@execbox/quickjs 0.1.0 → 0.1.2

package/README.md

@@ -21,9 +21,9 @@ QuickJS executor backend for `@execbox/core`.
 
 ## Architecture Docs
 
-- [Execbox architecture overview](https://github.com/aallam/execbox/blob/main/docs/execbox/architecture/README.md)
-- [Execbox executors](https://github.com/aallam/execbox/blob/main/docs/execbox/architecture/execbox-executors.md)
-- [Execbox MCP adapters and protocol](https://github.com/aallam/execbox/blob/main/docs/execbox/architecture/execbox-mcp-and-protocol.md)
+- [Execbox architecture overview](https://github.com/aallam/execbox/blob/main/docs/architecture/README.md)
+- [Execbox executors](https://github.com/aallam/execbox/blob/main/docs/architecture/execbox-executors.md)
+- [Execbox MCP adapters and protocol](https://github.com/aallam/execbox/blob/main/docs/architecture/execbox-mcp-and-protocol.md)
 
 ## Examples
 

package/dist/index.cjs

@@ -1,4 +1,4 @@
-const require_runner = require('./runner-CYXIVOmJ.cjs');
+const require_runner = require('./runner-9_N9h2rp.cjs');
 let __execbox_core = require("@execbox/core");
 
 //#region src/quickjsExecutor.ts

package/dist/index.js

@@ -1,4 +1,4 @@
-import { t as runQuickJsSession } from "./runner-DVOLiGt4.js";
+import { t as runQuickJsSession } from "./runner-O4f_FOhI.js";
 import { createTimeoutExecuteResult, createToolCallDispatcher, extractProviderManifests } from "@execbox/core";
 
 //#region src/quickjsExecutor.ts

package/dist/runner/index.cjs

@@ -1,3 +1,3 @@
-const require_runner = require('../runner-CYXIVOmJ.cjs');
+const require_runner = require('../runner-9_N9h2rp.cjs');
 
 exports.runQuickJsSession = require_runner.runQuickJsSession;

package/dist/runner/index.d.cts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.cts","names":[],"sources":["../../../core/src/types.ts","../../../core/src/runner.ts","../../src/runner/index.ts"],"sourcesContent":[],"mappings":";;;;ACeA;AASA;AASA;AAiBiB,KDnCL,gBAAA,GCmCa,SAAA,GAAA,cAAA,GAAA,kBAAA,GAAA,YAAA,GAAA,eAAA,GAAA,qBAAA,GAAA,gBAAA;AASzB;;;UDhCiB,YAAA;EEuBL;EAKK,IAAA,EF1BT,gBE0BS;EACG;EAEC,OAAA,EAAA,MAAA;;;;;AAGV,KFxBC,aEwBD,CAAA,IAAA,OAAA,CAAA,GAAA;EAAW,UAAA,EAAA,MAAA;EAMV,IAAA,EAAA,MAAA,EAAA;EAkSU,EAAA,EAAA,IAAA;EACX,MAAA,EF5TG,CE4TH;CACA,GAAA;EACA,UAAA,EAAA,MAAA;EAAR,KAAA,EF1TU,YE0TV;EAAO,IAAA,EAAA,MAAA,EAAA;;;;;;;AFzVV;AAYiB,UCZA,oBAAA,CDcT;EAQI,WAAA,CAAA,EAAA,MAAa;;;;ACtBzB;AASA;AASA;AAiBiB,UA1BA,gBAAA,CA0BQ;EASb,IAAA,EAAA,MAAA;SAjCH,eAAe;;;ACwBxB;AAKA;;AAGqB,UDzBJ,sBAAA,CCyBI;EAAqB,WAAA,CAAA,EAAA,MAAA;EAAR,WAAA,CAAA,EAAA,MAAA;EAA0B,gBAAA,CAAA,EAAA,MAAA;EAE/C,SAAA,CAAA,EAAA,MAAA;;;;;UDVI,QAAA;;;;;;;;KASL,cAAA;;;;SAMC;;;;;;ADlDb;AAYA;AAUY,KEaA,sBAAA,GAAyB,QFJxB;;;;AC/BI,UCwCA,qBAAA,CDxCoB;EASpB,eAAA,CAAA,ECgCG,eD9BI;EAOP,IAAA,EAAA,MAAA;EAiBA,UAAA,EAAQ,CAAA,IAAA,ECQJ,QDRI,EAAA,GCQS,ODRT,CCQiB,cDRjB,CAAA,GCQmC,cDRnC;EASb,SAAA,CAAA,EAAA,GAAA,GAAc,IAAA;aCCb;WACF;;AAXX;AAKA;;AAGqB,KAST,qBAAA,GAAwB,sBATf,GAUnB,sBAVmB;;;;AAER,iBAySS,iBAAA,CAzST,OAAA,EA0SF,qBA1SE,EAAA,OAAA,CAAA,EA2SF,qBA3SE,CAAA,EA4SV,OA5SU,CA4SF,aA5SE,CAAA"}
+{"version":3,"file":"index.d.cts","names":[],"sources":["../../../core/src/types.ts","../../../core/src/runner.ts","../../src/runner/index.ts"],"sourcesContent":[],"mappings":";;;;ACeA;AASA;AASA;AAiBiB,KDnCL,gBAAA,GCmCa,SAAA,GAAA,cAAA,GAAA,kBAAA,GAAA,YAAA,GAAA,eAAA,GAAA,qBAAA,GAAA,gBAAA;AASzB;;;UDhCiB,YAAA;EEuBL;EAKK,IAAA,EF1BT,gBE0BS;EACG;EAEC,OAAA,EAAA,MAAA;;;;;AAGV,KFxBC,aEwBD,CAAA,IAAA,OAAA,CAAA,GAAA;EAAW,UAAA,EAAA,MAAA;EAMV,IAAA,EAAA,MAAA,EAAA;EA4TU,EAAA,EAAA,IAAA;EACX,MAAA,EFtVG,CEsVH;CACA,GAAA;EACA,UAAA,EAAA,MAAA;EAAR,KAAA,EFpVU,YEoVV;EAAO,IAAA,EAAA,MAAA,EAAA;;;;;;;AFnXV;AAYiB,UCZA,oBAAA,CDcT;EAQI,WAAA,CAAA,EAAA,MAAa;;;;ACtBzB;AASA;AASA;AAiBiB,UA1BA,gBAAA,CA0BQ;EASb,IAAA,EAAA,MAAA;SAjCH,eAAe;;;ACwBxB;AAKA;;AAGqB,UDzBJ,sBAAA,CCyBI;EAAqB,WAAA,CAAA,EAAA,MAAA;EAAR,WAAA,CAAA,EAAA,MAAA;EAA0B,gBAAA,CAAA,EAAA,MAAA;EAE/C,SAAA,CAAA,EAAA,MAAA;;;;;UDVI,QAAA;;;;;;;;KASL,cAAA;;;;SAMC;;;;;;ADlDb;AAYA;AAUY,KEaA,sBAAA,GAAyB,QFJxB;;;;AC/BI,UCwCA,qBAAA,CDxCoB;EASpB,eAAA,CAAA,ECgCG,eD9BI;EAOP,IAAA,EAAA,MAAA;EAiBA,UAAA,EAAQ,CAAA,IAAA,ECQJ,QDRI,EAAA,GCQS,ODRT,CCQiB,cDRjB,CAAA,GCQmC,cDRnC;EASb,SAAA,CAAA,EAAA,GAAA,GAAc,IAAA;aCCb;WACF;;AAXX;AAKA;;AAGqB,KAST,qBAAA,GAAwB,sBATf,GAUnB,sBAVmB;;;;AAER,iBAmUS,iBAAA,CAnUT,OAAA,EAoUF,qBApUE,EAAA,OAAA,CAAA,EAqUF,qBArUE,CAAA,EAsUV,OAtUU,CAsUF,aAtUE,CAAA"}

package/dist/runner/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","names":[],"sources":["../../../core/src/types.ts","../../../core/src/runner.ts","../../src/runner/index.ts"],"sourcesContent":[],"mappings":";;;;ACeA;AASA;AASA;AAiBiB,KDnCL,gBAAA,GCmCa,SAAA,GAAA,cAAA,GAAA,kBAAA,GAAA,YAAA,GAAA,eAAA,GAAA,qBAAA,GAAA,gBAAA;AASzB;;;UDhCiB,YAAA;EEuBL;EAKK,IAAA,EF1BT,gBE0BS;EACG;EAEC,OAAA,EAAA,MAAA;;;;;AAGV,KFxBC,aEwBD,CAAA,IAAA,OAAA,CAAA,GAAA;EAAW,UAAA,EAAA,MAAA;EAMV,IAAA,EAAA,MAAA,EAAA;EAkSU,EAAA,EAAA,IAAA;EACX,MAAA,EF5TG,CE4TH;CACA,GAAA;EACA,UAAA,EAAA,MAAA;EAAR,KAAA,EF1TU,YE0TV;EAAO,IAAA,EAAA,MAAA,EAAA;;;;;;;AFzVV;AAYiB,UCZA,oBAAA,CDcT;EAQI,WAAA,CAAA,EAAA,MAAa;;;;ACtBzB;AASA;AASA;AAiBiB,UA1BA,gBAAA,CA0BQ;EASb,IAAA,EAAA,MAAA;SAjCH,eAAe;;;ACwBxB;AAKA;;AAGqB,UDzBJ,sBAAA,CCyBI;EAAqB,WAAA,CAAA,EAAA,MAAA;EAAR,WAAA,CAAA,EAAA,MAAA;EAA0B,gBAAA,CAAA,EAAA,MAAA;EAE/C,SAAA,CAAA,EAAA,MAAA;;;;;UDVI,QAAA;;;;;;;;KASL,cAAA;;;;SAMC;;;;;;ADlDb;AAYA;AAUY,KEaA,sBAAA,GAAyB,QFJxB;;;;AC/BI,UCwCA,qBAAA,CDxCoB;EASpB,eAAA,CAAA,ECgCG,eD9BI;EAOP,IAAA,EAAA,MAAA;EAiBA,UAAA,EAAQ,CAAA,IAAA,ECQJ,QDRI,EAAA,GCQS,ODRT,CCQiB,cDRjB,CAAA,GCQmC,cDRnC;EASb,SAAA,CAAA,EAAA,GAAA,GAAc,IAAA;aCCb;WACF;;AAXX;AAKA;;AAGqB,KAST,qBAAA,GAAwB,sBATf,GAUnB,sBAVmB;;;;AAER,iBAySS,iBAAA,CAzST,OAAA,EA0SF,qBA1SE,EAAA,OAAA,CAAA,EA2SF,qBA3SE,CAAA,EA4SV,OA5SU,CA4SF,aA5SE,CAAA"}
+{"version":3,"file":"index.d.ts","names":[],"sources":["../../../core/src/types.ts","../../../core/src/runner.ts","../../src/runner/index.ts"],"sourcesContent":[],"mappings":";;;;ACeA;AASA;AASA;AAiBiB,KDnCL,gBAAA,GCmCa,SAAA,GAAA,cAAA,GAAA,kBAAA,GAAA,YAAA,GAAA,eAAA,GAAA,qBAAA,GAAA,gBAAA;AASzB;;;UDhCiB,YAAA;EEuBL;EAKK,IAAA,EF1BT,gBE0BS;EACG;EAEC,OAAA,EAAA,MAAA;;;;;AAGV,KFxBC,aEwBD,CAAA,IAAA,OAAA,CAAA,GAAA;EAAW,UAAA,EAAA,MAAA;EAMV,IAAA,EAAA,MAAA,EAAA;EA4TU,EAAA,EAAA,IAAA;EACX,MAAA,EFtVG,CEsVH;CACA,GAAA;EACA,UAAA,EAAA,MAAA;EAAR,KAAA,EFpVU,YEoVV;EAAO,IAAA,EAAA,MAAA,EAAA;;;;;;;AFnXV;AAYiB,UCZA,oBAAA,CDcT;EAQI,WAAA,CAAA,EAAA,MAAa;;;;ACtBzB;AASA;AASA;AAiBiB,UA1BA,gBAAA,CA0BQ;EASb,IAAA,EAAA,MAAA;SAjCH,eAAe;;;ACwBxB;AAKA;;AAGqB,UDzBJ,sBAAA,CCyBI;EAAqB,WAAA,CAAA,EAAA,MAAA;EAAR,WAAA,CAAA,EAAA,MAAA;EAA0B,gBAAA,CAAA,EAAA,MAAA;EAE/C,SAAA,CAAA,EAAA,MAAA;;;;;UDVI,QAAA;;;;;;;;KASL,cAAA;;;;SAMC;;;;;;ADlDb;AAYA;AAUY,KEaA,sBAAA,GAAyB,QFJxB;;;;AC/BI,UCwCA,qBAAA,CDxCoB;EASpB,eAAA,CAAA,ECgCG,eD9BI;EAOP,IAAA,EAAA,MAAA;EAiBA,UAAA,EAAQ,CAAA,IAAA,ECQJ,QDRI,EAAA,GCQS,ODRT,CCQiB,cDRjB,CAAA,GCQmC,cDRnC;EASb,SAAA,CAAA,EAAA,GAAA,GAAc,IAAA;aCCb;WACF;;AAXX;AAKA;;AAGqB,KAST,qBAAA,GAAwB,sBATf,GAUnB,sBAVmB;;;;AAER,iBAmUS,iBAAA,CAnUT,OAAA,EAoUF,qBApUE,EAAA,OAAA,CAAA,EAqUF,qBArUE,CAAA,EAsUV,OAtUU,CAsUF,aAtUE,CAAA"}

package/dist/runner/index.js

@@ -1,3 +1,3 @@
-import { t as runQuickJsSession } from "../runner-DVOLiGt4.js";
+import { t as runQuickJsSession } from "../runner-O4f_FOhI.js";
 
 export { runQuickJsSession };

package/dist/runner/protocolEndpoint.cjs

@@ -1,6 +1,42 @@
-const require_runner = require('../runner-CYXIVOmJ.cjs');
+const require_runner = require('../runner-9_N9h2rp.cjs');
 let node_crypto = require("node:crypto");
 
+//#region ../protocol/src/messages.ts
+function isRecord(value) {
+	return typeof value === "object" && value !== null;
+}
+function isFiniteNumber(value) {
+	return typeof value === "number" && Number.isFinite(value);
+}
+function isRuntimeOptions(value) {
+	if (!isRecord(value)) return false;
+	return isFiniteNumber(value.maxLogChars) && isFiniteNumber(value.maxLogLines) && isFiniteNumber(value.memoryLimitBytes) && isFiniteNumber(value.timeoutMs);
+}
+function isProviderManifest(value) {
+	if (!isRecord(value) || typeof value.name !== "string") return false;
+	if (!isRecord(value.tools) || typeof value.types !== "string") return false;
+	return Object.values(value.tools).every((tool) => isRecord(tool) && typeof tool.originalName === "string" && typeof tool.safeName === "string" && (tool.description === void 0 || typeof tool.description === "string"));
+}
+function isExecuteError(value) {
+	return isRecord(value) && typeof value.code === "string" && typeof value.message === "string";
+}
+/**
+* Returns whether an unknown value is a dispatcher-to-runner message.
+*/
+function isDispatcherMessage(value) {
+	if (!isRecord(value) || typeof value.type !== "string") return false;
+	switch (value.type) {
+		case "cancel": return typeof value.id === "string";
+		case "execute": return typeof value.code === "string" && typeof value.id === "string" && isRuntimeOptions(value.options) && Array.isArray(value.providers) && value.providers.every(isProviderManifest);
+		case "tool_result":
+			if (typeof value.callId !== "string" || typeof value.ok !== "boolean") return false;
+			if (value.ok) return "result" in value;
+			return isExecuteError(value.error);
+		default: return false;
+	}
+}
+
+//#endregion
 //#region src/runner/protocolEndpoint.ts
 /**
 * Attaches the shared QuickJS protocol loop to a worker/process messaging port.
@@ -72,6 +108,7 @@ function attachQuickJsProtocolEndpoint(port) {
 		}
 	}
 	const maybeDetach = port.onMessage((message) => {
+		if (!isDispatcherMessage(message)) return;
 		switch (message.type) {
 			case "cancel":
 				if (message.id === activeExecutionId) activeAbortController?.abort();

package/dist/runner/protocolEndpoint.cjs.map

@@ -1 +1 @@
-{"version":3,"file":"protocolEndpoint.cjs","names":["activeAbortController: AbortController | undefined","activeExecutionId: string | undefined","runQuickJsSession"],"sources":["../../src/runner/protocolEndpoint.ts"],"sourcesContent":["import { randomUUID } from \"node:crypto\";\n\nimport type {\n  DispatcherMessage,\n  ExecuteMessage,\n  RunnerMessage,\n  ToolCallResult,\n} from \"@execbox/protocol\";\n\nimport { runQuickJsSession } from \"./index.ts\";\n\n/**\n * Minimal worker/process-side port used by the shared QuickJS protocol endpoint.\n */\nexport interface QuickJsProtocolPort {\n  onMessage(handler: (message: DispatcherMessage) => void): void | (() => void);\n  send(message: RunnerMessage): void;\n}\n\n/**\n * Attaches the shared QuickJS protocol loop to a worker/process messaging port.\n */\nexport function attachQuickJsProtocolEndpoint(\n  port: QuickJsProtocolPort,\n): () => void {\n  const pendingToolCalls = new Map<string, (result: ToolCallResult) => void>();\n  let activeAbortController: AbortController | undefined;\n  let activeExecutionId: string | undefined;\n\n  async function startExecution(message: ExecuteMessage): Promise<void> {\n    if (activeExecutionId) {\n      port.send({\n        durationMs: 0,\n        error: {\n          code: \"internal_error\",\n          message: \"QuickJS endpoint already has an active execution\",\n        },\n        id: message.id,\n        logs: [],\n        ok: false,\n        type: \"done\",\n      });\n      return;\n    }\n\n    const abortController = new AbortController();\n    activeAbortController = abortController;\n    activeExecutionId = message.id;\n\n    try {\n      const result = await runQuickJsSession(\n        {\n          abortController,\n          code: message.code,\n          onStarted: () => {\n            port.send({\n              id: message.id,\n              type: \"started\",\n            });\n          },\n          onToolCall: (call) =>\n            new Promise<ToolCallResult>((resolve) => {\n              const callId = randomUUID();\n              pendingToolCalls.set(callId, resolve);\n              port.send({\n                ...call,\n                callId,\n                type: \"tool_call\",\n              });\n            }),\n          providers: message.providers,\n        },\n        message.options,\n      );\n\n      port.send({\n        ...result,\n        id: message.id,\n        type: \"done\",\n      });\n    } catch (error) {\n      port.send({\n        durationMs: 0,\n        error: {\n          code: \"internal_error\",\n          message: error instanceof Error ? error.message : String(error),\n        },\n        id: message.id,\n        logs: [],\n        ok: false,\n        type: \"done\",\n      });\n    } finally {\n      pendingToolCalls.clear();\n      activeAbortController = undefined;\n      activeExecutionId = undefined;\n    }\n  }\n\n  const maybeDetach = port.onMessage((message: DispatcherMessage) => {\n    switch (message.type) {\n      case \"cancel\":\n        if (message.id === activeExecutionId) {\n          activeAbortController?.abort();\n        }\n        break;\n      case \"execute\":\n        void startExecution(message);\n        break;\n      case \"tool_result\": {\n        const resolve = pendingToolCalls.get(message.callId);\n        pendingToolCalls.delete(message.callId);\n        resolve?.(message);\n        break;\n      }\n    }\n  });\n\n  return () => {\n    if (typeof maybeDetach === \"function\") {\n      maybeDetach();\n    }\n    pendingToolCalls.clear();\n    activeAbortController?.abort();\n    activeAbortController = undefined;\n    activeExecutionId = undefined;\n  };\n}\n"],"mappings":";;;;;;;AAsBA,SAAgB,8BACd,MACY;CACZ,MAAM,mCAAmB,IAAI,KAA+C;CAC5E,IAAIA;CACJ,IAAIC;CAEJ,eAAe,eAAe,SAAwC;AACpE,MAAI,mBAAmB;AACrB,QAAK,KAAK;IACR,YAAY;IACZ,OAAO;KACL,MAAM;KACN,SAAS;KACV;IACD,IAAI,QAAQ;IACZ,MAAM,EAAE;IACR,IAAI;IACJ,MAAM;IACP,CAAC;AACF;;EAGF,MAAM,kBAAkB,IAAI,iBAAiB;AAC7C,0BAAwB;AACxB,sBAAoB,QAAQ;AAE5B,MAAI;GACF,MAAM,SAAS,MAAMC,iCACnB;IACE;IACA,MAAM,QAAQ;IACd,iBAAiB;AACf,UAAK,KAAK;MACR,IAAI,QAAQ;MACZ,MAAM;MACP,CAAC;;IAEJ,aAAa,SACX,IAAI,SAAyB,YAAY;KACvC,MAAM,sCAAqB;AAC3B,sBAAiB,IAAI,QAAQ,QAAQ;AACrC,UAAK,KAAK;MACR,GAAG;MACH;MACA,MAAM;MACP,CAAC;MACF;IACJ,WAAW,QAAQ;IACpB,EACD,QAAQ,QACT;AAED,QAAK,KAAK;IACR,GAAG;IACH,IAAI,QAAQ;IACZ,MAAM;IACP,CAAC;WACK,OAAO;AACd,QAAK,KAAK;IACR,YAAY;IACZ,OAAO;KACL,MAAM;KACN,SAAS,iBAAiB,QAAQ,MAAM,UAAU,OAAO,MAAM;KAChE;IACD,IAAI,QAAQ;IACZ,MAAM,EAAE;IACR,IAAI;IACJ,MAAM;IACP,CAAC;YACM;AACR,oBAAiB,OAAO;AACxB,2BAAwB;AACxB,uBAAoB;;;CAIxB,MAAM,cAAc,KAAK,WAAW,YAA+B;AACjE,UAAQ,QAAQ,MAAhB;GACE,KAAK;AACH,QAAI,QAAQ,OAAO,kBACjB,wBAAuB,OAAO;AAEhC;GACF,KAAK;AACH,IAAK,eAAe,QAAQ;AAC5B;GACF,KAAK,eAAe;IAClB,MAAM,UAAU,iBAAiB,IAAI,QAAQ,OAAO;AACpD,qBAAiB,OAAO,QAAQ,OAAO;AACvC,cAAU,QAAQ;AAClB;;;GAGJ;AAEF,cAAa;AACX,MAAI,OAAO,gBAAgB,WACzB,cAAa;AAEf,mBAAiB,OAAO;AACxB,yBAAuB,OAAO;AAC9B,0BAAwB;AACxB,sBAAoB"}
+{"version":3,"file":"protocolEndpoint.cjs","names":["activeAbortController: AbortController | undefined","activeExecutionId: string | undefined","runQuickJsSession"],"sources":["../../../protocol/src/messages.ts","../../src/runner/protocolEndpoint.ts"],"sourcesContent":["import type {\n  ExecuteResult,\n  ExecutorRuntimeOptions,\n  ProviderManifest,\n  ToolCall,\n  ToolCallResult,\n} from \"@execbox/core\";\n\nfunction isRecord(value: unknown): value is Record<string, unknown> {\n  return typeof value === \"object\" && value !== null;\n}\n\nfunction isFiniteNumber(value: unknown): value is number {\n  return typeof value === \"number\" && Number.isFinite(value);\n}\n\nfunction isRuntimeOptions(value: unknown): value is ExecutorRuntimeOptions {\n  if (!isRecord(value)) {\n    return false;\n  }\n\n  return (\n    isFiniteNumber(value.maxLogChars) &&\n    isFiniteNumber(value.maxLogLines) &&\n    isFiniteNumber(value.memoryLimitBytes) &&\n    isFiniteNumber(value.timeoutMs)\n  );\n}\n\nfunction isProviderManifest(value: unknown): value is ProviderManifest {\n  if (!isRecord(value) || typeof value.name !== \"string\") {\n    return false;\n  }\n\n  if (!isRecord(value.tools) || typeof value.types !== \"string\") {\n    return false;\n  }\n\n  return Object.values(value.tools).every(\n    (tool) =>\n      isRecord(tool) &&\n      typeof tool.originalName === \"string\" &&\n      typeof tool.safeName === \"string\" &&\n      (tool.description === undefined || typeof tool.description === \"string\"),\n  );\n}\n\nfunction isExecuteError(\n  value: unknown,\n): value is { code: string; message: string } {\n  return (\n    isRecord(value) &&\n    typeof value.code === \"string\" &&\n    typeof value.message === \"string\"\n  );\n}\n\nfunction isDonePayload(value: unknown): value is DoneMessage {\n  if (!isRecord(value) || !isFiniteNumber(value.durationMs)) {\n    return false;\n  }\n\n  if (\n    !Array.isArray(value.logs) ||\n    !value.logs.every((log) => typeof log === \"string\")\n  ) {\n    return false;\n  }\n\n  if (typeof value.ok !== \"boolean\") {\n    return false;\n  }\n\n  return value.ok ? true : isExecuteError(value.error);\n}\n\n/**\n * Message sent from dispatcher to runner to start one execution session.\n */\nexport interface ExecuteMessage {\n  code: string;\n  id: string;\n  options: ExecutorRuntimeOptions;\n  providers: ProviderManifest[];\n  type: \"execute\";\n}\n\n/**\n * Message sent from dispatcher to request prompt cancellation.\n */\nexport interface CancelMessage {\n  id: string;\n  type: \"cancel\";\n}\n\n/**\n * Message sent from a runner when guest code invokes a host tool.\n */\nexport interface ToolCallMessage extends ToolCall {\n  callId: string;\n  type: \"tool_call\";\n}\n\n/**\n * Message carrying a trusted host tool result back to the runner.\n */\nexport type ToolResultMessage = {\n  callId: string;\n  type: \"tool_result\";\n} & ToolCallResult;\n\n/**\n * Message indicating the runner has finished bootstrapping guest execution timing.\n */\nexport interface StartedMessage {\n  id: string;\n  type: \"started\";\n}\n\n/**\n * Final successful execution result returned by a runner.\n *\n * Node IPC can omit `undefined` fields during serialization, so `result`\n * remains optional at the protocol boundary and is normalized by the host.\n */\nexport type DoneSuccessMessage<T = unknown> = {\n  durationMs: number;\n  id: string;\n  logs: string[];\n  ok: true;\n  result?: T;\n  type: \"done\";\n};\n\n/**\n * Final failed execution result returned by a runner.\n */\nexport type DoneFailureMessage = {\n  id: string;\n  type: \"done\";\n} & Extract<ExecuteResult, { ok: false }>;\n\n/**\n * Final execution result returned by a runner.\n */\nexport type DoneMessage = DoneSuccessMessage | DoneFailureMessage;\n\n/**\n * Messages accepted by a runner transport endpoint.\n */\nexport type DispatcherMessage =\n  | CancelMessage\n  | ExecuteMessage\n  | ToolResultMessage;\n\n/**\n * Messages emitted by a runner transport endpoint.\n */\nexport type RunnerMessage = DoneMessage | StartedMessage | ToolCallMessage;\n\n/**\n * Returns whether an unknown value is a dispatcher-to-runner message.\n */\nexport function isDispatcherMessage(\n  value: unknown,\n): value is DispatcherMessage {\n  if (!isRecord(value) || typeof value.type !== \"string\") {\n    return false;\n  }\n\n  switch (value.type) {\n    case \"cancel\":\n      return typeof value.id === \"string\";\n    case \"execute\":\n      return (\n        typeof value.code === \"string\" &&\n        typeof value.id === \"string\" &&\n        isRuntimeOptions(value.options) &&\n        Array.isArray(value.providers) &&\n        value.providers.every(isProviderManifest)\n      );\n    case \"tool_result\":\n      if (typeof value.callId !== \"string\" || typeof value.ok !== \"boolean\") {\n        return false;\n      }\n\n      if (value.ok) {\n        return \"result\" in value;\n      }\n\n      return isExecuteError(value.error);\n    default:\n      return false;\n  }\n}\n\n/**\n * Returns whether an unknown value is a runner-to-dispatcher message.\n */\nexport function isRunnerMessage(value: unknown): value is RunnerMessage {\n  if (!isRecord(value) || typeof value.type !== \"string\") {\n    return false;\n  }\n\n  switch (value.type) {\n    case \"started\":\n      return typeof value.id === \"string\";\n    case \"tool_call\":\n      return (\n        typeof value.callId === \"string\" &&\n        typeof value.providerName === \"string\" &&\n        typeof value.safeToolName === \"string\" &&\n        \"input\" in value\n      );\n    case \"done\":\n      return typeof value.id === \"string\" && isDonePayload(value);\n    default:\n      return false;\n  }\n}\n","import { randomUUID } from \"node:crypto\";\n\nimport type {\n  DispatcherMessage,\n  ExecuteMessage,\n  RunnerMessage,\n  ToolCallResult,\n} from \"@execbox/protocol\";\nimport { isDispatcherMessage } from \"../../../protocol/src/messages.ts\";\n\nimport { runQuickJsSession } from \"./index.ts\";\n\n/**\n * Minimal worker/process-side port used by the shared QuickJS protocol endpoint.\n */\nexport interface QuickJsProtocolPort {\n  onMessage(handler: (message: DispatcherMessage) => void): void | (() => void);\n  send(message: RunnerMessage): void;\n}\n\n/**\n * Attaches the shared QuickJS protocol loop to a worker/process messaging port.\n */\nexport function attachQuickJsProtocolEndpoint(\n  port: QuickJsProtocolPort,\n): () => void {\n  const pendingToolCalls = new Map<string, (result: ToolCallResult) => void>();\n  let activeAbortController: AbortController | undefined;\n  let activeExecutionId: string | undefined;\n\n  async function startExecution(message: ExecuteMessage): Promise<void> {\n    if (activeExecutionId) {\n      port.send({\n        durationMs: 0,\n        error: {\n          code: \"internal_error\",\n          message: \"QuickJS endpoint already has an active execution\",\n        },\n        id: message.id,\n        logs: [],\n        ok: false,\n        type: \"done\",\n      });\n      return;\n    }\n\n    const abortController = new AbortController();\n    activeAbortController = abortController;\n    activeExecutionId = message.id;\n\n    try {\n      const result = await runQuickJsSession(\n        {\n          abortController,\n          code: message.code,\n          onStarted: () => {\n            port.send({\n              id: message.id,\n              type: \"started\",\n            });\n          },\n          onToolCall: (call) =>\n            new Promise<ToolCallResult>((resolve) => {\n              const callId = randomUUID();\n              pendingToolCalls.set(callId, resolve);\n              port.send({\n                ...call,\n                callId,\n                type: \"tool_call\",\n              });\n            }),\n          providers: message.providers,\n        },\n        message.options,\n      );\n\n      port.send({\n        ...result,\n        id: message.id,\n        type: \"done\",\n      });\n    } catch (error) {\n      port.send({\n        durationMs: 0,\n        error: {\n          code: \"internal_error\",\n          message: error instanceof Error ? error.message : String(error),\n        },\n        id: message.id,\n        logs: [],\n        ok: false,\n        type: \"done\",\n      });\n    } finally {\n      pendingToolCalls.clear();\n      activeAbortController = undefined;\n      activeExecutionId = undefined;\n    }\n  }\n\n  const maybeDetach = port.onMessage((message: DispatcherMessage) => {\n    if (!isDispatcherMessage(message)) {\n      return;\n    }\n\n    switch (message.type) {\n      case \"cancel\":\n        if (message.id === activeExecutionId) {\n          activeAbortController?.abort();\n        }\n        break;\n      case \"execute\":\n        void startExecution(message);\n        break;\n      case \"tool_result\": {\n        const resolve = pendingToolCalls.get(message.callId);\n        pendingToolCalls.delete(message.callId);\n        resolve?.(message);\n        break;\n      }\n    }\n  });\n\n  return () => {\n    if (typeof maybeDetach === \"function\") {\n      maybeDetach();\n    }\n    pendingToolCalls.clear();\n    activeAbortController?.abort();\n    activeAbortController = undefined;\n    activeExecutionId = undefined;\n  };\n}\n"],"mappings":";;;;AAQA,SAAS,SAAS,OAAkD;AAClE,QAAO,OAAO,UAAU,YAAY,UAAU;;AAGhD,SAAS,eAAe,OAAiC;AACvD,QAAO,OAAO,UAAU,YAAY,OAAO,SAAS,MAAM;;AAG5D,SAAS,iBAAiB,OAAiD;AACzE,KAAI,CAAC,SAAS,MAAM,CAClB,QAAO;AAGT,QACE,eAAe,MAAM,YAAY,IACjC,eAAe,MAAM,YAAY,IACjC,eAAe,MAAM,iBAAiB,IACtC,eAAe,MAAM,UAAU;;AAInC,SAAS,mBAAmB,OAA2C;AACrE,KAAI,CAAC,SAAS,MAAM,IAAI,OAAO,MAAM,SAAS,SAC5C,QAAO;AAGT,KAAI,CAAC,SAAS,MAAM,MAAM,IAAI,OAAO,MAAM,UAAU,SACnD,QAAO;AAGT,QAAO,OAAO,OAAO,MAAM,MAAM,CAAC,OAC/B,SACC,SAAS,KAAK,IACd,OAAO,KAAK,iBAAiB,YAC7B,OAAO,KAAK,aAAa,aACxB,KAAK,gBAAgB,UAAa,OAAO,KAAK,gBAAgB,UAClE;;AAGH,SAAS,eACP,OAC4C;AAC5C,QACE,SAAS,MAAM,IACf,OAAO,MAAM,SAAS,YACtB,OAAO,MAAM,YAAY;;;;;AA8G7B,SAAgB,oBACd,OAC4B;AAC5B,KAAI,CAAC,SAAS,MAAM,IAAI,OAAO,MAAM,SAAS,SAC5C,QAAO;AAGT,SAAQ,MAAM,MAAd;EACE,KAAK,SACH,QAAO,OAAO,MAAM,OAAO;EAC7B,KAAK,UACH,QACE,OAAO,MAAM,SAAS,YACtB,OAAO,MAAM,OAAO,YACpB,iBAAiB,MAAM,QAAQ,IAC/B,MAAM,QAAQ,MAAM,UAAU,IAC9B,MAAM,UAAU,MAAM,mBAAmB;EAE7C,KAAK;AACH,OAAI,OAAO,MAAM,WAAW,YAAY,OAAO,MAAM,OAAO,UAC1D,QAAO;AAGT,OAAI,MAAM,GACR,QAAO,YAAY;AAGrB,UAAO,eAAe,MAAM,MAAM;EACpC,QACE,QAAO;;;;;;;;;ACzKb,SAAgB,8BACd,MACY;CACZ,MAAM,mCAAmB,IAAI,KAA+C;CAC5E,IAAIA;CACJ,IAAIC;CAEJ,eAAe,eAAe,SAAwC;AACpE,MAAI,mBAAmB;AACrB,QAAK,KAAK;IACR,YAAY;IACZ,OAAO;KACL,MAAM;KACN,SAAS;KACV;IACD,IAAI,QAAQ;IACZ,MAAM,EAAE;IACR,IAAI;IACJ,MAAM;IACP,CAAC;AACF;;EAGF,MAAM,kBAAkB,IAAI,iBAAiB;AAC7C,0BAAwB;AACxB,sBAAoB,QAAQ;AAE5B,MAAI;GACF,MAAM,SAAS,MAAMC,iCACnB;IACE;IACA,MAAM,QAAQ;IACd,iBAAiB;AACf,UAAK,KAAK;MACR,IAAI,QAAQ;MACZ,MAAM;MACP,CAAC;;IAEJ,aAAa,SACX,IAAI,SAAyB,YAAY;KACvC,MAAM,sCAAqB;AAC3B,sBAAiB,IAAI,QAAQ,QAAQ;AACrC,UAAK,KAAK;MACR,GAAG;MACH;MACA,MAAM;MACP,CAAC;MACF;IACJ,WAAW,QAAQ;IACpB,EACD,QAAQ,QACT;AAED,QAAK,KAAK;IACR,GAAG;IACH,IAAI,QAAQ;IACZ,MAAM;IACP,CAAC;WACK,OAAO;AACd,QAAK,KAAK;IACR,YAAY;IACZ,OAAO;KACL,MAAM;KACN,SAAS,iBAAiB,QAAQ,MAAM,UAAU,OAAO,MAAM;KAChE;IACD,IAAI,QAAQ;IACZ,MAAM,EAAE;IACR,IAAI;IACJ,MAAM;IACP,CAAC;YACM;AACR,oBAAiB,OAAO;AACxB,2BAAwB;AACxB,uBAAoB;;;CAIxB,MAAM,cAAc,KAAK,WAAW,YAA+B;AACjE,MAAI,CAAC,oBAAoB,QAAQ,CAC/B;AAGF,UAAQ,QAAQ,MAAhB;GACE,KAAK;AACH,QAAI,QAAQ,OAAO,kBACjB,wBAAuB,OAAO;AAEhC;GACF,KAAK;AACH,IAAK,eAAe,QAAQ;AAC5B;GACF,KAAK,eAAe;IAClB,MAAM,UAAU,iBAAiB,IAAI,QAAQ,OAAO;AACpD,qBAAiB,OAAO,QAAQ,OAAO;AACvC,cAAU,QAAQ;AAClB;;;GAGJ;AAEF,cAAa;AACX,MAAI,OAAO,gBAAgB,WACzB,cAAa;AAEf,mBAAiB,OAAO;AACxB,yBAAuB,OAAO;AAC9B,0BAAwB;AACxB,sBAAoB"}

package/dist/runner/protocolEndpoint.d.cts.map

@@ -1 +1 @@
-{"version":3,"file":"protocolEndpoint.d.cts","names":[],"sources":["../../src/runner/protocolEndpoint.ts"],"sourcesContent":[],"mappings":";;;;;;AAcA;AAQgB,UARC,mBAAA,CAQ4B;+BAPd;gBACf;;;;;iBAMA,6BAAA,OACR"}
+{"version":3,"file":"protocolEndpoint.d.cts","names":[],"sources":["../../src/runner/protocolEndpoint.ts"],"sourcesContent":[],"mappings":";;;;;;AAeA;AAQgB,UARC,mBAAA,CAQ4B;+BAPd;gBACf;;;;;iBAMA,6BAAA,OACR"}

package/dist/runner/protocolEndpoint.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"protocolEndpoint.d.ts","names":[],"sources":["../../src/runner/protocolEndpoint.ts"],"sourcesContent":[],"mappings":";;;;;;AAcA;AAQgB,UARC,mBAAA,CAQ4B;+BAPd;gBACf;;;;;iBAMA,6BAAA,OACR"}
+{"version":3,"file":"protocolEndpoint.d.ts","names":[],"sources":["../../src/runner/protocolEndpoint.ts"],"sourcesContent":[],"mappings":";;;;;;AAeA;AAQgB,UARC,mBAAA,CAQ4B;+BAPd;gBACf;;;;;iBAMA,6BAAA,OACR"}

package/dist/runner/protocolEndpoint.js

@@ -1,6 +1,42 @@
-import { t as runQuickJsSession } from "../runner-DVOLiGt4.js";
+import { t as runQuickJsSession } from "../runner-O4f_FOhI.js";
 import { randomUUID } from "node:crypto";
 
+//#region ../protocol/src/messages.ts
+function isRecord(value) {
+	return typeof value === "object" && value !== null;
+}
+function isFiniteNumber(value) {
+	return typeof value === "number" && Number.isFinite(value);
+}
+function isRuntimeOptions(value) {
+	if (!isRecord(value)) return false;
+	return isFiniteNumber(value.maxLogChars) && isFiniteNumber(value.maxLogLines) && isFiniteNumber(value.memoryLimitBytes) && isFiniteNumber(value.timeoutMs);
+}
+function isProviderManifest(value) {
+	if (!isRecord(value) || typeof value.name !== "string") return false;
+	if (!isRecord(value.tools) || typeof value.types !== "string") return false;
+	return Object.values(value.tools).every((tool) => isRecord(tool) && typeof tool.originalName === "string" && typeof tool.safeName === "string" && (tool.description === void 0 || typeof tool.description === "string"));
+}
+function isExecuteError(value) {
+	return isRecord(value) && typeof value.code === "string" && typeof value.message === "string";
+}
+/**
+* Returns whether an unknown value is a dispatcher-to-runner message.
+*/
+function isDispatcherMessage(value) {
+	if (!isRecord(value) || typeof value.type !== "string") return false;
+	switch (value.type) {
+		case "cancel": return typeof value.id === "string";
+		case "execute": return typeof value.code === "string" && typeof value.id === "string" && isRuntimeOptions(value.options) && Array.isArray(value.providers) && value.providers.every(isProviderManifest);
+		case "tool_result":
+			if (typeof value.callId !== "string" || typeof value.ok !== "boolean") return false;
+			if (value.ok) return "result" in value;
+			return isExecuteError(value.error);
+		default: return false;
+	}
+}
+
+//#endregion
 //#region src/runner/protocolEndpoint.ts
 /**
 * Attaches the shared QuickJS protocol loop to a worker/process messaging port.
@@ -72,6 +108,7 @@ function attachQuickJsProtocolEndpoint(port) {
 		}
 	}
 	const maybeDetach = port.onMessage((message) => {
+		if (!isDispatcherMessage(message)) return;
 		switch (message.type) {
 			case "cancel":
 				if (message.id === activeExecutionId) activeAbortController?.abort();

package/dist/runner/protocolEndpoint.js.map

@@ -1 +1 @@
-{"version":3,"file":"protocolEndpoint.js","names":["activeAbortController: AbortController | undefined","activeExecutionId: string | undefined"],"sources":["../../src/runner/protocolEndpoint.ts"],"sourcesContent":["import { randomUUID } from \"node:crypto\";\n\nimport type {\n  DispatcherMessage,\n  ExecuteMessage,\n  RunnerMessage,\n  ToolCallResult,\n} from \"@execbox/protocol\";\n\nimport { runQuickJsSession } from \"./index.ts\";\n\n/**\n * Minimal worker/process-side port used by the shared QuickJS protocol endpoint.\n */\nexport interface QuickJsProtocolPort {\n  onMessage(handler: (message: DispatcherMessage) => void): void | (() => void);\n  send(message: RunnerMessage): void;\n}\n\n/**\n * Attaches the shared QuickJS protocol loop to a worker/process messaging port.\n */\nexport function attachQuickJsProtocolEndpoint(\n  port: QuickJsProtocolPort,\n): () => void {\n  const pendingToolCalls = new Map<string, (result: ToolCallResult) => void>();\n  let activeAbortController: AbortController | undefined;\n  let activeExecutionId: string | undefined;\n\n  async function startExecution(message: ExecuteMessage): Promise<void> {\n    if (activeExecutionId) {\n      port.send({\n        durationMs: 0,\n        error: {\n          code: \"internal_error\",\n          message: \"QuickJS endpoint already has an active execution\",\n        },\n        id: message.id,\n        logs: [],\n        ok: false,\n        type: \"done\",\n      });\n      return;\n    }\n\n    const abortController = new AbortController();\n    activeAbortController = abortController;\n    activeExecutionId = message.id;\n\n    try {\n      const result = await runQuickJsSession(\n        {\n          abortController,\n          code: message.code,\n          onStarted: () => {\n            port.send({\n              id: message.id,\n              type: \"started\",\n            });\n          },\n          onToolCall: (call) =>\n            new Promise<ToolCallResult>((resolve) => {\n              const callId = randomUUID();\n              pendingToolCalls.set(callId, resolve);\n              port.send({\n                ...call,\n                callId,\n                type: \"tool_call\",\n              });\n            }),\n          providers: message.providers,\n        },\n        message.options,\n      );\n\n      port.send({\n        ...result,\n        id: message.id,\n        type: \"done\",\n      });\n    } catch (error) {\n      port.send({\n        durationMs: 0,\n        error: {\n          code: \"internal_error\",\n          message: error instanceof Error ? error.message : String(error),\n        },\n        id: message.id,\n        logs: [],\n        ok: false,\n        type: \"done\",\n      });\n    } finally {\n      pendingToolCalls.clear();\n      activeAbortController = undefined;\n      activeExecutionId = undefined;\n    }\n  }\n\n  const maybeDetach = port.onMessage((message: DispatcherMessage) => {\n    switch (message.type) {\n      case \"cancel\":\n        if (message.id === activeExecutionId) {\n          activeAbortController?.abort();\n        }\n        break;\n      case \"execute\":\n        void startExecution(message);\n        break;\n      case \"tool_result\": {\n        const resolve = pendingToolCalls.get(message.callId);\n        pendingToolCalls.delete(message.callId);\n        resolve?.(message);\n        break;\n      }\n    }\n  });\n\n  return () => {\n    if (typeof maybeDetach === \"function\") {\n      maybeDetach();\n    }\n    pendingToolCalls.clear();\n    activeAbortController?.abort();\n    activeAbortController = undefined;\n    activeExecutionId = undefined;\n  };\n}\n"],"mappings":";;;;;;;AAsBA,SAAgB,8BACd,MACY;CACZ,MAAM,mCAAmB,IAAI,KAA+C;CAC5E,IAAIA;CACJ,IAAIC;CAEJ,eAAe,eAAe,SAAwC;AACpE,MAAI,mBAAmB;AACrB,QAAK,KAAK;IACR,YAAY;IACZ,OAAO;KACL,MAAM;KACN,SAAS;KACV;IACD,IAAI,QAAQ;IACZ,MAAM,EAAE;IACR,IAAI;IACJ,MAAM;IACP,CAAC;AACF;;EAGF,MAAM,kBAAkB,IAAI,iBAAiB;AAC7C,0BAAwB;AACxB,sBAAoB,QAAQ;AAE5B,MAAI;GACF,MAAM,SAAS,MAAM,kBACnB;IACE;IACA,MAAM,QAAQ;IACd,iBAAiB;AACf,UAAK,KAAK;MACR,IAAI,QAAQ;MACZ,MAAM;MACP,CAAC;;IAEJ,aAAa,SACX,IAAI,SAAyB,YAAY;KACvC,MAAM,SAAS,YAAY;AAC3B,sBAAiB,IAAI,QAAQ,QAAQ;AACrC,UAAK,KAAK;MACR,GAAG;MACH;MACA,MAAM;MACP,CAAC;MACF;IACJ,WAAW,QAAQ;IACpB,EACD,QAAQ,QACT;AAED,QAAK,KAAK;IACR,GAAG;IACH,IAAI,QAAQ;IACZ,MAAM;IACP,CAAC;WACK,OAAO;AACd,QAAK,KAAK;IACR,YAAY;IACZ,OAAO;KACL,MAAM;KACN,SAAS,iBAAiB,QAAQ,MAAM,UAAU,OAAO,MAAM;KAChE;IACD,IAAI,QAAQ;IACZ,MAAM,EAAE;IACR,IAAI;IACJ,MAAM;IACP,CAAC;YACM;AACR,oBAAiB,OAAO;AACxB,2BAAwB;AACxB,uBAAoB;;;CAIxB,MAAM,cAAc,KAAK,WAAW,YAA+B;AACjE,UAAQ,QAAQ,MAAhB;GACE,KAAK;AACH,QAAI,QAAQ,OAAO,kBACjB,wBAAuB,OAAO;AAEhC;GACF,KAAK;AACH,IAAK,eAAe,QAAQ;AAC5B;GACF,KAAK,eAAe;IAClB,MAAM,UAAU,iBAAiB,IAAI,QAAQ,OAAO;AACpD,qBAAiB,OAAO,QAAQ,OAAO;AACvC,cAAU,QAAQ;AAClB;;;GAGJ;AAEF,cAAa;AACX,MAAI,OAAO,gBAAgB,WACzB,cAAa;AAEf,mBAAiB,OAAO;AACxB,yBAAuB,OAAO;AAC9B,0BAAwB;AACxB,sBAAoB"}
+{"version":3,"file":"protocolEndpoint.js","names":["activeAbortController: AbortController | undefined","activeExecutionId: string | undefined"],"sources":["../../../protocol/src/messages.ts","../../src/runner/protocolEndpoint.ts"],"sourcesContent":["import type {\n  ExecuteResult,\n  ExecutorRuntimeOptions,\n  ProviderManifest,\n  ToolCall,\n  ToolCallResult,\n} from \"@execbox/core\";\n\nfunction isRecord(value: unknown): value is Record<string, unknown> {\n  return typeof value === \"object\" && value !== null;\n}\n\nfunction isFiniteNumber(value: unknown): value is number {\n  return typeof value === \"number\" && Number.isFinite(value);\n}\n\nfunction isRuntimeOptions(value: unknown): value is ExecutorRuntimeOptions {\n  if (!isRecord(value)) {\n    return false;\n  }\n\n  return (\n    isFiniteNumber(value.maxLogChars) &&\n    isFiniteNumber(value.maxLogLines) &&\n    isFiniteNumber(value.memoryLimitBytes) &&\n    isFiniteNumber(value.timeoutMs)\n  );\n}\n\nfunction isProviderManifest(value: unknown): value is ProviderManifest {\n  if (!isRecord(value) || typeof value.name !== \"string\") {\n    return false;\n  }\n\n  if (!isRecord(value.tools) || typeof value.types !== \"string\") {\n    return false;\n  }\n\n  return Object.values(value.tools).every(\n    (tool) =>\n      isRecord(tool) &&\n      typeof tool.originalName === \"string\" &&\n      typeof tool.safeName === \"string\" &&\n      (tool.description === undefined || typeof tool.description === \"string\"),\n  );\n}\n\nfunction isExecuteError(\n  value: unknown,\n): value is { code: string; message: string } {\n  return (\n    isRecord(value) &&\n    typeof value.code === \"string\" &&\n    typeof value.message === \"string\"\n  );\n}\n\nfunction isDonePayload(value: unknown): value is DoneMessage {\n  if (!isRecord(value) || !isFiniteNumber(value.durationMs)) {\n    return false;\n  }\n\n  if (\n    !Array.isArray(value.logs) ||\n    !value.logs.every((log) => typeof log === \"string\")\n  ) {\n    return false;\n  }\n\n  if (typeof value.ok !== \"boolean\") {\n    return false;\n  }\n\n  return value.ok ? true : isExecuteError(value.error);\n}\n\n/**\n * Message sent from dispatcher to runner to start one execution session.\n */\nexport interface ExecuteMessage {\n  code: string;\n  id: string;\n  options: ExecutorRuntimeOptions;\n  providers: ProviderManifest[];\n  type: \"execute\";\n}\n\n/**\n * Message sent from dispatcher to request prompt cancellation.\n */\nexport interface CancelMessage {\n  id: string;\n  type: \"cancel\";\n}\n\n/**\n * Message sent from a runner when guest code invokes a host tool.\n */\nexport interface ToolCallMessage extends ToolCall {\n  callId: string;\n  type: \"tool_call\";\n}\n\n/**\n * Message carrying a trusted host tool result back to the runner.\n */\nexport type ToolResultMessage = {\n  callId: string;\n  type: \"tool_result\";\n} & ToolCallResult;\n\n/**\n * Message indicating the runner has finished bootstrapping guest execution timing.\n */\nexport interface StartedMessage {\n  id: string;\n  type: \"started\";\n}\n\n/**\n * Final successful execution result returned by a runner.\n *\n * Node IPC can omit `undefined` fields during serialization, so `result`\n * remains optional at the protocol boundary and is normalized by the host.\n */\nexport type DoneSuccessMessage<T = unknown> = {\n  durationMs: number;\n  id: string;\n  logs: string[];\n  ok: true;\n  result?: T;\n  type: \"done\";\n};\n\n/**\n * Final failed execution result returned by a runner.\n */\nexport type DoneFailureMessage = {\n  id: string;\n  type: \"done\";\n} & Extract<ExecuteResult, { ok: false }>;\n\n/**\n * Final execution result returned by a runner.\n */\nexport type DoneMessage = DoneSuccessMessage | DoneFailureMessage;\n\n/**\n * Messages accepted by a runner transport endpoint.\n */\nexport type DispatcherMessage =\n  | CancelMessage\n  | ExecuteMessage\n  | ToolResultMessage;\n\n/**\n * Messages emitted by a runner transport endpoint.\n */\nexport type RunnerMessage = DoneMessage | StartedMessage | ToolCallMessage;\n\n/**\n * Returns whether an unknown value is a dispatcher-to-runner message.\n */\nexport function isDispatcherMessage(\n  value: unknown,\n): value is DispatcherMessage {\n  if (!isRecord(value) || typeof value.type !== \"string\") {\n    return false;\n  }\n\n  switch (value.type) {\n    case \"cancel\":\n      return typeof value.id === \"string\";\n    case \"execute\":\n      return (\n        typeof value.code === \"string\" &&\n        typeof value.id === \"string\" &&\n        isRuntimeOptions(value.options) &&\n        Array.isArray(value.providers) &&\n        value.providers.every(isProviderManifest)\n      );\n    case \"tool_result\":\n      if (typeof value.callId !== \"string\" || typeof value.ok !== \"boolean\") {\n        return false;\n      }\n\n      if (value.ok) {\n        return \"result\" in value;\n      }\n\n      return isExecuteError(value.error);\n    default:\n      return false;\n  }\n}\n\n/**\n * Returns whether an unknown value is a runner-to-dispatcher message.\n */\nexport function isRunnerMessage(value: unknown): value is RunnerMessage {\n  if (!isRecord(value) || typeof value.type !== \"string\") {\n    return false;\n  }\n\n  switch (value.type) {\n    case \"started\":\n      return typeof value.id === \"string\";\n    case \"tool_call\":\n      return (\n        typeof value.callId === \"string\" &&\n        typeof value.providerName === \"string\" &&\n        typeof value.safeToolName === \"string\" &&\n        \"input\" in value\n      );\n    case \"done\":\n      return typeof value.id === \"string\" && isDonePayload(value);\n    default:\n      return false;\n  }\n}\n","import { randomUUID } from \"node:crypto\";\n\nimport type {\n  DispatcherMessage,\n  ExecuteMessage,\n  RunnerMessage,\n  ToolCallResult,\n} from \"@execbox/protocol\";\nimport { isDispatcherMessage } from \"../../../protocol/src/messages.ts\";\n\nimport { runQuickJsSession } from \"./index.ts\";\n\n/**\n * Minimal worker/process-side port used by the shared QuickJS protocol endpoint.\n */\nexport interface QuickJsProtocolPort {\n  onMessage(handler: (message: DispatcherMessage) => void): void | (() => void);\n  send(message: RunnerMessage): void;\n}\n\n/**\n * Attaches the shared QuickJS protocol loop to a worker/process messaging port.\n */\nexport function attachQuickJsProtocolEndpoint(\n  port: QuickJsProtocolPort,\n): () => void {\n  const pendingToolCalls = new Map<string, (result: ToolCallResult) => void>();\n  let activeAbortController: AbortController | undefined;\n  let activeExecutionId: string | undefined;\n\n  async function startExecution(message: ExecuteMessage): Promise<void> {\n    if (activeExecutionId) {\n      port.send({\n        durationMs: 0,\n        error: {\n          code: \"internal_error\",\n          message: \"QuickJS endpoint already has an active execution\",\n        },\n        id: message.id,\n        logs: [],\n        ok: false,\n        type: \"done\",\n      });\n      return;\n    }\n\n    const abortController = new AbortController();\n    activeAbortController = abortController;\n    activeExecutionId = message.id;\n\n    try {\n      const result = await runQuickJsSession(\n        {\n          abortController,\n          code: message.code,\n          onStarted: () => {\n            port.send({\n              id: message.id,\n              type: \"started\",\n            });\n          },\n          onToolCall: (call) =>\n            new Promise<ToolCallResult>((resolve) => {\n              const callId = randomUUID();\n              pendingToolCalls.set(callId, resolve);\n              port.send({\n                ...call,\n                callId,\n                type: \"tool_call\",\n              });\n            }),\n          providers: message.providers,\n        },\n        message.options,\n      );\n\n      port.send({\n        ...result,\n        id: message.id,\n        type: \"done\",\n      });\n    } catch (error) {\n      port.send({\n        durationMs: 0,\n        error: {\n          code: \"internal_error\",\n          message: error instanceof Error ? error.message : String(error),\n        },\n        id: message.id,\n        logs: [],\n        ok: false,\n        type: \"done\",\n      });\n    } finally {\n      pendingToolCalls.clear();\n      activeAbortController = undefined;\n      activeExecutionId = undefined;\n    }\n  }\n\n  const maybeDetach = port.onMessage((message: DispatcherMessage) => {\n    if (!isDispatcherMessage(message)) {\n      return;\n    }\n\n    switch (message.type) {\n      case \"cancel\":\n        if (message.id === activeExecutionId) {\n          activeAbortController?.abort();\n        }\n        break;\n      case \"execute\":\n        void startExecution(message);\n        break;\n      case \"tool_result\": {\n        const resolve = pendingToolCalls.get(message.callId);\n        pendingToolCalls.delete(message.callId);\n        resolve?.(message);\n        break;\n      }\n    }\n  });\n\n  return () => {\n    if (typeof maybeDetach === \"function\") {\n      maybeDetach();\n    }\n    pendingToolCalls.clear();\n    activeAbortController?.abort();\n    activeAbortController = undefined;\n    activeExecutionId = undefined;\n  };\n}\n"],"mappings":";;;;AAQA,SAAS,SAAS,OAAkD;AAClE,QAAO,OAAO,UAAU,YAAY,UAAU;;AAGhD,SAAS,eAAe,OAAiC;AACvD,QAAO,OAAO,UAAU,YAAY,OAAO,SAAS,MAAM;;AAG5D,SAAS,iBAAiB,OAAiD;AACzE,KAAI,CAAC,SAAS,MAAM,CAClB,QAAO;AAGT,QACE,eAAe,MAAM,YAAY,IACjC,eAAe,MAAM,YAAY,IACjC,eAAe,MAAM,iBAAiB,IACtC,eAAe,MAAM,UAAU;;AAInC,SAAS,mBAAmB,OAA2C;AACrE,KAAI,CAAC,SAAS,MAAM,IAAI,OAAO,MAAM,SAAS,SAC5C,QAAO;AAGT,KAAI,CAAC,SAAS,MAAM,MAAM,IAAI,OAAO,MAAM,UAAU,SACnD,QAAO;AAGT,QAAO,OAAO,OAAO,MAAM,MAAM,CAAC,OAC/B,SACC,SAAS,KAAK,IACd,OAAO,KAAK,iBAAiB,YAC7B,OAAO,KAAK,aAAa,aACxB,KAAK,gBAAgB,UAAa,OAAO,KAAK,gBAAgB,UAClE;;AAGH,SAAS,eACP,OAC4C;AAC5C,QACE,SAAS,MAAM,IACf,OAAO,MAAM,SAAS,YACtB,OAAO,MAAM,YAAY;;;;;AA8G7B,SAAgB,oBACd,OAC4B;AAC5B,KAAI,CAAC,SAAS,MAAM,IAAI,OAAO,MAAM,SAAS,SAC5C,QAAO;AAGT,SAAQ,MAAM,MAAd;EACE,KAAK,SACH,QAAO,OAAO,MAAM,OAAO;EAC7B,KAAK,UACH,QACE,OAAO,MAAM,SAAS,YACtB,OAAO,MAAM,OAAO,YACpB,iBAAiB,MAAM,QAAQ,IAC/B,MAAM,QAAQ,MAAM,UAAU,IAC9B,MAAM,UAAU,MAAM,mBAAmB;EAE7C,KAAK;AACH,OAAI,OAAO,MAAM,WAAW,YAAY,OAAO,MAAM,OAAO,UAC1D,QAAO;AAGT,OAAI,MAAM,GACR,QAAO,YAAY;AAGrB,UAAO,eAAe,MAAM,MAAM;EACpC,QACE,QAAO;;;;;;;;;ACzKb,SAAgB,8BACd,MACY;CACZ,MAAM,mCAAmB,IAAI,KAA+C;CAC5E,IAAIA;CACJ,IAAIC;CAEJ,eAAe,eAAe,SAAwC;AACpE,MAAI,mBAAmB;AACrB,QAAK,KAAK;IACR,YAAY;IACZ,OAAO;KACL,MAAM;KACN,SAAS;KACV;IACD,IAAI,QAAQ;IACZ,MAAM,EAAE;IACR,IAAI;IACJ,MAAM;IACP,CAAC;AACF;;EAGF,MAAM,kBAAkB,IAAI,iBAAiB;AAC7C,0BAAwB;AACxB,sBAAoB,QAAQ;AAE5B,MAAI;GACF,MAAM,SAAS,MAAM,kBACnB;IACE;IACA,MAAM,QAAQ;IACd,iBAAiB;AACf,UAAK,KAAK;MACR,IAAI,QAAQ;MACZ,MAAM;MACP,CAAC;;IAEJ,aAAa,SACX,IAAI,SAAyB,YAAY;KACvC,MAAM,SAAS,YAAY;AAC3B,sBAAiB,IAAI,QAAQ,QAAQ;AACrC,UAAK,KAAK;MACR,GAAG;MACH;MACA,MAAM;MACP,CAAC;MACF;IACJ,WAAW,QAAQ;IACpB,EACD,QAAQ,QACT;AAED,QAAK,KAAK;IACR,GAAG;IACH,IAAI,QAAQ;IACZ,MAAM;IACP,CAAC;WACK,OAAO;AACd,QAAK,KAAK;IACR,YAAY;IACZ,OAAO;KACL,MAAM;KACN,SAAS,iBAAiB,QAAQ,MAAM,UAAU,OAAO,MAAM;KAChE;IACD,IAAI,QAAQ;IACZ,MAAM,EAAE;IACR,IAAI;IACJ,MAAM;IACP,CAAC;YACM;AACR,oBAAiB,OAAO;AACxB,2BAAwB;AACxB,uBAAoB;;;CAIxB,MAAM,cAAc,KAAK,WAAW,YAA+B;AACjE,MAAI,CAAC,oBAAoB,QAAQ,CAC/B;AAGF,UAAQ,QAAQ,MAAhB;GACE,KAAK;AACH,QAAI,QAAQ,OAAO,kBACjB,wBAAuB,OAAO;AAEhC;GACF,KAAK;AACH,IAAK,eAAe,QAAQ;AAC5B;GACF,KAAK,eAAe;IAClB,MAAM,UAAU,iBAAiB,IAAI,QAAQ,OAAO;AACpD,qBAAiB,OAAO,QAAQ,OAAO;AACvC,cAAU,QAAQ;AAClB;;;GAGJ;AAEF,cAAa;AACX,MAAI,OAAO,gBAAgB,WACzB,cAAa;AAEf,mBAAiB,OAAO;AACxB,yBAAuB,OAAO;AAC9B,0BAAwB;AACxB,sBAAoB"}

package/dist/{runner-CYXIVOmJ.cjs → runner-9_N9h2rp.cjs}

@@ -5395,10 +5395,23 @@ function injectProviders(context, providers, signal, trustedHostErrorKey, onTool
 function createToolHandle(context, providerName, safeToolName, signal, trustedHostErrorKey, onToolCall) {
 	return context.newFunction(safeToolName, (...args) => {
 		const deferred = context.newPromise();
-		const input = args[0] === void 0 ? void 0 : context.dump(args[0]);
 		const disposeDeferred = () => {
 			if (context.alive && deferred.alive) deferred.dispose();
 		};
+		let input;
+		try {
+			input = args[0] === void 0 ? void 0 : fromGuestHandle(context, args[0]);
+		} catch (error) {
+			const executeError = isExecuteFailure(error) ? error : new ExecuteFailure("serialization_error", "Guest code passed a non-serializable tool input");
+			const errorHandle = createGuestErrorHandle(context, executeError.code, executeError.message, trustedHostErrorKey);
+			try {
+				deferred.reject(errorHandle);
+				return deferred.handle;
+			} finally {
+				errorHandle.dispose();
+				queueMicrotask(disposeDeferred);
+			}
+		}
 		const onAbort = () => {
 			signal.removeEventListener("abort", onAbort);
 			if (!context.alive || !deferred.alive) {
@@ -5559,4 +5572,4 @@ Object.defineProperty(exports, 'runQuickJsSession', {
     return runQuickJsSession;
   }
 });
-//# sourceMappingURL=runner-CYXIVOmJ.cjs.map
+//# sourceMappingURL=runner-9_N9h2rp.cjs.map