@blen/fedreg-mcp-server 2.2.1 → 2.2.3

package/dist/sandbox/deno.js

@@ -1,203 +1,389 @@
 import { spawn } from 'node:child_process';
-import { mkdtempSync, rmSync, writeFileSync } from 'node:fs';
+import { existsSync, mkdtempSync, rmSync, writeFileSync, chmodSync } from 'node:fs';
 import { tmpdir } from 'node:os';
 import { join } from 'node:path';
+import { log } from '../util/logger.js';
 import { preflight } from './policy.js';
+import { DEFAULT_LIMITS, LOG_LINE_OVERHEAD, LOG_TRUNCATED, LogSink, MAX_ERROR_MESSAGE, boundMessage, checkRpcArgs, finishValue, policyMessage, resultTooLarge } from './limits.js';
 /**
- * Deno fallback sandbox. We launch `deno run --no-prompt <runner>` with NO
- * `--allow-*` flags, so Deno's deny-by-default grants no net/fs/env/ffi/subprocess
- * access, and bridge RPC over stdin/stdout using a length-prefixed JSON protocol.
+ * Deno sandbox.
+ *
+ * Boundary: Node host (owns the deadline, byte budgets, and the child's lifetime)
+ *   → `deno run` of a fixed supervisor script with NO --allow-* flags (deny-by-default: no net, fs,
+ *     env, ffi, subprocess), a minimal environment, and no user code on disk
+ *   → a module Worker that receives the user code by message. Before user code runs, the worker's
+ *     ambient globals that could reach the process or the protocol (`Deno`, `postMessage`, `fetch`,
+ *     `Worker`, ...) are replaced with `undefined` and `console` is redirected to log messages.
+ *
+ * Protocol: the supervisor talks to the host over stdin/stdout with one JSON frame per line,
+ * prefixed by a random token the supervisor generates and announces before the worker exists.
+ * The worker never sees the token, so it cannot forge frames; any other stdout bytes are treated
+ * as untrusted log text. All child output is untrusted: frames are size-bounded and validated, the
+ * execution settles exactly once, and the process group is killed on every exit path. A frame can
+ * never cancel the host's deadline or its cleanup.
  */
 export class DenoRunner {
+    limits;
     kind = 'deno';
+    static supervisorPath;
+    constructor(limits = DEFAULT_LIMITS) {
+        this.limits = limits;
+    }
     async available() {
         return await new Promise(resolve => {
-            const p = spawn('deno', ['--version'], { stdio: 'ignore' });
+            const p = spawn('deno', ['--version'], { stdio: 'ignore', env: childEnv() });
             p.on('error', () => resolve(false));
             p.on('exit', code => resolve(code === 0));
         });
     }
+    /** The supervisor holds no user data; it is written once per process, readable only by us. */
+    static supervisor() {
+        // Re-check on disk: a long-lived server's temp dir may be reaped by a tmp cleaner.
+        if (!DenoRunner.supervisorPath || !existsSync(DenoRunner.supervisorPath)) {
+            const dir = mkdtempSync(join(tmpdir(), 'fedreg-deno-'));
+            chmodSync(dir, 0o700);
+            const path = join(dir, 'supervisor.js');
+            writeFileSync(path, SUPERVISOR_SOURCE, { mode: 0o600 });
+            DenoRunner.supervisorPath = path;
+            process.once('exit', () => { try {
+                rmSync(dir, { recursive: true, force: true });
+            }
+            catch { /* ignore */ } });
+        }
+        return DenoRunner.supervisorPath;
+    }
     async execute(opts, rpc) {
         const started = Date.now();
+        const limits = { ...this.limits, ...(opts.limits ?? {}) };
+        const timeoutMs = opts.timeoutMs ?? 15_000;
+        const fail = (name, message, logs = []) => ({ ok: false, logs, error: { name, message }, durationMs: Date.now() - started });
         const policy = preflight(opts.code);
-        if (!policy.ok) {
-            return { ok: false, logs: [], error: { name: 'PolicyError', message: policy.errors.join('; ') }, durationMs: Date.now() - started };
+        if (!policy.ok)
+            return fail('PolicyError', policyMessage(policy.errors));
+        if (Buffer.byteLength(opts.code, 'utf8') > limits.maxCodeBytes)
+            return fail('CodeTooLarge', `Code exceeds ${limits.maxCodeBytes} bytes.`);
+        let child;
+        try {
+            child = spawn('deno', [
+                'run', '--no-prompt', '--no-config', '--no-lock', '--no-remote', '--no-npm', '--quiet',
+                `--v8-flags=--max-old-space-size=${Math.max(16, opts.memoryMb ?? 64)}`,
+                DenoRunner.supervisor(),
+            ], { stdio: ['pipe', 'pipe', 'pipe'], env: childEnv(), detached: process.platform !== 'win32' });
         }
-        const runner = buildDenoRunner(opts.code, opts.timeoutMs ?? 15_000, opts.bindings ?? []);
-        // Write the runner to a temp file rather than piping it on stdin: `deno run -`
-        // reads the program from stdin until EOF, but we keep stdin open as the RPC
-        // channel, so it would never start. A file path leaves stdin free for RPC.
-        const tmpDir = mkdtempSync(join(tmpdir(), 'fedreg-deno-'));
-        const runnerPath = join(tmpDir, 'runner.ts');
-        writeFileSync(runnerPath, runner);
-        const cleanup = () => { try {
-            rmSync(tmpDir, { recursive: true, force: true });
+        catch (err) {
+            return fail('SpawnError', err.message);
         }
-        catch { /* ignore */ } };
-        const child = spawn('deno', [
-            'run',
-            '--no-prompt',
-            runnerPath,
-        ], { stdio: ['pipe', 'pipe', 'pipe'] });
-        const logs = [];
-        let stdoutBuf = Buffer.alloc(0);
-        return await new Promise((resolve) => {
-            const timeout = setTimeout(() => {
+        const logs = new LogSink(limits.maxLogBytes, limits.maxLogLines);
+        return await new Promise(resolve => {
+            let settled = false;
+            let token;
+            let partial = [];
+            let partialLen = 0;
+            let bufferedBytes = 0;
+            let pendingRpc = 0;
+            // Choosing the outcome and tearing down are separate: the first terminal event fixes the
+            // result, and the promise resolves once the child has exited (bounded wait).
+            let exited = false;
+            const exitWaiters = [];
+            child.once('close', () => { exited = true; for (const w of exitWaiters.splice(0))
+                w(); });
+            const settle = (result) => {
+                if (settled)
+                    return;
+                settled = true;
+                clearTimeout(deadline);
+                const outcome = { ...result, logs: logs.lines(), durationMs: Date.now() - started };
+                killTree(child);
+                if (exited)
+                    return resolve(outcome);
+                // Normally the child exits within milliseconds of the kill. If it has not after 2 s, kill
+                // again, log it, and return the result anyway.
+                const giveUp = setTimeout(() => {
+                    log.error('sandbox.teardown_pending', { pid: child.pid });
+                    killTree(child);
+                    resolve(outcome);
+                }, 2000);
+                exitWaiters.push(() => { clearTimeout(giveUp); resolve(outcome); });
+            };
+            const deadline = setTimeout(() => settle({ ok: false, error: { name: 'TimeoutError', message: `Execution exceeded ${timeoutMs}ms` } }), timeoutMs);
+            child.on('error', err => settle({ ok: false, error: { name: 'SpawnError', message: err.message } }));
+            // 'close', not 'exit': stdout may still hold the final frame when the process exits.
+            child.on('close', code => settle({ ok: false, error: { name: 'ExitError', message: `The sandbox exited unexpectedly (code ${code}).` } }));
+            const send = (frame) => {
+                if (settled || !token)
+                    return;
+                let line;
                 try {
-                    child.kill('SIGKILL');
+                    line = `${token}${JSON.stringify(frame)}\n`;
                 }
-                catch { /* ignore */ }
-                cleanup();
-                resolve({
-                    ok: false, logs,
-                    error: { name: 'TimeoutError', message: `Execution exceeded ${opts.timeoutMs ?? 15_000}ms` },
-                    durationMs: Date.now() - started,
-                });
-            }, (opts.timeoutMs ?? 15_000) + 1_000);
-            child.stdout.on('data', async (chunk) => {
-                stdoutBuf = Buffer.concat([stdoutBuf, chunk]);
-                // length-prefixed JSON frames: 8-byte ascii hex length + payload
-                while (stdoutBuf.length >= 9) {
-                    const lenHex = stdoutBuf.subarray(0, 8).toString('ascii');
-                    if (stdoutBuf[8] !== 0x0a) {
-                        logs.push(stdoutBuf.toString('utf8'));
-                        stdoutBuf = Buffer.alloc(0);
-                        break;
-                    }
-                    const len = parseInt(lenHex, 16);
-                    if (Number.isNaN(len))
-                        break;
-                    if (stdoutBuf.length < 9 + len)
-                        break;
-                    const payload = stdoutBuf.subarray(9, 9 + len).toString('utf8');
-                    stdoutBuf = stdoutBuf.subarray(9 + len);
-                    const msg = JSON.parse(payload);
-                    if (msg.kind === 'log') {
-                        logs.push(msg.text);
+                catch {
+                    // An SDK result that cannot be serialized must still answer the call, or the sandbox waits for the deadline.
+                    const f = frame;
+                    if (f.t !== 'rpc-result')
+                        return;
+                    line = `${token}${JSON.stringify({ t: 'rpc-result', id: f.id, ok: false, error: { name: 'TypeError', message: 'The SDK result is not JSON-serializable.' } })}\n`;
+                }
+                try {
+                    child.stdin.write(line);
+                }
+                catch { /* child gone; exit handler settles */ }
+            };
+            const onFrame = async (raw) => {
+                let msg;
+                try {
+                    msg = JSON.parse(raw);
+                }
+                catch {
+                    return settle({ ok: false, error: { name: 'SandboxProtocolError', message: 'The sandbox sent a malformed frame.' } });
+                }
+                if (msg.t === 'log' && typeof msg.text === 'string')
+                    return logs.push(msg.text);
+                if (msg.t === 'rpc' && Number.isSafeInteger(msg.id) && typeof msg.binding === 'string'
+                    && Array.isArray(msg.path) && Array.isArray(msg.args)) {
+                    if (pendingRpc >= limits.maxPendingRpc) {
+                        return send({ t: 'rpc-result', id: msg.id, ok: false, error: { name: 'TooManyPendingCalls', message: `At most ${limits.maxPendingRpc} SDK calls may be pending at once.` } });
                     }
-                    else if (msg.kind === 'rpc') {
+                    const tooBig = checkRpcArgs(msg.args, limits);
+                    if (tooBig)
+                        return send({ t: 'rpc-result', id: msg.id, ok: false, error: tooBig });
+                    pendingRpc++;
+                    try {
                         const res = await rpc.dispatch({ binding: msg.binding, path: msg.path, args: msg.args });
-                        writeFrame(child.stdin, { kind: 'rpc-result', id: msg.id, ok: res.ok, value: res.value, error: res.error });
+                        send({ t: 'rpc-result', id: msg.id, ok: res.ok, value: res.value, error: res.error });
                     }
-                    else if (msg.kind === 'result') {
-                        clearTimeout(timeout);
-                        try {
-                            child.stdin.end();
-                        }
-                        catch { /* ignore */ }
-                        resolve({
-                            ok: msg.ok,
-                            logs,
-                            value: msg.value,
-                            error: msg.error,
-                            durationMs: Date.now() - started,
-                        });
+                    finally {
+                        pendingRpc--;
                     }
+                    return;
                 }
-            });
-            child.stderr.on('data', (b) => logs.push(b.toString('utf8')));
-            child.on('error', err => {
-                clearTimeout(timeout);
-                cleanup();
-                resolve({ ok: false, logs, error: { name: 'SpawnError', message: err.message }, durationMs: Date.now() - started });
-            });
-            child.on('exit', code => {
-                cleanup();
-                if (code !== 0 && code !== null) {
-                    clearTimeout(timeout);
-                    resolve({ ok: false, logs, error: { name: 'ExitError', message: `deno exited with ${code}` }, durationMs: Date.now() - started });
+                if (msg.t === 'done') {
+                    if (msg.ok === true && typeof msg.json === 'string')
+                        return settle(finishValue(msg.json, limits));
+                    if (msg.tooLarge === true && typeof msg.size === 'number')
+                        return settle({ ok: false, error: resultTooLarge(msg.size, limits) });
+                    const e = (msg.error ?? {});
+                    return settle({
+                        ok: false,
+                        error: {
+                            name: typeof e.name === 'string' ? e.name.slice(0, 100) : 'Error',
+                            message: typeof e.message === 'string' ? boundMessage(e.message) : 'Execution failed',
+                            ...(typeof e.status === 'number' ? { status: e.status } : {}),
+                        },
+                    });
+                }
+                return settle({ ok: false, error: { name: 'SandboxProtocolError', message: 'The sandbox sent an unexpected frame.' } });
+            };
+            child.stdout.setEncoding('utf8');
+            child.stdout.on('data', (chunk) => {
+                if (settled)
+                    return;
+                bufferedBytes += Buffer.byteLength(chunk, 'utf8');
+                if (bufferedBytes > limits.maxStdoutBytes) {
+                    return settle({ ok: false, error: { name: 'OutputTooLarge', message: `The sandbox produced more than ${limits.maxStdoutBytes} bytes of output.` } });
+                }
+                // Split only the new chunk, so a long unterminated frame is never rescanned or re-flattened.
+                const segments = chunk.split('\n');
+                const tail = segments.pop();
+                for (const seg of segments) {
+                    if (settled)
+                        return;
+                    const line = partial.length ? partial.join('') + seg : seg;
+                    partial = [];
+                    partialLen = 0;
+                    if (!token) {
+                        // The supervisor's first line announces the frame token; nothing else may precede it.
+                        const m = /^FEDREG-SANDBOX ([0-9a-f]{64})$/.exec(line);
+                        if (!m)
+                            return settle({ ok: false, error: { name: 'SandboxProtocolError', message: 'The sandbox did not start correctly.' } });
+                        token = m[1];
+                        send({ t: 'start', code: opts.code, bindings: opts.bindings ?? [], limits: {
+                                maxLogBytes: limits.maxLogBytes, maxLogLines: limits.maxLogLines, logLineOverhead: LOG_LINE_OVERHEAD,
+                                logTruncated: LOG_TRUNCATED, maxRpcArgBytes: limits.maxRpcArgBytes, maxResultBytes: limits.maxResultBytes,
+                                maxError: MAX_ERROR_MESSAGE,
+                            } });
+                        continue;
+                    }
+                    if (line.startsWith(token)) {
+                        onFrame(line.slice(token.length)).catch(err => settle({ ok: false, error: { name: 'SandboxProtocolError', message: boundMessage(String(err?.message ?? err)) } }));
+                    }
+                    else if (line.length)
+                        logs.push(line);
+                }
+                if (settled)
+                    return;
+                partial.push(tail);
+                partialLen += tail.length;
+                if (partialLen > limits.maxFrameBytes) {
+                    settle({ ok: false, error: { name: 'OutputTooLarge', message: `A sandbox message exceeded ${limits.maxFrameBytes} bytes.` } });
                 }
             });
+            child.stderr.setEncoding('utf8');
+            child.stderr.on('data', (chunk) => { if (!settled)
+                logs.push(chunk.trimEnd()); });
+            child.stdin.on('error', () => { });
         });
     }
 }
-function writeFrame(stream, obj) {
-    const payload = JSON.stringify(obj);
-    const len = Buffer.byteLength(payload, 'utf8').toString(16).padStart(8, '0');
-    stream.write(len + '\n' + payload);
+/** Only what Deno needs to start; never the server's secrets. */
+function childEnv() {
+    const env = { NO_COLOR: '1', DENO_NO_UPDATE_CHECK: '1', DENO_NO_PROMPT: '1' };
+    for (const k of ['PATH', 'HOME', 'DENO_DIR', 'TMPDIR', 'SystemRoot', 'USERPROFILE', 'LOCALAPPDATA']) {
+        if (process.env[k])
+            env[k] = process.env[k];
+    }
+    return env;
 }
-// `bindings` is interpolated into the generated source via JSON.stringify; it is safe
-// only because names are pre-validated as JS identifiers by getSources()
-// (src/sdk/sources/index.ts). Do NOT pass unvalidated strings here.
-export function buildDenoRunner(userCode, timeoutMs, bindings) {
-    // Runs inside deno. Talks to host over stdin/stdout with the same framing.
-    return `
-const enc = new TextEncoder();
-const dec = new TextDecoder();
-
-function writeFrame(obj) {
-  const s = JSON.stringify(obj);
-  const len = (new TextEncoder().encode(s)).byteLength.toString(16).padStart(8, '0');
-  Deno.stdout.writeSync(enc.encode(len + '\\n' + s));
+/** Kill the child and anything it started. POSIX: the whole process group. */
+function killTree(child) {
+    try {
+        child.stdin.destroy();
+    }
+    catch { /* ignore */ }
+    if (child.exitCode !== null || child.signalCode !== null)
+        return;
+    if (process.platform !== 'win32' && child.pid) {
+        try {
+            process.kill(-child.pid, 'SIGKILL');
+            return;
+        }
+        catch { /* fall through */ }
+    }
+    try {
+        child.kill('SIGKILL');
+    }
+    catch { /* ignore */ }
 }
+/**
+ * Runs in Deno with no permissions. Holds no user data until the start frame arrives over stdin.
+ * Binding names come from the host (pre-validated identifiers) and are only used as object keys.
+ */
+export const SUPERVISOR_SOURCE = String.raw `
+const enc = new TextEncoder();
+const bytes = new Uint8Array(32);
+crypto.getRandomValues(bytes);
+const TOKEN = Array.from(bytes, b => b.toString(16).padStart(2, '0')).join('');
+const writeLine = (s) => { const b = enc.encode(s + '\n'); let o = 0; while (o < b.length) o += Deno.stdout.writeSync(b.subarray(o)); };
+const frame = (obj) => writeLine(TOKEN + JSON.stringify(obj));
+writeLine('FEDREG-SANDBOX ' + TOKEN);
 
-let inbuf = new Uint8Array(0);
+const WORKER_SOURCE = ${'`'}
+// Trusted primitives, captured before user code exists: budgets below use these, so user code that
+// replaces JSON.stringify, TextEncoder or Promise.prototype.then cannot push oversized data out.
+const post = self.postMessage.bind(self);
+const listen = self.addEventListener.bind(self);
+const S = JSON.stringify, P = JSON.parse, Str = String, apply = Reflect.apply, then = Promise.prototype.then;
+const encoder = new TextEncoder(), encode = TextEncoder.prototype.encode, sl = String.prototype.slice;
+// The intrinsic %TypedArray%.prototype.byteLength getter, captured: user code may redefine
+// Uint8Array.prototype.length, but cannot change a getter we already hold.
+const byteLength = Object.getOwnPropertyDescriptor(Object.getPrototypeOf(Uint8Array.prototype), 'byteLength').get;
+const bytes = (s) => apply(byteLength, apply(encode, encoder, [s]), []);
+const cut = (s, n) => s.length > n ? apply(sl, s, [0, n]) : s;
+let started = false;
 const pending = new Map();
 let nextId = 1;
-
-async function readLoop() {
-  const reader = Deno.stdin.readable.getReader();
-  while (true) {
-    const { value, done } = await reader.read();
-    if (done) return;
-    const merged = new Uint8Array(inbuf.length + value.length);
-    merged.set(inbuf); merged.set(value, inbuf.length);
-    inbuf = merged;
-    while (inbuf.length >= 9) {
-      const lenHex = dec.decode(inbuf.subarray(0, 8));
-      const len = parseInt(lenHex, 16);
-      if (isNaN(len)) { inbuf = new Uint8Array(0); break; }
-      if (inbuf.length < 9 + len) break;
-      const payload = dec.decode(inbuf.subarray(9, 9 + len));
-      inbuf = inbuf.subarray(9 + len);
-      const msg = JSON.parse(payload);
-      if (msg.kind === 'rpc-result') {
-        const cb = pending.get(msg.id);
-        if (cb) { pending.delete(msg.id); cb(msg); }
-      }
-    }
+listen('message', (ev) => {
+  const m = ev.data;
+  if (m && m.t === 'rpc-result') {
+    const p = pending.get(m.id);
+    if (!p) return;
+    pending.delete(m.id);
+    if (m.ok) p.resolve(m.value);
+    else { const e = new Error(String(m.error?.message ?? 'SDK call failed')); e.name = String(m.error?.name ?? 'Error'); if (typeof m.error?.status === 'number') e.status = m.error.status; p.reject(e); }
+    return;
   }
-}
-readLoop();
-
+  if (!m || m.t !== 'start' || started) return;
+  started = true;
+  run(String(m.code), Array.isArray(m.bindings) ? m.bindings.map(String) : [], m.limits || {});
+});
+let L = {};
 function call(binding, path, args) {
   return new Promise((resolve, reject) => {
+    let json;
+    try { json = S(args ?? []); } catch (e) { reject(new TypeError('SDK arguments must be JSON-serializable')); return; }
+    if (typeof json !== 'string' || bytes(json) > L.maxRpcArgBytes) { const e = new Error('SDK call arguments exceed ' + L.maxRpcArgBytes + ' bytes.'); e.name = 'ArgumentsTooLarge'; reject(e); return; }
     const id = nextId++;
-    pending.set(id, (r) => {
-      if (!r.ok) { const e = new Error(r.error.message); e.name = r.error.name; reject(e); }
-      else resolve(r.value);
-    });
-    writeFrame({ kind: 'rpc', id, binding, path, args });
+    pending.set(id, { resolve, reject });
+    post({ t: 'rpc', id, binding, path, args: P(json) });
   });
 }
-
 function makeProxy(binding) {
-  const handler = (path) => new Proxy(function(){}, {
-    get(_, key) { return handler([...path, String(key)]); },
+  const handler = (path) => new Proxy(function () {}, {
+    get(_, key) { return typeof key === 'symbol' ? undefined : handler([...path, String(key)]); },
     apply(_, __, args) { return call(binding, path, args); },
   });
   return handler([]);
 }
+function run(code, bindings, limits) {
+  L = limits;
+  const show = (v) => { if (typeof v === 'string') return v; try { const j = S(v); return j === undefined ? Str(v) : j; } catch { return Str(v); } };
+  let logBytes = 0, logLines = 0, logDone = false;
+  const log = (...a) => {
+    if (logDone) return;
+    let text = '';
+    for (let i = 0; i < a.length; i++) text += (i ? ' ' : '') + show(a[i]);
+    text = cut(text, L.maxLogBytes);
+    logBytes += bytes(text) + L.logLineOverhead; logLines++;
+    if (logBytes > L.maxLogBytes - L.logTruncated.length - L.logLineOverhead || logLines >= L.maxLogLines) { logDone = true; text = L.logTruncated; }
+    post({ t: 'log', text });
+  };
+  self.console = { log, info: log, warn: log, error: log, debug: log };
+  for (const k of ['Deno', 'postMessage', 'close', 'fetch', 'WebSocket', 'WebSocketStream', 'Worker', 'EventSource',
+                   'navigator', 'caches', 'localStorage', 'sessionStorage', 'importScripts', 'BroadcastChannel']) {
+    try { Object.defineProperty(self, k, { value: undefined, writable: false, configurable: false }); } catch {}
+  }
+  for (const name of bindings) {
+    try { Object.defineProperty(self, name, { value: makeProxy(name), writable: false, configurable: false }); } catch {}
+  }
+  let fn;
+  try { fn = new Function('"use strict"; return (async () => {\\n' + code + '\\n})();'); }
+  catch (e) { post({ t: 'done', ok: false, error: { name: Str(e?.name ?? 'SyntaxError'), message: cut(Str(e?.message ?? e), L.maxError) } }); return; }
+  const fail = (e) => {
+    let name = 'Error', message = '', status;
+    try { name = cut(Str(e?.name ?? 'Error'), 100); message = cut(Str(e?.message !== undefined ? e.message : e), L.maxError); status = typeof e?.status === 'number' ? e.status : undefined; } catch {}
+    post({ t: 'done', ok: false, error: { name, message, ...(status === undefined ? {} : { status }) } });
+  };
+  const done = (value) => {
+    let json;
+    try { json = S(value === undefined ? null : value); } catch (e) { fail({ name: 'TypeError', message: 'The returned value is not JSON-serializable' }); return; }
+    if (typeof json !== 'string') json = 'null';
+    const size = bytes(json);
+    if (size > L.maxResultBytes) post({ t: 'done', ok: false, tooLarge: true, size });
+    else post({ t: 'done', ok: true, json });
+  };
+  let started;
+  try { started = fn(); } catch (e) { fail(e); return; }
+  apply(then, started, [done, fail]);
+}
+${'`'};
 
-const __bindings = ${JSON.stringify(bindings)};
-for (const name of __bindings) { globalThis[name] = makeProxy(name); }
-
-const origLog = console.log;
-console.log = (...a) => writeFrame({ kind: 'log', text: a.map(String).join(' ') });
-console.info = console.log; console.warn = console.log; console.error = console.log;
-
-const userFn = async () => {
-${userCode}
+const url = URL.createObjectURL(new Blob([WORKER_SOURCE], { type: 'application/javascript' }));
+const worker = new Worker(url, { type: 'module' });
+worker.onmessage = (ev) => {
+  const m = ev.data;
+  if (!m || typeof m !== 'object') return;
+  if (m.t === 'log') frame({ t: 'log', text: String(m.text).slice(0, 65536) });
+  else if (m.t === 'rpc') frame({ t: 'rpc', id: m.id, binding: m.binding, path: m.path, args: m.args });
+  else if (m.t === 'done') frame({ t: 'done', ok: m.ok === true, json: m.json, error: m.error, tooLarge: m.tooLarge === true, size: m.size });
 };
+worker.onerror = (e) => { e.preventDefault(); frame({ t: 'done', ok: false, error: { name: 'Error', message: String(e.message ?? 'Worker error') } }); };
 
-const timer = setTimeout(() => {
-  writeFrame({ kind: 'result', ok: false, error: { name: 'TimeoutError', message: 'Execution exceeded ${timeoutMs}ms' }});
-  Deno.exit(0);
-}, ${timeoutMs});
-
-userFn()
-  .then(value => { clearTimeout(timer); writeFrame({ kind: 'result', ok: true, value }); Deno.exit(0); })
-  .catch(err => { clearTimeout(timer); writeFrame({ kind: 'result', ok: false, error: { name: err.name || 'Error', message: err.message || String(err) }}); Deno.exit(0); });
-`;
+// Host → supervisor: token-prefixed JSON lines on stdin.
+const dec = new TextDecoder();
+let buf = '';
+for await (const chunk of Deno.stdin.readable) {
+  buf += dec.decode(chunk, { stream: true });
+  let nl;
+  while ((nl = buf.indexOf('\n')) >= 0) {
+    const line = buf.slice(0, nl);
+    buf = buf.slice(nl + 1);
+    if (!line.startsWith(TOKEN)) continue;
+    let msg;
+    try { msg = JSON.parse(line.slice(TOKEN.length)); } catch { continue; }
+    if (msg.t === 'start') worker.postMessage({ t: 'start', code: msg.code, bindings: msg.bindings, limits: msg.limits });
+    else if (msg.t === 'rpc-result') worker.postMessage(msg);
+  }
 }
+// The host went away (stdin closed): do not leave a possibly busy Worker running as an orphan.
+Deno.exit(0);
+`;
 //# sourceMappingURL=deno.js.map

package/dist/sandbox/deno.js.map

@@ -1 +1 @@
-{"version":3,"file":"deno.js","sourceRoot":"","sources":["../../src/sandbox/deno.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,KAAK,EAAE,MAAM,oBAAoB,CAAC;AAC3C,OAAO,EAAE,WAAW,EAAE,MAAM,EAAE,aAAa,EAAE,MAAM,SAAS,CAAC;AAC7D,OAAO,EAAE,MAAM,EAAE,MAAM,SAAS,CAAC;AACjC,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AAEjC,OAAO,EAAE,SAAS,EAAE,MAAM,aAAa,CAAC;AAExC;;;;GAIG;AACH,MAAM,OAAO,UAAU;IACrB,IAAI,GAAG,MAAe,CAAC;IAEvB,KAAK,CAAC,SAAS;QACb,OAAO,MAAM,IAAI,OAAO,CAAC,OAAO,CAAC,EAAE;YACjC,MAAM,CAAC,GAAG,KAAK,CAAC,MAAM,EAAE,CAAC,WAAW,CAAC,EAAE,EAAE,KAAK,EAAE,QAAQ,EAAE,CAAC,CAAC;YAC5D,CAAC,CAAC,EAAE,CAAC,OAAO,EAAE,GAAG,EAAE,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC;YACpC,CAAC,CAAC,EAAE,CAAC,MAAM,EAAE,IAAI,CAAC,EAAE,CAAC,OAAO,CAAC,IAAI,KAAK,CAAC,CAAC,CAAC,CAAC;QAC5C,CAAC,CAAC,CAAC;IACL,CAAC;IAED,KAAK,CAAC,OAAO,CAAC,IAAoB,EAAE,GAAc;QAChD,MAAM,OAAO,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QAC3B,MAAM,MAAM,GAAG,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACpC,IAAI,CAAC,MAAM,CAAC,EAAE,EAAE,CAAC;YACf,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,EAAE,EAAE,KAAK,EAAE,EAAE,IAAI,EAAE,aAAa,EAAE,OAAO,EAAE,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,EAAE,UAAU,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,OAAO,EAAE,CAAC;QACtI,CAAC;QAED,MAAM,MAAM,GAAG,eAAe,CAAC,IAAI,CAAC,IAAI,EAAE,IAAI,CAAC,SAAS,IAAI,MAAM,EAAE,IAAI,CAAC,QAAQ,IAAI,EAAE,CAAC,CAAC;QACzF,+EAA+E;QAC/E,4EAA4E;QAC5E,2EAA2E;QAC3E,MAAM,MAAM,GAAG,WAAW,CAAC,IAAI,CAAC,MAAM,EAAE,EAAE,cAAc,CAAC,CAAC,CAAC;QAC3D,MAAM,UAAU,GAAG,IAAI,CAAC,MAAM,EAAE,WAAW,CAAC,CAAC;QAC7C,aAAa,CAAC,UAAU,EAAE,MAAM,CAAC,CAAC;QAClC,MAAM,OAAO,GAAG,GAAS,EAAE,GAAG,IAAI,CAAC;YAAC,MAAM,CAAC,MAAM,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;QAAC,CAAC;QAAC,MAAM,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC,CAAC;QACjH,MAAM,KAAK,GAAG,KAAK,CAAC,MAAM,EAAE;YAC1B,KAAK;YACL,aAAa;YACb,UAAU;SACX,EAAE,EAAE,KAAK,EAAE,CAAC,MAAM,EAAE,MAAM,EAAE,MAAM,CAAC,EAAE,CAAC,CAAC;QAExC,MAAM,IAAI,GAAa,EAAE,CAAC;QAC1B,IAAI,SAAS,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;QAEhC,OAAO,MAAM,IAAI,OAAO,CAAgB,CAAC,OAAO,EAAE,EAAE;YAClD,MAAM,OAAO,GAAG,UAAU,CAAC,GAAG,EAAE;gBAC9B,IAAI,CAAC;oBAAC,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;gBAAC,CAAC;gBAAC,MAAM,CAAC,CAAC,YAAY,CAAC,CAAC;gBACrD,OAAO,EAAE,CAAC;gBACV,OAAO,CAAC;oBACN,EAAE,EAAE,KAAK,EAAE,IAAI;oBACf,KAAK,EAAE,EAAE,IAAI,EAAE,cAAc,EAAE,OAAO,EAAE,sBAAsB,IAAI,CAAC,SAAS,IAAI,MAAM,IAAI,EAAE;oBAC5F,UAAU,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,OAAO;iBACjC,CAAC,CAAC;YACL,CAAC,EAAE,CAAC,IAAI,CAAC,SAAS,IAAI,MAAM,CAAC,GAAG,KAAK,CAAC,CAAC;YAEvC,KAAK,CAAC,MAAM,CAAC,EAAE,CAAC,MAAM,EAAE,KAAK,EAAE,KAAa,EAAE,EAAE;gBAC9C,SAAS,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC,SAAS,EAAE,KAAK,CAAC,CAAC,CAAC;gBAC9C,iEAAiE;gBACjE,OAAO,SAAS,CAAC,MAAM,IAAI,CAAC,EAAE,CAAC;oBAC7B,MAAM,MAAM,GAAG,SAAS,CAAC,QAAQ,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC;oBAC1D,IAAI,SAAS,CAAC,CAAC,CAAC,KAAK,IAAI,EAAE,CAAC;wBAC1B,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC;wBACtC,SAAS,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;wBAC5B,MAAM;oBACR,CAAC;oBACD,MAAM,GAAG,GAAG,QAAQ,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;oBACjC,IAAI,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC;wBAAE,MAAM;oBAC7B,IAAI,SAAS,CAAC,MAAM,GAAG,CAAC,GAAG,GAAG;wBAAE,MAAM;oBACtC,MAAM,OAAO,GAAG,SAAS,CAAC,QAAQ,CAAC,CAAC,EAAE,CAAC,GAAG,GAAG,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;oBAChE,SAAS,GAAG,SAAS,CAAC,QAAQ,CAAC,CAAC,GAAG,GAAG,CAAC,CAAC;oBACxC,MAAM,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,OAAO,CAGiE,CAAC;oBAChG,IAAI,GAAG,CAAC,IAAI,KAAK,KAAK,EAAE,CAAC;wBACvB,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;oBACtB,CAAC;yBAAM,IAAI,GAAG,CAAC,IAAI,KAAK,KAAK,EAAE,CAAC;wBAC9B,MAAM,GAAG,GAAG,MAAM,GAAG,CAAC,QAAQ,CAAC,EAAE,OAAO,EAAE,GAAG,CAAC,OAAO,EAAE,IAAI,EAAE,GAAG,CAAC,IAAI,EAAE,IAAI,EAAE,GAAG,CAAC,IAAI,EAAE,CAAC,CAAC;wBACzF,UAAU,CAAC,KAAK,CAAC,KAAK,EAAE,EAAE,IAAI,EAAE,YAAY,EAAE,EAAE,EAAE,GAAG,CAAC,EAAE,EAAE,EAAE,EAAE,GAAG,CAAC,EAAE,EAAE,KAAK,EAAE,GAAG,CAAC,KAAK,EAAE,KAAK,EAAE,GAAG,CAAC,KAAK,EAAE,CAAC,CAAC;oBAC9G,CAAC;yBAAM,IAAI,GAAG,CAAC,IAAI,KAAK,QAAQ,EAAE,CAAC;wBACjC,YAAY,CAAC,OAAO,CAAC,CAAC;wBACtB,IAAI,CAAC;4BAAC,KAAK,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC;wBAAC,CAAC;wBAAC,MAAM,CAAC,CAAC,YAAY,CAAC,CAAC;wBACjD,OAAO,CAAC;4BACN,EAAE,EAAE,GAAG,CAAC,EAAE;4BACV,IAAI;4BACJ,KAAK,EAAE,GAAG,CAAC,KAAK;4BAChB,KAAK,EAAE,GAAG,CAAC,KAAK;4BAChB,UAAU,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,OAAO;yBACjC,CAAC,CAAC;oBACL,CAAC;gBACH,CAAC;YACH,CAAC,CAAC,CAAC;YAEH,KAAK,CAAC,MAAM,CAAC,EAAE,CAAC,MAAM,EAAE,CAAC,CAAS,EAAE,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC;YACtE,KAAK,CAAC,EAAE,CAAC,OAAO,EAAE,GAAG,CAAC,EAAE;gBACtB,YAAY,CAAC,OAAO,CAAC,CAAC;gBACtB,OAAO,EAAE,CAAC;gBACV,OAAO,CAAC,EAAE,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,KAAK,EAAE,EAAE,IAAI,EAAE,YAAY,EAAE,OAAO,EAAE,GAAG,CAAC,OAAO,EAAE,EAAE,UAAU,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,OAAO,EAAE,CAAC,CAAC;YACtH,CAAC,CAAC,CAAC;YACH,KAAK,CAAC,EAAE,CAAC,MAAM,EAAE,IAAI,CAAC,EAAE;gBACtB,OAAO,EAAE,CAAC;gBACV,IAAI,IAAI,KAAK,CAAC,IAAI,IAAI,KAAK,IAAI,EAAE,CAAC;oBAChC,YAAY,CAAC,OAAO,CAAC,CAAC;oBACtB,OAAO,CAAC,EAAE,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,KAAK,EAAE,EAAE,IAAI,EAAE,WAAW,EAAE,OAAO,EAAE,oBAAoB,IAAI,EAAE,EAAE,EAAE,UAAU,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,OAAO,EAAE,CAAC,CAAC;gBACpI,CAAC;YACH,CAAC,CAAC,CAAC;QACL,CAAC,CAAC,CAAC;IACL,CAAC;CACF;AAED,SAAS,UAAU,CAAC,MAA6B,EAAE,GAAY;IAC7D,MAAM,OAAO,GAAG,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC;IACpC,MAAM,GAAG,GAAG,MAAM,CAAC,UAAU,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC;IAC7E,MAAM,CAAC,KAAK,CAAC,GAAG,GAAG,IAAI,GAAG,OAAO,CAAC,CAAC;AACrC,CAAC;AAED,sFAAsF;AACtF,yEAAyE;AACzE,oEAAoE;AACpE,MAAM,UAAU,eAAe,CAAC,QAAgB,EAAE,SAAiB,EAAE,QAAkB;IACrF,2EAA2E;IAC3E,OAAO;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;qBA0DY,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC;;;;;;;;EAQ3C,QAAQ;;;;wGAI8F,SAAS;;KAE5G,SAAS;;;;;CAKb,CAAC;AACF,CAAC"}
+{"version":3,"file":"deno.js","sourceRoot":"","sources":["../../src/sandbox/deno.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,KAAK,EAAuC,MAAM,oBAAoB,CAAC;AAChF,OAAO,EAAE,UAAU,EAAE,WAAW,EAAE,MAAM,EAAE,aAAa,EAAE,SAAS,EAAE,MAAM,SAAS,CAAC;AACpF,OAAO,EAAE,MAAM,EAAE,MAAM,SAAS,CAAC;AACjC,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AAEjC,OAAO,EAAE,GAAG,EAAE,MAAM,mBAAmB,CAAC;AACxC,OAAO,EAAE,SAAS,EAAE,MAAM,aAAa,CAAC;AACxC,OAAO,EAAE,cAAc,EAAE,iBAAiB,EAAE,aAAa,EAAE,OAAO,EAAE,iBAAiB,EAAE,YAAY,EAAE,YAAY,EAAE,WAAW,EAAE,aAAa,EAAE,cAAc,EAAsB,MAAM,aAAa,CAAC;AAEvM;;;;;;;;;;;;;;;;GAgBG;AACH,MAAM,OAAO,UAAU;IAIQ;IAH7B,IAAI,GAAG,MAAe,CAAC;IACf,MAAM,CAAC,cAAc,CAAU;IAEvC,YAA6B,SAAwB,cAAc;QAAtC,WAAM,GAAN,MAAM,CAAgC;IAAG,CAAC;IAEvE,KAAK,CAAC,SAAS;QACb,OAAO,MAAM,IAAI,OAAO,CAAC,OAAO,CAAC,EAAE;YACjC,MAAM,CAAC,GAAG,KAAK,CAAC,MAAM,EAAE,CAAC,WAAW,CAAC,EAAE,EAAE,KAAK,EAAE,QAAQ,EAAE,GAAG,EAAE,QAAQ,EAAE,EAAE,CAAC,CAAC;YAC7E,CAAC,CAAC,EAAE,CAAC,OAAO,EAAE,GAAG,EAAE,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC;YACpC,CAAC,CAAC,EAAE,CAAC,MAAM,EAAE,IAAI,CAAC,EAAE,CAAC,OAAO,CAAC,IAAI,KAAK,CAAC,CAAC,CAAC,CAAC;QAC5C,CAAC,CAAC,CAAC;IACL,CAAC;IAED,8FAA8F;IACtF,MAAM,CAAC,UAAU;QACvB,mFAAmF;QACnF,IAAI,CAAC,UAAU,CAAC,cAAc,IAAI,CAAC,UAAU,CAAC,UAAU,CAAC,cAAc,CAAC,EAAE,CAAC;YACzE,MAAM,GAAG,GAAG,WAAW,CAAC,IAAI,CAAC,MAAM,EAAE,EAAE,cAAc,CAAC,CAAC,CAAC;YACxD,SAAS,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC;YACtB,MAAM,IAAI,GAAG,IAAI,CAAC,GAAG,EAAE,eAAe,CAAC,CAAC;YACxC,aAAa,CAAC,IAAI,EAAE,iBAAiB,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;YACxD,UAAU,CAAC,cAAc,GAAG,IAAI,CAAC;YACjC,OAAO,CAAC,IAAI,CAAC,MAAM,EAAE,GAAG,EAAE,GAAG,IAAI,CAAC;gBAAC,MAAM,CAAC,GAAG,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;YAAC,CAAC;YAAC,MAAM,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;QAChH,CAAC;QACD,OAAO,UAAU,CAAC,cAAc,CAAC;IACnC,CAAC;IAED,KAAK,CAAC,OAAO,CAAC,IAAoB,EAAE,GAAc;QAChD,MAAM,OAAO,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QAC3B,MAAM,MAAM,GAAG,EAAE,GAAG,IAAI,CAAC,MAAM,EAAE,GAAG,CAAC,IAAI,CAAC,MAAM,IAAI,EAAE,CAAC,EAAE,CAAC;QAC1D,MAAM,SAAS,GAAG,IAAI,CAAC,SAAS,IAAI,MAAM,CAAC;QAC3C,MAAM,IAAI,GAAG,CAAC,IAAY,EAAE,OAAe,EAAE,OAAiB,EAAE,EAAiB,EAAE,CACjF,CAAC,EAAE,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,KAAK,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,EAAE,UAAU,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,OAAO,EAAE,CAAC,CAAC;QAEpF,MAAM,MAAM,GAAG,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACpC,IAAI,CAAC,MAAM,CAAC,EAAE;YAAE,OAAO,IAAI,CAAC,aAAa,EAAE,aAAa,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC;QACzE,IAAI,MAAM,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,EAAE,MAAM,CAAC,GAAG,MAAM,CAAC,YAAY;YAAE,OAAO,IAAI,CAAC,cAAc,EAAE,gBAAgB,MAAM,CAAC,YAAY,SAAS,CAAC,CAAC;QAE1I,IAAI,KAAqC,CAAC;QAC1C,IAAI,CAAC;YACH,KAAK,GAAG,KAAK,CAAC,MAAM,EAAE;gBACpB,KAAK,EAAE,aAAa,EAAE,aAAa,EAAE,WAAW,EAAE,aAAa,EAAE,UAAU,EAAE,SAAS;gBACtF,mCAAmC,IAAI,CAAC,GAAG,CAAC,EAAE,EAAE,IAAI,CAAC,QAAQ,IAAI,EAAE,CAAC,EAAE;gBACtE,UAAU,CAAC,UAAU,EAAE;aACxB,EAAE,EAAE,KAAK,EAAE,CAAC,MAAM,EAAE,MAAM,EAAE,MAAM,CAAC,EAAE,GAAG,EAAE,QAAQ,EAAE,EAAE,QAAQ,EAAE,OAAO,CAAC,QAAQ,KAAK,OAAO,EAAE,CAAC,CAAC;QACnG,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,OAAO,IAAI,CAAC,YAAY,EAAG,GAAa,CAAC,OAAO,CAAC,CAAC;QACpD,CAAC;QAED,MAAM,IAAI,GAAG,IAAI,OAAO,CAAC,MAAM,CAAC,WAAW,EAAE,MAAM,CAAC,WAAW,CAAC,CAAC;QACjE,OAAO,MAAM,IAAI,OAAO,CAAgB,OAAO,CAAC,EAAE;YAChD,IAAI,OAAO,GAAG,KAAK,CAAC;YACpB,IAAI,KAAyB,CAAC;YAC9B,IAAI,OAAO,GAAa,EAAE,CAAC;YAC3B,IAAI,UAAU,GAAG,CAAC,CAAC;YACnB,IAAI,aAAa,GAAG,CAAC,CAAC;YACtB,IAAI,UAAU,GAAG,CAAC,CAAC;YAEnB,yFAAyF;YACzF,6EAA6E;YAC7E,IAAI,MAAM,GAAG,KAAK,CAAC;YACnB,MAAM,WAAW,GAAsB,EAAE,CAAC;YAC1C,KAAK,CAAC,IAAI,CAAC,OAAO,EAAE,GAAG,EAAE,GAAG,MAAM,GAAG,IAAI,CAAC,CAAC,KAAK,MAAM,CAAC,IAAI,WAAW,CAAC,MAAM,CAAC,CAAC,CAAC;gBAAE,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC;YAC1F,MAAM,MAAM,GAAG,CAAC,MAAkD,EAAE,EAAE;gBACpE,IAAI,OAAO;oBAAE,OAAO;gBACpB,OAAO,GAAG,IAAI,CAAC;gBACf,YAAY,CAAC,QAAQ,CAAC,CAAC;gBACvB,MAAM,OAAO,GAAG,EAAE,GAAG,MAAM,EAAE,IAAI,EAAE,IAAI,CAAC,KAAK,EAAE,EAAE,UAAU,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,OAAO,EAAE,CAAC;gBACpF,QAAQ,CAAC,KAAK,CAAC,CAAC;gBAChB,IAAI,MAAM;oBAAE,OAAO,OAAO,CAAC,OAAO,CAAC,CAAC;gBACpC,0FAA0F;gBAC1F,+CAA+C;gBAC/C,MAAM,MAAM,GAAG,UAAU,CAAC,GAAG,EAAE;oBAC7B,GAAG,CAAC,KAAK,CAAC,0BAA0B,EAAE,EAAE,GAAG,EAAE,KAAK,CAAC,GAAG,EAAE,CAAC,CAAC;oBAC1D,QAAQ,CAAC,KAAK,CAAC,CAAC;oBAChB,OAAO,CAAC,OAAO,CAAC,CAAC;gBACnB,CAAC,EAAE,IAAI,CAAC,CAAC;gBACT,WAAW,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,YAAY,CAAC,MAAM,CAAC,CAAC,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;YACtE,CAAC,CAAC;YACF,MAAM,QAAQ,GAAG,UAAU,CACzB,GAAG,EAAE,CAAC,MAAM,CAAC,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,EAAE,IAAI,EAAE,cAAc,EAAE,OAAO,EAAE,sBAAsB,SAAS,IAAI,EAAE,EAAE,CAAC,EAC1G,SAAS,CACV,CAAC;YACF,KAAK,CAAC,EAAE,CAAC,OAAO,EAAE,GAAG,CAAC,EAAE,CAAC,MAAM,CAAC,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,EAAE,IAAI,EAAE,YAAY,EAAE,OAAO,EAAE,GAAG,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC,CAAC;YACrG,qFAAqF;YACrF,KAAK,CAAC,EAAE,CAAC,OAAO,EAAE,IAAI,CAAC,EAAE,CAAC,MAAM,CAAC,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,EAAE,IAAI,EAAE,WAAW,EAAE,OAAO,EAAE,yCAAyC,IAAI,IAAI,EAAE,EAAE,CAAC,CAAC,CAAC;YAE3I,MAAM,IAAI,GAAG,CAAC,KAAc,EAAE,EAAE;gBAC9B,IAAI,OAAO,IAAI,CAAC,KAAK;oBAAE,OAAO;gBAC9B,IAAI,IAAY,CAAC;gBACjB,IAAI,CAAC;oBAAC,IAAI,GAAG,GAAG,KAAK,GAAG,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,IAAI,CAAC;gBAAC,CAAC;gBACpD,MAAM,CAAC;oBACL,6GAA6G;oBAC7G,MAAM,CAAC,GAAG,KAAqC,CAAC;oBAChD,IAAI,CAAC,CAAC,CAAC,KAAK,YAAY;wBAAE,OAAO;oBACjC,IAAI,GAAG,GAAG,KAAK,GAAG,IAAI,CAAC,SAAS,CAAC,EAAE,CAAC,EAAE,YAAY,EAAE,EAAE,EAAE,CAAC,CAAC,EAAE,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,EAAE,IAAI,EAAE,WAAW,EAAE,OAAO,EAAE,0CAA0C,EAAE,EAAE,CAAC,IAAI,CAAC;gBACpK,CAAC;gBACD,IAAI,CAAC;oBAAC,KAAK,CAAC,KAAK,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;gBAAC,CAAC;gBAAC,MAAM,CAAC,CAAC,sCAAsC,CAAC,CAAC;YACnF,CAAC,CAAC;YAEF,MAAM,OAAO,GAAG,KAAK,EAAE,GAAW,EAAE,EAAE;gBACpC,IAAI,GAA4B,CAAC;gBACjC,IAAI,CAAC;oBAAC,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAA4B,CAAC;gBAAC,CAAC;gBACzD,MAAM,CAAC;oBAAC,OAAO,MAAM,CAAC,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,EAAE,IAAI,EAAE,sBAAsB,EAAE,OAAO,EAAE,qCAAqC,EAAE,EAAE,CAAC,CAAC;gBAAC,CAAC;gBAChI,IAAI,GAAG,CAAC,CAAC,KAAK,KAAK,IAAI,OAAO,GAAG,CAAC,IAAI,KAAK,QAAQ;oBAAE,OAAO,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;gBAChF,IAAI,GAAG,CAAC,CAAC,KAAK,KAAK,IAAI,MAAM,CAAC,aAAa,CAAC,GAAG,CAAC,EAAE,CAAC,IAAI,OAAO,GAAG,CAAC,OAAO,KAAK,QAAQ;uBAC/E,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC;oBAC1D,IAAI,UAAU,IAAI,MAAM,CAAC,aAAa,EAAE,CAAC;wBACvC,OAAO,IAAI,CAAC,EAAE,CAAC,EAAE,YAAY,EAAE,EAAE,EAAE,GAAG,CAAC,EAAE,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,EAAE,IAAI,EAAE,qBAAqB,EAAE,OAAO,EAAE,WAAW,MAAM,CAAC,aAAa,oCAAoC,EAAE,EAAE,CAAC,CAAC;oBAChL,CAAC;oBACD,MAAM,MAAM,GAAG,YAAY,CAAC,GAAG,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;oBAC9C,IAAI,MAAM;wBAAE,OAAO,IAAI,CAAC,EAAE,CAAC,EAAE,YAAY,EAAE,EAAE,EAAE,GAAG,CAAC,EAAE,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,MAAM,EAAE,CAAC,CAAC;oBACnF,UAAU,EAAE,CAAC;oBACb,IAAI,CAAC;wBACH,MAAM,GAAG,GAAG,MAAM,GAAG,CAAC,QAAQ,CAAC,EAAE,OAAO,EAAE,GAAG,CAAC,OAAO,EAAE,IAAI,EAAE,GAAG,CAAC,IAAgB,EAAE,IAAI,EAAE,GAAG,CAAC,IAAI,EAAE,CAAC,CAAC;wBACrG,IAAI,CAAC,EAAE,CAAC,EAAE,YAAY,EAAE,EAAE,EAAE,GAAG,CAAC,EAAE,EAAE,EAAE,EAAE,GAAG,CAAC,EAAE,EAAE,KAAK,EAAE,GAAG,CAAC,KAAK,EAAE,KAAK,EAAE,GAAG,CAAC,KAAK,EAAE,CAAC,CAAC;oBACxF,CAAC;4BAAS,CAAC;wBACT,UAAU,EAAE,CAAC;oBACf,CAAC;oBACD,OAAO;gBACT,CAAC;gBACD,IAAI,GAAG,CAAC,CAAC,KAAK,MAAM,EAAE,CAAC;oBACrB,IAAI,GAAG,CAAC,EAAE,KAAK,IAAI,IAAI,OAAO,GAAG,CAAC,IAAI,KAAK,QAAQ;wBAAE,OAAO,MAAM,CAAC,WAAW,CAAC,GAAG,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC,CAAC;oBAClG,IAAI,GAAG,CAAC,QAAQ,KAAK,IAAI,IAAI,OAAO,GAAG,CAAC,IAAI,KAAK,QAAQ;wBAAE,OAAO,MAAM,CAAC,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,cAAc,CAAC,GAAG,CAAC,IAAI,EAAE,MAAM,CAAC,EAAE,CAAC,CAAC;oBACjI,MAAM,CAAC,GAAG,CAAC,GAAG,CAAC,KAAK,IAAI,EAAE,CAA4B,CAAC;oBACvD,OAAO,MAAM,CAAC;wBACZ,EAAE,EAAE,KAAK;wBACT,KAAK,EAAE;4BACL,IAAI,EAAE,OAAO,CAAC,CAAC,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC,CAAC,CAAC,OAAO;4BACjE,OAAO,EAAE,OAAO,CAAC,CAAC,OAAO,KAAK,QAAQ,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,kBAAkB;4BACrF,GAAG,CAAC,OAAO,CAAC,CAAC,MAAM,KAAK,QAAQ,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;yBAC9D;qBACF,CAAC,CAAC;gBACL,CAAC;gBACD,OAAO,MAAM,CAAC,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,EAAE,IAAI,EAAE,sBAAsB,EAAE,OAAO,EAAE,uCAAuC,EAAE,EAAE,CAAC,CAAC;YAC1H,CAAC,CAAC;YAEF,KAAK,CAAC,MAAM,CAAC,WAAW,CAAC,MAAM,CAAC,CAAC;YACjC,KAAK,CAAC,MAAM,CAAC,EAAE,CAAC,MAAM,EAAE,CAAC,KAAa,EAAE,EAAE;gBACxC,IAAI,OAAO;oBAAE,OAAO;gBACpB,aAAa,IAAI,MAAM,CAAC,UAAU,CAAC,KAAK,EAAE,MAAM,CAAC,CAAC;gBAClD,IAAI,aAAa,GAAG,MAAM,CAAC,cAAc,EAAE,CAAC;oBAC1C,OAAO,MAAM,CAAC,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,EAAE,IAAI,EAAE,gBAAgB,EAAE,OAAO,EAAE,kCAAkC,MAAM,CAAC,cAAc,mBAAmB,EAAE,EAAE,CAAC,CAAC;gBACvJ,CAAC;gBACD,6FAA6F;gBAC7F,MAAM,QAAQ,GAAG,KAAK,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;gBACnC,MAAM,IAAI,GAAG,QAAQ,CAAC,GAAG,EAAG,CAAC;gBAC7B,KAAK,MAAM,GAAG,IAAI,QAAQ,EAAE,CAAC;oBAC3B,IAAI,OAAO;wBAAE,OAAO;oBACpB,MAAM,IAAI,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,CAAC,GAAG,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC;oBAC3D,OAAO,GAAG,EAAE,CAAC;oBACb,UAAU,GAAG,CAAC,CAAC;oBACf,IAAI,CAAC,KAAK,EAAE,CAAC;wBACX,sFAAsF;wBACtF,MAAM,CAAC,GAAG,iCAAiC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;wBACvD,IAAI,CAAC,CAAC;4BAAE,OAAO,MAAM,CAAC,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,EAAE,IAAI,EAAE,sBAAsB,EAAE,OAAO,EAAE,sCAAsC,EAAE,EAAE,CAAC,CAAC;wBAC/H,KAAK,GAAG,CAAC,CAAC,CAAC,CAAE,CAAC;wBACd,IAAI,CAAC,EAAE,CAAC,EAAE,OAAO,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE,QAAQ,EAAE,IAAI,CAAC,QAAQ,IAAI,EAAE,EAAE,MAAM,EAAE;gCACzE,WAAW,EAAE,MAAM,CAAC,WAAW,EAAE,WAAW,EAAE,MAAM,CAAC,WAAW,EAAE,eAAe,EAAE,iBAAiB;gCACpG,YAAY,EAAE,aAAa,EAAE,cAAc,EAAE,MAAM,CAAC,cAAc,EAAE,cAAc,EAAE,MAAM,CAAC,cAAc;gCACzG,QAAQ,EAAE,iBAAiB;6BAC5B,EAAE,CAAC,CAAC;wBACL,SAAS;oBACX,CAAC;oBACD,IAAI,IAAI,CAAC,UAAU,CAAC,KAAK,CAAC,EAAE,CAAC;wBAC3B,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,EAAE,CAAC,MAAM,CAAC,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,EAAE,IAAI,EAAE,sBAAsB,EAAE,OAAO,EAAE,YAAY,CAAC,MAAM,CAAE,GAAa,EAAE,OAAO,IAAI,GAAG,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC;oBAChL,CAAC;yBACI,IAAI,IAAI,CAAC,MAAM;wBAAE,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;gBACxC,CAAC;gBACD,IAAI,OAAO;oBAAE,OAAO;gBACpB,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;gBACnB,UAAU,IAAI,IAAI,CAAC,MAAM,CAAC;gBAC1B,IAAI,UAAU,GAAG,MAAM,CAAC,aAAa,EAAE,CAAC;oBACtC,MAAM,CAAC,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,EAAE,IAAI,EAAE,gBAAgB,EAAE,OAAO,EAAE,8BAA8B,MAAM,CAAC,aAAa,SAAS,EAAE,EAAE,CAAC,CAAC;gBACjI,CAAC;YACH,CAAC,CAAC,CAAC;YACH,KAAK,CAAC,MAAM,CAAC,WAAW,CAAC,MAAM,CAAC,CAAC;YACjC,KAAK,CAAC,MAAM,CAAC,EAAE,CAAC,MAAM,EAAE,CAAC,KAAa,EAAE,EAAE,GAAG,IAAI,CAAC,OAAO;gBAAE,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;YAC1F,KAAK,CAAC,KAAK,CAAC,EAAE,CAAC,OAAO,EAAE,GAAG,EAAE,GAA4C,CAAC,CAAC,CAAC;QAC9E,CAAC,CAAC,CAAC;IACL,CAAC;CACF;AAED,iEAAiE;AACjE,SAAS,QAAQ;IACf,MAAM,GAAG,GAAsB,EAAE,QAAQ,EAAE,GAAG,EAAE,oBAAoB,EAAE,GAAG,EAAE,cAAc,EAAE,GAAG,EAAE,CAAC;IACjG,KAAK,MAAM,CAAC,IAAI,CAAC,MAAM,EAAE,MAAM,EAAE,UAAU,EAAE,QAAQ,EAAE,YAAY,EAAE,aAAa,EAAE,cAAc,CAAC,EAAE,CAAC;QACpG,IAAI,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC;YAAE,GAAG,CAAC,CAAC,CAAC,GAAG,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;IAC9C,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC;AAED,8EAA8E;AAC9E,SAAS,QAAQ,CAAC,KAAqC;IACrD,IAAI,CAAC;QAAC,KAAK,CAAC,KAAK,CAAC,OAAO,EAAE,CAAC;IAAC,CAAC;IAAC,MAAM,CAAC,CAAC,YAAY,CAAC,CAAC;IACrD,IAAI,KAAK,CAAC,QAAQ,KAAK,IAAI,IAAI,KAAK,CAAC,UAAU,KAAK,IAAI;QAAE,OAAO;IACjE,IAAI,OAAO,CAAC,QAAQ,KAAK,OAAO,IAAI,KAAK,CAAC,GAAG,EAAE,CAAC;QAC9C,IAAI,CAAC;YAAC,OAAO,CAAC,IAAI,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,SAAS,CAAC,CAAC;YAAC,OAAO;QAAC,CAAC;QAAC,MAAM,CAAC,CAAC,kBAAkB,CAAC,CAAC;IACnF,CAAC;IACD,IAAI,CAAC;QAAC,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;IAAC,CAAC;IAAC,MAAM,CAAC,CAAC,YAAY,CAAC,CAAC;AACvD,CAAC;AAED;;;GAGG;AACH,MAAM,CAAC,MAAM,iBAAiB,GAAG,MAAM,CAAC,GAAG,CAAA;;;;;;;;;wBASnB,GAAG;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;EAwFzB,GAAG;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;CA+BJ,CAAC"}

package/dist/sandbox/isolate.d.ts

@@ -1,6 +1,16 @@
 import type { ExecuteOptions, ExecuteResult, RpcBridge, SandboxRunner } from './types.js';
+import { type SandboxLimits } from './limits.js';
+/**
+ * isolated-vm sandbox: a fresh V8 isolate per execution with a heap cap. The host owns a
+ * wall-clock deadline that starts before setup: when it fires the isolate
+ * is disposed, which stops running code and rejects anything it awaits, and the execution settles
+ * once. V8's own `timeout` stays as a second guard for synchronous loops. This runs in the server
+ * process, so for hosted multi-user execution prefer the Deno runner (separate process).
+ */
 export declare class IsolateRunner implements SandboxRunner {
+    private readonly limits;
     kind: "isolate";
+    constructor(limits?: SandboxLimits);
     available(): Promise<boolean>;
     execute(opts: ExecuteOptions, rpc: RpcBridge): Promise<ExecuteResult>;
 }

package/dist/sandbox/isolate.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"isolate.d.ts","sourceRoot":"","sources":["../../src/sandbox/isolate.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,cAAc,EAAE,aAAa,EAAE,SAAS,EAAE,aAAa,EAAE,MAAM,YAAY,CAAC;AAoB1F,qBAAa,aAAc,YAAW,aAAa;IACjD,IAAI,EAAG,SAAS,CAAU;IAEpB,SAAS,IAAI,OAAO,CAAC,OAAO,CAAC;IAY7B,OAAO,CAAC,IAAI,EAAE,cAAc,EAAE,GAAG,EAAE,SAAS,GAAG,OAAO,CAAC,aAAa,CAAC;CAoF5E"}
+{"version":3,"file":"isolate.d.ts","sourceRoot":"","sources":["../../src/sandbox/isolate.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,cAAc,EAAE,aAAa,EAAE,SAAS,EAAE,aAAa,EAAE,MAAM,YAAY,CAAC;AAE1F,OAAO,EAA0I,KAAK,aAAa,EAAE,MAAM,aAAa,CAAC;AAWzL;;;;;;GAMG;AACH,qBAAa,aAAc,YAAW,aAAa;IAGrC,OAAO,CAAC,QAAQ,CAAC,MAAM;IAFnC,IAAI,EAAG,SAAS,CAAU;gBAEG,MAAM,GAAE,aAA8B;IAE7D,SAAS,IAAI,OAAO,CAAC,OAAO,CAAC;IAW7B,OAAO,CAAC,IAAI,EAAE,cAAc,EAAE,GAAG,EAAE,SAAS,GAAG,OAAO,CAAC,aAAa,CAAC;CA2I5E"}