@capsule-run/sdk 0.2.2 → 0.3.1

package/README.md

@@ -0,0 +1,135 @@
+# capsule
+
+**A secure, durable runtime for agentic workflows**
+
+## Overview
+
+Capsule is a runtime for coordinating AI agent tasks in isolated environments. It is designed to handle long-running workflows, large-scale processing, autonomous decision-making securely, or even multi-agent systems.
+
+Each task runs inside its own WebAssembly sandbox, providing:
+
+- **Isolated execution**: Each task runs isolated from your host system
+- **Resource limits**: Set CPU, memory, and timeout limits per task
+- **Automatic retries**: Handle failures without manual intervention
+- **Lifecycle tracking**: Monitor which tasks are running, completed, or failed
+
+## Installation
+
+```bash
+npm install -g @capsule-run/cli
+npm install @capsule-run/sdk
+```
+
+## Quick Start
+
+Create `hello.ts`:
+
+```typescript
+import { task } from "@capsule-run/sdk";
+
+export const main = task({
+  name: "main",
+  compute: "LOW",
+  ram: "64MB"
+}, (): string => {
+  return "Hello from Capsule!";
+});
+```
+
+Run it:
+
+```bash
+capsule run hello.ts
+```
+
+## How It Works
+
+Simply use a wrapper function to define your tasks:
+
+```typescript
+import { task } from "@capsule-run/sdk";
+
+export const analyzeData = task({
+  name: "analyze_data",
+  compute: "MEDIUM",
+  ram: "512MB",
+  timeout: "30s",
+  maxRetries: 1
+}, (dataset: number[]): object => {
+  // Your code runs safely in a Wasm sandbox
+  return { processed: dataset.length, status: "complete" };
+});
+
+// The "main" task is required as the entrypoint
+export const main = task({
+    name: "main",
+    compute: "HIGH"
+}, () => {
+  return analyzeData([1, 2, 3, 4, 5]);
+});
+```
+
+When you run `capsule run main.ts`, your code is compiled into a WebAssembly module and executed in a dedicated sandbox.
+
+## Documentation
+
+### Task Configuration Options
+
+| Parameter | Description | Type | Default | Example |
+|-----------|-------------|------|---------|---------|
+| `name` | Task identifier | `string` | *required* | `"process_data"` |
+| `compute` | CPU level: `"LOW"`, `"MEDIUM"`, `"HIGH"` | `string` | `"MEDIUM"` | `"HIGH"` |
+| `ram` | Memory limit | `string` | unlimited | `"512MB"`, `"2GB"` |
+| `timeout` | Maximum execution time | `string` or `number` | unlimited | `"30s"`, `"5m"` |
+| `maxRetries` | Retry attempts on failure | `number` | `0` | `3` |
+| `allowedFiles` | Folders accessible in the sandbox | `string[]` | `[]` | `["./data", "./output"]` |
+
+### Compute Levels
+
+- **LOW**: Minimal allocation for lightweight tasks
+- **MEDIUM**: Balanced resources for typical workloads
+- **HIGH**: Maximum fuel for compute-intensive operations
+- **CUSTOM**: Specify exact fuel value (e.g., `compute="1000000"`)
+
+### File Access
+
+The entry point task (main) has access to the entire project directory. Sub-tasks have no filesystem access by default and must declare `allowedFiles` to access specific paths.
+
+Node.js built-ins like `fs` are not available in the WebAssembly sandbox. Instead, use the `files` API provided by the SDK:
+
+```typescript
+import { task, files } from "@capsule-run/sdk";
+
+export const restrictedWriter = task({
+    name: "restricted_writer",
+    allowedFiles: ["./output"]
+}, async () => {
+    await files.writeText("./output/result.txt", "result");
+});
+
+export const main = task({ name: "main" }, async () => {
+    restrictedWriter();
+    return await files.readText("./data/input.txt");
+});
+```
+
+Available methods:
+- `files.readText(path)` — Read file as string
+- `files.readBytes(path)` — Read file as `Uint8Array`
+- `files.writeText(path, content)` — Write string to file
+- `files.writeBytes(path, data)` — Write bytes to file
+- `files.list(path)` — List directory contents
+- `files.exists(path)` — Check if file exists
+
+## Compatibility
+
+✅ **Supported:**
+- npm packages and ES modules work
+
+⚠️ **Not yet supported:**
+- Node.js built-ins (`fs`, `path`, `os`) are not available in the sandbox
+
+## Links
+
+- [GitHub](https://github.com/mavdol/capsule)
+- [Issues](https://github.com/mavdol/capsule/issues)

package/dist/app.d.ts

@@ -11,6 +11,7 @@ export interface TaskConfig {
     ram?: string;
     timeout?: string;
     maxRetries?: number;
+    allowedFiles?: string[];
 }
 /**
  * Register a task function by name with its configuration.

package/dist/app.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"app.d.ts","sourceRoot":"","sources":["../src/app.ts"],"names":[],"mappings":"AAAA;;GAEG;AAEH,MAAM,WAAW,QAAQ,CAAC,CAAC,SAAS,CAAC,GAAG,IAAI,EAAE,GAAG,EAAE,KAAK,GAAG;IACzD,IAAI,EAAE,CAAC,CAAC;IACR,MAAM,EAAE,UAAU,CAAC;CACpB;AAED,MAAM,WAAW,UAAU;IACzB,IAAI,EAAE,MAAM,CAAC;IACb,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,UAAU,CAAC,EAAE,MAAM,CAAC;CACrB;AAID;;GAEG;AACH,wBAAgB,YAAY,CAAC,CAAC,SAAS,CAAC,GAAG,IAAI,EAAE,GAAG,EAAE,KAAK,GAAG,EAC5D,IAAI,EAAE,MAAM,EACZ,IAAI,EAAE,CAAC,EACP,MAAM,EAAE,UAAU,GACjB,IAAI,CAEN;AAED;;GAEG;AACH,wBAAgB,OAAO,CAAC,IAAI,EAAE,MAAM,GAAG,CAAC,CAAC,GAAG,IAAI,EAAE,GAAG,EAAE,KAAK,GAAG,CAAC,GAAG,SAAS,CAE3E;AAED;;GAEG;AACH,wBAAgB,aAAa,CAAC,IAAI,EAAE,MAAM,GAAG,UAAU,GAAG,SAAS,CAElE;AAED;;GAEG;AACH,wBAAgB,YAAY,IAAI,MAAM,EAAE,CAEvC;AAcD;;;;;GAKG;AACH,qBAAa,UAAU;IACrB;;;OAGG;IACG,GAAG,CAAC,QAAQ,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC;CAuC7C;AAED,eAAO,MAAM,OAAO,YAAmB,CAAC"}
+{"version":3,"file":"app.d.ts","sourceRoot":"","sources":["../src/app.ts"],"names":[],"mappings":"AAAA;;GAEG;AAEH,MAAM,WAAW,QAAQ,CAAC,CAAC,SAAS,CAAC,GAAG,IAAI,EAAE,GAAG,EAAE,KAAK,GAAG;IACzD,IAAI,EAAE,CAAC,CAAC;IACR,MAAM,EAAE,UAAU,CAAC;CACpB;AAED,MAAM,WAAW,UAAU;IACzB,IAAI,EAAE,MAAM,CAAC;IACb,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,YAAY,CAAC,EAAE,MAAM,EAAE,CAAC;CACzB;AAID;;GAEG;AACH,wBAAgB,YAAY,CAAC,CAAC,SAAS,CAAC,GAAG,IAAI,EAAE,GAAG,EAAE,KAAK,GAAG,EAC5D,IAAI,EAAE,MAAM,EACZ,IAAI,EAAE,CAAC,EACP,MAAM,EAAE,UAAU,GACjB,IAAI,CAEN;AAED;;GAEG;AACH,wBAAgB,OAAO,CAAC,IAAI,EAAE,MAAM,GAAG,CAAC,CAAC,GAAG,IAAI,EAAE,GAAG,EAAE,KAAK,GAAG,CAAC,GAAG,SAAS,CAE3E;AAED;;GAEG;AACH,wBAAgB,aAAa,CAAC,IAAI,EAAE,MAAM,GAAG,UAAU,GAAG,SAAS,CAElE;AAED;;GAEG;AACH,wBAAgB,YAAY,IAAI,MAAM,EAAE,CAEvC;AAQD;;;;;GAKG;AACH,qBAAa,UAAU;IACrB;;;OAGG;IACG,GAAG,CAAC,QAAQ,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC;CAuC7C;AAED,eAAO,MAAM,OAAO,YAAmB,CAAC"}

package/dist/app.js.map

@@ -1 +1 @@
-{"version":3,"file":"app.js","sourceRoot":"","sources":["../src/app.ts"],"names":[],"mappings":"AAAA;;GAEG;AAeH,MAAM,KAAK,GAA+B,IAAI,GAAG,EAAE,CAAC;AAEpD;;GAEG;AACH,MAAM,UAAU,YAAY,CAC1B,IAAY,EACZ,IAAO,EACP,MAAkB;IAElB,KAAK,CAAC,GAAG,CAAC,IAAI,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC,CAAC;AACpC,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,OAAO,CAAC,IAAY;IAClC,OAAO,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,IAAI,CAAC;AAC/B,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,aAAa,CAAC,IAAY;IACxC,OAAO,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,MAAM,CAAC;AACjC,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,YAAY;IAC1B,OAAO,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC,CAAC;AAClC,CAAC;AAcD;;;;;GAKG;AACH,MAAM,OAAO,UAAU;IACrB;;;OAGG;IACH,KAAK,CAAC,GAAG,CAAC,QAAgB;QACxB,IAAI,CAAC;YACH,MAAM,IAAI,GAAa,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC;YAC5C,MAAM,QAAQ,GAAG,IAAI,CAAC,SAAS,IAAI,MAAM,CAAC;YAC1C,MAAM,IAAI,GAAG,IAAI,CAAC,IAAI,IAAI,EAAE,CAAC;YAC7B,MAAM,MAAM,GAAG,IAAI,CAAC,MAAM,IAAI,EAAE,CAAC;YAEjC,IAAI,QAAQ,GAAG,OAAO,CAAC,QAAQ,CAAC,CAAC;YAEjC,IAAI,CAAC,QAAQ,IAAI,QAAQ,KAAK,MAAM,EAAE,CAAC;gBACrC,QAAQ,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC;YAC7B,CAAC;YAED,IAAI,CAAC,QAAQ,IAAI,KAAK,CAAC,IAAI,GAAG,CAAC,EAAE,CAAC;gBAChC,MAAM,aAAa,GAAG,KAAK,CAAC,IAAI,EAAE,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC;gBAChD,IAAI,aAAa,EAAE,CAAC;oBAClB,QAAQ,GAAG,OAAO,CAAC,aAAa,CAAC,CAAC;gBACpC,CAAC;YACH,CAAC;YAED,IAAI,CAAC,QAAQ,EAAE,CAAC;gBACd,MAAM,uDAAuD,YAAY,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;YAC3F,CAAC;YAED,MAAM,MAAM,GAAG,QAAQ,CAAC,GAAG,IAAI,EAAE,MAAM,CAAC,CAAC;YAEzC,IAAI,MAAM,YAAY,OAAO,EAAE,CAAC;gBAC9B,MAAM,WAAW,GAAG,MAAM,MAAM,CAAC;gBACjC,OAAO,IAAI,CAAC,SAAS,CAAC,EAAE,MAAM,EAAE,WAAW,IAAI,IAAI,EAAE,CAAC,CAAC;YACzD,CAAC;YAED,OAAO,IAAI,CAAC,SAAS,CAAC,EAAE,MAAM,EAAE,MAAM,IAAI,IAAI,EAAE,CAAC,CAAC;QACpD,CAAC;QAAC,OAAO,CAAC,EAAE,CAAC;YACX,MAAM,QAAQ,GAAG,CAAC,YAAY,KAAK;gBACjC,CAAC,CAAC,GAAG,CAAC,CAAC,OAAO,KAAK,CAAC,CAAC,KAAK,IAAI,EAAE,EAAE;gBAClC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC;YACd,MAAM,QAAQ,CAAC;QACjB,CAAC;IACH,CAAC;CACF;AAED,MAAM,CAAC,MAAM,OAAO,GAAG,IAAI,UAAU,EAAE,CAAC"}
+{"version":3,"file":"app.js","sourceRoot":"","sources":["../src/app.ts"],"names":[],"mappings":"AAAA;;GAEG;AAgBH,MAAM,KAAK,GAA+B,IAAI,GAAG,EAAE,CAAC;AAEpD;;GAEG;AACH,MAAM,UAAU,YAAY,CAC1B,IAAY,EACZ,IAAO,EACP,MAAkB;IAElB,KAAK,CAAC,GAAG,CAAC,IAAI,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC,CAAC;AACpC,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,OAAO,CAAC,IAAY;IAClC,OAAO,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,IAAI,CAAC;AAC/B,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,aAAa,CAAC,IAAY;IACxC,OAAO,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,MAAM,CAAC;AACjC,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,YAAY;IAC1B,OAAO,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC,CAAC;AAClC,CAAC;AAQD;;;;;GAKG;AACH,MAAM,OAAO,UAAU;IACrB;;;OAGG;IACH,KAAK,CAAC,GAAG,CAAC,QAAgB;QACxB,IAAI,CAAC;YACH,MAAM,IAAI,GAAa,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC;YAC5C,MAAM,QAAQ,GAAG,IAAI,CAAC,SAAS,IAAI,MAAM,CAAC;YAC1C,MAAM,IAAI,GAAG,IAAI,CAAC,IAAI,IAAI,EAAE,CAAC;YAC7B,MAAM,MAAM,GAAG,IAAI,CAAC,MAAM,IAAI,EAAE,CAAC;YAEjC,IAAI,QAAQ,GAAG,OAAO,CAAC,QAAQ,CAAC,CAAC;YAEjC,IAAI,CAAC,QAAQ,IAAI,QAAQ,KAAK,MAAM,EAAE,CAAC;gBACrC,QAAQ,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC;YAC7B,CAAC;YAED,IAAI,CAAC,QAAQ,IAAI,KAAK,CAAC,IAAI,GAAG,CAAC,EAAE,CAAC;gBAChC,MAAM,aAAa,GAAG,KAAK,CAAC,IAAI,EAAE,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC;gBAChD,IAAI,aAAa,EAAE,CAAC;oBAClB,QAAQ,GAAG,OAAO,CAAC,aAAa,CAAC,CAAC;gBACpC,CAAC;YACH,CAAC;YAED,IAAI,CAAC,QAAQ,EAAE,CAAC;gBACd,MAAM,uDAAuD,YAAY,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;YAC3F,CAAC;YAED,MAAM,MAAM,GAAG,QAAQ,CAAC,GAAG,IAAI,EAAE,MAAM,CAAC,CAAC;YAEzC,IAAI,MAAM,YAAY,OAAO,EAAE,CAAC;gBAC9B,MAAM,WAAW,GAAG,MAAM,MAAM,CAAC;gBACjC,OAAO,IAAI,CAAC,SAAS,CAAC,EAAE,MAAM,EAAE,WAAW,IAAI,IAAI,EAAE,CAAC,CAAC;YACzD,CAAC;YAED,OAAO,IAAI,CAAC,SAAS,CAAC,EAAE,MAAM,EAAE,MAAM,IAAI,IAAI,EAAE,CAAC,CAAC;QACpD,CAAC;QAAC,OAAO,CAAC,EAAE,CAAC;YACX,MAAM,QAAQ,GAAG,CAAC,YAAY,KAAK;gBACjC,CAAC,CAAC,GAAG,CAAC,CAAC,OAAO,KAAK,CAAC,CAAC,KAAK,IAAI,EAAE,EAAE;gBAClC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC;YACd,MAAM,QAAQ,CAAC;QACjB,CAAC;IACH,CAAC;CACF;AAED,MAAM,CAAC,MAAM,OAAO,GAAG,IAAI,UAAU,EAAE,CAAC"}

package/dist/files.d.ts

@@ -0,0 +1,46 @@
+/**
+ * Capsule Files API for WASM filesystem access.
+ */
+/**
+ * Read a file as text.
+ *
+ * @param path - The path to read.
+ * @returns A promise that resolves to a string containing the file contents.
+ */
+export declare function readText(path: string): Promise<string>;
+/**
+ * Read a file as bytes.
+ *
+ * @param path - The path to read.
+ * @returns A promise that resolves to a Uint8Array containing the file contents.
+ */
+export declare function readBytes(path: string): Promise<Uint8Array>;
+/**
+ * Write text content to a file.
+ *
+ * @param path - The path to write.
+ * @param content - The text content to write.
+ */
+export declare function writeText(path: string, content: string): Promise<void>;
+/**
+ * Write bytes to a file.
+ *
+ * @param path - The path to write.
+ * @param data - The bytes to write.
+ */
+export declare function writeBytes(path: string, data: Uint8Array): Promise<void>;
+/**
+ * List files/directories at a path.
+ *
+ * @param path - The path to list.
+ * @returns A promise that resolves to an array of strings representing the files and directories at the specified path.
+ */
+export declare function list(path?: string): Promise<string[]>;
+/**
+ * Check if a file or directory exists.
+ *
+ * @param path - The path to check.
+ * @returns A promise that resolves to a boolean indicating whether the file or directory exists.
+ */
+export declare function exists(path: string): Promise<boolean>;
+//# sourceMappingURL=files.d.ts.map

package/dist/files.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"files.d.ts","sourceRoot":"","sources":["../src/files.ts"],"names":[],"mappings":"AAAA;;GAEG;AAoFH;;;;;GAKG;AACH,wBAAsB,QAAQ,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,CAG5D;AAED;;;;;GAKG;AACH,wBAAsB,SAAS,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,UAAU,CAAC,CAkBjE;AAED;;;;;GAKG;AACH,wBAAsB,SAAS,CAAC,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAG5E;AAED;;;;;GAKG;AACH,wBAAsB,UAAU,CAAC,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,UAAU,GAAG,OAAO,CAAC,IAAI,CAAC,CAgB9E;AAED;;;;;GAKG;AACH,wBAAsB,IAAI,CAAC,IAAI,GAAE,MAAY,GAAG,OAAO,CAAC,MAAM,EAAE,CAAC,CA6BhE;AAED;;;;;GAKG;AACH,wBAAsB,MAAM,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC,CAe3D"}

package/dist/files.js

@@ -0,0 +1,177 @@
+/**
+ * Capsule Files API for WASM filesystem access.
+ */
+function getFsBindings() {
+    try {
+        const types = globalThis['wasi:filesystem/types'];
+        const preopens = globalThis['wasi:filesystem/preopens'];
+        if (types && preopens) {
+            return { types, preopens };
+        }
+    }
+    catch { }
+    return null;
+}
+function getPreopenedDirs() {
+    const fs = getFsBindings();
+    if (!fs)
+        return [];
+    try {
+        const dirs = fs.preopens.getDirectories();
+        return (dirs || []).map((entry) => ({
+            descriptor: entry[0],
+            guestPath: entry[1]
+        }));
+    }
+    catch {
+        return [];
+    }
+}
+function normalizePath(path) {
+    if (path.startsWith('./')) {
+        return path.slice(2);
+    }
+    return path;
+}
+function resolvePath(path) {
+    const preopens = getPreopenedDirs();
+    if (preopens.length === 0)
+        return null;
+    const normalizedPath = normalizePath(path);
+    for (const { descriptor, guestPath } of preopens) {
+        const normalizedGuest = normalizePath(guestPath);
+        if (normalizedGuest === '.' || normalizedGuest === '') {
+            return { dir: descriptor, relativePath: normalizedPath };
+        }
+        if (normalizedPath.startsWith(normalizedGuest + '/')) {
+            const relativePath = normalizedPath.slice(normalizedGuest.length + 1);
+            return { dir: descriptor, relativePath };
+        }
+        if (normalizedPath === normalizedGuest) {
+            return { dir: descriptor, relativePath: '.' };
+        }
+    }
+    return { dir: preopens[0].descriptor, relativePath: normalizedPath };
+}
+/**
+ * Read a file as text.
+ *
+ * @param path - The path to read.
+ * @returns A promise that resolves to a string containing the file contents.
+ */
+export async function readText(path) {
+    const bytes = await readBytes(path);
+    return new TextDecoder().decode(bytes);
+}
+/**
+ * Read a file as bytes.
+ *
+ * @param path - The path to read.
+ * @returns A promise that resolves to a Uint8Array containing the file contents.
+ */
+export async function readBytes(path) {
+    const resolved = resolvePath(path);
+    if (!resolved) {
+        throw new Error("Filesystem not available.");
+    }
+    try {
+        const pathFlags = { symlinkFollow: false };
+        const openFlags = {};
+        const descriptorFlags = { read: true };
+        const fd = resolved.dir.openAt(pathFlags, resolved.relativePath, openFlags, descriptorFlags);
+        const stat = fd.stat();
+        const [data] = fd.read(stat.size, BigInt(0));
+        return data;
+    }
+    catch (e) {
+        throw new Error(`Failed to read file '${path}': ${e}`);
+    }
+}
+/**
+ * Write text content to a file.
+ *
+ * @param path - The path to write.
+ * @param content - The text content to write.
+ */
+export async function writeText(path, content) {
+    const bytes = new TextEncoder().encode(content);
+    await writeBytes(path, bytes);
+}
+/**
+ * Write bytes to a file.
+ *
+ * @param path - The path to write.
+ * @param data - The bytes to write.
+ */
+export async function writeBytes(path, data) {
+    const resolved = resolvePath(path);
+    if (!resolved) {
+        throw new Error("Filesystem not available.");
+    }
+    try {
+        const pathFlags = { symlinkFollow: false };
+        const openFlags = { create: true, truncate: true };
+        const descriptorFlags = { write: true };
+        const fd = resolved.dir.openAt(pathFlags, resolved.relativePath, openFlags, descriptorFlags);
+        fd.write(data, BigInt(0));
+    }
+    catch (e) {
+        throw new Error(`Failed to write file '${path}': ${e}`);
+    }
+}
+/**
+ * List files/directories at a path.
+ *
+ * @param path - The path to list.
+ * @returns A promise that resolves to an array of strings representing the files and directories at the specified path.
+ */
+export async function list(path = ".") {
+    const resolved = resolvePath(path);
+    if (!resolved) {
+        throw new Error("Filesystem not available.");
+    }
+    try {
+        let targetDir = resolved.dir;
+        if (resolved.relativePath !== ".") {
+            const pathFlags = { symlinkFollow: false };
+            const openFlags = { directory: true };
+            const descriptorFlags = { read: true };
+            targetDir = resolved.dir.openAt(pathFlags, resolved.relativePath, openFlags, descriptorFlags);
+        }
+        const stream = targetDir.readDirectory();
+        const entries = [];
+        let entry;
+        while ((entry = stream.readDirectoryEntry()) !== undefined && entry !== null) {
+            if (entry.name) {
+                entries.push(entry.name);
+            }
+        }
+        return entries;
+    }
+    catch (e) {
+        throw new Error(`Failed to list directory '${path}': ${e}`);
+    }
+}
+/**
+ * Check if a file or directory exists.
+ *
+ * @param path - The path to check.
+ * @returns A promise that resolves to a boolean indicating whether the file or directory exists.
+ */
+export async function exists(path) {
+    const resolved = resolvePath(path);
+    if (!resolved) {
+        return false;
+    }
+    try {
+        const pathFlags = { symlinkFollow: false };
+        const openFlags = {};
+        const descriptorFlags = { read: true };
+        resolved.dir.openAt(pathFlags, resolved.relativePath, openFlags, descriptorFlags);
+        return true;
+    }
+    catch {
+        return false;
+    }
+}
+//# sourceMappingURL=files.js.map

package/dist/files.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"files.js","sourceRoot":"","sources":["../src/files.ts"],"names":[],"mappings":"AAAA;;GAEG;AAyBH,SAAS,aAAa;IACpB,IAAI,CAAC;QACH,MAAM,KAAK,GAAG,UAAU,CAAC,uBAAuB,CAAC,CAAC;QAClD,MAAM,QAAQ,GAAG,UAAU,CAAC,0BAA0B,CAAC,CAAC;QACxD,IAAI,KAAK,IAAI,QAAQ,EAAE,CAAC;YACtB,OAAO,EAAE,KAAK,EAAE,QAAQ,EAAE,CAAC;QAC7B,CAAC;IACH,CAAC;IAAC,MAAM,CAAC,CAAA,CAAC;IACV,OAAO,IAAI,CAAC;AACd,CAAC;AAED,SAAS,gBAAgB;IACvB,MAAM,EAAE,GAAG,aAAa,EAAE,CAAC;IAC3B,IAAI,CAAC,EAAE;QAAE,OAAO,EAAE,CAAC;IAEnB,IAAI,CAAC;QACH,MAAM,IAAI,GAAG,EAAE,CAAC,QAAQ,CAAC,cAAc,EAAE,CAAC;QAC1C,OAAO,CAAC,IAAI,IAAI,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,KAA2B,EAAE,EAAE,CAAC,CAAC;YACxD,UAAU,EAAE,KAAK,CAAC,CAAC,CAAC;YACpB,SAAS,EAAE,KAAK,CAAC,CAAC,CAAC;SACpB,CAAC,CAAC,CAAC;IACN,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,EAAE,CAAC;IACZ,CAAC;AACH,CAAC;AAED,SAAS,aAAa,CAAC,IAAY;IACjC,IAAI,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,EAAE,CAAC;QAC1B,OAAO,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;IACvB,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED,SAAS,WAAW,CAAC,IAAY;IAC/B,MAAM,QAAQ,GAAG,gBAAgB,EAAE,CAAC;IACpC,IAAI,QAAQ,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,IAAI,CAAC;IAEvC,MAAM,cAAc,GAAG,aAAa,CAAC,IAAI,CAAC,CAAC;IAE3C,KAAK,MAAM,EAAE,UAAU,EAAE,SAAS,EAAE,IAAI,QAAQ,EAAE,CAAC;QACjD,MAAM,eAAe,GAAG,aAAa,CAAC,SAAS,CAAC,CAAC;QAEjD,IAAI,eAAe,KAAK,GAAG,IAAI,eAAe,KAAK,EAAE,EAAE,CAAC;YACtD,OAAO,EAAE,GAAG,EAAE,UAAU,EAAE,YAAY,EAAE,cAAc,EAAE,CAAC;QAC3D,CAAC;QAED,IAAI,cAAc,CAAC,UAAU,CAAC,eAAe,GAAG,GAAG,CAAC,EAAE,CAAC;YACrD,MAAM,YAAY,GAAG,cAAc,CAAC,KAAK,CAAC,eAAe,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC;YACtE,OAAO,EAAE,GAAG,EAAE,UAAU,EAAE,YAAY,EAAE,CAAC;QAC3C,CAAC;QAED,IAAI,cAAc,KAAK,eAAe,EAAE,CAAC;YACvC,OAAO,EAAE,GAAG,EAAE,UAAU,EAAE,YAAY,EAAE,GAAG,EAAE,CAAC;QAChD,CAAC;IACH,CAAC;IAED,OAAO,EAAE,GAAG,EAAE,QAAQ,CAAC,CAAC,CAAC,CAAC,UAAU,EAAE,YAAY,EAAE,cAAc,EAAE,CAAC;AACvE,CAAC;AAED;;;;;GAKG;AACH,MAAM,CAAC,KAAK,UAAU,QAAQ,CAAC,IAAY;IACzC,MAAM,KAAK,GAAG,MAAM,SAAS,CAAC,IAAI,CAAC,CAAC;IACpC,OAAO,IAAI,WAAW,EAAE,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;AACzC,CAAC;AAED;;;;;GAKG;AACH,MAAM,CAAC,KAAK,UAAU,SAAS,CAAC,IAAY;IAC1C,MAAM,QAAQ,GAAG,WAAW,CAAC,IAAI,CAAC,CAAC;IACnC,IAAI,CAAC,QAAQ,EAAE,CAAC;QACd,MAAM,IAAI,KAAK,CAAC,2BAA2B,CAAC,CAAC;IAC/C,CAAC;IAED,IAAI,CAAC;QACH,MAAM,SAAS,GAAG,EAAE,aAAa,EAAE,KAAK,EAAE,CAAC;QAC3C,MAAM,SAAS,GAAG,EAAE,CAAC;QACrB,MAAM,eAAe,GAAG,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC;QAEvC,MAAM,EAAE,GAAG,QAAQ,CAAC,GAAG,CAAC,MAAM,CAAC,SAAS,EAAE,QAAQ,CAAC,YAAY,EAAE,SAAS,EAAE,eAAe,CAAC,CAAC;QAC7F,MAAM,IAAI,GAAG,EAAE,CAAC,IAAI,EAAE,CAAC;QACvB,MAAM,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC;QAC7C,OAAO,IAAI,CAAC;IACd,CAAC;IAAC,OAAO,CAAC,EAAE,CAAC;QACX,MAAM,IAAI,KAAK,CAAC,wBAAwB,IAAI,MAAM,CAAC,EAAE,CAAC,CAAC;IACzD,CAAC;AACH,CAAC;AAED;;;;;GAKG;AACH,MAAM,CAAC,KAAK,UAAU,SAAS,CAAC,IAAY,EAAE,OAAe;IAC3D,MAAM,KAAK,GAAG,IAAI,WAAW,EAAE,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;IAChD,MAAM,UAAU,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC;AAChC,CAAC;AAED;;;;;GAKG;AACH,MAAM,CAAC,KAAK,UAAU,UAAU,CAAC,IAAY,EAAE,IAAgB;IAC7D,MAAM,QAAQ,GAAG,WAAW,CAAC,IAAI,CAAC,CAAC;IACnC,IAAI,CAAC,QAAQ,EAAE,CAAC;QACd,MAAM,IAAI,KAAK,CAAC,2BAA2B,CAAC,CAAC;IAC/C,CAAC;IAED,IAAI,CAAC;QACH,MAAM,SAAS,GAAG,EAAE,aAAa,EAAE,KAAK,EAAE,CAAC;QAC3C,MAAM,SAAS,GAAG,EAAE,MAAM,EAAE,IAAI,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC;QACnD,MAAM,eAAe,GAAG,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC;QAExC,MAAM,EAAE,GAAG,QAAQ,CAAC,GAAG,CAAC,MAAM,CAAC,SAAS,EAAE,QAAQ,CAAC,YAAY,EAAE,SAAS,EAAE,eAAe,CAAC,CAAC;QAC7F,EAAE,CAAC,KAAK,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC;IAC5B,CAAC;IAAC,OAAO,CAAC,EAAE,CAAC;QACX,MAAM,IAAI,KAAK,CAAC,yBAAyB,IAAI,MAAM,CAAC,EAAE,CAAC,CAAC;IAC1D,CAAC;AACH,CAAC;AAED;;;;;GAKG;AACH,MAAM,CAAC,KAAK,UAAU,IAAI,CAAC,OAAe,GAAG;IAC3C,MAAM,QAAQ,GAAG,WAAW,CAAC,IAAI,CAAC,CAAC;IACnC,IAAI,CAAC,QAAQ,EAAE,CAAC;QACd,MAAM,IAAI,KAAK,CAAC,2BAA2B,CAAC,CAAC;IAC/C,CAAC;IAED,IAAI,CAAC;QACH,IAAI,SAAS,GAAG,QAAQ,CAAC,GAAG,CAAC;QAC7B,IAAI,QAAQ,CAAC,YAAY,KAAK,GAAG,EAAE,CAAC;YAClC,MAAM,SAAS,GAAG,EAAE,aAAa,EAAE,KAAK,EAAE,CAAC;YAC3C,MAAM,SAAS,GAAG,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC;YACtC,MAAM,eAAe,GAAG,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC;YACvC,SAAS,GAAG,QAAQ,CAAC,GAAG,CAAC,MAAM,CAAC,SAAS,EAAE,QAAQ,CAAC,YAAY,EAAE,SAAS,EAAE,eAAe,CAAC,CAAC;QAChG,CAAC;QAED,MAAM,MAAM,GAAG,SAAS,CAAC,aAAa,EAAE,CAAC;QACzC,MAAM,OAAO,GAAa,EAAE,CAAC;QAE7B,IAAI,KAAK,CAAC;QACV,OAAO,CAAC,KAAK,GAAG,MAAM,CAAC,kBAAkB,EAAE,CAAC,KAAK,SAAS,IAAI,KAAK,KAAK,IAAI,EAAE,CAAC;YAC7E,IAAI,KAAK,CAAC,IAAI,EAAE,CAAC;gBACf,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;YAC3B,CAAC;QACH,CAAC;QAED,OAAO,OAAO,CAAC;IACjB,CAAC;IAAC,OAAO,CAAC,EAAE,CAAC;QACX,MAAM,IAAI,KAAK,CAAC,6BAA6B,IAAI,MAAM,CAAC,EAAE,CAAC,CAAC;IAC9D,CAAC;AACH,CAAC;AAED;;;;;GAKG;AACH,MAAM,CAAC,KAAK,UAAU,MAAM,CAAC,IAAY;IACvC,MAAM,QAAQ,GAAG,WAAW,CAAC,IAAI,CAAC,CAAC;IACnC,IAAI,CAAC,QAAQ,EAAE,CAAC;QACd,OAAO,KAAK,CAAC;IACf,CAAC;IAED,IAAI,CAAC;QACH,MAAM,SAAS,GAAG,EAAE,aAAa,EAAE,KAAK,EAAE,CAAC;QAC3C,MAAM,SAAS,GAAG,EAAE,CAAC;QACrB,MAAM,eAAe,GAAG,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC;QACvC,QAAQ,CAAC,GAAG,CAAC,MAAM,CAAC,SAAS,EAAE,QAAQ,CAAC,YAAY,EAAE,SAAS,EAAE,eAAe,CAAC,CAAC;QAClF,OAAO,IAAI,CAAC;IACd,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,KAAK,CAAC;IACf,CAAC;AACH,CAAC"}

package/dist/index.d.ts

@@ -15,6 +15,6 @@
  */
 export { task, type TaskOptions } from "./task.js";
 export { TaskRunner, exports, type TaskConfig } from "./app.js";
-export * as http from "./http.js";
+export * as files from "./files.js";
 export { isWasmMode } from "./hostApi.js";
 //# sourceMappingURL=index.d.ts.map

package/dist/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;GAcG;AAEH,OAAO,EAAE,IAAI,EAAE,KAAK,WAAW,EAAE,MAAM,WAAW,CAAC;AACnD,OAAO,EAAE,UAAU,EAAE,OAAO,EAAE,KAAK,UAAU,EAAE,MAAM,UAAU,CAAC;AAChE,OAAO,KAAK,IAAI,MAAM,WAAW,CAAC;AAClC,OAAO,EAAE,UAAU,EAAE,MAAM,cAAc,CAAC"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;GAcG;AAEH,OAAO,EAAE,IAAI,EAAE,KAAK,WAAW,EAAE,MAAM,WAAW,CAAC;AACnD,OAAO,EAAE,UAAU,EAAE,OAAO,EAAE,KAAK,UAAU,EAAE,MAAM,UAAU,CAAC;AAChE,OAAO,KAAK,KAAK,MAAM,YAAY,CAAC;AACpC,OAAO,EAAE,UAAU,EAAE,MAAM,cAAc,CAAC"}

package/dist/index.js

@@ -15,6 +15,6 @@
  */
 export { task } from "./task.js";
 export { TaskRunner, exports } from "./app.js";
-export * as http from "./http.js";
+export * as files from "./files.js";
 export { isWasmMode } from "./hostApi.js";
 //# sourceMappingURL=index.js.map

package/dist/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;GAcG;AAEH,OAAO,EAAE,IAAI,EAAoB,MAAM,WAAW,CAAC;AACnD,OAAO,EAAE,UAAU,EAAE,OAAO,EAAmB,MAAM,UAAU,CAAC;AAChE,OAAO,KAAK,IAAI,MAAM,WAAW,CAAC;AAClC,OAAO,EAAE,UAAU,EAAE,MAAM,cAAc,CAAC"}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;GAcG;AAEH,OAAO,EAAE,IAAI,EAAoB,MAAM,WAAW,CAAC;AACnD,OAAO,EAAE,UAAU,EAAE,OAAO,EAAmB,MAAM,UAAU,CAAC;AAChE,OAAO,KAAK,KAAK,MAAM,YAAY,CAAC;AACpC,OAAO,EAAE,UAAU,EAAE,MAAM,cAAc,CAAC"}

package/dist/task.d.ts

@@ -19,6 +19,8 @@ export interface TaskOptions {
     timeout?: string | number;
     /** Maximum number of retries */
     maxRetries?: number;
+    /** Files/folders accessible in the sandbox, e.g., ["./data"] */
+    allowedFiles?: string[];
 }
 export declare function task<TArgs extends any[], TReturn>(options: TaskOptions, fn: (...args: TArgs) => TReturn): (...args: TArgs) => TReturn;
 //# sourceMappingURL=task.d.ts.map

package/dist/task.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"task.d.ts","sourceRoot":"","sources":["../src/task.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAKH,MAAM,WAAW,WAAW;IAC1B,2BAA2B;IAC3B,IAAI,EAAE,MAAM,CAAC;IACb,gDAAgD;IAChD,OAAO,CAAC,EAAE,KAAK,GAAG,QAAQ,GAAG,MAAM,GAAG,MAAM,CAAC;IAC7C,sCAAsC;IACtC,GAAG,CAAC,EAAE,MAAM,CAAC;IACb;;;;OAIG;IACH,OAAO,CAAC,EAAE,MAAM,GAAG,MAAM,CAAC;IAC1B,gCAAgC;IAChC,UAAU,CAAC,EAAE,MAAM,CAAC;CACrB;AAsDD,wBAAgB,IAAI,CAAC,KAAK,SAAS,GAAG,EAAE,EAAE,OAAO,EAC/C,OAAO,EAAE,WAAW,EACpB,EAAE,EAAE,CAAC,GAAG,IAAI,EAAE,KAAK,KAAK,OAAO,GAC9B,CAAC,GAAG,IAAI,EAAE,KAAK,KAAK,OAAO,CAoC7B"}
+{"version":3,"file":"task.d.ts","sourceRoot":"","sources":["../src/task.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAKH,MAAM,WAAW,WAAW;IAC1B,2BAA2B;IAC3B,IAAI,EAAE,MAAM,CAAC;IACb,gDAAgD;IAChD,OAAO,CAAC,EAAE,KAAK,GAAG,QAAQ,GAAG,MAAM,GAAG,MAAM,CAAC;IAC7C,sCAAsC;IACtC,GAAG,CAAC,EAAE,MAAM,CAAC;IACb;;;;OAIG;IACH,OAAO,CAAC,EAAE,MAAM,GAAG,MAAM,CAAC;IAC1B,gCAAgC;IAChC,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,gEAAgE;IAChE,YAAY,CAAC,EAAE,MAAM,EAAE,CAAC;CACzB;AAoDD,wBAAgB,IAAI,CAAC,KAAK,SAAS,GAAG,EAAE,EAAE,OAAO,EAC/C,OAAO,EAAE,WAAW,EACpB,EAAE,EAAE,CAAC,GAAG,IAAI,EAAE,KAAK,KAAK,OAAO,GAC9B,CAAC,GAAG,IAAI,EAAE,KAAK,KAAK,OAAO,CAqC7B"}

package/dist/task.js

@@ -11,7 +11,6 @@ import { isWasmMode, callHost } from "./hostApi.js";
  *
  * @example
  * ```typescript
- * // String timeout format
  * export const greet = task({
  *   name: "greet",
  *   compute: "LOW",
@@ -20,11 +19,10 @@ import { isWasmMode, callHost } from "./hostApi.js";
  *   return `Hello, ${name}!`;
  * });
  *
- * // Numeric timeout format (milliseconds)
  * export const process = task({
  *   name: "process",
  *   compute: "HIGH",
- *   timeout: 30000  // 30 seconds
+ *   timeout: 30000
  * }, (data: any): any => {
  *   return processData(data);
  * });
@@ -61,6 +59,7 @@ export function task(options, fn) {
         ram: options.ram,
         timeout: normalizeTimeout(options.timeout),
         maxRetries: options.maxRetries,
+        allowedFiles: options.allowedFiles,
     };
     const wrapper = (...args) => {
         if (!isWasmMode()) {

package/dist/task.js.map

@@ -1 +1 @@
-{"version":3,"file":"task.js","sourceRoot":"","sources":["../src/task.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,OAAO,EAAE,YAAY,EAAmB,MAAM,UAAU,CAAC;AACzD,OAAO,EAAE,UAAU,EAAE,QAAQ,EAAE,MAAM,cAAc,CAAC;AAwBpD;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA+BG;AAEH;;;;;GAKG;AACH,SAAS,gBAAgB,CAAC,OAAyB;IACjD,IAAI,OAAO,KAAK,SAAS;QAAE,OAAO,SAAS,CAAC;IAC5C,IAAI,OAAO,OAAO,KAAK,QAAQ,EAAE,CAAC;QAChC,OAAO,GAAG,OAAO,IAAI,CAAC;IACxB,CAAC;IACD,OAAO,OAAO,CAAC;AACjB,CAAC;AAED,MAAM,UAAU,IAAI,CAClB,OAAoB,EACpB,EAA+B;IAE/B,MAAM,QAAQ,GAAG,OAAO,CAAC,IAAI,CAAC;IAC9B,IAAI,OAAO,GAAG,OAAO,CAAC,OAAO,EAAE,QAAQ,EAAE,CAAC,WAAW,EAAE,IAAI,QAAQ,CAAC;IAEpE,MAAM,UAAU,GAAe;QAC7B,IAAI,EAAE,QAAQ;QACd,OAAO;QACP,GAAG,EAAE,OAAO,CAAC,GAAG;QAChB,OAAO,EAAE,gBAAgB,CAAC,OAAO,CAAC,OAAO,CAAC;QAC1C,UAAU,EAAE,OAAO,CAAC,UAAU;KAC/B,CAAC;IAEF,MAAM,OAAO,GAAG,CAAC,GAAG,IAAW,EAAW,EAAE;QAC1C,IAAI,CAAC,UAAU,EAAE,EAAE,CAAC;YAClB,OAAO,EAAE,CAAC,GAAG,IAAI,CAAC,CAAC;QACrB,CAAC;QAED,MAAM,UAAU,GAAG,QAAQ,CAAC,QAAQ,EAAE,IAAI,EAAE,UAAU,CAAC,CAAC;QAExD,IAAI,CAAC;YACH,MAAM,MAAM,GAAe,IAAI,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC;YAClD,IAAI,MAAM,CAAC,KAAK,EAAE,CAAC;gBACjB,MAAM,IAAI,KAAK,CAAC,QAAQ,QAAQ,YAAY,MAAM,CAAC,KAAK,EAAE,CAAC,CAAC;YAC9D,CAAC;YACD,OAAO,MAAM,CAAC,MAAiB,CAAC;QAClC,CAAC;QAAC,OAAO,CAAC,EAAE,CAAC;YACX,IAAI,CAAC,YAAY,WAAW,EAAE,CAAC;gBAC7B,OAAO,UAAgC,CAAC;YAC1C,CAAC;YACD,MAAM,CAAC,CAAC;QACV,CAAC;IACH,CAAC,CAAC;IAEF,YAAY,CAAC,QAAQ,EAAE,EAAE,EAAE,UAAU,CAAC,CAAC;IAEvC,OAAO,OAAO,CAAC;AACjB,CAAC"}
+{"version":3,"file":"task.js","sourceRoot":"","sources":["../src/task.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,OAAO,EAAE,YAAY,EAAmB,MAAM,UAAU,CAAC;AACzD,OAAO,EAAE,UAAU,EAAE,QAAQ,EAAE,MAAM,cAAc,CAAC;AA0BpD;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA6BG;AAEH;;;;;GAKG;AACH,SAAS,gBAAgB,CAAC,OAAyB;IACjD,IAAI,OAAO,KAAK,SAAS;QAAE,OAAO,SAAS,CAAC;IAC5C,IAAI,OAAO,OAAO,KAAK,QAAQ,EAAE,CAAC;QAChC,OAAO,GAAG,OAAO,IAAI,CAAC;IACxB,CAAC;IACD,OAAO,OAAO,CAAC;AACjB,CAAC;AAED,MAAM,UAAU,IAAI,CAClB,OAAoB,EACpB,EAA+B;IAE/B,MAAM,QAAQ,GAAG,OAAO,CAAC,IAAI,CAAC;IAC9B,IAAI,OAAO,GAAG,OAAO,CAAC,OAAO,EAAE,QAAQ,EAAE,CAAC,WAAW,EAAE,IAAI,QAAQ,CAAC;IAEpE,MAAM,UAAU,GAAe;QAC7B,IAAI,EAAE,QAAQ;QACd,OAAO;QACP,GAAG,EAAE,OAAO,CAAC,GAAG;QAChB,OAAO,EAAE,gBAAgB,CAAC,OAAO,CAAC,OAAO,CAAC;QAC1C,UAAU,EAAE,OAAO,CAAC,UAAU;QAC9B,YAAY,EAAE,OAAO,CAAC,YAAY;KACnC,CAAC;IAEF,MAAM,OAAO,GAAG,CAAC,GAAG,IAAW,EAAW,EAAE;QAC1C,IAAI,CAAC,UAAU,EAAE,EAAE,CAAC;YAClB,OAAO,EAAE,CAAC,GAAG,IAAI,CAAC,CAAC;QACrB,CAAC;QAED,MAAM,UAAU,GAAG,QAAQ,CAAC,QAAQ,EAAE,IAAI,EAAE,UAAU,CAAC,CAAC;QAExD,IAAI,CAAC;YACH,MAAM,MAAM,GAAe,IAAI,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC;YAClD,IAAI,MAAM,CAAC,KAAK,EAAE,CAAC;gBACjB,MAAM,IAAI,KAAK,CAAC,QAAQ,QAAQ,YAAY,MAAM,CAAC,KAAK,EAAE,CAAC,CAAC;YAC9D,CAAC;YACD,OAAO,MAAM,CAAC,MAAiB,CAAC;QAClC,CAAC;QAAC,OAAO,CAAC,EAAE,CAAC;YACX,IAAI,CAAC,YAAY,WAAW,EAAE,CAAC;gBAC7B,OAAO,UAAgC,CAAC;YAC1C,CAAC;YACD,MAAM,CAAC,CAAC;QACV,CAAC;IACH,CAAC,CAAC;IAEF,YAAY,CAAC,QAAQ,EAAE,EAAE,EAAE,UAAU,CAAC,CAAC;IAEvC,OAAO,OAAO,CAAC;AACjB,CAAC"}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@capsule-run/sdk",
-  "version": "0.2.2",
+  "version": "0.3.1",
   "description": "Capsule JavaScript SDK - run AI agent tasks in secure WASM sandboxes",
   "type": "module",
   "main": "./dist/index.js",
@@ -22,7 +22,8 @@
   },
   "files": [
     "dist",
-    "src"
+    "src",
+    "README.md"
   ],
   "scripts": {
     "build": "tsc",
@@ -38,9 +39,7 @@
   "license": "Apache-2.0",
   "dependencies": {
     "@bytecodealliance/jco": "^1.0.0",
-    "esbuild": "^0.27.2"
-  },
-  "devDependencies": {
+    "esbuild": "^0.27.2",
     "typescript": "^5.9.3"
   }
 }

package/src/app.ts

@@ -13,6 +13,7 @@ export interface TaskConfig {
   ram?: string;
   timeout?: string;
   maxRetries?: number;
+  allowedFiles?: string[];
 }
 
 const TASKS: Map<string, TaskInfo<any>> = new Map();
@@ -55,12 +56,6 @@ interface TaskArgs {
   kwargs?: Record<string, any>;
 }
 
-interface TaskResult {
-  result?: any;
-  error?: string;
-  traceback?: string;
-}
-
 /**
  * Implementation of the capsule:host/task-runner interface.
  *

package/src/files.ts

@@ -0,0 +1,217 @@
+/**
+ * Capsule Files API for WASM filesystem access.
+ */
+
+declare const globalThis: {
+  'wasi:filesystem/types': any;
+  'wasi:filesystem/preopens': any;
+};
+
+interface Descriptor {
+  read(length: bigint, offset: bigint): [Uint8Array, boolean];
+  write(buffer: Uint8Array, offset: bigint): bigint;
+  stat(): { size: bigint };
+  readDirectory(): any;
+  openAt(
+    pathFlags: { symlinkFollow?: boolean },
+    path: string,
+    openFlags: { create?: boolean; directory?: boolean; exclusive?: boolean; truncate?: boolean },
+    descriptorFlags: { read?: boolean; write?: boolean; mutateDirectory?: boolean }
+  ): Descriptor;
+}
+
+interface PreopenedDir {
+  descriptor: Descriptor;
+  guestPath: string;
+}
+
+function getFsBindings(): { types: any; preopens: any } | null {
+  try {
+    const types = globalThis['wasi:filesystem/types'];
+    const preopens = globalThis['wasi:filesystem/preopens'];
+    if (types && preopens) {
+      return { types, preopens };
+    }
+  } catch {}
+  return null;
+}
+
+function getPreopenedDirs(): PreopenedDir[] {
+  const fs = getFsBindings();
+  if (!fs) return [];
+
+  try {
+    const dirs = fs.preopens.getDirectories();
+    return (dirs || []).map((entry: [Descriptor, string]) => ({
+      descriptor: entry[0],
+      guestPath: entry[1]
+    }));
+  } catch {
+    return [];
+  }
+}
+
+function normalizePath(path: string): string {
+  if (path.startsWith('./')) {
+    return path.slice(2);
+  }
+  return path;
+}
+
+function resolvePath(path: string): { dir: Descriptor; relativePath: string } | null {
+  const preopens = getPreopenedDirs();
+  if (preopens.length === 0) return null;
+
+  const normalizedPath = normalizePath(path);
+
+  for (const { descriptor, guestPath } of preopens) {
+    const normalizedGuest = normalizePath(guestPath);
+
+    if (normalizedGuest === '.' || normalizedGuest === '') {
+      return { dir: descriptor, relativePath: normalizedPath };
+    }
+
+    if (normalizedPath.startsWith(normalizedGuest + '/')) {
+      const relativePath = normalizedPath.slice(normalizedGuest.length + 1);
+      return { dir: descriptor, relativePath };
+    }
+
+    if (normalizedPath === normalizedGuest) {
+      return { dir: descriptor, relativePath: '.' };
+    }
+  }
+
+  return { dir: preopens[0].descriptor, relativePath: normalizedPath };
+}
+
+/**
+ * Read a file as text.
+ *
+ * @param path - The path to read.
+ * @returns A promise that resolves to a string containing the file contents.
+ */
+export async function readText(path: string): Promise<string> {
+  const bytes = await readBytes(path);
+  return new TextDecoder().decode(bytes);
+}
+
+/**
+ * Read a file as bytes.
+ *
+ * @param path - The path to read.
+ * @returns A promise that resolves to a Uint8Array containing the file contents.
+ */
+export async function readBytes(path: string): Promise<Uint8Array> {
+  const resolved = resolvePath(path);
+  if (!resolved) {
+    throw new Error("Filesystem not available.");
+  }
+
+  try {
+    const pathFlags = { symlinkFollow: false };
+    const openFlags = {};
+    const descriptorFlags = { read: true };
+
+    const fd = resolved.dir.openAt(pathFlags, resolved.relativePath, openFlags, descriptorFlags);
+    const stat = fd.stat();
+    const [data] = fd.read(stat.size, BigInt(0));
+    return data;
+  } catch (e) {
+    throw new Error(`Failed to read file '${path}': ${e}`);
+  }
+}
+
+/**
+ * Write text content to a file.
+ *
+ * @param path - The path to write.
+ * @param content - The text content to write.
+ */
+export async function writeText(path: string, content: string): Promise<void> {
+  const bytes = new TextEncoder().encode(content);
+  await writeBytes(path, bytes);
+}
+
+/**
+ * Write bytes to a file.
+ *
+ * @param path - The path to write.
+ * @param data - The bytes to write.
+ */
+export async function writeBytes(path: string, data: Uint8Array): Promise<void> {
+  const resolved = resolvePath(path);
+  if (!resolved) {
+    throw new Error("Filesystem not available.");
+  }
+
+  try {
+    const pathFlags = { symlinkFollow: false };
+    const openFlags = { create: true, truncate: true };
+    const descriptorFlags = { write: true };
+
+    const fd = resolved.dir.openAt(pathFlags, resolved.relativePath, openFlags, descriptorFlags);
+    fd.write(data, BigInt(0));
+  } catch (e) {
+    throw new Error(`Failed to write file '${path}': ${e}`);
+  }
+}
+
+/**
+ * List files/directories at a path.
+ *
+ * @param path - The path to list.
+ * @returns A promise that resolves to an array of strings representing the files and directories at the specified path.
+ */
+export async function list(path: string = "."): Promise<string[]> {
+  const resolved = resolvePath(path);
+  if (!resolved) {
+    throw new Error("Filesystem not available.");
+  }
+
+  try {
+    let targetDir = resolved.dir;
+    if (resolved.relativePath !== ".") {
+      const pathFlags = { symlinkFollow: false };
+      const openFlags = { directory: true };
+      const descriptorFlags = { read: true };
+      targetDir = resolved.dir.openAt(pathFlags, resolved.relativePath, openFlags, descriptorFlags);
+    }
+
+    const stream = targetDir.readDirectory();
+    const entries: string[] = [];
+
+    let entry;
+    while ((entry = stream.readDirectoryEntry()) !== undefined && entry !== null) {
+      if (entry.name) {
+        entries.push(entry.name);
+      }
+    }
+
+    return entries;
+  } catch (e) {
+    throw new Error(`Failed to list directory '${path}': ${e}`);
+  }
+}
+
+/**
+ * Check if a file or directory exists.
+ *
+ * @param path - The path to check.
+ * @returns A promise that resolves to a boolean indicating whether the file or directory exists.
+ */
+export async function exists(path: string): Promise<boolean> {
+  const resolved = resolvePath(path);
+  if (!resolved) {
+    return false;
+  }
+
+  try {
+    const pathFlags = { symlinkFollow: false };
+    const openFlags = {};
+    const descriptorFlags = { read: true };
+    resolved.dir.openAt(pathFlags, resolved.relativePath, openFlags, descriptorFlags);
+    return true;
+  } catch {
+    return false;
+  }
+}

package/src/index.ts

@@ -16,5 +16,6 @@
 
 export { task, type TaskOptions } from "./task.js";
 export { TaskRunner, exports, type TaskConfig } from "./app.js";
-export * as http from "./http.js";
+export * as files from "./files.js";
 export { isWasmMode } from "./hostApi.js";
+

package/src/task.ts

@@ -23,6 +23,8 @@ export interface TaskOptions {
   timeout?: string | number;
   /** Maximum number of retries */
   maxRetries?: number;
+  /** Files/folders accessible in the sandbox, e.g., ["./data"] */
+  allowedFiles?: string[];
 }
 
 interface TaskResult {
@@ -35,7 +37,6 @@ interface TaskResult {
  *
  * @example
  * ```typescript
- * // String timeout format
  * export const greet = task({
  *   name: "greet",
  *   compute: "LOW",
@@ -44,11 +45,10 @@ interface TaskResult {
  *   return `Hello, ${name}!`;
  * });
  *
- * // Numeric timeout format (milliseconds)
  * export const process = task({
  *   name: "process",
  *   compute: "HIGH",
- *   timeout: 30000  // 30 seconds
+ *   timeout: 30000
  * }, (data: any): any => {
  *   return processData(data);
  * });
@@ -90,6 +90,7 @@ export function task<TArgs extends any[], TReturn>(
     ram: options.ram,
     timeout: normalizeTimeout(options.timeout),
     maxRetries: options.maxRetries,
+    allowedFiles: options.allowedFiles,
   };
 
   const wrapper = (...args: TArgs): TReturn => {

package/dist/http.d.ts

@@ -1,72 +0,0 @@
-/**
- * Capsule SDK - HTTP Client
- *
- * This module provides HTTP request functions by calling the host's HTTP implementation.
- * In WASM mode, requests go through the Rust host.
- * In local mode, uses native fetch for testing.
- */
-export interface RequestOptions {
-    headers?: Record<string, string>;
-    body?: string;
-    json?: any;
-}
-/**
- * HTTP Response wrapper with convenient methods.
- */
-export declare class Response {
-    readonly status: number;
-    readonly headers: Record<string, string>;
-    readonly body: string;
-    constructor(status: number, headers: Record<string, string>, body: string);
-    /**
-     * Parse response body as JSON.
-     */
-    json<T = any>(): T;
-    /**
-     * Get response body as text.
-     */
-    text(): string;
-    /**
-     * Check if response status is 2xx.
-     */
-    ok(): boolean;
-    toString(): string;
-}
-/**
- * Make an HTTP GET request.
- *
- * @example
- * ```typescript
- * const response = http.get("https://api.github.com/zen");
- * console.log(response.text());
- * ```
- */
-export declare function get(url: string, options?: Omit<RequestOptions, "body" | "json">): Promise<Response>;
-/**
- * Make an HTTP POST request.
- *
- * @example
- * ```typescript
- * const response = http.post("https://api.example.com/data", {
- *   json: { key: "value" }
- * });
- * ```
- */
-export declare function post(url: string, options?: RequestOptions): Promise<Response>;
-/**
- * Make an HTTP PUT request.
- */
-export declare function put(url: string, options?: RequestOptions): Promise<Response>;
-/**
- * Make an HTTP DELETE request.
- */
-export declare function del(url: string, options?: Omit<RequestOptions, "body" | "json">): Promise<Response>;
-/**
- * Make an HTTP PATCH request.
- */
-export declare function patch(url: string, options?: RequestOptions): Promise<Response>;
-/**
- * Make an HTTP HEAD request.
- */
-export declare function head(url: string, options?: Omit<RequestOptions, "body" | "json">): Promise<Response>;
-//# sourceMappingURL=http.d.ts.map

package/dist/http.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"http.d.ts","sourceRoot":"","sources":["../src/http.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAIH,MAAM,WAAW,cAAc;IAC7B,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IACjC,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,IAAI,CAAC,EAAE,GAAG,CAAC;CACZ;AAED;;GAEG;AACH,qBAAa,QAAQ;IACnB,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IACzC,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;gBAEV,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,EAAE,IAAI,EAAE,MAAM;IAMzE;;OAEG;IACH,IAAI,CAAC,CAAC,GAAG,GAAG,KAAK,CAAC;IAIlB;;OAEG;IACH,IAAI,IAAI,MAAM;IAId;;OAEG;IACH,EAAE,IAAI,OAAO;IAIb,QAAQ,IAAI,MAAM;CAGnB;AA+FD;;;;;;;;GAQG;AACH,wBAAsB,GAAG,CACvB,GAAG,EAAE,MAAM,EACX,OAAO,GAAE,IAAI,CAAC,cAAc,EAAE,MAAM,GAAG,MAAM,CAAM,GAClD,OAAO,CAAC,QAAQ,CAAC,CAEnB;AAED;;;;;;;;;GASG;AACH,wBAAsB,IAAI,CACxB,GAAG,EAAE,MAAM,EACX,OAAO,GAAE,cAAmB,GAC3B,OAAO,CAAC,QAAQ,CAAC,CAEnB;AAED;;GAEG;AACH,wBAAsB,GAAG,CACvB,GAAG,EAAE,MAAM,EACX,OAAO,GAAE,cAAmB,GAC3B,OAAO,CAAC,QAAQ,CAAC,CAEnB;AAED;;GAEG;AACH,wBAAsB,GAAG,CACvB,GAAG,EAAE,MAAM,EACX,OAAO,GAAE,IAAI,CAAC,cAAc,EAAE,MAAM,GAAG,MAAM,CAAM,GAClD,OAAO,CAAC,QAAQ,CAAC,CAEnB;AAED;;GAEG;AACH,wBAAsB,KAAK,CACzB,GAAG,EAAE,MAAM,EACX,OAAO,GAAE,cAAmB,GAC3B,OAAO,CAAC,QAAQ,CAAC,CAEnB;AAED;;GAEG;AACH,wBAAsB,IAAI,CACxB,GAAG,EAAE,MAAM,EACX,OAAO,GAAE,IAAI,CAAC,cAAc,EAAE,MAAM,GAAG,MAAM,CAAM,GAClD,OAAO,CAAC,QAAQ,CAAC,CAEnB"}

package/dist/http.js

@@ -1,154 +0,0 @@
-/**
- * Capsule SDK - HTTP Client
- *
- * This module provides HTTP request functions by calling the host's HTTP implementation.
- * In WASM mode, requests go through the Rust host.
- * In local mode, uses native fetch for testing.
- */
-import { isWasmMode } from "./hostApi.js";
-/**
- * HTTP Response wrapper with convenient methods.
- */
-export class Response {
-    constructor(status, headers, body) {
-        this.status = status;
-        this.headers = headers;
-        this.body = body;
-    }
-    /**
-     * Parse response body as JSON.
-     */
-    json() {
-        return JSON.parse(this.body);
-    }
-    /**
-     * Get response body as text.
-     */
-    text() {
-        return this.body;
-    }
-    /**
-     * Check if response status is 2xx.
-     */
-    ok() {
-        return this.status >= 200 && this.status < 300;
-    }
-    toString() {
-        return `<Response [${this.status}]>`;
-    }
-}
-/**
- * Internal function to make HTTP requests.
- * In WASM mode: calls the host API
- * In local mode: uses fetch
- */
-async function makeRequest(method, url, options = {}) {
-    return isWasmMode()
-        ? makeHostRequest(method, url, options)
-        : makeLocalRequest(method, url, options);
-}
-/**
- * Make HTTP request using native fetch (local mode only).
- */
-async function makeLocalRequest(method, url, options = {}) {
-    const headers = { ...options.headers };
-    let body = options.body;
-    if (options.json !== undefined) {
-        body = JSON.stringify(options.json);
-        headers["Content-Type"] = "application/json";
-    }
-    const fetchOptions = {
-        method,
-        headers,
-    };
-    if (body !== undefined) {
-        fetchOptions.body = body;
-    }
-    const fetchResponse = await fetch(url, fetchOptions);
-    const responseText = await fetchResponse.text();
-    const responseHeaders = {};
-    fetchResponse.headers.forEach((value, key) => {
-        responseHeaders[key] = value;
-    });
-    return new Response(fetchResponse.status, responseHeaders, responseText);
-}
-/**
- * Make HTTP request via the Rust host (WASM mode).
- */
-function makeHostRequest(method, url, options = {}) {
-    try {
-        const hostModule = globalThis["capsule:host/api"];
-        if (!hostModule || !hostModule.httpRequest) {
-            throw new Error("Host HTTP API not available");
-        }
-        const headers = [];
-        const requestHeaders = options.headers || {};
-        for (const [key, value] of Object.entries(requestHeaders)) {
-            headers.push([key, value]);
-        }
-        let body = options.body;
-        if (options.json !== undefined) {
-            body = JSON.stringify(options.json);
-            headers.push(["Content-Type", "application/json"]);
-        }
-        const result = hostModule.httpRequest(method, url, headers, body);
-        const responseHeaders = {};
-        for (const [key, value] of result.headers) {
-            responseHeaders[key] = value;
-        }
-        return new Response(result.status, responseHeaders, result.body);
-    }
-    catch (error) {
-        throw new Error(`HTTP request failed: ${error instanceof Error ? error.message : String(error)}`);
-    }
-}
-/**
- * Make an HTTP GET request.
- *
- * @example
- * ```typescript
- * const response = http.get("https://api.github.com/zen");
- * console.log(response.text());
- * ```
- */
-export async function get(url, options = {}) {
-    return makeRequest("GET", url, options);
-}
-/**
- * Make an HTTP POST request.
- *
- * @example
- * ```typescript
- * const response = http.post("https://api.example.com/data", {
- *   json: { key: "value" }
- * });
- * ```
- */
-export async function post(url, options = {}) {
-    return makeRequest("POST", url, options);
-}
-/**
- * Make an HTTP PUT request.
- */
-export async function put(url, options = {}) {
-    return makeRequest("PUT", url, options);
-}
-/**
- * Make an HTTP DELETE request.
- */
-export async function del(url, options = {}) {
-    return makeRequest("DELETE", url, options);
-}
-/**
- * Make an HTTP PATCH request.
- */
-export async function patch(url, options = {}) {
-    return makeRequest("PATCH", url, options);
-}
-/**
- * Make an HTTP HEAD request.
- */
-export async function head(url, options = {}) {
-    return makeRequest("HEAD", url, options);
-}
-//# sourceMappingURL=http.js.map

package/dist/http.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"http.js","sourceRoot":"","sources":["../src/http.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAEH,OAAO,EAAE,UAAU,EAAE,MAAM,cAAc,CAAC;AAQ1C;;GAEG;AACH,MAAM,OAAO,QAAQ;IAKnB,YAAY,MAAc,EAAE,OAA+B,EAAE,IAAY;QACvE,IAAI,CAAC,MAAM,GAAG,MAAM,CAAC;QACrB,IAAI,CAAC,OAAO,GAAG,OAAO,CAAC;QACvB,IAAI,CAAC,IAAI,GAAG,IAAI,CAAC;IACnB,CAAC;IAED;;OAEG;IACH,IAAI;QACF,OAAO,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IAC/B,CAAC;IAED;;OAEG;IACH,IAAI;QACF,OAAO,IAAI,CAAC,IAAI,CAAC;IACnB,CAAC;IAED;;OAEG;IACH,EAAE;QACA,OAAO,IAAI,CAAC,MAAM,IAAI,GAAG,IAAI,IAAI,CAAC,MAAM,GAAG,GAAG,CAAC;IACjD,CAAC;IAED,QAAQ;QACN,OAAO,cAAc,IAAI,CAAC,MAAM,IAAI,CAAC;IACvC,CAAC;CACF;AAED;;;;GAIG;AACH,KAAK,UAAU,WAAW,CACxB,MAAc,EACd,GAAW,EACX,UAA0B,EAAE;IAE5B,OAAO,UAAU,EAAE;QACjB,CAAC,CAAC,eAAe,CAAC,MAAM,EAAE,GAAG,EAAE,OAAO,CAAC;QACvC,CAAC,CAAC,gBAAgB,CAAC,MAAM,EAAE,GAAG,EAAE,OAAO,CAAC,CAAC;AAC7C,CAAC;AAED;;GAEG;AACH,KAAK,UAAU,gBAAgB,CAC7B,MAAc,EACd,GAAW,EACX,UAA0B,EAAE;IAE5B,MAAM,OAAO,GAA2B,EAAE,GAAG,OAAO,CAAC,OAAO,EAAE,CAAC;IAC/D,IAAI,IAAI,GAAuB,OAAO,CAAC,IAAI,CAAC;IAE5C,IAAI,OAAO,CAAC,IAAI,KAAK,SAAS,EAAE,CAAC;QAC/B,IAAI,GAAG,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;QACpC,OAAO,CAAC,cAAc,CAAC,GAAG,kBAAkB,CAAC;IAC/C,CAAC;IAED,MAAM,YAAY,GAAgB;QAChC,MAAM;QACN,OAAO;KACR,CAAC;IAEF,IAAI,IAAI,KAAK,SAAS,EAAE,CAAC;QACvB,YAAY,CAAC,IAAI,GAAG,IAAI,CAAC;IAC3B,CAAC;IAED,MAAM,aAAa,GAAG,MAAM,KAAK,CAAC,GAAG,EAAE,YAAY,CAAC,CAAC;IACrD,MAAM,YAAY,GAAG,MAAM,aAAa,CAAC,IAAI,EAAE,CAAC;IAEhD,MAAM,eAAe,GAA2B,EAAE,CAAC;IACnD,aAAa,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC,KAAK,EAAE,GAAG,EAAE,EAAE;QAC3C,eAAe,CAAC,GAAG,CAAC,GAAG,KAAK,CAAC;IAC/B,CAAC,CAAC,CAAC;IAEH,OAAO,IAAI,QAAQ,CAAC,aAAa,CAAC,MAAM,EAAE,eAAe,EAAE,YAAY,CAAC,CAAC;AAC3E,CAAC;AAED;;GAEG;AACH,SAAS,eAAe,CACtB,MAAc,EACd,GAAW,EACX,UAA0B,EAAE;IAE5B,IAAI,CAAC;QACH,MAAM,UAAU,GAAI,UAAkB,CAAC,kBAAkB,CAAC,CAAC;QAE3D,IAAI,CAAC,UAAU,IAAI,CAAC,UAAU,CAAC,WAAW,EAAE,CAAC;YAC3C,MAAM,IAAI,KAAK,CAAC,6BAA6B,CAAC,CAAC;QACjD,CAAC;QAED,MAAM,OAAO,GAAuB,EAAE,CAAC;QACvC,MAAM,cAAc,GAAG,OAAO,CAAC,OAAO,IAAI,EAAE,CAAC;QAE7C,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,cAAc,CAAC,EAAE,CAAC;YAC1D,OAAO,CAAC,IAAI,CAAC,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC,CAAC;QAC7B,CAAC;QAED,IAAI,IAAI,GAAuB,OAAO,CAAC,IAAI,CAAC;QAE5C,IAAI,OAAO,CAAC,IAAI,KAAK,SAAS,EAAE,CAAC;YAC/B,IAAI,GAAG,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;YACpC,OAAO,CAAC,IAAI,CAAC,CAAC,cAAc,EAAE,kBAAkB,CAAC,CAAC,CAAC;QACrD,CAAC;QAED,MAAM,MAAM,GAAG,UAAU,CAAC,WAAW,CAAC,MAAM,EAAE,GAAG,EAAE,OAAO,EAAE,IAAI,CAAC,CAAC;QAElE,MAAM,eAAe,GAA2B,EAAE,CAAC;QACnD,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,EAAE,CAAC;YAC1C,eAAe,CAAC,GAAG,CAAC,GAAG,KAAK,CAAC;QAC/B,CAAC;QAED,OAAO,IAAI,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,eAAe,EAAE,MAAM,CAAC,IAAI,CAAC,CAAC;IACnE,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,MAAM,IAAI,KAAK,CAAC,wBAAwB,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;IACpG,CAAC;AACH,CAAC;AAED;;;;;;;;GAQG;AACH,MAAM,CAAC,KAAK,UAAU,GAAG,CACvB,GAAW,EACX,UAAiD,EAAE;IAEnD,OAAO,WAAW,CAAC,KAAK,EAAE,GAAG,EAAE,OAAO,CAAC,CAAC;AAC1C,CAAC;AAED;;;;;;;;;GASG;AACH,MAAM,CAAC,KAAK,UAAU,IAAI,CACxB,GAAW,EACX,UAA0B,EAAE;IAE5B,OAAO,WAAW,CAAC,MAAM,EAAE,GAAG,EAAE,OAAO,CAAC,CAAC;AAC3C,CAAC;AAED;;GAEG;AACH,MAAM,CAAC,KAAK,UAAU,GAAG,CACvB,GAAW,EACX,UAA0B,EAAE;IAE5B,OAAO,WAAW,CAAC,KAAK,EAAE,GAAG,EAAE,OAAO,CAAC,CAAC;AAC1C,CAAC;AAED;;GAEG;AACH,MAAM,CAAC,KAAK,UAAU,GAAG,CACvB,GAAW,EACX,UAAiD,EAAE;IAEnD,OAAO,WAAW,CAAC,QAAQ,EAAE,GAAG,EAAE,OAAO,CAAC,CAAC;AAC7C,CAAC;AAED;;GAEG;AACH,MAAM,CAAC,KAAK,UAAU,KAAK,CACzB,GAAW,EACX,UAA0B,EAAE;IAE5B,OAAO,WAAW,CAAC,OAAO,EAAE,GAAG,EAAE,OAAO,CAAC,CAAC;AAC5C,CAAC;AAED;;GAEG;AACH,MAAM,CAAC,KAAK,UAAU,IAAI,CACxB,GAAW,EACX,UAAiD,EAAE;IAEnD,OAAO,WAAW,CAAC,MAAM,EAAE,GAAG,EAAE,OAAO,CAAC,CAAC;AAC3C,CAAC"}

package/src/http.ts

@@ -1,221 +0,0 @@
-/**
- * Capsule SDK - HTTP Client
- *
- * This module provides HTTP request functions by calling the host's HTTP implementation.
- * In WASM mode, requests go through the Rust host.
- * In local mode, uses native fetch for testing.
- */
-
-import { isWasmMode } from "./hostApi.js";
-
-export interface RequestOptions {
-  headers?: Record<string, string>;
-  body?: string;
-  json?: any;
-}
-
-/**
- * HTTP Response wrapper with convenient methods.
- */
-export class Response {
-  readonly status: number;
-  readonly headers: Record<string, string>;
-  readonly body: string;
-
-  constructor(status: number, headers: Record<string, string>, body: string) {
-    this.status = status;
-    this.headers = headers;
-    this.body = body;
-  }
-
-  /**
-   * Parse response body as JSON.
-   */
-  json<T = any>(): T {
-    return JSON.parse(this.body);
-  }
-
-  /**
-   * Get response body as text.
-   */
-  text(): string {
-    return this.body;
-  }
-
-  /**
-   * Check if response status is 2xx.
-   */
-  ok(): boolean {
-    return this.status >= 200 && this.status < 300;
-  }
-
-  toString(): string {
-    return `<Response [${this.status}]>`;
-  }
-}
-
-/**
- * Internal function to make HTTP requests.
- * In WASM mode: calls the host API
- * In local mode: uses fetch
- */
-async function makeRequest(
-  method: string,
-  url: string,
-  options: RequestOptions = {}
-): Promise<Response> {
-  return isWasmMode()
-    ? makeHostRequest(method, url, options)
-    : makeLocalRequest(method, url, options);
-}
-
-/**
- * Make HTTP request using native fetch (local mode only).
- */
-async function makeLocalRequest(
-  method: string,
-  url: string,
-  options: RequestOptions = {}
-): Promise<Response> {
-  const headers: Record<string, string> = { ...options.headers };
-  let body: string | undefined = options.body;
-
-  if (options.json !== undefined) {
-    body = JSON.stringify(options.json);
-    headers["Content-Type"] = "application/json";
-  }
-
-  const fetchOptions: RequestInit = {
-    method,
-    headers,
-  };
-
-  if (body !== undefined) {
-    fetchOptions.body = body;
-  }
-
-  const fetchResponse = await fetch(url, fetchOptions);
-  const responseText = await fetchResponse.text();
-
-  const responseHeaders: Record<string, string> = {};
-  fetchResponse.headers.forEach((value, key) => {
-    responseHeaders[key] = value;
-  });
-
-  return new Response(fetchResponse.status, responseHeaders, responseText);
-}
-
-/**
- * Make HTTP request via the Rust host (WASM mode).
- */
-function makeHostRequest(
-  method: string,
-  url: string,
-  options: RequestOptions = {}
-): Response {
-  try {
-    const hostModule = (globalThis as any)["capsule:host/api"];
-
-    if (!hostModule || !hostModule.httpRequest) {
-      throw new Error("Host HTTP API not available");
-    }
-
-    const headers: [string, string][] = [];
-    const requestHeaders = options.headers || {};
-
-    for (const [key, value] of Object.entries(requestHeaders)) {
-      headers.push([key, value]);
-    }
-
-    let body: string | undefined = options.body;
-
-    if (options.json !== undefined) {
-      body = JSON.stringify(options.json);
-      headers.push(["Content-Type", "application/json"]);
-    }
-
-    const result = hostModule.httpRequest(method, url, headers, body);
-
-    const responseHeaders: Record<string, string> = {};
-    for (const [key, value] of result.headers) {
-      responseHeaders[key] = value;
-    }
-
-    return new Response(result.status, responseHeaders, result.body);
-  } catch (error) {
-    throw new Error(`HTTP request failed: ${error instanceof Error ? error.message : String(error)}`);
-  }
-}
-
-/**
- * Make an HTTP GET request.
- *
- * @example
- * ```typescript
- * const response = http.get("https://api.github.com/zen");
- * console.log(response.text());
- * ```
- */
-export async function get(
-  url: string,
-  options: Omit<RequestOptions, "body" | "json"> = {}
-): Promise<Response> {
-  return makeRequest("GET", url, options);
-}
-
-/**
- * Make an HTTP POST request.
- *
- * @example
- * ```typescript
- * const response = http.post("https://api.example.com/data", {
- *   json: { key: "value" }
- * });
- * ```
- */
-export async function post(
-  url: string,
-  options: RequestOptions = {}
-): Promise<Response> {
-  return makeRequest("POST", url, options);
-}
-
-/**
- * Make an HTTP PUT request.
- */
-export async function put(
-  url: string,
-  options: RequestOptions = {}
-): Promise<Response> {
-  return makeRequest("PUT", url, options);
-}
-
-/**
- * Make an HTTP DELETE request.
- */
-export async function del(
-  url: string,
-  options: Omit<RequestOptions, "body" | "json"> = {}
-): Promise<Response> {
-  return makeRequest("DELETE", url, options);
-}
-
-/**
- * Make an HTTP PATCH request.
- */
-export async function patch(
-  url: string,
-  options: RequestOptions = {}
-): Promise<Response> {
-  return makeRequest("PATCH", url, options);
-}
-
-/**
- * Make an HTTP HEAD request.
- */
-export async function head(
-  url: string,
-  options: Omit<RequestOptions, "body" | "json"> = {}
-): Promise<Response> {
-  return makeRequest("HEAD", url, options);
-}