@mcpher/gas-fakes 1.0.14 → 1.0.15

package/README.RU.md

@@ -312,4 +312,23 @@ const getParentsIterator = ({
 
 ## Помощь
 
-Как я уже упоминал ранее, чтобы развивать это дальше, мне понадобится много помощи для расширения поддерживаемых методов и сервисов - поэтому, если вы считаете, что это будет полезно для вас, и хотите сотрудничать, пожалуйста, свяжитесь со мной по [bruce@mcpher.com](mailto:bruce@mcpher.com) и мы поговорим.
+Как я уже упоминал ранее, чтобы развивать это дальше, мне понадобится много помощи для расширения поддерживаемых методов и сервисов - поэтому, если вы считаете, что это будет полезно для вас, и хотите сотрудничать, пожалуйста, свяжитесь со мной по [bruce@mcpher.com](mailto:bruce@mcpher.com) и мы поговорим.
+
+
+## Translations and writeups
+
+- [initial idea and thoughts](https://ramblings.mcpher.com/a-proof-of-concept-implementation-of-apps-script-environment-on-node/)
+- [Inside the volatile world of a Google Document](https://ramblings.mcpher.com/inside-the-volatile-world-of-a-google-document/
+- [Apps Script Services on Node – using apps script libraries](https://ramblings.mcpher.com/apps-script-services-on-node-using-apps-script-libraries/)
+- [Apps Script environment on Node – more services](https://ramblings.mcpher.com/apps-script-environment-on-node-more-services/)
+- [Turning async into synch on Node using workers](https://ramblings.mcpher.com/turning-async-into-synch-on-node-using-workers/)
+- [All about Apps Script Enums and how to fake them](https://ramblings.mcpher.com/all-about-apps-script-enums-and-how-to-fake-them/)
+- [Russian version](README.RU.md) ([credit Alex Ivanov](https://github.com/oshliaer)) - needs updating
+- [colaborators](collaborators.md) - additional information for collaborators
+- [oddities](oddities.md) - a collection of oddities uncovered during this project
+- [gemini](gemini.md) - some reflections and experiences on using gemini to help code large projects
+- [named colors](named-colors.md) - colors supported by Apps Script
+- [setup env](setup-env.md) - ([credit Eric Shapiro] - additional info on contents of .env file
+- [this file](README.md)
+- [named colors](named-colors.md)
+- [sandbox](sandbox.md)

package/README.md

@@ -143,4 +143,5 @@ As I mentioned earlier, to take this further, I'm going to need a lot of help to
 - [named colors](named-colors.md) - colors supported by Apps Script
 - [setup env](setup-env.md) - ([credit Eric Shapiro] - additional info on contents of .env file
 - [this file](README.md)
-- [named colors](named-colors.md)
+- [named colors](named-colors.md)
+- [sandbox](sandbox.md)

package/gasmess/bruce/d.js

@@ -0,0 +1,4 @@
+import '../../main.js';
+const res1 = Sheets.Spreadsheets.create({ properties: { title: "sample" } });
+const res2 = Sheets.Spreadsheets.get(res1.spreadsheetId);
+console.log(res2);

package/gasmess/bruce/d1.js

@@ -0,0 +1,4 @@
+import '../../main.js';
+const d = DriveApp.createFile('my-test-file.txt', 'Hello from gas-fakes!');
+const e = DriveApp.getFileById(d.getId());
+console.log(e.getName());

package/gasmess/bruce/dreport.js

@@ -0,0 +1,81 @@
+import is from '@sindresorhus/is';
+export const whichType = (element) => {
+  const ts = ["paragraph", "pageBreak", "textRun", "table", "tableRows", "tableCells", "content"]
+  const [t] = ts.filter(f => Reflect.has(element, f))
+  return t
+}
+
+export const report = (doc, what) => {
+  let newdoc = doc
+  let body = doc.body
+  let tabs = doc.tabs
+  // handle case where tabs is handling legacy doc.
+  if (!body) {
+    if (!tabs) {
+      console.log('missing tabs')
+      console.log(JSON.stringify(doc))
+    } else {
+      console.log('getting body from tabs')
+      newdoc = tabs[0].documentTab
+      body = newdoc.body
+    }
+  }
+
+  // drop the section break
+  const children = body.content.slice(1)
+  what += ` -children:${children.length}`
+  console.log(what)
+  let text = '  '
+  console.log(stringCircular(children))
+  const childProps = ["elements", "tableRows", "tableCells", "content", "listItem"]
+  const typer = (child, text, spaces = " ") => {
+    const type = whichType(child)
+    if (type) {
+      text += `\n${spaces}-${type} ${child.startIndex}:${child.endIndex}`
+      if (type === 'textRun') {
+        text += ` ${JSON.stringify(child[type].content)}`
+      }
+      const key = Reflect.ownKeys(child[type]).find(f => childProps.includes(f))
+      let arr = key && child[type][key]
+      if (!arr && is.array(child[type])) arr = child[type]
+
+      if (is.array(arr)) {
+        //text += spaces
+        arr.forEach(f => text = typer(f, text, spaces + "  "))
+        //text += ''
+      }
+    }
+    return text
+  }
+  return children.map(f => typer(f, text)).join("\n")
+}
+
+
+export const scl = (doc) => {
+  if (!DocumentApp.isFake) {
+    const id = doc.getId()
+    doc.saveAndClose()
+    doc = DocumentApp.openById(id)
+  }
+  return doc
+}
+
+// The custom replacer function
+const getCircularReplacer = () => {
+  const seen = new WeakSet(); // Use WeakSet to avoid memory leaks
+  return (_, value) => {
+    // If the value is an object and not null
+    if (typeof value === "object" && value !== null) {
+      // If we have already seen this object, it's a circular reference
+      if (seen.has(value)) {
+        return "[Circular]"; // Replace it with a placeholder
+      }
+      // If it's a new object, add it to our cache
+      seen.add(value);
+    }
+    // Return the value to be serialized
+    return value;
+  };
+};
+
+export const stringCircular = (ob) => JSON.stringify(ob, getCircularReplacer());

package/gasmess/bruce/pbx.js

@@ -1,54 +1,26 @@
 import '../../main.js';
 import { moveToTempFolder, deleteTempFile } from '../tempfolder.js';
-import is from '@sindresorhus/is';
+import { report, scl } from './dreport.js';
+
 const suffix = "-bruce"
 
-const whichType = (element) => {
-  const ts = ["paragraph", "pageBreak", "textRun","table","tableRows","tableCells","content"]
-  const [t] = ts.filter(f => Reflect.has(element, f))
-  //if (!t) console.log('skipping element', element)
-  return t
-}
+const tabsa = () => {
 
-const report = (doc, what) => {
-  const body = doc.body
-  // drop the section break
-  const children = body.content.slice(1)
-  what += ` -children:${children.length}`
-  console.log(what)
-  let text = '  '
-
-  const childProps = ["elements", "tableRows", "tableCells","content"]
-  const typer = (child, text, spaces = " ") => {
-    const type = whichType(child)
-    if (type) {
-      text += `\n${spaces}-${type} ${child.startIndex}:${child.endIndex}`
-      if (type === 'textRun') {
-        text += ` ${JSON.stringify(child[type].content)}`
-      }
-      const key = Reflect.ownKeys(child[type]).find (f=>childProps.includes(f))
-      let arr = key && child[type][key] 
-      if (!arr && is.array (child[type])) arr = child[type]
-
-      if (is.array(arr)) {
-        //text += spaces
-        arr.forEach(f => text = typer(f, text, spaces + "  "))
-        //text += ''
-      }
-    }
-    return text
-  }
-  return children.map(f => typer(f, text)).join("\n")
-}
-const scl = (doc) => {
-  if (!DocumentApp.isFake) {
-    const id = doc.getId()
-    doc.saveAndClose()
-    doc = DocumentApp.openById(id)
-  }
-  return doc
+  let doc = DocumentApp.create("abc")
+  const id = doc.getId()
+  moveToTempFolder(id, suffix)
+
+  let body = doc.getBody()
+  console.log (body)
+  doc = scl(doc)
+  console.log(report(Docs.Documents.get(id, {includeTabsContent: true}), `\n1.empty document`))
+
+  
+  deleteTempFile(id)
 }
 
+//tabsa()
+
 // this is testing the new simplified method
 const pbnew = () => {
   let doc = DocumentApp.create("abc")
@@ -56,6 +28,16 @@ const pbnew = () => {
   moveToTempFolder(id, suffix)
   let body
 
+  body = doc.getBody()
+  body.appendListItem('l0a append')
+  doc = scl(doc)
+  console.log(report(Docs.Documents.get(id), `\nl0a.appended list item l0a`))
+
+  body = doc.getBody()
+  body.appendListItem('l01b append')
+  doc = scl(doc)
+  console.log(report(Docs.Documents.get(id), `\nl0a.appended list item l0b`))
+
   body = doc.getBody()
   body.appendTable([['']])
   doc = scl(doc)
@@ -66,6 +48,12 @@ const pbnew = () => {
   doc = scl(doc)
   console.log(report(Docs.Documents.get(id), `\n1.appended para`))
 
+  body = doc.getBody()
+  body.appendListItem('l1 append')
+  doc = scl(doc)
+  console.log(report(Docs.Documents.get(id), `\nl1.appended list item l1`))
+
+
   body = doc.getBody()
   body.insertParagraph(0, 'para 0')
   doc = scl(doc)
@@ -131,8 +119,8 @@ const pbnew = () => {
 
   deleteTempFile(id)
 }
-pbnew()
 
+pbnew()
 
 
 

package/gasmess/tanaike/for_simple_test.js

@@ -2,5 +2,11 @@ import "../../main.js";
 import { FakeSpreadsheetApp } from "../../src/services/spreadsheetapp/fakespreadsheetapp.js";
 import { moveToTempFolder, deleteTempFile } from "./tempfolder.js";
 
-const spreadsheet = SpreadsheetApp.openById("");
+const spreadsheet = SpreadsheetApp.openById("###");
 const sheet = spreadsheet.getSheets()[0];
+sheet.setName("sample");
+
+const r = spreadsheet.getRangeByName("test111");
+if (r) {
+  console.log(r.getA1Notation());
+}

package/gasmess/tanaike/sample4.js

@@ -0,0 +1,59 @@
+import "../../main.js";
+import { FakeSpreadsheetApp } from "../../src/services/spreadsheetapp/fakespreadsheetapp.js";
+import { moveToTempFolder, deleteTempFile } from "./tempfolder.js";
+
+const spreadsheet = SpreadsheetApp.create("sample");
+const sheet = spreadsheet.getSheets()[0];
+const spreadsheetId = spreadsheet.getId();
+moveToTempFolder(spreadsheetId);
+
+// Create named ranges
+const name1 = "sampleNamedRange1";
+const range1 = sheet.getRange("A1:B2");
+const name2 = "sampleNamedRange2";
+const range2 = sheet.getRange("C1:E2");
+spreadsheet.setNamedRange(name1, range1);
+spreadsheet.setNamedRange(name2, range2);
+
+// Get created named ranges from Spreadsheet
+const res1 = spreadsheet
+  .getNamedRanges()
+  .map(
+    (rr) =>
+      `${rr.getName()}: '${rr.getRange().getSheet().getSheetName()}'!${rr
+        .getRange()
+        .getA1Notation()}`
+  );
+console.log(res1);
+
+// Get created named ranges from Sheet
+const res2 = sheet
+  .getNamedRanges()
+  .map(
+    (rr) =>
+      `${rr.getName()}: '${rr.getRange().getSheet().getSheetName()}'!${rr
+        .getRange()
+        .getA1Notation()}`
+  );
+console.log(res2);
+
+// Update named ranges.
+spreadsheet.getNamedRanges().forEach((r, i) => {
+  r.setName(`${r.getName()}_${i + 10}`);
+  const range = r.getRange().offset(0, 2);
+  r.setRange(range);
+});
+const res3 = spreadsheet
+  .getNamedRanges()
+  .map(
+    (rr) =>
+      `${rr.getName()}: '${rr.getRange().getSheet().getSheetName()}'!${rr
+        .getRange()
+        .getA1Notation()}`
+  );
+console.log(res3);
+
+// Remove named ranges
+spreadsheet.getNamedRanges().forEach((r) => r.remove());
+
+deleteTempFile(spreadsheetId);

package/ghissues/sandbox-issue.sh

@@ -0,0 +1,31 @@
+#!/bin/bash
+
+# A shell script to create a GitHub issue for the sandbox feature.
+
+# Issue title
+TITLE="Improve Sandbox Mode to fully emulate drive.file scope"
+
+# Issue body in markdown
+BODY=$(cat <<'EOF'
+## Summary
+
+The current implementation of `gas-fakes` requires the full `https://www.googleapis.com/auth/drive` scope for initialization, primarily to access metadata about the root Drive folder. This is a stumbling block for users who want to run tests in a more restrictive environment using only the `drive.file` scope.
+
+The `ScriptApp.__behavior.sandBoxMode` was introduced as a clever workaround to *emulate* the `drive.file` scope during test execution, but it doesn't solve the initial authorization requirement.
+
+For more details on the current sandbox implementation, see sandbox.md.
+
+## TODO
+
+We need to investigate ways to remove the dependency on root folder access during the `FakeDriveApp` initialization. This would allow `gas-fakes` to operate with only the `drive.file` scope, making the sandbox feature a true end-to-end emulation.
+
+Possible areas to explore:
+- Can we mock or bypass the root folder check during initialization if a specific `drive.file` mode is detected?
+- Can we lazy-initialize parts of `FakeDriveApp` that require root access, and only fail if those specific methods (like `getRootFolder()`) are called without sufficient permissions?
+
+This would be a significant improvement for security-conscious development and testing workflows.
+EOF
+)
+
+# Create the issue using GitHub CLI
+gh issue create --title "$TITLE" --body "$BODY" --label "enhancement" --label "help wanted"

package/package.json

@@ -4,16 +4,17 @@
   },
   "dependencies": {
     "@mcpher/fake-gasenum": "^1.0.2",
+    "@mcpher/gas-fakes": "^1.0.14",
     "@mcpher/unit": "^1.1.11",
     "@sindresorhus/is": "^7.0.1",
     "archiver": "^7.0.1",
     "get-stream": "^9.0.1",
-    "googleapis": "^150.0.1",
-    "got": "^14.4.5",
+    "googleapis": "^157.0.0",
+    "got": "^14.4.7",
     "into-stream": "^8.0.1",
-    "keyv": "^5.2.3",
-    "keyv-file": "^5.1.1",
-    "mime": "^4.0.6",
+    "keyv": "^5.5.0",
+    "keyv-file": "^5.1.3",
+    "mime": "^4.0.7",
     "sleep-synchronously": "^2.0.0",
     "subsume": "^4.0.0",
     "to-readable-stream": "^4.0.0",
@@ -45,10 +46,13 @@
     "testslides": "cp mainlocal.js main.js &&  node --env-file=.env ./test/testslides.js execute",
     "testdocsnext": "cp mainlocal.js main.js &&  node --env-file=.env ./test/testdocsnext.js execute",
     "testsheetstext": "cp mainlocal.js main.js &&  node --env-file=.env ./test/testsheetstext.js execute",
+    "testsheetsrange": "cp mainlocal.js main.js &&  node --env-file=.env ./test/testsheetsrange.js execute",
+    "testdocslistitems": "cp mainlocal.js main.js &&  node --env-file=.env ./test/testdocslistitems.js execute",
+    "testdocsall": "cp mainlocal.js main.js &&  node --env-file=.env ./test/testdocsall.js",
     "pub": "cp mainlocal.js main.js && npm publish --access public"
   },
   "name": "@mcpher/gas-fakes",
-  "version": "1.0.14",
+  "version": "1.0.15",
   "license": "MIT",
   "main": "main.js",
   "description": "A proof of concept implementation of Apps Script Environment on Node",

package/src/services/advdocs/docapis.js

@@ -1,11 +1,15 @@
 import { google } from "googleapis";
 import { Auth } from '../../support/auth.js'
+import { syncLog} from '../../support/workersync/synclogger.js'
 
-export const getApiClient = (auth) => {
-  return google.docs({ version: 'v1', auth });
-}
+let __client = null;
 
-export const getAuthedClient = () => {
+export const getDocsApiClient = () => {
   const auth = Auth.getAuth()
-  return getApiClient(auth)
-}
+  if (!__client) {
+    syncLog('Creating new Docs API client');
+    __client = google.docs({ version: 'v1', auth });
+  }
+  return __client;
+}
+

package/src/services/advdocs/fakeadvdocs.js

@@ -2,14 +2,12 @@
  * Advanced sheets service
  */
 import { Proxies } from '../../support/proxies.js'
-import { advClassMaker, notYetImplemented } from '../../support/helpers.js'
-import { getAuthedClient } from './docapis.js'
+import { advClassMaker } from '../../support/helpers.js'
 import { newFakeAdvDocuments } from './fakeadvdocuments.js'
 import { docsCacher } from '../../support/docscacher.js';
 
 class FakeAdvDocs {
   constructor() {
-    this.client = Proxies.guard(getAuthedClient())
     this.__fakeObjectType = "Docs"
 
     const propLists = {

package/src/services/advdocs/fakeadvdocuments.js

@@ -9,6 +9,7 @@ import { Syncit } from '../../support/syncit.js'
 import is from '@sindresorhus/is'
 import { FakeAdvResource } from '../common/fakeadvresource.js';
 
+
 /**
  * the advanced docs Apps Script service faked - Documents class
  * @class FakeAdvDocuments
@@ -18,6 +19,19 @@ class FakeAdvDocuments extends FakeAdvResource {
     super(docs, 'documents', Syncit.fxDocs);
     this.__fakeObjectType = "Docs.Documents";
   }
+  // in sandbox mode only files created in this instance are
+  __allowed(id) {
+    if (!ScriptApp.__behavior.isAccessible(id)) {
+      throw new Error(`Access to document ${id} is not allowed in sandbox mode`);
+    }
+    return id
+  }
+  __addAllowed(id) {
+    if (ScriptApp.__behavior.sandBoxMode) {
+      ScriptApp.__behavior.addFile(id);
+    }
+    return id
+  }
 
   create(resource, options) {
     const { nargs, matchThrow } = signatureArgs(arguments, "Docs.Documents.create")
@@ -31,7 +45,7 @@ class FakeAdvDocuments extends FakeAdvResource {
 
     // maybe we need to throw an error
     ssError(response, "create")
-
+    this.__addAllowed(data.documentId);
     return data
   }
 
@@ -42,11 +56,12 @@ class FakeAdvDocuments extends FakeAdvResource {
       matchThrow("API call to docs.documents.batchUpdate failed with error: Invalid JSON payload received.");
     }
 
+
     // Invalidate the cache for this document since we are updating it.
     docsCacher.clear(documentId);
     // console.log (JSON.stringify(requests))
     const { response, data } = this._call("batchUpdate", {
-      documentId: documentId,
+      documentId: this.__allowed(documentId),
       requestBody: requests
     });
 
@@ -87,7 +102,7 @@ class FakeAdvDocuments extends FakeAdvResource {
 
     if (is.nonEmptyObject(options) && !Reflect.ownKeys(options || {}).every(f => optionsSet.has(f))) matchThrow();
 
-    const params = { documentId, ...(options || {}) };
+    const params = {documentId: this.__allowed(documentId), ...(options || {}) };
 
     const { response, data } = this._call("get", params);
     ssError(response, 'get');

package/src/services/advdrive/drapis.js

@@ -1,11 +1,14 @@
 import { google } from "googleapis";
 import { Auth } from '../../support/auth.js'
+import { syncLog} from '../../support/workersync/synclogger.js'
 
-export const getApiClient = (auth) => {
-  return google.drive({ version: 'v3', auth });
-}
-
-export const getAuthedClient = () => {
+let __client = null;
+syncLog('...importing Drive API');
+export const getDriveApiClient = () => {
   const auth = Auth.getAuth()
-  return getApiClient(auth)
-}
+  if (!__client) {
+    syncLog('Creating new Drive API client');
+    __client = google.drive({ version: 'v3', auth });
+  }
+  return __client;
+}

package/src/services/advdrive/fakeadvdrive.js

@@ -3,7 +3,6 @@
  */
 import { Proxies } from '../../support/proxies.js'
 import { notYetImplemented } from '../../support/helpers.js'
-import { getAuthedClient } from './drapis.js'
 import { newFakeAdvDriveAbout } from './fakeadvdriveabout.js'
 import { newFakeAdvDriveFiles } from './fakeadvdrivefiles.js';
 import { newFakeAdvDriveApps } from './fakeadvdriveapps.js'
@@ -17,7 +16,6 @@ import { getDrivePerformance } from '../../support/filecache.js';
 
 class FakeAdvDrive {
   constructor() {
-    this.client = Proxies.guard(getAuthedClient())
     this.__fakeObjectType = "Drive"
   }
   toString() {
@@ -71,6 +69,25 @@ class FakeAdvDrive {
   __getDrivePerformance() {
     return getDrivePerformance()
   }
+  // in sandbox mode only files created in this instance are
+  __allowed(id) {
+    // initially we will allow access to root here 
+    // TODO - need to find a way to work without a root required in DriveApp
+    if (id === 'root') {
+      return id
+    }
+
+    if (!ScriptApp.__behavior.isAccessible(id)) {
+      throw new Error(`Access to file ${id} is not allowed in sandbox mode`);
+    }
+    return id
+  }
+  __addAllowed(id) {
+    if (ScriptApp.__behavior.sandBoxMode) {
+      ScriptApp.__behavior.addFile(id);
+    }
+    return id
+  }
 
 }
 

package/src/services/advdrive/fakeadvdrivefiles.js

@@ -52,6 +52,7 @@ class FakeAdvDriveFiles {
     /// extract out the fieldslist
     const fields = params.fields.replace(/.*files\(([^)]*)\).*/,"$1")
 
+    /// TODO - filter out any files we wouldn't be allowed to see in sandbox mode
     data.files.forEach(f => {
       improveFileCache(f.id, f,fields)
     })
@@ -114,7 +115,7 @@ class FakeAdvDriveFiles {
    * @returns {Drive.File}
    */
   get(id, params = {}, { allow404 = true } = {}) {
-    const {data} = Syncit.fxDriveGet ({ id, params, allow404, allowCache: true }) 
+    const {data} = Syncit.fxDriveGet ({ id: this.drive.__allowed(id), prop: apiProp, method: 'get', params, allow404, allowCache: true }) 
     return data
   }
 
@@ -132,7 +133,9 @@ class FakeAdvDriveFiles {
 
     // must have some kind of name so derive if not given
     const name = file.name || blob?.getName() || (isFolder(file) ? "New Folder" : "Untitled")
-    return updateOrCreate ({method: "create", file: { ...file, name }, blob, fields, params })
+    const d = updateOrCreate ({method: "create", file: { ...file, name }, blob, fields, params })
+    this.drive.__addAllowed(d.id);
+    return d
 
   }
 
@@ -153,7 +156,7 @@ class FakeAdvDriveFiles {
     if (!is.nonEmptyString(fileId)) {
       throw new Error(`API call to drive.files.update failed with error: Required`)
     }
-    return updateOrCreate ({method: 'update', file,  blob, fileId , fields, params})
+    return updateOrCreate ({method: 'update', file,  blob, fileId: this.drive.__allowed(fileId) , fields, params})
   }
   /**
    * ceate a file and optionally upload some data
@@ -169,13 +172,13 @@ class FakeAdvDriveFiles {
     const fields = mergeParamStrings(options.fields || "",minFields)
     const params = {
       fields,
-      fileId,
+      fileId: this.drive.__allowed(fileId),
       resource: file
     }
 
     const { response, data } = Syncit.fxDrive({ prop: apiProp, method: 'copy', params, options })
     checkResponse(data?.id, response, false)
-    improveFileCache(data.id, data,fields)
+    improveFileCache(this.drive.__addAllowed(data.id), data,fields)
     return data
 
   }

package/src/services/advdrive/fakeadvdrivepermissions.js

@@ -8,7 +8,7 @@ class FakeAdvDrivePermissions extends FakeAdvResource {
     // The service name is 'permissions', and it uses the main Drive sync method.
     super(drive, 'permissions', Syncit.fxDrive);
     this.__fakeObjectType = "Drive.Permissions";
-
+    this.drive = drive;
     const props = ['get', 'update'];
     props.forEach(f => {
       if (!this[f]) {
@@ -23,7 +23,7 @@ class FakeAdvDrivePermissions extends FakeAdvResource {
 
     const params = {
       resource,
-      fileId,
+      fileId: this.drive.__allowed(fileId),
       ...(optionalArgs || {})
     };
     const { data } = this._call('create', params);
@@ -35,7 +35,7 @@ class FakeAdvDrivePermissions extends FakeAdvResource {
     if (nargs < 2 || nargs > 3) matchThrow();
 
     const params = {
-      fileId,
+      fileId: this.drive.__allowed(fileId),
       permissionId,
       ...(optionalArgs || {})
     };
@@ -47,7 +47,7 @@ class FakeAdvDrivePermissions extends FakeAdvResource {
     const { nargs, matchThrow } = signatureArgs(arguments, "Drive.Permissions.list");
     if (nargs < 1 || nargs > 2) matchThrow();
 
-    const params = { fileId, ...(optionalArgs || {}) };
+    const params = { fileId: this.drive.__allowed(fileId), ...(optionalArgs || {}) };
     const { data } = this._call('list', params);
     return data;
   }

package/src/services/advsheets/fakeadvsheets.js

@@ -3,15 +3,13 @@
  */
 import { Proxies } from '../../support/proxies.js'
 import { advClassMaker } from '../../support/helpers.js'
-import { getAuthedClient } from './shapis.js'
 import { newFakeAdvSheetsSpreadsheets } from './fakeadvsheetsspreadsheets.js'
 import { sheetsCacher } from '../../support/sheetscacher.js';
-import { sheets } from 'googleapis/build/src/apis/sheets/index.js';
+
 
 class FakeAdvSheets {
   constructor() {
-    this.client = Proxies.guard(getAuthedClient())
-    this.__fakeObjectType = "Docs"
+    this.__fakeObjectType = "Sheets"
 
     const propLists = {
       newGridRange: ['sheetId', 'startRowIndex', 'startColumnIndex', 'endRowIndex', 'endColumnIndex'],
@@ -880,7 +878,19 @@ class FakeAdvSheets {
   __getSheetsPerformance() {
     return sheetsCacher.getPerformance()
   }
+    // in sandbox mode only files created in this instance are
+  __allowed(id) {
+    if (!ScriptApp.__behavior.isAccessible(id)) {
+      throw new Error(`Access to document ${id} is not allowed in sandbox mode`);
+    }
+    return id
+  }
+  __addAllowed(id) {
+    if (ScriptApp.__behavior.sandBoxMode) {
+      ScriptApp.__behavior.addFile(id);
+    }
+    return id
+  }
 }
 
 export const newFakeAdvSheets = (...args) => Proxies.guard(new FakeAdvSheets(...args))
-