plugin-agent-orchestrator 1.0.6 → 1.0.14

package/dist/server/services/SandboxRunner.js

@@ -0,0 +1,167 @@
+/**
+ * This file is part of the NocoBase (R) project.
+ * Copyright (c) 2020-2024 NocoBase Co., Ltd.
+ * Authors: NocoBase Team.
+ *
+ * This project is dual-licensed under AGPL-3.0 and NocoBase Commercial License.
+ * For more information, please refer to: https://www.nocobase.com/agreement.
+ */
+
+var __defProp = Object.defineProperty;
+var __getOwnPropDesc = Object.getOwnPropertyDescriptor;
+var __getOwnPropNames = Object.getOwnPropertyNames;
+var __hasOwnProp = Object.prototype.hasOwnProperty;
+var __export = (target, all) => {
+  for (var name in all)
+    __defProp(target, name, { get: all[name], enumerable: true });
+};
+var __copyProps = (to, from, except, desc) => {
+  if (from && typeof from === "object" || typeof from === "function") {
+    for (let key of __getOwnPropNames(from))
+      if (!__hasOwnProp.call(to, key) && key !== except)
+        __defProp(to, key, { get: () => from[key], enumerable: !(desc = __getOwnPropDesc(from, key)) || desc.enumerable });
+  }
+  return to;
+};
+var __toCommonJS = (mod) => __copyProps(__defProp({}, "__esModule", { value: true }), mod);
+var SandboxRunner_exports = {};
+__export(SandboxRunner_exports, {
+  SandboxRunner: () => SandboxRunner
+});
+module.exports = __toCommonJS(SandboxRunner_exports);
+var import_child_process = require("child_process");
+var import_fs = require("fs");
+var import_path = require("path");
+var import_CodeValidator = require("./CodeValidator");
+class SandboxRunner {
+  constructor(fileManager, logger, storagePath) {
+    this.fileManager = fileManager;
+    this.logger = logger;
+    this.storagePath = storagePath;
+    this.sandboxWorkspace = (0, import_path.resolve)(storagePath, "sandbox-workspace");
+  }
+  validator = new import_CodeValidator.CodeValidator();
+  sandboxWorkspace;
+  async execute(options) {
+    const {
+      language,
+      code,
+      execId,
+      timeoutSeconds = 60,
+      maxOutputSizeMb = 50,
+      onProgress,
+      signal,
+      packageWhitelist,
+      skillDir
+    } = options;
+    this.validator.validate(code, language);
+    if (packageWhitelist == null ? void 0 : packageWhitelist.length) {
+      this.validator.validateImports(code, language, packageWhitelist);
+    }
+    const workDir = this.fileManager.createExecDir(execId);
+    const outputDir = this.fileManager.getOutputDir(execId);
+    const filename = language === "node" ? "script.js" : "script.py";
+    const scriptPath = (0, import_path.resolve)(workDir, filename);
+    (0, import_fs.writeFileSync)(scriptPath, code, "utf-8");
+    onProgress == null ? void 0 : onProgress({ percent: 20, log: "Code validated, executing..." });
+    const cmd = language === "node" ? `node "${scriptPath}"` : `python3 "${scriptPath}"`;
+    const path = require("path");
+    const nodePath = path.resolve(this.sandboxWorkspace, "node_modules");
+    const finalNodePath = process.env.NODE_PATH ? `${nodePath}${path.delimiter}${process.env.NODE_PATH}` : nodePath;
+    const startTime = Date.now();
+    let childProc = null;
+    let wasCanceled = false;
+    const processResult = await new Promise((resolveResult) => {
+      childProc = (0, import_child_process.exec)(
+        cmd,
+        {
+          timeout: timeoutSeconds * 1e3,
+          maxBuffer: 10 * 1024 * 1024,
+          // 10MB stdout/stderr buffer
+          cwd: workDir,
+          env: {
+            // Sanitized environment — only expose what's necessary
+            PATH: process.env.PATH,
+            HOME: "/tmp",
+            TMPDIR: "/tmp",
+            OUTPUT_DIR: outputDir,
+            LANG: "en_US.UTF-8",
+            // Node.js
+            NODE_PATH: finalNodePath,
+            // Python — include bundled packages (svg_to_pptx etc.)
+            PYTHONPATH: [
+              skillDir ? path.resolve(skillDir, "scripts") : "",
+              path.resolve(this.sandboxWorkspace, "python_packages"),
+              process.env.PYTHONPATH || ""
+            ].filter(Boolean).join(path.delimiter),
+            PYTHONIOENCODING: "utf-8",
+            SKILL_DIR: skillDir || ""
+            // DO NOT pass: DB credentials, API keys, APP_KEY, etc.
+          }
+        },
+        (error, stdout, stderr) => {
+          let exitCode = 0;
+          if (error) {
+            if (error.killed) {
+              exitCode = -1;
+            } else {
+              exitCode = error.code || 1;
+            }
+          }
+          resolveResult({
+            exitCode,
+            stdout: (stdout || "").slice(0, 5e3),
+            stderr: (stderr || "").slice(0, 2e3)
+          });
+        }
+      );
+      if (signal) {
+        signal.addEventListener("abort", () => {
+          wasCanceled = true;
+          if (childProc && !childProc.killed) {
+            this.logger.info(`[skill-hub] Killing child process for exec ${execId} (user abort)`);
+            childProc.kill("SIGTERM");
+            setTimeout(() => {
+              if (childProc && !childProc.killed) {
+                childProc.kill("SIGKILL");
+              }
+            }, 3e3);
+          }
+        });
+      }
+    });
+    const durationMs = Date.now() - startTime;
+    onProgress == null ? void 0 : onProgress({ percent: 80, log: wasCanceled ? "Canceled" : "Execution completed, collecting files..." });
+    const files = this.fileManager.listOutputFiles(execId);
+    const totalSizeBytes = this.fileManager.getTotalOutputSize(execId);
+    const maxBytes = maxOutputSizeMb * 1024 * 1024;
+    if (totalSizeBytes > maxBytes) {
+      this.logger.warn(
+        `[skill-hub] Execution ${execId}: output size ${totalSizeBytes} bytes exceeds limit ${maxBytes}`
+      );
+    }
+    onProgress == null ? void 0 : onProgress({ percent: 100, log: "Done" });
+    const timedOut = !wasCanceled && processResult.exitCode === -1;
+    if (timedOut) {
+      processResult.stderr = `Execution timed out after ${timeoutSeconds}s
+${processResult.stderr}`;
+    }
+    if (wasCanceled) {
+      processResult.stderr = `Execution canceled by user
+${processResult.stderr}`;
+    }
+    return {
+      success: !wasCanceled && !timedOut && processResult.exitCode === 0,
+      stdout: processResult.stdout,
+      stderr: processResult.stderr,
+      files,
+      durationMs,
+      canceled: wasCanceled,
+      timedOut
+    };
+  }
+}
+// Annotate the CommonJS export names for ESM import in node:
+0 && (module.exports = {
+  SandboxRunner
+});

package/dist/server/services/SkillManager.d.ts

@@ -0,0 +1,6 @@
+import { Database } from '@nocobase/database';
+export declare class SkillManager {
+    private db;
+    constructor(db: Database);
+    seedDefaults(): Promise<void>;
+}