isol8 0.8.1 → 0.8.3

package/README.md

@@ -15,6 +15,7 @@ Secure code execution engine for AI agents. Run untrusted Python, Node.js, Bun,
 - **Fast** — warm container pool for sub-100ms execution latency
 - **Security first** — read-only rootfs, `no-new-privileges`, PID/memory/CPU limits
 - **Network control** — `none` (default), `host`, or `filtered` (HTTP/HTTPS proxy with regex whitelist/blacklist)
+- **Secure File I/O** — streaming file content avoids process argument leaks
 - **File I/O** — upload files into and download files from sandboxes
 -   **Runtime packages** — install pip/npm/bun packages on-the-fly (`--install`)
 -   **Modern Node.js** — defaults to ESM (`.mjs`), supports CommonJS (`.cjs`)

package/dist/cli.js

@@ -6316,12 +6316,23 @@ var require_bcrypt_pbkdf = __commonJS((exports, module) => {
   };
 });
 
+// node_modules/cpu-features/build/Release/cpufeatures.node
+var require_cpufeatures = __commonJS((exports, module) => {
+  module.exports = __require("./cpufeatures-tjjrgpt7.node");
+});
+
+// node_modules/cpu-features/lib/index.js
+var require_lib2 = __commonJS((exports, module) => {
+  var binding = require_cpufeatures();
+  module.exports = binding.getCPUInfo;
+});
+
 // node_modules/ssh2/lib/protocol/constants.js
 var require_constants = __commonJS((exports, module) => {
   var crypto = __require("crypto");
   var cpuInfo;
   try {
-    cpuInfo = (()=>{throw new Error("Cannot require module "+"cpu-features");})()();
+    cpuInfo = require_lib2()();
   } catch {}
   var { bindingAvailable, CIPHER_INFO, MAC_INFO } = require_crypto();
   var eddsaSupported = (() => {
@@ -20964,7 +20975,7 @@ var require_keygen = __commonJS((exports, module) => {
 });
 
 // node_modules/ssh2/lib/index.js
-var require_lib2 = __commonJS((exports, module) => {
+var require_lib3 = __commonJS((exports, module) => {
   var {
     AgentProtocol,
     BaseAgent,
@@ -21010,7 +21021,7 @@ var require_lib2 = __commonJS((exports, module) => {
 
 // node_modules/docker-modem/lib/ssh.js
 var require_ssh = __commonJS((exports, module) => {
-  var Client = require_lib2().Client;
+  var Client = require_lib3().Client;
   var http = __require("http");
   module.exports = function(opt) {
     var conn = new Client;
@@ -55172,6 +55183,7 @@ var init_pool = __esm(() => {
 // src/engine/utils.ts
 var exports_utils = {};
 __export(exports_utils, {
+  validatePackageName: () => validatePackageName,
   truncateOutput: () => truncateOutput,
   parseMemoryLimit: () => parseMemoryLimit,
   maskSecrets: () => maskSecrets,
@@ -55266,31 +55278,43 @@ function extractFromTar(tarBuffer, targetPath) {
   }
   throw new Error(`File "${targetPath}" not found in tar archive`);
 }
+function validatePackageName(name) {
+  if (!/^[@a-zA-Z0-9_./\-=]+$/.test(name)) {
+    throw new Error(`Invalid package name: "${name}". Only alphanumeric, -, _, ., /, @, and = are allowed.`);
+  }
+  return name;
+}
 
 // src/engine/docker.ts
 var exports_docker = {};
 __export(exports_docker, {
   DockerIsol8: () => DockerIsol8
 });
+import { spawn } from "node:child_process";
 import { randomUUID } from "node:crypto";
 import { existsSync as existsSync2, readFileSync as readFileSync2 } from "node:fs";
 import { PassThrough } from "node:stream";
 async function writeFileViaExec(container, filePath, content) {
   const data = typeof content === "string" ? Buffer.from(content, "utf-8") : content;
-  const b64 = data.toString("base64");
-  const exec = await container.exec({
-    Cmd: ["sh", "-c", `printf '%s' '${b64}' | base64 -d > ${filePath}`],
-    User: "sandbox"
+  return new Promise((resolve2, reject) => {
+    const child = spawn("docker", ["exec", "-i", "-u", "sandbox", container.id, "sh", "-c", `cat > ${filePath}`], {
+      stdio: ["pipe", "ignore", "pipe"]
+    });
+    child.on("error", (err) => {
+      reject(new Error(`Failed to spawn docker exec: ${err.message}`));
+    });
+    let stderr = "";
+    child.stderr.on("data", (chunk) => stderr += chunk.toString());
+    child.stdin.write(data);
+    child.stdin.end();
+    child.on("close", (code) => {
+      if (code !== 0) {
+        reject(new Error(`Failed to write file ${filePath}: ${stderr} (exit code ${code})`));
+      } else {
+        resolve2();
+      }
+    });
   });
-  await exec.start({ Detach: true });
-  let info2 = await exec.inspect();
-  while (info2.Running) {
-    await new Promise((r) => setTimeout(r, 50));
-    info2 = await exec.inspect();
-  }
-  if (info2.ExitCode !== 0) {
-    throw new Error(`Failed to write file ${filePath} in container (exit code ${info2.ExitCode})`);
-  }
 }
 async function readFileViaExec(container, filePath) {
   const exec = await container.exec({
@@ -55958,11 +55982,16 @@ class DockerIsol8 {
       let stderr = "";
       let truncated = false;
       let settled = false;
+      let stdoutEnded = false;
+      let stderrEnded = false;
       const timer = setTimeout(() => {
         if (settled) {
           return;
         }
         settled = true;
+        if (stream.destroy) {
+          stream.destroy();
+        }
         resolve2({ stdout, stderr: `${stderr}
 --- EXECUTION TIMED OUT ---`, truncated });
       }, timeoutMs);
@@ -55985,13 +56014,23 @@ class DockerIsol8 {
           truncated = true;
         }
       });
-      stream.on("end", () => {
+      const checkDone = () => {
         if (settled) {
           return;
         }
-        settled = true;
-        clearTimeout(timer);
-        resolve2({ stdout, stderr, truncated });
+        if (stdoutEnded && stderrEnded) {
+          settled = true;
+          clearTimeout(timer);
+          resolve2({ stdout, stderr, truncated });
+        }
+      };
+      stdoutStream.on("end", () => {
+        stdoutEnded = true;
+        checkDone();
+      });
+      stderrStream.on("end", () => {
+        stderrEnded = true;
+        checkDone();
       });
       stream.on("error", (err) => {
         if (settled) {
@@ -56001,6 +56040,18 @@ class DockerIsol8 {
         clearTimeout(timer);
         reject(err);
       });
+      stream.on("end", () => {
+        if (settled) {
+          return;
+        }
+        setTimeout(() => {
+          if (!settled) {
+            stdoutEnded = true;
+            stderrEnded = true;
+            checkDone();
+          }
+        }, 100);
+      });
     });
   }
   postProcessOutput(output, _truncated) {
@@ -56045,7 +56096,7 @@ var package_default;
 var init_package = __esm(() => {
   package_default = {
     name: "isol8",
-    version: "0.8.0",
+    version: "0.8.2",
     description: "Secure code execution engine for AI agents",
     author: "Illusion47586",
     license: "MIT",
@@ -61458,8 +61509,9 @@ async function buildCustomImage(docker, runtime, packages, onProgress) {
   const dockerfileContent = `FROM isol8:${runtime}
 ${installCmd}
 `;
-  const { createTarBuffer: createTarBuffer2 } = await Promise.resolve().then(() => exports_utils);
+  const { createTarBuffer: createTarBuffer2, validatePackageName: validatePackageName2 } = await Promise.resolve().then(() => exports_utils);
   const { Readable } = await import("node:stream");
+  packages.forEach(validatePackageName2);
   const tarBuffer = createTarBuffer2("Dockerfile", dockerfileContent);
   const stream = await docker.buildImage(Readable.from(tarBuffer), {
     t: tag,
@@ -62052,4 +62104,4 @@ if (!process.argv.slice(2).length) {
 }
 program2.parse();
 
-//# debugId=F5B0FBC3FF234CB364756E2164756E21
+//# debugId=6B900589B43971DE64756E2164756E21

package/dist/index.js

@@ -451,26 +451,32 @@ var exports_docker = {};
 __export(exports_docker, {
   DockerIsol8: () => DockerIsol8
 });
+import { spawn } from "node:child_process";
 import { randomUUID } from "node:crypto";
 import { existsSync as existsSync2, readFileSync as readFileSync2 } from "node:fs";
 import { PassThrough } from "node:stream";
 import Docker from "dockerode";
 async function writeFileViaExec(container, filePath, content) {
   const data = typeof content === "string" ? Buffer.from(content, "utf-8") : content;
-  const b64 = data.toString("base64");
-  const exec = await container.exec({
-    Cmd: ["sh", "-c", `printf '%s' '${b64}' | base64 -d > ${filePath}`],
-    User: "sandbox"
+  return new Promise((resolve2, reject) => {
+    const child = spawn("docker", ["exec", "-i", "-u", "sandbox", container.id, "sh", "-c", `cat > ${filePath}`], {
+      stdio: ["pipe", "ignore", "pipe"]
+    });
+    child.on("error", (err) => {
+      reject(new Error(`Failed to spawn docker exec: ${err.message}`));
+    });
+    let stderr = "";
+    child.stderr.on("data", (chunk) => stderr += chunk.toString());
+    child.stdin.write(data);
+    child.stdin.end();
+    child.on("close", (code) => {
+      if (code !== 0) {
+        reject(new Error(`Failed to write file ${filePath}: ${stderr} (exit code ${code})`));
+      } else {
+        resolve2();
+      }
+    });
   });
-  await exec.start({ Detach: true });
-  let info = await exec.inspect();
-  while (info.Running) {
-    await new Promise((r) => setTimeout(r, 50));
-    info = await exec.inspect();
-  }
-  if (info.ExitCode !== 0) {
-    throw new Error(`Failed to write file ${filePath} in container (exit code ${info.ExitCode})`);
-  }
 }
 async function readFileViaExec(container, filePath) {
   const exec = await container.exec({
@@ -1138,11 +1144,16 @@ class DockerIsol8 {
       let stderr = "";
       let truncated = false;
       let settled = false;
+      let stdoutEnded = false;
+      let stderrEnded = false;
       const timer = setTimeout(() => {
         if (settled) {
           return;
         }
         settled = true;
+        if (stream.destroy) {
+          stream.destroy();
+        }
         resolve2({ stdout, stderr: `${stderr}
 --- EXECUTION TIMED OUT ---`, truncated });
       }, timeoutMs);
@@ -1165,13 +1176,23 @@ class DockerIsol8 {
           truncated = true;
         }
       });
-      stream.on("end", () => {
+      const checkDone = () => {
         if (settled) {
           return;
         }
-        settled = true;
-        clearTimeout(timer);
-        resolve2({ stdout, stderr, truncated });
+        if (stdoutEnded && stderrEnded) {
+          settled = true;
+          clearTimeout(timer);
+          resolve2({ stdout, stderr, truncated });
+        }
+      };
+      stdoutStream.on("end", () => {
+        stdoutEnded = true;
+        checkDone();
+      });
+      stderrStream.on("end", () => {
+        stderrEnded = true;
+        checkDone();
       });
       stream.on("error", (err) => {
         if (settled) {
@@ -1181,6 +1202,18 @@ class DockerIsol8 {
         clearTimeout(timer);
         reject(err);
       });
+      stream.on("end", () => {
+        if (settled) {
+          return;
+        }
+        setTimeout(() => {
+          if (!settled) {
+            stdoutEnded = true;
+            stderrEnded = true;
+            checkDone();
+          }
+        }, 100);
+      });
     });
   }
   postProcessOutput(output, _truncated) {
@@ -1424,7 +1457,7 @@ init_logger();
 // package.json
 var package_default = {
   name: "isol8",
-  version: "0.8.0",
+  version: "0.8.2",
   description: "Secure code execution engine for AI agents",
   author: "Illusion47586",
   license: "MIT",
@@ -1759,4 +1792,4 @@ export {
   BunAdapter
 };
 
-//# debugId=90624257FBE4C46A64756E2164756E21
+//# debugId=D81C2764EAFDC14264756E2164756E21

package/dist/src/engine/docker.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"docker.d.ts","sourceRoot":"","sources":["../../../src/engine/docker.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAKH,OAAO,MAAM,MAAM,WAAW,CAAC;AAG/B,OAAO,KAAK,EACV,gBAAgB,EAChB,eAAe,EACf,WAAW,EAEX,YAAY,EAIZ,WAAW,EACZ,MAAM,UAAU,CAAC;AAqSlB,2HAA2H;AAC3H,MAAM,WAAW,kBAAmB,SAAQ,YAAY;IACtD,oFAAoF;IACpF,MAAM,CAAC,EAAE,MAAM,CAAC;CACjB;AAED;;;;;;;;;;;;;;GAcG;AACH,qBAAa,WAAY,YAAW,WAAW;IAC7C,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAS;IAChC,OAAO,CAAC,QAAQ,CAAC,IAAI,CAAY;IACjC,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAc;IACtC,OAAO,CAAC,QAAQ,CAAC,aAAa,CAAC,CAAsB;IACrD,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAAS;IAClC,OAAO,CAAC,QAAQ,CAAC,WAAW,CAAS;IACrC,OAAO,CAAC,QAAQ,CAAC,SAAS,CAAS;IACnC,OAAO,CAAC,QAAQ,CAAC,cAAc,CAAU;IACzC,OAAO,CAAC,QAAQ,CAAC,aAAa,CAAS;IACvC,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAyB;IACjD,OAAO,CAAC,QAAQ,CAAC,gBAAgB,CAAS;IAC1C,OAAO,CAAC,QAAQ,CAAC,aAAa,CAAC,CAAS;IACxC,OAAO,CAAC,QAAQ,CAAC,SAAS,CAAY;IACtC,OAAO,CAAC,QAAQ,CAAC,WAAW,CAAS;IACrC,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAS;IAEjC,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAAiB;IAC1C,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAU;IAElC,OAAO,CAAC,SAAS,CAAiC;IAClD,OAAO,CAAC,iBAAiB,CAA+B;IACxD,OAAO,CAAC,IAAI,CAA8B;IAE1C;;;OAGG;gBACS,OAAO,GAAE,kBAAuB,EAAE,aAAa,SAAK;IAwBhE;;;OAGG;IACG,KAAK,IAAI,OAAO,CAAC,IAAI,CAAC;IAK5B,kFAAkF;IAC5E,IAAI,IAAI,OAAO,CAAC,IAAI,CAAC;IAuB3B;;;OAGG;IACG,OAAO,CAAC,GAAG,EAAE,gBAAgB,GAAG,OAAO,CAAC,eAAe,CAAC;IAW9D;;;;;;;OAOG;IACG,OAAO,CAAC,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,GAAG,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAYpE;;;;;;OAMG;IACG,OAAO,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC;IAmB5C,6GAA6G;IAC7G,IAAI,WAAW,IAAI,MAAM,GAAG,IAAI,CAE/B;IAED;;;OAGG;IACI,aAAa,CAAC,GAAG,EAAE,gBAAgB,GAAG,aAAa,CAAC,WAAW,CAAC;YAsFzD,YAAY;YAcZ,gBAAgB;YA0GhB,iBAAiB;YA8FjB,aAAa;YAkBb,oBAAoB;YASpB,wBAAwB;IA4BtC,OAAO,CAAC,UAAU;IAIlB,OAAO,CAAC,eAAe;IA2BvB,OAAO,CAAC,iBAAiB;IA+BzB,OAAO,CAAC,yBAAyB;IAyBjC,OAAO,CAAC,QAAQ;YAwCD,gBAAgB;YA8EjB,iBAAiB;IA8D/B,OAAO,CAAC,iBAAiB;IAYzB;;;;;;;;;;;;;;;;;;;;OAoBG;WACU,OAAO,CAClB,MAAM,CAAC,EAAE,MAAM,GACd,OAAO,CAAC;QAAE,OAAO,EAAE,MAAM,CAAC;QAAC,MAAM,EAAE,MAAM,CAAC;QAAC,MAAM,EAAE,MAAM,EAAE,CAAA;KAAE,CAAC;CA2BlE"}
+{"version":3,"file":"docker.d.ts","sourceRoot":"","sources":["../../../src/engine/docker.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAMH,OAAO,MAAM,MAAM,WAAW,CAAC;AAG/B,OAAO,KAAK,EACV,gBAAgB,EAChB,eAAe,EACf,WAAW,EAEX,YAAY,EAIZ,WAAW,EACZ,MAAM,UAAU,CAAC;AAiTlB,2HAA2H;AAC3H,MAAM,WAAW,kBAAmB,SAAQ,YAAY;IACtD,oFAAoF;IACpF,MAAM,CAAC,EAAE,MAAM,CAAC;CACjB;AAED;;;;;;;;;;;;;;GAcG;AACH,qBAAa,WAAY,YAAW,WAAW;IAC7C,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAS;IAChC,OAAO,CAAC,QAAQ,CAAC,IAAI,CAAY;IACjC,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAc;IACtC,OAAO,CAAC,QAAQ,CAAC,aAAa,CAAC,CAAsB;IACrD,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAAS;IAClC,OAAO,CAAC,QAAQ,CAAC,WAAW,CAAS;IACrC,OAAO,CAAC,QAAQ,CAAC,SAAS,CAAS;IACnC,OAAO,CAAC,QAAQ,CAAC,cAAc,CAAU;IACzC,OAAO,CAAC,QAAQ,CAAC,aAAa,CAAS;IACvC,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAyB;IACjD,OAAO,CAAC,QAAQ,CAAC,gBAAgB,CAAS;IAC1C,OAAO,CAAC,QAAQ,CAAC,aAAa,CAAC,CAAS;IACxC,OAAO,CAAC,QAAQ,CAAC,SAAS,CAAY;IACtC,OAAO,CAAC,QAAQ,CAAC,WAAW,CAAS;IACrC,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAS;IAEjC,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAAiB;IAC1C,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAU;IAElC,OAAO,CAAC,SAAS,CAAiC;IAClD,OAAO,CAAC,iBAAiB,CAA+B;IACxD,OAAO,CAAC,IAAI,CAA8B;IAE1C;;;OAGG;gBACS,OAAO,GAAE,kBAAuB,EAAE,aAAa,SAAK;IAwBhE;;;OAGG;IACG,KAAK,IAAI,OAAO,CAAC,IAAI,CAAC;IAK5B,kFAAkF;IAC5E,IAAI,IAAI,OAAO,CAAC,IAAI,CAAC;IAuB3B;;;OAGG;IACG,OAAO,CAAC,GAAG,EAAE,gBAAgB,GAAG,OAAO,CAAC,eAAe,CAAC;IAW9D;;;;;;;OAOG;IACG,OAAO,CAAC,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,GAAG,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAYpE;;;;;;OAMG;IACG,OAAO,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC;IAmB5C,6GAA6G;IAC7G,IAAI,WAAW,IAAI,MAAM,GAAG,IAAI,CAE/B;IAED;;;OAGG;IACI,aAAa,CAAC,GAAG,EAAE,gBAAgB,GAAG,aAAa,CAAC,WAAW,CAAC;YAsFzD,YAAY;YAcZ,gBAAgB;YA0GhB,iBAAiB;YA8FjB,aAAa;YAkBb,oBAAoB;YASpB,wBAAwB;IA4BtC,OAAO,CAAC,UAAU;IAIlB,OAAO,CAAC,eAAe;IA2BvB,OAAO,CAAC,iBAAiB;IA+BzB,OAAO,CAAC,yBAAyB;IAyBjC,OAAO,CAAC,QAAQ;YAwCD,gBAAgB;YA8EjB,iBAAiB;IAiG/B,OAAO,CAAC,iBAAiB;IAYzB;;;;;;;;;;;;;;;;;;;;OAoBG;WACU,OAAO,CAClB,MAAM,CAAC,EAAE,MAAM,GACd,OAAO,CAAC;QAAE,OAAO,EAAE,MAAM,CAAC;QAAC,MAAM,EAAE,MAAM,CAAC;QAAC,MAAM,EAAE,MAAM,EAAE,CAAA;KAAE,CAAC;CA2BlE"}

package/dist/src/engine/image-builder.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"image-builder.d.ts","sourceRoot":"","sources":["../../../src/engine/image-builder.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAGH,OAAO,KAAK,MAAM,MAAM,WAAW,CAAC;AAEpC,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,UAAU,CAAC;AAmB5C,mDAAmD;AACnD,UAAU,aAAa;IACrB,6CAA6C;IAC7C,OAAO,EAAE,MAAM,CAAC;IAChB,4BAA4B;IAC5B,MAAM,EAAE,UAAU,GAAG,MAAM,GAAG,OAAO,CAAC;IACtC,+DAA+D;IAC/D,OAAO,CAAC,EAAE,MAAM,CAAC;CAClB;AAED,KAAK,gBAAgB,GAAG,CAAC,QAAQ,EAAE,aAAa,KAAK,IAAI,CAAC;AAE1D;;;;;;GAMG;AACH,wBAAsB,eAAe,CACnC,MAAM,EAAE,MAAM,EACd,UAAU,CAAC,EAAE,gBAAgB,GAC5B,OAAO,CAAC,IAAI,CAAC,CAmCf;AAED;;;;;;;GAOG;AACH,wBAAsB,iBAAiB,CACrC,MAAM,EAAE,MAAM,EACd,MAAM,EAAE,WAAW,EACnB,UAAU,CAAC,EAAE,gBAAgB,GAC5B,OAAO,CAAC,IAAI,CAAC,CAkBf;AA4DD;;GAEG;AACH,wBAAsB,WAAW,CAAC,MAAM,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC,CAOrF;AAED;;GAEG;AACH,wBAAsB,YAAY,CAAC,MAAM,EAAE,MAAM,EAAE,UAAU,CAAC,EAAE,gBAAgB,GAAG,OAAO,CAAC,IAAI,CAAC,CAa/F"}
+{"version":3,"file":"image-builder.d.ts","sourceRoot":"","sources":["../../../src/engine/image-builder.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAGH,OAAO,KAAK,MAAM,MAAM,WAAW,CAAC;AAEpC,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,UAAU,CAAC;AAmB5C,mDAAmD;AACnD,UAAU,aAAa;IACrB,6CAA6C;IAC7C,OAAO,EAAE,MAAM,CAAC;IAChB,4BAA4B;IAC5B,MAAM,EAAE,UAAU,GAAG,MAAM,GAAG,OAAO,CAAC;IACtC,+DAA+D;IAC/D,OAAO,CAAC,EAAE,MAAM,CAAC;CAClB;AAED,KAAK,gBAAgB,GAAG,CAAC,QAAQ,EAAE,aAAa,KAAK,IAAI,CAAC;AAE1D;;;;;;GAMG;AACH,wBAAsB,eAAe,CACnC,MAAM,EAAE,MAAM,EACd,UAAU,CAAC,EAAE,gBAAgB,GAC5B,OAAO,CAAC,IAAI,CAAC,CAmCf;AAED;;;;;;;GAOG;AACH,wBAAsB,iBAAiB,CACrC,MAAM,EAAE,MAAM,EACd,MAAM,EAAE,WAAW,EACnB,UAAU,CAAC,EAAE,gBAAgB,GAC5B,OAAO,CAAC,IAAI,CAAC,CAkBf;AAgED;;GAEG;AACH,wBAAsB,WAAW,CAAC,MAAM,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC,CAOrF;AAED;;GAEG;AACH,wBAAsB,YAAY,CAAC,MAAM,EAAE,MAAM,EAAE,UAAU,CAAC,EAAE,gBAAgB,GAAG,OAAO,CAAC,IAAI,CAAC,CAa/F"}

package/dist/src/engine/utils.d.ts

@@ -59,4 +59,13 @@ export declare function createTarBuffer(filePath: string, content: Buffer | stri
  * @throws {Error} If the file is not found in the archive.
  */
 export declare function extractFromTar(tarBuffer: Buffer, targetPath: string): Buffer;
+/**
+ * Validates a package name to prevent command injection.
+ * allow alphanumeric, dash, underscore, dot, @, / (for scoped packages), and = (for versions)
+ *
+ * @param name - The package name to validate.
+ * @returns The name if valid.
+ * @throws {Error} If the name contains invalid characters.
+ */
+export declare function validatePackageName(name: string): string;
 //# sourceMappingURL=utils.d.ts.map

package/dist/src/engine/utils.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"utils.d.ts","sourceRoot":"","sources":["../../../src/engine/utils.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH;;;;;;;;;;;;GAYG;AACH,wBAAgB,gBAAgB,CAAC,KAAK,EAAE,MAAM,GAAG,MAAM,CAiBtD;AAED;;;;;;;GAOG;AACH,wBAAgB,cAAc,CAC5B,MAAM,EAAE,MAAM,EACd,QAAQ,EAAE,MAAM,GACf;IAAE,IAAI,EAAE,MAAM,CAAC;IAAC,SAAS,EAAE,OAAO,CAAA;CAAE,CAetC;AAED;;;;;;;GAOG;AACH,wBAAgB,WAAW,CAAC,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,GAAG,MAAM,CAQjF;AAED;;;;;;;;;GASG;AACH,wBAAgB,eAAe,CAAC,QAAQ,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,GAAG,MAAM,GAAG,MAAM,CA8ClF;AAED;;;;;;;GAOG;AACH,wBAAgB,cAAc,CAAC,SAAS,EAAE,MAAM,EAAE,UAAU,EAAE,MAAM,GAAG,MAAM,CAoC5E"}
+{"version":3,"file":"utils.d.ts","sourceRoot":"","sources":["../../../src/engine/utils.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH;;;;;;;;;;;;GAYG;AACH,wBAAgB,gBAAgB,CAAC,KAAK,EAAE,MAAM,GAAG,MAAM,CAiBtD;AAED;;;;;;;GAOG;AACH,wBAAgB,cAAc,CAC5B,MAAM,EAAE,MAAM,EACd,QAAQ,EAAE,MAAM,GACf;IAAE,IAAI,EAAE,MAAM,CAAC;IAAC,SAAS,EAAE,OAAO,CAAA;CAAE,CAetC;AAED;;;;;;;GAOG;AACH,wBAAgB,WAAW,CAAC,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,GAAG,MAAM,CAQjF;AAED;;;;;;;;;GASG;AACH,wBAAgB,eAAe,CAAC,QAAQ,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,GAAG,MAAM,GAAG,MAAM,CA8ClF;AAED;;;;;;;GAOG;AACH,wBAAgB,cAAc,CAAC,SAAS,EAAE,MAAM,EAAE,UAAU,EAAE,MAAM,GAAG,MAAM,CAoC5E;AAED;;;;;;;GAOG;AACH,wBAAgB,mBAAmB,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,CAQxD"}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "isol8",
-  "version": "0.8.1",
+  "version": "0.8.3",
   "description": "Secure code execution engine for AI agents",
   "author": "Illusion47586",
   "license": "MIT",