almostnode 0.2.0 → 0.2.2

package/README.md

@@ -64,6 +64,26 @@ const result = container.execute(`
 console.log(result.exports); // "Hello from the browser!"
 ```
 
+> **⚠️ Security Warning:** The example above runs code on the main thread with full access to your page. **Do not use `createContainer()` or `container.execute()` with untrusted code.** For untrusted code, use `createRuntime()` with a cross-origin sandbox - see [Sandbox Setup](#sandbox-setup).
+
+### Running Untrusted Code Securely
+
+```typescript
+import { createRuntime, VirtualFS } from 'almostnode';
+
+const vfs = new VirtualFS();
+
+// Create a secure runtime with cross-origin isolation
+const runtime = await createRuntime(vfs, {
+  sandbox: 'https://your-sandbox.vercel.app', // Deploy with generateSandboxFiles()
+});
+
+// Now it's safe to run untrusted code
+const result = await runtime.execute(untrustedCode);
+```
+
+See [Sandbox Setup](#sandbox-setup) for deployment instructions.
+
 ### Working with Virtual File System
 
 ```typescript
@@ -836,7 +856,7 @@ triggerHMR('/app/page.tsx', iframe);
 ### Setup
 
 ```bash
-git clone https://github.com/user/almostnode.git
+git clone https://github.com/Macaly/almostnode.git
 cd almostnode
 npm install
 ```

package/dist/index.cjs

@@ -6,31 +6,8 @@ const pako = require('pako');
 const justBash = require('just-bash');
 const resolve_exports = require('resolve.exports');
 const comlink = require('comlink');
-const fs$1 = require('fs');
-const path$1 = require('path');
-const url$2 = require('url');
 
 var _documentCurrentScript = typeof document !== 'undefined' ? document.currentScript : null;
-function _interopNamespaceDefault(e) {
-  const n = Object.create(null, { [Symbol.toStringTag]: { value: 'Module' } });
-  if (e) {
-    for (const k in e) {
-      if (k !== 'default') {
-        const d = Object.getOwnPropertyDescriptor(e, k);
-        Object.defineProperty(n, k, d.get ? d : {
-          enumerable: true,
-          get: () => e[k]
-        });
-      }
-    }
-  }
-  n.default = e;
-  return Object.freeze(n);
-}
-
-const fs__namespace = /*#__PURE__*/_interopNamespaceDefault(fs$1);
-const path__namespace = /*#__PURE__*/_interopNamespaceDefault(path$1);
-
 function createNodeError(code, syscall, path, message) {
   const errno = {
     ENOENT: -2,
@@ -9932,16 +9909,27 @@ async function createRuntime(vfs, options = {}) {
   return new AsyncRuntimeWrapper(vfs, runtimeOptions);
 }
 
-const __dirname$1 = path__namespace.dirname(url$2.fileURLToPath((typeof document === 'undefined' ? require('u' + 'rl').pathToFileURL(__filename).href : (_documentCurrentScript && _documentCurrentScript.tagName.toUpperCase() === 'SCRIPT' && _documentCurrentScript.src || new URL('index.cjs', document.baseURI).href))));
 function getServiceWorkerContent() {
+  if (typeof require === "undefined") {
+    return null;
+  }
   try {
-    let swPath = path__namespace.join(__dirname$1, "__sw__.js");
-    if (fs__namespace.existsSync(swPath)) {
-      return fs__namespace.readFileSync(swPath, "utf-8");
+    const fs = require("fs");
+    const path = require("path");
+    let dirname;
+    try {
+      const url = require("url");
+      dirname = path.dirname(url.fileURLToPath((typeof document === 'undefined' ? require('u' + 'rl').pathToFileURL(__filename).href : (_documentCurrentScript && _documentCurrentScript.tagName.toUpperCase() === 'SCRIPT' && _documentCurrentScript.src || new URL('index.cjs', document.baseURI).href))));
+    } catch {
+      dirname = __dirname;
+    }
+    let swPath = path.join(dirname, "__sw__.js");
+    if (fs.existsSync(swPath)) {
+      return fs.readFileSync(swPath, "utf-8");
     }
-    swPath = path__namespace.join(__dirname$1, "../dist/__sw__.js");
-    if (fs__namespace.existsSync(swPath)) {
-      return fs__namespace.readFileSync(swPath, "utf-8");
+    swPath = path.join(dirname, "../dist/__sw__.js");
+    if (fs.existsSync(swPath)) {
+      return fs.readFileSync(swPath, "utf-8");
     }
     return null;
   } catch {