AssertionError: expected 'import { createNetworkStub, filterEnv…' to contain 'HOST_BRIDGE_GLOBAL_KEYS.dynamicImport' - Expected + Received - HOST_BRIDGE_GLOBAL_KEYS.dynamicImport + import { createNetworkStub, filterEnv } from "./shared/permissions.js"; + import type { + NetworkAdapter, + RuntimeDriver, + RuntimeDriverFactory, + SystemDriver, + } from "./types.js"; + import type { + StdioHook, + ExecOptions, + ExecResult, + RunResult, + TimingMitigation, + } from "./shared/api-types.js"; + + // Re-export types + export type { + CommandExecutor, + NetworkAdapter, + Permissions, + RuntimeDriver, + RuntimeDriverFactory, + SystemDriver, + VirtualFileSystem, + } from "./types.js"; + export type { DirEntry, StatInfo } from "./fs-helpers.js"; + export type { + StdioChannel, + StdioEvent, + StdioHook, + ExecOptions, + ExecResult, + OSConfig, + ProcessConfig, + RunResult, + TimingMitigation, + } from "./shared/api-types.js"; + export { + createDefaultNetworkAdapter, + createNodeDriver, + createNodeRuntimeDriverFactory, + NodeExecutionDriver, + NodeFileSystem, + } from "./node/driver.js"; + export type { + ModuleAccessOptions, + NodeRuntimeDriverFactoryOptions, + } from "./node/driver.js"; + export { createInMemoryFileSystem } from "./shared/in-memory-fs.js"; + export { + allowAll, + allowAllChildProcess, + allowAllEnv, + allowAllFs, + allowAllNetwork, + } from "./shared/permissions.js"; + + const DEFAULT_SANDBOX_CWD = "/root"; + const DEFAULT_SANDBOX_HOME = "/root"; + const DEFAULT_SANDBOX_TMPDIR = "/tmp"; + + export interface NodeRuntimeOptions { + systemDriver: SystemDriver; + runtimeDriverFactory: RuntimeDriverFactory; + memoryLimit?: number; + cpuTimeLimitMs?: number; + timingMitigation?: TimingMitigation; + onStdio?: StdioHook; + payloadLimits?: { + base64TransferBytes?: number; + jsonPayloadBytes?: number; + }; + } + + type UnsafeRuntimeDriver = RuntimeDriver & { + unsafeIsolate?: unknown; + createUnsafeContext?(options?: { + env?: Record<string, string>; + cwd?: string; + filePath?: string; + }): Promise<unknown>; + }; + + export class NodeRuntime { + private readonly runtimeDriver: UnsafeRuntimeDriver; + + constructor(options: NodeRuntimeOptions) { + const { systemDriver, runtimeDriverFactory } = options; + + const processConfig = { + ...(systemDriver.runtime.process ?? {}), + }; + processConfig.cwd ??= DEFAULT_SANDBOX_CWD; + processConfig.env = filterEnv(processConfig.env, systemDriver.permissions); + + const osConfig = { + ...(systemDriver.runtime.os ?? {}), + }; + osConfig.homedir ??= DEFAULT_SANDBOX_HOME; + osConfig.tmpdir ??= DEFAULT_SANDBOX_TMPDIR; + + this.runtimeDriver = runtimeDriverFactory.createRuntimeDriver({ + system: systemDriver, + runtime: { + process: processConfig, + os: osConfig, + }, + memoryLimit: options.memoryLimit, + cpuTimeLimitMs: options.cpuTimeLimitMs, + timingMitigation: options.timingMitigation, + onStdio: options.onStdio, + payloadLimits: options.payloadLimits, + }) as UnsafeRuntimeDriver; + } + + get network(): Pick<NetworkAdapter, "fetch" | "dnsLookup" | "httpRequest"> { + const adapter = this.runtimeDriver.network ?? createNetworkStub(); + return { + fetch: (url, options) => adapter.fetch(url, options), + dnsLookup: (hostname) => adapter.dnsLookup(hostname), + httpRequest: (url, options) => adapter.httpRequest(url, options), + }; + } + + get __unsafeIsoalte(): unknown { + if (this.runtimeDriver.unsafeIsolate === undefined) { + throw new Error("Driver runtime does not expose unsafe isolate access"); + } + return this.runtimeDriver.unsafeIsolate; + } + + async __unsafeCreateContext(options: { + env?: Record<string, string>; + cwd?: string; + filePath?: string; + } = {}): Promise<unknown> { + if (!this.runtimeDriver.createUnsafeContext) { + throw new Error("Driver runtime does not expose unsafe context creation"); + } + return this.runtimeDriver.createUnsafeContext(options); + } + + async run<T = unknown>(code: string, file