daycare-cli 0.0.0-canary.00a24ac

package/dist/sandbox/pathSanitize.spec.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"pathSanitize.spec.js","sourceRoot":"","sources":["../../sources/sandbox/pathSanitize.spec.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,MAAM,EAAE,EAAE,EAAE,MAAM,QAAQ,CAAC;AAC9C,OAAO,EAAE,YAAY,EAAE,sBAAsB,EAAE,MAAM,mBAAmB,CAAC;AAEzE,QAAQ,CAAC,cAAc,EAAE,GAAG,EAAE;IAC1B,EAAE,CAAC,qBAAqB,EAAE,GAAG,EAAE;QAC3B,MAAM,CAAC,GAAG,EAAE,CAAC,YAAY,CAAC,qBAAqB,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,EAAE,CAAC;QAChE,MAAM,CAAC,GAAG,EAAE,CAAC,YAAY,CAAC,4BAA4B,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,EAAE,CAAC;QACvE,MAAM,CAAC,GAAG,EAAE,CAAC,YAAY,CAAC,qBAAqB,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,EAAE,CAAC;IACpE,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,+BAA+B,EAAE,GAAG,EAAE;QACrC,MAAM,CAAC,GAAG,EAAE,CAAC,YAAY,CAAC,0BAA0B,CAAC,CAAC,CAAC,OAAO,CAAC,0BAA0B,CAAC,CAAC;QAC3F,MAAM,CAAC,GAAG,EAAE,CAAC,YAAY,CAAC,qBAAqB,CAAC,CAAC,CAAC,OAAO,CAAC,0BAA0B,CAAC,CAAC;IAC1F,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,uCAAuC,EAAE,GAAG,EAAE;QAC7C,MAAM,CAAC,GAAG,EAAE,CAAC,YAAY,CAAC,oBAAoB,CAAC,CAAC,CAAC,OAAO,CAAC,0CAA0C,CAAC,CAAC;QACrG,MAAM,CAAC,GAAG,EAAE,CAAC,YAAY,CAAC,oBAAoB,CAAC,CAAC,CAAC,OAAO,CAAC,0CAA0C,CAAC,CAAC;IACzG,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,0BAA0B,EAAE,GAAG,EAAE;QAChC,mEAAmE;QACnE,MAAM,CAAC,GAAG,EAAE,CAAC,YAAY,CAAC,kBAAkB,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,EAAE,CAAC;QAC7D,MAAM,CAAC,GAAG,EAAE,CAAC,YAAY,CAAC,kBAAkB,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,EAAE,CAAC;IACjE,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,gCAAgC,EAAE,GAAG,EAAE;QACtC,MAAM,QAAQ,GAAG,IAAI,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,EAAE,CAAC;QACxC,MAAM,CAAC,GAAG,EAAE,CAAC,YAAY,CAAC,QAAQ,CAAC,CAAC,CAAC,OAAO,CAAC,iDAAiD,CAAC,CAAC;IACpG,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,4BAA4B,EAAE,GAAG,EAAE;QAClC,MAAM,OAAO,GAAG,IAAI,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,EAAE,CAAC;QACvC,MAAM,CAAC,GAAG,EAAE,CAAC,YAAY,CAAC,OAAO,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,EAAE,CAAC;IACtD,CAAC,CAAC,CAAC;AACP,CAAC,CAAC,CAAC;AAEH,QAAQ,CAAC,wBAAwB,EAAE,GAAG,EAAE;IACpC,EAAE,CAAC,6CAA6C,EAAE,GAAG,EAAE;QACnD,MAAM,MAAM,GAAG,sBAAsB,CAAC,6BAA6B,CAAC,CAAC;QACrE,MAAM,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,qBAAqB,CAAC,CAAC;IAC/C,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,wBAAwB,EAAE,GAAG,EAAE;QAC9B,MAAM,CAAC,GAAG,EAAE,CAAC,sBAAsB,CAAC,eAAe,CAAC,CAAC,CAAC,OAAO,CAAC,wBAAwB,CAAC,CAAC;IAC5F,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,wDAAwD,EAAE,GAAG,EAAE;QAC9D,MAAM,CAAC,GAAG,EAAE,CAAC,sBAAsB,CAAC,iBAAiB,CAAC,CAAC,CAAC,OAAO,CAAC,0BAA0B,CAAC,CAAC;IAChG,CAAC,CAAC,CAAC;AACP,CAAC,CAAC,CAAC"}

package/dist/sandbox/runtime.d.ts

@@ -0,0 +1,23 @@
+import { type SandboxRuntimeConfig } from "@anthropic-ai/sandbox-runtime";
+type SandboxRuntimeConfigWithOptionalGlobalNetwork = Omit<SandboxRuntimeConfig, "network"> & {
+    network: Omit<SandboxRuntimeConfig["network"], "allowedDomains"> & {
+        allowedDomains?: string[];
+    };
+};
+/**
+ * Runs a command with a per-call sandbox config.
+ * Expects: command is non-empty and config is fully resolved for this execution.
+ */
+export declare function runInSandbox(command: string, config: SandboxRuntimeConfigWithOptionalGlobalNetwork, options?: {
+    cwd?: string;
+    env?: NodeJS.ProcessEnv;
+    home?: string;
+    timeoutMs?: number;
+    maxBufferBytes?: number;
+    signal?: AbortSignal;
+}): Promise<{
+    stdout: string;
+    stderr: string;
+}>;
+export {};
+//# sourceMappingURL=runtime.d.ts.map

package/dist/sandbox/runtime.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"runtime.d.ts","sourceRoot":"","sources":["../../sources/sandbox/runtime.ts"],"names":[],"mappings":"AAMA,OAAO,EAAkB,KAAK,oBAAoB,EAAE,MAAM,+BAA+B,CAAC;AAyB1F,KAAK,6CAA6C,GAAG,IAAI,CAAC,oBAAoB,EAAE,SAAS,CAAC,GAAG;IACzF,OAAO,EAAE,IAAI,CAAC,oBAAoB,CAAC,SAAS,CAAC,EAAE,gBAAgB,CAAC,GAAG;QAC/D,cAAc,CAAC,EAAE,MAAM,EAAE,CAAC;KAC7B,CAAC;CACL,CAAC;AAEF;;;GAGG;AACH,wBAAsB,YAAY,CAC9B,OAAO,EAAE,MAAM,EACf,MAAM,EAAE,6CAA6C,EACrD,OAAO,GAAE;IACL,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,GAAG,CAAC,EAAE,MAAM,CAAC,UAAU,CAAC;IACxB,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,MAAM,CAAC,EAAE,WAAW,CAAC;CACnB,GACP,OAAO,CAAC;IAAE,MAAM,EAAE,MAAM,CAAC;IAAC,MAAM,EAAE,MAAM,CAAA;CAAE,CAAC,CAY7C"}

package/dist/sandbox/runtime.js

@@ -0,0 +1,105 @@
+import { exec as execCallback, execFile as execFileCallback } from "node:child_process";
+import { promises as fs } from "node:fs";
+import { createRequire } from "node:module";
+import os from "node:os";
+import path from "node:path";
+import { promisify } from "node:util";
+import { SandboxManager } from "@anthropic-ai/sandbox-runtime";
+import { getLogger } from "../log.js";
+import { sandboxDockerEnvironmentIs } from "./sandboxDockerEnvironmentIs.js";
+import { sandboxHomeRedefine } from "./sandboxHomeRedefine.js";
+const logger = getLogger("sandbox.runtime");
+const nodeRequire = createRequire(import.meta.url);
+const srtCliPath = nodeRequire.resolve("@anthropic-ai/sandbox-runtime/dist/cli.js");
+const exec = promisify(execCallback);
+const execFile = promisify(execFileCallback);
+const DEFAULT_TIMEOUT_MS = 30_000;
+const DEFAULT_MAX_BUFFER_BYTES = 1_000_000;
+const baseUnrestrictedRuntimeConfig = {
+    filesystem: {
+        denyRead: [],
+        allowWrite: ["."],
+        denyWrite: []
+    },
+    network: {
+        deniedDomains: []
+    }
+};
+let unrestrictedRuntimeInitialized = false;
+/**
+ * Runs a command with a per-call sandbox config.
+ * Expects: command is non-empty and config is fully resolved for this execution.
+ */
+export async function runInSandbox(command, config, options = {}) {
+    const defaultEnableWeakerNestedSandbox = await sandboxDockerEnvironmentIs();
+    const enableWeakerNestedSandbox = config.enableWeakerNestedSandbox ?? (defaultEnableWeakerNestedSandbox ? true : undefined);
+    const runtimeConfig = {
+        ...config,
+        ...(enableWeakerNestedSandbox === undefined ? {} : { enableWeakerNestedSandbox })
+    };
+    if (runtimeConfig.network.allowedDomains === undefined) {
+        return runInSandboxWithUnrestrictedNetwork(command, runtimeConfig, options);
+    }
+    return runInSandboxWithAllowedDomains(command, runtimeConfig, options);
+}
+async function runInSandboxWithAllowedDomains(command, runtimeConfig, options) {
+    const settingsPath = path.join(os.tmpdir(), `claybot-srt-${process.pid}-${Date.now()}-${Math.random().toString(36).slice(2)}.json`);
+    await fs.writeFile(settingsPath, JSON.stringify(runtimeConfig), "utf8");
+    logger.debug("execute: Executing command with sandbox config");
+    try {
+        const baseEnv = options.env ?? process.env;
+        const { env } = await sandboxHomeRedefine({
+            env: baseEnv,
+            home: options.home
+        });
+        const result = await execFile(process.execPath, [srtCliPath, "--settings", settingsPath, "-c", command], {
+            cwd: options.cwd,
+            env,
+            timeout: options.timeoutMs ?? DEFAULT_TIMEOUT_MS,
+            maxBuffer: options.maxBufferBytes ?? DEFAULT_MAX_BUFFER_BYTES,
+            encoding: "utf8",
+            signal: options.signal
+        });
+        return {
+            stdout: result.stdout,
+            stderr: result.stderr
+        };
+    }
+    finally {
+        await fs.rm(settingsPath, { force: true });
+    }
+}
+async function runInSandboxWithUnrestrictedNetwork(command, runtimeConfig, options) {
+    await sandboxRuntimeUnrestrictedInitialize();
+    logger.debug("execute: Executing command with sandbox config (unrestricted network)");
+    const baseEnv = options.env ?? process.env;
+    const { env } = await sandboxHomeRedefine({
+        env: baseEnv,
+        home: options.home
+    });
+    const wrappedCommand = await SandboxManager.wrapWithSandbox(command, "/bin/bash", {
+        filesystem: runtimeConfig.filesystem,
+        ...(runtimeConfig.enableWeakerNestedSandbox === true ? { enableWeakerNestedSandbox: true } : {})
+    }, options.signal);
+    const result = await exec(wrappedCommand, {
+        cwd: options.cwd,
+        env,
+        timeout: options.timeoutMs ?? DEFAULT_TIMEOUT_MS,
+        maxBuffer: options.maxBufferBytes ?? DEFAULT_MAX_BUFFER_BYTES,
+        encoding: "utf8",
+        signal: options.signal,
+        shell: "/bin/bash"
+    });
+    return {
+        stdout: result.stdout,
+        stderr: result.stderr
+    };
+}
+async function sandboxRuntimeUnrestrictedInitialize() {
+    if (unrestrictedRuntimeInitialized) {
+        return;
+    }
+    await SandboxManager.initialize(baseUnrestrictedRuntimeConfig);
+    unrestrictedRuntimeInitialized = true;
+}
+//# sourceMappingURL=runtime.js.map

package/dist/sandbox/runtime.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"runtime.js","sourceRoot":"","sources":["../../sources/sandbox/runtime.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,IAAI,IAAI,YAAY,EAAE,QAAQ,IAAI,gBAAgB,EAAE,MAAM,oBAAoB,CAAC;AACxF,OAAO,EAAE,QAAQ,IAAI,EAAE,EAAE,MAAM,SAAS,CAAC;AACzC,OAAO,EAAE,aAAa,EAAE,MAAM,aAAa,CAAC;AAC5C,OAAO,EAAE,MAAM,SAAS,CAAC;AACzB,OAAO,IAAI,MAAM,WAAW,CAAC;AAC7B,OAAO,EAAE,SAAS,EAAE,MAAM,WAAW,CAAC;AACtC,OAAO,EAAE,cAAc,EAA6B,MAAM,+BAA+B,CAAC;AAE1F,OAAO,EAAE,SAAS,EAAE,MAAM,WAAW,CAAC;AACtC,OAAO,EAAE,0BAA0B,EAAE,MAAM,iCAAiC,CAAC;AAC7E,OAAO,EAAE,mBAAmB,EAAE,MAAM,0BAA0B,CAAC;AAE/D,MAAM,MAAM,GAAG,SAAS,CAAC,iBAAiB,CAAC,CAAC;AAC5C,MAAM,WAAW,GAAG,aAAa,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;AACnD,MAAM,UAAU,GAAG,WAAW,CAAC,OAAO,CAAC,2CAA2C,CAAC,CAAC;AACpF,MAAM,IAAI,GAAG,SAAS,CAAC,YAAY,CAAC,CAAC;AACrC,MAAM,QAAQ,GAAG,SAAS,CAAC,gBAAgB,CAAC,CAAC;AAC7C,MAAM,kBAAkB,GAAG,MAAM,CAAC;AAClC,MAAM,wBAAwB,GAAG,SAAS,CAAC;AAC3C,MAAM,6BAA6B,GAAG;IAClC,UAAU,EAAE;QACR,QAAQ,EAAE,EAAE;QACZ,UAAU,EAAE,CAAC,GAAG,CAAC;QACjB,SAAS,EAAE,EAAE;KAChB;IACD,OAAO,EAAE;QACL,aAAa,EAAE,EAAE;KACpB;CAC+B,CAAC;AACrC,IAAI,8BAA8B,GAAG,KAAK,CAAC;AAQ3C;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,YAAY,CAC9B,OAAe,EACf,MAAqD,EACrD,UAOI,EAAE;IAEN,MAAM,gCAAgC,GAAG,MAAM,0BAA0B,EAAE,CAAC;IAC5E,MAAM,yBAAyB,GAC3B,MAAM,CAAC,yBAAyB,IAAI,CAAC,gCAAgC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC;IAC9F,MAAM,aAAa,GAAkD;QACjE,GAAG,MAAM;QACT,GAAG,CAAC,yBAAyB,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,yBAAyB,EAAE,CAAC;KACpF,CAAC;IACF,IAAI,aAAa,CAAC,OAAO,CAAC,cAAc,KAAK,SAAS,EAAE,CAAC;QACrD,OAAO,mCAAmC,CAAC,OAAO,EAAE,aAAa,EAAE,OAAO,CAAC,CAAC;IAChF,CAAC;IACD,OAAO,8BAA8B,CAAC,OAAO,EAAE,aAAqC,EAAE,OAAO,CAAC,CAAC;AACnG,CAAC;AAED,KAAK,UAAU,8BAA8B,CACzC,OAAe,EACf,aAAmC,EACnC,OAOC;IAED,MAAM,YAAY,GAAG,IAAI,CAAC,IAAI,CAC1B,EAAE,CAAC,MAAM,EAAE,EACX,eAAe,OAAO,CAAC,GAAG,IAAI,IAAI,CAAC,GAAG,EAAE,IAAI,IAAI,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,OAAO,CACzF,CAAC;IACF,MAAM,EAAE,CAAC,SAAS,CAAC,YAAY,EAAE,IAAI,CAAC,SAAS,CAAC,aAAa,CAAC,EAAE,MAAM,CAAC,CAAC;IACxE,MAAM,CAAC,KAAK,CAAC,gDAAgD,CAAC,CAAC;IAC/D,IAAI,CAAC;QACD,MAAM,OAAO,GAAG,OAAO,CAAC,GAAG,IAAI,OAAO,CAAC,GAAG,CAAC;QAC3C,MAAM,EAAE,GAAG,EAAE,GAAG,MAAM,mBAAmB,CAAC;YACtC,GAAG,EAAE,OAAO;YACZ,IAAI,EAAE,OAAO,CAAC,IAAI;SACrB,CAAC,CAAC;QACH,MAAM,MAAM,GAAG,MAAM,QAAQ,CAAC,OAAO,CAAC,QAAQ,EAAE,CAAC,UAAU,EAAE,YAAY,EAAE,YAAY,EAAE,IAAI,EAAE,OAAO,CAAC,EAAE;YACrG,GAAG,EAAE,OAAO,CAAC,GAAG;YAChB,GAAG;YACH,OAAO,EAAE,OAAO,CAAC,SAAS,IAAI,kBAAkB;YAChD,SAAS,EAAE,OAAO,CAAC,cAAc,IAAI,wBAAwB;YAC7D,QAAQ,EAAE,MAAM;YAChB,MAAM,EAAE,OAAO,CAAC,MAAM;SACzB,CAAC,CAAC;QACH,OAAO;YACH,MAAM,EAAE,MAAM,CAAC,MAAM;YACrB,MAAM,EAAE,MAAM,CAAC,MAAM;SACxB,CAAC;IACN,CAAC;YAAS,CAAC;QACP,MAAM,EAAE,CAAC,EAAE,CAAC,YAAY,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;IAC/C,CAAC;AACL,CAAC;AAED,KAAK,UAAU,mCAAmC,CAC9C,OAAe,EACf,aAA4D,EAC5D,OAOC;IAED,MAAM,oCAAoC,EAAE,CAAC;IAC7C,MAAM,CAAC,KAAK,CAAC,uEAAuE,CAAC,CAAC;IACtF,MAAM,OAAO,GAAG,OAAO,CAAC,GAAG,IAAI,OAAO,CAAC,GAAG,CAAC;IAC3C,MAAM,EAAE,GAAG,EAAE,GAAG,MAAM,mBAAmB,CAAC;QACtC,GAAG,EAAE,OAAO;QACZ,IAAI,EAAE,OAAO,CAAC,IAAI;KACrB,CAAC,CAAC;IACH,MAAM,cAAc,GAAG,MAAM,cAAc,CAAC,eAAe,CACvD,OAAO,EACP,WAAW,EACX;QACI,UAAU,EAAE,aAAa,CAAC,UAAU;QACpC,GAAG,CAAC,aAAa,CAAC,yBAAyB,KAAK,IAAI,CAAC,CAAC,CAAC,EAAE,yBAAyB,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KACnG,EACD,OAAO,CAAC,MAAM,CACjB,CAAC;IACF,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,cAAc,EAAE;QACtC,GAAG,EAAE,OAAO,CAAC,GAAG;QAChB,GAAG;QACH,OAAO,EAAE,OAAO,CAAC,SAAS,IAAI,kBAAkB;QAChD,SAAS,EAAE,OAAO,CAAC,cAAc,IAAI,wBAAwB;QAC7D,QAAQ,EAAE,MAAM;QAChB,MAAM,EAAE,OAAO,CAAC,MAAM;QACtB,KAAK,EAAE,WAAW;KACrB,CAAC,CAAC;IACH,OAAO;QACH,MAAM,EAAE,MAAM,CAAC,MAAM;QACrB,MAAM,EAAE,MAAM,CAAC,MAAM;KACxB,CAAC;AACN,CAAC;AAED,KAAK,UAAU,oCAAoC;IAC/C,IAAI,8BAA8B,EAAE,CAAC;QACjC,OAAO;IACX,CAAC;IACD,MAAM,cAAc,CAAC,UAAU,CAAC,6BAA6B,CAAC,CAAC;IAC/D,8BAA8B,GAAG,IAAI,CAAC;AAC1C,CAAC"}

package/dist/sandbox/runtime.spec.d.ts

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=runtime.spec.d.ts.map

package/dist/sandbox/runtime.spec.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"runtime.spec.d.ts","sourceRoot":"","sources":["../../sources/sandbox/runtime.spec.ts"],"names":[],"mappings":""}

package/dist/sandbox/runtime.spec.js

@@ -0,0 +1,92 @@
+import { promises as fs } from "node:fs";
+import os from "node:os";
+import path from "node:path";
+import { describe, expect, it } from "vitest";
+import { runInSandbox } from "./runtime.js";
+// bwrap is unavailable in GitHub Actions (RTM_NEWADDR: Operation not permitted)
+const describeIf = process.env.CI ? describe.skip : describe;
+const baseFilesystem = {
+    denyRead: [],
+    allowWrite: ["."],
+    denyWrite: []
+};
+async function runCurlWithDomains(url, allowedDomains) {
+    try {
+        const result = await runInSandbox(`curl -s -I --max-time 10 "${url}"`, {
+            filesystem: baseFilesystem,
+            network: {
+                deniedDomains: [],
+                ...(allowedDomains === undefined ? {} : { allowedDomains })
+            }
+        }, {
+            timeoutMs: 30_000,
+            maxBufferBytes: 1_000_000
+        });
+        return {
+            stdout: toText(result.stdout),
+            stderr: toText(result.stderr),
+            exitCode: 0
+        };
+    }
+    catch (error) {
+        const execError = error;
+        return {
+            stdout: toText(execError.stdout),
+            stderr: toText(execError.stderr),
+            exitCode: typeof execError.code === "number" ? execError.code : null
+        };
+    }
+}
+function toText(value) {
+    if (!value) {
+        return "";
+    }
+    if (typeof value === "string") {
+        return value;
+    }
+    return value.toString("utf8");
+}
+describeIf("runInSandbox integration", () => {
+    it("runs google and microsoft in parallel with one whitelisted domain per call", async () => {
+        const [googleResult, microsoftResult] = await Promise.all([
+            runCurlWithDomains("https://google.com", ["google.com"]),
+            runCurlWithDomains("https://microsoft.com", ["microsoft.com"])
+        ]);
+        expect(googleResult.exitCode).toBe(0);
+        expect(microsoftResult.exitCode).toBe(0);
+        expect(googleResult.stdout).toContain("HTTP/");
+        expect(microsoftResult.stdout).toContain("HTTP/");
+    });
+    it("blocks https requests when domain is not whitelisted", async () => {
+        const result = await runCurlWithDomains("https://microsoft.com", ["google.com"]);
+        expect(result.stdout).toContain("X-Proxy-Error: blocked-by-allowlist");
+    });
+    it("blocks http requests when domain is not whitelisted", async () => {
+        const result = await runCurlWithDomains("http://microsoft.com", ["google.com"]);
+        expect(result.stdout).toContain("X-Proxy-Error: blocked-by-allowlist");
+    });
+    it("allows https requests when allowedDomains is undefined", async () => {
+        const result = await runCurlWithDomains("https://microsoft.com");
+        expect(result.exitCode).toBe(0);
+        expect(result.stdout).toContain("HTTP/");
+        expect(result.stdout).not.toContain("X-Proxy-Error: blocked-by-allowlist");
+    });
+    it("maps HOME when home option is provided", async () => {
+        const workspace = await fs.mkdtemp(path.join(os.tmpdir(), "daycare-srt-home-"));
+        try {
+            const home = path.join(workspace, ".sandbox-home");
+            const result = await runInSandbox("printf '%s' \"$HOME\"", {
+                filesystem: baseFilesystem,
+                network: {
+                    allowedDomains: [],
+                    deniedDomains: []
+                }
+            }, { home });
+            expect(result.stdout).toBe(home);
+        }
+        finally {
+            await fs.rm(workspace, { recursive: true, force: true });
+        }
+    });
+});
+//# sourceMappingURL=runtime.spec.js.map

package/dist/sandbox/runtime.spec.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"runtime.spec.js","sourceRoot":"","sources":["../../sources/sandbox/runtime.spec.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,QAAQ,IAAI,EAAE,EAAE,MAAM,SAAS,CAAC;AACzC,OAAO,EAAE,MAAM,SAAS,CAAC;AACzB,OAAO,IAAI,MAAM,WAAW,CAAC;AAC7B,OAAO,EAAE,QAAQ,EAAE,MAAM,EAAE,EAAE,EAAE,MAAM,QAAQ,CAAC;AAE9C,OAAO,EAAE,YAAY,EAAE,MAAM,cAAc,CAAC;AAE5C,gFAAgF;AAChF,MAAM,UAAU,GAAG,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,QAAQ,CAAC;AAE7D,MAAM,cAAc,GAAG;IACnB,QAAQ,EAAE,EAAE;IACZ,UAAU,EAAE,CAAC,GAAG,CAAC;IACjB,SAAS,EAAE,EAAE;CAChB,CAAC;AAQF,KAAK,UAAU,kBAAkB,CAAC,GAAW,EAAE,cAAyB;IACpE,IAAI,CAAC;QACD,MAAM,MAAM,GAAG,MAAM,YAAY,CAC7B,6BAA6B,GAAG,GAAG,EACnC;YACI,UAAU,EAAE,cAAc;YAC1B,OAAO,EAAE;gBACL,aAAa,EAAE,EAAE;gBACjB,GAAG,CAAC,cAAc,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,cAAc,EAAE,CAAC;aAC9D;SACJ,EACD;YACI,SAAS,EAAE,MAAM;YACjB,cAAc,EAAE,SAAS;SAC5B,CACJ,CAAC;QAEF,OAAO;YACH,MAAM,EAAE,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC;YAC7B,MAAM,EAAE,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC;YAC7B,QAAQ,EAAE,CAAC;SACd,CAAC;IACN,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACb,MAAM,SAAS,GAAG,KAIjB,CAAC;QACF,OAAO;YACH,MAAM,EAAE,MAAM,CAAC,SAAS,CAAC,MAAM,CAAC;YAChC,MAAM,EAAE,MAAM,CAAC,SAAS,CAAC,MAAM,CAAC;YAChC,QAAQ,EAAE,OAAO,SAAS,CAAC,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI;SACvE,CAAC;IACN,CAAC;AACL,CAAC;AAED,SAAS,MAAM,CAAC,KAAuB;IACnC,IAAI,CAAC,KAAK,EAAE,CAAC;QACT,OAAO,EAAE,CAAC;IACd,CAAC;IACD,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;QAC5B,OAAO,KAAK,CAAC;IACjB,CAAC;IACD,OAAO,KAAK,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;AAClC,CAAC;AAED,UAAU,CAAC,0BAA0B,EAAE,GAAG,EAAE;IACxC,EAAE,CAAC,4EAA4E,EAAE,KAAK,IAAI,EAAE;QACxF,MAAM,CAAC,YAAY,EAAE,eAAe,CAAC,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC;YACtD,kBAAkB,CAAC,oBAAoB,EAAE,CAAC,YAAY,CAAC,CAAC;YACxD,kBAAkB,CAAC,uBAAuB,EAAE,CAAC,eAAe,CAAC,CAAC;SACjE,CAAC,CAAC;QAEH,MAAM,CAAC,YAAY,CAAC,QAAQ,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QACtC,MAAM,CAAC,eAAe,CAAC,QAAQ,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QACzC,MAAM,CAAC,YAAY,CAAC,MAAM,CAAC,CAAC,SAAS,CAAC,OAAO,CAAC,CAAC;QAC/C,MAAM,CAAC,eAAe,CAAC,MAAM,CAAC,CAAC,SAAS,CAAC,OAAO,CAAC,CAAC;IACtD,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,sDAAsD,EAAE,KAAK,IAAI,EAAE;QAClE,MAAM,MAAM,GAAG,MAAM,kBAAkB,CAAC,uBAAuB,EAAE,CAAC,YAAY,CAAC,CAAC,CAAC;QAEjF,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,SAAS,CAAC,qCAAqC,CAAC,CAAC;IAC3E,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,qDAAqD,EAAE,KAAK,IAAI,EAAE;QACjE,MAAM,MAAM,GAAG,MAAM,kBAAkB,CAAC,sBAAsB,EAAE,CAAC,YAAY,CAAC,CAAC,CAAC;QAEhF,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,SAAS,CAAC,qCAAqC,CAAC,CAAC;IAC3E,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,wDAAwD,EAAE,KAAK,IAAI,EAAE;QACpE,MAAM,MAAM,GAAG,MAAM,kBAAkB,CAAC,uBAAuB,CAAC,CAAC;QAEjE,MAAM,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QAChC,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,SAAS,CAAC,OAAO,CAAC,CAAC;QACzC,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,GAAG,CAAC,SAAS,CAAC,qCAAqC,CAAC,CAAC;IAC/E,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,wCAAwC,EAAE,KAAK,IAAI,EAAE;QACpD,MAAM,SAAS,GAAG,MAAM,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,MAAM,EAAE,EAAE,mBAAmB,CAAC,CAAC,CAAC;QAChF,IAAI,CAAC;YACD,MAAM,IAAI,GAAG,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,eAAe,CAAC,CAAC;YACnD,MAAM,MAAM,GAAG,MAAM,YAAY,CAC7B,uBAAuB,EACvB;gBACI,UAAU,EAAE,cAAc;gBAC1B,OAAO,EAAE;oBACL,cAAc,EAAE,EAAE;oBAClB,aAAa,EAAE,EAAE;iBACpB;aACJ,EACD,EAAE,IAAI,EAAE,CACX,CAAC;YAEF,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACrC,CAAC;gBAAS,CAAC;YACP,MAAM,EAAE,CAAC,EAAE,CAAC,SAAS,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;QAC7D,CAAC;IACL,CAAC,CAAC,CAAC;AACP,CAAC,CAAC,CAAC"}

package/dist/sandbox/sandbox.d.ts

@@ -0,0 +1,41 @@
+import type { SessionPermissions } from "@/types";
+import type { PathMountPoint } from "../utils/pathMountTypes.js";
+import type { SandboxConfig, SandboxDockerConfig, SandboxExecArgs, SandboxExecResult, SandboxReadArgs, SandboxReadResult, SandboxWriteArgs, SandboxWriteResult } from "./sandboxTypes.js";
+export declare class Sandbox {
+    readonly homeDir: string;
+    readonly workingDir: string;
+    readonly permissions: SessionPermissions;
+    readonly docker: SandboxDockerConfig | undefined;
+    /** All mount points including home. Used for host↔sandbox path mapping. */
+    readonly mounts: PathMountPoint[];
+    constructor(config: SandboxConfig);
+    /**
+     * Read from the host filesystem with sandbox read checks.
+     * Expects: args.path is absolute or relative to workingDir.
+     */
+    read(args: SandboxReadArgs): Promise<SandboxReadResult>;
+    /**
+     * Write UTF-8 content to host filesystem with sandbox write checks.
+     * Expects: args.path is an absolute path.
+     */
+    write(args: SandboxWriteArgs): Promise<SandboxWriteResult>;
+    /**
+     * Execute a shell command inside sandbox-runtime.
+     * Expects: args.command is non-empty.
+     */
+    exec(args: SandboxExecArgs): Promise<SandboxExecResult>;
+    private permissionsEffectiveResolve;
+    private readInputPathResolve;
+    private readInputHomeFallbackResolve;
+    /**
+     * The working directory as seen inside exec commands.
+     * In Docker mode this is the container-side path; in non-Docker mode the host path.
+     */
+    get execWorkingDir(): string;
+    /**
+     * Translates a sandbox virtual path to a host path for filesystem I/O.
+     * Maps /shared/* and /home paths to their host equivalents via the mount list.
+     */
+    private resolveVirtualPath;
+}
+//# sourceMappingURL=sandbox.d.ts.map

package/dist/sandbox/sandbox.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"sandbox.d.ts","sourceRoot":"","sources":["../../sources/sandbox/sandbox.ts"],"names":[],"mappings":"AAKA,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,SAAS,CAAC;AAMlD,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,4BAA4B,CAAC;AAUjE,OAAO,KAAK,EACR,aAAa,EACb,mBAAmB,EACnB,eAAe,EACf,iBAAiB,EACjB,eAAe,EACf,iBAAiB,EACjB,gBAAgB,EAChB,kBAAkB,EACrB,MAAM,mBAAmB,CAAC;AAkB3B,qBAAa,OAAO;IAChB,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,WAAW,EAAE,kBAAkB,CAAC;IACzC,QAAQ,CAAC,MAAM,EAAE,mBAAmB,GAAG,SAAS,CAAC;IACjD,2EAA2E;IAC3E,QAAQ,CAAC,MAAM,EAAE,cAAc,EAAE,CAAC;gBAEtB,MAAM,EAAE,aAAa;IAQjC;;;OAGG;IACG,IAAI,CAAC,IAAI,EAAE,eAAe,GAAG,OAAO,CAAC,iBAAiB,CAAC;IA8F7D;;;OAGG;IACG,KAAK,CAAC,IAAI,EAAE,gBAAgB,GAAG,OAAO,CAAC,kBAAkB,CAAC;IAsChE;;;OAGG;IACG,IAAI,CAAC,IAAI,EAAE,eAAe,GAAG,OAAO,CAAC,iBAAiB,CAAC;IAmG7D,OAAO,CAAC,2BAA2B;YAarB,oBAAoB;YA8BpB,4BAA4B;IAc1C;;;OAGG;IACH,IAAI,cAAc,IAAI,MAAM,CAS3B;IAED;;;OAGG;IACH,OAAO,CAAC,kBAAkB;CAc7B"}