@cloudflare/sandbox 0.0.0-46eb4e6 → 0.0.0-485cf61

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (95) hide show
  1. package/CHANGELOG.md +0 -6
  2. package/Dockerfile +82 -18
  3. package/README.md +89 -824
  4. package/dist/chunk-3NEP4CNV.js +99 -0
  5. package/dist/chunk-3NEP4CNV.js.map +1 -0
  6. package/dist/chunk-6IYG2RIN.js +117 -0
  7. package/dist/chunk-6IYG2RIN.js.map +1 -0
  8. package/dist/chunk-HB44YO2A.js +2331 -0
  9. package/dist/chunk-HB44YO2A.js.map +1 -0
  10. package/dist/chunk-KPVMMMIP.js +105 -0
  11. package/dist/chunk-KPVMMMIP.js.map +1 -0
  12. package/dist/chunk-NNGBXDMY.js +89 -0
  13. package/dist/chunk-NNGBXDMY.js.map +1 -0
  14. package/dist/file-stream.d.ts +43 -0
  15. package/dist/file-stream.js +9 -0
  16. package/dist/file-stream.js.map +1 -0
  17. package/dist/index.d.ts +9 -0
  18. package/dist/index.js +55 -0
  19. package/dist/index.js.map +1 -0
  20. package/dist/interpreter.d.ts +33 -0
  21. package/dist/interpreter.js +8 -0
  22. package/dist/interpreter.js.map +1 -0
  23. package/dist/request-handler.d.ts +18 -0
  24. package/dist/request-handler.js +12 -0
  25. package/dist/request-handler.js.map +1 -0
  26. package/dist/sandbox-CtlKjZwf.d.ts +583 -0
  27. package/dist/sandbox.d.ts +4 -0
  28. package/dist/sandbox.js +12 -0
  29. package/dist/sandbox.js.map +1 -0
  30. package/dist/security.d.ts +35 -0
  31. package/dist/security.js +15 -0
  32. package/dist/security.js.map +1 -0
  33. package/dist/sse-parser.d.ts +28 -0
  34. package/dist/sse-parser.js +11 -0
  35. package/dist/sse-parser.js.map +1 -0
  36. package/package.json +11 -5
  37. package/src/clients/base-client.ts +297 -0
  38. package/src/clients/command-client.ts +118 -0
  39. package/src/clients/file-client.ts +272 -0
  40. package/src/clients/git-client.ts +95 -0
  41. package/src/clients/index.ts +63 -0
  42. package/src/{interpreter-client.ts → clients/interpreter-client.ts} +151 -171
  43. package/src/clients/port-client.ts +108 -0
  44. package/src/clients/process-client.ts +180 -0
  45. package/src/clients/sandbox-client.ts +41 -0
  46. package/src/clients/types.ts +81 -0
  47. package/src/clients/utility-client.ts +97 -0
  48. package/src/errors/adapter.ts +180 -0
  49. package/src/errors/classes.ts +469 -0
  50. package/src/errors/index.ts +105 -0
  51. package/src/file-stream.ts +119 -117
  52. package/src/index.ts +81 -69
  53. package/src/interpreter.ts +17 -8
  54. package/src/request-handler.ts +61 -7
  55. package/src/sandbox.ts +698 -495
  56. package/src/security.ts +20 -0
  57. package/startup.sh +7 -0
  58. package/tests/base-client.test.ts +328 -0
  59. package/tests/command-client.test.ts +407 -0
  60. package/tests/file-client.test.ts +643 -0
  61. package/tests/file-stream.test.ts +306 -0
  62. package/tests/git-client.test.ts +328 -0
  63. package/tests/port-client.test.ts +301 -0
  64. package/tests/process-client.test.ts +658 -0
  65. package/tests/sandbox.test.ts +465 -0
  66. package/tests/sse-parser.test.ts +291 -0
  67. package/tests/utility-client.test.ts +266 -0
  68. package/tests/wrangler.jsonc +35 -0
  69. package/tsconfig.json +9 -1
  70. package/vitest.config.ts +31 -0
  71. package/container_src/bun.lock +0 -76
  72. package/container_src/circuit-breaker.ts +0 -121
  73. package/container_src/control-process.ts +0 -784
  74. package/container_src/handler/exec.ts +0 -185
  75. package/container_src/handler/file.ts +0 -457
  76. package/container_src/handler/git.ts +0 -130
  77. package/container_src/handler/ports.ts +0 -314
  78. package/container_src/handler/process.ts +0 -568
  79. package/container_src/handler/session.ts +0 -92
  80. package/container_src/index.ts +0 -600
  81. package/container_src/interpreter-service.ts +0 -276
  82. package/container_src/isolation.ts +0 -1213
  83. package/container_src/mime-processor.ts +0 -255
  84. package/container_src/package.json +0 -18
  85. package/container_src/runtime/executors/javascript/node_executor.ts +0 -123
  86. package/container_src/runtime/executors/python/ipython_executor.py +0 -338
  87. package/container_src/runtime/executors/typescript/ts_executor.ts +0 -138
  88. package/container_src/runtime/process-pool.ts +0 -464
  89. package/container_src/shell-escape.ts +0 -42
  90. package/container_src/startup.sh +0 -11
  91. package/container_src/types.ts +0 -131
  92. package/src/client.ts +0 -1048
  93. package/src/errors.ts +0 -219
  94. package/src/interpreter-types.ts +0 -390
  95. package/src/types.ts +0 -571
@@ -1,600 +0,0 @@
1
- import { serve } from "bun";
2
- import {
3
- handleExecuteRequest,
4
- handleStreamingExecuteRequest,
5
- } from "./handler/exec";
6
- import {
7
- handleDeleteFileRequest,
8
- handleListFilesRequest,
9
- handleMkdirRequest,
10
- handleMoveFileRequest,
11
- handleReadFileRequest,
12
- handleReadFileStreamRequest,
13
- handleRenameFileRequest,
14
- handleWriteFileRequest,
15
- } from "./handler/file";
16
- import { handleGitCheckoutRequest } from "./handler/git";
17
- import {
18
- handleExposePortRequest,
19
- handleGetExposedPortsRequest,
20
- handleProxyRequest,
21
- handleUnexposePortRequest,
22
- } from "./handler/ports";
23
- import {
24
- handleGetProcessLogsRequest,
25
- handleGetProcessRequest,
26
- handleKillAllProcessesRequest,
27
- handleKillProcessRequest,
28
- handleListProcessesRequest,
29
- handleStartProcessRequest,
30
- handleStreamProcessLogsRequest,
31
- } from "./handler/process";
32
- import { handleCreateSession, handleListSessions } from "./handler/session";
33
- import type { CreateContextRequest } from "./interpreter-service";
34
- import {
35
- InterpreterNotReadyError,
36
- InterpreterService,
37
- } from "./interpreter-service";
38
- import { hasNamespaceSupport, SessionManager } from "./isolation";
39
-
40
- // In-memory storage for exposed ports
41
- const exposedPorts = new Map<number, { name?: string; exposedAt: Date }>();
42
-
43
- // Check isolation capabilities on startup
44
- const isolationAvailable = hasNamespaceSupport();
45
- console.log(
46
- `[Container] Process isolation: ${
47
- isolationAvailable
48
- ? "ENABLED (production mode)"
49
- : "DISABLED (development mode)"
50
- }`
51
- );
52
-
53
- // Session manager for secure execution with isolation
54
- const sessionManager = new SessionManager();
55
-
56
- // Graceful shutdown handler
57
- const SHUTDOWN_GRACE_PERIOD_MS = 5000; // Grace period for cleanup (5 seconds for proper async cleanup)
58
-
59
- process.on("SIGTERM", async () => {
60
- console.log("[Container] SIGTERM received, cleaning up sessions...");
61
- await sessionManager.destroyAll();
62
- setTimeout(() => {
63
- process.exit(0);
64
- }, SHUTDOWN_GRACE_PERIOD_MS);
65
- });
66
-
67
- process.on("SIGINT", async () => {
68
- console.log("[Container] SIGINT received, cleaning up sessions...");
69
- await sessionManager.destroyAll();
70
- setTimeout(() => {
71
- process.exit(0);
72
- }, SHUTDOWN_GRACE_PERIOD_MS);
73
- });
74
-
75
- // Cleanup on uncaught exceptions (log but still exit)
76
- process.on("uncaughtException", async (error) => {
77
- console.error("[Container] Uncaught exception:", error);
78
- await sessionManager.destroyAll();
79
- process.exit(1);
80
- });
81
-
82
- // Initialize interpreter service
83
- const interpreterService = new InterpreterService();
84
-
85
- // No initialization needed - service is ready immediately!
86
- console.log("[Container] Interpreter service ready - no cold start!");
87
- console.log("[Container] All API endpoints available immediately");
88
-
89
- const server = serve({
90
- async fetch(req: Request) {
91
- const url = new URL(req.url);
92
- const pathname = url.pathname;
93
-
94
- console.log(`[Container] Incoming ${req.method} request to ${pathname}`);
95
-
96
- // Handle CORS
97
- const corsHeaders = {
98
- "Access-Control-Allow-Headers": "Content-Type, Authorization",
99
- "Access-Control-Allow-Methods": "GET, POST, PUT, DELETE, OPTIONS",
100
- "Access-Control-Allow-Origin": "*",
101
- };
102
-
103
- // Handle preflight requests
104
- if (req.method === "OPTIONS") {
105
- console.log(`[Container] Handling CORS preflight for ${pathname}`);
106
- return new Response(null, { headers: corsHeaders, status: 200 });
107
- }
108
-
109
- try {
110
- // Handle different routes
111
- console.log(`[Container] Processing ${req.method} ${pathname}`);
112
- switch (pathname) {
113
- case "/":
114
- return new Response("Hello from Bun server! 🚀", {
115
- headers: {
116
- "Content-Type": "text/plain; charset=utf-8",
117
- ...corsHeaders,
118
- },
119
- });
120
-
121
- case "/api/session/create":
122
- if (req.method === "POST") {
123
- return handleCreateSession(req, corsHeaders, sessionManager);
124
- }
125
- break;
126
-
127
- case "/api/session/list":
128
- if (req.method === "GET") {
129
- return handleListSessions(corsHeaders, sessionManager);
130
- }
131
- break;
132
-
133
- case "/api/execute":
134
- if (req.method === "POST") {
135
- return handleExecuteRequest(req, corsHeaders, sessionManager);
136
- }
137
- break;
138
-
139
- case "/api/execute/stream":
140
- if (req.method === "POST") {
141
- return handleStreamingExecuteRequest(
142
- req,
143
- sessionManager,
144
- corsHeaders
145
- );
146
- }
147
- break;
148
-
149
- case "/api/ping":
150
- if (req.method === "GET") {
151
- const health = await interpreterService.getHealthStatus();
152
- return new Response(
153
- JSON.stringify({
154
- message: "pong",
155
- timestamp: new Date().toISOString(),
156
- system: "interpreter (70x faster)",
157
- status: health.ready ? "ready" : "initializing",
158
- progress: health.progress,
159
- }),
160
- {
161
- headers: {
162
- "Content-Type": "application/json",
163
- ...corsHeaders,
164
- },
165
- }
166
- );
167
- }
168
- break;
169
-
170
- case "/api/git/checkout":
171
- if (req.method === "POST") {
172
- return handleGitCheckoutRequest(req, corsHeaders, sessionManager);
173
- }
174
- break;
175
-
176
- case "/api/mkdir":
177
- if (req.method === "POST") {
178
- return handleMkdirRequest(req, corsHeaders, sessionManager);
179
- }
180
- break;
181
-
182
- case "/api/write":
183
- if (req.method === "POST") {
184
- return handleWriteFileRequest(req, corsHeaders, sessionManager);
185
- }
186
- break;
187
-
188
- case "/api/read":
189
- if (req.method === "POST") {
190
- return handleReadFileRequest(req, corsHeaders, sessionManager);
191
- }
192
- break;
193
-
194
- case "/api/read/stream":
195
- if (req.method === "POST") {
196
- return handleReadFileStreamRequest(req, corsHeaders, sessionManager);
197
- }
198
- break;
199
-
200
- case "/api/delete":
201
- if (req.method === "POST") {
202
- return handleDeleteFileRequest(req, corsHeaders, sessionManager);
203
- }
204
- break;
205
-
206
- case "/api/rename":
207
- if (req.method === "POST") {
208
- return handleRenameFileRequest(req, corsHeaders, sessionManager);
209
- }
210
- break;
211
-
212
- case "/api/move":
213
- if (req.method === "POST") {
214
- return handleMoveFileRequest(req, corsHeaders, sessionManager);
215
- }
216
- break;
217
-
218
- case "/api/list-files":
219
- if (req.method === "POST") {
220
- return handleListFilesRequest(req, corsHeaders, sessionManager);
221
- }
222
- break;
223
-
224
- case "/api/expose-port":
225
- if (req.method === "POST") {
226
- return handleExposePortRequest(exposedPorts, req, corsHeaders);
227
- }
228
- break;
229
-
230
- case "/api/unexpose-port":
231
- if (req.method === "DELETE") {
232
- return handleUnexposePortRequest(exposedPorts, req, corsHeaders);
233
- }
234
- break;
235
-
236
- case "/api/exposed-ports":
237
- if (req.method === "GET") {
238
- return handleGetExposedPortsRequest(exposedPorts, req, corsHeaders);
239
- }
240
- break;
241
-
242
- case "/api/process/start":
243
- if (req.method === "POST") {
244
- return handleStartProcessRequest(req, corsHeaders, sessionManager);
245
- }
246
- break;
247
-
248
- case "/api/process/list":
249
- if (req.method === "GET") {
250
- return handleListProcessesRequest(req, corsHeaders, sessionManager);
251
- }
252
- break;
253
-
254
- case "/api/process/kill-all":
255
- if (req.method === "DELETE") {
256
- return handleKillAllProcessesRequest(
257
- req,
258
- corsHeaders,
259
- sessionManager
260
- );
261
- }
262
- break;
263
-
264
- case "/api/contexts":
265
- if (req.method === "POST") {
266
- try {
267
- const body = (await req.json()) as CreateContextRequest;
268
- const context = await interpreterService.createContext(body);
269
- return new Response(
270
- JSON.stringify({
271
- id: context.id,
272
- language: context.language,
273
- cwd: context.cwd,
274
- createdAt: context.createdAt,
275
- lastUsed: context.lastUsed,
276
- }),
277
- {
278
- headers: {
279
- "Content-Type": "application/json",
280
- ...corsHeaders,
281
- },
282
- }
283
- );
284
- } catch (error) {
285
- if (error instanceof InterpreterNotReadyError) {
286
- console.log(
287
- `[Container] Request timed out waiting for interpreter (${error.progress}% complete)`
288
- );
289
- return new Response(
290
- JSON.stringify({
291
- error: error.message,
292
- status: "initializing",
293
- progress: error.progress,
294
- }),
295
- {
296
- status: 503,
297
- headers: {
298
- "Content-Type": "application/json",
299
- "Retry-After": String(error.retryAfter),
300
- ...corsHeaders,
301
- },
302
- }
303
- );
304
- }
305
-
306
- // Check if it's a circuit breaker error
307
- if (
308
- error instanceof Error &&
309
- error.message.includes("Circuit breaker is open")
310
- ) {
311
- console.log(
312
- "[Container] Circuit breaker is open:",
313
- error.message
314
- );
315
- return new Response(
316
- JSON.stringify({
317
- error:
318
- "Service temporarily unavailable due to high error rate. Please try again later.",
319
- status: "circuit_open",
320
- details: error.message,
321
- }),
322
- {
323
- status: 503,
324
- headers: {
325
- "Content-Type": "application/json",
326
- "Retry-After": "60",
327
- ...corsHeaders,
328
- },
329
- }
330
- );
331
- }
332
-
333
- // Only log actual errors with stack traces
334
- console.error("[Container] Error creating context:", error);
335
- return new Response(
336
- JSON.stringify({
337
- error:
338
- error instanceof Error
339
- ? error.message
340
- : "Failed to create context",
341
- }),
342
- {
343
- status: 500,
344
- headers: {
345
- "Content-Type": "application/json",
346
- ...corsHeaders,
347
- },
348
- }
349
- );
350
- }
351
- } else if (req.method === "GET") {
352
- const contexts = await interpreterService.listContexts();
353
- return new Response(JSON.stringify({ contexts }), {
354
- headers: {
355
- "Content-Type": "application/json",
356
- ...corsHeaders,
357
- },
358
- });
359
- }
360
- break;
361
-
362
- case "/api/execute/code":
363
- if (req.method === "POST") {
364
- try {
365
- const body = (await req.json()) as {
366
- context_id: string;
367
- code: string;
368
- language?: string;
369
- };
370
- return await interpreterService.executeCode(
371
- body.context_id,
372
- body.code,
373
- body.language
374
- );
375
- } catch (error) {
376
- // Check if it's a circuit breaker error
377
- if (
378
- error instanceof Error &&
379
- error.message.includes("Circuit breaker is open")
380
- ) {
381
- console.log(
382
- "[Container] Circuit breaker is open for code execution:",
383
- error.message
384
- );
385
- return new Response(
386
- JSON.stringify({
387
- error:
388
- "Service temporarily unavailable due to high error rate. Please try again later.",
389
- status: "circuit_open",
390
- details: error.message,
391
- }),
392
- {
393
- status: 503,
394
- headers: {
395
- "Content-Type": "application/json",
396
- "Retry-After": "30",
397
- ...corsHeaders,
398
- },
399
- }
400
- );
401
- }
402
-
403
- // Don't log stack traces for expected initialization state
404
- if (
405
- error instanceof Error &&
406
- error.message.includes("initializing")
407
- ) {
408
- console.log(
409
- "[Container] Code execution deferred - service still initializing"
410
- );
411
- } else {
412
- console.error("[Container] Error executing code:", error);
413
- }
414
- // Error response is already handled by service.executeCode for not ready state
415
- return new Response(
416
- JSON.stringify({
417
- error:
418
- error instanceof Error
419
- ? error.message
420
- : "Failed to execute code",
421
- }),
422
- {
423
- status: 500,
424
- headers: {
425
- "Content-Type": "application/json",
426
- ...corsHeaders,
427
- },
428
- }
429
- );
430
- }
431
- }
432
- break;
433
-
434
- default:
435
- // Handle dynamic routes for contexts
436
- if (
437
- pathname.startsWith("/api/contexts/") &&
438
- pathname.split("/").length === 4
439
- ) {
440
- const contextId = pathname.split("/")[3];
441
- if (req.method === "DELETE") {
442
- try {
443
- await interpreterService.deleteContext(contextId);
444
- return new Response(JSON.stringify({ success: true }), {
445
- headers: {
446
- "Content-Type": "application/json",
447
- ...corsHeaders,
448
- },
449
- });
450
- } catch (error) {
451
- if (error instanceof InterpreterNotReadyError) {
452
- console.log(
453
- `[Container] Request timed out waiting for interpreter (${error.progress}% complete)`
454
- );
455
- return new Response(
456
- JSON.stringify({
457
- error: error.message,
458
- status: "initializing",
459
- progress: error.progress,
460
- }),
461
- {
462
- status: 503,
463
- headers: {
464
- "Content-Type": "application/json",
465
- "Retry-After": "5",
466
- ...corsHeaders,
467
- },
468
- }
469
- );
470
- }
471
- return new Response(
472
- JSON.stringify({
473
- error:
474
- error instanceof Error
475
- ? error.message
476
- : "Failed to delete context",
477
- }),
478
- {
479
- status:
480
- error instanceof Error &&
481
- error.message.includes("not found")
482
- ? 404
483
- : 500,
484
- headers: {
485
- "Content-Type": "application/json",
486
- ...corsHeaders,
487
- },
488
- }
489
- );
490
- }
491
- }
492
- }
493
-
494
- // Handle dynamic routes for individual processes
495
- if (pathname.startsWith("/api/process/")) {
496
- const segments = pathname.split("/");
497
- if (segments.length >= 4) {
498
- const processId = segments[3];
499
- const action = segments[4]; // Optional: logs, stream, etc.
500
-
501
- if (!action && req.method === "GET") {
502
- return handleGetProcessRequest(
503
- req,
504
- corsHeaders,
505
- processId,
506
- sessionManager
507
- );
508
- } else if (!action && req.method === "DELETE") {
509
- return handleKillProcessRequest(
510
- req,
511
- corsHeaders,
512
- processId,
513
- sessionManager
514
- );
515
- } else if (action === "logs" && req.method === "GET") {
516
- return handleGetProcessLogsRequest(
517
- req,
518
- corsHeaders,
519
- processId,
520
- sessionManager
521
- );
522
- } else if (action === "stream" && req.method === "GET") {
523
- return handleStreamProcessLogsRequest(
524
- req,
525
- corsHeaders,
526
- processId,
527
- sessionManager
528
- );
529
- }
530
- }
531
- }
532
- // Check if this is a proxy request for an exposed port
533
- if (pathname.startsWith("/proxy/")) {
534
- return handleProxyRequest(exposedPorts, req, corsHeaders);
535
- }
536
-
537
- console.log(`[Container] Route not found: ${pathname}`);
538
- return new Response("Not Found", {
539
- headers: corsHeaders,
540
- status: 404,
541
- });
542
- }
543
- } catch (error) {
544
- console.error(
545
- `[Container] Error handling ${req.method} ${pathname}:`,
546
- error
547
- );
548
- return new Response(
549
- JSON.stringify({
550
- error: "Internal server error",
551
- message: error instanceof Error ? error.message : "Unknown error",
552
- }),
553
- {
554
- headers: {
555
- "Content-Type": "application/json",
556
- ...corsHeaders,
557
- },
558
- status: 500,
559
- }
560
- );
561
- }
562
- },
563
- hostname: "0.0.0.0",
564
- port: 3000,
565
- // We don't need this, but typescript complains
566
- websocket: { async message() {} },
567
- });
568
-
569
- console.log(`🚀 Bun server running on http://0.0.0.0:${server.port}`);
570
- console.log(`📡 HTTP API endpoints available:`);
571
- console.log(` POST /api/session/create - Create a new session`);
572
- console.log(` GET /api/session/list - List all sessions`);
573
- console.log(` POST /api/execute - Execute a command (non-streaming)`);
574
- console.log(` POST /api/execute/stream - Execute a command (streaming)`);
575
- console.log(` POST /api/git/checkout - Checkout a git repository`);
576
- console.log(` POST /api/mkdir - Create a directory`);
577
- console.log(` POST /api/write - Write a file`);
578
- console.log(` POST /api/read - Read a file`);
579
- console.log(` POST /api/read/stream - Stream a file (SSE)`);
580
- console.log(` POST /api/delete - Delete a file`);
581
- console.log(` POST /api/rename - Rename a file`);
582
- console.log(` POST /api/move - Move a file`);
583
- console.log(` POST /api/expose-port - Expose a port for external access`);
584
- console.log(` DELETE /api/unexpose-port - Unexpose a port`);
585
- console.log(` GET /api/exposed-ports - List exposed ports`);
586
- console.log(` POST /api/process/start - Start a background process`);
587
- console.log(` GET /api/process/list - List all processes`);
588
- console.log(` GET /api/process/{id} - Get process status`);
589
- console.log(` DELETE /api/process/{id} - Kill a process`);
590
- console.log(` GET /api/process/{id}/logs - Get process logs`);
591
- console.log(` GET /api/process/{id}/stream - Stream process logs (SSE)`);
592
- console.log(` DELETE /api/process/kill-all - Kill all processes`);
593
- console.log(` GET /proxy/{port}/* - Proxy requests to exposed ports`);
594
- console.log(` POST /api/contexts - Create a code execution context`);
595
- console.log(` GET /api/contexts - List all contexts`);
596
- console.log(` DELETE /api/contexts/{id} - Delete a context`);
597
- console.log(
598
- ` POST /api/execute/code - Execute code in a context (streaming)`
599
- );
600
- console.log(` GET /api/ping - Health check`);