apex-code 0.0.6 → 0.1.0

package/dist/core/sandbox/terminal-size.js

@@ -1,126 +0,0 @@
-import { closeSync, constants, openSync, readFileSync, watch, writeFileSync } from "node:fs";
-/**
- * Carries the host terminal's size across the sandbox boundary.
- *
- * The sandboxed child runs under `bwrap --new-session`, so it has no
- * controlling terminal: the kernel never sends it SIGWINCH, and the window size
- * its stdout reports is frozen at whatever it was when the sandbox was created.
- * Everything downstream reads `process.stdout.columns`, so a resize left the TUI
- * rendering to a width the terminal no longer had.
- *
- * The supervisor owns a real TTY and does get the resize event. It publishes the
- * new size to a file inside the workspace, which is already bind-mounted into
- * the sandbox; the child watches that file and republishes it as a `resize` on
- * its own stdout. Signals are deliberately not used as the transport: bwrap sits
- * between the two processes as PID 1 and does not forward SIGWINCH.
- */
-/** Env var naming the file both sides agree on. */
-export const TERMINAL_SIZE_PATH_VARIABLE = "APEX_TERMINAL_SIZE_PATH";
-/**
- * Write without following a symlink at the final path component.
- *
- * Shared with `terminal-handoff.ts`, which took its transport from this file and inherits
- * the same exposure: every file here is written by the supervisor, on the host, at a path
- * the contained side may be able to create an entry at. A link planted there would
- * redirect a host write the child could not otherwise make -- the audit demonstrated this
- * against the workspace state directory. `O_NOFOLLOW` refuses instead.
- *
- * Node exposes no `openat`, so this guards the final component only; the containing
- * directory must be one the child cannot write for the guarantee to be complete.
- */
-export function writeWithoutFollowingLinks(path, contents) {
-    const descriptor = openSync(path, constants.O_WRONLY | constants.O_CREAT | constants.O_TRUNC | constants.O_NOFOLLOW, 0o600);
-    try {
-        writeFileSync(descriptor, contents);
-    }
-    finally {
-        closeSync(descriptor);
-    }
-}
-function formatSize(size) {
-    return `${size.columns} ${size.rows}\n`;
-}
-export function parseTerminalSize(contents) {
-    const [columns, rows] = contents.trim().split(/\s+/).map(Number);
-    if (!Number.isInteger(columns) || !Number.isInteger(rows))
-        return undefined;
-    if (columns <= 0 || rows <= 0)
-        return undefined;
-    return { columns, rows };
-}
-/**
- * Host side. Publishes the current size, then republishes on every resize.
- * Returns a stop function; the caller must run it on every launch exit path.
- */
-export function publishTerminalSize(path, stdout = process.stdout) {
-    if (!stdout.isTTY)
-        return () => { };
-    const write = () => {
-        const columns = stdout.columns;
-        const rows = stdout.rows;
-        if (!Number.isInteger(columns) || !Number.isInteger(rows))
-            return;
-        try {
-            writeWithoutFollowingLinks(path, formatSize({ columns, rows }));
-        }
-        catch {
-            // A size we cannot publish is not worth failing a launch over.
-        }
-    };
-    write();
-    stdout.on("resize", write);
-    return () => {
-        stdout.off("resize", write);
-    };
-}
-/**
- * Child side. Applies the published size to `process.stdout` and keeps applying
- * it as the file changes.
- *
- * `columns` and `rows` are redefined as getters because Node recomputes them
- * from the sandbox's own console on SIGWINCH, which is exactly the stale value
- * this exists to override. The setters swallow those writes rather than throwing.
- */
-export function applyTerminalSize(path, stdout = process.stdout) {
-    let current;
-    const refresh = () => {
-        let size;
-        try {
-            size = parseTerminalSize(readFileSync(path, "utf8"));
-        }
-        catch {
-            return;
-        }
-        if (!size)
-            return;
-        if (current && current.columns === size.columns && current.rows === size.rows)
-            return;
-        current = size;
-        Object.defineProperty(stdout, "columns", {
-            configurable: true,
-            get: () => current?.columns,
-            set: () => { },
-        });
-        Object.defineProperty(stdout, "rows", {
-            configurable: true,
-            get: () => current?.rows,
-            set: () => { },
-        });
-        stdout.emit("resize");
-    };
-    refresh();
-    let watcher;
-    try {
-        watcher = watch(path, refresh);
-    }
-    catch {
-        // Without a watcher the initial size still applies; only live resize is lost.
-    }
-    return {
-        refresh,
-        stop: () => {
-            watcher?.close();
-        },
-    };
-}
-//# sourceMappingURL=terminal-size.js.map

package/dist/core/sandbox/terminal-size.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"terminal-size.js","sourceRoot":"","sources":["../../../src/core/sandbox/terminal-size.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,SAAS,EAAE,SAAS,EAAkB,QAAQ,EAAE,YAAY,EAAE,KAAK,EAAE,aAAa,EAAE,MAAM,SAAS,CAAC;AAE7G;;;;;;;;;;;;;;GAcG;AAEH,mDAAmD;AACnD,MAAM,CAAC,MAAM,2BAA2B,GAAG,yBAAyB,CAAC;AAErE;;;;;;;;;;;GAWG;AACH,MAAM,UAAU,0BAA0B,CAAC,IAAY,EAAE,QAAgB,EAAQ;IAChF,MAAM,UAAU,GAAG,QAAQ,CAC1B,IAAI,EACJ,SAAS,CAAC,QAAQ,GAAG,SAAS,CAAC,OAAO,GAAG,SAAS,CAAC,OAAO,GAAG,SAAS,CAAC,UAAU,EACjF,KAAK,CACL,CAAC;IACF,IAAI,CAAC;QACJ,aAAa,CAAC,UAAU,EAAE,QAAQ,CAAC,CAAC;IACrC,CAAC;YAAS,CAAC;QACV,SAAS,CAAC,UAAU,CAAC,CAAC;IACvB,CAAC;AAAA,CACD;AAOD,SAAS,UAAU,CAAC,IAAkB,EAAU;IAC/C,OAAO,GAAG,IAAI,CAAC,OAAO,IAAI,IAAI,CAAC,IAAI,IAAI,CAAC;AAAA,CACxC;AAED,MAAM,UAAU,iBAAiB,CAAC,QAAgB,EAA4B;IAC7E,MAAM,CAAC,OAAO,EAAE,IAAI,CAAC,GAAG,QAAQ,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;IACjE,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,OAAO,CAAC,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,IAAI,CAAC;QAAE,OAAO,SAAS,CAAC;IAC5E,IAAI,OAAO,IAAI,CAAC,IAAI,IAAI,IAAI,CAAC;QAAE,OAAO,SAAS,CAAC;IAChD,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC;AAAA,CACzB;AAED;;;GAGG;AACH,MAAM,UAAU,mBAAmB,CAAC,IAAY,EAAE,MAAM,GAAuB,OAAO,CAAC,MAAM,EAAc;IAC1G,IAAI,CAAC,MAAM,CAAC,KAAK;QAAE,OAAO,GAAG,EAAE,CAAC,EAAC,CAAC,CAAC;IAEnC,MAAM,KAAK,GAAG,GAAG,EAAE,CAAC;QACnB,MAAM,OAAO,GAAG,MAAM,CAAC,OAAO,CAAC;QAC/B,MAAM,IAAI,GAAG,MAAM,CAAC,IAAI,CAAC;QACzB,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,OAAO,CAAC,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,IAAI,CAAC;YAAE,OAAO;QAClE,IAAI,CAAC;YACJ,0BAA0B,CAAC,IAAI,EAAE,UAAU,CAAC,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC;QACjE,CAAC;QAAC,MAAM,CAAC;YACR,+DAA+D;QAChE,CAAC;IAAA,CACD,CAAC;IAEF,KAAK,EAAE,CAAC;IACR,MAAM,CAAC,EAAE,CAAC,QAAQ,EAAE,KAAK,CAAC,CAAC;IAC3B,OAAO,GAAG,EAAE,CAAC;QACZ,MAAM,CAAC,GAAG,CAAC,QAAQ,EAAE,KAAK,CAAC,CAAC;IAAA,CAC5B,CAAC;AAAA,CACF;AAED;;;;;;;GAOG;AACH,MAAM,UAAU,iBAAiB,CAChC,IAAY,EACZ,MAAM,GAAuB,OAAO,CAAC,MAAM,EACC;IAC5C,IAAI,OAAiC,CAAC;IAEtC,MAAM,OAAO,GAAG,GAAG,EAAE,CAAC;QACrB,IAAI,IAA8B,CAAC;QACnC,IAAI,CAAC;YACJ,IAAI,GAAG,iBAAiB,CAAC,YAAY,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC,CAAC;QACtD,CAAC;QAAC,MAAM,CAAC;YACR,OAAO;QACR,CAAC;QACD,IAAI,CAAC,IAAI;YAAE,OAAO;QAClB,IAAI,OAAO,IAAI,OAAO,CAAC,OAAO,KAAK,IAAI,CAAC,OAAO,IAAI,OAAO,CAAC,IAAI,KAAK,IAAI,CAAC,IAAI;YAAE,OAAO;QACtF,OAAO,GAAG,IAAI,CAAC;QACf,MAAM,CAAC,cAAc,CAAC,MAAM,EAAE,SAAS,EAAE;YACxC,YAAY,EAAE,IAAI;YAClB,GAAG,EAAE,GAAG,EAAE,CAAC,OAAO,EAAE,OAAO;YAC3B,GAAG,EAAE,GAAG,EAAE,CAAC,EAAC,CAAC;SACb,CAAC,CAAC;QACH,MAAM,CAAC,cAAc,CAAC,MAAM,EAAE,MAAM,EAAE;YACrC,YAAY,EAAE,IAAI;YAClB,GAAG,EAAE,GAAG,EAAE,CAAC,OAAO,EAAE,IAAI;YACxB,GAAG,EAAE,GAAG,EAAE,CAAC,EAAC,CAAC;SACb,CAAC,CAAC;QACH,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;IAAA,CACtB,CAAC;IAEF,OAAO,EAAE,CAAC;IAEV,IAAI,OAA8B,CAAC;IACnC,IAAI,CAAC;QACJ,OAAO,GAAG,KAAK,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;IAChC,CAAC;IAAC,MAAM,CAAC;QACR,8EAA8E;IAC/E,CAAC;IAED,OAAO;QACN,OAAO;QACP,IAAI,EAAE,GAAG,EAAE,CAAC;YACX,OAAO,EAAE,KAAK,EAAE,CAAC;QAAA,CACjB;KACD,CAAC;AAAA,CACF","sourcesContent":["import { closeSync, constants, type FSWatcher, openSync, readFileSync, watch, writeFileSync } from \"node:fs\";\n\n/**\n * Carries the host terminal's size across the sandbox boundary.\n *\n * The sandboxed child runs under `bwrap --new-session`, so it has no\n * controlling terminal: the kernel never sends it SIGWINCH, and the window size\n * its stdout reports is frozen at whatever it was when the sandbox was created.\n * Everything downstream reads `process.stdout.columns`, so a resize left the TUI\n * rendering to a width the terminal no longer had.\n *\n * The supervisor owns a real TTY and does get the resize event. It publishes the\n * new size to a file inside the workspace, which is already bind-mounted into\n * the sandbox; the child watches that file and republishes it as a `resize` on\n * its own stdout. Signals are deliberately not used as the transport: bwrap sits\n * between the two processes as PID 1 and does not forward SIGWINCH.\n */\n\n/** Env var naming the file both sides agree on. */\nexport const TERMINAL_SIZE_PATH_VARIABLE = \"APEX_TERMINAL_SIZE_PATH\";\n\n/**\n * Write without following a symlink at the final path component.\n *\n * Shared with `terminal-handoff.ts`, which took its transport from this file and inherits\n * the same exposure: every file here is written by the supervisor, on the host, at a path\n * the contained side may be able to create an entry at. A link planted there would\n * redirect a host write the child could not otherwise make -- the audit demonstrated this\n * against the workspace state directory. `O_NOFOLLOW` refuses instead.\n *\n * Node exposes no `openat`, so this guards the final component only; the containing\n * directory must be one the child cannot write for the guarantee to be complete.\n */\nexport function writeWithoutFollowingLinks(path: string, contents: string): void {\n\tconst descriptor = openSync(\n\t\tpath,\n\t\tconstants.O_WRONLY | constants.O_CREAT | constants.O_TRUNC | constants.O_NOFOLLOW,\n\t\t0o600,\n\t);\n\ttry {\n\t\twriteFileSync(descriptor, contents);\n\t} finally {\n\t\tcloseSync(descriptor);\n\t}\n}\n\nexport interface TerminalSize {\n\tcolumns: number;\n\trows: number;\n}\n\nfunction formatSize(size: TerminalSize): string {\n\treturn `${size.columns} ${size.rows}\\n`;\n}\n\nexport function parseTerminalSize(contents: string): TerminalSize | undefined {\n\tconst [columns, rows] = contents.trim().split(/\\s+/).map(Number);\n\tif (!Number.isInteger(columns) || !Number.isInteger(rows)) return undefined;\n\tif (columns <= 0 || rows <= 0) return undefined;\n\treturn { columns, rows };\n}\n\n/**\n * Host side. Publishes the current size, then republishes on every resize.\n * Returns a stop function; the caller must run it on every launch exit path.\n */\nexport function publishTerminalSize(path: string, stdout: NodeJS.WriteStream = process.stdout): () => void {\n\tif (!stdout.isTTY) return () => {};\n\n\tconst write = () => {\n\t\tconst columns = stdout.columns;\n\t\tconst rows = stdout.rows;\n\t\tif (!Number.isInteger(columns) || !Number.isInteger(rows)) return;\n\t\ttry {\n\t\t\twriteWithoutFollowingLinks(path, formatSize({ columns, rows }));\n\t\t} catch {\n\t\t\t// A size we cannot publish is not worth failing a launch over.\n\t\t}\n\t};\n\n\twrite();\n\tstdout.on(\"resize\", write);\n\treturn () => {\n\t\tstdout.off(\"resize\", write);\n\t};\n}\n\n/**\n * Child side. Applies the published size to `process.stdout` and keeps applying\n * it as the file changes.\n *\n * `columns` and `rows` are redefined as getters because Node recomputes them\n * from the sandbox's own console on SIGWINCH, which is exactly the stale value\n * this exists to override. The setters swallow those writes rather than throwing.\n */\nexport function applyTerminalSize(\n\tpath: string,\n\tstdout: NodeJS.WriteStream = process.stdout,\n): { stop: () => void; refresh: () => void } {\n\tlet current: TerminalSize | undefined;\n\n\tconst refresh = () => {\n\t\tlet size: TerminalSize | undefined;\n\t\ttry {\n\t\t\tsize = parseTerminalSize(readFileSync(path, \"utf8\"));\n\t\t} catch {\n\t\t\treturn;\n\t\t}\n\t\tif (!size) return;\n\t\tif (current && current.columns === size.columns && current.rows === size.rows) return;\n\t\tcurrent = size;\n\t\tObject.defineProperty(stdout, \"columns\", {\n\t\t\tconfigurable: true,\n\t\t\tget: () => current?.columns,\n\t\t\tset: () => {},\n\t\t});\n\t\tObject.defineProperty(stdout, \"rows\", {\n\t\t\tconfigurable: true,\n\t\t\tget: () => current?.rows,\n\t\t\tset: () => {},\n\t\t});\n\t\tstdout.emit(\"resize\");\n\t};\n\n\trefresh();\n\n\tlet watcher: FSWatcher | undefined;\n\ttry {\n\t\twatcher = watch(path, refresh);\n\t} catch {\n\t\t// Without a watcher the initial size still applies; only live resize is lost.\n\t}\n\n\treturn {\n\t\trefresh,\n\t\tstop: () => {\n\t\t\twatcher?.close();\n\t\t},\n\t};\n}\n"]}

package/dist/core/sandbox/violations.d.ts

@@ -1,23 +0,0 @@
-export type SandboxViolationKind = "filesystem" | "network" | "unknown";
-export interface SandboxViolation {
-    readonly kind: SandboxViolationKind;
-    readonly command: string;
-    readonly detail: string;
-    readonly timestamp: Date;
-}
-/**
- * Apex-owned bounded violation tail. It intentionally does not depend on a platform
- * runtime's monitor, because Linux does not provide that monitor consistently.
- */
-export declare class SandboxViolationStore {
-    private readonly capacity;
-    private readonly violations;
-    private _totalCount;
-    constructor(options?: {
-        capacity?: number;
-    });
-    get totalCount(): number;
-    add(violation: SandboxViolation): void;
-    list(): readonly SandboxViolation[];
-}
-//# sourceMappingURL=violations.d.ts.map

package/dist/core/sandbox/violations.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"violations.d.ts","sourceRoot":"","sources":["../../../src/core/sandbox/violations.ts"],"names":[],"mappings":"AAAA,MAAM,MAAM,oBAAoB,GAAG,YAAY,GAAG,SAAS,GAAG,SAAS,CAAC;AAExE,MAAM,WAAW,gBAAgB;IAChC,QAAQ,CAAC,IAAI,EAAE,oBAAoB,CAAC;IACpC,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,SAAS,EAAE,IAAI,CAAC;CACzB;AAED;;;GAGG;AACH,qBAAa,qBAAqB;IACjC,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAAS;IAClC,OAAO,CAAC,QAAQ,CAAC,UAAU,CAA0B;IACrD,OAAO,CAAC,WAAW,CAAK;IAExB,YAAY,OAAO,CAAC,EAAE;QAAE,QAAQ,CAAC,EAAE,MAAM,CAAA;KAAE,EAM1C;IAED,IAAI,UAAU,IAAI,MAAM,CAEvB;IAED,GAAG,CAAC,SAAS,EAAE,gBAAgB,GAAG,IAAI,CAMrC;IAED,IAAI,IAAI,SAAS,gBAAgB,EAAE,CAElC;CACD","sourcesContent":["export type SandboxViolationKind = \"filesystem\" | \"network\" | \"unknown\";\n\nexport interface SandboxViolation {\n\treadonly kind: SandboxViolationKind;\n\treadonly command: string;\n\treadonly detail: string;\n\treadonly timestamp: Date;\n}\n\n/**\n * Apex-owned bounded violation tail. It intentionally does not depend on a platform\n * runtime's monitor, because Linux does not provide that monitor consistently.\n */\nexport class SandboxViolationStore {\n\tprivate readonly capacity: number;\n\tprivate readonly violations: SandboxViolation[] = [];\n\tprivate _totalCount = 0;\n\n\tconstructor(options?: { capacity?: number }) {\n\t\tconst capacity = options?.capacity ?? 100;\n\t\tif (!Number.isSafeInteger(capacity) || capacity < 1) {\n\t\t\tthrow new Error(\"Sandbox violation capacity must be a positive safe integer.\");\n\t\t}\n\t\tthis.capacity = capacity;\n\t}\n\n\tget totalCount(): number {\n\t\treturn this._totalCount;\n\t}\n\n\tadd(violation: SandboxViolation): void {\n\t\tthis._totalCount += 1;\n\t\tthis.violations.push(violation);\n\t\tif (this.violations.length > this.capacity) {\n\t\t\tthis.violations.splice(0, this.violations.length - this.capacity);\n\t\t}\n\t}\n\n\tlist(): readonly SandboxViolation[] {\n\t\treturn [...this.violations];\n\t}\n}\n"]}

package/dist/core/sandbox/violations.js

@@ -1,30 +0,0 @@
-/**
- * Apex-owned bounded violation tail. It intentionally does not depend on a platform
- * runtime's monitor, because Linux does not provide that monitor consistently.
- */
-export class SandboxViolationStore {
-    capacity;
-    violations = [];
-    _totalCount = 0;
-    constructor(options) {
-        const capacity = options?.capacity ?? 100;
-        if (!Number.isSafeInteger(capacity) || capacity < 1) {
-            throw new Error("Sandbox violation capacity must be a positive safe integer.");
-        }
-        this.capacity = capacity;
-    }
-    get totalCount() {
-        return this._totalCount;
-    }
-    add(violation) {
-        this._totalCount += 1;
-        this.violations.push(violation);
-        if (this.violations.length > this.capacity) {
-            this.violations.splice(0, this.violations.length - this.capacity);
-        }
-    }
-    list() {
-        return [...this.violations];
-    }
-}
-//# sourceMappingURL=violations.js.map

package/dist/core/sandbox/violations.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"violations.js","sourceRoot":"","sources":["../../../src/core/sandbox/violations.ts"],"names":[],"mappings":"AASA;;;GAGG;AACH,MAAM,OAAO,qBAAqB;IAChB,QAAQ,CAAS;IACjB,UAAU,GAAuB,EAAE,CAAC;IAC7C,WAAW,GAAG,CAAC,CAAC;IAExB,YAAY,OAA+B,EAAE;QAC5C,MAAM,QAAQ,GAAG,OAAO,EAAE,QAAQ,IAAI,GAAG,CAAC;QAC1C,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,QAAQ,CAAC,IAAI,QAAQ,GAAG,CAAC,EAAE,CAAC;YACrD,MAAM,IAAI,KAAK,CAAC,6DAA6D,CAAC,CAAC;QAChF,CAAC;QACD,IAAI,CAAC,QAAQ,GAAG,QAAQ,CAAC;IAAA,CACzB;IAED,IAAI,UAAU,GAAW;QACxB,OAAO,IAAI,CAAC,WAAW,CAAC;IAAA,CACxB;IAED,GAAG,CAAC,SAA2B,EAAQ;QACtC,IAAI,CAAC,WAAW,IAAI,CAAC,CAAC;QACtB,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;QAChC,IAAI,IAAI,CAAC,UAAU,CAAC,MAAM,GAAG,IAAI,CAAC,QAAQ,EAAE,CAAC;YAC5C,IAAI,CAAC,UAAU,CAAC,MAAM,CAAC,CAAC,EAAE,IAAI,CAAC,UAAU,CAAC,MAAM,GAAG,IAAI,CAAC,QAAQ,CAAC,CAAC;QACnE,CAAC;IAAA,CACD;IAED,IAAI,GAAgC;QACnC,OAAO,CAAC,GAAG,IAAI,CAAC,UAAU,CAAC,CAAC;IAAA,CAC5B;CACD","sourcesContent":["export type SandboxViolationKind = \"filesystem\" | \"network\" | \"unknown\";\n\nexport interface SandboxViolation {\n\treadonly kind: SandboxViolationKind;\n\treadonly command: string;\n\treadonly detail: string;\n\treadonly timestamp: Date;\n}\n\n/**\n * Apex-owned bounded violation tail. It intentionally does not depend on a platform\n * runtime's monitor, because Linux does not provide that monitor consistently.\n */\nexport class SandboxViolationStore {\n\tprivate readonly capacity: number;\n\tprivate readonly violations: SandboxViolation[] = [];\n\tprivate _totalCount = 0;\n\n\tconstructor(options?: { capacity?: number }) {\n\t\tconst capacity = options?.capacity ?? 100;\n\t\tif (!Number.isSafeInteger(capacity) || capacity < 1) {\n\t\t\tthrow new Error(\"Sandbox violation capacity must be a positive safe integer.\");\n\t\t}\n\t\tthis.capacity = capacity;\n\t}\n\n\tget totalCount(): number {\n\t\treturn this._totalCount;\n\t}\n\n\tadd(violation: SandboxViolation): void {\n\t\tthis._totalCount += 1;\n\t\tthis.violations.push(violation);\n\t\tif (this.violations.length > this.capacity) {\n\t\t\tthis.violations.splice(0, this.violations.length - this.capacity);\n\t\t}\n\t}\n\n\tlist(): readonly SandboxViolation[] {\n\t\treturn [...this.violations];\n\t}\n}\n"]}