sandboxedjs 0.1.16 → 0.1.18

package/dist/index.d.cts

@@ -1298,7 +1298,20 @@ declare class Shell {
  */
 
 declare const PYTHON_VERSION = "3.4.0";
+/**
+ * Which interpreter `python3` is.
+ *
+ * `auto` prefers CPython and falls back to MicroPython, so a host that has not
+ * installed Pyodide keeps working exactly as it did before.
+ */
+type PythonEngine = "auto" | "cpython" | "micropython";
 interface PythonOptions {
+    /** Interpreter to run. Defaults to `auto`. */
+    engine?: PythonEngine;
+    /** Where Pyodide's assets live; only a browser needs to say. */
+    indexURL?: string;
+    /** URL of the Pyodide ES module, for a browser with no bundler. */
+    pyodideURL?: string;
     /**
      * Absolute URL of `micropython.wasm`.
      *
@@ -1318,7 +1331,6 @@ interface PythonOptions {
      */
     wasmUrl?: string;
 }
-/** Point the Python runtime at its WebAssembly binary. */
 declare function configurePython(options?: PythonOptions): void;
 /** True when a Python interpreter can be started in this process. */
 declare function isPythonAvailable(): Promise<boolean>;
@@ -2004,6 +2016,42 @@ declare function buildRootfs(vfs: Vfs, opts?: RootfsOptions): void;
 
 declare const NODE_VERSION = "v22.12.0";
 
+/**
+ * The CPython runtime: Pyodide, wired to the container the same way
+ * MicroPython is — filesystem, argv, environment and standard streams.
+ *
+ * This is real CPython, so `sqlite3`, `dataclasses`, `decimal`, `typing` and
+ * the rest of the standard library are present, and `micropip` can install
+ * pure-Python wheels. MicroPython remains for hosts that do not want a 13 MB
+ * interpreter: see `configurePython`.
+ *
+ * Two things differ from the MicroPython path, and both are forced by CPython
+ * keeping its own library inside the Emscripten filesystem:
+ *
+ *  - the container is mounted subtree by subtree rather than over `/`, so
+ *    `/lib/python314.zip` survives;
+ *  - an interpreter costs roughly a second and a half to start, so one is kept
+ *    per container and each program is run in a fresh namespace instead.
+ */
+
+interface CPythonOptions {
+    /**
+     * Where Pyodide's own assets live.
+     *
+     * Node resolves them from the installed package, so this is only needed in a
+     * browser, where they are served or taken from a CDN.
+     */
+    indexURL?: string;
+    /**
+     * URL of the Pyodide ES module, for hosts that cannot resolve the package by
+     * name — a browser without a bundler, typically.
+     */
+    moduleURL?: string;
+}
+declare function configureCPython(options?: CPythonOptions): void;
+/** True when this host can start CPython at all. */
+declare function isCPythonAvailable(): Promise<boolean>;
+
 /**
  * Package managers: `npm`/`npx`/`yarn`/`pnpm` on top of Nodepod's installer,
  * and an `apt`-shaped front end for the things a container image would ship.
@@ -2029,4 +2077,4 @@ declare const NPM_VERSION = "10.9.0";
  * ```
  */
 
-export { ArithError, BufferSink, CallbackSink, type Command, CommandRegistry, Container, ContainerFs, type ContainerOptions, type ContextInit, type Cred, type DirEntry, ERRNO, type Env, type ErrnoCode, type ExecContext, type ExecOptions, type ExecResult, type FileData, FileInput, FileOutput, type GroupEntry, type HttpResponse, IncompleteInputError, type InputStream, type Job, KERNEL_NAME, KERNEL_RELEASE, Kernel, type KernelOptions, type ListeningPort, type MountEntry, NODE_VERSION, NPM_VERSION, type NetInterface, type NetworkOptions, NetworkStack, NullInput, NullOutput, OS_RELEASE, type OutputStream, PYTHON_VERSION, type PasswdEntry, Pipe, Process, type ProcessKind, type ProcessOptions, type ProcessState, ProcessTable, type PythonOptions, ROOT_CRED, type ResolvedExecutable, type RootfsOptions, type RunOptions, type RunResult, SIGNALS, SIGNAL_NAMES, Session, type SessionInit, type SessionResult, type SessionRunOptions, Shell, ShellExit, type ShellIO, type ShellInit, Lexer as ShellLexer, type ShellOptions, ShellSyntaxError, type SpawnHandle, Stats, type Stdio, SysError, TeeOutput, Terminal, type TerminalOptions, UserDatabase, Variables, Vfs, type VirtualNode, type VirtualProvider, type WriteOptions, allCommands, applyChmod, braceExpand, buildRootfs, builtinNames, captureStdio, configurePython, createContainer, createContext, createContainer as default, defineCommand, evalArith, exitCodeForSignal, expandPrompt, expandWord, expandWords, fnmatch, formatMode, getBuiltin, glob, globToRegex, hasMagic, installUserland, isBuiltinName, isPythonAvailable, isSysError, makeCred, normalizeSignal, octalMode, parse as parseShell, parseUmask, path as posixPath, resetPidCounter, shellQuote, strerror, unameInfo };
+export { ArithError, BufferSink, type CPythonOptions, CallbackSink, type Command, CommandRegistry, Container, ContainerFs, type ContainerOptions, type ContextInit, type Cred, type DirEntry, ERRNO, type Env, type ErrnoCode, type ExecContext, type ExecOptions, type ExecResult, type FileData, FileInput, FileOutput, type GroupEntry, type HttpResponse, IncompleteInputError, type InputStream, type Job, KERNEL_NAME, KERNEL_RELEASE, Kernel, type KernelOptions, type ListeningPort, type MountEntry, NODE_VERSION, NPM_VERSION, type NetInterface, type NetworkOptions, NetworkStack, NullInput, NullOutput, OS_RELEASE, type OutputStream, PYTHON_VERSION, type PasswdEntry, Pipe, Process, type ProcessKind, type ProcessOptions, type ProcessState, ProcessTable, type PythonEngine, type PythonOptions, ROOT_CRED, type ResolvedExecutable, type RootfsOptions, type RunOptions, type RunResult, SIGNALS, SIGNAL_NAMES, Session, type SessionInit, type SessionResult, type SessionRunOptions, Shell, ShellExit, type ShellIO, type ShellInit, Lexer as ShellLexer, type ShellOptions, ShellSyntaxError, type SpawnHandle, Stats, type Stdio, SysError, TeeOutput, Terminal, type TerminalOptions, UserDatabase, Variables, Vfs, type VirtualNode, type VirtualProvider, type WriteOptions, allCommands, applyChmod, braceExpand, buildRootfs, builtinNames, captureStdio, configureCPython, configurePython, createContainer, createContext, createContainer as default, defineCommand, evalArith, exitCodeForSignal, expandPrompt, expandWord, expandWords, fnmatch, formatMode, getBuiltin, glob, globToRegex, hasMagic, installUserland, isBuiltinName, isCPythonAvailable, isPythonAvailable, isSysError, makeCred, normalizeSignal, octalMode, parse as parseShell, parseUmask, path as posixPath, resetPidCounter, shellQuote, strerror, unameInfo };

package/dist/index.d.ts

@@ -1298,7 +1298,20 @@ declare class Shell {
  */
 
 declare const PYTHON_VERSION = "3.4.0";
+/**
+ * Which interpreter `python3` is.
+ *
+ * `auto` prefers CPython and falls back to MicroPython, so a host that has not
+ * installed Pyodide keeps working exactly as it did before.
+ */
+type PythonEngine = "auto" | "cpython" | "micropython";
 interface PythonOptions {
+    /** Interpreter to run. Defaults to `auto`. */
+    engine?: PythonEngine;
+    /** Where Pyodide's assets live; only a browser needs to say. */
+    indexURL?: string;
+    /** URL of the Pyodide ES module, for a browser with no bundler. */
+    pyodideURL?: string;
     /**
      * Absolute URL of `micropython.wasm`.
      *
@@ -1318,7 +1331,6 @@ interface PythonOptions {
      */
     wasmUrl?: string;
 }
-/** Point the Python runtime at its WebAssembly binary. */
 declare function configurePython(options?: PythonOptions): void;
 /** True when a Python interpreter can be started in this process. */
 declare function isPythonAvailable(): Promise<boolean>;
@@ -2004,6 +2016,42 @@ declare function buildRootfs(vfs: Vfs, opts?: RootfsOptions): void;
 
 declare const NODE_VERSION = "v22.12.0";
 
+/**
+ * The CPython runtime: Pyodide, wired to the container the same way
+ * MicroPython is — filesystem, argv, environment and standard streams.
+ *
+ * This is real CPython, so `sqlite3`, `dataclasses`, `decimal`, `typing` and
+ * the rest of the standard library are present, and `micropip` can install
+ * pure-Python wheels. MicroPython remains for hosts that do not want a 13 MB
+ * interpreter: see `configurePython`.
+ *
+ * Two things differ from the MicroPython path, and both are forced by CPython
+ * keeping its own library inside the Emscripten filesystem:
+ *
+ *  - the container is mounted subtree by subtree rather than over `/`, so
+ *    `/lib/python314.zip` survives;
+ *  - an interpreter costs roughly a second and a half to start, so one is kept
+ *    per container and each program is run in a fresh namespace instead.
+ */
+
+interface CPythonOptions {
+    /**
+     * Where Pyodide's own assets live.
+     *
+     * Node resolves them from the installed package, so this is only needed in a
+     * browser, where they are served or taken from a CDN.
+     */
+    indexURL?: string;
+    /**
+     * URL of the Pyodide ES module, for hosts that cannot resolve the package by
+     * name — a browser without a bundler, typically.
+     */
+    moduleURL?: string;
+}
+declare function configureCPython(options?: CPythonOptions): void;
+/** True when this host can start CPython at all. */
+declare function isCPythonAvailable(): Promise<boolean>;
+
 /**
  * Package managers: `npm`/`npx`/`yarn`/`pnpm` on top of Nodepod's installer,
  * and an `apt`-shaped front end for the things a container image would ship.
@@ -2029,4 +2077,4 @@ declare const NPM_VERSION = "10.9.0";
  * ```
  */
 
-export { ArithError, BufferSink, CallbackSink, type Command, CommandRegistry, Container, ContainerFs, type ContainerOptions, type ContextInit, type Cred, type DirEntry, ERRNO, type Env, type ErrnoCode, type ExecContext, type ExecOptions, type ExecResult, type FileData, FileInput, FileOutput, type GroupEntry, type HttpResponse, IncompleteInputError, type InputStream, type Job, KERNEL_NAME, KERNEL_RELEASE, Kernel, type KernelOptions, type ListeningPort, type MountEntry, NODE_VERSION, NPM_VERSION, type NetInterface, type NetworkOptions, NetworkStack, NullInput, NullOutput, OS_RELEASE, type OutputStream, PYTHON_VERSION, type PasswdEntry, Pipe, Process, type ProcessKind, type ProcessOptions, type ProcessState, ProcessTable, type PythonOptions, ROOT_CRED, type ResolvedExecutable, type RootfsOptions, type RunOptions, type RunResult, SIGNALS, SIGNAL_NAMES, Session, type SessionInit, type SessionResult, type SessionRunOptions, Shell, ShellExit, type ShellIO, type ShellInit, Lexer as ShellLexer, type ShellOptions, ShellSyntaxError, type SpawnHandle, Stats, type Stdio, SysError, TeeOutput, Terminal, type TerminalOptions, UserDatabase, Variables, Vfs, type VirtualNode, type VirtualProvider, type WriteOptions, allCommands, applyChmod, braceExpand, buildRootfs, builtinNames, captureStdio, configurePython, createContainer, createContext, createContainer as default, defineCommand, evalArith, exitCodeForSignal, expandPrompt, expandWord, expandWords, fnmatch, formatMode, getBuiltin, glob, globToRegex, hasMagic, installUserland, isBuiltinName, isPythonAvailable, isSysError, makeCred, normalizeSignal, octalMode, parse as parseShell, parseUmask, path as posixPath, resetPidCounter, shellQuote, strerror, unameInfo };
+export { ArithError, BufferSink, type CPythonOptions, CallbackSink, type Command, CommandRegistry, Container, ContainerFs, type ContainerOptions, type ContextInit, type Cred, type DirEntry, ERRNO, type Env, type ErrnoCode, type ExecContext, type ExecOptions, type ExecResult, type FileData, FileInput, FileOutput, type GroupEntry, type HttpResponse, IncompleteInputError, type InputStream, type Job, KERNEL_NAME, KERNEL_RELEASE, Kernel, type KernelOptions, type ListeningPort, type MountEntry, NODE_VERSION, NPM_VERSION, type NetInterface, type NetworkOptions, NetworkStack, NullInput, NullOutput, OS_RELEASE, type OutputStream, PYTHON_VERSION, type PasswdEntry, Pipe, Process, type ProcessKind, type ProcessOptions, type ProcessState, ProcessTable, type PythonEngine, type PythonOptions, ROOT_CRED, type ResolvedExecutable, type RootfsOptions, type RunOptions, type RunResult, SIGNALS, SIGNAL_NAMES, Session, type SessionInit, type SessionResult, type SessionRunOptions, Shell, ShellExit, type ShellIO, type ShellInit, Lexer as ShellLexer, type ShellOptions, ShellSyntaxError, type SpawnHandle, Stats, type Stdio, SysError, TeeOutput, Terminal, type TerminalOptions, UserDatabase, Variables, Vfs, type VirtualNode, type VirtualProvider, type WriteOptions, allCommands, applyChmod, braceExpand, buildRootfs, builtinNames, captureStdio, configureCPython, configurePython, createContainer, createContext, createContainer as default, defineCommand, evalArith, exitCodeForSignal, expandPrompt, expandWord, expandWords, fnmatch, formatMode, getBuiltin, glob, globToRegex, hasMagic, installUserland, isBuiltinName, isCPythonAvailable, isPythonAvailable, isSysError, makeCred, normalizeSignal, octalMode, parse as parseShell, parseUmask, path as posixPath, resetPidCounter, shellQuote, strerror, unameInfo };

package/dist/index.js

@@ -21936,6 +21936,7 @@ function mountContainerFs(FS, opts) {
     if (isSysError(e)) return throwErrno(e.code);
     throw new FS.ErrnoError(emErrno("EIO"));
   };
+  const mountRoot = opts.mountAt ? normalize(opts.mountAt) : "/";
   const backend = {
     /** Absolute container path for a node. */
     realPath(node2) {
@@ -21945,7 +21946,9 @@ function mountContainerFs(FS, opts) {
         parts.unshift(current.name);
         current = current.parent;
       }
-      return "/" + parts.join("/");
+      const relative2 = parts.join("/");
+      if (mountRoot === "/") return "/" + relative2;
+      return relative2 ? join(mountRoot, relative2) : mountRoot;
     },
     mount(_mount) {
       return backend.createNode(null, "/", 16877 | 0, 0);
@@ -22135,6 +22138,14 @@ function mountContainerFs(FS, opts) {
       return position;
     }
   };
+  if (opts.mountAt) {
+    try {
+      FS.mkdir(mountRoot);
+    } catch {
+    }
+    FS.mount(backend, {}, mountRoot);
+    return;
+  }
   FS.root = null;
   FS.mount(backend, {}, "/");
   try {
@@ -22143,13 +22154,286 @@ function mountContainerFs(FS, opts) {
   }
 }
 
+// src/runtime/cpython.ts
+var RESERVED_FOR_INTERPRETER = /* @__PURE__ */ new Set(["lib", "dev", "proc"]);
+var pyodideModule = null;
+var indexUrl;
+var moduleUrl;
+function configureCPython(options = {}) {
+  if (options.indexURL !== void 0) indexUrl = options.indexURL;
+  if (options.moduleURL !== void 0) {
+    moduleUrl = options.moduleURL;
+    pyodideModule = null;
+  }
+}
+function importPyodide() {
+  if (!pyodideModule) {
+    const specifier = moduleUrl ?? ["py", "odide"].join("");
+    pyodideModule = import(
+      /* @vite-ignore */
+      /* webpackIgnore: true */
+      specifier
+    );
+  }
+  return pyodideModule;
+}
+var isNode2 = typeof process !== "undefined" && process.versions != null && process.versions.node != null;
+async function resolveIndexUrl() {
+  if (indexUrl) return indexUrl;
+  if (!isNode2) return void 0;
+  try {
+    const { createRequire } = await nodeBuiltin("module");
+    const path = await nodeBuiltin("path");
+    const require2 = createRequire(path.join(process.cwd(), "index.js"));
+    return `${path.dirname(require2.resolve("pyodide/package.json"))}/`;
+  } catch {
+    return void 0;
+  }
+}
+async function isCPythonAvailable() {
+  try {
+    await importPyodide();
+    return true;
+  } catch {
+    return false;
+  }
+}
+var interpreters = /* @__PURE__ */ new WeakMap();
+async function interpreterFor(ctx) {
+  const existing = interpreters.get(ctx.vfs);
+  if (existing) return existing;
+  const starting = (async () => {
+    const { loadPyodide } = await importPyodide();
+    const resolved = await resolveIndexUrl();
+    const py = await loadPyodide({
+      ...resolved ? { indexURL: resolved } : {},
+      /* Output is rebound per program; these only catch anything printed
+       * while the interpreter is still starting. */
+      stdout: () => {
+      },
+      stderr: () => {
+      }
+    });
+    mountContainerDirs(py, ctx);
+    installRunner(py);
+    return py;
+  })();
+  interpreters.set(ctx.vfs, starting);
+  try {
+    return await starting;
+  } catch (error) {
+    interpreters.delete(ctx.vfs);
+    throw error;
+  }
+}
+function installRunner(py) {
+  py.__sbxRun = py.runPython(`
+from pyodide.code import eval_code_async
+
+async def __sbx_run(source, scope):
+    try:
+        await eval_code_async(source, globals=scope)
+        return 0
+    except SystemExit as exit:
+        code = exit.code
+        if code is None:
+            return 0
+        return code if isinstance(code, int) else 1
+
+__sbx_run
+`);
+}
+function mountContainerDirs(py, ctx) {
+  const mounted = py.__sbxMounted ??= /* @__PURE__ */ new Set();
+  let entries;
+  try {
+    entries = ctx.vfs.readdirWithTypes("/", ctx.cred);
+  } catch {
+    return;
+  }
+  for (const entry of entries) {
+    if (entry.kind !== "directory") continue;
+    if (RESERVED_FOR_INTERPRETER.has(entry.name)) continue;
+    if (mounted.has(entry.name)) continue;
+    try {
+      mountContainerFs(py.FS, {
+        vfs: ctx.vfs,
+        cred: ctx.cred,
+        mountAt: `/${entry.name}`
+      });
+      mounted.add(entry.name);
+    } catch {
+    }
+  }
+}
+function bootstrap(py, ctx, argv, scriptDir) {
+  const paths = [
+    ...scriptDir ? [scriptDir] : [""],
+    "/usr/lib/python3",
+    "/usr/lib/python3/site-packages",
+    "/usr/local/lib/python3/site-packages"
+  ];
+  py.runPython(`
+import sys, os
+sys.argv[:] = ${JSON.stringify(argv)}
+for __p in reversed(${JSON.stringify(paths)}):
+    if __p and __p not in sys.path:
+        sys.path.insert(0, __p)
+    elif __p == "" and "" not in sys.path:
+        sys.path.insert(0, "")
+try:
+    del __p
+except NameError:
+    pass
+os.environ.clear()
+os.environ.update(${JSON.stringify(ctx.env)})
+`);
+  try {
+    py.FS.chdir(ctx.cwd);
+  } catch {
+  }
+}
+function reportError(ctx, error) {
+  const message = error instanceof Error ? error.message : String(error);
+  const systemExit = /SystemExit:?\s*(-?\d+)?/.exec(message);
+  if (systemExit) {
+    return systemExit[1] !== void 0 ? Number(systemExit[1]) & 255 : 0;
+  }
+  if (/KeyboardInterrupt/.test(message)) {
+    ctx.stderr.write("KeyboardInterrupt\n");
+    return 130;
+  }
+  const text = message.replace(/^PythonError:\s*/, "");
+  ctx.stderr.write(text.endsWith("\n") ? text : `${text}
+`);
+  return 1;
+}
+async function runCPythonProgram(ctx, source, argv, scriptDir, stdinText) {
+  let py;
+  try {
+    py = await interpreterFor(ctx);
+  } catch (error) {
+    ctx.stderr.write(
+      `python3: CPython is unavailable in this host (${error instanceof Error ? error.message : String(error)})
+`
+    );
+    return { exitCode: 127 };
+  }
+  mountContainerDirs(py, ctx);
+  try {
+    await py.loadPackagesFromImports(source, {
+      messageCallback: () => {
+      },
+      errorCallback: () => {
+      }
+    });
+  } catch {
+  }
+  const encoder6 = new TextEncoder();
+  const decoder7 = new TextDecoder();
+  py.setStdout({
+    write: (buffer) => {
+      ctx.write(decoder7.decode(buffer));
+      return buffer.length;
+    }
+  });
+  py.setStderr({
+    write: (buffer) => {
+      ctx.stderr.write(decoder7.decode(buffer));
+      return buffer.length;
+    }
+  });
+  if (stdinText !== null) {
+    const bytes = encoder6.encode(stdinText);
+    let offset = 0;
+    py.setStdin({
+      read: (buffer) => {
+        const take = Math.min(buffer.length, bytes.length - offset);
+        buffer.set(bytes.subarray(offset, offset + take));
+        offset += take;
+        return take;
+      }
+    });
+  } else {
+    py.setStdin({ read: () => 0 });
+  }
+  try {
+    bootstrap(py, ctx, argv, scriptDir);
+  } catch (error) {
+    return { exitCode: reportError(ctx, error) };
+  }
+  const globals = py.globals.get("dict")();
+  try {
+    globals.set("__name__", "__main__");
+    const exitCode = await py.__sbxRun(source, globals);
+    return { exitCode: Number(exitCode) & 255 };
+  } catch (error) {
+    return { exitCode: reportError(ctx, error) };
+  } finally {
+    try {
+      globals.destroy();
+    } catch {
+    }
+  }
+}
+var micropip = defineCommand({
+  name: "micropip",
+  path: "/usr/bin/micropip",
+  summary: "install Python packages into the running interpreter",
+  usage: "micropip install <package>...",
+  async run(ctx) {
+    const [action, ...packages] = ctx.args;
+    if (action !== "install" || packages.length === 0) {
+      ctx.line("usage: micropip install <package>...");
+      return action === void 0 ? 1 : 0;
+    }
+    let py;
+    try {
+      py = await interpreterFor(ctx);
+    } catch {
+      ctx.stderr.write("micropip: CPython is unavailable in this host\n");
+      return 127;
+    }
+    try {
+      await py.loadPackage("micropip");
+      const micropipModule = py.pyimport("micropip");
+      for (const name of packages) {
+        ctx.line(`Collecting ${name}`);
+        await micropipModule.install(name);
+        ctx.line(`Successfully installed ${name}`);
+      }
+      return 0;
+    } catch (error) {
+      ctx.stderr.write(
+        `micropip: ${error instanceof Error ? error.message : String(error)}
+`
+      );
+      return 1;
+    }
+  }
+});
+
 // src/runtime/python.ts
 init_path();
 var PYTHON_VERSION = "3.4.0";
 var MICROPYTHON_BANNER = "MicroPython v1.28.0 on 2026-04-06; SandboxedJS with Emscripten";
 var loaderPromise = null;
 var wasmUrl;
+var engine = "auto";
+var cpythonUsable = null;
+async function useCPython() {
+  if (engine === "micropython") return false;
+  if (engine === "cpython") return true;
+  cpythonUsable ??= isCPythonAvailable();
+  return cpythonUsable;
+}
 function configurePython(options = {}) {
+  if (options.engine !== void 0) {
+    engine = options.engine;
+    cpythonUsable = null;
+  }
+  if (options.indexURL !== void 0) configureCPython({ indexURL: options.indexURL });
+  if (options.pyodideURL !== void 0) configureCPython({ moduleURL: options.pyodideURL });
   if (options.wasmUrl !== void 0) wasmUrl = options.wasmUrl;
 }
 async function getLoader() {
@@ -22224,6 +22508,9 @@ function reportPythonError(ctx, e) {
   return 1;
 }
 async function runProgram(ctx, source, argv, scriptDir, stdinText) {
+  if (await useCPython()) {
+    return runCPythonProgram(ctx, source, argv, scriptDir, stdinText);
+  }
   let stdinOffset = 0;
   const stdinBytes = stdinText === null ? new Uint8Array(0) : new TextEncoder().encode(stdinText);
   const mp = await createInterpreter(ctx, {
@@ -22546,7 +22833,7 @@ async function readZip(data) {
   return entries;
 }
 function pythonCommands() {
-  return [python, pip];
+  return [python, pip, micropip];
 }
 
 // src/runtime/ffmpeg.ts
@@ -22775,8 +23062,8 @@ function renameShadowedExports(source) {
     for (const [key, value] of Object.entries(node2)) {
       if (key === "type" || key === "start" || key === "end" || skip.includes(key)) continue;
       if (Array.isArray(value)) {
-        for (const item of value) if (isNode2(item)) visit(item, childScope);
-      } else if (isNode2(value)) {
+        for (const item of value) if (isNode3(item)) visit(item, childScope);
+      } else if (isNode3(value)) {
         visit(value, childScope);
       }
     }
@@ -22800,9 +23087,9 @@ function blockNames(body) {
       for (const declarator of node2.declarations) {
         collectPattern(declarator.id, names);
       }
-    } else if (node2.type === "ClassDeclaration" && isNode2(node2.id)) {
+    } else if (node2.type === "ClassDeclaration" && isNode3(node2.id)) {
       names.add(node2.id.name);
-    } else if (node2.type === "FunctionDeclaration" && isNode2(node2.id)) {
+    } else if (node2.type === "FunctionDeclaration" && isNode3(node2.id)) {
       names.add(node2.id.name);
     }
   }
@@ -22813,10 +23100,10 @@ function collectVars(nodes, names) {
     for (const item of nodes) collectVars(item, names);
     return;
   }
-  if (!isNode2(nodes)) return;
+  if (!isNode3(nodes)) return;
   const node2 = nodes;
   if (node2.type === "FunctionDeclaration" || node2.type === "FunctionExpression" || node2.type === "ArrowFunctionExpression") {
-    if (isNode2(node2.id)) names.add(node2.id.name);
+    if (isNode3(node2.id)) names.add(node2.id.name);
     return;
   }
   if (node2.type === "VariableDeclaration" && node2.kind === "var") {
@@ -22830,7 +23117,7 @@ function collectVars(nodes, names) {
   }
 }
 function collectPattern(node2, names) {
-  if (!isNode2(node2)) return;
+  if (!isNode3(node2)) return;
   switch (node2.type) {
     case "Identifier":
       names.add(node2.name);
@@ -22854,7 +23141,7 @@ function collectPattern(node2, names) {
   }
 }
 function isExports(value) {
-  return isNode2(value) && value.type === "Identifier" && value.name === NAME;
+  return isNode3(value) && value.type === "Identifier" && value.name === NAME;
 }
 function freshName(source) {
   let name = "__sandboxedjs_exports";
@@ -22862,7 +23149,7 @@ function freshName(source) {
   while (source.includes(name)) name = `__sandboxedjs_exports${++suffix}`;
   return name;
 }
-function isNode2(value) {
+function isNode3(value) {
   return typeof value === "object" && value !== null && typeof value.type === "string";
 }
 var NOTHING = [];
@@ -24775,6 +25062,6 @@ init_expand();
 init_builtins();
 var src_default = createContainer;
 
-export { ArithError, BufferSink, CallbackSink, CommandRegistry, Container, ContainerFs, ERRNO, FileInput, FileOutput, IncompleteInputError, KERNEL_NAME, KERNEL_RELEASE, Kernel, NODE_VERSION, NPM_VERSION, NetworkStack, NullInput, NullOutput, OS_RELEASE, PYTHON_VERSION, Pipe, Process, ProcessTable, ROOT_CRED, SIGNALS, SIGNAL_NAMES, Session, Shell, ShellExit, Lexer as ShellLexer, ShellSyntaxError, Stats, SysError, TeeOutput, Terminal, UserDatabase, Variables, Vfs, allCommands, applyChmod, braceExpand, buildRootfs, builtinNames, captureStdio, configurePython, createContainer, createContext, src_default as default, defineCommand, evalArith, exitCodeForSignal, expandPrompt, expandWord, expandWords, fnmatch, formatMode, getBuiltin, glob, globToRegex, hasMagic, installUserland, isBuiltinName, isPythonAvailable, isSysError, makeCred, normalizeSignal, octalMode, parse as parseShell, parseUmask, path_exports as posixPath, resetPidCounter, shellQuote, strerror, unameInfo };
+export { ArithError, BufferSink, CallbackSink, CommandRegistry, Container, ContainerFs, ERRNO, FileInput, FileOutput, IncompleteInputError, KERNEL_NAME, KERNEL_RELEASE, Kernel, NODE_VERSION, NPM_VERSION, NetworkStack, NullInput, NullOutput, OS_RELEASE, PYTHON_VERSION, Pipe, Process, ProcessTable, ROOT_CRED, SIGNALS, SIGNAL_NAMES, Session, Shell, ShellExit, Lexer as ShellLexer, ShellSyntaxError, Stats, SysError, TeeOutput, Terminal, UserDatabase, Variables, Vfs, allCommands, applyChmod, braceExpand, buildRootfs, builtinNames, captureStdio, configureCPython, configurePython, createContainer, createContext, src_default as default, defineCommand, evalArith, exitCodeForSignal, expandPrompt, expandWord, expandWords, fnmatch, formatMode, getBuiltin, glob, globToRegex, hasMagic, installUserland, isBuiltinName, isCPythonAvailable, isPythonAvailable, isSysError, makeCred, normalizeSignal, octalMode, parse as parseShell, parseUmask, path_exports as posixPath, resetPidCounter, shellQuote, strerror, unameInfo };
 //# sourceMappingURL=index.js.map
 //# sourceMappingURL=index.js.map