npm - @hachej/boring-sandbox - Versions diffs - 0.1.74 - Mend

@hachej/boring-sandbox 0.1.74

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.

Files changed (7) hide show

package/dist/index.d.ts ADDED Viewed

	@@ -0,0 +1,2 @@
1	+
2	+ export { }

package/dist/index.js ADDED Viewed

File without changes

package/dist/providers/index.d.ts ADDED Viewed

	@@ -0,0 +1,2 @@
1	+
2	+ export { }

package/dist/providers/index.js ADDED Viewed

File without changes

package/dist/shared/index.d.ts ADDED Viewed

@@ -0,0 +1,142 @@
+type ProviderFilesystemCapability = "none" | "readonly" | "readwrite";
+type ProviderNetworkIsolation = "none" | "process" | "container" | "microvm" | "provider";
+type ProviderSourceOfTruth = "sandbox-primary" | "storage-primary";
+type ProviderHardening = "none" | "process" | "container" | "microvm" | "provider";
+type ProviderFilesystemPersistence = "none" | "ephemeral" | "session" | "durable" | "provider";
+type ReportedProviderCapability<T> = T | "unknown";
+interface ProviderRuntimeImage {
+    /** Operator-readable image ref, for example registry.example/runtime-node:2026-07. */
+    ref: string;
+    /** Digest is the execution identity and is required by non-dev image users. */
+    digest: string;
+}
+interface ProviderRuntimeSpec {
+    image?: ProviderRuntimeImage;
+}
+interface ProviderCapabilities {
+    fs: ProviderFilesystemCapability;
+    exec: boolean;
+    realBash?: ReportedProviderCapability<boolean>;
+    realBinaries?: ReportedProviderCapability<boolean>;
+    networkIsolation?: ReportedProviderCapability<ProviderNetworkIsolation>;
+    watch: boolean;
+    search: boolean;
+    sourceOfTruth: ProviderSourceOfTruth;
+    provisioningSupport: boolean;
+    providerContractVersion: string;
+    runtimeImage: ReportedProviderCapability<boolean>;
+    hardening?: ReportedProviderCapability<ProviderHardening>;
+    filesystemPersistence?: ReportedProviderCapability<ProviderFilesystemPersistence>;
+}
+declare const PROVIDER_CAPABILITY_ERROR_CODES: {
+    readonly unsupportedRequirement: "SANDBOX_PROVIDER_UNSUPPORTED_REQUIREMENT";
+    readonly unsafeFallback: "SANDBOX_PROVIDER_UNSAFE_FALLBACK";
+    readonly unknownRequiredCapability: "SANDBOX_PROVIDER_UNKNOWN_REQUIRED_CAPABILITY";
+};
+type ProviderCapabilityErrorCode = (typeof PROVIDER_CAPABILITY_ERROR_CODES)[keyof typeof PROVIDER_CAPABILITY_ERROR_CODES];
+declare const PROVIDER_CONTRACT_VERSION = "boring-sandbox.provider.v1";
+type SandboxProviderId = "none" | "readonly" | "direct" | "bwrap" | "vercel-sandbox" | "remote-worker";
+type RuntimeModeId = "pure" | "readonly" | "direct" | "local" | "vercel-sandbox" | "remote-worker";
+declare const PROVIDER_CAPABILITIES: {
+    readonly none: {
+        readonly fs: "none";
+        readonly exec: false;
+        readonly realBash: false;
+        readonly realBinaries: false;
+        readonly watch: false;
+        readonly search: false;
+        readonly sourceOfTruth: "storage-primary";
+        readonly provisioningSupport: false;
+        readonly providerContractVersion: "boring-sandbox.provider.v1";
+        readonly runtimeImage: false;
+        readonly hardening: "none";
+        readonly filesystemPersistence: "none";
+    };
+    readonly readonly: {
+        readonly fs: "readonly";
+        readonly exec: false;
+        readonly realBash: false;
+        readonly realBinaries: false;
+        readonly watch: true;
+        readonly search: true;
+        readonly sourceOfTruth: "storage-primary";
+        readonly provisioningSupport: false;
+        readonly providerContractVersion: "boring-sandbox.provider.v1";
+        readonly runtimeImage: false;
+        readonly hardening: "none";
+        readonly filesystemPersistence: "durable";
+    };
+    readonly direct: {
+        readonly fs: "readwrite";
+        readonly exec: true;
+        readonly realBash: "unknown";
+        readonly realBinaries: "unknown";
+        readonly networkIsolation: "none";
+        readonly watch: true;
+        readonly search: true;
+        readonly sourceOfTruth: "storage-primary";
+        readonly provisioningSupport: true;
+        readonly providerContractVersion: "boring-sandbox.provider.v1";
+        readonly runtimeImage: false;
+        readonly hardening: "none";
+        readonly filesystemPersistence: "durable";
+    };
+    readonly bwrap: {
+        readonly fs: "readwrite";
+        readonly exec: true;
+        readonly realBash: "unknown";
+        readonly realBinaries: "unknown";
+        readonly networkIsolation: "none";
+        readonly watch: true;
+        readonly search: true;
+        readonly sourceOfTruth: "storage-primary";
+        readonly provisioningSupport: true;
+        readonly providerContractVersion: "boring-sandbox.provider.v1";
+        readonly runtimeImage: false;
+        readonly hardening: "process";
+        readonly filesystemPersistence: "durable";
+    };
+    readonly "vercel-sandbox": {
+        readonly fs: "readwrite";
+        readonly exec: true;
+        readonly realBash: true;
+        readonly realBinaries: true;
+        readonly networkIsolation: "provider";
+        readonly watch: true;
+        readonly search: true;
+        readonly sourceOfTruth: "sandbox-primary";
+        readonly provisioningSupport: true;
+        readonly providerContractVersion: "boring-sandbox.provider.v1";
+        readonly runtimeImage: "unknown";
+        readonly hardening: "provider";
+        readonly filesystemPersistence: "provider";
+    };
+    readonly "remote-worker": {
+        readonly fs: "readwrite";
+        readonly exec: true;
+        readonly realBash: "unknown";
+        readonly realBinaries: "unknown";
+        readonly networkIsolation: "unknown";
+        readonly watch: true;
+        readonly search: true;
+        readonly sourceOfTruth: "sandbox-primary";
+        readonly provisioningSupport: false;
+        readonly providerContractVersion: "boring-sandbox.provider.v1";
+        readonly runtimeImage: "unknown";
+        readonly hardening: "unknown";
+        readonly filesystemPersistence: "unknown";
+    };
+};
+declare const MODE_TO_PROVIDER: {
+    readonly pure: "none";
+    readonly readonly: "readonly";
+    readonly direct: "direct";
+    readonly local: "bwrap";
+    readonly "vercel-sandbox": "vercel-sandbox";
+    readonly "remote-worker": "remote-worker";
+};
+type ProviderCapabilityMatrix = typeof PROVIDER_CAPABILITIES;
+type RuntimeModeProviderMap = typeof MODE_TO_PROVIDER;
+export { MODE_TO_PROVIDER, PROVIDER_CAPABILITIES, PROVIDER_CAPABILITY_ERROR_CODES, PROVIDER_CONTRACT_VERSION, type ProviderCapabilities, type ProviderCapabilityErrorCode, type ProviderCapabilityMatrix, type ProviderFilesystemCapability, type ProviderFilesystemPersistence, type ProviderHardening, type ProviderNetworkIsolation, type ProviderRuntimeImage, type ProviderRuntimeSpec, type ProviderSourceOfTruth, type ReportedProviderCapability, type RuntimeModeId, type RuntimeModeProviderMap, type SandboxProviderId };

package/dist/shared/index.js ADDED Viewed

@@ -0,0 +1,113 @@
+// src/shared/capability.ts
+var PROVIDER_CAPABILITY_ERROR_CODES = {
+  unsupportedRequirement: "SANDBOX_PROVIDER_UNSUPPORTED_REQUIREMENT",
+  unsafeFallback: "SANDBOX_PROVIDER_UNSAFE_FALLBACK",
+  unknownRequiredCapability: "SANDBOX_PROVIDER_UNKNOWN_REQUIRED_CAPABILITY"
+};
+// src/shared/providerMatrix.ts
+var PROVIDER_CONTRACT_VERSION = "boring-sandbox.provider.v1";
+var PROVIDER_CAPABILITIES = {
+  none: {
+    fs: "none",
+    exec: false,
+    realBash: false,
+    realBinaries: false,
+    watch: false,
+    search: false,
+    sourceOfTruth: "storage-primary",
+    provisioningSupport: false,
+    providerContractVersion: PROVIDER_CONTRACT_VERSION,
+    runtimeImage: false,
+    hardening: "none",
+    filesystemPersistence: "none"
+  },
+  readonly: {
+    fs: "readonly",
+    exec: false,
+    realBash: false,
+    realBinaries: false,
+    watch: true,
+    search: true,
+    sourceOfTruth: "storage-primary",
+    provisioningSupport: false,
+    providerContractVersion: PROVIDER_CONTRACT_VERSION,
+    runtimeImage: false,
+    hardening: "none",
+    filesystemPersistence: "durable"
+  },
+  direct: {
+    fs: "readwrite",
+    exec: true,
+    realBash: "unknown",
+    realBinaries: "unknown",
+    networkIsolation: "none",
+    watch: true,
+    search: true,
+    sourceOfTruth: "storage-primary",
+    provisioningSupport: true,
+    providerContractVersion: PROVIDER_CONTRACT_VERSION,
+    runtimeImage: false,
+    hardening: "none",
+    filesystemPersistence: "durable"
+  },
+  bwrap: {
+    fs: "readwrite",
+    exec: true,
+    realBash: "unknown",
+    realBinaries: "unknown",
+    networkIsolation: "none",
+    watch: true,
+    search: true,
+    sourceOfTruth: "storage-primary",
+    provisioningSupport: true,
+    providerContractVersion: PROVIDER_CONTRACT_VERSION,
+    runtimeImage: false,
+    hardening: "process",
+    filesystemPersistence: "durable"
+  },
+  "vercel-sandbox": {
+    fs: "readwrite",
+    exec: true,
+    realBash: true,
+    realBinaries: true,
+    networkIsolation: "provider",
+    watch: true,
+    search: true,
+    sourceOfTruth: "sandbox-primary",
+    provisioningSupport: true,
+    providerContractVersion: PROVIDER_CONTRACT_VERSION,
+    runtimeImage: "unknown",
+    hardening: "provider",
+    filesystemPersistence: "provider"
+  },
+  "remote-worker": {
+    fs: "readwrite",
+    exec: true,
+    realBash: "unknown",
+    realBinaries: "unknown",
+    networkIsolation: "unknown",
+    watch: true,
+    search: true,
+    sourceOfTruth: "sandbox-primary",
+    provisioningSupport: false,
+    providerContractVersion: PROVIDER_CONTRACT_VERSION,
+    runtimeImage: "unknown",
+    hardening: "unknown",
+    filesystemPersistence: "unknown"
+  }
+};
+var MODE_TO_PROVIDER = {
+  pure: "none",
+  readonly: "readonly",
+  direct: "direct",
+  local: "bwrap",
+  "vercel-sandbox": "vercel-sandbox",
+  "remote-worker": "remote-worker"
+};
+export {
+  MODE_TO_PROVIDER,
+  PROVIDER_CAPABILITIES,
+  PROVIDER_CAPABILITY_ERROR_CODES,
+  PROVIDER_CONTRACT_VERSION
+};

package/package.json ADDED Viewed

@@ -0,0 +1,42 @@
+{
+  "name": "@hachej/boring-sandbox",
+  "version": "0.1.74",
+  "type": "module",
+  "license": "MIT",
+  "description": "Sandbox provider contracts and implementations for Boring runtimes.",
+  "repository": {
+    "type": "git",
+    "url": "https://github.com/hachej/boring-ui"
+  },
+  "homepage": "https://github.com/hachej/boring-ui",
+  "files": [
+    "dist"
+  ],
+  "exports": {
+    ".": {
+      "types": "./dist/index.d.ts",
+      "import": "./dist/index.js"
+    },
+    "./shared": {
+      "types": "./dist/shared/index.d.ts",
+      "import": "./dist/shared/index.js"
+    },
+    "./providers": {
+      "types": "./dist/providers/index.d.ts",
+      "import": "./dist/providers/index.js"
+    }
+  },
+  "scripts": {
+    "build": "tsup",
+    "typecheck": "tsc --noEmit",
+    "check:invariants": "node ./scripts/check-invariants.mjs",
+    "lint": "pnpm run typecheck && pnpm run check:invariants",
+    "test": "vitest run --passWithNoTests",
+    "clean": "rm -rf dist .tsbuildinfo"
+  },
+  "devDependencies": {
+    "tsup": "^8.4.0",
+    "typescript": "^6.0.3",
+    "vitest": "^4.1.9"
+  }
+}