sandboxedjs 0.2.4 → 0.2.6

package/dist/index.cjs

@@ -8374,6 +8374,60 @@ function createSysProvider(kernel) {
   };
 }
 
+// src/net/proxy-fetch.ts
+function toBase64(bytes2) {
+  let text2 = "";
+  for (let at = 0; at < bytes2.length; at += 32768) {
+    text2 += String.fromCharCode(...bytes2.subarray(at, at + 32768));
+  }
+  return btoa(text2);
+}
+function fromBase64(text2) {
+  const binary = atob(text2);
+  const bytes2 = new Uint8Array(binary.length);
+  for (let at = 0; at < binary.length; at += 1) bytes2[at] = binary.charCodeAt(at);
+  return bytes2;
+}
+async function proxyExchange(proxy, request, fetchImpl = fetch) {
+  let answer;
+  try {
+    answer = await fetchImpl(proxy, {
+      method: "POST",
+      headers: { "content-type": "application/json" },
+      body: JSON.stringify({
+        url: request.url,
+        method: request.method,
+        headers: request.headers,
+        ...request.body?.length ? { body: toBase64(request.body) } : {}
+      })
+    });
+  } catch (error) {
+    throw new Error(
+      `the egress proxy at ${proxy} could not be reached (${error instanceof Error ? error.message : String(error)}). It performs this container's outbound requests, so nothing leaves until it answers.`
+    );
+  }
+  if (!answer.ok) {
+    throw new Error(
+      `the egress proxy at ${proxy} refused ${request.method} ${request.url} with ${answer.status} ${answer.statusText}: ${(await answer.text()).trim().slice(0, 300)}`
+    );
+  }
+  const payload = await answer.json();
+  return {
+    status: payload.status ?? 200,
+    statusText: payload.statusText ?? "",
+    headers: payload.headers ?? {},
+    body: payload.body ? fromBase64(payload.body) : new Uint8Array(0)
+  };
+}
+function isBrowser() {
+  return typeof process === "undefined" || process.versions?.node == null;
+}
+function browserBlocked(hostname, message) {
+  return new Error(
+    `${message} \u2014 the request to ${hostname} was blocked by the browser. A page can only read a response from a host that sends CORS headers, and most APIs send none. Give the container a proxy that makes the request for it \u2014 network: { proxy }, and \`npx sandboxedjs-egress\` is one \u2014 or run the container on a server.`
+  );
+}
+
 // src/net/policy.ts
 function isLoopbackHostname(hostname) {
   const host2 = hostname.replace(/^\[|\]$/g, "").toLowerCase();
@@ -8416,7 +8470,40 @@ function policedFetch(policy, fetchImpl) {
     if (!outboundAllowed(policy, url)) {
       throw Object.assign(new TypeError("fetch failed"), { cause: outboundBlockedError(url) });
     }
-    return fetchImpl(input, init);
+    if (policy.proxy) return await fetchThroughProxy(policy.proxy, fetchImpl, input, init);
+    try {
+      return await fetchImpl(input, init);
+    } catch (error) {
+      if (!isBrowser()) throw error;
+      throw Object.assign(new TypeError("fetch failed"), {
+        cause: browserBlocked(new URL(url).hostname, error instanceof Error ? error.message : String(error))
+      });
+    }
+  });
+}
+async function fetchThroughProxy(proxy, fetchImpl, input, init) {
+  const request = new Request(input, init);
+  const headers = {};
+  request.headers.forEach((value, name) => {
+    headers[name] = value;
+  });
+  const bodyless = request.method === "GET" || request.method === "HEAD";
+  const result = await proxyExchange(
+    proxy,
+    {
+      url: request.url,
+      method: request.method,
+      headers,
+      ...bodyless ? {} : { body: new Uint8Array(await request.arrayBuffer()) }
+    },
+    fetchImpl
+  );
+  const nullBody = result.status === 204 || result.status === 205 || result.status === 304 || request.method === "HEAD";
+  const body = nullBody ? null : result.body.slice().buffer;
+  return new Response(body, {
+    status: result.status,
+    statusText: result.statusText,
+    headers: result.headers
   });
 }
 function policedWebSocket(Native, policy) {
@@ -17474,9 +17561,6 @@ function parseUrl(raw) {
     return null;
   }
 }
-function isBrowser() {
-  return typeof process === "undefined" || process.versions?.node == null;
-}
 async function performRequest(ctx, url, init) {
   const isLocal = ctx.kernel.net.isLocal(url.hostname);
   if (isLocal) {
@@ -17504,7 +17588,16 @@ async function performRequest(ctx, url, init) {
     );
   }
   const proxy = ctx.kernel.net.proxy;
-  if (proxy) return await proxyRequest(ctx, proxy, url, init);
+  if (proxy) {
+    const result = await proxyExchange(proxy, {
+      url: url.toString(),
+      method: init.method,
+      headers: init.headers,
+      ...init.body?.length ? { body: init.body } : {}
+    });
+    ctx.kernel.net.countRx(result.body.length);
+    return { ...result, url: url.toString() };
+  }
   let response;
   try {
     response = await fetch(url.toString(), {
@@ -17513,9 +17606,7 @@ async function performRequest(ctx, url, init) {
       ...init.body ? { body: init.body.slice().buffer } : {}
     });
   } catch (error) {
-    throw isBrowser() ? new Error(
-      `${error instanceof Error ? error.message : String(error)} \u2014 the request to ${url.hostname} was blocked by the browser. A page can only read a response from a host that sends CORS headers, and most APIs send none. Give the container a proxy that makes the request for it \u2014 network: { proxy }, and \`npx sandboxedjs-egress\` is one \u2014 or run the container on a server.`
-    ) : error;
+    throw isBrowser() ? browserBlocked(url.hostname, error instanceof Error ? error.message : String(error)) : error;
   }
   const body = new Uint8Array(await response.arrayBuffer());
   ctx.kernel.net.countRx(body.length);
@@ -17525,53 +17616,6 @@ async function performRequest(ctx, url, init) {
   });
   return { status: response.status, statusText: response.statusText, headers, body, url: response.url || url.toString() };
 }
-async function proxyRequest(ctx, proxy, url, init) {
-  let answer;
-  try {
-    answer = await fetch(proxy, {
-      method: "POST",
-      headers: { "content-type": "application/json" },
-      body: JSON.stringify({
-        url: url.toString(),
-        method: init.method,
-        headers: init.headers,
-        ...init.body?.length ? { body: toBase64(init.body) } : {}
-      })
-    });
-  } catch (error) {
-    throw new Error(
-      `the egress proxy at ${proxy} could not be reached (${error instanceof Error ? error.message : String(error)}). It performs this container's outbound requests, so nothing leaves until it answers.`
-    );
-  }
-  if (!answer.ok) {
-    throw new Error(
-      `the egress proxy at ${proxy} refused ${init.method} ${url.toString()} with ${answer.status} ${answer.statusText}: ${(await answer.text()).trim().slice(0, 300)}`
-    );
-  }
-  const payload = await answer.json();
-  const body = payload.body ? fromBase64(payload.body) : new Uint8Array(0);
-  ctx.kernel.net.countRx(body.length);
-  return {
-    status: payload.status ?? 200,
-    statusText: payload.statusText ?? "",
-    headers: payload.headers ?? {},
-    body,
-    url: url.toString()
-  };
-}
-function toBase64(bytes2) {
-  let text2 = "";
-  for (let at = 0; at < bytes2.length; at += 32768) {
-    text2 += String.fromCharCode(...bytes2.subarray(at, at + 32768));
-  }
-  return btoa(text2);
-}
-function fromBase64(text2) {
-  const binary = atob(text2);
-  const bytes2 = new Uint8Array(binary.length);
-  for (let at = 0; at < binary.length; at += 1) bytes2[at] = binary.charCodeAt(at);
-  return bytes2;
-}
 var curl = defineCommand({
   name: "curl",
   path: "/usr/bin/curl",
@@ -21013,7 +21057,7 @@ var wheels_default = {
 
 // package.json
 var package_default = {
-  version: "0.2.4"};
+  version: "0.2.6"};
 
 // src/python/extension-abi.ts
 var EXTENSION_ABI = {
@@ -22678,8 +22722,12 @@ function createHostAbiServer(proc) {
       }
       case Op.resolve: {
         const sockets = proc.sockets;
+        const name = r.string();
+        if (/^(\d{1,3}\.){3}\d{1,3}$/.test(name)) {
+          return { status: 0, payload: new Writer().string(name).finish() };
+        }
         if (!sockets?.outbound) throw new PosixError(Errno.ENOSYS);
-        const address = sockets.outbound.resolve(r.string());
+        const address = sockets.outbound.resolve(name);
         return { status: 0, payload: new Writer().string(address).finish() };
       }
       case Op.send: {
@@ -24806,6 +24854,77 @@ if os.environ.get("SBX_OUTBOUND_SOCKETS") == "1":
     sys.meta_path.insert(0, _SbxTruststoreHook())
 
 
+# Literal addresses are answered here rather than through the host.
+#
+# The container's resolver is a host call, and a container with no outbound
+# sockets configured has no resolver to call: it answers ENOSYS. That is the
+# right answer for a name, but the egress hop below dials 127.0.0.1, and
+# http.client calls getaddrinfo even for an address that needs no resolving --
+# so every request through the egress died with "Function not implemented"
+# before it reached the endpoint. A numeric address (and loopback by its usual
+# names) is now formed here, which is what a resolver would have returned.
+def _sbx_local_addresses():
+    import socket as _socket_module
+    import _socket as _socket_native
+
+    # The native entry point, not socket.getaddrinfo: the stdlib wrapper
+    # delegates to _socket, so wrapping the wrapper and replacing _socket with
+    # the wrapper makes the two call each other forever.
+    _real_getaddrinfo = _socket_native.getaddrinfo
+
+    _literals = {"localhost": "127.0.0.1", "localhost.localdomain": "127.0.0.1",
+                 "ip6-localhost": "127.0.0.1"}
+
+    def _literal(host):
+        """The address host already is, or None when it needs a resolver."""
+        if isinstance(host, (bytes, bytearray)):
+            host = bytes(host).decode("ascii", "replace")
+        if host is None:
+            return None
+        host = _literals.get(host.lower(), host)
+        parts = host.split(".")
+        if len(parts) != 4:
+            return None
+        for part in parts:
+            if not part.isdigit() or len(part) > 3 or int(part) > 255:
+                return None
+        return host
+
+    def getaddrinfo(host, port, family=0, type=0, proto=0, flags=0):
+        address = _literal(host)
+        if address is None:
+            return _real_getaddrinfo(host, port, family, type, proto, flags)
+        if isinstance(port, (bytes, bytearray)):
+            port = bytes(port).decode("ascii", "replace")
+        if isinstance(port, str):
+            port = int(port) if port.isdigit() else _socket_module.getservbyname(port)
+        if port is None:
+            port = 0
+        if family not in (0, _socket_module.AF_UNSPEC, _socket_module.AF_INET):
+            raise _socket_module.gaierror(
+                _socket_module.EAI_FAMILY, "only AF_INET is supported in this container"
+            )
+        kind = type or _socket_module.SOCK_STREAM
+        protocol = proto or (_socket_module.IPPROTO_TCP
+                             if kind == _socket_module.SOCK_STREAM else 0)
+        return [(_socket_module.AF_INET, kind, protocol, "", (address, int(port)))]
+
+    def gethostbyname(host):
+        return getaddrinfo(host, 0)[0][4][0]
+
+    def gethostbyname_ex(host):
+        return (host, [], [gethostbyname(host)])
+
+    _socket_module.getaddrinfo = getaddrinfo
+    _socket_module.gethostbyname = gethostbyname
+    _socket_module.gethostbyname_ex = gethostbyname_ex
+    _socket_native.getaddrinfo = getaddrinfo
+    _socket_native.gethostbyname = gethostbyname
+    _socket_native.gethostbyname_ex = gethostbyname_ex
+
+
+_sbx_local_addresses()
+
 _egress = None if os.environ.get("SBX_OUTBOUND_SOCKETS") == "1" else os.environ.get("SBX_HTTP_EGRESS")
 if _egress:
     import http.client
@@ -37825,7 +37944,8 @@ var Container = class _Container {
     if (opts.python) configurePython(opts.python);
     const network = {
       allowOutbound: opts.network?.allowOutbound ?? false,
-      allowedHosts: opts.network?.allowedHosts ?? null
+      allowedHosts: opts.network?.allowedHosts ?? null,
+      ...opts.network?.proxy ? { proxy: opts.network.proxy } : {}
     };
     const podOptions = {
       workdir: opts.cwd ?? "/",

package/dist/index.d.cts

@@ -1,8 +1,8 @@
-import { S as Shell, a as ShellIO, b as Session, N as Node, c as Command, K as Kernel, E as ExecContext, O as OutputStream, C as Container, B as BinaryBackend, d as createContainer } from './container-DJfFjito.cjs';
-export { e as BinaryExecutionRegistry, f as BinaryInfo, g as BinaryRequest, h as BufferSink, i as CallbackSink, j as CommandRegistry, k as ContainerFs, l as ContainerOptions, m as ContextInit, n as Env, o as ExecOptions, p as ExecResult, q as ExecutionDecision, r as ExecutionTier, F as FileData, s as FileInput, t as FileOutput, G as GroupEntry, H as HttpResponse, I as InputStream, J as Job, u as KernelOptions, L as ListeningPort, M as MANIFEST_FORMAT, v as MANIFEST_SCHEMA_VERSION, w as MountEntry, x as NetInterface, y as NetworkOptions, z as NetworkStack, A as NullInput, D as NullOutput, P as PYTHON_VERSION, Q as PasswdEntry, R as Pipe, T as Preparation, U as PreparedBinary, V as Process, W as ProcessKind, X as ProcessOptions, Y as ProcessState, Z as ProcessTable, _ as PythonCapabilities, $ as PythonOptions, a0 as PythonProfile, a1 as PythonRuntimeManifest, a2 as ResolvedExecutable, a3 as RunOptions, a4 as RunResult, a5 as SessionInit, a6 as SessionResult, a7 as SessionRunOptions, a8 as ShellExit, a9 as ShellInit, aa as ShellOptions, ab as SpawnHandle, ac as Stdio, ad as TeeOutput, ae as UserDatabase, af as Variables, ag as WasmCommandArtifact, ah as WasmTranslator, ai as binaryDigest, aj as braceExpand, ak as captureStdio, al as configurePython, am as createContext, an as createTranslationBackend, ao as createWasmCompatibilityBackend, ap as defineCommand, aq as expandWord, ar as expandWords, as as inspectElf, at as installWasmCommands, au as isElfBinary, av as isPythonAvailable, aw as resetPidCounter, ax as shellQuote, ay as validateManifest } from './container-DJfFjito.cjs';
-import { V as Vfs, C as Cred, R as RuntimeVolume, a as VirtualTcpNetwork, b as RuntimeHttpResponse, O as OutboundPolicy, S as SpawnChild, c as SyncSpawn, I as IpcTransport, d as VolumeStat, e as VolumeStats, f as RuntimePod, g as RuntimePackageInstaller, h as ChildSpawnConfig, i as ChildHandle, j as RuntimeProcess, k as RuntimeSocketPeer, l as RuntimeConnection } from './contracts-CXZ_25-O.cjs';
-export { D as DirEntry, m as ROOT_CRED, n as RuntimeProcessManager, o as RuntimeProcessResult, p as Stats, q as VirtualNode, r as VirtualProvider, W as WriteOptions, s as applyChmod, t as createChildProcessModule, u as formatMode, v as makeCred, w as octalMode, x as parseUmask } from './contracts-CXZ_25-O.cjs';
-import { M as MemoryVolume, a as MemoryVolumeSnapshotEntry } from './memory-volume-Bp71nqvc.cjs';
+import { S as Shell, a as ShellIO, b as Session, N as Node, c as Command, K as Kernel, E as ExecContext, O as OutputStream, C as Container, B as BinaryBackend, d as createContainer } from './container-BQx27_d-.cjs';
+export { e as BinaryExecutionRegistry, f as BinaryInfo, g as BinaryRequest, h as BufferSink, i as CallbackSink, j as CommandRegistry, k as ContainerFs, l as ContainerOptions, m as ContextInit, n as Env, o as ExecOptions, p as ExecResult, q as ExecutionDecision, r as ExecutionTier, F as FileData, s as FileInput, t as FileOutput, G as GroupEntry, H as HttpResponse, I as InputStream, J as Job, u as KernelOptions, L as ListeningPort, M as MANIFEST_FORMAT, v as MANIFEST_SCHEMA_VERSION, w as MountEntry, x as NetInterface, y as NetworkOptions, z as NetworkStack, A as NullInput, D as NullOutput, P as PYTHON_VERSION, Q as PasswdEntry, R as Pipe, T as Preparation, U as PreparedBinary, V as Process, W as ProcessKind, X as ProcessOptions, Y as ProcessState, Z as ProcessTable, _ as PythonCapabilities, $ as PythonOptions, a0 as PythonProfile, a1 as PythonRuntimeManifest, a2 as ResolvedExecutable, a3 as RunOptions, a4 as RunResult, a5 as SessionInit, a6 as SessionResult, a7 as SessionRunOptions, a8 as ShellExit, a9 as ShellInit, aa as ShellOptions, ab as SpawnHandle, ac as Stdio, ad as TeeOutput, ae as UserDatabase, af as Variables, ag as WasmCommandArtifact, ah as WasmTranslator, ai as binaryDigest, aj as braceExpand, ak as captureStdio, al as configurePython, am as createContext, an as createTranslationBackend, ao as createWasmCompatibilityBackend, ap as defineCommand, aq as expandWord, ar as expandWords, as as inspectElf, at as installWasmCommands, au as isElfBinary, av as isPythonAvailable, aw as resetPidCounter, ax as shellQuote, ay as validateManifest } from './container-BQx27_d-.cjs';
+import { V as Vfs, C as Cred, R as RuntimeVolume, a as VirtualTcpNetwork, b as RuntimeHttpResponse, O as OutboundPolicy, S as SpawnChild, c as SyncSpawn, I as IpcTransport, d as VolumeStat, e as VolumeStats, f as RuntimePod, g as RuntimePackageInstaller, h as ChildSpawnConfig, i as ChildHandle, j as RuntimeProcess, k as RuntimeSocketPeer, l as RuntimeConnection } from './contracts-BHo4LdY2.cjs';
+export { D as DirEntry, m as ROOT_CRED, n as RuntimeProcessManager, o as RuntimeProcessResult, p as Stats, q as VirtualNode, r as VirtualProvider, W as WriteOptions, s as applyChmod, t as createChildProcessModule, u as formatMode, v as makeCred, w as octalMode, x as parseUmask } from './contracts-BHo4LdY2.cjs';
+import { M as MemoryVolume, a as MemoryVolumeSnapshotEntry } from './memory-volume-e-uJFRnG.cjs';
 import EventEmitter from 'events/events.js';
 import streamModule from 'stream-browserify';
 

package/dist/index.d.ts

@@ -1,8 +1,8 @@
-import { S as Shell, a as ShellIO, b as Session, N as Node, c as Command, K as Kernel, E as ExecContext, O as OutputStream, C as Container, B as BinaryBackend, d as createContainer } from './container-C16pCOWC.js';
-export { e as BinaryExecutionRegistry, f as BinaryInfo, g as BinaryRequest, h as BufferSink, i as CallbackSink, j as CommandRegistry, k as ContainerFs, l as ContainerOptions, m as ContextInit, n as Env, o as ExecOptions, p as ExecResult, q as ExecutionDecision, r as ExecutionTier, F as FileData, s as FileInput, t as FileOutput, G as GroupEntry, H as HttpResponse, I as InputStream, J as Job, u as KernelOptions, L as ListeningPort, M as MANIFEST_FORMAT, v as MANIFEST_SCHEMA_VERSION, w as MountEntry, x as NetInterface, y as NetworkOptions, z as NetworkStack, A as NullInput, D as NullOutput, P as PYTHON_VERSION, Q as PasswdEntry, R as Pipe, T as Preparation, U as PreparedBinary, V as Process, W as ProcessKind, X as ProcessOptions, Y as ProcessState, Z as ProcessTable, _ as PythonCapabilities, $ as PythonOptions, a0 as PythonProfile, a1 as PythonRuntimeManifest, a2 as ResolvedExecutable, a3 as RunOptions, a4 as RunResult, a5 as SessionInit, a6 as SessionResult, a7 as SessionRunOptions, a8 as ShellExit, a9 as ShellInit, aa as ShellOptions, ab as SpawnHandle, ac as Stdio, ad as TeeOutput, ae as UserDatabase, af as Variables, ag as WasmCommandArtifact, ah as WasmTranslator, ai as binaryDigest, aj as braceExpand, ak as captureStdio, al as configurePython, am as createContext, an as createTranslationBackend, ao as createWasmCompatibilityBackend, ap as defineCommand, aq as expandWord, ar as expandWords, as as inspectElf, at as installWasmCommands, au as isElfBinary, av as isPythonAvailable, aw as resetPidCounter, ax as shellQuote, ay as validateManifest } from './container-C16pCOWC.js';
-import { V as Vfs, C as Cred, R as RuntimeVolume, a as VirtualTcpNetwork, b as RuntimeHttpResponse, O as OutboundPolicy, S as SpawnChild, c as SyncSpawn, I as IpcTransport, d as VolumeStat, e as VolumeStats, f as RuntimePod, g as RuntimePackageInstaller, h as ChildSpawnConfig, i as ChildHandle, j as RuntimeProcess, k as RuntimeSocketPeer, l as RuntimeConnection } from './contracts-CXZ_25-O.js';
-export { D as DirEntry, m as ROOT_CRED, n as RuntimeProcessManager, o as RuntimeProcessResult, p as Stats, q as VirtualNode, r as VirtualProvider, W as WriteOptions, s as applyChmod, t as createChildProcessModule, u as formatMode, v as makeCred, w as octalMode, x as parseUmask } from './contracts-CXZ_25-O.js';
-import { M as MemoryVolume, a as MemoryVolumeSnapshotEntry } from './memory-volume-C4xwtIRZ.js';
+import { S as Shell, a as ShellIO, b as Session, N as Node, c as Command, K as Kernel, E as ExecContext, O as OutputStream, C as Container, B as BinaryBackend, d as createContainer } from './container-D-e5SMXQ.js';
+export { e as BinaryExecutionRegistry, f as BinaryInfo, g as BinaryRequest, h as BufferSink, i as CallbackSink, j as CommandRegistry, k as ContainerFs, l as ContainerOptions, m as ContextInit, n as Env, o as ExecOptions, p as ExecResult, q as ExecutionDecision, r as ExecutionTier, F as FileData, s as FileInput, t as FileOutput, G as GroupEntry, H as HttpResponse, I as InputStream, J as Job, u as KernelOptions, L as ListeningPort, M as MANIFEST_FORMAT, v as MANIFEST_SCHEMA_VERSION, w as MountEntry, x as NetInterface, y as NetworkOptions, z as NetworkStack, A as NullInput, D as NullOutput, P as PYTHON_VERSION, Q as PasswdEntry, R as Pipe, T as Preparation, U as PreparedBinary, V as Process, W as ProcessKind, X as ProcessOptions, Y as ProcessState, Z as ProcessTable, _ as PythonCapabilities, $ as PythonOptions, a0 as PythonProfile, a1 as PythonRuntimeManifest, a2 as ResolvedExecutable, a3 as RunOptions, a4 as RunResult, a5 as SessionInit, a6 as SessionResult, a7 as SessionRunOptions, a8 as ShellExit, a9 as ShellInit, aa as ShellOptions, ab as SpawnHandle, ac as Stdio, ad as TeeOutput, ae as UserDatabase, af as Variables, ag as WasmCommandArtifact, ah as WasmTranslator, ai as binaryDigest, aj as braceExpand, ak as captureStdio, al as configurePython, am as createContext, an as createTranslationBackend, ao as createWasmCompatibilityBackend, ap as defineCommand, aq as expandWord, ar as expandWords, as as inspectElf, at as installWasmCommands, au as isElfBinary, av as isPythonAvailable, aw as resetPidCounter, ax as shellQuote, ay as validateManifest } from './container-D-e5SMXQ.js';
+import { V as Vfs, C as Cred, R as RuntimeVolume, a as VirtualTcpNetwork, b as RuntimeHttpResponse, O as OutboundPolicy, S as SpawnChild, c as SyncSpawn, I as IpcTransport, d as VolumeStat, e as VolumeStats, f as RuntimePod, g as RuntimePackageInstaller, h as ChildSpawnConfig, i as ChildHandle, j as RuntimeProcess, k as RuntimeSocketPeer, l as RuntimeConnection } from './contracts-BHo4LdY2.js';
+export { D as DirEntry, m as ROOT_CRED, n as RuntimeProcessManager, o as RuntimeProcessResult, p as Stats, q as VirtualNode, r as VirtualProvider, W as WriteOptions, s as applyChmod, t as createChildProcessModule, u as formatMode, v as makeCred, w as octalMode, x as parseUmask } from './contracts-BHo4LdY2.js';
+import { M as MemoryVolume, a as MemoryVolumeSnapshotEntry } from './memory-volume-meoRW8ST.js';
 import EventEmitter from 'events/events.js';
 import streamModule from 'stream-browserify';
 

package/dist/index.js

@@ -8357,6 +8357,60 @@ function createSysProvider(kernel) {
   };
 }
 
+// src/net/proxy-fetch.ts
+function toBase64(bytes2) {
+  let text2 = "";
+  for (let at = 0; at < bytes2.length; at += 32768) {
+    text2 += String.fromCharCode(...bytes2.subarray(at, at + 32768));
+  }
+  return btoa(text2);
+}
+function fromBase64(text2) {
+  const binary = atob(text2);
+  const bytes2 = new Uint8Array(binary.length);
+  for (let at = 0; at < binary.length; at += 1) bytes2[at] = binary.charCodeAt(at);
+  return bytes2;
+}
+async function proxyExchange(proxy, request, fetchImpl = fetch) {
+  let answer;
+  try {
+    answer = await fetchImpl(proxy, {
+      method: "POST",
+      headers: { "content-type": "application/json" },
+      body: JSON.stringify({
+        url: request.url,
+        method: request.method,
+        headers: request.headers,
+        ...request.body?.length ? { body: toBase64(request.body) } : {}
+      })
+    });
+  } catch (error) {
+    throw new Error(
+      `the egress proxy at ${proxy} could not be reached (${error instanceof Error ? error.message : String(error)}). It performs this container's outbound requests, so nothing leaves until it answers.`
+    );
+  }
+  if (!answer.ok) {
+    throw new Error(
+      `the egress proxy at ${proxy} refused ${request.method} ${request.url} with ${answer.status} ${answer.statusText}: ${(await answer.text()).trim().slice(0, 300)}`
+    );
+  }
+  const payload = await answer.json();
+  return {
+    status: payload.status ?? 200,
+    statusText: payload.statusText ?? "",
+    headers: payload.headers ?? {},
+    body: payload.body ? fromBase64(payload.body) : new Uint8Array(0)
+  };
+}
+function isBrowser() {
+  return typeof process === "undefined" || process.versions?.node == null;
+}
+function browserBlocked(hostname, message) {
+  return new Error(
+    `${message} \u2014 the request to ${hostname} was blocked by the browser. A page can only read a response from a host that sends CORS headers, and most APIs send none. Give the container a proxy that makes the request for it \u2014 network: { proxy }, and \`npx sandboxedjs-egress\` is one \u2014 or run the container on a server.`
+  );
+}
+
 // src/net/policy.ts
 function isLoopbackHostname(hostname) {
   const host2 = hostname.replace(/^\[|\]$/g, "").toLowerCase();
@@ -8399,7 +8453,40 @@ function policedFetch(policy, fetchImpl) {
     if (!outboundAllowed(policy, url)) {
       throw Object.assign(new TypeError("fetch failed"), { cause: outboundBlockedError(url) });
     }
-    return fetchImpl(input, init);
+    if (policy.proxy) return await fetchThroughProxy(policy.proxy, fetchImpl, input, init);
+    try {
+      return await fetchImpl(input, init);
+    } catch (error) {
+      if (!isBrowser()) throw error;
+      throw Object.assign(new TypeError("fetch failed"), {
+        cause: browserBlocked(new URL(url).hostname, error instanceof Error ? error.message : String(error))
+      });
+    }
+  });
+}
+async function fetchThroughProxy(proxy, fetchImpl, input, init) {
+  const request = new Request(input, init);
+  const headers = {};
+  request.headers.forEach((value, name) => {
+    headers[name] = value;
+  });
+  const bodyless = request.method === "GET" || request.method === "HEAD";
+  const result = await proxyExchange(
+    proxy,
+    {
+      url: request.url,
+      method: request.method,
+      headers,
+      ...bodyless ? {} : { body: new Uint8Array(await request.arrayBuffer()) }
+    },
+    fetchImpl
+  );
+  const nullBody = result.status === 204 || result.status === 205 || result.status === 304 || request.method === "HEAD";
+  const body = nullBody ? null : result.body.slice().buffer;
+  return new Response(body, {
+    status: result.status,
+    statusText: result.statusText,
+    headers: result.headers
   });
 }
 function policedWebSocket(Native, policy) {
@@ -17457,9 +17544,6 @@ function parseUrl(raw) {
     return null;
   }
 }
-function isBrowser() {
-  return typeof process === "undefined" || process.versions?.node == null;
-}
 async function performRequest(ctx, url, init) {
   const isLocal = ctx.kernel.net.isLocal(url.hostname);
   if (isLocal) {
@@ -17487,7 +17571,16 @@ async function performRequest(ctx, url, init) {
     );
   }
   const proxy = ctx.kernel.net.proxy;
-  if (proxy) return await proxyRequest(ctx, proxy, url, init);
+  if (proxy) {
+    const result = await proxyExchange(proxy, {
+      url: url.toString(),
+      method: init.method,
+      headers: init.headers,
+      ...init.body?.length ? { body: init.body } : {}
+    });
+    ctx.kernel.net.countRx(result.body.length);
+    return { ...result, url: url.toString() };
+  }
   let response;
   try {
     response = await fetch(url.toString(), {
@@ -17496,9 +17589,7 @@ async function performRequest(ctx, url, init) {
       ...init.body ? { body: init.body.slice().buffer } : {}
     });
   } catch (error) {
-    throw isBrowser() ? new Error(
-      `${error instanceof Error ? error.message : String(error)} \u2014 the request to ${url.hostname} was blocked by the browser. A page can only read a response from a host that sends CORS headers, and most APIs send none. Give the container a proxy that makes the request for it \u2014 network: { proxy }, and \`npx sandboxedjs-egress\` is one \u2014 or run the container on a server.`
-    ) : error;
+    throw isBrowser() ? browserBlocked(url.hostname, error instanceof Error ? error.message : String(error)) : error;
   }
   const body = new Uint8Array(await response.arrayBuffer());
   ctx.kernel.net.countRx(body.length);
@@ -17508,53 +17599,6 @@ async function performRequest(ctx, url, init) {
   });
   return { status: response.status, statusText: response.statusText, headers, body, url: response.url || url.toString() };
 }
-async function proxyRequest(ctx, proxy, url, init) {
-  let answer;
-  try {
-    answer = await fetch(proxy, {
-      method: "POST",
-      headers: { "content-type": "application/json" },
-      body: JSON.stringify({
-        url: url.toString(),
-        method: init.method,
-        headers: init.headers,
-        ...init.body?.length ? { body: toBase64(init.body) } : {}
-      })
-    });
-  } catch (error) {
-    throw new Error(
-      `the egress proxy at ${proxy} could not be reached (${error instanceof Error ? error.message : String(error)}). It performs this container's outbound requests, so nothing leaves until it answers.`
-    );
-  }
-  if (!answer.ok) {
-    throw new Error(
-      `the egress proxy at ${proxy} refused ${init.method} ${url.toString()} with ${answer.status} ${answer.statusText}: ${(await answer.text()).trim().slice(0, 300)}`
-    );
-  }
-  const payload = await answer.json();
-  const body = payload.body ? fromBase64(payload.body) : new Uint8Array(0);
-  ctx.kernel.net.countRx(body.length);
-  return {
-    status: payload.status ?? 200,
-    statusText: payload.statusText ?? "",
-    headers: payload.headers ?? {},
-    body,
-    url: url.toString()
-  };
-}
-function toBase64(bytes2) {
-  let text2 = "";
-  for (let at = 0; at < bytes2.length; at += 32768) {
-    text2 += String.fromCharCode(...bytes2.subarray(at, at + 32768));
-  }
-  return btoa(text2);
-}
-function fromBase64(text2) {
-  const binary = atob(text2);
-  const bytes2 = new Uint8Array(binary.length);
-  for (let at = 0; at < binary.length; at += 1) bytes2[at] = binary.charCodeAt(at);
-  return bytes2;
-}
 var curl = defineCommand({
   name: "curl",
   path: "/usr/bin/curl",
@@ -20996,7 +21040,7 @@ var wheels_default = {
 
 // package.json
 var package_default = {
-  version: "0.2.4"};
+  version: "0.2.6"};
 
 // src/python/extension-abi.ts
 var EXTENSION_ABI = {
@@ -22661,8 +22705,12 @@ function createHostAbiServer(proc) {
       }
       case Op.resolve: {
         const sockets = proc.sockets;
+        const name = r.string();
+        if (/^(\d{1,3}\.){3}\d{1,3}$/.test(name)) {
+          return { status: 0, payload: new Writer().string(name).finish() };
+        }
         if (!sockets?.outbound) throw new PosixError(Errno.ENOSYS);
-        const address = sockets.outbound.resolve(r.string());
+        const address = sockets.outbound.resolve(name);
         return { status: 0, payload: new Writer().string(address).finish() };
       }
       case Op.send: {
@@ -24789,6 +24837,77 @@ if os.environ.get("SBX_OUTBOUND_SOCKETS") == "1":
     sys.meta_path.insert(0, _SbxTruststoreHook())
 
 
+# Literal addresses are answered here rather than through the host.
+#
+# The container's resolver is a host call, and a container with no outbound
+# sockets configured has no resolver to call: it answers ENOSYS. That is the
+# right answer for a name, but the egress hop below dials 127.0.0.1, and
+# http.client calls getaddrinfo even for an address that needs no resolving --
+# so every request through the egress died with "Function not implemented"
+# before it reached the endpoint. A numeric address (and loopback by its usual
+# names) is now formed here, which is what a resolver would have returned.
+def _sbx_local_addresses():
+    import socket as _socket_module
+    import _socket as _socket_native
+
+    # The native entry point, not socket.getaddrinfo: the stdlib wrapper
+    # delegates to _socket, so wrapping the wrapper and replacing _socket with
+    # the wrapper makes the two call each other forever.
+    _real_getaddrinfo = _socket_native.getaddrinfo
+
+    _literals = {"localhost": "127.0.0.1", "localhost.localdomain": "127.0.0.1",
+                 "ip6-localhost": "127.0.0.1"}
+
+    def _literal(host):
+        """The address host already is, or None when it needs a resolver."""
+        if isinstance(host, (bytes, bytearray)):
+            host = bytes(host).decode("ascii", "replace")
+        if host is None:
+            return None
+        host = _literals.get(host.lower(), host)
+        parts = host.split(".")
+        if len(parts) != 4:
+            return None
+        for part in parts:
+            if not part.isdigit() or len(part) > 3 or int(part) > 255:
+                return None
+        return host
+
+    def getaddrinfo(host, port, family=0, type=0, proto=0, flags=0):
+        address = _literal(host)
+        if address is None:
+            return _real_getaddrinfo(host, port, family, type, proto, flags)
+        if isinstance(port, (bytes, bytearray)):
+            port = bytes(port).decode("ascii", "replace")
+        if isinstance(port, str):
+            port = int(port) if port.isdigit() else _socket_module.getservbyname(port)
+        if port is None:
+            port = 0
+        if family not in (0, _socket_module.AF_UNSPEC, _socket_module.AF_INET):
+            raise _socket_module.gaierror(
+                _socket_module.EAI_FAMILY, "only AF_INET is supported in this container"
+            )
+        kind = type or _socket_module.SOCK_STREAM
+        protocol = proto or (_socket_module.IPPROTO_TCP
+                             if kind == _socket_module.SOCK_STREAM else 0)
+        return [(_socket_module.AF_INET, kind, protocol, "", (address, int(port)))]
+
+    def gethostbyname(host):
+        return getaddrinfo(host, 0)[0][4][0]
+
+    def gethostbyname_ex(host):
+        return (host, [], [gethostbyname(host)])
+
+    _socket_module.getaddrinfo = getaddrinfo
+    _socket_module.gethostbyname = gethostbyname
+    _socket_module.gethostbyname_ex = gethostbyname_ex
+    _socket_native.getaddrinfo = getaddrinfo
+    _socket_native.gethostbyname = gethostbyname
+    _socket_native.gethostbyname_ex = gethostbyname_ex
+
+
+_sbx_local_addresses()
+
 _egress = None if os.environ.get("SBX_OUTBOUND_SOCKETS") == "1" else os.environ.get("SBX_HTTP_EGRESS")
 if _egress:
     import http.client
@@ -37808,7 +37927,8 @@ var Container = class _Container {
     if (opts.python) configurePython(opts.python);
     const network = {
       allowOutbound: opts.network?.allowOutbound ?? false,
-      allowedHosts: opts.network?.allowedHosts ?? null
+      allowedHosts: opts.network?.allowedHosts ?? null,
+      ...opts.network?.proxy ? { proxy: opts.network.proxy } : {}
     };
     const podOptions = {
       workdir: opts.cwd ?? "/",

package/dist/{memory-volume-Bp71nqvc.d.cts → memory-volume-e-uJFRnG.d.cts}

@@ -1,4 +1,4 @@
-import { R as RuntimeVolume, d as VolumeStat, e as VolumeStats } from './contracts-CXZ_25-O.cjs';
+import { R as RuntimeVolume, d as VolumeStat, e as VolumeStats } from './contracts-BHo4LdY2.cjs';
 
 type NodeKind = "file" | "directory" | "symlink";
 interface MemoryVolumeSnapshotEntry {

package/dist/{memory-volume-C4xwtIRZ.d.ts → memory-volume-meoRW8ST.d.ts}

@@ -1,4 +1,4 @@
-import { R as RuntimeVolume, d as VolumeStat, e as VolumeStats } from './contracts-CXZ_25-O.js';
+import { R as RuntimeVolume, d as VolumeStat, e as VolumeStats } from './contracts-BHo4LdY2.js';
 
 type NodeKind = "file" | "directory" | "symlink";
 interface MemoryVolumeSnapshotEntry {