sandboxedjs 0.1.11 → 0.1.12

package/README.md

@@ -620,6 +620,20 @@ Two ways in, both byte-exact:
 await box.fs.writeFile("/workspace/uploads/clip.mp4", bytes);   // creates missing directories
 ```
 
+The `File` returned by a browser picker can be passed directly too. It is read
+as bytes and written at the exact container path, including an application-
+generated temporary path:
+
+```js
+const picked = input.files[0];
+const sourcePath = "/tmp/transcribe-quran-52fjch/source-1786307713702-baleela.f32le";
+await box.fs.writeFile(sourcePath, picked);
+```
+
+Do not pass `picked.path` (or any other host path) to a command in the
+container. Browser file pickers provide file data, not a path the sandbox can
+see.
+
 ```js
 // 2. Through a server running inside the container — a picker in the previewed
 //    app posting to its own backend. Publish the port and upload normally.

package/dist/index.cjs

@@ -23480,6 +23480,14 @@ function installUserland(kernel) {
 
 // src/container/fs.ts
 init_path();
+async function bytesFor(data) {
+  if (data instanceof Uint8Array) return data;
+  if (data instanceof ArrayBuffer) return new Uint8Array(data);
+  if (ArrayBuffer.isView(data)) {
+    return new Uint8Array(data.buffer, data.byteOffset, data.byteLength);
+  }
+  return new Uint8Array(await data.arrayBuffer());
+}
 var ContainerFs = class {
   constructor(kernel) {
     this.kernel = kernel;
@@ -23496,10 +23504,12 @@ var ContainerFs = class {
     const abs = clean(path);
     const parent = dirname(abs);
     if (!this.vfs.lexists(parent)) this.vfs.mkdir(parent, { recursive: true, mode: 493 });
-    this.vfs.writeFile(abs, data, { privileged: true, mode: opts.mode ?? 420 });
+    const content = typeof data === "string" ? data : await bytesFor(data);
+    this.vfs.writeFile(abs, content, { privileged: true, mode: opts.mode ?? 420 });
   }
   async appendFile(path, data) {
-    this.vfs.appendFile(clean(path), data, { privileged: true });
+    const content = typeof data === "string" ? data : await bytesFor(data);
+    this.vfs.appendFile(clean(path), content, { privileged: true });
   }
   async readdir(path, opts) {
     if (opts?.withFileTypes) return this.vfs.readdirWithTypes(clean(path));