[{"_1":2,"_3":-5,"_4":-5},"loaderData",{"_5":6,"_7":8,"_9":10},"actionData","errors","root",{"_163":164,"_165":166},"routes/_app.x.$handle.$name",{"_93":92,"_32":43,"_101":83,"_27":102,"_13":14,"_103":-5,"_11":104,"_105":106,"_107":108,"_109":110,"_111":112,"_20":-5,"_113":-5,"_114":-5,"_115":26,"_116":117,"_118":24,"_119":-5,"_120":-5,"_121":122},"routes/_app.x.$handle.$name.branch.$branch.version.$version.diff",{"_11":12,"_13":14,"_15":16,"_17":-5,"_18":-5},"project",{"_41":42,"_32":43,"_36":44,"_45":-5,"_46":26,"_47":48,"_49":48,"_50":-5,"_51":-5,"_18":52,"_53":54,"_55":24,"_56":-5,"_57":-5,"_58":59,"_60":61,"_62":-5,"_63":-5,"_64":-5,"_65":-5,"_66":67,"_68":67,"_69":70,"_71":70,"_72":70,"_73":67,"_74":67,"_75":76,"_77":78,"_79":80,"_81":26},"version",6,"changes",[19],"aiChatInfo","userId",{"_20":21,"_22":-7,"_23":24,"_25":26,"_27":28,"_29":28},"file",{"_30":31,"_32":28,"_33":20,"_34":35,"_36":37,"_38":14,"_39":40,"_23":26},"previous","deleted",true,"deletedHere",false,"path","my-script1.ts","latestPath","fileId","c0de94ec-ae42-11f1-9adc-1607ee4eb77e","name","fileType","content","export default () => \"hi\";","createdAt",["D",1789173715195],"branchVersion","branchId","90168332-11dc-4edb-933a-f92d97d205f6","id","2d9b51d5-0e53-4f41-944d-5915126c1693","eva",["D",1789171507287],"deletedAt","legacyEnvVars","privacy","public","httpPrivacy","description","imageUrl","e6130bf8-5ef0-48f2-bf0a-a8d7ad59e4fe","pinnedFileId","9cdf1b0c-ae3d-11f1-a430-1607ee4eb77e","pinPreview","pinMigrated","screenshotVersion","likeCount",0,"orgId","d12db338-ffbd-40f0-beb5-e792f8082542","tursoName","tursoHostname","tursoMeasuredAt","pinned","userPerm","r","valPerm","blobPerm","rw","emailPerm","sqlitePerm","projectPerm","telemetryPerm","user",{"_93":92,"_100":96},"org",{"_93":92,"_94":-5,"_95":96,"_18":52,"_97":98,"_99":26},"branch",{"_13":82,"_32":83,"_41":40,"_84":42,"_85":-5,"_86":-5,"_87":-5,"_88":-5,"_89":-5,"_90":43,"_91":92},"isOwned",10,"main","projectId","forkedBranchId","forkedBranchVersion","forkedProjectPrivacy","forkedProjectId","forkedProjectOrgId","projectName","userHandle","valx","handle","displayName","avatar","https://img.clerk.com/eyJ0eXBlIjoiZGVmYXVsdCIsImlpZCI6Imluc18yTm10cGhQUklwU0tqZHNiOHNnNGd2ZjJURFUiLCJyaWQiOiJ1c2VyXzJrbzhtdHVzRUYzUW5SdUtuSml2c3c5Y3U4SSJ9","tier","free","canRestrictVals","profileImageUrl","branchName","","adoptOrgId",{"_41":42,"_32":43,"_36":159,"_45":-5,"_46":26,"_47":48,"_49":48,"_50":-5,"_51":-5,"_18":52,"_53":54,"_55":24,"_56":-5,"_57":-5,"_58":59,"_60":61,"_62":-5,"_63":-5,"_64":-5,"_65":-5,"_66":67,"_68":67,"_69":70,"_71":70,"_72":70,"_73":67,"_74":67,"_75":160,"_77":161,"_79":162,"_81":26},"tree",[150,151],"files",[150,151],"counts",{"_139":59,"_140":141,"_142":59,"_143":144,"_145":146},"contents",[123,124],"upstreamProject","upstreamBranch","emptyEnvVars","flags",[],"hasHttpFiles","grants","orgs","customDomains",{},{"_41":131,"_32":132,"_30":54,"_126":-5,"_39":40,"_38":133,"_127":26,"_36":134,"_13":135,"_33":136,"_34":137,"_23":26,"_129":43,"_27":138},{"_41":125,"_32":28,"_30":31,"_126":-5,"_39":40,"_38":14,"_127":26,"_36":128,"_13":59,"_33":20,"_34":35,"_23":26,"_129":-5,"_27":130},"c0a908f3-27d5-4c6f-81d2-e0f9fa15a984","parentId","latest",["D",1789173715195],"label",[28],"87286e57-771b-41f6-a959-eb7aa609ffa9","main.ts",5,["D",1789171851116],4,"http","/**\n * universal-remote-exec.ts\n * ---------------------------------------------------------------------------\n * 跨 Node.js / Deno / Bun 的远程代码动态执行器\n *\n * 路由：\n * POST /eval 执行请求体中的代码（文本或 gzip 二进制）\n * 其它 503 Service Unavailable\n *\n * 运行时策略：\n * - Node / Bun：写入临时目录 + npm/bun install + worker_threads 执行（可超时、可崩溃隔离）\n * - Deno ：重写裸包为 npm: / esm.sh + data URL 直接 import（Val Town 用这条）\n *\n * 输入：string | Uint8Array | ArrayBuffer；gzip 魔数 1F 8B 自动解压\n * 依赖：静态扫描 import / export-from / require / import()\n * ---------------------------------------------------------------------------\n */\n\n/* ============================================================================\n * §1 公开类型\n * ========================================================================== */\n\nexport type Runtime = 'node' | 'deno' | 'bun';\n\n/** 外部可传入的载荷类型（Buffer 是 Uint8Array 子类，被前者覆盖） */\nexport type RemotePayload = string | Uint8Array | ArrayBuffer;\n\nexport type CompressionAlgorithm = 'gzip' | 'deflate' | 'identity';\n\nexport type ErrorKind =\n | 'payload' // 输入解码失败\n | 'syntax' // 用户代码语法错误\n | 'import' // 导入解析失败\n | 'install' // 依赖安装失败\n | 'runtime' // 用户代码运行时报错\n | 'timeout' // 执行超时\n | 'unsupported'; // 运行时能力缺失\n\nexport interface ExecuteError {\n readonly kind: ErrorKind;\n readonly message: string;\n readonly stack?: string;\n}\n\nexport interface ExecuteOptions {\n /** 执行超时（ms），默认 15_000。Node/Bun 会真正 terminate worker；Deno 只能提前返回 */\n readonly timeoutMs?: number;\n /** 依赖安装超时（ms），默认 120_000 */\n readonly installTimeoutMs?: number;\n /** 传给入口函数的参数（需结构化克隆兼容 / JSON 兼容） */\n readonly args?: readonly unknown[];\n /** 指定要调用的导出名；不指定则按 default → main → run 顺序查找 */\n readonly exportName?: string;\n /** 依赖缓存根目录（仅 Node/Bun 使用），默认 os.tmpdir()/remote-exec-deps */\n readonly depsCacheDir?: string;\n /** npm registry 覆盖（仅 Node/Bun 使用） */\n readonly registry?: string;\n /** 执行完成后保留工作目录（调试用） */\n readonly keepWorkDir?: boolean;\n /** 强制刷新依赖缓存（上游发新版时用） */\n readonly refreshDeps?: boolean;\n /** 拦截 process.exit（Node/Bun worker 中生效），默认 true */\n readonly blockExit?: boolean;\n /** 请求体大小上限（字节），默认 1 MiB */\n readonly maxSourceBytes?: number;\n /** 解压后大小上限（字节），默认 4 MiB */\n readonly maxDecompressedBytes?: number;\n /** 语言提示；auto 时根据源码启发式判断 */\n readonly language?: 'auto' | 'js' | 'ts';\n /** worker 老生代内存上限 MB（Node/Bun 使用），默认 512 */\n readonly maxOldGenerationSizeMb?: number;\n}\n\nexport interface ExecuteResult {\n readonly ok: boolean;\n readonly runtime: Runtime;\n readonly result?: unknown;\n readonly error?: ExecuteError;\n readonly dependencies: readonly string[];\n readonly durationMs: number;\n readonly timedOut: boolean;\n readonly workDir?: string;\n}\n\n/* ============================================================================\n * §2 运行时检测\n * ========================================================================== */\n\ninterface DenoGlobal {\n readonly version: { readonly deno: string };\n}\n\ninterface BunGlobal {\n readonly version: string;\n}\n\nfunction globalRef(): Record {\n return globalThis as unknown as Record;\n}\n\nexport function detectRuntime(): Runtime {\n const g = globalRef();\n const deno = g['Deno'] as DenoGlobal | undefined;\n if (deno && typeof deno === 'object' && deno.version?.deno) return 'deno';\n const bun = g['Bun'] as BunGlobal | undefined;\n if (bun && typeof bun === 'object' && bun.version) return 'bun';\n return 'node';\n}\n\nfunction hasBuffer(): boolean {\n const g = globalRef();\n return typeof g['Buffer'] !== 'undefined';\n}\n\nfunction isUint8Array(x: unknown): x is Uint8Array {\n if (x instanceof Uint8Array) return true;\n if (!hasBuffer()) return false;\n const BufferCtor = (globalRef()['Buffer'] as { isBuffer(v: unknown): boolean });\n return BufferCtor.isBuffer(x);\n}\n\n/* ============================================================================\n * §3 字节工具\n * ========================================================================== */\n\nconst TEXT_ENCODER = new TextEncoder();\nconst TEXT_DECODER = new TextDecoder('utf-8');\n\nfunction stripBom(s: string): string {\n return s.charCodeAt(0) === 0xfeff ? s.slice(1) : s;\n}\n\nfunction toBase64(bytes: Uint8Array): string {\n let binary = '';\n const CHUNK = 0x8000;\n for (let i = 0; i < bytes.length; i += CHUNK) {\n const slice = bytes.subarray(i, i + CHUNK);\n binary += String.fromCharCode.apply(null, slice as unknown as number[]);\n }\n return btoa(binary);\n}\n\nasync function gunzipBytes(input: Uint8Array): Promise {\n const ds = new DecompressionStream('gzip');\n const stream = new Blob([input as BlobPart]).stream().pipeThrough(ds);\n const buf = await new Response(stream).arrayBuffer();\n return new Uint8Array(buf);\n}\n\nasync function inflateBytes(input: Uint8Array): Promise {\n const ds = new DecompressionStream('deflate');\n const stream = new Blob([input as BlobPart]).stream().pipeThrough(ds);\n const buf = await new Response(stream).arrayBuffer();\n return new Uint8Array(buf);\n}\n\nfunction detectCompression(bytes: Uint8Array): CompressionAlgorithm {\n if (bytes.length >= 2 && bytes[0] === 0x1f && bytes[1] === 0x8b) return 'gzip';\n // zlib 头：0x78 开头（0x78 01/9c/da）\n if (bytes.length >= 2 && bytes[0] === 0x78 && (bytes[1] === 0x01 || bytes[1] === 0x9c || bytes[1] === 0xda)) {\n return 'deflate';\n }\n return 'identity';\n}\n\nexport async function decodePayload(\n payload: RemotePayload,\n options: Pick = {},\n): Promise {\n const maxSource = options.maxSourceBytes ?? 1 * 1024 * 1024;\n const maxDecompressed = options.maxDecompressedBytes ?? 4 * 1024 * 1024;\n\n if (typeof payload === 'string') {\n if (payload.length > maxSource) {\n throw new Error(`源码过大（>${maxSource} 字符）`);\n }\n return stripBom(payload);\n }\n\n let bytes: Uint8Array;\n if (isUint8Array(payload)) {\n bytes = payload;\n } else if (payload instanceof ArrayBuffer) {\n bytes = new Uint8Array(payload);\n } else {\n throw new TypeError(\n `不支持的 payload 类型：${Object.prototype.toString.call(payload)}`,\n );\n }\n\n if (bytes.byteLength > maxSource) {\n throw new Error(`请求体过大（>${maxSource} 字节）`);\n }\n\n const compression = detectCompression(bytes);\n if (compression === 'gzip') {\n bytes = await gunzipBytes(bytes);\n } else if (compression === 'deflate') {\n bytes = await inflateBytes(bytes);\n }\n\n if (bytes.byteLength > maxDecompressed) {\n throw new Error(`解压后过大（>${maxDecompressed} 字节）`);\n }\n\n return stripBom(TEXT_DECODER.decode(bytes));\n}\n\n/* ============================================================================\n * §4 依赖提取\n * ========================================================================== */\n\n/** Node 内置模块名（无 node: 前缀） */\nconst NODE_BUILTINS: ReadonlySet = new Set([\n 'assert', 'assert/strict', 'async_hooks', 'buffer', 'child_process',\n 'cluster', 'console', 'constants', 'crypto', 'dgram',\n 'diagnostics_channel', 'dns', 'dns/promises', 'domain', 'events',\n 'fs', 'fs/promises', 'http', 'http2', 'https', 'inspector', 'module',\n 'net', 'os', 'path', 'path/posix', 'path/win32', 'perf_hooks',\n 'process', 'punycode', 'querystring', 'readline', 'readline/promises',\n 'repl', 'stream', 'stream/consumers', 'stream/promises', 'stream/web',\n 'string_decoder', 'sys', 'timers', 'timers/promises', 'tls',\n 'trace_events', 'tty', 'url', 'util', 'util/types', 'v8', 'vm', 'wasi',\n 'worker_threads', 'zlib',\n]);\n\ninterface ImportPattern {\n readonly regex: RegExp;\n /** 捕获组里 specifier 的索引 */\n readonly specGroup: number;\n /** 捕获组里引号字符的索引 */\n readonly quoteGroup: number;\n}\n\nconst IMPORT_PATTERNS: readonly ImportPattern[] = [\n { regex: /\\bimport\\s*\\(\\s*(['\"`])([^'\"`]+)\\1\\s*\\)/g, specGroup: 2, quoteGroup: 1 },\n { regex: /\\brequire\\s*\\(\\s*(['\"`])([^'\"`]+)\\1\\s*\\)/g, specGroup: 2, quoteGroup: 1 },\n { regex: /\\bimport\\s+(?:type\\s+)?[^'\";]*?\\bfrom\\s*(['\"`])([^'\"`]+)\\1/g, specGroup: 2, quoteGroup: 1 },\n { regex: /\\bimport\\s+(['\"`])([^'\"`]+)\\1/g, specGroup: 2, quoteGroup: 1 },\n { regex: /\\bexport\\s+(?:type\\s+)?[^'\";]*?\\bfrom\\s*(['\"`])([^'\"`]+)\\1/g, specGroup: 2, quoteGroup: 1 },\n];\n\ninterface ImportSpecifier {\n readonly raw: string;\n readonly index: number;\n readonly length: number;\n}\n\nfunction isExternalSpecifier(spec: string): boolean {\n if (!spec) return false;\n if (spec.startsWith('.') || spec.startsWith('/') || spec.startsWith('#')) return false;\n if (spec.startsWith('node:') || spec.startsWith('npm:') || spec.startsWith('jsr:') ||\n spec.startsWith('bun:') || spec.startsWith('data:') || spec.startsWith('blob:')) return false;\n if (/^[a-z][a-z\\d+\\-.]*:\\/\\//i.test(spec)) return false;\n if (NODE_BUILTINS.has(spec)) return false;\n return true;\n}\n\nfunction packageNameOf(spec: string): string {\n if (spec.startsWith('@')) {\n const m = /^(@[^/]+\\/[^/@]+)/.exec(spec);\n return m ? m[1] : spec;\n }\n return spec.split('/')[0].split('@')[0];\n}\n\nfunction collectSpecifiers(source: string): readonly ImportSpecifier[] {\n const out: ImportSpecifier[] = [];\n for (const pattern of IMPORT_PATTERNS) {\n const re = new RegExp(pattern.regex.source, pattern.regex.flags);\n let m: RegExpExecArray | null;\n while ((m = re.exec(source)) !== null) {\n const spec = m[pattern.specGroup];\n if (!spec) continue;\n // 计算 specifier 在 source 中的绝对位置\n const quote = m[pattern.quoteGroup];\n const specOffset = m.index + m[0].indexOf(quote + spec + quote) + 1;\n out.push({ raw: spec, index: specOffset, length: spec.length });\n }\n }\n return out;\n}\n\nexport function extractDependencies(source: string): readonly string[] {\n const pkgs = new Set();\n for (const { raw } of collectSpecifiers(source)) {\n if (!isExternalSpecifier(raw)) continue;\n pkgs.add(packageNameOf(raw));\n }\n return Object.freeze([...pkgs].sort());\n}\n\n/* ============================================================================\n * §5 源码形态判断\n * ========================================================================== */\n\nfunction looksLikeCommonJS(source: string): boolean {\n const hasStaticEsm = /^[ \\t]*(?:import|export)\\s/m.test(source);\n const hasCjs =\n /\\brequire\\s*\\(/.test(source) ||\n /\\bmodule\\.exports\\b/.test(source) ||\n /\\bexports\\s*\\./.test(source);\n return hasCjs && !hasStaticEsm;\n}\n\nfunction looksLikeTypeScript(source: string): boolean {\n return (\n /^\\s*import\\s+type\\s/m.test(source) ||\n /^\\s*export\\s+type\\s/m.test(source) ||\n /^\\s*interface\\s+[A-Za-z_$]/m.test(source) ||\n /^\\s*type\\s+[A-Za-z_$]\\w*\\s*=/m.test(source) ||\n /^\\s*enum\\s+[A-Za-z_$]/m.test(source) ||\n /^\\s*declare\\s+/m.test(source) ||\n /\\)\\s*:\\s*[A-Za-z_$][\\w$<>[\\]|&.\\s]*\\s*(?:=>|\\{)/.test(source) ||\n /\\bas\\s+(?:const|unknown|[A-Z][\\w$<>[\\]|&.]*)\\b/.test(source) ||\n /\\bsatisfies\\s+[A-Za-z_$]/m.test(source)\n );\n}\n\n/* ============================================================================\n * §6 Deno 侧：导入重写\n * ========================================================================== */\n\nexport interface DenoRewriteOptions {\n /** 使用 npm: 前缀（默认）还是 esm.sh；Val Town 两者都能用，npm: 更省流量 */\n readonly packageStrategy?: 'npm' | 'esm.sh';\n}\n\nfunction rewriteSpecifierForDeno(\n spec: string,\n strategy: 'npm' | 'esm.sh',\n): string {\n if (!spec) return spec;\n if (spec.startsWith('.') || spec.startsWith('/')) return spec;\n if (spec.startsWith('node:') || spec.startsWith('npm:') ||\n spec.startsWith('jsr:') || spec.startsWith('bun:') ||\n spec.startsWith('data:') || spec.startsWith('blob:')) return spec;\n if (/^[a-z][a-z\\d+\\-.]*:\\/\\//i.test(spec)) return spec;\n if (NODE_BUILTINS.has(spec)) return `node:${spec}`;\n if (strategy === 'esm.sh') return `https://esm.sh/${spec}?target=deno`;\n return `npm:${spec}`;\n}\n\nexport function rewriteImportsForDeno(\n source: string,\n options: DenoRewriteOptions = {},\n): string {\n const strategy = options.packageStrategy ?? 'npm';\n const specs = collectSpecifiers(source);\n if (specs.length === 0) return source;\n\n // 按位置倒序替换，避免索引漂移\n const sorted = [...specs].sort((a, b) => b.index - a.index);\n let out = source;\n for (const s of sorted) {\n const replacement = rewriteSpecifierForDeno(s.raw, strategy);\n if (replacement === s.raw) continue;\n out = out.slice(0, s.index) + replacement + out.slice(s.index + s.length);\n }\n return out;\n}\n\n/* ============================================================================\n * §7 Node / Bun 侧：子进程辅助（安装依赖）\n * ========================================================================== */\n\ninterface ProcessOutcome {\n readonly code: number | null;\n readonly stdout: string;\n readonly stderr: string;\n}\n\ninterface RunProcessOptions {\n readonly cwd: string;\n readonly timeoutMs: number;\n readonly shell?: boolean;\n readonly env?: Record;\n}\n\nasync function loadChildProcess(): Promise {\n return await import('node:child_process');\n}\n\nfunction runProcess(\n cmd: string,\n args: readonly string[],\n opts: RunProcessOptions,\n): Promise {\n return new Promise((resolve) => {\n let settled = false;\n let child: import('node:child_process').ChildProcess | undefined;\n\n const finish = (outcome: ProcessOutcome): void => {\n if (settled) return;\n settled = true;\n clearTimeout(timer);\n resolve(outcome);\n };\n\n const timer = setTimeout(() => {\n try { child?.kill('SIGKILL'); } catch { /* ignore */ }\n }, opts.timeoutMs);\n\n void (async () => {\n const { spawn } = await loadChildProcess();\n child = spawn(cmd, [...args], {\n cwd: opts.cwd,\n shell: opts.shell ?? false,\n env: { ...process.env, ...opts.env },\n stdio: ['ignore', 'pipe', 'pipe'],\n windowsHide: true,\n });\n\n let stdout = '';\n let stderr = '';\n child.stdout?.on('data', (c: Buffer) => { stdout += c.toString('utf8'); });\n child.stderr?.on('data', (c: Buffer) => { stderr += c.toString('utf8'); });\n child.on('error', (err) => {\n stderr += String(err.message);\n finish({ code: -1, stdout, stderr });\n });\n child.on('close', (code) => {\n finish({ code, stdout, stderr });\n });\n })();\n });\n}\n\n/* ============================================================================\n * §8 Node / Bun 侧：依赖安装\n * ========================================================================== */\n\nasync function loadFs(): Promise {\n return await import('node:fs');\n}\n\nasync function loadFsp(): Promise {\n return await import('node:fs/promises');\n}\n\nasync function loadPath(): Promise {\n return await import('node:path');\n}\n\nasync function loadOs(): Promise {\n return await import('node:os');\n}\n\nasync function loadCrypto(): Promise {\n return await import('node:crypto');\n}\n\nasync function loadUrl(): Promise {\n return await import('node:url');\n}\n\nconst inflightInstalls = new Map>();\n\nasync function installDependencies(\n runtime: Exclude,\n deps: readonly string[],\n installDir: string,\n timeoutMs: number,\n registry: string | undefined,\n): Promise {\n const fsp = await loadFsp();\n const path = await loadPath();\n\n const pkg = {\n name: 'remote-exec-sandbox',\n version: '0.0.0',\n private: true,\n type: 'module' as const,\n dependencies: Object.fromEntries(deps.map((d) => [d, 'latest'])),\n };\n\n await fsp.writeFile(\n path.join(installDir, 'package.json'),\n JSON.stringify(pkg, null, 2),\n 'utf8',\n );\n\n const isWindows = process.platform === 'win32';\n\n let cmd: string;\n let args: string[];\n if (runtime === 'bun') {\n cmd = 'bun';\n args = ['install'];\n if (registry) args.push('--registry', registry);\n } else {\n cmd = 'npm';\n args = [\n 'install',\n '--no-audit',\n '--no-fund',\n '--loglevel=error',\n '--prefer-offline',\n '--no-package-lock',\n ];\n if (registry) args.push('--registry', registry);\n }\n\n const out = await runProcess(cmd, args, {\n cwd: installDir,\n timeoutMs,\n shell: isWindows,\n });\n\n if (out.code !== 0) {\n throw new Error(\n `依赖安装失败（${runtime} / exit=${out.code}）：\\n${out.stderr || out.stdout}`,\n );\n }\n}\n\nasync function ensureDependencies(\n runtime: Exclude,\n deps: readonly string[],\n depsDir: string,\n timeoutMs: number,\n registry: string | undefined,\n refresh: boolean,\n): Promise {\n const fsp = await loadFsp();\n const path = await loadPath();\n\n const marker = path.join(depsDir, '.ready');\n const wanted = deps.join(',');\n\n if (!refresh) {\n const content = await fsp.readFile(marker, 'utf8').catch(() => null);\n if (content === wanted) return;\n }\n\n const existing = inflightInstalls.get(depsDir);\n if (existing) return existing;\n\n const task = (async () => {\n await installDependencies(runtime, deps, depsDir, timeoutMs, registry);\n await fsp.writeFile(marker, wanted, 'utf8');\n })().finally(() => {\n inflightInstalls.delete(depsDir);\n });\n\n inflightInstalls.set(depsDir, task);\n return task;\n}\n\n/* ============================================================================\n * §9 Node / Bun 侧：worker 源码与执行\n * ========================================================================== */\n\nconst WORKER_SOURCE: string = `\nimport { parentPort, workerData } from 'node:worker_threads';\nimport { pathToFileURL } from 'node:url';\n\nconst { entryFile, exportName, args, blockExit, cjs } = workerData;\n\nfunction post(payload) {\n try {\n parentPort.postMessage(payload);\n } catch {\n parentPort.postMessage({\n ok: payload.ok,\n result: payload.result === undefined ? undefined : String(payload.result),\n error: payload.error,\n uncloneable: true,\n });\n }\n}\n\nasync function main() {\n if (blockExit) {\n try {\n process.exit = ((code) => {\n throw new Error('process.exit(' + code + ') 被拦截（高可用保护）');\n });\n } catch { /* 某些运行时 process.exit 不可写，忽略 */ }\n }\n\n const base = pathToFileURL(entryFile).href;\n const url = base + '?t=' + Date.now() + '-' + Math.random();\n const mod = await import(url);\n\n let target = null;\n if (exportName) {\n target = mod[exportName];\n if (typeof target !== 'function') {\n throw new Error('导出 \"' + exportName + '\" 不是函数');\n }\n } else {\n target = [mod.default, mod.main, mod.run].find((v) => typeof v === 'function') || null;\n }\n\n if (!target) return mod.default ?? null;\n return await target(...(args ?? []));\n}\n\nmain().then(\n (result) => post({ ok: true, result }),\n (err) => post({\n ok: false,\n error: {\n message: err && err.message ? String(err.message) : String(err),\n stack: err && err.stack ? String(err.stack) : undefined,\n },\n }),\n);\n`;\n\ninterface WorkerOutcome {\n readonly ok: boolean;\n readonly result?: unknown;\n readonly error?: { readonly message: string; readonly stack?: string };\n readonly timedOut: boolean;\n readonly uncloneable?: boolean;\n}\n\ninterface RunWorkerParams {\n readonly runnerFile: string;\n readonly entryFile: string;\n readonly exportName: string | undefined;\n readonly args: readonly unknown[];\n readonly timeoutMs: number;\n readonly blockExit: boolean;\n readonly maxOldGenerationSizeMb: number;\n readonly cjs: boolean;\n}\n\nasync function runInWorker(params: RunWorkerParams): Promise {\n const { Worker } = await import('node:worker_threads');\n\n return new Promise((resolve) => {\n let settled = false;\n let timedOut = false;\n\n const worker = new Worker(params.runnerFile, {\n workerData: {\n entryFile: params.entryFile,\n exportName: params.exportName ?? '',\n args: params.args ?? [],\n blockExit: params.blockExit,\n cjs: params.cjs,\n },\n resourceLimits: {\n maxOldGenerationSizeMb: params.maxOldGenerationSizeMb,\n maxYoungGenerationSizeMb: Math.max(16, params.maxOldGenerationSizeMb >> 3),\n },\n });\n\n const finish = (outcome: WorkerOutcome): void => {\n if (settled) return;\n settled = true;\n clearTimeout(timer);\n worker.terminate().catch(() => { /* ignore */ });\n resolve(outcome);\n };\n\n const timer = setTimeout(() => {\n timedOut = true;\n finish({\n ok: false,\n timedOut: true,\n error: { message: `执行超时（${params.timeoutMs}ms），worker 已被终止` },\n });\n }, params.timeoutMs);\n\n worker.on('message', (msg: unknown) => {\n if (msg && typeof msg === 'object' && 'ok' in (msg as Record)) {\n const m = msg as { ok: boolean; result?: unknown; error?: WorkerOutcome['error']; uncloneable?: boolean };\n finish({ ok: m.ok, result: m.result, error: m.error, timedOut: false, uncloneable: m.uncloneable });\n }\n });\n\n worker.on('error', (err: Error) => {\n finish({\n ok: false,\n timedOut,\n error: { message: err.message ?? String(err), stack: err.stack },\n });\n });\n\n worker.on('exit', (code: number) => {\n if (code !== 0) {\n finish({\n ok: false,\n timedOut,\n error: { message: `worker 异常退出，code=${code}` },\n });\n } else {\n finish({\n ok: false,\n timedOut,\n error: { message: 'worker 未返回结果（可能被显式 exit 或未导出内容）' },\n });\n }\n });\n });\n}\n\n/* ============================================================================\n * §10 Node / Bun 执行分支\n * ========================================================================== */\n\ninterface RuntimeBranchResult {\n readonly outcome: WorkerOutcome;\n readonly workDir: string;\n}\n\nasync function executeOnNodeLike(\n runtime: Exclude,\n source: string,\n deps: readonly string[],\n options: ExecuteOptions,\n): Promise {\n const [fsp, os, path, crypto] = await Promise.all([\n loadFsp(), loadOs(), loadPath(), loadCrypto(),\n ]);\n\n const timeoutMs = options.timeoutMs ?? 15_000;\n const installTimeoutMs = options.installTimeoutMs ?? 120_000;\n const maxOldGenerationSizeMb = options.maxOldGenerationSizeMb ?? 512;\n const baseDir = options.depsCacheDir ?? path.join(os.tmpdir(), 'remote-exec-deps');\n\n // 依赖集合哈希作为缓存键\n const cacheKey = crypto\n .createHash('sha1')\n .update(deps.join('|') || 'no-deps')\n .digest('hex')\n .slice(0, 16);\n const depsDir = path.join(baseDir, cacheKey);\n await fsp.mkdir(depsDir, { recursive: true });\n\n // 安装依赖\n if (deps.length > 0 && options.refreshDeps !== undefined || deps.length > 0) {\n await ensureDependencies(\n runtime,\n deps,\n depsDir,\n installTimeoutMs,\n options.registry,\n options.refreshDeps ?? false,\n );\n }\n\n // 写入口文件（放在 depsDir 子目录，向上能找到 node_modules）\n const workDir = path.join(depsDir, `.exec-${crypto.randomUUID()}`);\n await fsp.mkdir(workDir, { recursive: true });\n\n const cjs = looksLikeCommonJS(source);\n const isTS = options.language === 'ts' ||\n (options.language !== 'js' && looksLikeTypeScript(source));\n const ext = isTS ? (cjs ? '.cts' : '.mts') : (cjs ? '.cjs' : '.mjs');\n\n const entryFile = path.join(workDir, `entry${ext}`);\n const runnerFile = path.join(workDir, '__runner.mjs');\n\n await Promise.all([\n fsp.writeFile(entryFile, source, 'utf8'),\n fsp.writeFile(runnerFile, WORKER_SOURCE, 'utf8'),\n ]);\n\n const outcome = await runInWorker({\n runnerFile,\n entryFile,\n exportName: options.exportName,\n args: options.args ?? [],\n timeoutMs,\n blockExit: options.blockExit ?? true,\n maxOldGenerationSizeMb,\n cjs,\n });\n\n if (!options.keepWorkDir) {\n fsp.rm(workDir, { recursive: true, force: true }).catch(() => { /* ignore */ });\n }\n\n return { outcome, workDir };\n}\n\n/* ============================================================================\n * §11 Deno 执行分支\n * ========================================================================== */\n\ninterface DenoBranchResult {\n readonly outcome: WorkerOutcome;\n}\n\nasync function executeOnDeno(\n source: string,\n deps: readonly string[],\n options: ExecuteOptions,\n): Promise {\n const timeoutMs = options.timeoutMs ?? 15_000;\n\n // 重写 import specifier\n const rewritten = rewriteImportsForDeno(source, { packageStrategy: 'npm' });\n\n // 语言判定（Deno 对 TS 原生支持，但 data URL 需要正确 MIME）\n const isTS = options.language === 'ts' ||\n (options.language !== 'js' && looksLikeTypeScript(source));\n const mime = isTS ? 'application/typescript' : 'application/javascript';\n\n const bytes = TEXT_ENCODER.encode(rewritten);\n const dataUrl = `data:${mime};base64,${toBase64(bytes)}`;\n\n let timedOut = false;\n let timer: ReturnType | undefined;\n\n const timeoutPromise = new Promise((_, reject) => {\n timer = setTimeout(() => {\n timedOut = true;\n reject(new Error(`执行超时（${timeoutMs}ms）`));\n }, timeoutMs);\n });\n\n try {\n const mod = await Promise.race>>([\n import(/* @vite-ignore */ dataUrl) as Promise>,\n timeoutPromise,\n ]);\n\n let target: unknown = null;\n if (options.exportName) {\n target = mod[options.exportName];\n if (typeof target !== 'function') {\n throw new Error(`导出 \"${options.exportName}\" 不是函数`);\n }\n } else {\n const candidates = [mod['default'], mod['main'], mod['run']];\n target = candidates.find((v) => typeof v === 'function') ?? null;\n }\n\n const result = target\n ? await (target as (...a: readonly unknown[]) => unknown)(...(options.args ?? []))\n : (mod['default'] ?? mod);\n\n return {\n outcome: { ok: true, result, timedOut: false },\n };\n } catch (err) {\n const e = err as Error;\n return {\n outcome: {\n ok: false,\n timedOut,\n error: { message: e.message ?? String(e), stack: e.stack },\n },\n };\n } finally {\n if (timer) clearTimeout(timer);\n }\n}\n\n/* ============================================================================\n * §12 统一入口 executeRemote\n * ========================================================================== */\n\nexport async function executeRemote(\n payload: RemotePayload,\n options: ExecuteOptions = {},\n): Promise {\n const runtime = detectRuntime();\n const startedAt = Date.now();\n\n // 1. 解码\n let source: string;\n try {\n source = await decodePayload(payload, options);\n } catch (err) {\n const e = err as Error;\n return {\n ok: false,\n runtime,\n error: { kind: 'payload', message: e.message ?? String(e), stack: e.stack },\n dependencies: Object.freeze([]),\n durationMs: Date.now() - startedAt,\n timedOut: false,\n };\n }\n\n // 2. 依赖提取\n const deps = extractDependencies(source);\n\n // 3. 分派\n try {\n if (runtime === 'deno') {\n const { outcome } = await executeOnDeno(source, deps, options);\n return {\n ok: outcome.ok,\n runtime,\n result: outcome.result,\n error: outcome.error\n ? { kind: outcome.timedOut ? 'timeout' : 'runtime', message: outcome.error.message, stack: outcome.error.stack }\n : undefined,\n dependencies: deps,\n durationMs: Date.now() - startedAt,\n timedOut: outcome.timedOut,\n };\n } else {\n const { outcome, workDir } = await executeOnNodeLike(runtime, source, deps, options);\n return {\n ok: outcome.ok,\n runtime,\n result: outcome.result,\n error: outcome.error\n ? { kind: outcome.timedOut ? 'timeout' : 'runtime', message: outcome.error.message, stack: outcome.error.stack }\n : undefined,\n dependencies: deps,\n durationMs: Date.now() - startedAt,\n timedOut: outcome.timedOut,\n workDir,\n };\n }\n } catch (err) {\n const e = err as Error;\n const kind: ErrorKind = /install/i.test(e.message) ? 'install' : 'runtime';\n return {\n ok: false,\n runtime,\n error: { kind, message: e.message ?? String(e), stack: e.stack },\n dependencies: deps,\n durationMs: Date.now() - startedAt,\n timedOut: false,\n };\n }\n}\n\n/** 语义化别名 */\nexport const runRemoteCode = executeRemote;\n\n/* ============================================================================\n * §13 HTTP 处理器\n * ========================================================================== */\n\nconst DEFAULT_TIMEOUT_MS = 15_000;\n\nfunction jsonResponse(data: unknown, status = 200): Response {\n try {\n return Response.json(data as Record, { status });\n } catch {\n return Response.json(\n {\n ok: false,\n error: {\n kind: 'runtime',\n message: '返回值无法序列化为 JSON',\n preview: String(data).slice(0, 500),\n },\n },\n { status: 500 },\n );\n }\n}\n\nfunction parseArgs(raw: string | null): readonly unknown[] {\n if (!raw) return Object.freeze([]);\n try {\n const parsed: unknown = JSON.parse(raw);\n return Array.isArray(parsed) ? Object.freeze(parsed) : Object.freeze([]);\n } catch {\n return Object.freeze([]);\n }\n}\n\nfunction parseTimeout(raw: string | null): number {\n if (!raw) return DEFAULT_TIMEOUT_MS;\n const n = Number(raw);\n return Number.isFinite(n) && n > 0 ? n : DEFAULT_TIMEOUT_MS;\n}\n\nasync function handleEval(req: Request, url: URL): Promise {\n if (req.method !== 'POST') {\n return jsonResponse({ ok: false, error: { kind: 'runtime', message: '只支持 POST' } }, 405);\n }\n\n let source: string;\n try {\n const buf = new Uint8Array(await req.arrayBuffer());\n source = await decodePayload(buf, { maxSourceBytes: 1 * 1024 * 1024, maxDecompressedBytes: 4 * 1024 * 1024 });\n } catch (err) {\n const e = err as Error;\n return jsonResponse(\n { ok: false, error: { kind: 'payload', message: e.message ?? String(e) } },\n 400,\n );\n }\n\n if (!source.trim()) {\n return jsonResponse(\n { ok: false, error: { kind: 'payload', message: '请求体为空' } },\n 400,\n );\n }\n\n const options: ExecuteOptions = {\n timeoutMs: parseTimeout(url.searchParams.get('timeout')),\n exportName: url.searchParams.get('export') ?? undefined,\n args: parseArgs(url.searchParams.get('args')),\n };\n\n const outcome = await executeRemote(source, options);\n\n // 若用户代码本身返回 Response，原样透传\n if (outcome.ok && outcome.result instanceof Response) {\n return outcome.result;\n }\n\n return jsonResponse(\n {\n ok: outcome.ok,\n runtime: outcome.runtime,\n result: outcome.ok ? outcome.result : undefined,\n error: outcome.ok ? undefined : outcome.error,\n dependencies: outcome.dependencies,\n durationMs: outcome.durationMs,\n timedOut: outcome.timedOut,\n },\n outcome.ok ? 200 : 500,\n );\n}\n\nexport async function handleRequest(req: Request): Promise {\n const url = new URL(req.url);\n\n if (url.pathname === '/eval') {\n return handleEval(req, url);\n }\n\n return new Response('Service Unavailable', {\n status: 503,\n headers: {\n 'content-type': 'text/plain; charset=utf-8',\n 'cache-control': 'no-store',\n 'retry-after': '60',\n },\n });\n}\n\n/* ============================================================================\n * §14 Val Town / Deno Deploy 入口\n * ========================================================================== */\n\nexport default async function (req: Request): Promise {\n return handleRequest(req);\n}",[132],"pulls","branches",1,"forks","envVars",{"_147":59,"_149":59},"connections",{"_147":59,"_148":59},"count","unfilledCount","emptyCount",{"_41":131,"_32":132,"_30":54,"_126":-5,"_39":40,"_38":133,"_127":26,"_36":156,"_13":135,"_33":136,"_34":137,"_23":26,"_129":43,"_153":157,"_27":158},{"_41":125,"_32":28,"_30":31,"_126":-5,"_39":40,"_38":14,"_127":26,"_36":152,"_13":59,"_33":20,"_34":35,"_23":26,"_129":-5,"_153":154,"_27":155},["D",1789173715195],"children",[],[28],["D",1789171851116],[],[132],["D",1789171507287],{"_93":92,"_100":96},{"_93":92,"_94":-5,"_95":96,"_18":52,"_97":98,"_99":26},{"_13":82,"_32":83,"_41":40,"_84":42,"_85":-5,"_86":-5,"_87":-5,"_88":-5,"_89":-5,"_90":43,"_91":92},"ctx",{"_75":-5,"_120":196,"_197":198,"_199":200,"_201":26,"_202":26,"_203":26,"_204":24,"_205":-5,"_206":-7,"_207":-7,"_208":59,"_209":26,"_210":26,"_211":-5,"_212":26,"_213":26,"_214":26,"_215":-5},"ENV",{"_167":168,"_169":170,"_171":83,"_172":173,"_174":175,"_176":177,"_178":179,"_180":181,"_182":183,"_184":185,"_186":187,"_188":189,"_190":191,"_192":193,"_194":195},"REACT_APP_SENTRY_DSN","https://586020d86f05489db63a554690acf1e9@o1398359.ingest.sentry.io/6724499","RENDER_GIT_COMMIT","e87eb04e707cf64e7e532c8e8ec395f209e17f15","RENDER_GIT_BRANCH","POSTHOG_API_TOKEN","phc_nmoyuAkStEZuUp69rYlg1DZgrIt19Gx0Y4Hwf8tGgJP","POSTHOG_API_HOST","https://wart.val.town","WEB_API_TEMPLATE","https://{val}.web.val.run","APP_URL","https://www.val.town","MODULE_URL","https://esm.town","VANITY_WEB_API_TEMPLATE","https://{label}.val.run/","DENOLS_URL","https://lsp.val.town","NODE_ENV","production","CLOUDFLARE_TURNSTILE_SITE_KEY","0x4AAAAAACtaIZJH7s9rBMZ6","GOOGLE_CLIENT_ID","875989696899-jtsqkhlbdv5jrlsk8631p7ipjg3c6o62.apps.googleusercontent.com","STRIPE_PUBLISHABLE_KEY","pk_live_51N2zvWEpZTTLipIkVEwXrUG9AT0yeOOEYxszarZT1jpsZV58Ly6wlg3SltZpHN26CUalOBmUSY7adQRQiSkCZz2500qSXNkf8Y","API_URL","https://api.val.town",[],"preferencesKeybindings","default","preferencesTheme","light","preferencesFixers","preferencesCopilot","preferencesSelectionAi","preferencesCloseBrackets","preferencesChatPanelState","preferencesDprint","preferencesDenofmt","notificationCount","flagDenols","isBusinessOrgMember","businessOrgHandle","isBusinessOrgAdmin","isHigherTownieTier","navCollapsed","currentOrgId"]

Diff · v6