@ticatec/dyna-js 0.0.2

package/dist/DynaJs.js

@@ -0,0 +1,213 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+const utils_1 = require("./utils");
+class DynaJs {
+    constructor(config = {}) {
+        var _a, _b, _c, _d, _e, _f, _g, _h, _j, _k, _l, _m;
+        this.config = {
+            defaultTimeout: (_a = config.defaultTimeout) !== null && _a !== void 0 ? _a : 5000,
+            defaultStrict: (_b = config.defaultStrict) !== null && _b !== void 0 ? _b : true,
+            allowedGlobals: (_c = config.allowedGlobals) !== null && _c !== void 0 ? _c : [],
+            blockedGlobals: (_d = config.blockedGlobals) !== null && _d !== void 0 ? _d : [],
+            defaultImports: (_e = config.defaultImports) !== null && _e !== void 0 ? _e : {},
+            defaultInjectedKeys: (_f = config.defaultInjectedKeys) !== null && _f !== void 0 ? _f : [],
+            useProxyByDefault: (_g = config.useProxyByDefault) !== null && _g !== void 0 ? _g : true,
+            allowTimers: (_h = config.allowTimers) !== null && _h !== void 0 ? _h : false,
+            allowDynamicImports: (_j = config.allowDynamicImports) !== null && _j !== void 0 ? _j : false,
+            validateCode: (_k = config.validateCode) !== null && _k !== void 0 ? _k : true,
+            allowBrowserAPIs: (_l = config.allowBrowserAPIs) !== null && _l !== void 0 ? _l : false,
+            allowNodeAPIs: (_m = config.allowNodeAPIs) !== null && _m !== void 0 ? _m : false
+        };
+    }
+    async execute(code, options = {}) {
+        var _a, _b;
+        const startTime = performance.now();
+        try {
+            if (this.config.validateCode) {
+                (0, utils_1.validateCode)(code, {
+                    allowTimers: this.config.allowTimers,
+                    allowDynamicImports: this.config.allowDynamicImports
+                });
+            }
+            const context = this.prepareContext(options.context, options.imports);
+            const timeout = (_a = options.timeout) !== null && _a !== void 0 ? _a : this.config.defaultTimeout;
+            const strict = (_b = options.strict) !== null && _b !== void 0 ? _b : this.config.defaultStrict;
+            const result = await this.executeWithTimeout(code, context, timeout, strict);
+            const executionTime = performance.now() - startTime;
+            return {
+                result: result,
+                executionTime
+            };
+        }
+        catch (error) {
+            const executionTime = performance.now() - startTime;
+            throw new Error(`Script execution failed after ${executionTime.toFixed(2)}ms: ${error instanceof Error ? error.message : String(error)}`);
+        }
+    }
+    executeSync(code, options = {}) {
+        var _a;
+        const startTime = performance.now();
+        try {
+            if (this.config.validateCode) {
+                (0, utils_1.validateCode)(code, {
+                    allowTimers: this.config.allowTimers,
+                    allowDynamicImports: this.config.allowDynamicImports
+                });
+            }
+            const context = this.prepareContext(options.context, options.imports);
+            const strict = (_a = options.strict) !== null && _a !== void 0 ? _a : this.config.defaultStrict;
+            const result = this.executeCode(code, context, strict);
+            const executionTime = performance.now() - startTime;
+            return {
+                result: result,
+                executionTime
+            };
+        }
+        catch (error) {
+            const executionTime = performance.now() - startTime;
+            throw new Error(`Script execution failed after ${executionTime.toFixed(2)}ms: ${error instanceof Error ? error.message : String(error)}`);
+        }
+    }
+    async executeWithTimeout(code, context, timeout, strict) {
+        return new Promise((resolve, reject) => {
+            const timer = setTimeout(() => {
+                reject(new Error(`Script execution timed out after ${timeout}ms`));
+            }, timeout);
+            try {
+                const result = this.executeCode(code, context, strict);
+                clearTimeout(timer);
+                resolve(result);
+            }
+            catch (error) {
+                clearTimeout(timer);
+                reject(error);
+            }
+        });
+    }
+    executeCode(code, context, strict) {
+        const contextKeys = Object.keys(context);
+        const contextValues = Object.values(context);
+        const strictMode = strict ? '"use strict";' : '';
+        const wrappedCode = `${strictMode}\nreturn (function() {\n${code}\n})();`;
+        try {
+            const func = new Function(...contextKeys, wrappedCode);
+            return func.apply(null, contextValues);
+        }
+        catch (error) {
+            throw new Error(`Code execution error: ${error instanceof Error ? error.message : String(error)}`);
+        }
+    }
+    createFunction(code, paramNames = [], options = {}) {
+        var _a;
+        const context = this.prepareContext(options.context, options.imports);
+        const strict = (_a = options.strict) !== null && _a !== void 0 ? _a : this.config.defaultStrict;
+        const strictMode = strict ? '"use strict";' : '';
+        const wrappedCode = `${strictMode}\n${code}`;
+        try {
+            const contextKeys = Object.keys(context);
+            const contextValues = Object.values(context);
+            const allParams = [...contextKeys, ...paramNames];
+            const func = new Function(...allParams, wrappedCode);
+            return ((...args) => {
+                const allArgs = [...contextValues, ...args];
+                return func.apply(null, allArgs);
+            });
+        }
+        catch (error) {
+            throw new Error(`Function creation error: ${error instanceof Error ? error.message : String(error)}`);
+        }
+    }
+    executeWithImports(code, imports, options = {}) {
+        return this.executeSync(code, Object.assign(Object.assign({}, options), { imports: Object.assign(Object.assign({}, this.config.defaultImports), imports) }));
+    }
+    async executeWithImportsAsync(code, imports, options = {}) {
+        return this.execute(code, Object.assign(Object.assign({}, options), { imports: Object.assign(Object.assign({}, this.config.defaultImports), imports) }));
+    }
+    createFormClass(code, context = {}, injectedKeys = []) {
+        const useProxy = this.config.useProxyByDefault;
+        const mergedContext = Object.assign(Object.assign({}, context), this.config.defaultImports);
+        const mergedKeys = [...this.config.defaultInjectedKeys, ...injectedKeys];
+        if (useProxy) {
+            return this.executeWithProxy(code, mergedContext, mergedKeys);
+        }
+        else {
+            return this.executeSync(code, {
+                context: mergedContext,
+                imports: this.config.defaultImports
+            }).result;
+        }
+    }
+    executeWithProxy(code, context, injectedKeys) {
+        const injected = {};
+        for (const key of injectedKeys) {
+            if (context.window && key in context.window) {
+                injected[key] = context.window[key];
+            }
+            else if (key in context) {
+                injected[key] = context[key];
+            }
+        }
+        const sandboxContext = Object.assign(Object.assign({}, context), injected);
+        const sandbox = new Proxy(sandboxContext, {
+            has(target, key) {
+                if (key in target)
+                    return true;
+                if (context.window && key in context.window)
+                    return true;
+                return false;
+            },
+            get(target, key) {
+                if (key in target)
+                    return target[key];
+                if (context.window && key in context.window)
+                    return context.window[key];
+                console.warn(`DynaJs: ${String(key)} not found`);
+                return undefined;
+            }
+        });
+        const wrappedCode = `
+      with (sandbox) {
+        ${Object.keys(sandbox).map(k => `const ${k} = sandbox.${k};`).join('\n')}
+        
+        ${code}
+      }
+    `;
+        const fn = new Function('sandbox', wrappedCode);
+        return fn(sandbox);
+    }
+    static initialize(config) {
+        if (DynaJs.instance == null) {
+            DynaJs.instance = new DynaJs(config);
+        }
+        return DynaJs.instance;
+    }
+    static getInstance() {
+        if (DynaJs.instance == null) {
+            throw new Error("DynaJs hasn't been initialized. Call DynaJs.initialize() first.");
+        }
+        return DynaJs.instance;
+    }
+    static reset() {
+        DynaJs.instance = null;
+    }
+    prepareContext(userContext = {}, imports = {}) {
+        let context = (0, utils_1.createSafeContext)(userContext, {
+            allowBrowserAPIs: this.config.allowBrowserAPIs,
+            allowNodeAPIs: this.config.allowNodeAPIs,
+            blockedKeys: this.config.blockedGlobals
+        });
+        context = Object.assign(Object.assign(Object.assign({}, context), this.config.defaultImports), imports);
+        if (this.config.allowedGlobals.length > 0) {
+            const allowedContext = {};
+            for (const key of this.config.allowedGlobals) {
+                if (key in context) {
+                    allowedContext[key] = context[key];
+                }
+            }
+            context = allowedContext;
+        }
+        return context;
+    }
+}
+DynaJs.instance = null;
+exports.default = DynaJs;

package/dist/index.d.ts

@@ -0,0 +1,9 @@
+import DynaJs from './DynaJs';
+export * from './types';
+export * from './utils';
+export declare function createDynaJs(config?: import('./types').DynaJsConfig): DynaJs;
+export declare function initializeDynaJs(config: import('./types').DynaJsConfig): DynaJs;
+export declare function getDynaJs(): DynaJs;
+export { DynaJs };
+export default DynaJs;
+//# sourceMappingURL=index.d.ts.map

package/dist/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,OAAO,MAAM,MAAO,UAAU,CAAC;AAC/B,cAAc,SAAS,CAAC;AACxB,cAAc,SAAS,CAAC;AAExB,wBAAgB,YAAY,CAAC,MAAM,CAAC,EAAE,OAAO,SAAS,EAAE,YAAY,UAEnE;AAED,wBAAgB,gBAAgB,CAAC,MAAM,EAAE,OAAO,SAAS,EAAE,YAAY,UAEtE;AAED,wBAAgB,SAAS,WAExB;AAED,OAAO,EAAE,MAAM,EAAE,CAAC;AAClB,eAAe,MAAM,CAAC"}

package/dist/index.esm.js

@@ -0,0 +1,14 @@
+import DynaJs from './DynaJs';
+export * from './types';
+export * from './utils';
+export function createDynaJs(config) {
+    return new DynaJs(config);
+}
+export function initializeDynaJs(config) {
+    return DynaJs.initialize(config);
+}
+export function getDynaJs() {
+    return DynaJs.getInstance();
+}
+export { DynaJs };
+export default DynaJs;

package/dist/index.js

@@ -0,0 +1,37 @@
+"use strict";
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __exportStar = (this && this.__exportStar) || function(m, exports) {
+    for (var p in m) if (p !== "default" && !Object.prototype.hasOwnProperty.call(exports, p)) __createBinding(exports, m, p);
+};
+var __importDefault = (this && this.__importDefault) || function (mod) {
+    return (mod && mod.__esModule) ? mod : { "default": mod };
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.DynaJs = void 0;
+exports.createDynaJs = createDynaJs;
+exports.initializeDynaJs = initializeDynaJs;
+exports.getDynaJs = getDynaJs;
+const DynaJs_1 = __importDefault(require("./DynaJs"));
+exports.DynaJs = DynaJs_1.default;
+__exportStar(require("./types"), exports);
+__exportStar(require("./utils"), exports);
+function createDynaJs(config) {
+    return new DynaJs_1.default(config);
+}
+function initializeDynaJs(config) {
+    return DynaJs_1.default.initialize(config);
+}
+function getDynaJs() {
+    return DynaJs_1.default.getInstance();
+}
+exports.default = DynaJs_1.default;

package/dist/types.d.ts

@@ -0,0 +1,33 @@
+export interface ExecutionContext {
+    [key: string]: any;
+}
+export interface ModuleImports {
+    [key: string]: any;
+}
+export interface ExecutionOptions {
+    context?: ExecutionContext;
+    timeout?: number;
+    strict?: boolean;
+    imports?: ModuleImports;
+    injectedKeys?: string[];
+    useProxy?: boolean;
+}
+export interface ExecutionResult<T = any> {
+    result: T;
+    executionTime: number;
+}
+export interface DynaJsConfig {
+    defaultTimeout?: number;
+    defaultStrict?: boolean;
+    allowedGlobals?: string[];
+    blockedGlobals?: string[];
+    defaultImports?: ModuleImports;
+    defaultInjectedKeys?: string[];
+    useProxyByDefault?: boolean;
+    allowTimers?: boolean;
+    allowDynamicImports?: boolean;
+    validateCode?: boolean;
+    allowBrowserAPIs?: boolean;
+    allowNodeAPIs?: boolean;
+}
+//# sourceMappingURL=types.d.ts.map

package/dist/types.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../src/types.ts"],"names":[],"mappings":"AAAA,MAAM,WAAW,gBAAgB;IAC/B,CAAC,GAAG,EAAE,MAAM,GAAG,GAAG,CAAC;CACpB;AAED,MAAM,WAAW,aAAa;IAC5B,CAAC,GAAG,EAAE,MAAM,GAAG,GAAG,CAAC;CACpB;AAED,MAAM,WAAW,gBAAgB;IAC/B,OAAO,CAAC,EAAE,gBAAgB,CAAC;IAC3B,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,MAAM,CAAC,EAAE,OAAO,CAAC;IACjB,OAAO,CAAC,EAAE,aAAa,CAAC;IACxB,YAAY,CAAC,EAAE,MAAM,EAAE,CAAC;IACxB,QAAQ,CAAC,EAAE,OAAO,CAAC;CACpB;AAED,MAAM,WAAW,eAAe,CAAC,CAAC,GAAG,GAAG;IACtC,MAAM,EAAE,CAAC,CAAC;IACV,aAAa,EAAE,MAAM,CAAC;CACvB;AAED,MAAM,WAAW,YAAY;IAC3B,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,aAAa,CAAC,EAAE,OAAO,CAAC;IACxB,cAAc,CAAC,EAAE,MAAM,EAAE,CAAC;IAC1B,cAAc,CAAC,EAAE,MAAM,EAAE,CAAC;IAC1B,cAAc,CAAC,EAAE,aAAa,CAAC;IAC/B,mBAAmB,CAAC,EAAE,MAAM,EAAE,CAAC;IAC/B,iBAAiB,CAAC,EAAE,OAAO,CAAC;IAC5B,WAAW,CAAC,EAAE,OAAO,CAAC;IACtB,mBAAmB,CAAC,EAAE,OAAO,CAAC;IAC9B,YAAY,CAAC,EAAE,OAAO,CAAC;IACvB,gBAAgB,CAAC,EAAE,OAAO,CAAC;IAC3B,aAAa,CAAC,EAAE,OAAO,CAAC;CACzB"}

package/dist/types.esm.js

@@ -0,0 +1 @@
+export {};

package/dist/types.js

@@ -0,0 +1,2 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });

package/dist/utils.d.ts

@@ -0,0 +1,12 @@
+export declare function isNode(): boolean;
+export declare function isBrowser(): boolean;
+export declare function createSafeContext(context?: Record<string, any>, options?: {
+    allowBrowserAPIs?: boolean;
+    allowNodeAPIs?: boolean;
+    blockedKeys?: string[];
+}): Record<string, any>;
+export declare function validateCode(code: string, options?: {
+    allowTimers?: boolean;
+    allowDynamicImports?: boolean;
+}): void;
+//# sourceMappingURL=utils.d.ts.map

package/dist/utils.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"utils.d.ts","sourceRoot":"","sources":["../src/utils.ts"],"names":[],"mappings":"AAAA,wBAAgB,MAAM,IAAI,OAAO,CAIhC;AAED,wBAAgB,SAAS,IAAI,OAAO,CAGnC;AAED,wBAAgB,iBAAiB,CAC/B,OAAO,GAAE,MAAM,CAAC,MAAM,EAAE,GAAG,CAAM,EACjC,OAAO,GAAE;IACP,gBAAgB,CAAC,EAAE,OAAO,CAAC;IAC3B,aAAa,CAAC,EAAE,OAAO,CAAC;IACxB,WAAW,CAAC,EAAE,MAAM,EAAE,CAAC;CACnB,GACL,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,CAgCrB;AAED,wBAAgB,YAAY,CAC1B,IAAI,EAAE,MAAM,EACZ,OAAO,GAAE;IACP,WAAW,CAAC,EAAE,OAAO,CAAC;IACtB,mBAAmB,CAAC,EAAE,OAAO,CAAC;CAC1B,GACL,IAAI,CAkCN"}

package/dist/utils.esm.js

@@ -0,0 +1,61 @@
+export function isNode() {
+    return typeof process !== 'undefined' &&
+        process.versions != null &&
+        process.versions.node != null;
+}
+export function isBrowser() {
+    return typeof window !== 'undefined' &&
+        typeof document !== 'undefined';
+}
+export function createSafeContext(context = {}, options = {}) {
+    const safeContext = { ...context };
+    if (isBrowser() && !options.allowBrowserAPIs) {
+        safeContext.window = undefined;
+        safeContext.document = undefined;
+        safeContext.localStorage = undefined;
+        safeContext.sessionStorage = undefined;
+        safeContext.fetch = undefined;
+        safeContext.XMLHttpRequest = undefined;
+    }
+    if (isNode() && !options.allowNodeAPIs) {
+        safeContext.process = undefined;
+        safeContext.require = undefined;
+        safeContext.global = undefined;
+        safeContext.__dirname = undefined;
+        safeContext.__filename = undefined;
+    }
+    // 始终阻止这些危险函数
+    safeContext.eval = undefined;
+    safeContext.Function = undefined;
+    // 阻止自定义的键
+    if (options.blockedKeys) {
+        for (const key of options.blockedKeys) {
+            safeContext[key] = undefined;
+        }
+    }
+    return safeContext;
+}
+export function validateCode(code, options = {}) {
+    if (typeof code !== 'string') {
+        throw new Error('Code must be a string');
+    }
+    if (code.trim().length === 0) {
+        throw new Error('Code cannot be empty');
+    }
+    const dangerousPatterns = [
+        /eval\s*\(/,
+        /Function\s*\(/,
+        /new\s+Function\s*\(/
+    ];
+    if (!options.allowTimers) {
+        dangerousPatterns.push(/setTimeout\s*\(/, /setInterval\s*\(/);
+    }
+    if (!options.allowDynamicImports) {
+        dangerousPatterns.push(/import\s*\(/, /require\s*\(/);
+    }
+    for (const pattern of dangerousPatterns) {
+        if (pattern.test(code)) {
+            throw new Error(`Potentially dangerous code pattern detected: ${pattern.source}`);
+        }
+    }
+}

package/dist/utils.js

@@ -0,0 +1,67 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.isNode = isNode;
+exports.isBrowser = isBrowser;
+exports.createSafeContext = createSafeContext;
+exports.validateCode = validateCode;
+function isNode() {
+    return typeof process !== 'undefined' &&
+        process.versions != null &&
+        process.versions.node != null;
+}
+function isBrowser() {
+    return typeof window !== 'undefined' &&
+        typeof document !== 'undefined';
+}
+function createSafeContext(context = {}, options = {}) {
+    const safeContext = Object.assign({}, context);
+    if (isBrowser() && !options.allowBrowserAPIs) {
+        safeContext.window = undefined;
+        safeContext.document = undefined;
+        safeContext.localStorage = undefined;
+        safeContext.sessionStorage = undefined;
+        safeContext.fetch = undefined;
+        safeContext.XMLHttpRequest = undefined;
+    }
+    if (isNode() && !options.allowNodeAPIs) {
+        safeContext.process = undefined;
+        safeContext.require = undefined;
+        safeContext.global = undefined;
+        safeContext.__dirname = undefined;
+        safeContext.__filename = undefined;
+    }
+    // 始终阻止这些危险函数
+    safeContext.eval = undefined;
+    safeContext.Function = undefined;
+    // 阻止自定义的键
+    if (options.blockedKeys) {
+        for (const key of options.blockedKeys) {
+            safeContext[key] = undefined;
+        }
+    }
+    return safeContext;
+}
+function validateCode(code, options = {}) {
+    if (typeof code !== 'string') {
+        throw new Error('Code must be a string');
+    }
+    if (code.trim().length === 0) {
+        throw new Error('Code cannot be empty');
+    }
+    const dangerousPatterns = [
+        /eval\s*\(/,
+        /Function\s*\(/,
+        /new\s+Function\s*\(/
+    ];
+    if (!options.allowTimers) {
+        dangerousPatterns.push(/setTimeout\s*\(/, /setInterval\s*\(/);
+    }
+    if (!options.allowDynamicImports) {
+        dangerousPatterns.push(/import\s*\(/, /require\s*\(/);
+    }
+    for (const pattern of dangerousPatterns) {
+        if (pattern.test(code)) {
+            throw new Error(`Potentially dangerous code pattern detected: ${pattern.source}`);
+        }
+    }
+}

package/package.json

@@ -0,0 +1,58 @@
+{
+  "name": "@ticatec/dyna-js",
+  "version": "0.0.2",
+  "description": "A TypeScript library for dynamic code execution using new Function() that works in both Node.js and browser environments",
+  "main": "dist/index.js",
+  "module": "dist/index.esm.js",
+  "types": "dist/index.d.ts",
+  "exports": {
+    ".": {
+      "import": "./dist/index.esm.js",
+      "require": "./dist/index.js",
+      "types": "./dist/index.d.ts"
+    }
+  },
+  "files": [
+    "dist",
+    "README.md",
+    "README_CN.md",
+    "LICENSE"
+  ],
+  "scripts": {
+    "build": "node build.js",
+    "clean": "rm -rf dist dist-esm",
+    "prebuild": "npm run clean",
+    "prepublishOnly": "npm run build",
+    "test": "echo \"Error: no test specified\" && exit 1",
+    "dev": "tsc -w",
+    "publish:public": "npm run build && npm publish --access public"
+  },
+  "keywords": [
+    "dynamic",
+    "script",
+    "loader",
+    "function",
+    "typescript",
+    "browser",
+    "nodejs",
+    "universal"
+  ],
+  "author": "Ticatec Auckland",
+  "license": "MIT",
+  "repository": {
+    "type": "git",
+    "url": "git+https://github.com/ticatec/DynaJS.git",
+    "directory": "dynamic-script-loader"
+  },
+  "bugs": {
+    "url": "https://github.com/ticatec/DynaJS/issues"
+  },
+  "homepage": "https://github.com/ticatec/DynaJS#readme",
+  "devDependencies": {
+    "@types/node": "^24.10.1",
+    "typescript": "^5.0.0"
+  },
+  "engines": {
+    "node": ">=14.0.0"
+  }
+}