feat(sandbox): 不可信字节在沙箱子进程里解析(撤销权限、超时与内存强杀);种子、文件预览、字幕解析迁入

Co-Authored-By: Claude Opus 5.5 <[email protected]>

apps/server/src/modules/browser/service.ts

@@ -16,7 +16,7 @@ import {
   InMemoryProfileLock,
   imageDimensions,
   type PageContent,
-  parseTorrent,
+  parseTorrentIsolated,
   prepareImage,
   profileKeyFor,
   type TabRef,
@@ -2237,7 +2237,7 @@ export class BrowserService {
     };
     try {
       const bytes = new Uint8Array(await readFile(this.stagedPath(artifact.bytes.ref)));
-      const meta = parseTorrent(bytes);
+      const meta = await parseTorrentIsolated(bytes);
       verification = {
         valid: true,
         infohashV1: meta.infohashV1,