Mandatory denies: submodule git dirs, .git pointer files, nested hooks, gitignored paths

.github/workflows/integration-tests.yml

@@ -288,7 +288,11 @@ jobs:
             test/sandbox/path-canonicalization.test.ts \
             test/sandbox/credential-deny.test.ts \
             test/sandbox/symlink-boundary.test.ts \
-            test/sandbox/stale-mount-point.test.ts
+            test/sandbox/mount-point-manifests.test.ts \
+            test/sandbox/mount-point-liveness.test.ts \
+            test/sandbox/mount-point-passes.test.ts \
+            test/sandbox/stale-mount-point.test.ts \
+            test/sandbox/linux-bwrap-args-file.test.ts
 
       - name: Run Node.js fallback tests
         if: matrix.os != 'windows'

bunfig.toml

@@ -0,0 +1,4 @@
+[test]
+# Gives the run directories of its own for the mount point manifests, before any
+# test file is loaded: see test/preload.ts.
+preload = ["./test/preload.ts"]

eslint.config.js

@@ -23,6 +23,7 @@ export default [
             'eslint.config.js',
             'test/fixtures/tunnel-ends.mjs',
             'test/utils/which-node-test.mjs',
+            'test/helpers/isolated/dist-cli.mjs',
             'vendor/build-common.ts',
             'vendor/seccomp/build.ts',
             'vendor/srt-win/build.ts',

src/index.ts

@@ -54,6 +54,20 @@ export {
   LinuxSandboxProfileError,
   type LinuxSandboxProfileErrorCode,
 } from './sandbox/linux-sandbox-utils.js'
+// The macOS profile generator's own wrap-time refusal: a `.git` pointer or a
+// `commondir` whose target cannot be worked out the way git works it out. On
+// Linux the same condition arrives as a LinuxSandboxProfileError carrying
+// `deny_git_metadata_unreadable`.
+// The other refusal the shared producers raise: the `.git/modules` walk ran
+// out of the time it was given, which on Linux arrives as a
+// LinuxSandboxProfileError carrying `deny_scan_failed`.
+export {
+  GitMetadataError,
+  SubmoduleWalkBudgetError,
+} from './sandbox/mandatory-deny-paths.js'
+// The mount points a running sandbox relies on (Linux), as a snapshot, for an
+// embedder that removes paths itself after a command to leave out.
+export { liveMountPoints } from './sandbox/bwrap-mount-manifests.js'
 
 // Windows install/status API
 export {