@immediately-run/sandpack-client 2.19.8 → 2.19.10

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (5) hide show
  1. package/dist/.ir-build-stamp.json +3 -3
  2. package/dist/clients/runtime/index.js +5 -1
  3. package/dist/clients/runtime/index.mjs +5 -1
  4. package/dist/types.d.ts +8 -0
  5. package/package.json +5 -2
package/dist/.ir-build-stamp.json CHANGED
@@ -1,6 +1,6 @@
1
1
  {
2
2
  "name": "sandpack-client",
3
- "version": "2.19.8",
4
- "srcHash": "0eaf0bf3d7e1b039ddf5c81d671c599261917c9d2f79e6ab678c9a255639e850",
5
- "builtAt": "2026-06-29T12:49:38.087Z"
3
+ "version": "2.19.10",
4
+ "srcHash": "3849536678a710ce43ac28c5f8900e4c49ab01fbdd22e8deb346e67ceaaad3cb",
5
+ "builtAt": "2026-06-30T06:23:41.996Z"
6
6
  }
package/dist/clients/runtime/index.js CHANGED
@@ -526,7 +526,7 @@ function getExtension(filepath) {
526
526
 
527
527
  var _a;
528
528
  var SUFFIX_PLACEHOLDER = "-{{suffix}}";
529
- var BUNDLER_URL = "https://".concat((_a = "2.19.8") === null || _a === void 0 ? void 0 : _a.replace(/\./g, "-")).concat(SUFFIX_PLACEHOLDER, "-sandpack.codesandbox.io/");
529
+ var BUNDLER_URL = "https://".concat((_a = "2.19.10") === null || _a === void 0 ? void 0 : _a.replace(/\./g, "-")).concat(SUFFIX_PLACEHOLDER, "-sandpack.codesandbox.io/");
530
530
  var SandpackRuntime = /** @class */ (function (_super) {
531
531
  utils.__extends(SandpackRuntime, _super);
532
532
  function SandpackRuntime(selector, sandboxSetup, options) {
@@ -906,6 +906,10 @@ var SandpackRuntime = /** @class */ (function (_super) {
906
906
  // skips seeding artifacts for paths edited in a previous session. Absent ⇒
907
907
  // nothing dirty.
908
908
  dirtyPaths: this.options.dirtyPaths,
909
+ // The §5.7 per-commit distrust mark, forwarded verbatim into register-frame so
910
+ // the bundler ignores the zip's artifact section when a prior session caught a
911
+ // tampered artifact for this commit. Absent/false ⇒ artifacts trusted.
912
+ distrustArtifacts: this.options.distrustArtifacts,
909
913
  // R3-49b batch-hydration snapshot, forwarded verbatim into register-frame so
910
914
  // the bundler hydrates its read caches before the first compile. Absent ⇒
911
915
  // reads cross the Port as before.
package/dist/clients/runtime/index.mjs CHANGED
@@ -524,7 +524,7 @@ function getExtension(filepath) {
524
524
 
525
525
  var _a;
526
526
  var SUFFIX_PLACEHOLDER = "-{{suffix}}";
527
- var BUNDLER_URL = "https://".concat((_a = "2.19.8") === null || _a === void 0 ? void 0 : _a.replace(/\./g, "-")).concat(SUFFIX_PLACEHOLDER, "-sandpack.codesandbox.io/");
527
+ var BUNDLER_URL = "https://".concat((_a = "2.19.10") === null || _a === void 0 ? void 0 : _a.replace(/\./g, "-")).concat(SUFFIX_PLACEHOLDER, "-sandpack.codesandbox.io/");
528
528
  var SandpackRuntime = /** @class */ (function (_super) {
529
529
  __extends(SandpackRuntime, _super);
530
530
  function SandpackRuntime(selector, sandboxSetup, options) {
@@ -904,6 +904,10 @@ var SandpackRuntime = /** @class */ (function (_super) {
904
904
  // skips seeding artifacts for paths edited in a previous session. Absent ⇒
905
905
  // nothing dirty.
906
906
  dirtyPaths: this.options.dirtyPaths,
907
+ // The §5.7 per-commit distrust mark, forwarded verbatim into register-frame so
908
+ // the bundler ignores the zip's artifact section when a prior session caught a
909
+ // tampered artifact for this commit. Absent/false ⇒ artifacts trusted.
910
+ distrustArtifacts: this.options.distrustArtifacts,
907
911
  // R3-49b batch-hydration snapshot, forwarded verbatim into register-frame so
908
912
  // the bundler hydrates its read caches before the first compile. Absent ⇒
909
913
  // reads cross the Port as before.
package/dist/types.d.ts CHANGED
@@ -93,6 +93,14 @@ export interface ClientOptions {
93
93
  * longer matches the zip. Absent ⇒ nothing dirty.
94
94
  */
95
95
  dirtyPaths?: string[];
96
+ /**
97
+ * The parent's per-commit distrust mark (PRETRANSPILED_ARTIFACTS_SPEC §5.7).
98
+ * When `true`, the host has recorded — keyed `(repo coords, commitSha)` — that a
99
+ * prior session's spot-verification caught a tampered artifact for this commit;
100
+ * forwarded verbatim into the register-frame handshake so the bundler treats the
101
+ * zip's artifact section as absent and transpiles live. Absent/false ⇒ trusted.
102
+ */
103
+ distrustArtifacts?: boolean;
96
104
  /**
97
105
  * R3-49b ZenFS batch hydration: a bulk snapshot of the mounted tree (`/app`
98
106
  * source + bundled `/node_modules` package msgpack) forwarded verbatim into the
package/package.json CHANGED
@@ -1,6 +1,6 @@
1
1
  {
2
2
  "name": "@immediately-run/sandpack-client",
3
- "version": "2.19.8",
3
+ "version": "2.19.10",
4
4
  "description": "",
5
5
  "keywords": [],
6
6
  "repository": {
@@ -65,7 +65,6 @@
65
65
  ],
66
66
  "dependencies": {
67
67
  "@codesandbox/nodebox": "0.1.8",
68
- "@zenfs/core": "~2.3.11",
69
68
  "buffer": "^6.0.3",
70
69
  "dequal": "^2.0.3",
71
70
  "mime-db": "^1.53.0",
@@ -75,8 +74,12 @@
75
74
  "devDependencies": {
76
75
  "@types/mime-db": "^1.43.6",
77
76
  "@types/node": "^22.10.2",
77
+ "@zenfs/core": "~2.3.11",
78
78
  "del": "^6.1.1",
79
79
  "gulp": "^5.0.0",
80
80
  "typescript": "^5.7.2"
81
+ },
82
+ "peerDependencies": {
83
+ "@zenfs/core": "^2.3.11"
81
84
  }
82
85
  }