secure-exec 0.2.1 → 0.2.21

package/README.md

@@ -1,7 +1,165 @@
-# Secure Exec
+<p align="center">
+  <img src="https://raw.githubusercontent.com/rivet-dev/agentos/main/.github/media/secure-exec-logo.png" alt="Secure Exec" height="160" />
+</p>
 
-Secure Node.js execution without a sandbox. V8 isolate-based code execution with full Node.js and npm compatibility.
+<p align="center">
+  Secure Node.js execution without a sandbox.<br/>Run untrusted JavaScript and TypeScript in an isolated VM with real Node.js APIs, npm packages, and a virtual filesystem.
+</p>
 
-- [Website](https://secureexec.dev)
-- [Documentation](https://secureexec.dev/docs)
-- [GitHub](https://github.com/rivet-dev/secure-exec)
+<p align="center">
+  <a href="https://rivet.dev/secure-exec/docs/quickstart">Quickstart</a> | <a href="https://rivet.dev/secure-exec/docs">Documentation</a> | <a href="https://rivet.dev/discord">Discord</a>
+</p>
+
+## Install
+
+```bash
+npm install secure-exec
+```
+
+Requires Node.js 22+ on Linux or macOS.
+
+## Run Code
+
+Each call runs in a fresh VM that is disposed when the call finishes. Nothing is
+shared between calls.
+
+```ts
+import { evaluate, execute } from "secure-exec";
+
+const sum = await evaluate<number>("1 + 2");
+if (sum.outcome === "succeeded") console.log(sum.value); // 3
+
+const run = await execute(`console.log("hello")`, {
+  output: { capture: "all" },
+  timeoutMs: 5_000,
+});
+console.log(run.stdout); // hello
+```
+
+`evaluate` takes one expression and returns its JSON value; wrap several
+statements in a function. `execute` runs a whole module for its side effects.
+
+`outcome` is `succeeded`, `failed`, `cancelled`, or `timed_out`. Every outcome
+other than `succeeded` carries an `error`, and guest stack traces arrive on
+`stderr` when you capture it.
+
+## Configure the VM
+
+VM options go on the call: `permissions`, `limits`, `mounts`, and the rest of
+the agentOS VM options. External network access is denied unless you allow it,
+and a policy is merged over the defaults.
+
+```ts
+await evaluate(
+  `(async () => {
+    const response = await fetch("https://example.com");
+    await response.text();
+    return response.status;
+  })()`,
+  { permissions: { network: "allow" } },
+);
+```
+
+## Keep things with a VM
+
+The functions above are one-shot conveniences. When files, installed packages,
+or a running server should outlast one call, create a VM. It is an agentOS VM
+with Secure Exec's defaults.
+
+```ts
+import { createVm } from "secure-exec";
+
+const vm = await createVm({ permissions: { network: "allow" } });
+try {
+  await vm.npm.install(["zod"]);
+  await vm.filesystem.writeFile("/workspace/data.json", JSON.stringify({ n: 40 }));
+
+  const result = await vm.javascript.evaluate<number>(
+    `import("node:fs").then((fs) => JSON.parse(fs.readFileSync("/workspace/data.json", "utf8")).n + 2)`,
+  );
+
+  const server = await vm.javascript.spawn(`/* long-running code */`);
+  await vm.process.kill(server.pid);
+} finally {
+  await vm.dispose();
+}
+```
+
+`vm.javascript`, `vm.typescript`, `vm.npm`, `vm.filesystem`, `vm.network`, and
+`vm.process` behave exactly as they do in agentOS.
+
+## Keep variables with a context
+
+Each call on a VM starts with fresh JavaScript memory. A context keeps it, like a
+REPL, and several contexts run in parallel in one VM.
+
+```ts
+const context = await vm.createContext();
+
+await context.execute("globalThis.total = 40");
+const result = await context.evaluate<number>("total + 2");
+
+await context.reset();   // clear state
+await context.dispose(); // delete the context, keep the VM
+```
+
+## Host functions
+
+Give the code your own functions without giving it your credentials. Each
+collection is a global inside the VM, and each function is async.
+
+```ts
+import { evaluate, hostFunction, hostFunctions } from "secure-exec";
+import { z } from "zod";
+
+const orders = hostFunctions({
+  name: "orders",
+  description: "Look up customer orders.",
+  functions: {
+    list: hostFunction({
+      description: "List a customer's orders.",
+      inputSchema: z.object({ customer: z.string() }),
+      execute: ({ customer }) => db.orders.findMany({ customer }),
+    }),
+  },
+});
+
+await evaluate(`orders.list({ customer: "c_123" }).then((rows) => rows.length)`, {
+  hostFunctions: [orders],
+});
+```
+
+## TypeScript
+
+`secure-exec/typescript` has the same `execute` and `evaluate`, plus `check`.
+Running TypeScript strips types without checking them, so check first when it
+matters.
+
+```ts
+import { check, evaluate } from "secure-exec/typescript";
+
+const checked = await check(`const total: number = "nope";`);
+for (const diagnostic of checked.diagnostics) console.log(diagnostic.message);
+```
+
+## Lifecycle
+
+The first call starts a shared sidecar process. Call `init()` at startup to pay
+that cost ahead of time, and `shutdown()` to stop it, for example in a test
+teardown hook.
+
+```ts
+import { init, shutdown } from "secure-exec";
+
+await init();
+// ...
+await shutdown();
+```
+
+## More
+
+Need Python? Use the [agentOS Python execution API](https://rivet.dev/agentos/docs/python), which has the same `execute` and `evaluate` shape.
+
+For processes, filesystem access, and agent sessions, use
+[`@rivet-dev/agentos-core`](https://rivet.dev/agentos) directly. Read the [documentation](https://rivet.dev/secure-exec/docs), or browse the examples in
+[`secure-exec/examples`](https://github.com/rivet-dev/agentos/tree/main/secure-exec/examples).

package/dist/context.d.ts

@@ -0,0 +1,17 @@
+import type { AgentOs, CodeEvaluationResult, CodeExecutionResult, JavaScriptEvaluationOptions, JavaScriptExecutionOptions, JsonValue } from "@rivet-dev/agentos-core";
+/**
+ * Retained JavaScript state in a VM: variables and imports survive between
+ * calls. A context runs one call at a time. For TypeScript in the same state,
+ * pass `contextId` to `vm.typescript`.
+ */
+export interface Context extends AsyncDisposable {
+    readonly contextId: string;
+    execute(source: string, options?: Omit<JavaScriptExecutionOptions, "contextId">): Promise<CodeExecutionResult>;
+    evaluate<T = JsonValue>(source: string, options?: Omit<JavaScriptEvaluationOptions, "contextId">): Promise<CodeEvaluationResult<T>>;
+    /** Clear the retained state and keep the context. */
+    reset(): Promise<void>;
+    /** Delete the context. The VM is left running. */
+    dispose(): Promise<void>;
+}
+/** Create a context in `vm`. A VM can hold many, and they run in parallel. */
+export declare function createContext(vm: AgentOs): Promise<Context>;

package/dist/context.js

@@ -0,0 +1,15 @@
+import { randomUUID } from "node:crypto";
+/** Create a context in `vm`. A VM can hold many, and they run in parallel. */
+export async function createContext(vm) {
+    const contextId = randomUUID();
+    await vm.createContext(contextId);
+    const dispose = () => vm.contexts.delete(contextId);
+    return {
+        contextId,
+        execute: (source, options) => vm.javascript.execute(source, { ...options, contextId }),
+        evaluate: (source, options) => vm.javascript.evaluate(source, { ...options, contextId }),
+        reset: () => vm.contexts.reset(contextId),
+        dispose,
+        [Symbol.asyncDispose]: dispose,
+    };
+}

package/dist/index.d.ts

@@ -1,14 +1,15 @@
-export { NodeRuntime } from "./runtime.js";
-export type { NodeRuntimeOptions } from "./runtime.js";
-export type { ResourceBudgets } from "./runtime-driver.js";
-export type { NodeRuntimeDriver, NodeRuntimeDriverFactory, NetworkAdapter, Permissions, VirtualFileSystem, } from "./types.js";
-export type { DirEntry, StatInfo } from "./fs-helpers.js";
-export type { StdioChannel, StdioEvent, StdioHook, ExecOptions, ExecResult, OSConfig, ProcessConfig, RunResult, TimingMitigation, } from "./shared/api-types.js";
-export { createDefaultNetworkAdapter, createNodeDriver, createNodeHostCommandExecutor, createNodeRuntimeDriverFactory, NodeExecutionDriver, NodeFileSystem, } from "@secure-exec/nodejs";
-export type { DefaultNetworkAdapterOptions, ModuleAccessOptions, NodeRuntimeDriverFactoryOptions, } from "@secure-exec/nodejs";
-export { createKernel } from "@secure-exec/core";
-export type { Kernel, KernelInterface } from "@secure-exec/core";
-export { createNodeRuntime } from "@secure-exec/nodejs";
-export type { BindingTree, BindingFunction } from "@secure-exec/nodejs";
-export { createInMemoryFileSystem } from "./shared/in-memory-fs.js";
-export { allowAll, allowAllChildProcess, allowAllEnv, allowAllFs, allowAllNetwork, } from "./shared/permissions.js";
+import type { CodeEvaluationResult, CodeExecutionResult, HostFunctionSchemas, JavaScriptEvaluationOptions, JavaScriptExecutionOptions, JsonValue, LanguageExecutionOptions } from "@rivet-dev/agentos-core";
+import { type OneShot } from "./runtime.js";
+export type { CodeEvaluationResult, CodeExecutionResult, ExecutionErrorData, ExecutionOutputOptions, HostFunction, HostFunctionCollection, HostFunctionCollections, HttpRequest, HttpResponse, JsonValue, LimitWarning, MountConfig, OutputCapture, Permissions, ProcessDescriptor, ProcessExit, SidecarRejectionDetail, } from "@rivet-dev/agentos-core";
+export { createHostDirBackend, hostDirMount, KernelError, nodeModulesMount, SidecarProcessError, SidecarProcessExited, SidecarRejectedError, SidecarSilenceTimeout, } from "@rivet-dev/agentos-core";
+export type { Context } from "./context.js";
+export { createVm, init, shutdown, type Vm, type VmOptions, } from "./runtime.js";
+export type ExecuteOptions<HOST_FUNCTIONS extends HostFunctionSchemas = HostFunctionSchemas> = OneShot<JavaScriptExecutionOptions, HOST_FUNCTIONS>;
+export type EvaluateOptions<HOST_FUNCTIONS extends HostFunctionSchemas = HostFunctionSchemas> = OneShot<JavaScriptEvaluationOptions, HOST_FUNCTIONS>;
+export type ExecuteFileOptions<HOST_FUNCTIONS extends HostFunctionSchemas = HostFunctionSchemas> = OneShot<LanguageExecutionOptions, HOST_FUNCTIONS>;
+/** Run JavaScript for its side effects and captured output. */
+export declare function execute<HOST_FUNCTIONS extends HostFunctionSchemas = HostFunctionSchemas>(source: string, options?: ExecuteOptions<HOST_FUNCTIONS>): Promise<CodeExecutionResult>;
+/** Evaluate one JavaScript expression and return its JSON value. */
+export declare function evaluate<T = JsonValue, HOST_FUNCTIONS extends HostFunctionSchemas = HostFunctionSchemas>(source: string, options?: EvaluateOptions<HOST_FUNCTIONS>): Promise<CodeEvaluationResult<T>>;
+/** Run a JavaScript file from a mount, by its path inside the VM. */
+export declare function executeFile<HOST_FUNCTIONS extends HostFunctionSchemas = HostFunctionSchemas>(path: string, options?: ExecuteFileOptions<HOST_FUNCTIONS>): Promise<CodeExecutionResult>;

package/dist/index.js

@@ -1,10 +1,15 @@
-// Re-export core runtime surface.
-export { NodeRuntime } from "./runtime.js";
-// Re-export Node driver factories.
-export { createDefaultNetworkAdapter, createNodeDriver, createNodeHostCommandExecutor, createNodeRuntimeDriverFactory, NodeExecutionDriver, NodeFileSystem, } from "@secure-exec/nodejs";
-// Re-export kernel API.
-export { createKernel } from "@secure-exec/core";
-// Re-export kernel Node runtime factory.
-export { createNodeRuntime } from "@secure-exec/nodejs";
-export { createInMemoryFileSystem } from "./shared/in-memory-fs.js";
-export { allowAll, allowAllChildProcess, allowAllEnv, allowAllFs, allowAllNetwork, } from "./shared/permissions.js";
+import { run } from "./runtime.js";
+export { createHostDirBackend, hostDirMount, KernelError, nodeModulesMount, SidecarProcessError, SidecarProcessExited, SidecarRejectedError, SidecarSilenceTimeout, } from "@rivet-dev/agentos-core";
+export { createVm, init, shutdown, } from "./runtime.js";
+/** Run JavaScript for its side effects and captured output. */
+export function execute(source, options) {
+    return run(options, (vm, operationOptions) => vm.javascript.execute(source, operationOptions));
+}
+/** Evaluate one JavaScript expression and return its JSON value. */
+export function evaluate(source, options) {
+    return run(options, (vm, operationOptions) => vm.javascript.evaluate(source, operationOptions));
+}
+/** Run a JavaScript file from a mount, by its path inside the VM. */
+export function executeFile(path, options) {
+    return run(options, (vm, operationOptions) => vm.javascript.executeFile(path, operationOptions));
+}

package/dist/runtime.d.ts

@@ -1,31 +1,39 @@
-import type { NetworkAdapter, NodeRuntimeDriverFactory, SystemDriver } from "@secure-exec/core";
-import type { StdioHook, ExecOptions, ExecResult, RunResult, TimingMitigation } from "@secure-exec/core";
-import type { ResourceBudgets } from "@secure-exec/core";
-export interface NodeRuntimeOptions {
-    systemDriver: SystemDriver;
-    runtimeDriverFactory: NodeRuntimeDriverFactory;
-    memoryLimit?: number;
-    cpuTimeLimitMs?: number;
-    timingMitigation?: TimingMitigation;
-    onStdio?: StdioHook;
-    payloadLimits?: {
-        base64TransferBytes?: number;
-        jsonPayloadBytes?: number;
-    };
-    resourceBudgets?: ResourceBudgets;
-}
-export declare class NodeRuntime {
-    private readonly runtimeDriver;
-    constructor(options: NodeRuntimeOptions);
-    get network(): Pick<NetworkAdapter, "fetch" | "dnsLookup" | "httpRequest">;
-    get __unsafeIsoalte(): unknown;
-    __unsafeCreateContext(options?: {
-        env?: Record<string, string>;
-        cwd?: string;
-        filePath?: string;
-    }): Promise<unknown>;
-    run<T = unknown>(code: string, filePath?: string): Promise<RunResult<T>>;
-    exec(code: string, options?: ExecOptions): Promise<ExecResult>;
-    dispose(): void;
-    terminate(): Promise<void>;
+import { AgentOs, type AgentOsOptions, type HostFunctionSchemas } from "@rivet-dev/agentos-core";
+import { type Context } from "./context.js";
+/**
+ * Options for the VM that runs the code: permissions, limits, mounts, and so on.
+ *
+ * The type parameter exists only so each host function's `execute` infers its
+ * input from its own `inputSchema`; callers never write it.
+ */
+export type VmOptions<HOST_FUNCTIONS extends HostFunctionSchemas = HostFunctionSchemas> = AgentOsOptions<HOST_FUNCTIONS>;
+/**
+ * A VM that lives until you dispose it. Files, installed packages, and
+ * background processes persist across the calls you make on it. Every namespace
+ * is the agentOS one, unchanged, so the agentOS docs describe its behavior.
+ */
+export interface Vm extends AsyncDisposable {
+    readonly javascript: Omit<AgentOs["javascript"], "npm">;
+    readonly typescript: AgentOs["typescript"];
+    readonly npm: AgentOs["javascript"]["npm"];
+    readonly filesystem: AgentOs["filesystem"];
+    readonly network: AgentOs["network"];
+    readonly process: AgentOs["process"];
+    /** Create a context: JavaScript state that survives between calls. */
+    createContext(): Promise<Context>;
+    /** Dispose the VM and everything in it. */
+    dispose(): Promise<void>;
 }
+export declare function createVm<HOST_FUNCTIONS extends HostFunctionSchemas>(options?: VmOptions<HOST_FUNCTIONS>): Promise<Vm>;
+/** Options for a one-shot call: the operation's own options plus VM options. */
+export type OneShot<O, HOST_FUNCTIONS extends HostFunctionSchemas = HostFunctionSchemas> = Omit<O, "contextId"> & VmOptions<HOST_FUNCTIONS>;
+/** Start the shared sidecar process now so the first operation does not pay for it. */
+export declare function init(): Promise<void>;
+/**
+ * Stop the shared sidecar process and every VM still running in it. Call it when
+ * your process should exit while work may be in flight, such as at the end of a
+ * test run. The next call starts a new sidecar.
+ */
+export declare function shutdown(): Promise<void>;
+/** Run `operation` in a fresh VM built from the VM options, then dispose it. */
+export declare function run<O extends object, R, HOST_FUNCTIONS extends HostFunctionSchemas = HostFunctionSchemas>(options: (O & VmOptions<HOST_FUNCTIONS>) | undefined, operation: (vm: Vm, options: O) => Promise<R>): Promise<R>;

package/dist/runtime.js

@@ -1,77 +1,84 @@
-import { createNetworkStub, filterEnv } from "@secure-exec/core";
-import { createSandboxCommandExecutor } from "@secure-exec/nodejs";
-const DEFAULT_SANDBOX_CWD = "/root";
-const DEFAULT_SANDBOX_HOME = "/root";
-const DEFAULT_SANDBOX_TMPDIR = "/tmp";
-export class NodeRuntime {
-    runtimeDriver;
-    constructor(options) {
-        const { runtimeDriverFactory } = options;
-        // Auto-inject sandbox command executor when none is configured
-        const systemDriver = options.systemDriver.commandExecutor
-            ? options.systemDriver
-            : {
-                ...options.systemDriver,
-                commandExecutor: createSandboxCommandExecutor(runtimeDriverFactory, options.systemDriver),
-            };
-        const processConfig = {
-            ...(systemDriver.runtime.process ?? {}),
-        };
-        processConfig.cwd ??= DEFAULT_SANDBOX_CWD;
-        processConfig.env = filterEnv(processConfig.env, systemDriver.permissions);
-        const osConfig = {
-            ...(systemDriver.runtime.os ?? {}),
-        };
-        osConfig.homedir ??= DEFAULT_SANDBOX_HOME;
-        osConfig.tmpdir ??= DEFAULT_SANDBOX_TMPDIR;
-        this.runtimeDriver = runtimeDriverFactory.createRuntimeDriver({
-            system: systemDriver,
-            runtime: {
-                process: processConfig,
-                os: osConfig,
-            },
-            memoryLimit: options.memoryLimit,
-            cpuTimeLimitMs: options.cpuTimeLimitMs,
-            timingMitigation: options.timingMitigation,
-            onStdio: options.onStdio,
-            payloadLimits: options.payloadLimits,
-            resourceBudgets: options.resourceBudgets,
-        });
-    }
-    get network() {
-        const adapter = this.runtimeDriver.network ?? createNetworkStub();
-        return {
-            fetch: (url, options) => adapter.fetch(url, options),
-            dnsLookup: (hostname) => adapter.dnsLookup(hostname),
-            httpRequest: (url, options) => adapter.httpRequest(url, options),
-        };
-    }
-    get __unsafeIsoalte() {
-        if (this.runtimeDriver.unsafeIsolate === undefined) {
-            throw new Error("Driver runtime does not expose unsafe isolate access");
-        }
-        return this.runtimeDriver.unsafeIsolate;
-    }
-    async __unsafeCreateContext(options = {}) {
-        if (!this.runtimeDriver.createUnsafeContext) {
-            throw new Error("Driver runtime does not expose unsafe context creation");
-        }
-        return this.runtimeDriver.createUnsafeContext(options);
+import { AgentOs, } from "@rivet-dev/agentos-core";
+import { createContext } from "./context.js";
+// Keep in sync with `AgentOsOptions`. The record type makes a missing or
+// unknown key a compile error.
+const VM_OPTION_KEYS = Object.keys({
+    user: true,
+    software: true,
+    defaultSoftware: true,
+    loopbackExemptPorts: true,
+    allowedNodeBuiltins: true,
+    highResolutionTime: true,
+    database: true,
+    rootFilesystem: true,
+    mounts: true,
+    sandbox: true,
+    scheduleDriver: true,
+    hostFunctions: true,
+    permissions: true,
+    sidecar: true,
+    limits: true,
+    onAgentStderr: true,
+    onAgentExit: true,
+    onLimitWarning: true,
+});
+export async function createVm(options = {}) {
+    const vm = await AgentOs.create(options);
+    const { npm, ...javascript } = vm.javascript;
+    const dispose = () => vm.dispose();
+    return {
+        javascript,
+        typescript: vm.typescript,
+        npm,
+        filesystem: vm.filesystem,
+        network: vm.network,
+        process: vm.process,
+        createContext: () => createContext(vm),
+        dispose,
+        [Symbol.asyncDispose]: dispose,
+    };
+}
+/** Start the shared sidecar process now so the first operation does not pay for it. */
+export async function init() {
+    // A bare VM is enough to start the sidecar; skip projecting default software.
+    const vm = await createVm({ defaultSoftware: false });
+    await vm.dispose();
+}
+/**
+ * Stop the shared sidecar process and every VM still running in it. Call it when
+ * your process should exit while work may be in flight, such as at the end of a
+ * test run. The next call starts a new sidecar.
+ */
+export async function shutdown() {
+    const sidecar = await AgentOs.getSharedSidecar();
+    await sidecar.dispose();
+}
+/** Run `operation` in a fresh VM built from the VM options, then dispose it. */
+export async function run(options, operation) {
+    const vmOptions = {};
+    const operationOptions = {};
+    for (const [key, value] of Object.entries(options ?? {})) {
+        const isVmOption = VM_OPTION_KEYS.includes(key);
+        (isVmOption ? vmOptions : operationOptions)[key] = value;
     }
-    async run(code, filePath) {
-        return this.runtimeDriver.run(code, filePath);
+    const vm = await createVm(vmOptions);
+    let result;
+    try {
+        result = await operation(vm, operationOptions);
     }
-    async exec(code, options) {
-        return this.runtimeDriver.exec(code, options);
+    catch (error) {
+        throw await disposeAfterFailure(vm, error);
     }
-    dispose() {
-        this.runtimeDriver.dispose();
+    await vm.dispose();
+    return result;
+}
+/** Dispose `vm` and return the error to throw, keeping both if disposal also fails. */
+async function disposeAfterFailure(vm, error) {
+    try {
+        await vm.dispose();
+        return error;
     }
-    async terminate() {
-        if (this.runtimeDriver.terminate) {
-            await this.runtimeDriver.terminate();
-            return;
-        }
-        this.runtimeDriver.dispose();
+    catch (disposeError) {
+        return new AggregateError([error, disposeError], "secure-exec operation and VM cleanup failed");
     }
 }

package/dist/typescript.d.ts

@@ -0,0 +1,15 @@
+import type { CodeEvaluationResult, CodeExecutionResult, HostFunctionSchemas, JsonValue, TypeScriptCheckOptions, TypeScriptCheckResult, TypeScriptEvaluationOptions, TypeScriptExecutionOptions, TypeScriptFileExecutionOptions } from "@rivet-dev/agentos-core";
+import { type OneShot } from "./runtime.js";
+export type { TypeScriptCheckResult, TypeScriptDiagnostic, } from "@rivet-dev/agentos-core";
+export type ExecuteOptions<HOST_FUNCTIONS extends HostFunctionSchemas = HostFunctionSchemas> = OneShot<TypeScriptExecutionOptions, HOST_FUNCTIONS>;
+export type EvaluateOptions<HOST_FUNCTIONS extends HostFunctionSchemas = HostFunctionSchemas> = OneShot<TypeScriptEvaluationOptions, HOST_FUNCTIONS>;
+export type ExecuteFileOptions<HOST_FUNCTIONS extends HostFunctionSchemas = HostFunctionSchemas> = OneShot<TypeScriptFileExecutionOptions, HOST_FUNCTIONS>;
+export type CheckOptions<HOST_FUNCTIONS extends HostFunctionSchemas = HostFunctionSchemas> = OneShot<TypeScriptCheckOptions, HOST_FUNCTIONS>;
+/** Run TypeScript for its side effects and captured output. Types are stripped, not checked. */
+export declare function execute<HOST_FUNCTIONS extends HostFunctionSchemas = HostFunctionSchemas>(source: string, options?: ExecuteOptions<HOST_FUNCTIONS>): Promise<CodeExecutionResult>;
+/** Evaluate one TypeScript expression and return its JSON value. Types are stripped, not checked. */
+export declare function evaluate<T = JsonValue, HOST_FUNCTIONS extends HostFunctionSchemas = HostFunctionSchemas>(source: string, options?: EvaluateOptions<HOST_FUNCTIONS>): Promise<CodeEvaluationResult<T>>;
+/** Run a TypeScript file from a mount, by its path inside the VM. Types are stripped, not checked. */
+export declare function executeFile<HOST_FUNCTIONS extends HostFunctionSchemas = HostFunctionSchemas>(path: string, options?: ExecuteFileOptions<HOST_FUNCTIONS>): Promise<CodeExecutionResult>;
+/** Type-check TypeScript without running it. */
+export declare function check<HOST_FUNCTIONS extends HostFunctionSchemas = HostFunctionSchemas>(source: string, options?: CheckOptions<HOST_FUNCTIONS>): Promise<TypeScriptCheckResult>;

package/dist/typescript.js

@@ -0,0 +1,17 @@
+import { run } from "./runtime.js";
+/** Run TypeScript for its side effects and captured output. Types are stripped, not checked. */
+export function execute(source, options) {
+    return run(options, (vm, operationOptions) => vm.typescript.execute(source, operationOptions));
+}
+/** Evaluate one TypeScript expression and return its JSON value. Types are stripped, not checked. */
+export function evaluate(source, options) {
+    return run(options, (vm, operationOptions) => vm.typescript.evaluate(source, operationOptions));
+}
+/** Run a TypeScript file from a mount, by its path inside the VM. Types are stripped, not checked. */
+export function executeFile(path, options) {
+    return run(options, (vm, operationOptions) => vm.typescript.executeFile(path, operationOptions));
+}
+/** Type-check TypeScript without running it. */
+export function check(source, options) {
+    return run(options, (vm, operationOptions) => vm.typescript.check(source, operationOptions));
+}

package/package.json

@@ -1,55 +1,52 @@
 {
-  "name": "secure-exec",
-  "version": "0.2.1",
-  "type": "module",
-  "license": "Apache-2.0",
-  "main": "./dist/index.js",
-  "types": "./dist/index.d.ts",
-  "files": [
-    "dist",
-    "README.md"
-  ],
-  "repository": {
-    "type": "git",
-    "url": "https://github.com/rivet-dev/secure-exec.git",
-    "directory": "packages/secure-exec"
-  },
-  "exports": {
-    ".": {
-      "types": "./dist/index.d.ts",
-      "import": "./dist/index.js",
-      "default": "./dist/index.js"
-    }
-  },
-  "dependencies": {
-    "@secure-exec/core": "0.2.1",
-    "@secure-exec/nodejs": "0.2.1"
-  },
-  "devDependencies": {
-    "@mariozechner/pi-coding-agent": "^0.60.0",
-    "@opencode-ai/sdk": "^1.2.27",
-    "@types/node": "^22.10.2",
-    "@vitest/browser": "^2.1.8",
-    "@xterm/headless": "^6.0.0",
-    "minimatch": "^10.2.4",
-    "node-pty": "^1.1.0",
-    "opencode-ai": "1.3.3",
-    "playwright": "^1.52.0",
-    "tsx": "^4.19.2",
-    "typescript": "^5.7.2",
-    "vitest": "^2.1.8",
-    "@secure-exec/v8": "0.2.1"
-  },
-  "scripts": {
-    "check-types": "tsc --noEmit",
-    "check-types:test": "vitest --typecheck --run tests/types/",
-    "build": "tsc",
-    "test:test-suite": "vitest run tests/test-suite/node.test.ts",
-    "test:runtime-driver": "vitest run tests/runtime-driver/node/",
-    "test:integration:node": "pnpm run test:test-suite && pnpm run test:runtime-driver",
-    "test:project-matrix": "vitest run tests/project-matrix.test.ts",
-    "test:e2e-docker": "vitest run tests/e2e-docker.test.ts",
-    "test": "vitest run",
-    "test:watch": "vitest"
-  }
-}
+	"name": "secure-exec",
+	"version": "0.2.21",
+	"description": "Secure Node.js execution for AI agents: run untrusted JavaScript and TypeScript in an isolated VM.",
+	"license": "Apache-2.0",
+	"type": "module",
+	"sideEffects": false,
+	"main": "./dist/index.js",
+	"types": "./dist/index.d.ts",
+	"exports": {
+		".": {
+			"types": "./dist/index.d.ts",
+			"import": "./dist/index.js",
+			"default": "./dist/index.js"
+		},
+		"./typescript": {
+			"types": "./dist/typescript.d.ts",
+			"import": "./dist/typescript.js",
+			"default": "./dist/typescript.js"
+		}
+	},
+	"files": [
+		"dist",
+		"README.md"
+	],
+	"homepage": "https://rivet.dev/secure-exec",
+	"engines": {
+		"node": ">=22.0.0"
+	},
+	"publishConfig": {
+		"access": "public"
+	},
+	"scripts": {
+		"build": "tsc",
+		"check-types": "tsc --noEmit",
+		"test": "vitest run"
+	},
+	"dependencies": {
+		"@rivet-dev/agentos-core": "0.2.21"
+	},
+	"devDependencies": {
+		"@types/node": "^22.10.2",
+		"typescript": "^5.7.2",
+		"vitest": "^2.1.8",
+		"zod": "^4.1.11"
+	},
+	"repository": {
+		"type": "git",
+		"url": "https://github.com/rivet-dev/agentos.git",
+		"directory": "secure-exec"
+	}
+}

package/LICENSE

@@ -1,191 +0,0 @@
-
-                                 Apache License
-                           Version 2.0, January 2004
-                        http://www.apache.org/licenses/
-
-   TERMS AND CONDITIONS FOR USE, REPRODUCTION, AND DISTRIBUTION
-
-   1. Definitions.
-
-      "License" shall mean the terms and conditions for use, reproduction,
-      and distribution as defined by Sections 1 through 9 of this document.
-
-      "Licensor" shall mean the copyright owner or entity authorized by
-      the copyright owner that is granting the License.
-
-      "Legal Entity" shall mean the union of the acting entity and all
-      other entities that control, are controlled by, or are under common
-      control with that entity. For the purposes of this definition,
-      "control" means (i) the power, direct or indirect, to cause the
-      direction or management of such entity, whether by contract or
-      otherwise, or (ii) ownership of fifty percent (50%) or more of the
-      outstanding shares, or (iii) beneficial ownership of such entity.
-
-      "You" (or "Your") shall mean an individual or Legal Entity
-      exercising permissions granted by this License.
-
-      "Source" form shall mean the preferred form for making modifications,
-      including but not limited to software source code, documentation
-      source, and configuration files.
-
-      "Object" form shall mean any form resulting from mechanical
-      transformation or translation of a Source form, including but
-      not limited to compiled object code, generated documentation,
-      and conversions to other media types.
-
-      "Work" shall mean the work of authorship, whether in Source or
-      Object form, made available under the License, as indicated by a
-      copyright notice that is included in or attached to the work
-      (an example is provided in the Appendix below).
-
-      "Derivative Works" shall mean any work, whether in Source or Object
-      form, that is based on (or derived from) the Work and for which the
-      editorial revisions, annotations, elaborations, or other modifications
-      represent, as a whole, an original work of authorship. For the purposes
-      of this License, Derivative Works shall not include works that remain
-      separable from, or merely link (or bind by name) to the interfaces of,
-      the Work and Derivative Works thereof.
-
-      "Contribution" shall mean any work of authorship, including
-      the original version of the Work and any modifications or additions
-      to that Work or Derivative Works thereof, that is intentionally
-      submitted to the Licensor for inclusion in the Work by the copyright owner
-      or by an individual or Legal Entity authorized to submit on behalf of
-      the copyright owner. For the purposes of this definition, "submitted"
-      means any form of electronic, verbal, or written communication sent
-      to the Licensor or its representatives, including but not limited to
-      communication on electronic mailing lists, source code control systems,
-      and issue tracking systems that are managed by, or on behalf of, the
-      Licensor for the purpose of discussing and improving the Work, but
-      excluding communication that is conspicuously marked or otherwise
-      designated in writing by the copyright owner as "Not a Contribution."
-
-      "Contributor" shall mean Licensor and any individual or Legal Entity
-      on behalf of whom a Contribution has been received by the Licensor and
-      subsequently incorporated within the Work.
-
-   2. Grant of Copyright License. Subject to the terms and conditions of
-      this License, each Contributor hereby grants to You a perpetual,
-      worldwide, non-exclusive, no-charge, royalty-free, irrevocable
-      copyright license to reproduce, prepare Derivative Works of,
-      publicly display, publicly perform, sublicense, and distribute the
-      Work and such Derivative Works in Source or Object form.
-
-   3. Grant of Patent License. Subject to the terms and conditions of
-      this License, each Contributor hereby grants to You a perpetual,
-      worldwide, non-exclusive, no-charge, royalty-free, irrevocable
-      (except as stated in this section) patent license to make, have made,
-      use, offer to sell, sell, import, and otherwise transfer the Work,
-      where such license applies only to those patent claims licensable
-      by such Contributor that are necessarily infringed by their
-      Contribution(s) alone or by combination of their Contribution(s)
-      with the Work to which such Contribution(s) was submitted. If You
-      institute patent litigation against any entity (including a
-      cross-claim or counterclaim in a lawsuit) alleging that the Work
-      or a Contribution incorporated within the Work constitutes direct
-      or contributory patent infringement, then any patent licenses
-      granted to You under this License for that Work shall terminate
-      as of the date such litigation is filed.
-
-   4. Redistribution. You may reproduce and distribute copies of the
-      Work or Derivative Works thereof in any medium, with or without
-      modifications, and in Source or Object form, provided that You
-      meet the following conditions:
-
-      (a) You must give any other recipients of the Work or
-          Derivative Works a copy of this License; and
-
-      (b) You must cause any modified files to carry prominent notices
-          stating that You changed the files; and
-
-      (c) You must retain, in the Source form of any Derivative Works
-          that You distribute, all copyright, patent, trademark, and
-          attribution notices from the Source form of the Work,
-          excluding those notices that do not pertain to any part of
-          the Derivative Works; and
-
-      (d) If the Work includes a "NOTICE" text file as part of its
-          distribution, then any Derivative Works that You distribute must
-          include a readable copy of the attribution notices contained
-          within such NOTICE file, excluding any notices that do not
-          pertain to any part of the Derivative Works, in at least one
-          of the following places: within a NOTICE text file distributed
-          as part of the Derivative Works; within the Source form or
-          documentation, if provided along with the Derivative Works; or,
-          within a display generated by the Derivative Works, if and
-          wherever such third-party notices normally appear. The contents
-          of the NOTICE file are for informational purposes only and
-          do not modify the License. You may add Your own attribution
-          notices within Derivative Works that You distribute, alongside
-          or as an addendum to the NOTICE text from the Work, provided
-          that such additional attribution notices cannot be construed
-          as modifying the License.
-
-      You may add Your own copyright statement to Your modifications and
-      may provide additional or different license terms and conditions
-      for use, reproduction, or distribution of Your modifications, or
-      for any such Derivative Works as a whole, provided Your use,
-      reproduction, and distribution of the Work otherwise complies with
-      the conditions stated in this License.
-
-   5. Submission of Contributions. Unless You explicitly state otherwise,
-      any Contribution intentionally submitted for inclusion in the Work
-      by You to the Licensor shall be under the terms and conditions of
-      this License, without any additional terms or conditions.
-      Notwithstanding the above, nothing herein shall supersede or modify
-      the terms of any separate license agreement you may have executed
-      with Licensor regarding such Contributions.
-
-   6. Trademarks. This License does not grant permission to use the trade
-      names, trademarks, service marks, or product names of the Licensor,
-      except as required for reasonable and customary use in describing the
-      origin of the Work and reproducing the content of the NOTICE file.
-
-   7. Disclaimer of Warranty. Unless required by applicable law or
-      agreed to in writing, Licensor provides the Work (and each
-      Contributor provides its Contributions) on an "AS IS" BASIS,
-      WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or
-      implied, including, without limitation, any warranties or conditions
-      of TITLE, NON-INFRINGEMENT, MERCHANTABILITY, or FITNESS FOR A
-      PARTICULAR PURPOSE. You are solely responsible for determining the
-      appropriateness of using or redistributing the Work and assume any
-      risks associated with Your exercise of permissions under this License.
-
-   8. Limitation of Liability. In no event and under no legal theory,
-      whether in tort (including negligence), contract, or otherwise,
-      unless required by applicable law (such as deliberate and grossly
-      negligent acts) or agreed to in writing, shall any Contributor be
-      liable to You for damages, including any direct, indirect, special,
-      incidental, or consequential damages of any character arising as a
-      result of this License or out of the use or inability to use the
-      Work (including but not limited to damages for loss of goodwill,
-      work stoppage, computer failure or malfunction, or any and all
-      other commercial damages or losses), even if such Contributor
-      has been advised of the possibility of such damages.
-
-   9. Accepting Warranty or Additional Liability. While redistributing
-      the Work or Derivative Works thereof, You may choose to offer,
-      and charge a fee for, acceptance of support, warranty, indemnity,
-      or other liability obligations and/or rights consistent with this
-      License. However, in accepting such obligations, You may act only
-      on Your own behalf and on Your sole responsibility, not on behalf
-      of any other Contributor, and only if You agree to indemnify,
-      defend, and hold each Contributor harmless for any liability
-      incurred by, or claims asserted against, such Contributor by reason
-      of your accepting any such warranty or additional liability.
-
-   END OF TERMS AND CONDITIONS
-
-   Copyright 2025 Rivet Gaming, Inc.
-
-   Licensed under the Apache License, Version 2.0 (the "License");
-   you may not use this file except in compliance with the License.
-   You may obtain a copy of the License at
-
-       http://www.apache.org/licenses/LICENSE-2.0
-
-   Unless required by applicable law or agreed to in writing, software
-   distributed under the License is distributed on an "AS IS" BASIS,
-   WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
-   See the License for the specific language governing permissions and
-   limitations under the License.

package/dist/bridge-loader.d.ts

@@ -1 +0,0 @@
-export { getRawBridgeCode, getBridgeAttachCode } from "@secure-exec/nodejs/internal/bridge-loader";

package/dist/bridge-loader.js

@@ -1,2 +0,0 @@
-// Re-exported from @secure-exec/nodejs — canonical source is packages/nodejs/src/bridge-loader.ts
-export { getRawBridgeCode, getBridgeAttachCode } from "@secure-exec/nodejs/internal/bridge-loader";

package/dist/bridge-setup.d.ts

@@ -1 +0,0 @@
-export { getInitialBridgeGlobalsSetupCode } from "@secure-exec/core";

package/dist/bridge-setup.js

@@ -1,2 +0,0 @@
-// Re-exported from @secure-exec/core — canonical source is packages/core/src/bridge-setup.ts
-export { getInitialBridgeGlobalsSetupCode } from "@secure-exec/core";

package/dist/esm-compiler.d.ts

@@ -1 +0,0 @@
-export { getStaticBuiltinWrapperSource, createBuiltinESMWrapper, getEmptyBuiltinESMWrapper, } from "@secure-exec/core";

package/dist/esm-compiler.js

@@ -1,2 +0,0 @@
-// Re-exported from @secure-exec/core — canonical source moved to packages/nodejs/src/esm-compiler.ts (US-003)
-export { getStaticBuiltinWrapperSource, createBuiltinESMWrapper, getEmptyBuiltinESMWrapper, } from "@secure-exec/core";

package/dist/fs-helpers.d.ts

@@ -1,2 +0,0 @@
-export type { DirEntry, StatInfo } from "@secure-exec/core";
-export { exists, stat, rename, readDirWithTypes, mkdir } from "@secure-exec/core";

package/dist/fs-helpers.js

@@ -1 +0,0 @@
-export { exists, stat, rename, readDirWithTypes, mkdir } from "@secure-exec/core";

package/dist/module-resolver.d.ts

@@ -1 +0,0 @@
-export { BUILTIN_NAMED_EXPORTS, normalizeBuiltinSpecifier, getPathDir, } from "@secure-exec/core";

package/dist/module-resolver.js

@@ -1,2 +0,0 @@
-// Re-exported from @secure-exec/core — canonical source moved to packages/nodejs/src/builtin-modules.ts (US-003)
-export { BUILTIN_NAMED_EXPORTS, normalizeBuiltinSpecifier, getPathDir, } from "@secure-exec/core";

package/dist/node/bridge-setup.d.ts

@@ -1 +0,0 @@
-export { emitConsoleEvent, stripDangerousEnv, createProcessConfigForExecution, } from "@secure-exec/nodejs";

package/dist/node/bridge-setup.js

@@ -1,2 +0,0 @@
-// Re-exported from @secure-exec/nodejs
-export { emitConsoleEvent, stripDangerousEnv, createProcessConfigForExecution, } from "@secure-exec/nodejs";

package/dist/node/driver.d.ts

@@ -1,2 +0,0 @@
-export { createDefaultNetworkAdapter, createNodeDriver, createNodeRuntimeDriverFactory, NodeFileSystem, NodeExecutionDriver, filterEnv, isPrivateIp, } from "@secure-exec/nodejs";
-export type { NodeDriverOptions, NodeRuntimeDriverFactoryOptions, ModuleAccessOptions, } from "@secure-exec/nodejs";

package/dist/node/driver.js

@@ -1,2 +0,0 @@
-// Re-exported from @secure-exec/nodejs — canonical source is packages/nodejs/src/driver.ts
-export { createDefaultNetworkAdapter, createNodeDriver, createNodeRuntimeDriverFactory, NodeFileSystem, NodeExecutionDriver, filterEnv, isPrivateIp, } from "@secure-exec/nodejs";

package/dist/node/execution-driver.d.ts

@@ -1,2 +0,0 @@
-export { NodeExecutionDriver } from "@secure-exec/nodejs/internal/execution-driver";
-export type { NodeExecutionDriverOptions } from "@secure-exec/nodejs/internal/isolate-bootstrap";

package/dist/node/execution-driver.js

@@ -1,2 +0,0 @@
-// Re-exported from @secure-exec/nodejs
-export { NodeExecutionDriver } from "@secure-exec/nodejs/internal/execution-driver";

package/dist/node/isolate-bootstrap.d.ts

@@ -1,2 +0,0 @@
-export type { NodeExecutionDriverOptions, BudgetState, DriverDeps, } from "@secure-exec/nodejs/internal/isolate-bootstrap";
-export { DEFAULT_BRIDGE_BASE64_TRANSFER_BYTES, DEFAULT_ISOLATE_JSON_PAYLOAD_BYTES, MIN_CONFIGURED_PAYLOAD_BYTES, MAX_CONFIGURED_PAYLOAD_BYTES, PAYLOAD_LIMIT_ERROR_CODE, RESOURCE_BUDGET_ERROR_CODE, DEFAULT_SANDBOX_CWD, DEFAULT_SANDBOX_HOME, DEFAULT_SANDBOX_TMPDIR, PayloadLimitError, normalizePayloadLimit, getUtf8ByteLength, getBase64EncodedByteLength, assertPayloadByteLength, assertTextPayloadSize, createBudgetState, checkBridgeBudget, parseJsonWithLimit, getExecutionTimeoutMs, getTimingMitigation, polyfillCodeCache, polyfillNamedExportsCache, hostBuiltinNamedExportsCache, hostRequire, isValidExportName, getHostBuiltinNamedExports, } from "@secure-exec/nodejs/internal/isolate-bootstrap";

package/dist/node/isolate-bootstrap.js

@@ -1 +0,0 @@
-export { DEFAULT_BRIDGE_BASE64_TRANSFER_BYTES, DEFAULT_ISOLATE_JSON_PAYLOAD_BYTES, MIN_CONFIGURED_PAYLOAD_BYTES, MAX_CONFIGURED_PAYLOAD_BYTES, PAYLOAD_LIMIT_ERROR_CODE, RESOURCE_BUDGET_ERROR_CODE, DEFAULT_SANDBOX_CWD, DEFAULT_SANDBOX_HOME, DEFAULT_SANDBOX_TMPDIR, PayloadLimitError, normalizePayloadLimit, getUtf8ByteLength, getBase64EncodedByteLength, assertPayloadByteLength, assertTextPayloadSize, createBudgetState, checkBridgeBudget, parseJsonWithLimit, getExecutionTimeoutMs, getTimingMitigation, polyfillCodeCache, polyfillNamedExportsCache, hostBuiltinNamedExportsCache, hostRequire, isValidExportName, getHostBuiltinNamedExports, } from "@secure-exec/nodejs/internal/isolate-bootstrap";

package/dist/node/module-access.d.ts

@@ -1,2 +0,0 @@
-export { ModuleAccessFileSystem } from "@secure-exec/nodejs/internal/module-access";
-export type { ModuleAccessOptions } from "@secure-exec/nodejs/internal/module-access";

package/dist/node/module-access.js

@@ -1,2 +0,0 @@
-// Re-exported from @secure-exec/nodejs — canonical source is packages/nodejs/src/module-access.ts
-export { ModuleAccessFileSystem } from "@secure-exec/nodejs/internal/module-access";

package/dist/node/module-resolver.d.ts

@@ -1 +0,0 @@
-export { getNearestPackageType, getModuleFormat, shouldRunAsESM, resolveReferrerDirectory, resolveESMPath, } from "@secure-exec/nodejs/internal/module-resolver";

package/dist/node/module-resolver.js

@@ -1,2 +0,0 @@
-// Re-exported from @secure-exec/nodejs — canonical source is packages/nodejs/src/module-resolver.ts
-export { getNearestPackageType, getModuleFormat, shouldRunAsESM, resolveReferrerDirectory, resolveESMPath, } from "@secure-exec/nodejs/internal/module-resolver";

package/dist/package-bundler.d.ts

@@ -1,2 +0,0 @@
-export type { ResolutionCache } from "@secure-exec/core";
-export { createResolutionCache, resolveModule, loadFile, bundlePackage, } from "@secure-exec/core";

package/dist/package-bundler.js

@@ -1 +0,0 @@
-export { createResolutionCache, resolveModule, loadFile, bundlePackage, } from "@secure-exec/core";

package/dist/polyfills.d.ts

@@ -1 +0,0 @@
-export { bundlePolyfill, getAvailableStdlib, hasPolyfill, prebundleAllPolyfills, } from "@secure-exec/nodejs/internal/polyfills";

package/dist/polyfills.js

@@ -1,2 +0,0 @@
-// Re-exported from @secure-exec/nodejs — canonical source is packages/nodejs/src/polyfills.ts
-export { bundlePolyfill, getAvailableStdlib, hasPolyfill, prebundleAllPolyfills, } from "@secure-exec/nodejs/internal/polyfills";

package/dist/runtime-driver.d.ts

@@ -1 +0,0 @@
-export type { DriverRuntimeConfig, NodeRuntimeDriver, NodeRuntimeDriverFactory, PythonRuntimeDriver, PythonRuntimeDriverFactory, ResourceBudgets, RuntimeDriver, RuntimeDriverFactory, RuntimeDriverOptions, SharedRuntimeDriver, SystemDriver, } from "@secure-exec/core";

package/dist/runtime-driver.js

@@ -1 +0,0 @@
-export {};

package/dist/shared/api-types.d.ts

@@ -1 +0,0 @@
-export type { ExecOptions, ExecResult, ExecutionStatus, OSConfig, ProcessConfig, PythonRunOptions, PythonRunResult, RunResult, StdioChannel, StdioEvent, StdioHook, TimingMitigation, } from "@secure-exec/core";

package/dist/shared/api-types.js

@@ -1 +0,0 @@
-export {};

package/dist/shared/bridge-contract.d.ts

@@ -1,2 +0,0 @@
-export type { BridgeApplyRef, BridgeApplySyncPromiseRef, BridgeApplySyncRef, BridgeGlobalKey, ChildProcessKillBridgeRef, ChildProcessSpawnStartBridgeRef, ChildProcessSpawnSyncBridgeRef, ChildProcessStdinCloseBridgeRef, ChildProcessStdinWriteBridgeRef, CryptoRandomFillBridgeRef, CryptoRandomUuidBridgeRef, DynamicImportBridgeRef, FsChmodBridgeRef, FsChownBridgeRef, FsExistsBridgeRef, FsFacadeBridge, FsLinkBridgeRef, FsLstatBridgeRef, FsMkdirBridgeRef, FsReadDirBridgeRef, FsReadFileBinaryBridgeRef, FsReadFileBridgeRef, FsReadlinkBridgeRef, FsRenameBridgeRef, FsRmdirBridgeRef, FsStatBridgeRef, FsSymlinkBridgeRef, FsTruncateBridgeRef, FsUnlinkBridgeRef, FsUtimesBridgeRef, FsWriteFileBinaryBridgeRef, FsWriteFileBridgeRef, HostBridgeGlobalKey, LoadFileBridgeRef, LoadPolyfillBridgeRef, ModuleCacheBridgeRecord, NetworkDnsLookupRawBridgeRef, NetworkFetchRawBridgeRef, NetworkHttpRequestRawBridgeRef, NetworkHttpServerCloseRawBridgeRef, NetworkHttpServerListenRawBridgeRef, UpgradeSocketWriteRawBridgeRef, UpgradeSocketEndRawBridgeRef, UpgradeSocketDestroyRawBridgeRef, ProcessErrorBridgeRef, ProcessLogBridgeRef, RegisterHandleBridgeFn, RequireFromBridgeFn, ResolveModuleBridgeRef, RuntimeBridgeGlobalKey, ScheduleTimerBridgeRef, UnregisterHandleBridgeFn, ValueOf, } from "@secure-exec/core";
-export { BRIDGE_GLOBAL_KEY_LIST, HOST_BRIDGE_GLOBAL_KEY_LIST, HOST_BRIDGE_GLOBAL_KEYS, RUNTIME_BRIDGE_GLOBAL_KEY_LIST, RUNTIME_BRIDGE_GLOBAL_KEYS, } from "@secure-exec/core";

package/dist/shared/bridge-contract.js

@@ -1 +0,0 @@
-export { BRIDGE_GLOBAL_KEY_LIST, HOST_BRIDGE_GLOBAL_KEY_LIST, HOST_BRIDGE_GLOBAL_KEYS, RUNTIME_BRIDGE_GLOBAL_KEY_LIST, RUNTIME_BRIDGE_GLOBAL_KEYS, } from "@secure-exec/core";

package/dist/shared/console-formatter.d.ts

@@ -1,2 +0,0 @@
-export type { ConsoleSerializationBudget } from "@secure-exec/core";
-export { DEFAULT_CONSOLE_SERIALIZATION_BUDGET, formatConsoleArgs, getConsoleSetupCode, safeStringifyConsoleValue, } from "@secure-exec/core";

package/dist/shared/console-formatter.js

@@ -1 +0,0 @@
-export { DEFAULT_CONSOLE_SERIALIZATION_BUDGET, formatConsoleArgs, getConsoleSetupCode, safeStringifyConsoleValue, } from "@secure-exec/core";

package/dist/shared/errors.d.ts

@@ -1,2 +0,0 @@
-export type { SystemError } from "@secure-exec/core";
-export { createEaccesError, createEnosysError, createSystemError, } from "@secure-exec/core";

package/dist/shared/errors.js

@@ -1 +0,0 @@
-export { createEaccesError, createEnosysError, createSystemError, } from "@secure-exec/core";

package/dist/shared/esm-utils.d.ts

@@ -1 +0,0 @@
-export { extractCjsNamedExports, extractDynamicImportSpecifiers, isESM, transformDynamicImport, wrapCJSForESM, wrapCJSForESMWithModulePath, } from "@secure-exec/core";

package/dist/shared/esm-utils.js

@@ -1,2 +0,0 @@
-// Re-exported from @secure-exec/core
-export { extractCjsNamedExports, extractDynamicImportSpecifiers, isESM, transformDynamicImport, wrapCJSForESM, wrapCJSForESMWithModulePath, } from "@secure-exec/core";

package/dist/shared/global-exposure.d.ts

@@ -1,2 +0,0 @@
-export type { CustomGlobalClassification, CustomGlobalInventoryEntry, } from "@secure-exec/core";
-export { exposeCustomGlobal, exposeGlobalBinding, exposeMutableRuntimeStateGlobal, HARDENED_NODE_CUSTOM_GLOBALS, ISOLATE_GLOBAL_EXPOSURE_HELPER_SOURCE, MUTABLE_NODE_CUSTOM_GLOBALS, NODE_CUSTOM_GLOBAL_INVENTORY, } from "@secure-exec/core";

package/dist/shared/global-exposure.js

@@ -1 +0,0 @@
-export { exposeCustomGlobal, exposeGlobalBinding, exposeMutableRuntimeStateGlobal, HARDENED_NODE_CUSTOM_GLOBALS, ISOLATE_GLOBAL_EXPOSURE_HELPER_SOURCE, MUTABLE_NODE_CUSTOM_GLOBALS, NODE_CUSTOM_GLOBAL_INVENTORY, } from "@secure-exec/core";

package/dist/shared/in-memory-fs.d.ts

@@ -1 +0,0 @@
-export { createInMemoryFileSystem } from "@secure-exec/core";

package/dist/shared/in-memory-fs.js

@@ -1,2 +0,0 @@
-// Re-exported from @secure-exec/core
-export { createInMemoryFileSystem } from "@secure-exec/core";

package/dist/shared/permissions.d.ts

@@ -1 +0,0 @@
-export { allowAll, allowAllChildProcess, allowAllEnv, allowAllFs, allowAllNetwork, createCommandExecutorStub, createFsStub, createNetworkStub, envAccessAllowed, filterEnv, wrapCommandExecutor, wrapFileSystem, wrapNetworkAdapter, } from "@secure-exec/core";

package/dist/shared/permissions.js

@@ -1,2 +0,0 @@
-// Re-exported from @secure-exec/core
-export { allowAll, allowAllChildProcess, allowAllEnv, allowAllFs, allowAllNetwork, createCommandExecutorStub, createFsStub, createNetworkStub, envAccessAllowed, filterEnv, wrapCommandExecutor, wrapFileSystem, wrapNetworkAdapter, } from "@secure-exec/core";

package/dist/shared/require-setup.d.ts

@@ -1 +0,0 @@
-export { getRequireSetupCode } from "@secure-exec/core";

package/dist/shared/require-setup.js

@@ -1,2 +0,0 @@
-// Re-exported from @secure-exec/core
-export { getRequireSetupCode } from "@secure-exec/core";

package/dist/types.d.ts

@@ -1,3 +0,0 @@
-export type { ChildProcessAccessRequest, EnvAccessRequest, FsAccessRequest, NetworkAccessRequest, PermissionCheck, PermissionDecision, Permissions, VirtualDirEntry, VirtualFileSystem, VirtualStat, } from "@secure-exec/core";
-export type { CommandExecutor, NetworkAdapter, NetworkServerAddress, NetworkServerListenOptions, NetworkServerRequest, NetworkServerResponse, SpawnedProcess, } from "@secure-exec/core";
-export type { DriverRuntimeConfig, NodeRuntimeDriver, NodeRuntimeDriverFactory, PythonRuntimeDriver, PythonRuntimeDriverFactory, RuntimeDriver, RuntimeDriverFactory, RuntimeDriverOptions, SharedRuntimeDriver, SystemDriver, } from "@secure-exec/core";

package/dist/types.js

@@ -1 +0,0 @@
-export {};