promptkaizen-agent 0.2.0 → 0.3.0

package/dist/env-detect.js

@@ -0,0 +1,151 @@
+"use strict";
+var __importDefault = (this && this.__importDefault) || function (mod) {
+    return (mod && mod.__esModule) ? mod : { "default": mod };
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.detectWSL = detectWSL;
+exports.detectEnvironment = detectEnvironment;
+exports.formatDetectionSummary = formatDetectionSummary;
+const promises_1 = __importDefault(require("fs/promises"));
+const fs_1 = __importDefault(require("fs"));
+const os_1 = __importDefault(require("os"));
+const path_1 = __importDefault(require("path"));
+const TOOL_META = {
+    claude_code: { label: 'Claude Code', rel: ['.claude', 'projects'] },
+    codex: { label: 'Codex', rel: ['.codex', 'sessions'] },
+};
+/** WSL 上で動いているか (/proc/version に microsoft/WSL を含むか)。 */
+function detectWSL(platform = process.platform) {
+    if (platform !== 'linux')
+        return false;
+    try {
+        return /microsoft|wsl/i.test(fs_1.default.readFileSync('/proc/version', 'utf8'));
+    }
+    catch {
+        return false;
+    }
+}
+/** /mnt/c/Users 配下の実ユーザーディレクトリ (WSL から Windows 側履歴を拾う)。 */
+function listWindowsUserDirs() {
+    const root = '/mnt/c/Users';
+    const skip = new Set(['Public', 'Default', 'Default User', 'All Users', 'desktop.ini']);
+    try {
+        return fs_1.default
+            .readdirSync(root, { withFileTypes: true })
+            .filter((e) => e.isDirectory() && !skip.has(e.name))
+            .map((e) => path_1.default.join(root, e.name));
+    }
+    catch {
+        return [];
+    }
+}
+/** base を ~ 圧縮した watch glob を返す。home 配下なら `~/...`、それ以外は絶対パス。 */
+function toWatchGlob(base, home) {
+    const norm = base.replace(/\\/g, '/');
+    const h = home.replace(/\\/g, '/').replace(/\/+$/, '');
+    const rel = norm === h ? '' : norm.startsWith(h + '/') ? norm.slice(h.length + 1) : null;
+    const head = rel === null ? norm : rel === '' ? '~' : `~/${rel}`;
+    return `${head}/**/*.jsonl`;
+}
+/** base ディレクトリの project 数 (直下のディレクトリ) と *.jsonl セッション数を数える。 */
+async function countDir(base, maxDepth) {
+    let exists = false;
+    let projects = 0;
+    let sessions = 0;
+    let top;
+    try {
+        top = await promises_1.default.readdir(base, { withFileTypes: true });
+        exists = true;
+    }
+    catch {
+        return { exists: false, projects: 0, sessions: 0 };
+    }
+    // 直下のディレクトリ数 = projects (Claude の project 単位)。
+    projects = top.filter((e) => e.isDirectory() && !e.isSymbolicLink()).length;
+    // *.jsonl を再帰カウント (symlink は辿らない / 深さ上限)。
+    const walk = async (dir, entries, depth) => {
+        for (const e of entries) {
+            if (e.isSymbolicLink())
+                continue;
+            const full = path_1.default.join(dir, e.name);
+            if (e.isFile()) {
+                if (e.name.toLowerCase().endsWith('.jsonl'))
+                    sessions++;
+            }
+            else if (e.isDirectory() && depth < maxDepth) {
+                let sub;
+                try {
+                    sub = await promises_1.default.readdir(full, { withFileTypes: true });
+                }
+                catch {
+                    continue;
+                }
+                await walk(full, sub, depth + 1);
+            }
+        }
+    };
+    await walk(base, top, 0);
+    return { exists, projects, sessions };
+}
+/**
+ * 環境を検出する。各ツールについて候補ベース (ホーム + WSL の Windows ユーザー) を評価し、
+ * 「存在する候補のうちセッション数が最大のもの」を採用する。
+ */
+async function detectEnvironment(opts = {}) {
+    const home = opts.homeDir ?? os_1.default.homedir();
+    const platform = opts.platform ?? process.platform;
+    const isWSL = opts.isWSL ?? detectWSL(platform);
+    const maxDepth = opts.maxDepth ?? 24;
+    const windowsUserDirs = opts.windowsUserDirs ?? (isWSL ? listWindowsUserDirs() : []);
+    const tools = [];
+    for (const tool of Object.keys(TOOL_META)) {
+        const { label, rel } = TOOL_META[tool];
+        const candidates = [path_1.default.join(home, ...rel), ...windowsUserDirs.map((d) => path_1.default.join(d, ...rel))];
+        let chosen = null;
+        for (const base of candidates) {
+            const counts = await countDir(base, maxDepth);
+            if (!counts.exists)
+                continue;
+            // 存在する候補のうちセッション数が最大のものを採用 (同数なら先勝ち = ホーム優先)。
+            if (!chosen || counts.sessions > chosen.counts.sessions)
+                chosen = { base, counts };
+        }
+        tools.push({
+            tool,
+            label,
+            basePath: chosen?.base ?? null,
+            present: chosen !== null,
+            projects: tool === 'codex' ? 0 : (chosen?.counts.projects ?? 0),
+            sessions: chosen?.counts.sessions ?? 0,
+            watchGlob: chosen ? toWatchGlob(chosen.base, home) : null,
+        });
+    }
+    const detected = tools.filter((t) => t.present);
+    return {
+        platform,
+        isWSL,
+        home,
+        tools,
+        detected,
+        anyDetected: detected.length > 0,
+        watchPaths: detected.map((t) => t.watchGlob).filter(Boolean),
+    };
+}
+/** 検出結果を人間向けの要約行に整形する (例: `Claude Code : 12 projects / 348 sessions`)。 */
+function formatDetectionSummary(env) {
+    const lines = [];
+    for (const t of env.tools) {
+        if (!t.present) {
+            lines.push(`  ${t.label.padEnd(12)}: 未検出`);
+            continue;
+        }
+        const count = t.tool === 'codex'
+            ? `${t.sessions.toLocaleString()} sessions`
+            : `${t.projects.toLocaleString()} projects / ${t.sessions.toLocaleString()} sessions`;
+        lines.push(`  ${t.label.padEnd(12)}: ${count}   (${t.basePath})`);
+    }
+    if (env.isWSL)
+        lines.push('  (WSL を検出: Linux ホーム + /mnt/c/Users を探索)');
+    return lines;
+}
+//# sourceMappingURL=env-detect.js.map

package/dist/env-detect.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"env-detect.js","sourceRoot":"","sources":["../src/env-detect.ts"],"names":[],"mappings":";;;;;AAgEA,8BAOC;AAyED,8CAyCC;AAGD,wDAeC;AA3MD,2DAA4B;AAC5B,4CAAuB;AACvB,4CAAmB;AACnB,gDAAuB;AAuDvB,MAAM,SAAS,GAA2D;IACxE,WAAW,EAAE,EAAE,KAAK,EAAE,aAAa,EAAE,GAAG,EAAE,CAAC,SAAS,EAAE,UAAU,CAAC,EAAE;IACnE,KAAK,EAAE,EAAE,KAAK,EAAE,OAAO,EAAE,GAAG,EAAE,CAAC,QAAQ,EAAE,UAAU,CAAC,EAAE;CACvD,CAAA;AAED,yDAAyD;AACzD,SAAgB,SAAS,CAAC,WAA4B,OAAO,CAAC,QAAQ;IACpE,IAAI,QAAQ,KAAK,OAAO;QAAE,OAAO,KAAK,CAAA;IACtC,IAAI,CAAC;QACH,OAAO,gBAAgB,CAAC,IAAI,CAAC,YAAM,CAAC,YAAY,CAAC,eAAe,EAAE,MAAM,CAAC,CAAC,CAAA;IAC5E,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,KAAK,CAAA;IACd,CAAC;AACH,CAAC;AAED,2DAA2D;AAC3D,SAAS,mBAAmB;IAC1B,MAAM,IAAI,GAAG,cAAc,CAAA;IAC3B,MAAM,IAAI,GAAG,IAAI,GAAG,CAAC,CAAC,QAAQ,EAAE,SAAS,EAAE,cAAc,EAAE,WAAW,EAAE,aAAa,CAAC,CAAC,CAAA;IACvF,IAAI,CAAC;QACH,OAAO,YAAM;aACV,WAAW,CAAC,IAAI,EAAE,EAAE,aAAa,EAAE,IAAI,EAAE,CAAC;aAC1C,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,WAAW,EAAE,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;aACnD,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,cAAI,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,CAAA;IACxC,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,EAAE,CAAA;IACX,CAAC;AACH,CAAC;AAED,gEAAgE;AAChE,SAAS,WAAW,CAAC,IAAY,EAAE,IAAY;IAC7C,MAAM,IAAI,GAAG,IAAI,CAAC,OAAO,CAAC,KAAK,EAAE,GAAG,CAAC,CAAA;IACrC,MAAM,CAAC,GAAG,IAAI,CAAC,OAAO,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,CAAA;IACtD,MAAM,GAAG,GAAG,IAAI,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC,GAAG,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAA;IACxF,MAAM,IAAI,GAAG,GAAG,KAAK,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,GAAG,KAAK,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,KAAK,GAAG,EAAE,CAAA;IAChE,OAAO,GAAG,IAAI,aAAa,CAAA;AAC7B,CAAC;AAQD,+DAA+D;AAC/D,KAAK,UAAU,QAAQ,CAAC,IAAY,EAAE,QAAgB;IACpD,IAAI,MAAM,GAAG,KAAK,CAAA;IAClB,IAAI,QAAQ,GAAG,CAAC,CAAA;IAChB,IAAI,QAAQ,GAAG,CAAC,CAAA;IAEhB,IAAI,GAAoB,CAAA;IACxB,IAAI,CAAC;QACH,GAAG,GAAG,MAAM,kBAAE,CAAC,OAAO,CAAC,IAAI,EAAE,EAAE,aAAa,EAAE,IAAI,EAAE,CAAC,CAAA;QACrD,MAAM,GAAG,IAAI,CAAA;IACf,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,EAAE,MAAM,EAAE,KAAK,EAAE,QAAQ,EAAE,CAAC,EAAE,QAAQ,EAAE,CAAC,EAAE,CAAA;IACpD,CAAC;IACD,+CAA+C;IAC/C,QAAQ,GAAG,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,WAAW,EAAE,IAAI,CAAC,CAAC,CAAC,cAAc,EAAE,CAAC,CAAC,MAAM,CAAA;IAE3E,0CAA0C;IAC1C,MAAM,IAAI,GAAG,KAAK,EAAE,GAAW,EAAE,OAAwB,EAAE,KAAa,EAAiB,EAAE;QACzF,KAAK,MAAM,CAAC,IAAI,OAAO,EAAE,CAAC;YACxB,IAAI,CAAC,CAAC,cAAc,EAAE;gBAAE,SAAQ;YAChC,MAAM,IAAI,GAAG,cAAI,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC,IAAI,CAAC,CAAA;YACnC,IAAI,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC;gBACf,IAAI,CAAC,CAAC,IAAI,CAAC,WAAW,EAAE,CAAC,QAAQ,CAAC,QAAQ,CAAC;oBAAE,QAAQ,EAAE,CAAA;YACzD,CAAC;iBAAM,IAAI,CAAC,CAAC,WAAW,EAAE,IAAI,KAAK,GAAG,QAAQ,EAAE,CAAC;gBAC/C,IAAI,GAAoB,CAAA;gBACxB,IAAI,CAAC;oBACH,GAAG,GAAG,MAAM,kBAAE,CAAC,OAAO,CAAC,IAAI,EAAE,EAAE,aAAa,EAAE,IAAI,EAAE,CAAC,CAAA;gBACvD,CAAC;gBAAC,MAAM,CAAC;oBACP,SAAQ;gBACV,CAAC;gBACD,MAAM,IAAI,CAAC,IAAI,EAAE,GAAG,EAAE,KAAK,GAAG,CAAC,CAAC,CAAA;YAClC,CAAC;QACH,CAAC;IACH,CAAC,CAAA;IACD,MAAM,IAAI,CAAC,IAAI,EAAE,GAAG,EAAE,CAAC,CAAC,CAAA;IACxB,OAAO,EAAE,MAAM,EAAE,QAAQ,EAAE,QAAQ,EAAE,CAAA;AACvC,CAAC;AAED;;;GAGG;AACI,KAAK,UAAU,iBAAiB,CAAC,OAAsB,EAAE;IAC9D,MAAM,IAAI,GAAG,IAAI,CAAC,OAAO,IAAI,YAAE,CAAC,OAAO,EAAE,CAAA;IACzC,MAAM,QAAQ,GAAG,IAAI,CAAC,QAAQ,IAAI,OAAO,CAAC,QAAQ,CAAA;IAClD,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,IAAI,SAAS,CAAC,QAAQ,CAAC,CAAA;IAC/C,MAAM,QAAQ,GAAG,IAAI,CAAC,QAAQ,IAAI,EAAE,CAAA;IACpC,MAAM,eAAe,GAAG,IAAI,CAAC,eAAe,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,mBAAmB,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,CAAA;IAEpF,MAAM,KAAK,GAAoB,EAAE,CAAA;IACjC,KAAK,MAAM,IAAI,IAAI,MAAM,CAAC,IAAI,CAAC,SAAS,CAAmB,EAAE,CAAC;QAC5D,MAAM,EAAE,KAAK,EAAE,GAAG,EAAE,GAAG,SAAS,CAAC,IAAI,CAAC,CAAA;QACtC,MAAM,UAAU,GAAG,CAAC,cAAI,CAAC,IAAI,CAAC,IAAI,EAAE,GAAG,GAAG,CAAC,EAAE,GAAG,eAAe,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,cAAI,CAAC,IAAI,CAAC,CAAC,EAAE,GAAG,GAAG,CAAC,CAAC,CAAC,CAAA;QAEjG,IAAI,MAAM,GAA+C,IAAI,CAAA;QAC7D,KAAK,MAAM,IAAI,IAAI,UAAU,EAAE,CAAC;YAC9B,MAAM,MAAM,GAAG,MAAM,QAAQ,CAAC,IAAI,EAAE,QAAQ,CAAC,CAAA;YAC7C,IAAI,CAAC,MAAM,CAAC,MAAM;gBAAE,SAAQ;YAC5B,8CAA8C;YAC9C,IAAI,CAAC,MAAM,IAAI,MAAM,CAAC,QAAQ,GAAG,MAAM,CAAC,MAAM,CAAC,QAAQ;gBAAE,MAAM,GAAG,EAAE,IAAI,EAAE,MAAM,EAAE,CAAA;QACpF,CAAC;QAED,KAAK,CAAC,IAAI,CAAC;YACT,IAAI;YACJ,KAAK;YACL,QAAQ,EAAE,MAAM,EAAE,IAAI,IAAI,IAAI;YAC9B,OAAO,EAAE,MAAM,KAAK,IAAI;YACxB,QAAQ,EAAE,IAAI,KAAK,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,MAAM,EAAE,MAAM,CAAC,QAAQ,IAAI,CAAC,CAAC;YAC/D,QAAQ,EAAE,MAAM,EAAE,MAAM,CAAC,QAAQ,IAAI,CAAC;YACtC,SAAS,EAAE,MAAM,CAAC,CAAC,CAAC,WAAW,CAAC,MAAM,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI;SAC1D,CAAC,CAAA;IACJ,CAAC;IAED,MAAM,QAAQ,GAAG,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,CAAA;IAC/C,OAAO;QACL,QAAQ;QACR,KAAK;QACL,IAAI;QACJ,KAAK;QACL,QAAQ;QACR,WAAW,EAAE,QAAQ,CAAC,MAAM,GAAG,CAAC;QAChC,UAAU,EAAE,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,SAAU,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC;KAC9D,CAAA;AACH,CAAC;AAED,0EAA0E;AAC1E,SAAgB,sBAAsB,CAAC,GAAyB;IAC9D,MAAM,KAAK,GAAa,EAAE,CAAA;IAC1B,KAAK,MAAM,CAAC,IAAI,GAAG,CAAC,KAAK,EAAE,CAAC;QAC1B,IAAI,CAAC,CAAC,CAAC,OAAO,EAAE,CAAC;YACf,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,KAAK,CAAC,MAAM,CAAC,EAAE,CAAC,OAAO,CAAC,CAAA;YAC1C,SAAQ;QACV,CAAC;QACD,MAAM,KAAK,GACT,CAAC,CAAC,IAAI,KAAK,OAAO;YAChB,CAAC,CAAC,GAAG,CAAC,CAAC,QAAQ,CAAC,cAAc,EAAE,WAAW;YAC3C,CAAC,CAAC,GAAG,CAAC,CAAC,QAAQ,CAAC,cAAc,EAAE,eAAe,CAAC,CAAC,QAAQ,CAAC,cAAc,EAAE,WAAW,CAAA;QACzF,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,KAAK,CAAC,MAAM,CAAC,EAAE,CAAC,KAAK,KAAK,OAAO,CAAC,CAAC,QAAQ,GAAG,CAAC,CAAA;IACnE,CAAC;IACD,IAAI,GAAG,CAAC,KAAK;QAAE,KAAK,CAAC,IAAI,CAAC,2CAA2C,CAAC,CAAA;IACtE,OAAO,KAAK,CAAA;AACd,CAAC"}

package/dist/exec/executor.d.ts

@@ -0,0 +1,42 @@
+export declare const SUPPORTED_LANGUAGES: readonly ["bash", "node", "python"];
+export type ExecLanguage = (typeof SUPPORTED_LANGUAGES)[number];
+export declare function isExecLanguage(v: unknown): v is ExecLanguage;
+/**
+ * 子プロセスへ伝播する環境変数のホワイトリスト。
+ * 秘匿値 (ANTHROPIC_API_KEY / AWS_* / *_TOKEN 等) はリストに無い時点で遮断される
+ * (ブラックリストではなくホワイトリスト = 新種のキーも漏れない)。
+ * HOME は実ホームを隠すため一時ディレクトリに差し替える。
+ */
+export declare const ENV_WHITELIST: readonly ["PATH", "LANG", "LC_ALL", "LC_CTYPE", "TZ", "TERM", "TMPDIR"];
+export interface ExecRequest {
+    language: ExecLanguage;
+    code: string;
+    /** 実行の作業ディレクトリ (プロジェクトルート)。 */
+    projectRoot: string;
+    /** タイムアウト ms (既定 30_000)。 */
+    timeoutMs?: number;
+    /** stdout / stderr の取り込み上限 (メモリ保護のハードキャップ)。 */
+    maxCaptureBytes?: number;
+}
+export interface ExecResult {
+    /** 取り込んだ stdout (maxCaptureBytes でハードキャップ済み・マスク前)。 */
+    stdout: string;
+    /** stderr の先頭 (診断用に小さく保持)。 */
+    stderrHead: string;
+    exitCode: number | null;
+    /** タイムアウトで SIGKILL したか。 */
+    timedOut: boolean;
+    /** stdout が maxCaptureBytes を超えて切り捨てられたか。 */
+    captureTruncated: boolean;
+    durationMs: number;
+}
+/** ホワイトリストで子プロセス環境を構築。HOME は一時ディレクトリに差し替え。 */
+export declare function buildSandboxEnv(parentEnv: NodeJS.ProcessEnv, sandboxHome: string): NodeJS.ProcessEnv;
+/**
+ * code を一時ファイル経由で実行する。例外は投げず ExecResult に正規化する
+ * (インタープリタ不在等は exitCode null + stderrHead にメッセージ)。
+ */
+export declare function executeCode(req: ExecRequest): Promise<ExecResult>;
+/** 実行ログ・参照IDに使う一意 ID。 */
+export declare function generateExecId(): string;
+//# sourceMappingURL=executor.d.ts.map

package/dist/exec/executor.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"executor.d.ts","sourceRoot":"","sources":["../../src/exec/executor.ts"],"names":[],"mappings":"AAkBA,eAAO,MAAM,mBAAmB,qCAAsC,CAAA;AACtE,MAAM,MAAM,YAAY,GAAG,CAAC,OAAO,mBAAmB,CAAC,CAAC,MAAM,CAAC,CAAA;AAE/D,wBAAgB,cAAc,CAAC,CAAC,EAAE,OAAO,GAAG,CAAC,IAAI,YAAY,CAE5D;AAED;;;;;GAKG;AACH,eAAO,MAAM,aAAa,yEAA0E,CAAA;AAEpG,MAAM,WAAW,WAAW;IAC1B,QAAQ,EAAE,YAAY,CAAA;IACtB,IAAI,EAAE,MAAM,CAAA;IACZ,+BAA+B;IAC/B,WAAW,EAAE,MAAM,CAAA;IACnB,6BAA6B;IAC7B,SAAS,CAAC,EAAE,MAAM,CAAA;IAClB,+CAA+C;IAC/C,eAAe,CAAC,EAAE,MAAM,CAAA;CACzB;AAED,MAAM,WAAW,UAAU;IACzB,sDAAsD;IACtD,MAAM,EAAE,MAAM,CAAA;IACd,8BAA8B;IAC9B,UAAU,EAAE,MAAM,CAAA;IAClB,QAAQ,EAAE,MAAM,GAAG,IAAI,CAAA;IACvB,2BAA2B;IAC3B,QAAQ,EAAE,OAAO,CAAA;IACjB,6CAA6C;IAC7C,gBAAgB,EAAE,OAAO,CAAA;IACzB,UAAU,EAAE,MAAM,CAAA;CACnB;AAcD,8CAA8C;AAC9C,wBAAgB,eAAe,CAAC,SAAS,EAAE,MAAM,CAAC,UAAU,EAAE,WAAW,EAAE,MAAM,GAAG,MAAM,CAAC,UAAU,CAOpG;AAED;;;GAGG;AACH,wBAAsB,WAAW,CAAC,GAAG,EAAE,WAAW,GAAG,OAAO,CAAC,UAAU,CAAC,CAwEvE;AAED,yBAAyB;AACzB,wBAAgB,cAAc,IAAI,MAAM,CAEvC"}

package/dist/exec/executor.js

@@ -0,0 +1,135 @@
+"use strict";
+var __importDefault = (this && this.__importDefault) || function (mod) {
+    return (mod && mod.__esModule) ? mod : { "default": mod };
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.ENV_WHITELIST = exports.SUPPORTED_LANGUAGES = void 0;
+exports.isExecLanguage = isExecLanguage;
+exports.buildSandboxEnv = buildSandboxEnv;
+exports.executeCode = executeCode;
+exports.generateExecId = generateExecId;
+const child_process_1 = require("child_process");
+const crypto_1 = require("crypto");
+const fs_1 = __importDefault(require("fs"));
+const os_1 = __importDefault(require("os"));
+const path_1 = __importDefault(require("path"));
+// =============================================
+// pk_execute 実行エンジン (Issue #94 / Epic #91 R2)
+// =============================================
+//
+// 生データをコンテキストに入れず、エージェントが書いたコードをローカルで実行して
+// 結果 (stdout) だけを返す。安全制約:
+//   - タイムアウト (既定 30s、SIGKILL)
+//   - 作業ディレクトリ = プロジェクトルート (cwd 固定)
+//   - 環境変数はホワイトリストのみ伝播 (API キー類を子プロセスへ渡さない)
+//   - stdout は上限でトリム (超過分は呼び出し側が R1 退避へ回す)
+// ポリシー判定 (policy.ts) は呼び出し側 (mcp/server.ts) が実行前に行う。
+exports.SUPPORTED_LANGUAGES = ['bash', 'node', 'python'];
+function isExecLanguage(v) {
+    return typeof v === 'string' && exports.SUPPORTED_LANGUAGES.includes(v);
+}
+/**
+ * 子プロセスへ伝播する環境変数のホワイトリスト。
+ * 秘匿値 (ANTHROPIC_API_KEY / AWS_* / *_TOKEN 等) はリストに無い時点で遮断される
+ * (ブラックリストではなくホワイトリスト = 新種のキーも漏れない)。
+ * HOME は実ホームを隠すため一時ディレクトリに差し替える。
+ */
+exports.ENV_WHITELIST = ['PATH', 'LANG', 'LC_ALL', 'LC_CTYPE', 'TZ', 'TERM', 'TMPDIR'];
+const DEFAULT_TIMEOUT_MS = 30_000;
+const DEFAULT_MAX_CAPTURE_BYTES = 5 * 1024 * 1024; // 5MB (メモリ保護)
+const STDERR_HEAD_BYTES = 4 * 1024;
+const INTERPRETER = {
+    bash: { cmd: 'bash', args: (f) => [f] },
+    node: { cmd: 'node', args: (f) => [f] },
+    python: { cmd: 'python3', args: (f) => [f] },
+};
+const FILE_EXT = { bash: '.sh', node: '.cjs', python: '.py' };
+/** ホワイトリストで子プロセス環境を構築。HOME は一時ディレクトリに差し替え。 */
+function buildSandboxEnv(parentEnv, sandboxHome) {
+    const env = {};
+    for (const key of exports.ENV_WHITELIST) {
+        if (parentEnv[key] !== undefined)
+            env[key] = parentEnv[key];
+    }
+    env.HOME = sandboxHome;
+    return env;
+}
+/**
+ * code を一時ファイル経由で実行する。例外は投げず ExecResult に正規化する
+ * (インタープリタ不在等は exitCode null + stderrHead にメッセージ)。
+ */
+async function executeCode(req) {
+    const timeoutMs = req.timeoutMs ?? DEFAULT_TIMEOUT_MS;
+    const maxCapture = req.maxCaptureBytes ?? DEFAULT_MAX_CAPTURE_BYTES;
+    const started = Date.now();
+    // 一時ファイル + サンドボックス HOME (実行ごとに隔離、終了後に削除)
+    const workDir = fs_1.default.mkdtempSync(path_1.default.join(os_1.default.tmpdir(), 'pk-exec-'));
+    const codeFile = path_1.default.join(workDir, `code${FILE_EXT[req.language]}`);
+    const sandboxHome = path_1.default.join(workDir, 'home');
+    fs_1.default.mkdirSync(sandboxHome);
+    fs_1.default.writeFileSync(codeFile, req.code, { mode: 0o600 });
+    const { cmd, args } = INTERPRETER[req.language];
+    try {
+        return await new Promise((resolve) => {
+            const child = (0, child_process_1.spawn)(cmd, args(codeFile), {
+                cwd: req.projectRoot,
+                env: buildSandboxEnv(process.env, sandboxHome),
+                timeout: timeoutMs,
+                killSignal: 'SIGKILL',
+                stdio: ['ignore', 'pipe', 'pipe'],
+            });
+            const out = [];
+            let outBytes = 0;
+            let captureTruncated = false;
+            const err = [];
+            let errBytes = 0;
+            child.stdout.on('data', (chunk) => {
+                if (outBytes >= maxCapture) {
+                    captureTruncated = true;
+                    return;
+                }
+                const room = maxCapture - outBytes;
+                const take = chunk.length > room ? chunk.subarray(0, room) : chunk;
+                if (take.length < chunk.length)
+                    captureTruncated = true;
+                out.push(take);
+                outBytes += take.length;
+            });
+            child.stderr.on('data', (chunk) => {
+                if (errBytes >= STDERR_HEAD_BYTES)
+                    return;
+                const take = chunk.subarray(0, STDERR_HEAD_BYTES - errBytes);
+                err.push(take);
+                errBytes += take.length;
+            });
+            child.on('error', (e) => {
+                resolve({
+                    stdout: '',
+                    stderrHead: `実行に失敗しました: ${e.message}`,
+                    exitCode: null,
+                    timedOut: false,
+                    captureTruncated: false,
+                    durationMs: Date.now() - started,
+                });
+            });
+            child.on('close', (code, signal) => {
+                resolve({
+                    stdout: Buffer.concat(out).toString('utf8'),
+                    stderrHead: Buffer.concat(err).toString('utf8'),
+                    exitCode: code,
+                    timedOut: signal === 'SIGKILL' && Date.now() - started >= timeoutMs - 50,
+                    captureTruncated,
+                    durationMs: Date.now() - started,
+                });
+            });
+        });
+    }
+    finally {
+        fs_1.default.rmSync(workDir, { recursive: true, force: true });
+    }
+}
+/** 実行ログ・参照IDに使う一意 ID。 */
+function generateExecId() {
+    return `pk-exec-${(0, crypto_1.randomBytes)(6).toString('hex')}`;
+}
+//# sourceMappingURL=executor.js.map

package/dist/exec/executor.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"executor.js","sourceRoot":"","sources":["../../src/exec/executor.ts"],"names":[],"mappings":";;;;;;AAqBA,wCAEC;AA+CD,0CAOC;AAMD,kCAwEC;AAGD,wCAEC;AAhKD,iDAAqC;AACrC,mCAAoC;AACpC,4CAAmB;AACnB,4CAAmB;AACnB,gDAAuB;AAEvB,gDAAgD;AAChD,8CAA8C;AAC9C,gDAAgD;AAChD,EAAE;AACF,0CAA0C;AAC1C,0BAA0B;AAC1B,8BAA8B;AAC9B,oCAAoC;AACpC,4CAA4C;AAC5C,2CAA2C;AAC3C,qDAAqD;AAExC,QAAA,mBAAmB,GAAG,CAAC,MAAM,EAAE,MAAM,EAAE,QAAQ,CAAU,CAAA;AAGtE,SAAgB,cAAc,CAAC,CAAU;IACvC,OAAO,OAAO,CAAC,KAAK,QAAQ,IAAK,2BAAyC,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAA;AACxF,CAAC;AAED;;;;;GAKG;AACU,QAAA,aAAa,GAAG,CAAC,MAAM,EAAE,MAAM,EAAE,QAAQ,EAAE,UAAU,EAAE,IAAI,EAAE,MAAM,EAAE,QAAQ,CAAU,CAAA;AA0BpG,MAAM,kBAAkB,GAAG,MAAM,CAAA;AACjC,MAAM,yBAAyB,GAAG,CAAC,GAAG,IAAI,GAAG,IAAI,CAAA,CAAC,cAAc;AAChE,MAAM,iBAAiB,GAAG,CAAC,GAAG,IAAI,CAAA;AAElC,MAAM,WAAW,GAA4E;IAC3F,IAAI,EAAE,EAAE,GAAG,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,EAAE;IACvC,IAAI,EAAE,EAAE,GAAG,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,EAAE;IACvC,MAAM,EAAE,EAAE,GAAG,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,EAAE;CAC7C,CAAA;AAED,MAAM,QAAQ,GAAiC,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,KAAK,EAAE,CAAA;AAE3F,8CAA8C;AAC9C,SAAgB,eAAe,CAAC,SAA4B,EAAE,WAAmB;IAC/E,MAAM,GAAG,GAAsB,EAAE,CAAA;IACjC,KAAK,MAAM,GAAG,IAAI,qBAAa,EAAE,CAAC;QAChC,IAAI,SAAS,CAAC,GAAG,CAAC,KAAK,SAAS;YAAE,GAAG,CAAC,GAAG,CAAC,GAAG,SAAS,CAAC,GAAG,CAAC,CAAA;IAC7D,CAAC;IACD,GAAG,CAAC,IAAI,GAAG,WAAW,CAAA;IACtB,OAAO,GAAG,CAAA;AACZ,CAAC;AAED;;;GAGG;AACI,KAAK,UAAU,WAAW,CAAC,GAAgB;IAChD,MAAM,SAAS,GAAG,GAAG,CAAC,SAAS,IAAI,kBAAkB,CAAA;IACrD,MAAM,UAAU,GAAG,GAAG,CAAC,eAAe,IAAI,yBAAyB,CAAA;IACnE,MAAM,OAAO,GAAG,IAAI,CAAC,GAAG,EAAE,CAAA;IAE1B,yCAAyC;IACzC,MAAM,OAAO,GAAG,YAAE,CAAC,WAAW,CAAC,cAAI,CAAC,IAAI,CAAC,YAAE,CAAC,MAAM,EAAE,EAAE,UAAU,CAAC,CAAC,CAAA;IAClE,MAAM,QAAQ,GAAG,cAAI,CAAC,IAAI,CAAC,OAAO,EAAE,OAAO,QAAQ,CAAC,GAAG,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAA;IACpE,MAAM,WAAW,GAAG,cAAI,CAAC,IAAI,CAAC,OAAO,EAAE,MAAM,CAAC,CAAA;IAC9C,YAAE,CAAC,SAAS,CAAC,WAAW,CAAC,CAAA;IACzB,YAAE,CAAC,aAAa,CAAC,QAAQ,EAAE,GAAG,CAAC,IAAI,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAA;IAErD,MAAM,EAAE,GAAG,EAAE,IAAI,EAAE,GAAG,WAAW,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAA;IAE/C,IAAI,CAAC;QACH,OAAO,MAAM,IAAI,OAAO,CAAa,CAAC,OAAO,EAAE,EAAE;YAC/C,MAAM,KAAK,GAAG,IAAA,qBAAK,EAAC,GAAG,EAAE,IAAI,CAAC,QAAQ,CAAC,EAAE;gBACvC,GAAG,EAAE,GAAG,CAAC,WAAW;gBACpB,GAAG,EAAE,eAAe,CAAC,OAAO,CAAC,GAAG,EAAE,WAAW,CAAC;gBAC9C,OAAO,EAAE,SAAS;gBAClB,UAAU,EAAE,SAAS;gBACrB,KAAK,EAAE,CAAC,QAAQ,EAAE,MAAM,EAAE,MAAM,CAAC;aAClC,CAAC,CAAA;YAEF,MAAM,GAAG,GAAa,EAAE,CAAA;YACxB,IAAI,QAAQ,GAAG,CAAC,CAAA;YAChB,IAAI,gBAAgB,GAAG,KAAK,CAAA;YAC5B,MAAM,GAAG,GAAa,EAAE,CAAA;YACxB,IAAI,QAAQ,GAAG,CAAC,CAAA;YAEhB,KAAK,CAAC,MAAM,CAAC,EAAE,CAAC,MAAM,EAAE,CAAC,KAAa,EAAE,EAAE;gBACxC,IAAI,QAAQ,IAAI,UAAU,EAAE,CAAC;oBAC3B,gBAAgB,GAAG,IAAI,CAAA;oBACvB,OAAM;gBACR,CAAC;gBACD,MAAM,IAAI,GAAG,UAAU,GAAG,QAAQ,CAAA;gBAClC,MAAM,IAAI,GAAG,KAAK,CAAC,MAAM,GAAG,IAAI,CAAC,CAAC,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC,EAAE,IAAI,CAAC,CAAC,CAAC,CAAC,KAAK,CAAA;gBAClE,IAAI,IAAI,CAAC,MAAM,GAAG,KAAK,CAAC,MAAM;oBAAE,gBAAgB,GAAG,IAAI,CAAA;gBACvD,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;gBACd,QAAQ,IAAI,IAAI,CAAC,MAAM,CAAA;YACzB,CAAC,CAAC,CAAA;YACF,KAAK,CAAC,MAAM,CAAC,EAAE,CAAC,MAAM,EAAE,CAAC,KAAa,EAAE,EAAE;gBACxC,IAAI,QAAQ,IAAI,iBAAiB;oBAAE,OAAM;gBACzC,MAAM,IAAI,GAAG,KAAK,CAAC,QAAQ,CAAC,CAAC,EAAE,iBAAiB,GAAG,QAAQ,CAAC,CAAA;gBAC5D,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;gBACd,QAAQ,IAAI,IAAI,CAAC,MAAM,CAAA;YACzB,CAAC,CAAC,CAAA;YAEF,KAAK,CAAC,EAAE,CAAC,OAAO,EAAE,CAAC,CAAC,EAAE,EAAE;gBACtB,OAAO,CAAC;oBACN,MAAM,EAAE,EAAE;oBACV,UAAU,EAAE,cAAc,CAAC,CAAC,OAAO,EAAE;oBACrC,QAAQ,EAAE,IAAI;oBACd,QAAQ,EAAE,KAAK;oBACf,gBAAgB,EAAE,KAAK;oBACvB,UAAU,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,OAAO;iBACjC,CAAC,CAAA;YACJ,CAAC,CAAC,CAAA;YACF,KAAK,CAAC,EAAE,CAAC,OAAO,EAAE,CAAC,IAAI,EAAE,MAAM,EAAE,EAAE;gBACjC,OAAO,CAAC;oBACN,MAAM,EAAE,MAAM,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC;oBAC3C,UAAU,EAAE,MAAM,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC;oBAC/C,QAAQ,EAAE,IAAI;oBACd,QAAQ,EAAE,MAAM,KAAK,SAAS,IAAI,IAAI,CAAC,GAAG,EAAE,GAAG,OAAO,IAAI,SAAS,GAAG,EAAE;oBACxE,gBAAgB;oBAChB,UAAU,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,OAAO;iBACjC,CAAC,CAAA;YACJ,CAAC,CAAC,CAAA;QACJ,CAAC,CAAC,CAAA;IACJ,CAAC;YAAS,CAAC;QACT,YAAE,CAAC,MAAM,CAAC,OAAO,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAA;IACtD,CAAC;AACH,CAAC;AAED,yBAAyB;AACzB,SAAgB,cAAc;IAC5B,OAAO,WAAW,IAAA,oBAAW,EAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAA;AACpD,CAAC"}

package/dist/exec/pk-execute.d.ts

@@ -0,0 +1,30 @@
+import type { StoredToolOutputRef } from '../store/local-store';
+import type { ParsedEntry } from '../types';
+import { type ExecutionPolicy } from './policy';
+import { executeCode } from './executor';
+export interface PkExecuteDeps {
+    /** マスキング前置パイプライン (#68 の不変条件)。 */
+    maskText: (text: string) => string;
+    /** R1 退避ストアへの保存 (#93)。 */
+    storeRef: (ref: StoredToolOutputRef) => void;
+    /** 実行ログ entry の記録 + 送信 (best-effort、呼び出し側で実装)。 */
+    recordEntry: (entry: ParsedEntry) => Promise<void>;
+    /** 組織実行ポリシー (cloud 配信、オフライン時 null)。 */
+    getPolicy: () => ExecutionPolicy | null;
+    projectRoot: string;
+    timeoutMs: number;
+    maxReturnBytes: number;
+    /** テスト注入用。 */
+    now?: () => string;
+    execImpl?: typeof executeCode;
+}
+export interface PkExecuteResult {
+    content: Array<{
+        type: 'text';
+        text: string;
+    }>;
+    isError?: boolean;
+}
+/** pk_execute 本体。例外を投げず PkExecuteResult に正規化する。 */
+export declare function runPkExecute(deps: PkExecuteDeps, args: Record<string, unknown>): Promise<PkExecuteResult>;
+//# sourceMappingURL=pk-execute.d.ts.map

package/dist/exec/pk-execute.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"pk-execute.d.ts","sourceRoot":"","sources":["../../src/exec/pk-execute.ts"],"names":[],"mappings":"AAGA,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,sBAAsB,CAAA;AAE/D,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,UAAU,CAAA;AAC3C,OAAO,EAAwB,KAAK,eAAe,EAAE,MAAM,UAAU,CAAA;AACrE,OAAO,EAAE,WAAW,EAAmD,MAAM,YAAY,CAAA;AAYzF,MAAM,WAAW,aAAa;IAC5B,iCAAiC;IACjC,QAAQ,EAAE,CAAC,IAAI,EAAE,MAAM,KAAK,MAAM,CAAA;IAClC,0BAA0B;IAC1B,QAAQ,EAAE,CAAC,GAAG,EAAE,mBAAmB,KAAK,IAAI,CAAA;IAC5C,kDAAkD;IAClD,WAAW,EAAE,CAAC,KAAK,EAAE,WAAW,KAAK,OAAO,CAAC,IAAI,CAAC,CAAA;IAClD,uCAAuC;IACvC,SAAS,EAAE,MAAM,eAAe,GAAG,IAAI,CAAA;IACvC,WAAW,EAAE,MAAM,CAAA;IACnB,SAAS,EAAE,MAAM,CAAA;IACjB,cAAc,EAAE,MAAM,CAAA;IACtB,cAAc;IACd,GAAG,CAAC,EAAE,MAAM,MAAM,CAAA;IAClB,QAAQ,CAAC,EAAE,OAAO,WAAW,CAAA;CAC9B;AAED,MAAM,WAAW,eAAe;IAC9B,OAAO,EAAE,KAAK,CAAC;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,MAAM,CAAA;KAAE,CAAC,CAAA;IAC9C,OAAO,CAAC,EAAE,OAAO,CAAA;CAClB;AAmDD,mDAAmD;AACnD,wBAAsB,YAAY,CAChC,IAAI,EAAE,aAAa,EACnB,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAC5B,OAAO,CAAC,eAAe,CAAC,CAwI1B"}

package/dist/exec/pk-execute.js

@@ -0,0 +1,174 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.runPkExecute = runPkExecute;
+const crypto_1 = require("crypto");
+const reduction_1 = require("../hooks/reduction");
+const policy_1 = require("./policy");
+const executor_1 = require("./executor");
+function hashPreview(code) {
+    return (0, crypto_1.createHash)('sha256').update(code).digest('hex').slice(0, 16);
+}
+/** 実行ログ/拒否ログの観測 entry を組み立てる (本文はマスク済み・先頭のみ)。 */
+function buildExecEntry(p) {
+    const maskedCode = p.maskText(p.code).slice(0, 2000);
+    const entry = {
+        filepath: 'mcp://pk_execute',
+        lineNumber: 0,
+        parsedAt: p.now,
+        source: 'hook',
+        raw: {
+            type: 'pk_execute',
+            sessionId: null, // MCP 経由はセッション文脈を持たない
+            timestamp: p.now,
+            language: p.language,
+            outcome: p.outcome,
+            exitCode: p.exitCode ?? null,
+            durationMs: p.durationMs ?? null,
+            codeMasked: maskedCode,
+        },
+    };
+    if (p.outcome === 'blocked' && p.ruleId) {
+        const detection = {
+            category: 'custom',
+            ruleId: 'pk_execute_blocked',
+            severity: 'high',
+            count: 1,
+            // 拒否理由の識別補助。コードはマスク済み先頭のみ (cloud 上限 200 文字)。
+            maskedPreview: `[${p.ruleId}] ${maskedCode}`.slice(0, 200),
+            matchHash: hashPreview(p.code),
+        };
+        entry.detections = [detection];
+    }
+    if (p.reduction)
+        entry.reduction = p.reduction;
+    return entry;
+}
+/** pk_execute 本体。例外を投げず PkExecuteResult に正規化する。 */
+async function runPkExecute(deps, args) {
+    const now = deps.now ?? (() => new Date().toISOString());
+    const language = args.language;
+    const code = typeof args.code === 'string' ? args.code : '';
+    if (!(0, executor_1.isExecLanguage)(language)) {
+        return {
+            content: [{ type: 'text', text: 'language は bash / node / python のいずれかを指定してください' }],
+            isError: true,
+        };
+    }
+    if (!code.trim()) {
+        return { content: [{ type: 'text', text: 'code は必須です' }], isError: true };
+    }
+    const timeoutArg = typeof args.timeout === 'number' && Number.isFinite(args.timeout) ? args.timeout : null;
+    const timeoutMs = timeoutArg ? Math.min(Math.max(timeoutArg * 1000, 1000), 300_000) : deps.timeoutMs;
+    // 1. 実行前ポリシー判定 (#44 接続)。拒否は違反イベントとして記録される。
+    const verdict = (0, policy_1.checkExecutionPolicy)(code, deps.getPolicy(), deps.projectRoot);
+    if (!verdict.allowed) {
+        await deps
+            .recordEntry(buildExecEntry({
+            maskText: deps.maskText,
+            now: now(),
+            language,
+            code,
+            outcome: 'blocked',
+            ruleId: verdict.ruleId,
+        }))
+            .catch(() => { });
+        return {
+            content: [
+                {
+                    type: 'text',
+                    text: `PromptKaizen のポリシーにより実行をブロックしました: ${verdict.reason}\n` +
+                        'コードを修正するか、組織の管理者にポリシー設定を確認してください。',
+                },
+            ],
+            isError: true,
+        };
+    }
+    // 2. 実行 (サンドボックス制約は executor 側)。
+    const exec = deps.execImpl ?? executor_1.executeCode;
+    const result = await exec({
+        language,
+        code,
+        projectRoot: deps.projectRoot,
+        timeoutMs,
+    });
+    // 3. 返却 stdout のマスク → 上限トリム (超過分は R1 退避 + 削減イベント)。
+    const masked = deps.maskText(result.stdout);
+    let returned = masked;
+    let reduction;
+    let overflowNote = '';
+    if (Buffer.byteLength(masked, 'utf8') > deps.maxReturnBytes) {
+        returned = masked.slice(0, deps.maxReturnBytes);
+        const refId = (0, executor_1.generateExecId)();
+        try {
+            deps.storeRef({
+                refId,
+                sessionId: null,
+                toolName: 'pk_execute',
+                cwd: deps.projectRoot,
+                createdAt: now(),
+                originalBytes: Buffer.byteLength(masked, 'utf8'),
+                originalTokens: (0, reduction_1.estimateTokensFromText)(masked),
+                replacedTokens: (0, reduction_1.estimateTokensFromText)(returned),
+                savedTokens: (0, reduction_1.estimateTokensFromText)(masked) - (0, reduction_1.estimateTokensFromText)(returned),
+                body: masked,
+            });
+            reduction = {
+                kind: 'r2_execute',
+                refId,
+                originalTokens: (0, reduction_1.estimateTokensFromText)(masked),
+                replacedTokens: (0, reduction_1.estimateTokensFromText)(returned),
+                savedTokens: (0, reduction_1.estimateTokensFromText)(masked) - (0, reduction_1.estimateTokensFromText)(returned),
+            };
+            overflowNote =
+                `\n--- stdout が上限 (${deps.maxReturnBytes.toLocaleString()} bytes) を超えたため切り詰めました。` +
+                    `全文: pk_fetch(ref_id: "${refId}") / 絞り込み: pk_fetch(ref_id: "${refId}", query: "検索語") ---`;
+        }
+        catch {
+            // 退避失敗時は参照を案内しない (切り詰めのみ)。
+            overflowNote = `\n--- stdout が上限 (${deps.maxReturnBytes.toLocaleString()} bytes) を超えたため切り詰めました ---`;
+        }
+    }
+    // 4. 実行ログ (#68) + 削減イベント (#92) を記録 (best-effort)。
+    await deps
+        .recordEntry(buildExecEntry({
+        maskText: deps.maskText,
+        now: now(),
+        language,
+        code,
+        outcome: 'executed',
+        exitCode: result.exitCode,
+        durationMs: result.durationMs,
+        reduction,
+    }))
+        .catch(() => { });
+    // 5. 応答の組み立て。
+    if (result.timedOut) {
+        return {
+            content: [
+                {
+                    type: 'text',
+                    text: `タイムアウト (${Math.round(timeoutMs / 1000)}s) のため実行を中断しました。` + (returned ? `\n--- 中断までの stdout ---\n${returned}${overflowNote}` : ''),
+                },
+            ],
+            isError: true,
+        };
+    }
+    if (result.exitCode !== 0) {
+        const stderrMasked = deps.maskText(result.stderrHead);
+        return {
+            content: [
+                {
+                    type: 'text',
+                    text: `exit code ${result.exitCode ?? 'null'} (${result.durationMs}ms)\n` +
+                        (stderrMasked ? `--- stderr (先頭) ---\n${stderrMasked}\n` : '') +
+                        (returned ? `--- stdout ---\n${returned}${overflowNote}` : ''),
+                },
+            ],
+            isError: true,
+        };
+    }
+    return {
+        content: [{ type: 'text', text: (returned || '(stdout なし)') + overflowNote }],
+    };
+}
+//# sourceMappingURL=pk-execute.js.map

package/dist/exec/pk-execute.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"pk-execute.js","sourceRoot":"","sources":["../../src/exec/pk-execute.ts"],"names":[],"mappings":";;AA2FA,oCA2IC;AAtOD,mCAAmC;AACnC,kDAA2D;AAK3D,qCAAqE;AACrE,yCAAyF;AAkCzF,SAAS,WAAW,CAAC,IAAY;IAC/B,OAAO,IAAA,mBAAU,EAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAAA;AACrE,CAAC;AAED,iDAAiD;AACjD,SAAS,cAAc,CAAC,CAUvB;IACC,MAAM,UAAU,GAAG,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,IAAI,CAAC,CAAA;IACpD,MAAM,KAAK,GAAgB;QACzB,QAAQ,EAAE,kBAAkB;QAC5B,UAAU,EAAE,CAAC;QACb,QAAQ,EAAE,CAAC,CAAC,GAAG;QACf,MAAM,EAAE,MAAM;QACd,GAAG,EAAE;YACH,IAAI,EAAE,YAAY;YAClB,SAAS,EAAE,IAAI,EAAE,sBAAsB;YACvC,SAAS,EAAE,CAAC,CAAC,GAAG;YAChB,QAAQ,EAAE,CAAC,CAAC,QAAQ;YACpB,OAAO,EAAE,CAAC,CAAC,OAAO;YAClB,QAAQ,EAAE,CAAC,CAAC,QAAQ,IAAI,IAAI;YAC5B,UAAU,EAAE,CAAC,CAAC,UAAU,IAAI,IAAI;YAChC,UAAU,EAAE,UAAU;SACvB;KACF,CAAA;IACD,IAAI,CAAC,CAAC,OAAO,KAAK,SAAS,IAAI,CAAC,CAAC,MAAM,EAAE,CAAC;QACxC,MAAM,SAAS,GAAkB;YAC/B,QAAQ,EAAE,QAAQ;YAClB,MAAM,EAAE,oBAAoB;YAC5B,QAAQ,EAAE,MAAM;YAChB,KAAK,EAAE,CAAC;YACR,6CAA6C;YAC7C,aAAa,EAAE,IAAI,CAAC,CAAC,MAAM,KAAK,UAAU,EAAE,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC;YAC1D,SAAS,EAAE,WAAW,CAAC,CAAC,CAAC,IAAI,CAAC;SAC/B,CAAA;QACD,KAAK,CAAC,UAAU,GAAG,CAAC,SAAS,CAAC,CAAA;IAChC,CAAC;IACD,IAAI,CAAC,CAAC,SAAS;QAAE,KAAK,CAAC,SAAS,GAAG,CAAC,CAAC,SAAS,CAAA;IAC9C,OAAO,KAAK,CAAA;AACd,CAAC;AAED,mDAAmD;AAC5C,KAAK,UAAU,YAAY,CAChC,IAAmB,EACnB,IAA6B;IAE7B,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC,CAAA;IACxD,MAAM,QAAQ,GAAG,IAAI,CAAC,QAAQ,CAAA;IAC9B,MAAM,IAAI,GAAG,OAAO,IAAI,CAAC,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAA;IAC3D,IAAI,CAAC,IAAA,yBAAc,EAAC,QAAQ,CAAC,EAAE,CAAC;QAC9B,OAAO;YACL,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,gDAAgD,EAAE,CAAC;YACnF,OAAO,EAAE,IAAI;SACd,CAAA;IACH,CAAC;IACD,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,EAAE,CAAC;QACjB,OAAO,EAAE,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,YAAY,EAAE,CAAC,EAAE,OAAO,EAAE,IAAI,EAAE,CAAA;IAC3E,CAAC;IACD,MAAM,UAAU,GAAG,OAAO,IAAI,CAAC,OAAO,KAAK,QAAQ,IAAI,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,IAAI,CAAA;IAC1G,MAAM,SAAS,GAAG,UAAU,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,GAAG,CAAC,UAAU,GAAG,IAAI,EAAE,IAAI,CAAC,EAAE,OAAO,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,SAAS,CAAA;IAEpG,2CAA2C;IAC3C,MAAM,OAAO,GAAG,IAAA,6BAAoB,EAAC,IAAI,EAAE,IAAI,CAAC,SAAS,EAAE,EAAE,IAAI,CAAC,WAAW,CAAC,CAAA;IAC9E,IAAI,CAAC,OAAO,CAAC,OAAO,EAAE,CAAC;QACrB,MAAM,IAAI;aACP,WAAW,CACV,cAAc,CAAC;YACb,QAAQ,EAAE,IAAI,CAAC,QAAQ;YACvB,GAAG,EAAE,GAAG,EAAE;YACV,QAAQ;YACR,IAAI;YACJ,OAAO,EAAE,SAAS;YAClB,MAAM,EAAE,OAAO,CAAC,MAAM;SACvB,CAAC,CACH;aACA,KAAK,CAAC,GAAG,EAAE,GAAE,CAAC,CAAC,CAAA;QAClB,OAAO;YACL,OAAO,EAAE;gBACP;oBACE,IAAI,EAAE,MAAM;oBACZ,IAAI,EACF,qCAAqC,OAAO,CAAC,MAAM,IAAI;wBACvD,mCAAmC;iBACtC;aACF;YACD,OAAO,EAAE,IAAI;SACd,CAAA;IACH,CAAC;IAED,iCAAiC;IACjC,MAAM,IAAI,GAAG,IAAI,CAAC,QAAQ,IAAI,sBAAW,CAAA;IACzC,MAAM,MAAM,GAAe,MAAM,IAAI,CAAC;QACpC,QAAQ;QACR,IAAI;QACJ,WAAW,EAAE,IAAI,CAAC,WAAW;QAC7B,SAAS;KACV,CAAC,CAAA;IAEF,mDAAmD;IACnD,MAAM,MAAM,GAAG,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,MAAM,CAAC,CAAA;IAC3C,IAAI,QAAQ,GAAG,MAAM,CAAA;IACrB,IAAI,SAAoC,CAAA;IACxC,IAAI,YAAY,GAAG,EAAE,CAAA;IACrB,IAAI,MAAM,CAAC,UAAU,CAAC,MAAM,EAAE,MAAM,CAAC,GAAG,IAAI,CAAC,cAAc,EAAE,CAAC;QAC5D,QAAQ,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC,EAAE,IAAI,CAAC,cAAc,CAAC,CAAA;QAC/C,MAAM,KAAK,GAAG,IAAA,yBAAc,GAAE,CAAA;QAC9B,IAAI,CAAC;YACH,IAAI,CAAC,QAAQ,CAAC;gBACZ,KAAK;gBACL,SAAS,EAAE,IAAI;gBACf,QAAQ,EAAE,YAAY;gBACtB,GAAG,EAAE,IAAI,CAAC,WAAW;gBACrB,SAAS,EAAE,GAAG,EAAE;gBAChB,aAAa,EAAE,MAAM,CAAC,UAAU,CAAC,MAAM,EAAE,MAAM,CAAC;gBAChD,cAAc,EAAE,IAAA,kCAAsB,EAAC,MAAM,CAAC;gBAC9C,cAAc,EAAE,IAAA,kCAAsB,EAAC,QAAQ,CAAC;gBAChD,WAAW,EAAE,IAAA,kCAAsB,EAAC,MAAM,CAAC,GAAG,IAAA,kCAAsB,EAAC,QAAQ,CAAC;gBAC9E,IAAI,EAAE,MAAM;aACb,CAAC,CAAA;YACF,SAAS,GAAG;gBACV,IAAI,EAAE,YAAY;gBAClB,KAAK;gBACL,cAAc,EAAE,IAAA,kCAAsB,EAAC,MAAM,CAAC;gBAC9C,cAAc,EAAE,IAAA,kCAAsB,EAAC,QAAQ,CAAC;gBAChD,WAAW,EAAE,IAAA,kCAAsB,EAAC,MAAM,CAAC,GAAG,IAAA,kCAAsB,EAAC,QAAQ,CAAC;aAC/E,CAAA;YACD,YAAY;gBACV,qBAAqB,IAAI,CAAC,cAAc,CAAC,cAAc,EAAE,wBAAwB;oBACjF,yBAAyB,KAAK,gCAAgC,KAAK,sBAAsB,CAAA;QAC7F,CAAC;QAAC,MAAM,CAAC;YACP,2BAA2B;YAC3B,YAAY,GAAG,qBAAqB,IAAI,CAAC,cAAc,CAAC,cAAc,EAAE,2BAA2B,CAAA;QACrG,CAAC;IACH,CAAC;IAED,kDAAkD;IAClD,MAAM,IAAI;SACP,WAAW,CACV,cAAc,CAAC;QACb,QAAQ,EAAE,IAAI,CAAC,QAAQ;QACvB,GAAG,EAAE,GAAG,EAAE;QACV,QAAQ;QACR,IAAI;QACJ,OAAO,EAAE,UAAU;QACnB,QAAQ,EAAE,MAAM,CAAC,QAAQ;QACzB,UAAU,EAAE,MAAM,CAAC,UAAU;QAC7B,SAAS;KACV,CAAC,CACH;SACA,KAAK,CAAC,GAAG,EAAE,GAAE,CAAC,CAAC,CAAA;IAElB,cAAc;IACd,IAAI,MAAM,CAAC,QAAQ,EAAE,CAAC;QACpB,OAAO;YACL,OAAO,EAAE;gBACP;oBACE,IAAI,EAAE,MAAM;oBACZ,IAAI,EAAE,WAAW,IAAI,CAAC,KAAK,CAAC,SAAS,GAAG,IAAI,CAAC,kBAAkB,GAAG,CAAC,QAAQ,CAAC,CAAC,CAAC,2BAA2B,QAAQ,GAAG,YAAY,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;iBACzI;aACF;YACD,OAAO,EAAE,IAAI;SACd,CAAA;IACH,CAAC;IACD,IAAI,MAAM,CAAC,QAAQ,KAAK,CAAC,EAAE,CAAC;QAC1B,MAAM,YAAY,GAAG,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,UAAU,CAAC,CAAA;QACrD,OAAO;YACL,OAAO,EAAE;gBACP;oBACE,IAAI,EAAE,MAAM;oBACZ,IAAI,EACF,aAAa,MAAM,CAAC,QAAQ,IAAI,MAAM,KAAK,MAAM,CAAC,UAAU,OAAO;wBACnE,CAAC,YAAY,CAAC,CAAC,CAAC,wBAAwB,YAAY,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC;wBAC9D,CAAC,QAAQ,CAAC,CAAC,CAAC,mBAAmB,QAAQ,GAAG,YAAY,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;iBACjE;aACF;YACD,OAAO,EAAE,IAAI;SACd,CAAA;IACH,CAAC;IACD,OAAO;QACL,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,QAAQ,IAAI,aAAa,CAAC,GAAG,YAAY,EAAE,CAAC;KAC9E,CAAA;AACH,CAAC"}

package/dist/exec/policy-fetcher.d.ts

@@ -0,0 +1,9 @@
+import type { ExecutionPolicy } from './policy';
+export interface FetchExecutionPolicyOptions {
+    apiEndpoint: string;
+    apiKey: string;
+    fetchImpl?: typeof fetch;
+}
+/** 組織/ユーザーの実行ポリシーを取得する。未設定・通信エラーは null。 */
+export declare function fetchExecutionPolicy(opts: FetchExecutionPolicyOptions): Promise<ExecutionPolicy | null>;
+//# sourceMappingURL=policy-fetcher.d.ts.map

package/dist/exec/policy-fetcher.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"policy-fetcher.d.ts","sourceRoot":"","sources":["../../src/exec/policy-fetcher.ts"],"names":[],"mappings":"AAGA,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,UAAU,CAAA;AAgB/C,MAAM,WAAW,2BAA2B;IAC1C,WAAW,EAAE,MAAM,CAAA;IACnB,MAAM,EAAE,MAAM,CAAA;IACd,SAAS,CAAC,EAAE,OAAO,KAAK,CAAA;CACzB;AAED,2CAA2C;AAC3C,wBAAsB,oBAAoB,CACxC,IAAI,EAAE,2BAA2B,GAChC,OAAO,CAAC,eAAe,GAAG,IAAI,CAAC,CAuBjC"}

package/dist/exec/policy-fetcher.js

@@ -0,0 +1,46 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.fetchExecutionPolicy = fetchExecutionPolicy;
+const zod_1 = require("zod");
+const logger_1 = require("../logger");
+const mask_rules_fetcher_1 = require("../mask-rules-fetcher");
+// =============================================
+// 組織実行ポリシーの取得 (Issue #94 / #44 接続)
+// =============================================
+//
+// 配信は既存の getAgentMaskRules 応答に同梱される execution フィールドを使う
+// (新エンドポイントを増やさない — functions のデプロイ明示列挙を変えないため)。
+// 取得できない場合は null を返し、ビルトイン禁止リストのみで動作する
+// (緩める方向には倒れない = 安全側)。
+const ExecutionPolicySchema = zod_1.z.object({
+    forbiddenCommands: zod_1.z.array(zod_1.z.string().min(1).max(200)).max(50).default([]),
+    forbiddenPaths: zod_1.z.array(zod_1.z.string().min(1).max(200)).max(50).default([]),
+});
+/** 組織/ユーザーの実行ポリシーを取得する。未設定・通信エラーは null。 */
+async function fetchExecutionPolicy(opts) {
+    const doFetch = opts.fetchImpl ?? fetch;
+    try {
+        const res = await doFetch((0, mask_rules_fetcher_1.maskRulesUrl)(opts.apiEndpoint), {
+            method: 'GET',
+            headers: { Authorization: `Bearer ${opts.apiKey}` },
+        });
+        if (!res.ok) {
+            logger_1.logger.warn('fetchExecutionPolicy: non-OK response', { status: res.status });
+            return null;
+        }
+        const body = (await res.json());
+        if (!body.success || body.execution == null)
+            return null;
+        const parsed = ExecutionPolicySchema.safeParse(body.execution);
+        if (!parsed.success) {
+            logger_1.logger.warn('fetchExecutionPolicy: invalid payload', { error: parsed.error.message });
+            return null;
+        }
+        return parsed.data;
+    }
+    catch (e) {
+        logger_1.logger.warn('fetchExecutionPolicy failed', { error: e.message });
+        return null;
+    }
+}
+//# sourceMappingURL=policy-fetcher.js.map

package/dist/exec/policy-fetcher.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"policy-fetcher.js","sourceRoot":"","sources":["../../src/exec/policy-fetcher.ts"],"names":[],"mappings":";;AA0BA,oDAyBC;AAnDD,6BAAuB;AACvB,sCAAkC;AAClC,8DAAoD;AAGpD,gDAAgD;AAChD,mCAAmC;AACnC,gDAAgD;AAChD,EAAE;AACF,uDAAuD;AACvD,iDAAiD;AACjD,uCAAuC;AACvC,uBAAuB;AAEvB,MAAM,qBAAqB,GAAG,OAAC,CAAC,MAAM,CAAC;IACrC,iBAAiB,EAAE,OAAC,CAAC,KAAK,CAAC,OAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC;IAC1E,cAAc,EAAE,OAAC,CAAC,KAAK,CAAC,OAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC;CACxE,CAAC,CAAA;AAQF,2CAA2C;AACpC,KAAK,UAAU,oBAAoB,CACxC,IAAiC;IAEjC,MAAM,OAAO,GAAG,IAAI,CAAC,SAAS,IAAI,KAAK,CAAA;IACvC,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,MAAM,OAAO,CAAC,IAAA,iCAAY,EAAC,IAAI,CAAC,WAAW,CAAC,EAAE;YACxD,MAAM,EAAE,KAAK;YACb,OAAO,EAAE,EAAE,aAAa,EAAE,UAAU,IAAI,CAAC,MAAM,EAAE,EAAE;SACpD,CAAC,CAAA;QACF,IAAI,CAAC,GAAG,CAAC,EAAE,EAAE,CAAC;YACZ,eAAM,CAAC,IAAI,CAAC,uCAAuC,EAAE,EAAE,MAAM,EAAE,GAAG,CAAC,MAAM,EAAE,CAAC,CAAA;YAC5E,OAAO,IAAI,CAAA;QACb,CAAC;QACD,MAAM,IAAI,GAAG,CAAC,MAAM,GAAG,CAAC,IAAI,EAAE,CAA+C,CAAA;QAC7E,IAAI,CAAC,IAAI,CAAC,OAAO,IAAI,IAAI,CAAC,SAAS,IAAI,IAAI;YAAE,OAAO,IAAI,CAAA;QACxD,MAAM,MAAM,GAAG,qBAAqB,CAAC,SAAS,CAAC,IAAI,CAAC,SAAS,CAAC,CAAA;QAC9D,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;YACpB,eAAM,CAAC,IAAI,CAAC,uCAAuC,EAAE,EAAE,KAAK,EAAE,MAAM,CAAC,KAAK,CAAC,OAAO,EAAE,CAAC,CAAA;YACrF,OAAO,IAAI,CAAA;QACb,CAAC;QACD,OAAO,MAAM,CAAC,IAAI,CAAA;IACpB,CAAC;IAAC,OAAO,CAAC,EAAE,CAAC;QACX,eAAM,CAAC,IAAI,CAAC,6BAA6B,EAAE,EAAE,KAAK,EAAG,CAAW,CAAC,OAAO,EAAE,CAAC,CAAA;QAC3E,OAAO,IAAI,CAAA;IACb,CAAC;AACH,CAAC"}