sandboxedjs 0.1.47 → 0.1.49

package/dist/index.d.cts

@@ -1,5 +1,8 @@
-import { S as Shell, a as ShellIO, b as Session, V as Vfs, c as Cred, N as Node, d as Command, K as Kernel, R as RuntimeVolume, e as VolumeStat, f as VolumeStats, g as RuntimeHttpResponse, h as SpawnChild, i as SyncSpawn, j as RuntimePod, k as RuntimePackageInstaller, l as ChildSpawnConfig, m as ChildHandle, n as RuntimeProcess, o as RuntimeSocketPeer, p as RuntimeConnection, E as ExecContext, O as OutputStream, C as Container, q as createContainer } from './container-DyRF-bY0.cjs';
-export { B as BufferSink, r as CPythonOptions, s as CallbackSink, t as CommandRegistry, u as ContainerFs, v as ContainerOptions, w as ContextInit, D as DirEntry, x as Env, y as ExecOptions, z as ExecResult, F as FileData, A as FileInput, G as FileOutput, H as GroupEntry, I as HttpResponse, J as InputStream, L as Job, M as KernelOptions, P as ListeningPort, Q as MountEntry, T as NetInterface, U as NetworkOptions, W as NetworkStack, X as NullInput, Y as NullOutput, Z as PYTHON_VERSION, _ as PasswdEntry, $ as Pipe, a0 as Process, a1 as ProcessKind, a2 as ProcessOptions, a3 as ProcessState, a4 as ProcessTable, a5 as PythonOptions, a6 as ROOT_CRED, a7 as ResolvedExecutable, a8 as RunOptions, a9 as RunResult, aa as RuntimeProcessManager, ab as RuntimeProcessResult, ac as SessionInit, ad as SessionResult, ae as SessionRunOptions, af as ShellExit, ag as ShellInit, ah as ShellOptions, ai as SpawnHandle, aj as Stats, ak as Stdio, al as TeeOutput, am as UserDatabase, an as Variables, ao as VirtualNode, ap as VirtualProvider, aq as WriteOptions, ar as applyChmod, as as braceExpand, at as captureStdio, au as configureCPython, av as configurePython, aw as createChildProcessModule, ax as createContext, ay as defineCommand, az as expandWord, aA as expandWords, aB as formatMode, aC as isCPythonAvailable, aD as isPythonAvailable, aE as makeCred, aF as octalMode, aG as parseUmask, aH as resetPidCounter, aI as shellQuote } from './container-DyRF-bY0.cjs';
+import { S as Shell, a as ShellIO, b as Session, N as Node, c as Command, K as Kernel, E as ExecContext, O as OutputStream, C as Container, d as createContainer } from './container-Dg8NwBc7.cjs';
+export { B as BufferSink, e as CPythonOptions, f as CallbackSink, g as CommandRegistry, h as ContainerFs, i as ContainerOptions, j as ContextInit, k as Env, l as ExecOptions, m as ExecResult, F as FileData, n as FileInput, o as FileOutput, G as GroupEntry, H as HttpResponse, I as InputStream, J as Job, p as KernelOptions, L as ListeningPort, M as MANIFEST_FORMAT, q as MANIFEST_SCHEMA_VERSION, r as MountEntry, s as NetInterface, t as NetworkOptions, u as NetworkStack, v as NullInput, w as NullOutput, P as PYTHON_VERSION, x as PasswdEntry, y as Pipe, z as Process, A as ProcessKind, D as ProcessOptions, Q as ProcessState, R as ProcessTable, T as PythonCapabilities, U as PythonOptions, V as PythonProfile, W as PythonRuntimeManifest, X as ResolvedExecutable, Y as RunOptions, Z as RunResult, _ as SessionInit, $ as SessionResult, a0 as SessionRunOptions, a1 as ShellExit, a2 as ShellInit, a3 as ShellOptions, a4 as SpawnHandle, a5 as Stdio, a6 as TeeOutput, a7 as UserDatabase, a8 as Variables, a9 as braceExpand, aa as captureStdio, ab as configureCPython, ac as configurePython, ad as createContext, ae as defineCommand, af as expandWord, ag as expandWords, ah as isCPythonAvailable, ai as isPythonAvailable, aj as resetPidCounter, ak as shellQuote, al as validateManifest } from './container-Dg8NwBc7.cjs';
+import { V as Vfs, C as Cred, R as RuntimeVolume, a as RuntimeHttpResponse, S as SpawnChild, b as SyncSpawn, c as VolumeStat, d as VolumeStats, e as RuntimePod, f as RuntimePackageInstaller, g as ChildSpawnConfig, h as ChildHandle, i as RuntimeProcess, j as RuntimeSocketPeer, k as RuntimeConnection } from './vfs-DzEcPbMY.cjs';
+export { D as DirEntry, l as ROOT_CRED, m as RuntimeProcessManager, n as RuntimeProcessResult, o as Stats, p as VirtualNode, q as VirtualProvider, W as WriteOptions, r as applyChmod, s as createChildProcessModule, t as formatMode, u as makeCred, v as octalMode, w as parseUmask } from './vfs-DzEcPbMY.cjs';
+import { M as MemoryVolume, a as MemoryVolumeSnapshotEntry } from './memory-volume-DCzGZFJb.cjs';
 import EventEmitter from 'events/events.js';
 import streamModule from 'stream-browserify';
 
@@ -419,69 +422,6 @@ declare const NODE_VERSION = "v22.12.0";
 
 declare const NPM_VERSION = "10.9.0";
 
-type NodeKind = "file" | "directory" | "symlink";
-interface MemoryVolumeSnapshotEntry {
-    path: string;
-    ino: number;
-    kind: NodeKind;
-    mode: number;
-    uid: number;
-    gid: number;
-    nlink: number;
-    data: number[];
-    target: string;
-    atimeMs: number;
-    mtimeMs: number;
-    ctimeMs: number;
-    birthtimeMs: number;
-}
-/** Browser-safe, synchronous in-memory filesystem used by the new runtime. */
-declare class MemoryVolume implements RuntimeVolume {
-    private readonly entries;
-    private nextIno;
-    constructor();
-    readFileSync(path: string): Uint8Array;
-    writeFileSync(path: string, data: string | Uint8Array): void;
-    appendFileSync(path: string, data: string | Uint8Array): void;
-    readdirSync(path: string): string[];
-    lstatSync(path: string): VolumeStat;
-    readlinkSync(path: string): string;
-    mkdirSync(path: string, options?: {
-        mode?: number;
-    }): void;
-    rmdirSync(path: string): void;
-    unlinkSync(path: string): void;
-    renameSync(from: string, to: string): void;
-    symlinkSync(target: string, path: string): void;
-    linkSync(existing: string, path: string): void;
-    truncateSync(path: string, length?: number): void;
-    chmodSync(path: string, mode: number): void;
-    lchmodSync(path: string, mode: number): void;
-    chownSync(path: string, uid: number, gid: number): void;
-    lchownSync(path: string, uid: number, gid: number): void;
-    utimesSync(path: string, atime: Date, mtime: Date): void;
-    getStats(): VolumeStats;
-    snapshot(): MemoryVolumeSnapshotEntry[];
-    restore(snapshot: MemoryVolumeSnapshotEntry[]): void;
-    /** Serializable representation used by RuntimePod snapshots. */
-    export(): Array<{
-        path: string;
-        kind: NodeKind;
-        mode: number;
-        uid: number;
-        gid: number;
-        data?: number[];
-        target?: string;
-    }>;
-    private setMode;
-    private setOwner;
-    private key;
-    private required;
-    private requireParent;
-    private inode;
-    private touchChanged;
-}
-
 /**
  * How a specifier was requested. Node resolves the same package differently
  * for the two, and a dual package depends on that: `is-promise` exports a
@@ -993,6 +933,10 @@ declare class MirroringVolume implements RuntimeVolume {
     readFileSync(path: string): Uint8Array;
     readdirSync(path: string): string[];
     lstatSync(path: string): VolumeStat;
+    /** The mirror's copy of a file, if it has one and we are allowed to look. */
+    private fromMirror;
+    /** The mirror's entries for a directory, for merging into a listing. */
+    private mirrorNames;
     readlinkSync(path: string): string;
     getStats(): VolumeStats;
     writeFileSync(path: string, data: string | Uint8Array): void;
@@ -1002,7 +946,35 @@ declare class MirroringVolume implements RuntimeVolume {
     }): void;
     rmdirSync(path: string): void;
     unlinkSync(path: string): void;
+    /**
+     * Rename, carrying anything the mirrored engine put there.
+     *
+     * This is the operation the dependency optimizer is built on, and the one
+     * that used to destroy its output. Vite bundles into a temporary directory
+     * and renames it into place when it is complete — but only half of that
+     * directory is ever on this volume. Vite writes `_metadata.json` and
+     * `package.json` through here; Rolldown writes the actual bundles through
+     * WASI into the mirror. Renaming moved the half that was here and then
+     * `sync(from)` deleted the half that was not, because from this side the
+     * source directory had simply gone.
+     *
+     * What survived was a `deps` directory holding metadata that described five
+     * optimized dependencies and contained none of them — which Vite reports, on
+     * the failed read, as `504 Outdated Optimize Dep`. Nothing in that message is
+     * true, and following it leads to hashes rather than to a missing file.
+     *
+     * So the mirror's side of the move is collected first, and lands here as
+     * part of the rename.
+     */
     renameSync(from: string, to: string): void;
+    /**
+     * Copy whatever the mirror holds under `from` into this volume under `to`.
+     *
+     * Deliberately not filtered the way {@link absorb} is: this walks one
+     * directory that is being renamed, not the whole project, so the subtree is
+     * small and `node_modules` is exactly where the interesting case lives.
+     */
+    private collect;
     symlinkSync(target: string, path: string): void;
     linkSync(existing: string, path: string): void;
     truncateSync(path: string, length?: number): void;
@@ -1059,6 +1031,21 @@ declare class LocalRuntimePod implements RuntimePod {
     readonly proxy: {
         activePorts: (_instanceId?: string) => number[];
     };
+    /**
+     * Bind a port to a server that is not a JavaScript one.
+     *
+     * The request is flattened to bytes and headers before it crosses the
+     * boundary, because the far side is a different language and a Node stream
+     * object cannot go there. What comes back is a complete response; streaming
+     * is a later protocol, and pretending to stream over a buffered path would
+     * only move the surprise.
+     */
+    serveExternal(port: number, owner: string, handler: (request: {
+        method: string;
+        path: string;
+        headers: Record<string, string>;
+        body: Uint8Array;
+    }) => Promise<RuntimeHttpResponse>): () => void;
     /**
      * Mutable on purpose: a container replaces `spawn` so that children resolve
      * against the kernel's PATH. Left alone, it runs `node` and reports anything

package/dist/index.d.ts

@@ -1,5 +1,8 @@
-import { S as Shell, a as ShellIO, b as Session, V as Vfs, c as Cred, N as Node, d as Command, K as Kernel, R as RuntimeVolume, e as VolumeStat, f as VolumeStats, g as RuntimeHttpResponse, h as SpawnChild, i as SyncSpawn, j as RuntimePod, k as RuntimePackageInstaller, l as ChildSpawnConfig, m as ChildHandle, n as RuntimeProcess, o as RuntimeSocketPeer, p as RuntimeConnection, E as ExecContext, O as OutputStream, C as Container, q as createContainer } from './container-DyRF-bY0.js';
-export { B as BufferSink, r as CPythonOptions, s as CallbackSink, t as CommandRegistry, u as ContainerFs, v as ContainerOptions, w as ContextInit, D as DirEntry, x as Env, y as ExecOptions, z as ExecResult, F as FileData, A as FileInput, G as FileOutput, H as GroupEntry, I as HttpResponse, J as InputStream, L as Job, M as KernelOptions, P as ListeningPort, Q as MountEntry, T as NetInterface, U as NetworkOptions, W as NetworkStack, X as NullInput, Y as NullOutput, Z as PYTHON_VERSION, _ as PasswdEntry, $ as Pipe, a0 as Process, a1 as ProcessKind, a2 as ProcessOptions, a3 as ProcessState, a4 as ProcessTable, a5 as PythonOptions, a6 as ROOT_CRED, a7 as ResolvedExecutable, a8 as RunOptions, a9 as RunResult, aa as RuntimeProcessManager, ab as RuntimeProcessResult, ac as SessionInit, ad as SessionResult, ae as SessionRunOptions, af as ShellExit, ag as ShellInit, ah as ShellOptions, ai as SpawnHandle, aj as Stats, ak as Stdio, al as TeeOutput, am as UserDatabase, an as Variables, ao as VirtualNode, ap as VirtualProvider, aq as WriteOptions, ar as applyChmod, as as braceExpand, at as captureStdio, au as configureCPython, av as configurePython, aw as createChildProcessModule, ax as createContext, ay as defineCommand, az as expandWord, aA as expandWords, aB as formatMode, aC as isCPythonAvailable, aD as isPythonAvailable, aE as makeCred, aF as octalMode, aG as parseUmask, aH as resetPidCounter, aI as shellQuote } from './container-DyRF-bY0.js';
+import { S as Shell, a as ShellIO, b as Session, N as Node, c as Command, K as Kernel, E as ExecContext, O as OutputStream, C as Container, d as createContainer } from './container-DBMPLbUu.js';
+export { B as BufferSink, e as CPythonOptions, f as CallbackSink, g as CommandRegistry, h as ContainerFs, i as ContainerOptions, j as ContextInit, k as Env, l as ExecOptions, m as ExecResult, F as FileData, n as FileInput, o as FileOutput, G as GroupEntry, H as HttpResponse, I as InputStream, J as Job, p as KernelOptions, L as ListeningPort, M as MANIFEST_FORMAT, q as MANIFEST_SCHEMA_VERSION, r as MountEntry, s as NetInterface, t as NetworkOptions, u as NetworkStack, v as NullInput, w as NullOutput, P as PYTHON_VERSION, x as PasswdEntry, y as Pipe, z as Process, A as ProcessKind, D as ProcessOptions, Q as ProcessState, R as ProcessTable, T as PythonCapabilities, U as PythonOptions, V as PythonProfile, W as PythonRuntimeManifest, X as ResolvedExecutable, Y as RunOptions, Z as RunResult, _ as SessionInit, $ as SessionResult, a0 as SessionRunOptions, a1 as ShellExit, a2 as ShellInit, a3 as ShellOptions, a4 as SpawnHandle, a5 as Stdio, a6 as TeeOutput, a7 as UserDatabase, a8 as Variables, a9 as braceExpand, aa as captureStdio, ab as configureCPython, ac as configurePython, ad as createContext, ae as defineCommand, af as expandWord, ag as expandWords, ah as isCPythonAvailable, ai as isPythonAvailable, aj as resetPidCounter, ak as shellQuote, al as validateManifest } from './container-DBMPLbUu.js';
+import { V as Vfs, C as Cred, R as RuntimeVolume, a as RuntimeHttpResponse, S as SpawnChild, b as SyncSpawn, c as VolumeStat, d as VolumeStats, e as RuntimePod, f as RuntimePackageInstaller, g as ChildSpawnConfig, h as ChildHandle, i as RuntimeProcess, j as RuntimeSocketPeer, k as RuntimeConnection } from './vfs-DzEcPbMY.js';
+export { D as DirEntry, l as ROOT_CRED, m as RuntimeProcessManager, n as RuntimeProcessResult, o as Stats, p as VirtualNode, q as VirtualProvider, W as WriteOptions, r as applyChmod, s as createChildProcessModule, t as formatMode, u as makeCred, v as octalMode, w as parseUmask } from './vfs-DzEcPbMY.js';
+import { M as MemoryVolume, a as MemoryVolumeSnapshotEntry } from './memory-volume-CTOXNJ6n.js';
 import EventEmitter from 'events/events.js';
 import streamModule from 'stream-browserify';
 
@@ -419,69 +422,6 @@ declare const NODE_VERSION = "v22.12.0";
 
 declare const NPM_VERSION = "10.9.0";
 
-type NodeKind = "file" | "directory" | "symlink";
-interface MemoryVolumeSnapshotEntry {
-    path: string;
-    ino: number;
-    kind: NodeKind;
-    mode: number;
-    uid: number;
-    gid: number;
-    nlink: number;
-    data: number[];
-    target: string;
-    atimeMs: number;
-    mtimeMs: number;
-    ctimeMs: number;
-    birthtimeMs: number;
-}
-/** Browser-safe, synchronous in-memory filesystem used by the new runtime. */
-declare class MemoryVolume implements RuntimeVolume {
-    private readonly entries;
-    private nextIno;
-    constructor();
-    readFileSync(path: string): Uint8Array;
-    writeFileSync(path: string, data: string | Uint8Array): void;
-    appendFileSync(path: string, data: string | Uint8Array): void;
-    readdirSync(path: string): string[];
-    lstatSync(path: string): VolumeStat;
-    readlinkSync(path: string): string;
-    mkdirSync(path: string, options?: {
-        mode?: number;
-    }): void;
-    rmdirSync(path: string): void;
-    unlinkSync(path: string): void;
-    renameSync(from: string, to: string): void;
-    symlinkSync(target: string, path: string): void;
-    linkSync(existing: string, path: string): void;
-    truncateSync(path: string, length?: number): void;
-    chmodSync(path: string, mode: number): void;
-    lchmodSync(path: string, mode: number): void;
-    chownSync(path: string, uid: number, gid: number): void;
-    lchownSync(path: string, uid: number, gid: number): void;
-    utimesSync(path: string, atime: Date, mtime: Date): void;
-    getStats(): VolumeStats;
-    snapshot(): MemoryVolumeSnapshotEntry[];
-    restore(snapshot: MemoryVolumeSnapshotEntry[]): void;
-    /** Serializable representation used by RuntimePod snapshots. */
-    export(): Array<{
-        path: string;
-        kind: NodeKind;
-        mode: number;
-        uid: number;
-        gid: number;
-        data?: number[];
-        target?: string;
-    }>;
-    private setMode;
-    private setOwner;
-    private key;
-    private required;
-    private requireParent;
-    private inode;
-    private touchChanged;
-}
-
 /**
  * How a specifier was requested. Node resolves the same package differently
  * for the two, and a dual package depends on that: `is-promise` exports a
@@ -993,6 +933,10 @@ declare class MirroringVolume implements RuntimeVolume {
     readFileSync(path: string): Uint8Array;
     readdirSync(path: string): string[];
     lstatSync(path: string): VolumeStat;
+    /** The mirror's copy of a file, if it has one and we are allowed to look. */
+    private fromMirror;
+    /** The mirror's entries for a directory, for merging into a listing. */
+    private mirrorNames;
     readlinkSync(path: string): string;
     getStats(): VolumeStats;
     writeFileSync(path: string, data: string | Uint8Array): void;
@@ -1002,7 +946,35 @@ declare class MirroringVolume implements RuntimeVolume {
     }): void;
     rmdirSync(path: string): void;
     unlinkSync(path: string): void;
+    /**
+     * Rename, carrying anything the mirrored engine put there.
+     *
+     * This is the operation the dependency optimizer is built on, and the one
+     * that used to destroy its output. Vite bundles into a temporary directory
+     * and renames it into place when it is complete — but only half of that
+     * directory is ever on this volume. Vite writes `_metadata.json` and
+     * `package.json` through here; Rolldown writes the actual bundles through
+     * WASI into the mirror. Renaming moved the half that was here and then
+     * `sync(from)` deleted the half that was not, because from this side the
+     * source directory had simply gone.
+     *
+     * What survived was a `deps` directory holding metadata that described five
+     * optimized dependencies and contained none of them — which Vite reports, on
+     * the failed read, as `504 Outdated Optimize Dep`. Nothing in that message is
+     * true, and following it leads to hashes rather than to a missing file.
+     *
+     * So the mirror's side of the move is collected first, and lands here as
+     * part of the rename.
+     */
     renameSync(from: string, to: string): void;
+    /**
+     * Copy whatever the mirror holds under `from` into this volume under `to`.
+     *
+     * Deliberately not filtered the way {@link absorb} is: this walks one
+     * directory that is being renamed, not the whole project, so the subtree is
+     * small and `node_modules` is exactly where the interesting case lives.
+     */
+    private collect;
     symlinkSync(target: string, path: string): void;
     linkSync(existing: string, path: string): void;
     truncateSync(path: string, length?: number): void;
@@ -1059,6 +1031,21 @@ declare class LocalRuntimePod implements RuntimePod {
     readonly proxy: {
         activePorts: (_instanceId?: string) => number[];
     };
+    /**
+     * Bind a port to a server that is not a JavaScript one.
+     *
+     * The request is flattened to bytes and headers before it crosses the
+     * boundary, because the far side is a different language and a Node stream
+     * object cannot go there. What comes back is a complete response; streaming
+     * is a later protocol, and pretending to stream over a buffered path would
+     * only move the surprise.
+     */
+    serveExternal(port: number, owner: string, handler: (request: {
+        method: string;
+        path: string;
+        headers: Record<string, string>;
+        body: Uint8Array;
+    }) => Promise<RuntimeHttpResponse>): () => void;
     /**
      * Mutable on purpose: a container replaces `spawn` so that children resolve
      * against the kernel's PATH. Left alone, it runs `node` and reports anything