npm - almostnode - Versions diffs - 0.1.0 - Mend

almostnode 0.1.0

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.

Files changed (216) hide show

package/LICENSE +21 -0
package/README.md +731 -0
package/dist/__sw__.js +394 -0
package/dist/ai-chatbot-demo-entry.d.ts +6 -0
package/dist/ai-chatbot-demo-entry.d.ts.map +1 -0
package/dist/ai-chatbot-demo.d.ts +42 -0
package/dist/ai-chatbot-demo.d.ts.map +1 -0
package/dist/assets/runtime-worker-D9x_Ddwz.js +60543 -0
package/dist/assets/runtime-worker-D9x_Ddwz.js.map +1 -0
package/dist/convex-app-demo-entry.d.ts +6 -0
package/dist/convex-app-demo-entry.d.ts.map +1 -0
package/dist/convex-app-demo.d.ts +68 -0
package/dist/convex-app-demo.d.ts.map +1 -0
package/dist/cors-proxy.d.ts +46 -0
package/dist/cors-proxy.d.ts.map +1 -0
package/dist/create-runtime.d.ts +42 -0
package/dist/create-runtime.d.ts.map +1 -0
package/dist/demo.d.ts +6 -0
package/dist/demo.d.ts.map +1 -0
package/dist/dev-server.d.ts +97 -0
package/dist/dev-server.d.ts.map +1 -0
package/dist/frameworks/next-dev-server.d.ts +202 -0
package/dist/frameworks/next-dev-server.d.ts.map +1 -0
package/dist/frameworks/vite-dev-server.d.ts +85 -0
package/dist/frameworks/vite-dev-server.d.ts.map +1 -0
package/dist/index.cjs +14965 -0
package/dist/index.cjs.map +1 -0
package/dist/index.d.ts +71 -0
package/dist/index.d.ts.map +1 -0
package/dist/index.mjs +14867 -0
package/dist/index.mjs.map +1 -0
package/dist/next-demo.d.ts +49 -0
package/dist/next-demo.d.ts.map +1 -0
package/dist/npm/index.d.ts +71 -0
package/dist/npm/index.d.ts.map +1 -0
package/dist/npm/registry.d.ts +66 -0
package/dist/npm/registry.d.ts.map +1 -0
package/dist/npm/resolver.d.ts +52 -0
package/dist/npm/resolver.d.ts.map +1 -0
package/dist/npm/tarball.d.ts +29 -0
package/dist/npm/tarball.d.ts.map +1 -0
package/dist/runtime-interface.d.ts +90 -0
package/dist/runtime-interface.d.ts.map +1 -0
package/dist/runtime.d.ts +103 -0
package/dist/runtime.d.ts.map +1 -0
package/dist/sandbox-helpers.d.ts +43 -0
package/dist/sandbox-helpers.d.ts.map +1 -0
package/dist/sandbox-runtime.d.ts +65 -0
package/dist/sandbox-runtime.d.ts.map +1 -0
package/dist/server-bridge.d.ts +89 -0
package/dist/server-bridge.d.ts.map +1 -0
package/dist/shims/assert.d.ts +51 -0
package/dist/shims/assert.d.ts.map +1 -0
package/dist/shims/async_hooks.d.ts +37 -0
package/dist/shims/async_hooks.d.ts.map +1 -0
package/dist/shims/buffer.d.ts +20 -0
package/dist/shims/buffer.d.ts.map +1 -0
package/dist/shims/child_process-browser.d.ts +92 -0
package/dist/shims/child_process-browser.d.ts.map +1 -0
package/dist/shims/child_process.d.ts +93 -0
package/dist/shims/child_process.d.ts.map +1 -0
package/dist/shims/chokidar.d.ts +55 -0
package/dist/shims/chokidar.d.ts.map +1 -0
package/dist/shims/cluster.d.ts +52 -0
package/dist/shims/cluster.d.ts.map +1 -0
package/dist/shims/crypto.d.ts +122 -0
package/dist/shims/crypto.d.ts.map +1 -0
package/dist/shims/dgram.d.ts +34 -0
package/dist/shims/dgram.d.ts.map +1 -0
package/dist/shims/diagnostics_channel.d.ts +80 -0
package/dist/shims/diagnostics_channel.d.ts.map +1 -0
package/dist/shims/dns.d.ts +87 -0
package/dist/shims/dns.d.ts.map +1 -0
package/dist/shims/domain.d.ts +25 -0
package/dist/shims/domain.d.ts.map +1 -0
package/dist/shims/esbuild.d.ts +105 -0
package/dist/shims/esbuild.d.ts.map +1 -0
package/dist/shims/events.d.ts +37 -0
package/dist/shims/events.d.ts.map +1 -0
package/dist/shims/fs.d.ts +115 -0
package/dist/shims/fs.d.ts.map +1 -0
package/dist/shims/fsevents.d.ts +67 -0
package/dist/shims/fsevents.d.ts.map +1 -0
package/dist/shims/http.d.ts +217 -0
package/dist/shims/http.d.ts.map +1 -0
package/dist/shims/http2.d.ts +81 -0
package/dist/shims/http2.d.ts.map +1 -0
package/dist/shims/https.d.ts +36 -0
package/dist/shims/https.d.ts.map +1 -0
package/dist/shims/inspector.d.ts +25 -0
package/dist/shims/inspector.d.ts.map +1 -0
package/dist/shims/module.d.ts +22 -0
package/dist/shims/module.d.ts.map +1 -0
package/dist/shims/net.d.ts +100 -0
package/dist/shims/net.d.ts.map +1 -0
package/dist/shims/os.d.ts +159 -0
package/dist/shims/os.d.ts.map +1 -0
package/dist/shims/path.d.ts +72 -0
package/dist/shims/path.d.ts.map +1 -0
package/dist/shims/perf_hooks.d.ts +50 -0
package/dist/shims/perf_hooks.d.ts.map +1 -0
package/dist/shims/process.d.ts +93 -0
package/dist/shims/process.d.ts.map +1 -0
package/dist/shims/querystring.d.ts +23 -0
package/dist/shims/querystring.d.ts.map +1 -0
package/dist/shims/readdirp.d.ts +52 -0
package/dist/shims/readdirp.d.ts.map +1 -0
package/dist/shims/readline.d.ts +62 -0
package/dist/shims/readline.d.ts.map +1 -0
package/dist/shims/rollup.d.ts +34 -0
package/dist/shims/rollup.d.ts.map +1 -0
package/dist/shims/sentry.d.ts +163 -0
package/dist/shims/sentry.d.ts.map +1 -0
package/dist/shims/stream.d.ts +181 -0
package/dist/shims/stream.d.ts.map +1 -0
package/dist/shims/tls.d.ts +53 -0
package/dist/shims/tls.d.ts.map +1 -0
package/dist/shims/tty.d.ts +30 -0
package/dist/shims/tty.d.ts.map +1 -0
package/dist/shims/url.d.ts +64 -0
package/dist/shims/url.d.ts.map +1 -0
package/dist/shims/util.d.ts +106 -0
package/dist/shims/util.d.ts.map +1 -0
package/dist/shims/v8.d.ts +73 -0
package/dist/shims/v8.d.ts.map +1 -0
package/dist/shims/vfs-adapter.d.ts +126 -0
package/dist/shims/vfs-adapter.d.ts.map +1 -0
package/dist/shims/vm.d.ts +45 -0
package/dist/shims/vm.d.ts.map +1 -0
package/dist/shims/worker_threads.d.ts +66 -0
package/dist/shims/worker_threads.d.ts.map +1 -0
package/dist/shims/ws.d.ts +66 -0
package/dist/shims/ws.d.ts.map +1 -0
package/dist/shims/zlib.d.ts +161 -0
package/dist/shims/zlib.d.ts.map +1 -0
package/dist/transform.d.ts +24 -0
package/dist/transform.d.ts.map +1 -0
package/dist/virtual-fs.d.ts +226 -0
package/dist/virtual-fs.d.ts.map +1 -0
package/dist/vite-demo.d.ts +35 -0
package/dist/vite-demo.d.ts.map +1 -0
package/dist/vite-sw.js +132 -0
package/dist/worker/runtime-worker.d.ts +8 -0
package/dist/worker/runtime-worker.d.ts.map +1 -0
package/dist/worker-runtime.d.ts +50 -0
package/dist/worker-runtime.d.ts.map +1 -0
package/package.json +85 -0
package/src/ai-chatbot-demo-entry.ts +244 -0
package/src/ai-chatbot-demo.ts +509 -0
package/src/convex-app-demo-entry.ts +1107 -0
package/src/convex-app-demo.ts +1316 -0
package/src/cors-proxy.ts +81 -0
package/src/create-runtime.ts +147 -0
package/src/demo.ts +304 -0
package/src/dev-server.ts +274 -0
package/src/frameworks/next-dev-server.ts +2224 -0
package/src/frameworks/vite-dev-server.ts +702 -0
package/src/index.ts +101 -0
package/src/next-demo.ts +1784 -0
package/src/npm/index.ts +347 -0
package/src/npm/registry.ts +152 -0
package/src/npm/resolver.ts +385 -0
package/src/npm/tarball.ts +209 -0
package/src/runtime-interface.ts +103 -0
package/src/runtime.ts +1046 -0
package/src/sandbox-helpers.ts +173 -0
package/src/sandbox-runtime.ts +252 -0
package/src/server-bridge.ts +426 -0
package/src/shims/assert.ts +664 -0
package/src/shims/async_hooks.ts +86 -0
package/src/shims/buffer.ts +75 -0
package/src/shims/child_process-browser.ts +217 -0
package/src/shims/child_process.ts +463 -0
package/src/shims/chokidar.ts +313 -0
package/src/shims/cluster.ts +67 -0
package/src/shims/crypto.ts +830 -0
package/src/shims/dgram.ts +47 -0
package/src/shims/diagnostics_channel.ts +196 -0
package/src/shims/dns.ts +172 -0
package/src/shims/domain.ts +58 -0
package/src/shims/esbuild.ts +805 -0
package/src/shims/events.ts +195 -0
package/src/shims/fs.ts +803 -0
package/src/shims/fsevents.ts +63 -0
package/src/shims/http.ts +904 -0
package/src/shims/http2.ts +96 -0
package/src/shims/https.ts +86 -0
package/src/shims/inspector.ts +30 -0
package/src/shims/module.ts +82 -0
package/src/shims/net.ts +359 -0
package/src/shims/os.ts +195 -0
package/src/shims/path.ts +199 -0
package/src/shims/perf_hooks.ts +92 -0
package/src/shims/process.ts +346 -0
package/src/shims/querystring.ts +97 -0
package/src/shims/readdirp.ts +228 -0
package/src/shims/readline.ts +110 -0
package/src/shims/rollup.ts +80 -0
package/src/shims/sentry.ts +133 -0
package/src/shims/stream.ts +1126 -0
package/src/shims/tls.ts +95 -0
package/src/shims/tty.ts +64 -0
package/src/shims/url.ts +171 -0
package/src/shims/util.ts +312 -0
package/src/shims/v8.ts +113 -0
package/src/shims/vfs-adapter.ts +402 -0
package/src/shims/vm.ts +83 -0
package/src/shims/worker_threads.ts +111 -0
package/src/shims/ws.ts +382 -0
package/src/shims/zlib.ts +289 -0
package/src/transform.ts +313 -0
package/src/types/external.d.ts +67 -0
package/src/virtual-fs.ts +903 -0
package/src/vite-demo.ts +577 -0
package/src/worker/runtime-worker.ts +128 -0
package/src/worker-runtime.ts +145 -0

package/src/sandbox-helpers.ts ADDED Viewed

@@ -0,0 +1,173 @@
+/**
+ * Sandbox Helpers - Generate files for deploying a cross-origin sandbox
+ *
+ * The sandbox runs on a different origin (e.g., myapp-sandbox.vercel.app)
+ * to provide browser-enforced isolation from the main application.
+ */
+/**
+ * HTML template for the sandbox page.
+ * This loads almostnode and handles postMessage communication with the parent.
+ *
+ * @param justNodeUrl - URL to load almostnode from (e.g., unpkg, jsdelivr, or your CDN)
+ */
+export function getSandboxHtml(justNodeUrl = 'https://unpkg.com/almostnode/dist/index.js'): string {
+  return `<!DOCTYPE html>
+<html>
+<head>
+  <meta charset="UTF-8">
+  <title>almostnode Sandbox</title>
+</head>
+<body>
+<script type="module">
+  import { VirtualFS, Runtime } from '${justNodeUrl}';
+  let vfs = null;
+  let runtime = null;
+  let consoleCallback = null;
+  // Handle messages from parent
+  window.addEventListener('message', async (event) => {
+    const { type, id, code, filename, vfsSnapshot, options, path, content } = event.data;
+    try {
+      switch (type) {
+        case 'init':
+          // Initialize VFS from snapshot
+          vfs = VirtualFS.fromSnapshot(vfsSnapshot);
+          // Create runtime with options
+          runtime = new Runtime(vfs, {
+            cwd: options?.cwd,
+            env: options?.env,
+            onConsole: (method, args) => {
+              // Forward console to parent
+              parent.postMessage({
+                type: 'console',
+                consoleMethod: method,
+                consoleArgs: args,
+              }, '*');
+            },
+          });
+          break;
+        case 'syncFile':
+          // Sync file changes from parent
+          if (vfs) {
+            if (content === null) {
+              try { vfs.unlinkSync(path); } catch {}
+            } else {
+              vfs.writeFileSync(path, content);
+            }
+          }
+          break;
+        case 'execute':
+          if (!runtime) {
+            parent.postMessage({ type: 'error', id, error: 'Runtime not initialized' }, '*');
+            return;
+          }
+          const execResult = runtime.execute(code, filename);
+          parent.postMessage({ type: 'result', id, result: execResult }, '*');
+          break;
+        case 'runFile':
+          if (!runtime) {
+            parent.postMessage({ type: 'error', id, error: 'Runtime not initialized' }, '*');
+            return;
+          }
+          const runResult = runtime.runFile(filename);
+          parent.postMessage({ type: 'result', id, result: runResult }, '*');
+          break;
+        case 'clearCache':
+          if (runtime) {
+            runtime.clearCache();
+          }
+          break;
+      }
+    } catch (error) {
+      if (id) {
+        parent.postMessage({
+          type: 'error',
+          id,
+          error: error instanceof Error ? error.message : String(error),
+        }, '*');
+      }
+    }
+  });
+  // Signal ready to parent
+  parent.postMessage({ type: 'ready' }, '*');
+</script>
+</body>
+</html>`;
+}
+/**
+ * Get vercel.json configuration for the sandbox.
+ * Sets up CORS headers to allow embedding as a cross-origin iframe.
+ */
+export function getSandboxVercelConfig(): object {
+  return {
+    headers: [
+      {
+        source: '/(.*)',
+        headers: [
+          { key: 'Access-Control-Allow-Origin', value: '*' },
+          { key: 'Cross-Origin-Resource-Policy', value: 'cross-origin' },
+        ],
+      },
+    ],
+  };
+}
+/**
+ * Generate all files needed for deploying a sandbox to Vercel.
+ *
+ * @param justNodeUrl - URL to load almostnode from
+ * @returns Object with file names as keys and content as values
+ *
+ * @example
+ * ```typescript
+ * import { generateSandboxFiles } from 'almostnode/sandbox-helpers';
+ *
+ * const files = generateSandboxFiles();
+ * // Write files to sandbox/ directory
+ * // Deploy to Vercel: cd sandbox && vercel --prod
+ * ```
+ */
+export function generateSandboxFiles(justNodeUrl?: string): {
+  'index.html': string;
+  'vercel.json': string;
+} {
+  return {
+    'index.html': getSandboxHtml(justNodeUrl),
+    'vercel.json': JSON.stringify(getSandboxVercelConfig(), null, 2),
+  };
+}
+/**
+ * Instructions for setting up a sandbox on Vercel.
+ * Useful for documentation or CLI output.
+ */
+export const SANDBOX_SETUP_INSTRUCTIONS = `
+# Setting up a almostnode Sandbox on Vercel
+## 1. Create sandbox directory
+   mkdir sandbox
+## 2. Generate sandbox files
+   Use generateSandboxFiles() or copy the templates manually.
+## 3. Deploy to Vercel
+   cd sandbox
+   vercel --prod
+## 4. Use in your app
+   const runtime = await createRuntime(vfs, {
+     sandbox: 'https://your-sandbox.vercel.app'
+   });
+For more details, see: https://github.com/anthropics/almostnode#sandbox-setup
+`.trim();

package/src/sandbox-runtime.ts ADDED Viewed

@@ -0,0 +1,252 @@
+/**
+ * SandboxRuntime - Runs code in a cross-origin iframe for secure execution
+ *
+ * This provides browser-enforced isolation from cookies, localStorage,
+ * sessionStorage, and IndexedDB by running code on a different origin.
+ */
+import type { VirtualFS } from './virtual-fs';
+import type { IRuntime, IExecuteResult, IRuntimeOptions, VFSSnapshot } from './runtime-interface';
+interface SandboxMessage {
+  type: 'init' | 'execute' | 'runFile' | 'clearCache' | 'syncFile' | 'ready' | 'result' | 'error' | 'console';
+  id?: string;
+  code?: string;
+  filename?: string;
+  vfsSnapshot?: VFSSnapshot;
+  options?: IRuntimeOptions;
+  result?: IExecuteResult;
+  error?: string;
+  path?: string;
+  content?: string | null;
+  consoleMethod?: string;
+  consoleArgs?: unknown[];
+}
+/**
+ * SandboxRuntime - Executes code in a cross-origin iframe
+ */
+export class SandboxRuntime implements IRuntime {
+  private iframe: HTMLIFrameElement;
+  private sandboxOrigin: string;
+  private vfs: VirtualFS;
+  private options: IRuntimeOptions;
+  private initialized: Promise<void>;
+  private pending = new Map<string, { resolve: (result: IExecuteResult) => void; reject: (error: Error) => void }>();
+  private messageId = 0;
+  private changeListener: ((path: string, content: string) => void) | null = null;
+  private deleteListener: ((path: string) => void) | null = null;
+  private messageHandler: ((event: MessageEvent) => void) | null = null;
+  constructor(sandboxUrl: string, vfs: VirtualFS, options: IRuntimeOptions = {}) {
+    this.sandboxOrigin = new URL(sandboxUrl).origin;
+    this.vfs = vfs;
+    this.options = options;
+    // Create hidden iframe
+    // NOTE: Security comes from the DIFFERENT ORIGIN (e.g., localhost:3002 vs localhost:5173)
+    // The browser's same-origin policy prevents the sandbox from accessing the parent's
+    // cookies, localStorage, sessionStorage, and IndexedDB.
+    // We use the 'credentialless' attribute for compatibility with pages that have
+    // Cross-Origin-Embedder-Policy set (like Vite dev server).
+    this.iframe = document.createElement('iframe');
+    this.iframe.src = sandboxUrl;
+    this.iframe.style.display = 'none';
+    // @ts-expect-error - credentialless is a newer attribute not in all TypeScript definitions
+    this.iframe.credentialless = true;
+    this.iframe.setAttribute('credentialless', '');
+    document.body.appendChild(this.iframe);
+    // Set up message handler
+    this.setupMessageHandler();
+    // Wait for iframe to be ready, then initialize
+    this.initialized = this.waitForReady().then(() => this.initSandbox());
+    // Set up VFS change listeners
+    this.setupVFSListeners();
+  }
+  /**
+   * Set up the message event handler
+   */
+  private setupMessageHandler(): void {
+    this.messageHandler = (event: MessageEvent) => {
+      // Only accept messages from our sandbox origin
+      if (event.origin !== this.sandboxOrigin) return;
+      const message = event.data as SandboxMessage;
+      if (message.type === 'result' && message.id) {
+        const pending = this.pending.get(message.id);
+        if (pending && message.result) {
+          pending.resolve(message.result);
+          this.pending.delete(message.id);
+        }
+      } else if (message.type === 'error' && message.id) {
+        const pending = this.pending.get(message.id);
+        if (pending) {
+          pending.reject(new Error(message.error || 'Unknown sandbox error'));
+          this.pending.delete(message.id);
+        }
+      } else if (message.type === 'console' && this.options.onConsole) {
+        this.options.onConsole(message.consoleMethod || 'log', message.consoleArgs || []);
+      }
+    };
+    window.addEventListener('message', this.messageHandler);
+  }
+  /**
+   * Wait for the sandbox iframe to signal it's ready
+   */
+  private waitForReady(): Promise<void> {
+    return new Promise((resolve) => {
+      const handler = (event: MessageEvent) => {
+        if (event.origin !== this.sandboxOrigin) return;
+        const message = event.data as SandboxMessage;
+        if (message.type === 'ready') {
+          window.removeEventListener('message', handler);
+          resolve();
+        }
+      };
+      window.addEventListener('message', handler);
+    });
+  }
+  /**
+   * Initialize the sandbox with VFS snapshot and options
+   */
+  private async initSandbox(): Promise<void> {
+    const snapshot = this.vfs.toSnapshot();
+    const message: SandboxMessage = {
+      type: 'init',
+      vfsSnapshot: snapshot,
+      options: {
+        cwd: this.options.cwd,
+        env: this.options.env,
+        // Note: onConsole callback can't be sent cross-origin,
+        // sandbox will send console messages back via postMessage
+      },
+    };
+    this.iframe.contentWindow?.postMessage(message, this.sandboxOrigin);
+    console.log('[SandboxRuntime] Sandbox initialized');
+  }
+  /**
+   * Set up listeners for VFS changes to sync to sandbox
+   */
+  private setupVFSListeners(): void {
+    this.changeListener = (path: string, content: string) => {
+      const message: SandboxMessage = {
+        type: 'syncFile',
+        path,
+        content,
+      };
+      this.iframe.contentWindow?.postMessage(message, this.sandboxOrigin);
+    };
+    this.vfs.on('change', this.changeListener);
+    this.deleteListener = (path: string) => {
+      const message: SandboxMessage = {
+        type: 'syncFile',
+        path,
+        content: null,
+      };
+      this.iframe.contentWindow?.postMessage(message, this.sandboxOrigin);
+    };
+    this.vfs.on('delete', this.deleteListener);
+  }
+  /**
+   * Send a message and wait for response
+   */
+  private sendAndWait(message: SandboxMessage): Promise<IExecuteResult> {
+    return new Promise((resolve, reject) => {
+      const id = String(this.messageId++);
+      this.pending.set(id, { resolve, reject });
+      this.iframe.contentWindow?.postMessage(
+        { ...message, id },
+        this.sandboxOrigin
+      );
+      // Timeout after 60 seconds
+      setTimeout(() => {
+        if (this.pending.has(id)) {
+          this.pending.delete(id);
+          reject(new Error('Sandbox execution timeout'));
+        }
+      }, 60000);
+    });
+  }
+  /**
+   * Execute code in the sandbox
+   */
+  async execute(code: string, filename?: string): Promise<IExecuteResult> {
+    await this.initialized;
+    return this.sendAndWait({
+      type: 'execute',
+      code,
+      filename,
+    });
+  }
+  /**
+   * Run a file from the VFS in the sandbox
+   */
+  async runFile(filename: string): Promise<IExecuteResult> {
+    await this.initialized;
+    return this.sendAndWait({
+      type: 'runFile',
+      filename,
+    });
+  }
+  /**
+   * Clear the module cache in the sandbox
+   */
+  clearCache(): void {
+    const message: SandboxMessage = { type: 'clearCache' };
+    this.iframe.contentWindow?.postMessage(message, this.sandboxOrigin);
+  }
+  /**
+   * Get the VFS (main thread instance)
+   */
+  getVFS(): VirtualFS {
+    return this.vfs;
+  }
+  /**
+   * Terminate the sandbox
+   */
+  terminate(): void {
+    // Remove VFS listeners
+    if (this.changeListener) {
+      this.vfs.off('change', this.changeListener);
+    }
+    if (this.deleteListener) {
+      this.vfs.off('delete', this.deleteListener);
+    }
+    // Remove message handler
+    if (this.messageHandler) {
+      window.removeEventListener('message', this.messageHandler);
+    }
+    // Remove iframe
+    this.iframe.remove();
+    // Reject any pending promises
+    for (const [id, { reject }] of this.pending) {
+      reject(new Error('Sandbox terminated'));
+      this.pending.delete(id);
+    }
+    console.log('[SandboxRuntime] Sandbox terminated');
+  }
+}