sandboxedjs 0.1.97 → 0.1.100

package/dist/index.cjs

@@ -4273,7 +4273,8 @@ function md5Hex(input) {
 var isNode, zlibPromise, cryptoPromise, SUBTLE_NAMES, UnsupportedAlgorithmError;
 var init_binary = __esm({
   "src/util/binary.ts"() {
-    isNode = typeof process !== "undefined" && process.versions != null && process.versions.node != null;
+    isNode = typeof window === "undefined" && typeof document === "undefined" && typeof process !== "undefined" && process.versions != null && process.versions.node != null && /* A shim has no `release.name`, and Node's has said "node" since v3. */
+    process.release?.name === "node";
     zlibPromise = null;
     cryptoPromise = null;
     SUBTLE_NAMES = {
@@ -20958,7 +20959,7 @@ var wheels_default = {
 
 // package.json
 var package_default = {
-  version: "0.1.97"};
+  version: "0.1.100"};
 
 // src/python/extension-abi.ts
 var EXTENSION_ABI = {
@@ -38658,6 +38659,22 @@ var WS_DATA = "sandboxedjs:ws-data";
 var WS_CLOSE = "sandboxedjs:ws-close";
 var WS_ERROR = "sandboxedjs:ws-error";
 
+// src/preview/router.ts
+var LOOPBACK_HOST = /^(?:localhost|127(?:\.\d{1,3}){3}|0\.0\.0\.0|\[?::1\]?)$/i;
+function containerTarget(value) {
+  let url;
+  try {
+    url = new URL(value.trim());
+  } catch {
+    return null;
+  }
+  if (url.protocol !== "http:" && url.protocol !== "https:") return null;
+  if (!LOOPBACK_HOST.test(url.hostname)) return null;
+  const port = Number(url.port || (url.protocol === "https:" ? 443 : 80));
+  if (!Number.isInteger(port) || port < 1 || port > 65535) return null;
+  return { port, path: `${url.pathname}${url.search}` };
+}
+
 // src/preview/register.ts
 function serveContainerOn(port, box) {
   port.onmessage = async (event) => {
@@ -38692,20 +38709,6 @@ function serveContainerOn(port, box) {
   };
   port.start?.();
 }
-var LOOPBACK_HOST = /^(?:localhost|127(?:\.\d{1,3}){3}|0\.0\.0\.0|\[?::1\]?)$/i;
-function containerTarget(value) {
-  let url;
-  try {
-    url = new URL(value.trim());
-  } catch {
-    return null;
-  }
-  if (url.protocol !== "http:" && url.protocol !== "https:") return null;
-  if (!LOOPBACK_HOST.test(url.hostname)) return null;
-  const port = Number(url.port || (url.protocol === "https:" ? 443 : 80));
-  if (!Number.isInteger(port) || port < 1 || port > 65535) return null;
-  return { port, path: `${url.pathname}${url.search}` };
-}
 async function createPreview(box, options = {}) {
   if (typeof navigator === "undefined" || !("serviceWorker" in navigator)) return null;
   const scriptUrl = options.scriptUrl ?? new URL("./service-worker.js?no-inline", (typeof document === 'undefined' ? require('u' + 'rl').pathToFileURL(__filename).href : (_documentCurrentScript && _documentCurrentScript.tagName.toUpperCase() === 'SCRIPT' && _documentCurrentScript.src || new URL('index.cjs', document.baseURI).href)));
@@ -38743,7 +38746,17 @@ async function createPreview(box, options = {}) {
     channel = new MessageChannel();
     serveContainerOn(channel.port1, box);
     const target = registration.active ?? worker;
-    target.postMessage({ type: "sandboxedjs:connect", injectSockets: options.websocket !== false }, [channel.port2]);
+    target.postMessage(
+      {
+        type: "sandboxedjs:connect",
+        injectSockets: options.websocket !== false,
+        /* Sent with the channel, like `injectSockets`, because the worker is
+         * restarted at the browser's convenience and remembers nothing: every
+         * connect has to carry the settings again. */
+        ...options.timeoutMs === void 0 ? {} : { timeoutMs: options.timeoutMs }
+      },
+      [channel.port2]
+    );
   };
   const onWorkerMessage = (event) => {
     const type = event.data?.type;

package/dist/index.d.cts

@@ -1590,19 +1590,22 @@ declare function startRuntimeWorker(options?: {
 declare function syncChannelSupported(): boolean;
 
 /**
- * Wiring a container's HTTP servers up to real URLs in the page.
+ * The routing a preview service worker does, separated from the worker itself.
  *
- * The service worker does the routing; this is the half that lives in the page
- * and actually knows about the container.
+ * A service worker is awkward to test — it needs a browser, a registration and
+ * a secure context — but almost none of what makes this correct is about being
+ * a service worker. The interesting part is the bookkeeping: which client is
+ * previewing which port, which requests belong to a preview at all, and how a
+ * response is rebuilt on the way back. That lives here, where it can be
+ * exercised directly.
  *
- * **Read the origin note before using this.** A preview served this way runs on
- * *your* origin, so scripts inside it can reach `window.parent`, your cookies
- * and your `localStorage` — the sandbox contains the program's *filesystem and
- * process table*, not the page it serves. For code you did not write, either
- * host the preview on a separate origin, or use {@link renderInto}, which puts
- * the response in an iframe with no origin at all.
+ * The rule this implements, and the reason it exists: requests are routed by
+ * **who is asking**, not by what the path looks like. An iframe navigates once
+ * to `/__sbx__/<port>/`; every later request from that client — however
+ * absolute its path — is recognised by its client id. Nothing has to rewrite
+ * `/src/main.js` or `/@vite/client`, which is what makes a real dev server
+ * work rather than only a single page.
  */
-
 /** A container-local server, named by port rather than by an address. */
 interface ContainerTarget {
     port: number;
@@ -1618,10 +1621,31 @@ interface ContainerTarget {
  * is listening, so a frame pointed at it fails with "refused to connect"
  * rather than failing visibly as a routing mistake.
  *
- * Exported separately from {@link Preview.resolve} because it is pure, and a
- * translation table is worth testing without a service worker in the way.
+ * The same translation serves two callers. A host reading an address out of a
+ * build log needs it to point a frame somewhere (`Preview.resolve`), and the
+ * service worker needs it for the other direction: a page *inside* a preview
+ * asking its own backend for `http://localhost:8000/api` means the container's
+ * port 8000, not the reader's machine.
+ *
+ * Kept pure, and kept here rather than beside the host half, because the
+ * worker bundles this module and not that one.
  */
 declare function containerTarget(value: string): ContainerTarget | null;
+
+/**
+ * Wiring a container's HTTP servers up to real URLs in the page.
+ *
+ * The service worker does the routing; this is the half that lives in the page
+ * and actually knows about the container.
+ *
+ * **Read the origin note before using this.** A preview served this way runs on
+ * *your* origin, so scripts inside it can reach `window.parent`, your cookies
+ * and your `localStorage` — the sandbox contains the program's *filesystem and
+ * process table*, not the page it serves. For code you did not write, either
+ * host the preview on a separate origin, or use {@link renderInto}, which puts
+ * the response in an iframe with no origin at all.
+ */
+
 interface PreviewOptions {
     /** Where the worker script lives; defaults to the copy shipped beside the bundle. */
     scriptUrl?: string | URL;
@@ -1654,6 +1678,16 @@ interface PreviewOptions {
      * re-optimizing dependencies; {@link onStale} is the fallback for that.
      */
     websocket?: boolean;
+    /**
+     * How long a previewed request may take before the worker reports a timeout.
+     *
+     * Defaults to five minutes. Responses cross this bridge whole rather than
+     * streamed, so this covers the *entire* answer: a model generating tokens, a
+     * server-sent-event endpoint running to its last event, a cold build. Raise
+     * it for work that legitimately takes longer; lower it when a preview should
+     * fail fast.
+     */
+    timeoutMs?: number;
 }
 interface Preview {
     /** The URL an iframe should be pointed at to see `port`. */

package/dist/index.d.ts

@@ -1590,19 +1590,22 @@ declare function startRuntimeWorker(options?: {
 declare function syncChannelSupported(): boolean;
 
 /**
- * Wiring a container's HTTP servers up to real URLs in the page.
+ * The routing a preview service worker does, separated from the worker itself.
  *
- * The service worker does the routing; this is the half that lives in the page
- * and actually knows about the container.
+ * A service worker is awkward to test — it needs a browser, a registration and
+ * a secure context — but almost none of what makes this correct is about being
+ * a service worker. The interesting part is the bookkeeping: which client is
+ * previewing which port, which requests belong to a preview at all, and how a
+ * response is rebuilt on the way back. That lives here, where it can be
+ * exercised directly.
  *
- * **Read the origin note before using this.** A preview served this way runs on
- * *your* origin, so scripts inside it can reach `window.parent`, your cookies
- * and your `localStorage` — the sandbox contains the program's *filesystem and
- * process table*, not the page it serves. For code you did not write, either
- * host the preview on a separate origin, or use {@link renderInto}, which puts
- * the response in an iframe with no origin at all.
+ * The rule this implements, and the reason it exists: requests are routed by
+ * **who is asking**, not by what the path looks like. An iframe navigates once
+ * to `/__sbx__/<port>/`; every later request from that client — however
+ * absolute its path — is recognised by its client id. Nothing has to rewrite
+ * `/src/main.js` or `/@vite/client`, which is what makes a real dev server
+ * work rather than only a single page.
  */
-
 /** A container-local server, named by port rather than by an address. */
 interface ContainerTarget {
     port: number;
@@ -1618,10 +1621,31 @@ interface ContainerTarget {
  * is listening, so a frame pointed at it fails with "refused to connect"
  * rather than failing visibly as a routing mistake.
  *
- * Exported separately from {@link Preview.resolve} because it is pure, and a
- * translation table is worth testing without a service worker in the way.
+ * The same translation serves two callers. A host reading an address out of a
+ * build log needs it to point a frame somewhere (`Preview.resolve`), and the
+ * service worker needs it for the other direction: a page *inside* a preview
+ * asking its own backend for `http://localhost:8000/api` means the container's
+ * port 8000, not the reader's machine.
+ *
+ * Kept pure, and kept here rather than beside the host half, because the
+ * worker bundles this module and not that one.
  */
 declare function containerTarget(value: string): ContainerTarget | null;
+
+/**
+ * Wiring a container's HTTP servers up to real URLs in the page.
+ *
+ * The service worker does the routing; this is the half that lives in the page
+ * and actually knows about the container.
+ *
+ * **Read the origin note before using this.** A preview served this way runs on
+ * *your* origin, so scripts inside it can reach `window.parent`, your cookies
+ * and your `localStorage` — the sandbox contains the program's *filesystem and
+ * process table*, not the page it serves. For code you did not write, either
+ * host the preview on a separate origin, or use {@link renderInto}, which puts
+ * the response in an iframe with no origin at all.
+ */
+
 interface PreviewOptions {
     /** Where the worker script lives; defaults to the copy shipped beside the bundle. */
     scriptUrl?: string | URL;
@@ -1654,6 +1678,16 @@ interface PreviewOptions {
      * re-optimizing dependencies; {@link onStale} is the fallback for that.
      */
     websocket?: boolean;
+    /**
+     * How long a previewed request may take before the worker reports a timeout.
+     *
+     * Defaults to five minutes. Responses cross this bridge whole rather than
+     * streamed, so this covers the *entire* answer: a model generating tokens, a
+     * server-sent-event endpoint running to its last event, a cold build. Raise
+     * it for work that legitimately takes longer; lower it when a preview should
+     * fail fast.
+     */
+    timeoutMs?: number;
 }
 interface Preview {
     /** The URL an iframe should be pointed at to see `port`. */

package/dist/index.js

@@ -4256,7 +4256,8 @@ function md5Hex(input) {
 var isNode, zlibPromise, cryptoPromise, SUBTLE_NAMES, UnsupportedAlgorithmError;
 var init_binary = __esm({
   "src/util/binary.ts"() {
-    isNode = typeof process !== "undefined" && process.versions != null && process.versions.node != null;
+    isNode = typeof window === "undefined" && typeof document === "undefined" && typeof process !== "undefined" && process.versions != null && process.versions.node != null && /* A shim has no `release.name`, and Node's has said "node" since v3. */
+    process.release?.name === "node";
     zlibPromise = null;
     cryptoPromise = null;
     SUBTLE_NAMES = {
@@ -20941,7 +20942,7 @@ var wheels_default = {
 
 // package.json
 var package_default = {
-  version: "0.1.97"};
+  version: "0.1.100"};
 
 // src/python/extension-abi.ts
 var EXTENSION_ABI = {
@@ -38641,6 +38642,22 @@ var WS_DATA = "sandboxedjs:ws-data";
 var WS_CLOSE = "sandboxedjs:ws-close";
 var WS_ERROR = "sandboxedjs:ws-error";
 
+// src/preview/router.ts
+var LOOPBACK_HOST = /^(?:localhost|127(?:\.\d{1,3}){3}|0\.0\.0\.0|\[?::1\]?)$/i;
+function containerTarget(value) {
+  let url;
+  try {
+    url = new URL(value.trim());
+  } catch {
+    return null;
+  }
+  if (url.protocol !== "http:" && url.protocol !== "https:") return null;
+  if (!LOOPBACK_HOST.test(url.hostname)) return null;
+  const port = Number(url.port || (url.protocol === "https:" ? 443 : 80));
+  if (!Number.isInteger(port) || port < 1 || port > 65535) return null;
+  return { port, path: `${url.pathname}${url.search}` };
+}
+
 // src/preview/register.ts
 function serveContainerOn(port, box) {
   port.onmessage = async (event) => {
@@ -38675,20 +38692,6 @@ function serveContainerOn(port, box) {
   };
   port.start?.();
 }
-var LOOPBACK_HOST = /^(?:localhost|127(?:\.\d{1,3}){3}|0\.0\.0\.0|\[?::1\]?)$/i;
-function containerTarget(value) {
-  let url;
-  try {
-    url = new URL(value.trim());
-  } catch {
-    return null;
-  }
-  if (url.protocol !== "http:" && url.protocol !== "https:") return null;
-  if (!LOOPBACK_HOST.test(url.hostname)) return null;
-  const port = Number(url.port || (url.protocol === "https:" ? 443 : 80));
-  if (!Number.isInteger(port) || port < 1 || port > 65535) return null;
-  return { port, path: `${url.pathname}${url.search}` };
-}
 async function createPreview(box, options = {}) {
   if (typeof navigator === "undefined" || !("serviceWorker" in navigator)) return null;
   const scriptUrl = options.scriptUrl ?? new URL("./service-worker.js?no-inline", import.meta.url);
@@ -38726,7 +38729,17 @@ async function createPreview(box, options = {}) {
     channel = new MessageChannel();
     serveContainerOn(channel.port1, box);
     const target = registration.active ?? worker;
-    target.postMessage({ type: "sandboxedjs:connect", injectSockets: options.websocket !== false }, [channel.port2]);
+    target.postMessage(
+      {
+        type: "sandboxedjs:connect",
+        injectSockets: options.websocket !== false,
+        /* Sent with the channel, like `injectSockets`, because the worker is
+         * restarted at the browser's convenience and remembers nothing: every
+         * connect has to carry the settings again. */
+        ...options.timeoutMs === void 0 ? {} : { timeoutMs: options.timeoutMs }
+      },
+      [channel.port2]
+    );
   };
   const onWorkerMessage = (event) => {
     const type = event.data?.type;

package/dist/python-worker.js

@@ -772,7 +772,8 @@ function createSbxFs(FS, client, errnoCodes) {
 }
 
 // src/util/binary.ts
-typeof process !== "undefined" && process.versions != null && process.versions.node != null;
+typeof window === "undefined" && typeof document === "undefined" && typeof process !== "undefined" && process.versions != null && process.versions.node != null && /* A shim has no `release.name`, and Node's has said "node" since v3. */
+process.release?.name === "node";
 async function nodeBuiltin(name) {
   const specifier = `node:${name}`;
   return await import(

package/dist/service-worker.js

@@ -349,8 +349,23 @@ function previewSocketSource() {
 
 // src/preview/router.ts
 var CLAIM = /(?:^|\/)__sbx__\/(\d+)(?:\/|$)/;
+var LOOPBACK_HOST = /^(?:localhost|127(?:\.\d{1,3}){3}|0\.0\.0\.0|\[?::1\]?)$/i;
+function containerTarget(value) {
+  let url;
+  try {
+    url = new URL(value.trim());
+  } catch {
+    return null;
+  }
+  if (url.protocol !== "http:" && url.protocol !== "https:") return null;
+  if (!LOOPBACK_HOST.test(url.hostname)) return null;
+  const port = Number(url.port || (url.protocol === "https:" ? 443 : 80));
+  if (!Number.isInteger(port) || port < 1 || port > 65535) return null;
+  return { port, path: `${url.pathname}${url.search}` };
+}
 var OUTDATED = /outdated optimize dep/i;
 var NOT_CONNECTED = 503;
+var DEFAULT_TIMEOUT_MS = 5 * 6e4;
 var PreviewRouter = class {
   constructor(options2) {
     this.options = options2;
@@ -433,16 +448,15 @@ var PreviewRouter = class {
       { id, port, path, method: request.method, headers: headerRecord(request.headers), ...sent ? { body: sent } : {} },
       sent ? [sent] : []
     );
-    const timeoutMs = this.options.timeoutMs ?? 3e4;
+    const timeoutMs = this.options.timeoutMs ?? DEFAULT_TIMEOUT_MS;
+    let timer;
     const result = await Promise.race([
       answered,
-      new Promise(
-        (resolve) => setTimeout(
-          () => resolve({ status: 504, statusText: "Gateway Timeout", headers: {}, body: new ArrayBuffer(0) }),
-          timeoutMs
-        )
-      )
+      new Promise((resolve) => {
+        timer = setTimeout(() => resolve(timedOut(port, path, timeoutMs)), timeoutMs);
+      })
     ]);
+    clearTimeout(timer);
     this.pending.delete(id);
     if (result.status === 504 && OUTDATED.test(result.statusText)) {
       this.options.onStale?.(clientId);
@@ -454,6 +468,19 @@ var PreviewRouter = class {
     return new Response(body, { status: result.status, statusText: result.statusText, headers });
   }
 };
+function timedOut(port, path, timeoutMs) {
+  const message = `The sandbox preview gave up waiting for ${path} on port ${port} after ${Math.round(timeoutMs / 1e3)}s.
+
+The server inside the container has not finished this response. Preview responses are delivered whole rather than streamed, so a long one \u2014 a model's answer, a server-sent-event stream \u2014 is outstanding until it ends.
+
+Raise createPreview(box, { timeoutMs }) if this work legitimately takes longer.`;
+  return {
+    status: 504,
+    statusText: "Gateway Timeout",
+    headers: { "content-type": "text/plain; charset=utf-8" },
+    body: new TextEncoder().encode(message).buffer
+  };
+}
 function isolated(response) {
   const headers = new Headers(response.headers);
   headers.set("Content-Type", "text/plain; charset=utf-8");
@@ -539,6 +566,8 @@ worker.addEventListener("message", (event) => {
   host = event.ports[0] ?? null;
   if (!host) return;
   options.injectSockets = event.data.injectSockets !== false;
+  const timeoutMs = event.data.timeoutMs;
+  if (typeof timeoutMs === "number" && timeoutMs > 0) options.timeoutMs = timeoutMs;
   host.onmessage = (message) => {
     const reply = message.data;
     router.settle(reply.id, reply.response);
@@ -549,7 +578,13 @@ worker.addEventListener("message", (event) => {
 });
 worker.addEventListener("fetch", (event) => {
   const url = new URL(event.request.url);
-  if (url.origin !== worker.location.origin) return;
+  if (url.origin !== worker.location.origin) {
+    const port2 = router.portFor(event.clientId);
+    const target = port2 === void 0 ? null : containerTarget(url.href);
+    if (!target) return;
+    event.respondWith(router.fetch(target.port, target.path, event.request, event.clientId));
+    return;
+  }
   const claimed = router.claimedPort(url.pathname);
   if (claimed !== null && event.request.mode === "navigate") {
     router.bind(event.resultingClientId || event.clientId, claimed);

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "sandboxedjs",
-  "version": "0.1.97",
+  "version": "0.1.100",
   "description": "A Linux-like container that runs entirely inside Node.js — POSIX shell, ~140 coreutils, Node.js and Python runtimes, virtual filesystem and networking. No Docker, no VM, no native modules.",
   "type": "module",
   "license": "MIT",