@secure-exec/core 0.1.0-rc.1

package/dist/shared/global-exposure.js

@@ -0,0 +1,406 @@
+// Canonical Node runtime + bridge custom-global inventory.
+export const NODE_CUSTOM_GLOBAL_INVENTORY = [
+    {
+        name: "_processConfig",
+        classification: "hardened",
+        rationale: "Bridge bootstrap configuration must not be replaced by sandbox code.",
+    },
+    {
+        name: "_osConfig",
+        classification: "hardened",
+        rationale: "Bridge bootstrap configuration must not be replaced by sandbox code.",
+    },
+    {
+        name: "bridge",
+        classification: "hardened",
+        rationale: "Bridge export object is runtime-owned control-plane state.",
+    },
+    {
+        name: "_registerHandle",
+        classification: "hardened",
+        rationale: "Active-handle lifecycle hook controls runtime completion semantics.",
+    },
+    {
+        name: "_unregisterHandle",
+        classification: "hardened",
+        rationale: "Active-handle lifecycle hook controls runtime completion semantics.",
+    },
+    {
+        name: "_waitForActiveHandles",
+        classification: "hardened",
+        rationale: "Active-handle lifecycle hook controls runtime completion semantics.",
+    },
+    {
+        name: "_getActiveHandles",
+        classification: "hardened",
+        rationale: "Bridge debug hook should not be replaced by sandbox code.",
+    },
+    {
+        name: "_childProcessDispatch",
+        classification: "hardened",
+        rationale: "Host-to-sandbox child-process callback dispatch entrypoint.",
+    },
+    {
+        name: "_childProcessModule",
+        classification: "hardened",
+        rationale: "Bridge-owned child_process module handle for require resolution.",
+    },
+    {
+        name: "_osModule",
+        classification: "hardened",
+        rationale: "Bridge-owned os module handle for require resolution.",
+    },
+    {
+        name: "_moduleModule",
+        classification: "hardened",
+        rationale: "Bridge-owned module module handle for require resolution.",
+    },
+    {
+        name: "_httpModule",
+        classification: "hardened",
+        rationale: "Bridge-owned http module handle for require resolution.",
+    },
+    {
+        name: "_httpsModule",
+        classification: "hardened",
+        rationale: "Bridge-owned https module handle for require resolution.",
+    },
+    {
+        name: "_http2Module",
+        classification: "hardened",
+        rationale: "Bridge-owned http2 module handle for require resolution.",
+    },
+    {
+        name: "_dnsModule",
+        classification: "hardened",
+        rationale: "Bridge-owned dns module handle for require resolution.",
+    },
+    {
+        name: "_httpServerDispatch",
+        classification: "hardened",
+        rationale: "Host-to-sandbox HTTP server dispatch entrypoint.",
+    },
+    {
+        name: "ProcessExitError",
+        classification: "hardened",
+        rationale: "Runtime-owned process-exit control-path error class.",
+    },
+    {
+        name: "_log",
+        classification: "hardened",
+        rationale: "Host console capture reference consumed by sandbox console shim.",
+    },
+    {
+        name: "_error",
+        classification: "hardened",
+        rationale: "Host console capture reference consumed by sandbox console shim.",
+    },
+    {
+        name: "_loadPolyfill",
+        classification: "hardened",
+        rationale: "Host module-loading bridge reference.",
+    },
+    {
+        name: "_resolveModule",
+        classification: "hardened",
+        rationale: "Host module-resolution bridge reference.",
+    },
+    {
+        name: "_loadFile",
+        classification: "hardened",
+        rationale: "Host file-loading bridge reference.",
+    },
+    {
+        name: "_scheduleTimer",
+        classification: "hardened",
+        rationale: "Host timer bridge reference used by process timers.",
+    },
+    {
+        name: "_cryptoRandomFill",
+        classification: "hardened",
+        rationale: "Host entropy bridge reference for crypto.getRandomValues.",
+    },
+    {
+        name: "_cryptoRandomUUID",
+        classification: "hardened",
+        rationale: "Host entropy bridge reference for crypto.randomUUID.",
+    },
+    {
+        name: "_fsReadFile",
+        classification: "hardened",
+        rationale: "Host filesystem bridge reference.",
+    },
+    {
+        name: "_fsWriteFile",
+        classification: "hardened",
+        rationale: "Host filesystem bridge reference.",
+    },
+    {
+        name: "_fsReadFileBinary",
+        classification: "hardened",
+        rationale: "Host filesystem bridge reference.",
+    },
+    {
+        name: "_fsWriteFileBinary",
+        classification: "hardened",
+        rationale: "Host filesystem bridge reference.",
+    },
+    {
+        name: "_fsReadDir",
+        classification: "hardened",
+        rationale: "Host filesystem bridge reference.",
+    },
+    {
+        name: "_fsMkdir",
+        classification: "hardened",
+        rationale: "Host filesystem bridge reference.",
+    },
+    {
+        name: "_fsRmdir",
+        classification: "hardened",
+        rationale: "Host filesystem bridge reference.",
+    },
+    {
+        name: "_fsExists",
+        classification: "hardened",
+        rationale: "Host filesystem bridge reference.",
+    },
+    {
+        name: "_fsStat",
+        classification: "hardened",
+        rationale: "Host filesystem bridge reference.",
+    },
+    {
+        name: "_fsUnlink",
+        classification: "hardened",
+        rationale: "Host filesystem bridge reference.",
+    },
+    {
+        name: "_fsRename",
+        classification: "hardened",
+        rationale: "Host filesystem bridge reference.",
+    },
+    {
+        name: "_fsChmod",
+        classification: "hardened",
+        rationale: "Host filesystem bridge reference.",
+    },
+    {
+        name: "_fsChown",
+        classification: "hardened",
+        rationale: "Host filesystem bridge reference.",
+    },
+    {
+        name: "_fsLink",
+        classification: "hardened",
+        rationale: "Host filesystem bridge reference.",
+    },
+    {
+        name: "_fsSymlink",
+        classification: "hardened",
+        rationale: "Host filesystem bridge reference.",
+    },
+    {
+        name: "_fsReadlink",
+        classification: "hardened",
+        rationale: "Host filesystem bridge reference.",
+    },
+    {
+        name: "_fsLstat",
+        classification: "hardened",
+        rationale: "Host filesystem bridge reference.",
+    },
+    {
+        name: "_fsTruncate",
+        classification: "hardened",
+        rationale: "Host filesystem bridge reference.",
+    },
+    {
+        name: "_fsUtimes",
+        classification: "hardened",
+        rationale: "Host filesystem bridge reference.",
+    },
+    {
+        name: "_fs",
+        classification: "hardened",
+        rationale: "Bridge filesystem facade consumed by fs polyfill.",
+    },
+    {
+        name: "_childProcessSpawnStart",
+        classification: "hardened",
+        rationale: "Host child_process bridge reference.",
+    },
+    {
+        name: "_childProcessStdinWrite",
+        classification: "hardened",
+        rationale: "Host child_process bridge reference.",
+    },
+    {
+        name: "_childProcessStdinClose",
+        classification: "hardened",
+        rationale: "Host child_process bridge reference.",
+    },
+    {
+        name: "_childProcessKill",
+        classification: "hardened",
+        rationale: "Host child_process bridge reference.",
+    },
+    {
+        name: "_childProcessSpawnSync",
+        classification: "hardened",
+        rationale: "Host child_process bridge reference.",
+    },
+    {
+        name: "_networkFetchRaw",
+        classification: "hardened",
+        rationale: "Host network bridge reference.",
+    },
+    {
+        name: "_networkDnsLookupRaw",
+        classification: "hardened",
+        rationale: "Host network bridge reference.",
+    },
+    {
+        name: "_networkHttpRequestRaw",
+        classification: "hardened",
+        rationale: "Host network bridge reference.",
+    },
+    {
+        name: "_networkHttpServerListenRaw",
+        classification: "hardened",
+        rationale: "Host network bridge reference.",
+    },
+    {
+        name: "_networkHttpServerCloseRaw",
+        classification: "hardened",
+        rationale: "Host network bridge reference.",
+    },
+    {
+        name: "require",
+        classification: "hardened",
+        rationale: "Runtime-owned global require shim entrypoint.",
+    },
+    {
+        name: "_requireFrom",
+        classification: "hardened",
+        rationale: "Runtime-owned internal require shim used by module polyfill.",
+    },
+    {
+        name: "_dynamicImport",
+        classification: "hardened",
+        rationale: "Runtime-owned host callback reference for dynamic import resolution.",
+    },
+    {
+        name: "__dynamicImport",
+        classification: "hardened",
+        rationale: "Runtime-owned dynamic-import shim entrypoint.",
+    },
+    {
+        name: "_moduleCache",
+        classification: "mutable-runtime-state",
+        rationale: "Per-execution CommonJS/require cache state.",
+    },
+    {
+        name: "_pendingModules",
+        classification: "mutable-runtime-state",
+        rationale: "Per-execution circular-load tracking state.",
+    },
+    {
+        name: "_currentModule",
+        classification: "mutable-runtime-state",
+        rationale: "Per-execution module resolution context.",
+    },
+    {
+        name: "_stdinData",
+        classification: "mutable-runtime-state",
+        rationale: "Per-execution stdin payload state.",
+    },
+    {
+        name: "_stdinPosition",
+        classification: "mutable-runtime-state",
+        rationale: "Per-execution stdin stream cursor state.",
+    },
+    {
+        name: "_stdinEnded",
+        classification: "mutable-runtime-state",
+        rationale: "Per-execution stdin completion state.",
+    },
+    {
+        name: "_stdinFlowMode",
+        classification: "mutable-runtime-state",
+        rationale: "Per-execution stdin flow-control state.",
+    },
+    {
+        name: "module",
+        classification: "mutable-runtime-state",
+        rationale: "Per-execution CommonJS module wrapper state.",
+    },
+    {
+        name: "exports",
+        classification: "mutable-runtime-state",
+        rationale: "Per-execution CommonJS module wrapper state.",
+    },
+    {
+        name: "__filename",
+        classification: "mutable-runtime-state",
+        rationale: "Per-execution CommonJS file context state.",
+    },
+    {
+        name: "__dirname",
+        classification: "mutable-runtime-state",
+        rationale: "Per-execution CommonJS file context state.",
+    },
+];
+export const HARDENED_NODE_CUSTOM_GLOBALS = NODE_CUSTOM_GLOBAL_INVENTORY
+    .filter((entry) => entry.classification === "hardened")
+    .map((entry) => entry.name);
+export const MUTABLE_NODE_CUSTOM_GLOBALS = NODE_CUSTOM_GLOBAL_INVENTORY
+    .filter((entry) => entry.classification === "mutable-runtime-state")
+    .map((entry) => entry.name);
+/**
+ * Define a property on `target` using `Object.defineProperty`.
+ * By default the property is non-writable/non-configurable (hardened).
+ */
+export function exposeGlobalBinding(target, name, value, options = {}) {
+    const mutable = options.mutable === true;
+    const enumerable = options.enumerable !== false;
+    Object.defineProperty(target, name, {
+        value,
+        writable: mutable,
+        configurable: mutable,
+        enumerable,
+    });
+}
+/** Install a hardened (non-writable) global on `globalThis`. */
+export function exposeCustomGlobal(name, value) {
+    exposeGlobalBinding(globalThis, name, value);
+}
+/** Install a writable global on `globalThis` for per-execution state. */
+export function exposeMutableRuntimeStateGlobal(name, value) {
+    exposeGlobalBinding(globalThis, name, value, {
+        mutable: true,
+    });
+}
+/**
+ * Inline JavaScript source that provides `exposeCustomGlobal` and
+ * `exposeMutableRuntimeStateGlobal` inside the isolate's V8 context.
+ * Evaluated by the host after context creation so that bridge/runtime
+ * scripts can harden their own globals.
+ */
+export const ISOLATE_GLOBAL_EXPOSURE_HELPER_SOURCE = `(() => {
+  const exposeGlobalBinding = (name, value, mutable = false) => {
+    Object.defineProperty(globalThis, name, {
+      value,
+      writable: mutable,
+      configurable: mutable,
+      enumerable: true,
+    });
+  };
+  const exposeCustomGlobal = (name, value) => exposeGlobalBinding(name, value, false);
+  const exposeMutableRuntimeStateGlobal = (name, value) =>
+    exposeGlobalBinding(name, value, true);
+  return {
+    exposeCustomGlobal,
+    exposeMutableRuntimeStateGlobal,
+  };
+})()`;

package/dist/shared/in-memory-fs.d.ts

@@ -0,0 +1,42 @@
+import type { VirtualFileSystem, VirtualStat } from "../types.js";
+/**
+ * A fully in-memory VirtualFileSystem backed by Maps.
+ * Used as the default filesystem for the browser sandbox and for tests.
+ * Paths are always POSIX-style (forward slashes, rooted at "/").
+ */
+export declare class InMemoryFileSystem implements VirtualFileSystem {
+    private files;
+    private dirs;
+    private symlinks;
+    private modes;
+    private owners;
+    private timestamps;
+    private hardLinks;
+    private listDirEntries;
+    readFile(path: string): Promise<Uint8Array>;
+    readTextFile(path: string): Promise<string>;
+    readDir(path: string): Promise<string[]>;
+    readDirWithTypes(path: string): Promise<Array<{
+        name: string;
+        isDirectory: boolean;
+    }>>;
+    writeFile(path: string, content: string | Uint8Array): Promise<void>;
+    createDir(path: string): Promise<void>;
+    mkdir(path: string): Promise<void>;
+    private resolveSymlink;
+    private statEntry;
+    exists(path: string): Promise<boolean>;
+    stat(path: string): Promise<VirtualStat>;
+    removeFile(path: string): Promise<void>;
+    removeDir(path: string): Promise<void>;
+    rename(oldPath: string, newPath: string): Promise<void>;
+    symlink(target: string, linkPath: string): Promise<void>;
+    readlink(path: string): Promise<string>;
+    lstat(path: string): Promise<VirtualStat>;
+    link(oldPath: string, newPath: string): Promise<void>;
+    chmod(path: string, mode: number): Promise<void>;
+    chown(path: string, uid: number, gid: number): Promise<void>;
+    utimes(path: string, atime: number, mtime: number): Promise<void>;
+    truncate(path: string, length: number): Promise<void>;
+}
+export declare function createInMemoryFileSystem(): InMemoryFileSystem;