agentfront · frontegg-david · Feb 25, 2026 · Feb 24, 2026 · Feb 24, 2026 · Feb 24, 2026
diff --git a/.gitignore b/.gitignore
@@ -98,3 +98,8 @@ docs/docs.backup.json
 
 **/.cache/
 perf-results.json
+
+# Playwright
+test-results/
+playwright-report/
+libs/browser/e2e/fixtures/enclave-browser-bundle.mjs
diff --git a/CLAUDE.md b/CLAUDE.md
@@ -0,0 +1,13 @@
+# CLAUDE.md
+
+## Verification
+
+After every code change, the following commands must all pass before considering the work complete:
+
+```bash
+pnpm lint
+pnpm format:check
+pnpm build
+```
+
+Run these from the repository root. Use `npx nx` to target individual projects (e.g., `npx nx build browser`).
diff --git a/apps/browser-demo/.gitignore b/apps/browser-demo/.gitignore
@@ -0,0 +1,2 @@
+# Generated enclave bundle
+vendor/enclave-browser-bundle.mjs
diff --git a/apps/browser-demo/eslint.config.mjs b/apps/browser-demo/eslint.config.mjs
@@ -0,0 +1,8 @@
+import baseConfig from '../../eslint.config.mjs';
+
+export default [
+  ...baseConfig,
+  {
+    ignores: ['vendor/**'],
+  },
+];
diff --git a/apps/browser-demo/index.html b/apps/browser-demo/index.html
@@ -0,0 +1,12 @@
+<!doctype html>
+<html lang="en">
+  <head>
+    <meta charset="UTF-8" />
+    <meta name="viewport" content="width=device-width, initial-scale=1.0" />
+    <title>Browser Enclave Demo</title>
+  </head>
+  <body>
+    <div id="root"></div>
+    <script type="module" src="/src/main.tsx"></script>
+  </body>
+</html>
diff --git a/apps/browser-demo/package.json b/apps/browser-demo/package.json
@@ -0,0 +1,23 @@
+{
+  "name": "browser-demo",
+  "version": "0.0.1",
+  "private": true,
+  "type": "module",
+  "scripts": {
+    "prebuild": "node scripts/build-enclave-bundle.mjs",
+    "dev": "vite",
+    "build": "vite build"
+  },
+  "dependencies": {
+    "react": "^19.0.0",
+    "react-dom": "^19.0.0"
+  },
+  "devDependencies": {
+    "@types/react": "^19.0.0",
+    "@types/react-dom": "^19.0.0",
+    "@vitejs/plugin-react": "^4.5.2",
+    "esbuild": "^0.25.0",
+    "typescript": "~5.9.3",
+    "vite": "^6.3.5"
+  }
+}
diff --git a/apps/browser-demo/project.json b/apps/browser-demo/project.json
@@ -0,0 +1,28 @@
+{
+  "name": "browser-demo",
+  "sourceRoot": "apps/browser-demo/src",
+  "projectType": "application",
+  "targets": {
+    "prebuild": {
+      "executor": "nx:run-commands",
+      "options": {
+        "command": "node apps/browser-demo/scripts/build-enclave-bundle.mjs"
+      }
+    },
+    "serve": {
+      "executor": "nx:run-commands",
+      "dependsOn": ["prebuild"],
+      "options": {
+        "command": "npx vite --config apps/browser-demo/vite.config.ts"
+      }
+    },
+    "build": {
+      "executor": "nx:run-commands",
+      "dependsOn": ["prebuild"],
+      "options": {
+        "command": "npx vite build --config apps/browser-demo/vite.config.ts"
+      },
+      "outputs": ["{workspaceRoot}/dist/apps/browser-demo"]
+    }
+  }
+}
diff --git a/apps/browser-demo/scripts/buffer-shim.mjs b/apps/browser-demo/scripts/buffer-shim.mjs
@@ -0,0 +1,13 @@
+/**
+ * Minimal Buffer shim for the browser test bundle.
+ * Only provides Buffer.byteLength which is used by @enclave-vm/ast's size-check.
+ */
+const encoder = new TextEncoder();
+
+if (typeof globalThis.Buffer === 'undefined') {
+  globalThis.Buffer = {
+    byteLength(str) {
+      return encoder.encode(String(str)).byteLength;
+    },
+  };
+}
diff --git a/apps/browser-demo/scripts/build-enclave-bundle.mjs b/apps/browser-demo/scripts/build-enclave-bundle.mjs
@@ -0,0 +1,30 @@
+/**
+ * Build a self-contained ESM bundle of @enclave-vm/browser for the demo app.
+ *
+ * Inlines all dependencies (ast, acorn, astring, zod) into a single ESM file.
+ * Output goes to vendor/ so Vite can import it as a normal module.
+ */
+
+import { build } from 'esbuild';
+import path from 'node:path';
+import { fileURLToPath } from 'node:url';
+
+const __dirname = path.dirname(fileURLToPath(import.meta.url));
+const root = path.resolve(__dirname, '../../..');
+
+await build({
+  entryPoints: [path.resolve(root, 'libs/browser/src/index.ts')],
+  bundle: true,
+  format: 'esm',
+  outfile: path.resolve(__dirname, '../vendor/enclave-browser-bundle.mjs'),
+  platform: 'browser',
+  target: 'es2022',
+  external: [],
+  alias: {
+    '@enclave-vm/ast': path.resolve(root, 'libs/ast/src/index.ts'),
+  },
+  inject: [path.resolve(__dirname, 'buffer-shim.mjs')],
+  sourcemap: false,
+  minify: false,
+  logLevel: 'info',
+});
Original file line number	Diff line number	Diff line change
		@@ -0,0 +1,2 @@
		# Generated enclave bundle
		vendor/enclave-browser-bundle.mjs