sandboxedjs 0.1.83 → 0.1.86

package/dist/agent.d.cts

@@ -1,5 +1,5 @@
-import { C as Container } from './container-B14Q03ng.cjs';
-import './contracts-DNkSvBCM.cjs';
+import { C as Container } from './container-BGmhPbSD.cjs';
+import './contracts-BkWBTH8E.cjs';
 
 /**
  * Structural copies of the LangChain Deep Agents backend contract.

package/dist/agent.d.ts

@@ -1,5 +1,5 @@
-import { C as Container } from './container-DtVUncWL.js';
-import './contracts-DNkSvBCM.js';
+import { C as Container } from './container-DCwYX_Cx.js';
+import './contracts-BkWBTH8E.js';
 
 /**
  * Structural copies of the LangChain Deep Agents backend contract.

package/dist/{container-DtVUncWL.d.ts → container-BGmhPbSD.d.cts}

@@ -1,4 +1,4 @@
-import { V as Vfs, C as Cred, f as RuntimePod, O as OutboundPolicy, D as DirEntry, p as Stats } from './contracts-DNkSvBCM.js';
+import { V as Vfs, C as Cred, f as RuntimePod, O as OutboundPolicy, D as DirEntry, p as Stats } from './contracts-BkWBTH8E.cjs';
 
 /**
  * Byte streams for stdin/stdout/stderr, pipelines and redirections.
@@ -210,6 +210,8 @@ interface ProcessOptions {
     pgid?: number;
     sid?: number;
     stdio?: Partial<Stdio>;
+    /** Descriptors above 2, readable and writable from this process's side. */
+    fds?: Record<number, InputStream & OutputStream>;
     tty?: string | null;
     /** Marks the process as a shell builtin frame rather than a real command. */
     kind?: ProcessKind;
@@ -235,6 +237,8 @@ declare class Process {
     stdin: InputStream;
     stdout: OutputStream;
     stderr: OutputStream;
+    /** Descriptors above 2 the parent handed over, such as Chromium's fds 3 and 4. */
+    readonly fds: Map<number, InputStream & OutputStream>;
     readonly children: Set<Process>;
     private readonly aborter;
     private readonly exitWaiters;
@@ -610,6 +614,11 @@ interface RunOptions {
     tty?: string | null;
     /** Wall-clock budget; the process is sent SIGKILL when it expires. */
     timeoutMs?: number;
+    /**
+     * Descriptors above 2, keyed by number. Each is readable and writable from
+     * the child's side, the way an inherited socketpair end is.
+     */
+    fds?: Record<number, InputStream & OutputStream>;
 }
 interface RunResult {
     exitCode: number;

package/dist/{container-B14Q03ng.d.cts → container-DCwYX_Cx.d.ts}

@@ -1,4 +1,4 @@
-import { V as Vfs, C as Cred, f as RuntimePod, O as OutboundPolicy, D as DirEntry, p as Stats } from './contracts-DNkSvBCM.cjs';
+import { V as Vfs, C as Cred, f as RuntimePod, O as OutboundPolicy, D as DirEntry, p as Stats } from './contracts-BkWBTH8E.js';
 
 /**
  * Byte streams for stdin/stdout/stderr, pipelines and redirections.
@@ -210,6 +210,8 @@ interface ProcessOptions {
     pgid?: number;
     sid?: number;
     stdio?: Partial<Stdio>;
+    /** Descriptors above 2, readable and writable from this process's side. */
+    fds?: Record<number, InputStream & OutputStream>;
     tty?: string | null;
     /** Marks the process as a shell builtin frame rather than a real command. */
     kind?: ProcessKind;
@@ -235,6 +237,8 @@ declare class Process {
     stdin: InputStream;
     stdout: OutputStream;
     stderr: OutputStream;
+    /** Descriptors above 2 the parent handed over, such as Chromium's fds 3 and 4. */
+    readonly fds: Map<number, InputStream & OutputStream>;
     readonly children: Set<Process>;
     private readonly aborter;
     private readonly exitWaiters;
@@ -610,6 +614,11 @@ interface RunOptions {
     tty?: string | null;
     /** Wall-clock budget; the process is sent SIGKILL when it expires. */
     timeoutMs?: number;
+    /**
+     * Descriptors above 2, keyed by number. Each is readable and writable from
+     * the child's side, the way an inherited socketpair end is.
+     */
+    fds?: Record<number, InputStream & OutputStream>;
 }
 interface RunResult {
     exitCode: number;

package/dist/{contracts-DNkSvBCM.d.cts → contracts-BkWBTH8E.d.cts}

@@ -14,7 +14,7 @@ interface ChildHandle {
     pid: number;
     state: "starting" | "running" | "exited";
     exitCode: number | undefined;
-    on(event: "stdout" | "stderr" | "exit" | "rawmode", listener: (...args: any[]) => void): unknown;
+    on(event: "stdout" | "stderr" | "exit" | "rawmode" | "fd", listener: (...args: any[]) => void): unknown;
     exec(): void;
     sendStdin(data: string): void;
     /**
@@ -25,6 +25,17 @@ interface ChildHandle {
      * an end that never comes, and the parent waits on its exit.
      */
     endStdin?(): void;
+    /**
+     * Write to, or close, a descriptor above 2 that the parent asked for with
+     * `stdio[n] = "pipe"`. Output on those descriptors arrives as `fd` events
+     * carrying `(fd, text)`.
+     *
+     * Chromium's `--remote-debugging-pipe` is the reason: Playwright speaks the
+     * DevTools protocol over fds 3 and 4, and a child without them cannot be
+     * driven at all.
+     */
+    writeFd?(fd: number, data: string): void;
+    endFd?(fd: number): void;
     kill(signal?: string): void;
 }
 interface ChildSpawnConfig {
@@ -48,6 +59,8 @@ interface ChildSpawnConfig {
      * left open on a parent that will never write to it.
      */
     stdinIgnored?: boolean;
+    /** Descriptors above 2 the parent opened as pipes, e.g. `[3, 4]`. */
+    extraPipes?: number[];
 }
 type SpawnChild = (config: ChildSpawnConfig) => ChildHandle;
 /**
@@ -450,8 +463,14 @@ interface RuntimeProcess {
      * reports the program turning terminal raw mode on or off, which a terminal
      * needs so that it stops echoing input the program is drawing itself.
      */
-    on(event: "output" | "error" | "exit" | "rawmode", listener: (...args: any[]) => void): this;
-    write(data: string): void;
+    /**
+     * `raw-output` is optional: a process that sets `rawOutput` emits stdout
+     * there as written, bytes included, alongside the decoded `output`.
+     */
+    on(event: "output" | "raw-output" | "error" | "exit" | "rawmode", listener: (...args: any[]) => void): this;
+    readonly rawOutput?: boolean;
+    /** Input for the program. Bytes are delivered as bytes: a pipe may carry binary framing. */
+    write(data: string | Uint8Array): void;
     kill(signal?: string): void;
 }
 interface RuntimeHttpResponse {

package/dist/{contracts-DNkSvBCM.d.ts → contracts-BkWBTH8E.d.ts}

@@ -14,7 +14,7 @@ interface ChildHandle {
     pid: number;
     state: "starting" | "running" | "exited";
     exitCode: number | undefined;
-    on(event: "stdout" | "stderr" | "exit" | "rawmode", listener: (...args: any[]) => void): unknown;
+    on(event: "stdout" | "stderr" | "exit" | "rawmode" | "fd", listener: (...args: any[]) => void): unknown;
     exec(): void;
     sendStdin(data: string): void;
     /**
@@ -25,6 +25,17 @@ interface ChildHandle {
      * an end that never comes, and the parent waits on its exit.
      */
     endStdin?(): void;
+    /**
+     * Write to, or close, a descriptor above 2 that the parent asked for with
+     * `stdio[n] = "pipe"`. Output on those descriptors arrives as `fd` events
+     * carrying `(fd, text)`.
+     *
+     * Chromium's `--remote-debugging-pipe` is the reason: Playwright speaks the
+     * DevTools protocol over fds 3 and 4, and a child without them cannot be
+     * driven at all.
+     */
+    writeFd?(fd: number, data: string): void;
+    endFd?(fd: number): void;
     kill(signal?: string): void;
 }
 interface ChildSpawnConfig {
@@ -48,6 +59,8 @@ interface ChildSpawnConfig {
      * left open on a parent that will never write to it.
      */
     stdinIgnored?: boolean;
+    /** Descriptors above 2 the parent opened as pipes, e.g. `[3, 4]`. */
+    extraPipes?: number[];
 }
 type SpawnChild = (config: ChildSpawnConfig) => ChildHandle;
 /**
@@ -450,8 +463,14 @@ interface RuntimeProcess {
      * reports the program turning terminal raw mode on or off, which a terminal
      * needs so that it stops echoing input the program is drawing itself.
      */
-    on(event: "output" | "error" | "exit" | "rawmode", listener: (...args: any[]) => void): this;
-    write(data: string): void;
+    /**
+     * `raw-output` is optional: a process that sets `rawOutput` emits stdout
+     * there as written, bytes included, alongside the decoded `output`.
+     */
+    on(event: "output" | "raw-output" | "error" | "exit" | "rawmode", listener: (...args: any[]) => void): this;
+    readonly rawOutput?: boolean;
+    /** Input for the program. Bytes are delivered as bytes: a pipe may carry binary framing. */
+    write(data: string | Uint8Array): void;
     kill(signal?: string): void;
 }
 interface RuntimeHttpResponse {