mtech-ai-local-runner 0.1.8 → 0.1.9

package/dist/src/safety/subprocess-sandbox.js

@@ -0,0 +1,62 @@
+import { spawn } from 'node:child_process';
+import { realpathSync } from 'node:fs';
+import path from 'node:path';
+const quote = (value) => JSON.stringify(value);
+/** Deny-default Seatbelt profile. No inherited profile, environment or shell. */
+export function sandboxProfile(request) {
+    const executable = realpathSync(request.executable);
+    const directories = new Set(['/']);
+    for (const file of [executable, ...request.readFiles, ...request.writeFiles ?? []]) {
+        let directory = path.dirname(file);
+        while (directory !== '/') {
+            directories.add(directory);
+            directory = path.dirname(directory);
+        }
+    }
+    const read = [...directories, ...request.readFiles, executable, '/dev/null', '/dev/random', '/dev/urandom'].map(file => `(literal ${quote(file)})`).join(' ');
+    const write = (request.writeFiles ?? []).map(file => `(literal ${quote(file)})`).join(' ');
+    return `(version 1)(deny default)(allow process-exec (literal ${quote(executable)}))(allow sysctl-read)(allow file-read-metadata)(allow file-map-executable (subpath "/System/Library") (subpath "/usr/lib") (literal ${quote(executable)}))(allow file-read-data (subpath "/System/Library") (subpath "/usr/lib") (subpath "/usr/share") ${read})${write ? `(allow file-write* ${write})` : ''}`;
+}
+export async function runSandboxed(request) {
+    if (process.platform !== 'darwin')
+        throw new Error('LOCAL_SANDBOX_UNAVAILABLE: macOS Seatbelt required');
+    const profile = sandboxProfile(request);
+    return new Promise((resolve, reject) => {
+        const chunks = [];
+        let size = 0, settled = false;
+        const child = spawn('/usr/bin/sandbox-exec', ['-p', profile, realpathSync(request.executable), ...request.argv], {
+            cwd: request.cwd ?? '/', env: { PATH: '/usr/bin:/bin', LANG: 'C', HOME: '/nonexistent', TMPDIR: '/nonexistent' }, stdio: ['ignore', 'pipe', 'pipe'], detached: true, signal: request.signal,
+        });
+        const finish = (error) => {
+            if (settled)
+                return;
+            settled = true;
+            clearTimeout(timer);
+            if (error)
+                reject(error);
+            else
+                resolve(Buffer.concat(chunks).toString('utf8'));
+        };
+        const kill = () => {
+            try {
+                if (child.pid)
+                    process.kill(-child.pid, 'SIGKILL');
+            }
+            catch { /* already exited */ }
+        };
+        const timer = request.timeoutMs === undefined ? undefined : setTimeout(() => { kill(); finish(new Error('LOCAL_SANDBOX_UNAVAILABLE: command timed out')); }, request.timeoutMs);
+        child.stdout.on('data', (chunk) => {
+            size += chunk.length;
+            if (size > 1024 * 1024) {
+                kill();
+                finish(new Error('LOCAL_SANDBOX_UNAVAILABLE: output limit'));
+            }
+            else
+                chunks.push(chunk);
+        });
+        // Do not disclose arbitrary subprocess stderr or paths to the model.
+        child.stderr.resume();
+        child.on('error', () => { kill(); finish(new Error('LOCAL_SANDBOX_UNAVAILABLE: could not start restricted process')); });
+        child.on('close', (code) => { kill(); finish(code === 0 ? undefined : new Error('LOCAL_SANDBOX_UNAVAILABLE: restricted process failed')); });
+    });
+}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "mtech-ai-local-runner",
-  "version": "0.1.8",
+  "version": "0.1.9",
   "private": false,
   "license": "UNLICENSED",
   "bin": {