@replohq/sandbox-runtime 1.24.4 → 1.24.5

package/PagePreviewHeightResponder.js

@@ -21,6 +21,20 @@ function startResponder() {
     if (!parentOrigin) {
       return;
     }
+    awaitingMeasurement = false;
+    if (!reportedHeight) {
+      const pendingImages = Array.from(document.images).filter(
+        (image) => !image.complete
+      );
+      for (const image of pendingImages) {
+        if (image.loading === "lazy") {
+          image.loading = "eager";
+        }
+      }
+      if (pendingImages.length) {
+        return;
+      }
+    }
     const body = document.body;
     pinPreviewViewportUnits({
       width: window.innerWidth,
@@ -37,7 +51,6 @@ function startResponder() {
       )
     );
     baselineRootHeight = getComputedStyle(document.documentElement).height;
-    awaitingMeasurement = false;
     if (height > 0) {
       reportedHeight = height;
       window.parent.postMessage(
@@ -91,6 +104,10 @@ function startResponder() {
     if (!parentOrigin || awaitingMeasurement) {
       return;
     }
+    if (!reportedHeight) {
+      schedule();
+      return;
+    }
     cancelAnimationFrame(scheduledFrame);
     scheduledFrame = requestAnimationFrame(() => {
       scheduledFrame = 0;
@@ -135,6 +152,7 @@ function startResponder() {
     document.addEventListener(event, measureInteraction, true);
   }
   document.addEventListener("load", schedule, true);
+  document.addEventListener("error", schedule, true);
   document.addEventListener("toggle", schedule, true);
   return () => {
     cancelAnimationFrame(scheduledFrame);
@@ -145,6 +163,7 @@ function startResponder() {
     mutations.disconnect();
     window.removeEventListener("message", receive);
     document.removeEventListener("load", schedule, true);
+    document.removeEventListener("error", schedule, true);
     document.removeEventListener("toggle", schedule, true);
     for (const event of events) {
       document.removeEventListener(event, measureInteraction, true);

package/_vendor/replo-utils/lib/crypto.d.ts

@@ -22,4 +22,9 @@ export declare function getHmacSha256Hex({ rawBody, signingKey, }: {
     rawBody: string;
     signingKey: string;
 }): Promise<string>;
+export declare function isValidHmacSha256Hex({ rawBody, signingKey, signature, }: {
+    rawBody: string;
+    signingKey: string;
+    signature: string;
+}): Promise<boolean>;
 export declare function deterministicUUID(value: string): string;

package/_vendor/replo-utils/lib/crypto.mjs

@@ -1 +1 @@
-export { base64UrlToBytes, bytesToBase64Url, constantTimeEqual, deterministicUUID, getHmacSha256Hex, randomBase64Url, randomUUID, sha256Hex } from '../../../chunk-ZTT7SNYN.mjs';
+export { base64UrlToBytes, bytesToBase64Url, constantTimeEqual, deterministicUUID, getHmacSha256Hex, isValidHmacSha256Hex, randomBase64Url, randomUUID, sha256Hex } from '../../../chunk-WMAKU6GT.mjs';

package/_vendor/replo-utils/lib/json.d.ts

@@ -1,6 +1,2 @@
 export declare function parseJsonOrNull(json: string): unknown | null;
-export declare function omitJsonObjectFieldsOrNull({ json, fields, }: {
-    json: string;
-    fields: string[];
-}): string | null;
 export declare function jsonStringifyOrNull(value: unknown): string | null;

package/_vendor/replo-utils/lib/math.mjs

@@ -1,4 +1,4 @@
-import { randomUUID } from '../../../chunk-ZTT7SNYN.mjs';
+import { randomUUID } from '../../../chunk-WMAKU6GT.mjs';
 import { isNumber_default } from '../../../chunk-SKVPFN7M.mjs';
 import '../../../chunk-XYS6G2ZC.mjs';
 

package/_vendor/replo-utils/lib/misc.mjs

@@ -1,4 +1,4 @@
-export { coerceNumberToString, deepCloneAndMergeReplacingArrays, errorMessage, exhaustiveSwitch, formatFileSize, getFromRecordOrNull, hasOwnProperty, invariant, isEmpty, isFunction_default as isFunction, isNotNullish, isNullish, isPrimitive, isString_default as isString, mergeReplacingArrays, mergeReplacingObjects, noop, preventDefault, sleep, sleepWithSignal, warning } from '../../../chunk-THOBCJJA.mjs';
+export { coerceNumberToString, deepCloneAndMergeReplacingArrays, errorMessage, exhaustiveSwitch, formatFileSize, getFromRecordOrNull, hasOwnProperty, invariant, isEmpty, isFunction_default as isFunction, isNotNullish, isNullish, isPrimitive, isString_default as isString, mergeReplacingArrays, mergeReplacingObjects, noop, preventDefault, sleep, sleepWithSignal, warning } from '../../../chunk-HB4GV2QH.mjs';
 export { isNumber_default as isNumber } from '../../../chunk-SKVPFN7M.mjs';
 import '../../../chunk-4ITJNSXZ.mjs';
 import '../../../chunk-XYS6G2ZC.mjs';

package/_vendor/replo-utils/lib/pageCapture.mjs

@@ -1,4 +1,4 @@
-import { randomUUID } from '../../../chunk-ZTT7SNYN.mjs';
+import { randomUUID } from '../../../chunk-WMAKU6GT.mjs';
 
 var PAGE_CAPTURE_REQUEST = "replo:page-capture:request";
 var PAGE_CAPTURE_RESPONSE = "replo:page-capture:response";

package/_vendor/schemas/commentsOverlayRpc.mjs

@@ -1,5 +1,5 @@
-import { commentAnchorSchema, displayModeSchema, commentAnchorElementSchema } from '../../chunk-CGRTGQO5.mjs';
-import '../../chunk-THOBCJJA.mjs';
+import { commentAnchorSchema, displayModeSchema, commentAnchorElementSchema } from '../../chunk-YNBU56LF.mjs';
+import '../../chunk-HB4GV2QH.mjs';
 import '../../chunk-SKVPFN7M.mjs';
 import '../../chunk-4ITJNSXZ.mjs';
 import '../../chunk-XYS6G2ZC.mjs';

package/_vendor/schemas/externalNavigationIframeRpc.mjs

@@ -1,6 +1,6 @@
-import { createIframeRpcChannel } from '../../chunk-6WREP7C2.mjs';
-import '../../chunk-ZTT7SNYN.mjs';
-import '../../chunk-THOBCJJA.mjs';
+import { createIframeRpcChannel } from '../../chunk-WLPBO36O.mjs';
+import '../../chunk-WMAKU6GT.mjs';
+import '../../chunk-HB4GV2QH.mjs';
 import '../../chunk-SKVPFN7M.mjs';
 import '../../chunk-4ITJNSXZ.mjs';
 import '../../chunk-XYS6G2ZC.mjs';

package/_vendor/schemas/iframeRpcChannel.mjs

@@ -1,6 +1,6 @@
-export { createIframeRpcChannel, createIframeRpcRemote, iframeRpcCallSchema } from '../../chunk-6WREP7C2.mjs';
-import '../../chunk-ZTT7SNYN.mjs';
-import '../../chunk-THOBCJJA.mjs';
+export { createIframeRpcChannel, createIframeRpcRemote, iframeRpcCallSchema } from '../../chunk-WLPBO36O.mjs';
+import '../../chunk-WMAKU6GT.mjs';
+import '../../chunk-HB4GV2QH.mjs';
 import '../../chunk-SKVPFN7M.mjs';
 import '../../chunk-4ITJNSXZ.mjs';
 import '../../chunk-XYS6G2ZC.mjs';

package/_vendor/schemas/previewHealthIframeRpc.mjs

@@ -1,6 +1,6 @@
-import { createIframeRpcChannel } from '../../chunk-6WREP7C2.mjs';
-import '../../chunk-ZTT7SNYN.mjs';
-import '../../chunk-THOBCJJA.mjs';
+import { createIframeRpcChannel } from '../../chunk-WLPBO36O.mjs';
+import '../../chunk-WMAKU6GT.mjs';
+import '../../chunk-HB4GV2QH.mjs';
 import '../../chunk-SKVPFN7M.mjs';
 import '../../chunk-4ITJNSXZ.mjs';
 import '../../chunk-XYS6G2ZC.mjs';

package/_vendor/schemas/selectMode.mjs

@@ -1,5 +1,5 @@
-export { SELECT_MODE_SELECTABLE_ATTRIBUTE, SELECT_MODE_SELECTABLE_PAYLOAD_ATTRIBUTE, displayModeSchema, getIframeOffset, isSelectedSection, readSelectablePayload, selectModeBoundingRectSchema, selectModeClickPositionSchema, selectModeDefinedStyleSchema, selectModeFiberChainEntrySchema, selectModeFormatCommandSchema, selectModeHoverRectSchema, selectModeImageSchema, selectModeImageScopeSchema, selectModeImageSourceSchema, selectModeInlineTextStatusSchema, selectModeOptimisticUpdatePayloadSchema, selectModeSelectionRectSchema, selectModeSelectionSchema, selectModeSelectionTypeSchema, selectModeSourceLocationSchema, selectModeStyleAtRuleSchema, selectModeStyleVariantSchema, selectModeTextMetricsSchema, selectModeTiptapActiveMarksSchema, selectModeVideoSchema, selectableDataPayloadSchema, selectableDataSchema, selectablePlanDataSchema, selectablePlanPayloadSchema, selectedElementSchema, transformPoint, transformRect, transformSelectableData, transformSelectedElement } from '../../chunk-CGRTGQO5.mjs';
-import '../../chunk-THOBCJJA.mjs';
+export { SELECT_MODE_SELECTABLE_ATTRIBUTE, SELECT_MODE_SELECTABLE_PAYLOAD_ATTRIBUTE, displayModeSchema, getIframeOffset, isSelectedSection, readSelectablePayload, selectModeBoundingRectSchema, selectModeClickPositionSchema, selectModeDefinedStyleSchema, selectModeFiberChainEntrySchema, selectModeFormatCommandSchema, selectModeHoverRectSchema, selectModeImageSchema, selectModeImageScopeSchema, selectModeImageSourceSchema, selectModeInlineTextStatusSchema, selectModeOptimisticUpdatePayloadSchema, selectModeSelectionRectSchema, selectModeSelectionSchema, selectModeSelectionTypeSchema, selectModeSourceLocationSchema, selectModeStyleAtRuleSchema, selectModeStyleVariantSchema, selectModeTextMetricsSchema, selectModeTiptapActiveMarksSchema, selectModeVideoSchema, selectableDataPayloadSchema, selectableDataSchema, selectablePlanDataSchema, selectablePlanPayloadSchema, selectedElementSchema, transformPoint, transformRect, transformSelectableData, transformSelectedElement } from '../../chunk-YNBU56LF.mjs';
+import '../../chunk-HB4GV2QH.mjs';
 import '../../chunk-SKVPFN7M.mjs';
 import '../../chunk-4ITJNSXZ.mjs';
 import '../../chunk-XYS6G2ZC.mjs';

package/_vendor/schemas/selectModeIframeRpc.mjs

@@ -1,5 +1,5 @@
-import { selectModeBoundingRectSchema, selectModeTiptapActiveMarksSchema, selectModeSelectionRectSchema, selectableDataSchema, selectModeHoverRectSchema, selectModeFormatCommandSchema, selectModeOptimisticUpdatePayloadSchema, selectModeSelectionTypeSchema, displayModeSchema, selectModeClickPositionSchema, selectedElementSchema } from '../../chunk-CGRTGQO5.mjs';
-import '../../chunk-THOBCJJA.mjs';
+import { selectModeBoundingRectSchema, selectModeTiptapActiveMarksSchema, selectModeSelectionRectSchema, selectableDataSchema, selectModeHoverRectSchema, selectModeFormatCommandSchema, selectModeOptimisticUpdatePayloadSchema, selectModeSelectionTypeSchema, displayModeSchema, selectModeClickPositionSchema, selectedElementSchema } from '../../chunk-YNBU56LF.mjs';
+import '../../chunk-HB4GV2QH.mjs';
 import '../../chunk-SKVPFN7M.mjs';
 import '../../chunk-4ITJNSXZ.mjs';
 import '../../chunk-XYS6G2ZC.mjs';

package/buildMetadata.js

@@ -1,7 +1,7 @@
 export const BUILD_METADATA = {
   "packageName": "@replohq/sandbox-runtime",
-  "version": "1.24.4",
+  "version": "1.24.5",
   "branch": "HEAD",
-  "commit": "49a643c73e7608adcefebcd5c5e27c3e6d0c05a9",
-  "builtAt": "2026-11-04T22:05:21.699Z"
+  "commit": "547c2f890567e78210f5359114f849b43d7611da",
+  "builtAt": "2026-11-07T18:09:33.143Z"
 };

package/{chunk-6WREP7C2.mjs → chunk-WLPBO36O.mjs}

@@ -1,5 +1,5 @@
-import { randomUUID } from './chunk-ZTT7SNYN.mjs';
-import { isNullish } from './chunk-THOBCJJA.mjs';
+import { randomUUID } from './chunk-WMAKU6GT.mjs';
+import { isNullish } from './chunk-HB4GV2QH.mjs';
 import * as z from 'zod';
 
 var defaultLogger = {

package/{chunk-ZTT7SNYN.mjs → chunk-WMAKU6GT.mjs}

@@ -63,8 +63,19 @@ async function getHmacSha256Hex({
   );
   return [...new Uint8Array(signature)].map((byte) => byte.toString(16).padStart(2, "0")).join("");
 }
+async function isValidHmacSha256Hex({
+  rawBody,
+  signingKey,
+  signature
+}) {
+  const encoder = new TextEncoder();
+  return constantTimeEqual({
+    left: encoder.encode(await getHmacSha256Hex({ rawBody, signingKey })),
+    right: encoder.encode(signature)
+  });
+}
 function deterministicUUID(value) {
   return v5(value, v5.URL);
 }
 
-export { base64UrlToBytes, bytesToBase64Url, constantTimeEqual, deterministicUUID, getHmacSha256Hex, randomBase64Url, randomUUID, sha256Hex };
+export { base64UrlToBytes, bytesToBase64Url, constantTimeEqual, deterministicUUID, getHmacSha256Hex, isValidHmacSha256Hex, randomBase64Url, randomUUID, sha256Hex };

package/{chunk-CGRTGQO5.mjs → chunk-YNBU56LF.mjs}

@@ -1,4 +1,4 @@
-import { exhaustiveSwitch } from './chunk-THOBCJJA.mjs';
+import { exhaustiveSwitch } from './chunk-HB4GV2QH.mjs';
 import * as z from 'zod';
 
 function parseJsonOrNull(json) {

package/package.json

@@ -1,12 +1,12 @@
 {
   "name": "@replohq/sandbox-runtime",
-  "version": "1.24.4",
+  "version": "1.24.5",
   "reploBuild": {
     "packageName": "@replohq/sandbox-runtime",
-    "version": "1.24.4",
+    "version": "1.24.5",
     "branch": "HEAD",
-    "commit": "49a643c73e7608adcefebcd5c5e27c3e6d0c05a9",
-    "builtAt": "2026-11-04T22:05:21.699Z"
+    "commit": "547c2f890567e78210f5359114f849b43d7611da",
+    "builtAt": "2026-11-07T18:09:33.143Z"
   },
   "description": "Replo sandbox runtime — editor integration for agent-built Next.js sites.",
   "license": "SEE LICENSE IN LICENSE",

package/_vendor/replo-utils/lib/object.d.ts

@@ -1,46 +0,0 @@
-import { dequal as dequalLite } from "dequal/lite";
-interface ForEachPrimitiveValueArgs {
-    target: Record<string, any> | unknown[] | null;
-    fn: (value: unknown, key: string, newTarget: Record<string, any>) => void;
-    valueConversionFunction?: (transformValue: Record<string, any> | unknown[]) => Record<string, any> | unknown[];
-}
-/** There's probably a bug somewhere here since it assumes target is initially an object */
-export declare function forEachPrimitiveValue({ target, fn, valueConversionFunction, }: ForEachPrimitiveValueArgs): void;
-export declare function shallowEqual(objA: unknown, objB: unknown): boolean;
-/**
- * Internally we use `dequal` for deep equality checks. It benchmarks faster
- * than lodash and most other libraries.
- *
- * This function is an alias for `dequal`'s "lite" module. It does not check
- * equality for `Map` or `Set` values. If you need to compare those, use
- * `deepEqualHeavy`.
- *
- * @see https://github.com/lukeed/dequal#modes
- */
-export declare const deepEqual: typeof dequalLite;
-/**
- * Creates a new object with specified keys omitted.
- *
- * @param obj - The source object
- * @param keysToOmit - Array of keys to omit from the result
- * @returns A new object without the specified keys
- */
-export declare function omit<ObjectType extends Record<string, any>, KeyType extends keyof ObjectType>(obj: ObjectType, keysToOmit: KeyType[]): Omit<ObjectType, KeyType>;
-/**
- * `ObjectType` with every key that can hold `undefined` made optional and
- * `undefined` removed from its value type. Keys that can't be `undefined`
- * stay required.
- */
-export type WithoutUndefined<ObjectType> = {
-    [Key in keyof ObjectType as undefined extends ObjectType[Key] ? never : Key]: ObjectType[Key];
-} & {
-    [Key in keyof ObjectType as undefined extends ObjectType[Key] ? Key : never]?: Exclude<ObjectType[Key], undefined>;
-};
-/**
- * Copies `data` without its `undefined`-valued own keys. A plain loop rather
- * than lodash `pickBy`: this ships in the published SDK, and `pickBy` drags in
- * lodash's iteratee-shorthand machinery (~6 KB gzipped) for a one-line check.
- */
-export declare function filterUndefined<ObjectType extends Record<string, unknown>>(data: ObjectType): WithoutUndefined<ObjectType>;
-export declare function toNullableIfDefined<ValueType>(value: ValueType | undefined): ValueType | null | undefined;
-export {};