Cloudflare Sandbox

Configure @vitehub/sandbox to execute definitions through Cloudflare Sandbox.

Use the Cloudflare provider when sandbox execution should run in Cloudflare's sandbox runtime.

Cloudflare needs two pieces: the @cloudflare/sandbox package and a Durable Object binding that ViteHub can resolve at runtime.

Install the provider SDK

pnpm add @cloudflare/sandbox

Configure Sandbox

nitro.config.ts

import { defineNitroConfig } from 'nitro/config'

export default defineNitroConfig({
  modules: ['@vitehub/sandbox/nitro'],
  sandbox: {
    provider: 'cloudflare',
  },
})

Configure the binding

By default, ViteHub looks for a Cloudflare binding named SANDBOX.

Use sandbox.binding when your binding uses a different name:

nitro.config.ts

export default defineNitroConfig({
  modules: ['@vitehub/sandbox/nitro'],
  sandbox: {
    provider: 'cloudflare',
    binding: 'MY_SANDBOX',
  },
})

The provider reads Cloudflare environment bindings from the request event. If the binding is missing, runSandbox() returns an error with this message:

Cloudflare sandbox requires the "SANDBOX" binding. Set sandbox.binding or run inside Cloudflare.

Tune Cloudflare options

Cloudflare-specific options stay in the top-level provider config:

sandbox: {
  provider: 'cloudflare',
  binding: 'SANDBOX',
  className: 'Sandbox',
  migrationTag: 'v1',
  sleepAfter: '5m',
  keepAlive: true,
  normalizeId: true,
}

Option	Default	Description
`binding`	`SANDBOX`	Binding name used to read the Durable Object namespace.
`className`	`Sandbox`	Generated Cloudflare sandbox class name.
`migrationTag`	`v1`	Migration tag used for the generated Durable Object config.
`sandboxId`	generated per call	Stable provider sandbox identity.
`sleepAfter`	provider default	Cloudflare sandbox sleep behavior.
`keepAlive`	provider default	Keep the sandbox alive when supported.
`normalizeId`	provider default	Normalize sandbox IDs when supported.

Verify the provider

Call a known sandbox route:

curl -X POST http://localhost:3000/api/release-notes \
  -H 'content-type: application/json' \
  -d '{"notes":"- Added Cloudflare provider"}'

Successful execution returns a normal Sandbox result:

{
  "result": {
    "summary": "Added Cloudflare provider",
    "items": [
      "Added Cloudflare provider"
    ]
  }
}

Common failures

Symptom	Cause	Fix
`Sandbox provider could not be inferred`	No provider was configured and no Cloudflare environment was detected.	Set `sandbox.provider` to `cloudflare`.
`Cloudflare sandbox requires the "SANDBOX" binding`	The binding is missing from the request environment.	Add the binding or set `sandbox.binding` to the binding name you already use.
Provider package warning during build	`@cloudflare/sandbox` is not installed.	Run `pnpm add @cloudflare/sandbox`.