sandboxedjs 0.1.26 → 0.1.27

package/dist/index.d.cts

@@ -196,7 +196,7 @@ interface DirEntry {
 /**
  * The container's virtual filesystem.
  *
- * Real file content lives in a Nodepod `MemoryVolume`, which is deliberately the
+ * Real file content lives in the RuntimePod's `MemoryVolume`, deliberately the
  * *same* volume the Node.js worker processes see — so a file written by `echo`
  * is readable by `require('fs')` inside a spawned script, and vice versa.
  *
@@ -746,7 +746,7 @@ declare function createContext(init: ContextInit): ExecContext;
  * The container's network stack.
  *
  * There is no real socket layer: HTTP servers started inside the container are
- * registered with Nodepod's request proxy, and this module is the routing and
+ * registered with the RuntimePod's request proxy, and this module is the routing and
  * name-resolution layer on top — interfaces for `ip`/`ifconfig`, a hosts file
  * resolver, a listening-port table for `ss`/`netstat`, and an outbound policy
  * that decides whether `curl https://example.com` is allowed to touch the real
@@ -805,7 +805,7 @@ declare class NetworkStack {
     registerListener(port: number, info: Omit<ListeningPort, "port" | "since">): void;
     unregisterListener(port: number): void;
     listening(): ListeningPort[];
-    /** Ports Nodepod's proxy has registered for this instance. */
+    /** Ports the pod's proxy has registered for this instance. */
     private knownPodPorts;
     /** True when something inside the container answers on `port`. */
     isPortOpen(port: number, timeoutMs?: number): Promise<boolean>;
@@ -1732,7 +1732,7 @@ declare class Container {
     /**
      * Deliver a request whose body is bytes, without letting them become text.
      *
-     * Nodepod's public `request()` runs the body through `toString("utf8")` on
+     * A RuntimePod's public `request()` may run the body through `toString("utf8")` on
      * its way in, so anything above `0x7f` is replaced: a five-byte payload
      * containing `0x89` and `0xff` arrives as nine. That silently destroys every
      * upload — an image or a video reaches the server the wrong size and no
@@ -1772,7 +1772,7 @@ declare class Container {
     get cwd(): string;
     get env(): Record<string, string>;
     private assertActive;
-    /** Tear down every process and release the Nodepod instance. */
+    /** Tear down every process and release the runtime pod. */
     dispose(): void;
     get isDisposed(): boolean;
 }
@@ -2114,17 +2114,16 @@ interface RootfsOptions {
 declare function buildRootfs(vfs: Vfs, opts?: RootfsOptions): void;
 
 /**
- * The Node.js runtime, backed by Nodepod.
+ * The Node.js command adapter, backed by the clean-room RuntimePod.
  *
- * Nodepod runs the script in an isolated worker over the *same* memory volume
+ * The pod runs the script over the *same* memory volume
  * the container's filesystem uses, so `require('fs')` inside a script sees the
  * files `echo` and `tar` created, and anything the script writes is visible to
  * the shell afterwards.
  *
- * Two gaps in the underlying `spawn` are papered over here:
+ * Two details of the underlying `spawn` are handled here:
  *  - only `node` resolves as a command, so everything else is dispatched by our
- *    own kernel rather than being handed to Nodepod's shell (which hangs on an
- *    unknown command);
+ *    own kernel rather than being handed to the Node process runner;
  *  - the worker's stdin has no end-of-stream signal, so when a pipeline feeds
  *    a script we materialise stdin as a file and install a real stdin stream
  *    over it before the script loads.
@@ -2484,6 +2483,8 @@ declare function createCoreModules(options: CoreModulesOptions): {
      * script that has simply finished.
      */
     pendingHandles(): number;
+    /** Active timers which called `unref()` and therefore only merit startup grace. */
+    pendingUnrefed(): number;
 };
 
 interface EsmTransformResult {
@@ -2570,9 +2571,18 @@ declare class LocalRuntimePod implements RuntimePod {
     private readonly aliases;
     private readonly modules;
     private readonly esbuild;
+    private rolldownBinding;
     private constructor();
     static boot(options?: LocalRuntimeOptions): Promise<LocalRuntimePod>;
     spawn(command: string, args?: string[], options?: Record<string, unknown>): Promise<RuntimeProcess>;
+    /**
+     * Rolldown's JavaScript API synchronously requires its compiled binding.
+     * When a project contains Rolldown, preload the official WASI build in the
+     * host and expose it through the module override table before evaluation.
+     * Keeping this demand-driven avoids adding WASM startup cost to ordinary
+     * shells and Node programs.
+     */
+    private prepareRolldown;
     /**
      * Wait until the process has either started serving or genuinely run out of
      * work.
@@ -2607,6 +2617,10 @@ interface RegistryManifest {
     };
     dependencies?: Record<string, string>;
     optionalDependencies?: Record<string, string>;
+    os?: string[];
+    cpu?: string[];
+    libc?: string[];
+    main?: string;
     bin?: string | Record<string, string>;
 }
 interface CleanInstallerOptions {

package/dist/index.d.ts

@@ -196,7 +196,7 @@ interface DirEntry {
 /**
  * The container's virtual filesystem.
  *
- * Real file content lives in a Nodepod `MemoryVolume`, which is deliberately the
+ * Real file content lives in the RuntimePod's `MemoryVolume`, deliberately the
  * *same* volume the Node.js worker processes see — so a file written by `echo`
  * is readable by `require('fs')` inside a spawned script, and vice versa.
  *
@@ -746,7 +746,7 @@ declare function createContext(init: ContextInit): ExecContext;
  * The container's network stack.
  *
  * There is no real socket layer: HTTP servers started inside the container are
- * registered with Nodepod's request proxy, and this module is the routing and
+ * registered with the RuntimePod's request proxy, and this module is the routing and
  * name-resolution layer on top — interfaces for `ip`/`ifconfig`, a hosts file
  * resolver, a listening-port table for `ss`/`netstat`, and an outbound policy
  * that decides whether `curl https://example.com` is allowed to touch the real
@@ -805,7 +805,7 @@ declare class NetworkStack {
     registerListener(port: number, info: Omit<ListeningPort, "port" | "since">): void;
     unregisterListener(port: number): void;
     listening(): ListeningPort[];
-    /** Ports Nodepod's proxy has registered for this instance. */
+    /** Ports the pod's proxy has registered for this instance. */
     private knownPodPorts;
     /** True when something inside the container answers on `port`. */
     isPortOpen(port: number, timeoutMs?: number): Promise<boolean>;
@@ -1732,7 +1732,7 @@ declare class Container {
     /**
      * Deliver a request whose body is bytes, without letting them become text.
      *
-     * Nodepod's public `request()` runs the body through `toString("utf8")` on
+     * A RuntimePod's public `request()` may run the body through `toString("utf8")` on
      * its way in, so anything above `0x7f` is replaced: a five-byte payload
      * containing `0x89` and `0xff` arrives as nine. That silently destroys every
      * upload — an image or a video reaches the server the wrong size and no
@@ -1772,7 +1772,7 @@ declare class Container {
     get cwd(): string;
     get env(): Record<string, string>;
     private assertActive;
-    /** Tear down every process and release the Nodepod instance. */
+    /** Tear down every process and release the runtime pod. */
     dispose(): void;
     get isDisposed(): boolean;
 }
@@ -2114,17 +2114,16 @@ interface RootfsOptions {
 declare function buildRootfs(vfs: Vfs, opts?: RootfsOptions): void;
 
 /**
- * The Node.js runtime, backed by Nodepod.
+ * The Node.js command adapter, backed by the clean-room RuntimePod.
  *
- * Nodepod runs the script in an isolated worker over the *same* memory volume
+ * The pod runs the script over the *same* memory volume
  * the container's filesystem uses, so `require('fs')` inside a script sees the
  * files `echo` and `tar` created, and anything the script writes is visible to
  * the shell afterwards.
  *
- * Two gaps in the underlying `spawn` are papered over here:
+ * Two details of the underlying `spawn` are handled here:
  *  - only `node` resolves as a command, so everything else is dispatched by our
- *    own kernel rather than being handed to Nodepod's shell (which hangs on an
- *    unknown command);
+ *    own kernel rather than being handed to the Node process runner;
  *  - the worker's stdin has no end-of-stream signal, so when a pipeline feeds
  *    a script we materialise stdin as a file and install a real stdin stream
  *    over it before the script loads.
@@ -2484,6 +2483,8 @@ declare function createCoreModules(options: CoreModulesOptions): {
      * script that has simply finished.
      */
     pendingHandles(): number;
+    /** Active timers which called `unref()` and therefore only merit startup grace. */
+    pendingUnrefed(): number;
 };
 
 interface EsmTransformResult {
@@ -2570,9 +2571,18 @@ declare class LocalRuntimePod implements RuntimePod {
     private readonly aliases;
     private readonly modules;
     private readonly esbuild;
+    private rolldownBinding;
     private constructor();
     static boot(options?: LocalRuntimeOptions): Promise<LocalRuntimePod>;
     spawn(command: string, args?: string[], options?: Record<string, unknown>): Promise<RuntimeProcess>;
+    /**
+     * Rolldown's JavaScript API synchronously requires its compiled binding.
+     * When a project contains Rolldown, preload the official WASI build in the
+     * host and expose it through the module override table before evaluation.
+     * Keeping this demand-driven avoids adding WASM startup cost to ordinary
+     * shells and Node programs.
+     */
+    private prepareRolldown;
     /**
      * Wait until the process has either started serving or genuinely run out of
      * work.
@@ -2607,6 +2617,10 @@ interface RegistryManifest {
     };
     dependencies?: Record<string, string>;
     optionalDependencies?: Record<string, string>;
+    os?: string[];
+    cpu?: string[];
+    libc?: string[];
+    main?: string;
     bin?: string | Record<string, string>;
 }
 interface CleanInstallerOptions {

package/dist/index.js

@@ -6806,7 +6806,7 @@ var NetworkStack = class {
     }
     return [...out.values()].sort((a, b) => a.port - b.port);
   }
-  /** Ports Nodepod's proxy has registered for this instance. */
+  /** Ports the pod's proxy has registered for this instance. */
   knownPodPorts() {
     try {
       return this.pod.proxy.activePorts(this.pod.instanceId) ?? [];
@@ -18163,7 +18163,33 @@ function ffmpegCommands() {
   return [ffmpeg, ffprobe];
 }
 var platformBuffer = globalThis.Buffer;
-var Buffer2 = platformBuffer ?? Buffer$1;
+var Buffer2 = platformBuffer ?? addBase64UrlSupport(Buffer$1);
+function addBase64UrlSupport(BufferClass) {
+  const target = BufferClass;
+  if (target.__sandboxedBase64Url) return BufferClass;
+  Object.defineProperty(target, "__sandboxedBase64Url", { value: true });
+  const from = target.from.bind(target);
+  target.from = (value, encodingOrOffset, length) => from(value, normalizeEncoding(encodingOrOffset), length);
+  const byteLength = target.byteLength.bind(target);
+  target.byteLength = (value, encoding) => byteLength(value, normalizeEncoding(encoding));
+  const isEncoding = target.isEncoding?.bind(target);
+  if (isEncoding) target.isEncoding = (encoding) => encoding.toLowerCase() === "base64url" || isEncoding(encoding);
+  const toString = target.prototype.toString;
+  target.prototype.toString = function(encoding, start2, end) {
+    if (encoding?.toLowerCase() !== "base64url") return toString.call(this, encoding, start2, end);
+    return toString.call(this, "base64", start2, end).replace(/=/g, "").replace(/\+/g, "-").replace(/\//g, "_");
+  };
+  const write = target.prototype.write;
+  target.prototype.write = function(...args) {
+    const index = typeof args[1] === "string" ? 1 : typeof args[2] === "string" ? 2 : 3;
+    if (typeof args[index] === "string") args[index] = normalizeEncoding(args[index]);
+    return write.apply(this, args);
+  };
+  return BufferClass;
+}
+function normalizeEncoding(value) {
+  return typeof value === "string" && value.toLowerCase() === "base64url" ? "base64" : value;
+}
 
 // src/pkg/clean-installer.ts
 init_path();
@@ -18205,6 +18231,9 @@ var CleanPackageInstaller = class _CleanPackageInstaller {
     const version = resolveVersion(metadata, range);
     const manifest = metadata.versions[version];
     if (!manifest) throw new Error(`No matching version found for ${name}@${range}`);
+    if (!supportsPlatform(manifest)) {
+      throw new Error(`${name}@${version} is not compatible with linux/x64/glibc`);
+    }
     const identity = `${name}@${version}`;
     const target = join(modulesRoot, name);
     const installed2 = this.tryReadJson(join(target, "package.json"));
@@ -18299,6 +18328,15 @@ var CleanPackageInstaller = class _CleanPackageInstaller {
     }
   }
 };
+function supportsPlatform(manifest) {
+  return !manifest.main?.endsWith(".node") && platformListAllows(manifest.os, "linux") && platformListAllows(manifest.cpu, "x64") && platformListAllows(manifest.libc, "glibc");
+}
+function platformListAllows(values, current) {
+  if (!values?.length) return true;
+  if (values.includes(`!${current}`)) return false;
+  const positive = values.filter((value) => !value.startsWith("!"));
+  return positive.length === 0 || positive.includes(current) || positive.includes("any");
+}
 function resolveVersion(metadata, range) {
   const tag2 = metadata["dist-tags"]?.[range];
   if (tag2) return tag2;
@@ -22259,6 +22297,7 @@ function createCoreModules(options) {
     globals,
     process: processObject,
     pendingHandles: timers.pending,
+    pendingUnrefed: timers.pendingUnrefed,
     writeStdin: (data) => {
       if (options.interactiveStdin) stdin.write(data);
     },
@@ -22854,33 +22893,78 @@ var ERRNO_CONSTANTS = {
 };
 function createTrackedTimers() {
   const live = /* @__PURE__ */ new Set();
-  const track = (handle, repeating) => {
+  const unrefed = /* @__PURE__ */ new Set();
+  const states = /* @__PURE__ */ new WeakMap();
+  const track = (native) => {
+    const state = { native, active: true, referenced: true };
+    const handle = {
+      ref() {
+        state.referenced = true;
+        unrefed.delete(handle);
+        if (state.active) live.add(handle);
+        state.native?.ref?.();
+        return handle;
+      },
+      unref() {
+        state.referenced = false;
+        live.delete(handle);
+        if (state.active) unrefed.add(handle);
+        state.native?.unref?.();
+        return handle;
+      },
+      hasRef: () => state.referenced,
+      refresh() {
+        state.native?.refresh?.();
+        return handle;
+      },
+      [Symbol.toPrimitive]: () => Number(state.native)
+    };
+    states.set(handle, state);
     live.add(handle);
     return handle;
   };
+  const complete = (handle) => {
+    const state = states.get(handle);
+    if (state) state.active = false;
+    live.delete(handle);
+    unrefed.delete(handle);
+  };
   const setTimeoutTracked = (fn, delay, ...args) => {
-    const handle = setTimeout(
+    let handle;
+    const native = setTimeout(
       (...inner) => {
-        live.delete(handle);
+        complete(handle);
         fn(...inner);
       },
       delay,
       ...args
     );
-    live.add(handle);
+    handle = track(native);
     return handle;
   };
   const setIntervalTracked = (fn, delay, ...args) => track(setInterval(fn, delay, ...args));
   const hostSetImmediate = globalThis.setImmediate;
   const setImmediateTracked = (fn, ...args) => {
-    const handle = hostSetImmediate ? hostSetImmediate((...inner) => {
-      live.delete(handle);
+    if (!hostSetImmediate) return setTimeoutTracked(fn, 0, ...args);
+    let handle;
+    const native = hostSetImmediate((...inner) => {
+      complete(handle);
       fn(...inner);
-    }, ...args) : setTimeoutTracked(fn, 0, ...args);
-    live.add(handle);
+    }, ...args);
+    handle = track(native);
     return handle;
   };
   const clear2 = (handle, native) => {
+    if (typeof handle === "object" && handle !== null) {
+      const state = states.get(handle);
+      if (state) {
+        state.active = false;
+        live.delete(handle);
+        unrefed.delete(handle);
+        native(state.native);
+        return;
+      }
+    }
     live.delete(handle);
     native(handle);
   };
@@ -22893,7 +22977,8 @@ function createTrackedTimers() {
       clearInterval: (handle) => clear2(handle, clearInterval),
       clearImmediate: (handle) => clear2(handle, globalThis.clearImmediate ?? clearTimeout)
     },
-    pending: () => live.size
+    pending: () => live.size,
+    pendingUnrefed: () => unrefed.size
   };
 }
 function createTimerPromises() {
@@ -23415,7 +23500,26 @@ function ensureProcessGlobal() {
   });
 }
 
+// src/runtime/host-rolldown.ts
+async function loadHostRolldownBinding() {
+  if (typeof window !== "undefined" && globalThis.crossOriginIsolated !== true) {
+    throw new Error(
+      "Vite 8/Rolldown requires cross-origin isolation. Serve the app with Cross-Origin-Opener-Policy: same-origin and Cross-Origin-Embedder-Policy: require-corp headers."
+    );
+  }
+  try {
+    const loaded = await import('@rolldown/binding-wasm32-wasi');
+    return "__fs" in loaded ? { ...loaded } : loaded.default ?? loaded;
+  } catch (error) {
+    if (typeof process !== "undefined" && process.env?.SANDBOXEDJS_DEBUG) {
+      console.error("[sandboxedjs] Rolldown WASI binding unavailable:", error);
+    }
+    throw new Error("The optional Rolldown WASI binding could not be loaded.", { cause: error });
+  }
+}
+
 // src/runtime/local-runtime-pod.ts
+init_path();
 var WASM_ALIASES = {
   esbuild: "esbuild-wasm",
   rollup: "@rollup/wasm-node"
@@ -23666,6 +23770,7 @@ var LocalRuntimePod = class _LocalRuntimePod {
   aliases;
   modules;
   esbuild;
+  rolldownBinding;
   constructor(options) {
     ensureProcessGlobal();
     this.workdir = options.workdir ?? "/";
@@ -23699,6 +23804,7 @@ var LocalRuntimePod = class _LocalRuntimePod {
     const env2 = { ...this.env, ...isRecord(options.env) ? options.env : {} };
     const owner = `${this.instanceId}:${Math.random().toString(36).slice(2)}`;
     return new LocalProcess(async (proc) => {
+      await this.prepareRolldown(cwd, env2);
       const untrack = trackProcess(proc);
       let requestedExit = 0;
       let engine;
@@ -23735,7 +23841,7 @@ var LocalRuntimePod = class _LocalRuntimePod {
       });
       try {
         await engine.run(script);
-        await this.settle(owner, core.pendingHandles, core.readingStdin);
+        await this.settle(owner, core.pendingHandles, core.pendingUnrefed, core.readingStdin);
         if (this.router.activePorts(owner).length) {
           await proc.waitForKill();
           return 137;
@@ -23747,6 +23853,25 @@ var LocalRuntimePod = class _LocalRuntimePod {
       }
     });
   }
+  /**
+   * Rolldown's JavaScript API synchronously requires its compiled binding.
+   * When a project contains Rolldown, preload the official WASI build in the
+   * host and expose it through the module override table before evaluation.
+   * Keeping this demand-driven avoids adding WASM startup cost to ordinary
+   * shells and Node programs.
+   */
+  async prepareRolldown(cwd, env2) {
+    const specifier = "@rolldown/binding-wasm32-wasi";
+    if (!this.modules[specifier] && packageInstalled(this.volume, cwd, "rolldown")) {
+      this.rolldownBinding ??= loadHostRolldownBinding();
+      const binding = await this.rolldownBinding;
+      if (binding) this.modules[specifier] = binding;
+    }
+    if (this.modules[specifier]) {
+      syncRolldownFileSystem(this.modules[specifier], this.volume, cwd);
+      env2.NAPI_RS_FORCE_WASI ??= "true";
+    }
+  }
   /**
    * Wait until the process has either started serving or genuinely run out of
    * work.
@@ -23762,11 +23887,17 @@ var LocalRuntimePod = class _LocalRuntimePod {
    * A plain script that has genuinely finished falls straight through both,
    * costing a handful of empty turns.
    */
-  async settle(owner, pendingHandles, readingStdin) {
+  async settle(owner, pendingHandles, pendingUnrefed, readingStdin) {
     for (let turn = 0; turn < DRAIN_TURNS; turn++) {
       if (this.router.activePorts(owner).length) return;
       await new Promise((resolve2) => setTimeout(resolve2, 0));
     }
+    if (pendingHandles() === 0 && pendingUnrefed() > 0 && !readingStdin()) {
+      const deadline = Date.now() + 1e3;
+      while (!this.router.activePorts(owner).length && Date.now() < deadline) {
+        await new Promise((resolve2) => setTimeout(resolve2, 5));
+      }
+    }
     while (!this.router.activePorts(owner).length && (pendingHandles() > 0 || readingStdin())) {
       await new Promise((resolve2) => setTimeout(resolve2, 5));
     }
@@ -23819,6 +23950,60 @@ function formatError(error) {
 function isRecord(value) {
   return typeof value === "object" && value !== null && !Array.isArray(value);
 }
+function packageInstalled(volume, cwd, wanted) {
+  for (let dir3 = clean(cwd); ; dir3 = dirname(dir3)) {
+    if (packageTreeContains(volume, join(dir3, "node_modules"), wanted, /* @__PURE__ */ new Set())) return true;
+    if (dir3 === "/") return false;
+  }
+}
+function packageTreeContains(volume, modulesRoot, wanted, visited) {
+  if (visited.has(modulesRoot) || !directory(volume, modulesRoot)) return false;
+  visited.add(modulesRoot);
+  if (directory(volume, join(modulesRoot, wanted))) return true;
+  for (const entry of volume.readdirSync(modulesRoot)) {
+    if (entry === ".bin") continue;
+    const first = join(modulesRoot, entry);
+    const packages = entry.startsWith("@") && directory(volume, first) ? volume.readdirSync(first).map((name) => join(first, name)) : [first];
+    for (const root of packages) {
+      if (directory(volume, root) && packageTreeContains(volume, join(root, "node_modules"), wanted, visited)) {
+        return true;
+      }
+    }
+  }
+  return false;
+}
+function directory(volume, path) {
+  try {
+    return volume.lstatSync(path).isDirectory();
+  } catch {
+    return false;
+  }
+}
+function syncRolldownFileSystem(binding, volume, root) {
+  const fs = binding?.__fs;
+  if (!fs?.mkdirSync || !fs?.writeFileSync) return;
+  try {
+    fs.rmSync?.(root, { recursive: true, force: true });
+  } catch {
+  }
+  const copy = (path) => {
+    const stat2 = volume.lstatSync(path);
+    if (stat2.isDirectory()) {
+      fs.mkdirSync(path, { recursive: true });
+      for (const name of volume.readdirSync(path)) copy(join(path, name));
+    } else if (stat2.isSymbolicLink()) {
+      fs.mkdirSync(dirname(path), { recursive: true });
+      try {
+        fs.symlinkSync(volume.readlinkSync(path), path);
+      } catch {
+      }
+    } else if (!path.endsWith(".node")) {
+      fs.mkdirSync(dirname(path), { recursive: true });
+      fs.writeFileSync(path, volume.readFileSync(path));
+    }
+  };
+  copy(clean(root));
+}
 
 // src/container/container.ts
 var Container = class _Container {
@@ -24162,7 +24347,7 @@ var Container = class _Container {
   /**
    * Deliver a request whose body is bytes, without letting them become text.
    *
-   * Nodepod's public `request()` runs the body through `toString("utf8")` on
+   * A RuntimePod's public `request()` may run the body through `toString("utf8")` on
    * its way in, so anything above `0x7f` is replaced: a five-byte payload
    * containing `0x89` and `0xff` arrives as nine. That silently destroys every
    * upload — an image or a video reaches the server the wrong size and no
@@ -24264,7 +24449,7 @@ var Container = class _Container {
   assertActive() {
     if (this.disposed) throw new Error("container has been disposed");
   }
-  /** Tear down every process and release the Nodepod instance. */
+  /** Tear down every process and release the runtime pod. */
   dispose() {
     if (this.disposed) return;
     this.disposed = true;