first commit

Author: zhengxs2018

.cspell.json

@@ -0,0 +1,23 @@
+{
+  "$schema": "https://raw.githubusercontent.com/streetsidesoftware/cspell/main/cspell.schema.json",
+  "version": "0.2",
+  "language": "en",
+  "languageId": "typescript,javascript",
+  "dictionaries": [
+    "powershell",
+    "typescript",
+    "node"
+  ],
+  "allowCompoundWords": true,
+  "useGitignore": true,
+  "ignorePaths": [
+    ".gitignore",
+    "*.d.ts"
+  ],
+  "words": [
+    "arrayify",
+    "bpvm",
+    "lcov",
+    "zhengxs"
+  ]
+}

.editorconfig

@@ -0,0 +1,20 @@
+# EditorConfig is awesome: https://EditorConfig.org
+
+root = true
+
+[*]
+charset = utf-8
+indent_size = 2
+indent_style = space
+indent_size = 2
+tab_width = 2
+continuation_indent_size = 4 # IntelliJ family IDEs
+insert_final_newline = true
+trim_trailing_whitespace = true
+
+[*.md]
+trim_trailing_whitespace = false
+
+[Makefile]
+indent_size = 4
+indent_style = tab

.gitattributes

@@ -0,0 +1,8 @@
+pnpm-lock.yaml               merge=text
+shrinkwrap.yaml              merge=binary
+npm-shrinkwrap.json          merge=binary
+yarn.lock                    merge=binary
+
+*.json                       linguist-language=JSON-with-Comments
+
+* text=auto eol=lf

.gitignore

@@ -0,0 +1,34 @@
+.DS_store
+.history
+
+node_modules
+
+# git features
+.mailmap
+
+# local env files
+.env.local
+.env.*.local
+
+# Log files
+npm-debug.log*
+yarn-debug.log*
+yarn-error.log*
+pnpm-debug.log*
+
+# Editor directories and files
+.idea
+# .vscode
+*.suo
+*.ntvs*
+*.njsproj
+*.sln
+*.sw?
+
+# build artifacts
+dist/
+dist-types/
+
+yarn.lock
+pnpm-lock.yaml
+package-lock.json

.node-version

@@ -0,0 +1 @@
+22

.prettierrc

@@ -0,0 +1,12 @@
+{
+  "semi": true,
+  "singleQuote": true,
+  "overrides": [
+    {
+      "files": ".prettierrc",
+      "options": {
+        "parser": "json"
+      }
+    }
+  ]
+}

.vscode/launch.json

@@ -0,0 +1,30 @@
+{
+  // 使用 IntelliSense 了解相关属性。
+  // 悬停以查看现有属性的描述。
+  // 欲了解更多信息，请访问: https://go.microsoft.com/fwlink/?linkid=830387
+  "version": "0.2.0",
+  "configurations": [
+    {
+      "name": "Run Files",
+      "type": "node",
+      "request": "launch",
+      "program": "${file}",
+      "runtimeArgs": ["--no-warnings"],
+      "runtimeExecutable": "tsx",
+      "console": "integratedTerminal",
+      "internalConsoleOptions": "neverOpen",
+      "skipFiles": ["<node_internals>/**", "${workspaceFolder}/node_modules/**"]
+    },
+    {
+      "name": "Watch Files",
+      "type": "node",
+      "request": "launch",
+      "program": "${file}",
+      "runtimeArgs": ["--no-warnings", "--watch"],
+      "runtimeExecutable": "tsx",
+      "console": "integratedTerminal",
+      "internalConsoleOptions": "neverOpen",
+      "skipFiles": ["<node_internals>/**", "${workspaceFolder}/node_modules/**"]
+    }
+  ]
+}

LICENSE

@@ -0,0 +1,21 @@
+MIT License
+
+Copyright (c) 2025 zhengxs2018
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+SOFTWARE.

README.md

@@ -0,0 +1,41 @@
+# bpvm
+
+一个基于 Proxy 的浏览器沙箱，确保动态运行的代码，不会污染全局环境。
+
+## 安装
+
+```sh
+$ pnpm add bpvm
+```
+
+### 使用
+
+```ts
+import { runInNewContext } from 'bpvm'
+
+window.globalVar = 3
+
+const context = {
+  globalVar: 1,
+}
+
+runInNewContext('globalVar *= 2, context')
+
+console.log(context)
+// Prints: { globalVar: 2 }
+
+console.log(window.globalVar)
+// Prints: 3
+```
+
+## 本地启动
+
+1. 使用 **vscode** 打开项目
+2. 进入到子模块的 `samples` 目录
+3. 打开需要运行的示例文件
+4. 点击侧边栏的 **运行和调试** 按钮
+5. 运行 `Run Files`
+
+## License
+
+MIT

package.json

@@ -0,0 +1,63 @@
+{
+  "name": "bpvm",
+  "version": "0.2.0",
+  "description": "A browser sandbox based on Proxy",
+  "keywords": [
+    "sandbox",
+    "proxy",
+    "browser",
+    "vm"
+  ],
+  "homepage": "https://github.com/FrontEndDev-org/bpvm#readme",
+  "repository": {
+    "type": "git",
+    "url": "https://github.com/FrontEndDev-org/bpvm.git"
+  },
+  "author": "zhengxs2018",
+  "license": "MIT",
+  "sideEffects": false,
+  "type": "module",
+  "main": "./dist/index.js",
+  "types": "./dist-types/index.d.ts",
+  "files": [
+    "dist",
+    "dist-types"
+  ],
+  "publishConfig": {
+    "directory": "package"
+  },
+  "clean-publish": {
+    "withoutPublish": true,
+    "tempDir": "package",
+    "fields": [
+      "engines",
+      "publishConfig"
+    ]
+  },
+  "packageManager": "[email protected]",
+  "engines": {
+    "node": ">=22.0.0"
+  },
+  "scripts": {
+    "build": "vite build",
+    "watch": "vite build --mode development --watch",
+    "format": "prettier src samples --write --log-level warn",
+    "clean:bundle": "rimraf dist dist-types",
+    "prepublishOnly": "pnpm build && clean-publish",
+    "postpublish": "rimraf ./package"
+  },
+  "devDependencies": {
+    "@types/node": "^22.15.14",
+    "clean-publish": "^5.2.0",
+    "husky": "^9.1.7",
+    "lint-staged": "^15.5.2",
+    "prettier": "^3.5.3",
+    "rimraf": "^6.0.1",
+    "tsx": "^4.19.4",
+    "typescript": "^5.8.3",
+    "vite": "^6.3.5",
+    "vite-plugin-checker": "^0.9.3",
+    "vite-plugin-dts": "^4.5.3",
+    "vite-plugin-externalize-deps": "^0.9.0"
+  }
+}

samples/globalVar.ts

@@ -0,0 +1,16 @@
+import './polyfill.js';
+import { runInNewContext } from '../src/index.js';
+
+(window as any).globalVar = 3;
+
+const context = {
+  globalVar: 1,
+};
+
+runInNewContext(`globalVar *= 2`, context);
+
+console.log(context);
+// Prints: { globalVar: 2 }
+
+console.log((window as any).globalVar);
+// Prints: 3

samples/module.ts

@@ -0,0 +1,43 @@
+import './polyfill.js';
+import { ModuleScript } from '../src/index.js';
+import { isNil } from '../src/util.js';
+
+type Extension = {
+  activate: () => void;
+};
+
+const code = `
+const { isNil } = require('shared')
+
+const msg = 'hello,module'
+
+
+exports.activate = function () {
+  console.log('环境变量', process.env.NODE_ENV)
+  console.log('全局变量', abc)
+  console.log('函数调用', isNil(null), isNil(1))
+  console.log('当前上下文变量', msg)
+}`;
+
+const vm = new ModuleScript<Extension>(code, {
+  env: {
+    NODE_ENV: 'development',
+  },
+  module: {
+    alias: {
+      shared: { isNil },
+    },
+  },
+  scopes: ['abc'],
+});
+
+const exports = vm.getExports({
+  abc: '123',
+});
+
+exports.activate();
+//=> Prints:
+//=> 环境变量 development
+//=> 全局变量 123
+//=> 函数调用 false false
+//=> 当前上下文变量 hello,module

samples/polyfill.ts

@@ -0,0 +1,2 @@
+// @ts-expect-error mock browser global
+global.window = {};

samples/script.ts

@@ -0,0 +1,34 @@
+import './polyfill.js';
+import { createContext, Script } from '../src/index.js';
+
+const code = `
+const msg = 'hello,script'
+
+window.print = function () {
+  console.log('环境变量', process.env.NODE_ENV)
+  console.log('全局变量', abc)
+  console.log('当前上下文变量', msg)
+}`;
+
+const vm = new Script(code, {
+  scopes: ['process', 'abc'],
+});
+
+const context = createContext<{
+  print: () => void;
+}>({
+  process: {
+    env: {
+      NODE_ENV: 'development',
+    },
+  },
+  abc: '123',
+});
+
+vm.runInContext(context);
+
+context.print();
+//=> Prints:
+//=> 环境变量 development
+//=> 全局变量 123
+//=> 当前上下文变量 hello,script

samples/sum.ts

@@ -0,0 +1,12 @@
+import './polyfill.js';
+import { runInNewContext } from '../src/index.js';
+
+const result = runInNewContext(
+  'a + 5',
+  { a: 100 },
+  {
+    returnValue: true,
+  },
+);
+
+console.log(result);