@secure-exec/sandbox 0.0.0-split-runtime-preview.7b0dded

package/dist/index.d.ts

@@ -0,0 +1,2 @@
+export type { SandboxFsOptions, SandboxMountPluginConfig, } from "./mount.js";
+export { createSandboxFs } from "./mount.js";

package/dist/index.js

@@ -0,0 +1 @@
+export { createSandboxFs } from "./mount.js";

package/dist/mount.d.ts

@@ -0,0 +1,27 @@
+import type { MountConfigJsonObject, NativeMountPluginDescriptor } from "@secure-exec/core/descriptors";
+import type { SandboxAgent } from "sandbox-agent";
+export interface SandboxFsOptions {
+    /** A connected SandboxAgent client instance. */
+    client: SandboxAgent;
+    /** Base path to scope all operations under. Defaults to "/". */
+    basePath?: string;
+    /** Per-request timeout for sandbox-agent HTTP calls. */
+    timeoutMs?: number;
+    /** Maximum file size allowed for buffered pread/truncate fallbacks. */
+    maxFullReadBytes?: number;
+}
+export type SandboxMountPluginConfig = MountConfigJsonObject & {
+    baseUrl: string;
+    token?: string;
+    headers?: Record<string, string>;
+    basePath?: string;
+    timeoutMs?: number;
+    maxFullReadBytes?: number;
+};
+/**
+ * Create a declarative sandbox-agent mount plugin descriptor.
+ *
+ * This keeps the legacy helper name while routing first-party sandbox mounts
+ * through the native `sandbox_agent` plugin instead of a JS VFS backend.
+ */
+export declare function createSandboxFs(options: SandboxFsOptions): NativeMountPluginDescriptor<SandboxMountPluginConfig>;

package/dist/mount.js

@@ -0,0 +1,45 @@
+function normalizeHeaders(headers) {
+    if (!headers) {
+        return undefined;
+    }
+    if (headers instanceof Headers) {
+        return Object.fromEntries(headers.entries());
+    }
+    if (Array.isArray(headers)) {
+        return Object.fromEntries(headers);
+    }
+    return Object.fromEntries(Object.entries(headers).map(([name, value]) => [name, String(value)]));
+}
+function getSerializableClientConfig(client) {
+    const serializable = client;
+    const baseUrl = serializable.baseUrl?.trim().replace(/\/+$/, "");
+    if (!baseUrl) {
+        throw new Error("SandboxAgent client does not expose a serializable baseUrl; connect with a standard sandbox-agent client instance");
+    }
+    return {
+        baseUrl,
+        ...(serializable.token ? { token: serializable.token } : {}),
+        ...(serializable.defaultHeaders
+            ? { headers: normalizeHeaders(serializable.defaultHeaders) }
+            : {}),
+    };
+}
+/**
+ * Create a declarative sandbox-agent mount plugin descriptor.
+ *
+ * This keeps the legacy helper name while routing first-party sandbox mounts
+ * through the native `sandbox_agent` plugin instead of a JS VFS backend.
+ */
+export function createSandboxFs(options) {
+    return {
+        id: "sandbox_agent",
+        config: {
+            ...getSerializableClientConfig(options.client),
+            ...(options.basePath ? { basePath: options.basePath } : {}),
+            ...(options.timeoutMs != null ? { timeoutMs: options.timeoutMs } : {}),
+            ...(options.maxFullReadBytes != null
+                ? { maxFullReadBytes: options.maxFullReadBytes }
+                : {}),
+        },
+    };
+}

package/package.json

@@ -0,0 +1,37 @@
+{
+	"name": "@secure-exec/sandbox",
+	"version": "0.0.0-split-runtime-preview.7b0dded",
+	"type": "module",
+	"license": "Apache-2.0",
+	"main": "./dist/index.js",
+	"types": "./dist/index.d.ts",
+	"files": [
+		"dist"
+	],
+	"exports": {
+		".": {
+			"types": "./dist/index.d.ts",
+			"import": "./dist/index.js",
+			"default": "./dist/index.js"
+		},
+		"./mount": {
+			"types": "./dist/mount.d.ts",
+			"import": "./dist/mount.js",
+			"default": "./dist/mount.js"
+		}
+	},
+	"scripts": {
+		"check-types": "tsc --noEmit",
+		"build": "tsc",
+		"test": "vitest run"
+	},
+	"dependencies": {
+		"@secure-exec/core": "0.0.0-split-runtime-preview.7b0dded",
+		"sandbox-agent": "^0.4.2"
+	},
+	"devDependencies": {
+		"@types/node": "^22.10.2",
+		"typescript": "^5.7.2",
+		"vitest": "^2.1.8"
+	}
+}