sandboxedjs 0.1.81 → 0.1.85

package/dist/agent.d.cts

@@ -1,5 +1,5 @@
-import { C as Container } from './container-LwAV9JTH.cjs';
-import './contracts-C2_dTgk3.cjs';
+import { C as Container } from './container-BGmhPbSD.cjs';
+import './contracts-BkWBTH8E.cjs';
 
 /**
  * Structural copies of the LangChain Deep Agents backend contract.

package/dist/agent.d.ts

@@ -1,5 +1,5 @@
-import { C as Container } from './container-CUB12Moo.js';
-import './contracts-C2_dTgk3.js';
+import { C as Container } from './container-DCwYX_Cx.js';
+import './contracts-BkWBTH8E.js';
 
 /**
  * Structural copies of the LangChain Deep Agents backend contract.

package/dist/{container-CUB12Moo.d.ts → container-BGmhPbSD.d.cts}

@@ -1,4 +1,4 @@
-import { V as Vfs, C as Cred, f as RuntimePod, O as OutboundPolicy, D as DirEntry, p as Stats } from './contracts-C2_dTgk3.js';
+import { V as Vfs, C as Cred, f as RuntimePod, O as OutboundPolicy, D as DirEntry, p as Stats } from './contracts-BkWBTH8E.cjs';
 
 /**
  * Byte streams for stdin/stdout/stderr, pipelines and redirections.
@@ -210,6 +210,8 @@ interface ProcessOptions {
     pgid?: number;
     sid?: number;
     stdio?: Partial<Stdio>;
+    /** Descriptors above 2, readable and writable from this process's side. */
+    fds?: Record<number, InputStream & OutputStream>;
     tty?: string | null;
     /** Marks the process as a shell builtin frame rather than a real command. */
     kind?: ProcessKind;
@@ -235,6 +237,8 @@ declare class Process {
     stdin: InputStream;
     stdout: OutputStream;
     stderr: OutputStream;
+    /** Descriptors above 2 the parent handed over, such as Chromium's fds 3 and 4. */
+    readonly fds: Map<number, InputStream & OutputStream>;
     readonly children: Set<Process>;
     private readonly aborter;
     private readonly exitWaiters;
@@ -610,6 +614,11 @@ interface RunOptions {
     tty?: string | null;
     /** Wall-clock budget; the process is sent SIGKILL when it expires. */
     timeoutMs?: number;
+    /**
+     * Descriptors above 2, keyed by number. Each is readable and writable from
+     * the child's side, the way an inherited socketpair end is.
+     */
+    fds?: Record<number, InputStream & OutputStream>;
 }
 interface RunResult {
     exitCode: number;

package/dist/{container-LwAV9JTH.d.cts → container-DCwYX_Cx.d.ts}

@@ -1,4 +1,4 @@
-import { V as Vfs, C as Cred, f as RuntimePod, O as OutboundPolicy, D as DirEntry, p as Stats } from './contracts-C2_dTgk3.cjs';
+import { V as Vfs, C as Cred, f as RuntimePod, O as OutboundPolicy, D as DirEntry, p as Stats } from './contracts-BkWBTH8E.js';
 
 /**
  * Byte streams for stdin/stdout/stderr, pipelines and redirections.
@@ -210,6 +210,8 @@ interface ProcessOptions {
     pgid?: number;
     sid?: number;
     stdio?: Partial<Stdio>;
+    /** Descriptors above 2, readable and writable from this process's side. */
+    fds?: Record<number, InputStream & OutputStream>;
     tty?: string | null;
     /** Marks the process as a shell builtin frame rather than a real command. */
     kind?: ProcessKind;
@@ -235,6 +237,8 @@ declare class Process {
     stdin: InputStream;
     stdout: OutputStream;
     stderr: OutputStream;
+    /** Descriptors above 2 the parent handed over, such as Chromium's fds 3 and 4. */
+    readonly fds: Map<number, InputStream & OutputStream>;
     readonly children: Set<Process>;
     private readonly aborter;
     private readonly exitWaiters;
@@ -610,6 +614,11 @@ interface RunOptions {
     tty?: string | null;
     /** Wall-clock budget; the process is sent SIGKILL when it expires. */
     timeoutMs?: number;
+    /**
+     * Descriptors above 2, keyed by number. Each is readable and writable from
+     * the child's side, the way an inherited socketpair end is.
+     */
+    fds?: Record<number, InputStream & OutputStream>;
 }
 interface RunResult {
     exitCode: number;

package/dist/{contracts-C2_dTgk3.d.cts → contracts-BkWBTH8E.d.cts}

@@ -1,9 +1,20 @@
+type IpcSide = "parent" | "child";
+/** One end of a channel, as a process sees it. */
+interface IpcEndpoint {
+    send(message: unknown): void;
+    disconnect(): void;
+}
+/** How a process reaches the host's channels, wherever the process runs. */
+interface IpcTransport {
+    attach(id: string, side: IpcSide, onMessage: (message: unknown) => void, onDisconnect: () => void): IpcEndpoint;
+}
+
 /** The handle a pod's process manager returns. */
 interface ChildHandle {
     pid: number;
     state: "starting" | "running" | "exited";
     exitCode: number | undefined;
-    on(event: "stdout" | "stderr" | "exit" | "rawmode", listener: (...args: any[]) => void): unknown;
+    on(event: "stdout" | "stderr" | "exit" | "rawmode" | "fd", listener: (...args: any[]) => void): unknown;
     exec(): void;
     sendStdin(data: string): void;
     /**
@@ -14,6 +25,17 @@ interface ChildHandle {
      * an end that never comes, and the parent waits on its exit.
      */
     endStdin?(): void;
+    /**
+     * Write to, or close, a descriptor above 2 that the parent asked for with
+     * `stdio[n] = "pipe"`. Output on those descriptors arrives as `fd` events
+     * carrying `(fd, text)`.
+     *
+     * Chromium's `--remote-debugging-pipe` is the reason: Playwright speaks the
+     * DevTools protocol over fds 3 and 4, and a child without them cannot be
+     * driven at all.
+     */
+    writeFd?(fd: number, data: string): void;
+    endFd?(fd: number): void;
     kill(signal?: string): void;
 }
 interface ChildSpawnConfig {
@@ -37,6 +59,8 @@ interface ChildSpawnConfig {
      * left open on a parent that will never write to it.
      */
     stdinIgnored?: boolean;
+    /** Descriptors above 2 the parent opened as pipes, e.g. `[3, 4]`. */
+    extraPipes?: number[];
 }
 type SpawnChild = (config: ChildSpawnConfig) => ChildHandle;
 /**
@@ -63,7 +87,13 @@ type SyncSpawn = (request: {
         message: string;
     };
 };
-declare function createChildProcessModule(spawnChild: SpawnChild, defaultCwd: () => string, syncSpawn?: SyncSpawn, defaultEnv?: () => Record<string, string>): Record<string, unknown>;
+declare function createChildProcessModule(spawnChild: SpawnChild, defaultCwd: () => string, syncSpawn?: SyncSpawn, defaultEnv?: () => Record<string, string>, lifecycle?: {
+    referenceChanged?: (delta: number) => void;
+    stdout?: (text: string) => void;
+    stderr?: (text: string) => void;
+    /** Where `fork` channels live; without one a child simply has none. */
+    ipc?: IpcTransport;
+}): Record<string, unknown>;
 
 type FileKind = "file" | "directory" | "symlink" | "chardev" | "blockdev" | "fifo" | "socket";
 /** Render as `drwxr-xr-x`, honouring setuid/setgid/sticky. */
@@ -433,8 +463,14 @@ interface RuntimeProcess {
      * reports the program turning terminal raw mode on or off, which a terminal
      * needs so that it stops echoing input the program is drawing itself.
      */
-    on(event: "output" | "error" | "exit" | "rawmode", listener: (...args: any[]) => void): this;
-    write(data: string): void;
+    /**
+     * `raw-output` is optional: a process that sets `rawOutput` emits stdout
+     * there as written, bytes included, alongside the decoded `output`.
+     */
+    on(event: "output" | "raw-output" | "error" | "exit" | "rawmode", listener: (...args: any[]) => void): this;
+    readonly rawOutput?: boolean;
+    /** Input for the program. Bytes are delivered as bytes: a pipe may carry binary framing. */
+    write(data: string | Uint8Array): void;
     kill(signal?: string): void;
 }
 interface RuntimeHttpResponse {
@@ -513,4 +549,4 @@ interface RuntimePod {
     teardown(): void;
 }
 
-export { type Cred as C, type DirEntry as D, type OutboundPolicy as O, type RuntimeVolume as R, type SpawnChild as S, Vfs as V, type WriteOptions as W, VirtualTcpNetwork as a, type RuntimeHttpResponse as b, type SyncSpawn as c, type VolumeStat as d, type VolumeStats as e, type RuntimePod as f, type RuntimePackageInstaller as g, type ChildSpawnConfig as h, type ChildHandle as i, type RuntimeProcess as j, type RuntimeSocketPeer as k, type RuntimeConnection as l, ROOT_CRED as m, type RuntimeProcessManager as n, type RuntimeProcessResult as o, Stats as p, type VirtualNode as q, type VirtualProvider as r, applyChmod as s, createChildProcessModule as t, formatMode as u, makeCred as v, octalMode as w, parseUmask as x };
+export { type Cred as C, type DirEntry as D, type IpcTransport as I, type OutboundPolicy as O, type RuntimeVolume as R, type SpawnChild as S, Vfs as V, type WriteOptions as W, VirtualTcpNetwork as a, type RuntimeHttpResponse as b, type SyncSpawn as c, type VolumeStat as d, type VolumeStats as e, type RuntimePod as f, type RuntimePackageInstaller as g, type ChildSpawnConfig as h, type ChildHandle as i, type RuntimeProcess as j, type RuntimeSocketPeer as k, type RuntimeConnection as l, ROOT_CRED as m, type RuntimeProcessManager as n, type RuntimeProcessResult as o, Stats as p, type VirtualNode as q, type VirtualProvider as r, applyChmod as s, createChildProcessModule as t, formatMode as u, makeCred as v, octalMode as w, parseUmask as x };

package/dist/{contracts-C2_dTgk3.d.ts → contracts-BkWBTH8E.d.ts}

@@ -1,9 +1,20 @@
+type IpcSide = "parent" | "child";
+/** One end of a channel, as a process sees it. */
+interface IpcEndpoint {
+    send(message: unknown): void;
+    disconnect(): void;
+}
+/** How a process reaches the host's channels, wherever the process runs. */
+interface IpcTransport {
+    attach(id: string, side: IpcSide, onMessage: (message: unknown) => void, onDisconnect: () => void): IpcEndpoint;
+}
+
 /** The handle a pod's process manager returns. */
 interface ChildHandle {
     pid: number;
     state: "starting" | "running" | "exited";
     exitCode: number | undefined;
-    on(event: "stdout" | "stderr" | "exit" | "rawmode", listener: (...args: any[]) => void): unknown;
+    on(event: "stdout" | "stderr" | "exit" | "rawmode" | "fd", listener: (...args: any[]) => void): unknown;
     exec(): void;
     sendStdin(data: string): void;
     /**
@@ -14,6 +25,17 @@ interface ChildHandle {
      * an end that never comes, and the parent waits on its exit.
      */
     endStdin?(): void;
+    /**
+     * Write to, or close, a descriptor above 2 that the parent asked for with
+     * `stdio[n] = "pipe"`. Output on those descriptors arrives as `fd` events
+     * carrying `(fd, text)`.
+     *
+     * Chromium's `--remote-debugging-pipe` is the reason: Playwright speaks the
+     * DevTools protocol over fds 3 and 4, and a child without them cannot be
+     * driven at all.
+     */
+    writeFd?(fd: number, data: string): void;
+    endFd?(fd: number): void;
     kill(signal?: string): void;
 }
 interface ChildSpawnConfig {
@@ -37,6 +59,8 @@ interface ChildSpawnConfig {
      * left open on a parent that will never write to it.
      */
     stdinIgnored?: boolean;
+    /** Descriptors above 2 the parent opened as pipes, e.g. `[3, 4]`. */
+    extraPipes?: number[];
 }
 type SpawnChild = (config: ChildSpawnConfig) => ChildHandle;
 /**
@@ -63,7 +87,13 @@ type SyncSpawn = (request: {
         message: string;
     };
 };
-declare function createChildProcessModule(spawnChild: SpawnChild, defaultCwd: () => string, syncSpawn?: SyncSpawn, defaultEnv?: () => Record<string, string>): Record<string, unknown>;
+declare function createChildProcessModule(spawnChild: SpawnChild, defaultCwd: () => string, syncSpawn?: SyncSpawn, defaultEnv?: () => Record<string, string>, lifecycle?: {
+    referenceChanged?: (delta: number) => void;
+    stdout?: (text: string) => void;
+    stderr?: (text: string) => void;
+    /** Where `fork` channels live; without one a child simply has none. */
+    ipc?: IpcTransport;
+}): Record<string, unknown>;
 
 type FileKind = "file" | "directory" | "symlink" | "chardev" | "blockdev" | "fifo" | "socket";
 /** Render as `drwxr-xr-x`, honouring setuid/setgid/sticky. */
@@ -433,8 +463,14 @@ interface RuntimeProcess {
      * reports the program turning terminal raw mode on or off, which a terminal
      * needs so that it stops echoing input the program is drawing itself.
      */
-    on(event: "output" | "error" | "exit" | "rawmode", listener: (...args: any[]) => void): this;
-    write(data: string): void;
+    /**
+     * `raw-output` is optional: a process that sets `rawOutput` emits stdout
+     * there as written, bytes included, alongside the decoded `output`.
+     */
+    on(event: "output" | "raw-output" | "error" | "exit" | "rawmode", listener: (...args: any[]) => void): this;
+    readonly rawOutput?: boolean;
+    /** Input for the program. Bytes are delivered as bytes: a pipe may carry binary framing. */
+    write(data: string | Uint8Array): void;
     kill(signal?: string): void;
 }
 interface RuntimeHttpResponse {
@@ -513,4 +549,4 @@ interface RuntimePod {
     teardown(): void;
 }
 
-export { type Cred as C, type DirEntry as D, type OutboundPolicy as O, type RuntimeVolume as R, type SpawnChild as S, Vfs as V, type WriteOptions as W, VirtualTcpNetwork as a, type RuntimeHttpResponse as b, type SyncSpawn as c, type VolumeStat as d, type VolumeStats as e, type RuntimePod as f, type RuntimePackageInstaller as g, type ChildSpawnConfig as h, type ChildHandle as i, type RuntimeProcess as j, type RuntimeSocketPeer as k, type RuntimeConnection as l, ROOT_CRED as m, type RuntimeProcessManager as n, type RuntimeProcessResult as o, Stats as p, type VirtualNode as q, type VirtualProvider as r, applyChmod as s, createChildProcessModule as t, formatMode as u, makeCred as v, octalMode as w, parseUmask as x };
+export { type Cred as C, type DirEntry as D, type IpcTransport as I, type OutboundPolicy as O, type RuntimeVolume as R, type SpawnChild as S, Vfs as V, type WriteOptions as W, VirtualTcpNetwork as a, type RuntimeHttpResponse as b, type SyncSpawn as c, type VolumeStat as d, type VolumeStats as e, type RuntimePod as f, type RuntimePackageInstaller as g, type ChildSpawnConfig as h, type ChildHandle as i, type RuntimeProcess as j, type RuntimeSocketPeer as k, type RuntimeConnection as l, ROOT_CRED as m, type RuntimeProcessManager as n, type RuntimeProcessResult as o, Stats as p, type VirtualNode as q, type VirtualProvider as r, applyChmod as s, createChildProcessModule as t, formatMode as u, makeCred as v, octalMode as w, parseUmask as x };