attocode 0.2.3 → 0.2.5

package/dist/src/integrations/safety/sandbox/basic.js

@@ -0,0 +1,335 @@
+/**
+ * Basic Sandbox (Fallback)
+ *
+ * A simple allowlist/blocklist-based sandbox that works everywhere.
+ * Does not provide true isolation but validates commands before execution.
+ *
+ * Features:
+ * - Command allowlist validation
+ * - Dangerous pattern blocking
+ * - Path validation
+ * - Timeout enforcement
+ *
+ * Note: This is NOT a security sandbox - it's a best-effort validation
+ * layer for environments where proper sandboxing isn't available.
+ */
+import { spawn } from 'child_process';
+import { detectFileMutationViaBash, evaluateBashPolicy, stripCdPrefix } from '../bash-policy.js';
+// =============================================================================
+// DANGEROUS PATTERNS
+// =============================================================================
+/**
+ * Patterns that should always be blocked.
+ */
+const DANGEROUS_PATTERNS = [
+    // Recursive deletion of root or home
+    /rm\s+(-[rf]+\s+)*\//,
+    /rm\s+(-[rf]+\s+)*~/,
+    // Fork bomb
+    /:\(\)\{.*\};:/,
+    // Writing to block devices
+    />\s*\/dev\/sd[a-z]/,
+    /dd\s+.*of=\/dev/,
+    // Filesystem formatting
+    /mkfs/,
+    // Download and execute
+    /curl\s+.*\|\s*(ba)?sh/,
+    /wget\s+.*\|\s*(ba)?sh/,
+    // Privilege escalation
+    /sudo\s/,
+    /su\s+-/,
+    /doas\s/,
+    // Dangerous chmod
+    /chmod\s+777\s+\//,
+    /chmod\s+-R\s+777/,
+    // Network data exfiltration patterns
+    /curl\s+.*-d\s+.*\$\(/,
+    /nc\s+-e/,
+];
+/**
+ * Commands that are always blocked.
+ */
+const BLOCKED_COMMANDS = [
+    'shutdown',
+    'reboot',
+    'halt',
+    'poweroff',
+    'init',
+    'systemctl stop',
+    'systemctl disable',
+    'mkfs',
+    'fdisk',
+    'parted',
+    'mount',
+    'umount',
+    'iptables',
+    'firewall-cmd',
+];
+/**
+ * Legacy compatibility shim used by older call sites/tests.
+ */
+export function detectFileCreationViaBash(command) {
+    const detected = detectFileMutationViaBash(command);
+    if (!detected.detected) {
+        return { detected: false };
+    }
+    return {
+        detected: true,
+        reason: `File creation/modification via bash blocked (${detected.reason}). ` +
+            'Use write_file to create files and edit_file to modify them.',
+    };
+}
+// =============================================================================
+// BASIC SANDBOX
+// =============================================================================
+/**
+ * Basic allowlist-based sandbox.
+ */
+export class BasicSandbox {
+    options;
+    constructor(options) {
+        this.options = options;
+    }
+    /**
+     * Execute a command with validation.
+     */
+    async execute(command, options) {
+        const mergedOptions = { ...this.options, ...options };
+        // Validate command
+        const validation = this.validateCommand(command, mergedOptions);
+        if (!validation.allowed) {
+            return {
+                stdout: '',
+                stderr: `Command blocked: ${validation.reason}`,
+                exitCode: 1,
+                killed: false,
+                timedOut: false,
+                error: validation.reason,
+            };
+        }
+        const timeout = mergedOptions.timeout ?? 60000;
+        const workDir = mergedOptions.workingDir ?? process.cwd();
+        return new Promise((resolve) => {
+            const proc = spawn('bash', ['-c', command], {
+                cwd: workDir,
+                env: {
+                    ...process.env,
+                    ...mergedOptions.env,
+                },
+                stdio: ['pipe', 'pipe', 'pipe'],
+            });
+            let stdout = '';
+            let stderr = '';
+            let killed = false;
+            let timedOut = false;
+            const timer = setTimeout(() => {
+                timedOut = true;
+                killed = true;
+                proc.kill('SIGKILL');
+            }, timeout);
+            proc.stdout?.on('data', (data) => {
+                stdout += data.toString();
+            });
+            proc.stderr?.on('data', (data) => {
+                stderr += data.toString();
+            });
+            proc.on('close', (code) => {
+                clearTimeout(timer);
+                resolve({
+                    stdout,
+                    stderr,
+                    exitCode: code ?? 1,
+                    killed,
+                    timedOut,
+                });
+            });
+            proc.on('error', (err) => {
+                clearTimeout(timer);
+                resolve({
+                    stdout,
+                    stderr,
+                    exitCode: 1,
+                    killed: false,
+                    timedOut: false,
+                    error: err.message,
+                });
+            });
+        });
+    }
+    /**
+     * Validate a command against allowlist and blocklist.
+     */
+    validateCommand(command, options) {
+        // Check for dangerous patterns
+        for (const pattern of DANGEROUS_PATTERNS) {
+            if (pattern.test(command)) {
+                return { allowed: false, reason: 'Command matches dangerous pattern' };
+            }
+        }
+        // Check for blocked commands
+        for (const blocked of BLOCKED_COMMANDS) {
+            if (command.includes(blocked)) {
+                return { allowed: false, reason: `Blocked command: ${blocked}` };
+            }
+        }
+        // Check user-specified blocked commands
+        for (const blocked of options.blockedCommands ?? []) {
+            if (command.includes(blocked)) {
+                return { allowed: false, reason: `Blocked by configuration: ${blocked}` };
+            }
+        }
+        const writeProtection = options.blockFileCreationViaBash
+            ? 'block_file_mutation'
+            : (options.bashWriteProtection ?? 'off');
+        const bashPolicy = evaluateBashPolicy(command, options.bashMode ?? 'full', writeProtection);
+        if (!bashPolicy.allowed) {
+            return { allowed: false, reason: bashPolicy.reason };
+        }
+        // Extract the base command
+        const baseCommand = this.extractBaseCommand(command);
+        // Check against allowlist if provided
+        const allowedCommands = options.allowedCommands;
+        if (allowedCommands && allowedCommands.length > 0) {
+            if (!allowedCommands.includes(baseCommand)) {
+                const suggestions = allowedCommands.slice(0, 10).join(', ');
+                return {
+                    allowed: false,
+                    reason: `Command '${baseCommand}' is not in the sandbox allowlist.\nIMPORTANT: Do NOT use bash for file creation. Use the write_file tool to create files and edit_file to modify them.\nUse bash ONLY for running commands like: ${suggestions}...`,
+                };
+            }
+        }
+        // Check path access
+        const pathValidation = this.validatePaths(command, options);
+        if (!pathValidation.allowed) {
+            return pathValidation;
+        }
+        return { allowed: true };
+    }
+    /**
+     * Extract the base command from a command string.
+     */
+    extractBaseCommand(command) {
+        // Strip cd prefix — "cd /path && npm test" → "npm test"
+        const stripped = stripCdPrefix(command);
+        // Handle pipes and redirects
+        const firstPart = stripped.split(/[|;&]/)[0].trim();
+        // Handle env vars and other prefixes
+        const parts = firstPart.split(/\s+/);
+        // Skip env var assignments
+        for (const part of parts) {
+            if (!part.includes('=') && !part.startsWith('-')) {
+                // Get just the command name without path
+                return part.split('/').pop() || part;
+            }
+        }
+        return parts[0] || '';
+    }
+    /**
+     * Validate path access in command.
+     */
+    validatePaths(command, options) {
+        const writablePaths = options.writablePaths ?? ['.'];
+        const workDir = options.workingDir ?? process.cwd();
+        // Check for writes to paths outside writable areas
+        const writePatterns = [
+            />>\?\s*["']?([^"'\s]+)/g, // Append redirect
+            />\s*["']?([^"'\s]+)/g, // Write redirect
+            /\btee\s+["']?([^"'\s]+)/g, // tee command
+        ];
+        for (const pattern of writePatterns) {
+            let match;
+            while ((match = pattern.exec(command)) !== null) {
+                const path = match[1];
+                if (path && !this.isPathWritable(path, writablePaths, workDir)) {
+                    return { allowed: false, reason: `Write to path not allowed: ${path}` };
+                }
+            }
+        }
+        return { allowed: true };
+    }
+    /**
+     * Check if a path is in the writable list.
+     */
+    isPathWritable(path, writablePaths, workDir) {
+        // Resolve the path
+        const resolvedPath = path.startsWith('/')
+            ? path
+            : `${workDir}/${path}`;
+        // Check against writable paths
+        for (const writable of writablePaths) {
+            const resolvedWritable = writable.startsWith('/')
+                ? writable
+                : writable === '.'
+                    ? workDir
+                    : `${workDir}/${writable}`;
+            if (resolvedPath.startsWith(resolvedWritable)) {
+                return true;
+            }
+        }
+        // Allow /tmp and /dev/null
+        if (resolvedPath.startsWith('/tmp') || resolvedPath === '/dev/null') {
+            return true;
+        }
+        return false;
+    }
+    /**
+     * Always available.
+     */
+    async isAvailable() {
+        return true;
+    }
+    /**
+     * Get sandbox type.
+     */
+    getType() {
+        return 'basic';
+    }
+    /**
+     * Cleanup resources.
+     */
+    async cleanup() {
+        // No cleanup needed
+    }
+}
+// =============================================================================
+// UTILITY FUNCTIONS
+// =============================================================================
+/**
+ * Check if a command is safe to execute (static validation).
+ */
+export function isCommandSafe(command) {
+    // Check dangerous patterns
+    for (const pattern of DANGEROUS_PATTERNS) {
+        if (pattern.test(command)) {
+            return { safe: false, reason: 'Matches dangerous pattern' };
+        }
+    }
+    // Check blocked commands
+    for (const blocked of BLOCKED_COMMANDS) {
+        if (command.includes(blocked)) {
+            return { safe: false, reason: `Contains blocked command: ${blocked}` };
+        }
+    }
+    return { safe: true };
+}
+/**
+ * Sanitize a command argument for safe shell use.
+ */
+export function sanitizeArgument(arg) {
+    // Escape special shell characters
+    return arg.replace(/([\\$`"!])/g, '\\$1');
+}
+/**
+ * Build a safe command string from parts.
+ */
+export function buildSafeCommand(command, args) {
+    const sanitizedArgs = args.map((arg) => {
+        // Quote arguments with spaces or special chars
+        if (/[\s\\$`"'!*?<>|;&]/.test(arg)) {
+            return `"${sanitizeArgument(arg)}"`;
+        }
+        return arg;
+    });
+    return `${command} ${sanitizedArgs.join(' ')}`;
+}
+//# sourceMappingURL=basic.js.map

package/dist/src/integrations/safety/sandbox/basic.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"basic.js","sourceRoot":"","sources":["../../../../../src/integrations/safety/sandbox/basic.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;GAcG;AAEH,OAAO,EAAE,KAAK,EAAE,MAAM,eAAe,CAAC;AAEtC,OAAO,EAAE,yBAAyB,EAAE,kBAAkB,EAAE,aAAa,EAAE,MAAM,mBAAmB,CAAC;AAEjG,gFAAgF;AAChF,qBAAqB;AACrB,gFAAgF;AAEhF;;GAEG;AACH,MAAM,kBAAkB,GAAG;IACzB,qCAAqC;IACrC,qBAAqB;IACrB,oBAAoB;IAEpB,YAAY;IACZ,eAAe;IAEf,2BAA2B;IAC3B,oBAAoB;IACpB,iBAAiB;IAEjB,wBAAwB;IACxB,MAAM;IAEN,uBAAuB;IACvB,uBAAuB;IACvB,uBAAuB;IAEvB,uBAAuB;IACvB,QAAQ;IACR,QAAQ;IACR,QAAQ;IAER,kBAAkB;IAClB,kBAAkB;IAClB,kBAAkB;IAElB,qCAAqC;IACrC,sBAAsB;IACtB,SAAS;CACV,CAAC;AAEF;;GAEG;AACH,MAAM,gBAAgB,GAAG;IACvB,UAAU;IACV,QAAQ;IACR,MAAM;IACN,UAAU;IACV,MAAM;IACN,gBAAgB;IAChB,mBAAmB;IACnB,MAAM;IACN,OAAO;IACP,QAAQ;IACR,OAAO;IACP,QAAQ;IACR,UAAU;IACV,cAAc;CACf,CAAC;AAEF;;GAEG;AACH,MAAM,UAAU,yBAAyB,CAAC,OAAe;IACvD,MAAM,QAAQ,GAAG,yBAAyB,CAAC,OAAO,CAAC,CAAC;IACpD,IAAI,CAAC,QAAQ,CAAC,QAAQ,EAAE,CAAC;QACvB,OAAO,EAAE,QAAQ,EAAE,KAAK,EAAE,CAAC;IAC7B,CAAC;IACD,OAAO;QACL,QAAQ,EAAE,IAAI;QACd,MAAM,EACJ,gDAAgD,QAAQ,CAAC,MAAM,KAAK;YACpE,8DAA8D;KACjE,CAAC;AACJ,CAAC;AAED,gFAAgF;AAChF,gBAAgB;AAChB,gFAAgF;AAEhF;;GAEG;AACH,MAAM,OAAO,YAAY;IACf,OAAO,CAAiB;IAEhC,YAAY,OAAuB;QACjC,IAAI,CAAC,OAAO,GAAG,OAAO,CAAC;IACzB,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,OAAO,CAAC,OAAe,EAAE,OAAiC;QAC9D,MAAM,aAAa,GAAG,EAAE,GAAG,IAAI,CAAC,OAAO,EAAE,GAAG,OAAO,EAAE,CAAC;QAEtD,mBAAmB;QACnB,MAAM,UAAU,GAAG,IAAI,CAAC,eAAe,CAAC,OAAO,EAAE,aAAa,CAAC,CAAC;QAChE,IAAI,CAAC,UAAU,CAAC,OAAO,EAAE,CAAC;YACxB,OAAO;gBACL,MAAM,EAAE,EAAE;gBACV,MAAM,EAAE,oBAAoB,UAAU,CAAC,MAAM,EAAE;gBAC/C,QAAQ,EAAE,CAAC;gBACX,MAAM,EAAE,KAAK;gBACb,QAAQ,EAAE,KAAK;gBACf,KAAK,EAAE,UAAU,CAAC,MAAM;aACzB,CAAC;QACJ,CAAC;QAED,MAAM,OAAO,GAAG,aAAa,CAAC,OAAO,IAAI,KAAK,CAAC;QAC/C,MAAM,OAAO,GAAG,aAAa,CAAC,UAAU,IAAI,OAAO,CAAC,GAAG,EAAE,CAAC;QAE1D,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,EAAE;YAC7B,MAAM,IAAI,GAAG,KAAK,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,OAAO,CAAC,EAAE;gBAC1C,GAAG,EAAE,OAAO;gBACZ,GAAG,EAAE;oBACH,GAAG,OAAO,CAAC,GAAG;oBACd,GAAG,aAAa,CAAC,GAAG;iBACrB;gBACD,KAAK,EAAE,CAAC,MAAM,EAAE,MAAM,EAAE,MAAM,CAAC;aAChC,CAAC,CAAC;YAEH,IAAI,MAAM,GAAG,EAAE,CAAC;YAChB,IAAI,MAAM,GAAG,EAAE,CAAC;YAChB,IAAI,MAAM,GAAG,KAAK,CAAC;YACnB,IAAI,QAAQ,GAAG,KAAK,CAAC;YAErB,MAAM,KAAK,GAAG,UAAU,CAAC,GAAG,EAAE;gBAC5B,QAAQ,GAAG,IAAI,CAAC;gBAChB,MAAM,GAAG,IAAI,CAAC;gBACd,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;YACvB,CAAC,EAAE,OAAO,CAAC,CAAC;YAEZ,IAAI,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,EAAE;gBAC/B,MAAM,IAAI,IAAI,CAAC,QAAQ,EAAE,CAAC;YAC5B,CAAC,CAAC,CAAC;YAEH,IAAI,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,EAAE;gBAC/B,MAAM,IAAI,IAAI,CAAC,QAAQ,EAAE,CAAC;YAC5B,CAAC,CAAC,CAAC;YAEH,IAAI,CAAC,EAAE,CAAC,OAAO,EAAE,CAAC,IAAI,EAAE,EAAE;gBACxB,YAAY,CAAC,KAAK,CAAC,CAAC;gBACpB,OAAO,CAAC;oBACN,MAAM;oBACN,MAAM;oBACN,QAAQ,EAAE,IAAI,IAAI,CAAC;oBACnB,MAAM;oBACN,QAAQ;iBACT,CAAC,CAAC;YACL,CAAC,CAAC,CAAC;YAEH,IAAI,CAAC,EAAE,CAAC,OAAO,EAAE,CAAC,GAAG,EAAE,EAAE;gBACvB,YAAY,CAAC,KAAK,CAAC,CAAC;gBACpB,OAAO,CAAC;oBACN,MAAM;oBACN,MAAM;oBACN,QAAQ,EAAE,CAAC;oBACX,MAAM,EAAE,KAAK;oBACb,QAAQ,EAAE,KAAK;oBACf,KAAK,EAAE,GAAG,CAAC,OAAO;iBACnB,CAAC,CAAC;YACL,CAAC,CAAC,CAAC;QACL,CAAC,CAAC,CAAC;IACL,CAAC;IAED;;OAEG;IACH,eAAe,CACb,OAAe,EACf,OAAuB;QAEvB,+BAA+B;QAC/B,KAAK,MAAM,OAAO,IAAI,kBAAkB,EAAE,CAAC;YACzC,IAAI,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC;gBAC1B,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,MAAM,EAAE,mCAAmC,EAAE,CAAC;YACzE,CAAC;QACH,CAAC;QAED,6BAA6B;QAC7B,KAAK,MAAM,OAAO,IAAI,gBAAgB,EAAE,CAAC;YACvC,IAAI,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAC,EAAE,CAAC;gBAC9B,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,MAAM,EAAE,oBAAoB,OAAO,EAAE,EAAE,CAAC;YACnE,CAAC;QACH,CAAC;QAED,wCAAwC;QACxC,KAAK,MAAM,OAAO,IAAI,OAAO,CAAC,eAAe,IAAI,EAAE,EAAE,CAAC;YACpD,IAAI,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAC,EAAE,CAAC;gBAC9B,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,MAAM,EAAE,6BAA6B,OAAO,EAAE,EAAE,CAAC;YAC5E,CAAC;QACH,CAAC;QAED,MAAM,eAAe,GAAG,OAAO,CAAC,wBAAwB;YACtD,CAAC,CAAC,qBAAqB;YACvB,CAAC,CAAC,CAAC,OAAO,CAAC,mBAAmB,IAAI,KAAK,CAAC,CAAC;QAE3C,MAAM,UAAU,GAAG,kBAAkB,CAAC,OAAO,EAAE,OAAO,CAAC,QAAQ,IAAI,MAAM,EAAE,eAAe,CAAC,CAAC;QAC5F,IAAI,CAAC,UAAU,CAAC,OAAO,EAAE,CAAC;YACxB,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,MAAM,EAAE,UAAU,CAAC,MAAM,EAAE,CAAC;QACvD,CAAC;QAED,2BAA2B;QAC3B,MAAM,WAAW,GAAG,IAAI,CAAC,kBAAkB,CAAC,OAAO,CAAC,CAAC;QAErD,sCAAsC;QACtC,MAAM,eAAe,GAAG,OAAO,CAAC,eAAe,CAAC;QAChD,IAAI,eAAe,IAAI,eAAe,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YAClD,IAAI,CAAC,eAAe,CAAC,QAAQ,CAAC,WAAW,CAAC,EAAE,CAAC;gBAC3C,MAAM,WAAW,GAAG,eAAe,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;gBAC5D,OAAO;oBACL,OAAO,EAAE,KAAK;oBACd,MAAM,EAAE,YAAY,WAAW,qMAAqM,WAAW,KAAK;iBACrP,CAAC;YACJ,CAAC;QACH,CAAC;QAED,oBAAoB;QACpB,MAAM,cAAc,GAAG,IAAI,CAAC,aAAa,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;QAC5D,IAAI,CAAC,cAAc,CAAC,OAAO,EAAE,CAAC;YAC5B,OAAO,cAAc,CAAC;QACxB,CAAC;QAED,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC;IAC3B,CAAC;IAED;;OAEG;IACK,kBAAkB,CAAC,OAAe;QACxC,wDAAwD;QACxD,MAAM,QAAQ,GAAG,aAAa,CAAC,OAAO,CAAC,CAAC;QACxC,6BAA6B;QAC7B,MAAM,SAAS,GAAG,QAAQ,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;QAEpD,qCAAqC;QACrC,MAAM,KAAK,GAAG,SAAS,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;QAErC,2BAA2B;QAC3B,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;YACzB,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,EAAE,CAAC;gBACjD,yCAAyC;gBACzC,OAAO,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,IAAI,IAAI,CAAC;YACvC,CAAC;QACH,CAAC;QAED,OAAO,KAAK,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;IACxB,CAAC;IAED;;OAEG;IACK,aAAa,CACnB,OAAe,EACf,OAAuB;QAEvB,MAAM,aAAa,GAAG,OAAO,CAAC,aAAa,IAAI,CAAC,GAAG,CAAC,CAAC;QACrD,MAAM,OAAO,GAAG,OAAO,CAAC,UAAU,IAAI,OAAO,CAAC,GAAG,EAAE,CAAC;QAEpD,mDAAmD;QACnD,MAAM,aAAa,GAAG;YACpB,yBAAyB,EAAO,kBAAkB;YAClD,sBAAsB,EAAU,iBAAiB;YACjD,0BAA0B,EAAM,cAAc;SAC/C,CAAC;QAEF,KAAK,MAAM,OAAO,IAAI,aAAa,EAAE,CAAC;YACpC,IAAI,KAAK,CAAC;YACV,OAAO,CAAC,KAAK,GAAG,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,KAAK,IAAI,EAAE,CAAC;gBAChD,MAAM,IAAI,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC;gBACtB,IAAI,IAAI,IAAI,CAAC,IAAI,CAAC,cAAc,CAAC,IAAI,EAAE,aAAa,EAAE,OAAO,CAAC,EAAE,CAAC;oBAC/D,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,MAAM,EAAE,8BAA8B,IAAI,EAAE,EAAE,CAAC;gBAC1E,CAAC;YACH,CAAC;QACH,CAAC;QAED,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC;IAC3B,CAAC;IAED;;OAEG;IACK,cAAc,CACpB,IAAY,EACZ,aAAuB,EACvB,OAAe;QAEf,mBAAmB;QACnB,MAAM,YAAY,GAAG,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC;YACvC,CAAC,CAAC,IAAI;YACN,CAAC,CAAC,GAAG,OAAO,IAAI,IAAI,EAAE,CAAC;QAEzB,+BAA+B;QAC/B,KAAK,MAAM,QAAQ,IAAI,aAAa,EAAE,CAAC;YACrC,MAAM,gBAAgB,GAAG,QAAQ,CAAC,UAAU,CAAC,GAAG,CAAC;gBAC/C,CAAC,CAAC,QAAQ;gBACV,CAAC,CAAC,QAAQ,KAAK,GAAG;oBAChB,CAAC,CAAC,OAAO;oBACT,CAAC,CAAC,GAAG,OAAO,IAAI,QAAQ,EAAE,CAAC;YAE/B,IAAI,YAAY,CAAC,UAAU,CAAC,gBAAgB,CAAC,EAAE,CAAC;gBAC9C,OAAO,IAAI,CAAC;YACd,CAAC;QACH,CAAC;QAED,2BAA2B;QAC3B,IAAI,YAAY,CAAC,UAAU,CAAC,MAAM,CAAC,IAAI,YAAY,KAAK,WAAW,EAAE,CAAC;YACpE,OAAO,IAAI,CAAC;QACd,CAAC;QAED,OAAO,KAAK,CAAC;IACf,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,WAAW;QACf,OAAO,IAAI,CAAC;IACd,CAAC;IAED;;OAEG;IACH,OAAO;QACL,OAAO,OAAO,CAAC;IACjB,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,OAAO;QACX,oBAAoB;IACtB,CAAC;CACF;AAED,gFAAgF;AAChF,oBAAoB;AACpB,gFAAgF;AAEhF;;GAEG;AACH,MAAM,UAAU,aAAa,CAAC,OAAe;IAC3C,2BAA2B;IAC3B,KAAK,MAAM,OAAO,IAAI,kBAAkB,EAAE,CAAC;QACzC,IAAI,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC;YAC1B,OAAO,EAAE,IAAI,EAAE,KAAK,EAAE,MAAM,EAAE,2BAA2B,EAAE,CAAC;QAC9D,CAAC;IACH,CAAC;IAED,yBAAyB;IACzB,KAAK,MAAM,OAAO,IAAI,gBAAgB,EAAE,CAAC;QACvC,IAAI,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAC,EAAE,CAAC;YAC9B,OAAO,EAAE,IAAI,EAAE,KAAK,EAAE,MAAM,EAAE,6BAA6B,OAAO,EAAE,EAAE,CAAC;QACzE,CAAC;IACH,CAAC;IAED,OAAO,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC;AACxB,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,gBAAgB,CAAC,GAAW;IAC1C,kCAAkC;IAClC,OAAO,GAAG,CAAC,OAAO,CAAC,aAAa,EAAE,MAAM,CAAC,CAAC;AAC5C,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,gBAAgB,CAAC,OAAe,EAAE,IAAc;IAC9D,MAAM,aAAa,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE;QACrC,+CAA+C;QAC/C,IAAI,oBAAoB,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC;YACnC,OAAO,IAAI,gBAAgB,CAAC,GAAG,CAAC,GAAG,CAAC;QACtC,CAAC;QACD,OAAO,GAAG,CAAC;IACb,CAAC,CAAC,CAAC;IAEH,OAAO,GAAG,OAAO,IAAI,aAAa,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC;AACjD,CAAC"}

package/dist/src/integrations/safety/sandbox/docker.d.ts

@@ -0,0 +1,94 @@
+/**
+ * Docker Sandbox (Linux/Cross-platform)
+ *
+ * Uses Docker containers for process isolation and resource limiting.
+ * Works on any platform with Docker installed.
+ *
+ * Key features:
+ * - Complete filesystem isolation
+ * - Network namespace separation
+ * - CPU and memory limits via cgroups
+ * - Capability dropping
+ *
+ * Note: Uses spawn() to invoke docker CLI commands with proper argument
+ * arrays - the sandbox provides security via containerization.
+ */
+import type { Sandbox, SandboxMode, SandboxOptions, ExecResult } from './index.js';
+/**
+ * Docker-based sandbox implementation.
+ */
+export declare class DockerSandbox implements Sandbox {
+    private options;
+    private image;
+    private available;
+    private containerId;
+    constructor(options: SandboxOptions, image?: string);
+    /**
+     * Execute a command inside a Docker container.
+     *
+     * Uses spawn with explicit argument arrays for security.
+     */
+    execute(command: string, options?: Partial<SandboxOptions>): Promise<ExecResult>;
+    /**
+     * Build docker run arguments.
+     */
+    private buildDockerArgs;
+    /**
+     * Resolve a path relative to working directory.
+     */
+    private resolvePath;
+    /**
+     * Check if Docker is available.
+     */
+    isAvailable(): Promise<boolean>;
+    /**
+     * Get sandbox type.
+     */
+    getType(): SandboxMode;
+    /**
+     * Cleanup resources.
+     */
+    cleanup(): Promise<void>;
+    /**
+     * Pull the Docker image if not present.
+     */
+    ensureImage(): Promise<void>;
+    /**
+     * Set the Docker image to use.
+     */
+    setImage(image: string): void;
+    /**
+     * Get the current Docker image.
+     */
+    getImage(): string;
+}
+/**
+ * Recommended Docker images for different use cases.
+ */
+export declare const DOCKER_IMAGES: {
+    /** Minimal Node.js for JavaScript/TypeScript */
+    readonly node: "node:20-slim";
+    /** Python for Python scripts */
+    readonly python: "python:3.12-slim";
+    /** Alpine for general shell commands */
+    readonly alpine: "alpine:latest";
+    /** Ubuntu for full Linux environment */
+    readonly ubuntu: "ubuntu:22.04";
+    /** Deno for Deno scripts */
+    readonly deno: "denoland/deno:latest";
+    /** Bun for Bun scripts */
+    readonly bun: "oven/bun:latest";
+};
+/**
+ * Strict Docker profile - minimal access.
+ */
+export declare const DOCKER_STRICT_PROFILE: SandboxOptions;
+/**
+ * Development Docker profile.
+ */
+export declare const DOCKER_DEV_PROFILE: SandboxOptions;
+/**
+ * CI/CD Docker profile.
+ */
+export declare const DOCKER_CI_PROFILE: SandboxOptions;
+//# sourceMappingURL=docker.d.ts.map

package/dist/src/integrations/safety/sandbox/docker.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"docker.d.ts","sourceRoot":"","sources":["../../../../../src/integrations/safety/sandbox/docker.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;GAcG;AAGH,OAAO,KAAK,EAAE,OAAO,EAAE,WAAW,EAAE,cAAc,EAAE,UAAU,EAAE,MAAM,YAAY,CAAC;AAOnF;;GAEG;AACH,qBAAa,aAAc,YAAW,OAAO;IAC3C,OAAO,CAAC,OAAO,CAAiB;IAChC,OAAO,CAAC,KAAK,CAAS;IACtB,OAAO,CAAC,SAAS,CAAwB;IACzC,OAAO,CAAC,WAAW,CAAuB;gBAE9B,OAAO,EAAE,cAAc,EAAE,KAAK,GAAE,MAAuB;IAKnE;;;;OAIG;IACG,OAAO,CAAC,OAAO,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,OAAO,CAAC,cAAc,CAAC,GAAG,OAAO,CAAC,UAAU,CAAC;IAuEtF;;OAEG;IACH,OAAO,CAAC,eAAe;IA+EvB;;OAEG;IACH,OAAO,CAAC,WAAW;IAUnB;;OAEG;IACG,WAAW,IAAI,OAAO,CAAC,OAAO,CAAC;IAgBrC;;OAEG;IACH,OAAO,IAAI,WAAW;IAItB;;OAEG;IACG,OAAO,IAAI,OAAO,CAAC,IAAI,CAAC;IAW9B;;OAEG;IACG,WAAW,IAAI,OAAO,CAAC,IAAI,CAAC;IAUlC;;OAEG;IACH,QAAQ,CAAC,KAAK,EAAE,MAAM,GAAG,IAAI;IAI7B;;OAEG;IACH,QAAQ,IAAI,MAAM;CAGnB;AAMD;;GAEG;AACH,eAAO,MAAM,aAAa;IACxB,gDAAgD;;IAGhD,gCAAgC;;IAGhC,wCAAwC;;IAGxC,wCAAwC;;IAGxC,4BAA4B;;IAG5B,0BAA0B;;CAElB,CAAC;AAMX;;GAEG;AACH,eAAO,MAAM,qBAAqB,EAAE,cAOnC,CAAC;AAEF;;GAEG;AACH,eAAO,MAAM,kBAAkB,EAAE,cAOhC,CAAC;AAEF;;GAEG;AACH,eAAO,MAAM,iBAAiB,EAAE,cAO/B,CAAC"}