sandboxedjs 0.1.72 → 0.1.74

package/dist/index.d.cts

@@ -1,8 +1,8 @@
-import { S as Shell, a as ShellIO, b as Session, N as Node, c as Command, K as Kernel, E as ExecContext, O as OutputStream, C as Container, d as createContainer } from './container-BwXE2J26.cjs';
-export { B as BufferSink, e as CPythonOptions, f as CallbackSink, g as CommandRegistry, h as ContainerFs, i as ContainerOptions, j as ContextInit, k as Env, l as ExecOptions, m as ExecResult, F as FileData, n as FileInput, o as FileOutput, G as GroupEntry, H as HttpResponse, I as InputStream, J as Job, p as KernelOptions, L as ListeningPort, M as MANIFEST_FORMAT, q as MANIFEST_SCHEMA_VERSION, r as MountEntry, s as NetInterface, t as NetworkOptions, u as NetworkStack, v as NullInput, w as NullOutput, P as PYTHON_VERSION, x as PasswdEntry, y as Pipe, z as Process, A as ProcessKind, D as ProcessOptions, Q as ProcessState, R as ProcessTable, T as PythonCapabilities, U as PythonOptions, V as PythonProfile, W as PythonRuntimeManifest, X as ResolvedExecutable, Y as RunOptions, Z as RunResult, _ as SessionInit, $ as SessionResult, a0 as SessionRunOptions, a1 as ShellExit, a2 as ShellInit, a3 as ShellOptions, a4 as SpawnHandle, a5 as Stdio, a6 as TeeOutput, a7 as UserDatabase, a8 as Variables, a9 as braceExpand, aa as captureStdio, ab as configureCPython, ac as configurePython, ad as createContext, ae as defineCommand, af as expandWord, ag as expandWords, ah as isCPythonAvailable, ai as isPythonAvailable, aj as resetPidCounter, ak as shellQuote, al as validateManifest } from './container-BwXE2J26.cjs';
-import { V as Vfs, C as Cred, R as RuntimeVolume, a as VirtualTcpNetwork, b as RuntimeHttpResponse, S as SpawnChild, c as SyncSpawn, d as VolumeStat, e as VolumeStats, f as RuntimePod, g as RuntimePackageInstaller, h as ChildSpawnConfig, i as ChildHandle, j as RuntimeProcess, k as RuntimeSocketPeer, l as RuntimeConnection } from './contracts-CVgctitO.cjs';
-export { D as DirEntry, m as ROOT_CRED, n as RuntimeProcessManager, o as RuntimeProcessResult, p as Stats, q as VirtualNode, r as VirtualProvider, W as WriteOptions, s as applyChmod, t as createChildProcessModule, u as formatMode, v as makeCred, w as octalMode, x as parseUmask } from './contracts-CVgctitO.cjs';
-import { M as MemoryVolume, a as MemoryVolumeSnapshotEntry } from './memory-volume-DlMSAh-K.cjs';
+import { S as Shell, a as ShellIO, b as Session, N as Node, c as Command, K as Kernel, E as ExecContext, O as OutputStream, C as Container, d as createContainer } from './container-DAWPIkGG.cjs';
+export { B as BufferSink, e as CPythonOptions, f as CallbackSink, g as CommandRegistry, h as ContainerFs, i as ContainerOptions, j as ContextInit, k as Env, l as ExecOptions, m as ExecResult, F as FileData, n as FileInput, o as FileOutput, G as GroupEntry, H as HttpResponse, I as InputStream, J as Job, p as KernelOptions, L as ListeningPort, M as MANIFEST_FORMAT, q as MANIFEST_SCHEMA_VERSION, r as MountEntry, s as NetInterface, t as NetworkOptions, u as NetworkStack, v as NullInput, w as NullOutput, P as PYTHON_VERSION, x as PasswdEntry, y as Pipe, z as Process, A as ProcessKind, D as ProcessOptions, Q as ProcessState, R as ProcessTable, T as PythonCapabilities, U as PythonOptions, V as PythonProfile, W as PythonRuntimeManifest, X as ResolvedExecutable, Y as RunOptions, Z as RunResult, _ as SessionInit, $ as SessionResult, a0 as SessionRunOptions, a1 as ShellExit, a2 as ShellInit, a3 as ShellOptions, a4 as SpawnHandle, a5 as Stdio, a6 as TeeOutput, a7 as UserDatabase, a8 as Variables, a9 as braceExpand, aa as captureStdio, ab as configureCPython, ac as configurePython, ad as createContext, ae as defineCommand, af as expandWord, ag as expandWords, ah as isCPythonAvailable, ai as isPythonAvailable, aj as resetPidCounter, ak as shellQuote, al as validateManifest } from './container-DAWPIkGG.cjs';
+import { V as Vfs, C as Cred, R as RuntimeVolume, a as VirtualTcpNetwork, b as RuntimeHttpResponse, O as OutboundPolicy, S as SpawnChild, c as SyncSpawn, d as VolumeStat, e as VolumeStats, f as RuntimePod, g as RuntimePackageInstaller, h as ChildSpawnConfig, i as ChildHandle, j as RuntimeProcess, k as RuntimeSocketPeer, l as RuntimeConnection } from './contracts-C2_dTgk3.cjs';
+export { D as DirEntry, m as ROOT_CRED, n as RuntimeProcessManager, o as RuntimeProcessResult, p as Stats, q as VirtualNode, r as VirtualProvider, W as WriteOptions, s as applyChmod, t as createChildProcessModule, u as formatMode, v as makeCred, w as octalMode, x as parseUmask } from './contracts-C2_dTgk3.cjs';
+import { M as MemoryVolume, a as MemoryVolumeSnapshotEntry } from './memory-volume-DqEWFo7t.cjs';
 import EventEmitter from 'events/events.js';
 import streamModule from 'stream-browserify';
 
@@ -735,6 +735,24 @@ interface VirtualConnection {
     /** The far end went away. */
     close(): void;
 }
+/** A loopback request, as it crosses from a program to whoever holds the port. */
+interface LoopbackRequest {
+    method: string;
+    path: string;
+    headers: Record<string, string>;
+    body: Uint8Array | null;
+}
+interface LoopbackResponse {
+    statusCode?: number;
+    statusMessage?: string;
+    headers?: Record<string, string>;
+    body?: string | ArrayBuffer | Uint8Array | null;
+}
+/**
+ * Reaches a server in this container that is not on this thread's router.
+ * Resolves `null` when nothing in the container listens on the port.
+ */
+type LoopbackTransport = (port: number, request: LoopbackRequest) => Promise<LoopbackResponse | null>;
 
 interface CoreModulesOptions {
     volume: RuntimeVolume;
@@ -748,6 +766,13 @@ interface CoreModulesOptions {
         router: VirtualHttpRouter;
         owner: string;
         fetch?: typeof globalThis.fetch;
+        /** Servers in other processes, for a router that holds only this thread's. */
+        loopback?: LoopbackTransport;
+        /**
+         * The container's outbound policy, applied to `fetch`, `http`, `https` and
+         * `WebSocket`. Omitted, requests leave the way the host's own would.
+         */
+        policy?: OutboundPolicy;
     };
     /** Backs `child_process`; without it the module reports as unavailable. */
     spawnChild?: SpawnChild;
@@ -813,6 +838,14 @@ declare function createCoreModules(options: CoreModulesOptions): {
      * exiting in the gap between `http.get` and its response callback.
      */
     pendingRequests(): number;
+    /** An error that escaped the program's callbacks: listeners, or print and exit 1. */
+    reportUncaught(error: unknown): void;
+    /** A rejection nobody handled, under the same rule. */
+    reportUnhandledRejection(reason: unknown): void;
+    /** The status a program ends with: `process.exit`'s code, else `process.exitCode`. */
+    exitStatus(): number;
+    /** Run `process.on("exit")` listeners once, for a program that ended by itself. */
+    emitExit(status: number): void;
 };
 
 interface EsmTransformResult {
@@ -996,6 +1029,12 @@ interface LocalRuntimeOptions {
     files?: Record<string, string | Uint8Array>;
     registry?: string;
     fetch?: typeof globalThis.fetch;
+    /**
+     * The outbound policy for guest `fetch`, `http`, `https` and `WebSocket`.
+     * Omitted, guest requests leave the way the host's would; `createContainer`
+     * always supplies one, closed unless the caller opens it.
+     */
+    network?: OutboundPolicy;
     /** Invoked when a program inside the runtime starts listening on a port. */
     onServerReady?: (port: number, url: string) => void;
     /** Extra package substitutions, merged over {@link WASM_ALIASES}. */
@@ -1067,8 +1106,12 @@ declare class LocalRuntimePod implements RuntimePod {
     private rolldownBinding;
     /** Backs outbound `http`/`https` client requests from inside the sandbox. */
     private readonly fetch;
+    /** What guest programs may reach outside the container. */
+    protected networkPolicy: OutboundPolicy | undefined;
     protected constructor(options: LocalRuntimeOptions);
     static boot(options?: LocalRuntimeOptions): Promise<LocalRuntimePod>;
+    /** Apply a container's outbound policy to programs started from now on. */
+    setNetworkPolicy(policy: OutboundPolicy): void;
     spawn(command: string, args?: string[], options?: Record<string, unknown>): Promise<RuntimeProcess>;
     /**
      * Rolldown's JavaScript API synchronously requires its compiled binding.
@@ -1164,6 +1207,15 @@ declare class WorkerRuntimePod extends LocalRuntimePod {
      * the two directions together across the Worker boundary.
      */
     private upgrade;
+    /**
+     * Answer a program that is calling a server in this container.
+     *
+     * A guest's router holds only the servers on its own thread, so a request to
+     * a port some other process opened comes here, where every server in the
+     * container is registered. `null` means nothing listens, which the guest
+     * reports as a refused connection.
+     */
+    private answerLoopback;
     private settleProxied;
     private closeProxies;
     teardown(): void;

package/dist/index.d.ts

@@ -1,8 +1,8 @@
-import { S as Shell, a as ShellIO, b as Session, N as Node, c as Command, K as Kernel, E as ExecContext, O as OutputStream, C as Container, d as createContainer } from './container-WPf_A76-.js';
-export { B as BufferSink, e as CPythonOptions, f as CallbackSink, g as CommandRegistry, h as ContainerFs, i as ContainerOptions, j as ContextInit, k as Env, l as ExecOptions, m as ExecResult, F as FileData, n as FileInput, o as FileOutput, G as GroupEntry, H as HttpResponse, I as InputStream, J as Job, p as KernelOptions, L as ListeningPort, M as MANIFEST_FORMAT, q as MANIFEST_SCHEMA_VERSION, r as MountEntry, s as NetInterface, t as NetworkOptions, u as NetworkStack, v as NullInput, w as NullOutput, P as PYTHON_VERSION, x as PasswdEntry, y as Pipe, z as Process, A as ProcessKind, D as ProcessOptions, Q as ProcessState, R as ProcessTable, T as PythonCapabilities, U as PythonOptions, V as PythonProfile, W as PythonRuntimeManifest, X as ResolvedExecutable, Y as RunOptions, Z as RunResult, _ as SessionInit, $ as SessionResult, a0 as SessionRunOptions, a1 as ShellExit, a2 as ShellInit, a3 as ShellOptions, a4 as SpawnHandle, a5 as Stdio, a6 as TeeOutput, a7 as UserDatabase, a8 as Variables, a9 as braceExpand, aa as captureStdio, ab as configureCPython, ac as configurePython, ad as createContext, ae as defineCommand, af as expandWord, ag as expandWords, ah as isCPythonAvailable, ai as isPythonAvailable, aj as resetPidCounter, ak as shellQuote, al as validateManifest } from './container-WPf_A76-.js';
-import { V as Vfs, C as Cred, R as RuntimeVolume, a as VirtualTcpNetwork, b as RuntimeHttpResponse, S as SpawnChild, c as SyncSpawn, d as VolumeStat, e as VolumeStats, f as RuntimePod, g as RuntimePackageInstaller, h as ChildSpawnConfig, i as ChildHandle, j as RuntimeProcess, k as RuntimeSocketPeer, l as RuntimeConnection } from './contracts-CVgctitO.js';
-export { D as DirEntry, m as ROOT_CRED, n as RuntimeProcessManager, o as RuntimeProcessResult, p as Stats, q as VirtualNode, r as VirtualProvider, W as WriteOptions, s as applyChmod, t as createChildProcessModule, u as formatMode, v as makeCred, w as octalMode, x as parseUmask } from './contracts-CVgctitO.js';
-import { M as MemoryVolume, a as MemoryVolumeSnapshotEntry } from './memory-volume-CWuWScIs.js';
+import { S as Shell, a as ShellIO, b as Session, N as Node, c as Command, K as Kernel, E as ExecContext, O as OutputStream, C as Container, d as createContainer } from './container-CsLNpeyi.js';
+export { B as BufferSink, e as CPythonOptions, f as CallbackSink, g as CommandRegistry, h as ContainerFs, i as ContainerOptions, j as ContextInit, k as Env, l as ExecOptions, m as ExecResult, F as FileData, n as FileInput, o as FileOutput, G as GroupEntry, H as HttpResponse, I as InputStream, J as Job, p as KernelOptions, L as ListeningPort, M as MANIFEST_FORMAT, q as MANIFEST_SCHEMA_VERSION, r as MountEntry, s as NetInterface, t as NetworkOptions, u as NetworkStack, v as NullInput, w as NullOutput, P as PYTHON_VERSION, x as PasswdEntry, y as Pipe, z as Process, A as ProcessKind, D as ProcessOptions, Q as ProcessState, R as ProcessTable, T as PythonCapabilities, U as PythonOptions, V as PythonProfile, W as PythonRuntimeManifest, X as ResolvedExecutable, Y as RunOptions, Z as RunResult, _ as SessionInit, $ as SessionResult, a0 as SessionRunOptions, a1 as ShellExit, a2 as ShellInit, a3 as ShellOptions, a4 as SpawnHandle, a5 as Stdio, a6 as TeeOutput, a7 as UserDatabase, a8 as Variables, a9 as braceExpand, aa as captureStdio, ab as configureCPython, ac as configurePython, ad as createContext, ae as defineCommand, af as expandWord, ag as expandWords, ah as isCPythonAvailable, ai as isPythonAvailable, aj as resetPidCounter, ak as shellQuote, al as validateManifest } from './container-CsLNpeyi.js';
+import { V as Vfs, C as Cred, R as RuntimeVolume, a as VirtualTcpNetwork, b as RuntimeHttpResponse, O as OutboundPolicy, S as SpawnChild, c as SyncSpawn, d as VolumeStat, e as VolumeStats, f as RuntimePod, g as RuntimePackageInstaller, h as ChildSpawnConfig, i as ChildHandle, j as RuntimeProcess, k as RuntimeSocketPeer, l as RuntimeConnection } from './contracts-C2_dTgk3.js';
+export { D as DirEntry, m as ROOT_CRED, n as RuntimeProcessManager, o as RuntimeProcessResult, p as Stats, q as VirtualNode, r as VirtualProvider, W as WriteOptions, s as applyChmod, t as createChildProcessModule, u as formatMode, v as makeCred, w as octalMode, x as parseUmask } from './contracts-C2_dTgk3.js';
+import { M as MemoryVolume, a as MemoryVolumeSnapshotEntry } from './memory-volume-CG56p660.js';
 import EventEmitter from 'events/events.js';
 import streamModule from 'stream-browserify';
 
@@ -735,6 +735,24 @@ interface VirtualConnection {
     /** The far end went away. */
     close(): void;
 }
+/** A loopback request, as it crosses from a program to whoever holds the port. */
+interface LoopbackRequest {
+    method: string;
+    path: string;
+    headers: Record<string, string>;
+    body: Uint8Array | null;
+}
+interface LoopbackResponse {
+    statusCode?: number;
+    statusMessage?: string;
+    headers?: Record<string, string>;
+    body?: string | ArrayBuffer | Uint8Array | null;
+}
+/**
+ * Reaches a server in this container that is not on this thread's router.
+ * Resolves `null` when nothing in the container listens on the port.
+ */
+type LoopbackTransport = (port: number, request: LoopbackRequest) => Promise<LoopbackResponse | null>;
 
 interface CoreModulesOptions {
     volume: RuntimeVolume;
@@ -748,6 +766,13 @@ interface CoreModulesOptions {
         router: VirtualHttpRouter;
         owner: string;
         fetch?: typeof globalThis.fetch;
+        /** Servers in other processes, for a router that holds only this thread's. */
+        loopback?: LoopbackTransport;
+        /**
+         * The container's outbound policy, applied to `fetch`, `http`, `https` and
+         * `WebSocket`. Omitted, requests leave the way the host's own would.
+         */
+        policy?: OutboundPolicy;
     };
     /** Backs `child_process`; without it the module reports as unavailable. */
     spawnChild?: SpawnChild;
@@ -813,6 +838,14 @@ declare function createCoreModules(options: CoreModulesOptions): {
      * exiting in the gap between `http.get` and its response callback.
      */
     pendingRequests(): number;
+    /** An error that escaped the program's callbacks: listeners, or print and exit 1. */
+    reportUncaught(error: unknown): void;
+    /** A rejection nobody handled, under the same rule. */
+    reportUnhandledRejection(reason: unknown): void;
+    /** The status a program ends with: `process.exit`'s code, else `process.exitCode`. */
+    exitStatus(): number;
+    /** Run `process.on("exit")` listeners once, for a program that ended by itself. */
+    emitExit(status: number): void;
 };
 
 interface EsmTransformResult {
@@ -996,6 +1029,12 @@ interface LocalRuntimeOptions {
     files?: Record<string, string | Uint8Array>;
     registry?: string;
     fetch?: typeof globalThis.fetch;
+    /**
+     * The outbound policy for guest `fetch`, `http`, `https` and `WebSocket`.
+     * Omitted, guest requests leave the way the host's would; `createContainer`
+     * always supplies one, closed unless the caller opens it.
+     */
+    network?: OutboundPolicy;
     /** Invoked when a program inside the runtime starts listening on a port. */
     onServerReady?: (port: number, url: string) => void;
     /** Extra package substitutions, merged over {@link WASM_ALIASES}. */
@@ -1067,8 +1106,12 @@ declare class LocalRuntimePod implements RuntimePod {
     private rolldownBinding;
     /** Backs outbound `http`/`https` client requests from inside the sandbox. */
     private readonly fetch;
+    /** What guest programs may reach outside the container. */
+    protected networkPolicy: OutboundPolicy | undefined;
     protected constructor(options: LocalRuntimeOptions);
     static boot(options?: LocalRuntimeOptions): Promise<LocalRuntimePod>;
+    /** Apply a container's outbound policy to programs started from now on. */
+    setNetworkPolicy(policy: OutboundPolicy): void;
     spawn(command: string, args?: string[], options?: Record<string, unknown>): Promise<RuntimeProcess>;
     /**
      * Rolldown's JavaScript API synchronously requires its compiled binding.
@@ -1164,6 +1207,15 @@ declare class WorkerRuntimePod extends LocalRuntimePod {
      * the two directions together across the Worker boundary.
      */
     private upgrade;
+    /**
+     * Answer a program that is calling a server in this container.
+     *
+     * A guest's router holds only the servers on its own thread, so a request to
+     * a port some other process opened comes here, where every server in the
+     * container is registered. `null` means nothing listens, which the guest
+     * reports as a refused connection.
+     */
+    private answerLoopback;
     private settleProxied;
     private closeProxies;
     teardown(): void;