sandboxedjs 0.1.11 → 0.1.13

package/dist/index.d.cts

@@ -1293,16 +1293,23 @@ declare class Shell {
  * so it reads naturally from the outside.
  */
 
+/** Data accepted by the host-facing filesystem API.
+ *
+ * `Blob` includes browser `File` objects, which is what an `<input
+ * type="file">` returns. The bytes are copied into the container; no host
+ * filesystem path is ever resolved by the sandbox.
+ */
+type FileData = string | Uint8Array | ArrayBuffer | ArrayBufferView | Blob;
 declare class ContainerFs {
     private readonly kernel;
     constructor(kernel: Kernel);
     private get vfs();
     readFile(path: string): Promise<Uint8Array>;
     readFile(path: string, encoding: "utf8" | "utf-8"): Promise<string>;
-    writeFile(path: string, data: string | Uint8Array, opts?: {
+    writeFile(path: string, data: FileData, opts?: {
         mode?: number;
     }): Promise<void>;
-    appendFile(path: string, data: string | Uint8Array): Promise<void>;
+    appendFile(path: string, data: FileData): Promise<void>;
     readdir(path: string): Promise<string[]>;
     readdir(path: string, opts: {
         withFileTypes: true;
@@ -1336,7 +1343,7 @@ declare class ContainerFs {
     /** Read many files at once, keyed by path. */
     readAll(paths: string[]): Promise<Record<string, string>>;
     /** Write a whole map of files, creating parents. */
-    writeAll(files: Record<string, string | Uint8Array>, opts?: {
+    writeAll(files: Record<string, FileData>, opts?: {
         cwd?: string;
     }): Promise<void>;
 }
@@ -1502,6 +1509,7 @@ declare class Container {
     private readonly hooks;
     private disposed;
     private defaultSession;
+    private readonly restoreNodeChildProcessBridge;
     private constructor();
     static create(opts?: ContainerOptions): Promise<Container>;
     /**
@@ -1986,4 +1994,4 @@ declare const NPM_VERSION = "10.9.0";
  * ```
  */
 
-export { ArithError, BufferSink, CallbackSink, type Command, CommandRegistry, Container, ContainerFs, type ContainerOptions, type ContextInit, type Cred, type DirEntry, ERRNO, type Env, type ErrnoCode, type ExecContext, type ExecOptions, type ExecResult, FileInput, FileOutput, type GroupEntry, type HttpResponse, IncompleteInputError, type InputStream, type Job, KERNEL_NAME, KERNEL_RELEASE, Kernel, type KernelOptions, type ListeningPort, type MountEntry, NODE_VERSION, NPM_VERSION, type NetInterface, type NetworkOptions, NetworkStack, NullInput, NullOutput, OS_RELEASE, type OutputStream, PYTHON_VERSION, type PasswdEntry, Pipe, Process, type ProcessKind, type ProcessOptions, type ProcessState, ProcessTable, ROOT_CRED, type ResolvedExecutable, type RootfsOptions, type RunOptions, type RunResult, SIGNALS, SIGNAL_NAMES, Session, type SessionInit, type SessionResult, type SessionRunOptions, Shell, ShellExit, type ShellIO, type ShellInit, Lexer as ShellLexer, type ShellOptions, ShellSyntaxError, type SpawnHandle, Stats, type Stdio, SysError, TeeOutput, Terminal, type TerminalOptions, UserDatabase, Variables, Vfs, type VirtualNode, type VirtualProvider, type WriteOptions, allCommands, applyChmod, braceExpand, buildRootfs, builtinNames, captureStdio, createContainer, createContext, createContainer as default, defineCommand, evalArith, exitCodeForSignal, expandPrompt, expandWord, expandWords, fnmatch, formatMode, getBuiltin, glob, globToRegex, hasMagic, installUserland, isBuiltinName, isPythonAvailable, isSysError, makeCred, normalizeSignal, octalMode, parse as parseShell, parseUmask, path as posixPath, resetPidCounter, shellQuote, strerror, unameInfo };
+export { ArithError, BufferSink, CallbackSink, type Command, CommandRegistry, Container, ContainerFs, type ContainerOptions, type ContextInit, type Cred, type DirEntry, ERRNO, type Env, type ErrnoCode, type ExecContext, type ExecOptions, type ExecResult, type FileData, FileInput, FileOutput, type GroupEntry, type HttpResponse, IncompleteInputError, type InputStream, type Job, KERNEL_NAME, KERNEL_RELEASE, Kernel, type KernelOptions, type ListeningPort, type MountEntry, NODE_VERSION, NPM_VERSION, type NetInterface, type NetworkOptions, NetworkStack, NullInput, NullOutput, OS_RELEASE, type OutputStream, PYTHON_VERSION, type PasswdEntry, Pipe, Process, type ProcessKind, type ProcessOptions, type ProcessState, ProcessTable, ROOT_CRED, type ResolvedExecutable, type RootfsOptions, type RunOptions, type RunResult, SIGNALS, SIGNAL_NAMES, Session, type SessionInit, type SessionResult, type SessionRunOptions, Shell, ShellExit, type ShellIO, type ShellInit, Lexer as ShellLexer, type ShellOptions, ShellSyntaxError, type SpawnHandle, Stats, type Stdio, SysError, TeeOutput, Terminal, type TerminalOptions, UserDatabase, Variables, Vfs, type VirtualNode, type VirtualProvider, type WriteOptions, allCommands, applyChmod, braceExpand, buildRootfs, builtinNames, captureStdio, createContainer, createContext, createContainer as default, defineCommand, evalArith, exitCodeForSignal, expandPrompt, expandWord, expandWords, fnmatch, formatMode, getBuiltin, glob, globToRegex, hasMagic, installUserland, isBuiltinName, isPythonAvailable, isSysError, makeCred, normalizeSignal, octalMode, parse as parseShell, parseUmask, path as posixPath, resetPidCounter, shellQuote, strerror, unameInfo };

package/dist/index.d.ts

@@ -1293,16 +1293,23 @@ declare class Shell {
  * so it reads naturally from the outside.
  */
 
+/** Data accepted by the host-facing filesystem API.
+ *
+ * `Blob` includes browser `File` objects, which is what an `<input
+ * type="file">` returns. The bytes are copied into the container; no host
+ * filesystem path is ever resolved by the sandbox.
+ */
+type FileData = string | Uint8Array | ArrayBuffer | ArrayBufferView | Blob;
 declare class ContainerFs {
     private readonly kernel;
     constructor(kernel: Kernel);
     private get vfs();
     readFile(path: string): Promise<Uint8Array>;
     readFile(path: string, encoding: "utf8" | "utf-8"): Promise<string>;
-    writeFile(path: string, data: string | Uint8Array, opts?: {
+    writeFile(path: string, data: FileData, opts?: {
         mode?: number;
     }): Promise<void>;
-    appendFile(path: string, data: string | Uint8Array): Promise<void>;
+    appendFile(path: string, data: FileData): Promise<void>;
     readdir(path: string): Promise<string[]>;
     readdir(path: string, opts: {
         withFileTypes: true;
@@ -1336,7 +1343,7 @@ declare class ContainerFs {
     /** Read many files at once, keyed by path. */
     readAll(paths: string[]): Promise<Record<string, string>>;
     /** Write a whole map of files, creating parents. */
-    writeAll(files: Record<string, string | Uint8Array>, opts?: {
+    writeAll(files: Record<string, FileData>, opts?: {
         cwd?: string;
     }): Promise<void>;
 }
@@ -1502,6 +1509,7 @@ declare class Container {
     private readonly hooks;
     private disposed;
     private defaultSession;
+    private readonly restoreNodeChildProcessBridge;
     private constructor();
     static create(opts?: ContainerOptions): Promise<Container>;
     /**
@@ -1986,4 +1994,4 @@ declare const NPM_VERSION = "10.9.0";
  * ```
  */
 
-export { ArithError, BufferSink, CallbackSink, type Command, CommandRegistry, Container, ContainerFs, type ContainerOptions, type ContextInit, type Cred, type DirEntry, ERRNO, type Env, type ErrnoCode, type ExecContext, type ExecOptions, type ExecResult, FileInput, FileOutput, type GroupEntry, type HttpResponse, IncompleteInputError, type InputStream, type Job, KERNEL_NAME, KERNEL_RELEASE, Kernel, type KernelOptions, type ListeningPort, type MountEntry, NODE_VERSION, NPM_VERSION, type NetInterface, type NetworkOptions, NetworkStack, NullInput, NullOutput, OS_RELEASE, type OutputStream, PYTHON_VERSION, type PasswdEntry, Pipe, Process, type ProcessKind, type ProcessOptions, type ProcessState, ProcessTable, ROOT_CRED, type ResolvedExecutable, type RootfsOptions, type RunOptions, type RunResult, SIGNALS, SIGNAL_NAMES, Session, type SessionInit, type SessionResult, type SessionRunOptions, Shell, ShellExit, type ShellIO, type ShellInit, Lexer as ShellLexer, type ShellOptions, ShellSyntaxError, type SpawnHandle, Stats, type Stdio, SysError, TeeOutput, Terminal, type TerminalOptions, UserDatabase, Variables, Vfs, type VirtualNode, type VirtualProvider, type WriteOptions, allCommands, applyChmod, braceExpand, buildRootfs, builtinNames, captureStdio, createContainer, createContext, createContainer as default, defineCommand, evalArith, exitCodeForSignal, expandPrompt, expandWord, expandWords, fnmatch, formatMode, getBuiltin, glob, globToRegex, hasMagic, installUserland, isBuiltinName, isPythonAvailable, isSysError, makeCred, normalizeSignal, octalMode, parse as parseShell, parseUmask, path as posixPath, resetPidCounter, shellQuote, strerror, unameInfo };
+export { ArithError, BufferSink, CallbackSink, type Command, CommandRegistry, Container, ContainerFs, type ContainerOptions, type ContextInit, type Cred, type DirEntry, ERRNO, type Env, type ErrnoCode, type ExecContext, type ExecOptions, type ExecResult, type FileData, FileInput, FileOutput, type GroupEntry, type HttpResponse, IncompleteInputError, type InputStream, type Job, KERNEL_NAME, KERNEL_RELEASE, Kernel, type KernelOptions, type ListeningPort, type MountEntry, NODE_VERSION, NPM_VERSION, type NetInterface, type NetworkOptions, NetworkStack, NullInput, NullOutput, OS_RELEASE, type OutputStream, PYTHON_VERSION, type PasswdEntry, Pipe, Process, type ProcessKind, type ProcessOptions, type ProcessState, ProcessTable, ROOT_CRED, type ResolvedExecutable, type RootfsOptions, type RunOptions, type RunResult, SIGNALS, SIGNAL_NAMES, Session, type SessionInit, type SessionResult, type SessionRunOptions, Shell, ShellExit, type ShellIO, type ShellInit, Lexer as ShellLexer, type ShellOptions, ShellSyntaxError, type SpawnHandle, Stats, type Stdio, SysError, TeeOutput, Terminal, type TerminalOptions, UserDatabase, Variables, Vfs, type VirtualNode, type VirtualProvider, type WriteOptions, allCommands, applyChmod, braceExpand, buildRootfs, builtinNames, captureStdio, createContainer, createContext, createContainer as default, defineCommand, evalArith, exitCodeForSignal, expandPrompt, expandWord, expandWords, fnmatch, formatMode, getBuiltin, glob, globToRegex, hasMagic, installUserland, isBuiltinName, isPythonAvailable, isSysError, makeCred, normalizeSignal, octalMode, parse as parseShell, parseUmask, path as posixPath, resetPidCounter, shellQuote, strerror, unameInfo };

package/dist/index.js

@@ -23475,6 +23475,14 @@ function installUserland(kernel) {
 
 // src/container/fs.ts
 init_path();
+async function bytesFor(data) {
+  if (data instanceof Uint8Array) return data;
+  if (data instanceof ArrayBuffer) return new Uint8Array(data);
+  if (ArrayBuffer.isView(data)) {
+    return new Uint8Array(data.buffer, data.byteOffset, data.byteLength);
+  }
+  return new Uint8Array(await data.arrayBuffer());
+}
 var ContainerFs = class {
   constructor(kernel) {
     this.kernel = kernel;
@@ -23491,10 +23499,12 @@ var ContainerFs = class {
     const abs = clean(path);
     const parent = dirname(abs);
     if (!this.vfs.lexists(parent)) this.vfs.mkdir(parent, { recursive: true, mode: 493 });
-    this.vfs.writeFile(abs, data, { privileged: true, mode: opts.mode ?? 420 });
+    const content = typeof data === "string" ? data : await bytesFor(data);
+    this.vfs.writeFile(abs, content, { privileged: true, mode: opts.mode ?? 420 });
   }
   async appendFile(path, data) {
-    this.vfs.appendFile(clean(path), data, { privileged: true });
+    const content = typeof data === "string" ? data : await bytesFor(data);
+    this.vfs.appendFile(clean(path), content, { privileged: true });
   }
   async readdir(path, opts) {
     if (opts?.withFileTypes) return this.vfs.readdirWithTypes(clean(path));
@@ -23660,6 +23670,146 @@ var Session = class {
   }
 };
 
+// src/runtime/node-child-process-bridge.ts
+var KernelChildProcess = class {
+  pid;
+  command;
+  args;
+  parentPid;
+  state = "running";
+  exitCode;
+  stdout = "";
+  stderr = "";
+  listeners = /* @__PURE__ */ new Map();
+  kernel;
+  cred;
+  cwd;
+  env;
+  stdin = new Pipe();
+  process;
+  started = false;
+  cancelled = false;
+  constructor(kernel, cred, config, pid) {
+    this.kernel = kernel;
+    this.cred = cred;
+    this.pid = pid;
+    this.command = config.command;
+    this.args = config.args?.slice() ?? [];
+    this.parentPid = config.parentPid;
+    this.cwd = config.cwd ?? "/";
+    this.env = { ...config.env };
+  }
+  on(event, listener) {
+    let listeners = this.listeners.get(event);
+    if (!listeners) {
+      listeners = /* @__PURE__ */ new Set();
+      this.listeners.set(event, listeners);
+    }
+    listeners.add(listener);
+    return this;
+  }
+  emit(event, ...args) {
+    for (const listener of this.listeners.get(event) ?? []) listener(...args);
+  }
+  exec() {
+    if (this.started) return;
+    this.started = true;
+    queueMicrotask(() => {
+      if (this.cancelled) {
+        this.finish(143);
+        return;
+      }
+      const stdout = new ChildOutput(this, "stdout");
+      const stderr = new ChildOutput(this, "stderr");
+      try {
+        this.process = this.kernel.spawn([this.command, ...this.args], {
+          cwd: this.cwd,
+          env: this.env,
+          cred: this.cred,
+          stdin: this.stdin,
+          stdout,
+          stderr,
+          ppid: 1
+        });
+        void this.process.wait().then((code) => {
+          stdout.end();
+          stderr.end();
+          this.finish(code);
+        });
+      } catch (error) {
+        stderr.write(error instanceof Error ? error.message : String(error));
+        stderr.end();
+        stdout.end();
+        this.finish(1);
+      }
+    });
+  }
+  sendStdin(data) {
+    try {
+      this.stdin.write(data);
+    } catch {
+    }
+  }
+  kill(signal = "SIGTERM") {
+    if (this.process) {
+      this.process.deliver(signal);
+      return;
+    }
+    this.cancelled = true;
+  }
+  finish(code) {
+    if (this.state === "exited") return;
+    this.state = "exited";
+    this.exitCode = code;
+    this.emit("exit", code);
+  }
+  append(stream, text) {
+    this[stream] += text;
+    this.emit(stream, text);
+  }
+};
+var ChildOutput = class {
+  constructor(child, stream) {
+    this.child = child;
+    this.stream = stream;
+  }
+  child;
+  stream;
+  isTTY = false;
+  closedState = false;
+  decoder = new TextDecoder();
+  get closed() {
+    return this.closedState;
+  }
+  write(data) {
+    if (this.closedState) return;
+    const text = typeof data === "string" ? data : this.decoder.decode(data, { stream: true });
+    if (text) this.child.append(this.stream, text);
+  }
+  end() {
+    if (this.closedState) return;
+    this.closedState = true;
+    const tail2 = this.decoder.decode();
+    if (tail2) this.child.append(this.stream, tail2);
+  }
+};
+var nextBridgePid = 1073741824;
+function installNodeChildProcessBridge(pod, kernel, cred) {
+  const manager = pod.processManager;
+  const originalSpawn = manager.spawn;
+  manager.spawn = (config) => {
+    const resolved = kernel.resolveExecutable(config.command, config.cwd ?? "/", config.env ?? {}, cred);
+    if (resolved?.kind === "builtin" && resolved.command?.name !== "node" && resolved.command?.name !== "nodejs") {
+      return new KernelChildProcess(kernel, cred, config, nextBridgePid++);
+    }
+    return originalSpawn.call(manager, config);
+  };
+  return () => {
+    if (manager.spawn === originalSpawn) return;
+    manager.spawn = originalSpawn;
+  };
+}
+
 // src/container/container.ts
 var Container = class _Container {
   kernel;
@@ -23670,6 +23820,7 @@ var Container = class _Container {
   hooks;
   disposed = false;
   defaultSession = null;
+  restoreNodeChildProcessBridge;
   constructor(kernel, pod, opts) {
     this.kernel = kernel;
     this.pod = pod;
@@ -23698,6 +23849,7 @@ var Container = class _Container {
     };
     if (opts.timeoutMs !== void 0) this.defaults.timeoutMs = opts.timeoutMs;
     this.hooks = { onStdout: opts.onStdout, onStderr: opts.onStderr };
+    this.restoreNodeChildProcessBridge = installNodeChildProcessBridge(pod, kernel, cred);
   }
   // ── boot ──────────────────────────────────────────────────────────────────
   static async create(opts = {}) {
@@ -24108,6 +24260,7 @@ var Container = class _Container {
   dispose() {
     if (this.disposed) return;
     this.disposed = true;
+    this.restoreNodeChildProcessBridge();
     this.kernel.dispose();
     try {
       this.pod.teardown();