@secure-exec/core 0.1.0-rc.1

package/dist/index.d.ts

@@ -0,0 +1,30 @@
+export type { ChildProcessAccessRequest, CommandExecutor, EnvAccessRequest, FsAccessRequest, NetworkAccessRequest, NetworkAdapter, NetworkServerAddress, NetworkServerListenOptions, NetworkServerRequest, NetworkServerResponse, PermissionCheck, PermissionDecision, Permissions, SpawnedProcess, VirtualDirEntry, VirtualFileSystem, VirtualStat, } from "./types.js";
+export type { DriverRuntimeConfig, NodeRuntimeDriver, NodeRuntimeDriverFactory, PythonRuntimeDriver, PythonRuntimeDriverFactory, ResourceBudgets, RuntimeDriver, RuntimeDriverFactory, RuntimeDriverOptions, SharedRuntimeDriver, SystemDriver, } from "./runtime-driver.js";
+export type { ExecOptions, ExecResult, ExecutionStatus, OSConfig, ProcessConfig, PythonRunOptions, PythonRunResult, RunResult, StdioChannel, StdioEvent, StdioHook, TimingMitigation, } from "./shared/api-types.js";
+export { TIMEOUT_EXIT_CODE, TIMEOUT_ERROR_MESSAGE, } from "./shared/constants.js";
+export { createInMemoryFileSystem, InMemoryFileSystem, } from "./shared/in-memory-fs.js";
+export { allowAll, allowAllChildProcess, allowAllEnv, allowAllFs, allowAllNetwork, createCommandExecutorStub, createFsStub, createNetworkStub, envAccessAllowed, filterEnv, wrapCommandExecutor, wrapFileSystem, wrapNetworkAdapter, } from "./shared/permissions.js";
+export type { SystemError } from "./shared/errors.js";
+export { createEaccesError, createEnosysError, createSystemError, } from "./shared/errors.js";
+export { extractCjsNamedExports, extractDynamicImportSpecifiers, isESM, transformDynamicImport, wrapCJSForESM, wrapCJSForESMWithModulePath, } from "./shared/esm-utils.js";
+export { getRequireSetupCode } from "./shared/require-setup.js";
+export type { ConsoleSerializationBudget } from "./shared/console-formatter.js";
+export { DEFAULT_CONSOLE_SERIALIZATION_BUDGET, formatConsoleArgs, getConsoleSetupCode, safeStringifyConsoleValue, } from "./shared/console-formatter.js";
+export type { BridgeApplyRef, BridgeApplySyncPromiseRef, BridgeApplySyncRef, BridgeGlobalKey, ChildProcessKillBridgeRef, ChildProcessSpawnStartBridgeRef, ChildProcessSpawnSyncBridgeRef, ChildProcessStdinCloseBridgeRef, ChildProcessStdinWriteBridgeRef, CryptoRandomFillBridgeRef, CryptoRandomUuidBridgeRef, DynamicImportBridgeRef, FsChmodBridgeRef, FsChownBridgeRef, FsExistsBridgeRef, FsFacadeBridge, FsLinkBridgeRef, FsLstatBridgeRef, FsMkdirBridgeRef, FsReadDirBridgeRef, FsReadFileBinaryBridgeRef, FsReadFileBridgeRef, FsReadlinkBridgeRef, FsRenameBridgeRef, FsRmdirBridgeRef, FsStatBridgeRef, FsSymlinkBridgeRef, FsTruncateBridgeRef, FsUnlinkBridgeRef, FsUtimesBridgeRef, FsWriteFileBinaryBridgeRef, FsWriteFileBridgeRef, HostBridgeGlobalKey, LoadFileBridgeRef, LoadPolyfillBridgeRef, ModuleCacheBridgeRecord, NetworkDnsLookupRawBridgeRef, NetworkFetchRawBridgeRef, NetworkHttpRequestRawBridgeRef, NetworkHttpServerCloseRawBridgeRef, NetworkHttpServerListenRawBridgeRef, ProcessErrorBridgeRef, ProcessLogBridgeRef, RegisterHandleBridgeFn, RequireFromBridgeFn, ResolveModuleBridgeRef, RuntimeBridgeGlobalKey, ScheduleTimerBridgeRef, UnregisterHandleBridgeFn, ValueOf, } from "./shared/bridge-contract.js";
+export { BRIDGE_GLOBAL_KEY_LIST, HOST_BRIDGE_GLOBAL_KEY_LIST, HOST_BRIDGE_GLOBAL_KEYS, RUNTIME_BRIDGE_GLOBAL_KEY_LIST, RUNTIME_BRIDGE_GLOBAL_KEYS, } from "./shared/bridge-contract.js";
+export type { CustomGlobalClassification, CustomGlobalInventoryEntry, } from "./shared/global-exposure.js";
+export { exposeCustomGlobal, exposeGlobalBinding, exposeMutableRuntimeStateGlobal, HARDENED_NODE_CUSTOM_GLOBALS, ISOLATE_GLOBAL_EXPOSURE_HELPER_SOURCE, MUTABLE_NODE_CUSTOM_GLOBALS, NODE_CUSTOM_GLOBAL_INVENTORY, } from "./shared/global-exposure.js";
+export type { IsolateRuntimeSourceId } from "./generated/isolate-runtime.js";
+export { getIsolateRuntimeSource, ISOLATE_RUNTIME_SOURCES, } from "./generated/isolate-runtime.js";
+export { POLYFILL_CODE_MAP } from "./generated/polyfills.js";
+export { NodeRuntime } from "./runtime.js";
+export type { NodeRuntimeOptions } from "./runtime.js";
+export { PythonRuntime } from "./python-runtime.js";
+export type { PythonRuntimeOptions } from "./python-runtime.js";
+export type { DirEntry, StatInfo } from "./fs-helpers.js";
+export { exists, stat, rename, readDirWithTypes, mkdir } from "./fs-helpers.js";
+export { BUILTIN_NAMED_EXPORTS, normalizeBuiltinSpecifier, getPathDir, } from "./module-resolver.js";
+export { getStaticBuiltinWrapperSource, createBuiltinESMWrapper, getEmptyBuiltinESMWrapper, } from "./esm-compiler.js";
+export type { ResolutionCache } from "./package-bundler.js";
+export { createResolutionCache, resolveModule, loadFile, bundlePackage, } from "./package-bundler.js";
+export { getInitialBridgeGlobalsSetupCode } from "./bridge-setup.js";

package/dist/index.js

@@ -0,0 +1,25 @@
+// Shared constants.
+export { TIMEOUT_EXIT_CODE, TIMEOUT_ERROR_MESSAGE, } from "./shared/constants.js";
+// Shared utilities.
+export { createInMemoryFileSystem, InMemoryFileSystem, } from "./shared/in-memory-fs.js";
+export { allowAll, allowAllChildProcess, allowAllEnv, allowAllFs, allowAllNetwork, createCommandExecutorStub, createFsStub, createNetworkStub, envAccessAllowed, filterEnv, wrapCommandExecutor, wrapFileSystem, wrapNetworkAdapter, } from "./shared/permissions.js";
+export { createEaccesError, createEnosysError, createSystemError, } from "./shared/errors.js";
+export { extractCjsNamedExports, extractDynamicImportSpecifiers, isESM, transformDynamicImport, wrapCJSForESM, wrapCJSForESMWithModulePath, } from "./shared/esm-utils.js";
+export { getRequireSetupCode } from "./shared/require-setup.js";
+export { DEFAULT_CONSOLE_SERIALIZATION_BUDGET, formatConsoleArgs, getConsoleSetupCode, safeStringifyConsoleValue, } from "./shared/console-formatter.js";
+export { BRIDGE_GLOBAL_KEY_LIST, HOST_BRIDGE_GLOBAL_KEY_LIST, HOST_BRIDGE_GLOBAL_KEYS, RUNTIME_BRIDGE_GLOBAL_KEY_LIST, RUNTIME_BRIDGE_GLOBAL_KEYS, } from "./shared/bridge-contract.js";
+export { exposeCustomGlobal, exposeGlobalBinding, exposeMutableRuntimeStateGlobal, HARDENED_NODE_CUSTOM_GLOBALS, ISOLATE_GLOBAL_EXPOSURE_HELPER_SOURCE, MUTABLE_NODE_CUSTOM_GLOBALS, NODE_CUSTOM_GLOBAL_INVENTORY, } from "./shared/global-exposure.js";
+export { getIsolateRuntimeSource, ISOLATE_RUNTIME_SOURCES, } from "./generated/isolate-runtime.js";
+// Generated polyfills.
+export { POLYFILL_CODE_MAP } from "./generated/polyfills.js";
+// Runtime facades.
+export { NodeRuntime } from "./runtime.js";
+export { PythonRuntime } from "./python-runtime.js";
+export { exists, stat, rename, readDirWithTypes, mkdir } from "./fs-helpers.js";
+// Module resolution.
+export { BUILTIN_NAMED_EXPORTS, normalizeBuiltinSpecifier, getPathDir, } from "./module-resolver.js";
+// ESM compiler.
+export { getStaticBuiltinWrapperSource, createBuiltinESMWrapper, getEmptyBuiltinESMWrapper, } from "./esm-compiler.js";
+export { createResolutionCache, resolveModule, loadFile, bundlePackage, } from "./package-bundler.js";
+// Bridge setup.
+export { getInitialBridgeGlobalsSetupCode } from "./bridge-setup.js";

package/dist/isolate-runtime/apply-custom-global-policy.js

@@ -0,0 +1,54 @@
+"use strict";
+(() => {
+  // isolate-runtime/src/common/global-access.ts
+  function hasOwnGlobal(name) {
+    return Object.prototype.hasOwnProperty.call(globalThis, name);
+  }
+  function getGlobalValue(name) {
+    return Reflect.get(globalThis, name);
+  }
+
+  // isolate-runtime/src/common/global-exposure.ts
+  function defineRuntimeGlobalBinding(name, value, mutable) {
+    Object.defineProperty(globalThis, name, {
+      value,
+      writable: mutable,
+      configurable: mutable,
+      enumerable: true
+    });
+  }
+  function createRuntimeGlobalExposer(mutable) {
+    return (name, value) => {
+      defineRuntimeGlobalBinding(name, value, mutable);
+    };
+  }
+  function getRuntimeExposeCustomGlobal() {
+    if (typeof globalThis.__runtimeExposeCustomGlobal === "function") {
+      return globalThis.__runtimeExposeCustomGlobal;
+    }
+    return createRuntimeGlobalExposer(false);
+  }
+  function getRuntimeExposeMutableGlobal() {
+    if (typeof globalThis.__runtimeExposeMutableGlobal === "function") {
+      return globalThis.__runtimeExposeMutableGlobal;
+    }
+    return createRuntimeGlobalExposer(true);
+  }
+
+  // isolate-runtime/src/inject/apply-custom-global-policy.ts
+  var __runtimeExposeCustomGlobal = getRuntimeExposeCustomGlobal();
+  var __runtimeExposeMutableGlobal = getRuntimeExposeMutableGlobal();
+  var __globalPolicy = globalThis.__runtimeCustomGlobalPolicy ?? {};
+  var __hardenedGlobals = Array.isArray(__globalPolicy.hardenedGlobals) ? __globalPolicy.hardenedGlobals : [];
+  var __mutableGlobals = Array.isArray(__globalPolicy.mutableGlobals) ? __globalPolicy.mutableGlobals : [];
+  for (const globalName of __hardenedGlobals) {
+    if (hasOwnGlobal(globalName)) {
+      __runtimeExposeCustomGlobal(globalName, getGlobalValue(globalName));
+    }
+  }
+  for (const globalName of __mutableGlobals) {
+    if (hasOwnGlobal(globalName)) {
+      __runtimeExposeMutableGlobal(globalName, getGlobalValue(globalName));
+    }
+  }
+})();

package/dist/isolate-runtime/apply-timing-mitigation-freeze.js

@@ -0,0 +1,44 @@
+"use strict";
+(() => {
+  // isolate-runtime/src/common/global-access.ts
+  function setGlobalValue(name, value) {
+    Reflect.set(globalThis, name, value);
+  }
+
+  // isolate-runtime/src/inject/apply-timing-mitigation-freeze.ts
+  var __timingConfig = globalThis.__runtimeTimingMitigationConfig ?? {};
+  var __frozenTimeMs = typeof __timingConfig.frozenTimeMs === "number" && Number.isFinite(__timingConfig.frozenTimeMs) ? __timingConfig.frozenTimeMs : Date.now();
+  var __frozenDateNow = () => __frozenTimeMs;
+  try {
+    Object.defineProperty(Date, "now", {
+      value: __frozenDateNow,
+      configurable: true,
+      writable: true
+    });
+  } catch {
+    Date.now = __frozenDateNow;
+  }
+  var __frozenPerformanceNow = () => 0;
+  var __performance = globalThis.performance;
+  if (typeof __performance !== "undefined" && __performance !== null) {
+    try {
+      Object.defineProperty(__performance, "now", {
+        value: __frozenPerformanceNow,
+        configurable: true,
+        writable: true
+      });
+    } catch {
+      try {
+        Object.assign(__performance, { now: __frozenPerformanceNow });
+      } catch {
+      }
+    }
+  } else {
+    setGlobalValue("performance", {
+      now: __frozenPerformanceNow
+    });
+  }
+  if (!Reflect.deleteProperty(globalThis, "SharedArrayBuffer")) {
+    setGlobalValue("SharedArrayBuffer", void 0);
+  }
+})();

package/dist/isolate-runtime/apply-timing-mitigation-off.js

@@ -0,0 +1,14 @@
+"use strict";
+(() => {
+  // isolate-runtime/src/common/global-access.ts
+  function setGlobalValue(name, value) {
+    Reflect.set(globalThis, name, value);
+  }
+
+  // isolate-runtime/src/inject/apply-timing-mitigation-off.ts
+  if (typeof globalThis.performance === "undefined" || globalThis.performance === null) {
+    setGlobalValue("performance", {
+      now: () => Date.now()
+    });
+  }
+})();

package/dist/isolate-runtime/bridge-attach.js

@@ -0,0 +1,29 @@
+"use strict";
+(() => {
+  // isolate-runtime/src/common/global-exposure.ts
+  function defineRuntimeGlobalBinding(name, value, mutable) {
+    Object.defineProperty(globalThis, name, {
+      value,
+      writable: mutable,
+      configurable: mutable,
+      enumerable: true
+    });
+  }
+  function createRuntimeGlobalExposer(mutable) {
+    return (name, value) => {
+      defineRuntimeGlobalBinding(name, value, mutable);
+    };
+  }
+  function getRuntimeExposeCustomGlobal() {
+    if (typeof globalThis.__runtimeExposeCustomGlobal === "function") {
+      return globalThis.__runtimeExposeCustomGlobal;
+    }
+    return createRuntimeGlobalExposer(false);
+  }
+
+  // isolate-runtime/src/inject/bridge-attach.ts
+  var __runtimeExposeCustomGlobal = getRuntimeExposeCustomGlobal();
+  if (typeof globalThis.bridge !== "undefined") {
+    __runtimeExposeCustomGlobal("bridge", globalThis.bridge);
+  }
+})();

package/dist/isolate-runtime/bridge-initial-globals.js

@@ -0,0 +1,246 @@
+"use strict";
+(() => {
+  // isolate-runtime/src/common/global-exposure.ts
+  function defineRuntimeGlobalBinding(name, value, mutable) {
+    Object.defineProperty(globalThis, name, {
+      value,
+      writable: mutable,
+      configurable: mutable,
+      enumerable: true
+    });
+  }
+  function createRuntimeGlobalExposer(mutable) {
+    return (name, value) => {
+      defineRuntimeGlobalBinding(name, value, mutable);
+    };
+  }
+  function getRuntimeExposeMutableGlobal() {
+    if (typeof globalThis.__runtimeExposeMutableGlobal === "function") {
+      return globalThis.__runtimeExposeMutableGlobal;
+    }
+    return createRuntimeGlobalExposer(true);
+  }
+
+  // isolate-runtime/src/inject/bridge-initial-globals.ts
+  var __runtimeExposeMutableGlobal = getRuntimeExposeMutableGlobal();
+  var __bridgeSetupConfig = globalThis.__runtimeBridgeSetupConfig ?? {};
+  var __initialCwd = typeof __bridgeSetupConfig.initialCwd === "string" ? __bridgeSetupConfig.initialCwd : "/";
+  var __jsonPayloadLimitBytes = typeof __bridgeSetupConfig.jsonPayloadLimitBytes === "number" && Number.isFinite(__bridgeSetupConfig.jsonPayloadLimitBytes) ? Math.max(0, Math.floor(__bridgeSetupConfig.jsonPayloadLimitBytes)) : 4 * 1024 * 1024;
+  var __payloadLimitErrorCode = typeof __bridgeSetupConfig.payloadLimitErrorCode === "string" && __bridgeSetupConfig.payloadLimitErrorCode.length > 0 ? __bridgeSetupConfig.payloadLimitErrorCode : "ERR_SANDBOX_PAYLOAD_TOO_LARGE";
+  function __scEncode(value, seen) {
+    if (value === null) return null;
+    if (value === void 0) return { t: "undef" };
+    if (typeof value === "boolean") return value;
+    if (typeof value === "string") return value;
+    if (typeof value === "bigint") return { t: "bigint", v: String(value) };
+    if (typeof value === "number") {
+      if (Object.is(value, -0)) return { t: "-0" };
+      if (Number.isNaN(value)) return { t: "nan" };
+      if (value === Infinity) return { t: "inf" };
+      if (value === -Infinity) return { t: "-inf" };
+      return value;
+    }
+    const obj = value;
+    if (seen.has(obj)) return { t: "ref", i: seen.get(obj) };
+    const idx = seen.size;
+    seen.set(obj, idx);
+    if (value instanceof Date)
+      return { t: "date", v: value.getTime() };
+    if (value instanceof RegExp)
+      return { t: "regexp", p: value.source, f: value.flags };
+    if (value instanceof Map) {
+      const entries = [];
+      value.forEach((v, k) => {
+        entries.push([__scEncode(k, seen), __scEncode(v, seen)]);
+      });
+      return { t: "map", v: entries };
+    }
+    if (value instanceof Set) {
+      const elems = [];
+      value.forEach((v) => {
+        elems.push(__scEncode(v, seen));
+      });
+      return { t: "set", v: elems };
+    }
+    if (value instanceof ArrayBuffer) {
+      return { t: "ab", v: Array.from(new Uint8Array(value)) };
+    }
+    if (ArrayBuffer.isView(value) && !(value instanceof DataView)) {
+      return {
+        t: "ta",
+        k: value.constructor.name,
+        v: Array.from(
+          new Uint8Array(value.buffer, value.byteOffset, value.byteLength)
+        )
+      };
+    }
+    if (Array.isArray(value)) {
+      return {
+        t: "arr",
+        v: value.map((v) => __scEncode(v, seen))
+      };
+    }
+    const result = {};
+    for (const key of Object.keys(value)) {
+      result[key] = __scEncode(
+        value[key],
+        seen
+      );
+    }
+    return { t: "obj", v: result };
+  }
+  function __scDecode(tagged, refs) {
+    if (tagged === null) return null;
+    if (typeof tagged === "boolean" || typeof tagged === "string" || typeof tagged === "number")
+      return tagged;
+    const tag = tagged.t;
+    if (tag === void 0) return tagged;
+    switch (tag) {
+      case "undef":
+        return void 0;
+      case "nan":
+        return NaN;
+      case "inf":
+        return Infinity;
+      case "-inf":
+        return -Infinity;
+      case "-0":
+        return -0;
+      case "bigint":
+        return BigInt(tagged.v);
+      case "ref":
+        return refs[tagged.i];
+      case "date": {
+        const d = new Date(tagged.v);
+        refs.push(d);
+        return d;
+      }
+      case "regexp": {
+        const r = new RegExp(
+          tagged.p,
+          tagged.f
+        );
+        refs.push(r);
+        return r;
+      }
+      case "map": {
+        const m = /* @__PURE__ */ new Map();
+        refs.push(m);
+        for (const [k, v] of tagged.v) {
+          m.set(__scDecode(k, refs), __scDecode(v, refs));
+        }
+        return m;
+      }
+      case "set": {
+        const s = /* @__PURE__ */ new Set();
+        refs.push(s);
+        for (const v of tagged.v) {
+          s.add(__scDecode(v, refs));
+        }
+        return s;
+      }
+      case "ab": {
+        const bytes = tagged.v;
+        const ab = new ArrayBuffer(bytes.length);
+        const u8 = new Uint8Array(ab);
+        for (let i = 0; i < bytes.length; i++) u8[i] = bytes[i];
+        refs.push(ab);
+        return ab;
+      }
+      case "ta": {
+        const { k, v: bytes } = tagged;
+        const ctors = {
+          Int8Array,
+          Uint8Array,
+          Uint8ClampedArray,
+          Int16Array,
+          Uint16Array,
+          Int32Array,
+          Uint32Array,
+          Float32Array,
+          Float64Array
+        };
+        const Ctor = ctors[k] ?? Uint8Array;
+        const ab = new ArrayBuffer(bytes.length);
+        const u8 = new Uint8Array(ab);
+        for (let i = 0; i < bytes.length; i++) u8[i] = bytes[i];
+        const ta = new Ctor(ab);
+        refs.push(ta);
+        return ta;
+      }
+      case "arr": {
+        const arr = [];
+        refs.push(arr);
+        for (const v of tagged.v) {
+          arr.push(__scDecode(v, refs));
+        }
+        return arr;
+      }
+      case "obj": {
+        const obj = {};
+        refs.push(obj);
+        const entries = tagged.v;
+        for (const key of Object.keys(entries)) {
+          obj[key] = __scDecode(entries[key], refs);
+        }
+        return obj;
+      }
+      default:
+        return tagged;
+    }
+  }
+  __runtimeExposeMutableGlobal("_moduleCache", {});
+  globalThis._moduleCache = globalThis._moduleCache ?? {};
+  var __moduleCache = globalThis._moduleCache;
+  if (__moduleCache) {
+    __moduleCache["v8"] = {
+      getHeapStatistics: function() {
+        return {
+          total_heap_size: 67108864,
+          total_heap_size_executable: 1048576,
+          total_physical_size: 67108864,
+          total_available_size: 67108864,
+          used_heap_size: 52428800,
+          heap_size_limit: 134217728,
+          malloced_memory: 8192,
+          peak_malloced_memory: 16384,
+          does_zap_garbage: 0,
+          number_of_native_contexts: 1,
+          number_of_detached_contexts: 0,
+          external_memory: 0
+        };
+      },
+      getHeapSpaceStatistics: function() {
+        return [];
+      },
+      getHeapCodeStatistics: function() {
+        return {};
+      },
+      setFlagsFromString: function() {
+      },
+      serialize: function(value) {
+        return Buffer.from(
+          JSON.stringify({ $v8sc: 1, d: __scEncode(value, /* @__PURE__ */ new Map()) })
+        );
+      },
+      deserialize: function(buffer) {
+        const text = buffer.toString();
+        if (Buffer.byteLength(text, "utf8") > __jsonPayloadLimitBytes) {
+          throw new Error(
+            __payloadLimitErrorCode + ": v8.deserialize exceeds " + String(__jsonPayloadLimitBytes) + " bytes"
+          );
+        }
+        const envelope = JSON.parse(text);
+        if (envelope !== null && typeof envelope === "object" && envelope.$v8sc === 1) {
+          return __scDecode(envelope.d, []);
+        }
+        return envelope;
+      },
+      cachedDataVersionTag: function() {
+        return 0;
+      }
+    };
+  }
+  __runtimeExposeMutableGlobal("_pendingModules", {});
+  __runtimeExposeMutableGlobal("_currentModule", { dirname: __initialCwd });
+})();

package/dist/isolate-runtime/eval-script-result.js

@@ -0,0 +1,8 @@
+"use strict";
+(() => {
+  // isolate-runtime/src/inject/eval-script-result.ts
+  var __runtimeIndirectEval = globalThis.eval;
+  globalThis.__scriptResult__ = __runtimeIndirectEval(
+    String(globalThis.__runtimeExecCode)
+  );
+})();

package/dist/isolate-runtime/global-exposure-helpers.js

@@ -0,0 +1,36 @@
+"use strict";
+(() => {
+  // isolate-runtime/src/common/global-exposure.ts
+  function defineRuntimeGlobalBinding(name, value, mutable) {
+    Object.defineProperty(globalThis, name, {
+      value,
+      writable: mutable,
+      configurable: mutable,
+      enumerable: true
+    });
+  }
+  function createRuntimeGlobalExposer(mutable) {
+    return (name, value) => {
+      defineRuntimeGlobalBinding(name, value, mutable);
+    };
+  }
+  function ensureRuntimeExposureHelpers() {
+    if (typeof globalThis.__runtimeExposeCustomGlobal !== "function") {
+      defineRuntimeGlobalBinding(
+        "__runtimeExposeCustomGlobal",
+        createRuntimeGlobalExposer(false),
+        false
+      );
+    }
+    if (typeof globalThis.__runtimeExposeMutableGlobal !== "function") {
+      defineRuntimeGlobalBinding(
+        "__runtimeExposeMutableGlobal",
+        createRuntimeGlobalExposer(true),
+        false
+      );
+    }
+  }
+
+  // isolate-runtime/src/inject/global-exposure-helpers.ts
+  ensureRuntimeExposureHelpers();
+})();

package/dist/isolate-runtime/init-commonjs-module-globals.js

@@ -0,0 +1,28 @@
+"use strict";
+(() => {
+  // isolate-runtime/src/common/global-exposure.ts
+  function defineRuntimeGlobalBinding(name, value, mutable) {
+    Object.defineProperty(globalThis, name, {
+      value,
+      writable: mutable,
+      configurable: mutable,
+      enumerable: true
+    });
+  }
+  function createRuntimeGlobalExposer(mutable) {
+    return (name, value) => {
+      defineRuntimeGlobalBinding(name, value, mutable);
+    };
+  }
+  function getRuntimeExposeMutableGlobal() {
+    if (typeof globalThis.__runtimeExposeMutableGlobal === "function") {
+      return globalThis.__runtimeExposeMutableGlobal;
+    }
+    return createRuntimeGlobalExposer(true);
+  }
+
+  // isolate-runtime/src/inject/init-commonjs-module-globals.ts
+  var __runtimeExposeMutableGlobal = getRuntimeExposeMutableGlobal();
+  __runtimeExposeMutableGlobal("module", { exports: {} });
+  __runtimeExposeMutableGlobal("exports", globalThis.module.exports);
+})();

package/dist/isolate-runtime/override-process-cwd.js

@@ -0,0 +1,8 @@
+"use strict";
+(() => {
+  // isolate-runtime/src/inject/override-process-cwd.ts
+  var __cwd = globalThis.__runtimeProcessCwdOverride;
+  if (typeof __cwd === "string") {
+    process.cwd = () => __cwd;
+  }
+})();

package/dist/isolate-runtime/override-process-env.js

@@ -0,0 +1,8 @@
+"use strict";
+(() => {
+  // isolate-runtime/src/inject/override-process-env.ts
+  var __envPatch = globalThis.__runtimeProcessEnvOverride;
+  if (__envPatch && typeof __envPatch === "object") {
+    Object.assign(process.env, __envPatch);
+  }
+})();