pi-codex-auto-review 0.1.2 → 0.1.3

package/node_modules/@anthropic-ai/sandbox-runtime/dist/cli.d.ts

@@ -1,3 +0,0 @@
-#!/usr/bin/env node
-export {};
-//# sourceMappingURL=cli.d.ts.map

package/node_modules/@anthropic-ai/sandbox-runtime/dist/cli.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"cli.d.ts","sourceRoot":"","sources":["../src/cli.ts"],"names":[],"mappings":""}

package/node_modules/@anthropic-ai/sandbox-runtime/dist/cli.js

@@ -1,472 +0,0 @@
-#!/usr/bin/env node
-import { quote } from './utils/shell-quote.js';
-import { Command, InvalidArgumentError } from 'commander';
-import { SandboxManager } from './index.js';
-import { spawn } from 'child_process';
-import { logForDebugging } from './utils/debug.js';
-import { loadConfig, loadConfigFromString } from './utils/config-loader.js';
-import * as readline from 'readline';
-import * as fs from 'fs';
-import * as net from 'net';
-import * as path from 'path';
-import * as os from 'os';
-import { createRequire } from 'module';
-/**
- * Get default config path
- */
-function getDefaultConfigPath() {
-    return path.join(os.homedir(), '.srt-settings.json');
-}
-/**
- * The version `--version` reports, read from the package's own manifest, which
- * sits one directory above both src/cli.ts and dist/cli.js. There is no
- * fallback: a manifest that cannot be read is a broken install, and a
- * plausible-looking wrong version is worse than the throw, because the README
- * pins behaviour to specific releases.
- */
-function getPackageVersion() {
-    const manifest = createRequire(import.meta.url)('../package.json');
-    return manifest.version;
-}
-/**
- * How long a command that ignores SIGTERM gets before SIGKILL.
- */
-const KILL_GRACE_MS = 2000;
-/**
- * Exit rather than run under the built-in defaults, naming what that would
- * cost. The defaults are not a weaker version of any settings file — they
- * are a different config, so falling back to them drops rules rather than
- * relaxing them.
- */
-function refuseSettings(reason, lost) {
-    console.error(`Error: ${reason}`);
-    console.error(`Refusing to run with the built-in defaults, which would drop ${lost}.`);
-    process.exit(1);
-}
-/**
- * What a fall-back to the built-in defaults costs when the file is there.
- */
-const FILE_RULES = "this file's rules (its denyRead, allowRead and credential entries included)";
-/**
- * Create a minimal default config if no config file exists
- */
-function getDefaultConfig() {
-    return {
-        network: {
-            allowedDomains: [],
-            deniedDomains: [],
-        },
-        filesystem: {
-            denyRead: [],
-            allowRead: [],
-            allowWrite: [],
-            denyWrite: [],
-        },
-    };
-}
-/**
- * A readable stream over the control fd. A pipe or socket is read through a
- * libuv stream handle, driven by the event loop: fs.createReadStream would
- * park a threadpool thread in a blocking read(2) that process.exit() then
- * waits for, so srt would outlive the wrapped command until the parent
- * closed the fd. Anything else keeps the fs stream, which is right for a
- * regular file (its reads never block) and leaves a tty with the old wait.
- * Under Bun, net.Socket({ fd }) reads nothing, and Bun's fs stream does not
- * hold exit, so the fs stream serves every fd kind there.
- *
- * A libuv handle switches the fd's open file description to non-blocking
- * mode, from the moment srt opens it and for good (Node restores only fds
- * 0-2 at exit). A parent that shares that description (a shell
- * `exec 3<fifo`, a Python pass_fds of an fd it keeps using) then sees
- * EAGAIN on its own blocking reads, so hand srt a dedicated pipe end.
- */
-function openControlFd(fd) {
-    // fstat succeeds on descriptors srt can never read a byte from — one
-    // opened write-only, the write end of a pipe — and a reader over those
-    // fails only once the command is already running. A zero-length readv(2)
-    // asks the kernel whether a read is permitted at all without performing
-    // one: EBADF for those, 0 for every readable kind, on both node and bun,
-    // without blocking on an empty pipe or consuming a byte of a full one.
-    fs.readvSync(fd, [Buffer.alloc(0)]);
-    const stat = fs.fstatSync(fd);
-    if (!process.versions.bun && (stat.isFIFO() || stat.isSocket())) {
-        try {
-            return new net.Socket({ fd, readable: true, writable: false }).unref();
-        }
-        catch (err) {
-            const code = err.code;
-            if (code !== 'ERR_INVALID_FD_TYPE') {
-                // ERR_INVALID_FD_TYPE is the only refusal that leaves the fd
-                // untouched (a datagram or seqpacket socket, which the fs stream
-                // still reads, one read(2) per datagram). Every other failure comes
-                // out of uv_pipe_open, which has already switched the fd to
-                // non-blocking mode: an fs stream over it would read EAGAIN
-                // forever, so no fallback is left to take.
-                throw new Error(`could not be adopted as a stream (${code ?? String(err)})`);
-            }
-            logForDebugging(`Control fd ${fd} is not a stream socket (${err instanceof Error ? err.message : String(err)}); reading it through fs`);
-        }
-    }
-    return fs.createReadStream('', { fd });
-}
-/**
- * Parse --control-fd: an integer descriptor number >= 3.
- */
-function parseControlFd(value) {
-    // Number() alone would also take '0x10', '3e0' and ' 5 '.
-    if (!/^\d+$/.test(value) || Number(value) < 3) {
-        throw new InvalidArgumentError('must be an integer file descriptor >= 3 (0-2 are stdin, stdout and stderr).');
-    }
-    return Number(value);
-}
-/**
- * stdio for the sandboxed command: the three standard streams, plus
- * /dev/null over the control fd's slot, so nothing inside the sandbox can
- * read the channel that carries the policy confining it.
- *
- * The displacement is what matters on Linux. On macOS libuv spawns through
- * posix_spawn with POSIX_SPAWN_CLOEXEC_DEFAULT, which already keeps every
- * descriptor the caller did not list out of the child.
- */
-function sandboxedStdio(controlFd) {
-    const stdio = [
-        'inherit',
-        'inherit',
-        'inherit',
-    ];
-    if (controlFd === undefined) {
-        return stdio;
-    }
-    // 'ignore' past fd 2 leaves a slot as it is rather than closing it, so the
-    // control fd's slot needs a descriptor of its own to displace it with.
-    while (stdio.length < controlFd) {
-        stdio.push('ignore');
-    }
-    // Only close-on-exec keeps an inherited descriptor out of an exec'd
-    // command, and uv_disable_stdio_inheritance() stops at the first closed
-    // number above 15, so `--control-fd 20` with 16-19 closed leaves the
-    // channel live in the sandbox. Displacing the slot covers every kind of
-    // descriptor, which re-opening the fd privately does not: a unix socket
-    // cannot be re-opened through /proc/self/fd at all (ENXIO).
-    stdio.push(fs.openSync('/dev/null', 'r'));
-    return stdio;
-}
-async function main() {
-    const program = new Command();
-    program
-        .name('srt')
-        .description('Run commands in a sandbox with network and filesystem restrictions')
-        .version(getPackageVersion());
-    // ── Windows install/uninstall ─────────────────────────────────
-    // Self-elevating one-shot install (one UAC prompt). Also
-    // available programmatically as installWindowsSandbox().
-    program
-        .command('windows-install')
-        .description('Windows: provision the `srt-sandbox` user account + install WFP ' +
-        'filters (one UAC prompt). No logout needed.')
-        .option('--sublayer-guid <guid>', 'WFP sublayer GUID')
-        .option('--proxy-port-range <lo-hi>', 'loopback PERMIT port range (e.g. 60080-60089)')
-        .option('--sandbox-user <name>', 'name for the sandbox user account (default: srt-sandbox)')
-        .option('--force', 'replace an existing install with different config')
-        .action(async (o) => {
-        const { installWindowsSandbox, resolveSrtWin, VENDORED_SRT_WIN_EXE } = await import('./sandbox/windows-sandbox-utils.js');
-        const range = typeof o.proxyPortRange === 'string'
-            ? o.proxyPortRange.split('-').map(Number)
-            : undefined;
-        try {
-            const r = installWindowsSandbox({
-                sublayerGuid: o.sublayerGuid,
-                proxyPortRange: range,
-                sandboxUser: o.sandboxUser,
-                force: Boolean(o.force),
-                // Our own CLI opts into the packaged exe explicitly —
-                // there is no ambient vendor fallback.
-                srtWin: resolveSrtWin({ path: VENDORED_SRT_WIN_EXE }),
-            });
-            if (r.cancelled) {
-                console.error('Install cancelled at the UAC prompt. Nothing changed.');
-                process.exit(2);
-            }
-            console.log(`Installed.\n` +
-                `  sandbox user: ${r.user.provisioned ? 'provisioned' : 'MISSING'}` +
-                (r.user.sid ? ` (${r.user.sid})` : '') +
-                `\n` +
-                `  WFP:   ${r.wfp.state}, ${r.wfp.filters} filters` +
-                (r.wfp.portRange
-                    ? `, port range ${r.wfp.portRange[0]}-${r.wfp.portRange[1]}`
-                    : '') +
-                `\n\n` +
-                `No logout needed — the WFP filter keys on the dedicated ` +
-                `\`srt-sandbox\` user's SID, so your network is unaffected.`);
-        }
-        catch (e) {
-            console.error(`Error: ${e.message}`);
-            process.exit(1);
-        }
-    });
-    program
-        .command('windows-uninstall')
-        .description('Windows: remove WFP filters + the `srt-sandbox` account (one UAC prompt).')
-        .option('--sublayer-guid <guid>', 'WFP sublayer GUID')
-        .action(async (o) => {
-        const { uninstallWindowsSandbox, resolveSrtWin, VENDORED_SRT_WIN_EXE } = await import('./sandbox/windows-sandbox-utils.js');
-        try {
-            const r = uninstallWindowsSandbox({
-                sublayerGuid: o.sublayerGuid,
-                srtWin: resolveSrtWin({ path: VENDORED_SRT_WIN_EXE }),
-            });
-            if (r.cancelled) {
-                console.error('Uninstall cancelled at the UAC prompt.');
-                process.exit(2);
-            }
-            console.log('WFP filters and `srt-sandbox` account removed.');
-        }
-        catch (e) {
-            console.error(`Error: ${e.message}`);
-            process.exit(1);
-        }
-    });
-    // Default command - run command in sandbox
-    program
-        .argument('[command...]', 'command to run in the sandbox')
-        .option('-d, --debug', 'enable debug logging')
-        .option('-s, --settings <path>', 'path to config file (default: ~/.srt-settings.json)')
-        .option('-c <command>', 'run command string directly (like sh -c), no escaping applied')
-        .option('--control-fd <fd>', 'read config updates from an inherited file descriptor >= 3 (JSON lines ' +
-        'protocol; give srt a dedicated read-only end — see the README)', parseControlFd)
-        .allowUnknownOption()
-        .action(async (commandArgs, options) => {
-        try {
-            // Enable debug logging if requested. logForDebugging() reads
-            // SRT_DEBUG (not DEBUG, to avoid clashing with the npm `debug`
-            // package and other tools) — keep this in sync with utils/debug.ts.
-            if (options.debug) {
-                process.env.SRT_DEBUG = 'true';
-            }
-            // Load config from file
-            const configPath = options.settings || getDefaultConfigPath();
-            const loaded = loadConfig(configPath);
-            let runtimeConfig;
-            switch (loaded.kind) {
-                case 'ok':
-                    runtimeConfig = loaded.config;
-                    break;
-                case 'missing':
-                    // A settings file that is not there is the documented way to
-                    // ask for the built-in defaults. One the caller named with
-                    // --settings is not: those are rules it asked to have applied.
-                    if (options.settings) {
-                        refuseSettings(`${configPath} does not exist.`, 'the rules --settings asked for');
-                    }
-                    logForDebugging(`No config found at ${configPath}, using default config`);
-                    runtimeConfig = getDefaultConfig();
-                    break;
-                case 'empty':
-                    // A file truncated to nothing is exactly the case where
-                    // falling back would drop rules that were in force yesterday.
-                    refuseSettings(`${configPath} is empty. Delete it, or put a config in it.`, FILE_RULES);
-                    break;
-                case 'unreadable':
-                case 'invalid':
-                    refuseSettings(loaded.reason, FILE_RULES);
-                    break;
-            }
-            // Windows: srtWin.path is required (no ambient vendor
-            // fallback). When the user's config doesn't set it, this
-            // CLI opts into the packaged exe explicitly — that's our
-            // code making the choice, not a library default.
-            if (process.platform === 'win32' &&
-                runtimeConfig.windows?.srtWin?.path === undefined) {
-                const { VENDORED_SRT_WIN_EXE } = await import('./sandbox/windows-sandbox-utils.js');
-                runtimeConfig = {
-                    ...runtimeConfig,
-                    windows: {
-                        ...runtimeConfig.windows,
-                        srtWin: { path: VENDORED_SRT_WIN_EXE },
-                    },
-                };
-            }
-            // The wrapped command, once it exists: a control channel that
-            // dies before it delivers anything takes it down with it.
-            let child;
-            let controlChannelFailed = false;
-            let receivedAnyLine = false;
-            let controlErrorReported = false;
-            const controlFd = options.controlFd;
-            function onControlError(err) {
-                // Attached both to the stream and to the reader: the stream is
-                // live from the moment the fd is opened, which is before the
-                // reader exists, and readline re-emits an input error on the
-                // reader as well. The channel is gone after the first error
-                // either way, so it is reported once.
-                if (controlErrorReported) {
-                    return;
-                }
-                controlErrorReported = true;
-                if (receivedAnyLine) {
-                    // The channel did deliver. The config last applied stays in
-                    // force, so the command keeps running under it.
-                    console.error(`Error reading control fd ${controlFd}: ${err.message}. The control channel is closed; no further updates will be applied.`);
-                    return;
-                }
-                // Nothing ever came through: this is the descriptor that would
-                // not open, found one step later. The caller is sending updates
-                // into a channel srt cannot read.
-                console.error(`Error: control fd ${controlFd} failed before delivering an update: ${err.message}. Refusing to run the command without the control channel it asks for.`);
-                controlChannelFailed = true;
-                if (child === undefined) {
-                    process.exit(1);
-                }
-                child.kill('SIGTERM');
-                // The child's own exit is what exits srt; this covers a command
-                // that ignores SIGTERM.
-                setTimeout(() => child?.kill('SIGKILL'), KILL_GRACE_MS).unref();
-            }
-            // Open and check the control fd before anything is built: a
-            // refusal here has no proxy or Linux bridge to unwind, and
-            // process.exit() cannot wait for the async reset() that would.
-            let controlStream;
-            if (controlFd !== undefined) {
-                try {
-                    controlStream = openControlFd(controlFd);
-                }
-                catch (err) {
-                    // Same rule as an explicit --settings that will not load: a
-                    // caller that asked for a control channel gets an error, not
-                    // a run whose updates — including the ones that tighten the
-                    // sandbox — quietly go nowhere.
-                    console.error(`Error: --control-fd ${controlFd} is not usable: ` +
-                        `${err instanceof Error ? err.message : String(err)}. ` +
-                        'Refusing to run the command without the control channel it asks for.');
-                    process.exit(1);
-                }
-                controlStream.on('error', onControlError);
-            }
-            // Initialize sandbox with config
-            logForDebugging('Initializing sandbox...');
-            await SandboxManager.initialize(runtimeConfig);
-            // Read config updates only now. The stream has been waiting
-            // unread, so nothing the caller wrote meanwhile is lost, and an
-            // update applied before initialize() would have been overwritten
-            // by it.
-            let controlReader = null;
-            if (controlStream !== undefined) {
-                controlReader = readline.createInterface({
-                    input: controlStream,
-                    crlfDelay: Infinity,
-                });
-                controlReader.on('line', line => {
-                    receivedAnyLine = true;
-                    const newConfig = loadConfigFromString(line);
-                    if (newConfig) {
-                        logForDebugging(`Config updated from control fd: ${JSON.stringify(newConfig)}`);
-                        SandboxManager.updateConfig(newConfig);
-                    }
-                    else if (line.trim()) {
-                        // The caller has to learn its update was dropped whether
-                        // or not it runs srt with --debug; the line itself stays
-                        // in the debug log rather than on the terminal.
-                        console.error(`Invalid config on control fd ${controlFd}: ignored, previous config still in force`);
-                        logForDebugging(`Invalid config on control fd (ignored): ${line}`);
-                    }
-                });
-                controlReader.on('error', onControlError);
-                // End of input just means the writer closed its end. The
-                // command keeps running under the config last applied.
-                logForDebugging(`Listening for config updates on fd ${controlFd}`);
-            }
-            // Cleanup control reader on exit
-            process.on('exit', () => {
-                controlReader?.close();
-            });
-            // Determine command string based on mode
-            let command;
-            if (options.c) {
-                // -c mode: use command string directly, no escaping
-                command = options.c;
-                logForDebugging(`Command string mode (-c): ${command}`);
-            }
-            else if (commandArgs.length > 0) {
-                // Default mode: argv-style invocation. The result is later
-                // executed via `bash -c <command>`, so each arg must be
-                // shell-quoted to survive that re-parse — a plain join(' ')
-                // splits arguments containing whitespace (#157).
-                command = quote(commandArgs);
-                logForDebugging(`Original command: ${command}`);
-            }
-            else {
-                console.error('Error: No command specified. Use -c <command> or provide command arguments.');
-                process.exit(1);
-            }
-            logForDebugging(JSON.stringify(SandboxManager.getNetworkRestrictionConfig(), null, 2));
-            // Wrap the command with sandbox restrictions. On Windows
-            // the wrapper returns an argv array that MUST be spawned
-            // with {shell:false} — that's the boundary keeping the
-            // command bytes off the host shell. On other platforms
-            // we keep the existing shell-string path.
-            if (process.platform === 'win32') {
-                // env carries the proxy vars the sandboxed child must inherit.
-                const { argv, env } = await SandboxManager.wrapWithSandboxArgv(command);
-                // No slot to displace: libuv passes only the stdio array's
-                // entries to the child as CRT descriptors, so the control fd
-                // is not among them (an inheritable HANDLE still reaches the
-                // child, but unnamed — nothing there can find it).
-                child = spawn(argv[0], argv.slice(1), {
-                    shell: false,
-                    stdio: 'inherit',
-                    env,
-                });
-            }
-            else {
-                const sandboxedCommand = await SandboxManager.wrapWithSandbox(command);
-                child = spawn(sandboxedCommand, {
-                    shell: true,
-                    stdio: sandboxedStdio(controlFd),
-                });
-            }
-            // Handle process exit
-            child.on('exit', (code, signal) => {
-                // Clean up bwrap mount point artifacts before exiting.
-                // On Linux, bwrap creates empty files on the host when protecting
-                // non-existent deny paths. This removes them.
-                SandboxManager.cleanupAfterCommand();
-                if (controlChannelFailed) {
-                    // srt killed the command over a dead control channel, so the
-                    // status it died with is not the run's result.
-                    process.exit(1);
-                }
-                if (signal) {
-                    if (signal === 'SIGINT' || signal === 'SIGTERM') {
-                        process.exit(0);
-                    }
-                    else {
-                        console.error(`Process killed by signal: ${signal}`);
-                        process.exit(1);
-                    }
-                }
-                process.exit(code ?? 0);
-            });
-            child.on('error', error => {
-                console.error(`Failed to execute command: ${error.message}`);
-                process.exit(1);
-            });
-            // Handle cleanup on interrupt
-            process.on('SIGINT', () => {
-                child?.kill('SIGINT');
-            });
-            process.on('SIGTERM', () => {
-                child?.kill('SIGTERM');
-            });
-        }
-        catch (error) {
-            console.error(`Error: ${error instanceof Error ? error.message : String(error)}`);
-            process.exit(1);
-        }
-    });
-    program.parse();
-}
-main().catch(error => {
-    console.error('Fatal error:', error);
-    process.exit(1);
-});
-//# sourceMappingURL=cli.js.map

package/node_modules/@anthropic-ai/sandbox-runtime/dist/cli.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"cli.js","sourceRoot":"","sources":["../src/cli.ts"],"names":[],"mappings":";AACA,OAAO,EAAE,KAAK,EAAE,MAAM,wBAAwB,CAAA;AAC9C,OAAO,EAAE,OAAO,EAAE,oBAAoB,EAAE,MAAM,WAAW,CAAA;AACzD,OAAO,EAAE,cAAc,EAAE,MAAM,YAAY,CAAA;AAE3C,OAAO,EAAE,KAAK,EAAqB,MAAM,eAAe,CAAA;AACxD,OAAO,EAAE,eAAe,EAAE,MAAM,kBAAkB,CAAA;AAClD,OAAO,EAAE,UAAU,EAAE,oBAAoB,EAAE,MAAM,0BAA0B,CAAA;AAC3E,OAAO,KAAK,QAAQ,MAAM,UAAU,CAAA;AACpC,OAAO,KAAK,EAAE,MAAM,IAAI,CAAA;AACxB,OAAO,KAAK,GAAG,MAAM,KAAK,CAAA;AAC1B,OAAO,KAAK,IAAI,MAAM,MAAM,CAAA;AAC5B,OAAO,KAAK,EAAE,MAAM,IAAI,CAAA;AACxB,OAAO,EAAE,aAAa,EAAE,MAAM,QAAQ,CAAA;AAEtC;;GAEG;AACH,SAAS,oBAAoB;IAC3B,OAAO,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,OAAO,EAAE,EAAE,oBAAoB,CAAC,CAAA;AACtD,CAAC;AAED;;;;;;GAMG;AACH,SAAS,iBAAiB;IACxB,MAAM,QAAQ,GAAwB,aAAa,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAClE,iBAAiB,CAClB,CAAA;IACD,OAAO,QAAQ,CAAC,OAAO,CAAA;AACzB,CAAC;AAED;;GAEG;AACH,MAAM,aAAa,GAAG,IAAI,CAAA;AAE1B;;;;;GAKG;AACH,SAAS,cAAc,CAAC,MAAc,EAAE,IAAY;IAClD,OAAO,CAAC,KAAK,CAAC,UAAU,MAAM,EAAE,CAAC,CAAA;IACjC,OAAO,CAAC,KAAK,CACX,gEAAgE,IAAI,GAAG,CACxE,CAAA;IACD,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAA;AACjB,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,GACd,6EAA6E,CAAA;AAE/E;;GAEG;AACH,SAAS,gBAAgB;IACvB,OAAO;QACL,OAAO,EAAE;YACP,cAAc,EAAE,EAAE;YAClB,aAAa,EAAE,EAAE;SAClB;QACD,UAAU,EAAE;YACV,QAAQ,EAAE,EAAE;YACZ,SAAS,EAAE,EAAE;YACb,UAAU,EAAE,EAAE;YACd,SAAS,EAAE,EAAE;SACd;KACF,CAAA;AACH,CAAC;AAED;;;;;;;;;;;;;;;GAeG;AACH,SAAS,aAAa,CAAC,EAAU;IAC/B,qEAAqE;IACrE,uEAAuE;IACvE,yEAAyE;IACzE,wEAAwE;IACxE,yEAAyE;IACzE,uEAAuE;IACvE,EAAE,CAAC,SAAS,CAAC,EAAE,EAAE,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAA;IACnC,MAAM,IAAI,GAAG,EAAE,CAAC,SAAS,CAAC,EAAE,CAAC,CAAA;IAC7B,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,GAAG,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,IAAI,IAAI,CAAC,QAAQ,EAAE,CAAC,EAAE,CAAC;QAChE,IAAI,CAAC;YACH,OAAO,IAAI,GAAG,CAAC,MAAM,CAAC,EAAE,EAAE,EAAE,QAAQ,EAAE,IAAI,EAAE,QAAQ,EAAE,KAAK,EAAE,CAAC,CAAC,KAAK,EAAE,CAAA;QACxE,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,MAAM,IAAI,GAAI,GAA6B,CAAC,IAAI,CAAA;YAChD,IAAI,IAAI,KAAK,qBAAqB,EAAE,CAAC;gBACnC,6DAA6D;gBAC7D,iEAAiE;gBACjE,oEAAoE;gBACpE,4DAA4D;gBAC5D,4DAA4D;gBAC5D,2CAA2C;gBAC3C,MAAM,IAAI,KAAK,CACb,qCAAqC,IAAI,IAAI,MAAM,CAAC,GAAG,CAAC,GAAG,CAC5D,CAAA;YACH,CAAC;YACD,eAAe,CACb,cAAc,EAAE,4BAA4B,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,0BAA0B,CACvH,CAAA;QACH,CAAC;IACH,CAAC;IACD,OAAO,EAAE,CAAC,gBAAgB,CAAC,EAAE,EAAE,EAAE,EAAE,EAAE,CAAC,CAAA;AACxC,CAAC;AAED;;GAEG;AACH,SAAS,cAAc,CAAC,KAAa;IACnC,0DAA0D;IAC1D,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC,EAAE,CAAC;QAC9C,MAAM,IAAI,oBAAoB,CAC5B,6EAA6E,CAC9E,CAAA;IACH,CAAC;IACD,OAAO,MAAM,CAAC,KAAK,CAAC,CAAA;AACtB,CAAC;AAED;;;;;;;;GAQG;AACH,SAAS,cAAc,CACrB,SAA6B;IAE7B,MAAM,KAAK,GAAyC;QAClD,SAAS;QACT,SAAS;QACT,SAAS;KACV,CAAA;IACD,IAAI,SAAS,KAAK,SAAS,EAAE,CAAC;QAC5B,OAAO,KAAK,CAAA;IACd,CAAC;IACD,2EAA2E;IAC3E,uEAAuE;IACvE,OAAO,KAAK,CAAC,MAAM,GAAG,SAAS,EAAE,CAAC;QAChC,KAAK,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAA;IACtB,CAAC;IACD,oEAAoE;IACpE,wEAAwE;IACxE,qEAAqE;IACrE,wEAAwE;IACxE,wEAAwE;IACxE,4DAA4D;IAC5D,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,QAAQ,CAAC,WAAW,EAAE,GAAG,CAAC,CAAC,CAAA;IACzC,OAAO,KAAK,CAAA;AACd,CAAC;AAED,KAAK,UAAU,IAAI;IACjB,MAAM,OAAO,GAAG,IAAI,OAAO,EAAE,CAAA;IAE7B,OAAO;SACJ,IAAI,CAAC,KAAK,CAAC;SACX,WAAW,CACV,oEAAoE,CACrE;SACA,OAAO,CAAC,iBAAiB,EAAE,CAAC,CAAA;IAE/B,iEAAiE;IACjE,yDAAyD;IACzD,yDAAyD;IACzD,OAAO;SACJ,OAAO,CAAC,iBAAiB,CAAC;SAC1B,WAAW,CACV,kEAAkE;QAChE,6CAA6C,CAChD;SACA,MAAM,CAAC,wBAAwB,EAAE,mBAAmB,CAAC;SACrD,MAAM,CACL,4BAA4B,EAC5B,+CAA+C,CAChD;SACA,MAAM,CACL,uBAAuB,EACvB,0DAA0D,CAC3D;SACA,MAAM,CAAC,SAAS,EAAE,mDAAmD,CAAC;SACtE,MAAM,CAAC,KAAK,EAAE,CAA+C,EAAE,EAAE;QAChE,MAAM,EAAE,qBAAqB,EAAE,aAAa,EAAE,oBAAoB,EAAE,GAClE,MAAM,MAAM,CAAC,oCAAoC,CAAC,CAAA;QACpD,MAAM,KAAK,GACT,OAAO,CAAC,CAAC,cAAc,KAAK,QAAQ;YAClC,CAAC,CAAE,CAAC,CAAC,cAAc,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,GAAG,CAAC,MAAM,CAAsB;YAC/D,CAAC,CAAC,SAAS,CAAA;QACf,IAAI,CAAC;YACH,MAAM,CAAC,GAAG,qBAAqB,CAAC;gBAC9B,YAAY,EAAE,CAAC,CAAC,YAAkC;gBAClD,cAAc,EAAE,KAAK;gBACrB,WAAW,EAAE,CAAC,CAAC,WAAiC;gBAChD,KAAK,EAAE,OAAO,CAAC,CAAC,CAAC,KAAK,CAAC;gBACvB,sDAAsD;gBACtD,uCAAuC;gBACvC,MAAM,EAAE,aAAa,CAAC,EAAE,IAAI,EAAE,oBAAoB,EAAE,CAAC;aACtD,CAAC,CAAA;YACF,IAAI,CAAC,CAAC,SAAS,EAAE,CAAC;gBAChB,OAAO,CAAC,KAAK,CAAC,uDAAuD,CAAC,CAAA;gBACtE,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAA;YACjB,CAAC;YACD,OAAO,CAAC,GAAG,CACT,cAAc;gBACZ,mBAAmB,CAAC,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC,CAAC,aAAa,CAAC,CAAC,CAAC,SAAS,EAAE;gBACnE,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,GAAG,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC;gBACtC,IAAI;gBACJ,YAAY,CAAC,CAAC,GAAG,CAAC,KAAK,KAAK,CAAC,CAAC,GAAG,CAAC,OAAO,UAAU;gBACnD,CAAC,CAAC,CAAC,GAAG,CAAC,SAAS;oBACd,CAAC,CAAC,gBAAgB,CAAC,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE;oBAC5D,CAAC,CAAC,EAAE,CAAC;gBACP,MAAM;gBACN,0DAA0D;gBAC1D,4DAA4D,CAC/D,CAAA;QACH,CAAC;QAAC,OAAO,CAAC,EAAE,CAAC;YACX,OAAO,CAAC,KAAK,CAAC,UAAW,CAAW,CAAC,OAAO,EAAE,CAAC,CAAA;YAC/C,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAA;QACjB,CAAC;IACH,CAAC,CAAC,CAAA;IAEJ,OAAO;SACJ,OAAO,CAAC,mBAAmB,CAAC;SAC5B,WAAW,CACV,2EAA2E,CAC5E;SACA,MAAM,CAAC,wBAAwB,EAAE,mBAAmB,CAAC;SACrD,MAAM,CAAC,KAAK,EAAE,CAAqC,EAAE,EAAE;QACtD,MAAM,EAAE,uBAAuB,EAAE,aAAa,EAAE,oBAAoB,EAAE,GACpE,MAAM,MAAM,CAAC,oCAAoC,CAAC,CAAA;QACpD,IAAI,CAAC;YACH,MAAM,CAAC,GAAG,uBAAuB,CAAC;gBAChC,YAAY,EAAE,CAAC,CAAC,YAAY;gBAC5B,MAAM,EAAE,aAAa,CAAC,EAAE,IAAI,EAAE,oBAAoB,EAAE,CAAC;aACtD,CAAC,CAAA;YACF,IAAI,CAAC,CAAC,SAAS,EAAE,CAAC;gBAChB,OAAO,CAAC,KAAK,CAAC,wCAAwC,CAAC,CAAA;gBACvD,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAA;YACjB,CAAC;YACD,OAAO,CAAC,GAAG,CAAC,gDAAgD,CAAC,CAAA;QAC/D,CAAC;QAAC,OAAO,CAAC,EAAE,CAAC;YACX,OAAO,CAAC,KAAK,CAAC,UAAW,CAAW,CAAC,OAAO,EAAE,CAAC,CAAA;YAC/C,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAA;QACjB,CAAC;IACH,CAAC,CAAC,CAAA;IAEJ,2CAA2C;IAC3C,OAAO;SACJ,QAAQ,CAAC,cAAc,EAAE,+BAA+B,CAAC;SACzD,MAAM,CAAC,aAAa,EAAE,sBAAsB,CAAC;SAC7C,MAAM,CACL,uBAAuB,EACvB,qDAAqD,CACtD;SACA,MAAM,CACL,cAAc,EACd,+DAA+D,CAChE;SACA,MAAM,CACL,mBAAmB,EACnB,yEAAyE;QACvE,gEAAgE,EAClE,cAAc,CACf;SACA,kBAAkB,EAAE;SACpB,MAAM,CACL,KAAK,EACH,WAAqB,EACrB,OAKC,EACD,EAAE;QACF,IAAI,CAAC;YACH,6DAA6D;YAC7D,+DAA+D;YAC/D,oEAAoE;YACpE,IAAI,OAAO,CAAC,KAAK,EAAE,CAAC;gBAClB,OAAO,CAAC,GAAG,CAAC,SAAS,GAAG,MAAM,CAAA;YAChC,CAAC;YAED,wBAAwB;YACxB,MAAM,UAAU,GAAG,OAAO,CAAC,QAAQ,IAAI,oBAAoB,EAAE,CAAA;YAC7D,MAAM,MAAM,GAAG,UAAU,CAAC,UAAU,CAAC,CAAA;YACrC,IAAI,aAAmC,CAAA;YACvC,QAAQ,MAAM,CAAC,IAAI,EAAE,CAAC;gBACpB,KAAK,IAAI;oBACP,aAAa,GAAG,MAAM,CAAC,MAAM,CAAA;oBAC7B,MAAK;gBACP,KAAK,SAAS;oBACZ,6DAA6D;oBAC7D,2DAA2D;oBAC3D,+DAA+D;oBAC/D,IAAI,OAAO,CAAC,QAAQ,EAAE,CAAC;wBACrB,cAAc,CACZ,GAAG,UAAU,kBAAkB,EAC/B,gCAAgC,CACjC,CAAA;oBACH,CAAC;oBACD,eAAe,CACb,sBAAsB,UAAU,wBAAwB,CACzD,CAAA;oBACD,aAAa,GAAG,gBAAgB,EAAE,CAAA;oBAClC,MAAK;gBACP,KAAK,OAAO;oBACV,wDAAwD;oBACxD,8DAA8D;oBAC9D,cAAc,CACZ,GAAG,UAAU,8CAA8C,EAC3D,UAAU,CACX,CAAA;oBACD,MAAK;gBACP,KAAK,YAAY,CAAC;gBAClB,KAAK,SAAS;oBACZ,cAAc,CAAC,MAAM,CAAC,MAAM,EAAE,UAAU,CAAC,CAAA;oBACzC,MAAK;YACT,CAAC;YAED,sDAAsD;YACtD,yDAAyD;YACzD,yDAAyD;YACzD,iDAAiD;YACjD,IACE,OAAO,CAAC,QAAQ,KAAK,OAAO;gBAC5B,aAAa,CAAC,OAAO,EAAE,MAAM,EAAE,IAAI,KAAK,SAAS,EACjD,CAAC;gBACD,MAAM,EAAE,oBAAoB,EAAE,GAAG,MAAM,MAAM,CAC3C,oCAAoC,CACrC,CAAA;gBACD,aAAa,GAAG;oBACd,GAAG,aAAa;oBAChB,OAAO,EAAE;wBACP,GAAG,aAAa,CAAC,OAAO;wBACxB,MAAM,EAAE,EAAE,IAAI,EAAE,oBAAoB,EAAE;qBACvC;iBACF,CAAA;YACH,CAAC;YAED,8DAA8D;YAC9D,0DAA0D;YAC1D,IAAI,KAA+B,CAAA;YACnC,IAAI,oBAAoB,GAAG,KAAK,CAAA;YAChC,IAAI,eAAe,GAAG,KAAK,CAAA;YAC3B,IAAI,oBAAoB,GAAG,KAAK,CAAA;YAChC,MAAM,SAAS,GAAG,OAAO,CAAC,SAAS,CAAA;YAEnC,SAAS,cAAc,CAAC,GAAU;gBAChC,+DAA+D;gBAC/D,6DAA6D;gBAC7D,6DAA6D;gBAC7D,4DAA4D;gBAC5D,sCAAsC;gBACtC,IAAI,oBAAoB,EAAE,CAAC;oBACzB,OAAM;gBACR,CAAC;gBACD,oBAAoB,GAAG,IAAI,CAAA;gBAC3B,IAAI,eAAe,EAAE,CAAC;oBACpB,4DAA4D;oBAC5D,gDAAgD;oBAChD,OAAO,CAAC,KAAK,CACX,4BAA4B,SAAS,KAAK,GAAG,CAAC,OAAO,sEAAsE,CAC5H,CAAA;oBACD,OAAM;gBACR,CAAC;gBACD,+DAA+D;gBAC/D,gEAAgE;gBAChE,kCAAkC;gBAClC,OAAO,CAAC,KAAK,CACX,qBAAqB,SAAS,wCAAwC,GAAG,CAAC,OAAO,wEAAwE,CAC1J,CAAA;gBACD,oBAAoB,GAAG,IAAI,CAAA;gBAC3B,IAAI,KAAK,KAAK,SAAS,EAAE,CAAC;oBACxB,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAA;gBACjB,CAAC;gBACD,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,CAAA;gBACrB,gEAAgE;gBAChE,wBAAwB;gBACxB,UAAU,CAAC,GAAG,EAAE,CAAC,KAAK,EAAE,IAAI,CAAC,SAAS,CAAC,EAAE,aAAa,CAAC,CAAC,KAAK,EAAE,CAAA;YACjE,CAAC;YAED,4DAA4D;YAC5D,2DAA2D;YAC3D,+DAA+D;YAC/D,IAAI,aAAgD,CAAA;YACpD,IAAI,SAAS,KAAK,SAAS,EAAE,CAAC;gBAC5B,IAAI,CAAC;oBACH,aAAa,GAAG,aAAa,CAAC,SAAS,CAAC,CAAA;gBAC1C,CAAC;gBAAC,OAAO,GAAG,EAAE,CAAC;oBACb,4DAA4D;oBAC5D,6DAA6D;oBAC7D,4DAA4D;oBAC5D,gCAAgC;oBAChC,OAAO,CAAC,KAAK,CACX,uBAAuB,SAAS,kBAAkB;wBAChD,GAAG,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,IAAI;wBACvD,sEAAsE,CACzE,CAAA;oBACD,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAA;gBACjB,CAAC;gBACD,aAAa,CAAC,EAAE,CAAC,OAAO,EAAE,cAAc,CAAC,CAAA;YAC3C,CAAC;YAED,iCAAiC;YACjC,eAAe,CAAC,yBAAyB,CAAC,CAAA;YAC1C,MAAM,cAAc,CAAC,UAAU,CAAC,aAAa,CAAC,CAAA;YAE9C,4DAA4D;YAC5D,gEAAgE;YAChE,iEAAiE;YACjE,SAAS;YACT,IAAI,aAAa,GAA8B,IAAI,CAAA;YACnD,IAAI,aAAa,KAAK,SAAS,EAAE,CAAC;gBAChC,aAAa,GAAG,QAAQ,CAAC,eAAe,CAAC;oBACvC,KAAK,EAAE,aAAa;oBACpB,SAAS,EAAE,QAAQ;iBACpB,CAAC,CAAA;gBAEF,aAAa,CAAC,EAAE,CAAC,MAAM,EAAE,IAAI,CAAC,EAAE;oBAC9B,eAAe,GAAG,IAAI,CAAA;oBACtB,MAAM,SAAS,GAAG,oBAAoB,CAAC,IAAI,CAAC,CAAA;oBAC5C,IAAI,SAAS,EAAE,CAAC;wBACd,eAAe,CACb,mCAAmC,IAAI,CAAC,SAAS,CAAC,SAAS,CAAC,EAAE,CAC/D,CAAA;wBACD,cAAc,CAAC,YAAY,CAAC,SAAS,CAAC,CAAA;oBACxC,CAAC;yBAAM,IAAI,IAAI,CAAC,IAAI,EAAE,EAAE,CAAC;wBACvB,yDAAyD;wBACzD,yDAAyD;wBACzD,gDAAgD;wBAChD,OAAO,CAAC,KAAK,CACX,gCAAgC,SAAS,2CAA2C,CACrF,CAAA;wBACD,eAAe,CACb,2CAA2C,IAAI,EAAE,CAClD,CAAA;oBACH,CAAC;gBACH,CAAC,CAAC,CAAA;gBAEF,aAAa,CAAC,EAAE,CAAC,OAAO,EAAE,cAAc,CAAC,CAAA;gBAEzC,yDAAyD;gBACzD,uDAAuD;gBACvD,eAAe,CAAC,sCAAsC,SAAS,EAAE,CAAC,CAAA;YACpE,CAAC;YAED,iCAAiC;YACjC,OAAO,CAAC,EAAE,CAAC,MAAM,EAAE,GAAG,EAAE;gBACtB,aAAa,EAAE,KAAK,EAAE,CAAA;YACxB,CAAC,CAAC,CAAA;YAEF,yCAAyC;YACzC,IAAI,OAAe,CAAA;YACnB,IAAI,OAAO,CAAC,CAAC,EAAE,CAAC;gBACd,oDAAoD;gBACpD,OAAO,GAAG,OAAO,CAAC,CAAC,CAAA;gBACnB,eAAe,CAAC,6BAA6B,OAAO,EAAE,CAAC,CAAA;YACzD,CAAC;iBAAM,IAAI,WAAW,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;gBAClC,2DAA2D;gBAC3D,wDAAwD;gBACxD,4DAA4D;gBAC5D,iDAAiD;gBACjD,OAAO,GAAG,KAAK,CAAC,WAAW,CAAC,CAAA;gBAC5B,eAAe,CAAC,qBAAqB,OAAO,EAAE,CAAC,CAAA;YACjD,CAAC;iBAAM,CAAC;gBACN,OAAO,CAAC,KAAK,CACX,6EAA6E,CAC9E,CAAA;gBACD,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAA;YACjB,CAAC;YAED,eAAe,CACb,IAAI,CAAC,SAAS,CACZ,cAAc,CAAC,2BAA2B,EAAE,EAC5C,IAAI,EACJ,CAAC,CACF,CACF,CAAA;YAED,yDAAyD;YACzD,yDAAyD;YACzD,uDAAuD;YACvD,uDAAuD;YACvD,0CAA0C;YAC1C,IAAI,OAAO,CAAC,QAAQ,KAAK,OAAO,EAAE,CAAC;gBACjC,+DAA+D;gBAC/D,MAAM,EAAE,IAAI,EAAE,GAAG,EAAE,GACjB,MAAM,cAAc,CAAC,mBAAmB,CAAC,OAAO,CAAC,CAAA;gBACnD,2DAA2D;gBAC3D,6DAA6D;gBAC7D,6DAA6D;gBAC7D,mDAAmD;gBACnD,KAAK,GAAG,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE;oBACpC,KAAK,EAAE,KAAK;oBACZ,KAAK,EAAE,SAAS;oBAChB,GAAG;iBACJ,CAAC,CAAA;YACJ,CAAC;iBAAM,CAAC;gBACN,MAAM,gBAAgB,GACpB,MAAM,cAAc,CAAC,eAAe,CAAC,OAAO,CAAC,CAAA;gBAC/C,KAAK,GAAG,KAAK,CAAC,gBAAgB,EAAE;oBAC9B,KAAK,EAAE,IAAI;oBACX,KAAK,EAAE,cAAc,CAAC,SAAS,CAAC;iBACjC,CAAC,CAAA;YACJ,CAAC;YAED,sBAAsB;YACtB,KAAK,CAAC,EAAE,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,MAAM,EAAE,EAAE;gBAChC,uDAAuD;gBACvD,kEAAkE;gBAClE,8CAA8C;gBAC9C,cAAc,CAAC,mBAAmB,EAAE,CAAA;gBAEpC,IAAI,oBAAoB,EAAE,CAAC;oBACzB,6DAA6D;oBAC7D,+CAA+C;oBAC/C,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAA;gBACjB,CAAC;gBAED,IAAI,MAAM,EAAE,CAAC;oBACX,IAAI,MAAM,KAAK,QAAQ,IAAI,MAAM,KAAK,SAAS,EAAE,CAAC;wBAChD,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAA;oBACjB,CAAC;yBAAM,CAAC;wBACN,OAAO,CAAC,KAAK,CAAC,6BAA6B,MAAM,EAAE,CAAC,CAAA;wBACpD,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAA;oBACjB,CAAC;gBACH,CAAC;gBACD,OAAO,CAAC,IAAI,CAAC,IAAI,IAAI,CAAC,CAAC,CAAA;YACzB,CAAC,CAAC,CAAA;YAEF,KAAK,CAAC,EAAE,CAAC,OAAO,EAAE,KAAK,CAAC,EAAE;gBACxB,OAAO,CAAC,KAAK,CAAC,8BAA8B,KAAK,CAAC,OAAO,EAAE,CAAC,CAAA;gBAC5D,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAA;YACjB,CAAC,CAAC,CAAA;YAEF,8BAA8B;YAC9B,OAAO,CAAC,EAAE,CAAC,QAAQ,EAAE,GAAG,EAAE;gBACxB,KAAK,EAAE,IAAI,CAAC,QAAQ,CAAC,CAAA;YACvB,CAAC,CAAC,CAAA;YAEF,OAAO,CAAC,EAAE,CAAC,SAAS,EAAE,GAAG,EAAE;gBACzB,KAAK,EAAE,IAAI,CAAC,SAAS,CAAC,CAAA;YACxB,CAAC,CAAC,CAAA;QACJ,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,OAAO,CAAC,KAAK,CACX,UAAU,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,CACnE,CAAA;YACD,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAA;QACjB,CAAC;IACH,CAAC,CACF,CAAA;IAEH,OAAO,CAAC,KAAK,EAAE,CAAA;AACjB,CAAC;AAED,IAAI,EAAE,CAAC,KAAK,CAAC,KAAK,CAAC,EAAE;IACnB,OAAO,CAAC,KAAK,CAAC,cAAc,EAAE,KAAK,CAAC,CAAA;IACpC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAA;AACjB,CAAC,CAAC,CAAA"}

package/node_modules/@anthropic-ai/sandbox-runtime/dist/index.d.ts

@@ -1,19 +0,0 @@
-export { SandboxManager } from './sandbox/sandbox-manager.js';
-export type { WrapWithSandboxOptions } from './sandbox/sandbox-manager.js';
-export { SandboxViolationStore } from './sandbox/sandbox-violation-store.js';
-export type { SandboxRuntimeConfig, NetworkConfig, FilesystemConfig, CredentialsConfig, CredentialFileConfig, CredentialEnvVarConfig, CredentialMode, IgnoreViolationsConfig, } from './sandbox/sandbox-config.js';
-export { SandboxRuntimeConfigSchema, NetworkConfigSchema, FilesystemConfigSchema, CredentialsConfigSchema, IgnoreViolationsConfigSchema, RipgrepConfigSchema, } from './sandbox/sandbox-config.js';
-export type { SandboxAskCallback, FsReadRestrictionConfig, FsWriteRestrictionConfig, CredentialRestrictionConfig, NetworkRestrictionConfig, NetworkHostPattern, } from './sandbox/sandbox-schemas.js';
-export type { FilterRequestCallback, RequestDecision, MutateForwardedHeaders, } from './sandbox/request-filter.js';
-export type { SandboxViolationEvent } from './sandbox/macos-sandbox-utils.js';
-export { type SandboxDependencyCheck, LinuxSandboxProfileError, type LinuxSandboxProfileErrorCode, } from './sandbox/linux-sandbox-utils.js';
-export { WindowsSandboxError, getSrtWinPath, resolveSrtWin, VENDORED_SRT_WIN_EXE, checkWindowsSandboxStatus, checkWindowsSandboxStatusAsync, getWindowsWfpStatus, getWindowsWfpStatusAsync, verifyWindowsWfpEgress, getWindowsSandboxUserStatus, getWindowsSandboxUserStatusAsync, getWindowsSandboxCaCert, windowsTrustCa, windowsTrustCaAsync, ensurePersistentWindowsCa, windowsStateDir, installWindowsSandbox, installWindowsSandboxAsync, checkWindowsDependenciesAsync, uninstallWindowsSandbox, windowsInstallInstructions, stampWindowsAcl, restoreWindowsAcl, grantWindowsAcl, revokeWindowsAcl, expandWindowsFsPaths, buildGitConfigEnv, parseWindowsBinShell, parseWindowsSandboxError, isUncPath, DEFAULT_WINDOWS_PROXY_PORT_RANGE, SRT_WIN_DISPATCH_ARG1, } from './sandbox/windows-sandbox-utils.js';
-export type { WindowsSandboxErrorCode, WindowsSandboxStatus, WindowsBinShell, MappedDriveCwdError, WindowsInstallOptions, WindowsInstallResult, WindowsWfpStatus, WindowsAclStampOptions, WindowsAclGrantOptions, WindowsAclAceOutcome, WindowsWfpStatusResult, WindowsWfpVerifyResult, WindowsSandboxUserStatus, WindowsPersistentCa, SrtWinSpawn, } from './sandbox/windows-sandbox-utils.js';
-export { generateCa, validateCaPair, certThumbprint, } from './sandbox/mitm-ca.js';
-export type { GeneratedCa, CaPairValidation } from './sandbox/mitm-ca.js';
-export type { WindowsConfig, SrtWinConfig, GitConfig, } from './sandbox/sandbox-config.js';
-export { WindowsConfigSchema, SrtWinConfigSchema, GitConfigSchema, } from './sandbox/sandbox-config.js';
-export { getDefaultWritePaths } from './sandbox/sandbox-utils.js';
-export { getWslVersion } from './utils/platform.js';
-export type { Platform } from './utils/platform.js';
-//# sourceMappingURL=index.d.ts.map

package/node_modules/@anthropic-ai/sandbox-runtime/dist/index.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,cAAc,EAAE,MAAM,8BAA8B,CAAA;AAC7D,YAAY,EAAE,sBAAsB,EAAE,MAAM,8BAA8B,CAAA;AAC1E,OAAO,EAAE,qBAAqB,EAAE,MAAM,sCAAsC,CAAA;AAG5E,YAAY,EACV,oBAAoB,EACpB,aAAa,EACb,gBAAgB,EAChB,iBAAiB,EACjB,oBAAoB,EACpB,sBAAsB,EACtB,cAAc,EACd,sBAAsB,GACvB,MAAM,6BAA6B,CAAA;AAEpC,OAAO,EACL,0BAA0B,EAC1B,mBAAmB,EACnB,sBAAsB,EACtB,uBAAuB,EACvB,4BAA4B,EAC5B,mBAAmB,GACpB,MAAM,6BAA6B,CAAA;AAGpC,YAAY,EACV,kBAAkB,EAClB,uBAAuB,EACvB,wBAAwB,EACxB,2BAA2B,EAC3B,wBAAwB,EACxB,kBAAkB,GACnB,MAAM,8BAA8B,CAAA;AAGrC,YAAY,EACV,qBAAqB,EACrB,eAAe,EACf,sBAAsB,GACvB,MAAM,6BAA6B,CAAA;AAGpC,YAAY,EAAE,qBAAqB,EAAE,MAAM,kCAAkC,CAAA;AAC7E,OAAO,EACL,KAAK,sBAAsB,EAC3B,wBAAwB,EACxB,KAAK,4BAA4B,GAClC,MAAM,kCAAkC,CAAA;AAGzC,OAAO,EACL,mBAAmB,EACnB,aAAa,EACb,aAAa,EACb,oBAAoB,EACpB,yBAAyB,EACzB,8BAA8B,EAC9B,mBAAmB,EACnB,wBAAwB,EACxB,sBAAsB,EACtB,2BAA2B,EAC3B,gCAAgC,EAChC,uBAAuB,EACvB,cAAc,EACd,mBAAmB,EACnB,yBAAyB,EACzB,eAAe,EACf,qBAAqB,EACrB,0BAA0B,EAC1B,6BAA6B,EAC7B,uBAAuB,EACvB,0BAA0B,EAC1B,eAAe,EACf,iBAAiB,EACjB,eAAe,EACf,gBAAgB,EAChB,oBAAoB,EACpB,iBAAiB,EACjB,oBAAoB,EACpB,wBAAwB,EACxB,SAAS,EACT,gCAAgC,EAChC,qBAAqB,GACtB,MAAM,oCAAoC,CAAA;AAC3C,YAAY,EACV,uBAAuB,EACvB,oBAAoB,EACpB,eAAe,EACf,mBAAmB,EACnB,qBAAqB,EACrB,oBAAoB,EACpB,gBAAgB,EAChB,sBAAsB,EACtB,sBAAsB,EACtB,oBAAoB,EACpB,sBAAsB,EACtB,sBAAsB,EACtB,wBAAwB,EACxB,mBAAmB,EACnB,WAAW,GACZ,MAAM,oCAAoC,CAAA;AAK3C,OAAO,EACL,UAAU,EACV,cAAc,EACd,cAAc,GACf,MAAM,sBAAsB,CAAA;AAC7B,YAAY,EAAE,WAAW,EAAE,gBAAgB,EAAE,MAAM,sBAAsB,CAAA;AACzE,YAAY,EACV,aAAa,EACb,YAAY,EACZ,SAAS,GACV,MAAM,6BAA6B,CAAA;AACpC,OAAO,EACL,mBAAmB,EACnB,kBAAkB,EAClB,eAAe,GAChB,MAAM,6BAA6B,CAAA;AAGpC,OAAO,EAAE,oBAAoB,EAAE,MAAM,4BAA4B,CAAA;AAGjE,OAAO,EAAE,aAAa,EAAE,MAAM,qBAAqB,CAAA;AACnD,YAAY,EAAE,QAAQ,EAAE,MAAM,qBAAqB,CAAA"}

package/node_modules/@anthropic-ai/sandbox-runtime/dist/index.js

@@ -1,17 +0,0 @@
-// Library exports
-export { SandboxManager } from './sandbox/sandbox-manager.js';
-export { SandboxViolationStore } from './sandbox/sandbox-violation-store.js';
-export { SandboxRuntimeConfigSchema, NetworkConfigSchema, FilesystemConfigSchema, CredentialsConfigSchema, IgnoreViolationsConfigSchema, RipgrepConfigSchema, } from './sandbox/sandbox-config.js';
-export { LinuxSandboxProfileError, } from './sandbox/linux-sandbox-utils.js';
-// Windows install/status API
-export { WindowsSandboxError, getSrtWinPath, resolveSrtWin, VENDORED_SRT_WIN_EXE, checkWindowsSandboxStatus, checkWindowsSandboxStatusAsync, getWindowsWfpStatus, getWindowsWfpStatusAsync, verifyWindowsWfpEgress, getWindowsSandboxUserStatus, getWindowsSandboxUserStatusAsync, getWindowsSandboxCaCert, windowsTrustCa, windowsTrustCaAsync, ensurePersistentWindowsCa, windowsStateDir, installWindowsSandbox, installWindowsSandboxAsync, checkWindowsDependenciesAsync, uninstallWindowsSandbox, windowsInstallInstructions, stampWindowsAcl, restoreWindowsAcl, grantWindowsAcl, revokeWindowsAcl, expandWindowsFsPaths, buildGitConfigEnv, parseWindowsBinShell, parseWindowsSandboxError, isUncPath, DEFAULT_WINDOWS_PROXY_PORT_RANGE, SRT_WIN_DISPATCH_ARG1, } from './sandbox/windows-sandbox-utils.js';
-// TLS-termination CA generation/validation (mitm-ca.ts). Embedders that
-// manage CA persistence themselves (rather than relying on the Windows
-// persistent-CA default) use these to generate and validate a pair.
-export { generateCa, validateCaPair, certThumbprint, } from './sandbox/mitm-ca.js';
-export { WindowsConfigSchema, SrtWinConfigSchema, GitConfigSchema, } from './sandbox/sandbox-config.js';
-// Utility functions
-export { getDefaultWritePaths } from './sandbox/sandbox-utils.js';
-// Platform utilities
-export { getWslVersion } from './utils/platform.js';
-//# sourceMappingURL=index.js.map

package/node_modules/@anthropic-ai/sandbox-runtime/dist/index.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,kBAAkB;AAClB,OAAO,EAAE,cAAc,EAAE,MAAM,8BAA8B,CAAA;AAE7D,OAAO,EAAE,qBAAqB,EAAE,MAAM,sCAAsC,CAAA;AAc5E,OAAO,EACL,0BAA0B,EAC1B,mBAAmB,EACnB,sBAAsB,EACtB,uBAAuB,EACvB,4BAA4B,EAC5B,mBAAmB,GACpB,MAAM,6BAA6B,CAAA;AAqBpC,OAAO,EAEL,wBAAwB,GAEzB,MAAM,kCAAkC,CAAA;AAEzC,6BAA6B;AAC7B,OAAO,EACL,mBAAmB,EACnB,aAAa,EACb,aAAa,EACb,oBAAoB,EACpB,yBAAyB,EACzB,8BAA8B,EAC9B,mBAAmB,EACnB,wBAAwB,EACxB,sBAAsB,EACtB,2BAA2B,EAC3B,gCAAgC,EAChC,uBAAuB,EACvB,cAAc,EACd,mBAAmB,EACnB,yBAAyB,EACzB,eAAe,EACf,qBAAqB,EACrB,0BAA0B,EAC1B,6BAA6B,EAC7B,uBAAuB,EACvB,0BAA0B,EAC1B,eAAe,EACf,iBAAiB,EACjB,eAAe,EACf,gBAAgB,EAChB,oBAAoB,EACpB,iBAAiB,EACjB,oBAAoB,EACpB,wBAAwB,EACxB,SAAS,EACT,gCAAgC,EAChC,qBAAqB,GACtB,MAAM,oCAAoC,CAAA;AAmB3C,wEAAwE;AACxE,uEAAuE;AACvE,oEAAoE;AACpE,OAAO,EACL,UAAU,EACV,cAAc,EACd,cAAc,GACf,MAAM,sBAAsB,CAAA;AAO7B,OAAO,EACL,mBAAmB,EACnB,kBAAkB,EAClB,eAAe,GAChB,MAAM,6BAA6B,CAAA;AAEpC,oBAAoB;AACpB,OAAO,EAAE,oBAAoB,EAAE,MAAM,4BAA4B,CAAA;AAEjE,qBAAqB;AACrB,OAAO,EAAE,aAAa,EAAE,MAAM,qBAAqB,CAAA"}

package/node_modules/@anthropic-ai/sandbox-runtime/dist/sandbox/address.d.ts

@@ -1,52 +0,0 @@
-/**
- * IP-literal / CIDR helpers over `net.BlockList`, shared by the
- * resolved-address guard, the parent-proxy NO_PROXY matcher and config
- * validation.
- */
-import { BlockList } from 'node:net';
-/** Loopback in both families (BlockList matches IPv4-mapped forms against the IPv4 rule). */
-export declare const LOOPBACK_RANGES: readonly string[];
-type AddressFamily = 'ipv4' | 'ipv6';
-type AddressRange = {
-    address: string;
-    prefix: number;
-    family: AddressFamily;
-};
-/**
- * Parse an IP literal or CIDR range (`10.0.0.0/8`, `fc00::/7`, `::1`) into
- * the one form rules are stored in: an IPv4-mapped IPv6 entry becomes the
- * IPv4 rule it stands for (`::ffff:10.0.0.0/104` → `10.0.0.0/8`) and a zone
- * id is dropped, since matching treats both spellings alike and some
- * runtimes mis-evaluate or refuse the IPv6 ones. Undefined for anything
- * else; IPv6 is unbracketed.
- */
-export declare function parseAddressRange(entry: string): AddressRange | undefined;
-/** Add an IP literal or CIDR range to `list`; false (list untouched) if malformed or refused by the runtime. */
-export declare function addRange(list: BlockList, entry: string): boolean;
-/**
- * BlockList membership for an address string of either family. IPv4 rules
- * also match the IPv4-mapped IPv6 spelling (BlockList does that itself);
- * an IPv6 zone id (`fe80::1%en0`) is dropped first because a zoned address
- * is a non-match on some runtimes.
- */
-export declare function addressInSet(list: BlockList, address: string): boolean;
-/** The IPv4 address of an IPv4-mapped IPv6 literal (`::ffff:a.b.c.d`), or undefined. */
-export declare function mappedIPv4(address: string): string | undefined;
-/**
- * The IPv4 address an IPv6 address carries in one of the forms a network
- * delivers to that IPv4 destination: IPv4-mapped and IPv4-compatible
- * (`::ffff:0:0/96`, `::/96`), IPv4-translated (`::ffff:0:0:0/96`), the NAT64
- * well-known prefix (`64:ff9b::/96`) and 6to4 (`2002::/16`). Undefined for
- * anything else — including the local-use NAT64 prefix `64:ff9b:1::/48` and
- * network-specific prefixes, whose layout (RFC 6052 §2.2 allows /32…/96)
- * cannot be told from the address, so the embedded IPv4 could be anywhere;
- * an embedder on such a network lists the prefix's translations of the
- * ranges it denies.
- */
-export declare function embeddedIPv4(address: string): string | undefined;
-/** True for an IPv4/IPv6 loopback literal (including v4-mapped forms). */
-export declare function isLoopbackAddress(address: string): boolean;
-/** `localhost` and names under `.localhost` (RFC 6761 §6.3). */
-export declare function isLoopbackName(hostname: string): boolean;
-export {};
-//# sourceMappingURL=address.d.ts.map

package/node_modules/@anthropic-ai/sandbox-runtime/dist/sandbox/address.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"address.d.ts","sourceRoot":"","sources":["../../src/sandbox/address.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH,OAAO,EAAE,SAAS,EAAQ,MAAM,UAAU,CAAA;AAE1C,6FAA6F;AAC7F,eAAO,MAAM,eAAe,EAAE,SAAS,MAAM,EAA2B,CAAA;AAExE,KAAK,aAAa,GAAG,MAAM,GAAG,MAAM,CAAA;AAQpC,KAAK,YAAY,GAAG;IAClB,OAAO,EAAE,MAAM,CAAA;IACf,MAAM,EAAE,MAAM,CAAA;IACd,MAAM,EAAE,aAAa,CAAA;CACtB,CAAA;AAED;;;;;;;GAOG;AACH,wBAAgB,iBAAiB,CAAC,KAAK,EAAE,MAAM,GAAG,YAAY,GAAG,SAAS,CAmBzE;AAED,gHAAgH;AAChH,wBAAgB,QAAQ,CAAC,IAAI,EAAE,SAAS,EAAE,KAAK,EAAE,MAAM,GAAG,OAAO,CAShE;AAkBD;;;;;GAKG;AACH,wBAAgB,YAAY,CAAC,IAAI,EAAE,SAAS,EAAE,OAAO,EAAE,MAAM,GAAG,OAAO,CAItE;AA6BD,wFAAwF;AACxF,wBAAgB,UAAU,CAAC,OAAO,EAAE,MAAM,GAAG,MAAM,GAAG,SAAS,CAO9D;AAED;;;;;;;;;;GAUG;AACH,wBAAgB,YAAY,CAAC,OAAO,EAAE,MAAM,GAAG,MAAM,GAAG,SAAS,CAYhE;AAID,0EAA0E;AAC1E,wBAAgB,iBAAiB,CAAC,OAAO,EAAE,MAAM,GAAG,OAAO,CAE1D;AAED,gEAAgE;AAChE,wBAAgB,cAAc,CAAC,QAAQ,EAAE,MAAM,GAAG,OAAO,CAGxD"}