ai-evaluate 2.1.6 → 2.1.8

package/dist/miniflare-pool.js

@@ -0,0 +1,308 @@
+/**
+ * Miniflare instance pool for improved performance
+ *
+ * Reuses Miniflare instances between evaluations instead of creating/disposing
+ * for each evaluation, providing 4-5x performance improvement.
+ *
+ * Uses Miniflare's setOptions() to update the worker script between uses,
+ * avoiding the expensive instance creation/teardown cycle.
+ */
+/**
+ * Global pool state (singleton per process)
+ */
+let pool = [];
+let poolConfig = {
+    size: 3,
+    maxIdleTime: 30000,
+};
+let idleCleanupInterval = null;
+let MiniflareClass = null;
+let isShuttingDown = false;
+// Default worker script for warm instances
+const WARM_WORKER_SCRIPT = `
+export default {
+  async fetch(request, env) {
+    return new Response('ready', { status: 200 });
+  }
+};
+`;
+/**
+ * Configure the Miniflare pool
+ *
+ * @example
+ * ```ts
+ * import { configurePool } from 'ai-evaluate/node'
+ *
+ * configurePool({
+ *   size: 5,        // Keep 5 warm instances
+ *   maxIdleTime: 60000  // Dispose after 60s idle
+ * })
+ * ```
+ */
+export function configurePool(config) {
+    poolConfig = {
+        size: config.size ?? poolConfig.size,
+        maxIdleTime: config.maxIdleTime ?? poolConfig.maxIdleTime,
+    };
+    startIdleCleanup();
+}
+/**
+ * Get the current pool configuration
+ */
+export function getPoolConfig() {
+    return { ...poolConfig };
+}
+/**
+ * Get pool statistics for monitoring
+ */
+export function getPoolStats() {
+    const available = pool.filter((p) => !p.inUse).length;
+    return {
+        size: pool.length,
+        available,
+        inUse: pool.length - available,
+        config: { ...poolConfig },
+    };
+}
+/**
+ * Initialize the Miniflare class (lazy load)
+ */
+async function getMiniflareClass() {
+    if (!MiniflareClass) {
+        const { Miniflare } = await import('miniflare');
+        MiniflareClass = Miniflare;
+    }
+    return MiniflareClass;
+}
+/**
+ * Create a new Miniflare instance with a warm worker
+ */
+async function createInstance() {
+    const Miniflare = await getMiniflareClass();
+    return new Miniflare({
+        modules: true,
+        script: WARM_WORKER_SCRIPT,
+        compatibilityDate: '2026-01-01',
+    });
+}
+/**
+ * Start the idle cleanup interval
+ */
+function startIdleCleanup() {
+    if (idleCleanupInterval) {
+        clearInterval(idleCleanupInterval);
+    }
+    idleCleanupInterval = setInterval(async () => {
+        if (isShuttingDown)
+            return;
+        const now = Date.now();
+        const toDispose = [];
+        // Find idle instances beyond the idle timeout
+        for (let i = pool.length - 1; i >= 0; i--) {
+            const item = pool[i];
+            if (!item.inUse && now - item.lastUsed > poolConfig.maxIdleTime) {
+                // Keep at least one warm instance
+                if (pool.filter((p) => !p.inUse && !toDispose.includes(p)).length > 1) {
+                    toDispose.push(item);
+                    pool.splice(i, 1);
+                }
+            }
+        }
+        // Dispose old instances
+        for (const item of toDispose) {
+            try {
+                await item.instance.dispose();
+            }
+            catch {
+                // Ignore disposal errors
+            }
+        }
+    }, 5000); // Check every 5 seconds
+    // Don't keep the process alive just for cleanup
+    if (idleCleanupInterval.unref) {
+        idleCleanupInterval.unref();
+    }
+}
+/**
+ * Acquire a Miniflare instance from the pool and configure it with a worker
+ *
+ * If a free instance is available, it will be reconfigured and returned.
+ * Otherwise, a new instance will be created (up to pool size limit).
+ * If pool is exhausted, creates a temporary instance.
+ *
+ * @param workerOptions - Configuration for the worker to run
+ * @returns Object with the configured instance and a release function
+ */
+export async function acquireInstance(workerOptions) {
+    if (isShuttingDown) {
+        throw new Error('Pool is shutting down');
+    }
+    // Start idle cleanup if not started
+    if (!idleCleanupInterval) {
+        startIdleCleanup();
+    }
+    const { script, compatibilityDate = '2026-01-01', outboundService } = workerOptions;
+    // Build the options for setOptions
+    const updateOptions = {
+        modules: true,
+        script,
+        compatibilityDate,
+    };
+    // Only add outboundService if it's defined (for blocking network)
+    if (outboundService !== undefined) {
+        updateOptions.outboundService = outboundService;
+    }
+    // Try to find an available instance
+    const available = pool.find((p) => !p.inUse);
+    if (available) {
+        available.inUse = true;
+        // Reconfigure the instance with the new worker script
+        await available.instance.setOptions(updateOptions);
+        return {
+            instance: available.instance,
+            release: async () => {
+                available.inUse = false;
+                available.lastUsed = Date.now();
+            },
+            isPooled: true,
+        };
+    }
+    // Create new instance if pool not full
+    if (pool.length < poolConfig.size) {
+        const Miniflare = await getMiniflareClass();
+        const instance = new Miniflare(updateOptions);
+        const pooled = {
+            instance,
+            inUse: true,
+            lastUsed: Date.now(),
+            createdAt: Date.now(),
+        };
+        pool.push(pooled);
+        return {
+            instance,
+            release: async () => {
+                pooled.inUse = false;
+                pooled.lastUsed = Date.now();
+            },
+            isPooled: true,
+        };
+    }
+    // Pool exhausted - create temporary instance
+    const Miniflare = await getMiniflareClass();
+    const tempInstance = new Miniflare(updateOptions);
+    return {
+        instance: tempInstance,
+        release: async () => {
+            // Dispose temporary instance immediately
+            await tempInstance.dispose();
+        },
+        isPooled: false,
+    };
+}
+/**
+ * Pre-warm the pool with instances
+ *
+ * Call this at application startup to avoid cold start latency.
+ *
+ * @example
+ * ```ts
+ * import { warmPool } from 'ai-evaluate/node'
+ *
+ * // Pre-warm 3 instances at startup
+ * await warmPool(3)
+ * ```
+ */
+export async function warmPool(count) {
+    const targetCount = count ?? poolConfig.size;
+    const toCreate = Math.max(0, targetCount - pool.length);
+    const promises = [];
+    for (let i = 0; i < toCreate; i++) {
+        promises.push((async () => {
+            const instance = await createInstance();
+            pool.push({
+                instance,
+                inUse: false,
+                lastUsed: Date.now(),
+                createdAt: Date.now(),
+            });
+        })());
+    }
+    await Promise.all(promises);
+    // Start idle cleanup if not already started
+    if (!idleCleanupInterval) {
+        startIdleCleanup();
+    }
+}
+/**
+ * Dispose all instances and clean up the pool
+ *
+ * Call this before process exit to ensure clean shutdown.
+ *
+ * @example
+ * ```ts
+ * import { disposePool } from 'ai-evaluate/node'
+ *
+ * process.on('beforeExit', async () => {
+ *   await disposePool()
+ * })
+ * ```
+ */
+export async function disposePool() {
+    isShuttingDown = true;
+    if (idleCleanupInterval) {
+        clearInterval(idleCleanupInterval);
+        idleCleanupInterval = null;
+    }
+    const instances = [...pool];
+    pool = [];
+    await Promise.all(instances.map(async (item) => {
+        try {
+            await item.instance.dispose();
+        }
+        catch {
+            // Ignore disposal errors
+        }
+    }));
+    isShuttingDown = false;
+}
+/**
+ * Reset the pool (for testing purposes)
+ */
+export async function resetPool() {
+    await disposePool();
+    poolConfig = {
+        size: 3,
+        maxIdleTime: 30000,
+    };
+    MiniflareClass = null;
+}
+// Register cleanup on process exit
+if (typeof process !== 'undefined') {
+    const cleanup = () => {
+        isShuttingDown = true;
+        if (idleCleanupInterval) {
+            clearInterval(idleCleanupInterval);
+        }
+        // Synchronous disposal attempt - best effort
+        for (const item of pool) {
+            try {
+                // Fire and forget - we're exiting anyway
+                item.instance.dispose().catch(() => { });
+            }
+            catch {
+                // Ignore errors during shutdown
+            }
+        }
+        pool = [];
+    };
+    process.on('exit', cleanup);
+    process.on('SIGINT', () => {
+        cleanup();
+        process.exit(0);
+    });
+    process.on('SIGTERM', () => {
+        cleanup();
+        process.exit(0);
+    });
+}
+//# sourceMappingURL=miniflare-pool.js.map

package/dist/miniflare-pool.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"miniflare-pool.js","sourceRoot":"","sources":["../src/miniflare-pool.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AA6CH;;GAEG;AACH,IAAI,IAAI,GAAqB,EAAE,CAAA;AAC/B,IAAI,UAAU,GAAyB;IACrC,IAAI,EAAE,CAAC;IACP,WAAW,EAAE,KAAK;CACnB,CAAA;AACD,IAAI,mBAAmB,GAA0B,IAAI,CAAA;AACrD,IAAI,cAAc,GAAgC,IAAI,CAAA;AACtD,IAAI,cAAc,GAAG,KAAK,CAAA;AAE1B,2CAA2C;AAC3C,MAAM,kBAAkB,GAAG;;;;;;CAM1B,CAAA;AAED;;;;;;;;;;;;GAYG;AACH,MAAM,UAAU,aAAa,CAAC,MAAkB;IAC9C,UAAU,GAAG;QACX,IAAI,EAAE,MAAM,CAAC,IAAI,IAAI,UAAU,CAAC,IAAI;QACpC,WAAW,EAAE,MAAM,CAAC,WAAW,IAAI,UAAU,CAAC,WAAW;KAC1D,CAAA;IACD,gBAAgB,EAAE,CAAA;AACpB,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,aAAa;IAC3B,OAAO,EAAE,GAAG,UAAU,EAAE,CAAA;AAC1B,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,YAAY;IAM1B,MAAM,SAAS,GAAG,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,MAAM,CAAA;IACrD,OAAO;QACL,IAAI,EAAE,IAAI,CAAC,MAAM;QACjB,SAAS;QACT,KAAK,EAAE,IAAI,CAAC,MAAM,GAAG,SAAS;QAC9B,MAAM,EAAE,EAAE,GAAG,UAAU,EAAE;KAC1B,CAAA;AACH,CAAC;AAED;;GAEG;AACH,KAAK,UAAU,iBAAiB;IAC9B,IAAI,CAAC,cAAc,EAAE,CAAC;QACpB,MAAM,EAAE,SAAS,EAAE,GAAG,MAAM,MAAM,CAAC,WAAW,CAAC,CAAA;QAC/C,cAAc,GAAG,SAAiC,CAAA;IACpD,CAAC;IACD,OAAO,cAAc,CAAA;AACvB,CAAC;AAED;;GAEG;AACH,KAAK,UAAU,cAAc;IAC3B,MAAM,SAAS,GAAG,MAAM,iBAAiB,EAAE,CAAA;IAC3C,OAAO,IAAI,SAAS,CAAC;QACnB,OAAO,EAAE,IAAI;QACb,MAAM,EAAE,kBAAkB;QAC1B,iBAAiB,EAAE,YAAY;KAChC,CAAC,CAAA;AACJ,CAAC;AAED;;GAEG;AACH,SAAS,gBAAgB;IACvB,IAAI,mBAAmB,EAAE,CAAC;QACxB,aAAa,CAAC,mBAAmB,CAAC,CAAA;IACpC,CAAC;IAED,mBAAmB,GAAG,WAAW,CAAC,KAAK,IAAI,EAAE;QAC3C,IAAI,cAAc;YAAE,OAAM;QAE1B,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,CAAA;QACtB,MAAM,SAAS,GAAqB,EAAE,CAAA;QAEtC,8CAA8C;QAC9C,KAAK,IAAI,CAAC,GAAG,IAAI,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC,IAAI,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC;YAC1C,MAAM,IAAI,GAAG,IAAI,CAAC,CAAC,CAAC,CAAA;YACpB,IAAI,CAAC,IAAI,CAAC,KAAK,IAAI,GAAG,GAAG,IAAI,CAAC,QAAQ,GAAG,UAAU,CAAC,WAAW,EAAE,CAAC;gBAChE,kCAAkC;gBAClC,IAAI,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,KAAK,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;oBACtE,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;oBACpB,IAAI,CAAC,MAAM,CAAC,CAAC,EAAE,CAAC,CAAC,CAAA;gBACnB,CAAC;YACH,CAAC;QACH,CAAC;QAED,wBAAwB;QACxB,KAAK,MAAM,IAAI,IAAI,SAAS,EAAE,CAAC;YAC7B,IAAI,CAAC;gBACH,MAAM,IAAI,CAAC,QAAQ,CAAC,OAAO,EAAE,CAAA;YAC/B,CAAC;YAAC,MAAM,CAAC;gBACP,yBAAyB;YAC3B,CAAC;QACH,CAAC;IACH,CAAC,EAAE,IAAI,CAAC,CAAA,CAAC,wBAAwB;IAEjC,gDAAgD;IAChD,IAAI,mBAAmB,CAAC,KAAK,EAAE,CAAC;QAC9B,mBAAmB,CAAC,KAAK,EAAE,CAAA;IAC7B,CAAC;AACH,CAAC;AAED;;;;;;;;;GASG;AACH,MAAM,CAAC,KAAK,UAAU,eAAe,CAAC,aAA4B;IAKhE,IAAI,cAAc,EAAE,CAAC;QACnB,MAAM,IAAI,KAAK,CAAC,uBAAuB,CAAC,CAAA;IAC1C,CAAC;IAED,oCAAoC;IACpC,IAAI,CAAC,mBAAmB,EAAE,CAAC;QACzB,gBAAgB,EAAE,CAAA;IACpB,CAAC;IAED,MAAM,EAAE,MAAM,EAAE,iBAAiB,GAAG,YAAY,EAAE,eAAe,EAAE,GAAG,aAAa,CAAA;IAEnF,mCAAmC;IACnC,MAAM,aAAa,GAAyB;QAC1C,OAAO,EAAE,IAAI;QACb,MAAM;QACN,iBAAiB;KAClB,CAAA;IAED,kEAAkE;IAClE,IAAI,eAAe,KAAK,SAAS,EAAE,CAAC;QAClC,aAAa,CAAC,eAAe,GAAG,eAAe,CAAA;IACjD,CAAC;IAED,oCAAoC;IACpC,MAAM,SAAS,GAAG,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAA;IAC5C,IAAI,SAAS,EAAE,CAAC;QACd,SAAS,CAAC,KAAK,GAAG,IAAI,CAAA;QACtB,sDAAsD;QACtD,MAAM,SAAS,CAAC,QAAQ,CAAC,UAAU,CAAC,aAAa,CAAC,CAAA;QAClD,OAAO;YACL,QAAQ,EAAE,SAAS,CAAC,QAAQ;YAC5B,OAAO,EAAE,KAAK,IAAI,EAAE;gBAClB,SAAS,CAAC,KAAK,GAAG,KAAK,CAAA;gBACvB,SAAS,CAAC,QAAQ,GAAG,IAAI,CAAC,GAAG,EAAE,CAAA;YACjC,CAAC;YACD,QAAQ,EAAE,IAAI;SACf,CAAA;IACH,CAAC;IAED,uCAAuC;IACvC,IAAI,IAAI,CAAC,MAAM,GAAG,UAAU,CAAC,IAAI,EAAE,CAAC;QAClC,MAAM,SAAS,GAAG,MAAM,iBAAiB,EAAE,CAAA;QAC3C,MAAM,QAAQ,GAAG,IAAI,SAAS,CAAC,aAAa,CAAC,CAAA;QAC7C,MAAM,MAAM,GAAmB;YAC7B,QAAQ;YACR,KAAK,EAAE,IAAI;YACX,QAAQ,EAAE,IAAI,CAAC,GAAG,EAAE;YACpB,SAAS,EAAE,IAAI,CAAC,GAAG,EAAE;SACtB,CAAA;QACD,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,CAAA;QACjB,OAAO;YACL,QAAQ;YACR,OAAO,EAAE,KAAK,IAAI,EAAE;gBAClB,MAAM,CAAC,KAAK,GAAG,KAAK,CAAA;gBACpB,MAAM,CAAC,QAAQ,GAAG,IAAI,CAAC,GAAG,EAAE,CAAA;YAC9B,CAAC;YACD,QAAQ,EAAE,IAAI;SACf,CAAA;IACH,CAAC;IAED,6CAA6C;IAC7C,MAAM,SAAS,GAAG,MAAM,iBAAiB,EAAE,CAAA;IAC3C,MAAM,YAAY,GAAG,IAAI,SAAS,CAAC,aAAa,CAAC,CAAA;IACjD,OAAO;QACL,QAAQ,EAAE,YAAY;QACtB,OAAO,EAAE,KAAK,IAAI,EAAE;YAClB,yCAAyC;YACzC,MAAM,YAAY,CAAC,OAAO,EAAE,CAAA;QAC9B,CAAC;QACD,QAAQ,EAAE,KAAK;KAChB,CAAA;AACH,CAAC;AAED;;;;;;;;;;;;GAYG;AACH,MAAM,CAAC,KAAK,UAAU,QAAQ,CAAC,KAAc;IAC3C,MAAM,WAAW,GAAG,KAAK,IAAI,UAAU,CAAC,IAAI,CAAA;IAC5C,MAAM,QAAQ,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,WAAW,GAAG,IAAI,CAAC,MAAM,CAAC,CAAA;IAEvD,MAAM,QAAQ,GAAoB,EAAE,CAAA;IACpC,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,QAAQ,EAAE,CAAC,EAAE,EAAE,CAAC;QAClC,QAAQ,CAAC,IAAI,CACX,CAAC,KAAK,IAAI,EAAE;YACV,MAAM,QAAQ,GAAG,MAAM,cAAc,EAAE,CAAA;YACvC,IAAI,CAAC,IAAI,CAAC;gBACR,QAAQ;gBACR,KAAK,EAAE,KAAK;gBACZ,QAAQ,EAAE,IAAI,CAAC,GAAG,EAAE;gBACpB,SAAS,EAAE,IAAI,CAAC,GAAG,EAAE;aACtB,CAAC,CAAA;QACJ,CAAC,CAAC,EAAE,CACL,CAAA;IACH,CAAC;IAED,MAAM,OAAO,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAA;IAE3B,4CAA4C;IAC5C,IAAI,CAAC,mBAAmB,EAAE,CAAC;QACzB,gBAAgB,EAAE,CAAA;IACpB,CAAC;AACH,CAAC;AAED;;;;;;;;;;;;;GAaG;AACH,MAAM,CAAC,KAAK,UAAU,WAAW;IAC/B,cAAc,GAAG,IAAI,CAAA;IAErB,IAAI,mBAAmB,EAAE,CAAC;QACxB,aAAa,CAAC,mBAAmB,CAAC,CAAA;QAClC,mBAAmB,GAAG,IAAI,CAAA;IAC5B,CAAC;IAED,MAAM,SAAS,GAAG,CAAC,GAAG,IAAI,CAAC,CAAA;IAC3B,IAAI,GAAG,EAAE,CAAA;IAET,MAAM,OAAO,CAAC,GAAG,CACf,SAAS,CAAC,GAAG,CAAC,KAAK,EAAE,IAAI,EAAE,EAAE;QAC3B,IAAI,CAAC;YACH,MAAM,IAAI,CAAC,QAAQ,CAAC,OAAO,EAAE,CAAA;QAC/B,CAAC;QAAC,MAAM,CAAC;YACP,yBAAyB;QAC3B,CAAC;IACH,CAAC,CAAC,CACH,CAAA;IAED,cAAc,GAAG,KAAK,CAAA;AACxB,CAAC;AAED;;GAEG;AACH,MAAM,CAAC,KAAK,UAAU,SAAS;IAC7B,MAAM,WAAW,EAAE,CAAA;IACnB,UAAU,GAAG;QACX,IAAI,EAAE,CAAC;QACP,WAAW,EAAE,KAAK;KACnB,CAAA;IACD,cAAc,GAAG,IAAI,CAAA;AACvB,CAAC;AAED,mCAAmC;AACnC,IAAI,OAAO,OAAO,KAAK,WAAW,EAAE,CAAC;IACnC,MAAM,OAAO,GAAG,GAAG,EAAE;QACnB,cAAc,GAAG,IAAI,CAAA;QACrB,IAAI,mBAAmB,EAAE,CAAC;YACxB,aAAa,CAAC,mBAAmB,CAAC,CAAA;QACpC,CAAC;QACD,6CAA6C;QAC7C,KAAK,MAAM,IAAI,IAAI,IAAI,EAAE,CAAC;YACxB,IAAI,CAAC;gBACH,yCAAyC;gBACzC,IAAI,CAAC,QAAQ,CAAC,OAAO,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,GAAE,CAAC,CAAC,CAAA;YACzC,CAAC;YAAC,MAAM,CAAC;gBACP,gCAAgC;YAClC,CAAC;QACH,CAAC;QACD,IAAI,GAAG,EAAE,CAAA;IACX,CAAC,CAAA;IAED,OAAO,CAAC,EAAE,CAAC,MAAM,EAAE,OAAO,CAAC,CAAA;IAC3B,OAAO,CAAC,EAAE,CAAC,QAAQ,EAAE,GAAG,EAAE;QACxB,OAAO,EAAE,CAAA;QACT,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAA;IACjB,CAAC,CAAC,CAAA;IACF,OAAO,CAAC,EAAE,CAAC,SAAS,EAAE,GAAG,EAAE;QACzB,OAAO,EAAE,CAAA;QACT,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAA;IACjB,CAAC,CAAC,CAAA;AACJ,CAAC"}

package/dist/node.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"node.d.ts","sourceRoot":"","sources":["../src/node.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,OAAO,KAAK,EAAE,eAAe,EAAE,cAAc,EAAgB,UAAU,EAAE,MAAM,YAAY,CAAA;AAmC3F;;GAEG;AACH,wBAAsB,QAAQ,CAC5B,OAAO,EAAE,eAAe,EACxB,GAAG,CAAC,EAAE,UAAU,GACf,OAAO,CAAC,cAAc,CAAC,CAkCzB;AA6GD;;GAEG;AACH,wBAAgB,eAAe,CAAC,GAAG,CAAC,EAAE,UAAU,IACtC,SAAS,eAAe,6BACjC;AAGD,YAAY,EAAE,eAAe,EAAE,cAAc,EAAE,UAAU,EAAE,MAAM,YAAY,CAAA"}
+{"version":3,"file":"node.d.ts","sourceRoot":"","sources":["../src/node.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,OAAO,KAAK,EAAE,eAAe,EAAE,cAAc,EAAgB,UAAU,EAAe,MAAM,YAAY,CAAA;AAoCxG;;GAEG;AACH,wBAAsB,QAAQ,CAC5B,OAAO,EAAE,eAAe,EACxB,GAAG,CAAC,EAAE,UAAU,GACf,OAAO,CAAC,cAAc,CAAC,CAmCzB;AAkJD;;GAEG;AACH,wBAAgB,eAAe,CAAC,GAAG,CAAC,EAAE,UAAU,IACtC,SAAS,eAAe,6BACjC;AAGD,YAAY,EAAE,eAAe,EAAE,cAAc,EAAE,UAAU,EAAE,MAAM,YAAY,CAAA"}

package/dist/node.js

@@ -4,7 +4,8 @@
  * Uses Cloudflare worker_loaders when available, falls back to Miniflare for local dev.
  * For Workers-only builds, import from 'ai-evaluate' instead.
  */
-import { generateWorkerCode, generateDevWorkerCode } from './worker-template.js';
+import { generateWorkerCode, generateDevWorkerCode } from './worker-template/index.js';
+import { isDomainAllowed, normalizeImports } from './shared.js';
 /**
  * Check if code contains JSX syntax that needs transformation
  */
@@ -52,6 +53,7 @@ export async function evaluate(options, env) {
             module: transformedModule,
             tests: transformedTests,
             script: transformedScript,
+            imports: normalizeImports(options.imports),
         };
         // Use worker_loaders if available (Cloudflare Workers)
         // Check lowercase first (preferred), then legacy uppercase
@@ -103,6 +105,23 @@ async function evaluateWithWorkerLoader(options, loader, testService, start) {
         duration: Date.now() - start,
     };
 }
+/**
+ * Determine if network access should be blocked based on fetch options
+ * fetch: false | null -> block
+ */
+function shouldBlockNetwork(options) {
+    return options.fetch === false || options.fetch === null;
+}
+/**
+ * Get allowlist domains if fetch is an array
+ * fetch: string[] -> allowlist
+ */
+function getAllowlistDomains(options) {
+    if (Array.isArray(options.fetch)) {
+        return options.fetch;
+    }
+    return null;
+}
 /**
  * Evaluate using Miniflare (for Node.js/development)
  */
@@ -116,19 +135,32 @@ async function evaluateWithMiniflare(options, start) {
         imports: options.imports,
         fetch: options.fetch, // Pass fetch option to worker template
     });
-    // Block outbound network requests at Miniflare level when fetch: null
-    // This complements the globalThis.fetch override in the worker template
-    const blockNetwork = options.fetch === null;
+    // Determine outbound service configuration based on fetch option
+    const blockNetwork = shouldBlockNetwork(options);
+    const allowlistDomains = getAllowlistDomains(options);
+    let outboundService;
+    if (blockNetwork) {
+        outboundService = () => {
+            throw new Error('Network access blocked: fetch is disabled in this sandbox');
+        };
+    }
+    else if (allowlistDomains) {
+        outboundService = (request) => {
+            const url = request.url;
+            if (!isDomainAllowed(url, allowlistDomains)) {
+                const hostname = new URL(url).hostname;
+                throw new Error(`Network access blocked: domain not in allowlist. Attempted: ${hostname}`);
+            }
+            // Allow the request by returning a fetched response
+            return fetch(request);
+        };
+    }
     const mf = new Miniflare({
         modules: true,
         script: workerCode,
         compatibilityDate: '2026-01-01',
-        // Block all outbound fetch/connect when network is disabled
-        ...(blockNetwork && {
-            outboundService: () => {
-                throw new Error('Network access blocked: fetch is disabled in this sandbox');
-            },
-        }),
+        // Configure outbound service based on fetch mode
+        ...(outboundService && { outboundService }),
     });
     try {
         const timeout = options.timeout || 5000;

package/dist/node.js.map

@@ -1 +1 @@
-{"version":3,"file":"node.js","sourceRoot":"","sources":["../src/node.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAGH,OAAO,EAAE,kBAAkB,EAAE,qBAAqB,EAAE,MAAM,sBAAsB,CAAA;AAEhF;;GAEG;AACH,SAAS,WAAW,CAAC,IAAY;IAC/B,IAAI,CAAC,IAAI;QAAE,OAAO,KAAK,CAAA;IACvB,MAAM,UAAU,GAAG,yDAAyD,CAAA;IAC5E,MAAM,gBAAgB,GAAG,oCAAoC,CAAA;IAC7D,OAAO,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,gBAAgB,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;AAC7D,CAAC;AAED;;GAEG;AACH,KAAK,UAAU,YAAY,CAAC,IAAY;IACtC,IAAI,CAAC,IAAI,IAAI,CAAC,WAAW,CAAC,IAAI,CAAC;QAAE,OAAO,IAAI,CAAA;IAE5C,IAAI,CAAC;QACH,MAAM,EAAE,SAAS,EAAE,GAAG,MAAM,MAAM,CAAC,SAAS,CAAC,CAAA;QAC7C,MAAM,MAAM,GAAG,MAAM,SAAS,CAAC,IAAI,EAAE;YACnC,MAAM,EAAE,KAAK;YACb,UAAU,EAAE,GAAG;YACf,WAAW,EAAE,UAAU;YACvB,MAAM,EAAE,QAAQ;YAChB,MAAM,EAAE,KAAK;SACd,CAAC,CAAA;QACF,OAAO,MAAM,CAAC,IAAI,CAAA;IACpB,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,OAAO,CAAC,KAAK,CAAC,uBAAuB,EAAE,KAAK,CAAC,CAAA;QAC7C,OAAO,IAAI,CAAA;IACb,CAAC;AACH,CAAC;AAED;;GAEG;AACH,MAAM,CAAC,KAAK,UAAU,QAAQ,CAC5B,OAAwB,EACxB,GAAgB;IAEhB,MAAM,KAAK,GAAG,IAAI,CAAC,GAAG,EAAE,CAAA;IAExB,IAAI,CAAC;QACH,+DAA+D;QAC/D,MAAM,iBAAiB,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,YAAY,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,SAAS,CAAA;QACzF,MAAM,gBAAgB,GAAG,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,YAAY,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,SAAS,CAAA;QACtF,MAAM,iBAAiB,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,YAAY,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,SAAS,CAAA;QAEzF,MAAM,kBAAkB,GAAoB;YAC1C,GAAG,OAAO;YACV,MAAM,EAAE,iBAAiB;YACzB,KAAK,EAAE,gBAAgB;YACvB,MAAM,EAAE,iBAAiB;SAC1B,CAAA;QAED,uDAAuD;QACvD,2DAA2D;QAC3D,MAAM,MAAM,GAAG,GAAG,EAAE,MAAM,IAAI,GAAG,EAAE,MAAM,CAAA;QACzC,MAAM,WAAW,GAAG,GAAG,EAAE,IAAI,IAAI,GAAG,EAAE,IAAI,CAAA;QAC1C,IAAI,MAAM,IAAI,WAAW,EAAE,CAAC;YAC1B,OAAO,MAAM,wBAAwB,CAAC,kBAAkB,EAAE,MAAM,EAAE,WAAW,EAAE,KAAK,CAAC,CAAA;QACvF,CAAC;QAED,qDAAqD;QACrD,OAAO,MAAM,qBAAqB,CAAC,kBAAkB,EAAE,KAAK,CAAC,CAAA;IAC/D,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,OAAO;YACL,OAAO,EAAE,KAAK;YACd,IAAI,EAAE,EAAE;YACR,KAAK,EAAE,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC;YAC7D,QAAQ,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,KAAK;SAC7B,CAAA;IACH,CAAC;AACH,CAAC;AAED;;GAEG;AACH,KAAK,UAAU,wBAAwB,CACrC,OAAwB,EACxB,MAAoB,EACpB,WAAoB,EACpB,KAAa;IAEb,MAAM,UAAU,GAAG,kBAAkB,CAAC;QACpC,MAAM,EAAE,OAAO,CAAC,MAAM;QACtB,KAAK,EAAE,OAAO,CAAC,KAAK;QACpB,MAAM,EAAE,OAAO,CAAC,MAAM;QACtB,GAAG,EAAE,OAAO,CAAC,GAAG;QAChB,OAAO,EAAE,OAAO,CAAC,OAAO;KACzB,CAAC,CAAA;IACF,MAAM,EAAE,GAAG,WAAW,IAAI,CAAC,GAAG,EAAE,IAAI,IAAI,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,CAAA;IAEzE,MAAM,MAAM,GAAG,MAAM,CAAC,GAAG,CAAC,EAAE,EAAE,KAAK,IAAI,EAAE,CAAC,CAAC;QACzC,UAAU,EAAE,WAAW;QACvB,OAAO,EAAE;YACP,WAAW,EAAE,UAAU;SACxB;QACD,iBAAiB,EAAE,YAAY;QAC/B,cAAc,EAAE,OAAO,CAAC,KAAK,KAAK,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS;QACzD,QAAQ,EAAE;YACR,IAAI,EAAE,WAAW;SAClB;KACF,CAAC,CAAC,CAAA;IAEH,MAAM,UAAU,GAAG,MAAM,CAAC,aAAa,EAAE,CAAA;IACzC,MAAM,QAAQ,GAAG,MAAM,UAAU,CAAC,KAAK,CAAC,IAAI,OAAO,CAAC,wBAAwB,CAAC,CAAC,CAAA;IAC9E,MAAM,MAAM,GAAG,CAAC,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAmB,CAAA;IAExD,OAAO;QACL,GAAG,MAAM;QACT,QAAQ,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,KAAK;KAC7B,CAAA;AACH,CAAC;AAED;;GAEG;AACH,KAAK,UAAU,qBAAqB,CAClC,OAAwB,EACxB,KAAa;IAEb,MAAM,EAAE,SAAS,EAAE,GAAG,MAAM,MAAM,CAAC,WAAW,CAAC,CAAA;IAE/C,MAAM,UAAU,GAAG,qBAAqB,CAAC;QACvC,MAAM,EAAE,OAAO,CAAC,MAAM;QACtB,KAAK,EAAE,OAAO,CAAC,KAAK;QACpB,MAAM,EAAE,OAAO,CAAC,MAAM;QACtB,GAAG,EAAE,OAAO,CAAC,GAAG;QAChB,OAAO,EAAE,OAAO,CAAC,OAAO;QACxB,KAAK,EAAE,OAAO,CAAC,KAAK,EAAE,uCAAuC;KAC9D,CAAC,CAAA;IAEF,sEAAsE;IACtE,wEAAwE;IACxE,MAAM,YAAY,GAAG,OAAO,CAAC,KAAK,KAAK,IAAI,CAAA;IAE3C,MAAM,EAAE,GAAG,IAAI,SAAS,CAAC;QACvB,OAAO,EAAE,IAAI;QACb,MAAM,EAAE,UAAU;QAClB,iBAAiB,EAAE,YAAY;QAC/B,4DAA4D;QAC5D,GAAG,CAAC,YAAY,IAAI;YAClB,eAAe,EAAE,GAAG,EAAE;gBACpB,MAAM,IAAI,KAAK,CAAC,2DAA2D,CAAC,CAAA;YAC9E,CAAC;SACF,CAAC;KACH,CAAC,CAAA;IAEF,IAAI,CAAC;QACH,MAAM,OAAO,GAAG,OAAO,CAAC,OAAO,IAAI,IAAI,CAAA;QACvC,MAAM,UAAU,GAAG,IAAI,eAAe,EAAE,CAAA;QACxC,MAAM,SAAS,GAAG,UAAU,CAAC,GAAG,EAAE,CAAC,UAAU,CAAC,KAAK,EAAE,EAAE,OAAO,CAAC,CAAA;QAE/D,IAAI,CAAC;YACH,MAAM,QAAQ,GAAG,MAAM,EAAE,CAAC,aAAa,CAAC,wBAAwB,EAAE;gBAChE,MAAM,EAAE,UAAU,CAAC,MAAM;aAC1B,CAAC,CAAA;YACF,YAAY,CAAC,SAAS,CAAC,CAAA;YACvB,MAAM,MAAM,GAAG,CAAC,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAmB,CAAA;YAExD,OAAO;gBACL,GAAG,MAAM;gBACT,QAAQ,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,KAAK;aAC7B,CAAA;QACH,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,YAAY,CAAC,SAAS,CAAC,CAAA;YACvB,IAAK,GAAa,CAAC,IAAI,KAAK,YAAY,EAAE,CAAC;gBACzC,OAAO;oBACL,OAAO,EAAE,KAAK;oBACd,IAAI,EAAE,EAAE;oBACR,KAAK,EAAE,sCAAsC,OAAO,IAAI;oBACxD,QAAQ,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,KAAK;iBAC7B,CAAA;YACH,CAAC;YACD,MAAM,GAAG,CAAA;QACX,CAAC;IACH,CAAC;YAAS,CAAC;QACT,MAAM,EAAE,CAAC,OAAO,EAAE,CAAA;IACpB,CAAC;AACH,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,eAAe,CAAC,GAAgB;IAC9C,OAAO,CAAC,OAAwB,EAAE,EAAE,CAAC,QAAQ,CAAC,OAAO,EAAE,GAAG,CAAC,CAAA;AAC7D,CAAC"}
+{"version":3,"file":"node.js","sourceRoot":"","sources":["../src/node.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAGH,OAAO,EAAE,kBAAkB,EAAE,qBAAqB,EAAE,MAAM,4BAA4B,CAAA;AACtF,OAAO,EAAE,eAAe,EAAE,gBAAgB,EAAE,MAAM,aAAa,CAAA;AAE/D;;GAEG;AACH,SAAS,WAAW,CAAC,IAAY;IAC/B,IAAI,CAAC,IAAI;QAAE,OAAO,KAAK,CAAA;IACvB,MAAM,UAAU,GAAG,yDAAyD,CAAA;IAC5E,MAAM,gBAAgB,GAAG,oCAAoC,CAAA;IAC7D,OAAO,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,gBAAgB,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;AAC7D,CAAC;AAED;;GAEG;AACH,KAAK,UAAU,YAAY,CAAC,IAAY;IACtC,IAAI,CAAC,IAAI,IAAI,CAAC,WAAW,CAAC,IAAI,CAAC;QAAE,OAAO,IAAI,CAAA;IAE5C,IAAI,CAAC;QACH,MAAM,EAAE,SAAS,EAAE,GAAG,MAAM,MAAM,CAAC,SAAS,CAAC,CAAA;QAC7C,MAAM,MAAM,GAAG,MAAM,SAAS,CAAC,IAAI,EAAE;YACnC,MAAM,EAAE,KAAK;YACb,UAAU,EAAE,GAAG;YACf,WAAW,EAAE,UAAU;YACvB,MAAM,EAAE,QAAQ;YAChB,MAAM,EAAE,KAAK;SACd,CAAC,CAAA;QACF,OAAO,MAAM,CAAC,IAAI,CAAA;IACpB,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,OAAO,CAAC,KAAK,CAAC,uBAAuB,EAAE,KAAK,CAAC,CAAA;QAC7C,OAAO,IAAI,CAAA;IACb,CAAC;AACH,CAAC;AAED;;GAEG;AACH,MAAM,CAAC,KAAK,UAAU,QAAQ,CAC5B,OAAwB,EACxB,GAAgB;IAEhB,MAAM,KAAK,GAAG,IAAI,CAAC,GAAG,EAAE,CAAA;IAExB,IAAI,CAAC;QACH,+DAA+D;QAC/D,MAAM,iBAAiB,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,YAAY,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,SAAS,CAAA;QACzF,MAAM,gBAAgB,GAAG,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,YAAY,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,SAAS,CAAA;QACtF,MAAM,iBAAiB,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,YAAY,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,SAAS,CAAA;QAEzF,MAAM,kBAAkB,GAAoB;YAC1C,GAAG,OAAO;YACV,MAAM,EAAE,iBAAiB;YACzB,KAAK,EAAE,gBAAgB;YACvB,MAAM,EAAE,iBAAiB;YACzB,OAAO,EAAE,gBAAgB,CAAC,OAAO,CAAC,OAAO,CAAC;SAC3C,CAAA;QAED,uDAAuD;QACvD,2DAA2D;QAC3D,MAAM,MAAM,GAAG,GAAG,EAAE,MAAM,IAAI,GAAG,EAAE,MAAM,CAAA;QACzC,MAAM,WAAW,GAAG,GAAG,EAAE,IAAI,IAAI,GAAG,EAAE,IAAI,CAAA;QAC1C,IAAI,MAAM,IAAI,WAAW,EAAE,CAAC;YAC1B,OAAO,MAAM,wBAAwB,CAAC,kBAAkB,EAAE,MAAM,EAAE,WAAW,EAAE,KAAK,CAAC,CAAA;QACvF,CAAC;QAED,qDAAqD;QACrD,OAAO,MAAM,qBAAqB,CAAC,kBAAkB,EAAE,KAAK,CAAC,CAAA;IAC/D,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,OAAO;YACL,OAAO,EAAE,KAAK;YACd,IAAI,EAAE,EAAE;YACR,KAAK,EAAE,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC;YAC7D,QAAQ,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,KAAK;SAC7B,CAAA;IACH,CAAC;AACH,CAAC;AAED;;GAEG;AACH,KAAK,UAAU,wBAAwB,CACrC,OAAwB,EACxB,MAAoB,EACpB,WAAoB,EACpB,KAAa;IAEb,MAAM,UAAU,GAAG,kBAAkB,CAAC;QACpC,MAAM,EAAE,OAAO,CAAC,MAAM;QACtB,KAAK,EAAE,OAAO,CAAC,KAAK;QACpB,MAAM,EAAE,OAAO,CAAC,MAAM;QACtB,GAAG,EAAE,OAAO,CAAC,GAAG;QAChB,OAAO,EAAE,OAAO,CAAC,OAAO;KACzB,CAAC,CAAA;IACF,MAAM,EAAE,GAAG,WAAW,IAAI,CAAC,GAAG,EAAE,IAAI,IAAI,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,CAAA;IAEzE,MAAM,MAAM,GAAG,MAAM,CAAC,GAAG,CAAC,EAAE,EAAE,KAAK,IAAI,EAAE,CAAC,CAAC;QACzC,UAAU,EAAE,WAAW;QACvB,OAAO,EAAE;YACP,WAAW,EAAE,UAAU;SACxB;QACD,iBAAiB,EAAE,YAAY;QAC/B,cAAc,EAAE,OAAO,CAAC,KAAK,KAAK,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS;QACzD,QAAQ,EAAE;YACR,IAAI,EAAE,WAAW;SAClB;KACF,CAAC,CAAC,CAAA;IAEH,MAAM,UAAU,GAAG,MAAM,CAAC,aAAa,EAAE,CAAA;IACzC,MAAM,QAAQ,GAAG,MAAM,UAAU,CAAC,KAAK,CAAC,IAAI,OAAO,CAAC,wBAAwB,CAAC,CAAC,CAAA;IAC9E,MAAM,MAAM,GAAG,CAAC,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAmB,CAAA;IAExD,OAAO;QACL,GAAG,MAAM;QACT,QAAQ,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,KAAK;KAC7B,CAAA;AACH,CAAC;AAED;;;GAGG;AACH,SAAS,kBAAkB,CAAC,OAAwB;IAClD,OAAO,OAAO,CAAC,KAAK,KAAK,KAAK,IAAI,OAAO,CAAC,KAAK,KAAK,IAAI,CAAA;AAC1D,CAAC;AAED;;;GAGG;AACH,SAAS,mBAAmB,CAAC,OAAwB;IACnD,IAAI,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;QACjC,OAAO,OAAO,CAAC,KAAK,CAAA;IACtB,CAAC;IACD,OAAO,IAAI,CAAA;AACb,CAAC;AAED;;GAEG;AACH,KAAK,UAAU,qBAAqB,CAClC,OAAwB,EACxB,KAAa;IAEb,MAAM,EAAE,SAAS,EAAE,GAAG,MAAM,MAAM,CAAC,WAAW,CAAC,CAAA;IAE/C,MAAM,UAAU,GAAG,qBAAqB,CAAC;QACvC,MAAM,EAAE,OAAO,CAAC,MAAM;QACtB,KAAK,EAAE,OAAO,CAAC,KAAK;QACpB,MAAM,EAAE,OAAO,CAAC,MAAM;QACtB,GAAG,EAAE,OAAO,CAAC,GAAG;QAChB,OAAO,EAAE,OAAO,CAAC,OAAO;QACxB,KAAK,EAAE,OAAO,CAAC,KAAK,EAAE,uCAAuC;KAC9D,CAAC,CAAA;IAEF,iEAAiE;IACjE,MAAM,YAAY,GAAG,kBAAkB,CAAC,OAAO,CAAC,CAAA;IAChD,MAAM,gBAAgB,GAAG,mBAAmB,CAAC,OAAO,CAAC,CAAA;IAOrD,IAAI,eAA8C,CAAA;IAClD,IAAI,YAAY,EAAE,CAAC;QACjB,eAAe,GAAG,GAAG,EAAE;YACrB,MAAM,IAAI,KAAK,CAAC,2DAA2D,CAAC,CAAA;QAC9E,CAAC,CAAA;IACH,CAAC;SAAM,IAAI,gBAAgB,EAAE,CAAC;QAC5B,eAAe,GAAG,CAAC,OAAgB,EAAE,EAAE;YACrC,MAAM,GAAG,GAAG,OAAO,CAAC,GAAG,CAAA;YACvB,IAAI,CAAC,eAAe,CAAC,GAAG,EAAE,gBAAgB,CAAC,EAAE,CAAC;gBAC5C,MAAM,QAAQ,GAAG,IAAI,GAAG,CAAC,GAAG,CAAC,CAAC,QAAQ,CAAA;gBACtC,MAAM,IAAI,KAAK,CAAC,+DAA+D,QAAQ,EAAE,CAAC,CAAA;YAC5F,CAAC;YACD,oDAAoD;YACpD,OAAO,KAAK,CAAC,OAAO,CAAC,CAAA;QACvB,CAAC,CAAA;IACH,CAAC;IAED,MAAM,EAAE,GAAG,IAAI,SAAS,CAAC;QACvB,OAAO,EAAE,IAAI;QACb,MAAM,EAAE,UAAU;QAClB,iBAAiB,EAAE,YAAY;QAC/B,iDAAiD;QACjD,GAAG,CAAC,eAAe,IAAI,EAAE,eAAe,EAAE,CAAC;KAC5C,CAAC,CAAA;IAEF,IAAI,CAAC;QACH,MAAM,OAAO,GAAG,OAAO,CAAC,OAAO,IAAI,IAAI,CAAA;QACvC,MAAM,UAAU,GAAG,IAAI,eAAe,EAAE,CAAA;QACxC,MAAM,SAAS,GAAG,UAAU,CAAC,GAAG,EAAE,CAAC,UAAU,CAAC,KAAK,EAAE,EAAE,OAAO,CAAC,CAAA;QAE/D,IAAI,CAAC;YACH,MAAM,QAAQ,GAAG,MAAM,EAAE,CAAC,aAAa,CAAC,wBAAwB,EAAE;gBAChE,MAAM,EAAE,UAAU,CAAC,MAAM;aAC1B,CAAC,CAAA;YACF,YAAY,CAAC,SAAS,CAAC,CAAA;YACvB,MAAM,MAAM,GAAG,CAAC,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAmB,CAAA;YAExD,OAAO;gBACL,GAAG,MAAM;gBACT,QAAQ,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,KAAK;aAC7B,CAAA;QACH,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,YAAY,CAAC,SAAS,CAAC,CAAA;YACvB,IAAK,GAAa,CAAC,IAAI,KAAK,YAAY,EAAE,CAAC;gBACzC,OAAO;oBACL,OAAO,EAAE,KAAK;oBACd,IAAI,EAAE,EAAE;oBACR,KAAK,EAAE,sCAAsC,OAAO,IAAI;oBACxD,QAAQ,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,KAAK;iBAC7B,CAAA;YACH,CAAC;YACD,MAAM,GAAG,CAAA;QACX,CAAC;IACH,CAAC;YAAS,CAAC;QACT,MAAM,EAAE,CAAC,OAAO,EAAE,CAAA;IACpB,CAAC;AACH,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,eAAe,CAAC,GAAgB;IAC9C,OAAO,CAAC,OAAwB,EAAE,EAAE,CAAC,QAAQ,CAAC,OAAO,EAAE,GAAG,CAAC,CAAA;AAC7D,CAAC"}

package/dist/shared.d.ts

@@ -0,0 +1,66 @@
+/**
+ * Shared utilities for ai-evaluate
+ *
+ * Contains constants and helper functions used by both
+ * evaluate.ts (Workers) and node.ts (Node.js/Miniflare)
+ */
+import type { EvaluateResult } from './types.js';
+/**
+ * Compatibility date for dynamic workers (2026)
+ */
+export declare const COMPATIBILITY_DATE = "2026-01-01";
+/**
+ * Normalize an import specifier to a full URL
+ *
+ * Supports:
+ * - Full URLs: https://esm.sh/lodash@4.17.21 (unchanged)
+ * - Bare package names: lodash -> https://esm.sh/lodash
+ * - Package with version: lodash@4.17.21 -> https://esm.sh/lodash@4.17.21
+ * - Scoped packages: @scope/pkg -> https://esm.sh/@scope/pkg
+ */
+export declare function normalizeImport(specifier: string): string;
+/**
+ * Normalize an array of import specifiers
+ */
+export declare function normalizeImports(imports: string[] | undefined): string[] | undefined;
+/**
+ * Extract package name from import specifier for variable naming
+ * Supports: lodash, lodash@4.17.21, @scope/pkg, https://esm.sh/lodash
+ */
+export declare function extractPackageName(specifier: string, index: number): string;
+/**
+ * Default sandbox URL for worker fetch requests
+ */
+export declare const SANDBOX_URL = "http://sandbox/execute";
+/**
+ * Generate a unique sandbox worker ID
+ */
+export declare const generateSandboxId: () => string;
+/**
+ * Create an error result with consistent structure
+ */
+export declare function createErrorResult(error: unknown, start: number): EvaluateResult;
+/**
+ * Process a result from worker execution, adding duration
+ */
+export declare function processResult(result: EvaluateResult, start: number): EvaluateResult;
+/**
+ * Check if a domain matches a pattern (supports wildcards)
+ * @param domain - The domain to check (e.g., 'api.example.com')
+ * @param pattern - The pattern to match against (e.g., '*.example.com' or 'api.example.com')
+ * @returns true if the domain matches the pattern
+ */
+export declare function matchesDomainPattern(domain: string, pattern: string): boolean;
+/**
+ * Check if a URL's domain is in the allowed list
+ * @param url - The URL to check
+ * @param allowedDomains - List of allowed domains (supports wildcards like '*.example.com')
+ * @returns true if the URL's domain is allowed
+ */
+export declare function isDomainAllowed(url: string, allowedDomains: string[]): boolean;
+/**
+ * Generate JavaScript code for domain checking in workers
+ * This is embedded into the worker source code
+ */
+export declare function generateDomainCheckCode(allowedDomains: string[]): string;
+//# sourceMappingURL=shared.d.ts.map

package/dist/shared.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"shared.d.ts","sourceRoot":"","sources":["../src/shared.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,YAAY,CAAA;AAEhD;;GAEG;AACH,eAAO,MAAM,kBAAkB,eAAe,CAAA;AAE9C;;;;;;;;GAQG;AACH,wBAAgB,eAAe,CAAC,SAAS,EAAE,MAAM,GAAG,MAAM,CAQzD;AAED;;GAEG;AACH,wBAAgB,gBAAgB,CAAC,OAAO,EAAE,MAAM,EAAE,GAAG,SAAS,GAAG,MAAM,EAAE,GAAG,SAAS,CAGpF;AAED;;;GAGG;AACH,wBAAgB,kBAAkB,CAAC,SAAS,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,GAAG,MAAM,CAW3E;AAED;;GAEG;AACH,eAAO,MAAM,WAAW,2BAA2B,CAAA;AAEnD;;GAEG;AACH,eAAO,MAAM,iBAAiB,QAAO,MAC2B,CAAA;AAEhE;;GAEG;AACH,wBAAgB,iBAAiB,CAAC,KAAK,EAAE,OAAO,EAAE,KAAK,EAAE,MAAM,GAAG,cAAc,CAO/E;AAED;;GAEG;AACH,wBAAgB,aAAa,CAAC,MAAM,EAAE,cAAc,EAAE,KAAK,EAAE,MAAM,GAAG,cAAc,CAKnF;AAED;;;;;GAKG;AACH,wBAAgB,oBAAoB,CAAC,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,GAAG,OAAO,CAoB7E;AAED;;;;;GAKG;AACH,wBAAgB,eAAe,CAAC,GAAG,EAAE,MAAM,EAAE,cAAc,EAAE,MAAM,EAAE,GAAG,OAAO,CAgB9E;AAED;;;GAGG;AACH,wBAAgB,uBAAuB,CAAC,cAAc,EAAE,MAAM,EAAE,GAAG,MAAM,CAsCxE"}

package/dist/shared.js

@@ -0,0 +1,169 @@
+/**
+ * Shared utilities for ai-evaluate
+ *
+ * Contains constants and helper functions used by both
+ * evaluate.ts (Workers) and node.ts (Node.js/Miniflare)
+ */
+/**
+ * Compatibility date for dynamic workers (2026)
+ */
+export const COMPATIBILITY_DATE = '2026-01-01';
+/**
+ * Normalize an import specifier to a full URL
+ *
+ * Supports:
+ * - Full URLs: https://esm.sh/lodash@4.17.21 (unchanged)
+ * - Bare package names: lodash -> https://esm.sh/lodash
+ * - Package with version: lodash@4.17.21 -> https://esm.sh/lodash@4.17.21
+ * - Scoped packages: @scope/pkg -> https://esm.sh/@scope/pkg
+ */
+export function normalizeImport(specifier) {
+    // Already a URL - return as-is
+    if (specifier.includes('://')) {
+        return specifier;
+    }
+    // Bare package name or scoped package - prepend esm.sh
+    return `https://esm.sh/${specifier}`;
+}
+/**
+ * Normalize an array of import specifiers
+ */
+export function normalizeImports(imports) {
+    if (!imports || imports.length === 0)
+        return imports;
+    return imports.map(normalizeImport);
+}
+/**
+ * Extract package name from import specifier for variable naming
+ * Supports: lodash, lodash@4.17.21, @scope/pkg, https://esm.sh/lodash
+ */
+export function extractPackageName(specifier, index) {
+    let pkgName;
+    if (specifier.includes('://')) {
+        // Full URL - extract from path
+        const match = specifier.match(/esm\.sh\/(@?[^@/]+)/);
+        pkgName = match ? match[1].replace(/^@/, '').replace(/-/g, '_') : `pkg${index}`;
+    }
+    else {
+        // Bare package name - extract before @ version
+        pkgName = specifier.split('@')[0].replace(/^@/, '').replace(/-/g, '_').replace(/\//g, '_');
+    }
+    return pkgName;
+}
+/**
+ * Default sandbox URL for worker fetch requests
+ */
+export const SANDBOX_URL = 'http://sandbox/execute';
+/**
+ * Generate a unique sandbox worker ID
+ */
+export const generateSandboxId = () => `sandbox-${Date.now()}-${Math.random().toString(36).slice(2)}`;
+/**
+ * Create an error result with consistent structure
+ */
+export function createErrorResult(error, start) {
+    return {
+        success: false,
+        logs: [],
+        error: error instanceof Error ? error.message : String(error),
+        duration: Date.now() - start,
+    };
+}
+/**
+ * Process a result from worker execution, adding duration
+ */
+export function processResult(result, start) {
+    return {
+        ...result,
+        duration: Date.now() - start,
+    };
+}
+/**
+ * Check if a domain matches a pattern (supports wildcards)
+ * @param domain - The domain to check (e.g., 'api.example.com')
+ * @param pattern - The pattern to match against (e.g., '*.example.com' or 'api.example.com')
+ * @returns true if the domain matches the pattern
+ */
+export function matchesDomainPattern(domain, pattern) {
+    // Normalize both to lowercase
+    const normalizedDomain = domain.toLowerCase();
+    const normalizedPattern = pattern.toLowerCase();
+    // Exact match
+    if (normalizedDomain === normalizedPattern) {
+        return true;
+    }
+    // Wildcard pattern: *.example.com
+    if (normalizedPattern.startsWith('*.')) {
+        const suffix = normalizedPattern.slice(2); // Remove '*.'
+        // Domain must end with the suffix and have at least one character before it
+        // e.g., 'api.example.com' matches '*.example.com'
+        // but 'example.com' does not match '*.example.com'
+        return normalizedDomain.endsWith('.' + suffix) || normalizedDomain === suffix;
+    }
+    return false;
+}
+/**
+ * Check if a URL's domain is in the allowed list
+ * @param url - The URL to check
+ * @param allowedDomains - List of allowed domains (supports wildcards like '*.example.com')
+ * @returns true if the URL's domain is allowed
+ */
+export function isDomainAllowed(url, allowedDomains) {
+    try {
+        const parsedUrl = new URL(url);
+        const hostname = parsedUrl.hostname;
+        for (const pattern of allowedDomains) {
+            if (matchesDomainPattern(hostname, pattern)) {
+                return true;
+            }
+        }
+        return false;
+    }
+    catch {
+        // Invalid URL - not allowed
+        return false;
+    }
+}
+/**
+ * Generate JavaScript code for domain checking in workers
+ * This is embedded into the worker source code
+ */
+export function generateDomainCheckCode(allowedDomains) {
+    const domainsJson = JSON.stringify(allowedDomains);
+    return `
+// Domain allowlist checking
+const __allowedDomains__ = ${domainsJson};
+
+const __matchesDomainPattern__ = (domain, pattern) => {
+  const normalizedDomain = domain.toLowerCase();
+  const normalizedPattern = pattern.toLowerCase();
+  if (normalizedDomain === normalizedPattern) return true;
+  if (normalizedPattern.startsWith('*.')) {
+    const suffix = normalizedPattern.slice(2);
+    return normalizedDomain.endsWith('.' + suffix) || normalizedDomain === suffix;
+  }
+  return false;
+};
+
+const __isDomainAllowed__ = (url) => {
+  try {
+    const parsedUrl = new URL(url);
+    const hostname = parsedUrl.hostname;
+    for (const pattern of __allowedDomains__) {
+      if (__matchesDomainPattern__(hostname, pattern)) return true;
+    }
+    return false;
+  } catch { return false; }
+};
+
+const __originalFetch__ = globalThis.fetch;
+globalThis.fetch = async (input, init) => {
+  const url = typeof input === 'string' ? input : input instanceof Request ? input.url : String(input);
+  if (!__isDomainAllowed__(url)) {
+    throw new Error(\`Network access blocked: domain not in allowlist. Attempted: \${new URL(url).hostname}\`);
+  }
+  return __originalFetch__(input, init);
+};
+`;
+}
+//# sourceMappingURL=shared.js.map