Feat: Application layer for sandbox details/inspect view

.env.example

@@ -9,6 +9,10 @@ SUPABASE_SERVICE_ROLE_KEY=your_supabase_service_role_key
 ### Visit: https://github.com/e2b-dev/infra/blob/main/README.md for a self-hosting guide
 INFRA_API_URL=https://api.e2b.dev
 
+### Default domain for the E2B SDK
+### Used for Sandbox Details Page
+NEXT_PUBLIC_E2B_DOMAIN=e2b.dev
+
 ### KV database configuration
 KV_REST_API_TOKEN=
 KV_REST_API_URL=
@@ -21,6 +25,15 @@ KV_REST_API_URL=
 NEXT_PUBLIC_SUPABASE_URL=https://your-project.supabase.co
 NEXT_PUBLIC_SUPABASE_ANON_KEY=your_supabase_anon_key
 
+### =================================
+### OPTIONAL CONTENT SECURITY POLICY
+### =================================
+### Example: https://e2b.dev *.e2b.dev
+CSP_SCRIPT_SRC=
+CSP_STYLE_SRC=
+CSP_IMG_SRC=https://avatars.githubusercontent.com https://lh3.googleusercontent.com
+CSP_FRAME_SRC=https://vercel.live
+
 ### =================================
 ### OPTIONAL SERVER ENVIRONMENT VARIABLES
 ### =================================

.eslintignore

@@ -0,0 +1 @@
+archive/

.github/workflows/test.yml

@@ -20,6 +20,7 @@ jobs:
       SUPABASE_SERVICE_ROLE_KEY: test-service-role-key
       INFRA_API_URL: https://api.e2b-test.dev
       BILLING_API_URL: https://billing.e2b-test.dev
+      NEXT_PUBLIC_E2B_DOMAIN: e2b-test.dev
       NEXT_PUBLIC_POSTHOG_KEY: test-posthog-key
       NEXT_PUBLIC_SUPABASE_URL: https://test-supabase-url.supabase.co
       NEXT_PUBLIC_SUPABASE_ANON_KEY: test-supabase-anon-key

next.config.mjs

@@ -1,10 +1,26 @@
 import { withSentryConfig } from '@sentry/nextjs'
-import { createMDX } from 'fumadocs-mdx/next'
 
-const withMDX = createMDX()
+
+const cspHeader = `
+    default-src 'self';
+    script-src 'self' 'unsafe-eval' 'unsafe-inline' ${process.env.CSP_SCRIPT_SRC};
+    style-src 'self' 'unsafe-inline' ${process.env.CSP_STYLE_SRC};
+    img-src 'self' data: ${process.env.NEXT_PUBLIC_SUPABASE_URL} ${process.env.CSP_IMG_SRC};
+    frame-src 'self' ${process.env.CSP_FRAME_SRC};
+    font-src 'self';
+    object-src 'none';
+    base-uri 'self';
+    form-action 'self';
+    frame-ancestors 'none';
+    worker-src 'self' blob: ${process.env.CSP_SCRIPT_SRC};
+    upgrade-insecure-requests;
+`
 
 /** @type {import('next').NextConfig} */
 const config = {
+  eslint: {
+    dirs: ['src', 'scripts'], // Only run ESLint on these directories during production builds
+  },
   reactStrictMode: true,
   experimental: {
     reactCompiler: true,
@@ -26,7 +42,7 @@ const config = {
   trailingSlash: false,
   headers: async () => [
     {
-      source: '/:path*',
+      source: '/(.*)',
       headers: [
         {
           // config to prevent the browser from rendering the page inside a frame or iframe and avoid clickjacking http://en.wikipedia.org/wiki/Clickjacking
@@ -35,6 +51,15 @@ const config = {
         },
       ],
     },
+    {
+      source: '/dashboard/(.*)',
+      headers: [
+        {
+          key: 'Content-Security-Policy',
+          value: cspHeader.replace(/\n/g, ''),
+        },
+      ],
+    },
   ],
   rewrites: async () => [
     {
@@ -95,7 +120,7 @@ const config = {
   skipTrailingSlashRedirect: true,
 }
 
-export default withSentryConfig(withMDX(config), {
+export default withSentryConfig(config, {
   // For all available options, see:
   // https://www.npmjs.com/package/@sentry/webpack-plugin#options
 

package.json

@@ -18,7 +18,6 @@
     "<<<<<< Gen": "",
     "generate:infra": "bunx openapi-typescript ./spec/openapi.yaml -o ./src/types/infra-api.d.ts",
     "generate:supabase": "bunx supabase@latest gen types typescript --schema public > src/types/database.types.ts --project-id $SUPABASE_PROJECT_ID",
-    "generate:envd": "buf generate --template ./spec/envd/buf.gen.yaml",
     "<<<<<< Scripts": "",
     "scripts:check-app-env": "bun scripts/check-app-env.ts",
     "scripts:check-e2e-env": "bun scripts/check-e2e-env.ts",
@@ -27,7 +26,6 @@
     "<<<<<< Development": "",
     "shad": "bunx shadcn@canary",
     "prebuild": "bun scripts:check-app-env",
-    "postinstall": "fumadocs-mdx",
     "<<<<<< Testing": "",
     "test:run": "bun scripts:check-all-env && vitest run",
     "test:integration": "bun scripts:check-app-env && vitest run src/__test__/integration/",
@@ -38,7 +36,6 @@
     "test:development:metrics": "vitest run src/__test__/development/metrics.test.ts"
   },
   "dependencies": {
-    "@connectrpc/connect": "^2.0.2",
     "@fumadocs/mdx-remote": "^1.2.0",
     "@google-cloud/storage": "^7.15.2",
     "@hookform/resolvers": "^3.10.0",
@@ -81,6 +78,7 @@
     "clsx": "^2.1.1",
     "cmdk": "^1.0.4",
     "date-fns": "^4.1.0",
+    "e2b": "^1.7.1",
     "fast-xml-parser": "^4.5.1",
     "fumadocs-core": "^15.0.6",
     "fumadocs-mdx": "^11.5.3",
@@ -141,7 +139,6 @@
     "autoprefixer": "^10.4.20",
     "babel-plugin-react-compiler": "^19.1.0-rc.2",
     "drizzle-kit": "^0.30.3",
-    "e2b": "^1.7.1",
     "eslint": "^9.19.0",
     "eslint-config-next": "^15.1.6",
     "eslint-config-prettier": "^10.0.1",