@cloudflare/sandbox 0.12.9 → 0.12.10

package/dist/{sandbox-D0rNqxlr.js → sandbox-Co2NYKhX.js}

@@ -5916,6 +5916,10 @@ function isBucketRootProbe(request, realPath, url, bucket) {
 	const method = request.method.toUpperCase();
 	return (method === "GET" || method === "HEAD") && url.search === "" && getObjectKeyForPath(realPath, bucket) === "";
 }
+function isBucketRootMutation(request, realPath, bucket) {
+	const method = request.method.toUpperCase();
+	return method !== "GET" && method !== "HEAD" && method !== "OPTIONS" && getObjectKeyForPath(realPath, bucket) === "";
+}
 function deleteDirectoryMarkerCacheEntry(mountId, realPath) {
 	directoryMarkerCache.delete(getDirectoryMarkerCacheKey(mountId, realPath));
 }
@@ -6039,6 +6043,7 @@ const s3CredentialProxyHandler = async (request, env$1, ctx) => {
 	}
 	const realUrl = new URL(realPath + (url.search || ""), mount.endpoint);
 	if (isBucketRootProbe(request, realPath, url, mount.bucket)) return new Response(null, { status: 200 });
+	if (isBucketRootMutation(request, realPath, mount.bucket)) return new Response("Method Not Allowed", { status: 405 });
 	if (!isRequestWithinMountScope(realPath, url, mount.bucket, mount.prefix)) return new Response("Forbidden: request is outside mounted bucket scope", { status: 403 });
 	const copySourceError = validateCopySourceWithinMountScope(request.headers, mount.bucket, mount.prefix);
 	if (copySourceError) return copySourceError;
@@ -7180,7 +7185,7 @@ function createTunnelsHandler(host) {
 * This file is auto-updated by .github/changeset-version.ts during releases
 * DO NOT EDIT MANUALLY - Changes will be overwritten on the next version bump
 */
-const SDK_VERSION = "0.12.9";
+const SDK_VERSION = "0.12.10";
 
 //#endregion
 //#region src/sandbox.ts
@@ -11561,4 +11566,4 @@ var Sandbox = class Sandbox extends Container {
 
 //#endregion
 export { PortClient as A, InvalidBackupConfigError as B, collectFile as C, SandboxClient as D, isPlatformTransientError as E, BackupCreateError as F, SessionTerminatedError as G, ProcessExitedBeforeReadyError as H, BackupExpiredError as I, BackupNotFoundError as L, FileClient as M, CommandClient as N, UtilityClient as O, BackupClient as P, BackupRestoreError as R, validateTunnelName as S, isDurableObjectCodeUpdateReset as T, ProcessReadyTimeoutError as U, OperationInterruptedError as V, RPCTransportError as W, responseToAsyncIterable as _, PREVIEW_PROXY_HEADER as a, sanitizeSandboxId as b, PREVIEW_PROXY_SANDBOX_ID_HEADER as c, BucketUnmountError as d, InvalidMountConfigError as f, parseSSEStream as g, asyncIterableToSSEStream as h, proxyTerminal as i, GitClient as j, ProcessClient as k, PREVIEW_PROXY_TOKEN_HEADER as l, S3FSMountError as m, Sandbox as n, PREVIEW_PROXY_HEADERS as o, MissingCredentialsError as p, getSandbox as r, PREVIEW_PROXY_PORT_HEADER as s, ContainerProxy$1 as t, BucketMountError as u, CodeInterpreter as v, streamFile as w, validatePort as x, SandboxSecurityError as y, ContainerUnavailableError as z };
-//# sourceMappingURL=sandbox-D0rNqxlr.js.map
+//# sourceMappingURL=sandbox-Co2NYKhX.js.map