neuron-inspector 1.2.1 → 1.3.1

package/dist/collections/scenario-run.js

@@ -0,0 +1,169 @@
+// Running one scenario, independent of where it runs. The bridge's
+// neuron_api_run_scenario and the extension's browser engine both call
+// runScenario, so environment choice, required inputs and secret masking are
+// decided in exactly one place.
+import { executeScenario } from "./executor.js";
+import { mergeInputDeclarations, prepareInputs, describeInputs } from "./masking.js";
+import { slugify } from "./slug.js";
+export function pickEnvironment(collection, id, requested) {
+    const envName = requested ?? collection.active_environment;
+    if (!envName) {
+        return { error: "No environment specified and no active_environment set on the collection" };
+    }
+    const envs = collection.environments ?? {};
+    const key = envs[envName] ? envName : slugify(envName);
+    const environment = envs[key];
+    if (!environment) {
+        return { error: `Environment '${envName}' not found in collection '${id}'` };
+    }
+    return { key, environment };
+}
+/** Declared inputs for a run (environment's merged with the scenario's). Never values. */
+export function runInputsFor(collection, id, scenarioKey, environment) {
+    const picked = pickEnvironment(collection, id, environment);
+    if ("error" in picked)
+        return picked;
+    let scenarioInputs;
+    if (scenarioKey !== undefined) {
+        const scenario = collection.scenarios?.[scenarioKey];
+        if (!scenario)
+            return { error: `Scenario '${scenarioKey}' not found in collection '${id}'` };
+        scenarioInputs = scenario.inputs;
+    }
+    return { environment: picked.key, inputs: describeInputs(mergeInputDeclarations(picked.environment.inputs, scenarioInputs)) };
+}
+export async function runScenario(opts) {
+    const { collection, collectionId: id } = opts;
+    const picked = pickEnvironment(collection, id, opts.environment);
+    if ("error" in picked)
+        return picked;
+    const { key: envKey, environment } = picked;
+    const scenario = collection.scenarios?.[opts.scenario];
+    if (!scenario) {
+        return { error: `Scenario '${opts.scenario}' not found in collection '${id}'` };
+    }
+    const declared = mergeInputDeclarations(environment.inputs, scenario.inputs);
+    const prepared = prepareInputs(declared, opts.inputs);
+    if (prepared.missing.length) {
+        return { error: `Missing required input(s): ${prepared.missing.join(", ")}`, inputs: describeInputs(declared) };
+    }
+    opts.onPreparedInputs?.(prepared.values, prepared.secrets);
+    const steps = scenario.steps ?? [];
+    if (opts.startStep !== undefined && (opts.startStep < 0 || opts.startStep >= steps.length)) {
+        return { error: `Step ${opts.startStep + 1} doesn't exist in '${opts.scenario}' (it has ${steps.length})` };
+    }
+    return executeScenario({
+        scenarioKey: opts.scenario,
+        steps,
+        collectionId: id,
+        collection,
+        environment,
+        environmentName: envKey,
+        httpExecutor: opts.httpExecutor,
+        pipeline: opts.pipeline,
+        assertionEvaluator: opts.assertionEvaluator,
+        scriptRunner: opts.scriptRunner,
+        inputs: prepared.values,
+        secrets: prepared.secrets,
+        isCancelled: opts.isCancelled,
+        onEvent: opts.onEvent,
+        sleep: opts.sleep,
+        startStep: opts.startStep,
+        endStep: opts.endStep,
+        initialExtracted: opts.initialExtracted,
+        maskValues: opts.maskValues,
+        onStepContext: opts.onStepContext,
+        onMaskValue: opts.onMaskValue,
+    });
+}
+export class RerunContexts {
+    ttlMs;
+    max;
+    now;
+    map = new Map();
+    constructor(ttlMs = 30 * 60_000, max = 20, now = Date.now) {
+        this.ttlMs = ttlMs;
+        this.max = max;
+        this.now = now;
+    }
+    prune() {
+        const cutoff = this.now() - this.ttlMs;
+        for (const [id, c] of this.map)
+            if (c.touchedAt < cutoff)
+                this.map.delete(id);
+        while (this.map.size > this.max)
+            this.map.delete(this.map.keys().next().value);
+    }
+    get(runId) {
+        this.prune();
+        return this.map.get(runId);
+    }
+    has(runId) {
+        return !!this.get(runId);
+    }
+    /** Hooks for runScenario that fill (or keep filling) the context for `runId`. */
+    recorder(runId, base) {
+        this.prune();
+        let ctx = this.map.get(runId);
+        if (!ctx) {
+            ctx = { ...base, inputs: {}, secrets: [], maskValues: [], before: {}, touchedAt: this.now() };
+            this.map.set(runId, ctx);
+        }
+        const c = ctx;
+        return {
+            onPreparedInputs: (values, secrets) => {
+                c.inputs = { ...values };
+                c.secrets = [...secrets];
+                c.touchedAt = this.now();
+            },
+            onStepContext: (step, extractedBefore) => {
+                c.before[step] = extractedBefore;
+                c.touchedAt = this.now();
+            },
+            onMaskValue: (value) => {
+                if (!c.maskValues.includes(value))
+                    c.maskValues.push(value);
+            },
+        };
+    }
+    forget(runId) {
+        this.map.delete(runId);
+    }
+}
+/**
+ * Re-run one step ("step") or a step and everything after it ("from"), using
+ * the context recorded for the original run. The collection passed in is the
+ * current one, so a step fixed in the editor can be re-run as-is.
+ */
+export async function rerunScenario(opts) {
+    const ctx = opts.contexts.get(opts.runId);
+    if (!ctx) {
+        return { error: "That run can't be re-run any more: its context is kept in memory for 30 minutes and only for runs started in this session. Run the scenario again." };
+    }
+    const before = ctx.before[opts.step];
+    if (!before) {
+        return { error: `Step ${opts.step + 1} didn't run in the original run, so there's nothing to re-run from. Re-run an earlier step with "from here".` };
+    }
+    const rec = opts.contexts.recorder(opts.runId, { scenario: ctx.scenario, environment: ctx.environment });
+    return runScenario({
+        ...opts,
+        scenario: ctx.scenario,
+        environment: ctx.environment,
+        inputs: ctx.inputs,
+        startStep: opts.step,
+        endStep: opts.mode === "step" ? opts.step : undefined,
+        initialExtracted: before,
+        maskValues: [...ctx.secrets, ...ctx.maskValues],
+        onStepContext: (i, b) => {
+            // Re-running only one step leaves the later steps' recorded context alone.
+            if (opts.mode === "from" || i === opts.step)
+                rec.onStepContext(i, b);
+            opts.onStepContext?.(i, b);
+        },
+        onMaskValue: (v) => {
+            rec.onMaskValue(v);
+            opts.onMaskValue?.(v);
+        },
+    });
+}
+//# sourceMappingURL=scenario-run.js.map

package/dist/collections/scenario-run.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"scenario-run.js","sourceRoot":"","sources":["../../src/collections/scenario-run.ts"],"names":[],"mappings":"AAAA,mEAAmE;AACnE,uEAAuE;AACvE,6EAA6E;AAC7E,gCAAgC;AAGhC,OAAO,EAAE,eAAe,EAAE,MAAM,eAAe,CAAC;AAEhD,OAAO,EAAE,sBAAsB,EAAE,aAAa,EAAE,cAAc,EAAE,MAAM,cAAc,CAAC;AACrF,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAEpC,MAAM,UAAU,eAAe,CAC7B,UAAsB,EACtB,EAAU,EACV,SAAkB;IAElB,MAAM,OAAO,GAAI,SAAoB,IAAI,UAAU,CAAC,kBAAkB,CAAC;IACvE,IAAI,CAAC,OAAO,EAAE,CAAC;QACb,OAAO,EAAE,KAAK,EAAE,0EAA0E,EAAE,CAAC;IAC/F,CAAC;IACD,MAAM,IAAI,GAAG,UAAU,CAAC,YAAY,IAAI,EAAE,CAAC;IAC3C,MAAM,GAAG,GAAG,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC;IACvD,MAAM,WAAW,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC;IAC9B,IAAI,CAAC,WAAW,EAAE,CAAC;QACjB,OAAO,EAAE,KAAK,EAAE,gBAAgB,OAAO,8BAA8B,EAAE,GAAG,EAAE,CAAC;IAC/E,CAAC;IACD,OAAO,EAAE,GAAG,EAAE,WAAW,EAAE,CAAC;AAC9B,CAAC;AAED,0FAA0F;AAC1F,MAAM,UAAU,YAAY,CAC1B,UAAsB,EACtB,EAAU,EACV,WAA+B,EAC/B,WAAoB;IAEpB,MAAM,MAAM,GAAG,eAAe,CAAC,UAAU,EAAE,EAAE,EAAE,WAAW,CAAC,CAAC;IAC5D,IAAI,OAAO,IAAI,MAAM;QAAE,OAAO,MAAM,CAAC;IACrC,IAAI,cAAsC,CAAC;IAC3C,IAAI,WAAW,KAAK,SAAS,EAAE,CAAC;QAC9B,MAAM,QAAQ,GAAG,UAAU,CAAC,SAAS,EAAE,CAAC,WAAW,CAAC,CAAC;QACrD,IAAI,CAAC,QAAQ;YAAE,OAAO,EAAE,KAAK,EAAE,aAAa,WAAW,8BAA8B,EAAE,GAAG,EAAE,CAAC;QAC7F,cAAc,GAAG,QAAQ,CAAC,MAAM,CAAC;IACnC,CAAC;IACD,OAAO,EAAE,WAAW,EAAE,MAAM,CAAC,GAAG,EAAE,MAAM,EAAE,cAAc,CAAC,sBAAsB,CAAC,MAAM,CAAC,WAAW,CAAC,MAAM,EAAE,cAAc,CAAC,CAAC,EAAE,CAAC;AAChI,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,WAAW,CAAC,IAuBjC;IACC,MAAM,EAAE,UAAU,EAAE,YAAY,EAAE,EAAE,EAAE,GAAG,IAAI,CAAC;IAC9C,MAAM,MAAM,GAAG,eAAe,CAAC,UAAU,EAAE,EAAE,EAAE,IAAI,CAAC,WAAW,CAAC,CAAC;IACjE,IAAI,OAAO,IAAI,MAAM;QAAE,OAAO,MAAM,CAAC;IACrC,MAAM,EAAE,GAAG,EAAE,MAAM,EAAE,WAAW,EAAE,GAAG,MAAM,CAAC;IAE5C,MAAM,QAAQ,GAAG,UAAU,CAAC,SAAS,EAAE,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;IACvD,IAAI,CAAC,QAAQ,EAAE,CAAC;QACd,OAAO,EAAE,KAAK,EAAE,aAAa,IAAI,CAAC,QAAQ,8BAA8B,EAAE,GAAG,EAAE,CAAC;IAClF,CAAC;IAED,MAAM,QAAQ,GAAG,sBAAsB,CAAC,WAAW,CAAC,MAAM,EAAE,QAAQ,CAAC,MAAM,CAAC,CAAC;IAC7E,MAAM,QAAQ,GAAG,aAAa,CAAC,QAAQ,EAAE,IAAI,CAAC,MAAM,CAAC,CAAC;IACtD,IAAI,QAAQ,CAAC,OAAO,CAAC,MAAM,EAAE,CAAC;QAC5B,OAAO,EAAE,KAAK,EAAE,8BAA8B,QAAQ,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,EAAE,MAAM,EAAE,cAAc,CAAC,QAAQ,CAAC,EAAE,CAAC;IAClH,CAAC;IACD,IAAI,CAAC,gBAAgB,EAAE,CAAC,QAAQ,CAAC,MAAM,EAAE,QAAQ,CAAC,OAAO,CAAC,CAAC;IAE3D,MAAM,KAAK,GAAG,QAAQ,CAAC,KAAK,IAAI,EAAE,CAAC;IACnC,IAAI,IAAI,CAAC,SAAS,KAAK,SAAS,IAAI,CAAC,IAAI,CAAC,SAAS,GAAG,CAAC,IAAI,IAAI,CAAC,SAAS,IAAI,KAAK,CAAC,MAAM,CAAC,EAAE,CAAC;QAC3F,OAAO,EAAE,KAAK,EAAE,QAAQ,IAAI,CAAC,SAAS,GAAG,CAAC,sBAAsB,IAAI,CAAC,QAAQ,aAAa,KAAK,CAAC,MAAM,GAAG,EAAE,CAAC;IAC9G,CAAC;IAED,OAAO,eAAe,CAAC;QACrB,WAAW,EAAE,IAAI,CAAC,QAAQ;QAC1B,KAAK;QACL,YAAY,EAAE,EAAE;QAChB,UAAU;QACV,WAAW;QACX,eAAe,EAAE,MAAM;QACvB,YAAY,EAAE,IAAI,CAAC,YAAY;QAC/B,QAAQ,EAAE,IAAI,CAAC,QAAQ;QACvB,kBAAkB,EAAE,IAAI,CAAC,kBAAkB;QAC3C,YAAY,EAAE,IAAI,CAAC,YAAY;QAC/B,MAAM,EAAE,QAAQ,CAAC,MAAM;QACvB,OAAO,EAAE,QAAQ,CAAC,OAAO;QACzB,WAAW,EAAE,IAAI,CAAC,WAAW;QAC7B,OAAO,EAAE,IAAI,CAAC,OAAO;QACrB,KAAK,EAAE,IAAI,CAAC,KAAK;QACjB,SAAS,EAAE,IAAI,CAAC,SAAS;QACzB,OAAO,EAAE,IAAI,CAAC,OAAO;QACrB,gBAAgB,EAAE,IAAI,CAAC,gBAAgB;QACvC,UAAU,EAAE,IAAI,CAAC,UAAU;QAC3B,aAAa,EAAE,IAAI,CAAC,aAAa;QACjC,WAAW,EAAE,IAAI,CAAC,WAAW;KAC9B,CAAC,CAAC;AACL,CAAC;AAqBD,MAAM,OAAO,aAAa;IAEJ;IAA6B;IAAkB;IAD3D,GAAG,GAAG,IAAI,GAAG,EAAwB,CAAC;IAC9C,YAAoB,QAAQ,EAAE,GAAG,MAAM,EAAU,MAAM,EAAE,EAAU,MAAoB,IAAI,CAAC,GAAG;QAA3E,UAAK,GAAL,KAAK,CAAc;QAAU,QAAG,GAAH,GAAG,CAAK;QAAU,QAAG,GAAH,GAAG,CAAyB;IAAG,CAAC;IAE3F,KAAK;QACX,MAAM,MAAM,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,KAAK,CAAC;QACvC,KAAK,MAAM,CAAC,EAAE,EAAE,CAAC,CAAC,IAAI,IAAI,CAAC,GAAG;YAAE,IAAI,CAAC,CAAC,SAAS,GAAG,MAAM;gBAAE,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;QAC9E,OAAO,IAAI,CAAC,GAAG,CAAC,IAAI,GAAG,IAAI,CAAC,GAAG;YAAE,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,EAAE,CAAC,IAAI,EAAE,CAAC,KAAe,CAAC,CAAC;IAC3F,CAAC;IAED,GAAG,CAAC,KAAa;QACf,IAAI,CAAC,KAAK,EAAE,CAAC;QACb,OAAO,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;IAC7B,CAAC;IAED,GAAG,CAAC,KAAa;QACf,OAAO,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;IAC3B,CAAC;IAED,iFAAiF;IACjF,QAAQ,CAAC,KAAa,EAAE,IAAgD;QACtE,IAAI,CAAC,KAAK,EAAE,CAAC;QACb,IAAI,GAAG,GAAG,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;QAC9B,IAAI,CAAC,GAAG,EAAE,CAAC;YACT,GAAG,GAAG,EAAE,GAAG,IAAI,EAAE,MAAM,EAAE,EAAE,EAAE,OAAO,EAAE,EAAE,EAAE,UAAU,EAAE,EAAE,EAAE,MAAM,EAAE,EAAE,EAAE,SAAS,EAAE,IAAI,CAAC,GAAG,EAAE,EAAE,CAAC;YAC9F,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC;QAC3B,CAAC;QACD,MAAM,CAAC,GAAG,GAAG,CAAC;QACd,OAAO;YACL,gBAAgB,EAAE,CAAC,MAA8B,EAAE,OAAiB,EAAE,EAAE;gBACtE,CAAC,CAAC,MAAM,GAAG,EAAE,GAAG,MAAM,EAAE,CAAC;gBACzB,CAAC,CAAC,OAAO,GAAG,CAAC,GAAG,OAAO,CAAC,CAAC;gBACzB,CAAC,CAAC,SAAS,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;YAC3B,CAAC;YACD,aAAa,EAAE,CAAC,IAAY,EAAE,eAAuC,EAAE,EAAE;gBACvE,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,eAAe,CAAC;gBACjC,CAAC,CAAC,SAAS,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;YAC3B,CAAC;YACD,WAAW,EAAE,CAAC,KAAa,EAAE,EAAE;gBAC7B,IAAI,CAAC,CAAC,CAAC,UAAU,CAAC,QAAQ,CAAC,KAAK,CAAC;oBAAE,CAAC,CAAC,UAAU,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;YAC9D,CAAC;SACF,CAAC;IACJ,CAAC;IAED,MAAM,CAAC,KAAa;QAClB,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;IACzB,CAAC;CACF;AAED;;;;GAIG;AACH,MAAM,CAAC,KAAK,UAAU,aAAa,CAAC,IAKnC;IACC,MAAM,GAAG,GAAG,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IAC1C,IAAI,CAAC,GAAG,EAAE,CAAC;QACT,OAAO,EAAE,KAAK,EAAE,oJAAoJ,EAAE,CAAC;IACzK,CAAC;IACD,MAAM,MAAM,GAAG,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IACrC,IAAI,CAAC,MAAM,EAAE,CAAC;QACZ,OAAO,EAAE,KAAK,EAAE,QAAQ,IAAI,CAAC,IAAI,GAAG,CAAC,8GAA8G,EAAE,CAAC;IACxJ,CAAC;IACD,MAAM,GAAG,GAAG,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC,IAAI,CAAC,KAAK,EAAE,EAAE,QAAQ,EAAE,GAAG,CAAC,QAAQ,EAAE,WAAW,EAAE,GAAG,CAAC,WAAW,EAAE,CAAC,CAAC;IACzG,OAAO,WAAW,CAAC;QACjB,GAAG,IAAI;QACP,QAAQ,EAAE,GAAG,CAAC,QAAQ;QACtB,WAAW,EAAE,GAAG,CAAC,WAAW;QAC5B,MAAM,EAAE,GAAG,CAAC,MAAM;QAClB,SAAS,EAAE,IAAI,CAAC,IAAI;QACpB,OAAO,EAAE,IAAI,CAAC,IAAI,KAAK,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS;QACrD,gBAAgB,EAAE,MAAM;QACxB,UAAU,EAAE,CAAC,GAAG,GAAG,CAAC,OAAO,EAAE,GAAG,GAAG,CAAC,UAAU,CAAC;QAC/C,aAAa,EAAE,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE;YACtB,2EAA2E;YAC3E,IAAI,IAAI,CAAC,IAAI,KAAK,MAAM,IAAI,CAAC,KAAK,IAAI,CAAC,IAAI;gBAAE,GAAG,CAAC,aAAa,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;YACrE,IAAI,CAAC,aAAa,EAAE,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;QAC7B,CAAC;QACD,WAAW,EAAE,CAAC,CAAC,EAAE,EAAE;YACjB,GAAG,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC;YACnB,IAAI,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC,CAAC;QACxB,CAAC;KACF,CAAC,CAAC;AACL,CAAC"}

package/dist/collections/script-api.d.ts

@@ -0,0 +1,18 @@
+import type { Script, ScriptContext, ScriptResult, ScriptRunner, AssertionTarget } from "./types.js";
+export interface ScriptScope {
+    /** Names a script can use: nr, console, and the safe builtins. */
+    globals: Record<string, unknown>;
+    /** Record an error thrown by the script. */
+    fail(message: string): void;
+    /** Variables, mutations, tests and logs after the script ran. */
+    finish(): ScriptResult;
+}
+export declare function createScriptScope(context: ScriptContext, phase: "pre" | "post", response?: AssertionTarget): ScriptScope;
+/**
+ * Declarative script runner.
+ * Handles pre_request.set and post_response.extract/set without executing arbitrary code.
+ */
+export declare class DeclarativeScriptRunner implements ScriptRunner {
+    runPreRequest(script: Script, context: ScriptContext): ScriptResult;
+    runPostResponse(script: Script, response: AssertionTarget, context: ScriptContext): ScriptResult;
+}

package/dist/collections/script-api.js

@@ -0,0 +1,208 @@
+// The `nr` script API, independent of how the code is executed. The bridge
+// runs scripts in node:vm; the extension's browser engine runs them in a
+// sandboxed extension page. Both build their scope here so scripts behave
+// identically.
+import { toBase64, fromBase64 } from "./encoding.js";
+import { dotGet } from "./assertions.js";
+export function createScriptScope(context, phase, response) {
+    const variables = { ...context.variables };
+    const mutations = {};
+    const tests = [];
+    const logs = [];
+    // Build mutable request state from context
+    const reqState = {
+        method: context.request?.method ?? "GET",
+        url: context.request?.path ?? "/",
+        headers: { ...(context.request?.headers ?? {}) },
+        body: context.request?.body,
+        cookies: { ...(context.request?.cookies ?? {}) },
+    };
+    // ── nr.variables ──
+    const nrVariables = {
+        get(key) { return variables[key]; },
+        set(key, value) { variables[key] = String(value); },
+    };
+    // ── nr.request ──
+    const nrRequestHeaders = {
+        get(key) { return reqState.headers[key] ?? reqState.headers[key.toLowerCase()]; },
+        set(key, value) {
+            reqState.headers[key] = value;
+            if (!mutations.headers)
+                mutations.headers = {};
+            mutations.headers[key] = value;
+        },
+        remove(key) {
+            delete reqState.headers[key];
+            if (!mutations.headers)
+                mutations.headers = {};
+            mutations.headers[key] = "";
+        },
+    };
+    const nrRequest = {
+        get method() { return reqState.method; },
+        set method(v) { reqState.method = v; mutations.method = v; },
+        get url() { return reqState.url; },
+        set url(v) { reqState.url = v; mutations.path = v; },
+        headers: nrRequestHeaders,
+        get body() { return reqState.body; },
+        set body(v) { reqState.body = v; mutations.body = v; },
+    };
+    // ── nr.cookies ──
+    const nrCookies = {
+        set(name, value) {
+            reqState.cookies[name] = value;
+            if (!mutations.cookies)
+                mutations.cookies = {};
+            mutations.cookies[name] = value;
+        },
+        get(name) { return reqState.cookies[name]; },
+    };
+    // ── nr.environment (read-only) ──
+    const nrEnvironment = {
+        get(key) { return context.environment?.variables?.[key]; },
+        get name() { return context.environment?.name ?? ""; },
+        get base_url() { return context.environment?.base_url ?? ""; },
+    };
+    // ── nr.response (post-response only) ──
+    let nrResponse;
+    if (phase === "post" && response) {
+        const rawBody = response.body;
+        const textBody = typeof rawBody === "string" ? rawBody : JSON.stringify(rawBody);
+        nrResponse = {
+            status: response.status,
+            headers: {
+                get(key) {
+                    return response.headers[key] ?? response.headers[key.toLowerCase()];
+                },
+            },
+            body: rawBody,
+            json() { return rawBody; },
+            text() { return textBody; },
+            time: response.timing.total_ms,
+        };
+    }
+    // ── nr.test ──
+    function nrTest(name, fn) {
+        try {
+            fn();
+            tests.push({ name, passed: true });
+        }
+        catch (err) {
+            tests.push({
+                name,
+                passed: false,
+                error: err instanceof Error ? err.message : String(err),
+            });
+        }
+    }
+    // ── nr.log ──
+    function nrLog(...args) {
+        logs.push(args.map(String).join(" "));
+    }
+    // Assemble the nr object
+    const nr = {
+        variables: nrVariables,
+        request: nrRequest,
+        cookies: nrCookies,
+        environment: nrEnvironment,
+        test: nrTest,
+        log: nrLog,
+    };
+    if (nrResponse)
+        nr.response = nrResponse;
+    const globals = {
+        nr,
+        console: { log: nrLog, warn: nrLog, error: nrLog },
+        JSON,
+        parseInt,
+        parseFloat,
+        Math,
+        Date,
+        Array,
+        Object,
+        String,
+        Number,
+        Boolean,
+        RegExp,
+        Map,
+        Set,
+        encodeURIComponent,
+        decodeURIComponent,
+        encodeURI,
+        decodeURI,
+        btoa: (s) => toBase64(String(s)),
+        atob: (s) => fromBase64(String(s)),
+        isNaN,
+        isFinite,
+        undefined,
+        NaN,
+        Infinity,
+    };
+    return {
+        globals,
+        fail(message) {
+            logs.push(`[script error] ${message}`);
+        },
+        finish() {
+            const result = { variables };
+            const hasMutations = mutations.headers || mutations.body !== undefined ||
+                mutations.cookies || mutations.path || mutations.method;
+            if (hasMutations)
+                result.mutations = mutations;
+            if (tests.length)
+                result.tests = tests;
+            if (logs.length)
+                result.logs = logs;
+            return result;
+        },
+    };
+}
+/**
+ * Declarative script runner.
+ * Handles pre_request.set and post_response.extract/set without executing arbitrary code.
+ */
+export class DeclarativeScriptRunner {
+    runPreRequest(script, context) {
+        const variables = { ...context.variables };
+        if (script.set) {
+            for (const [key, value] of Object.entries(script.set)) {
+                variables[key] = value;
+            }
+        }
+        return { variables };
+    }
+    runPostResponse(script, response, context) {
+        const variables = { ...context.variables };
+        if (script.extract) {
+            for (const [varName, path] of Object.entries(script.extract)) {
+                const value = extractFromResponse(response, path);
+                if (value !== undefined && value !== null) {
+                    variables[varName] = String(value);
+                }
+            }
+        }
+        if (script.set) {
+            for (const [key, value] of Object.entries(script.set)) {
+                variables[key] = value;
+            }
+        }
+        return { variables };
+    }
+}
+/** Extract a value from a response using dot notation with body.* prefix handling. */
+function extractFromResponse(response, path) {
+    if (path === "status")
+        return response.status;
+    if (path === "body")
+        return response.body;
+    if (path.startsWith("body."))
+        return dotGet(response.body, path.slice(5));
+    if (path.startsWith("header."))
+        return response.headers[path.slice(7).toLowerCase()];
+    if (path === "timing.total")
+        return response.timing.total_ms;
+    if (path === "timing.ttfb")
+        return response.timing.ttfb_ms;
+    return dotGet(response.body, path);
+}
+//# sourceMappingURL=script-api.js.map

package/dist/collections/script-api.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"script-api.js","sourceRoot":"","sources":["../../src/collections/script-api.ts"],"names":[],"mappings":"AAAA,2EAA2E;AAC3E,yEAAyE;AACzE,0EAA0E;AAC1E,eAAe;AAGf,OAAO,EAAE,QAAQ,EAAE,UAAU,EAAE,MAAM,eAAe,CAAC;AACrD,OAAO,EAAE,MAAM,EAAE,MAAM,iBAAiB,CAAC;AAWzC,MAAM,UAAU,iBAAiB,CAC/B,OAAsB,EACtB,KAAqB,EACrB,QAA0B;IAE1B,MAAM,SAAS,GAA2B,EAAE,GAAG,OAAO,CAAC,SAAS,EAAE,CAAC;IACnE,MAAM,SAAS,GAA8B,EAAE,CAAC;IAChD,MAAM,KAAK,GAAwD,EAAE,CAAC;IACtE,MAAM,IAAI,GAAa,EAAE,CAAC;IAE1B,2CAA2C;IAC3C,MAAM,QAAQ,GAAG;QACf,MAAM,EAAE,OAAO,CAAC,OAAO,EAAE,MAAM,IAAI,KAAK;QACxC,GAAG,EAAE,OAAO,CAAC,OAAO,EAAE,IAAI,IAAI,GAAG;QACjC,OAAO,EAAE,EAAE,GAAG,CAAC,OAAO,CAAC,OAAO,EAAE,OAAO,IAAI,EAAE,CAAC,EAAE;QAChD,IAAI,EAAE,OAAO,CAAC,OAAO,EAAE,IAAI;QAC3B,OAAO,EAAE,EAAE,GAAG,CAAC,OAAO,CAAC,OAAO,EAAE,OAAO,IAAI,EAAE,CAAC,EAAE;KACjD,CAAC;IAEF,qBAAqB;IACrB,MAAM,WAAW,GAAG;QAClB,GAAG,CAAC,GAAW,IAAwB,OAAO,SAAS,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;QAC/D,GAAG,CAAC,GAAW,EAAE,KAAa,IAAU,SAAS,CAAC,GAAG,CAAC,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;KAC1E,CAAC;IAEF,mBAAmB;IACnB,MAAM,gBAAgB,GAAG;QACvB,GAAG,CAAC,GAAW,IAAwB,OAAO,QAAQ,CAAC,OAAO,CAAC,GAAG,CAAC,IAAI,QAAQ,CAAC,OAAO,CAAC,GAAG,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC,CAAC;QAC7G,GAAG,CAAC,GAAW,EAAE,KAAa;YAC5B,QAAQ,CAAC,OAAO,CAAC,GAAG,CAAC,GAAG,KAAK,CAAC;YAC9B,IAAI,CAAC,SAAS,CAAC,OAAO;gBAAE,SAAS,CAAC,OAAO,GAAG,EAAE,CAAC;YAC/C,SAAS,CAAC,OAAO,CAAC,GAAG,CAAC,GAAG,KAAK,CAAC;QACjC,CAAC;QACD,MAAM,CAAC,GAAW;YAChB,OAAO,QAAQ,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;YAC7B,IAAI,CAAC,SAAS,CAAC,OAAO;gBAAE,SAAS,CAAC,OAAO,GAAG,EAAE,CAAC;YAC/C,SAAS,CAAC,OAAO,CAAC,GAAG,CAAC,GAAG,EAAE,CAAC;QAC9B,CAAC;KACF,CAAC;IAEF,MAAM,SAAS,GAAG;QAChB,IAAI,MAAM,KAAK,OAAO,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC;QACxC,IAAI,MAAM,CAAC,CAAS,IAAI,QAAQ,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,SAAS,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC;QACpE,IAAI,GAAG,KAAK,OAAO,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC;QAClC,IAAI,GAAG,CAAC,CAAS,IAAI,QAAQ,CAAC,GAAG,GAAG,CAAC,CAAC,CAAC,SAAS,CAAC,IAAI,GAAG,CAAC,CAAC,CAAC,CAAC;QAC5D,OAAO,EAAE,gBAAgB;QACzB,IAAI,IAAI,KAAK,OAAO,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC;QACpC,IAAI,IAAI,CAAC,CAAU,IAAI,QAAQ,CAAC,IAAI,GAAG,CAAC,CAAC,CAAC,SAAS,CAAC,IAAI,GAAG,CAAC,CAAC,CAAC,CAAC;KAChE,CAAC;IAEF,mBAAmB;IACnB,MAAM,SAAS,GAAG;QAChB,GAAG,CAAC,IAAY,EAAE,KAAa;YAC7B,QAAQ,CAAC,OAAO,CAAC,IAAI,CAAC,GAAG,KAAK,CAAC;YAC/B,IAAI,CAAC,SAAS,CAAC,OAAO;gBAAE,SAAS,CAAC,OAAO,GAAG,EAAE,CAAC;YAC/C,SAAS,CAAC,OAAO,CAAC,IAAI,CAAC,GAAG,KAAK,CAAC;QAClC,CAAC;QACD,GAAG,CAAC,IAAY,IAAwB,OAAO,QAAQ,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;KACzE,CAAC;IAEF,mCAAmC;IACnC,MAAM,aAAa,GAAG;QACpB,GAAG,CAAC,GAAW,IAAwB,OAAO,OAAO,CAAC,WAAW,EAAE,SAAS,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;QACtF,IAAI,IAAI,KAAK,OAAO,OAAO,CAAC,WAAW,EAAE,IAAI,IAAI,EAAE,CAAC,CAAC,CAAC;QACtD,IAAI,QAAQ,KAAK,OAAO,OAAO,CAAC,WAAW,EAAE,QAAQ,IAAI,EAAE,CAAC,CAAC,CAAC;KAC/D,CAAC;IAEF,yCAAyC;IACzC,IAAI,UAA+C,CAAC;IACpD,IAAI,KAAK,KAAK,MAAM,IAAI,QAAQ,EAAE,CAAC;QACjC,MAAM,OAAO,GAAG,QAAQ,CAAC,IAAI,CAAC;QAC9B,MAAM,QAAQ,GAAG,OAAO,OAAO,KAAK,QAAQ,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,CAAC;QACjF,UAAU,GAAG;YACX,MAAM,EAAE,QAAQ,CAAC,MAAM;YACvB,OAAO,EAAE;gBACP,GAAG,CAAC,GAAW;oBACb,OAAO,QAAQ,CAAC,OAAO,CAAC,GAAG,CAAC,IAAI,QAAQ,CAAC,OAAO,CAAC,GAAG,CAAC,WAAW,EAAE,CAAC,CAAC;gBACtE,CAAC;aACF;YACD,IAAI,EAAE,OAAO;YACb,IAAI,KAAK,OAAO,OAAO,CAAC,CAAC,CAAC;YAC1B,IAAI,KAAK,OAAO,QAAQ,CAAC,CAAC,CAAC;YAC3B,IAAI,EAAE,QAAQ,CAAC,MAAM,CAAC,QAAQ;SAC/B,CAAC;IACJ,CAAC;IAED,gBAAgB;IAChB,SAAS,MAAM,CAAC,IAAY,EAAE,EAAc;QAC1C,IAAI,CAAC;YACH,EAAE,EAAE,CAAC;YACL,KAAK,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC;QACrC,CAAC;QAAC,OAAO,GAAY,EAAE,CAAC;YACtB,KAAK,CAAC,IAAI,CAAC;gBACT,IAAI;gBACJ,MAAM,EAAE,KAAK;gBACb,KAAK,EAAE,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC;aACxD,CAAC,CAAC;QACL,CAAC;IACH,CAAC;IAED,eAAe;IACf,SAAS,KAAK,CAAC,GAAG,IAAe;QAC/B,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC;IACxC,CAAC;IAED,yBAAyB;IACzB,MAAM,EAAE,GAA4B;QAClC,SAAS,EAAE,WAAW;QACtB,OAAO,EAAE,SAAS;QAClB,OAAO,EAAE,SAAS;QAClB,WAAW,EAAE,aAAa;QAC1B,IAAI,EAAE,MAAM;QACZ,GAAG,EAAE,KAAK;KACX,CAAC;IACF,IAAI,UAAU;QAAE,EAAE,CAAC,QAAQ,GAAG,UAAU,CAAC;IAEzC,MAAM,OAAO,GAA4B;QACvC,EAAE;QACF,OAAO,EAAE,EAAE,GAAG,EAAE,KAAK,EAAE,IAAI,EAAE,KAAK,EAAE,KAAK,EAAE,KAAK,EAAE;QAClD,IAAI;QACJ,QAAQ;QACR,UAAU;QACV,IAAI;QACJ,IAAI;QACJ,KAAK;QACL,MAAM;QACN,MAAM;QACN,MAAM;QACN,OAAO;QACP,MAAM;QACN,GAAG;QACH,GAAG;QACH,kBAAkB;QAClB,kBAAkB;QAClB,SAAS;QACT,SAAS;QACT,IAAI,EAAE,CAAC,CAAS,EAAE,EAAE,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC;QACxC,IAAI,EAAE,CAAC,CAAS,EAAE,EAAE,CAAC,UAAU,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC;QAC1C,KAAK;QACL,QAAQ;QACR,SAAS;QACT,GAAG;QACH,QAAQ;KACT,CAAC;IAEF,OAAO;QACL,OAAO;QACP,IAAI,CAAC,OAAe;YAClB,IAAI,CAAC,IAAI,CAAC,kBAAkB,OAAO,EAAE,CAAC,CAAC;QACzC,CAAC;QACD,MAAM;YACJ,MAAM,MAAM,GAAiB,EAAE,SAAS,EAAE,CAAC;YAE3C,MAAM,YAAY,GAAG,SAAS,CAAC,OAAO,IAAI,SAAS,CAAC,IAAI,KAAK,SAAS;gBACpE,SAAS,CAAC,OAAO,IAAI,SAAS,CAAC,IAAI,IAAI,SAAS,CAAC,MAAM,CAAC;YAC1D,IAAI,YAAY;gBAAE,MAAM,CAAC,SAAS,GAAG,SAAS,CAAC;YAC/C,IAAI,KAAK,CAAC,MAAM;gBAAE,MAAM,CAAC,KAAK,GAAG,KAAK,CAAC;YACvC,IAAI,IAAI,CAAC,MAAM;gBAAE,MAAM,CAAC,IAAI,GAAG,IAAI,CAAC;YACpC,OAAO,MAAM,CAAC;QAChB,CAAC;KACF,CAAC;AACJ,CAAC;AAED;;;GAGG;AACH,MAAM,OAAO,uBAAuB;IAClC,aAAa,CAAC,MAAc,EAAE,OAAsB;QAClD,MAAM,SAAS,GAAG,EAAE,GAAG,OAAO,CAAC,SAAS,EAAE,CAAC;QAC3C,IAAI,MAAM,CAAC,GAAG,EAAE,CAAC;YACf,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC;gBACtD,SAAS,CAAC,GAAG,CAAC,GAAG,KAAK,CAAC;YACzB,CAAC;QACH,CAAC;QACD,OAAO,EAAE,SAAS,EAAE,CAAC;IACvB,CAAC;IAED,eAAe,CAAC,MAAc,EAAE,QAAyB,EAAE,OAAsB;QAC/E,MAAM,SAAS,GAAG,EAAE,GAAG,OAAO,CAAC,SAAS,EAAE,CAAC;QAE3C,IAAI,MAAM,CAAC,OAAO,EAAE,CAAC;YACnB,KAAK,MAAM,CAAC,OAAO,EAAE,IAAI,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,OAAO,CAAC,EAAE,CAAC;gBAC7D,MAAM,KAAK,GAAG,mBAAmB,CAAC,QAAQ,EAAE,IAAI,CAAC,CAAC;gBAClD,IAAI,KAAK,KAAK,SAAS,IAAI,KAAK,KAAK,IAAI,EAAE,CAAC;oBAC1C,SAAS,CAAC,OAAO,CAAC,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC;gBACrC,CAAC;YACH,CAAC;QACH,CAAC;QAED,IAAI,MAAM,CAAC,GAAG,EAAE,CAAC;YACf,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC;gBACtD,SAAS,CAAC,GAAG,CAAC,GAAG,KAAK,CAAC;YACzB,CAAC;QACH,CAAC;QAED,OAAO,EAAE,SAAS,EAAE,CAAC;IACvB,CAAC;CACF;AAED,sFAAsF;AACtF,SAAS,mBAAmB,CAAC,QAAyB,EAAE,IAAY;IAClE,IAAI,IAAI,KAAK,QAAQ;QAAE,OAAO,QAAQ,CAAC,MAAM,CAAC;IAC9C,IAAI,IAAI,KAAK,MAAM;QAAE,OAAO,QAAQ,CAAC,IAAI,CAAC;IAC1C,IAAI,IAAI,CAAC,UAAU,CAAC,OAAO,CAAC;QAAE,OAAO,MAAM,CAAC,QAAQ,CAAC,IAAI,EAAE,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC;IAC1E,IAAI,IAAI,CAAC,UAAU,CAAC,SAAS,CAAC;QAAE,OAAO,QAAQ,CAAC,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,WAAW,EAAE,CAAC,CAAC;IACrF,IAAI,IAAI,KAAK,cAAc;QAAE,OAAO,QAAQ,CAAC,MAAM,CAAC,QAAQ,CAAC;IAC7D,IAAI,IAAI,KAAK,aAAa;QAAE,OAAO,QAAQ,CAAC,MAAM,CAAC,OAAO,CAAC;IAC3D,OAAO,MAAM,CAAC,QAAQ,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;AACrC,CAAC"}

package/dist/collections/scripts.d.ts

@@ -1,12 +1,5 @@
 import type { ScriptRunner, Script, ScriptContext, ScriptResult, AssertionTarget } from "./types.js";
-/**
- * Declarative script runner.
- * Handles pre_request.set and post_response.extract/set without executing arbitrary code.
- */
-export declare class DeclarativeScriptRunner implements ScriptRunner {
-    runPreRequest(script: Script, context: ScriptContext): ScriptResult;
-    runPostResponse(script: Script, response: AssertionTarget, context: ScriptContext): ScriptResult;
-}
+export { DeclarativeScriptRunner } from "./script-api.js";
 /**
  * JavaScript script runner.
  * If a script has `code`, runs it in a sandboxed node:vm context

package/dist/collections/scripts.js

@@ -1,53 +1,6 @@
 import { createContext, runInContext } from "node:vm";
-import { dotGet } from "./assertions.js";
-/**
- * Declarative script runner.
- * Handles pre_request.set and post_response.extract/set without executing arbitrary code.
- */
-export class DeclarativeScriptRunner {
-    runPreRequest(script, context) {
-        const variables = { ...context.variables };
-        if (script.set) {
-            for (const [key, value] of Object.entries(script.set)) {
-                variables[key] = value;
-            }
-        }
-        return { variables };
-    }
-    runPostResponse(script, response, context) {
-        const variables = { ...context.variables };
-        if (script.extract) {
-            for (const [varName, path] of Object.entries(script.extract)) {
-                const value = extractFromResponse(response, path);
-                if (value !== undefined && value !== null) {
-                    variables[varName] = String(value);
-                }
-            }
-        }
-        if (script.set) {
-            for (const [key, value] of Object.entries(script.set)) {
-                variables[key] = value;
-            }
-        }
-        return { variables };
-    }
-}
-/** Extract a value from a response using dot notation with body.* prefix handling. */
-function extractFromResponse(response, path) {
-    if (path === "status")
-        return response.status;
-    if (path === "body")
-        return response.body;
-    if (path.startsWith("body."))
-        return dotGet(response.body, path.slice(5));
-    if (path.startsWith("header."))
-        return response.headers[path.slice(7).toLowerCase()];
-    if (path === "timing.total")
-        return response.timing.total_ms;
-    if (path === "timing.ttfb")
-        return response.timing.ttfb_ms;
-    return dotGet(response.body, path);
-}
+import { createScriptScope, DeclarativeScriptRunner } from "./script-api.js";
+export { DeclarativeScriptRunner } from "./script-api.js";
 // ── JS script runner ────────────────────────────────────────────
 const declarativeFallback = new DeclarativeScriptRunner();
 /**
@@ -68,158 +21,15 @@ export class JsScriptRunner {
         return declarativeFallback.runPostResponse(script, response, context);
     }
     executeCode(code, context, phase, response) {
-        const variables = { ...context.variables };
-        const mutations = {};
-        const tests = [];
-        const logs = [];
-        // Build mutable request state from context
-        const reqState = {
-            method: context.request?.method ?? "GET",
-            url: context.request?.path ?? "/",
-            headers: { ...(context.request?.headers ?? {}) },
-            body: context.request?.body,
-            cookies: { ...(context.request?.cookies ?? {}) },
-        };
-        // ── nr.variables ──
-        const nrVariables = {
-            get(key) { return variables[key]; },
-            set(key, value) { variables[key] = String(value); },
-        };
-        // ── nr.request ──
-        const nrRequestHeaders = {
-            get(key) { return reqState.headers[key] ?? reqState.headers[key.toLowerCase()]; },
-            set(key, value) {
-                reqState.headers[key] = value;
-                if (!mutations.headers)
-                    mutations.headers = {};
-                mutations.headers[key] = value;
-            },
-            remove(key) {
-                delete reqState.headers[key];
-                if (!mutations.headers)
-                    mutations.headers = {};
-                mutations.headers[key] = "";
-            },
-        };
-        const nrRequest = {
-            get method() { return reqState.method; },
-            set method(v) { reqState.method = v; mutations.method = v; },
-            get url() { return reqState.url; },
-            set url(v) { reqState.url = v; mutations.path = v; },
-            headers: nrRequestHeaders,
-            get body() { return reqState.body; },
-            set body(v) { reqState.body = v; mutations.body = v; },
-        };
-        // ── nr.cookies ──
-        const nrCookies = {
-            set(name, value) {
-                reqState.cookies[name] = value;
-                if (!mutations.cookies)
-                    mutations.cookies = {};
-                mutations.cookies[name] = value;
-            },
-            get(name) { return reqState.cookies[name]; },
-        };
-        // ── nr.environment (read-only) ──
-        const nrEnvironment = {
-            get(key) { return context.environment?.variables?.[key]; },
-            get name() { return context.environment?.name ?? ""; },
-            get base_url() { return context.environment?.base_url ?? ""; },
-        };
-        // ── nr.response (post-response only) ──
-        let nrResponse;
-        if (phase === "post" && response) {
-            const rawBody = response.body;
-            const textBody = typeof rawBody === "string" ? rawBody : JSON.stringify(rawBody);
-            nrResponse = {
-                status: response.status,
-                headers: {
-                    get(key) {
-                        return response.headers[key] ?? response.headers[key.toLowerCase()];
-                    },
-                },
-                body: rawBody,
-                json() { return rawBody; },
-                text() { return textBody; },
-                time: response.timing.total_ms,
-            };
-        }
-        // ── nr.test ──
-        function nrTest(name, fn) {
-            try {
-                fn();
-                tests.push({ name, passed: true });
-            }
-            catch (err) {
-                tests.push({
-                    name,
-                    passed: false,
-                    error: err instanceof Error ? err.message : String(err),
-                });
-            }
-        }
-        // ── nr.log ──
-        function nrLog(...args) {
-            logs.push(args.map(String).join(" "));
-        }
-        // Assemble the nr object
-        const nr = {
-            variables: nrVariables,
-            request: nrRequest,
-            cookies: nrCookies,
-            environment: nrEnvironment,
-            test: nrTest,
-            log: nrLog,
-        };
-        if (nrResponse)
-            nr.response = nrResponse;
-        // ── Sandbox ──
-        const sandbox = createContext({
-            nr,
-            console: { log: nrLog, warn: nrLog, error: nrLog },
-            JSON,
-            parseInt,
-            parseFloat,
-            Math,
-            Date,
-            Array,
-            Object,
-            String,
-            Number,
-            Boolean,
-            RegExp,
-            Map,
-            Set,
-            encodeURIComponent,
-            decodeURIComponent,
-            encodeURI,
-            decodeURI,
-            btoa: (s) => Buffer.from(s).toString("base64"),
-            atob: (s) => Buffer.from(s, "base64").toString("utf-8"),
-            isNaN,
-            isFinite,
-            undefined,
-            NaN,
-            Infinity,
-        });
+        const scope = createScriptScope(context, phase, response);
+        const sandbox = createContext(scope.globals);
         try {
             runInContext(code, sandbox, { timeout: 5000, filename: `script-${phase}.js` });
         }
         catch (err) {
-            const msg = err instanceof Error ? err.message : String(err);
-            logs.push(`[script error] ${msg}`);
+            scope.fail(err instanceof Error ? err.message : String(err));
         }
-        // Build result
-        const result = { variables };
-        const hasMutations = mutations.headers || mutations.body !== undefined ||
-            mutations.cookies || mutations.path || mutations.method;
-        if (hasMutations)
-            result.mutations = mutations;
-        if (tests.length)
-            result.tests = tests;
-        if (logs.length)
-            result.logs = logs;
-        return result;
+        return scope.finish();
     }
 }
 //# sourceMappingURL=scripts.js.map