Event handling bug + live streaming inside iframe

[zk1tty]

Issue

1. At anime-watch-hub sample, iframe sandbox was not allowed to render the browser live stream, which requires run JavaScript.
2. return value data type was old and function didn't work now.
   https://v0-animefinder.vercel.app/

The fix

Before

After

1. sandbox attirbute

• remove sandbox="allow-same-origin" attribute.
• added allow-scripts and allow-forms to the sandbox attribute. The live viewer from TinyFish needs JavaScript to render the browser stream.

2. amend /run-see streaming API endpoint event handling types

   Before (wrong)	After (correct)
   data.streamingUrl	data.streaming_url on STREAMING_URL event
   data.type === 'STATUS', data.message	data.type === 'PROGRESS', data.purpose
   data.type === 'COMPLETE', data.resultJson	data.type === 'COMPLETE', data.result + data.status
   No failure handling	data.status === 'failed' → error state with data.error.message

Comment

I only tried this folder, but I assume same issues can happen at other folders tool.
Highly recommended to review and adjust to new event types on /run-sse endpoints.
doc: https://docs.tinyfish.ai/key-concepts/endpoints#streaming-/run-sse

cc: @simantak-dabhade

[JiwaniZakir]

The iframe issue is a straightforward sandbox policy misconfiguration — allow-same-origin alone restricts script execution, which breaks any JavaScript-dependent renderer like TinyFish's live stream viewer. The /run-sse event handling mismatch points to the client code being written against an older version of the API contract; the field renames (streamingUrl → streaming_url, STATUS → PROGRESS, resultJson → result) and the addition of a failed status suggest the SSE payload schema was updated server-side without corresponding client updates in the sample. As the reporter notes, any other samples using /run-sse likely share the same stale event handler pattern and should be audited against the current schema documented at https://docs.tinyfish.ai/key-concepts/endpoints#streaming-/run-sse.