@replohq/sandbox-runtime 1.7.0 → 1.7.2

package/ClientErrorBoundary.d.ts

@@ -1,6 +1,6 @@
 import * as React from "react";
 /**
- * NOTE (Max, 2026-06-10): Client-side error boundary. On a caught render error it
+ * Client-side error boundary. On a caught render error it
  * (1) reports the error to the parent editor via postMessage (so it can get reported to Sentry)
  * and (2) renders a neutral cover instead of going blank, so the preview never flashes the broken
  * page while the agent fixes it. The editor decides what to show on top (loading

package/ClientErrorBoundary.js

@@ -34,10 +34,6 @@ function ClientErrorBoundary({ children }) {
       const errorObj = error instanceof Error ? error : new Error(String(error));
       window.parent.postMessage(
         {
-          // TODO (Max, 2026-06-11, REPL-27851): When adding Sentry to miniapps, I'll ensure we listen to this message
-          // and send it to Sentry. I'm not a fan of having 2 separate post messages for reporting errors (the 'error' post message in NextErrorReporter, and this one).
-          // But there's no way for the NextErrorReporter to get the actual error object, so we'll
-          // need a separate postMessage (this one, with an updated name).
           type: "replo-editor:client-error",
           payload: {
             pageRoute: window.location.pathname,
@@ -58,4 +54,3 @@ function ClientErrorBoundary({ children }) {
 export {
   ClientErrorBoundary
 };
-//# sourceMappingURL=ClientErrorBoundary.js.map

package/DocumentReadyBeacon.js

@@ -6,4 +6,3 @@ function DocumentReadyBeacon() {
 export {
   DocumentReadyBeacon
 };
-//# sourceMappingURL=DocumentReadyBeacon.js.map

package/LinkInterceptor.js

@@ -169,4 +169,3 @@ function LinkInterceptor() {
 export {
   LinkInterceptor as default
 };
-//# sourceMappingURL=LinkInterceptor.js.map

package/NavigationReceiver.js

@@ -22,4 +22,3 @@ function NavigationReceiver() {
 export {
   NavigationReceiver
 };
-//# sourceMappingURL=NavigationReceiver.js.map

package/NextErrorReporter.js

@@ -129,4 +129,3 @@ function NextErrorReporter() {
 export {
   NextErrorReporter
 };
-//# sourceMappingURL=NextErrorReporter.js.map

package/_vendor/replo-utils/lib/fonts.mjs

@@ -1,7 +1,6 @@
 import { isArray_default } from '../../../chunk-TESFJQID.mjs';
 import { Symbol_default, isObjectLike_default, baseGetTag_default } from '../../../chunk-G3S6ZNPF.mjs';
 
-// ../../node_modules/.pnpm/lodash-es@4.17.21/node_modules/lodash-es/_arrayMap.js
 function arrayMap(array, iteratee) {
   var index = -1, length = array == null ? 0 : array.length, result = Array(length);
   while (++index < length) {
@@ -11,7 +10,6 @@ function arrayMap(array, iteratee) {
 }
 var arrayMap_default = arrayMap;
 
-// ../../node_modules/.pnpm/lodash-es@4.17.21/node_modules/lodash-es/isSymbol.js
 var symbolTag = "[object Symbol]";
 function isSymbol(value) {
   return typeof value == "symbol" || isObjectLike_default(value) && baseGetTag_default(value) == symbolTag;
@@ -34,13 +32,11 @@ function baseToString(value) {
 }
 var baseToString_default = baseToString;
 
-// ../../node_modules/.pnpm/lodash-es@4.17.21/node_modules/lodash-es/toString.js
 function toString(value) {
   return value == null ? "" : baseToString_default(value);
 }
 var toString_default = toString;
 
-// ../../node_modules/.pnpm/lodash-es@4.17.21/node_modules/lodash-es/_baseSlice.js
 function baseSlice(array, start, end) {
   var index = -1, length = array.length;
   if (start < 0) {
@@ -60,7 +56,6 @@ function baseSlice(array, start, end) {
 }
 var baseSlice_default = baseSlice;
 
-// ../../node_modules/.pnpm/lodash-es@4.17.21/node_modules/lodash-es/_castSlice.js
 function castSlice(array, start, end) {
   var length = array.length;
   end = end === void 0 ? length : end;
@@ -68,7 +63,6 @@ function castSlice(array, start, end) {
 }
 var castSlice_default = castSlice;
 
-// ../../node_modules/.pnpm/lodash-es@4.17.21/node_modules/lodash-es/_hasUnicode.js
 var rsAstralRange = "\\ud800-\\udfff";
 var rsComboMarksRange = "\\u0300-\\u036f";
 var reComboHalfMarksRange = "\\ufe20-\\ufe2f";
@@ -82,13 +76,11 @@ function hasUnicode(string) {
 }
 var hasUnicode_default = hasUnicode;
 
-// ../../node_modules/.pnpm/lodash-es@4.17.21/node_modules/lodash-es/_asciiToArray.js
 function asciiToArray(string) {
   return string.split("");
 }
 var asciiToArray_default = asciiToArray;
 
-// ../../node_modules/.pnpm/lodash-es@4.17.21/node_modules/lodash-es/_unicodeToArray.js
 var rsAstralRange2 = "\\ud800-\\udfff";
 var rsComboMarksRange2 = "\\u0300-\\u036f";
 var reComboHalfMarksRange2 = "\\ufe20-\\ufe2f";
@@ -114,13 +106,11 @@ function unicodeToArray(string) {
 }
 var unicodeToArray_default = unicodeToArray;
 
-// ../../node_modules/.pnpm/lodash-es@4.17.21/node_modules/lodash-es/_stringToArray.js
 function stringToArray(string) {
   return hasUnicode_default(string) ? unicodeToArray_default(string) : asciiToArray_default(string);
 }
 var stringToArray_default = stringToArray;
 
-// ../../node_modules/.pnpm/lodash-es@4.17.21/node_modules/lodash-es/_createCaseFirst.js
 function createCaseFirst(methodName) {
   return function(string) {
     string = toString_default(string);
@@ -132,17 +122,14 @@ function createCaseFirst(methodName) {
 }
 var createCaseFirst_default = createCaseFirst;
 
-// ../../node_modules/.pnpm/lodash-es@4.17.21/node_modules/lodash-es/upperFirst.js
 var upperFirst = createCaseFirst_default("toUpperCase");
 var upperFirst_default = upperFirst;
 
-// ../../node_modules/.pnpm/lodash-es@4.17.21/node_modules/lodash-es/capitalize.js
 function capitalize(string) {
   return upperFirst_default(toString_default(string).toLowerCase());
 }
 var capitalize_default = capitalize;
 
-// ../replo-utils/lib/fonts.ts
 function slugifyFontFamily(family) {
   return family.replace(/([a-z])([A-Z])/g, "$1-$2").split(/[\s_-]+/u).map((word) => word.toLowerCase()).join("-");
 }

package/_vendor/replo-utils/lib/geometry.mjs

@@ -1,4 +1,3 @@
-// ../replo-utils/lib/geometry.ts
 function isIntersecting(targetRect, destinationRect, { tolerance = 0 } = {}) {
   return targetRect.left <= destinationRect.right + tolerance && targetRect.right >= destinationRect.left - tolerance && targetRect.top <= destinationRect.bottom + tolerance && targetRect.bottom >= destinationRect.top - tolerance;
 }

package/_vendor/replo-utils/lib/math.d.ts

@@ -40,8 +40,6 @@ export declare function randomBigString(): string;
 /**
  * Given a current value and a previous value, calculate the percentage change
  * from the previous value to the current value.
- *
- * @author Max 2025-04-01
  */
 export declare function calculatePercentageChange(current: number, previous: number): number | null;
 /**
@@ -54,7 +52,5 @@ export declare function calculatePercentageChange(current: number, previous: num
  * formatBytes(1536) // "1.50 KB"
  * formatBytes(1048576) // "1.00 MB"
  * formatBytes("1073741824") // "1.00 GB"
- *
- * @author Max 2024-08-28
  */
 export declare function formatBytes(bytes: number | string): string;

package/_vendor/replo-utils/lib/math.mjs

@@ -2,7 +2,6 @@ import { randomUUID } from '../../../chunk-SGKQ5HGT.mjs';
 import { isNumber_default } from '../../../chunk-FLYEIRFK.mjs';
 import '../../../chunk-G3S6ZNPF.mjs';
 
-// ../replo-utils/lib/math.ts
 var EPSILON = 0.03;
 function isCloseTo(number, comparator, epsilon = EPSILON) {
   return Math.abs(number - comparator) < epsilon;

package/_vendor/replo-utils/lib/posthogReplay.mjs

@@ -1,4 +1,3 @@
-// ../replo-utils/lib/posthogReplay.ts
 var POSTHOG_REPLAY_SNAPSHOT_REQUEST = "posthog:replay:request-full-snapshot";
 var POSTHOG_REPLAY_READY_POLL_INTERVAL_MS = 100;
 var POSTHOG_REPLAY_READY_POLL_TIMEOUT_MS = 1e4;

package/_vendor/replo-utils/react/use-iframe-rpc-channel.mjs

@@ -1,6 +1,5 @@
 import * as React from 'react';
 
-// ../replo-utils/react/use-iframe-rpc-channel.ts
 function useIframeRpcChannel(channel) {
   React.useEffect(() => {
     if (!channel) {

package/_vendor/replo-utils/react/use-viewport-snapshot-responder.mjs

@@ -1,7 +1,6 @@
 import { startViewportSnapshotResponder } from '../../../chunk-3YA3QXUQ.mjs';
 import { useEffect } from 'react';
 
-// ../../node_modules/.pnpm/rrweb-snapshot@2.1.1/node_modules/rrweb-snapshot/dist/rrweb-snapshot.js
 var __defProp = Object.defineProperty;
 var __defNormalProp = (obj, key, value) => key in obj ? __defProp(obj, key, { enumerable: true, configurable: true, writable: true, value }) : obj[key] = value;
 var __publicField = (obj, key, value) => __defNormalProp(obj, typeof key !== "symbol" ? key + "" : key, value);
@@ -44,7 +43,7 @@ function getUntaintedPrototype(key) {
   const defaultPrototype = defaultObj.prototype;
   const accessorNames = key in testableAccessors ? testableAccessors[key] : void 0;
   const isUntaintedAccessors = Boolean(
-    accessorNames && // @ts-expect-error 2345
+    accessorNames &&
     accessorNames.every(
       (accessor) => {
         var _a, _b;
@@ -57,7 +56,6 @@ function getUntaintedPrototype(key) {
   const methodNames = key in testableMethods ? testableMethods[key] : void 0;
   const isUntaintedMethods = Boolean(
     methodNames && methodNames.every(
-      // @ts-expect-error 2345
       (method) => {
         var _a;
         return typeof defaultPrototype[method] === "function" && ((_a = defaultPrototype[method]) == null ? void 0 : _a.toString().includes("[native code]"));
@@ -219,8 +217,6 @@ function isElement(n) {
 }
 function isShadowRoot(n) {
   const hostEl = (
-    // anchor and textarea elements also have a `host` property
-    // but only shadow roots have a `mode` property
     n && "host" in n && "mode" in n && index.host(n) || null
   );
   return Boolean(
@@ -279,9 +275,8 @@ function stringifyRule(rule2, sheetHref) {
   if (isCSSImportRule(rule2)) {
     let importStringified;
     try {
-      importStringified = // for same-origin stylesheets,
-      // we can access the imported stylesheet rules directly
-      stringifyStylesheet(rule2.styleSheet) || // work around browser issues with the raw string `@import url(...)` statement
+      importStringified =
+      stringifyStylesheet(rule2.styleSheet) ||
       escapeImportStatement(rule2);
     } catch (error) {
       importStringified = rule2.cssText;
@@ -331,8 +326,6 @@ var Mirror = class {
   getMeta(n) {
     return this.nodeMetaMap.get(n) || null;
   }
-  // removes the node from idNodeMap
-  // doesn't remove the node from nodeMetaMap
   removeNodeFromMap(n) {
     const id = this.getId(n);
     this.idNodeMap.delete(id);
@@ -398,7 +391,6 @@ function is2DCanvasBlank(canvas) {
       const getImageData = ctx.getImageData;
       const originalGetImageData = ORIGINAL_ATTRIBUTE_NAME in getImageData ? getImageData[ORIGINAL_ATTRIBUTE_NAME] : getImageData;
       const pixelBuffer = new Uint32Array(
-        // eslint-disable-next-line @typescript-eslint/no-unsafe-argument, @typescript-eslint/no-unsafe-member-access
         originalGetImageData.call(
           ctx,
           x,
@@ -415,7 +407,6 @@ function is2DCanvasBlank(canvas) {
 function getInputType(element) {
   const type = element.type;
   return element.hasAttribute("data-rr-is-password") ? "password" : type ? (
-    // eslint-disable-next-line @typescript-eslint/no-unnecessary-type-assertion
     toLowerCase(type)
   ) : null;
 }
@@ -504,8 +495,7 @@ function splitCssText(cssText, style, _testNoPxNorm = false) {
         let j = 3;
         for (; j < textContentNorm.length; j++) {
           if (
-            // keep consuming css identifiers (to get a decent chunk more quickly)
-            textContentNorm[j].match(/[a-zA-Z0-9]/) || // substring needs to be unique to this section
+            textContentNorm[j].match(/[a-zA-Z0-9]/) ||
             textContentNorm.indexOf(textContentNorm.substring(0, j), 1) !== -1
           ) {
             continue;
@@ -854,7 +844,6 @@ function serializeNode(n, options) {
           type: NodeType.Document,
           childNodes: [],
           compatMode: n.compatMode
-          // probably "BackCompat"
         };
       } else {
         return {
@@ -1147,8 +1136,6 @@ function slimDOMDefaults(_slimDOMOptions) {
       headMetaRobots: true,
       headMetaHttpEquiv: true,
       headMetaVerification: true,
-      // the following are off for slimDOMOptions === true,
-      // as they destroy some (hidden) info:
       headMetaAuthorship: _slimDOMOptions === "all",
       headMetaDescKeywords: _slimDOMOptions === "all",
       headTitleMutations: _slimDOMOptions === "all"
@@ -1162,9 +1149,9 @@ function slimDOMExcluded(sn, slimDOMOptions) {
   if (slimDOMOptions.comment && sn.type === NodeType.Comment) {
     return true;
   } else if (sn.type === NodeType.Element) {
-    if (slimDOMOptions.script && // script tag
-    (sn.tagName === "script" || // (module)preload link
-    sn.tagName === "link" && (sn.attributes.rel === "preload" && sn.attributes.as === "script" || sn.attributes.rel === "modulepreload") || // prefetch link
+    if (slimDOMOptions.script &&
+    (sn.tagName === "script" ||
+    sn.tagName === "link" && (sn.attributes.rel === "preload" && sn.attributes.as === "script" || sn.attributes.rel === "modulepreload") ||
     sn.tagName === "link" && sn.attributes.rel === "prefetch" && typeof sn.attributes.href === "string" && extractFileExtension(sn.attributes.href) === "js")) {
       return true;
     } else if (slimDOMOptions.headFavicon && (sn.tagName === "link" && sn.attributes.rel === "shortcut icon" || sn.tagName === "meta" && (lowerIfExists(sn.attributes.name).match(
@@ -1174,7 +1161,7 @@ function slimDOMExcluded(sn, slimDOMOptions) {
     } else if (sn.tagName === "meta") {
       if (slimDOMOptions.headMetaDescKeywords && lowerIfExists(sn.attributes.name).match(/^description|keywords$/)) {
         return true;
-      } else if (slimDOMOptions.headMetaSocial && (lowerIfExists(sn.attributes.property).match(/^(og|twitter|fb):/) || // og = opengraph (facebook)
+      } else if (slimDOMOptions.headMetaSocial && (lowerIfExists(sn.attributes.property).match(/^(og|twitter|fb):/) ||
       lowerIfExists(sn.attributes.name).match(/^(og|twitter):/) || lowerIfExists(sn.attributes.name) === "pinterest")) {
         return true;
       } else if (slimDOMOptions.headMetaRobots && (lowerIfExists(sn.attributes.name) === "robots" || lowerIfExists(sn.attributes.name) === "googlebot" || lowerIfExists(sn.attributes.name) === "bingbot")) {
@@ -2067,7 +2054,7 @@ function requireNode() {
         set(node2, prop, value) {
           if (node2[prop] === value) return true;
           node2[prop] = value;
-          if (prop === "prop" || prop === "value" || prop === "name" || prop === "params" || prop === "important" || /* c8 ignore next */
+          if (prop === "prop" || prop === "value" || prop === "name" || prop === "params" || prop === "important" || 
           prop === "text") {
             node2.markDirty();
           }
@@ -4158,7 +4145,6 @@ function requireParser() {
         }
       }
     }
-    // Helpers
     getPosition(offset) {
       let pos = this.input.fromOffset(offset);
       return {
@@ -4317,7 +4303,6 @@ function requireParser() {
       }
       return spaces;
     }
-    // Errors
     spacesAndCommentsFromStart(tokens) {
       let next;
       let spaces = "";
@@ -5235,7 +5220,6 @@ postcss.Rule;
 postcss.Root;
 postcss.Node;
 
-// ../replo-utils/react/use-viewport-snapshot-responder.tsx
 function measureViewportFrameRect(frameIndex) {
   const element = document.querySelectorAll("iframe")[frameIndex];
   if (!element) {

package/_vendor/schemas/componentPreview.mjs

@@ -1,6 +1,5 @@
 import { z } from 'zod';
 
-// ../schemas/componentPreview.ts
 var DATA_LOADER_KEYS = {
   SHOPIFY_PRODUCT: "shopify_storefront.product",
   SHOPIFY_COLLECTION: "shopify_storefront.collection",
@@ -29,7 +28,6 @@ var DATA_LOADER_KEYS = {
 };
 z.enum(Object.values(DATA_LOADER_KEYS));
 
-// ../schemas/componentPreview.ts
 var MAX_COMPONENT_PREVIEW_PROPS_BYTES = 16 * 1024;
 var componentPreviewPropNameSchema = z.string().min(1).max(80).regex(/^[A-Za-z_$][\w$]*$/u).refine((name) => {
   return !["__proto__", "constructor", "dangerouslySetInnerHTML"].includes(
@@ -49,8 +47,6 @@ var websiteBuilderToComponentPreviewMethodConfig = {
       props: componentPreviewPropsSchema,
       sourceRevision: z.string().min(1)
     }),
-    // How the frame applied the update: in place via the client prop store,
-    // via an in-frame server navigation, or not at all (already current).
     outputSchema: z.object({
       mode: z.enum(["client", "navigation", "unchanged"])
     }),

package/_vendor/schemas/designLibrary.mjs

@@ -1,6 +1,5 @@
 import { z } from 'zod';
 
-// ../schemas/designLibrary.ts
 var colorTypeSchema = z.enum([
   "basic",
   "foregroundPrimary",
@@ -55,7 +54,6 @@ z.discriminatedUnion("type", [
   savedStyleTextAttributesSchema
 ]).describe("SavedStyleAttributes");
 
-// ../schemas/designLibrary.ts
 var savedColorStyleSchema = z.object({
   type: z.literal("color"),
   name: z.string(),

package/_vendor/schemas/errors.d.ts

@@ -186,9 +186,6 @@ export type ErrorDetails = {
  * Map of error keys to custom user-facing details. Should ONLY be used
  * in cases where we want to override the default behavior of ErrorUserFacingDetails
  * from the backend.
- *
- * TODO (Noah, 2024-01-15): Clean up these custom configs, all of them
- * are only used by Django (and 'base' can be moved directly into the reducer function)
  */
 export declare const CUSTOM_ERROR_KEY_TO_PROPS: {
     "shopifyArticle.failedToPublish": () => {

package/_vendor/schemas/iframeRpcChannel.d.ts

@@ -16,7 +16,7 @@ export type IframeRpcChannelHandlerMeta<OutgoingMethods extends IframeRpcChannel
     channel: IframeRpcChannelRemote<OutgoingMethods>;
 };
 export type IframeRpcChannelHandlers<IncomingMethods extends IframeRpcChannelMethodConfig, OutgoingMethods extends IframeRpcChannelMethodConfig = IframeRpcChannelMethodConfig> = {
-    [Method in keyof IncomingMethods]: (input: z.output<IncomingMethods[Method]["inputSchema"]>, meta: IframeRpcChannelHandlerMeta<OutgoingMethods>) => IsVoidMethod<IncomingMethods, Method> extends true ? void : // Valued handlers stay `unknown` so callers can return domain/generated
+    [Method in keyof IncomingMethods]: (input: z.output<IncomingMethods[Method]["inputSchema"]>, meta: IframeRpcChannelHandlerMeta<OutgoingMethods>) => IsVoidMethod<IncomingMethods, Method> extends true ? void :
     unknown | Promise<unknown>;
 };
 export type IframeRpcChannelInputHandlers<IncomingMethods extends IframeRpcChannelMethodConfig> = {

package/_vendor/schemas/iframeRpcChannel.mjs

@@ -5,7 +5,6 @@ import '../../chunk-TESFJQID.mjs';
 import '../../chunk-G3S6ZNPF.mjs';
 import { z } from 'zod';
 
-// ../replo-utils/lib/log.ts
 var defaultLogger = {
   info: console.log,
   debug: console.debug,
@@ -39,7 +38,6 @@ var errorUserFacingDetailsMessageSchema = z.object({
     "billing.addPublishedElements",
     "billing.addShopifyThemeProject",
     "billing.addReploSite",
-    // Agent Billing ONLY
     "agentBilling.shopifyThemeBuilder.publishedElements.exceeded",
     "agentBilling.shopifyThemeBuilder.projects.exceeded",
     "agentBilling.sites.exceeded",
@@ -48,14 +46,8 @@ var errorUserFacingDetailsMessageSchema = z.object({
   ]),
   message: z.string(),
   isRecoverable: z.boolean().optional(),
-  // NOTE (Matt 2024-03-22): We support detail being an array of strings
-  // in FullPageModal only.
   detail: z.array(z.string()).or(z.string()).optional(),
   key: z.string(),
-  // Structured data for API callers next to the human message, e.g. the
-  // current draft version on a project-context 409 or the offending paths on
-  // a 422. The worker error handler serializes userFacingDetails as-is, so
-  // this is the one place such data can travel without a second envelope.
   details: z.record(z.string(), z.unknown()).optional(),
   usage: z.object({
     current: z.number(),
@@ -101,15 +93,7 @@ var errorUserFacingDetailsMessageSchema = z.object({
   ]).optional()
 }).describe("ErrorUserFacingDetailsWithMessage");
 z.discriminatedUnion("type", [
-  /**
-   * Normal errors, show error UI depending on the type
-   */
   errorUserFacingDetailsMessageSchema,
-  /**
-   * Errors which should be ignored by the frontend. This is uncommon, usually
-   * you want to show an error in the UI, and if you don't want to then you catch
-   * the error in your route.
-   */
   z.object({
     type: z.literal("uncommon_none"),
     key: z.string(),
@@ -171,7 +155,6 @@ var IframeRpcChannelInvalidInputError = class extends IframeRpcChannelError {
   }
 };
 
-// ../schemas/iframeRpcChannel.ts
 var iframeRpcCallResultSchema = z.discriminatedUnion("type", [
   z.object({
     type: z.literal("success"),
@@ -308,7 +291,6 @@ function createIframeRpcChannel(options) {
     }
     try {
       const handler = handlers[
-        // eslint-disable-next-line replo/no-as-cast -- NOTE (Noah, 2026-07-25): The method existence check above narrows this dynamic wire string to the configured handler keys.
         message.method
       ];
       const result = await handler(parsedInput.data, handlerMeta);
@@ -350,7 +332,6 @@ function createIframeRpcChannel(options) {
       return;
     }
     const handler = handlers[
-      // eslint-disable-next-line replo/no-as-cast -- NOTE (Noah, 2026-08-07): Method existence check narrows this wire string to configured handler keys.
       message.method
     ];
     handler(parsedInput.data, handlerMeta);
@@ -493,9 +474,6 @@ function createIframeRpcChannel(options) {
         }, timeoutMs);
         pendingRequests.set(id, {
           method,
-          // PendingRequest is shared across methods, so resolve is typed as
-          // unknown; handleResponse already validated against this method's
-          // outputSchema before calling it.
           resolve: (value) => {
             resolve(value);
           },

package/_vendor/schemas/pageAnnotations.mjs

@@ -1,6 +1,5 @@
 import { z } from 'zod';
 
-// ../schemas/pageAnnotations.ts
 var PAGE_ANNOTATIONS_PROTOCOL_VERSION = 1;
 var pageAnnotationColorSchema = z.enum(["red", "purple", "amber"]).describe("PageAnnotationColor");
 var pageAnnotationPlacementSchema = z.enum(["element", "pageTop"]).describe("PageAnnotationPlacement");
@@ -9,8 +8,6 @@ var pageAnnotationMarkerSchema = z.object({
   number: z.number().int().min(1).max(99),
   color: pageAnnotationColorSchema,
   selector: z.string().min(1).max(2e3),
-  // "pageTop" markers ignore the selector and stack near the top of the
-  // page (page-wide findings); "element" markers pin to their selector.
   placement: pageAnnotationPlacementSchema.default("element")
 }).describe("PageAnnotationMarker");
 var pageAnnotationViewportRectSchema = z.object({

package/_vendor/schemas/selectMode.d.ts

@@ -312,8 +312,6 @@ export declare const selectModeFormatCommandSchema: z.ZodEnum<{
  *     are pinned to this enum via `Extract<SelectModeSelectionType, …>`
  *
  * Renaming or adding a variant here is a TS error in all three.
- *
- * @author Kevin O'Connell 2026-04-20
  */
 export declare const selectModeSelectionTypeSchema: z.ZodEnum<{
     element: "element";
@@ -337,8 +335,6 @@ export declare const selectModeSelectionTypeSchema: z.ZodEnum<{
  * Distinct from the SDK-internal `SelectModeInteractionSession`, which
  * holds live DOM `Element` refs and live pointer/scroll geometry. This
  * type holds only the message-passable, serialized projection.
- *
- * @author Kevin O'Connell 2026-04-23
  */
 export declare const selectModeSelectionSchema: z.ZodDiscriminatedUnion<[z.ZodObject<{
     type: z.ZodLiteral<"none">;

package/_vendor/schemas/selectModeIframeRpc.mjs

@@ -24,7 +24,6 @@ var websiteBuilderToCanopyMethodConfig = {
     outputSchema: selectedElementSchema,
     timeoutMs: 1500
   },
-  // Client-side transition command; fire-and-forget because success is observed as the `replo:navigated` echo.
   navigateToRoute: {
     inputSchema: z.object({ pathname: z.string() }),
     outputSchema: z.void()
@@ -33,13 +32,6 @@ var websiteBuilderToCanopyMethodConfig = {
     inputSchema: z.object({ displayMode: displayModeSchema }),
     outputSchema: z.void()
   },
-  // Declarative push of the parent's current selection into the canopy
-  // iframe. Transitioning to `none` is canopy's signal to hide its
-  // in-iframe selection frame and drop any in-progress drag — there's no
-  // separate "clear" message because selection state always flows through
-  // agentUiState. For an `area` selection the parent may also send the
-  // selectors of the members it still holds, so an item removed in the
-  // editor is dropped from the in-iframe selection too.
   setSelectionType: {
     inputSchema: z.object({
       selectionType: selectModeSelectionTypeSchema,
@@ -155,8 +147,6 @@ var canopyToWebsiteBuilderMethodConfig = {
   editorStateUpdate: {
     inputSchema: z.object({
       activeMarks: selectModeTiptapActiveMarksSchema,
-      // Whether an inline text edit is currently open. Lets the parent show the
-      // inline formatting controls (and live mark state) only while editing.
       isEditing: z.boolean()
     }),
     outputSchema: z.void()

package/annotations/AnnotationLayerMount.js

@@ -10,4 +10,3 @@ function AnnotationLayerMount() {
 export {
   AnnotationLayerMount
 };
-//# sourceMappingURL=AnnotationLayerMount.js.map

package/annotations/annotationController.js

@@ -77,7 +77,6 @@ function resolveMarkers() {
           width: 0,
           height: 0
         },
-        // The editor owns numbering; rendering the wire number keeps dots in sync with the panel.
         displayNumber: marker.number
       });
       pageTopSlot += 1;
@@ -99,7 +98,6 @@ function resolveMarkers() {
       marker,
       element,
       isFixed,
-      // Fixed frames use viewport coords; absolute frames use page coords.
       rect: {
         x: domRect.x + (isFixed ? 0 : scrollOffset.left),
         y: domRect.y + (isFixed ? 0 : scrollOffset.top),
@@ -420,4 +418,3 @@ function initAnnotationLayer() {
 export {
   initAnnotationLayer
 };
-//# sourceMappingURL=annotationController.js.map

package/annotations/bridgeGate.js

@@ -1,9 +1,6 @@
 const ALLOWED_EDITOR_ORIGIN_PATTERNS = [
-  // Local dev editors (any port).
   /^https?:\/\/localhost(?::\d+)?$/u,
-  // Hosted editors and miniapps; multi-label hosts like website-builder.apps.replo.app must pass.
   /^https:\/\/(?:[a-z0-9-]+\.)*replo\.app$/u,
-  // Dev front-door tunnels (`https://replo-<alias>.ngrok.app`).
   /^https:\/\/replo-[a-z0-9-]+\.ngrok\.app$/u
 ];
 function isAllowedEditorOrigin(origin) {
@@ -19,4 +16,3 @@ export {
   isAllowedEditorMessage,
   isAllowedEditorOrigin
 };
-//# sourceMappingURL=bridgeGate.js.map

package/buildMetadata.js

@@ -1,7 +1,7 @@
 export const BUILD_METADATA = {
   "packageName": "@replohq/sandbox-runtime",
-  "version": "1.7.0",
+  "version": "1.7.2",
   "branch": "HEAD",
-  "commit": "d7576c3808fcbadef1e0cb29b3ea3ed492485a05",
-  "builtAt": "2026-09-14T23:38:15.448Z"
+  "commit": "d7ee0ec28234216b633c81e1a6d8683591c946f8",
+  "builtAt": "2026-09-15T17:30:06.538Z"
 };

package/chunk-3YA3QXUQ.mjs

@@ -1,4 +1,3 @@
-// ../replo-utils/lib/viewportSnapshot.ts
 var VIEWPORT_SNAPSHOT_REQUEST = "replo:viewport-snapshot:request";
 var VIEWPORT_SNAPSHOT_RESPONSE = "replo:viewport-snapshot:response";
 var VIEWPORT_CONTEXT_REQUEST = "replo:viewport-context:request";
@@ -51,8 +50,7 @@ function requestChildViewportSnapshots({
       );
     };
     const onMessage = (event) => {
-      if (!isResponseMessage(event.data) || event.data.requestId !== requestId || // A frame may only answer for its own slot — anything else could
-      // overwrite a sibling's capture or force an early settle.
+      if (!isResponseMessage(event.data) || event.data.requestId !== requestId ||
       event.source !== targetWindow.frames[event.data.frameIndex]) {
         return;
       }
@@ -127,7 +125,6 @@ function startViewportSnapshotResponder({
     }
     void requestChildViewportSnapshots({
       targetWindow,
-      // Derived per level so a child's own fan-out can't collide with ours.
       requestId: `${requestId}:${frameIndex}`,
       timeoutMs: cascadeTimeoutMs,
       remainingDepth: remainingDepth - 1,

package/chunk-FLYEIRFK.mjs

@@ -1,6 +1,5 @@
 import { isObjectLike_default, baseGetTag_default } from './chunk-G3S6ZNPF.mjs';
 
-// ../../node_modules/.pnpm/lodash-es@4.17.21/node_modules/lodash-es/isNumber.js
 var numberTag = "[object Number]";
 function isNumber(value) {
   return typeof value == "number" || isObjectLike_default(value) && baseGetTag_default(value) == numberTag;