@xenosystem/agent-interface-host 0.1.3

package/dist/workspace/WorkspaceHostService.d.ts

@@ -0,0 +1,126 @@
+import { type CommandExecutionPort } from '../isolation/CommandExecution.js';
+import type { AgentHostEventType, AgentHostClientIdentity, AgentWorkspaceAccessContext, AgentWorkspaceCommandRunRequest, AgentWorkspaceCommandRunResult, AgentWorkspaceDirectoryListRequest, AgentWorkspaceDirectoryListResult, AgentWorkspaceFileReadRequest, AgentWorkspaceFileReadResult, AgentWorkspaceFileWriteRequest, AgentWorkspaceFileWriteResult, AgentWorkspaceGrantRequest, AgentWorkspaceGrantResult, AgentWorkspacePtyInputRequest, AgentWorkspacePtyResizeRequest, AgentWorkspacePtySnapshotRequest, AgentWorkspacePtySnapshotResult, AgentWorkspacePtyStartRequest, AgentWorkspacePtyStartResult, AgentWorkspaceTerminalControlRequest, AgentWorkspaceTerminalControlResult, AgentWorkspaceTerminalStartRequest, AgentWorkspaceTerminalStartResult } from '@xenosystem/agent-interface-contract';
+type WorkspaceEventSink = (type: AgentHostEventType, payload: Record<string, unknown>) => void;
+interface PersistedApplicationGrant {
+    path: string;
+    source: 'user-picker' | 'legacy-migration' | 'host-managed';
+    createdAt: number;
+}
+export interface WorkspaceHostServiceOptions {
+    rootDirectory: string;
+    managedConversationRoot?: string;
+    /**
+     * Where this service's commands execute — ADE §5.3.
+     *
+     * 🔴 Optional, and its ABSENCE is what preserves today's behaviour exactly:
+     * with no environment every command runs through the module's local executor,
+     * as it always has. Supplying one is what lets a composition confine the
+     * agent, and the same object answers what containment to REPORT — so a
+     * composition cannot enable one without the other.
+     *
+     * Injected rather than imported because the previous shape — a module-level
+     * `const commandExecutor = new LocalCommandExecutor()` — gave no composition
+     * any way to swap it. That singleton was the real blocker to adopting a
+     * sandbox, not anything about the sandbox itself.
+     */
+    executionEnvironment?: RunCommandExecutionEnvironment;
+}
+/**
+ * The slice of `RunExecutionEnvironment` this service needs.
+ *
+ * Declared as a narrow structural type rather than importing the class: this
+ * file has no business knowing how a run is bound or released, only how to ask
+ * which executor serves a conversation.
+ */
+export interface RunCommandExecutionEnvironment {
+    executorFor(conversationId: string | undefined): CommandExecutionPort;
+}
+export interface WorkspacePathAuthorizationRequest extends AgentWorkspaceAccessContext {
+    path: string;
+}
+export interface WorkspacePathAuthorizationResult {
+    success: boolean;
+    path: string | null;
+    error: string | null;
+}
+export interface WorkspaceApplicationGrantRequest {
+    path: string;
+    source: PersistedApplicationGrant['source'];
+}
+export interface WorkspaceApplicationAccessRequest {
+    client: AgentHostClientIdentity;
+    appPath: string;
+    allowedApplications: string[];
+    workspaceId?: string;
+    teamId?: string;
+    agentId?: string;
+}
+export interface WorkspaceApplicationAuthorizationResult {
+    success: boolean;
+    appPath: string | null;
+    error: string | null;
+}
+/**
+ * Host-owned workspace authority, migrated from XENO Hub's workspace IPC
+ * implementation. The renderer can narrow trusted grants but cannot mint new
+ * roots; only the desktop/Hub composition calls grantDirectory after a native
+ * user picker or an audited migration.
+ */
+export declare class WorkspaceHostService {
+    private readonly grantStorePath;
+    private readonly applicationGrantStorePath;
+    private readonly managedConversationRoot;
+    private readonly terminalSessions;
+    private readonly ptySessions;
+    private readonly grants;
+    private readonly applicationGrants;
+    private eventSink;
+    private nodePtyLoadPromise;
+    private nodePtyLoadError;
+    private readonly executionEnvironment;
+    constructor(options: WorkspaceHostServiceOptions);
+    setEventSink(sink: WorkspaceEventSink): void;
+    grantDirectory(request: AgentWorkspaceGrantRequest): AgentWorkspaceGrantResult;
+    /**
+     * The directories the user has explicitly granted, canonicalised.
+     *
+     * 🔴 Read-only, and it mints nothing. The comment above `grantDirectory`
+     * states the rule this preserves: the renderer can narrow trusted grants but
+     * cannot create roots, and only the desktop/Hub composition grants one after a
+     * native dialog. Exposing the SET is not exposing the ability to add to it.
+     *
+     * It exists because a host-side feature that needs "the user's project" has
+     * exactly one honest answer: what they authorised. Anything else — the home
+     * directory, a guess from the process cwd — would read a tree nobody
+     * permitted, which is the failure the workspace authority exists to prevent.
+     */
+    grantedDirectories(): string[];
+    grantApplication(request: WorkspaceApplicationGrantRequest): WorkspaceApplicationAuthorizationResult;
+    authorizeExistingFile(request: WorkspacePathAuthorizationRequest, action: 'read' | 'execute', id?: string): WorkspacePathAuthorizationResult;
+    authorizeApplication(request: WorkspaceApplicationAccessRequest): WorkspaceApplicationAuthorizationResult;
+    listDirectory(request: AgentWorkspaceDirectoryListRequest): AgentWorkspaceDirectoryListResult;
+    readFile(request: AgentWorkspaceFileReadRequest): AgentWorkspaceFileReadResult;
+    writeFile(request: AgentWorkspaceFileWriteRequest): AgentWorkspaceFileWriteResult;
+    runCommand(request: AgentWorkspaceCommandRunRequest): Promise<AgentWorkspaceCommandRunResult>;
+    startTerminal(request: AgentWorkspaceTerminalStartRequest): AgentWorkspaceTerminalStartResult;
+    stopTerminal(request: AgentWorkspaceTerminalControlRequest): AgentWorkspaceTerminalControlResult;
+    startPty(request: AgentWorkspacePtyStartRequest): Promise<AgentWorkspacePtyStartResult>;
+    snapshotPty(request: AgentWorkspacePtySnapshotRequest): AgentWorkspacePtySnapshotResult;
+    inputPty(request: AgentWorkspacePtyInputRequest): AgentWorkspaceTerminalControlResult;
+    resizePty(request: AgentWorkspacePtyResizeRequest): AgentWorkspaceTerminalControlResult;
+    clearPty(request: AgentWorkspaceTerminalControlRequest): AgentWorkspaceTerminalControlResult;
+    stopPty(request: AgentWorkspaceTerminalControlRequest): AgentWorkspaceTerminalControlResult;
+    close(): void;
+    private authorizePath;
+    private authorizeSession;
+    private effectiveAllowedRoots;
+    private resolveManagedConversationRoot;
+    private cleanupTerminal;
+    private loadNodePty;
+    private loadGrants;
+    private loadApplicationGrants;
+    private persistGrants;
+    private persistApplicationGrants;
+}
+export {};
+//# sourceMappingURL=WorkspaceHostService.d.ts.map

package/dist/workspace/WorkspaceHostService.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"WorkspaceHostService.d.ts","sourceRoot":"","sources":["../../src/workspace/WorkspaceHostService.ts"],"names":[],"mappings":"AAEA,OAAO,EAAoB,KAAK,oBAAoB,EAAE,MAAM,kCAAkC,CAAA;AAoC9F,OAAO,KAAK,EACV,kBAAkB,EAClB,uBAAuB,EACvB,2BAA2B,EAC3B,+BAA+B,EAC/B,8BAA8B,EAE9B,kCAAkC,EAClC,iCAAiC,EACjC,6BAA6B,EAC7B,4BAA4B,EAC5B,8BAA8B,EAC9B,6BAA6B,EAC7B,0BAA0B,EAC1B,yBAAyB,EACzB,6BAA6B,EAC7B,8BAA8B,EAC9B,gCAAgC,EAChC,+BAA+B,EAC/B,6BAA6B,EAC7B,4BAA4B,EAC5B,oCAAoC,EACpC,mCAAmC,EACnC,kCAAkC,EAClC,iCAAiC,EAClC,MAAM,sCAAsC,CAAA;AAS7C,KAAK,kBAAkB,GAAG,CAAC,IAAI,EAAE,kBAAkB,EAAE,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,KAAK,IAAI,CAAA;AAc9F,UAAU,yBAAyB;IACjC,IAAI,EAAE,MAAM,CAAA;IACZ,MAAM,EAAE,aAAa,GAAG,kBAAkB,GAAG,cAAc,CAAA;IAC3D,SAAS,EAAE,MAAM,CAAA;CAClB;AA8BD,MAAM,WAAW,2BAA2B;IAC1C,aAAa,EAAE,MAAM,CAAA;IACrB,uBAAuB,CAAC,EAAE,MAAM,CAAA;IAChC;;;;;;;;;;;;;OAaG;IACH,oBAAoB,CAAC,EAAE,8BAA8B,CAAA;CACtD;AAED;;;;;;GAMG;AACH,MAAM,WAAW,8BAA8B;IAC7C,WAAW,CAAC,cAAc,EAAE,MAAM,GAAG,SAAS,GAAG,oBAAoB,CAAA;CACtE;AAED,MAAM,WAAW,iCAAkC,SAAQ,2BAA2B;IACpF,IAAI,EAAE,MAAM,CAAA;CACb;AAED,MAAM,WAAW,gCAAgC;IAC/C,OAAO,EAAE,OAAO,CAAA;IAChB,IAAI,EAAE,MAAM,GAAG,IAAI,CAAA;IACnB,KAAK,EAAE,MAAM,GAAG,IAAI,CAAA;CACrB;AAED,MAAM,WAAW,gCAAgC;IAC/C,IAAI,EAAE,MAAM,CAAA;IACZ,MAAM,EAAE,yBAAyB,CAAC,QAAQ,CAAC,CAAA;CAC5C;AAED,MAAM,WAAW,iCAAiC;IAChD,MAAM,EAAE,uBAAuB,CAAA;IAC/B,OAAO,EAAE,MAAM,CAAA;IACf,mBAAmB,EAAE,MAAM,EAAE,CAAA;IAC7B,WAAW,CAAC,EAAE,MAAM,CAAA;IACpB,MAAM,CAAC,EAAE,MAAM,CAAA;IACf,OAAO,CAAC,EAAE,MAAM,CAAA;CACjB;AAED,MAAM,WAAW,uCAAuC;IACtD,OAAO,EAAE,OAAO,CAAA;IAChB,OAAO,EAAE,MAAM,GAAG,IAAI,CAAA;IACtB,KAAK,EAAE,MAAM,GAAG,IAAI,CAAA;CACrB;AAED;;;;;GAKG;AACH,qBAAa,oBAAoB;IAC/B,OAAO,CAAC,QAAQ,CAAC,cAAc,CAAQ;IACvC,OAAO,CAAC,QAAQ,CAAC,yBAAyB,CAAQ;IAClD,OAAO,CAAC,QAAQ,CAAC,uBAAuB,CAAe;IACvD,OAAO,CAAC,QAAQ,CAAC,gBAAgB,CAAqC;IACtE,OAAO,CAAC,QAAQ,CAAC,WAAW,CAAgC;IAC5D,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAoC;IAC3D,OAAO,CAAC,QAAQ,CAAC,iBAAiB,CAA+C;IACjF,OAAO,CAAC,SAAS,CAA+B;IAChD,OAAO,CAAC,kBAAkB,CAA6C;IACvE,OAAO,CAAC,gBAAgB,CAAsB;IAC9C,OAAO,CAAC,QAAQ,CAAC,oBAAoB,CAA4C;gBAErE,OAAO,EAAE,2BAA2B;IAahD,YAAY,CAAC,IAAI,EAAE,kBAAkB,GAAG,IAAI;IAI5C,cAAc,CAAC,OAAO,EAAE,0BAA0B,GAAG,yBAAyB;IAqB9E;;;;;;;;;;;;OAYG;IACH,kBAAkB,IAAI,MAAM,EAAE;IAI9B,gBAAgB,CAAC,OAAO,EAAE,gCAAgC,GAAG,uCAAuC;IAqBpG,qBAAqB,CACnB,OAAO,EAAE,iCAAiC,EAC1C,MAAM,EAAE,MAAM,GAAG,SAAS,EAC1B,EAAE,SAA6B,GAC9B,gCAAgC;IAenC,oBAAoB,CAAC,OAAO,EAAE,iCAAiC,GAAG,uCAAuC;IAmCzG,aAAa,CAAC,OAAO,EAAE,kCAAkC,GAAG,iCAAiC;IAwC7F,QAAQ,CAAC,OAAO,EAAE,6BAA6B,GAAG,4BAA4B;IAyB9E,SAAS,CAAC,OAAO,EAAE,8BAA8B,GAAG,6BAA6B;IAwB3E,UAAU,CAAC,OAAO,EAAE,+BAA+B,GAAG,OAAO,CAAC,8BAA8B,CAAC;IAgEnG,aAAa,CAAC,OAAO,EAAE,kCAAkC,GAAG,iCAAiC;IA6E7F,YAAY,CAAC,OAAO,EAAE,oCAAoC,GAAG,mCAAmC;IAQ1F,QAAQ,CAAC,OAAO,EAAE,6BAA6B,GAAG,OAAO,CAAC,4BAA4B,CAAC;IAyD7F,WAAW,CAAC,OAAO,EAAE,gCAAgC,GAAG,+BAA+B;IAUvF,QAAQ,CAAC,OAAO,EAAE,6BAA6B,GAAG,mCAAmC;IAQrF,SAAS,CAAC,OAAO,EAAE,8BAA8B,GAAG,mCAAmC;IAWvF,QAAQ,CAAC,OAAO,EAAE,oCAAoC,GAAG,mCAAmC;IAQ5F,OAAO,CAAC,OAAO,EAAE,oCAAoC,GAAG,mCAAmC;IAS3F,KAAK,IAAI,IAAI;IAYb,OAAO,CAAC,aAAa;IAoCrB,OAAO,CAAC,gBAAgB;IASxB,OAAO,CAAC,qBAAqB;IAW7B,OAAO,CAAC,8BAA8B;IAgBtC,OAAO,CAAC,eAAe;YAST,WAAW;IAkBzB,OAAO,CAAC,UAAU;IAuBlB,OAAO,CAAC,qBAAqB;IAuB7B,OAAO,CAAC,aAAa;IAcrB,OAAO,CAAC,wBAAwB;CASjC"}