sandboxedjs 0.1.13 → 0.1.15

package/dist/index.d.cts

@@ -1,4 +1,4 @@
-import { MemoryVolume, Nodepod } from '@scelar/nodepod/headless';
+import { MemoryVolume, Nodepod } from '@scelar/nodepod';
 
 type FileKind = "file" | "directory" | "symlink" | "chardev" | "blockdev" | "fifo" | "socket";
 /** Render as `drwxr-xr-x`, honouring setuid/setgid/sticky. */
@@ -1288,6 +1288,41 @@ declare class Shell {
     reapJobs(): Job[];
 }
 
+/**
+ * The Python runtime: MicroPython compiled to WebAssembly, wired to the
+ * container's filesystem, argv, environment and standard streams.
+ *
+ * A fresh interpreter is created per process, which is both correct (no state
+ * leaks between runs) and cheap — the WASM module is compiled once and reused,
+ * so subsequent instantiations take single-digit milliseconds.
+ */
+
+declare const PYTHON_VERSION = "3.4.0";
+interface PythonOptions {
+    /**
+     * Absolute URL of `micropython.wasm`.
+     *
+     * Emscripten resolves the binary against the script's own directory, which
+     * is right in Node and wrong in a browser: a bundler rewrites the loader to
+     * a hashed chunk, the guess lands on a path the dev server answers with
+     * `index.html`, and instantiation dies on `expected magic word 00 61 73 6d,
+     * found 3c 21 64 6f` — the first four bytes of `<!doctype`.
+     *
+     * Every bundler spells "give me the URL of this asset" differently, so the
+     * host supplies it rather than this module trying to detect one:
+     *
+     * ```ts
+     * import wasm from "@micropython/micropython-webassembly-pyscript/micropython.wasm?url";
+     * await createContainer({ pod, python: { wasmUrl: wasm } });
+     * ```
+     */
+    wasmUrl?: string;
+}
+/** Point the Python runtime at its WebAssembly binary. */
+declare function configurePython(options?: PythonOptions): void;
+/** True when a Python interpreter can be started in this process. */
+declare function isPythonAvailable(): Promise<boolean>;
+
 /**
  * A promise-based filesystem façade for host code, shaped like `fs/promises`
  * so it reads naturally from the outside.
@@ -1457,6 +1492,8 @@ interface ContainerOptions {
      * ```
      */
     pod?: Nodepod;
+    /** Python runtime settings; a browser host uses this to locate the wasm. */
+    python?: PythonOptions;
 }
 interface ExecOptions {
     cwd?: string;
@@ -1956,19 +1993,6 @@ declare function buildRootfs(vfs: Vfs, opts?: RootfsOptions): void;
 
 declare const NODE_VERSION = "v22.12.0";
 
-/**
- * The Python runtime: MicroPython compiled to WebAssembly, wired to the
- * container's filesystem, argv, environment and standard streams.
- *
- * A fresh interpreter is created per process, which is both correct (no state
- * leaks between runs) and cheap — the WASM module is compiled once and reused,
- * so subsequent instantiations take single-digit milliseconds.
- */
-
-declare const PYTHON_VERSION = "3.4.0";
-/** True when a Python interpreter can be started in this process. */
-declare function isPythonAvailable(): Promise<boolean>;
-
 /**
  * Package managers: `npm`/`npx`/`yarn`/`pnpm` on top of Nodepod's installer,
  * and an `apt`-shaped front end for the things a container image would ship.
@@ -1994,4 +2018,4 @@ declare const NPM_VERSION = "10.9.0";
  * ```
  */
 
-export { ArithError, BufferSink, CallbackSink, type Command, CommandRegistry, Container, ContainerFs, type ContainerOptions, type ContextInit, type Cred, type DirEntry, ERRNO, type Env, type ErrnoCode, type ExecContext, type ExecOptions, type ExecResult, type FileData, FileInput, FileOutput, type GroupEntry, type HttpResponse, IncompleteInputError, type InputStream, type Job, KERNEL_NAME, KERNEL_RELEASE, Kernel, type KernelOptions, type ListeningPort, type MountEntry, NODE_VERSION, NPM_VERSION, type NetInterface, type NetworkOptions, NetworkStack, NullInput, NullOutput, OS_RELEASE, type OutputStream, PYTHON_VERSION, type PasswdEntry, Pipe, Process, type ProcessKind, type ProcessOptions, type ProcessState, ProcessTable, ROOT_CRED, type ResolvedExecutable, type RootfsOptions, type RunOptions, type RunResult, SIGNALS, SIGNAL_NAMES, Session, type SessionInit, type SessionResult, type SessionRunOptions, Shell, ShellExit, type ShellIO, type ShellInit, Lexer as ShellLexer, type ShellOptions, ShellSyntaxError, type SpawnHandle, Stats, type Stdio, SysError, TeeOutput, Terminal, type TerminalOptions, UserDatabase, Variables, Vfs, type VirtualNode, type VirtualProvider, type WriteOptions, allCommands, applyChmod, braceExpand, buildRootfs, builtinNames, captureStdio, createContainer, createContext, createContainer as default, defineCommand, evalArith, exitCodeForSignal, expandPrompt, expandWord, expandWords, fnmatch, formatMode, getBuiltin, glob, globToRegex, hasMagic, installUserland, isBuiltinName, isPythonAvailable, isSysError, makeCred, normalizeSignal, octalMode, parse as parseShell, parseUmask, path as posixPath, resetPidCounter, shellQuote, strerror, unameInfo };
+export { ArithError, BufferSink, CallbackSink, type Command, CommandRegistry, Container, ContainerFs, type ContainerOptions, type ContextInit, type Cred, type DirEntry, ERRNO, type Env, type ErrnoCode, type ExecContext, type ExecOptions, type ExecResult, type FileData, FileInput, FileOutput, type GroupEntry, type HttpResponse, IncompleteInputError, type InputStream, type Job, KERNEL_NAME, KERNEL_RELEASE, Kernel, type KernelOptions, type ListeningPort, type MountEntry, NODE_VERSION, NPM_VERSION, type NetInterface, type NetworkOptions, NetworkStack, NullInput, NullOutput, OS_RELEASE, type OutputStream, PYTHON_VERSION, type PasswdEntry, Pipe, Process, type ProcessKind, type ProcessOptions, type ProcessState, ProcessTable, type PythonOptions, ROOT_CRED, type ResolvedExecutable, type RootfsOptions, type RunOptions, type RunResult, SIGNALS, SIGNAL_NAMES, Session, type SessionInit, type SessionResult, type SessionRunOptions, Shell, ShellExit, type ShellIO, type ShellInit, Lexer as ShellLexer, type ShellOptions, ShellSyntaxError, type SpawnHandle, Stats, type Stdio, SysError, TeeOutput, Terminal, type TerminalOptions, UserDatabase, Variables, Vfs, type VirtualNode, type VirtualProvider, type WriteOptions, allCommands, applyChmod, braceExpand, buildRootfs, builtinNames, captureStdio, configurePython, createContainer, createContext, createContainer as default, defineCommand, evalArith, exitCodeForSignal, expandPrompt, expandWord, expandWords, fnmatch, formatMode, getBuiltin, glob, globToRegex, hasMagic, installUserland, isBuiltinName, isPythonAvailable, isSysError, makeCred, normalizeSignal, octalMode, parse as parseShell, parseUmask, path as posixPath, resetPidCounter, shellQuote, strerror, unameInfo };

package/dist/index.d.ts

@@ -1,4 +1,4 @@
-import { MemoryVolume, Nodepod } from '@scelar/nodepod/headless';
+import { MemoryVolume, Nodepod } from '@scelar/nodepod';
 
 type FileKind = "file" | "directory" | "symlink" | "chardev" | "blockdev" | "fifo" | "socket";
 /** Render as `drwxr-xr-x`, honouring setuid/setgid/sticky. */
@@ -1288,6 +1288,41 @@ declare class Shell {
     reapJobs(): Job[];
 }
 
+/**
+ * The Python runtime: MicroPython compiled to WebAssembly, wired to the
+ * container's filesystem, argv, environment and standard streams.
+ *
+ * A fresh interpreter is created per process, which is both correct (no state
+ * leaks between runs) and cheap — the WASM module is compiled once and reused,
+ * so subsequent instantiations take single-digit milliseconds.
+ */
+
+declare const PYTHON_VERSION = "3.4.0";
+interface PythonOptions {
+    /**
+     * Absolute URL of `micropython.wasm`.
+     *
+     * Emscripten resolves the binary against the script's own directory, which
+     * is right in Node and wrong in a browser: a bundler rewrites the loader to
+     * a hashed chunk, the guess lands on a path the dev server answers with
+     * `index.html`, and instantiation dies on `expected magic word 00 61 73 6d,
+     * found 3c 21 64 6f` — the first four bytes of `<!doctype`.
+     *
+     * Every bundler spells "give me the URL of this asset" differently, so the
+     * host supplies it rather than this module trying to detect one:
+     *
+     * ```ts
+     * import wasm from "@micropython/micropython-webassembly-pyscript/micropython.wasm?url";
+     * await createContainer({ pod, python: { wasmUrl: wasm } });
+     * ```
+     */
+    wasmUrl?: string;
+}
+/** Point the Python runtime at its WebAssembly binary. */
+declare function configurePython(options?: PythonOptions): void;
+/** True when a Python interpreter can be started in this process. */
+declare function isPythonAvailable(): Promise<boolean>;
+
 /**
  * A promise-based filesystem façade for host code, shaped like `fs/promises`
  * so it reads naturally from the outside.
@@ -1457,6 +1492,8 @@ interface ContainerOptions {
      * ```
      */
     pod?: Nodepod;
+    /** Python runtime settings; a browser host uses this to locate the wasm. */
+    python?: PythonOptions;
 }
 interface ExecOptions {
     cwd?: string;
@@ -1956,19 +1993,6 @@ declare function buildRootfs(vfs: Vfs, opts?: RootfsOptions): void;
 
 declare const NODE_VERSION = "v22.12.0";
 
-/**
- * The Python runtime: MicroPython compiled to WebAssembly, wired to the
- * container's filesystem, argv, environment and standard streams.
- *
- * A fresh interpreter is created per process, which is both correct (no state
- * leaks between runs) and cheap — the WASM module is compiled once and reused,
- * so subsequent instantiations take single-digit milliseconds.
- */
-
-declare const PYTHON_VERSION = "3.4.0";
-/** True when a Python interpreter can be started in this process. */
-declare function isPythonAvailable(): Promise<boolean>;
-
 /**
  * Package managers: `npm`/`npx`/`yarn`/`pnpm` on top of Nodepod's installer,
  * and an `apt`-shaped front end for the things a container image would ship.
@@ -1994,4 +2018,4 @@ declare const NPM_VERSION = "10.9.0";
  * ```
  */
 
-export { ArithError, BufferSink, CallbackSink, type Command, CommandRegistry, Container, ContainerFs, type ContainerOptions, type ContextInit, type Cred, type DirEntry, ERRNO, type Env, type ErrnoCode, type ExecContext, type ExecOptions, type ExecResult, type FileData, FileInput, FileOutput, type GroupEntry, type HttpResponse, IncompleteInputError, type InputStream, type Job, KERNEL_NAME, KERNEL_RELEASE, Kernel, type KernelOptions, type ListeningPort, type MountEntry, NODE_VERSION, NPM_VERSION, type NetInterface, type NetworkOptions, NetworkStack, NullInput, NullOutput, OS_RELEASE, type OutputStream, PYTHON_VERSION, type PasswdEntry, Pipe, Process, type ProcessKind, type ProcessOptions, type ProcessState, ProcessTable, ROOT_CRED, type ResolvedExecutable, type RootfsOptions, type RunOptions, type RunResult, SIGNALS, SIGNAL_NAMES, Session, type SessionInit, type SessionResult, type SessionRunOptions, Shell, ShellExit, type ShellIO, type ShellInit, Lexer as ShellLexer, type ShellOptions, ShellSyntaxError, type SpawnHandle, Stats, type Stdio, SysError, TeeOutput, Terminal, type TerminalOptions, UserDatabase, Variables, Vfs, type VirtualNode, type VirtualProvider, type WriteOptions, allCommands, applyChmod, braceExpand, buildRootfs, builtinNames, captureStdio, createContainer, createContext, createContainer as default, defineCommand, evalArith, exitCodeForSignal, expandPrompt, expandWord, expandWords, fnmatch, formatMode, getBuiltin, glob, globToRegex, hasMagic, installUserland, isBuiltinName, isPythonAvailable, isSysError, makeCred, normalizeSignal, octalMode, parse as parseShell, parseUmask, path as posixPath, resetPidCounter, shellQuote, strerror, unameInfo };
+export { ArithError, BufferSink, CallbackSink, type Command, CommandRegistry, Container, ContainerFs, type ContainerOptions, type ContextInit, type Cred, type DirEntry, ERRNO, type Env, type ErrnoCode, type ExecContext, type ExecOptions, type ExecResult, type FileData, FileInput, FileOutput, type GroupEntry, type HttpResponse, IncompleteInputError, type InputStream, type Job, KERNEL_NAME, KERNEL_RELEASE, Kernel, type KernelOptions, type ListeningPort, type MountEntry, NODE_VERSION, NPM_VERSION, type NetInterface, type NetworkOptions, NetworkStack, NullInput, NullOutput, OS_RELEASE, type OutputStream, PYTHON_VERSION, type PasswdEntry, Pipe, Process, type ProcessKind, type ProcessOptions, type ProcessState, ProcessTable, type PythonOptions, ROOT_CRED, type ResolvedExecutable, type RootfsOptions, type RunOptions, type RunResult, SIGNALS, SIGNAL_NAMES, Session, type SessionInit, type SessionResult, type SessionRunOptions, Shell, ShellExit, type ShellIO, type ShellInit, Lexer as ShellLexer, type ShellOptions, ShellSyntaxError, type SpawnHandle, Stats, type Stdio, SysError, TeeOutput, Terminal, type TerminalOptions, UserDatabase, Variables, Vfs, type VirtualNode, type VirtualProvider, type WriteOptions, allCommands, applyChmod, braceExpand, buildRootfs, builtinNames, captureStdio, configurePython, createContainer, createContext, createContainer as default, defineCommand, evalArith, exitCodeForSignal, expandPrompt, expandWord, expandWords, fnmatch, formatMode, getBuiltin, glob, globToRegex, hasMagic, installUserland, isBuiltinName, isPythonAvailable, isSysError, makeCred, normalizeSignal, octalMode, parse as parseShell, parseUmask, path as posixPath, resetPidCounter, shellQuote, strerror, unameInfo };

package/dist/index.js

@@ -1,4 +1,4 @@
-import { Nodepod, DependencyInstaller } from '@scelar/nodepod/headless';
+import { DependencyInstaller } from '@scelar/nodepod';
 import { parse as parse$1 } from 'acorn';
 
 var __defProp = Object.defineProperty;
@@ -8548,6 +8548,15 @@ async function nodeBuiltin(name) {
     specifier
   );
 }
+async function nodeOnlyModule(specifier) {
+  const parts = specifier.split("/");
+  const runtimeSpecifier = parts.join("/");
+  return await import(
+    /* @vite-ignore */
+    /* webpackIgnore: true */
+    runtimeSpecifier
+  );
+}
 var zlibPromise = null;
 function nodeZlib() {
   zlibPromise ??= nodeBuiltin("zlib");
@@ -8750,7 +8759,7 @@ function installEsbuildRuntime() {
 async function install() {
   const workerPath = await buildPatchedWorker();
   if (!workerPath) return;
-  const { createNodeHost, setRuntimeHost } = await import('@scelar/nodepod/headless');
+  const { createNodeHost, setRuntimeHost } = await nodeOnlyModule("@scelar/nodepod/headless");
   setRuntimeHost(createNodeHost({ workerPath }));
 }
 async function buildPatchedWorker() {
@@ -22139,6 +22148,10 @@ init_path();
 var PYTHON_VERSION = "3.4.0";
 var MICROPYTHON_BANNER = "MicroPython v1.28.0 on 2026-04-06; SandboxedJS with Emscripten";
 var loaderPromise = null;
+var wasmUrl;
+function configurePython(options = {}) {
+  if (options.wasmUrl !== void 0) wasmUrl = options.wasmUrl;
+}
 async function getLoader() {
   if (!loaderPromise) {
     loaderPromise = import('@micropython/micropython-webassembly-pyscript/micropython.mjs').then(
@@ -22161,6 +22174,7 @@ async function createInterpreter(ctx, opts) {
     stdout: opts.stdout,
     stderr: opts.stderr,
     ...opts.stdin ? { stdin: opts.stdin } : {},
+    ...wasmUrl ? { url: wasmUrl } : {},
     linebuffer: false,
     heapsize: opts.heapsize ?? 64 * 1024 * 1024
   });
@@ -22542,7 +22556,13 @@ async function loadFactory() {
   const { createRequire } = await nodeBuiltin("module");
   const fs = await nodeBuiltin("fs/promises");
   const path = await nodeBuiltin("path");
-  const require2 = createRequire(path.join(process.cwd(), "index.js"));
+  const packageRequire = createRequire(import.meta.url);
+  let require2 = packageRequire;
+  try {
+    require2.resolve("@ffmpeg/core/wasm");
+  } catch {
+    require2 = createRequire(path.join(process.cwd(), "index.js"));
+  }
   const wasmPath = require2.resolve("@ffmpeg/core/wasm");
   const wasm = await fs.readFile(wasmPath);
   const module = await Promise.resolve().then(() => (init_ffmpeg_core(), ffmpeg_core_exports));
@@ -23171,6 +23191,12 @@ function packageBinaries(ctx, root, packageName) {
   }
   return [];
 }
+var CLI_MOVED_TO = {
+  tailwindcss: "@tailwindcss/cli",
+  postcss: "postcss-cli",
+  autoprefixer: "postcss-cli",
+  sass: "sass-embedded"
+};
 function findLocalBin(ctx, name) {
   let dir3 = ctx.cwd;
   for (let i = 0; i < 64; i++) {
@@ -23277,6 +23303,14 @@ unless the container was created with network: { allowOutbound: true }.`,
       const chosen = binaries.includes(command) ? command : binaries[0];
       if (chosen === void 0) {
         ctx.warn(`could not determine executable to run: ${packageName} provides no binary`);
+        const replacement = CLI_MOVED_TO[packageName];
+        if (replacement !== void 0) {
+          ctx.warn(`'${packageName}' ships no CLI; its command lives in '${replacement}'.`);
+          ctx.warn(`Try: npx ${replacement} ${rest.join(" ")}`.trimEnd());
+        } else {
+          ctx.warn(`'${packageName}' is installed but declares no "bin" entry.`);
+          ctx.warn("Check which package provides the command, or use `npx -p <pkg> <command>`.");
+        }
         return 127;
       }
       command = chosen;
@@ -23853,14 +23887,9 @@ var Container = class _Container {
   }
   // ── boot ──────────────────────────────────────────────────────────────────
   static async create(opts = {}) {
+    if (opts.python) configurePython(opts.python);
     if (!opts.pod) await installEsbuildRuntime();
-    const pod = opts.pod ?? await Nodepod.boot({
-      headless: true,
-      serviceWorker: false,
-      env: opts.env ?? {},
-      workdir: opts.cwd ?? "/",
-      ...opts.onServerReady ? { onServerReady: opts.onServerReady } : {}
-    });
+    const pod = opts.pod ?? await bootHeadlessPod(opts);
     const kernel = new Kernel({
       pod,
       hostname: opts.hostname ?? "sandbox",
@@ -24282,6 +24311,18 @@ function normalizeHeaders(headers) {
 async function createContainer(opts = {}) {
   return Container.create(opts);
 }
+async function bootHeadlessPod(opts) {
+  const { Nodepod } = await nodeOnlyModule(
+    "@scelar/nodepod/headless"
+  );
+  return Nodepod.boot({
+    headless: true,
+    serviceWorker: false,
+    env: opts.env ?? {},
+    workdir: opts.cwd ?? "/",
+    ...opts.onServerReady ? { onServerReady: opts.onServerReady } : {}
+  });
+}
 
 // src/container/terminal.ts
 init_path();
@@ -24722,6 +24763,6 @@ init_expand();
 init_builtins();
 var src_default = createContainer;
 
-export { ArithError, BufferSink, CallbackSink, CommandRegistry, Container, ContainerFs, ERRNO, FileInput, FileOutput, IncompleteInputError, KERNEL_NAME, KERNEL_RELEASE, Kernel, NODE_VERSION, NPM_VERSION, NetworkStack, NullInput, NullOutput, OS_RELEASE, PYTHON_VERSION, Pipe, Process, ProcessTable, ROOT_CRED, SIGNALS, SIGNAL_NAMES, Session, Shell, ShellExit, Lexer as ShellLexer, ShellSyntaxError, Stats, SysError, TeeOutput, Terminal, UserDatabase, Variables, Vfs, allCommands, applyChmod, braceExpand, buildRootfs, builtinNames, captureStdio, createContainer, createContext, src_default as default, defineCommand, evalArith, exitCodeForSignal, expandPrompt, expandWord, expandWords, fnmatch, formatMode, getBuiltin, glob, globToRegex, hasMagic, installUserland, isBuiltinName, isPythonAvailable, isSysError, makeCred, normalizeSignal, octalMode, parse as parseShell, parseUmask, path_exports as posixPath, resetPidCounter, shellQuote, strerror, unameInfo };
+export { ArithError, BufferSink, CallbackSink, CommandRegistry, Container, ContainerFs, ERRNO, FileInput, FileOutput, IncompleteInputError, KERNEL_NAME, KERNEL_RELEASE, Kernel, NODE_VERSION, NPM_VERSION, NetworkStack, NullInput, NullOutput, OS_RELEASE, PYTHON_VERSION, Pipe, Process, ProcessTable, ROOT_CRED, SIGNALS, SIGNAL_NAMES, Session, Shell, ShellExit, Lexer as ShellLexer, ShellSyntaxError, Stats, SysError, TeeOutput, Terminal, UserDatabase, Variables, Vfs, allCommands, applyChmod, braceExpand, buildRootfs, builtinNames, captureStdio, configurePython, createContainer, createContext, src_default as default, defineCommand, evalArith, exitCodeForSignal, expandPrompt, expandWord, expandWords, fnmatch, formatMode, getBuiltin, glob, globToRegex, hasMagic, installUserland, isBuiltinName, isPythonAvailable, isSysError, makeCred, normalizeSignal, octalMode, parse as parseShell, parseUmask, path_exports as posixPath, resetPidCounter, shellQuote, strerror, unameInfo };
 //# sourceMappingURL=index.js.map
 //# sourceMappingURL=index.js.map