Sandbox (#1610) (#1611)

projects/sandbox/src/worker/runJs.ts

@@ -0,0 +1,38 @@
+import { RunCodeDto } from 'src/sandbox/dto/create-sandbox.dto';
+import { parentPort } from 'worker_threads';
+import { workerResponse } from './utils';
+
+// @ts-ignore
+const ivm = require('isolated-vm');
+
+parentPort?.on('message', ({ code, variables = {} }: RunCodeDto) => {
+  const resolve = (data: any) => workerResponse({ parentPort, type: 'success', data });
+  const reject = (error: any) => workerResponse({ parentPort, type: 'error', data: error });
+
+  const isolate = new ivm.Isolate({ memoryLimit: 32 });
+  const context = isolate.createContextSync();
+  const jail = context.global;
+
+  // custom log function
+  jail.setSync('responseData', function (args: any): any {
+    if (typeof args === 'object') {
+      resolve(args);
+    } else {
+      reject('Not an invalid response');
+    }
+  });
+
+  // Add global variables
+  jail.setSync('variables', new ivm.ExternalCopy(variables).copyInto());
+
+  try {
+    const scriptCode = `
+      ${code}
+      responseData(main(variables))`;
+    context.evalSync(scriptCode, { timeout: 6000 });
+  } catch (err) {
+    reject(err);
+  }
+
+  process.exit();
+});

projects/sandbox/src/worker/utils.ts

@@ -0,0 +1,47 @@
+import { type MessagePort, Worker } from 'worker_threads';
+import * as path from 'path';
+
+export enum WorkerNameEnum {
+  runJs = 'runJs',
+  runPy = 'runPy'
+}
+
+type WorkerResponseType = { type: 'success' | 'error'; data: any };
+
+export const getWorker = (name: WorkerNameEnum) => {
+  const baseUrl =
+    process.env.NODE_ENV === 'production' ? 'projects/sandbox/dist/worker' : 'dist/worker';
+  const workerPath = path.join(process.cwd(), baseUrl, `${name}.js`);
+  return new Worker(workerPath);
+};
+
+export const runWorker = <T = any>(name: WorkerNameEnum, params?: Record<string, any>) => {
+  return new Promise<T>((resolve, reject) => {
+    const worker = getWorker(name);
+
+    worker.postMessage(params);
+
+    worker.on('message', (msg: WorkerResponseType) => {
+      if (msg.type === 'error') return reject(msg.data);
+
+      resolve(msg.data);
+      worker.terminate();
+    });
+
+    worker.on('error', (err) => {
+      reject(err);
+      worker.terminate();
+    });
+    worker.on('messageerror', (err) => {
+      reject(err);
+      worker.terminate();
+    });
+  });
+};
+
+export const workerResponse = ({
+  parentPort,
+  ...data
+}: WorkerResponseType & { parentPort?: MessagePort }) => {
+  parentPort?.postMessage(data);
+};