taskflow-core 0.2.0 → 0.2.1

package/dist/resources/registry.js

@@ -0,0 +1,139 @@
+import * as fs from "node:fs";
+import * as path from "node:path";
+import { hasGrantAuthority, readonlyStringSet } from "./authority.js";
+import { workspacePolicyError } from "./errors.js";
+import { accessAllows } from "./schema.js";
+const ROOT_GRANT = Symbol("taskflow.root-grant");
+const brandedRootGrants = new WeakSet();
+export const ROOT_ENFORCEMENT_MODES = ["native-single-root", "native-multi-root", "resolve-only"];
+/** Invalid trusted host policy; detected before an invocation can start. */
+export class RootRegistryConfigurationError extends Error {
+    constructor(message) {
+        super(message);
+        this.name = "RootRegistryConfigurationError";
+    }
+}
+function logicalId(value, field) {
+    if (typeof value !== "string" || value.length === 0 || value.trim().length === 0 || /[\u0000-\u001f\u007f]/.test(value)) {
+        throw new RootRegistryConfigurationError(`${field} must be a non-empty logical identifier`);
+    }
+    return value.normalize("NFC");
+}
+function validateVersion(version) {
+    if (version === undefined)
+        return undefined;
+    if (!["portable", "path-bound", "unavailable"].includes(version.identityMode)) {
+        throw new RootRegistryConfigurationError("root grant version identityMode is invalid");
+    }
+    if (!Number.isSafeInteger(version.generation) || version.generation < 0) {
+        throw new RootRegistryConfigurationError("root grant version generation must be a non-negative safe integer");
+    }
+    if (!["clean", "write-pending", "dirty-unknown"].includes(version.state)) {
+        throw new RootRegistryConfigurationError("root grant version state is invalid");
+    }
+    for (const [field, value] of [["contentId", version.contentId], ["scopeDigest", version.scopeDigest]]) {
+        if (value !== undefined && (typeof value !== "string" || value.length === 0)) {
+            throw new RootRegistryConfigurationError(`root grant version ${field} must be a non-empty string`);
+        }
+    }
+    return Object.freeze({ ...version });
+}
+/**
+ * Host-only RootGrant constructor.
+ *
+ * The private symbol plus WeakSet identity make grants non-forgeable by JSON,
+ * object spread, structural casts, or structured cloning. Trusted delivery
+ * code calls this while loading its local root policy.
+ */
+export function createHostRootGrant(input) {
+    if (!["read-only", "read-write"].includes(input.maxAccess)) {
+        throw new RootRegistryConfigurationError("root grant maxAccess is invalid");
+    }
+    if (!ROOT_ENFORCEMENT_MODES.includes(input.enforcement)) {
+        throw new RootRegistryConfigurationError("root grant enforcement is invalid");
+    }
+    let physicalRoot;
+    try {
+        physicalRoot = fs.realpathSync(input.physicalRoot);
+        if (!fs.statSync(physicalRoot).isDirectory())
+            throw new Error("not-directory");
+    }
+    catch {
+        throw new RootRegistryConfigurationError("root grant physicalRoot must resolve to an existing directory");
+    }
+    const grant = Object.freeze({
+        [ROOT_GRANT]: true,
+        grantId: logicalId(input.grantId, "grantId"),
+        bindingId: logicalId(input.bindingId, "bindingId"),
+        resourceDomainId: logicalId(input.resourceDomainId, "resourceDomainId"),
+        physicalRoot,
+        maxAccess: input.maxAccess,
+        version: validateVersion(input.version),
+        allowedPrincipals: readonlyStringSet(input.allowedPrincipals, "allowedPrincipals"),
+        enforcement: input.enforcement,
+    });
+    brandedRootGrants.add(grant);
+    return grant;
+}
+export function isRootGrant(value) {
+    return typeof value === "object" && value !== null && brandedRootGrants.has(value);
+}
+function isWithin(root, candidate) {
+    const relative = path.relative(root, candidate);
+    return relative === "" || (relative !== ".." && !relative.startsWith(`..${path.sep}`) && !path.isAbsolute(relative));
+}
+function physicalScopesOverlap(a, b) {
+    return isWithin(a.physicalRoot, b.physicalRoot) || isWithin(b.physicalRoot, a.physicalRoot);
+}
+class RootRegistryImpl {
+    registryId;
+    #grants;
+    constructor(registryId, grants) {
+        this.registryId = registryId;
+        this.#grants = grants;
+    }
+    authorize(grantId, principal, requested) {
+        const grant = typeof grantId === "string" ? this.#grants.get(grantId.normalize("NFC")) : undefined;
+        if (grant === undefined || !hasGrantAuthority(principal, grant)) {
+            return workspacePolicyError("TFWS_UNAUTHORIZED_GRANT", "The invocation is not authorized for the requested root grant");
+        }
+        if (requested !== "read-only" && requested !== "read-write") {
+            return workspacePolicyError("TFWS_ACCESS_ESCALATION", "The requested workspace access is invalid");
+        }
+        if (!accessAllows(grant.maxAccess, requested)) {
+            return workspacePolicyError("TFWS_ACCESS_ESCALATION", "The requested workspace access exceeds the root grant");
+        }
+        return grant;
+    }
+}
+/**
+ * Build a registry and reject alias configurations that could split locking,
+ * journaling, version, or cache identity for one writable physical resource.
+ */
+export function createRootRegistry(input) {
+    const registryId = logicalId(input.registryId, "registryId");
+    const grants = new Map();
+    for (const grant of input.grants) {
+        if (!isRootGrant(grant)) {
+            throw new RootRegistryConfigurationError("registry grants must come from createHostRootGrant");
+        }
+        if (grants.has(grant.grantId)) {
+            throw new RootRegistryConfigurationError(`duplicate root grant id '${grant.grantId}'`);
+        }
+        grants.set(grant.grantId, grant);
+    }
+    const entries = [...grants.values()];
+    for (let i = 0; i < entries.length; i++) {
+        for (let j = i + 1; j < entries.length; j++) {
+            const a = entries[i];
+            const b = entries[j];
+            if (a.resourceDomainId !== b.resourceDomainId &&
+                (a.maxAccess === "read-write" || b.maxAccess === "read-write") &&
+                physicalScopesOverlap(a, b)) {
+                throw new RootRegistryConfigurationError(`overlapping grants '${a.grantId}' and '${b.grantId}' require the same resourceDomainId when either is writable`);
+            }
+        }
+    }
+    return new RootRegistryImpl(registryId, grants);
+}
+//# sourceMappingURL=registry.js.map

package/dist/resources/registry.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"registry.js","sourceRoot":"","sources":["../../src/resources/registry.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,MAAM,SAAS,CAAC;AAC9B,OAAO,KAAK,IAAI,MAAM,WAAW,CAAC;AAClC,OAAO,EAAE,iBAAiB,EAAE,iBAAiB,EAA4B,MAAM,gBAAgB,CAAC;AAChG,OAAO,EAAE,oBAAoB,EAA6B,MAAM,aAAa,CAAC;AAC9E,OAAO,EAAE,YAAY,EAA8C,MAAM,aAAa,CAAC;AAEvF,MAAM,UAAU,GAAkB,MAAM,CAAC,qBAAqB,CAAC,CAAC;AAChE,MAAM,iBAAiB,GAAG,IAAI,OAAO,EAAU,CAAC;AAEhD,MAAM,CAAC,MAAM,sBAAsB,GAAG,CAAC,oBAAoB,EAAE,mBAAmB,EAAE,cAAc,CAAU,CAAC;AAyC3G,4EAA4E;AAC5E,MAAM,OAAO,8BAA+B,SAAQ,KAAK;IACxD,YAAY,OAAe;QAC1B,KAAK,CAAC,OAAO,CAAC,CAAC;QACf,IAAI,CAAC,IAAI,GAAG,gCAAgC,CAAC;IAC9C,CAAC;CACD;AAED,SAAS,SAAS,CAAC,KAAc,EAAE,KAAa;IAC/C,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC,IAAI,KAAK,CAAC,IAAI,EAAE,CAAC,MAAM,KAAK,CAAC,IAAI,uBAAuB,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC;QACzH,MAAM,IAAI,8BAA8B,CAAC,GAAG,KAAK,yCAAyC,CAAC,CAAC;IAC7F,CAAC;IACD,OAAO,KAAK,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC;AAC/B,CAAC;AAED,SAAS,eAAe,CAAC,OAAoC;IAC5D,IAAI,OAAO,KAAK,SAAS;QAAE,OAAO,SAAS,CAAC;IAC5C,IAAI,CAAC,CAAC,UAAU,EAAE,YAAY,EAAE,aAAa,CAAC,CAAC,QAAQ,CAAC,OAAO,CAAC,YAAY,CAAC,EAAE,CAAC;QAC/E,MAAM,IAAI,8BAA8B,CAAC,4CAA4C,CAAC,CAAC;IACxF,CAAC;IACD,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,OAAO,CAAC,UAAU,CAAC,IAAI,OAAO,CAAC,UAAU,GAAG,CAAC,EAAE,CAAC;QACzE,MAAM,IAAI,8BAA8B,CAAC,mEAAmE,CAAC,CAAC;IAC/G,CAAC;IACD,IAAI,CAAC,CAAC,OAAO,EAAE,eAAe,EAAE,eAAe,CAAC,CAAC,QAAQ,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;QAC1E,MAAM,IAAI,8BAA8B,CAAC,qCAAqC,CAAC,CAAC;IACjF,CAAC;IACD,KAAK,MAAM,CAAC,KAAK,EAAE,KAAK,CAAC,IAAI,CAAC,CAAC,WAAW,EAAE,OAAO,CAAC,SAAS,CAAC,EAAE,CAAC,aAAa,EAAE,OAAO,CAAC,WAAW,CAAC,CAAU,EAAE,CAAC;QAChH,IAAI,KAAK,KAAK,SAAS,IAAI,CAAC,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC,CAAC,EAAE,CAAC;YAC9E,MAAM,IAAI,8BAA8B,CAAC,sBAAsB,KAAK,6BAA6B,CAAC,CAAC;QACpG,CAAC;IACF,CAAC;IACD,OAAO,MAAM,CAAC,MAAM,CAAC,EAAE,GAAG,OAAO,EAAE,CAAC,CAAC;AACtC,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,mBAAmB,CAAC,KAAyB;IAC5D,IAAI,CAAE,CAAC,WAAW,EAAE,YAAY,CAAW,CAAC,QAAQ,CAAC,KAAK,CAAC,SAAS,CAAC,EAAE,CAAC;QACvE,MAAM,IAAI,8BAA8B,CAAC,iCAAiC,CAAC,CAAC;IAC7E,CAAC;IACD,IAAI,CAAC,sBAAsB,CAAC,QAAQ,CAAC,KAAK,CAAC,WAAW,CAAC,EAAE,CAAC;QACzD,MAAM,IAAI,8BAA8B,CAAC,mCAAmC,CAAC,CAAC;IAC/E,CAAC;IAED,IAAI,YAAoB,CAAC;IACzB,IAAI,CAAC;QACJ,YAAY,GAAG,EAAE,CAAC,YAAY,CAAC,KAAK,CAAC,YAAY,CAAC,CAAC;QACnD,IAAI,CAAC,EAAE,CAAC,QAAQ,CAAC,YAAY,CAAC,CAAC,WAAW,EAAE;YAAE,MAAM,IAAI,KAAK,CAAC,eAAe,CAAC,CAAC;IAChF,CAAC;IAAC,MAAM,CAAC;QACR,MAAM,IAAI,8BAA8B,CAAC,+DAA+D,CAAC,CAAC;IAC3G,CAAC;IAED,MAAM,KAAK,GAAG,MAAM,CAAC,MAAM,CAAC;QAC3B,CAAC,UAAU,CAAC,EAAE,IAAa;QAC3B,OAAO,EAAE,SAAS,CAAC,KAAK,CAAC,OAAO,EAAE,SAAS,CAAC;QAC5C,SAAS,EAAE,SAAS,CAAC,KAAK,CAAC,SAAS,EAAE,WAAW,CAAC;QAClD,gBAAgB,EAAE,SAAS,CAAC,KAAK,CAAC,gBAAgB,EAAE,kBAAkB,CAAC;QACvE,YAAY;QACZ,SAAS,EAAE,KAAK,CAAC,SAAS;QAC1B,OAAO,EAAE,eAAe,CAAC,KAAK,CAAC,OAAO,CAAC;QACvC,iBAAiB,EAAE,iBAAiB,CAAC,KAAK,CAAC,iBAAiB,EAAE,mBAAmB,CAAC;QAClF,WAAW,EAAE,KAAK,CAAC,WAAW;KAC9B,CAAqB,CAAC;IACvB,iBAAiB,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;IAC7B,OAAO,KAAK,CAAC;AACd,CAAC;AAED,MAAM,UAAU,WAAW,CAAC,KAAc;IACzC,OAAO,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,IAAI,IAAI,iBAAiB,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;AACpF,CAAC;AAED,SAAS,QAAQ,CAAC,IAAY,EAAE,SAAiB;IAChD,MAAM,QAAQ,GAAG,IAAI,CAAC,QAAQ,CAAC,IAAI,EAAE,SAAS,CAAC,CAAC;IAChD,OAAO,QAAQ,KAAK,EAAE,IAAI,CAAC,QAAQ,KAAK,IAAI,IAAI,CAAC,QAAQ,CAAC,UAAU,CAAC,KAAK,IAAI,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,QAAQ,CAAC,CAAC,CAAC;AACtH,CAAC;AAED,SAAS,qBAAqB,CAAC,CAAY,EAAE,CAAY;IACxD,OAAO,QAAQ,CAAC,CAAC,CAAC,YAAY,EAAE,CAAC,CAAC,YAAY,CAAC,IAAI,QAAQ,CAAC,CAAC,CAAC,YAAY,EAAE,CAAC,CAAC,YAAY,CAAC,CAAC;AAC7F,CAAC;AAED,MAAM,gBAAgB;IACZ,UAAU,CAAS;IACnB,OAAO,CAAiC;IAEjD,YAAY,UAAkB,EAAE,MAAsC;QACrE,IAAI,CAAC,UAAU,GAAG,UAAU,CAAC;QAC7B,IAAI,CAAC,OAAO,GAAG,MAAM,CAAC;IACvB,CAAC;IAED,SAAS,CAAC,OAAe,EAAE,SAA8B,EAAE,SAA0B;QACpF,MAAM,KAAK,GAAG,OAAO,OAAO,KAAK,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,OAAO,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;QACnG,IAAI,KAAK,KAAK,SAAS,IAAI,CAAC,iBAAiB,CAAC,SAAS,EAAE,KAAK,CAAC,EAAE,CAAC;YACjE,OAAO,oBAAoB,CAAC,yBAAyB,EAAE,+DAA+D,CAAC,CAAC;QACzH,CAAC;QACD,IAAI,SAAS,KAAK,WAAW,IAAI,SAAS,KAAK,YAAY,EAAE,CAAC;YAC7D,OAAO,oBAAoB,CAAC,wBAAwB,EAAE,2CAA2C,CAAC,CAAC;QACpG,CAAC;QACD,IAAI,CAAC,YAAY,CAAC,KAAK,CAAC,SAAS,EAAE,SAAS,CAAC,EAAE,CAAC;YAC/C,OAAO,oBAAoB,CAAC,wBAAwB,EAAE,uDAAuD,CAAC,CAAC;QAChH,CAAC;QACD,OAAO,KAAK,CAAC;IACd,CAAC;CACD;AAED;;;GAGG;AACH,MAAM,UAAU,kBAAkB,CAAC,KAAwB;IAC1D,MAAM,UAAU,GAAG,SAAS,CAAC,KAAK,CAAC,UAAU,EAAE,YAAY,CAAC,CAAC;IAC7D,MAAM,MAAM,GAAG,IAAI,GAAG,EAAqB,CAAC;IAC5C,KAAK,MAAM,KAAK,IAAI,KAAK,CAAC,MAAM,EAAE,CAAC;QAClC,IAAI,CAAC,WAAW,CAAC,KAAK,CAAC,EAAE,CAAC;YACzB,MAAM,IAAI,8BAA8B,CAAC,oDAAoD,CAAC,CAAC;QAChG,CAAC;QACD,IAAI,MAAM,CAAC,GAAG,CAAC,KAAK,CAAC,OAAO,CAAC,EAAE,CAAC;YAC/B,MAAM,IAAI,8BAA8B,CAAC,4BAA4B,KAAK,CAAC,OAAO,GAAG,CAAC,CAAC;QACxF,CAAC;QACD,MAAM,CAAC,GAAG,CAAC,KAAK,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC;IAClC,CAAC;IAED,MAAM,OAAO,GAAG,CAAC,GAAG,MAAM,CAAC,MAAM,EAAE,CAAC,CAAC;IACrC,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,OAAO,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;QACzC,KAAK,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,OAAO,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;YAC7C,MAAM,CAAC,GAAG,OAAO,CAAC,CAAC,CAAE,CAAC;YACtB,MAAM,CAAC,GAAG,OAAO,CAAC,CAAC,CAAE,CAAC;YACtB,IACC,CAAC,CAAC,gBAAgB,KAAK,CAAC,CAAC,gBAAgB;gBACzC,CAAC,CAAC,CAAC,SAAS,KAAK,YAAY,IAAI,CAAC,CAAC,SAAS,KAAK,YAAY,CAAC;gBAC9D,qBAAqB,CAAC,CAAC,EAAE,CAAC,CAAC,EAC1B,CAAC;gBACF,MAAM,IAAI,8BAA8B,CACvC,uBAAuB,CAAC,CAAC,OAAO,UAAU,CAAC,CAAC,OAAO,6DAA6D,CAChH,CAAC;YACH,CAAC;QACF,CAAC;IACF,CAAC;IAED,OAAO,IAAI,gBAAgB,CAAC,UAAU,EAAE,MAAM,CAAC,CAAC;AACjD,CAAC"}

package/dist/resources/resolve.d.ts

@@ -0,0 +1,49 @@
+import { type WorkspacePolicyError } from "./errors.ts";
+import { type HandleRef, type PathIntent, type ScopedCapability } from "./schema.ts";
+declare const RESOLVED_PATH_REF: unique symbol;
+export interface PathArgumentEnvironment {
+    /** Flow-authored argument declarations. Legacy declarations have no `type`. */
+    definitions: Readonly<Record<string, unknown>>;
+    /** Already validated invocation values; defaults are read from definitions if absent. */
+    values: Readonly<Record<string, unknown>>;
+}
+export interface CapabilityEnvironment {
+    workspaces: ReadonlyMap<string, ScopedCapability>;
+    handles?: ReadonlyMap<string, ScopedCapability>;
+    runId: string;
+    phaseId: string;
+    attemptId: string;
+    resolutionTokenTtlMs?: number;
+    now?: () => number;
+    mintResolutionTokenId?: () => string;
+}
+export interface ResolvedPathRef {
+    readonly [RESOLVED_PATH_REF]: true;
+    readonly resolutionTokenId: string;
+    readonly expiresAt: string;
+    readonly capability: Readonly<ScopedCapability>;
+    readonly logicalSubpath: string;
+    readonly physicalPath: string;
+    readonly intent: PathIntent;
+}
+export type ResolvePathRefResult = {
+    ok: true;
+    value: ResolvedPathRef;
+} | {
+    ok: false;
+    error: WorkspacePolicyError;
+};
+export type ResolveRelativePathResult = {
+    ok: true;
+    value: string;
+} | {
+    ok: false;
+    error: WorkspacePolicyError;
+};
+/** Resolve a symbolic expression using only explicitly typed invocation args. */
+export declare function resolveRelativePathExpr(input: unknown, args: PathArgumentEnvironment): ResolveRelativePathResult;
+export declare function handleRefKey(handle: HandleRef): string;
+export declare function resolvePathRef(input: unknown, env: CapabilityEnvironment, args: PathArgumentEnvironment): ResolvePathRefResult;
+export declare function isResolvedPathRef(value: unknown): value is ResolvedPathRef;
+export {};
+//# sourceMappingURL=resolve.d.ts.map

package/dist/resources/resolve.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"resolve.d.ts","sourceRoot":"","sources":["../../src/resources/resolve.ts"],"names":[],"mappings":"AAGA,OAAO,EAAwB,KAAK,oBAAoB,EAAE,MAAM,aAAa,CAAC;AAC9E,OAAO,EASN,KAAK,SAAS,EAEd,KAAK,UAAU,EAEf,KAAK,gBAAgB,EAErB,MAAM,aAAa,CAAC;AAErB,QAAA,MAAM,iBAAiB,EAAE,OAAO,MAA6C,CAAC;AAG9E,MAAM,WAAW,uBAAuB;IACvC,+EAA+E;IAC/E,WAAW,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,CAAC;IAC/C,yFAAyF;IACzF,MAAM,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,CAAC;CAC1C;AAED,MAAM,WAAW,qBAAqB;IACrC,UAAU,EAAE,WAAW,CAAC,MAAM,EAAE,gBAAgB,CAAC,CAAC;IAClD,OAAO,CAAC,EAAE,WAAW,CAAC,MAAM,EAAE,gBAAgB,CAAC,CAAC;IAChD,KAAK,EAAE,MAAM,CAAC;IACd,OAAO,EAAE,MAAM,CAAC;IAChB,SAAS,EAAE,MAAM,CAAC;IAClB,oBAAoB,CAAC,EAAE,MAAM,CAAC;IAC9B,GAAG,CAAC,EAAE,MAAM,MAAM,CAAC;IACnB,qBAAqB,CAAC,EAAE,MAAM,MAAM,CAAC;CACrC;AAED,MAAM,WAAW,eAAe;IAC/B,QAAQ,CAAC,CAAC,iBAAiB,CAAC,EAAE,IAAI,CAAC;IACnC,QAAQ,CAAC,iBAAiB,EAAE,MAAM,CAAC;IACnC,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,UAAU,EAAE,QAAQ,CAAC,gBAAgB,CAAC,CAAC;IAChD,QAAQ,CAAC,cAAc,EAAE,MAAM,CAAC;IAChC,QAAQ,CAAC,YAAY,EAAE,MAAM,CAAC;IAC9B,QAAQ,CAAC,MAAM,EAAE,UAAU,CAAC;CAC5B;AAED,MAAM,MAAM,oBAAoB,GAC7B;IAAE,EAAE,EAAE,IAAI,CAAC;IAAC,KAAK,EAAE,eAAe,CAAA;CAAE,GACpC;IAAE,EAAE,EAAE,KAAK,CAAC;IAAC,KAAK,EAAE,oBAAoB,CAAA;CAAE,CAAC;AAE9C,MAAM,MAAM,yBAAyB,GAClC;IAAE,EAAE,EAAE,IAAI,CAAC;IAAC,KAAK,EAAE,MAAM,CAAA;CAAE,GAC3B;IAAE,EAAE,EAAE,KAAK,CAAC;IAAC,KAAK,EAAE,oBAAoB,CAAA;CAAE,CAAC;AA0C9C,iFAAiF;AACjF,wBAAgB,uBAAuB,CAAC,KAAK,EAAE,OAAO,EAAE,IAAI,EAAE,uBAAuB,GAAG,yBAAyB,CAwChH;AAED,wBAAgB,YAAY,CAAC,MAAM,EAAE,SAAS,GAAG,MAAM,CAEtD;AAwKD,wBAAgB,cAAc,CAC7B,KAAK,EAAE,OAAO,EACd,GAAG,EAAE,qBAAqB,EAC1B,IAAI,EAAE,uBAAuB,GAC3B,oBAAoB,CAyDtB;AAED,wBAAgB,iBAAiB,CAAC,KAAK,EAAE,OAAO,GAAG,KAAK,IAAI,eAAe,CAE1E"}

package/dist/resources/resolve.js

@@ -0,0 +1,309 @@
+import * as fs from "node:fs";
+import * as path from "node:path";
+import { randomUUID } from "node:crypto";
+import { workspacePolicyError } from "./errors.js";
+import { accessAllows, lifetimeRank, normalizePortablePathSegment, normalizePortableRelativePath, validatePathRef, validateRelativePathExpr, } from "./schema.js";
+const RESOLVED_PATH_REF = Symbol("taskflow.resolved-path-ref");
+const resolvedPathRefs = new WeakSet();
+function invalidPath(message, logicalWorkspaceId) {
+    return workspacePolicyError("TFWS_INVALID_PATH", message, {
+        ...(logicalWorkspaceId === undefined ? {} : { logicalWorkspaceId }),
+    });
+}
+function resolveArg(name, args) {
+    const rawSpec = args.definitions[name];
+    if (!Object.prototype.hasOwnProperty.call(args.definitions, name)) {
+        return { ok: false, error: invalidPath(`Path argument '${name}' must have an explicit typed declaration`) };
+    }
+    if (typeof rawSpec !== "object" || rawSpec === null || Array.isArray(rawSpec)) {
+        return { ok: false, error: invalidPath(`Path argument '${name}' must have an explicit typed declaration`) };
+    }
+    const spec = rawSpec;
+    if (typeof spec.type !== "string") {
+        return { ok: false, error: invalidPath(`Path argument '${name}' must have an explicit typed declaration`) };
+    }
+    const hasInvocationValue = Object.prototype.hasOwnProperty.call(args.values, name);
+    const hasDefault = Object.prototype.hasOwnProperty.call(spec, "default");
+    if (!hasInvocationValue && !hasDefault) {
+        return { ok: false, error: invalidPath(`Path argument '${name}' has no invocation value or typed default`) };
+    }
+    const value = hasInvocationValue ? args.values[name] : spec.default;
+    if (spec.type === "enum") {
+        if (!Array.isArray(spec.values) || !spec.values.some((allowed) => Object.is(allowed, value))) {
+            return { ok: false, error: invalidPath(`Path argument '${name}' does not match its typed enum declaration`) };
+        }
+    }
+    return { ok: true, spec, value };
+}
+/** Resolve a symbolic expression using only explicitly typed invocation args. */
+export function resolveRelativePathExpr(input, args) {
+    const parsed = validateRelativePathExpr(input);
+    if (!parsed.ok)
+        return { ok: false, error: invalidPath(parsed.errors.join("; ")) };
+    const expr = parsed.value;
+    if ("literalPath" in expr) {
+        const normalized = normalizePortableRelativePath(expr.literalPath);
+        return normalized.ok
+            ? { ok: true, value: normalized.value }
+            : { ok: false, error: invalidPath(normalized.errors.join("; ")) };
+    }
+    if ("argPath" in expr) {
+        const selected = resolveArg(expr.argPath, args);
+        if (!selected.ok)
+            return selected;
+        if (selected.spec.type !== "relative-path") {
+            return { ok: false, error: invalidPath(`argPath '${expr.argPath}' must consume a typed relative-path argument`) };
+        }
+        const normalized = normalizePortableRelativePath(selected.value);
+        return normalized.ok
+            ? { ok: true, value: normalized.value }
+            : { ok: false, error: invalidPath(normalized.errors.join("; ")) };
+    }
+    const segments = [];
+    for (const item of expr.segments) {
+        if ("segment" in item) {
+            const normalized = normalizePortablePathSegment(item.segment);
+            if (!normalized.ok)
+                return { ok: false, error: invalidPath(normalized.errors.join("; ")) };
+            segments.push(normalized.value);
+            continue;
+        }
+        const selected = resolveArg(item.argSegment, args);
+        if (!selected.ok)
+            return selected;
+        if (!["string", "relative-path", "enum"].includes(String(selected.spec.type))) {
+            return { ok: false, error: invalidPath(`argSegment '${item.argSegment}' must consume a typed string-like argument`) };
+        }
+        const normalized = normalizePortablePathSegment(selected.value);
+        if (!normalized.ok)
+            return { ok: false, error: invalidPath(normalized.errors.join("; ")) };
+        segments.push(normalized.value);
+    }
+    return { ok: true, value: segments.join("/") };
+}
+export function handleRefKey(handle) {
+    return `${handle.producerPhaseId}\0${handle.exportName}`;
+}
+function sourceCapability(ref, env) {
+    if ("workspace" in ref && ref.workspace !== undefined) {
+        const capability = env.workspaces.get(ref.workspace);
+        return capability === undefined
+            ? {
+                ok: false,
+                error: workspacePolicyError("TFWS_UNKNOWN_WORKSPACE", `Logical workspace '${ref.workspace}' is not bound`, {
+                    logicalWorkspaceId: ref.workspace,
+                }),
+            }
+            : { ok: true, value: capability, source: "workspace" };
+    }
+    const capability = env.handles?.get(handleRefKey(ref.handle));
+    return capability === undefined
+        ? { ok: false, error: workspacePolicyError("TFWS_HANDLE_INVALID", "The workspace handle is unavailable or invalid") }
+        : { ok: true, value: capability, source: "handle" };
+}
+function isWithin(root, candidate) {
+    const relative = path.relative(root, candidate);
+    return relative === "" || (relative !== ".." && !relative.startsWith(`..${path.sep}`) && !path.isAbsolute(relative));
+}
+function checkCapabilityLifetime(capability, env) {
+    const lifetime = capability.lifetime;
+    if (lifetime.scope === "run" && lifetime.runId !== env.runId) {
+        return workspacePolicyError("TFWS_ACCESS_ESCALATION", "The workspace capability belongs to a different run");
+    }
+    if (lifetime.scope === "phase" &&
+        (lifetime.runId !== env.runId || lifetime.phaseId !== env.phaseId || lifetime.attemptId !== env.attemptId)) {
+        return workspacePolicyError("TFWS_ACCESS_ESCALATION", "The workspace capability belongs to a different phase attempt");
+    }
+    return undefined;
+}
+function bindLifetime(requested, parent, env) {
+    if (requested.scope === "phase") {
+        return { scope: "phase", runId: env.runId, phaseId: env.phaseId, attemptId: env.attemptId };
+    }
+    if (requested.scope === "run")
+        return { scope: "run", runId: env.runId };
+    if (parent.scope !== "external")
+        throw new Error("external lifetime must have an external parent");
+    return {
+        scope: "external",
+        bindingId: parent.bindingId,
+        ...(parent.providerInstanceId === undefined ? {} : { providerInstanceId: parent.providerInstanceId }),
+    };
+}
+function nearestExistingAncestor(candidate) {
+    let current = candidate;
+    while (true) {
+        try {
+            fs.lstatSync(current);
+            return { ok: true, lexicalPath: current, realPath: fs.realpathSync(current) };
+        }
+        catch (error) {
+            if (error.code !== "ENOENT")
+                return { ok: false };
+            const parent = path.dirname(current);
+            if (parent === current)
+                return { ok: false };
+            current = parent;
+        }
+    }
+}
+function resolvePhysicalTarget(root, logicalSubpath, intent, logicalWorkspaceId) {
+    let rootReal;
+    try {
+        rootReal = fs.realpathSync(root);
+        if (!fs.statSync(rootReal).isDirectory())
+            throw new Error("not-directory");
+    }
+    catch {
+        return { ok: false, error: invalidPath("The scoped workspace root is unavailable", logicalWorkspaceId) };
+    }
+    const candidate = logicalSubpath === "" ? rootReal : path.resolve(rootReal, ...logicalSubpath.split("/"));
+    if (!isWithin(rootReal, candidate)) {
+        return {
+            ok: false,
+            error: workspacePolicyError("TFWS_PATH_ESCAPE", "The selected path escapes its scoped workspace", {
+                logicalWorkspaceId,
+            }),
+        };
+    }
+    if (intent === "create-file" || intent === "create-directory") {
+        try {
+            fs.lstatSync(candidate);
+            return { ok: false, error: invalidPath("A create intent requires a non-existing target", logicalWorkspaceId) };
+        }
+        catch (error) {
+            if (error.code !== "ENOENT") {
+                return { ok: false, error: invalidPath("The create target could not be inspected", logicalWorkspaceId) };
+            }
+        }
+        const ancestor = nearestExistingAncestor(path.dirname(candidate));
+        if (!ancestor.ok)
+            return { ok: false, error: invalidPath("The create target has no usable ancestor", logicalWorkspaceId) };
+        if (!isWithin(rootReal, ancestor.realPath)) {
+            return {
+                ok: false,
+                error: workspacePolicyError("TFWS_PATH_ESCAPE", "The create target's existing ancestor escapes its scoped workspace", {
+                    logicalWorkspaceId,
+                }),
+            };
+        }
+        try {
+            if (!fs.statSync(ancestor.realPath).isDirectory())
+                throw new Error("not-directory");
+        }
+        catch {
+            return { ok: false, error: invalidPath("The create target's nearest ancestor is not a directory", logicalWorkspaceId) };
+        }
+        const suffix = path.relative(ancestor.lexicalPath, candidate);
+        const physicalPath = path.resolve(ancestor.realPath, suffix);
+        if (!isWithin(rootReal, physicalPath)) {
+            return {
+                ok: false,
+                error: workspacePolicyError("TFWS_PATH_ESCAPE", "The create target escapes its scoped workspace", {
+                    logicalWorkspaceId,
+                }),
+            };
+        }
+        return { ok: true, physicalPath };
+    }
+    let targetReal;
+    let stat;
+    try {
+        targetReal = fs.realpathSync(candidate);
+        stat = fs.statSync(targetReal);
+    }
+    catch {
+        return { ok: false, error: invalidPath("The selected existing target is unavailable", logicalWorkspaceId) };
+    }
+    if (!isWithin(rootReal, targetReal)) {
+        return {
+            ok: false,
+            error: workspacePolicyError("TFWS_PATH_ESCAPE", "The selected existing target resolves outside its scoped workspace", {
+                logicalWorkspaceId,
+            }),
+        };
+    }
+    if (intent === "existing-file" && !stat.isFile()) {
+        return { ok: false, error: invalidPath("The selected target is not a regular file", logicalWorkspaceId) };
+    }
+    if (intent === "existing-directory" && !stat.isDirectory()) {
+        return { ok: false, error: invalidPath("The selected target is not a directory", logicalWorkspaceId) };
+    }
+    if (intent === "executable") {
+        if (!stat.isFile())
+            return { ok: false, error: invalidPath("The selected executable is not a regular file", logicalWorkspaceId) };
+        try {
+            fs.accessSync(targetReal, fs.constants.X_OK);
+        }
+        catch {
+            return { ok: false, error: invalidPath("The selected file is not executable", logicalWorkspaceId) };
+        }
+    }
+    return { ok: true, physicalPath: targetReal };
+}
+export function resolvePathRef(input, env, args) {
+    const parsed = validatePathRef(input);
+    if (!parsed.ok)
+        return { ok: false, error: invalidPath(parsed.errors.join("; ")) };
+    const ref = parsed.value;
+    const source = sourceCapability(ref, env);
+    if (!source.ok)
+        return source;
+    const capability = source.value;
+    const lifetimeError = checkCapabilityLifetime(capability, env);
+    if (lifetimeError !== undefined)
+        return { ok: false, error: lifetimeError };
+    if (!accessAllows(capability.access, ref.access)) {
+        return {
+            ok: false,
+            error: workspacePolicyError("TFWS_ACCESS_ESCALATION", "The requested path access exceeds its workspace capability", {
+                logicalWorkspaceId: capability.logicalWorkspaceId,
+            }),
+        };
+    }
+    const requestedLifetime = ref.maxLifetime ?? { scope: "phase" };
+    if (lifetimeRank(requestedLifetime) > lifetimeRank(capability.lifetime) || (source.source === "handle" && requestedLifetime.scope === "external")) {
+        return {
+            ok: false,
+            error: workspacePolicyError("TFWS_ACCESS_ESCALATION", "The requested path lifetime exceeds its workspace capability", {
+                logicalWorkspaceId: capability.logicalWorkspaceId,
+            }),
+        };
+    }
+    const subpath = ref.subpath === undefined ? { ok: true, value: "" } : resolveRelativePathExpr(ref.subpath, args);
+    if (!subpath.ok)
+        return subpath;
+    const physical = resolvePhysicalTarget(capability.physicalScopeRoot, subpath.value, ref.intent, capability.logicalWorkspaceId);
+    if (!physical.ok)
+        return physical;
+    const logicalPrefix = [capability.logicalPrefix, subpath.value].filter((part) => part.length > 0).join("/");
+    const ttlMs = env.resolutionTokenTtlMs ?? 30_000;
+    if (!Number.isSafeInteger(ttlMs) || ttlMs <= 0 || ttlMs > 300_000) {
+        return { ok: false, error: invalidPath("The resolver token lifetime is invalid", capability.logicalWorkspaceId) };
+    }
+    const now = env.now?.() ?? Date.now();
+    if (!Number.isFinite(now))
+        return { ok: false, error: invalidPath("The resolver clock is invalid", capability.logicalWorkspaceId) };
+    const attenuatedCapability = Object.freeze({
+        ...capability,
+        logicalPrefix,
+        physicalScopeRoot: physical.physicalPath,
+        access: ref.access,
+        lifetime: bindLifetime(requestedLifetime, capability.lifetime, env),
+    });
+    const resolved = Object.freeze({
+        [RESOLVED_PATH_REF]: true,
+        resolutionTokenId: env.mintResolutionTokenId?.() ?? randomUUID(),
+        expiresAt: new Date(now + ttlMs).toISOString(),
+        capability: attenuatedCapability,
+        logicalSubpath: subpath.value,
+        physicalPath: physical.physicalPath,
+        intent: ref.intent,
+    });
+    resolvedPathRefs.add(resolved);
+    return { ok: true, value: resolved };
+}
+export function isResolvedPathRef(value) {
+    return typeof value === "object" && value !== null && resolvedPathRefs.has(value);
+}
+//# sourceMappingURL=resolve.js.map

package/dist/resources/resolve.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"resolve.js","sourceRoot":"","sources":["../../src/resources/resolve.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,MAAM,SAAS,CAAC;AAC9B,OAAO,KAAK,IAAI,MAAM,WAAW,CAAC;AAClC,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACzC,OAAO,EAAE,oBAAoB,EAA6B,MAAM,aAAa,CAAC;AAC9E,OAAO,EACN,YAAY,EACZ,YAAY,EACZ,4BAA4B,EAC5B,6BAA6B,EAC7B,eAAe,EACf,wBAAwB,GASxB,MAAM,aAAa,CAAC;AAErB,MAAM,iBAAiB,GAAkB,MAAM,CAAC,4BAA4B,CAAC,CAAC;AAC9E,MAAM,gBAAgB,GAAG,IAAI,OAAO,EAAU,CAAC;AA4C/C,SAAS,WAAW,CAAC,OAAe,EAAE,kBAA2B;IAChE,OAAO,oBAAoB,CAAC,mBAAmB,EAAE,OAAO,EAAE;QACzD,GAAG,CAAC,kBAAkB,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,kBAAkB,EAAE,CAAC;KACnE,CAAC,CAAC;AACJ,CAAC;AAED,SAAS,UAAU,CAAC,IAAY,EAAE,IAA6B;IAG9D,MAAM,OAAO,GAAG,IAAI,CAAC,WAAW,CAAC,IAAI,CAAC,CAAC;IACvC,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,cAAc,CAAC,IAAI,CAAC,IAAI,CAAC,WAAW,EAAE,IAAI,CAAC,EAAE,CAAC;QACnE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,WAAW,CAAC,kBAAkB,IAAI,2CAA2C,CAAC,EAAE,CAAC;IAC7G,CAAC;IACD,IAAI,OAAO,OAAO,KAAK,QAAQ,IAAI,OAAO,KAAK,IAAI,IAAI,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC,EAAE,CAAC;QAC/E,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,WAAW,CAAC,kBAAkB,IAAI,2CAA2C,CAAC,EAAE,CAAC;IAC7G,CAAC;IACD,MAAM,IAAI,GAAG,OAAsB,CAAC;IACpC,IAAI,OAAO,IAAI,CAAC,IAAI,KAAK,QAAQ,EAAE,CAAC;QACnC,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,WAAW,CAAC,kBAAkB,IAAI,2CAA2C,CAAC,EAAE,CAAC;IAC7G,CAAC;IACD,MAAM,kBAAkB,GAAG,MAAM,CAAC,SAAS,CAAC,cAAc,CAAC,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC;IACnF,MAAM,UAAU,GAAG,MAAM,CAAC,SAAS,CAAC,cAAc,CAAC,IAAI,CAAC,IAAI,EAAE,SAAS,CAAC,CAAC;IACzE,IAAI,CAAC,kBAAkB,IAAI,CAAC,UAAU,EAAE,CAAC;QACxC,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,WAAW,CAAC,kBAAkB,IAAI,4CAA4C,CAAC,EAAE,CAAC;IAC9G,CAAC;IACD,MAAM,KAAK,GAAG,kBAAkB,CAAC,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC;IACpE,IAAI,IAAI,CAAC,IAAI,KAAK,MAAM,EAAE,CAAC;QAC1B,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,MAAM,CAAC,EAAE,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC,EAAE,CAAC;YAC9F,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,WAAW,CAAC,kBAAkB,IAAI,6CAA6C,CAAC,EAAE,CAAC;QAC/G,CAAC;IACF,CAAC;IACD,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC;AAClC,CAAC;AAED,iFAAiF;AACjF,MAAM,UAAU,uBAAuB,CAAC,KAAc,EAAE,IAA6B;IACpF,MAAM,MAAM,GAAG,wBAAwB,CAAC,KAAK,CAAC,CAAC;IAC/C,IAAI,CAAC,MAAM,CAAC,EAAE;QAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,WAAW,CAAC,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,EAAE,CAAC;IACnF,MAAM,IAAI,GAAqB,MAAM,CAAC,KAAK,CAAC;IAC5C,IAAI,aAAa,IAAI,IAAI,EAAE,CAAC;QAC3B,MAAM,UAAU,GAAG,6BAA6B,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC;QACnE,OAAO,UAAU,CAAC,EAAE;YACnB,CAAC,CAAC,EAAE,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,UAAU,CAAC,KAAK,EAAE;YACvC,CAAC,CAAC,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,WAAW,CAAC,UAAU,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,EAAE,CAAC;IACpE,CAAC;IACD,IAAI,SAAS,IAAI,IAAI,EAAE,CAAC;QACvB,MAAM,QAAQ,GAAG,UAAU,CAAC,IAAI,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC;QAChD,IAAI,CAAC,QAAQ,CAAC,EAAE;YAAE,OAAO,QAAQ,CAAC;QAClC,IAAI,QAAQ,CAAC,IAAI,CAAC,IAAI,KAAK,eAAe,EAAE,CAAC;YAC5C,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,WAAW,CAAC,YAAY,IAAI,CAAC,OAAO,+CAA+C,CAAC,EAAE,CAAC;QACnH,CAAC;QACD,MAAM,UAAU,GAAG,6BAA6B,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;QACjE,OAAO,UAAU,CAAC,EAAE;YACnB,CAAC,CAAC,EAAE,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,UAAU,CAAC,KAAK,EAAE;YACvC,CAAC,CAAC,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,WAAW,CAAC,UAAU,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,EAAE,CAAC;IACpE,CAAC;IAED,MAAM,QAAQ,GAAa,EAAE,CAAC;IAC9B,KAAK,MAAM,IAAI,IAAI,IAAI,CAAC,QAAQ,EAAE,CAAC;QAClC,IAAI,SAAS,IAAI,IAAI,EAAE,CAAC;YACvB,MAAM,UAAU,GAAG,4BAA4B,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;YAC9D,IAAI,CAAC,UAAU,CAAC,EAAE;gBAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,WAAW,CAAC,UAAU,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,EAAE,CAAC;YAC3F,QAAQ,CAAC,IAAI,CAAC,UAAU,CAAC,KAAK,CAAC,CAAC;YAChC,SAAS;QACV,CAAC;QACD,MAAM,QAAQ,GAAG,UAAU,CAAC,IAAI,CAAC,UAAU,EAAE,IAAI,CAAC,CAAC;QACnD,IAAI,CAAC,QAAQ,CAAC,EAAE;YAAE,OAAO,QAAQ,CAAC;QAClC,IAAI,CAAC,CAAC,QAAQ,EAAE,eAAe,EAAE,MAAM,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,EAAE,CAAC;YAC/E,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,WAAW,CAAC,eAAe,IAAI,CAAC,UAAU,6CAA6C,CAAC,EAAE,CAAC;QACvH,CAAC;QACD,MAAM,UAAU,GAAG,4BAA4B,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;QAChE,IAAI,CAAC,UAAU,CAAC,EAAE;YAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,WAAW,CAAC,UAAU,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,EAAE,CAAC;QAC3F,QAAQ,CAAC,IAAI,CAAC,UAAU,CAAC,KAAK,CAAC,CAAC;IACjC,CAAC;IACD,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,QAAQ,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC;AAChD,CAAC;AAED,MAAM,UAAU,YAAY,CAAC,MAAiB;IAC7C,OAAO,GAAG,MAAM,CAAC,eAAe,KAAK,MAAM,CAAC,UAAU,EAAE,CAAC;AAC1D,CAAC;AAED,SAAS,gBAAgB,CAAC,GAAsB,EAAE,GAA0B;IAG3E,IAAI,WAAW,IAAI,GAAG,IAAI,GAAG,CAAC,SAAS,KAAK,SAAS,EAAE,CAAC;QACvD,MAAM,UAAU,GAAG,GAAG,CAAC,UAAU,CAAC,GAAG,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;QACrD,OAAO,UAAU,KAAK,SAAS;YAC9B,CAAC,CAAC;gBACD,EAAE,EAAE,KAAK;gBACT,KAAK,EAAE,oBAAoB,CAAC,wBAAwB,EAAE,sBAAsB,GAAG,CAAC,SAAS,gBAAgB,EAAE;oBAC1G,kBAAkB,EAAE,GAAG,CAAC,SAAS;iBACjC,CAAC;aACF;YACD,CAAC,CAAC,EAAE,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,UAAU,EAAE,MAAM,EAAE,WAAW,EAAE,CAAC;IACzD,CAAC;IACD,MAAM,UAAU,GAAG,GAAG,CAAC,OAAO,EAAE,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC;IAC9D,OAAO,UAAU,KAAK,SAAS;QAC9B,CAAC,CAAC,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,oBAAoB,CAAC,qBAAqB,EAAE,gDAAgD,CAAC,EAAE;QACrH,CAAC,CAAC,EAAE,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,UAAU,EAAE,MAAM,EAAE,QAAQ,EAAE,CAAC;AACtD,CAAC;AAED,SAAS,QAAQ,CAAC,IAAY,EAAE,SAAiB;IAChD,MAAM,QAAQ,GAAG,IAAI,CAAC,QAAQ,CAAC,IAAI,EAAE,SAAS,CAAC,CAAC;IAChD,OAAO,QAAQ,KAAK,EAAE,IAAI,CAAC,QAAQ,KAAK,IAAI,IAAI,CAAC,QAAQ,CAAC,UAAU,CAAC,KAAK,IAAI,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,QAAQ,CAAC,CAAC,CAAC;AACtH,CAAC;AAED,SAAS,uBAAuB,CAAC,UAA4B,EAAE,GAA0B;IACxF,MAAM,QAAQ,GAAG,UAAU,CAAC,QAAQ,CAAC;IACrC,IAAI,QAAQ,CAAC,KAAK,KAAK,KAAK,IAAI,QAAQ,CAAC,KAAK,KAAK,GAAG,CAAC,KAAK,EAAE,CAAC;QAC9D,OAAO,oBAAoB,CAAC,wBAAwB,EAAE,qDAAqD,CAAC,CAAC;IAC9G,CAAC;IACD,IACC,QAAQ,CAAC,KAAK,KAAK,OAAO;QAC1B,CAAC,QAAQ,CAAC,KAAK,KAAK,GAAG,CAAC,KAAK,IAAI,QAAQ,CAAC,OAAO,KAAK,GAAG,CAAC,OAAO,IAAI,QAAQ,CAAC,SAAS,KAAK,GAAG,CAAC,SAAS,CAAC,EACzG,CAAC;QACF,OAAO,oBAAoB,CAAC,wBAAwB,EAAE,+DAA+D,CAAC,CAAC;IACxH,CAAC;IACD,OAAO,SAAS,CAAC;AAClB,CAAC;AAED,SAAS,YAAY,CACpB,SAA6B,EAC7B,MAA+B,EAC/B,GAA0B;IAE1B,IAAI,SAAS,CAAC,KAAK,KAAK,OAAO,EAAE,CAAC;QACjC,OAAO,EAAE,KAAK,EAAE,OAAO,EAAE,KAAK,EAAE,GAAG,CAAC,KAAK,EAAE,OAAO,EAAE,GAAG,CAAC,OAAO,EAAE,SAAS,EAAE,GAAG,CAAC,SAAS,EAAE,CAAC;IAC7F,CAAC;IACD,IAAI,SAAS,CAAC,KAAK,KAAK,KAAK;QAAE,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,KAAK,EAAE,GAAG,CAAC,KAAK,EAAE,CAAC;IACzE,IAAI,MAAM,CAAC,KAAK,KAAK,UAAU;QAAE,MAAM,IAAI,KAAK,CAAC,gDAAgD,CAAC,CAAC;IACnG,OAAO;QACN,KAAK,EAAE,UAAU;QACjB,SAAS,EAAE,MAAM,CAAC,SAAS;QAC3B,GAAG,CAAC,MAAM,CAAC,kBAAkB,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,kBAAkB,EAAE,MAAM,CAAC,kBAAkB,EAAE,CAAC;KACrG,CAAC;AACH,CAAC;AAED,SAAS,uBAAuB,CAAC,SAAiB;IAGjD,IAAI,OAAO,GAAG,SAAS,CAAC;IACxB,OAAO,IAAI,EAAE,CAAC;QACb,IAAI,CAAC;YACJ,EAAE,CAAC,SAAS,CAAC,OAAO,CAAC,CAAC;YACtB,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,WAAW,EAAE,OAAO,EAAE,QAAQ,EAAE,EAAE,CAAC,YAAY,CAAC,OAAO,CAAC,EAAE,CAAC;QAC/E,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YAChB,IAAK,KAA+B,CAAC,IAAI,KAAK,QAAQ;gBAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,CAAC;YAC7E,MAAM,MAAM,GAAG,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC;YACrC,IAAI,MAAM,KAAK,OAAO;gBAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,CAAC;YAC7C,OAAO,GAAG,MAAM,CAAC;QAClB,CAAC;IACF,CAAC;AACF,CAAC;AAED,SAAS,qBAAqB,CAC7B,IAAY,EACZ,cAAsB,EACtB,MAAkB,EAClB,kBAA0B;IAE1B,IAAI,QAAgB,CAAC;IACrB,IAAI,CAAC;QACJ,QAAQ,GAAG,EAAE,CAAC,YAAY,CAAC,IAAI,CAAC,CAAC;QACjC,IAAI,CAAC,EAAE,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC,WAAW,EAAE;YAAE,MAAM,IAAI,KAAK,CAAC,eAAe,CAAC,CAAC;IAC5E,CAAC;IAAC,MAAM,CAAC;QACR,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,WAAW,CAAC,0CAA0C,EAAE,kBAAkB,CAAC,EAAE,CAAC;IAC1G,CAAC;IACD,MAAM,SAAS,GAAG,cAAc,KAAK,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,QAAQ,EAAE,GAAG,cAAc,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC;IAC1G,IAAI,CAAC,QAAQ,CAAC,QAAQ,EAAE,SAAS,CAAC,EAAE,CAAC;QACpC,OAAO;YACN,EAAE,EAAE,KAAK;YACT,KAAK,EAAE,oBAAoB,CAAC,kBAAkB,EAAE,gDAAgD,EAAE;gBACjG,kBAAkB;aAClB,CAAC;SACF,CAAC;IACH,CAAC;IAED,IAAI,MAAM,KAAK,aAAa,IAAI,MAAM,KAAK,kBAAkB,EAAE,CAAC;QAC/D,IAAI,CAAC;YACJ,EAAE,CAAC,SAAS,CAAC,SAAS,CAAC,CAAC;YACxB,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,WAAW,CAAC,gDAAgD,EAAE,kBAAkB,CAAC,EAAE,CAAC;QAChH,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YAChB,IAAK,KAA+B,CAAC,IAAI,KAAK,QAAQ,EAAE,CAAC;gBACxD,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,WAAW,CAAC,0CAA0C,EAAE,kBAAkB,CAAC,EAAE,CAAC;YAC1G,CAAC;QACF,CAAC;QACD,MAAM,QAAQ,GAAG,uBAAuB,CAAC,IAAI,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC,CAAC;QAClE,IAAI,CAAC,QAAQ,CAAC,EAAE;YAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,WAAW,CAAC,0CAA0C,EAAE,kBAAkB,CAAC,EAAE,CAAC;QAC3H,IAAI,CAAC,QAAQ,CAAC,QAAQ,EAAE,QAAQ,CAAC,QAAQ,CAAC,EAAE,CAAC;YAC5C,OAAO;gBACN,EAAE,EAAE,KAAK;gBACT,KAAK,EAAE,oBAAoB,CAAC,kBAAkB,EAAE,oEAAoE,EAAE;oBACrH,kBAAkB;iBAClB,CAAC;aACF,CAAC;QACH,CAAC;QACD,IAAI,CAAC;YACJ,IAAI,CAAC,EAAE,CAAC,QAAQ,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC,WAAW,EAAE;gBAAE,MAAM,IAAI,KAAK,CAAC,eAAe,CAAC,CAAC;QACrF,CAAC;QAAC,MAAM,CAAC;YACR,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,WAAW,CAAC,yDAAyD,EAAE,kBAAkB,CAAC,EAAE,CAAC;QACzH,CAAC;QACD,MAAM,MAAM,GAAG,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC,WAAW,EAAE,SAAS,CAAC,CAAC;QAC9D,MAAM,YAAY,GAAG,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC;QAC7D,IAAI,CAAC,QAAQ,CAAC,QAAQ,EAAE,YAAY,CAAC,EAAE,CAAC;YACvC,OAAO;gBACN,EAAE,EAAE,KAAK;gBACT,KAAK,EAAE,oBAAoB,CAAC,kBAAkB,EAAE,gDAAgD,EAAE;oBACjG,kBAAkB;iBAClB,CAAC;aACF,CAAC;QACH,CAAC;QACD,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,YAAY,EAAE,CAAC;IACnC,CAAC;IAED,IAAI,UAAkB,CAAC;IACvB,IAAI,IAAc,CAAC;IACnB,IAAI,CAAC;QACJ,UAAU,GAAG,EAAE,CAAC,YAAY,CAAC,SAAS,CAAC,CAAC;QACxC,IAAI,GAAG,EAAE,CAAC,QAAQ,CAAC,UAAU,CAAC,CAAC;IAChC,CAAC;IAAC,MAAM,CAAC;QACR,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,WAAW,CAAC,6CAA6C,EAAE,kBAAkB,CAAC,EAAE,CAAC;IAC7G,CAAC;IACD,IAAI,CAAC,QAAQ,CAAC,QAAQ,EAAE,UAAU,CAAC,EAAE,CAAC;QACrC,OAAO;YACN,EAAE,EAAE,KAAK;YACT,KAAK,EAAE,oBAAoB,CAAC,kBAAkB,EAAE,oEAAoE,EAAE;gBACrH,kBAAkB;aAClB,CAAC;SACF,CAAC;IACH,CAAC;IACD,IAAI,MAAM,KAAK,eAAe,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,EAAE,CAAC;QAClD,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,WAAW,CAAC,2CAA2C,EAAE,kBAAkB,CAAC,EAAE,CAAC;IAC3G,CAAC;IACD,IAAI,MAAM,KAAK,oBAAoB,IAAI,CAAC,IAAI,CAAC,WAAW,EAAE,EAAE,CAAC;QAC5D,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,WAAW,CAAC,wCAAwC,EAAE,kBAAkB,CAAC,EAAE,CAAC;IACxG,CAAC;IACD,IAAI,MAAM,KAAK,YAAY,EAAE,CAAC;QAC7B,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE;YAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,WAAW,CAAC,+CAA+C,EAAE,kBAAkB,CAAC,EAAE,CAAC;QAClI,IAAI,CAAC;YACJ,EAAE,CAAC,UAAU,CAAC,UAAU,EAAE,EAAE,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC;QAC9C,CAAC;QAAC,MAAM,CAAC;YACR,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,WAAW,CAAC,qCAAqC,EAAE,kBAAkB,CAAC,EAAE,CAAC;QACrG,CAAC;IACF,CAAC;IACD,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,YAAY,EAAE,UAAU,EAAE,CAAC;AAC/C,CAAC;AAED,MAAM,UAAU,cAAc,CAC7B,KAAc,EACd,GAA0B,EAC1B,IAA6B;IAE7B,MAAM,MAAM,GAAG,eAAe,CAAC,KAAK,CAAC,CAAC;IACtC,IAAI,CAAC,MAAM,CAAC,EAAE;QAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,WAAW,CAAC,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,EAAE,CAAC;IACnF,MAAM,GAAG,GAAG,MAAM,CAAC,KAAK,CAAC;IACzB,MAAM,MAAM,GAAG,gBAAgB,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC;IAC1C,IAAI,CAAC,MAAM,CAAC,EAAE;QAAE,OAAO,MAAM,CAAC;IAC9B,MAAM,UAAU,GAAG,MAAM,CAAC,KAAK,CAAC;IAChC,MAAM,aAAa,GAAG,uBAAuB,CAAC,UAAU,EAAE,GAAG,CAAC,CAAC;IAC/D,IAAI,aAAa,KAAK,SAAS;QAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,aAAa,EAAE,CAAC;IAC5E,IAAI,CAAC,YAAY,CAAC,UAAU,CAAC,MAAM,EAAE,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC;QAClD,OAAO;YACN,EAAE,EAAE,KAAK;YACT,KAAK,EAAE,oBAAoB,CAAC,wBAAwB,EAAE,4DAA4D,EAAE;gBACnH,kBAAkB,EAAE,UAAU,CAAC,kBAAkB;aACjD,CAAC;SACF,CAAC;IACH,CAAC;IACD,MAAM,iBAAiB,GAAG,GAAG,CAAC,WAAW,IAAI,EAAE,KAAK,EAAE,OAAgB,EAAE,CAAC;IACzE,IAAI,YAAY,CAAC,iBAAiB,CAAC,GAAG,YAAY,CAAC,UAAU,CAAC,QAAQ,CAAC,IAAI,CAAC,MAAM,CAAC,MAAM,KAAK,QAAQ,IAAI,iBAAiB,CAAC,KAAK,KAAK,UAAU,CAAC,EAAE,CAAC;QACnJ,OAAO;YACN,EAAE,EAAE,KAAK;YACT,KAAK,EAAE,oBAAoB,CAAC,wBAAwB,EAAE,8DAA8D,EAAE;gBACrH,kBAAkB,EAAE,UAAU,CAAC,kBAAkB;aACjD,CAAC;SACF,CAAC;IACH,CAAC;IACD,MAAM,OAAO,GAAG,GAAG,CAAC,OAAO,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,EAAE,EAAE,IAAa,EAAE,KAAK,EAAE,EAAE,EAAE,CAAC,CAAC,CAAC,uBAAuB,CAAC,GAAG,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC;IAC1H,IAAI,CAAC,OAAO,CAAC,EAAE;QAAE,OAAO,OAAO,CAAC;IAChC,MAAM,QAAQ,GAAG,qBAAqB,CAAC,UAAU,CAAC,iBAAiB,EAAE,OAAO,CAAC,KAAK,EAAE,GAAG,CAAC,MAAM,EAAE,UAAU,CAAC,kBAAkB,CAAC,CAAC;IAC/H,IAAI,CAAC,QAAQ,CAAC,EAAE;QAAE,OAAO,QAAQ,CAAC;IAElC,MAAM,aAAa,GAAG,CAAC,UAAU,CAAC,aAAa,EAAE,OAAO,CAAC,KAAK,CAAC,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IAC5G,MAAM,KAAK,GAAG,GAAG,CAAC,oBAAoB,IAAI,MAAM,CAAC;IACjD,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,KAAK,CAAC,IAAI,KAAK,IAAI,CAAC,IAAI,KAAK,GAAG,OAAO,EAAE,CAAC;QACnE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,WAAW,CAAC,wCAAwC,EAAE,UAAU,CAAC,kBAAkB,CAAC,EAAE,CAAC;IACnH,CAAC;IACD,MAAM,GAAG,GAAG,GAAG,CAAC,GAAG,EAAE,EAAE,IAAI,IAAI,CAAC,GAAG,EAAE,CAAC;IACtC,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,GAAG,CAAC;QAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,WAAW,CAAC,+BAA+B,EAAE,UAAU,CAAC,kBAAkB,CAAC,EAAE,CAAC;IAEpI,MAAM,oBAAoB,GAAG,MAAM,CAAC,MAAM,CAAC;QAC1C,GAAG,UAAU;QACb,aAAa;QACb,iBAAiB,EAAE,QAAQ,CAAC,YAAY;QACxC,MAAM,EAAE,GAAG,CAAC,MAAyB;QACrC,QAAQ,EAAE,YAAY,CAAC,iBAAiB,EAAE,UAAU,CAAC,QAAQ,EAAE,GAAG,CAAC;KACnE,CAAC,CAAC;IACH,MAAM,QAAQ,GAAG,MAAM,CAAC,MAAM,CAAC;QAC9B,CAAC,iBAAiB,CAAC,EAAE,IAAa;QAClC,iBAAiB,EAAE,GAAG,CAAC,qBAAqB,EAAE,EAAE,IAAI,UAAU,EAAE;QAChE,SAAS,EAAE,IAAI,IAAI,CAAC,GAAG,GAAG,KAAK,CAAC,CAAC,WAAW,EAAE;QAC9C,UAAU,EAAE,oBAAoB;QAChC,cAAc,EAAE,OAAO,CAAC,KAAK;QAC7B,YAAY,EAAE,QAAQ,CAAC,YAAY;QACnC,MAAM,EAAE,GAAG,CAAC,MAAM;KAClB,CAA2B,CAAC;IAC7B,gBAAgB,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;IAC/B,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,QAAQ,EAAE,CAAC;AACtC,CAAC;AAED,MAAM,UAAU,iBAAiB,CAAC,KAAc;IAC/C,OAAO,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,IAAI,IAAI,gBAAgB,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;AACnF,CAAC"}

package/dist/resources/sandbox.d.ts

@@ -0,0 +1,72 @@
+import { type HostProbeTarget, type VerifiedSandboxHostApproval } from "./baseline.ts";
+import type { ConcreteSandboxPreparation, ExecutionOwner, HostBaselinePolicy, MutationPermit, PreparedSandboxPlan, ResolveOnlyPreparation, SandboxActivation, SandboxExecutionTarget, SandboxPlan, SandboxPolicyPlan, WorkspaceBackendCapabilities } from "./backend.ts";
+export interface ConcreteSandboxAdapter {
+    /**
+     * Prepare and verify this exact concrete policy using the native adapter.
+     * Merely echoing WorkspaceBackendCapabilities is not a valid implementation.
+     */
+    prepareConcreteSandbox(policy: Readonly<SandboxPolicyPlan>, owner: Readonly<ExecutionOwner>): Promise<ConcreteSandboxPreparation>;
+}
+export interface ResolveOnlyAdapter {
+    /** Performs path-only preparation and must return the explicit low-assurance tag. */
+    prepareResolveOnly(policy: Readonly<SandboxPolicyPlan>, owner: Readonly<ExecutionOwner>): Promise<ResolveOnlyPreparation>;
+}
+export interface SandboxPolicyFactoryOptions {
+    capabilities: WorkspaceBackendCapabilities;
+    executionTarget: SandboxExecutionTarget;
+    /** Exact process-local host approval minted by the trusted evidence loader.
+     * Required for every native target; clone/JSON/spread copies are rejected. */
+    sandboxApproval?: VerifiedSandboxHostApproval;
+    /** Independently observed live Host/OS/binary/backend tuple. Native execution
+     * requires an exact all-field match with the approved target. */
+    liveTarget?: HostProbeTarget;
+    /** Expected checked-in host-support baseline identity. */
+    hostSupportBaselineId?: string;
+    /** Complete trusted baseline policies. bodyDigest is recomputed from the
+     * canonical full body (excluding bodyDigest) during registration. */
+    baselineBindings: readonly HostBaselinePolicy[];
+    /** At least 256 bits of process-local host key material. */
+    key: Uint8Array;
+    keyId: string;
+    preparedPlanTtlMs?: number;
+    now?: () => Date;
+    concreteAdapter?: ConcreteSandboxAdapter;
+    resolveOnlyAdapter?: ResolveOnlyAdapter;
+    /** Host authorization decision made outside flow data. Default is deny. */
+    authorizeResolveOnly?: (owner: Readonly<ExecutionOwner>, policy: Readonly<SandboxPolicyPlan>) => boolean;
+}
+export interface SandboxActivationHooks {
+    /** Journal CAS: issued -> active. Required for every plan carrying permits. */
+    activateMutationPermits?: (permits: readonly MutationPermit[], owner: Readonly<ExecutionOwner>) => Promise<void>;
+    /** Always called after an activation callback was entered. */
+    settleMutationPermits?: (permits: readonly MutationPermit[], owner: Readonly<ExecutionOwner>, outcome: "completed" | "failed") => Promise<void>;
+}
+/** Build the path-free portable policy digest specified by the Workspace RFC. */
+export declare function computeSandboxPolicyDigest(plan: Omit<SandboxPolicyPlan, "policyDigest"> | SandboxPolicyPlan, backend: Pick<WorkspaceBackendCapabilities, "backendId" | "backendCapabilityVersion">): string;
+/** Canonical baseline body digest. The digest field itself is excluded; every
+ * other policy field, including identity/version, is bound. */
+export declare function computeHostBaselineBodyDigest(baseline: Omit<HostBaselinePolicy, "bodyDigest"> | HostBaselinePolicy): string;
+/** Content address the complete advertised backend capability record. */
+export declare function computeWorkspaceBackendCapabilitiesSha256(capabilities: WorkspaceBackendCapabilities): string;
+/** Attach the computed portable digest without changing the concrete plan inputs. */
+export declare function createSandboxPolicyPlan(plan: Omit<SandboxPolicyPlan, "policyDigest">, backend: Pick<WorkspaceBackendCapabilities, "backendId" | "backendCapabilityVersion">): SandboxPolicyPlan;
+/**
+ * Process-local policy factory.  It negotiates and authenticates plans, but delegates
+ * real native preparation to an adapter and therefore never pretends to be a sandbox.
+ */
+export declare class SandboxPolicyFactory {
+    #private;
+    constructor(options: SandboxPolicyFactoryOptions);
+    capabilities(): WorkspaceBackendCapabilities;
+    prepareSandbox(plan: SandboxPolicyPlan, owner: ExecutionOwner): Promise<PreparedSandboxPlan>;
+    sealSandbox(prepared: PreparedSandboxPlan, permits: readonly MutationPermit[]): SandboxPlan;
+    /**
+     * Activate exactly once and keep permit activation/settlement around the actual
+     * execution callback.  Callers must put native spawn/open inside `execute`.
+     */
+    activateOnce<T>(plan: SandboxPlan, hooks: SandboxActivationHooks, execute: (activation: SandboxActivation) => Promise<T>): Promise<T>;
+}
+declare function validateCapabilities(capabilities: WorkspaceBackendCapabilities): void;
+export declare const validateWorkspaceBackendCapabilities: typeof validateCapabilities;
+export {};
+//# sourceMappingURL=sandbox.d.ts.map

package/dist/resources/sandbox.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"sandbox.d.ts","sourceRoot":"","sources":["../../src/resources/sandbox.ts"],"names":[],"mappings":"AAMA,OAAO,EAIN,KAAK,eAAe,EACpB,KAAK,2BAA2B,EAChC,MAAM,eAAe,CAAC;AAIvB,OAAO,KAAK,EAGX,0BAA0B,EAE1B,cAAc,EACd,kBAAkB,EAClB,cAAc,EAEd,mBAAmB,EACnB,sBAAsB,EACtB,iBAAiB,EACjB,sBAAsB,EAEtB,WAAW,EACX,iBAAiB,EACjB,4BAA4B,EAC5B,MAAM,cAAc,CAAC;AAQtB,MAAM,WAAW,sBAAsB;IACtC;;;OAGG;IACH,sBAAsB,CACrB,MAAM,EAAE,QAAQ,CAAC,iBAAiB,CAAC,EACnC,KAAK,EAAE,QAAQ,CAAC,cAAc,CAAC,GAC7B,OAAO,CAAC,0BAA0B,CAAC,CAAC;CACvC;AAED,MAAM,WAAW,kBAAkB;IAClC,qFAAqF;IACrF,kBAAkB,CACjB,MAAM,EAAE,QAAQ,CAAC,iBAAiB,CAAC,EACnC,KAAK,EAAE,QAAQ,CAAC,cAAc,CAAC,GAC7B,OAAO,CAAC,sBAAsB,CAAC,CAAC;CACnC;AAED,MAAM,WAAW,2BAA2B;IAC3C,YAAY,EAAE,4BAA4B,CAAC;IAC3C,eAAe,EAAE,sBAAsB,CAAC;IACxC;kFAC8E;IAC9E,eAAe,CAAC,EAAE,2BAA2B,CAAC;IAC9C;qEACiE;IACjE,UAAU,CAAC,EAAE,eAAe,CAAC;IAC7B,0DAA0D;IAC1D,qBAAqB,CAAC,EAAE,MAAM,CAAC;IAC/B;yEACqE;IACrE,gBAAgB,EAAE,SAAS,kBAAkB,EAAE,CAAC;IAChD,4DAA4D;IAC5D,GAAG,EAAE,UAAU,CAAC;IAChB,KAAK,EAAE,MAAM,CAAC;IACd,iBAAiB,CAAC,EAAE,MAAM,CAAC;IAC3B,GAAG,CAAC,EAAE,MAAM,IAAI,CAAC;IACjB,eAAe,CAAC,EAAE,sBAAsB,CAAC;IACzC,kBAAkB,CAAC,EAAE,kBAAkB,CAAC;IACxC,2EAA2E;IAC3E,oBAAoB,CAAC,EAAE,CACtB,KAAK,EAAE,QAAQ,CAAC,cAAc,CAAC,EAC/B,MAAM,EAAE,QAAQ,CAAC,iBAAiB,CAAC,KAC/B,OAAO,CAAC;CACb;AAED,MAAM,WAAW,sBAAsB;IACtC,+EAA+E;IAC/E,uBAAuB,CAAC,EAAE,CACzB,OAAO,EAAE,SAAS,cAAc,EAAE,EAClC,KAAK,EAAE,QAAQ,CAAC,cAAc,CAAC,KAC3B,OAAO,CAAC,IAAI,CAAC,CAAC;IACnB,8DAA8D;IAC9D,qBAAqB,CAAC,EAAE,CACvB,OAAO,EAAE,SAAS,cAAc,EAAE,EAClC,KAAK,EAAE,QAAQ,CAAC,cAAc,CAAC,EAC/B,OAAO,EAAE,WAAW,GAAG,QAAQ,KAC3B,OAAO,CAAC,IAAI,CAAC,CAAC;CACnB;AAID,iFAAiF;AACjF,wBAAgB,0BAA0B,CACzC,IAAI,EAAE,IAAI,CAAC,iBAAiB,EAAE,cAAc,CAAC,GAAG,iBAAiB,EACjE,OAAO,EAAE,IAAI,CAAC,4BAA4B,EAAE,WAAW,GAAG,0BAA0B,CAAC,GACnF,MAAM,CAwCR;AAED;+DAC+D;AAC/D,wBAAgB,6BAA6B,CAC5C,QAAQ,EAAE,IAAI,CAAC,kBAAkB,EAAE,YAAY,CAAC,GAAG,kBAAkB,GACnE,MAAM,CAGR;AAED,yEAAyE;AACzE,wBAAgB,yCAAyC,CACxD,YAAY,EAAE,4BAA4B,GACxC,MAAM,CAGR;AAED,qFAAqF;AACrF,wBAAgB,uBAAuB,CACtC,IAAI,EAAE,IAAI,CAAC,iBAAiB,EAAE,cAAc,CAAC,EAC7C,OAAO,EAAE,IAAI,CAAC,4BAA4B,EAAE,WAAW,GAAG,0BAA0B,CAAC,GACnF,iBAAiB,CAKnB;AAED;;;GAGG;AACH,qBAAa,oBAAoB;;IAQhC,YAAY,OAAO,EAAE,2BAA2B,EAyD/C;IAED,YAAY,IAAI,4BAA4B,CAE3C;IAEK,cAAc,CAAC,IAAI,EAAE,iBAAiB,EAAE,KAAK,EAAE,cAAc,GAAG,OAAO,CAAC,mBAAmB,CAAC,CAwEjG;IAED,WAAW,CAAC,QAAQ,EAAE,mBAAmB,EAAE,OAAO,EAAE,SAAS,cAAc,EAAE,GAAG,WAAW,CAwB1F;IAED;;;OAGG;IACG,YAAY,CAAC,CAAC,EACnB,IAAI,EAAE,WAAW,EACjB,KAAK,EAAE,sBAAsB,EAC7B,OAAO,EAAE,CAAC,UAAU,EAAE,iBAAiB,KAAK,OAAO,CAAC,CAAC,CAAC,GACpD,OAAO,CAAC,CAAC,CAAC,CAiDZ;CA4GD;AAyaD,iBAAS,oBAAoB,CAAC,YAAY,EAAE,4BAA4B,GAAG,IAAI,CAE9E;AAuMD,eAAO,MAAM,oCAAoC,6BAAuB,CAAC"}