@yagni-app/code 1.0.6 → 1.0.7

package/dist/extension/sandbox/session.d.ts

@@ -0,0 +1,85 @@
+/**
+ * Sandbox session wiring: owns the per-session YagniSandboxManager
+ * and hooks it into pi — bash tool re-registration with the sandbox
+ * spawnHook, user_bash (! commands) routing, session lifecycle, and the
+ * network ask flow (interactive prompt in TUI/RPC, fail-closed in
+ * print/headless).
+ *
+ * Registration model: the sandbox re-registers the bash tool ONLY when
+ * sandbox.enabled is true in the loaded settings — default-off sessions keep
+ * pi's stock bash byte-identical (a duplicate tool name is a hard 400 on
+ * some providers). /sandbox (M5) toggles by rewriting settings and asking
+ * for a session restart, the same way Claude persists the toggle.
+ */
+import { type ExtensionAPI, type ExtensionContext, type ToolDefinition } from "@earendil-works/pi-coding-agent";
+import { type SandboxSettings } from "./config.js";
+import { YagniSandboxManager } from "./manager.js";
+import type { PermissionRule } from "../permissionRules/loadConfig.js";
+/**
+ * Build the sandbox bash composition: given ANY stock bash definition (pi's
+ * own or condensedTools'), return the sandbox-aware version — schema gains
+ * dangerouslyDisableSandbox, execute wraps via the manager when the decision
+ * says so, and EPERM output is annotated. Identity when the sandbox is
+ * disabled at load time (default-off sessions stay byte-identical).
+ *
+ * Exported so condensedTools consumes it through its wrapBash seam — the
+ * M4 e2e lesson: condensed registers bash LAST, so a competing registration
+ * here would be overwritten and the sandbox would silently never reach
+ * model-driven tool calls.
+ */
+export declare function makeBashComposition(manager: YagniSandboxManager, settings: () => SandboxSettings, cwd: string): (def: ToolDefinition) => ToolDefinition;
+export interface SandboxSessionHandle {
+    manager: YagniSandboxManager;
+    settings: () => SandboxSettings;
+    /** Latest permission rules snapshot (updated by the gate on load). */
+    setRules: (rules: readonly PermissionRule[]) => void;
+    /** Session-scoped network grants (memory-only, agent-invisible). */
+    grantDomainSession: (domain: string) => void;
+    sessionDomains: () => readonly string[];
+    /** The bash-definition composition (identity when disabled). condensedTools
+     * consumes this via its wrapBash seam; index.ts passes it through. */
+    composeBash: (def: ToolDefinition) => ToolDefinition;
+    /**
+     * Register the sandbox-wrapped bash directly on pi (the fallback path when
+     * condensedTools is NOT active: eval mode, classic rows, desktop). No-op
+     * when the sandbox is disabled. index.ts calls this in the else-branch so
+     * the two bash-defining sites never double-register.
+     */
+    registerOwnBash: () => void;
+}
+export interface RegisterSandboxOptions {
+    cwd: string;
+    env?: NodeJS.ProcessEnv;
+    userHome?: string;
+    stateHomeOverride?: string | null;
+    projectRoot?: string | null;
+    rgPath?: string;
+    /** Injectable manager factory (tests simulate init failure / disabled
+     * platforms without touching the real srt singleton). */
+    makeManager?: (opts: {
+        cwd: string;
+        env?: NodeJS.ProcessEnv;
+        userHome?: string;
+        stateHomeOverride?: string | null;
+        projectRoot?: string | null;
+        rgPath?: string;
+    }) => Pick<YagniSandboxManager, "initialized" | "initialize" | "reset" | "refreshConfig" | "setAskHandler" | "wrapWithSandbox" | "cleanupAfterCommand" | "annotateStderrWithSandboxFailures"> & YagniSandboxManager;
+    /** Whether interactive prompts are possible (TUI/RPC). */
+    hasUI: (ctx: ExtensionContext) => boolean;
+    /**
+     * When true, the sandbox registers its OWN wrapped bash tool at extension
+     * load (the fallback path — index.ts decides and calls registerOwnBash
+     * explicitly when condensedTools is inactive). Default false: the common
+     * path composes through condensedTools' wrapBash seam instead, because
+     * condensed registers last and would otherwise overwrite a competing
+     * registration (the duplicate-name 400 + silent-unwrap lesson from M4).
+     */
+    registerOwnBash?: boolean;
+}
+/**
+ * Register the sandbox surfaces on the ExtensionAPI. Returns the session
+ * handle (manager + accessors) or null when the platform can never run the
+ * sandbox (no-op registration, stock bash stays).
+ */
+export declare function registerSandbox(pi: ExtensionAPI, opts: RegisterSandboxOptions): SandboxSessionHandle | null;
+//# sourceMappingURL=session.d.ts.map