oh-my-claude-sisyphus 3.2.5 → 3.3.1

package/dist/tools/python-repl/bridge-manager.js

@@ -0,0 +1,478 @@
+/**
+ * Bridge Manager - Python process lifecycle management
+ *
+ * Manages the gyoshu_bridge.py process:
+ * - Spawning with proper environment detection
+ * - Ensuring single bridge per session with security validations
+ * - Graceful shutdown with signal escalation
+ * - PID reuse detection via process identity verification
+ */
+import { spawn } from 'child_process';
+import * as fs from 'fs';
+import * as fsPromises from 'fs/promises';
+import * as path from 'path';
+import { fileURLToPath } from 'url';
+import { execFile } from 'child_process';
+import { promisify } from 'util';
+import { getSessionDir, getBridgeSocketPath, getBridgeMetaPath } from './paths.js';
+import { atomicWriteJson, safeReadJson, ensureDirSync } from '../../lib/atomic-write.js';
+const execFileAsync = promisify(execFile);
+// =============================================================================
+// CONSTANTS
+// =============================================================================
+const BRIDGE_SPAWN_TIMEOUT_MS = 30000; // 30 seconds to wait for socket
+const DEFAULT_GRACE_PERIOD_MS = 5000; // 5 seconds for SIGINT
+const SIGTERM_GRACE_MS = 2500; // 2.5 seconds for SIGTERM
+// =============================================================================
+// BRIDGE PATH RESOLUTION
+// =============================================================================
+/**
+ * Resolve the path to gyoshu_bridge.py relative to this module.
+ * The bridge script is at: <package-root>/bridge/gyoshu_bridge.py
+ */
+function getBridgeScriptPath() {
+    // In ESM, __dirname equivalent is:
+    const __filename = fileURLToPath(import.meta.url);
+    const __dirname = path.dirname(__filename);
+    // From src/tools/python-repl/ -> ../../.. -> package root -> bridge/
+    const packageRoot = path.resolve(__dirname, '..', '..', '..');
+    return path.join(packageRoot, 'bridge', 'gyoshu_bridge.py');
+}
+// =============================================================================
+// PYTHON ENVIRONMENT DETECTION
+// =============================================================================
+/**
+ * Detect an existing Python virtual environment in the project directory.
+ * Returns null if no .venv is found.
+ */
+function detectExistingPythonEnv(projectRoot) {
+    const isWindows = process.platform === 'win32';
+    const binDir = isWindows ? 'Scripts' : 'bin';
+    const pythonExe = isWindows ? 'python.exe' : 'python';
+    const venvPython = path.join(projectRoot, '.venv', binDir, pythonExe);
+    if (fs.existsSync(venvPython)) {
+        return { pythonPath: venvPython, type: 'venv' };
+    }
+    return null;
+}
+/**
+ * Ensure a Python environment is available for the project.
+ * Currently requires an existing .venv - does not auto-create.
+ */
+async function ensurePythonEnvironment(projectRoot) {
+    const existing = detectExistingPythonEnv(projectRoot);
+    if (existing) {
+        return existing;
+    }
+    // Fallback: try system python3
+    try {
+        await execFileAsync('python3', ['--version']);
+        return { pythonPath: 'python3', type: 'venv' };
+    }
+    catch {
+        // python3 not available
+    }
+    throw new Error('No Python environment found. Create a virtual environment first:\n' +
+        '  python -m venv .venv\n' +
+        '  .venv/bin/pip install pandas numpy matplotlib');
+}
+// =============================================================================
+// PROCESS IDENTITY VERIFICATION
+// =============================================================================
+/**
+ * Get process start time on Linux via /proc/{pid}/stat field 22.
+ */
+async function getProcessStartTimeLinux(pid) {
+    try {
+        const stat = await fsPromises.readFile(`/proc/${pid}/stat`, 'utf8');
+        const closeParen = stat.lastIndexOf(')');
+        if (closeParen === -1)
+            return undefined;
+        const fieldsAfterComm = stat.substring(closeParen + 2).split(' ');
+        // starttime is field 22 in /proc/pid/stat, index 19 after removing pid and comm
+        const startTimeField = fieldsAfterComm[19];
+        if (!startTimeField)
+            return undefined;
+        const startTime = parseInt(startTimeField, 10);
+        return isNaN(startTime) ? undefined : startTime;
+    }
+    catch {
+        return undefined;
+    }
+}
+/**
+ * Get process start time on macOS via `ps -p {pid} -o lstart=`.
+ */
+async function getProcessStartTimeMacOS(pid) {
+    if (typeof pid !== 'number' || !Number.isInteger(pid) || pid <= 0)
+        return undefined;
+    try {
+        const { stdout } = await execFileAsync('ps', ['-p', String(pid), '-o', 'lstart='], {
+            env: { ...process.env, LC_ALL: 'C' },
+        });
+        const lstart = stdout.trim();
+        if (!lstart)
+            return undefined;
+        const date = new Date(lstart);
+        if (isNaN(date.getTime()))
+            return undefined;
+        return date.getTime();
+    }
+    catch {
+        return undefined;
+    }
+}
+/**
+ * Get process start time for a given PID (cross-platform).
+ */
+async function getProcessStartTime(pid) {
+    if (process.platform === 'linux') {
+        return getProcessStartTimeLinux(pid);
+    }
+    else if (process.platform === 'darwin') {
+        return getProcessStartTimeMacOS(pid);
+    }
+    return undefined;
+}
+/**
+ * Check if a process is alive (basic check, no start time verification).
+ */
+function isProcessAliveBasic(pid) {
+    try {
+        process.kill(pid, 0);
+        return true;
+    }
+    catch {
+        return false;
+    }
+}
+/**
+ * Verify that a bridge process is still running and is the same process
+ * that was originally spawned (guards against PID reuse).
+ *
+ * Returns false if:
+ * - Process is not alive
+ * - Start time was recorded but doesn't match (PID reused)
+ * - Start time was recorded but cannot be retrieved (fail-closed)
+ */
+export async function verifyProcessIdentity(meta) {
+    // Basic alive check first
+    if (!isProcessAliveBasic(meta.pid)) {
+        return false;
+    }
+    // If we have a recorded start time, verify it matches
+    if (meta.processStartTime !== undefined) {
+        const currentStartTime = await getProcessStartTime(meta.pid);
+        // Fail-closed: if we can't get current start time but we have a recorded one,
+        // assume PID reuse has occurred (safer than assuming same process)
+        if (currentStartTime === undefined) {
+            return false;
+        }
+        if (currentStartTime !== meta.processStartTime) {
+            return false; // PID reuse detected
+        }
+    }
+    return true;
+}
+// =============================================================================
+// SOCKET UTILITIES
+// =============================================================================
+/**
+ * Check if a path points to a Unix socket.
+ */
+function isSocket(socketPath) {
+    try {
+        const stat = fs.lstatSync(socketPath);
+        return stat.isSocket();
+    }
+    catch {
+        return false;
+    }
+}
+/**
+ * Safely unlink a socket file if it exists within the expected directory.
+ */
+function safeUnlinkSocket(socketPath) {
+    try {
+        if (fs.existsSync(socketPath)) {
+            fs.unlinkSync(socketPath);
+        }
+    }
+    catch {
+        // Ignore errors
+    }
+}
+// =============================================================================
+// BRIDGE METADATA VALIDATION
+// =============================================================================
+/**
+ * Validate that parsed JSON matches BridgeMeta schema.
+ */
+function isValidBridgeMeta(data) {
+    if (typeof data !== 'object' || data === null)
+        return false;
+    const obj = data;
+    return (typeof obj.pid === 'number' &&
+        Number.isInteger(obj.pid) &&
+        obj.pid > 0 &&
+        typeof obj.socketPath === 'string' &&
+        typeof obj.startedAt === 'string' &&
+        typeof obj.sessionId === 'string' &&
+        typeof obj.pythonEnv === 'object' &&
+        obj.pythonEnv !== null &&
+        typeof obj.pythonEnv.pythonPath === 'string' &&
+        (obj.processStartTime === undefined || typeof obj.processStartTime === 'number'));
+}
+// =============================================================================
+// PROCESS GROUP MANAGEMENT
+// =============================================================================
+/**
+ * Kill a process group (process + children).
+ * Uses negative PID to target the process group.
+ */
+function killProcessGroup(pid, signal) {
+    try {
+        // Negative PID sends signal to process group
+        process.kill(-pid, signal);
+        return true;
+    }
+    catch {
+        // Process might already be dead
+        try {
+            // Fallback: kill just the process
+            process.kill(pid, signal);
+            return true;
+        }
+        catch {
+            return false;
+        }
+    }
+}
+// =============================================================================
+// SPAWN BRIDGE SERVER
+// =============================================================================
+/**
+ * Spawn a new bridge server process for the given session.
+ *
+ * @param sessionId - Unique session identifier
+ * @param projectDir - Optional project directory (defaults to cwd)
+ * @returns BridgeMeta containing process information
+ */
+export async function spawnBridgeServer(sessionId, projectDir) {
+    const sessionDir = getSessionDir(sessionId);
+    ensureDirSync(sessionDir);
+    const socketPath = getBridgeSocketPath(sessionId);
+    const bridgePath = getBridgeScriptPath();
+    // Verify bridge script exists
+    if (!fs.existsSync(bridgePath)) {
+        throw new Error(`Bridge script not found: ${bridgePath}`);
+    }
+    // Clean up any stale socket
+    safeUnlinkSocket(socketPath);
+    const effectiveProjectDir = projectDir || process.cwd();
+    const pythonEnv = await ensurePythonEnvironment(effectiveProjectDir);
+    // Pass socket path as positional argument (matches gyoshu_bridge.py argparse)
+    const bridgeArgs = [bridgePath, socketPath];
+    const proc = spawn(pythonEnv.pythonPath, bridgeArgs, {
+        stdio: ['ignore', 'ignore', 'pipe'],
+        cwd: effectiveProjectDir,
+        env: { ...process.env, PYTHONUNBUFFERED: '1' },
+        detached: true,
+    });
+    proc.unref();
+    // Capture stderr for error reporting (capped at 64KB)
+    const MAX_STDERR_CHARS = 64 * 1024;
+    let stderrBuffer = '';
+    let stderrTruncated = false;
+    proc.stderr?.on('data', (chunk) => {
+        if (stderrTruncated)
+            return;
+        const text = chunk.toString();
+        if (stderrBuffer.length + text.length > MAX_STDERR_CHARS) {
+            stderrBuffer = stderrBuffer.slice(0, MAX_STDERR_CHARS - 20) + '\n...[truncated]';
+            stderrTruncated = true;
+        }
+        else {
+            stderrBuffer += text;
+        }
+    });
+    // Wait for socket to appear
+    const startTime = Date.now();
+    while (!isSocket(socketPath)) {
+        if (Date.now() - startTime > BRIDGE_SPAWN_TIMEOUT_MS) {
+            // Kill the process on timeout
+            if (proc.pid) {
+                killProcessGroup(proc.pid, 'SIGKILL');
+            }
+            // Clean up any non-socket file that might exist (poisoning attempt)
+            if (fs.existsSync(socketPath) && !isSocket(socketPath)) {
+                safeUnlinkSocket(socketPath);
+            }
+            throw new Error(`Bridge failed to create socket in ${BRIDGE_SPAWN_TIMEOUT_MS}ms. ` +
+                `Stderr: ${stderrBuffer || '(empty)'}`);
+        }
+        await sleep(100);
+    }
+    // Get process start time for PID reuse detection
+    const processStartTime = proc.pid ? await getProcessStartTime(proc.pid) : undefined;
+    const meta = {
+        pid: proc.pid,
+        socketPath,
+        startedAt: new Date().toISOString(),
+        sessionId,
+        pythonEnv,
+        processStartTime,
+    };
+    // Persist metadata
+    const metaPath = getBridgeMetaPath(sessionId);
+    await atomicWriteJson(metaPath, meta);
+    return meta;
+}
+// =============================================================================
+// ENSURE BRIDGE
+// =============================================================================
+/**
+ * Get or spawn a bridge server for the session.
+ *
+ * Implements security validations:
+ * - Anti-poisoning: Verifies sessionId in metadata matches expected
+ * - Anti-hijack: Verifies socketPath is the expected canonical path
+ * - Socket type: Verifies the socket path is actually a socket
+ * - Process identity: Verifies PID + start time match
+ *
+ * @param sessionId - Unique session identifier
+ * @param projectDir - Optional project directory (defaults to cwd)
+ * @returns BridgeMeta for the active bridge
+ */
+export async function ensureBridge(sessionId, projectDir) {
+    const metaPath = getBridgeMetaPath(sessionId);
+    const expectedSocketPath = getBridgeSocketPath(sessionId);
+    const meta = await safeReadJson(metaPath);
+    if (meta && isValidBridgeMeta(meta)) {
+        // Security validation 1: Anti-poisoning - verify sessionId matches
+        if (meta.sessionId !== sessionId) {
+            await deleteBridgeMeta(sessionId);
+            return spawnBridgeServer(sessionId, projectDir);
+        }
+        // Security validation 2: Anti-hijack - verify socket path is expected
+        if (meta.socketPath !== expectedSocketPath) {
+            await deleteBridgeMeta(sessionId);
+            return spawnBridgeServer(sessionId, projectDir);
+        }
+        // Security validation 3: Process identity - verify PID is still our process
+        const stillOurs = await verifyProcessIdentity(meta);
+        if (stillOurs) {
+            // Security validation 4: Socket type - verify it's actually a socket
+            if (isSocket(meta.socketPath)) {
+                return meta;
+            }
+            else {
+                // Socket missing or wrong type - kill the orphan process
+                try {
+                    process.kill(meta.pid, 'SIGKILL');
+                }
+                catch {
+                    // Process might already be dead
+                }
+            }
+        }
+        await deleteBridgeMeta(sessionId);
+    }
+    return spawnBridgeServer(sessionId, projectDir);
+}
+// =============================================================================
+// KILL BRIDGE WITH ESCALATION
+// =============================================================================
+/**
+ * Terminate a bridge process with signal escalation.
+ *
+ * Escalation order:
+ * 1. SIGINT - wait gracePeriodMs (default 5000ms)
+ * 2. SIGTERM - wait 2500ms
+ * 3. SIGKILL - immediate termination
+ *
+ * Uses process group kill (-pid) to also terminate child processes.
+ *
+ * @param sessionId - Session whose bridge to kill
+ * @param options - Optional configuration
+ * @returns EscalationResult with termination details
+ */
+export async function killBridgeWithEscalation(sessionId, options) {
+    const gracePeriod = options?.gracePeriodMs ?? DEFAULT_GRACE_PERIOD_MS;
+    const startTime = Date.now();
+    const metaPath = getBridgeMetaPath(sessionId);
+    const meta = await safeReadJson(metaPath);
+    if (!meta || !isValidBridgeMeta(meta)) {
+        return { terminated: true }; // Already dead or no metadata
+    }
+    // Anti-poisoning check
+    if (meta.sessionId !== sessionId) {
+        await deleteBridgeMeta(sessionId);
+        return { terminated: true };
+    }
+    // Verify we're killing the right process
+    if (!(await verifyProcessIdentity(meta))) {
+        await deleteBridgeMeta(sessionId);
+        return { terminated: true }; // Process already dead or PID reused
+    }
+    // Helper to wait for process exit with identity verification
+    const waitForExit = async (timeoutMs) => {
+        const checkStart = Date.now();
+        while (Date.now() - checkStart < timeoutMs) {
+            const stillOurs = await verifyProcessIdentity(meta);
+            if (!stillOurs) {
+                return true; // Process is gone or PID reused
+            }
+            await sleep(100);
+        }
+        return false;
+    };
+    let terminatedBy = 'SIGINT';
+    // Stage 1: SIGINT
+    killProcessGroup(meta.pid, 'SIGINT');
+    if (!(await waitForExit(gracePeriod))) {
+        // Stage 2: SIGTERM
+        terminatedBy = 'SIGTERM';
+        killProcessGroup(meta.pid, 'SIGTERM');
+        if (!(await waitForExit(SIGTERM_GRACE_MS))) {
+            // Stage 3: SIGKILL
+            terminatedBy = 'SIGKILL';
+            killProcessGroup(meta.pid, 'SIGKILL');
+            await waitForExit(1000); // Brief wait for SIGKILL
+        }
+    }
+    // Cleanup
+    await deleteBridgeMeta(sessionId);
+    const sessionDir = getSessionDir(sessionId);
+    const socketPath = meta.socketPath;
+    if (socketPath.startsWith(sessionDir)) {
+        safeUnlinkSocket(socketPath);
+    }
+    return {
+        terminated: true,
+        terminatedBy,
+        terminationTimeMs: Date.now() - startTime,
+    };
+}
+// =============================================================================
+// HELPER FUNCTIONS
+// =============================================================================
+/**
+ * Delete bridge metadata file.
+ */
+async function deleteBridgeMeta(sessionId) {
+    const metaPath = getBridgeMetaPath(sessionId);
+    try {
+        await fsPromises.unlink(metaPath);
+    }
+    catch {
+        // Ignore errors (file might not exist)
+    }
+}
+/**
+ * Sleep for specified milliseconds.
+ */
+function sleep(ms) {
+    return new Promise((resolve) => setTimeout(resolve, ms));
+}
+//# sourceMappingURL=bridge-manager.js.map

package/dist/tools/python-repl/bridge-manager.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"bridge-manager.js","sourceRoot":"","sources":["../../../src/tools/python-repl/bridge-manager.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAEH,OAAO,EAAE,KAAK,EAAgB,MAAM,eAAe,CAAC;AACpD,OAAO,KAAK,EAAE,MAAM,IAAI,CAAC;AACzB,OAAO,KAAK,UAAU,MAAM,aAAa,CAAC;AAC1C,OAAO,KAAK,IAAI,MAAM,MAAM,CAAC;AAC7B,OAAO,EAAE,aAAa,EAAE,MAAM,KAAK,CAAC;AACpC,OAAO,EAAE,QAAQ,EAAE,MAAM,eAAe,CAAC;AACzC,OAAO,EAAE,SAAS,EAAE,MAAM,MAAM,CAAC;AAGjC,OAAO,EAAE,aAAa,EAAE,mBAAmB,EAAE,iBAAiB,EAAE,MAAM,YAAY,CAAC;AACnF,OAAO,EAAE,eAAe,EAAE,YAAY,EAAE,aAAa,EAAE,MAAM,2BAA2B,CAAC;AAEzF,MAAM,aAAa,GAAG,SAAS,CAAC,QAAQ,CAAC,CAAC;AAE1C,gFAAgF;AAChF,YAAY;AACZ,gFAAgF;AAEhF,MAAM,uBAAuB,GAAG,KAAK,CAAC,CAAC,gCAAgC;AACvE,MAAM,uBAAuB,GAAG,IAAI,CAAC,CAAC,uBAAuB;AAC7D,MAAM,gBAAgB,GAAG,IAAI,CAAC,CAAC,0BAA0B;AAYzD,gFAAgF;AAChF,yBAAyB;AACzB,gFAAgF;AAEhF;;;GAGG;AACH,SAAS,mBAAmB;IAC1B,mCAAmC;IACnC,MAAM,UAAU,GAAG,aAAa,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IAClD,MAAM,SAAS,GAAG,IAAI,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC;IAE3C,qEAAqE;IACrE,MAAM,WAAW,GAAG,IAAI,CAAC,OAAO,CAAC,SAAS,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,CAAC,CAAC;IAC9D,OAAO,IAAI,CAAC,IAAI,CAAC,WAAW,EAAE,QAAQ,EAAE,kBAAkB,CAAC,CAAC;AAC9D,CAAC;AAED,gFAAgF;AAChF,+BAA+B;AAC/B,gFAAgF;AAEhF;;;GAGG;AACH,SAAS,uBAAuB,CAAC,WAAmB;IAClD,MAAM,SAAS,GAAG,OAAO,CAAC,QAAQ,KAAK,OAAO,CAAC;IAC/C,MAAM,MAAM,GAAG,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,KAAK,CAAC;IAC7C,MAAM,SAAS,GAAG,SAAS,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,QAAQ,CAAC;IACtD,MAAM,UAAU,GAAG,IAAI,CAAC,IAAI,CAAC,WAAW,EAAE,OAAO,EAAE,MAAM,EAAE,SAAS,CAAC,CAAC;IAEtE,IAAI,EAAE,CAAC,UAAU,CAAC,UAAU,CAAC,EAAE,CAAC;QAC9B,OAAO,EAAE,UAAU,EAAE,UAAU,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC;IAClD,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED;;;GAGG;AACH,KAAK,UAAU,uBAAuB,CAAC,WAAmB;IACxD,MAAM,QAAQ,GAAG,uBAAuB,CAAC,WAAW,CAAC,CAAC;IACtD,IAAI,QAAQ,EAAE,CAAC;QACb,OAAO,QAAQ,CAAC;IAClB,CAAC;IAED,+BAA+B;IAC/B,IAAI,CAAC;QACH,MAAM,aAAa,CAAC,SAAS,EAAE,CAAC,WAAW,CAAC,CAAC,CAAC;QAC9C,OAAO,EAAE,UAAU,EAAE,SAAS,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC;IACjD,CAAC;IAAC,MAAM,CAAC;QACP,wBAAwB;IAC1B,CAAC;IAED,MAAM,IAAI,KAAK,CACb,oEAAoE;QAClE,0BAA0B;QAC1B,iDAAiD,CACpD,CAAC;AACJ,CAAC;AAED,gFAAgF;AAChF,gCAAgC;AAChC,gFAAgF;AAEhF;;GAEG;AACH,KAAK,UAAU,wBAAwB,CAAC,GAAW;IACjD,IAAI,CAAC;QACH,MAAM,IAAI,GAAG,MAAM,UAAU,CAAC,QAAQ,CAAC,SAAS,GAAG,OAAO,EAAE,MAAM,CAAC,CAAC;QACpE,MAAM,UAAU,GAAG,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC;QACzC,IAAI,UAAU,KAAK,CAAC,CAAC;YAAE,OAAO,SAAS,CAAC;QAExC,MAAM,eAAe,GAAG,IAAI,CAAC,SAAS,CAAC,UAAU,GAAG,CAAC,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;QAClE,gFAAgF;QAChF,MAAM,cAAc,GAAG,eAAe,CAAC,EAAE,CAAC,CAAC;QAC3C,IAAI,CAAC,cAAc;YAAE,OAAO,SAAS,CAAC;QAEtC,MAAM,SAAS,GAAG,QAAQ,CAAC,cAAc,EAAE,EAAE,CAAC,CAAC;QAC/C,OAAO,KAAK,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC;IAClD,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,SAAS,CAAC;IACnB,CAAC;AACH,CAAC;AAED;;GAEG;AACH,KAAK,UAAU,wBAAwB,CAAC,GAAW;IACjD,IAAI,OAAO,GAAG,KAAK,QAAQ,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,GAAG,CAAC,IAAI,GAAG,IAAI,CAAC;QAAE,OAAO,SAAS,CAAC;IAEpF,IAAI,CAAC;QACH,MAAM,EAAE,MAAM,EAAE,GAAG,MAAM,aAAa,CAAC,IAAI,EAAE,CAAC,IAAI,EAAE,MAAM,CAAC,GAAG,CAAC,EAAE,IAAI,EAAE,SAAS,CAAC,EAAE;YACjF,GAAG,EAAE,EAAE,GAAG,OAAO,CAAC,GAAG,EAAE,MAAM,EAAE,GAAG,EAAE;SACrC,CAAC,CAAC;QACH,MAAM,MAAM,GAAG,MAAM,CAAC,IAAI,EAAE,CAAC;QAC7B,IAAI,CAAC,MAAM;YAAE,OAAO,SAAS,CAAC;QAE9B,MAAM,IAAI,GAAG,IAAI,IAAI,CAAC,MAAM,CAAC,CAAC;QAC9B,IAAI,KAAK,CAAC,IAAI,CAAC,OAAO,EAAE,CAAC;YAAE,OAAO,SAAS,CAAC;QAE5C,OAAO,IAAI,CAAC,OAAO,EAAE,CAAC;IACxB,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,SAAS,CAAC;IACnB,CAAC;AACH,CAAC;AAED;;GAEG;AACH,KAAK,UAAU,mBAAmB,CAAC,GAAW;IAC5C,IAAI,OAAO,CAAC,QAAQ,KAAK,OAAO,EAAE,CAAC;QACjC,OAAO,wBAAwB,CAAC,GAAG,CAAC,CAAC;IACvC,CAAC;SAAM,IAAI,OAAO,CAAC,QAAQ,KAAK,QAAQ,EAAE,CAAC;QACzC,OAAO,wBAAwB,CAAC,GAAG,CAAC,CAAC;IACvC,CAAC;IACD,OAAO,SAAS,CAAC;AACnB,CAAC;AAED;;GAEG;AACH,SAAS,mBAAmB,CAAC,GAAW;IACtC,IAAI,CAAC;QACH,OAAO,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC;QACrB,OAAO,IAAI,CAAC;IACd,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,KAAK,CAAC;IACf,CAAC;AACH,CAAC;AAED;;;;;;;;GAQG;AACH,MAAM,CAAC,KAAK,UAAU,qBAAqB,CAAC,IAAgB;IAC1D,0BAA0B;IAC1B,IAAI,CAAC,mBAAmB,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC;QACnC,OAAO,KAAK,CAAC;IACf,CAAC;IAED,sDAAsD;IACtD,IAAI,IAAI,CAAC,gBAAgB,KAAK,SAAS,EAAE,CAAC;QACxC,MAAM,gBAAgB,GAAG,MAAM,mBAAmB,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QAE7D,8EAA8E;QAC9E,mEAAmE;QACnE,IAAI,gBAAgB,KAAK,SAAS,EAAE,CAAC;YACnC,OAAO,KAAK,CAAC;QACf,CAAC;QAED,IAAI,gBAAgB,KAAK,IAAI,CAAC,gBAAgB,EAAE,CAAC;YAC/C,OAAO,KAAK,CAAC,CAAC,qBAAqB;QACrC,CAAC;IACH,CAAC;IAED,OAAO,IAAI,CAAC;AACd,CAAC;AAED,gFAAgF;AAChF,mBAAmB;AACnB,gFAAgF;AAEhF;;GAEG;AACH,SAAS,QAAQ,CAAC,UAAkB;IAClC,IAAI,CAAC;QACH,MAAM,IAAI,GAAG,EAAE,CAAC,SAAS,CAAC,UAAU,CAAC,CAAC;QACtC,OAAO,IAAI,CAAC,QAAQ,EAAE,CAAC;IACzB,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,KAAK,CAAC;IACf,CAAC;AACH,CAAC;AAED;;GAEG;AACH,SAAS,gBAAgB,CAAC,UAAkB;IAC1C,IAAI,CAAC;QACH,IAAI,EAAE,CAAC,UAAU,CAAC,UAAU,CAAC,EAAE,CAAC;YAC9B,EAAE,CAAC,UAAU,CAAC,UAAU,CAAC,CAAC;QAC5B,CAAC;IACH,CAAC;IAAC,MAAM,CAAC;QACP,gBAAgB;IAClB,CAAC;AACH,CAAC;AAED,gFAAgF;AAChF,6BAA6B;AAC7B,gFAAgF;AAEhF;;GAEG;AACH,SAAS,iBAAiB,CAAC,IAAa;IACtC,IAAI,OAAO,IAAI,KAAK,QAAQ,IAAI,IAAI,KAAK,IAAI;QAAE,OAAO,KAAK,CAAC;IAC5D,MAAM,GAAG,GAAG,IAA+B,CAAC;IAE5C,OAAO,CACL,OAAO,GAAG,CAAC,GAAG,KAAK,QAAQ;QAC3B,MAAM,CAAC,SAAS,CAAC,GAAG,CAAC,GAAG,CAAC;QACzB,GAAG,CAAC,GAAG,GAAG,CAAC;QACX,OAAO,GAAG,CAAC,UAAU,KAAK,QAAQ;QAClC,OAAO,GAAG,CAAC,SAAS,KAAK,QAAQ;QACjC,OAAO,GAAG,CAAC,SAAS,KAAK,QAAQ;QACjC,OAAO,GAAG,CAAC,SAAS,KAAK,QAAQ;QACjC,GAAG,CAAC,SAAS,KAAK,IAAI;QACtB,OAAQ,GAAG,CAAC,SAAqC,CAAC,UAAU,KAAK,QAAQ;QACzE,CAAC,GAAG,CAAC,gBAAgB,KAAK,SAAS,IAAI,OAAO,GAAG,CAAC,gBAAgB,KAAK,QAAQ,CAAC,CACjF,CAAC;AACJ,CAAC;AAED,gFAAgF;AAChF,2BAA2B;AAC3B,gFAAgF;AAEhF;;;GAGG;AACH,SAAS,gBAAgB,CAAC,GAAW,EAAE,MAAsB;IAC3D,IAAI,CAAC;QACH,6CAA6C;QAC7C,OAAO,CAAC,IAAI,CAAC,CAAC,GAAG,EAAE,MAAM,CAAC,CAAC;QAC3B,OAAO,IAAI,CAAC;IACd,CAAC;IAAC,MAAM,CAAC;QACP,gCAAgC;QAChC,IAAI,CAAC;YACH,kCAAkC;YAClC,OAAO,CAAC,IAAI,CAAC,GAAG,EAAE,MAAM,CAAC,CAAC;YAC1B,OAAO,IAAI,CAAC;QACd,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,KAAK,CAAC;QACf,CAAC;IACH,CAAC;AACH,CAAC;AAED,gFAAgF;AAChF,sBAAsB;AACtB,gFAAgF;AAEhF;;;;;;GAMG;AACH,MAAM,CAAC,KAAK,UAAU,iBAAiB,CACrC,SAAiB,EACjB,UAAmB;IAEnB,MAAM,UAAU,GAAG,aAAa,CAAC,SAAS,CAAC,CAAC;IAC5C,aAAa,CAAC,UAAU,CAAC,CAAC;IAE1B,MAAM,UAAU,GAAG,mBAAmB,CAAC,SAAS,CAAC,CAAC;IAClD,MAAM,UAAU,GAAG,mBAAmB,EAAE,CAAC;IAEzC,8BAA8B;IAC9B,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,UAAU,CAAC,EAAE,CAAC;QAC/B,MAAM,IAAI,KAAK,CAAC,4BAA4B,UAAU,EAAE,CAAC,CAAC;IAC5D,CAAC;IAED,4BAA4B;IAC5B,gBAAgB,CAAC,UAAU,CAAC,CAAC;IAE7B,MAAM,mBAAmB,GAAG,UAAU,IAAI,OAAO,CAAC,GAAG,EAAE,CAAC;IACxD,MAAM,SAAS,GAAG,MAAM,uBAAuB,CAAC,mBAAmB,CAAC,CAAC;IAErE,8EAA8E;IAC9E,MAAM,UAAU,GAAG,CAAC,UAAU,EAAE,UAAU,CAAC,CAAC;IAE5C,MAAM,IAAI,GAAiB,KAAK,CAAC,SAAS,CAAC,UAAU,EAAE,UAAU,EAAE;QACjE,KAAK,EAAE,CAAC,QAAQ,EAAE,QAAQ,EAAE,MAAM,CAAC;QACnC,GAAG,EAAE,mBAAmB;QACxB,GAAG,EAAE,EAAE,GAAG,OAAO,CAAC,GAAG,EAAE,gBAAgB,EAAE,GAAG,EAAE;QAC9C,QAAQ,EAAE,IAAI;KACf,CAAC,CAAC;IAEH,IAAI,CAAC,KAAK,EAAE,CAAC;IAEb,sDAAsD;IACtD,MAAM,gBAAgB,GAAG,EAAE,GAAG,IAAI,CAAC;IACnC,IAAI,YAAY,GAAG,EAAE,CAAC;IACtB,IAAI,eAAe,GAAG,KAAK,CAAC;IAE5B,IAAI,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,EAAE,CAAC,KAAa,EAAE,EAAE;QACxC,IAAI,eAAe;YAAE,OAAO;QAC5B,MAAM,IAAI,GAAG,KAAK,CAAC,QAAQ,EAAE,CAAC;QAC9B,IAAI,YAAY,CAAC,MAAM,GAAG,IAAI,CAAC,MAAM,GAAG,gBAAgB,EAAE,CAAC;YACzD,YAAY,GAAG,YAAY,CAAC,KAAK,CAAC,CAAC,EAAE,gBAAgB,GAAG,EAAE,CAAC,GAAG,kBAAkB,CAAC;YACjF,eAAe,GAAG,IAAI,CAAC;QACzB,CAAC;aAAM,CAAC;YACN,YAAY,IAAI,IAAI,CAAC;QACvB,CAAC;IACH,CAAC,CAAC,CAAC;IAEH,4BAA4B;IAC5B,MAAM,SAAS,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;IAC7B,OAAO,CAAC,QAAQ,CAAC,UAAU,CAAC,EAAE,CAAC;QAC7B,IAAI,IAAI,CAAC,GAAG,EAAE,GAAG,SAAS,GAAG,uBAAuB,EAAE,CAAC;YACrD,8BAA8B;YAC9B,IAAI,IAAI,CAAC,GAAG,EAAE,CAAC;gBACb,gBAAgB,CAAC,IAAI,CAAC,GAAG,EAAE,SAAS,CAAC,CAAC;YACxC,CAAC;YAED,oEAAoE;YACpE,IAAI,EAAE,CAAC,UAAU,CAAC,UAAU,CAAC,IAAI,CAAC,QAAQ,CAAC,UAAU,CAAC,EAAE,CAAC;gBACvD,gBAAgB,CAAC,UAAU,CAAC,CAAC;YAC/B,CAAC;YAED,MAAM,IAAI,KAAK,CACb,qCAAqC,uBAAuB,MAAM;gBAChE,WAAW,YAAY,IAAI,SAAS,EAAE,CACzC,CAAC;QACJ,CAAC;QACD,MAAM,KAAK,CAAC,GAAG,CAAC,CAAC;IACnB,CAAC;IAED,iDAAiD;IACjD,MAAM,gBAAgB,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,MAAM,mBAAmB,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;IAEpF,MAAM,IAAI,GAAe;QACvB,GAAG,EAAE,IAAI,CAAC,GAAI;QACd,UAAU;QACV,SAAS,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;QACnC,SAAS;QACT,SAAS;QACT,gBAAgB;KACjB,CAAC;IAEF,mBAAmB;IACnB,MAAM,QAAQ,GAAG,iBAAiB,CAAC,SAAS,CAAC,CAAC;IAC9C,MAAM,eAAe,CAAC,QAAQ,EAAE,IAAI,CAAC,CAAC;IAEtC,OAAO,IAAI,CAAC;AACd,CAAC;AAED,gFAAgF;AAChF,gBAAgB;AAChB,gFAAgF;AAEhF;;;;;;;;;;;;GAYG;AACH,MAAM,CAAC,KAAK,UAAU,YAAY,CAAC,SAAiB,EAAE,UAAmB;IACvE,MAAM,QAAQ,GAAG,iBAAiB,CAAC,SAAS,CAAC,CAAC;IAC9C,MAAM,kBAAkB,GAAG,mBAAmB,CAAC,SAAS,CAAC,CAAC;IAE1D,MAAM,IAAI,GAAG,MAAM,YAAY,CAAa,QAAQ,CAAC,CAAC;IAEtD,IAAI,IAAI,IAAI,iBAAiB,CAAC,IAAI,CAAC,EAAE,CAAC;QACpC,mEAAmE;QACnE,IAAI,IAAI,CAAC,SAAS,KAAK,SAAS,EAAE,CAAC;YACjC,MAAM,gBAAgB,CAAC,SAAS,CAAC,CAAC;YAClC,OAAO,iBAAiB,CAAC,SAAS,EAAE,UAAU,CAAC,CAAC;QAClD,CAAC;QAED,sEAAsE;QACtE,IAAI,IAAI,CAAC,UAAU,KAAK,kBAAkB,EAAE,CAAC;YAC3C,MAAM,gBAAgB,CAAC,SAAS,CAAC,CAAC;YAClC,OAAO,iBAAiB,CAAC,SAAS,EAAE,UAAU,CAAC,CAAC;QAClD,CAAC;QAED,4EAA4E;QAC5E,MAAM,SAAS,GAAG,MAAM,qBAAqB,CAAC,IAAI,CAAC,CAAC;QACpD,IAAI,SAAS,EAAE,CAAC;YACd,qEAAqE;YACrE,IAAI,QAAQ,CAAC,IAAI,CAAC,UAAU,CAAC,EAAE,CAAC;gBAC9B,OAAO,IAAI,CAAC;YACd,CAAC;iBAAM,CAAC;gBACN,yDAAyD;gBACzD,IAAI,CAAC;oBACH,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,SAAS,CAAC,CAAC;gBACpC,CAAC;gBAAC,MAAM,CAAC;oBACP,gCAAgC;gBAClC,CAAC;YACH,CAAC;QACH,CAAC;QAED,MAAM,gBAAgB,CAAC,SAAS,CAAC,CAAC;IACpC,CAAC;IAED,OAAO,iBAAiB,CAAC,SAAS,EAAE,UAAU,CAAC,CAAC;AAClD,CAAC;AAED,gFAAgF;AAChF,8BAA8B;AAC9B,gFAAgF;AAEhF;;;;;;;;;;;;;GAaG;AACH,MAAM,CAAC,KAAK,UAAU,wBAAwB,CAC5C,SAAiB,EACjB,OAAoC;IAEpC,MAAM,WAAW,GAAG,OAAO,EAAE,aAAa,IAAI,uBAAuB,CAAC;IACtE,MAAM,SAAS,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;IAE7B,MAAM,QAAQ,GAAG,iBAAiB,CAAC,SAAS,CAAC,CAAC;IAC9C,MAAM,IAAI,GAAG,MAAM,YAAY,CAAa,QAAQ,CAAC,CAAC;IAEtD,IAAI,CAAC,IAAI,IAAI,CAAC,iBAAiB,CAAC,IAAI,CAAC,EAAE,CAAC;QACtC,OAAO,EAAE,UAAU,EAAE,IAAI,EAAE,CAAC,CAAC,8BAA8B;IAC7D,CAAC;IAED,uBAAuB;IACvB,IAAI,IAAI,CAAC,SAAS,KAAK,SAAS,EAAE,CAAC;QACjC,MAAM,gBAAgB,CAAC,SAAS,CAAC,CAAC;QAClC,OAAO,EAAE,UAAU,EAAE,IAAI,EAAE,CAAC;IAC9B,CAAC;IAED,yCAAyC;IACzC,IAAI,CAAC,CAAC,MAAM,qBAAqB,CAAC,IAAI,CAAC,CAAC,EAAE,CAAC;QACzC,MAAM,gBAAgB,CAAC,SAAS,CAAC,CAAC;QAClC,OAAO,EAAE,UAAU,EAAE,IAAI,EAAE,CAAC,CAAC,qCAAqC;IACpE,CAAC;IAED,6DAA6D;IAC7D,MAAM,WAAW,GAAG,KAAK,EAAE,SAAiB,EAAoB,EAAE;QAChE,MAAM,UAAU,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QAC9B,OAAO,IAAI,CAAC,GAAG,EAAE,GAAG,UAAU,GAAG,SAAS,EAAE,CAAC;YAC3C,MAAM,SAAS,GAAG,MAAM,qBAAqB,CAAC,IAAI,CAAC,CAAC;YACpD,IAAI,CAAC,SAAS,EAAE,CAAC;gBACf,OAAO,IAAI,CAAC,CAAC,gCAAgC;YAC/C,CAAC;YACD,MAAM,KAAK,CAAC,GAAG,CAAC,CAAC;QACnB,CAAC;QACD,OAAO,KAAK,CAAC;IACf,CAAC,CAAC;IAEF,IAAI,YAAY,GAAqC,QAAQ,CAAC;IAE9D,kBAAkB;IAClB,gBAAgB,CAAC,IAAI,CAAC,GAAG,EAAE,QAAQ,CAAC,CAAC;IAErC,IAAI,CAAC,CAAC,MAAM,WAAW,CAAC,WAAW,CAAC,CAAC,EAAE,CAAC;QACtC,mBAAmB;QACnB,YAAY,GAAG,SAAS,CAAC;QACzB,gBAAgB,CAAC,IAAI,CAAC,GAAG,EAAE,SAAS,CAAC,CAAC;QAEtC,IAAI,CAAC,CAAC,MAAM,WAAW,CAAC,gBAAgB,CAAC,CAAC,EAAE,CAAC;YAC3C,mBAAmB;YACnB,YAAY,GAAG,SAAS,CAAC;YACzB,gBAAgB,CAAC,IAAI,CAAC,GAAG,EAAE,SAAS,CAAC,CAAC;YACtC,MAAM,WAAW,CAAC,IAAI,CAAC,CAAC,CAAC,yBAAyB;QACpD,CAAC;IACH,CAAC;IAED,UAAU;IACV,MAAM,gBAAgB,CAAC,SAAS,CAAC,CAAC;IAElC,MAAM,UAAU,GAAG,aAAa,CAAC,SAAS,CAAC,CAAC;IAC5C,MAAM,UAAU,GAAG,IAAI,CAAC,UAAU,CAAC;IACnC,IAAI,UAAU,CAAC,UAAU,CAAC,UAAU,CAAC,EAAE,CAAC;QACtC,gBAAgB,CAAC,UAAU,CAAC,CAAC;IAC/B,CAAC;IAED,OAAO;QACL,UAAU,EAAE,IAAI;QAChB,YAAY;QACZ,iBAAiB,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,SAAS;KAC1C,CAAC;AACJ,CAAC;AAED,gFAAgF;AAChF,mBAAmB;AACnB,gFAAgF;AAEhF;;GAEG;AACH,KAAK,UAAU,gBAAgB,CAAC,SAAiB;IAC/C,MAAM,QAAQ,GAAG,iBAAiB,CAAC,SAAS,CAAC,CAAC;IAC9C,IAAI,CAAC;QACH,MAAM,UAAU,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;IACpC,CAAC;IAAC,MAAM,CAAC;QACP,uCAAuC;IACzC,CAAC;AACH,CAAC;AAED;;GAEG;AACH,SAAS,KAAK,CAAC,EAAU;IACvB,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,UAAU,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC,CAAC;AAC3D,CAAC"}

package/dist/tools/python-repl/index.d.ts

@@ -0,0 +1,40 @@
+/**
+ * Python REPL Tool - Persistent Python execution environment
+ *
+ * Provides a persistent Python REPL with variable persistence across
+ * tool invocations, session locking, and structured output markers.
+ */
+import { pythonReplHandler } from './tool.js';
+export declare const pythonReplTool: {
+    name: string;
+    description: string;
+    schema: import("zod").ZodObject<{
+        action: import("zod").ZodEnum<["execute", "interrupt", "reset", "get_state"]>;
+        researchSessionID: import("zod").ZodString;
+        code: import("zod").ZodOptional<import("zod").ZodString>;
+        executionLabel: import("zod").ZodOptional<import("zod").ZodString>;
+        executionTimeout: import("zod").ZodDefault<import("zod").ZodNumber>;
+        queueTimeout: import("zod").ZodDefault<import("zod").ZodNumber>;
+        projectDir: import("zod").ZodOptional<import("zod").ZodString>;
+    }, "strip", import("zod").ZodTypeAny, {
+        action: "execute" | "interrupt" | "reset" | "get_state";
+        researchSessionID: string;
+        executionTimeout: number;
+        queueTimeout: number;
+        code?: string | undefined;
+        executionLabel?: string | undefined;
+        projectDir?: string | undefined;
+    }, {
+        action: "execute" | "interrupt" | "reset" | "get_state";
+        researchSessionID: string;
+        code?: string | undefined;
+        executionLabel?: string | undefined;
+        executionTimeout?: number | undefined;
+        queueTimeout?: number | undefined;
+        projectDir?: string | undefined;
+    }>;
+    handler: typeof pythonReplHandler;
+};
+export * from './types.js';
+export { pythonReplSchema, pythonReplHandler } from './tool.js';
+//# sourceMappingURL=index.d.ts.map

package/dist/tools/python-repl/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/tools/python-repl/index.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,OAAO,EAAoB,iBAAiB,EAAE,MAAM,WAAW,CAAC;AAEhE,eAAO,MAAM,cAAc;;;;;;;;;;;;;;;;;;;;;;;;;;;;;CAyB1B,CAAC;AAGF,cAAc,YAAY,CAAC;AAC3B,OAAO,EAAE,gBAAgB,EAAE,iBAAiB,EAAE,MAAM,WAAW,CAAC"}

package/dist/tools/python-repl/index.js

@@ -0,0 +1,36 @@
+/**
+ * Python REPL Tool - Persistent Python execution environment
+ *
+ * Provides a persistent Python REPL with variable persistence across
+ * tool invocations, session locking, and structured output markers.
+ */
+import { pythonReplSchema, pythonReplHandler } from './tool.js';
+export const pythonReplTool = {
+    name: 'python_repl',
+    description: `Execute Python code in a persistent REPL environment with variable persistence across invocations.
+
+Actions:
+- execute: Run Python code (variables persist between calls)
+- reset: Clear namespace and reset environment
+- get_state: Get memory usage and list of defined variables
+- interrupt: Stop long-running execution
+
+Features:
+- Variables persist across tool calls within the same session
+- Structured output markers: [OBJECTIVE], [DATA], [FINDING], [STAT:*], [LIMITATION]
+- Memory tracking (RSS/VMS)
+- Automatic timeout handling (default 5 minutes)
+- Session locking for safe concurrent access
+
+Use this instead of Bash heredocs when you need:
+- Multi-step analysis with state persistence
+- Large datasets that shouldn't be reloaded
+- Iterative ML model training
+- Any workflow benefiting from Python state persistence`,
+    schema: pythonReplSchema,
+    handler: pythonReplHandler
+};
+// Re-export types for convenience
+export * from './types.js';
+export { pythonReplSchema, pythonReplHandler } from './tool.js';
+//# sourceMappingURL=index.js.map

package/dist/tools/python-repl/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../src/tools/python-repl/index.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,OAAO,EAAE,gBAAgB,EAAE,iBAAiB,EAAE,MAAM,WAAW,CAAC;AAEhE,MAAM,CAAC,MAAM,cAAc,GAAG;IAC5B,IAAI,EAAE,aAAa;IACnB,WAAW,EAAE;;;;;;;;;;;;;;;;;;;wDAmByC;IAEtD,MAAM,EAAE,gBAAgB;IACxB,OAAO,EAAE,iBAAiB;CAC3B,CAAC;AAEF,kCAAkC;AAClC,cAAc,YAAY,CAAC;AAC3B,OAAO,EAAE,gBAAgB,EAAE,iBAAiB,EAAE,MAAM,WAAW,CAAC"}

package/dist/tools/python-repl/paths.d.ts

@@ -0,0 +1,84 @@
+/**
+ * Path utilities for Python REPL tool
+ *
+ * Provides secure path resolution for session directories, sockets, and metadata.
+ * Uses OS-appropriate runtime directories outside the project root.
+ */
+/**
+ * Get the path to the runtime directory.
+ * Contains ephemeral session data like locks and sockets.
+ * Uses OS-appropriate temp directories.
+ *
+ * Priority:
+ * 1. XDG_RUNTIME_DIR/omc (Linux standard, usually /run/user/{uid})
+ * 2. Platform-specific user cache directory
+ * 3. os.tmpdir() fallback
+ *
+ * @returns Path to runtime directory
+ *
+ * @example
+ * getRuntimeDir();
+ * // Linux with XDG: '/run/user/1000/omc'
+ * // macOS: '~/Library/Caches/omc/runtime'
+ * // Fallback: '/tmp/omc/runtime'
+ */
+export declare function getRuntimeDir(): string;
+/**
+ * Shorten a session ID to fit within Unix socket path constraints.
+ * Uses SHA256 hash truncated to 12 hex chars (48 bits).
+ *
+ * Unix sockets have path length limits (UNIX_PATH_MAX):
+ * - Linux: 108 bytes
+ * - macOS: 104 bytes
+ *
+ * SECURITY: Always hashes the input, even for short IDs.
+ * This prevents path traversal attacks via malicious short IDs like ".." or "../x".
+ *
+ * @param sessionId - Original session identifier (can be any length)
+ * @returns Short identifier (12 hex chars) suitable for socket paths
+ */
+export declare function shortenSessionId(sessionId: string): string;
+/**
+ * Get the path to a specific session's runtime directory.
+ * Uses shortened session ID to ensure socket paths stay within limits.
+ *
+ * @param sessionId - Unique identifier for the session
+ * @returns Path to runtime/{shortId}/ in OS temp directory
+ */
+export declare function getSessionDir(sessionId: string): string;
+/**
+ * Get the path to a session's bridge socket.
+ * Path is kept short to respect Unix socket path limits (~108 bytes).
+ *
+ * @param sessionId - Unique identifier for the session
+ * @returns Path to bridge.sock in session's runtime directory
+ */
+export declare function getBridgeSocketPath(sessionId: string): string;
+/**
+ * Get the path to a session's bridge metadata file.
+ *
+ * @param sessionId - Unique identifier for the session
+ * @returns Path to bridge_meta.json in session's runtime directory
+ */
+export declare function getBridgeMetaPath(sessionId: string): string;
+/**
+ * Get the path to a session's lock file.
+ *
+ * @param sessionId - Unique identifier for the session
+ * @returns Path to session.lock in session's runtime directory
+ */
+export declare function getSessionLockPath(sessionId: string): string;
+/**
+ * Validates that a path segment is safe to use in file paths.
+ * Prevents directory traversal and path injection attacks.
+ *
+ * @param segment - The path segment to validate (e.g., session ID, file name)
+ * @param name - Name of the parameter for error messages (e.g., "sessionId", "filename")
+ * @throws Error if segment is invalid
+ *
+ * @example
+ * validatePathSegment("my-session-123", "sessionId"); // OK
+ * validatePathSegment("../evil", "sessionId"); // throws Error
+ */
+export declare function validatePathSegment(segment: string, name: string): void;
+//# sourceMappingURL=paths.d.ts.map

package/dist/tools/python-repl/paths.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"paths.d.ts","sourceRoot":"","sources":["../../../src/tools/python-repl/paths.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AA2DH;;;;;;;;;;;;;;;;;GAiBG;AACH,wBAAgB,aAAa,IAAI,MAAM,CAkBtC;AAMD;;;;;;;;;;;;;GAaG;AACH,wBAAgB,gBAAgB,CAAC,SAAS,EAAE,MAAM,GAAG,MAAM,CAQ1D;AAED;;;;;;GAMG;AACH,wBAAgB,aAAa,CAAC,SAAS,EAAE,MAAM,GAAG,MAAM,CAGvD;AAED;;;;;;GAMG;AACH,wBAAgB,mBAAmB,CAAC,SAAS,EAAE,MAAM,GAAG,MAAM,CAE7D;AAED;;;;;GAKG;AACH,wBAAgB,iBAAiB,CAAC,SAAS,EAAE,MAAM,GAAG,MAAM,CAE3D;AAED;;;;;GAKG;AACH,wBAAgB,kBAAkB,CAAC,SAAS,EAAE,MAAM,GAAG,MAAM,CAE5D;AAMD;;;;;;;;;;;GAWG;AACH,wBAAgB,mBAAmB,CAAC,OAAO,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,GAAG,IAAI,CAyCvE"}