chore: rename libsandbox to secure-exec and fix playground browser bundle

Author: NathanFlurry

examples/ai-sdk/package.json

@@ -1,5 +1,5 @@
 {
-  "name": "@libsandbox/example-ai-sdk",
+  "name": "@secure-exec/example-ai-sdk",
   "private": true,
   "type": "module",
   "scripts": {

examples/codemod/package.json

@@ -1,5 +1,5 @@
 {
-  "name": "@libsandbox/example-codemod",
+  "name": "@secure-exec/example-codemod",
   "private": true,
   "type": "module",
   "scripts": {

examples/hono/loader/package.json

@@ -1,5 +1,5 @@
 {
-  "name": "@libsandbox/example-hono-loader",
+  "name": "@secure-exec/example-hono-loader",
   "private": true,
   "type": "module",
   "scripts": {

examples/hono/runner/package.json

@@ -1,5 +1,5 @@
 {
-  "name": "@libsandbox/example-hono-runner",
+  "name": "@secure-exec/example-hono-runner",
   "private": true,
   "type": "module",
   "dependencies": {

examples/just-bash/package.json

@@ -1,5 +1,5 @@
 {
-  "name": "@libsandbox/example-just-bash",
+  "name": "@secure-exec/example-just-bash",
   "private": true,
   "type": "module",
   "scripts": {

examples/shared/src/sandbox-runner-utils.ts

@@ -64,7 +64,7 @@ export async function prepareRunnerInTempDir(
 	sourceDir: string,
 	entryRelativePath: string = path.join("src", "index.ts"),
 ): Promise<{ tempDir: string; entryPath: string }> {
-	const tempDir = await mkdtemp(path.join(tmpdir(), "libsandbox-hono-runner-"));
+	const tempDir = await mkdtemp(path.join(tmpdir(), "secure-exec-hono-runner-"));
 
 	await cp(sourceDir, tempDir, {
 		recursive: true,

package.json

@@ -1,5 +1,5 @@
 {
-	"name": "libsandbox",
+	"name": "secure-exec-monorepo",
 	"version": "0.1.0",
 	"private": true,
 	"license": "Apache-2.0",

packages/playground/package.json

@@ -1,5 +1,5 @@
 {
-  "name": "@libsandbox/playground",
+  "name": "@secure-exec/playground",
   "private": true,
   "type": "module",
   "scripts": {

packages/playground/scripts/build-worker.ts

@@ -34,6 +34,7 @@ async function buildWorkerBundle(): Promise<void> {
 
 	await build({
 		bundle: true,
+		external: ["path", "fs", "module", "util"],
 		format: "esm",
 		legalComments: "none",
 		minify: true,

progress.txt

@@ -708,12 +708,12 @@ PRD: ralph/kernel-hardening (46 stories)
 ## 2026-03-17 - US-044
 - What was implemented: Codemod example project demonstrating safe code transformations in secure-exec sandbox
 - Files changed:
-  - examples/codemod/package.json (new) — @libsandbox/example-codemod package with tsx dev script
+  - examples/codemod/package.json (new) — @secure-exec/example-codemod package with tsx dev script
   - examples/codemod/src/index.ts (new) — reads source → writes to VFS → executes codemod in sandbox → reads transformed result → prints diff
 - **Learnings for future iterations:**
   - esbuild (used by tsx) cannot parse template literal backticks or `${` inside String.raw templates — use `String.fromCharCode(96)` and split `'$' + '{'` to work around
   - Examples don't need tsconfig.json — they inherit from the workspace and use tsx for runtime TS execution
-  - Example naming convention: `@libsandbox/example-<name>` with `"private": true` and `"type": "module"`
+  - Example naming convention: `@secure-exec/example-<name>` with `"private": true` and `"type": "module"`
   - InMemoryFileSystem methods (readTextFile, writeFile) are async (return Promises) — must await them on the host side
 ---