@xenosystem/acp-agent 0.1.1

package/dist/process/providerProcessSupervisor.js

@@ -0,0 +1,305 @@
+/**
+ * Cross-platform MINIMAL provider process supervisor (XACP-010).
+ *
+ * SCOPED I/O EXCEPTION. This is the one file in the process/ layer that spawns a child process.
+ * It exists so provider adapters have a concrete, audited process boundary. It only runs after a
+ * higher layer supplies a policy/approval-gated config; the ACP handler itself keeps its
+ * zero-I/O-authority posture.
+ *
+ * What it enforces: no-shell launch (`shell:false`), validated executable/args, a clean env
+ * allowlist, an absolute cwd, a hard timeout, bounded+redacted output capture, best-effort
+ * process-tree cleanup, and an append-only audit trail.
+ *
+ * What it does NOT enforce — and must never claim to: network egress, filesystem access against
+ * a hostile process, or full child-process syscall containment. See
+ * `MINIMAL_SUPERVISOR_ENFORCEMENT`. The supervisor itself opens no sockets and makes no network
+ * call; it uses NO `exec`/`execFile` (only `spawn` with an argv array).
+ */
+import { spawn } from "node:child_process";
+import { isAbsolute } from "node:path";
+import { buildProviderEnv, envKeyList } from "./providerProcessEnvironment.js";
+import { createProviderProcessAudit } from "./providerProcessAudit.js";
+import { buildProcessDiagnostics } from "./providerProcessDiagnostics.js";
+import { ProviderProcessError } from "./providerProcessErrors.js";
+import { BoundedCapture } from "./providerProcessOutput.js";
+import { validateProviderProcessConfig, } from "./providerProcessValidation.js";
+let PROCESS_SEQ = 0;
+/** Resolve a no-shell spawn invocation. Mirrors core/process-resolver (kept dep-free here). */
+function resolveSpawn(executable, args, platform, comspec) {
+    if (platform !== "win32")
+        return { file: executable, args: [...args] };
+    // Windows: route .cmd/.bat shims through cmd.exe /c explicitly (still shell:false).
+    if (/\.(cmd|bat)$/i.test(executable)) {
+        const interp = comspec ?? process.env.ComSpec ?? "cmd.exe";
+        return { file: interp, args: ["/c", executable, ...args] };
+    }
+    return { file: executable, args: [...args] };
+}
+/** Best-effort process-tree kill. NO shell, NO exec — only spawn(argv) for `taskkill`. */
+function killProcessTree(child, platform, spawnImpl) {
+    const pid = child.pid;
+    if (pid === undefined)
+        return { attempted: false, succeeded: false };
+    try {
+        if (platform === "win32") {
+            // taskkill /PID <pid> /T /F — terminates the tree. shell:false, argv only.
+            const tk = spawnImpl("taskkill", ["/PID", String(pid), "/T", "/F"], { shell: false });
+            tk.on("error", () => {
+                /* taskkill missing → fall back to child.kill below; swallow */
+            });
+            child.kill();
+            return { attempted: true, succeeded: true };
+        }
+        // POSIX: child is started detached → kill the whole process group.
+        try {
+            process.kill(-pid, "SIGKILL");
+            return { attempted: true, succeeded: true };
+        }
+        catch {
+            child.kill("SIGKILL");
+            return { attempted: true, succeeded: true };
+        }
+    }
+    catch {
+        return { attempted: true, succeeded: false };
+    }
+}
+class MinimalSupervisorHandle {
+    processId;
+    pid;
+    status = "starting";
+    child;
+    platform;
+    spawnImpl;
+    audit;
+    stdout;
+    stderr;
+    monotonicMs;
+    startedAt;
+    envKeys;
+    workspaceMarker;
+    killTree;
+    timer;
+    resultPromise;
+    treeKillAttempted = false;
+    treeKillSucceeded;
+    terminalStatus = "exited";
+    constructor(init) {
+        this.processId = init.audit.events()[0]?.processId ?? `proc-${++PROCESS_SEQ}`;
+        this.child = init.child;
+        this.pid = init.child.pid;
+        this.platform = init.platform;
+        this.spawnImpl = init.spawnImpl;
+        this.audit = init.audit;
+        this.envKeys = init.envKeys;
+        this.workspaceMarker = init.workspaceMarker;
+        this.killTree = init.config.killTree;
+        this.monotonicMs = init.monotonicMs;
+        this.startedAt = init.monotonicMs();
+        this.stdout = new BoundedCapture(init.config.stdoutLimitBytes);
+        this.stderr = new BoundedCapture(init.config.stderrLimitBytes);
+        this.status = "running";
+        this.child.stdout?.on("data", (d) => this.stdout.push(d));
+        this.child.stderr?.on("data", (d) => this.stderr.push(d));
+        this.resultPromise = new Promise((resolve) => {
+            const finish = (exitCode, signal) => {
+                if (this.timer)
+                    clearTimeout(this.timer);
+                const durationMs = Math.max(0, Math.round(this.monotonicMs() - this.startedAt));
+                if (this.stdout.isTruncated) {
+                    this.audit.record("provider.process.stdout.truncated", "stdout truncated at limit", {
+                        bytes: this.stdout.bytes,
+                    });
+                }
+                if (this.stderr.isTruncated) {
+                    this.audit.record("provider.process.stderr.truncated", "stderr truncated at limit", {
+                        bytes: this.stderr.bytes,
+                    });
+                }
+                // Resolve terminal status: explicit (cancel/timeout) wins; else exit code.
+                let status = this.terminalStatus;
+                if (status === "exited") {
+                    status = exitCode === 0 ? "completed" : "failed";
+                }
+                this.status =
+                    status === "completed"
+                        ? "completed"
+                        : status === "cancelled"
+                            ? "cancelled"
+                            : status === "timed_out"
+                                ? "timed_out"
+                                : "failed";
+                const auditKind = status === "completed"
+                    ? "provider.process.completed"
+                    : status === "cancelled"
+                        ? "provider.process.cancelled"
+                        : status === "timed_out"
+                            ? "provider.process.timed_out"
+                            : "provider.process.failed";
+                this.audit.record(auditKind, `process ${status}`, {
+                    exitCode,
+                    signal,
+                    durationMs,
+                });
+                // Always emit the honest "not enforced" markers so consumers can't infer containment.
+                this.audit.record("provider.process.policy.not_enforced", "network egress is NOT enforced by the minimal supervisor", { capability: "network" });
+                this.audit.record("provider.process.policy.not_enforced", "filesystem is NOT enforced against a hostile process", { capability: "filesystem" });
+                resolve({
+                    status,
+                    exitCode,
+                    signal: signal ?? null,
+                    stdout: this.stdout.text(),
+                    stderr: this.stderr.text(),
+                    stdoutTruncated: this.stdout.isTruncated,
+                    stderrTruncated: this.stderr.isTruncated,
+                    durationMs,
+                    auditEvents: this.audit.events(),
+                });
+            };
+            this.child.on("error", (err) => {
+                this.terminalStatus = "failed";
+                this.audit.record("provider.process.failed", "spawn error", { message: safe(err) });
+                finish(null, null);
+            });
+            this.child.on("close", (code, signal) => finish(code, signal));
+        });
+        if (init.config.stdin !== undefined) {
+            this.child.stdin?.end(init.config.stdin);
+        }
+        // Hard timeout.
+        this.timer = setTimeout(() => {
+            this.terminalStatus = "timed_out";
+            this.audit.record("provider.process.timed_out", "timeout elapsed; terminating");
+            this.terminate();
+        }, init.config.timeoutMs);
+        this.timer.unref?.();
+    }
+    terminate() {
+        if (this.killTree) {
+            this.audit.record("provider.process.kill.attempted", "attempting process-tree kill", {
+                platform: this.platform,
+            });
+            const r = killProcessTree(this.child, this.platform, this.spawnImpl);
+            this.treeKillAttempted = r.attempted;
+            this.treeKillSucceeded = r.succeeded;
+            this.audit.record("provider.process.kill.completed", "process-tree kill attempt finished", {
+                attempted: r.attempted,
+                succeeded: r.succeeded,
+            });
+        }
+        else {
+            this.treeKillAttempted = false;
+            this.child.kill();
+        }
+    }
+    wait() {
+        return this.resultPromise;
+    }
+    async cancel(reason) {
+        if (this.status === "completed" || this.status === "failed" || this.status === "cancelled")
+            return;
+        this.terminalStatus = "cancelled";
+        this.audit.record("provider.process.cancelled", "cancel requested", reason ? { reason: safeStr(reason) } : undefined);
+        this.terminate();
+        await this.resultPromise;
+    }
+    async kill(reason) {
+        if (this.status === "completed" || this.status === "failed")
+            return;
+        if (this.terminalStatus === "exited")
+            this.terminalStatus = "cancelled";
+        this.audit.record("provider.process.kill.attempted", "kill requested", reason ? { reason: safeStr(reason) } : undefined);
+        this.terminate();
+        await this.resultPromise;
+    }
+    diagnostics() {
+        return buildProcessDiagnostics({
+            providerId: this.audit.events()[0]?.providerId ?? "unknown",
+            processId: this.processId,
+            platform: this.platform,
+            status: this.status,
+            envKeys: this.envKeys,
+            workspace: this.workspaceMarker,
+            stdoutBytes: this.stdout.bytes,
+            stderrBytes: this.stderr.bytes,
+            stdoutTruncated: this.stdout.isTruncated,
+            stderrTruncated: this.stderr.isTruncated,
+            treeKillAttempted: this.treeKillAttempted,
+            treeKillSucceeded: this.treeKillSucceeded,
+            auditCount: this.audit.events().length,
+        });
+    }
+}
+/** Redact an Error for audit details (message only, no stack). */
+function safe(err) {
+    return err instanceof Error ? safeStr(err.message) : "error";
+}
+function safeStr(s) {
+    return String(s).slice(0, 200);
+}
+/**
+ * Create the minimal supervisor. `start()` validates the config, builds a clean env, and spawns
+ * the child with `shell:false`. It throws a `ProviderProcessError` (safe message) on invalid
+ * config or spawn-setup failure; runtime spawn errors surface as a `failed` result via `wait()`.
+ */
+export function createProviderProcessSupervisor(opts = {}) {
+    const platform = opts.platform ?? process.platform;
+    const spawnImpl = opts.spawnImpl ?? spawn;
+    const monotonicMs = opts.monotonicMs ?? (() => Number(performance.now()));
+    let nowSeq = 0;
+    const now = opts.now ?? (() => `t${++nowSeq}`); // deterministic, no Date.* in source
+    return {
+        start(rawConfig) {
+            const config = validateProviderProcessConfig(rawConfig);
+            const processId = `${config.providerId}-proc-${++PROCESS_SEQ}`;
+            const audit = createProviderProcessAudit({ providerId: config.providerId, processId, now });
+            const env = buildProviderEnv(config, { platformBasics: opts.platformBasics });
+            const keys = envKeyList(env);
+            audit.record("provider.process.validated", "config validated; launching no-shell", {
+                envKeys: keys,
+                argc: config.args.length,
+                timeoutMs: config.timeoutMs,
+                killTree: config.killTree,
+            });
+            if (!isAbsolute(config.cwd)) {
+                throw new ProviderProcessError({
+                    code: "PROCESS_CWD_INVALID",
+                    safeMessage: "cwd must be an absolute path",
+                    providerId: config.providerId,
+                });
+            }
+            const resolved = resolveSpawn(config.executable, config.args, platform);
+            let child;
+            try {
+                child = spawnImpl(resolved.file, resolved.args, {
+                    cwd: config.cwd,
+                    env, // CLEAN allowlist — process.env is NOT inherited
+                    shell: false, // never a shell
+                    stdio: [config.stdin !== undefined ? "pipe" : "ignore", "pipe", "pipe"],
+                    detached: platform !== "win32", // POSIX: own process group → tree kill
+                    windowsHide: true,
+                });
+            }
+            catch (err) {
+                audit.record("provider.process.failed", "spawn setup failed", { message: safe(err) });
+                throw new ProviderProcessError({
+                    code: "PROCESS_SPAWN_FAILED",
+                    safeMessage: "failed to spawn process",
+                    providerId: config.providerId,
+                });
+            }
+            audit.record("provider.process.started", "process started", { pid: child.pid ?? null });
+            return new MinimalSupervisorHandle({
+                config,
+                child,
+                platform,
+                spawnImpl,
+                audit,
+                envKeys: keys,
+                workspaceMarker: config.workspaceRoot ? "<supervisor-temp-workspace>" : "<configured-cwd>",
+                monotonicMs,
+            });
+        },
+    };
+}
+//# sourceMappingURL=providerProcessSupervisor.js.map

package/dist/process/providerProcessSupervisor.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"providerProcessSupervisor.js","sourceRoot":"","sources":["../../src/process/providerProcessSupervisor.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;GAgBG;AAEH,OAAO,EAAE,KAAK,EAAqB,MAAM,oBAAoB,CAAC;AAC9D,OAAO,EAAE,UAAU,EAAE,MAAM,WAAW,CAAC;AACvC,OAAO,EAAE,gBAAgB,EAAE,UAAU,EAAgC,MAAM,iCAAiC,CAAC;AAC7G,OAAO,EAAE,0BAA0B,EAAE,MAAM,2BAA2B,CAAC;AACvE,OAAO,EAAE,uBAAuB,EAAE,MAAM,iCAAiC,CAAC;AAC1E,OAAO,EAAE,oBAAoB,EAAE,MAAM,4BAA4B,CAAC;AAClE,OAAO,EAAE,cAAc,EAAE,MAAM,4BAA4B,CAAC;AAC5D,OAAO,EACL,6BAA6B,GAE9B,MAAM,gCAAgC,CAAC;AAqBxC,IAAI,WAAW,GAAG,CAAC,CAAC;AAEpB,+FAA+F;AAC/F,SAAS,YAAY,CACnB,UAAkB,EAClB,IAAc,EACd,QAAyB,EACzB,OAAgB;IAEhB,IAAI,QAAQ,KAAK,OAAO;QAAE,OAAO,EAAE,IAAI,EAAE,UAAU,EAAE,IAAI,EAAE,CAAC,GAAG,IAAI,CAAC,EAAE,CAAC;IACvE,oFAAoF;IACpF,IAAI,eAAe,CAAC,IAAI,CAAC,UAAU,CAAC,EAAE,CAAC;QACrC,MAAM,MAAM,GAAG,OAAO,IAAI,OAAO,CAAC,GAAG,CAAC,OAAO,IAAI,SAAS,CAAC;QAC3D,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,IAAI,EAAE,UAAU,EAAE,GAAG,IAAI,CAAC,EAAE,CAAC;IAC7D,CAAC;IACD,OAAO,EAAE,IAAI,EAAE,UAAU,EAAE,IAAI,EAAE,CAAC,GAAG,IAAI,CAAC,EAAE,CAAC;AAC/C,CAAC;AAED,0FAA0F;AAC1F,SAAS,eAAe,CACtB,KAAmB,EACnB,QAAyB,EACzB,SAAuB;IAEvB,MAAM,GAAG,GAAG,KAAK,CAAC,GAAG,CAAC;IACtB,IAAI,GAAG,KAAK,SAAS;QAAE,OAAO,EAAE,SAAS,EAAE,KAAK,EAAE,SAAS,EAAE,KAAK,EAAE,CAAC;IACrE,IAAI,CAAC;QACH,IAAI,QAAQ,KAAK,OAAO,EAAE,CAAC;YACzB,2EAA2E;YAC3E,MAAM,EAAE,GAAG,SAAS,CAAC,UAAU,EAAE,CAAC,MAAM,EAAE,MAAM,CAAC,GAAG,CAAC,EAAE,IAAI,EAAE,IAAI,CAAC,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,CAAC,CAAC;YACtF,EAAE,CAAC,EAAE,CAAC,OAAO,EAAE,GAAG,EAAE;gBAClB,+DAA+D;YACjE,CAAC,CAAC,CAAC;YACH,KAAK,CAAC,IAAI,EAAE,CAAC;YACb,OAAO,EAAE,SAAS,EAAE,IAAI,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC;QAC9C,CAAC;QACD,mEAAmE;QACnE,IAAI,CAAC;YACH,OAAO,CAAC,IAAI,CAAC,CAAC,GAAG,EAAE,SAAS,CAAC,CAAC;YAC9B,OAAO,EAAE,SAAS,EAAE,IAAI,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC;QAC9C,CAAC;QAAC,MAAM,CAAC;YACP,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;YACtB,OAAO,EAAE,SAAS,EAAE,IAAI,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC;QAC9C,CAAC;IACH,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,EAAE,SAAS,EAAE,IAAI,EAAE,SAAS,EAAE,KAAK,EAAE,CAAC;IAC/C,CAAC;AACH,CAAC;AAED,MAAM,uBAAuB;IAClB,SAAS,CAAS;IAC3B,GAAG,CAAU;IACb,MAAM,GAA0B,UAAU,CAAC;IAE1B,KAAK,CAAe;IACpB,QAAQ,CAAkB;IAC1B,SAAS,CAAe;IACxB,KAAK,CAAuB;IAC5B,MAAM,CAAiB;IACvB,MAAM,CAAiB;IACvB,WAAW,CAAe;IAC1B,SAAS,CAAS;IAClB,OAAO,CAAW;IAClB,eAAe,CAAS;IACxB,QAAQ,CAAU;IAE3B,KAAK,CAAiC;IACtC,aAAa,CAAiC;IAC9C,iBAAiB,GAAG,KAAK,CAAC;IAC1B,iBAAiB,CAAW;IAC5B,cAAc,GAAkE,QAAQ,CAAC;IAEjG,YAAY,IASX;QACC,IAAI,CAAC,SAAS,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,SAAS,IAAI,QAAQ,EAAE,WAAW,EAAE,CAAC;QAC9E,IAAI,CAAC,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC;QACxB,IAAI,CAAC,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC;QAC1B,IAAI,CAAC,QAAQ,GAAG,IAAI,CAAC,QAAQ,CAAC;QAC9B,IAAI,CAAC,SAAS,GAAG,IAAI,CAAC,SAAS,CAAC;QAChC,IAAI,CAAC,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC;QACxB,IAAI,CAAC,OAAO,GAAG,IAAI,CAAC,OAAO,CAAC;QAC5B,IAAI,CAAC,eAAe,GAAG,IAAI,CAAC,eAAe,CAAC;QAC5C,IAAI,CAAC,QAAQ,GAAG,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC;QACrC,IAAI,CAAC,WAAW,GAAG,IAAI,CAAC,WAAW,CAAC;QACpC,IAAI,CAAC,SAAS,GAAG,IAAI,CAAC,WAAW,EAAE,CAAC;QACpC,IAAI,CAAC,MAAM,GAAG,IAAI,cAAc,CAAC,IAAI,CAAC,MAAM,CAAC,gBAAgB,CAAC,CAAC;QAC/D,IAAI,CAAC,MAAM,GAAG,IAAI,cAAc,CAAC,IAAI,CAAC,MAAM,CAAC,gBAAgB,CAAC,CAAC;QAC/D,IAAI,CAAC,MAAM,GAAG,SAAS,CAAC;QAExB,IAAI,CAAC,KAAK,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,EAAE,CAAC,CAAS,EAAE,EAAE,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC;QAClE,IAAI,CAAC,KAAK,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,EAAE,CAAC,CAAS,EAAE,EAAE,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC;QAElE,IAAI,CAAC,aAAa,GAAG,IAAI,OAAO,CAAwB,CAAC,OAAO,EAAE,EAAE;YAClE,MAAM,MAAM,GAAG,CAAC,QAAuB,EAAE,MAA6B,EAAE,EAAE;gBACxE,IAAI,IAAI,CAAC,KAAK;oBAAE,YAAY,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;gBACzC,MAAM,UAAU,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,WAAW,EAAE,GAAG,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC;gBAChF,IAAI,IAAI,CAAC,MAAM,CAAC,WAAW,EAAE,CAAC;oBAC5B,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,mCAAmC,EAAE,2BAA2B,EAAE;wBAClF,KAAK,EAAE,IAAI,CAAC,MAAM,CAAC,KAAK;qBACzB,CAAC,CAAC;gBACL,CAAC;gBACD,IAAI,IAAI,CAAC,MAAM,CAAC,WAAW,EAAE,CAAC;oBAC5B,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,mCAAmC,EAAE,2BAA2B,EAAE;wBAClF,KAAK,EAAE,IAAI,CAAC,MAAM,CAAC,KAAK;qBACzB,CAAC,CAAC;gBACL,CAAC;gBACD,2EAA2E;gBAC3E,IAAI,MAAM,GAAG,IAAI,CAAC,cAAc,CAAC;gBACjC,IAAI,MAAM,KAAK,QAAQ,EAAE,CAAC;oBACxB,MAAM,GAAG,QAAQ,KAAK,CAAC,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,QAAQ,CAAC;gBACnD,CAAC;gBACD,IAAI,CAAC,MAAM;oBACT,MAAM,KAAK,WAAW;wBACpB,CAAC,CAAC,WAAW;wBACb,CAAC,CAAC,MAAM,KAAK,WAAW;4BACtB,CAAC,CAAC,WAAW;4BACb,CAAC,CAAC,MAAM,KAAK,WAAW;gCACtB,CAAC,CAAC,WAAW;gCACb,CAAC,CAAC,QAAQ,CAAC;gBACnB,MAAM,SAAS,GACb,MAAM,KAAK,WAAW;oBACpB,CAAC,CAAC,4BAA4B;oBAC9B,CAAC,CAAC,MAAM,KAAK,WAAW;wBACtB,CAAC,CAAC,4BAA4B;wBAC9B,CAAC,CAAC,MAAM,KAAK,WAAW;4BACtB,CAAC,CAAC,4BAA4B;4BAC9B,CAAC,CAAC,yBAAyB,CAAC;gBACpC,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,SAAS,EAAE,WAAW,MAAM,EAAE,EAAE;oBAChD,QAAQ;oBACR,MAAM;oBACN,UAAU;iBACX,CAAC,CAAC;gBACH,sFAAsF;gBACtF,IAAI,CAAC,KAAK,CAAC,MAAM,CACf,sCAAsC,EACtC,0DAA0D,EAC1D,EAAE,UAAU,EAAE,SAAS,EAAE,CAC1B,CAAC;gBACF,IAAI,CAAC,KAAK,CAAC,MAAM,CACf,sCAAsC,EACtC,sDAAsD,EACtD,EAAE,UAAU,EAAE,YAAY,EAAE,CAC7B,CAAC;gBACF,OAAO,CAAC;oBACN,MAAM;oBACN,QAAQ;oBACR,MAAM,EAAE,MAAM,IAAI,IAAI;oBACtB,MAAM,EAAE,IAAI,CAAC,MAAM,CAAC,IAAI,EAAE;oBAC1B,MAAM,EAAE,IAAI,CAAC,MAAM,CAAC,IAAI,EAAE;oBAC1B,eAAe,EAAE,IAAI,CAAC,MAAM,CAAC,WAAW;oBACxC,eAAe,EAAE,IAAI,CAAC,MAAM,CAAC,WAAW;oBACxC,UAAU;oBACV,WAAW,EAAE,IAAI,CAAC,KAAK,CAAC,MAAM,EAAE;iBACjC,CAAC,CAAC;YACL,CAAC,CAAC;YAEF,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC,OAAO,EAAE,CAAC,GAAG,EAAE,EAAE;gBAC7B,IAAI,CAAC,cAAc,GAAG,QAAQ,CAAC;gBAC/B,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,yBAAyB,EAAE,aAAa,EAAE,EAAE,OAAO,EAAE,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;gBACpF,MAAM,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;YACrB,CAAC,CAAC,CAAC;YACH,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC,OAAO,EAAE,CAAC,IAAI,EAAE,MAAM,EAAE,EAAE,CAAC,MAAM,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC,CAAC;QACjE,CAAC,CAAC,CAAC;QAEH,IAAI,IAAI,CAAC,MAAM,CAAC,KAAK,KAAK,SAAS,EAAE,CAAC;YACpC,IAAI,CAAC,KAAK,CAAC,KAAK,EAAE,GAAG,CAAC,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;QAC3C,CAAC;QAED,gBAAgB;QAChB,IAAI,CAAC,KAAK,GAAG,UAAU,CAAC,GAAG,EAAE;YAC3B,IAAI,CAAC,cAAc,GAAG,WAAW,CAAC;YAClC,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,4BAA4B,EAAE,8BAA8B,CAAC,CAAC;YAChF,IAAI,CAAC,SAAS,EAAE,CAAC;QACnB,CAAC,EAAE,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC;QAC1B,IAAI,CAAC,KAAK,CAAC,KAAK,EAAE,EAAE,CAAC;IACvB,CAAC;IAEO,SAAS;QACf,IAAI,IAAI,CAAC,QAAQ,EAAE,CAAC;YAClB,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,iCAAiC,EAAE,8BAA8B,EAAE;gBACnF,QAAQ,EAAE,IAAI,CAAC,QAAQ;aACxB,CAAC,CAAC;YACH,MAAM,CAAC,GAAG,eAAe,CAAC,IAAI,CAAC,KAAK,EAAE,IAAI,CAAC,QAAQ,EAAE,IAAI,CAAC,SAAS,CAAC,CAAC;YACrE,IAAI,CAAC,iBAAiB,GAAG,CAAC,CAAC,SAAS,CAAC;YACrC,IAAI,CAAC,iBAAiB,GAAG,CAAC,CAAC,SAAS,CAAC;YACrC,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,iCAAiC,EAAE,oCAAoC,EAAE;gBACzF,SAAS,EAAE,CAAC,CAAC,SAAS;gBACtB,SAAS,EAAE,CAAC,CAAC,SAAS;aACvB,CAAC,CAAC;QACL,CAAC;aAAM,CAAC;YACN,IAAI,CAAC,iBAAiB,GAAG,KAAK,CAAC;YAC/B,IAAI,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC;QACpB,CAAC;IACH,CAAC;IAED,IAAI;QACF,OAAO,IAAI,CAAC,aAAa,CAAC;IAC5B,CAAC;IAED,KAAK,CAAC,MAAM,CAAC,MAAe;QAC1B,IAAI,IAAI,CAAC,MAAM,KAAK,WAAW,IAAI,IAAI,CAAC,MAAM,KAAK,QAAQ,IAAI,IAAI,CAAC,MAAM,KAAK,WAAW;YAAE,OAAO;QACnG,IAAI,CAAC,cAAc,GAAG,WAAW,CAAC;QAClC,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,4BAA4B,EAAE,kBAAkB,EAAE,MAAM,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC;QACtH,IAAI,CAAC,SAAS,EAAE,CAAC;QACjB,MAAM,IAAI,CAAC,aAAa,CAAC;IAC3B,CAAC;IAED,KAAK,CAAC,IAAI,CAAC,MAAe;QACxB,IAAI,IAAI,CAAC,MAAM,KAAK,WAAW,IAAI,IAAI,CAAC,MAAM,KAAK,QAAQ;YAAE,OAAO;QACpE,IAAI,IAAI,CAAC,cAAc,KAAK,QAAQ;YAAE,IAAI,CAAC,cAAc,GAAG,WAAW,CAAC;QACxE,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,iCAAiC,EAAE,gBAAgB,EAAE,MAAM,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC;QACzH,IAAI,CAAC,SAAS,EAAE,CAAC;QACjB,MAAM,IAAI,CAAC,aAAa,CAAC;IAC3B,CAAC;IAED,WAAW;QACT,OAAO,uBAAuB,CAAC;YAC7B,UAAU,EAAE,IAAI,CAAC,KAAK,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,UAAU,IAAI,SAAS;YAC3D,SAAS,EAAE,IAAI,CAAC,SAAS;YACzB,QAAQ,EAAE,IAAI,CAAC,QAAQ;YACvB,MAAM,EAAE,IAAI,CAAC,MAAM;YACnB,OAAO,EAAE,IAAI,CAAC,OAAO;YACrB,SAAS,EAAE,IAAI,CAAC,eAAe;YAC/B,WAAW,EAAE,IAAI,CAAC,MAAM,CAAC,KAAK;YAC9B,WAAW,EAAE,IAAI,CAAC,MAAM,CAAC,KAAK;YAC9B,eAAe,EAAE,IAAI,CAAC,MAAM,CAAC,WAAW;YACxC,eAAe,EAAE,IAAI,CAAC,MAAM,CAAC,WAAW;YACxC,iBAAiB,EAAE,IAAI,CAAC,iBAAiB;YACzC,iBAAiB,EAAE,IAAI,CAAC,iBAAiB;YACzC,UAAU,EAAE,IAAI,CAAC,KAAK,CAAC,MAAM,EAAE,CAAC,MAAM;SACvC,CAAC,CAAC;IACL,CAAC;CACF;AAED,kEAAkE;AAClE,SAAS,IAAI,CAAC,GAAY;IACxB,OAAO,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,OAAO,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC;AAC/D,CAAC;AACD,SAAS,OAAO,CAAC,CAAS;IACxB,OAAO,MAAM,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC;AACjC,CAAC;AAMD;;;;GAIG;AACH,MAAM,UAAU,+BAA+B,CAAC,OAA0B,EAAE;IAC1E,MAAM,QAAQ,GAAG,IAAI,CAAC,QAAQ,IAAI,OAAO,CAAC,QAAQ,CAAC;IACnD,MAAM,SAAS,GAAG,IAAI,CAAC,SAAS,IAAI,KAAK,CAAC;IAC1C,MAAM,WAAW,GAAG,IAAI,CAAC,WAAW,IAAI,CAAC,GAAG,EAAE,CAAC,MAAM,CAAC,WAAW,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC;IAC1E,IAAI,MAAM,GAAG,CAAC,CAAC;IACf,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC,IAAI,EAAE,MAAM,EAAE,CAAC,CAAC,CAAC,qCAAqC;IAErF,OAAO;QACL,KAAK,CAAC,SAAgC;YACpC,MAAM,MAAM,GAAG,6BAA6B,CAAC,SAAS,CAAC,CAAC;YACxD,MAAM,SAAS,GAAG,GAAG,MAAM,CAAC,UAAU,SAAS,EAAE,WAAW,EAAE,CAAC;YAC/D,MAAM,KAAK,GAAG,0BAA0B,CAAC,EAAE,UAAU,EAAE,MAAM,CAAC,UAAU,EAAE,SAAS,EAAE,GAAG,EAAE,CAAC,CAAC;YAE5F,MAAM,GAAG,GAAG,gBAAgB,CAAC,MAAM,EAAE,EAAE,cAAc,EAAE,IAAI,CAAC,cAAc,EAAE,CAAC,CAAC;YAC9E,MAAM,IAAI,GAAG,UAAU,CAAC,GAAG,CAAC,CAAC;YAC7B,KAAK,CAAC,MAAM,CAAC,4BAA4B,EAAE,sCAAsC,EAAE;gBACjF,OAAO,EAAE,IAAI;gBACb,IAAI,EAAE,MAAM,CAAC,IAAI,CAAC,MAAM;gBACxB,SAAS,EAAE,MAAM,CAAC,SAAS;gBAC3B,QAAQ,EAAE,MAAM,CAAC,QAAQ;aAC1B,CAAC,CAAC;YAEH,IAAI,CAAC,UAAU,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC;gBAC5B,MAAM,IAAI,oBAAoB,CAAC;oBAC7B,IAAI,EAAE,qBAAqB;oBAC3B,WAAW,EAAE,8BAA8B;oBAC3C,UAAU,EAAE,MAAM,CAAC,UAAU;iBAC9B,CAAC,CAAC;YACL,CAAC;YAED,MAAM,QAAQ,GAAG,YAAY,CAAC,MAAM,CAAC,UAAU,EAAE,MAAM,CAAC,IAAI,EAAE,QAAQ,CAAC,CAAC;YACxE,IAAI,KAAmB,CAAC;YACxB,IAAI,CAAC;gBACH,KAAK,GAAG,SAAS,CAAC,QAAQ,CAAC,IAAI,EAAE,QAAQ,CAAC,IAAI,EAAE;oBAC9C,GAAG,EAAE,MAAM,CAAC,GAAG;oBACf,GAAG,EAAE,iDAAiD;oBACtD,KAAK,EAAE,KAAK,EAAE,gBAAgB;oBAC9B,KAAK,EAAE,CAAC,MAAM,CAAC,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,QAAQ,EAAE,MAAM,EAAE,MAAM,CAAC;oBACvE,QAAQ,EAAE,QAAQ,KAAK,OAAO,EAAE,uCAAuC;oBACvE,WAAW,EAAE,IAAI;iBAClB,CAAC,CAAC;YACL,CAAC;YAAC,OAAO,GAAG,EAAE,CAAC;gBACb,KAAK,CAAC,MAAM,CAAC,yBAAyB,EAAE,oBAAoB,EAAE,EAAE,OAAO,EAAE,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;gBACtF,MAAM,IAAI,oBAAoB,CAAC;oBAC7B,IAAI,EAAE,sBAAsB;oBAC5B,WAAW,EAAE,yBAAyB;oBACtC,UAAU,EAAE,MAAM,CAAC,UAAU;iBAC9B,CAAC,CAAC;YACL,CAAC;YAED,KAAK,CAAC,MAAM,CAAC,0BAA0B,EAAE,iBAAiB,EAAE,EAAE,GAAG,EAAE,KAAK,CAAC,GAAG,IAAI,IAAI,EAAE,CAAC,CAAC;YAExF,OAAO,IAAI,uBAAuB,CAAC;gBACjC,MAAM;gBACN,KAAK;gBACL,QAAQ;gBACR,SAAS;gBACT,KAAK;gBACL,OAAO,EAAE,IAAI;gBACb,eAAe,EAAE,MAAM,CAAC,aAAa,CAAC,CAAC,CAAC,6BAA6B,CAAC,CAAC,CAAC,kBAAkB;gBAC1F,WAAW;aACZ,CAAC,CAAC;QACL,CAAC;KACF,CAAC;AACJ,CAAC"}

package/dist/process/providerProcessTypes.d.ts

@@ -0,0 +1,114 @@
+/**
+ * Types for the cross-platform **minimal provider process supervisor** (XACP-010).
+ *
+ * HONEST SCOPE — read this before extending. This layer is a *minimal supervisor / process
+ * boundary*, NOT a sandbox. It enforces launch hygiene (no-shell, validated executable/args,
+ * env allowlist, isolated cwd/temp workspace, timeout/cancel, bounded+redacted output capture,
+ * best-effort process-tree cleanup, audit). It does **NOT** enforce, and must never claim to
+ * enforce:
+ *   - network containment (a launched process can open any socket) → `network: not_enforced`
+ *   - filesystem containment against a hostile process               → `filesystem: not_enforced_against_hostile_process`
+ *   - full child-process syscall containment                         → tree kill is `best_effort`
+ *
+ * It can run a provider CLI only after a higher layer has passed policy/approval and supplied a
+ * validated config. The supervisor itself does not certify any provider; tests still use harmless
+ * fixtures/fakes.
+ */
+/** What the supervisor will launch and how it is bounded. No shell, no raw command line. */
+export interface ProviderProcessConfig {
+    /** Logical provider id (for audit/diagnostics only — does not select a real adapter). */
+    providerId: string;
+    /** A SINGLE executable token (path or bare name). Never a shell command line. */
+    executable: string;
+    /** Arguments passed literally as argv (no shell interpolation). */
+    args: string[];
+    /** Optional stdin written to the child and then closed. Never logged or audited. */
+    stdin?: string;
+    /** Absolute working directory the child runs in. */
+    cwd: string;
+    /** Explicit env allowlist — the child sees ONLY these keys (plus documented platform basics). */
+    envAllowlist: Record<string, string>;
+    /** Hard wall-clock limit; the child is killed when it elapses. */
+    timeoutMs: number;
+    /** Max stdout bytes retained (excess is dropped, `stdoutTruncated` set). */
+    stdoutLimitBytes: number;
+    /** Max stderr bytes retained (excess is dropped, `stderrTruncated` set). */
+    stderrLimitBytes: number;
+    /** Optional supervisor-owned temp workspace root (created/cleaned only if used). */
+    workspaceRoot?: string;
+    /** Attempt best-effort process-tree cleanup on stop (default true). */
+    killTree: boolean;
+    /** Only `'minimal'` exists in XACP-010 — a marker that strong containment is NOT present. */
+    platformMode: "minimal";
+}
+export type ProviderProcessStatus = "starting" | "running" | "completed" | "failed" | "cancelled" | "timed_out" | "killed";
+/** Terminal result of a supervised run. stdout/stderr are bounded; diagnostics are redacted. */
+export interface ProviderProcessResult {
+    status: "completed" | "failed" | "cancelled" | "timed_out" | "exited";
+    exitCode?: number | null;
+    signal?: string | null;
+    stdout: string;
+    stderr: string;
+    stdoutTruncated: boolean;
+    stderrTruncated: boolean;
+    durationMs: number;
+    auditEvents: ProviderProcessAuditEvent[];
+}
+export interface ProviderProcessHandle {
+    readonly processId: string;
+    readonly pid?: number;
+    readonly status: ProviderProcessStatus;
+    wait(): Promise<ProviderProcessResult>;
+    cancel(reason?: string): Promise<void>;
+    kill(reason?: string): Promise<void>;
+    diagnostics(): ProviderProcessDiagnostics;
+}
+export type ProviderProcessAuditKind = "provider.process.validated" | "provider.process.started" | "provider.process.stdout.truncated" | "provider.process.stderr.truncated" | "provider.process.completed" | "provider.process.failed" | "provider.process.cancelled" | "provider.process.timed_out" | "provider.process.kill.attempted" | "provider.process.kill.completed" | "provider.process.cleanup.completed" | "provider.process.cleanup.failed" | "provider.process.policy.not_enforced";
+export interface ProviderProcessAuditEvent {
+    eventId: string;
+    timestamp: string;
+    providerId: string;
+    processId: string;
+    kind: ProviderProcessAuditKind;
+    safeMessage: string;
+    redactedDetails?: Record<string, unknown>;
+}
+export interface ProviderProcessAudit {
+    record(kind: ProviderProcessAuditKind, safeMessage: string, redactedDetails?: Record<string, unknown>): void;
+    events(): ProviderProcessAuditEvent[];
+}
+/** Honest per-capability enforcement classification. Surfaced in diagnostics + docs. */
+export interface ProviderProcessEnforcement {
+    shell: "enforced";
+    env: "enforced";
+    cwd: "enforced";
+    timeout: "enforced";
+    processTreeKill: "best_effort";
+    stdoutStderrCapture: "enforced";
+    redaction: "best_effort";
+    network: "not_enforced";
+    filesystem: "not_enforced_against_hostile_process";
+    terminal: "not_applicable";
+}
+export interface ProviderProcessDiagnostics {
+    providerId: string;
+    processId: string;
+    platform: NodeJS.Platform;
+    supervisorMode: "minimal";
+    status: ProviderProcessStatus;
+    /** Env KEY names only — never values. */
+    envKeys: string[];
+    /** Redacted workspace marker — never a raw personal path. */
+    workspace: string;
+    stdoutBytes: number;
+    stderrBytes: number;
+    stdoutTruncated: boolean;
+    stderrTruncated: boolean;
+    treeKillAttempted: boolean;
+    treeKillSucceeded?: boolean;
+    enforcement: ProviderProcessEnforcement;
+    auditCount: number;
+}
+/** The honest, fixed enforcement classification for the XACP-010 minimal supervisor. */
+export declare const MINIMAL_SUPERVISOR_ENFORCEMENT: ProviderProcessEnforcement;
+//# sourceMappingURL=providerProcessTypes.d.ts.map

package/dist/process/providerProcessTypes.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"providerProcessTypes.d.ts","sourceRoot":"","sources":["../../src/process/providerProcessTypes.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;GAeG;AAEH,4FAA4F;AAC5F,MAAM,WAAW,qBAAqB;IACpC,yFAAyF;IACzF,UAAU,EAAE,MAAM,CAAC;IACnB,iFAAiF;IACjF,UAAU,EAAE,MAAM,CAAC;IACnB,mEAAmE;IACnE,IAAI,EAAE,MAAM,EAAE,CAAC;IACf,oFAAoF;IACpF,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,oDAAoD;IACpD,GAAG,EAAE,MAAM,CAAC;IACZ,iGAAiG;IACjG,YAAY,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IACrC,kEAAkE;IAClE,SAAS,EAAE,MAAM,CAAC;IAClB,4EAA4E;IAC5E,gBAAgB,EAAE,MAAM,CAAC;IACzB,4EAA4E;IAC5E,gBAAgB,EAAE,MAAM,CAAC;IACzB,oFAAoF;IACpF,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,uEAAuE;IACvE,QAAQ,EAAE,OAAO,CAAC;IAClB,6FAA6F;IAC7F,YAAY,EAAE,SAAS,CAAC;CACzB;AAED,MAAM,MAAM,qBAAqB,GAC7B,UAAU,GACV,SAAS,GACT,WAAW,GACX,QAAQ,GACR,WAAW,GACX,WAAW,GACX,QAAQ,CAAC;AAEb,gGAAgG;AAChG,MAAM,WAAW,qBAAqB;IACpC,MAAM,EAAE,WAAW,GAAG,QAAQ,GAAG,WAAW,GAAG,WAAW,GAAG,QAAQ,CAAC;IACtE,QAAQ,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACzB,MAAM,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACvB,MAAM,EAAE,MAAM,CAAC;IACf,MAAM,EAAE,MAAM,CAAC;IACf,eAAe,EAAE,OAAO,CAAC;IACzB,eAAe,EAAE,OAAO,CAAC;IACzB,UAAU,EAAE,MAAM,CAAC;IACnB,WAAW,EAAE,yBAAyB,EAAE,CAAC;CAC1C;AAED,MAAM,WAAW,qBAAqB;IACpC,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,GAAG,CAAC,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,MAAM,EAAE,qBAAqB,CAAC;IACvC,IAAI,IAAI,OAAO,CAAC,qBAAqB,CAAC,CAAC;IACvC,MAAM,CAAC,MAAM,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IACvC,IAAI,CAAC,MAAM,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IACrC,WAAW,IAAI,0BAA0B,CAAC;CAC3C;AAED,MAAM,MAAM,wBAAwB,GAChC,4BAA4B,GAC5B,0BAA0B,GAC1B,mCAAmC,GACnC,mCAAmC,GACnC,4BAA4B,GAC5B,yBAAyB,GACzB,4BAA4B,GAC5B,4BAA4B,GAC5B,iCAAiC,GACjC,iCAAiC,GACjC,oCAAoC,GACpC,iCAAiC,GACjC,sCAAsC,CAAC;AAE3C,MAAM,WAAW,yBAAyB;IACxC,OAAO,EAAE,MAAM,CAAC;IAChB,SAAS,EAAE,MAAM,CAAC;IAClB,UAAU,EAAE,MAAM,CAAC;IACnB,SAAS,EAAE,MAAM,CAAC;IAClB,IAAI,EAAE,wBAAwB,CAAC;IAC/B,WAAW,EAAE,MAAM,CAAC;IACpB,eAAe,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;CAC3C;AAED,MAAM,WAAW,oBAAoB;IACnC,MAAM,CACJ,IAAI,EAAE,wBAAwB,EAC9B,WAAW,EAAE,MAAM,EACnB,eAAe,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GACxC,IAAI,CAAC;IACR,MAAM,IAAI,yBAAyB,EAAE,CAAC;CACvC;AAED,wFAAwF;AACxF,MAAM,WAAW,0BAA0B;IACzC,KAAK,EAAE,UAAU,CAAC;IAClB,GAAG,EAAE,UAAU,CAAC;IAChB,GAAG,EAAE,UAAU,CAAC;IAChB,OAAO,EAAE,UAAU,CAAC;IACpB,eAAe,EAAE,aAAa,CAAC;IAC/B,mBAAmB,EAAE,UAAU,CAAC;IAChC,SAAS,EAAE,aAAa,CAAC;IACzB,OAAO,EAAE,cAAc,CAAC;IACxB,UAAU,EAAE,sCAAsC,CAAC;IACnD,QAAQ,EAAE,gBAAgB,CAAC;CAC5B;AAED,MAAM,WAAW,0BAA0B;IACzC,UAAU,EAAE,MAAM,CAAC;IACnB,SAAS,EAAE,MAAM,CAAC;IAClB,QAAQ,EAAE,MAAM,CAAC,QAAQ,CAAC;IAC1B,cAAc,EAAE,SAAS,CAAC;IAC1B,MAAM,EAAE,qBAAqB,CAAC;IAC9B,yCAAyC;IACzC,OAAO,EAAE,MAAM,EAAE,CAAC;IAClB,6DAA6D;IAC7D,SAAS,EAAE,MAAM,CAAC;IAClB,WAAW,EAAE,MAAM,CAAC;IACpB,WAAW,EAAE,MAAM,CAAC;IACpB,eAAe,EAAE,OAAO,CAAC;IACzB,eAAe,EAAE,OAAO,CAAC;IACzB,iBAAiB,EAAE,OAAO,CAAC;IAC3B,iBAAiB,CAAC,EAAE,OAAO,CAAC;IAC5B,WAAW,EAAE,0BAA0B,CAAC;IACxC,UAAU,EAAE,MAAM,CAAC;CACpB;AAED,wFAAwF;AACxF,eAAO,MAAM,8BAA8B,EAAE,0BAW5C,CAAC"}

package/dist/process/providerProcessTypes.js

@@ -0,0 +1,30 @@
+/**
+ * Types for the cross-platform **minimal provider process supervisor** (XACP-010).
+ *
+ * HONEST SCOPE — read this before extending. This layer is a *minimal supervisor / process
+ * boundary*, NOT a sandbox. It enforces launch hygiene (no-shell, validated executable/args,
+ * env allowlist, isolated cwd/temp workspace, timeout/cancel, bounded+redacted output capture,
+ * best-effort process-tree cleanup, audit). It does **NOT** enforce, and must never claim to
+ * enforce:
+ *   - network containment (a launched process can open any socket) → `network: not_enforced`
+ *   - filesystem containment against a hostile process               → `filesystem: not_enforced_against_hostile_process`
+ *   - full child-process syscall containment                         → tree kill is `best_effort`
+ *
+ * It can run a provider CLI only after a higher layer has passed policy/approval and supplied a
+ * validated config. The supervisor itself does not certify any provider; tests still use harmless
+ * fixtures/fakes.
+ */
+/** The honest, fixed enforcement classification for the XACP-010 minimal supervisor. */
+export const MINIMAL_SUPERVISOR_ENFORCEMENT = {
+    shell: "enforced",
+    env: "enforced",
+    cwd: "enforced",
+    timeout: "enforced",
+    processTreeKill: "best_effort",
+    stdoutStderrCapture: "enforced",
+    redaction: "best_effort",
+    network: "not_enforced",
+    filesystem: "not_enforced_against_hostile_process",
+    terminal: "not_applicable",
+};
+//# sourceMappingURL=providerProcessTypes.js.map

package/dist/process/providerProcessTypes.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"providerProcessTypes.js","sourceRoot":"","sources":["../../src/process/providerProcessTypes.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;GAeG;AAkIH,wFAAwF;AACxF,MAAM,CAAC,MAAM,8BAA8B,GAA+B;IACxE,KAAK,EAAE,UAAU;IACjB,GAAG,EAAE,UAAU;IACf,GAAG,EAAE,UAAU;IACf,OAAO,EAAE,UAAU;IACnB,eAAe,EAAE,aAAa;IAC9B,mBAAmB,EAAE,UAAU;IAC/B,SAAS,EAAE,aAAa;IACxB,OAAO,EAAE,cAAc;IACvB,UAAU,EAAE,sCAAsC;IAClD,QAAQ,EAAE,gBAAgB;CAC3B,CAAC"}

package/dist/process/providerProcessValidation.d.ts

@@ -0,0 +1,26 @@
+/**
+ * Config validation for the minimal supervisor (XACP-010).
+ *
+ * Fail-closed: every unsafe input is REJECTED, never silently "fixed". In particular a raw
+ * command line (shell metacharacters, or an executable token that is really `cmd arg arg`) is
+ * rejected — the caller must pass a single executable token plus a separate `args` array. This
+ * is the same no-shell discipline as core's process-resolver, re-implemented here to keep
+ * `@xenosystem/acp-agent` dependency-free.
+ */
+import type { ProviderProcessConfig } from "./providerProcessTypes.js";
+export interface ValidatedProviderProcessConfig extends ProviderProcessConfig {
+    readonly __validated: true;
+}
+/**
+ * Validate a supervisor config. Returns a branded value on success; throws a
+ * `ProviderProcessError` (safe message, no secrets) on any unsafe input.
+ */
+export declare function validateProviderProcessConfig(config: ProviderProcessConfig): ValidatedProviderProcessConfig;
+export declare const VALIDATION_BOUNDS: {
+    readonly MIN_TIMEOUT_MS: 100;
+    readonly MAX_TIMEOUT_MS: number;
+    readonly MIN_LIMIT_BYTES: 1024;
+    readonly MAX_LIMIT_BYTES: number;
+    readonly MAX_STDIN_CHARS: 1000000;
+};
+//# sourceMappingURL=providerProcessValidation.d.ts.map

package/dist/process/providerProcessValidation.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"providerProcessValidation.d.ts","sourceRoot":"","sources":["../../src/process/providerProcessValidation.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAIH,OAAO,KAAK,EAAE,qBAAqB,EAAE,MAAM,2BAA2B,CAAC;AAavE,MAAM,WAAW,8BAA+B,SAAQ,qBAAqB;IAC3E,QAAQ,CAAC,WAAW,EAAE,IAAI,CAAC;CAC5B;AAWD;;;GAGG;AACH,wBAAgB,6BAA6B,CAC3C,MAAM,EAAE,qBAAqB,GAC5B,8BAA8B,CAyFhC;AAED,eAAO,MAAM,iBAAiB;;;;;;CAMpB,CAAC"}

package/dist/process/providerProcessValidation.js

@@ -0,0 +1,112 @@
+/**
+ * Config validation for the minimal supervisor (XACP-010).
+ *
+ * Fail-closed: every unsafe input is REJECTED, never silently "fixed". In particular a raw
+ * command line (shell metacharacters, or an executable token that is really `cmd arg arg`) is
+ * rejected — the caller must pass a single executable token plus a separate `args` array. This
+ * is the same no-shell discipline as core's process-resolver, re-implemented here to keep
+ * `@xenosystem/acp-agent` dependency-free.
+ */
+import { isAbsolute } from "node:path";
+import { ProviderProcessError } from "./providerProcessErrors.js";
+/** Shell metacharacters that must never appear in an executable token. */
+const SHELL_METACHARS = /[&|;<>$`\n\r(){}!*?~"']/;
+/** A safe environment variable name. */
+const ENV_KEY_RE = /^[A-Za-z_][A-Za-z0-9_]*$/;
+const MIN_TIMEOUT_MS = 100;
+const MAX_TIMEOUT_MS = 10 * 60_000; // 10 minutes
+const MIN_LIMIT_BYTES = 1_024; // 1 KiB
+const MAX_LIMIT_BYTES = 64 * 1_024 * 1_024; // 64 MiB
+const MAX_STDIN_CHARS = 1_000_000;
+function fail(code, safeMessage, providerId, redactedDetails) {
+    throw new ProviderProcessError({ code, safeMessage, providerId, redactedDetails });
+}
+/**
+ * Validate a supervisor config. Returns a branded value on success; throws a
+ * `ProviderProcessError` (safe message, no secrets) on any unsafe input.
+ */
+export function validateProviderProcessConfig(config) {
+    const pid = config?.providerId;
+    if (!config || typeof config !== "object") {
+        fail("PROCESS_CONFIG_INVALID", "config must be an object");
+    }
+    if (typeof pid !== "string" || pid.trim().length === 0) {
+        fail("PROCESS_CONFIG_INVALID", "providerId must be a non-empty string");
+    }
+    if (config.platformMode !== "minimal") {
+        fail("PROCESS_CONFIG_INVALID", "platformMode must be 'minimal' (no strong containment exists)", pid);
+    }
+    // Executable: a single token, no shell metacharacters, no embedded spaces unless it is an
+    // absolute/relative path (a real path may contain spaces; a bare `cmd arg` may not).
+    const exe = config.executable;
+    if (typeof exe !== "string" || exe.trim().length === 0) {
+        fail("PROCESS_EXECUTABLE_INVALID", "executable must be a non-empty string", pid);
+    }
+    if (SHELL_METACHARS.test(exe)) {
+        fail("PROCESS_EXECUTABLE_INVALID", "executable contains shell metacharacters (pass a single executable token)", pid);
+    }
+    const looksLikePath = exe.includes("/") || exe.includes("\\") || isAbsolute(exe);
+    if (/\s/.test(exe) && !looksLikePath) {
+        fail("PROCESS_EXECUTABLE_INVALID", "executable looks like a command line with spaces (split it into executable + args)", pid);
+    }
+    // Args: a real array of strings (no raw command string, no non-string entries).
+    if (!Array.isArray(config.args)) {
+        fail("PROCESS_ARGS_INVALID", "args must be an array of strings", pid);
+    }
+    for (const a of config.args) {
+        if (typeof a !== "string") {
+            fail("PROCESS_ARGS_INVALID", "every arg must be a string", pid);
+        }
+    }
+    if (config.stdin !== undefined) {
+        if (typeof config.stdin !== "string" || config.stdin.length > MAX_STDIN_CHARS) {
+            fail("PROCESS_CONFIG_INVALID", `stdin must be a string with at most ${MAX_STDIN_CHARS} characters`, pid);
+        }
+    }
+    // cwd: absolute.
+    if (typeof config.cwd !== "string" || !isAbsolute(config.cwd)) {
+        fail("PROCESS_CWD_INVALID", "cwd must be an absolute path", pid);
+    }
+    // env allowlist: explicit record of string→string with safe key names.
+    if (!config.envAllowlist || typeof config.envAllowlist !== "object") {
+        fail("PROCESS_ENV_INVALID", "envAllowlist must be an object", pid);
+    }
+    for (const [k, v] of Object.entries(config.envAllowlist)) {
+        if (!ENV_KEY_RE.test(k)) {
+            fail("PROCESS_ENV_INVALID", `env key is not a safe name: ${k}`, pid);
+        }
+        if (typeof v !== "string") {
+            fail("PROCESS_ENV_INVALID", `env value for ${k} must be a string`, pid);
+        }
+    }
+    // timeout + limits: bounded.
+    if (!Number.isFinite(config.timeoutMs) || config.timeoutMs < MIN_TIMEOUT_MS || config.timeoutMs > MAX_TIMEOUT_MS) {
+        fail("PROCESS_TIMEOUT_INVALID", `timeoutMs must be between ${MIN_TIMEOUT_MS} and ${MAX_TIMEOUT_MS}`, pid);
+    }
+    for (const [name, val] of [
+        ["stdoutLimitBytes", config.stdoutLimitBytes],
+        ["stderrLimitBytes", config.stderrLimitBytes],
+    ]) {
+        if (!Number.isInteger(val) || val < MIN_LIMIT_BYTES || val > MAX_LIMIT_BYTES) {
+            fail("PROCESS_LIMIT_INVALID", `${name} must be an integer between ${MIN_LIMIT_BYTES} and ${MAX_LIMIT_BYTES}`, pid);
+        }
+    }
+    // workspaceRoot (optional): absolute when provided.
+    if (config.workspaceRoot !== undefined) {
+        if (typeof config.workspaceRoot !== "string" || !isAbsolute(config.workspaceRoot)) {
+            fail("PROCESS_WORKSPACE_INVALID", "workspaceRoot must be an absolute path when provided", pid);
+        }
+    }
+    if (typeof config.killTree !== "boolean") {
+        fail("PROCESS_CONFIG_INVALID", "killTree must be a boolean", pid);
+    }
+    return { ...config, __validated: true };
+}
+export const VALIDATION_BOUNDS = {
+    MIN_TIMEOUT_MS,
+    MAX_TIMEOUT_MS,
+    MIN_LIMIT_BYTES,
+    MAX_LIMIT_BYTES,
+    MAX_STDIN_CHARS,
+};
+//# sourceMappingURL=providerProcessValidation.js.map

package/dist/process/providerProcessValidation.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"providerProcessValidation.js","sourceRoot":"","sources":["../../src/process/providerProcessValidation.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAEH,OAAO,EAAE,UAAU,EAAE,MAAM,WAAW,CAAC;AACvC,OAAO,EAAE,oBAAoB,EAAE,MAAM,4BAA4B,CAAC;AAGlE,0EAA0E;AAC1E,MAAM,eAAe,GAAG,yBAAyB,CAAC;AAClD,wCAAwC;AACxC,MAAM,UAAU,GAAG,0BAA0B,CAAC;AAE9C,MAAM,cAAc,GAAG,GAAG,CAAC;AAC3B,MAAM,cAAc,GAAG,EAAE,GAAG,MAAM,CAAC,CAAC,aAAa;AACjD,MAAM,eAAe,GAAG,KAAK,CAAC,CAAC,QAAQ;AACvC,MAAM,eAAe,GAAG,EAAE,GAAG,KAAK,GAAG,KAAK,CAAC,CAAC,SAAS;AACrD,MAAM,eAAe,GAAG,SAAS,CAAC;AAMlC,SAAS,IAAI,CACX,IAAmE,EACnE,WAAmB,EACnB,UAAmB,EACnB,eAAyC;IAEzC,MAAM,IAAI,oBAAoB,CAAC,EAAE,IAAI,EAAE,WAAW,EAAE,UAAU,EAAE,eAAe,EAAE,CAAC,CAAC;AACrF,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,6BAA6B,CAC3C,MAA6B;IAE7B,MAAM,GAAG,GAAG,MAAM,EAAE,UAAU,CAAC;IAC/B,IAAI,CAAC,MAAM,IAAI,OAAO,MAAM,KAAK,QAAQ,EAAE,CAAC;QAC1C,IAAI,CAAC,wBAAwB,EAAE,0BAA0B,CAAC,CAAC;IAC7D,CAAC;IACD,IAAI,OAAO,GAAG,KAAK,QAAQ,IAAI,GAAG,CAAC,IAAI,EAAE,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACvD,IAAI,CAAC,wBAAwB,EAAE,uCAAuC,CAAC,CAAC;IAC1E,CAAC;IACD,IAAI,MAAM,CAAC,YAAY,KAAK,SAAS,EAAE,CAAC;QACtC,IAAI,CAAC,wBAAwB,EAAE,+DAA+D,EAAE,GAAG,CAAC,CAAC;IACvG,CAAC;IAED,0FAA0F;IAC1F,qFAAqF;IACrF,MAAM,GAAG,GAAG,MAAM,CAAC,UAAU,CAAC;IAC9B,IAAI,OAAO,GAAG,KAAK,QAAQ,IAAI,GAAG,CAAC,IAAI,EAAE,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACvD,IAAI,CAAC,4BAA4B,EAAE,uCAAuC,EAAE,GAAG,CAAC,CAAC;IACnF,CAAC;IACD,IAAI,eAAe,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC;QAC9B,IAAI,CAAC,4BAA4B,EAAE,2EAA2E,EAAE,GAAG,CAAC,CAAC;IACvH,CAAC;IACD,MAAM,aAAa,GAAG,GAAG,CAAC,QAAQ,CAAC,GAAG,CAAC,IAAI,GAAG,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,UAAU,CAAC,GAAG,CAAC,CAAC;IACjF,IAAI,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,aAAa,EAAE,CAAC;QACrC,IAAI,CACF,4BAA4B,EAC5B,oFAAoF,EACpF,GAAG,CACJ,CAAC;IACJ,CAAC;IAED,gFAAgF;IAChF,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,IAAI,CAAC,EAAE,CAAC;QAChC,IAAI,CAAC,sBAAsB,EAAE,kCAAkC,EAAE,GAAG,CAAC,CAAC;IACxE,CAAC;IACD,KAAK,MAAM,CAAC,IAAI,MAAM,CAAC,IAAI,EAAE,CAAC;QAC5B,IAAI,OAAO,CAAC,KAAK,QAAQ,EAAE,CAAC;YAC1B,IAAI,CAAC,sBAAsB,EAAE,4BAA4B,EAAE,GAAG,CAAC,CAAC;QAClE,CAAC;IACH,CAAC;IAED,IAAI,MAAM,CAAC,KAAK,KAAK,SAAS,EAAE,CAAC;QAC/B,IAAI,OAAO,MAAM,CAAC,KAAK,KAAK,QAAQ,IAAI,MAAM,CAAC,KAAK,CAAC,MAAM,GAAG,eAAe,EAAE,CAAC;YAC9E,IAAI,CAAC,wBAAwB,EAAE,uCAAuC,eAAe,aAAa,EAAE,GAAG,CAAC,CAAC;QAC3G,CAAC;IACH,CAAC;IAED,iBAAiB;IACjB,IAAI,OAAO,MAAM,CAAC,GAAG,KAAK,QAAQ,IAAI,CAAC,UAAU,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC;QAC9D,IAAI,CAAC,qBAAqB,EAAE,8BAA8B,EAAE,GAAG,CAAC,CAAC;IACnE,CAAC;IAED,uEAAuE;IACvE,IAAI,CAAC,MAAM,CAAC,YAAY,IAAI,OAAO,MAAM,CAAC,YAAY,KAAK,QAAQ,EAAE,CAAC;QACpE,IAAI,CAAC,qBAAqB,EAAE,gCAAgC,EAAE,GAAG,CAAC,CAAC;IACrE,CAAC;IACD,KAAK,MAAM,CAAC,CAAC,EAAE,CAAC,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,YAAY,CAAC,EAAE,CAAC;QACzD,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC;YACxB,IAAI,CAAC,qBAAqB,EAAE,+BAA+B,CAAC,EAAE,EAAE,GAAG,CAAC,CAAC;QACvE,CAAC;QACD,IAAI,OAAO,CAAC,KAAK,QAAQ,EAAE,CAAC;YAC1B,IAAI,CAAC,qBAAqB,EAAE,iBAAiB,CAAC,mBAAmB,EAAE,GAAG,CAAC,CAAC;QAC1E,CAAC;IACH,CAAC;IAED,6BAA6B;IAC7B,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,SAAS,CAAC,IAAI,MAAM,CAAC,SAAS,GAAG,cAAc,IAAI,MAAM,CAAC,SAAS,GAAG,cAAc,EAAE,CAAC;QACjH,IAAI,CAAC,yBAAyB,EAAE,6BAA6B,cAAc,QAAQ,cAAc,EAAE,EAAE,GAAG,CAAC,CAAC;IAC5G,CAAC;IACD,KAAK,MAAM,CAAC,IAAI,EAAE,GAAG,CAAC,IAAI;QACxB,CAAC,kBAAkB,EAAE,MAAM,CAAC,gBAAgB,CAAC;QAC7C,CAAC,kBAAkB,EAAE,MAAM,CAAC,gBAAgB,CAAC;KACrC,EAAE,CAAC;QACX,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,GAAG,CAAC,IAAI,GAAG,GAAG,eAAe,IAAI,GAAG,GAAG,eAAe,EAAE,CAAC;YAC7E,IAAI,CAAC,uBAAuB,EAAE,GAAG,IAAI,+BAA+B,eAAe,QAAQ,eAAe,EAAE,EAAE,GAAG,CAAC,CAAC;QACrH,CAAC;IACH,CAAC;IAED,oDAAoD;IACpD,IAAI,MAAM,CAAC,aAAa,KAAK,SAAS,EAAE,CAAC;QACvC,IAAI,OAAO,MAAM,CAAC,aAAa,KAAK,QAAQ,IAAI,CAAC,UAAU,CAAC,MAAM,CAAC,aAAa,CAAC,EAAE,CAAC;YAClF,IAAI,CAAC,2BAA2B,EAAE,sDAAsD,EAAE,GAAG,CAAC,CAAC;QACjG,CAAC;IACH,CAAC;IAED,IAAI,OAAO,MAAM,CAAC,QAAQ,KAAK,SAAS,EAAE,CAAC;QACzC,IAAI,CAAC,wBAAwB,EAAE,4BAA4B,EAAE,GAAG,CAAC,CAAC;IACpE,CAAC;IAED,OAAO,EAAE,GAAG,MAAM,EAAE,WAAW,EAAE,IAAI,EAAE,CAAC;AAC1C,CAAC;AAED,MAAM,CAAC,MAAM,iBAAiB,GAAG;IAC/B,cAAc;IACd,cAAc;IACd,eAAe;IACf,eAAe;IACf,eAAe;CACP,CAAC"}