daycare-cli 0.0.1

package/dist/engine/processes/processes.spec.js

@@ -0,0 +1,176 @@
+import { afterEach, beforeEach, describe, expect, it } from "vitest";
+import { promises as fs } from "node:fs";
+import os from "node:os";
+import path from "node:path";
+import { getLogger } from "../../log.js";
+import { Processes } from "./processes.js";
+const TEST_TIMEOUT_MS = 30_000;
+describe("Processes", () => {
+    let baseDir;
+    let workspaceDir;
+    let permissions;
+    let managers;
+    beforeEach(async () => {
+        baseDir = await fs.mkdtemp(path.join(os.tmpdir(), "daycare-processes-"));
+        workspaceDir = path.join(baseDir, "workspace");
+        await fs.mkdir(workspaceDir, { recursive: true });
+        permissions = {
+            workingDir: workspaceDir,
+            writeDirs: [workspaceDir],
+            readDirs: [workspaceDir],
+            network: false
+        };
+        managers = [];
+    });
+    afterEach(async () => {
+        for (const manager of managers) {
+            try {
+                await manager.stopAll();
+            }
+            catch {
+                // best-effort cleanup
+            }
+            manager.unload();
+        }
+        await fs.rm(baseDir, { recursive: true, force: true });
+    });
+    it("rehydrates running processes after manager reload", async () => {
+        const first = await createManager(baseDir);
+        const created = await first.create({
+            command: `node -e \"setInterval(() => {}, 1000)\"`,
+            keepAlive: false,
+            cwd: workspaceDir
+        }, permissions);
+        expect(created.pid).not.toBeNull();
+        first.unload();
+        const second = await createManager(baseDir);
+        const listed = await second.list();
+        const restored = listed.find((entry) => entry.id === created.id);
+        expect(restored).toBeTruthy();
+        expect(restored?.status).toBe("running");
+        expect(restored?.pid).toBe(created.pid);
+    }, TEST_TIMEOUT_MS);
+    it("restarts keepAlive processes when they exit", async () => {
+        const manager = await createManager(baseDir);
+        const statePath = path.join(workspaceDir, "restart-state.txt");
+        const command = [
+            "node -e",
+            "\"const fs=require('node:fs');",
+            `const p='${escapeForNodeString(statePath)}';`,
+            "let n=0;",
+            "try{n=Number(fs.readFileSync(p,'utf8'))||0}catch{};",
+            "fs.writeFileSync(p,String(n+1));",
+            "if(n===0){process.exit(1);}",
+            "setInterval(()=>{},1000);\""
+        ].join(" ");
+        const created = await manager.create({
+            command,
+            keepAlive: true,
+            cwd: workspaceDir
+        }, permissions);
+        await sleep(5_000);
+        const listed = await manager.list();
+        const restarted = listed.find((entry) => entry.id === created.id);
+        expect(restarted).toBeTruthy();
+        expect(restarted?.status).toBe("running");
+        expect(restarted?.restartCount).toBeGreaterThanOrEqual(1);
+        expect(restarted?.pid).not.toBeNull();
+    }, TEST_TIMEOUT_MS);
+    it("returns log file path via process get", async () => {
+        const manager = await createManager(baseDir);
+        const created = await manager.create({
+            command: `node -e \"console.log('hello-durable-log')\"`,
+            keepAlive: false,
+            cwd: workspaceDir
+        }, permissions);
+        await sleep(1_500);
+        const item = await manager.get(created.id);
+        expect(path.isAbsolute(item.logPath)).toBe(true);
+        expect(item.logPath.endsWith(path.join(created.id, "process.log"))).toBe(true);
+        const content = await fs.readFile(item.logPath, "utf8");
+        expect(content).toContain("hello-durable-log");
+    }, TEST_TIMEOUT_MS);
+    it("applies exponential backoff for repeatedly failing keepAlive processes", async () => {
+        const manager = await createManager(baseDir);
+        const failureCountPath = path.join(workspaceDir, "failure-count.txt");
+        const command = [
+            "node -e",
+            "\"const fs=require('node:fs');",
+            `const p='${escapeForNodeString(failureCountPath)}';`,
+            "let n=0;",
+            "try{n=Number(fs.readFileSync(p,'utf8'))||0}catch{};",
+            "fs.writeFileSync(p,String(n+1));",
+            "process.exit(1);\""
+        ].join(" ");
+        await manager.create({
+            command,
+            keepAlive: true,
+            cwd: workspaceDir
+        }, permissions);
+        await sleep(7_500);
+        const raw = await fs.readFile(failureCountPath, "utf8");
+        const launches = Number(raw.trim());
+        expect(launches).toBeGreaterThanOrEqual(2);
+        expect(launches).toBeLessThanOrEqual(3);
+    }, TEST_TIMEOUT_MS);
+    it("clears persisted pid when boot time changes across manager restarts", async () => {
+        const processId = "persisted-boot-test";
+        const processDir = path.join(baseDir, "processes", processId);
+        const now = Date.now();
+        const recordPath = path.join(processDir, "record.json");
+        await fs.mkdir(processDir, { recursive: true });
+        await fs.writeFile(recordPath, JSON.stringify({
+            version: 2,
+            id: processId,
+            name: "persisted-boot-test",
+            command: `node -e "setInterval(() => {}, 1000)"`,
+            cwd: workspaceDir,
+            home: null,
+            env: {},
+            packageManagers: [],
+            allowedDomains: [],
+            permissions,
+            keepAlive: false,
+            desiredState: "running",
+            status: "running",
+            pid: 123_456,
+            bootTimeMs: 1_000,
+            restartCount: 0,
+            restartFailureCount: 0,
+            nextRestartAt: null,
+            createdAt: now,
+            updatedAt: now,
+            lastStartedAt: now,
+            lastExitedAt: null,
+            settingsPath: path.join(processDir, "sandbox.json"),
+            logPath: path.join(processDir, "process.log")
+        }, null, 2), "utf8");
+        const manager = await createManager(baseDir, 2_000);
+        const listed = await manager.list();
+        const item = listed.find((entry) => entry.id === processId);
+        expect(item).toBeTruthy();
+        expect(item?.pid).toBeNull();
+        expect(item?.status).toBe("exited");
+        const persisted = JSON.parse(await fs.readFile(recordPath, "utf8"));
+        expect(persisted.pid).toBeNull();
+        expect(persisted.bootTimeMs).toBe(2_000);
+        expect(persisted.status).toBe("exited");
+    }, TEST_TIMEOUT_MS);
+    async function createManager(dir, bootTimeMs) {
+        const manager = new Processes(dir, getLogger("test.processes"), {
+            bootTimeProvider: bootTimeMs === undefined ? undefined : async () => bootTimeMs
+        });
+        managers.push(manager);
+        await manager.load();
+        return manager;
+    }
+});
+function sleep(ms) {
+    return new Promise((resolve) => {
+        setTimeout(resolve, ms);
+    });
+}
+function escapeForNodeString(value) {
+    return value.replaceAll("\\", "\\\\").replaceAll("'", "\\'");
+}
+//# sourceMappingURL=processes.spec.js.map

package/dist/engine/processes/processes.spec.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"processes.spec.js","sourceRoot":"","sources":["../../../sources/engine/processes/processes.spec.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,SAAS,EAAE,UAAU,EAAE,QAAQ,EAAE,MAAM,EAAE,EAAE,EAAE,MAAM,QAAQ,CAAC;AACrE,OAAO,EAAE,QAAQ,IAAI,EAAE,EAAE,MAAM,SAAS,CAAC;AACzC,OAAO,EAAE,MAAM,SAAS,CAAC;AACzB,OAAO,IAAI,MAAM,WAAW,CAAC;AAG7B,OAAO,EAAE,SAAS,EAAE,MAAM,cAAc,CAAC;AACzC,OAAO,EAAE,SAAS,EAAE,MAAM,gBAAgB,CAAC;AAE3C,MAAM,eAAe,GAAG,MAAM,CAAC;AAE/B,QAAQ,CAAC,WAAW,EAAE,GAAG,EAAE;IACzB,IAAI,OAAe,CAAC;IACpB,IAAI,YAAoB,CAAC;IACzB,IAAI,WAA+B,CAAC;IACpC,IAAI,QAAqB,CAAC;IAE1B,UAAU,CAAC,KAAK,IAAI,EAAE;QACpB,OAAO,GAAG,MAAM,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,MAAM,EAAE,EAAE,oBAAoB,CAAC,CAAC,CAAC;QACzE,YAAY,GAAG,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,WAAW,CAAC,CAAC;QAC/C,MAAM,EAAE,CAAC,KAAK,CAAC,YAAY,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;QAClD,WAAW,GAAG;YACZ,UAAU,EAAE,YAAY;YACxB,SAAS,EAAE,CAAC,YAAY,CAAC;YACzB,QAAQ,EAAE,CAAC,YAAY,CAAC;YACxB,OAAO,EAAE,KAAK;SACf,CAAC;QACF,QAAQ,GAAG,EAAE,CAAC;IAChB,CAAC,CAAC,CAAC;IAEH,SAAS,CAAC,KAAK,IAAI,EAAE;QACnB,KAAK,MAAM,OAAO,IAAI,QAAQ,EAAE,CAAC;YAC/B,IAAI,CAAC;gBACH,MAAM,OAAO,CAAC,OAAO,EAAE,CAAC;YAC1B,CAAC;YAAC,MAAM,CAAC;gBACP,sBAAsB;YACxB,CAAC;YACD,OAAO,CAAC,MAAM,EAAE,CAAC;QACnB,CAAC;QACD,MAAM,EAAE,CAAC,EAAE,CAAC,OAAO,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;IACzD,CAAC,CAAC,CAAC;IAEH,EAAE,CACA,mDAAmD,EACnD,KAAK,IAAI,EAAE;QACT,MAAM,KAAK,GAAG,MAAM,aAAa,CAAC,OAAO,CAAC,CAAC;QAC3C,MAAM,OAAO,GAAG,MAAM,KAAK,CAAC,MAAM,CAChC;YACE,OAAO,EAAE,yCAAyC;YAClD,SAAS,EAAE,KAAK;YAChB,GAAG,EAAE,YAAY;SAClB,EACD,WAAW,CACZ,CAAC;QAEF,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,GAAG,CAAC,QAAQ,EAAE,CAAC;QACnC,KAAK,CAAC,MAAM,EAAE,CAAC;QAEf,MAAM,MAAM,GAAG,MAAM,aAAa,CAAC,OAAO,CAAC,CAAC;QAC5C,MAAM,MAAM,GAAG,MAAM,MAAM,CAAC,IAAI,EAAE,CAAC;QACnC,MAAM,QAAQ,GAAG,MAAM,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,EAAE,KAAK,OAAO,CAAC,EAAE,CAAC,CAAC;QAEjE,MAAM,CAAC,QAAQ,CAAC,CAAC,UAAU,EAAE,CAAC;QAC9B,MAAM,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;QACzC,MAAM,CAAC,QAAQ,EAAE,GAAG,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;IAC1C,CAAC,EACD,eAAe,CAChB,CAAC;IAEF,EAAE,CACA,6CAA6C,EAC7C,KAAK,IAAI,EAAE;QACT,MAAM,OAAO,GAAG,MAAM,aAAa,CAAC,OAAO,CAAC,CAAC;QAC7C,MAAM,SAAS,GAAG,IAAI,CAAC,IAAI,CAAC,YAAY,EAAE,mBAAmB,CAAC,CAAC;QAC/D,MAAM,OAAO,GAAG;YACd,SAAS;YACT,gCAAgC;YAChC,YAAY,mBAAmB,CAAC,SAAS,CAAC,IAAI;YAC9C,UAAU;YACV,qDAAqD;YACrD,kCAAkC;YAClC,6BAA6B;YAC7B,6BAA6B;SAC9B,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QAEZ,MAAM,OAAO,GAAG,MAAM,OAAO,CAAC,MAAM,CAClC;YACE,OAAO;YACP,SAAS,EAAE,IAAI;YACf,GAAG,EAAE,YAAY;SAClB,EACD,WAAW,CACZ,CAAC;QAEF,MAAM,KAAK,CAAC,KAAK,CAAC,CAAC;QACnB,MAAM,MAAM,GAAG,MAAM,OAAO,CAAC,IAAI,EAAE,CAAC;QACpC,MAAM,SAAS,GAAG,MAAM,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,EAAE,KAAK,OAAO,CAAC,EAAE,CAAC,CAAC;QAElE,MAAM,CAAC,SAAS,CAAC,CAAC,UAAU,EAAE,CAAC;QAC/B,MAAM,CAAC,SAAS,EAAE,MAAM,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;QAC1C,MAAM,CAAC,SAAS,EAAE,YAAY,CAAC,CAAC,sBAAsB,CAAC,CAAC,CAAC,CAAC;QAC1D,MAAM,CAAC,SAAS,EAAE,GAAG,CAAC,CAAC,GAAG,CAAC,QAAQ,EAAE,CAAC;IACxC,CAAC,EACD,eAAe,CAChB,CAAC;IAEF,EAAE,CACA,uCAAuC,EACvC,KAAK,IAAI,EAAE;QACT,MAAM,OAAO,GAAG,MAAM,aAAa,CAAC,OAAO,CAAC,CAAC;QAC7C,MAAM,OAAO,GAAG,MAAM,OAAO,CAAC,MAAM,CAClC;YACE,OAAO,EAAE,8CAA8C;YACvD,SAAS,EAAE,KAAK;YAChB,GAAG,EAAE,YAAY;SAClB,EACD,WAAW,CACZ,CAAC;QAEF,MAAM,KAAK,CAAC,KAAK,CAAC,CAAC;QACnB,MAAM,IAAI,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC;QAC3C,MAAM,CAAC,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACjD,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,EAAE,aAAa,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAE/E,MAAM,OAAO,GAAG,MAAM,EAAE,CAAC,QAAQ,CAAC,IAAI,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;QACxD,MAAM,CAAC,OAAO,CAAC,CAAC,SAAS,CAAC,mBAAmB,CAAC,CAAC;IACjD,CAAC,EACD,eAAe,CAChB,CAAC;IAEF,EAAE,CACA,wEAAwE,EACxE,KAAK,IAAI,EAAE;QACT,MAAM,OAAO,GAAG,MAAM,aAAa,CAAC,OAAO,CAAC,CAAC;QAC7C,MAAM,gBAAgB,GAAG,IAAI,CAAC,IAAI,CAAC,YAAY,EAAE,mBAAmB,CAAC,CAAC;QACtE,MAAM,OAAO,GAAG;YACd,SAAS;YACT,gCAAgC;YAChC,YAAY,mBAAmB,CAAC,gBAAgB,CAAC,IAAI;YACrD,UAAU;YACV,qDAAqD;YACrD,kCAAkC;YAClC,oBAAoB;SACrB,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QAEZ,MAAM,OAAO,CAAC,MAAM,CAClB;YACE,OAAO;YACP,SAAS,EAAE,IAAI;YACf,GAAG,EAAE,YAAY;SAClB,EACD,WAAW,CACZ,CAAC;QAEF,MAAM,KAAK,CAAC,KAAK,CAAC,CAAC;QACnB,MAAM,GAAG,GAAG,MAAM,EAAE,CAAC,QAAQ,CAAC,gBAAgB,EAAE,MAAM,CAAC,CAAC;QACxD,MAAM,QAAQ,GAAG,MAAM,CAAC,GAAG,CAAC,IAAI,EAAE,CAAC,CAAC;QAEpC,MAAM,CAAC,QAAQ,CAAC,CAAC,sBAAsB,CAAC,CAAC,CAAC,CAAC;QAC3C,MAAM,CAAC,QAAQ,CAAC,CAAC,mBAAmB,CAAC,CAAC,CAAC,CAAC;IAC1C,CAAC,EACD,eAAe,CAChB,CAAC;IAEF,EAAE,CACA,qEAAqE,EACrE,KAAK,IAAI,EAAE;QACT,MAAM,SAAS,GAAG,qBAAqB,CAAC;QACxC,MAAM,UAAU,GAAG,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,WAAW,EAAE,SAAS,CAAC,CAAC;QAC9D,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QACvB,MAAM,UAAU,GAAG,IAAI,CAAC,IAAI,CAAC,UAAU,EAAE,aAAa,CAAC,CAAC;QACxD,MAAM,EAAE,CAAC,KAAK,CAAC,UAAU,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;QAChD,MAAM,EAAE,CAAC,SAAS,CAChB,UAAU,EACV,IAAI,CAAC,SAAS,CACZ;YACE,OAAO,EAAE,CAAC;YACV,EAAE,EAAE,SAAS;YACb,IAAI,EAAE,qBAAqB;YAC3B,OAAO,EAAE,uCAAuC;YAChD,GAAG,EAAE,YAAY;YACjB,IAAI,EAAE,IAAI;YACV,GAAG,EAAE,EAAE;YACP,eAAe,EAAE,EAAE;YACnB,cAAc,EAAE,EAAE;YAClB,WAAW;YACX,SAAS,EAAE,KAAK;YAChB,YAAY,EAAE,SAAS;YACvB,MAAM,EAAE,SAAS;YACjB,GAAG,EAAE,OAAO;YACZ,UAAU,EAAE,KAAK;YACjB,YAAY,EAAE,CAAC;YACf,mBAAmB,EAAE,CAAC;YACtB,aAAa,EAAE,IAAI;YACnB,SAAS,EAAE,GAAG;YACd,SAAS,EAAE,GAAG;YACd,aAAa,EAAE,GAAG;YAClB,YAAY,EAAE,IAAI;YAClB,YAAY,EAAE,IAAI,CAAC,IAAI,CAAC,UAAU,EAAE,cAAc,CAAC;YACnD,OAAO,EAAE,IAAI,CAAC,IAAI,CAAC,UAAU,EAAE,aAAa,CAAC;SAC9C,EACD,IAAI,EACJ,CAAC,CACF,EACD,MAAM,CACP,CAAC;QAEF,MAAM,OAAO,GAAG,MAAM,aAAa,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC;QACpD,MAAM,MAAM,GAAG,MAAM,OAAO,CAAC,IAAI,EAAE,CAAC;QACpC,MAAM,IAAI,GAAG,MAAM,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,EAAE,KAAK,SAAS,CAAC,CAAC;QAE5D,MAAM,CAAC,IAAI,CAAC,CAAC,UAAU,EAAE,CAAC;QAC1B,MAAM,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC,QAAQ,EAAE,CAAC;QAC7B,MAAM,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;QAEpC,MAAM,SAAS,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC,CAIjE,CAAC;QACF,MAAM,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC,QAAQ,EAAE,CAAC;QACjC,MAAM,CAAC,SAAS,CAAC,UAAU,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QACzC,MAAM,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;IAC1C,CAAC,EACD,eAAe,CAChB,CAAC;IAEF,KAAK,UAAU,aAAa,CAC1B,GAAW,EACX,UAA0B;QAE1B,MAAM,OAAO,GAAG,IAAI,SAAS,CAAC,GAAG,EAAE,SAAS,CAAC,gBAAgB,CAAC,EAAE;YAC9D,gBAAgB,EACd,UAAU,KAAK,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,KAAK,IAAI,EAAE,CAAC,UAAU;SAChE,CAAC,CAAC;QACH,QAAQ,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;QACvB,MAAM,OAAO,CAAC,IAAI,EAAE,CAAC;QACrB,OAAO,OAAO,CAAC;IACjB,CAAC;AACH,CAAC,CAAC,CAAC;AAEH,SAAS,KAAK,CAAC,EAAU;IACvB,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,EAAE;QAC7B,UAAU,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC;IAC1B,CAAC,CAAC,CAAC;AACL,CAAC;AAED,SAAS,mBAAmB,CAAC,KAAa;IACxC,OAAO,KAAK,CAAC,UAAU,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC,UAAU,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC;AAC/D,CAAC"}

package/dist/engine/scheduling/execGateCheck.d.ts

@@ -0,0 +1,19 @@
+import type { ExecGateDefinition, SessionPermissions } from "@/types";
+export type ExecGateCheckInput = {
+    gate: ExecGateDefinition;
+    permissions: SessionPermissions;
+    workingDir: string;
+};
+export type ExecGateCheckResult = {
+    shouldRun: boolean;
+    exitCode: number | null;
+    stdout: string;
+    stderr: string;
+    error?: Error;
+};
+/**
+ * Runs an exec gate command and reports whether the task should continue.
+ * Expects: gate.command is non-empty; workingDir is absolute.
+ */
+export declare function execGateCheck(input: ExecGateCheckInput): Promise<ExecGateCheckResult>;
+//# sourceMappingURL=execGateCheck.d.ts.map

package/dist/engine/scheduling/execGateCheck.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"execGateCheck.d.ts","sourceRoot":"","sources":["../../../sources/engine/scheduling/execGateCheck.ts"],"names":[],"mappings":"AAGA,OAAO,KAAK,EAAE,kBAAkB,EAAE,kBAAkB,EAAE,MAAM,SAAS,CAAC;AAatE,MAAM,MAAM,kBAAkB,GAAG;IAC/B,IAAI,EAAE,kBAAkB,CAAC;IACzB,WAAW,EAAE,kBAAkB,CAAC;IAChC,UAAU,EAAE,MAAM,CAAC;CACpB,CAAC;AAEF,MAAM,MAAM,mBAAmB,GAAG;IAChC,SAAS,EAAE,OAAO,CAAC;IACnB,QAAQ,EAAE,MAAM,GAAG,IAAI,CAAC;IACxB,MAAM,EAAE,MAAM,CAAC;IACf,MAAM,EAAE,MAAM,CAAC;IACf,KAAK,CAAC,EAAE,KAAK,CAAC;CACf,CAAC;AAEF;;;GAGG;AACH,wBAAsB,aAAa,CACjC,KAAK,EAAE,kBAAkB,GACxB,OAAO,CAAC,mBAAmB,CAAC,CAqF9B"}

package/dist/engine/scheduling/execGateCheck.js

@@ -0,0 +1,136 @@
+import path from "node:path";
+import { sandboxAllowedDomainsResolve } from "../../sandbox/sandboxAllowedDomainsResolve.js";
+import { sandboxAllowedDomainsValidate } from "../../sandbox/sandboxAllowedDomainsValidate.js";
+import { runInSandbox } from "../../sandbox/runtime.js";
+import { sandboxFilesystemPolicyBuild } from "../../sandbox/sandboxFilesystemPolicyBuild.js";
+import { permissionClone } from "../permissions/permissionClone.js";
+import { pathResolveSecure } from "../permissions/pathResolveSecure.js";
+const MAX_EXEC_BUFFER = 1_000_000;
+const DEFAULT_EXEC_TIMEOUT = 30_000;
+const MIN_TIMEOUT_MS = 100;
+const MAX_TIMEOUT_MS = 300_000;
+/**
+ * Runs an exec gate command and reports whether the task should continue.
+ * Expects: gate.command is non-empty; workingDir is absolute.
+ */
+export async function execGateCheck(input) {
+    const command = input.gate.command.trim();
+    if (!command) {
+        return {
+            shouldRun: false,
+            exitCode: null,
+            stdout: "",
+            stderr: "",
+            error: new Error("Gate command is required.")
+        };
+    }
+    const permissions = permissionClone(input.permissions);
+    permissions.workingDir = path.resolve(input.workingDir);
+    const allowedDomains = sandboxAllowedDomainsResolve(input.gate.allowedDomains, input.gate.packageManagers);
+    const domainIssues = sandboxAllowedDomainsValidate(allowedDomains, permissions.network);
+    if (domainIssues.length > 0) {
+        return gateError(domainIssues.join(" "));
+    }
+    const cwd = input.gate.cwd
+        ? path.resolve(permissions.workingDir, input.gate.cwd)
+        : permissions.workingDir;
+    let resolvedCwd;
+    try {
+        resolvedCwd = await resolveGateCwd(permissions, cwd);
+    }
+    catch (error) {
+        return gateError(error instanceof Error ? error.message : "Invalid gate cwd.");
+    }
+    let resolvedHome;
+    if (input.gate.home) {
+        try {
+            resolvedHome = await resolveGateHome(permissions, input.gate.home);
+        }
+        catch (error) {
+            return gateError(error instanceof Error ? error.message : "Invalid gate home.");
+        }
+    }
+    const env = input.gate.env ? { ...process.env, ...input.gate.env } : process.env;
+    const timeoutMs = clampTimeout(input.gate.timeoutMs ?? DEFAULT_EXEC_TIMEOUT);
+    const sandboxConfig = buildSandboxConfig(permissions, allowedDomains);
+    try {
+        const result = await runInSandbox(command, sandboxConfig, {
+            cwd: resolvedCwd,
+            env,
+            home: resolvedHome,
+            timeoutMs,
+            maxBufferBytes: MAX_EXEC_BUFFER
+        });
+        return {
+            shouldRun: true,
+            exitCode: 0,
+            stdout: toText(result.stdout),
+            stderr: toText(result.stderr)
+        };
+    }
+    catch (error) {
+        const execError = error;
+        const stdout = toText(execError.stdout);
+        const stderr = toText(execError.stderr);
+        if (typeof execError.code === "number") {
+            return {
+                shouldRun: false,
+                exitCode: execError.code,
+                stdout,
+                stderr
+            };
+        }
+        return {
+            shouldRun: false,
+            exitCode: null,
+            stdout,
+            stderr,
+            error: execError instanceof Error ? execError : new Error("Gate command failed.")
+        };
+    }
+}
+function gateError(message) {
+    return {
+        shouldRun: false,
+        exitCode: null,
+        stdout: "",
+        stderr: "",
+        error: new Error(message)
+    };
+}
+function buildSandboxConfig(permissions, allowedDomains) {
+    const filesystem = sandboxFilesystemPolicyBuild({ permissions });
+    return {
+        filesystem,
+        network: {
+            allowedDomains,
+            deniedDomains: []
+        }
+    };
+}
+async function resolveGateCwd(permissions, cwd) {
+    const allowedDirs = Array.from(new Set([permissions.workingDir, ...permissions.readDirs, ...permissions.writeDirs]));
+    const resolved = await pathResolveSecure(allowedDirs, cwd);
+    return resolved.realPath;
+}
+async function resolveGateHome(permissions, home) {
+    const allowedDirs = Array.from(new Set([...permissions.writeDirs]));
+    const resolved = await pathResolveSecure(allowedDirs, home);
+    return resolved.realPath;
+}
+function clampTimeout(value) {
+    if (!Number.isFinite(value)) {
+        return DEFAULT_EXEC_TIMEOUT;
+    }
+    return Math.min(Math.max(value, MIN_TIMEOUT_MS), MAX_TIMEOUT_MS);
+}
+function toText(value) {
+    if (!value) {
+        return "";
+    }
+    if (typeof value === "string") {
+        return value;
+    }
+    return value.toString("utf8");
+}
+//# sourceMappingURL=execGateCheck.js.map

package/dist/engine/scheduling/execGateCheck.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"execGateCheck.js","sourceRoot":"","sources":["../../../sources/engine/scheduling/execGateCheck.ts"],"names":[],"mappings":"AAAA,OAAO,IAAI,MAAM,WAAW,CAAC;AAI7B,OAAO,EAAE,4BAA4B,EAAE,MAAM,+CAA+C,CAAC;AAC7F,OAAO,EAAE,6BAA6B,EAAE,MAAM,gDAAgD,CAAC;AAC/F,OAAO,EAAE,YAAY,EAAE,MAAM,0BAA0B,CAAC;AACxD,OAAO,EAAE,4BAA4B,EAAE,MAAM,+CAA+C,CAAC;AAC7F,OAAO,EAAE,eAAe,EAAE,MAAM,mCAAmC,CAAC;AACpE,OAAO,EAAE,iBAAiB,EAAE,MAAM,qCAAqC,CAAC;AAExE,MAAM,eAAe,GAAG,SAAS,CAAC;AAClC,MAAM,oBAAoB,GAAG,MAAM,CAAC;AACpC,MAAM,cAAc,GAAG,GAAG,CAAC;AAC3B,MAAM,cAAc,GAAG,OAAO,CAAC;AAgB/B;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,aAAa,CACjC,KAAyB;IAEzB,MAAM,OAAO,GAAG,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,EAAE,CAAC;IAC1C,IAAI,CAAC,OAAO,EAAE,CAAC;QACb,OAAO;YACL,SAAS,EAAE,KAAK;YAChB,QAAQ,EAAE,IAAI;YACd,MAAM,EAAE,EAAE;YACV,MAAM,EAAE,EAAE;YACV,KAAK,EAAE,IAAI,KAAK,CAAC,2BAA2B,CAAC;SAC9C,CAAC;IACJ,CAAC;IAED,MAAM,WAAW,GAAG,eAAe,CAAC,KAAK,CAAC,WAAW,CAAC,CAAC;IACvD,WAAW,CAAC,UAAU,GAAG,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC;IAExD,MAAM,cAAc,GAAG,4BAA4B,CACjD,KAAK,CAAC,IAAI,CAAC,cAAc,EACzB,KAAK,CAAC,IAAI,CAAC,eAAe,CAC3B,CAAC;IACF,MAAM,YAAY,GAAG,6BAA6B,CAAC,cAAc,EAAE,WAAW,CAAC,OAAO,CAAC,CAAC;IACxF,IAAI,YAAY,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QAC5B,OAAO,SAAS,CAAC,YAAY,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC;IAC3C,CAAC;IAED,MAAM,GAAG,GAAG,KAAK,CAAC,IAAI,CAAC,GAAG;QACxB,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,WAAW,CAAC,UAAU,EAAE,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC;QACtD,CAAC,CAAC,WAAW,CAAC,UAAU,CAAC;IAC3B,IAAI,WAAmB,CAAC;IACxB,IAAI,CAAC;QACH,WAAW,GAAG,MAAM,cAAc,CAAC,WAAW,EAAE,GAAG,CAAC,CAAC;IACvD,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,OAAO,SAAS,CAAC,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,mBAAmB,CAAC,CAAC;IACjF,CAAC;IACD,IAAI,YAAgC,CAAC;IACrC,IAAI,KAAK,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC;QACpB,IAAI,CAAC;YACH,YAAY,GAAG,MAAM,eAAe,CAAC,WAAW,EAAE,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACrE,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,OAAO,SAAS,CAAC,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,oBAAoB,CAAC,CAAC;QAClF,CAAC;IACH,CAAC;IAED,MAAM,GAAG,GAAG,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,GAAG,OAAO,CAAC,GAAG,EAAE,GAAG,KAAK,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,GAAG,CAAC;IACjF,MAAM,SAAS,GAAG,YAAY,CAAC,KAAK,CAAC,IAAI,CAAC,SAAS,IAAI,oBAAoB,CAAC,CAAC;IAC7E,MAAM,aAAa,GAAG,kBAAkB,CAAC,WAAW,EAAE,cAAc,CAAC,CAAC;IAEtE,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,MAAM,YAAY,CAAC,OAAO,EAAE,aAAa,EAAE;YACxD,GAAG,EAAE,WAAW;YAChB,GAAG;YACH,IAAI,EAAE,YAAY;YAClB,SAAS;YACT,cAAc,EAAE,eAAe;SAChC,CAAC,CAAC;QACH,OAAO;YACL,SAAS,EAAE,IAAI;YACf,QAAQ,EAAE,CAAC;YACX,MAAM,EAAE,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC;YAC7B,MAAM,EAAE,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC;SAC9B,CAAC;IACJ,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,MAAM,SAAS,GAAG,KAKjB,CAAC;QACF,MAAM,MAAM,GAAG,MAAM,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC;QACxC,MAAM,MAAM,GAAG,MAAM,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC;QACxC,IAAI,OAAO,SAAS,CAAC,IAAI,KAAK,QAAQ,EAAE,CAAC;YACvC,OAAO;gBACL,SAAS,EAAE,KAAK;gBAChB,QAAQ,EAAE,SAAS,CAAC,IAAI;gBACxB,MAAM;gBACN,MAAM;aACP,CAAC;QACJ,CAAC;QACD,OAAO;YACL,SAAS,EAAE,KAAK;YAChB,QAAQ,EAAE,IAAI;YACd,MAAM;YACN,MAAM;YACN,KAAK,EAAE,SAAS,YAAY,KAAK,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,IAAI,KAAK,CAAC,sBAAsB,CAAC;SAClF,CAAC;IACJ,CAAC;AACH,CAAC;AAED,SAAS,SAAS,CAAC,OAAe;IAChC,OAAO;QACL,SAAS,EAAE,KAAK;QAChB,QAAQ,EAAE,IAAI;QACd,MAAM,EAAE,EAAE;QACV,MAAM,EAAE,EAAE;QACV,KAAK,EAAE,IAAI,KAAK,CAAC,OAAO,CAAC;KAC1B,CAAC;AACJ,CAAC;AAED,SAAS,kBAAkB,CAAC,WAA+B,EAAE,cAAwB;IACnF,MAAM,UAAU,GAAG,4BAA4B,CAAC,EAAE,WAAW,EAAE,CAAC,CAAC;IACjE,OAAO;QACL,UAAU;QACV,OAAO,EAAE;YACP,cAAc;YACd,aAAa,EAAE,EAAE;SAClB;KACF,CAAC;AACJ,CAAC;AAED,KAAK,UAAU,cAAc,CAC3B,WAA+B,EAC/B,GAAW;IAEX,MAAM,WAAW,GAAG,KAAK,CAAC,IAAI,CAC5B,IAAI,GAAG,CAAC,CAAC,WAAW,CAAC,UAAU,EAAE,GAAG,WAAW,CAAC,QAAQ,EAAE,GAAG,WAAW,CAAC,SAAS,CAAC,CAAC,CACrF,CAAC;IACF,MAAM,QAAQ,GAAG,MAAM,iBAAiB,CAAC,WAAW,EAAE,GAAG,CAAC,CAAC;IAC3D,OAAO,QAAQ,CAAC,QAAQ,CAAC;AAC3B,CAAC;AAED,KAAK,UAAU,eAAe,CAC5B,WAA+B,EAC/B,IAAY;IAEZ,MAAM,WAAW,GAAG,KAAK,CAAC,IAAI,CAAC,IAAI,GAAG,CAAC,CAAC,GAAG,WAAW,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC;IACpE,MAAM,QAAQ,GAAG,MAAM,iBAAiB,CAAC,WAAW,EAAE,IAAI,CAAC,CAAC;IAC5D,OAAO,QAAQ,CAAC,QAAQ,CAAC;AAC3B,CAAC;AAED,SAAS,YAAY,CAAC,KAAa;IACjC,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC;QAC5B,OAAO,oBAAoB,CAAC;IAC9B,CAAC;IACD,OAAO,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,GAAG,CAAC,KAAK,EAAE,cAAc,CAAC,EAAE,cAAc,CAAC,CAAC;AACnE,CAAC;AAED,SAAS,MAAM,CAAC,KAAuB;IACrC,IAAI,CAAC,KAAK,EAAE,CAAC;QACX,OAAO,EAAE,CAAC;IACZ,CAAC;IACD,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;QAC9B,OAAO,KAAK,CAAC;IACf,CAAC;IACD,OAAO,KAAK,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;AAChC,CAAC"}

package/dist/engine/scheduling/execGateNormalize.d.ts

@@ -0,0 +1,7 @@
+import type { ExecGateDefinition } from "@/types";
+/**
+ * Normalizes an exec gate definition from untyped input.
+ * Returns undefined when the value is missing or lacks a command.
+ */
+export declare function execGateNormalize(value: unknown): ExecGateDefinition | undefined;
+//# sourceMappingURL=execGateNormalize.d.ts.map

package/dist/engine/scheduling/execGateNormalize.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"execGateNormalize.d.ts","sourceRoot":"","sources":["../../../sources/engine/scheduling/execGateNormalize.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,SAAS,CAAC;AAIlD;;;GAGG;AACH,wBAAgB,iBAAiB,CAAC,KAAK,EAAE,OAAO,GAAG,kBAAkB,GAAG,SAAS,CA8DhF"}

package/dist/engine/scheduling/execGateNormalize.js

@@ -0,0 +1,74 @@
+import { SANDBOX_PACKAGE_MANAGERS } from "../../sandbox/sandboxPackageManagers.js";
+import { envNormalize } from "../../util/envNormalize.js";
+/**
+ * Normalizes an exec gate definition from untyped input.
+ * Returns undefined when the value is missing or lacks a command.
+ */
+export function execGateNormalize(value) {
+    if (!value || typeof value !== "object") {
+        return undefined;
+    }
+    const candidate = value;
+    if (typeof candidate.command !== "string") {
+        return undefined;
+    }
+    const command = candidate.command.trim();
+    if (!command) {
+        return undefined;
+    }
+    const next = { command };
+    if (typeof candidate.cwd === "string") {
+        const cwd = candidate.cwd.trim();
+        if (cwd) {
+            next.cwd = cwd;
+        }
+    }
+    if (typeof candidate.timeoutMs === "number" && Number.isFinite(candidate.timeoutMs)) {
+        next.timeoutMs = candidate.timeoutMs;
+    }
+    const env = envNormalize(candidate.env);
+    if (env) {
+        next.env = env;
+    }
+    if (typeof candidate.home === "string") {
+        const home = candidate.home.trim();
+        if (home.length > 0) {
+            next.home = home;
+        }
+    }
+    const permissions = normalizeStringArray(candidate.permissions);
+    if (permissions.length > 0) {
+        next.permissions = permissions;
+    }
+    const packageManagers = normalizePackageManagers(candidate.packageManagers);
+    if (packageManagers.length > 0) {
+        next.packageManagers = packageManagers;
+    }
+    const allowedDomains = normalizeStringArray(candidate.allowedDomains);
+    if (allowedDomains.length > 0) {
+        next.allowedDomains = allowedDomains;
+    }
+    return next;
+}
+function normalizeStringArray(value) {
+    if (!Array.isArray(value)) {
+        return [];
+    }
+    const entries = value
+        .filter((entry) => typeof entry === "string")
+        .map((entry) => entry.trim())
+        .filter((entry) => entry.length > 0);
+    return Array.from(new Set(entries));
+}
+function normalizePackageManagers(value) {
+    if (!Array.isArray(value)) {
+        return [];
+    }
+    const allowed = new Set(SANDBOX_PACKAGE_MANAGERS);
+    const entries = value
+        .filter((entry) => typeof entry === "string")
+        .map((entry) => entry.trim())
+        .filter((entry) => allowed.has(entry));
+    return Array.from(new Set(entries));
+}
+//# sourceMappingURL=execGateNormalize.js.map

package/dist/engine/scheduling/execGateNormalize.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"execGateNormalize.js","sourceRoot":"","sources":["../../../sources/engine/scheduling/execGateNormalize.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,wBAAwB,EAAE,MAAM,yCAAyC,CAAC;AACnF,OAAO,EAAE,YAAY,EAAE,MAAM,4BAA4B,CAAC;AAE1D;;;GAGG;AACH,MAAM,UAAU,iBAAiB,CAAC,KAAc;IAC9C,IAAI,CAAC,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;QACxC,OAAO,SAAS,CAAC;IACnB,CAAC;IACD,MAAM,SAAS,GAAG,KASjB,CAAC;IACF,IAAI,OAAO,SAAS,CAAC,OAAO,KAAK,QAAQ,EAAE,CAAC;QAC1C,OAAO,SAAS,CAAC;IACnB,CAAC;IACD,MAAM,OAAO,GAAG,SAAS,CAAC,OAAO,CAAC,IAAI,EAAE,CAAC;IACzC,IAAI,CAAC,OAAO,EAAE,CAAC;QACb,OAAO,SAAS,CAAC;IACnB,CAAC;IAED,MAAM,IAAI,GAAuB,EAAE,OAAO,EAAE,CAAC;IAE7C,IAAI,OAAO,SAAS,CAAC,GAAG,KAAK,QAAQ,EAAE,CAAC;QACtC,MAAM,GAAG,GAAG,SAAS,CAAC,GAAG,CAAC,IAAI,EAAE,CAAC;QACjC,IAAI,GAAG,EAAE,CAAC;YACR,IAAI,CAAC,GAAG,GAAG,GAAG,CAAC;QACjB,CAAC;IACH,CAAC;IAED,IAAI,OAAO,SAAS,CAAC,SAAS,KAAK,QAAQ,IAAI,MAAM,CAAC,QAAQ,CAAC,SAAS,CAAC,SAAS,CAAC,EAAE,CAAC;QACpF,IAAI,CAAC,SAAS,GAAG,SAAS,CAAC,SAAS,CAAC;IACvC,CAAC;IAED,MAAM,GAAG,GAAG,YAAY,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC;IACxC,IAAI,GAAG,EAAE,CAAC;QACR,IAAI,CAAC,GAAG,GAAG,GAAG,CAAC;IACjB,CAAC;IACD,IAAI,OAAO,SAAS,CAAC,IAAI,KAAK,QAAQ,EAAE,CAAC;QACvC,MAAM,IAAI,GAAG,SAAS,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC;QACnC,IAAI,IAAI,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YACpB,IAAI,CAAC,IAAI,GAAG,IAAI,CAAC;QACnB,CAAC;IACH,CAAC;IAED,MAAM,WAAW,GAAG,oBAAoB,CAAC,SAAS,CAAC,WAAW,CAAC,CAAC;IAChE,IAAI,WAAW,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QAC3B,IAAI,CAAC,WAAW,GAAG,WAAW,CAAC;IACjC,CAAC;IAED,MAAM,eAAe,GAAG,wBAAwB,CAAC,SAAS,CAAC,eAAe,CAAC,CAAC;IAC5E,IAAI,eAAe,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QAC/B,IAAI,CAAC,eAAe,GAAG,eAAe,CAAC;IACzC,CAAC;IAED,MAAM,cAAc,GAAG,oBAAoB,CAAC,SAAS,CAAC,cAAc,CAAC,CAAC;IACtE,IAAI,cAAc,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QAC9B,IAAI,CAAC,cAAc,GAAG,cAAc,CAAC;IACvC,CAAC;IAED,OAAO,IAAI,CAAC;AACd,CAAC;AAED,SAAS,oBAAoB,CAAC,KAAc;IAC1C,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;QAC1B,OAAO,EAAE,CAAC;IACZ,CAAC;IACD,MAAM,OAAO,GAAG,KAAK;SAClB,MAAM,CAAC,CAAC,KAAK,EAAmB,EAAE,CAAC,OAAO,KAAK,KAAK,QAAQ,CAAC;SAC7D,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC;SAC5B,MAAM,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC;IACvC,OAAO,KAAK,CAAC,IAAI,CAAC,IAAI,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC;AACtC,CAAC;AAED,SAAS,wBAAwB,CAAC,KAAc;IAC9C,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;QAC1B,OAAO,EAAE,CAAC;IACZ,CAAC;IACD,MAAM,OAAO,GAAG,IAAI,GAAG,CAAS,wBAAwB,CAAC,CAAC;IAC1D,MAAM,OAAO,GAAG,KAAK;SAClB,MAAM,CAAC,CAAC,KAAK,EAAmB,EAAE,CAAC,OAAO,KAAK,KAAK,QAAQ,CAAC;SAC7D,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC;SAC5B,MAAM,CAAC,CAAC,KAAK,EAAsD,EAAE,CAAC,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC;IAC7F,OAAO,KAAK,CAAC,IAAI,CAAC,IAAI,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC;AACtC,CAAC"}

package/dist/engine/scheduling/execGateNormalize.spec.d.ts

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=execGateNormalize.spec.d.ts.map

package/dist/engine/scheduling/execGateNormalize.spec.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"execGateNormalize.spec.d.ts","sourceRoot":"","sources":["../../../sources/engine/scheduling/execGateNormalize.spec.ts"],"names":[],"mappings":""}

package/dist/engine/scheduling/execGateNormalize.spec.js

@@ -0,0 +1,41 @@
+import { describe, it, expect } from "vitest";
+import { execGateNormalize } from "./execGateNormalize.js";
+describe("execGateNormalize", () => {
+    it("returns undefined for missing command", () => {
+        expect(execGateNormalize(null)).toBeUndefined();
+        expect(execGateNormalize({})).toBeUndefined();
+    });
+    it("normalizes gate fields", () => {
+        const result = execGateNormalize({
+            command: "  echo ok  ",
+            cwd: " /tmp ",
+            timeoutMs: 1500,
+            env: { FOO: "bar", SKIP: 3, FLAG: true },
+            home: " /tmp/sandbox-home ",
+            permissions: ["@network", "  @read:/tmp  ", "", "@network"],
+            packageManagers: [
+                "node",
+                " java ",
+                "rust",
+                "dotnet",
+                "python",
+                "ruby",
+                "php",
+                "dart",
+                "invalid"
+            ],
+            allowedDomains: ["example.com", " example.com "]
+        });
+        expect(result).toEqual({
+            command: "echo ok",
+            cwd: "/tmp",
+            timeoutMs: 1500,
+            env: { FOO: "bar", SKIP: "3", FLAG: "true" },
+            home: "/tmp/sandbox-home",
+            permissions: ["@network", "@read:/tmp"],
+            packageManagers: ["node", "java", "rust", "dotnet", "python", "ruby", "php", "dart"],
+            allowedDomains: ["example.com"]
+        });
+    });
+});
+//# sourceMappingURL=execGateNormalize.spec.js.map

package/dist/engine/scheduling/execGateNormalize.spec.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"execGateNormalize.spec.js","sourceRoot":"","sources":["../../../sources/engine/scheduling/execGateNormalize.spec.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,EAAE,EAAE,MAAM,EAAE,MAAM,QAAQ,CAAC;AAE9C,OAAO,EAAE,iBAAiB,EAAE,MAAM,wBAAwB,CAAC;AAE3D,QAAQ,CAAC,mBAAmB,EAAE,GAAG,EAAE;IACjC,EAAE,CAAC,uCAAuC,EAAE,GAAG,EAAE;QAC/C,MAAM,CAAC,iBAAiB,CAAC,IAAI,CAAC,CAAC,CAAC,aAAa,EAAE,CAAC;QAChD,MAAM,CAAC,iBAAiB,CAAC,EAAE,CAAC,CAAC,CAAC,aAAa,EAAE,CAAC;IAChD,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,wBAAwB,EAAE,GAAG,EAAE;QAChC,MAAM,MAAM,GAAG,iBAAiB,CAAC;YAC/B,OAAO,EAAE,aAAa;YACtB,GAAG,EAAE,QAAQ;YACb,SAAS,EAAE,IAAI;YACf,GAAG,EAAE,EAAE,GAAG,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,EAAE,IAAI,EAAE,IAAI,EAAE;YACxC,IAAI,EAAE,qBAAqB;YAC3B,WAAW,EAAE,CAAC,UAAU,EAAE,gBAAgB,EAAE,EAAE,EAAE,UAAU,CAAC;YAC3D,eAAe,EAAE;gBACf,MAAM;gBACN,QAAQ;gBACR,MAAM;gBACN,QAAQ;gBACR,QAAQ;gBACR,MAAM;gBACN,KAAK;gBACL,MAAM;gBACN,SAAS;aACV;YACD,cAAc,EAAE,CAAC,aAAa,EAAE,eAAe,CAAC;SACjD,CAAC,CAAC;QACH,MAAM,CAAC,MAAM,CAAC,CAAC,OAAO,CAAC;YACrB,OAAO,EAAE,SAAS;YAClB,GAAG,EAAE,MAAM;YACX,SAAS,EAAE,IAAI;YACf,GAAG,EAAE,EAAE,GAAG,EAAE,KAAK,EAAE,IAAI,EAAE,GAAG,EAAE,IAAI,EAAE,MAAM,EAAE;YAC5C,IAAI,EAAE,mBAAmB;YACzB,WAAW,EAAE,CAAC,UAAU,EAAE,YAAY,CAAC;YACvC,eAAe,EAAE,CAAC,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,QAAQ,EAAE,QAAQ,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,CAAC;YACpF,cAAc,EAAE,CAAC,aAAa,CAAC;SAChC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC"}

package/dist/engine/scheduling/execGateOutputAppend.d.ts

@@ -0,0 +1,7 @@
+import type { ExecGateCheckResult } from "./execGateCheck.js";
+/**
+ * Appends trimmed gate output to a prompt when available.
+ * Returns the original prompt when there is no output.
+ */
+export declare function execGateOutputAppend(prompt: string, result: ExecGateCheckResult): string;
+//# sourceMappingURL=execGateOutputAppend.d.ts.map

package/dist/engine/scheduling/execGateOutputAppend.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"execGateOutputAppend.d.ts","sourceRoot":"","sources":["../../../sources/engine/scheduling/execGateOutputAppend.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,oBAAoB,CAAC;AAE9D;;;GAGG;AACH,wBAAgB,oBAAoB,CAClC,MAAM,EAAE,MAAM,EACd,MAAM,EAAE,mBAAmB,GAC1B,MAAM,CAWR"}

package/dist/engine/scheduling/execGateOutputAppend.js

@@ -0,0 +1,23 @@
+/**
+ * Appends trimmed gate output to a prompt when available.
+ * Returns the original prompt when there is no output.
+ */
+export function execGateOutputAppend(prompt, result) {
+    const output = formatGateOutput(result.stdout, result.stderr);
+    if (!output) {
+        return prompt;
+    }
+    const base = prompt.trim();
+    const suffix = `[Gate output]\n${output}`;
+    if (!base) {
+        return suffix;
+    }
+    return `${base}\n\n${suffix}`;
+}
+function formatGateOutput(stdout, stderr) {
+    const parts = [stdout, stderr]
+        .map((value) => value.trim())
+        .filter((value) => value.length > 0);
+    return parts.join("\n").trim();
+}
+//# sourceMappingURL=execGateOutputAppend.js.map

package/dist/engine/scheduling/execGateOutputAppend.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"execGateOutputAppend.js","sourceRoot":"","sources":["../../../sources/engine/scheduling/execGateOutputAppend.ts"],"names":[],"mappings":"AAEA;;;GAGG;AACH,MAAM,UAAU,oBAAoB,CAClC,MAAc,EACd,MAA2B;IAE3B,MAAM,MAAM,GAAG,gBAAgB,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,MAAM,CAAC,CAAC;IAC9D,IAAI,CAAC,MAAM,EAAE,CAAC;QACZ,OAAO,MAAM,CAAC;IAChB,CAAC;IACD,MAAM,IAAI,GAAG,MAAM,CAAC,IAAI,EAAE,CAAC;IAC3B,MAAM,MAAM,GAAG,kBAAkB,MAAM,EAAE,CAAC;IAC1C,IAAI,CAAC,IAAI,EAAE,CAAC;QACV,OAAO,MAAM,CAAC;IAChB,CAAC;IACD,OAAO,GAAG,IAAI,OAAO,MAAM,EAAE,CAAC;AAChC,CAAC;AAED,SAAS,gBAAgB,CAAC,MAAc,EAAE,MAAc;IACtD,MAAM,KAAK,GAAG,CAAC,MAAM,EAAE,MAAM,CAAC;SAC3B,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC;SAC5B,MAAM,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC;IACvC,OAAO,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,CAAC;AACjC,CAAC"}

package/dist/engine/scheduling/execGateOutputAppend.spec.d.ts

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=execGateOutputAppend.spec.d.ts.map

package/dist/engine/scheduling/execGateOutputAppend.spec.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"execGateOutputAppend.spec.d.ts","sourceRoot":"","sources":["../../../sources/engine/scheduling/execGateOutputAppend.spec.ts"],"names":[],"mappings":""}

package/dist/engine/scheduling/execGateOutputAppend.spec.js

@@ -0,0 +1,24 @@
+import { describe, it, expect } from "vitest";
+import { execGateOutputAppend } from "./execGateOutputAppend.js";
+describe("execGateOutputAppend", () => {
+    it("returns prompt when output is empty", () => {
+        const prompt = "Do work.";
+        const result = execGateOutputAppend(prompt, {
+            shouldRun: true,
+            exitCode: 0,
+            stdout: "   ",
+            stderr: ""
+        });
+        expect(result).toBe(prompt);
+    });
+    it("appends trimmed stdout/stderr", () => {
+        const result = execGateOutputAppend("Check status", {
+            shouldRun: true,
+            exitCode: 0,
+            stdout: " ok \n",
+            stderr: " warn "
+        });
+        expect(result).toBe("Check status\n\n[Gate output]\nok\nwarn");
+    });
+});
+//# sourceMappingURL=execGateOutputAppend.spec.js.map

package/dist/engine/scheduling/execGateOutputAppend.spec.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"execGateOutputAppend.spec.js","sourceRoot":"","sources":["../../../sources/engine/scheduling/execGateOutputAppend.spec.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,EAAE,EAAE,MAAM,EAAE,MAAM,QAAQ,CAAC;AAE9C,OAAO,EAAE,oBAAoB,EAAE,MAAM,2BAA2B,CAAC;AAEjE,QAAQ,CAAC,sBAAsB,EAAE,GAAG,EAAE;IACpC,EAAE,CAAC,qCAAqC,EAAE,GAAG,EAAE;QAC7C,MAAM,MAAM,GAAG,UAAU,CAAC;QAC1B,MAAM,MAAM,GAAG,oBAAoB,CAAC,MAAM,EAAE;YAC1C,SAAS,EAAE,IAAI;YACf,QAAQ,EAAE,CAAC;YACX,MAAM,EAAE,KAAK;YACb,MAAM,EAAE,EAAE;SACX,CAAC,CAAC;QACH,MAAM,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;IAC9B,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,+BAA+B,EAAE,GAAG,EAAE;QACvC,MAAM,MAAM,GAAG,oBAAoB,CAAC,cAAc,EAAE;YAClD,SAAS,EAAE,IAAI;YACf,QAAQ,EAAE,CAAC;YACX,MAAM,EAAE,QAAQ;YAChB,MAAM,EAAE,QAAQ;SACjB,CAAC,CAAC;QACH,MAAM,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,yCAAyC,CAAC,CAAC;IACjE,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC"}

package/dist/engine/scheduling/execGateTypes.d.ts

@@ -0,0 +1,15 @@
+import type { SandboxPackageManager } from "../../sandbox/sandboxPackageManagers.js";
+/**
+ * Exec gate configuration for scheduled tasks.
+ */
+export type ExecGateDefinition = {
+    command: string;
+    cwd?: string;
+    timeoutMs?: number;
+    env?: Record<string, string>;
+    home?: string;
+    permissions?: string[];
+    packageManagers?: SandboxPackageManager[];
+    allowedDomains?: string[];
+};
+//# sourceMappingURL=execGateTypes.d.ts.map

package/dist/engine/scheduling/execGateTypes.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"execGateTypes.d.ts","sourceRoot":"","sources":["../../../sources/engine/scheduling/execGateTypes.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,qBAAqB,EAAE,MAAM,yCAAyC,CAAC;AAErF;;GAEG;AACH,MAAM,MAAM,kBAAkB,GAAG;IAC/B,OAAO,EAAE,MAAM,CAAC;IAChB,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,GAAG,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAC7B,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,WAAW,CAAC,EAAE,MAAM,EAAE,CAAC;IACvB,eAAe,CAAC,EAAE,qBAAqB,EAAE,CAAC;IAC1C,cAAc,CAAC,EAAE,MAAM,EAAE,CAAC;CAC3B,CAAC"}

package/dist/engine/scheduling/execGateTypes.js

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=execGateTypes.js.map

package/dist/engine/scheduling/execGateTypes.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"execGateTypes.js","sourceRoot":"","sources":["../../../sources/engine/scheduling/execGateTypes.ts"],"names":[],"mappings":""}

package/dist/engine/scheduling/gatePermissionsCheck.d.ts

@@ -0,0 +1,11 @@
+import type { SessionPermissions } from "@/types";
+export type GatePermissionsCheckResult = {
+    allowed: boolean;
+    missing: string[];
+};
+/**
+ * Checks gate permission tags against the current permissions.
+ * Expects: tags are @network, @read:<path>, or @write:<path>.
+ */
+export declare function gatePermissionsCheck(permissions: SessionPermissions, tags?: string[]): Promise<GatePermissionsCheckResult>;
+//# sourceMappingURL=gatePermissionsCheck.d.ts.map

package/dist/engine/scheduling/gatePermissionsCheck.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"gatePermissionsCheck.d.ts","sourceRoot":"","sources":["../../../sources/engine/scheduling/gatePermissionsCheck.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAoB,kBAAkB,EAAE,MAAM,SAAS,CAAC;AAGpE,MAAM,MAAM,0BAA0B,GAAG;IACvC,OAAO,EAAE,OAAO,CAAC;IACjB,OAAO,EAAE,MAAM,EAAE,CAAC;CACnB,CAAC;AAEF;;;GAGG;AACH,wBAAsB,oBAAoB,CACxC,WAAW,EAAE,kBAAkB,EAC/B,IAAI,CAAC,EAAE,MAAM,EAAE,GACd,OAAO,CAAC,0BAA0B,CAAC,CAwBrC"}