@cloudflare/sandbox 0.8.11 → 0.9.0

package/dist/bridge/index.js

@@ -1,6 +1,6 @@
 import "../dist-Ilf8VjmX.js";
-import "../errors-Bz21XTBJ.js";
-import { i as getSandbox, n as streamFile } from "../file-stream-Bn2PceyF.js";
+import "../errors-Dk2rApYI.js";
+import { h as streamFile, n as getSandbox } from "../sandbox-Cf_Wjrzq.js";
 import { DurableObject, env } from "cloudflare:workers";
 import { Hono } from "hono";
 
@@ -74,7 +74,7 @@ function errorJson(error, code, status) {
 */
 function shellQuote(arg) {
 	if (/^[A-Za-z0-9@%+=:,./-]+$/.test(arg)) return arg;
-	return "$'" + arg.replace(/\\/g, "\\\\").replace(/'/g, "\\'").replace(/\n/g, "\\n").replace(/\r/g, "\\r").replace(/\t/g, "\\t") + "'";
+	return `$'${arg.replace(/\\/g, "\\\\").replace(/'/g, "\\'").replace(/\n/g, "\\n").replace(/\r/g, "\\r").replace(/\t/g, "\\t")}'`;
 }
 /**
 * POSIX-normalise a path (resolve `.` / `..` segments) and verify it lives
@@ -89,7 +89,7 @@ function resolveWorkspacePath(userPath) {
 		if (seg === "..") parts.pop();
 		else parts.push(seg);
 	}
-	const resolved = "/" + parts.join("/");
+	const resolved = `/${parts.join("/")}`;
 	if (resolved === "/workspace" || resolved.startsWith("/workspace/")) return resolved;
 	return null;
 }
@@ -1759,7 +1759,7 @@ function createBridgeApp(config) {
 		const marker = `${apiPrefix}/sandbox/${sandboxId}/file/`;
 		const relativePath = fullPath.slice(marker.length);
 		if (!relativePath) return errorJson("file path must not be empty", "invalid_request", 400);
-		const resolvedPath = resolveWorkspacePath("/" + relativePath);
+		const resolvedPath = resolveWorkspacePath(`/${relativePath}`);
 		if (!resolvedPath) return errorJson("path must resolve to a location within /workspace", "invalid_request", 403);
 		const sandbox = getSandbox$1(getSandboxNs(c.env), c.get("containerUUID"));
 		const rawSessionId = c.req.header("Session-Id");
@@ -1786,7 +1786,7 @@ function createBridgeApp(config) {
 		const marker = `${apiPrefix}/sandbox/${sandboxId}/file/`;
 		const relativePath = fullPath.slice(marker.length);
 		if (!relativePath) return errorJson("file path must not be empty", "invalid_request", 400);
-		const resolvedPath = resolveWorkspacePath("/" + relativePath);
+		const resolvedPath = resolveWorkspacePath(`/${relativePath}`);
 		if (!resolvedPath) return errorJson("path must resolve to a location within /workspace", "invalid_request", 403);
 		const sandbox = getSandbox$1(getSandboxNs(c.env), c.get("containerUUID"));
 		const rawSessionId = c.req.header("Session-Id");
@@ -1853,7 +1853,7 @@ function createBridgeApp(config) {
 		for (const ex of excludes) if (ex.includes("..")) return errorJson("exclude paths must not contain \"..\"", "invalid_request", 400);
 		const sandbox = getSandbox$1(getSandboxNs(c.env), c.get("containerUUID"));
 		const tmpPath = `/tmp/sandbox-persist-${Date.now()}.tar`;
-		const excludeArgs = excludes.map((rel) => `--exclude ${shellQuote("./" + rel.replace(/^\.\//, ""))}`).join(" ");
+		const excludeArgs = excludes.map((rel) => `--exclude ${shellQuote(`./${rel.replace(/^\.\//, "")}`)}`).join(" ");
 		const tarCmd = excludeArgs ? `tar cf ${shellQuote(tmpPath)} ${excludeArgs} -C ${shellQuote(root)} .` : `tar cf ${shellQuote(tmpPath)} -C ${shellQuote(root)} .`;
 		try {
 			const result = await sandbox.exec(tarCmd);
@@ -2483,7 +2483,7 @@ function bridge(worker, config) {
 		...passThrough,
 		async fetch(request, env$1, ctx) {
 			const url = new URL(request.url);
-			if (url.pathname.startsWith(apiPrefix + "/") || url.pathname === apiPrefix || url.pathname === healthPath) return app.fetch(request, env$1, ctx);
+			if (url.pathname.startsWith(`${apiPrefix}/`) || url.pathname === apiPrefix || url.pathname === healthPath) return app.fetch(request, env$1, ctx);
 			if (worker.fetch) return worker.fetch(request, env$1, ctx);
 			return new Response("Not Found", { status: 404 });
 		},