@vibe-validate/extractors 0.16.1 → 0.17.0-rc.5

package/dist/sandbox.d.ts

@@ -0,0 +1,161 @@
+/**
+ * Sandbox Module for Secure Extractor Execution
+ *
+ * Uses isolated-vm to run extractor plugins in a secure V8 Isolate.
+ * This provides true security isolation by preventing access to Node.js APIs
+ * and limiting memory/CPU usage.
+ *
+ * @see docs/sandbox-research.md for detailed architecture and security model
+ */
+import type { FormattedError } from './types.js';
+export interface SandboxOptions {
+    /**
+     * Memory limit in MB (default: 128)
+     * Prevents memory exhaustion attacks
+     */
+    memoryLimitMB?: number;
+    /**
+     * Execution timeout in milliseconds (default: 5000)
+     * Prevents infinite loop attacks
+     */
+    timeoutMs?: number;
+    /**
+     * Extractor function code to execute
+     * Must define a function named 'extract' that takes string input
+     */
+    code: string;
+    /**
+     * Input data to pass to the extractor
+     * This is the command output to parse for errors
+     */
+    input: string;
+    /**
+     * Extractor name for debugging/logging
+     */
+    extractorName: string;
+}
+export interface SandboxResult {
+    /**
+     * Whether execution succeeded without errors
+     */
+    success: boolean;
+    /**
+     * Extracted errors if successful
+     */
+    errors?: FormattedError[];
+    /**
+     * Error message if execution failed
+     */
+    error?: string;
+    /**
+     * Execution statistics
+     */
+    stats: {
+        /**
+         * Execution duration in milliseconds
+         */
+        durationMs: number;
+        /**
+         * Peak memory usage in MB
+         */
+        memoryUsedMB: number;
+    };
+}
+/**
+ * Error thrown when sandbox execution fails
+ */
+export declare class SandboxExecutionError extends Error {
+    readonly extractorName: string;
+    readonly _cause?: unknown | undefined;
+    constructor(message: string, extractorName: string, _cause?: unknown | undefined);
+}
+/**
+ * Run extractor code in a secure V8 Isolate
+ *
+ * Security features:
+ * - Isolated V8 heap (no access to Node.js globals)
+ * - Memory limit enforcement
+ * - Execution timeout protection
+ * - No filesystem, network, or process access
+ *
+ * @param options - Sandbox configuration
+ * @returns Result containing extracted errors or error details
+ *
+ * @example
+ * ```typescript
+ * const result = await runInSandbox({
+ *   code: 'function extract(input) { return []; }',
+ *   input: 'error output',
+ *   extractorName: 'test-extractor'
+ * });
+ *
+ * if (result.success) {
+ *   console.log('Extracted errors:', result.errors);
+ * } else {
+ *   console.error('Execution failed:', result.error);
+ * }
+ * ```
+ */
+export declare function runInSandbox(options: SandboxOptions): Promise<SandboxResult>;
+/**
+ * Create sandboxed code from an extractor function
+ *
+ * Converts a regular function to a string that can be executed in the sandbox.
+ * The function must:
+ * - Be named 'extract'
+ * - Take a single string parameter
+ * - Return ExtractedError[]
+ *
+ * @param extractFn - The extractor function to sandbox
+ * @returns Sandboxed code string
+ *
+ * @example
+ * ```typescript
+ * function extract(content: string): ExtractedError[] {
+ *   const errors = [];
+ *   const pattern = /ERROR: (.+)/g;
+ *   let match;
+ *   while ((match = pattern.exec(content)) !== null) {
+ *     errors.push({ message: match[1], severity: 'error' });
+ *   }
+ *   return errors;
+ * }
+ *
+ * const code = createSandboxedCode(extract);
+ * // code is now a string that can be passed to runInSandbox
+ * ```
+ */
+export declare function createSandboxedCode(extractFn: (_content: string) => FormattedError[]): string;
+/**
+ * Performance statistics for sandbox operations
+ * Used for monitoring and optimization
+ */
+export interface SandboxStats {
+    totalExecutions: number;
+    successfulExecutions: number;
+    failedExecutions: number;
+    averageDurationMs: number;
+    averageMemoryUsedMB: number;
+}
+/**
+ * Sandbox performance tracker
+ * Collects statistics across multiple executions
+ */
+export declare class SandboxStatsCollector {
+    private stats;
+    private totalDurationMs;
+    private totalMemoryUsedMB;
+    /**
+     * Record a sandbox execution result
+     */
+    record(result: SandboxResult): void;
+    /**
+     * Get current statistics
+     */
+    getStats(): Readonly<SandboxStats>;
+    /**
+     * Reset statistics
+     */
+    reset(): void;
+}
+//# sourceMappingURL=sandbox.d.ts.map

package/dist/sandbox.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"sandbox.d.ts","sourceRoot":"","sources":["../src/sandbox.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAEH,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,YAAY,CAAC;AAsBjD,MAAM,WAAW,cAAc;IAC7B;;;OAGG;IACH,aAAa,CAAC,EAAE,MAAM,CAAC;IAEvB;;;OAGG;IACH,SAAS,CAAC,EAAE,MAAM,CAAC;IAEnB;;;OAGG;IACH,IAAI,EAAE,MAAM,CAAC;IAEb;;;OAGG;IACH,KAAK,EAAE,MAAM,CAAC;IAEd;;OAEG;IACH,aAAa,EAAE,MAAM,CAAC;CACvB;AAED,MAAM,WAAW,aAAa;IAC5B;;OAEG;IACH,OAAO,EAAE,OAAO,CAAC;IAEjB;;OAEG;IACH,MAAM,CAAC,EAAE,cAAc,EAAE,CAAC;IAE1B;;OAEG;IACH,KAAK,CAAC,EAAE,MAAM,CAAC;IAEf;;OAEG;IACH,KAAK,EAAE;QACL;;WAEG;QACH,UAAU,EAAE,MAAM,CAAC;QAEnB;;WAEG;QACH,YAAY,EAAE,MAAM,CAAC;KACtB,CAAC;CACH;AAED;;GAEG;AACH,qBAAa,qBAAsB,SAAQ,KAAK;aAG5B,aAAa,EAAE,MAAM;aACrB,MAAM,CAAC,EAAE,OAAO;gBAFhC,OAAO,EAAE,MAAM,EACC,aAAa,EAAE,MAAM,EACrB,MAAM,CAAC,EAAE,OAAO,YAAA;CAKnC;AAED;;;;;;;;;;;;;;;;;;;;;;;;;;GA0BG;AACH,wBAAsB,YAAY,CAChC,OAAO,EAAE,cAAc,GACtB,OAAO,CAAC,aAAa,CAAC,CAmGxB;AAED;;;;;;;;;;;;;;;;;;;;;;;;;;;GA2BG;AACH,wBAAgB,mBAAmB,CACjC,SAAS,EAAE,CAAC,QAAQ,EAAE,MAAM,KAAK,cAAc,EAAE,GAChD,MAAM,CAuBR;AAED;;;GAGG;AACH,MAAM,WAAW,YAAY;IAC3B,eAAe,EAAE,MAAM,CAAC;IACxB,oBAAoB,EAAE,MAAM,CAAC;IAC7B,gBAAgB,EAAE,MAAM,CAAC;IACzB,iBAAiB,EAAE,MAAM,CAAC;IAC1B,mBAAmB,EAAE,MAAM,CAAC;CAC7B;AAED;;;GAGG;AACH,qBAAa,qBAAqB;IAChC,OAAO,CAAC,KAAK,CAMX;IAEF,OAAO,CAAC,eAAe,CAAK;IAC5B,OAAO,CAAC,iBAAiB,CAAK;IAE9B;;OAEG;IACH,MAAM,CAAC,MAAM,EAAE,aAAa,GAAG,IAAI;IAmBnC;;OAEG;IACH,QAAQ,IAAI,QAAQ,CAAC,YAAY,CAAC;IAIlC;;OAEG;IACH,KAAK,IAAI,IAAI;CAWd"}

package/dist/sandbox.js

@@ -0,0 +1,254 @@
+/**
+ * Sandbox Module for Secure Extractor Execution
+ *
+ * Uses isolated-vm to run extractor plugins in a secure V8 Isolate.
+ * This provides true security isolation by preventing access to Node.js APIs
+ * and limiting memory/CPU usage.
+ *
+ * @see docs/sandbox-research.md for detailed architecture and security model
+ */
+// Lazy-load isolated-vm (CommonJS module)
+// eslint-disable-next-line @typescript-eslint/no-explicit-any -- isolated-vm has no types
+let ivm;
+async function getIVM() {
+    if (!ivm) {
+        try {
+            // isolated-vm is CommonJS, use dynamic import and createRequire
+            const { createRequire } = await import('node:module');
+            const require = createRequire(import.meta.url);
+            ivm = require('isolated-vm');
+        }
+        catch {
+            // If isolated-vm is not installed, throw helpful error
+            throw new Error('isolated-vm is required for sandbox execution. Install with: pnpm add isolated-vm');
+        }
+    }
+    return ivm;
+}
+/**
+ * Error thrown when sandbox execution fails
+ */
+export class SandboxExecutionError extends Error {
+    extractorName;
+    _cause;
+    constructor(message, extractorName, _cause) {
+        super(`Sandbox execution failed for ${extractorName}: ${message}`);
+        this.extractorName = extractorName;
+        this._cause = _cause;
+        this.name = 'SandboxExecutionError';
+    }
+}
+/**
+ * Run extractor code in a secure V8 Isolate
+ *
+ * Security features:
+ * - Isolated V8 heap (no access to Node.js globals)
+ * - Memory limit enforcement
+ * - Execution timeout protection
+ * - No filesystem, network, or process access
+ *
+ * @param options - Sandbox configuration
+ * @returns Result containing extracted errors or error details
+ *
+ * @example
+ * ```typescript
+ * const result = await runInSandbox({
+ *   code: 'function extract(input) { return []; }',
+ *   input: 'error output',
+ *   extractorName: 'test-extractor'
+ * });
+ *
+ * if (result.success) {
+ *   console.log('Extracted errors:', result.errors);
+ * } else {
+ *   console.error('Execution failed:', result.error);
+ * }
+ * ```
+ */
+export async function runInSandbox(options) {
+    const startTime = performance.now();
+    const ivm = await getIVM();
+    // eslint-disable-next-line @typescript-eslint/no-explicit-any -- isolated-vm has no types
+    let isolate;
+    try {
+        // Create V8 Isolate with memory limit
+        isolate = new ivm.Isolate({
+            memoryLimit: options.memoryLimitMB ?? 128
+        });
+        const context = await isolate.createContext();
+        // Wrap extractor code to return JSON-serializable result
+        const wrappedCode = `
+      ${options.code}
+
+      function __executeExtractor(input) {
+        try {
+          const errors = extract(input);
+          return JSON.stringify({ success: true, errors });
+        } catch (error) {
+          return JSON.stringify({
+            success: false,
+            error: error instanceof Error ? error.message : String(error)
+          });
+        }
+      }
+    `;
+        // Compile code (cached by V8)
+        const script = await isolate.compileScript(wrappedCode);
+        await script.run(context);
+        // Transfer input to isolate (copy, don't share reference)
+        const inputCopy = new ivm.ExternalCopy(options.input);
+        await context.global.set('input', inputCopy.copyInto());
+        // Execute with timeout
+        const resultJson = await context.eval('__executeExtractor(input)', {
+            timeout: options.timeoutMs ?? 5000,
+            promise: true
+        });
+        const result = JSON.parse(resultJson);
+        // Get memory stats before disposal
+        const heapStats = isolate.getHeapStatisticsSync();
+        const memoryUsedMB = heapStats.used_heap_size / 1024 / 1024;
+        isolate.dispose();
+        const durationMs = performance.now() - startTime;
+        if (!result.success) {
+            return {
+                success: false,
+                error: result.error,
+                stats: {
+                    durationMs,
+                    memoryUsedMB
+                }
+            };
+        }
+        return {
+            success: true,
+            errors: result.errors ?? [],
+            stats: {
+                durationMs,
+                memoryUsedMB
+            }
+        };
+    }
+    catch (error) {
+        // Clean up isolate on error
+        if (isolate) {
+            try {
+                isolate.dispose();
+            }
+            catch {
+                // Ignore disposal errors
+            }
+        }
+        const durationMs = performance.now() - startTime;
+        return {
+            success: false,
+            error: error instanceof Error ? error.message : String(error),
+            stats: {
+                durationMs,
+                memoryUsedMB: 0
+            }
+        };
+    }
+}
+/**
+ * Create sandboxed code from an extractor function
+ *
+ * Converts a regular function to a string that can be executed in the sandbox.
+ * The function must:
+ * - Be named 'extract'
+ * - Take a single string parameter
+ * - Return ExtractedError[]
+ *
+ * @param extractFn - The extractor function to sandbox
+ * @returns Sandboxed code string
+ *
+ * @example
+ * ```typescript
+ * function extract(content: string): ExtractedError[] {
+ *   const errors = [];
+ *   const pattern = /ERROR: (.+)/g;
+ *   let match;
+ *   while ((match = pattern.exec(content)) !== null) {
+ *     errors.push({ message: match[1], severity: 'error' });
+ *   }
+ *   return errors;
+ * }
+ *
+ * const code = createSandboxedCode(extract);
+ * // code is now a string that can be passed to runInSandbox
+ * ```
+ */
+export function createSandboxedCode(extractFn) {
+    // Convert function to string and rename to 'extract' if needed
+    const fnString = extractFn.toString();
+    // Check if function is already named 'extract'
+    if (fnString.startsWith('function extract(')) {
+        return fnString;
+    }
+    // Anonymous or arrow function - wrap it
+    if (fnString.startsWith('(') || fnString.includes('=>')) {
+        return `function extract(content) { return (${fnString})(content); }`;
+    }
+    // Named function - extract body and create 'extract' wrapper
+    const functionPattern = /function\s+\w+\s*\([^)]*\)\s*{([\s\S]*)}$/;
+    const bodyMatch = functionPattern.exec(fnString);
+    if (bodyMatch) {
+        return `function extract(content) { ${bodyMatch[1]} }`;
+    }
+    // Fallback - assume it's valid code
+    return fnString;
+}
+/**
+ * Sandbox performance tracker
+ * Collects statistics across multiple executions
+ */
+export class SandboxStatsCollector {
+    stats = {
+        totalExecutions: 0,
+        successfulExecutions: 0,
+        failedExecutions: 0,
+        averageDurationMs: 0,
+        averageMemoryUsedMB: 0
+    };
+    totalDurationMs = 0;
+    totalMemoryUsedMB = 0;
+    /**
+     * Record a sandbox execution result
+     */
+    record(result) {
+        this.stats.totalExecutions++;
+        if (result.success) {
+            this.stats.successfulExecutions++;
+        }
+        else {
+            this.stats.failedExecutions++;
+        }
+        this.totalDurationMs += result.stats.durationMs;
+        this.totalMemoryUsedMB += result.stats.memoryUsedMB;
+        // Update averages
+        this.stats.averageDurationMs =
+            this.totalDurationMs / this.stats.totalExecutions;
+        this.stats.averageMemoryUsedMB =
+            this.totalMemoryUsedMB / this.stats.totalExecutions;
+    }
+    /**
+     * Get current statistics
+     */
+    getStats() {
+        return { ...this.stats };
+    }
+    /**
+     * Reset statistics
+     */
+    reset() {
+        this.stats = {
+            totalExecutions: 0,
+            successfulExecutions: 0,
+            failedExecutions: 0,
+            averageDurationMs: 0,
+            averageMemoryUsedMB: 0
+        };
+        this.totalDurationMs = 0;
+        this.totalMemoryUsedMB = 0;
+    }
+}
+//# sourceMappingURL=sandbox.js.map

package/dist/sandbox.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sandbox.js","sourceRoot":"","sources":["../src/sandbox.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAIH,0CAA0C;AAC1C,0FAA0F;AAC1F,IAAI,GAAQ,CAAC;AACb,KAAK,UAAU,MAAM;IACnB,IAAI,CAAC,GAAG,EAAE,CAAC;QACT,IAAI,CAAC;YACH,gEAAgE;YAChE,MAAM,EAAE,aAAa,EAAE,GAAG,MAAM,MAAM,CAAC,aAAa,CAAC,CAAC;YACtD,MAAM,OAAO,GAAG,aAAa,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;YAC/C,GAAG,GAAG,OAAO,CAAC,aAAa,CAAC,CAAC;QAC/B,CAAC;QAAC,MAAM,CAAC;YACP,uDAAuD;YACvD,MAAM,IAAI,KAAK,CACb,mFAAmF,CACpF,CAAC;QACJ,CAAC;IACH,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC;AAiED;;GAEG;AACH,MAAM,OAAO,qBAAsB,SAAQ,KAAK;IAG5B;IACA;IAHlB,YACE,OAAe,EACC,aAAqB,EACrB,MAAgB;QAEhC,KAAK,CAAC,gCAAgC,aAAa,KAAK,OAAO,EAAE,CAAC,CAAC;QAHnD,kBAAa,GAAb,aAAa,CAAQ;QACrB,WAAM,GAAN,MAAM,CAAU;QAGhC,IAAI,CAAC,IAAI,GAAG,uBAAuB,CAAC;IACtC,CAAC;CACF;AAED;;;;;;;;;;;;;;;;;;;;;;;;;;GA0BG;AACH,MAAM,CAAC,KAAK,UAAU,YAAY,CAChC,OAAuB;IAEvB,MAAM,SAAS,GAAG,WAAW,CAAC,GAAG,EAAE,CAAC;IACpC,MAAM,GAAG,GAAG,MAAM,MAAM,EAAE,CAAC;IAE3B,0FAA0F;IAC1F,IAAI,OAAY,CAAC;IAEjB,IAAI,CAAC;QACH,sCAAsC;QACtC,OAAO,GAAG,IAAI,GAAG,CAAC,OAAO,CAAC;YACxB,WAAW,EAAE,OAAO,CAAC,aAAa,IAAI,GAAG;SAC1C,CAAC,CAAC;QAEH,MAAM,OAAO,GAAG,MAAM,OAAO,CAAC,aAAa,EAAE,CAAC;QAE9C,yDAAyD;QACzD,MAAM,WAAW,GAAG;QAChB,OAAO,CAAC,IAAI;;;;;;;;;;;;;KAaf,CAAC;QAEF,8BAA8B;QAC9B,MAAM,MAAM,GAAG,MAAM,OAAO,CAAC,aAAa,CAAC,WAAW,CAAC,CAAC;QACxD,MAAM,MAAM,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;QAE1B,0DAA0D;QAC1D,MAAM,SAAS,GAAG,IAAI,GAAG,CAAC,YAAY,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;QACtD,MAAM,OAAO,CAAC,MAAM,CAAC,GAAG,CAAC,OAAO,EAAE,SAAS,CAAC,QAAQ,EAAE,CAAC,CAAC;QAExD,uBAAuB;QACvB,MAAM,UAAU,GAAG,MAAM,OAAO,CAAC,IAAI,CACnC,2BAA2B,EAC3B;YACE,OAAO,EAAE,OAAO,CAAC,SAAS,IAAI,IAAI;YAClC,OAAO,EAAE,IAAI;SACd,CACF,CAAC;QAEF,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC;QAEtC,mCAAmC;QACnC,MAAM,SAAS,GAAG,OAAO,CAAC,qBAAqB,EAAE,CAAC;QAClD,MAAM,YAAY,GAAG,SAAS,CAAC,cAAc,GAAG,IAAI,GAAG,IAAI,CAAC;QAE5D,OAAO,CAAC,OAAO,EAAE,CAAC;QAElB,MAAM,UAAU,GAAG,WAAW,CAAC,GAAG,EAAE,GAAG,SAAS,CAAC;QAEjD,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;YACpB,OAAO;gBACL,OAAO,EAAE,KAAK;gBACd,KAAK,EAAE,MAAM,CAAC,KAAK;gBACnB,KAAK,EAAE;oBACL,UAAU;oBACV,YAAY;iBACb;aACF,CAAC;QACJ,CAAC;QAED,OAAO;YACL,OAAO,EAAE,IAAI;YACb,MAAM,EAAE,MAAM,CAAC,MAAM,IAAI,EAAE;YAC3B,KAAK,EAAE;gBACL,UAAU;gBACV,YAAY;aACb;SACF,CAAC;IACJ,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,4BAA4B;QAC5B,IAAI,OAAO,EAAE,CAAC;YACZ,IAAI,CAAC;gBACH,OAAO,CAAC,OAAO,EAAE,CAAC;YACpB,CAAC;YAAC,MAAM,CAAC;gBACP,yBAAyB;YAC3B,CAAC;QACH,CAAC;QAED,MAAM,UAAU,GAAG,WAAW,CAAC,GAAG,EAAE,GAAG,SAAS,CAAC;QAEjD,OAAO;YACL,OAAO,EAAE,KAAK;YACd,KAAK,EAAE,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC;YAC7D,KAAK,EAAE;gBACL,UAAU;gBACV,YAAY,EAAE,CAAC;aAChB;SACF,CAAC;IACJ,CAAC;AACH,CAAC;AAED;;;;;;;;;;;;;;;;;;;;;;;;;;;GA2BG;AACH,MAAM,UAAU,mBAAmB,CACjC,SAAiD;IAEjD,+DAA+D;IAC/D,MAAM,QAAQ,GAAG,SAAS,CAAC,QAAQ,EAAE,CAAC;IAEtC,+CAA+C;IAC/C,IAAI,QAAQ,CAAC,UAAU,CAAC,mBAAmB,CAAC,EAAE,CAAC;QAC7C,OAAO,QAAQ,CAAC;IAClB,CAAC;IAED,wCAAwC;IACxC,IAAI,QAAQ,CAAC,UAAU,CAAC,GAAG,CAAC,IAAI,QAAQ,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAC;QACxD,OAAO,uCAAuC,QAAQ,eAAe,CAAC;IACxE,CAAC;IAED,6DAA6D;IAC7D,MAAM,eAAe,GAAG,2CAA2C,CAAC;IACpE,MAAM,SAAS,GAAG,eAAe,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;IACjD,IAAI,SAAS,EAAE,CAAC;QACd,OAAO,+BAA+B,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC;IACzD,CAAC;IAED,oCAAoC;IACpC,OAAO,QAAQ,CAAC;AAClB,CAAC;AAcD;;;GAGG;AACH,MAAM,OAAO,qBAAqB;IACxB,KAAK,GAAiB;QAC5B,eAAe,EAAE,CAAC;QAClB,oBAAoB,EAAE,CAAC;QACvB,gBAAgB,EAAE,CAAC;QACnB,iBAAiB,EAAE,CAAC;QACpB,mBAAmB,EAAE,CAAC;KACvB,CAAC;IAEM,eAAe,GAAG,CAAC,CAAC;IACpB,iBAAiB,GAAG,CAAC,CAAC;IAE9B;;OAEG;IACH,MAAM,CAAC,MAAqB;QAC1B,IAAI,CAAC,KAAK,CAAC,eAAe,EAAE,CAAC;QAE7B,IAAI,MAAM,CAAC,OAAO,EAAE,CAAC;YACnB,IAAI,CAAC,KAAK,CAAC,oBAAoB,EAAE,CAAC;QACpC,CAAC;aAAM,CAAC;YACN,IAAI,CAAC,KAAK,CAAC,gBAAgB,EAAE,CAAC;QAChC,CAAC;QAED,IAAI,CAAC,eAAe,IAAI,MAAM,CAAC,KAAK,CAAC,UAAU,CAAC;QAChD,IAAI,CAAC,iBAAiB,IAAI,MAAM,CAAC,KAAK,CAAC,YAAY,CAAC;QAEpD,kBAAkB;QAClB,IAAI,CAAC,KAAK,CAAC,iBAAiB;YAC1B,IAAI,CAAC,eAAe,GAAG,IAAI,CAAC,KAAK,CAAC,eAAe,CAAC;QACpD,IAAI,CAAC,KAAK,CAAC,mBAAmB;YAC5B,IAAI,CAAC,iBAAiB,GAAG,IAAI,CAAC,KAAK,CAAC,eAAe,CAAC;IACxD,CAAC;IAED;;OAEG;IACH,QAAQ;QACN,OAAO,EAAE,GAAG,IAAI,CAAC,KAAK,EAAE,CAAC;IAC3B,CAAC;IAED;;OAEG;IACH,KAAK;QACH,IAAI,CAAC,KAAK,GAAG;YACX,eAAe,EAAE,CAAC;YAClB,oBAAoB,EAAE,CAAC;YACvB,gBAAgB,EAAE,CAAC;YACnB,iBAAiB,EAAE,CAAC;YACpB,mBAAmB,EAAE,CAAC;SACvB,CAAC;QACF,IAAI,CAAC,eAAe,GAAG,CAAC,CAAC;QACzB,IAAI,CAAC,iBAAiB,GAAG,CAAC,CAAC;IAC7B,CAAC;CACF"}

package/dist/sandbox.test.d.ts

@@ -0,0 +1,8 @@
+/**
+ * Sandbox Module Tests
+ *
+ * Tests secure extractor execution using isolated-vm.
+ * These tests validate the sandbox can execute real extractor code safely.
+ */
+export {};
+//# sourceMappingURL=sandbox.test.d.ts.map

package/dist/sandbox.test.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"sandbox.test.d.ts","sourceRoot":"","sources":["../src/sandbox.test.ts"],"names":[],"mappings":"AAAA;;;;;GAKG"}