daycare-cli 0.0.0-canary.db7089a

package/dist/release/releaseVersionIncrement.d.ts

@@ -0,0 +1,8 @@
+type ReleaseVersionIncrementKind = "major" | "minor" | "patch";
+/**
+ * Increments a semantic version using major, minor, or patch semantics.
+ * Expects: value is a valid semantic version.
+ */
+export declare function releaseVersionIncrement(value: string, kind: ReleaseVersionIncrementKind): string;
+export {};
+//# sourceMappingURL=releaseVersionIncrement.d.ts.map

package/dist/release/releaseVersionIncrement.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"releaseVersionIncrement.d.ts","sourceRoot":"","sources":["../../sources/release/releaseVersionIncrement.ts"],"names":[],"mappings":"AAGA,KAAK,2BAA2B,GAAG,OAAO,GAAG,OAAO,GAAG,OAAO,CAAC;AAE/D;;;GAGG;AACH,wBAAgB,uBAAuB,CACrC,KAAK,EAAE,MAAM,EACb,IAAI,EAAE,2BAA2B,GAChC,MAAM,CAkBR"}

package/dist/release/releaseVersionIncrement.js

@@ -0,0 +1,23 @@
+const SEMVER_PATTERN = /^(0|[1-9]\d*)\.(0|[1-9]\d*)\.(0|[1-9]\d*)(?:-[0-9A-Za-z-]+(?:\.[0-9A-Za-z-]+)*)?(?:\+[0-9A-Za-z-]+(?:\.[0-9A-Za-z-]+)*)?$/;
+/**
+ * Increments a semantic version using major, minor, or patch semantics.
+ * Expects: value is a valid semantic version.
+ */
+export function releaseVersionIncrement(value, kind) {
+    const match = SEMVER_PATTERN.exec(value.trim());
+    if (!match) {
+        throw new Error(`Invalid semantic version: ${value}`);
+    }
+    const major = Number(match[1]);
+    const minor = Number(match[2]);
+    const patch = Number(match[3]);
+    switch (kind) {
+        case "major":
+            return `${major + 1}.0.0`;
+        case "minor":
+            return `${major}.${minor + 1}.0`;
+        case "patch":
+            return `${major}.${minor}.${patch + 1}`;
+    }
+}
+//# sourceMappingURL=releaseVersionIncrement.js.map

package/dist/release/releaseVersionIncrement.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"releaseVersionIncrement.js","sourceRoot":"","sources":["../../sources/release/releaseVersionIncrement.ts"],"names":[],"mappings":"AAAA,MAAM,cAAc,GAClB,2HAA2H,CAAC;AAI9H;;;GAGG;AACH,MAAM,UAAU,uBAAuB,CACrC,KAAa,EACb,IAAiC;IAEjC,MAAM,KAAK,GAAG,cAAc,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC,CAAC;IAChD,IAAI,CAAC,KAAK,EAAE,CAAC;QACX,MAAM,IAAI,KAAK,CAAC,6BAA6B,KAAK,EAAE,CAAC,CAAC;IACxD,CAAC;IAED,MAAM,KAAK,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC;IAC/B,MAAM,KAAK,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC;IAC/B,MAAM,KAAK,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC;IAE/B,QAAQ,IAAI,EAAE,CAAC;QACb,KAAK,OAAO;YACV,OAAO,GAAG,KAAK,GAAG,CAAC,MAAM,CAAC;QAC5B,KAAK,OAAO;YACV,OAAO,GAAG,KAAK,IAAI,KAAK,GAAG,CAAC,IAAI,CAAC;QACnC,KAAK,OAAO;YACV,OAAO,GAAG,KAAK,IAAI,KAAK,IAAI,KAAK,GAAG,CAAC,EAAE,CAAC;IAC5C,CAAC;AACH,CAAC"}

package/dist/release/releaseVersionIncrement.spec.d.ts

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=releaseVersionIncrement.spec.d.ts.map

package/dist/release/releaseVersionIncrement.spec.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"releaseVersionIncrement.spec.d.ts","sourceRoot":"","sources":["../../sources/release/releaseVersionIncrement.spec.ts"],"names":[],"mappings":""}

package/dist/release/releaseVersionIncrement.spec.js

@@ -0,0 +1,20 @@
+import { describe, expect, it } from "vitest";
+import { releaseVersionIncrement } from "./releaseVersionIncrement.js";
+describe("releaseVersionIncrement", () => {
+    it("increments patch versions", () => {
+        expect(releaseVersionIncrement("1.2.3", "patch")).toBe("1.2.4");
+    });
+    it("increments minor versions and resets patch", () => {
+        expect(releaseVersionIncrement("1.2.3", "minor")).toBe("1.3.0");
+    });
+    it("increments major versions and resets minor and patch", () => {
+        expect(releaseVersionIncrement("1.2.3", "major")).toBe("2.0.0");
+    });
+    it("accepts prerelease inputs and returns stable increments", () => {
+        expect(releaseVersionIncrement("1.2.3-beta.1+build.42", "patch")).toBe("1.2.4");
+    });
+    it("throws for invalid semver values", () => {
+        expect(() => releaseVersionIncrement("v1.2.3", "patch")).toThrow("Invalid semantic version: v1.2.3");
+    });
+});
+//# sourceMappingURL=releaseVersionIncrement.spec.js.map

package/dist/release/releaseVersionIncrement.spec.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"releaseVersionIncrement.spec.js","sourceRoot":"","sources":["../../sources/release/releaseVersionIncrement.spec.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,MAAM,EAAE,EAAE,EAAE,MAAM,QAAQ,CAAC;AAE9C,OAAO,EAAE,uBAAuB,EAAE,MAAM,8BAA8B,CAAC;AAEvE,QAAQ,CAAC,yBAAyB,EAAE,GAAG,EAAE;IACvC,EAAE,CAAC,2BAA2B,EAAE,GAAG,EAAE;QACnC,MAAM,CAAC,uBAAuB,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;IAClE,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,4CAA4C,EAAE,GAAG,EAAE;QACpD,MAAM,CAAC,uBAAuB,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;IAClE,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,sDAAsD,EAAE,GAAG,EAAE;QAC9D,MAAM,CAAC,uBAAuB,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;IAClE,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,yDAAyD,EAAE,GAAG,EAAE;QACjE,MAAM,CAAC,uBAAuB,CAAC,uBAAuB,EAAE,OAAO,CAAC,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;IAClF,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,kCAAkC,EAAE,GAAG,EAAE;QAC1C,MAAM,CAAC,GAAG,EAAE,CAAC,uBAAuB,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC,CAAC,OAAO,CAC9D,kCAAkC,CACnC,CAAC;IACJ,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC"}

package/dist/release/releaseVersionPrompt.d.ts

@@ -0,0 +1,6 @@
+/**
+ * Prompts for a release version strategy and resolves the next semantic version.
+ * Expects: currentVersion is a valid semantic version.
+ */
+export declare function releaseVersionPrompt(currentVersion: string): Promise<string>;
+//# sourceMappingURL=releaseVersionPrompt.d.ts.map

package/dist/release/releaseVersionPrompt.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"releaseVersionPrompt.d.ts","sourceRoot":"","sources":["../../sources/release/releaseVersionPrompt.ts"],"names":[],"mappings":"AASA;;;GAGG;AACH,wBAAsB,oBAAoB,CAAC,cAAc,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,CA4ClF"}

package/dist/release/releaseVersionPrompt.js

@@ -0,0 +1,46 @@
+import { promptInput, promptSelect } from "../commands/prompts.js";
+import { releaseVersionIncrement } from "./releaseVersionIncrement.js";
+const SEMVER_PATTERN = /^(0|[1-9]\d*)\.(0|[1-9]\d*)\.(0|[1-9]\d*)(?:-[0-9A-Za-z-]+(?:\.[0-9A-Za-z-]+)*)?(?:\+[0-9A-Za-z-]+(?:\.[0-9A-Za-z-]+)*)?$/;
+/**
+ * Prompts for a release version strategy and resolves the next semantic version.
+ * Expects: currentVersion is a valid semantic version.
+ */
+export async function releaseVersionPrompt(currentVersion) {
+    const nextVersions = {
+        patch: releaseVersionIncrement(currentVersion, "patch"),
+        minor: releaseVersionIncrement(currentVersion, "minor"),
+        major: releaseVersionIncrement(currentVersion, "major")
+    };
+    const mode = await promptSelect({
+        message: `Current version is ${currentVersion}. Select release increment:`,
+        choices: [
+            { value: "patch", name: `patch -> ${nextVersions.patch}` },
+            { value: "minor", name: `minor -> ${nextVersions.minor}` },
+            { value: "major", name: `major -> ${nextVersions.major}` },
+            { value: "custom", name: "custom (enter version)" }
+        ]
+    });
+    if (!mode) {
+        throw new Error("Release cancelled.");
+    }
+    if (mode !== "custom") {
+        return nextVersions[mode];
+    }
+    const customVersion = await promptInput({
+        message: "Enter custom semantic version",
+        default: nextVersions.patch,
+        placeholder: "x.y.z"
+    });
+    if (!customVersion) {
+        throw new Error("Release cancelled.");
+    }
+    const normalizedVersion = customVersion.trim();
+    if (!SEMVER_PATTERN.test(normalizedVersion)) {
+        throw new Error("Version must be a valid semantic version.");
+    }
+    if (normalizedVersion === currentVersion) {
+        throw new Error("New version must differ from current version.");
+    }
+    return normalizedVersion;
+}
+//# sourceMappingURL=releaseVersionPrompt.js.map

package/dist/release/releaseVersionPrompt.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"releaseVersionPrompt.js","sourceRoot":"","sources":["../../sources/release/releaseVersionPrompt.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,WAAW,EAAE,YAAY,EAAE,MAAM,wBAAwB,CAAC;AAEnE,OAAO,EAAE,uBAAuB,EAAE,MAAM,8BAA8B,CAAC;AAEvE,MAAM,cAAc,GAClB,2HAA2H,CAAC;AAI9H;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,oBAAoB,CAAC,cAAsB;IAC/D,MAAM,YAAY,GAAG;QACnB,KAAK,EAAE,uBAAuB,CAAC,cAAc,EAAE,OAAO,CAAC;QACvD,KAAK,EAAE,uBAAuB,CAAC,cAAc,EAAE,OAAO,CAAC;QACvD,KAAK,EAAE,uBAAuB,CAAC,cAAc,EAAE,OAAO,CAAC;KACxD,CAAC;IAEF,MAAM,IAAI,GAAG,MAAM,YAAY,CAAqB;QAClD,OAAO,EAAE,sBAAsB,cAAc,6BAA6B;QAC1E,OAAO,EAAE;YACP,EAAE,KAAK,EAAE,OAAO,EAAE,IAAI,EAAE,YAAY,YAAY,CAAC,KAAK,EAAE,EAAE;YAC1D,EAAE,KAAK,EAAE,OAAO,EAAE,IAAI,EAAE,YAAY,YAAY,CAAC,KAAK,EAAE,EAAE;YAC1D,EAAE,KAAK,EAAE,OAAO,EAAE,IAAI,EAAE,YAAY,YAAY,CAAC,KAAK,EAAE,EAAE;YAC1D,EAAE,KAAK,EAAE,QAAQ,EAAE,IAAI,EAAE,wBAAwB,EAAE;SACpD;KACF,CAAC,CAAC;IAEH,IAAI,CAAC,IAAI,EAAE,CAAC;QACV,MAAM,IAAI,KAAK,CAAC,oBAAoB,CAAC,CAAC;IACxC,CAAC;IAED,IAAI,IAAI,KAAK,QAAQ,EAAE,CAAC;QACtB,OAAO,YAAY,CAAC,IAAI,CAAC,CAAC;IAC5B,CAAC;IAED,MAAM,aAAa,GAAG,MAAM,WAAW,CAAC;QACtC,OAAO,EAAE,+BAA+B;QACxC,OAAO,EAAE,YAAY,CAAC,KAAK;QAC3B,WAAW,EAAE,OAAO;KACrB,CAAC,CAAC;IAEH,IAAI,CAAC,aAAa,EAAE,CAAC;QACnB,MAAM,IAAI,KAAK,CAAC,oBAAoB,CAAC,CAAC;IACxC,CAAC;IAED,MAAM,iBAAiB,GAAG,aAAa,CAAC,IAAI,EAAE,CAAC;IAC/C,IAAI,CAAC,cAAc,CAAC,IAAI,CAAC,iBAAiB,CAAC,EAAE,CAAC;QAC5C,MAAM,IAAI,KAAK,CAAC,2CAA2C,CAAC,CAAC;IAC/D,CAAC;IACD,IAAI,iBAAiB,KAAK,cAAc,EAAE,CAAC;QACzC,MAAM,IAAI,KAAK,CAAC,+CAA+C,CAAC,CAAC;IACnE,CAAC;IAED,OAAO,iBAAiB,CAAC;AAC3B,CAAC"}

package/dist/sandbox/runtime.d.ts

@@ -0,0 +1,16 @@
+import type { SandboxRuntimeConfig } from "@anthropic-ai/sandbox-runtime";
+/**
+ * Runs a command with a per-call sandbox config.
+ * Expects: command is non-empty and config is fully resolved for this execution.
+ */
+export declare function runInSandbox(command: string, config: SandboxRuntimeConfig, options?: {
+    cwd?: string;
+    env?: NodeJS.ProcessEnv;
+    home?: string;
+    timeoutMs?: number;
+    maxBufferBytes?: number;
+}): Promise<{
+    stdout: string;
+    stderr: string;
+}>;
+//# sourceMappingURL=runtime.d.ts.map

package/dist/sandbox/runtime.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"runtime.d.ts","sourceRoot":"","sources":["../../sources/sandbox/runtime.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,oBAAoB,EAAE,MAAM,+BAA+B,CAAC;AAmB1E;;;GAGG;AACH,wBAAsB,YAAY,CAChC,OAAO,EAAE,MAAM,EACf,MAAM,EAAE,oBAAoB,EAC5B,OAAO,GAAE;IACP,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,GAAG,CAAC,EAAE,MAAM,CAAC,UAAU,CAAC;IACxB,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,cAAc,CAAC,EAAE,MAAM,CAAC;CACpB,GACL,OAAO,CAAC;IAAE,MAAM,EAAE,MAAM,CAAC;IAAC,MAAM,EAAE,MAAM,CAAA;CAAE,CAAC,CAsC7C"}

package/dist/sandbox/runtime.js

@@ -0,0 +1,56 @@
+import { execFile as execFileCallback } from "node:child_process";
+import { promises as fs } from "node:fs";
+import { createRequire } from "node:module";
+import os from "node:os";
+import path from "node:path";
+import { promisify } from "node:util";
+import { getLogger } from "../log.js";
+import { sandboxHomeRedefine } from "./sandboxHomeRedefine.js";
+const logger = getLogger("sandbox.runtime");
+const nodeRequire = createRequire(import.meta.url);
+const srtCliPath = nodeRequire.resolve("@anthropic-ai/sandbox-runtime/dist/cli.js");
+const execFile = promisify(execFileCallback);
+const DEFAULT_TIMEOUT_MS = 30_000;
+const DEFAULT_MAX_BUFFER_BYTES = 1_000_000;
+const DEFAULT_ENABLE_WEAKER_NESTED_SANDBOX = true;
+/**
+ * Runs a command with a per-call sandbox config.
+ * Expects: command is non-empty and config is fully resolved for this execution.
+ */
+export async function runInSandbox(command, config, options = {}) {
+    const runtimeConfig = {
+        ...config,
+        enableWeakerNestedSandbox: config.enableWeakerNestedSandbox ?? DEFAULT_ENABLE_WEAKER_NESTED_SANDBOX
+    };
+    const settingsPath = path.join(os.tmpdir(), `claybot-srt-${process.pid}-${Date.now()}-${Math.random().toString(36).slice(2)}.json`);
+    await fs.writeFile(settingsPath, JSON.stringify(runtimeConfig), "utf8");
+    logger.debug("execute: Executing command with sandbox config");
+    try {
+        const baseEnv = options.env ?? process.env;
+        const { env } = await sandboxHomeRedefine({
+            env: baseEnv,
+            home: options.home
+        });
+        const result = await execFile(process.execPath, [
+            srtCliPath,
+            "--settings",
+            settingsPath,
+            "-c",
+            command
+        ], {
+            cwd: options.cwd,
+            env,
+            timeout: options.timeoutMs ?? DEFAULT_TIMEOUT_MS,
+            maxBuffer: options.maxBufferBytes ?? DEFAULT_MAX_BUFFER_BYTES,
+            encoding: "utf8"
+        });
+        return {
+            stdout: result.stdout,
+            stderr: result.stderr
+        };
+    }
+    finally {
+        await fs.rm(settingsPath, { force: true });
+    }
+}
+//# sourceMappingURL=runtime.js.map

package/dist/sandbox/runtime.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"runtime.js","sourceRoot":"","sources":["../../sources/sandbox/runtime.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,QAAQ,IAAI,gBAAgB,EAAE,MAAM,oBAAoB,CAAC;AAClE,OAAO,EAAE,QAAQ,IAAI,EAAE,EAAE,MAAM,SAAS,CAAC;AACzC,OAAO,EAAE,aAAa,EAAE,MAAM,aAAa,CAAC;AAC5C,OAAO,EAAE,MAAM,SAAS,CAAC;AACzB,OAAO,IAAI,MAAM,WAAW,CAAC;AAC7B,OAAO,EAAE,SAAS,EAAE,MAAM,WAAW,CAAC;AAEtC,OAAO,EAAE,SAAS,EAAE,MAAM,WAAW,CAAC;AACtC,OAAO,EAAE,mBAAmB,EAAE,MAAM,0BAA0B,CAAC;AAE/D,MAAM,MAAM,GAAG,SAAS,CAAC,iBAAiB,CAAC,CAAC;AAC5C,MAAM,WAAW,GAAG,aAAa,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;AACnD,MAAM,UAAU,GAAG,WAAW,CAAC,OAAO,CAAC,2CAA2C,CAAC,CAAC;AACpF,MAAM,QAAQ,GAAG,SAAS,CAAC,gBAAgB,CAAC,CAAC;AAC7C,MAAM,kBAAkB,GAAG,MAAM,CAAC;AAClC,MAAM,wBAAwB,GAAG,SAAS,CAAC;AAC3C,MAAM,oCAAoC,GAAG,IAAI,CAAC;AAElD;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,YAAY,CAChC,OAAe,EACf,MAA4B,EAC5B,UAMI,EAAE;IAEN,MAAM,aAAa,GAAyB;QAC1C,GAAG,MAAM;QACT,yBAAyB,EACvB,MAAM,CAAC,yBAAyB,IAAI,oCAAoC;KAC3E,CAAC;IACF,MAAM,YAAY,GAAG,IAAI,CAAC,IAAI,CAC5B,EAAE,CAAC,MAAM,EAAE,EACX,eAAe,OAAO,CAAC,GAAG,IAAI,IAAI,CAAC,GAAG,EAAE,IAAI,IAAI,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,OAAO,CACvF,CAAC;IACF,MAAM,EAAE,CAAC,SAAS,CAAC,YAAY,EAAE,IAAI,CAAC,SAAS,CAAC,aAAa,CAAC,EAAE,MAAM,CAAC,CAAC;IACxE,MAAM,CAAC,KAAK,CAAC,gDAAgD,CAAC,CAAC;IAC/D,IAAI,CAAC;QACH,MAAM,OAAO,GAAG,OAAO,CAAC,GAAG,IAAI,OAAO,CAAC,GAAG,CAAC;QAC3C,MAAM,EAAE,GAAG,EAAE,GAAG,MAAM,mBAAmB,CAAC;YACxC,GAAG,EAAE,OAAO;YACZ,IAAI,EAAE,OAAO,CAAC,IAAI;SACnB,CAAC,CAAC;QACH,MAAM,MAAM,GAAG,MAAM,QAAQ,CAAC,OAAO,CAAC,QAAQ,EAAE;YAC9C,UAAU;YACV,YAAY;YACZ,YAAY;YACZ,IAAI;YACJ,OAAO;SACR,EAAE;YACD,GAAG,EAAE,OAAO,CAAC,GAAG;YAChB,GAAG;YACH,OAAO,EAAE,OAAO,CAAC,SAAS,IAAI,kBAAkB;YAChD,SAAS,EAAE,OAAO,CAAC,cAAc,IAAI,wBAAwB;YAC7D,QAAQ,EAAE,MAAM;SACjB,CAAC,CAAC;QACH,OAAO;YACL,MAAM,EAAE,MAAM,CAAC,MAAM;YACrB,MAAM,EAAE,MAAM,CAAC,MAAM;SACtB,CAAC;IACJ,CAAC;YAAS,CAAC;QACT,MAAM,EAAE,CAAC,EAAE,CAAC,YAAY,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;IAC7C,CAAC;AACH,CAAC"}

package/dist/sandbox/runtime.spec.d.ts

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=runtime.spec.d.ts.map

package/dist/sandbox/runtime.spec.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"runtime.spec.d.ts","sourceRoot":"","sources":["../../sources/sandbox/runtime.spec.ts"],"names":[],"mappings":""}

package/dist/sandbox/runtime.spec.js

@@ -0,0 +1,84 @@
+import { describe, expect, it } from "vitest";
+import { promises as fs } from "node:fs";
+import os from "node:os";
+import path from "node:path";
+import { runInSandbox } from "./runtime.js";
+const baseFilesystem = {
+    denyRead: [],
+    allowWrite: ["."],
+    denyWrite: []
+};
+async function runCurlWithDomains(url, allowedDomains) {
+    try {
+        const result = await runInSandbox(`curl -s -I --max-time 10 "${url}"`, {
+            filesystem: baseFilesystem,
+            network: {
+                allowedDomains,
+                deniedDomains: []
+            }
+        }, {
+            timeoutMs: 30_000,
+            maxBufferBytes: 1_000_000
+        });
+        return {
+            stdout: toText(result.stdout),
+            stderr: toText(result.stderr),
+            exitCode: 0
+        };
+    }
+    catch (error) {
+        const execError = error;
+        return {
+            stdout: toText(execError.stdout),
+            stderr: toText(execError.stderr),
+            exitCode: typeof execError.code === "number" ? execError.code : null
+        };
+    }
+}
+function toText(value) {
+    if (!value) {
+        return "";
+    }
+    if (typeof value === "string") {
+        return value;
+    }
+    return value.toString("utf8");
+}
+describe("runInSandbox integration", () => {
+    it("runs google and microsoft in parallel with one whitelisted domain per call", async () => {
+        const [googleResult, microsoftResult] = await Promise.all([
+            runCurlWithDomains("https://google.com", ["google.com"]),
+            runCurlWithDomains("https://microsoft.com", ["microsoft.com"])
+        ]);
+        expect(googleResult.exitCode).toBe(0);
+        expect(microsoftResult.exitCode).toBe(0);
+        expect(googleResult.stdout).toContain("HTTP/");
+        expect(microsoftResult.stdout).toContain("HTTP/");
+    });
+    it("blocks https requests when domain is not whitelisted", async () => {
+        const result = await runCurlWithDomains("https://microsoft.com", ["google.com"]);
+        expect(result.stdout).toContain("X-Proxy-Error: blocked-by-allowlist");
+    });
+    it("blocks http requests when domain is not whitelisted", async () => {
+        const result = await runCurlWithDomains("http://microsoft.com", ["google.com"]);
+        expect(result.stdout).toContain("X-Proxy-Error: blocked-by-allowlist");
+    });
+    it("maps HOME when home option is provided", async () => {
+        const workspace = await fs.mkdtemp(path.join(os.tmpdir(), "daycare-srt-home-"));
+        try {
+            const home = path.join(workspace, ".sandbox-home");
+            const result = await runInSandbox("printf '%s' \"$HOME\"", {
+                filesystem: baseFilesystem,
+                network: {
+                    allowedDomains: [],
+                    deniedDomains: []
+                }
+            }, { home });
+            expect(result.stdout).toBe(home);
+        }
+        finally {
+            await fs.rm(workspace, { recursive: true, force: true });
+        }
+    });
+});
+//# sourceMappingURL=runtime.spec.js.map

package/dist/sandbox/runtime.spec.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"runtime.spec.js","sourceRoot":"","sources":["../../sources/sandbox/runtime.spec.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,MAAM,EAAE,EAAE,EAAE,MAAM,QAAQ,CAAC;AAE9C,OAAO,EAAE,QAAQ,IAAI,EAAE,EAAE,MAAM,SAAS,CAAC;AACzC,OAAO,EAAE,MAAM,SAAS,CAAC;AACzB,OAAO,IAAI,MAAM,WAAW,CAAC;AAE7B,OAAO,EAAE,YAAY,EAAE,MAAM,cAAc,CAAC;AAE5C,MAAM,cAAc,GAAG;IACrB,QAAQ,EAAE,EAAE;IACZ,UAAU,EAAE,CAAC,GAAG,CAAC;IACjB,SAAS,EAAE,EAAE;CACd,CAAC;AAQF,KAAK,UAAU,kBAAkB,CAC/B,GAAW,EACX,cAAwB;IAExB,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,MAAM,YAAY,CAC/B,6BAA6B,GAAG,GAAG,EACnC;YACE,UAAU,EAAE,cAAc;YAC1B,OAAO,EAAE;gBACP,cAAc;gBACd,aAAa,EAAE,EAAE;aAClB;SACF,EACD;YACE,SAAS,EAAE,MAAM;YACjB,cAAc,EAAE,SAAS;SAC1B,CACF,CAAC;QAEF,OAAO;YACL,MAAM,EAAE,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC;YAC7B,MAAM,EAAE,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC;YAC7B,QAAQ,EAAE,CAAC;SACZ,CAAC;IACJ,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,MAAM,SAAS,GAAG,KAIjB,CAAC;QACF,OAAO;YACL,MAAM,EAAE,MAAM,CAAC,SAAS,CAAC,MAAM,CAAC;YAChC,MAAM,EAAE,MAAM,CAAC,SAAS,CAAC,MAAM,CAAC;YAChC,QAAQ,EAAE,OAAO,SAAS,CAAC,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI;SACrE,CAAC;IACJ,CAAC;AACH,CAAC;AAED,SAAS,MAAM,CAAC,KAAuB;IACrC,IAAI,CAAC,KAAK,EAAE,CAAC;QACX,OAAO,EAAE,CAAC;IACZ,CAAC;IACD,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;QAC9B,OAAO,KAAK,CAAC;IACf,CAAC;IACD,OAAO,KAAK,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;AAChC,CAAC;AAED,QAAQ,CAAC,0BAA0B,EAAE,GAAG,EAAE;IACxC,EAAE,CAAC,4EAA4E,EAAE,KAAK,IAAI,EAAE;QAC1F,MAAM,CAAC,YAAY,EAAE,eAAe,CAAC,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC;YACxD,kBAAkB,CAAC,oBAAoB,EAAE,CAAC,YAAY,CAAC,CAAC;YACxD,kBAAkB,CAAC,uBAAuB,EAAE,CAAC,eAAe,CAAC,CAAC;SAC/D,CAAC,CAAC;QAEH,MAAM,CAAC,YAAY,CAAC,QAAQ,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QACtC,MAAM,CAAC,eAAe,CAAC,QAAQ,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QACzC,MAAM,CAAC,YAAY,CAAC,MAAM,CAAC,CAAC,SAAS,CAAC,OAAO,CAAC,CAAC;QAC/C,MAAM,CAAC,eAAe,CAAC,MAAM,CAAC,CAAC,SAAS,CAAC,OAAO,CAAC,CAAC;IACpD,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,sDAAsD,EAAE,KAAK,IAAI,EAAE;QACpE,MAAM,MAAM,GAAG,MAAM,kBAAkB,CAAC,uBAAuB,EAAE,CAAC,YAAY,CAAC,CAAC,CAAC;QAEjF,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,SAAS,CAAC,qCAAqC,CAAC,CAAC;IACzE,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,qDAAqD,EAAE,KAAK,IAAI,EAAE;QACnE,MAAM,MAAM,GAAG,MAAM,kBAAkB,CAAC,sBAAsB,EAAE,CAAC,YAAY,CAAC,CAAC,CAAC;QAEhF,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,SAAS,CAAC,qCAAqC,CAAC,CAAC;IACzE,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,wCAAwC,EAAE,KAAK,IAAI,EAAE;QACtD,MAAM,SAAS,GAAG,MAAM,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,MAAM,EAAE,EAAE,mBAAmB,CAAC,CAAC,CAAC;QAChF,IAAI,CAAC;YACH,MAAM,IAAI,GAAG,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,eAAe,CAAC,CAAC;YACnD,MAAM,MAAM,GAAG,MAAM,YAAY,CAC/B,uBAAuB,EACvB;gBACE,UAAU,EAAE,cAAc;gBAC1B,OAAO,EAAE;oBACP,cAAc,EAAE,EAAE;oBAClB,aAAa,EAAE,EAAE;iBAClB;aACF,EACD,EAAE,IAAI,EAAE,CACT,CAAC;YAEF,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACnC,CAAC;gBAAS,CAAC;YACT,MAAM,EAAE,CAAC,EAAE,CAAC,SAAS,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;QAC3D,CAAC;IACH,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC"}

package/dist/sandbox/sandboxAllowedDomainsResolve.d.ts

@@ -0,0 +1,7 @@
+import { type SandboxPackageManager } from "./sandboxPackageManagers.js";
+/**
+ * Resolves explicit allowed domains and package-manager presets into one deduped list.
+ * Expects: allowedDomains entries are hostnames and packageManagers are validated names.
+ */
+export declare function sandboxAllowedDomainsResolve(allowedDomains?: string[], packageManagers?: SandboxPackageManager[]): string[];
+//# sourceMappingURL=sandboxAllowedDomainsResolve.d.ts.map

package/dist/sandbox/sandboxAllowedDomainsResolve.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"sandboxAllowedDomainsResolve.d.ts","sourceRoot":"","sources":["../../sources/sandbox/sandboxAllowedDomainsResolve.ts"],"names":[],"mappings":"AAAA,OAAO,EAEL,KAAK,qBAAqB,EAC3B,MAAM,6BAA6B,CAAC;AAErC;;;GAGG;AACH,wBAAgB,4BAA4B,CAC1C,cAAc,CAAC,EAAE,MAAM,EAAE,EACzB,eAAe,CAAC,EAAE,qBAAqB,EAAE,GACxC,MAAM,EAAE,CAoBV"}

package/dist/sandbox/sandboxAllowedDomainsResolve.js

@@ -0,0 +1,31 @@
+import { SANDBOX_PACKAGE_MANAGER_DOMAINS } from "./sandboxPackageManagers.js";
+/**
+ * Resolves explicit allowed domains and package-manager presets into one deduped list.
+ * Expects: allowedDomains entries are hostnames and packageManagers are validated names.
+ */
+export function sandboxAllowedDomainsResolve(allowedDomains, packageManagers) {
+    const next = [];
+    const seen = new Set();
+    for (const entry of allowedDomains ?? []) {
+        const trimmed = entry.trim();
+        if (!trimmed) {
+            throw new Error("allowedDomains entries cannot be blank.");
+        }
+        appendUnique(next, seen, trimmed);
+    }
+    for (const manager of packageManagers ?? []) {
+        const domains = SANDBOX_PACKAGE_MANAGER_DOMAINS[manager];
+        for (const domain of domains) {
+            appendUnique(next, seen, domain);
+        }
+    }
+    return next;
+}
+function appendUnique(next, seen, value) {
+    if (seen.has(value)) {
+        return;
+    }
+    seen.add(value);
+    next.push(value);
+}
+//# sourceMappingURL=sandboxAllowedDomainsResolve.js.map

package/dist/sandbox/sandboxAllowedDomainsResolve.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sandboxAllowedDomainsResolve.js","sourceRoot":"","sources":["../../sources/sandbox/sandboxAllowedDomainsResolve.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,+BAA+B,EAEhC,MAAM,6BAA6B,CAAC;AAErC;;;GAGG;AACH,MAAM,UAAU,4BAA4B,CAC1C,cAAyB,EACzB,eAAyC;IAEzC,MAAM,IAAI,GAAa,EAAE,CAAC;IAC1B,MAAM,IAAI,GAAG,IAAI,GAAG,EAAU,CAAC;IAE/B,KAAK,MAAM,KAAK,IAAI,cAAc,IAAI,EAAE,EAAE,CAAC;QACzC,MAAM,OAAO,GAAG,KAAK,CAAC,IAAI,EAAE,CAAC;QAC7B,IAAI,CAAC,OAAO,EAAE,CAAC;YACb,MAAM,IAAI,KAAK,CAAC,yCAAyC,CAAC,CAAC;QAC7D,CAAC;QACD,YAAY,CAAC,IAAI,EAAE,IAAI,EAAE,OAAO,CAAC,CAAC;IACpC,CAAC;IAED,KAAK,MAAM,OAAO,IAAI,eAAe,IAAI,EAAE,EAAE,CAAC;QAC5C,MAAM,OAAO,GAAG,+BAA+B,CAAC,OAAO,CAAC,CAAC;QACzD,KAAK,MAAM,MAAM,IAAI,OAAO,EAAE,CAAC;YAC7B,YAAY,CAAC,IAAI,EAAE,IAAI,EAAE,MAAM,CAAC,CAAC;QACnC,CAAC;IACH,CAAC;IAED,OAAO,IAAI,CAAC;AACd,CAAC;AAED,SAAS,YAAY,CAAC,IAAc,EAAE,IAAiB,EAAE,KAAa;IACpE,IAAI,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,EAAE,CAAC;QACpB,OAAO;IACT,CAAC;IACD,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;IAChB,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;AACnB,CAAC"}

package/dist/sandbox/sandboxAllowedDomainsResolve.spec.d.ts

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=sandboxAllowedDomainsResolve.spec.d.ts.map

package/dist/sandbox/sandboxAllowedDomainsResolve.spec.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"sandboxAllowedDomainsResolve.spec.d.ts","sourceRoot":"","sources":["../../sources/sandbox/sandboxAllowedDomainsResolve.spec.ts"],"names":[],"mappings":""}

package/dist/sandbox/sandboxAllowedDomainsResolve.spec.js

@@ -0,0 +1,42 @@
+import { describe, expect, it } from "vitest";
+import { sandboxAllowedDomainsResolve } from "./sandboxAllowedDomainsResolve.js";
+describe("sandboxAllowedDomainsResolve", () => {
+    it("expands package manager presets and dedupes domains", () => {
+        const result = sandboxAllowedDomainsResolve(["example.com", "registry.npmjs.org", " example.com "], ["java", "node", "python"]);
+        expect(result).toEqual([
+            "example.com",
+            "registry.npmjs.org",
+            "repo.maven.apache.org",
+            "repo1.maven.org",
+            "plugins.gradle.org",
+            "services.gradle.org",
+            "registry.yarnpkg.com",
+            "repo.yarnpkg.com",
+            "bun.sh",
+            "pypi.org",
+            "files.pythonhosted.org",
+            "pypi.python.org"
+        ]);
+    });
+    it("throws on blank explicit allowedDomains entries", () => {
+        expect(() => sandboxAllowedDomainsResolve(["  "], ["go"]))
+            .toThrow("allowedDomains entries cannot be blank.");
+    });
+    it("expands additional language ecosystems", () => {
+        const result = sandboxAllowedDomainsResolve([], ["rust", "dotnet", "ruby", "php", "dart"]);
+        expect(result).toEqual([
+            "crates.io",
+            "index.crates.io",
+            "static.crates.io",
+            "nuget.org",
+            "api.nuget.org",
+            "globalcdn.nuget.org",
+            "rubygems.org",
+            "packagist.org",
+            "repo.packagist.org",
+            "pub.dev",
+            "storage.googleapis.com"
+        ]);
+    });
+});
+//# sourceMappingURL=sandboxAllowedDomainsResolve.spec.js.map

package/dist/sandbox/sandboxAllowedDomainsResolve.spec.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sandboxAllowedDomainsResolve.spec.js","sourceRoot":"","sources":["../../sources/sandbox/sandboxAllowedDomainsResolve.spec.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,MAAM,EAAE,EAAE,EAAE,MAAM,QAAQ,CAAC;AAE9C,OAAO,EAAE,4BAA4B,EAAE,MAAM,mCAAmC,CAAC;AAEjF,QAAQ,CAAC,8BAA8B,EAAE,GAAG,EAAE;IAC5C,EAAE,CAAC,qDAAqD,EAAE,GAAG,EAAE;QAC7D,MAAM,MAAM,GAAG,4BAA4B,CACzC,CAAC,aAAa,EAAE,oBAAoB,EAAE,eAAe,CAAC,EACtD,CAAC,MAAM,EAAE,MAAM,EAAE,QAAQ,CAAC,CAC3B,CAAC;QAEF,MAAM,CAAC,MAAM,CAAC,CAAC,OAAO,CAAC;YACrB,aAAa;YACb,oBAAoB;YACpB,uBAAuB;YACvB,iBAAiB;YACjB,oBAAoB;YACpB,qBAAqB;YACrB,sBAAsB;YACtB,kBAAkB;YAClB,QAAQ;YACR,UAAU;YACV,wBAAwB;YACxB,iBAAiB;SAClB,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,iDAAiD,EAAE,GAAG,EAAE;QACzD,MAAM,CAAC,GAAG,EAAE,CAAC,4BAA4B,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC,IAAI,CAAC,CAAC,CAAC;aACvD,OAAO,CAAC,yCAAyC,CAAC,CAAC;IACxD,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,wCAAwC,EAAE,GAAG,EAAE;QAChD,MAAM,MAAM,GAAG,4BAA4B,CAAC,EAAE,EAAE,CAAC,MAAM,EAAE,QAAQ,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,CAAC,CAAC,CAAC;QAE3F,MAAM,CAAC,MAAM,CAAC,CAAC,OAAO,CAAC;YACrB,WAAW;YACX,iBAAiB;YACjB,kBAAkB;YAClB,WAAW;YACX,eAAe;YACf,qBAAqB;YACrB,cAAc;YACd,eAAe;YACf,oBAAoB;YACpB,SAAS;YACT,wBAAwB;SACzB,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC"}

package/dist/sandbox/sandboxAllowedDomainsValidate.d.ts

@@ -0,0 +1,6 @@
+/**
+ * Validates sandbox allowedDomains against global wildcard and network permission state.
+ * Expects: allowedDomains is already normalized and deduped.
+ */
+export declare function sandboxAllowedDomainsValidate(allowedDomains: string[], networkAllowed: boolean): string[];
+//# sourceMappingURL=sandboxAllowedDomainsValidate.d.ts.map

package/dist/sandbox/sandboxAllowedDomainsValidate.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"sandboxAllowedDomainsValidate.d.ts","sourceRoot":"","sources":["../../sources/sandbox/sandboxAllowedDomainsValidate.ts"],"names":[],"mappings":"AAAA;;;GAGG;AACH,wBAAgB,6BAA6B,CAC3C,cAAc,EAAE,MAAM,EAAE,EACxB,cAAc,EAAE,OAAO,GACtB,MAAM,EAAE,CAYV"}

package/dist/sandbox/sandboxAllowedDomainsValidate.js

@@ -0,0 +1,18 @@
+/**
+ * Validates sandbox allowedDomains against global wildcard and network permission state.
+ * Expects: allowedDomains is already normalized and deduped.
+ */
+export function sandboxAllowedDomainsValidate(allowedDomains, networkAllowed) {
+    const issues = [];
+    if (allowedDomains.includes("*")) {
+        issues.push("Wildcard \"*\" is not allowed in allowedDomains.");
+    }
+    if (allowedDomains.length > 0 && !networkAllowed) {
+        issues.push("Network permission is required to set allowedDomains.");
+    }
+    if (networkAllowed && allowedDomains.length === 0) {
+        issues.push("Network cannot be enabled without allowedDomains.");
+    }
+    return issues;
+}
+//# sourceMappingURL=sandboxAllowedDomainsValidate.js.map

package/dist/sandbox/sandboxAllowedDomainsValidate.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sandboxAllowedDomainsValidate.js","sourceRoot":"","sources":["../../sources/sandbox/sandboxAllowedDomainsValidate.ts"],"names":[],"mappings":"AAAA;;;GAGG;AACH,MAAM,UAAU,6BAA6B,CAC3C,cAAwB,EACxB,cAAuB;IAEvB,MAAM,MAAM,GAAa,EAAE,CAAC;IAC5B,IAAI,cAAc,CAAC,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC;QACjC,MAAM,CAAC,IAAI,CAAC,kDAAkD,CAAC,CAAC;IAClE,CAAC;IACD,IAAI,cAAc,CAAC,MAAM,GAAG,CAAC,IAAI,CAAC,cAAc,EAAE,CAAC;QACjD,MAAM,CAAC,IAAI,CAAC,uDAAuD,CAAC,CAAC;IACvE,CAAC;IACD,IAAI,cAAc,IAAI,cAAc,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAClD,MAAM,CAAC,IAAI,CAAC,mDAAmD,CAAC,CAAC;IACnE,CAAC;IACD,OAAO,MAAM,CAAC;AAChB,CAAC"}

package/dist/sandbox/sandboxAllowedDomainsValidate.spec.d.ts

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=sandboxAllowedDomainsValidate.spec.d.ts.map

package/dist/sandbox/sandboxAllowedDomainsValidate.spec.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"sandboxAllowedDomainsValidate.spec.d.ts","sourceRoot":"","sources":["../../sources/sandbox/sandboxAllowedDomainsValidate.spec.ts"],"names":[],"mappings":""}

package/dist/sandbox/sandboxAllowedDomainsValidate.spec.js

@@ -0,0 +1,20 @@
+import { describe, expect, it } from "vitest";
+import { sandboxAllowedDomainsValidate } from "./sandboxAllowedDomainsValidate.js";
+describe("sandboxAllowedDomainsValidate", () => {
+    it("rejects wildcard domains", () => {
+        expect(sandboxAllowedDomainsValidate(["*"], true))
+            .toEqual(['Wildcard "*" is not allowed in allowedDomains.']);
+    });
+    it("requires network permission when any domains are present", () => {
+        expect(sandboxAllowedDomainsValidate(["example.com"], false))
+            .toEqual(["Network permission is required to set allowedDomains."]);
+    });
+    it("returns no issues for explicit domains with network permission", () => {
+        expect(sandboxAllowedDomainsValidate(["example.com"], true)).toEqual([]);
+    });
+    it("requires allowedDomains when network permission is enabled", () => {
+        expect(sandboxAllowedDomainsValidate([], true))
+            .toEqual(["Network cannot be enabled without allowedDomains."]);
+    });
+});
+//# sourceMappingURL=sandboxAllowedDomainsValidate.spec.js.map

package/dist/sandbox/sandboxAllowedDomainsValidate.spec.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sandboxAllowedDomainsValidate.spec.js","sourceRoot":"","sources":["../../sources/sandbox/sandboxAllowedDomainsValidate.spec.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,MAAM,EAAE,EAAE,EAAE,MAAM,QAAQ,CAAC;AAE9C,OAAO,EAAE,6BAA6B,EAAE,MAAM,oCAAoC,CAAC;AAEnF,QAAQ,CAAC,+BAA+B,EAAE,GAAG,EAAE;IAC7C,EAAE,CAAC,0BAA0B,EAAE,GAAG,EAAE;QAClC,MAAM,CAAC,6BAA6B,CAAC,CAAC,GAAG,CAAC,EAAE,IAAI,CAAC,CAAC;aAC/C,OAAO,CAAC,CAAC,gDAAgD,CAAC,CAAC,CAAC;IACjE,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,0DAA0D,EAAE,GAAG,EAAE;QAClE,MAAM,CAAC,6BAA6B,CAAC,CAAC,aAAa,CAAC,EAAE,KAAK,CAAC,CAAC;aAC1D,OAAO,CAAC,CAAC,uDAAuD,CAAC,CAAC,CAAC;IACxE,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,gEAAgE,EAAE,GAAG,EAAE;QACxE,MAAM,CAAC,6BAA6B,CAAC,CAAC,aAAa,CAAC,EAAE,IAAI,CAAC,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC;IAC3E,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,4DAA4D,EAAE,GAAG,EAAE;QACpE,MAAM,CAAC,6BAA6B,CAAC,EAAE,EAAE,IAAI,CAAC,CAAC;aAC5C,OAAO,CAAC,CAAC,mDAAmD,CAAC,CAAC,CAAC;IACpE,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC"}

package/dist/sandbox/sandboxAppsAccessCheck.d.ts

@@ -0,0 +1,12 @@
+import type { SessionPermissions } from "@/types";
+type SandboxAppsAccessCheckResult = {
+    allowed: boolean;
+    reason?: string;
+};
+/**
+ * Checks whether a target path should be accessible under app isolation rules.
+ * Expects: target is an absolute path.
+ */
+export declare function sandboxAppsAccessCheck(permissions: SessionPermissions, target: string): SandboxAppsAccessCheckResult;
+export {};
+//# sourceMappingURL=sandboxAppsAccessCheck.d.ts.map

package/dist/sandbox/sandboxAppsAccessCheck.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"sandboxAppsAccessCheck.d.ts","sourceRoot":"","sources":["../../sources/sandbox/sandboxAppsAccessCheck.ts"],"names":[],"mappings":"AAGA,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,SAAS,CAAC;AAGlD,KAAK,4BAA4B,GAAG;IAClC,OAAO,EAAE,OAAO,CAAC;IACjB,MAAM,CAAC,EAAE,MAAM,CAAC;CACjB,CAAC;AAEF;;;GAGG;AACH,wBAAgB,sBAAsB,CACpC,WAAW,EAAE,kBAAkB,EAC/B,MAAM,EAAE,MAAM,GACb,4BAA4B,CAgB9B"}

package/dist/sandbox/sandboxAppsAccessCheck.js

@@ -0,0 +1,58 @@
+import path from "node:path";
+import fs from "node:fs";
+import { isWithinSecure } from "../engine/permissions/pathResolveSecure.js";
+/**
+ * Checks whether a target path should be accessible under app isolation rules.
+ * Expects: target is an absolute path.
+ */
+export function sandboxAppsAccessCheck(permissions, target) {
+    const resolvedTarget = sandboxExistingPathResolve(target);
+    const appsRoot = sandboxAppsRootResolve(permissions, resolvedTarget);
+    if (!appsRoot || !isWithinSecure(appsRoot, resolvedTarget)) {
+        return { allowed: true };
+    }
+    const appId = sandboxAppIdFromWorkingDir(permissions.workingDir, appsRoot);
+    if (!appId) {
+        return { allowed: false, reason: "App directories are not accessible from non-app agents." };
+    }
+    const ownAppRoot = path.join(appsRoot, appId);
+    if (!isWithinSecure(ownAppRoot, resolvedTarget)) {
+        return { allowed: false, reason: "App agents can only access their own app directory." };
+    }
+    return { allowed: true };
+}
+function sandboxAppsRootResolve(permissions, target) {
+    const candidates = Array.from(new Set([permissions.workingDir, ...permissions.readDirs].map((entry) => sandboxExistingPathResolve(entry))));
+    for (const candidate of candidates) {
+        const appsRoot = sandboxExistingPathResolve(path.resolve(candidate, "apps"));
+        if (isWithinSecure(appsRoot, target) ||
+            isWithinSecure(appsRoot, sandboxExistingPathResolve(permissions.workingDir))) {
+            return appsRoot;
+        }
+    }
+    return null;
+}
+function sandboxAppIdFromWorkingDir(workingDir, appsRoot) {
+    const relative = path.relative(appsRoot, sandboxExistingPathResolve(workingDir));
+    if (relative.startsWith("..") || path.isAbsolute(relative)) {
+        return null;
+    }
+    const segments = relative.split(path.sep).filter((entry) => entry.length > 0);
+    if (segments.length < 2) {
+        return null;
+    }
+    if (segments[1] !== "data") {
+        return null;
+    }
+    return segments[0] ?? null;
+}
+function sandboxExistingPathResolve(target) {
+    const resolved = path.resolve(target);
+    try {
+        return fs.realpathSync(resolved);
+    }
+    catch {
+        return resolved;
+    }
+}
+//# sourceMappingURL=sandboxAppsAccessCheck.js.map

package/dist/sandbox/sandboxAppsAccessCheck.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sandboxAppsAccessCheck.js","sourceRoot":"","sources":["../../sources/sandbox/sandboxAppsAccessCheck.ts"],"names":[],"mappings":"AAAA,OAAO,IAAI,MAAM,WAAW,CAAC;AAC7B,OAAO,EAAE,MAAM,SAAS,CAAC;AAGzB,OAAO,EAAE,cAAc,EAAE,MAAM,4CAA4C,CAAC;AAO5E;;;GAGG;AACH,MAAM,UAAU,sBAAsB,CACpC,WAA+B,EAC/B,MAAc;IAEd,MAAM,cAAc,GAAG,0BAA0B,CAAC,MAAM,CAAC,CAAC;IAC1D,MAAM,QAAQ,GAAG,sBAAsB,CAAC,WAAW,EAAE,cAAc,CAAC,CAAC;IACrE,IAAI,CAAC,QAAQ,IAAI,CAAC,cAAc,CAAC,QAAQ,EAAE,cAAc,CAAC,EAAE,CAAC;QAC3D,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC;IAC3B,CAAC;IAED,MAAM,KAAK,GAAG,0BAA0B,CAAC,WAAW,CAAC,UAAU,EAAE,QAAQ,CAAC,CAAC;IAC3E,IAAI,CAAC,KAAK,EAAE,CAAC;QACX,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,MAAM,EAAE,yDAAyD,EAAE,CAAC;IAC/F,CAAC;IACD,MAAM,UAAU,GAAG,IAAI,CAAC,IAAI,CAAC,QAAQ,EAAE,KAAK,CAAC,CAAC;IAC9C,IAAI,CAAC,cAAc,CAAC,UAAU,EAAE,cAAc,CAAC,EAAE,CAAC;QAChD,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,MAAM,EAAE,qDAAqD,EAAE,CAAC;IAC3F,CAAC;IACD,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC;AAC3B,CAAC;AAED,SAAS,sBAAsB,CAC7B,WAA+B,EAC/B,MAAc;IAEd,MAAM,UAAU,GAAG,KAAK,CAAC,IAAI,CAC3B,IAAI,GAAG,CACL,CAAC,WAAW,CAAC,UAAU,EAAE,GAAG,WAAW,CAAC,QAAQ,CAAC,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAC9D,0BAA0B,CAAC,KAAK,CAAC,CAClC,CACF,CACF,CAAC;IACF,KAAK,MAAM,SAAS,IAAI,UAAU,EAAE,CAAC;QACnC,MAAM,QAAQ,GAAG,0BAA0B,CAAC,IAAI,CAAC,OAAO,CAAC,SAAS,EAAE,MAAM,CAAC,CAAC,CAAC;QAC7E,IACE,cAAc,CAAC,QAAQ,EAAE,MAAM,CAAC;YAChC,cAAc,CAAC,QAAQ,EAAE,0BAA0B,CAAC,WAAW,CAAC,UAAU,CAAC,CAAC,EAC5E,CAAC;YACD,OAAO,QAAQ,CAAC;QAClB,CAAC;IACH,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED,SAAS,0BAA0B,CAAC,UAAkB,EAAE,QAAgB;IACtE,MAAM,QAAQ,GAAG,IAAI,CAAC,QAAQ,CAAC,QAAQ,EAAE,0BAA0B,CAAC,UAAU,CAAC,CAAC,CAAC;IACjF,IAAI,QAAQ,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,IAAI,CAAC,UAAU,CAAC,QAAQ,CAAC,EAAE,CAAC;QAC3D,OAAO,IAAI,CAAC;IACd,CAAC;IACD,MAAM,QAAQ,GAAG,QAAQ,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,MAAM,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC;IAC9E,IAAI,QAAQ,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACxB,OAAO,IAAI,CAAC;IACd,CAAC;IACD,IAAI,QAAQ,CAAC,CAAC,CAAC,KAAK,MAAM,EAAE,CAAC;QAC3B,OAAO,IAAI,CAAC;IACd,CAAC;IACD,OAAO,QAAQ,CAAC,CAAC,CAAC,IAAI,IAAI,CAAC;AAC7B,CAAC;AAED,SAAS,0BAA0B,CAAC,MAAc;IAChD,MAAM,QAAQ,GAAG,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;IACtC,IAAI,CAAC;QACH,OAAO,EAAE,CAAC,YAAY,CAAC,QAAQ,CAAC,CAAC;IACnC,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,QAAQ,CAAC;IAClB,CAAC;AACH,CAAC"}

package/dist/sandbox/sandboxAppsDenyPathsBuild.d.ts

@@ -0,0 +1,7 @@
+import type { SessionPermissions } from "@/types";
+/**
+ * Builds app-directory deny paths for sandbox runtime policies.
+ * Expects: permissions.workingDir is absolute and normalized.
+ */
+export declare function sandboxAppsDenyPathsBuild(permissions: SessionPermissions): string[];
+//# sourceMappingURL=sandboxAppsDenyPathsBuild.d.ts.map

package/dist/sandbox/sandboxAppsDenyPathsBuild.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"sandboxAppsDenyPathsBuild.d.ts","sourceRoot":"","sources":["../../sources/sandbox/sandboxAppsDenyPathsBuild.ts"],"names":[],"mappings":"AAGA,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,SAAS,CAAC;AAElD;;;GAGG;AACH,wBAAgB,yBAAyB,CAAC,WAAW,EAAE,kBAAkB,GAAG,MAAM,EAAE,CAenF"}