@execbox/core 0.4.0 → 0.5.0

package/README.md

@@ -1,120 +1,93 @@
 # @execbox/core
 
-Executor-agnostic core for guest JavaScript that can call host tools directly or wrap MCP servers and clients into callable namespaces.
+Core execution contract for execbox. Use it to resolve host tools into callable guest namespaces, validate tool boundaries, and bridge MCP servers or clients into the same execution model.
 
 [![npm version](https://img.shields.io/npm/v/%40execbox%2Fcore?style=flat-square)](https://www.npmjs.com/package/@execbox/core)
 [![License](https://img.shields.io/github/license/aallam/execbox?style=flat-square)](https://github.com/aallam/execbox/blob/main/LICENSE)
+[![Docs](https://img.shields.io/badge/docs-site-0ea5e9?style=flat-square)](https://execbox.aallam.com)
 
-Docs: https://execbox.aallam.com
+## Use `@execbox/core` When
 
-## What You Get
-
-- Resolve host tools into deterministic guest namespaces with name sanitization.
-- Validate tool inputs and outputs with JSON Schema, full Zod schemas, or MCP SDK-style raw Zod shapes.
-- Normalize user code before execution and generate namespace typings from resolved schemas.
-- Wrap MCP servers or clients into execbox providers, or expose code-execution tools from an MCP server.
+- you want to expose host capabilities to guest code through explicit tool providers
+- you want one execution contract across QuickJS, remote, or `isolated-vm` runtimes
+- you want to wrap MCP servers or clients into callable namespaces instead of exposing raw tool loops
 
 ## Pair It With an Executor
 
-`@execbox/core` does not execute code on its own. Pair it with one of the executor packages:
-
-| Package                                                                      | Best for                                                                    |
-| ---------------------------------------------------------------------------- | --------------------------------------------------------------------------- |
-| [`@execbox/quickjs`](https://www.npmjs.com/package/@execbox/quickjs)         | Easiest setup, no native addon, with inline, worker, and process host modes |
-| [`@execbox/remote`](https://www.npmjs.com/package/@execbox/remote)           | Same executor API, but with a caller-supplied remote boundary               |
-| [`@execbox/isolated-vm`](https://www.npmjs.com/package/@execbox/isolated-vm) | Native `isolated-vm` backend when you specifically want that runtime        |
+`@execbox/core` defines the provider and tool boundary, but it does not execute guest code on its own.
 
-## Examples
-
-- [Basic provider execution](https://github.com/aallam/execbox/blob/main/examples/execbox-basic.ts)
-- [Process-backed provider execution](https://github.com/aallam/execbox/blob/main/examples/execbox-process.ts)
-- [Remote provider execution](https://github.com/aallam/execbox/blob/main/examples/execbox-remote.ts)
-- [Worker-backed provider execution](https://github.com/aallam/execbox/blob/main/examples/execbox-worker.ts)
-- [Wrap MCP tools into a provider](https://github.com/aallam/execbox/blob/main/examples/execbox-mcp-provider.ts)
-- [Expose MCP code-execution tools from a server](https://github.com/aallam/execbox/blob/main/examples/execbox-mcp-server.ts)
-- [Run the same flow on `isolated-vm`](https://github.com/aallam/execbox/blob/main/examples/execbox-isolated-vm-basic.ts)
-- [Full examples index](https://github.com/aallam/execbox/tree/main/examples)
+| Package                                                                      | Start here when                                                                |
+| ---------------------------------------------------------------------------- | ------------------------------------------------------------------------------ |
+| [`@execbox/quickjs`](https://www.npmjs.com/package/@execbox/quickjs)         | You want the default path with inline, worker, or process-hosted QuickJS.      |
+| [`@execbox/remote`](https://www.npmjs.com/package/@execbox/remote)           | Your runtime already lives behind an application-owned transport boundary.     |
+| [`@execbox/isolated-vm`](https://www.npmjs.com/package/@execbox/isolated-vm) | You explicitly want the `isolated-vm` runtime and can support its constraints. |
 
 ## Install
 
+Most users start with QuickJS:
+
 ```bash
 npm install @execbox/core @execbox/quickjs
 ```
 
-Swap in `@execbox/isolated-vm` when you want the native executor instead.
-Set `host: "process"` on `QuickJsExecutor` when you want the QuickJS runtime to live in a fresh child process.
-Set `host: "worker"` on `QuickJsExecutor` when you want QuickJS off the main thread with pooled worker shells.
-Swap in `@execbox/remote` when you want the same API but a caller-managed remote transport boundary.
-
-## Security Posture
-
-- Execbox gives you fresh execution state, JSON-only tool boundaries, schema validation, timeout handling, memory limits, and bounded logs.
-- Hard isolation depends on the executor and deployment boundary you pair with `@execbox/core`.
-- Providers are explicit capability grants. Every tool you expose is authority you are handing to guest code.
-- In the default deployment model, provider and MCP tool definitions are controlled by the application, not by the end user.
-- Third-party MCP integrations should be reviewed as dependency-trust decisions, not folded into the primary end-user attacker model.
-- If the code source is hostile, prefer stronger isolation such as `QuickJsExecutor` with `host: "process"`, `@execbox/remote`, a container, or a VM.
-
-## Architecture Docs
-
-- [Execbox architecture overview](https://github.com/aallam/execbox/blob/main/docs/architecture/README.md)
-- [Execbox core architecture](https://github.com/aallam/execbox/blob/main/docs/architecture/execbox-core.md)
-- [Execbox executors](https://github.com/aallam/execbox/blob/main/docs/architecture/execbox-executors.md)
-- [Execbox MCP adapters and protocol](https://github.com/aallam/execbox/blob/main/docs/architecture/execbox-mcp-and-protocol.md)
-
-## Exports
-
-- `@execbox/core`
-  - `ExecutionOptions`
-  - `resolveProvider`
-  - `normalizeCode`
-  - `sanitizeToolName`
-  - `extractProviderManifests`
-  - `createToolCallDispatcher`
-  - JSON Schema type generation and executor/result types
-- `@execbox/core/mcp`
-  - `createMcpToolProvider`
-  - `openMcpToolProvider`
-  - `getMcpToolSourceServerInfo`
-  - `McpToolClientSource`
-  - `McpToolServerSource`
-  - `codeMcpServer`
-
-## Basic Usage
+Swap in `@execbox/remote` or `@execbox/isolated-vm` when you need a different runtime boundary.
+
+## Runtime Implementer Surface
+
+Application code should usually import from `@execbox/core`, `@execbox/core/mcp`, or `@execbox/core/protocol`.
+Executor and runner packages should import shared runtime helpers from `@execbox/core/runtime` instead. That subpath contains the manifest dispatcher, runtime option defaults, timeout helpers, log formatting, code normalization, and error normalization used to keep runtime implementations aligned.
+
+## Smallest Working Usage
 
 ```ts
 import { resolveProvider } from "@execbox/core";
 import { QuickJsExecutor } from "@execbox/quickjs";
-import * as z from "zod";
 
 const provider = resolveProvider({
   name: "tools",
   tools: {
-    add: {
-      inputSchema: z.object({
-        x: z.number(),
-        y: z.number(),
-      }),
-      execute: async (input) => {
-        const { x, y } = input as { x: number; y: number };
-        return { sum: x + y };
+    greet: {
+      inputSchema: {
+        type: "object",
+        required: ["name"],
+        properties: {
+          name: { type: "string" },
+        },
       },
+      execute: async (input) => ({
+        message: `Hello, ${(input as { name: string }).name}!`,
+      }),
     },
   },
 });
 
 const executor = new QuickJsExecutor();
-const result = await executor.execute(
-  "await tools.add({ x: 2, y: 5 })",
-  [provider],
-  { timeoutMs: 250 },
-);
+const result = await executor.execute(`await tools.greet({ name: "World" })`, [
+  provider,
+]);
+
+console.log(result);
 ```
 
-## MCP Adapters
+## MCP Support
+
+Use `@execbox/core/mcp` when you want MCP on either side of the boundary:
+
+- wrap an upstream MCP server or client into a provider with `createMcpToolProvider()` or `openMcpToolProvider()`
+- expose execbox code execution back out through an MCP server with `codeMcpServer()`
+- preserve raw MCP `CallToolResult` envelopes so guest code can inspect `structuredContent` first and fall back to `content`
+
+## Operational Notes
+
+- Providers are the capability boundary. If guest code can call a tool, it can exercise that authority.
+- Execbox gives you JSON-only tool/result boundaries, schema validation, bounded logs, and timeout-aware execution controls.
+- Hard isolation depends on the executor and deployment boundary you choose, not on `@execbox/core` by itself.
 
-Use `@execbox/core/mcp` when you want to wrap an MCP server or client into a tool provider, or expose code-execution tools from an MCP server. Wrapped tools preserve raw MCP `CallToolResult` envelopes so guest code can inspect `structuredContent` first and fall back to `content`.
+## Read Next
 
-- `createMcpToolProvider({ client })` is the convenience API when the caller already owns the upstream MCP client lifecycle.
-- `openMcpToolProvider({ server | client })` returns an `McpToolProviderHandle` and is the required API when execbox owns a local `{ server }` connection.
-- `codeMcpServer()` owns any local wrapper connection it opens and releases it when the wrapper server closes.
+- [Getting Started](https://execbox.aallam.com/getting-started)
+- [Examples](https://execbox.aallam.com/examples)
+- [Security & Boundaries](https://execbox.aallam.com/security)
+- [Architecture Overview](https://execbox.aallam.com/architecture/)
+- [Core Architecture](https://execbox.aallam.com/architecture/execbox-core)
+- [MCP And Protocol](https://execbox.aallam.com/architecture/execbox-mcp-and-protocol)

package/dist/errors-B9ADBuDH.d.cts

@@ -0,0 +1,29 @@
+/**
+ * @packageDocumentation
+ * Public TypeScript declarations for this package entrypoint.
+ */
+import { u as ExecuteErrorCode } from "./runner-DSgvu6Ad.cjs";
+
+//#region src/errors.d.ts
+
+/**
+ * Structured failure used internally to propagate executor and tool errors.
+ */
+declare class ExecuteFailure extends Error {
+  code: ExecuteErrorCode;
+  /**
+   * Creates a structured failure with a trusted executor or tool error code.
+   */
+  constructor(code: ExecuteErrorCode, message: string);
+}
+/**
+ * Returns whether a thrown value is an {@link ExecuteFailure}.
+ */
+declare function isExecuteFailure(value: unknown): value is ExecuteFailure;
+/**
+ * Returns whether a value can be serialized through the JSON-only host/guest boundary.
+ */
+declare function isJsonSerializable(value: unknown, active?: Set<object>, memo?: WeakSet<object>): boolean;
+//#endregion
+export { isExecuteFailure as n, isJsonSerializable as r, ExecuteFailure as t };
+//# sourceMappingURL=errors-B9ADBuDH.d.cts.map

package/dist/errors-B9ADBuDH.d.cts.map

@@ -0,0 +1 @@
+{"version":3,"file":"errors-B9ADBuDH.d.cts","names":[],"sources":["../src/errors.ts"],"sourcesContent":[],"mappings":";;;;;;;;;;AAKA,CAAA,CAAA;AACQ,OAAA,CAAA,KAAA,CADK,cAAA,CAAA,OAAA,CAAuB,KAAA,CAC5B;EAKY,IAAA,CAAA,CALZ,gBAKY;EANgB,CAAA,CAAA;;AAgBpC,CAAA,CAAA,CAAA,CAAA;EAOgB,WAAA,CAAA,IAAA,CAAA,CAjBI,gBAmBZ,CAAA,CAAA,OACF,CAAA,CAAA,MAAA,CAAA;;;;;iBAVU,gBAAA,2BAA2C;;;;iBAO3C,kBAAA,0BAER,oBACF"}

package/dist/errors-DlbJQYs7.d.ts

@@ -0,0 +1,29 @@
+/**
+ * @packageDocumentation
+ * Public TypeScript declarations for this package entrypoint.
+ */
+import { u as ExecuteErrorCode } from "./runner-ClFrFnz9.js";
+
+//#region src/errors.d.ts
+
+/**
+ * Structured failure used internally to propagate executor and tool errors.
+ */
+declare class ExecuteFailure extends Error {
+  code: ExecuteErrorCode;
+  /**
+   * Creates a structured failure with a trusted executor or tool error code.
+   */
+  constructor(code: ExecuteErrorCode, message: string);
+}
+/**
+ * Returns whether a thrown value is an {@link ExecuteFailure}.
+ */
+declare function isExecuteFailure(value: unknown): value is ExecuteFailure;
+/**
+ * Returns whether a value can be serialized through the JSON-only host/guest boundary.
+ */
+declare function isJsonSerializable(value: unknown, active?: Set<object>, memo?: WeakSet<object>): boolean;
+//#endregion
+export { isExecuteFailure as n, isJsonSerializable as r, ExecuteFailure as t };
+//# sourceMappingURL=errors-DlbJQYs7.d.ts.map

package/dist/errors-DlbJQYs7.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"errors-DlbJQYs7.d.ts","names":[],"sources":["../src/errors.ts"],"sourcesContent":[],"mappings":";;;;;;;;;;AAKA,CAAA,CAAA;AACQ,OAAA,CAAA,KAAA,CADK,cAAA,CAAA,OAAA,CAAuB,KAAA,CAC5B;EAKY,IAAA,CAAA,CALZ,gBAKY;EANgB,CAAA,CAAA;;AAgBpC,CAAA,CAAA,CAAA,CAAA;EAOgB,WAAA,CAAA,IAAA,CAAA,CAjBI,gBAmBZ,CAAA,CAAA,OACF,CAAA,CAAA,MAAA,CAAA;;;;;iBAVU,gBAAA,2BAA2C;;;;iBAO3C,kBAAA,0BAER,oBACF"}

package/dist/{errors-CgBwm39w.js → errors-wS8yjQhS.js}

@@ -58,4 +58,4 @@ function isJsonSerializable(value, active = /* @__PURE__ */ new Set(), memo = /*
 
 //#endregion
 export { isExecuteFailure as n, isJsonSerializable as r, ExecuteFailure as t };
-//# sourceMappingURL=errors-CgBwm39w.js.map
+//# sourceMappingURL=errors-wS8yjQhS.js.map

package/dist/{errors-CgBwm39w.js.map → errors-wS8yjQhS.js.map}

@@ -1 +1 @@
-{"version":3,"file":"errors-CgBwm39w.js","names":[],"sources":["../src/errors.ts"],"sourcesContent":["import type { ExecuteErrorCode } from \"./types\";\n\n/**\n * Structured failure used internally to propagate executor and tool errors.\n */\nexport class ExecuteFailure extends Error {\n  code: ExecuteErrorCode;\n\n  /**\n   * Creates a structured failure with a trusted executor or tool error code.\n   */\n  constructor(code: ExecuteErrorCode, message: string) {\n    super(message);\n    this.code = code;\n    this.name = \"ExecuteFailure\";\n  }\n}\n\n/**\n * Returns whether a thrown value is an {@link ExecuteFailure}.\n */\nexport function isExecuteFailure(value: unknown): value is ExecuteFailure {\n  return value instanceof ExecuteFailure;\n}\n\n/**\n * Returns whether a value can be serialized through the JSON-only host/guest boundary.\n */\nexport function isJsonSerializable(\n  value: unknown,\n  active = new Set<object>(),\n  memo = new WeakSet<object>(),\n): boolean {\n  if (value === null) {\n    return true;\n  }\n\n  switch (typeof value) {\n    case \"string\":\n    case \"boolean\":\n      return true;\n    case \"number\":\n      return Number.isFinite(value);\n    case \"bigint\":\n    case \"function\":\n    case \"symbol\":\n    case \"undefined\":\n      return false;\n    case \"object\": {\n      const objectValue = value as object;\n\n      if (memo.has(objectValue)) {\n        return true;\n      }\n\n      if (active.has(objectValue)) {\n        return false;\n      }\n\n      active.add(objectValue);\n      let isSerializable = false;\n\n      try {\n        if (Array.isArray(value)) {\n          isSerializable = value.every((item) =>\n            isJsonSerializable(item, active, memo),\n          );\n          return isSerializable;\n        }\n\n        const prototype = Object.getPrototypeOf(value);\n        if (prototype !== Object.prototype && prototype !== null) {\n          return false;\n        }\n\n        isSerializable = Object.values(value).every((item) =>\n          isJsonSerializable(item, active, memo),\n        );\n        return isSerializable;\n      } finally {\n        active.delete(objectValue);\n        if (isSerializable) {\n          memo.add(objectValue);\n        }\n      }\n    }\n  }\n\n  return false;\n}\n"],"mappings":";;;;AAKA,IAAa,iBAAb,cAAoC,MAAM;CACxC;;;;CAKA,YAAY,MAAwB,SAAiB;AACnD,QAAM,QAAQ;AACd,OAAK,OAAO;AACZ,OAAK,OAAO;;;;;;AAOhB,SAAgB,iBAAiB,OAAyC;AACxE,QAAO,iBAAiB;;;;;AAM1B,SAAgB,mBACd,OACA,yBAAS,IAAI,KAAa,EAC1B,uBAAO,IAAI,SAAiB,EACnB;AACT,KAAI,UAAU,KACZ,QAAO;AAGT,SAAQ,OAAO,OAAf;EACE,KAAK;EACL,KAAK,UACH,QAAO;EACT,KAAK,SACH,QAAO,OAAO,SAAS,MAAM;EAC/B,KAAK;EACL,KAAK;EACL,KAAK;EACL,KAAK,YACH,QAAO;EACT,KAAK,UAAU;GACb,MAAM,cAAc;AAEpB,OAAI,KAAK,IAAI,YAAY,CACvB,QAAO;AAGT,OAAI,OAAO,IAAI,YAAY,CACzB,QAAO;AAGT,UAAO,IAAI,YAAY;GACvB,IAAI,iBAAiB;AAErB,OAAI;AACF,QAAI,MAAM,QAAQ,MAAM,EAAE;AACxB,sBAAiB,MAAM,OAAO,SAC5B,mBAAmB,MAAM,QAAQ,KAAK,CACvC;AACD,YAAO;;IAGT,MAAM,YAAY,OAAO,eAAe,MAAM;AAC9C,QAAI,cAAc,OAAO,aAAa,cAAc,KAClD,QAAO;AAGT,qBAAiB,OAAO,OAAO,MAAM,CAAC,OAAO,SAC3C,mBAAmB,MAAM,QAAQ,KAAK,CACvC;AACD,WAAO;aACC;AACR,WAAO,OAAO,YAAY;AAC1B,QAAI,eACF,MAAK,IAAI,YAAY;;;;AAM7B,QAAO"}
+{"version":3,"file":"errors-wS8yjQhS.js","names":[],"sources":["../src/errors.ts"],"sourcesContent":["import type { ExecuteErrorCode } from \"./types\";\n\n/**\n * Structured failure used internally to propagate executor and tool errors.\n */\nexport class ExecuteFailure extends Error {\n  code: ExecuteErrorCode;\n\n  /**\n   * Creates a structured failure with a trusted executor or tool error code.\n   */\n  constructor(code: ExecuteErrorCode, message: string) {\n    super(message);\n    this.code = code;\n    this.name = \"ExecuteFailure\";\n  }\n}\n\n/**\n * Returns whether a thrown value is an {@link ExecuteFailure}.\n */\nexport function isExecuteFailure(value: unknown): value is ExecuteFailure {\n  return value instanceof ExecuteFailure;\n}\n\n/**\n * Returns whether a value can be serialized through the JSON-only host/guest boundary.\n */\nexport function isJsonSerializable(\n  value: unknown,\n  active = new Set<object>(),\n  memo = new WeakSet<object>(),\n): boolean {\n  if (value === null) {\n    return true;\n  }\n\n  switch (typeof value) {\n    case \"string\":\n    case \"boolean\":\n      return true;\n    case \"number\":\n      return Number.isFinite(value);\n    case \"bigint\":\n    case \"function\":\n    case \"symbol\":\n    case \"undefined\":\n      return false;\n    case \"object\": {\n      const objectValue = value as object;\n\n      if (memo.has(objectValue)) {\n        return true;\n      }\n\n      if (active.has(objectValue)) {\n        return false;\n      }\n\n      active.add(objectValue);\n      let isSerializable = false;\n\n      try {\n        if (Array.isArray(value)) {\n          isSerializable = value.every((item) =>\n            isJsonSerializable(item, active, memo),\n          );\n          return isSerializable;\n        }\n\n        const prototype = Object.getPrototypeOf(value);\n        if (prototype !== Object.prototype && prototype !== null) {\n          return false;\n        }\n\n        isSerializable = Object.values(value).every((item) =>\n          isJsonSerializable(item, active, memo),\n        );\n        return isSerializable;\n      } finally {\n        active.delete(objectValue);\n        if (isSerializable) {\n          memo.add(objectValue);\n        }\n      }\n    }\n  }\n\n  return false;\n}\n"],"mappings":";;;;AAKA,IAAa,iBAAb,cAAoC,MAAM;CACxC;;;;CAKA,YAAY,MAAwB,SAAiB;AACnD,QAAM,QAAQ;AACd,OAAK,OAAO;AACZ,OAAK,OAAO;;;;;;AAOhB,SAAgB,iBAAiB,OAAyC;AACxE,QAAO,iBAAiB;;;;;AAM1B,SAAgB,mBACd,OACA,yBAAS,IAAI,KAAa,EAC1B,uBAAO,IAAI,SAAiB,EACnB;AACT,KAAI,UAAU,KACZ,QAAO;AAGT,SAAQ,OAAO,OAAf;EACE,KAAK;EACL,KAAK,UACH,QAAO;EACT,KAAK,SACH,QAAO,OAAO,SAAS,MAAM;EAC/B,KAAK;EACL,KAAK;EACL,KAAK;EACL,KAAK,YACH,QAAO;EACT,KAAK,UAAU;GACb,MAAM,cAAc;AAEpB,OAAI,KAAK,IAAI,YAAY,CACvB,QAAO;AAGT,OAAI,OAAO,IAAI,YAAY,CACzB,QAAO;AAGT,UAAO,IAAI,YAAY;GACvB,IAAI,iBAAiB;AAErB,OAAI;AACF,QAAI,MAAM,QAAQ,MAAM,EAAE;AACxB,sBAAiB,MAAM,OAAO,SAC5B,mBAAmB,MAAM,QAAQ,KAAK,CACvC;AACD,YAAO;;IAGT,MAAM,YAAY,OAAO,eAAe,MAAM;AAC9C,QAAI,cAAc,OAAO,aAAa,cAAc,KAClD,QAAO;AAGT,qBAAiB,OAAO,OAAO,MAAM,CAAC,OAAO,SAC3C,mBAAmB,MAAM,QAAQ,KAAK,CACvC;AACD,WAAO;aACC;AACR,WAAO,OAAO,YAAY;AAC1B,QAAI,eACF,MAAK,IAAI,YAAY;;;;AAM7B,QAAO"}

package/dist/{errors-CTel18cM.cjs → errors-xD8r6fCf.cjs}

@@ -76,4 +76,4 @@ Object.defineProperty(exports, 'isJsonSerializable', {
     return isJsonSerializable;
   }
 });
-//# sourceMappingURL=errors-CTel18cM.cjs.map
+//# sourceMappingURL=errors-xD8r6fCf.cjs.map

package/dist/{errors-CTel18cM.cjs.map → errors-xD8r6fCf.cjs.map}

@@ -1 +1 @@
-{"version":3,"file":"errors-CTel18cM.cjs","names":[],"sources":["../src/errors.ts"],"sourcesContent":["import type { ExecuteErrorCode } from \"./types\";\n\n/**\n * Structured failure used internally to propagate executor and tool errors.\n */\nexport class ExecuteFailure extends Error {\n  code: ExecuteErrorCode;\n\n  /**\n   * Creates a structured failure with a trusted executor or tool error code.\n   */\n  constructor(code: ExecuteErrorCode, message: string) {\n    super(message);\n    this.code = code;\n    this.name = \"ExecuteFailure\";\n  }\n}\n\n/**\n * Returns whether a thrown value is an {@link ExecuteFailure}.\n */\nexport function isExecuteFailure(value: unknown): value is ExecuteFailure {\n  return value instanceof ExecuteFailure;\n}\n\n/**\n * Returns whether a value can be serialized through the JSON-only host/guest boundary.\n */\nexport function isJsonSerializable(\n  value: unknown,\n  active = new Set<object>(),\n  memo = new WeakSet<object>(),\n): boolean {\n  if (value === null) {\n    return true;\n  }\n\n  switch (typeof value) {\n    case \"string\":\n    case \"boolean\":\n      return true;\n    case \"number\":\n      return Number.isFinite(value);\n    case \"bigint\":\n    case \"function\":\n    case \"symbol\":\n    case \"undefined\":\n      return false;\n    case \"object\": {\n      const objectValue = value as object;\n\n      if (memo.has(objectValue)) {\n        return true;\n      }\n\n      if (active.has(objectValue)) {\n        return false;\n      }\n\n      active.add(objectValue);\n      let isSerializable = false;\n\n      try {\n        if (Array.isArray(value)) {\n          isSerializable = value.every((item) =>\n            isJsonSerializable(item, active, memo),\n          );\n          return isSerializable;\n        }\n\n        const prototype = Object.getPrototypeOf(value);\n        if (prototype !== Object.prototype && prototype !== null) {\n          return false;\n        }\n\n        isSerializable = Object.values(value).every((item) =>\n          isJsonSerializable(item, active, memo),\n        );\n        return isSerializable;\n      } finally {\n        active.delete(objectValue);\n        if (isSerializable) {\n          memo.add(objectValue);\n        }\n      }\n    }\n  }\n\n  return false;\n}\n"],"mappings":";;;;;AAKA,IAAa,iBAAb,cAAoC,MAAM;CACxC;;;;CAKA,YAAY,MAAwB,SAAiB;AACnD,QAAM,QAAQ;AACd,OAAK,OAAO;AACZ,OAAK,OAAO;;;;;;AAOhB,SAAgB,iBAAiB,OAAyC;AACxE,QAAO,iBAAiB;;;;;AAM1B,SAAgB,mBACd,OACA,yBAAS,IAAI,KAAa,EAC1B,uBAAO,IAAI,SAAiB,EACnB;AACT,KAAI,UAAU,KACZ,QAAO;AAGT,SAAQ,OAAO,OAAf;EACE,KAAK;EACL,KAAK,UACH,QAAO;EACT,KAAK,SACH,QAAO,OAAO,SAAS,MAAM;EAC/B,KAAK;EACL,KAAK;EACL,KAAK;EACL,KAAK,YACH,QAAO;EACT,KAAK,UAAU;GACb,MAAM,cAAc;AAEpB,OAAI,KAAK,IAAI,YAAY,CACvB,QAAO;AAGT,OAAI,OAAO,IAAI,YAAY,CACzB,QAAO;AAGT,UAAO,IAAI,YAAY;GACvB,IAAI,iBAAiB;AAErB,OAAI;AACF,QAAI,MAAM,QAAQ,MAAM,EAAE;AACxB,sBAAiB,MAAM,OAAO,SAC5B,mBAAmB,MAAM,QAAQ,KAAK,CACvC;AACD,YAAO;;IAGT,MAAM,YAAY,OAAO,eAAe,MAAM;AAC9C,QAAI,cAAc,OAAO,aAAa,cAAc,KAClD,QAAO;AAGT,qBAAiB,OAAO,OAAO,MAAM,CAAC,OAAO,SAC3C,mBAAmB,MAAM,QAAQ,KAAK,CACvC;AACD,WAAO;aACC;AACR,WAAO,OAAO,YAAY;AAC1B,QAAI,eACF,MAAK,IAAI,YAAY;;;;AAM7B,QAAO"}
+{"version":3,"file":"errors-xD8r6fCf.cjs","names":[],"sources":["../src/errors.ts"],"sourcesContent":["import type { ExecuteErrorCode } from \"./types\";\n\n/**\n * Structured failure used internally to propagate executor and tool errors.\n */\nexport class ExecuteFailure extends Error {\n  code: ExecuteErrorCode;\n\n  /**\n   * Creates a structured failure with a trusted executor or tool error code.\n   */\n  constructor(code: ExecuteErrorCode, message: string) {\n    super(message);\n    this.code = code;\n    this.name = \"ExecuteFailure\";\n  }\n}\n\n/**\n * Returns whether a thrown value is an {@link ExecuteFailure}.\n */\nexport function isExecuteFailure(value: unknown): value is ExecuteFailure {\n  return value instanceof ExecuteFailure;\n}\n\n/**\n * Returns whether a value can be serialized through the JSON-only host/guest boundary.\n */\nexport function isJsonSerializable(\n  value: unknown,\n  active = new Set<object>(),\n  memo = new WeakSet<object>(),\n): boolean {\n  if (value === null) {\n    return true;\n  }\n\n  switch (typeof value) {\n    case \"string\":\n    case \"boolean\":\n      return true;\n    case \"number\":\n      return Number.isFinite(value);\n    case \"bigint\":\n    case \"function\":\n    case \"symbol\":\n    case \"undefined\":\n      return false;\n    case \"object\": {\n      const objectValue = value as object;\n\n      if (memo.has(objectValue)) {\n        return true;\n      }\n\n      if (active.has(objectValue)) {\n        return false;\n      }\n\n      active.add(objectValue);\n      let isSerializable = false;\n\n      try {\n        if (Array.isArray(value)) {\n          isSerializable = value.every((item) =>\n            isJsonSerializable(item, active, memo),\n          );\n          return isSerializable;\n        }\n\n        const prototype = Object.getPrototypeOf(value);\n        if (prototype !== Object.prototype && prototype !== null) {\n          return false;\n        }\n\n        isSerializable = Object.values(value).every((item) =>\n          isJsonSerializable(item, active, memo),\n        );\n        return isSerializable;\n      } finally {\n        active.delete(objectValue);\n        if (isSerializable) {\n          memo.add(objectValue);\n        }\n      }\n    }\n  }\n\n  return false;\n}\n"],"mappings":";;;;;AAKA,IAAa,iBAAb,cAAoC,MAAM;CACxC;;;;CAKA,YAAY,MAAwB,SAAiB;AACnD,QAAM,QAAQ;AACd,OAAK,OAAO;AACZ,OAAK,OAAO;;;;;;AAOhB,SAAgB,iBAAiB,OAAyC;AACxE,QAAO,iBAAiB;;;;;AAM1B,SAAgB,mBACd,OACA,yBAAS,IAAI,KAAa,EAC1B,uBAAO,IAAI,SAAiB,EACnB;AACT,KAAI,UAAU,KACZ,QAAO;AAGT,SAAQ,OAAO,OAAf;EACE,KAAK;EACL,KAAK,UACH,QAAO;EACT,KAAK,SACH,QAAO,OAAO,SAAS,MAAM;EAC/B,KAAK;EACL,KAAK;EACL,KAAK;EACL,KAAK,YACH,QAAO;EACT,KAAK,UAAU;GACb,MAAM,cAAc;AAEpB,OAAI,KAAK,IAAI,YAAY,CACvB,QAAO;AAGT,OAAI,OAAO,IAAI,YAAY,CACzB,QAAO;AAGT,UAAO,IAAI,YAAY;GACvB,IAAI,iBAAiB;AAErB,OAAI;AACF,QAAI,MAAM,QAAQ,MAAM,EAAE;AACxB,sBAAiB,MAAM,OAAO,SAC5B,mBAAmB,MAAM,QAAQ,KAAK,CACvC;AACD,YAAO;;IAGT,MAAM,YAAY,OAAO,eAAe,MAAM;AAC9C,QAAI,cAAc,OAAO,aAAa,cAAc,KAClD,QAAO;AAGT,qBAAiB,OAAO,OAAO,MAAM,CAAC,OAAO,SAC3C,mBAAmB,MAAM,QAAQ,KAAK,CACvC;AACD,WAAO;aACC;AACR,WAAO,OAAO,YAAY;AAC1B,QAAI,eACF,MAAK,IAAI,YAAY;;;;AAM7B,QAAO"}

package/dist/{executor-B-Qe_q5_.d.ts → executor-B7q7K_27.d.ts}

@@ -2,7 +2,7 @@
  * @packageDocumentation
  * Public TypeScript declarations for this package entrypoint.
  */
-import { d as ExecuteResult, m as ResolvedToolProvider, t as ExecutionOptions } from "./runner-CbC-ncVb.js";
+import { d as ExecuteResult, m as ResolvedToolProvider, t as ExecutionOptions } from "./runner-ClFrFnz9.js";
 
 //#region src/executor/executor.d.ts
 
@@ -26,4 +26,4 @@ interface Executor {
 }
 //#endregion
 export { ExecutorPoolOptions as n, Executor as t };
-//# sourceMappingURL=executor-B-Qe_q5_.d.ts.map
+//# sourceMappingURL=executor-B7q7K_27.d.ts.map

package/dist/{executor-B-Qe_q5_.d.ts.map → executor-B7q7K_27.d.ts.map}

@@ -1 +1 @@
-{"version":3,"file":"executor-B-Qe_q5_.d.ts","names":[],"sources":["../src/executor/executor.ts"],"sourcesContent":[],"mappings":";;;;;;;;;AAOA,CAAA,CAAA,CAAA,QAAA,CAAA,OAAA,CAAA,QAAA,CAAA,GAAA,CAAA,QAAA,CAAA,eAAA,CAAA,IAAA,CAAA,GAAA,CAAA;AAUA,CAAA,CAAA,CAAA,IAAA,CAAA,IAAA,CAAA,MAAA,CAAA,KAAA,CAAA,KAAA,CAAA,QAAA,CAAA,CAAA,CAAA,KAAA,CAAA,KAAA,CAAA,OAAA,CAAA,GAAA,CAAA,SAAA;;AAIc,SAAA,CAdG,mBAAA,CAcH;EACD,aAAA,CAAA,CAAA,CAAA,MAAA;EAAR,OAAA,CAAA,CAAA,MAAA;EACS,OAAA,CAAA,CAAA,CAAA,MAAA;EACc,OAAA,CAAA,CAAA,CAAA,OAAA,CAAA,CAAA,CAAA,MAAA;;;;;UAPX,QAAA;mCAGF,kCACD,mBACT,QAAQ;cACC;4BACc"}
+{"version":3,"file":"executor-B7q7K_27.d.ts","names":[],"sources":["../src/executor/executor.ts"],"sourcesContent":[],"mappings":";;;;;;;;;AAOA,CAAA,CAAA,CAAA,QAAA,CAAA,OAAA,CAAA,QAAA,CAAA,GAAA,CAAA,QAAA,CAAA,eAAA,CAAA,IAAA,CAAA,GAAA,CAAA;AAUA,CAAA,CAAA,CAAA,IAAA,CAAA,IAAA,CAAA,MAAA,CAAA,KAAA,CAAA,KAAA,CAAA,QAAA,CAAA,CAAA,CAAA,KAAA,CAAA,KAAA,CAAA,OAAA,CAAA,GAAA,CAAA,SAAA;;AAIc,SAAA,CAdG,mBAAA,CAcH;EACD,aAAA,CAAA,CAAA,CAAA,MAAA;EAAR,OAAA,CAAA,CAAA,MAAA;EACS,OAAA,CAAA,CAAA,CAAA,MAAA;EACc,OAAA,CAAA,CAAA,CAAA,OAAA,CAAA,CAAA,CAAA,MAAA;;;;;UAPX,QAAA;mCAGF,kCACD,mBACT,QAAQ;cACC;4BACc"}

package/dist/{executor-C7YjuD7r.d.cts → executor-BsE5nF-j.d.cts}

@@ -2,7 +2,7 @@
  * @packageDocumentation
  * Public TypeScript declarations for this package entrypoint.
  */
-import { d as ExecuteResult, m as ResolvedToolProvider, t as ExecutionOptions } from "./runner-BJu1lZFi.cjs";
+import { d as ExecuteResult, m as ResolvedToolProvider, t as ExecutionOptions } from "./runner-DSgvu6Ad.cjs";
 
 //#region src/executor/executor.d.ts
 
@@ -26,4 +26,4 @@ interface Executor {
 }
 //#endregion
 export { ExecutorPoolOptions as n, Executor as t };
-//# sourceMappingURL=executor-C7YjuD7r.d.cts.map
+//# sourceMappingURL=executor-BsE5nF-j.d.cts.map

package/dist/{executor-C7YjuD7r.d.cts.map → executor-BsE5nF-j.d.cts.map}

@@ -1 +1 @@
-{"version":3,"file":"executor-C7YjuD7r.d.cts","names":[],"sources":["../src/executor/executor.ts"],"sourcesContent":[],"mappings":";;;;;;;;;AAOA,CAAA,CAAA,CAAA,QAAA,CAAA,OAAA,CAAA,QAAA,CAAA,GAAA,CAAA,QAAA,CAAA,eAAA,CAAA,IAAA,CAAA,GAAA,CAAA;AAUA,CAAA,CAAA,CAAA,IAAA,CAAA,IAAA,CAAA,MAAA,CAAA,KAAA,CAAA,KAAA,CAAA,QAAA,CAAA,CAAA,CAAA,KAAA,CAAA,KAAA,CAAA,OAAA,CAAA,GAAA,CAAA,SAAA;;AAIc,SAAA,CAdG,mBAAA,CAcH;EACD,aAAA,CAAA,CAAA,CAAA,MAAA;EAAR,OAAA,CAAA,CAAA,MAAA;EACS,OAAA,CAAA,CAAA,CAAA,MAAA;EACc,OAAA,CAAA,CAAA,CAAA,OAAA,CAAA,CAAA,CAAA,MAAA;;;;;UAPX,QAAA;mCAGF,kCACD,mBACT,QAAQ;cACC;4BACc"}
+{"version":3,"file":"executor-BsE5nF-j.d.cts","names":[],"sources":["../src/executor/executor.ts"],"sourcesContent":[],"mappings":";;;;;;;;;AAOA,CAAA,CAAA,CAAA,QAAA,CAAA,OAAA,CAAA,QAAA,CAAA,GAAA,CAAA,QAAA,CAAA,eAAA,CAAA,IAAA,CAAA,GAAA,CAAA;AAUA,CAAA,CAAA,CAAA,IAAA,CAAA,IAAA,CAAA,MAAA,CAAA,KAAA,CAAA,KAAA,CAAA,QAAA,CAAA,CAAA,CAAA,KAAA,CAAA,KAAA,CAAA,OAAA,CAAA,GAAA,CAAA,SAAA;;AAIc,SAAA,CAdG,mBAAA,CAcH;EACD,aAAA,CAAA,CAAA,CAAA,MAAA;EAAR,OAAA,CAAA,CAAA,MAAA;EACS,OAAA,CAAA,CAAA,CAAA,MAAA;EACc,OAAA,CAAA,CAAA,CAAA,OAAA,CAAA,CAAA,CAAA,MAAA;;;;;UAPX,QAAA;mCAGF,kCACD,mBACT,QAAQ;cACC;4BACc"}

package/dist/index.cjs

@@ -1,72 +1,14 @@
-const require_resolveProvider = require('./resolveProvider-D__uEvDj.cjs');
-const require_runner = require('./runner-Dt--9M2r.cjs');
-const require_errors = require('./errors-CTel18cM.cjs');
-let acorn = require("acorn");
+const require_resolveProvider = require('./resolveProvider-BZYSw8Qk.cjs');
+const require_errors = require('./errors-xD8r6fCf.cjs');
 
-//#region src/normalize.ts
-function stripCodeFences(source) {
-	const match = source.match(/^\s*```[^\n]*\n([\s\S]*?)\n?```\s*$/);
-	return match ? match[1] : source;
-}
-function wrapAsync(body) {
-	if (body.trim().length === 0) return "async () => {}";
-	return `async () => {\n${body}\n}`;
-}
-/**
-* Normalizes model-produced JavaScript into an executable async function body.
-*/
-function normalizeCode(source) {
-	const normalizedSource = stripCodeFences(source).trim();
-	if (normalizedSource.length === 0) return "async () => {}";
-	try {
-		const program = (0, acorn.parse)(normalizedSource, {
-			ecmaVersion: "latest",
-			sourceType: "module"
-		});
-		if (program.body?.length === 1) {
-			const [statement] = program.body;
-			if (statement.type === "FunctionDeclaration" && statement.id?.name) return wrapAsync(`${normalizedSource}\nreturn ${statement.id.name}();`);
-			if (statement.type === "ExpressionStatement" && statement.expression) {
-				if (statement.expression.type === "ArrowFunctionExpression" && statement.expression.async) return normalizedSource;
-				return wrapAsync(`return (${normalizedSource});`);
-			}
-		}
-		const lastStatement = (program.body ?? []).at(-1);
-		if (lastStatement?.type === "ExpressionStatement" && lastStatement.expression) {
-			const bodyPrefix = normalizedSource.slice(0, lastStatement.start).trimEnd();
-			const expressionSource = normalizedSource.slice(lastStatement.expression.start, lastStatement.expression.end);
-			const lines = [];
-			if (bodyPrefix.length > 0) lines.push(bodyPrefix);
-			lines.push(`return (${expressionSource});`);
-			return wrapAsync(lines.join("\n"));
-		}
-		return wrapAsync(normalizedSource);
-	} catch {
-		return wrapAsync(normalizedSource);
-	}
-}
-
-//#endregion
 exports.ExecuteFailure = require_errors.ExecuteFailure;
 exports.assertValidIdentifier = require_resolveProvider.assertValidIdentifier;
-exports.createExecutionContext = require_runner.createExecutionContext;
-exports.createTimeoutExecuteResult = require_runner.createTimeoutExecuteResult;
-exports.createToolCallDispatcher = require_runner.createToolCallDispatcher;
-exports.extractProviderManifests = require_runner.extractProviderManifests;
-exports.formatConsoleLine = require_runner.formatConsoleLine;
 exports.generateTypesFromJsonSchema = require_resolveProvider.generateTypesFromJsonSchema;
-exports.getExecutionTimeoutMessage = require_runner.getExecutionTimeoutMessage;
 exports.isExecuteFailure = require_errors.isExecuteFailure;
 exports.isJsonSerializable = require_errors.isJsonSerializable;
-exports.isKnownExecuteErrorCode = require_runner.isKnownExecuteErrorCode;
 exports.isReservedWord = require_resolveProvider.isReservedWord;
 exports.isValidIdentifier = require_resolveProvider.isValidIdentifier;
-exports.normalizeCode = normalizeCode;
-exports.normalizeThrownMessage = require_runner.normalizeThrownMessage;
-exports.normalizeThrownName = require_runner.normalizeThrownName;
 exports.resolveProvider = require_resolveProvider.resolveProvider;
 exports.sanitizeIdentifier = require_resolveProvider.sanitizeIdentifier;
 exports.sanitizeToolName = require_resolveProvider.sanitizeToolName;
-exports.serializePropertyName = require_resolveProvider.serializePropertyName;
-exports.truncateLogs = require_runner.truncateLogs;
-//# sourceMappingURL=index.cjs.map
+exports.serializePropertyName = require_resolveProvider.serializePropertyName;

package/dist/index.d.cts

@@ -2,43 +2,10 @@
  * @packageDocumentation
  * Public TypeScript declarations for this package entrypoint.
  */
-import { _ as ToolProvider, a as ToolCall, c as extractProviderManifests, d as ExecuteResult, f as JsonSchema, g as ToolExecutionContext, h as ToolDescriptor, i as ProviderToolManifest, l as ExecuteError, m as ResolvedToolProvider, n as ExecutorRuntimeOptions, o as ToolCallResult, p as ResolvedToolDescriptor, r as ProviderManifest, s as createToolCallDispatcher, t as ExecutionOptions, u as ExecuteErrorCode, v as ToolSchema, y as TypegenToolDescriptor } from "./runner-BJu1lZFi.cjs";
-import { n as ExecutorPoolOptions, t as Executor } from "./executor-C7YjuD7r.cjs";
+import { _ as ToolProvider, a as ToolCall, d as ExecuteResult, f as JsonSchema, g as ToolExecutionContext, h as ToolDescriptor, i as ProviderToolManifest, l as ExecuteError, m as ResolvedToolProvider, n as ExecutorRuntimeOptions, o as ToolCallResult, p as ResolvedToolDescriptor, r as ProviderManifest, t as ExecutionOptions, u as ExecuteErrorCode, v as ToolSchema, y as TypegenToolDescriptor } from "./runner-DSgvu6Ad.cjs";
+import { n as ExecutorPoolOptions, t as Executor } from "./executor-BsE5nF-j.cjs";
+import { n as isExecuteFailure, r as isJsonSerializable, t as ExecuteFailure } from "./errors-B9ADBuDH.cjs";
 
-//#region src/executor/shared.d.ts
-/**
- * Returns whether the value is one of execbox's stable execution error codes.
- */
-declare function isKnownExecuteErrorCode(value: unknown): value is ExecuteErrorCode;
-/**
- * Returns the stable timeout message used across executor implementations.
- */
-declare function getExecutionTimeoutMessage(): string;
-/**
- * Creates the canonical timeout failure result used for preflight cancellation.
- */
-declare function createTimeoutExecuteResult(durationMs?: number): ExecuteResult;
-/**
- * Normalizes an unknown thrown value into a human-readable message.
- */
-declare function normalizeThrownMessage(error: unknown): string;
-/**
- * Returns the thrown error name when one is available.
- */
-declare function normalizeThrownName(error: unknown): string | undefined;
-/**
- * Builds the standard tool execution context passed to resolved tool wrappers.
- */
-declare function createExecutionContext(signal: AbortSignal, providerName: string, safeToolName: string, originalToolName: string): ToolExecutionContext;
-/**
- * Truncates captured logs to the configured line and character limits.
- */
-declare function truncateLogs(logs: string[], maxLogLines: number, maxLogChars: number): string[];
-/**
- * Formats guest console arguments into a single host-side log line.
- */
-declare function formatConsoleLine(values: unknown[]): string;
-//#endregion
 //#region src/identifier.d.ts
 /**
  * Returns whether the value is a valid JavaScript identifier.
@@ -61,38 +28,12 @@ declare function sanitizeIdentifier(value: string): string;
  */
 declare function serializePropertyName(name: string): string;
 //#endregion
-//#region src/normalize.d.ts
-/**
- * Normalizes model-produced JavaScript into an executable async function body.
- */
-declare function normalizeCode(source: string): string;
-//#endregion
 //#region src/sanitize.d.ts
 /**
  * Converts a raw tool name into a safe JavaScript identifier.
  */
 declare function sanitizeToolName(name: string): string;
 //#endregion
-//#region src/errors.d.ts
-/**
- * Structured failure used internally to propagate executor and tool errors.
- */
-declare class ExecuteFailure extends Error {
-  code: ExecuteErrorCode;
-  /**
-   * Creates a structured failure with a trusted executor or tool error code.
-   */
-  constructor(code: ExecuteErrorCode, message: string);
-}
-/**
- * Returns whether a thrown value is an {@link ExecuteFailure}.
- */
-declare function isExecuteFailure(value: unknown): value is ExecuteFailure;
-/**
- * Returns whether a value can be serialized through the JSON-only host/guest boundary.
- */
-declare function isJsonSerializable(value: unknown, active?: Set<object>, memo?: WeakSet<object>): boolean;
-//#endregion
 //#region src/provider/resolveProvider.d.ts
 /**
  * Resolves a tool provider into the validated, sanitized shape consumed by executors.
@@ -105,5 +46,5 @@ declare function resolveProvider(provider: ToolProvider): ResolvedToolProvider;
  */
 declare function generateTypesFromJsonSchema(providerName: string, tools: Record<string, TypegenToolDescriptor>): string;
 //#endregion
-export { type ExecuteError, type ExecuteErrorCode, ExecuteFailure, type ExecuteResult, type ExecutionOptions, type Executor, type ExecutorPoolOptions, type ExecutorRuntimeOptions, type JsonSchema, type ProviderManifest, type ProviderToolManifest, type ResolvedToolDescriptor, type ResolvedToolProvider, type ToolCall, type ToolCallResult, type ToolDescriptor, type ToolExecutionContext, type ToolProvider, type ToolSchema, type TypegenToolDescriptor, assertValidIdentifier, createExecutionContext, createTimeoutExecuteResult, createToolCallDispatcher, extractProviderManifests, formatConsoleLine, generateTypesFromJsonSchema, getExecutionTimeoutMessage, isExecuteFailure, isJsonSerializable, isKnownExecuteErrorCode, isReservedWord, isValidIdentifier, normalizeCode, normalizeThrownMessage, normalizeThrownName, resolveProvider, sanitizeIdentifier, sanitizeToolName, serializePropertyName, truncateLogs };
+export { type ExecuteError, type ExecuteErrorCode, ExecuteFailure, type ExecuteResult, type ExecutionOptions, type Executor, type ExecutorPoolOptions, type ExecutorRuntimeOptions, type JsonSchema, type ProviderManifest, type ProviderToolManifest, type ResolvedToolDescriptor, type ResolvedToolProvider, type ToolCall, type ToolCallResult, type ToolDescriptor, type ToolExecutionContext, type ToolProvider, type ToolSchema, type TypegenToolDescriptor, assertValidIdentifier, generateTypesFromJsonSchema, isExecuteFailure, isJsonSerializable, isReservedWord, isValidIdentifier, resolveProvider, sanitizeIdentifier, sanitizeToolName, serializePropertyName };
 //# sourceMappingURL=index.d.cts.map

package/dist/index.d.cts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.cts","names":[],"sources":["../src/executor/shared.ts","../src/identifier.ts","../src/normalize.ts","../src/sanitize.ts","../src/errors.ts","../src/provider/resolveProvider.ts","../src/typegen/jsonSchema.ts"],"sourcesContent":[],"mappings":";;;;;;;;;;;AAyBgB,OAAA,CAAA,QAAA,CAAA,uBAAA,CAEJ,KAAA,CAAA,CAAA,OAAgB,CAAA,CAAA,CAAA,KAAA,CAAA,EAAA,CAAhB,gBAAgB;AAO5B,CAAA,CAAA;AAOA,CAAA,CAAA,CAAA,OAAA,CAAA,GAAA,CAAA,MAAA,CAAA,OAAA,CAAA,OAAA,CAAA,IAAA,CAAA,MAAA,CAAA,QAAA,CAAA,eAAA;AAeA,CAAA,CAAA;AAkBgB,OAAA,CAAA,QAAA,CAxCA,0BAAA,CAAA,CAwCmB,CAAA,CAAA,MAAA;AAkBnC,CAAA,CAAA;AAiBA,CAAA,CAAA,CAAA,OAAA,CAAA,GAAA,CAAA,SAAA,CAAA,OAAA,CAAA,OAAA,CAAA,MAAA,CAAA,IAAA,CAAA,GAAA,CAAA,SAAA,CAAA,YAAA;AA8CA,CAAA,CAAA;iBAlHgB,0BAAA,uBAA4C;;;ACoB5D,CAAA,CAAA;AAOgB,OAAA,CAAA,QAAA,CDZA,sBAAA,CCYc,KAAA,CAAA,CAAA,OAAA,CAAA,CAAA,CAAA,MAAA;AAO9B,CAAA,CAAA;AAYA,CAAA,CAAA,CAAA,OAAA,CAAA,GAAA,CAAA,MAAA,CAAA,KAAA,CAAA,IAAA,CAAA,IAAA,CAAA,GAAA,CAAA,EAAA,CAAA,SAAA;AAqBA,CAAA,CAAA;iBDlCgB,mBAAA;;;AE5ChB,CAAA,CAAA;iBF8DgB,sBAAA,SACN,oFAIP;;;AG5FH,CAAA,CAAA;iBHwGgB,YAAA;;;AIxGhB,CAAA,CAAA;AACQ,OAAA,CAAA,QAAA,CJqJQ,iBAAA,CIrJR,MAAA,CAAA,CAAA,OAAA,CAAA,CAAA,CAAA,CAAA,CAAA,MAAA;;;;;;iBHuDQ,iBAAA;ADpChB,CAAA,CAAA;AASA,CAAA,CAAA,CAAA,OAAA,CAAA,OAAA,CAAA,GAAA,CAAA,UAAA,CAAA,EAAA,CAAA,QAAA,CAAA,EAAA,CAAA,UAAA,CAAA,MAAA;AAOA,CAAA,CAAA;AAegB,OAAA,CAAA,QAAA,CCYA,cAAA,CDZsB,KAAA,CAAA,CAAA,MAAA,CAAA,CAAA,CAAA,OAAA;AAkBtC,CAAA,CAAA;AAkBA,CAAA,CAAA,CAAA,MAAA,CAAA,IAAA,CAAA,GAAA,CAAA,KAAA,CAAA,MAAA,CAAA,EAAA,CAAA,IAAA,CAAA,EAAA,CAAA,CAAA,CAAA,IAAA,CAAA,UAAA,CAAA,UAAA;AAiBA,CAAA,CAAA;AA8CgB,OAAA,CAAA,QAAA,CChFA,qBAAA,CDgFiB,KAAA,CAAA,CAAA,MAAA,CAAA,CAAA,KAAA,CAAA,CAAA,CAAA,MAAA,CAAA,CAAA,CAAA,IAAA;;;;AC9FjB,OAAA,CAAA,QAAA,CA0BA,kBAAA,CA1BiB,KAAA,CAAA,CAAA,MAAA,CAAA,CAAA,CAAA,MAAA;AAOjC,CAAA,CAAA;AAOA,CAAA,CAAA,CAAA,OAAA,CAAA,GAAA,CAAA,IAAA,CAAA,EAAA,CAAA,CAAA,CAAA,IAAA,CAAA,UAAA,CAAA,IAAA,CAAA,QAAA,CAAA,CAAA,SAAA,CAAA,EAAA,CAAA,CAAA,CAAA,MAAA,CAAA,OAAA;AAYA,CAAA,CAAA;AAqBgB,OAAA,CAAA,QAAA,CAAA,qBAAA,CAAqB,IAAA,CAAA,CAAA,MAAA,CAAA,CAAA,CAAA,MAAA;;;;;;iBC9ErB,aAAA;;;;;;iBCzBA,gBAAA;;;;;;AHoBA,OAAA,CAAA,KAAA,CIpBH,cAAA,CAAA,OAAA,CAAuB,KAAA,CJsBxB;EAOI,IAAA,CAAA,CI5BR,gBJ4BQ;EAOA,CAAA,CAAA;AAehB,CAAA,CAAA,CAAA,CAAA,CAAA,OAAA,CAAA,CAAA,CAAA,UAAA,CAAA,OAAA,CAAA,IAAA,CAAA,CAAA,CAAA,OAAA,CAAA,QAAA,CAAA,EAAA,CAAA,IAAA,CAAA,KAAA,CAAA,IAAA;AAkBA,CAAA,CAAA,CAAA,CAAA;EAkBgB,WAAA,CAAA,IAAA,CAAA,CIjFI,gBJiFkB,CAAA,CAC5B,OAAA,CAAA,CAAA,MAIP,CAAA;AAYH;AA8CA,CAAA,CAAA;;;iBItIgB,gBAAA,2BAA2C;AHwC3D,CAAA,CAAA;AAOA,CAAA,CAAA,CAAA,OAAA,CAAA,OAAA,CAAA,CAAA,CAAA,KAAA,CAAA,GAAA,CAAA,EAAA,CAAA,UAAA,CAAA,OAAA,CAAA,GAAA,CAAA,IAAA,CAAA,IAAA,CAAA,IAAA,CAAA,KAAA,CAAA,QAAA;AAOA,CAAA,CAAA;AAYgB,OAAA,CAAA,QAAA,CG3DA,kBAAA,CH2DkB,KAAA,CAAA,CAAA,OAAA,CAAA,CAAA,MAAA,CAAA,CAAA,CGzD1B,GHyD0B,CAAA,MAAA,CAAA,CAAA,CAAA,IAAA,CAAA,CAAA,CGxD5B,OHwD4B,CAAA,MAAA,CAAA,CAAA,CAAA,CAAA,OAAA;;;;;;AD9DlB,OAAA,CAAA,QAAA,CKmBA,eAAA,CLnBuB,QAE3B,CAAA,CKiB8B,YLjBd,CAAA,CAAA,CKiB6B,oBLjB7B;;;AAc5B,CAAA,CAAA;AAeA,CAAA,CAAA,CAAA,SAAA,CAAA,CAAA,CAAA,SAAA,CAAA,WAAA,CAAA,GAAA,CAAA,CAAA,CAAA,QAAA,CAAA,CAAA,CAAA,IAAA,CAAA,OAAA;AAkBA,CAAA,CAAA;AAkBgB,OAAA,CAAA,QAAA,CMYA,2BAAA,CNXN,YAIP,CAAA,CAAA,MAAA,CAAA,CAAoB,KAAA,CAAA,CMSd,MNTc,CAAA,MAAA,CAAA,CMSC,qBNTD,CAAA,CAAA,CAAA,CAAA,MAAA"}
+{"version":3,"file":"index.d.cts","names":[],"sources":["../src/identifier.ts","../src/sanitize.ts","../src/provider/resolveProvider.ts","../src/typegen/jsonSchema.ts"],"sourcesContent":[],"mappings":";;;;;;;;;;;;iBA6DgB,iBAAA;;AAAhB,CAAA,CAAA,CAAA,OAAA,CAAA,OAAA,CAAA,GAAA,CAAA,UAAA,CAAA,EAAA,CAAA,QAAA,CAAA,EAAA,CAAA,UAAA,CAAA,MAAA;AAOA,CAAA,CAAA;AAOgB,OAAA,CAAA,QAAA,CAPA,cAAA,CAOqB,KAAA,CAAA,CAAA,MAAA,CAAA,CAAA,CAAA,OAAA;AAYrC,CAAA,CAAA;AAqBA,CAAA,CAAA,CAAA,MAAA,CAAA,IAAA,CAAA,GAAA,CAAA,KAAA,CAAA,MAAA,CAAA,EAAA,CAAA,IAAA,CAAA,EAAA,CAAA,CAAA,CAAA,IAAA,CAAA,UAAA,CAAA,UAAA;;iBAjCgB,qBAAA;;ACtEhB,CAAA,CAAA,CAAA,QAAA,CAAA,CAAA,CAAA,GAAA,CAAA,UAAA,CAAA,IAAA,CAAA,KAAA,CAAA,IAAA,CAAA,CAAA,CAAA,IAAA,CAAA,UAAA,CAAA,UAAA;;iBDkFgB,kBAAA;;AE3ChB,CAAA,CAAA,CAAA,OAAA,CAAA,GAAA,CAAA,IAAA,CAAA,EAAA,CAAA,CAAA,CAAA,IAAA,CAAA,UAAA,CAAA,IAAA,CAAA,QAAA,CAAA,CAAA,SAAA,CAAA,EAAA,CAAA,CAAA,CAAA,MAAA,CAAA,OAAA;;iBFgEgB,qBAAA;;;;;;iBCvGA,gBAAA;;;;;;iBCuCA,eAAA,WAA0B,eAAe;;;AFwBzD,CAAA,CAAA;AAOA,CAAA,CAAA,CAAA,SAAA,CAAA,CAAA,CAAA,SAAA,CAAA,WAAA,CAAA,GAAA,CAAA,CAAA,CAAA,QAAA,CAAA,CAAA,CAAA,IAAA,CAAA,OAAA;AAYA,CAAA,CAAA;AAqBgB,OAAA,CAAA,QAAA,CGJA,2BAAA,CHIqB,YAAA,CAAA,CAAA,MAAA,CAAA,CAAA,KAAA,CAAA,CGF5B,MHE4B,CAAA,MAAA,CAAA,CGFb,qBHEa,CAAA,CAAA,CAAA,CAAA,MAAA"}

package/dist/index.d.ts

@@ -2,43 +2,10 @@
  * @packageDocumentation
  * Public TypeScript declarations for this package entrypoint.
  */
-import { _ as ToolProvider, a as ToolCall, c as extractProviderManifests, d as ExecuteResult, f as JsonSchema, g as ToolExecutionContext, h as ToolDescriptor, i as ProviderToolManifest, l as ExecuteError, m as ResolvedToolProvider, n as ExecutorRuntimeOptions, o as ToolCallResult, p as ResolvedToolDescriptor, r as ProviderManifest, s as createToolCallDispatcher, t as ExecutionOptions, u as ExecuteErrorCode, v as ToolSchema, y as TypegenToolDescriptor } from "./runner-CbC-ncVb.js";
-import { n as ExecutorPoolOptions, t as Executor } from "./executor-B-Qe_q5_.js";
+import { _ as ToolProvider, a as ToolCall, d as ExecuteResult, f as JsonSchema, g as ToolExecutionContext, h as ToolDescriptor, i as ProviderToolManifest, l as ExecuteError, m as ResolvedToolProvider, n as ExecutorRuntimeOptions, o as ToolCallResult, p as ResolvedToolDescriptor, r as ProviderManifest, t as ExecutionOptions, u as ExecuteErrorCode, v as ToolSchema, y as TypegenToolDescriptor } from "./runner-ClFrFnz9.js";
+import { n as ExecutorPoolOptions, t as Executor } from "./executor-B7q7K_27.js";
+import { n as isExecuteFailure, r as isJsonSerializable, t as ExecuteFailure } from "./errors-DlbJQYs7.js";
 
-//#region src/executor/shared.d.ts
-/**
- * Returns whether the value is one of execbox's stable execution error codes.
- */
-declare function isKnownExecuteErrorCode(value: unknown): value is ExecuteErrorCode;
-/**
- * Returns the stable timeout message used across executor implementations.
- */
-declare function getExecutionTimeoutMessage(): string;
-/**
- * Creates the canonical timeout failure result used for preflight cancellation.
- */
-declare function createTimeoutExecuteResult(durationMs?: number): ExecuteResult;
-/**
- * Normalizes an unknown thrown value into a human-readable message.
- */
-declare function normalizeThrownMessage(error: unknown): string;
-/**
- * Returns the thrown error name when one is available.
- */
-declare function normalizeThrownName(error: unknown): string | undefined;
-/**
- * Builds the standard tool execution context passed to resolved tool wrappers.
- */
-declare function createExecutionContext(signal: AbortSignal, providerName: string, safeToolName: string, originalToolName: string): ToolExecutionContext;
-/**
- * Truncates captured logs to the configured line and character limits.
- */
-declare function truncateLogs(logs: string[], maxLogLines: number, maxLogChars: number): string[];
-/**
- * Formats guest console arguments into a single host-side log line.
- */
-declare function formatConsoleLine(values: unknown[]): string;
-//#endregion
 //#region src/identifier.d.ts
 /**
  * Returns whether the value is a valid JavaScript identifier.
@@ -61,38 +28,12 @@ declare function sanitizeIdentifier(value: string): string;
  */
 declare function serializePropertyName(name: string): string;
 //#endregion
-//#region src/normalize.d.ts
-/**
- * Normalizes model-produced JavaScript into an executable async function body.
- */
-declare function normalizeCode(source: string): string;
-//#endregion
 //#region src/sanitize.d.ts
 /**
  * Converts a raw tool name into a safe JavaScript identifier.
  */
 declare function sanitizeToolName(name: string): string;
 //#endregion
-//#region src/errors.d.ts
-/**
- * Structured failure used internally to propagate executor and tool errors.
- */
-declare class ExecuteFailure extends Error {
-  code: ExecuteErrorCode;
-  /**
-   * Creates a structured failure with a trusted executor or tool error code.
-   */
-  constructor(code: ExecuteErrorCode, message: string);
-}
-/**
- * Returns whether a thrown value is an {@link ExecuteFailure}.
- */
-declare function isExecuteFailure(value: unknown): value is ExecuteFailure;
-/**
- * Returns whether a value can be serialized through the JSON-only host/guest boundary.
- */
-declare function isJsonSerializable(value: unknown, active?: Set<object>, memo?: WeakSet<object>): boolean;
-//#endregion
 //#region src/provider/resolveProvider.d.ts
 /**
  * Resolves a tool provider into the validated, sanitized shape consumed by executors.
@@ -105,5 +46,5 @@ declare function resolveProvider(provider: ToolProvider): ResolvedToolProvider;
  */
 declare function generateTypesFromJsonSchema(providerName: string, tools: Record<string, TypegenToolDescriptor>): string;
 //#endregion
-export { type ExecuteError, type ExecuteErrorCode, ExecuteFailure, type ExecuteResult, type ExecutionOptions, type Executor, type ExecutorPoolOptions, type ExecutorRuntimeOptions, type JsonSchema, type ProviderManifest, type ProviderToolManifest, type ResolvedToolDescriptor, type ResolvedToolProvider, type ToolCall, type ToolCallResult, type ToolDescriptor, type ToolExecutionContext, type ToolProvider, type ToolSchema, type TypegenToolDescriptor, assertValidIdentifier, createExecutionContext, createTimeoutExecuteResult, createToolCallDispatcher, extractProviderManifests, formatConsoleLine, generateTypesFromJsonSchema, getExecutionTimeoutMessage, isExecuteFailure, isJsonSerializable, isKnownExecuteErrorCode, isReservedWord, isValidIdentifier, normalizeCode, normalizeThrownMessage, normalizeThrownName, resolveProvider, sanitizeIdentifier, sanitizeToolName, serializePropertyName, truncateLogs };
+export { type ExecuteError, type ExecuteErrorCode, ExecuteFailure, type ExecuteResult, type ExecutionOptions, type Executor, type ExecutorPoolOptions, type ExecutorRuntimeOptions, type JsonSchema, type ProviderManifest, type ProviderToolManifest, type ResolvedToolDescriptor, type ResolvedToolProvider, type ToolCall, type ToolCallResult, type ToolDescriptor, type ToolExecutionContext, type ToolProvider, type ToolSchema, type TypegenToolDescriptor, assertValidIdentifier, generateTypesFromJsonSchema, isExecuteFailure, isJsonSerializable, isReservedWord, isValidIdentifier, resolveProvider, sanitizeIdentifier, sanitizeToolName, serializePropertyName };
 //# sourceMappingURL=index.d.ts.map