d25d482dc2
Publish CLI Package / publish-npm (push) Waiting to run
Publish Python SDK / publish-pypi (push) Waiting to run
Publish TypeScript SDK / publish-npm (push) Waiting to run
CI / Migrate Dev DB (push) Has been skipped
CI / Detect Version (push) Has been cancelled
CI / Migrate DB (push) Has been cancelled
CI / Build Dev ECR (./docker/app.Dockerfile, ECR_APP) (push) Has been cancelled
CI / Build Dev ECR (./docker/db.Dockerfile, ECR_MIGRATIONS) (push) Has been cancelled
CI / Build Dev ECR (./docker/pii.Dockerfile, ECR_PII) (push) Has been cancelled
CI / Build Dev ECR (./docker/realtime.Dockerfile, ECR_REALTIME) (push) Has been cancelled
CI / Deploy Trigger.dev (Dev) (push) Has been cancelled
CI / Build AMD64 (./docker/app.Dockerfile, ECR_APP, ghcr.io/simstudioai/simstudio) (push) Has been cancelled
CI / Build AMD64 (./docker/db.Dockerfile, ECR_MIGRATIONS, ghcr.io/simstudioai/migrations) (push) Has been cancelled
CI / Build AMD64 (./docker/pii.Dockerfile, ECR_PII, ghcr.io/simstudioai/pii) (push) Has been cancelled
CI / Build AMD64 (./docker/realtime.Dockerfile, ECR_REALTIME, ghcr.io/simstudioai/realtime) (push) Has been cancelled
CI / Build ARM64 (GHCR Only) (./docker/app.Dockerfile, ghcr.io/simstudioai/simstudio) (push) Has been cancelled
CI / Build ARM64 (GHCR Only) (./docker/db.Dockerfile, ghcr.io/simstudioai/migrations) (push) Has been cancelled
CI / Build ARM64 (GHCR Only) (./docker/pii.Dockerfile, ghcr.io/simstudioai/pii) (push) Has been cancelled
CI / Build ARM64 (GHCR Only) (./docker/realtime.Dockerfile, ghcr.io/simstudioai/realtime) (push) Has been cancelled
CI / Create GHCR Manifests (ghcr.io/simstudioai/migrations) (push) Has been cancelled
CI / Create GHCR Manifests (ghcr.io/simstudioai/pii) (push) Has been cancelled
CI / Create GHCR Manifests (ghcr.io/simstudioai/realtime) (push) Has been cancelled
CI / Create GHCR Manifests (ghcr.io/simstudioai/simstudio) (push) Has been cancelled
CI / Check Docs Changes (push) Has been cancelled
CI / Process Docs (push) Has been cancelled
CI / Create GitHub Release (push) Has been cancelled
CI / Test and Build (push) Has been cancelled
34 lines
1.9 KiB
TypeScript
34 lines
1.9 KiB
TypeScript
/**
|
|
* Everything that runs inside the isolated-vm pool lives in one of two tiers.
|
|
* This file is the single grep surface for "what user code can execute in the
|
|
* sandbox" — if you are adding a new place that spawns into the isolate,
|
|
* register it below and/or extend one of the two tiers.
|
|
*
|
|
* Tier 1 — Sandbox tasks (this folder).
|
|
* Bytes-producing tasks with a fixed input shape (`{ workspaceId, code }`),
|
|
* pre-loaded library bundles, and a host-side broker set. User code is
|
|
* trusted to the extent that our bootstrap + finalize wrap every execution.
|
|
* Invoked via `runSandboxTask(id, input, options?)`.
|
|
* - `pptx-generate` → `apps/sim/sandbox-tasks/pptx-generate.ts`
|
|
* - `docx-generate` → `apps/sim/sandbox-tasks/docx-generate.ts`
|
|
* - `pdf-generate` → `apps/sim/sandbox-tasks/pdf-generate.ts`
|
|
*
|
|
* Tier 2 — Raw isolated-vm consumers.
|
|
* Value-producing executions where the user supplies arbitrary JS and the
|
|
* host consumes whatever the code returns. Different contract (no finalize,
|
|
* no bundles, no broker allowlist — just the built-in fetch bridge) so they
|
|
* call `executeInIsolatedVM` directly rather than going through
|
|
* `runSandboxTask`. If you add a new Tier 2 caller, record it here so the
|
|
* set of sandbox entry points stays grep-able from one place.
|
|
* - `apps/sim/app/api/function/execute/route.ts` — user function blocks
|
|
* - `apps/sim/executor/orchestrators/loop.ts` — loop-condition eval
|
|
*
|
|
* E2B-routed executions (untrusted workflow runs) are a separate runtime
|
|
* entirely and are not part of this registry.
|
|
*/
|
|
|
|
export { docxGenerateTask } from '@/sandbox-tasks/docx-generate'
|
|
export { pdfGenerateTask } from '@/sandbox-tasks/pdf-generate'
|
|
export { pptxGenerateTask } from '@/sandbox-tasks/pptx-generate'
|
|
export { getSandboxTask, SANDBOX_TASKS, type SandboxTaskId } from '@/sandbox-tasks/registry'
|