@eryx-org/eryx 0.15.0 → 0.15.1

package/interfaces/eryx-net-tcp.d.ts

@@ -1,6 +1,15 @@
 /** @module Interface eryx:net/tcp@0.1.0 **/
+/**
+ * @throws {TcpError} To return the error of the result, throw it, or an `Error` that has it as its `payload`.
+ */
 export function connect(host: string, port: number, timeoutMs: number): TcpHandle;
+/**
+ * @throws {TcpError} To return the error of the result, throw it, or an `Error` that has it as its `payload`.
+ */
 export function read(handle: TcpHandle, len: number, timeoutMs: number): Uint8Array;
+/**
+ * @throws {TcpError} To return the error of the result, throw it, or an `Error` that has it as its `payload`.
+ */
 export function write(handle: TcpHandle, timeoutMs: number, data: Uint8Array): number;
 export function close(handle: TcpHandle): void;
 export type TcpHandle = number;

package/interfaces/eryx-net-tls.d.ts

@@ -1,6 +1,15 @@
 /** @module Interface eryx:net/tls@0.1.0 **/
+/**
+ * @throws {TlsError} To return the error of the result, throw it, or an `Error` that has it as its `payload`.
+ */
 export function upgrade(tcp: TcpHandle, hostname: string, timeoutMs: number): TlsHandle;
+/**
+ * @throws {TlsError} To return the error of the result, throw it, or an `Error` that has it as its `payload`.
+ */
 export function read(handle: TlsHandle, len: number, timeoutMs: number): Uint8Array;
+/**
+ * @throws {TlsError} To return the error of the result, throw it, or an `Error` that has it as its `payload`.
+ */
 export function write(handle: TlsHandle, timeoutMs: number, data: Uint8Array): number;
 export function close(handle: TlsHandle): void;
 export type TcpHandle = import('./eryx-net-tcp.js').TcpHandle;

package/interfaces/wasi-filesystem-types.d.ts

@@ -170,31 +170,109 @@ export class Descriptor {
    * This type does not have a public constructor.
    */
   private constructor();
+  /**
+  * @throws {ErrorCode} To return the error of the result, throw it, or an `Error` that has it as its `payload`.
+  */
   readViaStream(offset: Filesize): InputStream;
+  /**
+  * @throws {ErrorCode} To return the error of the result, throw it, or an `Error` that has it as its `payload`.
+  */
   writeViaStream(offset: Filesize): OutputStream;
+  /**
+  * @throws {ErrorCode} To return the error of the result, throw it, or an `Error` that has it as its `payload`.
+  */
   appendViaStream(): OutputStream;
+  /**
+  * @throws {ErrorCode} To return the error of the result, throw it, or an `Error` that has it as its `payload`.
+  */
   advise(offset: Filesize, length: Filesize, advice: Advice): void;
+  /**
+  * @throws {ErrorCode} To return the error of the result, throw it, or an `Error` that has it as its `payload`.
+  */
   syncData(): void;
+  /**
+  * @throws {ErrorCode} To return the error of the result, throw it, or an `Error` that has it as its `payload`.
+  */
   getFlags(): DescriptorFlags;
+  /**
+  * @throws {ErrorCode} To return the error of the result, throw it, or an `Error` that has it as its `payload`.
+  */
   getType(): DescriptorType;
+  /**
+  * @throws {ErrorCode} To return the error of the result, throw it, or an `Error` that has it as its `payload`.
+  */
   setSize(size: Filesize): void;
+  /**
+  * @throws {ErrorCode} To return the error of the result, throw it, or an `Error` that has it as its `payload`.
+  */
   setTimes(dataAccessTimestamp: NewTimestamp, dataModificationTimestamp: NewTimestamp): void;
+  /**
+  * @throws {ErrorCode} To return the error of the result, throw it, or an `Error` that has it as its `payload`.
+  */
   read(length: Filesize, offset: Filesize): [Uint8Array, boolean];
+  /**
+  * @throws {ErrorCode} To return the error of the result, throw it, or an `Error` that has it as its `payload`.
+  */
   write(buffer: Uint8Array, offset: Filesize): Filesize;
+  /**
+  * @throws {ErrorCode} To return the error of the result, throw it, or an `Error` that has it as its `payload`.
+  */
   readDirectory(): DirectoryEntryStream;
+  /**
+  * @throws {ErrorCode} To return the error of the result, throw it, or an `Error` that has it as its `payload`.
+  */
   sync(): void;
+  /**
+  * @throws {ErrorCode} To return the error of the result, throw it, or an `Error` that has it as its `payload`.
+  */
   createDirectoryAt(path: string): void;
+  /**
+  * @throws {ErrorCode} To return the error of the result, throw it, or an `Error` that has it as its `payload`.
+  */
   stat(): DescriptorStat;
+  /**
+  * @throws {ErrorCode} To return the error of the result, throw it, or an `Error` that has it as its `payload`.
+  */
   statAt(pathFlags: PathFlags, path: string): DescriptorStat;
+  /**
+  * @throws {ErrorCode} To return the error of the result, throw it, or an `Error` that has it as its `payload`.
+  */
   setTimesAt(pathFlags: PathFlags, path: string, dataAccessTimestamp: NewTimestamp, dataModificationTimestamp: NewTimestamp): void;
+  /**
+  * @throws {ErrorCode} To return the error of the result, throw it, or an `Error` that has it as its `payload`.
+  */
   linkAt(oldPathFlags: PathFlags, oldPath: string, newDescriptor: Descriptor, newPath: string): void;
+  /**
+  * @throws {ErrorCode} To return the error of the result, throw it, or an `Error` that has it as its `payload`.
+  */
   openAt(pathFlags: PathFlags, path: string, openFlags: OpenFlags, flags: DescriptorFlags): Descriptor;
+  /**
+  * @throws {ErrorCode} To return the error of the result, throw it, or an `Error` that has it as its `payload`.
+  */
   readlinkAt(path: string): string;
+  /**
+  * @throws {ErrorCode} To return the error of the result, throw it, or an `Error` that has it as its `payload`.
+  */
   removeDirectoryAt(path: string): void;
+  /**
+  * @throws {ErrorCode} To return the error of the result, throw it, or an `Error` that has it as its `payload`.
+  */
   renameAt(oldPath: string, newDescriptor: Descriptor, newPath: string): void;
+  /**
+  * @throws {ErrorCode} To return the error of the result, throw it, or an `Error` that has it as its `payload`.
+  */
   symlinkAt(oldPath: string, newPath: string): void;
+  /**
+  * @throws {ErrorCode} To return the error of the result, throw it, or an `Error` that has it as its `payload`.
+  */
   unlinkFileAt(path: string): void;
+  /**
+  * @throws {ErrorCode} To return the error of the result, throw it, or an `Error` that has it as its `payload`.
+  */
   metadataHash(): MetadataHashValue;
+  /**
+  * @throws {ErrorCode} To return the error of the result, throw it, or an `Error` that has it as its `payload`.
+  */
   metadataHashAt(pathFlags: PathFlags, path: string): MetadataHashValue;
 }
 
@@ -203,5 +281,8 @@ export class DirectoryEntryStream {
    * This type does not have a public constructor.
    */
   private constructor();
+  /**
+  * @throws {ErrorCode} To return the error of the result, throw it, or an `Error` that has it as its `payload`.
+  */
   readDirectoryEntry(): DirectoryEntry | undefined;
 }

package/interfaces/wasi-io-streams.d.ts

@@ -15,7 +15,13 @@ export class InputStream {
    * This type does not have a public constructor.
    */
   private constructor();
+  /**
+  * @throws {StreamError} To return the error of the result, throw it, or an `Error` that has it as its `payload`.
+  */
   read(len: bigint): Uint8Array;
+  /**
+  * @throws {StreamError} To return the error of the result, throw it, or an `Error` that has it as its `payload`.
+  */
   blockingRead(len: bigint): Uint8Array;
   subscribe(): Pollable;
 }
@@ -25,9 +31,21 @@ export class OutputStream {
    * This type does not have a public constructor.
    */
   private constructor();
+  /**
+  * @throws {StreamError} To return the error of the result, throw it, or an `Error` that has it as its `payload`.
+  */
   checkWrite(): bigint;
+  /**
+  * @throws {StreamError} To return the error of the result, throw it, or an `Error` that has it as its `payload`.
+  */
   write(contents: Uint8Array): void;
+  /**
+  * @throws {StreamError} To return the error of the result, throw it, or an `Error` that has it as its `payload`.
+  */
   blockingWriteAndFlush(contents: Uint8Array): void;
+  /**
+  * @throws {StreamError} To return the error of the result, throw it, or an `Error` that has it as its `payload`.
+  */
   blockingFlush(): void;
   subscribe(): Pollable;
 }

package/interfaces/wasi-sockets-ip-name-lookup.d.ts

@@ -1,4 +1,7 @@
 /** @module Interface wasi:sockets/ip-name-lookup@0.2.0 **/
+/**
+ * @throws {ErrorCode} To return the error of the result, throw it, or an `Error` that has it as its `payload`.
+ */
 export function resolveAddresses(network: Network, name: string): ResolveAddressStream;
 export type IpAddress = import('./wasi-sockets-network.js').IpAddress;
 export type ErrorCode = import('./wasi-sockets-network.js').ErrorCode;
@@ -10,6 +13,9 @@ export class ResolveAddressStream {
    * This type does not have a public constructor.
    */
   private constructor();
+  /**
+  * @throws {ErrorCode} To return the error of the result, throw it, or an `Error` that has it as its `payload`.
+  */
   resolveNextAddress(): IpAddress | undefined;
   subscribe(): Pollable;
 }

package/interfaces/wasi-sockets-tcp-create-socket.d.ts

@@ -1,4 +1,7 @@
 /** @module Interface wasi:sockets/tcp-create-socket@0.2.0 **/
+/**
+ * @throws {ErrorCode} To return the error of the result, throw it, or an `Error` that has it as its `payload`.
+ */
 export function createTcpSocket(addressFamily: IpAddressFamily): TcpSocket;
 export type IpAddressFamily = import('./wasi-sockets-network.js').IpAddressFamily;
 export type TcpSocket = import('./wasi-sockets-tcp.js').TcpSocket;

package/interfaces/wasi-sockets-tcp.d.ts

@@ -22,31 +22,106 @@ export class TcpSocket {
    * This type does not have a public constructor.
    */
   private constructor();
+  /**
+  * @throws {ErrorCode} To return the error of the result, throw it, or an `Error` that has it as its `payload`.
+  */
   startBind(network: Network, localAddress: IpSocketAddress): void;
+  /**
+  * @throws {ErrorCode} To return the error of the result, throw it, or an `Error` that has it as its `payload`.
+  */
   finishBind(): void;
+  /**
+  * @throws {ErrorCode} To return the error of the result, throw it, or an `Error` that has it as its `payload`.
+  */
   startConnect(network: Network, remoteAddress: IpSocketAddress): void;
+  /**
+  * @throws {ErrorCode} To return the error of the result, throw it, or an `Error` that has it as its `payload`.
+  */
   finishConnect(): [InputStream, OutputStream];
+  /**
+  * @throws {ErrorCode} To return the error of the result, throw it, or an `Error` that has it as its `payload`.
+  */
   startListen(): void;
+  /**
+  * @throws {ErrorCode} To return the error of the result, throw it, or an `Error` that has it as its `payload`.
+  */
   finishListen(): void;
+  /**
+  * @throws {ErrorCode} To return the error of the result, throw it, or an `Error` that has it as its `payload`.
+  */
   accept(): [TcpSocket, InputStream, OutputStream];
+  /**
+  * @throws {ErrorCode} To return the error of the result, throw it, or an `Error` that has it as its `payload`.
+  */
   localAddress(): IpSocketAddress;
+  /**
+  * @throws {ErrorCode} To return the error of the result, throw it, or an `Error` that has it as its `payload`.
+  */
   remoteAddress(): IpSocketAddress;
   isListening(): boolean;
+  /**
+  * @throws {ErrorCode} To return the error of the result, throw it, or an `Error` that has it as its `payload`.
+  */
   setListenBacklogSize(value: bigint): void;
+  /**
+  * @throws {ErrorCode} To return the error of the result, throw it, or an `Error` that has it as its `payload`.
+  */
   keepAliveEnabled(): boolean;
+  /**
+  * @throws {ErrorCode} To return the error of the result, throw it, or an `Error` that has it as its `payload`.
+  */
   setKeepAliveEnabled(value: boolean): void;
+  /**
+  * @throws {ErrorCode} To return the error of the result, throw it, or an `Error` that has it as its `payload`.
+  */
   keepAliveIdleTime(): Duration;
+  /**
+  * @throws {ErrorCode} To return the error of the result, throw it, or an `Error` that has it as its `payload`.
+  */
   setKeepAliveIdleTime(value: Duration): void;
+  /**
+  * @throws {ErrorCode} To return the error of the result, throw it, or an `Error` that has it as its `payload`.
+  */
   keepAliveInterval(): Duration;
+  /**
+  * @throws {ErrorCode} To return the error of the result, throw it, or an `Error` that has it as its `payload`.
+  */
   setKeepAliveInterval(value: Duration): void;
+  /**
+  * @throws {ErrorCode} To return the error of the result, throw it, or an `Error` that has it as its `payload`.
+  */
   keepAliveCount(): number;
+  /**
+  * @throws {ErrorCode} To return the error of the result, throw it, or an `Error` that has it as its `payload`.
+  */
   setKeepAliveCount(value: number): void;
+  /**
+  * @throws {ErrorCode} To return the error of the result, throw it, or an `Error` that has it as its `payload`.
+  */
   hopLimit(): number;
+  /**
+  * @throws {ErrorCode} To return the error of the result, throw it, or an `Error` that has it as its `payload`.
+  */
   setHopLimit(value: number): void;
+  /**
+  * @throws {ErrorCode} To return the error of the result, throw it, or an `Error` that has it as its `payload`.
+  */
   receiveBufferSize(): bigint;
+  /**
+  * @throws {ErrorCode} To return the error of the result, throw it, or an `Error` that has it as its `payload`.
+  */
   setReceiveBufferSize(value: bigint): void;
+  /**
+  * @throws {ErrorCode} To return the error of the result, throw it, or an `Error` that has it as its `payload`.
+  */
   sendBufferSize(): bigint;
+  /**
+  * @throws {ErrorCode} To return the error of the result, throw it, or an `Error` that has it as its `payload`.
+  */
   setSendBufferSize(value: bigint): void;
   subscribe(): Pollable;
+  /**
+  * @throws {ErrorCode} To return the error of the result, throw it, or an `Error` that has it as its `payload`.
+  */
   shutdown(shutdownType: ShutdownType): void;
 }

package/interfaces/wasi-sockets-udp-create-socket.d.ts

@@ -1,4 +1,7 @@
 /** @module Interface wasi:sockets/udp-create-socket@0.2.0 **/
+/**
+ * @throws {ErrorCode} To return the error of the result, throw it, or an `Error` that has it as its `payload`.
+ */
 export function createUdpSocket(addressFamily: IpAddressFamily): UdpSocket;
 export type IpAddressFamily = import('./wasi-sockets-network.js').IpAddressFamily;
 export type UdpSocket = import('./wasi-sockets-udp.js').UdpSocket;

package/interfaces/wasi-sockets-udp.d.ts

@@ -17,6 +17,9 @@ export class IncomingDatagramStream {
    * This type does not have a public constructor.
    */
   private constructor();
+  /**
+  * @throws {ErrorCode} To return the error of the result, throw it, or an `Error` that has it as its `payload`.
+  */
   receive(maxResults: bigint): Array<IncomingDatagram>;
   subscribe(): Pollable;
 }
@@ -26,7 +29,13 @@ export class OutgoingDatagramStream {
    * This type does not have a public constructor.
    */
   private constructor();
+  /**
+  * @throws {ErrorCode} To return the error of the result, throw it, or an `Error` that has it as its `payload`.
+  */
   checkSend(): bigint;
+  /**
+  * @throws {ErrorCode} To return the error of the result, throw it, or an `Error` that has it as its `payload`.
+  */
   send(datagrams: Array<OutgoingDatagram>): bigint;
   subscribe(): Pollable;
 }
@@ -36,16 +45,49 @@ export class UdpSocket {
    * This type does not have a public constructor.
    */
   private constructor();
+  /**
+  * @throws {ErrorCode} To return the error of the result, throw it, or an `Error` that has it as its `payload`.
+  */
   startBind(network: Network, localAddress: IpSocketAddress): void;
+  /**
+  * @throws {ErrorCode} To return the error of the result, throw it, or an `Error` that has it as its `payload`.
+  */
   finishBind(): void;
+  /**
+  * @throws {ErrorCode} To return the error of the result, throw it, or an `Error` that has it as its `payload`.
+  */
   stream(remoteAddress: IpSocketAddress | undefined): [IncomingDatagramStream, OutgoingDatagramStream];
+  /**
+  * @throws {ErrorCode} To return the error of the result, throw it, or an `Error` that has it as its `payload`.
+  */
   localAddress(): IpSocketAddress;
+  /**
+  * @throws {ErrorCode} To return the error of the result, throw it, or an `Error` that has it as its `payload`.
+  */
   remoteAddress(): IpSocketAddress;
+  /**
+  * @throws {ErrorCode} To return the error of the result, throw it, or an `Error` that has it as its `payload`.
+  */
   unicastHopLimit(): number;
+  /**
+  * @throws {ErrorCode} To return the error of the result, throw it, or an `Error` that has it as its `payload`.
+  */
   setUnicastHopLimit(value: number): void;
+  /**
+  * @throws {ErrorCode} To return the error of the result, throw it, or an `Error` that has it as its `payload`.
+  */
   receiveBufferSize(): bigint;
+  /**
+  * @throws {ErrorCode} To return the error of the result, throw it, or an `Error` that has it as its `payload`.
+  */
   setReceiveBufferSize(value: bigint): void;
+  /**
+  * @throws {ErrorCode} To return the error of the result, throw it, or an `Error` that has it as its `payload`.
+  */
   sendBufferSize(): bigint;
+  /**
+  * @throws {ErrorCode} To return the error of the result, throw it, or an `Error` that has it as its `payload`.
+  */
   setSendBufferSize(value: bigint): void;
   subscribe(): Pollable;
 }

package/package.json

@@ -2,7 +2,7 @@
   "name": "@eryx-org/eryx",
   "type": "module",
   "description": "A Python sandbox powered by WebAssembly, for browser and Node.js",
-  "version": "0.15.0",
+  "version": "0.15.1",
   "license": "MIT OR Apache-2.0",
   "repository": {
     "type": "git",

package/shims/net.js

@@ -117,13 +117,18 @@ function checkTimeout(name, value) {
  * Check `netConfig` and fill in the defaults; null disables networking.
  *
  * Throws a TypeError if a network is not a valid CIDR, maxConnections is
- * not a non-negative integer, or a timeout is not greater than zero.
+ * not a non-negative integer, a timeout is not greater than zero, or
+ * httpRules (the Rust crate's method and path rules) are given.
  *
  * @param {import("./net.js").NetConfig | null} netConfig
  * @returns {Policy | null}
  */
 function toPolicy(netConfig) {
   if (!netConfig) return null;
+  // Requests aren't parsed here, so rules couldn't be enforced.
+  if (netConfig.httpRules?.length) {
+    throw new TypeError("httpRules are not supported by the JavaScript host");
+  }
   // Copies, so changing the caller's arrays later can't change the policy.
   const list = (xs, fallback) => Object.freeze([...(xs ?? fallback)]);
   const next = {