dartmind 17.0.0

package/dist/plugins/sandbox.js

@@ -0,0 +1,270 @@
+/**
+ * FlutterAI V16 - Plugin Sandbox
+ *
+ * Secure execution environment for plugins with permission controls.
+ *
+ * @module plugins/sandbox
+ * @version 16.0.0
+ */
+import * as vm from 'vm';
+// ============================================================================
+// SANDBOX
+// ============================================================================
+export class PluginSandbox {
+    resourceLimits;
+    constructor(options = {}) {
+        this.resourceLimits = {
+            maxMemory: options.maxMemory || 128 * 1024 * 1024, // 128MB
+            maxCpu: options.maxCpu || 5000, // 5 seconds
+            maxAsyncOperations: options.maxAsyncOperations || 1000,
+        };
+    }
+    /**
+     * Execute plugin code in sandbox
+     */
+    async execute(code, permissions, globals) {
+        // Create sandbox context
+        const sandbox = this.createSandbox(permissions, globals);
+        // Wrap code in module pattern
+        const wrappedCode = `
+      (function(exports, require, module, __filename, __dirname, context) {
+        'use strict';
+        ${code}
+        return module.exports;
+      })(exports, require, module, __filename, __dirname, context);
+    `;
+        // Create VM context
+        const vmContext = vm.createContext(sandbox, {
+            name: 'FlutterAI Plugin Sandbox',
+        });
+        // Execute with timeout
+        try {
+            const script = new vm.Script(wrappedCode, {
+                filename: 'plugin.js',
+            });
+            const result = script.runInContext(vmContext, {
+                timeout: this.resourceLimits.maxCpu,
+                displayErrors: true,
+            });
+            return result;
+        }
+        catch (error) {
+            if (error instanceof Error && error.message.includes('Script execution timed out')) {
+                throw new Error('Plugin execution timeout - possible infinite loop');
+            }
+            throw error;
+        }
+    }
+    /**
+     * Create sandboxed environment
+     */
+    createSandbox(permissions, globals) {
+        const exports = {};
+        const module = { exports };
+        // Base sandbox with safe globals
+        const sandbox = {
+            // Module system
+            exports,
+            module,
+            require: globals.require,
+            __filename: 'plugin.js',
+            __dirname: '.',
+            // Plugin context
+            context: globals.context,
+            // Safe globals
+            console: this.createSafeConsole(),
+            setTimeout: this.createSafeTimeout(),
+            setInterval: this.createSafeInterval(),
+            clearTimeout,
+            clearInterval,
+            setImmediate: this.createSafeImmediate(),
+            clearImmediate,
+            // Safe built-ins
+            JSON,
+            Math,
+            Date,
+            RegExp,
+            Error,
+            TypeError,
+            RangeError,
+            SyntaxError,
+            ReferenceError,
+            Array,
+            Object,
+            String,
+            Number,
+            Boolean,
+            Symbol,
+            Map,
+            Set,
+            WeakMap,
+            WeakSet,
+            Promise,
+            Proxy,
+            Reflect,
+            // Typed arrays
+            ArrayBuffer,
+            DataView,
+            Int8Array,
+            Uint8Array,
+            Uint8ClampedArray,
+            Int16Array,
+            Uint16Array,
+            Int32Array,
+            Uint32Array,
+            Float32Array,
+            Float64Array,
+            BigInt64Array,
+            BigUint64Array,
+            // Encoding
+            TextEncoder,
+            TextDecoder,
+            URL,
+            URLSearchParams,
+            // Async
+            queueMicrotask,
+        };
+        // Add permission-based globals
+        if (permissions.includes('network:external')) {
+            sandbox.fetch = this.createSafeFetch(permissions);
+        }
+        // Add Buffer if filesystem access
+        if (permissions.includes('filesystem:read') || permissions.includes('filesystem:write')) {
+            sandbox.Buffer = Buffer;
+        }
+        // Freeze to prevent modification
+        return Object.freeze(sandbox);
+    }
+    /**
+     * Create safe console
+     */
+    createSafeConsole() {
+        return {
+            log: (...args) => console.log('[Plugin]', ...args),
+            info: (...args) => console.info('[Plugin]', ...args),
+            warn: (...args) => console.warn('[Plugin]', ...args),
+            error: (...args) => console.error('[Plugin]', ...args),
+            debug: (...args) => console.debug('[Plugin]', ...args),
+            trace: (...args) => console.trace('[Plugin]', ...args),
+            dir: (...args) => console.dir(...args),
+            time: (label) => console.time(`[Plugin] ${label}`),
+            timeEnd: (label) => console.timeEnd(`[Plugin] ${label}`),
+            timeLog: (label) => console.timeLog(`[Plugin] ${label}`),
+            assert: console.assert,
+            clear: () => {
+                // No-op for security
+            },
+            count: console.count,
+            countReset: console.countReset,
+            group: console.group,
+            groupCollapsed: console.groupCollapsed,
+            groupEnd: console.groupEnd,
+            table: console.table,
+        };
+    }
+    /**
+     * Create safe setTimeout
+     */
+    createSafeTimeout() {
+        let activeTimeouts = 0;
+        const maxTimeouts = this.resourceLimits.maxAsyncOperations;
+        return ((callback, ms, ...args) => {
+            if (activeTimeouts >= maxTimeouts) {
+                throw new Error('Too many pending timeouts');
+            }
+            // Limit maximum delay
+            const safeMs = Math.min(ms || 0, 60000); // Max 1 minute
+            activeTimeouts++;
+            return setTimeout(() => {
+                activeTimeouts--;
+                callback(...args);
+            }, safeMs);
+        });
+    }
+    /**
+     * Create safe setInterval
+     */
+    createSafeInterval() {
+        let activeIntervals = 0;
+        const maxIntervals = 10;
+        return ((callback, ms, ...args) => {
+            if (activeIntervals >= maxIntervals) {
+                throw new Error('Too many active intervals');
+            }
+            // Enforce minimum interval
+            const safeMs = Math.max(ms || 0, 100); // Min 100ms
+            activeIntervals++;
+            const id = setInterval(callback, safeMs, ...args);
+            // Track for cleanup
+            return id;
+        });
+    }
+    /**
+     * Create safe setImmediate
+     */
+    createSafeImmediate() {
+        let pending = 0;
+        const maxPending = this.resourceLimits.maxAsyncOperations;
+        const safeImmediate = (callback, ...args) => {
+            if (pending >= maxPending) {
+                throw new Error('Too many pending immediate callbacks');
+            }
+            pending++;
+            return setImmediate(() => {
+                pending--;
+                callback(...args);
+            });
+        };
+        return safeImmediate;
+    }
+    /**
+     * Create safe fetch
+     */
+    createSafeFetch(permissions) {
+        const allowExternal = permissions.includes('network:external');
+        const allowLocal = permissions.includes('network:local');
+        return async (input, init) => {
+            const url = typeof input === 'string'
+                ? new URL(input)
+                : input instanceof URL
+                    ? input
+                    : new URL(input.url);
+            // Check if local or external
+            const isLocal = ['localhost', '127.0.0.1', '0.0.0.0'].includes(url.hostname) ||
+                url.hostname.endsWith('.local');
+            if (isLocal && !allowLocal) {
+                throw new Error('Network access to local addresses not permitted');
+            }
+            if (!isLocal && !allowExternal) {
+                throw new Error('Network access to external addresses not permitted');
+            }
+            // Block sensitive ports
+            const blockedPorts = [22, 23, 25, 110, 143, 993, 995];
+            if (url.port && blockedPorts.includes(parseInt(url.port))) {
+                throw new Error(`Access to port ${url.port} not permitted`);
+            }
+            // Use native fetch
+            return fetch(input, init);
+        };
+    }
+}
+// ============================================================================
+// FACTORY
+// ============================================================================
+/**
+ * Create a plugin sandbox with default options
+ */
+export function createPluginSandbox(options) {
+    return new PluginSandbox(options);
+}
+/**
+ * Create a strict plugin sandbox with tighter limits
+ */
+export function createStrictPluginSandbox() {
+    return new PluginSandbox({
+        maxMemory: 64 * 1024 * 1024, // 64MB
+        maxCpu: 2000, // 2 seconds
+        maxAsyncOperations: 100,
+    });
+}
+//# sourceMappingURL=sandbox.js.map

package/dist/plugins/sandbox.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sandbox.js","sourceRoot":"","sources":["../../src/plugins/sandbox.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAEH,OAAO,KAAK,EAAE,MAAM,IAAI,CAAC;AAyBzB,+EAA+E;AAC/E,UAAU;AACV,+EAA+E;AAE/E,MAAM,OAAO,aAAa;IAChB,cAAc,CAAiB;IAEvC,YAAY,UAA0B,EAAE;QACtC,IAAI,CAAC,cAAc,GAAG;YACpB,SAAS,EAAE,OAAO,CAAC,SAAS,IAAI,GAAG,GAAG,IAAI,GAAG,IAAI,EAAE,QAAQ;YAC3D,MAAM,EAAE,OAAO,CAAC,MAAM,IAAI,IAAI,EAAE,YAAY;YAC5C,kBAAkB,EAAE,OAAO,CAAC,kBAAkB,IAAI,IAAI;SACvD,CAAC;IACJ,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,OAAO,CACX,IAAY,EACZ,WAA+B,EAC/B,OAAuB;QAEvB,yBAAyB;QACzB,MAAM,OAAO,GAAG,IAAI,CAAC,aAAa,CAAC,WAAW,EAAE,OAAO,CAAC,CAAC;QAEzD,8BAA8B;QAC9B,MAAM,WAAW,GAAG;;;UAGd,IAAI;;;KAGT,CAAC;QAEF,oBAAoB;QACpB,MAAM,SAAS,GAAG,EAAE,CAAC,aAAa,CAAC,OAAO,EAAE;YAC1C,IAAI,EAAE,0BAA0B;SACjC,CAAC,CAAC;QAEH,uBAAuB;QACvB,IAAI,CAAC;YACH,MAAM,MAAM,GAAG,IAAI,EAAE,CAAC,MAAM,CAAC,WAAW,EAAE;gBACxC,QAAQ,EAAE,WAAW;aACtB,CAAC,CAAC;YAEH,MAAM,MAAM,GAAG,MAAM,CAAC,YAAY,CAAC,SAAS,EAAE;gBAC5C,OAAO,EAAE,IAAI,CAAC,cAAc,CAAC,MAAM;gBACnC,aAAa,EAAE,IAAI;aACpB,CAAC,CAAC;YAEH,OAAO,MAAuB,CAAC;QACjC,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IAAI,KAAK,YAAY,KAAK,IAAI,KAAK,CAAC,OAAO,CAAC,QAAQ,CAAC,4BAA4B,CAAC,EAAE,CAAC;gBACnF,MAAM,IAAI,KAAK,CAAC,mDAAmD,CAAC,CAAC;YACvE,CAAC;YACD,MAAM,KAAK,CAAC;QACd,CAAC;IACH,CAAC;IAED;;OAEG;IACK,aAAa,CACnB,WAA+B,EAC/B,OAAuB;QAEvB,MAAM,OAAO,GAAG,EAAE,CAAC;QACnB,MAAM,MAAM,GAAG,EAAE,OAAO,EAAE,CAAC;QAE3B,iCAAiC;QACjC,MAAM,OAAO,GAA4B;YACvC,gBAAgB;YAChB,OAAO;YACP,MAAM;YACN,OAAO,EAAE,OAAO,CAAC,OAAO;YACxB,UAAU,EAAE,WAAW;YACvB,SAAS,EAAE,GAAG;YAEd,iBAAiB;YACjB,OAAO,EAAE,OAAO,CAAC,OAAO;YAExB,eAAe;YACf,OAAO,EAAE,IAAI,CAAC,iBAAiB,EAAE;YACjC,UAAU,EAAE,IAAI,CAAC,iBAAiB,EAAE;YACpC,WAAW,EAAE,IAAI,CAAC,kBAAkB,EAAE;YACtC,YAAY;YACZ,aAAa;YACb,YAAY,EAAE,IAAI,CAAC,mBAAmB,EAAE;YACxC,cAAc;YAEd,iBAAiB;YACjB,IAAI;YACJ,IAAI;YACJ,IAAI;YACJ,MAAM;YACN,KAAK;YACL,SAAS;YACT,UAAU;YACV,WAAW;YACX,cAAc;YACd,KAAK;YACL,MAAM;YACN,MAAM;YACN,MAAM;YACN,OAAO;YACP,MAAM;YACN,GAAG;YACH,GAAG;YACH,OAAO;YACP,OAAO;YACP,OAAO;YACP,KAAK;YACL,OAAO;YAEP,eAAe;YACf,WAAW;YACX,QAAQ;YACR,SAAS;YACT,UAAU;YACV,iBAAiB;YACjB,UAAU;YACV,WAAW;YACX,UAAU;YACV,WAAW;YACX,YAAY;YACZ,YAAY;YACZ,aAAa;YACb,cAAc;YAEd,WAAW;YACX,WAAW;YACX,WAAW;YACX,GAAG;YACH,eAAe;YAEf,QAAQ;YACR,cAAc;SACf,CAAC;QAEF,+BAA+B;QAC/B,IAAI,WAAW,CAAC,QAAQ,CAAC,kBAAkB,CAAC,EAAE,CAAC;YAC7C,OAAO,CAAC,KAAK,GAAG,IAAI,CAAC,eAAe,CAAC,WAAW,CAAC,CAAC;QACpD,CAAC;QAED,kCAAkC;QAClC,IAAI,WAAW,CAAC,QAAQ,CAAC,iBAAiB,CAAC,IAAI,WAAW,CAAC,QAAQ,CAAC,kBAAkB,CAAC,EAAE,CAAC;YACxF,OAAO,CAAC,MAAM,GAAG,MAAM,CAAC;QAC1B,CAAC;QAED,iCAAiC;QACjC,OAAO,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;IAChC,CAAC;IAED;;OAEG;IACK,iBAAiB;QACvB,OAAO;YACL,GAAG,EAAE,CAAC,GAAG,IAAe,EAAE,EAAE,CAAC,OAAO,CAAC,GAAG,CAAC,UAAU,EAAE,GAAG,IAAI,CAAC;YAC7D,IAAI,EAAE,CAAC,GAAG,IAAe,EAAE,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC,UAAU,EAAE,GAAG,IAAI,CAAC;YAC/D,IAAI,EAAE,CAAC,GAAG,IAAe,EAAE,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC,UAAU,EAAE,GAAG,IAAI,CAAC;YAC/D,KAAK,EAAE,CAAC,GAAG,IAAe,EAAE,EAAE,CAAC,OAAO,CAAC,KAAK,CAAC,UAAU,EAAE,GAAG,IAAI,CAAC;YACjE,KAAK,EAAE,CAAC,GAAG,IAAe,EAAE,EAAE,CAAC,OAAO,CAAC,KAAK,CAAC,UAAU,EAAE,GAAG,IAAI,CAAC;YACjE,KAAK,EAAE,CAAC,GAAG,IAAe,EAAE,EAAE,CAAC,OAAO,CAAC,KAAK,CAAC,UAAU,EAAE,GAAG,IAAI,CAAC;YACjE,GAAG,EAAE,CAAC,GAAG,IAAe,EAAE,EAAE,CAAC,OAAO,CAAC,GAAG,CAAC,GAAG,IAAI,CAAC;YACjD,IAAI,EAAE,CAAC,KAAc,EAAE,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC,YAAY,KAAK,EAAE,CAAC;YAC3D,OAAO,EAAE,CAAC,KAAc,EAAE,EAAE,CAAC,OAAO,CAAC,OAAO,CAAC,YAAY,KAAK,EAAE,CAAC;YACjE,OAAO,EAAE,CAAC,KAAc,EAAE,EAAE,CAAC,OAAO,CAAC,OAAO,CAAC,YAAY,KAAK,EAAE,CAAC;YACjE,MAAM,EAAE,OAAO,CAAC,MAAM;YACtB,KAAK,EAAE,GAAG,EAAE;gBACV,qBAAqB;YACvB,CAAC;YACD,KAAK,EAAE,OAAO,CAAC,KAAK;YACpB,UAAU,EAAE,OAAO,CAAC,UAAU;YAC9B,KAAK,EAAE,OAAO,CAAC,KAAK;YACpB,cAAc,EAAE,OAAO,CAAC,cAAc;YACtC,QAAQ,EAAE,OAAO,CAAC,QAAQ;YAC1B,KAAK,EAAE,OAAO,CAAC,KAAK;SACrB,CAAC;IACJ,CAAC;IAED;;OAEG;IACK,iBAAiB;QACvB,IAAI,cAAc,GAAG,CAAC,CAAC;QACvB,MAAM,WAAW,GAAG,IAAI,CAAC,cAAc,CAAC,kBAAkB,CAAC;QAE3D,OAAO,CAAC,CAAC,QAAsC,EAAE,EAAW,EAAE,GAAG,IAAe,EAAE,EAAE;YAClF,IAAI,cAAc,IAAI,WAAW,EAAE,CAAC;gBAClC,MAAM,IAAI,KAAK,CAAC,2BAA2B,CAAC,CAAC;YAC/C,CAAC;YAED,sBAAsB;YACtB,MAAM,MAAM,GAAG,IAAI,CAAC,GAAG,CAAC,EAAE,IAAI,CAAC,EAAE,KAAK,CAAC,CAAC,CAAC,eAAe;YAExD,cAAc,EAAE,CAAC;YACjB,OAAO,UAAU,CAAC,GAAG,EAAE;gBACrB,cAAc,EAAE,CAAC;gBACjB,QAAQ,CAAC,GAAG,IAAI,CAAC,CAAC;YACpB,CAAC,EAAE,MAAM,CAAC,CAAC;QACb,CAAC,CAAsB,CAAC;IAC1B,CAAC;IAED;;OAEG;IACK,kBAAkB;QACxB,IAAI,eAAe,GAAG,CAAC,CAAC;QACxB,MAAM,YAAY,GAAG,EAAE,CAAC;QAExB,OAAO,CAAC,CAAC,QAAsC,EAAE,EAAW,EAAE,GAAG,IAAe,EAAE,EAAE;YAClF,IAAI,eAAe,IAAI,YAAY,EAAE,CAAC;gBACpC,MAAM,IAAI,KAAK,CAAC,2BAA2B,CAAC,CAAC;YAC/C,CAAC;YAED,2BAA2B;YAC3B,MAAM,MAAM,GAAG,IAAI,CAAC,GAAG,CAAC,EAAE,IAAI,CAAC,EAAE,GAAG,CAAC,CAAC,CAAC,YAAY;YAEnD,eAAe,EAAE,CAAC;YAClB,MAAM,EAAE,GAAG,WAAW,CAAC,QAAQ,EAAE,MAAM,EAAE,GAAG,IAAI,CAAC,CAAC;YAElD,oBAAoB;YACpB,OAAO,EAAE,CAAC;QACZ,CAAC,CAAuB,CAAC;IAC3B,CAAC;IAED;;OAEG;IACK,mBAAmB;QACzB,IAAI,OAAO,GAAG,CAAC,CAAC;QAChB,MAAM,UAAU,GAAG,IAAI,CAAC,cAAc,CAAC,kBAAkB,CAAC;QAE1D,MAAM,aAAa,GAAG,CACpB,QAAkC,EAClC,GAAG,IAAW,EACI,EAAE;YACpB,IAAI,OAAO,IAAI,UAAU,EAAE,CAAC;gBAC1B,MAAM,IAAI,KAAK,CAAC,sCAAsC,CAAC,CAAC;YAC1D,CAAC;YAED,OAAO,EAAE,CAAC;YACV,OAAO,YAAY,CAAC,GAAG,EAAE;gBACvB,OAAO,EAAE,CAAC;gBACV,QAAQ,CAAC,GAAG,IAAI,CAAC,CAAC;YACpB,CAAC,CAAC,CAAC;QACL,CAAC,CAAC;QAEF,OAAO,aAAoC,CAAC;IAC9C,CAAC;IAED;;OAEG;IACK,eAAe,CAAC,WAA+B;QACrD,MAAM,aAAa,GAAG,WAAW,CAAC,QAAQ,CAAC,kBAAkB,CAAC,CAAC;QAC/D,MAAM,UAAU,GAAG,WAAW,CAAC,QAAQ,CAAC,eAAe,CAAC,CAAC;QAEzD,OAAO,KAAK,EAAE,KAAwB,EAAE,IAAkB,EAAqB,EAAE;YAC/E,MAAM,GAAG,GACP,OAAO,KAAK,KAAK,QAAQ;gBACvB,CAAC,CAAC,IAAI,GAAG,CAAC,KAAK,CAAC;gBAChB,CAAC,CAAC,KAAK,YAAY,GAAG;oBACpB,CAAC,CAAC,KAAK;oBACP,CAAC,CAAC,IAAI,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;YAE3B,6BAA6B;YAC7B,MAAM,OAAO,GACX,CAAC,WAAW,EAAE,WAAW,EAAE,SAAS,CAAC,CAAC,QAAQ,CAAC,GAAG,CAAC,QAAQ,CAAC;gBAC5D,GAAG,CAAC,QAAQ,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC;YAElC,IAAI,OAAO,IAAI,CAAC,UAAU,EAAE,CAAC;gBAC3B,MAAM,IAAI,KAAK,CAAC,iDAAiD,CAAC,CAAC;YACrE,CAAC;YAED,IAAI,CAAC,OAAO,IAAI,CAAC,aAAa,EAAE,CAAC;gBAC/B,MAAM,IAAI,KAAK,CAAC,oDAAoD,CAAC,CAAC;YACxE,CAAC;YAED,wBAAwB;YACxB,MAAM,YAAY,GAAG,CAAC,EAAE,EAAE,EAAE,EAAE,EAAE,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,CAAC,CAAC;YACtD,IAAI,GAAG,CAAC,IAAI,IAAI,YAAY,CAAC,QAAQ,CAAC,QAAQ,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,EAAE,CAAC;gBAC1D,MAAM,IAAI,KAAK,CAAC,kBAAkB,GAAG,CAAC,IAAI,gBAAgB,CAAC,CAAC;YAC9D,CAAC;YAED,mBAAmB;YACnB,OAAO,KAAK,CAAC,KAAK,EAAE,IAAI,CAAC,CAAC;QAC5B,CAAC,CAAC;IACJ,CAAC;CACF;AAED,+EAA+E;AAC/E,UAAU;AACV,+EAA+E;AAE/E;;GAEG;AACH,MAAM,UAAU,mBAAmB,CAAC,OAAwB;IAC1D,OAAO,IAAI,aAAa,CAAC,OAAO,CAAC,CAAC;AACpC,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,yBAAyB;IACvC,OAAO,IAAI,aAAa,CAAC;QACvB,SAAS,EAAE,EAAE,GAAG,IAAI,GAAG,IAAI,EAAE,OAAO;QACpC,MAAM,EAAE,IAAI,EAAE,YAAY;QAC1B,kBAAkB,EAAE,GAAG;KACxB,CAAC,CAAC;AACL,CAAC"}