sandboxedjs 0.1.99 → 0.2.0

package/dist/index.cjs

@@ -20959,7 +20959,7 @@ var wheels_default = {
 
 // package.json
 var package_default = {
-  version: "0.1.99"};
+  version: "0.2.0"};
 
 // src/python/extension-abi.ts
 var EXTENSION_ABI = {
@@ -36993,6 +36993,10 @@ ${headers.join("\r\n")}\r
         const headerEnd = findBytes(combined, new Uint8Array([13, 10, 13, 10]));
         if (headerEnd < 0) continue;
         const headerText = new TextDecoder().decode(combined.subarray(0, headerEnd));
+        if (CHUNKED.test(headerText)) {
+          if (decodeChunked(combined.subarray(headerEnd + 4)).complete) break;
+          continue;
+        }
         const contentLength = /^content-length:\s*(\d+)\s*$/im.exec(headerText)?.[1];
         if (contentLength !== void 0 && combined.length >= headerEnd + 4 + Number(contentLength)) break;
       } catch (error) {
@@ -37064,13 +37068,36 @@ function parseHttpResponse(bytes2) {
     const separator = line.indexOf(":");
     if (separator > 0) headers[line.slice(0, separator).toLowerCase()] = line.slice(separator + 1).trim();
   }
+  let body = bytes2.slice(headerEnd + marker.length);
+  if (CHUNKED.test(headers["transfer-encoding"] ?? "")) {
+    body = decodeChunked(body).body;
+    delete headers["transfer-encoding"];
+    headers["content-length"] = String(body.length);
+  }
   return {
     statusCode: Number(status[1]),
     statusMessage: status[2] ?? "",
     headers,
-    body: bytes2.slice(headerEnd + marker.length)
+    body
   };
 }
+var CHUNKED = /^(?:transfer-encoding:.*)?\bchunked\b/im;
+function decodeChunked(bytes2) {
+  const parts = [];
+  const crlf = new Uint8Array([13, 10]);
+  for (let at = 0; ; ) {
+    const lineEnd = findBytes(bytes2.subarray(at), crlf);
+    if (lineEnd < 0) return { body: joinBytes(parts), complete: false };
+    const header = new TextDecoder().decode(bytes2.subarray(at, at + lineEnd)).split(";")[0].trim();
+    const size = /^[0-9a-f]+$/i.test(header) ? Number.parseInt(header, 16) : Number.NaN;
+    if (!Number.isInteger(size)) throw new Error("Python server returned an invalid chunked response");
+    at += lineEnd + crlf.length;
+    if (size === 0) return { body: joinBytes(parts), complete: true };
+    if (at + size + crlf.length > bytes2.length) return { body: joinBytes(parts), complete: false };
+    parts.push(bytes2.subarray(at, at + size));
+    at += size + crlf.length;
+  }
+}
 function packageIsInstalled(volume, cwd, wanted) {
   for (let dir3 = clean(cwd); ; dir3 = dirname(dir3)) {
     if (packageTreeContains(volume, join(dir3, "node_modules"), wanted, /* @__PURE__ */ new Set())) return true;
@@ -38746,7 +38773,17 @@ async function createPreview(box, options = {}) {
     channel = new MessageChannel();
     serveContainerOn(channel.port1, box);
     const target = registration.active ?? worker;
-    target.postMessage({ type: "sandboxedjs:connect", injectSockets: options.websocket !== false }, [channel.port2]);
+    target.postMessage(
+      {
+        type: "sandboxedjs:connect",
+        injectSockets: options.websocket !== false,
+        /* Sent with the channel, like `injectSockets`, because the worker is
+         * restarted at the browser's convenience and remembers nothing: every
+         * connect has to carry the settings again. */
+        ...options.timeoutMs === void 0 ? {} : { timeoutMs: options.timeoutMs }
+      },
+      [channel.port2]
+    );
   };
   const onWorkerMessage = (event) => {
     const type = event.data?.type;

package/dist/index.d.cts

@@ -1678,6 +1678,16 @@ interface PreviewOptions {
      * re-optimizing dependencies; {@link onStale} is the fallback for that.
      */
     websocket?: boolean;
+    /**
+     * How long a previewed request may take before the worker reports a timeout.
+     *
+     * Defaults to five minutes. Responses cross this bridge whole rather than
+     * streamed, so this covers the *entire* answer: a model generating tokens, a
+     * server-sent-event endpoint running to its last event, a cold build. Raise
+     * it for work that legitimately takes longer; lower it when a preview should
+     * fail fast.
+     */
+    timeoutMs?: number;
 }
 interface Preview {
     /** The URL an iframe should be pointed at to see `port`. */

package/dist/index.d.ts

@@ -1678,6 +1678,16 @@ interface PreviewOptions {
      * re-optimizing dependencies; {@link onStale} is the fallback for that.
      */
     websocket?: boolean;
+    /**
+     * How long a previewed request may take before the worker reports a timeout.
+     *
+     * Defaults to five minutes. Responses cross this bridge whole rather than
+     * streamed, so this covers the *entire* answer: a model generating tokens, a
+     * server-sent-event endpoint running to its last event, a cold build. Raise
+     * it for work that legitimately takes longer; lower it when a preview should
+     * fail fast.
+     */
+    timeoutMs?: number;
 }
 interface Preview {
     /** The URL an iframe should be pointed at to see `port`. */

package/dist/index.js

@@ -20942,7 +20942,7 @@ var wheels_default = {
 
 // package.json
 var package_default = {
-  version: "0.1.99"};
+  version: "0.2.0"};
 
 // src/python/extension-abi.ts
 var EXTENSION_ABI = {
@@ -36976,6 +36976,10 @@ ${headers.join("\r\n")}\r
         const headerEnd = findBytes(combined, new Uint8Array([13, 10, 13, 10]));
         if (headerEnd < 0) continue;
         const headerText = new TextDecoder().decode(combined.subarray(0, headerEnd));
+        if (CHUNKED.test(headerText)) {
+          if (decodeChunked(combined.subarray(headerEnd + 4)).complete) break;
+          continue;
+        }
         const contentLength = /^content-length:\s*(\d+)\s*$/im.exec(headerText)?.[1];
         if (contentLength !== void 0 && combined.length >= headerEnd + 4 + Number(contentLength)) break;
       } catch (error) {
@@ -37047,13 +37051,36 @@ function parseHttpResponse(bytes2) {
     const separator = line.indexOf(":");
     if (separator > 0) headers[line.slice(0, separator).toLowerCase()] = line.slice(separator + 1).trim();
   }
+  let body = bytes2.slice(headerEnd + marker.length);
+  if (CHUNKED.test(headers["transfer-encoding"] ?? "")) {
+    body = decodeChunked(body).body;
+    delete headers["transfer-encoding"];
+    headers["content-length"] = String(body.length);
+  }
   return {
     statusCode: Number(status[1]),
     statusMessage: status[2] ?? "",
     headers,
-    body: bytes2.slice(headerEnd + marker.length)
+    body
   };
 }
+var CHUNKED = /^(?:transfer-encoding:.*)?\bchunked\b/im;
+function decodeChunked(bytes2) {
+  const parts = [];
+  const crlf = new Uint8Array([13, 10]);
+  for (let at = 0; ; ) {
+    const lineEnd = findBytes(bytes2.subarray(at), crlf);
+    if (lineEnd < 0) return { body: joinBytes(parts), complete: false };
+    const header = new TextDecoder().decode(bytes2.subarray(at, at + lineEnd)).split(";")[0].trim();
+    const size = /^[0-9a-f]+$/i.test(header) ? Number.parseInt(header, 16) : Number.NaN;
+    if (!Number.isInteger(size)) throw new Error("Python server returned an invalid chunked response");
+    at += lineEnd + crlf.length;
+    if (size === 0) return { body: joinBytes(parts), complete: true };
+    if (at + size + crlf.length > bytes2.length) return { body: joinBytes(parts), complete: false };
+    parts.push(bytes2.subarray(at, at + size));
+    at += size + crlf.length;
+  }
+}
 function packageIsInstalled(volume, cwd, wanted) {
   for (let dir3 = clean(cwd); ; dir3 = dirname(dir3)) {
     if (packageTreeContains(volume, join(dir3, "node_modules"), wanted, /* @__PURE__ */ new Set())) return true;
@@ -38729,7 +38756,17 @@ async function createPreview(box, options = {}) {
     channel = new MessageChannel();
     serveContainerOn(channel.port1, box);
     const target = registration.active ?? worker;
-    target.postMessage({ type: "sandboxedjs:connect", injectSockets: options.websocket !== false }, [channel.port2]);
+    target.postMessage(
+      {
+        type: "sandboxedjs:connect",
+        injectSockets: options.websocket !== false,
+        /* Sent with the channel, like `injectSockets`, because the worker is
+         * restarted at the browser's convenience and remembers nothing: every
+         * connect has to carry the settings again. */
+        ...options.timeoutMs === void 0 ? {} : { timeoutMs: options.timeoutMs }
+      },
+      [channel.port2]
+    );
   };
   const onWorkerMessage = (event) => {
     const type = event.data?.type;

package/dist/service-worker.js

@@ -365,6 +365,7 @@ function containerTarget(value) {
 }
 var OUTDATED = /outdated optimize dep/i;
 var NOT_CONNECTED = 503;
+var DEFAULT_TIMEOUT_MS = 5 * 6e4;
 var PreviewRouter = class {
   constructor(options2) {
     this.options = options2;
@@ -447,16 +448,15 @@ var PreviewRouter = class {
       { id, port, path, method: request.method, headers: headerRecord(request.headers), ...sent ? { body: sent } : {} },
       sent ? [sent] : []
     );
-    const timeoutMs = this.options.timeoutMs ?? 3e4;
+    const timeoutMs = this.options.timeoutMs ?? DEFAULT_TIMEOUT_MS;
+    let timer;
     const result = await Promise.race([
       answered,
-      new Promise(
-        (resolve) => setTimeout(
-          () => resolve({ status: 504, statusText: "Gateway Timeout", headers: {}, body: new ArrayBuffer(0) }),
-          timeoutMs
-        )
-      )
+      new Promise((resolve) => {
+        timer = setTimeout(() => resolve(timedOut(port, path, timeoutMs)), timeoutMs);
+      })
     ]);
+    clearTimeout(timer);
     this.pending.delete(id);
     if (result.status === 504 && OUTDATED.test(result.statusText)) {
       this.options.onStale?.(clientId);
@@ -468,6 +468,19 @@ var PreviewRouter = class {
     return new Response(body, { status: result.status, statusText: result.statusText, headers });
   }
 };
+function timedOut(port, path, timeoutMs) {
+  const message = `The sandbox preview gave up waiting for ${path} on port ${port} after ${Math.round(timeoutMs / 1e3)}s.
+
+The server inside the container has not finished this response. Preview responses are delivered whole rather than streamed, so a long one \u2014 a model's answer, a server-sent-event stream \u2014 is outstanding until it ends.
+
+Raise createPreview(box, { timeoutMs }) if this work legitimately takes longer.`;
+  return {
+    status: 504,
+    statusText: "Gateway Timeout",
+    headers: { "content-type": "text/plain; charset=utf-8" },
+    body: new TextEncoder().encode(message).buffer
+  };
+}
 function isolated(response) {
   const headers = new Headers(response.headers);
   headers.set("Content-Type", "text/plain; charset=utf-8");
@@ -553,6 +566,8 @@ worker.addEventListener("message", (event) => {
   host = event.ports[0] ?? null;
   if (!host) return;
   options.injectSockets = event.data.injectSockets !== false;
+  const timeoutMs = event.data.timeoutMs;
+  if (typeof timeoutMs === "number" && timeoutMs > 0) options.timeoutMs = timeoutMs;
   host.onmessage = (message) => {
     const reply = message.data;
     router.settle(reply.id, reply.response);

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "sandboxedjs",
-  "version": "0.1.99",
+  "version": "0.2.0",
   "description": "A Linux-like container that runs entirely inside Node.js — POSIX shell, ~140 coreutils, Node.js and Python runtimes, virtual filesystem and networking. No Docker, no VM, no native modules.",
   "type": "module",
   "license": "MIT",