atabey 0.0.23 → 0.0.26

package/dist/shared/src/sandbox-runtime.d.ts

@@ -0,0 +1,85 @@
+/**
+ * Sandbox Runtime — Phase 1.1 execution isolation for agent shell commands.
+ *
+ * Modes (ATABEY_SANDBOX_RUNTIME):
+ *   none      — host spawn (legacy; allow-list only)
+ *   uid       — host spawn with uid/gid drop (see sandbox.ts)
+ *   container — Docker/Podman run with network=none, resource limits, project mount
+ *   auto      — container if engine available, else uid if configured, else none
+ *
+ * Enterprise hardening:
+ *   ATABEY_SANDBOX_REQUIRED=true  → deny execution when isolation is effectively "none"
+ *
+ * Container defaults:
+ *   ATABEY_SANDBOX_ENGINE=podman|docker|auto  (prefer podman, then docker)
+ *   ATABEY_SANDBOX_IMAGE=node:20-bookworm-slim
+ *   ATABEY_SANDBOX_MEMORY=512m
+ *   ATABEY_SANDBOX_CPUS=1
+ *   ATABEY_SANDBOX_PIDS=256
+ *   ATABEY_SANDBOX_NETWORK=none
+ */
+import { resolveSandboxIdentity } from "./sandbox.js";
+export type SandboxRuntimeMode = "none" | "uid" | "container" | "auto";
+export type SandboxEngine = "podman" | "docker" | "none";
+export interface SandboxRuntimeConfig {
+    mode: SandboxRuntimeMode;
+    /** Resolved effective mode after auto detection. */
+    effectiveMode: "none" | "uid" | "container";
+    engine: SandboxEngine;
+    image: string;
+    memory: string;
+    cpus: string;
+    pidsLimit: number;
+    network: string;
+    required: boolean;
+    projectRoot: string;
+    timeoutMs: number;
+}
+export interface RunInSandboxRequest {
+    command: string;
+    args: string[];
+    projectRoot: string;
+    timeoutMs?: number;
+    env?: NodeJS.ProcessEnv;
+    /** Optional stdin payload (e.g. file content for container-mediated writes). */
+    stdin?: string | Buffer;
+}
+export interface RunInSandboxResult {
+    code: number | null;
+    stdout: string;
+    stderr: string;
+    runtime: SandboxRuntimeConfig["effectiveMode"];
+    engine: SandboxEngine;
+    /** Human-readable isolation description for logs/errors. */
+    isolationLabel: string;
+}
+export declare class SandboxRequiredError extends Error {
+    constructor(message: string);
+}
+/**
+ * Detect available container engine (cached).
+ */
+export declare function detectContainerEngine(): SandboxEngine;
+/** Test helper */
+export declare function clearSandboxRuntimeCache(): void;
+/**
+ * Resolve full runtime configuration for a project.
+ */
+export declare function resolveSandboxRuntimeConfig(projectRoot: string, timeoutMs?: number): SandboxRuntimeConfig;
+/**
+ * Build docker/podman argv for an isolated run.
+ * Project is mounted at /workspace; command runs with -w /workspace.
+ */
+export declare function buildContainerArgs(cfg: SandboxRuntimeConfig, command: string, args: string[]): string[];
+/**
+ * Run a command under the configured sandbox runtime.
+ */
+export declare function runInSandbox(req: RunInSandboxRequest): Promise<RunInSandboxResult>;
+/**
+ * Diagnostic snapshot for dashboard / CLI.
+ */
+export declare function getSandboxRuntimeStatus(projectRoot?: string): {
+    config: SandboxRuntimeConfig;
+    isolationLabel: string;
+    identity: ReturnType<typeof resolveSandboxIdentity>;
+};

package/dist/shared/src/sandbox-runtime.js

@@ -0,0 +1,250 @@
+/**
+ * Sandbox Runtime — Phase 1.1 execution isolation for agent shell commands.
+ *
+ * Modes (ATABEY_SANDBOX_RUNTIME):
+ *   none      — host spawn (legacy; allow-list only)
+ *   uid       — host spawn with uid/gid drop (see sandbox.ts)
+ *   container — Docker/Podman run with network=none, resource limits, project mount
+ *   auto      — container if engine available, else uid if configured, else none
+ *
+ * Enterprise hardening:
+ *   ATABEY_SANDBOX_REQUIRED=true  → deny execution when isolation is effectively "none"
+ *
+ * Container defaults:
+ *   ATABEY_SANDBOX_ENGINE=podman|docker|auto  (prefer podman, then docker)
+ *   ATABEY_SANDBOX_IMAGE=node:20-bookworm-slim
+ *   ATABEY_SANDBOX_MEMORY=512m
+ *   ATABEY_SANDBOX_CPUS=1
+ *   ATABEY_SANDBOX_PIDS=256
+ *   ATABEY_SANDBOX_NETWORK=none
+ */
+import { spawn, execFileSync } from "child_process";
+import fs from "fs";
+import path from "path";
+import { applySandboxToSpawnOptions, resolveSandboxIdentity, sandboxSpawn, } from "./sandbox.js";
+export class SandboxRequiredError extends Error {
+    constructor(message) {
+        super(message);
+        this.name = "SandboxRequiredError";
+    }
+}
+let cachedEngine = null;
+function envStr(key, fallback) {
+    const v = process.env[key];
+    return v && v.trim() ? v.trim() : fallback;
+}
+function envBool(key, fallback = false) {
+    const v = process.env[key];
+    if (v === undefined)
+        return fallback;
+    return v === "true" || v === "1" || v === "yes";
+}
+/**
+ * Detect available container engine (cached).
+ */
+export function detectContainerEngine() {
+    if (cachedEngine)
+        return cachedEngine;
+    const prefer = envStr("ATABEY_SANDBOX_ENGINE", "auto").toLowerCase();
+    const tryEngine = (name) => {
+        try {
+            execFileSync(name, ["--version"], {
+                encoding: "utf8",
+                timeout: 3000,
+                stdio: ["ignore", "pipe", "ignore"],
+            });
+            return true;
+        }
+        catch {
+            return false;
+        }
+    };
+    if (prefer === "podman" || prefer === "docker") {
+        cachedEngine = tryEngine(prefer) ? prefer : "none";
+        return cachedEngine;
+    }
+    if (tryEngine("podman")) {
+        cachedEngine = "podman";
+        return cachedEngine;
+    }
+    if (tryEngine("docker")) {
+        cachedEngine = "docker";
+        return cachedEngine;
+    }
+    cachedEngine = "none";
+    return cachedEngine;
+}
+/** Test helper */
+export function clearSandboxRuntimeCache() {
+    cachedEngine = null;
+}
+/**
+ * Resolve full runtime configuration for a project.
+ */
+export function resolveSandboxRuntimeConfig(projectRoot, timeoutMs) {
+    const mode = (envStr("ATABEY_SANDBOX_RUNTIME", "auto").toLowerCase() || "auto");
+    const engine = detectContainerEngine();
+    const identity = resolveSandboxIdentity();
+    const required = envBool("ATABEY_SANDBOX_REQUIRED", false);
+    let effectiveMode = "none";
+    if (mode === "none") {
+        effectiveMode = "none";
+    }
+    else if (mode === "uid") {
+        effectiveMode = identity.enabled ? "uid" : "none";
+    }
+    else if (mode === "container") {
+        effectiveMode = engine !== "none" ? "container" : "none";
+    }
+    else {
+        // auto
+        if (engine !== "none")
+            effectiveMode = "container";
+        else if (identity.enabled)
+            effectiveMode = "uid";
+        else
+            effectiveMode = "none";
+    }
+    return {
+        mode: ["none", "uid", "container", "auto"].includes(mode) ? mode : "auto",
+        effectiveMode,
+        engine,
+        image: envStr("ATABEY_SANDBOX_IMAGE", "node:20-bookworm-slim"),
+        memory: envStr("ATABEY_SANDBOX_MEMORY", "512m"),
+        cpus: envStr("ATABEY_SANDBOX_CPUS", "1"),
+        pidsLimit: parseInt(envStr("ATABEY_SANDBOX_PIDS", "256"), 10) || 256,
+        network: envStr("ATABEY_SANDBOX_NETWORK", "none"),
+        required,
+        projectRoot: path.resolve(projectRoot),
+        timeoutMs: timeoutMs ?? parseInt(process.env.MCP_COMMAND_TIMEOUT_MS || "30000", 10),
+    };
+}
+function isolationLabel(cfg) {
+    if (cfg.effectiveMode === "container") {
+        return `container/${cfg.engine} image=${cfg.image} network=${cfg.network} mem=${cfg.memory}`;
+    }
+    if (cfg.effectiveMode === "uid") {
+        const id = resolveSandboxIdentity();
+        return `uid=${id.uid}${id.gid !== undefined ? ` gid=${id.gid}` : ""}`;
+    }
+    return "none (host process)";
+}
+/**
+ * Build docker/podman argv for an isolated run.
+ * Project is mounted at /workspace; command runs with -w /workspace.
+ */
+export function buildContainerArgs(cfg, command, args) {
+    const root = cfg.projectRoot;
+    // Prefer :rw so installs/builds work; network still none by default
+    const mount = `${root}:/workspace:rw`;
+    const argv = [
+        "run",
+        "--rm",
+        "--network", cfg.network,
+        "--memory", cfg.memory,
+        "--cpus", cfg.cpus,
+        "--pids-limit", String(cfg.pidsLimit),
+        "-v", mount,
+        "-w", "/workspace",
+        // Drop ambient capabilities when supported (docker/podman)
+        "--security-opt", "no-new-privileges",
+    ];
+    // Optional: read-only root FS with writable tmp (stronger isolation)
+    if (envBool("ATABEY_SANDBOX_READ_ONLY_ROOT", false)) {
+        argv.push("--read-only", "--tmpfs", "/tmp:rw,noexec,nosuid,size=64m");
+    }
+    // Do not pass host secrets by default — empty env except PATH-ish via image
+    if (!envBool("ATABEY_SANDBOX_PASS_ENV", false)) {
+        argv.push("--env", "HOME=/tmp", "--env", "NPM_CONFIG_UPDATE_NOTIFIER=false");
+    }
+    argv.push(cfg.image, command, ...args);
+    return argv;
+}
+function collectOutput(child, stdin) {
+    return new Promise((resolve) => {
+        let stdout = "";
+        let stderr = "";
+        child.stdout?.on("data", (d) => { stdout += d.toString(); });
+        child.stderr?.on("data", (d) => { stderr += d.toString(); });
+        child.on("error", (err) => {
+            stderr += err.message;
+            resolve({ code: 1, stdout, stderr });
+        });
+        child.on("close", (code) => {
+            resolve({ code, stdout, stderr });
+        });
+        if (stdin !== undefined && child.stdin) {
+            child.stdin.end(stdin);
+        }
+        else if (child.stdin) {
+            child.stdin.end();
+        }
+    });
+}
+/**
+ * Run a command under the configured sandbox runtime.
+ */
+export async function runInSandbox(req) {
+    const cfg = resolveSandboxRuntimeConfig(req.projectRoot, req.timeoutMs);
+    const label = isolationLabel(cfg);
+    if (cfg.required && cfg.effectiveMode === "none") {
+        throw new SandboxRequiredError("[SANDBOX_REQUIRED] ATABEY_SANDBOX_REQUIRED=true but no isolation is available. " +
+            "Install Podman/Docker (ATABEY_SANDBOX_RUNTIME=container) or configure ATABEY_SANDBOX_UID/USER " +
+            "(ATABEY_SANDBOX_RUNTIME=uid), or set ATABEY_SANDBOX_REQUIRED=false for local dev.");
+    }
+    if (!fs.existsSync(cfg.projectRoot)) {
+        throw new Error(`[SANDBOX] Project root does not exist: ${cfg.projectRoot}`);
+    }
+    const stdio = [
+        req.stdin !== undefined ? "pipe" : "ignore",
+        "pipe",
+        "pipe",
+    ];
+    if (cfg.effectiveMode === "container" && cfg.engine !== "none") {
+        const containerArgs = buildContainerArgs(cfg, req.command, req.args);
+        const child = spawn(cfg.engine, containerArgs, {
+            cwd: cfg.projectRoot,
+            timeout: cfg.timeoutMs,
+            shell: false,
+            stdio,
+            env: req.env ?? process.env,
+        });
+        const result = await collectOutput(child, req.stdin);
+        return {
+            ...result,
+            runtime: "container",
+            engine: cfg.engine,
+            isolationLabel: label,
+        };
+    }
+    // uid or none — host spawn (uid options applied when available)
+    const spawnOpts = {
+        cwd: cfg.projectRoot,
+        timeout: cfg.timeoutMs,
+        shell: false,
+        stdio,
+        env: req.env ?? process.env,
+    };
+    const child = cfg.effectiveMode === "uid"
+        ? sandboxSpawn(req.command, req.args, spawnOpts)
+        : spawn(req.command, req.args, applySandboxToSpawnOptions({ ...spawnOpts, disableSandbox: true }));
+    const result = await collectOutput(child, req.stdin);
+    return {
+        ...result,
+        runtime: cfg.effectiveMode,
+        engine: "none",
+        isolationLabel: label,
+    };
+}
+/**
+ * Diagnostic snapshot for dashboard / CLI.
+ */
+export function getSandboxRuntimeStatus(projectRoot = process.cwd()) {
+    const config = resolveSandboxRuntimeConfig(projectRoot);
+    return {
+        config,
+        isolationLabel: isolationLabel(config),
+        identity: resolveSandboxIdentity(),
+    };
+}
+//# sourceMappingURL=sandbox-runtime.js.map

package/dist/shared/src/sandbox-runtime.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sandbox-runtime.js","sourceRoot":"","sources":["../../../../shared/src/sandbox-runtime.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;GAmBG;AAEH,OAAO,EAAE,KAAK,EAAwC,YAAY,EAAE,MAAM,eAAe,CAAC;AAC1F,OAAO,EAAE,MAAM,IAAI,CAAC;AACpB,OAAO,IAAI,MAAM,MAAM,CAAC;AACxB,OAAO,EACH,0BAA0B,EAC1B,sBAAsB,EACtB,YAAY,GACf,MAAM,cAAc,CAAC;AAwCtB,MAAM,OAAO,oBAAqB,SAAQ,KAAK;IAC3C,YAAY,OAAe;QACvB,KAAK,CAAC,OAAO,CAAC,CAAC;QACf,IAAI,CAAC,IAAI,GAAG,sBAAsB,CAAC;IACvC,CAAC;CACJ;AAED,IAAI,YAAY,GAAyB,IAAI,CAAC;AAE9C,SAAS,MAAM,CAAC,GAAW,EAAE,QAAgB;IACzC,MAAM,CAAC,GAAG,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;IAC3B,OAAO,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC;AAC/C,CAAC;AAED,SAAS,OAAO,CAAC,GAAW,EAAE,QAAQ,GAAG,KAAK;IAC1C,MAAM,CAAC,GAAG,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;IAC3B,IAAI,CAAC,KAAK,SAAS;QAAE,OAAO,QAAQ,CAAC;IACrC,OAAO,CAAC,KAAK,MAAM,IAAI,CAAC,KAAK,GAAG,IAAI,CAAC,KAAK,KAAK,CAAC;AACpD,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,qBAAqB;IACjC,IAAI,YAAY;QAAE,OAAO,YAAY,CAAC;IACtC,MAAM,MAAM,GAAG,MAAM,CAAC,uBAAuB,EAAE,MAAM,CAAC,CAAC,WAAW,EAAE,CAAC;IAErE,MAAM,SAAS,GAAG,CAAC,IAAyB,EAAW,EAAE;QACrD,IAAI,CAAC;YACD,YAAY,CAAC,IAAI,EAAE,CAAC,WAAW,CAAC,EAAE;gBAC9B,QAAQ,EAAE,MAAM;gBAChB,OAAO,EAAE,IAAI;gBACb,KAAK,EAAE,CAAC,QAAQ,EAAE,MAAM,EAAE,QAAQ,CAAC;aACtC,CAAC,CAAC;YACH,OAAO,IAAI,CAAC;QAChB,CAAC;QAAC,MAAM,CAAC;YACL,OAAO,KAAK,CAAC;QACjB,CAAC;IACL,CAAC,CAAC;IAEF,IAAI,MAAM,KAAK,QAAQ,IAAI,MAAM,KAAK,QAAQ,EAAE,CAAC;QAC7C,YAAY,GAAG,SAAS,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC;QACnD,OAAO,YAAY,CAAC;IACxB,CAAC;IAED,IAAI,SAAS,CAAC,QAAQ,CAAC,EAAE,CAAC;QACtB,YAAY,GAAG,QAAQ,CAAC;QACxB,OAAO,YAAY,CAAC;IACxB,CAAC;IACD,IAAI,SAAS,CAAC,QAAQ,CAAC,EAAE,CAAC;QACtB,YAAY,GAAG,QAAQ,CAAC;QACxB,OAAO,YAAY,CAAC;IACxB,CAAC;IACD,YAAY,GAAG,MAAM,CAAC;IACtB,OAAO,YAAY,CAAC;AACxB,CAAC;AAED,kBAAkB;AAClB,MAAM,UAAU,wBAAwB;IACpC,YAAY,GAAG,IAAI,CAAC;AACxB,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,2BAA2B,CAAC,WAAmB,EAAE,SAAkB;IAC/E,MAAM,IAAI,GAAG,CAAC,MAAM,CAAC,wBAAwB,EAAE,MAAM,CAAC,CAAC,WAAW,EAAE,IAAI,MAAM,CAAuB,CAAC;IACtG,MAAM,MAAM,GAAG,qBAAqB,EAAE,CAAC;IACvC,MAAM,QAAQ,GAAG,sBAAsB,EAAE,CAAC;IAC1C,MAAM,QAAQ,GAAG,OAAO,CAAC,yBAAyB,EAAE,KAAK,CAAC,CAAC;IAE3D,IAAI,aAAa,GAA0C,MAAM,CAAC;IAClE,IAAI,IAAI,KAAK,MAAM,EAAE,CAAC;QAClB,aAAa,GAAG,MAAM,CAAC;IAC3B,CAAC;SAAM,IAAI,IAAI,KAAK,KAAK,EAAE,CAAC;QACxB,aAAa,GAAG,QAAQ,CAAC,OAAO,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,CAAC;IACtD,CAAC;SAAM,IAAI,IAAI,KAAK,WAAW,EAAE,CAAC;QAC9B,aAAa,GAAG,MAAM,KAAK,MAAM,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,MAAM,CAAC;IAC7D,CAAC;SAAM,CAAC;QACJ,OAAO;QACP,IAAI,MAAM,KAAK,MAAM;YAAE,aAAa,GAAG,WAAW,CAAC;aAC9C,IAAI,QAAQ,CAAC,OAAO;YAAE,aAAa,GAAG,KAAK,CAAC;;YAC5C,aAAa,GAAG,MAAM,CAAC;IAChC,CAAC;IAED,OAAO;QACH,IAAI,EAAE,CAAC,MAAM,EAAE,KAAK,EAAE,WAAW,EAAE,MAAM,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,MAAM;QACzE,aAAa;QACb,MAAM;QACN,KAAK,EAAE,MAAM,CAAC,sBAAsB,EAAE,uBAAuB,CAAC;QAC9D,MAAM,EAAE,MAAM,CAAC,uBAAuB,EAAE,MAAM,CAAC;QAC/C,IAAI,EAAE,MAAM,CAAC,qBAAqB,EAAE,GAAG,CAAC;QACxC,SAAS,EAAE,QAAQ,CAAC,MAAM,CAAC,qBAAqB,EAAE,KAAK,CAAC,EAAE,EAAE,CAAC,IAAI,GAAG;QACpE,OAAO,EAAE,MAAM,CAAC,wBAAwB,EAAE,MAAM,CAAC;QACjD,QAAQ;QACR,WAAW,EAAE,IAAI,CAAC,OAAO,CAAC,WAAW,CAAC;QACtC,SAAS,EAAE,SAAS,IAAI,QAAQ,CAAC,OAAO,CAAC,GAAG,CAAC,sBAAsB,IAAI,OAAO,EAAE,EAAE,CAAC;KACtF,CAAC;AACN,CAAC;AAED,SAAS,cAAc,CAAC,GAAyB;IAC7C,IAAI,GAAG,CAAC,aAAa,KAAK,WAAW,EAAE,CAAC;QACpC,OAAO,aAAa,GAAG,CAAC,MAAM,UAAU,GAAG,CAAC,KAAK,YAAY,GAAG,CAAC,OAAO,QAAQ,GAAG,CAAC,MAAM,EAAE,CAAC;IACjG,CAAC;IACD,IAAI,GAAG,CAAC,aAAa,KAAK,KAAK,EAAE,CAAC;QAC9B,MAAM,EAAE,GAAG,sBAAsB,EAAE,CAAC;QACpC,OAAO,OAAO,EAAE,CAAC,GAAG,GAAG,EAAE,CAAC,GAAG,KAAK,SAAS,CAAC,CAAC,CAAC,QAAQ,EAAE,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC;IAC1E,CAAC;IACD,OAAO,qBAAqB,CAAC;AACjC,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,kBAAkB,CAC9B,GAAyB,EACzB,OAAe,EACf,IAAc;IAEd,MAAM,IAAI,GAAG,GAAG,CAAC,WAAW,CAAC;IAC7B,oEAAoE;IACpE,MAAM,KAAK,GAAG,GAAG,IAAI,gBAAgB,CAAC;IAEtC,MAAM,IAAI,GAAa;QACnB,KAAK;QACL,MAAM;QACN,WAAW,EAAE,GAAG,CAAC,OAAO;QACxB,UAAU,EAAE,GAAG,CAAC,MAAM;QACtB,QAAQ,EAAE,GAAG,CAAC,IAAI;QAClB,cAAc,EAAE,MAAM,CAAC,GAAG,CAAC,SAAS,CAAC;QACrC,IAAI,EAAE,KAAK;QACX,IAAI,EAAE,YAAY;QAClB,2DAA2D;QAC3D,gBAAgB,EAAE,mBAAmB;KACxC,CAAC;IAEF,qEAAqE;IACrE,IAAI,OAAO,CAAC,+BAA+B,EAAE,KAAK,CAAC,EAAE,CAAC;QAClD,IAAI,CAAC,IAAI,CAAC,aAAa,EAAE,SAAS,EAAE,gCAAgC,CAAC,CAAC;IAC1E,CAAC;IAED,4EAA4E;IAC5E,IAAI,CAAC,OAAO,CAAC,yBAAyB,EAAE,KAAK,CAAC,EAAE,CAAC;QAC7C,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,WAAW,EAAE,OAAO,EAAE,kCAAkC,CAAC,CAAC;IACjF,CAAC;IAED,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,KAAK,EAAE,OAAO,EAAE,GAAG,IAAI,CAAC,CAAC;IACvC,OAAO,IAAI,CAAC;AAChB,CAAC;AAED,SAAS,aAAa,CAClB,KAAmB,EACnB,KAAuB;IAEvB,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,EAAE;QAC3B,IAAI,MAAM,GAAG,EAAE,CAAC;QAChB,IAAI,MAAM,GAAG,EAAE,CAAC;QAChB,KAAK,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,EAAE,CAAC,CAAS,EAAE,EAAE,GAAG,MAAM,IAAI,CAAC,CAAC,QAAQ,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC;QACrE,KAAK,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,EAAE,CAAC,CAAS,EAAE,EAAE,GAAG,MAAM,IAAI,CAAC,CAAC,QAAQ,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC;QACrE,KAAK,CAAC,EAAE,CAAC,OAAO,EAAE,CAAC,GAAG,EAAE,EAAE;YACtB,MAAM,IAAI,GAAG,CAAC,OAAO,CAAC;YACtB,OAAO,CAAC,EAAE,IAAI,EAAE,CAAC,EAAE,MAAM,EAAE,MAAM,EAAE,CAAC,CAAC;QACzC,CAAC,CAAC,CAAC;QACH,KAAK,CAAC,EAAE,CAAC,OAAO,EAAE,CAAC,IAAI,EAAE,EAAE;YACvB,OAAO,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,CAAC,CAAC;QACtC,CAAC,CAAC,CAAC;QACH,IAAI,KAAK,KAAK,SAAS,IAAI,KAAK,CAAC,KAAK,EAAE,CAAC;YACrC,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;QAC3B,CAAC;aAAM,IAAI,KAAK,CAAC,KAAK,EAAE,CAAC;YACrB,KAAK,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC;QACtB,CAAC;IACL,CAAC,CAAC,CAAC;AACP,CAAC;AAED;;GAEG;AACH,MAAM,CAAC,KAAK,UAAU,YAAY,CAAC,GAAwB;IACvD,MAAM,GAAG,GAAG,2BAA2B,CAAC,GAAG,CAAC,WAAW,EAAE,GAAG,CAAC,SAAS,CAAC,CAAC;IACxE,MAAM,KAAK,GAAG,cAAc,CAAC,GAAG,CAAC,CAAC;IAElC,IAAI,GAAG,CAAC,QAAQ,IAAI,GAAG,CAAC,aAAa,KAAK,MAAM,EAAE,CAAC;QAC/C,MAAM,IAAI,oBAAoB,CAC1B,iFAAiF;YACjF,gGAAgG;YAChG,mFAAmF,CACtF,CAAC;IACN,CAAC;IAED,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,GAAG,CAAC,WAAW,CAAC,EAAE,CAAC;QAClC,MAAM,IAAI,KAAK,CAAC,0CAA0C,GAAG,CAAC,WAAW,EAAE,CAAC,CAAC;IACjF,CAAC;IAED,MAAM,KAAK,GAA0B;QACjC,GAAG,CAAC,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,QAAQ;QAC3C,MAAM;QACN,MAAM;KACT,CAAC;IAEF,IAAI,GAAG,CAAC,aAAa,KAAK,WAAW,IAAI,GAAG,CAAC,MAAM,KAAK,MAAM,EAAE,CAAC;QAC7D,MAAM,aAAa,GAAG,kBAAkB,CAAC,GAAG,EAAE,GAAG,CAAC,OAAO,EAAE,GAAG,CAAC,IAAI,CAAC,CAAC;QACrE,MAAM,KAAK,GAAG,KAAK,CAAC,GAAG,CAAC,MAAM,EAAE,aAAa,EAAE;YAC3C,GAAG,EAAE,GAAG,CAAC,WAAW;YACpB,OAAO,EAAE,GAAG,CAAC,SAAS;YACtB,KAAK,EAAE,KAAK;YACZ,KAAK;YACL,GAAG,EAAE,GAAG,CAAC,GAAG,IAAI,OAAO,CAAC,GAAG;SAC9B,CAAC,CAAC;QACH,MAAM,MAAM,GAAG,MAAM,aAAa,CAAC,KAAK,EAAE,GAAG,CAAC,KAAK,CAAC,CAAC;QACrD,OAAO;YACH,GAAG,MAAM;YACT,OAAO,EAAE,WAAW;YACpB,MAAM,EAAE,GAAG,CAAC,MAAM;YAClB,cAAc,EAAE,KAAK;SACxB,CAAC;IACN,CAAC;IAED,gEAAgE;IAChE,MAAM,SAAS,GAAiB;QAC5B,GAAG,EAAE,GAAG,CAAC,WAAW;QACpB,OAAO,EAAE,GAAG,CAAC,SAAS;QACtB,KAAK,EAAE,KAAK;QACZ,KAAK;QACL,GAAG,EAAE,GAAG,CAAC,GAAG,IAAI,OAAO,CAAC,GAAG;KAC9B,CAAC;IAEF,MAAM,KAAK,GACP,GAAG,CAAC,aAAa,KAAK,KAAK;QACvB,CAAC,CAAC,YAAY,CAAC,GAAG,CAAC,OAAO,EAAE,GAAG,CAAC,IAAI,EAAE,SAAS,CAAC;QAChD,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,OAAO,EAAE,GAAG,CAAC,IAAI,EAAE,0BAA0B,CAAC,EAAE,GAAG,SAAS,EAAE,cAAc,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC;IAE3G,MAAM,MAAM,GAAG,MAAM,aAAa,CAAC,KAAK,EAAE,GAAG,CAAC,KAAK,CAAC,CAAC;IACrD,OAAO;QACH,GAAG,MAAM;QACT,OAAO,EAAE,GAAG,CAAC,aAAa;QAC1B,MAAM,EAAE,MAAM;QACd,cAAc,EAAE,KAAK;KACxB,CAAC;AACN,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,uBAAuB,CAAC,WAAW,GAAG,OAAO,CAAC,GAAG,EAAE;IAK/D,MAAM,MAAM,GAAG,2BAA2B,CAAC,WAAW,CAAC,CAAC;IACxD,OAAO;QACH,MAAM;QACN,cAAc,EAAE,cAAc,CAAC,MAAM,CAAC;QACtC,QAAQ,EAAE,sBAAsB,EAAE;KACrC,CAAC;AACN,CAAC"}

package/dist/shared/src/sandbox.d.ts

@@ -0,0 +1,54 @@
+/**
+ * OS-level subprocess isolation via uid/gid (no Docker required).
+ *
+ * On Unix, child_process.spawn accepts `uid` and `gid`. When configured,
+ * agent-triggered shell commands run as a restricted system user so that
+ * even a hallucinated destructive command hits EACCES / Permission Denied
+ * on protected paths.
+ *
+ * Windows: uid/gid are ignored; isolation is a no-op (allow-list still applies).
+ *
+ * Configuration (any of):
+ *   ATABEY_SANDBOX_UID=501
+ *   ATABEY_SANDBOX_GID=20
+ *   ATABEY_SANDBOX_USER=atabey-sandbox   (resolved via `id -u` / `id -g` when possible)
+ *   ATABEY_SANDBOX_ENABLED=true|false   (default: true when uid/gid resolvable)
+ */
+import { SpawnOptions, ChildProcess } from "child_process";
+export interface SandboxIdentity {
+    uid?: number;
+    gid?: number;
+    user?: string;
+    enabled: boolean;
+    /** Why sandbox is off (for diagnostics). */
+    reason?: string;
+}
+export interface SandboxSpawnOptions extends SpawnOptions {
+    /** Force-disable sandbox for this call. */
+    disableSandbox?: boolean;
+}
+/**
+ * Resolve sandbox identity from env (cached).
+ * Call `clearSandboxIdentityCache()` in tests after env changes.
+ */
+export declare function resolveSandboxIdentity(): SandboxIdentity;
+export declare function clearSandboxIdentityCache(): void;
+/**
+ * Build spawn options with uid/gid when sandbox is active.
+ */
+export declare function applySandboxToSpawnOptions(options?: SandboxSpawnOptions): SpawnOptions;
+/**
+ * spawn() wrapper that applies OS sandbox identity when configured.
+ */
+export declare function sandboxSpawn(command: string, args: readonly string[], options?: SandboxSpawnOptions): ChildProcess;
+/**
+ * Human-readable status for dashboard / CLI diagnostics.
+ */
+export declare function getSandboxStatus(): {
+    platform: string;
+    identity: SandboxIdentity;
+    processUid: number | null;
+    processGid: number | null;
+};
+/** Default restricted paths agents should not touch even with shell allow-list. */
+export declare const SANDBOX_PROTECTED_HINTS: readonly ["/etc", "/usr", "/bin", "/sbin", "/System", string];

package/dist/shared/src/sandbox.js

@@ -0,0 +1,179 @@
+/**
+ * OS-level subprocess isolation via uid/gid (no Docker required).
+ *
+ * On Unix, child_process.spawn accepts `uid` and `gid`. When configured,
+ * agent-triggered shell commands run as a restricted system user so that
+ * even a hallucinated destructive command hits EACCES / Permission Denied
+ * on protected paths.
+ *
+ * Windows: uid/gid are ignored; isolation is a no-op (allow-list still applies).
+ *
+ * Configuration (any of):
+ *   ATABEY_SANDBOX_UID=501
+ *   ATABEY_SANDBOX_GID=20
+ *   ATABEY_SANDBOX_USER=atabey-sandbox   (resolved via `id -u` / `id -g` when possible)
+ *   ATABEY_SANDBOX_ENABLED=true|false   (default: true when uid/gid resolvable)
+ */
+import { spawn } from "child_process";
+import { execFileSync } from "child_process";
+import os from "os";
+let cachedIdentity = null;
+function parseUint(value) {
+    if (value === undefined || value === "")
+        return undefined;
+    const n = Number.parseInt(value, 10);
+    if (!Number.isFinite(n) || n < 0)
+        return undefined;
+    return n;
+}
+function resolveUserIds(username) {
+    if (process.platform === "win32")
+        return {};
+    try {
+        const uidRaw = execFileSync("id", ["-u", username], {
+            encoding: "utf8",
+            timeout: 2000,
+            stdio: ["ignore", "pipe", "ignore"],
+        }).trim();
+        const gidRaw = execFileSync("id", ["-g", username], {
+            encoding: "utf8",
+            timeout: 2000,
+            stdio: ["ignore", "pipe", "ignore"],
+        }).trim();
+        return {
+            uid: parseUint(uidRaw),
+            gid: parseUint(gidRaw),
+        };
+    }
+    catch {
+        return {};
+    }
+}
+/**
+ * Resolve sandbox identity from env (cached).
+ * Call `clearSandboxIdentityCache()` in tests after env changes.
+ */
+export function resolveSandboxIdentity() {
+    if (cachedIdentity)
+        return cachedIdentity;
+    if (process.platform === "win32") {
+        cachedIdentity = {
+            enabled: false,
+            reason: "uid/gid isolation is not available on Windows",
+        };
+        return cachedIdentity;
+    }
+    const explicitOff = process.env.ATABEY_SANDBOX_ENABLED === "false" ||
+        process.env.ATABEY_SANDBOX_ENABLED === "0";
+    if (explicitOff) {
+        cachedIdentity = { enabled: false, reason: "ATABEY_SANDBOX_ENABLED=false" };
+        return cachedIdentity;
+    }
+    let uid = parseUint(process.env.ATABEY_SANDBOX_UID);
+    let gid = parseUint(process.env.ATABEY_SANDBOX_GID);
+    const user = process.env.ATABEY_SANDBOX_USER?.trim() || undefined;
+    if (user && (uid === undefined || gid === undefined)) {
+        const resolved = resolveUserIds(user);
+        uid = uid ?? resolved.uid;
+        gid = gid ?? resolved.gid;
+    }
+    // Never drop privileges to root (0) — that would be a no-op or worse
+    if (uid === 0) {
+        cachedIdentity = {
+            enabled: false,
+            reason: "ATABEY_SANDBOX_UID=0 (root) is refused",
+            uid,
+            gid,
+            user,
+        };
+        return cachedIdentity;
+    }
+    if (uid === undefined) {
+        // Optional: if current process is already non-root and no sandbox user
+        // configured, we leave sandbox disabled rather than inventing a user.
+        cachedIdentity = {
+            enabled: false,
+            reason: "No ATABEY_SANDBOX_UID / ATABEY_SANDBOX_USER configured — shell runs as current user",
+            user,
+        };
+        return cachedIdentity;
+    }
+    // Dropping privileges only works if we are root (or have CAP_SETUID).
+    // If we are a normal user with a different target uid, spawn will fail —
+    // detect and warn via reason, still pass options (caller sees Permission error).
+    const canSetUid = typeof process.getuid === "function" && process.getuid() === 0;
+    if (!canSetUid && typeof process.getuid === "function" && process.getuid() !== uid) {
+        cachedIdentity = {
+            enabled: false,
+            uid,
+            gid,
+            user,
+            reason: `Sandbox uid=${uid} requested but process uid=${process.getuid()} is not root; ` +
+                `setuid will fail. Run MCP as root with a dedicated sandbox user, or unset sandbox env.`,
+        };
+        return cachedIdentity;
+    }
+    cachedIdentity = {
+        enabled: true,
+        uid,
+        gid,
+        user,
+    };
+    return cachedIdentity;
+}
+export function clearSandboxIdentityCache() {
+    cachedIdentity = null;
+}
+/**
+ * Build spawn options with uid/gid when sandbox is active.
+ */
+export function applySandboxToSpawnOptions(options = {}) {
+    const { disableSandbox, ...rest } = options;
+    if (disableSandbox)
+        return { ...rest };
+    const identity = resolveSandboxIdentity();
+    if (!identity.enabled || identity.uid === undefined) {
+        return { ...rest };
+    }
+    return {
+        ...rest,
+        uid: identity.uid,
+        ...(identity.gid !== undefined ? { gid: identity.gid } : {}),
+    };
+}
+/**
+ * spawn() wrapper that applies OS sandbox identity when configured.
+ */
+export function sandboxSpawn(command, args, options = {}) {
+    const opts = applySandboxToSpawnOptions(options);
+    return spawn(command, args, opts);
+}
+/**
+ * Human-readable status for dashboard / CLI diagnostics.
+ */
+export function getSandboxStatus() {
+    return {
+        platform: process.platform,
+        identity: resolveSandboxIdentity(),
+        processUid: typeof process.getuid === "function" ? process.getuid() : null,
+        processGid: typeof process.getgid === "function" ? process.getgid() : null,
+    };
+}
+/** Default restricted paths agents should not touch even with shell allow-list. */
+export const SANDBOX_PROTECTED_HINTS = [
+    "/etc",
+    "/usr",
+    "/bin",
+    "/sbin",
+    "/System",
+    pathHomeDotSsh(),
+];
+function pathHomeDotSsh() {
+    try {
+        return `${os.homedir()}/.ssh`;
+    }
+    catch {
+        return "~/.ssh";
+    }
+}
+//# sourceMappingURL=sandbox.js.map

package/dist/shared/src/sandbox.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sandbox.js","sourceRoot":"","sources":["../../../../shared/src/sandbox.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;GAeG;AAEH,OAAO,EAAE,KAAK,EAA8B,MAAM,eAAe,CAAC;AAClE,OAAO,EAAE,YAAY,EAAE,MAAM,eAAe,CAAC;AAC7C,OAAO,EAAE,MAAM,IAAI,CAAC;AAgBpB,IAAI,cAAc,GAA2B,IAAI,CAAC;AAElD,SAAS,SAAS,CAAC,KAAyB;IACxC,IAAI,KAAK,KAAK,SAAS,IAAI,KAAK,KAAK,EAAE;QAAE,OAAO,SAAS,CAAC;IAC1D,MAAM,CAAC,GAAG,MAAM,CAAC,QAAQ,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;IACrC,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC;QAAE,OAAO,SAAS,CAAC;IACnD,OAAO,CAAC,CAAC;AACb,CAAC;AAED,SAAS,cAAc,CAAC,QAAgB;IACpC,IAAI,OAAO,CAAC,QAAQ,KAAK,OAAO;QAAE,OAAO,EAAE,CAAC;IAC5C,IAAI,CAAC;QACD,MAAM,MAAM,GAAG,YAAY,CAAC,IAAI,EAAE,CAAC,IAAI,EAAE,QAAQ,CAAC,EAAE;YAChD,QAAQ,EAAE,MAAM;YAChB,OAAO,EAAE,IAAI;YACb,KAAK,EAAE,CAAC,QAAQ,EAAE,MAAM,EAAE,QAAQ,CAAC;SACtC,CAAC,CAAC,IAAI,EAAE,CAAC;QACV,MAAM,MAAM,GAAG,YAAY,CAAC,IAAI,EAAE,CAAC,IAAI,EAAE,QAAQ,CAAC,EAAE;YAChD,QAAQ,EAAE,MAAM;YAChB,OAAO,EAAE,IAAI;YACb,KAAK,EAAE,CAAC,QAAQ,EAAE,MAAM,EAAE,QAAQ,CAAC;SACtC,CAAC,CAAC,IAAI,EAAE,CAAC;QACV,OAAO;YACH,GAAG,EAAE,SAAS,CAAC,MAAM,CAAC;YACtB,GAAG,EAAE,SAAS,CAAC,MAAM,CAAC;SACzB,CAAC;IACN,CAAC;IAAC,MAAM,CAAC;QACL,OAAO,EAAE,CAAC;IACd,CAAC;AACL,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,sBAAsB;IAClC,IAAI,cAAc;QAAE,OAAO,cAAc,CAAC;IAE1C,IAAI,OAAO,CAAC,QAAQ,KAAK,OAAO,EAAE,CAAC;QAC/B,cAAc,GAAG;YACb,OAAO,EAAE,KAAK;YACd,MAAM,EAAE,+CAA+C;SAC1D,CAAC;QACF,OAAO,cAAc,CAAC;IAC1B,CAAC;IAED,MAAM,WAAW,GACb,OAAO,CAAC,GAAG,CAAC,sBAAsB,KAAK,OAAO;QAC9C,OAAO,CAAC,GAAG,CAAC,sBAAsB,KAAK,GAAG,CAAC;IAC/C,IAAI,WAAW,EAAE,CAAC;QACd,cAAc,GAAG,EAAE,OAAO,EAAE,KAAK,EAAE,MAAM,EAAE,8BAA8B,EAAE,CAAC;QAC5E,OAAO,cAAc,CAAC;IAC1B,CAAC;IAED,IAAI,GAAG,GAAG,SAAS,CAAC,OAAO,CAAC,GAAG,CAAC,kBAAkB,CAAC,CAAC;IACpD,IAAI,GAAG,GAAG,SAAS,CAAC,OAAO,CAAC,GAAG,CAAC,kBAAkB,CAAC,CAAC;IACpD,MAAM,IAAI,GAAG,OAAO,CAAC,GAAG,CAAC,mBAAmB,EAAE,IAAI,EAAE,IAAI,SAAS,CAAC;IAElE,IAAI,IAAI,IAAI,CAAC,GAAG,KAAK,SAAS,IAAI,GAAG,KAAK,SAAS,CAAC,EAAE,CAAC;QACnD,MAAM,QAAQ,GAAG,cAAc,CAAC,IAAI,CAAC,CAAC;QACtC,GAAG,GAAG,GAAG,IAAI,QAAQ,CAAC,GAAG,CAAC;QAC1B,GAAG,GAAG,GAAG,IAAI,QAAQ,CAAC,GAAG,CAAC;IAC9B,CAAC;IAED,qEAAqE;IACrE,IAAI,GAAG,KAAK,CAAC,EAAE,CAAC;QACZ,cAAc,GAAG;YACb,OAAO,EAAE,KAAK;YACd,MAAM,EAAE,wCAAwC;YAChD,GAAG;YACH,GAAG;YACH,IAAI;SACP,CAAC;QACF,OAAO,cAAc,CAAC;IAC1B,CAAC;IAED,IAAI,GAAG,KAAK,SAAS,EAAE,CAAC;QACpB,uEAAuE;QACvE,sEAAsE;QACtE,cAAc,GAAG;YACb,OAAO,EAAE,KAAK;YACd,MAAM,EACF,qFAAqF;YACzF,IAAI;SACP,CAAC;QACF,OAAO,cAAc,CAAC;IAC1B,CAAC;IAED,sEAAsE;IACtE,yEAAyE;IACzE,iFAAiF;IACjF,MAAM,SAAS,GAAG,OAAO,OAAO,CAAC,MAAM,KAAK,UAAU,IAAI,OAAO,CAAC,MAAM,EAAE,KAAK,CAAC,CAAC;IACjF,IAAI,CAAC,SAAS,IAAI,OAAO,OAAO,CAAC,MAAM,KAAK,UAAU,IAAI,OAAO,CAAC,MAAM,EAAE,KAAK,GAAG,EAAE,CAAC;QACjF,cAAc,GAAG;YACb,OAAO,EAAE,KAAK;YACd,GAAG;YACH,GAAG;YACH,IAAI;YACJ,MAAM,EACF,eAAe,GAAG,8BAA8B,OAAO,CAAC,MAAM,EAAE,gBAAgB;gBAChF,wFAAwF;SAC/F,CAAC;QACF,OAAO,cAAc,CAAC;IAC1B,CAAC;IAED,cAAc,GAAG;QACb,OAAO,EAAE,IAAI;QACb,GAAG;QACH,GAAG;QACH,IAAI;KACP,CAAC;IACF,OAAO,cAAc,CAAC;AAC1B,CAAC;AAED,MAAM,UAAU,yBAAyB;IACrC,cAAc,GAAG,IAAI,CAAC;AAC1B,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,0BAA0B,CAAC,UAA+B,EAAE;IACxE,MAAM,EAAE,cAAc,EAAE,GAAG,IAAI,EAAE,GAAG,OAAO,CAAC;IAC5C,IAAI,cAAc;QAAE,OAAO,EAAE,GAAG,IAAI,EAAE,CAAC;IAEvC,MAAM,QAAQ,GAAG,sBAAsB,EAAE,CAAC;IAC1C,IAAI,CAAC,QAAQ,CAAC,OAAO,IAAI,QAAQ,CAAC,GAAG,KAAK,SAAS,EAAE,CAAC;QAClD,OAAO,EAAE,GAAG,IAAI,EAAE,CAAC;IACvB,CAAC;IAED,OAAO;QACH,GAAG,IAAI;QACP,GAAG,EAAE,QAAQ,CAAC,GAAG;QACjB,GAAG,CAAC,QAAQ,CAAC,GAAG,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,GAAG,EAAE,QAAQ,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KAC/D,CAAC;AACN,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,YAAY,CACxB,OAAe,EACf,IAAuB,EACvB,UAA+B,EAAE;IAEjC,MAAM,IAAI,GAAG,0BAA0B,CAAC,OAAO,CAAC,CAAC;IACjD,OAAO,KAAK,CAAC,OAAO,EAAE,IAAgB,EAAE,IAAI,CAAC,CAAC;AAClD,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,gBAAgB;IAM5B,OAAO;QACH,QAAQ,EAAE,OAAO,CAAC,QAAQ;QAC1B,QAAQ,EAAE,sBAAsB,EAAE;QAClC,UAAU,EAAE,OAAO,OAAO,CAAC,MAAM,KAAK,UAAU,CAAC,CAAC,CAAC,OAAO,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,IAAI;QAC1E,UAAU,EAAE,OAAO,OAAO,CAAC,MAAM,KAAK,UAAU,CAAC,CAAC,CAAC,OAAO,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,IAAI;KAC7E,CAAC;AACN,CAAC;AAED,mFAAmF;AACnF,MAAM,CAAC,MAAM,uBAAuB,GAAG;IACnC,MAAM;IACN,MAAM;IACN,MAAM;IACN,OAAO;IACP,SAAS;IACT,cAAc,EAAE;CACV,CAAC;AAEX,SAAS,cAAc;IACnB,IAAI,CAAC;QACD,OAAO,GAAG,EAAE,CAAC,OAAO,EAAE,OAAO,CAAC;IAClC,CAAC;IAAC,MAAM,CAAC;QACL,OAAO,QAAQ,CAAC;IACpB,CAAC;AACL,CAAC"}

package/dist/shared/src/worker-pool.d.ts

@@ -0,0 +1,52 @@
+/**
+ * In-Memory Worker Pool — worker_threads based, no Redis/BullMQ.
+ *
+ * Heavy / isolable work runs off the main thread. Concurrency is capped
+ * (default os.cpus().length) via an internal queue so RAM/CPU stay bounded.
+ *
+ * Thread-safety note: SQLite (better-sqlite3) bindings are NOT thread-safe.
+ * Worker threads MUST NOT access AtabeyStorage or any SQLite connection.
+ * Only CPU-bound isolable work (hash, tokenize, etc.) should be dispatched
+ * to the worker pool.
+ */
+export interface WorkerPoolOptions {
+    /** Max concurrent worker jobs. Default: os.cpus().length (clamped 1–16). */
+    maxConcurrency?: number;
+    /** Idle workers retained in the pool. Default: min(2, maxConcurrency). */
+    minWorkers?: number;
+    /** Per-job timeout in ms. Default: 30_000. */
+    jobTimeoutMs?: number;
+    /** Optional absolute path to worker script (tests / monorepo layouts). */
+    workerScript?: string;
+}
+export declare class WorkerPool {
+    private readonly maxConcurrency;
+    private readonly minWorkers;
+    private readonly jobTimeoutMs;
+    private readonly workerScript;
+    private readonly workers;
+    private readonly queue;
+    private readonly inflight;
+    private jobSeq;
+    private closed;
+    constructor(options?: WorkerPoolOptions);
+    /**
+     * Run a named job type on a worker thread.
+     * Returns when the worker posts a result (or on timeout/error).
+     */
+    run<T = unknown>(type: string, payload?: unknown): Promise<T>;
+    getStats(): {
+        maxConcurrency: number;
+        workers: number;
+        busy: number;
+        pending: number;
+        inflight: number;
+    };
+    close(): Promise<void>;
+    private failWorkerJob;
+    private spawnWorker;
+    private removeWorker;
+    private dispatch;
+}
+export declare function getDefaultWorkerPool(options?: WorkerPoolOptions): WorkerPool;
+export declare function resetDefaultWorkerPool(): Promise<void>;