oneuptime/IsolatedVM/API/VM.ts

import Express, {
    ExpressRequest,
    ExpressResponse,
    ExpressRouter,
    NextFunction,
} from 'CommonServer/Utils/Express';
import Response from 'CommonServer/Utils/Response';
import ClusterKeyAuthorization from 'CommonServer/Middleware/ClusterKeyAuthorization';
import VMUtil from '../Utils/VM';
import BadDataException from 'Common/Types/Exception/BadDataException';
import ReturnResult from 'Common/Types/IsolatedVM/ReturnResult';
import logger from 'CommonServer/Utils/Logger';
import JSONFunctions from 'Common/Types/JSONFunctions';

const router: ExpressRouter = Express.getRouter();

router.post(
    '/run-code',
    ClusterKeyAuthorization.isAuthorizedServiceMiddleware,
    async (
        req: ExpressRequest,
        res: ExpressResponse,
        next: NextFunction
    ): Promise<void> => {
        try {
            if (!req.body.code) {
                return Response.sendErrorResponse(
                    req,
                    res,
                    new BadDataException('Code is missing')
                );
            }

            logger.info('Running code in sandbox');
            logger.info(req.body.code);

            let result: ReturnResult | null = null;

            try {
                result = await VMUtil.runCodeInSandbox({
                    code: req.body.code,
                    options: {
                        timeout: 5000,
                        args: req.body?.['options']?.['args'] || {},
                    },
                });
            } catch (err) {
                logger.error(err);
                throw new BadDataException((err as Error).message);
            }

            logger.info('Code execution completed');
            logger.info(result.returnValue);

            logger.info('Code Logs ');
            logger.info(result.logMessages);

            if (typeof result.returnValue === 'object') {
                result.returnValue = JSONFunctions.removeCircularReferences(
                    result.returnValue
                );
            }

            return Response.sendJsonObjectResponse(req, res, {
                returnValue: result.returnValue,
                logMessages: result.logMessages,
            });
        } catch (err) {
            return next(err);
        }
    }
);

export default router;