@secure-exec/core 0.1.1-rc.3 → 0.2.0-rc.2

package/dist/isolate-runtime/require-setup.js

@@ -1,31 +1,96 @@
 "use strict";
 (() => {
-  // isolate-runtime/src/inject/require-setup.ts
-  var __requireExposeCustomGlobal = typeof globalThis.__runtimeExposeCustomGlobal === "function" ? globalThis.__runtimeExposeCustomGlobal : function exposeCustomGlobal(name2, value) {
-    Object.defineProperty(globalThis, name2, {
+  // ../core/isolate-runtime/src/inject/require-setup.ts
+  var REQUIRE_TRANSFORM_MARKER = "/*__secure_exec_require_esm__*/";
+  var __requireExposeCustomGlobal = typeof globalThis.__runtimeExposeCustomGlobal === "function" ? globalThis.__runtimeExposeCustomGlobal : function exposeCustomGlobal(name, value) {
+    Object.defineProperty(globalThis, name, {
       value,
       writable: false,
       configurable: false,
       enumerable: true
     });
   };
-  if (typeof globalThis.AbortController === "undefined" || typeof globalThis.AbortSignal === "undefined") {
+  if (typeof globalThis.global === "undefined") {
+    globalThis.global = globalThis;
+  }
+  if (typeof globalThis.RegExp === "function" && !globalThis.RegExp.__secureExecRgiEmojiCompat) {
+    const NativeRegExp = globalThis.RegExp;
+    const RGI_EMOJI_PATTERN = "^\\p{RGI_Emoji}$";
+    const RGI_EMOJI_BASE_CLASS = "[\\u{00A9}\\u{00AE}\\u{203C}\\u{2049}\\u{2122}\\u{2139}\\u{2194}-\\u{21AA}\\u{231A}-\\u{23FF}\\u{24C2}\\u{25AA}-\\u{27BF}\\u{2934}-\\u{2935}\\u{2B05}-\\u{2B55}\\u{3030}\\u{303D}\\u{3297}\\u{3299}\\u{1F000}-\\u{1FAFF}]";
+    const RGI_EMOJI_KEYCAP = "[#*0-9]\\uFE0F?\\u20E3";
+    const RGI_EMOJI_FALLBACK_SOURCE = "^(?:" + RGI_EMOJI_KEYCAP + "|\\p{Regional_Indicator}{2}|" + RGI_EMOJI_BASE_CLASS + "(?:\\uFE0F|\\u200D(?:" + RGI_EMOJI_KEYCAP + "|" + RGI_EMOJI_BASE_CLASS + ")|[\\u{1F3FB}-\\u{1F3FF}])*)$";
+    try {
+      new NativeRegExp(RGI_EMOJI_PATTERN, "v");
+    } catch (error) {
+      if (String(error && error.message || error).includes("RGI_Emoji")) {
+        let CompatRegExp = function(pattern, flags) {
+          const normalizedPattern = pattern instanceof NativeRegExp && flags === void 0 ? pattern.source : String(pattern);
+          const normalizedFlags = flags === void 0 ? pattern instanceof NativeRegExp ? pattern.flags : "" : String(flags);
+          try {
+            return new NativeRegExp(pattern, flags);
+          } catch (innerError) {
+            if (normalizedPattern === RGI_EMOJI_PATTERN && normalizedFlags === "v") {
+              return new NativeRegExp(RGI_EMOJI_FALLBACK_SOURCE, "u");
+            }
+            throw innerError;
+          }
+        };
+        CompatRegExp2 = CompatRegExp;
+        Object.setPrototypeOf(CompatRegExp, NativeRegExp);
+        CompatRegExp.prototype = NativeRegExp.prototype;
+        Object.defineProperty(CompatRegExp.prototype, "constructor", {
+          value: CompatRegExp,
+          writable: true,
+          configurable: true
+        });
+        CompatRegExp.__secureExecRgiEmojiCompat = true;
+        globalThis.RegExp = CompatRegExp;
+      }
+    }
+  }
+  var CompatRegExp2;
+  if (typeof globalThis.AbortController === "undefined" || typeof globalThis.AbortSignal === "undefined" || typeof globalThis.AbortSignal?.prototype?.addEventListener !== "function" || typeof globalThis.AbortSignal?.prototype?.removeEventListener !== "function") {
+    let getAbortSignalState = function(signal) {
+      const state = abortSignalState.get(signal);
+      if (!state) {
+        throw new Error("Invalid AbortSignal");
+      }
+      return state;
+    };
+    getAbortSignalState2 = getAbortSignalState;
+    const abortSignalState = /* @__PURE__ */ new WeakMap();
     class AbortSignal {
       constructor() {
-        this.aborted = false;
-        this.reason = void 0;
         this.onabort = null;
-        this._listeners = [];
+        abortSignalState.set(this, {
+          aborted: false,
+          reason: void 0,
+          listeners: []
+        });
+      }
+      get aborted() {
+        return getAbortSignalState(this).aborted;
+      }
+      get reason() {
+        return getAbortSignalState(this).reason;
+      }
+      get _listeners() {
+        return getAbortSignalState(this).listeners.slice();
+      }
+      getEventListeners(type) {
+        if (type !== "abort") return [];
+        return getAbortSignalState(this).listeners.slice();
       }
       addEventListener(type, listener) {
         if (type !== "abort" || typeof listener !== "function") return;
-        this._listeners.push(listener);
+        getAbortSignalState(this).listeners.push(listener);
       }
       removeEventListener(type, listener) {
         if (type !== "abort" || typeof listener !== "function") return;
-        const index = this._listeners.indexOf(listener);
+        const listeners = getAbortSignalState(this).listeners;
+        const index = listeners.indexOf(listener);
         if (index !== -1) {
-          this._listeners.splice(index, 1);
+          listeners.splice(index, 1);
         }
       }
       dispatchEvent(event) {
@@ -36,7 +101,7 @@
           } catch {
           }
         }
-        const listeners = this._listeners.slice();
+        const listeners = getAbortSignalState(this).listeners.slice();
         for (const listener of listeners) {
           try {
             listener.call(this, event);
@@ -51,15 +116,78 @@
         this.signal = new AbortSignal();
       }
       abort(reason) {
-        if (this.signal.aborted) return;
-        this.signal.aborted = true;
-        this.signal.reason = reason;
+        const state = getAbortSignalState(this.signal);
+        if (state.aborted) return;
+        state.aborted = true;
+        state.reason = reason;
         this.signal.dispatchEvent({ type: "abort" });
       }
     }
     __requireExposeCustomGlobal("AbortSignal", AbortSignal);
     __requireExposeCustomGlobal("AbortController", AbortController);
   }
+  var getAbortSignalState2;
+  if (typeof globalThis.AbortSignal === "function" && typeof globalThis.AbortController === "function" && typeof globalThis.AbortSignal.abort !== "function") {
+    globalThis.AbortSignal.abort = function abort(reason) {
+      const controller = new globalThis.AbortController();
+      controller.abort(reason);
+      return controller.signal;
+    };
+  }
+  if (typeof globalThis.AbortSignal === "function" && typeof globalThis.AbortController === "function" && typeof globalThis.AbortSignal.timeout !== "function") {
+    globalThis.AbortSignal.timeout = function timeout(milliseconds) {
+      var delay = Number(milliseconds);
+      if (!Number.isFinite(delay) || delay < 0) {
+        throw new RangeError('The value of "milliseconds" is out of range. It must be a finite, non-negative number.');
+      }
+      var controller = new globalThis.AbortController();
+      var timer = setTimeout(function() {
+        controller.abort(
+          new globalThis.DOMException(
+            "The operation was aborted due to timeout",
+            "TimeoutError"
+          )
+        );
+      }, delay);
+      if (timer && typeof timer.unref === "function") {
+        timer.unref();
+      }
+      return controller.signal;
+    };
+  }
+  if (typeof globalThis.AbortSignal === "function" && typeof globalThis.AbortController === "function" && typeof globalThis.AbortSignal.any !== "function") {
+    globalThis.AbortSignal.any = function any(signals) {
+      if (signals === null || signals === void 0 || typeof signals[Symbol.iterator] !== "function") {
+        throw new TypeError('The "signals" argument must be an iterable.');
+      }
+      var controller = new globalThis.AbortController();
+      var cleanup = [];
+      var abortFromSignal = function abortFromSignal2(signal) {
+        for (var index = 0; index < cleanup.length; index += 1) {
+          cleanup[index]();
+        }
+        cleanup.length = 0;
+        controller.abort(signal.reason);
+      };
+      for (const signal of signals) {
+        if (!signal || typeof signal.aborted !== "boolean" || typeof signal.addEventListener !== "function" || typeof signal.removeEventListener !== "function") {
+          throw new TypeError('The "signals" argument must contain only AbortSignal instances.');
+        }
+        if (signal.aborted) {
+          abortFromSignal(signal);
+          break;
+        }
+        var listener = function() {
+          abortFromSignal(signal);
+        };
+        signal.addEventListener("abort", listener, { once: true });
+        cleanup.push(function() {
+          signal.removeEventListener("abort", listener);
+        });
+      }
+      return controller.signal;
+    };
+  }
   if (typeof globalThis.structuredClone !== "function") {
     let structuredClonePolyfill = function(value) {
       if (value === null || typeof value !== "object") {
@@ -80,6 +208,10 @@
     __requireExposeCustomGlobal("structuredClone", structuredClonePolyfill);
   }
   var structuredClonePolyfill2;
+  if (typeof globalThis.SharedArrayBuffer === "undefined") {
+    globalThis.SharedArrayBuffer = ArrayBuffer;
+    __requireExposeCustomGlobal("SharedArrayBuffer", ArrayBuffer);
+  }
   if (typeof globalThis.btoa !== "function") {
     __requireExposeCustomGlobal("btoa", function btoa(input) {
       return Buffer.from(String(input), "binary").toString("base64");
@@ -96,58 +228,851 @@
     if (lastSlash === 0) return "/";
     return p.slice(0, lastSlash);
   }
-  if (typeof globalThis.TextDecoder === "function") {
-    _OrigTextDecoder = globalThis.TextDecoder;
-    _utf8Aliases = {
-      "utf-8": true,
-      "utf8": true,
-      "unicode-1-1-utf-8": true,
-      "ascii": true,
-      "us-ascii": true,
-      "iso-8859-1": true,
-      "latin1": true,
-      "binary": true,
-      "windows-1252": true,
-      "utf-16le": true,
-      "utf-16": true,
-      "ucs-2": true,
-      "ucs2": true
+  (function installWhatwgEncodingAndEvents() {
+    function _withCode(error, code) {
+      error.code = code;
+      return error;
+    }
+    function _trimAsciiWhitespace(value) {
+      return value.replace(/^[\t\n\f\r ]+|[\t\n\f\r ]+$/g, "");
+    }
+    function _normalizeEncodingLabel(label) {
+      var normalized = _trimAsciiWhitespace(
+        label === void 0 ? "utf-8" : String(label)
+      ).toLowerCase();
+      switch (normalized) {
+        case "utf-8":
+        case "utf8":
+        case "unicode-1-1-utf-8":
+        case "unicode11utf8":
+        case "unicode20utf8":
+        case "x-unicode20utf8":
+          return "utf-8";
+        case "utf-16":
+        case "utf-16le":
+        case "ucs-2":
+        case "ucs2":
+        case "csunicode":
+        case "iso-10646-ucs-2":
+        case "unicode":
+        case "unicodefeff":
+          return "utf-16le";
+        case "utf-16be":
+        case "unicodefffe":
+          return "utf-16be";
+        default:
+          throw _withCode(
+            new RangeError('The "' + normalized + '" encoding is not supported'),
+            "ERR_ENCODING_NOT_SUPPORTED"
+          );
+      }
+    }
+    function _toUint8Array(input) {
+      if (input === void 0) {
+        return new Uint8Array(0);
+      }
+      if (ArrayBuffer.isView(input)) {
+        return new Uint8Array(input.buffer, input.byteOffset, input.byteLength);
+      }
+      if (input instanceof ArrayBuffer) {
+        return new Uint8Array(input);
+      }
+      if (typeof SharedArrayBuffer !== "undefined" && input instanceof SharedArrayBuffer) {
+        return new Uint8Array(input);
+      }
+      throw _withCode(
+        new TypeError(
+          'The "input" argument must be an instance of ArrayBuffer, SharedArrayBuffer, or ArrayBufferView.'
+        ),
+        "ERR_INVALID_ARG_TYPE"
+      );
+    }
+    function _encodeUtf8ScalarValue(codePoint, bytes) {
+      if (codePoint <= 127) {
+        bytes.push(codePoint);
+        return;
+      }
+      if (codePoint <= 2047) {
+        bytes.push(192 | codePoint >> 6, 128 | codePoint & 63);
+        return;
+      }
+      if (codePoint <= 65535) {
+        bytes.push(
+          224 | codePoint >> 12,
+          128 | codePoint >> 6 & 63,
+          128 | codePoint & 63
+        );
+        return;
+      }
+      bytes.push(
+        240 | codePoint >> 18,
+        128 | codePoint >> 12 & 63,
+        128 | codePoint >> 6 & 63,
+        128 | codePoint & 63
+      );
+    }
+    function _encodeUtf8(input) {
+      var value = String(input === void 0 ? "" : input);
+      var bytes = [];
+      for (var index = 0; index < value.length; index += 1) {
+        var codeUnit = value.charCodeAt(index);
+        if (codeUnit >= 55296 && codeUnit <= 56319) {
+          var nextIndex = index + 1;
+          if (nextIndex < value.length) {
+            var nextCodeUnit = value.charCodeAt(nextIndex);
+            if (nextCodeUnit >= 56320 && nextCodeUnit <= 57343) {
+              _encodeUtf8ScalarValue(
+                65536 + (codeUnit - 55296 << 10) + (nextCodeUnit - 56320),
+                bytes
+              );
+              index = nextIndex;
+              continue;
+            }
+          }
+          _encodeUtf8ScalarValue(65533, bytes);
+          continue;
+        }
+        if (codeUnit >= 56320 && codeUnit <= 57343) {
+          _encodeUtf8ScalarValue(65533, bytes);
+          continue;
+        }
+        _encodeUtf8ScalarValue(codeUnit, bytes);
+      }
+      return new Uint8Array(bytes);
+    }
+    function _appendCodePoint(output, codePoint) {
+      if (codePoint <= 65535) {
+        output.push(String.fromCharCode(codePoint));
+        return;
+      }
+      var adjusted = codePoint - 65536;
+      output.push(
+        String.fromCharCode(55296 + (adjusted >> 10)),
+        String.fromCharCode(56320 + (adjusted & 1023))
+      );
+    }
+    function _isContinuationByte(value) {
+      return value >= 128 && value <= 191;
+    }
+    function _createInvalidDataError(encoding) {
+      return _withCode(
+        new TypeError("The encoded data was not valid for encoding " + encoding),
+        "ERR_ENCODING_INVALID_ENCODED_DATA"
+      );
+    }
+    function _decodeUtf8(bytes, fatal, stream, encoding) {
+      var output = [];
+      for (var index = 0; index < bytes.length; ) {
+        var first = bytes[index];
+        if (first <= 127) {
+          output.push(String.fromCharCode(first));
+          index += 1;
+          continue;
+        }
+        var needed = 0;
+        var codePoint = 0;
+        if (first >= 194 && first <= 223) {
+          needed = 1;
+          codePoint = first & 31;
+        } else if (first >= 224 && first <= 239) {
+          needed = 2;
+          codePoint = first & 15;
+        } else if (first >= 240 && first <= 244) {
+          needed = 3;
+          codePoint = first & 7;
+        } else {
+          if (fatal) throw _createInvalidDataError(encoding);
+          output.push("\uFFFD");
+          index += 1;
+          continue;
+        }
+        if (index + needed >= bytes.length) {
+          if (stream) {
+            return { text: output.join(""), pending: Array.from(bytes.slice(index)) };
+          }
+          if (fatal) throw _createInvalidDataError(encoding);
+          output.push("\uFFFD");
+          break;
+        }
+        var second = bytes[index + 1];
+        if (!_isContinuationByte(second)) {
+          if (fatal) throw _createInvalidDataError(encoding);
+          output.push("\uFFFD");
+          index += 1;
+          continue;
+        }
+        if (first === 224 && second < 160 || first === 237 && second > 159 || first === 240 && second < 144 || first === 244 && second > 143) {
+          if (fatal) throw _createInvalidDataError(encoding);
+          output.push("\uFFFD");
+          index += 1;
+          continue;
+        }
+        codePoint = codePoint << 6 | second & 63;
+        if (needed >= 2) {
+          var third = bytes[index + 2];
+          if (!_isContinuationByte(third)) {
+            if (fatal) throw _createInvalidDataError(encoding);
+            output.push("\uFFFD");
+            index += 1;
+            continue;
+          }
+          codePoint = codePoint << 6 | third & 63;
+        }
+        if (needed === 3) {
+          var fourth = bytes[index + 3];
+          if (!_isContinuationByte(fourth)) {
+            if (fatal) throw _createInvalidDataError(encoding);
+            output.push("\uFFFD");
+            index += 1;
+            continue;
+          }
+          codePoint = codePoint << 6 | fourth & 63;
+        }
+        if (codePoint >= 55296 && codePoint <= 57343) {
+          if (fatal) throw _createInvalidDataError(encoding);
+          output.push("\uFFFD");
+          index += needed + 1;
+          continue;
+        }
+        _appendCodePoint(output, codePoint);
+        index += needed + 1;
+      }
+      return { text: output.join(""), pending: [] };
+    }
+    function _decodeUtf16(bytes, encoding, fatal, stream, bomSeen) {
+      var output = [];
+      var endian = encoding === "utf-16be" ? "be" : "le";
+      if (!bomSeen && encoding === "utf-16le" && bytes.length >= 2) {
+        if (bytes[0] === 254 && bytes[1] === 255) {
+          endian = "be";
+        }
+      }
+      for (var index = 0; index < bytes.length; ) {
+        if (index + 1 >= bytes.length) {
+          if (stream) {
+            return { text: output.join(""), pending: Array.from(bytes.slice(index)) };
+          }
+          if (fatal) throw _createInvalidDataError(encoding);
+          output.push("\uFFFD");
+          break;
+        }
+        var first = bytes[index];
+        var second = bytes[index + 1];
+        var codeUnit = endian === "le" ? first | second << 8 : first << 8 | second;
+        index += 2;
+        if (codeUnit >= 55296 && codeUnit <= 56319) {
+          if (index + 1 >= bytes.length) {
+            if (stream) {
+              return { text: output.join(""), pending: Array.from(bytes.slice(index - 2)) };
+            }
+            if (fatal) throw _createInvalidDataError(encoding);
+            output.push("\uFFFD");
+            continue;
+          }
+          var nextFirst = bytes[index];
+          var nextSecond = bytes[index + 1];
+          var nextCodeUnit = endian === "le" ? nextFirst | nextSecond << 8 : nextFirst << 8 | nextSecond;
+          if (nextCodeUnit >= 56320 && nextCodeUnit <= 57343) {
+            _appendCodePoint(
+              output,
+              65536 + (codeUnit - 55296 << 10) + (nextCodeUnit - 56320)
+            );
+            index += 2;
+            continue;
+          }
+          if (fatal) throw _createInvalidDataError(encoding);
+          output.push("\uFFFD");
+          continue;
+        }
+        if (codeUnit >= 56320 && codeUnit <= 57343) {
+          if (fatal) throw _createInvalidDataError(encoding);
+          output.push("\uFFFD");
+          continue;
+        }
+        output.push(String.fromCharCode(codeUnit));
+      }
+      return { text: output.join(""), pending: [] };
+    }
+    function TextEncoder() {
+    }
+    TextEncoder.prototype.encode = function encode(input) {
+      return _encodeUtf8(input === void 0 ? "" : input);
     };
-    globalThis.TextDecoder = function TextDecoder(encoding, options) {
-      var label = encoding !== void 0 ? String(encoding).toLowerCase().replace(/\s/g, "") : "utf-8";
-      if (_utf8Aliases[label]) {
-        return new _OrigTextDecoder("utf-8", options);
+    TextEncoder.prototype.encodeInto = function encodeInto(input, destination) {
+      var value = String(input);
+      var read = 0;
+      var written = 0;
+      for (var index = 0; index < value.length; index += 1) {
+        var codeUnit = value.charCodeAt(index);
+        var chunk = value[index] || "";
+        if (codeUnit >= 55296 && codeUnit <= 56319 && index + 1 < value.length) {
+          var nextCodeUnit = value.charCodeAt(index + 1);
+          if (nextCodeUnit >= 56320 && nextCodeUnit <= 57343) {
+            chunk = value.slice(index, index + 2);
+          }
+        }
+        var encoded = _encodeUtf8(chunk);
+        if (written + encoded.length > destination.length) break;
+        destination.set(encoded, written);
+        written += encoded.length;
+        read += chunk.length;
+        if (chunk.length === 2) index += 1;
       }
-      return new _OrigTextDecoder(encoding, options);
+      return { read, written };
     };
-    globalThis.TextDecoder.prototype = _OrigTextDecoder.prototype;
-  }
-  var _OrigTextDecoder;
-  var _utf8Aliases;
-  function _patchPolyfill(name2, result2) {
-    if (typeof result2 !== "object" && typeof result2 !== "function" || result2 === null) {
-      return result2;
+    Object.defineProperty(TextEncoder.prototype, "encoding", {
+      get: function() {
+        return "utf-8";
+      }
+    });
+    function TextDecoder(label, options) {
+      var normalizedOptions = options == null ? {} : Object(options);
+      this._encoding = _normalizeEncodingLabel(label);
+      this._fatal = Boolean(normalizedOptions.fatal);
+      this._ignoreBOM = Boolean(normalizedOptions.ignoreBOM);
+      this._pendingBytes = [];
+      this._bomSeen = false;
     }
-    if (name2 === "buffer") {
-      const maxLength = typeof result2.kMaxLength === "number" ? result2.kMaxLength : 2147483647;
-      const maxStringLength = typeof result2.kStringMaxLength === "number" ? result2.kStringMaxLength : 536870888;
-      if (typeof result2.constants !== "object" || result2.constants === null) {
-        result2.constants = {};
+    Object.defineProperty(TextDecoder.prototype, "encoding", {
+      get: function() {
+        return this._encoding;
+      }
+    });
+    Object.defineProperty(TextDecoder.prototype, "fatal", {
+      get: function() {
+        return this._fatal;
+      }
+    });
+    Object.defineProperty(TextDecoder.prototype, "ignoreBOM", {
+      get: function() {
+        return this._ignoreBOM;
       }
-      if (typeof result2.constants.MAX_LENGTH !== "number") {
-        result2.constants.MAX_LENGTH = maxLength;
+    });
+    TextDecoder.prototype.decode = function decode(input, options) {
+      var normalizedOptions = options == null ? {} : Object(options);
+      var stream = Boolean(normalizedOptions.stream);
+      var incoming = _toUint8Array(input);
+      var merged = new Uint8Array(this._pendingBytes.length + incoming.length);
+      merged.set(this._pendingBytes, 0);
+      merged.set(incoming, this._pendingBytes.length);
+      var decoded = this._encoding === "utf-8" ? _decodeUtf8(merged, this._fatal, stream, this._encoding) : _decodeUtf16(merged, this._encoding, this._fatal, stream, this._bomSeen);
+      this._pendingBytes = decoded.pending;
+      var text = decoded.text;
+      if (!this._bomSeen && text.length > 0) {
+        if (!this._ignoreBOM && text.charCodeAt(0) === 65279) {
+          text = text.slice(1);
+        }
+        this._bomSeen = true;
       }
-      if (typeof result2.constants.MAX_STRING_LENGTH !== "number") {
-        result2.constants.MAX_STRING_LENGTH = maxStringLength;
+      if (!stream && this._pendingBytes.length > 0) {
+        var pendingLength = this._pendingBytes.length;
+        this._pendingBytes = [];
+        if (this._fatal) throw _createInvalidDataError(this._encoding);
+        return text + "\uFFFD".repeat(Math.ceil(pendingLength / 2));
       }
-      if (typeof result2.kMaxLength !== "number") {
-        result2.kMaxLength = maxLength;
+      return text;
+    };
+    function _normalizeAddEventListenerOptions(options) {
+      if (typeof options === "boolean") {
+        return { capture: options, once: false, passive: false };
       }
-      if (typeof result2.kStringMaxLength !== "number") {
-        result2.kStringMaxLength = maxStringLength;
+      if (options == null) {
+        return { capture: false, once: false, passive: false };
+      }
+      var normalized = Object(options);
+      return {
+        capture: Boolean(normalized.capture),
+        once: Boolean(normalized.once),
+        passive: Boolean(normalized.passive),
+        signal: normalized.signal
+      };
+    }
+    function _normalizeRemoveEventListenerOptions(options) {
+      if (typeof options === "boolean") return options;
+      if (options == null) return false;
+      return Boolean(Object(options).capture);
+    }
+    function _isAbortSignalLike(value) {
+      return typeof value === "object" && value !== null && "aborted" in value && typeof value.addEventListener === "function" && typeof value.removeEventListener === "function";
+    }
+    function Event(type, init) {
+      if (arguments.length === 0) {
+        throw new TypeError("The event type must be provided");
+      }
+      var normalizedInit = init == null ? {} : Object(init);
+      this.type = String(type);
+      this.bubbles = Boolean(normalizedInit.bubbles);
+      this.cancelable = Boolean(normalizedInit.cancelable);
+      this.composed = Boolean(normalizedInit.composed);
+      this.detail = null;
+      this.defaultPrevented = false;
+      this.target = null;
+      this.currentTarget = null;
+      this.eventPhase = 0;
+      this.returnValue = true;
+      this.cancelBubble = false;
+      this.timeStamp = Date.now();
+      this.isTrusted = false;
+      this.srcElement = null;
+      this._inPassiveListener = false;
+      this._propagationStopped = false;
+      this._immediatePropagationStopped = false;
+    }
+    Event.NONE = 0;
+    Event.CAPTURING_PHASE = 1;
+    Event.AT_TARGET = 2;
+    Event.BUBBLING_PHASE = 3;
+    Event.prototype.preventDefault = function preventDefault() {
+      if (this.cancelable && !this._inPassiveListener) {
+        this.defaultPrevented = true;
+        this.returnValue = false;
+      }
+    };
+    Event.prototype.stopPropagation = function stopPropagation() {
+      this._propagationStopped = true;
+      this.cancelBubble = true;
+    };
+    Event.prototype.stopImmediatePropagation = function stopImmediatePropagation() {
+      this._propagationStopped = true;
+      this._immediatePropagationStopped = true;
+      this.cancelBubble = true;
+    };
+    Event.prototype.composedPath = function composedPath() {
+      return this.target ? [this.target] : [];
+    };
+    function CustomEvent(type, init) {
+      Event.call(this, type, init);
+      var normalizedInit = init == null ? null : Object(init);
+      this.detail = normalizedInit && "detail" in normalizedInit ? normalizedInit.detail : null;
+    }
+    CustomEvent.prototype = Object.create(Event.prototype);
+    CustomEvent.prototype.constructor = CustomEvent;
+    function EventTarget() {
+      this._listeners = /* @__PURE__ */ new Map();
+    }
+    EventTarget.prototype.addEventListener = function addEventListener(type, listener, options) {
+      var normalized = _normalizeAddEventListenerOptions(options);
+      if (normalized.signal !== void 0 && !_isAbortSignalLike(normalized.signal)) {
+        throw new TypeError('The "signal" option must be an instance of AbortSignal.');
+      }
+      if (listener == null) return void 0;
+      if (typeof listener !== "function" && (typeof listener !== "object" || listener === null)) {
+        return void 0;
+      }
+      if (normalized.signal && normalized.signal.aborted) return void 0;
+      var records = this._listeners.get(type) || [];
+      for (var i = 0; i < records.length; i += 1) {
+        if (records[i].listener === listener && records[i].capture === normalized.capture) {
+          return void 0;
+        }
+      }
+      var record = {
+        listener,
+        capture: normalized.capture,
+        once: normalized.once,
+        passive: normalized.passive,
+        kind: typeof listener === "function" ? "function" : "object",
+        signal: normalized.signal,
+        abortListener: void 0
+      };
+      if (normalized.signal) {
+        var self = this;
+        record.abortListener = function() {
+          self.removeEventListener(type, listener, normalized.capture);
+        };
+        normalized.signal.addEventListener("abort", record.abortListener, { once: true });
+      }
+      records.push(record);
+      this._listeners.set(type, records);
+      return void 0;
+    };
+    EventTarget.prototype.removeEventListener = function removeEventListener(type, listener, options) {
+      if (listener == null) return;
+      var capture = _normalizeRemoveEventListenerOptions(options);
+      var records = this._listeners.get(type);
+      if (!records) return;
+      var nextRecords = [];
+      for (var i = 0; i < records.length; i += 1) {
+        var record = records[i];
+        var match = record.listener === listener && record.capture === capture;
+        if (match) {
+          if (record.signal && record.abortListener) {
+            record.signal.removeEventListener("abort", record.abortListener);
+          }
+        } else {
+          nextRecords.push(record);
+        }
+      }
+      if (nextRecords.length === 0) {
+        this._listeners.delete(type);
+      } else {
+        this._listeners.set(type, nextRecords);
+      }
+    };
+    EventTarget.prototype.dispatchEvent = function dispatchEvent(event) {
+      if (!event || typeof event !== "object" || typeof event.type !== "string") {
+        throw new TypeError("Argument 1 must be an Event");
+      }
+      var records = (this._listeners.get(event.type) || []).slice();
+      event.target = this;
+      event.currentTarget = this;
+      event.eventPhase = 2;
+      for (var i = 0; i < records.length; i += 1) {
+        var record = records[i];
+        var active = this._listeners.get(event.type);
+        if (!active || active.indexOf(record) === -1) continue;
+        if (record.once) {
+          this.removeEventListener(event.type, record.listener, record.capture);
+        }
+        event._inPassiveListener = record.passive;
+        if (record.kind === "function") {
+          record.listener.call(this, event);
+        } else {
+          var handleEvent = record.listener.handleEvent;
+          if (typeof handleEvent === "function") {
+            handleEvent.call(record.listener, event);
+          }
+        }
+        event._inPassiveListener = false;
+        if (event._immediatePropagationStopped || event._propagationStopped) {
+          break;
+        }
+      }
+      event.currentTarget = null;
+      event.eventPhase = 0;
+      return !event.defaultPrevented;
+    };
+    globalThis.TextEncoder = TextEncoder;
+    globalThis.TextDecoder = TextDecoder;
+    globalThis.Event = Event;
+    globalThis.CustomEvent = CustomEvent;
+    globalThis.EventTarget = EventTarget;
+    if (typeof globalThis.DOMException === "undefined") {
+      let DOMException3 = function(message, name) {
+        if (!(this instanceof DOMException3)) {
+          throw new TypeError("Class constructor DOMException cannot be invoked without 'new'");
+        }
+        Error.call(this, message);
+        this.message = message === void 0 ? "" : String(message);
+        this.name = name === void 0 ? "Error" : String(name);
+        this.code = DOM_EXCEPTION_LEGACY_CODES[this.name] || 0;
+        if (typeof Error.captureStackTrace === "function") {
+          Error.captureStackTrace(this, DOMException3);
+        }
+      };
+      var DOMException2 = DOMException3;
+      var DOM_EXCEPTION_LEGACY_CODES = {
+        IndexSizeError: 1,
+        DOMStringSizeError: 2,
+        HierarchyRequestError: 3,
+        WrongDocumentError: 4,
+        InvalidCharacterError: 5,
+        NoDataAllowedError: 6,
+        NoModificationAllowedError: 7,
+        NotFoundError: 8,
+        NotSupportedError: 9,
+        InUseAttributeError: 10,
+        InvalidStateError: 11,
+        SyntaxError: 12,
+        InvalidModificationError: 13,
+        NamespaceError: 14,
+        InvalidAccessError: 15,
+        ValidationError: 16,
+        TypeMismatchError: 17,
+        SecurityError: 18,
+        NetworkError: 19,
+        AbortError: 20,
+        URLMismatchError: 21,
+        QuotaExceededError: 22,
+        TimeoutError: 23,
+        InvalidNodeTypeError: 24,
+        DataCloneError: 25
+      };
+      DOMException3.prototype = Object.create(Error.prototype);
+      Object.defineProperty(DOMException3.prototype, "constructor", {
+        value: DOMException3,
+        writable: true,
+        configurable: true
+      });
+      Object.defineProperty(DOMException3.prototype, Symbol.toStringTag, {
+        value: "DOMException",
+        writable: false,
+        enumerable: false,
+        configurable: true
+      });
+      for (var codeName in DOM_EXCEPTION_LEGACY_CODES) {
+        if (!Object.prototype.hasOwnProperty.call(DOM_EXCEPTION_LEGACY_CODES, codeName)) {
+          continue;
+        }
+        var codeValue = DOM_EXCEPTION_LEGACY_CODES[codeName];
+        var constantName = codeName.replace(/([a-z0-9])([A-Z])/g, "$1_$2").toUpperCase();
+        Object.defineProperty(DOMException3, constantName, {
+          value: codeValue,
+          writable: false,
+          enumerable: true,
+          configurable: false
+        });
+        Object.defineProperty(DOMException3.prototype, constantName, {
+          value: codeValue,
+          writable: false,
+          enumerable: true,
+          configurable: false
+        });
+      }
+      __requireExposeCustomGlobal("DOMException", DOMException3);
+    }
+    if (typeof globalThis.Blob === "undefined") {
+      let Blob2 = function(parts, options) {
+        if (!(this instanceof Blob2)) {
+          throw new TypeError("Class constructor Blob cannot be invoked without 'new'");
+        }
+        this._parts = Array.isArray(parts) ? parts.slice() : [];
+        this.type = options && options.type ? String(options.type).toLowerCase() : "";
+        var size = 0;
+        for (var index = 0; index < this._parts.length; index += 1) {
+          var part = this._parts[index];
+          if (typeof part === "string") {
+            size += part.length;
+          } else if (part && typeof part.byteLength === "number") {
+            size += part.byteLength;
+          }
+        }
+        this.size = size;
+      };
+      var Blob = Blob2;
+      Blob2.prototype.arrayBuffer = function arrayBuffer() {
+        return Promise.resolve(new ArrayBuffer(0));
+      };
+      Blob2.prototype.text = function text() {
+        return Promise.resolve("");
+      };
+      Blob2.prototype.slice = function slice() {
+        return new Blob2();
+      };
+      Blob2.prototype.stream = function stream() {
+        throw new Error("Blob.stream is not supported in sandbox");
+      };
+      Object.defineProperty(Blob2.prototype, Symbol.toStringTag, {
+        value: "Blob",
+        writable: false,
+        enumerable: false,
+        configurable: true
+      });
+      __requireExposeCustomGlobal("Blob", Blob2);
+    }
+    if (typeof globalThis.File === "undefined") {
+      let File2 = function(parts, name, options) {
+        if (!(this instanceof File2)) {
+          throw new TypeError("Class constructor File cannot be invoked without 'new'");
+        }
+        globalThis.Blob.call(this, parts, options);
+        this.name = String(name);
+        this.lastModified = options && typeof options.lastModified === "number" ? options.lastModified : Date.now();
+        this.webkitRelativePath = "";
+      };
+      var File = File2;
+      File2.prototype = Object.create(globalThis.Blob.prototype);
+      Object.defineProperty(File2.prototype, "constructor", {
+        value: File2,
+        writable: true,
+        configurable: true
+      });
+      Object.defineProperty(File2.prototype, Symbol.toStringTag, {
+        value: "File",
+        writable: false,
+        enumerable: false,
+        configurable: true
+      });
+      __requireExposeCustomGlobal("File", File2);
+    }
+    if (typeof globalThis.FormData === "undefined") {
+      let FormData2 = function() {
+        if (!(this instanceof FormData2)) {
+          throw new TypeError("Class constructor FormData cannot be invoked without 'new'");
+        }
+        this._entries = [];
+      };
+      var FormData = FormData2;
+      FormData2.prototype.append = function append(name, value) {
+        this._entries.push([String(name), value]);
+      };
+      FormData2.prototype.get = function get(name) {
+        var key = String(name);
+        for (var index = 0; index < this._entries.length; index += 1) {
+          if (this._entries[index][0] === key) {
+            return this._entries[index][1];
+          }
+        }
+        return null;
+      };
+      FormData2.prototype.getAll = function getAll(name) {
+        var key = String(name);
+        var values = [];
+        for (var index = 0; index < this._entries.length; index += 1) {
+          if (this._entries[index][0] === key) {
+            values.push(this._entries[index][1]);
+          }
+        }
+        return values;
+      };
+      FormData2.prototype.has = function has(name) {
+        return this.get(name) !== null;
+      };
+      FormData2.prototype.delete = function del(name) {
+        var key = String(name);
+        this._entries = this._entries.filter(function(entry) {
+          return entry[0] !== key;
+        });
+      };
+      FormData2.prototype.entries = function entries() {
+        return this._entries[Symbol.iterator]();
+      };
+      FormData2.prototype[Symbol.iterator] = function iterator() {
+        return this.entries();
+      };
+      Object.defineProperty(FormData2.prototype, Symbol.toStringTag, {
+        value: "FormData",
+        writable: false,
+        enumerable: false,
+        configurable: true
+      });
+      __requireExposeCustomGlobal("FormData", FormData2);
+    }
+    if (typeof globalThis.MessageEvent === "undefined") {
+      let MessageEvent2 = function(type, options) {
+        if (!(this instanceof MessageEvent2)) {
+          throw new TypeError("Class constructor MessageEvent cannot be invoked without 'new'");
+        }
+        globalThis.Event.call(this, type, options);
+        this.data = options && "data" in options ? options.data : void 0;
+      };
+      var MessageEvent = MessageEvent2;
+      MessageEvent2.prototype = Object.create(globalThis.Event.prototype);
+      Object.defineProperty(MessageEvent2.prototype, "constructor", {
+        value: MessageEvent2,
+        writable: true,
+        configurable: true
+      });
+      globalThis.MessageEvent = MessageEvent2;
+    }
+    if (typeof globalThis.MessagePort === "undefined") {
+      let MessagePort2 = function() {
+        if (!(this instanceof MessagePort2)) {
+          throw new TypeError("Class constructor MessagePort cannot be invoked without 'new'");
+        }
+        globalThis.EventTarget.call(this);
+        this.onmessage = null;
+        this._pairedPort = null;
+      };
+      var MessagePort = MessagePort2;
+      MessagePort2.prototype = Object.create(globalThis.EventTarget.prototype);
+      Object.defineProperty(MessagePort2.prototype, "constructor", {
+        value: MessagePort2,
+        writable: true,
+        configurable: true
+      });
+      MessagePort2.prototype.postMessage = function postMessage(data) {
+        var target = this._pairedPort;
+        if (!target) {
+          return;
+        }
+        var event = new globalThis.MessageEvent("message", { data });
+        target.dispatchEvent(event);
+        if (typeof target.onmessage === "function") {
+          target.onmessage.call(target, event);
+        }
+      };
+      MessagePort2.prototype.start = function start() {
+      };
+      MessagePort2.prototype.close = function close() {
+        this._pairedPort = null;
+      };
+      globalThis.MessagePort = MessagePort2;
+    }
+    if (typeof globalThis.MessageChannel === "undefined") {
+      let MessageChannel2 = function() {
+        if (!(this instanceof MessageChannel2)) {
+          throw new TypeError("Class constructor MessageChannel cannot be invoked without 'new'");
+        }
+        this.port1 = new globalThis.MessagePort();
+        this.port2 = new globalThis.MessagePort();
+        this.port1._pairedPort = this.port2;
+        this.port2._pairedPort = this.port1;
+      };
+      var MessageChannel = MessageChannel2;
+      globalThis.MessageChannel = MessageChannel2;
+    }
+  })();
+  (function installWebStreamsGlobals() {
+    if (typeof globalThis.ReadableStream !== "undefined") {
+      return;
+    }
+    if (typeof _loadPolyfill === "undefined") {
+      return;
+    }
+    const polyfillCode = _loadPolyfill.applySyncPromise(void 0, ["stream/web"]);
+    if (polyfillCode === null) {
+      return;
+    }
+    const webStreams = Function('"use strict"; return (' + polyfillCode + ");")();
+    const names = [
+      "ReadableStream",
+      "ReadableStreamDefaultReader",
+      "ReadableStreamBYOBReader",
+      "ReadableStreamBYOBRequest",
+      "ReadableByteStreamController",
+      "ReadableStreamDefaultController",
+      "TransformStream",
+      "TransformStreamDefaultController",
+      "WritableStream",
+      "WritableStreamDefaultWriter",
+      "WritableStreamDefaultController",
+      "ByteLengthQueuingStrategy",
+      "CountQueuingStrategy",
+      "TextEncoderStream",
+      "TextDecoderStream",
+      "CompressionStream",
+      "DecompressionStream"
+    ];
+    for (const name of names) {
+      if (typeof webStreams?.[name] !== "undefined") {
+        globalThis[name] = webStreams[name];
+      }
+    }
+  })();
+  function _patchPolyfill(name, result) {
+    if (typeof result !== "object" && typeof result !== "function" || result === null) {
+      return result;
+    }
+    if (name === "buffer") {
+      const maxLength = typeof result.kMaxLength === "number" ? result.kMaxLength : 2147483647;
+      const maxStringLength = typeof result.kStringMaxLength === "number" ? result.kStringMaxLength : 536870888;
+      if (typeof result.constants !== "object" || result.constants === null) {
+        result.constants = {};
+      }
+      if (typeof result.constants.MAX_LENGTH !== "number") {
+        result.constants.MAX_LENGTH = maxLength;
+      }
+      if (typeof result.constants.MAX_STRING_LENGTH !== "number") {
+        result.constants.MAX_STRING_LENGTH = maxStringLength;
+      }
+      if (typeof result.kMaxLength !== "number") {
+        result.kMaxLength = maxLength;
+      }
+      if (typeof result.kStringMaxLength !== "number") {
+        result.kStringMaxLength = maxStringLength;
+      }
+      var BufferCtor = result.Buffer;
+      if (typeof globalThis.Buffer === "function" && globalThis.Buffer !== BufferCtor) {
+        BufferCtor = globalThis.Buffer;
+        result.Buffer = BufferCtor;
+      } else if (typeof globalThis.Buffer !== "function" && typeof BufferCtor === "function") {
+        globalThis.Buffer = BufferCtor;
       }
-      const BufferCtor = result2.Buffer;
       if ((typeof BufferCtor === "function" || typeof BufferCtor === "object") && BufferCtor !== null) {
+        if (typeof result.SlowBuffer !== "function") {
+          result.SlowBuffer = BufferCtor;
+        }
         if (typeof BufferCtor.kMaxLength !== "number") {
           BufferCtor.kMaxLength = maxLength;
         }
@@ -155,39 +1080,292 @@
           BufferCtor.kStringMaxLength = maxStringLength;
         }
         if (typeof BufferCtor.constants !== "object" || BufferCtor.constants === null) {
-          BufferCtor.constants = result2.constants;
+          BufferCtor.constants = result.constants;
         }
-        var bProto = BufferCtor.prototype;
-        if (bProto) {
-          var encs = ["utf8", "ascii", "latin1", "binary", "hex", "base64", "ucs2", "utf16le"];
-          for (var ei = 0; ei < encs.length; ei++) {
+        var proto = BufferCtor.prototype;
+        if (proto && typeof proto.utf8Slice !== "function") {
+          var encodings = ["utf8", "latin1", "ascii", "hex", "base64", "ucs2", "utf16le"];
+          for (var ei = 0; ei < encodings.length; ei++) {
+            var enc = encodings[ei];
             (function(e) {
-              if (typeof bProto[e + "Slice"] !== "function") {
-                bProto[e + "Slice"] = function(start, end) {
+              if (typeof proto[e + "Slice"] !== "function") {
+                proto[e + "Slice"] = function(start, end) {
                   return this.toString(e, start, end);
                 };
               }
-              if (typeof bProto[e + "Write"] !== "function") {
-                bProto[e + "Write"] = function(str, offset, length) {
-                  return this.write(str, offset, length, e);
+              if (typeof proto[e + "Write"] !== "function") {
+                proto[e + "Write"] = function(string, offset, length) {
+                  return this.write(string, offset, length, e);
                 };
               }
-            })(encs[ei]);
+            })(enc);
           }
         }
+        if (typeof BufferCtor.allocUnsafe === "function" && !BufferCtor.allocUnsafe._secureExecPatched) {
+          var _origAllocUnsafe = BufferCtor.allocUnsafe;
+          BufferCtor.allocUnsafe = function(size) {
+            try {
+              return _origAllocUnsafe.apply(this, arguments);
+            } catch (error) {
+              if (error && error.name === "RangeError" && typeof size === "number" && size > maxLength) {
+                throw new Error("Array buffer allocation failed");
+              }
+              throw error;
+            }
+          };
+          BufferCtor.allocUnsafe._secureExecPatched = true;
+        }
       }
-      return result2;
+      return result;
     }
-    if (name2 === "util" && typeof result2.formatWithOptions === "undefined" && typeof result2.format === "function") {
-      result2.formatWithOptions = function formatWithOptions(inspectOptions, ...args) {
-        return result2.format.apply(null, args);
+    if (name === "util" && typeof result.formatWithOptions === "undefined" && typeof result.format === "function") {
+      result.formatWithOptions = function formatWithOptions(inspectOptions, ...args) {
+        return result.format.apply(null, args);
       };
-      return result2;
     }
-    if (name2 === "url") {
-      const OriginalURL = result2.URL;
+    if (name === "util") {
+      if (typeof result.types === "undefined" && typeof _requireFrom === "function") {
+        try {
+          result.types = _requireFrom("util/types", "/");
+        } catch {
+        }
+      }
+      if ((typeof result.MIMEType === "undefined" || typeof result.MIMEParams === "undefined") && typeof _requireFrom === "function") {
+        try {
+          const mimeModule = _requireFrom("internal/mime", "/");
+          if (typeof result.MIMEType === "undefined") {
+            result.MIMEType = mimeModule.MIMEType;
+          }
+          if (typeof result.MIMEParams === "undefined") {
+            result.MIMEParams = mimeModule.MIMEParams;
+          }
+        } catch {
+        }
+      }
+      if (typeof result.inspect === "function" && typeof result.inspect.custom === "undefined") {
+        result.inspect.custom = /* @__PURE__ */ Symbol.for("nodejs.util.inspect.custom");
+      }
+      if (typeof result.inspect === "function" && !result.inspect._secureExecPatchedCustomInspect) {
+        const customInspectSymbol = result.inspect.custom || /* @__PURE__ */ Symbol.for("nodejs.util.inspect.custom");
+        const originalInspect = result.inspect;
+        const formatObjectKey = function(key) {
+          return /^[A-Za-z_$][A-Za-z0-9_$]*$/.test(key) ? key : originalInspect(key);
+        };
+        const containsCustomInspectable = function(value, depth, seen) {
+          if (value === null) {
+            return false;
+          }
+          if (typeof value !== "object" && typeof value !== "function") {
+            return false;
+          }
+          if (typeof value[customInspectSymbol] === "function") {
+            return true;
+          }
+          if (depth < 0 || seen.has(value)) {
+            return false;
+          }
+          seen.add(value);
+          if (Array.isArray(value)) {
+            for (const entry of value) {
+              if (containsCustomInspectable(entry, depth - 1, seen)) {
+                seen.delete(value);
+                return true;
+              }
+            }
+            seen.delete(value);
+            return false;
+          }
+          for (const key of Object.keys(value)) {
+            if (containsCustomInspectable(value[key], depth - 1, seen)) {
+              seen.delete(value);
+              return true;
+            }
+          }
+          seen.delete(value);
+          return false;
+        };
+        const inspectWithCustom = function(value, depth, options, seen) {
+          if (value === null || typeof value !== "object" && typeof value !== "function") {
+            return originalInspect(value, options);
+          }
+          if (seen.has(value)) {
+            return "[Circular]";
+          }
+          if (typeof value[customInspectSymbol] === "function") {
+            return value[customInspectSymbol](depth, options, result.inspect);
+          }
+          if (depth < 0) {
+            return originalInspect(value, options);
+          }
+          seen.add(value);
+          if (Array.isArray(value)) {
+            const items = value.map((entry) => inspectWithCustom(entry, depth - 1, options, seen));
+            seen.delete(value);
+            return `[ ${items.join(", ")} ]`;
+          }
+          const proto2 = Object.getPrototypeOf(value);
+          if (proto2 === Object.prototype || proto2 === null) {
+            const entries = Object.keys(value).map(
+              (key) => `${formatObjectKey(key)}: ${inspectWithCustom(value[key], depth - 1, options, seen)}`
+            );
+            seen.delete(value);
+            return `{ ${entries.join(", ")} }`;
+          }
+          seen.delete(value);
+          return originalInspect(value, options);
+        };
+        result.inspect = function inspect(value, options) {
+          const inspectOptions = typeof options === "object" && options !== null ? options : {};
+          const depth = typeof inspectOptions.depth === "number" ? inspectOptions.depth : 2;
+          if (typeof value === "symbol") {
+            return value.toString();
+          }
+          if (!containsCustomInspectable(value, depth, /* @__PURE__ */ new Set())) {
+            return originalInspect.call(this, value, options);
+          }
+          return inspectWithCustom(value, depth, inspectOptions, /* @__PURE__ */ new Set());
+        };
+        result.inspect.custom = customInspectSymbol;
+        result.inspect._secureExecPatchedCustomInspect = true;
+      }
+      return result;
+    }
+    if (name === "events") {
+      if (typeof result.getEventListeners !== "function") {
+        result.getEventListeners = function getEventListeners(target, eventName) {
+          if (target && typeof target.listeners === "function") {
+            return target.listeners(eventName);
+          }
+          if (target && typeof target.getEventListeners === "function") {
+            return target.getEventListeners(eventName);
+          }
+          if (target && eventName === "abort" && Array.isArray(target._listeners)) {
+            return target._listeners.slice();
+          }
+          return [];
+        };
+      }
+      return result;
+    }
+    if (name === "stream" || name === "node:stream") {
+      const getWebStreamsState2 = function() {
+        return globalThis.__secureExecWebStreams || null;
+      };
+      const webStreamsState2 = getWebStreamsState2();
+      if (typeof result.isReadable !== "function") {
+        result.isReadable = function(stream) {
+          const stateKey = getWebStreamsState2() && getWebStreamsState2().kState;
+          return Boolean(stateKey && stream && stream[stateKey] && stream[stateKey].state === "readable");
+        };
+      }
+      if (typeof result.isErrored !== "function") {
+        result.isErrored = function(stream) {
+          const stateKey = getWebStreamsState2() && getWebStreamsState2().kState;
+          return Boolean(stateKey && stream && stream[stateKey] && stream[stateKey].state === "errored");
+        };
+      }
+      if (typeof result.isDisturbed !== "function") {
+        result.isDisturbed = function(stream) {
+          const stateKey = getWebStreamsState2() && getWebStreamsState2().kState;
+          return Boolean(stateKey && stream && stream[stateKey] && stream[stateKey].disturbed === true);
+        };
+      }
+      const ReadableCtor = result.Readable;
+      const WritableCtor = result.Writable;
+      const readableFrom = typeof ReadableCtor === "function" ? ReadableCtor.from : void 0;
+      const readableFromSource = typeof readableFrom === "function" ? Function.prototype.toString.call(readableFrom) : "";
+      const hasBrowserReadableFromStub = readableFromSource.indexOf(
+        "Readable.from is not available in the browser"
+      ) !== -1 || readableFromSource.indexOf("require_from_browser") !== -1;
+      if (typeof ReadableCtor === "function" && (typeof readableFrom !== "function" || hasBrowserReadableFromStub)) {
+        ReadableCtor.from = function from(iterable, options) {
+          const readable = new ReadableCtor(Object.assign({ read() {
+          } }, options || {}));
+          Promise.resolve().then(async function() {
+            try {
+              if (iterable && typeof iterable[Symbol.asyncIterator] === "function") {
+                for await (const chunk of iterable) {
+                  readable.push(chunk);
+                }
+              } else if (iterable && typeof iterable[Symbol.iterator] === "function") {
+                for (const chunk of iterable) {
+                  readable.push(chunk);
+                }
+              } else {
+                readable.push(iterable);
+              }
+              readable.push(null);
+            } catch (error) {
+              if (typeof readable.destroy === "function") {
+                readable.destroy(error);
+              } else {
+                readable.emit("error", error);
+              }
+            }
+          });
+          return readable;
+        };
+      }
+      if (webStreamsState2 && typeof ReadableCtor === "function") {
+        if (typeof ReadableCtor.fromWeb !== "function" && typeof webStreamsState2.newStreamReadableFromReadableStream === "function") {
+          ReadableCtor.fromWeb = function fromWeb(readableStream, options) {
+            return webStreamsState2.newStreamReadableFromReadableStream(readableStream, options);
+          };
+        }
+        if (typeof ReadableCtor.toWeb !== "function" && typeof webStreamsState2.newReadableStreamFromStreamReadable === "function") {
+          ReadableCtor.toWeb = function toWeb(readable) {
+            return webStreamsState2.newReadableStreamFromStreamReadable(readable);
+          };
+        }
+      }
+      if (webStreamsState2 && typeof WritableCtor === "function") {
+        if (typeof WritableCtor.fromWeb !== "function" && typeof webStreamsState2.newStreamWritableFromWritableStream === "function") {
+          WritableCtor.fromWeb = function fromWeb(writableStream, options) {
+            return webStreamsState2.newStreamWritableFromWritableStream(writableStream, options);
+          };
+        }
+        if (typeof WritableCtor.toWeb !== "function" && typeof webStreamsState2.newWritableStreamFromStreamWritable === "function") {
+          WritableCtor.toWeb = function toWeb(writable) {
+            return webStreamsState2.newWritableStreamFromStreamWritable(writable);
+          };
+        }
+      }
+      if (webStreamsState2 && typeof result.Duplex === "function") {
+        if (typeof result.Duplex.fromWeb !== "function" && typeof webStreamsState2.newStreamDuplexFromReadableWritablePair === "function") {
+          result.Duplex.fromWeb = function fromWeb(pair, options) {
+            return webStreamsState2.newStreamDuplexFromReadableWritablePair(pair, options);
+          };
+        }
+        if (typeof result.Duplex.toWeb !== "function" && typeof webStreamsState2.newReadableWritablePairFromDuplex === "function") {
+          result.Duplex.toWeb = function toWeb(duplex) {
+            return webStreamsState2.newReadableWritablePairFromDuplex(duplex);
+          };
+        }
+      }
+      if (typeof ReadableCtor === "function" && !Object.getOwnPropertyDescriptor(ReadableCtor.prototype, "readableObjectMode")) {
+        Object.defineProperty(ReadableCtor.prototype, "readableObjectMode", {
+          configurable: true,
+          enumerable: false,
+          get() {
+            return Boolean(this?._readableState?.objectMode);
+          }
+        });
+      }
+      if (typeof WritableCtor === "function" && !Object.getOwnPropertyDescriptor(WritableCtor.prototype, "writableObjectMode")) {
+        Object.defineProperty(WritableCtor.prototype, "writableObjectMode", {
+          configurable: true,
+          enumerable: false,
+          get() {
+            return Boolean(this?._writableState?.objectMode);
+          }
+        });
+      }
+      return result;
+    }
+    if (name === "url") {
+      const OriginalURL = result.URL;
       if (typeof OriginalURL !== "function" || OriginalURL._patched) {
-        return result2;
+        return result;
       }
       const PatchedURL = function PatchedURL2(url, base) {
         if (typeof url === "string" && url.startsWith("file:") && !url.startsWith("file://") && base === void 0) {
@@ -212,15 +1390,15 @@
       Object.setPrototypeOf(PatchedURL, OriginalURL);
       PatchedURL.prototype = OriginalURL.prototype;
       PatchedURL._patched = true;
-      const descriptor = Object.getOwnPropertyDescriptor(result2, "URL");
+      const descriptor = Object.getOwnPropertyDescriptor(result, "URL");
       if (descriptor && descriptor.configurable !== true && descriptor.writable !== true && typeof descriptor.set !== "function") {
-        return result2;
+        return result;
       }
       try {
-        result2.URL = PatchedURL;
+        result.URL = PatchedURL;
       } catch {
         try {
-          Object.defineProperty(result2, "URL", {
+          Object.defineProperty(result, "URL", {
             value: PatchedURL,
             writable: true,
             configurable: true,
@@ -229,16 +1407,16 @@
         } catch {
         }
       }
-      return result2;
+      return result;
     }
-    if (name2 === "zlib") {
-      if (typeof result2.constants !== "object" || result2.constants === null) {
+    if (name === "zlib") {
+      if (typeof result.constants !== "object" || result.constants === null) {
         var zlibConstants = {};
-        var constKeys = Object.keys(result2);
+        var constKeys = Object.keys(result);
         for (var ci = 0; ci < constKeys.length; ci++) {
           var ck = constKeys[ci];
-          if (ck.indexOf("Z_") === 0 && typeof result2[ck] === "number") {
-            zlibConstants[ck] = result2[ck];
+          if (ck.indexOf("Z_") === 0 && typeof result[ck] === "number") {
+            zlibConstants[ck] = result[ck];
           }
         }
         if (typeof zlibConstants.DEFLATE !== "number") zlibConstants.DEFLATE = 1;
@@ -248,51 +1426,168 @@
         if (typeof zlibConstants.INFLATERAW !== "number") zlibConstants.INFLATERAW = 5;
         if (typeof zlibConstants.UNZIP !== "number") zlibConstants.UNZIP = 6;
         if (typeof zlibConstants.GUNZIP !== "number") zlibConstants.GUNZIP = 7;
-        result2.constants = zlibConstants;
+        result.constants = zlibConstants;
       }
-      return result2;
+      return result;
     }
-    if (name2 === "crypto") {
+    if (name === "crypto") {
+      let createCryptoRangeError2 = function(name2, message) {
+        var error = new RangeError(message);
+        error.code = "ERR_OUT_OF_RANGE";
+        error.name = "RangeError";
+        return error;
+      }, createCryptoError2 = function(code, message) {
+        var error = new Error(message);
+        error.code = code;
+        return error;
+      }, encodeCryptoResult2 = function(buffer, encoding) {
+        if (!encoding || encoding === "buffer") return buffer;
+        return buffer.toString(encoding);
+      }, isSharedArrayBufferInstance2 = function(value) {
+        return typeof SharedArrayBuffer !== "undefined" && value instanceof SharedArrayBuffer;
+      }, isBinaryLike2 = function(value) {
+        return Buffer.isBuffer(value) || ArrayBuffer.isView(value) || value instanceof ArrayBuffer || isSharedArrayBufferInstance2(value);
+      }, normalizeByteSource2 = function(value, name2, options) {
+        var allowNull = options && options.allowNull;
+        if (allowNull && value === null) {
+          return null;
+        }
+        if (typeof value === "string") {
+          return Buffer.from(value, "utf8");
+        }
+        if (Buffer.isBuffer(value)) {
+          return Buffer.from(value);
+        }
+        if (ArrayBuffer.isView(value)) {
+          return Buffer.from(value.buffer, value.byteOffset, value.byteLength);
+        }
+        if (value instanceof ArrayBuffer || isSharedArrayBufferInstance2(value)) {
+          return Buffer.from(value);
+        }
+        throw createInvalidArgTypeError(
+          name2,
+          "of type string or an instance of ArrayBuffer, Buffer, TypedArray, or DataView",
+          value
+        );
+      }, serializeCipherBridgeOptions2 = function(options) {
+        if (!options) {
+          return "";
+        }
+        var serialized = {};
+        if (options.authTagLength !== void 0) {
+          serialized.authTagLength = options.authTagLength;
+        }
+        if (options.authTag) {
+          serialized.authTag = options.authTag.toString("base64");
+        }
+        if (options.aad) {
+          serialized.aad = options.aad.toString("base64");
+        }
+        if (options.aadOptions !== void 0) {
+          serialized.aadOptions = options.aadOptions;
+        }
+        if (options.autoPadding !== void 0) {
+          serialized.autoPadding = options.autoPadding;
+        }
+        if (options.validateOnly !== void 0) {
+          serialized.validateOnly = options.validateOnly;
+        }
+        return JSON.stringify(serialized);
+      };
+      var createCryptoRangeError = createCryptoRangeError2, createCryptoError = createCryptoError2, encodeCryptoResult = encodeCryptoResult2, isSharedArrayBufferInstance = isSharedArrayBufferInstance2, isBinaryLike = isBinaryLike2, normalizeByteSource = normalizeByteSource2, serializeCipherBridgeOptions = serializeCipherBridgeOptions2;
+      var _runtimeRequire = globalThis.require;
+      var _streamModule = _runtimeRequire && _runtimeRequire("stream");
+      var _utilModule = _runtimeRequire && _runtimeRequire("util");
+      var _Transform = _streamModule && _streamModule.Transform;
+      var _inherits = _utilModule && _utilModule.inherits;
       if (typeof _cryptoHashDigest !== "undefined") {
-        let SandboxHash2 = function(algorithm) {
+        let SandboxHash2 = function(algorithm, options) {
+          if (!(this instanceof SandboxHash2)) {
+            return new SandboxHash2(algorithm, options);
+          }
+          if (!_Transform || !_inherits) {
+            throw new Error("stream.Transform is required for crypto.Hash");
+          }
+          if (typeof algorithm !== "string") {
+            throw createInvalidArgTypeError("algorithm", "of type string", algorithm);
+          }
+          _Transform.call(this, options);
           this._algorithm = algorithm;
           this._chunks = [];
+          this._finalized = false;
+          this._cachedDigest = null;
+          this._allowCachedDigest = false;
         };
         var SandboxHash = SandboxHash2;
+        _inherits(SandboxHash2, _Transform);
         SandboxHash2.prototype.update = function update(data, inputEncoding) {
+          if (this._finalized) {
+            throw createCryptoError2("ERR_CRYPTO_HASH_FINALIZED", "Digest already called");
+          }
           if (typeof data === "string") {
             this._chunks.push(Buffer.from(data, inputEncoding || "utf8"));
-          } else {
+          } else if (isBinaryLike2(data)) {
             this._chunks.push(Buffer.from(data));
+          } else {
+            throw createInvalidArgTypeError(
+              "data",
+              "one of type string, Buffer, TypedArray, or DataView",
+              data
+            );
           }
           return this;
         };
-        SandboxHash2.prototype.digest = function digest(encoding) {
+        SandboxHash2.prototype._finishDigest = function _finishDigest() {
+          if (this._cachedDigest) {
+            return this._cachedDigest;
+          }
           var combined = Buffer.concat(this._chunks);
           var resultBase64 = _cryptoHashDigest.applySync(void 0, [
             this._algorithm,
             combined.toString("base64")
           ]);
-          var resultBuffer = Buffer.from(resultBase64, "base64");
-          if (!encoding || encoding === "buffer") return resultBuffer;
-          return resultBuffer.toString(encoding);
+          this._cachedDigest = Buffer.from(resultBase64, "base64");
+          this._finalized = true;
+          return this._cachedDigest;
+        };
+        SandboxHash2.prototype.digest = function digest(encoding) {
+          if (this._finalized && !this._allowCachedDigest) {
+            throw createCryptoError2("ERR_CRYPTO_HASH_FINALIZED", "Digest already called");
+          }
+          var resultBuffer = this._finishDigest();
+          this._allowCachedDigest = false;
+          return encodeCryptoResult2(resultBuffer, encoding);
         };
         SandboxHash2.prototype.copy = function copy() {
+          if (this._finalized) {
+            throw createCryptoError2("ERR_CRYPTO_HASH_FINALIZED", "Digest already called");
+          }
           var c = new SandboxHash2(this._algorithm);
           c._chunks = this._chunks.slice();
           return c;
         };
-        SandboxHash2.prototype.write = function write(data, encoding) {
-          this.update(data, encoding);
-          return true;
+        SandboxHash2.prototype._transform = function _transform(chunk, encoding, callback) {
+          try {
+            this.update(chunk, encoding === "buffer" ? void 0 : encoding);
+            callback();
+          } catch (error) {
+            callback(normalizeCryptoBridgeError(error));
+          }
         };
-        SandboxHash2.prototype.end = function end(data, encoding) {
-          if (data) this.update(data, encoding);
+        SandboxHash2.prototype._flush = function _flush(callback) {
+          try {
+            var output = this._finishDigest();
+            this._allowCachedDigest = true;
+            this.push(output);
+            callback();
+          } catch (error) {
+            callback(normalizeCryptoBridgeError(error));
+          }
         };
-        result2.createHash = function createHash(algorithm) {
-          return new SandboxHash2(algorithm);
+        result.createHash = function createHash(algorithm, options) {
+          return new SandboxHash2(algorithm, options);
         };
-        result2.Hash = SandboxHash2;
+        result.Hash = SandboxHash2;
       }
       if (typeof _cryptoHmacDigest !== "undefined") {
         let SandboxHmac2 = function(algorithm, key) {
@@ -338,13 +1633,13 @@
         SandboxHmac2.prototype.end = function end(data, encoding) {
           if (data) this.update(data, encoding);
         };
-        result2.createHmac = function createHmac(algorithm, key) {
+        result.createHmac = function createHmac(algorithm, key) {
           return new SandboxHmac2(algorithm, key);
         };
-        result2.Hmac = SandboxHmac2;
+        result.Hmac = SandboxHmac2;
       }
       if (typeof _cryptoRandomFill !== "undefined") {
-        result2.randomBytes = function randomBytes(size, callback) {
+        result.randomBytes = function randomBytes(size, callback) {
           if (typeof size !== "number" || size < 0 || size !== (size | 0)) {
             var err = new TypeError('The "size" argument must be of type number. Received type ' + typeof size);
             if (typeof callback === "function") {
@@ -376,7 +1671,7 @@
           }
           return buf;
         };
-        result2.randomFillSync = function randomFillSync(buffer, offset, size) {
+        result.randomFillSync = function randomFillSync(buffer, offset, size) {
           if (offset === void 0) offset = 0;
           var byteLength = buffer.byteLength !== void 0 ? buffer.byteLength : buffer.length;
           if (size === void 0) size = byteLength - offset;
@@ -394,7 +1689,7 @@
           }
           return buffer;
         };
-        result2.randomFill = function randomFill(buffer, offsetOrCb, sizeOrCb, callback) {
+        result.randomFill = function randomFill(buffer, offsetOrCb, sizeOrCb, callback) {
           var offset = 0;
           var size;
           var cb;
@@ -412,13 +1707,13 @@
             throw new TypeError("Callback must be a function");
           }
           try {
-            result2.randomFillSync(buffer, offset, size);
+            result.randomFillSync(buffer, offset, size);
             cb(null, buffer);
           } catch (e) {
             cb(e);
           }
         };
-        result2.randomInt = function randomInt(minOrMax, maxOrCb, callback) {
+        result.randomInt = function randomInt(minOrMax, maxOrCb, callback) {
           var min, max, cb;
           if (typeof maxOrCb === "function" || maxOrCb === void 0) {
             min = 0;
@@ -462,38 +1757,124 @@
             var buf = Buffer.from(base64, "base64");
             val = buf.readUIntBE(0, bytes);
           } while (val >= maxValid);
-          var result22 = min + val % range;
+          var result2 = min + val % range;
           if (typeof cb === "function") {
-            cb(null, result22);
+            cb(null, result2);
             return;
           }
-          return result22;
+          return result2;
+        };
+      }
+      if (typeof _cryptoRandomUUID !== "undefined" && typeof result.randomUUID !== "function") {
+        result.randomUUID = function randomUUID(options) {
+          if (options !== void 0) {
+            if (options === null || typeof options !== "object") {
+              throw createInvalidArgTypeError("options", "of type object", options);
+            }
+            if (Object.prototype.hasOwnProperty.call(options, "disableEntropyCache") && typeof options.disableEntropyCache !== "boolean") {
+              throw createInvalidArgTypeError(
+                "options.disableEntropyCache",
+                "of type boolean",
+                options.disableEntropyCache
+              );
+            }
+          }
+          var uuid = _cryptoRandomUUID.applySync(void 0, []);
+          if (typeof uuid !== "string") {
+            throw new Error("invalid host uuid");
+          }
+          return uuid;
         };
       }
       if (typeof _cryptoPbkdf2 !== "undefined") {
-        result2.pbkdf2Sync = function pbkdf2Sync(password, salt, iterations, keylen, digest) {
-          var pwBuf = typeof password === "string" ? Buffer.from(password, "utf8") : Buffer.from(password);
-          var saltBuf = typeof salt === "string" ? Buffer.from(salt, "utf8") : Buffer.from(salt);
-          var resultBase64 = _cryptoPbkdf2.applySync(void 0, [
-            pwBuf.toString("base64"),
-            saltBuf.toString("base64"),
-            iterations,
-            keylen,
-            digest
-          ]);
-          return Buffer.from(resultBase64, "base64");
+        let createPbkdf2ArgTypeError2 = function(name2, value) {
+          var received;
+          if (value == null) {
+            received = " Received " + value;
+          } else if (typeof value === "object") {
+            received = value.constructor && value.constructor.name ? " Received an instance of " + value.constructor.name : " Received [object Object]";
+          } else {
+            var inspected = typeof value === "string" ? "'" + value + "'" : String(value);
+            received = " Received type " + typeof value + " (" + inspected + ")";
+          }
+          var error = new TypeError('The "' + name2 + '" argument must be of type number.' + received);
+          error.code = "ERR_INVALID_ARG_TYPE";
+          return error;
+        }, validatePbkdf2Args2 = function(password, salt, iterations, keylen, digest) {
+          var pwBuf = normalizeByteSource2(password, "password");
+          var saltBuf = normalizeByteSource2(salt, "salt");
+          if (typeof iterations !== "number") {
+            throw createPbkdf2ArgTypeError2("iterations", iterations);
+          }
+          if (!Number.isInteger(iterations)) {
+            throw createCryptoRangeError2(
+              "iterations",
+              'The value of "iterations" is out of range. It must be an integer. Received ' + iterations
+            );
+          }
+          if (iterations < 1 || iterations > 2147483647) {
+            throw createCryptoRangeError2(
+              "iterations",
+              'The value of "iterations" is out of range. It must be >= 1 && <= 2147483647. Received ' + iterations
+            );
+          }
+          if (typeof keylen !== "number") {
+            throw createPbkdf2ArgTypeError2("keylen", keylen);
+          }
+          if (!Number.isInteger(keylen)) {
+            throw createCryptoRangeError2(
+              "keylen",
+              'The value of "keylen" is out of range. It must be an integer. Received ' + keylen
+            );
+          }
+          if (keylen < 0 || keylen > 2147483647) {
+            throw createCryptoRangeError2(
+              "keylen",
+              'The value of "keylen" is out of range. It must be >= 0 && <= 2147483647. Received ' + keylen
+            );
+          }
+          if (typeof digest !== "string") {
+            throw createInvalidArgTypeError("digest", "of type string", digest);
+          }
+          return {
+            password: pwBuf,
+            salt: saltBuf
+          };
+        };
+        var createPbkdf2ArgTypeError = createPbkdf2ArgTypeError2, validatePbkdf2Args = validatePbkdf2Args2;
+        result.pbkdf2Sync = function pbkdf2Sync(password, salt, iterations, keylen, digest) {
+          var normalized = validatePbkdf2Args2(password, salt, iterations, keylen, digest);
+          try {
+            var resultBase64 = _cryptoPbkdf2.applySync(void 0, [
+              normalized.password.toString("base64"),
+              normalized.salt.toString("base64"),
+              iterations,
+              keylen,
+              digest
+            ]);
+            return Buffer.from(resultBase64, "base64");
+          } catch (error) {
+            throw normalizeCryptoBridgeError(error);
+          }
         };
-        result2.pbkdf2 = function pbkdf2(password, salt, iterations, keylen, digest, callback) {
+        result.pbkdf2 = function pbkdf2(password, salt, iterations, keylen, digest, callback) {
+          if (typeof digest === "function" && callback === void 0) {
+            callback = digest;
+            digest = void 0;
+          }
+          if (typeof callback !== "function") {
+            throw createInvalidArgTypeError("callback", "of type function", callback);
+          }
           try {
-            var derived = result2.pbkdf2Sync(password, salt, iterations, keylen, digest);
-            callback(null, derived);
+            var derived = result.pbkdf2Sync(password, salt, iterations, keylen, digest);
+            scheduleCryptoCallback(callback, [null, derived]);
           } catch (e) {
-            callback(e);
+            throw normalizeCryptoBridgeError(e);
           }
         };
       }
       if (typeof _cryptoScrypt !== "undefined") {
-        result2.scryptSync = function scryptSync(password, salt, keylen, options) {
+        result.scryptSync = function scryptSync(password, salt, keylen, options) {
           var pwBuf = typeof password === "string" ? Buffer.from(password, "utf8") : Buffer.from(password);
           var saltBuf = typeof salt === "string" ? Buffer.from(salt, "utf8") : Buffer.from(salt);
           var opts = {};
@@ -514,7 +1895,7 @@
           ]);
           return Buffer.from(resultBase64, "base64");
         };
-        result2.scrypt = function scrypt(password, salt, keylen, optionsOrCb, callback) {
+        result.scrypt = function scrypt(password, salt, keylen, optionsOrCb, callback) {
           var opts = optionsOrCb;
           var cb = callback;
           if (typeof optionsOrCb === "function") {
@@ -522,239 +1903,936 @@
             cb = optionsOrCb;
           }
           try {
-            var derived = result2.scryptSync(password, salt, keylen, opts);
+            var derived = result.scryptSync(password, salt, keylen, opts);
             cb(null, derived);
           } catch (e) {
             cb(e);
           }
         };
       }
-      var _useStatefulCipher = typeof _cryptoCipherivCreate !== "undefined";
-      if (typeof _cryptoCipheriv !== "undefined" || _useStatefulCipher) {
-        let SandboxCipher2 = function(algorithm, key, iv) {
+      if (typeof _cryptoCipheriv !== "undefined") {
+        let SandboxCipher2 = function(algorithm, key, iv, options) {
+          if (!(this instanceof SandboxCipher2)) {
+            return new SandboxCipher2(algorithm, key, iv, options);
+          }
+          if (typeof algorithm !== "string") {
+            throw createInvalidArgTypeError("cipher", "of type string", algorithm);
+          }
+          _Transform.call(this);
           this._algorithm = algorithm;
-          this._key = typeof key === "string" ? Buffer.from(key, "utf8") : Buffer.from(key);
-          this._iv = typeof iv === "string" ? Buffer.from(iv, "utf8") : Buffer.from(iv);
+          this._key = normalizeByteSource2(key, "key");
+          this._iv = normalizeByteSource2(iv, "iv", { allowNull: true });
+          this._options = options || void 0;
           this._authTag = null;
           this._finalized = false;
-          if (_useStatefulCipher) {
-            this._sessionId = _cryptoCipherivCreate.applySync(void 0, [
-              "cipher",
-              algorithm,
+          this._sessionCreated = false;
+          this._sessionId = void 0;
+          this._aad = null;
+          this._aadOptions = void 0;
+          this._autoPadding = void 0;
+          this._chunks = [];
+          this._bufferedMode = !_useSessionCipher || !!options;
+          if (!this._bufferedMode) {
+            this._ensureSession();
+          } else if (!options) {
+            _cryptoCipheriv.applySync(void 0, [
+              this._algorithm,
               this._key.toString("base64"),
-              this._iv.toString("base64")
+              this._iv === null ? null : this._iv.toString("base64"),
+              "",
+              serializeCipherBridgeOptions2({ validateOnly: true })
             ]);
-          } else {
-            this._sessionId = -1;
-            this._chunks = [];
           }
         };
         var SandboxCipher = SandboxCipher2;
+        var _useSessionCipher = typeof _cryptoCipherivCreate !== "undefined";
+        _inherits(SandboxCipher2, _Transform);
+        SandboxCipher2.prototype._ensureSession = function _ensureSession() {
+          if (this._bufferedMode || this._sessionCreated) {
+            return;
+          }
+          this._sessionCreated = true;
+          this._sessionId = _cryptoCipherivCreate.applySync(void 0, [
+            "cipher",
+            this._algorithm,
+            this._key.toString("base64"),
+            this._iv === null ? null : this._iv.toString("base64"),
+            serializeCipherBridgeOptions2(this._getBridgeOptions())
+          ]);
+        };
+        SandboxCipher2.prototype._getBridgeOptions = function _getBridgeOptions() {
+          var options = {};
+          if (this._options && this._options.authTagLength !== void 0) {
+            options.authTagLength = this._options.authTagLength;
+          }
+          if (this._aad) {
+            options.aad = this._aad;
+          }
+          if (this._aadOptions !== void 0) {
+            options.aadOptions = this._aadOptions;
+          }
+          if (this._autoPadding !== void 0) {
+            options.autoPadding = this._autoPadding;
+          }
+          return Object.keys(options).length === 0 ? null : options;
+        };
         SandboxCipher2.prototype.update = function update(data, inputEncoding, outputEncoding) {
+          if (this._finalized) {
+            throw new Error("Attempting to call update() after final()");
+          }
           var buf;
           if (typeof data === "string") {
             buf = Buffer.from(data, inputEncoding || "utf8");
           } else {
-            buf = Buffer.from(data);
+            buf = normalizeByteSource2(data, "data");
           }
-          if (this._sessionId >= 0) {
+          if (!this._bufferedMode) {
+            this._ensureSession();
             var resultBase64 = _cryptoCipherivUpdate.applySync(void 0, [this._sessionId, buf.toString("base64")]);
             var resultBuffer = Buffer.from(resultBase64, "base64");
-            if (outputEncoding && outputEncoding !== "buffer") return resultBuffer.toString(outputEncoding);
-            return resultBuffer;
+            return encodeCryptoResult2(resultBuffer, outputEncoding);
           }
           this._chunks.push(buf);
-          if (outputEncoding && outputEncoding !== "buffer") return "";
-          return Buffer.alloc(0);
+          return encodeCryptoResult2(Buffer.alloc(0), outputEncoding);
         };
         SandboxCipher2.prototype.final = function final(outputEncoding) {
           if (this._finalized) throw new Error("Attempting to call final() after already finalized");
           this._finalized = true;
-          if (this._sessionId >= 0) {
+          var parsed;
+          if (!this._bufferedMode) {
+            this._ensureSession();
             var resultJson = _cryptoCipherivFinal.applySync(void 0, [this._sessionId]);
-            var parsed = JSON.parse(resultJson);
-            if (parsed.authTag) this._authTag = Buffer.from(parsed.authTag, "base64");
-            var resultBuffer = Buffer.from(parsed.data, "base64");
-            if (outputEncoding && outputEncoding !== "buffer") return resultBuffer.toString(outputEncoding);
-            return resultBuffer;
+            parsed = JSON.parse(resultJson);
+          } else {
+            var combined = Buffer.concat(this._chunks);
+            var resultJson2 = _cryptoCipheriv.applySync(void 0, [
+              this._algorithm,
+              this._key.toString("base64"),
+              this._iv === null ? null : this._iv.toString("base64"),
+              combined.toString("base64"),
+              serializeCipherBridgeOptions2(this._getBridgeOptions())
+            ]);
+            parsed = JSON.parse(resultJson2);
           }
-          var combined = Buffer.concat(this._chunks);
-          var resultJson2 = _cryptoCipheriv.applySync(void 0, [
-            this._algorithm,
-            this._key.toString("base64"),
-            this._iv.toString("base64"),
-            combined.toString("base64")
-          ]);
-          var parsed2 = JSON.parse(resultJson2);
-          if (parsed2.authTag) this._authTag = Buffer.from(parsed2.authTag, "base64");
-          var resultBuffer2 = Buffer.from(parsed2.data, "base64");
-          if (outputEncoding && outputEncoding !== "buffer") return resultBuffer2.toString(outputEncoding);
-          return resultBuffer2;
+          if (parsed.authTag) {
+            this._authTag = Buffer.from(parsed.authTag, "base64");
+          }
+          var resultBuffer = Buffer.from(parsed.data, "base64");
+          return encodeCryptoResult2(resultBuffer, outputEncoding);
         };
         SandboxCipher2.prototype.getAuthTag = function getAuthTag() {
           if (!this._finalized) throw new Error("Cannot call getAuthTag before final()");
-          if (!this._authTag) throw new Error("Auth tag is only available for GCM ciphers");
+          if (!this._authTag) throw new Error("Auth tag is not available");
           return this._authTag;
         };
-        SandboxCipher2.prototype.setAAD = function setAAD(data) {
-          if (this._sessionId >= 0) {
-            var buf = typeof data === "string" ? Buffer.from(data, "utf8") : Buffer.from(data);
-            _cryptoCipherivUpdate.applySync(void 0, [this._sessionId, "", JSON.stringify({ setAAD: buf.toString("base64") })]);
-          }
+        SandboxCipher2.prototype.setAAD = function setAAD(aad, options) {
+          this._bufferedMode = true;
+          this._aad = normalizeByteSource2(aad, "buffer");
+          this._aadOptions = options;
           return this;
         };
         SandboxCipher2.prototype.setAutoPadding = function setAutoPadding(autoPadding) {
-          if (this._sessionId >= 0) {
-            _cryptoCipherivUpdate.applySync(void 0, [this._sessionId, "", JSON.stringify({ setAutoPadding: autoPadding !== false })]);
-          }
+          this._bufferedMode = true;
+          this._autoPadding = autoPadding !== false;
           return this;
         };
-        result2.createCipheriv = function createCipheriv(algorithm, key, iv) {
-          return new SandboxCipher2(algorithm, key, iv);
+        SandboxCipher2.prototype._transform = function _transform(chunk, encoding, callback) {
+          try {
+            var output = this.update(chunk, encoding === "buffer" ? void 0 : encoding);
+            if (output.length) {
+              this.push(output);
+            }
+            callback();
+          } catch (error) {
+            callback(normalizeCryptoBridgeError(error));
+          }
+        };
+        SandboxCipher2.prototype._flush = function _flush(callback) {
+          try {
+            var output = this.final();
+            if (output.length) {
+              this.push(output);
+            }
+            callback();
+          } catch (error) {
+            callback(normalizeCryptoBridgeError(error));
+          }
+        };
+        result.createCipheriv = function createCipheriv(algorithm, key, iv, options) {
+          return new SandboxCipher2(algorithm, key, iv, options);
         };
-        result2.Cipheriv = SandboxCipher2;
+        result.Cipheriv = SandboxCipher2;
       }
-      if (typeof _cryptoDecipheriv !== "undefined" || _useStatefulCipher) {
-        let SandboxDecipher2 = function(algorithm, key, iv) {
+      if (typeof _cryptoDecipheriv !== "undefined") {
+        let SandboxDecipher2 = function(algorithm, key, iv, options) {
+          if (!(this instanceof SandboxDecipher2)) {
+            return new SandboxDecipher2(algorithm, key, iv, options);
+          }
+          if (typeof algorithm !== "string") {
+            throw createInvalidArgTypeError("cipher", "of type string", algorithm);
+          }
+          _Transform.call(this);
           this._algorithm = algorithm;
-          this._key = typeof key === "string" ? Buffer.from(key, "utf8") : Buffer.from(key);
-          this._iv = typeof iv === "string" ? Buffer.from(iv, "utf8") : Buffer.from(iv);
+          this._key = normalizeByteSource2(key, "key");
+          this._iv = normalizeByteSource2(iv, "iv", { allowNull: true });
+          this._options = options || void 0;
           this._authTag = null;
           this._finalized = false;
-          if (_useStatefulCipher) {
+          this._sessionCreated = false;
+          this._aad = null;
+          this._aadOptions = void 0;
+          this._autoPadding = void 0;
+          this._chunks = [];
+          this._bufferedMode = !_useSessionCipher || !!options;
+          if (!this._bufferedMode) {
+            this._ensureSession();
+          } else if (!options) {
+            _cryptoDecipheriv.applySync(void 0, [
+              this._algorithm,
+              this._key.toString("base64"),
+              this._iv === null ? null : this._iv.toString("base64"),
+              "",
+              serializeCipherBridgeOptions2({ validateOnly: true })
+            ]);
+          }
+        };
+        var SandboxDecipher = SandboxDecipher2;
+        _inherits(SandboxDecipher2, _Transform);
+        SandboxDecipher2.prototype._ensureSession = function _ensureSession() {
+          if (!this._bufferedMode && !this._sessionCreated) {
+            this._sessionCreated = true;
             this._sessionId = _cryptoCipherivCreate.applySync(void 0, [
               "decipher",
-              algorithm,
+              this._algorithm,
               this._key.toString("base64"),
-              this._iv.toString("base64")
+              this._iv === null ? null : this._iv.toString("base64"),
+              serializeCipherBridgeOptions2(this._getBridgeOptions())
             ]);
-          } else {
-            this._sessionId = -1;
-            this._chunks = [];
           }
         };
-        var SandboxDecipher = SandboxDecipher2;
+        SandboxDecipher2.prototype._getBridgeOptions = function _getBridgeOptions() {
+          var options = {};
+          if (this._options && this._options.authTagLength !== void 0) {
+            options.authTagLength = this._options.authTagLength;
+          }
+          if (this._authTag) {
+            options.authTag = this._authTag;
+          }
+          if (this._aad) {
+            options.aad = this._aad;
+          }
+          if (this._aadOptions !== void 0) {
+            options.aadOptions = this._aadOptions;
+          }
+          if (this._autoPadding !== void 0) {
+            options.autoPadding = this._autoPadding;
+          }
+          return Object.keys(options).length === 0 ? null : options;
+        };
         SandboxDecipher2.prototype.update = function update(data, inputEncoding, outputEncoding) {
+          if (this._finalized) {
+            throw new Error("Attempting to call update() after final()");
+          }
           var buf;
           if (typeof data === "string") {
             buf = Buffer.from(data, inputEncoding || "utf8");
           } else {
-            buf = Buffer.from(data);
+            buf = normalizeByteSource2(data, "data");
+          }
+          if (!this._bufferedMode) {
+            this._ensureSession();
+            var resultBase64 = _cryptoCipherivUpdate.applySync(void 0, [this._sessionId, buf.toString("base64")]);
+            var resultBuffer = Buffer.from(resultBase64, "base64");
+            return encodeCryptoResult2(resultBuffer, outputEncoding);
+          }
+          this._chunks.push(buf);
+          return encodeCryptoResult2(Buffer.alloc(0), outputEncoding);
+        };
+        SandboxDecipher2.prototype.final = function final(outputEncoding) {
+          if (this._finalized) throw new Error("Attempting to call final() after already finalized");
+          this._finalized = true;
+          var resultBuffer;
+          if (!this._bufferedMode) {
+            this._ensureSession();
+            var resultJson = _cryptoCipherivFinal.applySync(void 0, [this._sessionId]);
+            var parsed = JSON.parse(resultJson);
+            resultBuffer = Buffer.from(parsed.data, "base64");
+          } else {
+            var combined = Buffer.concat(this._chunks);
+            var options = {};
+            var resultBase64 = _cryptoDecipheriv.applySync(void 0, [
+              this._algorithm,
+              this._key.toString("base64"),
+              this._iv === null ? null : this._iv.toString("base64"),
+              combined.toString("base64"),
+              serializeCipherBridgeOptions2(this._getBridgeOptions())
+            ]);
+            resultBuffer = Buffer.from(resultBase64, "base64");
+          }
+          return encodeCryptoResult2(resultBuffer, outputEncoding);
+        };
+        SandboxDecipher2.prototype.setAuthTag = function setAuthTag(tag) {
+          this._bufferedMode = true;
+          this._authTag = typeof tag === "string" ? Buffer.from(tag, "base64") : normalizeByteSource2(tag, "buffer");
+          return this;
+        };
+        SandboxDecipher2.prototype.setAAD = function setAAD(aad, options) {
+          this._bufferedMode = true;
+          this._aad = normalizeByteSource2(aad, "buffer");
+          this._aadOptions = options;
+          return this;
+        };
+        SandboxDecipher2.prototype.setAutoPadding = function setAutoPadding(autoPadding) {
+          this._bufferedMode = true;
+          this._autoPadding = autoPadding !== false;
+          return this;
+        };
+        SandboxDecipher2.prototype._transform = function _transform(chunk, encoding, callback) {
+          try {
+            var output = this.update(chunk, encoding === "buffer" ? void 0 : encoding);
+            if (output.length) {
+              this.push(output);
+            }
+            callback();
+          } catch (error) {
+            callback(normalizeCryptoBridgeError(error));
+          }
+        };
+        SandboxDecipher2.prototype._flush = function _flush(callback) {
+          try {
+            var output = this.final();
+            if (output.length) {
+              this.push(output);
+            }
+            callback();
+          } catch (error) {
+            callback(normalizeCryptoBridgeError(error));
+          }
+        };
+        result.createDecipheriv = function createDecipheriv(algorithm, key, iv, options) {
+          return new SandboxDecipher2(algorithm, key, iv, options);
+        };
+        result.Decipheriv = SandboxDecipher2;
+      }
+      if (typeof _cryptoSign !== "undefined") {
+        result.sign = function sign(algorithm, data, key) {
+          var dataBuf = typeof data === "string" ? Buffer.from(data, "utf8") : Buffer.from(data);
+          var sigBase64;
+          try {
+            sigBase64 = _cryptoSign.applySync(void 0, [
+              algorithm === void 0 ? null : algorithm,
+              dataBuf.toString("base64"),
+              JSON.stringify(serializeBridgeValue(key))
+            ]);
+          } catch (error) {
+            throw normalizeCryptoBridgeError(error);
+          }
+          return Buffer.from(sigBase64, "base64");
+        };
+      }
+      if (typeof _cryptoVerify !== "undefined") {
+        result.verify = function verify(algorithm, data, key, signature) {
+          var dataBuf = typeof data === "string" ? Buffer.from(data, "utf8") : Buffer.from(data);
+          var sigBuf = typeof signature === "string" ? Buffer.from(signature, "base64") : Buffer.from(signature);
+          try {
+            return _cryptoVerify.applySync(void 0, [
+              algorithm === void 0 ? null : algorithm,
+              dataBuf.toString("base64"),
+              JSON.stringify(serializeBridgeValue(key)),
+              sigBuf.toString("base64")
+            ]);
+          } catch (error) {
+            throw normalizeCryptoBridgeError(error);
+          }
+        };
+      }
+      if (typeof _cryptoAsymmetricOp !== "undefined") {
+        let asymmetricBridgeCall2 = function(operation, key, data) {
+          var dataBuf = toRawBuffer(data);
+          var resultBase64;
+          try {
+            resultBase64 = _cryptoAsymmetricOp.applySync(void 0, [
+              operation,
+              JSON.stringify(serializeBridgeValue(key)),
+              dataBuf.toString("base64")
+            ]);
+          } catch (error) {
+            throw normalizeCryptoBridgeError(error);
+          }
+          return Buffer.from(resultBase64, "base64");
+        };
+        var asymmetricBridgeCall = asymmetricBridgeCall2;
+        result.publicEncrypt = function publicEncrypt(key, data) {
+          return asymmetricBridgeCall2("publicEncrypt", key, data);
+        };
+        result.privateDecrypt = function privateDecrypt(key, data) {
+          return asymmetricBridgeCall2("privateDecrypt", key, data);
+        };
+        result.privateEncrypt = function privateEncrypt(key, data) {
+          return asymmetricBridgeCall2("privateEncrypt", key, data);
+        };
+        result.publicDecrypt = function publicDecrypt(key, data) {
+          return asymmetricBridgeCall2("publicDecrypt", key, data);
+        };
+      }
+      if (typeof _cryptoDiffieHellmanSessionCreate !== "undefined" && typeof _cryptoDiffieHellmanSessionCall !== "undefined") {
+        let serializeDhKeyObject2 = function(value) {
+          if (value.type === "secret") {
+            return {
+              type: "secret",
+              raw: Buffer.from(value.export()).toString("base64")
+            };
+          }
+          return {
+            type: value.type,
+            pem: value._pem || value.export({
+              type: value.type === "private" ? "pkcs8" : "spki",
+              format: "pem"
+            })
+          };
+        }, serializeDhValue2 = function(value) {
+          if (value === null || typeof value === "string" || typeof value === "number" || typeof value === "boolean") {
+            return value;
+          }
+          if (Buffer.isBuffer(value)) {
+            return {
+              __type: "buffer",
+              value: Buffer.from(value).toString("base64")
+            };
+          }
+          if (value instanceof ArrayBuffer) {
+            return {
+              __type: "buffer",
+              value: Buffer.from(new Uint8Array(value)).toString("base64")
+            };
+          }
+          if (ArrayBuffer.isView(value)) {
+            return {
+              __type: "buffer",
+              value: Buffer.from(value.buffer, value.byteOffset, value.byteLength).toString("base64")
+            };
+          }
+          if (typeof value === "bigint") {
+            return {
+              __type: "bigint",
+              value: value.toString()
+            };
+          }
+          if (value && typeof value === "object" && (value.type === "public" || value.type === "private" || value.type === "secret") && typeof value.export === "function") {
+            return {
+              __type: "keyObject",
+              value: serializeDhKeyObject2(value)
+            };
+          }
+          if (Array.isArray(value)) {
+            return value.map(serializeDhValue2);
+          }
+          if (value && typeof value === "object") {
+            var output = {};
+            var keys = Object.keys(value);
+            for (var i = 0; i < keys.length; i++) {
+              if (value[keys[i]] !== void 0) {
+                output[keys[i]] = serializeDhValue2(value[keys[i]]);
+              }
+            }
+            return output;
+          }
+          return String(value);
+        }, restoreDhValue2 = function(value) {
+          if (!value || typeof value !== "object") {
+            return value;
+          }
+          if (value.__type === "buffer") {
+            return Buffer.from(value.value, "base64");
+          }
+          if (value.__type === "bigint") {
+            return BigInt(value.value);
+          }
+          if (Array.isArray(value)) {
+            return value.map(restoreDhValue2);
+          }
+          var output = {};
+          var keys = Object.keys(value);
+          for (var i = 0; i < keys.length; i++) {
+            output[keys[i]] = restoreDhValue2(value[keys[i]]);
+          }
+          return output;
+        }, createDhSession2 = function(type, name2, argsLike) {
+          var args = [];
+          for (var i = 0; i < argsLike.length; i++) {
+            args.push(serializeDhValue2(argsLike[i]));
+          }
+          return _cryptoDiffieHellmanSessionCreate.applySync(void 0, [
+            JSON.stringify({
+              type,
+              name: name2,
+              args
+            })
+          ]);
+        }, callDhSession2 = function(sessionId, method, argsLike) {
+          var args = [];
+          for (var i = 0; i < argsLike.length; i++) {
+            args.push(serializeDhValue2(argsLike[i]));
+          }
+          var response = JSON.parse(_cryptoDiffieHellmanSessionCall.applySync(void 0, [
+            sessionId,
+            JSON.stringify({
+              method,
+              args
+            })
+          ]));
+          if (response && response.hasResult === false) {
+            return void 0;
+          }
+          return restoreDhValue2(response && response.result);
+        }, SandboxDiffieHellman2 = function(sessionId) {
+          this._sessionId = sessionId;
+        }, SandboxECDH2 = function(sessionId) {
+          SandboxDiffieHellman2.call(this, sessionId);
+        };
+        var serializeDhKeyObject = serializeDhKeyObject2, serializeDhValue = serializeDhValue2, restoreDhValue = restoreDhValue2, createDhSession = createDhSession2, callDhSession = callDhSession2, SandboxDiffieHellman = SandboxDiffieHellman2, SandboxECDH = SandboxECDH2;
+        Object.defineProperty(SandboxDiffieHellman2.prototype, "verifyError", {
+          get: function getVerifyError() {
+            return callDhSession2(this._sessionId, "verifyError", []);
+          }
+        });
+        SandboxDiffieHellman2.prototype.generateKeys = function generateKeys(encoding) {
+          if (arguments.length === 0) return callDhSession2(this._sessionId, "generateKeys", []);
+          return callDhSession2(this._sessionId, "generateKeys", [encoding]);
+        };
+        SandboxDiffieHellman2.prototype.computeSecret = function computeSecret(key, inputEncoding, outputEncoding) {
+          return callDhSession2(this._sessionId, "computeSecret", Array.prototype.slice.call(arguments));
+        };
+        SandboxDiffieHellman2.prototype.getPrime = function getPrime(encoding) {
+          if (arguments.length === 0) return callDhSession2(this._sessionId, "getPrime", []);
+          return callDhSession2(this._sessionId, "getPrime", [encoding]);
+        };
+        SandboxDiffieHellman2.prototype.getGenerator = function getGenerator(encoding) {
+          if (arguments.length === 0) return callDhSession2(this._sessionId, "getGenerator", []);
+          return callDhSession2(this._sessionId, "getGenerator", [encoding]);
+        };
+        SandboxDiffieHellman2.prototype.getPublicKey = function getPublicKey(encoding) {
+          if (arguments.length === 0) return callDhSession2(this._sessionId, "getPublicKey", []);
+          return callDhSession2(this._sessionId, "getPublicKey", [encoding]);
+        };
+        SandboxDiffieHellman2.prototype.getPrivateKey = function getPrivateKey(encoding) {
+          if (arguments.length === 0) return callDhSession2(this._sessionId, "getPrivateKey", []);
+          return callDhSession2(this._sessionId, "getPrivateKey", [encoding]);
+        };
+        SandboxDiffieHellman2.prototype.setPublicKey = function setPublicKey(key, encoding) {
+          return callDhSession2(this._sessionId, "setPublicKey", Array.prototype.slice.call(arguments));
+        };
+        SandboxDiffieHellman2.prototype.setPrivateKey = function setPrivateKey(key, encoding) {
+          return callDhSession2(this._sessionId, "setPrivateKey", Array.prototype.slice.call(arguments));
+        };
+        SandboxECDH2.prototype = Object.create(SandboxDiffieHellman2.prototype);
+        SandboxECDH2.prototype.constructor = SandboxECDH2;
+        SandboxECDH2.prototype.getPublicKey = function getPublicKey(encoding, format) {
+          return callDhSession2(this._sessionId, "getPublicKey", Array.prototype.slice.call(arguments));
+        };
+        result.createDiffieHellman = function createDiffieHellman() {
+          return new SandboxDiffieHellman2(createDhSession2("dh", void 0, arguments));
+        };
+        result.getDiffieHellman = function getDiffieHellman(name2) {
+          return new SandboxDiffieHellman2(createDhSession2("group", name2, []));
+        };
+        result.createDiffieHellmanGroup = result.getDiffieHellman;
+        result.createECDH = function createECDH(curve) {
+          return new SandboxECDH2(createDhSession2("ecdh", curve, []));
+        };
+        if (typeof _cryptoDiffieHellman !== "undefined") {
+          result.diffieHellman = function diffieHellman(options) {
+            var resultJson = _cryptoDiffieHellman.applySync(void 0, [
+              JSON.stringify(serializeDhValue2(options))
+            ]);
+            return restoreDhValue2(JSON.parse(resultJson));
+          };
+        }
+        result.DiffieHellman = SandboxDiffieHellman2;
+        result.DiffieHellmanGroup = SandboxDiffieHellman2;
+        result.ECDH = SandboxECDH2;
+      }
+      if (typeof _cryptoGenerateKeyPairSync !== "undefined") {
+        let restoreBridgeValue2 = function(value) {
+          if (!value || typeof value !== "object") {
+            return value;
+          }
+          if (value.__type === "buffer") {
+            return Buffer.from(value.value, "base64");
+          }
+          if (value.__type === "bigint") {
+            return BigInt(value.value);
+          }
+          if (Array.isArray(value)) {
+            return value.map(restoreBridgeValue2);
+          }
+          var output = {};
+          var keys = Object.keys(value);
+          for (var i = 0; i < keys.length; i++) {
+            output[keys[i]] = restoreBridgeValue2(value[keys[i]]);
+          }
+          return output;
+        }, cloneObject2 = function(value) {
+          if (!value || typeof value !== "object") {
+            return value;
+          }
+          if (Array.isArray(value)) {
+            return value.map(cloneObject2);
+          }
+          var output = {};
+          var keys = Object.keys(value);
+          for (var i = 0; i < keys.length; i++) {
+            output[keys[i]] = cloneObject2(value[keys[i]]);
+          }
+          return output;
+        }, createDomException2 = function(message, name2) {
+          if (typeof DOMException === "function") {
+            return new DOMException(message, name2);
+          }
+          var error = new Error(message);
+          error.name = name2;
+          return error;
+        }, toRawBuffer2 = function(data, encoding) {
+          if (Buffer.isBuffer(data)) {
+            return Buffer.from(data);
+          }
+          if (data instanceof ArrayBuffer) {
+            return Buffer.from(new Uint8Array(data));
+          }
+          if (ArrayBuffer.isView(data)) {
+            return Buffer.from(data.buffer, data.byteOffset, data.byteLength);
+          }
+          if (typeof data === "string") {
+            return Buffer.from(data, encoding || "utf8");
+          }
+          return Buffer.from(data);
+        }, serializeBridgeValue2 = function(value) {
+          if (value === null) {
+            return null;
+          }
+          if (typeof value === "string" || typeof value === "number" || typeof value === "boolean") {
+            return value;
+          }
+          if (typeof value === "bigint") {
+            return {
+              __type: "bigint",
+              value: value.toString()
+            };
+          }
+          if (Buffer.isBuffer(value)) {
+            return {
+              __type: "buffer",
+              value: Buffer.from(value).toString("base64")
+            };
+          }
+          if (value instanceof ArrayBuffer) {
+            return {
+              __type: "buffer",
+              value: Buffer.from(new Uint8Array(value)).toString("base64")
+            };
+          }
+          if (ArrayBuffer.isView(value)) {
+            return {
+              __type: "buffer",
+              value: Buffer.from(value.buffer, value.byteOffset, value.byteLength).toString("base64")
+            };
+          }
+          if (Array.isArray(value)) {
+            return value.map(serializeBridgeValue2);
+          }
+          if (value && typeof value === "object" && (value.type === "public" || value.type === "private" || value.type === "secret") && typeof value.export === "function") {
+            if (value.type === "secret") {
+              return {
+                __type: "keyObject",
+                value: {
+                  type: "secret",
+                  raw: Buffer.from(value.export()).toString("base64")
+                }
+              };
+            }
+            return {
+              __type: "keyObject",
+              value: {
+                type: value.type,
+                pem: value._pem
+              }
+            };
+          }
+          if (value && typeof value === "object") {
+            var output = {};
+            var keys = Object.keys(value);
+            for (var i = 0; i < keys.length; i++) {
+              var entry = value[keys[i]];
+              if (entry !== void 0) {
+                output[keys[i]] = serializeBridgeValue2(entry);
+              }
+            }
+            return output;
+          }
+          return String(value);
+        }, normalizeCryptoBridgeError2 = function(error) {
+          if (!error || typeof error !== "object") {
+            return error;
+          }
+          if (error.code === void 0 && error.message === "error:07880109:common libcrypto routines::interrupted or cancelled") {
+            error.code = "ERR_OSSL_CRYPTO_INTERRUPTED_OR_CANCELLED";
+          }
+          return error;
+        }, deserializeGeneratedKeyValue2 = function(value) {
+          if (!value || typeof value !== "object") {
+            return value;
+          }
+          if (value.kind === "string") {
+            return value.value;
+          }
+          if (value.kind === "buffer") {
+            return Buffer.from(value.value, "base64");
+          }
+          if (value.kind === "keyObject") {
+            return createGeneratedKeyObject2(value.value);
+          }
+          if (value.kind === "object") {
+            return value.value;
+          }
+          return value;
+        }, serializeBridgeOptions2 = function(options) {
+          return JSON.stringify({
+            hasOptions: options !== void 0,
+            options: options === void 0 ? null : serializeBridgeValue2(options)
+          });
+        }, createInvalidArgTypeError2 = function(name2, expected, value) {
+          var received;
+          if (value == null) {
+            received = " Received " + value;
+          } else if (typeof value === "function") {
+            received = " Received function " + (value.name || "anonymous");
+          } else if (typeof value === "object") {
+            if (value.constructor && value.constructor.name) {
+              received = " Received an instance of " + value.constructor.name;
+            } else {
+              received = " Received [object Object]";
+            }
+          } else {
+            var inspected = typeof value === "string" ? "'" + value + "'" : String(value);
+            if (inspected.length > 28) {
+              inspected = inspected.slice(0, 25) + "...";
+            }
+            received = " Received type " + typeof value + " (" + inspected + ")";
+          }
+          var error = new TypeError('The "' + name2 + '" argument must be ' + expected + "." + received);
+          error.code = "ERR_INVALID_ARG_TYPE";
+          return error;
+        }, scheduleCryptoCallback2 = function(callback, args) {
+          setTimeout(function() {
+            callback.apply(void 0, args);
+          }, 0);
+        }, shouldThrowCryptoValidationError2 = function(error) {
+          if (!error || typeof error !== "object") {
+            return false;
+          }
+          if (error.name === "TypeError" || error.name === "RangeError") {
+            return true;
+          }
+          var code = error.code;
+          return code === "ERR_MISSING_OPTION" || code === "ERR_CRYPTO_UNKNOWN_DH_GROUP" || code === "ERR_OUT_OF_RANGE" || typeof code === "string" && code.indexOf("ERR_INVALID_ARG_") === 0;
+        }, ensureCryptoCallback2 = function(callback, syncValidator) {
+          if (typeof callback === "function") {
+            return callback;
+          }
+          if (typeof syncValidator === "function") {
+            syncValidator();
+          }
+          throw createInvalidArgTypeError2("callback", "of type function", callback);
+        }, SandboxKeyObject2 = function(type, handle) {
+          this.type = type;
+          this._pem = handle && handle.pem !== void 0 ? handle.pem : void 0;
+          this._raw = handle && handle.raw !== void 0 ? handle.raw : void 0;
+          this._jwk = handle && handle.jwk !== void 0 ? cloneObject2(handle.jwk) : void 0;
+          this.asymmetricKeyType = handle && handle.asymmetricKeyType !== void 0 ? handle.asymmetricKeyType : void 0;
+          this.asymmetricKeyDetails = handle && handle.asymmetricKeyDetails !== void 0 ? restoreBridgeValue2(handle.asymmetricKeyDetails) : void 0;
+          this.symmetricKeySize = type === "secret" && handle && handle.raw !== void 0 ? Buffer.from(handle.raw, "base64").byteLength : void 0;
+        }, normalizeNamedCurve2 = function(namedCurve) {
+          if (!namedCurve) {
+            return namedCurve;
+          }
+          var upper = String(namedCurve).toUpperCase();
+          if (upper === "PRIME256V1" || upper === "SECP256R1") return "P-256";
+          if (upper === "SECP384R1") return "P-384";
+          if (upper === "SECP521R1") return "P-521";
+          return namedCurve;
+        }, normalizeAlgorithmInput2 = function(algorithm) {
+          if (typeof algorithm === "string") {
+            return { name: algorithm };
+          }
+          return Object.assign({}, algorithm);
+        }, createCompatibleCryptoKey2 = function(keyData) {
+          var key;
+          if (globalThis.CryptoKey && globalThis.CryptoKey.prototype && globalThis.CryptoKey.prototype !== SandboxCryptoKey.prototype) {
+            key = Object.create(globalThis.CryptoKey.prototype);
+            key.type = keyData.type;
+            key.extractable = keyData.extractable;
+            key.algorithm = keyData.algorithm;
+            key.usages = keyData.usages;
+            key._keyData = keyData;
+            key._pem = keyData._pem;
+            key._jwk = keyData._jwk;
+            key._raw = keyData._raw;
+            key._sourceKeyObjectData = keyData._sourceKeyObjectData;
+            return key;
+          }
+          return new SandboxCryptoKey(keyData);
+        }, buildCryptoKeyFromKeyObject2 = function(keyObject, algorithm, extractable, usages) {
+          var algo = normalizeAlgorithmInput2(algorithm);
+          var name2 = algo.name;
+          if (keyObject.type === "secret") {
+            var secretBytes = Buffer.from(keyObject._raw || "", "base64");
+            if (name2 === "PBKDF2") {
+              if (extractable) {
+                throw new SyntaxError("PBKDF2 keys are not extractable");
+              }
+              if (usages.some(function(usage) {
+                return usage !== "deriveBits" && usage !== "deriveKey";
+              })) {
+                throw new SyntaxError("Unsupported key usage for a PBKDF2 key");
+              }
+              return createCompatibleCryptoKey2({
+                type: "secret",
+                extractable,
+                algorithm: { name: name2 },
+                usages: Array.from(usages),
+                _raw: keyObject._raw,
+                _sourceKeyObjectData: {
+                  type: "secret",
+                  raw: keyObject._raw
+                }
+              });
+            }
+            if (name2 === "HMAC") {
+              if (!secretBytes.byteLength || algo.length === 0) {
+                throw createDomException2("Zero-length key is not supported", "DataError");
+              }
+              if (!usages.length) {
+                throw new SyntaxError("Usages cannot be empty when importing a secret key.");
+              }
+              return createCompatibleCryptoKey2({
+                type: "secret",
+                extractable,
+                algorithm: {
+                  name: name2,
+                  hash: typeof algo.hash === "string" ? { name: algo.hash } : cloneObject2(algo.hash),
+                  length: secretBytes.byteLength * 8
+                },
+                usages: Array.from(usages),
+                _raw: keyObject._raw,
+                _sourceKeyObjectData: {
+                  type: "secret",
+                  raw: keyObject._raw
+                }
+              });
+            }
+            return createCompatibleCryptoKey2({
+              type: "secret",
+              extractable,
+              algorithm: {
+                name: name2,
+                length: secretBytes.byteLength * 8
+              },
+              usages: Array.from(usages),
+              _raw: keyObject._raw,
+              _sourceKeyObjectData: {
+                type: "secret",
+                raw: keyObject._raw
+              }
+            });
           }
-          if (this._sessionId >= 0) {
-            var resultBase64 = _cryptoCipherivUpdate.applySync(void 0, [this._sessionId, buf.toString("base64")]);
-            var resultBuffer = Buffer.from(resultBase64, "base64");
-            if (outputEncoding && outputEncoding !== "buffer") return resultBuffer.toString(outputEncoding);
-            return resultBuffer;
+          var keyType = String(keyObject.asymmetricKeyType || "").toLowerCase();
+          var algorithmName = String(name2 || "");
+          if ((keyType === "ed25519" || keyType === "ed448" || keyType === "x25519" || keyType === "x448") && keyType !== algorithmName.toLowerCase()) {
+            throw createDomException2("Invalid key type", "DataError");
           }
-          this._chunks.push(buf);
-          if (outputEncoding && outputEncoding !== "buffer") return "";
-          return Buffer.alloc(0);
-        };
-        SandboxDecipher2.prototype.final = function final(outputEncoding) {
-          if (this._finalized) throw new Error("Attempting to call final() after already finalized");
-          this._finalized = true;
-          if (this._sessionId >= 0) {
-            if (this._authTag) {
-              _cryptoCipherivUpdate.applySync(void 0, [this._sessionId, "", JSON.stringify({ setAuthTag: this._authTag.toString("base64") })]);
+          if (algorithmName === "ECDH") {
+            if (keyObject.type === "private" && !usages.length) {
+              throw new SyntaxError("Usages cannot be empty when importing a private key.");
+            }
+            var actualCurve = normalizeNamedCurve2(
+              keyObject.asymmetricKeyDetails && keyObject.asymmetricKeyDetails.namedCurve
+            );
+            if (algo.namedCurve && actualCurve && normalizeNamedCurve2(algo.namedCurve) !== actualCurve) {
+              throw createDomException2("Named curve mismatch", "DataError");
             }
-            var resultJson = _cryptoCipherivFinal.applySync(void 0, [this._sessionId]);
-            var parsed = JSON.parse(resultJson);
-            var resultBuffer = Buffer.from(parsed.data, "base64");
-            if (outputEncoding && outputEncoding !== "buffer") return resultBuffer.toString(outputEncoding);
-            return resultBuffer;
-          }
-          var combined = Buffer.concat(this._chunks);
-          var options = {};
-          if (this._authTag) options.authTag = this._authTag.toString("base64");
-          var resultBase64 = _cryptoDecipheriv.applySync(void 0, [
-            this._algorithm,
-            this._key.toString("base64"),
-            this._iv.toString("base64"),
-            combined.toString("base64"),
-            JSON.stringify(options)
-          ]);
-          var resultBuffer2 = Buffer.from(resultBase64, "base64");
-          if (outputEncoding && outputEncoding !== "buffer") return resultBuffer2.toString(outputEncoding);
-          return resultBuffer2;
-        };
-        SandboxDecipher2.prototype.setAuthTag = function setAuthTag(tag) {
-          this._authTag = typeof tag === "string" ? Buffer.from(tag, "base64") : Buffer.from(tag);
-          return this;
-        };
-        SandboxDecipher2.prototype.setAAD = function setAAD(data) {
-          if (this._sessionId >= 0) {
-            var buf = typeof data === "string" ? Buffer.from(data, "utf8") : Buffer.from(data);
-            _cryptoCipherivUpdate.applySync(void 0, [this._sessionId, "", JSON.stringify({ setAAD: buf.toString("base64") })]);
           }
-          return this;
-        };
-        SandboxDecipher2.prototype.setAutoPadding = function setAutoPadding(autoPadding) {
-          if (this._sessionId >= 0) {
-            _cryptoCipherivUpdate.applySync(void 0, [this._sessionId, "", JSON.stringify({ setAutoPadding: autoPadding !== false })]);
+          var normalizedAlgo = cloneObject2(algo);
+          if (typeof normalizedAlgo.hash === "string") {
+            normalizedAlgo.hash = { name: normalizedAlgo.hash };
           }
-          return this;
-        };
-        result2.createDecipheriv = function createDecipheriv(algorithm, key, iv) {
-          return new SandboxDecipher2(algorithm, key, iv);
-        };
-        result2.Decipheriv = SandboxDecipher2;
-      }
-      if (typeof _cryptoSign !== "undefined") {
-        result2.sign = function sign(algorithm, data, key) {
-          var dataBuf = typeof data === "string" ? Buffer.from(data, "utf8") : Buffer.from(data);
-          var keyPem;
+          return createCompatibleCryptoKey2({
+            type: keyObject.type,
+            extractable,
+            algorithm: normalizedAlgo,
+            usages: Array.from(usages),
+            _pem: keyObject._pem,
+            _jwk: cloneObject2(keyObject._jwk),
+            _sourceKeyObjectData: {
+              type: keyObject.type,
+              pem: keyObject._pem,
+              jwk: cloneObject2(keyObject._jwk),
+              asymmetricKeyType: keyObject.asymmetricKeyType,
+              asymmetricKeyDetails: cloneObject2(keyObject.asymmetricKeyDetails)
+            }
+          });
+        }, createAsymmetricKeyObject2 = function(type, key) {
           if (typeof key === "string") {
-            keyPem = key;
-          } else if (key && typeof key === "object" && key._pem) {
-            keyPem = key._pem;
-          } else if (Buffer.isBuffer(key)) {
-            keyPem = key.toString("utf8");
-          } else {
-            keyPem = String(key);
+            if (key.indexOf("-----BEGIN") === -1) {
+              throw new TypeError("error:0900006e:PEM routines:OPENSSL_internal:NO_START_LINE");
+            }
+            return new SandboxKeyObject2(type, { pem: key });
           }
-          var sigBase64 = _cryptoSign.applySync(void 0, [
-            algorithm,
-            dataBuf.toString("base64"),
-            keyPem
-          ]);
-          return Buffer.from(sigBase64, "base64");
-        };
-      }
-      if (typeof _cryptoVerify !== "undefined") {
-        result2.verify = function verify(algorithm, data, key, signature) {
-          var dataBuf = typeof data === "string" ? Buffer.from(data, "utf8") : Buffer.from(data);
-          var keyPem;
-          if (typeof key === "string") {
-            keyPem = key;
-          } else if (key && typeof key === "object" && key._pem) {
-            keyPem = key._pem;
-          } else if (Buffer.isBuffer(key)) {
-            keyPem = key.toString("utf8");
-          } else {
-            keyPem = String(key);
+          if (key && typeof key === "object" && key._pem) {
+            return new SandboxKeyObject2(type, {
+              pem: key._pem,
+              jwk: key._jwk,
+              asymmetricKeyType: key.asymmetricKeyType,
+              asymmetricKeyDetails: key.asymmetricKeyDetails
+            });
           }
-          var sigBuf = typeof signature === "string" ? Buffer.from(signature, "base64") : Buffer.from(signature);
-          return _cryptoVerify.applySync(void 0, [
-            algorithm,
-            dataBuf.toString("base64"),
-            keyPem,
-            sigBuf.toString("base64")
-          ]);
-        };
-      }
-      if (typeof _cryptoGenerateKeyPairSync !== "undefined") {
-        let SandboxKeyObject2 = function(type, pem) {
-          this.type = type;
-          this._pem = pem;
+          if (key && typeof key === "object" && key.key) {
+            var keyData = typeof key.key === "string" ? key.key : key.key.toString("utf8");
+            return new SandboxKeyObject2(type, { pem: keyData });
+          }
+          if (Buffer.isBuffer(key)) {
+            var keyStr = key.toString("utf8");
+            if (keyStr.indexOf("-----BEGIN") === -1) {
+              throw new TypeError("error:0900006e:PEM routines:OPENSSL_internal:NO_START_LINE");
+            }
+            return new SandboxKeyObject2(type, { pem: keyStr });
+          }
+          return new SandboxKeyObject2(type, { pem: String(key) });
+        }, createGeneratedKeyObject2 = function(value) {
+          return new SandboxKeyObject2(value.type, {
+            pem: value.pem,
+            raw: value.raw,
+            jwk: value.jwk,
+            asymmetricKeyType: value.asymmetricKeyType,
+            asymmetricKeyDetails: value.asymmetricKeyDetails
+          });
         };
-        var SandboxKeyObject = SandboxKeyObject2;
+        var restoreBridgeValue = restoreBridgeValue2, cloneObject = cloneObject2, createDomException = createDomException2, toRawBuffer = toRawBuffer2, serializeBridgeValue = serializeBridgeValue2, normalizeCryptoBridgeError = normalizeCryptoBridgeError2, deserializeGeneratedKeyValue = deserializeGeneratedKeyValue2, serializeBridgeOptions = serializeBridgeOptions2, createInvalidArgTypeError = createInvalidArgTypeError2, scheduleCryptoCallback = scheduleCryptoCallback2, shouldThrowCryptoValidationError = shouldThrowCryptoValidationError2, ensureCryptoCallback = ensureCryptoCallback2, SandboxKeyObject = SandboxKeyObject2, normalizeNamedCurve = normalizeNamedCurve2, normalizeAlgorithmInput = normalizeAlgorithmInput2, createCompatibleCryptoKey = createCompatibleCryptoKey2, buildCryptoKeyFromKeyObject = buildCryptoKeyFromKeyObject2, createAsymmetricKeyObject = createAsymmetricKeyObject2, createGeneratedKeyObject = createGeneratedKeyObject2;
+        Object.defineProperty(SandboxKeyObject2.prototype, Symbol.toStringTag, {
+          value: "KeyObject",
+          configurable: true
+        });
         SandboxKeyObject2.prototype.export = function exportKey(options) {
-          if (!options || options.format === "pem") {
-            return this._pem;
+          if (this.type === "secret") {
+            return Buffer.from(this._raw || "", "base64");
+          }
+          if (!options || typeof options !== "object") {
+            throw new TypeError('The "options" argument must be of type object.');
+          }
+          if (options.format === "jwk") {
+            return cloneObject2(this._jwk);
           }
           if (options.format === "der") {
-            var lines = this._pem.split("\n").filter(function(l) {
+            var lines = String(this._pem || "").split("\n").filter(function(l) {
               return l && l.indexOf("-----") !== 0;
             });
             return Buffer.from(lines.join(""), "base64");
@@ -762,97 +2840,170 @@
           return this._pem;
         };
         SandboxKeyObject2.prototype.toString = function() {
-          return this._pem;
+          return "[object KeyObject]";
         };
-        result2.generateKeyPairSync = function generateKeyPairSync(type, options) {
-          var opts = {};
-          if (options) {
-            if (options.modulusLength !== void 0) opts.modulusLength = options.modulusLength;
-            if (options.publicExponent !== void 0) opts.publicExponent = options.publicExponent;
-            if (options.namedCurve !== void 0) opts.namedCurve = options.namedCurve;
-            if (options.divisorLength !== void 0) opts.divisorLength = options.divisorLength;
-            if (options.primeLength !== void 0) opts.primeLength = options.primeLength;
+        SandboxKeyObject2.prototype.equals = function equals(other) {
+          if (!(other instanceof SandboxKeyObject2)) {
+            return false;
+          }
+          if (this.type !== other.type) {
+            return false;
           }
+          if (this.type === "secret") {
+            return (this._raw || "") === (other._raw || "");
+          }
+          return (this._pem || "") === (other._pem || "") && this.asymmetricKeyType === other.asymmetricKeyType;
+        };
+        SandboxKeyObject2.prototype.toCryptoKey = function toCryptoKey(algorithm, extractable, usages) {
+          return buildCryptoKeyFromKeyObject2(this, algorithm, extractable, Array.from(usages || []));
+        };
+        result.generateKeyPairSync = function generateKeyPairSync(type, options) {
           var resultJson = _cryptoGenerateKeyPairSync.applySync(void 0, [
             type,
-            JSON.stringify(opts)
+            serializeBridgeOptions2(options)
           ]);
           var parsed = JSON.parse(resultJson);
-          if (options && options.publicKeyEncoding && options.privateKeyEncoding) {
-            return { publicKey: parsed.publicKey, privateKey: parsed.privateKey };
+          if (parsed.publicKey && parsed.publicKey.kind) {
+            return {
+              publicKey: deserializeGeneratedKeyValue2(parsed.publicKey),
+              privateKey: deserializeGeneratedKeyValue2(parsed.privateKey)
+            };
           }
           return {
-            publicKey: new SandboxKeyObject2("public", parsed.publicKey),
-            privateKey: new SandboxKeyObject2("private", parsed.privateKey)
+            publicKey: createGeneratedKeyObject2(parsed.publicKey),
+            privateKey: createGeneratedKeyObject2(parsed.privateKey)
           };
         };
-        result2.generateKeyPair = function generateKeyPair(type, options, callback) {
+        result.generateKeyPair = function generateKeyPair(type, options, callback) {
+          if (typeof options === "function") {
+            callback = options;
+            options = void 0;
+          }
+          callback = ensureCryptoCallback2(callback, function() {
+            result.generateKeyPairSync(type, options);
+          });
           try {
-            var pair = result2.generateKeyPairSync(type, options);
-            callback(null, pair.publicKey, pair.privateKey);
+            var pair = result.generateKeyPairSync(type, options);
+            scheduleCryptoCallback2(callback, [null, pair.publicKey, pair.privateKey]);
           } catch (e) {
-            callback(e);
+            if (shouldThrowCryptoValidationError2(e)) {
+              throw e;
+            }
+            scheduleCryptoCallback2(callback, [e]);
           }
         };
-        result2.createPublicKey = function createPublicKey(key) {
-          if (typeof key === "string") {
-            if (key.indexOf("-----BEGIN") === -1) {
-              throw new TypeError("error:0900006e:PEM routines:OPENSSL_internal:NO_START_LINE");
+        if (typeof _cryptoGenerateKeySync !== "undefined") {
+          result.generateKeySync = function generateKeySync(type, options) {
+            var resultJson;
+            try {
+              resultJson = _cryptoGenerateKeySync.applySync(void 0, [
+                type,
+                serializeBridgeOptions2(options)
+              ]);
+            } catch (error) {
+              throw normalizeCryptoBridgeError2(error);
             }
-            return new SandboxKeyObject2("public", key);
-          }
-          if (key && typeof key === "object" && key._pem) {
-            return new SandboxKeyObject2("public", key._pem);
-          }
-          if (key && typeof key === "object" && key.type === "private") {
-            return new SandboxKeyObject2("public", key._pem);
-          }
-          if (key && typeof key === "object" && key.key) {
-            var keyData = typeof key.key === "string" ? key.key : key.key.toString("utf8");
-            return new SandboxKeyObject2("public", keyData);
-          }
-          if (Buffer.isBuffer(key)) {
-            var keyStr = key.toString("utf8");
-            if (keyStr.indexOf("-----BEGIN") === -1) {
-              throw new TypeError("error:0900006e:PEM routines:OPENSSL_internal:NO_START_LINE");
+            return createGeneratedKeyObject2(JSON.parse(resultJson));
+          };
+          result.generateKey = function generateKey(type, options, callback) {
+            callback = ensureCryptoCallback2(callback, function() {
+              result.generateKeySync(type, options);
+            });
+            try {
+              var key = result.generateKeySync(type, options);
+              scheduleCryptoCallback2(callback, [null, key]);
+            } catch (e) {
+              if (shouldThrowCryptoValidationError2(e)) {
+                throw e;
+              }
+              scheduleCryptoCallback2(callback, [e]);
             }
-            return new SandboxKeyObject2("public", keyStr);
-          }
-          return new SandboxKeyObject2("public", String(key));
-        };
-        result2.createPrivateKey = function createPrivateKey(key) {
-          if (typeof key === "string") {
-            if (key.indexOf("-----BEGIN") === -1) {
-              throw new TypeError("error:0900006e:PEM routines:OPENSSL_internal:NO_START_LINE");
+          };
+        }
+        if (typeof _cryptoGeneratePrimeSync !== "undefined") {
+          result.generatePrimeSync = function generatePrimeSync(size, options) {
+            var resultJson;
+            try {
+              resultJson = _cryptoGeneratePrimeSync.applySync(void 0, [
+                size,
+                serializeBridgeOptions2(options)
+              ]);
+            } catch (error) {
+              throw normalizeCryptoBridgeError2(error);
             }
-            return new SandboxKeyObject2("private", key);
-          }
-          if (key && typeof key === "object" && key._pem) {
-            return new SandboxKeyObject2("private", key._pem);
-          }
-          if (key && typeof key === "object" && key.key) {
-            var keyData = typeof key.key === "string" ? key.key : key.key.toString("utf8");
-            return new SandboxKeyObject2("private", keyData);
+            return restoreBridgeValue2(JSON.parse(resultJson));
+          };
+          result.generatePrime = function generatePrime(size, options, callback) {
+            if (typeof options === "function") {
+              callback = options;
+              options = void 0;
+            }
+            callback = ensureCryptoCallback2(callback, function() {
+              result.generatePrimeSync(size, options);
+            });
+            try {
+              var prime = result.generatePrimeSync(size, options);
+              scheduleCryptoCallback2(callback, [null, prime]);
+            } catch (e) {
+              if (shouldThrowCryptoValidationError2(e)) {
+                throw e;
+              }
+              scheduleCryptoCallback2(callback, [e]);
+            }
+          };
+        }
+        result.createPublicKey = function createPublicKey(key) {
+          if (typeof _cryptoCreateKeyObject !== "undefined") {
+            var resultJson;
+            try {
+              resultJson = _cryptoCreateKeyObject.applySync(void 0, [
+                "createPublicKey",
+                JSON.stringify(serializeBridgeValue2(key))
+              ]);
+            } catch (error) {
+              throw normalizeCryptoBridgeError2(error);
+            }
+            return createGeneratedKeyObject2(JSON.parse(resultJson));
           }
-          if (Buffer.isBuffer(key)) {
-            var keyStr = key.toString("utf8");
-            if (keyStr.indexOf("-----BEGIN") === -1) {
-              throw new TypeError("error:0900006e:PEM routines:OPENSSL_internal:NO_START_LINE");
+          return createAsymmetricKeyObject2("public", key);
+        };
+        result.createPrivateKey = function createPrivateKey(key) {
+          if (typeof _cryptoCreateKeyObject !== "undefined") {
+            var resultJson;
+            try {
+              resultJson = _cryptoCreateKeyObject.applySync(void 0, [
+                "createPrivateKey",
+                JSON.stringify(serializeBridgeValue2(key))
+              ]);
+            } catch (error) {
+              throw normalizeCryptoBridgeError2(error);
             }
-            return new SandboxKeyObject2("private", keyStr);
+            return createGeneratedKeyObject2(JSON.parse(resultJson));
           }
-          return new SandboxKeyObject2("private", String(key));
+          return createAsymmetricKeyObject2("private", key);
         };
-        result2.createSecretKey = function createSecretKey(key) {
-          if (typeof key === "string") {
-            return new SandboxKeyObject2("secret", key);
+        result.createSecretKey = function createSecretKey(key, encoding) {
+          return new SandboxKeyObject2("secret", {
+            raw: toRawBuffer2(key, encoding).toString("base64")
+          });
+        };
+        SandboxKeyObject2.from = function from(key) {
+          if (!key || typeof key !== "object" || key[Symbol.toStringTag] !== "CryptoKey") {
+            throw new TypeError('The "key" argument must be an instance of CryptoKey.');
           }
-          if (Buffer.isBuffer(key) || key instanceof Uint8Array) {
-            return new SandboxKeyObject2("secret", Buffer.from(key).toString("utf8"));
+          if (key._sourceKeyObjectData && key._sourceKeyObjectData.type === "secret") {
+            return new SandboxKeyObject2("secret", {
+              raw: key._sourceKeyObjectData.raw
+            });
           }
-          return new SandboxKeyObject2("secret", String(key));
+          return new SandboxKeyObject2(key.type, {
+            pem: key._pem,
+            jwk: key._jwk,
+            asymmetricKeyType: key._sourceKeyObjectData && key._sourceKeyObjectData.asymmetricKeyType,
+            asymmetricKeyDetails: key._sourceKeyObjectData && key._sourceKeyObjectData.asymmetricKeyDetails
+          });
         };
-        result2.KeyObject = SandboxKeyObject2;
+        result.KeyObject = SandboxKeyObject2;
       }
       if (typeof _cryptoSubtle !== "undefined") {
         let SandboxCryptoKey2 = function(keyData) {
@@ -861,6 +3012,10 @@
           this.algorithm = keyData.algorithm;
           this.usages = keyData.usages;
           this._keyData = keyData;
+          this._pem = keyData._pem;
+          this._jwk = keyData._jwk;
+          this._raw = keyData._raw;
+          this._sourceKeyObjectData = keyData._sourceKeyObjectData;
         }, toBase642 = function(data) {
           if (typeof data === "string") return Buffer.from(data).toString("base64");
           if (data instanceof ArrayBuffer) return Buffer.from(new Uint8Array(data)).toString("base64");
@@ -873,16 +3028,34 @@
           return algorithm;
         };
         var SandboxCryptoKey = SandboxCryptoKey2, toBase64 = toBase642, subtleCall = subtleCall2, normalizeAlgo = normalizeAlgo2;
+        Object.defineProperty(SandboxCryptoKey2.prototype, Symbol.toStringTag, {
+          value: "CryptoKey",
+          configurable: true
+        });
+        Object.defineProperty(SandboxCryptoKey2, Symbol.hasInstance, {
+          value: function(candidate) {
+            return !!(candidate && typeof candidate === "object" && (candidate._keyData || candidate[Symbol.toStringTag] === "CryptoKey"));
+          },
+          configurable: true
+        });
+        if (globalThis.CryptoKey && globalThis.CryptoKey.prototype && globalThis.CryptoKey.prototype !== SandboxCryptoKey2.prototype) {
+          Object.setPrototypeOf(SandboxCryptoKey2.prototype, globalThis.CryptoKey.prototype);
+        }
+        if (typeof globalThis.CryptoKey === "undefined") {
+          __requireExposeCustomGlobal("CryptoKey", SandboxCryptoKey2);
+        } else if (globalThis.CryptoKey !== SandboxCryptoKey2) {
+          globalThis.CryptoKey = SandboxCryptoKey2;
+        }
         var SandboxSubtle = {};
         SandboxSubtle.digest = function digest(algorithm, data) {
           return Promise.resolve().then(function() {
             var algo = normalizeAlgo2(algorithm);
-            var result22 = JSON.parse(subtleCall2({
+            var result2 = JSON.parse(subtleCall2({
               op: "digest",
               algorithm: algo.name,
               data: toBase642(data)
             }));
-            var buf = Buffer.from(result22.data, "base64");
+            var buf = Buffer.from(result2.data, "base64");
             return buf.buffer.slice(buf.byteOffset, buf.byteOffset + buf.byteLength);
           });
         };
@@ -894,19 +3067,19 @@
             if (reqAlgo.publicExponent) {
               reqAlgo.publicExponent = Buffer.from(new Uint8Array(reqAlgo.publicExponent.buffer || reqAlgo.publicExponent)).toString("base64");
             }
-            var result22 = JSON.parse(subtleCall2({
+            var result2 = JSON.parse(subtleCall2({
               op: "generateKey",
               algorithm: reqAlgo,
               extractable,
               usages: Array.from(keyUsages)
             }));
-            if (result22.publicKey && result22.privateKey) {
+            if (result2.publicKey && result2.privateKey) {
               return {
-                publicKey: new SandboxCryptoKey2(result22.publicKey),
-                privateKey: new SandboxCryptoKey2(result22.privateKey)
+                publicKey: new SandboxCryptoKey2(result2.publicKey),
+                privateKey: new SandboxCryptoKey2(result2.privateKey)
               };
             }
-            return new SandboxCryptoKey2(result22.key);
+            return new SandboxCryptoKey2(result2.key);
           });
         };
         SandboxSubtle.importKey = function importKey(format, keyData, algorithm, extractable, keyUsages) {
@@ -922,7 +3095,7 @@
             } else {
               serializedKeyData = toBase642(keyData);
             }
-            var result22 = JSON.parse(subtleCall2({
+            var result2 = JSON.parse(subtleCall2({
               op: "importKey",
               format,
               keyData: serializedKeyData,
@@ -930,18 +3103,18 @@
               extractable,
               usages: Array.from(keyUsages)
             }));
-            return new SandboxCryptoKey2(result22.key);
+            return new SandboxCryptoKey2(result2.key);
           });
         };
         SandboxSubtle.exportKey = function exportKey(format, key) {
           return Promise.resolve().then(function() {
-            var result22 = JSON.parse(subtleCall2({
+            var result2 = JSON.parse(subtleCall2({
               op: "exportKey",
               format,
               key: key._keyData
             }));
-            if (format === "jwk") return result22.jwk;
-            var buf = Buffer.from(result22.data, "base64");
+            if (format === "jwk") return result2.jwk;
+            var buf = Buffer.from(result2.data, "base64");
             return buf.buffer.slice(buf.byteOffset, buf.byteOffset + buf.byteLength);
           });
         };
@@ -951,13 +3124,13 @@
             var reqAlgo = Object.assign({}, algo);
             if (reqAlgo.iv) reqAlgo.iv = toBase642(reqAlgo.iv);
             if (reqAlgo.additionalData) reqAlgo.additionalData = toBase642(reqAlgo.additionalData);
-            var result22 = JSON.parse(subtleCall2({
+            var result2 = JSON.parse(subtleCall2({
               op: "encrypt",
               algorithm: reqAlgo,
               key: key._keyData,
               data: toBase642(data)
             }));
-            var buf = Buffer.from(result22.data, "base64");
+            var buf = Buffer.from(result2.data, "base64");
             return buf.buffer.slice(buf.byteOffset, buf.byteOffset + buf.byteLength);
           });
         };
@@ -967,61 +3140,82 @@
             var reqAlgo = Object.assign({}, algo);
             if (reqAlgo.iv) reqAlgo.iv = toBase642(reqAlgo.iv);
             if (reqAlgo.additionalData) reqAlgo.additionalData = toBase642(reqAlgo.additionalData);
-            var result22 = JSON.parse(subtleCall2({
+            var result2 = JSON.parse(subtleCall2({
               op: "decrypt",
               algorithm: reqAlgo,
               key: key._keyData,
               data: toBase642(data)
             }));
-            var buf = Buffer.from(result22.data, "base64");
-            return buf.buffer.slice(buf.byteOffset, buf.byteOffset + buf.byteLength);
-          });
-        };
-        SandboxSubtle.deriveBits = function deriveBits(algorithm, baseKey, length) {
-          return Promise.resolve().then(function() {
-            var algo = normalizeAlgo2(algorithm);
-            var reqAlgo = Object.assign({}, algo);
-            if (reqAlgo.hash) reqAlgo.hash = normalizeAlgo2(reqAlgo.hash);
-            if (reqAlgo.salt) reqAlgo.salt = toBase642(reqAlgo.salt);
-            var result22 = JSON.parse(subtleCall2({
-              op: "deriveBits",
-              algorithm: reqAlgo,
-              key: baseKey._keyData,
-              length
-            }));
-            var buf = Buffer.from(result22.data, "base64");
+            var buf = Buffer.from(result2.data, "base64");
             return buf.buffer.slice(buf.byteOffset, buf.byteOffset + buf.byteLength);
           });
         };
         SandboxSubtle.sign = function sign(algorithm, key, data) {
           return Promise.resolve().then(function() {
-            var result22 = JSON.parse(subtleCall2({
+            var result2 = JSON.parse(subtleCall2({
               op: "sign",
               algorithm: normalizeAlgo2(algorithm),
               key: key._keyData,
               data: toBase642(data)
             }));
-            var buf = Buffer.from(result22.data, "base64");
+            var buf = Buffer.from(result2.data, "base64");
             return buf.buffer.slice(buf.byteOffset, buf.byteOffset + buf.byteLength);
           });
         };
         SandboxSubtle.verify = function verify(algorithm, key, signature, data) {
           return Promise.resolve().then(function() {
-            var result22 = JSON.parse(subtleCall2({
+            var result2 = JSON.parse(subtleCall2({
               op: "verify",
               algorithm: normalizeAlgo2(algorithm),
               key: key._keyData,
               signature: toBase642(signature),
               data: toBase642(data)
             }));
-            return result22.result;
+            return result2.result;
+          });
+        };
+        SandboxSubtle.deriveBits = function deriveBits(algorithm, baseKey, length) {
+          return Promise.resolve().then(function() {
+            var algo = normalizeAlgo2(algorithm);
+            var reqAlgo = Object.assign({}, algo);
+            if (reqAlgo.salt) reqAlgo.salt = toBase642(reqAlgo.salt);
+            if (reqAlgo.info) reqAlgo.info = toBase642(reqAlgo.info);
+            var result2 = JSON.parse(subtleCall2({
+              op: "deriveBits",
+              algorithm: reqAlgo,
+              baseKey: baseKey._keyData,
+              length
+            }));
+            return Buffer.from(result2.data, "base64").buffer;
+          });
+        };
+        SandboxSubtle.deriveKey = function deriveKey(algorithm, baseKey, derivedKeyAlgorithm, extractable, keyUsages) {
+          return Promise.resolve().then(function() {
+            var algo = normalizeAlgo2(algorithm);
+            var reqAlgo = Object.assign({}, algo);
+            if (reqAlgo.salt) reqAlgo.salt = toBase642(reqAlgo.salt);
+            if (reqAlgo.info) reqAlgo.info = toBase642(reqAlgo.info);
+            var result2 = JSON.parse(subtleCall2({
+              op: "deriveKey",
+              algorithm: reqAlgo,
+              baseKey: baseKey._keyData,
+              derivedKeyAlgorithm: normalizeAlgo2(derivedKeyAlgorithm),
+              extractable,
+              usages: keyUsages
+            }));
+            return new SandboxCryptoKey2(result2.key);
           });
         };
-        result2.subtle = SandboxSubtle;
-        result2.webcrypto = { subtle: SandboxSubtle, getRandomValues: result2.randomFillSync };
+        if (globalThis.crypto && globalThis.crypto.subtle && typeof globalThis.crypto.subtle.importKey === "function") {
+          result.subtle = globalThis.crypto.subtle;
+          result.webcrypto = globalThis.crypto;
+        } else {
+          result.subtle = SandboxSubtle;
+          result.webcrypto = { subtle: SandboxSubtle, getRandomValues: result.randomFillSync };
+        }
       }
-      if (typeof result2.getCurves !== "function") {
-        result2.getCurves = function getCurves() {
+      if (typeof result.getCurves !== "function") {
+        result.getCurves = function getCurves() {
           return [
             "prime256v1",
             "secp256r1",
@@ -1033,8 +3227,8 @@
           ];
         };
       }
-      if (typeof result2.getCiphers !== "function") {
-        result2.getCiphers = function getCiphers() {
+      if (typeof result.getCiphers !== "function") {
+        result.getCiphers = function getCiphers() {
           return [
             "aes-128-cbc",
             "aes-128-gcm",
@@ -1048,13 +3242,13 @@
           ];
         };
       }
-      if (typeof result2.getHashes !== "function") {
-        result2.getHashes = function getHashes() {
+      if (typeof result.getHashes !== "function") {
+        result.getHashes = function getHashes() {
           return ["md5", "sha1", "sha256", "sha384", "sha512"];
         };
       }
-      if (typeof result2.timingSafeEqual !== "function") {
-        result2.timingSafeEqual = function timingSafeEqual(a, b) {
+      if (typeof result.timingSafeEqual !== "function") {
+        result.timingSafeEqual = function timingSafeEqual(a, b) {
           if (a.length !== b.length) {
             throw new RangeError("Input buffers must have the same byte length");
           }
@@ -1065,26 +3259,112 @@
           return out === 0;
         };
       }
-      return result2;
+      if (typeof result.getFips !== "function") {
+        result.getFips = function getFips() {
+          return 0;
+        };
+      }
+      if (typeof result.setFips !== "function") {
+        result.setFips = function setFips() {
+          throw new Error("FIPS mode is not supported in sandbox");
+        };
+      }
+      return result;
     }
-    if (name2 === "stream") {
-      if (typeof result2 === "function" && result2.prototype && typeof result2.Readable === "function") {
-        var readableProto = result2.Readable.prototype;
-        var streamProto = result2.prototype;
-        if (readableProto && streamProto && !(readableProto instanceof result2)) {
+    if (name === "stream") {
+      var getWebStreamsState = function() {
+        return globalThis.__secureExecWebStreams || null;
+      };
+      var webStreamsState = getWebStreamsState();
+      if (typeof result.isReadable !== "function") {
+        result.isReadable = function(stream) {
+          var stateKey = getWebStreamsState() && getWebStreamsState().kState;
+          return Boolean(stateKey && stream && stream[stateKey] && stream[stateKey].state === "readable");
+        };
+      }
+      if (typeof result.isErrored !== "function") {
+        result.isErrored = function(stream) {
+          var stateKey = getWebStreamsState() && getWebStreamsState().kState;
+          return Boolean(stateKey && stream && stream[stateKey] && stream[stateKey].state === "errored");
+        };
+      }
+      if (typeof result.isDisturbed !== "function") {
+        result.isDisturbed = function(stream) {
+          var stateKey = getWebStreamsState() && getWebStreamsState().kState;
+          return Boolean(stateKey && stream && stream[stateKey] && stream[stateKey].disturbed === true);
+        };
+      }
+      if (typeof result === "function" && result.prototype && typeof result.Readable === "function") {
+        var readableProto = result.Readable.prototype;
+        var streamProto = result.prototype;
+        if (readableProto && streamProto && !(readableProto instanceof result)) {
           var currentParent = Object.getPrototypeOf(readableProto);
           Object.setPrototypeOf(streamProto, currentParent);
           Object.setPrototypeOf(readableProto, streamProto);
         }
       }
-      return result2;
+      if (typeof result.Readable === "function" && !Object.getOwnPropertyDescriptor(result.Readable.prototype, "readableObjectMode")) {
+        Object.defineProperty(result.Readable.prototype, "readableObjectMode", {
+          configurable: true,
+          enumerable: false,
+          get: function() {
+            return Boolean(this && this._readableState && this._readableState.objectMode);
+          }
+        });
+      }
+      if (typeof result.Writable === "function" && !Object.getOwnPropertyDescriptor(result.Writable.prototype, "writableObjectMode")) {
+        Object.defineProperty(result.Writable.prototype, "writableObjectMode", {
+          configurable: true,
+          enumerable: false,
+          get: function() {
+            return Boolean(this && this._writableState && this._writableState.objectMode);
+          }
+        });
+      }
+      if (webStreamsState && typeof result.Readable === "function") {
+        if (typeof result.Readable.fromWeb !== "function" && typeof webStreamsState.newStreamReadableFromReadableStream === "function") {
+          result.Readable.fromWeb = function fromWeb(readableStream, options) {
+            return webStreamsState.newStreamReadableFromReadableStream(readableStream, options);
+          };
+        }
+        if (typeof result.Readable.toWeb !== "function" && typeof webStreamsState.newReadableStreamFromStreamReadable === "function") {
+          result.Readable.toWeb = function toWeb(readable) {
+            return webStreamsState.newReadableStreamFromStreamReadable(readable);
+          };
+        }
+      }
+      if (webStreamsState && typeof result.Writable === "function") {
+        if (typeof result.Writable.fromWeb !== "function" && typeof webStreamsState.newStreamWritableFromWritableStream === "function") {
+          result.Writable.fromWeb = function fromWeb(writableStream, options) {
+            return webStreamsState.newStreamWritableFromWritableStream(writableStream, options);
+          };
+        }
+        if (typeof result.Writable.toWeb !== "function" && typeof webStreamsState.newWritableStreamFromStreamWritable === "function") {
+          result.Writable.toWeb = function toWeb(writable) {
+            return webStreamsState.newWritableStreamFromStreamWritable(writable);
+          };
+        }
+      }
+      if (webStreamsState && typeof result.Duplex === "function") {
+        if (typeof result.Duplex.fromWeb !== "function" && typeof webStreamsState.newStreamDuplexFromReadableWritablePair === "function") {
+          result.Duplex.fromWeb = function fromWeb(pair, options) {
+            return webStreamsState.newStreamDuplexFromReadableWritablePair(pair, options);
+          };
+        }
+        if (typeof result.Duplex.toWeb !== "function" && typeof webStreamsState.newReadableWritablePairFromDuplex === "function") {
+          result.Duplex.toWeb = function toWeb(duplex) {
+            return webStreamsState.newReadableWritablePairFromDuplex(duplex);
+          };
+        }
+      }
+      return result;
     }
-    if (name2 === "path") {
-      if (result2.win32 === null || result2.win32 === void 0) {
-        result2.win32 = result2.posix || result2;
+    if (name === "path") {
+      if (result.win32 === null || result.win32 === void 0) {
+        result.win32 = result.posix || result;
       }
-      if (result2.posix === null || result2.posix === void 0) {
-        result2.posix = result2;
+      if (result.posix === null || result.posix === void 0) {
+        result.posix = result;
       }
       const hasAbsoluteSegment = function(args) {
         return args.some(function(arg) {
@@ -1100,7 +3380,7 @@
           }
         }
       };
-      const originalResolve = result2.resolve;
+      const originalResolve = result.resolve;
       if (typeof originalResolve === "function" && !originalResolve._patchedForCwd) {
         const patchedResolve = function resolve2() {
           const args = Array.from(arguments);
@@ -1108,23 +3388,22 @@
           return originalResolve.apply(this, args);
         };
         patchedResolve._patchedForCwd = true;
-        result2.resolve = patchedResolve;
+        result.resolve = patchedResolve;
       }
-      if (result2.posix && typeof result2.posix.resolve === "function" && !result2.posix.resolve._patchedForCwd) {
-        const originalPosixResolve = result2.posix.resolve;
+      if (result.posix && typeof result.posix.resolve === "function" && !result.posix.resolve._patchedForCwd) {
+        const originalPosixResolve = result.posix.resolve;
         const patchedPosixResolve = function resolve2() {
           const args = Array.from(arguments);
           prependCwd(args);
           return originalPosixResolve.apply(this, args);
         };
         patchedPosixResolve._patchedForCwd = true;
-        result2.posix.resolve = patchedPosixResolve;
+        result.posix.resolve = patchedPosixResolve;
       }
     }
-    return result2;
+    return result;
   }
   var _deferredCoreModules = /* @__PURE__ */ new Set([
-    "tls",
     "readline",
     "perf_hooks",
     "async_hooks",
@@ -1132,7 +3411,6 @@
     "diagnostics_channel"
   ]);
   var _unsupportedCoreModules = /* @__PURE__ */ new Set([
-    "dgram",
     "cluster",
     "wasi",
     "inspector",
@@ -1140,11 +3418,29 @@
     "trace_events",
     "domain"
   ]);
-  function _unsupportedApiError(moduleName2, apiName) {
-    return new Error(moduleName2 + "." + apiName + " is not supported in sandbox");
+  function _unsupportedApiError(moduleName, apiName) {
+    return new Error(moduleName + "." + apiName + " is not supported in sandbox");
   }
-  function _createDeferredModuleStub(moduleName2) {
+  function _createDeferredModuleStub(moduleName) {
     const methodCache = {};
+    const workerThreadsCompat = {
+      markAsUncloneable: function markAsUncloneable(value) {
+        return value;
+      },
+      markAsUntransferable: function markAsUntransferable(value) {
+        return value;
+      },
+      isMarkedAsUntransferable: function isMarkedAsUntransferable() {
+        return false;
+      },
+      MessagePort: globalThis.MessagePort,
+      MessageChannel: globalThis.MessageChannel,
+      MessageEvent: globalThis.MessageEvent
+    };
+    const moduleCompat = {
+      worker_threads: workerThreadsCompat,
+      "node:worker_threads": workerThreadsCompat
+    };
     let stub = null;
     stub = new Proxy({}, {
       get(_target, prop) {
@@ -1153,9 +3449,12 @@
         if (prop === Symbol.toStringTag) return "Module";
         if (prop === "then") return void 0;
         if (typeof prop !== "string") return void 0;
+        if (moduleCompat[moduleName] && Object.prototype.hasOwnProperty.call(moduleCompat[moduleName], prop)) {
+          return moduleCompat[moduleName][prop];
+        }
         if (!methodCache[prop]) {
           methodCache[prop] = function deferredApiStub() {
-            throw _unsupportedApiError(moduleName2, prop);
+            throw _unsupportedApiError(moduleName, prop);
           };
         }
         return methodCache[prop];
@@ -1164,49 +3463,38 @@
     return stub;
   }
   var __internalModuleCache = _moduleCache;
-  var __require = function require2(moduleName2) {
-    return _requireFrom(moduleName2, _currentModule.dirname);
+  var __require = function require2(moduleName) {
+    return _requireFrom(moduleName, _currentModule.dirname);
   };
   __requireExposeCustomGlobal("require", __require);
-  var _resolveCache = /* @__PURE__ */ Object.create(null);
-  function _resolveFrom(moduleName2, fromDir2) {
-    const cacheKey2 = fromDir2 + "\0" + moduleName2;
-    if (cacheKey2 in _resolveCache) {
-      const cached = _resolveCache[cacheKey2];
-      if (cached === null) {
-        const err = new Error("Cannot find module '" + moduleName2 + "'");
-        err.code = "MODULE_NOT_FOUND";
-        throw err;
-      }
-      return cached;
-    }
-    let resolved2;
+  function _resolveFrom(moduleName, fromDir) {
+    var resolved;
     if (typeof _resolveModuleSync !== "undefined") {
-      resolved2 = _resolveModuleSync.applySync(void 0, [moduleName2, fromDir2]);
-    } else {
-      resolved2 = _resolveModule.applySyncPromise(void 0, [moduleName2, fromDir2]);
+      resolved = _resolveModuleSync.applySync(void 0, [moduleName, fromDir]);
+    }
+    if (resolved === null || resolved === void 0) {
+      resolved = _resolveModule.applySyncPromise(void 0, [moduleName, fromDir, "require"]);
     }
-    _resolveCache[cacheKey2] = resolved2;
-    if (resolved2 === null) {
-      const err = new Error("Cannot find module '" + moduleName2 + "'");
+    if (resolved === null) {
+      const err = new Error("Cannot find module '" + moduleName + "'");
       err.code = "MODULE_NOT_FOUND";
       throw err;
     }
-    return resolved2;
+    return resolved;
   }
-  globalThis.require.resolve = function resolve(moduleName2) {
-    return _resolveFrom(moduleName2, _currentModule.dirname);
+  globalThis.require.resolve = function resolve(moduleName) {
+    return _resolveFrom(moduleName, _currentModule.dirname);
   };
-  function _debugRequire(phase, moduleName2, extra) {
+  function _debugRequire(phase, moduleName, extra) {
     if (globalThis.__sandboxRequireDebug !== true) {
       return;
     }
-    if (moduleName2 !== "rivetkit" && moduleName2 !== "@rivetkit/traces" && moduleName2 !== "@rivetkit/on-change" && moduleName2 !== "async_hooks" && !moduleName2.startsWith("rivetkit/") && !moduleName2.startsWith("@rivetkit/")) {
+    if (moduleName !== "rivetkit" && moduleName !== "@rivetkit/traces" && moduleName !== "@rivetkit/on-change" && moduleName !== "async_hooks" && !moduleName.startsWith("rivetkit/") && !moduleName.startsWith("@rivetkit/")) {
       return;
     }
     if (typeof console !== "undefined" && typeof console.log === "function") {
       console.log(
-        "[sandbox.require] " + phase + " " + moduleName2 + (extra ? " " + extra : "")
+        "[sandbox.require] " + phase + " " + moduleName + (extra ? " " + extra : "")
       );
     }
   }
@@ -1285,18 +3573,99 @@
       _debugRequire("loaded", name, "stream-promises-special");
       return promisesModule;
     }
+    if (name === "stream/consumers") {
+      if (__internalModuleCache["stream/consumers"]) return __internalModuleCache["stream/consumers"];
+      const consumersModule = {};
+      consumersModule.buffer = async function buffer(stream) {
+        const chunks = [];
+        const pushChunk = function(chunk) {
+          if (typeof chunk === "string") {
+            chunks.push(Buffer.from(chunk));
+          } else if (Buffer.isBuffer(chunk)) {
+            chunks.push(chunk);
+          } else if (ArrayBuffer.isView(chunk)) {
+            chunks.push(Buffer.from(chunk.buffer, chunk.byteOffset, chunk.byteLength));
+          } else if (chunk instanceof ArrayBuffer) {
+            chunks.push(Buffer.from(new Uint8Array(chunk)));
+          } else {
+            chunks.push(Buffer.from(String(chunk)));
+          }
+        };
+        if (stream && typeof stream[Symbol.asyncIterator] === "function") {
+          for await (const chunk of stream) {
+            pushChunk(chunk);
+          }
+          return Buffer.concat(chunks);
+        }
+        return new Promise(function(resolve2, reject) {
+          stream.on("data", pushChunk);
+          stream.on("end", function() {
+            resolve2(Buffer.concat(chunks));
+          });
+          stream.on("error", reject);
+        });
+      };
+      consumersModule.text = async function text(stream) {
+        return (await consumersModule.buffer(stream)).toString("utf8");
+      };
+      consumersModule.json = async function json(stream) {
+        return JSON.parse(await consumersModule.text(stream));
+      };
+      consumersModule.arrayBuffer = async function arrayBuffer(stream) {
+        const buffer = await consumersModule.buffer(stream);
+        return buffer.buffer.slice(
+          buffer.byteOffset,
+          buffer.byteOffset + buffer.byteLength
+        );
+      };
+      __internalModuleCache["stream/consumers"] = consumersModule;
+      _debugRequire("loaded", name, "stream-consumers-special");
+      return consumersModule;
+    }
     if (name === "child_process") {
       if (__internalModuleCache["child_process"]) return __internalModuleCache["child_process"];
       __internalModuleCache["child_process"] = _childProcessModule;
       _debugRequire("loaded", name, "child-process-special");
       return _childProcessModule;
     }
+    if (name === "net") {
+      if (__internalModuleCache["net"]) return __internalModuleCache["net"];
+      __internalModuleCache["net"] = _netModule;
+      _debugRequire("loaded", name, "net-special");
+      return _netModule;
+    }
+    if (name === "tls") {
+      if (__internalModuleCache["tls"]) return __internalModuleCache["tls"];
+      __internalModuleCache["tls"] = _tlsModule;
+      _debugRequire("loaded", name, "tls-special");
+      return _tlsModule;
+    }
     if (name === "http") {
       if (__internalModuleCache["http"]) return __internalModuleCache["http"];
       __internalModuleCache["http"] = _httpModule;
       _debugRequire("loaded", name, "http-special");
       return _httpModule;
     }
+    if (name === "_http_agent") {
+      if (__internalModuleCache["_http_agent"]) return __internalModuleCache["_http_agent"];
+      const httpAgentModule = {
+        Agent: _httpModule.Agent,
+        globalAgent: _httpModule.globalAgent
+      };
+      __internalModuleCache["_http_agent"] = httpAgentModule;
+      _debugRequire("loaded", name, "http-agent-special");
+      return httpAgentModule;
+    }
+    if (name === "_http_common") {
+      if (__internalModuleCache["_http_common"]) return __internalModuleCache["_http_common"];
+      const httpCommonModule = {
+        _checkIsHttpToken: _httpModule._checkIsHttpToken,
+        _checkInvalidHeaderChar: _httpModule._checkInvalidHeaderChar
+      };
+      __internalModuleCache["_http_common"] = httpCommonModule;
+      _debugRequire("loaded", name, "http-common-special");
+      return httpCommonModule;
+    }
     if (name === "https") {
       if (__internalModuleCache["https"]) return __internalModuleCache["https"];
       __internalModuleCache["https"] = _httpsModule;
@@ -1309,23 +3678,35 @@
       _debugRequire("loaded", name, "http2-special");
       return _http2Module;
     }
+    if (name === "internal/http2/util") {
+      if (__internalModuleCache[name]) return __internalModuleCache[name];
+      const sharedNghttpError = _http2Module?.NghttpError;
+      const NghttpError = typeof sharedNghttpError === "function" ? sharedNghttpError : class NghttpError extends Error {
+        constructor(message) {
+          super(message);
+          this.name = "Error";
+          this.code = "ERR_HTTP2_ERROR";
+        }
+      };
+      const utilModule = {
+        kSocket: /* @__PURE__ */ Symbol.for("secure-exec.http2.kSocket"),
+        NghttpError
+      };
+      __internalModuleCache[name] = utilModule;
+      _debugRequire("loaded", name, "http2-util-special");
+      return utilModule;
+    }
     if (name === "dns") {
       if (__internalModuleCache["dns"]) return __internalModuleCache["dns"];
       __internalModuleCache["dns"] = _dnsModule;
       _debugRequire("loaded", name, "dns-special");
       return _dnsModule;
     }
-    if (name === "net") {
-      if (__internalModuleCache["net"]) return __internalModuleCache["net"];
-      __internalModuleCache["net"] = _netModule;
-      _debugRequire("loaded", name, "net-special");
-      return _netModule;
-    }
-    if (name === "tls") {
-      if (__internalModuleCache["tls"]) return __internalModuleCache["tls"];
-      __internalModuleCache["tls"] = _tlsModule;
-      _debugRequire("loaded", name, "tls-special");
-      return _tlsModule;
+    if (name === "dgram") {
+      if (__internalModuleCache["dgram"]) return __internalModuleCache["dgram"];
+      __internalModuleCache["dgram"] = _dgramModule;
+      _debugRequire("loaded", name, "dgram-special");
+      return _dgramModule;
     }
     if (name === "os") {
       if (__internalModuleCache["os"]) return __internalModuleCache["os"];
@@ -1343,6 +3724,13 @@
       _debugRequire("loaded", name, "process-special");
       return globalThis.process;
     }
+    if (name === "v8") {
+      if (__internalModuleCache["v8"]) return __internalModuleCache["v8"];
+      const v8Module = globalThis._moduleCache?.v8 || {};
+      __internalModuleCache["v8"] = v8Module;
+      _debugRequire("loaded", name, "v8-special");
+      return v8Module;
+    }
     if (name === "async_hooks") {
       if (__internalModuleCache["async_hooks"]) return __internalModuleCache["async_hooks"];
       class AsyncLocalStorage {
@@ -1483,17 +3871,12 @@
     if (_unsupportedCoreModules.has(name)) {
       throw new Error(name + " is not supported in sandbox");
     }
-    if (__internalModuleCache[name]) {
-      _debugRequire("name-cache-hit", name, name);
-      return __internalModuleCache[name];
-    }
-    const isPath = name[0] === "." || name[0] === "/";
-    const polyfillCode = isPath ? null : _loadPolyfill.applySyncPromise(void 0, [name]);
+    const polyfillCode = _loadPolyfill.applySyncPromise(void 0, [name]);
     if (polyfillCode !== null) {
       if (__internalModuleCache[name]) return __internalModuleCache[name];
       const moduleObj = { exports: {} };
       _pendingModules[name] = moduleObj;
-      let result = eval(polyfillCode);
+      let result = Function('"use strict"; return (' + polyfillCode + ");")();
       result = _patchPolyfill(name, result);
       if (typeof result === "object" && result !== null) {
         Object.assign(moduleObj.exports, result);
@@ -1505,14 +3888,6 @@
       _debugRequire("loaded", name, "polyfill");
       return __internalModuleCache[name];
     }
-    const resolveCacheKey = fromDir + "\0" + name;
-    if (resolveCacheKey in _resolveCache) {
-      const cachedPath = _resolveCache[resolveCacheKey];
-      if (cachedPath !== null && __internalModuleCache[cachedPath]) {
-        _debugRequire("resolve-cache-hit", name, cachedPath);
-        return __internalModuleCache[cachedPath];
-      }
-    }
     resolved = _resolveFrom(name, fromDir);
     cacheKey = resolved;
     if (__internalModuleCache[cacheKey]) {
@@ -1523,11 +3898,12 @@
       _debugRequire("pending-hit", name, cacheKey);
       return _pendingModules[cacheKey].exports;
     }
-    let source;
+    var source;
     if (typeof _loadFileSync !== "undefined") {
       source = _loadFileSync.applySync(void 0, [resolved]);
-    } else {
-      source = _loadFile.applySyncPromise(void 0, [resolved]);
+    }
+    if (source === null || source === void 0) {
+      source = _loadFile.applySyncPromise(void 0, [resolved, "require"]);
     }
     if (source === null) {
       const err = new Error("Cannot find module '" + resolved + "'");
@@ -1539,7 +3915,6 @@
       __internalModuleCache[cacheKey] = parsed;
       return parsed;
     }
-    const normalizedSource = typeof source === "string" ? source.replace(/import\.meta\.url/g, "__filename").replace(/fileURLToPath\(__filename\)/g, "__filename").replace(/url\.fileURLToPath\(__filename\)/g, "__filename").replace(/fileURLToPath\.call\(void 0, __filename\)/g, "__filename") : source;
     const module = {
       exports: {},
       filename: resolved,
@@ -1552,15 +3927,17 @@
     _currentModule = module;
     try {
       let wrapper;
+      const isRequireTransformedEsm = typeof source === "string" && source.startsWith(REQUIRE_TRANSFORM_MARKER);
+      const wrapperPrologue = isRequireTransformedEsm ? "" : "var __filename = __secureExecFilename;\nvar __dirname = __secureExecDirname;\n";
       try {
         wrapper = new Function(
           "exports",
           "require",
           "module",
-          "__filename",
-          "__dirname",
+          "__secureExecFilename",
+          "__secureExecDirname",
           "__dynamicImport",
-          normalizedSource + "\n//# sourceURL=" + resolved
+          wrapperPrologue + source + "\n//# sourceURL=" + resolved
         );
       } catch (error) {
         const details = error && error.stack ? error.stack : String(error);
@@ -1594,9 +3971,6 @@
       _currentModule = prevModule;
     }
     __internalModuleCache[cacheKey] = module.exports;
-    if (!isPath && name !== cacheKey) {
-      __internalModuleCache[name] = module.exports;
-    }
     delete _pendingModules[cacheKey];
     _debugRequire("loaded", name, cacheKey);
     return module.exports;