@cloudflare/sandbox 0.0.0-8a93d0c → 0.0.0-8c1f440
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/CHANGELOG.md +139 -0
- package/Dockerfile +109 -50
- package/README.md +91 -487
- package/dist/chunk-BFVUNTP4.js +104 -0
- package/dist/chunk-BFVUNTP4.js.map +1 -0
- package/dist/chunk-EKSWCBCA.js +86 -0
- package/dist/chunk-EKSWCBCA.js.map +1 -0
- package/dist/chunk-EXQOIRZI.js +2351 -0
- package/dist/chunk-EXQOIRZI.js.map +1 -0
- package/dist/chunk-JXZMAU2C.js +559 -0
- package/dist/chunk-JXZMAU2C.js.map +1 -0
- package/dist/chunk-Z532A7QC.js +78 -0
- package/dist/chunk-Z532A7QC.js.map +1 -0
- package/dist/file-stream.d.ts +43 -0
- package/dist/file-stream.js +9 -0
- package/dist/file-stream.js.map +1 -0
- package/dist/index.d.ts +9 -0
- package/dist/index.js +66 -0
- package/dist/index.js.map +1 -0
- package/dist/interpreter.d.ts +33 -0
- package/dist/interpreter.js +8 -0
- package/dist/interpreter.js.map +1 -0
- package/dist/request-handler.d.ts +18 -0
- package/dist/request-handler.js +12 -0
- package/dist/request-handler.js.map +1 -0
- package/dist/sandbox-D9K2ypln.d.ts +583 -0
- package/dist/sandbox.d.ts +4 -0
- package/dist/sandbox.js +12 -0
- package/dist/sandbox.js.map +1 -0
- package/dist/security.d.ts +31 -0
- package/dist/security.js +13 -0
- package/dist/security.js.map +1 -0
- package/dist/sse-parser.d.ts +28 -0
- package/dist/sse-parser.js +11 -0
- package/dist/sse-parser.js.map +1 -0
- package/package.json +13 -5
- package/src/clients/base-client.ts +280 -0
- package/src/clients/command-client.ts +115 -0
- package/src/clients/file-client.ts +269 -0
- package/src/clients/git-client.ts +92 -0
- package/src/clients/index.ts +63 -0
- package/src/clients/interpreter-client.ts +329 -0
- package/src/clients/port-client.ts +105 -0
- package/src/clients/process-client.ts +177 -0
- package/src/clients/sandbox-client.ts +41 -0
- package/src/clients/types.ts +84 -0
- package/src/clients/utility-client.ts +94 -0
- package/src/errors/adapter.ts +180 -0
- package/src/errors/classes.ts +469 -0
- package/src/errors/index.ts +105 -0
- package/src/file-stream.ts +164 -0
- package/src/index.ts +85 -12
- package/src/interpreter.ts +159 -0
- package/src/request-handler.ts +69 -43
- package/src/sandbox.ts +558 -292
- package/src/security.ts +14 -23
- package/src/sse-parser.ts +4 -8
- package/startup.sh +3 -0
- package/tests/base-client.test.ts +328 -0
- package/tests/command-client.test.ts +407 -0
- package/tests/file-client.test.ts +643 -0
- package/tests/file-stream.test.ts +306 -0
- package/tests/git-client.test.ts +328 -0
- package/tests/port-client.test.ts +301 -0
- package/tests/process-client.test.ts +658 -0
- package/tests/sandbox.test.ts +465 -0
- package/tests/sse-parser.test.ts +290 -0
- package/tests/utility-client.test.ts +266 -0
- package/tests/wrangler.jsonc +35 -0
- package/tsconfig.json +9 -1
- package/vitest.config.ts +31 -0
- package/container_src/handler/exec.ts +0 -340
- package/container_src/handler/file.ts +0 -844
- package/container_src/handler/git.ts +0 -182
- package/container_src/handler/ports.ts +0 -314
- package/container_src/handler/process.ts +0 -640
- package/container_src/index.ts +0 -361
- package/container_src/package.json +0 -9
- package/container_src/types.ts +0 -108
- package/src/client.ts +0 -1038
- package/src/types.ts +0 -386
package/README.md
CHANGED
|
@@ -1,530 +1,126 @@
|
|
|
1
|
-
<
|
|
2
|
-
<h1>📦 Cloudflare Sandbox SDK</h1>
|
|
3
|
-
<h3><strong>Run sandboxed code environments on Cloudflare's edge network</strong></h3>
|
|
4
|
-
<p>
|
|
5
|
-
<a href="https://www.npmjs.com/package/@cloudflare/sandbox"><img src="https://img.shields.io/npm/v/@cloudflare/sandbox.svg" alt="npm version"></a>
|
|
6
|
-
<a href="https://github.com/cloudflare/sandbox-sdk"><img src="https://img.shields.io/badge/status-experimental-orange.svg" alt="status"></a>
|
|
7
|
-
</p>
|
|
8
|
-
</div>
|
|
9
|
-
|
|
10
|
-
<!-- START doctoc generated TOC please keep comment here to allow auto update -->
|
|
11
|
-
<!-- DON'T EDIT THIS SECTION, INSTEAD RE-RUN doctoc TO UPDATE -->
|
|
12
|
-
|
|
13
|
-
- [✨ Overview](#overview)
|
|
14
|
-
- [🎯 Features](#features)
|
|
15
|
-
- [🚀 Quick Start](#quick-start)
|
|
16
|
-
- [Installation](#installation)
|
|
17
|
-
- [Basic Setup](#basic-setup)
|
|
18
|
-
- [📚 API Reference](#api-reference)
|
|
19
|
-
- [Core Methods](#core-methods)
|
|
20
|
-
- [🌐 Port Forwarding](#port-forwarding)
|
|
21
|
-
- [Utility Methods](#utility-methods)
|
|
22
|
-
- [💡 Examples](#examples)
|
|
23
|
-
- [Run a Node.js App](#run-a-nodejs-app)
|
|
24
|
-
- [Build and Test Code](#build-and-test-code)
|
|
25
|
-
- [Interactive Development Environment](#interactive-development-environment)
|
|
26
|
-
- [Expose Services with Preview URLs](#expose-services-with-preview-urls)
|
|
27
|
-
- [🏗️ Architecture](#architecture)
|
|
28
|
-
- [🛠️ Advanced Usage](#advanced-usage)
|
|
29
|
-
- [AsyncIterable Streaming Support](#asynciterable-streaming-support)
|
|
30
|
-
- [Session Management](#session-management)
|
|
31
|
-
- [🔍 Debugging](#debugging)
|
|
32
|
-
- [🚧 Known Limitations](#known-limitations)
|
|
33
|
-
- [🤝 Contributing](#contributing)
|
|
34
|
-
- [📄 License](#license)
|
|
35
|
-
- [🙌 Acknowledgments](#acknowledgments)
|
|
36
|
-
|
|
37
|
-
<!-- END doctoc generated TOC please keep comment here to allow auto update -->
|
|
38
|
-
|
|
39
|
-
<h2 id="overview">✨ Overview</h2>
|
|
40
|
-
|
|
41
|
-
The Cloudflare Sandbox SDK enables you to run isolated code environments directly on Cloudflare's edge network using Durable Objects and the Cloudflare Containers. Execute commands, manage files, run services, and expose them via public URLs - all within secure, sandboxed containers.
|
|
42
|
-
|
|
43
|
-
<h2 id="features">🎯 Features</h2>
|
|
44
|
-
|
|
45
|
-
- **🔒 Secure Isolation**: Each sandbox runs in its own container with full process isolation
|
|
46
|
-
- **⚡ Edge-Native**: Runs on Cloudflare's global network for low latency worldwide
|
|
47
|
-
- **📁 File System Access**: Read, write, and manage files within the sandbox
|
|
48
|
-
- **🔧 Command Execution**: Run any command or process inside the container
|
|
49
|
-
- **🌐 Preview URLs**: Expose services running in your sandbox via public URLs
|
|
50
|
-
- **🔄 Git Integration**: Clone repositories directly into sandboxes
|
|
51
|
-
- **🚀 Streaming Support**: Real-time output streaming for long-running commands
|
|
52
|
-
- **🎮 Session Management**: Maintain state across multiple operations
|
|
53
|
-
|
|
54
|
-
<h2 id="quick-start">🚀 Quick Start</h2>
|
|
55
|
-
|
|
56
|
-
### Installation
|
|
1
|
+
<img width="1362" height="450" alt="Image" src="https://github.com/user-attachments/assets/6f770ae3-0a14-4d2b-9aed-a304ee5446c5" />
|
|
57
2
|
|
|
58
|
-
|
|
59
|
-
npm install @cloudflare/sandbox
|
|
60
|
-
```
|
|
61
|
-
|
|
62
|
-
### Basic Setup
|
|
63
|
-
|
|
64
|
-
1. **Create a Dockerfile** (temporary requirement, will be removed in future releases):
|
|
65
|
-
|
|
66
|
-
```dockerfile
|
|
67
|
-
FROM docker.io/cloudflare/sandbox:0.1.4
|
|
68
|
-
|
|
69
|
-
# Expose the ports you want to expose
|
|
70
|
-
EXPOSE 3000
|
|
71
|
-
```
|
|
72
|
-
|
|
73
|
-
2. **Configure wrangler.json**:
|
|
3
|
+
# Cloudflare Sandbox SDK
|
|
74
4
|
|
|
75
|
-
|
|
5
|
+
[](https://www.npmjs.com/package/@cloudflare/sandbox)
|
|
76
6
|
|
|
77
|
-
|
|
78
|
-
{
|
|
79
|
-
// ...
|
|
80
|
-
"containers": [
|
|
81
|
-
{
|
|
82
|
-
"class_name": "Sandbox",
|
|
83
|
-
"image": "./Dockerfile",
|
|
84
|
-
"max_instances": 1
|
|
85
|
-
}
|
|
86
|
-
],
|
|
87
|
-
"durable_objects": {
|
|
88
|
-
"bindings": [
|
|
89
|
-
{
|
|
90
|
-
"class_name": "Sandbox",
|
|
91
|
-
"name": "Sandbox"
|
|
92
|
-
}
|
|
93
|
-
]
|
|
94
|
-
},
|
|
95
|
-
"migrations": [
|
|
96
|
-
{
|
|
97
|
-
"new_sqlite_classes": ["Sandbox"],
|
|
98
|
-
"tag": "v1"
|
|
99
|
-
}
|
|
100
|
-
]
|
|
101
|
-
}
|
|
102
|
-
```
|
|
103
|
-
|
|
104
|
-
3. **Create your Worker**:
|
|
7
|
+
**Build secure, isolated code execution environments on Cloudflare.**
|
|
105
8
|
|
|
106
|
-
|
|
107
|
-
import { getSandbox } from "@cloudflare/sandbox";
|
|
9
|
+
The Sandbox SDK lets you run untrusted code safely in isolated containers. Execute commands, manage files, run background processes, and expose services — all from your Workers applications.
|
|
108
10
|
|
|
109
|
-
|
|
110
|
-
export { Sandbox } from "@cloudflare/sandbox";
|
|
11
|
+
Perfect for AI code execution, interactive development environments, data analysis platforms, CI/CD systems, and any application that needs secure code execution at the edge.
|
|
111
12
|
|
|
112
|
-
|
|
113
|
-
async fetch(request: Request, env: Env) {
|
|
114
|
-
const sandbox = getSandbox(env.Sandbox, "my-sandbox");
|
|
13
|
+
> **Note:** The latest published version of the SDK is on the [v03 branch](https://github.com/cloudflare/sandbox-sdk/tree/v03). This main branch is currently the development version and is not yet published.
|
|
115
14
|
|
|
116
|
-
|
|
117
|
-
const result = await sandbox.exec("echo 'Hello from the edge!'");
|
|
118
|
-
return new Response(result.stdout);
|
|
119
|
-
},
|
|
120
|
-
};
|
|
121
|
-
```
|
|
15
|
+
## Getting Started
|
|
122
16
|
|
|
123
|
-
|
|
17
|
+
### Prerequisites
|
|
124
18
|
|
|
125
|
-
|
|
19
|
+
1. Install [Node.js](https://docs.npmjs.com/downloading-and-installing-node-js-and-npm) (version 16.17.0 or later)
|
|
20
|
+
2. Ensure Docker is running locally
|
|
21
|
+
3. For deploying to production, sign up for a [Cloudflare account](https://dash.cloudflare.com/sign-up/workers-and-pages)
|
|
126
22
|
|
|
127
|
-
|
|
23
|
+
### 1. Create a new project
|
|
128
24
|
|
|
129
|
-
|
|
25
|
+
Create a new Sandbox SDK project using the minimal template:
|
|
130
26
|
|
|
131
|
-
```
|
|
132
|
-
|
|
133
|
-
|
|
134
|
-
console.log(result.stdout, result.exitCode);
|
|
135
|
-
|
|
136
|
-
// With streaming callbacks
|
|
137
|
-
const result = await sandbox.exec("npm run build", {
|
|
138
|
-
stream: true,
|
|
139
|
-
onOutput: (stream, data) => console.log(`[${stream}] ${data}`)
|
|
140
|
-
});
|
|
27
|
+
```bash
|
|
28
|
+
npm create cloudflare@latest -- my-sandbox --template=cloudflare/sandbox-sdk/examples/minimal
|
|
29
|
+
cd my-sandbox
|
|
141
30
|
```
|
|
142
31
|
|
|
143
|
-
|
|
144
|
-
|
|
145
|
-
```typescript
|
|
146
|
-
import { parseSSEStream, type ExecEvent } from '@cloudflare/sandbox';
|
|
147
|
-
|
|
148
|
-
const stream = await sandbox.execStream("npm run test");
|
|
149
|
-
for await (const event of parseSSEStream<ExecEvent>(stream)) {
|
|
150
|
-
switch (event.type) {
|
|
151
|
-
case 'stdout':
|
|
152
|
-
console.log(`Test output: ${event.data}`);
|
|
153
|
-
break;
|
|
154
|
-
case 'complete':
|
|
155
|
-
console.log(`Tests ${event.exitCode === 0 ? 'passed' : 'failed'}`);
|
|
156
|
-
break;
|
|
157
|
-
}
|
|
158
|
-
}
|
|
159
|
-
```
|
|
32
|
+
### 2. Test locally
|
|
160
33
|
|
|
161
|
-
|
|
34
|
+
Start the development server:
|
|
162
35
|
|
|
163
|
-
```
|
|
164
|
-
|
|
165
|
-
console.log(`Started process ${process.id} with PID ${process.pid}`);
|
|
166
|
-
|
|
167
|
-
// Monitor the process
|
|
168
|
-
const logStream = await sandbox.streamProcessLogs(process.id);
|
|
169
|
-
for await (const log of parseSSEStream<LogEvent>(logStream)) {
|
|
170
|
-
console.log(`Server: ${log.data}`);
|
|
171
|
-
}
|
|
36
|
+
```bash
|
|
37
|
+
npm run dev
|
|
172
38
|
```
|
|
173
39
|
|
|
174
|
-
|
|
40
|
+
> **Note:** First run builds the Docker container (2-3 minutes). Subsequent runs are much faster.
|
|
175
41
|
|
|
176
|
-
|
|
42
|
+
Test the endpoints:
|
|
177
43
|
|
|
178
|
-
```
|
|
179
|
-
|
|
180
|
-
|
|
181
|
-
|
|
182
|
-
#### `readFile(path, options?)`
|
|
183
|
-
|
|
184
|
-
Read a file from the sandbox.
|
|
44
|
+
```bash
|
|
45
|
+
# Execute Python code
|
|
46
|
+
curl http://localhost:8787/run
|
|
185
47
|
|
|
186
|
-
|
|
187
|
-
|
|
188
|
-
console.log(file.content);
|
|
48
|
+
# File operations
|
|
49
|
+
curl http://localhost:8787/file
|
|
189
50
|
```
|
|
190
51
|
|
|
191
|
-
|
|
52
|
+
### 3. Deploy to production
|
|
192
53
|
|
|
193
|
-
|
|
54
|
+
Deploy your Worker and container:
|
|
194
55
|
|
|
195
|
-
```
|
|
196
|
-
|
|
197
|
-
branch: "main",
|
|
198
|
-
targetDir: "my-project",
|
|
199
|
-
});
|
|
56
|
+
```bash
|
|
57
|
+
npx wrangler deploy
|
|
200
58
|
```
|
|
201
59
|
|
|
202
|
-
|
|
60
|
+
> **Wait for provisioning:** After first deployment, wait 2-3 minutes before making requests.
|
|
203
61
|
|
|
204
|
-
|
|
62
|
+
**📖 [View the complete getting started guide](https://developers.cloudflare.com/sandbox/get-started/)** for detailed instructions and explanations.
|
|
205
63
|
|
|
206
|
-
|
|
207
|
-
for that instance.
|
|
64
|
+
## Quick API Example
|
|
208
65
|
|
|
209
66
|
```typescript
|
|
210
|
-
|
|
211
|
-
|
|
212
|
-
// Set environment variables FIRST, before any other operations
|
|
213
|
-
await sandbox.setEnvVars({
|
|
214
|
-
NODE_ENV: "production",
|
|
215
|
-
API_KEY: "your-api-key",
|
|
216
|
-
DATABASE_URL: "postgresql://localhost:5432/mydb"
|
|
217
|
-
});
|
|
218
|
-
|
|
219
|
-
// Now you can run commands - environment variables are available
|
|
220
|
-
const result = await sandbox.exec("echo $NODE_ENV");
|
|
221
|
-
console.log(result.stdout); // "production"
|
|
222
|
-
```
|
|
223
|
-
|
|
224
|
-
#### Process Management
|
|
225
|
-
|
|
226
|
-
- `listProcesses()` - List all running processes
|
|
227
|
-
- `getProcess(id)` - Get detailed process status
|
|
228
|
-
- `killProcess(id, signal?)` - Terminate specific processes
|
|
229
|
-
- `killAllProcesses()` - Kill all processes
|
|
230
|
-
- `streamProcessLogs(id, options?)` - Stream logs from running processes
|
|
231
|
-
- `getProcessLogs(id)` - Get accumulated process output
|
|
232
|
-
|
|
233
|
-
#### File System Methods
|
|
234
|
-
|
|
235
|
-
- `writeFile(path, content, options?)` - Write content to a file
|
|
236
|
-
- `readFile(path, options?)` - Read a file from the sandbox
|
|
237
|
-
- `mkdir(path, options?)` - Create a directory
|
|
238
|
-
- `deleteFile(path)` - Delete a file
|
|
239
|
-
- `renameFile(oldPath, newPath)` - Rename a file
|
|
240
|
-
- `moveFile(sourcePath, destinationPath)` - Move a file
|
|
241
|
-
- `gitCheckout(repoUrl, options?)` - Clone git repositories
|
|
242
|
-
|
|
243
|
-
#### Network Methods
|
|
244
|
-
|
|
245
|
-
- `exposePort(port, options?)` - Expose a port and get a public URL
|
|
246
|
-
- `unexposePort(port)` - Remove port exposure
|
|
247
|
-
- `getExposedPorts()` - List all exposed ports with their URLs
|
|
67
|
+
import { getSandbox, proxyToSandbox, type Sandbox } from '@cloudflare/sandbox';
|
|
248
68
|
|
|
249
|
-
|
|
69
|
+
export { Sandbox } from '@cloudflare/sandbox';
|
|
250
70
|
|
|
251
|
-
|
|
252
|
-
|
|
253
|
-
|
|
254
|
-
import { proxyToSandbox, getSandbox } from "@cloudflare/sandbox";
|
|
71
|
+
type Env = {
|
|
72
|
+
Sandbox: DurableObjectNamespace<Sandbox>;
|
|
73
|
+
};
|
|
255
74
|
|
|
256
75
|
export default {
|
|
257
|
-
async fetch(request, env) {
|
|
258
|
-
//
|
|
76
|
+
async fetch(request: Request, env: Env): Promise<Response> {
|
|
77
|
+
// Required for preview URLs
|
|
259
78
|
const proxyResponse = await proxyToSandbox(request, env);
|
|
260
79
|
if (proxyResponse) return proxyResponse;
|
|
261
80
|
|
|
262
|
-
|
|
263
|
-
|
|
264
|
-
},
|
|
265
|
-
};
|
|
266
|
-
```
|
|
267
|
-
|
|
268
|
-
When you expose a port, the SDK returns a preview URL that automatically routes to your service:
|
|
269
|
-
|
|
270
|
-
```typescript
|
|
271
|
-
const preview = await sandbox.exposePort(3000);
|
|
272
|
-
console.log(preview.url); // https://3000-sandbox-id.your-worker.dev
|
|
273
|
-
```
|
|
274
|
-
|
|
275
|
-
The SDK handles:
|
|
276
|
-
|
|
277
|
-
- Subdomain routing (`3000-sandbox-id.domain.com`) for both production and local development
|
|
278
|
-
- All localhost variants (127.0.0.1, ::1, etc.)
|
|
279
|
-
- Request forwarding with proper headers
|
|
280
|
-
|
|
281
|
-
> **Important for Local Development**: When developing locally with `wrangler dev`, you must explicitly expose ports in your Dockerfile using the `EXPOSE` instruction. This is **only required for local development** - in production, all container ports are automatically accessible.
|
|
282
|
-
|
|
283
|
-
```dockerfile
|
|
284
|
-
# In your Dockerfile (only needed for local dev)
|
|
285
|
-
FROM docker.io/cloudflare/sandbox:0.1.3
|
|
286
|
-
|
|
287
|
-
# Expose the ports you'll be using
|
|
288
|
-
EXPOSE 3000 # For a web server
|
|
289
|
-
EXPOSE 8080 # For an API server
|
|
290
|
-
EXPOSE 3001 # For any additional services
|
|
291
|
-
|
|
292
|
-
# Your container setup...
|
|
293
|
-
```
|
|
294
|
-
|
|
295
|
-
Without the `EXPOSE` instruction in local development, you'll see this error:
|
|
296
|
-
|
|
297
|
-
```
|
|
298
|
-
connect(): Connection refused: container port not found. Make sure you exposed the port in your container definition.
|
|
299
|
-
```
|
|
300
|
-
|
|
301
|
-
For more details, see the [Cloudflare Containers local development guide](https://developers.cloudflare.com/containers/local-dev/#exposing-ports).
|
|
302
|
-
|
|
303
|
-
### Utility Methods
|
|
81
|
+
const url = new URL(request.url);
|
|
82
|
+
const sandbox = getSandbox(env.Sandbox, 'my-sandbox');
|
|
304
83
|
|
|
305
|
-
|
|
306
|
-
|
|
307
|
-
|
|
308
|
-
|
|
309
|
-
|
|
310
|
-
### Run a Node.js App
|
|
311
|
-
|
|
312
|
-
```typescript
|
|
313
|
-
const sandbox = getSandbox(env.Sandbox, "node-app");
|
|
314
|
-
|
|
315
|
-
// Write a simple Express server
|
|
316
|
-
await sandbox.writeFile(
|
|
317
|
-
"/workspace/app.js",
|
|
318
|
-
`
|
|
319
|
-
const express = require('express');
|
|
320
|
-
const app = express();
|
|
321
|
-
|
|
322
|
-
app.get('/', (req, res) => {
|
|
323
|
-
res.json({ message: 'Hello from Cloudflare!' });
|
|
324
|
-
});
|
|
325
|
-
|
|
326
|
-
app.listen(3000);
|
|
327
|
-
`
|
|
328
|
-
);
|
|
329
|
-
|
|
330
|
-
// Install dependencies and start the server
|
|
331
|
-
await sandbox.exec("npm init -y");
|
|
332
|
-
await sandbox.exec("npm install express");
|
|
333
|
-
const server = await sandbox.startProcess("node app.js");
|
|
334
|
-
|
|
335
|
-
// Expose it to the internet
|
|
336
|
-
const preview = await sandbox.exposePort(3000);
|
|
337
|
-
console.log(`API available at: ${preview.url}`);
|
|
338
|
-
```
|
|
339
|
-
|
|
340
|
-
### Build and Test Code
|
|
341
|
-
|
|
342
|
-
```typescript
|
|
343
|
-
const sandbox = getSandbox(env.Sandbox, "test-env");
|
|
344
|
-
|
|
345
|
-
// Clone a repository
|
|
346
|
-
await sandbox.gitCheckout("https://github.com/user/project");
|
|
347
|
-
|
|
348
|
-
// Run tests
|
|
349
|
-
const testResult = await sandbox.exec("npm test");
|
|
350
|
-
|
|
351
|
-
// Build the project
|
|
352
|
-
const buildResult = await sandbox.exec("npm run build");
|
|
353
|
-
|
|
354
|
-
return new Response(
|
|
355
|
-
JSON.stringify({
|
|
356
|
-
tests: testResult.exitCode === 0 ? "passed" : "failed",
|
|
357
|
-
build: buildResult.exitCode === 0 ? "success" : "failed",
|
|
358
|
-
output: testResult.stdout,
|
|
359
|
-
})
|
|
360
|
-
);
|
|
361
|
-
```
|
|
362
|
-
|
|
363
|
-
### Interactive Development Environment
|
|
364
|
-
|
|
365
|
-
```typescript
|
|
366
|
-
// Create a development sandbox with hot reload
|
|
367
|
-
const sandbox = getSandbox(env.Sandbox, "dev-env");
|
|
368
|
-
|
|
369
|
-
// Set up the project
|
|
370
|
-
await sandbox.gitCheckout("https://github.com/user/my-app");
|
|
371
|
-
await sandbox.exec("npm install");
|
|
372
|
-
|
|
373
|
-
// Start dev server
|
|
374
|
-
const devServer = await sandbox.startProcess("npm run dev");
|
|
375
|
-
|
|
376
|
-
// Expose the dev server
|
|
377
|
-
const preview = await sandbox.exposePort(3000, { name: "dev-server" });
|
|
378
|
-
|
|
379
|
-
// Make changes and see them live!
|
|
380
|
-
await sandbox.writeFile("/src/App.jsx", updatedCode);
|
|
381
|
-
```
|
|
382
|
-
|
|
383
|
-
### Expose Services with Preview URLs
|
|
384
|
-
|
|
385
|
-
```typescript
|
|
386
|
-
// Create and start a web server
|
|
387
|
-
await sandbox.writeFile(
|
|
388
|
-
"/server.js",
|
|
389
|
-
`Bun.serve({
|
|
390
|
-
port: 8080,
|
|
391
|
-
fetch(req) {
|
|
392
|
-
return new Response("Hello from sandbox!");
|
|
84
|
+
// Execute Python code
|
|
85
|
+
if (url.pathname === '/run') {
|
|
86
|
+
const result = await sandbox.exec('python3 -c "print(2 + 2)"');
|
|
87
|
+
return Response.json({ output: result.stdout, success: result.success });
|
|
393
88
|
}
|
|
394
|
-
});`
|
|
395
|
-
);
|
|
396
|
-
|
|
397
|
-
const server = await sandbox.startProcess("bun run /server.js");
|
|
398
|
-
|
|
399
|
-
// Expose the port - returns a public URL
|
|
400
|
-
const preview = await sandbox.exposePort(8080);
|
|
401
|
-
console.log(`Service available at: ${preview.url}`);
|
|
402
|
-
|
|
403
|
-
// Note: Your Worker needs to handle preview URL routing.
|
|
404
|
-
// See the example in examples/basic/src/index.ts for the routing implementation.
|
|
405
|
-
```
|
|
406
|
-
|
|
407
|
-
<h2 id="architecture">🏗️ Architecture</h2>
|
|
408
|
-
|
|
409
|
-
The SDK leverages Cloudflare's infrastructure:
|
|
410
|
-
|
|
411
|
-
- **Durable Objects**: Manages sandbox lifecycle and state
|
|
412
|
-
- **Containers**: Provides isolated execution environments
|
|
413
|
-
- **Workers**: Handles HTTP routing and API interface
|
|
414
|
-
- **Edge Network**: Enables global distribution and low latency
|
|
415
89
|
|
|
416
|
-
|
|
417
|
-
|
|
418
|
-
|
|
419
|
-
|
|
420
|
-
|
|
421
|
-
|
|
422
|
-
```typescript
|
|
423
|
-
import { parseSSEStream, type ExecEvent } from '@cloudflare/sandbox';
|
|
424
|
-
|
|
425
|
-
// Stream command execution
|
|
426
|
-
const stream = await sandbox.execStream('npm run build');
|
|
427
|
-
for await (const event of parseSSEStream<ExecEvent>(stream)) {
|
|
428
|
-
switch (event.type) {
|
|
429
|
-
case 'start':
|
|
430
|
-
console.log(`Build started: ${event.command}`);
|
|
431
|
-
break;
|
|
432
|
-
case 'stdout':
|
|
433
|
-
console.log(`Build: ${event.data}`);
|
|
434
|
-
break;
|
|
435
|
-
case 'complete':
|
|
436
|
-
console.log(`Exit code: ${event.exitCode}`);
|
|
437
|
-
break;
|
|
438
|
-
case 'error':
|
|
439
|
-
console.error(`Error: ${event.error}`);
|
|
440
|
-
break;
|
|
441
|
-
}
|
|
442
|
-
}
|
|
443
|
-
```
|
|
444
|
-
|
|
445
|
-
#### Streaming Utilities
|
|
446
|
-
|
|
447
|
-
The SDK exports utilities for working with Server-Sent Event streams:
|
|
448
|
-
|
|
449
|
-
- **`parseSSEStream<T>(stream)`** - Convert ReadableStream to typed AsyncIterable
|
|
450
|
-
- **`responseToAsyncIterable<T>(response)`** - Convert SSE Response to AsyncIterable
|
|
451
|
-
- **`asyncIterableToSSEStream<T>(iterable)`** - Convert AsyncIterable back to SSE stream
|
|
452
|
-
|
|
453
|
-
#### Advanced Streaming Examples
|
|
454
|
-
|
|
455
|
-
**CI/CD Build System:**
|
|
456
|
-
```typescript
|
|
457
|
-
export async function runBuild(env: Env, buildId: string) {
|
|
458
|
-
const sandbox = getSandbox(env.SANDBOX, buildId);
|
|
459
|
-
const stream = await sandbox.execStream('npm run build');
|
|
460
|
-
|
|
461
|
-
for await (const event of parseSSEStream<ExecEvent>(stream)) {
|
|
462
|
-
switch (event.type) {
|
|
463
|
-
case 'start':
|
|
464
|
-
await env.BUILDS.put(buildId, { status: 'running' });
|
|
465
|
-
break;
|
|
466
|
-
case 'complete':
|
|
467
|
-
await env.BUILDS.put(buildId, {
|
|
468
|
-
status: event.exitCode === 0 ? 'success' : 'failed',
|
|
469
|
-
exitCode: event.exitCode
|
|
470
|
-
});
|
|
471
|
-
break;
|
|
90
|
+
// Work with files
|
|
91
|
+
if (url.pathname === '/file') {
|
|
92
|
+
await sandbox.writeFile('/workspace/hello.txt', 'Hello, Sandbox!');
|
|
93
|
+
const file = await sandbox.readFile('/workspace/hello.txt');
|
|
94
|
+
return Response.json({ content: file.content });
|
|
472
95
|
}
|
|
473
|
-
}
|
|
474
|
-
}
|
|
475
|
-
```
|
|
476
96
|
|
|
477
|
-
|
|
478
|
-
```typescript
|
|
479
|
-
const monitor = await sandbox.startProcess('tail -f /var/log/system.log');
|
|
480
|
-
const logStream = await sandbox.streamProcessLogs(monitor.id);
|
|
481
|
-
|
|
482
|
-
for await (const log of parseSSEStream<LogEvent>(logStream)) {
|
|
483
|
-
if (log.type === 'stdout' && log.data.includes('ERROR')) {
|
|
484
|
-
await env.ALERTS.send({
|
|
485
|
-
severity: 'high',
|
|
486
|
-
message: log.data,
|
|
487
|
-
timestamp: log.timestamp
|
|
488
|
-
});
|
|
97
|
+
return new Response('Try /run or /file');
|
|
489
98
|
}
|
|
490
|
-
}
|
|
99
|
+
};
|
|
491
100
|
```
|
|
492
101
|
|
|
493
|
-
|
|
494
|
-
|
|
495
|
-
Maintain context across commands:
|
|
496
|
-
|
|
497
|
-
```typescript
|
|
498
|
-
const sessionId = crypto.randomUUID();
|
|
499
|
-
|
|
500
|
-
// Commands in the same session share working directory
|
|
501
|
-
await sandbox.exec("cd /workspace", { sessionId });
|
|
502
|
-
await sandbox.exec("npm install", { sessionId });
|
|
503
|
-
const app = await sandbox.startProcess("npm start", { sessionId });
|
|
504
|
-
```
|
|
102
|
+
## Documentation
|
|
505
103
|
|
|
506
|
-
|
|
104
|
+
**📖 [Full Documentation](https://developers.cloudflare.com/sandbox/)**
|
|
507
105
|
|
|
508
|
-
|
|
106
|
+
- [Get Started Guide](https://developers.cloudflare.com/sandbox/get-started/) - Step-by-step tutorial
|
|
107
|
+
- [API Reference](https://developers.cloudflare.com/sandbox/api/) - Complete API docs
|
|
108
|
+
- [Guides](https://developers.cloudflare.com/sandbox/guides/) - Execute commands, manage files, expose services
|
|
109
|
+
- [Examples](https://developers.cloudflare.com/sandbox/tutorials/) - AI agents, data analysis, CI/CD pipelines
|
|
509
110
|
|
|
510
|
-
|
|
511
|
-
const sandbox = getSandbox(env.Sandbox, "debug-sandbox");
|
|
512
|
-
sandbox.client.onCommandStart = (cmd, args) =>
|
|
513
|
-
console.log(`Starting: ${cmd} ${args.join(" ")}`);
|
|
514
|
-
sandbox.client.onOutput = (stream, data) => console.log(`[${stream}] ${data}`);
|
|
515
|
-
sandbox.client.onCommandComplete = (success, code) =>
|
|
516
|
-
console.log(`Completed: ${success} (${code})`);
|
|
517
|
-
```
|
|
111
|
+
## Key Features
|
|
518
112
|
|
|
519
|
-
|
|
113
|
+
- **Secure Isolation** - Each sandbox runs in its own container
|
|
114
|
+
- **Edge-Native** - Runs on Cloudflare's global network
|
|
115
|
+
- **Code Interpreter** - Execute Python and JavaScript with rich outputs
|
|
116
|
+
- **File System Access** - Read, write, and manage files
|
|
117
|
+
- **Command Execution** - Run any command with streaming support
|
|
118
|
+
- **Preview URLs** - Expose services with public URLs
|
|
119
|
+
- **Git Integration** - Clone repositories directly
|
|
520
120
|
|
|
521
|
-
|
|
522
|
-
- WebSocket support for preview URLs coming soon
|
|
523
|
-
- Some system calls may be restricted in the container environment
|
|
121
|
+
## Development
|
|
524
122
|
|
|
525
|
-
|
|
526
|
-
|
|
527
|
-
We welcome contributions! Please see our [Contributing Guide](CONTRIBUTING.md) for details.
|
|
123
|
+
This repository contains the SDK source code. To contribute:
|
|
528
124
|
|
|
529
125
|
```bash
|
|
530
126
|
# Clone the repo
|
|
@@ -539,22 +135,30 @@ npm test
|
|
|
539
135
|
|
|
540
136
|
# Build the project
|
|
541
137
|
npm run build
|
|
138
|
+
|
|
139
|
+
# Type checking and linting
|
|
140
|
+
npm run check
|
|
542
141
|
```
|
|
543
142
|
|
|
544
|
-
|
|
143
|
+
## Examples
|
|
545
144
|
|
|
546
|
-
[
|
|
145
|
+
See the [examples directory](./examples) for complete working examples:
|
|
146
|
+
|
|
147
|
+
- [Minimal](./examples/minimal) - Basic sandbox setup
|
|
148
|
+
- [Code Interpreter](./examples/code-interpreter) - Use sandbox as an interpreter tool with gpt-oss
|
|
149
|
+
- [Complete](./examples/basic) - Huge example integrated with every sandbox feature
|
|
547
150
|
|
|
548
|
-
|
|
151
|
+
## Status
|
|
549
152
|
|
|
550
|
-
|
|
153
|
+
**Beta** - The SDK is in active development. APIs may change before v1.0.
|
|
154
|
+
|
|
155
|
+
## License
|
|
156
|
+
|
|
157
|
+
[MIT License](LICENSE)
|
|
551
158
|
|
|
552
|
-
|
|
159
|
+
## Links
|
|
553
160
|
|
|
554
|
-
|
|
555
|
-
|
|
556
|
-
|
|
557
|
-
|
|
558
|
-
<a href="https://twitter.com/CloudflareDev">Twitter</a>
|
|
559
|
-
</p>
|
|
560
|
-
</div>
|
|
161
|
+
- [Documentation](https://developers.cloudflare.com/sandbox/)
|
|
162
|
+
- [GitHub Issues](https://github.com/cloudflare/sandbox-sdk/issues)
|
|
163
|
+
- [Developer Discord](https://discord.cloudflare.com)
|
|
164
|
+
- [Cloudflare Developers](https://twitter.com/CloudflareDev)
|