sandboxedjs 0.1.54 → 0.1.55

package/dist/agent.d.cts

@@ -1,5 +1,5 @@
-import { C as Container } from './container-B--ykWn3.cjs';
-import './vfs-DzEcPbMY.cjs';
+import { C as Container } from './container-CY_hS650.cjs';
+import './contracts-CVgctitO.cjs';
 
 /**
  * Structural copies of the LangChain Deep Agents backend contract.

package/dist/agent.d.ts

@@ -1,5 +1,5 @@
-import { C as Container } from './container-BSW6jjlq.js';
-import './vfs-DzEcPbMY.js';
+import { C as Container } from './container-BAgb9I06.js';
+import './contracts-CVgctitO.js';
 
 /**
  * Structural copies of the LangChain Deep Agents backend contract.

package/dist/{container-B--ykWn3.d.cts → container-BAgb9I06.d.ts}

@@ -1,4 +1,4 @@
-import { V as Vfs, C as Cred, e as RuntimePod, D as DirEntry, o as Stats } from './vfs-DzEcPbMY.cjs';
+import { V as Vfs, C as Cred, f as RuntimePod, D as DirEntry, p as Stats } from './contracts-CVgctitO.js';
 
 /**
  * Byte streams for stdin/stdout/stderr, pipelines and redirections.

package/dist/{container-BSW6jjlq.d.ts → container-CY_hS650.d.cts}

@@ -1,4 +1,4 @@
-import { V as Vfs, C as Cred, e as RuntimePod, D as DirEntry, o as Stats } from './vfs-DzEcPbMY.js';
+import { V as Vfs, C as Cred, f as RuntimePod, D as DirEntry, p as Stats } from './contracts-CVgctitO.cjs';
 
 /**
  * Byte streams for stdin/stdout/stderr, pipelines and redirections.

package/dist/{vfs-DzEcPbMY.d.cts → contracts-CVgctitO.d.cts}

@@ -65,141 +65,6 @@ type SyncSpawn = (request: {
 };
 declare function createChildProcessModule(spawnChild: SpawnChild, defaultCwd: () => string, syncSpawn?: SyncSpawn, defaultEnv?: () => Record<string, string>): Record<string, unknown>;
 
-/**
- * Clean-room contracts between SandboxedJS and its JavaScript runtime.
- *
- * These deliberately describe only behavior SandboxedJS consumes. Runtime
- * implementations may use Web Workers in browsers or worker_threads on Node.
- */
-
-interface VolumeStats {
-    totalBytes: number;
-    fileCount: number;
-    /** New runtime spelling. */
-    directoryCount?: number;
-    /** Compatibility spelling used by existing volume implementations. */
-    dirCount?: number;
-}
-interface VolumeStat {
-    mode: number;
-    size: number;
-    uid: number;
-    gid: number;
-    ino: number;
-    nlink: number;
-    atimeMs: number;
-    mtimeMs: number;
-    ctimeMs: number;
-    birthtimeMs: number;
-    isFile(): boolean;
-    isDirectory(): boolean;
-    isSymbolicLink(): boolean;
-}
-interface RuntimeVolume {
-    readFileSync(path: string): Uint8Array;
-    writeFileSync(path: string, data: string | Uint8Array): void;
-    appendFileSync(path: string, data: string | Uint8Array): void;
-    readdirSync(path: string): string[];
-    lstatSync(path: string): VolumeStat;
-    readlinkSync(path: string): string;
-    mkdirSync(path: string, options?: {
-        mode?: number;
-    }): void;
-    rmdirSync(path: string): void;
-    unlinkSync(path: string): void;
-    renameSync(from: string, to: string): void;
-    symlinkSync(target: string, path: string): void;
-    linkSync(existing: string, path: string): void;
-    truncateSync(path: string, length?: number): void;
-    chmodSync(path: string, mode: number): void;
-    lchmodSync(path: string, mode: number): void;
-    chownSync(path: string, uid: number, gid: number): void;
-    lchownSync(path: string, uid: number, gid: number): void;
-    utimesSync(path: string, atime: Date, mtime: Date): void;
-    getStats(): VolumeStats;
-}
-interface RuntimeProcessResult {
-    exitCode: number;
-    stdout: string;
-    stderr: string;
-}
-interface RuntimeProcess {
-    readonly completion: Promise<RuntimeProcessResult>;
-    /**
-     * `output` and `error` carry stdout and stderr; `exit` the code. `rawmode`
-     * reports the program turning terminal raw mode on or off, which a terminal
-     * needs so that it stops echoing input the program is drawing itself.
-     */
-    on(event: "output" | "error" | "exit" | "rawmode", listener: (...args: any[]) => void): this;
-    write(data: string): void;
-    kill(signal?: string): void;
-}
-interface RuntimeHttpResponse {
-    statusCode?: number;
-    statusMessage?: string;
-    headers?: Record<string, string>;
-    body?: string | Uint8Array | ArrayBuffer;
-}
-interface RuntimePackageInstaller {
-    install(name: string, version?: string, options?: Record<string, unknown>): Promise<unknown>;
-    installFromManifest(path: string, options?: Record<string, unknown>): Promise<unknown>;
-    /** Create a view that installs into another project root. */
-    forCwd?(cwd: string): RuntimePackageInstaller;
-}
-/** Where bytes written by an upgraded server inside the container come out. */
-interface RuntimeSocketPeer {
-    data(bytes: Uint8Array): void;
-    close(): void;
-}
-/** The caller's end of a connection opened with {@link RuntimePod.connect}. */
-interface RuntimeConnection {
-    send(bytes: Uint8Array): void;
-    close(): void;
-}
-/** The process-manager protocol a container's kernel bridge substitutes for. */
-interface RuntimeProcessManager {
-    spawn(config: ChildSpawnConfig): ChildHandle;
-}
-interface RuntimePod {
-    readonly volume: RuntimeVolume;
-    readonly packages: RuntimePackageInstaller;
-    readonly instanceId: string;
-    readonly processManager: RuntimeProcessManager;
-    readonly proxy: {
-        activePorts(instanceId?: string): number[];
-    };
-    spawn(command: string, args?: string[], options?: Record<string, unknown>): Promise<RuntimeProcess>;
-    request(port: number, init?: Record<string, unknown>): Promise<RuntimeHttpResponse>;
-    /**
-     * Open a connection that upgrades out of HTTP, or null if nothing takes one.
-     *
-     * Optional because a pod that only ever answers requests is still a usable
-     * pod — a caller treats the absence as "no WebSocket here" rather than as a
-     * broken implementation.
-     */
-    connect?(port: number, init: Record<string, unknown>, peer: RuntimeSocketPeer): RuntimeConnection | null;
-    /**
-     * Bind a port to a server implemented outside the JavaScript runtime.
-     *
-     * The pod owns the port table, and a Python process cannot register with it
-     * the way a Node server does — it has no `http.createServer`. This is the
-     * seam that lets one exist without a second, divergent port table, so
-     * `box.request()`, the preview router and `ss` all see the same listeners.
-     *
-     * Returns the function that unbinds it. Optional: a pod that cannot host
-     * foreign servers simply does not offer one.
-     */
-    serveExternal?(port: number, owner: string, handler: (request: {
-        method: string;
-        path: string;
-        headers: Record<string, string>;
-        body: Uint8Array;
-    }) => Promise<RuntimeHttpResponse>): () => void;
-    snapshot(options?: Record<string, unknown>): unknown;
-    restore(snapshot: unknown, options?: Record<string, unknown>): Promise<void>;
-    teardown(): void;
-}
-
 type FileKind = "file" | "directory" | "symlink" | "chardev" | "blockdev" | "fifo" | "socket";
 /** Render as `drwxr-xr-x`, honouring setuid/setgid/sticky. */
 declare function formatMode(mode: number): string;
@@ -424,4 +289,199 @@ declare class Vfs {
     };
 }
 
-export { type Cred as C, type DirEntry as D, type RuntimeVolume as R, type SpawnChild as S, Vfs as V, type WriteOptions as W, type RuntimeHttpResponse as a, type SyncSpawn as b, type VolumeStat as c, type VolumeStats as d, type RuntimePod as e, type RuntimePackageInstaller as f, type ChildSpawnConfig as g, type ChildHandle as h, type RuntimeProcess as i, type RuntimeSocketPeer as j, type RuntimeConnection as k, ROOT_CRED as l, type RuntimeProcessManager as m, type RuntimeProcessResult as n, Stats as o, type VirtualNode as p, type VirtualProvider as q, applyChmod as r, createChildProcessModule as s, formatMode as t, makeCred as u, octalMode as v, parseUmask as w };
+interface VirtualSocketAddress {
+    address: string;
+    port: number;
+}
+/** One endpoint of a host-owned in-memory TCP stream. */
+declare class VirtualTcpConnection {
+    private readonly incoming;
+    private peer;
+    private readClosed;
+    private writeClosed;
+    private closed;
+    readonly local: VirtualSocketAddress;
+    readonly remote: VirtualSocketAddress;
+    constructor(local: VirtualSocketAddress, remote: VirtualSocketAddress);
+    pairWith(peer: VirtualTcpConnection): void;
+    get eof(): boolean;
+    get readable(): boolean;
+    get writable(): boolean;
+    read(maxLength: number): Uint8Array;
+    write(bytes: Uint8Array): number;
+    waitForChange(): Promise<void>;
+    shutdown(read: boolean, write: boolean): void;
+    close(): void;
+}
+interface VirtualTcpAccepted {
+    connection: VirtualTcpConnection;
+    peer: VirtualSocketAddress;
+}
+/** A host-owned TCP listener with a POSIX-style accept backlog. */
+declare class VirtualTcpListener {
+    readonly port: number;
+    readonly address: string;
+    readonly backlog: number;
+    private readonly pending;
+    private readonly waiters;
+    private closed;
+    constructor(port: number, address?: string, backlog?: number);
+    enqueue(connection: VirtualTcpConnection): void;
+    accept(): VirtualTcpAccepted;
+    get readable(): boolean;
+    get isClosed(): boolean;
+    waitForChange(): Promise<void>;
+    close(): void;
+    private wake;
+}
+/** Shared port authority for all in-container TCP listeners. */
+declare class VirtualTcpNetwork {
+    private readonly occupied?;
+    private readonly listeners;
+    constructor(occupied?: ((port: number) => boolean) | undefined);
+    listen(port: number, address?: string, backlog?: number): VirtualTcpListener;
+    close(listener: VirtualTcpListener): void;
+    connect(port: number, localPort?: number, localAddress?: string): VirtualTcpConnection;
+    hasListener(port: number): boolean;
+    ports(): number[];
+    closeAll(): void;
+}
+
+/**
+ * Clean-room contracts between SandboxedJS and its JavaScript runtime.
+ *
+ * These deliberately describe only behavior SandboxedJS consumes. Runtime
+ * implementations may use Web Workers in browsers or worker_threads on Node.
+ */
+
+interface VolumeStats {
+    totalBytes: number;
+    fileCount: number;
+    /** New runtime spelling. */
+    directoryCount?: number;
+    /** Compatibility spelling used by existing volume implementations. */
+    dirCount?: number;
+}
+interface VolumeStat {
+    mode: number;
+    size: number;
+    uid: number;
+    gid: number;
+    ino: number;
+    nlink: number;
+    atimeMs: number;
+    mtimeMs: number;
+    ctimeMs: number;
+    birthtimeMs: number;
+    isFile(): boolean;
+    isDirectory(): boolean;
+    isSymbolicLink(): boolean;
+}
+interface RuntimeVolume {
+    readFileSync(path: string): Uint8Array;
+    writeFileSync(path: string, data: string | Uint8Array): void;
+    appendFileSync(path: string, data: string | Uint8Array): void;
+    readdirSync(path: string): string[];
+    lstatSync(path: string): VolumeStat;
+    readlinkSync(path: string): string;
+    mkdirSync(path: string, options?: {
+        mode?: number;
+    }): void;
+    rmdirSync(path: string): void;
+    unlinkSync(path: string): void;
+    renameSync(from: string, to: string): void;
+    symlinkSync(target: string, path: string): void;
+    linkSync(existing: string, path: string): void;
+    truncateSync(path: string, length?: number): void;
+    chmodSync(path: string, mode: number): void;
+    lchmodSync(path: string, mode: number): void;
+    chownSync(path: string, uid: number, gid: number): void;
+    lchownSync(path: string, uid: number, gid: number): void;
+    utimesSync(path: string, atime: Date, mtime: Date): void;
+    getStats(): VolumeStats;
+}
+interface RuntimeProcessResult {
+    exitCode: number;
+    stdout: string;
+    stderr: string;
+}
+interface RuntimeProcess {
+    readonly completion: Promise<RuntimeProcessResult>;
+    /**
+     * `output` and `error` carry stdout and stderr; `exit` the code. `rawmode`
+     * reports the program turning terminal raw mode on or off, which a terminal
+     * needs so that it stops echoing input the program is drawing itself.
+     */
+    on(event: "output" | "error" | "exit" | "rawmode", listener: (...args: any[]) => void): this;
+    write(data: string): void;
+    kill(signal?: string): void;
+}
+interface RuntimeHttpResponse {
+    statusCode?: number;
+    statusMessage?: string;
+    headers?: Record<string, string>;
+    body?: string | Uint8Array | ArrayBuffer;
+}
+interface RuntimePackageInstaller {
+    install(name: string, version?: string, options?: Record<string, unknown>): Promise<unknown>;
+    installFromManifest(path: string, options?: Record<string, unknown>): Promise<unknown>;
+    /** Create a view that installs into another project root. */
+    forCwd?(cwd: string): RuntimePackageInstaller;
+}
+/** Where bytes written by an upgraded server inside the container come out. */
+interface RuntimeSocketPeer {
+    data(bytes: Uint8Array): void;
+    close(): void;
+}
+/** The caller's end of a connection opened with {@link RuntimePod.connect}. */
+interface RuntimeConnection {
+    send(bytes: Uint8Array): void;
+    close(): void;
+}
+/** The process-manager protocol a container's kernel bridge substitutes for. */
+interface RuntimeProcessManager {
+    spawn(config: ChildSpawnConfig): ChildHandle;
+}
+interface RuntimePod {
+    readonly volume: RuntimeVolume;
+    readonly packages: RuntimePackageInstaller;
+    readonly instanceId: string;
+    readonly processManager: RuntimeProcessManager;
+    /** Shared host-owned TCP authority used by Node and Python servers. */
+    readonly sockets?: VirtualTcpNetwork;
+    readonly proxy: {
+        activePorts(instanceId?: string): number[];
+    };
+    spawn(command: string, args?: string[], options?: Record<string, unknown>): Promise<RuntimeProcess>;
+    request(port: number, init?: Record<string, unknown>): Promise<RuntimeHttpResponse>;
+    /**
+     * Open a connection that upgrades out of HTTP, or null if nothing takes one.
+     *
+     * Optional because a pod that only ever answers requests is still a usable
+     * pod — a caller treats the absence as "no WebSocket here" rather than as a
+     * broken implementation.
+     */
+    connect?(port: number, init: Record<string, unknown>, peer: RuntimeSocketPeer): RuntimeConnection | null;
+    /**
+     * Bind a port to a server implemented outside the JavaScript runtime.
+     *
+     * The pod owns the port table, and a Python process cannot register with it
+     * the way a Node server does — it has no `http.createServer`. This is the
+     * seam that lets one exist without a second, divergent port table, so
+     * `box.request()`, the preview router and `ss` all see the same listeners.
+     *
+     * Returns the function that unbinds it. Optional: a pod that cannot host
+     * foreign servers simply does not offer one.
+     */
+    serveExternal?(port: number, owner: string, handler: (request: {
+        method: string;
+        path: string;
+        headers: Record<string, string>;
+        body: Uint8Array;
+    }) => Promise<RuntimeHttpResponse>): () => void;
+    snapshot(options?: Record<string, unknown>): unknown;
+    restore(snapshot: unknown, options?: Record<string, unknown>): Promise<void>;
+    teardown(): void;
+}
+
+export { type Cred as C, type DirEntry as D, type RuntimeVolume as R, type SpawnChild as S, Vfs as V, type WriteOptions as W, VirtualTcpNetwork as a, type RuntimeHttpResponse as b, type SyncSpawn as c, type VolumeStat as d, type VolumeStats as e, type RuntimePod as f, type RuntimePackageInstaller as g, type ChildSpawnConfig as h, type ChildHandle as i, type RuntimeProcess as j, type RuntimeSocketPeer as k, type RuntimeConnection as l, ROOT_CRED as m, type RuntimeProcessManager as n, type RuntimeProcessResult as o, Stats as p, type VirtualNode as q, type VirtualProvider as r, applyChmod as s, createChildProcessModule as t, formatMode as u, makeCred as v, octalMode as w, parseUmask as x };