fix(preview): hung-frame watchdog + require approval for guessed action calls #11

2026-08-26T18:09:39Z

enderofwings commented

2026-08-26 18:09:39 +00:00

Carries #6 (PR git.enderofwings.com/enderofwings/NexusOS/pulls/6, Athena) forward with two fixes found in review:

Preview iframe watchdog: a hung/runaway script (sync infinite loop, or a re-render loop outpacing the bootstrap coalescing) is now detected via a 1s heartbeat and the frame is torn down after 6s of silence, instead of spinning indefinitely.
_coerce_tool_calls-recovered action tool calls (guessed from content, no native tool_calls field) now always require approval, even under action_tool_policy="allow" - that heuristic is weaker evidence than the APIs own structured field.

Built directly on 6/head (952ef8a) - all of #6 plus this one commit. Merge this instead of #6.

Carries #6 (PR git.enderofwings.com/enderofwings/NexusOS/pulls/6, Athena) forward with two fixes found in review: - Preview iframe watchdog: a hung/runaway script (sync infinite loop, or a re-render loop outpacing the bootstrap coalescing) is now detected via a 1s heartbeat and the frame is torn down after 6s of silence, instead of spinning indefinitely. - `_coerce_tool_calls`-recovered action tool calls (guessed from `content`, no native tool_calls field) now always require approval, even under action_tool_policy="allow" - that heuristic is weaker evidence than the APIs own structured field. Built directly on 6/head (952ef8a) - all of #6 plus this one commit. Merge this instead of #6.

enderofwings added 4 commits 2026-08-26 18:09:39 +00:00

feat(preview): add sandboxed live code previews 656c14caf3

Render validated HTML, SVG, JSX, and TSX fences locally while preserving tool context and preventing explanatory JSON from triggering actions.

Co-authored-by: Cursor <cursoragent@cursor.com>

fix(preview): harden sandbox and transformation 7262e7730e

refactor(preview): simplify compile and validation paths 952ef8a0c4

Load Sucrase only when a JSX/TSX preview is opened, remove the hand-written transform, and leave subjective render evaluation to the reader while retaining structural fence validation.

fix(preview): hung-frame watchdog + require approval for guessed action calls 0d26f630e6

A runaway preview script (sync infinite loop, or a re-render loop
outpacing the bootstrap's own coalescing) had nothing detecting it -
the frame just spun. The bootstrap now heartbeats every second, and the
parent tears the iframe down if it goes _WATCHDOG_MS silent, whatever
the cause.

_coerce_tool_calls recovers a tool call guessed from `content` for
models with no native tool_calls field. That guess is weaker evidence
than the API's own structured field - a model can land on JSON shaped
like a call while only meaning to describe one - so an action tool
recovered this way now always requires approval, even under the
"allow" policy that lets a native tool_calls field run unattended.

enderofwings added 1 commit 2026-08-26 18:14:05 +00:00

Merge public/main (PR #5 ) into preview branch, resolve test_smoke.py append conflict c4d7dc42f2

enderofwings merged commit 8bc8123bfa into main

2026-08-26 18:15:14 +00:00

enderofwings referenced this pull request

2026-08-26 18:17:20 +00:00

feat(preview): add sandboxed previews with lazy JSX compilation #6

enderofwings referenced this issue from a commit

2026-08-26 18:43:38 +00:00

Merge public/main (PR #11) into packaging branch

enderofwings referenced this pull request

2026-08-26 19:03:52 +00:00