@nodetool-ai/sandbox-runtime 0.0.0-stage → 0.8.9-beta.1

package/dist/utils/type-guards.js

@@ -0,0 +1,44 @@
+/**
+ * Named predicates for the shapes this package reads off its untrusted
+ * boundaries: QuickJS guest results, tool call arguments, model output, and
+ * media refs. Each one is the check the call sites used to inline, so the
+ * leniency of a boundary stays exactly where it was — a value that passed
+ * before passes now.
+ */
+export function isString(value) {
+    return typeof value === "string";
+}
+/** A string with at least one character. */
+export function isNonEmptyString(value) {
+    return typeof value === "string" && value !== "";
+}
+/** A string that holds something other than whitespace. */
+export function isNonBlankString(value) {
+    return typeof value === "string" && value.trim() !== "";
+}
+export function isNumber(value) {
+    return typeof value === "number";
+}
+/** A number that is neither `NaN` nor an infinity. */
+export function isFiniteNumber(value) {
+    return typeof value === "number" && Number.isFinite(value);
+}
+export function isBoolean(value) {
+    return typeof value === "boolean";
+}
+export function isFunction(value) {
+    return typeof value === "function";
+}
+/** A keyed object — never `null`, never an array. */
+export function isRecord(value) {
+    return value !== null && typeof value === "object" && !Array.isArray(value);
+}
+/**
+ * Anything `typeof` calls an object, `null` aside — an array passes. The
+ * looser sibling of {@link isRecord}, kept apart because the boundaries that
+ * accept an array here must keep accepting it.
+ */
+export function isObjectLike(value) {
+    return value !== null && typeof value === "object";
+}
+//# sourceMappingURL=type-guards.js.map

package/dist/utils/type-guards.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"type-guards.js","sourceRoot":"","sources":["../../src/utils/type-guards.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAEH,MAAM,UAAU,QAAQ,CAAC,KAAc;IACrC,OAAO,OAAO,KAAK,KAAK,QAAQ,CAAC;AACnC,CAAC;AAED,4CAA4C;AAC5C,MAAM,UAAU,gBAAgB,CAAC,KAAc;IAC7C,OAAO,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,EAAE,CAAC;AACnD,CAAC;AAED,2DAA2D;AAC3D,MAAM,UAAU,gBAAgB,CAAC,KAAc;IAC7C,OAAO,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,IAAI,EAAE,KAAK,EAAE,CAAC;AAC1D,CAAC;AAED,MAAM,UAAU,QAAQ,CAAC,KAAc;IACrC,OAAO,OAAO,KAAK,KAAK,QAAQ,CAAC;AACnC,CAAC;AAED,sDAAsD;AACtD,MAAM,UAAU,cAAc,CAAC,KAAc;IAC3C,OAAO,OAAO,KAAK,KAAK,QAAQ,IAAI,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;AAC7D,CAAC;AAED,MAAM,UAAU,SAAS,CAAC,KAAc;IACtC,OAAO,OAAO,KAAK,KAAK,SAAS,CAAC;AACpC,CAAC;AAED,MAAM,UAAU,UAAU,CACxB,KAAc;IAEd,OAAO,OAAO,KAAK,KAAK,UAAU,CAAC;AACrC,CAAC;AAED,qDAAqD;AACrD,MAAM,UAAU,QAAQ,CAAC,KAAc;IACrC,OAAO,KAAK,KAAK,IAAI,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;AAC9E,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,YAAY,CAAC,KAAc;IACzC,OAAO,KAAK,KAAK,IAAI,IAAI,OAAO,KAAK,KAAK,QAAQ,CAAC;AACrD,CAAC"}

package/package.json

@@ -1,6 +1,140 @@
 {
   "name": "@nodetool-ai/sandbox-runtime",
-  "version": "0.0.0-stage",
-  "stub": true,
-  "description": "Temporary package placeholder for staged publishing"
-}
+  "version": "0.8.9-beta.1",
+  "description": "Shared QuickJS interpreter, worker isolation and lean host bridges",
+  "type": "module",
+  "engines": {
+    "node": "24.22.1"
+  },
+  "main": "dist/index.js",
+  "types": "dist/index.d.ts",
+  "scripts": {
+    "build": "node ../../scripts/build-typescript-workspace.mjs",
+    "test": "node ../../scripts/run-vitest.mjs run",
+    "lint": "node ../../scripts/run-tsc.mjs --noEmit"
+  },
+  "dependencies": {
+    "@nodetool-ai/config": "0.8.9-beta.1",
+    "@nodetool-ai/protocol": "0.8.9-beta.1",
+    "@nodetool-ai/runtime-core": "0.8.9-beta.1",
+    "@jitl/quickjs-ng-wasmfile-release-sync": "^0.31.0",
+    "quickjs-emscripten-core": "^0.31.0",
+    "acorn": "^8.15.0",
+    "eslint-scope": "^8.4.0",
+    "memfs": "^4.56.10",
+    "rate-limiter-flexible": "^9.1.1"
+  },
+  "devDependencies": {
+    "typescript": "npm:@typescript/typescript6@6.0.2",
+    "vitest": "^5.0.1",
+    "@types/node": "^22.0.0",
+    "@types/eslint-scope": "^3.7.7",
+    "@sebastianwessel/quickjs": "3.0.1"
+  },
+  "exports": {
+    ".": {
+      "nodetool-dev": "./src/index.ts",
+      "types": "./dist/index.d.ts",
+      "import": "./dist/index.js"
+    },
+    "./js-sandbox-worker/engine": {
+      "nodetool-dev": "./src/js-sandbox-worker/engine.ts",
+      "types": "./dist/js-sandbox-worker/engine.d.ts",
+      "import": "./dist/js-sandbox-worker/engine.js"
+    },
+    "./js-sandbox-worker/interpreter": {
+      "nodetool-dev": "./src/js-sandbox-worker/interpreter.ts",
+      "types": "./dist/js-sandbox-worker/interpreter.d.ts",
+      "import": "./dist/js-sandbox-worker/interpreter.js"
+    },
+    "./js-sandbox-worker/host": {
+      "nodetool-dev": "./src/js-sandbox-worker/host.ts",
+      "types": "./dist/js-sandbox-worker/host.d.ts",
+      "import": "./dist/js-sandbox-worker/host.js"
+    },
+    "./js-sandbox-worker/protocol": {
+      "nodetool-dev": "./src/js-sandbox-worker/protocol.ts",
+      "types": "./dist/js-sandbox-worker/protocol.d.ts",
+      "import": "./dist/js-sandbox-worker/protocol.js"
+    },
+    "./js-sandbox-worker/worker-entry": {
+      "nodetool-dev": "./src/js-sandbox-worker/worker-entry.ts",
+      "types": "./dist/js-sandbox-worker/worker-entry.d.ts",
+      "import": "./dist/js-sandbox-worker/worker-entry.js"
+    },
+    "./sandbox-canvas-api": {
+      "nodetool-dev": "./src/sandbox-canvas-api.ts",
+      "types": "./dist/sandbox-canvas-api.d.ts",
+      "import": "./dist/sandbox-canvas-api.js"
+    },
+    "./sandbox-bytes": {
+      "nodetool-dev": "./src/sandbox-bytes.ts",
+      "types": "./dist/sandbox-bytes.d.ts",
+      "import": "./dist/sandbox-bytes.js"
+    },
+    "./sandbox-constants": {
+      "nodetool-dev": "./src/sandbox-constants.ts",
+      "types": "./dist/sandbox-constants.d.ts",
+      "import": "./dist/sandbox-constants.js"
+    },
+    "./sandbox-bootstrap-modules": {
+      "nodetool-dev": "./src/sandbox-bootstrap-modules.ts",
+      "types": "./dist/sandbox-bootstrap-modules.d.ts",
+      "import": "./dist/sandbox-bootstrap-modules.js"
+    },
+    "./sandbox-json-transport": {
+      "nodetool-dev": "./src/sandbox-json-transport.ts",
+      "types": "./dist/sandbox-json-transport.d.ts",
+      "import": "./dist/sandbox-json-transport.js"
+    },
+    "./timeline-capture": {
+      "nodetool-dev": "./src/timeline-capture.ts",
+      "types": "./dist/timeline-capture.d.ts",
+      "import": "./dist/timeline-capture.js"
+    },
+    "./utils/type-guards": {
+      "nodetool-dev": "./src/utils/type-guards.ts",
+      "types": "./dist/utils/type-guards.d.ts",
+      "import": "./dist/utils/type-guards.js"
+    },
+    "./host-access-gate": {
+      "nodetool-dev": "./src/host-access-gate.ts",
+      "types": "./dist/host-access-gate.d.ts",
+      "import": "./dist/host-access-gate.js"
+    },
+    "./limits": {
+      "nodetool-dev": "./src/limits.ts",
+      "types": "./dist/limits.d.ts",
+      "import": "./dist/limits.js"
+    }
+  },
+  "license": "MIT",
+  "repository": {
+    "type": "git",
+    "url": "https://github.com/nodetool-ai/nodetool.git",
+    "directory": "packages/sandbox-runtime"
+  },
+  "homepage": "https://nodetool.ai",
+  "bugs": {
+    "url": "https://github.com/nodetool-ai/nodetool/issues"
+  },
+  "publishConfig": {
+    "access": "public"
+  },
+  "files": [
+    "dist",
+    "README.md",
+    "vendor"
+  ],
+  "keywords": [
+    "nodetool",
+    "ai",
+    "workflow",
+    "workflow-automation",
+    "typescript",
+    "message-types",
+    "msgpack",
+    "protocol",
+    "websocket"
+  ]
+}

package/vendor/README.md

@@ -0,0 +1,17 @@
+# QuickJS JavaScript profile
+
+`quickjs/` contains the ESM distribution of `@sebastianwessel/quickjs@3.0.1`.
+Its upstream license is preserved in `quickjs/LICENSE`.
+
+NodeTool uses the JavaScript execution path. This copy removes the unused
+TypeScript transform helper, its public export, and the compiler options from
+both sandbox option declarations. The two engine loaders use the same identity
+transform as upstream's disabled TypeScript path. The virtual filesystem,
+module loader, WASM engine, host bridges, scheduling, and disposal stay upstream.
+TypeScript compilation remains in `@nodetool-ai/sandbox-compiler`.
+
+To refresh from an unpacked npm artifact, run
+`node scripts/vendor-quickjs-javascript.mjs /path/to/package` from the repository
+root. The script checks the upstream package name and version and fails when a
+patch target changes. Review the generated diff and run the packed sandbox
+consumer regression before accepting an update.

package/vendor/quickjs/LICENSE

@@ -0,0 +1,21 @@
+MIT License
+
+Copyright (c) 2024 Sebastian Wessel
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+SOFTWARE.

package/vendor/quickjs/PROVENANCE.json

@@ -0,0 +1,8 @@
+{
+  "name": "@sebastianwessel/quickjs",
+  "version": "3.0.1",
+  "license": "MIT",
+  "npmIntegrity": "sha512-9pKTzjtsHIBxokMhYgNPyqvBSpX9WLus5j+cqspB2VHOKbC0L45NQiVQhbEiaWXEyBtxd3W8MLnvlxvtBLo0Ew==",
+  "esmAndLicenseSha256": "3537d085ff5f01fb797945cbf25fd8b6a32901b3c6a73bcddfb9d68303dc0ed5",
+  "generator": "scripts/vendor-quickjs-javascript.mjs"
+}

package/vendor/quickjs/adapter/fetch.d.ts

@@ -0,0 +1,56 @@
+import type { IFs } from 'memfs';
+declare const HEADERS_MARKER = "__quickjsHeadersObject__";
+/**
+ * Options for creating the default fetch adapter
+ */
+export type GetFetchAdapterOptions = {
+    /**
+     * The virtual file system of the sandbox (excludes node_modules)
+     */
+    fs?: IFs;
+    /**
+     * List of allowed hosts. If set, only these hosts are allowed to call
+     */
+    allowedHosts?: string[];
+    /**
+     * List of allowed protocols. If set, only these protocols are allowed to call
+     */
+    allowedProtocols?: string[];
+    /**
+     * List of disallowed hosts. If set, these hosts are not allowed to call
+     * @default ['localhost', '127.0.0.1']
+     */
+    disallowedHosts?: string[];
+    /**
+     * Timeout for fetch requests in milliseconds
+     * @default 5000
+     */
+    timeout?: number;
+    /**
+     * Flag to enable CORS policy check
+     * @default false
+     */
+    corsCheck?: boolean;
+    /**
+     * List of allowed CORS origins
+     * @default ['*']
+     */
+    allowedCorsOrigins?: string[];
+    /**
+     * Number of requests allowed in the specified duration
+     * @default 10
+     */
+    rateLimitPoints?: number;
+    /**
+     * Duration in seconds for the rate limit
+     * @default 1
+     */
+    rateLimitDuration?: number;
+};
+/**
+ * Create a default fetch adapter
+ * @param adapterOptions Options for creating the fetch adapter
+ * @returns A fetch adapter function
+ */
+export declare const getDefaultFetchAdapter: (adapterOptions?: GetFetchAdapterOptions) => typeof fetch;
+export { HEADERS_MARKER };

package/vendor/quickjs/adapter/fetch.js

@@ -0,0 +1,140 @@
+import { RateLimiterMemory } from 'rate-limiter-flexible';
+const DISALLOW_HOSTS_DEFAULT = ['localhost', '127.0.0.1'];
+const DEFAULT_TIMEOUT = 5000; // 5 seconds
+const DEFAULT_RATE_LIMIT_POINTS = 10; // Number of requests
+const DEFAULT_RATE_LIMIT_DURATION = 1; // Per second
+const HEADERS_MARKER = '__quickjsHeadersObject__';
+/**
+ * Map a fetch Response to a simplified response object
+ * @param res The original response
+ * @returns The mapped response object
+ */
+const createHeadersObject = (headers) => ({
+    [HEADERS_MARKER]: true,
+    _headers: Object.fromEntries(headers.entries()),
+});
+/**
+ * Map a fetch Response to a simplified response object
+ * @param res The original response
+ * @returns The mapped response object
+ */
+const mapResponse = (res) => ({
+    status: res.status,
+    ok: res.ok,
+    statusText: res.statusText,
+    json: () => res.json(),
+    text: () => res.text(),
+    formData: () => res.formData(),
+    headers: createHeadersObject(res.headers),
+    type: res.type,
+    url: res.url,
+    blob: () => res.blob(),
+    bodyUsed: res.bodyUsed,
+    redirected: res.redirected,
+    body: undefined,
+    arrayBuffer: () => res.arrayBuffer(),
+    clone: () => res.clone(),
+    bytes: res.bytes,
+});
+/**
+ * Create a 403 forbidden response
+ * @returns A 403 forbidden response
+ */
+const getForbiddenResponse = () => {
+    const res = new Response('', { status: 403, statusText: 'FORBIDDEN' });
+    return mapResponse(res);
+};
+/**
+ * Create a default fetch adapter
+ * @param adapterOptions Options for creating the fetch adapter
+ * @returns A fetch adapter function
+ */
+export const getDefaultFetchAdapter = (adapterOptions = {}) => {
+    const options = {
+        allowedProtocols: ['http:', 'https:'],
+        disallowedHosts: adapterOptions.disallowedHosts ?? DISALLOW_HOSTS_DEFAULT,
+        timeout: adapterOptions.timeout ?? DEFAULT_TIMEOUT,
+        corsCheck: adapterOptions.corsCheck ?? false,
+        allowedCorsOrigins: adapterOptions.allowedCorsOrigins ?? ['*'],
+        rateLimitPoints: adapterOptions.rateLimitPoints ?? DEFAULT_RATE_LIMIT_POINTS,
+        rateLimitDuration: adapterOptions.rateLimitDuration ?? DEFAULT_RATE_LIMIT_DURATION,
+        ...adapterOptions,
+    };
+    const rateLimiter = new RateLimiterMemory({
+        points: options.rateLimitPoints,
+        duration: options.rateLimitDuration,
+    });
+    const fetchAdapter = Object.assign(async (input, init) => {
+        try {
+            await rateLimiter.consume('fetch', 1);
+            let urlString;
+            if (typeof input === 'string') {
+                urlString = input;
+            }
+            else if (input instanceof URL) {
+                urlString = input.toString();
+            }
+            else {
+                urlString = input.url;
+            }
+            const parsedUrl = new URL(urlString);
+            // Check disallowed hosts
+            if (options.disallowedHosts.includes(parsedUrl.hostname)) {
+                return getForbiddenResponse();
+            }
+            // Check allowed hosts
+            if (options.allowedHosts && !options.allowedHosts.includes(parsedUrl.hostname)) {
+                return getForbiddenResponse();
+            }
+            // Check allowed protocols
+            if (!options.allowedProtocols.includes(parsedUrl.protocol)) {
+                return getForbiddenResponse();
+            }
+            // Handle file:// protocol with virtual file system
+            if (parsedUrl.protocol === 'file:') {
+                if (!options.fs) {
+                    return getForbiddenResponse();
+                }
+                const filePath = parsedUrl.pathname;
+                if (!options.fs.existsSync(filePath)) {
+                    const res = new Response('', { status: 404, statusText: 'NOT_FOUND' });
+                    return mapResponse(res);
+                }
+                const content = options.fs.readFileSync(filePath);
+                const res = new Response(content, { status: 200, statusText: 'OK' });
+                return mapResponse(res);
+            }
+            // Setup request with timeout
+            const initWithDefaults = {
+                redirect: 'error',
+                ...init,
+                signal: AbortSignal.timeout(options.timeout),
+            };
+            const res = await fetch(input, initWithDefaults);
+            // Enforce CORS policy if needed
+            if (options.corsCheck) {
+                const origin = res.headers.get('Access-Control-Allow-Origin');
+                if (!origin || (!options.allowedCorsOrigins.includes('*') && !options.allowedCorsOrigins.includes(origin))) {
+                    return getForbiddenResponse();
+                }
+            }
+            return mapResponse(res);
+        }
+        catch (err) {
+            if (err instanceof Error) {
+                console.error('Fetch adapter error:', err);
+                const res = new Response('', { status: 500, statusText: 'INTERNAL SERVER ERROR' });
+                return mapResponse(res);
+            }
+            const res = new Response('', { status: 429, statusText: 'TOO MANY REQUESTS' });
+            return mapResponse(res);
+        }
+    }, {
+        // Dummy implementation of preconnect for Bun compatibility
+        preconnect: async (_url, _options) => {
+            return;
+        },
+    });
+    return fetchAdapter;
+};
+export { HEADERS_MARKER };

package/vendor/quickjs/createTimeInterval.d.ts

@@ -0,0 +1,9 @@
+/**
+ * Utilizes the standard setInterval to work properly with javascript `using` statement.
+ * Because of this, the interval gets automatically cleared on dispose.
+ */
+export declare const createTimeInterval: (...params: Parameters<typeof setInterval>) => {
+    id: ReturnType<typeof setInterval> | undefined;
+    clear: () => void;
+    [Symbol.dispose]: () => void;
+};

package/vendor/quickjs/createTimeInterval.js

@@ -0,0 +1,22 @@
+/**
+ * Utilizes the standard setInterval to work properly with javascript `using` statement.
+ * Because of this, the interval gets automatically cleared on dispose.
+ */
+export const createTimeInterval = (...params) => {
+    const interval = {
+        id: setInterval(...params),
+        clear: function () {
+            if (this.id) {
+                clearInterval(this.id);
+            }
+            this.id = undefined;
+        },
+        [Symbol.dispose]: function () {
+            if (this.id) {
+                clearInterval(this.id);
+            }
+            this.id = undefined;
+        },
+    };
+    return interval;
+};

package/vendor/quickjs/createVirtualFileSystem.d.ts

@@ -0,0 +1,13 @@
+import * as memfsPkg from 'memfs';
+import type { RuntimeOptions } from './types/RuntimeOptions.js';
+/**
+ * Create the virtual file system for the sandbox
+ * Creates a node_modules folder with packages and ensures the src folder
+ *
+ * @param runtimeOptions
+ * @returns filesystem fs and volume vol
+ */
+export declare const createVirtualFileSystem: (runtimeOptions?: RuntimeOptions) => {
+    vol: memfsPkg.Volume;
+    fs: memfsPkg.IFs;
+};