[{"_1":2,"_3":-5,"_4":-5},"loaderData",{"_5":6,"_7":8},"actionData","errors","root",{"_101":102,"_103":104},"routes/embed.x.$handle.$name.$",{"_9":10,"_11":12,"_13":14,"_15":16,"_17":18,"_19":20,"_21":-5},"handle","valx","name","eva","path","main.ts","project",{"_22":45,"_11":12,"_33":46,"_47":-5,"_48":42,"_49":50,"_51":50,"_52":-5,"_53":-5,"_54":55,"_56":25,"_57":32,"_58":-5,"_59":-5,"_60":61,"_62":63,"_64":-5,"_65":-5,"_66":-5,"_67":-5,"_68":69,"_70":69,"_71":72,"_73":72,"_74":72,"_75":69,"_76":69,"_77":78,"_79":80,"_81":82,"_83":42},"file",{"_22":23,"_11":14,"_24":25,"_26":-5,"_27":28,"_29":30,"_31":32,"_33":34,"_35":36,"_37":38,"_39":40,"_41":42,"_43":12,"_13":44},"permalink","https://www.val.town/x/valx/eva/code/main.ts","extension","id","2ca1241f-a8d6-4bb7-be64-b792c0bd78c5","fileId","9cdf1b0c-ae3d-11f1-a430-1607ee4eb77e","parentId","branchId","90168332-11dc-4edb-933a-f92d97d205f6","branchVersion",7,"latest",true,"createdAt",["D",1789174263977],"version",5,"fileType","http","content","/**\n * universal-remote-exec.ts\n * ---------------------------------------------------------------------------\n * 跨 Node.js / Deno / Bun 的远程代码动态执行器\n *\n * 路由：\n * POST /eval 执行请求体中的代码（文本 / gzip / deflate 二进制）\n * 其它 503 Service Unavailable\n *\n * 运行时策略：\n * - Node / Bun：tmp 目录 + npm/bun install + worker_threads（可超时、可崩溃隔离）\n * - Deno / Val Town：\n * · TS 代码先经 `npm:typescript` 的 transpileModule 转成 JS\n * · 裸包重写为 npm: 或 esm.sh\n * · data URL 直接 import（无真超时，仅能提前返回）\n * ---------------------------------------------------------------------------\n */\n\n/* ============================================================================\n * §1 公开类型\n * ========================================================================== */\n\nexport type Runtime = 'node' | 'deno' | 'bun';\n\nexport type RemotePayload = string | Uint8Array | ArrayBuffer;\n\nexport type CompressionAlgorithm = 'gzip' | 'deflate' | 'identity';\n\nexport type ErrorKind =\n | 'payload'\n | 'syntax'\n | 'import'\n | 'install'\n | 'runtime'\n | 'timeout'\n | 'unsupported';\n\nexport interface ExecuteError {\n readonly kind: ErrorKind;\n readonly message: string;\n readonly stack?: string;\n}\n\nexport interface ExecuteOptions {\n readonly timeoutMs?: number;\n readonly installTimeoutMs?: number;\n readonly args?: readonly unknown[];\n readonly exportName?: string;\n readonly depsCacheDir?: string;\n readonly registry?: string;\n readonly keepWorkDir?: boolean;\n readonly refreshDeps?: boolean;\n readonly blockExit?: boolean;\n readonly maxSourceBytes?: number;\n readonly maxDecompressedBytes?: number;\n readonly language?: 'auto' | 'js' | 'ts';\n readonly maxOldGenerationSizeMb?: number;\n}\n\nexport interface ExecuteResult {\n readonly ok: boolean;\n readonly runtime: Runtime;\n readonly result?: unknown;\n readonly error?: ExecuteError;\n readonly dependencies: readonly string[];\n readonly durationMs: number;\n readonly timedOut: boolean;\n readonly workDir?: string;\n}\n\n/* ============================================================================\n * §2 运行时检测\n * ========================================================================== */\n\ninterface DenoGlobal { readonly version: { readonly deno: string }; }\ninterface BunGlobal { readonly version: string; }\n\nfunction globalRef(): Record {\n return globalThis as unknown as Record;\n}\n\nexport function detectRuntime(): Runtime {\n const g = globalRef();\n const deno = g['Deno'] as DenoGlobal | undefined;\n if (deno && typeof deno === 'object' && deno.version?.deno) return 'deno';\n const bun = g['Bun'] as BunGlobal | undefined;\n if (bun && typeof bun === 'object' && bun.version) return 'bun';\n return 'node';\n}\n\nfunction hasBuffer(): boolean {\n return typeof globalRef()['Buffer'] !== 'undefined';\n}\n\nfunction isUint8Array(x: unknown): x is Uint8Array {\n if (x instanceof Uint8Array) return true;\n if (!hasBuffer()) return false;\n const B = globalRef()['Buffer'] as { isBuffer(v: unknown): boolean };\n return B.isBuffer(x);\n}\n\n/* ============================================================================\n * §3 字节工具\n * ========================================================================== */\n\nconst TEXT_ENCODER = new TextEncoder();\nconst TEXT_DECODER = new TextDecoder('utf-8');\n\nfunction stripBom(s: string): string {\n return s.charCodeAt(0) === 0xfeff ? s.slice(1) : s;\n}\n\nfunction toBase64(bytes: Uint8Array): string {\n let binary = '';\n const CHUNK = 0x8000;\n for (let i = 0; i < bytes.length; i += CHUNK) {\n binary += String.fromCharCode.apply(\n null,\n bytes.subarray(i, i + CHUNK) as unknown as number[],\n );\n }\n return btoa(binary);\n}\n\nasync function decompress(input: Uint8Array, format: 'gzip' | 'deflate'): Promise {\n const ds = new DecompressionStream(format);\n const stream = new Blob([input as BlobPart]).stream().pipeThrough(ds);\n const buf = await new Response(stream).arrayBuffer();\n return new Uint8Array(buf);\n}\n\nfunction detectCompression(bytes: Uint8Array): CompressionAlgorithm {\n if (bytes.length >= 2 && bytes[0] === 0x1f && bytes[1] === 0x8b) return 'gzip';\n if (\n bytes.length >= 2 &&\n bytes[0] === 0x78 &&\n (bytes[1] === 0x01 || bytes[1] === 0x9c || bytes[1] === 0xda)\n ) {\n return 'deflate';\n }\n return 'identity';\n}\n\nexport async function decodePayload(\n payload: RemotePayload,\n options: Pick = {},\n): Promise {\n const maxSource = options.maxSourceBytes ?? 1 * 1024 * 1024;\n const maxDecompressed = options.maxDecompressedBytes ?? 4 * 1024 * 1024;\n\n if (typeof payload === 'string') {\n if (payload.length > maxSource) throw new Error(`源码过大（>${maxSource} 字符）`);\n return stripBom(payload);\n }\n\n let bytes: Uint8Array;\n if (isUint8Array(payload)) bytes = payload;\n else if (payload instanceof ArrayBuffer) bytes = new Uint8Array(payload);\n else throw new TypeError(`不支持的 payload 类型：${Object.prototype.toString.call(payload)}`);\n\n if (bytes.byteLength > maxSource) throw new Error(`请求体过大（>${maxSource} 字节）`);\n\n const compression = detectCompression(bytes);\n if (compression === 'gzip') bytes = await decompress(bytes, 'gzip');\n else if (compression === 'deflate') bytes = await decompress(bytes, 'deflate');\n\n if (bytes.byteLength > maxDecompressed) {\n throw new Error(`解压后过大（>${maxDecompressed} 字节）`);\n }\n\n return stripBom(TEXT_DECODER.decode(bytes));\n}\n\n/* ============================================================================\n * §4 依赖提取\n * ========================================================================== */\n\nconst NODE_BUILTINS: ReadonlySet = new Set([\n 'assert', 'assert/strict', 'async_hooks', 'buffer', 'child_process',\n 'cluster', 'console', 'constants', 'crypto', 'dgram',\n 'diagnostics_channel', 'dns', 'dns/promises', 'domain', 'events',\n 'fs', 'fs/promises', 'http', 'http2', 'https', 'inspector', 'module',\n 'net', 'os', 'path', 'path/posix', 'path/win32', 'perf_hooks',\n 'process', 'punycode', 'querystring', 'readline', 'readline/promises',\n 'repl', 'stream', 'stream/consumers', 'stream/promises', 'stream/web',\n 'string_decoder', 'sys', 'timers', 'timers/promises', 'tls',\n 'trace_events', 'tty', 'url', 'util', 'util/types', 'v8', 'vm', 'wasi',\n 'worker_threads', 'zlib',\n]);\n\ninterface ImportPattern {\n readonly regex: RegExp;\n readonly specGroup: number;\n readonly quoteGroup: number;\n}\n\nconst IMPORT_PATTERNS: readonly ImportPattern[] = [\n { regex: /\\bimport\\s*\$\\s*(['\"`])([^'\"`]+)\\1\\s*\$/g, specGroup: 2, quoteGroup: 1 },\n { regex: /\\brequire\\s*\$\\s*(['\"`])([^'\"`]+)\\1\\s*\$/g, specGroup: 2, quoteGroup: 1 },\n { regex: /\\bimport\\s+(?:type\\s+)?[^'\";]*?\\bfrom\\s*(['\"`])([^'\"`]+)\\1/g, specGroup: 2, quoteGroup: 1 },\n { regex: /\\bimport\\s+(['\"`])([^'\"`]+)\\1/g, specGroup: 2, quoteGroup: 1 },\n { regex: /\\bexport\\s+(?:type\\s+)?[^'\";]*?\\bfrom\\s*(['\"`])([^'\"`]+)\\1/g, specGroup: 2, quoteGroup: 1 },\n];\n\ninterface ImportSpecifier {\n readonly raw: string;\n readonly index: number;\n readonly length: number;\n}\n\nfunction isExternalSpecifier(spec: string): boolean {\n if (!spec) return false;\n if (spec.startsWith('.') || spec.startsWith('/') || spec.startsWith('#')) return false;\n if (\n spec.startsWith('node:') ||\n spec.startsWith('npm:') ||\n spec.startsWith('jsr:') ||\n spec.startsWith('bun:') ||\n spec.startsWith('data:') ||\n spec.startsWith('blob:')\n ) return false;\n if (/^[a-z][a-z\\d+\\-.]*:\\/\\//i.test(spec)) return false;\n if (NODE_BUILTINS.has(spec)) return false;\n return true;\n}\n\nfunction packageNameOf(spec: string): string {\n if (spec.startsWith('@')) {\n const m = /^(@[^/]+\\/[^/@]+)/.exec(spec);\n return m ? m[1] : spec;\n }\n return spec.split('/')[0].split('@')[0];\n}\n\nfunction collectSpecifiers(source: string): readonly ImportSpecifier[] {\n const out: ImportSpecifier[] = [];\n for (const pattern of IMPORT_PATTERNS) {\n const re = new RegExp(pattern.regex.source, pattern.regex.flags);\n let m: RegExpExecArray | null;\n while ((m = re.exec(source)) !== null) {\n const spec = m[pattern.specGroup];\n if (!spec) continue;\n const quote = m[pattern.quoteGroup];\n const local = m[0].indexOf(quote + spec + quote);\n if (local < 0) continue;\n out.push({ raw: spec, index: m.index + local + 1, length: spec.length });\n }\n }\n return out;\n}\n\nexport function extractDependencies(source: string): readonly string[] {\n const pkgs = new Set();\n for (const { raw } of collectSpecifiers(source)) {\n if (!isExternalSpecifier(raw)) continue;\n pkgs.add(packageNameOf(raw));\n }\n return Object.freeze([...pkgs].sort());\n}\n\n/* ============================================================================\n * §5 源码形态判断\n * ========================================================================== */\n\nfunction looksLikeCommonJS(source: string): boolean {\n const hasStaticEsm = /^[ \\t]*(?:import|export)\\s/m.test(source);\n const hasCjs =\n /\\brequire\\s*\\(/.test(source) ||\n /\\bmodule\\.exports\\b/.test(source) ||\n /\\bexports\\s*\\./.test(source);\n return hasCjs && !hasStaticEsm;\n}\n\n/**\n * 启发式判断源码是否含 TypeScript 语法。\n * 比上一版覆盖更全：变量 / 参数 / 返回值类型注解，断言、satisfies、\n * 访问修饰符、非空断言等。\n */\nfunction looksLikeTypeScript(source: string): boolean {\n if (!source.trim()) return false;\n\n // 声明级关键字\n if (/^\\s*(?:import|export)\\s+type\\s/m.test(source)) return true;\n if (/^\\s*interface\\s+[A-Za-z_$]/m.test(source)) return true;\n if (/^\\s*type\\s+[A-Za-z_$]\\w*\\s*(?:<|=)/m.test(source)) return true;\n if (/^\\s*enum\\s+[A-Za-z_$]/m.test(source)) return true;\n if (/^\\s*declare\\s+/m.test(source)) return true;\n if (/^\\s*namespace\\s+[A-Za-z_$]/m.test(source)) return true;\n if (/^\\s*abstract\\s+class\\s+[A-Za-z_$]/m.test(source)) return true;\n\n // 变量类型注解：const x: T = ...\n if (/\\b(?:const|let|var)\\s+[A-Za-z_$][\\w$]*\\s*:\\s*[A-Za-z_$]/m.test(source)) return true;\n\n // 函数参数类型注解：function f(a: T) ...\n if (/\\bfunction\\s+[A-Za-z_$][\\w$]*\\s*\$[^)]*:\\s*[A-Za-z_$]/m.test(source)) return true;\n\n // 箭头函数参数类型注解：(a: T) => ... / (a: T): R => ...\n if (/\\(\\s*[A-Za-z_$][\\w$]*\\s*:\\s*[A-Za-z_$][\\w$<>[\\]]*\\s*(?:[,)]|=\\s*)/.test(source)) return true;\n\n // 返回类型注解：): T { 或 ): T =>\n if (/\$\\s*:\\s*[A-Za-z_$][\\w$<>[\\]|&.\\s]*\\s*(?:=>|\\{)/.test(source)) return true;\n\n // 断言 / 满足 / 访问修饰符\n if (/\\bas\\s+(?:const|unknown|[A-Z][\\w$<>[\\]|&.]*)\\b/.test(source)) return true;\n if (/\\bsatisfies\\s+[A-Za-z_$]/m.test(source)) return true;\n if (/\\b(?:public|private|protected|readonly|override)\\s+[A-Za-z_$]/m.test(source)) return true;\n\n return false;\n}\n\n/* ============================================================================\n * §6 Deno 侧：导入重写\n * ========================================================================== */\n\nexport interface DenoRewriteOptions {\n readonly packageStrategy?: 'npm' | 'esm.sh';\n}\n\nfunction rewriteSpecifierForDeno(spec: string, strategy: 'npm' | 'esm.sh'): string {\n if (!spec) return spec;\n if (spec.startsWith('.') || spec.startsWith('/')) return spec;\n if (\n spec.startsWith('node:') ||\n spec.startsWith('npm:') ||\n spec.startsWith('jsr:') ||\n spec.startsWith('bun:') ||\n spec.startsWith('data:') ||\n spec.startsWith('blob:')\n ) return spec;\n if (/^[a-z][a-z\\d+\\-.]*:\\/\\//i.test(spec)) return spec;\n if (NODE_BUILTINS.has(spec)) return `node:${spec}`;\n if (strategy === 'esm.sh') return `https://esm.sh/${spec}?target=deno`;\n return `npm:${spec}`;\n}\n\nexport function rewriteImportsForDeno(\n source: string,\n options: DenoRewriteOptions = {},\n): string {\n const strategy = options.packageStrategy ?? 'npm';\n const specs = collectSpecifiers(source);\n if (specs.length === 0) return source;\n\n const sorted = [...specs].sort((a, b) => b.index - a.index);\n let out = source;\n for (const s of sorted) {\n const replacement = rewriteSpecifierForDeno(s.raw, strategy);\n if (replacement === s.raw) continue;\n out = out.slice(0, s.index) + replacement + out.slice(s.index + s.length);\n }\n return out;\n}\n\n/* ============================================================================\n * §7 TypeScript 转译（Deno 侧，替代依赖 Deno 内置类型剥离）\n * ========================================================================== */\n\ninterface TSModule {\n readonly ScriptTarget: { readonly ES2022: number };\n readonly ModuleKind: { readonly ESNext: number };\n transpileModule(\n code: string,\n options: {\n readonly compilerOptions: {\n readonly target: number;\n readonly module: number;\n readonly esModuleInterop?: boolean;\n readonly isolatedModules?: boolean;\n };\n readonly fileName?: string;\n },\n ): { readonly outputText: string };\n}\n\nlet cachedTS: TSModule | null = null;\nlet tsLoadFailed = false;\n\nasync function loadTypeScript(): Promise {\n if (cachedTS) return cachedTS;\n if (tsLoadFailed) return null;\n try {\n const mod = (await import('npm:typescript@5.6.3')) as unknown as TSModule;\n cachedTS = mod;\n return mod;\n } catch {\n tsLoadFailed = true;\n return null;\n }\n}\n\n/**\n * 把 TS 源码转成 JS。返回 null 表示转译器不可用，调用方应回退到\n * Deno 内置的类型剥离（即直接用 application/typescript 的 data URL）。\n */\nexport async function tryTranspileTypeScript(source: string): Promise {\n const ts = await loadTypeScript();\n if (!ts) return null;\n const result = ts.transpileModule(source, {\n compilerOptions: {\n target: ts.ScriptTarget.ES2022,\n module: ts.ModuleKind.ESNext,\n esModuleInterop: true,\n isolatedModules: true,\n },\n fileName: 'remote.ts',\n });\n return result.outputText;\n}\n\n/* ============================================================================\n * §8 Node / Bun 侧：子进程辅助（安装依赖）\n * ========================================================================== */\n\ninterface ProcessOutcome {\n readonly code: number | null;\n readonly stdout: string;\n readonly stderr: string;\n}\n\ninterface RunProcessOptions {\n readonly cwd: string;\n readonly timeoutMs: number;\n readonly shell?: boolean;\n readonly env?: Record;\n}\n\nfunction runProcess(\n cmd: string,\n args: readonly string[],\n opts: RunProcessOptions,\n): Promise {\n return new Promise((resolve) => {\n let settled = false;\n let child: import('node:child_process').ChildProcess | undefined;\n let stdout = '';\n let stderr = '';\n\n const finish = (outcome: ProcessOutcome): void => {\n if (settled) return;\n settled = true;\n clearTimeout(timer);\n resolve(outcome);\n };\n\n const timer = setTimeout(() => {\n try { child?.kill('SIGKILL'); } catch { /* ignore */ }\n }, opts.timeoutMs);\n\n void (async () => {\n const { spawn } = await import('node:child_process');\n child = spawn(cmd, [...args], {\n cwd: opts.cwd,\n shell: opts.shell ?? false,\n env: { ...process.env, ...opts.env },\n stdio: ['ignore', 'pipe', 'pipe'],\n windowsHide: true,\n });\n\n child.stdout?.on('data', (c: Buffer) => { stdout += c.toString('utf8'); });\n child.stderr?.on('data', (c: Buffer) => { stderr += c.toString('utf8'); });\n child.on('error', (err) => {\n stderr += String(err.message);\n finish({ code: -1, stdout, stderr });\n });\n child.on('close', (code) => finish({ code, stdout, stderr }));\n })();\n });\n}\n\n/* ============================================================================\n * §9 Node / Bun 侧：依赖安装\n * ========================================================================== */\n\nconst inflightInstalls = new Map>();\n\nasync function installDependencies(\n runtime: Exclude,\n deps: readonly string[],\n installDir: string,\n timeoutMs: number,\n registry: string | undefined,\n): Promise {\n const [fsp, path] = await Promise.all([\n import('node:fs/promises'),\n import('node:path'),\n ]);\n\n const pkg = {\n name: 'remote-exec-sandbox',\n version: '0.0.0',\n private: true,\n type: 'module' as const,\n dependencies: Object.fromEntries(deps.map((d) => [d, 'latest'])),\n };\n\n await fsp.writeFile(\n path.join(installDir, 'package.json'),\n JSON.stringify(pkg, null, 2),\n 'utf8',\n );\n\n const isWindows = process.platform === 'win32';\n let cmd: string;\n let args: string[];\n\n if (runtime === 'bun') {\n cmd = 'bun';\n args = ['install'];\n if (registry) args.push('--registry', registry);\n } else {\n cmd = 'npm';\n args = [\n 'install',\n '--no-audit',\n '--no-fund',\n '--loglevel=error',\n '--prefer-offline',\n '--no-package-lock',\n ];\n if (registry) args.push('--registry', registry);\n }\n\n const out = await runProcess(cmd, args, {\n cwd: installDir,\n timeoutMs,\n shell: isWindows,\n });\n\n if (out.code !== 0) {\n throw new Error(\n `依赖安装失败（${runtime} / exit=${out.code}）：\\n${out.stderr || out.stdout}`,\n );\n }\n}\n\nasync function ensureDependencies(\n runtime: Exclude,\n deps: readonly string[],\n depsDir: string,\n timeoutMs: number,\n registry: string | undefined,\n refresh: boolean,\n): Promise {\n const [fsp, path] = await Promise.all([\n import('node:fs/promises'),\n import('node:path'),\n ]);\n\n const marker = path.join(depsDir, '.ready');\n const wanted = deps.join(',');\n\n if (!refresh) {\n const content = await fsp.readFile(marker, 'utf8').catch(() => null);\n if (content === wanted) return;\n }\n\n const existing = inflightInstalls.get(depsDir);\n if (existing) return existing;\n\n const task = (async () => {\n await installDependencies(runtime, deps, depsDir, timeoutMs, registry);\n await fsp.writeFile(marker, wanted, 'utf8');\n })().finally(() => {\n inflightInstalls.delete(depsDir);\n });\n\n inflightInstalls.set(depsDir, task);\n return task;\n}\n\n/* ============================================================================\n * §10 Node / Bun 侧：worker 源码与执行\n * ========================================================================== */\n\nconst WORKER_SOURCE: string = `\nimport { parentPort, workerData } from 'node:worker_threads';\nimport { pathToFileURL } from 'node:url';\n\nconst { entryFile, exportName, args, blockExit } = workerData;\n\nfunction post(payload) {\n try {\n parentPort.postMessage(payload);\n } catch {\n parentPort.postMessage({\n ok: payload.ok,\n result: payload.result === undefined ? undefined : String(payload.result),\n error: payload.error,\n uncloneable: true,\n });\n }\n}\n\nasync function main() {\n if (blockExit) {\n try {\n process.exit = ((code) => {\n throw new Error('process.exit(' + code + ') 被拦截（高可用保护）');\n });\n } catch {}\n }\n\n const url = pathToFileURL(entryFile).href + '?t=' + Date.now() + '-' + Math.random();\n const mod = await import(url);\n\n let target = null;\n if (exportName) {\n target = mod[exportName];\n if (typeof target !== 'function') {\n throw new Error('导出 \"' + exportName + '\" 不是函数');\n }\n } else {\n target = [mod.default, mod.main, mod.run].find((v) => typeof v === 'function') || null;\n }\n\n if (!target) return mod.default ?? null;\n return await target(...(args ?? []));\n}\n\nmain().then(\n (result) => post({ ok: true, result }),\n (err) => post({\n ok: false,\n error: {\n message: err && err.message ? String(err.message) : String(err),\n stack: err && err.stack ? String(err.stack) : undefined,\n },\n }),\n);\n`;\n\ninterface WorkerOutcome {\n readonly ok: boolean;\n readonly result?: unknown;\n readonly error?: { readonly message: string; readonly stack?: string };\n readonly timedOut: boolean;\n readonly uncloneable?: boolean;\n}\n\ninterface RunWorkerParams {\n readonly runnerFile: string;\n readonly entryFile: string;\n readonly exportName: string | undefined;\n readonly args: readonly unknown[];\n readonly timeoutMs: number;\n readonly blockExit: boolean;\n readonly maxOldGenerationSizeMb: number;\n}\n\nasync function runInWorker(params: RunWorkerParams): Promise {\n const { Worker } = await import('node:worker_threads');\n\n return new Promise((resolve) => {\n let settled = false;\n let timedOut = false;\n\n const worker = new Worker(params.runnerFile, {\n workerData: {\n entryFile: params.entryFile,\n exportName: params.exportName ?? '',\n args: params.args ?? [],\n blockExit: params.blockExit,\n },\n resourceLimits: {\n maxOldGenerationSizeMb: params.maxOldGenerationSizeMb,\n maxYoungGenerationSizeMb: Math.max(16, params.maxOldGenerationSizeMb >> 3),\n },\n });\n\n const finish = (outcome: WorkerOutcome): void => {\n if (settled) return;\n settled = true;\n clearTimeout(timer);\n worker.terminate().catch(() => { /* ignore */ });\n resolve(outcome);\n };\n\n const timer = setTimeout(() => {\n timedOut = true;\n finish({\n ok: false,\n timedOut: true,\n error: { message: `执行超时（${params.timeoutMs}ms），worker 已被终止` },\n });\n }, params.timeoutMs);\n\n worker.on('message', (msg: unknown) => {\n if (msg && typeof msg === 'object' && 'ok' in (msg as Record)) {\n const m = msg as {\n ok: boolean;\n result?: unknown;\n error?: WorkerOutcome['error'];\n uncloneable?: boolean;\n };\n finish({ ok: m.ok, result: m.result, error: m.error, timedOut: false, uncloneable: m.uncloneable });\n }\n });\n\n worker.on('error', (err: Error) => {\n finish({\n ok: false,\n timedOut,\n error: { message: err.message ?? String(err), stack: err.stack },\n });\n });\n\n worker.on('exit', (code: number) => {\n if (code !== 0) {\n finish({\n ok: false,\n timedOut,\n error: { message: `worker 异常退出，code=${code}` },\n });\n } else {\n finish({\n ok: false,\n timedOut,\n error: { message: 'worker 未返回结果（可能被显式 exit 或未导出内容）' },\n });\n }\n });\n });\n}\n\n/* ============================================================================\n * §11 Node / Bun 执行分支\n * ========================================================================== */\n\ninterface RuntimeBranchResult {\n readonly outcome: WorkerOutcome;\n readonly workDir: string;\n}\n\nasync function executeOnNodeLike(\n runtime: Exclude,\n source: string,\n deps: readonly string[],\n options: ExecuteOptions,\n): Promise {\n const [fsp, os, path, crypto] = await Promise.all([\n import('node:fs/promises'),\n import('node:os'),\n import('node:path'),\n import('node:crypto'),\n ]);\n\n const timeoutMs = options.timeoutMs ?? 15_000;\n const installTimeoutMs = options.installTimeoutMs ?? 120_000;\n const maxOldGenerationSizeMb = options.maxOldGenerationSizeMb ?? 512;\n const baseDir = options.depsCacheDir ?? path.join(os.tmpdir(), 'remote-exec-deps');\n\n const cacheKey = crypto\n .createHash('sha1')\n .update(deps.join('|') || 'no-deps')\n .digest('hex')\n .slice(0, 16);\n const depsDir = path.join(baseDir, cacheKey);\n await fsp.mkdir(depsDir, { recursive: true });\n\n if (deps.length > 0) {\n await ensureDependencies(\n runtime,\n deps,\n depsDir,\n installTimeoutMs,\n options.registry,\n options.refreshDeps ?? false,\n );\n }\n\n const workDir = path.join(depsDir, `.exec-${crypto.randomUUID()}`);\n await fsp.mkdir(workDir, { recursive: true });\n\n const cjs = looksLikeCommonJS(source);\n const isTS = options.language === 'ts' ||\n (options.language !== 'js' && looksLikeTypeScript(source));\n const ext = isTS ? (cjs ? '.cts' : '.mts') : (cjs ? '.cjs' : '.mjs');\n\n const entryFile = path.join(workDir, `entry${ext}`);\n const runnerFile = path.join(workDir, '__runner.mjs');\n\n await Promise.all([\n fsp.writeFile(entryFile, source, 'utf8'),\n fsp.writeFile(runnerFile, WORKER_SOURCE, 'utf8'),\n ]);\n\n const outcome = await runInWorker({\n runnerFile,\n entryFile,\n exportName: options.exportName,\n args: options.args ?? [],\n timeoutMs,\n blockExit: options.blockExit ?? true,\n maxOldGenerationSizeMb,\n });\n\n if (!options.keepWorkDir) {\n fsp.rm(workDir, { recursive: true, force: true }).catch(() => { /* ignore */ });\n }\n\n return { outcome, workDir };\n}\n\n/* ============================================================================\n * §12 Deno 执行分支\n * ========================================================================== */\n\ninterface DenoBranchResult {\n readonly outcome: WorkerOutcome;\n}\n\nasync function executeOnDeno(\n source: string,\n deps: readonly string[],\n options: ExecuteOptions,\n): Promise {\n const timeoutMs = options.timeoutMs ?? 15_000;\n\n // 1) 重写 import specifier（裸包 → npm: / esm.sh）\n const rewritten = rewriteImportsForDeno(source, { packageStrategy: 'npm' });\n\n // 2) 判断是否 TS\n const isTS = options.language === 'ts' ||\n (options.language !== 'js' && looksLikeTypeScript(source));\n\n // 3) 决定 MIME 与最终加载的代码\n let codeToLoad = rewritten;\n let mime = 'application/javascript';\n\n if (isTS) {\n // 优先自己转译，避免依赖 Deno 内置的 data URL 类型剥离\n const transpiled = await tryTranspileTypeScript(rewritten).catch(() => null);\n if (transpiled !== null) {\n codeToLoad = transpiled;\n mime = 'application/javascript';\n } else {\n // 转译器不可用（例如 npm: 拉取失败）→ 回退让 Deno 处理 TS\n mime = 'application/typescript';\n }\n }\n\n // 4) data URL 导入 + Promise.race 超时\n const bytes = TEXT_ENCODER.encode(codeToLoad);\n const dataUrl = `data:${mime};base64,${toBase64(bytes)}`;\n\n let timedOut = false;\n let timer: ReturnType | undefined;\n\n const timeoutPromise = new Promise((_, reject) => {\n timer = setTimeout(() => {\n timedOut = true;\n reject(new Error(`执行超时（${timeoutMs}ms）`));\n }, timeoutMs);\n });\n\n try {\n const mod = await Promise.race>>([\n import(/* @vite-ignore */ dataUrl) as Promise>,\n timeoutPromise,\n ]);\n\n let target: unknown = null;\n if (options.exportName) {\n target = mod[options.exportName];\n if (typeof target !== 'function') {\n throw new Error(`导出 \"${options.exportName}\" 不是函数`);\n }\n } else {\n const candidates = [mod['default'], mod['main'], mod['run']];\n target = candidates.find((v) => typeof v === 'function') ?? null;\n }\n\n const result = target\n ? await (target as (...a: readonly unknown[]) => unknown)(...(options.args ?? []))\n : (mod['default'] ?? mod);\n\n return { outcome: { ok: true, result, timedOut: false } };\n } catch (err) {\n const e = err as Error;\n return {\n outcome: {\n ok: false,\n timedOut,\n error: { message: e.message ?? String(e), stack: e.stack },\n },\n };\n } finally {\n if (timer) clearTimeout(timer);\n }\n}\n\n/* ============================================================================\n * §13 统一入口 executeRemote\n * ========================================================================== */\n\nexport async function executeRemote(\n payload: RemotePayload,\n options: ExecuteOptions = {},\n): Promise {\n const runtime = detectRuntime();\n const startedAt = Date.now();\n\n // 1) 解码\n let source: string;\n try {\n source = await decodePayload(payload, options);\n } catch (err) {\n const e = err as Error;\n return {\n ok: false,\n runtime,\n error: { kind: 'payload', message: e.message ?? String(e), stack: e.stack },\n dependencies: Object.freeze([]),\n durationMs: Date.now() - startedAt,\n timedOut: false,\n };\n }\n\n // 2) 依赖\n const deps = extractDependencies(source);\n\n // 3) 分派\n try {\n if (runtime === 'deno') {\n const { outcome } = await executeOnDeno(source, deps, options);\n return {\n ok: outcome.ok,\n runtime,\n result: outcome.result,\n error: outcome.error\n ? {\n kind: outcome.timedOut ? 'timeout' : 'runtime',\n message: outcome.error.message,\n stack: outcome.error.stack,\n }\n : undefined,\n dependencies: deps,\n durationMs: Date.now() - startedAt,\n timedOut: outcome.timedOut,\n };\n }\n\n const { outcome, workDir } = await executeOnNodeLike(runtime, source, deps, options);\n return {\n ok: outcome.ok,\n runtime,\n result: outcome.result,\n error: outcome.error\n ? {\n kind: outcome.timedOut ? 'timeout' : 'runtime',\n message: outcome.error.message,\n stack: outcome.error.stack,\n }\n : undefined,\n dependencies: deps,\n durationMs: Date.now() - startedAt,\n timedOut: outcome.timedOut,\n workDir,\n };\n } catch (err) {\n const e = err as Error;\n const kind: ErrorKind = /install/i.test(e.message) ? 'install' : 'runtime';\n return {\n ok: false,\n runtime,\n error: { kind, message: e.message ?? String(e), stack: e.stack },\n dependencies: deps,\n durationMs: Date.now() - startedAt,\n timedOut: false,\n };\n }\n}\n\n/** 语义化别名 */\nexport const runRemoteCode = executeRemote;\n\n/* ============================================================================\n * §14 HTTP 处理器\n * ========================================================================== */\n\nconst DEFAULT_TIMEOUT_MS = 15_000;\n\nfunction jsonResponse(data: unknown, status = 200): Response {\n try {\n return Response.json(data as Record, { status });\n } catch {\n return Response.json(\n {\n ok: false,\n error: {\n kind: 'runtime',\n message: '返回值无法序列化为 JSON',\n preview: String(data).slice(0, 500),\n },\n },\n { status: 500 },\n );\n }\n}\n\nfunction parseArgs(raw: string | null): readonly unknown[] {\n if (!raw) return Object.freeze([]);\n try {\n const parsed: unknown = JSON.parse(raw);\n return Array.isArray(parsed) ? Object.freeze(parsed) : Object.freeze([]);\n } catch {\n return Object.freeze([]);\n }\n}\n\nfunction parseTimeout(raw: string | null): number {\n if (!raw) return DEFAULT_TIMEOUT_MS;\n const n = Number(raw);\n return Number.isFinite(n) && n > 0 ? n : DEFAULT_TIMEOUT_MS;\n}\n\nasync function handleEval(req: Request, url: URL): Promise {\n if (req.method !== 'POST') {\n return jsonResponse(\n { ok: false, error: { kind: 'runtime', message: '只支持 POST' } },\n 405,\n );\n }\n\n let source: string;\n try {\n const buf = new Uint8Array(await req.arrayBuffer());\n source = await decodePayload(buf, {\n maxSourceBytes: 1 * 1024 * 1024,\n maxDecompressedBytes: 4 * 1024 * 1024,\n });\n } catch (err) {\n const e = err as Error;\n return jsonResponse(\n { ok: false, error: { kind: 'payload', message: e.message ?? String(e) } },\n 400,\n );\n }\n\n if (!source.trim()) {\n return jsonResponse(\n { ok: false, error: { kind: 'payload', message: '请求体为空' } },\n 400,\n );\n }\n\n const options: ExecuteOptions = {\n timeoutMs: parseTimeout(url.searchParams.get('timeout')),\n exportName: url.searchParams.get('export') ?? undefined,\n args: parseArgs(url.searchParams.get('args')),\n };\n\n const outcome = await executeRemote(source, options);\n\n // 用户代码若返回 Response，原样透传\n if (outcome.ok && outcome.result instanceof Response) {\n return outcome.result;\n }\n\n return jsonResponse(\n {\n ok: outcome.ok,\n runtime: outcome.runtime,\n result: outcome.ok ? outcome.result : undefined,\n error: outcome.ok ? undefined : outcome.error,\n dependencies: outcome.dependencies,\n durationMs: outcome.durationMs,\n timedOut: outcome.timedOut,\n },\n outcome.ok ? 200 : 500,\n );\n}\n\nexport async function handleRequest(req: Request): Promise {\n const url = new URL(req.url);\n\n if (url.pathname === '/eval') {\n return handleEval(req, url);\n }\n\n return new Response('Service Unavailable', {\n status: 503,\n headers: {\n 'content-type': 'text/plain; charset=utf-8',\n 'cache-control': 'no-store',\n 'retry-after': '60',\n },\n });\n}\n\n/* ============================================================================\n * §15 Val Town / Deno Deploy 入口\n * ========================================================================== */\n\nexport default async function (req: Request): Promise {\n return handleRequest(req);\n}","deleted",false,"label",[14],"2d9b51d5-0e53-4f41-944d-5915126c1693",["D",1789171507287],"deletedAt","legacyEnvVars","privacy","public","httpPrivacy","description","imageUrl","userId","e6130bf8-5ef0-48f2-bf0a-a8d7ad59e4fe","pinnedFileId","pinPreview","pinMigrated","screenshotVersion","likeCount",0,"orgId","d12db338-ffbd-40f0-beb5-e792f8082542","tursoName","tursoHostname","tursoMeasuredAt","pinned","userPerm","r","valPerm","blobPerm","rw","emailPerm","sqlitePerm","projectPerm","telemetryPerm","user",{"_9":10,"_100":96},"org",{"_9":10,"_94":-5,"_95":96,"_54":55,"_97":98,"_99":42},"branch",{"_35":84,"_11":85,"_22":28,"_86":45,"_87":-5,"_88":-5,"_89":-5,"_90":-5,"_91":-5,"_92":12,"_93":10},"isOwned",10,"main","projectId","forkedBranchId","forkedBranchVersion","forkedProjectPrivacy","forkedProjectId","forkedProjectOrgId","projectName","userHandle","displayName","avatar","https://img.clerk.com/eyJ0eXBlIjoiZGVmYXVsdCIsImlpZCI6Imluc18yTm10cGhQUklwU0tqZHNiOHNnNGd2ZjJURFUiLCJyaWQiOiJ1c2VyXzJrbzhtdHVzRUYzUW5SdUtuSml2c3c5Y3U4SSJ9","tier","free","canRestrictVals","profileImageUrl","ctx",{"_77":-5,"_134":135,"_136":137,"_138":139,"_140":42,"_141":42,"_142":42,"_143":32,"_144":-5,"_145":-7,"_146":-7,"_147":61,"_148":42,"_149":42,"_150":-5,"_151":42,"_152":42,"_153":42,"_154":-5},"ENV",{"_105":106,"_107":108,"_109":85,"_110":111,"_112":113,"_114":115,"_116":117,"_118":119,"_120":121,"_122":123,"_124":125,"_126":127,"_128":129,"_130":131,"_132":133},"REACT_APP_SENTRY_DSN","https://586020d86f05489db63a554690acf1e9@o1398359.ingest.sentry.io/6724499","RENDER_GIT_COMMIT","e87eb04e707cf64e7e532c8e8ec395f209e17f15","RENDER_GIT_BRANCH","POSTHOG_API_TOKEN","phc_nmoyuAkStEZuUp69rYlg1DZgrIt19Gx0Y4Hwf8tGgJP","POSTHOG_API_HOST","https://wart.val.town","WEB_API_TEMPLATE","https://{val}.web.val.run","APP_URL","https://www.val.town","MODULE_URL","https://esm.town","VANITY_WEB_API_TEMPLATE","https://{label}.val.run/","DENOLS_URL","https://lsp.val.town","NODE_ENV","production","CLOUDFLARE_TURNSTILE_SITE_KEY","0x4AAAAAACtaIZJH7s9rBMZ6","GOOGLE_CLIENT_ID","875989696899-jtsqkhlbdv5jrlsk8631p7ipjg3c6o62.apps.googleusercontent.com","STRIPE_PUBLISHABLE_KEY","pk_live_51N2zvWEpZTTLipIkVEwXrUG9AT0yeOOEYxszarZT1jpsZV58Ly6wlg3SltZpHN26CUalOBmUSY7adQRQiSkCZz2500qSXNkf8Y","API_URL","https://api.val.town","orgs",[],"preferencesKeybindings","default","preferencesTheme","light","preferencesFixers","preferencesCopilot","preferencesSelectionAi","preferencesCloseBrackets","preferencesChatPanelState","preferencesDprint","preferencesDenofmt","notificationCount","flagDenols","isBusinessOrgMember","businessOrgHandle","isBusinessOrgAdmin","isHigherTownieTier","navCollapsed","currentOrgId"]