secure-exec 0.2.0-rc.1 → 0.2.0

package/dist/index.d.ts

@@ -4,8 +4,8 @@ export type { ResourceBudgets } from "./runtime-driver.js";
 export type { NodeRuntimeDriver, NodeRuntimeDriverFactory, NetworkAdapter, Permissions, VirtualFileSystem, } from "./types.js";
 export type { DirEntry, StatInfo } from "./fs-helpers.js";
 export type { StdioChannel, StdioEvent, StdioHook, ExecOptions, ExecResult, OSConfig, ProcessConfig, RunResult, TimingMitigation, } from "./shared/api-types.js";
-export { createDefaultNetworkAdapter, createNodeDriver, createNodeRuntimeDriverFactory, NodeExecutionDriver, NodeFileSystem, } from "@secure-exec/nodejs";
-export type { ModuleAccessOptions, NodeRuntimeDriverFactoryOptions, } from "@secure-exec/nodejs";
+export { createDefaultNetworkAdapter, createNodeDriver, createNodeHostCommandExecutor, createNodeRuntimeDriverFactory, NodeExecutionDriver, NodeFileSystem, } from "@secure-exec/nodejs";
+export type { DefaultNetworkAdapterOptions, ModuleAccessOptions, NodeRuntimeDriverFactoryOptions, } from "@secure-exec/nodejs";
 export { createKernel } from "@secure-exec/core";
 export type { Kernel, KernelInterface } from "@secure-exec/core";
 export { createNodeRuntime } from "@secure-exec/nodejs";

package/dist/index.js

@@ -1,7 +1,7 @@
 // Re-export core runtime surface.
 export { NodeRuntime } from "./runtime.js";
 // Re-export Node driver factories.
-export { createDefaultNetworkAdapter, createNodeDriver, createNodeRuntimeDriverFactory, NodeExecutionDriver, NodeFileSystem, } from "@secure-exec/nodejs";
+export { createDefaultNetworkAdapter, createNodeDriver, createNodeHostCommandExecutor, createNodeRuntimeDriverFactory, NodeExecutionDriver, NodeFileSystem, } from "@secure-exec/nodejs";
 // Re-export kernel API.
 export { createKernel } from "@secure-exec/core";
 // Re-export kernel Node runtime factory.

package/dist/runtime.js

@@ -1,11 +1,19 @@
 import { createNetworkStub, filterEnv } from "@secure-exec/core";
+import { createSandboxCommandExecutor } from "@secure-exec/nodejs";
 const DEFAULT_SANDBOX_CWD = "/root";
 const DEFAULT_SANDBOX_HOME = "/root";
 const DEFAULT_SANDBOX_TMPDIR = "/tmp";
 export class NodeRuntime {
     runtimeDriver;
     constructor(options) {
-        const { systemDriver, runtimeDriverFactory } = options;
+        const { runtimeDriverFactory } = options;
+        // Auto-inject sandbox command executor when none is configured
+        const systemDriver = options.systemDriver.commandExecutor
+            ? options.systemDriver
+            : {
+                ...options.systemDriver,
+                commandExecutor: createSandboxCommandExecutor(runtimeDriverFactory, options.systemDriver),
+            };
         const processConfig = {
             ...(systemDriver.runtime.process ?? {}),
         };

package/dist/shared/in-memory-fs.d.ts

@@ -1 +1 @@
-export { createInMemoryFileSystem, InMemoryFileSystem, } from "@secure-exec/core";
+export { createInMemoryFileSystem } from "@secure-exec/core";

package/dist/shared/in-memory-fs.js

@@ -1,2 +1,2 @@
 // Re-exported from @secure-exec/core
-export { createInMemoryFileSystem, InMemoryFileSystem, } from "@secure-exec/core";
+export { createInMemoryFileSystem } from "@secure-exec/core";

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "secure-exec",
-  "version": "0.2.0-rc.1",
+  "version": "0.2.0",
   "type": "module",
   "license": "Apache-2.0",
   "main": "./dist/index.js",
@@ -22,12 +22,8 @@
     }
   },
   "dependencies": {
-    "@secure-exec/nodejs": "0.2.0-rc.1",
-    "@secure-exec/core": "0.2.0-rc.1"
-  },
-  "optionalDependencies": {
-    "@secure-exec/browser": "0.2.0-rc.1",
-    "@secure-exec/python": "0.2.0-rc.1"
+    "@secure-exec/core": "0.2.0",
+    "@secure-exec/nodejs": "0.2.0"
   },
   "devDependencies": {
     "@mariozechner/pi-coding-agent": "^0.60.0",
@@ -36,20 +32,21 @@
     "@vitest/browser": "^2.1.8",
     "@xterm/headless": "^6.0.0",
     "minimatch": "^10.2.4",
+    "node-pty": "^1.1.0",
+    "opencode-ai": "1.3.3",
     "playwright": "^1.52.0",
     "tsx": "^4.19.2",
     "typescript": "^5.7.2",
     "vitest": "^2.1.8",
-    "@secure-exec/v8": "0.2.0-rc.1"
+    "@secure-exec/v8": "0.2.0"
   },
   "scripts": {
     "check-types": "tsc --noEmit",
     "check-types:test": "vitest --typecheck --run tests/types/",
     "build": "tsc",
-    "test:test-suite": "vitest run tests/test-suite.test.ts tests/test-suite-python.test.ts",
-    "test:runtime-driver": "vitest run tests/runtime-driver/*.test.ts",
+    "test:test-suite": "vitest run tests/test-suite/node.test.ts",
+    "test:runtime-driver": "vitest run tests/runtime-driver/node/",
     "test:integration:node": "pnpm run test:test-suite && pnpm run test:runtime-driver",
-    "test:integration:browser": "vitest run --config vitest.browser.config.ts tests/test-suite/node.test.ts tests/runtime-driver/browser/runtime.test.ts",
     "test:project-matrix": "vitest run tests/project-matrix.test.ts",
     "test:e2e-docker": "vitest run tests/e2e-docker.test.ts",
     "test": "vitest run",

package/dist/browser/index.d.ts

@@ -1,5 +0,0 @@
-export { createBrowserDriver, createBrowserNetworkAdapter, createOpfsFileSystem, } from "@secure-exec/browser";
-export type { BrowserDriverOptions, BrowserRuntimeSystemOptions, } from "@secure-exec/browser";
-export { createBrowserRuntimeDriverFactory, } from "@secure-exec/browser";
-export type { BrowserRuntimeDriverFactoryOptions, } from "@secure-exec/browser";
-export { createInMemoryFileSystem } from "@secure-exec/core";

package/dist/browser/index.js

@@ -1,4 +0,0 @@
-// Re-export browser driver factories from @secure-exec/browser.
-export { createBrowserDriver, createBrowserNetworkAdapter, createOpfsFileSystem, } from "@secure-exec/browser";
-export { createBrowserRuntimeDriverFactory, } from "@secure-exec/browser";
-export { createInMemoryFileSystem } from "@secure-exec/core";

package/dist/browser/worker.d.ts

@@ -1 +0,0 @@
-import "@secure-exec/browser/internal/worker";

package/dist/browser/worker.js

@@ -1,3 +0,0 @@
-// Worker entry proxy — loads the actual worker implementation from @secure-exec/browser.
-// Kept here so browser tests can reference this path as the Worker URL.
-import "@secure-exec/browser/internal/worker";