browser-tsx-sandbox 0.1.0

package/dist/index.js

@@ -0,0 +1,236 @@
+import { transform } from 'sucrase';
+import * as React from 'react';
+import { useRef, useState, useEffect } from 'react';
+import { unzipSync } from 'fflate';
+
+// src/compiler/analyzer.ts
+function extractBareImports(code) {
+  const importRegex = /import\s+(?:(?:\*\s+as\s+\w+|[\w\s{},]+)\s+from\s+)?['"]([^'"]+)['"]/g;
+  const matches = [...code.matchAll(importRegex)];
+  const bareImports = matches.map((m) => m[1]).filter((specifier) => !specifier.startsWith(".") && !specifier.startsWith("/"));
+  return [...new Set(bareImports)];
+}
+
+// src/core/errors.ts
+var CompilerError = class extends Error {
+  constructor(message) {
+    super(`[Compiler Error]: ${message}`);
+    this.name = "CompilerError";
+  }
+};
+var SecurityError = class extends Error {
+  constructor(message) {
+    super(`[Security Violation]: ${message}`);
+    this.name = "SecurityError";
+  }
+};
+var NetworkModuleError = class extends Error {
+  constructor(moduleName, originalMessage) {
+    super(`[Network Error]: \u041D\u0435 \u0443\u0434\u0430\u043B\u043E\u0441\u044C \u0437\u0430\u0433\u0440\u0443\u0437\u0438\u0442\u044C \u043F\u0430\u043A\u0435\u0442 "${moduleName}". ${originalMessage}`);
+    this.name = "NetworkModuleError";
+  }
+};
+
+// src/compiler/transform.ts
+function compileTsx(code) {
+  try {
+    const cleanCode = code.replace(/```tsx\n?/g, "").replace(/```\n?/g, "");
+    const compiled = transform(cleanCode, {
+      transforms: ["typescript", "jsx", "imports"],
+      jsxRuntime: "classic"
+    });
+    return compiled.code;
+  } catch (error) {
+    throw new CompilerError(error.message);
+  }
+}
+
+// src/library-manager/cache.ts
+var ModuleCache = class {
+  constructor() {
+    this.registry = {};
+  }
+  register(name, module) {
+    this.registry[name] = module;
+  }
+  get(name) {
+    return this.registry[name];
+  }
+  getAll() {
+    return { ...this.registry };
+  }
+  has(name) {
+    return !!this.registry[name];
+  }
+};
+
+// src/library-manager/loader.ts
+var defaultImporter = (url) => import(
+  /* @vite-ignore */
+  url
+);
+async function loadMissingModules(packages, cache, importer = defaultImporter) {
+  const loadPromises = packages.map(async (pkg) => {
+    if (cache.has(pkg)) return;
+    try {
+      const module = await importer(`https://esm.sh/${pkg}`);
+      cache.register(pkg, { ...module, default: module.default || module, __esModule: true });
+    } catch (error) {
+      throw new NetworkModuleError(pkg, error.message);
+    }
+  });
+  await Promise.all(loadPromises);
+}
+
+// src/sandbox/scope.ts
+function getShadowedGlobals() {
+  const forbiddenKeys = [
+    "window",
+    "document",
+    "localStorage",
+    "sessionStorage",
+    "fetch",
+    "XMLHttpRequest",
+    "indexedDB",
+    "navigator"
+  ];
+  const shadowValues = forbiddenKeys.map(() => void 0);
+  return { forbiddenKeys, shadowValues };
+}
+
+// src/sandbox/evaluator.ts
+function executeComponent(compiledCode, registry, globals) {
+  const customRequire = (moduleName) => {
+    if (registry[moduleName]) return registry[moduleName];
+    throw new SecurityError(`\u041F\u043E\u043F\u044B\u0442\u043A\u0430 \u0438\u043C\u043F\u043E\u0440\u0442\u0430 \u043D\u0435\u0440\u0430\u0437\u0440\u0435\u0448\u0435\u043D\u043D\u043E\u0433\u043E \u043C\u043E\u0434\u0443\u043B\u044F: "${moduleName}"`);
+  };
+  const exportsObj = { default: null };
+  const React2 = registry["react"];
+  if (!React2) throw new Error("\u041C\u043E\u0434\u0443\u043B\u044C 'react' \u043E\u0431\u044F\u0437\u0430\u0442\u0435\u043B\u0435\u043D \u0434\u043B\u044F \u043A\u043E\u043C\u043F\u0438\u043B\u044F\u0446\u0438\u0438 TSX.");
+  const { forbiddenKeys, shadowValues } = getShadowedGlobals();
+  const globalKeys = Object.keys(globals);
+  const globalValues = Object.values(globals);
+  try {
+    const fn = new Function(
+      "require",
+      "exports",
+      "React",
+      ...globalKeys,
+      ...forbiddenKeys,
+      compiledCode
+    );
+    fn(customRequire, exportsObj, React2, ...globalValues, ...shadowValues);
+    if (exportsObj.default) return exportsObj.default;
+    const namedExport = Object.keys(exportsObj).find((key) => key !== "default");
+    return namedExport ? exportsObj[namedExport] : null;
+  } catch (error) {
+    if (error instanceof SecurityError) throw error;
+    throw new Error(`[Runtime Error]: ${error.message}`);
+  }
+}
+
+// src/facade.ts
+var SandboxFacade = class {
+  constructor(initialRegistry = {}, importer) {
+    this.cache = new ModuleCache();
+    this.assetsMap = {};
+    this.importer = importer;
+    Object.entries(initialRegistry).forEach(([name, module]) => {
+      this.cache.register(name, module);
+    });
+  }
+  setAssets(assets) {
+    this.assetsMap = assets;
+  }
+  async compile(rawTsx) {
+    const start = performance.now();
+    try {
+      const requiredPackages = extractBareImports(rawTsx);
+      await loadMissingModules(requiredPackages, this.cache, this.importer);
+      const jsCode = compileTsx(rawTsx);
+      const globals = {
+        staticFile: (filename) => this.assetsMap[filename] || ""
+      };
+      const component = executeComponent(jsCode, this.cache.getAll(), globals);
+      return {
+        component,
+        error: null,
+        executionTimeMs: performance.now() - start
+      };
+    } catch (error) {
+      return {
+        component: null,
+        error,
+        executionTimeMs: performance.now() - start
+      };
+    }
+  }
+};
+function useLiveSandbox(code, initialModules, localAssets = {}) {
+  const facadeRef = useRef(null);
+  const assetsRef = useRef(localAssets);
+  assetsRef.current = localAssets;
+  const [Component, setComponent] = useState(null);
+  const [error, setError] = useState(null);
+  const [isCompiling, setIsCompiling] = useState(false);
+  if (!facadeRef.current) {
+    const modules = { react: React, ...initialModules };
+    facadeRef.current = new SandboxFacade(modules);
+  }
+  const assetsKey = JSON.stringify(localAssets);
+  useEffect(() => {
+    if (!code) return;
+    let isMounted = true;
+    setIsCompiling(true);
+    facadeRef.current.setAssets(assetsRef.current);
+    facadeRef.current.compile(code).then((result) => {
+      if (!isMounted) return;
+      if (result.error) {
+        setError(result.error);
+        setComponent(null);
+      } else {
+        setError(null);
+        setComponent(() => result.component);
+      }
+      setIsCompiling(false);
+    }).catch((err) => {
+      if (!isMounted) return;
+      setError(err);
+      setComponent(null);
+      setIsCompiling(false);
+    });
+    return () => {
+      isMounted = false;
+    };
+  }, [code, assetsKey]);
+  return { Component, error, isCompiling };
+}
+var IGNORED_PREFIXES = ["__MACOSX/"];
+function normalizePath(path) {
+  return path.replace(/^\.?\//, "");
+}
+function extractAssetZip(zip) {
+  const archive = {};
+  for (const [rawPath, bytes] of Object.entries(unzipSync(zip))) {
+    const path = normalizePath(rawPath);
+    if (path === "" || path.endsWith("/")) continue;
+    if (IGNORED_PREFIXES.some((prefix) => path.startsWith(prefix))) continue;
+    archive[path] = bytes;
+  }
+  return archive;
+}
+function createAssetUrlMap(archive, createUrl) {
+  const urls = {};
+  for (const [path, bytes] of Object.entries(archive)) {
+    const filename = path.split("/").pop();
+    urls[filename] = createUrl(bytes, filename);
+  }
+  return urls;
+}
+function releaseAssetUrls(urls, revoke) {
+  for (const url of Object.values(urls)) revoke(url);
+}
+
+export { CompilerError, ModuleCache, NetworkModuleError, SandboxFacade, SecurityError, compileTsx, createAssetUrlMap, executeComponent, extractAssetZip, extractBareImports, getShadowedGlobals, loadMissingModules, releaseAssetUrls, useLiveSandbox };
+//# sourceMappingURL=index.js.map
+//# sourceMappingURL=index.js.map

package/dist/index.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/compiler/analyzer.ts","../src/core/errors.ts","../src/compiler/transform.ts","../src/library-manager/cache.ts","../src/library-manager/loader.ts","../src/sandbox/scope.ts","../src/sandbox/evaluator.ts","../src/facade.ts","../src/react/useLiveSandbox.ts","../src/assets/zip.ts"],"names":["React"],"mappings":";;;;;;AAIO,SAAS,mBAAmB,IAAA,EAAwB;AACzD,EAAA,MAAM,WAAA,GACJ,uEAAA;AACF,EAAA,MAAM,UAAU,CAAC,GAAG,IAAA,CAAK,QAAA,CAAS,WAAW,CAAC,CAAA;AAE9C,EAAA,MAAM,WAAA,GAAc,QACjB,GAAA,CAAI,CAAC,MAAM,CAAA,CAAE,CAAC,CAAC,CAAA,CACf,MAAA,CAAO,CAAC,SAAA,KAAc,CAAC,UAAU,UAAA,CAAW,GAAG,KAAK,CAAC,SAAA,CAAU,UAAA,CAAW,GAAG,CAAC,CAAA;AAEjF,EAAA,OAAO,CAAC,GAAG,IAAI,GAAA,CAAI,WAAW,CAAC,CAAA;AACjC;;;ACdO,IAAM,aAAA,GAAN,cAA4B,KAAA,CAAM;AAAA,EACvC,YAAY,OAAA,EAAiB;AAC3B,IAAA,KAAA,CAAM,CAAA,kBAAA,EAAqB,OAAO,CAAA,CAAE,CAAA;AACpC,IAAA,IAAA,CAAK,IAAA,GAAO,eAAA;AAAA,EACd;AACF;AAEO,IAAM,aAAA,GAAN,cAA4B,KAAA,CAAM;AAAA,EACvC,YAAY,OAAA,EAAiB;AAC3B,IAAA,KAAA,CAAM,CAAA,sBAAA,EAAyB,OAAO,CAAA,CAAE,CAAA;AACxC,IAAA,IAAA,CAAK,IAAA,GAAO,eAAA;AAAA,EACd;AACF;AAEO,IAAM,kBAAA,GAAN,cAAiC,KAAA,CAAM;AAAA,EAC5C,WAAA,CAAY,YAAoB,eAAA,EAAyB;AACvD,IAAA,KAAA,CAAM,CAAA,gKAAA,EAAgD,UAAU,CAAA,GAAA,EAAM,eAAe,CAAA,CAAE,CAAA;AACvF,IAAA,IAAA,CAAK,IAAA,GAAO,oBAAA;AAAA,EACd;AACF;;;ACbO,SAAS,WAAW,IAAA,EAAsB;AAC/C,EAAA,IAAI;AACF,IAAA,MAAM,SAAA,GAAY,KAAK,OAAA,CAAQ,YAAA,EAAc,EAAE,CAAA,CAAE,OAAA,CAAQ,WAAW,EAAE,CAAA;AAEtE,IAAA,MAAM,QAAA,GAAW,UAAU,SAAA,EAAW;AAAA,MACpC,UAAA,EAAY,CAAC,YAAA,EAAc,KAAA,EAAO,SAAS,CAAA;AAAA,MAC3C,UAAA,EAAY;AAAA,KACb,CAAA;AAED,IAAA,OAAO,QAAA,CAAS,IAAA;AAAA,EAClB,SAAS,KAAA,EAAO;AACd,IAAA,MAAM,IAAI,aAAA,CAAe,KAAA,CAAgB,OAAO,CAAA;AAAA,EAClD;AACF;;;AChBO,IAAM,cAAN,MAAkB;AAAA,EAAlB,WAAA,GAAA;AACL,IAAA,IAAA,CAAQ,WAA2B,EAAC;AAAA,EAAA;AAAA,EAE7B,QAAA,CAAS,MAAc,MAAA,EAAa;AACzC,IAAA,IAAA,CAAK,QAAA,CAAS,IAAI,CAAA,GAAI,MAAA;AAAA,EACxB;AAAA,EAEO,IAAI,IAAA,EAA+B;AACxC,IAAA,OAAO,IAAA,CAAK,SAAS,IAAI,CAAA;AAAA,EAC3B;AAAA,EAEO,MAAA,GAAyB;AAC9B,IAAA,OAAO,EAAE,GAAG,IAAA,CAAK,QAAA,EAAS;AAAA,EAC5B;AAAA,EAEO,IAAI,IAAA,EAAuB;AAChC,IAAA,OAAO,CAAC,CAAC,IAAA,CAAK,QAAA,CAAS,IAAI,CAAA;AAAA,EAC7B;AACF;;;AChBA,IAAM,eAAA,GAAkC,CAAC,GAAA,KAAQ;AAAA;AAAA,EAA0B;AAAA,CAAA;AAQ3E,eAAsB,kBAAA,CACpB,QAAA,EACA,KAAA,EACA,QAAA,GAA2B,eAAA,EACZ;AACf,EAAA,MAAM,YAAA,GAAe,QAAA,CAAS,GAAA,CAAI,OAAO,GAAA,KAAQ;AAC/C,IAAA,IAAI,KAAA,CAAM,GAAA,CAAI,GAAG,CAAA,EAAG;AAEpB,IAAA,IAAI;AACF,MAAA,MAAM,MAAA,GAAS,MAAM,QAAA,CAAS,CAAA,eAAA,EAAkB,GAAG,CAAA,CAAE,CAAA;AAIrD,MAAA,KAAA,CAAM,QAAA,CAAS,GAAA,EAAK,EAAE,GAAG,MAAA,EAAQ,OAAA,EAAS,MAAA,CAAO,OAAA,IAAW,MAAA,EAAQ,UAAA,EAAY,IAAA,EAAM,CAAA;AAAA,IACxF,SAAS,KAAA,EAAO;AACd,MAAA,MAAM,IAAI,kBAAA,CAAmB,GAAA,EAAM,KAAA,CAAgB,OAAO,CAAA;AAAA,IAC5D;AAAA,EACF,CAAC,CAAA;AAED,EAAA,MAAM,OAAA,CAAQ,IAAI,YAAY,CAAA;AAChC;;;AC7BO,SAAS,kBAAA,GAAqB;AACnC,EAAA,MAAM,aAAA,GAAgB;AAAA,IACpB,QAAA;AAAA,IACA,UAAA;AAAA,IACA,cAAA;AAAA,IACA,gBAAA;AAAA,IACA,OAAA;AAAA,IACA,gBAAA;AAAA,IACA,WAAA;AAAA,IACA;AAAA,GACF;AAEA,EAAA,MAAM,YAAA,GAAe,aAAA,CAAc,GAAA,CAAI,MAAM,MAAS,CAAA;AAEtD,EAAA,OAAO,EAAE,eAAe,YAAA,EAAa;AACvC;;;ACfO,SAAS,gBAAA,CACd,YAAA,EACA,QAAA,EACA,OAAA,EACK;AACL,EAAA,MAAM,aAAA,GAAgB,CAAC,UAAA,KAAuB;AAC5C,IAAA,IAAI,QAAA,CAAS,UAAU,CAAA,EAAG,OAAO,SAAS,UAAU,CAAA;AACpD,IAAA,MAAM,IAAI,aAAA,CAAc,CAAA,kNAAA,EAA2C,UAAU,CAAA,CAAA,CAAG,CAAA;AAAA,EAClF,CAAA;AAEA,EAAA,MAAM,UAAA,GAAa,EAAE,OAAA,EAAS,IAAA,EAAK;AACnC,EAAA,MAAMA,MAAAA,GAAQ,SAAS,OAAO,CAAA;AAE9B,EAAA,IAAI,CAACA,MAAAA,EAAO,MAAM,IAAI,MAAM,gMAA+C,CAAA;AAE3E,EAAA,MAAM,EAAE,aAAA,EAAe,YAAA,EAAa,GAAI,kBAAA,EAAmB;AAC3D,EAAA,MAAM,UAAA,GAAa,MAAA,CAAO,IAAA,CAAK,OAAO,CAAA;AACtC,EAAA,MAAM,YAAA,GAAe,MAAA,CAAO,MAAA,CAAO,OAAO,CAAA;AAE1C,EAAA,IAAI;AACF,IAAA,MAAM,KAAK,IAAI,QAAA;AAAA,MACb,SAAA;AAAA,MACA,SAAA;AAAA,MACA,OAAA;AAAA,MACA,GAAG,UAAA;AAAA,MACH,GAAG,aAAA;AAAA,MACH;AAAA,KACF;AAEA,IAAA,EAAA,CAAG,eAAe,UAAA,EAAYA,MAAAA,EAAO,GAAG,YAAA,EAAc,GAAG,YAAY,CAAA;AAGrE,IAAA,IAAI,UAAA,CAAW,OAAA,EAAS,OAAO,UAAA,CAAW,OAAA;AAE1C,IAAA,MAAM,WAAA,GAAc,OAAO,IAAA,CAAK,UAAU,EAAE,IAAA,CAAK,CAAC,GAAA,KAAQ,GAAA,KAAQ,SAAS,CAAA;AAC3E,IAAA,OAAO,WAAA,GAAe,UAAA,CAAmB,WAAW,CAAA,GAAI,IAAA;AAAA,EAC1D,SAAS,KAAA,EAAO;AAEd,IAAA,IAAI,KAAA,YAAiB,eAAe,MAAM,KAAA;AAC1C,IAAA,MAAM,IAAI,KAAA,CAAM,CAAA,iBAAA,EAAqB,KAAA,CAAgB,OAAO,CAAA,CAAE,CAAA;AAAA,EAChE;AACF;;;ACtCO,IAAM,gBAAN,MAAoB;AAAA,EAKzB,WAAA,CAAY,eAAA,GAAkC,EAAC,EAAG,QAAA,EAA2B;AAC3E,IAAA,IAAA,CAAK,KAAA,GAAQ,IAAI,WAAA,EAAY;AAC7B,IAAA,IAAA,CAAK,YAAY,EAAC;AAClB,IAAA,IAAA,CAAK,QAAA,GAAW,QAAA;AAGhB,IAAA,MAAA,CAAO,OAAA,CAAQ,eAAe,CAAA,CAAE,OAAA,CAAQ,CAAC,CAAC,IAAA,EAAM,MAAM,CAAA,KAAM;AAC1D,MAAA,IAAA,CAAK,KAAA,CAAM,QAAA,CAAS,IAAA,EAAM,MAAM,CAAA;AAAA,IAClC,CAAC,CAAA;AAAA,EACH;AAAA,EAEO,UAAU,MAAA,EAAgC;AAC/C,IAAA,IAAA,CAAK,SAAA,GAAY,MAAA;AAAA,EACnB;AAAA,EAEA,MAAa,QAAQ,MAAA,EAA2C;AAC9D,IAAA,MAAM,KAAA,GAAQ,YAAY,GAAA,EAAI;AAE9B,IAAA,IAAI;AAEF,MAAA,MAAM,gBAAA,GAAmB,mBAAmB,MAAM,CAAA;AAGlD,MAAA,MAAM,kBAAA,CAAmB,gBAAA,EAAkB,IAAA,CAAK,KAAA,EAAO,KAAK,QAAQ,CAAA;AAGpE,MAAA,MAAM,MAAA,GAAS,WAAW,MAAM,CAAA;AAGhC,MAAA,MAAM,OAAA,GAA0B;AAAA,QAC9B,YAAY,CAAC,QAAA,KAAqB,IAAA,CAAK,SAAA,CAAU,QAAQ,CAAA,IAAK;AAAA,OAChE;AAGA,MAAA,MAAM,YAAY,gBAAA,CAAiB,MAAA,EAAQ,KAAK,KAAA,CAAM,MAAA,IAAU,OAAO,CAAA;AAEvE,MAAA,OAAO;AAAA,QACL,SAAA;AAAA,QACA,KAAA,EAAO,IAAA;AAAA,QACP,eAAA,EAAiB,WAAA,CAAY,GAAA,EAAI,GAAI;AAAA,OACvC;AAAA,IACF,SAAS,KAAA,EAAO;AACd,MAAA,OAAO;AAAA,QACL,SAAA,EAAW,IAAA;AAAA,QACX,KAAA;AAAA,QACA,eAAA,EAAiB,WAAA,CAAY,GAAA,EAAI,GAAI;AAAA,OACvC;AAAA,IACF;AAAA,EACF;AACF;ACjDO,SAAS,cAAA,CACd,IAAA,EACA,cAAA,EACA,WAAA,GAAsC,EAAC,EACvC;AACA,EAAA,MAAM,SAAA,GAAY,OAA6B,IAAI,CAAA;AACnD,EAAA,MAAM,SAAA,GAAY,OAAO,WAAW,CAAA;AACpC,EAAA,SAAA,CAAU,OAAA,GAAU,WAAA;AAEpB,EAAA,MAAM,CAAC,SAAA,EAAW,YAAY,CAAA,GAAI,SAA0C,IAAI,CAAA;AAChF,EAAA,MAAM,CAAC,KAAA,EAAO,QAAQ,CAAA,GAAI,SAAuB,IAAI,CAAA;AACrD,EAAA,MAAM,CAAC,WAAA,EAAa,cAAc,CAAA,GAAI,SAAS,KAAK,CAAA;AAGpD,EAAA,IAAI,CAAC,UAAU,OAAA,EAAS;AAEtB,IAAA,MAAM,OAAA,GAAU,EAAE,KAAA,EAAO,KAAA,EAAO,GAAG,cAAA,EAAe;AAClD,IAAA,SAAA,CAAU,OAAA,GAAU,IAAI,aAAA,CAAc,OAAO,CAAA;AAAA,EAC/C;AAEA,EAAA,MAAM,SAAA,GAAY,IAAA,CAAK,SAAA,CAAU,WAAW,CAAA;AAE5C,EAAA,SAAA,CAAU,MAAM;AACd,IAAA,IAAI,CAAC,IAAA,EAAM;AAEX,IAAA,IAAI,SAAA,GAAY,IAAA;AAChB,IAAA,cAAA,CAAe,IAAI,CAAA;AAEnB,IAAA,SAAA,CAAU,OAAA,CAAS,SAAA,CAAU,SAAA,CAAU,OAAO,CAAA;AAE9C,IAAA,SAAA,CAAU,QACP,OAAA,CAAQ,IAAI,CAAA,CACZ,IAAA,CAAK,CAAC,MAAA,KAAW;AAChB,MAAA,IAAI,CAAC,SAAA,EAAW;AAEhB,MAAA,IAAI,OAAO,KAAA,EAAO;AAChB,QAAA,QAAA,CAAS,OAAO,KAAK,CAAA;AACrB,QAAA,YAAA,CAAa,IAAI,CAAA;AAAA,MACnB,CAAA,MAAO;AACL,QAAA,QAAA,CAAS,IAAI,CAAA;AACb,QAAA,YAAA,CAAa,MAAM,OAAO,SAAS,CAAA;AAAA,MACrC;AACA,MAAA,cAAA,CAAe,KAAK,CAAA;AAAA,IACtB,CAAC,CAAA,CACA,KAAA,CAAM,CAAC,GAAA,KAAe;AACrB,MAAA,IAAI,CAAC,SAAA,EAAW;AAChB,MAAA,QAAA,CAAS,GAAG,CAAA;AACZ,MAAA,YAAA,CAAa,IAAI,CAAA;AACjB,MAAA,cAAA,CAAe,KAAK,CAAA;AAAA,IACtB,CAAC,CAAA;AAEH,IAAA,OAAO,MAAM;AACX,MAAA,SAAA,GAAY,KAAA;AAAA,IACd,CAAA;AAAA,EAEF,CAAA,EAAG,CAAC,IAAA,EAAM,SAAS,CAAC,CAAA;AAEpB,EAAA,OAAO,EAAE,SAAA,EAAW,KAAA,EAAO,WAAA,EAAY;AACzC;AC/DA,IAAM,gBAAA,GAAmB,CAAC,WAAW,CAAA;AAErC,SAAS,cAAc,IAAA,EAAsB;AAC3C,EAAA,OAAO,IAAA,CAAK,OAAA,CAAQ,QAAA,EAAU,EAAE,CAAA;AAClC;AAMO,SAAS,gBAAgB,GAAA,EAA+B;AAC7D,EAAA,MAAM,UAAwB,EAAC;AAE/B,EAAA,KAAA,MAAW,CAAC,SAAS,KAAK,CAAA,IAAK,OAAO,OAAA,CAAQ,SAAA,CAAU,GAAG,CAAC,CAAA,EAAG;AAC7D,IAAA,MAAM,IAAA,GAAO,cAAc,OAAO,CAAA;AAClC,IAAA,IAAI,IAAA,KAAS,EAAA,IAAM,IAAA,CAAK,QAAA,CAAS,GAAG,CAAA,EAAG;AACvC,IAAA,IAAI,gBAAA,CAAiB,KAAK,CAAC,MAAA,KAAW,KAAK,UAAA,CAAW,MAAM,CAAC,CAAA,EAAG;AAChE,IAAA,OAAA,CAAQ,IAAI,CAAA,GAAI,KAAA;AAAA,EAClB;AAEA,EAAA,OAAO,OAAA;AACT;AASO,SAAS,iBAAA,CACd,SACA,SAAA,EACwB;AACxB,EAAA,MAAM,OAA+B,EAAC;AAEtC,EAAA,KAAA,MAAW,CAAC,IAAA,EAAM,KAAK,KAAK,MAAA,CAAO,OAAA,CAAQ,OAAO,CAAA,EAAG;AACnD,IAAA,MAAM,QAAA,GAAW,IAAA,CAAK,KAAA,CAAM,GAAG,EAAE,GAAA,EAAI;AACrC,IAAA,IAAA,CAAK,QAAQ,CAAA,GAAI,SAAA,CAAU,KAAA,EAAO,QAAQ,CAAA;AAAA,EAC5C;AAEA,EAAA,OAAO,IAAA;AACT;AAKO,SAAS,gBAAA,CACd,MACA,MAAA,EACM;AACN,EAAA,KAAA,MAAW,OAAO,MAAA,CAAO,MAAA,CAAO,IAAI,CAAA,SAAU,GAAG,CAAA;AACnD","file":"index.js","sourcesContent":["/**\n * Извлекает имена NPM-пакетов (bare imports) из сырого TSX кода.\n * Локальные (`./`, `../`) и абсолютные (`/`) импорты игнорируются.\n */\nexport function extractBareImports(code: string): string[] {\n  const importRegex =\n    /import\\s+(?:(?:\\*\\s+as\\s+\\w+|[\\w\\s{},]+)\\s+from\\s+)?['\"]([^'\"]+)['\"]/g;\n  const matches = [...code.matchAll(importRegex)];\n\n  const bareImports = matches\n    .map((m) => m[1])\n    .filter((specifier) => !specifier.startsWith('.') && !specifier.startsWith('/'));\n\n  return [...new Set(bareImports)];\n}\n","export class CompilerError extends Error {\n  constructor(message: string) {\n    super(`[Compiler Error]: ${message}`);\n    this.name = 'CompilerError';\n  }\n}\n\nexport class SecurityError extends Error {\n  constructor(message: string) {\n    super(`[Security Violation]: ${message}`);\n    this.name = 'SecurityError';\n  }\n}\n\nexport class NetworkModuleError extends Error {\n  constructor(moduleName: string, originalMessage: string) {\n    super(`[Network Error]: Не удалось загрузить пакет \"${moduleName}\". ${originalMessage}`);\n    this.name = 'NetworkModuleError';\n  }\n}\n","import { transform } from 'sucrase';\nimport { CompilerError } from '../core/errors';\n\n/**\n * Транспилирует TSX в CommonJS (React.createElement).\n */\nexport function compileTsx(code: string): string {\n  try {\n    const cleanCode = code.replace(/```tsx\\n?/g, '').replace(/```\\n?/g, '');\n\n    const compiled = transform(cleanCode, {\n      transforms: ['typescript', 'jsx', 'imports'],\n      jsxRuntime: 'classic',\n    });\n\n    return compiled.code;\n  } catch (error) {\n    throw new CompilerError((error as Error).message);\n  }\n}\n","import { ModuleRegistry } from '../core/types';\n\n// Singleton-хранилище в памяти для кэширования библиотек\nexport class ModuleCache {\n  private registry: ModuleRegistry = {};\n\n  public register(name: string, module: any) {\n    this.registry[name] = module;\n  }\n\n  public get(name: string): any | undefined {\n    return this.registry[name];\n  }\n\n  public getAll(): ModuleRegistry {\n    return { ...this.registry };\n  }\n\n  public has(name: string): boolean {\n    return !!this.registry[name];\n  }\n}\n","import { ModuleCache } from './cache';\nimport { NetworkModuleError } from '../core/errors';\n\nexport type ModuleImporter = (url: string) => Promise<any>;\n\nconst defaultImporter: ModuleImporter = (url) => import(/* @vite-ignore */ url);\n\n/**\n * Асинхронно подгружает отсутствующие пакеты через CDN.\n *\n * `importer` — точка внедрения (dependency injection) для тестов и\n * замены CDN-провайдера без изменения логики кэша.\n */\nexport async function loadMissingModules(\n  packages: string[],\n  cache: ModuleCache,\n  importer: ModuleImporter = defaultImporter,\n): Promise<void> {\n  const loadPromises = packages.map(async (pkg) => {\n    if (cache.has(pkg)) return; // Уже в кэше (или это встроенная либа)\n\n    try {\n      const module = await importer(`https://esm.sh/${pkg}`);\n      // Адаптируем ESM в формат, понятный CommonJS-require.\n      // `__esModule` нужен, чтобы Sucrase-интероп `_interopRequireDefault`\n      // не заворачивал модуль повторно и `default` резолвился напрямую.\n      cache.register(pkg, { ...module, default: module.default || module, __esModule: true });\n    } catch (error) {\n      throw new NetworkModuleError(pkg, (error as Error).message);\n    }\n  });\n\n  await Promise.all(loadPromises);\n}\n","/**\n * Возвращает массивы ключей и значений для \"затенения\" (Shadowing).\n * Переопределяет критические браузерные API в undefined.\n */\nexport function getShadowedGlobals() {\n  const forbiddenKeys = [\n    'window',\n    'document',\n    'localStorage',\n    'sessionStorage',\n    'fetch',\n    'XMLHttpRequest',\n    'indexedDB',\n    'navigator',\n  ];\n\n  const shadowValues = forbiddenKeys.map(() => undefined);\n\n  return { forbiddenKeys, shadowValues };\n}\n","import { ModuleRegistry, SandboxGlobals } from '../core/types';\nimport { getShadowedGlobals } from './scope';\nimport { SecurityError } from '../core/errors';\n\nexport function executeComponent(\n  compiledCode: string,\n  registry: ModuleRegistry,\n  globals: SandboxGlobals,\n): any {\n  const customRequire = (moduleName: string) => {\n    if (registry[moduleName]) return registry[moduleName];\n    throw new SecurityError(`Попытка импорта неразрешенного модуля: \"${moduleName}\"`);\n  };\n\n  const exportsObj = { default: null };\n  const React = registry['react'];\n\n  if (!React) throw new Error(\"Модуль 'react' обязателен для компиляции TSX.\");\n\n  const { forbiddenKeys, shadowValues } = getShadowedGlobals();\n  const globalKeys = Object.keys(globals);\n  const globalValues = Object.values(globals);\n\n  try {\n    const fn = new Function(\n      'require',\n      'exports',\n      'React',\n      ...globalKeys,\n      ...forbiddenKeys,\n      compiledCode,\n    );\n\n    fn(customRequire, exportsObj, React, ...globalValues, ...shadowValues);\n\n    // Приоритет `default`, иначе — первый именованный экспорт (например, `export const Scene`).\n    if (exportsObj.default) return exportsObj.default;\n\n    const namedExport = Object.keys(exportsObj).find((key) => key !== 'default');\n    return namedExport ? (exportsObj as any)[namedExport] : null;\n  } catch (error) {\n    // Не заворачиваем наши собственные ошибки безопасности в generic Runtime Error.\n    if (error instanceof SecurityError) throw error;\n    throw new Error(`[Runtime Error]: ${(error as Error).message}`);\n  }\n}\n","import { ModuleRegistry, SandboxGlobals, EvaluationResult } from './core/types';\nimport { extractBareImports } from './compiler/analyzer';\nimport { compileTsx } from './compiler/transform';\nimport { ModuleCache } from './library-manager/cache';\nimport { loadMissingModules, ModuleImporter } from './library-manager/loader';\nimport { executeComponent } from './sandbox/evaluator';\n\nexport class SandboxFacade {\n  private cache: ModuleCache;\n  private assetsMap: Record<string, string>;\n  private importer?: ModuleImporter;\n\n  constructor(initialRegistry: ModuleRegistry = {}, importer?: ModuleImporter) {\n    this.cache = new ModuleCache();\n    this.assetsMap = {};\n    this.importer = importer;\n\n    // Предварительно регистрируем базовые библиотеки (React, Remotion)\n    Object.entries(initialRegistry).forEach(([name, module]) => {\n      this.cache.register(name, module);\n    });\n  }\n\n  public setAssets(assets: Record<string, string>) {\n    this.assetsMap = assets;\n  }\n\n  public async compile(rawTsx: string): Promise<EvaluationResult> {\n    const start = performance.now();\n\n    try {\n      // 1. Анализ\n      const requiredPackages = extractBareImports(rawTsx);\n\n      // 2. Загрузка зависимостей (NPM/CDN)\n      await loadMissingModules(requiredPackages, this.cache, this.importer);\n\n      // 3. Транспиляция\n      const jsCode = compileTsx(rawTsx);\n\n      // 4. Подготовка глобальной области видимости\n      const globals: SandboxGlobals = {\n        staticFile: (filename: string) => this.assetsMap[filename] || '',\n      };\n\n      // 5. Выполнение\n      const component = executeComponent(jsCode, this.cache.getAll(), globals);\n\n      return {\n        component,\n        error: null,\n        executionTimeMs: performance.now() - start,\n      };\n    } catch (error) {\n      return {\n        component: null,\n        error: error as Error,\n        executionTimeMs: performance.now() - start,\n      };\n    }\n  }\n}\n","import { useState, useEffect, useRef } from 'react';\nimport { SandboxFacade } from '../facade';\nimport { ModuleRegistry } from '../core/types';\nimport * as React from 'react';\n\n/**\n * Готовый React-хук для бесшовной интеграции песочницы.\n *\n * Внимание: `localAssets` не должен попадать в зависимости эффекта по ссылке —\n * иначе новый объект на каждый рендер запускает бесконечный цикл рекомпиляции.\n * Поэтому мы сравниваем сериализованный ключ ассетов.\n */\nexport function useLiveSandbox(\n  code: string,\n  initialModules: ModuleRegistry,\n  localAssets: Record<string, string> = {},\n) {\n  const facadeRef = useRef<SandboxFacade | null>(null);\n  const assetsRef = useRef(localAssets);\n  assetsRef.current = localAssets;\n\n  const [Component, setComponent] = useState<React.ComponentType<any> | null>(null);\n  const [error, setError] = useState<Error | null>(null);\n  const [isCompiling, setIsCompiling] = useState(false);\n\n  // Инициализация фасада (единожды)\n  if (!facadeRef.current) {\n    // Автоматически добавляем React, если его забыли\n    const modules = { react: React, ...initialModules };\n    facadeRef.current = new SandboxFacade(modules);\n  }\n\n  const assetsKey = JSON.stringify(localAssets);\n\n  useEffect(() => {\n    if (!code) return;\n\n    let isMounted = true;\n    setIsCompiling(true);\n\n    facadeRef.current!.setAssets(assetsRef.current);\n\n    facadeRef.current!\n      .compile(code)\n      .then((result) => {\n        if (!isMounted) return;\n\n        if (result.error) {\n          setError(result.error);\n          setComponent(null);\n        } else {\n          setError(null);\n          setComponent(() => result.component);\n        }\n        setIsCompiling(false);\n      })\n      .catch((err: Error) => {\n        if (!isMounted) return;\n        setError(err);\n        setComponent(null);\n        setIsCompiling(false);\n      });\n\n    return () => {\n      isMounted = false;\n    };\n    // eslint-disable-next-line react-hooks/exhaustive-deps\n  }, [code, assetsKey]);\n\n  return { Component, error, isCompiling };\n}\n","import { unzipSync } from 'fflate';\n\n/**\n * Распакованный архив ресурсов: путь внутри архива -> сырые байты.\n */\nexport type AssetArchive = Record<string, Uint8Array>;\n\nconst IGNORED_PREFIXES = ['__MACOSX/'];\n\nfunction normalizePath(path: string): string {\n  return path.replace(/^\\.?\\//, '');\n}\n\n/**\n * Распаковывает ZIP с ассетами (медиа, шрифты, JSON) в плоскую карту байтов.\n * Служебные записи каталогов и системные папки macOS отбрасываются.\n */\nexport function extractAssetZip(zip: Uint8Array): AssetArchive {\n  const archive: AssetArchive = {};\n\n  for (const [rawPath, bytes] of Object.entries(unzipSync(zip))) {\n    const path = normalizePath(rawPath);\n    if (path === '' || path.endsWith('/')) continue;\n    if (IGNORED_PREFIXES.some((prefix) => path.startsWith(prefix))) continue;\n    archive[path] = bytes;\n  }\n\n  return archive;\n}\n\n/**\n * Превращает архив в карту `filename -> url`, понятную `SandboxFacade.setAssets`\n * и глобальной функции `staticFile(filename)`.\n *\n * Фабрика URL внедряется, чтобы функцию можно было тестировать без DOM:\n * в браузере передаётся `URL.createObjectURL`.\n */\nexport function createAssetUrlMap(\n  archive: AssetArchive,\n  createUrl: (bytes: Uint8Array, filename: string) => string,\n): Record<string, string> {\n  const urls: Record<string, string> = {};\n\n  for (const [path, bytes] of Object.entries(archive)) {\n    const filename = path.split('/').pop()!;\n    urls[filename] = createUrl(bytes, filename);\n  }\n\n  return urls;\n}\n\n/**\n * Освобождает ранее созданные `blob:`-ссылки, чтобы не текла память.\n */\nexport function releaseAssetUrls(\n  urls: Record<string, string>,\n  revoke: (url: string) => void,\n): void {\n  for (const url of Object.values(urls)) revoke(url);\n}\n"]}

package/package.json

@@ -0,0 +1,77 @@
+{
+  "name": "browser-tsx-sandbox",
+  "version": "0.1.0",
+  "description": "Pure client-side TSX compiler and sandbox evaluator with dynamic NPM library loading.",
+  "type": "module",
+  "license": "MIT",
+  "sideEffects": false,
+  "main": "./dist/index.cjs",
+  "module": "./dist/index.js",
+  "types": "./dist/index.d.ts",
+  "exports": {
+    ".": {
+      "types": "./dist/index.d.ts",
+      "import": "./dist/index.js",
+      "require": "./dist/index.cjs"
+    },
+    "./package.json": "./package.json"
+  },
+  "files": [
+    "dist",
+    "README.md",
+    "API.md"
+  ],
+  "keywords": [
+    "tsx",
+    "sandbox",
+    "sucrase",
+    "react",
+    "remotion",
+    "esm.sh",
+    "browser",
+    "compiler"
+  ],
+  "scripts": {
+    "build": "tsup",
+    "prepack": "npm run build",
+    "prepublishOnly": "npm run typecheck && npm test",
+    "pack:check": "npm pack --dry-run",
+    "test": "vitest run",
+    "test:watch": "vitest",
+    "test:e2e": "vitest run --config vitest.e2e.config.ts",
+    "render": "node render/render.mjs",
+    "render:assets": "node render/render-assets.mjs",
+    "render:example": "node render/render-example.mjs",
+    "render:widgets": "node render/render-widgets.mjs",
+    "render:widgets:logo": "node render/render-widgets.mjs examples/vidora-widgets-logo.json",
+    "render:props": "node render/render-props.mjs",
+    "verify:video": "node render/verify-video.mjs",
+    "typecheck": "tsc --noEmit"
+  },
+  "dependencies": {
+    "fflate": "^0.8.3",
+    "sucrase": "^3.35.0"
+  },
+  "peerDependencies": {
+    "react": ">=17"
+  },
+  "devDependencies": {
+    "@remotion/bundler": "^4.0.524",
+    "@remotion/renderer": "^4.0.524",
+    "@testing-library/dom": "^10.4.0",
+    "@testing-library/react": "^16.0.1",
+    "@types/node": "^26.5.1",
+    "@types/react": "^18.3.12",
+    "@types/react-dom": "^18.3.1",
+    "jsdom": "^25.0.1",
+    "lucide-react": "^1.45.0",
+    "postcss": "^8.5.28",
+    "react": "^18.3.1",
+    "react-dom": "^18.3.1",
+    "remotion": "^4.0.524",
+    "tailwindcss": "^3.4.19",
+    "tsup": "^8.5.1",
+    "typescript": "^5.6.3",
+    "vitest": "^2.1.8"
+  }
+}