@undefineds.co/xpod 0.1.0-local.202602081751

package/dist/terminal/AclPermissionService.js

@@ -0,0 +1,141 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.AclPermissionService = void 0;
+/**
+ * ACL Permission Service for Terminal Sidecar
+ *
+ * Queries Quadstore to check if a user has acl:Control permission
+ * on a resource, which is required for Terminal access.
+ */
+const global_logger_factory_1 = require("global-logger-factory");
+const SubgraphQueryEngine_1 = require("../storage/sparql/SubgraphQueryEngine");
+class AclPermissionService {
+    constructor(sparqlEndpoint) {
+        this.logger = (0, global_logger_factory_1.getLoggerFor)(this);
+        this.sparqlEndpoint = sparqlEndpoint;
+    }
+    getEngine() {
+        if (!this.engine) {
+            if (!this.sparqlEndpoint) {
+                throw new Error('SPARQL endpoint not configured');
+            }
+            this.engine = new SubgraphQueryEngine_1.SubgraphQueryEngine(new SubgraphQueryEngine_1.QuadstoreSparqlEngine(this.sparqlEndpoint));
+        }
+        return this.engine;
+    }
+    /**
+     * Check if a user has acl:Control permission on a resource.
+     *
+     * Checks for:
+     * - Direct agent match: acl:agent <userId>
+     * - Public access: acl:agentClass foaf:Agent
+     * - Authenticated access: acl:agentClass acl:AuthenticatedAgent
+     *
+     * @param userId - The WebID of the user
+     * @param resourceUrl - The URL of the resource to check
+     * @returns true if user has Control permission
+     */
+    async hasControlPermission(userId, resourceUrl) {
+        const engine = this.getEngine();
+        // Normalize resource URL (remove trailing slash for consistency)
+        const normalizedResource = resourceUrl.endsWith('/')
+            ? resourceUrl.slice(0, -1)
+            : resourceUrl;
+        // Also check the container version (with trailing slash)
+        const containerResource = normalizedResource + '/';
+        const query = `
+      PREFIX acl: <http://www.w3.org/ns/auth/acl#>
+      PREFIX foaf: <http://xmlns.com/foaf/0.1/>
+
+      ASK {
+        ?auth a acl:Authorization ;
+              acl:mode acl:Control .
+
+        # Match either the exact resource or container
+        {
+          ?auth acl:accessTo <${normalizedResource}> .
+        } UNION {
+          ?auth acl:accessTo <${containerResource}> .
+        } UNION {
+          ?auth acl:default <${normalizedResource}> .
+        } UNION {
+          ?auth acl:default <${containerResource}> .
+        }
+
+        # Match user by agent, agentClass, or agentGroup
+        {
+          ?auth acl:agent <${userId}> .
+        } UNION {
+          ?auth acl:agentClass foaf:Agent .
+        } UNION {
+          ?auth acl:agentClass acl:AuthenticatedAgent .
+        }
+      }
+    `;
+        try {
+            const hasPermission = await engine.queryBoolean(query, resourceUrl);
+            this.logger.debug(`ACL check: user=${userId}, resource=${resourceUrl}, hasControl=${hasPermission}`);
+            return hasPermission;
+        }
+        catch (error) {
+            this.logger.error(`ACL query failed: ${error}`);
+            return false;
+        }
+    }
+    /**
+     * Get all resources where user has Control permission under a base path.
+     *
+     * @param userId - The WebID of the user
+     * @param basePath - The base path to search under
+     * @returns Array of resource URLs with Control permission
+     */
+    async getControlledResources(userId, basePath) {
+        const engine = this.getEngine();
+        const query = `
+      PREFIX acl: <http://www.w3.org/ns/auth/acl#>
+      PREFIX foaf: <http://xmlns.com/foaf/0.1/>
+
+      SELECT DISTINCT ?resource WHERE {
+        ?auth a acl:Authorization ;
+              acl:mode acl:Control .
+
+        # Get the resource
+        {
+          ?auth acl:accessTo ?resource .
+        } UNION {
+          ?auth acl:default ?resource .
+        }
+
+        # Filter by base path
+        FILTER(STRSTARTS(STR(?resource), "${basePath}"))
+
+        # Match user
+        {
+          ?auth acl:agent <${userId}> .
+        } UNION {
+          ?auth acl:agentClass foaf:Agent .
+        } UNION {
+          ?auth acl:agentClass acl:AuthenticatedAgent .
+        }
+      }
+    `;
+        try {
+            const resources = [];
+            const stream = await engine.queryBindings(query, basePath);
+            for await (const binding of stream) {
+                const value = binding.get('resource');
+                if (value && typeof value === 'object' && 'value' in value) {
+                    resources.push(value.value);
+                }
+            }
+            this.logger.debug(`Found ${resources.length} controlled resources for user=${userId} under ${basePath}`);
+            return resources;
+        }
+        catch (error) {
+            this.logger.error(`ACL query failed: ${error}`);
+            return [];
+        }
+    }
+}
+exports.AclPermissionService = AclPermissionService;
+//# sourceMappingURL=AclPermissionService.js.map

package/dist/terminal/AclPermissionService.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"AclPermissionService.js","sourceRoot":"","sources":["../../src/terminal/AclPermissionService.ts"],"names":[],"mappings":";;;AAAA;;;;;GAKG;AACH,iEAAqD;AACrD,+EAAmG;AAEnG,MAAa,oBAAoB;IAK/B,YAAmB,cAAuB;QAJvB,WAAM,GAAG,IAAA,oCAAY,EAAC,IAAI,CAAC,CAAC;QAK7C,IAAI,CAAC,cAAc,GAAG,cAAc,CAAC;IACvC,CAAC;IAEO,SAAS;QACf,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,CAAC;YACjB,IAAI,CAAC,IAAI,CAAC,cAAc,EAAE,CAAC;gBACzB,MAAM,IAAI,KAAK,CAAC,gCAAgC,CAAC,CAAC;YACpD,CAAC;YACD,IAAI,CAAC,MAAM,GAAG,IAAI,yCAAmB,CAAC,IAAI,2CAAqB,CAAC,IAAI,CAAC,cAAc,CAAC,CAAC,CAAC;QACxF,CAAC;QACD,OAAO,IAAI,CAAC,MAAM,CAAC;IACrB,CAAC;IAED;;;;;;;;;;;OAWG;IACI,KAAK,CAAC,oBAAoB,CAAC,MAAc,EAAE,WAAmB;QACnE,MAAM,MAAM,GAAG,IAAI,CAAC,SAAS,EAAE,CAAC;QAEhC,iEAAiE;QACjE,MAAM,kBAAkB,GAAG,WAAW,CAAC,QAAQ,CAAC,GAAG,CAAC;YAClD,CAAC,CAAC,WAAW,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;YAC1B,CAAC,CAAC,WAAW,CAAC;QAEhB,yDAAyD;QACzD,MAAM,iBAAiB,GAAG,kBAAkB,GAAG,GAAG,CAAC;QAEnD,MAAM,KAAK,GAAG;;;;;;;;;;gCAUc,kBAAkB;;gCAElB,iBAAiB;;+BAElB,kBAAkB;;+BAElB,iBAAiB;;;;;6BAKnB,MAAM;;;;;;;KAO9B,CAAC;QAEF,IAAI,CAAC;YACH,MAAM,aAAa,GAAG,MAAM,MAAM,CAAC,YAAY,CAAC,KAAK,EAAE,WAAW,CAAC,CAAC;YACpE,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,mBAAmB,MAAM,cAAc,WAAW,gBAAgB,aAAa,EAAE,CAAC,CAAC;YACrG,OAAO,aAAa,CAAC;QACvB,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,qBAAqB,KAAK,EAAE,CAAC,CAAC;YAChD,OAAO,KAAK,CAAC;QACf,CAAC;IACH,CAAC;IAED;;;;;;OAMG;IACI,KAAK,CAAC,sBAAsB,CAAC,MAAc,EAAE,QAAgB;QAClE,MAAM,MAAM,GAAG,IAAI,CAAC,SAAS,EAAE,CAAC;QAEhC,MAAM,KAAK,GAAG;;;;;;;;;;;;;;;;4CAgB0B,QAAQ;;;;6BAIvB,MAAM;;;;;;;KAO9B,CAAC;QAEF,IAAI,CAAC;YACH,MAAM,SAAS,GAAa,EAAE,CAAC;YAC/B,MAAM,MAAM,GAAG,MAAM,MAAM,CAAC,aAAa,CAAC,KAAK,EAAE,QAAQ,CAAC,CAAC;YAE3D,IAAI,KAAK,EAAE,MAAM,OAAO,IAAI,MAAM,EAAE,CAAC;gBACnC,MAAM,KAAK,GAAG,OAAO,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC;gBACtC,IAAI,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,OAAO,IAAI,KAAK,EAAE,CAAC;oBAC3D,SAAS,CAAC,IAAI,CAAE,KAA2B,CAAC,KAAK,CAAC,CAAC;gBACrD,CAAC;YACH,CAAC;YAED,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,SAAS,SAAS,CAAC,MAAM,kCAAkC,MAAM,UAAU,QAAQ,EAAE,CAAC,CAAC;YACzG,OAAO,SAAS,CAAC;QACnB,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,qBAAqB,KAAK,EAAE,CAAC,CAAC;YAChD,OAAO,EAAE,CAAC;QACZ,CAAC;IACH,CAAC;CACF;AA3ID,oDA2IC","sourcesContent":["/**\n * ACL Permission Service for Terminal Sidecar\n *\n * Queries Quadstore to check if a user has acl:Control permission\n * on a resource, which is required for Terminal access.\n */\nimport { getLoggerFor } from 'global-logger-factory';\nimport { SubgraphQueryEngine, QuadstoreSparqlEngine } from '../storage/sparql/SubgraphQueryEngine';\n\nexport class AclPermissionService {\n  protected readonly logger = getLoggerFor(this);\n  private engine?: SubgraphQueryEngine;\n  private readonly sparqlEndpoint?: string;\n\n  public constructor(sparqlEndpoint?: string) {\n    this.sparqlEndpoint = sparqlEndpoint;\n  }\n\n  private getEngine(): SubgraphQueryEngine {\n    if (!this.engine) {\n      if (!this.sparqlEndpoint) {\n        throw new Error('SPARQL endpoint not configured');\n      }\n      this.engine = new SubgraphQueryEngine(new QuadstoreSparqlEngine(this.sparqlEndpoint));\n    }\n    return this.engine;\n  }\n\n  /**\n   * Check if a user has acl:Control permission on a resource.\n   *\n   * Checks for:\n   * - Direct agent match: acl:agent <userId>\n   * - Public access: acl:agentClass foaf:Agent\n   * - Authenticated access: acl:agentClass acl:AuthenticatedAgent\n   *\n   * @param userId - The WebID of the user\n   * @param resourceUrl - The URL of the resource to check\n   * @returns true if user has Control permission\n   */\n  public async hasControlPermission(userId: string, resourceUrl: string): Promise<boolean> {\n    const engine = this.getEngine();\n\n    // Normalize resource URL (remove trailing slash for consistency)\n    const normalizedResource = resourceUrl.endsWith('/')\n      ? resourceUrl.slice(0, -1)\n      : resourceUrl;\n\n    // Also check the container version (with trailing slash)\n    const containerResource = normalizedResource + '/';\n\n    const query = `\n      PREFIX acl: <http://www.w3.org/ns/auth/acl#>\n      PREFIX foaf: <http://xmlns.com/foaf/0.1/>\n\n      ASK {\n        ?auth a acl:Authorization ;\n              acl:mode acl:Control .\n\n        # Match either the exact resource or container\n        {\n          ?auth acl:accessTo <${normalizedResource}> .\n        } UNION {\n          ?auth acl:accessTo <${containerResource}> .\n        } UNION {\n          ?auth acl:default <${normalizedResource}> .\n        } UNION {\n          ?auth acl:default <${containerResource}> .\n        }\n\n        # Match user by agent, agentClass, or agentGroup\n        {\n          ?auth acl:agent <${userId}> .\n        } UNION {\n          ?auth acl:agentClass foaf:Agent .\n        } UNION {\n          ?auth acl:agentClass acl:AuthenticatedAgent .\n        }\n      }\n    `;\n\n    try {\n      const hasPermission = await engine.queryBoolean(query, resourceUrl);\n      this.logger.debug(`ACL check: user=${userId}, resource=${resourceUrl}, hasControl=${hasPermission}`);\n      return hasPermission;\n    } catch (error) {\n      this.logger.error(`ACL query failed: ${error}`);\n      return false;\n    }\n  }\n\n  /**\n   * Get all resources where user has Control permission under a base path.\n   *\n   * @param userId - The WebID of the user\n   * @param basePath - The base path to search under\n   * @returns Array of resource URLs with Control permission\n   */\n  public async getControlledResources(userId: string, basePath: string): Promise<string[]> {\n    const engine = this.getEngine();\n\n    const query = `\n      PREFIX acl: <http://www.w3.org/ns/auth/acl#>\n      PREFIX foaf: <http://xmlns.com/foaf/0.1/>\n\n      SELECT DISTINCT ?resource WHERE {\n        ?auth a acl:Authorization ;\n              acl:mode acl:Control .\n\n        # Get the resource\n        {\n          ?auth acl:accessTo ?resource .\n        } UNION {\n          ?auth acl:default ?resource .\n        }\n\n        # Filter by base path\n        FILTER(STRSTARTS(STR(?resource), \"${basePath}\"))\n\n        # Match user\n        {\n          ?auth acl:agent <${userId}> .\n        } UNION {\n          ?auth acl:agentClass foaf:Agent .\n        } UNION {\n          ?auth acl:agentClass acl:AuthenticatedAgent .\n        }\n      }\n    `;\n\n    try {\n      const resources: string[] = [];\n      const stream = await engine.queryBindings(query, basePath);\n\n      for await (const binding of stream) {\n        const value = binding.get('resource');\n        if (value && typeof value === 'object' && 'value' in value) {\n          resources.push((value as { value: string }).value);\n        }\n      }\n\n      this.logger.debug(`Found ${resources.length} controlled resources for user=${userId} under ${basePath}`);\n      return resources;\n    } catch (error) {\n      this.logger.error(`ACL query failed: ${error}`);\n      return [];\n    }\n  }\n}\n"]}

package/dist/terminal/BubblewrapSandbox.d.ts

@@ -0,0 +1,51 @@
+/**
+ * Bubblewrap Sandbox for Terminal Sidecar
+ *
+ * Provides secure sandboxing using bubblewrap (bwrap) with:
+ * - Single directory bind mount (based on ACL Control permission)
+ * - Optional network isolation
+ * - Process isolation via Linux namespaces
+ *
+ * Note: bubblewrap is Linux-only. On other platforms, falls back to unsandboxed execution.
+ */
+import { ChildProcess } from 'child_process';
+export interface SandboxConfig {
+    /** Working directory to bind mount (user must have acl:Control) */
+    workdir: string;
+    /** Command to execute inside sandbox */
+    command: string;
+    /** Command arguments */
+    args: string[];
+    /** Environment variables */
+    env: Record<string, string>;
+    /** Whether to isolate network (default: false) */
+    isolateNetwork?: boolean;
+    /** Additional read-only bind mounts (e.g., /usr, /lib) */
+    readonlyBinds?: string[];
+    /** PTY columns */
+    cols?: number;
+    /** PTY rows */
+    rows?: number;
+}
+export interface SandboxResult {
+    process: ChildProcess;
+    sandboxed: boolean;
+}
+export declare class BubblewrapSandbox {
+    protected readonly logger: import("global-logger-factory").Logger<unknown>;
+    private static readonly SYSTEM_PATHS;
+    /**
+     * Launch a sandboxed process.
+     *
+     * @param config - Sandbox configuration
+     * @returns The spawned process and whether it's sandboxed
+     */
+    launch(config: SandboxConfig): SandboxResult;
+    private launchSandboxed;
+    private launchUnsandboxed;
+    private buildBwrapArgs;
+    /**
+     * Check if bubblewrap is available on this system.
+     */
+    static isAvailable(): boolean;
+}

package/dist/terminal/BubblewrapSandbox.js

@@ -0,0 +1,147 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.BubblewrapSandbox = void 0;
+/**
+ * Bubblewrap Sandbox for Terminal Sidecar
+ *
+ * Provides secure sandboxing using bubblewrap (bwrap) with:
+ * - Single directory bind mount (based on ACL Control permission)
+ * - Optional network isolation
+ * - Process isolation via Linux namespaces
+ *
+ * Note: bubblewrap is Linux-only. On other platforms, falls back to unsandboxed execution.
+ */
+const child_process_1 = require("child_process");
+const fs_1 = require("fs");
+const global_logger_factory_1 = require("global-logger-factory");
+// Check if bubblewrap is available
+let bwrapAvailable;
+function isBwrapAvailable() {
+    if (bwrapAvailable === undefined) {
+        try {
+            const { execSync } = require('child_process');
+            execSync('which bwrap', { stdio: 'ignore' });
+            bwrapAvailable = true;
+        }
+        catch {
+            bwrapAvailable = false;
+        }
+    }
+    return bwrapAvailable;
+}
+class BubblewrapSandbox {
+    constructor() {
+        this.logger = (0, global_logger_factory_1.getLoggerFor)(this);
+    }
+    /**
+     * Launch a sandboxed process.
+     *
+     * @param config - Sandbox configuration
+     * @returns The spawned process and whether it's sandboxed
+     */
+    launch(config) {
+        if (!isBwrapAvailable()) {
+            this.logger.warn('bubblewrap not available, running without sandbox');
+            return this.launchUnsandboxed(config);
+        }
+        return this.launchSandboxed(config);
+    }
+    launchSandboxed(config) {
+        const bwrapArgs = this.buildBwrapArgs(config);
+        this.logger.info(`Launching sandboxed process: bwrap ${bwrapArgs.slice(0, 10).join(' ')}...`);
+        const process = (0, child_process_1.spawn)('bwrap', bwrapArgs, {
+            env: {
+                ...config.env,
+                TERM: 'xterm-256color',
+            },
+            stdio: ['pipe', 'pipe', 'pipe'],
+        });
+        return { process, sandboxed: true };
+    }
+    launchUnsandboxed(config) {
+        this.logger.info(`Launching unsandboxed process: ${config.command} ${config.args.join(' ')}`);
+        const childProcess = (0, child_process_1.spawn)(config.command, config.args, {
+            cwd: config.workdir,
+            env: {
+                ...globalThis.process.env,
+                ...config.env,
+                TERM: 'xterm-256color',
+            },
+            stdio: ['pipe', 'pipe', 'pipe'],
+        });
+        return { process: childProcess, sandboxed: false };
+    }
+    buildBwrapArgs(config) {
+        const args = [];
+        // Unshare namespaces for isolation
+        args.push('--unshare-user');
+        args.push('--unshare-pid');
+        args.push('--unshare-uts');
+        args.push('--unshare-ipc');
+        args.push('--unshare-cgroup');
+        if (config.isolateNetwork) {
+            args.push('--unshare-net');
+        }
+        // Create new root filesystem
+        args.push('--die-with-parent');
+        // Mount essential system paths as read-only
+        for (const path of BubblewrapSandbox.SYSTEM_PATHS) {
+            if ((0, fs_1.existsSync)(path)) {
+                args.push('--ro-bind', path, path);
+            }
+        }
+        // Mount /dev with basic devices
+        args.push('--dev', '/dev');
+        // Mount /proc
+        args.push('--proc', '/proc');
+        // Mount /tmp as tmpfs
+        args.push('--tmpfs', '/tmp');
+        // Mount home directory structure (empty)
+        args.push('--tmpfs', '/home');
+        // Additional read-only binds
+        if (config.readonlyBinds) {
+            for (const path of config.readonlyBinds) {
+                if ((0, fs_1.existsSync)(path)) {
+                    args.push('--ro-bind', path, path);
+                }
+            }
+        }
+        // Mount the working directory with write access
+        // This is the key security control - only this directory is writable
+        args.push('--bind', config.workdir, config.workdir);
+        // Set working directory
+        args.push('--chdir', config.workdir);
+        // Set environment variables
+        for (const [key, value] of Object.entries(config.env)) {
+            args.push('--setenv', key, value);
+        }
+        // Always set TERM
+        args.push('--setenv', 'TERM', 'xterm-256color');
+        // The command to run
+        args.push(config.command);
+        args.push(...config.args);
+        return args;
+    }
+    /**
+     * Check if bubblewrap is available on this system.
+     */
+    static isAvailable() {
+        return isBwrapAvailable();
+    }
+}
+exports.BubblewrapSandbox = BubblewrapSandbox;
+// Essential system paths that should be read-only mounted
+BubblewrapSandbox.SYSTEM_PATHS = [
+    '/usr',
+    '/lib',
+    '/lib64',
+    '/bin',
+    '/sbin',
+    '/etc/resolv.conf',
+    '/etc/hosts',
+    '/etc/passwd',
+    '/etc/group',
+    '/etc/ssl',
+    '/etc/ca-certificates',
+];
+//# sourceMappingURL=BubblewrapSandbox.js.map

package/dist/terminal/BubblewrapSandbox.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"BubblewrapSandbox.js","sourceRoot":"","sources":["../../src/terminal/BubblewrapSandbox.ts"],"names":[],"mappings":";;;AAAA;;;;;;;;;GASG;AACH,iDAAoD;AACpD,2BAAgC;AAChC,iEAAqD;AA0BrD,mCAAmC;AACnC,IAAI,cAAmC,CAAC;AAExC,SAAS,gBAAgB;IACvB,IAAI,cAAc,KAAK,SAAS,EAAE,CAAC;QACjC,IAAI,CAAC;YACH,MAAM,EAAE,QAAQ,EAAE,GAAG,OAAO,CAAC,eAAe,CAAC,CAAC;YAC9C,QAAQ,CAAC,aAAa,EAAE,EAAE,KAAK,EAAE,QAAQ,EAAE,CAAC,CAAC;YAC7C,cAAc,GAAG,IAAI,CAAC;QACxB,CAAC;QAAC,MAAM,CAAC;YACP,cAAc,GAAG,KAAK,CAAC;QACzB,CAAC;IACH,CAAC;IACD,OAAO,cAAc,CAAC;AACxB,CAAC;AAED,MAAa,iBAAiB;IAA9B;QACqB,WAAM,GAAG,IAAA,oCAAY,EAAC,IAAI,CAAC,CAAC;IAyIjD,CAAC;IAxHC;;;;;OAKG;IACI,MAAM,CAAC,MAAqB;QACjC,IAAI,CAAC,gBAAgB,EAAE,EAAE,CAAC;YACxB,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,mDAAmD,CAAC,CAAC;YACtE,OAAO,IAAI,CAAC,iBAAiB,CAAC,MAAM,CAAC,CAAC;QACxC,CAAC;QAED,OAAO,IAAI,CAAC,eAAe,CAAC,MAAM,CAAC,CAAC;IACtC,CAAC;IAEO,eAAe,CAAC,MAAqB;QAC3C,MAAM,SAAS,GAAG,IAAI,CAAC,cAAc,CAAC,MAAM,CAAC,CAAC;QAE9C,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,sCAAsC,SAAS,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;QAE9F,MAAM,OAAO,GAAG,IAAA,qBAAK,EAAC,OAAO,EAAE,SAAS,EAAE;YACxC,GAAG,EAAE;gBACH,GAAG,MAAM,CAAC,GAAG;gBACb,IAAI,EAAE,gBAAgB;aACvB;YACD,KAAK,EAAE,CAAC,MAAM,EAAE,MAAM,EAAE,MAAM,CAAC;SAChC,CAAC,CAAC;QAEH,OAAO,EAAE,OAAO,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC;IACtC,CAAC;IAEO,iBAAiB,CAAC,MAAqB;QAC7C,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,kCAAkC,MAAM,CAAC,OAAO,IAAI,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;QAE9F,MAAM,YAAY,GAAG,IAAA,qBAAK,EAAC,MAAM,CAAC,OAAO,EAAE,MAAM,CAAC,IAAI,EAAE;YACtD,GAAG,EAAE,MAAM,CAAC,OAAO;YACnB,GAAG,EAAE;gBACH,GAAG,UAAU,CAAC,OAAO,CAAC,GAAG;gBACzB,GAAG,MAAM,CAAC,GAAG;gBACb,IAAI,EAAE,gBAAgB;aACvB;YACD,KAAK,EAAE,CAAC,MAAM,EAAE,MAAM,EAAE,MAAM,CAAC;SAChC,CAAC,CAAC;QAEH,OAAO,EAAE,OAAO,EAAE,YAAY,EAAE,SAAS,EAAE,KAAK,EAAE,CAAC;IACrD,CAAC;IAEO,cAAc,CAAC,MAAqB;QAC1C,MAAM,IAAI,GAAa,EAAE,CAAC;QAE1B,mCAAmC;QACnC,IAAI,CAAC,IAAI,CAAC,gBAAgB,CAAC,CAAC;QAC5B,IAAI,CAAC,IAAI,CAAC,eAAe,CAAC,CAAC;QAC3B,IAAI,CAAC,IAAI,CAAC,eAAe,CAAC,CAAC;QAC3B,IAAI,CAAC,IAAI,CAAC,eAAe,CAAC,CAAC;QAC3B,IAAI,CAAC,IAAI,CAAC,kBAAkB,CAAC,CAAC;QAE9B,IAAI,MAAM,CAAC,cAAc,EAAE,CAAC;YAC1B,IAAI,CAAC,IAAI,CAAC,eAAe,CAAC,CAAC;QAC7B,CAAC;QAED,6BAA6B;QAC7B,IAAI,CAAC,IAAI,CAAC,mBAAmB,CAAC,CAAC;QAE/B,4CAA4C;QAC5C,KAAK,MAAM,IAAI,IAAI,iBAAiB,CAAC,YAAY,EAAE,CAAC;YAClD,IAAI,IAAA,eAAU,EAAC,IAAI,CAAC,EAAE,CAAC;gBACrB,IAAI,CAAC,IAAI,CAAC,WAAW,EAAE,IAAI,EAAE,IAAI,CAAC,CAAC;YACrC,CAAC;QACH,CAAC;QAED,gCAAgC;QAChC,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;QAE3B,cAAc;QACd,IAAI,CAAC,IAAI,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC;QAE7B,sBAAsB;QACtB,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,MAAM,CAAC,CAAC;QAE7B,yCAAyC;QACzC,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,OAAO,CAAC,CAAC;QAE9B,6BAA6B;QAC7B,IAAI,MAAM,CAAC,aAAa,EAAE,CAAC;YACzB,KAAK,MAAM,IAAI,IAAI,MAAM,CAAC,aAAa,EAAE,CAAC;gBACxC,IAAI,IAAA,eAAU,EAAC,IAAI,CAAC,EAAE,CAAC;oBACrB,IAAI,CAAC,IAAI,CAAC,WAAW,EAAE,IAAI,EAAE,IAAI,CAAC,CAAC;gBACrC,CAAC;YACH,CAAC;QACH,CAAC;QAED,gDAAgD;QAChD,qEAAqE;QACrE,IAAI,CAAC,IAAI,CAAC,QAAQ,EAAE,MAAM,CAAC,OAAO,EAAE,MAAM,CAAC,OAAO,CAAC,CAAC;QAEpD,wBAAwB;QACxB,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,MAAM,CAAC,OAAO,CAAC,CAAC;QAErC,4BAA4B;QAC5B,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC;YACtD,IAAI,CAAC,IAAI,CAAC,UAAU,EAAE,GAAG,EAAE,KAAK,CAAC,CAAC;QACpC,CAAC;QAED,kBAAkB;QAClB,IAAI,CAAC,IAAI,CAAC,UAAU,EAAE,MAAM,EAAE,gBAAgB,CAAC,CAAC;QAEhD,qBAAqB;QACrB,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;QAC1B,IAAI,CAAC,IAAI,CAAC,GAAG,MAAM,CAAC,IAAI,CAAC,CAAC;QAE1B,OAAO,IAAI,CAAC;IACd,CAAC;IAED;;OAEG;IACI,MAAM,CAAC,WAAW;QACvB,OAAO,gBAAgB,EAAE,CAAC;IAC5B,CAAC;;AAzIH,8CA0IC;AAvIC,0DAA0D;AAClC,8BAAY,GAAG;IACrC,MAAM;IACN,MAAM;IACN,QAAQ;IACR,MAAM;IACN,OAAO;IACP,kBAAkB;IAClB,YAAY;IACZ,aAAa;IACb,YAAY;IACZ,UAAU;IACV,sBAAsB;CACvB,AAZmC,CAYlC","sourcesContent":["/**\n * Bubblewrap Sandbox for Terminal Sidecar\n *\n * Provides secure sandboxing using bubblewrap (bwrap) with:\n * - Single directory bind mount (based on ACL Control permission)\n * - Optional network isolation\n * - Process isolation via Linux namespaces\n *\n * Note: bubblewrap is Linux-only. On other platforms, falls back to unsandboxed execution.\n */\nimport { spawn, ChildProcess } from 'child_process';\nimport { existsSync } from 'fs';\nimport { getLoggerFor } from 'global-logger-factory';\n\nexport interface SandboxConfig {\n  /** Working directory to bind mount (user must have acl:Control) */\n  workdir: string;\n  /** Command to execute inside sandbox */\n  command: string;\n  /** Command arguments */\n  args: string[];\n  /** Environment variables */\n  env: Record<string, string>;\n  /** Whether to isolate network (default: false) */\n  isolateNetwork?: boolean;\n  /** Additional read-only bind mounts (e.g., /usr, /lib) */\n  readonlyBinds?: string[];\n  /** PTY columns */\n  cols?: number;\n  /** PTY rows */\n  rows?: number;\n}\n\nexport interface SandboxResult {\n  process: ChildProcess;\n  sandboxed: boolean;\n}\n\n// Check if bubblewrap is available\nlet bwrapAvailable: boolean | undefined;\n\nfunction isBwrapAvailable(): boolean {\n  if (bwrapAvailable === undefined) {\n    try {\n      const { execSync } = require('child_process');\n      execSync('which bwrap', { stdio: 'ignore' });\n      bwrapAvailable = true;\n    } catch {\n      bwrapAvailable = false;\n    }\n  }\n  return bwrapAvailable;\n}\n\nexport class BubblewrapSandbox {\n  protected readonly logger = getLoggerFor(this);\n\n  // Essential system paths that should be read-only mounted\n  private static readonly SYSTEM_PATHS = [\n    '/usr',\n    '/lib',\n    '/lib64',\n    '/bin',\n    '/sbin',\n    '/etc/resolv.conf',\n    '/etc/hosts',\n    '/etc/passwd',\n    '/etc/group',\n    '/etc/ssl',\n    '/etc/ca-certificates',\n  ];\n\n  /**\n   * Launch a sandboxed process.\n   *\n   * @param config - Sandbox configuration\n   * @returns The spawned process and whether it's sandboxed\n   */\n  public launch(config: SandboxConfig): SandboxResult {\n    if (!isBwrapAvailable()) {\n      this.logger.warn('bubblewrap not available, running without sandbox');\n      return this.launchUnsandboxed(config);\n    }\n\n    return this.launchSandboxed(config);\n  }\n\n  private launchSandboxed(config: SandboxConfig): SandboxResult {\n    const bwrapArgs = this.buildBwrapArgs(config);\n\n    this.logger.info(`Launching sandboxed process: bwrap ${bwrapArgs.slice(0, 10).join(' ')}...`);\n\n    const process = spawn('bwrap', bwrapArgs, {\n      env: {\n        ...config.env,\n        TERM: 'xterm-256color',\n      },\n      stdio: ['pipe', 'pipe', 'pipe'],\n    });\n\n    return { process, sandboxed: true };\n  }\n\n  private launchUnsandboxed(config: SandboxConfig): SandboxResult {\n    this.logger.info(`Launching unsandboxed process: ${config.command} ${config.args.join(' ')}`);\n\n    const childProcess = spawn(config.command, config.args, {\n      cwd: config.workdir,\n      env: {\n        ...globalThis.process.env,\n        ...config.env,\n        TERM: 'xterm-256color',\n      },\n      stdio: ['pipe', 'pipe', 'pipe'],\n    });\n\n    return { process: childProcess, sandboxed: false };\n  }\n\n  private buildBwrapArgs(config: SandboxConfig): string[] {\n    const args: string[] = [];\n\n    // Unshare namespaces for isolation\n    args.push('--unshare-user');\n    args.push('--unshare-pid');\n    args.push('--unshare-uts');\n    args.push('--unshare-ipc');\n    args.push('--unshare-cgroup');\n\n    if (config.isolateNetwork) {\n      args.push('--unshare-net');\n    }\n\n    // Create new root filesystem\n    args.push('--die-with-parent');\n\n    // Mount essential system paths as read-only\n    for (const path of BubblewrapSandbox.SYSTEM_PATHS) {\n      if (existsSync(path)) {\n        args.push('--ro-bind', path, path);\n      }\n    }\n\n    // Mount /dev with basic devices\n    args.push('--dev', '/dev');\n\n    // Mount /proc\n    args.push('--proc', '/proc');\n\n    // Mount /tmp as tmpfs\n    args.push('--tmpfs', '/tmp');\n\n    // Mount home directory structure (empty)\n    args.push('--tmpfs', '/home');\n\n    // Additional read-only binds\n    if (config.readonlyBinds) {\n      for (const path of config.readonlyBinds) {\n        if (existsSync(path)) {\n          args.push('--ro-bind', path, path);\n        }\n      }\n    }\n\n    // Mount the working directory with write access\n    // This is the key security control - only this directory is writable\n    args.push('--bind', config.workdir, config.workdir);\n\n    // Set working directory\n    args.push('--chdir', config.workdir);\n\n    // Set environment variables\n    for (const [key, value] of Object.entries(config.env)) {\n      args.push('--setenv', key, value);\n    }\n\n    // Always set TERM\n    args.push('--setenv', 'TERM', 'xterm-256color');\n\n    // The command to run\n    args.push(config.command);\n    args.push(...config.args);\n\n    return args;\n  }\n\n  /**\n   * Check if bubblewrap is available on this system.\n   */\n  public static isAvailable(): boolean {\n    return isBwrapAvailable();\n  }\n}\n"]}

package/dist/terminal/TerminalSession.d.ts

@@ -0,0 +1,33 @@
+import { EventEmitter } from 'events';
+import type { Session, SessionStatus, SessionConfig } from './types';
+export interface TerminalSessionEvents {
+    'data': (data: string) => void;
+    'exit': (code: number, signal?: string) => void;
+    'error': (error: Error) => void;
+}
+export declare class TerminalSession extends EventEmitter {
+    private readonly env;
+    protected readonly logger: import("global-logger-factory").Logger<unknown>;
+    readonly sessionId: string;
+    readonly userId: string;
+    readonly command: string;
+    readonly workdir: string;
+    readonly createdAt: Date;
+    readonly expiresAt: Date;
+    private _status;
+    private ptyProcess?;
+    private idleTimer?;
+    private sessionTimer?;
+    private readonly idleTimeout;
+    constructor(sessionId: string, userId: string, config: SessionConfig, env: Record<string, string>);
+    get status(): SessionStatus;
+    get pid(): number | undefined;
+    private start;
+    private resetIdleTimer;
+    write(data: string): void;
+    resize(cols: number, rows: number): void;
+    sendSignal(signal: string): void;
+    terminate(): void;
+    private cleanup;
+    toJSON(): Session;
+}

package/dist/terminal/TerminalSession.js

@@ -0,0 +1,164 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.TerminalSession = void 0;
+const events_1 = require("events");
+const global_logger_factory_1 = require("global-logger-factory");
+// node-pty is optional - will be loaded dynamically
+let pty;
+try {
+    pty = require('node-pty');
+}
+catch {
+    // node-pty not available
+}
+class TerminalSession extends events_1.EventEmitter {
+    constructor(sessionId, userId, config, env) {
+        super();
+        this.env = env;
+        this.logger = (0, global_logger_factory_1.getLoggerFor)(this);
+        this._status = 'active';
+        if (!pty) {
+            throw new Error('node-pty is not available. Please install it: npm install node-pty');
+        }
+        this.sessionId = sessionId;
+        this.userId = userId;
+        this.command = config.command;
+        this.workdir = config.workdir;
+        this.createdAt = new Date();
+        this.expiresAt = new Date(Date.now() + config.timeout * 1000);
+        this.idleTimeout = 10 * 60 * 1000; // 10 minutes
+        this.start(config);
+    }
+    get status() {
+        return this._status;
+    }
+    get pid() {
+        return this.ptyProcess?.pid;
+    }
+    start(config) {
+        if (!pty) {
+            throw new Error('node-pty is not available');
+        }
+        this.logger.info(`Starting terminal session ${this.sessionId}: ${config.command} ${config.args.join(' ')}`);
+        try {
+            this.ptyProcess = pty.spawn(config.command, config.args, {
+                name: 'xterm-256color',
+                cols: 80,
+                rows: 24,
+                cwd: config.workdir,
+                env: {
+                    ...process.env,
+                    ...this.env,
+                    TERM: 'xterm-256color',
+                },
+            });
+            this.ptyProcess.onData((data) => {
+                this.resetIdleTimer();
+                this.emit('data', data);
+            });
+            this.ptyProcess.onExit(({ exitCode, signal }) => {
+                this.logger.debug(`Terminal session ${this.sessionId} exited: code=${exitCode}, signal=${signal}`);
+                this._status = 'terminated';
+                this.cleanup();
+                this.emit('exit', exitCode, signal !== undefined ? String(signal) : undefined);
+            });
+            // Set session expiration timer
+            this.sessionTimer = setTimeout(() => {
+                this.logger.debug(`Terminal session ${this.sessionId} expired`);
+                this.terminate();
+            }, config.timeout * 1000);
+            // Start idle timer
+            this.resetIdleTimer();
+        }
+        catch (error) {
+            this.logger.error(`Failed to start terminal session ${this.sessionId}: ${error}`);
+            this._status = 'terminated';
+            this.emit('error', error);
+            throw error;
+        }
+    }
+    resetIdleTimer() {
+        if (this.idleTimer) {
+            clearTimeout(this.idleTimer);
+        }
+        this._status = 'active';
+        this.idleTimer = setTimeout(() => {
+            this.logger.debug(`Terminal session ${this.sessionId} idle timeout`);
+            this._status = 'idle';
+            // Don't terminate on idle, just mark as idle
+            // Could add auto-terminate after extended idle if needed
+        }, this.idleTimeout);
+    }
+    write(data) {
+        if (this._status === 'terminated') {
+            throw new Error('Session is terminated');
+        }
+        this.resetIdleTimer();
+        this.ptyProcess?.write(data);
+    }
+    resize(cols, rows) {
+        if (this._status === 'terminated') {
+            return;
+        }
+        this.ptyProcess?.resize(cols, rows);
+    }
+    sendSignal(signal) {
+        if (this._status === 'terminated' || !this.ptyProcess) {
+            return;
+        }
+        // node-pty doesn't have a direct signal method, 
+        // but we can send control characters for common signals
+        switch (signal) {
+            case 'SIGINT':
+                this.ptyProcess.write('\x03'); // Ctrl+C
+                break;
+            case 'SIGTSTP':
+                this.ptyProcess.write('\x1a'); // Ctrl+Z
+                break;
+            case 'SIGQUIT':
+                this.ptyProcess.write('\x1c'); // Ctrl+\
+                break;
+            case 'SIGTERM':
+            case 'SIGKILL':
+                this.terminate();
+                break;
+            default:
+                this.logger.warn(`Unknown signal: ${signal}`);
+        }
+    }
+    terminate() {
+        if (this._status === 'terminated') {
+            return;
+        }
+        this.logger.debug(`Terminating terminal session ${this.sessionId}`);
+        this._status = 'terminated';
+        if (this.ptyProcess) {
+            this.ptyProcess.kill();
+        }
+        this.cleanup();
+    }
+    cleanup() {
+        if (this.idleTimer) {
+            clearTimeout(this.idleTimer);
+            this.idleTimer = undefined;
+        }
+        if (this.sessionTimer) {
+            clearTimeout(this.sessionTimer);
+            this.sessionTimer = undefined;
+        }
+    }
+    toJSON() {
+        return {
+            sessionId: this.sessionId,
+            userId: this.userId,
+            command: this.command,
+            workdir: this.workdir,
+            status: this._status,
+            createdAt: this.createdAt,
+            expiresAt: this.expiresAt,
+            ptyPid: this.pid,
+        };
+    }
+}
+exports.TerminalSession = TerminalSession;
+//# sourceMappingURL=TerminalSession.js.map

package/dist/terminal/TerminalSession.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"TerminalSession.js","sourceRoot":"","sources":["../../src/terminal/TerminalSession.ts"],"names":[],"mappings":";;;AAAA,mCAAsC;AACtC,iEAAqD;AAGrD,oDAAoD;AACpD,IAAI,GAA0C,CAAC;AAC/C,IAAI,CAAC;IACH,GAAG,GAAG,OAAO,CAAC,UAAU,CAAC,CAAC;AAC5B,CAAC;AAAC,MAAM,CAAC;IACP,yBAAyB;AAC3B,CAAC;AAQD,MAAa,eAAgB,SAAQ,qBAAY;IAgB/C,YACE,SAAiB,EACjB,MAAc,EACd,MAAqB,EACJ,GAA2B;QAE5C,KAAK,EAAE,CAAC;QAFS,QAAG,GAAH,GAAG,CAAwB;QAnB3B,WAAM,GAAG,IAAA,oCAAY,EAAC,IAAI,CAAC,CAAC;QASvC,YAAO,GAAkB,QAAQ,CAAC;QAcxC,IAAI,CAAC,GAAG,EAAE,CAAC;YACT,MAAM,IAAI,KAAK,CAAC,oEAAoE,CAAC,CAAC;QACxF,CAAC;QAED,IAAI,CAAC,SAAS,GAAG,SAAS,CAAC;QAC3B,IAAI,CAAC,MAAM,GAAG,MAAM,CAAC;QACrB,IAAI,CAAC,OAAO,GAAG,MAAM,CAAC,OAAO,CAAC;QAC9B,IAAI,CAAC,OAAO,GAAG,MAAM,CAAC,OAAO,CAAC;QAC9B,IAAI,CAAC,SAAS,GAAG,IAAI,IAAI,EAAE,CAAC;QAC5B,IAAI,CAAC,SAAS,GAAG,IAAI,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,MAAM,CAAC,OAAO,GAAG,IAAI,CAAC,CAAC;QAC9D,IAAI,CAAC,WAAW,GAAG,EAAE,GAAG,EAAE,GAAG,IAAI,CAAC,CAAC,aAAa;QAEhD,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;IACrB,CAAC;IAED,IAAI,MAAM;QACR,OAAO,IAAI,CAAC,OAAO,CAAC;IACtB,CAAC;IAED,IAAI,GAAG;QACL,OAAO,IAAI,CAAC,UAAU,EAAE,GAAG,CAAC;IAC9B,CAAC;IAEO,KAAK,CAAC,MAAqB;QACjC,IAAI,CAAC,GAAG,EAAE,CAAC;YACT,MAAM,IAAI,KAAK,CAAC,2BAA2B,CAAC,CAAC;QAC/C,CAAC;QAED,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,6BAA6B,IAAI,CAAC,SAAS,KAAK,MAAM,CAAC,OAAO,IAAI,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;QAE5G,IAAI,CAAC;YACH,IAAI,CAAC,UAAU,GAAG,GAAG,CAAC,KAAK,CAAC,MAAM,CAAC,OAAO,EAAE,MAAM,CAAC,IAAI,EAAE;gBACvD,IAAI,EAAE,gBAAgB;gBACtB,IAAI,EAAE,EAAE;gBACR,IAAI,EAAE,EAAE;gBACR,GAAG,EAAE,MAAM,CAAC,OAAO;gBACnB,GAAG,EAAE;oBACH,GAAG,OAAO,CAAC,GAAG;oBACd,GAAG,IAAI,CAAC,GAAG;oBACX,IAAI,EAAE,gBAAgB;iBACvB;aACF,CAAC,CAAC;YAEH,IAAI,CAAC,UAAU,CAAC,MAAM,CAAC,CAAC,IAAY,EAAE,EAAE;gBACtC,IAAI,CAAC,cAAc,EAAE,CAAC;gBACtB,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC;YAC1B,CAAC,CAAC,CAAC;YAEH,IAAI,CAAC,UAAU,CAAC,MAAM,CAAC,CAAC,EAAE,QAAQ,EAAE,MAAM,EAAyC,EAAE,EAAE;gBACrF,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,oBAAoB,IAAI,CAAC,SAAS,iBAAiB,QAAQ,YAAY,MAAM,EAAE,CAAC,CAAC;gBACnG,IAAI,CAAC,OAAO,GAAG,YAAY,CAAC;gBAC5B,IAAI,CAAC,OAAO,EAAE,CAAC;gBACf,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,QAAQ,EAAE,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC;YACjF,CAAC,CAAC,CAAC;YAEH,+BAA+B;YAC/B,IAAI,CAAC,YAAY,GAAG,UAAU,CAAC,GAAG,EAAE;gBAClC,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,oBAAoB,IAAI,CAAC,SAAS,UAAU,CAAC,CAAC;gBAChE,IAAI,CAAC,SAAS,EAAE,CAAC;YACnB,CAAC,EAAE,MAAM,CAAC,OAAO,GAAG,IAAI,CAAC,CAAC;YAE1B,mBAAmB;YACnB,IAAI,CAAC,cAAc,EAAE,CAAC;QAExB,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,oCAAoC,IAAI,CAAC,SAAS,KAAK,KAAK,EAAE,CAAC,CAAC;YAClF,IAAI,CAAC,OAAO,GAAG,YAAY,CAAC;YAC5B,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,KAAc,CAAC,CAAC;YACnC,MAAM,KAAK,CAAC;QACd,CAAC;IACH,CAAC;IAEO,cAAc;QACpB,IAAI,IAAI,CAAC,SAAS,EAAE,CAAC;YACnB,YAAY,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;QAC/B,CAAC;QAED,IAAI,CAAC,OAAO,GAAG,QAAQ,CAAC;QAExB,IAAI,CAAC,SAAS,GAAG,UAAU,CAAC,GAAG,EAAE;YAC/B,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,oBAAoB,IAAI,CAAC,SAAS,eAAe,CAAC,CAAC;YACrE,IAAI,CAAC,OAAO,GAAG,MAAM,CAAC;YACtB,6CAA6C;YAC7C,yDAAyD;QAC3D,CAAC,EAAE,IAAI,CAAC,WAAW,CAAC,CAAC;IACvB,CAAC;IAEM,KAAK,CAAC,IAAY;QACvB,IAAI,IAAI,CAAC,OAAO,KAAK,YAAY,EAAE,CAAC;YAClC,MAAM,IAAI,KAAK,CAAC,uBAAuB,CAAC,CAAC;QAC3C,CAAC;QACD,IAAI,CAAC,cAAc,EAAE,CAAC;QACtB,IAAI,CAAC,UAAU,EAAE,KAAK,CAAC,IAAI,CAAC,CAAC;IAC/B,CAAC;IAEM,MAAM,CAAC,IAAY,EAAE,IAAY;QACtC,IAAI,IAAI,CAAC,OAAO,KAAK,YAAY,EAAE,CAAC;YAClC,OAAO;QACT,CAAC;QACD,IAAI,CAAC,UAAU,EAAE,MAAM,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;IACtC,CAAC;IAEM,UAAU,CAAC,MAAc;QAC9B,IAAI,IAAI,CAAC,OAAO,KAAK,YAAY,IAAI,CAAC,IAAI,CAAC,UAAU,EAAE,CAAC;YACtD,OAAO;QACT,CAAC;QAED,iDAAiD;QACjD,wDAAwD;QACxD,QAAQ,MAAM,EAAE,CAAC;YACf,KAAK,QAAQ;gBACX,IAAI,CAAC,UAAU,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,SAAS;gBACxC,MAAM;YACR,KAAK,SAAS;gBACZ,IAAI,CAAC,UAAU,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,SAAS;gBACxC,MAAM;YACR,KAAK,SAAS;gBACZ,IAAI,CAAC,UAAU,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,SAAS;gBACxC,MAAM;YACR,KAAK,SAAS,CAAC;YACf,KAAK,SAAS;gBACZ,IAAI,CAAC,SAAS,EAAE,CAAC;gBACjB,MAAM;YACR;gBACE,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,mBAAmB,MAAM,EAAE,CAAC,CAAC;QAClD,CAAC;IACH,CAAC;IAEM,SAAS;QACd,IAAI,IAAI,CAAC,OAAO,KAAK,YAAY,EAAE,CAAC;YAClC,OAAO;QACT,CAAC;QAED,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,gCAAgC,IAAI,CAAC,SAAS,EAAE,CAAC,CAAC;QACpE,IAAI,CAAC,OAAO,GAAG,YAAY,CAAC;QAE5B,IAAI,IAAI,CAAC,UAAU,EAAE,CAAC;YACpB,IAAI,CAAC,UAAU,CAAC,IAAI,EAAE,CAAC;QACzB,CAAC;QAED,IAAI,CAAC,OAAO,EAAE,CAAC;IACjB,CAAC;IAEO,OAAO;QACb,IAAI,IAAI,CAAC,SAAS,EAAE,CAAC;YACnB,YAAY,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;YAC7B,IAAI,CAAC,SAAS,GAAG,SAAS,CAAC;QAC7B,CAAC;QACD,IAAI,IAAI,CAAC,YAAY,EAAE,CAAC;YACtB,YAAY,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC;YAChC,IAAI,CAAC,YAAY,GAAG,SAAS,CAAC;QAChC,CAAC;IACH,CAAC;IAEM,MAAM;QACX,OAAO;YACL,SAAS,EAAE,IAAI,CAAC,SAAS;YACzB,MAAM,EAAE,IAAI,CAAC,MAAM;YACnB,OAAO,EAAE,IAAI,CAAC,OAAO;YACrB,OAAO,EAAE,IAAI,CAAC,OAAO;YACrB,MAAM,EAAE,IAAI,CAAC,OAAO;YACpB,SAAS,EAAE,IAAI,CAAC,SAAS;YACzB,SAAS,EAAE,IAAI,CAAC,SAAS;YACzB,MAAM,EAAE,IAAI,CAAC,GAAG;SACjB,CAAC;IACJ,CAAC;CACF;AA9LD,0CA8LC","sourcesContent":["import { EventEmitter } from 'events';\nimport { getLoggerFor } from 'global-logger-factory';\nimport type { Session, SessionStatus, SessionConfig } from './types';\n\n// node-pty is optional - will be loaded dynamically\nlet pty: typeof import('node-pty') | undefined;\ntry {\n  pty = require('node-pty');\n} catch {\n  // node-pty not available\n}\n\nexport interface TerminalSessionEvents {\n  'data': (data: string) => void;\n  'exit': (code: number, signal?: string) => void;\n  'error': (error: Error) => void;\n}\n\nexport class TerminalSession extends EventEmitter {\n  protected readonly logger = getLoggerFor(this);\n  \n  public readonly sessionId: string;\n  public readonly userId: string;\n  public readonly command: string;\n  public readonly workdir: string;\n  public readonly createdAt: Date;\n  public readonly expiresAt: Date;\n  \n  private _status: SessionStatus = 'active';\n  private ptyProcess?: import('node-pty').IPty;\n  private idleTimer?: NodeJS.Timeout;\n  private sessionTimer?: NodeJS.Timeout;\n  private readonly idleTimeout: number;\n\n  constructor(\n    sessionId: string,\n    userId: string,\n    config: SessionConfig,\n    private readonly env: Record<string, string>,\n  ) {\n    super();\n    \n    if (!pty) {\n      throw new Error('node-pty is not available. Please install it: npm install node-pty');\n    }\n    \n    this.sessionId = sessionId;\n    this.userId = userId;\n    this.command = config.command;\n    this.workdir = config.workdir;\n    this.createdAt = new Date();\n    this.expiresAt = new Date(Date.now() + config.timeout * 1000);\n    this.idleTimeout = 10 * 60 * 1000; // 10 minutes\n    \n    this.start(config);\n  }\n\n  get status(): SessionStatus {\n    return this._status;\n  }\n\n  get pid(): number | undefined {\n    return this.ptyProcess?.pid;\n  }\n\n  private start(config: SessionConfig): void {\n    if (!pty) {\n      throw new Error('node-pty is not available');\n    }\n    \n    this.logger.info(`Starting terminal session ${this.sessionId}: ${config.command} ${config.args.join(' ')}`);\n    \n    try {\n      this.ptyProcess = pty.spawn(config.command, config.args, {\n        name: 'xterm-256color',\n        cols: 80,\n        rows: 24,\n        cwd: config.workdir,\n        env: {\n          ...process.env,\n          ...this.env,\n          TERM: 'xterm-256color',\n        },\n      });\n\n      this.ptyProcess.onData((data: string) => {\n        this.resetIdleTimer();\n        this.emit('data', data);\n      });\n\n      this.ptyProcess.onExit(({ exitCode, signal }: { exitCode: number; signal?: number }) => {\n        this.logger.debug(`Terminal session ${this.sessionId} exited: code=${exitCode}, signal=${signal}`);\n        this._status = 'terminated';\n        this.cleanup();\n        this.emit('exit', exitCode, signal !== undefined ? String(signal) : undefined);\n      });\n\n      // Set session expiration timer\n      this.sessionTimer = setTimeout(() => {\n        this.logger.debug(`Terminal session ${this.sessionId} expired`);\n        this.terminate();\n      }, config.timeout * 1000);\n\n      // Start idle timer\n      this.resetIdleTimer();\n      \n    } catch (error) {\n      this.logger.error(`Failed to start terminal session ${this.sessionId}: ${error}`);\n      this._status = 'terminated';\n      this.emit('error', error as Error);\n      throw error;\n    }\n  }\n\n  private resetIdleTimer(): void {\n    if (this.idleTimer) {\n      clearTimeout(this.idleTimer);\n    }\n    \n    this._status = 'active';\n    \n    this.idleTimer = setTimeout(() => {\n      this.logger.debug(`Terminal session ${this.sessionId} idle timeout`);\n      this._status = 'idle';\n      // Don't terminate on idle, just mark as idle\n      // Could add auto-terminate after extended idle if needed\n    }, this.idleTimeout);\n  }\n\n  public write(data: string): void {\n    if (this._status === 'terminated') {\n      throw new Error('Session is terminated');\n    }\n    this.resetIdleTimer();\n    this.ptyProcess?.write(data);\n  }\n\n  public resize(cols: number, rows: number): void {\n    if (this._status === 'terminated') {\n      return;\n    }\n    this.ptyProcess?.resize(cols, rows);\n  }\n\n  public sendSignal(signal: string): void {\n    if (this._status === 'terminated' || !this.ptyProcess) {\n      return;\n    }\n    \n    // node-pty doesn't have a direct signal method, \n    // but we can send control characters for common signals\n    switch (signal) {\n      case 'SIGINT':\n        this.ptyProcess.write('\\x03'); // Ctrl+C\n        break;\n      case 'SIGTSTP':\n        this.ptyProcess.write('\\x1a'); // Ctrl+Z\n        break;\n      case 'SIGQUIT':\n        this.ptyProcess.write('\\x1c'); // Ctrl+\\\n        break;\n      case 'SIGTERM':\n      case 'SIGKILL':\n        this.terminate();\n        break;\n      default:\n        this.logger.warn(`Unknown signal: ${signal}`);\n    }\n  }\n\n  public terminate(): void {\n    if (this._status === 'terminated') {\n      return;\n    }\n    \n    this.logger.debug(`Terminating terminal session ${this.sessionId}`);\n    this._status = 'terminated';\n    \n    if (this.ptyProcess) {\n      this.ptyProcess.kill();\n    }\n    \n    this.cleanup();\n  }\n\n  private cleanup(): void {\n    if (this.idleTimer) {\n      clearTimeout(this.idleTimer);\n      this.idleTimer = undefined;\n    }\n    if (this.sessionTimer) {\n      clearTimeout(this.sessionTimer);\n      this.sessionTimer = undefined;\n    }\n  }\n\n  public toJSON(): Session {\n    return {\n      sessionId: this.sessionId,\n      userId: this.userId,\n      command: this.command,\n      workdir: this.workdir,\n      status: this._status,\n      createdAt: this.createdAt,\n      expiresAt: this.expiresAt,\n      ptyPid: this.pid,\n    };\n  }\n}\n"]}

package/dist/terminal/TerminalSessionManager.d.ts

@@ -0,0 +1,69 @@
+import { TerminalSession } from './TerminalSession';
+import type { EnvRef, CreateSessionRequest } from './types';
+export interface TerminalSessionManagerOptions {
+    /** Maximum sessions per user */
+    maxSessionsPerUser: number;
+    /** Maximum total sessions */
+    maxTotalSessions: number;
+    /** Default session timeout in seconds */
+    defaultTimeout: number;
+    /** Maximum session timeout in seconds */
+    maxTimeout: number;
+    /** Default working directory */
+    defaultWorkdir: string;
+    /** SPARQL endpoint for ACL queries */
+    sparqlEndpoint?: string;
+    /** Whether to require ACL Control permission (default: true) */
+    requireAclControl: boolean;
+    /** Base URL for mapping file paths to resource URLs */
+    baseUrl?: string;
+    /** File system root for mapping URLs to paths */
+    fileSystemRoot?: string;
+}
+export declare class TerminalSessionManager {
+    protected readonly logger: import("global-logger-factory").Logger<unknown>;
+    private readonly sessions;
+    private readonly userSessions;
+    private readonly options;
+    private readonly aclService?;
+    constructor(options?: Partial<TerminalSessionManagerOptions>);
+    /**
+     * Convert a file system path to a resource URL.
+     */
+    private pathToUrl;
+    /**
+     * Check if user has acl:Control permission for the working directory.
+     */
+    checkWorkdirPermission(userId: string, workdir: string): Promise<boolean>;
+    /**
+     * Create a new terminal session
+     */
+    createSession(userId: string, request: CreateSessionRequest, secretResolver?: (ref: EnvRef) => Promise<string>): Promise<TerminalSession>;
+    /**
+     * Get a session by ID
+     */
+    getSession(sessionId: string): TerminalSession | undefined;
+    /**
+     * Get all sessions for a user
+     */
+    getUserSessions(userId: string): TerminalSession[];
+    /**
+     * Terminate a session
+     */
+    terminateSession(sessionId: string): boolean;
+    /**
+     * Remove a session from tracking
+     */
+    private removeSession;
+    /**
+     * Get session statistics
+     */
+    getStats(): {
+        totalSessions: number;
+        activeUsers: number;
+    };
+    /**
+     * Terminate all sessions (for shutdown)
+     */
+    terminateAll(): void;
+}