callman-core 1.0.6 → 1.2.0

package/dist-cjs/script/pmApi.js

@@ -0,0 +1,353 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.createPmApi = exports.createExpectApi = exports.PmAssertion = void 0;
+const get_js_1 = require("../utils/get.js");
+const isRecord = (value) => typeof value === "object" && value !== null && !Array.isArray(value);
+const formatValue = (value) => {
+    if (typeof value === "string") {
+        return `"${value}"`;
+    }
+    if (value === undefined) {
+        return "undefined";
+    }
+    try {
+        return JSON.stringify(value);
+    }
+    catch {
+        return String(value);
+    }
+};
+const getValueType = (value) => {
+    if (value === null) {
+        return "null";
+    }
+    if (Array.isArray(value)) {
+        return "array";
+    }
+    return typeof value;
+};
+const isDeepEqual = (left, right) => {
+    if (Object.is(left, right)) {
+        return true;
+    }
+    if (Array.isArray(left) && Array.isArray(right)) {
+        return left.length === right.length &&
+            left.every((value, index) => isDeepEqual(value, right[index]));
+    }
+    if (isRecord(left) && isRecord(right)) {
+        const leftKeys = Object.keys(left);
+        const rightKeys = Object.keys(right);
+        return leftKeys.length === rightKeys.length &&
+            leftKeys.every((key) => Object.prototype.hasOwnProperty.call(right, key) &&
+                isDeepEqual(left[key], right[key]));
+    }
+    return false;
+};
+class PmAssertion {
+    actual;
+    constructor(actual) {
+        this.actual = actual;
+    }
+    get to() {
+        return this;
+    }
+    get be() {
+        return this;
+    }
+    get been() {
+        return this;
+    }
+    get is() {
+        return this;
+    }
+    get that() {
+        return this;
+    }
+    get which() {
+        return this;
+    }
+    get and() {
+        return this;
+    }
+    get has() {
+        return this;
+    }
+    get have() {
+        return this;
+    }
+    get with() {
+        return this;
+    }
+    get same() {
+        return this;
+    }
+    get deep() {
+        return this;
+    }
+    get ok() {
+        return this.toBeTruthy();
+    }
+    get true() {
+        if (this.actual !== true) {
+            throw new Error(`Expected ${formatValue(this.actual)} to be true`);
+        }
+        return this;
+    }
+    get false() {
+        if (this.actual !== false) {
+            throw new Error(`Expected ${formatValue(this.actual)} to be false`);
+        }
+        return this;
+    }
+    get exist() {
+        if (this.actual === null || this.actual === undefined) {
+            throw new Error(`Expected ${formatValue(this.actual)} to exist`);
+        }
+        return this;
+    }
+    equal(expected) {
+        if (!Object.is(this.actual, expected)) {
+            throw new Error(`Expected ${formatValue(this.actual)} to equal ${formatValue(expected)}`);
+        }
+        return this;
+    }
+    toBe(expected) {
+        return this.equal(expected);
+    }
+    toBeDefined() {
+        if (this.actual === undefined) {
+            throw new Error(`Expected ${formatValue(this.actual)} to be defined`);
+        }
+        return this;
+    }
+    equals(expected) {
+        return this.equal(expected);
+    }
+    eql(expected) {
+        return this.toEqual(expected);
+    }
+    toEqual(expected) {
+        if (!isDeepEqual(this.actual, expected)) {
+            throw new Error(`Expected ${formatValue(this.actual)} to deeply equal ${formatValue(expected)}`);
+        }
+        return this;
+    }
+    a(expectedType) {
+        const actualType = getValueType(this.actual);
+        const normalizedExpectedType = expectedType.trim().toLowerCase();
+        if (actualType !== normalizedExpectedType) {
+            throw new Error(`Expected type ${normalizedExpectedType} but got ${actualType}`);
+        }
+        return this;
+    }
+    an(expectedType) {
+        return this.a(expectedType);
+    }
+    property(key, expectedValue) {
+        const property = (0, get_js_1.safeGet)(this.actual, key);
+        if (!property.exists) {
+            throw new Error(`Expected ${formatValue(this.actual)} to have property "${key}"`);
+        }
+        const nextAssertion = new PmAssertion(property.value);
+        if (arguments.length > 1) {
+            nextAssertion.toEqual(expectedValue);
+        }
+        return nextAssertion;
+    }
+    contain(expected) {
+        return this.toContain(expected);
+    }
+    include(expected) {
+        return this.toContain(expected);
+    }
+    toContain(expected) {
+        if (typeof this.actual === "string") {
+            if (!this.actual.includes(String(expected))) {
+                throw new Error(`Expected ${formatValue(this.actual)} to contain ${formatValue(expected)}`);
+            }
+            return this;
+        }
+        if (Array.isArray(this.actual)) {
+            if (!this.actual.some((entry) => isDeepEqual(entry, expected))) {
+                throw new Error(`Expected ${formatValue(this.actual)} to contain ${formatValue(expected)}`);
+            }
+            return this;
+        }
+        throw new Error("toContain supports only strings and arrays");
+    }
+    match(pattern) {
+        if (typeof this.actual !== "string") {
+            throw new Error(`Expected ${formatValue(this.actual)} to be a string`);
+        }
+        const matcher = typeof pattern === "string" ? new RegExp(pattern) : pattern;
+        if (!matcher.test(this.actual)) {
+            throw new Error(`Expected ${formatValue(this.actual)} to match ${String(matcher)}`);
+        }
+        return this;
+    }
+    status(expected) {
+        return this.property("status", expected);
+    }
+    header(name, expectedValue) {
+        const headers = (0, get_js_1.safeGet)(this.actual, "headers");
+        if (!headers.exists || !isRecord(headers.value)) {
+            throw new Error("Expected a response-like object with headers");
+        }
+        const normalizedName = name.toLowerCase();
+        const entry = Object.entries(headers.value).find(([key]) => key.toLowerCase() === normalizedName);
+        if (!entry) {
+            throw new Error(`Expected response headers to contain "${name}"`);
+        }
+        const nextAssertion = new PmAssertion(entry[1]);
+        if (arguments.length > 1) {
+            nextAssertion.toEqual(expectedValue);
+        }
+        return nextAssertion;
+    }
+    greaterThan(expected) {
+        return this.toBeGreaterThan(expected);
+    }
+    lessThan(expected) {
+        return this.toBeLessThan(expected);
+    }
+    toBeGreaterThan(expected) {
+        const actualNumber = Number(this.actual);
+        const expectedNumber = Number(expected);
+        if (!Number.isFinite(actualNumber) || !Number.isFinite(expectedNumber)) {
+            throw new Error("toBeGreaterThan supports only finite numbers");
+        }
+        if (actualNumber <= expectedNumber) {
+            throw new Error(`Expected ${formatValue(this.actual)} to be greater than ${formatValue(expected)}`);
+        }
+        return this;
+    }
+    toBeLessThan(expected) {
+        const actualNumber = Number(this.actual);
+        const expectedNumber = Number(expected);
+        if (!Number.isFinite(actualNumber) || !Number.isFinite(expectedNumber)) {
+            throw new Error("toBeLessThan supports only finite numbers");
+        }
+        if (actualNumber >= expectedNumber) {
+            throw new Error(`Expected ${formatValue(this.actual)} to be less than ${formatValue(expected)}`);
+        }
+        return this;
+    }
+    toBeTruthy() {
+        if (!this.actual) {
+            throw new Error(`Expected ${formatValue(this.actual)} to be truthy`);
+        }
+        return this;
+    }
+    toBeFalsy() {
+        if (this.actual) {
+            throw new Error(`Expected ${formatValue(this.actual)} to be falsy`);
+        }
+        return this;
+    }
+}
+exports.PmAssertion = PmAssertion;
+const createExpectApi = () => {
+    const expect = ((actual) => new PmAssertion(actual));
+    expect.fail = (message) => {
+        throw new Error(message === undefined || message === null ? "Expectation failed" : String(message));
+    };
+    return expect;
+};
+exports.createExpectApi = createExpectApi;
+const createResponseApi = (response) => {
+    if (!response) {
+        return null;
+    }
+    return {
+        status: response.status,
+        code: response.status,
+        headers: response.headers,
+        data: response.data,
+        body: response.data,
+        responseTime: response.duration,
+        duration: response.duration,
+        json: () => {
+            if (typeof response.data === "string") {
+                return JSON.parse(response.data);
+            }
+            return response.data;
+        },
+        text: () => typeof response.data === "string"
+            ? response.data
+            : JSON.stringify(response.data ?? null),
+    };
+};
+const createRequestApi = (request) => {
+    if (!request) {
+        return null;
+    }
+    const headers = { ...(request.headers ?? {}) };
+    return {
+        method: request.method,
+        url: request.url,
+        headers,
+        body: request.body,
+        getHeader: (key) => headers[key],
+        setHeader: (key, value) => {
+            const normalizedKey = key.trim();
+            if (!normalizedKey) {
+                return;
+            }
+            headers[normalizedKey] = value === undefined || value === null ? "" : String(value);
+        },
+    };
+};
+const createPmApi = (context, collector) => {
+    const expect = (0, exports.createExpectApi)();
+    const response = createResponseApi(context.response);
+    const request = createRequestApi(context.request);
+    const environment = {
+        values: context.env.all(),
+        get: (key) => context.env.get(String(key ?? "")),
+        set: (key, value) => {
+            context.env.set(String(key ?? ""), value);
+            environment.values = context.env.all();
+        },
+    };
+    const test = (name, fn) => {
+        const normalizedName = String(name ?? "").trim() || "Unnamed test";
+        const task = Promise.resolve()
+            .then(async () => {
+            if (typeof fn !== "function") {
+                throw new Error("pm.test requires a callback function");
+            }
+            await fn();
+            collector.addResult({
+                name: normalizedName,
+                status: "PASS",
+            });
+        })
+            .catch((error) => {
+            collector.addResult({
+                name: normalizedName,
+                status: "FAIL",
+                message: error instanceof Error ? error.message : String(error),
+            });
+        });
+        collector.addPending(task);
+        return task;
+    };
+    const pm = {
+        request,
+        response,
+        environment,
+        env: environment,
+        test,
+        expect,
+    };
+    if (response) {
+        Object.assign(response, {
+            to: new PmAssertion(response),
+            be: new PmAssertion(response),
+            have: new PmAssertion(response),
+        });
+    }
+    return pm;
+};
+exports.createPmApi = createPmApi;
+//# sourceMappingURL=pmApi.js.map

package/dist-cjs/script/pmApi.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"pmApi.js","sourceRoot":"","sources":["../../src/script/pmApi.ts"],"names":[],"mappings":";;;AAMA,4CAA0C;AAO1C,MAAM,QAAQ,GAAG,CAAC,KAAc,EAAoC,EAAE,CACpE,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,IAAI,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;AAEvE,MAAM,WAAW,GAAG,CAAC,KAAc,EAAU,EAAE;IAC7C,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;QAC9B,OAAO,IAAI,KAAK,GAAG,CAAC;IACtB,CAAC;IAED,IAAI,KAAK,KAAK,SAAS,EAAE,CAAC;QACxB,OAAO,WAAW,CAAC;IACrB,CAAC;IAED,IAAI,CAAC;QACH,OAAO,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC;IAC/B,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,MAAM,CAAC,KAAK,CAAC,CAAC;IACvB,CAAC;AACH,CAAC,CAAC;AAEF,MAAM,YAAY,GAAG,CAAC,KAAc,EAAU,EAAE;IAC9C,IAAI,KAAK,KAAK,IAAI,EAAE,CAAC;QACnB,OAAO,MAAM,CAAC;IAChB,CAAC;IAED,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;QACzB,OAAO,OAAO,CAAC;IACjB,CAAC;IAED,OAAO,OAAO,KAAK,CAAC;AACtB,CAAC,CAAC;AAEF,MAAM,WAAW,GAAG,CAAC,IAAa,EAAE,KAAc,EAAW,EAAE;IAC7D,IAAI,MAAM,CAAC,EAAE,CAAC,IAAI,EAAE,KAAK,CAAC,EAAE,CAAC;QAC3B,OAAO,IAAI,CAAC;IACd,CAAC;IAED,IAAI,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;QAChD,OAAO,IAAI,CAAC,MAAM,KAAK,KAAK,CAAC,MAAM;YACjC,IAAI,CAAC,KAAK,CAAC,CAAC,KAAK,EAAE,KAAK,EAAE,EAAE,CAAC,WAAW,CAAC,KAAK,EAAE,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;IACnE,CAAC;IAED,IAAI,QAAQ,CAAC,IAAI,CAAC,IAAI,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC;QACtC,MAAM,QAAQ,GAAG,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACnC,MAAM,SAAS,GAAG,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QAErC,OAAO,QAAQ,CAAC,MAAM,KAAK,SAAS,CAAC,MAAM;YACzC,QAAQ,CAAC,KAAK,CAAC,CAAC,GAAG,EAAE,EAAE,CACrB,MAAM,CAAC,SAAS,CAAC,cAAc,CAAC,IAAI,CAAC,KAAK,EAAE,GAAG,CAAC;gBAChD,WAAW,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,KAAK,CAAC,GAAG,CAAC,CAAC,CACnC,CAAC;IACN,CAAC;IAED,OAAO,KAAK,CAAC;AACf,CAAC,CAAC;AAEF,MAAa,WAAW;IACO;IAA7B,YAA6B,MAAe;QAAf,WAAM,GAAN,MAAM,CAAS;IAAG,CAAC;IAEhD,IAAI,EAAE;QACJ,OAAO,IAAI,CAAC;IACd,CAAC;IAED,IAAI,EAAE;QACJ,OAAO,IAAI,CAAC;IACd,CAAC;IAED,IAAI,IAAI;QACN,OAAO,IAAI,CAAC;IACd,CAAC;IAED,IAAI,EAAE;QACJ,OAAO,IAAI,CAAC;IACd,CAAC;IAED,IAAI,IAAI;QACN,OAAO,IAAI,CAAC;IACd,CAAC;IAED,IAAI,KAAK;QACP,OAAO,IAAI,CAAC;IACd,CAAC;IAED,IAAI,GAAG;QACL,OAAO,IAAI,CAAC;IACd,CAAC;IAED,IAAI,GAAG;QACL,OAAO,IAAI,CAAC;IACd,CAAC;IAED,IAAI,IAAI;QACN,OAAO,IAAI,CAAC;IACd,CAAC;IAED,IAAI,IAAI;QACN,OAAO,IAAI,CAAC;IACd,CAAC;IAED,IAAI,IAAI;QACN,OAAO,IAAI,CAAC;IACd,CAAC;IAED,IAAI,IAAI;QACN,OAAO,IAAI,CAAC;IACd,CAAC;IAED,IAAI,EAAE;QACJ,OAAO,IAAI,CAAC,UAAU,EAAE,CAAC;IAC3B,CAAC;IAED,IAAI,IAAI;QACN,IAAI,IAAI,CAAC,MAAM,KAAK,IAAI,EAAE,CAAC;YACzB,MAAM,IAAI,KAAK,CAAC,YAAY,WAAW,CAAC,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,CAAC;QACrE,CAAC;QAED,OAAO,IAAI,CAAC;IACd,CAAC;IAED,IAAI,KAAK;QACP,IAAI,IAAI,CAAC,MAAM,KAAK,KAAK,EAAE,CAAC;YAC1B,MAAM,IAAI,KAAK,CAAC,YAAY,WAAW,CAAC,IAAI,CAAC,MAAM,CAAC,cAAc,CAAC,CAAC;QACtE,CAAC;QAED,OAAO,IAAI,CAAC;IACd,CAAC;IAED,IAAI,KAAK;QACP,IAAI,IAAI,CAAC,MAAM,KAAK,IAAI,IAAI,IAAI,CAAC,MAAM,KAAK,SAAS,EAAE,CAAC;YACtD,MAAM,IAAI,KAAK,CAAC,YAAY,WAAW,CAAC,IAAI,CAAC,MAAM,CAAC,WAAW,CAAC,CAAC;QACnE,CAAC;QAED,OAAO,IAAI,CAAC;IACd,CAAC;IAED,KAAK,CAAC,QAAiB;QACrB,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC,IAAI,CAAC,MAAM,EAAE,QAAQ,CAAC,EAAE,CAAC;YACtC,MAAM,IAAI,KAAK,CAAC,YAAY,WAAW,CAAC,IAAI,CAAC,MAAM,CAAC,aAAa,WAAW,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC;QAC5F,CAAC;QAED,OAAO,IAAI,CAAC;IACd,CAAC;IAED,IAAI,CAAC,QAAiB;QACpB,OAAO,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC;IAC9B,CAAC;IAED,WAAW;QACT,IAAI,IAAI,CAAC,MAAM,KAAK,SAAS,EAAE,CAAC;YAC9B,MAAM,IAAI,KAAK,CAAC,YAAY,WAAW,CAAC,IAAI,CAAC,MAAM,CAAC,gBAAgB,CAAC,CAAC;QACxE,CAAC;QAED,OAAO,IAAI,CAAC;IACd,CAAC;IAED,MAAM,CAAC,QAAiB;QACtB,OAAO,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC;IAC9B,CAAC;IAED,GAAG,CAAC,QAAiB;QACnB,OAAO,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC;IAChC,CAAC;IAED,OAAO,CAAC,QAAiB;QACvB,IAAI,CAAC,WAAW,CAAC,IAAI,CAAC,MAAM,EAAE,QAAQ,CAAC,EAAE,CAAC;YACxC,MAAM,IAAI,KAAK,CAAC,YAAY,WAAW,CAAC,IAAI,CAAC,MAAM,CAAC,oBAAoB,WAAW,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC;QACnG,CAAC;QAED,OAAO,IAAI,CAAC;IACd,CAAC;IAED,CAAC,CAAC,YAAoB;QACpB,MAAM,UAAU,GAAG,YAAY,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;QAC7C,MAAM,sBAAsB,GAAG,YAAY,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;QAEjE,IAAI,UAAU,KAAK,sBAAsB,EAAE,CAAC;YAC1C,MAAM,IAAI,KAAK,CAAC,iBAAiB,sBAAsB,YAAY,UAAU,EAAE,CAAC,CAAC;QACnF,CAAC;QAED,OAAO,IAAI,CAAC;IACd,CAAC;IAED,EAAE,CAAC,YAAoB;QACrB,OAAO,IAAI,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC;IAC9B,CAAC;IAED,QAAQ,CAAC,GAAW,EAAE,aAAuB;QAC3C,MAAM,QAAQ,GAAG,IAAA,gBAAO,EAAC,IAAI,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC;QAE3C,IAAI,CAAC,QAAQ,CAAC,MAAM,EAAE,CAAC;YACrB,MAAM,IAAI,KAAK,CAAC,YAAY,WAAW,CAAC,IAAI,CAAC,MAAM,CAAC,sBAAsB,GAAG,GAAG,CAAC,CAAC;QACpF,CAAC;QAED,MAAM,aAAa,GAAG,IAAI,WAAW,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;QAEtD,IAAI,SAAS,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YACzB,aAAa,CAAC,OAAO,CAAC,aAAa,CAAC,CAAC;QACvC,CAAC;QAED,OAAO,aAAa,CAAC;IACvB,CAAC;IAED,OAAO,CAAC,QAAiB;QACvB,OAAO,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC,CAAC;IAClC,CAAC;IAED,OAAO,CAAC,QAAiB;QACvB,OAAO,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC,CAAC;IAClC,CAAC;IAED,SAAS,CAAC,QAAiB;QACzB,IAAI,OAAO,IAAI,CAAC,MAAM,KAAK,QAAQ,EAAE,CAAC;YACpC,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,EAAE,CAAC;gBAC5C,MAAM,IAAI,KAAK,CAAC,YAAY,WAAW,CAAC,IAAI,CAAC,MAAM,CAAC,eAAe,WAAW,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC;YAC9F,CAAC;YAED,OAAO,IAAI,CAAC;QACd,CAAC;QAED,IAAI,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC;YAC/B,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,WAAW,CAAC,KAAK,EAAE,QAAQ,CAAC,CAAC,EAAE,CAAC;gBAC/D,MAAM,IAAI,KAAK,CAAC,YAAY,WAAW,CAAC,IAAI,CAAC,MAAM,CAAC,eAAe,WAAW,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC;YAC9F,CAAC;YAED,OAAO,IAAI,CAAC;QACd,CAAC;QAED,MAAM,IAAI,KAAK,CAAC,4CAA4C,CAAC,CAAC;IAChE,CAAC;IAED,KAAK,CAAC,OAAwB;QAC5B,IAAI,OAAO,IAAI,CAAC,MAAM,KAAK,QAAQ,EAAE,CAAC;YACpC,MAAM,IAAI,KAAK,CAAC,YAAY,WAAW,CAAC,IAAI,CAAC,MAAM,CAAC,iBAAiB,CAAC,CAAC;QACzE,CAAC;QAED,MAAM,OAAO,GAAG,OAAO,OAAO,KAAK,QAAQ,CAAC,CAAC,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC;QAE5E,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC;YAC/B,MAAM,IAAI,KAAK,CAAC,YAAY,WAAW,CAAC,IAAI,CAAC,MAAM,CAAC,aAAa,MAAM,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC;QACtF,CAAC;QAED,OAAO,IAAI,CAAC;IACd,CAAC;IAED,MAAM,CAAC,QAAgB;QACrB,OAAO,IAAI,CAAC,QAAQ,CAAC,QAAQ,EAAE,QAAQ,CAAC,CAAC;IAC3C,CAAC;IAED,MAAM,CAAC,IAAY,EAAE,aAAuB;QAC1C,MAAM,OAAO,GAAG,IAAA,gBAAO,EAAC,IAAI,CAAC,MAAM,EAAE,SAAS,CAAC,CAAC;QAEhD,IAAI,CAAC,OAAO,CAAC,MAAM,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;YAChD,MAAM,IAAI,KAAK,CAAC,8CAA8C,CAAC,CAAC;QAClE,CAAC;QAED,MAAM,cAAc,GAAG,IAAI,CAAC,WAAW,EAAE,CAAC;QAC1C,MAAM,KAAK,GAAG,MAAM,CAAC,OAAO,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,IAAI,CAC9C,CAAC,CAAC,GAAG,CAAC,EAAE,EAAE,CAAC,GAAG,CAAC,WAAW,EAAE,KAAK,cAAc,CAChD,CAAC;QAEF,IAAI,CAAC,KAAK,EAAE,CAAC;YACX,MAAM,IAAI,KAAK,CAAC,yCAAyC,IAAI,GAAG,CAAC,CAAC;QACpE,CAAC;QAED,MAAM,aAAa,GAAG,IAAI,WAAW,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC;QAEhD,IAAI,SAAS,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YACzB,aAAa,CAAC,OAAO,CAAC,aAAa,CAAC,CAAC;QACvC,CAAC;QAED,OAAO,aAAa,CAAC;IACvB,CAAC;IAED,WAAW,CAAC,QAAiB;QAC3B,OAAO,IAAI,CAAC,eAAe,CAAC,QAAQ,CAAC,CAAC;IACxC,CAAC;IAED,QAAQ,CAAC,QAAiB;QACxB,OAAO,IAAI,CAAC,YAAY,CAAC,QAAQ,CAAC,CAAC;IACrC,CAAC;IAED,eAAe,CAAC,QAAiB;QAC/B,MAAM,YAAY,GAAG,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;QACzC,MAAM,cAAc,GAAG,MAAM,CAAC,QAAQ,CAAC,CAAC;QAExC,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,YAAY,CAAC,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,cAAc,CAAC,EAAE,CAAC;YACvE,MAAM,IAAI,KAAK,CAAC,8CAA8C,CAAC,CAAC;QAClE,CAAC;QAED,IAAI,YAAY,IAAI,cAAc,EAAE,CAAC;YACnC,MAAM,IAAI,KAAK,CAAC,YAAY,WAAW,CAAC,IAAI,CAAC,MAAM,CAAC,uBAAuB,WAAW,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC;QACtG,CAAC;QAED,OAAO,IAAI,CAAC;IACd,CAAC;IAED,YAAY,CAAC,QAAiB;QAC5B,MAAM,YAAY,GAAG,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;QACzC,MAAM,cAAc,GAAG,MAAM,CAAC,QAAQ,CAAC,CAAC;QAExC,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,YAAY,CAAC,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,cAAc,CAAC,EAAE,CAAC;YACvE,MAAM,IAAI,KAAK,CAAC,2CAA2C,CAAC,CAAC;QAC/D,CAAC;QAED,IAAI,YAAY,IAAI,cAAc,EAAE,CAAC;YACnC,MAAM,IAAI,KAAK,CAAC,YAAY,WAAW,CAAC,IAAI,CAAC,MAAM,CAAC,oBAAoB,WAAW,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC;QACnG,CAAC;QAED,OAAO,IAAI,CAAC;IACd,CAAC;IAED,UAAU;QACR,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,CAAC;YACjB,MAAM,IAAI,KAAK,CAAC,YAAY,WAAW,CAAC,IAAI,CAAC,MAAM,CAAC,eAAe,CAAC,CAAC;QACvE,CAAC;QAED,OAAO,IAAI,CAAC;IACd,CAAC;IAED,SAAS;QACP,IAAI,IAAI,CAAC,MAAM,EAAE,CAAC;YAChB,MAAM,IAAI,KAAK,CAAC,YAAY,WAAW,CAAC,IAAI,CAAC,MAAM,CAAC,cAAc,CAAC,CAAC;QACtE,CAAC;QAED,OAAO,IAAI,CAAC;IACd,CAAC;CACF;AA9QD,kCA8QC;AAEM,MAAM,eAAe,GAAG,GAAG,EAAE;IAClC,MAAM,MAAM,GAAG,CAAC,CAAC,MAAe,EAAE,EAAE,CAAC,IAAI,WAAW,CAAC,MAAM,CAAC,CAI3D,CAAC;IAEF,MAAM,CAAC,IAAI,GAAG,CAAC,OAAiB,EAAS,EAAE;QACzC,MAAM,IAAI,KAAK,CACb,OAAO,KAAK,SAAS,IAAI,OAAO,KAAK,IAAI,CAAC,CAAC,CAAC,oBAAoB,CAAC,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CACnF,CAAC;IACJ,CAAC,CAAC;IAEF,OAAO,MAAM,CAAC;AAChB,CAAC,CAAC;AAdW,QAAA,eAAe,mBAc1B;AAEF,MAAM,iBAAiB,GAAG,CAAC,QAAiD,EAAE,EAAE;IAC9E,IAAI,CAAC,QAAQ,EAAE,CAAC;QACd,OAAO,IAAI,CAAC;IACd,CAAC;IAED,OAAO;QACL,MAAM,EAAE,QAAQ,CAAC,MAAM;QACvB,IAAI,EAAE,QAAQ,CAAC,MAAM;QACrB,OAAO,EAAE,QAAQ,CAAC,OAAO;QACzB,IAAI,EAAE,QAAQ,CAAC,IAAI;QACnB,IAAI,EAAE,QAAQ,CAAC,IAAI;QACnB,YAAY,EAAE,QAAQ,CAAC,QAAQ;QAC/B,QAAQ,EAAE,QAAQ,CAAC,QAAQ;QAC3B,IAAI,EAAE,GAAG,EAAE;YACT,IAAI,OAAO,QAAQ,CAAC,IAAI,KAAK,QAAQ,EAAE,CAAC;gBACtC,OAAO,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC;YACnC,CAAC;YAED,OAAO,QAAQ,CAAC,IAAI,CAAC;QACvB,CAAC;QACD,IAAI,EAAE,GAAG,EAAE,CACT,OAAO,QAAQ,CAAC,IAAI,KAAK,QAAQ;YAC/B,CAAC,CAAC,QAAQ,CAAC,IAAI;YACf,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC,IAAI,IAAI,IAAI,CAAC;KAC5C,CAAC;AACJ,CAAC,CAAC;AAEF,MAAM,gBAAgB,GAAG,CAAC,OAAwC,EAAE,EAAE;IACpE,IAAI,CAAC,OAAO,EAAE,CAAC;QACb,OAAO,IAAI,CAAC;IACd,CAAC;IAED,MAAM,OAAO,GAAG,EAAE,GAAG,CAAC,OAAO,CAAC,OAAO,IAAI,EAAE,CAAC,EAAE,CAAC;IAE/C,OAAO;QACL,MAAM,EAAE,OAAO,CAAC,MAAM;QACtB,GAAG,EAAE,OAAO,CAAC,GAAG;QAChB,OAAO;QACP,IAAI,EAAE,OAAO,CAAC,IAAI;QAClB,SAAS,EAAE,CAAC,GAAW,EAAE,EAAE,CAAC,OAAO,CAAC,GAAG,CAAC;QACxC,SAAS,EAAE,CAAC,GAAW,EAAE,KAAc,EAAE,EAAE;YACzC,MAAM,aAAa,GAAG,GAAG,CAAC,IAAI,EAAE,CAAC;YAEjC,IAAI,CAAC,aAAa,EAAE,CAAC;gBACnB,OAAO;YACT,CAAC;YAED,OAAO,CAAC,aAAa,CAAC,GAAG,KAAK,KAAK,SAAS,IAAI,KAAK,KAAK,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;QACtF,CAAC;KACF,CAAC;AACJ,CAAC,CAAC;AAEK,MAAM,WAAW,GAAG,CACzB,OAAyB,EACzB,SAAwB,EACxB,EAAE;IACF,MAAM,MAAM,GAAG,IAAA,uBAAe,GAAE,CAAC;IACjC,MAAM,QAAQ,GAAG,iBAAiB,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC;IACrD,MAAM,OAAO,GAAG,gBAAgB,CAAC,OAAO,CAAC,OAA0C,CAAC,CAAC;IAErF,MAAM,WAAW,GAAG;QAClB,MAAM,EAAE,OAAO,CAAC,GAAG,CAAC,GAAG,EAAE;QACzB,GAAG,EAAE,CAAC,GAAW,EAAE,EAAE,CAAC,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,MAAM,CAAC,GAAG,IAAI,EAAE,CAAC,CAAC;QACxD,GAAG,EAAE,CAAC,GAAW,EAAE,KAAc,EAAE,EAAE;YACnC,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,MAAM,CAAC,GAAG,IAAI,EAAE,CAAC,EAAE,KAAK,CAAC,CAAC;YAC1C,WAAW,CAAC,MAAM,GAAG,OAAO,CAAC,GAAG,CAAC,GAAG,EAAE,CAAC;QACzC,CAAC;KACF,CAAC;IAEF,MAAM,IAAI,GAAG,CACX,IAAY,EACZ,EAAkD,EACnC,EAAE;QACjB,MAAM,cAAc,GAAG,MAAM,CAAC,IAAI,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,IAAI,cAAc,CAAC;QACnE,MAAM,IAAI,GAAG,OAAO,CAAC,OAAO,EAAE;aAC3B,IAAI,CAAC,KAAK,IAAI,EAAE;YACf,IAAI,OAAO,EAAE,KAAK,UAAU,EAAE,CAAC;gBAC7B,MAAM,IAAI,KAAK,CAAC,sCAAsC,CAAC,CAAC;YAC1D,CAAC;YAED,MAAM,EAAE,EAAE,CAAC;YACX,SAAS,CAAC,SAAS,CAAC;gBAClB,IAAI,EAAE,cAAc;gBACpB,MAAM,EAAE,MAAM;aACf,CAAC,CAAC;QACL,CAAC,CAAC;aACD,KAAK,CAAC,CAAC,KAAK,EAAE,EAAE;YACf,SAAS,CAAC,SAAS,CAAC;gBAClB,IAAI,EAAE,cAAc;gBACpB,MAAM,EAAE,MAAM;gBACd,OAAO,EAAE,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC;aAChE,CAAC,CAAC;QACL,CAAC,CAAC,CAAC;QAEL,SAAS,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC;QAC3B,OAAO,IAAI,CAAC;IACd,CAAC,CAAC;IAEF,MAAM,EAAE,GAAG;QACT,OAAO;QACP,QAAQ;QACR,WAAW;QACX,GAAG,EAAE,WAAW;QAChB,IAAI;QACJ,MAAM;KACP,CAAC;IAEF,IAAI,QAAQ,EAAE,CAAC;QACb,MAAM,CAAC,MAAM,CAAC,QAAQ,EAAE;YACtB,EAAE,EAAE,IAAI,WAAW,CAAC,QAAQ,CAAC;YAC7B,EAAE,EAAE,IAAI,WAAW,CAAC,QAAQ,CAAC;YAC7B,IAAI,EAAE,IAAI,WAAW,CAAC,QAAQ,CAAC;SAChC,CAAC,CAAC;IACL,CAAC;IAED,OAAO,EAAE,CAAC;AACZ,CAAC,CAAC;AAhEW,QAAA,WAAW,eAgEtB"}

package/dist-cjs/script/sandbox.js

@@ -0,0 +1,91 @@
+"use strict";
+// vm-based sandbox for the canonical script executor.
+//
+// Compiles the user's script wrapped in an async IIFE + `with(scope)` block,
+// then runs it inside a vm.createContext with codeGeneration disabled to
+// neutralize `eval` / `new Function(...)` attempts. NOTE: Node's `vm` module
+// is explicitly *not* a security boundary — this provides isolation against
+// accidental cross-contamination, not against hostile scripts. A future
+// `isolated-vm` migration should be tracked separately.
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __setModuleDefault = (this && this.__setModuleDefault) || (Object.create ? (function(o, v) {
+    Object.defineProperty(o, "default", { enumerable: true, value: v });
+}) : function(o, v) {
+    o["default"] = v;
+});
+var __importStar = (this && this.__importStar) || (function () {
+    var ownKeys = function(o) {
+        ownKeys = Object.getOwnPropertyNames || function (o) {
+            var ar = [];
+            for (var k in o) if (Object.prototype.hasOwnProperty.call(o, k)) ar[ar.length] = k;
+            return ar;
+        };
+        return ownKeys(o);
+    };
+    return function (mod) {
+        if (mod && mod.__esModule) return mod;
+        var result = {};
+        if (mod != null) for (var k = ownKeys(mod), i = 0; i < k.length; i++) if (k[i] !== "default") __createBinding(result, mod, k[i]);
+        __setModuleDefault(result, mod);
+        return result;
+    };
+})();
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.compileAndPrepare = exports.createSandbox = exports.compileScript = exports.wrapScriptSource = exports.SCRIPT_LINE_OFFSET = void 0;
+const vm = __importStar(require("node:vm"));
+const scope_js_1 = require("./scope.js");
+exports.SCRIPT_LINE_OFFSET = -2;
+const wrapScriptSource = (script) => [
+    "(async function () {",
+    "with (scope) {",
+    script,
+    "}",
+    "}).call(context)",
+].join("\n");
+exports.wrapScriptSource = wrapScriptSource;
+const compileScript = (script, filename) => new vm.Script((0, exports.wrapScriptSource)(script), {
+    filename,
+    lineOffset: exports.SCRIPT_LINE_OFFSET,
+});
+exports.compileScript = compileScript;
+const createSandbox = (bindings, filename) => {
+    const scopeTarget = (0, scope_js_1.buildScopeTarget)(bindings);
+    const scope = (0, scope_js_1.createScopeProxy)(scopeTarget);
+    // NOTE: We deliberately omit `microtaskMode: "afterEvaluate"` here. With
+    // that mode, microtasks scheduled inside the vm context are drained once
+    // (right after the synchronous portion of the script completes) but not
+    // again. That breaks fire-and-forget `pm.test(async () => {...})` because
+    // the host-side `tests.flush()` then awaits a Promise whose continuation
+    // is parked on a microtask queue that no one is draining. Backend and
+    // electron sandboxes both used afterEvaluate and would have hit the same
+    // bug; keeping it off here is the right canonical default.
+    const vmContext = vm.createContext({
+        scope,
+        context: Object.create(null),
+    }, {
+        name: filename,
+        codeGeneration: {
+            strings: false,
+            wasm: false,
+        },
+    });
+    return { scope, vmContext };
+};
+exports.createSandbox = createSandbox;
+const compileAndPrepare = (script, bindings, filename) => {
+    const { scope, vmContext } = (0, exports.createSandbox)(bindings, filename);
+    const vmScript = (0, exports.compileScript)(script, filename);
+    return { vmScript, scope, vmContext };
+};
+exports.compileAndPrepare = compileAndPrepare;
+//# sourceMappingURL=sandbox.js.map

package/dist-cjs/script/sandbox.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sandbox.js","sourceRoot":"","sources":["../../src/script/sandbox.ts"],"names":[],"mappings":";AAAA,sDAAsD;AACtD,EAAE;AACF,6EAA6E;AAC7E,yEAAyE;AACzE,6EAA6E;AAC7E,4EAA4E;AAC5E,wEAAwE;AACxE,wDAAwD;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAExD,4CAA8B;AAG9B,yCAAgE;AAEnD,QAAA,kBAAkB,GAAG,CAAC,CAAC,CAAC;AAE9B,MAAM,gBAAgB,GAAG,CAAC,MAAc,EAAU,EAAE,CACzD;IACE,sBAAsB;IACtB,gBAAgB;IAChB,MAAM;IACN,GAAG;IACH,kBAAkB;CACnB,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AAPF,QAAA,gBAAgB,oBAOd;AAQR,MAAM,aAAa,GAAG,CAAC,MAAc,EAAE,QAAgB,EAAa,EAAE,CAC3E,IAAI,EAAE,CAAC,MAAM,CAAC,IAAA,wBAAgB,EAAC,MAAM,CAAC,EAAE;IACtC,QAAQ;IACR,UAAU,EAAE,0BAAkB;CAC/B,CAAC,CAAC;AAJQ,QAAA,aAAa,iBAIrB;AAEE,MAAM,aAAa,GAAG,CAC3B,QAAuB,EACvB,QAAgB,EAC2C,EAAE;IAC7D,MAAM,WAAW,GAAG,IAAA,2BAAgB,EAAC,QAAQ,CAAC,CAAC;IAC/C,MAAM,KAAK,GAAG,IAAA,2BAAgB,EAAC,WAAW,CAAC,CAAC;IAC5C,yEAAyE;IACzE,yEAAyE;IACzE,wEAAwE;IACxE,0EAA0E;IAC1E,yEAAyE;IACzE,sEAAsE;IACtE,yEAAyE;IACzE,2DAA2D;IAC3D,MAAM,SAAS,GAAG,EAAE,CAAC,aAAa,CAChC;QACE,KAAK;QACL,OAAO,EAAE,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC;KAC7B,EACD;QACE,IAAI,EAAE,QAAQ;QACd,cAAc,EAAE;YACd,OAAO,EAAE,KAAK;YACd,IAAI,EAAE,KAAK;SACZ;KACF,CACF,CAAC;IAEF,OAAO,EAAE,KAAK,EAAE,SAAS,EAAE,CAAC;AAC9B,CAAC,CAAC;AA7BW,QAAA,aAAa,iBA6BxB;AAEK,MAAM,iBAAiB,GAAG,CAC/B,MAAc,EACd,QAAuB,EACvB,QAAgB,EACO,EAAE;IACzB,MAAM,EAAE,KAAK,EAAE,SAAS,EAAE,GAAG,IAAA,qBAAa,EAAC,QAAQ,EAAE,QAAQ,CAAC,CAAC;IAC/D,MAAM,QAAQ,GAAG,IAAA,qBAAa,EAAC,MAAM,EAAE,QAAQ,CAAC,CAAC;IACjD,OAAO,EAAE,QAAQ,EAAE,KAAK,EAAE,SAAS,EAAE,CAAC;AACxC,CAAC,CAAC;AARW,QAAA,iBAAiB,qBAQ5B"}

package/dist-cjs/script/scope.js

@@ -0,0 +1,177 @@
+"use strict";
+// Reserved globals + scope target builder for the canonical sandbox.
+//
+// The "allowed" list is intentionally larger than callman-core's legacy
+// scriptEngine — it adopts the union seen in the backend/electron sandboxes
+// (Error subclasses, Map/Set, Symbol, BigInt, TextEncoder/Decoder). This
+// is documented as an intentional behavior change for callers that came
+// from the older A path.
+//
+// The "blocked" set is the safety floor: these names are always undefined
+// in user scripts, regardless of what the caller passes in `bindings`.
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.createScopeProxy = exports.buildScopeTarget = exports.VALID_LABEL_IDENTIFIER_PATTERN = exports.RESERVED_LABEL_NAMES = void 0;
+const ALLOWED_GLOBALS = {
+    JSON,
+    Math,
+    Number,
+    String,
+    Boolean,
+    Array,
+    Object,
+    Date,
+    RegExp,
+    Promise,
+    Error,
+    TypeError,
+    ReferenceError,
+    SyntaxError,
+    RangeError,
+    EvalError,
+    URIError,
+    AggregateError,
+    Map,
+    Set,
+    WeakMap,
+    WeakSet,
+    Symbol,
+    BigInt,
+    URL,
+    URLSearchParams,
+    TextEncoder,
+    TextDecoder,
+    parseInt,
+    parseFloat,
+    encodeURIComponent,
+    decodeURIComponent,
+    isFinite,
+    isNaN,
+    // Sentinel values — these are not constructors but are safe to expose
+    undefined,
+    NaN,
+    Infinity,
+};
+const BLOCKED_GLOBALS = [
+    "eval",
+    "Function",
+    "Buffer",
+    "setTimeout",
+    "clearTimeout",
+    "setInterval",
+    "clearInterval",
+    "fetch",
+    "XMLHttpRequest",
+    "WebSocket",
+    "Worker",
+    "window",
+    "document",
+    "self",
+    "globalThis",
+    "global",
+    "process",
+    "require",
+    "module",
+    "exports",
+    "navigator",
+    "importScripts",
+];
+// Names that the caller cannot use as a "label-as-global" workflow key.
+// Exposing a workflow node named `pm` or `eval` would shadow the built-in
+// API or reintroduce a blocked global, so we reject these reservations
+// when building label globals.
+exports.RESERVED_LABEL_NAMES = new Set([
+    ...Object.keys(ALLOWED_GLOBALS),
+    ...BLOCKED_GLOBALS,
+    "pm",
+    "env",
+    "console",
+    "request",
+    "response",
+    "test",
+    "expect",
+    "workflow",
+    // Backend reserves these specifically to keep label globals from clashing
+    // with planned db/kafka/redis runtime APIs (Sandbox D / future).
+    "db",
+    "kafka",
+    "redis",
+]);
+exports.VALID_LABEL_IDENTIFIER_PATTERN = /^[A-Za-z_$][\w$]*$/;
+const buildScopeTarget = (bindings) => {
+    const target = {
+        ...ALLOWED_GLOBALS,
+        pm: bindings.pm,
+    };
+    if (bindings.env !== undefined) {
+        target.env = bindings.env;
+    }
+    if (bindings.environment !== undefined) {
+        target.environment = bindings.environment;
+    }
+    if (bindings.request !== undefined) {
+        target.request = bindings.request;
+    }
+    if (bindings.response !== undefined) {
+        target.response = bindings.response;
+    }
+    if (bindings.test !== undefined) {
+        target.test = bindings.test;
+    }
+    if (bindings.expect !== undefined) {
+        target.expect = bindings.expect;
+    }
+    if (bindings.console !== undefined) {
+        target.console = bindings.console;
+    }
+    if (bindings.db !== undefined) {
+        target.db = bindings.db;
+    }
+    if (bindings.kafka !== undefined) {
+        target.kafka = bindings.kafka;
+    }
+    if (bindings.redis !== undefined) {
+        target.redis = bindings.redis;
+    }
+    if (bindings.random !== undefined) {
+        target.random = bindings.random;
+    }
+    if (bindings.counter !== undefined) {
+        target.counter = bindings.counter;
+    }
+    if (bindings.variables !== undefined) {
+        target.variables = bindings.variables;
+    }
+    if (bindings.CryptoJS !== undefined) {
+        target.CryptoJS = bindings.CryptoJS;
+    }
+    if (bindings.labelGlobals) {
+        for (const [name, value] of Object.entries(bindings.labelGlobals)) {
+            target[name] = value;
+        }
+    }
+    // Always blocked — overwrite anything labelGlobals tried to slip in.
+    for (const name of BLOCKED_GLOBALS) {
+        target[name] = undefined;
+    }
+    return target;
+};
+exports.buildScopeTarget = buildScopeTarget;
+const createScopeProxy = (target) => new Proxy(target, {
+    has: () => true,
+    get(scopeTarget, property) {
+        if (property === Symbol.unscopables) {
+            return undefined;
+        }
+        return scopeTarget[property];
+    },
+    set(scopeTarget, property, value) {
+        scopeTarget[property] = value;
+        return true;
+    },
+    deleteProperty(scopeTarget, property) {
+        delete scopeTarget[property];
+        return true;
+    },
+});
+exports.createScopeProxy = createScopeProxy;
+//# sourceMappingURL=scope.js.map

package/dist-cjs/script/scope.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"scope.js","sourceRoot":"","sources":["../../src/script/scope.ts"],"names":[],"mappings":";AAAA,qEAAqE;AACrE,EAAE;AACF,wEAAwE;AACxE,4EAA4E;AAC5E,yEAAyE;AACzE,wEAAwE;AACxE,yBAAyB;AACzB,EAAE;AACF,0EAA0E;AAC1E,uEAAuE;;;AAEvE,MAAM,eAAe,GAA4B;IAC/C,IAAI;IACJ,IAAI;IACJ,MAAM;IACN,MAAM;IACN,OAAO;IACP,KAAK;IACL,MAAM;IACN,IAAI;IACJ,MAAM;IACN,OAAO;IACP,KAAK;IACL,SAAS;IACT,cAAc;IACd,WAAW;IACX,UAAU;IACV,SAAS;IACT,QAAQ;IACR,cAAc;IACd,GAAG;IACH,GAAG;IACH,OAAO;IACP,OAAO;IACP,MAAM;IACN,MAAM;IACN,GAAG;IACH,eAAe;IACf,WAAW;IACX,WAAW;IACX,QAAQ;IACR,UAAU;IACV,kBAAkB;IAClB,kBAAkB;IAClB,QAAQ;IACR,KAAK;IACL,sEAAsE;IACtE,SAAS;IACT,GAAG;IACH,QAAQ;CACT,CAAC;AAEF,MAAM,eAAe,GAAG;IACtB,MAAM;IACN,UAAU;IACV,QAAQ;IACR,YAAY;IACZ,cAAc;IACd,aAAa;IACb,eAAe;IACf,OAAO;IACP,gBAAgB;IAChB,WAAW;IACX,QAAQ;IACR,QAAQ;IACR,UAAU;IACV,MAAM;IACN,YAAY;IACZ,QAAQ;IACR,SAAS;IACT,SAAS;IACT,QAAQ;IACR,SAAS;IACT,WAAW;IACX,eAAe;CACP,CAAC;AAEX,wEAAwE;AACxE,0EAA0E;AAC1E,uEAAuE;AACvE,+BAA+B;AAClB,QAAA,oBAAoB,GAAG,IAAI,GAAG,CAAS;IAClD,GAAG,MAAM,CAAC,IAAI,CAAC,eAAe,CAAC;IAC/B,GAAG,eAAe;IAClB,IAAI;IACJ,KAAK;IACL,SAAS;IACT,SAAS;IACT,UAAU;IACV,MAAM;IACN,QAAQ;IACR,UAAU;IACV,0EAA0E;IAC1E,iEAAiE;IACjE,IAAI;IACJ,OAAO;IACP,OAAO;CACR,CAAC,CAAC;AAEU,QAAA,8BAA8B,GAAG,oBAAoB,CAAC;AAgC5D,MAAM,gBAAgB,GAAG,CAAC,QAAuB,EAA2B,EAAE;IACnF,MAAM,MAAM,GAA4B;QACtC,GAAG,eAAe;QAClB,EAAE,EAAE,QAAQ,CAAC,EAAE;KAChB,CAAC;IAEF,IAAI,QAAQ,CAAC,GAAG,KAAK,SAAS,EAAE,CAAC;QAC/B,MAAM,CAAC,GAAG,GAAG,QAAQ,CAAC,GAAG,CAAC;IAC5B,CAAC;IACD,IAAI,QAAQ,CAAC,WAAW,KAAK,SAAS,EAAE,CAAC;QACvC,MAAM,CAAC,WAAW,GAAG,QAAQ,CAAC,WAAW,CAAC;IAC5C,CAAC;IACD,IAAI,QAAQ,CAAC,OAAO,KAAK,SAAS,EAAE,CAAC;QACnC,MAAM,CAAC,OAAO,GAAG,QAAQ,CAAC,OAAO,CAAC;IACpC,CAAC;IACD,IAAI,QAAQ,CAAC,QAAQ,KAAK,SAAS,EAAE,CAAC;QACpC,MAAM,CAAC,QAAQ,GAAG,QAAQ,CAAC,QAAQ,CAAC;IACtC,CAAC;IACD,IAAI,QAAQ,CAAC,IAAI,KAAK,SAAS,EAAE,CAAC;QAChC,MAAM,CAAC,IAAI,GAAG,QAAQ,CAAC,IAAI,CAAC;IAC9B,CAAC;IACD,IAAI,QAAQ,CAAC,MAAM,KAAK,SAAS,EAAE,CAAC;QAClC,MAAM,CAAC,MAAM,GAAG,QAAQ,CAAC,MAAM,CAAC;IAClC,CAAC;IACD,IAAI,QAAQ,CAAC,OAAO,KAAK,SAAS,EAAE,CAAC;QACnC,MAAM,CAAC,OAAO,GAAG,QAAQ,CAAC,OAAO,CAAC;IACpC,CAAC;IACD,IAAI,QAAQ,CAAC,EAAE,KAAK,SAAS,EAAE,CAAC;QAC9B,MAAM,CAAC,EAAE,GAAG,QAAQ,CAAC,EAAE,CAAC;IAC1B,CAAC;IACD,IAAI,QAAQ,CAAC,KAAK,KAAK,SAAS,EAAE,CAAC;QACjC,MAAM,CAAC,KAAK,GAAG,QAAQ,CAAC,KAAK,CAAC;IAChC,CAAC;IACD,IAAI,QAAQ,CAAC,KAAK,KAAK,SAAS,EAAE,CAAC;QACjC,MAAM,CAAC,KAAK,GAAG,QAAQ,CAAC,KAAK,CAAC;IAChC,CAAC;IACD,IAAI,QAAQ,CAAC,MAAM,KAAK,SAAS,EAAE,CAAC;QAClC,MAAM,CAAC,MAAM,GAAG,QAAQ,CAAC,MAAM,CAAC;IAClC,CAAC;IACD,IAAI,QAAQ,CAAC,OAAO,KAAK,SAAS,EAAE,CAAC;QACnC,MAAM,CAAC,OAAO,GAAG,QAAQ,CAAC,OAAO,CAAC;IACpC,CAAC;IACD,IAAI,QAAQ,CAAC,SAAS,KAAK,SAAS,EAAE,CAAC;QACrC,MAAM,CAAC,SAAS,GAAG,QAAQ,CAAC,SAAS,CAAC;IACxC,CAAC;IACD,IAAI,QAAQ,CAAC,QAAQ,KAAK,SAAS,EAAE,CAAC;QACpC,MAAM,CAAC,QAAQ,GAAG,QAAQ,CAAC,QAAQ,CAAC;IACtC,CAAC;IACD,IAAI,QAAQ,CAAC,YAAY,EAAE,CAAC;QAC1B,KAAK,MAAM,CAAC,IAAI,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,QAAQ,CAAC,YAAY,CAAC,EAAE,CAAC;YAClE,MAAM,CAAC,IAAI,CAAC,GAAG,KAAK,CAAC;QACvB,CAAC;IACH,CAAC;IAED,qEAAqE;IACrE,KAAK,MAAM,IAAI,IAAI,eAAe,EAAE,CAAC;QACnC,MAAM,CAAC,IAAI,CAAC,GAAG,SAAS,CAAC;IAC3B,CAAC;IAED,OAAO,MAAM,CAAC;AAChB,CAAC,CAAC;AA5DW,QAAA,gBAAgB,oBA4D3B;AAEK,MAAM,gBAAgB,GAAG,CAAC,MAA+B,EAA2B,EAAE,CAC3F,IAAI,KAAK,CAAC,MAAM,EAAE;IAChB,GAAG,EAAE,GAAG,EAAE,CAAC,IAAI;IACf,GAAG,CAAC,WAAW,EAAE,QAAQ;QACvB,IAAI,QAAQ,KAAK,MAAM,CAAC,WAAW,EAAE,CAAC;YACpC,OAAO,SAAS,CAAC;QACnB,CAAC;QACD,OAAO,WAAW,CAAC,QAAoC,CAAC,CAAC;IAC3D,CAAC;IACD,GAAG,CAAC,WAAW,EAAE,QAAQ,EAAE,KAAK;QAC9B,WAAW,CAAC,QAAoC,CAAC,GAAG,KAAK,CAAC;QAC1D,OAAO,IAAI,CAAC;IACd,CAAC;IACD,cAAc,CAAC,WAAW,EAAE,QAAQ;QAClC,OAAO,WAAW,CAAC,QAAoC,CAAC,CAAC;QACzD,OAAO,IAAI,CAAC;IACd,CAAC;CACF,CAAC,CAAC;AAjBQ,QAAA,gBAAgB,oBAiBxB"}

package/dist-cjs/script/scriptEngine.js

@@ -0,0 +1,12 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.runScript = void 0;
+// Backwards-compatibility re-export. The real implementation now lives in
+// `legacy.ts` (which calls the canonical `executeScript`). Direct imports
+// from this path stay working for any consumer that pinned to the
+// pre-1.1.0 module layout.
+//
+// Prefer the package entry: `import { runScript } from "callman-core";`
+var legacy_js_1 = require("./legacy.js");
+Object.defineProperty(exports, "runScript", { enumerable: true, get: function () { return legacy_js_1.runScript; } });
+//# sourceMappingURL=scriptEngine.js.map

package/dist-cjs/script/scriptEngine.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"scriptEngine.js","sourceRoot":"","sources":["../../src/script/scriptEngine.ts"],"names":[],"mappings":";;;AAAA,0EAA0E;AAC1E,0EAA0E;AAC1E,kEAAkE;AAClE,2BAA2B;AAC3B,EAAE;AACF,wEAAwE;AACxE,yCAAwC;AAA/B,sGAAA,SAAS,OAAA"}