sandboxedjs 0.1.15 → 0.1.16

package/README.md

@@ -579,29 +579,41 @@ resolve their implementation at call time (`node:zlib`/`node:crypto` on Node,
 `CompressionStream`/`crypto.subtle` plus a JS MD5 in a browser), so nothing pulls a `node:`
 builtin in when the module loads and a bundler will not fail on it.
 
-**You supply the pod.** The default boot path uses `@scelar/nodepod/headless`, which installs a
-`worker_threads` host. That entry is now loaded lazily, behind a runtime-built specifier, so a
-browser bundle never pulls `node:worker_threads` in through it. In a browser you boot Nodepod's
-browser build yourself — it needs a service worker, per Nodepod's own setup docs — and hand the
-instance over:
+**One call, either side.** `createContainer()` picks its own host: the headless
+`worker_threads` engine on Node, Nodepod's browser build in a browser. You do not import Nodepod,
+and you do not pass a pod:
 
 ```ts
-import { Nodepod } from "@scelar/nodepod";
 import { createContainer } from "sandboxedjs";
 
-const pod = await Nodepod.boot({ /* your service-worker setup */ });
-const box = await createContainer({ pod });
+const box = await createContainer({ files: { "/app/index.js": "console.log(1)" } });
 
 await box.exec("ls -la /");      // shell + coreutils
-await box.exec("node app.js");   // Node, through Nodepod's browser engine
+await box.exec("node app/index.js");
 ```
 
-**Verified in a browser.** Booted under Vite with Nodepod's browser build, the following run:
+**Serve the service worker.** In a browser, a container's preview iframe reaches an HTTP server
+running inside the page through a service worker, and a browser will not register one from
+`node_modules` — it has to come from your own origin at `/__sw__.js`. One line:
+
+```ts
+// vite.config.ts
+import sandboxedjs from "sandboxedjs/vite";
+export default defineConfig({ plugins: [sandboxedjs()] });
+```
+
+For anything else, `sandboxedjs/server` exports `serveSW()` (Fetch-style hosts) and
+`serveSWNode()` (Express, Fastify, `node:http`). Skip it with
+`createContainer({ browser: { serviceWorker: false } })`, which also disables preview iframes.
+
+You can still boot the pod yourself and pass it as `pod` when you need control over Nodepod's
+own options.
+
+**Verified in a browser.** Booted under Vite, the following run:
 
 ```
 $ uname -a              Linux sandbox 5.10.0 (sandboxedjs@nodepod) … x86_64 GNU/Linux
 $ ls -la /app           the mounted files
-$ wc -l /app/data.txt   3 /app/data.txt
 $ grep beta …           beta
 $ node /app/hello.js    node runtime says hi
 ```
@@ -612,8 +624,8 @@ seconds, nearly all of it Nodepod starting.
 **What does not work in a browser:**
 
 - `copyIn()` / `copyOut()` — they read and write the host filesystem, which does not exist.
-- `expose()` — it opens a real `node:http` listener. In a browser you use Nodepod's service
-  worker and preview iframe to reach an in-container server instead of a host port.
+- `expose()` — it opens a real `node:http` listener. Use the service worker and a preview iframe
+  to reach an in-container server instead of a host port.
 - `python3` — see below.
 - The `sandboxedjs` CLI, obviously.
 

package/dist/index.cjs

@@ -23893,8 +23893,8 @@ var Container = class _Container {
   // ── boot ──────────────────────────────────────────────────────────────────
   static async create(opts = {}) {
     if (opts.python) configurePython(opts.python);
-    if (!opts.pod) await installEsbuildRuntime();
-    const pod = opts.pod ?? await bootHeadlessPod(opts);
+    if (!opts.pod && isNodeRuntime()) await installEsbuildRuntime();
+    const pod = opts.pod ?? (isNodeRuntime() ? await bootHeadlessPod(opts) : await bootBrowserPod(opts));
     const kernel = new Kernel({
       pod,
       hostname: opts.hostname ?? "sandbox",
@@ -24316,6 +24316,18 @@ function normalizeHeaders(headers) {
 async function createContainer(opts = {}) {
   return Container.create(opts);
 }
+function isNodeRuntime() {
+  return typeof process !== "undefined" && process.versions != null && process.versions.node != null;
+}
+async function bootBrowserPod(opts) {
+  const { Nodepod } = await import('@scelar/nodepod');
+  return Nodepod.boot({
+    env: opts.env ?? {},
+    workdir: opts.cwd ?? "/",
+    ...opts.browser ?? {},
+    ...opts.onServerReady ? { onServerReady: opts.onServerReady } : {}
+  });
+}
 async function bootHeadlessPod(opts) {
   const { Nodepod } = await nodeOnlyModule(
     "@scelar/nodepod/headless"