AAC/H,MAAM,SAAS,GAAG,IAAI,GAAG,CAAC,CAAC,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,QAAQ,EAAE,OAAO,CAAC,CAAC,CAAC;AACrE,MAAM,WAAW,GAAG,IAAI,GAAG,CAAC,CAAC,IAAI,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,UAAU,EAAE,QAAQ,EAAE,MAAM,EAAE,UAAU,EAAE,MAAM,EAAE,SAAS,EAAE,OAAO,CAAC,CAAC,CAAC;AACjI,MAAM,YAAY,GAAG,IAAI,GAAG,CAAC,CAAC,MAAM,EAAE,QAAQ,EAAE,QAAQ,EAAE,SAAS,EAAE,MAAM,EAAE,MAAM,EAAE,KAAK,CAAC,CAAC,CAAC;AAC7F,MAAM,YAAY,GAAG,0BAA0B,CAAC;AAEhD,SAAS,MAAM,CAAC,OAAe;IAC7B,MAAM,GAAG,GAAa,EAAE,CAAC;IAAC,IAAI,OAAO,GAAG,EAAE,CAAC;IAAC,IAAI,KAAK,GAAqB,IAAI,CAAC;IAC/E,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,OAAO,CAAC,MAAM,EAAE,CAAC,IAAI,CAAC,EAAE,CAAC;QAC3C,MAAM,IAAI,GAAG,OAAO,CAAC,CAAC,CAAE,CAAC;QACzB,IAAI,KAAK,EAAE,CAAC;YACV,IAAI,IAAI,KAAK,KAAK;gBAAE,KAAK,GAAG,IAAI,CAAC;iBAC5B,IAAI,IAAI,KAAK,IAAI,IAAI,KAAK,KAAK,GAAG,IAAI,CAAC,GAAG,CAAC,GAAG,OAAO,CAAC,MAAM;gBAAE,OAAO,IAAI,OAAO,CAAC,EAAE,CAAC,CAAC,CAAC;;gBACtF,OAAO,IAAI,IAAI,CAAC;QACvB,CAAC;aAAM,IAAI,IAAI,KAAK,GAAG,IAAI,IAAI,KAAK,GAAG;YAAE,KAAK,GAAG,IAAI,CAAC;aACjD,IAAI,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;YAAC,IAAI,OAAO,EAAE,CAAC;gBAAC,GAAG,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;gBAAC,OAAO,GAAG,EAAE,CAAC;YAAC,CAAC;QAAC,CAAC;aAC1E,IAAI,IAAI,KAAK,IAAI,IAAI,CAAC,GAAG,CAAC,GAAG,OAAO,CAAC,MAAM;YAAE,OAAO,IAAI,OAAO,CAAC,EAAE,CAAC,CAAC,CAAC;;YACrE,OAAO,IAAI,IAAI,CAAC;IACvB,CAAC;IACD,IAAI,KAAK;QAAE,MAAM,IAAI,KAAK,CAAC,6BAA6B,CAAC,CAAC;IAC1D,IAAI,OAAO;QAAE,GAAG,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;IAC/B,OAAO,GAAG,CAAC;AACb,CAAC;AAED,SAAS,WAAW,CAAC,KAAa,EAAE,MAAyB;IAC3D,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,SAAS,CAAC,KAAK,CAAC,UAAU,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC,CAAC,OAAO,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC;IACrF,IAAI,CAAC,KAAK,IAAI,KAAK,KAAK,GAAG;QAAE,OAAO,MAAM,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,KAAK,GAAG,CAAC,CAAC;IAC1E,IAAI,KAAK,KAAK,IAAI,IAAI,KAAK,CAAC,UAAU,CAAC,KAAK,CAAC,IAAI,IAAI,CAAC,KAAK,CAAC,UAAU,CAAC,KAAK,CAAC;QAAE,OAAO,KAAK,CAAC;IAC5F,OAAO,MAAM,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE;QAC3B,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,SAAS,CAAC,KAAK,CAAC,UAAU,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC,CAAC,OAAO,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC;QACtF,OAAO,MAAM,KAAK,GAAG,IAAI,KAAK,KAAK,MAAM,IAAI,KAAK,CAAC,UAAU,CAAC,GAAG,MAAM,GAAG,CAAC,CAAC;IAC9E,CAAC,CAAC,CAAC;AACL,CAAC;AAED;kFACkF;AAClF,MAAM,UAAU,yBAAyB,CAAC,OAA+B;IACvE,IAAI,OAAO,CAAC,IAAI,KAAK,MAAM;QAAE,OAAO;IACpC,IAAI,YAAY,CAAC,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,kCAAkC,CAAC,CAAC;IAC5F,MAAM,IAAI,GAAG,MAAM,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC;IACrC,IAAI,CAAC,IAAI,CAAC,MAAM;QAAE,MAAM,IAAI,KAAK,CAAC,sBAAsB,CAAC,CAAC;IAC1D,MAAM,UAAU,GAAG,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAE,CAAC,CAAC,WAAW,EAAE,CAAC;IACzD,IAAI,MAAM,CAAC,GAAG,CAAC,UAAU,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,0BAA0B,CAAC,CAAC;IACxE,IAAI,SAAS,CAAC,GAAG,CAAC,UAAU,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,kCAAkC,CAAC,CAAC;IACnF,IAAI,WAAW,CAAC,GAAG,CAAC,UAAU,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,iCAAiC,CAAC,CAAC;IACpF,IAAI,YAAY,CAAC,GAAG,CAAC,UAAU,CAAC,IAAI,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC,IAAI,EAAE,QAAQ,EAAE,IAAI,EAAE,IAAI,CAAC,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,EAAE,CAAC;QAC5G,MAAM,IAAI,KAAK,CAAC,gCAAgC,CAAC,CAAC;IACpD,CAAC;IACD,IAAI,UAAU,KAAK,KAAK,EAAE,CAAC;QACzB,MAAM,IAAI,GAAG,IAAI,CAAC,CAAC,CAAC,CAAC;QACrB,IAAI,IAAI,KAAK,OAAO,IAAI,IAAI,KAAK,UAAU,IAAI,IAAI,KAAK,SAAS;eAC5D,CAAC,IAAI,KAAK,OAAO,IAAI,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC;eAC7C,CAAC,IAAI,KAAK,QAAQ,IAAI,IAAI,CAAC,IAAI,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,KAAK,IAAI,IAAI,GAAG,KAAK,UAAU,CAAC,CAAC;eAC7E,CAAC,IAAI,KAAK,MAAM,IAAI,IAAI,CAAC,IAAI,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,KAAK,IAAI,IAAI,GAAG,CAAC,UAAU,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC;YACxF,MAAM,IAAI,KAAK,CAAC,iCAAiC,CAAC,CAAC;QACrD,CAAC;IACH,CAAC;IACD,IAAI,CAAC,KAAK,EAAE,MAAM,EAAE,MAAM,CAAC,CAAC,QAAQ,CAAC,UAAU,CAAC,IAAI,CAAC,SAAS,EAAE,WAAW,EAAE,QAAQ,EAAE,WAAW,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,EAAE,CAAC;QAC5H,MAAM,IAAI,KAAK,CAAC,iCAAiC,CAAC,CAAC;IACrD,CAAC;IACD,MAAM,MAAM,GAAG,OAAO,CAAC,KAAK,IAAI,EAAE,CAAC;IACnC,IAAI,CAAC,MAAM,CAAC,MAAM,IAAI,MAAM,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC,WAAW,CAAC,KAAK,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,yBAAyB,CAAC,CAAC;IACrH,IAAI,CAAC,WAAW,CAAC,OAAO,CAAC,GAAG,IAAI,GAAG,EAAE,MAAM,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,wBAAwB,CAAC,CAAC;IACxF,KAAK,MAAM,GAAG,IAAI,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,CAAC;QAChC,IAAI,GAAG,CAAC,UAAU,CAAC,GAAG,CAAC,IAAI,0BAA0B,CAAC,IAAI,CAAC,GAAG,CAAC;YAAE,SAAS;QAC1E,IAAI,CAAC,GAAG,CAAC,QAAQ,CAAC,GAAG,CAAC,IAAI,GAAG,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,WAAW,CAAC,GAAG,EAAE,MAAM,CAAC;YAAE,MAAM,IAAI,KAAK,CAAC,2BAA2B,CAAC,CAAC;IAC5H,CAAC;AACH,CAAC"}

package/dist/secure-execution/confinement.d.ts

@@ -0,0 +1,3 @@
+/** Resolve a cwd that remains inside the real repository root, including symlinks. */
+export declare function confinedCwd(repoRoot: string, requested?: string): string;
+//# sourceMappingURL=confinement.d.ts.map

package/dist/secure-execution/confinement.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"confinement.d.ts","sourceRoot":"","sources":["../../src/secure-execution/confinement.ts"],"names":[],"mappings":"AAGA,sFAAsF;AACtF,wBAAgB,WAAW,CAAC,QAAQ,EAAE,MAAM,EAAE,SAAS,SAAM,GAAG,MAAM,CAYrE"}

package/dist/secure-execution/confinement.js

@@ -0,0 +1,18 @@
+import fs from "node:fs";
+import path from "node:path";
+/** Resolve a cwd that remains inside the real repository root, including symlinks. */
+export function confinedCwd(repoRoot, requested = ".") {
+    const root = fs.realpathSync(repoRoot);
+    if (!fs.statSync(root).isDirectory() || !fs.existsSync(path.join(root, ".git"))) {
+        throw new Error("execution_repo_invalid");
+    }
+    if (path.isAbsolute(requested))
+        throw new Error("execution_cwd_absolute");
+    const candidate = fs.realpathSync(path.resolve(root, requested));
+    const relative = path.relative(root, candidate);
+    if (relative === ".." || relative.startsWith(`..${path.sep}`) || path.isAbsolute(relative)) {
+        throw new Error("execution_cwd_escape");
+    }
+    return candidate;
+}
+//# sourceMappingURL=confinement.js.map

package/dist/secure-execution/confinement.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"confinement.js","sourceRoot":"","sources":["../../src/secure-execution/confinement.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,SAAS,CAAC;AACzB,OAAO,IAAI,MAAM,WAAW,CAAC;AAE7B,sFAAsF;AACtF,MAAM,UAAU,WAAW,CAAC,QAAgB,EAAE,SAAS,GAAG,GAAG;IAC3D,MAAM,IAAI,GAAG,EAAE,CAAC,YAAY,CAAC,QAAQ,CAAC,CAAC;IACvC,IAAI,CAAC,EAAE,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,WAAW,EAAE,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC,EAAE,CAAC;QAChF,MAAM,IAAI,KAAK,CAAC,wBAAwB,CAAC,CAAC;IAC5C,CAAC;IACD,IAAI,IAAI,CAAC,UAAU,CAAC,SAAS,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,wBAAwB,CAAC,CAAC;IAC1E,MAAM,SAAS,GAAG,EAAE,CAAC,YAAY,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,EAAE,SAAS,CAAC,CAAC,CAAC;IACjE,MAAM,QAAQ,GAAG,IAAI,CAAC,QAAQ,CAAC,IAAI,EAAE,SAAS,CAAC,CAAC;IAChD,IAAI,QAAQ,KAAK,IAAI,IAAI,QAAQ,CAAC,UAAU,CAAC,KAAK,IAAI,CAAC,GAAG,EAAE,CAAC,IAAI,IAAI,CAAC,UAAU,CAAC,QAAQ,CAAC,EAAE,CAAC;QAC3F,MAAM,IAAI,KAAK,CAAC,sBAAsB,CAAC,CAAC;IAC1C,CAAC;IACD,OAAO,SAAS,CAAC;AACnB,CAAC"}

package/dist/secure-execution/engine.d.ts

@@ -0,0 +1,24 @@
+import type { AutoCompletionReporter, AutoCompletionRetrySink, AutoLeaseVerifier, DestinationPolicy, ProvenanceSink, PtyFactory, QuarantineSource, ResourceController, SecretProvider, SecureExecutionRequest, SecureExecutionSession } from "./types.js";
+export declare function commandDigest(command: string): string;
+export interface SecureExecutionEngineDeps {
+    pty: PtyFactory;
+    autoLeaseVerifier?: AutoLeaseVerifier;
+    secrets?: SecretProvider;
+    destinations?: DestinationPolicy;
+    provenance?: ProvenanceSink;
+    quarantine?: QuarantineSource;
+    resources?: ResourceController;
+    completionReporter?: AutoCompletionReporter;
+    completionRetry?: AutoCompletionRetrySink;
+    now?: () => Date;
+    quarantinePollMs?: number;
+}
+export declare class SecureExecutionEngine {
+    private readonly deps;
+    private readonly sessions;
+    constructor(deps: SecureExecutionEngineDeps);
+    start(request: SecureExecutionRequest): Promise<SecureExecutionSession>;
+    recover(sessionId: string): SecureExecutionSession | null;
+    killAll(): void;
+}
+//# sourceMappingURL=engine.d.ts.map

package/dist/secure-execution/engine.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"engine.d.ts","sourceRoot":"","sources":["../../src/secure-execution/engine.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EACV,sBAAsB,EAAE,uBAAuB,EAAoB,iBAAiB,EAAE,iBAAiB,EACvG,cAAc,EAAE,UAAU,EAAE,gBAAgB,EAAE,kBAAkB,EAAE,cAAc,EAAE,sBAAsB,EACxG,sBAAsB,EACvB,MAAM,YAAY,CAAC;AASpB,wBAAgB,aAAa,CAAC,OAAO,EAAE,MAAM,GAAG,MAAM,CAErD;AAkDD,MAAM,WAAW,yBAAyB;IACxC,GAAG,EAAE,UAAU,CAAC;IAChB,iBAAiB,CAAC,EAAE,iBAAiB,CAAC;IACtC,OAAO,CAAC,EAAE,cAAc,CAAC;IACzB,YAAY,CAAC,EAAE,iBAAiB,CAAC;IACjC,UAAU,CAAC,EAAE,cAAc,CAAC;IAC5B,UAAU,CAAC,EAAE,gBAAgB,CAAC;IAC9B,SAAS,CAAC,EAAE,kBAAkB,CAAC;IAC/B,kBAAkB,CAAC,EAAE,sBAAsB,CAAC;IAC5C,eAAe,CAAC,EAAE,uBAAuB,CAAC;IAC1C,GAAG,CAAC,EAAE,MAAM,IAAI,CAAC;IACjB,gBAAgB,CAAC,EAAE,MAAM,CAAC;CAC3B;AAED,qBAAa,qBAAqB;IAEpB,OAAO,CAAC,QAAQ,CAAC,IAAI;IADjC,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAA6C;gBACzC,IAAI,EAAE,yBAAyB;IAEtD,KAAK,CAAC,OAAO,EAAE,sBAAsB,GAAG,OAAO,CAAC,sBAAsB,CAAC;IAoJ7E,OAAO,CAAC,SAAS,EAAE,MAAM,GAAG,sBAAsB,GAAG,IAAI;IACzD,OAAO,IAAI,IAAI;CAChB"}

package/dist/secure-execution/engine.js

@@ -0,0 +1,272 @@
+import { createHash } from "node:crypto";
+import os from "node:os";
+import { confinedCwd } from "./confinement.js";
+import { assertAutoExecutionPolicy } from "./command-policy.js";
+import { StreamingMachineRedactor } from "../machine-console/redact.js";
+const DEFAULT_LIMITS = { wallMs: 15 * 60_000, outputBytes: 8 * 1024 * 1024, inputBytes: 1024 * 1024, maxCols: 240, maxRows: 120, cpuSeconds: 300, memoryMb: 2048 };
+const SAFE_ENV = new Set(["PATH", "HOME", "USER", "LOGNAME", "SHELL", "LANG", "LC_ALL", "TERM", "TMPDIR", "NO_COLOR"]);
+const SECRET_NAME = /^[A-Z][A-Z0-9_]{1,63}$/;
+export function commandDigest(command) {
+    return createHash("sha256").update(command, "utf8").digest("hex");
+}
+function boundedLimits(input = {}) {
+    const clamp = (value, fallback, max) => Math.max(1, Math.min(Number.isFinite(value) ? Number(value) : fallback, max));
+    return {
+        wallMs: clamp(input.wallMs, DEFAULT_LIMITS.wallMs, 60 * 60_000),
+        outputBytes: clamp(input.outputBytes, DEFAULT_LIMITS.outputBytes, 32 * 1024 * 1024),
+        inputBytes: clamp(input.inputBytes, DEFAULT_LIMITS.inputBytes, 4 * 1024 * 1024),
+        maxCols: clamp(input.maxCols, DEFAULT_LIMITS.maxCols, 500),
+        maxRows: clamp(input.maxRows, DEFAULT_LIMITS.maxRows, 300),
+        cpuSeconds: clamp(input.cpuSeconds, DEFAULT_LIMITS.cpuSeconds, 3600),
+        memoryMb: clamp(input.memoryMb, DEFAULT_LIMITS.memoryMb, 16_384),
+    };
+}
+function baseEnv(requested = {}) {
+    const result = { ACC_SECURE_EXECUTION: "1" };
+    for (const [name, value] of Object.entries(process.env))
+        if (SAFE_ENV.has(name) && value !== undefined)
+            result[name] = value;
+    for (const [name, value] of Object.entries(requested))
+        if (SAFE_ENV.has(name))
+            result[name] = value;
+    return result;
+}
+class ExactSecretRedactor {
+    tail = "";
+    values;
+    keep;
+    constructor(values) {
+        this.values = [...new Set(values.filter((value) => value.length >= 4))].sort((a, b) => b.length - a.length);
+        this.keep = Math.max(0, ...this.values.map((value) => value.length - 1));
+    }
+    replace(value) {
+        return this.values.reduce((text, secret) => text.split(secret).join("[REDACTED_SECRET]"), value);
+    }
+    push(chunk) {
+        const joined = this.tail + chunk;
+        if (joined.length <= this.keep) {
+            this.tail = joined;
+            return "";
+        }
+        const safeEnd = joined.length - this.keep;
+        let output = "";
+        let index = 0;
+        while (index < safeEnd) {
+            const secret = this.values.find((value) => joined.startsWith(value, index));
+            if (secret) {
+                output += "[REDACTED_SECRET]";
+                index += secret.length;
+            }
+            else {
+                output += joined[index];
+                index += 1;
+            }
+        }
+        this.tail = joined.slice(index);
+        return output;
+    }
+    finish() { const output = this.replace(this.tail); this.tail = ""; return output; }
+}
+export class SecureExecutionEngine {
+    deps;
+    sessions = new Map();
+    constructor(deps) {
+        this.deps = deps;
+    }
+    async start(request) {
+        if (this.sessions.has(request.sessionId))
+            throw new Error("execution_session_exists");
+        const now = this.deps.now?.() ?? new Date();
+        const digest = commandDigest(request.command);
+        const deny = async (reason) => {
+            await this.deps.provenance?.record("execution.denied", { session_id: request.sessionId, runner_id: request.runnerId, repo: request.repo, command_digest: digest, mode: request.mode, reason });
+            throw new Error(reason);
+        };
+        if (!request.sessionId.trim() || !request.runnerId.trim() || !/^[^/\s]+\/[^/\s]+$/.test(request.repo))
+            return deny("execution_identity_invalid");
+        if (!request.command.trim() || /[\0\r\n]/.test(request.command))
+            return deny("execution_command_invalid");
+        const quarantine = await this.deps.quarantine?.current();
+        if (quarantine?.quarantined)
+            return deny("execution_runner_quarantined");
+        const limits = boundedLimits(request.limits);
+        let leaseVerdict;
+        if (request.mode === "auto") {
+            for (const key of ["wallMs", "outputBytes", "inputBytes", "maxCols", "maxRows", "cpuSeconds", "memoryMb"]) {
+                if (request.limits?.[key] !== undefined && request.limits[key] !== limits[key])
+                    return deny("auto_resource_limit_invalid");
+            }
+            try {
+                assertAutoExecutionPolicy(request);
+            }
+            catch (error) {
+                return deny(error.message);
+            }
+            if (!this.deps.autoLeaseVerifier || !request.autoLease)
+                return deny("auto_lease_verifier_unavailable");
+            const lease = request.autoLease;
+            if (lease.runnerId !== request.runnerId || lease.repo !== request.repo || lease.commandDigest !== digest || Date.parse(lease.expiresAt) <= now.getTime())
+                return deny("auto_lease_mismatch");
+            leaseVerdict = await this.deps.autoLeaseVerifier.verify(lease, {
+                runnerId: request.runnerId, orgId: request.orgId, userId: request.userId,
+                repo: request.repo, paths: request.paths ?? [request.cwd ?? "."],
+                commandClass: request.commandClass, commandDigest: digest,
+                destinations: request.destinations ?? [], limits, now,
+            });
+            if (!leaseVerdict.valid)
+                return deny("auto_lease_denied");
+        }
+        const requestedDestinations = request.destinations ?? [];
+        if (request.mode === "auto" || requestedDestinations.length) {
+            if (!this.deps.destinations)
+                return deny("destination_policy_unavailable");
+            const verdict = await this.deps.destinations.authorize(requestedDestinations, { repo: request.repo, mode: request.mode });
+            if (!verdict.allowed)
+                return deny("destination_policy_denied");
+        }
+        const secretNames = [...new Set(request.secretNames ?? [])];
+        if (secretNames.some((name) => !SECRET_NAME.test(name)))
+            return deny("secret_name_invalid");
+        if (secretNames.length && !this.deps.secrets)
+            return deny("secret_provider_unavailable");
+        const secrets = secretNames.length ? await this.deps.secrets.resolve(secretNames, { repo: request.repo, sessionId: request.sessionId }) : {};
+        if (secretNames.some((name) => typeof secrets[name] !== "string" || !secrets[name]))
+            return deny("secret_unavailable");
+        const cwd = confinedCwd(request.repoRoot, request.cwd);
+        if (request.mode === "auto" && !this.deps.resources)
+            return deny("resource_controller_unavailable");
+        const shell = os.platform() === "win32" ? (process.env.ComSpec ?? "cmd.exe") : (process.env.SHELL ?? "/bin/sh");
+        const args = os.platform() === "win32" ? ["/d", "/s", "/c", request.command] : ["-lc", request.command];
+        const child = this.deps.pty.spawn(shell, args, { cwd, env: { ...baseEnv(request.env), ...secrets }, cols: 80, rows: 24 });
+        const startedAt = now.toISOString();
+        await this.deps.provenance?.record("execution.started", { session_id: request.sessionId, runner_id: request.runnerId, repo: request.repo, command_digest: digest, mode: request.mode, cwd, secret_names: secretNames, destinations: requestedDestinations });
+        let sequence = 0;
+        let outputBytes = 0;
+        let inputBytes = 0;
+        let settled = false;
+        let termination = "exited";
+        const frames = [];
+        const exactRedactor = new ExactSecretRedactor(Object.values(secrets));
+        const genericRedactor = new StreamingMachineRedactor();
+        let resolveReceipt;
+        const wait = new Promise((resolve) => { resolveReceipt = resolve; });
+        const emit = (stream, content, count = true) => {
+            if (!content)
+                return;
+            const bytes = Buffer.byteLength(content);
+            frames.push({ sequence: sequence++, stream, content, bytes, at: (this.deps.now?.() ?? new Date()).toISOString() });
+            if (count)
+                outputBytes += bytes;
+        };
+        const kill = (why) => {
+            if (settled)
+                return;
+            termination = why;
+            emit("system", `Session stopped: ${why}.\n`, false);
+            child.kill("SIGTERM");
+        };
+        let resourceHandle = null;
+        let destinationHandle = null;
+        if (request.mode === "auto") {
+            if (!this.deps.destinations?.activate) {
+                child.kill("SIGKILL");
+                return deny("destination_runtime_enforcement_unavailable");
+            }
+            try {
+                destinationHandle = await this.deps.destinations.activate(child.pid, requestedDestinations, { repo: request.repo, mode: request.mode });
+            }
+            catch {
+                child.kill("SIGKILL");
+                return deny("destination_runtime_enforcement_failed");
+            }
+        }
+        if (this.deps.resources) {
+            try {
+                resourceHandle = await this.deps.resources.attach(child.pid, { cpuSeconds: limits.cpuSeconds, memoryMb: limits.memoryMb }, () => kill("resource_limit"));
+            }
+            catch {
+                destinationHandle?.dispose();
+                child.kill("SIGKILL");
+                return deny("resource_controller_failed");
+            }
+        }
+        const appendPty = (content) => {
+            if (settled)
+                return;
+            emit("pty", content, false);
+        };
+        const dataSubscription = child.onData((content) => {
+            if (settled)
+                return;
+            const bytes = Buffer.byteLength(content);
+            const remaining = limits.outputBytes - outputBytes;
+            outputBytes += Math.min(bytes, Math.max(remaining, 0));
+            const bounded = Buffer.from(content).subarray(0, Math.max(remaining, 0)).toString("utf8");
+            appendPty(genericRedactor.push(exactRedactor.push(bounded)));
+            if (bytes > remaining)
+                kill("output_limit");
+        });
+        const wall = setTimeout(() => kill("expired"), limits.wallMs);
+        wall.unref?.();
+        const quarantinePoll = this.deps.quarantine ? setInterval(async () => {
+            try {
+                if ((await this.deps.quarantine.current()).quarantined)
+                    kill("quarantined");
+            }
+            catch {
+                kill("quarantined");
+            }
+        }, this.deps.quarantinePollMs ?? 1_000) : null;
+        quarantinePoll?.unref?.();
+        const exitSubscription = child.onExit(async ({ exitCode }) => {
+            if (settled)
+                return;
+            appendPty(genericRedactor.push(exactRedactor.finish()) + genericRedactor.finish());
+            settled = true;
+            clearTimeout(wall);
+            if (quarantinePoll)
+                clearInterval(quarantinePoll);
+            resourceHandle?.dispose();
+            destinationHandle?.dispose();
+            dataSubscription.dispose();
+            exitSubscription.dispose();
+            const receipt = Object.freeze({ sessionId: request.sessionId, repo: request.repo, commandDigest: digest, mode: request.mode, cwd, startedAt, finishedAt: (this.deps.now?.() ?? new Date()).toISOString(), exitCode, termination, outputBytes, secretNames: Object.freeze([...secretNames]), destinations: Object.freeze(requestedDestinations.map((destination) => Object.freeze({ ...destination }))) });
+            await this.deps.provenance?.record("execution.finished", { ...receipt, session_id: receipt.sessionId, command_digest: receipt.commandDigest, secret_names: secretNames });
+            if (request.mode === "auto" && request.autoLease && this.deps.completionReporter) {
+                const completion = Object.freeze({
+                    idempotencyKey: `${request.autoLease.leaseId}:completion`,
+                    leaseId: request.autoLease.leaseId,
+                    issueReceiptId: request.autoLease.issueReceiptId,
+                    consumeReceiptId: leaseVerdict?.consumeReceiptId,
+                    profileId: leaseVerdict?.profileId,
+                    execution: receipt,
+                });
+                try {
+                    await this.deps.completionReporter.report(completion);
+                }
+                catch {
+                    await this.deps.completionRetry?.enqueue(completion);
+                }
+            }
+            this.sessions.delete(request.sessionId);
+            resolveReceipt(receipt);
+        });
+        const session = {
+            id: request.sessionId,
+            write: (data) => { if (settled)
+                throw new Error("execution_session_closed"); inputBytes += Buffer.byteLength(data); if (inputBytes > limits.inputBytes)
+                return kill("policy_denied"); child.write(data); },
+            resize: (cols, rows) => { if (settled)
+                throw new Error("execution_session_closed"); child.resize(Math.max(1, Math.min(cols, limits.maxCols)), Math.max(1, Math.min(rows, limits.maxRows))); },
+            cancel: () => kill("cancelled"),
+            reconnect: (after = -1) => frames.filter((frame) => frame.sequence > after).map((frame) => ({ ...frame })),
+            wait: () => wait,
+        };
+        this.sessions.set(request.sessionId, session);
+        return session;
+    }
+    recover(sessionId) { return this.sessions.get(sessionId) ?? null; }
+    killAll() { for (const session of this.sessions.values())
+        session.cancel(); }
+}
+//# sourceMappingURL=engine.js.map

package/dist/secure-execution/engine.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"engine.js","sourceRoot":"","sources":["../../src/secure-execution/engine.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACzC,OAAO,EAAE,MAAM,SAAS,CAAC;AAMzB,OAAO,EAAE,WAAW,EAAE,MAAM,kBAAkB,CAAC;AAC/C,OAAO,EAAE,yBAAyB,EAAE,MAAM,qBAAqB,CAAC;AAChE,OAAO,EAAE,wBAAwB,EAAE,MAAM,8BAA8B,CAAC;AAExE,MAAM,cAAc,GAAoB,EAAE,MAAM,EAAE,EAAE,GAAG,MAAM,EAAE,WAAW,EAAE,CAAC,GAAG,IAAI,GAAG,IAAI,EAAE,UAAU,EAAE,IAAI,GAAG,IAAI,EAAE,OAAO,EAAE,GAAG,EAAE,OAAO,EAAE,GAAG,EAAE,UAAU,EAAE,GAAG,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC;AACpL,MAAM,QAAQ,GAAG,IAAI,GAAG,CAAC,CAAC,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,SAAS,EAAE,OAAO,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,EAAE,QAAQ,EAAE,UAAU,CAAC,CAAC,CAAC;AACvH,MAAM,WAAW,GAAG,wBAAwB,CAAC;AAE7C,MAAM,UAAU,aAAa,CAAC,OAAe;IAC3C,OAAO,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;AACpE,CAAC;AAED,SAAS,aAAa,CAAC,QAAkC,EAAE;IACzD,MAAM,KAAK,GAAG,CAAC,KAAyB,EAAE,QAAgB,EAAE,GAAW,EAAE,EAAE,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE,GAAG,CAAC,CAAC,CAAC;IAC1J,OAAO;QACL,MAAM,EAAE,KAAK,CAAC,KAAK,CAAC,MAAM,EAAE,cAAc,CAAC,MAAM,EAAE,EAAE,GAAG,MAAM,CAAC;QAC/D,WAAW,EAAE,KAAK,CAAC,KAAK,CAAC,WAAW,EAAE,cAAc,CAAC,WAAW,EAAE,EAAE,GAAG,IAAI,GAAG,IAAI,CAAC;QACnF,UAAU,EAAE,KAAK,CAAC,KAAK,CAAC,UAAU,EAAE,cAAc,CAAC,UAAU,EAAE,CAAC,GAAG,IAAI,GAAG,IAAI,CAAC;QAC/E,OAAO,EAAE,KAAK,CAAC,KAAK,CAAC,OAAO,EAAE,cAAc,CAAC,OAAO,EAAE,GAAG,CAAC;QAC1D,OAAO,EAAE,KAAK,CAAC,KAAK,CAAC,OAAO,EAAE,cAAc,CAAC,OAAO,EAAE,GAAG,CAAC;QAC1D,UAAU,EAAE,KAAK,CAAC,KAAK,CAAC,UAAU,EAAE,cAAc,CAAC,UAAU,EAAE,IAAI,CAAC;QACpE,QAAQ,EAAE,KAAK,CAAC,KAAK,CAAC,QAAQ,EAAE,cAAc,CAAC,QAAQ,EAAE,MAAM,CAAC;KACjE,CAAC;AACJ,CAAC;AAED,SAAS,OAAO,CAAC,YAAoC,EAAE;IACrD,MAAM,MAAM,GAA2B,EAAE,oBAAoB,EAAE,GAAG,EAAE,CAAC;IACrE,KAAK,MAAM,CAAC,IAAI,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,OAAO,CAAC,GAAG,CAAC;QAAE,IAAI,QAAQ,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,KAAK,KAAK,SAAS;YAAE,MAAM,CAAC,IAAI,CAAC,GAAG,KAAK,CAAC;IAC7H,KAAK,MAAM,CAAC,IAAI,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,SAAS,CAAC;QAAE,IAAI,QAAQ,CAAC,GAAG,CAAC,IAAI,CAAC;YAAE,MAAM,CAAC,IAAI,CAAC,GAAG,KAAK,CAAC;IACpG,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,MAAM,mBAAmB;IACf,IAAI,GAAG,EAAE,CAAC;IACD,MAAM,CAAW;IACjB,IAAI,CAAS;IAC9B,YAAY,MAAgB;QAC1B,IAAI,CAAC,MAAM,GAAG,CAAC,GAAG,IAAI,GAAG,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,MAAM,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC,MAAM,CAAC,CAAC;QAC5G,IAAI,CAAC,IAAI,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,GAAG,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC;IAC3E,CAAC;IACO,OAAO,CAAC,KAAa;QAC3B,OAAO,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,MAAM,EAAE,EAAE,CAAC,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,mBAAmB,CAAC,EAAE,KAAK,CAAC,CAAC;IACnG,CAAC;IACD,IAAI,CAAC,KAAa;QAChB,MAAM,MAAM,GAAG,IAAI,CAAC,IAAI,GAAG,KAAK,CAAC;QACjC,IAAI,MAAM,CAAC,MAAM,IAAI,IAAI,CAAC,IAAI,EAAE,CAAC;YAAC,IAAI,CAAC,IAAI,GAAG,MAAM,CAAC;YAAC,OAAO,EAAE,CAAC;QAAC,CAAC;QAClE,MAAM,OAAO,GAAG,MAAM,CAAC,MAAM,GAAG,IAAI,CAAC,IAAI,CAAC;QAC1C,IAAI,MAAM,GAAG,EAAE,CAAC;QAChB,IAAI,KAAK,GAAG,CAAC,CAAC;QACd,OAAO,KAAK,GAAG,OAAO,EAAE,CAAC;YACvB,MAAM,MAAM,GAAG,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,MAAM,CAAC,UAAU,CAAC,KAAK,EAAE,KAAK,CAAC,CAAC,CAAC;YAC5E,IAAI,MAAM,EAAE,CAAC;gBAAC,MAAM,IAAI,mBAAmB,CAAC;gBAAC,KAAK,IAAI,MAAM,CAAC,MAAM,CAAC;YAAC,CAAC;iBACjE,CAAC;gBAAC,MAAM,IAAI,MAAM,CAAC,KAAK,CAAC,CAAC;gBAAC,KAAK,IAAI,CAAC,CAAC;YAAC,CAAC;QAC/C,CAAC;QACD,IAAI,CAAC,IAAI,GAAG,MAAM,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;QAChC,OAAO,MAAM,CAAC;IAChB,CAAC;IACD,MAAM,KAAa,MAAM,MAAM,GAAG,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,GAAG,EAAE,CAAC,CAAC,OAAO,MAAM,CAAC,CAAC,CAAC;CAC5F;AAgBD,MAAM,OAAO,qBAAqB;IAEH;IADZ,QAAQ,GAAG,IAAI,GAAG,EAAkC,CAAC;IACtE,YAA6B,IAA+B;QAA/B,SAAI,GAAJ,IAAI,CAA2B;IAAG,CAAC;IAEhE,KAAK,CAAC,KAAK,CAAC,OAA+B;QACzC,IAAI,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,OAAO,CAAC,SAAS,CAAC;YAAE,MAAM,IAAI,KAAK,CAAC,0BAA0B,CAAC,CAAC;QACtF,MAAM,GAAG,GAAG,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,EAAE,IAAI,IAAI,IAAI,EAAE,CAAC;QAC5C,MAAM,MAAM,GAAG,aAAa,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC;QAC9C,MAAM,IAAI,GAAG,KAAK,EAAE,MAAc,EAAkB,EAAE;YACpD,MAAM,IAAI,CAAC,IAAI,CAAC,UAAU,EAAE,MAAM,CAAC,kBAAkB,EAAE,EAAE,UAAU,EAAE,OAAO,CAAC,SAAS,EAAE,SAAS,EAAE,OAAO,CAAC,QAAQ,EAAE,IAAI,EAAE,OAAO,CAAC,IAAI,EAAE,cAAc,EAAE,MAAM,EAAE,IAAI,EAAE,OAAO,CAAC,IAAI,EAAE,MAAM,EAAE,CAAC,CAAC;YAC/L,MAAM,IAAI,KAAK,CAAC,MAAM,CAAC,CAAC;QAC1B,CAAC,CAAC;QACF,IAAI,CAAC,OAAO,CAAC,SAAS,CAAC,IAAI,EAAE,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,IAAI,EAAE,IAAI,CAAC,oBAAoB,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC;YAAE,OAAO,IAAI,CAAC,4BAA4B,CAAC,CAAC;QACjJ,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,IAAI,EAAE,IAAI,UAAU,CAAC,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC;YAAE,OAAO,IAAI,CAAC,2BAA2B,CAAC,CAAC;QAC1G,MAAM,UAAU,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,UAAU,EAAE,OAAO,EAAE,CAAC;QACzD,IAAI,UAAU,EAAE,WAAW;YAAE,OAAO,IAAI,CAAC,8BAA8B,CAAC,CAAC;QACzE,MAAM,MAAM,GAAG,aAAa,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;QAC7C,IAAI,YAA0C,CAAC;QAC/C,IAAI,OAAO,CAAC,IAAI,KAAK,MAAM,EAAE,CAAC;YAC5B,KAAK,MAAM,GAAG,IAAI,CAAC,QAAQ,EAAE,aAAa,EAAE,YAAY,EAAE,SAAS,EAAE,SAAS,EAAE,YAAY,EAAE,UAAU,CAAU,EAAE,CAAC;gBACnH,IAAI,OAAO,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,KAAK,SAAS,IAAI,OAAO,CAAC,MAAM,CAAC,GAAG,CAAC,KAAK,MAAM,CAAC,GAAG,CAAC;oBAAE,OAAO,IAAI,CAAC,6BAA6B,CAAC,CAAC;YAC7H,CAAC;YACD,IAAI,CAAC;gBAAC,yBAAyB,CAAC,OAAO,CAAC,CAAC;YAAC,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBAAC,OAAO,IAAI,CAAE,KAAe,CAAC,OAAO,CAAC,CAAC;YAAC,CAAC;YACpG,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,iBAAiB,IAAI,CAAC,OAAO,CAAC,SAAS;gBAAE,OAAO,IAAI,CAAC,iCAAiC,CAAC,CAAC;YACvG,MAAM,KAAK,GAAG,OAAO,CAAC,SAAS,CAAC;YAChC,IAAI,KAAK,CAAC,QAAQ,KAAK,OAAO,CAAC,QAAQ,IAAI,KAAK,CAAC,IAAI,KAAK,OAAO,CAAC,IAAI,IAAI,KAAK,CAAC,aAAa,KAAK,MAAM,IAAI,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,SAAS,CAAC,IAAI,GAAG,CAAC,OAAO,EAAE;gBAAE,OAAO,IAAI,CAAC,qBAAqB,CAAC,CAAC;YAC7L,YAAY,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,iBAAiB,CAAC,MAAM,CAAC,KAAK,EAAE;gBAC7D,QAAQ,EAAE,OAAO,CAAC,QAAQ,EAAE,KAAK,EAAE,OAAO,CAAC,KAAK,EAAE,MAAM,EAAE,OAAO,CAAC,MAAM;gBACxE,IAAI,EAAE,OAAO,CAAC,IAAI,EAAE,KAAK,EAAE,OAAO,CAAC,KAAK,IAAI,CAAC,OAAO,CAAC,GAAG,IAAI,GAAG,CAAC;gBAChE,YAAY,EAAE,OAAO,CAAC,YAAY,EAAE,aAAa,EAAE,MAAM;gBACzD,YAAY,EAAE,OAAO,CAAC,YAAY,IAAI,EAAE,EAAE,MAAM,EAAE,GAAG;aACtD,CAAC,CAAC;YACH,IAAI,CAAC,YAAY,CAAC,KAAK;gBAAE,OAAO,IAAI,CAAC,mBAAmB,CAAC,CAAC;QAC5D,CAAC;QACD,MAAM,qBAAqB,GAAG,OAAO,CAAC,YAAY,IAAI,EAAE,CAAC;QACzD,IAAI,OAAO,CAAC,IAAI,KAAK,MAAM,IAAI,qBAAqB,CAAC,MAAM,EAAE,CAAC;YAC5D,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,YAAY;gBAAE,OAAO,IAAI,CAAC,gCAAgC,CAAC,CAAC;YAC3E,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,YAAY,CAAC,SAAS,CAAC,qBAAqB,EAAE,EAAE,IAAI,EAAE,OAAO,CAAC,IAAI,EAAE,IAAI,EAAE,OAAO,CAAC,IAAI,EAAE,CAAC,CAAC;YAC1H,IAAI,CAAC,OAAO,CAAC,OAAO;gBAAE,OAAO,IAAI,CAAC,2BAA2B,CAAC,CAAC;QACjE,CAAC;QACD,MAAM,WAAW,GAAG,CAAC,GAAG,IAAI,GAAG,CAAC,OAAO,CAAC,WAAW,IAAI,EAAE,CAAC,CAAC,CAAC;QAC5D,IAAI,WAAW,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,WAAW,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YAAE,OAAO,IAAI,CAAC,qBAAqB,CAAC,CAAC;QAC5F,IAAI,WAAW,CAAC,MAAM,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO;YAAE,OAAO,IAAI,CAAC,6BAA6B,CAAC,CAAC;QACzF,MAAM,OAAO,GAAG,WAAW,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,IAAI,CAAC,IAAI,CAAC,OAAQ,CAAC,OAAO,CAAC,WAAW,EAAE,EAAE,IAAI,EAAE,OAAO,CAAC,IAAI,EAAE,SAAS,EAAE,OAAO,CAAC,SAAS,EAAE,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;QAC9I,IAAI,WAAW,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,OAAO,OAAO,CAAC,IAAI,CAAC,KAAK,QAAQ,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;YAAE,OAAO,IAAI,CAAC,oBAAoB,CAAC,CAAC;QACvH,MAAM,GAAG,GAAG,WAAW,CAAC,OAAO,CAAC,QAAQ,EAAE,OAAO,CAAC,GAAG,CAAC,CAAC;QACvD,IAAI,OAAO,CAAC,IAAI,KAAK,MAAM,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,SAAS;YAAE,OAAO,IAAI,CAAC,iCAAiC,CAAC,CAAC;QACpG,MAAM,KAAK,GAAG,EAAE,CAAC,QAAQ,EAAE,KAAK,OAAO,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,GAAG,CAAC,OAAO,IAAI,SAAS,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,GAAG,CAAC,KAAK,IAAI,SAAS,CAAC,CAAC;QAChH,MAAM,IAAI,GAAG,EAAE,CAAC,QAAQ,EAAE,KAAK,OAAO,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,OAAO,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC,KAAK,EAAE,OAAO,CAAC,OAAO,CAAC,CAAC;QACxG,MAAM,KAAK,GAAG,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,KAAK,EAAE,IAAI,EAAE,EAAE,GAAG,EAAE,GAAG,EAAE,EAAE,GAAG,OAAO,CAAC,OAAO,CAAC,GAAG,CAAC,EAAE,GAAG,OAAO,EAAE,EAAE,IAAI,EAAE,EAAE,EAAE,IAAI,EAAE,EAAE,EAAE,CAAC,CAAC;QAC1H,MAAM,SAAS,GAAG,GAAG,CAAC,WAAW,EAAE,CAAC;QACpC,MAAM,IAAI,CAAC,IAAI,CAAC,UAAU,EAAE,MAAM,CAAC,mBAAmB,EAAE,EAAE,UAAU,EAAE,OAAO,CAAC,SAAS,EAAE,SAAS,EAAE,OAAO,CAAC,QAAQ,EAAE,IAAI,EAAE,OAAO,CAAC,IAAI,EAAE,cAAc,EAAE,MAAM,EAAE,IAAI,EAAE,OAAO,CAAC,IAAI,EAAE,GAAG,EAAE,YAAY,EAAE,WAAW,EAAE,YAAY,EAAE,qBAAqB,EAAE,CAAC,CAAC;QAC7P,IAAI,QAAQ,GAAG,CAAC,CAAC;QACjB,IAAI,WAAW,GAAG,CAAC,CAAC;QACpB,IAAI,UAAU,GAAG,CAAC,CAAC;QACnB,IAAI,OAAO,GAAG,KAAK,CAAC;QACpB,IAAI,WAAW,GAAoC,QAAQ,CAAC;QAC5D,MAAM,MAAM,GAAqB,EAAE,CAAC;QACpC,MAAM,aAAa,GAAG,IAAI,mBAAmB,CAAC,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC;QACtE,MAAM,eAAe,GAAG,IAAI,wBAAwB,EAAE,CAAC;QACvD,IAAI,cAAoD,CAAC;QACzD,MAAM,IAAI,GAAG,IAAI,OAAO,CAAmB,CAAC,OAAO,EAAE,EAAE,GAAG,cAAc,GAAG,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC;QACvF,MAAM,IAAI,GAAG,CAAC,MAAgC,EAAE,OAAe,EAAE,KAAK,GAAG,IAAI,EAAE,EAAE;YAC/E,IAAI,CAAC,OAAO;gBAAE,OAAO;YACrB,MAAM,KAAK,GAAG,MAAM,CAAC,UAAU,CAAC,OAAO,CAAC,CAAC;YACzC,MAAM,CAAC,IAAI,CAAC,EAAE,QAAQ,EAAE,QAAQ,EAAE,EAAE,MAAM,EAAE,OAAO,EAAE,KAAK,EAAE,EAAE,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,EAAE,IAAI,IAAI,IAAI,EAAE,CAAC,CAAC,WAAW,EAAE,EAAE,CAAC,CAAC;YACnH,IAAI,KAAK;gBAAE,WAAW,IAAI,KAAK,CAAC;QAClC,CAAC,CAAC;QACF,MAAM,IAAI,GAAG,CAAC,GAAoC,EAAE,EAAE;YACpD,IAAI,OAAO;gBAAE,OAAO;YACpB,WAAW,GAAG,GAAG,CAAC;YAClB,IAAI,CAAC,QAAQ,EAAE,oBAAoB,GAAG,KAAK,EAAE,KAAK,CAAC,CAAC;YACpD,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;QACxB,CAAC,CAAC;QACF,IAAI,cAAc,GAA+B,IAAI,CAAC;QACtD,IAAI,iBAAiB,GAA+B,IAAI,CAAC;QACzD,IAAI,OAAO,CAAC,IAAI,KAAK,MAAM,EAAE,CAAC;YAC5B,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,YAAY,EAAE,QAAQ,EAAE,CAAC;gBACtC,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;gBACtB,OAAO,IAAI,CAAC,6CAA6C,CAAC,CAAC;YAC7D,CAAC;YACD,IAAI,CAAC;gBAAC,iBAAiB,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,YAAY,CAAC,QAAQ,CAAC,KAAK,CAAC,GAAG,EAAE,qBAAqB,EAAE,EAAE,IAAI,EAAE,OAAO,CAAC,IAAI,EAAE,IAAI,EAAE,OAAO,CAAC,IAAI,EAAE,CAAC,CAAC;YAAC,CAAC;YAChJ,MAAM,CAAC;gBAAC,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;gBAAC,OAAO,IAAI,CAAC,wCAAwC,CAAC,CAAC;YAAC,CAAC;QACzF,CAAC;QACD,IAAI,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,CAAC;YACxB,IAAI,CAAC;gBACH,cAAc,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,KAAK,CAAC,GAAG,EAAE,EAAE,UAAU,EAAE,MAAM,CAAC,UAAU,EAAE,QAAQ,EAAE,MAAM,CAAC,QAAQ,EAAE,EAAE,GAAG,EAAE,CAAC,IAAI,CAAC,gBAAgB,CAAC,CAAC,CAAC;YAC3J,CAAC;YAAC,MAAM,CAAC;gBACP,iBAAiB,EAAE,OAAO,EAAE,CAAC;gBAC7B,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;gBACtB,OAAO,IAAI,CAAC,4BAA4B,CAAC,CAAC;YAC5C,CAAC;QACH,CAAC;QACD,MAAM,SAAS,GAAG,CAAC,OAAe,EAAE,EAAE;YACpC,IAAI,OAAO;gBAAE,OAAO;YACpB,IAAI,CAAC,KAAK,EAAE,OAAO,EAAE,KAAK,CAAC,CAAC;QAC9B,CAAC,CAAC;QACF,MAAM,gBAAgB,GAAG,KAAK,CAAC,MAAM,CAAC,CAAC,OAAO,EAAE,EAAE;YAChD,IAAI,OAAO;gBAAE,OAAO;YACpB,MAAM,KAAK,GAAG,MAAM,CAAC,UAAU,CAAC,OAAO,CAAC,CAAC;YACzC,MAAM,SAAS,GAAG,MAAM,CAAC,WAAW,GAAG,WAAW,CAAC;YACnD,WAAW,IAAI,IAAI,CAAC,GAAG,CAAC,KAAK,EAAE,IAAI,CAAC,GAAG,CAAC,SAAS,EAAE,CAAC,CAAC,CAAC,CAAC;YACvD,MAAM,OAAO,GAAG,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,QAAQ,CAAC,CAAC,EAAE,IAAI,CAAC,GAAG,CAAC,SAAS,EAAE,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;YAC1F,SAAS,CAAC,eAAe,CAAC,IAAI,CAAC,aAAa,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC;YAC7D,IAAI,KAAK,GAAG,SAAS;gBAAE,IAAI,CAAC,cAAc,CAAC,CAAC;QAC9C,CAAC,CAAC,CAAC;QACH,MAAM,IAAI,GAAG,UAAU,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,MAAM,CAAC,MAAM,CAAC,CAAC;QAAC,IAAI,CAAC,KAAK,EAAE,EAAE,CAAC;QAC9E,MAAM,cAAc,GAAG,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC,CAAC,WAAW,CAAC,KAAK,IAAI,EAAE;YACnE,IAAI,CAAC;gBAAC,IAAI,CAAC,MAAM,IAAI,CAAC,IAAI,CAAC,UAAW,CAAC,OAAO,EAAE,CAAC,CAAC,WAAW;oBAAE,IAAI,CAAC,aAAa,CAAC,CAAC;YAAC,CAAC;YACrF,MAAM,CAAC;gBAAC,IAAI,CAAC,aAAa,CAAC,CAAC;YAAC,CAAC;QAChC,CAAC,EAAE,IAAI,CAAC,IAAI,CAAC,gBAAgB,IAAI,KAAK,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;QAC/C,cAAc,EAAE,KAAK,EAAE,EAAE,CAAC;QAC1B,MAAM,gBAAgB,GAAG,KAAK,CAAC,MAAM,CAAC,KAAK,EAAE,EAAE,QAAQ,EAAE,EAAE,EAAE;YAC3D,IAAI,OAAO;gBAAE,OAAO;YACpB,SAAS,CAAC,eAAe,CAAC,IAAI,CAAC,aAAa,CAAC,MAAM,EAAE,CAAC,GAAG,eAAe,CAAC,MAAM,EAAE,CAAC,CAAC;YACnF,OAAO,GAAG,IAAI,CAAC;YACf,YAAY,CAAC,IAAI,CAAC,CAAC;YACnB,IAAI,cAAc;gBAAE,aAAa,CAAC,cAAc,CAAC,CAAC;YAClD,cAAc,EAAE,OAAO,EAAE,CAAC;YAC1B,iBAAiB,EAAE,OAAO,EAAE,CAAC;YAC7B,gBAAgB,CAAC,OAAO,EAAE,CAAC;YAAC,gBAAgB,CAAC,OAAO,EAAE,CAAC;YACvD,MAAM,OAAO,GAAqB,MAAM,CAAC,MAAM,CAAC,EAAE,SAAS,EAAE,OAAO,CAAC,SAAS,EAAE,IAAI,EAAE,OAAO,CAAC,IAAI,EAAE,aAAa,EAAE,MAAM,EAAE,IAAI,EAAE,OAAO,CAAC,IAAI,EAAE,GAAG,EAAE,SAAS,EAAE,UAAU,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,EAAE,IAAI,IAAI,IAAI,EAAE,CAAC,CAAC,WAAW,EAAE,EAAE,QAAQ,EAAE,WAAW,EAAE,WAAW,EAAE,WAAW,EAAE,MAAM,CAAC,MAAM,CAAC,CAAC,GAAG,WAAW,CAAC,CAAC,EAAE,YAAY,EAAE,MAAM,CAAC,MAAM,CAAC,qBAAqB,CAAC,GAAG,CAAC,CAAC,WAAW,EAAE,EAAE,CAAC,MAAM,CAAC,MAAM,CAAC,EAAE,GAAG,WAAW,EAAE,CAAC,CAAC,CAAC,EAAE,CAAqB,CAAC;YAChb,MAAM,IAAI,CAAC,IAAI,CAAC,UAAU,EAAE,MAAM,CAAC,oBAAoB,EAAE,EAAE,GAAG,OAAO,EAAE,UAAU,EAAE,OAAO,CAAC,SAAS,EAAE,cAAc,EAAE,OAAO,CAAC,aAAa,EAAE,YAAY,EAAE,WAAW,EAAE,CAAC,CAAC;YAC1K,IAAI,OAAO,CAAC,IAAI,KAAK,MAAM,IAAI,OAAO,CAAC,SAAS,IAAI,IAAI,CAAC,IAAI,CAAC,kBAAkB,EAAE,CAAC;gBACjF,MAAM,UAAU,GAAG,MAAM,CAAC,MAAM,CAAC;oBAC/B,cAAc,EAAE,GAAG,OAAO,CAAC,SAAS,CAAC,OAAO,aAAa;oBACzD,OAAO,EAAE,OAAO,CAAC,SAAS,CAAC,OAAO;oBAClC,cAAc,EAAE,OAAO,CAAC,SAAS,CAAC,cAAc;oBAChD,gBAAgB,EAAE,YAAY,EAAE,gBAAgB;oBAChD,SAAS,EAAE,YAAY,EAAE,SAAS;oBAClC,SAAS,EAAE,OAAO;iBACnB,CAAC,CAAC;gBACH,IAAI,CAAC;oBAAC,MAAM,IAAI,CAAC,IAAI,CAAC,kBAAkB,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC;gBAAC,CAAC;gBAC9D,MAAM,CAAC;oBACL,MAAM,IAAI,CAAC,IAAI,CAAC,eAAe,EAAE,OAAO,CAAC,UAAU,CAAC,CAAC;gBACvD,CAAC;YACH,CAAC;YACD,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC;YACxC,cAAc,CAAC,OAAO,CAAC,CAAC;QAC1B,CAAC,CAAC,CAAC;QACH,MAAM,OAAO,GAA2B;YACtC,EAAE,EAAE,OAAO,CAAC,SAAS;YACrB,KAAK,EAAE,CAAC,IAAI,EAAE,EAAE,GAAG,IAAI,OAAO;gBAAE,MAAM,IAAI,KAAK,CAAC,0BAA0B,CAAC,CAAC,CAAC,UAAU,IAAI,MAAM,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,UAAU,GAAG,MAAM,CAAC,UAAU;gBAAE,OAAO,IAAI,CAAC,eAAe,CAAC,CAAC,CAAC,KAAK,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;YAC1M,MAAM,EAAE,CAAC,IAAI,EAAE,IAAI,EAAE,EAAE,GAAG,IAAI,OAAO;gBAAE,MAAM,IAAI,KAAK,CAAC,0BAA0B,CAAC,CAAC,CAAC,KAAK,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,CAAC,GAAG,CAAC,IAAI,EAAE,MAAM,CAAC,OAAO,CAAC,CAAC,EAAE,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,CAAC,GAAG,CAAC,IAAI,EAAE,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;YAC7L,MAAM,EAAE,GAAG,EAAE,CAAC,IAAI,CAAC,WAAW,CAAC;YAC/B,SAAS,EAAE,CAAC,KAAK,GAAG,CAAC,CAAC,EAAE,EAAE,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,QAAQ,GAAG,KAAK,CAAC,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC,EAAE,GAAG,KAAK,EAAE,CAAC,CAAC;YAC1G,IAAI,EAAE,GAAG,EAAE,CAAC,IAAI;SACjB,CAAC;QACF,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,OAAO,CAAC,SAAS,EAAE,OAAO,CAAC,CAAC;QAC9C,OAAO,OAAO,CAAC;IACjB,CAAC;IAED,OAAO,CAAC,SAAiB,IAAmC,OAAO,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,SAAS,CAAC,IAAI,IAAI,CAAC,CAAC,CAAC;IAC1G,OAAO,KAAW,KAAK,MAAM,OAAO,IAAI,IAAI,CAAC,QAAQ,CAAC,MAAM,EAAE;QAAE,OAAO,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC;CACpF"}

package/dist/secure-execution/index.d.ts

@@ -0,0 +1,7 @@
+export { confinedCwd } from "./confinement.js";
+export { commandDigest, SecureExecutionEngine } from "./engine.js";
+export { NodePtyFactory } from "./node-pty.js";
+export { SupabaseAutoLeaseVerifier, MemoryCompletionOutbox, bindIssuedAutoLease } from "./auto-lease.js";
+export { assertAutoExecutionPolicy } from "./command-policy.js";
+export type * from "./types.js";
+//# sourceMappingURL=index.d.ts.map

package/dist/secure-execution/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/secure-execution/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,WAAW,EAAE,MAAM,kBAAkB,CAAC;AAC/C,OAAO,EAAE,aAAa,EAAE,qBAAqB,EAAE,MAAM,aAAa,CAAC;AACnE,OAAO,EAAE,cAAc,EAAE,MAAM,eAAe,CAAC;AAC/C,OAAO,EAAE,yBAAyB,EAAE,sBAAsB,EAAE,mBAAmB,EAAE,MAAM,iBAAiB,CAAC;AACzG,OAAO,EAAE,yBAAyB,EAAE,MAAM,qBAAqB,CAAC;AAChE,mBAAmB,YAAY,CAAC"}