atabey 0.0.37 → 0.1.0

package/dist/shared/src/sandbox-fs.js

@@ -1,150 +1,2 @@
-/**
- * Sandboxed filesystem mutations — Phase 1.2.
- *
- * - Always holds AtomicFileLock (try/finally).
- * - When runtime=container: write via container stdin → /workspace/<path>
- * - When runtime=uid|none: write on host under projectRoot (safePath caller responsibility)
- * - ATABEY_SANDBOX_REQUIRED=true rejects writes if isolation is none
- */
-import fs from "fs";
-import path from "path";
-import { AtomicFileLock } from "./file-lock.js";
-import { resolveSandboxRuntimeConfig, runInSandbox, SandboxRequiredError, } from "./sandbox-runtime.js";
-/**
- * Normalize user path to a project-relative POSIX path.
- * Absolute paths are accepted only if they resolve inside projectRoot.
- */
-export function assertSafeRelativePath(userPath, projectRoot) {
-    if (!userPath || !userPath.trim()) {
-        throw new Error("[SANDBOX_FS] Empty path is not allowed");
-    }
-    const trimmed = userPath.trim();
-    if (trimmed.includes("\0")) {
-        throw new Error("[SANDBOX_FS] Illegal null byte in path");
-    }
-    let rel = trimmed.replace(/\\/g, "/");
-    // Absolute path → must live under projectRoot
-    if (path.isAbsolute(trimmed) || rel.startsWith("/")) {
-        if (!projectRoot) {
-            throw new Error(`[SANDBOX_FS] Absolute paths require projectRoot: "${userPath}"`);
-        }
-        const root = path.resolve(projectRoot);
-        const abs = path.resolve(trimmed);
-        const rootCheck = process.platform === "win32" ? root.toLowerCase() : root;
-        const absCheck = process.platform === "win32" ? abs.toLowerCase() : abs;
-        if (!absCheck.startsWith(rootCheck + path.sep) && absCheck !== rootCheck) {
-            throw new Error(`[SANDBOX_FS] Absolute path escapes project root: "${userPath}"`);
-        }
-        rel = path.relative(root, abs).replace(/\\/g, "/");
-        if (!rel || rel === ".") {
-            throw new Error("[SANDBOX_FS] Path resolves to project root; refuse write");
-        }
-        if (rel.startsWith("..")) {
-            throw new Error(`[SANDBOX_FS] Path traversal denied: "${userPath}"`);
-        }
-        return rel;
-    }
-    // Relative: reject .. segments
-    const parts = [];
-    for (const seg of rel.split("/")) {
-        if (!seg || seg === ".")
-            continue;
-        if (seg === "..") {
-            throw new Error(`[SANDBOX_FS] Path traversal denied: "${userPath}"`);
-        }
-        parts.push(seg);
-    }
-    if (parts.length === 0) {
-        throw new Error("[SANDBOX_FS] Path resolves to project root; refuse write");
-    }
-    return parts.join("/");
-}
-function shellSingleQuote(s) {
-    // Safe for sh single-quoted strings
-    return `'${s.replace(/'/g, `'\\''`)}'`;
-}
-function createLock(projectRoot) {
-    return new AtomicFileLock({
-        projectRoot,
-        locksDir: path.join(projectRoot, ".atabey", "locks"),
-        ttlMs: 5 * 60 * 1000,
-        timeoutMs: 15_000,
-    });
-}
-function hostWriteAtomic(absolutePath, content) {
-    const dir = path.dirname(absolutePath);
-    if (!fs.existsSync(dir)) {
-        fs.mkdirSync(dir, { recursive: true });
-    }
-    // Write exact bytes (callers decide trailing newline — patch/replace need fidelity)
-    const tempPath = `${absolutePath}.${Math.random().toString(36).slice(2, 9)}.tmp`;
-    try {
-        fs.writeFileSync(tempPath, content, "utf8");
-        fs.renameSync(tempPath, absolutePath);
-    }
-    catch (err) {
-        try {
-            if (fs.existsSync(tempPath))
-                fs.unlinkSync(tempPath);
-        }
-        catch { /* ignore */ }
-        throw err;
-    }
-}
-/**
- * Write file content under project root using the active sandbox runtime.
- */
-export async function writeFileInSandbox(projectRoot, userPath, content, options) {
-    const root = path.resolve(projectRoot);
-    const relativePath = assertSafeRelativePath(userPath, root);
-    const absolutePath = path.resolve(root, relativePath);
-    // Belt-and-suspenders: stay inside root
-    if (!absolutePath.startsWith(root + path.sep) && absolutePath !== root) {
-        throw new Error(`[SANDBOX_FS] Resolved path escapes project root: "${userPath}"`);
-    }
-    const cfg = resolveSandboxRuntimeConfig(root, options?.timeoutMs);
-    if (cfg.required && cfg.effectiveMode === "none") {
-        throw new SandboxRequiredError("[SANDBOX_REQUIRED] File write blocked: no sandbox isolation available. " +
-            "Set ATABEY_SANDBOX_RUNTIME=container (Podman/Docker) or uid, or disable ATABEY_SANDBOX_REQUIRED.");
-    }
-    const owner = options?.ownerId || process.env.ATABEY_ACTIVE_AGENT || "mcp-writer";
-    const lock = createLock(root);
-    const posixRel = relativePath.split(path.sep).join("/");
-    return lock.withLock(relativePath, owner, async () => {
-        if (cfg.effectiveMode === "container" && cfg.engine !== "none") {
-            const dir = path.posix.dirname(posixRel);
-            const script = dir === "."
-                ? `cat > ${shellSingleQuote(posixRel)}`
-                : `mkdir -p ${shellSingleQuote(dir)} && cat > ${shellSingleQuote(posixRel)}`;
-            const result = await runInSandbox({
-                command: "sh",
-                args: ["-c", script],
-                projectRoot: root,
-                timeoutMs: options?.timeoutMs ?? cfg.timeoutMs,
-                stdin: content,
-            });
-            if (result.code !== 0) {
-                throw new Error(`[SANDBOX_FS] Container write failed (code ${result.code}): ${result.stderr || result.stdout}`.trim());
-            }
-            return {
-                absolutePath,
-                relativePath,
-                runtime: "container",
-                isolationLabel: result.isolationLabel,
-                bytes: Buffer.byteLength(content, "utf8"),
-            };
-        }
-        // uid | none — host write confined to project root
-        hostWriteAtomic(absolutePath, content);
-        return {
-            absolutePath,
-            relativePath,
-            runtime: cfg.effectiveMode,
-            isolationLabel: cfg.effectiveMode === "uid"
-                ? "uid host write (project-bound)"
-                : "host write (project-bound)",
-            bytes: Buffer.byteLength(content, "utf8"),
-        };
-    });
-}
+export * from "./modules/sandbox/sandbox-fs.js";
 //# sourceMappingURL=sandbox-fs.js.map

package/dist/shared/src/sandbox-fs.js.map

@@ -1 +1 @@
-{"version":3,"file":"sandbox-fs.js","sourceRoot":"","sources":["../../../../shared/src/sandbox-fs.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAEH,OAAO,EAAE,MAAM,IAAI,CAAC;AACpB,OAAO,IAAI,MAAM,MAAM,CAAC;AACxB,OAAO,EAAE,cAAc,EAAE,MAAM,gBAAgB,CAAC;AAChD,OAAO,EACH,2BAA2B,EAC3B,YAAY,EACZ,oBAAoB,GAEvB,MAAM,sBAAsB,CAAC;AAU9B;;;GAGG;AACH,MAAM,UAAU,sBAAsB,CAAC,QAAgB,EAAE,WAAoB;IACzE,IAAI,CAAC,QAAQ,IAAI,CAAC,QAAQ,CAAC,IAAI,EAAE,EAAE,CAAC;QAChC,MAAM,IAAI,KAAK,CAAC,wCAAwC,CAAC,CAAC;IAC9D,CAAC;IACD,MAAM,OAAO,GAAG,QAAQ,CAAC,IAAI,EAAE,CAAC;IAChC,IAAI,OAAO,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAC;QACzB,MAAM,IAAI,KAAK,CAAC,wCAAwC,CAAC,CAAC;IAC9D,CAAC;IAED,IAAI,GAAG,GAAG,OAAO,CAAC,OAAO,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC;IAEtC,8CAA8C;IAC9C,IAAI,IAAI,CAAC,UAAU,CAAC,OAAO,CAAC,IAAI,GAAG,CAAC,UAAU,CAAC,GAAG,CAAC,EAAE,CAAC;QAClD,IAAI,CAAC,WAAW,EAAE,CAAC;YACf,MAAM,IAAI,KAAK,CAAC,qDAAqD,QAAQ,GAAG,CAAC,CAAC;QACtF,CAAC;QACD,MAAM,IAAI,GAAG,IAAI,CAAC,OAAO,CAAC,WAAW,CAAC,CAAC;QACvC,MAAM,GAAG,GAAG,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC;QAClC,MAAM,SAAS,GAAG,OAAO,CAAC,QAAQ,KAAK,OAAO,CAAC,CAAC,CAAC,IAAI,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC;QAC3E,MAAM,QAAQ,GAAG,OAAO,CAAC,QAAQ,KAAK,OAAO,CAAC,CAAC,CAAC,GAAG,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC;QACxE,IAAI,CAAC,QAAQ,CAAC,UAAU,CAAC,SAAS,GAAG,IAAI,CAAC,GAAG,CAAC,IAAI,QAAQ,KAAK,SAAS,EAAE,CAAC;YACvE,MAAM,IAAI,KAAK,CAAC,qDAAqD,QAAQ,GAAG,CAAC,CAAC;QACtF,CAAC;QACD,GAAG,GAAG,IAAI,CAAC,QAAQ,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC,OAAO,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC;QACnD,IAAI,CAAC,GAAG,IAAI,GAAG,KAAK,GAAG,EAAE,CAAC;YACtB,MAAM,IAAI,KAAK,CAAC,0DAA0D,CAAC,CAAC;QAChF,CAAC;QACD,IAAI,GAAG,CAAC,UAAU,CAAC,IAAI,CAAC,EAAE,CAAC;YACvB,MAAM,IAAI,KAAK,CAAC,wCAAwC,QAAQ,GAAG,CAAC,CAAC;QACzE,CAAC;QACD,OAAO,GAAG,CAAC;IACf,CAAC;IAED,+BAA+B;IAC/B,MAAM,KAAK,GAAa,EAAE,CAAC;IAC3B,KAAK,MAAM,GAAG,IAAI,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,EAAE,CAAC;QAC/B,IAAI,CAAC,GAAG,IAAI,GAAG,KAAK,GAAG;YAAE,SAAS;QAClC,IAAI,GAAG,KAAK,IAAI,EAAE,CAAC;YACf,MAAM,IAAI,KAAK,CAAC,wCAAwC,QAAQ,GAAG,CAAC,CAAC;QACzE,CAAC;QACD,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IACpB,CAAC;IACD,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACrB,MAAM,IAAI,KAAK,CAAC,0DAA0D,CAAC,CAAC;IAChF,CAAC;IACD,OAAO,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;AAC3B,CAAC;AAED,SAAS,gBAAgB,CAAC,CAAS;IAC/B,oCAAoC;IACpC,OAAO,IAAI,CAAC,CAAC,OAAO,CAAC,IAAI,EAAE,OAAO,CAAC,GAAG,CAAC;AAC3C,CAAC;AAED,SAAS,UAAU,CAAC,WAAmB;IACnC,OAAO,IAAI,cAAc,CAAC;QACtB,WAAW;QACX,QAAQ,EAAE,IAAI,CAAC,IAAI,CAAC,WAAW,EAAE,SAAS,EAAE,OAAO,CAAC;QACpD,KAAK,EAAE,CAAC,GAAG,EAAE,GAAG,IAAI;QACpB,SAAS,EAAE,MAAM;KACpB,CAAC,CAAC;AACP,CAAC;AAED,SAAS,eAAe,CAAC,YAAoB,EAAE,OAAe;IAC1D,MAAM,GAAG,GAAG,IAAI,CAAC,OAAO,CAAC,YAAY,CAAC,CAAC;IACvC,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,GAAG,CAAC,EAAE,CAAC;QACtB,EAAE,CAAC,SAAS,CAAC,GAAG,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IAC3C,CAAC;IACD,oFAAoF;IACpF,MAAM,QAAQ,GAAG,GAAG,YAAY,IAAI,IAAI,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,MAAM,CAAC;IACjF,IAAI,CAAC;QACD,EAAE,CAAC,aAAa,CAAC,QAAQ,EAAE,OAAO,EAAE,MAAM,CAAC,CAAC;QAC5C,EAAE,CAAC,UAAU,CAAC,QAAQ,EAAE,YAAY,CAAC,CAAC;IAC1C,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACX,IAAI,CAAC;YAAC,IAAI,EAAE,CAAC,UAAU,CAAC,QAAQ,CAAC;gBAAE,EAAE,CAAC,UAAU,CAAC,QAAQ,CAAC,CAAC;QAAC,CAAC;QAAC,MAAM,CAAC,CAAC,YAAY,CAAC,CAAC;QACpF,MAAM,GAAG,CAAC;IACd,CAAC;AACL,CAAC;AAED;;GAEG;AACH,MAAM,CAAC,KAAK,UAAU,kBAAkB,CACpC,WAAmB,EACnB,QAAgB,EAChB,OAAe,EACf,OAAkD;IAElD,MAAM,IAAI,GAAG,IAAI,CAAC,OAAO,CAAC,WAAW,CAAC,CAAC;IACvC,MAAM,YAAY,GAAG,sBAAsB,CAAC,QAAQ,EAAE,IAAI,CAAC,CAAC;IAC5D,MAAM,YAAY,GAAG,IAAI,CAAC,OAAO,CAAC,IAAI,EAAE,YAAY,CAAC,CAAC;IACtD,wCAAwC;IACxC,IAAI,CAAC,YAAY,CAAC,UAAU,CAAC,IAAI,GAAG,IAAI,CAAC,GAAG,CAAC,IAAI,YAAY,KAAK,IAAI,EAAE,CAAC;QACrE,MAAM,IAAI,KAAK,CAAC,qDAAqD,QAAQ,GAAG,CAAC,CAAC;IACtF,CAAC;IAED,MAAM,GAAG,GAAG,2BAA2B,CAAC,IAAI,EAAE,OAAO,EAAE,SAAS,CAAC,CAAC;IAClE,IAAI,GAAG,CAAC,QAAQ,IAAI,GAAG,CAAC,aAAa,KAAK,MAAM,EAAE,CAAC;QAC/C,MAAM,IAAI,oBAAoB,CAC1B,yEAAyE;YACzE,kGAAkG,CACrG,CAAC;IACN,CAAC;IAED,MAAM,KAAK,GAAG,OAAO,EAAE,OAAO,IAAI,OAAO,CAAC,GAAG,CAAC,mBAAmB,IAAI,YAAY,CAAC;IAClF,MAAM,IAAI,GAAG,UAAU,CAAC,IAAI,CAAC,CAAC;IAC9B,MAAM,QAAQ,GAAG,YAAY,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IAExD,OAAO,IAAI,CAAC,QAAQ,CAAC,YAAY,EAAE,KAAK,EAAE,KAAK,IAAI,EAAE;QACjD,IAAI,GAAG,CAAC,aAAa,KAAK,WAAW,IAAI,GAAG,CAAC,MAAM,KAAK,MAAM,EAAE,CAAC;YAC7D,MAAM,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC;YACzC,MAAM,MAAM,GACR,GAAG,KAAK,GAAG;gBACP,CAAC,CAAC,SAAS,gBAAgB,CAAC,QAAQ,CAAC,EAAE;gBACvC,CAAC,CAAC,YAAY,gBAAgB,CAAC,GAAG,CAAC,aAAa,gBAAgB,CAAC,QAAQ,CAAC,EAAE,CAAC;YAErF,MAAM,MAAM,GAAG,MAAM,YAAY,CAAC;gBAC9B,OAAO,EAAE,IAAI;gBACb,IAAI,EAAE,CAAC,IAAI,EAAE,MAAM,CAAC;gBACpB,WAAW,EAAE,IAAI;gBACjB,SAAS,EAAE,OAAO,EAAE,SAAS,IAAI,GAAG,CAAC,SAAS;gBAC9C,KAAK,EAAE,OAAO;aACjB,CAAC,CAAC;YAEH,IAAI,MAAM,CAAC,IAAI,KAAK,CAAC,EAAE,CAAC;gBACpB,MAAM,IAAI,KAAK,CACX,6CAA6C,MAAM,CAAC,IAAI,MAAM,MAAM,CAAC,MAAM,IAAI,MAAM,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,CACxG,CAAC;YACN,CAAC;YAED,OAAO;gBACH,YAAY;gBACZ,YAAY;gBACZ,OAAO,EAAE,WAAW;gBACpB,cAAc,EAAE,MAAM,CAAC,cAAc;gBACrC,KAAK,EAAE,MAAM,CAAC,UAAU,CAAC,OAAO,EAAE,MAAM,CAAC;aAC5C,CAAC;QACN,CAAC;QAED,mDAAmD;QACnD,eAAe,CAAC,YAAY,EAAE,OAAO,CAAC,CAAC;QACvC,OAAO;YACH,YAAY;YACZ,YAAY;YACZ,OAAO,EAAE,GAAG,CAAC,aAAa;YAC1B,cAAc,EACV,GAAG,CAAC,aAAa,KAAK,KAAK;gBACvB,CAAC,CAAC,gCAAgC;gBAClC,CAAC,CAAC,4BAA4B;YACtC,KAAK,EAAE,MAAM,CAAC,UAAU,CAAC,OAAO,EAAE,MAAM,CAAC;SAC5C,CAAC;IACN,CAAC,CAAC,CAAC;AACP,CAAC"}
+{"version":3,"file":"sandbox-fs.js","sourceRoot":"","sources":["../../../../shared/src/sandbox-fs.ts"],"names":[],"mappings":"AAAA,cAAc,iCAAiC,CAAC"}

package/dist/shared/src/sandbox-runtime.d.ts

@@ -1,85 +1 @@
-/**
- * Sandbox Runtime — Phase 1.1 execution isolation for agent shell commands.
- *
- * Modes (ATABEY_SANDBOX_RUNTIME):
- *   none      — host spawn (legacy; allow-list only)
- *   uid       — host spawn with uid/gid drop (see sandbox.ts)
- *   container — Docker/Podman run with network=none, resource limits, project mount
- *   auto      — container if engine available, else uid if configured, else none
- *
- * Enterprise hardening:
- *   ATABEY_SANDBOX_REQUIRED=true  → deny execution when isolation is effectively "none"
- *
- * Container defaults:
- *   ATABEY_SANDBOX_ENGINE=podman|docker|auto  (prefer podman, then docker)
- *   ATABEY_SANDBOX_IMAGE=node:20-bookworm-slim
- *   ATABEY_SANDBOX_MEMORY=512m
- *   ATABEY_SANDBOX_CPUS=1
- *   ATABEY_SANDBOX_PIDS=256
- *   ATABEY_SANDBOX_NETWORK=none
- */
-import { resolveSandboxIdentity } from "./sandbox.js";
-export type SandboxRuntimeMode = "none" | "uid" | "container" | "auto";
-export type SandboxEngine = "podman" | "docker" | "none";
-export interface SandboxRuntimeConfig {
-    mode: SandboxRuntimeMode;
-    /** Resolved effective mode after auto detection. */
-    effectiveMode: "none" | "uid" | "container";
-    engine: SandboxEngine;
-    image: string;
-    memory: string;
-    cpus: string;
-    pidsLimit: number;
-    network: string;
-    required: boolean;
-    projectRoot: string;
-    timeoutMs: number;
-}
-export interface RunInSandboxRequest {
-    command: string;
-    args: string[];
-    projectRoot: string;
-    timeoutMs?: number;
-    env?: NodeJS.ProcessEnv;
-    /** Optional stdin payload (e.g. file content for container-mediated writes). */
-    stdin?: string | Buffer;
-}
-export interface RunInSandboxResult {
-    code: number | null;
-    stdout: string;
-    stderr: string;
-    runtime: SandboxRuntimeConfig["effectiveMode"];
-    engine: SandboxEngine;
-    /** Human-readable isolation description for logs/errors. */
-    isolationLabel: string;
-}
-export declare class SandboxRequiredError extends Error {
-    constructor(message: string);
-}
-/**
- * Detect available container engine (cached).
- */
-export declare function detectContainerEngine(): SandboxEngine;
-/** Test helper */
-export declare function clearSandboxRuntimeCache(): void;
-/**
- * Resolve full runtime configuration for a project.
- */
-export declare function resolveSandboxRuntimeConfig(projectRoot: string, timeoutMs?: number): SandboxRuntimeConfig;
-/**
- * Build docker/podman argv for an isolated run.
- * Project is mounted at /workspace; command runs with -w /workspace.
- */
-export declare function buildContainerArgs(cfg: SandboxRuntimeConfig, command: string, args: string[]): string[];
-/**
- * Run a command under the configured sandbox runtime.
- */
-export declare function runInSandbox(req: RunInSandboxRequest): Promise<RunInSandboxResult>;
-/**
- * Diagnostic snapshot for dashboard / CLI.
- */
-export declare function getSandboxRuntimeStatus(projectRoot?: string): {
-    config: SandboxRuntimeConfig;
-    isolationLabel: string;
-    identity: ReturnType<typeof resolveSandboxIdentity>;
-};
+export * from "./modules/sandbox/sandbox-runtime.js";

package/dist/shared/src/sandbox-runtime.js

@@ -1,250 +1,2 @@
-/**
- * Sandbox Runtime — Phase 1.1 execution isolation for agent shell commands.
- *
- * Modes (ATABEY_SANDBOX_RUNTIME):
- *   none      — host spawn (legacy; allow-list only)
- *   uid       — host spawn with uid/gid drop (see sandbox.ts)
- *   container — Docker/Podman run with network=none, resource limits, project mount
- *   auto      — container if engine available, else uid if configured, else none
- *
- * Enterprise hardening:
- *   ATABEY_SANDBOX_REQUIRED=true  → deny execution when isolation is effectively "none"
- *
- * Container defaults:
- *   ATABEY_SANDBOX_ENGINE=podman|docker|auto  (prefer podman, then docker)
- *   ATABEY_SANDBOX_IMAGE=node:20-bookworm-slim
- *   ATABEY_SANDBOX_MEMORY=512m
- *   ATABEY_SANDBOX_CPUS=1
- *   ATABEY_SANDBOX_PIDS=256
- *   ATABEY_SANDBOX_NETWORK=none
- */
-import { spawn, execFileSync } from "child_process";
-import fs from "fs";
-import path from "path";
-import { applySandboxToSpawnOptions, resolveSandboxIdentity, sandboxSpawn, } from "./sandbox.js";
-export class SandboxRequiredError extends Error {
-    constructor(message) {
-        super(message);
-        this.name = "SandboxRequiredError";
-    }
-}
-let cachedEngine = null;
-function envStr(key, fallback) {
-    const v = process.env[key];
-    return v && v.trim() ? v.trim() : fallback;
-}
-function envBool(key, fallback = false) {
-    const v = process.env[key];
-    if (v === undefined)
-        return fallback;
-    return v === "true" || v === "1" || v === "yes";
-}
-/**
- * Detect available container engine (cached).
- */
-export function detectContainerEngine() {
-    if (cachedEngine)
-        return cachedEngine;
-    const prefer = envStr("ATABEY_SANDBOX_ENGINE", "auto").toLowerCase();
-    const tryEngine = (name) => {
-        try {
-            execFileSync(name, ["--version"], {
-                encoding: "utf8",
-                timeout: 3000,
-                stdio: ["ignore", "pipe", "ignore"],
-            });
-            return true;
-        }
-        catch {
-            return false;
-        }
-    };
-    if (prefer === "podman" || prefer === "docker") {
-        cachedEngine = tryEngine(prefer) ? prefer : "none";
-        return cachedEngine;
-    }
-    if (tryEngine("podman")) {
-        cachedEngine = "podman";
-        return cachedEngine;
-    }
-    if (tryEngine("docker")) {
-        cachedEngine = "docker";
-        return cachedEngine;
-    }
-    cachedEngine = "none";
-    return cachedEngine;
-}
-/** Test helper */
-export function clearSandboxRuntimeCache() {
-    cachedEngine = null;
-}
-/**
- * Resolve full runtime configuration for a project.
- */
-export function resolveSandboxRuntimeConfig(projectRoot, timeoutMs) {
-    const mode = (envStr("ATABEY_SANDBOX_RUNTIME", "auto").toLowerCase() || "auto");
-    const engine = detectContainerEngine();
-    const identity = resolveSandboxIdentity();
-    const required = envBool("ATABEY_SANDBOX_REQUIRED", false);
-    let effectiveMode;
-    if (mode === "none") {
-        effectiveMode = "none";
-    }
-    else if (mode === "uid") {
-        effectiveMode = identity.enabled ? "uid" : "none";
-    }
-    else if (mode === "container") {
-        effectiveMode = engine !== "none" ? "container" : "none";
-    }
-    else {
-        // auto
-        if (engine !== "none")
-            effectiveMode = "container";
-        else if (identity.enabled)
-            effectiveMode = "uid";
-        else
-            effectiveMode = "none";
-    }
-    return {
-        mode: ["none", "uid", "container", "auto"].includes(mode) ? mode : "auto",
-        effectiveMode,
-        engine,
-        image: envStr("ATABEY_SANDBOX_IMAGE", "node:20-bookworm-slim"),
-        memory: envStr("ATABEY_SANDBOX_MEMORY", "512m"),
-        cpus: envStr("ATABEY_SANDBOX_CPUS", "1"),
-        pidsLimit: parseInt(envStr("ATABEY_SANDBOX_PIDS", "256"), 10) || 256,
-        network: envStr("ATABEY_SANDBOX_NETWORK", "none"),
-        required,
-        projectRoot: path.resolve(projectRoot),
-        timeoutMs: timeoutMs ?? parseInt(process.env.MCP_COMMAND_TIMEOUT_MS || "30000", 10),
-    };
-}
-function isolationLabel(cfg) {
-    if (cfg.effectiveMode === "container") {
-        return `container/${cfg.engine} image=${cfg.image} network=${cfg.network} mem=${cfg.memory}`;
-    }
-    if (cfg.effectiveMode === "uid") {
-        const id = resolveSandboxIdentity();
-        return `uid=${id.uid}${id.gid !== undefined ? ` gid=${id.gid}` : ""}`;
-    }
-    return "none (host process)";
-}
-/**
- * Build docker/podman argv for an isolated run.
- * Project is mounted at /workspace; command runs with -w /workspace.
- */
-export function buildContainerArgs(cfg, command, args) {
-    const root = cfg.projectRoot;
-    // Prefer :rw so installs/builds work; network still none by default
-    const mount = `${root}:/workspace:rw`;
-    const argv = [
-        "run",
-        "--rm",
-        "--network", cfg.network,
-        "--memory", cfg.memory,
-        "--cpus", cfg.cpus,
-        "--pids-limit", String(cfg.pidsLimit),
-        "-v", mount,
-        "-w", "/workspace",
-        // Drop ambient capabilities when supported (docker/podman)
-        "--security-opt", "no-new-privileges",
-    ];
-    // Optional: read-only root FS with writable tmp (stronger isolation)
-    if (envBool("ATABEY_SANDBOX_READ_ONLY_ROOT", false)) {
-        argv.push("--read-only", "--tmpfs", "/tmp:rw,noexec,nosuid,size=64m");
-    }
-    // Do not pass host secrets by default — empty env except PATH-ish via image
-    if (!envBool("ATABEY_SANDBOX_PASS_ENV", false)) {
-        argv.push("--env", "HOME=/tmp", "--env", "NPM_CONFIG_UPDATE_NOTIFIER=false");
-    }
-    argv.push(cfg.image, command, ...args);
-    return argv;
-}
-function collectOutput(child, stdin) {
-    return new Promise((resolve) => {
-        let stdout = "";
-        let stderr = "";
-        child.stdout?.on("data", (d) => { stdout += d.toString(); });
-        child.stderr?.on("data", (d) => { stderr += d.toString(); });
-        child.on("error", (err) => {
-            stderr += err.message;
-            resolve({ code: 1, stdout, stderr });
-        });
-        child.on("close", (code) => {
-            resolve({ code, stdout, stderr });
-        });
-        if (stdin !== undefined && child.stdin) {
-            child.stdin.end(stdin);
-        }
-        else if (child.stdin) {
-            child.stdin.end();
-        }
-    });
-}
-/**
- * Run a command under the configured sandbox runtime.
- */
-export async function runInSandbox(req) {
-    const cfg = resolveSandboxRuntimeConfig(req.projectRoot, req.timeoutMs);
-    const label = isolationLabel(cfg);
-    if (cfg.required && cfg.effectiveMode === "none") {
-        throw new SandboxRequiredError("[SANDBOX_REQUIRED] ATABEY_SANDBOX_REQUIRED=true but no isolation is available. " +
-            "Install Podman/Docker (ATABEY_SANDBOX_RUNTIME=container) or configure ATABEY_SANDBOX_UID/USER " +
-            "(ATABEY_SANDBOX_RUNTIME=uid), or set ATABEY_SANDBOX_REQUIRED=false for local dev.");
-    }
-    if (!fs.existsSync(cfg.projectRoot)) {
-        throw new Error(`[SANDBOX] Project root does not exist: ${cfg.projectRoot}`);
-    }
-    const stdio = [
-        req.stdin !== undefined ? "pipe" : "ignore",
-        "pipe",
-        "pipe",
-    ];
-    if (cfg.effectiveMode === "container" && cfg.engine !== "none") {
-        const containerArgs = buildContainerArgs(cfg, req.command, req.args);
-        const child = spawn(cfg.engine, containerArgs, {
-            cwd: cfg.projectRoot,
-            timeout: cfg.timeoutMs,
-            shell: false,
-            stdio,
-            env: req.env ?? process.env,
-        });
-        const result = await collectOutput(child, req.stdin);
-        return {
-            ...result,
-            runtime: "container",
-            engine: cfg.engine,
-            isolationLabel: label,
-        };
-    }
-    // uid or none — host spawn (uid options applied when available)
-    const spawnOpts = {
-        cwd: cfg.projectRoot,
-        timeout: cfg.timeoutMs,
-        shell: false,
-        stdio,
-        env: req.env ?? process.env,
-    };
-    const child = cfg.effectiveMode === "uid"
-        ? sandboxSpawn(req.command, req.args, spawnOpts)
-        : spawn(req.command, req.args, applySandboxToSpawnOptions({ ...spawnOpts, disableSandbox: true }));
-    const result = await collectOutput(child, req.stdin);
-    return {
-        ...result,
-        runtime: cfg.effectiveMode,
-        engine: "none",
-        isolationLabel: label,
-    };
-}
-/**
- * Diagnostic snapshot for dashboard / CLI.
- */
-export function getSandboxRuntimeStatus(projectRoot = process.cwd()) {
-    const config = resolveSandboxRuntimeConfig(projectRoot);
-    return {
-        config,
-        isolationLabel: isolationLabel(config),
-        identity: resolveSandboxIdentity(),
-    };
-}
+export * from "./modules/sandbox/sandbox-runtime.js";
 //# sourceMappingURL=sandbox-runtime.js.map

package/dist/shared/src/sandbox-runtime.js.map

@@ -1 +1 @@
-{"version":3,"file":"sandbox-runtime.js","sourceRoot":"","sources":["../../../../shared/src/sandbox-runtime.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;GAmBG;AAEH,OAAO,EAAE,KAAK,EAAwC,YAAY,EAAE,MAAM,eAAe,CAAC;AAC1F,OAAO,EAAE,MAAM,IAAI,CAAC;AACpB,OAAO,IAAI,MAAM,MAAM,CAAC;AACxB,OAAO,EACH,0BAA0B,EAC1B,sBAAsB,EACtB,YAAY,GACf,MAAM,cAAc,CAAC;AAwCtB,MAAM,OAAO,oBAAqB,SAAQ,KAAK;IAC3C,YAAY,OAAe;QACvB,KAAK,CAAC,OAAO,CAAC,CAAC;QACf,IAAI,CAAC,IAAI,GAAG,sBAAsB,CAAC;IACvC,CAAC;CACJ;AAED,IAAI,YAAY,GAAyB,IAAI,CAAC;AAE9C,SAAS,MAAM,CAAC,GAAW,EAAE,QAAgB;IACzC,MAAM,CAAC,GAAG,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;IAC3B,OAAO,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC;AAC/C,CAAC;AAED,SAAS,OAAO,CAAC,GAAW,EAAE,QAAQ,GAAG,KAAK;IAC1C,MAAM,CAAC,GAAG,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;IAC3B,IAAI,CAAC,KAAK,SAAS;QAAE,OAAO,QAAQ,CAAC;IACrC,OAAO,CAAC,KAAK,MAAM,IAAI,CAAC,KAAK,GAAG,IAAI,CAAC,KAAK,KAAK,CAAC;AACpD,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,qBAAqB;IACjC,IAAI,YAAY;QAAE,OAAO,YAAY,CAAC;IACtC,MAAM,MAAM,GAAG,MAAM,CAAC,uBAAuB,EAAE,MAAM,CAAC,CAAC,WAAW,EAAE,CAAC;IAErE,MAAM,SAAS,GAAG,CAAC,IAAyB,EAAW,EAAE;QACrD,IAAI,CAAC;YACD,YAAY,CAAC,IAAI,EAAE,CAAC,WAAW,CAAC,EAAE;gBAC9B,QAAQ,EAAE,MAAM;gBAChB,OAAO,EAAE,IAAI;gBACb,KAAK,EAAE,CAAC,QAAQ,EAAE,MAAM,EAAE,QAAQ,CAAC;aACtC,CAAC,CAAC;YACH,OAAO,IAAI,CAAC;QAChB,CAAC;QAAC,MAAM,CAAC;YACL,OAAO,KAAK,CAAC;QACjB,CAAC;IACL,CAAC,CAAC;IAEF,IAAI,MAAM,KAAK,QAAQ,IAAI,MAAM,KAAK,QAAQ,EAAE,CAAC;QAC7C,YAAY,GAAG,SAAS,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC;QACnD,OAAO,YAAY,CAAC;IACxB,CAAC;IAED,IAAI,SAAS,CAAC,QAAQ,CAAC,EAAE,CAAC;QACtB,YAAY,GAAG,QAAQ,CAAC;QACxB,OAAO,YAAY,CAAC;IACxB,CAAC;IACD,IAAI,SAAS,CAAC,QAAQ,CAAC,EAAE,CAAC;QACtB,YAAY,GAAG,QAAQ,CAAC;QACxB,OAAO,YAAY,CAAC;IACxB,CAAC;IACD,YAAY,GAAG,MAAM,CAAC;IACtB,OAAO,YAAY,CAAC;AACxB,CAAC;AAED,kBAAkB;AAClB,MAAM,UAAU,wBAAwB;IACpC,YAAY,GAAG,IAAI,CAAC;AACxB,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,2BAA2B,CAAC,WAAmB,EAAE,SAAkB;IAC/E,MAAM,IAAI,GAAG,CAAC,MAAM,CAAC,wBAAwB,EAAE,MAAM,CAAC,CAAC,WAAW,EAAE,IAAI,MAAM,CAAuB,CAAC;IACtG,MAAM,MAAM,GAAG,qBAAqB,EAAE,CAAC;IACvC,MAAM,QAAQ,GAAG,sBAAsB,EAAE,CAAC;IAC1C,MAAM,QAAQ,GAAG,OAAO,CAAC,yBAAyB,EAAE,KAAK,CAAC,CAAC;IAE3D,IAAI,aAAoD,CAAC;IACzD,IAAI,IAAI,KAAK,MAAM,EAAE,CAAC;QAClB,aAAa,GAAG,MAAM,CAAC;IAC3B,CAAC;SAAM,IAAI,IAAI,KAAK,KAAK,EAAE,CAAC;QACxB,aAAa,GAAG,QAAQ,CAAC,OAAO,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,CAAC;IACtD,CAAC;SAAM,IAAI,IAAI,KAAK,WAAW,EAAE,CAAC;QAC9B,aAAa,GAAG,MAAM,KAAK,MAAM,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,MAAM,CAAC;IAC7D,CAAC;SAAM,CAAC;QACJ,OAAO;QACP,IAAI,MAAM,KAAK,MAAM;YAAE,aAAa,GAAG,WAAW,CAAC;aAC9C,IAAI,QAAQ,CAAC,OAAO;YAAE,aAAa,GAAG,KAAK,CAAC;;YAC5C,aAAa,GAAG,MAAM,CAAC;IAChC,CAAC;IAED,OAAO;QACH,IAAI,EAAE,CAAC,MAAM,EAAE,KAAK,EAAE,WAAW,EAAE,MAAM,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,MAAM;QACzE,aAAa;QACb,MAAM;QACN,KAAK,EAAE,MAAM,CAAC,sBAAsB,EAAE,uBAAuB,CAAC;QAC9D,MAAM,EAAE,MAAM,CAAC,uBAAuB,EAAE,MAAM,CAAC;QAC/C,IAAI,EAAE,MAAM,CAAC,qBAAqB,EAAE,GAAG,CAAC;QACxC,SAAS,EAAE,QAAQ,CAAC,MAAM,CAAC,qBAAqB,EAAE,KAAK,CAAC,EAAE,EAAE,CAAC,IAAI,GAAG;QACpE,OAAO,EAAE,MAAM,CAAC,wBAAwB,EAAE,MAAM,CAAC;QACjD,QAAQ;QACR,WAAW,EAAE,IAAI,CAAC,OAAO,CAAC,WAAW,CAAC;QACtC,SAAS,EAAE,SAAS,IAAI,QAAQ,CAAC,OAAO,CAAC,GAAG,CAAC,sBAAsB,IAAI,OAAO,EAAE,EAAE,CAAC;KACtF,CAAC;AACN,CAAC;AAED,SAAS,cAAc,CAAC,GAAyB;IAC7C,IAAI,GAAG,CAAC,aAAa,KAAK,WAAW,EAAE,CAAC;QACpC,OAAO,aAAa,GAAG,CAAC,MAAM,UAAU,GAAG,CAAC,KAAK,YAAY,GAAG,CAAC,OAAO,QAAQ,GAAG,CAAC,MAAM,EAAE,CAAC;IACjG,CAAC;IACD,IAAI,GAAG,CAAC,aAAa,KAAK,KAAK,EAAE,CAAC;QAC9B,MAAM,EAAE,GAAG,sBAAsB,EAAE,CAAC;QACpC,OAAO,OAAO,EAAE,CAAC,GAAG,GAAG,EAAE,CAAC,GAAG,KAAK,SAAS,CAAC,CAAC,CAAC,QAAQ,EAAE,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC;IAC1E,CAAC;IACD,OAAO,qBAAqB,CAAC;AACjC,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,kBAAkB,CAC9B,GAAyB,EACzB,OAAe,EACf,IAAc;IAEd,MAAM,IAAI,GAAG,GAAG,CAAC,WAAW,CAAC;IAC7B,oEAAoE;IACpE,MAAM,KAAK,GAAG,GAAG,IAAI,gBAAgB,CAAC;IAEtC,MAAM,IAAI,GAAa;QACnB,KAAK;QACL,MAAM;QACN,WAAW,EAAE,GAAG,CAAC,OAAO;QACxB,UAAU,EAAE,GAAG,CAAC,MAAM;QACtB,QAAQ,EAAE,GAAG,CAAC,IAAI;QAClB,cAAc,EAAE,MAAM,CAAC,GAAG,CAAC,SAAS,CAAC;QACrC,IAAI,EAAE,KAAK;QACX,IAAI,EAAE,YAAY;QAClB,2DAA2D;QAC3D,gBAAgB,EAAE,mBAAmB;KACxC,CAAC;IAEF,qEAAqE;IACrE,IAAI,OAAO,CAAC,+BAA+B,EAAE,KAAK,CAAC,EAAE,CAAC;QAClD,IAAI,CAAC,IAAI,CAAC,aAAa,EAAE,SAAS,EAAE,gCAAgC,CAAC,CAAC;IAC1E,CAAC;IAED,4EAA4E;IAC5E,IAAI,CAAC,OAAO,CAAC,yBAAyB,EAAE,KAAK,CAAC,EAAE,CAAC;QAC7C,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,WAAW,EAAE,OAAO,EAAE,kCAAkC,CAAC,CAAC;IACjF,CAAC;IAED,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,KAAK,EAAE,OAAO,EAAE,GAAG,IAAI,CAAC,CAAC;IACvC,OAAO,IAAI,CAAC;AAChB,CAAC;AAED,SAAS,aAAa,CAClB,KAAmB,EACnB,KAAuB;IAEvB,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,EAAE;QAC3B,IAAI,MAAM,GAAG,EAAE,CAAC;QAChB,IAAI,MAAM,GAAG,EAAE,CAAC;QAChB,KAAK,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,EAAE,CAAC,CAAS,EAAE,EAAE,GAAG,MAAM,IAAI,CAAC,CAAC,QAAQ,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC;QACrE,KAAK,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,EAAE,CAAC,CAAS,EAAE,EAAE,GAAG,MAAM,IAAI,CAAC,CAAC,QAAQ,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC;QACrE,KAAK,CAAC,EAAE,CAAC,OAAO,EAAE,CAAC,GAAG,EAAE,EAAE;YACtB,MAAM,IAAI,GAAG,CAAC,OAAO,CAAC;YACtB,OAAO,CAAC,EAAE,IAAI,EAAE,CAAC,EAAE,MAAM,EAAE,MAAM,EAAE,CAAC,CAAC;QACzC,CAAC,CAAC,CAAC;QACH,KAAK,CAAC,EAAE,CAAC,OAAO,EAAE,CAAC,IAAI,EAAE,EAAE;YACvB,OAAO,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,CAAC,CAAC;QACtC,CAAC,CAAC,CAAC;QACH,IAAI,KAAK,KAAK,SAAS,IAAI,KAAK,CAAC,KAAK,EAAE,CAAC;YACrC,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;QAC3B,CAAC;aAAM,IAAI,KAAK,CAAC,KAAK,EAAE,CAAC;YACrB,KAAK,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC;QACtB,CAAC;IACL,CAAC,CAAC,CAAC;AACP,CAAC;AAED;;GAEG;AACH,MAAM,CAAC,KAAK,UAAU,YAAY,CAAC,GAAwB;IACvD,MAAM,GAAG,GAAG,2BAA2B,CAAC,GAAG,CAAC,WAAW,EAAE,GAAG,CAAC,SAAS,CAAC,CAAC;IACxE,MAAM,KAAK,GAAG,cAAc,CAAC,GAAG,CAAC,CAAC;IAElC,IAAI,GAAG,CAAC,QAAQ,IAAI,GAAG,CAAC,aAAa,KAAK,MAAM,EAAE,CAAC;QAC/C,MAAM,IAAI,oBAAoB,CAC1B,iFAAiF;YACjF,gGAAgG;YAChG,mFAAmF,CACtF,CAAC;IACN,CAAC;IAED,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,GAAG,CAAC,WAAW,CAAC,EAAE,CAAC;QAClC,MAAM,IAAI,KAAK,CAAC,0CAA0C,GAAG,CAAC,WAAW,EAAE,CAAC,CAAC;IACjF,CAAC;IAED,MAAM,KAAK,GAA0B;QACjC,GAAG,CAAC,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,QAAQ;QAC3C,MAAM;QACN,MAAM;KACT,CAAC;IAEF,IAAI,GAAG,CAAC,aAAa,KAAK,WAAW,IAAI,GAAG,CAAC,MAAM,KAAK,MAAM,EAAE,CAAC;QAC7D,MAAM,aAAa,GAAG,kBAAkB,CAAC,GAAG,EAAE,GAAG,CAAC,OAAO,EAAE,GAAG,CAAC,IAAI,CAAC,CAAC;QACrE,MAAM,KAAK,GAAG,KAAK,CAAC,GAAG,CAAC,MAAM,EAAE,aAAa,EAAE;YAC3C,GAAG,EAAE,GAAG,CAAC,WAAW;YACpB,OAAO,EAAE,GAAG,CAAC,SAAS;YACtB,KAAK,EAAE,KAAK;YACZ,KAAK;YACL,GAAG,EAAE,GAAG,CAAC,GAAG,IAAI,OAAO,CAAC,GAAG;SAC9B,CAAC,CAAC;QACH,MAAM,MAAM,GAAG,MAAM,aAAa,CAAC,KAAK,EAAE,GAAG,CAAC,KAAK,CAAC,CAAC;QACrD,OAAO;YACH,GAAG,MAAM;YACT,OAAO,EAAE,WAAW;YACpB,MAAM,EAAE,GAAG,CAAC,MAAM;YAClB,cAAc,EAAE,KAAK;SACxB,CAAC;IACN,CAAC;IAED,gEAAgE;IAChE,MAAM,SAAS,GAAiB;QAC5B,GAAG,EAAE,GAAG,CAAC,WAAW;QACpB,OAAO,EAAE,GAAG,CAAC,SAAS;QACtB,KAAK,EAAE,KAAK;QACZ,KAAK;QACL,GAAG,EAAE,GAAG,CAAC,GAAG,IAAI,OAAO,CAAC,GAAG;KAC9B,CAAC;IAEF,MAAM,KAAK,GACP,GAAG,CAAC,aAAa,KAAK,KAAK;QACvB,CAAC,CAAC,YAAY,CAAC,GAAG,CAAC,OAAO,EAAE,GAAG,CAAC,IAAI,EAAE,SAAS,CAAC;QAChD,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,OAAO,EAAE,GAAG,CAAC,IAAI,EAAE,0BAA0B,CAAC,EAAE,GAAG,SAAS,EAAE,cAAc,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC;IAE3G,MAAM,MAAM,GAAG,MAAM,aAAa,CAAC,KAAK,EAAE,GAAG,CAAC,KAAK,CAAC,CAAC;IACrD,OAAO;QACH,GAAG,MAAM;QACT,OAAO,EAAE,GAAG,CAAC,aAAa;QAC1B,MAAM,EAAE,MAAM;QACd,cAAc,EAAE,KAAK;KACxB,CAAC;AACN,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,uBAAuB,CAAC,WAAW,GAAG,OAAO,CAAC,GAAG,EAAE;IAK/D,MAAM,MAAM,GAAG,2BAA2B,CAAC,WAAW,CAAC,CAAC;IACxD,OAAO;QACH,MAAM;QACN,cAAc,EAAE,cAAc,CAAC,MAAM,CAAC;QACtC,QAAQ,EAAE,sBAAsB,EAAE;KACrC,CAAC;AACN,CAAC"}
+{"version":3,"file":"sandbox-runtime.js","sourceRoot":"","sources":["../../../../shared/src/sandbox-runtime.ts"],"names":[],"mappings":"AAAA,cAAc,sCAAsC,CAAC"}

package/dist/shared/src/sandbox.d.ts

@@ -1,54 +1 @@
-/**
- * OS-level subprocess isolation via uid/gid (no Docker required).
- *
- * On Unix, child_process.spawn accepts `uid` and `gid`. When configured,
- * agent-triggered shell commands run as a restricted system user so that
- * even a hallucinated destructive command hits EACCES / Permission Denied
- * on protected paths.
- *
- * Windows: uid/gid are ignored; isolation is a no-op (allow-list still applies).
- *
- * Configuration (any of):
- *   ATABEY_SANDBOX_UID=501
- *   ATABEY_SANDBOX_GID=20
- *   ATABEY_SANDBOX_USER=atabey-sandbox   (resolved via `id -u` / `id -g` when possible)
- *   ATABEY_SANDBOX_ENABLED=true|false   (default: true when uid/gid resolvable)
- */
-import { SpawnOptions, ChildProcess } from "child_process";
-export interface SandboxIdentity {
-    uid?: number;
-    gid?: number;
-    user?: string;
-    enabled: boolean;
-    /** Why sandbox is off (for diagnostics). */
-    reason?: string;
-}
-export interface SandboxSpawnOptions extends SpawnOptions {
-    /** Force-disable sandbox for this call. */
-    disableSandbox?: boolean;
-}
-/**
- * Resolve sandbox identity from env (cached).
- * Call `clearSandboxIdentityCache()` in tests after env changes.
- */
-export declare function resolveSandboxIdentity(): SandboxIdentity;
-export declare function clearSandboxIdentityCache(): void;
-/**
- * Build spawn options with uid/gid when sandbox is active.
- */
-export declare function applySandboxToSpawnOptions(options?: SandboxSpawnOptions): SpawnOptions;
-/**
- * spawn() wrapper that applies OS sandbox identity when configured.
- */
-export declare function sandboxSpawn(command: string, args: readonly string[], options?: SandboxSpawnOptions): ChildProcess;
-/**
- * Human-readable status for dashboard / CLI diagnostics.
- */
-export declare function getSandboxStatus(): {
-    platform: string;
-    identity: SandboxIdentity;
-    processUid: number | null;
-    processGid: number | null;
-};
-/** Default restricted paths agents should not touch even with shell allow-list. */
-export declare const SANDBOX_PROTECTED_HINTS: readonly ["/etc", "/usr", "/bin", "/sbin", "/System", string];
+export * from "./modules/sandbox/sandbox.js";