sandboxedjs 0.1.11 → 0.1.12

package/dist/index.d.cts

@@ -1293,16 +1293,23 @@ declare class Shell {
  * so it reads naturally from the outside.
  */
 
+/** Data accepted by the host-facing filesystem API.
+ *
+ * `Blob` includes browser `File` objects, which is what an `<input
+ * type="file">` returns. The bytes are copied into the container; no host
+ * filesystem path is ever resolved by the sandbox.
+ */
+type FileData = string | Uint8Array | ArrayBuffer | ArrayBufferView | Blob;
 declare class ContainerFs {
     private readonly kernel;
     constructor(kernel: Kernel);
     private get vfs();
     readFile(path: string): Promise<Uint8Array>;
     readFile(path: string, encoding: "utf8" | "utf-8"): Promise<string>;
-    writeFile(path: string, data: string | Uint8Array, opts?: {
+    writeFile(path: string, data: FileData, opts?: {
         mode?: number;
     }): Promise<void>;
-    appendFile(path: string, data: string | Uint8Array): Promise<void>;
+    appendFile(path: string, data: FileData): Promise<void>;
     readdir(path: string): Promise<string[]>;
     readdir(path: string, opts: {
         withFileTypes: true;
@@ -1336,7 +1343,7 @@ declare class ContainerFs {
     /** Read many files at once, keyed by path. */
     readAll(paths: string[]): Promise<Record<string, string>>;
     /** Write a whole map of files, creating parents. */
-    writeAll(files: Record<string, string | Uint8Array>, opts?: {
+    writeAll(files: Record<string, FileData>, opts?: {
         cwd?: string;
     }): Promise<void>;
 }
@@ -1986,4 +1993,4 @@ declare const NPM_VERSION = "10.9.0";
  * ```
  */
 
-export { ArithError, BufferSink, CallbackSink, type Command, CommandRegistry, Container, ContainerFs, type ContainerOptions, type ContextInit, type Cred, type DirEntry, ERRNO, type Env, type ErrnoCode, type ExecContext, type ExecOptions, type ExecResult, FileInput, FileOutput, type GroupEntry, type HttpResponse, IncompleteInputError, type InputStream, type Job, KERNEL_NAME, KERNEL_RELEASE, Kernel, type KernelOptions, type ListeningPort, type MountEntry, NODE_VERSION, NPM_VERSION, type NetInterface, type NetworkOptions, NetworkStack, NullInput, NullOutput, OS_RELEASE, type OutputStream, PYTHON_VERSION, type PasswdEntry, Pipe, Process, type ProcessKind, type ProcessOptions, type ProcessState, ProcessTable, ROOT_CRED, type ResolvedExecutable, type RootfsOptions, type RunOptions, type RunResult, SIGNALS, SIGNAL_NAMES, Session, type SessionInit, type SessionResult, type SessionRunOptions, Shell, ShellExit, type ShellIO, type ShellInit, Lexer as ShellLexer, type ShellOptions, ShellSyntaxError, type SpawnHandle, Stats, type Stdio, SysError, TeeOutput, Terminal, type TerminalOptions, UserDatabase, Variables, Vfs, type VirtualNode, type VirtualProvider, type WriteOptions, allCommands, applyChmod, braceExpand, buildRootfs, builtinNames, captureStdio, createContainer, createContext, createContainer as default, defineCommand, evalArith, exitCodeForSignal, expandPrompt, expandWord, expandWords, fnmatch, formatMode, getBuiltin, glob, globToRegex, hasMagic, installUserland, isBuiltinName, isPythonAvailable, isSysError, makeCred, normalizeSignal, octalMode, parse as parseShell, parseUmask, path as posixPath, resetPidCounter, shellQuote, strerror, unameInfo };
+export { ArithError, BufferSink, CallbackSink, type Command, CommandRegistry, Container, ContainerFs, type ContainerOptions, type ContextInit, type Cred, type DirEntry, ERRNO, type Env, type ErrnoCode, type ExecContext, type ExecOptions, type ExecResult, type FileData, FileInput, FileOutput, type GroupEntry, type HttpResponse, IncompleteInputError, type InputStream, type Job, KERNEL_NAME, KERNEL_RELEASE, Kernel, type KernelOptions, type ListeningPort, type MountEntry, NODE_VERSION, NPM_VERSION, type NetInterface, type NetworkOptions, NetworkStack, NullInput, NullOutput, OS_RELEASE, type OutputStream, PYTHON_VERSION, type PasswdEntry, Pipe, Process, type ProcessKind, type ProcessOptions, type ProcessState, ProcessTable, ROOT_CRED, type ResolvedExecutable, type RootfsOptions, type RunOptions, type RunResult, SIGNALS, SIGNAL_NAMES, Session, type SessionInit, type SessionResult, type SessionRunOptions, Shell, ShellExit, type ShellIO, type ShellInit, Lexer as ShellLexer, type ShellOptions, ShellSyntaxError, type SpawnHandle, Stats, type Stdio, SysError, TeeOutput, Terminal, type TerminalOptions, UserDatabase, Variables, Vfs, type VirtualNode, type VirtualProvider, type WriteOptions, allCommands, applyChmod, braceExpand, buildRootfs, builtinNames, captureStdio, createContainer, createContext, createContainer as default, defineCommand, evalArith, exitCodeForSignal, expandPrompt, expandWord, expandWords, fnmatch, formatMode, getBuiltin, glob, globToRegex, hasMagic, installUserland, isBuiltinName, isPythonAvailable, isSysError, makeCred, normalizeSignal, octalMode, parse as parseShell, parseUmask, path as posixPath, resetPidCounter, shellQuote, strerror, unameInfo };

package/dist/index.d.ts

@@ -1293,16 +1293,23 @@ declare class Shell {
  * so it reads naturally from the outside.
  */
 
+/** Data accepted by the host-facing filesystem API.
+ *
+ * `Blob` includes browser `File` objects, which is what an `<input
+ * type="file">` returns. The bytes are copied into the container; no host
+ * filesystem path is ever resolved by the sandbox.
+ */
+type FileData = string | Uint8Array | ArrayBuffer | ArrayBufferView | Blob;
 declare class ContainerFs {
     private readonly kernel;
     constructor(kernel: Kernel);
     private get vfs();
     readFile(path: string): Promise<Uint8Array>;
     readFile(path: string, encoding: "utf8" | "utf-8"): Promise<string>;
-    writeFile(path: string, data: string | Uint8Array, opts?: {
+    writeFile(path: string, data: FileData, opts?: {
         mode?: number;
     }): Promise<void>;
-    appendFile(path: string, data: string | Uint8Array): Promise<void>;
+    appendFile(path: string, data: FileData): Promise<void>;
     readdir(path: string): Promise<string[]>;
     readdir(path: string, opts: {
         withFileTypes: true;
@@ -1336,7 +1343,7 @@ declare class ContainerFs {
     /** Read many files at once, keyed by path. */
     readAll(paths: string[]): Promise<Record<string, string>>;
     /** Write a whole map of files, creating parents. */
-    writeAll(files: Record<string, string | Uint8Array>, opts?: {
+    writeAll(files: Record<string, FileData>, opts?: {
         cwd?: string;
     }): Promise<void>;
 }
@@ -1986,4 +1993,4 @@ declare const NPM_VERSION = "10.9.0";
  * ```
  */
 
-export { ArithError, BufferSink, CallbackSink, type Command, CommandRegistry, Container, ContainerFs, type ContainerOptions, type ContextInit, type Cred, type DirEntry, ERRNO, type Env, type ErrnoCode, type ExecContext, type ExecOptions, type ExecResult, FileInput, FileOutput, type GroupEntry, type HttpResponse, IncompleteInputError, type InputStream, type Job, KERNEL_NAME, KERNEL_RELEASE, Kernel, type KernelOptions, type ListeningPort, type MountEntry, NODE_VERSION, NPM_VERSION, type NetInterface, type NetworkOptions, NetworkStack, NullInput, NullOutput, OS_RELEASE, type OutputStream, PYTHON_VERSION, type PasswdEntry, Pipe, Process, type ProcessKind, type ProcessOptions, type ProcessState, ProcessTable, ROOT_CRED, type ResolvedExecutable, type RootfsOptions, type RunOptions, type RunResult, SIGNALS, SIGNAL_NAMES, Session, type SessionInit, type SessionResult, type SessionRunOptions, Shell, ShellExit, type ShellIO, type ShellInit, Lexer as ShellLexer, type ShellOptions, ShellSyntaxError, type SpawnHandle, Stats, type Stdio, SysError, TeeOutput, Terminal, type TerminalOptions, UserDatabase, Variables, Vfs, type VirtualNode, type VirtualProvider, type WriteOptions, allCommands, applyChmod, braceExpand, buildRootfs, builtinNames, captureStdio, createContainer, createContext, createContainer as default, defineCommand, evalArith, exitCodeForSignal, expandPrompt, expandWord, expandWords, fnmatch, formatMode, getBuiltin, glob, globToRegex, hasMagic, installUserland, isBuiltinName, isPythonAvailable, isSysError, makeCred, normalizeSignal, octalMode, parse as parseShell, parseUmask, path as posixPath, resetPidCounter, shellQuote, strerror, unameInfo };
+export { ArithError, BufferSink, CallbackSink, type Command, CommandRegistry, Container, ContainerFs, type ContainerOptions, type ContextInit, type Cred, type DirEntry, ERRNO, type Env, type ErrnoCode, type ExecContext, type ExecOptions, type ExecResult, type FileData, FileInput, FileOutput, type GroupEntry, type HttpResponse, IncompleteInputError, type InputStream, type Job, KERNEL_NAME, KERNEL_RELEASE, Kernel, type KernelOptions, type ListeningPort, type MountEntry, NODE_VERSION, NPM_VERSION, type NetInterface, type NetworkOptions, NetworkStack, NullInput, NullOutput, OS_RELEASE, type OutputStream, PYTHON_VERSION, type PasswdEntry, Pipe, Process, type ProcessKind, type ProcessOptions, type ProcessState, ProcessTable, ROOT_CRED, type ResolvedExecutable, type RootfsOptions, type RunOptions, type RunResult, SIGNALS, SIGNAL_NAMES, Session, type SessionInit, type SessionResult, type SessionRunOptions, Shell, ShellExit, type ShellIO, type ShellInit, Lexer as ShellLexer, type ShellOptions, ShellSyntaxError, type SpawnHandle, Stats, type Stdio, SysError, TeeOutput, Terminal, type TerminalOptions, UserDatabase, Variables, Vfs, type VirtualNode, type VirtualProvider, type WriteOptions, allCommands, applyChmod, braceExpand, buildRootfs, builtinNames, captureStdio, createContainer, createContext, createContainer as default, defineCommand, evalArith, exitCodeForSignal, expandPrompt, expandWord, expandWords, fnmatch, formatMode, getBuiltin, glob, globToRegex, hasMagic, installUserland, isBuiltinName, isPythonAvailable, isSysError, makeCred, normalizeSignal, octalMode, parse as parseShell, parseUmask, path as posixPath, resetPidCounter, shellQuote, strerror, unameInfo };

package/dist/index.js

@@ -23475,6 +23475,14 @@ function installUserland(kernel) {
 
 // src/container/fs.ts
 init_path();
+async function bytesFor(data) {
+  if (data instanceof Uint8Array) return data;
+  if (data instanceof ArrayBuffer) return new Uint8Array(data);
+  if (ArrayBuffer.isView(data)) {
+    return new Uint8Array(data.buffer, data.byteOffset, data.byteLength);
+  }
+  return new Uint8Array(await data.arrayBuffer());
+}
 var ContainerFs = class {
   constructor(kernel) {
     this.kernel = kernel;
@@ -23491,10 +23499,12 @@ var ContainerFs = class {
     const abs = clean(path);
     const parent = dirname(abs);
     if (!this.vfs.lexists(parent)) this.vfs.mkdir(parent, { recursive: true, mode: 493 });
-    this.vfs.writeFile(abs, data, { privileged: true, mode: opts.mode ?? 420 });
+    const content = typeof data === "string" ? data : await bytesFor(data);
+    this.vfs.writeFile(abs, content, { privileged: true, mode: opts.mode ?? 420 });
   }
   async appendFile(path, data) {
-    this.vfs.appendFile(clean(path), data, { privileged: true });
+    const content = typeof data === "string" ? data : await bytesFor(data);
+    this.vfs.appendFile(clean(path), content, { privileged: true });
   }
   async readdir(path, opts) {
     if (opts?.withFileTypes) return this.vfs.readdirWithTypes(clean(path));