샌드박스와 격리

1// src/utils/sandbox/sandbox-adapter.ts — 설정 → 샌드박스 매핑
2 
3import {
4  SandboxManager as BaseSandboxManager,
5  SandboxRuntimeConfigSchema,
6  SandboxViolationStore,
7  type SandboxRuntimeConfig,
8  type FsWriteRestrictionConfig,
9  type NetworkRestrictionConfig,
10} from '@anthropic-ai/sandbox-runtime'
11 
12// 권한 규칙 → FS 제한으로 변환
13// allow: ["FileEdit(src/**/*.ts)"]  →  src/**/*.ts 쓰기 허용
14// deny:  ["FileEdit(.env)"]         →  .env 쓰기 차단💡
15function convertPermissionsToFsRestrictions(
16  settings: SettingsJson
17): FsWriteRestrictionConfig {
18  const allowedPaths: string[] = []
19  const deniedPaths: string[] = []
20 
21  for (const rule of settings.permissions?.allow ?? []) {
22    const match = rule.match(/^FileEdit\((.+)\)$/)
23    if (match) allowedPaths.push(match[1])
24  }
25  for (const rule of settings.permissions?.deny ?? []) {
26    const match = rule.match(/^FileEdit\((.+)\)$/)
27    if (match) deniedPaths.push(match[1])
28  }
29 
30  return { allowedPaths, deniedPaths }
31}