isol8 0.8.1 → 0.8.2

package/README.md

@@ -15,6 +15,7 @@ Secure code execution engine for AI agents. Run untrusted Python, Node.js, Bun,
 - **Fast** — warm container pool for sub-100ms execution latency
 - **Security first** — read-only rootfs, `no-new-privileges`, PID/memory/CPU limits
 - **Network control** — `none` (default), `host`, or `filtered` (HTTP/HTTPS proxy with regex whitelist/blacklist)
+- **Secure File I/O** — streaming file content avoids process argument leaks
 - **File I/O** — upload files into and download files from sandboxes
 -   **Runtime packages** — install pip/npm/bun packages on-the-fly (`--install`)
 -   **Modern Node.js** — defaults to ESM (`.mjs`), supports CommonJS (`.cjs`)

package/dist/cli.js

@@ -6316,12 +6316,23 @@ var require_bcrypt_pbkdf = __commonJS((exports, module) => {
   };
 });
 
+// node_modules/cpu-features/build/Release/cpufeatures.node
+var require_cpufeatures = __commonJS((exports, module) => {
+  module.exports = __require("./cpufeatures-tjjrgpt7.node");
+});
+
+// node_modules/cpu-features/lib/index.js
+var require_lib2 = __commonJS((exports, module) => {
+  var binding = require_cpufeatures();
+  module.exports = binding.getCPUInfo;
+});
+
 // node_modules/ssh2/lib/protocol/constants.js
 var require_constants = __commonJS((exports, module) => {
   var crypto = __require("crypto");
   var cpuInfo;
   try {
-    cpuInfo = (()=>{throw new Error("Cannot require module "+"cpu-features");})()();
+    cpuInfo = require_lib2()();
   } catch {}
   var { bindingAvailable, CIPHER_INFO, MAC_INFO } = require_crypto();
   var eddsaSupported = (() => {
@@ -20964,7 +20975,7 @@ var require_keygen = __commonJS((exports, module) => {
 });
 
 // node_modules/ssh2/lib/index.js
-var require_lib2 = __commonJS((exports, module) => {
+var require_lib3 = __commonJS((exports, module) => {
   var {
     AgentProtocol,
     BaseAgent,
@@ -21010,7 +21021,7 @@ var require_lib2 = __commonJS((exports, module) => {
 
 // node_modules/docker-modem/lib/ssh.js
 var require_ssh = __commonJS((exports, module) => {
-  var Client = require_lib2().Client;
+  var Client = require_lib3().Client;
   var http = __require("http");
   module.exports = function(opt) {
     var conn = new Client;
@@ -55272,25 +55283,31 @@ var exports_docker = {};
 __export(exports_docker, {
   DockerIsol8: () => DockerIsol8
 });
+import { spawn } from "node:child_process";
 import { randomUUID } from "node:crypto";
 import { existsSync as existsSync2, readFileSync as readFileSync2 } from "node:fs";
 import { PassThrough } from "node:stream";
 async function writeFileViaExec(container, filePath, content) {
   const data = typeof content === "string" ? Buffer.from(content, "utf-8") : content;
-  const b64 = data.toString("base64");
-  const exec = await container.exec({
-    Cmd: ["sh", "-c", `printf '%s' '${b64}' | base64 -d > ${filePath}`],
-    User: "sandbox"
+  return new Promise((resolve2, reject) => {
+    const child = spawn("docker", ["exec", "-i", "-u", "sandbox", container.id, "sh", "-c", `cat > ${filePath}`], {
+      stdio: ["pipe", "ignore", "pipe"]
+    });
+    child.on("error", (err) => {
+      reject(new Error(`Failed to spawn docker exec: ${err.message}`));
+    });
+    let stderr = "";
+    child.stderr.on("data", (chunk) => stderr += chunk.toString());
+    child.stdin.write(data);
+    child.stdin.end();
+    child.on("close", (code) => {
+      if (code !== 0) {
+        reject(new Error(`Failed to write file ${filePath}: ${stderr} (exit code ${code})`));
+      } else {
+        resolve2();
+      }
+    });
   });
-  await exec.start({ Detach: true });
-  let info2 = await exec.inspect();
-  while (info2.Running) {
-    await new Promise((r) => setTimeout(r, 50));
-    info2 = await exec.inspect();
-  }
-  if (info2.ExitCode !== 0) {
-    throw new Error(`Failed to write file ${filePath} in container (exit code ${info2.ExitCode})`);
-  }
 }
 async function readFileViaExec(container, filePath) {
   const exec = await container.exec({
@@ -55958,11 +55975,16 @@ class DockerIsol8 {
       let stderr = "";
       let truncated = false;
       let settled = false;
+      let stdoutEnded = false;
+      let stderrEnded = false;
       const timer = setTimeout(() => {
         if (settled) {
           return;
         }
         settled = true;
+        if (stream.destroy) {
+          stream.destroy();
+        }
         resolve2({ stdout, stderr: `${stderr}
 --- EXECUTION TIMED OUT ---`, truncated });
       }, timeoutMs);
@@ -55985,13 +56007,23 @@ class DockerIsol8 {
           truncated = true;
         }
       });
-      stream.on("end", () => {
+      const checkDone = () => {
         if (settled) {
           return;
         }
-        settled = true;
-        clearTimeout(timer);
-        resolve2({ stdout, stderr, truncated });
+        if (stdoutEnded && stderrEnded) {
+          settled = true;
+          clearTimeout(timer);
+          resolve2({ stdout, stderr, truncated });
+        }
+      };
+      stdoutStream.on("end", () => {
+        stdoutEnded = true;
+        checkDone();
+      });
+      stderrStream.on("end", () => {
+        stderrEnded = true;
+        checkDone();
       });
       stream.on("error", (err) => {
         if (settled) {
@@ -56001,6 +56033,18 @@ class DockerIsol8 {
         clearTimeout(timer);
         reject(err);
       });
+      stream.on("end", () => {
+        if (settled) {
+          return;
+        }
+        setTimeout(() => {
+          if (!settled) {
+            stdoutEnded = true;
+            stderrEnded = true;
+            checkDone();
+          }
+        }, 100);
+      });
     });
   }
   postProcessOutput(output, _truncated) {
@@ -56045,7 +56089,7 @@ var package_default;
 var init_package = __esm(() => {
   package_default = {
     name: "isol8",
-    version: "0.8.0",
+    version: "0.8.1",
     description: "Secure code execution engine for AI agents",
     author: "Illusion47586",
     license: "MIT",
@@ -62052,4 +62096,4 @@ if (!process.argv.slice(2).length) {
 }
 program2.parse();
 
-//# debugId=F5B0FBC3FF234CB364756E2164756E21
+//# debugId=2B71A68DA2ABDB9664756E2164756E21

package/dist/index.js

@@ -451,26 +451,32 @@ var exports_docker = {};
 __export(exports_docker, {
   DockerIsol8: () => DockerIsol8
 });
+import { spawn } from "node:child_process";
 import { randomUUID } from "node:crypto";
 import { existsSync as existsSync2, readFileSync as readFileSync2 } from "node:fs";
 import { PassThrough } from "node:stream";
 import Docker from "dockerode";
 async function writeFileViaExec(container, filePath, content) {
   const data = typeof content === "string" ? Buffer.from(content, "utf-8") : content;
-  const b64 = data.toString("base64");
-  const exec = await container.exec({
-    Cmd: ["sh", "-c", `printf '%s' '${b64}' | base64 -d > ${filePath}`],
-    User: "sandbox"
+  return new Promise((resolve2, reject) => {
+    const child = spawn("docker", ["exec", "-i", "-u", "sandbox", container.id, "sh", "-c", `cat > ${filePath}`], {
+      stdio: ["pipe", "ignore", "pipe"]
+    });
+    child.on("error", (err) => {
+      reject(new Error(`Failed to spawn docker exec: ${err.message}`));
+    });
+    let stderr = "";
+    child.stderr.on("data", (chunk) => stderr += chunk.toString());
+    child.stdin.write(data);
+    child.stdin.end();
+    child.on("close", (code) => {
+      if (code !== 0) {
+        reject(new Error(`Failed to write file ${filePath}: ${stderr} (exit code ${code})`));
+      } else {
+        resolve2();
+      }
+    });
   });
-  await exec.start({ Detach: true });
-  let info = await exec.inspect();
-  while (info.Running) {
-    await new Promise((r) => setTimeout(r, 50));
-    info = await exec.inspect();
-  }
-  if (info.ExitCode !== 0) {
-    throw new Error(`Failed to write file ${filePath} in container (exit code ${info.ExitCode})`);
-  }
 }
 async function readFileViaExec(container, filePath) {
   const exec = await container.exec({
@@ -1138,11 +1144,16 @@ class DockerIsol8 {
       let stderr = "";
       let truncated = false;
       let settled = false;
+      let stdoutEnded = false;
+      let stderrEnded = false;
       const timer = setTimeout(() => {
         if (settled) {
           return;
         }
         settled = true;
+        if (stream.destroy) {
+          stream.destroy();
+        }
         resolve2({ stdout, stderr: `${stderr}
 --- EXECUTION TIMED OUT ---`, truncated });
       }, timeoutMs);
@@ -1165,13 +1176,23 @@ class DockerIsol8 {
           truncated = true;
         }
       });
-      stream.on("end", () => {
+      const checkDone = () => {
         if (settled) {
           return;
         }
-        settled = true;
-        clearTimeout(timer);
-        resolve2({ stdout, stderr, truncated });
+        if (stdoutEnded && stderrEnded) {
+          settled = true;
+          clearTimeout(timer);
+          resolve2({ stdout, stderr, truncated });
+        }
+      };
+      stdoutStream.on("end", () => {
+        stdoutEnded = true;
+        checkDone();
+      });
+      stderrStream.on("end", () => {
+        stderrEnded = true;
+        checkDone();
       });
       stream.on("error", (err) => {
         if (settled) {
@@ -1181,6 +1202,18 @@ class DockerIsol8 {
         clearTimeout(timer);
         reject(err);
       });
+      stream.on("end", () => {
+        if (settled) {
+          return;
+        }
+        setTimeout(() => {
+          if (!settled) {
+            stdoutEnded = true;
+            stderrEnded = true;
+            checkDone();
+          }
+        }, 100);
+      });
     });
   }
   postProcessOutput(output, _truncated) {
@@ -1424,7 +1457,7 @@ init_logger();
 // package.json
 var package_default = {
   name: "isol8",
-  version: "0.8.0",
+  version: "0.8.1",
   description: "Secure code execution engine for AI agents",
   author: "Illusion47586",
   license: "MIT",
@@ -1759,4 +1792,4 @@ export {
   BunAdapter
 };
 
-//# debugId=90624257FBE4C46A64756E2164756E21
+//# debugId=3E8DBF80E2D1D77264756E2164756E21

package/dist/src/engine/docker.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"docker.d.ts","sourceRoot":"","sources":["../../../src/engine/docker.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAKH,OAAO,MAAM,MAAM,WAAW,CAAC;AAG/B,OAAO,KAAK,EACV,gBAAgB,EAChB,eAAe,EACf,WAAW,EAEX,YAAY,EAIZ,WAAW,EACZ,MAAM,UAAU,CAAC;AAqSlB,2HAA2H;AAC3H,MAAM,WAAW,kBAAmB,SAAQ,YAAY;IACtD,oFAAoF;IACpF,MAAM,CAAC,EAAE,MAAM,CAAC;CACjB;AAED;;;;;;;;;;;;;;GAcG;AACH,qBAAa,WAAY,YAAW,WAAW;IAC7C,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAS;IAChC,OAAO,CAAC,QAAQ,CAAC,IAAI,CAAY;IACjC,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAc;IACtC,OAAO,CAAC,QAAQ,CAAC,aAAa,CAAC,CAAsB;IACrD,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAAS;IAClC,OAAO,CAAC,QAAQ,CAAC,WAAW,CAAS;IACrC,OAAO,CAAC,QAAQ,CAAC,SAAS,CAAS;IACnC,OAAO,CAAC,QAAQ,CAAC,cAAc,CAAU;IACzC,OAAO,CAAC,QAAQ,CAAC,aAAa,CAAS;IACvC,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAyB;IACjD,OAAO,CAAC,QAAQ,CAAC,gBAAgB,CAAS;IAC1C,OAAO,CAAC,QAAQ,CAAC,aAAa,CAAC,CAAS;IACxC,OAAO,CAAC,QAAQ,CAAC,SAAS,CAAY;IACtC,OAAO,CAAC,QAAQ,CAAC,WAAW,CAAS;IACrC,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAS;IAEjC,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAAiB;IAC1C,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAU;IAElC,OAAO,CAAC,SAAS,CAAiC;IAClD,OAAO,CAAC,iBAAiB,CAA+B;IACxD,OAAO,CAAC,IAAI,CAA8B;IAE1C;;;OAGG;gBACS,OAAO,GAAE,kBAAuB,EAAE,aAAa,SAAK;IAwBhE;;;OAGG;IACG,KAAK,IAAI,OAAO,CAAC,IAAI,CAAC;IAK5B,kFAAkF;IAC5E,IAAI,IAAI,OAAO,CAAC,IAAI,CAAC;IAuB3B;;;OAGG;IACG,OAAO,CAAC,GAAG,EAAE,gBAAgB,GAAG,OAAO,CAAC,eAAe,CAAC;IAW9D;;;;;;;OAOG;IACG,OAAO,CAAC,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,GAAG,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAYpE;;;;;;OAMG;IACG,OAAO,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC;IAmB5C,6GAA6G;IAC7G,IAAI,WAAW,IAAI,MAAM,GAAG,IAAI,CAE/B;IAED;;;OAGG;IACI,aAAa,CAAC,GAAG,EAAE,gBAAgB,GAAG,aAAa,CAAC,WAAW,CAAC;YAsFzD,YAAY;YAcZ,gBAAgB;YA0GhB,iBAAiB;YA8FjB,aAAa;YAkBb,oBAAoB;YASpB,wBAAwB;IA4BtC,OAAO,CAAC,UAAU;IAIlB,OAAO,CAAC,eAAe;IA2BvB,OAAO,CAAC,iBAAiB;IA+BzB,OAAO,CAAC,yBAAyB;IAyBjC,OAAO,CAAC,QAAQ;YAwCD,gBAAgB;YA8EjB,iBAAiB;IA8D/B,OAAO,CAAC,iBAAiB;IAYzB;;;;;;;;;;;;;;;;;;;;OAoBG;WACU,OAAO,CAClB,MAAM,CAAC,EAAE,MAAM,GACd,OAAO,CAAC;QAAE,OAAO,EAAE,MAAM,CAAC;QAAC,MAAM,EAAE,MAAM,CAAC;QAAC,MAAM,EAAE,MAAM,EAAE,CAAA;KAAE,CAAC;CA2BlE"}
+{"version":3,"file":"docker.d.ts","sourceRoot":"","sources":["../../../src/engine/docker.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAMH,OAAO,MAAM,MAAM,WAAW,CAAC;AAG/B,OAAO,KAAK,EACV,gBAAgB,EAChB,eAAe,EACf,WAAW,EAEX,YAAY,EAIZ,WAAW,EACZ,MAAM,UAAU,CAAC;AAiTlB,2HAA2H;AAC3H,MAAM,WAAW,kBAAmB,SAAQ,YAAY;IACtD,oFAAoF;IACpF,MAAM,CAAC,EAAE,MAAM,CAAC;CACjB;AAED;;;;;;;;;;;;;;GAcG;AACH,qBAAa,WAAY,YAAW,WAAW;IAC7C,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAS;IAChC,OAAO,CAAC,QAAQ,CAAC,IAAI,CAAY;IACjC,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAc;IACtC,OAAO,CAAC,QAAQ,CAAC,aAAa,CAAC,CAAsB;IACrD,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAAS;IAClC,OAAO,CAAC,QAAQ,CAAC,WAAW,CAAS;IACrC,OAAO,CAAC,QAAQ,CAAC,SAAS,CAAS;IACnC,OAAO,CAAC,QAAQ,CAAC,cAAc,CAAU;IACzC,OAAO,CAAC,QAAQ,CAAC,aAAa,CAAS;IACvC,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAyB;IACjD,OAAO,CAAC,QAAQ,CAAC,gBAAgB,CAAS;IAC1C,OAAO,CAAC,QAAQ,CAAC,aAAa,CAAC,CAAS;IACxC,OAAO,CAAC,QAAQ,CAAC,SAAS,CAAY;IACtC,OAAO,CAAC,QAAQ,CAAC,WAAW,CAAS;IACrC,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAS;IAEjC,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAAiB;IAC1C,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAU;IAElC,OAAO,CAAC,SAAS,CAAiC;IAClD,OAAO,CAAC,iBAAiB,CAA+B;IACxD,OAAO,CAAC,IAAI,CAA8B;IAE1C;;;OAGG;gBACS,OAAO,GAAE,kBAAuB,EAAE,aAAa,SAAK;IAwBhE;;;OAGG;IACG,KAAK,IAAI,OAAO,CAAC,IAAI,CAAC;IAK5B,kFAAkF;IAC5E,IAAI,IAAI,OAAO,CAAC,IAAI,CAAC;IAuB3B;;;OAGG;IACG,OAAO,CAAC,GAAG,EAAE,gBAAgB,GAAG,OAAO,CAAC,eAAe,CAAC;IAW9D;;;;;;;OAOG;IACG,OAAO,CAAC,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,GAAG,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAYpE;;;;;;OAMG;IACG,OAAO,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC;IAmB5C,6GAA6G;IAC7G,IAAI,WAAW,IAAI,MAAM,GAAG,IAAI,CAE/B;IAED;;;OAGG;IACI,aAAa,CAAC,GAAG,EAAE,gBAAgB,GAAG,aAAa,CAAC,WAAW,CAAC;YAsFzD,YAAY;YAcZ,gBAAgB;YA0GhB,iBAAiB;YA8FjB,aAAa;YAkBb,oBAAoB;YASpB,wBAAwB;IA4BtC,OAAO,CAAC,UAAU;IAIlB,OAAO,CAAC,eAAe;IA2BvB,OAAO,CAAC,iBAAiB;IA+BzB,OAAO,CAAC,yBAAyB;IAyBjC,OAAO,CAAC,QAAQ;YAwCD,gBAAgB;YA8EjB,iBAAiB;IAiG/B,OAAO,CAAC,iBAAiB;IAYzB;;;;;;;;;;;;;;;;;;;;OAoBG;WACU,OAAO,CAClB,MAAM,CAAC,EAAE,MAAM,GACd,OAAO,CAAC;QAAE,OAAO,EAAE,MAAM,CAAC;QAAC,MAAM,EAAE,MAAM,CAAC;QAAC,MAAM,EAAE,MAAM,EAAE,CAAA;KAAE,CAAC;CA2BlE"}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "isol8",
-  "version": "0.8.1",
+  "version": "0.8.2",
   "description": "Secure code execution engine for AI agents",
   "author": "Illusion47586",
   "license": "MIT",