@sylix/coworker 1.4.2 → 1.5.2

package/dist/services/browser/sandbox/__tests__/protocol-bridge.test.js

@@ -0,0 +1,46 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+const vitest_1 = require("vitest");
+const protocol_bridge_1 = require("../protocol-bridge");
+vitest_1.describe.sequential("protocol bridge", () => {
+    let bridge;
+    let playwright;
+    let browser;
+    let page;
+    (0, vitest_1.beforeAll)(async () => {
+        bridge = (0, protocol_bridge_1.createProtocolBridge)();
+        playwright = await bridge.initializePlaywright();
+    }, 60000);
+    (0, vitest_1.afterAll)(async () => {
+        if (page && !page.isClosed()) {
+            await page.close();
+        }
+        if (browser?.isConnected()) {
+            await browser.close();
+        }
+        await bridge.dispose("test teardown");
+    }, 60000);
+    (0, vitest_1.it)("initializes Playwright through the bridge", () => {
+        (0, vitest_1.expect)(playwright.chromium).toBeDefined();
+    });
+    (0, vitest_1.it)("launches Chromium and executes core page operations", async () => {
+        browser = await playwright.chromium.launch({ headless: true });
+        page = await browser.newPage();
+        await page.goto("https://example.com");
+        await (0, vitest_1.expect)(page.title()).resolves.toBe("Example Domain");
+        await (0, vitest_1.expect)(page.locator("h1").textContent()).resolves.toBe("Example Domain");
+        await (0, vitest_1.expect)(page.evaluate(() => document.title)).resolves.toBe("Example Domain");
+    }, 120000);
+    (0, vitest_1.it)("cleans up page, browser, and bridge connection", async () => {
+        const activePage = page;
+        const activeBrowser = browser;
+        (0, vitest_1.expect)(activePage).toBeDefined();
+        (0, vitest_1.expect)(activeBrowser).toBeDefined();
+        await activePage?.close();
+        (0, vitest_1.expect)(activePage?.isClosed()).toBe(true);
+        await activeBrowser?.close();
+        (0, vitest_1.expect)(activeBrowser?.isConnected()).toBe(false);
+        await bridge.dispose("test cleanup");
+    }, 60000);
+});
+//# sourceMappingURL=protocol-bridge.test.js.map

package/dist/services/browser/sandbox/__tests__/protocol-bridge.test.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"protocol-bridge.test.js","sourceRoot":"","sources":["../../../../../src/services/browser/sandbox/__tests__/protocol-bridge.test.ts"],"names":[],"mappings":";;AACA,mCAAmE;AACnE,wDAA+E;AAG/E,iBAAQ,CAAC,UAAU,CAAC,iBAAiB,EAAE,GAAG,EAAE;IAC1C,IAAI,MAAsB,CAAC;IAC3B,IAAI,UAAgC,CAAC;IACrC,IAAI,OAA4B,CAAC;IACjC,IAAI,IAAsB,CAAC;IAE3B,IAAA,kBAAS,EAAC,KAAK,IAAI,EAAE;QACnB,MAAM,GAAG,IAAA,sCAAoB,GAAE,CAAC;QAChC,UAAU,GAAG,MAAM,MAAM,CAAC,oBAAoB,EAAE,CAAC;IACnD,CAAC,EAAE,KAAM,CAAC,CAAC;IAEX,IAAA,iBAAQ,EAAC,KAAK,IAAI,EAAE;QAClB,IAAI,IAAI,IAAI,CAAC,IAAI,CAAC,QAAQ,EAAE,EAAE,CAAC;YAC7B,MAAM,IAAI,CAAC,KAAK,EAAE,CAAC;QACrB,CAAC;QAED,IAAI,OAAO,EAAE,WAAW,EAAE,EAAE,CAAC;YAC3B,MAAM,OAAO,CAAC,KAAK,EAAE,CAAC;QACxB,CAAC;QAED,MAAM,MAAM,CAAC,OAAO,CAAC,eAAe,CAAC,CAAC;IACxC,CAAC,EAAE,KAAM,CAAC,CAAC;IAEX,IAAA,WAAE,EAAC,2CAA2C,EAAE,GAAG,EAAE;QACnD,IAAA,eAAM,EAAC,UAAU,CAAC,QAAQ,CAAC,CAAC,WAAW,EAAE,CAAC;IAC5C,CAAC,CAAC,CAAC;IAEH,IAAA,WAAE,EAAC,qDAAqD,EAAE,KAAK,IAAI,EAAE;QACnE,OAAO,GAAG,MAAM,UAAU,CAAC,QAAQ,CAAC,MAAM,CAAC,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC,CAAC;QAC/D,IAAI,GAAG,MAAM,OAAO,CAAC,OAAO,EAAE,CAAC;QAE/B,MAAM,IAAI,CAAC,IAAI,CAAC,qBAAqB,CAAC,CAAC;QAEvC,MAAM,IAAA,eAAM,EAAC,IAAI,CAAC,KAAK,EAAE,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC,gBAAgB,CAAC,CAAC;QAC3D,MAAM,IAAA,eAAM,EAAC,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,WAAW,EAAE,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC,gBAAgB,CAAC,CAAC;QAC/E,MAAM,IAAA,eAAM,EAAC,IAAI,CAAC,QAAQ,CAAC,GAAG,EAAE,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC,gBAAgB,CAAC,CAAC;IACpF,CAAC,EAAE,MAAO,CAAC,CAAC;IAEZ,IAAA,WAAE,EAAC,gDAAgD,EAAE,KAAK,IAAI,EAAE;QAC9D,MAAM,UAAU,GAAG,IAAI,CAAC;QACxB,MAAM,aAAa,GAAG,OAAO,CAAC;QAE9B,IAAA,eAAM,EAAC,UAAU,CAAC,CAAC,WAAW,EAAE,CAAC;QACjC,IAAA,eAAM,EAAC,aAAa,CAAC,CAAC,WAAW,EAAE,CAAC;QAEpC,MAAM,UAAU,EAAE,KAAK,EAAE,CAAC;QAC1B,IAAA,eAAM,EAAC,UAAU,EAAE,QAAQ,EAAE,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAE1C,MAAM,aAAa,EAAE,KAAK,EAAE,CAAC;QAC7B,IAAA,eAAM,EAAC,aAAa,EAAE,WAAW,EAAE,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QAEjD,MAAM,MAAM,CAAC,OAAO,CAAC,cAAc,CAAC,CAAC;IACvC,CAAC,EAAE,KAAM,CAAC,CAAC;AACb,CAAC,CAAC,CAAC"}

package/dist/services/browser/sandbox/__tests__/quickjs-host.test.d.ts

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=quickjs-host.test.d.ts.map

package/dist/services/browser/sandbox/__tests__/quickjs-host.test.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"quickjs-host.test.d.ts","sourceRoot":"","sources":["../../../../../src/services/browser/sandbox/__tests__/quickjs-host.test.ts"],"names":[],"mappings":""}

package/dist/services/browser/sandbox/__tests__/quickjs-host.test.js

@@ -0,0 +1,125 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+const vitest_1 = require("vitest");
+const quickjs_host_1 = require("../quickjs-host");
+const hosts = new Set();
+async function createHost(options = {}) {
+    const host = await quickjs_host_1.QuickJSHost.create(options);
+    hosts.add(host);
+    return host;
+}
+(0, vitest_1.afterEach)(() => {
+    for (const host of hosts) {
+        host.dispose();
+    }
+    hosts.clear();
+});
+(0, vitest_1.describe)("QuickJSHost", () => {
+    (0, vitest_1.it)("executes simple expressions", async () => {
+        const host = await createHost({
+            globals: {
+                appName: "dev-browser",
+            },
+        });
+        (0, vitest_1.expect)(host.executeScriptSync("1 + 2 + 3")).toBe(6);
+        (0, vitest_1.expect)(host.executeScriptSync("appName")).toBe("dev-browser");
+    });
+    (0, vitest_1.it)("exposes host functions and transport callbacks", async () => {
+        const sentMessages = [];
+        const host = await createHost({
+            hostFunctions: {
+                add: (left, right) => Number(left) + Number(right),
+            },
+            onTransportSend: (message) => {
+                sentMessages.push(message);
+            },
+        });
+        (0, vitest_1.expect)(host.executeScriptSync('__hostCall("add", JSON.stringify([4, 5]))')).toBe(9);
+        (0, vitest_1.expect)(host.executeScriptSync('__transport_send(JSON.stringify({ type: "ping", id: 1 }))')).toBeUndefined();
+        (0, vitest_1.expect)(sentMessages).toEqual(['{"type":"ping","id":1}']);
+    });
+    (0, vitest_1.it)("handles async host functions", async () => {
+        const host = await createHost({
+            hostFunctions: {
+                addAsync: async (left, right) => {
+                    await new Promise((resolve) => setTimeout(resolve, 5));
+                    return Number(left) + Number(right);
+                },
+            },
+        });
+        await (0, vitest_1.expect)(host.executeScript(`
+        (async () => {
+          return await __hostCall("addAsync", JSON.stringify([7, 8]));
+        })()
+      `)).resolves.toBe(15);
+    });
+    (0, vitest_1.it)("lets the host call functions inside the sandbox", async () => {
+        const host = await createHost();
+        host.executeScriptSync(`
+      globalThis.__transport_receive = (message) => {
+        globalThis.lastMessage = message;
+        return message.toUpperCase();
+      };
+    `);
+        await (0, vitest_1.expect)(host.callFunction("__transport_receive", "hello from host")).resolves.toBe("HELLO FROM HOST");
+        (0, vitest_1.expect)(host.executeScriptSync("lastMessage")).toBe("hello from host");
+    });
+    (0, vitest_1.it)("supports setTimeout and clearTimeout", async () => {
+        const host = await createHost();
+        await (0, vitest_1.expect)(host.executeScript(`
+        (async () => {
+          let fired = false;
+          const cancelled = setTimeout(() => {
+            fired = true;
+          }, 1);
+          clearTimeout(cancelled);
+
+          return await new Promise((resolve) => {
+            setTimeout(() => resolve(fired ? "wrong" : "done"), 5);
+          });
+        })()
+      `)).resolves.toBe("done");
+    });
+    (0, vitest_1.it)("enforces memory limits", async () => {
+        const host = await createHost({
+            memoryLimitBytes: 1024 * 1024,
+        });
+        await (0, vitest_1.expect)(host.executeScript(`
+        const chunks = [];
+        while (true) {
+          chunks.push("x".repeat(1024));
+        }
+      `)).rejects.toThrow(/out of memory/i);
+    });
+    (0, vitest_1.it)("enforces CPU time limits", async () => {
+        const host = await createHost({
+            cpuTimeoutMs: 10,
+        });
+        await (0, vitest_1.expect)(host.executeScript("while (true) {}")).rejects.toThrow(/interrupted/i);
+    });
+    (0, vitest_1.it)("routes console output to the host callback", async () => {
+        const entries = [];
+        const host = await createHost({
+            onConsole: (level, args) => {
+                entries.push({ level, args });
+            },
+        });
+        (0, vitest_1.expect)(host.executeScriptSync('console.log("hello", 42, { ok: true })')).toBeUndefined();
+        (0, vitest_1.expect)(entries).toEqual([
+            {
+                level: "log",
+                args: ["hello", 42, { ok: true }],
+            },
+        ]);
+    });
+    (0, vitest_1.it)("disposes resources cleanly", async () => {
+        const host = await createHost();
+        host.executeScriptSync("setTimeout(() => {}, 1)");
+        (0, vitest_1.expect)(() => host.dispose()).not.toThrow();
+        (0, vitest_1.expect)(host.disposed).toBe(true);
+        (0, vitest_1.expect)(() => host.dispose()).not.toThrow();
+        await (0, vitest_1.expect)(host.executeScript("1 + 1")).rejects.toThrow(/disposed/i);
+        hosts.delete(host);
+    });
+});
+//# sourceMappingURL=quickjs-host.test.js.map

package/dist/services/browser/sandbox/__tests__/quickjs-host.test.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"quickjs-host.test.js","sourceRoot":"","sources":["../../../../../src/services/browser/sandbox/__tests__/quickjs-host.test.ts"],"names":[],"mappings":";;AAAA,mCAAyD;AAEzD,kDAA8C;AAE9C,MAAM,KAAK,GAAG,IAAI,GAAG,EAAe,CAAC;AAErC,KAAK,UAAU,UAAU,CACvB,UAAoD,EAAE;IAEtD,MAAM,IAAI,GAAG,MAAM,0BAAW,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;IAC/C,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;IAChB,OAAO,IAAI,CAAC;AACd,CAAC;AAED,IAAA,kBAAS,EAAC,GAAG,EAAE;IACb,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;QACzB,IAAI,CAAC,OAAO,EAAE,CAAC;IACjB,CAAC;IACD,KAAK,CAAC,KAAK,EAAE,CAAC;AAChB,CAAC,CAAC,CAAC;AAEH,IAAA,iBAAQ,EAAC,aAAa,EAAE,GAAG,EAAE;IAC3B,IAAA,WAAE,EAAC,6BAA6B,EAAE,KAAK,IAAI,EAAE;QAC3C,MAAM,IAAI,GAAG,MAAM,UAAU,CAAC;YAC5B,OAAO,EAAE;gBACP,OAAO,EAAE,aAAa;aACvB;SACF,CAAC,CAAC;QAEH,IAAA,eAAM,EAAC,IAAI,CAAC,iBAAiB,CAAC,WAAW,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QACpD,IAAA,eAAM,EAAC,IAAI,CAAC,iBAAiB,CAAC,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC;IAChE,CAAC,CAAC,CAAC;IAEH,IAAA,WAAE,EAAC,gDAAgD,EAAE,KAAK,IAAI,EAAE;QAC9D,MAAM,YAAY,GAAa,EAAE,CAAC;QAClC,MAAM,IAAI,GAAG,MAAM,UAAU,CAAC;YAC5B,aAAa,EAAE;gBACb,GAAG,EAAE,CAAC,IAAa,EAAE,KAAc,EAAE,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,MAAM,CAAC,KAAK,CAAC;aACrE;YACD,eAAe,EAAE,CAAC,OAAO,EAAE,EAAE;gBAC3B,YAAY,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;YAC7B,CAAC;SACF,CAAC,CAAC;QAEH,IAAA,eAAM,EAAC,IAAI,CAAC,iBAAiB,CAAC,2CAA2C,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QACpF,IAAA,eAAM,EACJ,IAAI,CAAC,iBAAiB,CAAC,2DAA2D,CAAC,CACpF,CAAC,aAAa,EAAE,CAAC;QAClB,IAAA,eAAM,EAAC,YAAY,CAAC,CAAC,OAAO,CAAC,CAAC,wBAAwB,CAAC,CAAC,CAAC;IAC3D,CAAC,CAAC,CAAC;IAEH,IAAA,WAAE,EAAC,8BAA8B,EAAE,KAAK,IAAI,EAAE;QAC5C,MAAM,IAAI,GAAG,MAAM,UAAU,CAAC;YAC5B,aAAa,EAAE;gBACb,QAAQ,EAAE,KAAK,EAAE,IAAa,EAAE,KAAc,EAAE,EAAE;oBAChD,MAAM,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,UAAU,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,CAAC;oBACvD,OAAO,MAAM,CAAC,IAAI,CAAC,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC;gBACtC,CAAC;aACF;SACF,CAAC,CAAC;QAEH,MAAM,IAAA,eAAM,EACV,IAAI,CAAC,aAAa,CAAC;;;;OAIlB,CAAC,CACH,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IACtB,CAAC,CAAC,CAAC;IAEH,IAAA,WAAE,EAAC,iDAAiD,EAAE,KAAK,IAAI,EAAE;QAC/D,MAAM,IAAI,GAAG,MAAM,UAAU,EAAE,CAAC;QAEhC,IAAI,CAAC,iBAAiB,CAAC;;;;;KAKtB,CAAC,CAAC;QAEH,MAAM,IAAA,eAAM,EAAC,IAAI,CAAC,YAAY,CAAC,qBAAqB,EAAE,iBAAiB,CAAC,CAAC,CAAC,QAAQ,CAAC,IAAI,CACrF,iBAAiB,CAClB,CAAC;QACF,IAAA,eAAM,EAAC,IAAI,CAAC,iBAAiB,CAAC,aAAa,CAAC,CAAC,CAAC,IAAI,CAAC,iBAAiB,CAAC,CAAC;IACxE,CAAC,CAAC,CAAC;IAEH,IAAA,WAAE,EAAC,sCAAsC,EAAE,KAAK,IAAI,EAAE;QACpD,MAAM,IAAI,GAAG,MAAM,UAAU,EAAE,CAAC;QAEhC,MAAM,IAAA,eAAM,EACV,IAAI,CAAC,aAAa,CAAC;;;;;;;;;;;;OAYlB,CAAC,CACH,CAAC,QAAQ,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;IAC1B,CAAC,CAAC,CAAC;IAEH,IAAA,WAAE,EAAC,wBAAwB,EAAE,KAAK,IAAI,EAAE;QACtC,MAAM,IAAI,GAAG,MAAM,UAAU,CAAC;YAC5B,gBAAgB,EAAE,IAAI,GAAG,IAAI;SAC9B,CAAC,CAAC;QAEH,MAAM,IAAA,eAAM,EACV,IAAI,CAAC,aAAa,CAAC;;;;;OAKlB,CAAC,CACH,CAAC,OAAO,CAAC,OAAO,CAAC,gBAAgB,CAAC,CAAC;IACtC,CAAC,CAAC,CAAC;IAEH,IAAA,WAAE,EAAC,0BAA0B,EAAE,KAAK,IAAI,EAAE;QACxC,MAAM,IAAI,GAAG,MAAM,UAAU,CAAC;YAC5B,YAAY,EAAE,EAAE;SACjB,CAAC,CAAC;QAEH,MAAM,IAAA,eAAM,EAAC,IAAI,CAAC,aAAa,CAAC,iBAAiB,CAAC,CAAC,CAAC,OAAO,CAAC,OAAO,CAAC,cAAc,CAAC,CAAC;IACtF,CAAC,CAAC,CAAC;IAEH,IAAA,WAAE,EAAC,4CAA4C,EAAE,KAAK,IAAI,EAAE;QAC1D,MAAM,OAAO,GAA8C,EAAE,CAAC;QAC9D,MAAM,IAAI,GAAG,MAAM,UAAU,CAAC;YAC5B,SAAS,EAAE,CAAC,KAAK,EAAE,IAAI,EAAE,EAAE;gBACzB,OAAO,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;YAChC,CAAC;SACF,CAAC,CAAC;QAEH,IAAA,eAAM,EAAC,IAAI,CAAC,iBAAiB,CAAC,wCAAwC,CAAC,CAAC,CAAC,aAAa,EAAE,CAAC;QACzF,IAAA,eAAM,EAAC,OAAO,CAAC,CAAC,OAAO,CAAC;YACtB;gBACE,KAAK,EAAE,KAAK;gBACZ,IAAI,EAAE,CAAC,OAAO,EAAE,EAAE,EAAE,EAAE,EAAE,EAAE,IAAI,EAAE,CAAC;aAClC;SACF,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;IAEH,IAAA,WAAE,EAAC,4BAA4B,EAAE,KAAK,IAAI,EAAE;QAC1C,MAAM,IAAI,GAAG,MAAM,UAAU,EAAE,CAAC;QAEhC,IAAI,CAAC,iBAAiB,CAAC,yBAAyB,CAAC,CAAC;QAElD,IAAA,eAAM,EAAC,GAAG,EAAE,CAAC,IAAI,CAAC,OAAO,EAAE,CAAC,CAAC,GAAG,CAAC,OAAO,EAAE,CAAC;QAC3C,IAAA,eAAM,EAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACjC,IAAA,eAAM,EAAC,GAAG,EAAE,CAAC,IAAI,CAAC,OAAO,EAAE,CAAC,CAAC,GAAG,CAAC,OAAO,EAAE,CAAC;QAC3C,MAAM,IAAA,eAAM,EAAC,IAAI,CAAC,aAAa,CAAC,OAAO,CAAC,CAAC,CAAC,OAAO,CAAC,OAAO,CAAC,WAAW,CAAC,CAAC;QAEvE,KAAK,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;IACrB,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC"}

package/dist/services/browser/sandbox/__tests__/sandbox-file-io.test.d.ts

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=sandbox-file-io.test.d.ts.map

package/dist/services/browser/sandbox/__tests__/sandbox-file-io.test.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"sandbox-file-io.test.d.ts","sourceRoot":"","sources":["../../../../../src/services/browser/sandbox/__tests__/sandbox-file-io.test.ts"],"names":[],"mappings":""}

package/dist/services/browser/sandbox/__tests__/sandbox-file-io.test.js

@@ -0,0 +1,207 @@
+"use strict";
+var __importDefault = (this && this.__importDefault) || function (mod) {
+    return (mod && mod.__esModule) ? mod : { "default": mod };
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+const promises_1 = require("node:fs/promises");
+const node_os_1 = __importDefault(require("node:os"));
+const node_path_1 = __importDefault(require("node:path"));
+const vitest_1 = require("vitest");
+const browser_manager_1 = require("../../browser-manager");
+const temp_files_1 = require("../../temp-files");
+const test_cleanup_1 = require("../../test-cleanup");
+const script_runner_quickjs_1 = require("../script-runner-quickjs");
+const bundle_test_helpers_1 = require("./bundle-test-helpers");
+const browserName = "sandbox-file-io";
+const INVALID_PATH_ERROR = /absolute paths are not allowed|null bytes|must not contain|escapes the controlled temp directory|symlink/i;
+function createOutput() {
+    const stdout = [];
+    const stderr = [];
+    return {
+        stdout,
+        stderr,
+        sink: {
+            onStdout: (data) => {
+                stdout.push(data);
+            },
+            onStderr: (data) => {
+                stderr.push(data);
+            },
+        },
+    };
+}
+function parseLastJsonLine(output) {
+    const lines = output.stdout.map((line) => line.trim()).filter((line) => line.length > 0);
+    const lastLine = lines.at(-1);
+    if (!lastLine) {
+        throw new Error("Expected sandbox output");
+    }
+    return JSON.parse(lastLine);
+}
+vitest_1.describe.sequential("QuickJS sandbox file I/O", () => {
+    let browserRootDir = "";
+    let manager;
+    const cleanupPaths = new Set();
+    (0, vitest_1.beforeAll)(async () => {
+        await (0, bundle_test_helpers_1.ensureSandboxClientBundle)();
+        await (0, temp_files_1.ensureDevBrowserTempDir)();
+        browserRootDir = await (0, promises_1.mkdtemp)(node_path_1.default.join(node_os_1.default.tmpdir(), "dev-browser-quickjs-file-io-"));
+        manager = new browser_manager_1.BrowserManager(node_path_1.default.join(browserRootDir, "browsers"));
+        await manager.ensureBrowser(browserName, {
+            headless: true,
+        });
+    }, 180000);
+    (0, vitest_1.afterEach)(async () => {
+        for (const filePath of cleanupPaths) {
+            await (0, promises_1.rm)(filePath, {
+                recursive: true,
+                force: true,
+            });
+        }
+        cleanupPaths.clear();
+    });
+    (0, vitest_1.afterAll)(async () => {
+        await manager.stopAll();
+        await (0, test_cleanup_1.removeDirectoryWithRetries)(browserRootDir);
+    }, 180000);
+    async function runSandboxScript(script) {
+        const output = createOutput();
+        await (0, script_runner_quickjs_1.runScript)(script, manager, browserName, output.sink, {
+            timeout: 60000,
+        });
+        return output;
+    }
+    async function expectSandboxScriptToThrow(script, matcher = INVALID_PATH_ERROR) {
+        const output = createOutput();
+        await (0, vitest_1.expect)((0, script_runner_quickjs_1.runScript)(script, manager, browserName, output.sink, { timeout: 60000 })).rejects.toThrow(matcher);
+    }
+    (0, vitest_1.it)("saves screenshot buffers into the controlled temp directory", async () => {
+        const requestedName = "sandbox file io screenshot?.png";
+        const expectedPath = await (0, temp_files_1.resolveDevBrowserTempPath)(requestedName);
+        cleanupPaths.add(expectedPath);
+        const output = await runSandboxScript(`
+      const page = await browser.getPage("file-io-save-screenshot");
+      await page.setContent("<html><body><h1>Screenshot</h1></body></html>");
+      const screenshot = await page.screenshot();
+      const savedPath = await saveScreenshot(screenshot, ${JSON.stringify(requestedName)});
+      console.log(JSON.stringify({ savedPath, size: screenshot.length }));
+    `);
+        const result = parseLastJsonLine(output);
+        (0, vitest_1.expect)(result.savedPath).toBe(expectedPath);
+        (0, vitest_1.expect)(result.savedPath.startsWith(`${node_path_1.default.resolve(temp_files_1.DEV_BROWSER_TMP_DIR)}${node_path_1.default.sep}`)).toBe(true);
+        (0, vitest_1.expect)(result.size).toBeGreaterThan(0);
+        (0, vitest_1.expect)((await (0, promises_1.stat)(result.savedPath)).size).toBeGreaterThan(0);
+    }, 120000);
+    (0, vitest_1.it)("writes page.screenshot({ path }) into the controlled temp directory", async () => {
+        const requestedName = "page screenshot path?.png";
+        const expectedPath = await (0, temp_files_1.resolveDevBrowserTempPath)(requestedName);
+        cleanupPaths.add(expectedPath);
+        const output = await runSandboxScript(`
+      const page = await browser.getPage("file-io-page-screenshot");
+      await page.setContent("<html><body><h1>Path Screenshot</h1></body></html>");
+      const options = { path: ${JSON.stringify(requestedName)} };
+      const screenshot = await page.screenshot(options);
+      console.log(JSON.stringify({ savedPath: options.path, size: screenshot.length }));
+    `);
+        const result = parseLastJsonLine(output);
+        (0, vitest_1.expect)(result.savedPath).toBe(expectedPath);
+        (0, vitest_1.expect)(result.size).toBeGreaterThan(0);
+        (0, vitest_1.expect)((await (0, promises_1.stat)(result.savedPath)).size).toBeGreaterThan(0);
+    }, 120000);
+    (0, vitest_1.it)("writes and reads back controlled temp files", async () => {
+        const requestedName = "sandbox file io data?.json";
+        const expectedPath = await (0, temp_files_1.resolveDevBrowserTempPath)(requestedName);
+        cleanupPaths.add(expectedPath);
+        const output = await runSandboxScript(`
+      const savedPath = await writeFile(
+        ${JSON.stringify(requestedName)},
+        JSON.stringify({ ok: true, value: 42 }),
+      );
+      const content = await readFile(${JSON.stringify(requestedName)});
+      console.log(JSON.stringify({ savedPath, content }));
+    `);
+        const result = parseLastJsonLine(output);
+        (0, vitest_1.expect)(result.savedPath).toBe(expectedPath);
+        (0, vitest_1.expect)(result.content).toBe('{"ok":true,"value":42}');
+        (0, vitest_1.expect)(await (0, promises_1.readFile)(result.savedPath, "utf8")).toBe(result.content);
+    });
+    (0, vitest_1.it)("sanitizes harmless filename characters before writing", async () => {
+        const requestedName = "report 2026:03:18?.json";
+        const expectedPath = await (0, temp_files_1.resolveDevBrowserTempPath)(requestedName);
+        cleanupPaths.add(expectedPath);
+        const output = await runSandboxScript(`
+      const savedPath = await writeFile(${JSON.stringify(requestedName)}, "sanitized");
+      console.log(JSON.stringify({ savedPath }));
+    `);
+        const result = parseLastJsonLine(output);
+        (0, vitest_1.expect)(result.savedPath).toBe(expectedPath);
+        (0, vitest_1.expect)(node_path_1.default.basename(result.savedPath)).toBe("report_2026_03_18_.json");
+        (0, vitest_1.expect)(await (0, promises_1.readFile)(result.savedPath, "utf8")).toBe("sanitized");
+    });
+    (0, vitest_1.it)("rejects traversal, absolute paths, and null bytes", async () => {
+        const invalidNames = [
+            "../escape",
+            "..\\escape",
+            "../../etc/passwd",
+            "safe/../../escape",
+            "/absolute/path",
+            "C:\\evil.txt",
+            "bad\0name.txt",
+        ];
+        const output = await runSandboxScript(`
+      const invalidNames = ${JSON.stringify(invalidNames)};
+      const results = [];
+      const operations = [
+        ["writeFile", async (name) => await writeFile(name, "blocked")],
+        ["readFile", async (name) => await readFile(name)],
+        [
+          "saveScreenshot",
+          async (name) => await saveScreenshot(new Uint8Array([1, 2, 3]), name),
+        ],
+      ];
+
+      for (const invalidName of invalidNames) {
+        for (const [label, operation] of operations) {
+          try {
+            await operation(invalidName);
+            results.push({ invalidName, label, ok: true, message: null });
+          } catch (error) {
+            results.push({
+              invalidName,
+              label,
+              ok: false,
+              message: error instanceof Error ? error.message : String(error),
+            });
+          }
+        }
+      }
+
+      console.log(JSON.stringify(results));
+    `);
+        const results = parseLastJsonLine(output);
+        (0, vitest_1.expect)(results).toHaveLength(invalidNames.length * 3);
+        for (const result of results) {
+            (0, vitest_1.expect)(result.ok).toBe(false);
+            (0, vitest_1.expect)(result.message ?? "").toMatch(INVALID_PATH_ERROR);
+        }
+    });
+    (0, vitest_1.it)("rejects unsafe screenshot path options", async () => {
+        await expectSandboxScriptToThrow(`
+      const page = await browser.getPage("file-io-invalid-screenshot");
+      await page.setContent("<html><body><h1>Invalid</h1></body></html>");
+      await page.screenshot({ path: "../escape.png" });
+    `);
+    }, 120000);
+    (0, vitest_1.it)("rejects symlinked temp-file targets", async () => {
+        const symlinkName = "sandbox-file-io-symlink.txt";
+        const symlinkPath = node_path_1.default.join(temp_files_1.DEV_BROWSER_TMP_DIR, symlinkName);
+        const targetPath = node_path_1.default.join(node_os_1.default.tmpdir(), "sandbox-file-io-symlink-target.txt");
+        cleanupPaths.add(symlinkPath);
+        cleanupPaths.add(targetPath);
+        await (0, promises_1.writeFile)(targetPath, "outside", "utf8");
+        await (0, promises_1.symlink)(targetPath, symlinkPath);
+        await expectSandboxScriptToThrow(`await writeFile(${JSON.stringify(symlinkName)}, "should fail");`);
+        await expectSandboxScriptToThrow(`await readFile(${JSON.stringify(symlinkName)});`);
+    });
+});
+//# sourceMappingURL=sandbox-file-io.test.js.map

package/dist/services/browser/sandbox/__tests__/sandbox-file-io.test.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sandbox-file-io.test.js","sourceRoot":"","sources":["../../../../../src/services/browser/sandbox/__tests__/sandbox-file-io.test.ts"],"names":[],"mappings":";;;;;AAAA,+CAO0B;AAC1B,sDAAyB;AACzB,0DAA6B;AAE7B,mCAA8E;AAE9E,2DAAuD;AACvD,iDAI0B;AAC1B,qDAAgE;AAChE,oEAAqD;AACrD,+DAAkE;AAElE,MAAM,WAAW,GAAG,iBAAiB,CAAC;AACtC,MAAM,kBAAkB,GACtB,2GAA2G,CAAC;AAO9G,SAAS,YAAY;IAMnB,MAAM,MAAM,GAAa,EAAE,CAAC;IAC5B,MAAM,MAAM,GAAa,EAAE,CAAC;IAE5B,OAAO;QACL,MAAM;QACN,MAAM;QACN,IAAI,EAAE;YACJ,QAAQ,EAAE,CAAC,IAAI,EAAE,EAAE;gBACjB,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YACpB,CAAC;YACD,QAAQ,EAAE,CAAC,IAAI,EAAE,EAAE;gBACjB,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YACpB,CAAC;SACF;KACF,CAAC;AACJ,CAAC;AAED,SAAS,iBAAiB,CAAI,MAAsB;IAClD,MAAM,KAAK,GAAG,MAAM,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC;IACzF,MAAM,QAAQ,GAAG,KAAK,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC;IAC9B,IAAI,CAAC,QAAQ,EAAE,CAAC;QACd,MAAM,IAAI,KAAK,CAAC,yBAAyB,CAAC,CAAC;IAC7C,CAAC;IAED,OAAO,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAM,CAAC;AACnC,CAAC;AAED,iBAAQ,CAAC,UAAU,CAAC,0BAA0B,EAAE,GAAG,EAAE;IACnD,IAAI,cAAc,GAAG,EAAE,CAAC;IACxB,IAAI,OAAuB,CAAC;IAC5B,MAAM,YAAY,GAAG,IAAI,GAAG,EAAU,CAAC;IAEvC,IAAA,kBAAS,EAAC,KAAK,IAAI,EAAE;QACnB,MAAM,IAAA,+CAAyB,GAAE,CAAC;QAElC,MAAM,IAAA,oCAAuB,GAAE,CAAC;QAEhC,cAAc,GAAG,MAAM,IAAA,kBAAO,EAAC,mBAAI,CAAC,IAAI,CAAC,iBAAE,CAAC,MAAM,EAAE,EAAE,8BAA8B,CAAC,CAAC,CAAC;QACvF,OAAO,GAAG,IAAI,gCAAc,CAAC,mBAAI,CAAC,IAAI,CAAC,cAAc,EAAE,UAAU,CAAC,CAAC,CAAC;QACpE,MAAM,OAAO,CAAC,aAAa,CAAC,WAAW,EAAE;YACvC,QAAQ,EAAE,IAAI;SACf,CAAC,CAAC;IACL,CAAC,EAAE,MAAO,CAAC,CAAC;IAEZ,IAAA,kBAAS,EAAC,KAAK,IAAI,EAAE;QACnB,KAAK,MAAM,QAAQ,IAAI,YAAY,EAAE,CAAC;YACpC,MAAM,IAAA,aAAE,EAAC,QAAQ,EAAE;gBACjB,SAAS,EAAE,IAAI;gBACf,KAAK,EAAE,IAAI;aACZ,CAAC,CAAC;QACL,CAAC;QACD,YAAY,CAAC,KAAK,EAAE,CAAC;IACvB,CAAC,CAAC,CAAC;IAEH,IAAA,iBAAQ,EAAC,KAAK,IAAI,EAAE;QAClB,MAAM,OAAO,CAAC,OAAO,EAAE,CAAC;QACxB,MAAM,IAAA,yCAA0B,EAAC,cAAc,CAAC,CAAC;IACnD,CAAC,EAAE,MAAO,CAAC,CAAC;IAEZ,KAAK,UAAU,gBAAgB,CAAC,MAAc;QAC5C,MAAM,MAAM,GAAG,YAAY,EAAE,CAAC;QAC9B,MAAM,IAAA,iCAAS,EAAC,MAAM,EAAE,OAAO,EAAE,WAAW,EAAE,MAAM,CAAC,IAAI,EAAE;YACzD,OAAO,EAAE,KAAM;SAChB,CAAC,CAAC;QACH,OAAO,MAAM,CAAC;IAChB,CAAC;IAED,KAAK,UAAU,0BAA0B,CACvC,MAAc,EACd,OAAO,GAAG,kBAAkB;QAE5B,MAAM,MAAM,GAAG,YAAY,EAAE,CAAC;QAC9B,MAAM,IAAA,eAAM,EACV,IAAA,iCAAS,EAAC,MAAM,EAAE,OAAO,EAAE,WAAW,EAAE,MAAM,CAAC,IAAI,EAAE,EAAE,OAAO,EAAE,KAAM,EAAE,CAAC,CAC1E,CAAC,OAAO,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC;IAC7B,CAAC;IAED,IAAA,WAAE,EAAC,6DAA6D,EAAE,KAAK,IAAI,EAAE;QAC3E,MAAM,aAAa,GAAG,iCAAiC,CAAC;QACxD,MAAM,YAAY,GAAG,MAAM,IAAA,sCAAyB,EAAC,aAAa,CAAC,CAAC;QACpE,YAAY,CAAC,GAAG,CAAC,YAAY,CAAC,CAAC;QAE/B,MAAM,MAAM,GAAG,MAAM,gBAAgB,CAAC;;;;2DAIiB,IAAI,CAAC,SAAS,CAAC,aAAa,CAAC;;KAEnF,CAAC,CAAC;QAEH,MAAM,MAAM,GAAG,iBAAiB,CAAsC,MAAM,CAAC,CAAC;QAC9E,IAAA,eAAM,EAAC,MAAM,CAAC,SAAS,CAAC,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC;QAC5C,IAAA,eAAM,EAAC,MAAM,CAAC,SAAS,CAAC,UAAU,CAAC,GAAG,mBAAI,CAAC,OAAO,CAAC,gCAAmB,CAAC,GAAG,mBAAI,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC,IAAI,CACzF,IAAI,CACL,CAAC;QACF,IAAA,eAAM,EAAC,MAAM,CAAC,IAAI,CAAC,CAAC,eAAe,CAAC,CAAC,CAAC,CAAC;QACvC,IAAA,eAAM,EAAC,CAAC,MAAM,IAAA,eAAI,EAAC,MAAM,CAAC,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,eAAe,CAAC,CAAC,CAAC,CAAC;IACjE,CAAC,EAAE,MAAO,CAAC,CAAC;IAEZ,IAAA,WAAE,EAAC,qEAAqE,EAAE,KAAK,IAAI,EAAE;QACnF,MAAM,aAAa,GAAG,2BAA2B,CAAC;QAClD,MAAM,YAAY,GAAG,MAAM,IAAA,sCAAyB,EAAC,aAAa,CAAC,CAAC;QACpE,YAAY,CAAC,GAAG,CAAC,YAAY,CAAC,CAAC;QAE/B,MAAM,MAAM,GAAG,MAAM,gBAAgB,CAAC;;;gCAGV,IAAI,CAAC,SAAS,CAAC,aAAa,CAAC;;;KAGxD,CAAC,CAAC;QAEH,MAAM,MAAM,GAAG,iBAAiB,CAAsC,MAAM,CAAC,CAAC;QAC9E,IAAA,eAAM,EAAC,MAAM,CAAC,SAAS,CAAC,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC;QAC5C,IAAA,eAAM,EAAC,MAAM,CAAC,IAAI,CAAC,CAAC,eAAe,CAAC,CAAC,CAAC,CAAC;QACvC,IAAA,eAAM,EAAC,CAAC,MAAM,IAAA,eAAI,EAAC,MAAM,CAAC,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,eAAe,CAAC,CAAC,CAAC,CAAC;IACjE,CAAC,EAAE,MAAO,CAAC,CAAC;IAEZ,IAAA,WAAE,EAAC,6CAA6C,EAAE,KAAK,IAAI,EAAE;QAC3D,MAAM,aAAa,GAAG,4BAA4B,CAAC;QACnD,MAAM,YAAY,GAAG,MAAM,IAAA,sCAAyB,EAAC,aAAa,CAAC,CAAC;QACpE,YAAY,CAAC,GAAG,CAAC,YAAY,CAAC,CAAC;QAE/B,MAAM,MAAM,GAAG,MAAM,gBAAgB,CAAC;;UAEhC,IAAI,CAAC,SAAS,CAAC,aAAa,CAAC;;;uCAGA,IAAI,CAAC,SAAS,CAAC,aAAa,CAAC;;KAE/D,CAAC,CAAC;QAEH,MAAM,MAAM,GAAG,iBAAiB,CAAyC,MAAM,CAAC,CAAC;QACjF,IAAA,eAAM,EAAC,MAAM,CAAC,SAAS,CAAC,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC;QAC5C,IAAA,eAAM,EAAC,MAAM,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,wBAAwB,CAAC,CAAC;QACtD,IAAA,eAAM,EAAC,MAAM,IAAA,mBAAU,EAAC,MAAM,CAAC,SAAS,EAAE,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;IAC1E,CAAC,CAAC,CAAC;IAEH,IAAA,WAAE,EAAC,uDAAuD,EAAE,KAAK,IAAI,EAAE;QACrE,MAAM,aAAa,GAAG,yBAAyB,CAAC;QAChD,MAAM,YAAY,GAAG,MAAM,IAAA,sCAAyB,EAAC,aAAa,CAAC,CAAC;QACpE,YAAY,CAAC,GAAG,CAAC,YAAY,CAAC,CAAC;QAE/B,MAAM,MAAM,GAAG,MAAM,gBAAgB,CAAC;0CACA,IAAI,CAAC,SAAS,CAAC,aAAa,CAAC;;KAElE,CAAC,CAAC;QAEH,MAAM,MAAM,GAAG,iBAAiB,CAAwB,MAAM,CAAC,CAAC;QAChE,IAAA,eAAM,EAAC,MAAM,CAAC,SAAS,CAAC,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC;QAC5C,IAAA,eAAM,EAAC,mBAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,yBAAyB,CAAC,CAAC;QACxE,IAAA,eAAM,EAAC,MAAM,IAAA,mBAAU,EAAC,MAAM,CAAC,SAAS,EAAE,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC;IACvE,CAAC,CAAC,CAAC;IAEH,IAAA,WAAE,EAAC,mDAAmD,EAAE,KAAK,IAAI,EAAE;QACjE,MAAM,YAAY,GAAG;YACnB,WAAW;YACX,YAAY;YACZ,kBAAkB;YAClB,mBAAmB;YACnB,gBAAgB;YAChB,cAAc;YACd,eAAe;SAChB,CAAC;QAEF,MAAM,MAAM,GAAG,MAAM,gBAAgB,CAAC;6BACb,IAAI,CAAC,SAAS,CAAC,YAAY,CAAC;;;;;;;;;;;;;;;;;;;;;;;;;;;;KA4BpD,CAAC,CAAC;QAEH,MAAM,OAAO,GAAG,iBAAiB,CAO/B,MAAM,CAAC,CAAC;QAEV,IAAA,eAAM,EAAC,OAAO,CAAC,CAAC,YAAY,CAAC,YAAY,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC;QAEtD,KAAK,MAAM,MAAM,IAAI,OAAO,EAAE,CAAC;YAC7B,IAAA,eAAM,EAAC,MAAM,CAAC,EAAE,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;YAC9B,IAAA,eAAM,EAAC,MAAM,CAAC,OAAO,IAAI,EAAE,CAAC,CAAC,OAAO,CAAC,kBAAkB,CAAC,CAAC;QAC3D,CAAC;IACH,CAAC,CAAC,CAAC;IAEH,IAAA,WAAE,EAAC,wCAAwC,EAAE,KAAK,IAAI,EAAE;QACtD,MAAM,0BAA0B,CAAC;;;;KAIhC,CAAC,CAAC;IACL,CAAC,EAAE,MAAO,CAAC,CAAC;IAEZ,IAAA,WAAE,EAAC,qCAAqC,EAAE,KAAK,IAAI,EAAE;QACnD,MAAM,WAAW,GAAG,6BAA6B,CAAC;QAClD,MAAM,WAAW,GAAG,mBAAI,CAAC,IAAI,CAAC,gCAAmB,EAAE,WAAW,CAAC,CAAC;QAChE,MAAM,UAAU,GAAG,mBAAI,CAAC,IAAI,CAAC,iBAAE,CAAC,MAAM,EAAE,EAAE,oCAAoC,CAAC,CAAC;QAEhF,YAAY,CAAC,GAAG,CAAC,WAAW,CAAC,CAAC;QAC9B,YAAY,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC;QAE7B,MAAM,IAAA,oBAAW,EAAC,UAAU,EAAE,SAAS,EAAE,MAAM,CAAC,CAAC;QACjD,MAAM,IAAA,kBAAO,EAAC,UAAU,EAAE,WAAW,CAAC,CAAC;QAEvC,MAAM,0BAA0B,CAC9B,mBAAmB,IAAI,CAAC,SAAS,CAAC,WAAW,CAAC,mBAAmB,CAClE,CAAC;QACF,MAAM,0BAA0B,CAAC,kBAAkB,IAAI,CAAC,SAAS,CAAC,WAAW,CAAC,IAAI,CAAC,CAAC;IACtF,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC"}

package/dist/services/browser/sandbox/__tests__/sandbox-integration.test.d.ts

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=sandbox-integration.test.d.ts.map

package/dist/services/browser/sandbox/__tests__/sandbox-integration.test.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"sandbox-integration.test.d.ts","sourceRoot":"","sources":["../../../../../src/services/browser/sandbox/__tests__/sandbox-integration.test.ts"],"names":[],"mappings":""}

package/dist/services/browser/sandbox/__tests__/sandbox-integration.test.js

@@ -0,0 +1,110 @@
+"use strict";
+var __importDefault = (this && this.__importDefault) || function (mod) {
+    return (mod && mod.__esModule) ? mod : { "default": mod };
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+const promises_1 = require("node:fs/promises");
+const node_os_1 = __importDefault(require("node:os"));
+const node_path_1 = __importDefault(require("node:path"));
+const vitest_1 = require("vitest");
+const browser_manager_1 = require("../../browser-manager");
+const test_cleanup_1 = require("../../test-cleanup");
+const script_runner_quickjs_1 = require("../script-runner-quickjs");
+const bundle_test_helpers_1 = require("./bundle-test-helpers");
+function createOutput() {
+    const stdout = [];
+    const stderr = [];
+    return {
+        stdout,
+        stderr,
+        sink: {
+            onStdout: (data) => {
+                stdout.push(data);
+            },
+            onStderr: (data) => {
+                stderr.push(data);
+            },
+        },
+    };
+}
+vitest_1.describe.sequential("QuickJS sandbox integration", () => {
+    let browserRootDir = "";
+    let manager;
+    (0, vitest_1.beforeAll)(async () => {
+        await (0, bundle_test_helpers_1.ensureSandboxClientBundle)();
+        browserRootDir = await (0, promises_1.mkdtemp)(node_path_1.default.join(node_os_1.default.tmpdir(), "dev-browser-quickjs-"));
+        manager = new browser_manager_1.BrowserManager(node_path_1.default.join(browserRootDir, "browsers"));
+        await manager.ensureBrowser("default", {
+            headless: true,
+        });
+    }, 180000);
+    (0, vitest_1.afterAll)(async () => {
+        await manager.stopAll();
+        await (0, test_cleanup_1.removeDirectoryWithRetries)(browserRootDir);
+    }, 180000);
+    (0, vitest_1.it)("navigates through QuickJS and logs the page title", async () => {
+        const output = createOutput();
+        await (0, script_runner_quickjs_1.runScript)(`
+        const page = await browser.getPage("nav");
+        await page.goto("https://example.com");
+        console.log(await page.title());
+      `, manager, "default", output.sink, {
+            timeout: 60000,
+        });
+        (0, vitest_1.expect)(output.stdout.join("")).toContain("Example Domain");
+        (0, vitest_1.expect)(output.stderr.join("")).toBe("");
+    }, 120000);
+    (0, vitest_1.it)("supports locator operations", async () => {
+        const output = createOutput();
+        await (0, script_runner_quickjs_1.runScript)(`
+        const page = await browser.getPage("locator");
+        await page.goto("https://example.com");
+        console.log(await page.locator("h1").textContent());
+      `, manager, "default", output.sink, {
+            timeout: 60000,
+        });
+        (0, vitest_1.expect)(output.stdout.join("")).toContain("Example Domain");
+    }, 120000);
+    (0, vitest_1.it)("supports page.evaluate", async () => {
+        const output = createOutput();
+        await (0, script_runner_quickjs_1.runScript)(`
+        const page = await browser.getPage("evaluate");
+        await page.goto("https://example.com");
+        console.log(await page.evaluate(() => document.title));
+      `, manager, "default", output.sink, {
+            timeout: 60000,
+        });
+        (0, vitest_1.expect)(output.stdout.join("")).toContain("Example Domain");
+    }, 120000);
+    (0, vitest_1.it)("reports thrown script errors", async () => {
+        const output = createOutput();
+        await (0, vitest_1.expect)((0, script_runner_quickjs_1.runScript)(`
+          throw new Error("boom");
+        `, manager, "default", output.sink)).rejects.toThrow("boom");
+    });
+    (0, vitest_1.it)("enforces CPU timeouts", async () => {
+        const output = createOutput();
+        await (0, vitest_1.expect)((0, script_runner_quickjs_1.runScript)(`
+          while (true) {}
+        `, manager, "default", output.sink, {
+            timeout: 25,
+        })).rejects.toThrow(/timed out|interrupted/i);
+    }, 120000);
+    (0, vitest_1.it)("enforces wall-clock timeouts for async scripts", async () => {
+        const output = createOutput();
+        await (0, vitest_1.expect)((0, script_runner_quickjs_1.runScript)(`
+          await new Promise((resolve) => setTimeout(resolve, 100));
+        `, manager, "default", output.sink, {
+            timeout: 25,
+        })).rejects.toThrow(/timed out|terminated|interrupted/i);
+    }, 120000);
+    (0, vitest_1.it)("routes console output to stdout", async () => {
+        const output = createOutput();
+        await (0, script_runner_quickjs_1.runScript)(`
+        console.log("sandbox", 42, { ok: true });
+      `, manager, "default", output.sink);
+        (0, vitest_1.expect)(output.stdout.join("")).toContain("sandbox 42 { ok: true }");
+        (0, vitest_1.expect)(output.stderr.join("")).toBe("");
+    });
+});
+//# sourceMappingURL=sandbox-integration.test.js.map

package/dist/services/browser/sandbox/__tests__/sandbox-integration.test.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sandbox-integration.test.js","sourceRoot":"","sources":["../../../../../src/services/browser/sandbox/__tests__/sandbox-integration.test.ts"],"names":[],"mappings":";;;;;AAAA,+CAA2C;AAC3C,sDAAyB;AACzB,0DAA6B;AAE7B,mCAAmE;AAEnE,2DAAuD;AACvD,qDAAgE;AAChE,oEAAqD;AACrD,+DAAkE;AAOlE,SAAS,YAAY;IAMnB,MAAM,MAAM,GAAa,EAAE,CAAC;IAC5B,MAAM,MAAM,GAAa,EAAE,CAAC;IAE5B,OAAO;QACL,MAAM;QACN,MAAM;QACN,IAAI,EAAE;YACJ,QAAQ,EAAE,CAAC,IAAI,EAAE,EAAE;gBACjB,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YACpB,CAAC;YACD,QAAQ,EAAE,CAAC,IAAI,EAAE,EAAE;gBACjB,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YACpB,CAAC;SACF;KACF,CAAC;AACJ,CAAC;AAED,iBAAQ,CAAC,UAAU,CAAC,6BAA6B,EAAE,GAAG,EAAE;IACtD,IAAI,cAAc,GAAG,EAAE,CAAC;IACxB,IAAI,OAAuB,CAAC;IAE5B,IAAA,kBAAS,EAAC,KAAK,IAAI,EAAE;QACnB,MAAM,IAAA,+CAAyB,GAAE,CAAC;QAElC,cAAc,GAAG,MAAM,IAAA,kBAAO,EAAC,mBAAI,CAAC,IAAI,CAAC,iBAAE,CAAC,MAAM,EAAE,EAAE,sBAAsB,CAAC,CAAC,CAAC;QAC/E,OAAO,GAAG,IAAI,gCAAc,CAAC,mBAAI,CAAC,IAAI,CAAC,cAAc,EAAE,UAAU,CAAC,CAAC,CAAC;QACpE,MAAM,OAAO,CAAC,aAAa,CAAC,SAAS,EAAE;YACrC,QAAQ,EAAE,IAAI;SACf,CAAC,CAAC;IACL,CAAC,EAAE,MAAO,CAAC,CAAC;IAEZ,IAAA,iBAAQ,EAAC,KAAK,IAAI,EAAE;QAClB,MAAM,OAAO,CAAC,OAAO,EAAE,CAAC;QACxB,MAAM,IAAA,yCAA0B,EAAC,cAAc,CAAC,CAAC;IACnD,CAAC,EAAE,MAAO,CAAC,CAAC;IAEZ,IAAA,WAAE,EAAC,mDAAmD,EAAE,KAAK,IAAI,EAAE;QACjE,MAAM,MAAM,GAAG,YAAY,EAAE,CAAC;QAE9B,MAAM,IAAA,iCAAS,EACb;;;;OAIC,EACD,OAAO,EACP,SAAS,EACT,MAAM,CAAC,IAAI,EACX;YACE,OAAO,EAAE,KAAM;SAChB,CACF,CAAC;QAEF,IAAA,eAAM,EAAC,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC,gBAAgB,CAAC,CAAC;QAC3D,IAAA,eAAM,EAAC,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IAC1C,CAAC,EAAE,MAAO,CAAC,CAAC;IAEZ,IAAA,WAAE,EAAC,6BAA6B,EAAE,KAAK,IAAI,EAAE;QAC3C,MAAM,MAAM,GAAG,YAAY,EAAE,CAAC;QAE9B,MAAM,IAAA,iCAAS,EACb;;;;OAIC,EACD,OAAO,EACP,SAAS,EACT,MAAM,CAAC,IAAI,EACX;YACE,OAAO,EAAE,KAAM;SAChB,CACF,CAAC;QAEF,IAAA,eAAM,EAAC,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC,gBAAgB,CAAC,CAAC;IAC7D,CAAC,EAAE,MAAO,CAAC,CAAC;IAEZ,IAAA,WAAE,EAAC,wBAAwB,EAAE,KAAK,IAAI,EAAE;QACtC,MAAM,MAAM,GAAG,YAAY,EAAE,CAAC;QAE9B,MAAM,IAAA,iCAAS,EACb;;;;OAIC,EACD,OAAO,EACP,SAAS,EACT,MAAM,CAAC,IAAI,EACX;YACE,OAAO,EAAE,KAAM;SAChB,CACF,CAAC;QAEF,IAAA,eAAM,EAAC,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC,gBAAgB,CAAC,CAAC;IAC7D,CAAC,EAAE,MAAO,CAAC,CAAC;IAEZ,IAAA,WAAE,EAAC,8BAA8B,EAAE,KAAK,IAAI,EAAE;QAC5C,MAAM,MAAM,GAAG,YAAY,EAAE,CAAC;QAE9B,MAAM,IAAA,eAAM,EACV,IAAA,iCAAS,EACP;;SAEC,EACD,OAAO,EACP,SAAS,EACT,MAAM,CAAC,IAAI,CACZ,CACF,CAAC,OAAO,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;IAC5B,CAAC,CAAC,CAAC;IAEH,IAAA,WAAE,EAAC,uBAAuB,EAAE,KAAK,IAAI,EAAE;QACrC,MAAM,MAAM,GAAG,YAAY,EAAE,CAAC;QAE9B,MAAM,IAAA,eAAM,EACV,IAAA,iCAAS,EACP;;SAEC,EACD,OAAO,EACP,SAAS,EACT,MAAM,CAAC,IAAI,EACX;YACE,OAAO,EAAE,EAAE;SACZ,CACF,CACF,CAAC,OAAO,CAAC,OAAO,CAAC,wBAAwB,CAAC,CAAC;IAC9C,CAAC,EAAE,MAAO,CAAC,CAAC;IAEZ,IAAA,WAAE,EAAC,gDAAgD,EAAE,KAAK,IAAI,EAAE;QAC9D,MAAM,MAAM,GAAG,YAAY,EAAE,CAAC;QAE9B,MAAM,IAAA,eAAM,EACV,IAAA,iCAAS,EACP;;SAEC,EACD,OAAO,EACP,SAAS,EACT,MAAM,CAAC,IAAI,EACX;YACE,OAAO,EAAE,EAAE;SACZ,CACF,CACF,CAAC,OAAO,CAAC,OAAO,CAAC,mCAAmC,CAAC,CAAC;IACzD,CAAC,EAAE,MAAO,CAAC,CAAC;IAEZ,IAAA,WAAE,EAAC,iCAAiC,EAAE,KAAK,IAAI,EAAE;QAC/C,MAAM,MAAM,GAAG,YAAY,EAAE,CAAC;QAE9B,MAAM,IAAA,iCAAS,EACb;;OAEC,EACD,OAAO,EACP,SAAS,EACT,MAAM,CAAC,IAAI,CACZ,CAAC;QAEF,IAAA,eAAM,EAAC,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC,yBAAyB,CAAC,CAAC;QACpE,IAAA,eAAM,EAAC,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IAC1C,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC"}

package/dist/services/browser/sandbox/__tests__/sandbox-security.test.d.ts

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=sandbox-security.test.d.ts.map

package/dist/services/browser/sandbox/__tests__/sandbox-security.test.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"sandbox-security.test.d.ts","sourceRoot":"","sources":["../../../../../src/services/browser/sandbox/__tests__/sandbox-security.test.ts"],"names":[],"mappings":""}