sandboxedjs 0.2.3 → 0.2.4

package/dist/agent.d.cts

@@ -1,5 +1,5 @@
-import { C as Container } from './container-C9Y8dqos.cjs';
-import './contracts-B6SHFjma.cjs';
+import { C as Container } from './container-DJfFjito.cjs';
+import './contracts-CXZ_25-O.cjs';
 
 /**
  * Structural copies of the LangChain Deep Agents backend contract.

package/dist/agent.d.ts

@@ -1,5 +1,5 @@
-import { C as Container } from './container-CIE93_Gh.js';
-import './contracts-B6SHFjma.js';
+import { C as Container } from './container-C16pCOWC.js';
+import './contracts-CXZ_25-O.js';
 
 /**
  * Structural copies of the LangChain Deep Agents backend contract.

package/dist/{container-C9Y8dqos.d.cts → container-C16pCOWC.d.ts}

@@ -1,4 +1,4 @@
-import { V as Vfs, C as Cred, f as RuntimePod, O as OutboundPolicy, D as DirEntry, p as Stats } from './contracts-B6SHFjma.cjs';
+import { V as Vfs, C as Cred, f as RuntimePod, O as OutboundPolicy, D as DirEntry, p as Stats } from './contracts-CXZ_25-O.js';
 
 /**
  * Byte streams for stdin/stdout/stderr, pipelines and redirections.

package/dist/{container-CIE93_Gh.d.ts → container-DJfFjito.d.cts}

@@ -1,4 +1,4 @@
-import { V as Vfs, C as Cred, f as RuntimePod, O as OutboundPolicy, D as DirEntry, p as Stats } from './contracts-B6SHFjma.js';
+import { V as Vfs, C as Cred, f as RuntimePod, O as OutboundPolicy, D as DirEntry, p as Stats } from './contracts-CXZ_25-O.cjs';
 
 /**
  * Byte streams for stdin/stdout/stderr, pipelines and redirections.

package/dist/{contracts-B6SHFjma.d.cts → contracts-CXZ_25-O.d.cts}

@@ -482,7 +482,21 @@ declare class VirtualTcpNetwork {
     /** A connection to a port an in-container server holds without a socket. */
     private connectToNonSocketServer;
     hasListener(port: number): boolean;
+    /** Ports the container itself listens on, which no guest asked for. */
+    private readonly internal;
+    /**
+     * Ports a guest is serving on.
+     *
+     * The container's own plumbing listens too — the HTTP egress takes a port
+     * like any server — and those are not the guest's. Reported, they reach
+     * every consumer of "what is running here": a port picker offers one, a
+     * preview opens it, and the reader is looking at an internal endpoint
+     * answering that it wanted an absolute URL, with nothing to say what it is
+     * or why they are there.
+     */
     ports(): number[];
+    /** Keep `port` out of {@link ports}: it belongs to the container, not a guest. */
+    markInternal(port: number): void;
     closeAll(): void;
 }
 

package/dist/{contracts-B6SHFjma.d.ts → contracts-CXZ_25-O.d.ts}

@@ -482,7 +482,21 @@ declare class VirtualTcpNetwork {
     /** A connection to a port an in-container server holds without a socket. */
     private connectToNonSocketServer;
     hasListener(port: number): boolean;
+    /** Ports the container itself listens on, which no guest asked for. */
+    private readonly internal;
+    /**
+     * Ports a guest is serving on.
+     *
+     * The container's own plumbing listens too — the HTTP egress takes a port
+     * like any server — and those are not the guest's. Reported, they reach
+     * every consumer of "what is running here": a port picker offers one, a
+     * preview opens it, and the reader is looking at an internal endpoint
+     * answering that it wanted an absolute URL, with nothing to say what it is
+     * or why they are there.
+     */
     ports(): number[];
+    /** Keep `port` out of {@link ports}: it belongs to the container, not a guest. */
+    markInternal(port: number): void;
     closeAll(): void;
 }
 

package/dist/index.cjs

@@ -21013,7 +21013,7 @@ var wheels_default = {
 
 // package.json
 var package_default = {
-  version: "0.2.3"};
+  version: "0.2.4"};
 
 // src/python/extension-abi.ts
 var EXTENSION_ABI = {
@@ -22328,8 +22328,24 @@ var VirtualTcpNetwork = class {
   hasListener(port) {
     return this.listeners.has(port);
   }
+  /** Ports the container itself listens on, which no guest asked for. */
+  internal = /* @__PURE__ */ new Set();
+  /**
+   * Ports a guest is serving on.
+   *
+   * The container's own plumbing listens too — the HTTP egress takes a port
+   * like any server — and those are not the guest's. Reported, they reach
+   * every consumer of "what is running here": a port picker offers one, a
+   * preview opens it, and the reader is looking at an internal endpoint
+   * answering that it wanted an absolute URL, with nothing to say what it is
+   * or why they are there.
+   */
   ports() {
-    return [...this.listeners.keys()].sort((a, b) => a - b);
+    return [...this.listeners.keys()].filter((port) => !this.internal.has(port)).sort((a, b) => a - b);
+  }
+  /** Keep `port` out of {@link ports}: it belongs to the container, not a guest. */
+  markInternal(port) {
+    this.internal.add(port);
   }
   closeAll() {
     for (const listener of [...this.listeners.values()]) this.close(listener);
@@ -23266,6 +23282,7 @@ function ensureHttpEgress(ctx) {
     }
   }
   if (!listener || port === 0) return 0;
+  sockets.markInternal?.(port);
   listeners.set(sockets, port);
   const accepting = listener;
   void (async () => {

package/dist/index.d.cts

@@ -1,8 +1,8 @@
-import { S as Shell, a as ShellIO, b as Session, N as Node, c as Command, K as Kernel, E as ExecContext, O as OutputStream, C as Container, B as BinaryBackend, d as createContainer } from './container-C9Y8dqos.cjs';
-export { e as BinaryExecutionRegistry, f as BinaryInfo, g as BinaryRequest, h as BufferSink, i as CallbackSink, j as CommandRegistry, k as ContainerFs, l as ContainerOptions, m as ContextInit, n as Env, o as ExecOptions, p as ExecResult, q as ExecutionDecision, r as ExecutionTier, F as FileData, s as FileInput, t as FileOutput, G as GroupEntry, H as HttpResponse, I as InputStream, J as Job, u as KernelOptions, L as ListeningPort, M as MANIFEST_FORMAT, v as MANIFEST_SCHEMA_VERSION, w as MountEntry, x as NetInterface, y as NetworkOptions, z as NetworkStack, A as NullInput, D as NullOutput, P as PYTHON_VERSION, Q as PasswdEntry, R as Pipe, T as Preparation, U as PreparedBinary, V as Process, W as ProcessKind, X as ProcessOptions, Y as ProcessState, Z as ProcessTable, _ as PythonCapabilities, $ as PythonOptions, a0 as PythonProfile, a1 as PythonRuntimeManifest, a2 as ResolvedExecutable, a3 as RunOptions, a4 as RunResult, a5 as SessionInit, a6 as SessionResult, a7 as SessionRunOptions, a8 as ShellExit, a9 as ShellInit, aa as ShellOptions, ab as SpawnHandle, ac as Stdio, ad as TeeOutput, ae as UserDatabase, af as Variables, ag as WasmCommandArtifact, ah as WasmTranslator, ai as binaryDigest, aj as braceExpand, ak as captureStdio, al as configurePython, am as createContext, an as createTranslationBackend, ao as createWasmCompatibilityBackend, ap as defineCommand, aq as expandWord, ar as expandWords, as as inspectElf, at as installWasmCommands, au as isElfBinary, av as isPythonAvailable, aw as resetPidCounter, ax as shellQuote, ay as validateManifest } from './container-C9Y8dqos.cjs';
-import { V as Vfs, C as Cred, R as RuntimeVolume, a as VirtualTcpNetwork, b as RuntimeHttpResponse, O as OutboundPolicy, S as SpawnChild, c as SyncSpawn, I as IpcTransport, d as VolumeStat, e as VolumeStats, f as RuntimePod, g as RuntimePackageInstaller, h as ChildSpawnConfig, i as ChildHandle, j as RuntimeProcess, k as RuntimeSocketPeer, l as RuntimeConnection } from './contracts-B6SHFjma.cjs';
-export { D as DirEntry, m as ROOT_CRED, n as RuntimeProcessManager, o as RuntimeProcessResult, p as Stats, q as VirtualNode, r as VirtualProvider, W as WriteOptions, s as applyChmod, t as createChildProcessModule, u as formatMode, v as makeCred, w as octalMode, x as parseUmask } from './contracts-B6SHFjma.cjs';
-import { M as MemoryVolume, a as MemoryVolumeSnapshotEntry } from './memory-volume-CRhXUyCN.cjs';
+import { S as Shell, a as ShellIO, b as Session, N as Node, c as Command, K as Kernel, E as ExecContext, O as OutputStream, C as Container, B as BinaryBackend, d as createContainer } from './container-DJfFjito.cjs';
+export { e as BinaryExecutionRegistry, f as BinaryInfo, g as BinaryRequest, h as BufferSink, i as CallbackSink, j as CommandRegistry, k as ContainerFs, l as ContainerOptions, m as ContextInit, n as Env, o as ExecOptions, p as ExecResult, q as ExecutionDecision, r as ExecutionTier, F as FileData, s as FileInput, t as FileOutput, G as GroupEntry, H as HttpResponse, I as InputStream, J as Job, u as KernelOptions, L as ListeningPort, M as MANIFEST_FORMAT, v as MANIFEST_SCHEMA_VERSION, w as MountEntry, x as NetInterface, y as NetworkOptions, z as NetworkStack, A as NullInput, D as NullOutput, P as PYTHON_VERSION, Q as PasswdEntry, R as Pipe, T as Preparation, U as PreparedBinary, V as Process, W as ProcessKind, X as ProcessOptions, Y as ProcessState, Z as ProcessTable, _ as PythonCapabilities, $ as PythonOptions, a0 as PythonProfile, a1 as PythonRuntimeManifest, a2 as ResolvedExecutable, a3 as RunOptions, a4 as RunResult, a5 as SessionInit, a6 as SessionResult, a7 as SessionRunOptions, a8 as ShellExit, a9 as ShellInit, aa as ShellOptions, ab as SpawnHandle, ac as Stdio, ad as TeeOutput, ae as UserDatabase, af as Variables, ag as WasmCommandArtifact, ah as WasmTranslator, ai as binaryDigest, aj as braceExpand, ak as captureStdio, al as configurePython, am as createContext, an as createTranslationBackend, ao as createWasmCompatibilityBackend, ap as defineCommand, aq as expandWord, ar as expandWords, as as inspectElf, at as installWasmCommands, au as isElfBinary, av as isPythonAvailable, aw as resetPidCounter, ax as shellQuote, ay as validateManifest } from './container-DJfFjito.cjs';
+import { V as Vfs, C as Cred, R as RuntimeVolume, a as VirtualTcpNetwork, b as RuntimeHttpResponse, O as OutboundPolicy, S as SpawnChild, c as SyncSpawn, I as IpcTransport, d as VolumeStat, e as VolumeStats, f as RuntimePod, g as RuntimePackageInstaller, h as ChildSpawnConfig, i as ChildHandle, j as RuntimeProcess, k as RuntimeSocketPeer, l as RuntimeConnection } from './contracts-CXZ_25-O.cjs';
+export { D as DirEntry, m as ROOT_CRED, n as RuntimeProcessManager, o as RuntimeProcessResult, p as Stats, q as VirtualNode, r as VirtualProvider, W as WriteOptions, s as applyChmod, t as createChildProcessModule, u as formatMode, v as makeCred, w as octalMode, x as parseUmask } from './contracts-CXZ_25-O.cjs';
+import { M as MemoryVolume, a as MemoryVolumeSnapshotEntry } from './memory-volume-Bp71nqvc.cjs';
 import EventEmitter from 'events/events.js';
 import streamModule from 'stream-browserify';
 

package/dist/index.d.ts

@@ -1,8 +1,8 @@
-import { S as Shell, a as ShellIO, b as Session, N as Node, c as Command, K as Kernel, E as ExecContext, O as OutputStream, C as Container, B as BinaryBackend, d as createContainer } from './container-CIE93_Gh.js';
-export { e as BinaryExecutionRegistry, f as BinaryInfo, g as BinaryRequest, h as BufferSink, i as CallbackSink, j as CommandRegistry, k as ContainerFs, l as ContainerOptions, m as ContextInit, n as Env, o as ExecOptions, p as ExecResult, q as ExecutionDecision, r as ExecutionTier, F as FileData, s as FileInput, t as FileOutput, G as GroupEntry, H as HttpResponse, I as InputStream, J as Job, u as KernelOptions, L as ListeningPort, M as MANIFEST_FORMAT, v as MANIFEST_SCHEMA_VERSION, w as MountEntry, x as NetInterface, y as NetworkOptions, z as NetworkStack, A as NullInput, D as NullOutput, P as PYTHON_VERSION, Q as PasswdEntry, R as Pipe, T as Preparation, U as PreparedBinary, V as Process, W as ProcessKind, X as ProcessOptions, Y as ProcessState, Z as ProcessTable, _ as PythonCapabilities, $ as PythonOptions, a0 as PythonProfile, a1 as PythonRuntimeManifest, a2 as ResolvedExecutable, a3 as RunOptions, a4 as RunResult, a5 as SessionInit, a6 as SessionResult, a7 as SessionRunOptions, a8 as ShellExit, a9 as ShellInit, aa as ShellOptions, ab as SpawnHandle, ac as Stdio, ad as TeeOutput, ae as UserDatabase, af as Variables, ag as WasmCommandArtifact, ah as WasmTranslator, ai as binaryDigest, aj as braceExpand, ak as captureStdio, al as configurePython, am as createContext, an as createTranslationBackend, ao as createWasmCompatibilityBackend, ap as defineCommand, aq as expandWord, ar as expandWords, as as inspectElf, at as installWasmCommands, au as isElfBinary, av as isPythonAvailable, aw as resetPidCounter, ax as shellQuote, ay as validateManifest } from './container-CIE93_Gh.js';
-import { V as Vfs, C as Cred, R as RuntimeVolume, a as VirtualTcpNetwork, b as RuntimeHttpResponse, O as OutboundPolicy, S as SpawnChild, c as SyncSpawn, I as IpcTransport, d as VolumeStat, e as VolumeStats, f as RuntimePod, g as RuntimePackageInstaller, h as ChildSpawnConfig, i as ChildHandle, j as RuntimeProcess, k as RuntimeSocketPeer, l as RuntimeConnection } from './contracts-B6SHFjma.js';
-export { D as DirEntry, m as ROOT_CRED, n as RuntimeProcessManager, o as RuntimeProcessResult, p as Stats, q as VirtualNode, r as VirtualProvider, W as WriteOptions, s as applyChmod, t as createChildProcessModule, u as formatMode, v as makeCred, w as octalMode, x as parseUmask } from './contracts-B6SHFjma.js';
-import { M as MemoryVolume, a as MemoryVolumeSnapshotEntry } from './memory-volume-CwiXvRfs.js';
+import { S as Shell, a as ShellIO, b as Session, N as Node, c as Command, K as Kernel, E as ExecContext, O as OutputStream, C as Container, B as BinaryBackend, d as createContainer } from './container-C16pCOWC.js';
+export { e as BinaryExecutionRegistry, f as BinaryInfo, g as BinaryRequest, h as BufferSink, i as CallbackSink, j as CommandRegistry, k as ContainerFs, l as ContainerOptions, m as ContextInit, n as Env, o as ExecOptions, p as ExecResult, q as ExecutionDecision, r as ExecutionTier, F as FileData, s as FileInput, t as FileOutput, G as GroupEntry, H as HttpResponse, I as InputStream, J as Job, u as KernelOptions, L as ListeningPort, M as MANIFEST_FORMAT, v as MANIFEST_SCHEMA_VERSION, w as MountEntry, x as NetInterface, y as NetworkOptions, z as NetworkStack, A as NullInput, D as NullOutput, P as PYTHON_VERSION, Q as PasswdEntry, R as Pipe, T as Preparation, U as PreparedBinary, V as Process, W as ProcessKind, X as ProcessOptions, Y as ProcessState, Z as ProcessTable, _ as PythonCapabilities, $ as PythonOptions, a0 as PythonProfile, a1 as PythonRuntimeManifest, a2 as ResolvedExecutable, a3 as RunOptions, a4 as RunResult, a5 as SessionInit, a6 as SessionResult, a7 as SessionRunOptions, a8 as ShellExit, a9 as ShellInit, aa as ShellOptions, ab as SpawnHandle, ac as Stdio, ad as TeeOutput, ae as UserDatabase, af as Variables, ag as WasmCommandArtifact, ah as WasmTranslator, ai as binaryDigest, aj as braceExpand, ak as captureStdio, al as configurePython, am as createContext, an as createTranslationBackend, ao as createWasmCompatibilityBackend, ap as defineCommand, aq as expandWord, ar as expandWords, as as inspectElf, at as installWasmCommands, au as isElfBinary, av as isPythonAvailable, aw as resetPidCounter, ax as shellQuote, ay as validateManifest } from './container-C16pCOWC.js';
+import { V as Vfs, C as Cred, R as RuntimeVolume, a as VirtualTcpNetwork, b as RuntimeHttpResponse, O as OutboundPolicy, S as SpawnChild, c as SyncSpawn, I as IpcTransport, d as VolumeStat, e as VolumeStats, f as RuntimePod, g as RuntimePackageInstaller, h as ChildSpawnConfig, i as ChildHandle, j as RuntimeProcess, k as RuntimeSocketPeer, l as RuntimeConnection } from './contracts-CXZ_25-O.js';
+export { D as DirEntry, m as ROOT_CRED, n as RuntimeProcessManager, o as RuntimeProcessResult, p as Stats, q as VirtualNode, r as VirtualProvider, W as WriteOptions, s as applyChmod, t as createChildProcessModule, u as formatMode, v as makeCred, w as octalMode, x as parseUmask } from './contracts-CXZ_25-O.js';
+import { M as MemoryVolume, a as MemoryVolumeSnapshotEntry } from './memory-volume-C4xwtIRZ.js';
 import EventEmitter from 'events/events.js';
 import streamModule from 'stream-browserify';
 

package/dist/index.js

@@ -20996,7 +20996,7 @@ var wheels_default = {
 
 // package.json
 var package_default = {
-  version: "0.2.3"};
+  version: "0.2.4"};
 
 // src/python/extension-abi.ts
 var EXTENSION_ABI = {
@@ -22311,8 +22311,24 @@ var VirtualTcpNetwork = class {
   hasListener(port) {
     return this.listeners.has(port);
   }
+  /** Ports the container itself listens on, which no guest asked for. */
+  internal = /* @__PURE__ */ new Set();
+  /**
+   * Ports a guest is serving on.
+   *
+   * The container's own plumbing listens too — the HTTP egress takes a port
+   * like any server — and those are not the guest's. Reported, they reach
+   * every consumer of "what is running here": a port picker offers one, a
+   * preview opens it, and the reader is looking at an internal endpoint
+   * answering that it wanted an absolute URL, with nothing to say what it is
+   * or why they are there.
+   */
   ports() {
-    return [...this.listeners.keys()].sort((a, b) => a - b);
+    return [...this.listeners.keys()].filter((port) => !this.internal.has(port)).sort((a, b) => a - b);
+  }
+  /** Keep `port` out of {@link ports}: it belongs to the container, not a guest. */
+  markInternal(port) {
+    this.internal.add(port);
   }
   closeAll() {
     for (const listener of [...this.listeners.values()]) this.close(listener);
@@ -23249,6 +23265,7 @@ function ensureHttpEgress(ctx) {
     }
   }
   if (!listener || port === 0) return 0;
+  sockets.markInternal?.(port);
   listeners.set(sockets, port);
   const accepting = listener;
   void (async () => {

package/dist/{memory-volume-CRhXUyCN.d.cts → memory-volume-Bp71nqvc.d.cts}

@@ -1,4 +1,4 @@
-import { R as RuntimeVolume, d as VolumeStat, e as VolumeStats } from './contracts-B6SHFjma.cjs';
+import { R as RuntimeVolume, d as VolumeStat, e as VolumeStats } from './contracts-CXZ_25-O.cjs';
 
 type NodeKind = "file" | "directory" | "symlink";
 interface MemoryVolumeSnapshotEntry {

package/dist/{memory-volume-CwiXvRfs.d.ts → memory-volume-C4xwtIRZ.d.ts}

@@ -1,4 +1,4 @@
-import { R as RuntimeVolume, d as VolumeStat, e as VolumeStats } from './contracts-B6SHFjma.js';
+import { R as RuntimeVolume, d as VolumeStat, e as VolumeStats } from './contracts-CXZ_25-O.js';
 
 type NodeKind = "file" | "directory" | "symlink";
 interface MemoryVolumeSnapshotEntry {

package/dist/python-abi.d.cts

@@ -1,6 +1,6 @@
-import { V as Vfs, C as Cred, a as VirtualTcpNetwork } from './contracts-B6SHFjma.cjs';
-export { m as ROOT_CRED, v as makeCred } from './contracts-B6SHFjma.cjs';
-export { M as MemoryVolume } from './memory-volume-CRhXUyCN.cjs';
+import { V as Vfs, C as Cred, a as VirtualTcpNetwork } from './contracts-CXZ_25-O.cjs';
+export { m as ROOT_CRED, v as makeCred } from './contracts-CXZ_25-O.cjs';
+export { M as MemoryVolume } from './memory-volume-Bp71nqvc.cjs';
 
 /**
  * Open-file descriptions: the thing a descriptor points *at*.

package/dist/python-abi.d.ts

@@ -1,6 +1,6 @@
-import { V as Vfs, C as Cred, a as VirtualTcpNetwork } from './contracts-B6SHFjma.js';
-export { m as ROOT_CRED, v as makeCred } from './contracts-B6SHFjma.js';
-export { M as MemoryVolume } from './memory-volume-CwiXvRfs.js';
+import { V as Vfs, C as Cred, a as VirtualTcpNetwork } from './contracts-CXZ_25-O.js';
+export { m as ROOT_CRED, v as makeCred } from './contracts-CXZ_25-O.js';
+export { M as MemoryVolume } from './memory-volume-C4xwtIRZ.js';
 
 /**
  * Open-file descriptions: the thing a descriptor points *at*.

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "sandboxedjs",
-  "version": "0.2.3",
+  "version": "0.2.4",
   "description": "A Linux-like container that runs entirely inside Node.js — POSIX shell, ~140 coreutils, Node.js and Python runtimes, virtual filesystem and networking. No Docker, no VM, no native modules.",
   "type": "module",
   "license": "MIT",