axon-code 2.4.0

package/dist/sandbox/executor.js

@@ -0,0 +1,341 @@
+/**
+ * Unified Sandbox Executor
+ * Automatically selects the appropriate sandbox based on platform and configuration
+ */
+import * as os from 'os';
+import * as child_process from 'child_process';
+import { execInSandbox } from './bubblewrap.js';
+import { execInSeatbelt } from './seatbelt.js';
+import { execInDocker } from './docker.js';
+import { ResourceLimiter, buildUlimitArgs } from './resource-limits.js';
+import { isWindows, escapePathForShell } from '../utils/platform.js';
+// ============================================================================
+// Unified Executor
+// ============================================================================
+/**
+ * Execute command with automatic sandbox selection
+ */
+export async function executeInSandbox(command, args = [], config) {
+    const platform = os.platform();
+    // Disabled sandbox
+    if (!config.enabled || config.type === 'none') {
+        return executeUnsandboxed(command, args, config);
+    }
+    // Docker mode (cross-platform)
+    if (config.type === 'docker') {
+        const result = await execInDocker(command, args, {
+            image: config.docker?.image,
+            volumes: config.docker?.volumes,
+            network: config.docker?.network,
+            memory: config.resourceLimits?.maxMemory
+                ? `${Math.floor(config.resourceLimits.maxMemory / 1024 / 1024)}m`
+                : undefined,
+            cpus: config.resourceLimits?.maxCpu
+                ? `${config.resourceLimits.maxCpu / 100}`
+                : undefined,
+            timeout: config.resourceLimits?.maxExecutionTime,
+            env: config.environmentVariables,
+        });
+        return {
+            ...result,
+            sandboxType: 'docker',
+        };
+    }
+    // Platform-specific sandboxes
+    if (platform === 'linux' && config.type === 'bubblewrap') {
+        const result = await execInSandbox(command, args, {
+            config: {
+                enabled: true,
+                allowNetwork: config.networkAccess,
+                allowRead: config.readOnlyPaths,
+                allowWrite: config.writablePaths,
+            },
+            timeout: config.resourceLimits?.maxExecutionTime,
+            env: config.environmentVariables,
+        });
+        return {
+            ...result,
+            sandboxType: 'bubblewrap',
+        };
+    }
+    if (platform === 'darwin') {
+        const result = await execInSeatbelt(command, args, {
+            allowNetwork: config.networkAccess,
+            allowRead: config.readOnlyPaths,
+            allowWrite: config.writablePaths,
+            timeout: config.resourceLimits?.maxExecutionTime,
+            env: config.environmentVariables,
+        });
+        return {
+            ...result,
+            sandboxType: 'seatbelt',
+        };
+    }
+    // Fallback to unsandboxed
+    console.warn(`No sandbox available for platform: ${platform}, executing unsandboxed`);
+    return executeUnsandboxed(command, args, config);
+}
+/**
+ * 准备安全的环境变量（处理 Windows 临时目录路径转义问题）
+ */
+function prepareSafeEnv(env) {
+    const safeEnv = { ...(env || process.env) };
+    // 在 Windows 上，临时目录路径可能包含 \t 或 \n 这样的字符
+    // 这些会被 shell 误解为转义序列，需要进行处理
+    if (isWindows()) {
+        if (safeEnv.TMPDIR) {
+            safeEnv.TMPDIR = escapePathForShell(safeEnv.TMPDIR);
+        }
+        if (safeEnv.TEMP) {
+            safeEnv.TEMP = escapePathForShell(safeEnv.TEMP);
+        }
+        if (safeEnv.TMP) {
+            safeEnv.TMP = escapePathForShell(safeEnv.TMP);
+        }
+    }
+    return safeEnv;
+}
+/**
+ * Execute without sandbox
+ */
+async function executeUnsandboxed(command, args, config) {
+    const startTime = Date.now();
+    // Apply resource limits if specified
+    if (config.resourceLimits) {
+        const ulimitArgs = buildUlimitArgs(config.resourceLimits);
+        if (ulimitArgs.length > 0) {
+            return executeWithUlimit(command, args, config);
+        }
+    }
+    // 准备安全的环境变量
+    const safeEnv = prepareSafeEnv(config.environmentVariables);
+    return new Promise((resolve) => {
+        const proc = child_process.spawn(command, args, {
+            env: safeEnv,
+            stdio: ['pipe', 'pipe', 'pipe'],
+            timeout: config.resourceLimits?.maxExecutionTime,
+            windowsHide: true,
+        });
+        let stdout = '';
+        let stderr = '';
+        proc.stdout.on('data', (data) => {
+            stdout += data.toString();
+        });
+        proc.stderr.on('data', (data) => {
+            stderr += data.toString();
+        });
+        proc.on('close', (code) => {
+            resolve({
+                exitCode: code ?? 1,
+                stdout,
+                stderr,
+                sandboxed: false,
+                sandboxType: 'none',
+                duration: Date.now() - startTime,
+            });
+        });
+        proc.on('error', (err) => {
+            resolve({
+                exitCode: 1,
+                stdout,
+                stderr: err.message,
+                sandboxed: false,
+                sandboxType: 'none',
+                duration: Date.now() - startTime,
+            });
+        });
+    });
+}
+/**
+ * Execute with ulimit resource limits
+ */
+async function executeWithUlimit(command, args, config) {
+    const startTime = Date.now();
+    const ulimitArgs = buildUlimitArgs(config.resourceLimits);
+    const fullCommand = `ulimit ${ulimitArgs.join(' ')} && ${command} ${args.join(' ')}`;
+    // 准备安全的环境变量
+    const safeEnv = prepareSafeEnv(config.environmentVariables);
+    return new Promise((resolve) => {
+        // ulimit 是 Unix 专属命令，在 Windows 上不可用
+        // 如果在 Windows 上调用此函数，应该直接使用 shell: true
+        let proc;
+        if (isWindows()) {
+            // Windows 上不支持 ulimit，直接执行命令
+            proc = child_process.spawn(`${command} ${args.join(' ')}`, [], {
+                env: safeEnv,
+                stdio: ['pipe', 'pipe', 'pipe'],
+                timeout: config.resourceLimits?.maxExecutionTime,
+                shell: true,
+                windowsHide: true,
+            });
+        }
+        else {
+            proc = child_process.spawn('sh', ['-c', fullCommand], {
+                env: safeEnv,
+                stdio: ['pipe', 'pipe', 'pipe'],
+                timeout: config.resourceLimits?.maxExecutionTime,
+            });
+        }
+        let stdout = '';
+        let stderr = '';
+        proc.stdout.on('data', (data) => {
+            stdout += data.toString();
+        });
+        proc.stderr.on('data', (data) => {
+            stderr += data.toString();
+        });
+        proc.on('close', (code) => {
+            resolve({
+                exitCode: code ?? 1,
+                stdout,
+                stderr,
+                sandboxed: false,
+                sandboxType: 'none',
+                duration: Date.now() - startTime,
+            });
+        });
+        proc.on('error', (err) => {
+            resolve({
+                exitCode: 1,
+                stdout,
+                stderr: err.message,
+                sandboxed: false,
+                sandboxType: 'none',
+                duration: Date.now() - startTime,
+            });
+        });
+    });
+}
+// ============================================================================
+// Executor Class
+// ============================================================================
+export class SandboxExecutor {
+    config;
+    resourceLimiter;
+    constructor(config) {
+        this.config = config;
+        if (config.resourceLimits) {
+            this.resourceLimiter = new ResourceLimiter(config.resourceLimits);
+        }
+    }
+    /**
+     * Execute command in sandbox
+     */
+    async execute(command, args = []) {
+        return executeInSandbox(command, args, this.config);
+    }
+    /**
+     * Execute multiple commands in sequence
+     */
+    async executeSequence(commands) {
+        const results = [];
+        for (const { command, args = [] } of commands) {
+            const result = await this.execute(command, args);
+            results.push(result);
+            // Stop on first error
+            if (result.exitCode !== 0) {
+                break;
+            }
+        }
+        return results;
+    }
+    /**
+     * Execute multiple commands in parallel
+     */
+    async executeParallel(commands) {
+        const promises = commands.map(({ command, args = [] }) => this.execute(command, args));
+        return Promise.all(promises);
+    }
+    /**
+     * Update configuration
+     */
+    updateConfig(config) {
+        this.config = { ...this.config, ...config };
+        if (config.resourceLimits) {
+            this.resourceLimiter = new ResourceLimiter(config.resourceLimits);
+        }
+    }
+    /**
+     * Get current configuration
+     */
+    getConfig() {
+        return { ...this.config };
+    }
+}
+// ============================================================================
+// Utility Functions
+// ============================================================================
+/**
+ * Detect best sandbox for current platform
+ */
+export function detectBestSandbox() {
+    const platform = os.platform();
+    if (platform === 'linux') {
+        try {
+            child_process.execSync('which bwrap', { stdio: 'ignore' });
+            return 'bubblewrap';
+        }
+        catch {
+            // Fall through
+        }
+    }
+    if (platform === 'darwin') {
+        try {
+            child_process.execSync('which sandbox-exec', { stdio: 'ignore' });
+            return 'seatbelt';
+        }
+        catch {
+            // Fall through
+        }
+    }
+    // Check for Docker
+    try {
+        child_process.execSync('docker version', { stdio: 'ignore' });
+        return 'docker';
+    }
+    catch {
+        // Fall through
+    }
+    return 'none';
+}
+/**
+ * Get sandbox capabilities
+ */
+export function getSandboxCapabilities() {
+    const platform = os.platform();
+    let bubblewrap = false;
+    let seatbelt = false;
+    let docker = false;
+    if (platform === 'linux') {
+        try {
+            child_process.execSync('which bwrap', { stdio: 'ignore' });
+            bubblewrap = true;
+        }
+        catch {
+            // Ignore
+        }
+    }
+    if (platform === 'darwin') {
+        try {
+            child_process.execSync('which sandbox-exec', { stdio: 'ignore' });
+            seatbelt = true;
+        }
+        catch {
+            // Ignore
+        }
+    }
+    try {
+        child_process.execSync('docker version', { stdio: 'ignore' });
+        docker = true;
+    }
+    catch {
+        // Ignore
+    }
+    return {
+        bubblewrap,
+        seatbelt,
+        docker,
+        resourceLimits: platform === 'linux' || platform === 'darwin',
+    };
+}
+//# sourceMappingURL=executor.js.map

package/dist/sandbox/executor.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"executor.js","sourceRoot":"","sources":["../../src/sandbox/executor.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAEH,OAAO,KAAK,EAAE,MAAM,IAAI,CAAC;AACzB,OAAO,KAAK,aAAa,MAAM,eAAe,CAAC;AAE/C,OAAO,EAAE,aAAa,EAAgC,MAAM,iBAAiB,CAAC;AAC9E,OAAO,EAAE,cAAc,EAAkB,MAAM,eAAe,CAAC;AAC/D,OAAO,EAAE,YAAY,EAAgB,MAAM,aAAa,CAAC;AACzD,OAAO,EAAE,eAAe,EAAkB,eAAe,EAAE,MAAM,sBAAsB,CAAC;AACxF,OAAO,EAAE,SAAS,EAAE,kBAAkB,EAAE,MAAM,sBAAsB,CAAC;AAsBrE,+EAA+E;AAC/E,mBAAmB;AACnB,+EAA+E;AAE/E;;GAEG;AACH,MAAM,CAAC,KAAK,UAAU,gBAAgB,CACpC,OAAe,EACf,OAAiB,EAAE,EACnB,MAAqB;IAErB,MAAM,QAAQ,GAAG,EAAE,CAAC,QAAQ,EAAE,CAAC;IAE/B,mBAAmB;IACnB,IAAI,CAAC,MAAM,CAAC,OAAO,IAAI,MAAM,CAAC,IAAI,KAAK,MAAM,EAAE,CAAC;QAC9C,OAAO,kBAAkB,CAAC,OAAO,EAAE,IAAI,EAAE,MAAM,CAAC,CAAC;IACnD,CAAC;IAED,+BAA+B;IAC/B,IAAI,MAAM,CAAC,IAAI,KAAK,QAAQ,EAAE,CAAC;QAC7B,MAAM,MAAM,GAAG,MAAM,YAAY,CAAC,OAAO,EAAE,IAAI,EAAE;YAC/C,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,KAAK;YAC3B,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO;YAC/B,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO;YAC/B,MAAM,EAAE,MAAM,CAAC,cAAc,EAAE,SAAS;gBACtC,CAAC,CAAC,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,cAAc,CAAC,SAAS,GAAG,IAAI,GAAG,IAAI,CAAC,GAAG;gBACjE,CAAC,CAAC,SAAS;YACb,IAAI,EAAE,MAAM,CAAC,cAAc,EAAE,MAAM;gBACjC,CAAC,CAAC,GAAG,MAAM,CAAC,cAAc,CAAC,MAAM,GAAG,GAAG,EAAE;gBACzC,CAAC,CAAC,SAAS;YACb,OAAO,EAAE,MAAM,CAAC,cAAc,EAAE,gBAAgB;YAChD,GAAG,EAAE,MAAM,CAAC,oBAAoB;SACjC,CAAC,CAAC;QAEH,OAAO;YACL,GAAG,MAAM;YACT,WAAW,EAAE,QAAQ;SACtB,CAAC;IACJ,CAAC;IAED,8BAA8B;IAC9B,IAAI,QAAQ,KAAK,OAAO,IAAI,MAAM,CAAC,IAAI,KAAK,YAAY,EAAE,CAAC;QACzD,MAAM,MAAM,GAAG,MAAM,aAAa,CAAC,OAAO,EAAE,IAAI,EAAE;YAChD,MAAM,EAAE;gBACN,OAAO,EAAE,IAAI;gBACb,YAAY,EAAE,MAAM,CAAC,aAAa;gBAClC,SAAS,EAAE,MAAM,CAAC,aAAa;gBAC/B,UAAU,EAAE,MAAM,CAAC,aAAa;aACjC;YACD,OAAO,EAAE,MAAM,CAAC,cAAc,EAAE,gBAAgB;YAChD,GAAG,EAAE,MAAM,CAAC,oBAAoB;SACjC,CAAC,CAAC;QAEH,OAAO;YACL,GAAG,MAAM;YACT,WAAW,EAAE,YAAY;SAC1B,CAAC;IACJ,CAAC;IAED,IAAI,QAAQ,KAAK,QAAQ,EAAE,CAAC;QAC1B,MAAM,MAAM,GAAG,MAAM,cAAc,CAAC,OAAO,EAAE,IAAI,EAAE;YACjD,YAAY,EAAE,MAAM,CAAC,aAAa;YAClC,SAAS,EAAE,MAAM,CAAC,aAAa;YAC/B,UAAU,EAAE,MAAM,CAAC,aAAa;YAChC,OAAO,EAAE,MAAM,CAAC,cAAc,EAAE,gBAAgB;YAChD,GAAG,EAAE,MAAM,CAAC,oBAAoB;SACjC,CAAC,CAAC;QAEH,OAAO;YACL,GAAG,MAAM;YACT,WAAW,EAAE,UAAU;SACxB,CAAC;IACJ,CAAC;IAED,0BAA0B;IAC1B,OAAO,CAAC,IAAI,CAAC,sCAAsC,QAAQ,yBAAyB,CAAC,CAAC;IACtF,OAAO,kBAAkB,CAAC,OAAO,EAAE,IAAI,EAAE,MAAM,CAAC,CAAC;AACnD,CAAC;AAED;;GAEG;AACH,SAAS,cAAc,CAAC,GAA4B;IAClD,MAAM,OAAO,GAAG,EAAE,GAAG,CAAC,GAAG,IAAI,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC;IAE5C,uCAAuC;IACvC,4BAA4B;IAC5B,IAAI,SAAS,EAAE,EAAE,CAAC;QAChB,IAAI,OAAO,CAAC,MAAM,EAAE,CAAC;YACnB,OAAO,CAAC,MAAM,GAAG,kBAAkB,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;QACtD,CAAC;QACD,IAAI,OAAO,CAAC,IAAI,EAAE,CAAC;YACjB,OAAO,CAAC,IAAI,GAAG,kBAAkB,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;QAClD,CAAC;QACD,IAAI,OAAO,CAAC,GAAG,EAAE,CAAC;YAChB,OAAO,CAAC,GAAG,GAAG,kBAAkB,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;QAChD,CAAC;IACH,CAAC;IAED,OAAO,OAA4B,CAAC;AACtC,CAAC;AAED;;GAEG;AACH,KAAK,UAAU,kBAAkB,CAC/B,OAAe,EACf,IAAc,EACd,MAAqB;IAErB,MAAM,SAAS,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;IAE7B,qCAAqC;IACrC,IAAI,MAAM,CAAC,cAAc,EAAE,CAAC;QAC1B,MAAM,UAAU,GAAG,eAAe,CAAC,MAAM,CAAC,cAAc,CAAC,CAAC;QAC1D,IAAI,UAAU,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YAC1B,OAAO,iBAAiB,CAAC,OAAO,EAAE,IAAI,EAAE,MAAM,CAAC,CAAC;QAClD,CAAC;IACH,CAAC;IAED,YAAY;IACZ,MAAM,OAAO,GAAG,cAAc,CAAC,MAAM,CAAC,oBAAoB,CAAC,CAAC;IAE5D,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,EAAE;QAC7B,MAAM,IAAI,GAAG,aAAa,CAAC,KAAK,CAAC,OAAO,EAAE,IAAI,EAAE;YAC9C,GAAG,EAAE,OAAO;YACZ,KAAK,EAAE,CAAC,MAAM,EAAE,MAAM,EAAE,MAAM,CAAC;YAC/B,OAAO,EAAE,MAAM,CAAC,cAAc,EAAE,gBAAgB;YAChD,WAAW,EAAE,IAAI;SAClB,CAAC,CAAC;QAEH,IAAI,MAAM,GAAG,EAAE,CAAC;QAChB,IAAI,MAAM,GAAG,EAAE,CAAC;QAEhB,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,EAAE;YAC9B,MAAM,IAAI,IAAI,CAAC,QAAQ,EAAE,CAAC;QAC5B,CAAC,CAAC,CAAC;QAEH,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,EAAE;YAC9B,MAAM,IAAI,IAAI,CAAC,QAAQ,EAAE,CAAC;QAC5B,CAAC,CAAC,CAAC;QAEH,IAAI,CAAC,EAAE,CAAC,OAAO,EAAE,CAAC,IAAI,EAAE,EAAE;YACxB,OAAO,CAAC;gBACN,QAAQ,EAAE,IAAI,IAAI,CAAC;gBACnB,MAAM;gBACN,MAAM;gBACN,SAAS,EAAE,KAAK;gBAChB,WAAW,EAAE,MAAM;gBACnB,QAAQ,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,SAAS;aACjC,CAAC,CAAC;QACL,CAAC,CAAC,CAAC;QAEH,IAAI,CAAC,EAAE,CAAC,OAAO,EAAE,CAAC,GAAG,EAAE,EAAE;YACvB,OAAO,CAAC;gBACN,QAAQ,EAAE,CAAC;gBACX,MAAM;gBACN,MAAM,EAAE,GAAG,CAAC,OAAO;gBACnB,SAAS,EAAE,KAAK;gBAChB,WAAW,EAAE,MAAM;gBACnB,QAAQ,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,SAAS;aACjC,CAAC,CAAC;QACL,CAAC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;AACL,CAAC;AAED;;GAEG;AACH,KAAK,UAAU,iBAAiB,CAC9B,OAAe,EACf,IAAc,EACd,MAAqB;IAErB,MAAM,SAAS,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;IAC7B,MAAM,UAAU,GAAG,eAAe,CAAC,MAAM,CAAC,cAAe,CAAC,CAAC;IAE3D,MAAM,WAAW,GAAG,UAAU,UAAU,CAAC,IAAI,CAAC,GAAG,CAAC,OAAO,OAAO,IAAI,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC;IAErF,YAAY;IACZ,MAAM,OAAO,GAAG,cAAc,CAAC,MAAM,CAAC,oBAAoB,CAAC,CAAC;IAE5D,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,EAAE;QAC7B,oCAAoC;QACpC,wCAAwC;QACxC,IAAI,IAAI,CAAC;QACT,IAAI,SAAS,EAAE,EAAE,CAAC;YAChB,6BAA6B;YAC7B,IAAI,GAAG,aAAa,CAAC,KAAK,CAAC,GAAG,OAAO,IAAI,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,EAAE,EAAE,EAAE;gBAC7D,GAAG,EAAE,OAAO;gBACZ,KAAK,EAAE,CAAC,MAAM,EAAE,MAAM,EAAE,MAAM,CAAC;gBAC/B,OAAO,EAAE,MAAM,CAAC,cAAc,EAAE,gBAAgB;gBAChD,KAAK,EAAE,IAAI;gBACX,WAAW,EAAE,IAAI;aAClB,CAAC,CAAC;QACL,CAAC;aAAM,CAAC;YACN,IAAI,GAAG,aAAa,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC,IAAI,EAAE,WAAW,CAAC,EAAE;gBACpD,GAAG,EAAE,OAAO;gBACZ,KAAK,EAAE,CAAC,MAAM,EAAE,MAAM,EAAE,MAAM,CAAC;gBAC/B,OAAO,EAAE,MAAM,CAAC,cAAc,EAAE,gBAAgB;aACjD,CAAC,CAAC;QACL,CAAC;QAED,IAAI,MAAM,GAAG,EAAE,CAAC;QAChB,IAAI,MAAM,GAAG,EAAE,CAAC;QAEhB,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,EAAE;YAC9B,MAAM,IAAI,IAAI,CAAC,QAAQ,EAAE,CAAC;QAC5B,CAAC,CAAC,CAAC;QAEH,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,EAAE;YAC9B,MAAM,IAAI,IAAI,CAAC,QAAQ,EAAE,CAAC;QAC5B,CAAC,CAAC,CAAC;QAEH,IAAI,CAAC,EAAE,CAAC,OAAO,EAAE,CAAC,IAAI,EAAE,EAAE;YACxB,OAAO,CAAC;gBACN,QAAQ,EAAE,IAAI,IAAI,CAAC;gBACnB,MAAM;gBACN,MAAM;gBACN,SAAS,EAAE,KAAK;gBAChB,WAAW,EAAE,MAAM;gBACnB,QAAQ,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,SAAS;aACjC,CAAC,CAAC;QACL,CAAC,CAAC,CAAC;QAEH,IAAI,CAAC,EAAE,CAAC,OAAO,EAAE,CAAC,GAAG,EAAE,EAAE;YACvB,OAAO,CAAC;gBACN,QAAQ,EAAE,CAAC;gBACX,MAAM;gBACN,MAAM,EAAE,GAAG,CAAC,OAAO;gBACnB,SAAS,EAAE,KAAK;gBAChB,WAAW,EAAE,MAAM;gBACnB,QAAQ,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,SAAS;aACjC,CAAC,CAAC;QACL,CAAC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;AACL,CAAC;AAED,+EAA+E;AAC/E,iBAAiB;AACjB,+EAA+E;AAE/E,MAAM,OAAO,eAAe;IAClB,MAAM,CAAgB;IACtB,eAAe,CAAmB;IAE1C,YAAY,MAAqB;QAC/B,IAAI,CAAC,MAAM,GAAG,MAAM,CAAC;QAErB,IAAI,MAAM,CAAC,cAAc,EAAE,CAAC;YAC1B,IAAI,CAAC,eAAe,GAAG,IAAI,eAAe,CAAC,MAAM,CAAC,cAAc,CAAC,CAAC;QACpE,CAAC;IACH,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,OAAO,CAAC,OAAe,EAAE,OAAiB,EAAE;QAChD,OAAO,gBAAgB,CAAC,OAAO,EAAE,IAAI,EAAE,IAAI,CAAC,MAAM,CAAC,CAAC;IACtD,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,eAAe,CAAC,QAAqD;QACzE,MAAM,OAAO,GAAqB,EAAE,CAAC;QAErC,KAAK,MAAM,EAAE,OAAO,EAAE,IAAI,GAAG,EAAE,EAAE,IAAI,QAAQ,EAAE,CAAC;YAC9C,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC;YACjD,OAAO,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;YAErB,sBAAsB;YACtB,IAAI,MAAM,CAAC,QAAQ,KAAK,CAAC,EAAE,CAAC;gBAC1B,MAAM;YACR,CAAC;QACH,CAAC;QAED,OAAO,OAAO,CAAC;IACjB,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,eAAe,CAAC,QAAqD;QACzE,MAAM,QAAQ,GAAG,QAAQ,CAAC,GAAG,CAAC,CAAC,EAAE,OAAO,EAAE,IAAI,GAAG,EAAE,EAAE,EAAE,EAAE,CACvD,IAAI,CAAC,OAAO,CAAC,OAAO,EAAE,IAAI,CAAC,CAC5B,CAAC;QAEF,OAAO,OAAO,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;IAC/B,CAAC;IAED;;OAEG;IACH,YAAY,CAAC,MAA8B;QACzC,IAAI,CAAC,MAAM,GAAG,EAAE,GAAG,IAAI,CAAC,MAAM,EAAE,GAAG,MAAM,EAAE,CAAC;QAE5C,IAAI,MAAM,CAAC,cAAc,EAAE,CAAC;YAC1B,IAAI,CAAC,eAAe,GAAG,IAAI,eAAe,CAAC,MAAM,CAAC,cAAc,CAAC,CAAC;QACpE,CAAC;IACH,CAAC;IAED;;OAEG;IACH,SAAS;QACP,OAAO,EAAE,GAAG,IAAI,CAAC,MAAM,EAAE,CAAC;IAC5B,CAAC;CACF;AAED,+EAA+E;AAC/E,oBAAoB;AACpB,+EAA+E;AAE/E;;GAEG;AACH,MAAM,UAAU,iBAAiB;IAC/B,MAAM,QAAQ,GAAG,EAAE,CAAC,QAAQ,EAAE,CAAC;IAE/B,IAAI,QAAQ,KAAK,OAAO,EAAE,CAAC;QACzB,IAAI,CAAC;YACH,aAAa,CAAC,QAAQ,CAAC,aAAa,EAAE,EAAE,KAAK,EAAE,QAAQ,EAAE,CAAC,CAAC;YAC3D,OAAO,YAAY,CAAC;QACtB,CAAC;QAAC,MAAM,CAAC;YACP,eAAe;QACjB,CAAC;IACH,CAAC;IAED,IAAI,QAAQ,KAAK,QAAQ,EAAE,CAAC;QAC1B,IAAI,CAAC;YACH,aAAa,CAAC,QAAQ,CAAC,oBAAoB,EAAE,EAAE,KAAK,EAAE,QAAQ,EAAE,CAAC,CAAC;YAClE,OAAO,UAAU,CAAC;QACpB,CAAC;QAAC,MAAM,CAAC;YACP,eAAe;QACjB,CAAC;IACH,CAAC;IAED,mBAAmB;IACnB,IAAI,CAAC;QACH,aAAa,CAAC,QAAQ,CAAC,gBAAgB,EAAE,EAAE,KAAK,EAAE,QAAQ,EAAE,CAAC,CAAC;QAC9D,OAAO,QAAQ,CAAC;IAClB,CAAC;IAAC,MAAM,CAAC;QACP,eAAe;IACjB,CAAC;IAED,OAAO,MAAM,CAAC;AAChB,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,sBAAsB;IAMpC,MAAM,QAAQ,GAAG,EAAE,CAAC,QAAQ,EAAE,CAAC;IAC/B,IAAI,UAAU,GAAG,KAAK,CAAC;IACvB,IAAI,QAAQ,GAAG,KAAK,CAAC;IACrB,IAAI,MAAM,GAAG,KAAK,CAAC;IAEnB,IAAI,QAAQ,KAAK,OAAO,EAAE,CAAC;QACzB,IAAI,CAAC;YACH,aAAa,CAAC,QAAQ,CAAC,aAAa,EAAE,EAAE,KAAK,EAAE,QAAQ,EAAE,CAAC,CAAC;YAC3D,UAAU,GAAG,IAAI,CAAC;QACpB,CAAC;QAAC,MAAM,CAAC;YACP,SAAS;QACX,CAAC;IACH,CAAC;IAED,IAAI,QAAQ,KAAK,QAAQ,EAAE,CAAC;QAC1B,IAAI,CAAC;YACH,aAAa,CAAC,QAAQ,CAAC,oBAAoB,EAAE,EAAE,KAAK,EAAE,QAAQ,EAAE,CAAC,CAAC;YAClE,QAAQ,GAAG,IAAI,CAAC;QAClB,CAAC;QAAC,MAAM,CAAC;YACP,SAAS;QACX,CAAC;IACH,CAAC;IAED,IAAI,CAAC;QACH,aAAa,CAAC,QAAQ,CAAC,gBAAgB,EAAE,EAAE,KAAK,EAAE,QAAQ,EAAE,CAAC,CAAC;QAC9D,MAAM,GAAG,IAAI,CAAC;IAChB,CAAC;IAAC,MAAM,CAAC;QACP,SAAS;IACX,CAAC;IAED,OAAO;QACL,UAAU;QACV,QAAQ;QACR,MAAM;QACN,cAAc,EAAE,QAAQ,KAAK,OAAO,IAAI,QAAQ,KAAK,QAAQ;KAC9D,CAAC;AACJ,CAAC"}

package/dist/sandbox/filesystem.d.ts

@@ -0,0 +1,146 @@
+/**
+ * Filesystem Sandbox
+ * Provides path-based access control and isolation for file operations
+ */
+import * as fs from 'fs';
+/**
+ * Path rule for access control
+ */
+export interface PathRule {
+    /** Path pattern (supports wildcards) */
+    pattern: string;
+    /** Operations allowed (default: all) */
+    operations?: Array<'read' | 'write' | 'execute'>;
+    /** Description of the rule */
+    description?: string;
+}
+/**
+ * Filesystem sandbox policy
+ */
+export interface FilesystemPolicy {
+    /** Allowed path patterns */
+    allowedPaths: PathRule[];
+    /** Denied path patterns (takes precedence) */
+    deniedPaths: PathRule[];
+    /** Default action when no rule matches */
+    defaultAction: 'allow' | 'deny';
+    /** Case sensitivity for path matching */
+    caseSensitive?: boolean;
+}
+/**
+ * Sandboxed filesystem interface
+ */
+export interface SandboxedFs {
+    readFile: typeof fs.promises.readFile;
+    writeFile: typeof fs.promises.writeFile;
+    readdir: typeof fs.promises.readdir;
+    stat: typeof fs.promises.stat;
+    mkdir: typeof fs.promises.mkdir;
+    rm: typeof fs.promises.rm;
+    exists: (path: string) => Promise<boolean>;
+    realpath: (path: string) => Promise<string>;
+}
+/**
+ * Filesystem Sandbox
+ * Enforces path-based access control for file operations
+ */
+export declare class FilesystemSandbox {
+    private policy;
+    private tempDirs;
+    private cleanupRegistered;
+    constructor(policy: FilesystemPolicy);
+    /**
+     * Check if path is allowed for operation
+     */
+    isPathAllowed(filePath: string, operation: 'read' | 'write' | 'execute'): boolean;
+    /**
+     * Normalize path (resolve . and .. and symbolic links)
+     */
+    normalizePath(filePath: string): string;
+    /**
+     * Resolve path relative to base
+     */
+    resolvePath(filePath: string, base?: string): string;
+    /**
+     * Create isolated temporary directory
+     */
+    createTempDir(prefix?: string): Promise<string>;
+    /**
+     * Cleanup all temporary directories
+     */
+    cleanupTempDirs(): Promise<void>;
+    /**
+     * Wrap filesystem with sandbox checks
+     */
+    wrapFs(): SandboxedFs;
+    /**
+     * Get policy information
+     */
+    getPolicy(): Readonly<FilesystemPolicy>;
+    /**
+     * Add allowed path rule
+     */
+    addAllowedPath(rule: PathRule): void;
+    /**
+     * Add denied path rule
+     */
+    addDeniedPath(rule: PathRule): void;
+    /**
+     * Remove path rule
+     */
+    removePathRule(pattern: string, listType: 'allowed' | 'denied'): boolean;
+    /**
+     * Check if path matches rule
+     */
+    private matchesRule;
+    /**
+     * Register cleanup handler
+     */
+    private registerCleanup;
+}
+/**
+ * Match path against pattern
+ * Supports wildcards: * (any chars), ** (any dirs), ? (single char)
+ */
+export declare function matchPathPattern(filePath: string, pattern: string, caseSensitive?: boolean): boolean;
+/**
+ * Check if child path is inside parent path
+ */
+export declare function isPathInside(childPath: string, parentPath: string): boolean;
+/**
+ * Create default sandbox policy
+ */
+export declare function createDefaultPolicy(cwd?: string): FilesystemPolicy;
+/**
+ * Create permissive sandbox policy (allows most operations)
+ */
+export declare function createPermissivePolicy(): FilesystemPolicy;
+/**
+ * Create strict sandbox policy (minimal access)
+ */
+export declare function createStrictPolicy(workDir?: string): FilesystemPolicy;
+/**
+ * Validate filesystem policy
+ */
+export declare function validatePolicy(policy: FilesystemPolicy): {
+    valid: boolean;
+    errors: string[];
+};
+/**
+ * Merge multiple policies (later policies override earlier ones)
+ */
+export declare function mergePolicies(...policies: FilesystemPolicy[]): FilesystemPolicy;
+/**
+ * Get sandbox statistics
+ */
+export interface SandboxStats {
+    tempDirsCount: number;
+    allowedRulesCount: number;
+    deniedRulesCount: number;
+    defaultAction: 'allow' | 'deny';
+}
+/**
+ * Get sandbox statistics
+ */
+export declare function getSandboxStats(sandbox: FilesystemSandbox): SandboxStats;
+//# sourceMappingURL=filesystem.d.ts.map

package/dist/sandbox/filesystem.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"filesystem.d.ts","sourceRoot":"","sources":["../../src/sandbox/filesystem.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAEH,OAAO,KAAK,EAAE,MAAM,IAAI,CAAC;AAUzB;;GAEG;AACH,MAAM,WAAW,QAAQ;IACvB,wCAAwC;IACxC,OAAO,EAAE,MAAM,CAAC;IAChB,wCAAwC;IACxC,UAAU,CAAC,EAAE,KAAK,CAAC,MAAM,GAAG,OAAO,GAAG,SAAS,CAAC,CAAC;IACjD,8BAA8B;IAC9B,WAAW,CAAC,EAAE,MAAM,CAAC;CACtB;AAED;;GAEG;AACH,MAAM,WAAW,gBAAgB;IAC/B,4BAA4B;IAC5B,YAAY,EAAE,QAAQ,EAAE,CAAC;IACzB,8CAA8C;IAC9C,WAAW,EAAE,QAAQ,EAAE,CAAC;IACxB,0CAA0C;IAC1C,aAAa,EAAE,OAAO,GAAG,MAAM,CAAC;IAChC,yCAAyC;IACzC,aAAa,CAAC,EAAE,OAAO,CAAC;CACzB;AAED;;GAEG;AACH,MAAM,WAAW,WAAW;IAC1B,QAAQ,EAAE,OAAO,EAAE,CAAC,QAAQ,CAAC,QAAQ,CAAC;IACtC,SAAS,EAAE,OAAO,EAAE,CAAC,QAAQ,CAAC,SAAS,CAAC;IACxC,OAAO,EAAE,OAAO,EAAE,CAAC,QAAQ,CAAC,OAAO,CAAC;IACpC,IAAI,EAAE,OAAO,EAAE,CAAC,QAAQ,CAAC,IAAI,CAAC;IAC9B,KAAK,EAAE,OAAO,EAAE,CAAC,QAAQ,CAAC,KAAK,CAAC;IAChC,EAAE,EAAE,OAAO,EAAE,CAAC,QAAQ,CAAC,EAAE,CAAC;IAC1B,MAAM,EAAE,CAAC,IAAI,EAAE,MAAM,KAAK,OAAO,CAAC,OAAO,CAAC,CAAC;IAC3C,QAAQ,EAAE,CAAC,IAAI,EAAE,MAAM,KAAK,OAAO,CAAC,MAAM,CAAC,CAAC;CAC7C;AAED;;;GAGG;AACH,qBAAa,iBAAiB;IAC5B,OAAO,CAAC,MAAM,CAAmB;IACjC,OAAO,CAAC,QAAQ,CAA0B;IAC1C,OAAO,CAAC,iBAAiB,CAAS;gBAEtB,MAAM,EAAE,gBAAgB;IAapC;;OAEG;IACH,aAAa,CACX,QAAQ,EAAE,MAAM,EAChB,SAAS,EAAE,MAAM,GAAG,OAAO,GAAG,SAAS,GACtC,OAAO;IA0BV;;OAEG;IACH,aAAa,CAAC,QAAQ,EAAE,MAAM,GAAG,MAAM;IAgBvC;;OAEG;IACH,WAAW,CAAC,QAAQ,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,MAAM,GAAG,MAAM;IAMpD;;OAEG;IACG,aAAa,CAAC,MAAM,SAAoB,GAAG,OAAO,CAAC,MAAM,CAAC;IAOhE;;OAEG;IACG,eAAe,IAAI,OAAO,CAAC,IAAI,CAAC;IAsBtC;;OAEG;IACH,MAAM,IAAI,WAAW;IA+DrB;;OAEG;IACH,SAAS,IAAI,QAAQ,CAAC,gBAAgB,CAAC;IAIvC;;OAEG;IACH,cAAc,CAAC,IAAI,EAAE,QAAQ,GAAG,IAAI;IAIpC;;OAEG;IACH,aAAa,CAAC,IAAI,EAAE,QAAQ,GAAG,IAAI;IAInC;;OAEG;IACH,cAAc,CAAC,OAAO,EAAE,MAAM,EAAE,QAAQ,EAAE,SAAS,GAAG,QAAQ,GAAG,OAAO;IAcxE;;OAEG;IACH,OAAO,CAAC,WAAW;IAqBnB;;OAEG;IACH,OAAO,CAAC,eAAe;CA0BxB;AAED;;;GAGG;AACH,wBAAgB,gBAAgB,CAC9B,QAAQ,EAAE,MAAM,EAChB,OAAO,EAAE,MAAM,EACf,aAAa,UAAO,GACnB,OAAO,CAoCT;AAED;;GAEG;AACH,wBAAgB,YAAY,CAAC,SAAS,EAAE,MAAM,EAAE,UAAU,EAAE,MAAM,GAAG,OAAO,CAS3E;AAkCD;;GAEG;AACH,wBAAgB,mBAAmB,CAAC,GAAG,CAAC,EAAE,MAAM,GAAG,gBAAgB,CA+ClE;AAED;;GAEG;AACH,wBAAgB,sBAAsB,IAAI,gBAAgB,CAuBzD;AAED;;GAEG;AACH,wBAAgB,kBAAkB,CAAC,OAAO,CAAC,EAAE,MAAM,GAAG,gBAAgB,CAmBrE;AAED;;GAEG;AACH,wBAAgB,cAAc,CAAC,MAAM,EAAE,gBAAgB,GAAG;IACxD,KAAK,EAAE,OAAO,CAAC;IACf,MAAM,EAAE,MAAM,EAAE,CAAC;CAClB,CAmCA;AAED;;GAEG;AACH,wBAAgB,aAAa,CAC3B,GAAG,QAAQ,EAAE,gBAAgB,EAAE,GAC9B,gBAAgB,CA2BlB;AAwBD;;GAEG;AACH,MAAM,WAAW,YAAY;IAC3B,aAAa,EAAE,MAAM,CAAC;IACtB,iBAAiB,EAAE,MAAM,CAAC;IAC1B,gBAAgB,EAAE,MAAM,CAAC;IACzB,aAAa,EAAE,OAAO,GAAG,MAAM,CAAC;CACjC;AAED;;GAEG;AACH,wBAAgB,eAAe,CAAC,OAAO,EAAE,iBAAiB,GAAG,YAAY,CASxE"}