pi-codex-auto-review 0.1.0

package/node_modules/@anthropic-ai/sandbox-runtime/dist/cli.d.ts

@@ -0,0 +1,3 @@
+#!/usr/bin/env node
+export {};
+//# sourceMappingURL=cli.d.ts.map

package/node_modules/@anthropic-ai/sandbox-runtime/dist/cli.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"cli.d.ts","sourceRoot":"","sources":["../src/cli.ts"],"names":[],"mappings":""}

package/node_modules/@anthropic-ai/sandbox-runtime/dist/cli.js

@@ -0,0 +1,472 @@
+#!/usr/bin/env node
+import { quote } from './utils/shell-quote.js';
+import { Command, InvalidArgumentError } from 'commander';
+import { SandboxManager } from './index.js';
+import { spawn } from 'child_process';
+import { logForDebugging } from './utils/debug.js';
+import { loadConfig, loadConfigFromString } from './utils/config-loader.js';
+import * as readline from 'readline';
+import * as fs from 'fs';
+import * as net from 'net';
+import * as path from 'path';
+import * as os from 'os';
+import { createRequire } from 'module';
+/**
+ * Get default config path
+ */
+function getDefaultConfigPath() {
+    return path.join(os.homedir(), '.srt-settings.json');
+}
+/**
+ * The version `--version` reports, read from the package's own manifest, which
+ * sits one directory above both src/cli.ts and dist/cli.js. There is no
+ * fallback: a manifest that cannot be read is a broken install, and a
+ * plausible-looking wrong version is worse than the throw, because the README
+ * pins behaviour to specific releases.
+ */
+function getPackageVersion() {
+    const manifest = createRequire(import.meta.url)('../package.json');
+    return manifest.version;
+}
+/**
+ * How long a command that ignores SIGTERM gets before SIGKILL.
+ */
+const KILL_GRACE_MS = 2000;
+/**
+ * Exit rather than run under the built-in defaults, naming what that would
+ * cost. The defaults are not a weaker version of any settings file — they
+ * are a different config, so falling back to them drops rules rather than
+ * relaxing them.
+ */
+function refuseSettings(reason, lost) {
+    console.error(`Error: ${reason}`);
+    console.error(`Refusing to run with the built-in defaults, which would drop ${lost}.`);
+    process.exit(1);
+}
+/**
+ * What a fall-back to the built-in defaults costs when the file is there.
+ */
+const FILE_RULES = "this file's rules (its denyRead, allowRead and credential entries included)";
+/**
+ * Create a minimal default config if no config file exists
+ */
+function getDefaultConfig() {
+    return {
+        network: {
+            allowedDomains: [],
+            deniedDomains: [],
+        },
+        filesystem: {
+            denyRead: [],
+            allowRead: [],
+            allowWrite: [],
+            denyWrite: [],
+        },
+    };
+}
+/**
+ * A readable stream over the control fd. A pipe or socket is read through a
+ * libuv stream handle, driven by the event loop: fs.createReadStream would
+ * park a threadpool thread in a blocking read(2) that process.exit() then
+ * waits for, so srt would outlive the wrapped command until the parent
+ * closed the fd. Anything else keeps the fs stream, which is right for a
+ * regular file (its reads never block) and leaves a tty with the old wait.
+ * Under Bun, net.Socket({ fd }) reads nothing, and Bun's fs stream does not
+ * hold exit, so the fs stream serves every fd kind there.
+ *
+ * A libuv handle switches the fd's open file description to non-blocking
+ * mode, from the moment srt opens it and for good (Node restores only fds
+ * 0-2 at exit). A parent that shares that description (a shell
+ * `exec 3<fifo`, a Python pass_fds of an fd it keeps using) then sees
+ * EAGAIN on its own blocking reads, so hand srt a dedicated pipe end.
+ */
+function openControlFd(fd) {
+    // fstat succeeds on descriptors srt can never read a byte from — one
+    // opened write-only, the write end of a pipe — and a reader over those
+    // fails only once the command is already running. A zero-length readv(2)
+    // asks the kernel whether a read is permitted at all without performing
+    // one: EBADF for those, 0 for every readable kind, on both node and bun,
+    // without blocking on an empty pipe or consuming a byte of a full one.
+    fs.readvSync(fd, [Buffer.alloc(0)]);
+    const stat = fs.fstatSync(fd);
+    if (!process.versions.bun && (stat.isFIFO() || stat.isSocket())) {
+        try {
+            return new net.Socket({ fd, readable: true, writable: false }).unref();
+        }
+        catch (err) {
+            const code = err.code;
+            if (code !== 'ERR_INVALID_FD_TYPE') {
+                // ERR_INVALID_FD_TYPE is the only refusal that leaves the fd
+                // untouched (a datagram or seqpacket socket, which the fs stream
+                // still reads, one read(2) per datagram). Every other failure comes
+                // out of uv_pipe_open, which has already switched the fd to
+                // non-blocking mode: an fs stream over it would read EAGAIN
+                // forever, so no fallback is left to take.
+                throw new Error(`could not be adopted as a stream (${code ?? String(err)})`);
+            }
+            logForDebugging(`Control fd ${fd} is not a stream socket (${err instanceof Error ? err.message : String(err)}); reading it through fs`);
+        }
+    }
+    return fs.createReadStream('', { fd });
+}
+/**
+ * Parse --control-fd: an integer descriptor number >= 3.
+ */
+function parseControlFd(value) {
+    // Number() alone would also take '0x10', '3e0' and ' 5 '.
+    if (!/^\d+$/.test(value) || Number(value) < 3) {
+        throw new InvalidArgumentError('must be an integer file descriptor >= 3 (0-2 are stdin, stdout and stderr).');
+    }
+    return Number(value);
+}
+/**
+ * stdio for the sandboxed command: the three standard streams, plus
+ * /dev/null over the control fd's slot, so nothing inside the sandbox can
+ * read the channel that carries the policy confining it.
+ *
+ * The displacement is what matters on Linux. On macOS libuv spawns through
+ * posix_spawn with POSIX_SPAWN_CLOEXEC_DEFAULT, which already keeps every
+ * descriptor the caller did not list out of the child.
+ */
+function sandboxedStdio(controlFd) {
+    const stdio = [
+        'inherit',
+        'inherit',
+        'inherit',
+    ];
+    if (controlFd === undefined) {
+        return stdio;
+    }
+    // 'ignore' past fd 2 leaves a slot as it is rather than closing it, so the
+    // control fd's slot needs a descriptor of its own to displace it with.
+    while (stdio.length < controlFd) {
+        stdio.push('ignore');
+    }
+    // Only close-on-exec keeps an inherited descriptor out of an exec'd
+    // command, and uv_disable_stdio_inheritance() stops at the first closed
+    // number above 15, so `--control-fd 20` with 16-19 closed leaves the
+    // channel live in the sandbox. Displacing the slot covers every kind of
+    // descriptor, which re-opening the fd privately does not: a unix socket
+    // cannot be re-opened through /proc/self/fd at all (ENXIO).
+    stdio.push(fs.openSync('/dev/null', 'r'));
+    return stdio;
+}
+async function main() {
+    const program = new Command();
+    program
+        .name('srt')
+        .description('Run commands in a sandbox with network and filesystem restrictions')
+        .version(getPackageVersion());
+    // ── Windows install/uninstall ─────────────────────────────────
+    // Self-elevating one-shot install (one UAC prompt). Also
+    // available programmatically as installWindowsSandbox().
+    program
+        .command('windows-install')
+        .description('Windows: provision the `srt-sandbox` user account + install WFP ' +
+        'filters (one UAC prompt). No logout needed.')
+        .option('--sublayer-guid <guid>', 'WFP sublayer GUID')
+        .option('--proxy-port-range <lo-hi>', 'loopback PERMIT port range (e.g. 60080-60089)')
+        .option('--sandbox-user <name>', 'name for the sandbox user account (default: srt-sandbox)')
+        .option('--force', 'replace an existing install with different config')
+        .action(async (o) => {
+        const { installWindowsSandbox, resolveSrtWin, VENDORED_SRT_WIN_EXE } = await import('./sandbox/windows-sandbox-utils.js');
+        const range = typeof o.proxyPortRange === 'string'
+            ? o.proxyPortRange.split('-').map(Number)
+            : undefined;
+        try {
+            const r = installWindowsSandbox({
+                sublayerGuid: o.sublayerGuid,
+                proxyPortRange: range,
+                sandboxUser: o.sandboxUser,
+                force: Boolean(o.force),
+                // Our own CLI opts into the packaged exe explicitly —
+                // there is no ambient vendor fallback.
+                srtWin: resolveSrtWin({ path: VENDORED_SRT_WIN_EXE }),
+            });
+            if (r.cancelled) {
+                console.error('Install cancelled at the UAC prompt. Nothing changed.');
+                process.exit(2);
+            }
+            console.log(`Installed.\n` +
+                `  sandbox user: ${r.user.provisioned ? 'provisioned' : 'MISSING'}` +
+                (r.user.sid ? ` (${r.user.sid})` : '') +
+                `\n` +
+                `  WFP:   ${r.wfp.state}, ${r.wfp.filters} filters` +
+                (r.wfp.portRange
+                    ? `, port range ${r.wfp.portRange[0]}-${r.wfp.portRange[1]}`
+                    : '') +
+                `\n\n` +
+                `No logout needed — the WFP filter keys on the dedicated ` +
+                `\`srt-sandbox\` user's SID, so your network is unaffected.`);
+        }
+        catch (e) {
+            console.error(`Error: ${e.message}`);
+            process.exit(1);
+        }
+    });
+    program
+        .command('windows-uninstall')
+        .description('Windows: remove WFP filters + the `srt-sandbox` account (one UAC prompt).')
+        .option('--sublayer-guid <guid>', 'WFP sublayer GUID')
+        .action(async (o) => {
+        const { uninstallWindowsSandbox, resolveSrtWin, VENDORED_SRT_WIN_EXE } = await import('./sandbox/windows-sandbox-utils.js');
+        try {
+            const r = uninstallWindowsSandbox({
+                sublayerGuid: o.sublayerGuid,
+                srtWin: resolveSrtWin({ path: VENDORED_SRT_WIN_EXE }),
+            });
+            if (r.cancelled) {
+                console.error('Uninstall cancelled at the UAC prompt.');
+                process.exit(2);
+            }
+            console.log('WFP filters and `srt-sandbox` account removed.');
+        }
+        catch (e) {
+            console.error(`Error: ${e.message}`);
+            process.exit(1);
+        }
+    });
+    // Default command - run command in sandbox
+    program
+        .argument('[command...]', 'command to run in the sandbox')
+        .option('-d, --debug', 'enable debug logging')
+        .option('-s, --settings <path>', 'path to config file (default: ~/.srt-settings.json)')
+        .option('-c <command>', 'run command string directly (like sh -c), no escaping applied')
+        .option('--control-fd <fd>', 'read config updates from an inherited file descriptor >= 3 (JSON lines ' +
+        'protocol; give srt a dedicated read-only end — see the README)', parseControlFd)
+        .allowUnknownOption()
+        .action(async (commandArgs, options) => {
+        try {
+            // Enable debug logging if requested. logForDebugging() reads
+            // SRT_DEBUG (not DEBUG, to avoid clashing with the npm `debug`
+            // package and other tools) — keep this in sync with utils/debug.ts.
+            if (options.debug) {
+                process.env.SRT_DEBUG = 'true';
+            }
+            // Load config from file
+            const configPath = options.settings || getDefaultConfigPath();
+            const loaded = loadConfig(configPath);
+            let runtimeConfig;
+            switch (loaded.kind) {
+                case 'ok':
+                    runtimeConfig = loaded.config;
+                    break;
+                case 'missing':
+                    // A settings file that is not there is the documented way to
+                    // ask for the built-in defaults. One the caller named with
+                    // --settings is not: those are rules it asked to have applied.
+                    if (options.settings) {
+                        refuseSettings(`${configPath} does not exist.`, 'the rules --settings asked for');
+                    }
+                    logForDebugging(`No config found at ${configPath}, using default config`);
+                    runtimeConfig = getDefaultConfig();
+                    break;
+                case 'empty':
+                    // A file truncated to nothing is exactly the case where
+                    // falling back would drop rules that were in force yesterday.
+                    refuseSettings(`${configPath} is empty. Delete it, or put a config in it.`, FILE_RULES);
+                    break;
+                case 'unreadable':
+                case 'invalid':
+                    refuseSettings(loaded.reason, FILE_RULES);
+                    break;
+            }
+            // Windows: srtWin.path is required (no ambient vendor
+            // fallback). When the user's config doesn't set it, this
+            // CLI opts into the packaged exe explicitly — that's our
+            // code making the choice, not a library default.
+            if (process.platform === 'win32' &&
+                runtimeConfig.windows?.srtWin?.path === undefined) {
+                const { VENDORED_SRT_WIN_EXE } = await import('./sandbox/windows-sandbox-utils.js');
+                runtimeConfig = {
+                    ...runtimeConfig,
+                    windows: {
+                        ...runtimeConfig.windows,
+                        srtWin: { path: VENDORED_SRT_WIN_EXE },
+                    },
+                };
+            }
+            // The wrapped command, once it exists: a control channel that
+            // dies before it delivers anything takes it down with it.
+            let child;
+            let controlChannelFailed = false;
+            let receivedAnyLine = false;
+            let controlErrorReported = false;
+            const controlFd = options.controlFd;
+            function onControlError(err) {
+                // Attached both to the stream and to the reader: the stream is
+                // live from the moment the fd is opened, which is before the
+                // reader exists, and readline re-emits an input error on the
+                // reader as well. The channel is gone after the first error
+                // either way, so it is reported once.
+                if (controlErrorReported) {
+                    return;
+                }
+                controlErrorReported = true;
+                if (receivedAnyLine) {
+                    // The channel did deliver. The config last applied stays in
+                    // force, so the command keeps running under it.
+                    console.error(`Error reading control fd ${controlFd}: ${err.message}. The control channel is closed; no further updates will be applied.`);
+                    return;
+                }
+                // Nothing ever came through: this is the descriptor that would
+                // not open, found one step later. The caller is sending updates
+                // into a channel srt cannot read.
+                console.error(`Error: control fd ${controlFd} failed before delivering an update: ${err.message}. Refusing to run the command without the control channel it asks for.`);
+                controlChannelFailed = true;
+                if (child === undefined) {
+                    process.exit(1);
+                }
+                child.kill('SIGTERM');
+                // The child's own exit is what exits srt; this covers a command
+                // that ignores SIGTERM.
+                setTimeout(() => child?.kill('SIGKILL'), KILL_GRACE_MS).unref();
+            }
+            // Open and check the control fd before anything is built: a
+            // refusal here has no proxy or Linux bridge to unwind, and
+            // process.exit() cannot wait for the async reset() that would.
+            let controlStream;
+            if (controlFd !== undefined) {
+                try {
+                    controlStream = openControlFd(controlFd);
+                }
+                catch (err) {
+                    // Same rule as an explicit --settings that will not load: a
+                    // caller that asked for a control channel gets an error, not
+                    // a run whose updates — including the ones that tighten the
+                    // sandbox — quietly go nowhere.
+                    console.error(`Error: --control-fd ${controlFd} is not usable: ` +
+                        `${err instanceof Error ? err.message : String(err)}. ` +
+                        'Refusing to run the command without the control channel it asks for.');
+                    process.exit(1);
+                }
+                controlStream.on('error', onControlError);
+            }
+            // Initialize sandbox with config
+            logForDebugging('Initializing sandbox...');
+            await SandboxManager.initialize(runtimeConfig);
+            // Read config updates only now. The stream has been waiting
+            // unread, so nothing the caller wrote meanwhile is lost, and an
+            // update applied before initialize() would have been overwritten
+            // by it.
+            let controlReader = null;
+            if (controlStream !== undefined) {
+                controlReader = readline.createInterface({
+                    input: controlStream,
+                    crlfDelay: Infinity,
+                });
+                controlReader.on('line', line => {
+                    receivedAnyLine = true;
+                    const newConfig = loadConfigFromString(line);
+                    if (newConfig) {
+                        logForDebugging(`Config updated from control fd: ${JSON.stringify(newConfig)}`);
+                        SandboxManager.updateConfig(newConfig);
+                    }
+                    else if (line.trim()) {
+                        // The caller has to learn its update was dropped whether
+                        // or not it runs srt with --debug; the line itself stays
+                        // in the debug log rather than on the terminal.
+                        console.error(`Invalid config on control fd ${controlFd}: ignored, previous config still in force`);
+                        logForDebugging(`Invalid config on control fd (ignored): ${line}`);
+                    }
+                });
+                controlReader.on('error', onControlError);
+                // End of input just means the writer closed its end. The
+                // command keeps running under the config last applied.
+                logForDebugging(`Listening for config updates on fd ${controlFd}`);
+            }
+            // Cleanup control reader on exit
+            process.on('exit', () => {
+                controlReader?.close();
+            });
+            // Determine command string based on mode
+            let command;
+            if (options.c) {
+                // -c mode: use command string directly, no escaping
+                command = options.c;
+                logForDebugging(`Command string mode (-c): ${command}`);
+            }
+            else if (commandArgs.length > 0) {
+                // Default mode: argv-style invocation. The result is later
+                // executed via `bash -c <command>`, so each arg must be
+                // shell-quoted to survive that re-parse — a plain join(' ')
+                // splits arguments containing whitespace (#157).
+                command = quote(commandArgs);
+                logForDebugging(`Original command: ${command}`);
+            }
+            else {
+                console.error('Error: No command specified. Use -c <command> or provide command arguments.');
+                process.exit(1);
+            }
+            logForDebugging(JSON.stringify(SandboxManager.getNetworkRestrictionConfig(), null, 2));
+            // Wrap the command with sandbox restrictions. On Windows
+            // the wrapper returns an argv array that MUST be spawned
+            // with {shell:false} — that's the boundary keeping the
+            // command bytes off the host shell. On other platforms
+            // we keep the existing shell-string path.
+            if (process.platform === 'win32') {
+                // env carries the proxy vars the sandboxed child must inherit.
+                const { argv, env } = await SandboxManager.wrapWithSandboxArgv(command);
+                // No slot to displace: libuv passes only the stdio array's
+                // entries to the child as CRT descriptors, so the control fd
+                // is not among them (an inheritable HANDLE still reaches the
+                // child, but unnamed — nothing there can find it).
+                child = spawn(argv[0], argv.slice(1), {
+                    shell: false,
+                    stdio: 'inherit',
+                    env,
+                });
+            }
+            else {
+                const sandboxedCommand = await SandboxManager.wrapWithSandbox(command);
+                child = spawn(sandboxedCommand, {
+                    shell: true,
+                    stdio: sandboxedStdio(controlFd),
+                });
+            }
+            // Handle process exit
+            child.on('exit', (code, signal) => {
+                // Clean up bwrap mount point artifacts before exiting.
+                // On Linux, bwrap creates empty files on the host when protecting
+                // non-existent deny paths. This removes them.
+                SandboxManager.cleanupAfterCommand();
+                if (controlChannelFailed) {
+                    // srt killed the command over a dead control channel, so the
+                    // status it died with is not the run's result.
+                    process.exit(1);
+                }
+                if (signal) {
+                    if (signal === 'SIGINT' || signal === 'SIGTERM') {
+                        process.exit(0);
+                    }
+                    else {
+                        console.error(`Process killed by signal: ${signal}`);
+                        process.exit(1);
+                    }
+                }
+                process.exit(code ?? 0);
+            });
+            child.on('error', error => {
+                console.error(`Failed to execute command: ${error.message}`);
+                process.exit(1);
+            });
+            // Handle cleanup on interrupt
+            process.on('SIGINT', () => {
+                child?.kill('SIGINT');
+            });
+            process.on('SIGTERM', () => {
+                child?.kill('SIGTERM');
+            });
+        }
+        catch (error) {
+            console.error(`Error: ${error instanceof Error ? error.message : String(error)}`);
+            process.exit(1);
+        }
+    });
+    program.parse();
+}
+main().catch(error => {
+    console.error('Fatal error:', error);
+    process.exit(1);
+});
+//# sourceMappingURL=cli.js.map

package/node_modules/@anthropic-ai/sandbox-runtime/dist/cli.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"cli.js","sourceRoot":"","sources":["../src/cli.ts"],"names":[],"mappings":";AACA,OAAO,EAAE,KAAK,EAAE,MAAM,wBAAwB,CAAA;AAC9C,OAAO,EAAE,OAAO,EAAE,oBAAoB,EAAE,MAAM,WAAW,CAAA;AACzD,OAAO,EAAE,cAAc,EAAE,MAAM,YAAY,CAAA;AAE3C,OAAO,EAAE,KAAK,EAAqB,MAAM,eAAe,CAAA;AACxD,OAAO,EAAE,eAAe,EAAE,MAAM,kBAAkB,CAAA;AAClD,OAAO,EAAE,UAAU,EAAE,oBAAoB,EAAE,MAAM,0BAA0B,CAAA;AAC3E,OAAO,KAAK,QAAQ,MAAM,UAAU,CAAA;AACpC,OAAO,KAAK,EAAE,MAAM,IAAI,CAAA;AACxB,OAAO,KAAK,GAAG,MAAM,KAAK,CAAA;AAC1B,OAAO,KAAK,IAAI,MAAM,MAAM,CAAA;AAC5B,OAAO,KAAK,EAAE,MAAM,IAAI,CAAA;AACxB,OAAO,EAAE,aAAa,EAAE,MAAM,QAAQ,CAAA;AAEtC;;GAEG;AACH,SAAS,oBAAoB;IAC3B,OAAO,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,OAAO,EAAE,EAAE,oBAAoB,CAAC,CAAA;AACtD,CAAC;AAED;;;;;;GAMG;AACH,SAAS,iBAAiB;IACxB,MAAM,QAAQ,GAAwB,aAAa,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAClE,iBAAiB,CAClB,CAAA;IACD,OAAO,QAAQ,CAAC,OAAO,CAAA;AACzB,CAAC;AAED;;GAEG;AACH,MAAM,aAAa,GAAG,IAAI,CAAA;AAE1B;;;;;GAKG;AACH,SAAS,cAAc,CAAC,MAAc,EAAE,IAAY;IAClD,OAAO,CAAC,KAAK,CAAC,UAAU,MAAM,EAAE,CAAC,CAAA;IACjC,OAAO,CAAC,KAAK,CACX,gEAAgE,IAAI,GAAG,CACxE,CAAA;IACD,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAA;AACjB,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,GACd,6EAA6E,CAAA;AAE/E;;GAEG;AACH,SAAS,gBAAgB;IACvB,OAAO;QACL,OAAO,EAAE;YACP,cAAc,EAAE,EAAE;YAClB,aAAa,EAAE,EAAE;SAClB;QACD,UAAU,EAAE;YACV,QAAQ,EAAE,EAAE;YACZ,SAAS,EAAE,EAAE;YACb,UAAU,EAAE,EAAE;YACd,SAAS,EAAE,EAAE;SACd;KACF,CAAA;AACH,CAAC;AAED;;;;;;;;;;;;;;;GAeG;AACH,SAAS,aAAa,CAAC,EAAU;IAC/B,qEAAqE;IACrE,uEAAuE;IACvE,yEAAyE;IACzE,wEAAwE;IACxE,yEAAyE;IACzE,uEAAuE;IACvE,EAAE,CAAC,SAAS,CAAC,EAAE,EAAE,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAA;IACnC,MAAM,IAAI,GAAG,EAAE,CAAC,SAAS,CAAC,EAAE,CAAC,CAAA;IAC7B,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,GAAG,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,IAAI,IAAI,CAAC,QAAQ,EAAE,CAAC,EAAE,CAAC;QAChE,IAAI,CAAC;YACH,OAAO,IAAI,GAAG,CAAC,MAAM,CAAC,EAAE,EAAE,EAAE,QAAQ,EAAE,IAAI,EAAE,QAAQ,EAAE,KAAK,EAAE,CAAC,CAAC,KAAK,EAAE,CAAA;QACxE,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,MAAM,IAAI,GAAI,GAA6B,CAAC,IAAI,CAAA;YAChD,IAAI,IAAI,KAAK,qBAAqB,EAAE,CAAC;gBACnC,6DAA6D;gBAC7D,iEAAiE;gBACjE,oEAAoE;gBACpE,4DAA4D;gBAC5D,4DAA4D;gBAC5D,2CAA2C;gBAC3C,MAAM,IAAI,KAAK,CACb,qCAAqC,IAAI,IAAI,MAAM,CAAC,GAAG,CAAC,GAAG,CAC5D,CAAA;YACH,CAAC;YACD,eAAe,CACb,cAAc,EAAE,4BAA4B,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,0BAA0B,CACvH,CAAA;QACH,CAAC;IACH,CAAC;IACD,OAAO,EAAE,CAAC,gBAAgB,CAAC,EAAE,EAAE,EAAE,EAAE,EAAE,CAAC,CAAA;AACxC,CAAC;AAED;;GAEG;AACH,SAAS,cAAc,CAAC,KAAa;IACnC,0DAA0D;IAC1D,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC,EAAE,CAAC;QAC9C,MAAM,IAAI,oBAAoB,CAC5B,6EAA6E,CAC9E,CAAA;IACH,CAAC;IACD,OAAO,MAAM,CAAC,KAAK,CAAC,CAAA;AACtB,CAAC;AAED;;;;;;;;GAQG;AACH,SAAS,cAAc,CACrB,SAA6B;IAE7B,MAAM,KAAK,GAAyC;QAClD,SAAS;QACT,SAAS;QACT,SAAS;KACV,CAAA;IACD,IAAI,SAAS,KAAK,SAAS,EAAE,CAAC;QAC5B,OAAO,KAAK,CAAA;IACd,CAAC;IACD,2EAA2E;IAC3E,uEAAuE;IACvE,OAAO,KAAK,CAAC,MAAM,GAAG,SAAS,EAAE,CAAC;QAChC,KAAK,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAA;IACtB,CAAC;IACD,oEAAoE;IACpE,wEAAwE;IACxE,qEAAqE;IACrE,wEAAwE;IACxE,wEAAwE;IACxE,4DAA4D;IAC5D,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,QAAQ,CAAC,WAAW,EAAE,GAAG,CAAC,CAAC,CAAA;IACzC,OAAO,KAAK,CAAA;AACd,CAAC;AAED,KAAK,UAAU,IAAI;IACjB,MAAM,OAAO,GAAG,IAAI,OAAO,EAAE,CAAA;IAE7B,OAAO;SACJ,IAAI,CAAC,KAAK,CAAC;SACX,WAAW,CACV,oEAAoE,CACrE;SACA,OAAO,CAAC,iBAAiB,EAAE,CAAC,CAAA;IAE/B,iEAAiE;IACjE,yDAAyD;IACzD,yDAAyD;IACzD,OAAO;SACJ,OAAO,CAAC,iBAAiB,CAAC;SAC1B,WAAW,CACV,kEAAkE;QAChE,6CAA6C,CAChD;SACA,MAAM,CAAC,wBAAwB,EAAE,mBAAmB,CAAC;SACrD,MAAM,CACL,4BAA4B,EAC5B,+CAA+C,CAChD;SACA,MAAM,CACL,uBAAuB,EACvB,0DAA0D,CAC3D;SACA,MAAM,CAAC,SAAS,EAAE,mDAAmD,CAAC;SACtE,MAAM,CAAC,KAAK,EAAE,CAA+C,EAAE,EAAE;QAChE,MAAM,EAAE,qBAAqB,EAAE,aAAa,EAAE,oBAAoB,EAAE,GAClE,MAAM,MAAM,CAAC,oCAAoC,CAAC,CAAA;QACpD,MAAM,KAAK,GACT,OAAO,CAAC,CAAC,cAAc,KAAK,QAAQ;YAClC,CAAC,CAAE,CAAC,CAAC,cAAc,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,GAAG,CAAC,MAAM,CAAsB;YAC/D,CAAC,CAAC,SAAS,CAAA;QACf,IAAI,CAAC;YACH,MAAM,CAAC,GAAG,qBAAqB,CAAC;gBAC9B,YAAY,EAAE,CAAC,CAAC,YAAkC;gBAClD,cAAc,EAAE,KAAK;gBACrB,WAAW,EAAE,CAAC,CAAC,WAAiC;gBAChD,KAAK,EAAE,OAAO,CAAC,CAAC,CAAC,KAAK,CAAC;gBACvB,sDAAsD;gBACtD,uCAAuC;gBACvC,MAAM,EAAE,aAAa,CAAC,EAAE,IAAI,EAAE,oBAAoB,EAAE,CAAC;aACtD,CAAC,CAAA;YACF,IAAI,CAAC,CAAC,SAAS,EAAE,CAAC;gBAChB,OAAO,CAAC,KAAK,CAAC,uDAAuD,CAAC,CAAA;gBACtE,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAA;YACjB,CAAC;YACD,OAAO,CAAC,GAAG,CACT,cAAc;gBACZ,mBAAmB,CAAC,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC,CAAC,aAAa,CAAC,CAAC,CAAC,SAAS,EAAE;gBACnE,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,GAAG,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC;gBACtC,IAAI;gBACJ,YAAY,CAAC,CAAC,GAAG,CAAC,KAAK,KAAK,CAAC,CAAC,GAAG,CAAC,OAAO,UAAU;gBACnD,CAAC,CAAC,CAAC,GAAG,CAAC,SAAS;oBACd,CAAC,CAAC,gBAAgB,CAAC,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE;oBAC5D,CAAC,CAAC,EAAE,CAAC;gBACP,MAAM;gBACN,0DAA0D;gBAC1D,4DAA4D,CAC/D,CAAA;QACH,CAAC;QAAC,OAAO,CAAC,EAAE,CAAC;YACX,OAAO,CAAC,KAAK,CAAC,UAAW,CAAW,CAAC,OAAO,EAAE,CAAC,CAAA;YAC/C,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAA;QACjB,CAAC;IACH,CAAC,CAAC,CAAA;IAEJ,OAAO;SACJ,OAAO,CAAC,mBAAmB,CAAC;SAC5B,WAAW,CACV,2EAA2E,CAC5E;SACA,MAAM,CAAC,wBAAwB,EAAE,mBAAmB,CAAC;SACrD,MAAM,CAAC,KAAK,EAAE,CAAqC,EAAE,EAAE;QACtD,MAAM,EAAE,uBAAuB,EAAE,aAAa,EAAE,oBAAoB,EAAE,GACpE,MAAM,MAAM,CAAC,oCAAoC,CAAC,CAAA;QACpD,IAAI,CAAC;YACH,MAAM,CAAC,GAAG,uBAAuB,CAAC;gBAChC,YAAY,EAAE,CAAC,CAAC,YAAY;gBAC5B,MAAM,EAAE,aAAa,CAAC,EAAE,IAAI,EAAE,oBAAoB,EAAE,CAAC;aACtD,CAAC,CAAA;YACF,IAAI,CAAC,CAAC,SAAS,EAAE,CAAC;gBAChB,OAAO,CAAC,KAAK,CAAC,wCAAwC,CAAC,CAAA;gBACvD,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAA;YACjB,CAAC;YACD,OAAO,CAAC,GAAG,CAAC,gDAAgD,CAAC,CAAA;QAC/D,CAAC;QAAC,OAAO,CAAC,EAAE,CAAC;YACX,OAAO,CAAC,KAAK,CAAC,UAAW,CAAW,CAAC,OAAO,EAAE,CAAC,CAAA;YAC/C,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAA;QACjB,CAAC;IACH,CAAC,CAAC,CAAA;IAEJ,2CAA2C;IAC3C,OAAO;SACJ,QAAQ,CAAC,cAAc,EAAE,+BAA+B,CAAC;SACzD,MAAM,CAAC,aAAa,EAAE,sBAAsB,CAAC;SAC7C,MAAM,CACL,uBAAuB,EACvB,qDAAqD,CACtD;SACA,MAAM,CACL,cAAc,EACd,+DAA+D,CAChE;SACA,MAAM,CACL,mBAAmB,EACnB,yEAAyE;QACvE,gEAAgE,EAClE,cAAc,CACf;SACA,kBAAkB,EAAE;SACpB,MAAM,CACL,KAAK,EACH,WAAqB,EACrB,OAKC,EACD,EAAE;QACF,IAAI,CAAC;YACH,6DAA6D;YAC7D,+DAA+D;YAC/D,oEAAoE;YACpE,IAAI,OAAO,CAAC,KAAK,EAAE,CAAC;gBAClB,OAAO,CAAC,GAAG,CAAC,SAAS,GAAG,MAAM,CAAA;YAChC,CAAC;YAED,wBAAwB;YACxB,MAAM,UAAU,GAAG,OAAO,CAAC,QAAQ,IAAI,oBAAoB,EAAE,CAAA;YAC7D,MAAM,MAAM,GAAG,UAAU,CAAC,UAAU,CAAC,CAAA;YACrC,IAAI,aAAmC,CAAA;YACvC,QAAQ,MAAM,CAAC,IAAI,EAAE,CAAC;gBACpB,KAAK,IAAI;oBACP,aAAa,GAAG,MAAM,CAAC,MAAM,CAAA;oBAC7B,MAAK;gBACP,KAAK,SAAS;oBACZ,6DAA6D;oBAC7D,2DAA2D;oBAC3D,+DAA+D;oBAC/D,IAAI,OAAO,CAAC,QAAQ,EAAE,CAAC;wBACrB,cAAc,CACZ,GAAG,UAAU,kBAAkB,EAC/B,gCAAgC,CACjC,CAAA;oBACH,CAAC;oBACD,eAAe,CACb,sBAAsB,UAAU,wBAAwB,CACzD,CAAA;oBACD,aAAa,GAAG,gBAAgB,EAAE,CAAA;oBAClC,MAAK;gBACP,KAAK,OAAO;oBACV,wDAAwD;oBACxD,8DAA8D;oBAC9D,cAAc,CACZ,GAAG,UAAU,8CAA8C,EAC3D,UAAU,CACX,CAAA;oBACD,MAAK;gBACP,KAAK,YAAY,CAAC;gBAClB,KAAK,SAAS;oBACZ,cAAc,CAAC,MAAM,CAAC,MAAM,EAAE,UAAU,CAAC,CAAA;oBACzC,MAAK;YACT,CAAC;YAED,sDAAsD;YACtD,yDAAyD;YACzD,yDAAyD;YACzD,iDAAiD;YACjD,IACE,OAAO,CAAC,QAAQ,KAAK,OAAO;gBAC5B,aAAa,CAAC,OAAO,EAAE,MAAM,EAAE,IAAI,KAAK,SAAS,EACjD,CAAC;gBACD,MAAM,EAAE,oBAAoB,EAAE,GAAG,MAAM,MAAM,CAC3C,oCAAoC,CACrC,CAAA;gBACD,aAAa,GAAG;oBACd,GAAG,aAAa;oBAChB,OAAO,EAAE;wBACP,GAAG,aAAa,CAAC,OAAO;wBACxB,MAAM,EAAE,EAAE,IAAI,EAAE,oBAAoB,EAAE;qBACvC;iBACF,CAAA;YACH,CAAC;YAED,8DAA8D;YAC9D,0DAA0D;YAC1D,IAAI,KAA+B,CAAA;YACnC,IAAI,oBAAoB,GAAG,KAAK,CAAA;YAChC,IAAI,eAAe,GAAG,KAAK,CAAA;YAC3B,IAAI,oBAAoB,GAAG,KAAK,CAAA;YAChC,MAAM,SAAS,GAAG,OAAO,CAAC,SAAS,CAAA;YAEnC,SAAS,cAAc,CAAC,GAAU;gBAChC,+DAA+D;gBAC/D,6DAA6D;gBAC7D,6DAA6D;gBAC7D,4DAA4D;gBAC5D,sCAAsC;gBACtC,IAAI,oBAAoB,EAAE,CAAC;oBACzB,OAAM;gBACR,CAAC;gBACD,oBAAoB,GAAG,IAAI,CAAA;gBAC3B,IAAI,eAAe,EAAE,CAAC;oBACpB,4DAA4D;oBAC5D,gDAAgD;oBAChD,OAAO,CAAC,KAAK,CACX,4BAA4B,SAAS,KAAK,GAAG,CAAC,OAAO,sEAAsE,CAC5H,CAAA;oBACD,OAAM;gBACR,CAAC;gBACD,+DAA+D;gBAC/D,gEAAgE;gBAChE,kCAAkC;gBAClC,OAAO,CAAC,KAAK,CACX,qBAAqB,SAAS,wCAAwC,GAAG,CAAC,OAAO,wEAAwE,CAC1J,CAAA;gBACD,oBAAoB,GAAG,IAAI,CAAA;gBAC3B,IAAI,KAAK,KAAK,SAAS,EAAE,CAAC;oBACxB,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAA;gBACjB,CAAC;gBACD,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,CAAA;gBACrB,gEAAgE;gBAChE,wBAAwB;gBACxB,UAAU,CAAC,GAAG,EAAE,CAAC,KAAK,EAAE,IAAI,CAAC,SAAS,CAAC,EAAE,aAAa,CAAC,CAAC,KAAK,EAAE,CAAA;YACjE,CAAC;YAED,4DAA4D;YAC5D,2DAA2D;YAC3D,+DAA+D;YAC/D,IAAI,aAAgD,CAAA;YACpD,IAAI,SAAS,KAAK,SAAS,EAAE,CAAC;gBAC5B,IAAI,CAAC;oBACH,aAAa,GAAG,aAAa,CAAC,SAAS,CAAC,CAAA;gBAC1C,CAAC;gBAAC,OAAO,GAAG,EAAE,CAAC;oBACb,4DAA4D;oBAC5D,6DAA6D;oBAC7D,4DAA4D;oBAC5D,gCAAgC;oBAChC,OAAO,CAAC,KAAK,CACX,uBAAuB,SAAS,kBAAkB;wBAChD,GAAG,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,IAAI;wBACvD,sEAAsE,CACzE,CAAA;oBACD,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAA;gBACjB,CAAC;gBACD,aAAa,CAAC,EAAE,CAAC,OAAO,EAAE,cAAc,CAAC,CAAA;YAC3C,CAAC;YAED,iCAAiC;YACjC,eAAe,CAAC,yBAAyB,CAAC,CAAA;YAC1C,MAAM,cAAc,CAAC,UAAU,CAAC,aAAa,CAAC,CAAA;YAE9C,4DAA4D;YAC5D,gEAAgE;YAChE,iEAAiE;YACjE,SAAS;YACT,IAAI,aAAa,GAA8B,IAAI,CAAA;YACnD,IAAI,aAAa,KAAK,SAAS,EAAE,CAAC;gBAChC,aAAa,GAAG,QAAQ,CAAC,eAAe,CAAC;oBACvC,KAAK,EAAE,aAAa;oBACpB,SAAS,EAAE,QAAQ;iBACpB,CAAC,CAAA;gBAEF,aAAa,CAAC,EAAE,CAAC,MAAM,EAAE,IAAI,CAAC,EAAE;oBAC9B,eAAe,GAAG,IAAI,CAAA;oBACtB,MAAM,SAAS,GAAG,oBAAoB,CAAC,IAAI,CAAC,CAAA;oBAC5C,IAAI,SAAS,EAAE,CAAC;wBACd,eAAe,CACb,mCAAmC,IAAI,CAAC,SAAS,CAAC,SAAS,CAAC,EAAE,CAC/D,CAAA;wBACD,cAAc,CAAC,YAAY,CAAC,SAAS,CAAC,CAAA;oBACxC,CAAC;yBAAM,IAAI,IAAI,CAAC,IAAI,EAAE,EAAE,CAAC;wBACvB,yDAAyD;wBACzD,yDAAyD;wBACzD,gDAAgD;wBAChD,OAAO,CAAC,KAAK,CACX,gCAAgC,SAAS,2CAA2C,CACrF,CAAA;wBACD,eAAe,CACb,2CAA2C,IAAI,EAAE,CAClD,CAAA;oBACH,CAAC;gBACH,CAAC,CAAC,CAAA;gBAEF,aAAa,CAAC,EAAE,CAAC,OAAO,EAAE,cAAc,CAAC,CAAA;gBAEzC,yDAAyD;gBACzD,uDAAuD;gBACvD,eAAe,CAAC,sCAAsC,SAAS,EAAE,CAAC,CAAA;YACpE,CAAC;YAED,iCAAiC;YACjC,OAAO,CAAC,EAAE,CAAC,MAAM,EAAE,GAAG,EAAE;gBACtB,aAAa,EAAE,KAAK,EAAE,CAAA;YACxB,CAAC,CAAC,CAAA;YAEF,yCAAyC;YACzC,IAAI,OAAe,CAAA;YACnB,IAAI,OAAO,CAAC,CAAC,EAAE,CAAC;gBACd,oDAAoD;gBACpD,OAAO,GAAG,OAAO,CAAC,CAAC,CAAA;gBACnB,eAAe,CAAC,6BAA6B,OAAO,EAAE,CAAC,CAAA;YACzD,CAAC;iBAAM,IAAI,WAAW,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;gBAClC,2DAA2D;gBAC3D,wDAAwD;gBACxD,4DAA4D;gBAC5D,iDAAiD;gBACjD,OAAO,GAAG,KAAK,CAAC,WAAW,CAAC,CAAA;gBAC5B,eAAe,CAAC,qBAAqB,OAAO,EAAE,CAAC,CAAA;YACjD,CAAC;iBAAM,CAAC;gBACN,OAAO,CAAC,KAAK,CACX,6EAA6E,CAC9E,CAAA;gBACD,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAA;YACjB,CAAC;YAED,eAAe,CACb,IAAI,CAAC,SAAS,CACZ,cAAc,CAAC,2BAA2B,EAAE,EAC5C,IAAI,EACJ,CAAC,CACF,CACF,CAAA;YAED,yDAAyD;YACzD,yDAAyD;YACzD,uDAAuD;YACvD,uDAAuD;YACvD,0CAA0C;YAC1C,IAAI,OAAO,CAAC,QAAQ,KAAK,OAAO,EAAE,CAAC;gBACjC,+DAA+D;gBAC/D,MAAM,EAAE,IAAI,EAAE,GAAG,EAAE,GACjB,MAAM,cAAc,CAAC,mBAAmB,CAAC,OAAO,CAAC,CAAA;gBACnD,2DAA2D;gBAC3D,6DAA6D;gBAC7D,6DAA6D;gBAC7D,mDAAmD;gBACnD,KAAK,GAAG,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE;oBACpC,KAAK,EAAE,KAAK;oBACZ,KAAK,EAAE,SAAS;oBAChB,GAAG;iBACJ,CAAC,CAAA;YACJ,CAAC;iBAAM,CAAC;gBACN,MAAM,gBAAgB,GACpB,MAAM,cAAc,CAAC,eAAe,CAAC,OAAO,CAAC,CAAA;gBAC/C,KAAK,GAAG,KAAK,CAAC,gBAAgB,EAAE;oBAC9B,KAAK,EAAE,IAAI;oBACX,KAAK,EAAE,cAAc,CAAC,SAAS,CAAC;iBACjC,CAAC,CAAA;YACJ,CAAC;YAED,sBAAsB;YACtB,KAAK,CAAC,EAAE,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,MAAM,EAAE,EAAE;gBAChC,uDAAuD;gBACvD,kEAAkE;gBAClE,8CAA8C;gBAC9C,cAAc,CAAC,mBAAmB,EAAE,CAAA;gBAEpC,IAAI,oBAAoB,EAAE,CAAC;oBACzB,6DAA6D;oBAC7D,+CAA+C;oBAC/C,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAA;gBACjB,CAAC;gBAED,IAAI,MAAM,EAAE,CAAC;oBACX,IAAI,MAAM,KAAK,QAAQ,IAAI,MAAM,KAAK,SAAS,EAAE,CAAC;wBAChD,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAA;oBACjB,CAAC;yBAAM,CAAC;wBACN,OAAO,CAAC,KAAK,CAAC,6BAA6B,MAAM,EAAE,CAAC,CAAA;wBACpD,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAA;oBACjB,CAAC;gBACH,CAAC;gBACD,OAAO,CAAC,IAAI,CAAC,IAAI,IAAI,CAAC,CAAC,CAAA;YACzB,CAAC,CAAC,CAAA;YAEF,KAAK,CAAC,EAAE,CAAC,OAAO,EAAE,KAAK,CAAC,EAAE;gBACxB,OAAO,CAAC,KAAK,CAAC,8BAA8B,KAAK,CAAC,OAAO,EAAE,CAAC,CAAA;gBAC5D,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAA;YACjB,CAAC,CAAC,CAAA;YAEF,8BAA8B;YAC9B,OAAO,CAAC,EAAE,CAAC,QAAQ,EAAE,GAAG,EAAE;gBACxB,KAAK,EAAE,IAAI,CAAC,QAAQ,CAAC,CAAA;YACvB,CAAC,CAAC,CAAA;YAEF,OAAO,CAAC,EAAE,CAAC,SAAS,EAAE,GAAG,EAAE;gBACzB,KAAK,EAAE,IAAI,CAAC,SAAS,CAAC,CAAA;YACxB,CAAC,CAAC,CAAA;QACJ,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,OAAO,CAAC,KAAK,CACX,UAAU,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,CACnE,CAAA;YACD,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAA;QACjB,CAAC;IACH,CAAC,CACF,CAAA;IAEH,OAAO,CAAC,KAAK,EAAE,CAAA;AACjB,CAAC;AAED,IAAI,EAAE,CAAC,KAAK,CAAC,KAAK,CAAC,EAAE;IACnB,OAAO,CAAC,KAAK,CAAC,cAAc,EAAE,KAAK,CAAC,CAAA;IACpC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAA;AACjB,CAAC,CAAC,CAAA"}

package/node_modules/@anthropic-ai/sandbox-runtime/dist/index.d.ts

@@ -0,0 +1,19 @@
+export { SandboxManager } from './sandbox/sandbox-manager.js';
+export type { WrapWithSandboxOptions } from './sandbox/sandbox-manager.js';
+export { SandboxViolationStore } from './sandbox/sandbox-violation-store.js';
+export type { SandboxRuntimeConfig, NetworkConfig, FilesystemConfig, CredentialsConfig, CredentialFileConfig, CredentialEnvVarConfig, CredentialMode, IgnoreViolationsConfig, } from './sandbox/sandbox-config.js';
+export { SandboxRuntimeConfigSchema, NetworkConfigSchema, FilesystemConfigSchema, CredentialsConfigSchema, IgnoreViolationsConfigSchema, RipgrepConfigSchema, } from './sandbox/sandbox-config.js';
+export type { SandboxAskCallback, FsReadRestrictionConfig, FsWriteRestrictionConfig, CredentialRestrictionConfig, NetworkRestrictionConfig, NetworkHostPattern, } from './sandbox/sandbox-schemas.js';
+export type { FilterRequestCallback, RequestDecision, MutateForwardedHeaders, } from './sandbox/request-filter.js';
+export type { SandboxViolationEvent } from './sandbox/macos-sandbox-utils.js';
+export { type SandboxDependencyCheck, LinuxSandboxProfileError, type LinuxSandboxProfileErrorCode, } from './sandbox/linux-sandbox-utils.js';
+export { WindowsSandboxError, getSrtWinPath, resolveSrtWin, VENDORED_SRT_WIN_EXE, checkWindowsSandboxStatus, checkWindowsSandboxStatusAsync, getWindowsWfpStatus, getWindowsWfpStatusAsync, verifyWindowsWfpEgress, getWindowsSandboxUserStatus, getWindowsSandboxUserStatusAsync, getWindowsSandboxCaCert, windowsTrustCa, windowsTrustCaAsync, ensurePersistentWindowsCa, windowsStateDir, installWindowsSandbox, installWindowsSandboxAsync, checkWindowsDependenciesAsync, uninstallWindowsSandbox, windowsInstallInstructions, stampWindowsAcl, restoreWindowsAcl, grantWindowsAcl, revokeWindowsAcl, expandWindowsFsPaths, buildGitConfigEnv, parseWindowsBinShell, parseWindowsSandboxError, isUncPath, DEFAULT_WINDOWS_PROXY_PORT_RANGE, SRT_WIN_DISPATCH_ARG1, } from './sandbox/windows-sandbox-utils.js';
+export type { WindowsSandboxErrorCode, WindowsSandboxStatus, WindowsBinShell, MappedDriveCwdError, WindowsInstallOptions, WindowsInstallResult, WindowsWfpStatus, WindowsAclStampOptions, WindowsAclGrantOptions, WindowsAclAceOutcome, WindowsWfpStatusResult, WindowsWfpVerifyResult, WindowsSandboxUserStatus, WindowsPersistentCa, SrtWinSpawn, } from './sandbox/windows-sandbox-utils.js';
+export { generateCa, validateCaPair, certThumbprint, } from './sandbox/mitm-ca.js';
+export type { GeneratedCa, CaPairValidation } from './sandbox/mitm-ca.js';
+export type { WindowsConfig, SrtWinConfig, GitConfig, } from './sandbox/sandbox-config.js';
+export { WindowsConfigSchema, SrtWinConfigSchema, GitConfigSchema, } from './sandbox/sandbox-config.js';
+export { getDefaultWritePaths } from './sandbox/sandbox-utils.js';
+export { getWslVersion } from './utils/platform.js';
+export type { Platform } from './utils/platform.js';
+//# sourceMappingURL=index.d.ts.map

package/node_modules/@anthropic-ai/sandbox-runtime/dist/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,cAAc,EAAE,MAAM,8BAA8B,CAAA;AAC7D,YAAY,EAAE,sBAAsB,EAAE,MAAM,8BAA8B,CAAA;AAC1E,OAAO,EAAE,qBAAqB,EAAE,MAAM,sCAAsC,CAAA;AAG5E,YAAY,EACV,oBAAoB,EACpB,aAAa,EACb,gBAAgB,EAChB,iBAAiB,EACjB,oBAAoB,EACpB,sBAAsB,EACtB,cAAc,EACd,sBAAsB,GACvB,MAAM,6BAA6B,CAAA;AAEpC,OAAO,EACL,0BAA0B,EAC1B,mBAAmB,EACnB,sBAAsB,EACtB,uBAAuB,EACvB,4BAA4B,EAC5B,mBAAmB,GACpB,MAAM,6BAA6B,CAAA;AAGpC,YAAY,EACV,kBAAkB,EAClB,uBAAuB,EACvB,wBAAwB,EACxB,2BAA2B,EAC3B,wBAAwB,EACxB,kBAAkB,GACnB,MAAM,8BAA8B,CAAA;AAGrC,YAAY,EACV,qBAAqB,EACrB,eAAe,EACf,sBAAsB,GACvB,MAAM,6BAA6B,CAAA;AAGpC,YAAY,EAAE,qBAAqB,EAAE,MAAM,kCAAkC,CAAA;AAC7E,OAAO,EACL,KAAK,sBAAsB,EAC3B,wBAAwB,EACxB,KAAK,4BAA4B,GAClC,MAAM,kCAAkC,CAAA;AAGzC,OAAO,EACL,mBAAmB,EACnB,aAAa,EACb,aAAa,EACb,oBAAoB,EACpB,yBAAyB,EACzB,8BAA8B,EAC9B,mBAAmB,EACnB,wBAAwB,EACxB,sBAAsB,EACtB,2BAA2B,EAC3B,gCAAgC,EAChC,uBAAuB,EACvB,cAAc,EACd,mBAAmB,EACnB,yBAAyB,EACzB,eAAe,EACf,qBAAqB,EACrB,0BAA0B,EAC1B,6BAA6B,EAC7B,uBAAuB,EACvB,0BAA0B,EAC1B,eAAe,EACf,iBAAiB,EACjB,eAAe,EACf,gBAAgB,EAChB,oBAAoB,EACpB,iBAAiB,EACjB,oBAAoB,EACpB,wBAAwB,EACxB,SAAS,EACT,gCAAgC,EAChC,qBAAqB,GACtB,MAAM,oCAAoC,CAAA;AAC3C,YAAY,EACV,uBAAuB,EACvB,oBAAoB,EACpB,eAAe,EACf,mBAAmB,EACnB,qBAAqB,EACrB,oBAAoB,EACpB,gBAAgB,EAChB,sBAAsB,EACtB,sBAAsB,EACtB,oBAAoB,EACpB,sBAAsB,EACtB,sBAAsB,EACtB,wBAAwB,EACxB,mBAAmB,EACnB,WAAW,GACZ,MAAM,oCAAoC,CAAA;AAK3C,OAAO,EACL,UAAU,EACV,cAAc,EACd,cAAc,GACf,MAAM,sBAAsB,CAAA;AAC7B,YAAY,EAAE,WAAW,EAAE,gBAAgB,EAAE,MAAM,sBAAsB,CAAA;AACzE,YAAY,EACV,aAAa,EACb,YAAY,EACZ,SAAS,GACV,MAAM,6BAA6B,CAAA;AACpC,OAAO,EACL,mBAAmB,EACnB,kBAAkB,EAClB,eAAe,GAChB,MAAM,6BAA6B,CAAA;AAGpC,OAAO,EAAE,oBAAoB,EAAE,MAAM,4BAA4B,CAAA;AAGjE,OAAO,EAAE,aAAa,EAAE,MAAM,qBAAqB,CAAA;AACnD,YAAY,EAAE,QAAQ,EAAE,MAAM,qBAAqB,CAAA"}

package/node_modules/@anthropic-ai/sandbox-runtime/dist/index.js

@@ -0,0 +1,17 @@
+// Library exports
+export { SandboxManager } from './sandbox/sandbox-manager.js';
+export { SandboxViolationStore } from './sandbox/sandbox-violation-store.js';
+export { SandboxRuntimeConfigSchema, NetworkConfigSchema, FilesystemConfigSchema, CredentialsConfigSchema, IgnoreViolationsConfigSchema, RipgrepConfigSchema, } from './sandbox/sandbox-config.js';
+export { LinuxSandboxProfileError, } from './sandbox/linux-sandbox-utils.js';
+// Windows install/status API
+export { WindowsSandboxError, getSrtWinPath, resolveSrtWin, VENDORED_SRT_WIN_EXE, checkWindowsSandboxStatus, checkWindowsSandboxStatusAsync, getWindowsWfpStatus, getWindowsWfpStatusAsync, verifyWindowsWfpEgress, getWindowsSandboxUserStatus, getWindowsSandboxUserStatusAsync, getWindowsSandboxCaCert, windowsTrustCa, windowsTrustCaAsync, ensurePersistentWindowsCa, windowsStateDir, installWindowsSandbox, installWindowsSandboxAsync, checkWindowsDependenciesAsync, uninstallWindowsSandbox, windowsInstallInstructions, stampWindowsAcl, restoreWindowsAcl, grantWindowsAcl, revokeWindowsAcl, expandWindowsFsPaths, buildGitConfigEnv, parseWindowsBinShell, parseWindowsSandboxError, isUncPath, DEFAULT_WINDOWS_PROXY_PORT_RANGE, SRT_WIN_DISPATCH_ARG1, } from './sandbox/windows-sandbox-utils.js';
+// TLS-termination CA generation/validation (mitm-ca.ts). Embedders that
+// manage CA persistence themselves (rather than relying on the Windows
+// persistent-CA default) use these to generate and validate a pair.
+export { generateCa, validateCaPair, certThumbprint, } from './sandbox/mitm-ca.js';
+export { WindowsConfigSchema, SrtWinConfigSchema, GitConfigSchema, } from './sandbox/sandbox-config.js';
+// Utility functions
+export { getDefaultWritePaths } from './sandbox/sandbox-utils.js';
+// Platform utilities
+export { getWslVersion } from './utils/platform.js';
+//# sourceMappingURL=index.js.map

package/node_modules/@anthropic-ai/sandbox-runtime/dist/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,kBAAkB;AAClB,OAAO,EAAE,cAAc,EAAE,MAAM,8BAA8B,CAAA;AAE7D,OAAO,EAAE,qBAAqB,EAAE,MAAM,sCAAsC,CAAA;AAc5E,OAAO,EACL,0BAA0B,EAC1B,mBAAmB,EACnB,sBAAsB,EACtB,uBAAuB,EACvB,4BAA4B,EAC5B,mBAAmB,GACpB,MAAM,6BAA6B,CAAA;AAqBpC,OAAO,EAEL,wBAAwB,GAEzB,MAAM,kCAAkC,CAAA;AAEzC,6BAA6B;AAC7B,OAAO,EACL,mBAAmB,EACnB,aAAa,EACb,aAAa,EACb,oBAAoB,EACpB,yBAAyB,EACzB,8BAA8B,EAC9B,mBAAmB,EACnB,wBAAwB,EACxB,sBAAsB,EACtB,2BAA2B,EAC3B,gCAAgC,EAChC,uBAAuB,EACvB,cAAc,EACd,mBAAmB,EACnB,yBAAyB,EACzB,eAAe,EACf,qBAAqB,EACrB,0BAA0B,EAC1B,6BAA6B,EAC7B,uBAAuB,EACvB,0BAA0B,EAC1B,eAAe,EACf,iBAAiB,EACjB,eAAe,EACf,gBAAgB,EAChB,oBAAoB,EACpB,iBAAiB,EACjB,oBAAoB,EACpB,wBAAwB,EACxB,SAAS,EACT,gCAAgC,EAChC,qBAAqB,GACtB,MAAM,oCAAoC,CAAA;AAmB3C,wEAAwE;AACxE,uEAAuE;AACvE,oEAAoE;AACpE,OAAO,EACL,UAAU,EACV,cAAc,EACd,cAAc,GACf,MAAM,sBAAsB,CAAA;AAO7B,OAAO,EACL,mBAAmB,EACnB,kBAAkB,EAClB,eAAe,GAChB,MAAM,6BAA6B,CAAA;AAEpC,oBAAoB;AACpB,OAAO,EAAE,oBAAoB,EAAE,MAAM,4BAA4B,CAAA;AAEjE,qBAAqB;AACrB,OAAO,EAAE,aAAa,EAAE,MAAM,qBAAqB,CAAA"}

package/node_modules/@anthropic-ai/sandbox-runtime/dist/sandbox/address.d.ts

@@ -0,0 +1,52 @@
+/**
+ * IP-literal / CIDR helpers over `net.BlockList`, shared by the
+ * resolved-address guard, the parent-proxy NO_PROXY matcher and config
+ * validation.
+ */
+import { BlockList } from 'node:net';
+/** Loopback in both families (BlockList matches IPv4-mapped forms against the IPv4 rule). */
+export declare const LOOPBACK_RANGES: readonly string[];
+type AddressFamily = 'ipv4' | 'ipv6';
+type AddressRange = {
+    address: string;
+    prefix: number;
+    family: AddressFamily;
+};
+/**
+ * Parse an IP literal or CIDR range (`10.0.0.0/8`, `fc00::/7`, `::1`) into
+ * the one form rules are stored in: an IPv4-mapped IPv6 entry becomes the
+ * IPv4 rule it stands for (`::ffff:10.0.0.0/104` → `10.0.0.0/8`) and a zone
+ * id is dropped, since matching treats both spellings alike and some
+ * runtimes mis-evaluate or refuse the IPv6 ones. Undefined for anything
+ * else; IPv6 is unbracketed.
+ */
+export declare function parseAddressRange(entry: string): AddressRange | undefined;
+/** Add an IP literal or CIDR range to `list`; false (list untouched) if malformed or refused by the runtime. */
+export declare function addRange(list: BlockList, entry: string): boolean;
+/**
+ * BlockList membership for an address string of either family. IPv4 rules
+ * also match the IPv4-mapped IPv6 spelling (BlockList does that itself);
+ * an IPv6 zone id (`fe80::1%en0`) is dropped first because a zoned address
+ * is a non-match on some runtimes.
+ */
+export declare function addressInSet(list: BlockList, address: string): boolean;
+/** The IPv4 address of an IPv4-mapped IPv6 literal (`::ffff:a.b.c.d`), or undefined. */
+export declare function mappedIPv4(address: string): string | undefined;
+/**
+ * The IPv4 address an IPv6 address carries in one of the forms a network
+ * delivers to that IPv4 destination: IPv4-mapped and IPv4-compatible
+ * (`::ffff:0:0/96`, `::/96`), IPv4-translated (`::ffff:0:0:0/96`), the NAT64
+ * well-known prefix (`64:ff9b::/96`) and 6to4 (`2002::/16`). Undefined for
+ * anything else — including the local-use NAT64 prefix `64:ff9b:1::/48` and
+ * network-specific prefixes, whose layout (RFC 6052 §2.2 allows /32…/96)
+ * cannot be told from the address, so the embedded IPv4 could be anywhere;
+ * an embedder on such a network lists the prefix's translations of the
+ * ranges it denies.
+ */
+export declare function embeddedIPv4(address: string): string | undefined;
+/** True for an IPv4/IPv6 loopback literal (including v4-mapped forms). */
+export declare function isLoopbackAddress(address: string): boolean;
+/** `localhost` and names under `.localhost` (RFC 6761 §6.3). */
+export declare function isLoopbackName(hostname: string): boolean;
+export {};
+//# sourceMappingURL=address.d.ts.map

package/node_modules/@anthropic-ai/sandbox-runtime/dist/sandbox/address.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"address.d.ts","sourceRoot":"","sources":["../../src/sandbox/address.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH,OAAO,EAAE,SAAS,EAAQ,MAAM,UAAU,CAAA;AAE1C,6FAA6F;AAC7F,eAAO,MAAM,eAAe,EAAE,SAAS,MAAM,EAA2B,CAAA;AAExE,KAAK,aAAa,GAAG,MAAM,GAAG,MAAM,CAAA;AAQpC,KAAK,YAAY,GAAG;IAClB,OAAO,EAAE,MAAM,CAAA;IACf,MAAM,EAAE,MAAM,CAAA;IACd,MAAM,EAAE,aAAa,CAAA;CACtB,CAAA;AAED;;;;;;;GAOG;AACH,wBAAgB,iBAAiB,CAAC,KAAK,EAAE,MAAM,GAAG,YAAY,GAAG,SAAS,CAmBzE;AAED,gHAAgH;AAChH,wBAAgB,QAAQ,CAAC,IAAI,EAAE,SAAS,EAAE,KAAK,EAAE,MAAM,GAAG,OAAO,CAShE;AAkBD;;;;;GAKG;AACH,wBAAgB,YAAY,CAAC,IAAI,EAAE,SAAS,EAAE,OAAO,EAAE,MAAM,GAAG,OAAO,CAItE;AA6BD,wFAAwF;AACxF,wBAAgB,UAAU,CAAC,OAAO,EAAE,MAAM,GAAG,MAAM,GAAG,SAAS,CAO9D;AAED;;;;;;;;;;GAUG;AACH,wBAAgB,YAAY,CAAC,OAAO,EAAE,MAAM,GAAG,MAAM,GAAG,SAAS,CAYhE;AAID,0EAA0E;AAC1E,wBAAgB,iBAAiB,CAAC,OAAO,EAAE,MAAM,GAAG,OAAO,CAE1D;AAED,gEAAgE;AAChE,wBAAgB,cAAc,CAAC,QAAQ,EAAE,MAAM,GAAG,OAAO,CAGxD"}