Make default iframe sandbox only require :blob csp permission

.changeset/early-comics-add.md

@@ -0,0 +1,5 @@
+---
+'@segment/analytics-signals-runtime': minor
+---
+
+Update ProcessSignal type for experimental "constants" object

.changeset/three-oranges-work.md

@@ -0,0 +1,5 @@
+---
+'@segment/analytics-signals': minor
+---
+
+Update iframe sandbox so CSP only requires :blob permission

packages/signals/signals-example/src/lib/analytics.ts

@@ -2,7 +2,11 @@
 // You only want to instantiate SignalsPlugin in a browser context, otherwise you'll get an error.
 
 import { AnalyticsBrowser } from '@segment/analytics-next'
-import { SignalsPlugin, ProcessSignal } from '@segment/analytics-signals'
+import {
+  SignalsPlugin,
+  SignalsPluginSettingsConfig,
+  ProcessSignal,
+} from '@segment/analytics-signals'
 
 export const analytics = new AnalyticsBrowser()
 if (!process.env.WRITEKEY) {
@@ -29,11 +33,20 @@ const processSignalExample: ProcessSignal = (
   }
 }
 
+const getQueryParams = () => {
+  const params = new URLSearchParams()
+  const sandboxStrategy = params.get('sandboxStrategy')
+  return {
+    sandboxStrategy:
+      sandboxStrategy as SignalsPluginSettingsConfig['sandboxStrategy'],
+  }
+}
 const isStage = process.env.STAGE === 'true'
 
+const queryParams = getQueryParams()
 const signalsPlugin = new SignalsPlugin({
   ...(isStage ? { apiHost: 'signals.segment.build/v1' } : {}),
-  sandboxStrategy: 'global',
+  sandboxStrategy: queryParams.sandboxStrategy ?? 'iframe',
   // processSignal: processSignalExample,
 })
 

packages/signals/signals-runtime/package.json

@@ -25,7 +25,6 @@
     "build:esm": "yarn tsc -p tsconfig.build.json",
     "build:cjs": "yarn tsc -p tsconfig.build.json --outDir ./dist/cjs --module commonjs",
     "build:global": "node build-signals-runtime-global.js",
-    "assert-generated": "bash scripts/assert-generated.sh",
     "watch": "rm -rf dist/esm && yarn build:esm && yarn build:esm --watch",
     "watch:test": "yarn test --watch",
     "tsc": "yarn run -T tsc",

packages/signals/signals/.lintstagedrc.js

@@ -1,5 +1,3 @@
-module.exports = {
-  ...require("@internal/config").lintStagedConfig,
-  'src/lib/workerbox/*.{js,ts,html}': ['yarn workerbox']
-}
+module.exports = require("@internal/config").lintStagedConfig
+
 

packages/signals/signals/package.json

@@ -32,8 +32,6 @@
     "build:esm": "yarn tsc -p tsconfig.build.json",
     "build:cjs": "yarn tsc -p tsconfig.build.json --outDir ./dist/cjs --module commonjs",
     "build:bundle": "NODE_ENV=production yarn run webpack",
-    "workerbox": "node scripts/build-workerbox.js",
-    "assert-generated": "sh scripts/assert-workerbox-built.sh",
     "watch": "rm -rf dist && yarn concurrently 'yarn build:bundle --watch' 'yarn build:esm --watch'",
     "version": "sh scripts/version.sh",
     "watch:test": "yarn test --watch",

packages/signals/signals/src/core/middleware/event-processor/index.ts

@@ -6,10 +6,9 @@
 import {
   normalizeEdgeFunctionURL,
   GlobalScopeSandbox,
-  WorkerSandbox,
-  IframeSandboxSettings,
   SignalSandbox,
   NoopSandbox,
+  IframeSandbox,
 } from '../../processor/sandbox'
 
 export class SignalsEventProcessorSubscriber implements SignalsSubscriber {
@@ -36,11 +35,9 @@
       sandboxSettings.processSignal
     ) {
       logger.debug('Initializing sandbox: iframe')
-      sandbox = new WorkerSandbox(
-        new IframeSandboxSettings({
-          processSignal: sandboxSettings.processSignal,
-          edgeFnDownloadURL: normalizedEdgeFunctionURL,
-        })
+      sandbox = new IframeSandbox(
+        normalizedEdgeFunctionURL,
+        sandboxSettings.processSignal
       )
     } else {
       logger.debug('Initializing sandbox: global scope')