@jshookmcp/jshook 0.2.6 → 0.2.8

package/dist/src/server/sandbox/DynamicToolRegistry.js

@@ -1,46 +0,0 @@
-const DYNAMIC_PREFIX = 'sandbox_';
-export class DynamicToolRegistry {
-    ctx;
-    tools = new Map();
-    constructor(ctx) {
-        this.ctx = ctx;
-    }
-    registerDynamicTool(name, description, handler) {
-        const prefixedName = `${DYNAMIC_PREFIX}${name}`;
-        const entry = {
-            name,
-            prefixedName,
-            description,
-            handler,
-        };
-        this.tools.set(prefixedName, entry);
-        const toolDef = {
-            name: prefixedName,
-            description: `[Sandbox] ${description}`,
-            inputSchema: {
-                type: 'object',
-                properties: {
-                    args: {
-                        type: 'object',
-                        description: 'Arguments to pass to the dynamic tool.',
-                    },
-                },
-                required: [],
-            },
-        };
-        this.ctx.registerSingleTool(toolDef);
-        return prefixedName;
-    }
-    unregisterDynamicTool(prefixedName) {
-        return this.tools.delete(prefixedName);
-    }
-    listDynamicTools() {
-        return Array.from(this.tools.values());
-    }
-    getHandler(prefixedName) {
-        return this.tools.get(prefixedName);
-    }
-    clearAll() {
-        this.tools.clear();
-    }
-}

package/dist/src/server/sandbox/MCPBridge.d.ts

@@ -1,18 +0,0 @@
-import type { MCPServerContext } from '../MCPServer.context.js';
-export interface BridgeCallRequest {
-    id: string;
-    toolName: string;
-    args: Record<string, unknown>;
-}
-export declare class MCPBridge {
-    private readonly ctx;
-    private allowlist;
-    private readonly pendingCalls;
-    constructor(ctx: MCPServerContext);
-    setAllowlist(toolNames: string[] | null): void;
-    enqueue(toolName: string, args?: Record<string, unknown>): string;
-    drainPending(): BridgeCallRequest[];
-    hasPending(): boolean;
-    call(toolName: string, args?: Record<string, unknown>): Promise<unknown>;
-    listAvailableTools(): string[];
-}

package/dist/src/server/sandbox/MCPBridge.js

@@ -1,65 +0,0 @@
-import { randomUUID } from 'node:crypto';
-export class MCPBridge {
-    ctx;
-    allowlist = null;
-    pendingCalls = [];
-    constructor(ctx) {
-        this.ctx = ctx;
-    }
-    setAllowlist(toolNames) {
-        this.allowlist = toolNames ? new Set(toolNames) : null;
-    }
-    enqueue(toolName, args = {}) {
-        const registeredNames = this.ctx.selectedTools?.map((t) => t.name) ?? [];
-        if (!registeredNames.includes(toolName)) {
-            throw new Error(`Tool "${toolName}" is not a registered MCP tool`);
-        }
-        if (this.allowlist && !this.allowlist.has(toolName)) {
-            throw new Error(`Tool "${toolName}" is not in the sandbox allowlist`);
-        }
-        const id = randomUUID().slice(0, 8);
-        this.pendingCalls.push({ id, toolName, args });
-        return id;
-    }
-    drainPending() {
-        const calls = [...this.pendingCalls];
-        this.pendingCalls.length = 0;
-        return calls;
-    }
-    hasPending() {
-        return this.pendingCalls.length > 0;
-    }
-    async call(toolName, args = {}) {
-        if (this.allowlist && !this.allowlist.has(toolName)) {
-            throw new Error(`Tool "${toolName}" is not in the sandbox allowlist`);
-        }
-        const available = this.listAvailableTools();
-        if (!available.includes(toolName)) {
-            throw new Error(`Tool "${toolName}" is not a registered MCP tool`);
-        }
-        const response = await this.ctx.executeToolWithTracking(toolName, args);
-        if (response.content && Array.isArray(response.content)) {
-            const textParts = [];
-            for (const item of response.content) {
-                if (item.type === 'text') {
-                    textParts.push(item.text);
-                }
-            }
-            const combined = textParts.join('\n');
-            try {
-                return JSON.parse(combined);
-            }
-            catch {
-                return combined;
-            }
-        }
-        return response;
-    }
-    listAvailableTools() {
-        const allTools = this.ctx.selectedTools.map((t) => t.name);
-        if (this.allowlist) {
-            return allTools.filter((n) => this.allowlist.has(n));
-        }
-        return allTools;
-    }
-}

package/dist/src/server/sandbox/QuickJSSandbox.d.ts

@@ -1,14 +0,0 @@
-import type { SandboxOptions, SandboxResult, OrchestrationOptions, OrchestrationResult } from '../sandbox/types.js';
-import type { MCPBridge } from '../sandbox/MCPBridge.js';
-export declare class QuickJSSandbox {
-    private bridge;
-    setBridge(bridge: MCPBridge): void;
-    execute(code: string, options?: SandboxOptions): Promise<SandboxResult>;
-    executeWithOrchestration(code: string, bridge: MCPBridge, options?: OrchestrationOptions): Promise<OrchestrationResult>;
-    private _executeOneRound;
-    private _injectConsole;
-    private _injectGlobals;
-    private _injectHelpers;
-    private _injectBridge;
-    private _injectBridgeForOrchestration;
-}

package/dist/src/server/sandbox/QuickJSSandbox.js

@@ -1,344 +0,0 @@
-import { getQuickJS } from 'quickjs-emscripten';
-import { SANDBOX_HELPER_SOURCE } from '../sandbox/SandboxHelpers.js';
-import { SANDBOX_EXEC_TIMEOUT_MS, SANDBOX_MEMORY_LIMIT_MB } from '../../constants.js';
-const DEFAULT_TIMEOUT_MS = SANDBOX_EXEC_TIMEOUT_MS;
-const DEFAULT_MEMORY_LIMIT_BYTES = SANDBOX_MEMORY_LIMIT_MB * 1024 * 1024;
-const DEFAULT_MAX_BRIDGE_CALLS = 10;
-function marshalToQuickJS(ctx, value) {
-    if (value === null || value === undefined)
-        return ctx.undefined;
-    switch (typeof value) {
-        case 'string':
-            return ctx.newString(value);
-        case 'number':
-            return ctx.newNumber(value);
-        case 'boolean':
-            return value ? ctx.true : ctx.false;
-        case 'object': {
-            if (Array.isArray(value)) {
-                const arr = ctx.newArray();
-                for (let i = 0; i < value.length; i++) {
-                    const elem = marshalToQuickJS(ctx, value[i]);
-                    ctx.setProp(arr, i, elem);
-                    elem.dispose();
-                }
-                return arr;
-            }
-            const obj = ctx.newObject();
-            for (const [k, v] of Object.entries(value)) {
-                const prop = marshalToQuickJS(ctx, v);
-                ctx.setProp(obj, k, prop);
-                prop.dispose();
-            }
-            return obj;
-        }
-        default:
-            return ctx.newString(String(value));
-    }
-}
-function unmarshalFromQuickJS(ctx, handle) {
-    const ty = ctx.typeof(handle);
-    switch (ty) {
-        case 'undefined':
-            return undefined;
-        case 'number':
-            return ctx.getNumber(handle);
-        case 'string':
-            return ctx.getString(handle);
-        case 'boolean': {
-            return ctx.dump(handle);
-        }
-        case 'object': {
-            return ctx.dump(handle);
-        }
-        default:
-            return ctx.dump(handle);
-    }
-}
-export class QuickJSSandbox {
-    bridge = null;
-    setBridge(bridge) {
-        this.bridge = bridge;
-    }
-    async execute(code, options = {}) {
-        const timeoutMs = options.timeoutMs ?? DEFAULT_TIMEOUT_MS;
-        const memoryLimitBytes = options.memoryLimitBytes ?? DEFAULT_MEMORY_LIMIT_BYTES;
-        const QuickJS = await getQuickJS();
-        const runtime = QuickJS.newRuntime();
-        runtime.setMemoryLimit(memoryLimitBytes);
-        const startTime = Date.now();
-        let timedOut = false;
-        runtime.setInterruptHandler(() => {
-            if (Date.now() - startTime > timeoutMs) {
-                timedOut = true;
-                return true;
-            }
-            return false;
-        });
-        const context = runtime.newContext();
-        const logs = [];
-        try {
-            this._injectConsole(context, logs);
-            this._injectHelpers(context);
-            if (this.bridge) {
-                this._injectBridge(context, this.bridge, logs);
-            }
-            if (options.globals) {
-                this._injectGlobals(context, options.globals);
-            }
-            const result = context.evalCode(code, 'sandbox-eval.js');
-            if (result.error) {
-                const errorMsg = context.dump(result.error);
-                result.error.dispose();
-                if (timedOut) {
-                    return {
-                        ok: false,
-                        error: 'Execution timed out',
-                        timedOut: true,
-                        durationMs: Date.now() - startTime,
-                        logs,
-                    };
-                }
-                return {
-                    ok: false,
-                    error: typeof errorMsg === 'object' ? JSON.stringify(errorMsg) : String(errorMsg),
-                    timedOut: false,
-                    durationMs: Date.now() - startTime,
-                    logs,
-                };
-            }
-            const output = unmarshalFromQuickJS(context, result.value);
-            result.value.dispose();
-            return {
-                ok: true,
-                output,
-                timedOut: false,
-                durationMs: Date.now() - startTime,
-                logs,
-            };
-        }
-        catch (err) {
-            return {
-                ok: false,
-                error: err instanceof Error ? err.message : String(err),
-                timedOut,
-                durationMs: Date.now() - startTime,
-                logs,
-            };
-        }
-        finally {
-            context.dispose();
-            runtime.dispose();
-        }
-    }
-    async executeWithOrchestration(code, bridge, options = {}) {
-        const maxBridgeCalls = options.maxBridgeCalls ?? DEFAULT_MAX_BRIDGE_CALLS;
-        const startTime = Date.now();
-        const allLogs = [];
-        const allBridgeCalls = [];
-        if (options.bridgeAllowlist) {
-            bridge.setAllowlist(options.bridgeAllowlist);
-        }
-        let bridgeResults = {};
-        let lastOutput;
-        let round = 0;
-        while (round <= maxBridgeCalls) {
-            const roundGlobals = {
-                ...options.globals,
-                __bridgeRound: round,
-            };
-            if (round > 0) {
-                roundGlobals.__bridgeResults = bridgeResults;
-            }
-            const roundResult = await this._executeOneRound(code, bridge, {
-                ...options,
-                globals: roundGlobals,
-            });
-            allLogs.push(...roundResult.logs);
-            if (!roundResult.ok || roundResult.timedOut) {
-                return {
-                    ...roundResult,
-                    logs: allLogs,
-                    durationMs: Date.now() - startTime,
-                    bridgeCallCount: allBridgeCalls.length,
-                    bridgeCalls: allBridgeCalls,
-                };
-            }
-            lastOutput = roundResult.output;
-            if (!bridge.hasPending()) {
-                break;
-            }
-            const pending = bridge.drainPending();
-            const roundResults = {};
-            for (const req of pending) {
-                try {
-                    const result = await bridge.call(req.toolName, req.args);
-                    roundResults[req.id] = result;
-                    allBridgeCalls.push({ toolName: req.toolName, args: req.args, result });
-                }
-                catch (err) {
-                    const errorMsg = err instanceof Error ? err.message : String(err);
-                    roundResults[req.id] = { __error: true, message: errorMsg };
-                    allBridgeCalls.push({
-                        toolName: req.toolName,
-                        args: req.args,
-                        result: { __error: true, message: errorMsg },
-                    });
-                }
-            }
-            bridgeResults = { ...bridgeResults, ...roundResults };
-            round++;
-        }
-        return {
-            ok: true,
-            output: lastOutput,
-            timedOut: false,
-            durationMs: Date.now() - startTime,
-            logs: allLogs,
-            bridgeCallCount: allBridgeCalls.length,
-            bridgeCalls: allBridgeCalls,
-        };
-    }
-    async _executeOneRound(code, bridge, options = {}) {
-        const timeoutMs = options.timeoutMs ?? DEFAULT_TIMEOUT_MS;
-        const memoryLimitBytes = options.memoryLimitBytes ?? DEFAULT_MEMORY_LIMIT_BYTES;
-        const QuickJS = await getQuickJS();
-        const runtime = QuickJS.newRuntime();
-        runtime.setMemoryLimit(memoryLimitBytes);
-        const startTime = Date.now();
-        let timedOut = false;
-        runtime.setInterruptHandler(() => {
-            if (Date.now() - startTime > timeoutMs) {
-                timedOut = true;
-                return true;
-            }
-            return false;
-        });
-        const context = runtime.newContext();
-        const logs = [];
-        try {
-            this._injectConsole(context, logs);
-            this._injectHelpers(context);
-            this._injectBridgeForOrchestration(context, bridge, logs);
-            if (options.globals) {
-                this._injectGlobals(context, options.globals);
-            }
-            const result = context.evalCode(code, 'sandbox-eval.js');
-            if (result.error) {
-                const errorMsg = context.dump(result.error);
-                result.error.dispose();
-                if (timedOut) {
-                    return {
-                        ok: false,
-                        error: 'Execution timed out',
-                        timedOut: true,
-                        durationMs: Date.now() - startTime,
-                        logs,
-                    };
-                }
-                return {
-                    ok: false,
-                    error: typeof errorMsg === 'object' ? JSON.stringify(errorMsg) : String(errorMsg),
-                    timedOut: false,
-                    durationMs: Date.now() - startTime,
-                    logs,
-                };
-            }
-            const output = unmarshalFromQuickJS(context, result.value);
-            result.value.dispose();
-            return { ok: true, output, timedOut: false, durationMs: Date.now() - startTime, logs };
-        }
-        catch (err) {
-            return {
-                ok: false,
-                error: err instanceof Error ? err.message : String(err),
-                timedOut,
-                durationMs: Date.now() - startTime,
-                logs,
-            };
-        }
-        finally {
-            context.dispose();
-            runtime.dispose();
-        }
-    }
-    _injectConsole(ctx, logs) {
-        const consoleObj = ctx.newObject();
-        const logFn = ctx.newFunction('log', (...args) => {
-            const parts = args.map((a) => {
-                const val = unmarshalFromQuickJS(ctx, a);
-                return typeof val === 'string' ? val : JSON.stringify(val);
-            });
-            logs.push(parts.join(' '));
-        });
-        ctx.setProp(consoleObj, 'log', logFn);
-        ctx.setProp(consoleObj, 'warn', logFn);
-        ctx.setProp(consoleObj, 'error', logFn);
-        ctx.setProp(ctx.global, 'console', consoleObj);
-        logFn.dispose();
-        consoleObj.dispose();
-    }
-    _injectGlobals(ctx, globals) {
-        for (const [key, value] of Object.entries(globals)) {
-            const handle = marshalToQuickJS(ctx, value);
-            ctx.setProp(ctx.global, key, handle);
-            handle.dispose();
-        }
-    }
-    _injectHelpers(ctx) {
-        const result = ctx.evalCode(SANDBOX_HELPER_SOURCE, 'sandbox-helpers.js');
-        if (result.error) {
-            ctx.dump(result.error);
-            result.error.dispose();
-        }
-        else {
-            result.value.dispose();
-        }
-    }
-    _injectBridge(ctx, bridge, logs) {
-        const mcpObj = ctx.newObject();
-        const callFn = ctx.newFunction('call', (nameHandle, argsHandle) => {
-            const name = ctx.getString(nameHandle);
-            const args = ctx.dump(argsHandle) ?? {};
-            logs.push(`[mcp.call] ${name}(${JSON.stringify(args)})`);
-            return marshalToQuickJS(ctx, { pending: true, tool: name });
-        });
-        const listFn = ctx.newFunction('listTools', () => {
-            const tools = bridge.listAvailableTools();
-            return marshalToQuickJS(ctx, tools);
-        });
-        ctx.setProp(mcpObj, 'call', callFn);
-        ctx.setProp(mcpObj, 'listTools', listFn);
-        ctx.setProp(ctx.global, 'mcp', mcpObj);
-        callFn.dispose();
-        listFn.dispose();
-        mcpObj.dispose();
-    }
-    _injectBridgeForOrchestration(ctx, bridge, logs) {
-        const mcpObj = ctx.newObject();
-        const callFn = ctx.newFunction('call', (nameHandle, argsHandle) => {
-            const name = ctx.getString(nameHandle);
-            const args = ctx.dump(argsHandle) ?? {};
-            try {
-                const callId = bridge.enqueue(name, args);
-                logs.push(`[mcp.call] enqueued ${name}(${JSON.stringify(args)}) → ${callId}`);
-                return marshalToQuickJS(ctx, { __bridgeCall: true, callId });
-            }
-            catch (err) {
-                const errorMsg = err instanceof Error ? err.message : String(err);
-                logs.push(`[mcp.call] rejected ${name}: ${errorMsg}`);
-                return marshalToQuickJS(ctx, { __bridgeCall: false, error: errorMsg });
-            }
-        });
-        const listFn = ctx.newFunction('listTools', () => {
-            const tools = bridge.listAvailableTools();
-            return marshalToQuickJS(ctx, tools);
-        });
-        ctx.setProp(mcpObj, 'call', callFn);
-        ctx.setProp(mcpObj, 'listTools', listFn);
-        ctx.setProp(ctx.global, 'mcp', mcpObj);
-        callFn.dispose();
-        listFn.dispose();
-        mcpObj.dispose();
-    }
-}

package/dist/src/server/sandbox/SandboxHelpers.d.ts

@@ -1 +0,0 @@
-export declare const SANDBOX_HELPER_SOURCE = "\n(function() {\n  var helpers = {};\n\n  // \u2500\u2500 base64 \u2500\u2500\n  helpers.base64 = {\n    _chars: 'ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789+/=',\n    encode: function(str) {\n      var output = '';\n      var chr1, chr2, chr3, enc1, enc2, enc3, enc4;\n      var i = 0;\n      while (i < str.length) {\n        chr1 = str.charCodeAt(i++);\n        chr2 = str.charCodeAt(i++);\n        chr3 = str.charCodeAt(i++);\n        enc1 = chr1 >> 2;\n        enc2 = ((chr1 & 3) << 4) | (chr2 >> 4);\n        enc3 = ((chr2 & 15) << 2) | (chr3 >> 6);\n        enc4 = chr3 & 63;\n        if (isNaN(chr2)) { enc3 = enc4 = 64; }\n        else if (isNaN(chr3)) { enc4 = 64; }\n        output += this._chars.charAt(enc1) + this._chars.charAt(enc2) +\n                  this._chars.charAt(enc3) + this._chars.charAt(enc4);\n      }\n      return output;\n    },\n    decode: function(str) {\n      var output = '';\n      var chr1, chr2, chr3, enc1, enc2, enc3, enc4;\n      var i = 0;\n      str = str.replace(/[^A-Za-z0-9+/=]/g, '');\n      while (i < str.length) {\n        enc1 = this._chars.indexOf(str.charAt(i++));\n        enc2 = this._chars.indexOf(str.charAt(i++));\n        enc3 = this._chars.indexOf(str.charAt(i++));\n        enc4 = this._chars.indexOf(str.charAt(i++));\n        chr1 = (enc1 << 2) | (enc2 >> 4);\n        chr2 = ((enc2 & 15) << 4) | (enc3 >> 2);\n        chr3 = ((enc3 & 3) << 6) | enc4;\n        output += String.fromCharCode(chr1);\n        if (enc3 !== 64) output += String.fromCharCode(chr2);\n        if (enc4 !== 64) output += String.fromCharCode(chr3);\n      }\n      return output;\n    }\n  };\n\n  // \u2500\u2500 hex \u2500\u2500\n  helpers.hex = {\n    encode: function(str) {\n      var hex = '';\n      for (var i = 0; i < str.length; i++) {\n        hex += ('0' + str.charCodeAt(i).toString(16)).slice(-2);\n      }\n      return hex;\n    },\n    decode: function(hex) {\n      var str = '';\n      for (var i = 0; i < hex.length; i += 2) {\n        str += String.fromCharCode(parseInt(hex.substr(i, 2), 16));\n      }\n      return str;\n    }\n  };\n\n  // \u2500\u2500 hash (simple djb2/fnv for in-sandbox use; NOT cryptographic!) \u2500\u2500\n  helpers.hash = {\n    djb2: function(str) {\n      var hash = 5381;\n      for (var i = 0; i < str.length; i++) {\n        hash = ((hash << 5) + hash) + str.charCodeAt(i);\n        hash = hash & hash; // Convert to 32-bit\n      }\n      return (hash >>> 0).toString(16);\n    },\n    fnv1a: function(str) {\n      var hash = 0x811c9dc5;\n      for (var i = 0; i < str.length; i++) {\n        hash ^= str.charCodeAt(i);\n        hash = Math.imul(hash, 0x01000193);\n      }\n      return (hash >>> 0).toString(16);\n    },\n    /** Simple MD5 \u2014 pure JS implementation */\n    md5: function(str) {\n      // Lightweight MD5 for sandbox use\n      function md5cycle(x, k) {\n        var a = x[0], b = x[1], c = x[2], d = x[3];\n        a = ff(a,b,c,d,k[0],7,-680876936);d=ff(d,a,b,c,k[1],12,-389564586);c=ff(c,d,a,b,k[2],17,606105819);b=ff(b,c,d,a,k[3],22,-1044525330);\n        a=ff(a,b,c,d,k[4],7,-176418897);d=ff(d,a,b,c,k[5],12,1200080426);c=ff(c,d,a,b,k[6],17,-1473231341);b=ff(b,c,d,a,k[7],22,-45705983);\n        a=ff(a,b,c,d,k[8],7,1770035416);d=ff(d,a,b,c,k[9],12,-1958414417);c=ff(c,d,a,b,k[10],17,-42063);b=ff(b,c,d,a,k[11],22,-1990404162);\n        a=ff(a,b,c,d,k[12],7,1804603682);d=ff(d,a,b,c,k[13],12,-40341101);c=ff(c,d,a,b,k[14],17,-1502002290);b=ff(b,c,d,a,k[15],22,1236535329);\n        a=gg(a,b,c,d,k[1],5,-165796510);d=gg(d,a,b,c,k[6],9,-1069501632);c=gg(c,d,a,b,k[11],14,643717713);b=gg(b,c,d,a,k[0],20,-373897302);\n        a=gg(a,b,c,d,k[5],5,-701558691);d=gg(d,a,b,c,k[10],9,38016083);c=gg(c,d,a,b,k[15],14,-660478335);b=gg(b,c,d,a,k[4],20,-405537848);\n        a=gg(a,b,c,d,k[9],5,568446438);d=gg(d,a,b,c,k[14],9,-1019803690);c=gg(c,d,a,b,k[3],14,-187363961);b=gg(b,c,d,a,k[8],20,1163531501);\n        a=gg(a,b,c,d,k[13],5,-1444681467);d=gg(d,a,b,c,k[2],9,-51403784);c=gg(c,d,a,b,k[7],14,1735328473);b=gg(b,c,d,a,k[12],20,-1926607734);\n        a=hh(a,b,c,d,k[5],4,-378558);d=hh(d,a,b,c,k[8],11,-2022574463);c=hh(c,d,a,b,k[11],16,1839030562);b=hh(b,c,d,a,k[14],23,-35309556);\n        a=hh(a,b,c,d,k[1],4,-1530992060);d=hh(d,a,b,c,k[4],11,1272893353);c=hh(c,d,a,b,k[7],16,-155497632);b=hh(b,c,d,a,k[10],23,-1094730640);\n        a=hh(a,b,c,d,k[13],4,681279174);d=hh(d,a,b,c,k[0],11,-358537222);c=hh(c,d,a,b,k[3],16,-722521979);b=hh(b,c,d,a,k[6],23,76029189);\n        a=hh(a,b,c,d,k[9],4,-640364487);d=hh(d,a,b,c,k[12],11,-421815835);c=hh(c,d,a,b,k[15],16,530742520);b=hh(b,c,d,a,k[2],23,-995338651);\n        a=ii(a,b,c,d,k[0],6,-198630844);d=ii(d,a,b,c,k[7],10,1126891415);c=ii(c,d,a,b,k[14],15,-1416354905);b=ii(b,c,d,a,k[5],21,-57434055);\n        a=ii(a,b,c,d,k[12],6,1700485571);d=ii(d,a,b,c,k[3],10,-1894986606);c=ii(c,d,a,b,k[10],15,-1051523);b=ii(b,c,d,a,k[1],21,-2054922799);\n        a=ii(a,b,c,d,k[8],6,1873313359);d=ii(d,a,b,c,k[15],10,-30611744);c=ii(c,d,a,b,k[6],15,-1560198380);b=ii(b,c,d,a,k[13],21,1309151649);\n        a=ii(a,b,c,d,k[4],6,-145523070);d=ii(d,a,b,c,k[11],10,-1120210379);c=ii(c,d,a,b,k[2],15,718787259);b=ii(b,c,d,a,k[9],21,-343485551);\n        x[0]=add32(a,x[0]);x[1]=add32(b,x[1]);x[2]=add32(c,x[2]);x[3]=add32(d,x[3]);\n      }\n      function cmn(q,a,b,x,s,t){a=add32(add32(a,q),add32(x,t));return add32((a<<s)|(a>>>(32-s)),b)}\n      function ff(a,b,c,d,x,s,t){return cmn((b&c)|((~b)&d),a,b,x,s,t)}\n      function gg(a,b,c,d,x,s,t){return cmn((b&d)|(c&(~d)),a,b,x,s,t)}\n      function hh(a,b,c,d,x,s,t){return cmn(b^c^d,a,b,x,s,t)}\n      function ii(a,b,c,d,x,s,t){return cmn(c^(b|(~d)),a,b,x,s,t)}\n      function add32(a,b){return(a+b)&0xFFFFFFFF}\n\n      var n = str.length;\n      var state = [1732584193,-271733879,-1732584194,271733878];\n      var tail = [0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0];\n      var i;\n      for (i = 64; i <= n; i += 64) {\n        var blk = [];\n        for (var j = i - 64; j < i; j += 4) {\n          blk.push(str.charCodeAt(j)|(str.charCodeAt(j+1)<<8)|(str.charCodeAt(j+2)<<16)|(str.charCodeAt(j+3)<<24));\n        }\n        md5cycle(state, blk);\n      }\n      for (var j = 0; j < 16; j++) tail[j] = 0;\n      for (i = i - 64; i < n; i++) {\n        tail[i>>2] |= str.charCodeAt(i) << ((i%4)<<3);\n      }\n      tail[i>>2] |= 0x80 << ((i%4)<<3);\n      if (i > 55) { md5cycle(state, tail); for (j = 0; j < 16; j++) tail[j] = 0; }\n      tail[14] = n * 8;\n      md5cycle(state, tail);\n\n      var hex_chr = '0123456789abcdef';\n      var s = '';\n      for (i = 0; i < 4; i++) {\n        for (j = 0; j < 4; j++) {\n          s += hex_chr.charAt((state[i] >> (j*8+4)) & 0x0F) + hex_chr.charAt((state[i] >> (j*8)) & 0x0F);\n        }\n      }\n      return s;\n    },\n    sha256: function(str) {\n      // Minimal pure-JS SHA-256\n      var K = [0x428a2f98,0x71374491,0xb5c0fbcf,0xe9b5dba5,0x3956c25b,0x59f111f1,0x923f82a4,0xab1c5ed5,\n               0xd807aa98,0x12835b01,0x243185be,0x550c7dc3,0x72be5d74,0x80deb1fe,0x9bdc06a7,0xc19bf174,\n               0xe49b69c1,0xefbe4786,0x0fc19dc6,0x240ca1cc,0x2de92c6f,0x4a7484aa,0x5cb0a9dc,0x76f988da,\n               0x983e5152,0xa831c66d,0xb00327c8,0xbf597fc7,0xc6e00bf3,0xd5a79147,0x06ca6351,0x14292967,\n               0x27b70a85,0x2e1b2138,0x4d2c6dfc,0x53380d13,0x650a7354,0x766a0abb,0x81c2c92e,0x92722c85,\n               0xa2bfe8a1,0xa81a664b,0xc24b8b70,0xc76c51a3,0xd192e819,0xd6990624,0xf40e3585,0x106aa070,\n               0x19a4c116,0x1e376c08,0x2748774c,0x34b0bcb5,0x391c0cb3,0x4ed8aa4a,0x5b9cca4f,0x682e6ff3,\n               0x748f82ee,0x78a5636f,0x84c87814,0x8cc70208,0x90befffa,0xa4506ceb,0xbef9a3f7,0xc67178f2];\n      function rr(x,n){return(x>>>n)|(x<<(32-n))}\n      var H=[0x6a09e667,0xbb67ae85,0x3c6ef372,0xa54ff53a,0x510e527f,0x9b05688c,0x1f83d9ab,0x5be0cd19];\n      var msg=[];\n      for(var i=0;i<str.length;i++)msg.push(str.charCodeAt(i));\n      msg.push(0x80);\n      var l=msg.length;\n      while(l%64!==56){msg.push(0);l++;}\n      var bits=str.length*8;\n      for(i=7;i>=0;i--)msg.push((bits>>>(i*8))&0xff);\n      for(var offset=0;offset<msg.length;offset+=64){\n        var W=[];\n        for(i=0;i<16;i++)W[i]=(msg[offset+i*4]<<24)|(msg[offset+i*4+1]<<16)|(msg[offset+i*4+2]<<8)|msg[offset+i*4+3];\n        for(i=16;i<64;i++){\n          var s0=rr(W[i-15],7)^rr(W[i-15],18)^(W[i-15]>>>3);\n          var s1=rr(W[i-2],17)^rr(W[i-2],19)^(W[i-2]>>>10);\n          W[i]=(W[i-16]+s0+W[i-7]+s1)|0;\n        }\n        var a=H[0],b=H[1],c=H[2],d=H[3],e=H[4],f=H[5],g=H[6],h=H[7];\n        for(i=0;i<64;i++){\n          var S1=rr(e,6)^rr(e,11)^rr(e,25);\n          var ch=(e&f)^((~e)&g);\n          var t1=(h+S1+ch+K[i]+W[i])|0;\n          var S0=rr(a,2)^rr(a,13)^rr(a,22);\n          var maj=(a&b)^(a&c)^(b&c);\n          var t2=(S0+maj)|0;\n          h=g;g=f;f=e;e=(d+t1)|0;d=c;c=b;b=a;a=(t1+t2)|0;\n        }\n        H[0]=(H[0]+a)|0;H[1]=(H[1]+b)|0;H[2]=(H[2]+c)|0;H[3]=(H[3]+d)|0;\n        H[4]=(H[4]+e)|0;H[5]=(H[5]+f)|0;H[6]=(H[6]+g)|0;H[7]=(H[7]+h)|0;\n      }\n      var hex='';\n      for(i=0;i<8;i++)for(var j=7;j>=0;j--)hex+='0123456789abcdef'.charAt((H[i]>>>(j*4))&0xf);\n      return hex;\n    }\n  };\n\n  // \u2500\u2500 json \u2500\u2500\n  helpers.json = {\n    safeParse: function(str) {\n      try { return { ok: true, value: JSON.parse(str) }; }\n      catch(e) { return { ok: false, error: e.message }; }\n    }\n  };\n\n  // \u2500\u2500 array \u2500\u2500\n  helpers.array = {\n    chunk: function(arr, size) {\n      var result = [];\n      for (var i = 0; i < arr.length; i += size) {\n        result.push(arr.slice(i, i + size));\n      }\n      return result;\n    },\n    flatten: function(arr) {\n      var result = [];\n      for (var i = 0; i < arr.length; i++) {\n        if (Array.isArray(arr[i])) {\n          result = result.concat(this.flatten(arr[i]));\n        } else {\n          result.push(arr[i]);\n        }\n      }\n      return result;\n    },\n    unique: function(arr) {\n      var seen = {};\n      var result = [];\n      for (var i = 0; i < arr.length; i++) {\n        var key = JSON.stringify(arr[i]);\n        if (!seen[key]) {\n          seen[key] = true;\n          result.push(arr[i]);\n        }\n      }\n      return result;\n    }\n  };\n\n  // \u2500\u2500 string \u2500\u2500\n  helpers.string = {\n    camelCase: function(s) {\n      return s.replace(/[-_\\s]+(\\w)/g, function(_, c) { return c.toUpperCase(); })\n              .replace(/^\\w/, function(c) { return c.toLowerCase(); });\n    },\n    snakeCase: function(s) {\n      return s.replace(/([A-Z])/g, '_$1').toLowerCase()\n              .replace(/[-\\s]+/g, '_')\n              .replace(/^_/, '');\n    },\n    truncate: function(s, len) {\n      if (s.length <= len) return s;\n      return s.slice(0, len - 3) + '...';\n    }\n  };\n\n  // Expose to global scope\n  globalThis.helpers = helpers;\n})();\n";