code-playpad 0.10.0 → 0.10.1

package/README.md

@@ -3,21 +3,21 @@
 [![npm](https://img.shields.io/npm/v/code-playpad)](https://www.npmjs.com/package/code-playpad) [![license](https://img.shields.io/npm/l/code-playpad)](./LICENSE)
 
 Runnable code in any web page. A CodeMirror editor that **executes what it
-shows** — Python, JavaScript, TypeScript and a documented subset of Java —
-entirely in the reader's browser. No backend, no iframe, no sign-up.
+shows** — Python, JavaScript, TypeScript, a documented subset of Java, and
+experimental C and C++ — entirely in the reader's browser. No backend, no iframe, no sign-up.
 
 **[Live demo →](https://code-playpad.swengr.com)**
 
 ```html
-<script type="module" src="https://cdn.jsdelivr.net/npm/code-playpad@0.9.0/dist/standalone.js"></script>
+<script type="module" src="https://cdn.jsdelivr.net/npm/code-playpad@0.10.1/dist/standalone.js"></script>
 
 <code-playpad height="auto">
   print("hello from a static page")
 </code-playpad>
 ```
 
-**Contents** — [Languages](#languages) · [Install](#install) · [Attributes](#attributes)
-· [Sizing](#sizing) · [Several files](#several-files) · [Input](#input)
+**Contents** — [Languages](#languages) · [Experimental C/C++](#experimental-cc)
+· [Install](#install) · [Attributes](#attributes) · [Sizing](#sizing) · [Several files](#several-files) · [Input](#input)
 · [Controlling it from JavaScript](#controlling-it-from-javascript)
 · [Events and grading](#events-and-grading) · [Saving work](#saving-work)
 · [Light and dark](#light-and-dark) · [Styling](#styling) · [Framework recipes](#framework-recipes)
@@ -31,6 +31,7 @@ entirely in the reader's browser. No backend, no iframe, no sign-up.
 | `javascript` | The browser's own engine, in a Worker | nothing |
 | `typescript` | Same engine, types stripped before running | nothing from another service: a ~47 KB (gzipped) transform chunk of this package, loaded the first time a widget needs it |
 | `java` | A documented subset of Java 25, compiled and interpreted in a Worker by an engine built for this package — see [Java](#java) | nothing: the engine is a ~105 KB (gzipped) chunk of this package, loaded with the first Java widget, and its library a ~75 KB chunk loaded the first time a program uses it |
+| `c`, `cpp` | Experimental: C17 and C++20, compiled by a real Clang compiler in a Worker — see [Experimental C/C++](#experimental-cc) | ~30 MB on the first C/C++ Run, then cached |
 
 ```html
 <code-playpad height="auto">print("python is the default")</code-playpad>
@@ -162,18 +163,39 @@ the evidence behind it and every known difference from the JDK, is in
 ## Experimental C/C++
 
 `language="c"` (C17) and `language="cpp"` (C++20) compile and run in a worker
-with a real Clang compiler, prefilled stdin and Stop. They are experimental:
+with a real Clang compiler, prefilled stdin and Stop. No setup is needed:
+
+```html
+<code-playpad language="cpp" height="auto">
+  #include &lt;algorithm&gt;
+  #include &lt;iostream&gt;
+  #include &lt;vector&gt;
+
+  int main() {
+    std::vector&lt;int&gt; v{3, 1, 2};
+    std::sort(v.begin(), v.end());
+    for (int n : v) std::cout &lt;&lt; n &lt;&lt; " ";
+  }
+</code-playpad>
+```
+
+Inside HTML, write `<` as `&lt;`. They are experimental:
 
 - **The compiler loads on the first C/C++ Run.** It is a separate package,
   [`@code-playpad/cpp-toolchain`](https://www.npmjs.com/package/@code-playpad/cpp-toolchain),
-  fetched from jsDelivr and checked by SHA-256. Installing `code-playpad` does not
-  download it. To host it yourself, call `configureCpp({ indexURL })`.
+  fetched from jsDelivr and checked by SHA-256. You don't install it, and
+  installing `code-playpad` doesn't download it. A page with a strict
+  Content-Security-Policy must allow the host in `connect-src`, `blob:` in
+  `script-src` and `worker-src`, and `'wasm-unsafe-eval'`. To host it yourself, see
+  [Production](#production).
+- **Not everything works.** Exceptions and threads don't compile, input must be
+  prefilled (it can't wait for typing), and programs only get stdin, stdout and
+  stderr. A run stops after 120 seconds; change that with
+  `configureCpp({ timeoutMs })`.
 - **Lightly tested on phones.** Desktop Chromium, WebKit and Firefox pass the
   browser suite. One physical phone was checked by hand; memory on phones has
   not been measured.
 
-See [setup and limits](https://github.com/stancs/code-playpad/blob/main/docs/COMPILER-RUNTIMES.md).
-
 ## Download size
 
 What a page downloads once a reader presses Run, with the CDN build, as
@@ -245,7 +267,7 @@ actually sent.
 ### From a CDN — nothing to install
 
 ```html
-<script type="module" src="https://cdn.jsdelivr.net/npm/code-playpad@0.9.0/dist/standalone.js"></script>
+<script type="module" src="https://cdn.jsdelivr.net/npm/code-playpad@0.10.1/dist/standalone.js"></script>
 ```
 
 This is the `standalone` build: CodeMirror is bundled in, so a static blog post
@@ -267,7 +289,7 @@ npm install code-playpad @codemirror/state @codemirror/view @codemirror/commands
 CodeMirror is a peer dependency so you never end up with two copies of
 `@codemirror/state`. Language grammars are **optional** — install only what you
 use (`@codemirror/lang-python`, `@codemirror/lang-javascript`,
-`@codemirror/lang-json`, `@codemirror/lang-java`); a missing one degrades to
+`@codemirror/lang-json`, `@codemirror/lang-java`, `@codemirror/lang-cpp`); a missing one degrades to
 plain text rather than throwing.
 
 ```js
@@ -854,6 +876,19 @@ self-contained ES module exporting `transform`), set before the first
 JavaScript or TypeScript widget starts its runtime. Give those files a long `Cache-Control`: one page's download then
 warms every other page on the site.
 
+C and C++ load their compiler from jsDelivr unless you host it. To host it, unpack
+[`@code-playpad/cpp-toolchain`](https://www.npmjs.com/package/@code-playpad/cpp-toolchain),
+keep its version and notices together, and serve its `dist` folder:
+
+```js
+import { configureCpp } from 'code-playpad';
+
+configureCpp({ indexURL: 'https://your-site.example/cpp-toolchain/dist/' });   // before any widget runs
+```
+
+Use the toolchain version that your `code-playpad` version pins: every file is
+checked by SHA-256, so another version fails. A different origin must allow CORS.
+
 ## Worth knowing
 
 - **One runtime per page.** Every widget shares a single Worker per language, so
@@ -876,6 +911,15 @@ warms every other page on the site.
 
 ## Version history
 
+### 0.10.1
+
+Documentation only: nothing changes in how the widget runs.
+
+- **The README's opening** now mentions C and C++, in the intro, the Languages table
+  and the contents, and its snippets pin the current version.
+- **The C/C++ section** has an example, its limits, CSP needs and self-hosting steps.
+- **Removed links to private files,** which readers couldn't open.
+
 ### 0.10.0
 
 C and C++ now work with no setup. Nothing else changed.
@@ -1247,8 +1291,8 @@ this package.
 Experimental C/C++ downloads separate compiler assets with additional
 third-party terms; those assets are not MIT-only. Their notices ship in
 `dist/COMPILER-NOTICES.txt`. The pinned C/C++ rebuild passes its scoped license
-inventory gate; see the [compiler license audit](docs/COMPILER-LICENSE-AUDIT.md)
-and [rebuild and remaining gates](docs/CPP-REBUILD.md).
+inventory gate; see `dist/COMPILER-LICENSE-AUDIT.md`. Programs compiled here
+include parts of the C and C++ libraries, which have their own terms.
 
 The Java engine is original code under the same MIT licence. Java is a trademark
 of Oracle and/or its affiliates; code-playpad is not affiliated with, endorsed

package/dist/cdn.js

@@ -1,2 +1,2 @@
-/*! code-playpad 0.10.0: CDN entry, loads dist/standalone.js of this exact version */
-export * from "https://cdn.jsdelivr.net/npm/code-playpad@0.10.0/dist/standalone.js";
+/*! code-playpad 0.10.1: CDN entry, loads dist/standalone.js of this exact version */
+export * from "https://cdn.jsdelivr.net/npm/code-playpad@0.10.1/dist/standalone.js";

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "code-playpad",
-  "version": "0.10.0",
+  "version": "0.10.1",
   "description": "Embeddable browser code playground: a CodeMirror editor that runs Python, JavaScript, TypeScript, a subset of Java and experimental C/C++ in the browser. No backend. One shared worker per page, blocking input(), multi-file projects, lazy per-language loading.",
   "type": "module",
   "license": "MIT",