pi-codex-auto-review 0.1.2 → 0.1.3

package/dist/sandbox/config.js

@@ -1,97 +0,0 @@
-import { realpath } from 'node:fs/promises';
-import { basename, dirname, resolve } from 'node:path';
-import { fileURLToPath } from 'node:url';
-import { GuardError, createProfile } from '../contracts.js';
-import { canonicalPath, isWithin } from '../policy/paths.js';
-import { matchesDomain, isNetworkHost, normalizeHost } from '../policy/domains.js';
-import { linuxReadPaths } from './linux-read-paths.js';
-import { runtimeWritePaths } from './runtime-write-paths.js';
-import { seccompRuntime } from './seccomp.js';
-import { assertLiteralNativePaths } from './paths.js';
-export function shellQuote(text) { return `'${text.replace(/'/g, "'\\''")}'`; }
-const AMBIENT_ENV = new Set(['PATH', 'LANG', 'LC_ALL', 'LC_CTYPE', 'TZ', 'TERM']);
-const FORBIDDEN_ENV = /(?:TOKEN|SECRET|PASSWORD|CREDENTIAL|API_KEY|AUTH|^AWS_|^AZURE_|^GOOGLE_|^OPENAI_|^ANTHROPIC_|^CODEX_|^SSH_|^GIT_CONFIG|^NODE_|^BASH_ENV$|^ENV$|^DYLD_|^LD_|^JAVA_TOOL_OPTIONS$|^JDK_JAVA_OPTIONS$|^PYTHONPATH$|^PYTHONSTARTUP$|^RUBYOPT$|^PERL5OPT$|PROXY|^NO_PROXY$)/i;
-export function workloadEnvironment(caller = {}, ambient = process.env) {
-    const env = {};
-    for (const [key, value] of Object.entries(ambient))
-        if (AMBIENT_ENV.has(key) && value !== undefined)
-            env[key] = value;
-    for (const [key, value] of Object.entries(caller)) {
-        if (!FORBIDDEN_ENV.test(key) && !['HOME', 'TMPDIR', 'TMP', 'TEMP', 'NODE_CHANNEL_FD', 'NODE_CHANNEL_SERIALIZATION_MODE', 'PI_GUARD_KERNEL_ARCH'].includes(key) && /^[A-Za-z_][A-Za-z0-9_]*$/.test(key) && typeof value === 'string' && !value.includes('\0'))
-            env[key] = value;
-    }
-    return env;
-}
-export async function nativeConfig(profile, delta, cwd, authority, piSDKEntryPath) {
-    createProfile(profile);
-    const resolved = { ...profile };
-    for (const key of ['readRoots', 'writeRoots', 'denyRead', 'denyWrite'])
-        resolved[key] = await Promise.all(profile[key].map(path => canonicalPath(path, cwd)));
-    profile = createProfile(resolved);
-    if (profile.readRoots.some(path => profile.denyRead.some(root => isWithin(path, root))) || profile.writeRoots.some(path => [...profile.denyRead, ...profile.denyWrite].some(root => isWithin(path, root))))
-        throw new GuardError('HARD_DENY', 'An explicit permission root conflicts with an absolute deny');
-    for (const key of ['readPaths', 'writePaths', 'domains'])
-        if (!Array.isArray(delta[key]) || delta[key].some(x => typeof x !== 'string'))
-            throw new GuardError('INVALID_DELTA', 'Invalid permission delta');
-    const reads = await Promise.all(delta.readPaths.map(path => canonicalPath(path, cwd)));
-    const writes = await Promise.all(delta.writePaths.map(path => canonicalPath(path, cwd)));
-    assertLiteralNativePaths([cwd, ...profile.readRoots, ...profile.writeRoots, ...profile.denyRead, ...profile.denyWrite, ...(profile.readOnlyPaths ?? []), ...reads, ...writes]);
-    if (reads.some(path => profile.denyRead.some(root => isWithin(path, root))) || writes.some(path => [...profile.denyRead, ...profile.denyWrite].some(root => isWithin(path, root))))
-        throw new GuardError('HARD_DENY', 'Permission delta targets a protected path');
-    if (delta.domains.some(domain => !isNetworkHost(domain) || profile.deniedDomains.some(pattern => matchesDomain(domain, pattern))))
-        throw new GuardError('HARD_DENY', 'Invalid or denied network domain');
-    const isCommandAuthority = authority?.kind === 'command-rule' || authority?.kind === 'reviewed-command';
-    const hasFullRead = isCommandAuthority || profile.readRoots.includes('/');
-    const baseProtected = await Promise.all((profile.readOnlyPaths ?? []).map(path => canonicalPath(path, cwd)));
-    const lifted = baseProtected.filter(root => writes.some(path => isWithin(path, root)));
-    // Removing a base metadata deny must not expose its siblings through the original workspace root.
-    const writeRoots = isCommandAuthority ? ['/'] : lifted.length ? writes : [...profile.writeRoots, ...writes];
-    const unapprovedDefaults = (await runtimeWritePaths(cwd)).filter(root => !writeRoots.some(path => isWithin(root, path)));
-    if (unapprovedDefaults.some(root => writeRoots.some(path => isWithin(path, root))))
-        throw new GuardError('NATIVE_SCOPE_UNSUPPORTED', 'A nested runtime default write path requires its enclosing directory in the reviewed native scope');
-    const packageRoot = fileURLToPath(new URL('../../', import.meta.url));
-    const nodeRoot = resolve(dirname(await realpath(process.execPath)), '..');
-    const dependencyRoots = [];
-    for (const entry of [
-        piSDKEntryPath ?? fileURLToPath(import.meta.resolve('@earendil-works/pi-coding-agent')),
-        fileURLToPath(import.meta.resolve('@anthropic-ai/sandbox-runtime')),
-    ]) {
-        let current = dirname(await realpath(entry));
-        let root = current;
-        while (dirname(current) !== current) {
-            if (basename(current) === 'node_modules' || basename(current) === '.pnpm')
-                root = current;
-            current = dirname(current);
-        }
-        dependencyRoots.push(root);
-    }
-    const systemRead = ['/usr', '/bin', '/sbin', '/System', '/Library', '/opt/homebrew', '/private/etc', '/etc', '/dev', '/proc', '/sys', nodeRoot];
-    const runtimeRead = [resolve(packageRoot, 'dist'), resolve(packageRoot, 'node_modules'), resolve(packageRoot, 'package.json'), ...dependencyRoots];
-    const seccomp = seccompRuntime();
-    const config = {
-        ...(seccomp ? { seccomp: { applyPath: seccomp.applyPath } } : {}),
-        filesystem: {
-            // A full-read profile needs only its explicit denies. Re-allowing "/" would
-            // make SRT's nested denies override runtime code installed inside the agent directory.
-            denyRead: [...(hasFullRead ? [] : ['/']), ...profile.denyRead],
-            allowRead: [...await linuxReadPaths([...systemRead, ...(hasFullRead ? [] : [...profile.readRoots, ...reads, ...writes])], writeRoots), ...runtimeRead],
-            allowWrite: writeRoots,
-            denyWrite: [...profile.denyWrite, ...profile.denyRead, ...unapprovedDefaults, ...(isCommandAuthority ? [] : baseProtected.filter(root => !lifted.includes(root))), ...dependencyRoots, resolve(packageRoot, 'dist'), resolve(packageRoot, 'node_modules'), resolve(packageRoot, 'package.json'), resolve(packageRoot, 'package-lock.json')],
-            allowGitConfig: isCommandAuthority || writes.some(path => /[/\\]\.git(?:[/\\]config)?$/.test(path)),
-        },
-        network: { allowedDomains: isCommandAuthority ? ['*'] : [...profile.allowedDomains, ...delta.domains.map(normalizeHost)], deniedDomains: [...profile.deniedDomains], strictAllowlist: true, allowAllUnixSockets: false, allowLocalBinding: false },
-        credentials: { files: profile.denyRead.map(path => ({ path, mode: 'deny' })) },
-        enableWeakerNestedSandbox: false,
-        enableWeakerNetworkIsolation: false,
-        allowAppleEvents: false,
-    };
-    if (process.platform === 'linux') {
-        // A missing leaf becomes /dev/null in SRT, unreadable on a nodev mount.
-        // A child deny selects its read-only directory placeholder instead. The
-        // parent deny remains; existing worktree .git files are handled by SRT.
-        config.filesystem.denyWrite.push(...config.filesystem.denyWrite.filter(path => basename(path) === '.git' && !profile.denyRead.some(root => isWithin(path, root))).map(path => resolve(path, 'HEAD')));
-    }
-    assertLiteralNativePaths([...config.filesystem.denyRead, ...(config.filesystem.allowRead ?? []), ...config.filesystem.allowWrite, ...config.filesystem.denyWrite]);
-    return config;
-}
-//# sourceMappingURL=config.js.map

package/dist/sandbox/config.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"config.js","sourceRoot":"","sources":["../../src/sandbox/config.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,MAAM,kBAAkB,CAAC;AAC5C,OAAO,EAAE,QAAQ,EAAE,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AACvD,OAAO,EAAE,aAAa,EAAE,MAAM,UAAU,CAAC;AAEzC,OAAO,EAAE,UAAU,EAAE,aAAa,EAAyE,MAAM,iBAAiB,CAAC;AACnI,OAAO,EAAE,aAAa,EAAE,QAAQ,EAAE,MAAM,oBAAoB,CAAC;AAC7D,OAAO,EAAE,aAAa,EAAE,aAAa,EAAE,aAAa,EAAE,MAAM,sBAAsB,CAAC;AACnF,OAAO,EAAE,cAAc,EAAE,MAAM,uBAAuB,CAAC;AACvD,OAAO,EAAE,iBAAiB,EAAE,MAAM,0BAA0B,CAAC;AAC7D,OAAO,EAAE,cAAc,EAAE,MAAM,cAAc,CAAC;AAC9C,OAAO,EAAE,wBAAwB,EAAE,MAAM,YAAY,CAAC;AAEtD,MAAM,UAAU,UAAU,CAAC,IAAY,IAAY,OAAO,IAAI,IAAI,CAAC,OAAO,CAAC,IAAI,EAAE,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC;AAC/F,MAAM,WAAW,GAAG,IAAI,GAAG,CAAC,CAAC,MAAM,EAAE,MAAM,EAAE,QAAQ,EAAE,UAAU,EAAE,IAAI,EAAE,MAAM,CAAC,CAAC,CAAC;AAClF,MAAM,aAAa,GAAG,wQAAwQ,CAAC;AAC/R,MAAM,UAAU,mBAAmB,CAAC,SAA4B,EAAE,EAAE,UAA6B,OAAO,CAAC,GAAG;IAC1G,MAAM,GAAG,GAAsB,EAAE,CAAC;IAClC,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,OAAO,CAAC;QAAE,IAAI,WAAW,CAAC,GAAG,CAAC,GAAG,CAAC,IAAI,KAAK,KAAK,SAAS;YAAE,GAAG,CAAC,GAAG,CAAC,GAAG,KAAK,CAAC;IACtH,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC;QAClD,IAAI,CAAC,aAAa,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,MAAM,EAAE,QAAQ,EAAE,KAAK,EAAE,MAAM,EAAE,iBAAiB,EAAE,iCAAiC,EAAE,sBAAsB,CAAC,CAAC,QAAQ,CAAC,GAAG,CAAC,IAAI,0BAA0B,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,IAAI,CAAC;YAAE,GAAG,CAAC,GAAG,CAAC,GAAG,KAAK,CAAC;IACjR,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC;AACD,MAAM,CAAC,KAAK,UAAU,YAAY,CAAC,OAA0B,EAAE,KAAsB,EAAE,GAAW,EAAE,SAA8B,EAAE,cAAuB;IACzJ,aAAa,CAAC,OAAO,CAAC,CAAC;IACvB,MAAM,QAAQ,GAAG,EAAC,GAAG,OAAO,EAAC,CAAC;IAC9B,KAAK,MAAM,GAAG,IAAI,CAAC,WAAW,EAAC,YAAY,EAAC,UAAU,EAAC,WAAW,CAAU;QAAE,QAAQ,CAAC,GAAG,CAAC,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC,aAAa,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC,CAAC,CAAC;IACpK,OAAO,GAAG,aAAa,CAAC,QAAQ,CAAC,CAAC;IAClC,IAAI,OAAO,CAAC,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,OAAO,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,QAAQ,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC,CAAC,IAAI,OAAO,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,GAAG,OAAO,CAAC,QAAQ,EAAC,GAAG,OAAO,CAAC,SAAS,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,QAAQ,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC,CAAC;QAAE,MAAM,IAAI,UAAU,CAAC,WAAW,EAAE,6DAA6D,CAAC,CAAC;IAC5S,KAAK,MAAM,GAAG,IAAI,CAAC,WAAW,EAAE,YAAY,EAAE,SAAS,CAAU;QAAE,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,OAAO,CAAC,KAAK,QAAQ,CAAC;YAAE,MAAM,IAAI,UAAU,CAAC,eAAe,EAAE,0BAA0B,CAAC,CAAC;IACpN,MAAM,KAAK,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,SAAS,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC,aAAa,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC,CAAC,CAAC;IACvF,MAAM,MAAM,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,UAAU,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC,aAAa,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC,CAAC,CAAC;IACzF,wBAAwB,CAAC,CAAC,GAAG,EAAC,GAAG,OAAO,CAAC,SAAS,EAAC,GAAG,OAAO,CAAC,UAAU,EAAC,GAAG,OAAO,CAAC,QAAQ,EAAC,GAAG,OAAO,CAAC,SAAS,EAAC,GAAG,CAAC,OAAO,CAAC,aAAa,IAAI,EAAE,CAAC,EAAC,GAAG,KAAK,EAAC,GAAG,MAAM,CAAC,CAAC,CAAC;IACxK,IAAI,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,OAAO,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,QAAQ,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC,CAAC,IAAI,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,GAAG,OAAO,CAAC,QAAQ,EAAE,GAAG,OAAO,CAAC,SAAS,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,QAAQ,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC,CAAC;QAAE,MAAM,IAAI,UAAU,CAAC,WAAW,EAAE,2CAA2C,CAAC,CAAC;IACnQ,IAAI,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,aAAa,CAAC,MAAM,CAAC,IAAI,OAAO,CAAC,aAAa,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC,aAAa,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,CAAC;QAAE,MAAM,IAAI,UAAU,CAAC,WAAW,EAAE,kCAAkC,CAAC,CAAC;IACzM,MAAM,kBAAkB,GAAG,SAAS,EAAE,IAAI,KAAK,cAAc,IAAI,SAAS,EAAE,IAAI,KAAK,kBAAkB,CAAC;IACxG,MAAM,WAAW,GAAG,kBAAkB,IAAI,OAAO,CAAC,SAAS,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC;IAC1E,MAAM,aAAa,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC,CAAC,OAAO,CAAC,aAAa,IAAI,EAAE,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC,aAAa,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC,CAAC,CAAC;IAC7G,MAAM,MAAM,GAAG,aAAa,CAAC,MAAM,CAAC,IAAI,CAAC,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,QAAQ,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC,CAAC,CAAC;IACvF,kGAAkG;IAClG,MAAM,UAAU,GAAG,kBAAkB,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,GAAG,OAAO,CAAC,UAAU,EAAE,GAAG,MAAM,CAAC,CAAC;IAC5G,MAAM,kBAAkB,GAAG,CAAC,MAAM,iBAAiB,CAAC,GAAG,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,QAAQ,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC,CAAC,CAAC;IACzH,IAAI,kBAAkB,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,QAAQ,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC,CAAC;QAAE,MAAM,IAAI,UAAU,CAAC,0BAA0B,EAAE,mGAAmG,CAAC,CAAC;IAC1O,MAAM,WAAW,GAAG,aAAa,CAAC,IAAI,GAAG,CAAC,QAAQ,EAAE,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC;IACtE,MAAM,QAAQ,GAAG,OAAO,CAAC,OAAO,CAAC,MAAM,QAAQ,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC,EAAE,IAAI,CAAC,CAAC;IAC1E,MAAM,eAAe,GAAa,EAAE,CAAC;IACrC,KAAK,MAAM,KAAK,IAAI;QAClB,cAAc,IAAI,aAAa,CAAC,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,iCAAiC,CAAC,CAAC;QACvF,aAAa,CAAC,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,+BAA+B,CAAC,CAAC;KACpE,EAAE,CAAC;QACF,IAAI,OAAO,GAAG,OAAO,CAAC,MAAM,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAC;QAC7C,IAAI,IAAI,GAAG,OAAO,CAAC;QACnB,OAAO,OAAO,CAAC,OAAO,CAAC,KAAK,OAAO,EAAE,CAAC;YACpC,IAAI,QAAQ,CAAC,OAAO,CAAC,KAAK,cAAc,IAAI,QAAQ,CAAC,OAAO,CAAC,KAAK,OAAO;gBAAE,IAAI,GAAG,OAAO,CAAC;YAC1F,OAAO,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC;QAC7B,CAAC;QACD,eAAe,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IAC7B,CAAC;IACD,MAAM,UAAU,GAAG,CAAC,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,SAAS,EAAE,UAAU,EAAE,eAAe,EAAE,cAAc,EAAE,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,QAAQ,CAAC,CAAC;IAChJ,MAAM,WAAW,GAAG,CAAC,OAAO,CAAC,WAAW,EAAE,MAAM,CAAC,EAAE,OAAO,CAAC,WAAW,EAAE,cAAc,CAAC,EAAE,OAAO,CAAC,WAAW,EAAE,cAAc,CAAC,EAAE,GAAG,eAAe,CAAC,CAAC;IACnJ,MAAM,OAAO,GAAG,cAAc,EAAE,CAAC;IACjC,MAAM,MAAM,GAAyB;QACnC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,EAAC,OAAO,EAAE,EAAC,SAAS,EAAE,OAAO,CAAC,SAAS,EAAC,EAAC,CAAC,CAAC,CAAC,EAAE,CAAC;QAC7D,UAAU,EAAE;YACV,4EAA4E;YAC5E,uFAAuF;YACvF,QAAQ,EAAE,CAAC,GAAG,CAAC,WAAW,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,EAAE,GAAG,OAAO,CAAC,QAAQ,CAAC;YAC9D,SAAS,EAAE,CAAC,GAAG,MAAM,cAAc,CAAC,CAAC,GAAG,UAAU,EAAE,GAAG,CAAC,WAAW,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,GAAG,OAAO,CAAC,SAAS,EAAE,GAAG,KAAK,EAAE,GAAG,MAAM,CAAC,CAAC,CAAC,EAAE,UAAU,CAAC,EAAE,GAAG,WAAW,CAAC;YACtJ,UAAU,EAAE,UAAU;YACtB,SAAS,EAAE,CAAC,GAAG,OAAO,CAAC,SAAS,EAAE,GAAG,OAAO,CAAC,QAAQ,EAAE,GAAG,kBAAkB,EAAE,GAAG,CAAC,kBAAkB,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,aAAa,CAAC,MAAM,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,GAAG,eAAe,EAAE,OAAO,CAAC,WAAW,EAAE,MAAM,CAAC,EAAE,OAAO,CAAC,WAAW,EAAE,cAAc,CAAC,EAAE,OAAO,CAAC,WAAW,EAAE,cAAc,CAAC,EAAE,OAAO,CAAC,WAAW,EAAE,mBAAmB,CAAC,CAAC;YAC3U,cAAc,EAAE,kBAAkB,IAAI,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,6BAA6B,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;SACpG;QACD,OAAO,EAAE,EAAE,cAAc,EAAE,kBAAkB,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,OAAO,CAAC,cAAc,EAAE,GAAG,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,aAAa,CAAC,CAAC,EAAE,aAAa,EAAE,CAAC,GAAG,OAAO,CAAC,aAAa,CAAC,EAAE,eAAe,EAAE,IAAI,EAAE,mBAAmB,EAAE,KAAK,EAAE,iBAAiB,EAAE,KAAK,EAAE;QAClP,WAAW,EAAE,EAAE,KAAK,EAAE,OAAO,CAAC,QAAQ,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,EAAE,IAAI,EAAE,IAAI,EAAE,MAAe,EAAE,CAAC,CAAC,EAAE;QACvF,yBAAyB,EAAE,KAAK;QAChC,4BAA4B,EAAE,KAAK;QACnC,gBAAgB,EAAE,KAAK;KACxB,CAAC;IACF,IAAI,OAAO,CAAC,QAAQ,KAAK,OAAO,EAAE,CAAC;QACjC,wEAAwE;QACxE,wEAAwE;QACxE,wEAAwE;QACxE,MAAM,CAAC,UAAU,CAAC,SAAS,CAAC,IAAI,CAAC,GAAG,MAAM,CAAC,UAAU,CAAC,SAAS,CAAC,MAAM,CAAC,IAAI,CAAC,EAAE,CAAC,QAAQ,CAAC,IAAI,CAAC,KAAK,MAAM,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,QAAQ,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC,OAAO,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC,CAAC,CAAC;IACxM,CAAC;IACD,wBAAwB,CAAC,CAAC,GAAG,MAAM,CAAC,UAAU,CAAC,QAAQ,EAAC,GAAG,CAAC,MAAM,CAAC,UAAU,CAAC,SAAS,IAAI,EAAE,CAAC,EAAC,GAAG,MAAM,CAAC,UAAU,CAAC,UAAU,EAAC,GAAG,MAAM,CAAC,UAAU,CAAC,SAAS,CAAC,CAAC,CAAC;IAChK,OAAO,MAAM,CAAC;AAChB,CAAC"}

package/dist/sandbox/directory-scan.d.ts

@@ -1 +0,0 @@
-export {};

package/dist/sandbox/directory-scan.js

@@ -1,32 +0,0 @@
-import { readFileSync, readdirSync } from 'node:fs';
-import { join, sep } from 'node:path';
-import { isWithin } from '../policy/paths.js';
-// Internal metadata-only child. The parent supplies canonical, disjoint roots
-// and owns cancellation, the time budget and the bounded output buffer.
-const { roots, denied } = JSON.parse(readFileSync(0, 'utf8'));
-const unlistable = [];
-for (const root of roots) {
-    const exclusions = denied.filter(path => isWithin(path, root));
-    const pending = [root];
-    while (pending.length) {
-        const path = pending.pop();
-        if (exclusions.some(root => path === root || path.startsWith(root + sep)))
-            continue;
-        try {
-            for (const entry of readdirSync(path, { withFileTypes: true })) {
-                if (entry.isDirectory())
-                    pending.push(join(path, entry.name));
-            }
-        }
-        catch (error) {
-            const code = error.code;
-            if (code === 'ENOENT' || code === 'ENOTDIR')
-                continue;
-            if (code !== 'EACCES' && code !== 'EPERM')
-                throw error;
-            unlistable.push(path);
-        }
-    }
-}
-process.stdout.write(JSON.stringify(unlistable));
-//# sourceMappingURL=directory-scan.js.map

package/dist/sandbox/directory-scan.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"directory-scan.js","sourceRoot":"","sources":["../../src/sandbox/directory-scan.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,YAAY,EAAE,WAAW,EAAE,MAAM,SAAS,CAAC;AACpD,OAAO,EAAE,IAAI,EAAE,GAAG,EAAE,MAAM,WAAW,CAAC;AACtC,OAAO,EAAE,QAAQ,EAAE,MAAM,oBAAoB,CAAC;AAE9C,8EAA8E;AAC9E,wEAAwE;AACxE,MAAM,EAAC,KAAK,EAAC,MAAM,EAAC,GAAqC,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,CAAC,EAAC,MAAM,CAAC,CAAC,CAAC;AAC5F,MAAM,UAAU,GAAa,EAAE,CAAC;AAChC,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;IACzB,MAAM,UAAU,GAAG,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,EAAE,CAAC,QAAQ,CAAC,IAAI,EAAC,IAAI,CAAC,CAAC,CAAC;IAC9D,MAAM,OAAO,GAAG,CAAC,IAAI,CAAC,CAAC;IACvB,OAAO,OAAO,CAAC,MAAM,EAAE,CAAC;QACtB,MAAM,IAAI,GAAG,OAAO,CAAC,GAAG,EAAG,CAAC;QAC5B,IAAI,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,IAAI,KAAK,IAAI,IAAI,IAAI,CAAC,UAAU,CAAC,IAAI,GAAG,GAAG,CAAC,CAAC;YAAE,SAAS;QACpF,IAAI,CAAC;YACH,KAAK,MAAM,KAAK,IAAI,WAAW,CAAC,IAAI,EAAC,EAAC,aAAa,EAAC,IAAI,EAAC,CAAC,EAAE,CAAC;gBAC3D,IAAI,KAAK,CAAC,WAAW,EAAE;oBAAE,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,EAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC;YAC/D,CAAC;QACH,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,MAAM,IAAI,GAAI,KAA+B,CAAC,IAAI,CAAC;YACnD,IAAI,IAAI,KAAK,QAAQ,IAAI,IAAI,KAAK,SAAS;gBAAE,SAAS;YACtD,IAAI,IAAI,KAAK,QAAQ,IAAI,IAAI,KAAK,OAAO;gBAAE,MAAM,KAAK,CAAC;YACvD,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACxB,CAAC;IACH,CAAC;AACH,CAAC;AACD,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,UAAU,CAAC,CAAC,CAAC"}

package/dist/sandbox/executor.d.ts

@@ -1,20 +0,0 @@
-import { type ExecutionOptions, type Json, type PermissionDelta, type PermissionProfile, type WorkerJob } from '../contracts.js';
-export interface SandboxExecutor {
-    execute(job: WorkerJob, profile: PermissionProfile, delta: PermissionDelta, options?: ExecutionOptions): Promise<Json>;
-    qualify(profile: PermissionProfile, cwd: string): Promise<void>;
-    close(): Promise<void>;
-}
-export declare class NativeExecutor implements SandboxExecutor {
-    private readonly transport?;
-    private active;
-    private stop;
-    get activeInvocationCount(): number;
-    /** Trusted broker transport, e.g. an enterprise proxy. Never sourced from tool arguments. */
-    constructor(transport?: {
-        socketPath: string;
-        domains: readonly string[];
-    } | undefined);
-    qualify(profile: PermissionProfile, cwd: string): Promise<void>;
-    execute(job: WorkerJob, profile: PermissionProfile, delta?: PermissionDelta, options?: ExecutionOptions): Promise<Json>;
-    close(): Promise<void>;
-}

package/dist/sandbox/executor.js

@@ -1,146 +0,0 @@
-import { fork } from 'node:child_process';
-import { randomUUID } from 'node:crypto';
-import { fileURLToPath } from 'node:url';
-import { realpath } from 'node:fs/promises';
-import { GuardError, EMPTY_DELTA, validateWorkerFrame } from '../contracts.js';
-import { nativeConfig, workloadEnvironment } from './config.js';
-import { assertHardLinkBoundaries } from './hard-links.js';
-import { withSignal } from '../signals.js';
-import { matchesDomain, isNetworkHost, normalizeHost } from '../policy/domains.js';
-import { getPiSDKEntryPath } from '../pi-host.js';
-export class NativeExecutor {
-    transport;
-    active = new Set();
-    stop = new AbortController();
-    get activeInvocationCount() { return this.active.size; }
-    /** Trusted broker transport, e.g. an enterprise proxy. Never sourced from tool arguments. */
-    constructor(transport) {
-        this.transport = transport;
-    }
-    async qualify(profile, cwd) {
-        const data = [];
-        try {
-            const result = await this.execute({ kind: 'shell', command: "printf 'pi-guard-native-ready'", cwd }, profile, EMPTY_DELTA, { timeoutSeconds: 15, onData: chunk => data.push(chunk) });
-            if (result.exitCode !== 0 || Buffer.concat(data).toString() !== 'pi-guard-native-ready')
-                throw new GuardError('ENVIRONMENT_BLOCKED', 'Native permitted-launch control did not succeed');
-        }
-        catch (error) {
-            throw new GuardError('ENVIRONMENT_BLOCKED', `ENVIRONMENT_BLOCKED: native qualification failed: ${error.message}`, { cause: error });
-        }
-    }
-    async execute(job, profile, delta = EMPTY_DELTA, options = {}) {
-        if (!['darwin', 'linux'].includes(process.platform))
-            throw new GuardError('UNSUPPORTED_PLATFORM', 'Native isolation supports only Darwin and Linux');
-        const lifetime = new AbortController();
-        const signal = AbortSignal.any([lifetime.signal, this.stop.signal, ...(options.signal ? [options.signal] : [])]);
-        signal.throwIfAborted();
-        const piSDKEntryPath = getPiSDKEntryPath();
-        const config = await nativeConfig(profile, delta, job.cwd, options.authority, piSDKEntryPath);
-        await assertHardLinkBoundaries(profile, delta, config, signal);
-        if (options.onNetworkRequest)
-            config.network.strictAllowlist = false;
-        if (this.transport)
-            config.network.mitmProxy = { socketPath: await realpath(this.transport.socketPath), domains: [...this.transport.domains] };
-        const timeoutSeconds = options.timeoutSeconds ?? (job.kind === 'shell' ? job.timeoutSeconds : undefined) ?? 120;
-        if (!Number.isFinite(timeoutSeconds) || timeoutSeconds <= 0)
-            throw new GuardError('INVALID_TIMEOUT', 'Execution timeout must be positive seconds');
-        signal.throwIfAborted();
-        const child = fork(fileURLToPath(new URL('./broker.js', import.meta.url)), [piSDKEntryPath], {
-            execArgv: [], serialization: 'json', env: workloadEnvironment(), stdio: ['ignore', 'ignore', 'pipe', 'ipc'],
-        });
-        // Broker owns the workload process group and is never itself a workload child.
-        const seenNetworkRequests = new Set();
-        const task = new Promise((resolve, reject) => {
-            let terminal, error, stderr = '', isTerminal = false, forceTimer, processGroupId;
-            const killOwnedGroup = () => { if (processGroupId)
-                try {
-                    process.kill(-processGroupId, 'SIGKILL');
-                }
-                catch (cause) {
-                    if (cause.code !== 'ESRCH')
-                        error ??= cause;
-                } };
-            const terminate = (cause) => {
-                error ??= cause;
-                if (child.connected)
-                    child.send({ type: 'cancel' });
-                forceTimer ??= setTimeout(() => { killOwnedGroup(); child.kill('SIGKILL'); }, 4000);
-            };
-            const onAbort = () => terminate(new GuardError('CANCELLED', 'Native execution cancelled'));
-            signal.addEventListener('abort', onAbort, { once: true });
-            if (signal.aborted)
-                onAbort();
-            const deadline = setTimeout(() => terminate(new GuardError('TIMEOUT', `Native execution exceeded ${timeoutSeconds} seconds`)), timeoutSeconds * 1000);
-            child.stderr?.on('data', chunk => { stderr = (stderr + chunk.toString()).slice(-8192); });
-            child.on('error', cause => { error ??= cause; });
-            child.on('message', raw => {
-                try {
-                    const control = raw;
-                    if (control.type === 'network-request') {
-                        const requestId = control.requestId, destination = control.destination;
-                        if (control.schemaVersion !== 1 || !requestId || seenNetworkRequests.has(requestId) || !destination || typeof destination.host !== 'string' || !isNetworkHost(destination.host) || destination.port !== undefined && (!Number.isInteger(destination.port) || destination.port < 1 || destination.port > 65535) || isTerminal)
-                            throw new GuardError('INVALID_IPC', 'Invalid network approval request');
-                        seenNetworkRequests.add(requestId);
-                        const request = { host: normalizeHost(destination.host), ...(destination.port !== undefined ? { port: destination.port } : {}) };
-                        const pending = signal.aborted || profile.deniedDomains.some(pattern => matchesDomain(request.host, pattern)) || !options.onNetworkRequest
-                            ? Promise.resolve(false) : withSignal(options.onNetworkRequest(request, signal), signal);
-                        void pending.catch(() => false).then(isAllowed => { if (child.connected)
-                            child.send({ schemaVersion: 1, type: 'network-response', requestId, isAllowed: isAllowed === true && !signal.aborted }); });
-                        return;
-                    }
-                    if (control.type === 'workload-started') {
-                        if (control.schemaVersion !== 1 || !Number.isInteger(control.processGroupId) || control.processGroupId <= 1 || processGroupId || isTerminal)
-                            throw new GuardError('INVALID_IPC', 'Invalid broker process group');
-                        processGroupId = control.processGroupId;
-                        if (error || signal.aborted)
-                            killOwnedGroup();
-                        return;
-                    }
-                    const frame = validateWorkerFrame(raw);
-                    if (isTerminal)
-                        throw new GuardError('INVALID_IPC', 'Worker emitted data after its terminal frame');
-                    if (frame.type === 'data')
-                        options.onData?.(Buffer.from(frame.data, 'base64'));
-                    if (frame.type === 'update')
-                        options.onUpdate?.(frame.result);
-                    if (frame.type === 'result') {
-                        terminal = frame.result;
-                        isTerminal = true;
-                    }
-                    if (frame.type === 'error') {
-                        error ??= new GuardError(frame.code, frame.message);
-                        isTerminal = true;
-                    }
-                }
-                catch (cause) {
-                    terminate(cause);
-                }
-            });
-            child.once('close', () => {
-                if (!isTerminal)
-                    killOwnedGroup();
-                clearTimeout(deadline);
-                if (forceTimer)
-                    clearTimeout(forceTimer);
-                signal.removeEventListener('abort', onAbort);
-                lifetime.abort();
-                if (error)
-                    reject(error);
-                else if (!isTerminal)
-                    reject(new GuardError('WORKER_FAILED', `Worker closed without a result${stderr ? `: ${stderr}` : ''}`));
-                else
-                    resolve(terminal);
-            });
-            child.send({ type: 'execute', commandId: randomUUID(), config, job: { ...job, ...(job.kind === 'shell' ? { env: workloadEnvironment(options.env ?? job.env), timeoutSeconds } : {}) } });
-        });
-        this.active.add(task);
-        try {
-            return await task;
-        }
-        finally {
-            this.active.delete(task);
-        }
-    }
-    async close() { this.stop.abort(); await Promise.allSettled([...this.active]); }
-}
-//# sourceMappingURL=executor.js.map

package/dist/sandbox/executor.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"executor.js","sourceRoot":"","sources":["../../src/sandbox/executor.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,IAAI,EAAE,MAAM,oBAAoB,CAAC;AAC1C,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACzC,OAAO,EAAE,aAAa,EAAE,MAAM,UAAU,CAAC;AACzC,OAAO,EAAE,QAAQ,EAAE,MAAM,kBAAkB,CAAC;AAC5C,OAAO,EAAE,UAAU,EAAE,WAAW,EAAkG,mBAAmB,EAAE,MAAM,iBAAiB,CAAC;AAC/K,OAAO,EAAE,YAAY,EAAE,mBAAmB,EAAE,MAAM,aAAa,CAAC;AAChE,OAAO,EAAE,wBAAwB,EAAE,MAAM,iBAAiB,CAAC;AAC3D,OAAO,EAAE,UAAU,EAAE,MAAM,eAAe,CAAC;AAC3C,OAAO,EAAE,aAAa,EAAE,aAAa,EAAE,aAAa,EAAE,MAAM,sBAAsB,CAAC;AACnF,OAAO,EAAE,iBAAiB,EAAE,MAAM,eAAe,CAAC;AAOlD,MAAM,OAAO,cAAc;IAKI;IAJrB,MAAM,GAAG,IAAI,GAAG,EAAoB,CAAC;IACrC,IAAI,GAAG,IAAI,eAAe,EAAE,CAAC;IACrC,IAAI,qBAAqB,KAAa,OAAO,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC;IAChE,6FAA6F;IAC7F,YAA6B,SAA8D;QAA9D,cAAS,GAAT,SAAS,CAAqD;IAAG,CAAC;IAC/F,KAAK,CAAC,OAAO,CAAC,OAA0B,EAAE,GAAW;QACnD,MAAM,IAAI,GAAa,EAAE,CAAC;QAC1B,IAAI,CAAC;YACH,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,EAAE,IAAI,EAAE,OAAO,EAAE,OAAO,EAAE,gCAAgC,EAAE,GAAG,EAAE,EAAE,OAAO,EAAE,WAAW,EAAE,EAAE,cAAc,EAAE,EAAE,EAAE,MAAM,EAAE,KAAK,CAAC,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;YACtL,IAAK,MAA6B,CAAC,QAAQ,KAAK,CAAC,IAAI,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,QAAQ,EAAE,KAAK,uBAAuB;gBAAE,MAAM,IAAI,UAAU,CAAC,qBAAqB,EAAE,iDAAiD,CAAC,CAAC;QAClN,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YAAC,MAAM,IAAI,UAAU,CAAC,qBAAqB,EAAE,qDAAsD,KAAe,CAAC,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,CAAC,CAAC;QAAC,CAAC;IACrK,CAAC;IACD,KAAK,CAAC,OAAO,CAAC,GAAc,EAAE,OAA0B,EAAE,QAAyB,WAAW,EAAE,UAA4B,EAAE;QAC5H,IAAI,CAAC,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC,QAAQ,CAAC,OAAO,CAAC,QAAQ,CAAC;YAAE,MAAM,IAAI,UAAU,CAAC,sBAAsB,EAAE,iDAAiD,CAAC,CAAC;QACrJ,MAAM,QAAQ,GAAG,IAAI,eAAe,EAAE,CAAC;QACvC,MAAM,MAAM,GAAG,WAAW,CAAC,GAAG,CAAC,CAAC,QAAQ,CAAC,MAAM,EAAE,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,GAAG,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC;QACjH,MAAM,CAAC,cAAc,EAAE,CAAC;QACxB,MAAM,cAAc,GAAG,iBAAiB,EAAE,CAAC;QAC3C,MAAM,MAAM,GAAG,MAAM,YAAY,CAAC,OAAO,EAAE,KAAK,EAAE,GAAG,CAAC,GAAG,EAAE,OAAO,CAAC,SAAS,EAAE,cAAc,CAAC,CAAC;QAC9F,MAAM,wBAAwB,CAAC,OAAO,EAAE,KAAK,EAAE,MAAM,EAAE,MAAM,CAAC,CAAC;QAC/D,IAAI,OAAO,CAAC,gBAAgB;YAAE,MAAM,CAAC,OAAO,CAAC,eAAe,GAAG,KAAK,CAAC;QACrE,IAAI,IAAI,CAAC,SAAS;YAAE,MAAM,CAAC,OAAO,CAAC,SAAS,GAAG,EAAE,UAAU,EAAE,MAAM,QAAQ,CAAC,IAAI,CAAC,SAAS,CAAC,UAAU,CAAC,EAAE,OAAO,EAAE,CAAC,GAAG,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,EAAE,CAAC;QAC/I,MAAM,cAAc,GAAG,OAAO,CAAC,cAAc,IAAI,CAAC,GAAG,CAAC,IAAI,KAAK,OAAO,CAAC,CAAC,CAAC,GAAG,CAAC,cAAc,CAAC,CAAC,CAAC,SAAS,CAAC,IAAI,GAAG,CAAC;QAChH,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,cAAc,CAAC,IAAI,cAAc,IAAI,CAAC;YAAE,MAAM,IAAI,UAAU,CAAC,iBAAiB,EAAE,4CAA4C,CAAC,CAAC;QACnJ,MAAM,CAAC,cAAc,EAAE,CAAC;QACxB,MAAM,KAAK,GAAG,IAAI,CAAC,aAAa,CAAC,IAAI,GAAG,CAAC,aAAa,EAAE,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,CAAC,cAAc,CAAC,EAAE;YAC3F,QAAQ,EAAE,EAAE,EAAE,aAAa,EAAE,MAAM,EAAE,GAAG,EAAE,mBAAmB,EAAE,EAAE,KAAK,EAAE,CAAC,QAAQ,EAAE,QAAQ,EAAE,MAAM,EAAE,KAAK,CAAC;SAC5G,CAAC,CAAC;QACH,+EAA+E;QAC/E,MAAM,mBAAmB,GAAG,IAAI,GAAG,EAAU,CAAC;QAC9C,MAAM,IAAI,GAAG,IAAI,OAAO,CAAO,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;YACjD,IAAI,QAA0B,EAAE,KAAwB,EAAE,MAAM,GAAG,EAAE,EAAE,UAAU,GAAG,KAAK,EAAE,UAAsC,EAAE,cAAkC,CAAC;YACtK,MAAM,cAAc,GAAG,GAAG,EAAE,GAAG,IAAG,cAAc;gBAAC,IAAG,CAAC;oBAAA,OAAO,CAAC,IAAI,CAAC,CAAC,cAAc,EAAC,SAAS,CAAC,CAAC;gBAAA,CAAC;gBAAA,OAAM,KAAK,EAAC,CAAC;oBAAA,IAAI,KAA+B,CAAC,IAAI,KAAG,OAAO;wBAAC,KAAK,KAAG,KAAc,CAAC;gBAAA,CAAC,CAAC,CAAC,CAAC;YACzL,MAAM,SAAS,GAAG,CAAC,KAAY,EAAE,EAAE;gBACjC,KAAK,KAAK,KAAK,CAAC;gBAChB,IAAI,KAAK,CAAC,SAAS;oBAAE,KAAK,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,QAAQ,EAAE,CAAC,CAAC;gBACpD,UAAU,KAAK,UAAU,CAAC,GAAG,EAAE,GAAE,cAAc,EAAE,CAAC,CAAA,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,CAAA,CAAC,EAAE,IAAI,CAAC,CAAC;YACnF,CAAC,CAAC;YACF,MAAM,OAAO,GAAG,GAAG,EAAE,CAAC,SAAS,CAAC,IAAI,UAAU,CAAC,WAAW,EAAE,4BAA4B,CAAC,CAAC,CAAC;YAC3F,MAAM,CAAC,gBAAgB,CAAC,OAAO,EAAE,OAAO,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC;YAC1D,IAAI,MAAM,CAAC,OAAO;gBAAE,OAAO,EAAE,CAAC;YAC9B,MAAM,QAAQ,GAAG,UAAU,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,IAAI,UAAU,CAAC,SAAS,EAAE,6BAA6B,cAAc,UAAU,CAAC,CAAC,EAAE,cAAc,GAAG,IAAI,CAAC,CAAC;YACtJ,KAAK,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,EAAE,KAAK,CAAC,EAAE,GAAG,MAAM,GAAG,CAAC,MAAM,GAAG,KAAK,CAAC,QAAQ,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;YAC1F,KAAK,CAAC,EAAE,CAAC,OAAO,EAAE,KAAK,CAAC,EAAE,GAAG,KAAK,KAAK,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC;YACjD,KAAK,CAAC,EAAE,CAAC,SAAS,EAAE,GAAG,CAAC,EAAE;gBACxB,IAAI,CAAC;oBACH,MAAM,OAAO,GAAC,GAA6H,CAAC;oBAC5I,IAAI,OAAO,CAAC,IAAI,KAAK,iBAAiB,EAAE,CAAC;wBACvC,MAAM,SAAS,GAAC,OAAO,CAAC,SAAS,EAAE,WAAW,GAAC,OAAO,CAAC,WAAW,CAAC;wBACnE,IAAI,OAAO,CAAC,aAAa,KAAG,CAAC,IAAI,CAAC,SAAS,IAAI,mBAAmB,CAAC,GAAG,CAAC,SAAS,CAAC,IAAI,CAAC,WAAW,IAAI,OAAO,WAAW,CAAC,IAAI,KAAK,QAAQ,IAAI,CAAC,aAAa,CAAC,WAAW,CAAC,IAAI,CAAC,IAAI,WAAW,CAAC,IAAI,KAAG,SAAS,IAAI,CAAC,CAAC,MAAM,CAAC,SAAS,CAAC,WAAW,CAAC,IAAI,CAAC,IAAE,WAAW,CAAC,IAAI,GAAC,CAAC,IAAE,WAAW,CAAC,IAAI,GAAC,KAAK,CAAC,IAAI,UAAU;4BAAE,MAAM,IAAI,UAAU,CAAC,aAAa,EAAC,kCAAkC,CAAC,CAAC;wBACzX,mBAAmB,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;wBACnC,MAAM,OAAO,GAAC,EAAC,IAAI,EAAC,aAAa,CAAC,WAAW,CAAC,IAAI,CAAC,EAAC,GAAG,CAAC,WAAW,CAAC,IAAI,KAAG,SAAS,CAAA,CAAC,CAAA,EAAC,IAAI,EAAC,WAAW,CAAC,IAAI,EAAC,CAAA,CAAC,CAAA,EAAE,CAAC,EAAC,CAAC;wBAClH,MAAM,OAAO,GAAG,MAAM,CAAC,OAAO,IAAI,OAAO,CAAC,aAAa,CAAC,IAAI,CAAC,OAAO,CAAA,EAAE,CAAA,aAAa,CAAC,OAAO,CAAC,IAAI,EAAC,OAAO,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,gBAAgB;4BACrI,CAAC,CAAC,OAAO,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,UAAU,CAAC,OAAO,CAAC,gBAAgB,CAAC,OAAO,EAAC,MAAM,CAAC,EAAC,MAAM,CAAC,CAAC;wBACzF,KAAK,OAAO,CAAC,KAAK,CAAC,GAAE,EAAE,CAAA,KAAK,CAAC,CAAC,IAAI,CAAC,SAAS,CAAA,EAAE,GAAC,IAAG,KAAK,CAAC,SAAS;4BAAC,KAAK,CAAC,IAAI,CAAC,EAAC,aAAa,EAAC,CAAC,EAAC,IAAI,EAAC,kBAAkB,EAAC,SAAS,EAAC,SAAS,EAAC,SAAS,KAAG,IAAI,IAAE,CAAC,MAAM,CAAC,OAAO,EAAC,CAAC,CAAC,CAAA,CAAC,CAAC,CAAC;wBACjL,OAAO;oBACT,CAAC;oBACD,IAAG,OAAO,CAAC,IAAI,KAAG,kBAAkB,EAAC,CAAC;wBACpC,IAAG,OAAO,CAAC,aAAa,KAAG,CAAC,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,OAAO,CAAC,cAAc,CAAC,IAAI,OAAO,CAAC,cAAe,IAAI,CAAC,IAAI,cAAc,IAAI,UAAU;4BAAC,MAAM,IAAI,UAAU,CAAC,aAAa,EAAC,8BAA8B,CAAC,CAAC;wBAC7M,cAAc,GAAC,OAAO,CAAC,cAAc,CAAC;wBACtC,IAAI,KAAK,IAAI,MAAM,CAAC,OAAO;4BAAE,cAAc,EAAE,CAAC;wBAC9C,OAAO;oBACT,CAAC;oBACD,MAAM,KAAK,GAAG,mBAAmB,CAAC,GAAG,CAAC,CAAC;oBACvC,IAAI,UAAU;wBAAE,MAAM,IAAI,UAAU,CAAC,aAAa,EAAE,8CAA8C,CAAC,CAAC;oBACpG,IAAI,KAAK,CAAC,IAAI,KAAK,MAAM;wBAAE,OAAO,CAAC,MAAM,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,EAAE,QAAQ,CAAC,CAAC,CAAC;oBAC/E,IAAI,KAAK,CAAC,IAAI,KAAK,QAAQ;wBAAE,OAAO,CAAC,QAAQ,EAAE,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;oBAC9D,IAAI,KAAK,CAAC,IAAI,KAAK,QAAQ,EAAE,CAAC;wBAAC,QAAQ,GAAG,KAAK,CAAC,MAAM,CAAC;wBAAC,UAAU,GAAG,IAAI,CAAC;oBAAC,CAAC;oBAC5E,IAAI,KAAK,CAAC,IAAI,KAAK,OAAO,EAAE,CAAC;wBAAC,KAAK,KAAK,IAAI,UAAU,CAAC,KAAK,CAAC,IAAI,EAAE,KAAK,CAAC,OAAO,CAAC,CAAC;wBAAC,UAAU,GAAG,IAAI,CAAC;oBAAC,CAAC;gBACzG,CAAC;gBAAC,OAAO,KAAK,EAAE,CAAC;oBAAC,SAAS,CAAC,KAAc,CAAC,CAAC;gBAAC,CAAC;YAChD,CAAC,CAAC,CAAC;YACH,KAAK,CAAC,IAAI,CAAC,OAAO,EAAE,GAAG,EAAE;gBACvB,IAAG,CAAC,UAAU;oBAAC,cAAc,EAAE,CAAC;gBAChC,YAAY,CAAC,QAAQ,CAAC,CAAC;gBAAC,IAAI,UAAU;oBAAE,YAAY,CAAC,UAAU,CAAC,CAAC;gBAAC,MAAM,CAAC,mBAAmB,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;gBAC/G,QAAQ,CAAC,KAAK,EAAE,CAAC;gBACjB,IAAI,KAAK;oBAAE,MAAM,CAAC,KAAK,CAAC,CAAC;qBACpB,IAAI,CAAC,UAAU;oBAAE,MAAM,CAAC,IAAI,UAAU,CAAC,eAAe,EAAE,iCAAiC,MAAM,CAAC,CAAC,CAAC,KAAK,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC;;oBACzH,OAAO,CAAC,QAAS,CAAC,CAAC;YAC1B,CAAC,CAAC,CAAC;YACH,KAAK,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,SAAS,EAAE,SAAS,EAAE,UAAU,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,EAAE,GAAG,GAAG,EAAE,GAAG,CAAC,GAAG,CAAC,IAAI,KAAK,OAAO,CAAC,CAAC,CAAC,EAAE,GAAG,EAAE,mBAAmB,CAAC,OAAO,CAAC,GAAG,IAAI,GAAG,CAAC,GAAG,CAAC,EAAE,cAAc,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC;QAC3L,CAAC,CAAC,CAAC;QACH,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;QACtB,IAAI,CAAC;YAAC,OAAO,MAAM,IAAI,CAAC;QAAC,CAAC;gBAAS,CAAC;YAAC,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;QAAC,CAAC;IAClE,CAAC;IACD,KAAK,CAAC,KAAK,KAAoB,IAAI,CAAC,IAAI,CAAC,KAAK,EAAE,CAAC,CAAC,MAAM,OAAO,CAAC,UAAU,CAAC,CAAC,GAAG,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC;CAChG"}

package/dist/sandbox/hard-links.d.ts

@@ -1,4 +0,0 @@
-import type { SandboxRuntimeConfig } from '@anthropic-ai/sandbox-runtime';
-import { type PermissionProfile, type PermissionDelta } from '../contracts.js';
-/** Path-based OS sandboxes cannot distinguish names of an inode linked before launch. */
-export declare function assertHardLinkBoundaries(profile: PermissionProfile, delta: PermissionDelta, config: SandboxRuntimeConfig, signal: AbortSignal): Promise<void>;

package/dist/sandbox/hard-links.js

@@ -1,155 +0,0 @@
-import { access, lstat, realpath } from 'node:fs/promises';
-import { constants } from 'node:fs';
-import { execFile } from 'node:child_process';
-import { promisify } from 'node:util';
-import { parse } from 'node:path';
-import { fileURLToPath } from 'node:url';
-import { GuardError } from '../contracts.js';
-import { isWithin } from '../policy/paths.js';
-const MAX_SCAN_MS = 30000;
-const runScan = promisify(execFile);
-const isMissing = (error) => ['ENOENT', 'ENOTDIR'].includes(error.code ?? '');
-async function existingRoots(paths) {
-    const values = [];
-    for (const path of paths) {
-        try {
-            values.push(await realpath(path));
-        }
-        catch (error) {
-            if (!isMissing(error))
-                throw error;
-        }
-    }
-    return [...new Set(values)].filter((path, _, all) => !all.some(parent => parent !== path && isWithin(path, parent)));
-}
-/** Path-based OS sandboxes cannot distinguish names of an inode linked before launch. */
-export async function assertHardLinkBoundaries(profile, delta, config, signal) {
-    const deadlineMs = Date.now() + MAX_SCAN_MS;
-    const check = () => {
-        signal.throwIfAborted();
-        if (Date.now() > deadlineMs)
-            throw new GuardError('HARD_LINK_SCAN_LIMIT', 'The filesystem is too large to qualify hard-link boundaries safely');
-    };
-    const scanned = new Map();
-    const directoryScans = new Map();
-    const opaqueDirectories = async (paths, exclusions) => {
-        const denied = await existingRoots(exclusions);
-        const roots = (await existingRoots(paths)).filter(root => root !== parse(root).root && !denied.some(path => isWithin(root, path)));
-        if (!roots.length)
-            return [];
-        const prune = denied.filter(path => roots.some(root => isWithin(path, root)));
-        const key = JSON.stringify([roots.toSorted(), prune.toSorted()]);
-        if (directoryScans.has(key))
-            return directoryScans.get(key);
-        check();
-        // Synchronous directory I/O avoids a promise per directory. Keep it in an
-        // owned process so the shared deadline and caller cancellation stay effective.
-        const scan = runScan(process.execPath, [fileURLToPath(new URL('./directory-scan.js', import.meta.url))], { encoding: 'utf8', maxBuffer: 16 * 1024 * 1024, timeout: Math.max(1, deadlineMs - Date.now()), killSignal: 'SIGKILL', signal, env: {} });
-        scan.child.stdin.on('error', () => { });
-        scan.child.stdin.end(JSON.stringify({ roots, denied: prune }));
-        const { stdout } = await scan;
-        const unlistable = JSON.parse(stdout);
-        if (!Array.isArray(unlistable) || unlistable.some(path => typeof path !== 'string' || path.includes('\0') || !roots.some(root => isWithin(path, root))))
-            throw new GuardError('HARD_LINK_SCAN_FAILED', 'Invalid directory scan output');
-        const result = [];
-        for (const path of unlistable) {
-            check();
-            const isSearchable = await access(path, constants.X_OK).then(() => true, error => {
-                if (['EACCES', 'EPERM'].includes(error.code ?? ''))
-                    return false;
-                throw error;
-            });
-            // An unlistable but searchable directory can still expose known filenames.
-            if (isSearchable)
-                throw new GuardError('HARD_LINK_SCAN_FAILED', 'A searchable directory could not be inspected safely');
-            if (/[?*[\]{}]/.test(path))
-                throw new GuardError('NATIVE_SCOPE_UNSUPPORTED', 'An opaque directory cannot be represented safely in the native profile');
-            result.push(path);
-        }
-        directoryScans.set(key, result);
-        return result;
-    };
-    const inspect = async (paths, exclusions = []) => {
-        const roots = await existingRoots(paths), denied = await existingRoots(exclusions);
-        // Every name is already in scope when the filesystem root is admitted (or denied).
-        if (roots.some(root => root === parse(root).root) && denied.length === 0)
-            return;
-        const admitted = roots.filter(path => !denied.some(root => isWithin(path, root)));
-        if (!admitted.length)
-            return;
-        const prune = denied.filter(path => admitted.some(root => isWithin(path, root)));
-        // Read/write passes with the same effective subtree share one qualification.
-        const key = JSON.stringify([admitted.toSorted(), prune.toSorted()]);
-        if (scanned.has(key))
-            return scanned.get(key);
-        const scan = async () => {
-            // Native find performs the metadata traversal without one JS promise/stat per ordinary file.
-            // Arguments are passed directly (no shell); NUL framing preserves spaces/newlines in names.
-            const escapePattern = (path) => path.replace(/[?*\[\]\\]/g, '\\$&');
-            const terms = prune.flatMap((path, index) => [...(index ? ['-o'] : []), '-path', escapePattern(path)]);
-            const args = [...admitted, ...(terms.length ? ['(', ...terms, ')', '-prune', '-o'] : []), '-type', 'f', '-links', '+1', '-print0'];
-            check();
-            const { stdout } = await runScan('/usr/bin/find', args, { encoding: 'buffer', maxBuffer: 16 * 1024 * 1024, timeout: Math.max(1, deadlineMs - Date.now()), killSignal: 'SIGKILL', signal, env: {} });
-            const names = [];
-            for (let start = 0, end = stdout.indexOf(0); end >= 0; start = end + 1, end = stdout.indexOf(0, start))
-                names.push(stdout.subarray(start, end));
-            if (stdout.length && stdout.at(-1) !== 0)
-                throw new GuardError('HARD_LINK_SCAN_FAILED', 'Incomplete hard-link scan output');
-            const links = new Map();
-            for (let start = 0; start < names.length; start += 64) {
-                check();
-                const batch = names.slice(start, start + 64);
-                const metadata = await Promise.all(batch.map(path => lstat(path)));
-                for (const [index, info] of metadata.entries()) {
-                    if (!info.isFile() || info.nlink < 2)
-                        throw new GuardError('HARD_LINK_CHANGED', 'Hard-link topology changed during qualification');
-                    const inode = `${info.dev}:${info.ino}`, prior = links.get(inode);
-                    if (prior && prior.nlink !== info.nlink)
-                        throw new GuardError('HARD_LINK_CHANGED', 'Hard-link topology changed during qualification');
-                    links.set(inode, { count: (prior?.count ?? 0) + 1, nlink: info.nlink, path: batch[index] });
-                }
-            }
-            const values = [...links.values()];
-            for (let start = 0; start < values.length; start += 64) {
-                check();
-                const batch = values.slice(start, start + 64);
-                const metadata = await Promise.all(batch.map(value => lstat(value.path)));
-                for (const [index, info] of metadata.entries()) {
-                    const value = batch[index];
-                    if (value.count !== value.nlink || info.nlink !== value.nlink)
-                        throw new GuardError('HARD_LINK_BOUNDARY', 'A pre-existing hard link crosses the admitted filesystem boundary');
-                }
-            }
-        };
-        const pending = scan();
-        scanned.set(key, pending);
-        await pending;
-    };
-    try {
-        // A protected inode with another name outside these denies must never be read.
-        await inspect(profile.denyRead);
-        const reads = [...profile.readRoots, ...delta.readPaths, ...delta.writePaths];
-        const hasFullRead = !config.filesystem.denyRead.includes('/') || (config.filesystem.allowRead ?? []).some(root => root === parse(root).root);
-        const writes = config.filesystem.allowWrite ?? [], writeDenies = config.filesystem.denyWrite ?? [];
-        const opaque = [...new Set([...(hasFullRead ? [] : await opaqueDirectories(reads, profile.denyRead)), ...await opaqueDirectories(writes, writeDenies)])];
-        // Keep opaque subtrees inaccessible in the workload, including chmod and ancestor moves.
-        // Never silently ignore a failed scan of a protected or searchable directory.
-        config.filesystem.denyRead = [...(config.filesystem.denyRead ?? []), ...opaque];
-        config.filesystem.denyWrite = [...writeDenies, ...opaque];
-        if (!hasFullRead)
-            await inspect(reads, [...profile.denyRead, ...opaque]);
-        if (writes.length) {
-            if ((await existingRoots(writes)).some(root => root === parse(root).root))
-                await inspect(writeDenies);
-            else
-                await inspect(writes, [...writeDenies, ...opaque]);
-        }
-        check();
-    }
-    catch (error) {
-        if (error instanceof GuardError || signal.aborted)
-            throw error;
-        throw new GuardError('HARD_LINK_SCAN_FAILED', 'Hard-link boundaries could not be qualified; no workload was launched', { cause: error });
-    }
-}
-//# sourceMappingURL=hard-links.js.map

package/dist/sandbox/hard-links.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"hard-links.js","sourceRoot":"","sources":["../../src/sandbox/hard-links.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,EAAE,KAAK,EAAE,QAAQ,EAAE,MAAM,kBAAkB,CAAC;AAC3D,OAAO,EAAE,SAAS,EAAE,MAAM,SAAS,CAAC;AACpC,OAAO,EAAE,QAAQ,EAAE,MAAM,oBAAoB,CAAC;AAC9C,OAAO,EAAE,SAAS,EAAE,MAAM,WAAW,CAAC;AACtC,OAAO,EAAE,KAAK,EAAE,MAAM,WAAW,CAAC;AAClC,OAAO,EAAE,aAAa,EAAE,MAAM,UAAU,CAAC;AAEzC,OAAO,EAAE,UAAU,EAAgD,MAAM,iBAAiB,CAAC;AAC3F,OAAO,EAAE,QAAQ,EAAE,MAAM,oBAAoB,CAAC;AAE9C,MAAM,WAAW,GAAG,KAAK,CAAC;AAC1B,MAAM,OAAO,GAAG,SAAS,CAAC,QAAQ,CAAC,CAAC;AACpC,MAAM,SAAS,GAAG,CAAC,KAAc,EAAE,EAAE,CAAC,CAAC,QAAQ,EAAC,SAAS,CAAC,CAAC,QAAQ,CAAE,KAA+B,CAAC,IAAI,IAAI,EAAE,CAAC,CAAC;AACjH,KAAK,UAAU,aAAa,CAAC,KAAwB;IACnD,MAAM,MAAM,GAAa,EAAE,CAAC;IAC5B,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;QACzB,IAAI,CAAC;YAAC,MAAM,CAAC,IAAI,CAAC,MAAM,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC;QAAC,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YAAC,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC;gBAAE,MAAM,KAAK,CAAC;QAAC,CAAC;IAClG,CAAC;IACD,OAAO,CAAC,GAAG,IAAI,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,CAAC,EAAE,GAAG,EAAE,EAAE,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC,MAAM,KAAK,IAAI,IAAI,QAAQ,CAAC,IAAI,EAAC,MAAM,CAAC,CAAC,CAAC,CAAC;AACtH,CAAC;AACD,yFAAyF;AACzF,MAAM,CAAC,KAAK,UAAU,wBAAwB,CAAC,OAA0B,EAAE,KAAsB,EAAE,MAA4B,EAAE,MAAmB;IAClJ,MAAM,UAAU,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,WAAW,CAAC;IAC5C,MAAM,KAAK,GAAG,GAAG,EAAE;QACjB,MAAM,CAAC,cAAc,EAAE,CAAC;QACxB,IAAI,IAAI,CAAC,GAAG,EAAE,GAAG,UAAU;YAAE,MAAM,IAAI,UAAU,CAAC,sBAAsB,EAAE,oEAAoE,CAAC,CAAC;IAClJ,CAAC,CAAC;IACF,MAAM,OAAO,GAAG,IAAI,GAAG,EAAyB,CAAC;IACjD,MAAM,cAAc,GAAG,IAAI,GAAG,EAAoB,CAAC;IACnD,MAAM,iBAAiB,GAAG,KAAK,EAAE,KAAwB,EAAE,UAA6B,EAAE,EAAE;QAC1F,MAAM,MAAM,GAAG,MAAM,aAAa,CAAC,UAAU,CAAC,CAAC;QAC/C,MAAM,KAAK,GAAG,CAAC,MAAM,aAAa,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,EAAE,CAAC,IAAI,KAAK,KAAK,CAAC,IAAI,CAAC,CAAC,IAAI,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,QAAQ,CAAC,IAAI,EAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QAClI,IAAI,CAAC,KAAK,CAAC,MAAM;YAAE,OAAO,EAAE,CAAC;QAC7B,MAAM,KAAK,GAAG,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,QAAQ,CAAC,IAAI,EAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QAC7E,MAAM,GAAG,GAAG,IAAI,CAAC,SAAS,CAAC,CAAC,KAAK,CAAC,QAAQ,EAAE,EAAC,KAAK,CAAC,QAAQ,EAAE,CAAC,CAAC,CAAC;QAChE,IAAI,cAAc,CAAC,GAAG,CAAC,GAAG,CAAC;YAAE,OAAO,cAAc,CAAC,GAAG,CAAC,GAAG,CAAE,CAAC;QAC7D,KAAK,EAAE,CAAC;QACR,0EAA0E;QAC1E,+EAA+E;QAC/E,MAAM,IAAI,GAAG,OAAO,CAAC,OAAO,CAAC,QAAQ,EAAC,CAAC,aAAa,CAAC,IAAI,GAAG,CAAC,qBAAqB,EAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,EAAC,EAAC,QAAQ,EAAC,MAAM,EAAC,SAAS,EAAC,EAAE,GAAC,IAAI,GAAC,IAAI,EAAC,OAAO,EAAC,IAAI,CAAC,GAAG,CAAC,CAAC,EAAC,UAAU,GAAC,IAAI,CAAC,GAAG,EAAE,CAAC,EAAC,UAAU,EAAC,SAAS,EAAC,MAAM,EAAC,GAAG,EAAC,EAAE,EAAC,CAAC,CAAC;QAC7N,IAAI,CAAC,KAAK,CAAC,KAAM,CAAC,EAAE,CAAC,OAAO,EAAC,GAAE,EAAE,GAAC,CAAC,CAAC,CAAC;QACrC,IAAI,CAAC,KAAK,CAAC,KAAM,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,EAAC,KAAK,EAAC,MAAM,EAAC,KAAK,EAAC,CAAC,CAAC,CAAC;QAC5D,MAAM,EAAC,MAAM,EAAC,GAAG,MAAM,IAAI,CAAC;QAC5B,MAAM,UAAU,GAAY,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;QAC/C,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,UAAU,CAAC,IAAI,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,OAAO,IAAI,KAAK,QAAQ,IAAI,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,QAAQ,CAAC,IAAI,EAAC,IAAI,CAAC,CAAC,CAAC;YAAE,MAAM,IAAI,UAAU,CAAC,uBAAuB,EAAC,+BAA+B,CAAC,CAAC;QACtO,MAAM,MAAM,GAAa,EAAE,CAAC;QAC5B,KAAK,MAAM,IAAI,IAAI,UAAsB,EAAE,CAAC;YAC1C,KAAK,EAAE,CAAC;YACR,MAAM,YAAY,GAAG,MAAM,MAAM,CAAC,IAAI,EAAC,SAAS,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,GAAE,EAAE,CAAA,IAAI,EAAC,KAAK,CAAA,EAAE;gBAC1E,IAAI,CAAC,QAAQ,EAAC,OAAO,CAAC,CAAC,QAAQ,CAAE,KAA+B,CAAC,IAAI,IAAE,EAAE,CAAC;oBAAE,OAAO,KAAK,CAAC;gBACzF,MAAM,KAAK,CAAC;YACd,CAAC,CAAC,CAAC;YACH,2EAA2E;YAC3E,IAAI,YAAY;gBAAE,MAAM,IAAI,UAAU,CAAC,uBAAuB,EAAC,sDAAsD,CAAC,CAAC;YACvH,IAAI,WAAW,CAAC,IAAI,CAAC,IAAI,CAAC;gBAAE,MAAM,IAAI,UAAU,CAAC,0BAA0B,EAAC,wEAAwE,CAAC,CAAC;YACtJ,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACpB,CAAC;QACD,cAAc,CAAC,GAAG,CAAC,GAAG,EAAC,MAAM,CAAC,CAAC;QAC/B,OAAO,MAAM,CAAC;IAChB,CAAC,CAAC;IACF,MAAM,OAAO,GAAG,KAAK,EAAE,KAAwB,EAAE,aAAgC,EAAE,EAAE,EAAE;QACrF,MAAM,KAAK,GAAG,MAAM,aAAa,CAAC,KAAK,CAAC,EAAE,MAAM,GAAG,MAAM,aAAa,CAAC,UAAU,CAAC,CAAC;QACnF,mFAAmF;QACnF,IAAI,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,IAAI,KAAK,KAAK,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC;YAAE,OAAO;QACjF,MAAM,QAAQ,GAAG,KAAK,CAAC,MAAM,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,QAAQ,CAAC,IAAI,EAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QACjF,IAAI,CAAC,QAAQ,CAAC,MAAM;YAAE,OAAO;QAC7B,MAAM,KAAK,GAAG,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,EAAE,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,QAAQ,CAAC,IAAI,EAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QAChF,6EAA6E;QAC7E,MAAM,GAAG,GAAG,IAAI,CAAC,SAAS,CAAC,CAAC,QAAQ,CAAC,QAAQ,EAAE,EAAC,KAAK,CAAC,QAAQ,EAAE,CAAC,CAAC,CAAC;QACnE,IAAI,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC;YAAE,OAAO,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;QAC9C,MAAM,IAAI,GAAG,KAAK,IAAI,EAAE;YACtB,6FAA6F;YAC7F,4FAA4F;YAC5F,MAAM,aAAa,GAAG,CAAC,IAAY,EAAE,EAAE,CAAC,IAAI,CAAC,OAAO,CAAC,aAAa,EAAE,MAAM,CAAC,CAAC;YAC5E,MAAM,KAAK,GAAG,KAAK,CAAC,OAAO,CAAC,CAAC,IAAI,EAAC,KAAK,EAAE,EAAE,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,OAAO,EAAE,aAAa,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;YACtG,MAAM,IAAI,GAAG,CAAC,GAAG,QAAQ,EAAE,GAAG,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,GAAG,EAAC,GAAG,KAAK,EAAC,GAAG,EAAC,QAAQ,EAAC,IAAI,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,OAAO,EAAC,GAAG,EAAC,QAAQ,EAAC,IAAI,EAAC,SAAS,CAAC,CAAC;YAC3H,KAAK,EAAE,CAAC;YACR,MAAM,EAAC,MAAM,EAAC,GAAG,MAAM,OAAO,CAAC,eAAe,EAAC,IAAI,EAAC,EAAC,QAAQ,EAAC,QAAQ,EAAC,SAAS,EAAC,EAAE,GAAC,IAAI,GAAC,IAAI,EAAC,OAAO,EAAC,IAAI,CAAC,GAAG,CAAC,CAAC,EAAC,UAAU,GAAC,IAAI,CAAC,GAAG,EAAE,CAAC,EAAC,UAAU,EAAC,SAAS,EAAC,MAAM,EAAC,GAAG,EAAC,EAAE,EAAC,CAAC,CAAC;YAC7K,MAAM,KAAK,GAAa,EAAE,CAAC;YAC3B,KAAK,IAAI,KAAK,GAAG,CAAC,EAAE,GAAG,GAAG,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,GAAG,IAAI,CAAC,EAAE,KAAK,GAAG,GAAG,GAAG,CAAC,EAAE,GAAG,GAAG,MAAM,CAAC,OAAO,CAAC,CAAC,EAAC,KAAK,CAAC;gBAAE,KAAK,CAAC,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,KAAK,EAAC,GAAG,CAAC,CAAC,CAAC;YAC9I,IAAI,MAAM,CAAC,MAAM,IAAI,MAAM,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC;gBAAE,MAAM,IAAI,UAAU,CAAC,uBAAuB,EAAC,kCAAkC,CAAC,CAAC;YAC3H,MAAM,KAAK,GAAG,IAAI,GAAG,EAAoD,CAAC;YAC1E,KAAK,IAAI,KAAK,GAAG,CAAC,EAAE,KAAK,GAAG,KAAK,CAAC,MAAM,EAAE,KAAK,IAAI,EAAE,EAAE,CAAC;gBACtD,KAAK,EAAE,CAAC;gBACR,MAAM,KAAK,GAAG,KAAK,CAAC,KAAK,CAAC,KAAK,EAAC,KAAK,GAAC,EAAE,CAAC,CAAC;gBAC1C,MAAM,QAAQ,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;gBACnE,KAAK,MAAM,CAAC,KAAK,EAAC,IAAI,CAAC,IAAI,QAAQ,CAAC,OAAO,EAAE,EAAE,CAAC;oBAC9C,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,IAAI,IAAI,CAAC,KAAK,GAAG,CAAC;wBAAE,MAAM,IAAI,UAAU,CAAC,mBAAmB,EAAC,iDAAiD,CAAC,CAAC;oBAClI,MAAM,KAAK,GAAG,GAAG,IAAI,CAAC,GAAG,IAAI,IAAI,CAAC,GAAG,EAAE,EAAE,KAAK,GAAG,KAAK,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;oBAClE,IAAI,KAAK,IAAI,KAAK,CAAC,KAAK,KAAK,IAAI,CAAC,KAAK;wBAAE,MAAM,IAAI,UAAU,CAAC,mBAAmB,EAAC,iDAAiD,CAAC,CAAC;oBACrI,KAAK,CAAC,GAAG,CAAC,KAAK,EAAC,EAAC,KAAK,EAAC,CAAC,KAAK,EAAE,KAAK,IAAI,CAAC,CAAC,GAAC,CAAC,EAAC,KAAK,EAAC,IAAI,CAAC,KAAK,EAAC,IAAI,EAAC,KAAK,CAAC,KAAK,CAAE,EAAC,CAAC,CAAC;gBACrF,CAAC;YACH,CAAC;YACD,MAAM,MAAM,GAAG,CAAC,GAAG,KAAK,CAAC,MAAM,EAAE,CAAC,CAAC;YACnC,KAAK,IAAI,KAAK,GAAG,CAAC,EAAE,KAAK,GAAG,MAAM,CAAC,MAAM,EAAE,KAAK,IAAI,EAAE,EAAE,CAAC;gBACvD,KAAK,EAAE,CAAC;gBACR,MAAM,KAAK,GAAG,MAAM,CAAC,KAAK,CAAC,KAAK,EAAC,KAAK,GAAC,EAAE,CAAC,CAAC;gBAC3C,MAAM,QAAQ,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,KAAK,CAAC,EAAE,CAAC,KAAK,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;gBAC1E,KAAK,MAAM,CAAC,KAAK,EAAC,IAAI,CAAC,IAAI,QAAQ,CAAC,OAAO,EAAE,EAAE,CAAC;oBAC9C,MAAM,KAAK,GAAG,KAAK,CAAC,KAAK,CAAE,CAAC;oBAC5B,IAAI,KAAK,CAAC,KAAK,KAAK,KAAK,CAAC,KAAK,IAAI,IAAI,CAAC,KAAK,KAAK,KAAK,CAAC,KAAK;wBAAE,MAAM,IAAI,UAAU,CAAC,oBAAoB,EAAE,mEAAmE,CAAC,CAAC;gBACjL,CAAC;YACH,CAAC;QACH,CAAC,CAAC;QACF,MAAM,OAAO,GAAG,IAAI,EAAE,CAAC;QAAC,OAAO,CAAC,GAAG,CAAC,GAAG,EAAC,OAAO,CAAC,CAAC;QAAC,MAAM,OAAO,CAAC;IAClE,CAAC,CAAC;IACF,IAAI,CAAC;QACH,+EAA+E;QAC/E,MAAM,OAAO,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC;QAChC,MAAM,KAAK,GAAG,CAAC,GAAG,OAAO,CAAC,SAAS,EAAC,GAAG,KAAK,CAAC,SAAS,EAAC,GAAG,KAAK,CAAC,UAAU,CAAC,CAAC;QAC5E,MAAM,WAAW,GAAC,CAAC,MAAM,CAAC,UAAU,CAAC,QAAQ,CAAC,QAAQ,CAAC,GAAG,CAAC,IAAI,CAAC,MAAM,CAAC,UAAU,CAAC,SAAS,IAAE,EAAE,CAAC,CAAC,IAAI,CAAC,IAAI,CAAA,EAAE,CAAA,IAAI,KAAG,KAAK,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,CAAC;QACrI,MAAM,MAAM,GAAG,MAAM,CAAC,UAAU,CAAC,UAAU,IAAI,EAAE,EAAE,WAAW,GAAG,MAAM,CAAC,UAAU,CAAC,SAAS,IAAI,EAAE,CAAC;QACnG,MAAM,MAAM,GAAC,CAAC,GAAG,IAAI,GAAG,CAAC,CAAC,GAAG,CAAC,WAAW,CAAA,CAAC,CAAA,EAAE,CAAA,CAAC,CAAA,MAAM,iBAAiB,CAAC,KAAK,EAAC,OAAO,CAAC,QAAQ,CAAC,CAAC,EAAC,GAAG,MAAM,iBAAiB,CAAC,MAAM,EAAC,WAAW,CAAC,CAAC,CAAC,CAAC,CAAC;QAChJ,yFAAyF;QACzF,8EAA8E;QAC9E,MAAM,CAAC,UAAU,CAAC,QAAQ,GAAC,CAAC,GAAG,CAAC,MAAM,CAAC,UAAU,CAAC,QAAQ,IAAE,EAAE,CAAC,EAAC,GAAG,MAAM,CAAC,CAAC;QAC3E,MAAM,CAAC,UAAU,CAAC,SAAS,GAAC,CAAC,GAAG,WAAW,EAAC,GAAG,MAAM,CAAC,CAAC;QACvD,IAAI,CAAC,WAAW;YAAE,MAAM,OAAO,CAAC,KAAK,EAAC,CAAC,GAAG,OAAO,CAAC,QAAQ,EAAC,GAAG,MAAM,CAAC,CAAC,CAAC;QACvE,IAAI,MAAM,CAAC,MAAM,EAAE,CAAC;YAClB,IAAI,CAAC,MAAM,aAAa,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,IAAI,KAAK,KAAK,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC;gBAAE,MAAM,OAAO,CAAC,WAAW,CAAC,CAAC;;gBACjG,MAAM,OAAO,CAAC,MAAM,EAAC,CAAC,GAAG,WAAW,EAAC,GAAG,MAAM,CAAC,CAAC,CAAC;QACxD,CAAC;QACD,KAAK,EAAE,CAAC;IACV,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,IAAI,KAAK,YAAY,UAAU,IAAI,MAAM,CAAC,OAAO;YAAE,MAAM,KAAK,CAAC;QAC/D,MAAM,IAAI,UAAU,CAAC,uBAAuB,EAAE,uEAAuE,EAAE,EAAC,KAAK,EAAC,KAAK,EAAC,CAAC,CAAC;IACxI,CAAC;AACH,CAAC"}

package/dist/sandbox/linux-read-paths.d.ts

@@ -1,7 +0,0 @@
-/**
- * SRT 0.0.78 restores write mounts before read mounts below a denyRead tmpfs.
- * An enclosing read mount would therefore hide a narrower write mount.
- * Partition only those enclosing directories, retaining readable siblings
- * without making any additional path writable or following an escaping link.
- */
-export declare function linuxReadPaths(reads: readonly string[], writes: readonly string[]): Promise<string[]>;

package/dist/sandbox/linux-read-paths.js

@@ -1,47 +0,0 @@
-import { readdir, realpath } from 'node:fs/promises';
-import { join } from 'node:path';
-import { GuardError } from '../contracts.js';
-import { isWithin } from '../policy/paths.js';
-/**
- * SRT 0.0.78 restores write mounts before read mounts below a denyRead tmpfs.
- * An enclosing read mount would therefore hide a narrower write mount.
- * Partition only those enclosing directories, retaining readable siblings
- * without making any additional path writable or following an escaping link.
- */
-export async function linuxReadPaths(reads, writes) {
-    if (process.platform !== 'linux' || reads.includes('/'))
-        return [...reads];
-    const result = new Set();
-    let entries = 0;
-    async function visit(path, root) {
-        if (writes.some(write => isWithin(path, write)))
-            return;
-        if (!writes.some(write => write !== path && isWithin(write, path))) {
-            result.add(path);
-            return;
-        }
-        const children = await readdir(path, { withFileTypes: true });
-        entries += children.length;
-        if (entries > 10000)
-            throw new GuardError('READ_SCOPE_TOO_LARGE', 'Cannot safely partition this read scope for the requested Linux write grant');
-        for (const child of children) {
-            const childPath = join(path, child.name);
-            if (child.isSymbolicLink()) {
-                let target;
-                try {
-                    target = await realpath(childPath);
-                }
-                catch {
-                    continue;
-                }
-                if (!isWithin(target, root))
-                    continue;
-            }
-            await visit(childPath, root);
-        }
-    }
-    for (const path of new Set(reads))
-        await visit(path, path);
-    return [...result];
-}
-//# sourceMappingURL=linux-read-paths.js.map

package/dist/sandbox/linux-read-paths.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"linux-read-paths.js","sourceRoot":"","sources":["../../src/sandbox/linux-read-paths.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,OAAO,EAAE,QAAQ,EAAE,MAAM,kBAAkB,CAAC;AACrD,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AACjC,OAAO,EAAE,UAAU,EAAE,MAAM,iBAAiB,CAAC;AAC7C,OAAO,EAAE,QAAQ,EAAE,MAAM,oBAAoB,CAAC;AAE9C;;;;;GAKG;AACH,MAAM,CAAC,KAAK,UAAU,cAAc,CAAC,KAAwB,EAAE,MAAyB;IACtF,IAAI,OAAO,CAAC,QAAQ,KAAK,OAAO,IAAI,KAAK,CAAC,QAAQ,CAAC,GAAG,CAAC;QAAE,OAAO,CAAC,GAAG,KAAK,CAAC,CAAC;IAC3E,MAAM,MAAM,GAAG,IAAI,GAAG,EAAU,CAAC;IACjC,IAAI,OAAO,GAAG,CAAC,CAAC;IAChB,KAAK,UAAU,KAAK,CAAC,IAAY,EAAE,IAAY;QAC7C,IAAI,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC,QAAQ,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC;YAAE,OAAO;QACxD,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC,KAAK,KAAK,IAAI,IAAI,QAAQ,CAAC,KAAK,EAAE,IAAI,CAAC,CAAC,EAAE,CAAC;YAAC,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;YAAC,OAAO;QAAC,CAAC;QACjG,MAAM,QAAQ,GAAG,MAAM,OAAO,CAAC,IAAI,EAAE,EAAC,aAAa,EAAC,IAAI,EAAC,CAAC,CAAC;QAC3D,OAAO,IAAI,QAAQ,CAAC,MAAM,CAAC;QAC3B,IAAI,OAAO,GAAG,KAAK;YAAE,MAAM,IAAI,UAAU,CAAC,sBAAsB,EAAE,6EAA6E,CAAC,CAAC;QACjJ,KAAK,MAAM,KAAK,IAAI,QAAQ,EAAE,CAAC;YAC7B,MAAM,SAAS,GAAG,IAAI,CAAC,IAAI,EAAE,KAAK,CAAC,IAAI,CAAC,CAAC;YACzC,IAAI,KAAK,CAAC,cAAc,EAAE,EAAE,CAAC;gBAC3B,IAAI,MAAc,CAAC;gBACnB,IAAI,CAAC;oBAAC,MAAM,GAAG,MAAM,QAAQ,CAAC,SAAS,CAAC,CAAC;gBAAC,CAAC;gBAAC,MAAM,CAAC;oBAAC,SAAS;gBAAC,CAAC;gBAC/D,IAAI,CAAC,QAAQ,CAAC,MAAM,EAAE,IAAI,CAAC;oBAAE,SAAS;YACxC,CAAC;YACD,MAAM,KAAK,CAAC,SAAS,EAAE,IAAI,CAAC,CAAC;QAC/B,CAAC;IACH,CAAC;IACD,KAAK,MAAM,IAAI,IAAI,IAAI,GAAG,CAAC,KAAK,CAAC;QAAE,MAAM,KAAK,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;IAC3D,OAAO,CAAC,GAAG,MAAM,CAAC,CAAC;AACrB,CAAC"}

package/dist/sandbox/paths.d.ts

@@ -1,3 +0,0 @@
-/** The pinned runtime treats these characters as globs, with no literal-path config API. */
-export declare function hasNativePatternChars(path: string): boolean;
-export declare function assertLiteralNativePaths(paths: readonly string[]): void;

package/dist/sandbox/paths.js

@@ -1,10 +0,0 @@
-import { GuardError } from '../contracts.js';
-/** The pinned runtime treats these characters as globs, with no literal-path config API. */
-export function hasNativePatternChars(path) {
-    return /[*?[\]]/.test(path);
-}
-export function assertLiteralNativePaths(paths) {
-    if (paths.some(hasNativePatternChars))
-        throw new GuardError('NATIVE_PATH_UNSUPPORTED', 'Native permission roots containing *, ?, [ or ] are unsupported; no pattern permission was granted');
-}
-//# sourceMappingURL=paths.js.map

package/dist/sandbox/paths.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"paths.js","sourceRoot":"","sources":["../../src/sandbox/paths.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,iBAAiB,CAAC;AAE7C,4FAA4F;AAC5F,MAAM,UAAU,qBAAqB,CAAC,IAAY;IAChD,OAAO,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AAC9B,CAAC;AAED,MAAM,UAAU,wBAAwB,CAAC,KAAwB;IAC/D,IAAI,KAAK,CAAC,IAAI,CAAC,qBAAqB,CAAC;QAAE,MAAM,IAAI,UAAU,CAAC,yBAAyB,EAAE,oGAAoG,CAAC,CAAC;AAC/L,CAAC"}

package/dist/sandbox/runtime-write-paths.d.ts

@@ -1,2 +0,0 @@
-/** File destinations implicitly writable in the pinned runtime, excluding device I/O. */
-export declare function runtimeWritePaths(cwd: string): Promise<string[]>;