sandboxedjs 0.1.29 → 0.1.31

package/dist/service-worker.js

@@ -0,0 +1,112 @@
+// src/preview/router.ts
+var CLAIM = /(?:^|\/)__sbx__\/(\d+)(?:\/|$)/;
+var NOT_CONNECTED = 503;
+var PreviewRouter = class {
+  constructor(options) {
+    this.options = options;
+  }
+  options;
+  clientPorts = /* @__PURE__ */ new Map();
+  pending = /* @__PURE__ */ new Map();
+  nextId = 1;
+  connected = false;
+  /** The page that answers requests has arrived. */
+  connect() {
+    this.connected = true;
+  }
+  /** Read a port out of a claim path, or null when this is not one. */
+  claimedPort(pathname) {
+    const match = CLAIM.exec(pathname);
+    return match ? Number(match[1]) : null;
+  }
+  /** Remember that everything from `clientId` belongs to `port`. */
+  bind(clientId, port) {
+    if (clientId) this.clientPorts.set(clientId, port);
+  }
+  /** Which port this client is previewing, or undefined for ordinary traffic. */
+  portFor(clientId) {
+    return this.clientPorts.get(clientId);
+  }
+  /** A response has come back from the page. */
+  settle(id, response) {
+    const resolve = this.pending.get(id);
+    if (!resolve) return;
+    this.pending.delete(id);
+    resolve(response);
+  }
+  /** Forget a client that has gone away. */
+  release(clientId) {
+    this.clientPorts.delete(clientId);
+  }
+  /** Ask the page for one response and rebuild it as a `Response`. */
+  async fetch(port, path, request) {
+    if (!this.connected) {
+      return new Response("The sandbox preview is not connected yet.", { status: NOT_CONNECTED });
+    }
+    const body = request.method === "GET" || request.method === "HEAD" ? void 0 : await request.arrayBuffer();
+    const id = this.nextId++;
+    const answered = new Promise((resolve) => this.pending.set(id, resolve));
+    this.options.send(
+      { id, port, path, method: request.method, headers: headerRecord(request.headers), ...body ? { body } : {} },
+      body ? [body] : []
+    );
+    const timeoutMs = this.options.timeoutMs ?? 3e4;
+    const result = await Promise.race([
+      answered,
+      new Promise(
+        (resolve) => setTimeout(
+          () => resolve({ status: 504, statusText: "Gateway Timeout", headers: {}, body: new ArrayBuffer(0) }),
+          timeoutMs
+        )
+      )
+    ]);
+    this.pending.delete(id);
+    const headers = new Headers(result.headers);
+    headers.set("Cross-Origin-Resource-Policy", "cross-origin");
+    headers.set("Cross-Origin-Embedder-Policy", "require-corp");
+    return new Response(result.body, { status: result.status, statusText: result.statusText, headers });
+  }
+};
+function headerRecord(headers) {
+  const out = {};
+  headers.forEach((value, key) => {
+    out[key] = value;
+  });
+  return out;
+}
+
+// src/preview/service-worker.ts
+var worker = globalThis;
+var host = null;
+var router = new PreviewRouter({
+  send: (request, transfer) => host?.postMessage(request, transfer)
+});
+worker.addEventListener("install", () => void worker.skipWaiting());
+worker.addEventListener("activate", (event) => event.waitUntil(worker.clients.claim()));
+worker.addEventListener("message", (event) => {
+  const data = event.data;
+  if (data?.type !== "sandboxedjs:connect") return;
+  host = event.ports[0] ?? null;
+  if (!host) return;
+  host.onmessage = (message) => {
+    const reply = message.data;
+    router.settle(reply.id, reply.response);
+  };
+  host.start();
+  router.connect();
+});
+worker.addEventListener("fetch", (event) => {
+  const url = new URL(event.request.url);
+  if (url.origin !== worker.location.origin) return;
+  const claimed = router.claimedPort(url.pathname);
+  if (claimed !== null && event.request.mode === "navigate") {
+    router.bind(event.resultingClientId || event.clientId, claimed);
+    event.respondWith(router.fetch(claimed, "/", event.request));
+    return;
+  }
+  const port = router.portFor(event.clientId);
+  if (port === void 0) return;
+  event.respondWith(router.fetch(port, url.pathname + url.search, event.request));
+});
+//# sourceMappingURL=service-worker.js.map
+//# sourceMappingURL=service-worker.js.map

package/dist/service-worker.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/preview/router.ts","../src/preview/service-worker.ts"],"names":[],"mappings":";AA2BA,IAAM,KAAA,GAAQ,gCAAA;AA0Bd,IAAM,aAAA,GAAgB,GAAA;AAEf,IAAM,gBAAN,MAAoB;AAAA,EAMzB,YAA6B,OAAA,EAA+B;AAA/B,IAAA,IAAA,CAAA,OAAA,GAAA,OAAA;AAAA,EAAgC;AAAA,EAAhC,OAAA;AAAA,EALZ,WAAA,uBAAkB,GAAA,EAAoB;AAAA,EACtC,OAAA,uBAAc,GAAA,EAA8C;AAAA,EACrE,MAAA,GAAS,CAAA;AAAA,EACT,SAAA,GAAY,KAAA;AAAA;AAAA,EAKpB,OAAA,GAAgB;AACd,IAAA,IAAA,CAAK,SAAA,GAAY,IAAA;AAAA,EACnB;AAAA;AAAA,EAGA,YAAY,QAAA,EAAiC;AAC3C,IAAA,MAAM,KAAA,GAAQ,KAAA,CAAM,IAAA,CAAK,QAAQ,CAAA;AACjC,IAAA,OAAO,KAAA,GAAQ,MAAA,CAAO,KAAA,CAAM,CAAC,CAAC,CAAA,GAAI,IAAA;AAAA,EACpC;AAAA;AAAA,EAGA,IAAA,CAAK,UAAkB,IAAA,EAAoB;AACzC,IAAA,IAAI,QAAA,EAAU,IAAA,CAAK,WAAA,CAAY,GAAA,CAAI,UAAU,IAAI,CAAA;AAAA,EACnD;AAAA;AAAA,EAGA,QAAQ,QAAA,EAAsC;AAC5C,IAAA,OAAO,IAAA,CAAK,WAAA,CAAY,GAAA,CAAI,QAAQ,CAAA;AAAA,EACtC;AAAA;AAAA,EAGA,MAAA,CAAO,IAAY,QAAA,EAAiC;AAClD,IAAA,MAAM,OAAA,GAAU,IAAA,CAAK,OAAA,CAAQ,GAAA,CAAI,EAAE,CAAA;AACnC,IAAA,IAAI,CAAC,OAAA,EAAS;AACd,IAAA,IAAA,CAAK,OAAA,CAAQ,OAAO,EAAE,CAAA;AACtB,IAAA,OAAA,CAAQ,QAAQ,CAAA;AAAA,EAClB;AAAA;AAAA,EAGA,QAAQ,QAAA,EAAwB;AAC9B,IAAA,IAAA,CAAK,WAAA,CAAY,OAAO,QAAQ,CAAA;AAAA,EAClC;AAAA;AAAA,EAGA,MAAM,KAAA,CAAM,IAAA,EAAc,IAAA,EAAc,OAAA,EAAqC;AAC3E,IAAA,IAAI,CAAC,KAAK,SAAA,EAAW;AACnB,MAAA,OAAO,IAAI,QAAA,CAAS,2CAAA,EAA6C,EAAE,MAAA,EAAQ,eAAe,CAAA;AAAA,IAC5F;AACA,IAAA,MAAM,IAAA,GAAO,OAAA,CAAQ,MAAA,KAAW,KAAA,IAAS,OAAA,CAAQ,WAAW,MAAA,GAAS,MAAA,GAAY,MAAM,OAAA,CAAQ,WAAA,EAAY;AAC3G,IAAA,MAAM,KAAK,IAAA,CAAK,MAAA,EAAA;AAChB,IAAA,MAAM,QAAA,GAAW,IAAI,OAAA,CAAyB,CAAC,OAAA,KAAY,KAAK,OAAA,CAAQ,GAAA,CAAI,EAAA,EAAI,OAAO,CAAC,CAAA;AAExF,IAAA,IAAA,CAAK,OAAA,CAAQ,IAAA;AAAA,MACX,EAAE,EAAA,EAAI,IAAA,EAAM,MAAM,MAAA,EAAQ,OAAA,CAAQ,QAAQ,OAAA,EAAS,YAAA,CAAa,OAAA,CAAQ,OAAO,GAAG,GAAI,IAAA,GAAO,EAAE,IAAA,EAAK,GAAI,EAAC,EAAG;AAAA,MAC5G,IAAA,GAAO,CAAC,IAAI,CAAA,GAAI;AAAC,KACnB;AAEA,IAAA,MAAM,SAAA,GAAY,IAAA,CAAK,OAAA,CAAQ,SAAA,IAAa,GAAA;AAC5C,IAAA,MAAM,MAAA,GAAS,MAAM,OAAA,CAAQ,IAAA,CAAK;AAAA,MAChC,QAAA;AAAA,MACA,IAAI,OAAA;AAAA,QAAyB,CAAC,OAAA,KAC5B,UAAA;AAAA,UACE,MAAM,OAAA,CAAQ,EAAE,MAAA,EAAQ,KAAK,UAAA,EAAY,iBAAA,EAAmB,OAAA,EAAS,IAAI,IAAA,EAAM,IAAI,WAAA,CAAY,CAAC,GAAG,CAAA;AAAA,UACnG;AAAA;AACF;AACF,KACD,CAAA;AACD,IAAA,IAAA,CAAK,OAAA,CAAQ,OAAO,EAAE,CAAA;AAEtB,IAAA,MAAM,OAAA,GAAU,IAAI,OAAA,CAAQ,MAAA,CAAO,OAAO,CAAA;AAY1C,IAAA,OAAA,CAAQ,GAAA,CAAI,gCAAgC,cAAc,CAAA;AAC1D,IAAA,OAAA,CAAQ,GAAA,CAAI,gCAAgC,cAAc,CAAA;AAC1D,IAAA,OAAO,IAAI,QAAA,CAAS,MAAA,CAAO,IAAA,EAAM,EAAE,MAAA,EAAQ,MAAA,CAAO,MAAA,EAAQ,UAAA,EAAY,MAAA,CAAO,UAAA,EAAY,OAAA,EAAS,CAAA;AAAA,EACpG;AACF,CAAA;AAGA,SAAS,aAAa,OAAA,EAA0C;AAC9D,EAAA,MAAM,MAA8B,EAAC;AACrC,EAAC,OAAA,CACE,OAAA,CAAQ,CAAC,KAAA,EAAO,GAAA,KAAQ;AAAE,IAAA,GAAA,CAAI,GAAG,CAAA,GAAI,KAAA;AAAA,EAAO,CAAC,CAAA;AAChD,EAAA,OAAO,GAAA;AACT;;;ACvGA,IAAM,MAAA,GAAS,UAAA;AAEf,IAAI,IAAA,GAA2B,IAAA;AAC/B,IAAM,MAAA,GAAS,IAAI,aAAA,CAAc;AAAA,EAC/B,MAAM,CAAC,OAAA,EAAS,aAAa,IAAA,EAAM,WAAA,CAAY,SAAS,QAAQ;AAClE,CAAC,CAAA;AAED,MAAA,CAAO,iBAAiB,SAAA,EAAW,MAAM,KAAK,MAAA,CAAO,aAAa,CAAA;AAClE,MAAA,CAAO,gBAAA,CAAiB,UAAA,EAAY,CAAC,KAAA,KAAU,KAAA,CAAM,UAAU,MAAA,CAAO,OAAA,CAAQ,KAAA,EAAO,CAAC,CAAA;AAEtF,MAAA,CAAO,gBAAA,CAAiB,SAAA,EAAW,CAAC,KAAA,KAAU;AAC5C,EAAA,MAAM,OAAO,KAAA,CAAM,IAAA;AACnB,EAAA,IAAI,IAAA,EAAM,SAAS,qBAAA,EAAuB;AAC1C,EAAA,IAAA,GAAO,KAAA,CAAM,KAAA,CAAM,CAAC,CAAA,IAAK,IAAA;AACzB,EAAA,IAAI,CAAC,IAAA,EAAM;AACX,EAAA,IAAA,CAAK,SAAA,GAAY,CAAC,OAAA,KAAY;AAC5B,IAAA,MAAM,QAAQ,OAAA,CAAQ,IAAA;AACtB,IAAA,MAAA,CAAO,MAAA,CAAO,KAAA,CAAM,EAAA,EAAI,KAAA,CAAM,QAAQ,CAAA;AAAA,EACxC,CAAA;AACA,EAAA,IAAA,CAAK,KAAA,EAAM;AACX,EAAA,MAAA,CAAO,OAAA,EAAQ;AACjB,CAAC,CAAA;AAED,MAAA,CAAO,gBAAA,CAAiB,OAAA,EAAS,CAAC,KAAA,KAAU;AAC1C,EAAA,MAAM,GAAA,GAAM,IAAI,GAAA,CAAI,KAAA,CAAM,QAAQ,GAAG,CAAA;AACrC,EAAA,IAAI,GAAA,CAAI,MAAA,KAAW,MAAA,CAAO,QAAA,CAAS,MAAA,EAAQ;AAE3C,EAAA,MAAM,OAAA,GAAU,MAAA,CAAO,WAAA,CAAY,GAAA,CAAI,QAAQ,CAAA;AAC/C,EAAA,IAAI,OAAA,KAAY,IAAA,IAAQ,KAAA,CAAM,OAAA,CAAQ,SAAS,UAAA,EAAY;AAIzD,IAAA,MAAA,CAAO,IAAA,CAAK,KAAA,CAAM,iBAAA,IAAqB,KAAA,CAAM,UAAU,OAAO,CAAA;AAC9D,IAAA,KAAA,CAAM,YAAY,MAAA,CAAO,KAAA,CAAM,SAAS,GAAA,EAAK,KAAA,CAAM,OAAO,CAAC,CAAA;AAC3D,IAAA;AAAA,EACF;AAEA,EAAA,MAAM,IAAA,GAAO,MAAA,CAAO,OAAA,CAAQ,KAAA,CAAM,QAAQ,CAAA;AAC1C,EAAA,IAAI,SAAS,MAAA,EAAW;AACxB,EAAA,KAAA,CAAM,WAAA,CAAY,MAAA,CAAO,KAAA,CAAM,IAAA,EAAM,GAAA,CAAI,WAAW,GAAA,CAAI,MAAA,EAAQ,KAAA,CAAM,OAAO,CAAC,CAAA;AAChF,CAAC,CAAA","file":"service-worker.js","sourcesContent":["/**\n * The routing a preview service worker does, separated from the worker itself.\n *\n * A service worker is awkward to test — it needs a browser, a registration and\n * a secure context — but almost none of what makes this correct is about being\n * a service worker. The interesting part is the bookkeeping: which client is\n * previewing which port, which requests belong to a preview at all, and how a\n * response is rebuilt on the way back. That lives here, where it can be\n * exercised directly.\n *\n * The rule this implements, and the reason it exists: requests are routed by\n * **who is asking**, not by what the path looks like. An iframe navigates once\n * to `/__sbx__/<port>/`; every later request from that client — however\n * absolute its path — is recognised by its client id. Nothing has to rewrite\n * `/src/main.js` or `/@vite/client`, which is what makes a real dev server\n * work rather than only a single page.\n */\n\n/**\n * The one-time path an iframe navigates to in order to claim a port.\n *\n * Deliberately not anchored to the start of the path. A service worker's scope\n * is the directory its script was served from, so in a published package the\n * claim arrives under something like\n * `/node_modules/sandboxedjs/dist/__sbx__/5173/` — anchoring here would match\n * only when the worker happened to be served from the site root.\n */\nconst CLAIM = /(?:^|\\/)__sbx__\\/(\\d+)(?:\\/|$)/;\n\nexport interface ProxiedRequest {\n  id: number;\n  port: number;\n  path: string;\n  method: string;\n  headers: Record<string, string>;\n  body?: ArrayBuffer;\n}\n\nexport interface ProxiedResponse {\n  status: number;\n  statusText: string;\n  headers: Record<string, string>;\n  body: ArrayBuffer;\n}\n\nexport interface PreviewRouterOptions {\n  /** Hand a request to whichever page owns the container. */\n  send(request: ProxiedRequest, transfer: ArrayBuffer[]): void;\n  /** How long to wait for that page before giving up. */\n  timeoutMs?: number;\n}\n\n/** The port to answer with when nothing has connected yet. */\nconst NOT_CONNECTED = 503;\n\nexport class PreviewRouter {\n  private readonly clientPorts = new Map<string, number>();\n  private readonly pending = new Map<number, (value: ProxiedResponse) => void>();\n  private nextId = 1;\n  private connected = false;\n\n  constructor(private readonly options: PreviewRouterOptions) {}\n\n  /** The page that answers requests has arrived. */\n  connect(): void {\n    this.connected = true;\n  }\n\n  /** Read a port out of a claim path, or null when this is not one. */\n  claimedPort(pathname: string): number | null {\n    const match = CLAIM.exec(pathname);\n    return match ? Number(match[1]) : null;\n  }\n\n  /** Remember that everything from `clientId` belongs to `port`. */\n  bind(clientId: string, port: number): void {\n    if (clientId) this.clientPorts.set(clientId, port);\n  }\n\n  /** Which port this client is previewing, or undefined for ordinary traffic. */\n  portFor(clientId: string): number | undefined {\n    return this.clientPorts.get(clientId);\n  }\n\n  /** A response has come back from the page. */\n  settle(id: number, response: ProxiedResponse): void {\n    const resolve = this.pending.get(id);\n    if (!resolve) return;\n    this.pending.delete(id);\n    resolve(response);\n  }\n\n  /** Forget a client that has gone away. */\n  release(clientId: string): void {\n    this.clientPorts.delete(clientId);\n  }\n\n  /** Ask the page for one response and rebuild it as a `Response`. */\n  async fetch(port: number, path: string, request: Request): Promise<Response> {\n    if (!this.connected) {\n      return new Response(\"The sandbox preview is not connected yet.\", { status: NOT_CONNECTED });\n    }\n    const body = request.method === \"GET\" || request.method === \"HEAD\" ? undefined : await request.arrayBuffer();\n    const id = this.nextId++;\n    const answered = new Promise<ProxiedResponse>((resolve) => this.pending.set(id, resolve));\n\n    this.options.send(\n      { id, port, path, method: request.method, headers: headerRecord(request.headers), ...(body ? { body } : {}) },\n      body ? [body] : [],\n    );\n\n    const timeoutMs = this.options.timeoutMs ?? 30_000;\n    const result = await Promise.race([\n      answered,\n      new Promise<ProxiedResponse>((resolve) =>\n        setTimeout(\n          () => resolve({ status: 504, statusText: \"Gateway Timeout\", headers: {}, body: new ArrayBuffer(0) }),\n          timeoutMs,\n        ),\n      ),\n    ]);\n    this.pending.delete(id);\n\n    const headers = new Headers(result.headers);\n    /*\n     * Two headers, for two different refusals, both of which a cross-origin\n     * isolated page makes — and pages that run Rolldown have to be isolated.\n     *\n     * `Cross-Origin-Resource-Policy` lets the response be loaded as a\n     * subresource at all. `Cross-Origin-Embedder-Policy` lets it be *framed*:\n     * without it the document is not isolation-compatible, so the iframe is\n     * replaced by an error page and the parent sees an opaque, cross-origin\n     * frame rather than the site it asked for. Everything served here carries\n     * CORP, so the stricter policy is one this preview can satisfy.\n     */\n    headers.set(\"Cross-Origin-Resource-Policy\", \"cross-origin\");\n    headers.set(\"Cross-Origin-Embedder-Policy\", \"require-corp\");\n    return new Response(result.body, { status: result.status, statusText: result.statusText, headers });\n  }\n}\n\n/** `Headers` is iterable at runtime; the DOM lib used here does not say so. */\nfunction headerRecord(headers: Headers): Record<string, string> {\n  const out: Record<string, string> = {};\n  (headers as unknown as { forEach(fn: (value: string, key: string) => void): void })\n    .forEach((value, key) => { out[key] = value; });\n  return out;\n}\n","/**\n * A service worker that gives a container's HTTP servers real URLs.\n *\n * Without one, a page can reach a server inside the container only through\n * `box.request(port, …)`, which hands back a single response. That is enough to\n * read an API or drop some HTML into an element, but not to *run* a site: a\n * dev server emits absolute URLs like `/src/main.js` and `/@vite/client`, and\n * nothing in the page resolves those to the sandbox.\n *\n * This file is deliberately only the glue. The routing lives in\n * {@link PreviewRouter}, where it can be tested without a browser — a service\n * worker otherwise needs a registration, a secure context and a real page\n * before any of its behaviour can be observed at all.\n */\n\nimport { PreviewRouter, type ProxiedResponse } from \"./router.js\";\n\n/*\n * Typed locally rather than through `lib.webworker`: this package compiles with\n * the DOM lib, and the two declare a conflicting `self`. Only the handful of\n * members actually used are described here.\n */\ninterface FetchLikeEvent extends Event {\n  request: Request;\n  clientId: string;\n  resultingClientId: string;\n  respondWith(response: Promise<Response> | Response): void;\n}\ninterface ExtendableLikeEvent extends Event {\n  waitUntil(promise: Promise<unknown>): void;\n}\ninterface MessageLikeEvent extends Event {\n  data: unknown;\n  ports: readonly MessagePort[];\n}\ninterface WorkerScope {\n  location: { origin: string };\n  clients: { claim(): Promise<void> };\n  skipWaiting(): Promise<void>;\n  addEventListener(type: \"install\" | \"activate\", listener: (event: ExtendableLikeEvent) => void): void;\n  addEventListener(type: \"fetch\", listener: (event: FetchLikeEvent) => void): void;\n  addEventListener(type: \"message\", listener: (event: MessageLikeEvent) => void): void;\n}\n\nconst worker = globalThis as unknown as WorkerScope;\n\nlet host: MessagePort | null = null;\nconst router = new PreviewRouter({\n  send: (request, transfer) => host?.postMessage(request, transfer),\n});\n\nworker.addEventListener(\"install\", () => void worker.skipWaiting());\nworker.addEventListener(\"activate\", (event) => event.waitUntil(worker.clients.claim()));\n\nworker.addEventListener(\"message\", (event) => {\n  const data = event.data as { type?: string } | null;\n  if (data?.type !== \"sandboxedjs:connect\") return;\n  host = event.ports[0] ?? null;\n  if (!host) return;\n  host.onmessage = (message) => {\n    const reply = message.data as { id: number; response: ProxiedResponse };\n    router.settle(reply.id, reply.response);\n  };\n  host.start();\n  router.connect();\n});\n\nworker.addEventListener(\"fetch\", (event) => {\n  const url = new URL(event.request.url);\n  if (url.origin !== worker.location.origin) return;\n\n  const claimed = router.claimedPort(url.pathname);\n  if (claimed !== null && event.request.mode === \"navigate\") {\n    /* A navigation's client does not exist yet, so it is named by\n     * `resultingClientId`. Binding it here is what lets every later request\n     * from that document be recognised without touching its URLs. */\n    router.bind(event.resultingClientId || event.clientId, claimed);\n    event.respondWith(router.fetch(claimed, \"/\", event.request));\n    return;\n  }\n\n  const port = router.portFor(event.clientId);\n  if (port === undefined) return; // not a preview: the host page's own traffic\n  event.respondWith(router.fetch(port, url.pathname + url.search, event.request));\n});\n"]}

package/dist/worker-entry.js

@@ -27251,6 +27251,7 @@ var VirtualHttpServer = class extends import_events.default {
   owner;
   listening = false;
   portValue = null;
+  referenced = true;
   listen(...args) {
     const callback = typeof args.at(-1) === "function" ? args.pop() : void 0;
     const first = args[0];
@@ -27279,11 +27280,16 @@ var VirtualHttpServer = class extends import_events.default {
     return this.portValue === null ? null : { address: "0.0.0.0", family: "IPv4", port: this.portValue };
   }
   ref() {
+    this.referenced = true;
     return this;
   }
   unref() {
+    this.referenced = false;
     return this;
   }
+  hasRef() {
+    return this.referenced;
+  }
   setTimeout(_milliseconds, callback) {
     if (callback) this.on("timeout", callback);
     return this;
@@ -27293,13 +27299,16 @@ var VirtualHttpRouter = class {
   servers = /* @__PURE__ */ new Map();
   /** Notified when a server begins listening, for `onServerReady`. */
   onListen;
+  onClose;
   register(port, server, owner) {
     if (this.servers.has(port)) throw Object.assign(new Error(`listen EADDRINUSE: address already in use 0.0.0.0:${port}`), { code: "EADDRINUSE", port });
     this.servers.set(port, { server, owner });
     this.onListen?.(port);
   }
   unregister(port, server) {
-    if (this.servers.get(port)?.server === server) this.servers.delete(port);
+    if (this.servers.get(port)?.server !== server) return;
+    this.servers.delete(port);
+    this.onClose?.(port);
   }
   /** Whether anything in this container is listening on `port`. */
   activePortsIncludes(port) {
@@ -27308,6 +27317,9 @@ var VirtualHttpRouter = class {
   activePorts(owner) {
     return [...this.servers].filter(([, item]) => owner === void 0 || item.owner === owner).map(([port]) => port).sort((a, b) => a - b);
   }
+  referencedPorts(owner) {
+    return [...this.servers].filter(([, item]) => item.owner === owner && item.server.hasRef()).map(([port]) => port);
+  }
   closeOwner(owner) {
     for (const { server, owner: value } of [...this.servers.values()]) if (value === owner) server.close();
   }
@@ -28582,6 +28594,102 @@ function toBytes2(data2, encoding) {
   return typeof data2 === "string" ? Buffer2.from(data2, encoding) : data2;
 }
 
+// src/runtime/sync-channel.ts
+var STATE = 0;
+var LENGTH2 = 1;
+var MORE = 2;
+var STATE_IDLE = 0;
+var STATE_REQUEST = 1;
+var STATE_RESPONSE = 2;
+var STATE_CONTINUE = 3;
+var WAIT_SLICE_MS = 250;
+function syncChannelUnavailableReason() {
+  if (typeof globalThis.crossOriginIsolated === "boolean" && !globalThis.crossOriginIsolated) {
+    return "The browser host is not cross-origin isolated. Serve the host app over HTTPS or localhost with Cross-Origin-Opener-Policy: same-origin and Cross-Origin-Embedder-Policy: require-corp. For a built app use sandboxedjs-serve <directory>. Embedded browsers or iframe policies may also prevent isolation.";
+  }
+  if (typeof SharedArrayBuffer !== "function") return "SharedArrayBuffer is unavailable in this host.";
+  if (typeof Atomics !== "object" || typeof Atomics.wait !== "function") return "Atomics.wait is unavailable in this host.";
+  return null;
+}
+var SyncChannelClosedError = class extends Error {
+  code = "ERR_SYNC_CHANNEL_CLOSED";
+  constructor() {
+    super("the sandbox runtime host went away while a synchronous call was waiting");
+  }
+};
+var SyncChannelClient = class {
+  constructor(buffers, wake) {
+    this.wake = wake;
+    this.control = new Int32Array(buffers.control);
+    this.data = new Uint8Array(buffers.data);
+    this.capacity = this.data.length;
+  }
+  wake;
+  control;
+  data;
+  capacity;
+  /** Send a request and block until the whole response has come back. */
+  call(request) {
+    this.send(request);
+    return this.receive();
+  }
+  /** Write the request across, a window at a time. */
+  send(request) {
+    let offset2 = 0;
+    for (; ; ) {
+      const size = Math.min(this.capacity, request.length - offset2);
+      this.data.set(request.subarray(offset2, offset2 + size), 0);
+      offset2 += size;
+      Atomics.store(this.control, LENGTH2, size);
+      Atomics.store(this.control, MORE, offset2 < request.length ? 1 : 0);
+      this.publish(STATE_REQUEST);
+      const next = this.waitWhile(STATE_REQUEST);
+      if (next === STATE_RESPONSE) return;
+      if (next !== STATE_CONTINUE) throw new SyncChannelClosedError();
+    }
+  }
+  /** Read the response back, a window at a time. */
+  receive() {
+    const parts = [];
+    let total = 0;
+    for (; ; ) {
+      const size = Atomics.load(this.control, LENGTH2);
+      parts.push(this.data.slice(0, size));
+      total += size;
+      if (Atomics.load(this.control, MORE) === 0) break;
+      this.publish(STATE_CONTINUE);
+      if (this.waitWhile(STATE_CONTINUE) !== STATE_RESPONSE) throw new SyncChannelClosedError();
+    }
+    Atomics.store(this.control, STATE, STATE_IDLE);
+    if (parts.length === 1) return parts[0];
+    const joined = new Uint8Array(total);
+    let at2 = 0;
+    for (const part of parts) {
+      joined.set(part, at2);
+      at2 += part.length;
+    }
+    return joined;
+  }
+  publish(state) {
+    Atomics.store(this.control, STATE, state);
+    Atomics.notify(this.control, STATE);
+    this.wake();
+  }
+  /**
+   * Block until the state moves off `state`.
+   *
+   * Waking periodically rather than waiting forever is what lets a torn-down
+   * host release a worker instead of stranding it.
+   */
+  waitWhile(state) {
+    for (; ; ) {
+      Atomics.wait(this.control, STATE, state, WAIT_SLICE_MS);
+      const current2 = Atomics.load(this.control, STATE);
+      if (current2 !== state) return current2;
+    }
+  }
+};
+
 // src/runtime/child-process-module.ts
 var import_events2 = __toESM(require_events());
 var import_stream_browserify3 = __toESM(require_stream_browserify());
@@ -28657,7 +28765,8 @@ var ChildProcess = class extends import_events2.default {
     queueMicrotask(() => this.emit("close", code, null));
   }
 };
-function createChildProcessModule(spawnChild, defaultCwd, syncSpawn) {
+function createChildProcessModule(spawnChild, defaultCwd, syncSpawn, defaultEnv = () => ({})) {
+  const environmentFor = (options) => options.env ? { ...options.env } : defaultEnv();
   const throughShell = (command, options) => {
     const shell = typeof options.shell === "string" ? options.shell : "/bin/sh";
     return { file: shell, args: ["-c", command] };
@@ -28668,7 +28777,7 @@ function createChildProcessModule(spawnChild, defaultCwd, syncSpawn) {
       command: resolved.file,
       args: resolved.args,
       cwd: options.cwd ?? defaultCwd(),
-      ...options.env ? { env: options.env } : {}
+      env: environmentFor(options)
     });
     return new ChildProcess(handle, resolved.file, resolved.args);
   };
@@ -28714,11 +28823,11 @@ ${err2.join("")}`),
     exec,
     execFile,
     fork: (modulePath, args = [], options = {}) => spawn("node", [modulePath, ...args], options),
-    ...buildSyncFamily(syncSpawn, throughShell, defaultCwd),
+    ...buildSyncFamily(syncSpawn, throughShell, defaultCwd, environmentFor),
     ChildProcess
   };
 }
-function buildSyncFamily(syncSpawn, throughShell, defaultCwd) {
+function buildSyncFamily(syncSpawn, throughShell, defaultCwd, environmentFor) {
   if (!syncSpawn) {
     return {
       execSync: unavailable("execSync"),
@@ -28729,12 +28838,14 @@ function buildSyncFamily(syncSpawn, throughShell, defaultCwd) {
   const run2 = (file, args, options) => {
     const resolved = options.shell ? throughShell([file, ...args].join(" "), options) : { file, args };
     const input = options.input === void 0 ? void 0 : typeof options.input === "string" ? options.input : new TextDecoder().decode(options.input);
+    const inherit = options.stdio === "inherit" || Array.isArray(options.stdio) && options.stdio[0] === "inherit";
     return syncSpawn({
       command: resolved.file,
       args: resolved.args,
       cwd: options.cwd ?? defaultCwd(),
-      ...options.env ? { env: options.env } : {},
-      ...input === void 0 ? {} : { input }
+      env: environmentFor(options),
+      ...input === void 0 ? {} : { input },
+      ...inherit ? { inheritStdio: true } : {}
     });
   };
   const asOutput = (text, options) => options.encoding === "buffer" || options.encoding === void 0 ? Buffer2.from(text) : text;
@@ -28786,7 +28897,7 @@ function unavailable(name) {
     const list = Array.isArray(args[1]) ? args[1].map(String) : [];
     const command = file ? [file, ...list].join(" ") : void 0;
     const error = new Error(
-      `child_process.${name} is not supported in the sandboxed runtime` + (command ? ` (tried to run: ${command})` : "") + `: the caller, the child and the event loop share one thread, so blocking the caller would also stop the child. Run it with the asynchronous form (spawn/exec/execFile), or run the command from the container shell.`
+      `child_process.${name} is not supported in the sandboxed runtime` + (command ? ` (tried to run: ${command})` : "") + `: the caller, the child and the event loop share one thread, so blocking the caller would also stop the child. Enable the SandboxedJs worker runtime with createContainer({ isolation: "worker" }) and fix any boot prerequisite it reports. ` + (syncChannelUnavailableReason() ?? "This process is using the realm runtime, which cannot provide synchronous child processes.")
     );
     error.code = "ERR_FEATURE_UNAVAILABLE_ON_PLATFORM";
     throw error;
@@ -29112,6 +29223,11 @@ function createReadlineModule(defaultInput, defaultOutput = () => void 0) {
     edit(sequence, key) {
       if (this.closed) return;
       const name = key.name;
+      if (key.ctrl && name === "c") {
+        if (this.listenerCount("SIGINT") > 0) this.emit("SIGINT");
+        else this.close();
+        return;
+      }
       if (name === "return" || name === "enter") {
         const value = this.line;
         this.line = "";
@@ -29207,7 +29323,7 @@ function createReadlineModule(defaultInput, defaultOutput = () => void 0) {
   };
   const createInterface = (options, output) => {
     if (options && typeof options === "object" && !options.on) {
-      const resolvedOutput2 = options.output ?? defaultOutput();
+      const resolvedOutput2 = options.output;
       const instance = new Interface(
         options.input ?? defaultInput(),
         resolvedOutput2,
@@ -29216,7 +29332,7 @@ function createReadlineModule(defaultInput, defaultOutput = () => void 0) {
       if (typeof options.prompt === "string") instance.setPrompt(options.prompt);
       return instance;
     }
-    const resolvedOutput = output ?? defaultOutput();
+    const resolvedOutput = output;
     return new Interface(options ?? defaultInput(), resolvedOutput, isTerminal(void 0, resolvedOutput));
   };
   const noop = () => {
@@ -29456,7 +29572,7 @@ function createCoreModules(options) {
   };
   const http = options.http ? createHttpModule(options.http.router, options.http.owner, httpOptions, "http:") : createUnsupportedModule("http");
   const https = options.http ? createHttpModule(options.http.router, options.http.owner, httpOptions, "https:") : createUnsupportedModule("https");
-  const childProcess = options.spawnChild ? createChildProcessModule(options.spawnChild, () => cwd, options.syncSpawn) : createUnsupportedModule("child_process");
+  const childProcess = options.spawnChild ? createChildProcessModule(options.spawnChild, () => cwd, options.syncSpawn, () => ({ ...processObject.env })) : createUnsupportedModule("child_process");
   const readline = createReadlineModule(() => processObject.stdin, () => processObject.stdout);
   const dns = createDnsModule();
   const builtins = {
@@ -29489,7 +29605,7 @@ function createCoreModules(options) {
     "stream/promises": createStreamPromises(),
     string_decoder: import_string_decoder.default,
     timers: { ...import_timers_browserify.default, ...timers.api },
-    "timers/promises": createTimerPromises(),
+    "timers/promises": createTimerPromises(timers.api),
     tty: { isatty: () => false, ReadStream: import_stream_browserify4.default.Readable, WriteStream: import_stream_browserify4.default.Writable },
     url: url_module_default,
     util: util_module_default,
@@ -30234,10 +30350,10 @@ function createTrackedTimers() {
     cancelAll
   };
 }
-function createTimerPromises() {
+function createTimerPromises(timers) {
   return {
-    setTimeout: (delay, value) => new Promise((resolve2) => setTimeout(resolve2, delay, value)),
-    setImmediate: (value) => new Promise((resolve2) => setTimeout(resolve2, 0, value))
+    setTimeout: (delay, value) => new Promise((resolve2) => timers.setTimeout(resolve2, delay, value)),
+    setImmediate: (value) => new Promise((resolve2) => timers.setImmediate(resolve2, value))
   };
 }
 function createAsyncHooksModule() {
@@ -30488,94 +30604,6 @@ var RemoteVolume = class {
   }
 };
 
-// src/runtime/sync-channel.ts
-var STATE = 0;
-var LENGTH2 = 1;
-var MORE = 2;
-var STATE_IDLE = 0;
-var STATE_REQUEST = 1;
-var STATE_RESPONSE = 2;
-var STATE_CONTINUE = 3;
-var WAIT_SLICE_MS = 250;
-var SyncChannelClosedError = class extends Error {
-  code = "ERR_SYNC_CHANNEL_CLOSED";
-  constructor() {
-    super("the sandbox runtime host went away while a synchronous call was waiting");
-  }
-};
-var SyncChannelClient = class {
-  constructor(buffers, wake) {
-    this.wake = wake;
-    this.control = new Int32Array(buffers.control);
-    this.data = new Uint8Array(buffers.data);
-    this.capacity = this.data.length;
-  }
-  wake;
-  control;
-  data;
-  capacity;
-  /** Send a request and block until the whole response has come back. */
-  call(request) {
-    this.send(request);
-    return this.receive();
-  }
-  /** Write the request across, a window at a time. */
-  send(request) {
-    let offset2 = 0;
-    for (; ; ) {
-      const size = Math.min(this.capacity, request.length - offset2);
-      this.data.set(request.subarray(offset2, offset2 + size), 0);
-      offset2 += size;
-      Atomics.store(this.control, LENGTH2, size);
-      Atomics.store(this.control, MORE, offset2 < request.length ? 1 : 0);
-      this.publish(STATE_REQUEST);
-      const next = this.waitWhile(STATE_REQUEST);
-      if (next === STATE_RESPONSE) return;
-      if (next !== STATE_CONTINUE) throw new SyncChannelClosedError();
-    }
-  }
-  /** Read the response back, a window at a time. */
-  receive() {
-    const parts = [];
-    let total = 0;
-    for (; ; ) {
-      const size = Atomics.load(this.control, LENGTH2);
-      parts.push(this.data.slice(0, size));
-      total += size;
-      if (Atomics.load(this.control, MORE) === 0) break;
-      this.publish(STATE_CONTINUE);
-      if (this.waitWhile(STATE_CONTINUE) !== STATE_RESPONSE) throw new SyncChannelClosedError();
-    }
-    Atomics.store(this.control, STATE, STATE_IDLE);
-    if (parts.length === 1) return parts[0];
-    const joined = new Uint8Array(total);
-    let at2 = 0;
-    for (const part of parts) {
-      joined.set(part, at2);
-      at2 += part.length;
-    }
-    return joined;
-  }
-  publish(state) {
-    Atomics.store(this.control, STATE, state);
-    Atomics.notify(this.control, STATE);
-    this.wake();
-  }
-  /**
-   * Block until the state moves off `state`.
-   *
-   * Waking periodically rather than waiting forever is what lets a torn-down
-   * host release a worker instead of stranding it.
-   */
-  waitWhile(state) {
-    for (; ; ) {
-      Atomics.wait(this.control, STATE, state, WAIT_SLICE_MS);
-      const current2 = Atomics.load(this.control, STATE);
-      if (current2 !== state) return current2;
-    }
-  }
-};
-
 // src/runtime/sync-syscalls.ts
 var SPAWN_OP = "spawnSync";
 function spawnSyncOverChannel(channel, request) {
@@ -30652,6 +30680,7 @@ async function run(port, start) {
   const router = new VirtualHttpRouter();
   const owner = "worker";
   router.onListen = (listening) => port.postMessage({ type: "listen", port: listening });
+  router.onClose = (closed) => port.postMessage({ type: "close-port", port: closed });
   let requestedExit = 0;
   let engine;
   let finished = false;
@@ -30680,6 +30709,8 @@ async function run(port, start) {
   const finish = (code) => {
     if (finished) return;
     finished = true;
+    core.cancelTimers();
+    router.closeOwner(owner);
     port.postMessage({ type: "exit", code });
   };
   port.onMessage((message) => {
@@ -30701,7 +30732,6 @@ async function run(port, start) {
   try {
     await engine.run(start.script);
     await settle(router, owner, core, () => finished);
-    if (router.activePorts(owner).length) return;
     finish(requestedExit);
   } catch (error) {
     if (error instanceof ProcessExit) {
@@ -30713,18 +30743,12 @@ async function run(port, start) {
   }
 }
 async function settle(router, owner, core, killed) {
-  for (let turn = 0; turn < DRAIN_TURNS; turn++) {
-    if (router.activePorts(owner).length || killed()) return;
-    await new Promise((resolve2) => setTimeout(resolve2, 0));
-  }
-  if (core.pendingHandles() === 0 && core.pendingRequests() === 0 && core.pendingUnrefed() > 0 && !core.readingStdin()) {
-    const deadline = Date.now() + 1e3;
-    while (!router.activePorts(owner).length && !killed() && Date.now() < deadline) {
-      await new Promise((resolve2) => setTimeout(resolve2, 5));
-    }
-  }
-  while (!router.activePorts(owner).length && !killed() && (core.pendingHandles() > 0 || core.pendingRequests() > 0 || core.readingStdin())) {
-    await new Promise((resolve2) => setTimeout(resolve2, 5));
+  let idleTurns = 0;
+  while (!killed()) {
+    const busy = router.referencedPorts(owner).length > 0 || core.pendingHandles() > 0 || core.pendingRequests() > 0 || core.readingStdin();
+    idleTurns = busy ? 0 : idleTurns + 1;
+    if (idleTurns >= DRAIN_TURNS) return;
+    await new Promise((resolve2) => setTimeout(resolve2, busy ? 5 : 0));
   }
 }
 async function answer(port, router, message) {