@immediately-run/sandpack-client 2.22.1 → 2.22.2

package/dist/.ir-build-stamp.json

@@ -1,6 +1,6 @@
 {
   "name": "sandpack-client",
-  "version": "2.22.1",
-  "srcHash": "10bae547420c39b69868a88e4aa7810abbbd8490309a16a6154ca3fdc16e7b4f",
-  "builtAt": "2026-09-13T05:42:11.272Z"
+  "version": "2.22.2",
+  "srcHash": "1b2b97ac12ce881cefee67f8583e02965e7ed59384142cd56ec1101fce9ba741",
+  "builtAt": "2026-09-22T19:28:04.451Z"
 }

package/dist/clients/node/index.js

@@ -2,9 +2,9 @@
 
 var utils = require('../../utils-BiVyytui.js');
 var nodebox = require('@codesandbox/nodebox');
-require('../../types-B3g_70H8.js');
+require('../../types-xQEV22hP.js');
 var base = require('../../base-DelKLlDk.js');
-var consoleHook = require('../../consoleHook-vrsBdedj.js');
+var consoleHook = require('../../consoleHook-cqJc2nPr.js');
 require('outvariant');
 require('@zenfs/core');
 require('dequal');

package/dist/clients/node/index.mjs

@@ -1,8 +1,8 @@
 import { _ as __awaiter, a as __generator, f as nullthrows, c as createError, g as __extends, h as __assign } from '../../utils-DG1HA4RZ.mjs';
 import { INJECT_MESSAGE_TYPE, Nodebox, PREVIEW_LOADED_MESSAGE_TYPE } from '@codesandbox/nodebox';
-import '../../types-DRg992RB.mjs';
+import '../../types-oQzEw86T.mjs';
 import { S as SandpackClient } from '../../base-DBh7xJX9.mjs';
-import { c as consoleHook, g as generateRandomId, E as EventEmitter, a as getMessageFromError, f as findStartScriptPackageJson } from '../../consoleHook-DT9Wd42J.mjs';
+import { c as consoleHook, g as generateRandomId, E as EventEmitter, a as getMessageFromError, f as findStartScriptPackageJson } from '../../consoleHook-BXwdFsm6.mjs';
 import 'outvariant';
 import '@zenfs/core';
 import 'dequal';

package/dist/clients/runtime/index.js

@@ -2,7 +2,7 @@
 
 var utils = require('../../utils-BiVyytui.js');
 var dequal = require('dequal');
-var types = require('../../types-B3g_70H8.js');
+var types = require('../../types-xQEV22hP.js');
 var base = require('../../base-DelKLlDk.js');
 var iframeFactory = require('../../iframe-factory-Bc7tcyQZ.js');
 var mimeDB = require('mime-db');
@@ -722,7 +722,7 @@ var notifyCodeSandboxExportRefused$1 = function () {
 
 var _a;
 var SUFFIX_PLACEHOLDER = "-{{suffix}}";
-var BUNDLER_URL = "https://".concat((_a = "2.22.1") === null || _a === void 0 ? void 0 : _a.replace(/\./g, "-")).concat(SUFFIX_PLACEHOLDER, "-sandpack.codesandbox.io/");
+var BUNDLER_URL = "https://".concat((_a = "2.22.2") === null || _a === void 0 ? void 0 : _a.replace(/\./g, "-")).concat(SUFFIX_PLACEHOLDER, "-sandpack.codesandbox.io/");
 var SandpackRuntime = /** @class */ (function (_super) {
     utils.__extends(SandpackRuntime, _super);
     function SandpackRuntime(selector, sandboxSetup, options) {

package/dist/clients/runtime/index.mjs

@@ -1,6 +1,6 @@
 import { _ as __awaiter, a as __generator, h as __assign, i as __rest, j as __spreadArray, g as __extends, f as nullthrows, e as extractErrorDetails, c as createError, d as createPackageJSON } from '../../utils-DG1HA4RZ.mjs';
 import { dequal } from 'dequal';
-import { a as SandpackLogLevel } from '../../types-DRg992RB.mjs';
+import { a as SandpackLogLevel } from '../../types-oQzEw86T.mjs';
 import { S as SandpackClient } from '../../base-DBh7xJX9.mjs';
 import { c as createSandboxedIframe, e as ensureSandboxed } from '../../iframe-factory-C8M0b9uf.mjs';
 import mimeDB from 'mime-db';
@@ -720,7 +720,7 @@ var notifyCodeSandboxExportRefused$1 = function () {
 
 var _a;
 var SUFFIX_PLACEHOLDER = "-{{suffix}}";
-var BUNDLER_URL = "https://".concat((_a = "2.22.1") === null || _a === void 0 ? void 0 : _a.replace(/\./g, "-")).concat(SUFFIX_PLACEHOLDER, "-sandpack.codesandbox.io/");
+var BUNDLER_URL = "https://".concat((_a = "2.22.2") === null || _a === void 0 ? void 0 : _a.replace(/\./g, "-")).concat(SUFFIX_PLACEHOLDER, "-sandpack.codesandbox.io/");
 var SandpackRuntime = /** @class */ (function (_super) {
     __extends(SandpackRuntime, _super);
     function SandpackRuntime(selector, sandboxSetup, options) {

package/dist/{consoleHook-DT9Wd42J.mjs → consoleHook-BXwdFsm6.mjs}

@@ -1,6 +1,6 @@
 import { invariant } from 'outvariant';
 import { c as createError } from './utils-DG1HA4RZ.mjs';
-import './types-DRg992RB.mjs';
+import './types-oQzEw86T.mjs';
 
 var EventEmitter = /** @class */ (function () {
     function EventEmitter() {

package/dist/{consoleHook-vrsBdedj.js → consoleHook-cqJc2nPr.js}

@@ -2,7 +2,7 @@
 
 var outvariant = require('outvariant');
 var utils = require('./utils-BiVyytui.js');
-require('./types-B3g_70H8.js');
+require('./types-xQEV22hP.js');
 
 var EventEmitter = /** @class */ (function () {
     function EventEmitter() {

package/dist/{index-Dnq1i5aM.js → index-DrIcrFsl.js}

@@ -2,11 +2,11 @@
 
 var utils = require('./utils-BiVyytui.js');
 var staticBrowserServer = require('static-browser-server');
-var consoleHook = require('./consoleHook-vrsBdedj.js');
+var consoleHook = require('./consoleHook-cqJc2nPr.js');
 var base = require('./base-DelKLlDk.js');
 var iframeFactory = require('./iframe-factory-Bc7tcyQZ.js');
 require('outvariant');
-require('./types-B3g_70H8.js');
+require('./types-xQEV22hP.js');
 require('@zenfs/core');
 require('dequal');
 

package/dist/{index-CSAGdFtt.mjs → index-DtpWLpjX.mjs}

@@ -1,10 +1,10 @@
 import { g as __extends, h as __assign, _ as __awaiter, a as __generator } from './utils-DG1HA4RZ.mjs';
 import { PreviewController } from 'static-browser-server';
-import { E as EventEmitter, g as generateRandomId, c as consoleHook } from './consoleHook-DT9Wd42J.mjs';
+import { E as EventEmitter, g as generateRandomId, c as consoleHook } from './consoleHook-BXwdFsm6.mjs';
 import { S as SandpackClient } from './base-DBh7xJX9.mjs';
 import { c as createSandboxedIframe, e as ensureSandboxed } from './iframe-factory-C8M0b9uf.mjs';
 import 'outvariant';
-import './types-DRg992RB.mjs';
+import './types-oQzEw86T.mjs';
 import '@zenfs/core';
 import 'dequal';
 

package/dist/index.js

@@ -1,7 +1,7 @@
 'use strict';
 
 var utils = require('./utils-BiVyytui.js');
-var types = require('./types-B3g_70H8.js');
+var types = require('./types-xQEV22hP.js');
 require('outvariant');
 require('@zenfs/core');
 
@@ -24,7 +24,7 @@ function loadSandpackClient(iframeSelector_1, sandboxSetup_1) {
                 case 2:
                     Client = _c.sent();
                     return [3 /*break*/, 7];
-                case 3: return [4 /*yield*/, Promise.resolve().then(function () { return require('./index-Dnq1i5aM.js'); }).then(function (m) { return m.SandpackStatic; })];
+                case 3: return [4 /*yield*/, Promise.resolve().then(function () { return require('./index-DrIcrFsl.js'); }).then(function (m) { return m.SandpackStatic; })];
                 case 4:
                     Client = _c.sent();
                     return [3 /*break*/, 7];

package/dist/index.mjs

@@ -1,6 +1,6 @@
 import { _ as __awaiter, a as __generator } from './utils-DG1HA4RZ.mjs';
 export { b as addPackageJSONIfNeededToMap, c as createError, d as createPackageJSON, e as extractErrorDetails, n as normalizePath, f as nullthrows } from './utils-DG1HA4RZ.mjs';
-export { M as META_PATH, S as SandpackFS, a as SandpackLogLevel } from './types-DRg992RB.mjs';
+export { M as META_PATH, S as SandpackFS, a as SandpackLogLevel } from './types-oQzEw86T.mjs';
 import 'outvariant';
 import '@zenfs/core';
 
@@ -23,7 +23,7 @@ function loadSandpackClient(iframeSelector_1, sandboxSetup_1) {
                 case 2:
                     Client = _c.sent();
                     return [3 /*break*/, 7];
-                case 3: return [4 /*yield*/, import('./index-CSAGdFtt.mjs').then(function (m) { return m.SandpackStatic; })];
+                case 3: return [4 /*yield*/, import('./index-DtpWLpjX.mjs').then(function (m) { return m.SandpackStatic; })];
                 case 4:
                     Client = _c.sent();
                     return [3 /*break*/, 7];

package/dist/{types-DRg992RB.mjs → types-oQzEw86T.mjs}

@@ -34,27 +34,33 @@ var GUARDED_WRITE_METHODS = [
     "rm",
     "rmdir",
 ];
-/**
- * Dev-only. Wrap the store-mutating methods on a SandpackFS instance's
- * bound-context `fs.promises` so any write that did **not** go through
- * `SandpackFS.writeFile` / `handleRemoteChange` (those use captured raw methods,
- * which stay unwrapped) emits a single loud `console.error` naming the offending
- * method + path, then still performs the write. Enforces the class writer invariant
- * (roadmap R3-110).
- *
- * This is a module-level function (not a class method) and its **only** reference
- * is behind the `if (IS_DEV)` branch in {@link ensureGuard} — so once a consumer's
- * production build folds `IS_DEV` to `false`, the branch and this whole function
- * tree-shake away (a class method would be retained). No-op in production.
- */
-function installOutOfBandGuard(fsContext) {
-    var p = fsContext.fs.promises;
+var OUT_OF_BAND_GUARD_KEY = Symbol.for("@immediately-run/sandpack-client:out-of-band-guard");
+var PRISTINE_WRITE_METHODS_KEY = Symbol.for("@immediately-run/sandpack-client:pristine-write-methods");
+var asWriteMethod = function (value) {
+    return typeof value === "function" ? value : undefined;
+};
+var isSidecarPath = function (path) {
+    return path === META_DIR || path === META_PATH;
+};
+var faceAddsWritePolicy = function (face, current) {
+    return face.writeFile !== current.writeFile ||
+        face.unlink !== current.unlink ||
+        face.mkdir !== current.mkdir;
+};
+// site-main's `src/filesystem/roEditorContext.ts` returns a fresh write-wrapper
+// closure on every `fs.promises` access; that instability distinguishes a policy
+// face from a raw ZenFS face when no pristine stash exists yet.
+var isLikelyPolicyFace = function (face) {
+    return face.writeFile !== face.writeFile ||
+        face.unlink !== face.unlink ||
+        face.mkdir !== face.mkdir;
+};
+function installOutOfBandGuard(face, pristine) {
     var _loop_1 = function (method) {
-        var original = p[method];
+        var original = pristine.methods[method];
         if (typeof original !== "function")
             return "continue";
-        var call = original;
-        p[method] = function () {
+        face[method] = function () {
             var args = [];
             for (var _i = 0; _i < arguments.length; _i++) {
                 args[_i] = arguments[_i];
@@ -63,41 +69,78 @@ function installOutOfBandGuard(fsContext) {
                 "no onChange \u2014 the editor view and bundler relay will miss it. Route the " +
                 "write through SandpackFS (EDITOR_AS_APP_SPEC D-EDIT-1 writer invariant; " +
                 "LOCAL_DEVELOPMENT_SPEC \u00A76.5).");
-            return call.apply(p, args);
+            return original.apply(pristine.receiver, args);
         };
     };
     for (var _i = 0, GUARDED_WRITE_METHODS_1 = GUARDED_WRITE_METHODS; _i < GUARDED_WRITE_METHODS_1.length; _i++) {
         var method = GUARDED_WRITE_METHODS_1[_i];
         _loop_1(method);
     }
+    face[OUT_OF_BAND_GUARD_KEY] = true;
 }
-/**
- * The true raw write methods per bound context, captured once and shared by every
- * SandpackFS instance that adopts that context. Without this, a second instance's
- * constructor captures the first instance's wrapper as its "raw" method — because the
- * guard has already replaced `fsContext.fs.promises` entries — so SandpackFS's own
- * writes trip the guard once per prior adoption (the R3-614 stacking bug).
- */
-var RAW = new WeakMap();
-/**
- * Return the context's raw write methods, capturing them and installing the out-of-band
- * guard exactly once per context (see {@link installOutOfBandGuard}). Reads `RAW` first,
- * so adopting the same context any number of times never re-wraps, never re-captures a
- * wrapper as raw, and never disarms a sibling instance.
- */
-function ensureGuard(fsContext) {
-    var existing = RAW.get(fsContext);
-    if (existing)
-        return existing;
-    var p = fsContext.fs.promises;
-    var raw = {
-        writeFile: p.writeFile.bind(p),
-        unlink: p.unlink.bind(p),
-        mkdir: p.mkdir.bind(p),
+var capturePristine = function (face) {
+    var methods = {};
+    for (var _i = 0, GUARDED_WRITE_METHODS_2 = GUARDED_WRITE_METHODS; _i < GUARDED_WRITE_METHODS_2.length; _i++) {
+        var method = GUARDED_WRITE_METHODS_2[_i];
+        var original = asWriteMethod(face[method]);
+        if (original)
+            methods[method] = original;
+    }
+    var pristine = { receiver: face, methods: methods };
+    face[PRISTINE_WRITE_METHODS_KEY] = pristine;
+    return pristine;
+};
+var captureRaw = function (face, pristine) {
+    var policy = faceAddsWritePolicy(face, pristine.receiver);
+    var faceWriteFile = asWriteMethod(face.writeFile);
+    var faceUnlink = asWriteMethod(face.unlink);
+    var faceMkdir = asWriteMethod(face.mkdir);
+    var call = function (faceMethod, pristineMethod, path, args) {
+        if (policy && !isSidecarPath(path) && faceMethod) {
+            return faceMethod.apply(face, args);
+        }
+        var method = (pristineMethod !== null && pristineMethod !== void 0 ? pristineMethod : faceMethod);
+        return method.apply(pristine.receiver, args);
+    };
+    return {
+        writeFile: function (path, data) {
+            return call(faceWriteFile, pristine.methods.writeFile, path, [
+                path,
+                data,
+            ]);
+        },
+        unlink: function (path) {
+            return call(faceUnlink, pristine.methods.unlink, path, [path]);
+        },
+        mkdir: function (path, opts) {
+            return call(faceMkdir, pristine.methods.mkdir, path, [
+                path,
+                opts,
+            ]);
+        },
     };
-    RAW.set(fsContext, raw);
-    if (IS_DEV)
-        installOutOfBandGuard(fsContext);
+};
+var capturePolicyRaw = function (face) {
+    var faceWriteFile = face.writeFile;
+    var faceUnlink = face.unlink;
+    var faceMkdir = face.mkdir;
+    return {
+        writeFile: function (path, data) { return faceWriteFile.call(face, path, data); },
+        unlink: function (path) { return faceUnlink.call(face, path); },
+        mkdir: function (path, opts) { return faceMkdir.call(face, path, opts); },
+    };
+};
+function ensureGuard(fsContext) {
+    var face = fsContext.fs.promises;
+    var existing = face[PRISTINE_WRITE_METHODS_KEY];
+    if (!existing && isLikelyPolicyFace(face)) {
+        return capturePolicyRaw(face);
+    }
+    var pristine = existing !== null && existing !== void 0 ? existing : capturePristine(face);
+    var raw = captureRaw(face, pristine);
+    if (IS_DEV && !face[OUT_OF_BAND_GUARD_KEY]) {
+        installOutOfBandGuard(face, pristine);
+    }
     return raw;
 }
 var mountCounter = 0;

package/dist/{types-B3g_70H8.js → types-xQEV22hP.js}

@@ -36,27 +36,33 @@ var GUARDED_WRITE_METHODS = [
     "rm",
     "rmdir",
 ];
-/**
- * Dev-only. Wrap the store-mutating methods on a SandpackFS instance's
- * bound-context `fs.promises` so any write that did **not** go through
- * `SandpackFS.writeFile` / `handleRemoteChange` (those use captured raw methods,
- * which stay unwrapped) emits a single loud `console.error` naming the offending
- * method + path, then still performs the write. Enforces the class writer invariant
- * (roadmap R3-110).
- *
- * This is a module-level function (not a class method) and its **only** reference
- * is behind the `if (IS_DEV)` branch in {@link ensureGuard} — so once a consumer's
- * production build folds `IS_DEV` to `false`, the branch and this whole function
- * tree-shake away (a class method would be retained). No-op in production.
- */
-function installOutOfBandGuard(fsContext) {
-    var p = fsContext.fs.promises;
+var OUT_OF_BAND_GUARD_KEY = Symbol.for("@immediately-run/sandpack-client:out-of-band-guard");
+var PRISTINE_WRITE_METHODS_KEY = Symbol.for("@immediately-run/sandpack-client:pristine-write-methods");
+var asWriteMethod = function (value) {
+    return typeof value === "function" ? value : undefined;
+};
+var isSidecarPath = function (path) {
+    return path === META_DIR || path === META_PATH;
+};
+var faceAddsWritePolicy = function (face, current) {
+    return face.writeFile !== current.writeFile ||
+        face.unlink !== current.unlink ||
+        face.mkdir !== current.mkdir;
+};
+// site-main's `src/filesystem/roEditorContext.ts` returns a fresh write-wrapper
+// closure on every `fs.promises` access; that instability distinguishes a policy
+// face from a raw ZenFS face when no pristine stash exists yet.
+var isLikelyPolicyFace = function (face) {
+    return face.writeFile !== face.writeFile ||
+        face.unlink !== face.unlink ||
+        face.mkdir !== face.mkdir;
+};
+function installOutOfBandGuard(face, pristine) {
     var _loop_1 = function (method) {
-        var original = p[method];
+        var original = pristine.methods[method];
         if (typeof original !== "function")
             return "continue";
-        var call = original;
-        p[method] = function () {
+        face[method] = function () {
             var args = [];
             for (var _i = 0; _i < arguments.length; _i++) {
                 args[_i] = arguments[_i];
@@ -65,41 +71,78 @@ function installOutOfBandGuard(fsContext) {
                 "no onChange \u2014 the editor view and bundler relay will miss it. Route the " +
                 "write through SandpackFS (EDITOR_AS_APP_SPEC D-EDIT-1 writer invariant; " +
                 "LOCAL_DEVELOPMENT_SPEC \u00A76.5).");
-            return call.apply(p, args);
+            return original.apply(pristine.receiver, args);
         };
     };
     for (var _i = 0, GUARDED_WRITE_METHODS_1 = GUARDED_WRITE_METHODS; _i < GUARDED_WRITE_METHODS_1.length; _i++) {
         var method = GUARDED_WRITE_METHODS_1[_i];
         _loop_1(method);
     }
+    face[OUT_OF_BAND_GUARD_KEY] = true;
 }
-/**
- * The true raw write methods per bound context, captured once and shared by every
- * SandpackFS instance that adopts that context. Without this, a second instance's
- * constructor captures the first instance's wrapper as its "raw" method — because the
- * guard has already replaced `fsContext.fs.promises` entries — so SandpackFS's own
- * writes trip the guard once per prior adoption (the R3-614 stacking bug).
- */
-var RAW = new WeakMap();
-/**
- * Return the context's raw write methods, capturing them and installing the out-of-band
- * guard exactly once per context (see {@link installOutOfBandGuard}). Reads `RAW` first,
- * so adopting the same context any number of times never re-wraps, never re-captures a
- * wrapper as raw, and never disarms a sibling instance.
- */
-function ensureGuard(fsContext) {
-    var existing = RAW.get(fsContext);
-    if (existing)
-        return existing;
-    var p = fsContext.fs.promises;
-    var raw = {
-        writeFile: p.writeFile.bind(p),
-        unlink: p.unlink.bind(p),
-        mkdir: p.mkdir.bind(p),
+var capturePristine = function (face) {
+    var methods = {};
+    for (var _i = 0, GUARDED_WRITE_METHODS_2 = GUARDED_WRITE_METHODS; _i < GUARDED_WRITE_METHODS_2.length; _i++) {
+        var method = GUARDED_WRITE_METHODS_2[_i];
+        var original = asWriteMethod(face[method]);
+        if (original)
+            methods[method] = original;
+    }
+    var pristine = { receiver: face, methods: methods };
+    face[PRISTINE_WRITE_METHODS_KEY] = pristine;
+    return pristine;
+};
+var captureRaw = function (face, pristine) {
+    var policy = faceAddsWritePolicy(face, pristine.receiver);
+    var faceWriteFile = asWriteMethod(face.writeFile);
+    var faceUnlink = asWriteMethod(face.unlink);
+    var faceMkdir = asWriteMethod(face.mkdir);
+    var call = function (faceMethod, pristineMethod, path, args) {
+        if (policy && !isSidecarPath(path) && faceMethod) {
+            return faceMethod.apply(face, args);
+        }
+        var method = (pristineMethod !== null && pristineMethod !== void 0 ? pristineMethod : faceMethod);
+        return method.apply(pristine.receiver, args);
+    };
+    return {
+        writeFile: function (path, data) {
+            return call(faceWriteFile, pristine.methods.writeFile, path, [
+                path,
+                data,
+            ]);
+        },
+        unlink: function (path) {
+            return call(faceUnlink, pristine.methods.unlink, path, [path]);
+        },
+        mkdir: function (path, opts) {
+            return call(faceMkdir, pristine.methods.mkdir, path, [
+                path,
+                opts,
+            ]);
+        },
     };
-    RAW.set(fsContext, raw);
-    if (IS_DEV)
-        installOutOfBandGuard(fsContext);
+};
+var capturePolicyRaw = function (face) {
+    var faceWriteFile = face.writeFile;
+    var faceUnlink = face.unlink;
+    var faceMkdir = face.mkdir;
+    return {
+        writeFile: function (path, data) { return faceWriteFile.call(face, path, data); },
+        unlink: function (path) { return faceUnlink.call(face, path); },
+        mkdir: function (path, opts) { return faceMkdir.call(face, path, opts); },
+    };
+};
+function ensureGuard(fsContext) {
+    var face = fsContext.fs.promises;
+    var existing = face[PRISTINE_WRITE_METHODS_KEY];
+    if (!existing && isLikelyPolicyFace(face)) {
+        return capturePolicyRaw(face);
+    }
+    var pristine = existing !== null && existing !== void 0 ? existing : capturePristine(face);
+    var raw = captureRaw(face, pristine);
+    if (IS_DEV && !face[OUT_OF_BAND_GUARD_KEY]) {
+        installOutOfBandGuard(face, pristine);
+    }
     return raw;
 }
 var mountCounter = 0;

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@immediately-run/sandpack-client",
-  "version": "2.22.1",
+  "version": "2.22.2",
   "description": "",
   "keywords": [],
   "repository": {
@@ -48,7 +48,7 @@
     "clean": "rm -rf dist sandpack src/clients/node/inject-scripts/dist",
     "prebuild": "yarn run clean",
     "test": "jest . --transformIgnorePatterns \"node_modules/(?!@zenfs)/\"",
-    "lint": "eslint '**/*.ts?(x)' --fix",
+    "lint": "eslint '**/*.ts?(x)' --max-warnings 0",
     "build": "rollup -c --bundleConfigAsCjs",
     "build:publish": "yarn build && gulp",
     "build:bundler": "gulp",