atabey 0.0.22 → 0.0.25

package/dist/shared/src/policy-gate.js

@@ -0,0 +1,148 @@
+/**
+ * PolicyGate — single decision point for mutating / sensitive operations.
+ *
+ * Phase 0 foundation for enterprise hard-gate security.
+ * Every MCP mutating tool should call evaluateToolCall() before side effects.
+ *
+ * Decision is pure (no I/O) except optional hooks; MCP layer may enrich with
+ * project-specific RBAC before/after this gate.
+ */
+/** Tools that mutate disk, process state, or external systems. */
+export const MUTATING_TOOLS = new Set([
+    "write_file",
+    "replace_text",
+    "patch_file",
+    "batch_surgical_edit",
+    "run_shell_command",
+    "compress_files",
+    "decompress_files",
+    "delete_knowledge",
+    "update_project_memory",
+    "store_knowledge",
+    "update_contract_hash",
+]);
+/** Path-like arg keys commonly used by tools. */
+const PATH_KEYS = ["path", "file", "filePath", "target", "output", "source", "archive"];
+/** Relative path segments that must never be written by agents by default. */
+const PROTECTED_PATH_PATTERNS = [
+    /(^|\/)\.env(\.|$)/i,
+    /(^|\/)\.env\.[^/]+$/i,
+    /(^|\/)\.ssh(\/|$)/i,
+    /(^|\/)\.gnupg(\/|$)/i,
+    /(^|\/)id_rsa$/i,
+    /(^|\/)id_ed25519$/i,
+    /(^|\/)credentials\.json$/i,
+    /(^|\/)\.aws\/credentials$/i,
+    /(^|\/)\.npmrc$/i,
+    /(^|\/)\.netrc$/i,
+];
+function allow(code = "ALLOW", reason = "Allowed") {
+    return { effect: "allow", code, reason };
+}
+function deny(code, reason) {
+    return { effect: "deny", code, reason };
+}
+function collectPaths(args) {
+    const paths = [];
+    for (const key of PATH_KEYS) {
+        const v = args[key];
+        if (typeof v === "string" && v.trim())
+            paths.push(v.trim());
+    }
+    // batch_surgical_edit
+    if (Array.isArray(args.edits)) {
+        for (const edit of args.edits) {
+            if (edit && typeof edit === "object" && typeof edit.path === "string") {
+                paths.push(edit.path.trim());
+            }
+        }
+    }
+    return paths;
+}
+/**
+ * Normalize agent id to @name form.
+ */
+export function normalizeAgentId(agent) {
+    const a = (agent || "mcp-client").trim();
+    if (!a)
+        return "@mcp-client";
+    return a.startsWith("@") ? a : `@${a}`;
+}
+/**
+ * Evaluate a tool call against baseline hard rules (path safety, recon, shell meta).
+ * Does NOT replace full RBAC matrix — call permissions layer separately or wrap here later.
+ */
+export function evaluateToolCall(input) {
+    const tool = input.tool;
+    const agent = normalizeAgentId(input.agent);
+    const tier = input.tier;
+    const args = input.args || {};
+    if (!tool) {
+        return deny("DENY_UNKNOWN_TOOL", "Missing tool name");
+    }
+    const isMutating = MUTATING_TOOLS.has(tool);
+    // Path safety for any tool that carries paths (read or write)
+    const paths = collectPaths(args);
+    for (const p of paths) {
+        if (!p) {
+            return deny("DENY_EMPTY_PATH", "Empty path argument is not allowed");
+        }
+        // Null bytes / obvious traversal
+        if (p.includes("\0")) {
+            return deny("DENY_PATH_TRAVERSAL", "Path contains illegal null byte");
+        }
+        // Windows + POSIX traversal
+        if (p.includes("..")) {
+            // Allow only if not used as parent segment — simple hard deny for Phase 0
+            const segments = p.replace(/\\/g, "/").split("/");
+            if (segments.some((s) => s === "..")) {
+                return deny("DENY_PATH_TRAVERSAL", `Path traversal denied for "${p}". Paths must stay inside the project root.`);
+            }
+        }
+        // Absolute paths that look like host escapes (MCP should still safePath; belt-and-suspenders)
+        if (p.startsWith("/") || /^[A-Za-z]:[\\/]/.test(p)) {
+            // Absolute can be OK if still under project after safePath — flag high-risk patterns only
+            if (p.startsWith("/etc") ||
+                p.startsWith("/usr") ||
+                p.startsWith("/bin") ||
+                p.startsWith("/sbin") ||
+                p.includes("/.ssh") ||
+                p.startsWith("/System")) {
+                return deny("DENY_ABSOLUTE_ESCAPE", `Absolute system path denied: "${p}"`);
+            }
+        }
+        if (isMutating) {
+            const normalized = p.replace(/\\/g, "/");
+            for (const re of PROTECTED_PATH_PATTERNS) {
+                if (re.test(normalized)) {
+                    return deny("DENY_PROTECTED_PATH", `Write/mutate denied for protected path "${p}". Secrets and credential files are blocked by PolicyGate.`);
+                }
+            }
+        }
+    }
+    // Recon agents: no mutating tools (matrix may later grant exceptions — Phase 0 hard deny)
+    if (isMutating && tier === "recon") {
+        return deny("DENY_RECON_MUTATION", `Agent ${agent} (tier: recon) cannot invoke mutating tool "${tool}".`);
+    }
+    // Shell metacharacters (defense in depth; shell tool also checks)
+    if (tool === "run_shell_command") {
+        const command = String(args.command ?? "");
+        if (/[;&|><$`\n\r]/.test(command)) {
+            return deny("DENY_SHELL_METACHAR", "Shell metacharacters are forbidden to prevent command injection.");
+        }
+    }
+    return allow();
+}
+/**
+ * True when decision is allow.
+ */
+export function isAllowed(decision) {
+    return decision.effect === "allow";
+}
+/**
+ * Format decision for MCP error payloads.
+ */
+export function formatPolicyDenial(decision) {
+    return `[POLICY_GATE] ${decision.code}: ${decision.reason}`;
+}
+//# sourceMappingURL=policy-gate.js.map

package/dist/shared/src/policy-gate.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"policy-gate.js","sourceRoot":"","sources":["../../../../shared/src/policy-gate.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AA4BH,kEAAkE;AAClE,MAAM,CAAC,MAAM,cAAc,GAAG,IAAI,GAAG,CAAC;IAClC,YAAY;IACZ,cAAc;IACd,YAAY;IACZ,qBAAqB;IACrB,mBAAmB;IACnB,gBAAgB;IAChB,kBAAkB;IAClB,kBAAkB;IAClB,uBAAuB;IACvB,iBAAiB;IACjB,sBAAsB;CACzB,CAAC,CAAC;AAEH,iDAAiD;AACjD,MAAM,SAAS,GAAG,CAAC,MAAM,EAAE,MAAM,EAAE,UAAU,EAAE,QAAQ,EAAE,QAAQ,EAAE,QAAQ,EAAE,SAAS,CAAU,CAAC;AAEjG,8EAA8E;AAC9E,MAAM,uBAAuB,GAAa;IACtC,oBAAoB;IACpB,sBAAsB;IACtB,oBAAoB;IACpB,sBAAsB;IACtB,gBAAgB;IAChB,oBAAoB;IACpB,2BAA2B;IAC3B,4BAA4B;IAC5B,iBAAiB;IACjB,iBAAiB;CACpB,CAAC;AAEF,SAAS,KAAK,CAAC,OAAmB,OAAO,EAAE,MAAM,GAAG,SAAS;IACzD,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC;AAC7C,CAAC;AAED,SAAS,IAAI,CAAC,IAAgB,EAAE,MAAc;IAC1C,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC;AAC5C,CAAC;AAED,SAAS,YAAY,CAAC,IAA6B;IAC/C,MAAM,KAAK,GAAa,EAAE,CAAC;IAC3B,KAAK,MAAM,GAAG,IAAI,SAAS,EAAE,CAAC;QAC1B,MAAM,CAAC,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC;QACpB,IAAI,OAAO,CAAC,KAAK,QAAQ,IAAI,CAAC,CAAC,IAAI,EAAE;YAAE,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC;IAChE,CAAC;IACD,sBAAsB;IACtB,IAAI,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC;QAC5B,KAAK,MAAM,IAAI,IAAI,IAAI,CAAC,KAAK,EAAE,CAAC;YAC5B,IAAI,IAAI,IAAI,OAAO,IAAI,KAAK,QAAQ,IAAI,OAAQ,IAA0B,CAAC,IAAI,KAAK,QAAQ,EAAE,CAAC;gBAC3F,KAAK,CAAC,IAAI,CAAE,IAAyB,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC,CAAC;YACvD,CAAC;QACL,CAAC;IACL,CAAC;IACD,OAAO,KAAK,CAAC;AACjB,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,gBAAgB,CAAC,KAAa;IAC1C,MAAM,CAAC,GAAG,CAAC,KAAK,IAAI,YAAY,CAAC,CAAC,IAAI,EAAE,CAAC;IACzC,IAAI,CAAC,CAAC;QAAE,OAAO,aAAa,CAAC;IAC7B,OAAO,CAAC,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC;AAC3C,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,gBAAgB,CAAC,KAA0B;IACvD,MAAM,IAAI,GAAG,KAAK,CAAC,IAAI,CAAC;IACxB,MAAM,KAAK,GAAG,gBAAgB,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;IAC5C,MAAM,IAAI,GAAG,KAAK,CAAC,IAAI,CAAC;IACxB,MAAM,IAAI,GAAG,KAAK,CAAC,IAAI,IAAI,EAAE,CAAC;IAE9B,IAAI,CAAC,IAAI,EAAE,CAAC;QACR,OAAO,IAAI,CAAC,mBAAmB,EAAE,mBAAmB,CAAC,CAAC;IAC1D,CAAC;IAED,MAAM,UAAU,GAAG,cAAc,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;IAE5C,8DAA8D;IAC9D,MAAM,KAAK,GAAG,YAAY,CAAC,IAAI,CAAC,CAAC;IACjC,KAAK,MAAM,CAAC,IAAI,KAAK,EAAE,CAAC;QACpB,IAAI,CAAC,CAAC,EAAE,CAAC;YACL,OAAO,IAAI,CAAC,iBAAiB,EAAE,oCAAoC,CAAC,CAAC;QACzE,CAAC;QACD,iCAAiC;QACjC,IAAI,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAC;YACnB,OAAO,IAAI,CAAC,qBAAqB,EAAE,iCAAiC,CAAC,CAAC;QAC1E,CAAC;QACD,4BAA4B;QAC5B,IAAI,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAC;YACnB,0EAA0E;YAC1E,MAAM,QAAQ,GAAG,CAAC,CAAC,OAAO,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;YAClD,IAAI,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,KAAK,IAAI,CAAC,EAAE,CAAC;gBACnC,OAAO,IAAI,CACP,qBAAqB,EACrB,8BAA8B,CAAC,6CAA6C,CAC/E,CAAC;YACN,CAAC;QACL,CAAC;QACD,8FAA8F;QAC9F,IAAI,CAAC,CAAC,UAAU,CAAC,GAAG,CAAC,IAAI,iBAAiB,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC;YACjD,0FAA0F;YAC1F,IACI,CAAC,CAAC,UAAU,CAAC,MAAM,CAAC;gBACpB,CAAC,CAAC,UAAU,CAAC,MAAM,CAAC;gBACpB,CAAC,CAAC,UAAU,CAAC,MAAM,CAAC;gBACpB,CAAC,CAAC,UAAU,CAAC,OAAO,CAAC;gBACrB,CAAC,CAAC,QAAQ,CAAC,OAAO,CAAC;gBACnB,CAAC,CAAC,UAAU,CAAC,SAAS,CAAC,EACzB,CAAC;gBACC,OAAO,IAAI,CACP,sBAAsB,EACtB,iCAAiC,CAAC,GAAG,CACxC,CAAC;YACN,CAAC;QACL,CAAC;QAED,IAAI,UAAU,EAAE,CAAC;YACb,MAAM,UAAU,GAAG,CAAC,CAAC,OAAO,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC;YACzC,KAAK,MAAM,EAAE,IAAI,uBAAuB,EAAE,CAAC;gBACvC,IAAI,EAAE,CAAC,IAAI,CAAC,UAAU,CAAC,EAAE,CAAC;oBACtB,OAAO,IAAI,CACP,qBAAqB,EACrB,2CAA2C,CAAC,4DAA4D,CAC3G,CAAC;gBACN,CAAC;YACL,CAAC;QACL,CAAC;IACL,CAAC;IAED,0FAA0F;IAC1F,IAAI,UAAU,IAAI,IAAI,KAAK,OAAO,EAAE,CAAC;QACjC,OAAO,IAAI,CACP,qBAAqB,EACrB,SAAS,KAAK,+CAA+C,IAAI,IAAI,CACxE,CAAC;IACN,CAAC;IAED,kEAAkE;IAClE,IAAI,IAAI,KAAK,mBAAmB,EAAE,CAAC;QAC/B,MAAM,OAAO,GAAG,MAAM,CAAC,IAAI,CAAC,OAAO,IAAI,EAAE,CAAC,CAAC;QAC3C,IAAI,eAAe,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC;YAChC,OAAO,IAAI,CACP,qBAAqB,EACrB,kEAAkE,CACrE,CAAC;QACN,CAAC;IACL,CAAC;IAED,OAAO,KAAK,EAAE,CAAC;AACnB,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,SAAS,CAAC,QAAwB;IAC9C,OAAO,QAAQ,CAAC,MAAM,KAAK,OAAO,CAAC;AACvC,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,kBAAkB,CAAC,QAAwB;IACvD,OAAO,iBAAiB,QAAQ,CAAC,IAAI,KAAK,QAAQ,CAAC,MAAM,EAAE,CAAC;AAChE,CAAC"}

package/dist/shared/src/resilience.d.ts

@@ -0,0 +1,84 @@
+/**
+ * Polly-style resilience primitives — no external deps.
+ *
+ * - withRetry: exponential backoff + jitter for transient failures
+ * - CircuitBreaker: closed → open → half-open state machine
+ * - withResilience: compose retry + circuit breaker
+ *
+ * Typical use: LLM provider rate limits, timeouts, 5xx, network blips.
+ */
+export type CircuitState = "closed" | "open" | "half-open";
+export interface RetryOptions {
+    /** Max attempts including the first try. Default: 3 */
+    maxAttempts?: number;
+    /** Initial delay in ms. Default: 100 */
+    baseDelayMs?: number;
+    /** Cap on delay in ms. Default: 10_000 */
+    maxDelayMs?: number;
+    /** Exponential factor. Default: 2 */
+    factor?: number;
+    /** Add random jitter [0, delay). Default: true */
+    jitter?: boolean;
+    /** Return true to retry this error. Default: retry all */
+    retryIf?: (error: unknown, attempt: number) => boolean;
+    /** Optional hook before each sleep */
+    onRetry?: (error: unknown, attempt: number, delayMs: number) => void;
+    /** Optional abort signal */
+    signal?: AbortSignal;
+}
+export interface CircuitBreakerOptions {
+    /** Failures in closed state before opening. Default: 5 */
+    failureThreshold?: number;
+    /** Successes in half-open before closing. Default: 2 */
+    successThreshold?: number;
+    /** Time to wait in open before half-open probe. Default: 30_000 */
+    openMs?: number;
+    /** Optional name for error messages */
+    name?: string;
+}
+export declare class CircuitOpenError extends Error {
+    readonly circuit: string;
+    readonly retryAfterMs: number;
+    constructor(circuit: string, retryAfterMs: number);
+}
+export declare class CircuitBreaker {
+    private state;
+    private failures;
+    private successes;
+    private openedAt;
+    private readonly failureThreshold;
+    private readonly successThreshold;
+    private readonly openMs;
+    private readonly name;
+    constructor(options?: CircuitBreakerOptions);
+    getState(): CircuitState;
+    getStats(): {
+        state: CircuitState;
+        failures: number;
+        successes: number;
+        name: string;
+    };
+    /** Manual reset (e.g. after operator intervention). */
+    reset(): void;
+    exec<T>(fn: () => Promise<T>): Promise<T>;
+    private maybeTransitionToHalfOpen;
+    private onSuccess;
+    private onFailure;
+    private trip;
+}
+export declare function computeBackoffDelay(attempt: number, options?: Pick<RetryOptions, "baseDelayMs" | "maxDelayMs" | "factor" | "jitter">): number;
+export declare function withRetry<T>(fn: (attempt: number) => Promise<T>, options?: RetryOptions): Promise<T>;
+export interface ResilienceOptions {
+    retry?: RetryOptions;
+    circuitBreaker?: CircuitBreaker;
+    /** If true, CircuitOpenError is not retried (default true). */
+    skipRetryOnOpenCircuit?: boolean;
+}
+/**
+ * Execute `fn` through optional circuit breaker + retry with exponential backoff.
+ */
+export declare function withResilience<T>(fn: (attempt: number) => Promise<T>, options?: ResilienceOptions): Promise<T>;
+/** Heuristic: retry rate limits, timeouts, and common transient network errors. */
+export declare function isTransientError(error: unknown): boolean;
+export declare function getCircuitBreaker(name: string, options?: CircuitBreakerOptions): CircuitBreaker;
+export declare function resetAllCircuitBreakers(): void;

package/dist/shared/src/resilience.js

@@ -0,0 +1,217 @@
+/**
+ * Polly-style resilience primitives — no external deps.
+ *
+ * - withRetry: exponential backoff + jitter for transient failures
+ * - CircuitBreaker: closed → open → half-open state machine
+ * - withResilience: compose retry + circuit breaker
+ *
+ * Typical use: LLM provider rate limits, timeouts, 5xx, network blips.
+ */
+export class CircuitOpenError extends Error {
+    circuit;
+    retryAfterMs;
+    constructor(circuit, retryAfterMs) {
+        super(`[CircuitBreaker:${circuit}] Circuit is OPEN — rejecting call. Retry after ~${retryAfterMs}ms`);
+        this.name = "CircuitOpenError";
+        this.circuit = circuit;
+        this.retryAfterMs = retryAfterMs;
+    }
+}
+export class CircuitBreaker {
+    state = "closed";
+    failures = 0;
+    successes = 0;
+    openedAt = 0;
+    failureThreshold;
+    successThreshold;
+    openMs;
+    name;
+    constructor(options = {}) {
+        this.failureThreshold = options.failureThreshold ?? 5;
+        this.successThreshold = options.successThreshold ?? 2;
+        this.openMs = options.openMs ?? 30_000;
+        this.name = options.name ?? "default";
+    }
+    getState() {
+        this.maybeTransitionToHalfOpen();
+        return this.state;
+    }
+    getStats() {
+        return {
+            state: this.getState(),
+            failures: this.failures,
+            successes: this.successes,
+            name: this.name,
+        };
+    }
+    /** Manual reset (e.g. after operator intervention). */
+    reset() {
+        this.state = "closed";
+        this.failures = 0;
+        this.successes = 0;
+        this.openedAt = 0;
+    }
+    async exec(fn) {
+        this.maybeTransitionToHalfOpen();
+        if (this.state === "open") {
+            const retryAfterMs = Math.max(0, this.openMs - (Date.now() - this.openedAt));
+            throw new CircuitOpenError(this.name, retryAfterMs);
+        }
+        try {
+            const result = await fn();
+            this.onSuccess();
+            return result;
+        }
+        catch (err) {
+            this.onFailure();
+            throw err;
+        }
+    }
+    maybeTransitionToHalfOpen() {
+        if (this.state === "open" && Date.now() - this.openedAt >= this.openMs) {
+            this.state = "half-open";
+            this.successes = 0;
+        }
+    }
+    onSuccess() {
+        if (this.state === "half-open") {
+            this.successes++;
+            if (this.successes >= this.successThreshold) {
+                this.state = "closed";
+                this.failures = 0;
+                this.successes = 0;
+            }
+            return;
+        }
+        // closed: decay failure count on success
+        this.failures = 0;
+    }
+    onFailure() {
+        this.failures++;
+        this.successes = 0;
+        if (this.state === "half-open") {
+            this.trip();
+            return;
+        }
+        if (this.failures >= this.failureThreshold) {
+            this.trip();
+        }
+    }
+    trip() {
+        this.state = "open";
+        this.openedAt = Date.now();
+    }
+}
+export function computeBackoffDelay(attempt, options = {}) {
+    const base = options.baseDelayMs ?? 100;
+    const max = options.maxDelayMs ?? 10_000;
+    const factor = options.factor ?? 2;
+    const jitter = options.jitter !== false;
+    // attempt is 1-based for first retry after failure → attempt 1 => base * factor^0
+    const exp = Math.max(0, attempt - 1);
+    let delay = Math.min(max, base * Math.pow(factor, exp));
+    if (jitter) {
+        delay = Math.floor(Math.random() * delay);
+    }
+    return delay;
+}
+export async function withRetry(fn, options = {}) {
+    const maxAttempts = Math.max(1, options.maxAttempts ?? 3);
+    const retryIf = options.retryIf ?? (() => true);
+    let lastError;
+    for (let attempt = 1; attempt <= maxAttempts; attempt++) {
+        if (options.signal?.aborted) {
+            throw options.signal.reason ?? new Error("Aborted");
+        }
+        try {
+            return await fn(attempt);
+        }
+        catch (err) {
+            lastError = err;
+            const isLast = attempt >= maxAttempts;
+            if (isLast || !retryIf(err, attempt)) {
+                throw err;
+            }
+            const delay = computeBackoffDelay(attempt, options);
+            options.onRetry?.(err, attempt, delay);
+            await sleep(delay, options.signal);
+        }
+    }
+    throw lastError;
+}
+/**
+ * Execute `fn` through optional circuit breaker + retry with exponential backoff.
+ */
+export async function withResilience(fn, options = {}) {
+    const breaker = options.circuitBreaker;
+    const skipOpen = options.skipRetryOnOpenCircuit !== false;
+    const retryOpts = {
+        ...options.retry,
+        retryIf: (err, attempt) => {
+            if (skipOpen && err instanceof CircuitOpenError)
+                return false;
+            return options.retry?.retryIf ? options.retry.retryIf(err, attempt) : true;
+        },
+    };
+    return withRetry(async (attempt) => {
+        if (breaker) {
+            return breaker.exec(() => fn(attempt));
+        }
+        return fn(attempt);
+    }, retryOpts);
+}
+/** Heuristic: retry rate limits, timeouts, and common transient network errors. */
+export function isTransientError(error) {
+    if (error instanceof CircuitOpenError)
+        return false;
+    if (!error)
+        return false;
+    const msg = error instanceof Error ? error.message : String(error);
+    const lower = msg.toLowerCase();
+    const code = error.code;
+    const status = error.status;
+    if (status === 429 || status === 502 || status === 503 || status === 504)
+        return true;
+    if (code === "ETIMEDOUT" || code === "ECONNRESET" || code === "EAI_AGAIN" || code === "ENOTFOUND") {
+        return true;
+    }
+    if (lower.includes("rate limit") ||
+        lower.includes("too many requests") ||
+        lower.includes("timeout") ||
+        lower.includes("temporar") ||
+        lower.includes("econnreset") ||
+        lower.includes("socket hang up")) {
+        return true;
+    }
+    return false;
+}
+/** Shared breakers for common services (lazy). */
+const breakers = new Map();
+export function getCircuitBreaker(name, options) {
+    let b = breakers.get(name);
+    if (!b) {
+        b = new CircuitBreaker({ name, ...options });
+        breakers.set(name, b);
+    }
+    return b;
+}
+export function resetAllCircuitBreakers() {
+    for (const b of breakers.values())
+        b.reset();
+    breakers.clear();
+}
+function sleep(ms, signal) {
+    return new Promise((resolve, reject) => {
+        if (signal?.aborted) {
+            reject(signal.reason ?? new Error("Aborted"));
+            return;
+        }
+        const timer = setTimeout(resolve, ms);
+        const onAbort = () => {
+            clearTimeout(timer);
+            reject(signal?.reason ?? new Error("Aborted"));
+        };
+        signal?.addEventListener("abort", onAbort, { once: true });
+    });
+}
+//# sourceMappingURL=resilience.js.map

package/dist/shared/src/resilience.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"resilience.js","sourceRoot":"","sources":["../../../../shared/src/resilience.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAkCH,MAAM,OAAO,gBAAiB,SAAQ,KAAK;IACvB,OAAO,CAAS;IAChB,YAAY,CAAS;IAErC,YAAY,OAAe,EAAE,YAAoB;QAC7C,KAAK,CACD,mBAAmB,OAAO,oDAAoD,YAAY,IAAI,CACjG,CAAC;QACF,IAAI,CAAC,IAAI,GAAG,kBAAkB,CAAC;QAC/B,IAAI,CAAC,OAAO,GAAG,OAAO,CAAC;QACvB,IAAI,CAAC,YAAY,GAAG,YAAY,CAAC;IACrC,CAAC;CACJ;AAED,MAAM,OAAO,cAAc;IACf,KAAK,GAAiB,QAAQ,CAAC;IAC/B,QAAQ,GAAG,CAAC,CAAC;IACb,SAAS,GAAG,CAAC,CAAC;IACd,QAAQ,GAAG,CAAC,CAAC;IACJ,gBAAgB,CAAS;IACzB,gBAAgB,CAAS;IACzB,MAAM,CAAS;IACf,IAAI,CAAS;IAE9B,YAAY,UAAiC,EAAE;QAC3C,IAAI,CAAC,gBAAgB,GAAG,OAAO,CAAC,gBAAgB,IAAI,CAAC,CAAC;QACtD,IAAI,CAAC,gBAAgB,GAAG,OAAO,CAAC,gBAAgB,IAAI,CAAC,CAAC;QACtD,IAAI,CAAC,MAAM,GAAG,OAAO,CAAC,MAAM,IAAI,MAAM,CAAC;QACvC,IAAI,CAAC,IAAI,GAAG,OAAO,CAAC,IAAI,IAAI,SAAS,CAAC;IAC1C,CAAC;IAEM,QAAQ;QACX,IAAI,CAAC,yBAAyB,EAAE,CAAC;QACjC,OAAO,IAAI,CAAC,KAAK,CAAC;IACtB,CAAC;IAEM,QAAQ;QAMX,OAAO;YACH,KAAK,EAAE,IAAI,CAAC,QAAQ,EAAE;YACtB,QAAQ,EAAE,IAAI,CAAC,QAAQ;YACvB,SAAS,EAAE,IAAI,CAAC,SAAS;YACzB,IAAI,EAAE,IAAI,CAAC,IAAI;SAClB,CAAC;IACN,CAAC;IAED,uDAAuD;IAChD,KAAK;QACR,IAAI,CAAC,KAAK,GAAG,QAAQ,CAAC;QACtB,IAAI,CAAC,QAAQ,GAAG,CAAC,CAAC;QAClB,IAAI,CAAC,SAAS,GAAG,CAAC,CAAC;QACnB,IAAI,CAAC,QAAQ,GAAG,CAAC,CAAC;IACtB,CAAC;IAEM,KAAK,CAAC,IAAI,CAAI,EAAoB;QACrC,IAAI,CAAC,yBAAyB,EAAE,CAAC;QAEjC,IAAI,IAAI,CAAC,KAAK,KAAK,MAAM,EAAE,CAAC;YACxB,MAAM,YAAY,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,CAAC,MAAM,GAAG,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC;YAC7E,MAAM,IAAI,gBAAgB,CAAC,IAAI,CAAC,IAAI,EAAE,YAAY,CAAC,CAAC;QACxD,CAAC;QAED,IAAI,CAAC;YACD,MAAM,MAAM,GAAG,MAAM,EAAE,EAAE,CAAC;YAC1B,IAAI,CAAC,SAAS,EAAE,CAAC;YACjB,OAAO,MAAM,CAAC;QAClB,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACX,IAAI,CAAC,SAAS,EAAE,CAAC;YACjB,MAAM,GAAG,CAAC;QACd,CAAC;IACL,CAAC;IAEO,yBAAyB;QAC7B,IAAI,IAAI,CAAC,KAAK,KAAK,MAAM,IAAI,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,QAAQ,IAAI,IAAI,CAAC,MAAM,EAAE,CAAC;YACrE,IAAI,CAAC,KAAK,GAAG,WAAW,CAAC;YACzB,IAAI,CAAC,SAAS,GAAG,CAAC,CAAC;QACvB,CAAC;IACL,CAAC;IAEO,SAAS;QACb,IAAI,IAAI,CAAC,KAAK,KAAK,WAAW,EAAE,CAAC;YAC7B,IAAI,CAAC,SAAS,EAAE,CAAC;YACjB,IAAI,IAAI,CAAC,SAAS,IAAI,IAAI,CAAC,gBAAgB,EAAE,CAAC;gBAC1C,IAAI,CAAC,KAAK,GAAG,QAAQ,CAAC;gBACtB,IAAI,CAAC,QAAQ,GAAG,CAAC,CAAC;gBAClB,IAAI,CAAC,SAAS,GAAG,CAAC,CAAC;YACvB,CAAC;YACD,OAAO;QACX,CAAC;QACD,yCAAyC;QACzC,IAAI,CAAC,QAAQ,GAAG,CAAC,CAAC;IACtB,CAAC;IAEO,SAAS;QACb,IAAI,CAAC,QAAQ,EAAE,CAAC;QAChB,IAAI,CAAC,SAAS,GAAG,CAAC,CAAC;QACnB,IAAI,IAAI,CAAC,KAAK,KAAK,WAAW,EAAE,CAAC;YAC7B,IAAI,CAAC,IAAI,EAAE,CAAC;YACZ,OAAO;QACX,CAAC;QACD,IAAI,IAAI,CAAC,QAAQ,IAAI,IAAI,CAAC,gBAAgB,EAAE,CAAC;YACzC,IAAI,CAAC,IAAI,EAAE,CAAC;QAChB,CAAC;IACL,CAAC;IAEO,IAAI;QACR,IAAI,CAAC,KAAK,GAAG,MAAM,CAAC;QACpB,IAAI,CAAC,QAAQ,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;IAC/B,CAAC;CACJ;AAED,MAAM,UAAU,mBAAmB,CAC/B,OAAe,EACf,UAAkF,EAAE;IAEpF,MAAM,IAAI,GAAG,OAAO,CAAC,WAAW,IAAI,GAAG,CAAC;IACxC,MAAM,GAAG,GAAG,OAAO,CAAC,UAAU,IAAI,MAAM,CAAC;IACzC,MAAM,MAAM,GAAG,OAAO,CAAC,MAAM,IAAI,CAAC,CAAC;IACnC,MAAM,MAAM,GAAG,OAAO,CAAC,MAAM,KAAK,KAAK,CAAC;IAExC,kFAAkF;IAClF,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,OAAO,GAAG,CAAC,CAAC,CAAC;IACrC,IAAI,KAAK,GAAG,IAAI,CAAC,GAAG,CAAC,GAAG,EAAE,IAAI,GAAG,IAAI,CAAC,GAAG,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC,CAAC;IACxD,IAAI,MAAM,EAAE,CAAC;QACT,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,MAAM,EAAE,GAAG,KAAK,CAAC,CAAC;IAC9C,CAAC;IACD,OAAO,KAAK,CAAC;AACjB,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,SAAS,CAC3B,EAAmC,EACnC,UAAwB,EAAE;IAE1B,MAAM,WAAW,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,OAAO,CAAC,WAAW,IAAI,CAAC,CAAC,CAAC;IAC1D,MAAM,OAAO,GAAG,OAAO,CAAC,OAAO,IAAI,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,CAAC;IAEhD,IAAI,SAAkB,CAAC;IACvB,KAAK,IAAI,OAAO,GAAG,CAAC,EAAE,OAAO,IAAI,WAAW,EAAE,OAAO,EAAE,EAAE,CAAC;QACtD,IAAI,OAAO,CAAC,MAAM,EAAE,OAAO,EAAE,CAAC;YAC1B,MAAM,OAAO,CAAC,MAAM,CAAC,MAAM,IAAI,IAAI,KAAK,CAAC,SAAS,CAAC,CAAC;QACxD,CAAC;QACD,IAAI,CAAC;YACD,OAAO,MAAM,EAAE,CAAC,OAAO,CAAC,CAAC;QAC7B,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACX,SAAS,GAAG,GAAG,CAAC;YAChB,MAAM,MAAM,GAAG,OAAO,IAAI,WAAW,CAAC;YACtC,IAAI,MAAM,IAAI,CAAC,OAAO,CAAC,GAAG,EAAE,OAAO,CAAC,EAAE,CAAC;gBACnC,MAAM,GAAG,CAAC;YACd,CAAC;YACD,MAAM,KAAK,GAAG,mBAAmB,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;YACpD,OAAO,CAAC,OAAO,EAAE,CAAC,GAAG,EAAE,OAAO,EAAE,KAAK,CAAC,CAAC;YACvC,MAAM,KAAK,CAAC,KAAK,EAAE,OAAO,CAAC,MAAM,CAAC,CAAC;QACvC,CAAC;IACL,CAAC;IACD,MAAM,SAAS,CAAC;AACpB,CAAC;AASD;;GAEG;AACH,MAAM,CAAC,KAAK,UAAU,cAAc,CAChC,EAAmC,EACnC,UAA6B,EAAE;IAE/B,MAAM,OAAO,GAAG,OAAO,CAAC,cAAc,CAAC;IACvC,MAAM,QAAQ,GAAG,OAAO,CAAC,sBAAsB,KAAK,KAAK,CAAC;IAE1D,MAAM,SAAS,GAAiB;QAC5B,GAAG,OAAO,CAAC,KAAK;QAChB,OAAO,EAAE,CAAC,GAAG,EAAE,OAAO,EAAE,EAAE;YACtB,IAAI,QAAQ,IAAI,GAAG,YAAY,gBAAgB;gBAAE,OAAO,KAAK,CAAC;YAC9D,OAAO,OAAO,CAAC,KAAK,EAAE,OAAO,CAAC,CAAC,CAAC,OAAO,CAAC,KAAK,CAAC,OAAO,CAAC,GAAG,EAAE,OAAO,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;QAC/E,CAAC;KACJ,CAAC;IAEF,OAAO,SAAS,CAAC,KAAK,EAAE,OAAO,EAAE,EAAE;QAC/B,IAAI,OAAO,EAAE,CAAC;YACV,OAAO,OAAO,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,EAAE,CAAC,OAAO,CAAC,CAAC,CAAC;QAC3C,CAAC;QACD,OAAO,EAAE,CAAC,OAAO,CAAC,CAAC;IACvB,CAAC,EAAE,SAAS,CAAC,CAAC;AAClB,CAAC;AAED,mFAAmF;AACnF,MAAM,UAAU,gBAAgB,CAAC,KAAc;IAC3C,IAAI,KAAK,YAAY,gBAAgB;QAAE,OAAO,KAAK,CAAC;IACpD,IAAI,CAAC,KAAK;QAAE,OAAO,KAAK,CAAC;IAEzB,MAAM,GAAG,GAAG,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;IACnE,MAAM,KAAK,GAAG,GAAG,CAAC,WAAW,EAAE,CAAC;IAChC,MAAM,IAAI,GAAI,KAA2B,CAAC,IAAI,CAAC;IAC/C,MAAM,MAAM,GAAI,KAA6B,CAAC,MAAM,CAAC;IAErD,IAAI,MAAM,KAAK,GAAG,IAAI,MAAM,KAAK,GAAG,IAAI,MAAM,KAAK,GAAG,IAAI,MAAM,KAAK,GAAG;QAAE,OAAO,IAAI,CAAC;IACtF,IAAI,IAAI,KAAK,WAAW,IAAI,IAAI,KAAK,YAAY,IAAI,IAAI,KAAK,WAAW,IAAI,IAAI,KAAK,WAAW,EAAE,CAAC;QAChG,OAAO,IAAI,CAAC;IAChB,CAAC;IACD,IACI,KAAK,CAAC,QAAQ,CAAC,YAAY,CAAC;QAC5B,KAAK,CAAC,QAAQ,CAAC,mBAAmB,CAAC;QACnC,KAAK,CAAC,QAAQ,CAAC,SAAS,CAAC;QACzB,KAAK,CAAC,QAAQ,CAAC,UAAU,CAAC;QAC1B,KAAK,CAAC,QAAQ,CAAC,YAAY,CAAC;QAC5B,KAAK,CAAC,QAAQ,CAAC,gBAAgB,CAAC,EAClC,CAAC;QACC,OAAO,IAAI,CAAC;IAChB,CAAC;IACD,OAAO,KAAK,CAAC;AACjB,CAAC;AAED,kDAAkD;AAClD,MAAM,QAAQ,GAAG,IAAI,GAAG,EAA0B,CAAC;AAEnD,MAAM,UAAU,iBAAiB,CAAC,IAAY,EAAE,OAA+B;IAC3E,IAAI,CAAC,GAAG,QAAQ,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;IAC3B,IAAI,CAAC,CAAC,EAAE,CAAC;QACL,CAAC,GAAG,IAAI,cAAc,CAAC,EAAE,IAAI,EAAE,GAAG,OAAO,EAAE,CAAC,CAAC;QAC7C,QAAQ,CAAC,GAAG,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC;IAC1B,CAAC;IACD,OAAO,CAAC,CAAC;AACb,CAAC;AAED,MAAM,UAAU,uBAAuB;IACnC,KAAK,MAAM,CAAC,IAAI,QAAQ,CAAC,MAAM,EAAE;QAAE,CAAC,CAAC,KAAK,EAAE,CAAC;IAC7C,QAAQ,CAAC,KAAK,EAAE,CAAC;AACrB,CAAC;AAED,SAAS,KAAK,CAAC,EAAU,EAAE,MAAoB;IAC3C,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;QACnC,IAAI,MAAM,EAAE,OAAO,EAAE,CAAC;YAClB,MAAM,CAAC,MAAM,CAAC,MAAM,IAAI,IAAI,KAAK,CAAC,SAAS,CAAC,CAAC,CAAC;YAC9C,OAAO;QACX,CAAC;QACD,MAAM,KAAK,GAAG,UAAU,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC;QACtC,MAAM,OAAO,GAAG,GAAG,EAAE;YACjB,YAAY,CAAC,KAAK,CAAC,CAAC;YACpB,MAAM,CAAC,MAAM,EAAE,MAAM,IAAI,IAAI,KAAK,CAAC,SAAS,CAAC,CAAC,CAAC;QACnD,CAAC,CAAC;QACF,MAAM,EAAE,gBAAgB,CAAC,OAAO,EAAE,OAAO,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC;IAC/D,CAAC,CAAC,CAAC;AACP,CAAC"}

package/dist/shared/src/sandbox-fs.d.ts

@@ -0,0 +1,28 @@
+/**
+ * Sandboxed filesystem mutations — Phase 1.2.
+ *
+ * - Always holds AtomicFileLock (try/finally).
+ * - When runtime=container: write via container stdin → /workspace/<path>
+ * - When runtime=uid|none: write on host under projectRoot (safePath caller responsibility)
+ * - ATABEY_SANDBOX_REQUIRED=true rejects writes if isolation is none
+ */
+import { type SandboxRuntimeConfig } from "./sandbox-runtime.js";
+export interface SandboxFsWriteResult {
+    absolutePath: string;
+    relativePath: string;
+    runtime: SandboxRuntimeConfig["effectiveMode"];
+    isolationLabel: string;
+    bytes: number;
+}
+/**
+ * Normalize user path to a project-relative POSIX path.
+ * Absolute paths are accepted only if they resolve inside projectRoot.
+ */
+export declare function assertSafeRelativePath(userPath: string, projectRoot?: string): string;
+/**
+ * Write file content under project root using the active sandbox runtime.
+ */
+export declare function writeFileInSandbox(projectRoot: string, userPath: string, content: string, options?: {
+    ownerId?: string;
+    timeoutMs?: number;
+}): Promise<SandboxFsWriteResult>;

package/dist/shared/src/sandbox-fs.js

@@ -0,0 +1,148 @@
+/**
+ * Sandboxed filesystem mutations — Phase 1.2.
+ *
+ * - Always holds AtomicFileLock (try/finally).
+ * - When runtime=container: write via container stdin → /workspace/<path>
+ * - When runtime=uid|none: write on host under projectRoot (safePath caller responsibility)
+ * - ATABEY_SANDBOX_REQUIRED=true rejects writes if isolation is none
+ */
+import fs from "fs";
+import path from "path";
+import { AtomicFileLock } from "./file-lock.js";
+import { resolveSandboxRuntimeConfig, runInSandbox, SandboxRequiredError, } from "./sandbox-runtime.js";
+/**
+ * Normalize user path to a project-relative POSIX path.
+ * Absolute paths are accepted only if they resolve inside projectRoot.
+ */
+export function assertSafeRelativePath(userPath, projectRoot) {
+    if (!userPath || !userPath.trim()) {
+        throw new Error("[SANDBOX_FS] Empty path is not allowed");
+    }
+    const trimmed = userPath.trim();
+    if (trimmed.includes("\0")) {
+        throw new Error("[SANDBOX_FS] Illegal null byte in path");
+    }
+    let rel = trimmed.replace(/\\/g, "/");
+    // Absolute path → must live under projectRoot
+    if (path.isAbsolute(trimmed) || rel.startsWith("/")) {
+        if (!projectRoot) {
+            throw new Error(`[SANDBOX_FS] Absolute paths require projectRoot: "${userPath}"`);
+        }
+        const root = path.resolve(projectRoot);
+        const abs = path.resolve(trimmed);
+        if (!abs.startsWith(root + path.sep) && abs !== root) {
+            throw new Error(`[SANDBOX_FS] Absolute path escapes project root: "${userPath}"`);
+        }
+        rel = path.relative(root, abs).replace(/\\/g, "/");
+        if (!rel || rel === ".") {
+            throw new Error("[SANDBOX_FS] Path resolves to project root; refuse write");
+        }
+        if (rel.startsWith("..")) {
+            throw new Error(`[SANDBOX_FS] Path traversal denied: "${userPath}"`);
+        }
+        return rel;
+    }
+    // Relative: reject .. segments
+    const parts = [];
+    for (const seg of rel.split("/")) {
+        if (!seg || seg === ".")
+            continue;
+        if (seg === "..") {
+            throw new Error(`[SANDBOX_FS] Path traversal denied: "${userPath}"`);
+        }
+        parts.push(seg);
+    }
+    if (parts.length === 0) {
+        throw new Error("[SANDBOX_FS] Path resolves to project root; refuse write");
+    }
+    return parts.join("/");
+}
+function shellSingleQuote(s) {
+    // Safe for sh single-quoted strings
+    return `'${s.replace(/'/g, `'\\''`)}'`;
+}
+function createLock(projectRoot) {
+    return new AtomicFileLock({
+        projectRoot,
+        locksDir: path.join(projectRoot, ".atabey", "locks"),
+        ttlMs: 5 * 60 * 1000,
+        timeoutMs: 15_000,
+    });
+}
+function hostWriteAtomic(absolutePath, content) {
+    const dir = path.dirname(absolutePath);
+    if (!fs.existsSync(dir)) {
+        fs.mkdirSync(dir, { recursive: true });
+    }
+    // Write exact bytes (callers decide trailing newline — patch/replace need fidelity)
+    const tempPath = `${absolutePath}.${Math.random().toString(36).slice(2, 9)}.tmp`;
+    try {
+        fs.writeFileSync(tempPath, content, "utf8");
+        fs.renameSync(tempPath, absolutePath);
+    }
+    catch (err) {
+        try {
+            if (fs.existsSync(tempPath))
+                fs.unlinkSync(tempPath);
+        }
+        catch { /* ignore */ }
+        throw err;
+    }
+}
+/**
+ * Write file content under project root using the active sandbox runtime.
+ */
+export async function writeFileInSandbox(projectRoot, userPath, content, options) {
+    const root = path.resolve(projectRoot);
+    const relativePath = assertSafeRelativePath(userPath, root);
+    const absolutePath = path.resolve(root, relativePath);
+    // Belt-and-suspenders: stay inside root
+    if (!absolutePath.startsWith(root + path.sep) && absolutePath !== root) {
+        throw new Error(`[SANDBOX_FS] Resolved path escapes project root: "${userPath}"`);
+    }
+    const cfg = resolveSandboxRuntimeConfig(root, options?.timeoutMs);
+    if (cfg.required && cfg.effectiveMode === "none") {
+        throw new SandboxRequiredError("[SANDBOX_REQUIRED] File write blocked: no sandbox isolation available. " +
+            "Set ATABEY_SANDBOX_RUNTIME=container (Podman/Docker) or uid, or disable ATABEY_SANDBOX_REQUIRED.");
+    }
+    const owner = options?.ownerId || process.env.ATABEY_ACTIVE_AGENT || "mcp-writer";
+    const lock = createLock(root);
+    const posixRel = relativePath.split(path.sep).join("/");
+    return lock.withLock(relativePath, owner, async () => {
+        if (cfg.effectiveMode === "container" && cfg.engine !== "none") {
+            const dir = path.posix.dirname(posixRel);
+            const script = dir === "."
+                ? `cat > ${shellSingleQuote(posixRel)}`
+                : `mkdir -p ${shellSingleQuote(dir)} && cat > ${shellSingleQuote(posixRel)}`;
+            const result = await runInSandbox({
+                command: "sh",
+                args: ["-c", script],
+                projectRoot: root,
+                timeoutMs: options?.timeoutMs ?? cfg.timeoutMs,
+                stdin: content,
+            });
+            if (result.code !== 0) {
+                throw new Error(`[SANDBOX_FS] Container write failed (code ${result.code}): ${result.stderr || result.stdout}`.trim());
+            }
+            return {
+                absolutePath,
+                relativePath,
+                runtime: "container",
+                isolationLabel: result.isolationLabel,
+                bytes: Buffer.byteLength(content, "utf8"),
+            };
+        }
+        // uid | none — host write confined to project root
+        hostWriteAtomic(absolutePath, content);
+        return {
+            absolutePath,
+            relativePath,
+            runtime: cfg.effectiveMode,
+            isolationLabel: cfg.effectiveMode === "uid"
+                ? "uid host write (project-bound)"
+                : "host write (project-bound)",
+            bytes: Buffer.byteLength(content, "utf8"),
+        };
+    });
+}
+//# sourceMappingURL=sandbox-fs.js.map

package/dist/shared/src/sandbox-fs.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sandbox-fs.js","sourceRoot":"","sources":["../../../../shared/src/sandbox-fs.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAEH,OAAO,EAAE,MAAM,IAAI,CAAC;AACpB,OAAO,IAAI,MAAM,MAAM,CAAC;AACxB,OAAO,EAAE,cAAc,EAAE,MAAM,gBAAgB,CAAC;AAChD,OAAO,EACH,2BAA2B,EAC3B,YAAY,EACZ,oBAAoB,GAEvB,MAAM,sBAAsB,CAAC;AAU9B;;;GAGG;AACH,MAAM,UAAU,sBAAsB,CAAC,QAAgB,EAAE,WAAoB;IACzE,IAAI,CAAC,QAAQ,IAAI,CAAC,QAAQ,CAAC,IAAI,EAAE,EAAE,CAAC;QAChC,MAAM,IAAI,KAAK,CAAC,wCAAwC,CAAC,CAAC;IAC9D,CAAC;IACD,MAAM,OAAO,GAAG,QAAQ,CAAC,IAAI,EAAE,CAAC;IAChC,IAAI,OAAO,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAC;QACzB,MAAM,IAAI,KAAK,CAAC,wCAAwC,CAAC,CAAC;IAC9D,CAAC;IAED,IAAI,GAAG,GAAG,OAAO,CAAC,OAAO,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC;IAEtC,8CAA8C;IAC9C,IAAI,IAAI,CAAC,UAAU,CAAC,OAAO,CAAC,IAAI,GAAG,CAAC,UAAU,CAAC,GAAG,CAAC,EAAE,CAAC;QAClD,IAAI,CAAC,WAAW,EAAE,CAAC;YACf,MAAM,IAAI,KAAK,CAAC,qDAAqD,QAAQ,GAAG,CAAC,CAAC;QACtF,CAAC;QACD,MAAM,IAAI,GAAG,IAAI,CAAC,OAAO,CAAC,WAAW,CAAC,CAAC;QACvC,MAAM,GAAG,GAAG,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC;QAClC,IAAI,CAAC,GAAG,CAAC,UAAU,CAAC,IAAI,GAAG,IAAI,CAAC,GAAG,CAAC,IAAI,GAAG,KAAK,IAAI,EAAE,CAAC;YACnD,MAAM,IAAI,KAAK,CAAC,qDAAqD,QAAQ,GAAG,CAAC,CAAC;QACtF,CAAC;QACD,GAAG,GAAG,IAAI,CAAC,QAAQ,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC,OAAO,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC;QACnD,IAAI,CAAC,GAAG,IAAI,GAAG,KAAK,GAAG,EAAE,CAAC;YACtB,MAAM,IAAI,KAAK,CAAC,0DAA0D,CAAC,CAAC;QAChF,CAAC;QACD,IAAI,GAAG,CAAC,UAAU,CAAC,IAAI,CAAC,EAAE,CAAC;YACvB,MAAM,IAAI,KAAK,CAAC,wCAAwC,QAAQ,GAAG,CAAC,CAAC;QACzE,CAAC;QACD,OAAO,GAAG,CAAC;IACf,CAAC;IAED,+BAA+B;IAC/B,MAAM,KAAK,GAAa,EAAE,CAAC;IAC3B,KAAK,MAAM,GAAG,IAAI,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,EAAE,CAAC;QAC/B,IAAI,CAAC,GAAG,IAAI,GAAG,KAAK,GAAG;YAAE,SAAS;QAClC,IAAI,GAAG,KAAK,IAAI,EAAE,CAAC;YACf,MAAM,IAAI,KAAK,CAAC,wCAAwC,QAAQ,GAAG,CAAC,CAAC;QACzE,CAAC;QACD,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IACpB,CAAC;IACD,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACrB,MAAM,IAAI,KAAK,CAAC,0DAA0D,CAAC,CAAC;IAChF,CAAC;IACD,OAAO,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;AAC3B,CAAC;AAED,SAAS,gBAAgB,CAAC,CAAS;IAC/B,oCAAoC;IACpC,OAAO,IAAI,CAAC,CAAC,OAAO,CAAC,IAAI,EAAE,OAAO,CAAC,GAAG,CAAC;AAC3C,CAAC;AAED,SAAS,UAAU,CAAC,WAAmB;IACnC,OAAO,IAAI,cAAc,CAAC;QACtB,WAAW;QACX,QAAQ,EAAE,IAAI,CAAC,IAAI,CAAC,WAAW,EAAE,SAAS,EAAE,OAAO,CAAC;QACpD,KAAK,EAAE,CAAC,GAAG,EAAE,GAAG,IAAI;QACpB,SAAS,EAAE,MAAM;KACpB,CAAC,CAAC;AACP,CAAC;AAED,SAAS,eAAe,CAAC,YAAoB,EAAE,OAAe;IAC1D,MAAM,GAAG,GAAG,IAAI,CAAC,OAAO,CAAC,YAAY,CAAC,CAAC;IACvC,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,GAAG,CAAC,EAAE,CAAC;QACtB,EAAE,CAAC,SAAS,CAAC,GAAG,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IAC3C,CAAC;IACD,oFAAoF;IACpF,MAAM,QAAQ,GAAG,GAAG,YAAY,IAAI,IAAI,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,MAAM,CAAC;IACjF,IAAI,CAAC;QACD,EAAE,CAAC,aAAa,CAAC,QAAQ,EAAE,OAAO,EAAE,MAAM,CAAC,CAAC;QAC5C,EAAE,CAAC,UAAU,CAAC,QAAQ,EAAE,YAAY,CAAC,CAAC;IAC1C,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACX,IAAI,CAAC;YAAC,IAAI,EAAE,CAAC,UAAU,CAAC,QAAQ,CAAC;gBAAE,EAAE,CAAC,UAAU,CAAC,QAAQ,CAAC,CAAC;QAAC,CAAC;QAAC,MAAM,CAAC,CAAC,YAAY,CAAC,CAAC;QACpF,MAAM,GAAG,CAAC;IACd,CAAC;AACL,CAAC;AAED;;GAEG;AACH,MAAM,CAAC,KAAK,UAAU,kBAAkB,CACpC,WAAmB,EACnB,QAAgB,EAChB,OAAe,EACf,OAAkD;IAElD,MAAM,IAAI,GAAG,IAAI,CAAC,OAAO,CAAC,WAAW,CAAC,CAAC;IACvC,MAAM,YAAY,GAAG,sBAAsB,CAAC,QAAQ,EAAE,IAAI,CAAC,CAAC;IAC5D,MAAM,YAAY,GAAG,IAAI,CAAC,OAAO,CAAC,IAAI,EAAE,YAAY,CAAC,CAAC;IACtD,wCAAwC;IACxC,IAAI,CAAC,YAAY,CAAC,UAAU,CAAC,IAAI,GAAG,IAAI,CAAC,GAAG,CAAC,IAAI,YAAY,KAAK,IAAI,EAAE,CAAC;QACrE,MAAM,IAAI,KAAK,CAAC,qDAAqD,QAAQ,GAAG,CAAC,CAAC;IACtF,CAAC;IAED,MAAM,GAAG,GAAG,2BAA2B,CAAC,IAAI,EAAE,OAAO,EAAE,SAAS,CAAC,CAAC;IAClE,IAAI,GAAG,CAAC,QAAQ,IAAI,GAAG,CAAC,aAAa,KAAK,MAAM,EAAE,CAAC;QAC/C,MAAM,IAAI,oBAAoB,CAC1B,yEAAyE;YACzE,kGAAkG,CACrG,CAAC;IACN,CAAC;IAED,MAAM,KAAK,GAAG,OAAO,EAAE,OAAO,IAAI,OAAO,CAAC,GAAG,CAAC,mBAAmB,IAAI,YAAY,CAAC;IAClF,MAAM,IAAI,GAAG,UAAU,CAAC,IAAI,CAAC,CAAC;IAC9B,MAAM,QAAQ,GAAG,YAAY,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IAExD,OAAO,IAAI,CAAC,QAAQ,CAAC,YAAY,EAAE,KAAK,EAAE,KAAK,IAAI,EAAE;QACjD,IAAI,GAAG,CAAC,aAAa,KAAK,WAAW,IAAI,GAAG,CAAC,MAAM,KAAK,MAAM,EAAE,CAAC;YAC7D,MAAM,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC;YACzC,MAAM,MAAM,GACR,GAAG,KAAK,GAAG;gBACP,CAAC,CAAC,SAAS,gBAAgB,CAAC,QAAQ,CAAC,EAAE;gBACvC,CAAC,CAAC,YAAY,gBAAgB,CAAC,GAAG,CAAC,aAAa,gBAAgB,CAAC,QAAQ,CAAC,EAAE,CAAC;YAErF,MAAM,MAAM,GAAG,MAAM,YAAY,CAAC;gBAC9B,OAAO,EAAE,IAAI;gBACb,IAAI,EAAE,CAAC,IAAI,EAAE,MAAM,CAAC;gBACpB,WAAW,EAAE,IAAI;gBACjB,SAAS,EAAE,OAAO,EAAE,SAAS,IAAI,GAAG,CAAC,SAAS;gBAC9C,KAAK,EAAE,OAAO;aACjB,CAAC,CAAC;YAEH,IAAI,MAAM,CAAC,IAAI,KAAK,CAAC,EAAE,CAAC;gBACpB,MAAM,IAAI,KAAK,CACX,6CAA6C,MAAM,CAAC,IAAI,MAAM,MAAM,CAAC,MAAM,IAAI,MAAM,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,CACxG,CAAC;YACN,CAAC;YAED,OAAO;gBACH,YAAY;gBACZ,YAAY;gBACZ,OAAO,EAAE,WAAW;gBACpB,cAAc,EAAE,MAAM,CAAC,cAAc;gBACrC,KAAK,EAAE,MAAM,CAAC,UAAU,CAAC,OAAO,EAAE,MAAM,CAAC;aAC5C,CAAC;QACN,CAAC;QAED,mDAAmD;QACnD,eAAe,CAAC,YAAY,EAAE,OAAO,CAAC,CAAC;QACvC,OAAO;YACH,YAAY;YACZ,YAAY;YACZ,OAAO,EAAE,GAAG,CAAC,aAAa;YAC1B,cAAc,EACV,GAAG,CAAC,aAAa,KAAK,KAAK;gBACvB,CAAC,CAAC,gCAAgC;gBAClC,CAAC,CAAC,4BAA4B;YACtC,KAAK,EAAE,MAAM,CAAC,UAAU,CAAC,OAAO,EAAE,MAAM,CAAC;SAC5C,CAAC;IACN,CAAC,CAAC,CAAC;AACP,CAAC"}