sandbox0 0.1.0 → 0.1.2

package/dist/sandbox.js

@@ -236,7 +236,7 @@ export class Sandbox {
         this.podName = params.podName ?? "";
         this.status = params.status ?? "";
     }
-    async run(language, input, options) {
+    async run(alias, input, options) {
         if (!input.trim()) {
             throw new APIError({
                 statusCode: 0,
@@ -244,7 +244,7 @@ export class Sandbox {
                 message: "input cannot be empty",
             });
         }
-        const contextId = await this.ensureReplContext(language, options);
+        const contextId = await this.ensureReplContext(alias, options);
         const execResp = await this.contextExec(contextId, normalizeReplInput(input));
         return {
             sandboxId: this.id,
@@ -292,23 +292,19 @@ export class Sandbox {
         const socket = new WebSocketClient(wsUrl, { headers });
         return new ContextStream(socket, this.id, contextId);
     }
-    async ensureReplContext(language, options) {
+    async ensureReplContext(alias, options) {
         if (options?.contextId) {
             return options.contextId;
         }
-        const normalized = language.trim() || "python";
+        const normalized = alias.trim() || "python";
         const cached = this.replContextByLang.get(normalized);
         if (cached) {
             return cached;
         }
+        // Create a default REPL context with no custom settings
         const request = {
             type: models.ProcessType.Repl,
-            repl: { language: normalized },
-            cwd: options?.cwd,
-            envVars: options?.envVars,
-            ptySize: buildPty(options?.ptyRows, options?.ptyCols),
-            idleTimeoutSec: options?.idleTimeoutSec,
-            ttlSec: options?.ttlSec,
+            repl: { alias: normalized },
         };
         const response = await this.createContext(request);
         this.replContextByLang.set(normalized, response.id);

package/dist/webhook_signature.d.ts

@@ -0,0 +1,2 @@
+export declare function verifyWebhookSignature(secret: string, payload: string | Uint8Array, signature: string): boolean;
+//# sourceMappingURL=webhook_signature.d.ts.map

package/dist/webhook_signature.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"webhook_signature.d.ts","sourceRoot":"","sources":["../src/webhook_signature.ts"],"names":[],"mappings":"AAyBA,wBAAgB,sBAAsB,CACpC,MAAM,EAAE,MAAM,EACd,OAAO,EAAE,MAAM,GAAG,UAAU,EAC5B,SAAS,EAAE,MAAM,GAChB,OAAO,CAiBT"}

package/dist/webhook_signature.js

@@ -0,0 +1,35 @@
+import { createHmac, timingSafeEqual } from "node:crypto";
+function toPayloadBytes(payload) {
+    if (typeof payload === "string") {
+        return new TextEncoder().encode(payload);
+    }
+    return payload;
+}
+function decodeHexStrict(input) {
+    if (input.length === 0 || input.length % 2 !== 0) {
+        return null;
+    }
+    const normalized = input.toLowerCase();
+    const decoded = Buffer.from(normalized, "hex");
+    // Strict check: Buffer.from(hex) is permissive for invalid input.
+    if (decoded.toString("hex") !== normalized) {
+        return null;
+    }
+    return new Uint8Array(decoded);
+}
+// Verify X-Sandbox0-Signature with HMAC-SHA256 over raw payload bytes.
+export function verifyWebhookSignature(secret, payload, signature) {
+    const normalizedSignature = signature.trim();
+    if (!normalizedSignature) {
+        return false;
+    }
+    const provided = decodeHexStrict(normalizedSignature);
+    if (!provided) {
+        return false;
+    }
+    const expected = createHmac("sha256", secret).update(toPayloadBytes(payload)).digest();
+    if (expected.length !== provided.length) {
+        return false;
+    }
+    return timingSafeEqual(expected, Buffer.from(provided));
+}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "sandbox0",
-  "version": "0.1.0",
+  "version": "0.1.2",
   "description": "Sandbox0 JavaScript/TypeScript SDK",
   "license": "Apache-2.0",
   "author": "Sandbox0 Team",