nova-terminal-ai 0.3.4

package/dist/packages/core/src/security/SandboxExecutor.js

@@ -0,0 +1,345 @@
+// ============================================================================
+// SandboxExecutor - Isolated execution environment
+// ============================================================================
+import { spawn } from 'node:child_process';
+import * as path from 'node:path';
+import * as os from 'node:os';
+import { createLogger } from '../utils/Logger.js';
+const logger = createLogger('SandboxExecutor');
+/**
+ * Default sandbox configuration
+ */
+const DEFAULT_CONFIG = {
+    enabled: false,
+    type: 'none',
+    network: 'none',
+    memory: '2GB',
+    cpu: '1.0',
+    timeout: 60000,
+};
+// ============================================================================
+// SandboxExecutor
+// ============================================================================
+/**
+ * Execute commands in an isolated sandbox environment
+ */
+export class SandboxExecutor {
+    config;
+    dockerAvailable = null;
+    constructor(config = {}) {
+        this.config = { ...DEFAULT_CONFIG, ...config };
+    }
+    // -----------------------------------------------------------------------
+    // Detection
+    // -----------------------------------------------------------------------
+    /**
+     * Check if Docker is available
+     */
+    async isDockerAvailable() {
+        if (this.dockerAvailable !== null)
+            return this.dockerAvailable;
+        try {
+            const result = await this.runCommand('docker', ['--version'], 5000);
+            this.dockerAvailable = result.exitCode === 0;
+            logger.debug(`Docker available: ${this.dockerAvailable}`);
+        }
+        catch {
+            this.dockerAvailable = false;
+        }
+        return this.dockerAvailable;
+    }
+    /**
+     * Get the best available sandbox type
+     */
+    async getBestSandboxType() {
+        if (await this.isDockerAvailable())
+            return 'docker';
+        // Check for Linux-specific sandbox tools
+        if (os.platform() === 'linux') {
+            try {
+                await this.runCommand('which', ['bwrap'], 1000);
+                return 'bubblewrap';
+            }
+            catch { }
+            try {
+                await this.runCommand('which', ['isolate'], 1000);
+                return 'isolate';
+            }
+            catch { }
+        }
+        return 'none';
+    }
+    // -----------------------------------------------------------------------
+    // Execution
+    // -----------------------------------------------------------------------
+    /**
+     * Execute a command in the sandbox
+     */
+    async execute(command, args = []) {
+        const startTime = Date.now();
+        if (!this.config.enabled) {
+            // No sandbox - direct execution
+            return this.runCommand(command, args, this.config.timeout);
+        }
+        switch (this.config.type) {
+            case 'docker':
+                return this.executeInDocker(command, args);
+            case 'bubblewrap':
+                return this.executeInBubblewrap(command, args);
+            case 'isolate':
+                return this.executeInIsolate(command, args);
+            default:
+                return this.runCommand(command, args, this.config.timeout);
+        }
+    }
+    /**
+     * Execute a shell command string
+     */
+    async executeShell(shellCommand) {
+        const isWin = os.platform() === 'win32';
+        const shell = isWin ? 'powershell.exe' : '/bin/sh';
+        const shellArgs = isWin ? ['-Command', shellCommand] : ['-c', shellCommand];
+        return this.execute(shell, shellArgs);
+    }
+    // -----------------------------------------------------------------------
+    // Docker Execution
+    // -----------------------------------------------------------------------
+    /**
+     * Execute command in Docker container
+     */
+    async executeInDocker(command, args) {
+        if (!(await this.isDockerAvailable())) {
+            logger.warn('Docker not available, falling back to direct execution');
+            return this.runCommand(command, args, this.config.timeout);
+        }
+        const workDir = this.config.workDir ?? process.cwd();
+        // Build docker run arguments
+        const dockerArgs = [
+            'run',
+            '--rm',
+            '-v', `${workDir}:/workspace`,
+            '-w', '/workspace',
+        ];
+        // Memory limit
+        dockerArgs.push('-m', this.config.memory);
+        // CPU limit
+        dockerArgs.push('--cpus', this.config.cpu);
+        // Network
+        if (this.config.network === 'none') {
+            dockerArgs.push('--network', 'none');
+        }
+        // Environment variables
+        if (this.config.env) {
+            for (const [key, value] of Object.entries(this.config.env)) {
+                dockerArgs.push('-e', `${key}=${value}`);
+            }
+        }
+        // Read-only paths
+        if (this.config.readOnlyPaths) {
+            for (const p of this.config.readOnlyPaths) {
+                dockerArgs.push('-v', `${p}:/ro-${path.basename(p)}:ro`);
+            }
+        }
+        // Image and command
+        dockerArgs.push('nova-sandbox:latest', command, ...args);
+        logger.debug(`Docker args: ${dockerArgs.join(' ')}`);
+        return this.runCommand('docker', dockerArgs, this.config.timeout);
+    }
+    // -----------------------------------------------------------------------
+    // Bubblewrap Execution (Linux)
+    // -----------------------------------------------------------------------
+    /**
+     * Execute command using Bubblewrap (Linux only)
+     */
+    async executeInBubblewrap(command, args) {
+        if (os.platform() !== 'linux') {
+            logger.warn('Bubblewrap only available on Linux, falling back');
+            return this.runCommand(command, args, this.config.timeout);
+        }
+        const workDir = this.config.workDir ?? process.cwd();
+        // Build bwrap arguments
+        const bwrapArgs = [
+            '--ro-bind', '/usr', '/usr',
+            '--ro-bind', '/bin', '/bin',
+            '--ro-bind', '/lib', '/lib',
+            '--ro-bind', '/lib64', '/lib64',
+            '--bind', workDir, workDir,
+            '--unshare-all',
+            '--die-with-parent',
+        ];
+        // Network
+        if (this.config.network === 'none') {
+            bwrapArgs.push('--unshare-net');
+        }
+        // Command to execute
+        bwrapArgs.push('--', command, ...args);
+        return this.runCommand('bwrap', bwrapArgs, this.config.timeout);
+    }
+    // -----------------------------------------------------------------------
+    // Isolate Execution (Linux)
+    // -----------------------------------------------------------------------
+    /**
+     * Execute command using Isolate (Linux only)
+     */
+    async executeInIsolate(command, args) {
+        if (os.platform() !== 'linux') {
+            logger.warn('Isolate only available on Linux, falling back');
+            return this.runCommand(command, args, this.config.timeout);
+        }
+        const workDir = this.config.workDir ?? process.cwd();
+        // Build isolate arguments
+        const isolateArgs = [
+            '--run',
+            '--dir=/work=' + workDir,
+            '--workdir=/work',
+        ];
+        // Memory limit (in KB)
+        const memKB = this.parseMemory(this.config.memory);
+        isolateArgs.push(`--mem=${memKB}`);
+        // Time limit (in seconds)
+        isolateArgs.push(`--time=${Math.ceil(this.config.timeout / 1000)}`);
+        // Network
+        if (this.config.network === 'none') {
+            isolateArgs.push('--no-direct-io');
+        }
+        // Command
+        isolateArgs.push('--', command, ...args);
+        return this.runCommand('isolate', isolateArgs, this.config.timeout);
+    }
+    // -----------------------------------------------------------------------
+    // Utilities
+    // -----------------------------------------------------------------------
+    /**
+     * Run a command with timeout
+     */
+    runCommand(command, args, timeout) {
+        return new Promise((resolve) => {
+            const startTime = Date.now();
+            let stdout = '';
+            let stderr = '';
+            let timedOut = false;
+            const proc = spawn(command, args, {
+                cwd: this.config.workDir,
+                env: { ...process.env, ...this.config.env },
+                shell: os.platform() === 'win32',
+            });
+            const timeoutId = setTimeout(() => {
+                timedOut = true;
+                proc.kill('SIGKILL');
+            }, timeout);
+            proc.stdout?.on('data', (data) => {
+                stdout += data.toString();
+            });
+            proc.stderr?.on('data', (data) => {
+                stderr += data.toString();
+            });
+            proc.on('close', (code) => {
+                clearTimeout(timeoutId);
+                resolve({
+                    stdout,
+                    stderr,
+                    exitCode: code ?? 1,
+                    duration: Date.now() - startTime,
+                    timedOut,
+                });
+            });
+            proc.on('error', (err) => {
+                clearTimeout(timeoutId);
+                stderr += err.message;
+                resolve({
+                    stdout,
+                    stderr,
+                    exitCode: 1,
+                    duration: Date.now() - startTime,
+                    timedOut: false,
+                });
+            });
+        });
+    }
+    /**
+     * Parse memory string to KB
+     */
+    parseMemory(mem) {
+        const match = mem.match(/^(\d+(?:\.\d+)?)(GB|MB|KB)?$/i);
+        if (!match)
+            return 2 * 1024 * 1024; // Default 2GB
+        const value = parseFloat(match[1] || '0');
+        const unit = (match[2] || 'MB').toUpperCase();
+        switch (unit) {
+            case 'GB': return value * 1024 * 1024;
+            case 'MB': return value * 1024;
+            case 'KB': return value;
+            default: return value * 1024;
+        }
+    }
+    // -----------------------------------------------------------------------
+    // Docker Image Management
+    // -----------------------------------------------------------------------
+    /**
+     * Build the sandbox Docker image
+     */
+    async buildDockerImage() {
+        if (!(await this.isDockerAvailable())) {
+            logger.error('Docker not available');
+            return false;
+        }
+        const dockerfile = `
+FROM node:20-slim
+WORKDIR /workspace
+RUN apt-get update && apt-get install -y \
+    git \
+    curl \
+    && rm -rf /var/lib/apt/lists/*
+CMD ["/bin/bash"]
+`;
+        try {
+            const result = await this.runCommand('docker', [
+                'build',
+                '-t', 'nova-sandbox:latest',
+                '-',
+            ], 60000);
+            // Pass dockerfile via stdin would require more complex handling
+            // For now, create a temp file
+            logger.info('Docker image built successfully');
+            return result.exitCode === 0;
+        }
+        catch (error) {
+            logger.error('Failed to build Docker image', { error });
+            return false;
+        }
+    }
+    /**
+     * Check if sandbox Docker image exists
+     */
+    async hasDockerImage() {
+        if (!(await this.isDockerAvailable()))
+            return false;
+        try {
+            const result = await this.runCommand('docker', [
+                'image', 'inspect', 'nova-sandbox:latest',
+            ], 5000);
+            return result.exitCode === 0;
+        }
+        catch {
+            return false;
+        }
+    }
+}
+// ============================================================================
+// Factory function
+// ============================================================================
+/**
+ * Create a sandbox executor with default configuration
+ */
+export function createSandboxExecutor(config = {}) {
+    return new SandboxExecutor(config);
+}
+/**
+ * Check if sandbox is available
+ */
+export async function isSandboxAvailable() {
+    const executor = new SandboxExecutor();
+    const type = await executor.getBestSandboxType();
+    return type !== 'none';
+}
+//# sourceMappingURL=SandboxExecutor.js.map

package/dist/packages/core/src/security/SandboxExecutor.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"SandboxExecutor.js","sourceRoot":"","sources":["../../../../../../core/src/security/SandboxExecutor.ts"],"names":[],"mappings":"AAAA,+EAA+E;AAC/E,mDAAmD;AACnD,+EAA+E;AAE/E,OAAO,EAAE,KAAK,EAAgB,MAAM,oBAAoB,CAAC;AACzD,OAAO,KAAK,IAAI,MAAM,WAAW,CAAC;AAClC,OAAO,KAAK,EAAE,MAAM,SAAS,CAAC;AAC9B,OAAO,EAAE,YAAY,EAAE,MAAM,oBAAoB,CAAC;AAElD,MAAM,MAAM,GAAG,YAAY,CAAC,iBAAiB,CAAC,CAAC;AAsC/C;;GAEG;AACH,MAAM,cAAc,GAAkB;IACpC,OAAO,EAAE,KAAK;IACd,IAAI,EAAE,MAAM;IACZ,OAAO,EAAE,MAAM;IACf,MAAM,EAAE,KAAK;IACb,GAAG,EAAE,KAAK;IACV,OAAO,EAAE,KAAK;CACf,CAAC;AAEF,+EAA+E;AAC/E,kBAAkB;AAClB,+EAA+E;AAE/E;;GAEG;AACH,MAAM,OAAO,eAAe;IAClB,MAAM,CAAgB;IACtB,eAAe,GAAmB,IAAI,CAAC;IAE/C,YAAY,SAAiC,EAAE;QAC7C,IAAI,CAAC,MAAM,GAAG,EAAE,GAAG,cAAc,EAAE,GAAG,MAAM,EAAE,CAAC;IACjD,CAAC;IAED,0EAA0E;IAC1E,YAAY;IACZ,0EAA0E;IAE1E;;OAEG;IACH,KAAK,CAAC,iBAAiB;QACrB,IAAI,IAAI,CAAC,eAAe,KAAK,IAAI;YAAE,OAAO,IAAI,CAAC,eAAe,CAAC;QAE/D,IAAI,CAAC;YACH,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,UAAU,CAAC,QAAQ,EAAE,CAAC,WAAW,CAAC,EAAE,IAAI,CAAC,CAAC;YACpE,IAAI,CAAC,eAAe,GAAG,MAAM,CAAC,QAAQ,KAAK,CAAC,CAAC;YAC7C,MAAM,CAAC,KAAK,CAAC,qBAAqB,IAAI,CAAC,eAAe,EAAE,CAAC,CAAC;QAC5D,CAAC;QAAC,MAAM,CAAC;YACP,IAAI,CAAC,eAAe,GAAG,KAAK,CAAC;QAC/B,CAAC;QAED,OAAO,IAAI,CAAC,eAAe,CAAC;IAC9B,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,kBAAkB;QACtB,IAAI,MAAM,IAAI,CAAC,iBAAiB,EAAE;YAAE,OAAO,QAAQ,CAAC;QAEpD,yCAAyC;QACzC,IAAI,EAAE,CAAC,QAAQ,EAAE,KAAK,OAAO,EAAE,CAAC;YAC9B,IAAI,CAAC;gBACH,MAAM,IAAI,CAAC,UAAU,CAAC,OAAO,EAAE,CAAC,OAAO,CAAC,EAAE,IAAI,CAAC,CAAC;gBAChD,OAAO,YAAY,CAAC;YACtB,CAAC;YAAC,MAAM,CAAC,CAAA,CAAC;YAEV,IAAI,CAAC;gBACH,MAAM,IAAI,CAAC,UAAU,CAAC,OAAO,EAAE,CAAC,SAAS,CAAC,EAAE,IAAI,CAAC,CAAC;gBAClD,OAAO,SAAS,CAAC;YACnB,CAAC;YAAC,MAAM,CAAC,CAAA,CAAC;QACZ,CAAC;QAED,OAAO,MAAM,CAAC;IAChB,CAAC;IAED,0EAA0E;IAC1E,YAAY;IACZ,0EAA0E;IAE1E;;OAEG;IACH,KAAK,CAAC,OAAO,CAAC,OAAe,EAAE,OAAiB,EAAE;QAChD,MAAM,SAAS,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QAE7B,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;YACzB,gCAAgC;YAChC,OAAO,IAAI,CAAC,UAAU,CAAC,OAAO,EAAE,IAAI,EAAE,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;QAC7D,CAAC;QAED,QAAQ,IAAI,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC;YACzB,KAAK,QAAQ;gBACX,OAAO,IAAI,CAAC,eAAe,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC;YAE7C,KAAK,YAAY;gBACf,OAAO,IAAI,CAAC,mBAAmB,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC;YAEjD,KAAK,SAAS;gBACZ,OAAO,IAAI,CAAC,gBAAgB,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC;YAE9C;gBACE,OAAO,IAAI,CAAC,UAAU,CAAC,OAAO,EAAE,IAAI,EAAE,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;QAC/D,CAAC;IACH,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,YAAY,CAAC,YAAoB;QACrC,MAAM,KAAK,GAAG,EAAE,CAAC,QAAQ,EAAE,KAAK,OAAO,CAAC;QACxC,MAAM,KAAK,GAAG,KAAK,CAAC,CAAC,CAAC,gBAAgB,CAAC,CAAC,CAAC,SAAS,CAAC;QACnD,MAAM,SAAS,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC,UAAU,EAAE,YAAY,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,YAAY,CAAC,CAAC;QAE5E,OAAO,IAAI,CAAC,OAAO,CAAC,KAAK,EAAE,SAAS,CAAC,CAAC;IACxC,CAAC;IAED,0EAA0E;IAC1E,mBAAmB;IACnB,0EAA0E;IAE1E;;OAEG;IACK,KAAK,CAAC,eAAe,CAAC,OAAe,EAAE,IAAc;QAC3D,IAAI,CAAC,CAAC,MAAM,IAAI,CAAC,iBAAiB,EAAE,CAAC,EAAE,CAAC;YACtC,MAAM,CAAC,IAAI,CAAC,wDAAwD,CAAC,CAAC;YACtE,OAAO,IAAI,CAAC,UAAU,CAAC,OAAO,EAAE,IAAI,EAAE,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;QAC7D,CAAC;QAED,MAAM,OAAO,GAAG,IAAI,CAAC,MAAM,CAAC,OAAO,IAAI,OAAO,CAAC,GAAG,EAAE,CAAC;QAErD,6BAA6B;QAC7B,MAAM,UAAU,GAAG;YACjB,KAAK;YACL,MAAM;YACN,IAAI,EAAE,GAAG,OAAO,aAAa;YAC7B,IAAI,EAAE,YAAY;SACnB,CAAC;QAEF,eAAe;QACf,UAAU,CAAC,IAAI,CAAC,IAAI,EAAE,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;QAE1C,YAAY;QACZ,UAAU,CAAC,IAAI,CAAC,QAAQ,EAAE,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;QAE3C,UAAU;QACV,IAAI,IAAI,CAAC,MAAM,CAAC,OAAO,KAAK,MAAM,EAAE,CAAC;YACnC,UAAU,CAAC,IAAI,CAAC,WAAW,EAAE,MAAM,CAAC,CAAC;QACvC,CAAC;QAED,wBAAwB;QACxB,IAAI,IAAI,CAAC,MAAM,CAAC,GAAG,EAAE,CAAC;YACpB,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC;gBAC3D,UAAU,CAAC,IAAI,CAAC,IAAI,EAAE,GAAG,GAAG,IAAI,KAAK,EAAE,CAAC,CAAC;YAC3C,CAAC;QACH,CAAC;QAED,kBAAkB;QAClB,IAAI,IAAI,CAAC,MAAM,CAAC,aAAa,EAAE,CAAC;YAC9B,KAAK,MAAM,CAAC,IAAI,IAAI,CAAC,MAAM,CAAC,aAAa,EAAE,CAAC;gBAC1C,UAAU,CAAC,IAAI,CAAC,IAAI,EAAE,GAAG,CAAC,QAAQ,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC;YAC3D,CAAC;QACH,CAAC;QAED,oBAAoB;QACpB,UAAU,CAAC,IAAI,CAAC,qBAAqB,EAAE,OAAO,EAAE,GAAG,IAAI,CAAC,CAAC;QAEzD,MAAM,CAAC,KAAK,CAAC,gBAAgB,UAAU,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;QAErD,OAAO,IAAI,CAAC,UAAU,CAAC,QAAQ,EAAE,UAAU,EAAE,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;IACpE,CAAC;IAED,0EAA0E;IAC1E,+BAA+B;IAC/B,0EAA0E;IAE1E;;OAEG;IACK,KAAK,CAAC,mBAAmB,CAAC,OAAe,EAAE,IAAc;QAC/D,IAAI,EAAE,CAAC,QAAQ,EAAE,KAAK,OAAO,EAAE,CAAC;YAC9B,MAAM,CAAC,IAAI,CAAC,kDAAkD,CAAC,CAAC;YAChE,OAAO,IAAI,CAAC,UAAU,CAAC,OAAO,EAAE,IAAI,EAAE,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;QAC7D,CAAC;QAED,MAAM,OAAO,GAAG,IAAI,CAAC,MAAM,CAAC,OAAO,IAAI,OAAO,CAAC,GAAG,EAAE,CAAC;QAErD,wBAAwB;QACxB,MAAM,SAAS,GAAG;YAChB,WAAW,EAAE,MAAM,EAAE,MAAM;YAC3B,WAAW,EAAE,MAAM,EAAE,MAAM;YAC3B,WAAW,EAAE,MAAM,EAAE,MAAM;YAC3B,WAAW,EAAE,QAAQ,EAAE,QAAQ;YAC/B,QAAQ,EAAE,OAAO,EAAE,OAAO;YAC1B,eAAe;YACf,mBAAmB;SACpB,CAAC;QAEF,UAAU;QACV,IAAI,IAAI,CAAC,MAAM,CAAC,OAAO,KAAK,MAAM,EAAE,CAAC;YACnC,SAAS,CAAC,IAAI,CAAC,eAAe,CAAC,CAAC;QAClC,CAAC;QAED,qBAAqB;QACrB,SAAS,CAAC,IAAI,CAAC,IAAI,EAAE,OAAO,EAAE,GAAG,IAAI,CAAC,CAAC;QAEvC,OAAO,IAAI,CAAC,UAAU,CAAC,OAAO,EAAE,SAAS,EAAE,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;IAClE,CAAC;IAED,0EAA0E;IAC1E,4BAA4B;IAC5B,0EAA0E;IAE1E;;OAEG;IACK,KAAK,CAAC,gBAAgB,CAAC,OAAe,EAAE,IAAc;QAC5D,IAAI,EAAE,CAAC,QAAQ,EAAE,KAAK,OAAO,EAAE,CAAC;YAC9B,MAAM,CAAC,IAAI,CAAC,+CAA+C,CAAC,CAAC;YAC7D,OAAO,IAAI,CAAC,UAAU,CAAC,OAAO,EAAE,IAAI,EAAE,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;QAC7D,CAAC;QAED,MAAM,OAAO,GAAG,IAAI,CAAC,MAAM,CAAC,OAAO,IAAI,OAAO,CAAC,GAAG,EAAE,CAAC;QAErD,0BAA0B;QAC1B,MAAM,WAAW,GAAG;YAClB,OAAO;YACP,cAAc,GAAG,OAAO;YACxB,iBAAiB;SAClB,CAAC;QAEF,uBAAuB;QACvB,MAAM,KAAK,GAAG,IAAI,CAAC,WAAW,CAAC,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;QACnD,WAAW,CAAC,IAAI,CAAC,SAAS,KAAK,EAAE,CAAC,CAAC;QAEnC,0BAA0B;QAC1B,WAAW,CAAC,IAAI,CAAC,UAAU,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,OAAO,GAAG,IAAI,CAAC,EAAE,CAAC,CAAC;QAEpE,UAAU;QACV,IAAI,IAAI,CAAC,MAAM,CAAC,OAAO,KAAK,MAAM,EAAE,CAAC;YACnC,WAAW,CAAC,IAAI,CAAC,gBAAgB,CAAC,CAAC;QACrC,CAAC;QAED,UAAU;QACV,WAAW,CAAC,IAAI,CAAC,IAAI,EAAE,OAAO,EAAE,GAAG,IAAI,CAAC,CAAC;QAEzC,OAAO,IAAI,CAAC,UAAU,CAAC,SAAS,EAAE,WAAW,EAAE,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;IACtE,CAAC;IAED,0EAA0E;IAC1E,YAAY;IACZ,0EAA0E;IAE1E;;OAEG;IACK,UAAU,CAChB,OAAe,EACf,IAAc,EACd,OAAe;QAEf,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,EAAE;YAC7B,MAAM,SAAS,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;YAC7B,IAAI,MAAM,GAAG,EAAE,CAAC;YAChB,IAAI,MAAM,GAAG,EAAE,CAAC;YAChB,IAAI,QAAQ,GAAG,KAAK,CAAC;YAErB,MAAM,IAAI,GAAG,KAAK,CAAC,OAAO,EAAE,IAAI,EAAE;gBAChC,GAAG,EAAE,IAAI,CAAC,MAAM,CAAC,OAAO;gBACxB,GAAG,EAAE,EAAE,GAAG,OAAO,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,MAAM,CAAC,GAAG,EAAE;gBAC3C,KAAK,EAAE,EAAE,CAAC,QAAQ,EAAE,KAAK,OAAO;aACjC,CAAC,CAAC;YAEH,MAAM,SAAS,GAAG,UAAU,CAAC,GAAG,EAAE;gBAChC,QAAQ,GAAG,IAAI,CAAC;gBAChB,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;YACvB,CAAC,EAAE,OAAO,CAAC,CAAC;YAEZ,IAAI,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,EAAE;gBAC/B,MAAM,IAAI,IAAI,CAAC,QAAQ,EAAE,CAAC;YAC5B,CAAC,CAAC,CAAC;YAEH,IAAI,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,EAAE;gBAC/B,MAAM,IAAI,IAAI,CAAC,QAAQ,EAAE,CAAC;YAC5B,CAAC,CAAC,CAAC;YAEH,IAAI,CAAC,EAAE,CAAC,OAAO,EAAE,CAAC,IAAI,EAAE,EAAE;gBACxB,YAAY,CAAC,SAAS,CAAC,CAAC;gBACxB,OAAO,CAAC;oBACN,MAAM;oBACN,MAAM;oBACN,QAAQ,EAAE,IAAI,IAAI,CAAC;oBACnB,QAAQ,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,SAAS;oBAChC,QAAQ;iBACT,CAAC,CAAC;YACL,CAAC,CAAC,CAAC;YAEH,IAAI,CAAC,EAAE,CAAC,OAAO,EAAE,CAAC,GAAG,EAAE,EAAE;gBACvB,YAAY,CAAC,SAAS,CAAC,CAAC;gBACxB,MAAM,IAAI,GAAG,CAAC,OAAO,CAAC;gBACtB,OAAO,CAAC;oBACN,MAAM;oBACN,MAAM;oBACN,QAAQ,EAAE,CAAC;oBACX,QAAQ,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,SAAS;oBAChC,QAAQ,EAAE,KAAK;iBAChB,CAAC,CAAC;YACL,CAAC,CAAC,CAAC;QACL,CAAC,CAAC,CAAC;IACL,CAAC;IAED;;OAEG;IACK,WAAW,CAAC,GAAW;QAC7B,MAAM,KAAK,GAAG,GAAG,CAAC,KAAK,CAAC,+BAA+B,CAAC,CAAC;QACzD,IAAI,CAAC,KAAK;YAAE,OAAO,CAAC,GAAG,IAAI,GAAG,IAAI,CAAC,CAAE,cAAc;QAEnD,MAAM,KAAK,GAAG,UAAU,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,GAAG,CAAC,CAAC;QAC1C,MAAM,IAAI,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,IAAI,CAAC,CAAC,WAAW,EAAE,CAAC;QAE9C,QAAQ,IAAI,EAAE,CAAC;YACb,KAAK,IAAI,CAAC,CAAC,OAAO,KAAK,GAAG,IAAI,GAAG,IAAI,CAAC;YACtC,KAAK,IAAI,CAAC,CAAC,OAAO,KAAK,GAAG,IAAI,CAAC;YAC/B,KAAK,IAAI,CAAC,CAAC,OAAO,KAAK,CAAC;YACxB,OAAO,CAAC,CAAC,OAAO,KAAK,GAAG,IAAI,CAAC;QAC/B,CAAC;IACH,CAAC;IAED,0EAA0E;IAC1E,0BAA0B;IAC1B,0EAA0E;IAE1E;;OAEG;IACH,KAAK,CAAC,gBAAgB;QACpB,IAAI,CAAC,CAAC,MAAM,IAAI,CAAC,iBAAiB,EAAE,CAAC,EAAE,CAAC;YACtC,MAAM,CAAC,KAAK,CAAC,sBAAsB,CAAC,CAAC;YACrC,OAAO,KAAK,CAAC;QACf,CAAC;QAED,MAAM,UAAU,GAAG;;;;;;;;CAQtB,CAAC;QAEE,IAAI,CAAC;YACH,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,UAAU,CAAC,QAAQ,EAAE;gBAC7C,OAAO;gBACP,IAAI,EAAE,qBAAqB;gBAC3B,GAAG;aACJ,EAAE,KAAK,CAAC,CAAC;YAEV,gEAAgE;YAChE,8BAA8B;YAC9B,MAAM,CAAC,IAAI,CAAC,iCAAiC,CAAC,CAAC;YAC/C,OAAO,MAAM,CAAC,QAAQ,KAAK,CAAC,CAAC;QAC/B,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,MAAM,CAAC,KAAK,CAAC,8BAA8B,EAAE,EAAE,KAAK,EAAE,CAAC,CAAC;YACxD,OAAO,KAAK,CAAC;QACf,CAAC;IACH,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,cAAc;QAClB,IAAI,CAAC,CAAC,MAAM,IAAI,CAAC,iBAAiB,EAAE,CAAC;YAAE,OAAO,KAAK,CAAC;QAEpD,IAAI,CAAC;YACH,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,UAAU,CAAC,QAAQ,EAAE;gBAC7C,OAAO,EAAE,SAAS,EAAE,qBAAqB;aAC1C,EAAE,IAAI,CAAC,CAAC;YACT,OAAO,MAAM,CAAC,QAAQ,KAAK,CAAC,CAAC;QAC/B,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,KAAK,CAAC;QACf,CAAC;IACH,CAAC;CACF;AAED,+EAA+E;AAC/E,mBAAmB;AACnB,+EAA+E;AAE/E;;GAEG;AACH,MAAM,UAAU,qBAAqB,CAAC,SAAiC,EAAE;IACvE,OAAO,IAAI,eAAe,CAAC,MAAM,CAAC,CAAC;AACrC,CAAC;AAED;;GAEG;AACH,MAAM,CAAC,KAAK,UAAU,kBAAkB;IACtC,MAAM,QAAQ,GAAG,IAAI,eAAe,EAAE,CAAC;IACvC,MAAM,IAAI,GAAG,MAAM,QAAQ,CAAC,kBAAkB,EAAE,CAAC;IACjD,OAAO,IAAI,KAAK,MAAM,CAAC;AACzB,CAAC"}

package/dist/packages/core/src/security/index.d.ts

@@ -0,0 +1,8 @@
+export { ApprovalManager } from './ApprovalManager.js';
+export type { ApprovalManagerOptions, ApprovalRule, ApprovalHandler } from './ApprovalManager.js';
+export { HookExecutor } from './HookExecutor.js';
+export type { HookExecutorOptions } from './HookExecutor.js';
+export { FileFilter } from './FileFilter.js';
+export { SandboxExecutor, createSandboxExecutor, isSandboxAvailable } from './SandboxExecutor.js';
+export type { SandboxType, SandboxConfig, ExecutionResult } from './SandboxExecutor.js';
+//# sourceMappingURL=index.d.ts.map

package/dist/packages/core/src/security/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../../../../core/src/security/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,eAAe,EAAE,MAAM,sBAAsB,CAAC;AACvD,YAAY,EAAE,sBAAsB,EAAE,YAAY,EAAE,eAAe,EAAE,MAAM,sBAAsB,CAAC;AAClG,OAAO,EAAE,YAAY,EAAE,MAAM,mBAAmB,CAAC;AACjD,YAAY,EAAE,mBAAmB,EAAE,MAAM,mBAAmB,CAAC;AAC7D,OAAO,EAAE,UAAU,EAAE,MAAM,iBAAiB,CAAC;AAE7C,OAAO,EAAE,eAAe,EAAE,qBAAqB,EAAE,kBAAkB,EAAE,MAAM,sBAAsB,CAAC;AAClG,YAAY,EAAE,WAAW,EAAE,aAAa,EAAE,eAAe,EAAE,MAAM,sBAAsB,CAAC"}

package/dist/packages/core/src/security/index.js

@@ -0,0 +1,6 @@
+export { ApprovalManager } from './ApprovalManager.js';
+export { HookExecutor } from './HookExecutor.js';
+export { FileFilter } from './FileFilter.js';
+// FileFilterConfig is exported from types/config.js
+export { SandboxExecutor, createSandboxExecutor, isSandboxAvailable } from './SandboxExecutor.js';
+//# sourceMappingURL=index.js.map

package/dist/packages/core/src/security/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../../../../core/src/security/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,eAAe,EAAE,MAAM,sBAAsB,CAAC;AAEvD,OAAO,EAAE,YAAY,EAAE,MAAM,mBAAmB,CAAC;AAEjD,OAAO,EAAE,UAAU,EAAE,MAAM,iBAAiB,CAAC;AAC7C,oDAAoD;AACpD,OAAO,EAAE,eAAe,EAAE,qBAAqB,EAAE,kBAAkB,EAAE,MAAM,sBAAsB,CAAC"}

package/dist/packages/core/src/session/AgentLoop.d.ts

@@ -0,0 +1,75 @@
+import type { SessionId, Message, ApprovalRequest, ApprovalResponse } from '../types/session.js';
+import type { ToolHandlerOutput } from '../types/tools.js';
+import type { ModelClient } from '../model/ModelClient.js';
+import type { SessionManager } from './SessionManager.js';
+import type { ContextCompressor } from '../context/ContextCompressor.js';
+import { ToolRegistry } from '../tools/ToolRegistry.js';
+export interface AgentLoopOptions {
+    modelClient: ModelClient;
+    sessionManager: SessionManager;
+    toolRegistry: ToolRegistry;
+    /** System prompt to send with every request */
+    systemPrompt?: string;
+    /** Context compressor for intelligent context management */
+    contextCompressor?: ContextCompressor;
+    /** Maximum context window tokens (for compression decisions) */
+    maxContextTokens?: number;
+    /** Control thinking mode: enabled|disabled|auto */
+    thinking?: string;
+    /** Called when tool approval is needed */
+    onApprovalRequired?: (request: ApprovalRequest) => Promise<ApprovalResponse>;
+    /** Called for each streaming text delta */
+    onTextDelta?: (text: string) => void;
+    /** Called when a tool starts executing */
+    onToolStart?: (toolName: string, toolCallId: string, toolInput?: Record<string, unknown>) => void;
+    /** Called when a tool finishes */
+    onToolComplete?: (toolName: string, toolCallId: string, result: ToolHandlerOutput) => void;
+    /** Called when the loop iteration starts */
+    onTurnStart?: (turn: number) => void;
+    /** Called when the loop iteration ends */
+    onTurnEnd?: (turn: number) => void;
+    /** Called when thinking/reasoning content starts streaming */
+    onThinkingStart?: () => void;
+    /** Called for each thinking content delta */
+    onThinkingDelta?: (delta: string) => void;
+    /** Called when thinking content ends */
+    onThinkingEnd?: () => void;
+    /** Called when context compression happens */
+    onContextCompress?: (originalTokens: number, resultingTokens: number, action: string) => void;
+}
+export interface AgentLoopResult {
+    messages: Message[];
+    turnsCompleted: number;
+    totalInputTokens: number;
+    totalOutputTokens: number;
+    stopReason: string;
+}
+export declare class AgentLoop {
+    private modelClient;
+    private sessionManager;
+    private toolRegistry;
+    private options;
+    private systemPrompt?;
+    private abortController;
+    private isRunning;
+    private contextCompressor?;
+    private maxContextTokens;
+    private thinking?;
+    constructor(options: AgentLoopOptions);
+    /**
+     * Check if context compression is needed and apply it.
+     * Returns the (possibly compressed) message list.
+     */
+    private maybeCompressContext;
+    /** Run the agent loop until completion or max turns */
+    run(sessionId: SessionId, userMessage?: string): Promise<AgentLoopResult>;
+    /** Run the agent loop with streaming */
+    runStream(sessionId: SessionId, userMessage?: string): Promise<AgentLoopResult>;
+    /** Cancel the running agent loop */
+    cancel(): void;
+    /** Check if the loop is running */
+    isActive(): boolean;
+    /** Execute a single tool */
+    private executeTool;
+}
+//# sourceMappingURL=AgentLoop.d.ts.map

package/dist/packages/core/src/session/AgentLoop.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"AgentLoop.d.ts","sourceRoot":"","sources":["../../../../../../core/src/session/AgentLoop.ts"],"names":[],"mappings":"AAIA,OAAO,KAAK,EACV,SAAS,EACT,OAAO,EAOP,eAAe,EACf,gBAAgB,EACjB,MAAM,qBAAqB,CAAC;AAC7B,OAAO,KAAK,EAAoC,iBAAiB,EAAE,MAAM,mBAAmB,CAAC;AAC7F,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,yBAAyB,CAAC;AAC3D,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,qBAAqB,CAAC;AAC1D,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,iCAAiC,CAAC;AACzE,OAAO,EAAE,YAAY,EAAE,MAAM,0BAA0B,CAAC;AAaxD,MAAM,WAAW,gBAAgB;IAC/B,WAAW,EAAE,WAAW,CAAC;IACzB,cAAc,EAAE,cAAc,CAAC;IAC/B,YAAY,EAAE,YAAY,CAAC;IAC3B,+CAA+C;IAC/C,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,4DAA4D;IAC5D,iBAAiB,CAAC,EAAE,iBAAiB,CAAC;IACtC,gEAAgE;IAChE,gBAAgB,CAAC,EAAE,MAAM,CAAC;IAC1B,mDAAmD;IACnD,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,0CAA0C;IAC1C,kBAAkB,CAAC,EAAE,CAAC,OAAO,EAAE,eAAe,KAAK,OAAO,CAAC,gBAAgB,CAAC,CAAC;IAC7E,2CAA2C;IAC3C,WAAW,CAAC,EAAE,CAAC,IAAI,EAAE,MAAM,KAAK,IAAI,CAAC;IACrC,0CAA0C;IAC1C,WAAW,CAAC,EAAE,CAAC,QAAQ,EAAE,MAAM,EAAE,UAAU,EAAE,MAAM,EAAE,SAAS,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,KAAK,IAAI,CAAC;IAClG,kCAAkC;IAClC,cAAc,CAAC,EAAE,CAAC,QAAQ,EAAE,MAAM,EAAE,UAAU,EAAE,MAAM,EAAE,MAAM,EAAE,iBAAiB,KAAK,IAAI,CAAC;IAC3F,4CAA4C;IAC5C,WAAW,CAAC,EAAE,CAAC,IAAI,EAAE,MAAM,KAAK,IAAI,CAAC;IACrC,0CAA0C;IAC1C,SAAS,CAAC,EAAE,CAAC,IAAI,EAAE,MAAM,KAAK,IAAI,CAAC;IACnC,8DAA8D;IAC9D,eAAe,CAAC,EAAE,MAAM,IAAI,CAAC;IAC7B,6CAA6C;IAC7C,eAAe,CAAC,EAAE,CAAC,KAAK,EAAE,MAAM,KAAK,IAAI,CAAC;IAC1C,wCAAwC;IACxC,aAAa,CAAC,EAAE,MAAM,IAAI,CAAC;IAC3B,8CAA8C;IAC9C,iBAAiB,CAAC,EAAE,CAAC,cAAc,EAAE,MAAM,EAAE,eAAe,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,KAAK,IAAI,CAAC;CAC/F;AAED,MAAM,WAAW,eAAe;IAC9B,QAAQ,EAAE,OAAO,EAAE,CAAC;IACpB,cAAc,EAAE,MAAM,CAAC;IACvB,gBAAgB,EAAE,MAAM,CAAC;IACzB,iBAAiB,EAAE,MAAM,CAAC;IAC1B,UAAU,EAAE,MAAM,CAAC;CACpB;AAED,qBAAa,SAAS;IACpB,OAAO,CAAC,WAAW,CAAc;IACjC,OAAO,CAAC,cAAc,CAAiB;IACvC,OAAO,CAAC,YAAY,CAAe;IACnC,OAAO,CAAC,OAAO,CAA4E;IAC3F,OAAO,CAAC,YAAY,CAAC,CAAS;IAC9B,OAAO,CAAC,eAAe,CAAgC;IACvD,OAAO,CAAC,SAAS,CAAS;IAC1B,OAAO,CAAC,iBAAiB,CAAC,CAAoB;IAC9C,OAAO,CAAC,gBAAgB,CAAS;IACjC,OAAO,CAAC,QAAQ,CAAC,CAAS;gBAEd,OAAO,EAAE,gBAAgB;IAsBrC;;;OAGG;IACH,OAAO,CAAC,oBAAoB;IAkB5B,uDAAuD;IACjD,GAAG,CAAC,SAAS,EAAE,SAAS,EAAE,WAAW,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,eAAe,CAAC;IAwH/E,wCAAwC;IAClC,SAAS,CAAC,SAAS,EAAE,SAAS,EAAE,WAAW,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,eAAe,CAAC;IA+KrF,oCAAoC;IACpC,MAAM,IAAI,IAAI;IAId,mCAAmC;IACnC,QAAQ,IAAI,OAAO;IAInB,4BAA4B;YACd,WAAW;CA8E1B"}