@blen/fedreg-mcp-server 2.2.2 → 2.2.3

package/CHANGELOG.md

@@ -21,6 +21,11 @@ adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0.html).
 
 
 
+
+## [2.2.3] - 2026-11-13
+
+### Changed
+- Merge commit from fork
 ## [2.2.2] - 2026-11-10
 
 ### Changed
@@ -220,7 +225,8 @@ Initial public release.
   → notifications/initialized → tools/list → tools/call → sandbox → SDK
   → mocked upstream).
 
-[Unreleased]: https://github.com/blen-labs/fedreg-mcp-server/compare/v2.2.2...HEAD
+[Unreleased]: https://github.com/blen-labs/fedreg-mcp-server/compare/v2.2.3...HEAD
+[2.2.3]: https://github.com/blen-labs/fedreg-mcp-server/compare/v2.2.2...v2.2.3
 [2.2.2]: https://github.com/blen-labs/fedreg-mcp-server/compare/v2.2.1...v2.2.2
 [2.2.1]: https://github.com/blen-labs/fedreg-mcp-server/compare/v2.2.0...v2.2.1
 [2.2.0]: https://github.com/blen-labs/fedreg-mcp-server/compare/v2.1.0...v2.2.0

package/README.md

@@ -214,7 +214,7 @@ CLI options: `--http`, `--port`, `--host`, `--sandbox auto|isolate|deno`, `--ins
 
 ## Security
 
-User code is sandboxed by design — no network, filesystem, env, or subprocess access, an `acorn` AST preflight, a wall-clock timeout, and — on the `isolated-vm` runner — a heap cap (`memoryMb` is not enforceable on the Deno fallback). The full threat model is in [`SECURITY.md`](./SECURITY.md). Found a sandbox escape or auth bypass? Please open a [private Security Advisory](https://github.com/blen-labs/fedreg-mcp-server/security/advisories/new) rather than a public issue.
+User code is sandboxed by design — no network, filesystem, env, or subprocess access, an `acorn` AST preflight, a host-owned wall-clock timeout, a heap cap, and byte budgets on logs and results. The full threat model is in [`SECURITY.md`](./SECURITY.md). Found a sandbox escape or auth bypass? Please open a [private Security Advisory](https://github.com/blen-labs/fedreg-mcp-server/security/advisories/new) rather than a public issue.
 
 ## Contributing
 

package/SECURITY.md

@@ -55,10 +55,12 @@ The `execute` tool runs user-supplied JavaScript with two layered defenses:
 2. **Runtime isolation** — one of:
    - `isolated-vm`: a fresh V8 isolate, **no host references** other than
      a Reference to the RPC dispatcher and a log sink for `console.*`;
-     heap cap, wall-clock cap.
-   - `deno run --no-prompt <runner>`: subprocess with **no `--allow-*` flags**,
-     so no net/fs/env/ffi/subprocess access; wall-clock cap. The runner is a
-     temporary file so stdin stays free for the host RPC channel.
+     heap cap, host-owned wall-clock cap (the isolate is disposed when it fires).
+   - `deno run --no-prompt`: subprocess with **no `--allow-*` flags** and a
+     minimal environment, so no net/fs/env/ffi/subprocess access. User code
+     runs in a Worker with the protocol and ambient globals removed; the host
+     validates and size-bounds every frame and kills the process group on
+     every exit path, so a frame can never cancel the deadline.
 
 Both runners deny network access to user code; the only way to reach
 upstream APIs is via the `fr.*` / `ecfr.*` / `regs.*` proxies, which serialize

package/dist/sandbox/deno.d.ts

@@ -1,13 +1,35 @@
 import type { ExecuteOptions, ExecuteResult, RpcBridge, SandboxRunner } from './types.js';
+import { type SandboxLimits } from './limits.js';
 /**
- * Deno fallback sandbox. We launch `deno run --no-prompt <runner>` with NO
- * `--allow-*` flags, so Deno's deny-by-default grants no net/fs/env/ffi/subprocess
- * access, and bridge RPC over stdin/stdout using a length-prefixed JSON protocol.
+ * Deno sandbox.
+ *
+ * Boundary: Node host (owns the deadline, byte budgets, and the child's lifetime)
+ *   → `deno run` of a fixed supervisor script with NO --allow-* flags (deny-by-default: no net, fs,
+ *     env, ffi, subprocess), a minimal environment, and no user code on disk
+ *   → a module Worker that receives the user code by message. Before user code runs, the worker's
+ *     ambient globals that could reach the process or the protocol (`Deno`, `postMessage`, `fetch`,
+ *     `Worker`, ...) are replaced with `undefined` and `console` is redirected to log messages.
+ *
+ * Protocol: the supervisor talks to the host over stdin/stdout with one JSON frame per line,
+ * prefixed by a random token the supervisor generates and announces before the worker exists.
+ * The worker never sees the token, so it cannot forge frames; any other stdout bytes are treated
+ * as untrusted log text. All child output is untrusted: frames are size-bounded and validated, the
+ * execution settles exactly once, and the process group is killed on every exit path. A frame can
+ * never cancel the host's deadline or its cleanup.
  */
 export declare class DenoRunner implements SandboxRunner {
+    private readonly limits;
     kind: "deno";
+    private static supervisorPath?;
+    constructor(limits?: SandboxLimits);
     available(): Promise<boolean>;
+    /** The supervisor holds no user data; it is written once per process, readable only by us. */
+    private static supervisor;
     execute(opts: ExecuteOptions, rpc: RpcBridge): Promise<ExecuteResult>;
 }
-export declare function buildDenoRunner(userCode: string, timeoutMs: number, bindings: string[]): string;
+/**
+ * Runs in Deno with no permissions. Holds no user data until the start frame arrives over stdin.
+ * Binding names come from the host (pre-validated identifiers) and are only used as object keys.
+ */
+export declare const SUPERVISOR_SOURCE: string;
 //# sourceMappingURL=deno.d.ts.map

package/dist/sandbox/deno.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"deno.d.ts","sourceRoot":"","sources":["../../src/sandbox/deno.ts"],"names":[],"mappings":"AAIA,OAAO,KAAK,EAAE,cAAc,EAAE,aAAa,EAAE,SAAS,EAAE,aAAa,EAAE,MAAM,YAAY,CAAC;AAG1F;;;;GAIG;AACH,qBAAa,UAAW,YAAW,aAAa;IAC9C,IAAI,EAAG,MAAM,CAAU;IAEjB,SAAS,IAAI,OAAO,CAAC,OAAO,CAAC;IAQ7B,OAAO,CAAC,IAAI,EAAE,cAAc,EAAE,GAAG,EAAE,SAAS,GAAG,OAAO,CAAC,aAAa,CAAC;CAwF5E;AAWD,wBAAgB,eAAe,CAAC,QAAQ,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,EAAE,GAAG,MAAM,CAgF/F"}
+{"version":3,"file":"deno.d.ts","sourceRoot":"","sources":["../../src/sandbox/deno.ts"],"names":[],"mappings":"AAIA,OAAO,KAAK,EAAE,cAAc,EAAE,aAAa,EAAE,SAAS,EAAE,aAAa,EAAE,MAAM,YAAY,CAAC;AAG1F,OAAO,EAAwJ,KAAK,aAAa,EAAE,MAAM,aAAa,CAAC;AAEvM;;;;;;;;;;;;;;;;GAgBG;AACH,qBAAa,UAAW,YAAW,aAAa;IAIlC,OAAO,CAAC,QAAQ,CAAC,MAAM;IAHnC,IAAI,EAAG,MAAM,CAAU;IACvB,OAAO,CAAC,MAAM,CAAC,cAAc,CAAC,CAAS;gBAEV,MAAM,GAAE,aAA8B;IAE7D,SAAS,IAAI,OAAO,CAAC,OAAO,CAAC;IAQnC,8FAA8F;IAC9F,OAAO,CAAC,MAAM,CAAC,UAAU;IAanB,OAAO,CAAC,IAAI,EAAE,cAAc,EAAE,GAAG,EAAE,SAAS,GAAG,OAAO,CAAC,aAAa,CAAC;CA0J5E;AAqBD;;;GAGG;AACH,eAAO,MAAM,iBAAiB,QAgI7B,CAAC"}

package/dist/sandbox/deno.js

@@ -1,203 +1,389 @@
 import { spawn } from 'node:child_process';
-import { mkdtempSync, rmSync, writeFileSync } from 'node:fs';
+import { existsSync, mkdtempSync, rmSync, writeFileSync, chmodSync } from 'node:fs';
 import { tmpdir } from 'node:os';
 import { join } from 'node:path';
+import { log } from '../util/logger.js';
 import { preflight } from './policy.js';
+import { DEFAULT_LIMITS, LOG_LINE_OVERHEAD, LOG_TRUNCATED, LogSink, MAX_ERROR_MESSAGE, boundMessage, checkRpcArgs, finishValue, policyMessage, resultTooLarge } from './limits.js';
 /**
- * Deno fallback sandbox. We launch `deno run --no-prompt <runner>` with NO
- * `--allow-*` flags, so Deno's deny-by-default grants no net/fs/env/ffi/subprocess
- * access, and bridge RPC over stdin/stdout using a length-prefixed JSON protocol.
+ * Deno sandbox.
+ *
+ * Boundary: Node host (owns the deadline, byte budgets, and the child's lifetime)
+ *   → `deno run` of a fixed supervisor script with NO --allow-* flags (deny-by-default: no net, fs,
+ *     env, ffi, subprocess), a minimal environment, and no user code on disk
+ *   → a module Worker that receives the user code by message. Before user code runs, the worker's
+ *     ambient globals that could reach the process or the protocol (`Deno`, `postMessage`, `fetch`,
+ *     `Worker`, ...) are replaced with `undefined` and `console` is redirected to log messages.
+ *
+ * Protocol: the supervisor talks to the host over stdin/stdout with one JSON frame per line,
+ * prefixed by a random token the supervisor generates and announces before the worker exists.
+ * The worker never sees the token, so it cannot forge frames; any other stdout bytes are treated
+ * as untrusted log text. All child output is untrusted: frames are size-bounded and validated, the
+ * execution settles exactly once, and the process group is killed on every exit path. A frame can
+ * never cancel the host's deadline or its cleanup.
  */
 export class DenoRunner {
+    limits;
     kind = 'deno';
+    static supervisorPath;
+    constructor(limits = DEFAULT_LIMITS) {
+        this.limits = limits;
+    }
     async available() {
         return await new Promise(resolve => {
-            const p = spawn('deno', ['--version'], { stdio: 'ignore' });
+            const p = spawn('deno', ['--version'], { stdio: 'ignore', env: childEnv() });
             p.on('error', () => resolve(false));
             p.on('exit', code => resolve(code === 0));
         });
     }
+    /** The supervisor holds no user data; it is written once per process, readable only by us. */
+    static supervisor() {
+        // Re-check on disk: a long-lived server's temp dir may be reaped by a tmp cleaner.
+        if (!DenoRunner.supervisorPath || !existsSync(DenoRunner.supervisorPath)) {
+            const dir = mkdtempSync(join(tmpdir(), 'fedreg-deno-'));
+            chmodSync(dir, 0o700);
+            const path = join(dir, 'supervisor.js');
+            writeFileSync(path, SUPERVISOR_SOURCE, { mode: 0o600 });
+            DenoRunner.supervisorPath = path;
+            process.once('exit', () => { try {
+                rmSync(dir, { recursive: true, force: true });
+            }
+            catch { /* ignore */ } });
+        }
+        return DenoRunner.supervisorPath;
+    }
     async execute(opts, rpc) {
         const started = Date.now();
+        const limits = { ...this.limits, ...(opts.limits ?? {}) };
+        const timeoutMs = opts.timeoutMs ?? 15_000;
+        const fail = (name, message, logs = []) => ({ ok: false, logs, error: { name, message }, durationMs: Date.now() - started });
         const policy = preflight(opts.code);
-        if (!policy.ok) {
-            return { ok: false, logs: [], error: { name: 'PolicyError', message: policy.errors.join('; ') }, durationMs: Date.now() - started };
+        if (!policy.ok)
+            return fail('PolicyError', policyMessage(policy.errors));
+        if (Buffer.byteLength(opts.code, 'utf8') > limits.maxCodeBytes)
+            return fail('CodeTooLarge', `Code exceeds ${limits.maxCodeBytes} bytes.`);
+        let child;
+        try {
+            child = spawn('deno', [
+                'run', '--no-prompt', '--no-config', '--no-lock', '--no-remote', '--no-npm', '--quiet',
+                `--v8-flags=--max-old-space-size=${Math.max(16, opts.memoryMb ?? 64)}`,
+                DenoRunner.supervisor(),
+            ], { stdio: ['pipe', 'pipe', 'pipe'], env: childEnv(), detached: process.platform !== 'win32' });
         }
-        const runner = buildDenoRunner(opts.code, opts.timeoutMs ?? 15_000, opts.bindings ?? []);
-        // Write the runner to a temp file rather than piping it on stdin: `deno run -`
-        // reads the program from stdin until EOF, but we keep stdin open as the RPC
-        // channel, so it would never start. A file path leaves stdin free for RPC.
-        const tmpDir = mkdtempSync(join(tmpdir(), 'fedreg-deno-'));
-        const runnerPath = join(tmpDir, 'runner.ts');
-        writeFileSync(runnerPath, runner);
-        const cleanup = () => { try {
-            rmSync(tmpDir, { recursive: true, force: true });
+        catch (err) {
+            return fail('SpawnError', err.message);
         }
-        catch { /* ignore */ } };
-        const child = spawn('deno', [
-            'run',
-            '--no-prompt',
-            runnerPath,
-        ], { stdio: ['pipe', 'pipe', 'pipe'] });
-        const logs = [];
-        let stdoutBuf = Buffer.alloc(0);
-        return await new Promise((resolve) => {
-            const timeout = setTimeout(() => {
+        const logs = new LogSink(limits.maxLogBytes, limits.maxLogLines);
+        return await new Promise(resolve => {
+            let settled = false;
+            let token;
+            let partial = [];
+            let partialLen = 0;
+            let bufferedBytes = 0;
+            let pendingRpc = 0;
+            // Choosing the outcome and tearing down are separate: the first terminal event fixes the
+            // result, and the promise resolves once the child has exited (bounded wait).
+            let exited = false;
+            const exitWaiters = [];
+            child.once('close', () => { exited = true; for (const w of exitWaiters.splice(0))
+                w(); });
+            const settle = (result) => {
+                if (settled)
+                    return;
+                settled = true;
+                clearTimeout(deadline);
+                const outcome = { ...result, logs: logs.lines(), durationMs: Date.now() - started };
+                killTree(child);
+                if (exited)
+                    return resolve(outcome);
+                // Normally the child exits within milliseconds of the kill. If it has not after 2 s, kill
+                // again, log it, and return the result anyway.
+                const giveUp = setTimeout(() => {
+                    log.error('sandbox.teardown_pending', { pid: child.pid });
+                    killTree(child);
+                    resolve(outcome);
+                }, 2000);
+                exitWaiters.push(() => { clearTimeout(giveUp); resolve(outcome); });
+            };
+            const deadline = setTimeout(() => settle({ ok: false, error: { name: 'TimeoutError', message: `Execution exceeded ${timeoutMs}ms` } }), timeoutMs);
+            child.on('error', err => settle({ ok: false, error: { name: 'SpawnError', message: err.message } }));
+            // 'close', not 'exit': stdout may still hold the final frame when the process exits.
+            child.on('close', code => settle({ ok: false, error: { name: 'ExitError', message: `The sandbox exited unexpectedly (code ${code}).` } }));
+            const send = (frame) => {
+                if (settled || !token)
+                    return;
+                let line;
                 try {
-                    child.kill('SIGKILL');
+                    line = `${token}${JSON.stringify(frame)}\n`;
                 }
-                catch { /* ignore */ }
-                cleanup();
-                resolve({
-                    ok: false, logs,
-                    error: { name: 'TimeoutError', message: `Execution exceeded ${opts.timeoutMs ?? 15_000}ms` },
-                    durationMs: Date.now() - started,
-                });
-            }, (opts.timeoutMs ?? 15_000) + 1_000);
-            child.stdout.on('data', async (chunk) => {
-                stdoutBuf = Buffer.concat([stdoutBuf, chunk]);
-                // length-prefixed JSON frames: 8-byte ascii hex length + payload
-                while (stdoutBuf.length >= 9) {
-                    const lenHex = stdoutBuf.subarray(0, 8).toString('ascii');
-                    if (stdoutBuf[8] !== 0x0a) {
-                        logs.push(stdoutBuf.toString('utf8'));
-                        stdoutBuf = Buffer.alloc(0);
-                        break;
-                    }
-                    const len = parseInt(lenHex, 16);
-                    if (Number.isNaN(len))
-                        break;
-                    if (stdoutBuf.length < 9 + len)
-                        break;
-                    const payload = stdoutBuf.subarray(9, 9 + len).toString('utf8');
-                    stdoutBuf = stdoutBuf.subarray(9 + len);
-                    const msg = JSON.parse(payload);
-                    if (msg.kind === 'log') {
-                        logs.push(msg.text);
+                catch {
+                    // An SDK result that cannot be serialized must still answer the call, or the sandbox waits for the deadline.
+                    const f = frame;
+                    if (f.t !== 'rpc-result')
+                        return;
+                    line = `${token}${JSON.stringify({ t: 'rpc-result', id: f.id, ok: false, error: { name: 'TypeError', message: 'The SDK result is not JSON-serializable.' } })}\n`;
+                }
+                try {
+                    child.stdin.write(line);
+                }
+                catch { /* child gone; exit handler settles */ }
+            };
+            const onFrame = async (raw) => {
+                let msg;
+                try {
+                    msg = JSON.parse(raw);
+                }
+                catch {
+                    return settle({ ok: false, error: { name: 'SandboxProtocolError', message: 'The sandbox sent a malformed frame.' } });
+                }
+                if (msg.t === 'log' && typeof msg.text === 'string')
+                    return logs.push(msg.text);
+                if (msg.t === 'rpc' && Number.isSafeInteger(msg.id) && typeof msg.binding === 'string'
+                    && Array.isArray(msg.path) && Array.isArray(msg.args)) {
+                    if (pendingRpc >= limits.maxPendingRpc) {
+                        return send({ t: 'rpc-result', id: msg.id, ok: false, error: { name: 'TooManyPendingCalls', message: `At most ${limits.maxPendingRpc} SDK calls may be pending at once.` } });
                     }
-                    else if (msg.kind === 'rpc') {
+                    const tooBig = checkRpcArgs(msg.args, limits);
+                    if (tooBig)
+                        return send({ t: 'rpc-result', id: msg.id, ok: false, error: tooBig });
+                    pendingRpc++;
+                    try {
                         const res = await rpc.dispatch({ binding: msg.binding, path: msg.path, args: msg.args });
-                        writeFrame(child.stdin, { kind: 'rpc-result', id: msg.id, ok: res.ok, value: res.value, error: res.error });
+                        send({ t: 'rpc-result', id: msg.id, ok: res.ok, value: res.value, error: res.error });
                     }
-                    else if (msg.kind === 'result') {
-                        clearTimeout(timeout);
-                        try {
-                            child.stdin.end();
-                        }
-                        catch { /* ignore */ }
-                        resolve({
-                            ok: msg.ok,
-                            logs,
-                            value: msg.value,
-                            error: msg.error,
-                            durationMs: Date.now() - started,
-                        });
+                    finally {
+                        pendingRpc--;
                     }
+                    return;
                 }
-            });
-            child.stderr.on('data', (b) => logs.push(b.toString('utf8')));
-            child.on('error', err => {
-                clearTimeout(timeout);
-                cleanup();
-                resolve({ ok: false, logs, error: { name: 'SpawnError', message: err.message }, durationMs: Date.now() - started });
-            });
-            child.on('exit', code => {
-                cleanup();
-                if (code !== 0 && code !== null) {
-                    clearTimeout(timeout);
-                    resolve({ ok: false, logs, error: { name: 'ExitError', message: `deno exited with ${code}` }, durationMs: Date.now() - started });
+                if (msg.t === 'done') {
+                    if (msg.ok === true && typeof msg.json === 'string')
+                        return settle(finishValue(msg.json, limits));
+                    if (msg.tooLarge === true && typeof msg.size === 'number')
+                        return settle({ ok: false, error: resultTooLarge(msg.size, limits) });
+                    const e = (msg.error ?? {});
+                    return settle({
+                        ok: false,
+                        error: {
+                            name: typeof e.name === 'string' ? e.name.slice(0, 100) : 'Error',
+                            message: typeof e.message === 'string' ? boundMessage(e.message) : 'Execution failed',
+                            ...(typeof e.status === 'number' ? { status: e.status } : {}),
+                        },
+                    });
+                }
+                return settle({ ok: false, error: { name: 'SandboxProtocolError', message: 'The sandbox sent an unexpected frame.' } });
+            };
+            child.stdout.setEncoding('utf8');
+            child.stdout.on('data', (chunk) => {
+                if (settled)
+                    return;
+                bufferedBytes += Buffer.byteLength(chunk, 'utf8');
+                if (bufferedBytes > limits.maxStdoutBytes) {
+                    return settle({ ok: false, error: { name: 'OutputTooLarge', message: `The sandbox produced more than ${limits.maxStdoutBytes} bytes of output.` } });
+                }
+                // Split only the new chunk, so a long unterminated frame is never rescanned or re-flattened.
+                const segments = chunk.split('\n');
+                const tail = segments.pop();
+                for (const seg of segments) {
+                    if (settled)
+                        return;
+                    const line = partial.length ? partial.join('') + seg : seg;
+                    partial = [];
+                    partialLen = 0;
+                    if (!token) {
+                        // The supervisor's first line announces the frame token; nothing else may precede it.
+                        const m = /^FEDREG-SANDBOX ([0-9a-f]{64})$/.exec(line);
+                        if (!m)
+                            return settle({ ok: false, error: { name: 'SandboxProtocolError', message: 'The sandbox did not start correctly.' } });
+                        token = m[1];
+                        send({ t: 'start', code: opts.code, bindings: opts.bindings ?? [], limits: {
+                                maxLogBytes: limits.maxLogBytes, maxLogLines: limits.maxLogLines, logLineOverhead: LOG_LINE_OVERHEAD,
+                                logTruncated: LOG_TRUNCATED, maxRpcArgBytes: limits.maxRpcArgBytes, maxResultBytes: limits.maxResultBytes,
+                                maxError: MAX_ERROR_MESSAGE,
+                            } });
+                        continue;
+                    }
+                    if (line.startsWith(token)) {
+                        onFrame(line.slice(token.length)).catch(err => settle({ ok: false, error: { name: 'SandboxProtocolError', message: boundMessage(String(err?.message ?? err)) } }));
+                    }
+                    else if (line.length)
+                        logs.push(line);
+                }
+                if (settled)
+                    return;
+                partial.push(tail);
+                partialLen += tail.length;
+                if (partialLen > limits.maxFrameBytes) {
+                    settle({ ok: false, error: { name: 'OutputTooLarge', message: `A sandbox message exceeded ${limits.maxFrameBytes} bytes.` } });
                 }
             });
+            child.stderr.setEncoding('utf8');
+            child.stderr.on('data', (chunk) => { if (!settled)
+                logs.push(chunk.trimEnd()); });
+            child.stdin.on('error', () => { });
         });
     }
 }
-function writeFrame(stream, obj) {
-    const payload = JSON.stringify(obj);
-    const len = Buffer.byteLength(payload, 'utf8').toString(16).padStart(8, '0');
-    stream.write(len + '\n' + payload);
+/** Only what Deno needs to start; never the server's secrets. */
+function childEnv() {
+    const env = { NO_COLOR: '1', DENO_NO_UPDATE_CHECK: '1', DENO_NO_PROMPT: '1' };
+    for (const k of ['PATH', 'HOME', 'DENO_DIR', 'TMPDIR', 'SystemRoot', 'USERPROFILE', 'LOCALAPPDATA']) {
+        if (process.env[k])
+            env[k] = process.env[k];
+    }
+    return env;
 }
-// `bindings` is interpolated into the generated source via JSON.stringify; it is safe
-// only because names are pre-validated as JS identifiers by getSources()
-// (src/sdk/sources/index.ts). Do NOT pass unvalidated strings here.
-export function buildDenoRunner(userCode, timeoutMs, bindings) {
-    // Runs inside deno. Talks to host over stdin/stdout with the same framing.
-    return `
-const enc = new TextEncoder();
-const dec = new TextDecoder();
-
-function writeFrame(obj) {
-  const s = JSON.stringify(obj);
-  const len = (new TextEncoder().encode(s)).byteLength.toString(16).padStart(8, '0');
-  Deno.stdout.writeSync(enc.encode(len + '\\n' + s));
+/** Kill the child and anything it started. POSIX: the whole process group. */
+function killTree(child) {
+    try {
+        child.stdin.destroy();
+    }
+    catch { /* ignore */ }
+    if (child.exitCode !== null || child.signalCode !== null)
+        return;
+    if (process.platform !== 'win32' && child.pid) {
+        try {
+            process.kill(-child.pid, 'SIGKILL');
+            return;
+        }
+        catch { /* fall through */ }
+    }
+    try {
+        child.kill('SIGKILL');
+    }
+    catch { /* ignore */ }
 }
+/**
+ * Runs in Deno with no permissions. Holds no user data until the start frame arrives over stdin.
+ * Binding names come from the host (pre-validated identifiers) and are only used as object keys.
+ */
+export const SUPERVISOR_SOURCE = String.raw `
+const enc = new TextEncoder();
+const bytes = new Uint8Array(32);
+crypto.getRandomValues(bytes);
+const TOKEN = Array.from(bytes, b => b.toString(16).padStart(2, '0')).join('');
+const writeLine = (s) => { const b = enc.encode(s + '\n'); let o = 0; while (o < b.length) o += Deno.stdout.writeSync(b.subarray(o)); };
+const frame = (obj) => writeLine(TOKEN + JSON.stringify(obj));
+writeLine('FEDREG-SANDBOX ' + TOKEN);
 
-let inbuf = new Uint8Array(0);
+const WORKER_SOURCE = ${'`'}
+// Trusted primitives, captured before user code exists: budgets below use these, so user code that
+// replaces JSON.stringify, TextEncoder or Promise.prototype.then cannot push oversized data out.
+const post = self.postMessage.bind(self);
+const listen = self.addEventListener.bind(self);
+const S = JSON.stringify, P = JSON.parse, Str = String, apply = Reflect.apply, then = Promise.prototype.then;
+const encoder = new TextEncoder(), encode = TextEncoder.prototype.encode, sl = String.prototype.slice;
+// The intrinsic %TypedArray%.prototype.byteLength getter, captured: user code may redefine
+// Uint8Array.prototype.length, but cannot change a getter we already hold.
+const byteLength = Object.getOwnPropertyDescriptor(Object.getPrototypeOf(Uint8Array.prototype), 'byteLength').get;
+const bytes = (s) => apply(byteLength, apply(encode, encoder, [s]), []);
+const cut = (s, n) => s.length > n ? apply(sl, s, [0, n]) : s;
+let started = false;
 const pending = new Map();
 let nextId = 1;
-
-async function readLoop() {
-  const reader = Deno.stdin.readable.getReader();
-  while (true) {
-    const { value, done } = await reader.read();
-    if (done) return;
-    const merged = new Uint8Array(inbuf.length + value.length);
-    merged.set(inbuf); merged.set(value, inbuf.length);
-    inbuf = merged;
-    while (inbuf.length >= 9) {
-      const lenHex = dec.decode(inbuf.subarray(0, 8));
-      const len = parseInt(lenHex, 16);
-      if (isNaN(len)) { inbuf = new Uint8Array(0); break; }
-      if (inbuf.length < 9 + len) break;
-      const payload = dec.decode(inbuf.subarray(9, 9 + len));
-      inbuf = inbuf.subarray(9 + len);
-      const msg = JSON.parse(payload);
-      if (msg.kind === 'rpc-result') {
-        const cb = pending.get(msg.id);
-        if (cb) { pending.delete(msg.id); cb(msg); }
-      }
-    }
+listen('message', (ev) => {
+  const m = ev.data;
+  if (m && m.t === 'rpc-result') {
+    const p = pending.get(m.id);
+    if (!p) return;
+    pending.delete(m.id);
+    if (m.ok) p.resolve(m.value);
+    else { const e = new Error(String(m.error?.message ?? 'SDK call failed')); e.name = String(m.error?.name ?? 'Error'); if (typeof m.error?.status === 'number') e.status = m.error.status; p.reject(e); }
+    return;
   }
-}
-readLoop();
-
+  if (!m || m.t !== 'start' || started) return;
+  started = true;
+  run(String(m.code), Array.isArray(m.bindings) ? m.bindings.map(String) : [], m.limits || {});
+});
+let L = {};
 function call(binding, path, args) {
   return new Promise((resolve, reject) => {
+    let json;
+    try { json = S(args ?? []); } catch (e) { reject(new TypeError('SDK arguments must be JSON-serializable')); return; }
+    if (typeof json !== 'string' || bytes(json) > L.maxRpcArgBytes) { const e = new Error('SDK call arguments exceed ' + L.maxRpcArgBytes + ' bytes.'); e.name = 'ArgumentsTooLarge'; reject(e); return; }
     const id = nextId++;
-    pending.set(id, (r) => {
-      if (!r.ok) { const e = new Error(r.error.message); e.name = r.error.name; reject(e); }
-      else resolve(r.value);
-    });
-    writeFrame({ kind: 'rpc', id, binding, path, args });
+    pending.set(id, { resolve, reject });
+    post({ t: 'rpc', id, binding, path, args: P(json) });
   });
 }
-
 function makeProxy(binding) {
-  const handler = (path) => new Proxy(function(){}, {
-    get(_, key) { return handler([...path, String(key)]); },
+  const handler = (path) => new Proxy(function () {}, {
+    get(_, key) { return typeof key === 'symbol' ? undefined : handler([...path, String(key)]); },
     apply(_, __, args) { return call(binding, path, args); },
   });
   return handler([]);
 }
+function run(code, bindings, limits) {
+  L = limits;
+  const show = (v) => { if (typeof v === 'string') return v; try { const j = S(v); return j === undefined ? Str(v) : j; } catch { return Str(v); } };
+  let logBytes = 0, logLines = 0, logDone = false;
+  const log = (...a) => {
+    if (logDone) return;
+    let text = '';
+    for (let i = 0; i < a.length; i++) text += (i ? ' ' : '') + show(a[i]);
+    text = cut(text, L.maxLogBytes);
+    logBytes += bytes(text) + L.logLineOverhead; logLines++;
+    if (logBytes > L.maxLogBytes - L.logTruncated.length - L.logLineOverhead || logLines >= L.maxLogLines) { logDone = true; text = L.logTruncated; }
+    post({ t: 'log', text });
+  };
+  self.console = { log, info: log, warn: log, error: log, debug: log };
+  for (const k of ['Deno', 'postMessage', 'close', 'fetch', 'WebSocket', 'WebSocketStream', 'Worker', 'EventSource',
+                   'navigator', 'caches', 'localStorage', 'sessionStorage', 'importScripts', 'BroadcastChannel']) {
+    try { Object.defineProperty(self, k, { value: undefined, writable: false, configurable: false }); } catch {}
+  }
+  for (const name of bindings) {
+    try { Object.defineProperty(self, name, { value: makeProxy(name), writable: false, configurable: false }); } catch {}
+  }
+  let fn;
+  try { fn = new Function('"use strict"; return (async () => {\\n' + code + '\\n})();'); }
+  catch (e) { post({ t: 'done', ok: false, error: { name: Str(e?.name ?? 'SyntaxError'), message: cut(Str(e?.message ?? e), L.maxError) } }); return; }
+  const fail = (e) => {
+    let name = 'Error', message = '', status;
+    try { name = cut(Str(e?.name ?? 'Error'), 100); message = cut(Str(e?.message !== undefined ? e.message : e), L.maxError); status = typeof e?.status === 'number' ? e.status : undefined; } catch {}
+    post({ t: 'done', ok: false, error: { name, message, ...(status === undefined ? {} : { status }) } });
+  };
+  const done = (value) => {
+    let json;
+    try { json = S(value === undefined ? null : value); } catch (e) { fail({ name: 'TypeError', message: 'The returned value is not JSON-serializable' }); return; }
+    if (typeof json !== 'string') json = 'null';
+    const size = bytes(json);
+    if (size > L.maxResultBytes) post({ t: 'done', ok: false, tooLarge: true, size });
+    else post({ t: 'done', ok: true, json });
+  };
+  let started;
+  try { started = fn(); } catch (e) { fail(e); return; }
+  apply(then, started, [done, fail]);
+}
+${'`'};
 
-const __bindings = ${JSON.stringify(bindings)};
-for (const name of __bindings) { globalThis[name] = makeProxy(name); }
-
-const origLog = console.log;
-console.log = (...a) => writeFrame({ kind: 'log', text: a.map(String).join(' ') });
-console.info = console.log; console.warn = console.log; console.error = console.log;
-
-const userFn = async () => {
-${userCode}
+const url = URL.createObjectURL(new Blob([WORKER_SOURCE], { type: 'application/javascript' }));
+const worker = new Worker(url, { type: 'module' });
+worker.onmessage = (ev) => {
+  const m = ev.data;
+  if (!m || typeof m !== 'object') return;
+  if (m.t === 'log') frame({ t: 'log', text: String(m.text).slice(0, 65536) });
+  else if (m.t === 'rpc') frame({ t: 'rpc', id: m.id, binding: m.binding, path: m.path, args: m.args });
+  else if (m.t === 'done') frame({ t: 'done', ok: m.ok === true, json: m.json, error: m.error, tooLarge: m.tooLarge === true, size: m.size });
 };
+worker.onerror = (e) => { e.preventDefault(); frame({ t: 'done', ok: false, error: { name: 'Error', message: String(e.message ?? 'Worker error') } }); };
 
-const timer = setTimeout(() => {
-  writeFrame({ kind: 'result', ok: false, error: { name: 'TimeoutError', message: 'Execution exceeded ${timeoutMs}ms' }});
-  Deno.exit(0);
-}, ${timeoutMs});
-
-userFn()
-  .then(value => { clearTimeout(timer); writeFrame({ kind: 'result', ok: true, value }); Deno.exit(0); })
-  .catch(err => { clearTimeout(timer); writeFrame({ kind: 'result', ok: false, error: { name: err.name || 'Error', message: err.message || String(err) }}); Deno.exit(0); });
-`;
+// Host → supervisor: token-prefixed JSON lines on stdin.
+const dec = new TextDecoder();
+let buf = '';
+for await (const chunk of Deno.stdin.readable) {
+  buf += dec.decode(chunk, { stream: true });
+  let nl;
+  while ((nl = buf.indexOf('\n')) >= 0) {
+    const line = buf.slice(0, nl);
+    buf = buf.slice(nl + 1);
+    if (!line.startsWith(TOKEN)) continue;
+    let msg;
+    try { msg = JSON.parse(line.slice(TOKEN.length)); } catch { continue; }
+    if (msg.t === 'start') worker.postMessage({ t: 'start', code: msg.code, bindings: msg.bindings, limits: msg.limits });
+    else if (msg.t === 'rpc-result') worker.postMessage(msg);
+  }
 }
+// The host went away (stdin closed): do not leave a possibly busy Worker running as an orphan.
+Deno.exit(0);
+`;
 //# sourceMappingURL=deno.js.map

package/dist/sandbox/deno.js.map

@@ -1 +1 @@
-{"version":3,"file":"deno.js","sourceRoot":"","sources":["../../src/sandbox/deno.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,KAAK,EAAE,MAAM,oBAAoB,CAAC;AAC3C,OAAO,EAAE,WAAW,EAAE,MAAM,EAAE,aAAa,EAAE,MAAM,SAAS,CAAC;AAC7D,OAAO,EAAE,MAAM,EAAE,MAAM,SAAS,CAAC;AACjC,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AAEjC,OAAO,EAAE,SAAS,EAAE,MAAM,aAAa,CAAC;AAExC;;;;GAIG;AACH,MAAM,OAAO,UAAU;IACrB,IAAI,GAAG,MAAe,CAAC;IAEvB,KAAK,CAAC,SAAS;QACb,OAAO,MAAM,IAAI,OAAO,CAAC,OAAO,CAAC,EAAE;YACjC,MAAM,CAAC,GAAG,KAAK,CAAC,MAAM,EAAE,CAAC,WAAW,CAAC,EAAE,EAAE,KAAK,EAAE,QAAQ,EAAE,CAAC,CAAC;YAC5D,CAAC,CAAC,EAAE,CAAC,OAAO,EAAE,GAAG,EAAE,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC;YACpC,CAAC,CAAC,EAAE,CAAC,MAAM,EAAE,IAAI,CAAC,EAAE,CAAC,OAAO,CAAC,IAAI,KAAK,CAAC,CAAC,CAAC,CAAC;QAC5C,CAAC,CAAC,CAAC;IACL,CAAC;IAED,KAAK,CAAC,OAAO,CAAC,IAAoB,EAAE,GAAc;QAChD,MAAM,OAAO,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QAC3B,MAAM,MAAM,GAAG,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACpC,IAAI,CAAC,MAAM,CAAC,EAAE,EAAE,CAAC;YACf,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,EAAE,EAAE,KAAK,EAAE,EAAE,IAAI,EAAE,aAAa,EAAE,OAAO,EAAE,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,EAAE,UAAU,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,OAAO,EAAE,CAAC;QACtI,CAAC;QAED,MAAM,MAAM,GAAG,eAAe,CAAC,IAAI,CAAC,IAAI,EAAE,IAAI,CAAC,SAAS,IAAI,MAAM,EAAE,IAAI,CAAC,QAAQ,IAAI,EAAE,CAAC,CAAC;QACzF,+EAA+E;QAC/E,4EAA4E;QAC5E,2EAA2E;QAC3E,MAAM,MAAM,GAAG,WAAW,CAAC,IAAI,CAAC,MAAM,EAAE,EAAE,cAAc,CAAC,CAAC,CAAC;QAC3D,MAAM,UAAU,GAAG,IAAI,CAAC,MAAM,EAAE,WAAW,CAAC,CAAC;QAC7C,aAAa,CAAC,UAAU,EAAE,MAAM,CAAC,CAAC;QAClC,MAAM,OAAO,GAAG,GAAS,EAAE,GAAG,IAAI,CAAC;YAAC,MAAM,CAAC,MAAM,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;QAAC,CAAC;QAAC,MAAM,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC,CAAC;QACjH,MAAM,KAAK,GAAG,KAAK,CAAC,MAAM,EAAE;YAC1B,KAAK;YACL,aAAa;YACb,UAAU;SACX,EAAE,EAAE,KAAK,EAAE,CAAC,MAAM,EAAE,MAAM,EAAE,MAAM,CAAC,EAAE,CAAC,CAAC;QAExC,MAAM,IAAI,GAAa,EAAE,CAAC;QAC1B,IAAI,SAAS,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;QAEhC,OAAO,MAAM,IAAI,OAAO,CAAgB,CAAC,OAAO,EAAE,EAAE;YAClD,MAAM,OAAO,GAAG,UAAU,CAAC,GAAG,EAAE;gBAC9B,IAAI,CAAC;oBAAC,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;gBAAC,CAAC;gBAAC,MAAM,CAAC,CAAC,YAAY,CAAC,CAAC;gBACrD,OAAO,EAAE,CAAC;gBACV,OAAO,CAAC;oBACN,EAAE,EAAE,KAAK,EAAE,IAAI;oBACf,KAAK,EAAE,EAAE,IAAI,EAAE,cAAc,EAAE,OAAO,EAAE,sBAAsB,IAAI,CAAC,SAAS,IAAI,MAAM,IAAI,EAAE;oBAC5F,UAAU,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,OAAO;iBACjC,CAAC,CAAC;YACL,CAAC,EAAE,CAAC,IAAI,CAAC,SAAS,IAAI,MAAM,CAAC,GAAG,KAAK,CAAC,CAAC;YAEvC,KAAK,CAAC,MAAM,CAAC,EAAE,CAAC,MAAM,EAAE,KAAK,EAAE,KAAa,EAAE,EAAE;gBAC9C,SAAS,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC,SAAS,EAAE,KAAK,CAAC,CAAC,CAAC;gBAC9C,iEAAiE;gBACjE,OAAO,SAAS,CAAC,MAAM,IAAI,CAAC,EAAE,CAAC;oBAC7B,MAAM,MAAM,GAAG,SAAS,CAAC,QAAQ,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC;oBAC1D,IAAI,SAAS,CAAC,CAAC,CAAC,KAAK,IAAI,EAAE,CAAC;wBAC1B,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC;wBACtC,SAAS,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;wBAC5B,MAAM;oBACR,CAAC;oBACD,MAAM,GAAG,GAAG,QAAQ,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;oBACjC,IAAI,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC;wBAAE,MAAM;oBAC7B,IAAI,SAAS,CAAC,MAAM,GAAG,CAAC,GAAG,GAAG;wBAAE,MAAM;oBACtC,MAAM,OAAO,GAAG,SAAS,CAAC,QAAQ,CAAC,CAAC,EAAE,CAAC,GAAG,GAAG,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;oBAChE,SAAS,GAAG,SAAS,CAAC,QAAQ,CAAC,CAAC,GAAG,GAAG,CAAC,CAAC;oBACxC,MAAM,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,OAAO,CAGiE,CAAC;oBAChG,IAAI,GAAG,CAAC,IAAI,KAAK,KAAK,EAAE,CAAC;wBACvB,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;oBACtB,CAAC;yBAAM,IAAI,GAAG,CAAC,IAAI,KAAK,KAAK,EAAE,CAAC;wBAC9B,MAAM,GAAG,GAAG,MAAM,GAAG,CAAC,QAAQ,CAAC,EAAE,OAAO,EAAE,GAAG,CAAC,OAAO,EAAE,IAAI,EAAE,GAAG,CAAC,IAAI,EAAE,IAAI,EAAE,GAAG,CAAC,IAAI,EAAE,CAAC,CAAC;wBACzF,UAAU,CAAC,KAAK,CAAC,KAAK,EAAE,EAAE,IAAI,EAAE,YAAY,EAAE,EAAE,EAAE,GAAG,CAAC,EAAE,EAAE,EAAE,EAAE,GAAG,CAAC,EAAE,EAAE,KAAK,EAAE,GAAG,CAAC,KAAK,EAAE,KAAK,EAAE,GAAG,CAAC,KAAK,EAAE,CAAC,CAAC;oBAC9G,CAAC;yBAAM,IAAI,GAAG,CAAC,IAAI,KAAK,QAAQ,EAAE,CAAC;wBACjC,YAAY,CAAC,OAAO,CAAC,CAAC;wBACtB,IAAI,CAAC;4BAAC,KAAK,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC;wBAAC,CAAC;wBAAC,MAAM,CAAC,CAAC,YAAY,CAAC,CAAC;wBACjD,OAAO,CAAC;4BACN,EAAE,EAAE,GAAG,CAAC,EAAE;4BACV,IAAI;4BACJ,KAAK,EAAE,GAAG,CAAC,KAAK;4BAChB,KAAK,EAAE,GAAG,CAAC,KAAK;4BAChB,UAAU,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,OAAO;yBACjC,CAAC,CAAC;oBACL,CAAC;gBACH,CAAC;YACH,CAAC,CAAC,CAAC;YAEH,KAAK,CAAC,MAAM,CAAC,EAAE,CAAC,MAAM,EAAE,CAAC,CAAS,EAAE,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC;YACtE,KAAK,CAAC,EAAE,CAAC,OAAO,EAAE,GAAG,CAAC,EAAE;gBACtB,YAAY,CAAC,OAAO,CAAC,CAAC;gBACtB,OAAO,EAAE,CAAC;gBACV,OAAO,CAAC,EAAE,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,KAAK,EAAE,EAAE,IAAI,EAAE,YAAY,EAAE,OAAO,EAAE,GAAG,CAAC,OAAO,EAAE,EAAE,UAAU,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,OAAO,EAAE,CAAC,CAAC;YACtH,CAAC,CAAC,CAAC;YACH,KAAK,CAAC,EAAE,CAAC,MAAM,EAAE,IAAI,CAAC,EAAE;gBACtB,OAAO,EAAE,CAAC;gBACV,IAAI,IAAI,KAAK,CAAC,IAAI,IAAI,KAAK,IAAI,EAAE,CAAC;oBAChC,YAAY,CAAC,OAAO,CAAC,CAAC;oBACtB,OAAO,CAAC,EAAE,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,KAAK,EAAE,EAAE,IAAI,EAAE,WAAW,EAAE,OAAO,EAAE,oBAAoB,IAAI,EAAE,EAAE,EAAE,UAAU,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,OAAO,EAAE,CAAC,CAAC;gBACpI,CAAC;YACH,CAAC,CAAC,CAAC;QACL,CAAC,CAAC,CAAC;IACL,CAAC;CACF;AAED,SAAS,UAAU,CAAC,MAA6B,EAAE,GAAY;IAC7D,MAAM,OAAO,GAAG,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC;IACpC,MAAM,GAAG,GAAG,MAAM,CAAC,UAAU,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC;IAC7E,MAAM,CAAC,KAAK,CAAC,GAAG,GAAG,IAAI,GAAG,OAAO,CAAC,CAAC;AACrC,CAAC;AAED,sFAAsF;AACtF,yEAAyE;AACzE,oEAAoE;AACpE,MAAM,UAAU,eAAe,CAAC,QAAgB,EAAE,SAAiB,EAAE,QAAkB;IACrF,2EAA2E;IAC3E,OAAO;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;qBA0DY,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC;;;;;;;;EAQ3C,QAAQ;;;;wGAI8F,SAAS;;KAE5G,SAAS;;;;;CAKb,CAAC;AACF,CAAC"}
+{"version":3,"file":"deno.js","sourceRoot":"","sources":["../../src/sandbox/deno.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,KAAK,EAAuC,MAAM,oBAAoB,CAAC;AAChF,OAAO,EAAE,UAAU,EAAE,WAAW,EAAE,MAAM,EAAE,aAAa,EAAE,SAAS,EAAE,MAAM,SAAS,CAAC;AACpF,OAAO,EAAE,MAAM,EAAE,MAAM,SAAS,CAAC;AACjC,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AAEjC,OAAO,EAAE,GAAG,EAAE,MAAM,mBAAmB,CAAC;AACxC,OAAO,EAAE,SAAS,EAAE,MAAM,aAAa,CAAC;AACxC,OAAO,EAAE,cAAc,EAAE,iBAAiB,EAAE,aAAa,EAAE,OAAO,EAAE,iBAAiB,EAAE,YAAY,EAAE,YAAY,EAAE,WAAW,EAAE,aAAa,EAAE,cAAc,EAAsB,MAAM,aAAa,CAAC;AAEvM;;;;;;;;;;;;;;;;GAgBG;AACH,MAAM,OAAO,UAAU;IAIQ;IAH7B,IAAI,GAAG,MAAe,CAAC;IACf,MAAM,CAAC,cAAc,CAAU;IAEvC,YAA6B,SAAwB,cAAc;QAAtC,WAAM,GAAN,MAAM,CAAgC;IAAG,CAAC;IAEvE,KAAK,CAAC,SAAS;QACb,OAAO,MAAM,IAAI,OAAO,CAAC,OAAO,CAAC,EAAE;YACjC,MAAM,CAAC,GAAG,KAAK,CAAC,MAAM,EAAE,CAAC,WAAW,CAAC,EAAE,EAAE,KAAK,EAAE,QAAQ,EAAE,GAAG,EAAE,QAAQ,EAAE,EAAE,CAAC,CAAC;YAC7E,CAAC,CAAC,EAAE,CAAC,OAAO,EAAE,GAAG,EAAE,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC;YACpC,CAAC,CAAC,EAAE,CAAC,MAAM,EAAE,IAAI,CAAC,EAAE,CAAC,OAAO,CAAC,IAAI,KAAK,CAAC,CAAC,CAAC,CAAC;QAC5C,CAAC,CAAC,CAAC;IACL,CAAC;IAED,8FAA8F;IACtF,MAAM,CAAC,UAAU;QACvB,mFAAmF;QACnF,IAAI,CAAC,UAAU,CAAC,cAAc,IAAI,CAAC,UAAU,CAAC,UAAU,CAAC,cAAc,CAAC,EAAE,CAAC;YACzE,MAAM,GAAG,GAAG,WAAW,CAAC,IAAI,CAAC,MAAM,EAAE,EAAE,cAAc,CAAC,CAAC,CAAC;YACxD,SAAS,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC;YACtB,MAAM,IAAI,GAAG,IAAI,CAAC,GAAG,EAAE,eAAe,CAAC,CAAC;YACxC,aAAa,CAAC,IAAI,EAAE,iBAAiB,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;YACxD,UAAU,CAAC,cAAc,GAAG,IAAI,CAAC;YACjC,OAAO,CAAC,IAAI,CAAC,MAAM,EAAE,GAAG,EAAE,GAAG,IAAI,CAAC;gBAAC,MAAM,CAAC,GAAG,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;YAAC,CAAC;YAAC,MAAM,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;QAChH,CAAC;QACD,OAAO,UAAU,CAAC,cAAc,CAAC;IACnC,CAAC;IAED,KAAK,CAAC,OAAO,CAAC,IAAoB,EAAE,GAAc;QAChD,MAAM,OAAO,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QAC3B,MAAM,MAAM,GAAG,EAAE,GAAG,IAAI,CAAC,MAAM,EAAE,GAAG,CAAC,IAAI,CAAC,MAAM,IAAI,EAAE,CAAC,EAAE,CAAC;QAC1D,MAAM,SAAS,GAAG,IAAI,CAAC,SAAS,IAAI,MAAM,CAAC;QAC3C,MAAM,IAAI,GAAG,CAAC,IAAY,EAAE,OAAe,EAAE,OAAiB,EAAE,EAAiB,EAAE,CACjF,CAAC,EAAE,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,KAAK,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,EAAE,UAAU,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,OAAO,EAAE,CAAC,CAAC;QAEpF,MAAM,MAAM,GAAG,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACpC,IAAI,CAAC,MAAM,CAAC,EAAE;YAAE,OAAO,IAAI,CAAC,aAAa,EAAE,aAAa,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC;QACzE,IAAI,MAAM,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,EAAE,MAAM,CAAC,GAAG,MAAM,CAAC,YAAY;YAAE,OAAO,IAAI,CAAC,cAAc,EAAE,gBAAgB,MAAM,CAAC,YAAY,SAAS,CAAC,CAAC;QAE1I,IAAI,KAAqC,CAAC;QAC1C,IAAI,CAAC;YACH,KAAK,GAAG,KAAK,CAAC,MAAM,EAAE;gBACpB,KAAK,EAAE,aAAa,EAAE,aAAa,EAAE,WAAW,EAAE,aAAa,EAAE,UAAU,EAAE,SAAS;gBACtF,mCAAmC,IAAI,CAAC,GAAG,CAAC,EAAE,EAAE,IAAI,CAAC,QAAQ,IAAI,EAAE,CAAC,EAAE;gBACtE,UAAU,CAAC,UAAU,EAAE;aACxB,EAAE,EAAE,KAAK,EAAE,CAAC,MAAM,EAAE,MAAM,EAAE,MAAM,CAAC,EAAE,GAAG,EAAE,QAAQ,EAAE,EAAE,QAAQ,EAAE,OAAO,CAAC,QAAQ,KAAK,OAAO,EAAE,CAAC,CAAC;QACnG,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,OAAO,IAAI,CAAC,YAAY,EAAG,GAAa,CAAC,OAAO,CAAC,CAAC;QACpD,CAAC;QAED,MAAM,IAAI,GAAG,IAAI,OAAO,CAAC,MAAM,CAAC,WAAW,EAAE,MAAM,CAAC,WAAW,CAAC,CAAC;QACjE,OAAO,MAAM,IAAI,OAAO,CAAgB,OAAO,CAAC,EAAE;YAChD,IAAI,OAAO,GAAG,KAAK,CAAC;YACpB,IAAI,KAAyB,CAAC;YAC9B,IAAI,OAAO,GAAa,EAAE,CAAC;YAC3B,IAAI,UAAU,GAAG,CAAC,CAAC;YACnB,IAAI,aAAa,GAAG,CAAC,CAAC;YACtB,IAAI,UAAU,GAAG,CAAC,CAAC;YAEnB,yFAAyF;YACzF,6EAA6E;YAC7E,IAAI,MAAM,GAAG,KAAK,CAAC;YACnB,MAAM,WAAW,GAAsB,EAAE,CAAC;YAC1C,KAAK,CAAC,IAAI,CAAC,OAAO,EAAE,GAAG,EAAE,GAAG,MAAM,GAAG,IAAI,CAAC,CAAC,KAAK,MAAM,CAAC,IAAI,WAAW,CAAC,MAAM,CAAC,CAAC,CAAC;gBAAE,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC;YAC1F,MAAM,MAAM,GAAG,CAAC,MAAkD,EAAE,EAAE;gBACpE,IAAI,OAAO;oBAAE,OAAO;gBACpB,OAAO,GAAG,IAAI,CAAC;gBACf,YAAY,CAAC,QAAQ,CAAC,CAAC;gBACvB,MAAM,OAAO,GAAG,EAAE,GAAG,MAAM,EAAE,IAAI,EAAE,IAAI,CAAC,KAAK,EAAE,EAAE,UAAU,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,OAAO,EAAE,CAAC;gBACpF,QAAQ,CAAC,KAAK,CAAC,CAAC;gBAChB,IAAI,MAAM;oBAAE,OAAO,OAAO,CAAC,OAAO,CAAC,CAAC;gBACpC,0FAA0F;gBAC1F,+CAA+C;gBAC/C,MAAM,MAAM,GAAG,UAAU,CAAC,GAAG,EAAE;oBAC7B,GAAG,CAAC,KAAK,CAAC,0BAA0B,EAAE,EAAE,GAAG,EAAE,KAAK,CAAC,GAAG,EAAE,CAAC,CAAC;oBAC1D,QAAQ,CAAC,KAAK,CAAC,CAAC;oBAChB,OAAO,CAAC,OAAO,CAAC,CAAC;gBACnB,CAAC,EAAE,IAAI,CAAC,CAAC;gBACT,WAAW,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,YAAY,CAAC,MAAM,CAAC,CAAC,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;YACtE,CAAC,CAAC;YACF,MAAM,QAAQ,GAAG,UAAU,CACzB,GAAG,EAAE,CAAC,MAAM,CAAC,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,EAAE,IAAI,EAAE,cAAc,EAAE,OAAO,EAAE,sBAAsB,SAAS,IAAI,EAAE,EAAE,CAAC,EAC1G,SAAS,CACV,CAAC;YACF,KAAK,CAAC,EAAE,CAAC,OAAO,EAAE,GAAG,CAAC,EAAE,CAAC,MAAM,CAAC,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,EAAE,IAAI,EAAE,YAAY,EAAE,OAAO,EAAE,GAAG,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC,CAAC;YACrG,qFAAqF;YACrF,KAAK,CAAC,EAAE,CAAC,OAAO,EAAE,IAAI,CAAC,EAAE,CAAC,MAAM,CAAC,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,EAAE,IAAI,EAAE,WAAW,EAAE,OAAO,EAAE,yCAAyC,IAAI,IAAI,EAAE,EAAE,CAAC,CAAC,CAAC;YAE3I,MAAM,IAAI,GAAG,CAAC,KAAc,EAAE,EAAE;gBAC9B,IAAI,OAAO,IAAI,CAAC,KAAK;oBAAE,OAAO;gBAC9B,IAAI,IAAY,CAAC;gBACjB,IAAI,CAAC;oBAAC,IAAI,GAAG,GAAG,KAAK,GAAG,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,IAAI,CAAC;gBAAC,CAAC;gBACpD,MAAM,CAAC;oBACL,6GAA6G;oBAC7G,MAAM,CAAC,GAAG,KAAqC,CAAC;oBAChD,IAAI,CAAC,CAAC,CAAC,KAAK,YAAY;wBAAE,OAAO;oBACjC,IAAI,GAAG,GAAG,KAAK,GAAG,IAAI,CAAC,SAAS,CAAC,EAAE,CAAC,EAAE,YAAY,EAAE,EAAE,EAAE,CAAC,CAAC,EAAE,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,EAAE,IAAI,EAAE,WAAW,EAAE,OAAO,EAAE,0CAA0C,EAAE,EAAE,CAAC,IAAI,CAAC;gBACpK,CAAC;gBACD,IAAI,CAAC;oBAAC,KAAK,CAAC,KAAK,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;gBAAC,CAAC;gBAAC,MAAM,CAAC,CAAC,sCAAsC,CAAC,CAAC;YACnF,CAAC,CAAC;YAEF,MAAM,OAAO,GAAG,KAAK,EAAE,GAAW,EAAE,EAAE;gBACpC,IAAI,GAA4B,CAAC;gBACjC,IAAI,CAAC;oBAAC,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAA4B,CAAC;gBAAC,CAAC;gBACzD,MAAM,CAAC;oBAAC,OAAO,MAAM,CAAC,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,EAAE,IAAI,EAAE,sBAAsB,EAAE,OAAO,EAAE,qCAAqC,EAAE,EAAE,CAAC,CAAC;gBAAC,CAAC;gBAChI,IAAI,GAAG,CAAC,CAAC,KAAK,KAAK,IAAI,OAAO,GAAG,CAAC,IAAI,KAAK,QAAQ;oBAAE,OAAO,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;gBAChF,IAAI,GAAG,CAAC,CAAC,KAAK,KAAK,IAAI,MAAM,CAAC,aAAa,CAAC,GAAG,CAAC,EAAE,CAAC,IAAI,OAAO,GAAG,CAAC,OAAO,KAAK,QAAQ;uBAC/E,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC;oBAC1D,IAAI,UAAU,IAAI,MAAM,CAAC,aAAa,EAAE,CAAC;wBACvC,OAAO,IAAI,CAAC,EAAE,CAAC,EAAE,YAAY,EAAE,EAAE,EAAE,GAAG,CAAC,EAAE,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,EAAE,IAAI,EAAE,qBAAqB,EAAE,OAAO,EAAE,WAAW,MAAM,CAAC,aAAa,oCAAoC,EAAE,EAAE,CAAC,CAAC;oBAChL,CAAC;oBACD,MAAM,MAAM,GAAG,YAAY,CAAC,GAAG,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;oBAC9C,IAAI,MAAM;wBAAE,OAAO,IAAI,CAAC,EAAE,CAAC,EAAE,YAAY,EAAE,EAAE,EAAE,GAAG,CAAC,EAAE,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,MAAM,EAAE,CAAC,CAAC;oBACnF,UAAU,EAAE,CAAC;oBACb,IAAI,CAAC;wBACH,MAAM,GAAG,GAAG,MAAM,GAAG,CAAC,QAAQ,CAAC,EAAE,OAAO,EAAE,GAAG,CAAC,OAAO,EAAE,IAAI,EAAE,GAAG,CAAC,IAAgB,EAAE,IAAI,EAAE,GAAG,CAAC,IAAI,EAAE,CAAC,CAAC;wBACrG,IAAI,CAAC,EAAE,CAAC,EAAE,YAAY,EAAE,EAAE,EAAE,GAAG,CAAC,EAAE,EAAE,EAAE,EAAE,GAAG,CAAC,EAAE,EAAE,KAAK,EAAE,GAAG,CAAC,KAAK,EAAE,KAAK,EAAE,GAAG,CAAC,KAAK,EAAE,CAAC,CAAC;oBACxF,CAAC;4BAAS,CAAC;wBACT,UAAU,EAAE,CAAC;oBACf,CAAC;oBACD,OAAO;gBACT,CAAC;gBACD,IAAI,GAAG,CAAC,CAAC,KAAK,MAAM,EAAE,CAAC;oBACrB,IAAI,GAAG,CAAC,EAAE,KAAK,IAAI,IAAI,OAAO,GAAG,CAAC,IAAI,KAAK,QAAQ;wBAAE,OAAO,MAAM,CAAC,WAAW,CAAC,GAAG,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC,CAAC;oBAClG,IAAI,GAAG,CAAC,QAAQ,KAAK,IAAI,IAAI,OAAO,GAAG,CAAC,IAAI,KAAK,QAAQ;wBAAE,OAAO,MAAM,CAAC,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,cAAc,CAAC,GAAG,CAAC,IAAI,EAAE,MAAM,CAAC,EAAE,CAAC,CAAC;oBACjI,MAAM,CAAC,GAAG,CAAC,GAAG,CAAC,KAAK,IAAI,EAAE,CAA4B,CAAC;oBACvD,OAAO,MAAM,CAAC;wBACZ,EAAE,EAAE,KAAK;wBACT,KAAK,EAAE;4BACL,IAAI,EAAE,OAAO,CAAC,CAAC,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC,CAAC,CAAC,OAAO;4BACjE,OAAO,EAAE,OAAO,CAAC,CAAC,OAAO,KAAK,QAAQ,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,kBAAkB;4BACrF,GAAG,CAAC,OAAO,CAAC,CAAC,MAAM,KAAK,QAAQ,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;yBAC9D;qBACF,CAAC,CAAC;gBACL,CAAC;gBACD,OAAO,MAAM,CAAC,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,EAAE,IAAI,EAAE,sBAAsB,EAAE,OAAO,EAAE,uCAAuC,EAAE,EAAE,CAAC,CAAC;YAC1H,CAAC,CAAC;YAEF,KAAK,CAAC,MAAM,CAAC,WAAW,CAAC,MAAM,CAAC,CAAC;YACjC,KAAK,CAAC,MAAM,CAAC,EAAE,CAAC,MAAM,EAAE,CAAC,KAAa,EAAE,EAAE;gBACxC,IAAI,OAAO;oBAAE,OAAO;gBACpB,aAAa,IAAI,MAAM,CAAC,UAAU,CAAC,KAAK,EAAE,MAAM,CAAC,CAAC;gBAClD,IAAI,aAAa,GAAG,MAAM,CAAC,cAAc,EAAE,CAAC;oBAC1C,OAAO,MAAM,CAAC,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,EAAE,IAAI,EAAE,gBAAgB,EAAE,OAAO,EAAE,kCAAkC,MAAM,CAAC,cAAc,mBAAmB,EAAE,EAAE,CAAC,CAAC;gBACvJ,CAAC;gBACD,6FAA6F;gBAC7F,MAAM,QAAQ,GAAG,KAAK,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;gBACnC,MAAM,IAAI,GAAG,QAAQ,CAAC,GAAG,EAAG,CAAC;gBAC7B,KAAK,MAAM,GAAG,IAAI,QAAQ,EAAE,CAAC;oBAC3B,IAAI,OAAO;wBAAE,OAAO;oBACpB,MAAM,IAAI,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,CAAC,GAAG,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC;oBAC3D,OAAO,GAAG,EAAE,CAAC;oBACb,UAAU,GAAG,CAAC,CAAC;oBACf,IAAI,CAAC,KAAK,EAAE,CAAC;wBACX,sFAAsF;wBACtF,MAAM,CAAC,GAAG,iCAAiC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;wBACvD,IAAI,CAAC,CAAC;4BAAE,OAAO,MAAM,CAAC,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,EAAE,IAAI,EAAE,sBAAsB,EAAE,OAAO,EAAE,sCAAsC,EAAE,EAAE,CAAC,CAAC;wBAC/H,KAAK,GAAG,CAAC,CAAC,CAAC,CAAE,CAAC;wBACd,IAAI,CAAC,EAAE,CAAC,EAAE,OAAO,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE,QAAQ,EAAE,IAAI,CAAC,QAAQ,IAAI,EAAE,EAAE,MAAM,EAAE;gCACzE,WAAW,EAAE,MAAM,CAAC,WAAW,EAAE,WAAW,EAAE,MAAM,CAAC,WAAW,EAAE,eAAe,EAAE,iBAAiB;gCACpG,YAAY,EAAE,aAAa,EAAE,cAAc,EAAE,MAAM,CAAC,cAAc,EAAE,cAAc,EAAE,MAAM,CAAC,cAAc;gCACzG,QAAQ,EAAE,iBAAiB;6BAC5B,EAAE,CAAC,CAAC;wBACL,SAAS;oBACX,CAAC;oBACD,IAAI,IAAI,CAAC,UAAU,CAAC,KAAK,CAAC,EAAE,CAAC;wBAC3B,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,EAAE,CAAC,MAAM,CAAC,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,EAAE,IAAI,EAAE,sBAAsB,EAAE,OAAO,EAAE,YAAY,CAAC,MAAM,CAAE,GAAa,EAAE,OAAO,IAAI,GAAG,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC;oBAChL,CAAC;yBACI,IAAI,IAAI,CAAC,MAAM;wBAAE,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;gBACxC,CAAC;gBACD,IAAI,OAAO;oBAAE,OAAO;gBACpB,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;gBACnB,UAAU,IAAI,IAAI,CAAC,MAAM,CAAC;gBAC1B,IAAI,UAAU,GAAG,MAAM,CAAC,aAAa,EAAE,CAAC;oBACtC,MAAM,CAAC,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,EAAE,IAAI,EAAE,gBAAgB,EAAE,OAAO,EAAE,8BAA8B,MAAM,CAAC,aAAa,SAAS,EAAE,EAAE,CAAC,CAAC;gBACjI,CAAC;YACH,CAAC,CAAC,CAAC;YACH,KAAK,CAAC,MAAM,CAAC,WAAW,CAAC,MAAM,CAAC,CAAC;YACjC,KAAK,CAAC,MAAM,CAAC,EAAE,CAAC,MAAM,EAAE,CAAC,KAAa,EAAE,EAAE,GAAG,IAAI,CAAC,OAAO;gBAAE,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;YAC1F,KAAK,CAAC,KAAK,CAAC,EAAE,CAAC,OAAO,EAAE,GAAG,EAAE,GAA4C,CAAC,CAAC,CAAC;QAC9E,CAAC,CAAC,CAAC;IACL,CAAC;CACF;AAED,iEAAiE;AACjE,SAAS,QAAQ;IACf,MAAM,GAAG,GAAsB,EAAE,QAAQ,EAAE,GAAG,EAAE,oBAAoB,EAAE,GAAG,EAAE,cAAc,EAAE,GAAG,EAAE,CAAC;IACjG,KAAK,MAAM,CAAC,IAAI,CAAC,MAAM,EAAE,MAAM,EAAE,UAAU,EAAE,QAAQ,EAAE,YAAY,EAAE,aAAa,EAAE,cAAc,CAAC,EAAE,CAAC;QACpG,IAAI,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC;YAAE,GAAG,CAAC,CAAC,CAAC,GAAG,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;IAC9C,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC;AAED,8EAA8E;AAC9E,SAAS,QAAQ,CAAC,KAAqC;IACrD,IAAI,CAAC;QAAC,KAAK,CAAC,KAAK,CAAC,OAAO,EAAE,CAAC;IAAC,CAAC;IAAC,MAAM,CAAC,CAAC,YAAY,CAAC,CAAC;IACrD,IAAI,KAAK,CAAC,QAAQ,KAAK,IAAI,IAAI,KAAK,CAAC,UAAU,KAAK,IAAI;QAAE,OAAO;IACjE,IAAI,OAAO,CAAC,QAAQ,KAAK,OAAO,IAAI,KAAK,CAAC,GAAG,EAAE,CAAC;QAC9C,IAAI,CAAC;YAAC,OAAO,CAAC,IAAI,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,SAAS,CAAC,CAAC;YAAC,OAAO;QAAC,CAAC;QAAC,MAAM,CAAC,CAAC,kBAAkB,CAAC,CAAC;IACnF,CAAC;IACD,IAAI,CAAC;QAAC,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;IAAC,CAAC;IAAC,MAAM,CAAC,CAAC,YAAY,CAAC,CAAC;AACvD,CAAC;AAED;;;GAGG;AACH,MAAM,CAAC,MAAM,iBAAiB,GAAG,MAAM,CAAC,GAAG,CAAA;;;;;;;;;wBASnB,GAAG;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;EAwFzB,GAAG;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;CA+BJ,CAAC"}

package/dist/sandbox/isolate.d.ts

@@ -1,6 +1,16 @@
 import type { ExecuteOptions, ExecuteResult, RpcBridge, SandboxRunner } from './types.js';
+import { type SandboxLimits } from './limits.js';
+/**
+ * isolated-vm sandbox: a fresh V8 isolate per execution with a heap cap. The host owns a
+ * wall-clock deadline that starts before setup: when it fires the isolate
+ * is disposed, which stops running code and rejects anything it awaits, and the execution settles
+ * once. V8's own `timeout` stays as a second guard for synchronous loops. This runs in the server
+ * process, so for hosted multi-user execution prefer the Deno runner (separate process).
+ */
 export declare class IsolateRunner implements SandboxRunner {
+    private readonly limits;
     kind: "isolate";
+    constructor(limits?: SandboxLimits);
     available(): Promise<boolean>;
     execute(opts: ExecuteOptions, rpc: RpcBridge): Promise<ExecuteResult>;
 }

package/dist/sandbox/isolate.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"isolate.d.ts","sourceRoot":"","sources":["../../src/sandbox/isolate.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,cAAc,EAAE,aAAa,EAAE,SAAS,EAAE,aAAa,EAAE,MAAM,YAAY,CAAC;AAoB1F,qBAAa,aAAc,YAAW,aAAa;IACjD,IAAI,EAAG,SAAS,CAAU;IAEpB,SAAS,IAAI,OAAO,CAAC,OAAO,CAAC;IAY7B,OAAO,CAAC,IAAI,EAAE,cAAc,EAAE,GAAG,EAAE,SAAS,GAAG,OAAO,CAAC,aAAa,CAAC;CAoF5E"}
+{"version":3,"file":"isolate.d.ts","sourceRoot":"","sources":["../../src/sandbox/isolate.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,cAAc,EAAE,aAAa,EAAE,SAAS,EAAE,aAAa,EAAE,MAAM,YAAY,CAAC;AAE1F,OAAO,EAA0I,KAAK,aAAa,EAAE,MAAM,aAAa,CAAC;AAWzL;;;;;;GAMG;AACH,qBAAa,aAAc,YAAW,aAAa;IAGrC,OAAO,CAAC,QAAQ,CAAC,MAAM;IAFnC,IAAI,EAAG,SAAS,CAAU;gBAEG,MAAM,GAAE,aAA8B;IAE7D,SAAS,IAAI,OAAO,CAAC,OAAO,CAAC;IAW7B,OAAO,CAAC,IAAI,EAAE,cAAc,EAAE,GAAG,EAAE,SAAS,GAAG,OAAO,CAAC,aAAa,CAAC;CA2I5E"}

package/dist/sandbox/isolate.js

@@ -1,4 +1,5 @@
 import { preflight } from './policy.js';
+import { DEFAULT_LIMITS, LOG_LINE_OVERHEAD, LOG_TRUNCATED, LogSink, MAX_ERROR_MESSAGE, boundMessage, finishValue, policyMessage, resultTooLarge } from './limits.js';
 async function loadIvm() {
     const mod = await import('isolated-vm');
     const candidate = (typeof mod.Isolate === 'function' ? mod : mod.default ?? {});
@@ -6,12 +7,22 @@ async function loadIvm() {
         throw new Error('isolated-vm native binding unavailable');
     return candidate;
 }
+/**
+ * isolated-vm sandbox: a fresh V8 isolate per execution with a heap cap. The host owns a
+ * wall-clock deadline that starts before setup: when it fires the isolate
+ * is disposed, which stops running code and rejects anything it awaits, and the execution settles
+ * once. V8's own `timeout` stays as a second guard for synchronous loops. This runs in the server
+ * process, so for hosted multi-user execution prefer the Deno runner (separate process).
+ */
 export class IsolateRunner {
+    limits;
     kind = 'isolate';
+    constructor(limits = DEFAULT_LIMITS) {
+        this.limits = limits;
+    }
     async available() {
         try {
             const ivm = await loadIvm();
-            // Confirm the native binding actually loaded by exercising it.
             const iso = new ivm.Isolate({ memoryLimit: 16 });
             iso.dispose();
             return true;
@@ -22,78 +33,154 @@ export class IsolateRunner {
     }
     async execute(opts, rpc) {
         const started = Date.now();
+        const limits = { ...this.limits, ...(opts.limits ?? {}) };
+        const timeoutMs = opts.timeoutMs ?? 15_000;
+        const logs = new LogSink(limits.maxLogBytes, limits.maxLogLines);
+        const done = (r) => ({ ...r, logs: logs.lines(), durationMs: Date.now() - started });
         const policy = preflight(opts.code);
-        if (!policy.ok) {
-            return {
-                ok: false,
-                logs: [],
-                error: { name: 'PolicyError', message: policy.errors.join('; ') },
-                durationMs: Date.now() - started,
-            };
+        if (!policy.ok)
+            return done({ ok: false, error: { name: 'PolicyError', message: policyMessage(policy.errors) } });
+        if (Buffer.byteLength(opts.code, 'utf8') > limits.maxCodeBytes) {
+            return done({ ok: false, error: { name: 'CodeTooLarge', message: `Code exceeds ${limits.maxCodeBytes} bytes.` } });
         }
-        // dynamic import — keeps the optional dep optional at runtime.
         const ivm = await loadIvm();
-        const isolate = new ivm.Isolate({ memoryLimit: opts.memoryMb ?? 64 });
-        const context = await isolate.createContext();
-        const jail = context.global;
-        await jail.set('global', jail.derefInto());
-        const logs = [];
-        // host-side log sink
-        await context.evalClosure(`globalThis.console = { log: (...a) => $0.applyIgnored(undefined, [a.map(String).join(' ')]),
-                              error: (...a) => $0.applyIgnored(undefined, [a.map(String).join(' ')]),
-                              warn: (...a) => $0.applyIgnored(undefined, [a.map(String).join(' ')]),
-                              info: (...a) => $0.applyIgnored(undefined, [a.map(String).join(' ')]) };`, [(line) => logs.push(String(line))], { arguments: { reference: true } });
-        // RPC bridge — pass the host function directly; `arguments: { reference: true }`
-        // auto-wraps each argument as a Reference inside the isolate.
-        const hostRpc = async (binding, path, args) => {
-            const result = await rpc.dispatch({ binding, path, args });
-            return new ivm.ExternalCopy(result).copyInto();
-        };
-        // Safe to interpolate: binding names are pre-validated as JS identifiers by
-        // getSources() (src/sdk/sources/index.ts). Do NOT interpolate unvalidated strings here.
-        const namesLiteral = JSON.stringify(opts.bindings ?? []);
-        await context.evalClosure(`function makeProxy(binding, rpc) {
-         const handler = (path) => new Proxy(function(){}, {
-           get(_, key) { return handler([...path, String(key)]); },
-           apply(_, __, args) {
-             return rpc.apply(
-               undefined,
-               [binding, path, args],
-               { arguments: { copy: true }, result: { promise: true, copy: true } },
-             ).then(r => {
-               if (!r.ok) { const e = new Error(r.error.message); e.name = r.error.name; throw e; }
-               return r.value;
-             });
-           },
-         });
-         return handler([]);
-       }
-       for (const name of ${namesLiteral}) { globalThis[name] = makeProxy(name, $0); }`, [hostRpc], { arguments: { reference: true } });
-        try {
-            const wrapped = `(async () => { ${opts.code}\n })()`;
-            const script = await isolate.compileScript(wrapped);
-            const result = await script.run(context, {
-                timeout: opts.timeoutMs ?? 15_000,
-                promise: true,
-                copy: true,
-            });
-            return { ok: true, value: result, logs, durationMs: Date.now() - started };
-        }
-        catch (err) {
-            const e = err;
-            return {
-                ok: false,
-                logs,
-                error: { name: e.name ?? 'Error', message: e.message ?? String(err), stack: e.stack },
-                durationMs: Date.now() - started,
-            };
-        }
-        finally {
+        const isolate = new ivm.Isolate({ memoryLimit: Math.max(16, opts.memoryMb ?? 64) });
+        let disposed = false;
+        const dispose = () => { if (!disposed) {
+            disposed = true;
             try {
-                context.release();
                 isolate.dispose();
             }
             catch { /* ignore */ }
+        } };
+        let stop;
+        const stopped = new Promise(resolve => { stop = resolve; });
+        const deadline = setTimeout(() => stop({ ok: false, error: { name: 'TimeoutError', message: `Execution exceeded ${timeoutMs}ms` } }), timeoutMs);
+        const run = async () => {
+            const context = await isolate.createContext();
+            const jail = context.global;
+            await jail.set('global', jail.derefInto());
+            // Trusted primitives are captured here, before any user code runs, and every budget (logs,
+            // SDK arguments, result, error) is enforced with them inside the isolate, in UTF-8 bytes, so
+            // replacing JSON.stringify, String.prototype methods or Promise.prototype.then cannot push an
+            // oversized value into the host copy path. The host re-checks everything it receives.
+            const L = {
+                maxLogBytes: limits.maxLogBytes, maxLogLines: limits.maxLogLines, overhead: LOG_LINE_OVERHEAD, marker: LOG_TRUNCATED,
+                maxRpcArgBytes: limits.maxRpcArgBytes, maxResultBytes: limits.maxResultBytes, maxError: MAX_ERROR_MESSAGE,
+            };
+            await context.evalClosure(`const L = ${JSON.stringify(L)};
+         const S = JSON.stringify, Str = String, apply = Reflect.apply, then = Promise.prototype.then;
+         const cca = String.prototype.charCodeAt, sl = String.prototype.slice, join = Array.prototype.join, map = Array.prototype.map;
+         const freeze = Object.freeze, define = Object.defineProperty, isArray = Array.isArray, create = Object.create;
+         const bytes = (s) => { let n = 0; const len = s.length; for (let i = 0; i < len; i++) { const c = apply(cca, s, [i]);
+           n += c < 0x80 ? 1 : c < 0x800 ? 2 : (c >= 0xD800 && c <= 0xDBFF) ? (i++, 4) : 3; } return n; };
+         const cut = (s, n) => s.length > n ? apply(sl, s, [0, n]) : s;
+         const show = (v) => { if (typeof v === 'string') return v; try { const j = S(v); return j === undefined ? Str(v) : j; } catch { return Str(v); } };
+         let used = 0, lines = 0, done = false;
+         const log = (...a) => {
+           if (done) return;
+           let text = cut(apply(join, apply(map, a, [show]), [' ']), L.maxLogBytes);
+           used += bytes(text) + L.overhead; lines++;
+           if (used > L.maxLogBytes - L.marker.length - L.overhead || lines >= L.maxLogLines) { done = true; text = L.marker; }
+           $0.applyIgnored(undefined, [text]);
+         };
+         define(globalThis, 'console', { value: freeze({ log, error: log, warn: log, info: log, debug: log }), writable: false, configurable: false });
+         const argsJson = (args) => { const j = S(isArray(args) ? args : []); if (bytes(j) > L.maxRpcArgBytes) return undefined; return j; };
+         const ok = (v) => { let j; try { j = S(v === undefined ? null : v); } catch (e) { return err({ name: 'TypeError', message: 'The returned value is not JSON-serializable' }); }
+           if (typeof j !== 'string') j = 'null';
+           const b = bytes(j); return b > L.maxResultBytes ? 'R' + b : 'V' + j; };
+         const err = (e) => { let name = 'Error', message = '', status;
+           try { name = cut(Str(e && e.name || 'Error'), 100); message = cut(Str(e && e.message !== undefined ? e.message : e), L.maxError); status = e && typeof e.status === 'number' ? e.status : undefined; } catch {}
+           // Null-prototype record of primitives: no inherited toJSON or getters can reshape it.
+           const rec = create(null); rec.name = name; rec.message = message; if (typeof status === 'number') rec.status = status;
+           // name/message were cut before serializing, so the JSON is bounded (escaping at most 6x);
+           // it is never sliced, which could break it and lose the name and status.
+           let out; try { out = S(rec); } catch {
+             const fb = create(null); fb.name = 'Error'; fb.message = 'The error could not be serialized.'; if (typeof status === 'number') fb.status = status;
+             out = S(fb); }
+           return 'E' + out; };
+         define(globalThis, '__fedregInternal', { value: freeze({ argsJson,
+           run: (fn) => apply(then, fn(), [ok, err]) }), writable: false, configurable: false, enumerable: false });`, [(line) => logs.push(String(line))], { arguments: { reference: true } });
+            let pending = 0;
+            const hostRpc = async (binding, path, argsJson) => {
+                const fail = (name, message) => new ivm.ExternalCopy({ ok: false, error: { name, message } }).copyInto();
+                if (disposed)
+                    return fail('AbortError', 'Execution has ended.');
+                if (pending >= limits.maxPendingRpc)
+                    return fail('TooManyPendingCalls', `At most ${limits.maxPendingRpc} SDK calls may be pending at once.`);
+                if (typeof argsJson !== 'string' || Buffer.byteLength(argsJson, 'utf8') > limits.maxRpcArgBytes)
+                    return fail('ArgumentsTooLarge', `SDK call arguments exceed ${limits.maxRpcArgBytes} bytes.`);
+                let args;
+                try {
+                    args = JSON.parse(argsJson);
+                }
+                catch {
+                    return fail('TypeError', 'SDK arguments must be JSON-serializable.');
+                }
+                pending++;
+                try {
+                    const result = await rpc.dispatch({ binding, path, args });
+                    return new ivm.ExternalCopy(result).copyInto();
+                }
+                finally {
+                    pending--;
+                }
+            };
+            // Binding names are pre-validated JS identifiers (getSources); safe to embed as JSON.
+            await context.evalClosure(`const internal = globalThis.__fedregInternal;
+         function makeProxy(binding, rpc) {
+           const handler = (path) => new Proxy(function(){}, {
+             get(_, key) { return typeof key === 'symbol' ? undefined : handler([...path, String(key)]); },
+             apply(_, __, args) {
+               let json;
+               try { json = internal.argsJson(args); } catch { return Promise.reject(new TypeError('SDK arguments must be JSON-serializable')); }
+               if (json === undefined) { const e = new Error('SDK call arguments exceed ${limits.maxRpcArgBytes} bytes.'); e.name = 'ArgumentsTooLarge'; return Promise.reject(e); }
+               return rpc.apply(undefined, [binding, path, json], { arguments: { copy: true }, result: { promise: true, copy: true } })
+                 .then(r => {
+                   if (!r.ok) { const e = new Error(r.error.message); e.name = r.error.name; if (typeof r.error.status === 'number') e.status = r.error.status; throw e; }
+                   return r.value;
+                 });
+             },
+           });
+           return handler([]);
+         }
+         for (const name of ${JSON.stringify(opts.bindings ?? [])}) {
+           Object.defineProperty(globalThis, name, { value: makeProxy(name, $0), writable: false, configurable: false });
+         }`, [hostRpc], { arguments: { reference: true } });
+            // 'V' + JSON (value), 'R' + bytes (result over budget, never transferred), 'E' + JSON (bounded
+            // error, so an SDK error's status survives the copy).
+            const script = await isolate.compileScript(`__fedregInternal.run(async () => { ${opts.code}\n })`);
+            const tagged = await script.run(context, { timeout: timeoutMs, promise: true, copy: true });
+            if (typeof tagged === 'string' && tagged.startsWith('V'))
+                return finishValue(tagged.slice(1), limits);
+            if (typeof tagged === 'string' && tagged.startsWith('R'))
+                return { ok: false, error: resultTooLarge(Number(tagged.slice(1)), limits) };
+            if (typeof tagged !== 'string' || !tagged.startsWith('E'))
+                return { ok: false, error: { name: 'SandboxProtocolError', message: 'The sandbox returned an invalid result.' } };
+            let e;
+            try {
+                e = JSON.parse(tagged.slice(1));
+            }
+            catch {
+                e = { name: 'Error', message: 'The sandbox returned an unreadable error.' };
+            }
+            return { ok: false, error: { name: String(e.name ?? 'Error').slice(0, 100), message: boundMessage(String(e.message ?? '')), ...(typeof e.status === 'number' ? { status: e.status } : {}) } };
+        };
+        try {
+            const outcome = await Promise.race([
+                run().catch((err) => {
+                    const e = err;
+                    if (disposed)
+                        return { ok: false, error: { name: 'TimeoutError', message: `Execution exceeded ${timeoutMs}ms` } };
+                    return { ok: false, error: { name: String(e?.name ?? 'Error').slice(0, 100), message: boundMessage(String(e?.message ?? err)), ...(typeof e?.status === 'number' ? { status: e.status } : {}) } };
+                }),
+                stopped,
+            ]);
+            return done(outcome);
+        }
+        finally {
+            clearTimeout(deadline);
+            dispose();
         }
     }
 }

package/dist/sandbox/isolate.js.map

@@ -1 +1 @@
-{"version":3,"file":"isolate.js","sourceRoot":"","sources":["../../src/sandbox/isolate.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,SAAS,EAAE,MAAM,aAAa,CAAC;AAYxC,KAAK,UAAU,OAAO;IACpB,MAAM,GAAG,GAAG,MAAM,MAAM,CAAC,aAAa,CAAoE,CAAC;IAC3G,MAAM,SAAS,GAAG,CAAC,OAAO,GAAG,CAAC,OAAO,KAAK,UAAU,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,IAAI,EAAE,CAA4B,CAAC;IAC3G,IAAI,OAAO,SAAS,CAAC,OAAO,KAAK,UAAU;QAAE,MAAM,IAAI,KAAK,CAAC,wCAAwC,CAAC,CAAC;IACvG,OAAO,SAAiC,CAAC;AAC3C,CAAC;AAED,MAAM,OAAO,aAAa;IACxB,IAAI,GAAG,SAAkB,CAAC;IAE1B,KAAK,CAAC,SAAS;QACb,IAAI,CAAC;YACH,MAAM,GAAG,GAAG,MAAM,OAAO,EAAE,CAAC;YAC5B,+DAA+D;YAC/D,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,OAAO,CAAC,EAAE,WAAW,EAAE,EAAE,EAAE,CAAC,CAAC;YACjD,GAAG,CAAC,OAAO,EAAE,CAAC;YACd,OAAO,IAAI,CAAC;QACd,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,KAAK,CAAC;QACf,CAAC;IACH,CAAC;IAED,KAAK,CAAC,OAAO,CAAC,IAAoB,EAAE,GAAc;QAChD,MAAM,OAAO,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QAC3B,MAAM,MAAM,GAAG,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACpC,IAAI,CAAC,MAAM,CAAC,EAAE,EAAE,CAAC;YACf,OAAO;gBACL,EAAE,EAAE,KAAK;gBACT,IAAI,EAAE,EAAE;gBACR,KAAK,EAAE,EAAE,IAAI,EAAE,aAAa,EAAE,OAAO,EAAE,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE;gBACjE,UAAU,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,OAAO;aACjC,CAAC;QACJ,CAAC;QAED,+DAA+D;QAC/D,MAAM,GAAG,GAAG,MAAM,OAAO,EAAS,CAAC;QACnC,MAAM,OAAO,GAAG,IAAI,GAAG,CAAC,OAAO,CAAC,EAAE,WAAW,EAAE,IAAI,CAAC,QAAQ,IAAI,EAAE,EAAE,CAAC,CAAC;QACtE,MAAM,OAAO,GAAG,MAAM,OAAO,CAAC,aAAa,EAAE,CAAC;QAC9C,MAAM,IAAI,GAAG,OAAO,CAAC,MAAM,CAAC;QAC5B,MAAM,IAAI,CAAC,GAAG,CAAC,QAAQ,EAAE,IAAI,CAAC,SAAS,EAAE,CAAC,CAAC;QAE3C,MAAM,IAAI,GAAa,EAAE,CAAC;QAE1B,qBAAqB;QACrB,MAAM,OAAO,CAAC,WAAW,CACvB;;;uGAGiG,EACjG,CAAC,CAAC,IAAY,EAAE,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,EAC3C,EAAE,SAAS,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,EAAE,CACnC,CAAC;QAEF,iFAAiF;QACjF,8DAA8D;QAC9D,MAAM,OAAO,GAAG,KAAK,EAAE,OAAe,EAAE,IAAc,EAAE,IAAe,EAAE,EAAE;YACzE,MAAM,MAAM,GAAG,MAAM,GAAG,CAAC,QAAQ,CAAC,EAAE,OAAO,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC;YAC3D,OAAO,IAAI,GAAG,CAAC,YAAY,CAAC,MAAM,CAAC,CAAC,QAAQ,EAAE,CAAC;QACjD,CAAC,CAAC;QAEF,4EAA4E;QAC5E,wFAAwF;QACxF,MAAM,YAAY,GAAG,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,QAAQ,IAAI,EAAE,CAAC,CAAC;QACzD,MAAM,OAAO,CAAC,WAAW,CACvB;;;;;;;;;;;;;;;;4BAgBsB,YAAY,+CAA+C,EACjF,CAAC,OAAO,CAAC,EACT,EAAE,SAAS,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,EAAE,CACnC,CAAC;QAEF,IAAI,CAAC;YACH,MAAM,OAAO,GAAG,kBAAkB,IAAI,CAAC,IAAI,SAAS,CAAC;YACrD,MAAM,MAAM,GAAG,MAAM,OAAO,CAAC,aAAa,CAAC,OAAO,CAAC,CAAC;YACpD,MAAM,MAAM,GAAG,MAAM,MAAM,CAAC,GAAG,CAAC,OAAO,EAAE;gBACvC,OAAO,EAAE,IAAI,CAAC,SAAS,IAAI,MAAM;gBACjC,OAAO,EAAE,IAAI;gBACb,IAAI,EAAE,IAAI;aACX,CAAC,CAAC;YACH,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,MAAM,EAAE,IAAI,EAAE,UAAU,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,OAAO,EAAE,CAAC;QAC7E,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,MAAM,CAAC,GAAG,GAAiC,CAAC;YAC5C,OAAO;gBACL,EAAE,EAAE,KAAK;gBACT,IAAI;gBACJ,KAAK,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,IAAI,OAAO,EAAE,OAAO,EAAE,CAAC,CAAC,OAAO,IAAI,MAAM,CAAC,GAAG,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC,KAAK,EAAE;gBACrF,UAAU,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,OAAO;aACjC,CAAC;QACJ,CAAC;gBAAS,CAAC;YACT,IAAI,CAAC;gBAAC,OAAO,CAAC,OAAO,EAAE,CAAC;gBAAC,OAAO,CAAC,OAAO,EAAE,CAAC;YAAC,CAAC;YAAC,MAAM,CAAC,CAAC,YAAY,CAAC,CAAC;QACtE,CAAC;IACH,CAAC;CACF"}
+{"version":3,"file":"isolate.js","sourceRoot":"","sources":["../../src/sandbox/isolate.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,SAAS,EAAE,MAAM,aAAa,CAAC;AACxC,OAAO,EAAE,cAAc,EAAE,iBAAiB,EAAE,aAAa,EAAE,OAAO,EAAE,iBAAiB,EAAE,YAAY,EAAE,WAAW,EAAE,aAAa,EAAE,cAAc,EAAsB,MAAM,aAAa,CAAC;AAIzL,KAAK,UAAU,OAAO;IACpB,MAAM,GAAG,GAAG,MAAM,MAAM,CAAC,aAAa,CAAoE,CAAC;IAC3G,MAAM,SAAS,GAAG,CAAC,OAAO,GAAG,CAAC,OAAO,KAAK,UAAU,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,IAAI,EAAE,CAA4B,CAAC;IAC3G,IAAI,OAAO,SAAS,CAAC,OAAO,KAAK,UAAU;QAAE,MAAM,IAAI,KAAK,CAAC,wCAAwC,CAAC,CAAC;IACvG,OAAO,SAAS,CAAC;AACnB,CAAC;AAED;;;;;;GAMG;AACH,MAAM,OAAO,aAAa;IAGK;IAF7B,IAAI,GAAG,SAAkB,CAAC;IAE1B,YAA6B,SAAwB,cAAc;QAAtC,WAAM,GAAN,MAAM,CAAgC;IAAG,CAAC;IAEvE,KAAK,CAAC,SAAS;QACb,IAAI,CAAC;YACH,MAAM,GAAG,GAAG,MAAM,OAAO,EAAE,CAAC;YAC5B,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,OAAO,CAAC,EAAE,WAAW,EAAE,EAAE,EAAE,CAAC,CAAC;YACjD,GAAG,CAAC,OAAO,EAAE,CAAC;YACd,OAAO,IAAI,CAAC;QACd,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,KAAK,CAAC;QACf,CAAC;IACH,CAAC;IAED,KAAK,CAAC,OAAO,CAAC,IAAoB,EAAE,GAAc;QAChD,MAAM,OAAO,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QAC3B,MAAM,MAAM,GAAG,EAAE,GAAG,IAAI,CAAC,MAAM,EAAE,GAAG,CAAC,IAAI,CAAC,MAAM,IAAI,EAAE,CAAC,EAAE,CAAC;QAC1D,MAAM,SAAS,GAAG,IAAI,CAAC,SAAS,IAAI,MAAM,CAAC;QAC3C,MAAM,IAAI,GAAG,IAAI,OAAO,CAAC,MAAM,CAAC,WAAW,EAAE,MAAM,CAAC,WAAW,CAAC,CAAC;QACjE,MAAM,IAAI,GAAG,CAAC,CAA6C,EAAiB,EAAE,CAAC,CAAC,EAAE,GAAG,CAAC,EAAE,IAAI,EAAE,IAAI,CAAC,KAAK,EAAE,EAAE,UAAU,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,OAAO,EAAE,CAAC,CAAC;QAEhJ,MAAM,MAAM,GAAG,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACpC,IAAI,CAAC,MAAM,CAAC,EAAE;YAAE,OAAO,IAAI,CAAC,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,EAAE,IAAI,EAAE,aAAa,EAAE,OAAO,EAAE,aAAa,CAAC,MAAM,CAAC,MAAM,CAAC,EAAE,EAAE,CAAC,CAAC;QAClH,IAAI,MAAM,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,EAAE,MAAM,CAAC,GAAG,MAAM,CAAC,YAAY,EAAE,CAAC;YAC/D,OAAO,IAAI,CAAC,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,EAAE,IAAI,EAAE,cAAc,EAAE,OAAO,EAAE,gBAAgB,MAAM,CAAC,YAAY,SAAS,EAAE,EAAE,CAAC,CAAC;QACrH,CAAC;QAED,MAAM,GAAG,GAAG,MAAM,OAAO,EAAE,CAAC;QAC5B,MAAM,OAAO,GAAG,IAAI,GAAG,CAAC,OAAO,CAAC,EAAE,WAAW,EAAE,IAAI,CAAC,GAAG,CAAC,EAAE,EAAE,IAAI,CAAC,QAAQ,IAAI,EAAE,CAAC,EAAE,CAAC,CAAC;QACpF,IAAI,QAAQ,GAAG,KAAK,CAAC;QACrB,MAAM,OAAO,GAAG,GAAG,EAAE,GAAG,IAAI,CAAC,QAAQ,EAAE,CAAC;YAAC,QAAQ,GAAG,IAAI,CAAC;YAAC,IAAI,CAAC;gBAAC,OAAO,CAAC,OAAO,EAAE,CAAC;YAAC,CAAC;YAAC,MAAM,CAAC,CAAC,YAAY,CAAC,CAAC;QAAC,CAAC,CAAC,CAAC,CAAC;QAEhH,IAAI,IAA8D,CAAC;QACnE,MAAM,OAAO,GAAG,IAAI,OAAO,CAA6C,OAAO,CAAC,EAAE,GAAG,IAAI,GAAG,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC;QACxG,MAAM,QAAQ,GAAG,UAAU,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,EAAE,IAAI,EAAE,cAAc,EAAE,OAAO,EAAE,sBAAsB,SAAS,IAAI,EAAE,EAAE,CAAC,EAAE,SAAS,CAAC,CAAC;QAEjJ,MAAM,GAAG,GAAG,KAAK,IAAyD,EAAE;YAC1E,MAAM,OAAO,GAAG,MAAM,OAAO,CAAC,aAAa,EAAE,CAAC;YAC9C,MAAM,IAAI,GAAG,OAAO,CAAC,MAAM,CAAC;YAC5B,MAAM,IAAI,CAAC,GAAG,CAAC,QAAQ,EAAE,IAAI,CAAC,SAAS,EAAE,CAAC,CAAC;YAC3C,2FAA2F;YAC3F,6FAA6F;YAC7F,8FAA8F;YAC9F,sFAAsF;YACtF,MAAM,CAAC,GAAG;gBACR,WAAW,EAAE,MAAM,CAAC,WAAW,EAAE,WAAW,EAAE,MAAM,CAAC,WAAW,EAAE,QAAQ,EAAE,iBAAiB,EAAE,MAAM,EAAE,aAAa;gBACpH,cAAc,EAAE,MAAM,CAAC,cAAc,EAAE,cAAc,EAAE,MAAM,CAAC,cAAc,EAAE,QAAQ,EAAE,iBAAiB;aAC1G,CAAC;YACF,MAAM,OAAO,CAAC,WAAW,CACvB,aAAa,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;qHAgC+E,EAC7G,CAAC,CAAC,IAAY,EAAE,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,EAC3C,EAAE,SAAS,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,EAAE,CACnC,CAAC;YACF,IAAI,OAAO,GAAG,CAAC,CAAC;YAChB,MAAM,OAAO,GAAG,KAAK,EAAE,OAAe,EAAE,IAAc,EAAE,QAAgB,EAAE,EAAE;gBAC1E,MAAM,IAAI,GAAG,CAAC,IAAY,EAAE,OAAe,EAAE,EAAE,CAAC,IAAI,GAAG,CAAC,YAAY,CAAC,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,EAAE,CAAC,CAAC,QAAQ,EAAE,CAAC;gBACzH,IAAI,QAAQ;oBAAE,OAAO,IAAI,CAAC,YAAY,EAAE,sBAAsB,CAAC,CAAC;gBAChE,IAAI,OAAO,IAAI,MAAM,CAAC,aAAa;oBAAE,OAAO,IAAI,CAAC,qBAAqB,EAAE,WAAW,MAAM,CAAC,aAAa,oCAAoC,CAAC,CAAC;gBAC7I,IAAI,OAAO,QAAQ,KAAK,QAAQ,IAAI,MAAM,CAAC,UAAU,CAAC,QAAQ,EAAE,MAAM,CAAC,GAAG,MAAM,CAAC,cAAc;oBAAE,OAAO,IAAI,CAAC,mBAAmB,EAAE,6BAA6B,MAAM,CAAC,cAAc,SAAS,CAAC,CAAC;gBAC/L,IAAI,IAAe,CAAC;gBACpB,IAAI,CAAC;oBAAC,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAc,CAAC;gBAAC,CAAC;gBAAC,MAAM,CAAC;oBAAC,OAAO,IAAI,CAAC,WAAW,EAAE,0CAA0C,CAAC,CAAC;gBAAC,CAAC;gBACjI,OAAO,EAAE,CAAC;gBACV,IAAI,CAAC;oBACH,MAAM,MAAM,GAAG,MAAM,GAAG,CAAC,QAAQ,CAAC,EAAE,OAAO,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC;oBAC3D,OAAO,IAAI,GAAG,CAAC,YAAY,CAAC,MAAM,CAAC,CAAC,QAAQ,EAAE,CAAC;gBACjD,CAAC;wBAAS,CAAC;oBACT,OAAO,EAAE,CAAC;gBACZ,CAAC;YACH,CAAC,CAAC;YACF,sFAAsF;YACtF,MAAM,OAAO,CAAC,WAAW,CACvB;;;;;;;0FAOkF,MAAM,CAAC,cAAc;;;;;;;;;;8BAUjF,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,QAAQ,IAAI,EAAE,CAAC;;WAEtD,EACH,CAAC,OAAO,CAAC,EACT,EAAE,SAAS,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,EAAE,CACnC,CAAC;YACF,+FAA+F;YAC/F,sDAAsD;YACtD,MAAM,MAAM,GAAG,MAAM,OAAO,CAAC,aAAa,CAAC,sCAAsC,IAAI,CAAC,IAAI,OAAO,CAAC,CAAC;YACnG,MAAM,MAAM,GAAG,MAAM,MAAM,CAAC,GAAG,CAAC,OAAO,EAAE,EAAE,OAAO,EAAE,SAAS,EAAE,OAAO,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,CAAW,CAAC;YACtG,IAAI,OAAO,MAAM,KAAK,QAAQ,IAAI,MAAM,CAAC,UAAU,CAAC,GAAG,CAAC;gBAAE,OAAO,WAAW,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,MAAM,CAAC,CAAC;YACtG,IAAI,OAAO,MAAM,KAAK,QAAQ,IAAI,MAAM,CAAC,UAAU,CAAC,GAAG,CAAC;gBAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,cAAc,CAAC,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,MAAM,CAAC,EAAE,CAAC;YACvI,IAAI,OAAO,MAAM,KAAK,QAAQ,IAAI,CAAC,MAAM,CAAC,UAAU,CAAC,GAAG,CAAC;gBAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,EAAE,IAAI,EAAE,sBAAsB,EAAE,OAAO,EAAE,yCAAyC,EAAE,EAAE,CAAC;YAC7K,IAAI,CAA0D,CAAC;YAC/D,IAAI,CAAC;gBAAC,CAAC,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAa,CAAC;YAAC,CAAC;YAAC,MAAM,CAAC;gBAAC,CAAC,GAAG,EAAE,IAAI,EAAE,OAAO,EAAE,OAAO,EAAE,2CAA2C,EAAE,CAAC;YAAC,CAAC;YAC3I,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,EAAE,IAAI,EAAE,MAAM,CAAC,CAAC,CAAC,IAAI,IAAI,OAAO,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,EAAE,OAAO,EAAE,YAAY,CAAC,MAAM,CAAC,CAAC,CAAC,OAAO,IAAI,EAAE,CAAC,CAAC,EAAE,GAAG,CAAC,OAAO,CAAC,CAAC,MAAM,KAAK,QAAQ,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC;QAChM,CAAC,CAAC;QAEF,IAAI,CAAC;YACH,MAAM,OAAO,GAAG,MAAM,OAAO,CAAC,IAAI,CAAC;gBACjC,GAAG,EAAE,CAAC,KAAK,CAAC,CAAC,GAAY,EAAE,EAAE;oBAC3B,MAAM,CAAC,GAAG,GAA4D,CAAC;oBACvE,IAAI,QAAQ;wBAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,EAAE,IAAI,EAAE,cAAc,EAAE,OAAO,EAAE,sBAAsB,SAAS,IAAI,EAAE,EAAE,CAAC;oBAClH,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,EAAE,IAAI,EAAE,MAAM,CAAC,CAAC,EAAE,IAAI,IAAI,OAAO,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,EAAE,OAAO,EAAE,YAAY,CAAC,MAAM,CAAC,CAAC,EAAE,OAAO,IAAI,GAAG,CAAC,CAAC,EAAE,GAAG,CAAC,OAAO,CAAC,EAAE,MAAM,KAAK,QAAQ,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC;gBACpM,CAAC,CAAC;gBACF,OAAO;aACR,CAAC,CAAC;YACH,OAAO,IAAI,CAAC,OAAO,CAAC,CAAC;QACvB,CAAC;gBAAS,CAAC;YACT,YAAY,CAAC,QAAQ,CAAC,CAAC;YACvB,OAAO,EAAE,CAAC;QACZ,CAAC;IACH,CAAC;CACF"}

package/dist/sandbox/limits.d.ts

@@ -0,0 +1,62 @@
+/**
+ * Byte budgets for one execution. They bound what the host buffers and what reaches the model,
+ * independently of the V8 heap limit inside the sandbox. The defaults are deliberately generous:
+ * they exist to stop runaway or hostile output, not to constrain ordinary queries (a filtered
+ * `ecfr.full` part or a page of Federal Register documents fits comfortably).
+ */
+export interface SandboxLimits {
+    /** Largest accepted user code. */
+    maxCodeBytes: number;
+    /** Total log size kept (text plus per-line overhead); later lines are dropped with a marker. */
+    maxLogBytes: number;
+    /** Most log lines kept, however short. */
+    maxLogLines: number;
+    /** Largest JSON-serialized return value; bigger results fail with ResultTooLarge. */
+    maxResultBytes: number;
+    /** Largest JSON-serialized argument list for one SDK call. */
+    maxRpcArgBytes: number;
+    /** SDK calls that may be awaiting a response at once. */
+    maxPendingRpc: number;
+    /** Deno only: total bytes the child may write to stdout over the execution. */
+    maxStdoutBytes: number;
+    /** Deno only: largest single frame (line) on stdout. */
+    maxFrameBytes: number;
+}
+export declare const DEFAULT_LIMITS: Readonly<SandboxLimits>;
+/** Bytes charged per log line on top of its text, so empty-line floods are bounded too. */
+export declare const LOG_LINE_OVERHEAD = 16;
+export declare const LOG_TRUNCATED = "[logs truncated]";
+/** Host-side log budget. The sandboxes enforce the same budget before sending (defense in depth). */
+export declare class LogSink {
+    private readonly max;
+    private readonly maxLines;
+    private readonly out;
+    private bytes;
+    private dropped;
+    constructor(max: number, maxLines?: number);
+    push(line: string): void;
+    lines(): string[];
+}
+export declare function checkRpcArgs(args: unknown[], limits: SandboxLimits): {
+    name: string;
+    message: string;
+} | undefined;
+/** Turn the sandbox's JSON result into the execute envelope, enforcing maxResultBytes. */
+export declare function finishValue(json: string, limits: SandboxLimits): {
+    ok: boolean;
+    value?: unknown;
+    error?: {
+        name: string;
+        message: string;
+    };
+};
+export declare function resultTooLarge(size: number, limits: SandboxLimits): {
+    name: string;
+    message: string;
+};
+/** Longest error message any execution reports. */
+export declare const MAX_ERROR_MESSAGE = 4000;
+export declare function boundMessage(message: string): string;
+/** Preflight diagnostics: distinct messages only, at most 10, bounded in total. */
+export declare function policyMessage(errors: string[]): string;
+//# sourceMappingURL=limits.d.ts.map

package/dist/sandbox/limits.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"limits.d.ts","sourceRoot":"","sources":["../../src/sandbox/limits.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AACH,MAAM,WAAW,aAAa;IAC5B,kCAAkC;IAClC,YAAY,EAAE,MAAM,CAAC;IACrB,gGAAgG;IAChG,WAAW,EAAE,MAAM,CAAC;IACpB,0CAA0C;IAC1C,WAAW,EAAE,MAAM,CAAC;IACpB,qFAAqF;IACrF,cAAc,EAAE,MAAM,CAAC;IACvB,8DAA8D;IAC9D,cAAc,EAAE,MAAM,CAAC;IACvB,yDAAyD;IACzD,aAAa,EAAE,MAAM,CAAC;IACtB,+EAA+E;IAC/E,cAAc,EAAE,MAAM,CAAC;IACvB,wDAAwD;IACxD,aAAa,EAAE,MAAM,CAAC;CACvB;AAED,eAAO,MAAM,cAAc,EAAE,QAAQ,CAAC,aAAa,CAWjD,CAAC;AAEH,2FAA2F;AAC3F,eAAO,MAAM,iBAAiB,KAAK,CAAC;AACpC,eAAO,MAAM,aAAa,qBAAqB,CAAC;AAEhD,qGAAqG;AACrG,qBAAa,OAAO;IAIN,OAAO,CAAC,QAAQ,CAAC,GAAG;IAAU,OAAO,CAAC,QAAQ,CAAC,QAAQ;IAHnE,OAAO,CAAC,QAAQ,CAAC,GAAG,CAAgB;IACpC,OAAO,CAAC,KAAK,CAAK;IAClB,OAAO,CAAC,OAAO,CAAS;gBACK,GAAG,EAAE,MAAM,EAAmB,QAAQ,SAA6B;IAChG,IAAI,CAAC,IAAI,EAAE,MAAM,GAAG,IAAI;IAcxB,KAAK,IAAI,MAAM,EAAE;CAClB;AAED,wBAAgB,YAAY,CAAC,IAAI,EAAE,OAAO,EAAE,EAAE,MAAM,EAAE,aAAa,GAAG;IAAE,IAAI,EAAE,MAAM,CAAC;IAAC,OAAO,EAAE,MAAM,CAAA;CAAE,GAAG,SAAS,CAOlH;AAED,0FAA0F;AAC1F,wBAAgB,WAAW,CAAC,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,aAAa,GAAG;IAAE,EAAE,EAAE,OAAO,CAAC;IAAC,KAAK,CAAC,EAAE,OAAO,CAAC;IAAC,KAAK,CAAC,EAAE;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,OAAO,EAAE,MAAM,CAAA;KAAE,CAAA;CAAE,CAK5I;AAED,wBAAgB,cAAc,CAAC,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,aAAa,GAAG;IAAE,IAAI,EAAE,MAAM,CAAC;IAAC,OAAO,EAAE,MAAM,CAAA;CAAE,CAMrG;AAED,mDAAmD;AACnD,eAAO,MAAM,iBAAiB,OAAO,CAAC;AAEtC,wBAAgB,YAAY,CAAC,OAAO,EAAE,MAAM,GAAG,MAAM,CAEpD;AAED,mFAAmF;AACnF,wBAAgB,aAAa,CAAC,MAAM,EAAE,MAAM,EAAE,GAAG,MAAM,CAItD"}

package/dist/sandbox/limits.js

@@ -0,0 +1,87 @@
+export const DEFAULT_LIMITS = Object.freeze({
+    maxCodeBytes: 256 * 1024,
+    maxLogBytes: 1024 * 1024,
+    maxLogLines: 10_000,
+    maxResultBytes: 8 * 1024 * 1024,
+    maxRpcArgBytes: 1024 * 1024,
+    // Matches the per-execute public call budget, so `Promise.all` over a full budget still works.
+    maxPendingRpc: 100,
+    maxStdoutBytes: 128 * 1024 * 1024,
+    // A result travels as an escaped JSON string inside a frame, so allow for escaping overhead.
+    maxFrameBytes: 48 * 1024 * 1024,
+});
+/** Bytes charged per log line on top of its text, so empty-line floods are bounded too. */
+export const LOG_LINE_OVERHEAD = 16;
+export const LOG_TRUNCATED = '[logs truncated]';
+/** Host-side log budget. The sandboxes enforce the same budget before sending (defense in depth). */
+export class LogSink {
+    max;
+    maxLines;
+    out = [];
+    bytes = 0;
+    dropped = false;
+    constructor(max, maxLines = DEFAULT_LIMITS.maxLogLines) {
+        this.max = max;
+        this.maxLines = maxLines;
+    }
+    push(line) {
+        if (this.dropped)
+            return;
+        const text = line.length > this.max ? line.slice(0, this.max) : line;
+        const cost = Buffer.byteLength(text, 'utf8') + LOG_LINE_OVERHEAD;
+        // Room for the marker is reserved up front, so the total never exceeds the budget.
+        const reserve = Buffer.byteLength(LOG_TRUNCATED, 'utf8') + LOG_LINE_OVERHEAD;
+        if (text === LOG_TRUNCATED || this.out.length >= this.maxLines - 1 || this.bytes + cost > this.max - reserve) {
+            this.dropped = true;
+            if (reserve <= this.max)
+                this.out.push(LOG_TRUNCATED);
+            return;
+        }
+        this.bytes += cost;
+        this.out.push(text);
+    }
+    lines() { return [...this.out]; }
+}
+export function checkRpcArgs(args, limits) {
+    let size;
+    try {
+        size = Buffer.byteLength(JSON.stringify(args) ?? '', 'utf8');
+    }
+    catch {
+        return { name: 'TypeError', message: 'SDK arguments must be JSON-serializable.' };
+    }
+    return size > limits.maxRpcArgBytes
+        ? { name: 'ArgumentsTooLarge', message: `SDK call arguments exceed ${limits.maxRpcArgBytes} bytes.` }
+        : undefined;
+}
+/** Turn the sandbox's JSON result into the execute envelope, enforcing maxResultBytes. */
+export function finishValue(json, limits) {
+    const size = Buffer.byteLength(json, 'utf8');
+    if (size > limits.maxResultBytes)
+        return { ok: false, error: resultTooLarge(size, limits) };
+    try {
+        return { ok: true, value: JSON.parse(json) };
+    }
+    catch {
+        return { ok: false, error: { name: 'SandboxProtocolError', message: 'The sandbox returned an invalid result.' } };
+    }
+}
+export function resultTooLarge(size, limits) {
+    return {
+        name: 'ResultTooLarge',
+        message: `The returned value is ${size} bytes; the limit is ${limits.maxResultBytes}. Return only what you need: `
+            + 'request fewer records (per_page), select fields, filter ecfr.full by part or section, map records to the attributes you need, or slice long text.',
+    };
+}
+/** Longest error message any execution reports. */
+export const MAX_ERROR_MESSAGE = 4000;
+export function boundMessage(message) {
+    return message.length > MAX_ERROR_MESSAGE ? `${message.slice(0, MAX_ERROR_MESSAGE)}… [truncated]` : message;
+}
+/** Preflight diagnostics: distinct messages only, at most 10, bounded in total. */
+export function policyMessage(errors) {
+    const unique = [...new Set(errors)];
+    const shown = unique.slice(0, 10).join('; ');
+    return boundMessage(unique.length > 10 ? `${shown}; and ${unique.length - 10} more` : shown);
+}
+//# sourceMappingURL=limits.js.map

package/dist/sandbox/limits.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"limits.js","sourceRoot":"","sources":["../../src/sandbox/limits.ts"],"names":[],"mappings":"AAyBA,MAAM,CAAC,MAAM,cAAc,GAA4B,MAAM,CAAC,MAAM,CAAC;IACnE,YAAY,EAAE,GAAG,GAAG,IAAI;IACxB,WAAW,EAAE,IAAI,GAAG,IAAI;IACxB,WAAW,EAAE,MAAM;IACnB,cAAc,EAAE,CAAC,GAAG,IAAI,GAAG,IAAI;IAC/B,cAAc,EAAE,IAAI,GAAG,IAAI;IAC3B,+FAA+F;IAC/F,aAAa,EAAE,GAAG;IAClB,cAAc,EAAE,GAAG,GAAG,IAAI,GAAG,IAAI;IACjC,6FAA6F;IAC7F,aAAa,EAAE,EAAE,GAAG,IAAI,GAAG,IAAI;CAChC,CAAC,CAAC;AAEH,2FAA2F;AAC3F,MAAM,CAAC,MAAM,iBAAiB,GAAG,EAAE,CAAC;AACpC,MAAM,CAAC,MAAM,aAAa,GAAG,kBAAkB,CAAC;AAEhD,qGAAqG;AACrG,MAAM,OAAO,OAAO;IAIW;IAA8B;IAH1C,GAAG,GAAa,EAAE,CAAC;IAC5B,KAAK,GAAG,CAAC,CAAC;IACV,OAAO,GAAG,KAAK,CAAC;IACxB,YAA6B,GAAW,EAAmB,WAAW,cAAc,CAAC,WAAW;QAAnE,QAAG,GAAH,GAAG,CAAQ;QAAmB,aAAQ,GAAR,QAAQ,CAA6B;IAAG,CAAC;IACpG,IAAI,CAAC,IAAY;QACf,IAAI,IAAI,CAAC,OAAO;YAAE,OAAO;QACzB,MAAM,IAAI,GAAG,IAAI,CAAC,MAAM,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;QACrE,MAAM,IAAI,GAAG,MAAM,CAAC,UAAU,CAAC,IAAI,EAAE,MAAM,CAAC,GAAG,iBAAiB,CAAC;QACjE,mFAAmF;QACnF,MAAM,OAAO,GAAG,MAAM,CAAC,UAAU,CAAC,aAAa,EAAE,MAAM,CAAC,GAAG,iBAAiB,CAAC;QAC7E,IAAI,IAAI,KAAK,aAAa,IAAI,IAAI,CAAC,GAAG,CAAC,MAAM,IAAI,IAAI,CAAC,QAAQ,GAAG,CAAC,IAAI,IAAI,CAAC,KAAK,GAAG,IAAI,GAAG,IAAI,CAAC,GAAG,GAAG,OAAO,EAAE,CAAC;YAC7G,IAAI,CAAC,OAAO,GAAG,IAAI,CAAC;YACpB,IAAI,OAAO,IAAI,IAAI,CAAC,GAAG;gBAAE,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC;YACtD,OAAO;QACT,CAAC;QACD,IAAI,CAAC,KAAK,IAAI,IAAI,CAAC;QACnB,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IACtB,CAAC;IACD,KAAK,KAAe,OAAO,CAAC,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;CAC5C;AAED,MAAM,UAAU,YAAY,CAAC,IAAe,EAAE,MAAqB;IACjE,IAAI,IAAY,CAAC;IACjB,IAAI,CAAC;QAAC,IAAI,GAAG,MAAM,CAAC,UAAU,CAAC,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,IAAI,EAAE,EAAE,MAAM,CAAC,CAAC;IAAC,CAAC;IACrE,MAAM,CAAC;QAAC,OAAO,EAAE,IAAI,EAAE,WAAW,EAAE,OAAO,EAAE,0CAA0C,EAAE,CAAC;IAAC,CAAC;IAC5F,OAAO,IAAI,GAAG,MAAM,CAAC,cAAc;QACjC,CAAC,CAAC,EAAE,IAAI,EAAE,mBAAmB,EAAE,OAAO,EAAE,6BAA6B,MAAM,CAAC,cAAc,SAAS,EAAE;QACrG,CAAC,CAAC,SAAS,CAAC;AAChB,CAAC;AAED,0FAA0F;AAC1F,MAAM,UAAU,WAAW,CAAC,IAAY,EAAE,MAAqB;IAC7D,MAAM,IAAI,GAAG,MAAM,CAAC,UAAU,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;IAC7C,IAAI,IAAI,GAAG,MAAM,CAAC,cAAc;QAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,cAAc,CAAC,IAAI,EAAE,MAAM,CAAC,EAAE,CAAC;IAC5F,IAAI,CAAC;QAAC,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,CAAC,KAAK,CAAC,IAAI,CAAY,EAAE,CAAC;IAAC,CAAC;IAChE,MAAM,CAAC;QAAC,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,EAAE,IAAI,EAAE,sBAAsB,EAAE,OAAO,EAAE,yCAAyC,EAAE,EAAE,CAAC;IAAC,CAAC;AAC9H,CAAC;AAED,MAAM,UAAU,cAAc,CAAC,IAAY,EAAE,MAAqB;IAChE,OAAO;QACL,IAAI,EAAE,gBAAgB;QACtB,OAAO,EAAE,yBAAyB,IAAI,wBAAwB,MAAM,CAAC,cAAc,+BAA+B;cAC9G,mJAAmJ;KACxJ,CAAC;AACJ,CAAC;AAED,mDAAmD;AACnD,MAAM,CAAC,MAAM,iBAAiB,GAAG,IAAI,CAAC;AAEtC,MAAM,UAAU,YAAY,CAAC,OAAe;IAC1C,OAAO,OAAO,CAAC,MAAM,GAAG,iBAAiB,CAAC,CAAC,CAAC,GAAG,OAAO,CAAC,KAAK,CAAC,CAAC,EAAE,iBAAiB,CAAC,eAAe,CAAC,CAAC,CAAC,OAAO,CAAC;AAC9G,CAAC;AAED,mFAAmF;AACnF,MAAM,UAAU,aAAa,CAAC,MAAgB;IAC5C,MAAM,MAAM,GAAG,CAAC,GAAG,IAAI,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC;IACpC,MAAM,KAAK,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IAC7C,OAAO,YAAY,CAAC,MAAM,CAAC,MAAM,GAAG,EAAE,CAAC,CAAC,CAAC,GAAG,KAAK,SAAS,MAAM,CAAC,MAAM,GAAG,EAAE,OAAO,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC;AAC/F,CAAC"}

package/dist/sandbox/types.d.ts

@@ -1,8 +1,11 @@
+import type { SandboxLimits } from './limits.js';
 export interface ExecuteOptions {
     code: string;
     timeoutMs?: number;
     memoryMb?: number;
     bindings?: string[];
+    /** Overrides for the runner's byte budgets. */
+    limits?: Partial<SandboxLimits>;
 }
 export interface ExecuteResult {
     ok: boolean;

package/dist/sandbox/types.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../../src/sandbox/types.ts"],"names":[],"mappings":"AAAA,MAAM,WAAW,cAAc;IAC7B,IAAI,EAAE,MAAM,CAAC;IACb,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,QAAQ,CAAC,EAAE,MAAM,EAAE,CAAC;CACrB;AAED,MAAM,WAAW,aAAa;IAC5B,EAAE,EAAE,OAAO,CAAC;IACZ,KAAK,CAAC,EAAE,OAAO,CAAC;IAChB,IAAI,EAAE,MAAM,EAAE,CAAC;IACf,KAAK,CAAC,EAAE;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,OAAO,EAAE,MAAM,CAAC;QAAC,KAAK,CAAC,EAAE,MAAM,CAAC;QAAC,MAAM,CAAC,EAAE,MAAM,CAAA;KAAE,CAAC;IAC3E,UAAU,EAAE,MAAM,CAAC;CACpB;AAED,MAAM,MAAM,WAAW,GAAG,SAAS,GAAG,MAAM,GAAG,MAAM,CAAC;AAEtD,MAAM,WAAW,aAAa;IAC5B,IAAI,EAAE,SAAS,GAAG,MAAM,GAAG,aAAa,CAAC;IACzC,SAAS,IAAI,OAAO,CAAC,OAAO,CAAC,CAAC;IAC9B,OAAO,CAAC,IAAI,EAAE,cAAc,EAAE,GAAG,EAAE,SAAS,GAAG,OAAO,CAAC,aAAa,CAAC,CAAC;CACvE;AAED,MAAM,WAAW,OAAO;IACtB,OAAO,EAAE,MAAM,CAAC;IAChB,IAAI,EAAE,MAAM,EAAE,CAAC;IACf,IAAI,EAAE,OAAO,EAAE,CAAC;CACjB;AAED,MAAM,WAAW,SAAS;IACxB,QAAQ,CAAC,IAAI,EAAE,OAAO,GAAG,OAAO,CAAC;QAAE,EAAE,EAAE,OAAO,CAAC;QAAC,KAAK,CAAC,EAAE,OAAO,CAAC;QAAC,KAAK,CAAC,EAAE;YAAE,IAAI,EAAE,MAAM,CAAC;YAAC,OAAO,EAAE,MAAM,CAAC;YAAC,MAAM,CAAC,EAAE,MAAM,CAAA;SAAE,CAAA;KAAE,CAAC,CAAC;CAChI"}
+{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../../src/sandbox/types.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,aAAa,CAAC;AAEjD,MAAM,WAAW,cAAc;IAC7B,IAAI,EAAE,MAAM,CAAC;IACb,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,QAAQ,CAAC,EAAE,MAAM,EAAE,CAAC;IACpB,+CAA+C;IAC/C,MAAM,CAAC,EAAE,OAAO,CAAC,aAAa,CAAC,CAAC;CACjC;AAED,MAAM,WAAW,aAAa;IAC5B,EAAE,EAAE,OAAO,CAAC;IACZ,KAAK,CAAC,EAAE,OAAO,CAAC;IAChB,IAAI,EAAE,MAAM,EAAE,CAAC;IACf,KAAK,CAAC,EAAE;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,OAAO,EAAE,MAAM,CAAC;QAAC,KAAK,CAAC,EAAE,MAAM,CAAC;QAAC,MAAM,CAAC,EAAE,MAAM,CAAA;KAAE,CAAC;IAC3E,UAAU,EAAE,MAAM,CAAC;CACpB;AAED,MAAM,MAAM,WAAW,GAAG,SAAS,GAAG,MAAM,GAAG,MAAM,CAAC;AAEtD,MAAM,WAAW,aAAa;IAC5B,IAAI,EAAE,SAAS,GAAG,MAAM,GAAG,aAAa,CAAC;IACzC,SAAS,IAAI,OAAO,CAAC,OAAO,CAAC,CAAC;IAC9B,OAAO,CAAC,IAAI,EAAE,cAAc,EAAE,GAAG,EAAE,SAAS,GAAG,OAAO,CAAC,aAAa,CAAC,CAAC;CACvE;AAED,MAAM,WAAW,OAAO;IACtB,OAAO,EAAE,MAAM,CAAC;IAChB,IAAI,EAAE,MAAM,EAAE,CAAC;IACf,IAAI,EAAE,OAAO,EAAE,CAAC;CACjB;AAED,MAAM,WAAW,SAAS;IACxB,QAAQ,CAAC,IAAI,EAAE,OAAO,GAAG,OAAO,CAAC;QAAE,EAAE,EAAE,OAAO,CAAC;QAAC,KAAK,CAAC,EAAE,OAAO,CAAC;QAAC,KAAK,CAAC,EAAE;YAAE,IAAI,EAAE,MAAM,CAAC;YAAC,OAAO,EAAE,MAAM,CAAC;YAAC,MAAM,CAAC,EAAE,MAAM,CAAA;SAAE,CAAA;KAAE,CAAC,CAAC;CAChI"}

package/dist/sdk/bindings.js

@@ -13,7 +13,7 @@ export function buildSdk(cfg) {
         methods: Object.freeze(methods),
         meta: sources.map(({ name, label, enabled, disabledReason }) => ({ name, label, enabled, disabledReason })),
         registeredNames: sources.map(s => s.name),
-        version: () => '2.2.2', // x-release-version
+        version: () => '2.2.3', // x-release-version
     };
 }
 //# sourceMappingURL=bindings.js.map

package/dist/server/mcpServer.js

@@ -34,7 +34,7 @@ function cachedInputSchema(name, jsonSchema) {
     return converted;
 }
 export function buildMcpServer(deps, requestCtx) {
-    const server = new McpServer({ name: 'fedreg-mcp-server', version: '2.2.2' }, // x-release-version
+    const server = new McpServer({ name: 'fedreg-mcp-server', version: '2.2.3' }, // x-release-version
     {
         capabilities: { tools: {} },
         cacheHints: { 'tools/list': LIST_CACHE_HINT, 'server/discover': LIST_CACHE_HINT },

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@blen/fedreg-mcp-server",
-  "version": "2.2.2",
+  "version": "2.2.3",
   "description": "Code-mode MCP server for the U.S. Federal Register, Electronic Code of Federal Regulations, and regulations.gov APIs.",
   "license": "Apache-2.0",
   "author": "BLEN, Inc. (https://blenlabs.com)",