zelari-code 2.15.0 → 2.16.0

package/dist/cli/tools/execProcess.js

@@ -17,15 +17,24 @@
  *  - the shell blocklist still runs on the joined program+argv as
  *    defense-in-depth against destructive payloads.
  *
+ * v2.17 (t28, Pilastro A): the spawn goes through the osJail choke-point
+ * {@link spawnJailed} — NO direct child_process spawn remains on this path
+ * (grep-gated by scripts/verify-os-jail.mjs). Under the active jail the
+ * child gets an allowlisted env only; a missing backend with
+ * ZELARI_OS_JAIL=required DENIES the tool (typed `[jail]` error) and with
+ * `advisory` runs unjailed with a visible warning on the result. The
+ * network posture comes from the SAME resourceClaims decision as the
+ * permission layer (hosts whose claim resolved to `allow`).
+ *
  * Windows note: direct spawn like the bash tool's win32 branch — plain .exe
  * binaries on PATH work; `.cmd`/`.bat` shims may need the full path (no
  * shell indirection exists here to resolve them).
  */
-import { spawn } from 'node:child_process';
 import { z } from 'zod';
 import { typedErr, typedOk } from '@zelari/core/harness/tools/toolTypes';
 import { findBlockedReason } from '../safety/shellBlocklist.js';
 import { resolveSandboxedPath, SandboxViolationError } from '../safety/sandboxPath.js';
+import { buildJailSpec, spawnJailed } from '../safety/osJail.js';
 export const execProcessInputSchema = z.object({
     /** Program to execute: bare name resolved via PATH, or an absolute path. */
     program: z.string().min(1),
@@ -38,7 +47,10 @@ export const execProcessInputSchema = z.object({
 });
 /** Per-stream output cap — same budget as the bash tool. */
 const MAX_STREAM_CHARS = 1024 * 1024;
-export function createExecProcessTool(root) {
+export function createExecProcessTool(root, opts = {}) {
+    // The spec is per-registry (root is constant); only the network posture
+    // is narrowed per invocation from the claims verdict.
+    const baseSpec = buildJailSpec({ root });
     return {
         name: 'exec_process',
         description: 'Execute ONE program with structured arguments WITHOUT shell interpolation: no pipes, globs, variable expansion or quoting pitfalls — exactly the argv you pass is executed. ' +
@@ -68,21 +80,30 @@ export function createExecProcessTool(root) {
             }
             return new Promise((resolve) => {
                 const start = Date.now();
-                let child;
-                try {
-                    // Direct spawn, shell:false — argv array reaches the OS untouched.
-                    child = spawn(input.program, argv, {
-                        cwd,
-                        signal: ctx?.signal,
-                        shell: false,
-                        env: { ...process.env, CI: process.env.CI ?? '1' },
-                        stdio: ['ignore', 'pipe', 'pipe'], // non-interactive by construction
-                    });
+                // v2.17 (t28): THE choke-point. Deny/notice/fail are handled below;
+                // this path never touches child_process directly.
+                const spec = { ...baseSpec, network: opts.resolveNetwork?.(input) ?? baseSpec.network };
+                const res = spawnJailed(spec, {
+                    program: input.program,
+                    argv,
+                    cwd,
+                    signal: ctx?.signal,
+                    env: process.env,
+                    envExtras: { CI: process.env.CI ?? '1' },
+                });
+                if (res.outcome === 'denied') {
+                    resolve(typedErr(res.reason));
+                    return;
                 }
-                catch (err) {
-                    resolve(typedErr(`exec_process could not launch ${input.program}: ${err instanceof Error ? err.message : String(err)}`));
+                if (res.outcome === 'failed') {
+                    resolve(typedErr(`exec_process could not launch ${input.program}: ${res.reason}`));
                     return;
                 }
+                // Visible fail-open (advisory): the notice rides on the result meta.
+                const meta = res.notice
+                    ? { status: 'complete', warnings: [`os-jail: ${res.notice}`] }
+                    : undefined;
+                const child = res.child;
                 let stdout = '';
                 let stderr = '';
                 child.stdout?.on('data', (d) => {
@@ -112,7 +133,7 @@ export function createExecProcessTool(root) {
                         stdout: stdout.slice(0, MAX_STREAM_CHARS),
                         stderr: stderr.slice(0, MAX_STREAM_CHARS),
                         durationMs: Date.now() - start,
-                    }));
+                    }, meta));
                 });
             });
         },

package/dist/cli/tools/execProcess.js.map

@@ -1 +1 @@
-{"version":3,"file":"execProcess.js","sourceRoot":"","sources":["../../../src/cli/tools/execProcess.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;GAsBG;AAEH,OAAO,EAAE,KAAK,EAAE,MAAM,oBAAoB,CAAC;AAC3C,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,EAAE,QAAQ,EAAE,OAAO,EAAuB,MAAM,sCAAsC,CAAC;AAC9F,OAAO,EAAE,iBAAiB,EAAE,MAAM,6BAA6B,CAAC;AAChE,OAAO,EAAE,oBAAoB,EAAE,qBAAqB,EAAE,MAAM,0BAA0B,CAAC;AAEvF,MAAM,CAAC,MAAM,sBAAsB,GAAG,CAAC,CAAC,MAAM,CAAC;IAC7C,4EAA4E;IAC5E,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IAC1B,gEAAgE;IAChE,IAAI,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,QAAQ,EAAE;IACpC,8EAA8E;IAC9E,GAAG,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAC1B,qEAAqE;IACrE,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,OAAO,CAAC,MAAM,CAAC;CACpE,CAAC,CAAC;AAYH,4DAA4D;AAC5D,MAAM,gBAAgB,GAAG,IAAI,GAAG,IAAI,CAAC;AAErC,MAAM,UAAU,qBAAqB,CAAC,IAAY;IAChD,OAAO;QACL,IAAI,EAAE,cAAc;QACpB,WAAW,EACT,8KAA8K;YAC9K,kIAAkI;YAClI,gIAAgI;QAClI,WAAW,EAAE,CAAC,SAAS,CAAC;QACxB,UAAU,EAAE,OAAO;QACnB,SAAS,EAAE,MAAM;QACjB,WAAW,EAAE,sBAAsB;QACnC,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,GAAG,EAAE,EAAE;YAC5B,MAAM,IAAI,GAAG,KAAK,CAAC,IAAI,IAAI,EAAE,CAAC;YAC9B,0EAA0E;YAC1E,wEAAwE;YACxE,MAAM,OAAO,GAAG,iBAAiB,CAAC,CAAC,KAAK,CAAC,OAAO,EAAE,GAAG,IAAI,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC;YACtE,IAAI,OAAO,EAAE,CAAC;gBACZ,OAAO,QAAQ,CAAC,yCAAyC,OAAO,CAAC,MAAM,MAAM,OAAO,CAAC,OAAO,EAAE,CAAC,CAAC;YAClG,CAAC;YACD,IAAI,GAAW,CAAC;YAChB,IAAI,CAAC;gBACH,mEAAmE;gBACnE,iEAAiE;gBACjE,GAAG,GAAG,oBAAoB,CAAC,KAAK,CAAC,GAAG,IAAI,GAAG,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC;YACzD,CAAC;YAAC,OAAO,GAAG,EAAE,CAAC;gBACb,MAAM,GAAG,GAAG,GAAG,YAAY,qBAAqB,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;gBAC7E,OAAO,QAAQ,CAAC,aAAa,GAAG,EAAE,CAAC,CAAC;YACtC,CAAC;YACD,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,EAAE;gBAC7B,MAAM,KAAK,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;gBACzB,IAAI,KAA+B,CAAC;gBACpC,IAAI,CAAC;oBACH,mEAAmE;oBACnE,KAAK,GAAG,KAAK,CAAC,KAAK,CAAC,OAAO,EAAE,IAAI,EAAE;wBACjC,GAAG;wBACH,MAAM,EAAE,GAAG,EAAE,MAAM;wBACnB,KAAK,EAAE,KAAK;wBACZ,GAAG,EAAE,EAAE,GAAG,OAAO,CAAC,GAAG,EAAE,EAAE,EAAE,OAAO,CAAC,GAAG,CAAC,EAAE,IAAI,GAAG,EAAE;wBAClD,KAAK,EAAE,CAAC,QAAQ,EAAE,MAAM,EAAE,MAAM,CAAC,EAAE,kCAAkC;qBACtE,CAAC,CAAC;gBACL,CAAC;gBAAC,OAAO,GAAG,EAAE,CAAC;oBACb,OAAO,CAAC,QAAQ,CAAC,iCAAiC,KAAK,CAAC,OAAO,KAAK,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,CAAC;oBACzH,OAAO;gBACT,CAAC;gBACD,IAAI,MAAM,GAAG,EAAE,CAAC;gBAChB,IAAI,MAAM,GAAG,EAAE,CAAC;gBAChB,KAAK,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,EAAE,CAAC,CAAS,EAAE,EAAE;oBACrC,IAAI,MAAM,CAAC,MAAM,GAAG,gBAAgB;wBAAE,MAAM,IAAI,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;gBACrE,CAAC,CAAC,CAAC;gBACH,KAAK,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,EAAE,CAAC,CAAS,EAAE,EAAE;oBACrC,IAAI,MAAM,CAAC,MAAM,GAAG,gBAAgB;wBAAE,MAAM,IAAI,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;gBACrE,CAAC,CAAC,CAAC;gBACH,oEAAoE;gBACpE,iEAAiE;gBACjE,2BAA2B;gBAC3B,MAAM,SAAS,GAAG,OAAO,KAAK,CAAC,SAAS,KAAK,QAAQ,IAAI,KAAK,CAAC,SAAS,GAAG,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC,CAAC,MAAM,CAAC;gBACxG,MAAM,KAAK,GAAG,UAAU,CAAC,GAAG,EAAE;oBAC5B,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;oBACtB,OAAO,CACL,QAAQ,CACN,gCAAgC,SAAS,eAAe,CAAC,KAAK,CAAC,OAAO,EAAE,GAAG,IAAI,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAC7F,CACF,CAAC;gBACJ,CAAC,EAAE,SAAS,CAAC,CAAC;gBACd,KAAK,CAAC,EAAE,CAAC,OAAO,EAAE,CAAC,GAAG,EAAE,EAAE;oBACxB,YAAY,CAAC,KAAK,CAAC,CAAC;oBACpB,OAAO,CAAC,QAAQ,CAAC,iCAAiC,KAAK,CAAC,OAAO,KAAK,GAAG,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC;gBACtF,CAAC,CAAC,CAAC;gBACH,KAAK,CAAC,EAAE,CAAC,OAAO,EAAE,CAAC,IAAI,EAAE,EAAE;oBACzB,YAAY,CAAC,KAAK,CAAC,CAAC;oBACpB,OAAO,CACL,OAAO,CAAC;wBACN,QAAQ,EAAE,IAAI,IAAI,CAAC,CAAC;wBACpB,MAAM,EAAE,MAAM,CAAC,KAAK,CAAC,CAAC,EAAE,gBAAgB,CAAC;wBACzC,MAAM,EAAE,MAAM,CAAC,KAAK,CAAC,CAAC,EAAE,gBAAgB,CAAC;wBACzC,UAAU,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,KAAK;qBAC/B,CAAC,CACH,CAAC;gBACJ,CAAC,CAAC,CAAC;YACL,CAAC,CAAC,CAAC;QACL,CAAC;KACF,CAAC;AACJ,CAAC"}
+{"version":3,"file":"execProcess.js","sourceRoot":"","sources":["../../../src/cli/tools/execProcess.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA+BG;AAEH,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,EAAE,QAAQ,EAAE,OAAO,EAA4C,MAAM,sCAAsC,CAAC;AACnH,OAAO,EAAE,iBAAiB,EAAE,MAAM,6BAA6B,CAAC;AAChE,OAAO,EAAE,oBAAoB,EAAE,qBAAqB,EAAE,MAAM,0BAA0B,CAAC;AACvF,OAAO,EAAE,aAAa,EAA6B,WAAW,EAAoB,MAAM,qBAAqB,CAAC;AAE9G,MAAM,CAAC,MAAM,sBAAsB,GAAG,CAAC,CAAC,MAAM,CAAC;IAC7C,4EAA4E;IAC5E,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IAC1B,gEAAgE;IAChE,IAAI,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,QAAQ,EAAE;IACpC,8EAA8E;IAC9E,GAAG,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAC1B,qEAAqE;IACrE,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,OAAO,CAAC,MAAM,CAAC;CACpE,CAAC,CAAC;AAYH,4DAA4D;AAC5D,MAAM,gBAAgB,GAAG,IAAI,GAAG,IAAI,CAAC;AAWrC,MAAM,UAAU,qBAAqB,CACnC,IAAY,EACZ,OAA+B,EAAE;IAEjC,wEAAwE;IACxE,sDAAsD;IACtD,MAAM,QAAQ,GAAG,aAAa,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC;IACzC,OAAO;QACL,IAAI,EAAE,cAAc;QACpB,WAAW,EACT,8KAA8K;YAC9K,kIAAkI;YAClI,gIAAgI;QAClI,WAAW,EAAE,CAAC,SAAS,CAAC;QACxB,UAAU,EAAE,OAAO;QACnB,SAAS,EAAE,MAAM;QACjB,WAAW,EAAE,sBAAsB;QACnC,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,GAAG,EAAE,EAAE;YAC5B,MAAM,IAAI,GAAG,KAAK,CAAC,IAAI,IAAI,EAAE,CAAC;YAC9B,0EAA0E;YAC1E,wEAAwE;YACxE,MAAM,OAAO,GAAG,iBAAiB,CAAC,CAAC,KAAK,CAAC,OAAO,EAAE,GAAG,IAAI,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC;YACtE,IAAI,OAAO,EAAE,CAAC;gBACZ,OAAO,QAAQ,CAAC,yCAAyC,OAAO,CAAC,MAAM,MAAM,OAAO,CAAC,OAAO,EAAE,CAAC,CAAC;YAClG,CAAC;YACD,IAAI,GAAW,CAAC;YAChB,IAAI,CAAC;gBACH,mEAAmE;gBACnE,iEAAiE;gBACjE,GAAG,GAAG,oBAAoB,CAAC,KAAK,CAAC,GAAG,IAAI,GAAG,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC;YACzD,CAAC;YAAC,OAAO,GAAG,EAAE,CAAC;gBACb,MAAM,GAAG,GAAG,GAAG,YAAY,qBAAqB,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;gBAC7E,OAAO,QAAQ,CAAC,aAAa,GAAG,EAAE,CAAC,CAAC;YACtC,CAAC;YACD,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,EAAE;gBAC7B,MAAM,KAAK,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;gBACzB,oEAAoE;gBACpE,kDAAkD;gBAClD,MAAM,IAAI,GAAG,EAAE,GAAG,QAAQ,EAAE,OAAO,EAAE,IAAI,CAAC,cAAc,EAAE,CAAC,KAAK,CAAC,IAAI,QAAQ,CAAC,OAAO,EAAE,CAAC;gBACxF,MAAM,GAAG,GAAG,WAAW,CAAC,IAAI,EAAE;oBAC5B,OAAO,EAAE,KAAK,CAAC,OAAO;oBACtB,IAAI;oBACJ,GAAG;oBACH,MAAM,EAAE,GAAG,EAAE,MAAM;oBACnB,GAAG,EAAE,OAAO,CAAC,GAAG;oBAChB,SAAS,EAAE,EAAE,EAAE,EAAE,OAAO,CAAC,GAAG,CAAC,EAAE,IAAI,GAAG,EAAE;iBACzC,CAAC,CAAC;gBACH,IAAI,GAAG,CAAC,OAAO,KAAK,QAAQ,EAAE,CAAC;oBAC7B,OAAO,CAAC,QAAQ,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC;oBAC9B,OAAO;gBACT,CAAC;gBACD,IAAI,GAAG,CAAC,OAAO,KAAK,QAAQ,EAAE,CAAC;oBAC7B,OAAO,CAAC,QAAQ,CAAC,iCAAiC,KAAK,CAAC,OAAO,KAAK,GAAG,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC;oBACnF,OAAO;gBACT,CAAC;gBACD,qEAAqE;gBACrE,MAAM,IAAI,GAA+B,GAAG,CAAC,MAAM;oBACjD,CAAC,CAAC,EAAE,MAAM,EAAE,UAAU,EAAE,QAAQ,EAAE,CAAC,YAAY,GAAG,CAAC,MAAM,EAAE,CAAC,EAAE;oBAC9D,CAAC,CAAC,SAAS,CAAC;gBACd,MAAM,KAAK,GAAG,GAAG,CAAC,KAAK,CAAC;gBACxB,IAAI,MAAM,GAAG,EAAE,CAAC;gBAChB,IAAI,MAAM,GAAG,EAAE,CAAC;gBAChB,KAAK,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,EAAE,CAAC,CAAS,EAAE,EAAE;oBACrC,IAAI,MAAM,CAAC,MAAM,GAAG,gBAAgB;wBAAE,MAAM,IAAI,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;gBACrE,CAAC,CAAC,CAAC;gBACH,KAAK,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,EAAE,CAAC,CAAS,EAAE,EAAE;oBACrC,IAAI,MAAM,CAAC,MAAM,GAAG,gBAAgB;wBAAE,MAAM,IAAI,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;gBACrE,CAAC,CAAC,CAAC;gBACH,oEAAoE;gBACpE,iEAAiE;gBACjE,2BAA2B;gBAC3B,MAAM,SAAS,GAAG,OAAO,KAAK,CAAC,SAAS,KAAK,QAAQ,IAAI,KAAK,CAAC,SAAS,GAAG,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC,CAAC,MAAM,CAAC;gBACxG,MAAM,KAAK,GAAG,UAAU,CAAC,GAAG,EAAE;oBAC5B,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;oBACtB,OAAO,CACL,QAAQ,CACN,gCAAgC,SAAS,eAAe,CAAC,KAAK,CAAC,OAAO,EAAE,GAAG,IAAI,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAC7F,CACF,CAAC;gBACJ,CAAC,EAAE,SAAS,CAAC,CAAC;gBACd,KAAK,CAAC,EAAE,CAAC,OAAO,EAAE,CAAC,GAAG,EAAE,EAAE;oBACxB,YAAY,CAAC,KAAK,CAAC,CAAC;oBACpB,OAAO,CAAC,QAAQ,CAAC,iCAAiC,KAAK,CAAC,OAAO,KAAK,GAAG,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC;gBACtF,CAAC,CAAC,CAAC;gBACH,KAAK,CAAC,EAAE,CAAC,OAAO,EAAE,CAAC,IAAI,EAAE,EAAE;oBACzB,YAAY,CAAC,KAAK,CAAC,CAAC;oBACpB,OAAO,CACL,OAAO,CACL;wBACE,QAAQ,EAAE,IAAI,IAAI,CAAC,CAAC;wBACpB,MAAM,EAAE,MAAM,CAAC,KAAK,CAAC,CAAC,EAAE,gBAAgB,CAAC;wBACzC,MAAM,EAAE,MAAM,CAAC,KAAK,CAAC,CAAC,EAAE,gBAAgB,CAAC;wBACzC,UAAU,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,KAAK;qBAC/B,EACD,IAAI,CACL,CACF,CAAC;gBACJ,CAAC,CAAC,CAAC;YACL,CAAC,CAAC,CAAC;QACL,CAAC;KACF,CAAC;AACJ,CAAC"}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "zelari-code",
-  "version": "2.15.0",
+  "version": "2.16.0",
   "description": "Zelari Code — AI Council coding agent CLI. Multi-agent orchestration (Caronte, Nettuno, Gerione, Plutone, Minosse, Lucifero) with slash commands, provider-agnostic LLM streaming, and self-update.",
   "author": "Anathema Studio <https://anathema-studio.com/>",
   "license": "Apache-2.0",
@@ -60,7 +60,7 @@
   },
   "devDependencies": {
     "@testing-library/react": "^16.3.2",
-    "@zelari/core": "2.15.0",
+    "@zelari/core": "2.16.0",
     "@types/node": "^25.3.0",
     "@types/react": "^19.0.10",
     "esbuild": "^0.25.0",