callman-core 1.0.5 → 1.1.0

package/dist/script/scope.js

@@ -0,0 +1,151 @@
+// Reserved globals + scope target builder for the canonical sandbox.
+//
+// The "allowed" list is intentionally larger than callman-core's legacy
+// scriptEngine — it adopts the union seen in the backend/electron sandboxes
+// (Error subclasses, Map/Set, Symbol, BigInt, TextEncoder/Decoder). This
+// is documented as an intentional behavior change for callers that came
+// from the older A path.
+//
+// The "blocked" set is the safety floor: these names are always undefined
+// in user scripts, regardless of what the caller passes in `bindings`.
+const ALLOWED_GLOBALS = {
+    JSON,
+    Math,
+    Number,
+    String,
+    Boolean,
+    Array,
+    Object,
+    Date,
+    RegExp,
+    Promise,
+    Error,
+    TypeError,
+    ReferenceError,
+    SyntaxError,
+    RangeError,
+    EvalError,
+    URIError,
+    AggregateError,
+    Map,
+    Set,
+    WeakMap,
+    WeakSet,
+    Symbol,
+    BigInt,
+    URL,
+    URLSearchParams,
+    TextEncoder,
+    TextDecoder,
+    parseInt,
+    parseFloat,
+    encodeURIComponent,
+    decodeURIComponent,
+    isFinite,
+    isNaN,
+    // Sentinel values — these are not constructors but are safe to expose
+    undefined,
+    NaN,
+    Infinity,
+};
+const BLOCKED_GLOBALS = [
+    "eval",
+    "Function",
+    "Buffer",
+    "setTimeout",
+    "clearTimeout",
+    "setInterval",
+    "clearInterval",
+    "fetch",
+    "XMLHttpRequest",
+    "WebSocket",
+    "Worker",
+    "window",
+    "document",
+    "self",
+    "globalThis",
+    "global",
+    "process",
+    "require",
+    "module",
+    "exports",
+    "navigator",
+    "importScripts",
+];
+// Names that the caller cannot use as a "label-as-global" workflow key.
+// Exposing a workflow node named `pm` or `eval` would shadow the built-in
+// API or reintroduce a blocked global, so we reject these reservations
+// when building label globals.
+export const RESERVED_LABEL_NAMES = new Set([
+    ...Object.keys(ALLOWED_GLOBALS),
+    ...BLOCKED_GLOBALS,
+    "pm",
+    "env",
+    "console",
+    "request",
+    "response",
+    "test",
+    "expect",
+    "workflow",
+    // Backend reserves these specifically to keep label globals from clashing
+    // with planned db/kafka/redis runtime APIs (Sandbox D / future).
+    "db",
+    "kafka",
+    "redis",
+]);
+export const VALID_LABEL_IDENTIFIER_PATTERN = /^[A-Za-z_$][\w$]*$/;
+export const buildScopeTarget = (bindings) => {
+    const target = {
+        ...ALLOWED_GLOBALS,
+        pm: bindings.pm,
+    };
+    if (bindings.env !== undefined) {
+        target.env = bindings.env;
+    }
+    if (bindings.environment !== undefined) {
+        target.environment = bindings.environment;
+    }
+    if (bindings.request !== undefined) {
+        target.request = bindings.request;
+    }
+    if (bindings.response !== undefined) {
+        target.response = bindings.response;
+    }
+    if (bindings.test !== undefined) {
+        target.test = bindings.test;
+    }
+    if (bindings.expect !== undefined) {
+        target.expect = bindings.expect;
+    }
+    if (bindings.console !== undefined) {
+        target.console = bindings.console;
+    }
+    if (bindings.labelGlobals) {
+        for (const [name, value] of Object.entries(bindings.labelGlobals)) {
+            target[name] = value;
+        }
+    }
+    // Always blocked — overwrite anything labelGlobals tried to slip in.
+    for (const name of BLOCKED_GLOBALS) {
+        target[name] = undefined;
+    }
+    return target;
+};
+export const createScopeProxy = (target) => new Proxy(target, {
+    has: () => true,
+    get(scopeTarget, property) {
+        if (property === Symbol.unscopables) {
+            return undefined;
+        }
+        return scopeTarget[property];
+    },
+    set(scopeTarget, property, value) {
+        scopeTarget[property] = value;
+        return true;
+    },
+    deleteProperty(scopeTarget, property) {
+        delete scopeTarget[property];
+        return true;
+    },
+});
+//# sourceMappingURL=scope.js.map

package/dist/script/scope.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"scope.js","sourceRoot":"","sources":["../../src/script/scope.ts"],"names":[],"mappings":"AAAA,qEAAqE;AACrE,EAAE;AACF,wEAAwE;AACxE,4EAA4E;AAC5E,yEAAyE;AACzE,wEAAwE;AACxE,yBAAyB;AACzB,EAAE;AACF,0EAA0E;AAC1E,uEAAuE;AAEvE,MAAM,eAAe,GAA4B;IAC/C,IAAI;IACJ,IAAI;IACJ,MAAM;IACN,MAAM;IACN,OAAO;IACP,KAAK;IACL,MAAM;IACN,IAAI;IACJ,MAAM;IACN,OAAO;IACP,KAAK;IACL,SAAS;IACT,cAAc;IACd,WAAW;IACX,UAAU;IACV,SAAS;IACT,QAAQ;IACR,cAAc;IACd,GAAG;IACH,GAAG;IACH,OAAO;IACP,OAAO;IACP,MAAM;IACN,MAAM;IACN,GAAG;IACH,eAAe;IACf,WAAW;IACX,WAAW;IACX,QAAQ;IACR,UAAU;IACV,kBAAkB;IAClB,kBAAkB;IAClB,QAAQ;IACR,KAAK;IACL,sEAAsE;IACtE,SAAS;IACT,GAAG;IACH,QAAQ;CACT,CAAC;AAEF,MAAM,eAAe,GAAG;IACtB,MAAM;IACN,UAAU;IACV,QAAQ;IACR,YAAY;IACZ,cAAc;IACd,aAAa;IACb,eAAe;IACf,OAAO;IACP,gBAAgB;IAChB,WAAW;IACX,QAAQ;IACR,QAAQ;IACR,UAAU;IACV,MAAM;IACN,YAAY;IACZ,QAAQ;IACR,SAAS;IACT,SAAS;IACT,QAAQ;IACR,SAAS;IACT,WAAW;IACX,eAAe;CACP,CAAC;AAEX,wEAAwE;AACxE,0EAA0E;AAC1E,uEAAuE;AACvE,+BAA+B;AAC/B,MAAM,CAAC,MAAM,oBAAoB,GAAG,IAAI,GAAG,CAAS;IAClD,GAAG,MAAM,CAAC,IAAI,CAAC,eAAe,CAAC;IAC/B,GAAG,eAAe;IAClB,IAAI;IACJ,KAAK;IACL,SAAS;IACT,SAAS;IACT,UAAU;IACV,MAAM;IACN,QAAQ;IACR,UAAU;IACV,0EAA0E;IAC1E,iEAAiE;IACjE,IAAI;IACJ,OAAO;IACP,OAAO;CACR,CAAC,CAAC;AAEH,MAAM,CAAC,MAAM,8BAA8B,GAAG,oBAAoB,CAAC;AAsBnE,MAAM,CAAC,MAAM,gBAAgB,GAAG,CAAC,QAAuB,EAA2B,EAAE;IACnF,MAAM,MAAM,GAA4B;QACtC,GAAG,eAAe;QAClB,EAAE,EAAE,QAAQ,CAAC,EAAE;KAChB,CAAC;IAEF,IAAI,QAAQ,CAAC,GAAG,KAAK,SAAS,EAAE,CAAC;QAC/B,MAAM,CAAC,GAAG,GAAG,QAAQ,CAAC,GAAG,CAAC;IAC5B,CAAC;IACD,IAAI,QAAQ,CAAC,WAAW,KAAK,SAAS,EAAE,CAAC;QACvC,MAAM,CAAC,WAAW,GAAG,QAAQ,CAAC,WAAW,CAAC;IAC5C,CAAC;IACD,IAAI,QAAQ,CAAC,OAAO,KAAK,SAAS,EAAE,CAAC;QACnC,MAAM,CAAC,OAAO,GAAG,QAAQ,CAAC,OAAO,CAAC;IACpC,CAAC;IACD,IAAI,QAAQ,CAAC,QAAQ,KAAK,SAAS,EAAE,CAAC;QACpC,MAAM,CAAC,QAAQ,GAAG,QAAQ,CAAC,QAAQ,CAAC;IACtC,CAAC;IACD,IAAI,QAAQ,CAAC,IAAI,KAAK,SAAS,EAAE,CAAC;QAChC,MAAM,CAAC,IAAI,GAAG,QAAQ,CAAC,IAAI,CAAC;IAC9B,CAAC;IACD,IAAI,QAAQ,CAAC,MAAM,KAAK,SAAS,EAAE,CAAC;QAClC,MAAM,CAAC,MAAM,GAAG,QAAQ,CAAC,MAAM,CAAC;IAClC,CAAC;IACD,IAAI,QAAQ,CAAC,OAAO,KAAK,SAAS,EAAE,CAAC;QACnC,MAAM,CAAC,OAAO,GAAG,QAAQ,CAAC,OAAO,CAAC;IACpC,CAAC;IACD,IAAI,QAAQ,CAAC,YAAY,EAAE,CAAC;QAC1B,KAAK,MAAM,CAAC,IAAI,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,QAAQ,CAAC,YAAY,CAAC,EAAE,CAAC;YAClE,MAAM,CAAC,IAAI,CAAC,GAAG,KAAK,CAAC;QACvB,CAAC;IACH,CAAC;IAED,qEAAqE;IACrE,KAAK,MAAM,IAAI,IAAI,eAAe,EAAE,CAAC;QACnC,MAAM,CAAC,IAAI,CAAC,GAAG,SAAS,CAAC;IAC3B,CAAC;IAED,OAAO,MAAM,CAAC;AAChB,CAAC,CAAC;AAEF,MAAM,CAAC,MAAM,gBAAgB,GAAG,CAAC,MAA+B,EAA2B,EAAE,CAC3F,IAAI,KAAK,CAAC,MAAM,EAAE;IAChB,GAAG,EAAE,GAAG,EAAE,CAAC,IAAI;IACf,GAAG,CAAC,WAAW,EAAE,QAAQ;QACvB,IAAI,QAAQ,KAAK,MAAM,CAAC,WAAW,EAAE,CAAC;YACpC,OAAO,SAAS,CAAC;QACnB,CAAC;QACD,OAAO,WAAW,CAAC,QAAoC,CAAC,CAAC;IAC3D,CAAC;IACD,GAAG,CAAC,WAAW,EAAE,QAAQ,EAAE,KAAK;QAC9B,WAAW,CAAC,QAAoC,CAAC,GAAG,KAAK,CAAC;QAC1D,OAAO,IAAI,CAAC;IACd,CAAC;IACD,cAAc,CAAC,WAAW,EAAE,QAAQ;QAClC,OAAO,WAAW,CAAC,QAAoC,CAAC,CAAC;QACzD,OAAO,IAAI,CAAC;IACd,CAAC;CACF,CAAC,CAAC"}

package/dist/script/scriptEngine.d.ts

@@ -1,3 +1,3 @@
-import type { ScriptRunContext, TestResult } from "../types/index.js";
-export declare const runScript: (script: string | undefined, context: ScriptRunContext) => Promise<TestResult[]>;
+export { runScript } from "./legacy.js";
+export type { ScriptRunContext } from "./legacy.js";
 //# sourceMappingURL=scriptEngine.d.ts.map

package/dist/script/scriptEngine.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"scriptEngine.d.ts","sourceRoot":"","sources":["../../src/script/scriptEngine.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,gBAAgB,EAAE,UAAU,EAAE,MAAM,mBAAmB,CAAC;AA8EtE,eAAO,MAAM,SAAS,GACpB,QAAQ,MAAM,GAAG,SAAS,EAC1B,SAAS,gBAAgB,KACxB,OAAO,CAAC,UAAU,EAAE,CAuCtB,CAAC"}
+{"version":3,"file":"scriptEngine.d.ts","sourceRoot":"","sources":["../../src/script/scriptEngine.ts"],"names":[],"mappings":"AAMA,OAAO,EAAE,SAAS,EAAE,MAAM,aAAa,CAAC;AACxC,YAAY,EAAE,gBAAgB,EAAE,MAAM,aAAa,CAAC"}

package/dist/script/scriptEngine.js

@@ -1,106 +1,8 @@
-import { createPmApi } from "./pmApi.js";
-const AsyncFunction = Object.getPrototypeOf(async function () {
-    return undefined;
-}).constructor;
-const noopConsole = {
-    log: () => undefined,
-    info: () => undefined,
-    warn: () => undefined,
-    error: () => undefined,
-    debug: () => undefined,
-};
-const buildScriptScope = (pm) => {
-    const scopeTarget = {
-        pm,
-        request: pm.request,
-        response: pm.response,
-        test: pm.test,
-        expect: pm.expect,
-        environment: pm.environment,
-        JSON,
-        Math,
-        Number,
-        String,
-        Boolean,
-        Array,
-        Object,
-        Date,
-        RegExp,
-        Promise,
-        parseInt,
-        parseFloat,
-        encodeURIComponent,
-        decodeURIComponent,
-        URL,
-        URLSearchParams,
-        setTimeout: undefined,
-        clearTimeout: undefined,
-        setInterval: undefined,
-        clearInterval: undefined,
-        fetch: undefined,
-        XMLHttpRequest: undefined,
-        WebSocket: undefined,
-        Worker: undefined,
-        Function: undefined,
-        eval: undefined,
-        console: noopConsole,
-        window: undefined,
-        document: undefined,
-        self: undefined,
-        globalThis: undefined,
-        global: undefined,
-        process: undefined,
-        require: undefined,
-        module: undefined,
-        exports: undefined,
-        navigator: undefined,
-    };
-    return new Proxy(scopeTarget, {
-        has: () => true,
-        get(target, property) {
-            if (property === Symbol.unscopables) {
-                return undefined;
-            }
-            return target[property];
-        },
-        set(target, property, value) {
-            target[property] = value;
-            return true;
-        },
-    });
-};
-export const runScript = async (script, context) => {
-    if (!script?.trim()) {
-        return [];
-    }
-    const results = [];
-    const pendingTests = [];
-    const pm = createPmApi(context, {
-        addResult: (result) => {
-            results.push(result);
-        },
-        addPending: (promise) => {
-            pendingTests.push(promise);
-        },
-    });
-    const scope = buildScriptScope(pm);
-    const runner = new AsyncFunction("scope", "context", `return (async function () {
-with (scope) {
-${script}
-}
-}).call(context);
-//# sourceURL=callman-script.js`);
-    try {
-        await runner(scope, Object.create(null));
-    }
-    catch (error) {
-        results.push({
-            name: "Script execution",
-            status: "FAIL",
-            message: error instanceof Error ? error.message : String(error),
-        });
-    }
-    await Promise.allSettled(pendingTests);
-    return results;
-};
+// Backwards-compatibility re-export. The real implementation now lives in
+// `legacy.ts` (which calls the canonical `executeScript`). Direct imports
+// from this path stay working for any consumer that pinned to the
+// pre-1.1.0 module layout.
+//
+// Prefer the package entry: `import { runScript } from "callman-core";`
+export { runScript } from "./legacy.js";
 //# sourceMappingURL=scriptEngine.js.map

package/dist/script/scriptEngine.js.map

@@ -1 +1 @@
-{"version":3,"file":"scriptEngine.js","sourceRoot":"","sources":["../../src/script/scriptEngine.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,WAAW,EAAE,MAAM,YAAY,CAAC;AAEzC,MAAM,aAAa,GAAG,MAAM,CAAC,cAAc,CAAC,KAAK;IAC/C,OAAO,SAAS,CAAC;AACnB,CAAC,CAAC,CAAC,WAAoF,CAAC;AAExF,MAAM,WAAW,GAAG;IAClB,GAAG,EAAE,GAAG,EAAE,CAAC,SAAS;IACpB,IAAI,EAAE,GAAG,EAAE,CAAC,SAAS;IACrB,IAAI,EAAE,GAAG,EAAE,CAAC,SAAS;IACrB,KAAK,EAAE,GAAG,EAAE,CAAC,SAAS;IACtB,KAAK,EAAE,GAAG,EAAE,CAAC,SAAS;CACvB,CAAC;AAEF,MAAM,gBAAgB,GAAG,CAAC,EAAkC,EAAE,EAAE;IAC9D,MAAM,WAAW,GAA4B;QAC3C,EAAE;QACF,OAAO,EAAE,EAAE,CAAC,OAAO;QACnB,QAAQ,EAAE,EAAE,CAAC,QAAQ;QACrB,IAAI,EAAE,EAAE,CAAC,IAAI;QACb,MAAM,EAAE,EAAE,CAAC,MAAM;QACjB,WAAW,EAAE,EAAE,CAAC,WAAW;QAC3B,IAAI;QACJ,IAAI;QACJ,MAAM;QACN,MAAM;QACN,OAAO;QACP,KAAK;QACL,MAAM;QACN,IAAI;QACJ,MAAM;QACN,OAAO;QACP,QAAQ;QACR,UAAU;QACV,kBAAkB;QAClB,kBAAkB;QAClB,GAAG;QACH,eAAe;QACf,UAAU,EAAE,SAAS;QACrB,YAAY,EAAE,SAAS;QACvB,WAAW,EAAE,SAAS;QACtB,aAAa,EAAE,SAAS;QACxB,KAAK,EAAE,SAAS;QAChB,cAAc,EAAE,SAAS;QACzB,SAAS,EAAE,SAAS;QACpB,MAAM,EAAE,SAAS;QACjB,QAAQ,EAAE,SAAS;QACnB,IAAI,EAAE,SAAS;QACf,OAAO,EAAE,WAAW;QACpB,MAAM,EAAE,SAAS;QACjB,QAAQ,EAAE,SAAS;QACnB,IAAI,EAAE,SAAS;QACf,UAAU,EAAE,SAAS;QACrB,MAAM,EAAE,SAAS;QACjB,OAAO,EAAE,SAAS;QAClB,OAAO,EAAE,SAAS;QAClB,MAAM,EAAE,SAAS;QACjB,OAAO,EAAE,SAAS;QAClB,SAAS,EAAE,SAAS;KACrB,CAAC;IAEF,OAAO,IAAI,KAAK,CAAC,WAAW,EAAE;QAC5B,GAAG,EAAE,GAAG,EAAE,CAAC,IAAI;QACf,GAAG,CAAC,MAAM,EAAE,QAAQ;YAClB,IAAI,QAAQ,KAAK,MAAM,CAAC,WAAW,EAAE,CAAC;gBACpC,OAAO,SAAS,CAAC;YACnB,CAAC;YAED,OAAO,MAAM,CAAC,QAA+B,CAAC,CAAC;QACjD,CAAC;QACD,GAAG,CAAC,MAAM,EAAE,QAAQ,EAAE,KAAK;YACzB,MAAM,CAAC,QAA+B,CAAC,GAAG,KAAK,CAAC;YAChD,OAAO,IAAI,CAAC;QACd,CAAC;KACF,CAAC,CAAC;AACL,CAAC,CAAC;AAEF,MAAM,CAAC,MAAM,SAAS,GAAG,KAAK,EAC5B,MAA0B,EAC1B,OAAyB,EACF,EAAE;IACzB,IAAI,CAAC,MAAM,EAAE,IAAI,EAAE,EAAE,CAAC;QACpB,OAAO,EAAE,CAAC;IACZ,CAAC;IAED,MAAM,OAAO,GAAiB,EAAE,CAAC;IACjC,MAAM,YAAY,GAAoB,EAAE,CAAC;IACzC,MAAM,EAAE,GAAG,WAAW,CAAC,OAAO,EAAE;QAC9B,SAAS,EAAE,CAAC,MAAM,EAAE,EAAE;YACpB,OAAO,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;QACvB,CAAC;QACD,UAAU,EAAE,CAAC,OAAO,EAAE,EAAE;YACtB,YAAY,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;QAC7B,CAAC;KACF,CAAC,CAAC;IACH,MAAM,KAAK,GAAG,gBAAgB,CAAC,EAAE,CAAC,CAAC;IACnC,MAAM,MAAM,GAAG,IAAI,aAAa,CAC9B,OAAO,EACP,SAAS,EACT;;EAEF,MAAM;;;gCAGwB,CAC7B,CAAC;IAEF,IAAI,CAAC;QACH,MAAM,MAAM,CAAC,KAAK,EAAE,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC;IAC3C,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,OAAO,CAAC,IAAI,CAAC;YACX,IAAI,EAAE,kBAAkB;YACxB,MAAM,EAAE,MAAM;YACd,OAAO,EAAE,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC;SAChE,CAAC,CAAC;IACL,CAAC;IAED,MAAM,OAAO,CAAC,UAAU,CAAC,YAAY,CAAC,CAAC;IACvC,OAAO,OAAO,CAAC;AACjB,CAAC,CAAC"}
+{"version":3,"file":"scriptEngine.js","sourceRoot":"","sources":["../../src/script/scriptEngine.ts"],"names":[],"mappings":"AAAA,0EAA0E;AAC1E,0EAA0E;AAC1E,kEAAkE;AAClE,2BAA2B;AAC3B,EAAE;AACF,wEAAwE;AACxE,OAAO,EAAE,SAAS,EAAE,MAAM,aAAa,CAAC"}

package/dist/script/timeout.d.ts

@@ -0,0 +1,3 @@
+export declare const toHostPromise: <T>(value: T | PromiseLike<T>) => Promise<T>;
+export declare const withAsyncTimeout: <T>(promise: Promise<T>, timeoutMs: number) => Promise<T>;
+//# sourceMappingURL=timeout.d.ts.map

package/dist/script/timeout.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"timeout.d.ts","sourceRoot":"","sources":["../../src/script/timeout.ts"],"names":[],"mappings":"AAWA,eAAO,MAAM,aAAa,GAAI,CAAC,EAAE,OAAO,CAAC,GAAG,WAAW,CAAC,CAAC,CAAC,KAAG,OAAO,CAAC,CAAC,CAgBrE,CAAC;AAEF,eAAO,MAAM,gBAAgB,GAAU,CAAC,EACtC,SAAS,OAAO,CAAC,CAAC,CAAC,EACnB,WAAW,MAAM,KAChB,OAAO,CAAC,CAAC,CAgBR,CAAC"}

package/dist/script/timeout.js

@@ -0,0 +1,38 @@
+// Timeout utilities for the canonical script sandbox.
+//
+// vm.Script.runInContext exposes a `timeout` option that only enforces
+// synchronous execution time — async loops bypass it. The outer
+// withAsyncTimeout enforces the deadline against the awaited completion
+// of the host promise, so an unresolved `await new Promise(() => {})`
+// is rejected as a timeout instead of hanging indefinitely.
+//
+// toHostPromise re-wraps a thenable from the sandbox's vm context so
+// that `Promise.race` and host-side `await` see a real host promise.
+export const toHostPromise = (value) => {
+    if ((typeof value === "object" || typeof value === "function") &&
+        value !== null &&
+        typeof value.then === "function") {
+        return new Promise((resolve, reject) => {
+            try {
+                value.then(resolve, reject);
+            }
+            catch (error) {
+                reject(error);
+            }
+        });
+    }
+    return Promise.resolve(value);
+};
+export const withAsyncTimeout = async (promise, timeoutMs) => await new Promise((resolve, reject) => {
+    const timer = setTimeout(() => {
+        reject(new Error(`Script timed out after ${timeoutMs}ms`));
+    }, timeoutMs);
+    promise.then((value) => {
+        clearTimeout(timer);
+        resolve(value);
+    }, (error) => {
+        clearTimeout(timer);
+        reject(error);
+    });
+});
+//# sourceMappingURL=timeout.js.map

package/dist/script/timeout.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"timeout.js","sourceRoot":"","sources":["../../src/script/timeout.ts"],"names":[],"mappings":"AAAA,sDAAsD;AACtD,EAAE;AACF,uEAAuE;AACvE,gEAAgE;AAChE,wEAAwE;AACxE,sEAAsE;AACtE,4DAA4D;AAC5D,EAAE;AACF,qEAAqE;AACrE,qEAAqE;AAErE,MAAM,CAAC,MAAM,aAAa,GAAG,CAAI,KAAyB,EAAc,EAAE;IACxE,IACE,CAAC,OAAO,KAAK,KAAK,QAAQ,IAAI,OAAO,KAAK,KAAK,UAAU,CAAC;QAC1D,KAAK,KAAK,IAAI;QACd,OAAQ,KAAwB,CAAC,IAAI,KAAK,UAAU,EACpD,CAAC;QACD,OAAO,IAAI,OAAO,CAAI,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;YACxC,IAAI,CAAC;gBACF,KAAwB,CAAC,IAAI,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;YAClD,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,MAAM,CAAC,KAAK,CAAC,CAAC;YAChB,CAAC;QACH,CAAC,CAAC,CAAC;IACL,CAAC;IAED,OAAO,OAAO,CAAC,OAAO,CAAC,KAAU,CAAC,CAAC;AACrC,CAAC,CAAC;AAEF,MAAM,CAAC,MAAM,gBAAgB,GAAG,KAAK,EACnC,OAAmB,EACnB,SAAiB,EACL,EAAE,CACd,MAAM,IAAI,OAAO,CAAI,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;IACvC,MAAM,KAAK,GAAG,UAAU,CAAC,GAAG,EAAE;QAC5B,MAAM,CAAC,IAAI,KAAK,CAAC,0BAA0B,SAAS,IAAI,CAAC,CAAC,CAAC;IAC7D,CAAC,EAAE,SAAS,CAAC,CAAC;IAEd,OAAO,CAAC,IAAI,CACV,CAAC,KAAK,EAAE,EAAE;QACR,YAAY,CAAC,KAAK,CAAC,CAAC;QACpB,OAAO,CAAC,KAAK,CAAC,CAAC;IACjB,CAAC,EACD,CAAC,KAAc,EAAE,EAAE;QACjB,YAAY,CAAC,KAAK,CAAC,CAAC;QACpB,MAAM,CAAC,KAAK,CAAC,CAAC;IAChB,CAAC,CACF,CAAC;AACJ,CAAC,CAAC,CAAC"}

package/dist/script/types.d.ts

@@ -0,0 +1,94 @@
+import type { ScenarioNodeExecutionMeta } from "../scenario-runner/types.js";
+export type ScriptStage = "script" | "pre-request" | "tests" | "post-response";
+export interface ScriptKeyValuePair {
+    key: string;
+    value: string;
+    enabled?: boolean;
+}
+export interface ScriptRequestBodyState {
+    mode: string;
+    raw: string;
+    formEntries: ScriptKeyValuePair[];
+}
+export interface ScriptRequestState {
+    method: string;
+    url: string;
+    headers: ScriptKeyValuePair[];
+    query: ScriptKeyValuePair[];
+    body: ScriptRequestBodyState;
+}
+export interface ScriptResponseState {
+    ok: boolean;
+    status: number;
+    statusText: string;
+    headers: Record<string, string>;
+    body: unknown;
+    jsonBody: unknown | null;
+    rawBody: string;
+    contentType: string;
+    durationMs: number;
+    sizeBytes: number;
+    cookies: string[];
+}
+export interface ScriptVariableMutation {
+    scope: "environment" | "global";
+    type: "set" | "unset";
+    key: string;
+    value?: string;
+}
+export interface ScriptLogEntry {
+    level: "log" | "info" | "warn" | "error" | "debug";
+    message: string;
+}
+export interface ScriptTestResult {
+    name: string;
+    status: "PASS" | "FAIL" | "SKIP";
+    error?: string;
+    lineNumber?: number | null;
+    column?: number | null;
+}
+export interface ScriptError {
+    stage: ScriptStage;
+    message: string;
+    lineNumber: number | null;
+    column: number | null;
+    stack: string | null;
+}
+export interface ScriptCapabilities {
+    environment?: {
+        values: Record<string, string>;
+        emitMutations?: boolean;
+    };
+    globals?: {
+        values: Record<string, string>;
+        emitMutations?: boolean;
+    };
+    request?: ScriptRequestState;
+    response?: ScriptResponseState;
+    trackRequestMutations?: boolean;
+    workflowContext?: Record<string, unknown>;
+    nodeMetaByLabel?: Record<string, ScenarioNodeExecutionMeta>;
+    exposeLabelsAsGlobals?: boolean;
+    extensions?: {
+        log?: boolean;
+        node?: boolean;
+    };
+}
+export interface ExecuteScriptInput {
+    script: string;
+    timeoutMs?: number;
+    filename?: string;
+    stage?: ScriptStage;
+    capabilities: ScriptCapabilities;
+}
+export interface ExecuteScriptResult {
+    success: boolean;
+    error: ScriptError | null;
+    testResults: ScriptTestResult[];
+    variableMutations: ScriptVariableMutation[];
+    logs: ScriptLogEntry[];
+    returnValue?: unknown;
+    hasReturnValue: boolean;
+    request?: ScriptRequestState;
+}
+//# sourceMappingURL=types.d.ts.map

package/dist/script/types.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../../src/script/types.ts"],"names":[],"mappings":"AAMA,OAAO,KAAK,EAAE,yBAAyB,EAAE,MAAM,6BAA6B,CAAC;AAE7E,MAAM,MAAM,WAAW,GAAG,QAAQ,GAAG,aAAa,GAAG,OAAO,GAAG,eAAe,CAAC;AAE/E,MAAM,WAAW,kBAAkB;IACjC,GAAG,EAAE,MAAM,CAAC;IACZ,KAAK,EAAE,MAAM,CAAC;IACd,OAAO,CAAC,EAAE,OAAO,CAAC;CACnB;AAED,MAAM,WAAW,sBAAsB;IACrC,IAAI,EAAE,MAAM,CAAC;IACb,GAAG,EAAE,MAAM,CAAC;IACZ,WAAW,EAAE,kBAAkB,EAAE,CAAC;CACnC;AAED,MAAM,WAAW,kBAAkB;IACjC,MAAM,EAAE,MAAM,CAAC;IACf,GAAG,EAAE,MAAM,CAAC;IACZ,OAAO,EAAE,kBAAkB,EAAE,CAAC;IAC9B,KAAK,EAAE,kBAAkB,EAAE,CAAC;IAC5B,IAAI,EAAE,sBAAsB,CAAC;CAC9B;AAED,MAAM,WAAW,mBAAmB;IAClC,EAAE,EAAE,OAAO,CAAC;IACZ,MAAM,EAAE,MAAM,CAAC;IACf,UAAU,EAAE,MAAM,CAAC;IACnB,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAChC,IAAI,EAAE,OAAO,CAAC;IACd,QAAQ,EAAE,OAAO,GAAG,IAAI,CAAC;IACzB,OAAO,EAAE,MAAM,CAAC;IAChB,WAAW,EAAE,MAAM,CAAC;IACpB,UAAU,EAAE,MAAM,CAAC;IACnB,SAAS,EAAE,MAAM,CAAC;IAClB,OAAO,EAAE,MAAM,EAAE,CAAC;CACnB;AAED,MAAM,WAAW,sBAAsB;IACrC,KAAK,EAAE,aAAa,GAAG,QAAQ,CAAC;IAChC,IAAI,EAAE,KAAK,GAAG,OAAO,CAAC;IACtB,GAAG,EAAE,MAAM,CAAC;IACZ,KAAK,CAAC,EAAE,MAAM,CAAC;CAChB;AAED,MAAM,WAAW,cAAc;IAC7B,KAAK,EAAE,KAAK,GAAG,MAAM,GAAG,MAAM,GAAG,OAAO,GAAG,OAAO,CAAC;IACnD,OAAO,EAAE,MAAM,CAAC;CACjB;AAED,MAAM,WAAW,gBAAgB;IAC/B,IAAI,EAAE,MAAM,CAAC;IACb,MAAM,EAAE,MAAM,GAAG,MAAM,GAAG,MAAM,CAAC;IACjC,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,UAAU,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAC3B,MAAM,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;CACxB;AAED,MAAM,WAAW,WAAW;IAC1B,KAAK,EAAE,WAAW,CAAC;IACnB,OAAO,EAAE,MAAM,CAAC;IAChB,UAAU,EAAE,MAAM,GAAG,IAAI,CAAC;IAC1B,MAAM,EAAE,MAAM,GAAG,IAAI,CAAC;IACtB,KAAK,EAAE,MAAM,GAAG,IAAI,CAAC;CACtB;AAQD,MAAM,WAAW,kBAAkB;IACjC,WAAW,CAAC,EAAE;QACZ,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;QAC/B,aAAa,CAAC,EAAE,OAAO,CAAC;KACzB,CAAC;IACF,OAAO,CAAC,EAAE;QACR,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;QAC/B,aAAa,CAAC,EAAE,OAAO,CAAC;KACzB,CAAC;IACF,OAAO,CAAC,EAAE,kBAAkB,CAAC;IAC7B,QAAQ,CAAC,EAAE,mBAAmB,CAAC;IAC/B,qBAAqB,CAAC,EAAE,OAAO,CAAC;IAChC,eAAe,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAC1C,eAAe,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,yBAAyB,CAAC,CAAC;IAC5D,qBAAqB,CAAC,EAAE,OAAO,CAAC;IAChC,UAAU,CAAC,EAAE;QACX,GAAG,CAAC,EAAE,OAAO,CAAC;QACd,IAAI,CAAC,EAAE,OAAO,CAAC;KAChB,CAAC;CACH;AAED,MAAM,WAAW,kBAAkB;IACjC,MAAM,EAAE,MAAM,CAAC;IACf,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,KAAK,CAAC,EAAE,WAAW,CAAC;IACpB,YAAY,EAAE,kBAAkB,CAAC;CAClC;AAED,MAAM,WAAW,mBAAmB;IAClC,OAAO,EAAE,OAAO,CAAC;IACjB,KAAK,EAAE,WAAW,GAAG,IAAI,CAAC;IAC1B,WAAW,EAAE,gBAAgB,EAAE,CAAC;IAChC,iBAAiB,EAAE,sBAAsB,EAAE,CAAC;IAC5C,IAAI,EAAE,cAAc,EAAE,CAAC;IACvB,WAAW,CAAC,EAAE,OAAO,CAAC;IACtB,cAAc,EAAE,OAAO,CAAC;IACxB,OAAO,CAAC,EAAE,kBAAkB,CAAC;CAC9B"}

package/dist/script/types.js

@@ -0,0 +1,7 @@
+// Public types for the canonical script sandbox.
+//
+// These types are the contract that backend, electron, and CLI consumers all
+// share. Adding a new field is non-breaking; renaming or removing one is a
+// breaking change that must bump the major version.
+export {};
+//# sourceMappingURL=types.js.map

package/dist/script/types.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.js","sourceRoot":"","sources":["../../src/script/types.ts"],"names":[],"mappings":"AAAA,iDAAiD;AACjD,EAAE;AACF,6EAA6E;AAC7E,2EAA2E;AAC3E,oDAAoD"}