callman-core 1.0.6 → 1.2.0

package/dist/script/sandbox.js

@@ -0,0 +1,51 @@
+// vm-based sandbox for the canonical script executor.
+//
+// Compiles the user's script wrapped in an async IIFE + `with(scope)` block,
+// then runs it inside a vm.createContext with codeGeneration disabled to
+// neutralize `eval` / `new Function(...)` attempts. NOTE: Node's `vm` module
+// is explicitly *not* a security boundary — this provides isolation against
+// accidental cross-contamination, not against hostile scripts. A future
+// `isolated-vm` migration should be tracked separately.
+import * as vm from "node:vm";
+import { buildScopeTarget, createScopeProxy } from "./scope.js";
+export const SCRIPT_LINE_OFFSET = -2;
+export const wrapScriptSource = (script) => [
+    "(async function () {",
+    "with (scope) {",
+    script,
+    "}",
+    "}).call(context)",
+].join("\n");
+export const compileScript = (script, filename) => new vm.Script(wrapScriptSource(script), {
+    filename,
+    lineOffset: SCRIPT_LINE_OFFSET,
+});
+export const createSandbox = (bindings, filename) => {
+    const scopeTarget = buildScopeTarget(bindings);
+    const scope = createScopeProxy(scopeTarget);
+    // NOTE: We deliberately omit `microtaskMode: "afterEvaluate"` here. With
+    // that mode, microtasks scheduled inside the vm context are drained once
+    // (right after the synchronous portion of the script completes) but not
+    // again. That breaks fire-and-forget `pm.test(async () => {...})` because
+    // the host-side `tests.flush()` then awaits a Promise whose continuation
+    // is parked on a microtask queue that no one is draining. Backend and
+    // electron sandboxes both used afterEvaluate and would have hit the same
+    // bug; keeping it off here is the right canonical default.
+    const vmContext = vm.createContext({
+        scope,
+        context: Object.create(null),
+    }, {
+        name: filename,
+        codeGeneration: {
+            strings: false,
+            wasm: false,
+        },
+    });
+    return { scope, vmContext };
+};
+export const compileAndPrepare = (script, bindings, filename) => {
+    const { scope, vmContext } = createSandbox(bindings, filename);
+    const vmScript = compileScript(script, filename);
+    return { vmScript, scope, vmContext };
+};
+//# sourceMappingURL=sandbox.js.map

package/dist/script/sandbox.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sandbox.js","sourceRoot":"","sources":["../../src/script/sandbox.ts"],"names":[],"mappings":"AAAA,sDAAsD;AACtD,EAAE;AACF,6EAA6E;AAC7E,yEAAyE;AACzE,6EAA6E;AAC7E,4EAA4E;AAC5E,wEAAwE;AACxE,wDAAwD;AAExD,OAAO,KAAK,EAAE,MAAM,SAAS,CAAC;AAG9B,OAAO,EAAE,gBAAgB,EAAE,gBAAgB,EAAE,MAAM,YAAY,CAAC;AAEhE,MAAM,CAAC,MAAM,kBAAkB,GAAG,CAAC,CAAC,CAAC;AAErC,MAAM,CAAC,MAAM,gBAAgB,GAAG,CAAC,MAAc,EAAU,EAAE,CACzD;IACE,sBAAsB;IACtB,gBAAgB;IAChB,MAAM;IACN,GAAG;IACH,kBAAkB;CACnB,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AAQf,MAAM,CAAC,MAAM,aAAa,GAAG,CAAC,MAAc,EAAE,QAAgB,EAAa,EAAE,CAC3E,IAAI,EAAE,CAAC,MAAM,CAAC,gBAAgB,CAAC,MAAM,CAAC,EAAE;IACtC,QAAQ;IACR,UAAU,EAAE,kBAAkB;CAC/B,CAAC,CAAC;AAEL,MAAM,CAAC,MAAM,aAAa,GAAG,CAC3B,QAAuB,EACvB,QAAgB,EAC2C,EAAE;IAC7D,MAAM,WAAW,GAAG,gBAAgB,CAAC,QAAQ,CAAC,CAAC;IAC/C,MAAM,KAAK,GAAG,gBAAgB,CAAC,WAAW,CAAC,CAAC;IAC5C,yEAAyE;IACzE,yEAAyE;IACzE,wEAAwE;IACxE,0EAA0E;IAC1E,yEAAyE;IACzE,sEAAsE;IACtE,yEAAyE;IACzE,2DAA2D;IAC3D,MAAM,SAAS,GAAG,EAAE,CAAC,aAAa,CAChC;QACE,KAAK;QACL,OAAO,EAAE,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC;KAC7B,EACD;QACE,IAAI,EAAE,QAAQ;QACd,cAAc,EAAE;YACd,OAAO,EAAE,KAAK;YACd,IAAI,EAAE,KAAK;SACZ;KACF,CACF,CAAC;IAEF,OAAO,EAAE,KAAK,EAAE,SAAS,EAAE,CAAC;AAC9B,CAAC,CAAC;AAEF,MAAM,CAAC,MAAM,iBAAiB,GAAG,CAC/B,MAAc,EACd,QAAuB,EACvB,QAAgB,EACO,EAAE;IACzB,MAAM,EAAE,KAAK,EAAE,SAAS,EAAE,GAAG,aAAa,CAAC,QAAQ,EAAE,QAAQ,CAAC,CAAC;IAC/D,MAAM,QAAQ,GAAG,aAAa,CAAC,MAAM,EAAE,QAAQ,CAAC,CAAC;IACjD,OAAO,EAAE,QAAQ,EAAE,KAAK,EAAE,SAAS,EAAE,CAAC;AACxC,CAAC,CAAC"}

package/dist/script/scope.d.ts

@@ -0,0 +1,23 @@
+export declare const RESERVED_LABEL_NAMES: Set<string>;
+export declare const VALID_LABEL_IDENTIFIER_PATTERN: RegExp;
+export interface ScopeBindings {
+    pm: Record<string, unknown>;
+    env?: Record<string, string>;
+    environment?: unknown;
+    request?: unknown;
+    response?: unknown;
+    test?: unknown;
+    expect?: unknown;
+    console?: Record<string, (...args: unknown[]) => void>;
+    db?: unknown;
+    kafka?: unknown;
+    redis?: unknown;
+    random?: unknown;
+    counter?: unknown;
+    variables?: unknown;
+    CryptoJS?: unknown;
+    labelGlobals?: Record<string, unknown>;
+}
+export declare const buildScopeTarget: (bindings: ScopeBindings) => Record<string, unknown>;
+export declare const createScopeProxy: (target: Record<string, unknown>) => Record<string, unknown>;
+//# sourceMappingURL=scope.d.ts.map

package/dist/script/scope.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"scope.d.ts","sourceRoot":"","sources":["../../src/script/scope.ts"],"names":[],"mappings":"AAiFA,eAAO,MAAM,oBAAoB,aAgB/B,CAAC;AAEH,eAAO,MAAM,8BAA8B,QAAuB,CAAC;AAEnE,MAAM,WAAW,aAAa;IAE5B,EAAE,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAM5B,GAAG,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAC7B,WAAW,CAAC,EAAE,OAAO,CAAC;IACtB,OAAO,CAAC,EAAE,OAAO,CAAC;IAClB,QAAQ,CAAC,EAAE,OAAO,CAAC;IACnB,IAAI,CAAC,EAAE,OAAO,CAAC;IACf,MAAM,CAAC,EAAE,OAAO,CAAC;IACjB,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,CAAC,GAAG,IAAI,EAAE,OAAO,EAAE,KAAK,IAAI,CAAC,CAAC;IAIvD,EAAE,CAAC,EAAE,OAAO,CAAC;IACb,KAAK,CAAC,EAAE,OAAO,CAAC;IAChB,KAAK,CAAC,EAAE,OAAO,CAAC;IAChB,MAAM,CAAC,EAAE,OAAO,CAAC;IACjB,OAAO,CAAC,EAAE,OAAO,CAAC;IAClB,SAAS,CAAC,EAAE,OAAO,CAAC;IACpB,QAAQ,CAAC,EAAE,OAAO,CAAC;IAGnB,YAAY,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;CACxC;AAED,eAAO,MAAM,gBAAgB,GAAI,UAAU,aAAa,KAAG,MAAM,CAAC,MAAM,EAAE,OAAO,CA4DhF,CAAC;AAEF,eAAO,MAAM,gBAAgB,GAAI,QAAQ,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,KAAG,MAAM,CAAC,MAAM,EAAE,OAAO,CAiBrF,CAAC"}

package/dist/script/scope.js

@@ -0,0 +1,172 @@
+// Reserved globals + scope target builder for the canonical sandbox.
+//
+// The "allowed" list is intentionally larger than callman-core's legacy
+// scriptEngine — it adopts the union seen in the backend/electron sandboxes
+// (Error subclasses, Map/Set, Symbol, BigInt, TextEncoder/Decoder). This
+// is documented as an intentional behavior change for callers that came
+// from the older A path.
+//
+// The "blocked" set is the safety floor: these names are always undefined
+// in user scripts, regardless of what the caller passes in `bindings`.
+const ALLOWED_GLOBALS = {
+    JSON,
+    Math,
+    Number,
+    String,
+    Boolean,
+    Array,
+    Object,
+    Date,
+    RegExp,
+    Promise,
+    Error,
+    TypeError,
+    ReferenceError,
+    SyntaxError,
+    RangeError,
+    EvalError,
+    URIError,
+    AggregateError,
+    Map,
+    Set,
+    WeakMap,
+    WeakSet,
+    Symbol,
+    BigInt,
+    URL,
+    URLSearchParams,
+    TextEncoder,
+    TextDecoder,
+    parseInt,
+    parseFloat,
+    encodeURIComponent,
+    decodeURIComponent,
+    isFinite,
+    isNaN,
+    // Sentinel values — these are not constructors but are safe to expose
+    undefined,
+    NaN,
+    Infinity,
+};
+const BLOCKED_GLOBALS = [
+    "eval",
+    "Function",
+    "Buffer",
+    "setTimeout",
+    "clearTimeout",
+    "setInterval",
+    "clearInterval",
+    "fetch",
+    "XMLHttpRequest",
+    "WebSocket",
+    "Worker",
+    "window",
+    "document",
+    "self",
+    "globalThis",
+    "global",
+    "process",
+    "require",
+    "module",
+    "exports",
+    "navigator",
+    "importScripts",
+];
+// Names that the caller cannot use as a "label-as-global" workflow key.
+// Exposing a workflow node named `pm` or `eval` would shadow the built-in
+// API or reintroduce a blocked global, so we reject these reservations
+// when building label globals.
+export const RESERVED_LABEL_NAMES = new Set([
+    ...Object.keys(ALLOWED_GLOBALS),
+    ...BLOCKED_GLOBALS,
+    "pm",
+    "env",
+    "console",
+    "request",
+    "response",
+    "test",
+    "expect",
+    "workflow",
+    // Backend reserves these specifically to keep label globals from clashing
+    // with planned db/kafka/redis runtime APIs (Sandbox D / future).
+    "db",
+    "kafka",
+    "redis",
+]);
+export const VALID_LABEL_IDENTIFIER_PATTERN = /^[A-Za-z_$][\w$]*$/;
+export const buildScopeTarget = (bindings) => {
+    const target = {
+        ...ALLOWED_GLOBALS,
+        pm: bindings.pm,
+    };
+    if (bindings.env !== undefined) {
+        target.env = bindings.env;
+    }
+    if (bindings.environment !== undefined) {
+        target.environment = bindings.environment;
+    }
+    if (bindings.request !== undefined) {
+        target.request = bindings.request;
+    }
+    if (bindings.response !== undefined) {
+        target.response = bindings.response;
+    }
+    if (bindings.test !== undefined) {
+        target.test = bindings.test;
+    }
+    if (bindings.expect !== undefined) {
+        target.expect = bindings.expect;
+    }
+    if (bindings.console !== undefined) {
+        target.console = bindings.console;
+    }
+    if (bindings.db !== undefined) {
+        target.db = bindings.db;
+    }
+    if (bindings.kafka !== undefined) {
+        target.kafka = bindings.kafka;
+    }
+    if (bindings.redis !== undefined) {
+        target.redis = bindings.redis;
+    }
+    if (bindings.random !== undefined) {
+        target.random = bindings.random;
+    }
+    if (bindings.counter !== undefined) {
+        target.counter = bindings.counter;
+    }
+    if (bindings.variables !== undefined) {
+        target.variables = bindings.variables;
+    }
+    if (bindings.CryptoJS !== undefined) {
+        target.CryptoJS = bindings.CryptoJS;
+    }
+    if (bindings.labelGlobals) {
+        for (const [name, value] of Object.entries(bindings.labelGlobals)) {
+            target[name] = value;
+        }
+    }
+    // Always blocked — overwrite anything labelGlobals tried to slip in.
+    for (const name of BLOCKED_GLOBALS) {
+        target[name] = undefined;
+    }
+    return target;
+};
+export const createScopeProxy = (target) => new Proxy(target, {
+    has: () => true,
+    get(scopeTarget, property) {
+        if (property === Symbol.unscopables) {
+            return undefined;
+        }
+        return scopeTarget[property];
+    },
+    set(scopeTarget, property, value) {
+        scopeTarget[property] = value;
+        return true;
+    },
+    deleteProperty(scopeTarget, property) {
+        delete scopeTarget[property];
+        return true;
+    },
+});
+//# sourceMappingURL=scope.js.map

package/dist/script/scope.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"scope.js","sourceRoot":"","sources":["../../src/script/scope.ts"],"names":[],"mappings":"AAAA,qEAAqE;AACrE,EAAE;AACF,wEAAwE;AACxE,4EAA4E;AAC5E,yEAAyE;AACzE,wEAAwE;AACxE,yBAAyB;AACzB,EAAE;AACF,0EAA0E;AAC1E,uEAAuE;AAEvE,MAAM,eAAe,GAA4B;IAC/C,IAAI;IACJ,IAAI;IACJ,MAAM;IACN,MAAM;IACN,OAAO;IACP,KAAK;IACL,MAAM;IACN,IAAI;IACJ,MAAM;IACN,OAAO;IACP,KAAK;IACL,SAAS;IACT,cAAc;IACd,WAAW;IACX,UAAU;IACV,SAAS;IACT,QAAQ;IACR,cAAc;IACd,GAAG;IACH,GAAG;IACH,OAAO;IACP,OAAO;IACP,MAAM;IACN,MAAM;IACN,GAAG;IACH,eAAe;IACf,WAAW;IACX,WAAW;IACX,QAAQ;IACR,UAAU;IACV,kBAAkB;IAClB,kBAAkB;IAClB,QAAQ;IACR,KAAK;IACL,sEAAsE;IACtE,SAAS;IACT,GAAG;IACH,QAAQ;CACT,CAAC;AAEF,MAAM,eAAe,GAAG;IACtB,MAAM;IACN,UAAU;IACV,QAAQ;IACR,YAAY;IACZ,cAAc;IACd,aAAa;IACb,eAAe;IACf,OAAO;IACP,gBAAgB;IAChB,WAAW;IACX,QAAQ;IACR,QAAQ;IACR,UAAU;IACV,MAAM;IACN,YAAY;IACZ,QAAQ;IACR,SAAS;IACT,SAAS;IACT,QAAQ;IACR,SAAS;IACT,WAAW;IACX,eAAe;CACP,CAAC;AAEX,wEAAwE;AACxE,0EAA0E;AAC1E,uEAAuE;AACvE,+BAA+B;AAC/B,MAAM,CAAC,MAAM,oBAAoB,GAAG,IAAI,GAAG,CAAS;IAClD,GAAG,MAAM,CAAC,IAAI,CAAC,eAAe,CAAC;IAC/B,GAAG,eAAe;IAClB,IAAI;IACJ,KAAK;IACL,SAAS;IACT,SAAS;IACT,UAAU;IACV,MAAM;IACN,QAAQ;IACR,UAAU;IACV,0EAA0E;IAC1E,iEAAiE;IACjE,IAAI;IACJ,OAAO;IACP,OAAO;CACR,CAAC,CAAC;AAEH,MAAM,CAAC,MAAM,8BAA8B,GAAG,oBAAoB,CAAC;AAgCnE,MAAM,CAAC,MAAM,gBAAgB,GAAG,CAAC,QAAuB,EAA2B,EAAE;IACnF,MAAM,MAAM,GAA4B;QACtC,GAAG,eAAe;QAClB,EAAE,EAAE,QAAQ,CAAC,EAAE;KAChB,CAAC;IAEF,IAAI,QAAQ,CAAC,GAAG,KAAK,SAAS,EAAE,CAAC;QAC/B,MAAM,CAAC,GAAG,GAAG,QAAQ,CAAC,GAAG,CAAC;IAC5B,CAAC;IACD,IAAI,QAAQ,CAAC,WAAW,KAAK,SAAS,EAAE,CAAC;QACvC,MAAM,CAAC,WAAW,GAAG,QAAQ,CAAC,WAAW,CAAC;IAC5C,CAAC;IACD,IAAI,QAAQ,CAAC,OAAO,KAAK,SAAS,EAAE,CAAC;QACnC,MAAM,CAAC,OAAO,GAAG,QAAQ,CAAC,OAAO,CAAC;IACpC,CAAC;IACD,IAAI,QAAQ,CAAC,QAAQ,KAAK,SAAS,EAAE,CAAC;QACpC,MAAM,CAAC,QAAQ,GAAG,QAAQ,CAAC,QAAQ,CAAC;IACtC,CAAC;IACD,IAAI,QAAQ,CAAC,IAAI,KAAK,SAAS,EAAE,CAAC;QAChC,MAAM,CAAC,IAAI,GAAG,QAAQ,CAAC,IAAI,CAAC;IAC9B,CAAC;IACD,IAAI,QAAQ,CAAC,MAAM,KAAK,SAAS,EAAE,CAAC;QAClC,MAAM,CAAC,MAAM,GAAG,QAAQ,CAAC,MAAM,CAAC;IAClC,CAAC;IACD,IAAI,QAAQ,CAAC,OAAO,KAAK,SAAS,EAAE,CAAC;QACnC,MAAM,CAAC,OAAO,GAAG,QAAQ,CAAC,OAAO,CAAC;IACpC,CAAC;IACD,IAAI,QAAQ,CAAC,EAAE,KAAK,SAAS,EAAE,CAAC;QAC9B,MAAM,CAAC,EAAE,GAAG,QAAQ,CAAC,EAAE,CAAC;IAC1B,CAAC;IACD,IAAI,QAAQ,CAAC,KAAK,KAAK,SAAS,EAAE,CAAC;QACjC,MAAM,CAAC,KAAK,GAAG,QAAQ,CAAC,KAAK,CAAC;IAChC,CAAC;IACD,IAAI,QAAQ,CAAC,KAAK,KAAK,SAAS,EAAE,CAAC;QACjC,MAAM,CAAC,KAAK,GAAG,QAAQ,CAAC,KAAK,CAAC;IAChC,CAAC;IACD,IAAI,QAAQ,CAAC,MAAM,KAAK,SAAS,EAAE,CAAC;QAClC,MAAM,CAAC,MAAM,GAAG,QAAQ,CAAC,MAAM,CAAC;IAClC,CAAC;IACD,IAAI,QAAQ,CAAC,OAAO,KAAK,SAAS,EAAE,CAAC;QACnC,MAAM,CAAC,OAAO,GAAG,QAAQ,CAAC,OAAO,CAAC;IACpC,CAAC;IACD,IAAI,QAAQ,CAAC,SAAS,KAAK,SAAS,EAAE,CAAC;QACrC,MAAM,CAAC,SAAS,GAAG,QAAQ,CAAC,SAAS,CAAC;IACxC,CAAC;IACD,IAAI,QAAQ,CAAC,QAAQ,KAAK,SAAS,EAAE,CAAC;QACpC,MAAM,CAAC,QAAQ,GAAG,QAAQ,CAAC,QAAQ,CAAC;IACtC,CAAC;IACD,IAAI,QAAQ,CAAC,YAAY,EAAE,CAAC;QAC1B,KAAK,MAAM,CAAC,IAAI,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,QAAQ,CAAC,YAAY,CAAC,EAAE,CAAC;YAClE,MAAM,CAAC,IAAI,CAAC,GAAG,KAAK,CAAC;QACvB,CAAC;IACH,CAAC;IAED,qEAAqE;IACrE,KAAK,MAAM,IAAI,IAAI,eAAe,EAAE,CAAC;QACnC,MAAM,CAAC,IAAI,CAAC,GAAG,SAAS,CAAC;IAC3B,CAAC;IAED,OAAO,MAAM,CAAC;AAChB,CAAC,CAAC;AAEF,MAAM,CAAC,MAAM,gBAAgB,GAAG,CAAC,MAA+B,EAA2B,EAAE,CAC3F,IAAI,KAAK,CAAC,MAAM,EAAE;IAChB,GAAG,EAAE,GAAG,EAAE,CAAC,IAAI;IACf,GAAG,CAAC,WAAW,EAAE,QAAQ;QACvB,IAAI,QAAQ,KAAK,MAAM,CAAC,WAAW,EAAE,CAAC;YACpC,OAAO,SAAS,CAAC;QACnB,CAAC;QACD,OAAO,WAAW,CAAC,QAAoC,CAAC,CAAC;IAC3D,CAAC;IACD,GAAG,CAAC,WAAW,EAAE,QAAQ,EAAE,KAAK;QAC9B,WAAW,CAAC,QAAoC,CAAC,GAAG,KAAK,CAAC;QAC1D,OAAO,IAAI,CAAC;IACd,CAAC;IACD,cAAc,CAAC,WAAW,EAAE,QAAQ;QAClC,OAAO,WAAW,CAAC,QAAoC,CAAC,CAAC;QACzD,OAAO,IAAI,CAAC;IACd,CAAC;CACF,CAAC,CAAC"}

package/dist/script/scriptEngine.d.ts

@@ -1,3 +1,3 @@
-import type { ScriptRunContext, TestResult } from "../types/index.js";
-export declare const runScript: (script: string | undefined, context: ScriptRunContext) => Promise<TestResult[]>;
+export { runScript } from "./legacy.js";
+export type { ScriptRunContext } from "./legacy.js";
 //# sourceMappingURL=scriptEngine.d.ts.map

package/dist/script/scriptEngine.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"scriptEngine.d.ts","sourceRoot":"","sources":["../../src/script/scriptEngine.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,gBAAgB,EAAE,UAAU,EAAE,MAAM,mBAAmB,CAAC;AA8EtE,eAAO,MAAM,SAAS,GACpB,QAAQ,MAAM,GAAG,SAAS,EAC1B,SAAS,gBAAgB,KACxB,OAAO,CAAC,UAAU,EAAE,CAuCtB,CAAC"}
+{"version":3,"file":"scriptEngine.d.ts","sourceRoot":"","sources":["../../src/script/scriptEngine.ts"],"names":[],"mappings":"AAMA,OAAO,EAAE,SAAS,EAAE,MAAM,aAAa,CAAC;AACxC,YAAY,EAAE,gBAAgB,EAAE,MAAM,aAAa,CAAC"}

package/dist/script/scriptEngine.js

@@ -1,106 +1,8 @@
-import { createPmApi } from "./pmApi.js";
-const AsyncFunction = Object.getPrototypeOf(async function () {
-    return undefined;
-}).constructor;
-const noopConsole = {
-    log: () => undefined,
-    info: () => undefined,
-    warn: () => undefined,
-    error: () => undefined,
-    debug: () => undefined,
-};
-const buildScriptScope = (pm) => {
-    const scopeTarget = {
-        pm,
-        request: pm.request,
-        response: pm.response,
-        test: pm.test,
-        expect: pm.expect,
-        environment: pm.environment,
-        JSON,
-        Math,
-        Number,
-        String,
-        Boolean,
-        Array,
-        Object,
-        Date,
-        RegExp,
-        Promise,
-        parseInt,
-        parseFloat,
-        encodeURIComponent,
-        decodeURIComponent,
-        URL,
-        URLSearchParams,
-        setTimeout: undefined,
-        clearTimeout: undefined,
-        setInterval: undefined,
-        clearInterval: undefined,
-        fetch: undefined,
-        XMLHttpRequest: undefined,
-        WebSocket: undefined,
-        Worker: undefined,
-        Function: undefined,
-        eval: undefined,
-        console: noopConsole,
-        window: undefined,
-        document: undefined,
-        self: undefined,
-        globalThis: undefined,
-        global: undefined,
-        process: undefined,
-        require: undefined,
-        module: undefined,
-        exports: undefined,
-        navigator: undefined,
-    };
-    return new Proxy(scopeTarget, {
-        has: () => true,
-        get(target, property) {
-            if (property === Symbol.unscopables) {
-                return undefined;
-            }
-            return target[property];
-        },
-        set(target, property, value) {
-            target[property] = value;
-            return true;
-        },
-    });
-};
-export const runScript = async (script, context) => {
-    if (!script?.trim()) {
-        return [];
-    }
-    const results = [];
-    const pendingTests = [];
-    const pm = createPmApi(context, {
-        addResult: (result) => {
-            results.push(result);
-        },
-        addPending: (promise) => {
-            pendingTests.push(promise);
-        },
-    });
-    const scope = buildScriptScope(pm);
-    const runner = new AsyncFunction("scope", "context", `return (async function () {
-with (scope) {
-${script}
-}
-}).call(context);
-//# sourceURL=callman-script.js`);
-    try {
-        await runner(scope, Object.create(null));
-    }
-    catch (error) {
-        results.push({
-            name: "Script execution",
-            status: "FAIL",
-            message: error instanceof Error ? error.message : String(error),
-        });
-    }
-    await Promise.allSettled(pendingTests);
-    return results;
-};
+// Backwards-compatibility re-export. The real implementation now lives in
+// `legacy.ts` (which calls the canonical `executeScript`). Direct imports
+// from this path stay working for any consumer that pinned to the
+// pre-1.1.0 module layout.
+//
+// Prefer the package entry: `import { runScript } from "callman-core";`
+export { runScript } from "./legacy.js";
 //# sourceMappingURL=scriptEngine.js.map

package/dist/script/scriptEngine.js.map

@@ -1 +1 @@
-{"version":3,"file":"scriptEngine.js","sourceRoot":"","sources":["../../src/script/scriptEngine.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,WAAW,EAAE,MAAM,YAAY,CAAC;AAEzC,MAAM,aAAa,GAAG,MAAM,CAAC,cAAc,CAAC,KAAK;IAC/C,OAAO,SAAS,CAAC;AACnB,CAAC,CAAC,CAAC,WAAoF,CAAC;AAExF,MAAM,WAAW,GAAG;IAClB,GAAG,EAAE,GAAG,EAAE,CAAC,SAAS;IACpB,IAAI,EAAE,GAAG,EAAE,CAAC,SAAS;IACrB,IAAI,EAAE,GAAG,EAAE,CAAC,SAAS;IACrB,KAAK,EAAE,GAAG,EAAE,CAAC,SAAS;IACtB,KAAK,EAAE,GAAG,EAAE,CAAC,SAAS;CACvB,CAAC;AAEF,MAAM,gBAAgB,GAAG,CAAC,EAAkC,EAAE,EAAE;IAC9D,MAAM,WAAW,GAA4B;QAC3C,EAAE;QACF,OAAO,EAAE,EAAE,CAAC,OAAO;QACnB,QAAQ,EAAE,EAAE,CAAC,QAAQ;QACrB,IAAI,EAAE,EAAE,CAAC,IAAI;QACb,MAAM,EAAE,EAAE,CAAC,MAAM;QACjB,WAAW,EAAE,EAAE,CAAC,WAAW;QAC3B,IAAI;QACJ,IAAI;QACJ,MAAM;QACN,MAAM;QACN,OAAO;QACP,KAAK;QACL,MAAM;QACN,IAAI;QACJ,MAAM;QACN,OAAO;QACP,QAAQ;QACR,UAAU;QACV,kBAAkB;QAClB,kBAAkB;QAClB,GAAG;QACH,eAAe;QACf,UAAU,EAAE,SAAS;QACrB,YAAY,EAAE,SAAS;QACvB,WAAW,EAAE,SAAS;QACtB,aAAa,EAAE,SAAS;QACxB,KAAK,EAAE,SAAS;QAChB,cAAc,EAAE,SAAS;QACzB,SAAS,EAAE,SAAS;QACpB,MAAM,EAAE,SAAS;QACjB,QAAQ,EAAE,SAAS;QACnB,IAAI,EAAE,SAAS;QACf,OAAO,EAAE,WAAW;QACpB,MAAM,EAAE,SAAS;QACjB,QAAQ,EAAE,SAAS;QACnB,IAAI,EAAE,SAAS;QACf,UAAU,EAAE,SAAS;QACrB,MAAM,EAAE,SAAS;QACjB,OAAO,EAAE,SAAS;QAClB,OAAO,EAAE,SAAS;QAClB,MAAM,EAAE,SAAS;QACjB,OAAO,EAAE,SAAS;QAClB,SAAS,EAAE,SAAS;KACrB,CAAC;IAEF,OAAO,IAAI,KAAK,CAAC,WAAW,EAAE;QAC5B,GAAG,EAAE,GAAG,EAAE,CAAC,IAAI;QACf,GAAG,CAAC,MAAM,EAAE,QAAQ;YAClB,IAAI,QAAQ,KAAK,MAAM,CAAC,WAAW,EAAE,CAAC;gBACpC,OAAO,SAAS,CAAC;YACnB,CAAC;YAED,OAAO,MAAM,CAAC,QAA+B,CAAC,CAAC;QACjD,CAAC;QACD,GAAG,CAAC,MAAM,EAAE,QAAQ,EAAE,KAAK;YACzB,MAAM,CAAC,QAA+B,CAAC,GAAG,KAAK,CAAC;YAChD,OAAO,IAAI,CAAC;QACd,CAAC;KACF,CAAC,CAAC;AACL,CAAC,CAAC;AAEF,MAAM,CAAC,MAAM,SAAS,GAAG,KAAK,EAC5B,MAA0B,EAC1B,OAAyB,EACF,EAAE;IACzB,IAAI,CAAC,MAAM,EAAE,IAAI,EAAE,EAAE,CAAC;QACpB,OAAO,EAAE,CAAC;IACZ,CAAC;IAED,MAAM,OAAO,GAAiB,EAAE,CAAC;IACjC,MAAM,YAAY,GAAoB,EAAE,CAAC;IACzC,MAAM,EAAE,GAAG,WAAW,CAAC,OAAO,EAAE;QAC9B,SAAS,EAAE,CAAC,MAAM,EAAE,EAAE;YACpB,OAAO,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;QACvB,CAAC;QACD,UAAU,EAAE,CAAC,OAAO,EAAE,EAAE;YACtB,YAAY,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;QAC7B,CAAC;KACF,CAAC,CAAC;IACH,MAAM,KAAK,GAAG,gBAAgB,CAAC,EAAE,CAAC,CAAC;IACnC,MAAM,MAAM,GAAG,IAAI,aAAa,CAC9B,OAAO,EACP,SAAS,EACT;;EAEF,MAAM;;;gCAGwB,CAC7B,CAAC;IAEF,IAAI,CAAC;QACH,MAAM,MAAM,CAAC,KAAK,EAAE,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC;IAC3C,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,OAAO,CAAC,IAAI,CAAC;YACX,IAAI,EAAE,kBAAkB;YACxB,MAAM,EAAE,MAAM;YACd,OAAO,EAAE,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC;SAChE,CAAC,CAAC;IACL,CAAC;IAED,MAAM,OAAO,CAAC,UAAU,CAAC,YAAY,CAAC,CAAC;IACvC,OAAO,OAAO,CAAC;AACjB,CAAC,CAAC"}
+{"version":3,"file":"scriptEngine.js","sourceRoot":"","sources":["../../src/script/scriptEngine.ts"],"names":[],"mappings":"AAAA,0EAA0E;AAC1E,0EAA0E;AAC1E,kEAAkE;AAClE,2BAA2B;AAC3B,EAAE;AACF,wEAAwE;AACxE,OAAO,EAAE,SAAS,EAAE,MAAM,aAAa,CAAC"}

package/dist/script/timeout.d.ts

@@ -0,0 +1,3 @@
+export declare const toHostPromise: <T>(value: T | PromiseLike<T>) => Promise<T>;
+export declare const withAsyncTimeout: <T>(promise: Promise<T>, timeoutMs: number) => Promise<T>;
+//# sourceMappingURL=timeout.d.ts.map

package/dist/script/timeout.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"timeout.d.ts","sourceRoot":"","sources":["../../src/script/timeout.ts"],"names":[],"mappings":"AAWA,eAAO,MAAM,aAAa,GAAI,CAAC,EAAE,OAAO,CAAC,GAAG,WAAW,CAAC,CAAC,CAAC,KAAG,OAAO,CAAC,CAAC,CAgBrE,CAAC;AAEF,eAAO,MAAM,gBAAgB,GAAU,CAAC,EACtC,SAAS,OAAO,CAAC,CAAC,CAAC,EACnB,WAAW,MAAM,KAChB,OAAO,CAAC,CAAC,CAgBR,CAAC"}

package/dist/script/timeout.js

@@ -0,0 +1,38 @@
+// Timeout utilities for the canonical script sandbox.
+//
+// vm.Script.runInContext exposes a `timeout` option that only enforces
+// synchronous execution time — async loops bypass it. The outer
+// withAsyncTimeout enforces the deadline against the awaited completion
+// of the host promise, so an unresolved `await new Promise(() => {})`
+// is rejected as a timeout instead of hanging indefinitely.
+//
+// toHostPromise re-wraps a thenable from the sandbox's vm context so
+// that `Promise.race` and host-side `await` see a real host promise.
+export const toHostPromise = (value) => {
+    if ((typeof value === "object" || typeof value === "function") &&
+        value !== null &&
+        typeof value.then === "function") {
+        return new Promise((resolve, reject) => {
+            try {
+                value.then(resolve, reject);
+            }
+            catch (error) {
+                reject(error);
+            }
+        });
+    }
+    return Promise.resolve(value);
+};
+export const withAsyncTimeout = async (promise, timeoutMs) => await new Promise((resolve, reject) => {
+    const timer = setTimeout(() => {
+        reject(new Error(`Script timed out after ${timeoutMs}ms`));
+    }, timeoutMs);
+    promise.then((value) => {
+        clearTimeout(timer);
+        resolve(value);
+    }, (error) => {
+        clearTimeout(timer);
+        reject(error);
+    });
+});
+//# sourceMappingURL=timeout.js.map

package/dist/script/timeout.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"timeout.js","sourceRoot":"","sources":["../../src/script/timeout.ts"],"names":[],"mappings":"AAAA,sDAAsD;AACtD,EAAE;AACF,uEAAuE;AACvE,gEAAgE;AAChE,wEAAwE;AACxE,sEAAsE;AACtE,4DAA4D;AAC5D,EAAE;AACF,qEAAqE;AACrE,qEAAqE;AAErE,MAAM,CAAC,MAAM,aAAa,GAAG,CAAI,KAAyB,EAAc,EAAE;IACxE,IACE,CAAC,OAAO,KAAK,KAAK,QAAQ,IAAI,OAAO,KAAK,KAAK,UAAU,CAAC;QAC1D,KAAK,KAAK,IAAI;QACd,OAAQ,KAAwB,CAAC,IAAI,KAAK,UAAU,EACpD,CAAC;QACD,OAAO,IAAI,OAAO,CAAI,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;YACxC,IAAI,CAAC;gBACF,KAAwB,CAAC,IAAI,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;YAClD,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,MAAM,CAAC,KAAK,CAAC,CAAC;YAChB,CAAC;QACH,CAAC,CAAC,CAAC;IACL,CAAC;IAED,OAAO,OAAO,CAAC,OAAO,CAAC,KAAU,CAAC,CAAC;AACrC,CAAC,CAAC;AAEF,MAAM,CAAC,MAAM,gBAAgB,GAAG,KAAK,EACnC,OAAmB,EACnB,SAAiB,EACL,EAAE,CACd,MAAM,IAAI,OAAO,CAAI,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;IACvC,MAAM,KAAK,GAAG,UAAU,CAAC,GAAG,EAAE;QAC5B,MAAM,CAAC,IAAI,KAAK,CAAC,0BAA0B,SAAS,IAAI,CAAC,CAAC,CAAC;IAC7D,CAAC,EAAE,SAAS,CAAC,CAAC;IAEd,OAAO,CAAC,IAAI,CACV,CAAC,KAAK,EAAE,EAAE;QACR,YAAY,CAAC,KAAK,CAAC,CAAC;QACpB,OAAO,CAAC,KAAK,CAAC,CAAC;IACjB,CAAC,EACD,CAAC,KAAc,EAAE,EAAE;QACjB,YAAY,CAAC,KAAK,CAAC,CAAC;QACpB,MAAM,CAAC,KAAK,CAAC,CAAC;IAChB,CAAC,CACF,CAAC;AACJ,CAAC,CAAC,CAAC"}

package/dist/script/types.d.ts

@@ -0,0 +1,167 @@
+import type { ScenarioNodeExecutionMeta } from "../scenario-runner/types.js";
+export type ScriptStage = "script" | "pre-request" | "tests" | "post-response";
+export interface ScriptKeyValuePair {
+    key: string;
+    value: string;
+    enabled?: boolean;
+}
+export interface ScriptRequestBodyState {
+    mode: string;
+    raw: string;
+    formEntries: ScriptKeyValuePair[];
+}
+export interface ScriptRequestState {
+    method: string;
+    url: string;
+    headers: ScriptKeyValuePair[];
+    query: ScriptKeyValuePair[];
+    body: ScriptRequestBodyState;
+}
+export interface ScriptResponseState {
+    ok: boolean;
+    status: number;
+    statusText: string;
+    headers: Record<string, string>;
+    body: unknown;
+    jsonBody: unknown | null;
+    rawBody: string;
+    contentType: string;
+    durationMs: number;
+    sizeBytes: number;
+    cookies: string[];
+}
+export interface ScriptVariableMutation {
+    scope: "environment" | "global";
+    type: "set" | "unset";
+    key: string;
+    value?: string;
+}
+export interface ScriptLogEntry {
+    level: "log" | "info" | "warn" | "error" | "debug";
+    message: string;
+}
+export interface ScriptTestResult {
+    name: string;
+    status: "PASS" | "FAIL" | "SKIP";
+    error?: string;
+    lineNumber?: number | null;
+    column?: number | null;
+}
+export interface ScriptError {
+    stage: ScriptStage;
+    message: string;
+    lineNumber: number | null;
+    column: number | null;
+    stack: string | null;
+}
+export interface ScriptDbExecutionInput {
+    connectionId: string;
+    query: string;
+    phase: "pre" | "post" | "manual";
+    context: {
+        response: unknown | null;
+        env: Record<string, string>;
+        global: Record<string, string>;
+    };
+}
+export interface ScriptDbExecutionResult {
+    success: boolean;
+    error?: string | null;
+    phase: "pre" | "post" | "manual";
+    connectionId: string;
+    connectionName: string;
+    connectionType: "mongo" | "oracle" | string;
+    query: string;
+    resolvedQuery: string;
+    rows: unknown[];
+    rowCount: number;
+    durationMs: number;
+    executedAt: string;
+}
+export interface ScriptKafkaCapability {
+    event: unknown | null;
+    messages: unknown[];
+    matchedMessage: unknown | null;
+    capturedMessages: unknown[];
+    isListening: boolean;
+}
+export interface ScriptRedisCapability {
+    values: Record<string, unknown>;
+    results: {
+        pre: unknown[];
+        post: unknown[];
+    };
+}
+export interface ScriptDbCapability {
+    execute: (input: ScriptDbExecutionInput) => Promise<ScriptDbExecutionResult>;
+    preResult?: ScriptDbExecutionResult | null;
+    postResult?: ScriptDbExecutionResult | null;
+    requestConfig?: {
+        preRequest?: {
+            connectionId?: string;
+        };
+        postResponse?: {
+            connectionId?: string;
+        };
+    };
+}
+export type CounterSnapshotEntry = [string, number];
+export interface ScriptCounterCapability {
+    snapshot: CounterSnapshotEntry[];
+}
+export interface ScriptFeaturePolicy {
+    database: boolean;
+    kafka: boolean;
+}
+export interface ScriptCapabilities {
+    environment?: {
+        values: Record<string, string>;
+        emitMutations?: boolean;
+    };
+    globals?: {
+        values: Record<string, string>;
+        emitMutations?: boolean;
+    };
+    request?: ScriptRequestState;
+    response?: ScriptResponseState;
+    trackRequestMutations?: boolean;
+    workflowContext?: Record<string, unknown>;
+    nodeMetaByLabel?: Record<string, ScenarioNodeExecutionMeta>;
+    exposeLabelsAsGlobals?: boolean;
+    featurePolicy?: ScriptFeaturePolicy;
+    allowDeferredKafkaTests?: boolean;
+    deferredTestNames?: string[];
+    extensions?: {
+        log?: boolean;
+        node?: boolean;
+        db?: ScriptDbCapability;
+        kafka?: ScriptKafkaCapability;
+        redis?: ScriptRedisCapability;
+        random?: boolean | {
+            rng?: () => number;
+        };
+        counter?: ScriptCounterCapability;
+        cryptojs?: boolean;
+        variables?: boolean;
+    };
+}
+export interface ExecuteScriptInput {
+    script: string;
+    timeoutMs?: number;
+    filename?: string;
+    stage?: ScriptStage;
+    capabilities: ScriptCapabilities;
+}
+export interface ExecuteScriptResult {
+    success: boolean;
+    error: ScriptError | null;
+    testResults: ScriptTestResult[];
+    variableMutations: ScriptVariableMutation[];
+    logs: ScriptLogEntry[];
+    returnValue?: unknown;
+    hasReturnValue: boolean;
+    request?: ScriptRequestState;
+    counterSnapshot?: CounterSnapshotEntry[];
+    deferredTestNames?: string[];
+}
+//# sourceMappingURL=types.d.ts.map

package/dist/script/types.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../../src/script/types.ts"],"names":[],"mappings":"AAMA,OAAO,KAAK,EAAE,yBAAyB,EAAE,MAAM,6BAA6B,CAAC;AAE7E,MAAM,MAAM,WAAW,GAAG,QAAQ,GAAG,aAAa,GAAG,OAAO,GAAG,eAAe,CAAC;AAE/E,MAAM,WAAW,kBAAkB;IACjC,GAAG,EAAE,MAAM,CAAC;IACZ,KAAK,EAAE,MAAM,CAAC;IACd,OAAO,CAAC,EAAE,OAAO,CAAC;CACnB;AAED,MAAM,WAAW,sBAAsB;IACrC,IAAI,EAAE,MAAM,CAAC;IACb,GAAG,EAAE,MAAM,CAAC;IACZ,WAAW,EAAE,kBAAkB,EAAE,CAAC;CACnC;AAED,MAAM,WAAW,kBAAkB;IACjC,MAAM,EAAE,MAAM,CAAC;IACf,GAAG,EAAE,MAAM,CAAC;IACZ,OAAO,EAAE,kBAAkB,EAAE,CAAC;IAC9B,KAAK,EAAE,kBAAkB,EAAE,CAAC;IAC5B,IAAI,EAAE,sBAAsB,CAAC;CAC9B;AAED,MAAM,WAAW,mBAAmB;IAClC,EAAE,EAAE,OAAO,CAAC;IACZ,MAAM,EAAE,MAAM,CAAC;IACf,UAAU,EAAE,MAAM,CAAC;IACnB,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAChC,IAAI,EAAE,OAAO,CAAC;IACd,QAAQ,EAAE,OAAO,GAAG,IAAI,CAAC;IACzB,OAAO,EAAE,MAAM,CAAC;IAChB,WAAW,EAAE,MAAM,CAAC;IACpB,UAAU,EAAE,MAAM,CAAC;IACnB,SAAS,EAAE,MAAM,CAAC;IAClB,OAAO,EAAE,MAAM,EAAE,CAAC;CACnB;AAED,MAAM,WAAW,sBAAsB;IACrC,KAAK,EAAE,aAAa,GAAG,QAAQ,CAAC;IAChC,IAAI,EAAE,KAAK,GAAG,OAAO,CAAC;IACtB,GAAG,EAAE,MAAM,CAAC;IACZ,KAAK,CAAC,EAAE,MAAM,CAAC;CAChB;AAED,MAAM,WAAW,cAAc;IAC7B,KAAK,EAAE,KAAK,GAAG,MAAM,GAAG,MAAM,GAAG,OAAO,GAAG,OAAO,CAAC;IACnD,OAAO,EAAE,MAAM,CAAC;CACjB;AAED,MAAM,WAAW,gBAAgB;IAC/B,IAAI,EAAE,MAAM,CAAC;IACb,MAAM,EAAE,MAAM,GAAG,MAAM,GAAG,MAAM,CAAC;IACjC,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,UAAU,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAC3B,MAAM,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;CACxB;AAED,MAAM,WAAW,WAAW;IAC1B,KAAK,EAAE,WAAW,CAAC;IACnB,OAAO,EAAE,MAAM,CAAC;IAChB,UAAU,EAAE,MAAM,GAAG,IAAI,CAAC;IAC1B,MAAM,EAAE,MAAM,GAAG,IAAI,CAAC;IACtB,KAAK,EAAE,MAAM,GAAG,IAAI,CAAC;CACtB;AAMD,MAAM,WAAW,sBAAsB;IACrC,YAAY,EAAE,MAAM,CAAC;IACrB,KAAK,EAAE,MAAM,CAAC;IACd,KAAK,EAAE,KAAK,GAAG,MAAM,GAAG,QAAQ,CAAC;IACjC,OAAO,EAAE;QACP,QAAQ,EAAE,OAAO,GAAG,IAAI,CAAC;QACzB,GAAG,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;QAC5B,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;KAChC,CAAC;CACH;AAED,MAAM,WAAW,uBAAuB;IACtC,OAAO,EAAE,OAAO,CAAC;IACjB,KAAK,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACtB,KAAK,EAAE,KAAK,GAAG,MAAM,GAAG,QAAQ,CAAC;IACjC,YAAY,EAAE,MAAM,CAAC;IACrB,cAAc,EAAE,MAAM,CAAC;IACvB,cAAc,EAAE,OAAO,GAAG,QAAQ,GAAG,MAAM,CAAC;IAC5C,KAAK,EAAE,MAAM,CAAC;IACd,aAAa,EAAE,MAAM,CAAC;IACtB,IAAI,EAAE,OAAO,EAAE,CAAC;IAChB,QAAQ,EAAE,MAAM,CAAC;IACjB,UAAU,EAAE,MAAM,CAAC;IACnB,UAAU,EAAE,MAAM,CAAC;CACpB;AAED,MAAM,WAAW,qBAAqB;IACpC,KAAK,EAAE,OAAO,GAAG,IAAI,CAAC;IACtB,QAAQ,EAAE,OAAO,EAAE,CAAC;IACpB,cAAc,EAAE,OAAO,GAAG,IAAI,CAAC;IAC/B,gBAAgB,EAAE,OAAO,EAAE,CAAC;IAC5B,WAAW,EAAE,OAAO,CAAC;CACtB;AAED,MAAM,WAAW,qBAAqB;IACpC,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAChC,OAAO,EAAE;QAAE,GAAG,EAAE,OAAO,EAAE,CAAC;QAAC,IAAI,EAAE,OAAO,EAAE,CAAA;KAAE,CAAC;CAC9C;AAED,MAAM,WAAW,kBAAkB;IACjC,OAAO,EAAE,CAAC,KAAK,EAAE,sBAAsB,KAAK,OAAO,CAAC,uBAAuB,CAAC,CAAC;IAC7E,SAAS,CAAC,EAAE,uBAAuB,GAAG,IAAI,CAAC;IAC3C,UAAU,CAAC,EAAE,uBAAuB,GAAG,IAAI,CAAC;IAC5C,aAAa,CAAC,EAAE;QACd,UAAU,CAAC,EAAE;YAAE,YAAY,CAAC,EAAE,MAAM,CAAA;SAAE,CAAC;QACvC,YAAY,CAAC,EAAE;YAAE,YAAY,CAAC,EAAE,MAAM,CAAA;SAAE,CAAC;KAC1C,CAAC;CACH;AAED,MAAM,MAAM,oBAAoB,GAAG,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;AAEpD,MAAM,WAAW,uBAAuB;IACtC,QAAQ,EAAE,oBAAoB,EAAE,CAAC;CAClC;AAED,MAAM,WAAW,mBAAmB;IAClC,QAAQ,EAAE,OAAO,CAAC;IAClB,KAAK,EAAE,OAAO,CAAC;CAChB;AAQD,MAAM,WAAW,kBAAkB;IACjC,WAAW,CAAC,EAAE;QACZ,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;QAC/B,aAAa,CAAC,EAAE,OAAO,CAAC;KACzB,CAAC;IACF,OAAO,CAAC,EAAE;QACR,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;QAC/B,aAAa,CAAC,EAAE,OAAO,CAAC;KACzB,CAAC;IACF,OAAO,CAAC,EAAE,kBAAkB,CAAC;IAC7B,QAAQ,CAAC,EAAE,mBAAmB,CAAC;IAC/B,qBAAqB,CAAC,EAAE,OAAO,CAAC;IAChC,eAAe,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAC1C,eAAe,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,yBAAyB,CAAC,CAAC;IAC5D,qBAAqB,CAAC,EAAE,OAAO,CAAC;IAEhC,aAAa,CAAC,EAAE,mBAAmB,CAAC;IACpC,uBAAuB,CAAC,EAAE,OAAO,CAAC;IAClC,iBAAiB,CAAC,EAAE,MAAM,EAAE,CAAC;IAC7B,UAAU,CAAC,EAAE;QACX,GAAG,CAAC,EAAE,OAAO,CAAC;QACd,IAAI,CAAC,EAAE,OAAO,CAAC;QACf,EAAE,CAAC,EAAE,kBAAkB,CAAC;QACxB,KAAK,CAAC,EAAE,qBAAqB,CAAC;QAC9B,KAAK,CAAC,EAAE,qBAAqB,CAAC;QAC9B,MAAM,CAAC,EAAE,OAAO,GAAG;YAAE,GAAG,CAAC,EAAE,MAAM,MAAM,CAAA;SAAE,CAAC;QAC1C,OAAO,CAAC,EAAE,uBAAuB,CAAC;QAClC,QAAQ,CAAC,EAAE,OAAO,CAAC;QACnB,SAAS,CAAC,EAAE,OAAO,CAAC;KACrB,CAAC;CACH;AAED,MAAM,WAAW,kBAAkB;IACjC,MAAM,EAAE,MAAM,CAAC;IACf,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,KAAK,CAAC,EAAE,WAAW,CAAC;IACpB,YAAY,EAAE,kBAAkB,CAAC;CAClC;AAED,MAAM,WAAW,mBAAmB;IAClC,OAAO,EAAE,OAAO,CAAC;IACjB,KAAK,EAAE,WAAW,GAAG,IAAI,CAAC;IAC1B,WAAW,EAAE,gBAAgB,EAAE,CAAC;IAChC,iBAAiB,EAAE,sBAAsB,EAAE,CAAC;IAC5C,IAAI,EAAE,cAAc,EAAE,CAAC;IACvB,WAAW,CAAC,EAAE,OAAO,CAAC;IACtB,cAAc,EAAE,OAAO,CAAC;IACxB,OAAO,CAAC,EAAE,kBAAkB,CAAC;IAG7B,eAAe,CAAC,EAAE,oBAAoB,EAAE,CAAC;IACzC,iBAAiB,CAAC,EAAE,MAAM,EAAE,CAAC;CAC9B"}

package/dist/script/types.js

@@ -0,0 +1,7 @@
+// Public types for the canonical script sandbox.
+//
+// These types are the contract that backend, electron, and CLI consumers all
+// share. Adding a new field is non-breaking; renaming or removing one is a
+// breaking change that must bump the major version.
+export {};
+//# sourceMappingURL=types.js.map

package/dist/script/types.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.js","sourceRoot":"","sources":["../../src/script/types.ts"],"names":[],"mappings":"AAAA,iDAAiD;AACjD,EAAE;AACF,6EAA6E;AAC7E,2EAA2E;AAC3E,oDAAoD"}