sandboxedjs 0.1.73 → 0.1.75

package/dist/index.d.cts

@@ -1,8 +1,8 @@
-import { S as Shell, a as ShellIO, b as Session, N as Node, c as Command, K as Kernel, E as ExecContext, O as OutputStream, C as Container, d as createContainer } from './container-BxEoVOmX.cjs';
-export { B as BufferSink, e as CPythonOptions, f as CallbackSink, g as CommandRegistry, h as ContainerFs, i as ContainerOptions, j as ContextInit, k as Env, l as ExecOptions, m as ExecResult, F as FileData, n as FileInput, o as FileOutput, G as GroupEntry, H as HttpResponse, I as InputStream, J as Job, p as KernelOptions, L as ListeningPort, M as MANIFEST_FORMAT, q as MANIFEST_SCHEMA_VERSION, r as MountEntry, s as NetInterface, t as NetworkOptions, u as NetworkStack, v as NullInput, w as NullOutput, P as PYTHON_VERSION, x as PasswdEntry, y as Pipe, z as Process, A as ProcessKind, D as ProcessOptions, Q as ProcessState, R as ProcessTable, T as PythonCapabilities, U as PythonOptions, V as PythonProfile, W as PythonRuntimeManifest, X as ResolvedExecutable, Y as RunOptions, Z as RunResult, _ as SessionInit, $ as SessionResult, a0 as SessionRunOptions, a1 as ShellExit, a2 as ShellInit, a3 as ShellOptions, a4 as SpawnHandle, a5 as Stdio, a6 as TeeOutput, a7 as UserDatabase, a8 as Variables, a9 as braceExpand, aa as captureStdio, ab as configureCPython, ac as configurePython, ad as createContext, ae as defineCommand, af as expandWord, ag as expandWords, ah as isCPythonAvailable, ai as isPythonAvailable, aj as resetPidCounter, ak as shellQuote, al as validateManifest } from './container-BxEoVOmX.cjs';
-import { V as Vfs, C as Cred, R as RuntimeVolume, a as VirtualTcpNetwork, b as RuntimeHttpResponse, S as SpawnChild, c as SyncSpawn, d as VolumeStat, e as VolumeStats, f as RuntimePod, g as RuntimePackageInstaller, h as ChildSpawnConfig, i as ChildHandle, j as RuntimeProcess, k as RuntimeSocketPeer, l as RuntimeConnection } from './contracts-CVgctitO.cjs';
-export { D as DirEntry, m as ROOT_CRED, n as RuntimeProcessManager, o as RuntimeProcessResult, p as Stats, q as VirtualNode, r as VirtualProvider, W as WriteOptions, s as applyChmod, t as createChildProcessModule, u as formatMode, v as makeCred, w as octalMode, x as parseUmask } from './contracts-CVgctitO.cjs';
-import { M as MemoryVolume, a as MemoryVolumeSnapshotEntry } from './memory-volume-DlMSAh-K.cjs';
+import { S as Shell, a as ShellIO, b as Session, N as Node, c as Command, K as Kernel, E as ExecContext, O as OutputStream, C as Container, B as BinaryBackend, d as createContainer } from './container-NoLUp_fd.cjs';
+export { e as BinaryExecutionRegistry, f as BinaryInfo, g as BinaryRequest, h as BufferSink, i as CPythonOptions, j as CallbackSink, k as CommandRegistry, l as ContainerFs, m as ContainerOptions, n as ContextInit, o as Env, p as ExecOptions, q as ExecResult, r as ExecutionDecision, s as ExecutionTier, F as FileData, t as FileInput, u as FileOutput, G as GroupEntry, H as HttpResponse, I as InputStream, J as Job, v as KernelOptions, L as ListeningPort, M as MANIFEST_FORMAT, w as MANIFEST_SCHEMA_VERSION, x as MountEntry, y as NetInterface, z as NetworkOptions, A as NetworkStack, D as NullInput, P as NullOutput, Q as PYTHON_VERSION, R as PasswdEntry, T as Pipe, U as Preparation, V as PreparedBinary, W as Process, X as ProcessKind, Y as ProcessOptions, Z as ProcessState, _ as ProcessTable, $ as PythonCapabilities, a0 as PythonOptions, a1 as PythonProfile, a2 as PythonRuntimeManifest, a3 as ResolvedExecutable, a4 as RunOptions, a5 as RunResult, a6 as SessionInit, a7 as SessionResult, a8 as SessionRunOptions, a9 as ShellExit, aa as ShellInit, ab as ShellOptions, ac as SpawnHandle, ad as Stdio, ae as TeeOutput, af as UserDatabase, ag as Variables, ah as WasmCommandArtifact, ai as WasmTranslator, aj as binaryDigest, ak as braceExpand, al as captureStdio, am as configureCPython, an as configurePython, ao as createContext, ap as createTranslationBackend, aq as createWasmCompatibilityBackend, ar as defineCommand, as as expandWord, at as expandWords, au as inspectElf, av as installWasmCommands, aw as isCPythonAvailable, ax as isElfBinary, ay as isPythonAvailable, az as resetPidCounter, aA as shellQuote, aB as validateManifest } from './container-NoLUp_fd.cjs';
+import { V as Vfs, C as Cred, R as RuntimeVolume, a as VirtualTcpNetwork, b as RuntimeHttpResponse, O as OutboundPolicy, S as SpawnChild, c as SyncSpawn, d as VolumeStat, e as VolumeStats, f as RuntimePod, g as RuntimePackageInstaller, h as ChildSpawnConfig, i as ChildHandle, j as RuntimeProcess, k as RuntimeSocketPeer, l as RuntimeConnection } from './contracts-C2_dTgk3.cjs';
+export { D as DirEntry, m as ROOT_CRED, n as RuntimeProcessManager, o as RuntimeProcessResult, p as Stats, q as VirtualNode, r as VirtualProvider, W as WriteOptions, s as applyChmod, t as createChildProcessModule, u as formatMode, v as makeCred, w as octalMode, x as parseUmask } from './contracts-C2_dTgk3.cjs';
+import { M as MemoryVolume, a as MemoryVolumeSnapshotEntry } from './memory-volume-DqEWFo7t.cjs';
 import EventEmitter from 'events/events.js';
 import streamModule from 'stream-browserify';
 
@@ -213,6 +213,7 @@ declare const ERRNO: {
     readonly ECONNRESET: 104;
     readonly ENOTCONN: 107;
     readonly ETIMEDOUT: 110;
+    readonly ENETUNREACH: 101;
     readonly ECONNREFUSED: 111;
     readonly EHOSTUNREACH: 113;
     readonly ENOTSUP: 95;
@@ -735,6 +736,24 @@ interface VirtualConnection {
     /** The far end went away. */
     close(): void;
 }
+/** A loopback request, as it crosses from a program to whoever holds the port. */
+interface LoopbackRequest {
+    method: string;
+    path: string;
+    headers: Record<string, string>;
+    body: Uint8Array | null;
+}
+interface LoopbackResponse {
+    statusCode?: number;
+    statusMessage?: string;
+    headers?: Record<string, string>;
+    body?: string | ArrayBuffer | Uint8Array | null;
+}
+/**
+ * Reaches a server in this container that is not on this thread's router.
+ * Resolves `null` when nothing in the container listens on the port.
+ */
+type LoopbackTransport = (port: number, request: LoopbackRequest) => Promise<LoopbackResponse | null>;
 
 interface CoreModulesOptions {
     volume: RuntimeVolume;
@@ -748,6 +767,13 @@ interface CoreModulesOptions {
         router: VirtualHttpRouter;
         owner: string;
         fetch?: typeof globalThis.fetch;
+        /** Servers in other processes, for a router that holds only this thread's. */
+        loopback?: LoopbackTransport;
+        /**
+         * The container's outbound policy, applied to `fetch`, `http`, `https` and
+         * `WebSocket`. Omitted, requests leave the way the host's own would.
+         */
+        policy?: OutboundPolicy;
     };
     /** Backs `child_process`; without it the module reports as unavailable. */
     spawnChild?: SpawnChild;
@@ -813,6 +839,14 @@ declare function createCoreModules(options: CoreModulesOptions): {
      * exiting in the gap between `http.get` and its response callback.
      */
     pendingRequests(): number;
+    /** An error that escaped the program's callbacks: listeners, or print and exit 1. */
+    reportUncaught(error: unknown): void;
+    /** A rejection nobody handled, under the same rule. */
+    reportUnhandledRejection(reason: unknown): void;
+    /** The status a program ends with: `process.exit`'s code, else `process.exitCode`. */
+    exitStatus(): number;
+    /** Run `process.on("exit")` listeners once, for a program that ended by itself. */
+    emitExit(status: number): void;
 };
 
 interface EsmTransformResult {
@@ -996,6 +1030,12 @@ interface LocalRuntimeOptions {
     files?: Record<string, string | Uint8Array>;
     registry?: string;
     fetch?: typeof globalThis.fetch;
+    /**
+     * The outbound policy for guest `fetch`, `http`, `https` and `WebSocket`.
+     * Omitted, guest requests leave the way the host's would; `createContainer`
+     * always supplies one, closed unless the caller opens it.
+     */
+    network?: OutboundPolicy;
     /** Invoked when a program inside the runtime starts listening on a port. */
     onServerReady?: (port: number, url: string) => void;
     /** Extra package substitutions, merged over {@link WASM_ALIASES}. */
@@ -1067,8 +1107,12 @@ declare class LocalRuntimePod implements RuntimePod {
     private rolldownBinding;
     /** Backs outbound `http`/`https` client requests from inside the sandbox. */
     private readonly fetch;
+    /** What guest programs may reach outside the container. */
+    protected networkPolicy: OutboundPolicy | undefined;
     protected constructor(options: LocalRuntimeOptions);
     static boot(options?: LocalRuntimeOptions): Promise<LocalRuntimePod>;
+    /** Apply a container's outbound policy to programs started from now on. */
+    setNetworkPolicy(policy: OutboundPolicy): void;
     spawn(command: string, args?: string[], options?: Record<string, unknown>): Promise<RuntimeProcess>;
     /**
      * Rolldown's JavaScript API synchronously requires its compiled binding.
@@ -1164,6 +1208,15 @@ declare class WorkerRuntimePod extends LocalRuntimePod {
      * the two directions together across the Worker boundary.
      */
     private upgrade;
+    /**
+     * Answer a program that is calling a server in this container.
+     *
+     * A guest's router holds only the servers on its own thread, so a request to
+     * a port some other process opened comes here, where every server in the
+     * container is registered. `null` means nothing listens, which the guest
+     * reports as a refused connection.
+     */
+    private answerLoopback;
     private settleProxied;
     private closeProxies;
     teardown(): void;
@@ -1204,10 +1257,10 @@ declare class CleanPackageInstaller implements RuntimePackageInstaller {
     readonly options: CleanInstallerOptions;
     private readonly registry;
     private readonly fetcher;
-    private readonly metadata;
-    private readonly tarballs;
+    private metadata;
+    private tarballs;
     /** Single-version manifests, for the fields the packument omits. */
-    private readonly details;
+    private details;
     constructor(volume: RuntimeVolume, options?: CleanInstallerOptions);
     forCwd(cwd: string): CleanPackageInstaller;
     install(name: string, version?: string, options?: InstallOptions): Promise<RegistryManifest>;
@@ -1228,6 +1281,8 @@ declare class CleanPackageInstaller implements RuntimePackageInstaller {
      * being right and strictly more than refusing to install.
      */
     private platformDetail;
+    /** Overlap up to six sibling downloads; filesystem writes remain ordered. */
+    private prefetch;
     private getMetadata;
     private getTarball;
     private createBinLinks;
@@ -1621,6 +1676,117 @@ declare function renderInto(box: Container, element: HTMLElement, options?: {
     path?: string;
 }): Promise<HTMLIFrameElement>;
 
+/** Structural contracts keep optional engines out of the core dependency graph. */
+interface SqlDatabase {
+    exec(sql: string): Promise<{
+        rows: unknown[];
+    }[]>;
+}
+/** A deliberately small SQL CLI, not a PostgreSQL daemon or psql emulation. */
+declare function createSqlCommand(database: SqlDatabase, name?: string): Command;
+interface GitEngine {
+    init(options: any): Promise<any>;
+    add(options: any): Promise<any>;
+    commit(options: any): Promise<string>;
+    log(options: any): Promise<any[]>;
+    statusMatrix(options: any): Promise<[string, number, number, number][]>;
+}
+/** Local Git subset. No implicit network, credentials, proxy, or external service. */
+declare function createGitCommand(git: GitEngine): Command;
+
+/** Original experimental x86-64 ELF engine. No third-party CPU/compiler code. */
+
+interface OriginalX64Options {
+    maxInstructions?: number;
+}
+/** Experimental original engines: only static freestanding programs using documented opcodes. */
+declare function createOriginalX64Backends(options?: OriginalX64Options): BinaryBackend[];
+
+/** Frontend-only DOM automation. Uses the host browser; does not bundle Chromium. */
+interface FrontendAutomationOptions {
+    /** Trusted host-owned mount for visible test frames. Defaults to document.body. */
+    mount?: HTMLElement;
+    /** Map a virtual server URL to a same-origin preview URL. */
+    resolveUrl?: (url: string) => string | Promise<string>;
+    timeoutMs?: number;
+}
+declare class FrontendAutomationUnsupported extends Error {
+    readonly code = "ERR_FRONTEND_AUTOMATION_UNSUPPORTED";
+}
+declare class FrontendLocator {
+    private readonly query;
+    private readonly timeout;
+    constructor(query: () => Element[], timeout: () => number);
+    first(): FrontendLocator;
+    nth(index: number): FrontendLocator;
+    locator(selector: string): FrontendLocator;
+    count(): Promise<number>;
+    isVisible(): Promise<boolean>;
+    private element;
+    textContent(): Promise<string | null>;
+    innerText(): Promise<string>;
+    inputValue(): Promise<string>;
+    getAttribute(name: string): Promise<string | null>;
+    click(): Promise<void>;
+    fill(value: string): Promise<void>;
+    waitFor(options?: {
+        state?: "visible" | "hidden" | "attached" | "detached";
+        timeout?: number;
+    }): Promise<void>;
+}
+declare class FrontendPage {
+    private readonly options;
+    private readonly frame;
+    private timeout;
+    private closed;
+    constructor(options: FrontendAutomationOptions);
+    private doc;
+    setDefaultTimeout(ms: number): void;
+    locator(selector: string): FrontendLocator;
+    getByTestId(value: string): FrontendLocator;
+    getByText(text: string, options?: {
+        exact?: boolean;
+    }): FrontendLocator;
+    getByRole(role: string, options?: {
+        name?: string;
+    }): FrontendLocator;
+    private navigate;
+    setContent(html: string): Promise<void>;
+    goto(url: string): Promise<null>;
+    title(): Promise<string>;
+    content(): Promise<string>;
+    evaluate<T, A = undefined>(fn: ((arg: A) => T) | string, arg?: A): Promise<T>;
+    screenshot(): Promise<never>;
+    route(): Promise<never>;
+    close(): Promise<void>;
+}
+declare function createFrontendPlaywright(options?: FrontendAutomationOptions): {
+    capabilities: Readonly<{
+        engine: "host-browser";
+        fullPlaywright: false;
+        screenshots: false;
+        crossOrigin: false;
+        trustedEvents: false;
+    }>;
+    chromium: {
+        launch: (launchOptions?: Record<string, unknown>) => Promise<{
+            newPage(): Promise<FrontendPage>;
+            close(): Promise<void>;
+        }>;
+    };
+    firefox: {
+        launch: () => Promise<never>;
+    };
+    webkit: {
+        launch: () => Promise<never>;
+    };
+    dispose(): Promise<void>;
+    expect(locator: FrontendLocator): {
+        toBeVisible(): Promise<void>;
+        toHaveText(text: string): Promise<void>;
+    };
+};
+
 /**
  * sandboxedjs — a Linux-like container that runs entirely inside Node.js.
  *
@@ -1639,4 +1805,4 @@ declare function renderInto(box: Container, element: HTMLElement, options?: {
  * ```
  */
 
-export { ArithError, ChildHandle, ChildSpawnConfig, type CleanInstallerOptions, CleanPackageInstaller, Command, CommonJsEngine, type CommonJsEngineOptions, type CommonJsModule, Container, type ContainerTarget, type CoreModulesOptions, Cred, ERRNO, type ErrnoCode, type EsmTransformResult, ExecContext, IncompleteInputError, type InstallOptions, KERNEL_NAME, KERNEL_RELEASE, Kernel, type LocalRuntimeOptions, LocalRuntimePod, MemoryVolume, NODE_VERSION, NPM_VERSION, OS_RELEASE, OutputStream, type Preview, type PreviewOptions, type RootfsOptions, type RunWasiOptions, RuntimePackageInstaller, RuntimePod, RuntimeProcess, RuntimeVolume, SIGNALS, SIGNAL_NAMES, Session, Shell, ShellIO, Lexer as ShellLexer, ShellSyntaxError, SpawnChild, SysError, Terminal, type TerminalOptions, Vfs, VirtualHttpRouter, VirtualHttpServer, VirtualIncomingMessage, VirtualServerResponse, WASM_ALIASES, WasiError, WasiExit, WasiHost, type WasiHostOptions, type WasiStdin, type WorkerRuntimeOptions, WorkerRuntimePod, allCommands, buildRootfs, builtinNames, containerTarget, createContainer, createCoreModules, createPreview, createContainer as default, evalArith, exitCodeForSignal, expandPrompt, extractNpmTarball, fnmatch, getBuiltin, glob, globToRegex, hasMagic, installUserland, isBuiltinName, isSysError, isWasmBinary, looksLikeEsm, normalizeSignal, parse as parseShell, path as posixPath, renderInto, runWasi, startRuntimeWorker, strerror, syncChannelSupported, transformEsm, unameInfo, wasi as wasiCommand };
+export { ArithError, BinaryBackend, ChildHandle, ChildSpawnConfig, type CleanInstallerOptions, CleanPackageInstaller, Command, CommonJsEngine, type CommonJsEngineOptions, type CommonJsModule, Container, type ContainerTarget, type CoreModulesOptions, Cred, ERRNO, type ErrnoCode, type EsmTransformResult, ExecContext, type FrontendAutomationOptions, FrontendAutomationUnsupported, FrontendLocator, FrontendPage, type GitEngine, IncompleteInputError, type InstallOptions, KERNEL_NAME, KERNEL_RELEASE, Kernel, type LocalRuntimeOptions, LocalRuntimePod, MemoryVolume, NODE_VERSION, NPM_VERSION, OS_RELEASE, type OriginalX64Options, OutputStream, type Preview, type PreviewOptions, type RootfsOptions, type RunWasiOptions, RuntimePackageInstaller, RuntimePod, RuntimeProcess, RuntimeVolume, SIGNALS, SIGNAL_NAMES, Session, Shell, ShellIO, Lexer as ShellLexer, ShellSyntaxError, SpawnChild, type SqlDatabase, SysError, Terminal, type TerminalOptions, Vfs, VirtualHttpRouter, VirtualHttpServer, VirtualIncomingMessage, VirtualServerResponse, WASM_ALIASES, WasiError, WasiExit, WasiHost, type WasiHostOptions, type WasiStdin, type WorkerRuntimeOptions, WorkerRuntimePod, allCommands, buildRootfs, builtinNames, containerTarget, createContainer, createCoreModules, createFrontendPlaywright, createGitCommand, createOriginalX64Backends, createPreview, createSqlCommand, createContainer as default, evalArith, exitCodeForSignal, expandPrompt, extractNpmTarball, fnmatch, getBuiltin, glob, globToRegex, hasMagic, installUserland, isBuiltinName, isSysError, isWasmBinary, looksLikeEsm, normalizeSignal, parse as parseShell, path as posixPath, renderInto, runWasi, startRuntimeWorker, strerror, syncChannelSupported, transformEsm, unameInfo, wasi as wasiCommand };

package/dist/index.d.ts

@@ -1,8 +1,8 @@
-import { S as Shell, a as ShellIO, b as Session, N as Node, c as Command, K as Kernel, E as ExecContext, O as OutputStream, C as Container, d as createContainer } from './container-B5X6stfx.js';
-export { B as BufferSink, e as CPythonOptions, f as CallbackSink, g as CommandRegistry, h as ContainerFs, i as ContainerOptions, j as ContextInit, k as Env, l as ExecOptions, m as ExecResult, F as FileData, n as FileInput, o as FileOutput, G as GroupEntry, H as HttpResponse, I as InputStream, J as Job, p as KernelOptions, L as ListeningPort, M as MANIFEST_FORMAT, q as MANIFEST_SCHEMA_VERSION, r as MountEntry, s as NetInterface, t as NetworkOptions, u as NetworkStack, v as NullInput, w as NullOutput, P as PYTHON_VERSION, x as PasswdEntry, y as Pipe, z as Process, A as ProcessKind, D as ProcessOptions, Q as ProcessState, R as ProcessTable, T as PythonCapabilities, U as PythonOptions, V as PythonProfile, W as PythonRuntimeManifest, X as ResolvedExecutable, Y as RunOptions, Z as RunResult, _ as SessionInit, $ as SessionResult, a0 as SessionRunOptions, a1 as ShellExit, a2 as ShellInit, a3 as ShellOptions, a4 as SpawnHandle, a5 as Stdio, a6 as TeeOutput, a7 as UserDatabase, a8 as Variables, a9 as braceExpand, aa as captureStdio, ab as configureCPython, ac as configurePython, ad as createContext, ae as defineCommand, af as expandWord, ag as expandWords, ah as isCPythonAvailable, ai as isPythonAvailable, aj as resetPidCounter, ak as shellQuote, al as validateManifest } from './container-B5X6stfx.js';
-import { V as Vfs, C as Cred, R as RuntimeVolume, a as VirtualTcpNetwork, b as RuntimeHttpResponse, S as SpawnChild, c as SyncSpawn, d as VolumeStat, e as VolumeStats, f as RuntimePod, g as RuntimePackageInstaller, h as ChildSpawnConfig, i as ChildHandle, j as RuntimeProcess, k as RuntimeSocketPeer, l as RuntimeConnection } from './contracts-CVgctitO.js';
-export { D as DirEntry, m as ROOT_CRED, n as RuntimeProcessManager, o as RuntimeProcessResult, p as Stats, q as VirtualNode, r as VirtualProvider, W as WriteOptions, s as applyChmod, t as createChildProcessModule, u as formatMode, v as makeCred, w as octalMode, x as parseUmask } from './contracts-CVgctitO.js';
-import { M as MemoryVolume, a as MemoryVolumeSnapshotEntry } from './memory-volume-CWuWScIs.js';
+import { S as Shell, a as ShellIO, b as Session, N as Node, c as Command, K as Kernel, E as ExecContext, O as OutputStream, C as Container, B as BinaryBackend, d as createContainer } from './container-X8yZRFvW.js';
+export { e as BinaryExecutionRegistry, f as BinaryInfo, g as BinaryRequest, h as BufferSink, i as CPythonOptions, j as CallbackSink, k as CommandRegistry, l as ContainerFs, m as ContainerOptions, n as ContextInit, o as Env, p as ExecOptions, q as ExecResult, r as ExecutionDecision, s as ExecutionTier, F as FileData, t as FileInput, u as FileOutput, G as GroupEntry, H as HttpResponse, I as InputStream, J as Job, v as KernelOptions, L as ListeningPort, M as MANIFEST_FORMAT, w as MANIFEST_SCHEMA_VERSION, x as MountEntry, y as NetInterface, z as NetworkOptions, A as NetworkStack, D as NullInput, P as NullOutput, Q as PYTHON_VERSION, R as PasswdEntry, T as Pipe, U as Preparation, V as PreparedBinary, W as Process, X as ProcessKind, Y as ProcessOptions, Z as ProcessState, _ as ProcessTable, $ as PythonCapabilities, a0 as PythonOptions, a1 as PythonProfile, a2 as PythonRuntimeManifest, a3 as ResolvedExecutable, a4 as RunOptions, a5 as RunResult, a6 as SessionInit, a7 as SessionResult, a8 as SessionRunOptions, a9 as ShellExit, aa as ShellInit, ab as ShellOptions, ac as SpawnHandle, ad as Stdio, ae as TeeOutput, af as UserDatabase, ag as Variables, ah as WasmCommandArtifact, ai as WasmTranslator, aj as binaryDigest, ak as braceExpand, al as captureStdio, am as configureCPython, an as configurePython, ao as createContext, ap as createTranslationBackend, aq as createWasmCompatibilityBackend, ar as defineCommand, as as expandWord, at as expandWords, au as inspectElf, av as installWasmCommands, aw as isCPythonAvailable, ax as isElfBinary, ay as isPythonAvailable, az as resetPidCounter, aA as shellQuote, aB as validateManifest } from './container-X8yZRFvW.js';
+import { V as Vfs, C as Cred, R as RuntimeVolume, a as VirtualTcpNetwork, b as RuntimeHttpResponse, O as OutboundPolicy, S as SpawnChild, c as SyncSpawn, d as VolumeStat, e as VolumeStats, f as RuntimePod, g as RuntimePackageInstaller, h as ChildSpawnConfig, i as ChildHandle, j as RuntimeProcess, k as RuntimeSocketPeer, l as RuntimeConnection } from './contracts-C2_dTgk3.js';
+export { D as DirEntry, m as ROOT_CRED, n as RuntimeProcessManager, o as RuntimeProcessResult, p as Stats, q as VirtualNode, r as VirtualProvider, W as WriteOptions, s as applyChmod, t as createChildProcessModule, u as formatMode, v as makeCred, w as octalMode, x as parseUmask } from './contracts-C2_dTgk3.js';
+import { M as MemoryVolume, a as MemoryVolumeSnapshotEntry } from './memory-volume-CG56p660.js';
 import EventEmitter from 'events/events.js';
 import streamModule from 'stream-browserify';
 
@@ -213,6 +213,7 @@ declare const ERRNO: {
     readonly ECONNRESET: 104;
     readonly ENOTCONN: 107;
     readonly ETIMEDOUT: 110;
+    readonly ENETUNREACH: 101;
     readonly ECONNREFUSED: 111;
     readonly EHOSTUNREACH: 113;
     readonly ENOTSUP: 95;
@@ -735,6 +736,24 @@ interface VirtualConnection {
     /** The far end went away. */
     close(): void;
 }
+/** A loopback request, as it crosses from a program to whoever holds the port. */
+interface LoopbackRequest {
+    method: string;
+    path: string;
+    headers: Record<string, string>;
+    body: Uint8Array | null;
+}
+interface LoopbackResponse {
+    statusCode?: number;
+    statusMessage?: string;
+    headers?: Record<string, string>;
+    body?: string | ArrayBuffer | Uint8Array | null;
+}
+/**
+ * Reaches a server in this container that is not on this thread's router.
+ * Resolves `null` when nothing in the container listens on the port.
+ */
+type LoopbackTransport = (port: number, request: LoopbackRequest) => Promise<LoopbackResponse | null>;
 
 interface CoreModulesOptions {
     volume: RuntimeVolume;
@@ -748,6 +767,13 @@ interface CoreModulesOptions {
         router: VirtualHttpRouter;
         owner: string;
         fetch?: typeof globalThis.fetch;
+        /** Servers in other processes, for a router that holds only this thread's. */
+        loopback?: LoopbackTransport;
+        /**
+         * The container's outbound policy, applied to `fetch`, `http`, `https` and
+         * `WebSocket`. Omitted, requests leave the way the host's own would.
+         */
+        policy?: OutboundPolicy;
     };
     /** Backs `child_process`; without it the module reports as unavailable. */
     spawnChild?: SpawnChild;
@@ -813,6 +839,14 @@ declare function createCoreModules(options: CoreModulesOptions): {
      * exiting in the gap between `http.get` and its response callback.
      */
     pendingRequests(): number;
+    /** An error that escaped the program's callbacks: listeners, or print and exit 1. */
+    reportUncaught(error: unknown): void;
+    /** A rejection nobody handled, under the same rule. */
+    reportUnhandledRejection(reason: unknown): void;
+    /** The status a program ends with: `process.exit`'s code, else `process.exitCode`. */
+    exitStatus(): number;
+    /** Run `process.on("exit")` listeners once, for a program that ended by itself. */
+    emitExit(status: number): void;
 };
 
 interface EsmTransformResult {
@@ -996,6 +1030,12 @@ interface LocalRuntimeOptions {
     files?: Record<string, string | Uint8Array>;
     registry?: string;
     fetch?: typeof globalThis.fetch;
+    /**
+     * The outbound policy for guest `fetch`, `http`, `https` and `WebSocket`.
+     * Omitted, guest requests leave the way the host's would; `createContainer`
+     * always supplies one, closed unless the caller opens it.
+     */
+    network?: OutboundPolicy;
     /** Invoked when a program inside the runtime starts listening on a port. */
     onServerReady?: (port: number, url: string) => void;
     /** Extra package substitutions, merged over {@link WASM_ALIASES}. */
@@ -1067,8 +1107,12 @@ declare class LocalRuntimePod implements RuntimePod {
     private rolldownBinding;
     /** Backs outbound `http`/`https` client requests from inside the sandbox. */
     private readonly fetch;
+    /** What guest programs may reach outside the container. */
+    protected networkPolicy: OutboundPolicy | undefined;
     protected constructor(options: LocalRuntimeOptions);
     static boot(options?: LocalRuntimeOptions): Promise<LocalRuntimePod>;
+    /** Apply a container's outbound policy to programs started from now on. */
+    setNetworkPolicy(policy: OutboundPolicy): void;
     spawn(command: string, args?: string[], options?: Record<string, unknown>): Promise<RuntimeProcess>;
     /**
      * Rolldown's JavaScript API synchronously requires its compiled binding.
@@ -1164,6 +1208,15 @@ declare class WorkerRuntimePod extends LocalRuntimePod {
      * the two directions together across the Worker boundary.
      */
     private upgrade;
+    /**
+     * Answer a program that is calling a server in this container.
+     *
+     * A guest's router holds only the servers on its own thread, so a request to
+     * a port some other process opened comes here, where every server in the
+     * container is registered. `null` means nothing listens, which the guest
+     * reports as a refused connection.
+     */
+    private answerLoopback;
     private settleProxied;
     private closeProxies;
     teardown(): void;
@@ -1204,10 +1257,10 @@ declare class CleanPackageInstaller implements RuntimePackageInstaller {
     readonly options: CleanInstallerOptions;
     private readonly registry;
     private readonly fetcher;
-    private readonly metadata;
-    private readonly tarballs;
+    private metadata;
+    private tarballs;
     /** Single-version manifests, for the fields the packument omits. */
-    private readonly details;
+    private details;
     constructor(volume: RuntimeVolume, options?: CleanInstallerOptions);
     forCwd(cwd: string): CleanPackageInstaller;
     install(name: string, version?: string, options?: InstallOptions): Promise<RegistryManifest>;
@@ -1228,6 +1281,8 @@ declare class CleanPackageInstaller implements RuntimePackageInstaller {
      * being right and strictly more than refusing to install.
      */
     private platformDetail;
+    /** Overlap up to six sibling downloads; filesystem writes remain ordered. */
+    private prefetch;
     private getMetadata;
     private getTarball;
     private createBinLinks;
@@ -1621,6 +1676,117 @@ declare function renderInto(box: Container, element: HTMLElement, options?: {
     path?: string;
 }): Promise<HTMLIFrameElement>;
 
+/** Structural contracts keep optional engines out of the core dependency graph. */
+interface SqlDatabase {
+    exec(sql: string): Promise<{
+        rows: unknown[];
+    }[]>;
+}
+/** A deliberately small SQL CLI, not a PostgreSQL daemon or psql emulation. */
+declare function createSqlCommand(database: SqlDatabase, name?: string): Command;
+interface GitEngine {
+    init(options: any): Promise<any>;
+    add(options: any): Promise<any>;
+    commit(options: any): Promise<string>;
+    log(options: any): Promise<any[]>;
+    statusMatrix(options: any): Promise<[string, number, number, number][]>;
+}
+/** Local Git subset. No implicit network, credentials, proxy, or external service. */
+declare function createGitCommand(git: GitEngine): Command;
+
+/** Original experimental x86-64 ELF engine. No third-party CPU/compiler code. */
+
+interface OriginalX64Options {
+    maxInstructions?: number;
+}
+/** Experimental original engines: only static freestanding programs using documented opcodes. */
+declare function createOriginalX64Backends(options?: OriginalX64Options): BinaryBackend[];
+
+/** Frontend-only DOM automation. Uses the host browser; does not bundle Chromium. */
+interface FrontendAutomationOptions {
+    /** Trusted host-owned mount for visible test frames. Defaults to document.body. */
+    mount?: HTMLElement;
+    /** Map a virtual server URL to a same-origin preview URL. */
+    resolveUrl?: (url: string) => string | Promise<string>;
+    timeoutMs?: number;
+}
+declare class FrontendAutomationUnsupported extends Error {
+    readonly code = "ERR_FRONTEND_AUTOMATION_UNSUPPORTED";
+}
+declare class FrontendLocator {
+    private readonly query;
+    private readonly timeout;
+    constructor(query: () => Element[], timeout: () => number);
+    first(): FrontendLocator;
+    nth(index: number): FrontendLocator;
+    locator(selector: string): FrontendLocator;
+    count(): Promise<number>;
+    isVisible(): Promise<boolean>;
+    private element;
+    textContent(): Promise<string | null>;
+    innerText(): Promise<string>;
+    inputValue(): Promise<string>;
+    getAttribute(name: string): Promise<string | null>;
+    click(): Promise<void>;
+    fill(value: string): Promise<void>;
+    waitFor(options?: {
+        state?: "visible" | "hidden" | "attached" | "detached";
+        timeout?: number;
+    }): Promise<void>;
+}
+declare class FrontendPage {
+    private readonly options;
+    private readonly frame;
+    private timeout;
+    private closed;
+    constructor(options: FrontendAutomationOptions);
+    private doc;
+    setDefaultTimeout(ms: number): void;
+    locator(selector: string): FrontendLocator;
+    getByTestId(value: string): FrontendLocator;
+    getByText(text: string, options?: {
+        exact?: boolean;
+    }): FrontendLocator;
+    getByRole(role: string, options?: {
+        name?: string;
+    }): FrontendLocator;
+    private navigate;
+    setContent(html: string): Promise<void>;
+    goto(url: string): Promise<null>;
+    title(): Promise<string>;
+    content(): Promise<string>;
+    evaluate<T, A = undefined>(fn: ((arg: A) => T) | string, arg?: A): Promise<T>;
+    screenshot(): Promise<never>;
+    route(): Promise<never>;
+    close(): Promise<void>;
+}
+declare function createFrontendPlaywright(options?: FrontendAutomationOptions): {
+    capabilities: Readonly<{
+        engine: "host-browser";
+        fullPlaywright: false;
+        screenshots: false;
+        crossOrigin: false;
+        trustedEvents: false;
+    }>;
+    chromium: {
+        launch: (launchOptions?: Record<string, unknown>) => Promise<{
+            newPage(): Promise<FrontendPage>;
+            close(): Promise<void>;
+        }>;
+    };
+    firefox: {
+        launch: () => Promise<never>;
+    };
+    webkit: {
+        launch: () => Promise<never>;
+    };
+    dispose(): Promise<void>;
+    expect(locator: FrontendLocator): {
+        toBeVisible(): Promise<void>;
+        toHaveText(text: string): Promise<void>;
+    };
+};
+
 /**
  * sandboxedjs — a Linux-like container that runs entirely inside Node.js.
  *
@@ -1639,4 +1805,4 @@ declare function renderInto(box: Container, element: HTMLElement, options?: {
  * ```
  */
 
-export { ArithError, ChildHandle, ChildSpawnConfig, type CleanInstallerOptions, CleanPackageInstaller, Command, CommonJsEngine, type CommonJsEngineOptions, type CommonJsModule, Container, type ContainerTarget, type CoreModulesOptions, Cred, ERRNO, type ErrnoCode, type EsmTransformResult, ExecContext, IncompleteInputError, type InstallOptions, KERNEL_NAME, KERNEL_RELEASE, Kernel, type LocalRuntimeOptions, LocalRuntimePod, MemoryVolume, NODE_VERSION, NPM_VERSION, OS_RELEASE, OutputStream, type Preview, type PreviewOptions, type RootfsOptions, type RunWasiOptions, RuntimePackageInstaller, RuntimePod, RuntimeProcess, RuntimeVolume, SIGNALS, SIGNAL_NAMES, Session, Shell, ShellIO, Lexer as ShellLexer, ShellSyntaxError, SpawnChild, SysError, Terminal, type TerminalOptions, Vfs, VirtualHttpRouter, VirtualHttpServer, VirtualIncomingMessage, VirtualServerResponse, WASM_ALIASES, WasiError, WasiExit, WasiHost, type WasiHostOptions, type WasiStdin, type WorkerRuntimeOptions, WorkerRuntimePod, allCommands, buildRootfs, builtinNames, containerTarget, createContainer, createCoreModules, createPreview, createContainer as default, evalArith, exitCodeForSignal, expandPrompt, extractNpmTarball, fnmatch, getBuiltin, glob, globToRegex, hasMagic, installUserland, isBuiltinName, isSysError, isWasmBinary, looksLikeEsm, normalizeSignal, parse as parseShell, path as posixPath, renderInto, runWasi, startRuntimeWorker, strerror, syncChannelSupported, transformEsm, unameInfo, wasi as wasiCommand };
+export { ArithError, BinaryBackend, ChildHandle, ChildSpawnConfig, type CleanInstallerOptions, CleanPackageInstaller, Command, CommonJsEngine, type CommonJsEngineOptions, type CommonJsModule, Container, type ContainerTarget, type CoreModulesOptions, Cred, ERRNO, type ErrnoCode, type EsmTransformResult, ExecContext, type FrontendAutomationOptions, FrontendAutomationUnsupported, FrontendLocator, FrontendPage, type GitEngine, IncompleteInputError, type InstallOptions, KERNEL_NAME, KERNEL_RELEASE, Kernel, type LocalRuntimeOptions, LocalRuntimePod, MemoryVolume, NODE_VERSION, NPM_VERSION, OS_RELEASE, type OriginalX64Options, OutputStream, type Preview, type PreviewOptions, type RootfsOptions, type RunWasiOptions, RuntimePackageInstaller, RuntimePod, RuntimeProcess, RuntimeVolume, SIGNALS, SIGNAL_NAMES, Session, Shell, ShellIO, Lexer as ShellLexer, ShellSyntaxError, SpawnChild, type SqlDatabase, SysError, Terminal, type TerminalOptions, Vfs, VirtualHttpRouter, VirtualHttpServer, VirtualIncomingMessage, VirtualServerResponse, WASM_ALIASES, WasiError, WasiExit, WasiHost, type WasiHostOptions, type WasiStdin, type WorkerRuntimeOptions, WorkerRuntimePod, allCommands, buildRootfs, builtinNames, containerTarget, createContainer, createCoreModules, createFrontendPlaywright, createGitCommand, createOriginalX64Backends, createPreview, createSqlCommand, createContainer as default, evalArith, exitCodeForSignal, expandPrompt, extractNpmTarball, fnmatch, getBuiltin, glob, globToRegex, hasMagic, installUserland, isBuiltinName, isSysError, isWasmBinary, looksLikeEsm, normalizeSignal, parse as parseShell, path as posixPath, renderInto, runWasi, startRuntimeWorker, strerror, syncChannelSupported, transformEsm, unameInfo, wasi as wasiCommand };