runframe 1.0.4 → 2.2.0

package/dist/integrity-check.js

@@ -0,0 +1,179 @@
+import crypto from 'crypto';
+import fs from 'fs';
+import path from 'path';
+import { fileURLToPath } from 'url';
+const __filename = fileURLToPath(import.meta.url);
+const __dirname = path.dirname(__filename);
+/**
+ * Calculate SHA-256 hash of a file
+ */
+function hashFile(filePath) {
+    const content = fs.readFileSync(filePath, 'utf-8');
+    return crypto.createHash('sha256').update(content).digest('hex');
+}
+/**
+ * Get all TypeScript source files
+ */
+function getSourceFiles(srcDir) {
+    const files = [];
+    const dirents = fs.readdirSync(srcDir, { withFileTypes: true });
+    for (const dirent of dirents) {
+        const fullPath = path.join(srcDir, dirent.name);
+        if (dirent.isDirectory()) {
+            // Skip node_modules, dist, and hidden directories
+            if (!dirent.name.startsWith('.') && dirent.name !== 'node_modules' && dirent.name !== 'dist') {
+                files.push(...getSourceFiles(fullPath));
+            }
+        }
+        else if (dirent.isFile() && dirent.name.endsWith('.ts')) {
+            files.push(fullPath);
+        }
+    }
+    return files;
+}
+/**
+ * Generate integrity checksums for all source files
+ */
+export function generateIntegrityChecksum() {
+    const srcDir = path.join(__dirname, '..');
+    const files = getSourceFiles(srcDir);
+    const checksums = {};
+    for (const file of files) {
+        const relPath = path.relative(srcDir, file);
+        checksums[relPath] = hashFile(file);
+    }
+    return checksums;
+}
+/**
+ * Load integrity checksums from file
+ */
+function loadChecksums() {
+    const checksumFile = path.join(__dirname, '..', '.integrity');
+    if (fs.existsSync(checksumFile)) {
+        const content = fs.readFileSync(checksumFile, 'utf-8');
+        try {
+            return JSON.parse(content);
+        }
+        catch {
+            return null;
+        }
+    }
+    return null;
+}
+/**
+ * Save integrity checksums to file
+ */
+export function saveIntegrityChecksum() {
+    const checksums = generateIntegrityChecksum();
+    const checksumFile = path.join(__dirname, '..', '.integrity');
+    fs.writeFileSync(checksumFile, JSON.stringify(checksums, null, 2));
+    console.log(`✅ Integrity checksums saved to ${checksumFile}`);
+    console.log(`   Protected ${Object.keys(checksums).length} source files`);
+}
+/**
+ * Verify code integrity
+ * Throws error if code has been tampered with
+ */
+export function verifyIntegrity() {
+    const srcDir = path.join(__dirname, '..');
+    const files = getSourceFiles(srcDir);
+    const savedChecksums = loadChecksums();
+    const result = {
+        valid: true,
+        files: [],
+        timestamp: new Date().toISOString(),
+        errors: []
+    };
+    if (!savedChecksums) {
+        result.errors.push('No integrity checksums found. Run saveIntegrityChecksum() first.');
+        result.valid = false;
+        return result;
+    }
+    for (const file of files) {
+        const relPath = path.relative(srcDir, file);
+        const currentHash = hashFile(file);
+        const expectedHash = savedChecksums[relPath];
+        result.files.push({
+            path: relPath,
+            hash: currentHash,
+            expected: expectedHash || 'UNKNOWN',
+            match: currentHash === expectedHash
+        });
+        if (currentHash !== expectedHash) {
+            result.valid = false;
+            result.errors.push(`❌ TAMPERING DETECTED: ${relPath}`);
+        }
+    }
+    // Check for unexpected new files
+    for (const savedPath of Object.keys(savedChecksums)) {
+        if (!files.some(f => path.relative(srcDir, f) === savedPath)) {
+            result.valid = false;
+            result.errors.push(`❌ FILE REMOVED: ${savedPath}`);
+        }
+    }
+    // Check for missing checksums (new files added)
+    for (const file of files) {
+        const relPath = path.relative(srcDir, file);
+        if (!(relPath in savedChecksums)) {
+            result.valid = false;
+            result.errors.push(`⚠️ NEW FILE DETECTED: ${relPath} (unverified)`);
+        }
+    }
+    return result;
+}
+/**
+ * Verify integrity and throw if compromised
+ * Use this at startup to ensure code safety
+ */
+export function enforceIntegrity() {
+    const result = verifyIntegrity();
+    if (!result.valid) {
+        console.error('\n' + '='.repeat(70));
+        console.error('🚨 CODE INTEGRITY VERIFICATION FAILED 🚨');
+        console.error('='.repeat(70));
+        console.error('\nThe sandbox code has been modified or tampered with.');
+        console.error('This is a critical security issue.\n');
+        for (const error of result.errors) {
+            console.error(`  ${error}`);
+        }
+        console.error('\nCompromised files:');
+        for (const file of result.files) {
+            if (!file.match) {
+                console.error(`  ${file.path}`);
+                console.error(`    Expected: ${file.expected.substring(0, 16)}...`);
+                console.error(`    Found:    ${file.hash.substring(0, 16)}...`);
+            }
+        }
+        console.error('\n' + '='.repeat(70));
+        console.error('ABORTING EXECUTION FOR SECURITY');
+        console.error('='.repeat(70) + '\n');
+        process.exit(1);
+    }
+}
+/**
+ * Print integrity verification report
+ */
+export function printIntegrityReport() {
+    const result = verifyIntegrity();
+    console.log('\n' + '='.repeat(70));
+    console.log('📋 CODE INTEGRITY VERIFICATION REPORT');
+    console.log('='.repeat(70) + '\n');
+    console.log(`Status: ${result.valid ? '✅ VALID' : '❌ COMPROMISED'}`);
+    console.log(`Timestamp: ${result.timestamp}`);
+    console.log(`Files Verified: ${result.files.filter(f => f.match).length}/${result.files.length}\n`);
+    if (result.errors.length > 0) {
+        console.log('Issues Found:');
+        for (const error of result.errors) {
+            console.log(`  ${error}`);
+        }
+        console.log();
+    }
+    console.log('Detailed File Hashes:');
+    for (const file of result.files) {
+        const status = file.match ? '✅' : '❌';
+        console.log(`  ${status} ${file.path}`);
+        console.log(`     Hash: ${file.hash.substring(0, 32)}...`);
+    }
+    console.log('\n' + '='.repeat(70) + '\n');
+}
+//# sourceMappingURL=integrity-check.js.map

package/dist/integrity-check.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"integrity-check.js","sourceRoot":"","sources":["../src/integrity-check.ts"],"names":[],"mappings":"AAAA,OAAO,MAAM,MAAM,QAAQ,CAAC;AAC5B,OAAO,EAAE,MAAM,IAAI,CAAC;AACpB,OAAO,IAAI,MAAM,MAAM,CAAC;AACxB,OAAO,EAAE,aAAa,EAAE,MAAM,KAAK,CAAC;AAEpC,MAAM,UAAU,GAAG,aAAa,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;AAClD,MAAM,SAAS,GAAG,IAAI,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC;AAmB3C;;GAEG;AACH,SAAS,QAAQ,CAAC,QAAgB;IAChC,MAAM,OAAO,GAAG,EAAE,CAAC,YAAY,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC;IACnD,OAAO,MAAM,CAAC,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;AACnE,CAAC;AAED;;GAEG;AACH,SAAS,cAAc,CAAC,MAAc;IACpC,MAAM,KAAK,GAAa,EAAE,CAAC;IAC3B,MAAM,OAAO,GAAG,EAAE,CAAC,WAAW,CAAC,MAAM,EAAE,EAAE,aAAa,EAAE,IAAI,EAAE,CAAC,CAAC;IAEhE,KAAK,MAAM,MAAM,IAAI,OAAO,EAAE,CAAC;QAC7B,MAAM,QAAQ,GAAG,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,MAAM,CAAC,IAAI,CAAC,CAAC;QAChD,IAAI,MAAM,CAAC,WAAW,EAAE,EAAE,CAAC;YACzB,kDAAkD;YAClD,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,IAAI,MAAM,CAAC,IAAI,KAAK,cAAc,IAAI,MAAM,CAAC,IAAI,KAAK,MAAM,EAAE,CAAC;gBAC7F,KAAK,CAAC,IAAI,CAAC,GAAG,cAAc,CAAC,QAAQ,CAAC,CAAC,CAAC;YAC1C,CAAC;QACH,CAAC;aAAM,IAAI,MAAM,CAAC,MAAM,EAAE,IAAI,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC;YAC1D,KAAK,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;QACvB,CAAC;IACH,CAAC;IAED,OAAO,KAAK,CAAC;AACf,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,yBAAyB;IACvC,MAAM,MAAM,GAAG,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,IAAI,CAAC,CAAC;IAC1C,MAAM,KAAK,GAAG,cAAc,CAAC,MAAM,CAAC,CAAC;IACrC,MAAM,SAAS,GAA2B,EAAE,CAAC;IAE7C,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;QACzB,MAAM,OAAO,GAAG,IAAI,CAAC,QAAQ,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC;QAC5C,SAAS,CAAC,OAAO,CAAC,GAAG,QAAQ,CAAC,IAAI,CAAC,CAAC;IACtC,CAAC;IAED,OAAO,SAAS,CAAC;AACnB,CAAC;AAED;;GAEG;AACH,SAAS,aAAa;IACpB,MAAM,YAAY,GAAG,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,IAAI,EAAE,YAAY,CAAC,CAAC;IAC9D,IAAI,EAAE,CAAC,UAAU,CAAC,YAAY,CAAC,EAAE,CAAC;QAChC,MAAM,OAAO,GAAG,EAAE,CAAC,YAAY,CAAC,YAAY,EAAE,OAAO,CAAC,CAAC;QACvD,IAAI,CAAC;YACH,OAAO,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;QAC7B,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,IAAI,CAAC;QACd,CAAC;IACH,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,qBAAqB;IACnC,MAAM,SAAS,GAAG,yBAAyB,EAAE,CAAC;IAC9C,MAAM,YAAY,GAAG,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,IAAI,EAAE,YAAY,CAAC,CAAC;IAE9D,EAAE,CAAC,aAAa,CAAC,YAAY,EAAE,IAAI,CAAC,SAAS,CAAC,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC;IACnE,OAAO,CAAC,GAAG,CAAC,kCAAkC,YAAY,EAAE,CAAC,CAAC;IAC9D,OAAO,CAAC,GAAG,CAAC,gBAAgB,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,MAAM,eAAe,CAAC,CAAC;AAC5E,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,eAAe;IAC7B,MAAM,MAAM,GAAG,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,IAAI,CAAC,CAAC;IAC1C,MAAM,KAAK,GAAG,cAAc,CAAC,MAAM,CAAC,CAAC;IACrC,MAAM,cAAc,GAAG,aAAa,EAAE,CAAC;IACvC,MAAM,MAAM,GAAyB;QACnC,KAAK,EAAE,IAAI;QACX,KAAK,EAAE,EAAE;QACT,SAAS,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;QACnC,MAAM,EAAE,EAAE;KACX,CAAC;IAEF,IAAI,CAAC,cAAc,EAAE,CAAC;QACpB,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,kEAAkE,CAAC,CAAC;QACvF,MAAM,CAAC,KAAK,GAAG,KAAK,CAAC;QACrB,OAAO,MAAM,CAAC;IAChB,CAAC;IAED,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;QACzB,MAAM,OAAO,GAAG,IAAI,CAAC,QAAQ,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC;QAC5C,MAAM,WAAW,GAAG,QAAQ,CAAC,IAAI,CAAC,CAAC;QACnC,MAAM,YAAY,GAAG,cAAc,CAAC,OAAO,CAAC,CAAC;QAE7C,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC;YAChB,IAAI,EAAE,OAAO;YACb,IAAI,EAAE,WAAW;YACjB,QAAQ,EAAE,YAAY,IAAI,SAAS;YACnC,KAAK,EAAE,WAAW,KAAK,YAAY;SACpC,CAAC,CAAC;QAEH,IAAI,WAAW,KAAK,YAAY,EAAE,CAAC;YACjC,MAAM,CAAC,KAAK,GAAG,KAAK,CAAC;YACrB,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,yBAAyB,OAAO,EAAE,CAAC,CAAC;QACzD,CAAC;IACH,CAAC;IAED,iCAAiC;IACjC,KAAK,MAAM,SAAS,IAAI,MAAM,CAAC,IAAI,CAAC,cAAc,CAAC,EAAE,CAAC;QACpD,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,IAAI,CAAC,QAAQ,CAAC,MAAM,EAAE,CAAC,CAAC,KAAK,SAAS,CAAC,EAAE,CAAC;YAC7D,MAAM,CAAC,KAAK,GAAG,KAAK,CAAC;YACrB,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,mBAAmB,SAAS,EAAE,CAAC,CAAC;QACrD,CAAC;IACH,CAAC;IAED,gDAAgD;IAChD,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;QACzB,MAAM,OAAO,GAAG,IAAI,CAAC,QAAQ,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC;QAC5C,IAAI,CAAC,CAAC,OAAO,IAAI,cAAc,CAAC,EAAE,CAAC;YACjC,MAAM,CAAC,KAAK,GAAG,KAAK,CAAC;YACrB,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,yBAAyB,OAAO,eAAe,CAAC,CAAC;QACtE,CAAC;IACH,CAAC;IAED,OAAO,MAAM,CAAC;AAChB,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,gBAAgB;IAC9B,MAAM,MAAM,GAAG,eAAe,EAAE,CAAC;IAEjC,IAAI,CAAC,MAAM,CAAC,KAAK,EAAE,CAAC;QAClB,OAAO,CAAC,KAAK,CAAC,IAAI,GAAG,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,CAAC;QACrC,OAAO,CAAC,KAAK,CAAC,0CAA0C,CAAC,CAAC;QAC1D,OAAO,CAAC,KAAK,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,CAAC;QAC9B,OAAO,CAAC,KAAK,CAAC,wDAAwD,CAAC,CAAC;QACxE,OAAO,CAAC,KAAK,CAAC,sCAAsC,CAAC,CAAC;QAEtD,KAAK,MAAM,KAAK,IAAI,MAAM,CAAC,MAAM,EAAE,CAAC;YAClC,OAAO,CAAC,KAAK,CAAC,KAAK,KAAK,EAAE,CAAC,CAAC;QAC9B,CAAC;QAED,OAAO,CAAC,KAAK,CAAC,sBAAsB,CAAC,CAAC;QACtC,KAAK,MAAM,IAAI,IAAI,MAAM,CAAC,KAAK,EAAE,CAAC;YAChC,IAAI,CAAC,IAAI,CAAC,KAAK,EAAE,CAAC;gBAChB,OAAO,CAAC,KAAK,CAAC,KAAK,IAAI,CAAC,IAAI,EAAE,CAAC,CAAC;gBAChC,OAAO,CAAC,KAAK,CAAC,iBAAiB,IAAI,CAAC,QAAQ,CAAC,SAAS,CAAC,CAAC,EAAE,EAAE,CAAC,KAAK,CAAC,CAAC;gBACpE,OAAO,CAAC,KAAK,CAAC,iBAAiB,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,EAAE,EAAE,CAAC,KAAK,CAAC,CAAC;YAClE,CAAC;QACH,CAAC;QAED,OAAO,CAAC,KAAK,CAAC,IAAI,GAAG,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,CAAC;QACrC,OAAO,CAAC,KAAK,CAAC,iCAAiC,CAAC,CAAC;QACjD,OAAO,CAAC,KAAK,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC,GAAG,IAAI,CAAC,CAAC;QAErC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAClB,CAAC;AACH,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,oBAAoB;IAClC,MAAM,MAAM,GAAG,eAAe,EAAE,CAAC;IAEjC,OAAO,CAAC,GAAG,CAAC,IAAI,GAAG,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,CAAC;IACnC,OAAO,CAAC,GAAG,CAAC,uCAAuC,CAAC,CAAC;IACrD,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC,GAAG,IAAI,CAAC,CAAC;IAEnC,OAAO,CAAC,GAAG,CAAC,WAAW,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,eAAe,EAAE,CAAC,CAAC;IACrE,OAAO,CAAC,GAAG,CAAC,cAAc,MAAM,CAAC,SAAS,EAAE,CAAC,CAAC;IAC9C,OAAO,CAAC,GAAG,CAAC,mBAAmB,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,MAAM,IAAI,MAAM,CAAC,KAAK,CAAC,MAAM,IAAI,CAAC,CAAC;IAEpG,IAAI,MAAM,CAAC,MAAM,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QAC7B,OAAO,CAAC,GAAG,CAAC,eAAe,CAAC,CAAC;QAC7B,KAAK,MAAM,KAAK,IAAI,MAAM,CAAC,MAAM,EAAE,CAAC;YAClC,OAAO,CAAC,GAAG,CAAC,KAAK,KAAK,EAAE,CAAC,CAAC;QAC5B,CAAC;QACD,OAAO,CAAC,GAAG,EAAE,CAAC;IAChB,CAAC;IAED,OAAO,CAAC,GAAG,CAAC,uBAAuB,CAAC,CAAC;IACrC,KAAK,MAAM,IAAI,IAAI,MAAM,CAAC,KAAK,EAAE,CAAC;QAChC,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC;QACtC,OAAO,CAAC,GAAG,CAAC,KAAK,MAAM,IAAI,IAAI,CAAC,IAAI,EAAE,CAAC,CAAC;QACxC,OAAO,CAAC,GAAG,CAAC,cAAc,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,EAAE,EAAE,CAAC,KAAK,CAAC,CAAC;IAC7D,CAAC;IAED,OAAO,CAAC,GAAG,CAAC,IAAI,GAAG,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC,GAAG,IAAI,CAAC,CAAC;AAC5C,CAAC"}

package/dist/module-loader.d.ts

@@ -0,0 +1,53 @@
+/**
+ * Safe module loader with whitelist
+ * Allows sandboxed code to require only whitelisted modules
+ */
+import crypto from "node:crypto";
+import path from "node:path";
+import util from "node:util";
+import os from "node:os";
+import url from "node:url";
+/**
+ * Whitelisted modules safe for sandboxed code
+ */
+declare const WHITELISTED_MODULES: {
+    crypto: {
+        module: typeof crypto;
+        allowedExports: string[];
+    };
+    path: {
+        module: path.PlatformPath;
+        allowedExports: string[];
+    };
+    util: {
+        module: typeof util;
+        allowedExports: string[];
+    };
+    os: {
+        module: typeof os;
+        allowedExports: string[];
+    };
+    url: {
+        module: typeof url;
+        allowedExports: string[];
+    };
+};
+export type AllowedModule = keyof typeof WHITELISTED_MODULES;
+export interface ModuleLoaderConfig {
+    allowed: AllowedModule[];
+}
+/**
+ * Create a safe require() function with whitelisted modules
+ * Prevents access to dangerous modules and exports
+ */
+export declare function createSafeRequire(config: ModuleLoaderConfig): (moduleName: string) => Record<string, unknown>;
+/**
+ * Get the list of all available whitelisted modules
+ */
+export declare function getAvailableModules(): AllowedModule[];
+/**
+ * Get the whitelisted exports for a module
+ */
+export declare function getModuleExports(moduleName: AllowedModule): string[];
+export {};
+//# sourceMappingURL=module-loader.d.ts.map

package/dist/module-loader.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"module-loader.d.ts","sourceRoot":"","sources":["../src/module-loader.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAEH,OAAO,MAAM,MAAM,aAAa,CAAC;AACjC,OAAO,IAAI,MAAM,WAAW,CAAC;AAE7B,OAAO,IAAI,MAAM,WAAW,CAAC;AAC7B,OAAO,EAAE,MAAM,SAAS,CAAC;AACzB,OAAO,GAAG,MAAM,UAAU,CAAC;AAE3B;;GAEG;AACH,QAAA,MAAM,mBAAmB;;;;;;;;;;;;;;;;;;;;;CAqBxB,CAAC;AAEF,MAAM,MAAM,aAAa,GAAG,MAAM,OAAO,mBAAmB,CAAC;AAE7D,MAAM,WAAW,kBAAkB;IACjC,OAAO,EAAE,aAAa,EAAE,CAAC;CAC1B;AAED;;;GAGG;AACH,wBAAgB,iBAAiB,CAAC,MAAM,EAAE,kBAAkB,IAG9B,YAAY,MAAM,KAAG,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAiEzE;AAED;;GAEG;AACH,wBAAgB,mBAAmB,IAAI,aAAa,EAAE,CAErD;AAED;;GAEG;AACH,wBAAgB,gBAAgB,CAAC,UAAU,EAAE,aAAa,GAAG,MAAM,EAAE,CAEpE"}

package/dist/module-loader.js

@@ -0,0 +1,105 @@
+/**
+ * Safe module loader with whitelist
+ * Allows sandboxed code to require only whitelisted modules
+ */
+import crypto from "node:crypto";
+import path from "node:path";
+import util from "node:util";
+import os from "node:os";
+import url from "node:url";
+/**
+ * Whitelisted modules safe for sandboxed code
+ */
+const WHITELISTED_MODULES = {
+    crypto: {
+        module: crypto,
+        allowedExports: ["createHash", "randomBytes", "subtle"]
+    },
+    path: {
+        module: path,
+        allowedExports: ["join", "resolve", "dirname", "basename", "extname", "normalize", "parse"]
+    },
+    util: {
+        module: util,
+        allowedExports: ["inspect", "format", "isArray", "isObject", "isString", "isNumber"]
+    },
+    os: {
+        module: os,
+        allowedExports: ["platform", "arch", "cpus", "freemem", "totalmem"]
+    },
+    url: {
+        module: url,
+        allowedExports: ["parse", "format", "resolve", "fileURLToPath"]
+    }
+};
+/**
+ * Create a safe require() function with whitelisted modules
+ * Prevents access to dangerous modules and exports
+ */
+export function createSafeRequire(config) {
+    const allowed = new Set(config.allowed);
+    return function safeRequire(moduleName) {
+        if (!allowed.has(moduleName)) {
+            throw new Error(`Module "${moduleName}" is not whitelisted. ` +
+                `Allowed modules: ${Array.from(allowed).join(", ")}`);
+        }
+        const whitelisted = WHITELISTED_MODULES[moduleName];
+        if (!whitelisted) {
+            throw new Error(`Module "${moduleName}" is not available`);
+        }
+        // Create a proxy that only exposes whitelisted exports
+        return new Proxy(whitelisted.module, {
+            get(target, prop) {
+                if (typeof prop !== "string") {
+                    throw new Error("Module property access must use string keys");
+                }
+                // Check if this export is whitelisted
+                if (!whitelisted.allowedExports.includes(prop)) {
+                    throw new Error(`Export "${prop}" from module "${moduleName}" is not whitelisted. ` +
+                        `Allowed exports: ${whitelisted.allowedExports.join(", ")}`);
+                }
+                const value = target[prop];
+                // Additional safety: prevent access to dangerous functions
+                if (typeof value === "function") {
+                    // Prevent modification of the function
+                    return Object.freeze(value);
+                }
+                return value;
+            },
+            set(target, prop) {
+                throw new Error(`Cannot modify module "${moduleName}"`);
+            },
+            has(target, prop) {
+                if (typeof prop !== "string") {
+                    return false;
+                }
+                return whitelisted.allowedExports.includes(prop);
+            },
+            ownKeys(target) {
+                return whitelisted.allowedExports;
+            },
+            getOwnPropertyDescriptor(target, prop) {
+                if (typeof prop !== "string") {
+                    return undefined;
+                }
+                if (!whitelisted.allowedExports.includes(prop)) {
+                    return undefined;
+                }
+                return Object.getOwnPropertyDescriptor(target, prop);
+            }
+        });
+    };
+}
+/**
+ * Get the list of all available whitelisted modules
+ */
+export function getAvailableModules() {
+    return Object.keys(WHITELISTED_MODULES);
+}
+/**
+ * Get the whitelisted exports for a module
+ */
+export function getModuleExports(moduleName) {
+    return WHITELISTED_MODULES[moduleName]?.allowedExports ?? [];
+}
+//# sourceMappingURL=module-loader.js.map

package/dist/module-loader.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"module-loader.js","sourceRoot":"","sources":["../src/module-loader.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAEH,OAAO,MAAM,MAAM,aAAa,CAAC;AACjC,OAAO,IAAI,MAAM,WAAW,CAAC;AAE7B,OAAO,IAAI,MAAM,WAAW,CAAC;AAC7B,OAAO,EAAE,MAAM,SAAS,CAAC;AACzB,OAAO,GAAG,MAAM,UAAU,CAAC;AAE3B;;GAEG;AACH,MAAM,mBAAmB,GAAG;IAC1B,MAAM,EAAE;QACN,MAAM,EAAE,MAAM;QACd,cAAc,EAAE,CAAC,YAAY,EAAE,aAAa,EAAE,QAAQ,CAAC;KACxD;IACD,IAAI,EAAE;QACJ,MAAM,EAAE,IAAI;QACZ,cAAc,EAAE,CAAC,MAAM,EAAE,SAAS,EAAE,SAAS,EAAE,UAAU,EAAE,SAAS,EAAE,WAAW,EAAE,OAAO,CAAC;KAC5F;IACD,IAAI,EAAE;QACJ,MAAM,EAAE,IAAI;QACZ,cAAc,EAAE,CAAC,SAAS,EAAE,QAAQ,EAAE,SAAS,EAAE,UAAU,EAAE,UAAU,EAAE,UAAU,CAAC;KACrF;IACD,EAAE,EAAE;QACF,MAAM,EAAE,EAAE;QACV,cAAc,EAAE,CAAC,UAAU,EAAE,MAAM,EAAE,MAAM,EAAE,SAAS,EAAE,UAAU,CAAC;KACpE;IACD,GAAG,EAAE;QACH,MAAM,EAAE,GAAG;QACX,cAAc,EAAE,CAAC,OAAO,EAAE,QAAQ,EAAE,SAAS,EAAE,eAAe,CAAC;KAChE;CACF,CAAC;AAQF;;;GAGG;AACH,MAAM,UAAU,iBAAiB,CAAC,MAA0B;IAC1D,MAAM,OAAO,GAAG,IAAI,GAAG,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;IAExC,OAAO,SAAS,WAAW,CAAC,UAAkB;QAC5C,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,UAA2B,CAAC,EAAE,CAAC;YAC9C,MAAM,IAAI,KAAK,CACb,WAAW,UAAU,wBAAwB;gBAC7C,oBAAoB,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CACrD,CAAC;QACJ,CAAC;QAED,MAAM,WAAW,GAAG,mBAAmB,CAAC,UAA2B,CAAC,CAAC;QACrE,IAAI,CAAC,WAAW,EAAE,CAAC;YACjB,MAAM,IAAI,KAAK,CAAC,WAAW,UAAU,oBAAoB,CAAC,CAAC;QAC7D,CAAC;QAED,uDAAuD;QACvD,OAAO,IAAI,KAAK,CAAC,WAAW,CAAC,MAAiC,EAAE;YAC9D,GAAG,CAAC,MAAM,EAAE,IAAI;gBACd,IAAI,OAAO,IAAI,KAAK,QAAQ,EAAE,CAAC;oBAC7B,MAAM,IAAI,KAAK,CAAC,6CAA6C,CAAC,CAAC;gBACjE,CAAC;gBAED,sCAAsC;gBACtC,IAAI,CAAC,WAAW,CAAC,cAAc,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAC;oBAC/C,MAAM,IAAI,KAAK,CACb,WAAW,IAAI,kBAAkB,UAAU,wBAAwB;wBACnE,oBAAoB,WAAW,CAAC,cAAc,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAC5D,CAAC;gBACJ,CAAC;gBAED,MAAM,KAAK,GAAG,MAAM,CAAC,IAAI,CAAC,CAAC;gBAE3B,2DAA2D;gBAC3D,IAAI,OAAO,KAAK,KAAK,UAAU,EAAE,CAAC;oBAChC,uCAAuC;oBACvC,OAAO,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;gBAC9B,CAAC;gBAED,OAAO,KAAK,CAAC;YACf,CAAC;YAED,GAAG,CAAC,MAAM,EAAE,IAAI;gBACd,MAAM,IAAI,KAAK,CAAC,yBAAyB,UAAU,GAAG,CAAC,CAAC;YAC1D,CAAC;YAED,GAAG,CAAC,MAAM,EAAE,IAAI;gBACd,IAAI,OAAO,IAAI,KAAK,QAAQ,EAAE,CAAC;oBAC7B,OAAO,KAAK,CAAC;gBACf,CAAC;gBACD,OAAO,WAAW,CAAC,cAAc,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC;YACnD,CAAC;YAED,OAAO,CAAC,MAAM;gBACZ,OAAO,WAAW,CAAC,cAAc,CAAC;YACpC,CAAC;YAED,wBAAwB,CAAC,MAAM,EAAE,IAAI;gBACnC,IAAI,OAAO,IAAI,KAAK,QAAQ,EAAE,CAAC;oBAC7B,OAAO,SAAS,CAAC;gBACnB,CAAC;gBACD,IAAI,CAAC,WAAW,CAAC,cAAc,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAC;oBAC/C,OAAO,SAAS,CAAC;gBACnB,CAAC;gBACD,OAAO,MAAM,CAAC,wBAAwB,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC;YACvD,CAAC;SACF,CAAC,CAAC;IACL,CAAC,CAAC;AACJ,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,mBAAmB;IACjC,OAAO,MAAM,CAAC,IAAI,CAAC,mBAAmB,CAAoB,CAAC;AAC7D,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,gBAAgB,CAAC,UAAyB;IACxD,OAAO,mBAAmB,CAAC,UAAU,CAAC,EAAE,cAAc,IAAI,EAAE,CAAC;AAC/D,CAAC"}

package/dist/sandbox.d.ts

@@ -1,10 +1,14 @@
 import { CapabilityGrant, DEFAULT_CAPABILITIES } from "./capabilities.js";
 import { ExecutionStats } from "./stats.js";
+import { AllowedModule } from "./module-loader.js";
+import { ExecutionHooks } from "./execution-hooks.js";
 export interface SandboxOptions {
     cpuMs: number;
     memoryMb: number;
     capabilities?: Partial<CapabilityGrant>;
     seed?: number;
+    globals?: Record<string, unknown>;
+    allowedModules?: AllowedModule[];
 }
 export interface SandboxResult {
     type: "result";
@@ -17,7 +21,18 @@ export interface SandboxError {
 }
 export type SandboxMessage = SandboxResult | SandboxError;
 export declare function createSandbox(options: SandboxOptions): {
-    run(code: string): Promise<SandboxMessage>;
+    run(code: string, overrideGlobals?: Record<string, unknown>): Promise<SandboxMessage>;
+    /**
+     * Register a hook handler
+     */
+    onBefore(handler: (context: any) => void): void;
+    onAfter(handler: (context: any) => void): void;
+    onError(handler: (context: any) => void): void;
+    onConsole(handler: (context: any) => void): void;
+    /**
+     * Get hook instance for advanced usage
+     */
+    getHooks(): ExecutionHooks;
 };
 export { CapabilityGrant, DEFAULT_CAPABILITIES };
 export { ExecutionStats } from "./stats.js";

package/dist/sandbox.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"sandbox.d.ts","sourceRoot":"","sources":["../src/sandbox.ts"],"names":[],"mappings":"AAGA,OAAO,EAAE,eAAe,EAAE,oBAAoB,EAAE,MAAM,mBAAmB,CAAC;AAC1E,OAAO,EAAE,cAAc,EAAE,MAAM,YAAY,CAAC;AAK5C,MAAM,WAAW,cAAc;IAC7B,KAAK,EAAE,MAAM,CAAC;IACd,QAAQ,EAAE,MAAM,CAAC;IACjB,YAAY,CAAC,EAAE,OAAO,CAAC,eAAe,CAAC,CAAC;IACxC,IAAI,CAAC,EAAE,MAAM,CAAC;CACf;AAED,MAAM,WAAW,aAAa;IAC5B,IAAI,EAAE,QAAQ,CAAC;IACf,MAAM,EAAE,OAAO,CAAC;IAChB,KAAK,EAAE,cAAc,CAAC;CACvB;AAED,MAAM,WAAW,YAAY;IAC3B,IAAI,EAAE,OAAO,CAAC;IACd,KAAK,EAAE,MAAM,CAAC;CACf;AAED,MAAM,MAAM,cAAc,GAAG,aAAa,GAAG,YAAY,CAAC;AAE1D,wBAAgB,aAAa,CAAC,OAAO,EAAE,cAAc;cAEvC,MAAM,GAAG,OAAO,CAAC,cAAc,CAAC;EA+C7C;AAED,OAAO,EAAE,eAAe,EAAE,oBAAoB,EAAE,CAAC;AACjD,OAAO,EAAE,cAAc,EAAE,MAAM,YAAY,CAAC;AAC5C,OAAO,EAAE,YAAY,EAAE,eAAe,EAAE,MAAM,kBAAkB,CAAC"}
+{"version":3,"file":"sandbox.d.ts","sourceRoot":"","sources":["../src/sandbox.ts"],"names":[],"mappings":"AAGA,OAAO,EAAE,eAAe,EAAE,oBAAoB,EAAE,MAAM,mBAAmB,CAAC;AAC1E,OAAO,EAAE,cAAc,EAAE,MAAM,YAAY,CAAC;AAC5C,OAAO,EAAE,aAAa,EAAE,MAAM,oBAAoB,CAAC;AACnD,OAAO,EAAE,cAAc,EAAuB,MAAM,sBAAsB,CAAC;AAK3E,MAAM,WAAW,cAAc;IAC7B,KAAK,EAAE,MAAM,CAAC;IACd,QAAQ,EAAE,MAAM,CAAC;IACjB,YAAY,CAAC,EAAE,OAAO,CAAC,eAAe,CAAC,CAAC;IACxC,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAClC,cAAc,CAAC,EAAE,aAAa,EAAE,CAAC;CAClC;AAED,MAAM,WAAW,aAAa;IAC5B,IAAI,EAAE,QAAQ,CAAC;IACf,MAAM,EAAE,OAAO,CAAC;IAChB,KAAK,EAAE,cAAc,CAAC;CACvB;AAED,MAAM,WAAW,YAAY;IAC3B,IAAI,EAAE,OAAO,CAAC;IACd,KAAK,EAAE,MAAM,CAAC;CACf;AAED,MAAM,MAAM,cAAc,GAAG,aAAa,GAAG,YAAY,CAAC;AAE1D,wBAAgB,aAAa,CAAC,OAAO,EAAE,cAAc;cAIvC,MAAM,oBAAoB,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,OAAO,CAAC,cAAc,CAAC;IA0FrF;;OAEG;sBACe,CAAC,OAAO,EAAE,GAAG,KAAK,IAAI,GAAG,IAAI;qBAI9B,CAAC,OAAO,EAAE,GAAG,KAAK,IAAI,GAAG,IAAI;qBAI7B,CAAC,OAAO,EAAE,GAAG,KAAK,IAAI,GAAG,IAAI;uBAI3B,CAAC,OAAO,EAAE,GAAG,KAAK,IAAI,GAAG,IAAI;IAIhD;;OAEG;gBACS,cAAc;EAI7B;AAED,OAAO,EAAE,eAAe,EAAE,oBAAoB,EAAE,CAAC;AACjD,OAAO,EAAE,cAAc,EAAE,MAAM,YAAY,CAAC;AAC5C,OAAO,EAAE,YAAY,EAAE,eAAe,EAAE,MAAM,kBAAkB,CAAC"}

package/dist/sandbox.js

@@ -2,12 +2,21 @@ import { Worker } from "node:worker_threads";
 import path from "node:path";
 import { fileURLToPath } from "node:url";
 import { DEFAULT_CAPABILITIES } from "./capabilities.js";
+import { ExecutionHooks, generateExecutionId } from "./execution-hooks.js";
 const __filename = fileURLToPath(import.meta.url);
 const __dirname = path.dirname(__filename);
 export function createSandbox(options) {
+    const hooks = new ExecutionHooks();
     return {
-        run(code) {
+        run(code, overrideGlobals) {
             return new Promise((resolve, reject) => {
+                const executionId = generateExecutionId();
+                // Emit before hook
+                hooks.emit("before", {
+                    code,
+                    executionId,
+                    timestamp: Date.now()
+                }).catch(console.error);
                 const worker = new Worker(path.resolve(__dirname, "worker.js"), {
                     workerData: {
                         code,
@@ -16,37 +25,91 @@ export function createSandbox(options) {
                             memoryMb: options.memoryMb
                         },
                         capabilities: options.capabilities,
-                        seed: options.seed
+                        seed: options.seed,
+                        globals: { ...options.globals, ...overrideGlobals },
+                        allowedModules: options.allowedModules ?? [],
+                        executionId
                     }
-                    // Note: Memory limit is enforced via resource limits, not Node flags
-                    // Worker threads inherit parent process memory limits
                 });
+                const startTime = Date.now();
                 const timeout = setTimeout(() => {
                     worker.terminate();
+                    hooks.emit("error", {
+                        code,
+                        executionId,
+                        timestamp: Date.now(),
+                        error: "Sandbox timeout exceeded"
+                    }).catch(console.error);
                     reject(new Error("Sandbox timeout exceeded"));
                 }, options.cpuMs);
                 worker.once("message", (msg) => {
                     clearTimeout(timeout);
+                    const duration = Date.now() - startTime;
                     worker.terminate();
+                    hooks.emit("after", {
+                        code,
+                        executionId,
+                        timestamp: Date.now(),
+                        duration
+                    }).catch(console.error);
                     if (msg.type === "result") {
                         resolve(msg);
                     }
                     else {
+                        hooks.emit("error", {
+                            code,
+                            executionId,
+                            timestamp: Date.now(),
+                            error: msg.error
+                        }).catch(console.error);
                         reject(new Error(msg.error));
                     }
                 });
                 worker.once("error", (err) => {
                     clearTimeout(timeout);
                     worker.terminate();
+                    hooks.emit("error", {
+                        code,
+                        executionId,
+                        timestamp: Date.now(),
+                        error: err.message
+                    }).catch(console.error);
                     reject(err);
                 });
                 worker.once("exit", (code) => {
                     clearTimeout(timeout);
                     if (code !== 0) {
+                        hooks.emit("error", {
+                            code: code,
+                            executionId,
+                            timestamp: Date.now(),
+                            error: `Worker exited with code ${code}`
+                        }).catch(console.error);
                         reject(new Error(`Worker exited with code ${code}`));
                     }
                 });
             });
+        },
+        /**
+         * Register a hook handler
+         */
+        onBefore(handler) {
+            hooks.register("before", handler);
+        },
+        onAfter(handler) {
+            hooks.register("after", handler);
+        },
+        onError(handler) {
+            hooks.register("error", handler);
+        },
+        onConsole(handler) {
+            hooks.register("console", handler);
+        },
+        /**
+         * Get hook instance for advanced usage
+         */
+        getHooks() {
+            return hooks;
         }
     };
 }

package/dist/sandbox.js.map

@@ -1 +1 @@
-{"version":3,"file":"sandbox.js","sourceRoot":"","sources":["../src/sandbox.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,EAAE,MAAM,qBAAqB,CAAC;AAC7C,OAAO,IAAI,MAAM,WAAW,CAAC;AAC7B,OAAO,EAAE,aAAa,EAAE,MAAM,UAAU,CAAC;AACzC,OAAO,EAAmB,oBAAoB,EAAE,MAAM,mBAAmB,CAAC;AAG1E,MAAM,UAAU,GAAG,aAAa,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;AAClD,MAAM,SAAS,GAAG,IAAI,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC;AAsB3C,MAAM,UAAU,aAAa,CAAC,OAAuB;IACnD,OAAO;QACL,GAAG,CAAC,IAAY;YACd,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;gBACrC,MAAM,MAAM,GAAG,IAAI,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,SAAS,EAAE,WAAW,CAAC,EAAE;oBAC9D,UAAU,EAAE;wBACV,IAAI;wBACJ,OAAO,EAAE;4BACP,KAAK,EAAE,OAAO,CAAC,KAAK;4BACpB,QAAQ,EAAE,OAAO,CAAC,QAAQ;yBAC3B;wBACD,YAAY,EAAE,OAAO,CAAC,YAAY;wBAClC,IAAI,EAAE,OAAO,CAAC,IAAI;qBACnB;oBACD,qEAAqE;oBACrE,sDAAsD;iBACvD,CAAC,CAAC;gBAEH,MAAM,OAAO,GAAG,UAAU,CAAC,GAAG,EAAE;oBAC9B,MAAM,CAAC,SAAS,EAAE,CAAC;oBACnB,MAAM,CAAC,IAAI,KAAK,CAAC,0BAA0B,CAAC,CAAC,CAAC;gBAChD,CAAC,EAAE,OAAO,CAAC,KAAK,CAAC,CAAC;gBAElB,MAAM,CAAC,IAAI,CAAC,SAAS,EAAE,CAAC,GAAmB,EAAE,EAAE;oBAC7C,YAAY,CAAC,OAAO,CAAC,CAAC;oBACtB,MAAM,CAAC,SAAS,EAAE,CAAC;oBAEnB,IAAI,GAAG,CAAC,IAAI,KAAK,QAAQ,EAAE,CAAC;wBAC1B,OAAO,CAAC,GAAG,CAAC,CAAC;oBACf,CAAC;yBAAM,CAAC;wBACN,MAAM,CAAC,IAAI,KAAK,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC;oBAC/B,CAAC;gBACH,CAAC,CAAC,CAAC;gBAEH,MAAM,CAAC,IAAI,CAAC,OAAO,EAAE,CAAC,GAAG,EAAE,EAAE;oBAC3B,YAAY,CAAC,OAAO,CAAC,CAAC;oBACtB,MAAM,CAAC,SAAS,EAAE,CAAC;oBACnB,MAAM,CAAC,GAAG,CAAC,CAAC;gBACd,CAAC,CAAC,CAAC;gBAEH,MAAM,CAAC,IAAI,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,EAAE;oBAC3B,YAAY,CAAC,OAAO,CAAC,CAAC;oBACtB,IAAI,IAAI,KAAK,CAAC,EAAE,CAAC;wBACf,MAAM,CAAC,IAAI,KAAK,CAAC,2BAA2B,IAAI,EAAE,CAAC,CAAC,CAAC;oBACvD,CAAC;gBACH,CAAC,CAAC,CAAC;YACL,CAAC,CAAC,CAAC;QACL,CAAC;KACF,CAAC;AACJ,CAAC;AAED,OAAO,EAAmB,oBAAoB,EAAE,CAAC;AAEjD,OAAO,EAAE,YAAY,EAAE,eAAe,EAAE,MAAM,kBAAkB,CAAC"}
+{"version":3,"file":"sandbox.js","sourceRoot":"","sources":["../src/sandbox.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,EAAE,MAAM,qBAAqB,CAAC;AAC7C,OAAO,IAAI,MAAM,WAAW,CAAC;AAC7B,OAAO,EAAE,aAAa,EAAE,MAAM,UAAU,CAAC;AACzC,OAAO,EAAmB,oBAAoB,EAAE,MAAM,mBAAmB,CAAC;AAG1E,OAAO,EAAE,cAAc,EAAE,mBAAmB,EAAE,MAAM,sBAAsB,CAAC;AAE3E,MAAM,UAAU,GAAG,aAAa,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;AAClD,MAAM,SAAS,GAAG,IAAI,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC;AAwB3C,MAAM,UAAU,aAAa,CAAC,OAAuB;IACnD,MAAM,KAAK,GAAG,IAAI,cAAc,EAAE,CAAC;IAEnC,OAAO;QACL,GAAG,CAAC,IAAY,EAAE,eAAyC;YACzD,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;gBACrC,MAAM,WAAW,GAAG,mBAAmB,EAAE,CAAC;gBAE1C,mBAAmB;gBACnB,KAAK,CAAC,IAAI,CAAC,QAAQ,EAAE;oBACnB,IAAI;oBACJ,WAAW;oBACX,SAAS,EAAE,IAAI,CAAC,GAAG,EAAE;iBACtB,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;gBAExB,MAAM,MAAM,GAAG,IAAI,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,SAAS,EAAE,WAAW,CAAC,EAAE;oBAC9D,UAAU,EAAE;wBACV,IAAI;wBACJ,OAAO,EAAE;4BACP,KAAK,EAAE,OAAO,CAAC,KAAK;4BACpB,QAAQ,EAAE,OAAO,CAAC,QAAQ;yBAC3B;wBACD,YAAY,EAAE,OAAO,CAAC,YAAY;wBAClC,IAAI,EAAE,OAAO,CAAC,IAAI;wBAClB,OAAO,EAAE,EAAE,GAAG,OAAO,CAAC,OAAO,EAAE,GAAG,eAAe,EAAE;wBACnD,cAAc,EAAE,OAAO,CAAC,cAAc,IAAI,EAAE;wBAC5C,WAAW;qBACZ;iBACF,CAAC,CAAC;gBAEH,MAAM,SAAS,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;gBAC7B,MAAM,OAAO,GAAG,UAAU,CAAC,GAAG,EAAE;oBAC9B,MAAM,CAAC,SAAS,EAAE,CAAC;oBACnB,KAAK,CAAC,IAAI,CAAC,OAAO,EAAE;wBAClB,IAAI;wBACJ,WAAW;wBACX,SAAS,EAAE,IAAI,CAAC,GAAG,EAAE;wBACrB,KAAK,EAAE,0BAA0B;qBAClC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;oBACxB,MAAM,CAAC,IAAI,KAAK,CAAC,0BAA0B,CAAC,CAAC,CAAC;gBAChD,CAAC,EAAE,OAAO,CAAC,KAAK,CAAC,CAAC;gBAElB,MAAM,CAAC,IAAI,CAAC,SAAS,EAAE,CAAC,GAAmB,EAAE,EAAE;oBAC7C,YAAY,CAAC,OAAO,CAAC,CAAC;oBACtB,MAAM,QAAQ,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,SAAS,CAAC;oBACxC,MAAM,CAAC,SAAS,EAAE,CAAC;oBAEnB,KAAK,CAAC,IAAI,CAAC,OAAO,EAAE;wBAClB,IAAI;wBACJ,WAAW;wBACX,SAAS,EAAE,IAAI,CAAC,GAAG,EAAE;wBACrB,QAAQ;qBACT,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;oBAExB,IAAI,GAAG,CAAC,IAAI,KAAK,QAAQ,EAAE,CAAC;wBAC1B,OAAO,CAAC,GAAG,CAAC,CAAC;oBACf,CAAC;yBAAM,CAAC;wBACN,KAAK,CAAC,IAAI,CAAC,OAAO,EAAE;4BAClB,IAAI;4BACJ,WAAW;4BACX,SAAS,EAAE,IAAI,CAAC,GAAG,EAAE;4BACrB,KAAK,EAAE,GAAG,CAAC,KAAK;yBACjB,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;wBACxB,MAAM,CAAC,IAAI,KAAK,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC;oBAC/B,CAAC;gBACH,CAAC,CAAC,CAAC;gBAEH,MAAM,CAAC,IAAI,CAAC,OAAO,EAAE,CAAC,GAAG,EAAE,EAAE;oBAC3B,YAAY,CAAC,OAAO,CAAC,CAAC;oBACtB,MAAM,CAAC,SAAS,EAAE,CAAC;oBACnB,KAAK,CAAC,IAAI,CAAC,OAAO,EAAE;wBAClB,IAAI;wBACJ,WAAW;wBACX,SAAS,EAAE,IAAI,CAAC,GAAG,EAAE;wBACrB,KAAK,EAAE,GAAG,CAAC,OAAO;qBACnB,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;oBACxB,MAAM,CAAC,GAAG,CAAC,CAAC;gBACd,CAAC,CAAC,CAAC;gBAEH,MAAM,CAAC,IAAI,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,EAAE;oBAC3B,YAAY,CAAC,OAAO,CAAC,CAAC;oBACtB,IAAI,IAAI,KAAK,CAAC,EAAE,CAAC;wBACf,KAAK,CAAC,IAAI,CAAC,OAAO,EAAE;4BAClB,IAAI,EAAE,IAAW;4BACjB,WAAW;4BACX,SAAS,EAAE,IAAI,CAAC,GAAG,EAAE;4BACrB,KAAK,EAAE,2BAA2B,IAAI,EAAE;yBACzC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;wBACxB,MAAM,CAAC,IAAI,KAAK,CAAC,2BAA2B,IAAI,EAAE,CAAC,CAAC,CAAC;oBACvD,CAAC;gBACH,CAAC,CAAC,CAAC;YACL,CAAC,CAAC,CAAC;QACL,CAAC;QAED;;WAEG;QACH,QAAQ,CAAC,OAA+B;YACtC,KAAK,CAAC,QAAQ,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC;QACpC,CAAC;QAED,OAAO,CAAC,OAA+B;YACrC,KAAK,CAAC,QAAQ,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;QACnC,CAAC;QAED,OAAO,CAAC,OAA+B;YACrC,KAAK,CAAC,QAAQ,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;QACnC,CAAC;QAED,SAAS,CAAC,OAA+B;YACvC,KAAK,CAAC,QAAQ,CAAC,SAAS,EAAE,OAAO,CAAC,CAAC;QACrC,CAAC;QAED;;WAEG;QACH,QAAQ;YACN,OAAO,KAAK,CAAC;QACf,CAAC;KACF,CAAC;AACJ,CAAC;AAED,OAAO,EAAmB,oBAAoB,EAAE,CAAC;AAEjD,OAAO,EAAE,YAAY,EAAE,eAAe,EAAE,MAAM,kBAAkB,CAAC"}

package/dist/security-audit.d.ts

@@ -0,0 +1,6 @@
+/**
+ * Security Vulnerability Tests for Tier 1 Features
+ * Tests for common sandbox escape vectors and exploitation techniques
+ */
+export {};
+//# sourceMappingURL=security-audit.d.ts.map

package/dist/security-audit.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"security-audit.d.ts","sourceRoot":"","sources":["../src/security-audit.ts"],"names":[],"mappings":"AAAA;;;GAGG"}