import WORKER_SHIM from './sandbox-worker.js?raw'; /** * Harness loaded as srcdoc into a sandboxed iframe (allow-scripts only). * The opaque origin is the security boundary: no access to the app origin, * its storage or its API. The harness spawns a worker so model code never * runs on a main thread, which makes the parent timeout enforceable by * removing the iframe. */ export const SANDBOX_HARNESS_HTML = ``;