daycare-cli 0.0.1

package/dist/sandbox/runtime.spec.js

@@ -0,0 +1,84 @@
+import { describe, expect, it } from "vitest";
+import { promises as fs } from "node:fs";
+import os from "node:os";
+import path from "node:path";
+import { runInSandbox } from "./runtime.js";
+const baseFilesystem = {
+    denyRead: [],
+    allowWrite: ["."],
+    denyWrite: []
+};
+async function runCurlWithDomains(url, allowedDomains) {
+    try {
+        const result = await runInSandbox(`curl -s -I --max-time 10 "${url}"`, {
+            filesystem: baseFilesystem,
+            network: {
+                allowedDomains,
+                deniedDomains: []
+            }
+        }, {
+            timeoutMs: 30_000,
+            maxBufferBytes: 1_000_000
+        });
+        return {
+            stdout: toText(result.stdout),
+            stderr: toText(result.stderr),
+            exitCode: 0
+        };
+    }
+    catch (error) {
+        const execError = error;
+        return {
+            stdout: toText(execError.stdout),
+            stderr: toText(execError.stderr),
+            exitCode: typeof execError.code === "number" ? execError.code : null
+        };
+    }
+}
+function toText(value) {
+    if (!value) {
+        return "";
+    }
+    if (typeof value === "string") {
+        return value;
+    }
+    return value.toString("utf8");
+}
+describe("runInSandbox integration", () => {
+    it("runs google and microsoft in parallel with one whitelisted domain per call", async () => {
+        const [googleResult, microsoftResult] = await Promise.all([
+            runCurlWithDomains("https://google.com", ["google.com"]),
+            runCurlWithDomains("https://microsoft.com", ["microsoft.com"])
+        ]);
+        expect(googleResult.exitCode).toBe(0);
+        expect(microsoftResult.exitCode).toBe(0);
+        expect(googleResult.stdout).toContain("HTTP/");
+        expect(microsoftResult.stdout).toContain("HTTP/");
+    });
+    it("blocks https requests when domain is not whitelisted", async () => {
+        const result = await runCurlWithDomains("https://microsoft.com", ["google.com"]);
+        expect(result.stdout).toContain("X-Proxy-Error: blocked-by-allowlist");
+    });
+    it("blocks http requests when domain is not whitelisted", async () => {
+        const result = await runCurlWithDomains("http://microsoft.com", ["google.com"]);
+        expect(result.stdout).toContain("X-Proxy-Error: blocked-by-allowlist");
+    });
+    it("maps HOME when home option is provided", async () => {
+        const workspace = await fs.mkdtemp(path.join(os.tmpdir(), "daycare-srt-home-"));
+        try {
+            const home = path.join(workspace, ".sandbox-home");
+            const result = await runInSandbox("printf '%s' \"$HOME\"", {
+                filesystem: baseFilesystem,
+                network: {
+                    allowedDomains: [],
+                    deniedDomains: []
+                }
+            }, { home });
+            expect(result.stdout).toBe(home);
+        }
+        finally {
+            await fs.rm(workspace, { recursive: true, force: true });
+        }
+    });
+});
+//# sourceMappingURL=runtime.spec.js.map

package/dist/sandbox/runtime.spec.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"runtime.spec.js","sourceRoot":"","sources":["../../sources/sandbox/runtime.spec.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,MAAM,EAAE,EAAE,EAAE,MAAM,QAAQ,CAAC;AAE9C,OAAO,EAAE,QAAQ,IAAI,EAAE,EAAE,MAAM,SAAS,CAAC;AACzC,OAAO,EAAE,MAAM,SAAS,CAAC;AACzB,OAAO,IAAI,MAAM,WAAW,CAAC;AAE7B,OAAO,EAAE,YAAY,EAAE,MAAM,cAAc,CAAC;AAE5C,MAAM,cAAc,GAAG;IACrB,QAAQ,EAAE,EAAE;IACZ,UAAU,EAAE,CAAC,GAAG,CAAC;IACjB,SAAS,EAAE,EAAE;CACd,CAAC;AAQF,KAAK,UAAU,kBAAkB,CAC/B,GAAW,EACX,cAAwB;IAExB,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,MAAM,YAAY,CAC/B,6BAA6B,GAAG,GAAG,EACnC;YACE,UAAU,EAAE,cAAc;YAC1B,OAAO,EAAE;gBACP,cAAc;gBACd,aAAa,EAAE,EAAE;aAClB;SACF,EACD;YACE,SAAS,EAAE,MAAM;YACjB,cAAc,EAAE,SAAS;SAC1B,CACF,CAAC;QAEF,OAAO;YACL,MAAM,EAAE,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC;YAC7B,MAAM,EAAE,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC;YAC7B,QAAQ,EAAE,CAAC;SACZ,CAAC;IACJ,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,MAAM,SAAS,GAAG,KAIjB,CAAC;QACF,OAAO;YACL,MAAM,EAAE,MAAM,CAAC,SAAS,CAAC,MAAM,CAAC;YAChC,MAAM,EAAE,MAAM,CAAC,SAAS,CAAC,MAAM,CAAC;YAChC,QAAQ,EAAE,OAAO,SAAS,CAAC,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI;SACrE,CAAC;IACJ,CAAC;AACH,CAAC;AAED,SAAS,MAAM,CAAC,KAAuB;IACrC,IAAI,CAAC,KAAK,EAAE,CAAC;QACX,OAAO,EAAE,CAAC;IACZ,CAAC;IACD,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;QAC9B,OAAO,KAAK,CAAC;IACf,CAAC;IACD,OAAO,KAAK,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;AAChC,CAAC;AAED,QAAQ,CAAC,0BAA0B,EAAE,GAAG,EAAE;IACxC,EAAE,CAAC,4EAA4E,EAAE,KAAK,IAAI,EAAE;QAC1F,MAAM,CAAC,YAAY,EAAE,eAAe,CAAC,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC;YACxD,kBAAkB,CAAC,oBAAoB,EAAE,CAAC,YAAY,CAAC,CAAC;YACxD,kBAAkB,CAAC,uBAAuB,EAAE,CAAC,eAAe,CAAC,CAAC;SAC/D,CAAC,CAAC;QAEH,MAAM,CAAC,YAAY,CAAC,QAAQ,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QACtC,MAAM,CAAC,eAAe,CAAC,QAAQ,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QACzC,MAAM,CAAC,YAAY,CAAC,MAAM,CAAC,CAAC,SAAS,CAAC,OAAO,CAAC,CAAC;QAC/C,MAAM,CAAC,eAAe,CAAC,MAAM,CAAC,CAAC,SAAS,CAAC,OAAO,CAAC,CAAC;IACpD,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,sDAAsD,EAAE,KAAK,IAAI,EAAE;QACpE,MAAM,MAAM,GAAG,MAAM,kBAAkB,CAAC,uBAAuB,EAAE,CAAC,YAAY,CAAC,CAAC,CAAC;QAEjF,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,SAAS,CAAC,qCAAqC,CAAC,CAAC;IACzE,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,qDAAqD,EAAE,KAAK,IAAI,EAAE;QACnE,MAAM,MAAM,GAAG,MAAM,kBAAkB,CAAC,sBAAsB,EAAE,CAAC,YAAY,CAAC,CAAC,CAAC;QAEhF,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,SAAS,CAAC,qCAAqC,CAAC,CAAC;IACzE,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,wCAAwC,EAAE,KAAK,IAAI,EAAE;QACtD,MAAM,SAAS,GAAG,MAAM,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,MAAM,EAAE,EAAE,mBAAmB,CAAC,CAAC,CAAC;QAChF,IAAI,CAAC;YACH,MAAM,IAAI,GAAG,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,eAAe,CAAC,CAAC;YACnD,MAAM,MAAM,GAAG,MAAM,YAAY,CAC/B,uBAAuB,EACvB;gBACE,UAAU,EAAE,cAAc;gBAC1B,OAAO,EAAE;oBACP,cAAc,EAAE,EAAE;oBAClB,aAAa,EAAE,EAAE;iBAClB;aACF,EACD,EAAE,IAAI,EAAE,CACT,CAAC;YAEF,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACnC,CAAC;gBAAS,CAAC;YACT,MAAM,EAAE,CAAC,EAAE,CAAC,SAAS,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;QAC3D,CAAC;IACH,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC"}

package/dist/sandbox/sandboxAllowedDomainsResolve.d.ts

@@ -0,0 +1,7 @@
+import { type SandboxPackageManager } from "./sandboxPackageManagers.js";
+/**
+ * Resolves explicit allowed domains and package-manager presets into one deduped list.
+ * Expects: allowedDomains entries are hostnames and packageManagers are validated names.
+ */
+export declare function sandboxAllowedDomainsResolve(allowedDomains?: string[], packageManagers?: SandboxPackageManager[]): string[];
+//# sourceMappingURL=sandboxAllowedDomainsResolve.d.ts.map

package/dist/sandbox/sandboxAllowedDomainsResolve.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"sandboxAllowedDomainsResolve.d.ts","sourceRoot":"","sources":["../../sources/sandbox/sandboxAllowedDomainsResolve.ts"],"names":[],"mappings":"AAAA,OAAO,EAEL,KAAK,qBAAqB,EAC3B,MAAM,6BAA6B,CAAC;AAErC;;;GAGG;AACH,wBAAgB,4BAA4B,CAC1C,cAAc,CAAC,EAAE,MAAM,EAAE,EACzB,eAAe,CAAC,EAAE,qBAAqB,EAAE,GACxC,MAAM,EAAE,CAoBV"}

package/dist/sandbox/sandboxAllowedDomainsResolve.js

@@ -0,0 +1,31 @@
+import { SANDBOX_PACKAGE_MANAGER_DOMAINS } from "./sandboxPackageManagers.js";
+/**
+ * Resolves explicit allowed domains and package-manager presets into one deduped list.
+ * Expects: allowedDomains entries are hostnames and packageManagers are validated names.
+ */
+export function sandboxAllowedDomainsResolve(allowedDomains, packageManagers) {
+    const next = [];
+    const seen = new Set();
+    for (const entry of allowedDomains ?? []) {
+        const trimmed = entry.trim();
+        if (!trimmed) {
+            throw new Error("allowedDomains entries cannot be blank.");
+        }
+        appendUnique(next, seen, trimmed);
+    }
+    for (const manager of packageManagers ?? []) {
+        const domains = SANDBOX_PACKAGE_MANAGER_DOMAINS[manager];
+        for (const domain of domains) {
+            appendUnique(next, seen, domain);
+        }
+    }
+    return next;
+}
+function appendUnique(next, seen, value) {
+    if (seen.has(value)) {
+        return;
+    }
+    seen.add(value);
+    next.push(value);
+}
+//# sourceMappingURL=sandboxAllowedDomainsResolve.js.map

package/dist/sandbox/sandboxAllowedDomainsResolve.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sandboxAllowedDomainsResolve.js","sourceRoot":"","sources":["../../sources/sandbox/sandboxAllowedDomainsResolve.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,+BAA+B,EAEhC,MAAM,6BAA6B,CAAC;AAErC;;;GAGG;AACH,MAAM,UAAU,4BAA4B,CAC1C,cAAyB,EACzB,eAAyC;IAEzC,MAAM,IAAI,GAAa,EAAE,CAAC;IAC1B,MAAM,IAAI,GAAG,IAAI,GAAG,EAAU,CAAC;IAE/B,KAAK,MAAM,KAAK,IAAI,cAAc,IAAI,EAAE,EAAE,CAAC;QACzC,MAAM,OAAO,GAAG,KAAK,CAAC,IAAI,EAAE,CAAC;QAC7B,IAAI,CAAC,OAAO,EAAE,CAAC;YACb,MAAM,IAAI,KAAK,CAAC,yCAAyC,CAAC,CAAC;QAC7D,CAAC;QACD,YAAY,CAAC,IAAI,EAAE,IAAI,EAAE,OAAO,CAAC,CAAC;IACpC,CAAC;IAED,KAAK,MAAM,OAAO,IAAI,eAAe,IAAI,EAAE,EAAE,CAAC;QAC5C,MAAM,OAAO,GAAG,+BAA+B,CAAC,OAAO,CAAC,CAAC;QACzD,KAAK,MAAM,MAAM,IAAI,OAAO,EAAE,CAAC;YAC7B,YAAY,CAAC,IAAI,EAAE,IAAI,EAAE,MAAM,CAAC,CAAC;QACnC,CAAC;IACH,CAAC;IAED,OAAO,IAAI,CAAC;AACd,CAAC;AAED,SAAS,YAAY,CAAC,IAAc,EAAE,IAAiB,EAAE,KAAa;IACpE,IAAI,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,EAAE,CAAC;QACpB,OAAO;IACT,CAAC;IACD,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;IAChB,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;AACnB,CAAC"}

package/dist/sandbox/sandboxAllowedDomainsResolve.spec.d.ts

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=sandboxAllowedDomainsResolve.spec.d.ts.map

package/dist/sandbox/sandboxAllowedDomainsResolve.spec.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"sandboxAllowedDomainsResolve.spec.d.ts","sourceRoot":"","sources":["../../sources/sandbox/sandboxAllowedDomainsResolve.spec.ts"],"names":[],"mappings":""}

package/dist/sandbox/sandboxAllowedDomainsResolve.spec.js

@@ -0,0 +1,42 @@
+import { describe, expect, it } from "vitest";
+import { sandboxAllowedDomainsResolve } from "./sandboxAllowedDomainsResolve.js";
+describe("sandboxAllowedDomainsResolve", () => {
+    it("expands package manager presets and dedupes domains", () => {
+        const result = sandboxAllowedDomainsResolve(["example.com", "registry.npmjs.org", " example.com "], ["java", "node", "python"]);
+        expect(result).toEqual([
+            "example.com",
+            "registry.npmjs.org",
+            "repo.maven.apache.org",
+            "repo1.maven.org",
+            "plugins.gradle.org",
+            "services.gradle.org",
+            "registry.yarnpkg.com",
+            "repo.yarnpkg.com",
+            "bun.sh",
+            "pypi.org",
+            "files.pythonhosted.org",
+            "pypi.python.org"
+        ]);
+    });
+    it("throws on blank explicit allowedDomains entries", () => {
+        expect(() => sandboxAllowedDomainsResolve(["  "], ["go"]))
+            .toThrow("allowedDomains entries cannot be blank.");
+    });
+    it("expands additional language ecosystems", () => {
+        const result = sandboxAllowedDomainsResolve([], ["rust", "dotnet", "ruby", "php", "dart"]);
+        expect(result).toEqual([
+            "crates.io",
+            "index.crates.io",
+            "static.crates.io",
+            "nuget.org",
+            "api.nuget.org",
+            "globalcdn.nuget.org",
+            "rubygems.org",
+            "packagist.org",
+            "repo.packagist.org",
+            "pub.dev",
+            "storage.googleapis.com"
+        ]);
+    });
+});
+//# sourceMappingURL=sandboxAllowedDomainsResolve.spec.js.map

package/dist/sandbox/sandboxAllowedDomainsResolve.spec.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sandboxAllowedDomainsResolve.spec.js","sourceRoot":"","sources":["../../sources/sandbox/sandboxAllowedDomainsResolve.spec.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,MAAM,EAAE,EAAE,EAAE,MAAM,QAAQ,CAAC;AAE9C,OAAO,EAAE,4BAA4B,EAAE,MAAM,mCAAmC,CAAC;AAEjF,QAAQ,CAAC,8BAA8B,EAAE,GAAG,EAAE;IAC5C,EAAE,CAAC,qDAAqD,EAAE,GAAG,EAAE;QAC7D,MAAM,MAAM,GAAG,4BAA4B,CACzC,CAAC,aAAa,EAAE,oBAAoB,EAAE,eAAe,CAAC,EACtD,CAAC,MAAM,EAAE,MAAM,EAAE,QAAQ,CAAC,CAC3B,CAAC;QAEF,MAAM,CAAC,MAAM,CAAC,CAAC,OAAO,CAAC;YACrB,aAAa;YACb,oBAAoB;YACpB,uBAAuB;YACvB,iBAAiB;YACjB,oBAAoB;YACpB,qBAAqB;YACrB,sBAAsB;YACtB,kBAAkB;YAClB,QAAQ;YACR,UAAU;YACV,wBAAwB;YACxB,iBAAiB;SAClB,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,iDAAiD,EAAE,GAAG,EAAE;QACzD,MAAM,CAAC,GAAG,EAAE,CAAC,4BAA4B,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC,IAAI,CAAC,CAAC,CAAC;aACvD,OAAO,CAAC,yCAAyC,CAAC,CAAC;IACxD,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,wCAAwC,EAAE,GAAG,EAAE;QAChD,MAAM,MAAM,GAAG,4BAA4B,CAAC,EAAE,EAAE,CAAC,MAAM,EAAE,QAAQ,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,CAAC,CAAC,CAAC;QAE3F,MAAM,CAAC,MAAM,CAAC,CAAC,OAAO,CAAC;YACrB,WAAW;YACX,iBAAiB;YACjB,kBAAkB;YAClB,WAAW;YACX,eAAe;YACf,qBAAqB;YACrB,cAAc;YACd,eAAe;YACf,oBAAoB;YACpB,SAAS;YACT,wBAAwB;SACzB,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC"}

package/dist/sandbox/sandboxAllowedDomainsValidate.d.ts

@@ -0,0 +1,6 @@
+/**
+ * Validates sandbox allowedDomains against global wildcard and network permission state.
+ * Expects: allowedDomains is already normalized and deduped.
+ */
+export declare function sandboxAllowedDomainsValidate(allowedDomains: string[], networkAllowed: boolean): string[];
+//# sourceMappingURL=sandboxAllowedDomainsValidate.d.ts.map

package/dist/sandbox/sandboxAllowedDomainsValidate.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"sandboxAllowedDomainsValidate.d.ts","sourceRoot":"","sources":["../../sources/sandbox/sandboxAllowedDomainsValidate.ts"],"names":[],"mappings":"AAAA;;;GAGG;AACH,wBAAgB,6BAA6B,CAC3C,cAAc,EAAE,MAAM,EAAE,EACxB,cAAc,EAAE,OAAO,GACtB,MAAM,EAAE,CASV"}

package/dist/sandbox/sandboxAllowedDomainsValidate.js

@@ -0,0 +1,15 @@
+/**
+ * Validates sandbox allowedDomains against global wildcard and network permission state.
+ * Expects: allowedDomains is already normalized and deduped.
+ */
+export function sandboxAllowedDomainsValidate(allowedDomains, networkAllowed) {
+    const issues = [];
+    if (allowedDomains.includes("*")) {
+        issues.push("Wildcard \"*\" is not allowed in allowedDomains.");
+    }
+    if (allowedDomains.length > 0 && !networkAllowed) {
+        issues.push("Network permission is required to set allowedDomains.");
+    }
+    return issues;
+}
+//# sourceMappingURL=sandboxAllowedDomainsValidate.js.map

package/dist/sandbox/sandboxAllowedDomainsValidate.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sandboxAllowedDomainsValidate.js","sourceRoot":"","sources":["../../sources/sandbox/sandboxAllowedDomainsValidate.ts"],"names":[],"mappings":"AAAA;;;GAGG;AACH,MAAM,UAAU,6BAA6B,CAC3C,cAAwB,EACxB,cAAuB;IAEvB,MAAM,MAAM,GAAa,EAAE,CAAC;IAC5B,IAAI,cAAc,CAAC,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC;QACjC,MAAM,CAAC,IAAI,CAAC,kDAAkD,CAAC,CAAC;IAClE,CAAC;IACD,IAAI,cAAc,CAAC,MAAM,GAAG,CAAC,IAAI,CAAC,cAAc,EAAE,CAAC;QACjD,MAAM,CAAC,IAAI,CAAC,uDAAuD,CAAC,CAAC;IACvE,CAAC;IACD,OAAO,MAAM,CAAC;AAChB,CAAC"}

package/dist/sandbox/sandboxAllowedDomainsValidate.spec.d.ts

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=sandboxAllowedDomainsValidate.spec.d.ts.map

package/dist/sandbox/sandboxAllowedDomainsValidate.spec.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"sandboxAllowedDomainsValidate.spec.d.ts","sourceRoot":"","sources":["../../sources/sandbox/sandboxAllowedDomainsValidate.spec.ts"],"names":[],"mappings":""}

package/dist/sandbox/sandboxAllowedDomainsValidate.spec.js

@@ -0,0 +1,16 @@
+import { describe, expect, it } from "vitest";
+import { sandboxAllowedDomainsValidate } from "./sandboxAllowedDomainsValidate.js";
+describe("sandboxAllowedDomainsValidate", () => {
+    it("rejects wildcard domains", () => {
+        expect(sandboxAllowedDomainsValidate(["*"], true))
+            .toEqual(['Wildcard "*" is not allowed in allowedDomains.']);
+    });
+    it("requires network permission when any domains are present", () => {
+        expect(sandboxAllowedDomainsValidate(["example.com"], false))
+            .toEqual(["Network permission is required to set allowedDomains."]);
+    });
+    it("returns no issues for explicit domains with network permission", () => {
+        expect(sandboxAllowedDomainsValidate(["example.com"], true)).toEqual([]);
+    });
+});
+//# sourceMappingURL=sandboxAllowedDomainsValidate.spec.js.map

package/dist/sandbox/sandboxAllowedDomainsValidate.spec.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sandboxAllowedDomainsValidate.spec.js","sourceRoot":"","sources":["../../sources/sandbox/sandboxAllowedDomainsValidate.spec.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,MAAM,EAAE,EAAE,EAAE,MAAM,QAAQ,CAAC;AAE9C,OAAO,EAAE,6BAA6B,EAAE,MAAM,oCAAoC,CAAC;AAEnF,QAAQ,CAAC,+BAA+B,EAAE,GAAG,EAAE;IAC7C,EAAE,CAAC,0BAA0B,EAAE,GAAG,EAAE;QAClC,MAAM,CAAC,6BAA6B,CAAC,CAAC,GAAG,CAAC,EAAE,IAAI,CAAC,CAAC;aAC/C,OAAO,CAAC,CAAC,gDAAgD,CAAC,CAAC,CAAC;IACjE,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,0DAA0D,EAAE,GAAG,EAAE;QAClE,MAAM,CAAC,6BAA6B,CAAC,CAAC,aAAa,CAAC,EAAE,KAAK,CAAC,CAAC;aAC1D,OAAO,CAAC,CAAC,uDAAuD,CAAC,CAAC,CAAC;IACxE,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,gEAAgE,EAAE,GAAG,EAAE;QACxE,MAAM,CAAC,6BAA6B,CAAC,CAAC,aAAa,CAAC,EAAE,IAAI,CAAC,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC;IAC3E,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC"}

package/dist/sandbox/sandboxCanRead.d.ts

@@ -0,0 +1,7 @@
+import type { SessionPermissions } from "@/types";
+/**
+ * Resolves a read target against the current read allowlist.
+ * Expects: target is an absolute path.
+ */
+export declare function sandboxCanRead(permissions: SessionPermissions, target: string): Promise<string>;
+//# sourceMappingURL=sandboxCanRead.d.ts.map

package/dist/sandbox/sandboxCanRead.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"sandboxCanRead.d.ts","sourceRoot":"","sources":["../../sources/sandbox/sandboxCanRead.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,SAAS,CAAC;AAGlD;;;GAGG;AACH,wBAAsB,cAAc,CAClC,WAAW,EAAE,kBAAkB,EAC/B,MAAM,EAAE,MAAM,GACb,OAAO,CAAC,MAAM,CAAC,CAKjB"}

package/dist/sandbox/sandboxCanRead.js

@@ -0,0 +1,13 @@
+import path from "node:path";
+import { pathResolveSecure } from "../engine/permissions/pathResolveSecure.js";
+/**
+ * Resolves a read target against the current read allowlist.
+ * Expects: target is an absolute path.
+ */
+export async function sandboxCanRead(permissions, target) {
+    // Tool-level reads are always allowed across the filesystem.
+    const allowedDirs = [path.parse(target).root];
+    const result = await pathResolveSecure(allowedDirs, target);
+    return result.realPath;
+}
+//# sourceMappingURL=sandboxCanRead.js.map

package/dist/sandbox/sandboxCanRead.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sandboxCanRead.js","sourceRoot":"","sources":["../../sources/sandbox/sandboxCanRead.ts"],"names":[],"mappings":"AAAA,OAAO,IAAI,MAAM,WAAW,CAAC;AAG7B,OAAO,EAAE,iBAAiB,EAAE,MAAM,4CAA4C,CAAC;AAE/E;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,cAAc,CAClC,WAA+B,EAC/B,MAAc;IAEd,6DAA6D;IAC7D,MAAM,WAAW,GAAG,CAAC,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,CAAC;IAC9C,MAAM,MAAM,GAAG,MAAM,iBAAiB,CAAC,WAAW,EAAE,MAAM,CAAC,CAAC;IAC5D,OAAO,MAAM,CAAC,QAAQ,CAAC;AACzB,CAAC"}

package/dist/sandbox/sandboxCanRead.spec.d.ts

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=sandboxCanRead.spec.d.ts.map

package/dist/sandbox/sandboxCanRead.spec.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"sandboxCanRead.spec.d.ts","sourceRoot":"","sources":["../../sources/sandbox/sandboxCanRead.spec.ts"],"names":[],"mappings":""}

package/dist/sandbox/sandboxCanRead.spec.js

@@ -0,0 +1,44 @@
+import { afterEach, beforeEach, describe, expect, it } from "vitest";
+import { promises as fs } from "node:fs";
+import os from "node:os";
+import path from "node:path";
+import { sandboxCanRead } from "./sandboxCanRead.js";
+describe("sandboxCanRead", () => {
+    let workingDir;
+    let outsideDir;
+    let outsideFile;
+    beforeEach(async () => {
+        workingDir = await fs.mkdtemp(path.join(os.tmpdir(), "sandbox-can-read-workspace-"));
+        outsideDir = await fs.mkdtemp(path.join(os.tmpdir(), "sandbox-can-read-outside-"));
+        outsideFile = path.join(outsideDir, "outside.txt");
+        await fs.writeFile(outsideFile, "outside-content", "utf8");
+    });
+    afterEach(async () => {
+        await fs.rm(workingDir, { recursive: true, force: true });
+        await fs.rm(outsideDir, { recursive: true, force: true });
+    });
+    it("allows reading any absolute path when readDirs is empty", async () => {
+        const permissions = buildPermissions(workingDir, [], []);
+        const result = await sandboxCanRead(permissions, outsideFile);
+        expect(result).toBe(await fs.realpath(outsideFile));
+    });
+    it("allows reading any absolute path when readDirs are configured", async () => {
+        const permissions = buildPermissions(workingDir, [workingDir], []);
+        const result = await sandboxCanRead(permissions, outsideFile);
+        expect(result).toBe(await fs.realpath(outsideFile));
+    });
+    it("ignores write grants for read access checks", async () => {
+        const permissions = buildPermissions(workingDir, [workingDir], [outsideFile]);
+        const result = await sandboxCanRead(permissions, outsideFile);
+        expect(result).toBe(await fs.realpath(outsideFile));
+    });
+});
+function buildPermissions(workingDir, readDirs, writeDirs) {
+    return {
+        workingDir: path.resolve(workingDir),
+        readDirs: readDirs.map((entry) => path.resolve(entry)),
+        writeDirs: writeDirs.map((entry) => path.resolve(entry)),
+        network: false
+    };
+}
+//# sourceMappingURL=sandboxCanRead.spec.js.map

package/dist/sandbox/sandboxCanRead.spec.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sandboxCanRead.spec.js","sourceRoot":"","sources":["../../sources/sandbox/sandboxCanRead.spec.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,SAAS,EAAE,UAAU,EAAE,QAAQ,EAAE,MAAM,EAAE,EAAE,EAAE,MAAM,QAAQ,CAAC;AACrE,OAAO,EAAE,QAAQ,IAAI,EAAE,EAAE,MAAM,SAAS,CAAC;AACzC,OAAO,EAAE,MAAM,SAAS,CAAC;AACzB,OAAO,IAAI,MAAM,WAAW,CAAC;AAG7B,OAAO,EAAE,cAAc,EAAE,MAAM,qBAAqB,CAAC;AAErD,QAAQ,CAAC,gBAAgB,EAAE,GAAG,EAAE;IAC9B,IAAI,UAAkB,CAAC;IACvB,IAAI,UAAkB,CAAC;IACvB,IAAI,WAAmB,CAAC;IAExB,UAAU,CAAC,KAAK,IAAI,EAAE;QACpB,UAAU,GAAG,MAAM,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,MAAM,EAAE,EAAE,6BAA6B,CAAC,CAAC,CAAC;QACrF,UAAU,GAAG,MAAM,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,MAAM,EAAE,EAAE,2BAA2B,CAAC,CAAC,CAAC;QACnF,WAAW,GAAG,IAAI,CAAC,IAAI,CAAC,UAAU,EAAE,aAAa,CAAC,CAAC;QACnD,MAAM,EAAE,CAAC,SAAS,CAAC,WAAW,EAAE,iBAAiB,EAAE,MAAM,CAAC,CAAC;IAC7D,CAAC,CAAC,CAAC;IAEH,SAAS,CAAC,KAAK,IAAI,EAAE;QACnB,MAAM,EAAE,CAAC,EAAE,CAAC,UAAU,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;QAC1D,MAAM,EAAE,CAAC,EAAE,CAAC,UAAU,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;IAC5D,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,yDAAyD,EAAE,KAAK,IAAI,EAAE;QACvE,MAAM,WAAW,GAAG,gBAAgB,CAAC,UAAU,EAAE,EAAE,EAAE,EAAE,CAAC,CAAC;QAEzD,MAAM,MAAM,GAAG,MAAM,cAAc,CAAC,WAAW,EAAE,WAAW,CAAC,CAAC;QAE9D,MAAM,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,WAAW,CAAC,CAAC,CAAC;IACtD,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,+DAA+D,EAAE,KAAK,IAAI,EAAE;QAC7E,MAAM,WAAW,GAAG,gBAAgB,CAAC,UAAU,EAAE,CAAC,UAAU,CAAC,EAAE,EAAE,CAAC,CAAC;QAEnE,MAAM,MAAM,GAAG,MAAM,cAAc,CAAC,WAAW,EAAE,WAAW,CAAC,CAAC;QAE9D,MAAM,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,WAAW,CAAC,CAAC,CAAC;IACtD,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,6CAA6C,EAAE,KAAK,IAAI,EAAE;QAC3D,MAAM,WAAW,GAAG,gBAAgB,CAAC,UAAU,EAAE,CAAC,UAAU,CAAC,EAAE,CAAC,WAAW,CAAC,CAAC,CAAC;QAE9E,MAAM,MAAM,GAAG,MAAM,cAAc,CAAC,WAAW,EAAE,WAAW,CAAC,CAAC;QAE9D,MAAM,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,WAAW,CAAC,CAAC,CAAC;IACtD,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC;AAEH,SAAS,gBAAgB,CACvB,UAAkB,EAClB,QAAkB,EAClB,SAAmB;IAEnB,OAAO;QACL,UAAU,EAAE,IAAI,CAAC,OAAO,CAAC,UAAU,CAAC;QACpC,QAAQ,EAAE,QAAQ,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;QACtD,SAAS,EAAE,SAAS,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;QACxD,OAAO,EAAE,KAAK;KACf,CAAC;AACJ,CAAC"}

package/dist/sandbox/sandboxCanWrite.d.ts

@@ -0,0 +1,7 @@
+import type { SessionPermissions } from "@/types";
+/**
+ * Resolves a write target against the current write allowlist.
+ * Expects: target is an absolute path.
+ */
+export declare function sandboxCanWrite(permissions: SessionPermissions, target: string): Promise<string>;
+//# sourceMappingURL=sandboxCanWrite.d.ts.map

package/dist/sandbox/sandboxCanWrite.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"sandboxCanWrite.d.ts","sourceRoot":"","sources":["../../sources/sandbox/sandboxCanWrite.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,SAAS,CAAC;AAGlD;;;GAGG;AACH,wBAAsB,eAAe,CACnC,WAAW,EAAE,kBAAkB,EAC/B,MAAM,EAAE,MAAM,GACb,OAAO,CAAC,MAAM,CAAC,CAIjB"}

package/dist/sandbox/sandboxCanWrite.js

@@ -0,0 +1,11 @@
+import { pathResolveSecure } from "../engine/permissions/pathResolveSecure.js";
+/**
+ * Resolves a write target against the current write allowlist.
+ * Expects: target is an absolute path.
+ */
+export async function sandboxCanWrite(permissions, target) {
+    const allowedDirs = [...permissions.writeDirs];
+    const result = await pathResolveSecure(allowedDirs, target);
+    return result.realPath;
+}
+//# sourceMappingURL=sandboxCanWrite.js.map

package/dist/sandbox/sandboxCanWrite.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sandboxCanWrite.js","sourceRoot":"","sources":["../../sources/sandbox/sandboxCanWrite.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,iBAAiB,EAAE,MAAM,4CAA4C,CAAC;AAE/E;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,eAAe,CACnC,WAA+B,EAC/B,MAAc;IAEd,MAAM,WAAW,GAAG,CAAC,GAAG,WAAW,CAAC,SAAS,CAAC,CAAC;IAC/C,MAAM,MAAM,GAAG,MAAM,iBAAiB,CAAC,WAAW,EAAE,MAAM,CAAC,CAAC;IAC5D,OAAO,MAAM,CAAC,QAAQ,CAAC;AACzB,CAAC"}

package/dist/sandbox/sandboxCanWrite.spec.d.ts

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=sandboxCanWrite.spec.d.ts.map

package/dist/sandbox/sandboxCanWrite.spec.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"sandboxCanWrite.spec.d.ts","sourceRoot":"","sources":["../../sources/sandbox/sandboxCanWrite.spec.ts"],"names":[],"mappings":""}

package/dist/sandbox/sandboxCanWrite.spec.js

@@ -0,0 +1,52 @@
+import { afterEach, beforeEach, describe, expect, it } from "vitest";
+import { promises as fs } from "node:fs";
+import os from "node:os";
+import path from "node:path";
+import { sandboxCanWrite } from "./sandboxCanWrite.js";
+describe("sandboxCanWrite", () => {
+    let workingDir;
+    let outsideDir;
+    beforeEach(async () => {
+        workingDir = await fs.mkdtemp(path.join(os.tmpdir(), "sandbox-can-write-workspace-"));
+        outsideDir = await fs.mkdtemp(path.join(os.tmpdir(), "sandbox-can-write-outside-"));
+    });
+    afterEach(async () => {
+        await fs.rm(workingDir, { recursive: true, force: true });
+        await fs.rm(outsideDir, { recursive: true, force: true });
+    });
+    it("rejects writing within the workspace when not explicitly granted", async () => {
+        const permissions = buildPermissions(workingDir, []);
+        const target = path.join(workingDir, "nested", "output.txt");
+        await expect(sandboxCanWrite(permissions, target))
+            .rejects
+            .toThrow("Path is outside the allowed directories.");
+    });
+    it("allows writing within explicitly granted write directories", async () => {
+        const permissions = buildPermissions(workingDir, [outsideDir]);
+        const target = path.join(outsideDir, "output.txt");
+        const result = await sandboxCanWrite(permissions, target);
+        expect(result).toBe(path.join(await fs.realpath(outsideDir), "output.txt"));
+    });
+    it("allows writing in workspace when workspace is explicitly granted", async () => {
+        const permissions = buildPermissions(workingDir, [workingDir]);
+        const target = path.join(workingDir, "nested", "output.txt");
+        const result = await sandboxCanWrite(permissions, target);
+        expect(result).toBe(path.join(await fs.realpath(workingDir), "nested", "output.txt"));
+    });
+    it("rejects paths outside the write allowlist", async () => {
+        const permissions = buildPermissions(workingDir, []);
+        const target = path.join(outsideDir, "blocked.txt");
+        await expect(sandboxCanWrite(permissions, target))
+            .rejects
+            .toThrow("Path is outside the allowed directories.");
+    });
+});
+function buildPermissions(workingDir, writeDirs) {
+    return {
+        workingDir: path.resolve(workingDir),
+        readDirs: [],
+        writeDirs: writeDirs.map((entry) => path.resolve(entry)),
+        network: false
+    };
+}
+//# sourceMappingURL=sandboxCanWrite.spec.js.map

package/dist/sandbox/sandboxCanWrite.spec.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sandboxCanWrite.spec.js","sourceRoot":"","sources":["../../sources/sandbox/sandboxCanWrite.spec.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,SAAS,EAAE,UAAU,EAAE,QAAQ,EAAE,MAAM,EAAE,EAAE,EAAE,MAAM,QAAQ,CAAC;AACrE,OAAO,EAAE,QAAQ,IAAI,EAAE,EAAE,MAAM,SAAS,CAAC;AACzC,OAAO,EAAE,MAAM,SAAS,CAAC;AACzB,OAAO,IAAI,MAAM,WAAW,CAAC;AAG7B,OAAO,EAAE,eAAe,EAAE,MAAM,sBAAsB,CAAC;AAEvD,QAAQ,CAAC,iBAAiB,EAAE,GAAG,EAAE;IAC/B,IAAI,UAAkB,CAAC;IACvB,IAAI,UAAkB,CAAC;IAEvB,UAAU,CAAC,KAAK,IAAI,EAAE;QACpB,UAAU,GAAG,MAAM,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,MAAM,EAAE,EAAE,8BAA8B,CAAC,CAAC,CAAC;QACtF,UAAU,GAAG,MAAM,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,MAAM,EAAE,EAAE,4BAA4B,CAAC,CAAC,CAAC;IACtF,CAAC,CAAC,CAAC;IAEH,SAAS,CAAC,KAAK,IAAI,EAAE;QACnB,MAAM,EAAE,CAAC,EAAE,CAAC,UAAU,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;QAC1D,MAAM,EAAE,CAAC,EAAE,CAAC,UAAU,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;IAC5D,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,kEAAkE,EAAE,KAAK,IAAI,EAAE;QAChF,MAAM,WAAW,GAAG,gBAAgB,CAAC,UAAU,EAAE,EAAE,CAAC,CAAC;QACrD,MAAM,MAAM,GAAG,IAAI,CAAC,IAAI,CAAC,UAAU,EAAE,QAAQ,EAAE,YAAY,CAAC,CAAC;QAE7D,MAAM,MAAM,CAAC,eAAe,CAAC,WAAW,EAAE,MAAM,CAAC,CAAC;aAC/C,OAAO;aACP,OAAO,CAAC,0CAA0C,CAAC,CAAC;IACzD,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,4DAA4D,EAAE,KAAK,IAAI,EAAE;QAC1E,MAAM,WAAW,GAAG,gBAAgB,CAAC,UAAU,EAAE,CAAC,UAAU,CAAC,CAAC,CAAC;QAC/D,MAAM,MAAM,GAAG,IAAI,CAAC,IAAI,CAAC,UAAU,EAAE,YAAY,CAAC,CAAC;QAEnD,MAAM,MAAM,GAAG,MAAM,eAAe,CAAC,WAAW,EAAE,MAAM,CAAC,CAAC;QAE1D,MAAM,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,UAAU,CAAC,EAAE,YAAY,CAAC,CAAC,CAAC;IAC9E,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,kEAAkE,EAAE,KAAK,IAAI,EAAE;QAChF,MAAM,WAAW,GAAG,gBAAgB,CAAC,UAAU,EAAE,CAAC,UAAU,CAAC,CAAC,CAAC;QAC/D,MAAM,MAAM,GAAG,IAAI,CAAC,IAAI,CAAC,UAAU,EAAE,QAAQ,EAAE,YAAY,CAAC,CAAC;QAE7D,MAAM,MAAM,GAAG,MAAM,eAAe,CAAC,WAAW,EAAE,MAAM,CAAC,CAAC;QAE1D,MAAM,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,UAAU,CAAC,EAAE,QAAQ,EAAE,YAAY,CAAC,CAAC,CAAC;IACxF,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,2CAA2C,EAAE,KAAK,IAAI,EAAE;QACzD,MAAM,WAAW,GAAG,gBAAgB,CAAC,UAAU,EAAE,EAAE,CAAC,CAAC;QACrD,MAAM,MAAM,GAAG,IAAI,CAAC,IAAI,CAAC,UAAU,EAAE,aAAa,CAAC,CAAC;QAEpD,MAAM,MAAM,CAAC,eAAe,CAAC,WAAW,EAAE,MAAM,CAAC,CAAC;aAC/C,OAAO;aACP,OAAO,CAAC,0CAA0C,CAAC,CAAC;IACzD,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC;AAEH,SAAS,gBAAgB,CAAC,UAAkB,EAAE,SAAmB;IAC/D,OAAO;QACL,UAAU,EAAE,IAAI,CAAC,OAAO,CAAC,UAAU,CAAC;QACpC,QAAQ,EAAE,EAAE;QACZ,SAAS,EAAE,SAAS,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;QACxD,OAAO,EAAE,KAAK;KACf,CAAC;AACJ,CAAC"}

package/dist/sandbox/sandboxFilesystemPolicyBuild.d.ts

@@ -0,0 +1,18 @@
+import type { SessionPermissions } from "@/types";
+type SandboxFilesystemPolicyBuildInput = {
+    permissions: SessionPermissions;
+    homeDir?: string;
+    platform?: NodeJS.Platform;
+};
+type SandboxFilesystemPolicy = {
+    denyRead: string[];
+    allowWrite: string[];
+    denyWrite: string[];
+};
+/**
+ * Builds sandbox filesystem policy with a default sensitive-path deny list.
+ * Expects: permissions paths are already absolute and normalized.
+ */
+export declare function sandboxFilesystemPolicyBuild(input: SandboxFilesystemPolicyBuildInput): SandboxFilesystemPolicy;
+export {};
+//# sourceMappingURL=sandboxFilesystemPolicyBuild.d.ts.map

package/dist/sandbox/sandboxFilesystemPolicyBuild.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"sandboxFilesystemPolicyBuild.d.ts","sourceRoot":"","sources":["../../sources/sandbox/sandboxFilesystemPolicyBuild.ts"],"names":[],"mappings":"AAGA,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,SAAS,CAAC;AA4ClD,KAAK,iCAAiC,GAAG;IACvC,WAAW,EAAE,kBAAkB,CAAC;IAChC,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,QAAQ,CAAC,EAAE,MAAM,CAAC,QAAQ,CAAC;CAC5B,CAAC;AAEF,KAAK,uBAAuB,GAAG;IAC7B,QAAQ,EAAE,MAAM,EAAE,CAAC;IACnB,UAAU,EAAE,MAAM,EAAE,CAAC;IACrB,SAAS,EAAE,MAAM,EAAE,CAAC;CACrB,CAAC;AAEF;;;GAGG;AACH,wBAAgB,4BAA4B,CAC1C,KAAK,EAAE,iCAAiC,GACvC,uBAAuB,CAkCzB"}

package/dist/sandbox/sandboxFilesystemPolicyBuild.js

@@ -0,0 +1,79 @@
+import os from "node:os";
+import path from "node:path";
+const COMMON_HOME_RELATIVE_DENY_PATHS = [
+    ".ssh",
+    ".gnupg",
+    ".aws",
+    ".kube",
+    ".docker",
+    ".config/gcloud",
+    ".config/gh",
+    ".config/op",
+    ".config/1Password",
+    ".local/share/keyrings",
+    ".npmrc",
+    ".pypirc",
+    ".netrc",
+    ".git-credentials"
+];
+const COMMON_SYSTEM_DENY_PATHS = [
+    "/etc/ssh",
+    "/etc/sudoers",
+    "/etc/sudoers.d",
+    "/etc/shadow",
+    "/etc/gshadow",
+    "/etc/ssl/private"
+];
+const DARWIN_HOME_RELATIVE_DENY_PATHS = [
+    "Library/Keychains",
+    "Library/Application Support/iCloud",
+    "Library/Application Support/com.apple.TCC",
+    "Library/Group Containers"
+];
+const DARWIN_SYSTEM_DENY_PATHS = [
+    "/private/etc/ssh",
+    "/private/etc/sudoers",
+    "/private/etc/sudoers.d",
+    "/private/etc/master.passwd"
+];
+const LINUX_SYSTEM_DENY_PATHS = ["/root/.ssh"];
+/**
+ * Builds sandbox filesystem policy with a default sensitive-path deny list.
+ * Expects: permissions paths are already absolute and normalized.
+ */
+export function sandboxFilesystemPolicyBuild(input) {
+    const platform = input.platform ?? process.platform;
+    const homeDir = path.resolve(input.homeDir ?? os.homedir());
+    const allowWrite = dedupeResolvedPaths([
+        ...input.permissions.writeDirs
+    ]);
+    const homeDeny = COMMON_HOME_RELATIVE_DENY_PATHS.map((entry) => path.resolve(homeDir, entry));
+    const platformHomeDeny = platform === "darwin"
+        ? DARWIN_HOME_RELATIVE_DENY_PATHS.map((entry) => path.resolve(homeDir, entry))
+        : [];
+    const platformSystemDeny = platform === "darwin"
+        ? DARWIN_SYSTEM_DENY_PATHS
+        : platform === "linux"
+            ? LINUX_SYSTEM_DENY_PATHS
+            : [];
+    const denyRead = dedupeResolvedPaths([
+        ...homeDeny,
+        ...platformHomeDeny,
+        ...COMMON_SYSTEM_DENY_PATHS,
+        ...platformSystemDeny
+    ]);
+    return {
+        denyRead,
+        allowWrite,
+        // Keep read/write denials aligned to prevent both data exfiltration and tampering.
+        denyWrite: [...denyRead]
+    };
+}
+function dedupeResolvedPaths(values) {
+    const resolved = values
+        .map((entry) => entry.trim())
+        .filter((entry) => entry.length > 0)
+        .map((entry) => path.resolve(entry));
+    return Array.from(new Set(resolved));
+}
+//# sourceMappingURL=sandboxFilesystemPolicyBuild.js.map

package/dist/sandbox/sandboxFilesystemPolicyBuild.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sandboxFilesystemPolicyBuild.js","sourceRoot":"","sources":["../../sources/sandbox/sandboxFilesystemPolicyBuild.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,SAAS,CAAC;AACzB,OAAO,IAAI,MAAM,WAAW,CAAC;AAI7B,MAAM,+BAA+B,GAAG;IACtC,MAAM;IACN,QAAQ;IACR,MAAM;IACN,OAAO;IACP,SAAS;IACT,gBAAgB;IAChB,YAAY;IACZ,YAAY;IACZ,mBAAmB;IACnB,uBAAuB;IACvB,QAAQ;IACR,SAAS;IACT,QAAQ;IACR,kBAAkB;CACnB,CAAC;AAEF,MAAM,wBAAwB,GAAG;IAC/B,UAAU;IACV,cAAc;IACd,gBAAgB;IAChB,aAAa;IACb,cAAc;IACd,kBAAkB;CACnB,CAAC;AAEF,MAAM,+BAA+B,GAAG;IACtC,mBAAmB;IACnB,oCAAoC;IACpC,2CAA2C;IAC3C,0BAA0B;CAC3B,CAAC;AAEF,MAAM,wBAAwB,GAAG;IAC/B,kBAAkB;IAClB,sBAAsB;IACtB,wBAAwB;IACxB,4BAA4B;CAC7B,CAAC;AAEF,MAAM,uBAAuB,GAAG,CAAC,YAAY,CAAC,CAAC;AAc/C;;;GAGG;AACH,MAAM,UAAU,4BAA4B,CAC1C,KAAwC;IAExC,MAAM,QAAQ,GAAG,KAAK,CAAC,QAAQ,IAAI,OAAO,CAAC,QAAQ,CAAC;IACpD,MAAM,OAAO,GAAG,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,OAAO,IAAI,EAAE,CAAC,OAAO,EAAE,CAAC,CAAC;IAE5D,MAAM,UAAU,GAAG,mBAAmB,CAAC;QACrC,GAAG,KAAK,CAAC,WAAW,CAAC,SAAS;KAC/B,CAAC,CAAC;IAEH,MAAM,QAAQ,GAAG,+BAA+B,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAC7D,IAAI,CAAC,OAAO,CAAC,OAAO,EAAE,KAAK,CAAC,CAC7B,CAAC;IACF,MAAM,gBAAgB,GACpB,QAAQ,KAAK,QAAQ;QACnB,CAAC,CAAC,+BAA+B,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,IAAI,CAAC,OAAO,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC;QAC9E,CAAC,CAAC,EAAE,CAAC;IACT,MAAM,kBAAkB,GAAG,QAAQ,KAAK,QAAQ;QAC9C,CAAC,CAAC,wBAAwB;QAC1B,CAAC,CAAC,QAAQ,KAAK,OAAO;YACpB,CAAC,CAAC,uBAAuB;YACzB,CAAC,CAAC,EAAE,CAAC;IAET,MAAM,QAAQ,GAAG,mBAAmB,CAAC;QACnC,GAAG,QAAQ;QACX,GAAG,gBAAgB;QACnB,GAAG,wBAAwB;QAC3B,GAAG,kBAAkB;KACtB,CAAC,CAAC;IAEH,OAAO;QACL,QAAQ;QACR,UAAU;QACV,mFAAmF;QACnF,SAAS,EAAE,CAAC,GAAG,QAAQ,CAAC;KACzB,CAAC;AACJ,CAAC;AAED,SAAS,mBAAmB,CAAC,MAAgB;IAC3C,MAAM,QAAQ,GAAG,MAAM;SACpB,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC;SAC5B,MAAM,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,MAAM,GAAG,CAAC,CAAC;SACnC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC;IACvC,OAAO,KAAK,CAAC,IAAI,CAAC,IAAI,GAAG,CAAC,QAAQ,CAAC,CAAC,CAAC;AACvC,CAAC"}

package/dist/sandbox/sandboxFilesystemPolicyBuild.spec.d.ts

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=sandboxFilesystemPolicyBuild.spec.d.ts.map

package/dist/sandbox/sandboxFilesystemPolicyBuild.spec.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"sandboxFilesystemPolicyBuild.spec.d.ts","sourceRoot":"","sources":["../../sources/sandbox/sandboxFilesystemPolicyBuild.spec.ts"],"names":[],"mappings":""}

package/dist/sandbox/sandboxFilesystemPolicyBuild.spec.js

@@ -0,0 +1,52 @@
+import { describe, expect, it } from "vitest";
+import path from "node:path";
+import { sandboxFilesystemPolicyBuild } from "./sandboxFilesystemPolicyBuild.js";
+function basePermissions() {
+    return {
+        workingDir: path.resolve("/workspace"),
+        writeDirs: [path.resolve("/workspace/tmp"), path.resolve("/workspace/tmp")],
+        readDirs: [],
+        network: false
+    };
+}
+describe("sandboxFilesystemPolicyBuild", () => {
+    it("dedupes writable paths", () => {
+        const result = sandboxFilesystemPolicyBuild({
+            permissions: basePermissions(),
+            platform: "linux",
+            homeDir: "/home/alice"
+        });
+        expect(result.allowWrite).toEqual([path.resolve("/workspace/tmp")]);
+    });
+    it("adds linux sensitive deny paths to read and write", () => {
+        const result = sandboxFilesystemPolicyBuild({
+            permissions: basePermissions(),
+            platform: "linux",
+            homeDir: "/home/alice"
+        });
+        expect(result.denyRead).toEqual(expect.arrayContaining([
+            path.resolve("/home/alice/.ssh"),
+            path.resolve("/home/alice/.gnupg"),
+            path.resolve("/home/alice/.aws"),
+            path.resolve("/etc/ssh"),
+            path.resolve("/etc/ssl/private"),
+            path.resolve("/root/.ssh")
+        ]));
+        expect(result.denyWrite).toEqual(result.denyRead);
+    });
+    it("adds macOS sensitive deny paths to read and write", () => {
+        const result = sandboxFilesystemPolicyBuild({
+            permissions: basePermissions(),
+            platform: "darwin",
+            homeDir: "/Users/alice"
+        });
+        expect(result.denyRead).toEqual(expect.arrayContaining([
+            path.resolve("/Users/alice/.ssh"),
+            path.resolve("/Users/alice/Library/Keychains"),
+            path.resolve("/Users/alice/Library/Application Support/com.apple.TCC"),
+            path.resolve("/private/etc/ssh")
+        ]));
+        expect(result.denyWrite).toEqual(result.denyRead);
+    });
+});
+//# sourceMappingURL=sandboxFilesystemPolicyBuild.spec.js.map

package/dist/sandbox/sandboxFilesystemPolicyBuild.spec.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sandboxFilesystemPolicyBuild.spec.js","sourceRoot":"","sources":["../../sources/sandbox/sandboxFilesystemPolicyBuild.spec.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,MAAM,EAAE,EAAE,EAAE,MAAM,QAAQ,CAAC;AAC9C,OAAO,IAAI,MAAM,WAAW,CAAC;AAG7B,OAAO,EAAE,4BAA4B,EAAE,MAAM,mCAAmC,CAAC;AAEjF,SAAS,eAAe;IACtB,OAAO;QACL,UAAU,EAAE,IAAI,CAAC,OAAO,CAAC,YAAY,CAAC;QACtC,SAAS,EAAE,CAAC,IAAI,CAAC,OAAO,CAAC,gBAAgB,CAAC,EAAE,IAAI,CAAC,OAAO,CAAC,gBAAgB,CAAC,CAAC;QAC3E,QAAQ,EAAE,EAAE;QACZ,OAAO,EAAE,KAAK;KACf,CAAC;AACJ,CAAC;AAED,QAAQ,CAAC,8BAA8B,EAAE,GAAG,EAAE;IAC5C,EAAE,CAAC,wBAAwB,EAAE,GAAG,EAAE;QAChC,MAAM,MAAM,GAAG,4BAA4B,CAAC;YAC1C,WAAW,EAAE,eAAe,EAAE;YAC9B,QAAQ,EAAE,OAAO;YACjB,OAAO,EAAE,aAAa;SACvB,CAAC,CAAC;QAEH,MAAM,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,gBAAgB,CAAC,CAAC,CAAC,CAAC;IACtE,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,mDAAmD,EAAE,GAAG,EAAE;QAC3D,MAAM,MAAM,GAAG,4BAA4B,CAAC;YAC1C,WAAW,EAAE,eAAe,EAAE;YAC9B,QAAQ,EAAE,OAAO;YACjB,OAAO,EAAE,aAAa;SACvB,CAAC,CAAC;QAEH,MAAM,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,OAAO,CAC7B,MAAM,CAAC,eAAe,CAAC;YACrB,IAAI,CAAC,OAAO,CAAC,kBAAkB,CAAC;YAChC,IAAI,CAAC,OAAO,CAAC,oBAAoB,CAAC;YAClC,IAAI,CAAC,OAAO,CAAC,kBAAkB,CAAC;YAChC,IAAI,CAAC,OAAO,CAAC,UAAU,CAAC;YACxB,IAAI,CAAC,OAAO,CAAC,kBAAkB,CAAC;YAChC,IAAI,CAAC,OAAO,CAAC,YAAY,CAAC;SAC3B,CAAC,CACH,CAAC;QACF,MAAM,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC,OAAO,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;IACpD,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,mDAAmD,EAAE,GAAG,EAAE;QAC3D,MAAM,MAAM,GAAG,4BAA4B,CAAC;YAC1C,WAAW,EAAE,eAAe,EAAE;YAC9B,QAAQ,EAAE,QAAQ;YAClB,OAAO,EAAE,cAAc;SACxB,CAAC,CAAC;QAEH,MAAM,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,OAAO,CAC7B,MAAM,CAAC,eAAe,CAAC;YACrB,IAAI,CAAC,OAAO,CAAC,mBAAmB,CAAC;YACjC,IAAI,CAAC,OAAO,CAAC,gCAAgC,CAAC;YAC9C,IAAI,CAAC,OAAO,CAAC,wDAAwD,CAAC;YACtE,IAAI,CAAC,OAAO,CAAC,kBAAkB,CAAC;SACjC,CAAC,CACH,CAAC;QACF,MAAM,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC,OAAO,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;IACpD,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC"}