@cloudflare/sandbox 0.0.0-e1fa354 → 0.0.0-e53d7e7
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/CHANGELOG.md +40 -0
- package/Dockerfile +107 -38
- package/README.md +89 -771
- package/dist/chunk-53JFOF7F.js +2352 -0
- package/dist/chunk-53JFOF7F.js.map +1 -0
- package/dist/chunk-BFVUNTP4.js +104 -0
- package/dist/chunk-BFVUNTP4.js.map +1 -0
- package/dist/chunk-EKSWCBCA.js +86 -0
- package/dist/chunk-EKSWCBCA.js.map +1 -0
- package/dist/chunk-JXZMAU2C.js +559 -0
- package/dist/chunk-JXZMAU2C.js.map +1 -0
- package/dist/chunk-Z532A7QC.js +78 -0
- package/dist/chunk-Z532A7QC.js.map +1 -0
- package/dist/file-stream.d.ts +43 -0
- package/dist/file-stream.js +9 -0
- package/dist/file-stream.js.map +1 -0
- package/dist/index.d.ts +9 -0
- package/dist/index.js +66 -0
- package/dist/index.js.map +1 -0
- package/dist/interpreter.d.ts +33 -0
- package/dist/interpreter.js +8 -0
- package/dist/interpreter.js.map +1 -0
- package/dist/request-handler.d.ts +18 -0
- package/dist/request-handler.js +12 -0
- package/dist/request-handler.js.map +1 -0
- package/dist/sandbox-D9K2ypln.d.ts +583 -0
- package/dist/sandbox.d.ts +4 -0
- package/dist/sandbox.js +12 -0
- package/dist/sandbox.js.map +1 -0
- package/dist/security.d.ts +31 -0
- package/dist/security.js +13 -0
- package/dist/security.js.map +1 -0
- package/dist/sse-parser.d.ts +28 -0
- package/dist/sse-parser.js +11 -0
- package/dist/sse-parser.js.map +1 -0
- package/package.json +13 -5
- package/src/clients/base-client.ts +280 -0
- package/src/clients/command-client.ts +115 -0
- package/src/clients/file-client.ts +269 -0
- package/src/clients/git-client.ts +92 -0
- package/src/clients/index.ts +63 -0
- package/src/{jupyter-client.ts → clients/interpreter-client.ts} +148 -168
- package/src/clients/port-client.ts +105 -0
- package/src/clients/process-client.ts +177 -0
- package/src/clients/sandbox-client.ts +41 -0
- package/src/clients/types.ts +84 -0
- package/src/clients/utility-client.ts +94 -0
- package/src/errors/adapter.ts +180 -0
- package/src/errors/classes.ts +469 -0
- package/src/errors/index.ts +105 -0
- package/src/file-stream.ts +164 -0
- package/src/index.ts +82 -53
- package/src/interpreter.ts +22 -13
- package/src/request-handler.ts +69 -43
- package/src/sandbox.ts +697 -527
- package/src/security.ts +14 -23
- package/src/sse-parser.ts +4 -8
- package/startup.sh +3 -0
- package/tests/base-client.test.ts +328 -0
- package/tests/command-client.test.ts +407 -0
- package/tests/file-client.test.ts +643 -0
- package/tests/file-stream.test.ts +306 -0
- package/tests/git-client.test.ts +328 -0
- package/tests/port-client.test.ts +301 -0
- package/tests/process-client.test.ts +658 -0
- package/tests/sandbox.test.ts +465 -0
- package/tests/sse-parser.test.ts +290 -0
- package/tests/utility-client.test.ts +266 -0
- package/tests/wrangler.jsonc +35 -0
- package/tsconfig.json +9 -1
- package/vitest.config.ts +31 -0
- package/container_src/bun.lock +0 -122
- package/container_src/circuit-breaker.ts +0 -121
- package/container_src/control-process.ts +0 -784
- package/container_src/handler/exec.ts +0 -185
- package/container_src/handler/file.ts +0 -406
- package/container_src/handler/git.ts +0 -130
- package/container_src/handler/ports.ts +0 -314
- package/container_src/handler/process.ts +0 -568
- package/container_src/handler/session.ts +0 -92
- package/container_src/index.ts +0 -601
- package/container_src/isolation.ts +0 -1038
- package/container_src/jupyter-server.ts +0 -579
- package/container_src/jupyter-service.ts +0 -461
- package/container_src/jupyter_config.py +0 -48
- package/container_src/mime-processor.ts +0 -255
- package/container_src/package.json +0 -18
- package/container_src/shell-escape.ts +0 -42
- package/container_src/startup.sh +0 -84
- package/container_src/types.ts +0 -131
- package/src/client.ts +0 -1009
- package/src/errors.ts +0 -218
- package/src/interpreter-types.ts +0 -383
- package/src/types.ts +0 -502
package/CHANGELOG.md
CHANGED
|
@@ -1,5 +1,45 @@
|
|
|
1
1
|
# @cloudflare/sandbox
|
|
2
2
|
|
|
3
|
+
## 0.4.1
|
|
4
|
+
|
|
5
|
+
### Patch Changes
|
|
6
|
+
|
|
7
|
+
- [#111](https://github.com/cloudflare/sandbox-sdk/pull/111) [`1b5496b`](https://github.com/cloudflare/sandbox-sdk/commit/1b5496bfceaee53c31911b409476ea87bebffe4c) Thanks [@threepointone](https://github.com/threepointone)! - trigger a release
|
|
8
|
+
|
|
9
|
+
## 0.4.0
|
|
10
|
+
|
|
11
|
+
### Minor Changes
|
|
12
|
+
|
|
13
|
+
- [#95](https://github.com/cloudflare/sandbox-sdk/pull/95) [`7aee736`](https://github.com/cloudflare/sandbox-sdk/commit/7aee736bf07a4bf9020e2109bdaaa70214d52a01) Thanks [@ghostwriternr](https://github.com/ghostwriternr)! - Rewrite SDK with cleaner design patterns and tests. Remove the unnecessary isolation cruft and fix foundational issues with streaming, sessions, validations and error handling. Cover the SDK with unit & e2e tests.
|
|
14
|
+
|
|
15
|
+
### Patch Changes
|
|
16
|
+
|
|
17
|
+
- [#106](https://github.com/cloudflare/sandbox-sdk/pull/106) [`da947cd`](https://github.com/cloudflare/sandbox-sdk/commit/da947cd9543fc99831eefb1e8741fc905cb8fa42) Thanks [@jahands](https://github.com/jahands)! - fix examples failing to deploy and prevent committing node_modules
|
|
18
|
+
|
|
19
|
+
## 0.3.3
|
|
20
|
+
|
|
21
|
+
### Patch Changes
|
|
22
|
+
|
|
23
|
+
- [#83](https://github.com/cloudflare/sandbox-sdk/pull/83) [`eec5bb6`](https://github.com/cloudflare/sandbox-sdk/commit/eec5bb6203dd5d775b4b54e91c26de25eeb767ce) Thanks [@mikenomitch](https://github.com/mikenomitch)! - Bump containers package version
|
|
24
|
+
|
|
25
|
+
## 0.3.2
|
|
26
|
+
|
|
27
|
+
### Patch Changes
|
|
28
|
+
|
|
29
|
+
- [#76](https://github.com/cloudflare/sandbox-sdk/pull/76) [`ef9e320`](https://github.com/cloudflare/sandbox-sdk/commit/ef9e320dcef30e57797fef6ebd9a9383fa9720d9) Thanks [@ghostwriternr](https://github.com/ghostwriternr)! - Replace Jupyter with lightweight interpreters for >90% faster cold starts for `.runCode` calls, while maintaining full code execution capabilities and rich output support.
|
|
30
|
+
|
|
31
|
+
## 0.3.1
|
|
32
|
+
|
|
33
|
+
### Patch Changes
|
|
34
|
+
|
|
35
|
+
- [#71](https://github.com/cloudflare/sandbox-sdk/pull/71) [`fb3c9c2`](https://github.com/cloudflare/sandbox-sdk/commit/fb3c9c22242d9d4f157c26f547f1e697ef7875f9) Thanks [@ghostwriternr](https://github.com/ghostwriternr)! - Bump containers package version
|
|
36
|
+
|
|
37
|
+
- [#70](https://github.com/cloudflare/sandbox-sdk/pull/70) [`e1fa354`](https://github.com/cloudflare/sandbox-sdk/commit/e1fa354ab1bc7b0e89db4901b67028ebf1a93d0a) Thanks [@ghostwriternr](https://github.com/ghostwriternr)! - Fix escaped quotes in file write operations
|
|
38
|
+
|
|
39
|
+
- [#68](https://github.com/cloudflare/sandbox-sdk/pull/68) [`69b91d1`](https://github.com/cloudflare/sandbox-sdk/commit/69b91d1a8f6afb63262cc381ea93e94a033ed5e8) Thanks [@CyrusNuevoDia](https://github.com/CyrusNuevoDia)! - Configurable timeouts via environment variables in isolation.ts
|
|
40
|
+
|
|
41
|
+
- [#66](https://github.com/cloudflare/sandbox-sdk/pull/66) [`eca93b9`](https://github.com/cloudflare/sandbox-sdk/commit/eca93b97e40fa0d3bd9dc27af2cc214ec355b696) Thanks [@peterp](https://github.com/peterp)! - Determine if the port is specified in the URL.
|
|
42
|
+
|
|
3
43
|
## 0.3.0
|
|
4
44
|
|
|
5
45
|
### Minor Changes
|
package/Dockerfile
CHANGED
|
@@ -1,6 +1,64 @@
|
|
|
1
|
-
# Sandbox
|
|
2
|
-
|
|
3
|
-
|
|
1
|
+
# Sandbox container image with full development environment
|
|
2
|
+
# Multi-stage build optimized for Turborepo monorepo
|
|
3
|
+
|
|
4
|
+
# ============================================================================
|
|
5
|
+
# Stage 1: Prune monorepo to only include necessary packages
|
|
6
|
+
# ============================================================================
|
|
7
|
+
FROM node:20-alpine AS pruner
|
|
8
|
+
|
|
9
|
+
WORKDIR /app
|
|
10
|
+
|
|
11
|
+
# Install Turborepo globally
|
|
12
|
+
RUN npm install -g turbo
|
|
13
|
+
|
|
14
|
+
# Copy entire monorepo
|
|
15
|
+
COPY . .
|
|
16
|
+
|
|
17
|
+
# Prune to only @repo/sandbox-container and its dependencies (@repo/shared)
|
|
18
|
+
# The --docker flag generates out/json and out/full directories
|
|
19
|
+
RUN turbo prune @repo/sandbox-container --docker
|
|
20
|
+
|
|
21
|
+
# ============================================================================
|
|
22
|
+
# Stage 2: Install dependencies and build packages
|
|
23
|
+
# ============================================================================
|
|
24
|
+
FROM node:20-alpine AS builder
|
|
25
|
+
|
|
26
|
+
WORKDIR /app
|
|
27
|
+
|
|
28
|
+
# Copy pruned lockfile and package.json files (for Docker layer caching)
|
|
29
|
+
COPY --from=pruner /app/out/json/ .
|
|
30
|
+
COPY --from=pruner /app/out/package-lock.json ./package-lock.json
|
|
31
|
+
|
|
32
|
+
# Install ALL dependencies (including devDependencies for build)
|
|
33
|
+
RUN npm ci
|
|
34
|
+
|
|
35
|
+
# Copy pruned source code
|
|
36
|
+
COPY --from=pruner /app/out/full/ .
|
|
37
|
+
|
|
38
|
+
# Build all packages (Turborepo handles dependency order automatically)
|
|
39
|
+
# This builds @repo/shared first, then @repo/sandbox-container
|
|
40
|
+
RUN npx turbo run build
|
|
41
|
+
|
|
42
|
+
# ============================================================================
|
|
43
|
+
# Stage 3: Install production-only dependencies
|
|
44
|
+
# ============================================================================
|
|
45
|
+
FROM node:20-alpine AS prod-deps
|
|
46
|
+
|
|
47
|
+
WORKDIR /app
|
|
48
|
+
|
|
49
|
+
# Copy package files from builder
|
|
50
|
+
COPY --from=builder /app/package.json ./package.json
|
|
51
|
+
COPY --from=builder /app/package-lock.json ./package-lock.json
|
|
52
|
+
COPY --from=builder /app/packages ./packages
|
|
53
|
+
COPY --from=builder /app/tooling ./tooling
|
|
54
|
+
|
|
55
|
+
# Install ONLY production dependencies (excludes typescript, @types/*, etc.)
|
|
56
|
+
RUN npm ci --production
|
|
57
|
+
|
|
58
|
+
# ============================================================================
|
|
59
|
+
# Stage 4: Runtime - Ubuntu 22.04 with full development environment
|
|
60
|
+
# ============================================================================
|
|
61
|
+
FROM ubuntu:22.04 AS runtime
|
|
4
62
|
|
|
5
63
|
# Prevent interactive prompts during package installation
|
|
6
64
|
ENV DEBIAN_FRONTEND=noninteractive
|
|
@@ -13,6 +71,7 @@ RUN apt-get update && apt-get install -y \
|
|
|
13
71
|
git \
|
|
14
72
|
unzip \
|
|
15
73
|
zip \
|
|
74
|
+
file \
|
|
16
75
|
# Process management
|
|
17
76
|
procps \
|
|
18
77
|
htop \
|
|
@@ -47,57 +106,67 @@ RUN curl -fsSL https://deb.nodesource.com/setup_20.x | bash - \
|
|
|
47
106
|
&& apt-get install -y nodejs \
|
|
48
107
|
&& rm -rf /var/lib/apt/lists/*
|
|
49
108
|
|
|
50
|
-
# Install Bun from official image
|
|
51
|
-
COPY --from=bun
|
|
52
|
-
COPY --from=bun
|
|
109
|
+
# Install Bun runtime from official image
|
|
110
|
+
COPY --from=oven/bun:1 /usr/local/bin/bun /usr/local/bin/bun
|
|
111
|
+
COPY --from=oven/bun:1 /usr/local/bin/bunx /usr/local/bin/bunx
|
|
53
112
|
|
|
54
|
-
# Install
|
|
55
|
-
RUN
|
|
56
|
-
|
|
57
|
-
|
|
58
|
-
|
|
59
|
-
orjson \
|
|
60
|
-
&& python3 -m ipykernel install --user --name python3
|
|
113
|
+
# Install development tools globally
|
|
114
|
+
RUN npm install -g \
|
|
115
|
+
wrangler \
|
|
116
|
+
vite \
|
|
117
|
+
opencode-ai
|
|
61
118
|
|
|
62
|
-
# Install
|
|
119
|
+
# Install essential Python packages for code execution
|
|
63
120
|
RUN pip3 install --no-cache-dir \
|
|
64
121
|
matplotlib \
|
|
65
122
|
numpy \
|
|
66
123
|
pandas \
|
|
67
|
-
|
|
68
|
-
|
|
69
|
-
# Install JavaScript kernel (ijavascript) - using E2B's fork
|
|
70
|
-
RUN npm install -g git+https://github.com/e2b-dev/ijavascript.git \
|
|
71
|
-
&& ijsinstall --install=global
|
|
72
|
-
|
|
73
|
-
# Set up container server directory
|
|
74
|
-
WORKDIR /container-server
|
|
124
|
+
ipython
|
|
75
125
|
|
|
76
126
|
# Verify installations
|
|
77
127
|
RUN python3 --version && \
|
|
78
128
|
node --version && \
|
|
79
129
|
npm --version && \
|
|
80
|
-
bun --version
|
|
81
|
-
jupyter --version && \
|
|
82
|
-
jupyter kernelspec list
|
|
83
|
-
|
|
84
|
-
# Copy container source files to server directory
|
|
85
|
-
COPY container_src/package.json container_src/bun.lock ./
|
|
86
|
-
RUN bun install --frozen-lockfile
|
|
130
|
+
bun --version
|
|
87
131
|
|
|
88
|
-
|
|
89
|
-
|
|
90
|
-
# Compile TypeScript control process
|
|
91
|
-
# Use npx -p typescript to ensure we get the right tsc command
|
|
92
|
-
RUN npx -p typescript tsc control-process.ts --outDir . --module commonjs --target es2020 --esModuleInterop --skipLibCheck
|
|
132
|
+
# Set up runtime container server directory
|
|
133
|
+
WORKDIR /container-server
|
|
93
134
|
|
|
94
|
-
#
|
|
135
|
+
# Copy built sandbox-container package
|
|
136
|
+
COPY --from=builder /app/packages/sandbox-container/dist ./dist
|
|
137
|
+
COPY --from=builder /app/packages/sandbox-container/package.json ./package.json
|
|
138
|
+
|
|
139
|
+
# Copy Python executor to runtime location
|
|
140
|
+
COPY --from=builder /app/packages/sandbox-container/src/runtime/executors/python/ipython_executor.py ./dist/runtime/executors/python/
|
|
141
|
+
|
|
142
|
+
# Copy production-only node_modules (excludes typescript, @types/*, etc.)
|
|
143
|
+
# Includes: @repo/shared, zod, esbuild (runtime dependencies)
|
|
144
|
+
COPY --from=prod-deps /app/node_modules ./node_modules
|
|
145
|
+
|
|
146
|
+
# Copy workspace packages so node_modules symlinks work
|
|
147
|
+
# @repo/shared and @repo/typescript-config are symlinked in node_modules
|
|
148
|
+
COPY --from=prod-deps /app/packages/shared ./packages/shared
|
|
149
|
+
COPY --from=prod-deps /app/tooling/typescript-config ./tooling/typescript-config
|
|
150
|
+
|
|
151
|
+
# Configure process pool sizes (can be overridden at runtime)
|
|
152
|
+
ENV PYTHON_POOL_MIN_SIZE=3
|
|
153
|
+
ENV PYTHON_POOL_MAX_SIZE=15
|
|
154
|
+
ENV JAVASCRIPT_POOL_MIN_SIZE=3
|
|
155
|
+
ENV JAVASCRIPT_POOL_MAX_SIZE=10
|
|
156
|
+
ENV TYPESCRIPT_POOL_MIN_SIZE=3
|
|
157
|
+
ENV TYPESCRIPT_POOL_MAX_SIZE=10
|
|
158
|
+
|
|
159
|
+
# Create clean workspace directory for user code
|
|
160
|
+
# Architecture:
|
|
161
|
+
# /container-server/ - SDK infrastructure (server, executors, dependencies)
|
|
162
|
+
# /workspace/ - User's clean workspace for their code
|
|
95
163
|
RUN mkdir -p /workspace
|
|
96
164
|
|
|
97
|
-
# Expose the application port (3000 for control
|
|
98
|
-
EXPOSE 3000
|
|
165
|
+
# Expose the application port (3000 for control)
|
|
166
|
+
EXPOSE 3000
|
|
99
167
|
|
|
100
|
-
#
|
|
168
|
+
# Copy and make startup script executable
|
|
169
|
+
COPY packages/sandbox/startup.sh ./
|
|
101
170
|
RUN chmod +x startup.sh
|
|
102
171
|
|
|
103
172
|
# Use startup script
|