@claxedo/sandbox-manager 0.7.0 → 0.10.0

package/dist/command.d.ts

@@ -1,3 +1,10 @@
 export declare function shell(input: string): string;
-export declare function file(...parts: string[]): string;
-export declare function env(input: Record<string, string>): string;
+/**
+ * Env rendered as a sourceable script (one `export KEY='value'` line per entry)
+ * so drivers can deliver it through a provider file channel and have the
+ * workload source it, instead of serializing values into exec argv where
+ * command logs and process listings expose them. Names that `export` cannot
+ * carry are refused outright — silently dropping them would boot the runtime
+ * missing configuration.
+ */
+export declare function envFile(input: Record<string, string>): string;

package/dist/command.mjs

@@ -1,16 +1,16 @@
 // src/command.ts
-import path from "path";
 function shell(input) {
   return `'${input.replace(/'/g, `'"'"'`)}'`;
 }
-function file(...parts) {
-  return shell(path.posix.join(...parts));
-}
-function env(input) {
-  return Object.entries(input).map(([k, v]) => `export ${k}=${shell(v)}`).join(" && ");
+function envFile(input) {
+  return Object.entries(input).map(([key, value]) => {
+    if (!/^[A-Za-z_][A-Za-z0-9_]*$/.test(key)) {
+      throw new Error(`environment variable ${JSON.stringify(key)} cannot be exported through an env file`);
+    }
+    return `export ${key}=${shell(value)}`;
+  }).join("\n") + "\n";
 }
 export {
-  env,
-  file,
+  envFile,
   shell
 };