diff --git a/doc/api/errors.md b/doc/api/errors.md
index dbd64a3f11fb9f..d740afb7f92055 100644
--- a/doc/api/errors.md
+++ b/doc/api/errors.md
@@ -2367,6 +2367,17 @@ error indicates that the idle loop has failed to stop.
An attempt was made to use operations that can only be used when building
V8 startup snapshot even though Node.js isn't building one.
+
+
+### `ERR_NOT_IN_SINGLE_EXECUTABLE_APPLICATION`
+
+
+
+The operation cannot be performed when it's not in a single-executable
+application.
+
### `ERR_NOT_SUPPORTED_IN_SNAPSHOT`
@@ -2513,6 +2524,17 @@ The [`server.close()`][] method was called when a `net.Server` was not
running. This applies to all instances of `net.Server`, including HTTP, HTTPS,
and HTTP/2 `Server` instances.
+
+
+### `ERR_SINGLE_EXECUTABLE_APPLICATION_ASSET_NOT_FOUND`
+
+
+
+A key was passed to single executable application APIs to identify an asset,
+but no match could be found.
+
### `ERR_SOCKET_ALREADY_BOUND`
diff --git a/doc/api/single-executable-applications.md b/doc/api/single-executable-applications.md
index 12c9e34a9805f3..530fbff74ae553 100644
--- a/doc/api/single-executable-applications.md
+++ b/doc/api/single-executable-applications.md
@@ -178,7 +178,11 @@ The configuration currently reads the following top-level fields:
"output": "/path/to/write/the/generated/blob.blob",
"disableExperimentalSEAWarning": true, // Default: false
"useSnapshot": false, // Default: false
- "useCodeCache": true // Default: false
+ "useCodeCache": true, // Default: false
+ "assets": { // Optional
+ "a.dat": "/path/to/a.dat",
+ "b.txt": "/path/to/b.txt"
+ }
}
```
@@ -186,6 +190,42 @@ If the paths are not absolute, Node.js will use the path relative to the
current working directory. The version of the Node.js binary used to produce
the blob must be the same as the one to which the blob will be injected.
+### Assets
+
+Users can include assets by adding a key-path dictionary to the configuration
+as the `assets` field. At build time, Node.js would read the assets from the
+specified paths and bundle them into the preparation blob. In the generated
+executable, users can retrieve the assets using the [`sea.getAsset()`][] and
+[`sea.getAssetAsBlob()`][] APIs.
+
+```json
+{
+ "main": "/path/to/bundled/script.js",
+ "output": "/path/to/write/the/generated/blob.blob",
+ "assets": {
+ "a.jpg": "/path/to/a.jpg",
+ "b.txt": "/path/to/b.txt"
+ }
+}
+```
+
+The single-executable application can access the assets as follows:
+
+```cjs
+const { getAsset } = require('node:sea');
+// Returns a copy of the data in an ArrayBuffer.
+const image = getAsset('a.jpg');
+// Returns a string decoded from the asset as UTF8.
+const text = getAsset('b.txt', 'utf8');
+// Returns a Blob containing the asset.
+const blob = getAssetAsBlob('a.jpg');
+// Returns an ArrayBuffer containing the raw asset without copying.
+const raw = getRawAsset('a.jpg');
+```
+
+See documentation of the [`sea.getAsset()`][] and [`sea.getAssetAsBlob()`][]
+APIs for more information.
+
### Startup snapshot support
The `useSnapshot` field can be used to enable startup snapshot support. In this
@@ -229,11 +269,79 @@ execute the script, which would improve the startup performance.
**Note:** `import()` does not work when `useCodeCache` is `true`.
-## Notes
+## In the injected main script
+
+### Single-executable application API
+
+The `node:sea` builtin allows interaction with the single-executable application
+from the JavaScript main script embedded into the executable.
+
+#### `sea.isSea()`
+
+
+
+* Returns: {boolean} Whether this script is running inside a single-executable
+ application.
+
+### `sea.getAsset(key[, encoding])`
-### `require(id)` in the injected module is not file based
+
+
+This method can be used to retrieve the assets configured to be bundled into the
+single-executable application at build time.
+An error is thrown when no matching asset can be found.
+
+* `key` {string} the key for the asset in the dictionary specified by the
+ `assets` field in the single-executable application configuration.
+* `encoding` {string} If specified, the asset will be decoded as
+ a string. Any encoding supported by the `TextDecoder` is accepted.
+ If unspecified, an `ArrayBuffer` containing a copy of the asset would be
+ returned instead.
+* Returns: {string|ArrayBuffer}
+
+### `sea.getAssetAsBlob(key[, options])`
+
+
+
+Similar to [`sea.getAsset()`][], but returns the result in a [`Blob`][].
+An error is thrown when no matching asset can be found.
+
+* `key` {string} the key for the asset in the dictionary specified by the
+ `assets` field in the single-executable application configuration.
+* `options` {Object}
+ * `type` {string} An optional mime type for the blob.
+* Returns: {Blob}
+
+### `sea.getRawAsset(key)`
-`require()` in the injected module is not the same as the [`require()`][]
+
+
+This method can be used to retrieve the assets configured to be bundled into the
+single-executable application at build time.
+An error is thrown when no matching asset can be found.
+
+Unlike `sea.getRawAsset()` or `sea.getAssetAsBlob()`, this method does not
+return a copy. Instead, it returns the raw asset bundled inside the executable.
+
+For now, users should avoid writing to the returned array buffer. If the
+injected section is not marked as writable or not aligned properly,
+writes to the returned array buffer is likely to result in a crash.
+
+* `key` {string} the key for the asset in the dictionary specified by the
+ `assets` field in the single-executable application configuration.
+* Returns: {string|ArrayBuffer}
+
+### `require(id)` in the injected main script is not file based
+
+`require()` in the injected main script is not the same as the [`require()`][]
available to modules that are not injected. It also does not have any of the
properties that non-injected [`require()`][] has except [`require.main`][]. It
can only be used to load built-in modules. Attempting to load a module that can
@@ -250,15 +358,17 @@ const { createRequire } = require('node:module');
require = createRequire(__filename);
```
-### `__filename` and `module.filename` in the injected module
+### `__filename` and `module.filename` in the injected main script
-The values of `__filename` and `module.filename` in the injected module are
-equal to [`process.execPath`][].
+The values of `__filename` and `module.filename` in the injected main script
+are equal to [`process.execPath`][].
-### `__dirname` in the injected module
+### `__dirname` in the injected main script
-The value of `__dirname` in the injected module is equal to the directory name
-of [`process.execPath`][].
+The value of `__dirname` in the injected main script is equal to the directory
+name of [`process.execPath`][].
+
+## Notes
### Single executable application creation process
@@ -298,9 +408,12 @@ to help us document them.
[Mach-O]: https://en.wikipedia.org/wiki/Mach-O
[PE]: https://en.wikipedia.org/wiki/Portable_Executable
[Windows SDK]: https://developer.microsoft.com/en-us/windows/downloads/windows-sdk/
+[`Blob`]: https://developer.mozilla.org/en-US/docs/Web/API/Blob
[`process.execPath`]: process.md#processexecpath
[`require()`]: modules.md#requireid
[`require.main`]: modules.md#accessing-the-main-module
+[`sea.getAsset()`]: #seagetassetkey-encoding
+[`sea.getAssetAsBlob()`]: #seagetassetasblobkey-options
[`v8.startupSnapshot.setDeserializeMainFunction()`]: v8.md#v8startupsnapshotsetdeserializemainfunctioncallback-data
[`v8.startupSnapshot` API]: v8.md#startup-snapshot-api
[documentation about startup snapshot support in Node.js]: cli.md#--build-snapshot
diff --git a/lib/internal/bootstrap/realm.js b/lib/internal/bootstrap/realm.js
index 57ab47178d033d..5b22d7c9d89ffa 100644
--- a/lib/internal/bootstrap/realm.js
+++ b/lib/internal/bootstrap/realm.js
@@ -128,6 +128,7 @@ const legacyWrapperList = new SafeSet([
// beginning with "internal/".
// Modules that can only be imported via the node: scheme.
const schemelessBlockList = new SafeSet([
+ 'sea',
'test',
'test/reporters',
]);
diff --git a/lib/internal/errors.js b/lib/internal/errors.js
index d2250f5c7f053c..9c189f65acbd32 100644
--- a/lib/internal/errors.js
+++ b/lib/internal/errors.js
@@ -1632,6 +1632,8 @@ E('ERR_NETWORK_IMPORT_DISALLOWED',
"import of '%s' by %s is not supported: %s", Error);
E('ERR_NOT_BUILDING_SNAPSHOT',
'Operation cannot be invoked when not building startup snapshot', Error);
+E('ERR_NOT_IN_SINGLE_EXECUTABLE_APPLICATION',
+ 'Operation cannot be invoked when not in a single-executable application', Error);
E('ERR_NOT_SUPPORTED_IN_SNAPSHOT', '%s is not supported in startup snapshot', Error);
E('ERR_NO_CRYPTO',
'Node.js is not compiled with OpenSSL crypto support', Error);
@@ -1715,6 +1717,8 @@ E('ERR_SCRIPT_EXECUTION_INTERRUPTED',
E('ERR_SERVER_ALREADY_LISTEN',
'Listen method has been called more than once without closing.', Error);
E('ERR_SERVER_NOT_RUNNING', 'Server is not running.', Error);
+E('ERR_SINGLE_EXECUTABLE_APPLICATION_ASSET_NOT_FOUND',
+ 'Cannot find asset %s for the single executable application', Error);
E('ERR_SOCKET_ALREADY_BOUND', 'Socket is already bound', Error);
E('ERR_SOCKET_BAD_BUFFER_SIZE',
'Buffer size must be a positive integer', TypeError);
diff --git a/lib/sea.js b/lib/sea.js
new file mode 100644
index 00000000000000..f7727014c4e3c9
--- /dev/null
+++ b/lib/sea.js
@@ -0,0 +1,76 @@
+'use strict';
+const {
+ ArrayBufferPrototypeSlice,
+} = primordials;
+
+const { isSea, getAsset: getAssetInternal } = internalBinding('sea');
+const { TextDecoder } = require('internal/encoding');
+const { validateString } = require('internal/validators');
+const {
+ ERR_NOT_IN_SINGLE_EXECUTABLE_APPLICATION,
+ ERR_SINGLE_EXECUTABLE_APPLICATION_ASSET_NOT_FOUND,
+} = require('internal/errors').codes;
+const { Blob } = require('internal/blob');
+
+/**
+ * Look for the asset in the injected SEA blob using the key. If
+ * no matching asset is found an error is thrown. The returned
+ * ArrayBuffer should not be mutated or otherwise the process
+ * can crash due to access violation.
+ * @param {string} key
+ * @returns {ArrayBuffer}
+ */
+function getRawAsset(key) {
+ validateString(key, 'key');
+
+ if (!isSea()) {
+ throw new ERR_NOT_IN_SINGLE_EXECUTABLE_APPLICATION();
+ }
+
+ const asset = getAssetInternal(key);
+ if (asset === undefined) {
+ throw new ERR_SINGLE_EXECUTABLE_APPLICATION_ASSET_NOT_FOUND(key);
+ }
+ return asset;
+}
+
+/**
+ * Look for the asset in the injected SEA blob using the key. If the
+ * encoding is specified, return a string decoded from it by TextDecoder,
+ * otherwise return *a copy* of the original data in an ArrayBuffer. If
+ * no matching asset is found an error is thrown.
+ * @param {string} key
+ * @param {string|undefined} encoding
+ * @returns {string|ArrayBuffer}
+ */
+function getAsset(key, encoding) {
+ if (encoding !== undefined) {
+ validateString(encoding, 'encoding');
+ }
+ const asset = getRawAsset(key);
+ if (encoding === undefined) {
+ return ArrayBufferPrototypeSlice(asset);
+ }
+ const decoder = new TextDecoder(encoding);
+ return decoder.decode(asset);
+}
+
+/**
+ * Look for the asset in the injected SEA blob using the key. If
+ * no matching asset is found an error is thrown. The data is returned
+ * in a Blob. If no matching asset is found an error is thrown.
+ * @param {string} key
+ * @param {ConstructorParameters[1]} [options]
+ * @returns {Blob}
+ */
+function getAssetAsBlob(key, options) {
+ const asset = getRawAsset(key);
+ return new Blob([asset], options);
+}
+
+module.exports = {
+ isSea,
+ getAsset,
+ getRawAsset,
+ getAssetAsBlob,
+};
diff --git a/src/blob_serializer_deserializer-inl.h b/src/blob_serializer_deserializer-inl.h
index 354d9267cf1f41..1d1204a96e6101 100644
--- a/src/blob_serializer_deserializer-inl.h
+++ b/src/blob_serializer_deserializer-inl.h
@@ -140,10 +140,11 @@ std::string_view BlobDeserializer::ReadStringView(StringLogMode mode) {
Debug("ReadStringView(), length=%zu: ", length);
std::string_view result(sink.data() + read_total, length);
- Debug("%p, read %zu bytes\n", result.data(), result.size());
+ Debug("%p, read %zu bytes", result.data(), result.size());
if (mode == StringLogMode::kAddressAndContent) {
- Debug("%s", result);
+ Debug(", content:%s%s", length > 32 ? "\n" : " ", result);
}
+ Debug("\n");
read_total += length;
return result;
diff --git a/src/json_parser.cc b/src/json_parser.cc
index 1b445193bc8ceb..878028d0d2dd61 100644
--- a/src/json_parser.cc
+++ b/src/json_parser.cc
@@ -4,6 +4,7 @@
#include "util-inl.h"
namespace node {
+using v8::Array;
using v8::Context;
using v8::Isolate;
using v8::Local;
@@ -101,4 +102,51 @@ std::optional JSONParser::GetTopLevelBoolField(std::string_view field) {
return value->BooleanValue(isolate);
}
+std::optional JSONParser::GetTopLevelStringDict(
+ std::string_view field) {
+ Isolate* isolate = isolate_.get();
+ v8::HandleScope handle_scope(isolate);
+ Local context = context_.Get(isolate);
+ Local