feat: update executor in project.json and enhance error handling in client-server.ts

Author: frontegg-david

AGENTS.md

@@ -20,7 +20,8 @@ yarn format:check     # verify formatting
 
 nx build ast-guard    # build a single project
 nx test enclave-vm    # test a single project
-nx serve enclave-demo # run a demo app
+npx nx serve enclave-demo  # CLI demo: sandbox features
+npx nx demo streaming-demo # Web demo: 3-server streaming architecture (localhost:4100)
 ```
 
 Optional: `nx local-registry enclave` starts a local Verdaccio registry for publish testing.

README.md

@@ -135,19 +135,27 @@ See [README-ARCHITECTURE.md](./README-ARCHITECTURE.md) for detailed architecture
 - Reference sidecar & auto-ref
 - Security & encryption
 
-## Demo
+## Demos
 
-Run the streaming demo locally:
+### Enclave Demo (basic sandbox)
+
+```bash
+npx nx serve enclave-demo
+```
+
+A CLI script that demonstrates core sandbox features: arithmetic, loops, tool calls, and security blocking of disallowed operations.
+
+### Streaming Demo (full architecture)
 
 ```bash
 npx nx demo streaming-demo
 ```
 
-This starts 3 servers demonstrating the secure architecture:
+Starts a 3-server architecture with a web UI, covering embedded, lambda, and direct execution modes:
 
-- **Client** (port 4100) - Web UI
-- **Broker** (port 4101) - Tool execution & session management
-- **Runtime** (port 4102) - Sandboxed code execution
+- **Client** (port 4100) — Web UI
+- **Broker** (port 4101) — Tool execution & session management
+- **Runtime** (port 4102) — Sandboxed code execution
 
 **[Read the full documentation →](https://agentfront.dev/docs/guides/enclave)**
 

apps/enclave-demo/project.json

@@ -14,9 +14,9 @@
       }
     },
     "serve": {
-      "executor": "@nx/js:node",
+      "executor": "nx:run-commands",
       "options": {
-        "buildTarget": "enclave-demo:build"
+        "command": "npx tsx apps/enclave-demo/src/main.ts"
       }
     },
     "test": {

apps/streaming-demo/src/client-server.ts

@@ -64,15 +64,15 @@ async function pipeNdjsonWithAbort(options: NdjsonPipeOptions): Promise<NdjsonPi
   let aborted = false;
   let reader: ReadableStreamDefaultReader<Uint8Array> | null = null;
 
-  // Handle client disconnect
+  // Handle client disconnect (only listen on res, not req — req 'close' fires
+  // prematurely in Node 20+ once the request body is consumed by express.json())
   const onClose = () => {
     aborted = true;
     controller.abort();
     if (reader) {
       void reader.cancel();
     }
   };
-  req.on('close', onClose);
   res.on('close', onClose);
 
   try {
@@ -136,7 +136,6 @@ async function pipeNdjsonWithAbort(options: NdjsonPipeOptions): Promise<NdjsonPi
 
     return { lastEvent, aborted };
   } finally {
-    req.off('close', onClose);
     res.off('close', onClose);
     if (reader) {
       void reader.cancel();
@@ -173,6 +172,9 @@ async function handleEmbeddedExecute(req: Request, res: Response): Promise<void>
 
     if (aborted) {
       console.log(`\x1b[34m[Client → Embedded]\x1b[0m Aborted`);
+      if (res.writable) {
+        res.end();
+      }
       return;
     }
 
@@ -191,6 +193,9 @@ async function handleEmbeddedExecute(req: Request, res: Response): Promise<void>
   } catch (error) {
     if ((error as Error).name === 'AbortError') {
       console.log(`\x1b[34m[Client → Embedded]\x1b[0m Aborted`);
+      if (res.writable) {
+        res.end();
+      }
       return;
     }
     console.error(`\x1b[31m[Client → Embedded error]\x1b[0m`, error);
@@ -232,6 +237,9 @@ app.post('/api/execute/lambda', async (req: Request, res: Response) => {
 
     if (aborted) {
       console.log(`\x1b[34m[Client → Broker → Lambda]\x1b[0m Aborted`);
+      if (res.writable) {
+        res.end();
+      }
       return;
     }
 
@@ -250,6 +258,9 @@ app.post('/api/execute/lambda', async (req: Request, res: Response) => {
   } catch (error) {
     if ((error as Error).name === 'AbortError') {
       console.log(`\x1b[34m[Client → Broker → Lambda]\x1b[0m Aborted`);
+      if (res.writable) {
+        res.end();
+      }
       return;
     }
     console.error(`\x1b[31m[Client → Broker → Lambda error]\x1b[0m`, error);

apps/streaming-demo/src/public/index.html

@@ -420,6 +420,7 @@ <h2>Final Result</h2>
         setStatus('running', `Running (${currentMode})...`);
 
         let eventCount = 0;
+        let gotResult = false;
 
         try {
           const response = await fetch(`/api/execute/${currentMode}`, {
@@ -448,8 +449,10 @@ <h2>Final Result</h2>
                 document.getElementById('eventCount').textContent = eventCount + ' events';
 
                 if (event.type === 'client_result') {
+                  gotResult = true;
                   displayResult(event.result);
                 } else if (event.type === 'client_error') {
+                  gotResult = true;
                   resultDiv.innerHTML = '<span class="result-error">Error: ' + event.error + '</span>';
                   setStatus('error', 'Error');
                 } else {
@@ -465,6 +468,10 @@ <h2>Final Result</h2>
           setStatus('error', 'Error');
         } finally {
           runBtn.disabled = false;
+          if (!gotResult) {
+            setStatus('error', 'Stream ended without result');
+            resultDiv.innerHTML = '<span class="result-error">Stream ended without receiving a result</span>';
+          }
         }
       }