@jshookmcp/jshook 0.2.0 → 0.2.2

package/dist/src/server/registry/index.d.ts

@@ -6,12 +6,9 @@ export declare function getAllManifests(): readonly DomainManifest[];
 export declare function getAllRegistrations(): readonly ToolRegistration[];
 export declare function getAllDomains(): ReadonlySet<string>;
 export declare function getAllToolNames(): ReadonlySet<string>;
+export declare function getRegistrationByName(name: string): ToolRegistration | undefined;
 export declare function buildToolGroups(): Record<string, Tool[]>;
 export declare function buildToolDomainMap(): ReadonlyMap<string, string>;
 export declare function buildAllTools(): Tool[];
 export declare function buildHandlerMapFromRegistry(deps: ToolHandlerDeps, selectedToolNames?: ReadonlySet<string>): Record<string, ToolHandler>;
 export declare function buildProfileDomains(): Record<ToolProfileId, string[]>;
-export declare const ALL_DOMAINS: ReadonlySet<string>;
-export declare const ALL_TOOL_NAMES: ReadonlySet<string>;
-export declare const ALL_MANIFESTS: readonly DomainManifest[];
-export declare const ALL_REGISTRATIONS: readonly ToolRegistration[];

package/dist/src/server/registry/index.js

@@ -5,6 +5,7 @@ let _registrations = null;
 let _initPromise = null;
 let _domainsView = null;
 let _toolNamesView = null;
+let _registrationsByName = null;
 async function init() {
     if (_manifests !== null)
         return;
@@ -18,18 +19,19 @@ async function init() {
         const uniqueByToolName = new Map();
         for (const m of discovered) {
             for (const r of m.registrations) {
-                const existing = uniqueByToolName.get(r.tool.name);
+                const registration = r.domain ? r : { ...r, domain: m.domain };
+                const existing = uniqueByToolName.get(registration.tool.name);
                 if (existing) {
-                    logger.warn(`[registry] Duplicate tool name "${r.tool.name}": domain "${r.domain}" conflicts with "${existing.domain}" — keeping first`);
+                    logger.warn(`[registry] Duplicate tool name "${registration.tool.name}": domain "${registration.domain}" conflicts with "${existing.domain}" — keeping first`);
                 }
                 else {
-                    uniqueByToolName.set(r.tool.name, r);
+                    uniqueByToolName.set(registration.tool.name, registration);
                 }
             }
         }
         _registrations = [...uniqueByToolName.values()];
-        _domainsView = new Set(_manifests.map(m => m.domain));
-        _toolNamesView = new Set(_registrations.map(r => r.tool.name));
+        _domainsView = new Set(_manifests.map((m) => m.domain));
+        _toolNamesView = new Set(_registrations.map((r) => r.tool.name));
     })();
     await _initPromise;
 }
@@ -62,6 +64,12 @@ export function getAllToolNames() {
         throw new Error('[registry] Not initialised - call initRegistry() first.');
     return _toolNamesView;
 }
+export function getRegistrationByName(name) {
+    if (!_registrationsByName) {
+        _registrationsByName = new Map(getRegistrations().map((r) => [r.tool.name, r]));
+    }
+    return _registrationsByName.get(name);
+}
 export function buildToolGroups() {
     const groups = {};
     for (const r of getRegistrations()) {
@@ -78,13 +86,13 @@ export function buildToolDomainMap() {
     return map;
 }
 export function buildAllTools() {
-    return getRegistrations().map(r => r.tool);
+    return getRegistrations().map((r) => r.tool);
 }
 export function buildHandlerMapFromRegistry(deps, selectedToolNames) {
     const regs = selectedToolNames
-        ? getRegistrations().filter(r => selectedToolNames.has(r.tool.name))
+        ? getRegistrations().filter((r) => selectedToolNames.has(r.tool.name))
         : [...getRegistrations()];
-    return Object.fromEntries(regs.map(r => [r.tool.name, r.bind(deps)]));
+    return Object.fromEntries(regs.map((r) => [r.tool.name, r.bind(deps)]));
 }
 export function buildProfileDomains() {
     const profiles = {
@@ -103,7 +111,7 @@ export function buildProfileDomains() {
     }
     const isSubset = (a, b) => {
         const bSet = new Set(b);
-        return a.every(x => bSet.has(x));
+        return a.every((x) => bSet.has(x));
     };
     if (!isSubset(result['search'], result['workflow'])) {
         logger.warn('[registry] Profile hierarchy: search not subset of workflow');
@@ -113,31 +121,3 @@ export function buildProfileDomains() {
     }
     return result;
 }
-export const ALL_DOMAINS = new Proxy(new Set(), {
-    get(_t, p) {
-        const real = getAllDomains();
-        const v = real[p];
-        return typeof v === 'function' ? v.bind(real) : v;
-    },
-});
-export const ALL_TOOL_NAMES = new Proxy(new Set(), {
-    get(_t, p) {
-        const real = getAllToolNames();
-        const v = real[p];
-        return typeof v === 'function' ? v.bind(real) : v;
-    },
-});
-export const ALL_MANIFESTS = new Proxy([], {
-    get(_t, p) {
-        const real = getAllManifests();
-        const v = real[p];
-        return typeof v === 'function' ? v.bind(real) : v;
-    },
-});
-export const ALL_REGISTRATIONS = new Proxy([], {
-    get(_t, p) {
-        const real = getAllRegistrations();
-        const v = real[p];
-        return typeof v === 'function' ? v.bind(real) : v;
-    },
-});

package/dist/src/server/registry/types.d.ts

@@ -1,5 +1,5 @@
 import type { Tool } from '@modelcontextprotocol/sdk/types.js';
-export type { ToolRegistration, ToolHandlerDeps, ToolProfileId, DomainManifest } from '../registry/contracts.js';
+export type { ToolRegistration, ToolHandlerDeps, ToolProfileId, DomainManifest, } from '../registry/contracts.js';
 export type ToolDomain = string;
 export type ToolHandlerMapDependencies = Record<string, unknown>;
 export declare function toolLookup(tools: readonly Tool[]): (name: string) => Tool;

package/dist/src/server/registry/types.js

@@ -1,5 +1,5 @@
 export function toolLookup(tools) {
-    const map = new Map(tools.map(t => [t.name, t]));
+    const map = new Map(tools.map((t) => [t.name, t]));
     return (name) => {
         const tool = map.get(name);
         if (!tool)

package/dist/src/server/sandbox/AutoCorrectionLoop.d.ts

@@ -0,0 +1,6 @@
+import type { QuickJSSandbox } from '../sandbox/QuickJSSandbox.js';
+import type { SandboxOptions, SandboxResult } from '../sandbox/types.js';
+export interface AutoCorrectedResult extends SandboxResult {
+    retryCount: number;
+}
+export declare function executeWithRetry(sandbox: QuickJSSandbox, code: string, options?: SandboxOptions, maxRetries?: number): Promise<AutoCorrectedResult>;

package/dist/src/server/sandbox/AutoCorrectionLoop.js

@@ -0,0 +1,17 @@
+export async function executeWithRetry(sandbox, code, options = {}, maxRetries = 2) {
+    let lastResult = null;
+    let currentCode = code;
+    for (let attempt = 0; attempt <= maxRetries; attempt++) {
+        lastResult = await sandbox.execute(currentCode, options);
+        if (lastResult.ok) {
+            return { ...lastResult, retryCount: attempt };
+        }
+        if (lastResult.timedOut) {
+            return { ...lastResult, retryCount: attempt };
+        }
+        if (attempt < maxRetries) {
+            currentCode = `/* Previous error (attempt ${attempt + 1}): ${lastResult.error ?? 'unknown error'} */\n${code}`;
+        }
+    }
+    return { ...lastResult, retryCount: maxRetries };
+}

package/dist/src/server/sandbox/DynamicToolRegistry.d.ts

@@ -0,0 +1,17 @@
+import type { MCPServerContext } from '../MCPServer.context.js';
+export interface DynamicToolEntry {
+    name: string;
+    prefixedName: string;
+    description: string;
+    handler: (args: Record<string, unknown>) => Promise<unknown>;
+}
+export declare class DynamicToolRegistry {
+    private readonly ctx;
+    private readonly tools;
+    constructor(ctx: MCPServerContext);
+    registerDynamicTool(name: string, description: string, handler: (args: Record<string, unknown>) => Promise<unknown>): string;
+    unregisterDynamicTool(prefixedName: string): boolean;
+    listDynamicTools(): DynamicToolEntry[];
+    getHandler(prefixedName: string): DynamicToolEntry | undefined;
+    clearAll(): void;
+}

package/dist/src/server/sandbox/DynamicToolRegistry.js

@@ -0,0 +1,46 @@
+const DYNAMIC_PREFIX = 'sandbox_';
+export class DynamicToolRegistry {
+    ctx;
+    tools = new Map();
+    constructor(ctx) {
+        this.ctx = ctx;
+    }
+    registerDynamicTool(name, description, handler) {
+        const prefixedName = `${DYNAMIC_PREFIX}${name}`;
+        const entry = {
+            name,
+            prefixedName,
+            description,
+            handler,
+        };
+        this.tools.set(prefixedName, entry);
+        const toolDef = {
+            name: prefixedName,
+            description: `[Sandbox] ${description}`,
+            inputSchema: {
+                type: 'object',
+                properties: {
+                    args: {
+                        type: 'object',
+                        description: 'Arguments to pass to the dynamic tool.',
+                    },
+                },
+                required: [],
+            },
+        };
+        this.ctx.registerSingleTool(toolDef);
+        return prefixedName;
+    }
+    unregisterDynamicTool(prefixedName) {
+        return this.tools.delete(prefixedName);
+    }
+    listDynamicTools() {
+        return Array.from(this.tools.values());
+    }
+    getHandler(prefixedName) {
+        return this.tools.get(prefixedName);
+    }
+    clearAll() {
+        this.tools.clear();
+    }
+}

package/dist/src/server/sandbox/MCPBridge.d.ts

@@ -0,0 +1,9 @@
+import type { MCPServerContext } from '../MCPServer.context.js';
+export declare class MCPBridge {
+    private readonly ctx;
+    private allowlist;
+    constructor(ctx: MCPServerContext);
+    setAllowlist(toolNames: string[] | null): void;
+    call(toolName: string, args?: Record<string, unknown>): Promise<unknown>;
+    listAvailableTools(): string[];
+}

package/dist/src/server/sandbox/MCPBridge.js

@@ -0,0 +1,43 @@
+export class MCPBridge {
+    ctx;
+    allowlist = null;
+    constructor(ctx) {
+        this.ctx = ctx;
+    }
+    setAllowlist(toolNames) {
+        this.allowlist = toolNames ? new Set(toolNames) : null;
+    }
+    async call(toolName, args = {}) {
+        if (this.allowlist && !this.allowlist.has(toolName)) {
+            throw new Error(`Tool "${toolName}" is not in the sandbox allowlist`);
+        }
+        const available = this.listAvailableTools();
+        if (!available.includes(toolName)) {
+            throw new Error(`Tool "${toolName}" is not a registered MCP tool`);
+        }
+        const response = await this.ctx.executeToolWithTracking(toolName, args);
+        if (response.content && Array.isArray(response.content)) {
+            const textParts = [];
+            for (const item of response.content) {
+                if (item.type === 'text') {
+                    textParts.push(item.text);
+                }
+            }
+            const combined = textParts.join('\n');
+            try {
+                return JSON.parse(combined);
+            }
+            catch {
+                return combined;
+            }
+        }
+        return response;
+    }
+    listAvailableTools() {
+        const allTools = this.ctx.selectedTools.map((t) => t.name);
+        if (this.allowlist) {
+            return allTools.filter((n) => this.allowlist.has(n));
+        }
+        return allTools;
+    }
+}

package/dist/src/server/sandbox/QuickJSSandbox.d.ts

@@ -0,0 +1,11 @@
+import type { SandboxOptions, SandboxResult } from '../sandbox/types.js';
+import type { MCPBridge } from '../sandbox/MCPBridge.js';
+export declare class QuickJSSandbox {
+    private bridge;
+    setBridge(bridge: MCPBridge): void;
+    execute(code: string, options?: SandboxOptions): Promise<SandboxResult>;
+    private _injectConsole;
+    private _injectGlobals;
+    private _injectHelpers;
+    private _injectBridge;
+}

package/dist/src/server/sandbox/QuickJSSandbox.js

@@ -0,0 +1,184 @@
+import { getQuickJS } from 'quickjs-emscripten';
+import { SANDBOX_HELPER_SOURCE } from '../sandbox/SandboxHelpers.js';
+const DEFAULT_TIMEOUT_MS = 1_000;
+const DEFAULT_MEMORY_LIMIT_BYTES = 8 * 1024 * 1024;
+function marshalToQuickJS(ctx, value) {
+    if (value === null || value === undefined)
+        return ctx.undefined;
+    switch (typeof value) {
+        case 'string':
+            return ctx.newString(value);
+        case 'number':
+            return ctx.newNumber(value);
+        case 'boolean':
+            return value ? ctx.true : ctx.false;
+        case 'object': {
+            if (Array.isArray(value)) {
+                const arr = ctx.newArray();
+                for (let i = 0; i < value.length; i++) {
+                    const elem = marshalToQuickJS(ctx, value[i]);
+                    ctx.setProp(arr, i, elem);
+                    elem.dispose();
+                }
+                return arr;
+            }
+            const obj = ctx.newObject();
+            for (const [k, v] of Object.entries(value)) {
+                const prop = marshalToQuickJS(ctx, v);
+                ctx.setProp(obj, k, prop);
+                prop.dispose();
+            }
+            return obj;
+        }
+        default:
+            return ctx.newString(String(value));
+    }
+}
+function unmarshalFromQuickJS(ctx, handle) {
+    const ty = ctx.typeof(handle);
+    switch (ty) {
+        case 'undefined':
+            return undefined;
+        case 'number':
+            return ctx.getNumber(handle);
+        case 'string':
+            return ctx.getString(handle);
+        case 'boolean': {
+            return ctx.dump(handle);
+        }
+        case 'object': {
+            return ctx.dump(handle);
+        }
+        default:
+            return ctx.dump(handle);
+    }
+}
+export class QuickJSSandbox {
+    bridge = null;
+    setBridge(bridge) {
+        this.bridge = bridge;
+    }
+    async execute(code, options = {}) {
+        const timeoutMs = options.timeoutMs ?? DEFAULT_TIMEOUT_MS;
+        const memoryLimitBytes = options.memoryLimitBytes ?? DEFAULT_MEMORY_LIMIT_BYTES;
+        const QuickJS = await getQuickJS();
+        const runtime = QuickJS.newRuntime();
+        runtime.setMemoryLimit(memoryLimitBytes);
+        const startTime = Date.now();
+        let timedOut = false;
+        runtime.setInterruptHandler(() => {
+            if (Date.now() - startTime > timeoutMs) {
+                timedOut = true;
+                return true;
+            }
+            return false;
+        });
+        const context = runtime.newContext();
+        const logs = [];
+        try {
+            this._injectConsole(context, logs);
+            this._injectHelpers(context);
+            if (this.bridge) {
+                this._injectBridge(context, this.bridge, logs);
+            }
+            if (options.globals) {
+                this._injectGlobals(context, options.globals);
+            }
+            const result = context.evalCode(code, 'sandbox-eval.js');
+            if (result.error) {
+                const errorMsg = context.dump(result.error);
+                result.error.dispose();
+                if (timedOut) {
+                    return {
+                        ok: false,
+                        error: 'Execution timed out',
+                        timedOut: true,
+                        durationMs: Date.now() - startTime,
+                        logs,
+                    };
+                }
+                return {
+                    ok: false,
+                    error: typeof errorMsg === 'object' ? JSON.stringify(errorMsg) : String(errorMsg),
+                    timedOut: false,
+                    durationMs: Date.now() - startTime,
+                    logs,
+                };
+            }
+            const output = unmarshalFromQuickJS(context, result.value);
+            result.value.dispose();
+            return {
+                ok: true,
+                output,
+                timedOut: false,
+                durationMs: Date.now() - startTime,
+                logs,
+            };
+        }
+        catch (err) {
+            return {
+                ok: false,
+                error: err instanceof Error ? err.message : String(err),
+                timedOut,
+                durationMs: Date.now() - startTime,
+                logs,
+            };
+        }
+        finally {
+            context.dispose();
+            runtime.dispose();
+        }
+    }
+    _injectConsole(ctx, logs) {
+        const consoleObj = ctx.newObject();
+        const logFn = ctx.newFunction('log', (...args) => {
+            const parts = args.map((a) => {
+                const val = unmarshalFromQuickJS(ctx, a);
+                return typeof val === 'string' ? val : JSON.stringify(val);
+            });
+            logs.push(parts.join(' '));
+        });
+        ctx.setProp(consoleObj, 'log', logFn);
+        ctx.setProp(consoleObj, 'warn', logFn);
+        ctx.setProp(consoleObj, 'error', logFn);
+        ctx.setProp(ctx.global, 'console', consoleObj);
+        logFn.dispose();
+        consoleObj.dispose();
+    }
+    _injectGlobals(ctx, globals) {
+        for (const [key, value] of Object.entries(globals)) {
+            const handle = marshalToQuickJS(ctx, value);
+            ctx.setProp(ctx.global, key, handle);
+            handle.dispose();
+        }
+    }
+    _injectHelpers(ctx) {
+        const result = ctx.evalCode(SANDBOX_HELPER_SOURCE, 'sandbox-helpers.js');
+        if (result.error) {
+            ctx.dump(result.error);
+            result.error.dispose();
+        }
+        else {
+            result.value.dispose();
+        }
+    }
+    _injectBridge(ctx, bridge, logs) {
+        const mcpObj = ctx.newObject();
+        const callFn = ctx.newFunction('call', (nameHandle, argsHandle) => {
+            const name = ctx.getString(nameHandle);
+            const args = ctx.dump(argsHandle) ?? {};
+            logs.push(`[mcp.call] ${name}(${JSON.stringify(args)})`);
+            return marshalToQuickJS(ctx, { pending: true, tool: name });
+        });
+        const listFn = ctx.newFunction('listTools', () => {
+            const tools = bridge.listAvailableTools();
+            return marshalToQuickJS(ctx, tools);
+        });
+        ctx.setProp(mcpObj, 'call', callFn);
+        ctx.setProp(mcpObj, 'listTools', listFn);
+        ctx.setProp(ctx.global, 'mcp', mcpObj);
+        callFn.dispose();
+        listFn.dispose();
+        mcpObj.dispose();
+    }
+}

package/dist/src/server/sandbox/SandboxHelpers.d.ts

@@ -0,0 +1 @@
+export declare const SANDBOX_HELPER_SOURCE = "\n(function() {\n  var helpers = {};\n\n  // \u2500\u2500 base64 \u2500\u2500\n  helpers.base64 = {\n    _chars: 'ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789+/=',\n    encode: function(str) {\n      var output = '';\n      var chr1, chr2, chr3, enc1, enc2, enc3, enc4;\n      var i = 0;\n      while (i < str.length) {\n        chr1 = str.charCodeAt(i++);\n        chr2 = str.charCodeAt(i++);\n        chr3 = str.charCodeAt(i++);\n        enc1 = chr1 >> 2;\n        enc2 = ((chr1 & 3) << 4) | (chr2 >> 4);\n        enc3 = ((chr2 & 15) << 2) | (chr3 >> 6);\n        enc4 = chr3 & 63;\n        if (isNaN(chr2)) { enc3 = enc4 = 64; }\n        else if (isNaN(chr3)) { enc4 = 64; }\n        output += this._chars.charAt(enc1) + this._chars.charAt(enc2) +\n                  this._chars.charAt(enc3) + this._chars.charAt(enc4);\n      }\n      return output;\n    },\n    decode: function(str) {\n      var output = '';\n      var chr1, chr2, chr3, enc1, enc2, enc3, enc4;\n      var i = 0;\n      str = str.replace(/[^A-Za-z0-9+/=]/g, '');\n      while (i < str.length) {\n        enc1 = this._chars.indexOf(str.charAt(i++));\n        enc2 = this._chars.indexOf(str.charAt(i++));\n        enc3 = this._chars.indexOf(str.charAt(i++));\n        enc4 = this._chars.indexOf(str.charAt(i++));\n        chr1 = (enc1 << 2) | (enc2 >> 4);\n        chr2 = ((enc2 & 15) << 4) | (enc3 >> 2);\n        chr3 = ((enc3 & 3) << 6) | enc4;\n        output += String.fromCharCode(chr1);\n        if (enc3 !== 64) output += String.fromCharCode(chr2);\n        if (enc4 !== 64) output += String.fromCharCode(chr3);\n      }\n      return output;\n    }\n  };\n\n  // \u2500\u2500 hex \u2500\u2500\n  helpers.hex = {\n    encode: function(str) {\n      var hex = '';\n      for (var i = 0; i < str.length; i++) {\n        hex += ('0' + str.charCodeAt(i).toString(16)).slice(-2);\n      }\n      return hex;\n    },\n    decode: function(hex) {\n      var str = '';\n      for (var i = 0; i < hex.length; i += 2) {\n        str += String.fromCharCode(parseInt(hex.substr(i, 2), 16));\n      }\n      return str;\n    }\n  };\n\n  // \u2500\u2500 hash (simple djb2/fnv for in-sandbox use; NOT cryptographic!) \u2500\u2500\n  helpers.hash = {\n    djb2: function(str) {\n      var hash = 5381;\n      for (var i = 0; i < str.length; i++) {\n        hash = ((hash << 5) + hash) + str.charCodeAt(i);\n        hash = hash & hash; // Convert to 32-bit\n      }\n      return (hash >>> 0).toString(16);\n    },\n    fnv1a: function(str) {\n      var hash = 0x811c9dc5;\n      for (var i = 0; i < str.length; i++) {\n        hash ^= str.charCodeAt(i);\n        hash = Math.imul(hash, 0x01000193);\n      }\n      return (hash >>> 0).toString(16);\n    },\n    /** Simple MD5 \u2014 pure JS implementation */\n    md5: function(str) {\n      // Lightweight MD5 for sandbox use\n      function md5cycle(x, k) {\n        var a = x[0], b = x[1], c = x[2], d = x[3];\n        a = ff(a,b,c,d,k[0],7,-680876936);d=ff(d,a,b,c,k[1],12,-389564586);c=ff(c,d,a,b,k[2],17,606105819);b=ff(b,c,d,a,k[3],22,-1044525330);\n        a=ff(a,b,c,d,k[4],7,-176418897);d=ff(d,a,b,c,k[5],12,1200080426);c=ff(c,d,a,b,k[6],17,-1473231341);b=ff(b,c,d,a,k[7],22,-45705983);\n        a=ff(a,b,c,d,k[8],7,1770035416);d=ff(d,a,b,c,k[9],12,-1958414417);c=ff(c,d,a,b,k[10],17,-42063);b=ff(b,c,d,a,k[11],22,-1990404162);\n        a=ff(a,b,c,d,k[12],7,1804603682);d=ff(d,a,b,c,k[13],12,-40341101);c=ff(c,d,a,b,k[14],17,-1502002290);b=ff(b,c,d,a,k[15],22,1236535329);\n        a=gg(a,b,c,d,k[1],5,-165796510);d=gg(d,a,b,c,k[6],9,-1069501632);c=gg(c,d,a,b,k[11],14,643717713);b=gg(b,c,d,a,k[0],20,-373897302);\n        a=gg(a,b,c,d,k[5],5,-701558691);d=gg(d,a,b,c,k[10],9,38016083);c=gg(c,d,a,b,k[15],14,-660478335);b=gg(b,c,d,a,k[4],20,-405537848);\n        a=gg(a,b,c,d,k[9],5,568446438);d=gg(d,a,b,c,k[14],9,-1019803690);c=gg(c,d,a,b,k[3],14,-187363961);b=gg(b,c,d,a,k[8],20,1163531501);\n        a=gg(a,b,c,d,k[13],5,-1444681467);d=gg(d,a,b,c,k[2],9,-51403784);c=gg(c,d,a,b,k[7],14,1735328473);b=gg(b,c,d,a,k[12],20,-1926607734);\n        a=hh(a,b,c,d,k[5],4,-378558);d=hh(d,a,b,c,k[8],11,-2022574463);c=hh(c,d,a,b,k[11],16,1839030562);b=hh(b,c,d,a,k[14],23,-35309556);\n        a=hh(a,b,c,d,k[1],4,-1530992060);d=hh(d,a,b,c,k[4],11,1272893353);c=hh(c,d,a,b,k[7],16,-155497632);b=hh(b,c,d,a,k[10],23,-1094730640);\n        a=hh(a,b,c,d,k[13],4,681279174);d=hh(d,a,b,c,k[0],11,-358537222);c=hh(c,d,a,b,k[3],16,-722521979);b=hh(b,c,d,a,k[6],23,76029189);\n        a=hh(a,b,c,d,k[9],4,-640364487);d=hh(d,a,b,c,k[12],11,-421815835);c=hh(c,d,a,b,k[15],16,530742520);b=hh(b,c,d,a,k[2],23,-995338651);\n        a=ii(a,b,c,d,k[0],6,-198630844);d=ii(d,a,b,c,k[7],10,1126891415);c=ii(c,d,a,b,k[14],15,-1416354905);b=ii(b,c,d,a,k[5],21,-57434055);\n        a=ii(a,b,c,d,k[12],6,1700485571);d=ii(d,a,b,c,k[3],10,-1894986606);c=ii(c,d,a,b,k[10],15,-1051523);b=ii(b,c,d,a,k[1],21,-2054922799);\n        a=ii(a,b,c,d,k[8],6,1873313359);d=ii(d,a,b,c,k[15],10,-30611744);c=ii(c,d,a,b,k[6],15,-1560198380);b=ii(b,c,d,a,k[13],21,1309151649);\n        a=ii(a,b,c,d,k[4],6,-145523070);d=ii(d,a,b,c,k[11],10,-1120210379);c=ii(c,d,a,b,k[2],15,718787259);b=ii(b,c,d,a,k[9],21,-343485551);\n        x[0]=add32(a,x[0]);x[1]=add32(b,x[1]);x[2]=add32(c,x[2]);x[3]=add32(d,x[3]);\n      }\n      function cmn(q,a,b,x,s,t){a=add32(add32(a,q),add32(x,t));return add32((a<<s)|(a>>>(32-s)),b)}\n      function ff(a,b,c,d,x,s,t){return cmn((b&c)|((~b)&d),a,b,x,s,t)}\n      function gg(a,b,c,d,x,s,t){return cmn((b&d)|(c&(~d)),a,b,x,s,t)}\n      function hh(a,b,c,d,x,s,t){return cmn(b^c^d,a,b,x,s,t)}\n      function ii(a,b,c,d,x,s,t){return cmn(c^(b|(~d)),a,b,x,s,t)}\n      function add32(a,b){return(a+b)&0xFFFFFFFF}\n\n      var n = str.length;\n      var state = [1732584193,-271733879,-1732584194,271733878];\n      var tail = [0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0];\n      var i;\n      for (i = 64; i <= n; i += 64) {\n        var blk = [];\n        for (var j = i - 64; j < i; j += 4) {\n          blk.push(str.charCodeAt(j)|(str.charCodeAt(j+1)<<8)|(str.charCodeAt(j+2)<<16)|(str.charCodeAt(j+3)<<24));\n        }\n        md5cycle(state, blk);\n      }\n      for (var j = 0; j < 16; j++) tail[j] = 0;\n      for (i = i - 64; i < n; i++) {\n        tail[i>>2] |= str.charCodeAt(i) << ((i%4)<<3);\n      }\n      tail[i>>2] |= 0x80 << ((i%4)<<3);\n      if (i > 55) { md5cycle(state, tail); for (j = 0; j < 16; j++) tail[j] = 0; }\n      tail[14] = n * 8;\n      md5cycle(state, tail);\n\n      var hex_chr = '0123456789abcdef';\n      var s = '';\n      for (i = 0; i < 4; i++) {\n        for (j = 0; j < 4; j++) {\n          s += hex_chr.charAt((state[i] >> (j*8+4)) & 0x0F) + hex_chr.charAt((state[i] >> (j*8)) & 0x0F);\n        }\n      }\n      return s;\n    },\n    sha256: function(str) {\n      // Minimal pure-JS SHA-256\n      var K = [0x428a2f98,0x71374491,0xb5c0fbcf,0xe9b5dba5,0x3956c25b,0x59f111f1,0x923f82a4,0xab1c5ed5,\n               0xd807aa98,0x12835b01,0x243185be,0x550c7dc3,0x72be5d74,0x80deb1fe,0x9bdc06a7,0xc19bf174,\n               0xe49b69c1,0xefbe4786,0x0fc19dc6,0x240ca1cc,0x2de92c6f,0x4a7484aa,0x5cb0a9dc,0x76f988da,\n               0x983e5152,0xa831c66d,0xb00327c8,0xbf597fc7,0xc6e00bf3,0xd5a79147,0x06ca6351,0x14292967,\n               0x27b70a85,0x2e1b2138,0x4d2c6dfc,0x53380d13,0x650a7354,0x766a0abb,0x81c2c92e,0x92722c85,\n               0xa2bfe8a1,0xa81a664b,0xc24b8b70,0xc76c51a3,0xd192e819,0xd6990624,0xf40e3585,0x106aa070,\n               0x19a4c116,0x1e376c08,0x2748774c,0x34b0bcb5,0x391c0cb3,0x4ed8aa4a,0x5b9cca4f,0x682e6ff3,\n               0x748f82ee,0x78a5636f,0x84c87814,0x8cc70208,0x90befffa,0xa4506ceb,0xbef9a3f7,0xc67178f2];\n      function rr(x,n){return(x>>>n)|(x<<(32-n))}\n      var H=[0x6a09e667,0xbb67ae85,0x3c6ef372,0xa54ff53a,0x510e527f,0x9b05688c,0x1f83d9ab,0x5be0cd19];\n      var msg=[];\n      for(var i=0;i<str.length;i++)msg.push(str.charCodeAt(i));\n      msg.push(0x80);\n      var l=msg.length;\n      while(l%64!==56){msg.push(0);l++;}\n      var bits=str.length*8;\n      for(i=7;i>=0;i--)msg.push((bits>>>(i*8))&0xff);\n      for(var offset=0;offset<msg.length;offset+=64){\n        var W=[];\n        for(i=0;i<16;i++)W[i]=(msg[offset+i*4]<<24)|(msg[offset+i*4+1]<<16)|(msg[offset+i*4+2]<<8)|msg[offset+i*4+3];\n        for(i=16;i<64;i++){\n          var s0=rr(W[i-15],7)^rr(W[i-15],18)^(W[i-15]>>>3);\n          var s1=rr(W[i-2],17)^rr(W[i-2],19)^(W[i-2]>>>10);\n          W[i]=(W[i-16]+s0+W[i-7]+s1)|0;\n        }\n        var a=H[0],b=H[1],c=H[2],d=H[3],e=H[4],f=H[5],g=H[6],h=H[7];\n        for(i=0;i<64;i++){\n          var S1=rr(e,6)^rr(e,11)^rr(e,25);\n          var ch=(e&f)^((~e)&g);\n          var t1=(h+S1+ch+K[i]+W[i])|0;\n          var S0=rr(a,2)^rr(a,13)^rr(a,22);\n          var maj=(a&b)^(a&c)^(b&c);\n          var t2=(S0+maj)|0;\n          h=g;g=f;f=e;e=(d+t1)|0;d=c;c=b;b=a;a=(t1+t2)|0;\n        }\n        H[0]=(H[0]+a)|0;H[1]=(H[1]+b)|0;H[2]=(H[2]+c)|0;H[3]=(H[3]+d)|0;\n        H[4]=(H[4]+e)|0;H[5]=(H[5]+f)|0;H[6]=(H[6]+g)|0;H[7]=(H[7]+h)|0;\n      }\n      var hex='';\n      for(i=0;i<8;i++)for(var j=7;j>=0;j--)hex+='0123456789abcdef'.charAt((H[i]>>>(j*4))&0xf);\n      return hex;\n    }\n  };\n\n  // \u2500\u2500 json \u2500\u2500\n  helpers.json = {\n    safeParse: function(str) {\n      try { return { ok: true, value: JSON.parse(str) }; }\n      catch(e) { return { ok: false, error: e.message }; }\n    }\n  };\n\n  // \u2500\u2500 array \u2500\u2500\n  helpers.array = {\n    chunk: function(arr, size) {\n      var result = [];\n      for (var i = 0; i < arr.length; i += size) {\n        result.push(arr.slice(i, i + size));\n      }\n      return result;\n    },\n    flatten: function(arr) {\n      var result = [];\n      for (var i = 0; i < arr.length; i++) {\n        if (Array.isArray(arr[i])) {\n          result = result.concat(this.flatten(arr[i]));\n        } else {\n          result.push(arr[i]);\n        }\n      }\n      return result;\n    },\n    unique: function(arr) {\n      var seen = {};\n      var result = [];\n      for (var i = 0; i < arr.length; i++) {\n        var key = JSON.stringify(arr[i]);\n        if (!seen[key]) {\n          seen[key] = true;\n          result.push(arr[i]);\n        }\n      }\n      return result;\n    }\n  };\n\n  // \u2500\u2500 string \u2500\u2500\n  helpers.string = {\n    camelCase: function(s) {\n      return s.replace(/[-_\\s]+(\\w)/g, function(_, c) { return c.toUpperCase(); })\n              .replace(/^\\w/, function(c) { return c.toLowerCase(); });\n    },\n    snakeCase: function(s) {\n      return s.replace(/([A-Z])/g, '_$1').toLowerCase()\n              .replace(/[-\\s]+/g, '_')\n              .replace(/^_/, '');\n    },\n    truncate: function(s, len) {\n      if (s.length <= len) return s;\n      return s.slice(0, len - 3) + '...';\n    }\n  };\n\n  // Expose to global scope\n  globalThis.helpers = helpers;\n})();\n";