atabey 0.0.37 → 0.1.0

package/dist/shared/src/modules/primitives/index.d.ts

@@ -0,0 +1,7 @@
+export * from "./constants.js";
+export * from "./types.js";
+export * from "./errors.js";
+export * from "./fs.js";
+export * from "./string.js";
+export * from "./time.js";
+export * from "./outbound-http.js";

package/dist/shared/src/modules/primitives/index.js

@@ -0,0 +1,8 @@
+export * from "./constants.js";
+export * from "./types.js";
+export * from "./errors.js";
+export * from "./fs.js";
+export * from "./string.js";
+export * from "./time.js";
+export * from "./outbound-http.js";
+//# sourceMappingURL=index.js.map

package/dist/shared/src/modules/primitives/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../../../../shared/src/modules/primitives/index.ts"],"names":[],"mappings":"AAAA,cAAc,gBAAgB,CAAC;AAC/B,cAAc,YAAY,CAAC;AAC3B,cAAc,aAAa,CAAC;AAC5B,cAAc,SAAS,CAAC;AACxB,cAAc,aAAa,CAAC;AAC5B,cAAc,WAAW,CAAC;AAC1B,cAAc,oBAAoB,CAAC"}

package/dist/shared/src/modules/primitives/outbound-http.d.ts

@@ -0,0 +1,32 @@
+/**
+ * Outbound HTTP(S) helper with TLS 1.3 / mTLS client-certificate support.
+ *
+ * Node's global `fetch` does not expose per-request client certificates, so
+ * Atabey tooling that performs outbound requests uses this `http`/`https`
+ * based transport instead. It performs a SINGLE request (no redirect
+ * following) and returns the raw response so callers can re-validate each hop
+ * (e.g. SSRF checks) before continuing.
+ */
+import http from "http";
+export interface OutboundRequestInput {
+    url: string;
+    method?: string;
+    headers?: Record<string, string>;
+    body?: string;
+    timeoutMs?: number;
+    /** Max response body bytes to buffer (default 5 MiB). */
+    maxBytes?: number;
+}
+export interface OutboundResponse {
+    status: number;
+    headers: http.IncomingHttpHeaders;
+    text: string;
+    /** Redirect target (from the Location header), if any. */
+    location?: string;
+    finalUrl: string;
+}
+/**
+ * Perform a single outbound request. TLS client options come from
+ * `resolveOutboundTlsOptions()` (ATABEY_TLS_CLIENT_* env vars).
+ */
+export declare function outboundRequest(input: OutboundRequestInput): Promise<OutboundResponse>;

package/dist/shared/src/modules/primitives/outbound-http.js

@@ -0,0 +1,88 @@
+/**
+ * Outbound HTTP(S) helper with TLS 1.3 / mTLS client-certificate support.
+ *
+ * Node's global `fetch` does not expose per-request client certificates, so
+ * Atabey tooling that performs outbound requests uses this `http`/`https`
+ * based transport instead. It performs a SINGLE request (no redirect
+ * following) and returns the raw response so callers can re-validate each hop
+ * (e.g. SSRF checks) before continuing.
+ */
+import http from "http";
+import https from "https";
+import { URL } from "url";
+import { resolveOutboundTlsOptions } from "../security/tls.js";
+/**
+ * Perform a single outbound request. TLS client options come from
+ * `resolveOutboundTlsOptions()` (ATABEY_TLS_CLIENT_* env vars).
+ */
+export function outboundRequest(input) {
+    return new Promise((resolve, reject) => {
+        let parsed;
+        try {
+            parsed = new URL(input.url);
+        }
+        catch {
+            reject(new Error(`Invalid URL: ${input.url}`));
+            return;
+        }
+        if (parsed.protocol !== "http:" && parsed.protocol !== "https:") {
+            reject(new Error(`Protocol '${parsed.protocol}' not supported (only http:/https:).`));
+            return;
+        }
+        const isHttps = parsed.protocol === "https:";
+        const mod = isHttps ? https : http;
+        const tls = isHttps ? resolveOutboundTlsOptions() : null;
+        const maxBytes = input.maxBytes ?? 5 * 1024 * 1024;
+        const requestOptions = {
+            protocol: parsed.protocol,
+            hostname: parsed.hostname,
+            port: parsed.port || (isHttps ? 443 : 80),
+            path: `${parsed.pathname}${parsed.search}`,
+            method: (input.method || "GET").toUpperCase(),
+            headers: {
+                // Avoid transparent compression so we buffer exactly what was sent.
+                "Accept-Encoding": "identity",
+                ...(input.headers || {}),
+            },
+        };
+        if (isHttps && tls) {
+            requestOptions.minVersion = tls.options.minVersion;
+            if (tls.options.cert)
+                requestOptions.cert = tls.options.cert;
+            if (tls.options.key)
+                requestOptions.key = tls.options.key;
+            if (tls.options.ca)
+                requestOptions.ca = tls.options.ca;
+            if (tls.options.servername)
+                requestOptions.servername = tls.options.servername;
+        }
+        const req = mod.request(requestOptions, (res) => {
+            const chunks = [];
+            let size = 0;
+            res.on("data", (chunk) => {
+                size += chunk.length;
+                if (size <= maxBytes)
+                    chunks.push(chunk);
+            });
+            res.on("end", () => {
+                resolve({
+                    status: res.statusCode || 0,
+                    headers: res.headers,
+                    text: Buffer.concat(chunks).toString("utf8"),
+                    location: typeof res.headers.location === "string" ? res.headers.location : undefined,
+                    finalUrl: input.url,
+                });
+            });
+            res.on("error", reject);
+        });
+        const timeoutMs = input.timeoutMs ?? 30000;
+        req.setTimeout(timeoutMs, () => {
+            req.destroy(new Error(`Outbound request timed out after ${timeoutMs}ms`));
+        });
+        req.on("error", reject);
+        if (input.body !== undefined)
+            req.write(input.body);
+        req.end();
+    });
+}
+//# sourceMappingURL=outbound-http.js.map

package/dist/shared/src/modules/primitives/outbound-http.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"outbound-http.js","sourceRoot":"","sources":["../../../../../../shared/src/modules/primitives/outbound-http.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAEH,OAAO,IAAI,MAAM,MAAM,CAAC;AACxB,OAAO,KAAK,MAAM,OAAO,CAAC;AAC1B,OAAO,EAAE,GAAG,EAAE,MAAM,KAAK,CAAC;AAC1B,OAAO,EAAE,yBAAyB,EAAE,MAAM,oBAAoB,CAAC;AAqB/D;;;GAGG;AACH,MAAM,UAAU,eAAe,CAAC,KAA2B;IACvD,OAAO,IAAI,OAAO,CAAmB,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;QACrD,IAAI,MAAW,CAAC;QAChB,IAAI,CAAC;YACD,MAAM,GAAG,IAAI,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;QAChC,CAAC;QAAC,MAAM,CAAC;YACL,MAAM,CAAC,IAAI,KAAK,CAAC,gBAAgB,KAAK,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC;YAC/C,OAAO;QACX,CAAC;QACD,IAAI,MAAM,CAAC,QAAQ,KAAK,OAAO,IAAI,MAAM,CAAC,QAAQ,KAAK,QAAQ,EAAE,CAAC;YAC9D,MAAM,CAAC,IAAI,KAAK,CAAC,aAAa,MAAM,CAAC,QAAQ,sCAAsC,CAAC,CAAC,CAAC;YACtF,OAAO;QACX,CAAC;QAED,MAAM,OAAO,GAAG,MAAM,CAAC,QAAQ,KAAK,QAAQ,CAAC;QAC7C,MAAM,GAAG,GAAG,OAAO,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC;QACnC,MAAM,GAAG,GAAG,OAAO,CAAC,CAAC,CAAC,yBAAyB,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC;QACzD,MAAM,QAAQ,GAAG,KAAK,CAAC,QAAQ,IAAI,CAAC,GAAG,IAAI,GAAG,IAAI,CAAC;QAEnD,MAAM,cAAc,GAAyB;YACzC,QAAQ,EAAE,MAAM,CAAC,QAAQ;YACzB,QAAQ,EAAE,MAAM,CAAC,QAAQ;YACzB,IAAI,EAAE,MAAM,CAAC,IAAI,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC;YACzC,IAAI,EAAE,GAAG,MAAM,CAAC,QAAQ,GAAG,MAAM,CAAC,MAAM,EAAE;YAC1C,MAAM,EAAE,CAAC,KAAK,CAAC,MAAM,IAAI,KAAK,CAAC,CAAC,WAAW,EAAE;YAC7C,OAAO,EAAE;gBACL,oEAAoE;gBACpE,iBAAiB,EAAE,UAAU;gBAC7B,GAAG,CAAC,KAAK,CAAC,OAAO,IAAI,EAAE,CAAC;aAC3B;SACJ,CAAC;QAEF,IAAI,OAAO,IAAI,GAAG,EAAE,CAAC;YACjB,cAAc,CAAC,UAAU,GAAG,GAAG,CAAC,OAAO,CAAC,UAAU,CAAC;YACnD,IAAI,GAAG,CAAC,OAAO,CAAC,IAAI;gBAAE,cAAc,CAAC,IAAI,GAAG,GAAG,CAAC,OAAO,CAAC,IAAI,CAAC;YAC7D,IAAI,GAAG,CAAC,OAAO,CAAC,GAAG;gBAAE,cAAc,CAAC,GAAG,GAAG,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC;YAC1D,IAAI,GAAG,CAAC,OAAO,CAAC,EAAE;gBAAE,cAAc,CAAC,EAAE,GAAG,GAAG,CAAC,OAAO,CAAC,EAAE,CAAC;YACvD,IAAI,GAAG,CAAC,OAAO,CAAC,UAAU;gBAAE,cAAc,CAAC,UAAU,GAAG,GAAG,CAAC,OAAO,CAAC,UAAU,CAAC;QACnF,CAAC;QAED,MAAM,GAAG,GAAG,GAAG,CAAC,OAAO,CAAC,cAAc,EAAE,CAAC,GAAG,EAAE,EAAE;YAC5C,MAAM,MAAM,GAAa,EAAE,CAAC;YAC5B,IAAI,IAAI,GAAG,CAAC,CAAC;YACb,GAAG,CAAC,EAAE,CAAC,MAAM,EAAE,CAAC,KAAa,EAAE,EAAE;gBAC7B,IAAI,IAAI,KAAK,CAAC,MAAM,CAAC;gBACrB,IAAI,IAAI,IAAI,QAAQ;oBAAE,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;YAC7C,CAAC,CAAC,CAAC;YACH,GAAG,CAAC,EAAE,CAAC,KAAK,EAAE,GAAG,EAAE;gBACf,OAAO,CAAC;oBACJ,MAAM,EAAE,GAAG,CAAC,UAAU,IAAI,CAAC;oBAC3B,OAAO,EAAE,GAAG,CAAC,OAAO;oBACpB,IAAI,EAAE,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC;oBAC5C,QAAQ,EAAE,OAAO,GAAG,CAAC,OAAO,CAAC,QAAQ,KAAK,QAAQ,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC,CAAC,SAAS;oBACrF,QAAQ,EAAE,KAAK,CAAC,GAAG;iBACtB,CAAC,CAAC;YACP,CAAC,CAAC,CAAC;YACH,GAAG,CAAC,EAAE,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;QAC5B,CAAC,CAAC,CAAC;QAEH,MAAM,SAAS,GAAG,KAAK,CAAC,SAAS,IAAI,KAAK,CAAC;QAC3C,GAAG,CAAC,UAAU,CAAC,SAAS,EAAE,GAAG,EAAE;YAC3B,GAAG,CAAC,OAAO,CAAC,IAAI,KAAK,CAAC,oCAAoC,SAAS,IAAI,CAAC,CAAC,CAAC;QAC9E,CAAC,CAAC,CAAC;QACH,GAAG,CAAC,EAAE,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;QAExB,IAAI,KAAK,CAAC,IAAI,KAAK,SAAS;YAAE,GAAG,CAAC,KAAK,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;QACpD,GAAG,CAAC,GAAG,EAAE,CAAC;IACd,CAAC,CAAC,CAAC;AACP,CAAC"}

package/dist/shared/src/modules/primitives/string.d.ts

@@ -0,0 +1 @@
+export declare function stripMarkdownCodeBlocks(text: string): string;

package/dist/shared/src/modules/primitives/string.js

@@ -0,0 +1,30 @@
+export function stripMarkdownCodeBlocks(text) {
+    // Regex to find markdown code blocks (```lang ... ```) and extract their content.
+    // Handles cases where LLMs might wrap JSON in such blocks.
+    const markdownCodeBlockRegex = /```(?:\w+)?\s*([\s\S]*?)\s*```/g;
+    // Attempt to extract content from a single markdown code block.
+    const cleanedText = text.replace(markdownCodeBlockRegex, "$1").trim();
+    // If after stripping, it looks like JSON, return it.
+    if ((cleanedText.startsWith("{") && cleanedText.endsWith("}")) || (cleanedText.startsWith("[") && cleanedText.endsWith("]"))) {
+        return cleanedText;
+    }
+    // Fallback: If the original text itself was valid JSON (without being in a code block)
+    // or if the stripping made it valid, this check helps.
+    try {
+        JSON.parse(text.trim());
+        return text.trim(); // Original text was valid JSON
+    }
+    catch {
+        // Continue if original text wasn't valid JSON
+    }
+    // Try a more specific JSON code block extraction if the generic one didn't yield valid JSON
+    const specificJsonCodeBlockRegex = /```json\s*(\{[\s\S]*?\}|\[[\s\S]*?\])\s*```/g;
+    const specificMatch = text.match(specificJsonCodeBlockRegex);
+    if (specificMatch && specificMatch[1]) {
+        return specificMatch[1].trim();
+    }
+    // If all else fails, return the most aggressively stripped version.
+    // JSON.parse will fail if it's not valid, which is the expected behavior.
+    return cleanedText;
+}
+//# sourceMappingURL=string.js.map

package/dist/shared/src/modules/primitives/string.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"string.js","sourceRoot":"","sources":["../../../../../../shared/src/modules/primitives/string.ts"],"names":[],"mappings":"AAAA,MAAM,UAAU,uBAAuB,CAAC,IAAY;IAChD,kFAAkF;IAClF,2DAA2D;IAC3D,MAAM,sBAAsB,GAAG,iCAAiC,CAAC;IAEjE,gEAAgE;IAChE,MAAM,WAAW,GAAG,IAAI,CAAC,OAAO,CAAC,sBAAsB,EAAE,IAAI,CAAC,CAAC,IAAI,EAAE,CAAC;IAEtE,qDAAqD;IACrD,IAAI,CAAC,WAAW,CAAC,UAAU,CAAC,GAAG,CAAC,IAAI,WAAW,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,WAAW,CAAC,UAAU,CAAC,GAAG,CAAC,IAAI,WAAW,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,EAAE,CAAC;QAC3H,OAAO,WAAW,CAAC;IACvB,CAAC;IAED,uFAAuF;IACvF,uDAAuD;IACvD,IAAI,CAAC;QACD,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC,CAAC;QACxB,OAAO,IAAI,CAAC,IAAI,EAAE,CAAC,CAAC,+BAA+B;IACvD,CAAC;IAAC,MAAM,CAAC;QACL,8CAA8C;IAClD,CAAC;IAED,4FAA4F;IAC5F,MAAM,0BAA0B,GAAG,8CAA8C,CAAC;IAClF,MAAM,aAAa,GAAG,IAAI,CAAC,KAAK,CAAC,0BAA0B,CAAC,CAAC;IAC7D,IAAI,aAAa,IAAI,aAAa,CAAC,CAAC,CAAC,EAAE,CAAC;QACpC,OAAO,aAAa,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;IACnC,CAAC;IAED,oEAAoE;IACpE,0EAA0E;IAC1E,OAAO,WAAW,CAAC;AACvB,CAAC"}

package/dist/shared/src/modules/primitives/time.d.ts

@@ -0,0 +1,5 @@
+/**
+ * Time and unique ID utilities shared across Atabey CLI and MCP servers.
+ */
+export declare function generateULID(seedTime?: number, seed?: number): string;
+export declare function sleep(ms: number): void;

package/dist/shared/src/modules/primitives/time.js

@@ -0,0 +1,35 @@
+/**
+ * Time and unique ID utilities shared across Atabey CLI and MCP servers.
+ */
+import crypto from "crypto";
+export function generateULID(seedTime = Date.now(), seed) {
+    const ENCODING = "0123456789ABCDEFGHJKMNPQRSTVWXYZ";
+    const ENCODING_LEN = ENCODING.length;
+    let time = seedTime;
+    const timeChars = new Array(10);
+    for (let i = 9; i >= 0; i--) {
+        timeChars[i] = ENCODING.charAt(time % ENCODING_LEN);
+        time = Math.floor(time / ENCODING_LEN);
+    }
+    const randomChars = new Array(16);
+    if (seed !== undefined) {
+        // Deterministic (test/seed) path — legacy LCG for reproducibility.
+        let pseudoRandom = seed;
+        for (let i = 0; i < 16; i++) {
+            pseudoRandom = (pseudoRandom * 16807) % 2147483647;
+            randomChars[i] = ENCODING.charAt(pseudoRandom % ENCODING_LEN);
+        }
+    }
+    else {
+        // Cryptographically strong randomness (no Math.random collisions).
+        const bytes = crypto.randomBytes(16);
+        for (let i = 0; i < 16; i++) {
+            randomChars[i] = ENCODING.charAt(bytes[i] % ENCODING_LEN);
+        }
+    }
+    return timeChars.join("") + randomChars.join("");
+}
+export function sleep(ms) {
+    Atomics.wait(new Int32Array(new SharedArrayBuffer(4)), 0, 0, ms);
+}
+//# sourceMappingURL=time.js.map

package/dist/shared/src/modules/primitives/time.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"time.js","sourceRoot":"","sources":["../../../../../../shared/src/modules/primitives/time.ts"],"names":[],"mappings":"AAAA;;GAEG;AAEH,OAAO,MAAM,MAAM,QAAQ,CAAC;AAE5B,MAAM,UAAU,YAAY,CAAC,QAAQ,GAAG,IAAI,CAAC,GAAG,EAAE,EAAE,IAAa;IAC7D,MAAM,QAAQ,GAAG,kCAAkC,CAAC;IACpD,MAAM,YAAY,GAAG,QAAQ,CAAC,MAAM,CAAC;IACrC,IAAI,IAAI,GAAG,QAAQ,CAAC;IACpB,MAAM,SAAS,GAAG,IAAI,KAAK,CAAC,EAAE,CAAC,CAAC;IAChC,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,IAAI,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC;QAC1B,SAAS,CAAC,CAAC,CAAC,GAAG,QAAQ,CAAC,MAAM,CAAC,IAAI,GAAG,YAAY,CAAC,CAAC;QACpD,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,GAAG,YAAY,CAAC,CAAC;IAC3C,CAAC;IACD,MAAM,WAAW,GAAG,IAAI,KAAK,CAAC,EAAE,CAAC,CAAC;IAClC,IAAI,IAAI,KAAK,SAAS,EAAE,CAAC;QACrB,mEAAmE;QACnE,IAAI,YAAY,GAAG,IAAI,CAAC;QACxB,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,EAAE,EAAE,CAAC,EAAE,EAAE,CAAC;YAC1B,YAAY,GAAG,CAAC,YAAY,GAAG,KAAK,CAAC,GAAG,UAAU,CAAC;YACnD,WAAW,CAAC,CAAC,CAAC,GAAG,QAAQ,CAAC,MAAM,CAAC,YAAY,GAAG,YAAY,CAAC,CAAC;QAClE,CAAC;IACL,CAAC;SAAM,CAAC;QACJ,mEAAmE;QACnE,MAAM,KAAK,GAAG,MAAM,CAAC,WAAW,CAAC,EAAE,CAAC,CAAC;QACrC,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,EAAE,EAAE,CAAC,EAAE,EAAE,CAAC;YAC1B,WAAW,CAAC,CAAC,CAAC,GAAG,QAAQ,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,GAAG,YAAY,CAAC,CAAC;QAC9D,CAAC;IACL,CAAC;IACD,OAAO,SAAS,CAAC,IAAI,CAAC,EAAE,CAAC,GAAG,WAAW,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;AACrD,CAAC;AAED,MAAM,UAAU,KAAK,CAAC,EAAU;IAC5B,OAAO,CAAC,IAAI,CAAC,IAAI,UAAU,CAAC,IAAI,iBAAiB,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC;AACrE,CAAC"}

package/dist/shared/src/modules/primitives/types.d.ts

@@ -0,0 +1,27 @@
+/**
+ * Atabey Framework — Internal Branded Types
+ * Used to enforce absolute type safety within the core orchestration logic.
+ */
+export type Brand<K, T> = K & {
+    __brand: T;
+};
+export type TraceID = Brand<string, "TraceID">;
+export type AgentID = Brand<string, "AgentID">;
+export type PhaseID = Brand<string, "PhaseID">;
+export type ProjectPath = Brand<string, "ProjectPath">;
+export type MessageID = Brand<number, "MessageID">;
+export type TaskID = Brand<string, "TaskID">;
+export type LogID = Brand<number, "LogID">;
+export type PlanID = Brand<string, "PlanID">;
+/**
+ * Casts a raw string to a Branded Type.
+ * Use this only at the boundaries of the system.
+ */
+export declare function asTraceID(val: string): TraceID;
+export declare function asAgentID(val: string): AgentID;
+export declare function asPhaseID(val: string): PhaseID;
+export declare function asProjectPath(val: string): ProjectPath;
+export declare function asMessageID(val: number): MessageID;
+export declare function asTaskID(val: string): TaskID;
+export declare function asLogID(val: number): LogID;
+export declare function asPlanID(val: string): PlanID;

package/dist/shared/src/modules/primitives/types.js

@@ -0,0 +1,17 @@
+/**
+ * Atabey Framework — Internal Branded Types
+ * Used to enforce absolute type safety within the core orchestration logic.
+ */
+/**
+ * Casts a raw string to a Branded Type.
+ * Use this only at the boundaries of the system.
+ */
+export function asTraceID(val) { return val; }
+export function asAgentID(val) { return val; }
+export function asPhaseID(val) { return val; }
+export function asProjectPath(val) { return val; }
+export function asMessageID(val) { return val; }
+export function asTaskID(val) { return val; }
+export function asLogID(val) { return val; }
+export function asPlanID(val) { return val; }
+//# sourceMappingURL=types.js.map

package/dist/shared/src/modules/primitives/types.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.js","sourceRoot":"","sources":["../../../../../../shared/src/modules/primitives/types.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAaH;;;GAGG;AACH,MAAM,UAAU,SAAS,CAAC,GAAW,IAAa,OAAO,GAAc,CAAC,CAAC,CAAC;AAC1E,MAAM,UAAU,SAAS,CAAC,GAAW,IAAa,OAAO,GAAc,CAAC,CAAC,CAAC;AAC1E,MAAM,UAAU,SAAS,CAAC,GAAW,IAAa,OAAO,GAAc,CAAC,CAAC,CAAC;AAC1E,MAAM,UAAU,aAAa,CAAC,GAAW,IAAiB,OAAO,GAAkB,CAAC,CAAC,CAAC;AACtF,MAAM,UAAU,WAAW,CAAC,GAAW,IAAe,OAAO,GAAgB,CAAC,CAAC,CAAC;AAChF,MAAM,UAAU,QAAQ,CAAC,GAAW,IAAY,OAAO,GAAa,CAAC,CAAC,CAAC;AACvE,MAAM,UAAU,OAAO,CAAC,GAAW,IAAW,OAAO,GAAY,CAAC,CAAC,CAAC;AACpE,MAAM,UAAU,QAAQ,CAAC,GAAW,IAAY,OAAO,GAAa,CAAC,CAAC,CAAC"}

package/dist/shared/src/modules/sandbox/index.d.ts

@@ -0,0 +1,3 @@
+export * from "./sandbox.js";
+export * from "./sandbox-fs.js";
+export * from "./sandbox-runtime.js";

package/dist/shared/src/modules/sandbox/index.js

@@ -0,0 +1,4 @@
+export * from "./sandbox.js";
+export * from "./sandbox-fs.js";
+export * from "./sandbox-runtime.js";
+//# sourceMappingURL=index.js.map

package/dist/shared/src/modules/sandbox/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../../../../shared/src/modules/sandbox/index.ts"],"names":[],"mappings":"AAAA,cAAc,cAAc,CAAC;AAC7B,cAAc,iBAAiB,CAAC;AAChC,cAAc,sBAAsB,CAAC"}

package/dist/shared/src/modules/sandbox/sandbox-fs.d.ts

@@ -0,0 +1,28 @@
+/**
+ * Sandboxed filesystem mutations — Phase 1.2.
+ *
+ * - Always holds AtomicFileLock (try/finally).
+ * - When runtime=container: write via container stdin → /workspace/<path>
+ * - When runtime=uid|none: write on host under projectRoot (safePath caller responsibility)
+ * - ATABEY_SANDBOX_REQUIRED=true rejects writes if isolation is none
+ */
+import { type SandboxRuntimeConfig } from "./sandbox-runtime.js";
+export interface SandboxFsWriteResult {
+    absolutePath: string;
+    relativePath: string;
+    runtime: SandboxRuntimeConfig["effectiveMode"];
+    isolationLabel: string;
+    bytes: number;
+}
+/**
+ * Normalize user path to a project-relative POSIX path.
+ * Absolute paths are accepted only if they resolve inside projectRoot.
+ */
+export declare function assertSafeRelativePath(userPath: string, projectRoot?: string): string;
+/**
+ * Write file content under project root using the active local sandbox runtime.
+ */
+export declare function writeFileInSandbox(projectRoot: string, userPath: string, content: string, options?: {
+    ownerId?: string;
+    timeoutMs?: number;
+}): Promise<SandboxFsWriteResult>;

package/dist/shared/src/modules/sandbox/sandbox-fs.js

@@ -0,0 +1,143 @@
+/**
+ * Sandboxed filesystem mutations — Phase 1.2.
+ *
+ * - Always holds AtomicFileLock (try/finally).
+ * - When runtime=container: write via container stdin → /workspace/<path>
+ * - When runtime=uid|none: write on host under projectRoot (safePath caller responsibility)
+ * - ATABEY_SANDBOX_REQUIRED=true rejects writes if isolation is none
+ */
+import fs from "fs";
+import path from "path";
+import crypto from "crypto";
+import { AtomicFileLock } from "../concurrency/file-lock.js";
+import { resolveSandboxRuntimeConfig, SandboxRequiredError, } from "./sandbox-runtime.js";
+/**
+ * Normalize user path to a project-relative POSIX path.
+ * Absolute paths are accepted only if they resolve inside projectRoot.
+ */
+export function assertSafeRelativePath(userPath, projectRoot) {
+    if (!userPath || !userPath.trim()) {
+        throw new Error("[SANDBOX_FS] Empty path is not allowed");
+    }
+    const trimmed = userPath.trim();
+    if (trimmed.includes("\0")) {
+        throw new Error("[SANDBOX_FS] Illegal null byte in path");
+    }
+    let rel = trimmed.replace(/\\/g, "/");
+    // Absolute path → must live under projectRoot
+    if (path.isAbsolute(trimmed) || rel.startsWith("/")) {
+        if (!projectRoot) {
+            throw new Error(`[SANDBOX_FS] Absolute paths require projectRoot: "${userPath}"`);
+        }
+        const root = path.resolve(projectRoot);
+        const abs = path.resolve(trimmed);
+        const rootCheck = process.platform === "win32" ? root.toLowerCase() : root;
+        const absCheck = process.platform === "win32" ? abs.toLowerCase() : abs;
+        if (!absCheck.startsWith(rootCheck + path.sep) && absCheck !== rootCheck) {
+            throw new Error(`[SANDBOX_FS] Absolute path escapes project root: "${userPath}"`);
+        }
+        rel = path.relative(root, abs).replace(/\\/g, "/");
+        if (!rel || rel === ".") {
+            throw new Error("[SANDBOX_FS] Path resolves to project root; refuse write");
+        }
+        if (rel.startsWith("..")) {
+            throw new Error(`[SANDBOX_FS] Path traversal denied: "${userPath}"`);
+        }
+        return rel;
+    }
+    // Relative: reject .. segments
+    const parts = [];
+    for (const seg of rel.split("/")) {
+        if (!seg || seg === ".")
+            continue;
+        if (seg === "..") {
+            throw new Error(`[SANDBOX_FS] Path traversal denied: "${userPath}"`);
+        }
+        parts.push(seg);
+    }
+    if (parts.length === 0) {
+        throw new Error("[SANDBOX_FS] Path resolves to project root; refuse write");
+    }
+    return parts.join("/");
+}
+function createLock(projectRoot) {
+    return new AtomicFileLock({
+        projectRoot,
+        locksDir: path.join(projectRoot, ".atabey", "locks"),
+        ttlMs: 5 * 60 * 1000,
+        timeoutMs: 15_000,
+    });
+}
+function hostWriteAtomic(absolutePath, content) {
+    const dir = path.dirname(absolutePath);
+    if (!fs.existsSync(dir)) {
+        fs.mkdirSync(dir, { recursive: true });
+    }
+    // Write exact bytes (callers decide trailing newline — patch/replace need fidelity)
+    const tempPath = `${absolutePath}.${crypto.randomBytes(6).toString("hex")}.tmp`;
+    try {
+        fs.writeFileSync(tempPath, content, "utf8");
+        fs.renameSync(tempPath, absolutePath);
+    }
+    catch (err) {
+        try {
+            if (fs.existsSync(tempPath))
+                fs.unlinkSync(tempPath);
+        }
+        catch { /* ignore */ }
+        throw err;
+    }
+}
+/**
+ * Reject writes whose real (symlink-resolved) path escapes the project root.
+ * Lexical checks alone are defeated by a symlink inside the project that
+ * points at e.g. ~/.ssh/authorized_keys.
+ */
+function assertRealPathInsideRoot(absolutePath, root) {
+    const realRoot = fs.existsSync(root) ? fs.realpathSync(root) : root;
+    let probe = absolutePath;
+    while (probe !== path.dirname(probe)) {
+        if (fs.existsSync(probe)) {
+            const real = fs.realpathSync(probe) + absolutePath.slice(probe.length);
+            if (real !== realRoot && !real.startsWith(realRoot + path.sep)) {
+                throw new Error(`[SANDBOX_FS] Symlink escape denied: "${absolutePath}"`);
+            }
+            return;
+        }
+        probe = path.dirname(probe);
+    }
+}
+/**
+ * Write file content under project root using the active local sandbox runtime.
+ */
+export async function writeFileInSandbox(projectRoot, userPath, content, options) {
+    const root = path.resolve(projectRoot);
+    const relativePath = assertSafeRelativePath(userPath, root);
+    const absolutePath = path.resolve(root, relativePath);
+    if (!absolutePath.startsWith(root + path.sep) && absolutePath !== root) {
+        throw new Error(`[SANDBOX_FS] Resolved path escapes project root: "${userPath}"`);
+    }
+    assertRealPathInsideRoot(absolutePath, root);
+    const cfg = resolveSandboxRuntimeConfig(root, options?.timeoutMs);
+    if (cfg.required && cfg.effectiveMode === "none") {
+        throw new SandboxRequiredError("[SANDBOX_REQUIRED] File write blocked: no OS sandbox isolation available. " +
+            "Set ATABEY_SANDBOX_RUNTIME=seatbelt or uid, or disable ATABEY_SANDBOX_REQUIRED.");
+    }
+    const owner = options?.ownerId || process.env.ATABEY_ACTIVE_AGENT || "mcp-writer";
+    const lock = createLock(root);
+    return lock.withLock(relativePath, owner, async () => {
+        hostWriteAtomic(absolutePath, content);
+        return {
+            absolutePath,
+            relativePath,
+            runtime: cfg.effectiveMode,
+            isolationLabel: cfg.effectiveMode === "seatbelt"
+                ? "seatbelt host write (project-bound)"
+                : cfg.effectiveMode === "uid"
+                    ? "uid host write (project-bound)"
+                    : "host write (project-bound)",
+            bytes: Buffer.byteLength(content, "utf8"),
+        };
+    });
+}
+//# sourceMappingURL=sandbox-fs.js.map

package/dist/shared/src/modules/sandbox/sandbox-fs.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sandbox-fs.js","sourceRoot":"","sources":["../../../../../../shared/src/modules/sandbox/sandbox-fs.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAEH,OAAO,EAAE,MAAM,IAAI,CAAC;AACpB,OAAO,IAAI,MAAM,MAAM,CAAC;AACxB,OAAO,MAAM,MAAM,QAAQ,CAAC;AAC5B,OAAO,EAAE,cAAc,EAAE,MAAM,6BAA6B,CAAC;AAC7D,OAAO,EACH,2BAA2B,EAC3B,oBAAoB,GAEvB,MAAM,sBAAsB,CAAC;AAU9B;;;GAGG;AACH,MAAM,UAAU,sBAAsB,CAAC,QAAgB,EAAE,WAAoB;IACzE,IAAI,CAAC,QAAQ,IAAI,CAAC,QAAQ,CAAC,IAAI,EAAE,EAAE,CAAC;QAChC,MAAM,IAAI,KAAK,CAAC,wCAAwC,CAAC,CAAC;IAC9D,CAAC;IACD,MAAM,OAAO,GAAG,QAAQ,CAAC,IAAI,EAAE,CAAC;IAChC,IAAI,OAAO,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAC;QACzB,MAAM,IAAI,KAAK,CAAC,wCAAwC,CAAC,CAAC;IAC9D,CAAC;IAED,IAAI,GAAG,GAAG,OAAO,CAAC,OAAO,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC;IAEtC,8CAA8C;IAC9C,IAAI,IAAI,CAAC,UAAU,CAAC,OAAO,CAAC,IAAI,GAAG,CAAC,UAAU,CAAC,GAAG,CAAC,EAAE,CAAC;QAClD,IAAI,CAAC,WAAW,EAAE,CAAC;YACf,MAAM,IAAI,KAAK,CAAC,qDAAqD,QAAQ,GAAG,CAAC,CAAC;QACtF,CAAC;QACD,MAAM,IAAI,GAAG,IAAI,CAAC,OAAO,CAAC,WAAW,CAAC,CAAC;QACvC,MAAM,GAAG,GAAG,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC;QAClC,MAAM,SAAS,GAAG,OAAO,CAAC,QAAQ,KAAK,OAAO,CAAC,CAAC,CAAC,IAAI,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC;QAC3E,MAAM,QAAQ,GAAG,OAAO,CAAC,QAAQ,KAAK,OAAO,CAAC,CAAC,CAAC,GAAG,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC;QACxE,IAAI,CAAC,QAAQ,CAAC,UAAU,CAAC,SAAS,GAAG,IAAI,CAAC,GAAG,CAAC,IAAI,QAAQ,KAAK,SAAS,EAAE,CAAC;YACvE,MAAM,IAAI,KAAK,CAAC,qDAAqD,QAAQ,GAAG,CAAC,CAAC;QACtF,CAAC;QACD,GAAG,GAAG,IAAI,CAAC,QAAQ,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC,OAAO,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC;QACnD,IAAI,CAAC,GAAG,IAAI,GAAG,KAAK,GAAG,EAAE,CAAC;YACtB,MAAM,IAAI,KAAK,CAAC,0DAA0D,CAAC,CAAC;QAChF,CAAC;QACD,IAAI,GAAG,CAAC,UAAU,CAAC,IAAI,CAAC,EAAE,CAAC;YACvB,MAAM,IAAI,KAAK,CAAC,wCAAwC,QAAQ,GAAG,CAAC,CAAC;QACzE,CAAC;QACD,OAAO,GAAG,CAAC;IACf,CAAC;IAED,+BAA+B;IAC/B,MAAM,KAAK,GAAa,EAAE,CAAC;IAC3B,KAAK,MAAM,GAAG,IAAI,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,EAAE,CAAC;QAC/B,IAAI,CAAC,GAAG,IAAI,GAAG,KAAK,GAAG;YAAE,SAAS;QAClC,IAAI,GAAG,KAAK,IAAI,EAAE,CAAC;YACf,MAAM,IAAI,KAAK,CAAC,wCAAwC,QAAQ,GAAG,CAAC,CAAC;QACzE,CAAC;QACD,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IACpB,CAAC;IACD,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACrB,MAAM,IAAI,KAAK,CAAC,0DAA0D,CAAC,CAAC;IAChF,CAAC;IACD,OAAO,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;AAC3B,CAAC;AAED,SAAS,UAAU,CAAC,WAAmB;IACnC,OAAO,IAAI,cAAc,CAAC;QACtB,WAAW;QACX,QAAQ,EAAE,IAAI,CAAC,IAAI,CAAC,WAAW,EAAE,SAAS,EAAE,OAAO,CAAC;QACpD,KAAK,EAAE,CAAC,GAAG,EAAE,GAAG,IAAI;QACpB,SAAS,EAAE,MAAM;KACpB,CAAC,CAAC;AACP,CAAC;AAED,SAAS,eAAe,CAAC,YAAoB,EAAE,OAAe;IAC1D,MAAM,GAAG,GAAG,IAAI,CAAC,OAAO,CAAC,YAAY,CAAC,CAAC;IACvC,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,GAAG,CAAC,EAAE,CAAC;QACtB,EAAE,CAAC,SAAS,CAAC,GAAG,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IAC3C,CAAC;IACD,oFAAoF;IACpF,MAAM,QAAQ,GAAG,GAAG,YAAY,IAAI,MAAM,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,MAAM,CAAC;IAChF,IAAI,CAAC;QACD,EAAE,CAAC,aAAa,CAAC,QAAQ,EAAE,OAAO,EAAE,MAAM,CAAC,CAAC;QAC5C,EAAE,CAAC,UAAU,CAAC,QAAQ,EAAE,YAAY,CAAC,CAAC;IAC1C,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACX,IAAI,CAAC;YAAC,IAAI,EAAE,CAAC,UAAU,CAAC,QAAQ,CAAC;gBAAE,EAAE,CAAC,UAAU,CAAC,QAAQ,CAAC,CAAC;QAAC,CAAC;QAAC,MAAM,CAAC,CAAC,YAAY,CAAC,CAAC;QACpF,MAAM,GAAG,CAAC;IACd,CAAC;AACL,CAAC;AAED;;;;GAIG;AACH,SAAS,wBAAwB,CAAC,YAAoB,EAAE,IAAY;IAChE,MAAM,QAAQ,GAAG,EAAE,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,YAAY,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;IACpE,IAAI,KAAK,GAAG,YAAY,CAAC;IACzB,OAAO,KAAK,KAAK,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;QACnC,IAAI,EAAE,CAAC,UAAU,CAAC,KAAK,CAAC,EAAE,CAAC;YACvB,MAAM,IAAI,GAAG,EAAE,CAAC,YAAY,CAAC,KAAK,CAAC,GAAG,YAAY,CAAC,KAAK,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;YACvE,IAAI,IAAI,KAAK,QAAQ,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,QAAQ,GAAG,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC;gBAC7D,MAAM,IAAI,KAAK,CAAC,wCAAwC,YAAY,GAAG,CAAC,CAAC;YAC7E,CAAC;YACD,OAAO;QACX,CAAC;QACD,KAAK,GAAG,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;IAChC,CAAC;AACL,CAAC;AAED;;GAEG;AACH,MAAM,CAAC,KAAK,UAAU,kBAAkB,CACpC,WAAmB,EACnB,QAAgB,EAChB,OAAe,EACf,OAAkD;IAElD,MAAM,IAAI,GAAG,IAAI,CAAC,OAAO,CAAC,WAAW,CAAC,CAAC;IACvC,MAAM,YAAY,GAAG,sBAAsB,CAAC,QAAQ,EAAE,IAAI,CAAC,CAAC;IAC5D,MAAM,YAAY,GAAG,IAAI,CAAC,OAAO,CAAC,IAAI,EAAE,YAAY,CAAC,CAAC;IACtD,IAAI,CAAC,YAAY,CAAC,UAAU,CAAC,IAAI,GAAG,IAAI,CAAC,GAAG,CAAC,IAAI,YAAY,KAAK,IAAI,EAAE,CAAC;QACrE,MAAM,IAAI,KAAK,CAAC,qDAAqD,QAAQ,GAAG,CAAC,CAAC;IACtF,CAAC;IACD,wBAAwB,CAAC,YAAY,EAAE,IAAI,CAAC,CAAC;IAE7C,MAAM,GAAG,GAAG,2BAA2B,CAAC,IAAI,EAAE,OAAO,EAAE,SAAS,CAAC,CAAC;IAClE,IAAI,GAAG,CAAC,QAAQ,IAAI,GAAG,CAAC,aAAa,KAAK,MAAM,EAAE,CAAC;QAC/C,MAAM,IAAI,oBAAoB,CAC1B,4EAA4E;YAC5E,iFAAiF,CACpF,CAAC;IACN,CAAC;IAED,MAAM,KAAK,GAAG,OAAO,EAAE,OAAO,IAAI,OAAO,CAAC,GAAG,CAAC,mBAAmB,IAAI,YAAY,CAAC;IAClF,MAAM,IAAI,GAAG,UAAU,CAAC,IAAI,CAAC,CAAC;IAE9B,OAAO,IAAI,CAAC,QAAQ,CAAC,YAAY,EAAE,KAAK,EAAE,KAAK,IAAI,EAAE;QACjD,eAAe,CAAC,YAAY,EAAE,OAAO,CAAC,CAAC;QACvC,OAAO;YACH,YAAY;YACZ,YAAY;YACZ,OAAO,EAAE,GAAG,CAAC,aAAa;YAC1B,cAAc,EACV,GAAG,CAAC,aAAa,KAAK,UAAU;gBAC5B,CAAC,CAAC,qCAAqC;gBACvC,CAAC,CAAC,GAAG,CAAC,aAAa,KAAK,KAAK;oBACzB,CAAC,CAAC,gCAAgC;oBAClC,CAAC,CAAC,4BAA4B;YAC1C,KAAK,EAAE,MAAM,CAAC,UAAU,CAAC,OAAO,EAAE,MAAM,CAAC;SAC5C,CAAC;IACN,CAAC,CAAC,CAAC;AACP,CAAC"}

package/dist/shared/src/modules/sandbox/sandbox-runtime.d.ts

@@ -0,0 +1,78 @@
+/**
+ * Sandbox Runtime — Pure local OS process isolation for agent commands (Zero Docker/Container).
+ *
+ * Modes (ATABEY_SANDBOX_RUNTIME):
+ *   none      — host spawn (allow-list + env scrubbing)
+ *   uid       — host spawn with POSIX uid/gid drop (see sandbox.ts)
+ *   seatbelt  — macOS kernel sandbox (/usr/bin/sandbox-exec) confining writes to projectRoot
+ *               and denying network access by default
+ *   auto      — seatbelt if available on macOS, else uid if configured, else none
+ *
+ * Hardening:
+ *   ATABEY_SANDBOX_REQUIRED=true  → deny execution when isolation is effectively "none"
+ *   ATABEY_SANDBOX_NETWORK=none   → deny outbound/inbound network inside seatbelt (default: none)
+ */
+import { resolveSandboxIdentity } from "./sandbox.js";
+export type SandboxRuntimeMode = "none" | "uid" | "seatbelt" | "auto";
+export type SandboxEngine = "seatbelt" | "none";
+export interface SandboxRuntimeConfig {
+    mode: SandboxRuntimeMode;
+    /** Resolved effective mode after auto detection. */
+    effectiveMode: "none" | "uid" | "seatbelt";
+    engine: SandboxEngine;
+    network: string;
+    required: boolean;
+    projectRoot: string;
+    timeoutMs: number;
+}
+export interface RunInSandboxRequest {
+    command: string;
+    args: string[];
+    projectRoot: string;
+    timeoutMs?: number;
+    env?: NodeJS.ProcessEnv;
+    /** Optional stdin payload. */
+    stdin?: string | Buffer;
+}
+export interface RunInSandboxResult {
+    code: number | null;
+    stdout: string;
+    stderr: string;
+    runtime: SandboxRuntimeConfig["effectiveMode"];
+    engine: SandboxEngine;
+    /** Human-readable isolation description for logs/errors. */
+    isolationLabel: string;
+}
+export declare class SandboxRequiredError extends Error {
+    constructor(message: string);
+}
+export declare const SEATBELT_BINARY = "/usr/bin/sandbox-exec";
+export declare function resolveDefaultSandboxRequired(_mode?: SandboxRuntimeMode): boolean;
+/**
+ * Detect available native OS sandbox engine (cached).
+ */
+export declare function detectOsSandboxEngine(): SandboxEngine;
+/** Test helper */
+export declare function clearSandboxRuntimeCache(): void;
+/**
+ * Resolve full runtime configuration for a project.
+ */
+export declare function resolveSandboxRuntimeConfig(projectRoot: string, timeoutMs?: number): SandboxRuntimeConfig;
+/**
+ * Build macOS Seatbelt (`/usr/bin/sandbox-exec`) SBPL profile and argv.
+ * Confines file writes strictly to `projectRoot` and OS temp directories,
+ * and denies network access when `cfg.network === "none"`.
+ */
+export declare function buildSeatbeltArgs(cfg: SandboxRuntimeConfig, command: string, args: string[]): string[];
+/**
+ * Run a command under the configured local OS sandbox runtime.
+ */
+export declare function runInSandbox(req: RunInSandboxRequest): Promise<RunInSandboxResult>;
+/**
+ * Diagnostic snapshot for CLI.
+ */
+export declare function getSandboxRuntimeStatus(projectRoot?: string): {
+    config: SandboxRuntimeConfig;
+    isolationLabel: string;
+    identity: ReturnType<typeof resolveSandboxIdentity>;
+};