secure-exec 0.2.1-rc.1 → 0.2.20

package/README.md

@@ -1,7 +1,131 @@
-# Secure Exec
+<p align="center">
+  <img src="https://raw.githubusercontent.com/rivet-dev/agentos/main/.github/media/secure-exec-logo.png" alt="Secure Exec" height="160" />
+</p>
 
-Secure Node.js execution without a sandbox. V8 isolate-based code execution with full Node.js and npm compatibility.
+<p align="center">
+  Secure Node.js execution without a sandbox.<br/>Run untrusted JavaScript and TypeScript in an isolated VM with real Node.js APIs, npm packages, and a virtual filesystem.<br/>Powered by <a href="https://rivet.dev/agentos">agentOS</a>.
+</p>
 
-- [Website](https://secureexec.dev)
-- [Documentation](https://secureexec.dev/docs)
-- [GitHub](https://github.com/rivet-dev/secure-exec)
+<p align="center">
+  <a href="https://rivet.dev/secure-exec/docs/quickstart">Quickstart</a> | <a href="https://rivet.dev/secure-exec/docs">Documentation</a> | <a href="https://rivet.dev/discord">Discord</a>
+</p>
+
+## Install
+
+```bash
+npm install secure-exec
+```
+
+Requires Node.js 22+ on Linux or macOS.
+
+## Run Code
+
+Each call runs in a fresh VM that is disposed when the call finishes. Nothing is
+shared between calls.
+
+```ts
+import { evaluate, execute } from "secure-exec";
+
+const sum = await evaluate<number>("1 + 2");
+if (sum.outcome === "succeeded") console.log(sum.value); // 3
+
+const run = await execute(`console.log("hello")`, {
+  output: { capture: "all" },
+  timeoutMs: 5_000,
+});
+console.log(run.stdout); // hello
+```
+
+`evaluate` takes one expression and returns its JSON value; wrap several
+statements in a function. `execute` runs a whole module for its side effects.
+
+`outcome` is `succeeded`, `failed`, `cancelled`, or `timed_out`. Every outcome
+other than `succeeded` carries an `error`, and guest stack traces arrive on
+`stderr` when you capture it.
+
+## Configure the VM
+
+VM options go on the call: `permissions`, `limits`, `mounts`, and the rest of
+the agentOS VM options. The network is denied unless you allow it, and a policy
+is merged over the defaults.
+
+```ts
+await evaluate(
+  `(async () => {
+    const response = await fetch("https://example.com");
+    await response.text();
+    return response.status;
+  })()`,
+  { permissions: { network: "allow" } },
+);
+```
+
+## Keep state with a context
+
+A context is a dedicated VM that keeps variables, imports, files, and installed
+packages between calls. JavaScript and TypeScript share the same state.
+
+```ts
+import { createContext, execute } from "secure-exec";
+import { evaluate } from "secure-exec/typescript";
+
+await using context = await createContext({ permissions: { network: "allow" } });
+
+await execute("globalThis.total = 40", { context });
+const result = await evaluate<number>("(globalThis.total as number) + 2", { context });
+
+await context.reset(); // clear state, keep the VM
+```
+
+Without `await using`, call `context.dispose()` when you are done.
+
+## TypeScript
+
+`secure-exec/typescript` has the same `execute` and `evaluate`, plus `check`.
+Running TypeScript strips types without checking them, so check first when it
+matters.
+
+```ts
+import { check, evaluate } from "secure-exec/typescript";
+
+const checked = await check(`const total: number = "nope";`);
+for (const diagnostic of checked.diagnostics) console.log(diagnostic.message);
+```
+
+## npm
+
+`secure-exec/npm` installs packages into a context's VM.
+
+```ts
+import { createContext, evaluate } from "secure-exec";
+import { install } from "secure-exec/npm";
+
+await using context = await createContext({ permissions: { network: "allow" } });
+await install(["zod"], { context });
+
+// Packages install into /workspace. Inline code resolves imports from
+// `filePath`, so place it next to node_modules.
+await evaluate(`import("zod").then(({ z }) => z.string().parse("ok"))`, {
+  context,
+  filePath: "/workspace/main.mjs",
+});
+```
+
+`runScript` and `runPackage` work like `npm run` and `npx`.
+
+## Warm up
+
+The first call starts a shared sidecar process. Call `init()` at startup to pay
+that cost ahead of time.
+
+```ts
+import { init } from "secure-exec";
+
+await init();
+```
+
+## More
+
+For processes, filesystem access, Python, and agent sessions, use
+[`@rivet-dev/agentos-core`](https://rivet.dev/agentos) directly. Read the [documentation](https://rivet.dev/secure-exec/docs), or browse the examples in
+[`secure-exec/examples`](https://github.com/rivet-dev/agentos/tree/main/secure-exec/examples).

package/dist/index.d.ts

@@ -1,14 +1,11 @@
-export { NodeRuntime } from "./runtime.js";
-export type { NodeRuntimeOptions } from "./runtime.js";
-export type { ResourceBudgets } from "./runtime-driver.js";
-export type { NodeRuntimeDriver, NodeRuntimeDriverFactory, NetworkAdapter, Permissions, VirtualFileSystem, } from "./types.js";
-export type { DirEntry, StatInfo } from "./fs-helpers.js";
-export type { StdioChannel, StdioEvent, StdioHook, ExecOptions, ExecResult, OSConfig, ProcessConfig, RunResult, TimingMitigation, } from "./shared/api-types.js";
-export { createDefaultNetworkAdapter, createNodeDriver, createNodeHostCommandExecutor, createNodeRuntimeDriverFactory, NodeExecutionDriver, NodeFileSystem, } from "@secure-exec/nodejs";
-export type { DefaultNetworkAdapterOptions, ModuleAccessOptions, NodeRuntimeDriverFactoryOptions, } from "@secure-exec/nodejs";
-export { createKernel } from "@secure-exec/core";
-export type { Kernel, KernelInterface } from "@secure-exec/core";
-export { createNodeRuntime } from "@secure-exec/nodejs";
-export type { BindingTree, BindingFunction } from "@secure-exec/nodejs";
-export { createInMemoryFileSystem } from "./shared/in-memory-fs.js";
-export { allowAll, allowAllChildProcess, allowAllEnv, allowAllFs, allowAllNetwork, } from "./shared/permissions.js";
+import type { CodeEvaluationResult, CodeExecutionResult, JavaScriptEvaluationOptions, JavaScriptExecutionOptions, JsonValue } from "@rivet-dev/agentos-core";
+import { type Target } from "./runtime.js";
+export type { CodeEvaluationResult, CodeExecutionResult, ExecutionErrorData, ExecutionOutputOptions, JsonValue, LimitWarning, MountConfig, OutputCapture, Permissions, } from "@rivet-dev/agentos-core";
+export { createHostDirBackend, nodeModulesMount, } from "@rivet-dev/agentos-core";
+export { type Context, createContext, init, type Target, type VmOptions, } from "./runtime.js";
+export type ExecuteOptions = Omit<JavaScriptExecutionOptions, "contextId"> & Target;
+export type EvaluateOptions = Omit<JavaScriptEvaluationOptions, "contextId"> & Target;
+/** Run JavaScript for its side effects and captured output. */
+export declare function execute(source: string, options?: ExecuteOptions): Promise<CodeExecutionResult>;
+/** Evaluate one JavaScript expression and return its JSON value. */
+export declare function evaluate<T = JsonValue>(source: string, options?: EvaluateOptions): Promise<CodeEvaluationResult<T>>;

package/dist/index.js

@@ -1,10 +1,11 @@
-// Re-export core runtime surface.
-export { NodeRuntime } from "./runtime.js";
-// Re-export Node driver factories.
-export { createDefaultNetworkAdapter, createNodeDriver, createNodeHostCommandExecutor, createNodeRuntimeDriverFactory, NodeExecutionDriver, NodeFileSystem, } from "@secure-exec/nodejs";
-// Re-export kernel API.
-export { createKernel } from "@secure-exec/core";
-// Re-export kernel Node runtime factory.
-export { createNodeRuntime } from "@secure-exec/nodejs";
-export { createInMemoryFileSystem } from "./shared/in-memory-fs.js";
-export { allowAll, allowAllChildProcess, allowAllEnv, allowAllFs, allowAllNetwork, } from "./shared/permissions.js";
+import { run } from "./runtime.js";
+export { createHostDirBackend, nodeModulesMount, } from "@rivet-dev/agentos-core";
+export { createContext, init, } from "./runtime.js";
+/** Run JavaScript for its side effects and captured output. */
+export function execute(source, options) {
+    return run(options, (vm, operationOptions) => vm.javascript.execute(source, operationOptions));
+}
+/** Evaluate one JavaScript expression and return its JSON value. */
+export function evaluate(source, options) {
+    return run(options, (vm, operationOptions) => vm.javascript.evaluate(source, operationOptions));
+}

package/dist/npm.d.ts

@@ -0,0 +1,20 @@
+import type { CodeExecutionResult, LanguageExecutionOptions, NpmPackageInstallOptions, NpmProjectInstallOptions } from "@rivet-dev/agentos-core";
+import { type Context } from "./runtime.js";
+type InContext<O> = Omit<O, "contextId"> & {
+    context: Context;
+};
+export type InstallProjectOptions = InContext<NpmProjectInstallOptions>;
+export type InstallPackagesOptions = InContext<NpmPackageInstallOptions>;
+export type RunScriptOptions = InContext<LanguageExecutionOptions>;
+export type RunPackageOptions = InContext<LanguageExecutionOptions & {
+    binary?: string;
+}>;
+/** Install the dependencies of the `package.json` in the context's working directory. */
+export declare function install(options: InstallProjectOptions): Promise<CodeExecutionResult>;
+/** Install packages into the context's VM. */
+export declare function install(packages: string | string[], options: InstallPackagesOptions): Promise<CodeExecutionResult>;
+/** Run a `package.json` script, like `npm run`. */
+export declare function runScript(script: string, options: RunScriptOptions): Promise<CodeExecutionResult>;
+/** Run a package's binary, like `npx`. */
+export declare function runPackage(packageSpec: string, options: RunPackageOptions): Promise<CodeExecutionResult>;
+export {};

package/dist/npm.js

@@ -0,0 +1,26 @@
+import { contextVm } from "./runtime.js";
+export function install(packagesOrOptions, packageOptions) {
+    if (typeof packagesOrOptions === "string" ||
+        Array.isArray(packagesOrOptions)) {
+        const { context, ...options } = requireContext(packageOptions);
+        return contextVm(context).javascript.npm.install(packagesOrOptions, options);
+    }
+    const { context, ...options } = requireContext(packagesOrOptions);
+    return contextVm(context).javascript.npm.install(options);
+}
+/** Run a `package.json` script, like `npm run`. */
+export function runScript(script, options) {
+    const { context, ...rest } = requireContext(options);
+    return contextVm(context).javascript.npm.runScript(script, rest);
+}
+/** Run a package's binary, like `npx`. */
+export function runPackage(packageSpec, options) {
+    const { context, ...rest } = requireContext(options);
+    return contextVm(context).javascript.npm.runPackage(packageSpec, rest);
+}
+function requireContext(options) {
+    if (!options?.context) {
+        throw new TypeError("npm operations require a context; create one with createContext()");
+    }
+    return options;
+}

package/dist/runtime.d.ts

@@ -1,31 +1,33 @@
-import type { NetworkAdapter, NodeRuntimeDriverFactory, SystemDriver } from "@secure-exec/core";
-import type { StdioHook, ExecOptions, ExecResult, RunResult, TimingMitigation } from "@secure-exec/core";
-import type { ResourceBudgets } from "@secure-exec/core";
-export interface NodeRuntimeOptions {
-    systemDriver: SystemDriver;
-    runtimeDriverFactory: NodeRuntimeDriverFactory;
-    memoryLimit?: number;
-    cpuTimeLimitMs?: number;
-    timingMitigation?: TimingMitigation;
-    onStdio?: StdioHook;
-    payloadLimits?: {
-        base64TransferBytes?: number;
-        jsonPayloadBytes?: number;
-    };
-    resourceBudgets?: ResourceBudgets;
-}
-export declare class NodeRuntime {
-    private readonly runtimeDriver;
-    constructor(options: NodeRuntimeOptions);
-    get network(): Pick<NetworkAdapter, "fetch" | "dnsLookup" | "httpRequest">;
-    get __unsafeIsoalte(): unknown;
-    __unsafeCreateContext(options?: {
-        env?: Record<string, string>;
-        cwd?: string;
-        filePath?: string;
-    }): Promise<unknown>;
-    run<T = unknown>(code: string, filePath?: string): Promise<RunResult<T>>;
-    exec(code: string, options?: ExecOptions): Promise<ExecResult>;
-    dispose(): void;
-    terminate(): Promise<void>;
+import { AgentOs, type AgentOsOptions } from "@rivet-dev/agentos-core";
+/** Options for the VM that runs the code: permissions, limits, mounts, and so on. */
+export type VmOptions = AgentOsOptions;
+/**
+ * Retained language state inside a dedicated VM. Pass it as `context` to run
+ * code against that state; dispose it to release the VM.
+ */
+export interface Context extends AsyncDisposable {
+    readonly contextId: string;
+    /** Clear the retained state. The VM and its filesystem are kept. */
+    reset(): Promise<void>;
+    /** Dispose the VM that backs this context. */
+    dispose(): Promise<void>;
 }
+/**
+ * Where an operation runs: in an existing context, or, when `context` is
+ * omitted, in a fresh VM configured by these options and disposed afterwards.
+ */
+export type Target = ({
+    context: Context;
+} & {
+    [K in keyof VmOptions]?: never;
+}) | ({
+    context?: never;
+} & VmOptions);
+/** Start the shared sidecar process now so the first operation does not pay for it. */
+export declare function init(): Promise<void>;
+export declare function createContext(options?: VmOptions): Promise<Context>;
+export declare function contextVm(context: Context): AgentOs;
+/** Run `operation` in the target's context VM, or in a fresh VM disposed afterwards. */
+export declare function run<O extends object, R>(options: (O & Target) | undefined, operation: (vm: AgentOs, options: O & {
+    contextId?: string;
+}) => Promise<R>): Promise<R>;

package/dist/runtime.js

@@ -1,77 +1,114 @@
-import { createNetworkStub, filterEnv } from "@secure-exec/core";
-import { createSandboxCommandExecutor } from "@secure-exec/nodejs";
-const DEFAULT_SANDBOX_CWD = "/root";
-const DEFAULT_SANDBOX_HOME = "/root";
-const DEFAULT_SANDBOX_TMPDIR = "/tmp";
-export class NodeRuntime {
-    runtimeDriver;
-    constructor(options) {
-        const { runtimeDriverFactory } = options;
-        // Auto-inject sandbox command executor when none is configured
-        const systemDriver = options.systemDriver.commandExecutor
-            ? options.systemDriver
-            : {
-                ...options.systemDriver,
-                commandExecutor: createSandboxCommandExecutor(runtimeDriverFactory, options.systemDriver),
-            };
-        const processConfig = {
-            ...(systemDriver.runtime.process ?? {}),
-        };
-        processConfig.cwd ??= DEFAULT_SANDBOX_CWD;
-        processConfig.env = filterEnv(processConfig.env, systemDriver.permissions);
-        const osConfig = {
-            ...(systemDriver.runtime.os ?? {}),
-        };
-        osConfig.homedir ??= DEFAULT_SANDBOX_HOME;
-        osConfig.tmpdir ??= DEFAULT_SANDBOX_TMPDIR;
-        this.runtimeDriver = runtimeDriverFactory.createRuntimeDriver({
-            system: systemDriver,
-            runtime: {
-                process: processConfig,
-                os: osConfig,
-            },
-            memoryLimit: options.memoryLimit,
-            cpuTimeLimitMs: options.cpuTimeLimitMs,
-            timingMitigation: options.timingMitigation,
-            onStdio: options.onStdio,
-            payloadLimits: options.payloadLimits,
-            resourceBudgets: options.resourceBudgets,
-        });
+import { AgentOs, } from "@rivet-dev/agentos-core";
+// Keep in sync with `AgentOsOptions`. The record type makes a missing or
+// unknown key a compile error.
+const VM_OPTION_KEYS = Object.keys({
+    user: true,
+    software: true,
+    defaultSoftware: true,
+    loopbackExemptPorts: true,
+    allowedNodeBuiltins: true,
+    highResolutionTime: true,
+    database: true,
+    rootFilesystem: true,
+    mounts: true,
+    sandbox: true,
+    scheduleDriver: true,
+    bindings: true,
+    permissions: true,
+    sidecar: true,
+    limits: true,
+    onAgentStderr: true,
+    onAgentExit: true,
+    onLimitWarning: true,
+});
+// The documented agentOS baseline: everything virtualized is allowed, the
+// network is denied, and a caller's policy is merged over it. The Rust client
+// applies this itself; the TypeScript core client instead allows everything
+// when `permissions` is omitted and denies every scope a partial policy leaves
+// out, so apply it here until core matches.
+const BASE_PERMISSIONS = {
+    fs: "allow",
+    network: "deny",
+    childProcess: "allow",
+    process: "allow",
+    env: "allow",
+    binding: "allow",
+};
+function createVm(options = {}) {
+    return AgentOs.create({
+        ...options,
+        permissions: { ...BASE_PERMISSIONS, ...options.permissions },
+    });
+}
+const contextVms = new WeakMap();
+/** Start the shared sidecar process now so the first operation does not pay for it. */
+export async function init() {
+    // A bare VM is enough to start the sidecar; skip projecting default software.
+    const vm = await createVm({ defaultSoftware: false });
+    await vm.dispose();
+}
+export async function createContext(options) {
+    const vm = await createVm(options);
+    const contextId = crypto.randomUUID();
+    try {
+        await vm.createContext(contextId);
     }
-    get network() {
-        const adapter = this.runtimeDriver.network ?? createNetworkStub();
-        return {
-            fetch: (url, options) => adapter.fetch(url, options),
-            dnsLookup: (hostname) => adapter.dnsLookup(hostname),
-            httpRequest: (url, options) => adapter.httpRequest(url, options),
-        };
+    catch (error) {
+        throw await disposeAfterFailure(vm, error);
     }
-    get __unsafeIsoalte() {
-        if (this.runtimeDriver.unsafeIsolate === undefined) {
-            throw new Error("Driver runtime does not expose unsafe isolate access");
-        }
-        return this.runtimeDriver.unsafeIsolate;
+    const context = {
+        contextId,
+        reset: () => vm.contexts.reset(contextId),
+        dispose: () => vm.dispose(),
+        [Symbol.asyncDispose]: () => vm.dispose(),
+    };
+    contextVms.set(context, vm);
+    return context;
+}
+export function contextVm(context) {
+    const vm = contextVms.get(context);
+    if (!vm) {
+        throw new TypeError("context must be created by createContext()");
     }
-    async __unsafeCreateContext(options = {}) {
-        if (!this.runtimeDriver.createUnsafeContext) {
-            throw new Error("Driver runtime does not expose unsafe context creation");
+    return vm;
+}
+/** Run `operation` in the target's context VM, or in a fresh VM disposed afterwards. */
+export async function run(options, operation) {
+    const vmOptions = {};
+    const operationOptions = {};
+    for (const [key, value] of Object.entries(options ?? {})) {
+        const isVmOption = VM_OPTION_KEYS.includes(key);
+        (isVmOption ? vmOptions : operationOptions)[key] = value;
+    }
+    const { context, ...rest } = operationOptions;
+    if (context) {
+        const configured = Object.keys(vmOptions);
+        if (configured.length > 0) {
+            throw new TypeError(`${configured.join(", ")} cannot be combined with context; pass VM options to createContext()`);
         }
-        return this.runtimeDriver.createUnsafeContext(options);
+        return operation(contextVm(context), {
+            ...rest,
+            contextId: context.contextId,
+        });
     }
-    async run(code, filePath) {
-        return this.runtimeDriver.run(code, filePath);
+    const vm = await createVm(vmOptions);
+    let result;
+    try {
+        result = await operation(vm, rest);
     }
-    async exec(code, options) {
-        return this.runtimeDriver.exec(code, options);
+    catch (error) {
+        throw await disposeAfterFailure(vm, error);
     }
-    dispose() {
-        this.runtimeDriver.dispose();
+    await vm.dispose();
+    return result;
+}
+/** Dispose `vm` and return the error to throw, keeping both if disposal also fails. */
+async function disposeAfterFailure(vm, error) {
+    try {
+        await vm.dispose();
+        return error;
     }
-    async terminate() {
-        if (this.runtimeDriver.terminate) {
-            await this.runtimeDriver.terminate();
-            return;
-        }
-        this.runtimeDriver.dispose();
+    catch (disposeError) {
+        return new AggregateError([error, disposeError], "secure-exec operation and VM cleanup failed");
     }
 }

package/dist/typescript.d.ts

@@ -0,0 +1,12 @@
+import type { CodeEvaluationResult, CodeExecutionResult, JsonValue, TypeScriptCheckOptions, TypeScriptCheckResult, TypeScriptEvaluationOptions, TypeScriptExecutionOptions } from "@rivet-dev/agentos-core";
+import { type Target } from "./runtime.js";
+export type { TypeScriptCheckResult, TypeScriptDiagnostic, } from "@rivet-dev/agentos-core";
+export type ExecuteOptions = Omit<TypeScriptExecutionOptions, "contextId"> & Target;
+export type EvaluateOptions = Omit<TypeScriptEvaluationOptions, "contextId"> & Target;
+export type CheckOptions = Omit<TypeScriptCheckOptions, "contextId"> & Target;
+/** Run TypeScript for its side effects and captured output. Types are stripped, not checked. */
+export declare function execute(source: string, options?: ExecuteOptions): Promise<CodeExecutionResult>;
+/** Evaluate one TypeScript expression and return its JSON value. Types are stripped, not checked. */
+export declare function evaluate<T = JsonValue>(source: string, options?: EvaluateOptions): Promise<CodeEvaluationResult<T>>;
+/** Type-check TypeScript without running it. */
+export declare function check(source: string, options?: CheckOptions): Promise<TypeScriptCheckResult>;

package/dist/typescript.js

@@ -0,0 +1,13 @@
+import { run } from "./runtime.js";
+/** Run TypeScript for its side effects and captured output. Types are stripped, not checked. */
+export function execute(source, options) {
+    return run(options, (vm, operationOptions) => vm.typescript.execute(source, operationOptions));
+}
+/** Evaluate one TypeScript expression and return its JSON value. Types are stripped, not checked. */
+export function evaluate(source, options) {
+    return run(options, (vm, operationOptions) => vm.typescript.evaluate(source, operationOptions));
+}
+/** Type-check TypeScript without running it. */
+export function check(source, options) {
+    return run(options, (vm, operationOptions) => vm.typescript.check(source, operationOptions));
+}

package/package.json

@@ -1,55 +1,53 @@
 {
-  "name": "secure-exec",
-  "version": "0.2.1-rc.1",
-  "type": "module",
-  "license": "Apache-2.0",
-  "main": "./dist/index.js",
-  "types": "./dist/index.d.ts",
-  "files": [
-    "dist",
-    "README.md"
-  ],
-  "repository": {
-    "type": "git",
-    "url": "https://github.com/rivet-dev/secure-exec.git",
-    "directory": "packages/secure-exec"
-  },
-  "exports": {
-    ".": {
-      "types": "./dist/index.d.ts",
-      "import": "./dist/index.js",
-      "default": "./dist/index.js"
-    }
-  },
-  "dependencies": {
-    "@secure-exec/core": "0.2.1-rc.1",
-    "@secure-exec/nodejs": "0.2.1-rc.1"
-  },
-  "devDependencies": {
-    "@mariozechner/pi-coding-agent": "^0.60.0",
-    "@opencode-ai/sdk": "^1.2.27",
-    "@types/node": "^22.10.2",
-    "@vitest/browser": "^2.1.8",
-    "@xterm/headless": "^6.0.0",
-    "minimatch": "^10.2.4",
-    "node-pty": "^1.1.0",
-    "opencode-ai": "1.3.3",
-    "playwright": "^1.52.0",
-    "tsx": "^4.19.2",
-    "typescript": "^5.7.2",
-    "vitest": "^2.1.8",
-    "@secure-exec/v8": "0.2.1-rc.1"
-  },
-  "scripts": {
-    "check-types": "tsc --noEmit",
-    "check-types:test": "vitest --typecheck --run tests/types/",
-    "build": "tsc",
-    "test:test-suite": "vitest run tests/test-suite/node.test.ts",
-    "test:runtime-driver": "vitest run tests/runtime-driver/node/",
-    "test:integration:node": "pnpm run test:test-suite && pnpm run test:runtime-driver",
-    "test:project-matrix": "vitest run tests/project-matrix.test.ts",
-    "test:e2e-docker": "vitest run tests/e2e-docker.test.ts",
-    "test": "vitest run",
-    "test:watch": "vitest"
-  }
-}
+	"name": "secure-exec",
+	"version": "0.2.20",
+	"description": "Secure Node.js execution for AI agents: run untrusted JavaScript and TypeScript in an isolated VM.",
+	"license": "Apache-2.0",
+	"type": "module",
+	"sideEffects": false,
+	"main": "./dist/index.js",
+	"types": "./dist/index.d.ts",
+	"exports": {
+		".": {
+			"types": "./dist/index.d.ts",
+			"import": "./dist/index.js"
+		},
+		"./typescript": {
+			"types": "./dist/typescript.d.ts",
+			"import": "./dist/typescript.js"
+		},
+		"./npm": {
+			"types": "./dist/npm.d.ts",
+			"import": "./dist/npm.js"
+		}
+	},
+	"files": [
+		"dist",
+		"README.md"
+	],
+	"repository": {
+		"type": "git",
+		"url": "https://github.com/rivet-dev/agentos.git",
+		"directory": "packages/secure-exec"
+	},
+	"homepage": "https://rivet.dev/secure-exec",
+	"engines": {
+		"node": ">=22.0.0"
+	},
+	"publishConfig": {
+		"access": "public"
+	},
+	"scripts": {
+		"build": "tsc",
+		"check-types": "tsc --noEmit",
+		"test": "vitest run"
+	},
+	"dependencies": {
+		"@rivet-dev/agentos-core": "0.2.20"
+	},
+	"devDependencies": {
+		"@types/node": "^22.19.15",
+		"typescript": "^5.7.3",
+		"vitest": "^2.1.8"
+	}
+}

package/LICENSE

@@ -1,191 +0,0 @@
-
-                                 Apache License
-                           Version 2.0, January 2004
-                        http://www.apache.org/licenses/
-
-   TERMS AND CONDITIONS FOR USE, REPRODUCTION, AND DISTRIBUTION
-
-   1. Definitions.
-
-      "License" shall mean the terms and conditions for use, reproduction,
-      and distribution as defined by Sections 1 through 9 of this document.
-
-      "Licensor" shall mean the copyright owner or entity authorized by
-      the copyright owner that is granting the License.
-
-      "Legal Entity" shall mean the union of the acting entity and all
-      other entities that control, are controlled by, or are under common
-      control with that entity. For the purposes of this definition,
-      "control" means (i) the power, direct or indirect, to cause the
-      direction or management of such entity, whether by contract or
-      otherwise, or (ii) ownership of fifty percent (50%) or more of the
-      outstanding shares, or (iii) beneficial ownership of such entity.
-
-      "You" (or "Your") shall mean an individual or Legal Entity
-      exercising permissions granted by this License.
-
-      "Source" form shall mean the preferred form for making modifications,
-      including but not limited to software source code, documentation
-      source, and configuration files.
-
-      "Object" form shall mean any form resulting from mechanical
-      transformation or translation of a Source form, including but
-      not limited to compiled object code, generated documentation,
-      and conversions to other media types.
-
-      "Work" shall mean the work of authorship, whether in Source or
-      Object form, made available under the License, as indicated by a
-      copyright notice that is included in or attached to the work
-      (an example is provided in the Appendix below).
-
-      "Derivative Works" shall mean any work, whether in Source or Object
-      form, that is based on (or derived from) the Work and for which the
-      editorial revisions, annotations, elaborations, or other modifications
-      represent, as a whole, an original work of authorship. For the purposes
-      of this License, Derivative Works shall not include works that remain
-      separable from, or merely link (or bind by name) to the interfaces of,
-      the Work and Derivative Works thereof.
-
-      "Contribution" shall mean any work of authorship, including
-      the original version of the Work and any modifications or additions
-      to that Work or Derivative Works thereof, that is intentionally
-      submitted to the Licensor for inclusion in the Work by the copyright owner
-      or by an individual or Legal Entity authorized to submit on behalf of
-      the copyright owner. For the purposes of this definition, "submitted"
-      means any form of electronic, verbal, or written communication sent
-      to the Licensor or its representatives, including but not limited to
-      communication on electronic mailing lists, source code control systems,
-      and issue tracking systems that are managed by, or on behalf of, the
-      Licensor for the purpose of discussing and improving the Work, but
-      excluding communication that is conspicuously marked or otherwise
-      designated in writing by the copyright owner as "Not a Contribution."
-
-      "Contributor" shall mean Licensor and any individual or Legal Entity
-      on behalf of whom a Contribution has been received by the Licensor and
-      subsequently incorporated within the Work.
-
-   2. Grant of Copyright License. Subject to the terms and conditions of
-      this License, each Contributor hereby grants to You a perpetual,
-      worldwide, non-exclusive, no-charge, royalty-free, irrevocable
-      copyright license to reproduce, prepare Derivative Works of,
-      publicly display, publicly perform, sublicense, and distribute the
-      Work and such Derivative Works in Source or Object form.
-
-   3. Grant of Patent License. Subject to the terms and conditions of
-      this License, each Contributor hereby grants to You a perpetual,
-      worldwide, non-exclusive, no-charge, royalty-free, irrevocable
-      (except as stated in this section) patent license to make, have made,
-      use, offer to sell, sell, import, and otherwise transfer the Work,
-      where such license applies only to those patent claims licensable
-      by such Contributor that are necessarily infringed by their
-      Contribution(s) alone or by combination of their Contribution(s)
-      with the Work to which such Contribution(s) was submitted. If You
-      institute patent litigation against any entity (including a
-      cross-claim or counterclaim in a lawsuit) alleging that the Work
-      or a Contribution incorporated within the Work constitutes direct
-      or contributory patent infringement, then any patent licenses
-      granted to You under this License for that Work shall terminate
-      as of the date such litigation is filed.
-
-   4. Redistribution. You may reproduce and distribute copies of the
-      Work or Derivative Works thereof in any medium, with or without
-      modifications, and in Source or Object form, provided that You
-      meet the following conditions:
-
-      (a) You must give any other recipients of the Work or
-          Derivative Works a copy of this License; and
-
-      (b) You must cause any modified files to carry prominent notices
-          stating that You changed the files; and
-
-      (c) You must retain, in the Source form of any Derivative Works
-          that You distribute, all copyright, patent, trademark, and
-          attribution notices from the Source form of the Work,
-          excluding those notices that do not pertain to any part of
-          the Derivative Works; and
-
-      (d) If the Work includes a "NOTICE" text file as part of its
-          distribution, then any Derivative Works that You distribute must
-          include a readable copy of the attribution notices contained
-          within such NOTICE file, excluding any notices that do not
-          pertain to any part of the Derivative Works, in at least one
-          of the following places: within a NOTICE text file distributed
-          as part of the Derivative Works; within the Source form or
-          documentation, if provided along with the Derivative Works; or,
-          within a display generated by the Derivative Works, if and
-          wherever such third-party notices normally appear. The contents
-          of the NOTICE file are for informational purposes only and
-          do not modify the License. You may add Your own attribution
-          notices within Derivative Works that You distribute, alongside
-          or as an addendum to the NOTICE text from the Work, provided
-          that such additional attribution notices cannot be construed
-          as modifying the License.
-
-      You may add Your own copyright statement to Your modifications and
-      may provide additional or different license terms and conditions
-      for use, reproduction, or distribution of Your modifications, or
-      for any such Derivative Works as a whole, provided Your use,
-      reproduction, and distribution of the Work otherwise complies with
-      the conditions stated in this License.
-
-   5. Submission of Contributions. Unless You explicitly state otherwise,
-      any Contribution intentionally submitted for inclusion in the Work
-      by You to the Licensor shall be under the terms and conditions of
-      this License, without any additional terms or conditions.
-      Notwithstanding the above, nothing herein shall supersede or modify
-      the terms of any separate license agreement you may have executed
-      with Licensor regarding such Contributions.
-
-   6. Trademarks. This License does not grant permission to use the trade
-      names, trademarks, service marks, or product names of the Licensor,
-      except as required for reasonable and customary use in describing the
-      origin of the Work and reproducing the content of the NOTICE file.
-
-   7. Disclaimer of Warranty. Unless required by applicable law or
-      agreed to in writing, Licensor provides the Work (and each
-      Contributor provides its Contributions) on an "AS IS" BASIS,
-      WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or
-      implied, including, without limitation, any warranties or conditions
-      of TITLE, NON-INFRINGEMENT, MERCHANTABILITY, or FITNESS FOR A
-      PARTICULAR PURPOSE. You are solely responsible for determining the
-      appropriateness of using or redistributing the Work and assume any
-      risks associated with Your exercise of permissions under this License.
-
-   8. Limitation of Liability. In no event and under no legal theory,
-      whether in tort (including negligence), contract, or otherwise,
-      unless required by applicable law (such as deliberate and grossly
-      negligent acts) or agreed to in writing, shall any Contributor be
-      liable to You for damages, including any direct, indirect, special,
-      incidental, or consequential damages of any character arising as a
-      result of this License or out of the use or inability to use the
-      Work (including but not limited to damages for loss of goodwill,
-      work stoppage, computer failure or malfunction, or any and all
-      other commercial damages or losses), even if such Contributor
-      has been advised of the possibility of such damages.
-
-   9. Accepting Warranty or Additional Liability. While redistributing
-      the Work or Derivative Works thereof, You may choose to offer,
-      and charge a fee for, acceptance of support, warranty, indemnity,
-      or other liability obligations and/or rights consistent with this
-      License. However, in accepting such obligations, You may act only
-      on Your own behalf and on Your sole responsibility, not on behalf
-      of any other Contributor, and only if You agree to indemnify,
-      defend, and hold each Contributor harmless for any liability
-      incurred by, or claims asserted against, such Contributor by reason
-      of your accepting any such warranty or additional liability.
-
-   END OF TERMS AND CONDITIONS
-
-   Copyright 2025 Rivet Gaming, Inc.
-
-   Licensed under the Apache License, Version 2.0 (the "License");
-   you may not use this file except in compliance with the License.
-   You may obtain a copy of the License at
-
-       http://www.apache.org/licenses/LICENSE-2.0
-
-   Unless required by applicable law or agreed to in writing, software
-   distributed under the License is distributed on an "AS IS" BASIS,
-   WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
-   See the License for the specific language governing permissions and
-   limitations under the License.

package/dist/bridge-loader.d.ts

@@ -1 +0,0 @@
-export { getRawBridgeCode, getBridgeAttachCode } from "@secure-exec/nodejs/internal/bridge-loader";

package/dist/bridge-loader.js

@@ -1,2 +0,0 @@
-// Re-exported from @secure-exec/nodejs — canonical source is packages/nodejs/src/bridge-loader.ts
-export { getRawBridgeCode, getBridgeAttachCode } from "@secure-exec/nodejs/internal/bridge-loader";

package/dist/bridge-setup.d.ts

@@ -1 +0,0 @@
-export { getInitialBridgeGlobalsSetupCode } from "@secure-exec/core";

package/dist/bridge-setup.js

@@ -1,2 +0,0 @@
-// Re-exported from @secure-exec/core — canonical source is packages/core/src/bridge-setup.ts
-export { getInitialBridgeGlobalsSetupCode } from "@secure-exec/core";

package/dist/esm-compiler.d.ts

@@ -1 +0,0 @@
-export { getStaticBuiltinWrapperSource, createBuiltinESMWrapper, getEmptyBuiltinESMWrapper, } from "@secure-exec/core";

package/dist/esm-compiler.js

@@ -1,2 +0,0 @@
-// Re-exported from @secure-exec/core — canonical source moved to packages/nodejs/src/esm-compiler.ts (US-003)
-export { getStaticBuiltinWrapperSource, createBuiltinESMWrapper, getEmptyBuiltinESMWrapper, } from "@secure-exec/core";

package/dist/fs-helpers.d.ts

@@ -1,2 +0,0 @@
-export type { DirEntry, StatInfo } from "@secure-exec/core";
-export { exists, stat, rename, readDirWithTypes, mkdir } from "@secure-exec/core";

package/dist/fs-helpers.js

@@ -1 +0,0 @@
-export { exists, stat, rename, readDirWithTypes, mkdir } from "@secure-exec/core";

package/dist/module-resolver.d.ts

@@ -1 +0,0 @@
-export { BUILTIN_NAMED_EXPORTS, normalizeBuiltinSpecifier, getPathDir, } from "@secure-exec/core";

package/dist/module-resolver.js

@@ -1,2 +0,0 @@
-// Re-exported from @secure-exec/core — canonical source moved to packages/nodejs/src/builtin-modules.ts (US-003)
-export { BUILTIN_NAMED_EXPORTS, normalizeBuiltinSpecifier, getPathDir, } from "@secure-exec/core";

package/dist/node/bridge-setup.d.ts

@@ -1 +0,0 @@
-export { emitConsoleEvent, stripDangerousEnv, createProcessConfigForExecution, } from "@secure-exec/nodejs";

package/dist/node/bridge-setup.js

@@ -1,2 +0,0 @@
-// Re-exported from @secure-exec/nodejs
-export { emitConsoleEvent, stripDangerousEnv, createProcessConfigForExecution, } from "@secure-exec/nodejs";

package/dist/node/driver.d.ts

@@ -1,2 +0,0 @@
-export { createDefaultNetworkAdapter, createNodeDriver, createNodeRuntimeDriverFactory, NodeFileSystem, NodeExecutionDriver, filterEnv, isPrivateIp, } from "@secure-exec/nodejs";
-export type { NodeDriverOptions, NodeRuntimeDriverFactoryOptions, ModuleAccessOptions, } from "@secure-exec/nodejs";

package/dist/node/driver.js

@@ -1,2 +0,0 @@
-// Re-exported from @secure-exec/nodejs — canonical source is packages/nodejs/src/driver.ts
-export { createDefaultNetworkAdapter, createNodeDriver, createNodeRuntimeDriverFactory, NodeFileSystem, NodeExecutionDriver, filterEnv, isPrivateIp, } from "@secure-exec/nodejs";

package/dist/node/execution-driver.d.ts

@@ -1,2 +0,0 @@
-export { NodeExecutionDriver } from "@secure-exec/nodejs/internal/execution-driver";
-export type { NodeExecutionDriverOptions } from "@secure-exec/nodejs/internal/isolate-bootstrap";

package/dist/node/execution-driver.js

@@ -1,2 +0,0 @@
-// Re-exported from @secure-exec/nodejs
-export { NodeExecutionDriver } from "@secure-exec/nodejs/internal/execution-driver";

package/dist/node/isolate-bootstrap.d.ts

@@ -1,2 +0,0 @@
-export type { NodeExecutionDriverOptions, BudgetState, DriverDeps, } from "@secure-exec/nodejs/internal/isolate-bootstrap";
-export { DEFAULT_BRIDGE_BASE64_TRANSFER_BYTES, DEFAULT_ISOLATE_JSON_PAYLOAD_BYTES, MIN_CONFIGURED_PAYLOAD_BYTES, MAX_CONFIGURED_PAYLOAD_BYTES, PAYLOAD_LIMIT_ERROR_CODE, RESOURCE_BUDGET_ERROR_CODE, DEFAULT_SANDBOX_CWD, DEFAULT_SANDBOX_HOME, DEFAULT_SANDBOX_TMPDIR, PayloadLimitError, normalizePayloadLimit, getUtf8ByteLength, getBase64EncodedByteLength, assertPayloadByteLength, assertTextPayloadSize, createBudgetState, checkBridgeBudget, parseJsonWithLimit, getExecutionTimeoutMs, getTimingMitigation, polyfillCodeCache, polyfillNamedExportsCache, hostBuiltinNamedExportsCache, hostRequire, isValidExportName, getHostBuiltinNamedExports, } from "@secure-exec/nodejs/internal/isolate-bootstrap";

package/dist/node/isolate-bootstrap.js

@@ -1 +0,0 @@
-export { DEFAULT_BRIDGE_BASE64_TRANSFER_BYTES, DEFAULT_ISOLATE_JSON_PAYLOAD_BYTES, MIN_CONFIGURED_PAYLOAD_BYTES, MAX_CONFIGURED_PAYLOAD_BYTES, PAYLOAD_LIMIT_ERROR_CODE, RESOURCE_BUDGET_ERROR_CODE, DEFAULT_SANDBOX_CWD, DEFAULT_SANDBOX_HOME, DEFAULT_SANDBOX_TMPDIR, PayloadLimitError, normalizePayloadLimit, getUtf8ByteLength, getBase64EncodedByteLength, assertPayloadByteLength, assertTextPayloadSize, createBudgetState, checkBridgeBudget, parseJsonWithLimit, getExecutionTimeoutMs, getTimingMitigation, polyfillCodeCache, polyfillNamedExportsCache, hostBuiltinNamedExportsCache, hostRequire, isValidExportName, getHostBuiltinNamedExports, } from "@secure-exec/nodejs/internal/isolate-bootstrap";

package/dist/node/module-access.d.ts

@@ -1,2 +0,0 @@
-export { ModuleAccessFileSystem } from "@secure-exec/nodejs/internal/module-access";
-export type { ModuleAccessOptions } from "@secure-exec/nodejs/internal/module-access";

package/dist/node/module-access.js

@@ -1,2 +0,0 @@
-// Re-exported from @secure-exec/nodejs — canonical source is packages/nodejs/src/module-access.ts
-export { ModuleAccessFileSystem } from "@secure-exec/nodejs/internal/module-access";

package/dist/node/module-resolver.d.ts

@@ -1 +0,0 @@
-export { getNearestPackageType, getModuleFormat, shouldRunAsESM, resolveReferrerDirectory, resolveESMPath, } from "@secure-exec/nodejs/internal/module-resolver";

package/dist/node/module-resolver.js

@@ -1,2 +0,0 @@
-// Re-exported from @secure-exec/nodejs — canonical source is packages/nodejs/src/module-resolver.ts
-export { getNearestPackageType, getModuleFormat, shouldRunAsESM, resolveReferrerDirectory, resolveESMPath, } from "@secure-exec/nodejs/internal/module-resolver";

package/dist/package-bundler.d.ts

@@ -1,2 +0,0 @@
-export type { ResolutionCache } from "@secure-exec/core";
-export { createResolutionCache, resolveModule, loadFile, bundlePackage, } from "@secure-exec/core";

package/dist/package-bundler.js

@@ -1 +0,0 @@
-export { createResolutionCache, resolveModule, loadFile, bundlePackage, } from "@secure-exec/core";

package/dist/polyfills.d.ts

@@ -1 +0,0 @@
-export { bundlePolyfill, getAvailableStdlib, hasPolyfill, prebundleAllPolyfills, } from "@secure-exec/nodejs/internal/polyfills";

package/dist/polyfills.js

@@ -1,2 +0,0 @@
-// Re-exported from @secure-exec/nodejs — canonical source is packages/nodejs/src/polyfills.ts
-export { bundlePolyfill, getAvailableStdlib, hasPolyfill, prebundleAllPolyfills, } from "@secure-exec/nodejs/internal/polyfills";

package/dist/runtime-driver.d.ts

@@ -1 +0,0 @@
-export type { DriverRuntimeConfig, NodeRuntimeDriver, NodeRuntimeDriverFactory, PythonRuntimeDriver, PythonRuntimeDriverFactory, ResourceBudgets, RuntimeDriver, RuntimeDriverFactory, RuntimeDriverOptions, SharedRuntimeDriver, SystemDriver, } from "@secure-exec/core";

package/dist/runtime-driver.js

@@ -1 +0,0 @@
-export {};

package/dist/shared/api-types.d.ts

@@ -1 +0,0 @@
-export type { ExecOptions, ExecResult, ExecutionStatus, OSConfig, ProcessConfig, PythonRunOptions, PythonRunResult, RunResult, StdioChannel, StdioEvent, StdioHook, TimingMitigation, } from "@secure-exec/core";

package/dist/shared/api-types.js

@@ -1 +0,0 @@
-export {};

package/dist/shared/bridge-contract.d.ts

@@ -1,2 +0,0 @@
-export type { BridgeApplyRef, BridgeApplySyncPromiseRef, BridgeApplySyncRef, BridgeGlobalKey, ChildProcessKillBridgeRef, ChildProcessSpawnStartBridgeRef, ChildProcessSpawnSyncBridgeRef, ChildProcessStdinCloseBridgeRef, ChildProcessStdinWriteBridgeRef, CryptoRandomFillBridgeRef, CryptoRandomUuidBridgeRef, DynamicImportBridgeRef, FsChmodBridgeRef, FsChownBridgeRef, FsExistsBridgeRef, FsFacadeBridge, FsLinkBridgeRef, FsLstatBridgeRef, FsMkdirBridgeRef, FsReadDirBridgeRef, FsReadFileBinaryBridgeRef, FsReadFileBridgeRef, FsReadlinkBridgeRef, FsRenameBridgeRef, FsRmdirBridgeRef, FsStatBridgeRef, FsSymlinkBridgeRef, FsTruncateBridgeRef, FsUnlinkBridgeRef, FsUtimesBridgeRef, FsWriteFileBinaryBridgeRef, FsWriteFileBridgeRef, HostBridgeGlobalKey, LoadFileBridgeRef, LoadPolyfillBridgeRef, ModuleCacheBridgeRecord, NetworkDnsLookupRawBridgeRef, NetworkFetchRawBridgeRef, NetworkHttpRequestRawBridgeRef, NetworkHttpServerCloseRawBridgeRef, NetworkHttpServerListenRawBridgeRef, UpgradeSocketWriteRawBridgeRef, UpgradeSocketEndRawBridgeRef, UpgradeSocketDestroyRawBridgeRef, ProcessErrorBridgeRef, ProcessLogBridgeRef, RegisterHandleBridgeFn, RequireFromBridgeFn, ResolveModuleBridgeRef, RuntimeBridgeGlobalKey, ScheduleTimerBridgeRef, UnregisterHandleBridgeFn, ValueOf, } from "@secure-exec/core";
-export { BRIDGE_GLOBAL_KEY_LIST, HOST_BRIDGE_GLOBAL_KEY_LIST, HOST_BRIDGE_GLOBAL_KEYS, RUNTIME_BRIDGE_GLOBAL_KEY_LIST, RUNTIME_BRIDGE_GLOBAL_KEYS, } from "@secure-exec/core";

package/dist/shared/bridge-contract.js

@@ -1 +0,0 @@
-export { BRIDGE_GLOBAL_KEY_LIST, HOST_BRIDGE_GLOBAL_KEY_LIST, HOST_BRIDGE_GLOBAL_KEYS, RUNTIME_BRIDGE_GLOBAL_KEY_LIST, RUNTIME_BRIDGE_GLOBAL_KEYS, } from "@secure-exec/core";

package/dist/shared/console-formatter.d.ts

@@ -1,2 +0,0 @@
-export type { ConsoleSerializationBudget } from "@secure-exec/core";
-export { DEFAULT_CONSOLE_SERIALIZATION_BUDGET, formatConsoleArgs, getConsoleSetupCode, safeStringifyConsoleValue, } from "@secure-exec/core";

package/dist/shared/console-formatter.js

@@ -1 +0,0 @@
-export { DEFAULT_CONSOLE_SERIALIZATION_BUDGET, formatConsoleArgs, getConsoleSetupCode, safeStringifyConsoleValue, } from "@secure-exec/core";

package/dist/shared/errors.d.ts

@@ -1,2 +0,0 @@
-export type { SystemError } from "@secure-exec/core";
-export { createEaccesError, createEnosysError, createSystemError, } from "@secure-exec/core";

package/dist/shared/errors.js

@@ -1 +0,0 @@
-export { createEaccesError, createEnosysError, createSystemError, } from "@secure-exec/core";

package/dist/shared/esm-utils.d.ts

@@ -1 +0,0 @@
-export { extractCjsNamedExports, extractDynamicImportSpecifiers, isESM, transformDynamicImport, wrapCJSForESM, wrapCJSForESMWithModulePath, } from "@secure-exec/core";

package/dist/shared/esm-utils.js

@@ -1,2 +0,0 @@
-// Re-exported from @secure-exec/core
-export { extractCjsNamedExports, extractDynamicImportSpecifiers, isESM, transformDynamicImport, wrapCJSForESM, wrapCJSForESMWithModulePath, } from "@secure-exec/core";

package/dist/shared/global-exposure.d.ts

@@ -1,2 +0,0 @@
-export type { CustomGlobalClassification, CustomGlobalInventoryEntry, } from "@secure-exec/core";
-export { exposeCustomGlobal, exposeGlobalBinding, exposeMutableRuntimeStateGlobal, HARDENED_NODE_CUSTOM_GLOBALS, ISOLATE_GLOBAL_EXPOSURE_HELPER_SOURCE, MUTABLE_NODE_CUSTOM_GLOBALS, NODE_CUSTOM_GLOBAL_INVENTORY, } from "@secure-exec/core";

package/dist/shared/global-exposure.js

@@ -1 +0,0 @@
-export { exposeCustomGlobal, exposeGlobalBinding, exposeMutableRuntimeStateGlobal, HARDENED_NODE_CUSTOM_GLOBALS, ISOLATE_GLOBAL_EXPOSURE_HELPER_SOURCE, MUTABLE_NODE_CUSTOM_GLOBALS, NODE_CUSTOM_GLOBAL_INVENTORY, } from "@secure-exec/core";

package/dist/shared/in-memory-fs.d.ts

@@ -1 +0,0 @@
-export { createInMemoryFileSystem } from "@secure-exec/core";

package/dist/shared/in-memory-fs.js

@@ -1,2 +0,0 @@
-// Re-exported from @secure-exec/core
-export { createInMemoryFileSystem } from "@secure-exec/core";

package/dist/shared/permissions.d.ts

@@ -1 +0,0 @@
-export { allowAll, allowAllChildProcess, allowAllEnv, allowAllFs, allowAllNetwork, createCommandExecutorStub, createFsStub, createNetworkStub, envAccessAllowed, filterEnv, wrapCommandExecutor, wrapFileSystem, wrapNetworkAdapter, } from "@secure-exec/core";

package/dist/shared/permissions.js

@@ -1,2 +0,0 @@
-// Re-exported from @secure-exec/core
-export { allowAll, allowAllChildProcess, allowAllEnv, allowAllFs, allowAllNetwork, createCommandExecutorStub, createFsStub, createNetworkStub, envAccessAllowed, filterEnv, wrapCommandExecutor, wrapFileSystem, wrapNetworkAdapter, } from "@secure-exec/core";

package/dist/shared/require-setup.d.ts

@@ -1 +0,0 @@
-export { getRequireSetupCode } from "@secure-exec/core";

package/dist/shared/require-setup.js

@@ -1,2 +0,0 @@
-// Re-exported from @secure-exec/core
-export { getRequireSetupCode } from "@secure-exec/core";

package/dist/types.d.ts

@@ -1,3 +0,0 @@
-export type { ChildProcessAccessRequest, EnvAccessRequest, FsAccessRequest, NetworkAccessRequest, PermissionCheck, PermissionDecision, Permissions, VirtualDirEntry, VirtualFileSystem, VirtualStat, } from "@secure-exec/core";
-export type { CommandExecutor, NetworkAdapter, NetworkServerAddress, NetworkServerListenOptions, NetworkServerRequest, NetworkServerResponse, SpawnedProcess, } from "@secure-exec/core";
-export type { DriverRuntimeConfig, NodeRuntimeDriver, NodeRuntimeDriverFactory, PythonRuntimeDriver, PythonRuntimeDriverFactory, RuntimeDriver, RuntimeDriverFactory, RuntimeDriverOptions, SharedRuntimeDriver, SystemDriver, } from "@secure-exec/core";

package/dist/types.js

@@ -1 +0,0 @@
-export {};