runframe 1.0.0

package/dist/optimized-sandbox.js

@@ -0,0 +1,153 @@
+/**
+ * Optimized sandbox for high throughput
+ * Features: worker pool, script cache, batch execution
+ */
+import { WorkerPool, DEFAULT_POOL_CONFIG } from "./worker-pool.js";
+import { ScriptCache, globalScriptCache } from "./script-cache.js";
+/**
+ * Optimized sandbox with pooling and caching
+ */
+export class OptimizedSandbox {
+    constructor(options) {
+        this.intrinsicsFrozen = false;
+        this.options = options;
+        // Set up worker pool
+        const poolConfig = {
+            ...DEFAULT_POOL_CONFIG,
+            memoryMb: options.memoryMb,
+            ...options.poolConfig
+        };
+        this.pool = new WorkerPool(poolConfig);
+        // Set up script cache
+        this.scriptCache = options.cacheScripts !== false ? globalScriptCache : new ScriptCache(0);
+        // Cleanup timer (every 30s)
+        setInterval(() => {
+            this.pool.cleanup();
+        }, 30000);
+    }
+    /**
+     * Run code in sandbox
+     */
+    run(code) {
+        return new Promise(async (resolve, reject) => {
+            let worker = null;
+            try {
+                // Acquire worker from pool
+                worker = await this.pool.acquire();
+                // Set up timeout
+                const timeout = setTimeout(() => {
+                    this.pool.release(worker);
+                    worker = null;
+                    reject(new Error("Sandbox timeout exceeded"));
+                }, this.options.cpuMs);
+                // Send work to worker
+                worker.once("message", (msg) => {
+                    clearTimeout(timeout);
+                    this.pool.release(worker);
+                    worker = null;
+                    if (msg.type === "result") {
+                        resolve(msg);
+                    }
+                    else {
+                        reject(new Error(msg.error));
+                    }
+                });
+                worker.once("error", (err) => {
+                    clearTimeout(timeout);
+                    this.pool.release(worker);
+                    worker = null;
+                    reject(err);
+                });
+                worker.once("exit", (code) => {
+                    clearTimeout(timeout);
+                    if (worker) {
+                        this.pool.release(worker);
+                        worker = null;
+                    }
+                });
+                // Send message
+                worker.postMessage({
+                    code,
+                    options: {
+                        cpuMs: this.options.cpuMs,
+                        memoryMb: this.options.memoryMb
+                    },
+                    capabilities: this.options.capabilities,
+                    seed: this.options.seed,
+                    cacheScript: this.options.cacheScripts !== false
+                });
+            }
+            catch (err) {
+                if (worker) {
+                    this.pool.release(worker);
+                }
+                reject(err);
+            }
+        });
+    }
+    /**
+     * Batch execute multiple operations
+     */
+    async batch(operations, options) {
+        const { concurrency = 4, stopOnError = false } = options || {};
+        const results = [];
+        let opIdx = 0;
+        const worker = async () => {
+            while (opIdx < operations.length) {
+                const op = operations[opIdx++];
+                try {
+                    const msg = await this.run(op.code);
+                    if (msg.type === "result") {
+                        results.push({
+                            id: op.id,
+                            result: msg.result,
+                            stats: msg.stats
+                        });
+                    }
+                    else {
+                        results.push({
+                            id: op.id,
+                            error: msg.error
+                        });
+                        if (stopOnError)
+                            break;
+                    }
+                }
+                catch (err) {
+                    results.push({
+                        id: op.id,
+                        error: err instanceof Error ? err.message : String(err)
+                    });
+                    if (stopOnError)
+                        break;
+                }
+            }
+        };
+        // Run concurrent workers
+        await Promise.all(Array(Math.min(concurrency, operations.length)).fill(null).map(() => worker()));
+        return results;
+    }
+    /**
+     * Get current stats
+     */
+    stats() {
+        return {
+            pool: this.pool.stats(),
+            cache: this.scriptCache.stats()
+        };
+    }
+    /**
+     * Clean up
+     */
+    async destroy() {
+        await this.pool.destroy();
+        this.scriptCache.clear();
+    }
+}
+/**
+ * Create optimized sandbox
+ */
+export function createOptimizedSandbox(options) {
+    return new OptimizedSandbox(options);
+}
+//# sourceMappingURL=optimized-sandbox.js.map

package/dist/optimized-sandbox.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"optimized-sandbox.js","sourceRoot":"","sources":["../src/optimized-sandbox.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAGH,OAAO,EAAE,UAAU,EAAE,mBAAmB,EAAc,MAAM,kBAAkB,CAAC;AAC/E,OAAO,EAAE,WAAW,EAAE,iBAAiB,EAAE,MAAM,mBAAmB,CAAC;AA2BnE;;GAEG;AACH,MAAM,OAAO,gBAAgB;IAM3B,YAAY,OAAgC;QAFpC,qBAAgB,GAAG,KAAK,CAAC;QAG/B,IAAI,CAAC,OAAO,GAAG,OAAO,CAAC;QAEvB,qBAAqB;QACrB,MAAM,UAAU,GAAG;YACjB,GAAG,mBAAmB;YACtB,QAAQ,EAAE,OAAO,CAAC,QAAQ;YAC1B,GAAG,OAAO,CAAC,UAAU;SACtB,CAAC;QACF,IAAI,CAAC,IAAI,GAAG,IAAI,UAAU,CAAC,UAAU,CAAC,CAAC;QAEvC,sBAAsB;QACtB,IAAI,CAAC,WAAW,GAAG,OAAO,CAAC,YAAY,KAAK,KAAK,CAAC,CAAC,CAAC,iBAAiB,CAAC,CAAC,CAAC,IAAI,WAAW,CAAC,CAAC,CAAC,CAAC;QAE3F,4BAA4B;QAC5B,WAAW,CAAC,GAAG,EAAE;YACf,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,CAAC;QACtB,CAAC,EAAE,KAAK,CAAC,CAAC;IACZ,CAAC;IAED;;OAEG;IACH,GAAG,CAAC,IAAY;QACd,OAAO,IAAI,OAAO,CAAC,KAAK,EAAE,OAAO,EAAE,MAAM,EAAE,EAAE;YAC3C,IAAI,MAAM,GAAkB,IAAI,CAAC;YAEjC,IAAI,CAAC;gBACH,2BAA2B;gBAC3B,MAAM,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,CAAC;gBAEnC,iBAAiB;gBACjB,MAAM,OAAO,GAAG,UAAU,CAAC,GAAG,EAAE;oBAC9B,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,MAAO,CAAC,CAAC;oBAC3B,MAAM,GAAG,IAAI,CAAC;oBACd,MAAM,CAAC,IAAI,KAAK,CAAC,0BAA0B,CAAC,CAAC,CAAC;gBAChD,CAAC,EAAE,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;gBAEvB,sBAAsB;gBACtB,MAAM,CAAC,IAAI,CAAC,SAAS,EAAE,CAAC,GAAmB,EAAE,EAAE;oBAC7C,YAAY,CAAC,OAAO,CAAC,CAAC;oBACtB,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,MAAO,CAAC,CAAC;oBAC3B,MAAM,GAAG,IAAI,CAAC;oBAEd,IAAI,GAAG,CAAC,IAAI,KAAK,QAAQ,EAAE,CAAC;wBAC1B,OAAO,CAAC,GAAG,CAAC,CAAC;oBACf,CAAC;yBAAM,CAAC;wBACN,MAAM,CAAC,IAAI,KAAK,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC;oBAC/B,CAAC;gBACH,CAAC,CAAC,CAAC;gBAEH,MAAM,CAAC,IAAI,CAAC,OAAO,EAAE,CAAC,GAAG,EAAE,EAAE;oBAC3B,YAAY,CAAC,OAAO,CAAC,CAAC;oBACtB,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,MAAO,CAAC,CAAC;oBAC3B,MAAM,GAAG,IAAI,CAAC;oBACd,MAAM,CAAC,GAAG,CAAC,CAAC;gBACd,CAAC,CAAC,CAAC;gBAEH,MAAM,CAAC,IAAI,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,EAAE;oBAC3B,YAAY,CAAC,OAAO,CAAC,CAAC;oBACtB,IAAI,MAAM,EAAE,CAAC;wBACX,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;wBAC1B,MAAM,GAAG,IAAI,CAAC;oBAChB,CAAC;gBACH,CAAC,CAAC,CAAC;gBAEH,eAAe;gBACf,MAAM,CAAC,WAAW,CAAC;oBACjB,IAAI;oBACJ,OAAO,EAAE;wBACP,KAAK,EAAE,IAAI,CAAC,OAAO,CAAC,KAAK;wBACzB,QAAQ,EAAE,IAAI,CAAC,OAAO,CAAC,QAAQ;qBAChC;oBACD,YAAY,EAAE,IAAI,CAAC,OAAO,CAAC,YAAY;oBACvC,IAAI,EAAE,IAAI,CAAC,OAAO,CAAC,IAAI;oBACvB,WAAW,EAAE,IAAI,CAAC,OAAO,CAAC,YAAY,KAAK,KAAK;iBACjD,CAAC,CAAC;YACL,CAAC;YAAC,OAAO,GAAG,EAAE,CAAC;gBACb,IAAI,MAAM,EAAE,CAAC;oBACX,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;gBAC5B,CAAC;gBACD,MAAM,CAAC,GAAG,CAAC,CAAC;YACd,CAAC;QACH,CAAC,CAAC,CAAC;IACL,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,KAAK,CACT,UAAgD,EAChD,OAAyD;QAEzD,MAAM,EAAE,WAAW,GAAG,CAAC,EAAE,WAAW,GAAG,KAAK,EAAE,GAAG,OAAO,IAAI,EAAE,CAAC;QAC/D,MAAM,OAAO,GAKR,EAAE,CAAC;QAER,IAAI,KAAK,GAAG,CAAC,CAAC;QAEd,MAAM,MAAM,GAAG,KAAK,IAAI,EAAE;YACxB,OAAO,KAAK,GAAG,UAAU,CAAC,MAAM,EAAE,CAAC;gBACjC,MAAM,EAAE,GAAG,UAAU,CAAC,KAAK,EAAE,CAAC,CAAC;gBAE/B,IAAI,CAAC;oBACH,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,IAAI,CAAC,CAAC;oBACpC,IAAI,GAAG,CAAC,IAAI,KAAK,QAAQ,EAAE,CAAC;wBAC1B,OAAO,CAAC,IAAI,CAAC;4BACX,EAAE,EAAE,EAAE,CAAC,EAAE;4BACT,MAAM,EAAE,GAAG,CAAC,MAAM;4BAClB,KAAK,EAAE,GAAG,CAAC,KAAK;yBACjB,CAAC,CAAC;oBACL,CAAC;yBAAM,CAAC;wBACN,OAAO,CAAC,IAAI,CAAC;4BACX,EAAE,EAAE,EAAE,CAAC,EAAE;4BACT,KAAK,EAAE,GAAG,CAAC,KAAK;yBACjB,CAAC,CAAC;wBACH,IAAI,WAAW;4BAAE,MAAM;oBACzB,CAAC;gBACH,CAAC;gBAAC,OAAO,GAAG,EAAE,CAAC;oBACb,OAAO,CAAC,IAAI,CAAC;wBACX,EAAE,EAAE,EAAE,CAAC,EAAE;wBACT,KAAK,EAAE,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC;qBACxD,CAAC,CAAC;oBACH,IAAI,WAAW;wBAAE,MAAM;gBACzB,CAAC;YACH,CAAC;QACH,CAAC,CAAC;QAEF,yBAAyB;QACzB,MAAM,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,WAAW,EAAE,UAAU,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,GAAG,EAAE,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC;QAElG,OAAO,OAAO,CAAC;IACjB,CAAC;IAED;;OAEG;IACH,KAAK;QACH,OAAO;YACL,IAAI,EAAE,IAAI,CAAC,IAAI,CAAC,KAAK,EAAE;YACvB,KAAK,EAAE,IAAI,CAAC,WAAW,CAAC,KAAK,EAAE;SAChC,CAAC;IACJ,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,OAAO;QACX,MAAM,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,CAAC;QAC1B,IAAI,CAAC,WAAW,CAAC,KAAK,EAAE,CAAC;IAC3B,CAAC;CACF;AAED;;GAEG;AACH,MAAM,UAAU,sBAAsB,CAAC,OAAgC;IACrE,OAAO,IAAI,gBAAgB,CAAC,OAAO,CAAC,CAAC;AACvC,CAAC"}

package/dist/sandbox.d.ts

@@ -0,0 +1,25 @@
+import { CapabilityGrant, DEFAULT_CAPABILITIES } from "./capabilities.js";
+import { ExecutionStats } from "./stats.js";
+export interface SandboxOptions {
+    cpuMs: number;
+    memoryMb: number;
+    capabilities?: Partial<CapabilityGrant>;
+    seed?: number;
+}
+export interface SandboxResult {
+    type: "result";
+    result: unknown;
+    stats: ExecutionStats;
+}
+export interface SandboxError {
+    type: "error";
+    error: string;
+}
+export type SandboxMessage = SandboxResult | SandboxError;
+export declare function createSandbox(options: SandboxOptions): {
+    run(code: string): Promise<SandboxMessage>;
+};
+export { CapabilityGrant, DEFAULT_CAPABILITIES };
+export { ExecutionStats } from "./stats.js";
+export { ESCAPE_TESTS, checkTestResult } from "./test-corpus.js";
+//# sourceMappingURL=sandbox.d.ts.map

package/dist/sandbox.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"sandbox.d.ts","sourceRoot":"","sources":["../src/sandbox.ts"],"names":[],"mappings":"AAGA,OAAO,EAAE,eAAe,EAAE,oBAAoB,EAAE,MAAM,mBAAmB,CAAC;AAC1E,OAAO,EAAE,cAAc,EAAE,MAAM,YAAY,CAAC;AAK5C,MAAM,WAAW,cAAc;IAC7B,KAAK,EAAE,MAAM,CAAC;IACd,QAAQ,EAAE,MAAM,CAAC;IACjB,YAAY,CAAC,EAAE,OAAO,CAAC,eAAe,CAAC,CAAC;IACxC,IAAI,CAAC,EAAE,MAAM,CAAC;CACf;AAED,MAAM,WAAW,aAAa;IAC5B,IAAI,EAAE,QAAQ,CAAC;IACf,MAAM,EAAE,OAAO,CAAC;IAChB,KAAK,EAAE,cAAc,CAAC;CACvB;AAED,MAAM,WAAW,YAAY;IAC3B,IAAI,EAAE,OAAO,CAAC;IACd,KAAK,EAAE,MAAM,CAAC;CACf;AAED,MAAM,MAAM,cAAc,GAAG,aAAa,GAAG,YAAY,CAAC;AAE1D,wBAAgB,aAAa,CAAC,OAAO,EAAE,cAAc;cAEvC,MAAM,GAAG,OAAO,CAAC,cAAc,CAAC;EA+C7C;AAED,OAAO,EAAE,eAAe,EAAE,oBAAoB,EAAE,CAAC;AACjD,OAAO,EAAE,cAAc,EAAE,MAAM,YAAY,CAAC;AAC5C,OAAO,EAAE,YAAY,EAAE,eAAe,EAAE,MAAM,kBAAkB,CAAC"}

package/dist/sandbox.js

@@ -0,0 +1,55 @@
+import { Worker } from "node:worker_threads";
+import path from "node:path";
+import { fileURLToPath } from "node:url";
+import { DEFAULT_CAPABILITIES } from "./capabilities.js";
+const __filename = fileURLToPath(import.meta.url);
+const __dirname = path.dirname(__filename);
+export function createSandbox(options) {
+    return {
+        run(code) {
+            return new Promise((resolve, reject) => {
+                const worker = new Worker(path.resolve(__dirname, "worker.js"), {
+                    workerData: {
+                        code,
+                        options: {
+                            cpuMs: options.cpuMs,
+                            memoryMb: options.memoryMb
+                        },
+                        capabilities: options.capabilities,
+                        seed: options.seed
+                    }
+                    // Note: Memory limit is enforced via resource limits, not Node flags
+                    // Worker threads inherit parent process memory limits
+                });
+                const timeout = setTimeout(() => {
+                    worker.terminate();
+                    reject(new Error("Sandbox timeout exceeded"));
+                }, options.cpuMs);
+                worker.once("message", (msg) => {
+                    clearTimeout(timeout);
+                    worker.terminate();
+                    if (msg.type === "result") {
+                        resolve(msg);
+                    }
+                    else {
+                        reject(new Error(msg.error));
+                    }
+                });
+                worker.once("error", (err) => {
+                    clearTimeout(timeout);
+                    worker.terminate();
+                    reject(err);
+                });
+                worker.once("exit", (code) => {
+                    clearTimeout(timeout);
+                    if (code !== 0) {
+                        reject(new Error(`Worker exited with code ${code}`));
+                    }
+                });
+            });
+        }
+    };
+}
+export { DEFAULT_CAPABILITIES };
+export { ESCAPE_TESTS, checkTestResult } from "./test-corpus.js";
+//# sourceMappingURL=sandbox.js.map

package/dist/sandbox.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sandbox.js","sourceRoot":"","sources":["../src/sandbox.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,EAAE,MAAM,qBAAqB,CAAC;AAC7C,OAAO,IAAI,MAAM,WAAW,CAAC;AAC7B,OAAO,EAAE,aAAa,EAAE,MAAM,UAAU,CAAC;AACzC,OAAO,EAAmB,oBAAoB,EAAE,MAAM,mBAAmB,CAAC;AAG1E,MAAM,UAAU,GAAG,aAAa,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;AAClD,MAAM,SAAS,GAAG,IAAI,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC;AAsB3C,MAAM,UAAU,aAAa,CAAC,OAAuB;IACnD,OAAO;QACL,GAAG,CAAC,IAAY;YACd,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;gBACrC,MAAM,MAAM,GAAG,IAAI,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,SAAS,EAAE,WAAW,CAAC,EAAE;oBAC9D,UAAU,EAAE;wBACV,IAAI;wBACJ,OAAO,EAAE;4BACP,KAAK,EAAE,OAAO,CAAC,KAAK;4BACpB,QAAQ,EAAE,OAAO,CAAC,QAAQ;yBAC3B;wBACD,YAAY,EAAE,OAAO,CAAC,YAAY;wBAClC,IAAI,EAAE,OAAO,CAAC,IAAI;qBACnB;oBACD,qEAAqE;oBACrE,sDAAsD;iBACvD,CAAC,CAAC;gBAEH,MAAM,OAAO,GAAG,UAAU,CAAC,GAAG,EAAE;oBAC9B,MAAM,CAAC,SAAS,EAAE,CAAC;oBACnB,MAAM,CAAC,IAAI,KAAK,CAAC,0BAA0B,CAAC,CAAC,CAAC;gBAChD,CAAC,EAAE,OAAO,CAAC,KAAK,CAAC,CAAC;gBAElB,MAAM,CAAC,IAAI,CAAC,SAAS,EAAE,CAAC,GAAmB,EAAE,EAAE;oBAC7C,YAAY,CAAC,OAAO,CAAC,CAAC;oBACtB,MAAM,CAAC,SAAS,EAAE,CAAC;oBAEnB,IAAI,GAAG,CAAC,IAAI,KAAK,QAAQ,EAAE,CAAC;wBAC1B,OAAO,CAAC,GAAG,CAAC,CAAC;oBACf,CAAC;yBAAM,CAAC;wBACN,MAAM,CAAC,IAAI,KAAK,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC;oBAC/B,CAAC;gBACH,CAAC,CAAC,CAAC;gBAEH,MAAM,CAAC,IAAI,CAAC,OAAO,EAAE,CAAC,GAAG,EAAE,EAAE;oBAC3B,YAAY,CAAC,OAAO,CAAC,CAAC;oBACtB,MAAM,CAAC,SAAS,EAAE,CAAC;oBACnB,MAAM,CAAC,GAAG,CAAC,CAAC;gBACd,CAAC,CAAC,CAAC;gBAEH,MAAM,CAAC,IAAI,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,EAAE;oBAC3B,YAAY,CAAC,OAAO,CAAC,CAAC;oBACtB,IAAI,IAAI,KAAK,CAAC,EAAE,CAAC;wBACf,MAAM,CAAC,IAAI,KAAK,CAAC,2BAA2B,IAAI,EAAE,CAAC,CAAC,CAAC;oBACvD,CAAC;gBACH,CAAC,CAAC,CAAC;YACL,CAAC,CAAC,CAAC;QACL,CAAC;KACF,CAAC;AACJ,CAAC;AAED,OAAO,EAAmB,oBAAoB,EAAE,CAAC;AAEjD,OAAO,EAAE,YAAY,EAAE,eAAe,EAAE,MAAM,kBAAkB,CAAC"}

package/dist/script-cache.d.ts

@@ -0,0 +1,48 @@
+/**
+ * Script cache: Compile once, run many times
+ * Reduces CPU overhead for repeated code patterns
+ */
+import vm from "node:vm";
+export interface CachedScript {
+    script: vm.Script;
+    createdAt: number;
+    uses: number;
+    hitRate: number;
+}
+export interface CacheStats {
+    size: number;
+    maxSize: number;
+    hits: number;
+    misses: number;
+    hitRate: number;
+}
+export declare class ScriptCache {
+    private cache;
+    private maxSize;
+    private maxAge;
+    constructor(maxSize?: number, maxAgeMs?: number);
+    /**
+     * Get or compile a script
+     */
+    get(code: string): vm.Script;
+    /**
+     * Simple hash for code
+     */
+    private hashCode;
+    /**
+     * Clear all cached scripts
+     */
+    clear(): void;
+    /**
+     * Get cache stats
+     */
+    stats(): {
+        size: number;
+        maxSize: number;
+        totalUses: number;
+        totalHits: number;
+        hitRate: number;
+    };
+}
+export declare const globalScriptCache: ScriptCache;
+//# sourceMappingURL=script-cache.d.ts.map

package/dist/script-cache.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"script-cache.d.ts","sourceRoot":"","sources":["../src/script-cache.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAEH,OAAO,EAAE,MAAM,SAAS,CAAC;AAEzB,MAAM,WAAW,YAAY;IAC3B,MAAM,EAAE,EAAE,CAAC,MAAM,CAAC;IAClB,SAAS,EAAE,MAAM,CAAC;IAClB,IAAI,EAAE,MAAM,CAAC;IACb,OAAO,EAAE,MAAM,CAAC;CACjB;AAED,MAAM,WAAW,UAAU;IACzB,IAAI,EAAE,MAAM,CAAC;IACb,OAAO,EAAE,MAAM,CAAC;IAChB,IAAI,EAAE,MAAM,CAAC;IACb,MAAM,EAAE,MAAM,CAAC;IACf,OAAO,EAAE,MAAM,CAAC;CACjB;AAED,qBAAa,WAAW;IACtB,OAAO,CAAC,KAAK,CAAmC;IAChD,OAAO,CAAC,OAAO,CAAS;IACxB,OAAO,CAAC,MAAM,CAAS;gBAEX,OAAO,GAAE,MAAa,EAAE,QAAQ,GAAE,MAAgB;IAK9D;;OAEG;IACH,GAAG,CAAC,IAAI,EAAE,MAAM,GAAG,EAAE,CAAC,MAAM;IAiD5B;;OAEG;IACH,OAAO,CAAC,QAAQ;IAUhB;;OAEG;IACH,KAAK,IAAI,IAAI;IAIb;;OAEG;IACH,KAAK;;;;;;;CAiBN;AAED,eAAO,MAAM,iBAAiB,aAAiC,CAAC"}

package/dist/script-cache.js

@@ -0,0 +1,97 @@
+/**
+ * Script cache: Compile once, run many times
+ * Reduces CPU overhead for repeated code patterns
+ */
+import vm from "node:vm";
+export class ScriptCache {
+    constructor(maxSize = 1000, maxAgeMs = 3600000) {
+        this.cache = new Map();
+        this.maxSize = maxSize;
+        this.maxAge = maxAgeMs;
+    }
+    /**
+     * Get or compile a script
+     */
+    get(code) {
+        const hash = this.hashCode(code);
+        const cached = this.cache.get(hash);
+        if (cached) {
+            const now = Date.now();
+            // Invalidate if too old
+            if (now - cached.createdAt > this.maxAge) {
+                this.cache.delete(hash);
+            }
+            else {
+                // Update stats
+                cached.uses++;
+                cached.hitRate = (cached.uses / (cached.uses + 1)) * 100;
+                return cached.script;
+            }
+        }
+        // Compile new script
+        const wrapped = `"use strict";\n(async () => {\n${code}\n})();`;
+        const script = new vm.Script(wrapped, {
+            filename: "sandboxed.js",
+            lineOffset: 0,
+            columnOffset: 0
+        });
+        // Store in cache
+        if (this.cache.size >= this.maxSize) {
+            // Evict least recently used
+            let oldest = null;
+            for (const [key, cached] of this.cache) {
+                if (!oldest || cached.createdAt < oldest[1].createdAt) {
+                    oldest = [key, cached];
+                }
+            }
+            if (oldest) {
+                this.cache.delete(oldest[0]);
+            }
+        }
+        this.cache.set(hash, {
+            script,
+            createdAt: Date.now(),
+            uses: 1,
+            hitRate: 0
+        });
+        return script;
+    }
+    /**
+     * Simple hash for code
+     */
+    hashCode(code) {
+        let hash = 0;
+        for (let i = 0; i < code.length; i++) {
+            const char = code.charCodeAt(i);
+            hash = ((hash << 5) - hash) + char;
+            hash = hash & hash; // Convert to 32bit integer
+        }
+        return `script_${Math.abs(hash)}`;
+    }
+    /**
+     * Clear all cached scripts
+     */
+    clear() {
+        this.cache.clear();
+    }
+    /**
+     * Get cache stats
+     */
+    stats() {
+        let totalUses = 0;
+        let totalHits = 0;
+        for (const cached of this.cache.values()) {
+            totalUses += cached.uses;
+            totalHits += cached.uses - 1; // Minus first compilation
+        }
+        return {
+            size: this.cache.size,
+            maxSize: this.maxSize,
+            totalUses,
+            totalHits,
+            hitRate: totalUses > 0 ? (totalHits / totalUses) * 100 : 0
+        };
+    }
+}
+export const globalScriptCache = new ScriptCache(1000, 3600000);
+//# sourceMappingURL=script-cache.js.map

package/dist/script-cache.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"script-cache.js","sourceRoot":"","sources":["../src/script-cache.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAEH,OAAO,EAAE,MAAM,SAAS,CAAC;AAiBzB,MAAM,OAAO,WAAW;IAKtB,YAAY,UAAkB,IAAI,EAAE,WAAmB,OAAO;QAJtD,UAAK,GAAG,IAAI,GAAG,EAAwB,CAAC;QAK9C,IAAI,CAAC,OAAO,GAAG,OAAO,CAAC;QACvB,IAAI,CAAC,MAAM,GAAG,QAAQ,CAAC;IACzB,CAAC;IAED;;OAEG;IACH,GAAG,CAAC,IAAY;QACd,MAAM,IAAI,GAAG,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC;QACjC,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;QAEpC,IAAI,MAAM,EAAE,CAAC;YACX,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;YACvB,wBAAwB;YACxB,IAAI,GAAG,GAAG,MAAM,CAAC,SAAS,GAAG,IAAI,CAAC,MAAM,EAAE,CAAC;gBACzC,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;YAC1B,CAAC;iBAAM,CAAC;gBACN,eAAe;gBACf,MAAM,CAAC,IAAI,EAAE,CAAC;gBACd,MAAM,CAAC,OAAO,GAAG,CAAC,MAAM,CAAC,IAAI,GAAG,CAAC,MAAM,CAAC,IAAI,GAAG,CAAC,CAAC,CAAC,GAAG,GAAG,CAAC;gBACzD,OAAO,MAAM,CAAC,MAAM,CAAC;YACvB,CAAC;QACH,CAAC;QAED,qBAAqB;QACrB,MAAM,OAAO,GAAG,kCAAkC,IAAI,SAAS,CAAC;QAChE,MAAM,MAAM,GAAG,IAAI,EAAE,CAAC,MAAM,CAAC,OAAO,EAAE;YACpC,QAAQ,EAAE,cAAc;YACxB,UAAU,EAAE,CAAC;YACb,YAAY,EAAE,CAAC;SAChB,CAAC,CAAC;QAEH,iBAAiB;QACjB,IAAI,IAAI,CAAC,KAAK,CAAC,IAAI,IAAI,IAAI,CAAC,OAAO,EAAE,CAAC;YACpC,4BAA4B;YAC5B,IAAI,MAAM,GAAkC,IAAI,CAAC;YACjD,KAAK,MAAM,CAAC,GAAG,EAAE,MAAM,CAAC,IAAI,IAAI,CAAC,KAAK,EAAE,CAAC;gBACvC,IAAI,CAAC,MAAM,IAAI,MAAM,CAAC,SAAS,GAAG,MAAM,CAAC,CAAC,CAAC,CAAC,SAAS,EAAE,CAAC;oBACtD,MAAM,GAAG,CAAC,GAAG,EAAE,MAAM,CAAC,CAAC;gBACzB,CAAC;YACH,CAAC;YACD,IAAI,MAAM,EAAE,CAAC;gBACX,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC;YAC/B,CAAC;QACH,CAAC;QAED,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,IAAI,EAAE;YACnB,MAAM;YACN,SAAS,EAAE,IAAI,CAAC,GAAG,EAAE;YACrB,IAAI,EAAE,CAAC;YACP,OAAO,EAAE,CAAC;SACX,CAAC,CAAC;QAEH,OAAO,MAAM,CAAC;IAChB,CAAC;IAED;;OAEG;IACK,QAAQ,CAAC,IAAY;QAC3B,IAAI,IAAI,GAAG,CAAC,CAAC;QACb,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,IAAI,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;YACrC,MAAM,IAAI,GAAG,IAAI,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC;YAChC,IAAI,GAAG,CAAC,CAAC,IAAI,IAAI,CAAC,CAAC,GAAG,IAAI,CAAC,GAAG,IAAI,CAAC;YACnC,IAAI,GAAG,IAAI,GAAG,IAAI,CAAC,CAAC,2BAA2B;QACjD,CAAC;QACD,OAAO,UAAU,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC;IACpC,CAAC;IAED;;OAEG;IACH,KAAK;QACH,IAAI,CAAC,KAAK,CAAC,KAAK,EAAE,CAAC;IACrB,CAAC;IAED;;OAEG;IACH,KAAK;QACH,IAAI,SAAS,GAAG,CAAC,CAAC;QAClB,IAAI,SAAS,GAAG,CAAC,CAAC;QAElB,KAAK,MAAM,MAAM,IAAI,IAAI,CAAC,KAAK,CAAC,MAAM,EAAE,EAAE,CAAC;YACzC,SAAS,IAAI,MAAM,CAAC,IAAI,CAAC;YACzB,SAAS,IAAI,MAAM,CAAC,IAAI,GAAG,CAAC,CAAC,CAAC,0BAA0B;QAC1D,CAAC;QAED,OAAO;YACL,IAAI,EAAE,IAAI,CAAC,KAAK,CAAC,IAAI;YACrB,OAAO,EAAE,IAAI,CAAC,OAAO;YACrB,SAAS;YACT,SAAS;YACT,OAAO,EAAE,SAAS,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,SAAS,GAAG,SAAS,CAAC,GAAG,GAAG,CAAC,CAAC,CAAC,CAAC;SAC3D,CAAC;IACJ,CAAC;CACF;AAED,MAAM,CAAC,MAAM,iBAAiB,GAAG,IAAI,WAAW,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC"}

package/dist/stats.d.ts

@@ -0,0 +1,41 @@
+/**
+ * Execution statistics collection
+ * Tracks time, memory, async ops
+ */
+export interface ExecutionStats {
+    duration: number;
+    cpuTime: number;
+    memoryStart: number;
+    memoryEnd: number;
+    memoryPeak: number;
+    promisesCreated: number;
+    promisesResolved: number;
+    promisesRejected: number;
+    errors: string[];
+    timeout: boolean;
+    completed: boolean;
+}
+/**
+ * Stats tracker for execution
+ */
+export declare class StatsCollector {
+    private startTime;
+    private startMemory;
+    private peakMemory;
+    private errors;
+    private promisesCreated;
+    private promisesResolved;
+    private promisesRejected;
+    private timeout;
+    private completed;
+    start(): void;
+    recordPromiseCreated(): void;
+    recordPromiseResolved(): void;
+    recordPromiseRejected(): void;
+    recordError(message: string): void;
+    recordTimeout(): void;
+    markCompleted(): void;
+    updateMemory(): void;
+    finish(): ExecutionStats;
+}
+//# sourceMappingURL=stats.d.ts.map

package/dist/stats.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"stats.d.ts","sourceRoot":"","sources":["../src/stats.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAEH,MAAM,WAAW,cAAc;IAC7B,QAAQ,EAAE,MAAM,CAAC;IACjB,OAAO,EAAE,MAAM,CAAC;IAChB,WAAW,EAAE,MAAM,CAAC;IACpB,SAAS,EAAE,MAAM,CAAC;IAClB,UAAU,EAAE,MAAM,CAAC;IACnB,eAAe,EAAE,MAAM,CAAC;IACxB,gBAAgB,EAAE,MAAM,CAAC;IACzB,gBAAgB,EAAE,MAAM,CAAC;IACzB,MAAM,EAAE,MAAM,EAAE,CAAC;IACjB,OAAO,EAAE,OAAO,CAAC;IACjB,SAAS,EAAE,OAAO,CAAC;CACpB;AAED;;GAEG;AACH,qBAAa,cAAc;IACzB,OAAO,CAAC,SAAS,CAAa;IAC9B,OAAO,CAAC,WAAW,CAAa;IAChC,OAAO,CAAC,UAAU,CAAa;IAC/B,OAAO,CAAC,MAAM,CAAgB;IAC9B,OAAO,CAAC,eAAe,CAAa;IACpC,OAAO,CAAC,gBAAgB,CAAa;IACrC,OAAO,CAAC,gBAAgB,CAAa;IACrC,OAAO,CAAC,OAAO,CAAkB;IACjC,OAAO,CAAC,SAAS,CAAkB;IAEnC,KAAK,IAAI,IAAI;IAOb,oBAAoB,IAAI,IAAI;IAI5B,qBAAqB,IAAI,IAAI;IAI7B,qBAAqB,IAAI,IAAI;IAI7B,WAAW,CAAC,OAAO,EAAE,MAAM,GAAG,IAAI;IAIlC,aAAa,IAAI,IAAI;IAIrB,aAAa,IAAI,IAAI;IAIrB,YAAY,IAAI,IAAI;IAOpB,MAAM,IAAI,cAAc;CAqBzB"}

package/dist/stats.js

@@ -0,0 +1,70 @@
+/**
+ * Execution statistics collection
+ * Tracks time, memory, async ops
+ */
+/**
+ * Stats tracker for execution
+ */
+export class StatsCollector {
+    constructor() {
+        this.startTime = 0;
+        this.startMemory = 0;
+        this.peakMemory = 0;
+        this.errors = [];
+        this.promisesCreated = 0;
+        this.promisesResolved = 0;
+        this.promisesRejected = 0;
+        this.timeout = false;
+        this.completed = false;
+    }
+    start() {
+        this.startTime = Date.now();
+        const usage = process.memoryUsage();
+        this.startMemory = usage.heapUsed;
+        this.peakMemory = usage.heapUsed;
+    }
+    recordPromiseCreated() {
+        this.promisesCreated++;
+    }
+    recordPromiseResolved() {
+        this.promisesResolved++;
+    }
+    recordPromiseRejected() {
+        this.promisesRejected++;
+    }
+    recordError(message) {
+        this.errors.push(message);
+    }
+    recordTimeout() {
+        this.timeout = true;
+    }
+    markCompleted() {
+        this.completed = true;
+    }
+    updateMemory() {
+        const usage = process.memoryUsage();
+        if (usage.heapUsed > this.peakMemory) {
+            this.peakMemory = usage.heapUsed;
+        }
+    }
+    finish() {
+        this.updateMemory();
+        const endTime = Date.now();
+        const usage = process.memoryUsage();
+        const endMemory = usage.heapUsed;
+        return {
+            duration: endTime - this.startTime,
+            cpuTime: Math.max(0, (process.cpuUsage().user + process.cpuUsage().system) / 1000),
+            memoryStart: this.startMemory,
+            memoryEnd: endMemory,
+            memoryPeak: this.peakMemory,
+            promisesCreated: this.promisesCreated,
+            promisesResolved: this.promisesResolved,
+            promisesRejected: this.promisesRejected,
+            errors: this.errors,
+            timeout: this.timeout,
+            completed: this.completed
+        };
+    }
+}
+//# sourceMappingURL=stats.js.map

package/dist/stats.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"stats.js","sourceRoot":"","sources":["../src/stats.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAgBH;;GAEG;AACH,MAAM,OAAO,cAAc;IAA3B;QACU,cAAS,GAAW,CAAC,CAAC;QACtB,gBAAW,GAAW,CAAC,CAAC;QACxB,eAAU,GAAW,CAAC,CAAC;QACvB,WAAM,GAAa,EAAE,CAAC;QACtB,oBAAe,GAAW,CAAC,CAAC;QAC5B,qBAAgB,GAAW,CAAC,CAAC;QAC7B,qBAAgB,GAAW,CAAC,CAAC;QAC7B,YAAO,GAAY,KAAK,CAAC;QACzB,cAAS,GAAY,KAAK,CAAC;IA6DrC,CAAC;IA3DC,KAAK;QACH,IAAI,CAAC,SAAS,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QAC5B,MAAM,KAAK,GAAG,OAAO,CAAC,WAAW,EAAE,CAAC;QACpC,IAAI,CAAC,WAAW,GAAG,KAAK,CAAC,QAAQ,CAAC;QAClC,IAAI,CAAC,UAAU,GAAG,KAAK,CAAC,QAAQ,CAAC;IACnC,CAAC;IAED,oBAAoB;QAClB,IAAI,CAAC,eAAe,EAAE,CAAC;IACzB,CAAC;IAED,qBAAqB;QACnB,IAAI,CAAC,gBAAgB,EAAE,CAAC;IAC1B,CAAC;IAED,qBAAqB;QACnB,IAAI,CAAC,gBAAgB,EAAE,CAAC;IAC1B,CAAC;IAED,WAAW,CAAC,OAAe;QACzB,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;IAC5B,CAAC;IAED,aAAa;QACX,IAAI,CAAC,OAAO,GAAG,IAAI,CAAC;IACtB,CAAC;IAED,aAAa;QACX,IAAI,CAAC,SAAS,GAAG,IAAI,CAAC;IACxB,CAAC;IAED,YAAY;QACV,MAAM,KAAK,GAAG,OAAO,CAAC,WAAW,EAAE,CAAC;QACpC,IAAI,KAAK,CAAC,QAAQ,GAAG,IAAI,CAAC,UAAU,EAAE,CAAC;YACrC,IAAI,CAAC,UAAU,GAAG,KAAK,CAAC,QAAQ,CAAC;QACnC,CAAC;IACH,CAAC;IAED,MAAM;QACJ,IAAI,CAAC,YAAY,EAAE,CAAC;QAEpB,MAAM,OAAO,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QAC3B,MAAM,KAAK,GAAG,OAAO,CAAC,WAAW,EAAE,CAAC;QACpC,MAAM,SAAS,GAAG,KAAK,CAAC,QAAQ,CAAC;QAEjC,OAAO;YACL,QAAQ,EAAE,OAAO,GAAG,IAAI,CAAC,SAAS;YAClC,OAAO,EAAE,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,CAAC,OAAO,CAAC,QAAQ,EAAE,CAAC,IAAI,GAAG,OAAO,CAAC,QAAQ,EAAE,CAAC,MAAM,CAAC,GAAG,IAAI,CAAC;YAClF,WAAW,EAAE,IAAI,CAAC,WAAW;YAC7B,SAAS,EAAE,SAAS;YACpB,UAAU,EAAE,IAAI,CAAC,UAAU;YAC3B,eAAe,EAAE,IAAI,CAAC,eAAe;YACrC,gBAAgB,EAAE,IAAI,CAAC,gBAAgB;YACvC,gBAAgB,EAAE,IAAI,CAAC,gBAAgB;YACvC,MAAM,EAAE,IAAI,CAAC,MAAM;YACnB,OAAO,EAAE,IAAI,CAAC,OAAO;YACrB,SAAS,EAAE,IAAI,CAAC,SAAS;SAC1B,CAAC;IACJ,CAAC;CACF"}

package/dist/test-corpus.d.ts

@@ -0,0 +1,15 @@
+/**
+ * Escape test corpus: Known sandboxing attacks that MUST fail
+ * Used to verify the sandbox actually blocks dangerous operations
+ */
+export interface EscapeTest {
+    name: string;
+    code: string;
+    shouldBlock: boolean;
+}
+export declare const ESCAPE_TESTS: EscapeTest[];
+/**
+ * Check if a test result is correct
+ */
+export declare function checkTestResult(test: EscapeTest, threw: boolean, timedOut: boolean): boolean;
+//# sourceMappingURL=test-corpus.d.ts.map

package/dist/test-corpus.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"test-corpus.d.ts","sourceRoot":"","sources":["../src/test-corpus.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAEH,MAAM,WAAW,UAAU;IACzB,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,EAAE,MAAM,CAAC;IACb,WAAW,EAAE,OAAO,CAAC;CACtB;AAED,eAAO,MAAM,YAAY,EAAE,UAAU,EAqOpC,CAAC;AAEF;;GAEG;AACH,wBAAgB,eAAe,CAAC,IAAI,EAAE,UAAU,EAAE,KAAK,EAAE,OAAO,EAAE,QAAQ,EAAE,OAAO,GAAG,OAAO,CAQ5F"}