mstro-app 0.4.20 → 0.4.22

package/dist/server/services/deploy/board-execution-handler.d.ts

@@ -0,0 +1,114 @@
+/**
+ * Sanitize an end-user prompt before passing it to the AI.
+ *
+ * SECURITY: End-user prompts are untrusted. This function:
+ * 1. Strips system instruction XML delimiters to prevent prompt escape
+ * 2. Removes null bytes and zero-width characters used for evasion
+ * 3. Truncates to MAX_END_USER_PROMPT_LENGTH
+ *
+ * Note: This does NOT strip tool-use instructions or path traversal text —
+ * those are handled by the Security Bouncer (tool execution level) and
+ * the isolated working directory (filesystem level).
+ */
+export declare function sanitizeEndUserPrompt(prompt: string): string;
+export interface BoardExecutionRequest {
+    /** Board template to execute (must be in deployment's allowedBoardTemplateIds) */
+    boardTemplateId: string;
+    /** The end user's prompt (untrusted input) */
+    endUserPrompt: string;
+    /** Unique identifier for the end user (for isolation + rate tracking) */
+    endUserId: string;
+    /** Deployment that owns this execution */
+    deploymentId: string;
+}
+export interface BoardExecutionConfig {
+    deploymentId: string;
+    aiEnabled: boolean;
+    allowedAiCapabilities: string[];
+    /** Board template IDs this deployment is allowed to execute */
+    allowedBoardTemplateIds: string[];
+    /** Max concurrent board executions per deployment */
+    maxConcurrentBoardExecutions: number;
+    /** Max board executions per minute (null = unlimited) */
+    maxBoardExecutionsPerMinute: number | null;
+    defaultModel: string;
+    workingDir: string;
+}
+export type BoardExecutionErrorCode = 'CAPABILITY_DENIED' | 'AI_DISABLED' | 'INVALID_BOARD_TEMPLATE' | 'BOARD_TEMPLATE_NOT_FOUND' | 'RATE_LIMIT_EXCEEDED' | 'CONCURRENT_LIMIT_EXCEEDED' | 'INVALID_REQUEST' | 'EXECUTION_FAILED';
+export interface BoardExecutionError {
+    code: BoardExecutionErrorCode;
+    message: string;
+}
+export type BoardExecutionJobStatus = 'customizing' | 'executing' | 'completed' | 'failed' | 'cancelled';
+export interface BoardExecutionProgress {
+    phase: 'isolating' | 'customizing' | 'executing' | 'collecting' | 'done';
+    issuesTotal: number;
+    issuesCompleted: number;
+    currentWaveIds: string[];
+}
+export interface BoardExecutionJobResult {
+    completed: boolean;
+    issuesTotal: number;
+    issuesCompleted: number;
+    issuesFailed: number;
+    /** Output artifact contents keyed by filename */
+    outputs: Record<string, string>;
+    durationMs: number;
+}
+export interface BoardExecutionStatusResult {
+    jobId: string;
+    status: BoardExecutionJobStatus;
+    progress: BoardExecutionProgress;
+    result: BoardExecutionJobResult | null;
+    error: string | null;
+}
+export type StartBoardExecutionResult = {
+    ok: true;
+    jobId: string;
+} | {
+    ok: false;
+    error: BoardExecutionError;
+};
+/**
+ * Start a board execution for an end user. Returns a job ID immediately.
+ * The execution runs asynchronously — poll with getBoardExecutionStatus().
+ *
+ * Validates the deployment config, checks rate limits, verifies the board
+ * template exists and is allowed, then launches the background execution.
+ *
+ * @returns Structured result with either the job ID or an error.
+ */
+export declare function startBoardExecution(request: BoardExecutionRequest, config: BoardExecutionConfig): StartBoardExecutionResult;
+/**
+ * Get the current status of a board execution job.
+ *
+ * Optionally pass endUserId to enforce isolation — returns null if the
+ * job belongs to a different end user.
+ *
+ * @returns Job status or null if not found / access denied.
+ */
+export declare function getBoardExecutionStatus(jobId: string, endUserId?: string): BoardExecutionStatusResult | null;
+/**
+ * Get the current rate limit state for a deployment's board executions.
+ * Useful for status/monitoring endpoints.
+ */
+export declare function getDeploymentBoardExecutionState(deploymentId: string): {
+    executionsInLastMinute: number;
+    activeExecutions: number;
+};
+/**
+ * Reset rate limit state for a deployment's board executions.
+ * Call when a deployment is deleted.
+ */
+export declare function resetDeploymentBoardExecutionRateLimit(deploymentId: string): void;
+/**
+ * Sweep stale isolated directories left behind by crashed executions.
+ *
+ * Board execution creates temp dirs prefixed with 'mstro-board-exec-'.
+ * If the process crashes before cleanup, these dirs leak. This function
+ * removes any that are older than the retention window + buffer.
+ *
+ * Safe to call on startup or periodically.
+ */
+export declare function sweepStaleIsolatedDirs(): number;
+//# sourceMappingURL=board-execution-handler.d.ts.map

package/dist/server/services/deploy/board-execution-handler.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"board-execution-handler.d.ts","sourceRoot":"","sources":["../../../../server/services/deploy/board-execution-handler.ts"],"names":[],"mappings":"AA2CA;;;;;;;;;;;GAWG;AACH,wBAAgB,qBAAqB,CAAC,MAAM,EAAE,MAAM,GAAG,MAAM,CAoB5D;AAID,MAAM,WAAW,qBAAqB;IACpC,kFAAkF;IAClF,eAAe,EAAE,MAAM,CAAC;IACxB,8CAA8C;IAC9C,aAAa,EAAE,MAAM,CAAC;IACtB,yEAAyE;IACzE,SAAS,EAAE,MAAM,CAAC;IAClB,0CAA0C;IAC1C,YAAY,EAAE,MAAM,CAAC;CACtB;AAED,MAAM,WAAW,oBAAoB;IACnC,YAAY,EAAE,MAAM,CAAC;IACrB,SAAS,EAAE,OAAO,CAAC;IACnB,qBAAqB,EAAE,MAAM,EAAE,CAAC;IAChC,+DAA+D;IAC/D,uBAAuB,EAAE,MAAM,EAAE,CAAC;IAClC,qDAAqD;IACrD,4BAA4B,EAAE,MAAM,CAAC;IACrC,yDAAyD;IACzD,2BAA2B,EAAE,MAAM,GAAG,IAAI,CAAC;IAC3C,YAAY,EAAE,MAAM,CAAC;IACrB,UAAU,EAAE,MAAM,CAAC;CACpB;AAED,MAAM,MAAM,uBAAuB,GAC/B,mBAAmB,GACnB,aAAa,GACb,wBAAwB,GACxB,0BAA0B,GAC1B,qBAAqB,GACrB,2BAA2B,GAC3B,iBAAiB,GACjB,kBAAkB,CAAC;AAEvB,MAAM,WAAW,mBAAmB;IAClC,IAAI,EAAE,uBAAuB,CAAC;IAC9B,OAAO,EAAE,MAAM,CAAC;CACjB;AAED,MAAM,MAAM,uBAAuB,GAC/B,aAAa,GACb,WAAW,GACX,WAAW,GACX,QAAQ,GACR,WAAW,CAAC;AAEhB,MAAM,WAAW,sBAAsB;IACrC,KAAK,EAAE,WAAW,GAAG,aAAa,GAAG,WAAW,GAAG,YAAY,GAAG,MAAM,CAAC;IACzE,WAAW,EAAE,MAAM,CAAC;IACpB,eAAe,EAAE,MAAM,CAAC;IACxB,cAAc,EAAE,MAAM,EAAE,CAAC;CAC1B;AAED,MAAM,WAAW,uBAAuB;IACtC,SAAS,EAAE,OAAO,CAAC;IACnB,WAAW,EAAE,MAAM,CAAC;IACpB,eAAe,EAAE,MAAM,CAAC;IACxB,YAAY,EAAE,MAAM,CAAC;IACrB,iDAAiD;IACjD,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAChC,UAAU,EAAE,MAAM,CAAC;CACpB;AAED,MAAM,WAAW,0BAA0B;IACzC,KAAK,EAAE,MAAM,CAAC;IACd,MAAM,EAAE,uBAAuB,CAAC;IAChC,QAAQ,EAAE,sBAAsB,CAAC;IACjC,MAAM,EAAE,uBAAuB,GAAG,IAAI,CAAC;IACvC,KAAK,EAAE,MAAM,GAAG,IAAI,CAAC;CACtB;AAED,MAAM,MAAM,yBAAyB,GACjC;IAAE,EAAE,EAAE,IAAI,CAAC;IAAC,KAAK,EAAE,MAAM,CAAA;CAAE,GAC3B;IAAE,EAAE,EAAE,KAAK,CAAC;IAAC,KAAK,EAAE,mBAAmB,CAAA;CAAE,CAAC;AAsd9C;;;;;;;;GAQG;AACH,wBAAgB,mBAAmB,CACjC,OAAO,EAAE,qBAAqB,EAC9B,MAAM,EAAE,oBAAoB,GAC3B,yBAAyB,CAkH3B;AAED;;;;;;;GAOG;AACH,wBAAgB,uBAAuB,CACrC,KAAK,EAAE,MAAM,EACb,SAAS,CAAC,EAAE,MAAM,GACjB,0BAA0B,GAAG,IAAI,CAgBnC;AAED;;;GAGG;AACH,wBAAgB,gCAAgC,CAAC,YAAY,EAAE,MAAM,GAAG;IACtE,sBAAsB,EAAE,MAAM,CAAC;IAC/B,gBAAgB,EAAE,MAAM,CAAC;CAC1B,CAOA;AAED;;;GAGG;AACH,wBAAgB,sCAAsC,CACpD,YAAY,EAAE,MAAM,GACnB,IAAI,CAEN;AAED;;;;;;;;GAQG;AACH,wBAAgB,sBAAsB,IAAI,MAAM,CA+B/C"}