diff --git a/README.md b/README.md
index 5869bb9..db91388 100644
--- a/README.md
+++ b/README.md
@@ -33,6 +33,12 @@ Sub-Store 后端的 Cloudflare Workers 移植版
 - **完整功能**：复用原始后端全部业务逻辑（订阅管理、格式转换、下载、预览等）
 - **预编译解析器**：peggy 文法在构建时编译，避免运行时 eval()
 
+## 相较原仓库的新增功能
+
+- **脚本过滤 / 操作支持**：通过 QuickJS WASM 沙箱在 Workers 运行时执行用户脚本，支持 Script Filter 和 Script Operator（含快捷脚本与函数式脚本），弥补了原仓库因 Workers 禁止 `eval` / `new Function` 而无法使用脚本操作的限制
+- **脚本引擎可切换**：`wrangler.toml` 中通过 `[vars] SCRIPT_ENGINE` 控制脚本引擎，设为 `"quickjs"` 启用，未设置则禁用并返回引导提示
+- **OpenAPI 适配层补全**：修复 Workers 版 `OpenAPI` 缺失 `warn` 方法导致解析订阅时 `I.warn is not a function` 报错的问题
+
 ## 目录
 
 - [部署](#部署)（核心流程，建议从这里开始）
@@ -586,6 +592,7 @@ https://raw.githubusercontent.com/Yu9191/sub-store-workers/main/surge/SubStorePa
 ## 致谢
 
 基于 [Sub-Store](https://github.com/sub-store-org/Sub-Store) 项目，感谢原作者及所有贡献者。
+反馈请在 [LINUX DO](https://linux.do) 站内反馈
 
 ## 许可证
 
diff --git a/esbuild.js b/esbuild.js
index e7c53b4..78eb6fd 100644
--- a/esbuild.js
+++ b/esbuild.js
@@ -114,7 +114,12 @@ const evalRewritePlugin = {
                 contents = contents.replace(
                     /function createDynamicFunction\(name, script, \$arguments, \$options\) \{[\s\S]*?\n\}/,
                     `function createDynamicFunction(name, script, $arguments, $options) {
-    throw new Error('Script Operator is not supported in Cloudflare Workers because dynamic code execution through eval/new Function is disabled. Use built-in filters/operators, mihomo YAML patch, or an external trusted execution service.');
+    const engine = globalThis.__workerEnv?.SCRIPT_ENGINE;
+    if (engine === 'quickjs') {
+        const { createScriptFunction } = require('@/vendor/quickjs-executor');
+        return createScriptFunction(script, name, $arguments, $options);
+    }
+    throw new Error('Script Operator is not supported. Set SCRIPT_ENGINE="quickjs" in wrangler.toml [vars] to enable. Alternative: use built-in filters/operators, mihomo YAML patch, or an external trusted execution service.');
 }`,
                 );
             }
@@ -231,6 +236,7 @@ const nodeStubPlugin = {
             'https',
             'os',
             'crypto',
+            'dgram',
         ];
 
         for (const mod of stubs) {
@@ -274,6 +280,10 @@ const nodeStubPlugin = {
         target: 'es2022',
         outfile: path.join(__dirname, 'dist', 'worker.js'),
         plugins: [aliasPlugin, peggyPrecompilePlugin, evalRewritePlugin, nodeStubPlugin],
+        loader: {
+            '.wasm': 'copy',
+        },
+        assetNames: '[name]',
         define: {
             'process.env.NODE_ENV': '"production"',
         },
diff --git a/package-lock.json b/package-lock.json
index 8d54faf..66367e9 100644
--- a/package-lock.json
+++ b/package-lock.json
@@ -8,6 +8,7 @@
       "name": "sub-store-workers",
       "version": "1.1.0",
       "dependencies": {
+        "@jitl/quickjs-wasmfile-release-sync": "^0.32.0",
         "age-encryption": "^0.3.0",
         "buffer": "^6.0.3",
         "ip-address": "^9.0.5",
@@ -18,8 +19,10 @@
         "ms": "^2.1.3",
         "nanoid": "^3.3.3",
         "peggy": "^2.0.1",
+        "quickjs-emscripten": "^0.32.0",
         "semver": "^7.6.3",
-        "static-js-yaml": "^1.0.0"
+        "static-js-yaml": "^1.0.0",
+        "yaml": "^2.9.0"
       },
       "devDependencies": {
         "esbuild": "^0.19.8",
@@ -1093,6 +1096,48 @@
         "url": "https://opencollective.com/libvips"
       }
     },
+    "node_modules/@jitl/quickjs-ffi-types": {
+      "version": "0.32.0",
+      "resolved": "https://registry.npmmirror.com/@jitl/quickjs-ffi-types/-/quickjs-ffi-types-0.32.0.tgz",
+      "integrity": "sha512-v9T+GQpmk43VDJ7d72sf0Nexhk+ArvtUihW27dy7lqAl0zBObFKtSBBIm5RBjwIhE8VwsPPm9PNuvPvNqLWUEg==",
+      "license": "MIT"
+    },
+    "node_modules/@jitl/quickjs-wasmfile-debug-asyncify": {
+      "version": "0.32.0",
+      "resolved": "https://registry.npmmirror.com/@jitl/quickjs-wasmfile-debug-asyncify/-/quickjs-wasmfile-debug-asyncify-0.32.0.tgz",
+      "integrity": "sha512-EX8zbXwGqCgAE764M+qvkHtyXDi/FUoMBea0JnES7vCM3P7a2+EOZOjGv85wtZ2sJhI1oJ+nekmqpOODFDY+hw==",
+      "license": "MIT",
+      "dependencies": {
+        "@jitl/quickjs-ffi-types": "0.32.0"
+      }
+    },
+    "node_modules/@jitl/quickjs-wasmfile-debug-sync": {
+      "version": "0.32.0",
+      "resolved": "https://registry.npmmirror.com/@jitl/quickjs-wasmfile-debug-sync/-/quickjs-wasmfile-debug-sync-0.32.0.tgz",
+      "integrity": "sha512-LeYWrPGC1uNCTBWvibo3ZLJj0CSVNYUXvJpXMCmuQ5Sap2cCACc3uvGvYV4homHHBAzfw5akoTqMMS4YFRtw+Q==",
+      "license": "MIT",
+      "dependencies": {
+        "@jitl/quickjs-ffi-types": "0.32.0"
+      }
+    },
+    "node_modules/@jitl/quickjs-wasmfile-release-asyncify": {
+      "version": "0.32.0",
+      "resolved": "https://registry.npmmirror.com/@jitl/quickjs-wasmfile-release-asyncify/-/quickjs-wasmfile-release-asyncify-0.32.0.tgz",
+      "integrity": "sha512-3oSwPfja12ICz4aIblB58cuY8JlEq5Txt8Cut4VLo+LH47QN+mzCnSgnbB03hWzg1LBcc+VyyI9UOag7a1NF+Q==",
+      "license": "MIT",
+      "dependencies": {
+        "@jitl/quickjs-ffi-types": "0.32.0"
+      }
+    },
+    "node_modules/@jitl/quickjs-wasmfile-release-sync": {
+      "version": "0.32.0",
+      "resolved": "https://registry.npmmirror.com/@jitl/quickjs-wasmfile-release-sync/-/quickjs-wasmfile-release-sync-0.32.0.tgz",
+      "integrity": "sha512-BKNDI/TPBfGlLNGYpLrhcDGXmIk4xHm4MRAisOBnOzpXVn9HZWsfmMAc9WMBrAHjvvds6HOikKeaOBKdPdpVrg==",
+      "license": "MIT",
+      "dependencies": {
+        "@jitl/quickjs-ffi-types": "0.32.0"
+      }
+    },
     "node_modules/@jridgewell/resolve-uri": {
       "version": "3.1.2",
       "resolved": "https://registry.npmmirror.com/@jridgewell/resolve-uri/-/resolve-uri-3.1.2.tgz",
@@ -1829,6 +1874,31 @@
       "integrity": "sha512-3ouUOpQhtgrbOa17J7+uxOTpITYWaGP7/AhoR3+A+/1e9skrzelGi/dXzEYyvbxubEF6Wn2ypscTKiKJFFn1ag==",
       "license": "MIT"
     },
+    "node_modules/quickjs-emscripten": {
+      "version": "0.32.0",
+      "resolved": "https://registry.npmmirror.com/quickjs-emscripten/-/quickjs-emscripten-0.32.0.tgz",
+      "integrity": "sha512-So0Sqw869y/S2oE3Nuc0uT3Dhqgvsj8FSrwBdsuTosVsG8ME5/OcudU1GxsrIFdFABgy17GHnTVO9TYV/bLQcA==",
+      "license": "MIT",
+      "dependencies": {
+        "@jitl/quickjs-wasmfile-debug-asyncify": "0.32.0",
+        "@jitl/quickjs-wasmfile-debug-sync": "0.32.0",
+        "@jitl/quickjs-wasmfile-release-asyncify": "0.32.0",
+        "@jitl/quickjs-wasmfile-release-sync": "0.32.0",
+        "quickjs-emscripten-core": "0.32.0"
+      },
+      "engines": {
+        "node": ">=16.0.0"
+      }
+    },
+    "node_modules/quickjs-emscripten-core": {
+      "version": "0.32.0",
+      "resolved": "https://registry.npmmirror.com/quickjs-emscripten-core/-/quickjs-emscripten-core-0.32.0.tgz",
+      "integrity": "sha512-QFnPfjFey8EqknSrSxe1hZrf1/8z7/6s1QzGOmKo6++02r7QRRX7ZoyNaZh7JuVjWsVW87KnQrbZqnHkOAzUyg==",
+      "license": "MIT",
+      "dependencies": {
+        "@jitl/quickjs-ffi-types": "0.32.0"
+      }
+    },
     "node_modules/quote-stream": {
       "version": "0.0.0",
       "resolved": "https://registry.npmmirror.com/quote-stream/-/quote-stream-0.0.0.tgz",
@@ -2132,6 +2202,7 @@
       "integrity": "sha512-i7qRCmY42zmCwnYlh9H2SvLEypEFGye5iRmEMKjcGi7zk9UquigRjFtTLz0TYqr0ZGLZhaMHl/foy1bZR+Cwlw==",
       "dev": true,
       "license": "MIT",
+      "peer": true,
       "dependencies": {
         "pathe": "^2.0.3"
       }
@@ -2149,6 +2220,7 @@
       "dev": true,
       "hasInstallScript": true,
       "license": "Apache-2.0",
+      "peer": true,
       "bin": {
         "workerd": "bin/workerd"
       },
@@ -2662,6 +2734,21 @@
         "node": ">=0.4"
       }
     },
+    "node_modules/yaml": {
+      "version": "2.9.0",
+      "resolved": "https://registry.npmmirror.com/yaml/-/yaml-2.9.0.tgz",
+      "integrity": "sha512-2AvhNX3mb8zd6Zy7INTtSpl1F15HW6Wnqj0srWlkKLcpYl/gMIMJiyuGq2KeI2YFxUPjdlB+3Lc10seMLtL4cA==",
+      "license": "ISC",
+      "bin": {
+        "yaml": "bin.mjs"
+      },
+      "engines": {
+        "node": ">= 14.6"
+      },
+      "funding": {
+        "url": "https://github.com/sponsors/eemeli"
+      }
+    },
     "node_modules/youch": {
       "version": "4.1.0-beta.10",
       "resolved": "https://registry.npmmirror.com/youch/-/youch-4.1.0-beta.10.tgz",
diff --git a/package.json b/package.json
index 02a03d8..45402f6 100644
--- a/package.json
+++ b/package.json
@@ -13,6 +13,7 @@
     "prepush": "node -e \"let f=require('fs'),t=f.readFileSync('wrangler.toml','utf8');if(!t.includes('你的KV命名空间ID')){console.error('\\x1b[31m请先清除 wrangler.toml 中的 KV ID!\\x1b[0m');process.exit(1)}\""
   },
   "dependencies": {
+    "@jitl/quickjs-wasmfile-release-sync": "^0.32.0",
     "age-encryption": "^0.3.0",
     "buffer": "^6.0.3",
     "ip-address": "^9.0.5",
@@ -23,8 +24,10 @@
     "ms": "^2.1.3",
     "nanoid": "^3.3.3",
     "peggy": "^2.0.1",
+    "quickjs-emscripten": "^0.32.0",
     "semver": "^7.6.3",
-    "static-js-yaml": "^1.0.0"
+    "static-js-yaml": "^1.0.0",
+    "yaml": "^2.9.0"
   },
   "devDependencies": {
     "esbuild": "^0.19.8",
diff --git a/src/restful/miscs.js b/src/restful/miscs.js
index 8d0ac15..ed8af59 100644
--- a/src/restful/miscs.js
+++ b/src/restful/miscs.js
@@ -179,8 +179,11 @@ function getWorkerStatus(req, res) {
                     },
                     capabilities: {
                         scriptOperator: {
-                            supported: false,
-                            reason: 'Cloudflare Workers does not allow dynamic code execution through eval/new Function.',
+                            supported: workerEnv.SCRIPT_ENGINE === 'quickjs',
+                            engine: workerEnv.SCRIPT_ENGINE || 'none',
+                            reason: workerEnv.SCRIPT_ENGINE === 'quickjs'
+                                ? 'Enabled via QuickJS WASM sandbox. Set SCRIPT_ENGINE="quickjs" in wrangler.toml [vars] to keep enabled.'
+                                : 'Disabled. Set SCRIPT_ENGINE="quickjs" in wrangler.toml [vars] to enable.',
                             alternatives: [
                                 'Use built-in filters/operators',
                                 'Use mihomo YAML patch scripts',
diff --git a/src/vendor/open-api.js b/src/vendor/open-api.js
index 1002afe..6e6d780 100644
--- a/src/vendor/open-api.js
+++ b/src/vendor/open-api.js
@@ -201,6 +201,10 @@ export class OpenAPI {
         console.log(`[${this.name}] INFO: ${msg}`);
     }
 
+    warn(msg) {
+        console.log(`[${this.name}] WARN: ${msg}`);
+    }
+
     error(msg) {
         console.log(`[${this.name}] ERROR: ${msg}`);
     }
diff --git a/src/vendor/quickjs-executor.js b/src/vendor/quickjs-executor.js
new file mode 100644
index 0000000..1e5c166
--- /dev/null
+++ b/src/vendor/quickjs-executor.js
@@ -0,0 +1,563 @@
+/**
+ * QuickJS WASM 脚本执行引擎
+ *
+ * 在 Cloudflare Workers 中以沙箱方式执行用户 JavaScript 脚本，
+ * 替代 Node.js 环境下使用 new Function() / eval() 的方案。
+ *
+ * 依赖：
+ *   - quickjs-emscripten (RELEASE_SYNC 变体)
+ *   - Wrangler 原生 WASM module import
+ *
+ * Cloudflare Workers 禁止运行时 WebAssembly.compile(bytes)，
+ * 因此必须让 Wrangler 把 .wasm 作为 WebAssembly.Module 上传。
+ *
+ * 上游执行模式（来自 Sub-Store processors/index.js）：
+ *   1. func 模式：createDynamicFunction 返回函数 → fn(proxies, targetPlatform, context)
+ *      用户脚本定义 function filter(proxies, ...) 返回 boolean[]
+ *   2. nodeFunc 模式（回退）：将用户脚本包装为快捷脚本遍历
+ *      const fn = async ($server) => { <script> }
+ *      for await (let $server of proxies) { list.push(await fn($server)) }
+ *      用户脚本直接操作 $server（单个节点），不需要 function 包裹
+ *
+ * QuickJS 复刻策略：
+ *   1. 将上游的函数参数注入为沙箱全局变量
+ *   2. 用 IIFE 包裹脚本返回目标函数（func 模式）
+ *   3. 若 func 模式失败且含 "$server is not defined"，回退 nodeFunc 模式
+ */
+
+import quickjsWasmModule from './quickjs.wasm';
+
+// 使用全局作用域缓存，避免跨请求重复编译 WASM
+if (typeof globalThis.__quickjsModule === 'undefined') {
+    globalThis.__quickjsModule = null;
+}
+if (typeof globalThis.__quickjsRuntime === 'undefined') {
+    globalThis.__quickjsRuntime = null;
+}
+if (typeof globalThis.__quickjsContext === 'undefined') {
+    globalThis.__quickjsContext = null;
+}
+
+/**
+ * 从 QuickJS 错误 handle 中提取可读的错误消息
+ *
+ * context.dump(errorHandle) 会对 QuickJS Error 对象调用 JSON.stringify，
+ * 但 Error 对象的 name/message 属性通常是不可枚举的，
+ * 导致 dump 返回 {} 或类空对象，再经字符串拼接变成 "[object Object]"。
+ *
+ * 正确做法：读取 errorHandle.message 属性并转为 JS 字符串。
+ *
+ * @param {object} context - QuickJSContext 实例
+ * @param {object} errorHandle - QuickJS error handle
+ * @returns {string} 错误消息文本
+ */
+function getErrorMessage(context, errorHandle) {
+    try {
+        var msgHandle = context.getProp(errorHandle, 'message');
+        var msg = context.getString(msgHandle);
+        msgHandle.dispose();
+        if (msg) return msg;
+    } catch (e) {
+        // getProp/getString 可能失败（非标准 Error 对象），回退到 dump
+    }
+    try {
+        var dumped = context.dump(errorHandle);
+        if (typeof dumped === 'string') return dumped;
+        if (dumped && typeof dumped === 'object' && dumped.message) return String(dumped.message);
+        return String(dumped);
+    } catch (e2) {
+        return 'Unknown QuickJS error';
+    }
+}
+
+/**
+ * 懒初始化 QuickJS
+ */
+async function initQuickJS() {
+    if (globalThis.__quickjsContext) return {
+        context: globalThis.__quickjsContext,
+        runtime: globalThis.__quickjsRuntime,
+        QuickJS: globalThis.__quickjsModule,
+    };
+
+    const {
+        newQuickJSWASMModule,
+        newVariant,
+        RELEASE_SYNC,
+    } = require('quickjs-emscripten');
+
+    // 正确模式：传入 Wrangler 预编译好的 WebAssembly.Module
+    const adaptVariant = newVariant(RELEASE_SYNC, {
+        wasmModule: quickjsWasmModule,
+    });
+
+    const QuickJS = await newQuickJSWASMModule(adaptVariant);
+    const runtime = QuickJS.newRuntime();
+    runtime.setMemoryLimit(1024 * 512);       // 512KB 内存限制
+    runtime.setMaxStackSize(1024 * 256);      // 256KB 栈限制
+    // 每 5000 条指令中断检查，防止死循环
+    var __interruptCounter = 0;
+    runtime.setInterruptHandler(function () {
+        __interruptCounter++;
+        if (__interruptCounter >= 5000) {
+            __interruptCounter = 0;
+            return true;
+        }
+        return false;
+    });
+
+    const context = runtime.newContext();
+
+    globalThis.__quickjsModule = QuickJS;
+    globalThis.__quickjsRuntime = runtime;
+    globalThis.__quickjsContext = context;
+
+    return { context, runtime, QuickJS };
+}
+
+/**
+ * 创建新的隔离 context（用于不可信的脚本）
+ */
+async function newSandboxContext() {
+    const { runtime, QuickJS } = await initQuickJS();
+    const context = runtime.newContext();
+    return { context, runtime, QuickJS };
+}
+
+/**
+ * 向沙箱注入 API 全局变量和基础工具
+ *
+ * @param {object} context - QuickJSContext
+ * @param {object} api - 要注入的键值对
+ */
+function injectAPI(context, api) {
+    var apiKeys = Object.keys(api);
+    for (var i = 0; i < apiKeys.length; i++) {
+        var key = apiKeys[i];
+        var value = api[key];
+        if (value === undefined) continue;
+
+        var jsonValue = JSON.stringify(value);
+        var setResult = context.evalCode(
+            'var ' + key + ' = JSON.parse(' + JSON.stringify(jsonValue) + ');'
+        );
+        if (setResult.error) {
+            var errMsg = getErrorMessage(context, setResult.error);
+            setResult.error.dispose();
+            throw new Error('Failed to inject API ' + key + ': ' + errMsg);
+        }
+        if (setResult.value) {
+            setResult.value.dispose();
+        }
+    }
+
+    // 注入基础工具（模拟上游环境中的工具函数）
+    var baseResult = context.evalCode(
+        'var b64d = function(s) { return atob(s); };\n' +
+        'var b64e = function(s) { return btoa(s); };\n' +
+        'var console = { log: function(){}, warn: function(){}, error: function(){} };\n' +
+        'var Buffer = { from: function(s) { return s; } };'
+    );
+    if (baseResult.error) {
+        var errMsg2 = getErrorMessage(context, baseResult.error);
+        baseResult.error.dispose();
+        throw new Error('Failed to inject base API: ' + errMsg2);
+    }
+    if (baseResult.value) {
+        baseResult.value.dispose();
+    }
+}
+
+/**
+ * 在 QuickJS 沙箱中执行脚本，返回函数句柄
+ *
+ * 复刻上游 createDynamicFunction 的 IIFE 包裹行为：
+ *   body = `${script}\n return ${name}`
+ *   → (function(){ <script>; return <name>; })()
+ *
+ * 注意：不释放 context，由调用方负责清理。
+ *
+ * @param {string} script - 用户脚本
+ * @param {string} name - 要返回的函数名（如 'filter'、'operator'）
+ * @param {object} api - 注入到沙箱的 API 对象
+ * @returns {{context, fnHandle, runtime, QuickJS}}
+ */
+async function executeInSandbox(script, name, api) {
+    api = api || {};
+    var result = await newSandboxContext();
+    var context = result.context;
+    var runtime = result.runtime;
+    var QuickJS = result.QuickJS;
+
+    try {
+        injectAPI(context, api);
+
+        // 复刻上游 new Function() 行为：
+        //   body = `${script}\n return ${name}`
+        //
+        // 用 IIFE 包裹：先执行 script（定义函数），再返回名为 name 的函数。
+        // 注意：用户脚本可能含注释行和多种声明，func 模式失败后会自动回退 nodeFunc。
+        var wrappedScript = '(function(){\n' + script + '\nreturn ' + name + ';\n})()';
+        var evalResult = context.evalCode(wrappedScript);
+
+        if (evalResult.error) {
+            var errMsg = getErrorMessage(context, evalResult.error);
+            evalResult.error.dispose();
+            throw new Error('Script evaluation failed: ' + errMsg);
+        }
+
+        var fnHandle = evalResult.value;
+        var fnType = context.typeof(fnHandle);
+
+        if (fnType !== 'function') {
+            var actualValue = context.dump(fnHandle);
+            fnHandle.dispose();
+            context.dispose();
+            throw new Error(
+                '\'' + name + '\' is not a function (got ' + fnType +
+                (actualValue !== undefined ? ': ' + JSON.stringify(actualValue).slice(0, 200) : '') + ')'
+            );
+        }
+
+        return { context: context, runtime: runtime, fnHandle: fnHandle, QuickJS: QuickJS };
+    } catch (e) {
+        context.dispose();
+        throw e;
+    }
+}
+
+/**
+ * 清理所有 QuickJS 资源（Durable Object 销毁时调用）
+ */
+function cleanup() {
+    var ctx = globalThis.__quickjsContext;
+    if (ctx) {
+        try { ctx.dispose(); } catch (e) { /* ignore */ }
+        globalThis.__quickjsContext = null;
+    }
+    var rt = globalThis.__quickjsRuntime;
+    if (rt) {
+        try { rt.dispose(); } catch (e) { /* ignore */ }
+        globalThis.__quickjsRuntime = null;
+    }
+    globalThis.__quickjsModule = null;
+}
+
+/**
+ * 在沙箱中调用函数并返回宿主环境结果
+ *
+ * 处理同步/异步返回值：async function 返回 Promise，需跑完 pending jobs。
+ *
+ * @param {object} context - QuickJSContext
+ * @param {object} runtime - QuickJSRuntime
+ * @param {object} fnHandle - 要调用的函数句柄
+ * @param {Array} callArgs - QuickJS 值参数数组
+ * @returns {*} 宿主环境结果
+ */
+async function callSandboxFunction(context, runtime, fnHandle, callArgs) {
+    var callResult = context.callFunction(fnHandle, context.null, callArgs);
+
+    // 释放输入参数
+    for (var k = 0; k < callArgs.length; k++) {
+        if (callArgs[k] !== context.null) {
+            try { callArgs[k].dispose(); } catch (e) { /* ignore */ }
+        }
+    }
+
+    if (callResult.error) {
+        var callErrMsg = getErrorMessage(context, callResult.error);
+        callResult.error.dispose();
+        throw new Error('Script execution failed: ' + callErrMsg);
+    }
+
+    // async function 会返回 Promise，需要跑完 QuickJS 的 pending jobs
+    var finalValue = callResult.value;
+    if (context.typeof(finalValue) === 'object') {
+        var resolvedPromise = context.resolvePromise(finalValue);
+        runtime.executePendingJobs();
+        var resolvedResult = await resolvedPromise;
+        if (resolvedResult.error) {
+            var asyncErrMsg = getErrorMessage(context, resolvedResult.error);
+            resolvedResult.error.dispose();
+            finalValue.dispose();
+            throw new Error('Script async execution failed: ' + asyncErrMsg);
+        }
+        finalValue.dispose();
+        finalValue = resolvedResult.value;
+    }
+
+    // 将结果序列化回 host 环境
+    var resultStr = context.dump(finalValue);
+    finalValue.dispose();
+
+    if (resultStr === undefined || resultStr === 'undefined') {
+        return undefined;
+    }
+
+    try {
+        return JSON.parse(resultStr);
+    } catch (e) {
+        return resultStr;
+    }
+}
+
+/**
+ * 将宿主环境参数序列化为 QuickJS 值
+ *
+ * @param {object} context - QuickJSContext
+ * @param {Array} args - 宿主环境参数
+ * @returns {Array} QuickJS 值数组
+ */
+function serializeArgs(context, args) {
+    var callArgs = [];
+    for (var j = 0; j < args.length; j++) {
+        if (args[j] === undefined || args[j] === null) {
+            callArgs.push(context.null);
+        } else {
+            var jsonStr = JSON.stringify(args[j]);
+            var argResult = context.evalCode(
+                'JSON.parse(' + JSON.stringify(jsonStr) + ')'
+            );
+            if (argResult.error) {
+                var argErrMsg = getErrorMessage(context, argResult.error);
+                argResult.error.dispose();
+                throw new Error('Failed to serialize argument ' + j + ': ' + argErrMsg);
+            }
+            callArgs.push(argResult.value);
+        }
+    }
+    return callArgs;
+}
+
+/**
+ * 判断是否为 mihomoProfile 类型（检查 $file.type === 'mihomoProfile'）
+ */
+function isMihomoProfile(proxies) {
+    try {
+        return !!(proxies && proxies.$file && proxies.$file.type === 'mihomoProfile');
+    } catch (e) {
+        return false;
+    }
+}
+
+/**
+ * Script Operator / Script Filter 执行器
+ *
+ * 替代 createDynamicFunction 的 new Function() 方案。
+ * 返回的 async function 与上游签名单测兼容：
+ *   function(proxies, targetPlatform, context, ...extraArgs)
+ *
+ * 执行策略（复刻上游 ApplyFilter / ApplyOperator）：
+ *   1. func 模式：IIFE 包裹脚本 → 返回 function → fn(proxies, targetPlatform, context)
+ *      用户脚本应定义 function operator/filter(proxies, ...)
+ *   2. nodeFunc 模式（回退）：将用户脚本包装为快捷脚本遍历
+ *      - filter: const fn = async ($server) => { script } → list.push(await fn($server))
+ *        每个 $server 是单个 proxy 节点，fn 返回 boolean
+ *      - operator: for (let $server of proxies) { script; list.push($server) }
+ *        每个 $server 是单个 proxy 节点，用户直接修改它的属性
+ *
+ * 回退触发条件（复刻上游 ApplyFilter/ApplyOperator）：
+ *   - filter: func 失败且错误含 "$server is not defined"
+ *   - operator: func 失败且错误含 "$server/$content/$files is not defined"
+ *     或 output?.$files / output?.$content 为真
+ *
+ * @param {string} script - 用户脚本
+ * @param {string} name - 函数名（'filter' / 'operator' / 'transformFunction'）
+ * @param {object} $arguments - 用户参数
+ * @param {object} $options - 扩展选项
+ * @returns {function} async function
+ */
+function createScriptFunction(script, name, $arguments, $options) {
+    return async function () {
+        var args = arguments;
+        var proxies = args[0];       // args[0] = proxies
+        var targetPlatform = args[1];
+        var context = args[2];
+
+        var api = {
+            $arguments: $arguments || {},
+            $options: $options || {},
+        };
+
+        // 上游调用约定: fn(proxies, targetPlatform, context, ...extraArgs)
+        // extraArgs 依次对应: $substore, lodash, ...
+        var extraNames = [
+            '$substore', 'lodash', '$persistentStore', '$httpClient',
+            '$notification', 'ProxyUtils', 'yaml', 'Buffer', 'b64d', 'b64e',
+            'DOMAIN_RESOLVERS', 'scriptResourceCache', 'flowUtils', 'produceArtifact', 'require',
+        ];
+        for (var i = 0; i < extraNames.length; i++) {
+            var extraIndex = i + 3; // 跳过 proxies, targetPlatform, context
+            if (extraIndex < args.length && args[extraIndex] !== undefined) {
+                api[extraNames[i]] = args[extraIndex];
+            }
+        }
+
+        // 注入 $content/$files 默认值（nodeFunc 模式需要）
+        var _hasContent = !!(
+            (proxies && proxies.$content) || (proxies && proxies.$files)
+        );
+
+        // ========== func 模式 ==========
+        try {
+            var sandbox = await executeInSandbox(script, name, api);
+            var _ctx = sandbox.context;
+            var _rt = sandbox.runtime;
+            var _fn = sandbox.fnHandle;
+
+            try {
+                var _callArgs = serializeArgs(_ctx, args);
+                var _result = await callSandboxFunction(_ctx, _rt, _fn, _callArgs);
+                return _result;
+            } finally {
+                try { _fn.dispose(); } catch (e) { /* ignore */ }
+                try { _ctx.dispose(); } catch (e) { /* ignore */ }
+            }
+        } catch (funcErr) {
+            var funcErrMsg = (funcErr && funcErr.message) ? funcErr.message : String(funcErr);
+
+            // 判断是否应该回退 nodeFunc
+            var shouldFallback = false;
+            if (name === 'filter') {
+                // filter 回退条件：错误含 "$server is not defined" 或 "'$server' is not defined"
+                if (funcErrMsg.indexOf("$server is not defined") !== -1 ||
+                    funcErrMsg.indexOf("'$server' is not defined") !== -1) {
+                    shouldFallback = true;
+                }
+            } else {
+                // operator 回退条件（复刻 ApplyOperator L1249-1258）：
+                //   错误含 "$server" / "$content" / "$files" is not defined
+                //   或 output?.$files / output?.$content 为真
+                if (
+                    funcErrMsg.indexOf("$server is not defined") !== -1 ||
+                    funcErrMsg.indexOf("'$server' is not defined") !== -1 ||
+                    funcErrMsg.indexOf("$content is not defined") !== -1 ||
+                    funcErrMsg.indexOf("$files is not defined") !== -1 ||
+                    _hasContent
+                ) {
+                    shouldFallback = true;
+                }
+            }
+
+            if (!shouldFallback) {
+                throw new Error('脚本执行失败：' + funcErrMsg);
+            }
+
+            // ========== nodeFunc 模式 ==========
+            try {
+                return await executeNodeFunc(script, name, api, proxies, targetPlatform, context);
+            } catch (nodeErr) {
+                var nodeErrMsg = (nodeErr && nodeErr.message) ? nodeErr.message : String(nodeErr);
+                if (nodeErrMsg === funcErrMsg) {
+                    throw new Error('执行失败 ' + funcErrMsg);
+                }
+                throw new Error('脚本执行失败：' + nodeErrMsg);
+            }
+        }
+    };
+}
+
+/**
+ * nodeFunc 模式：将用户脚本包装为快捷遍历脚本执行
+ *
+ * 复刻上游 ScriptFilter.nodeFunc / ScriptOperator.nodeFunc：
+ *
+ * filter nodeFunc:
+ *   async function filter(input = [], targetPlatform, context) {
+ *       let proxies = input
+ *       let list = []
+ *       const fn = async ($server) => { ${script} }
+ *       for (var _i = 0; _i < proxies.length; _i++) {
+ *           list.push(await fn(proxies[_i]))
+ *       }
+ *       return list
+ *   }
+ *
+ * operator nodeFunc (无 $files/$content):
+ *   async function operator(input = [], targetPlatform, context) {
+ *       let proxies = input
+ *       let list = []
+ *       for (var _i = 0; _i < proxies.length; _i++) {
+ *           var $server = proxies[_i];
+ *           ${script};
+ *           list.push($server);
+ *       }
+ *       return list
+ *   }
+ *
+ * @param {string} script - 用户脚本
+ * @param {string} name - 函数名
+ * @param {object} api - API 对象
+ * @param {Array} proxies - 代理节点数组
+ * @param {string} targetPlatform - 目标平台
+ * @param {object} context - 上下文对象
+ * @returns {*} 执行结果
+ */
+async function executeNodeFunc(script, name, api, proxies, targetPlatform, context) {
+    var wrapperScript;
+    if (name === 'filter') {
+        // filter nodeFunc: fn($server) 返回 boolean，收集到 list
+        // 注意：上游官方 filter nodeFunc 中 fn 没有 return，list 收集的是
+        // fn($server) 的返回值。但快捷脚本如 $server.name.includes('香港')
+        // 是表达式而非语句，需要 return 才能作为 fn 的返回值。
+        // 因此与上游略有不同：fn 体内加 return。
+        wrapperScript =
+            'async function filter(input, targetPlatform, context) {\n' +
+            '  var proxies = input;\n' +
+            '  var list = [];\n' +
+            '  var fn = async function($server) {\n' +
+            '    return ' + script + ';\n' +
+            '  };\n' +
+            '  for (var _i = 0; _i < proxies.length; _i++) {\n' +
+            '    list.push(await fn(proxies[_i]));\n' +
+            '  }\n' +
+            '  return list;\n' +
+            '}';
+    } else {
+        // operator nodeFunc: 遍历 proxies，每轮执行 script 修改 $server
+        // 复刻上游：for (let $server of proxies) { script; } 后过滤 isFalsy
+        wrapperScript =
+            'async function operator(input, targetPlatform, context) {\n' +
+            '  var proxies = input;\n' +
+            '  var list = [];\n' +
+            '  for (var _i = 0; _i < proxies.length; _i++) {\n' +
+            '    var $server = proxies[_i];\n' +
+            script + ';\n' +
+            '    if ($server != null && $server !== false) {\n' +
+            '      list.push($server);\n' +
+            '    }\n' +
+            '  }\n' +
+            '  return list;\n' +
+            '}';
+    }
+
+    // 注入 $content/$files 默认值（operator nodeFunc 依赖这些变量）
+    if (name !== 'filter') {
+        api.$content = (proxies && proxies.$content) ? proxies.$content : '';
+        api.$files = (proxies && proxies.$files) ? proxies.$files : [];
+    } else {
+        api.$content = '';
+        api.$files = [];
+    }
+
+    var sandbox = await executeInSandbox(wrapperScript, name, api);
+    var _ctx = sandbox.context;
+    var _rt = sandbox.runtime;
+    var _fn = sandbox.fnHandle;
+
+    try {
+        var callArgs = serializeArgs(_ctx, [proxies, targetPlatform, context]);
+        var result = await callSandboxFunction(_ctx, _rt, _fn, callArgs);
+        return result;
+    } finally {
+        try { _fn.dispose(); } catch (e) { /* ignore */ }
+        try { _ctx.dispose(); } catch (e) { /* ignore */ }
+    }
+}
+
+module.exports = {
+    createScriptFunction: createScriptFunction,
+    executeInSandbox: executeInSandbox,
+    cleanup: cleanup,
+    getErrorMessage: getErrorMessage,
+};
diff --git a/src/vendor/quickjs.wasm b/src/vendor/quickjs.wasm
new file mode 100644
index 0000000..1815757
Binary files /dev/null and b/src/vendor/quickjs.wasm differ