sandboxedjs 0.1.67 → 0.1.69

package/dist/python-abi.d.cts

@@ -275,6 +275,9 @@ declare const Op: {
     readonly setsockopt: 1802;
     readonly getsockopt: 1803;
     readonly socket_close: 1804;
+    readonly spawn: 2048;
+    readonly waitpid: 2049;
+    readonly kill: 2050;
 };
 type OpCode = (typeof Op)[keyof typeof Op];
 /** Canonical (Linux/musl) errno values. A negative status is `-Errno.X`. */
@@ -287,6 +290,7 @@ declare const Errno: {
     readonly ENXIO: 6;
     readonly E2BIG: 7;
     readonly EBADF: 9;
+    readonly ECHILD: 10;
     readonly EAGAIN: 11;
     readonly ENOMEM: 12;
     readonly EACCES: 13;
@@ -563,6 +567,36 @@ interface HostAbiProcess {
     /** Aborts when the process is killed; wakes anything parked in a call. */
     readonly signal: AbortSignal;
     readonly sockets?: VirtualTcpNetwork;
+    /**
+     * How this process makes another one.
+     *
+     * There is no fork in WebAssembly, so process creation cannot be a libc
+     * detail the guest performs on its own — it is a service, like the
+     * filesystem. A host that does not supply this reports ENOSYS to every
+     * spawn, which is the honest answer and not a crash: a container with no
+     * process table genuinely cannot start a child.
+     */
+    readonly processes?: ProcessService;
+}
+/** The descriptors a child is to be given, by the numbers it will see. */
+interface SpawnRequest {
+    readonly argv: string[];
+    readonly env: Record<string, string>;
+    readonly cwd: string;
+    /** `child fd` → the parent's open file description behind it. */
+    readonly files: Map<number, OpenFileDescription>;
+}
+interface ProcessService {
+    spawn(request: SpawnRequest): Promise<number>;
+    /**
+     * Reap one child. Returns the pid and its wait status, or a pid of 0 when
+     * `WNOHANG` was asked for and nothing has exited yet.
+     */
+    wait(pid: number, options: number): Promise<{
+        pid: number;
+        status: number;
+    }>;
+    kill(pid: number, signal: number): void;
 }
 declare function createHostAbiServer(proc: HostAbiProcess): (frame: Uint8Array) => Promise<Uint8Array>;
 

package/dist/python-abi.d.ts

@@ -275,6 +275,9 @@ declare const Op: {
     readonly setsockopt: 1802;
     readonly getsockopt: 1803;
     readonly socket_close: 1804;
+    readonly spawn: 2048;
+    readonly waitpid: 2049;
+    readonly kill: 2050;
 };
 type OpCode = (typeof Op)[keyof typeof Op];
 /** Canonical (Linux/musl) errno values. A negative status is `-Errno.X`. */
@@ -287,6 +290,7 @@ declare const Errno: {
     readonly ENXIO: 6;
     readonly E2BIG: 7;
     readonly EBADF: 9;
+    readonly ECHILD: 10;
     readonly EAGAIN: 11;
     readonly ENOMEM: 12;
     readonly EACCES: 13;
@@ -563,6 +567,36 @@ interface HostAbiProcess {
     /** Aborts when the process is killed; wakes anything parked in a call. */
     readonly signal: AbortSignal;
     readonly sockets?: VirtualTcpNetwork;
+    /**
+     * How this process makes another one.
+     *
+     * There is no fork in WebAssembly, so process creation cannot be a libc
+     * detail the guest performs on its own — it is a service, like the
+     * filesystem. A host that does not supply this reports ENOSYS to every
+     * spawn, which is the honest answer and not a crash: a container with no
+     * process table genuinely cannot start a child.
+     */
+    readonly processes?: ProcessService;
+}
+/** The descriptors a child is to be given, by the numbers it will see. */
+interface SpawnRequest {
+    readonly argv: string[];
+    readonly env: Record<string, string>;
+    readonly cwd: string;
+    /** `child fd` → the parent's open file description behind it. */
+    readonly files: Map<number, OpenFileDescription>;
+}
+interface ProcessService {
+    spawn(request: SpawnRequest): Promise<number>;
+    /**
+     * Reap one child. Returns the pid and its wait status, or a pid of 0 when
+     * `WNOHANG` was asked for and nothing has exited yet.
+     */
+    wait(pid: number, options: number): Promise<{
+        pid: number;
+        status: number;
+    }>;
+    kill(pid: number, signal: number): void;
 }
 declare function createHostAbiServer(proc: HostAbiProcess): (frame: Uint8Array) => Promise<Uint8Array>;
 

package/dist/python-abi.js

@@ -46,7 +46,10 @@ var Op = {
   getpeername: 1801,
   setsockopt: 1802,
   getsockopt: 1803,
-  socket_close: 1804
+  socket_close: 1804,
+  spawn: 2048,
+  waitpid: 2049,
+  kill: 2050
 };
 var Errno = {
   EPERM: 1,
@@ -57,6 +60,7 @@ var Errno = {
   ENXIO: 6,
   E2BIG: 7,
   EBADF: 9,
+  ECHILD: 10,
   EAGAIN: 11,
   ENOMEM: 12,
   EACCES: 13,
@@ -1511,6 +1515,46 @@ function createHostAbiServer(proc) {
         const joined = Object.entries(proc.env).map(([key, value]) => `${key}=${value}`).join("\0");
         return { status: 0, payload: new Writer().string(joined).finish() };
       }
+      /* --------------------------------------------------------- processes */
+      case Op.spawn: {
+        const argv = [];
+        for (let i = 0, n = r.u32(); i < n; i++) argv.push(r.string());
+        const env = {};
+        for (let i = 0, n = r.u32(); i < n; i++) {
+          const entry = r.string();
+          const split = entry.indexOf("=");
+          if (split > 0) env[entry.slice(0, split)] = entry.slice(split + 1);
+        }
+        const cwd = r.string() || proc.cwd;
+        const files2 = /* @__PURE__ */ new Map();
+        for (let i = 0, n = r.u32(); i < n; i++) {
+          const childFd = r.u32() | 0;
+          const parentFd = r.u32() | 0;
+          files2.set(childFd, proc.table.get(parentFd));
+        }
+        if (!proc.processes) throw new PosixError(Errno.ENOSYS);
+        if (argv.length === 0) throw new PosixError(Errno.EINVAL);
+        return { status: await proc.processes.spawn({ argv, env, cwd: resolve2(cwd), files: files2 }) };
+      }
+      case Op.waitpid: {
+        const pid = r.u32() | 0;
+        const options = r.u32() | 0;
+        if (!proc.processes) throw new PosixError(Errno.ENOSYS);
+        const result = await Promise.race([
+          proc.processes.wait(pid, options),
+          aborted().then(() => {
+            throw new PosixError(Errno.EINTR);
+          })
+        ]);
+        return { status: 0, payload: new Writer().i32(result.pid).i32(result.status).finish() };
+      }
+      case Op.kill: {
+        const pid = r.u32() | 0;
+        const signal = r.u32() | 0;
+        if (!proc.processes) throw new PosixError(Errno.ENOSYS);
+        proc.processes.kill(pid, signal);
+        return { status: 0 };
+      }
       /* ---------------------------------------------------------- entropy */
       case Op.getrandom: {
         const length = Math.min(r.u32(), 65536);