@execbox/quickjs 0.1.2 → 0.2.1

package/README.md

@@ -5,6 +5,8 @@ QuickJS executor backend for `@execbox/core`.
 [![npm version](https://img.shields.io/npm/v/%40execbox%2Fquickjs?style=flat-square)](https://www.npmjs.com/package/@execbox/quickjs)
 [![License](https://img.shields.io/github/license/aallam/execbox?style=flat-square)](https://github.com/aallam/execbox/blob/main/LICENSE)
 
+Docs: https://execbox.aallam.com
+
 ## Choose QuickJS When
 
 - you want the easiest execbox backend to install
@@ -16,8 +18,8 @@ QuickJS executor backend for `@execbox/core`.
 - Each execution gets a fresh QuickJS runtime with no ambient Node globals injected by execbox.
 - Tool calls cross a JSON-only bridge, and executor timeouts propagate abort signals to in-flight provider work.
 - In the default deployment model, provider definitions are controlled by the host application, while hostile users control guest code and tool inputs.
-- This package is not presented as a hard security boundary for hostile code. It is best-effort in-process isolation.
-- If you need a stronger boundary, run execbox behind a separate process or container.
+- This package is designed for host-controlled deployments and does not by itself create a hard isolation boundary for hostile code.
+- If you need a stronger boundary, move execution into a separate process, container, or remote runtime.
 
 ## Architecture Docs
 
@@ -63,3 +65,5 @@ const result = await executor.execute("await codemode.echo({ ok: true })", [
 ```
 
 Each execution runs in a fresh QuickJS runtime with timeout handling, captured logs, and JSON-only result and tool boundaries.
+
+`QuickJsExecutor` intentionally stays ephemeral. Every `execute()` call creates a fresh QuickJS runtime/context, and the package does not expose a pooling API.

package/dist/index.cjs

@@ -1,14 +1,77 @@
-const require_runner = require('./runner-9_N9h2rp.cjs');
-let __execbox_core = require("@execbox/core");
+const require_runner = require('./runner-BqkDnP0t.cjs');
 
+//#region ../core/src/runner.ts
+function toTrustedExecuteError(error) {
+	if (require_runner.isExecuteFailure(error)) return {
+		code: error.code,
+		message: error.message
+	};
+	return {
+		code: "tool_error",
+		message: require_runner.normalizeThrownMessage(error)
+	};
+}
+/**
+* Converts resolved providers into manifest metadata that reveals only namespace details.
+*/
+function extractProviderManifests(providers) {
+	return providers.map((provider) => ({
+		name: provider.name,
+		tools: Object.fromEntries(Object.entries(provider.tools).map(([safeToolName, descriptor]) => [safeToolName, {
+			description: descriptor.description,
+			originalName: descriptor.originalName,
+			safeName: descriptor.safeName
+		}])),
+		types: provider.types
+	}));
+}
+/**
+* Creates a host-side dispatcher for runner-emitted tool calls.
+*/
+function createToolCallDispatcher(providers, signal) {
+	const providerMap = new Map(providers.map((provider) => [provider.name, provider]));
+	return async (call) => {
+		const provider = providerMap.get(call.providerName);
+		const descriptor = provider?.tools[call.safeToolName];
+		if (!provider || !descriptor) return {
+			error: {
+				code: "internal_error",
+				message: `Unknown tool ${call.providerName}.${call.safeToolName}`
+			},
+			ok: false
+		};
+		try {
+			if (signal.aborted) return {
+				error: {
+					code: "timeout",
+					message: require_runner.getExecutionTimeoutMessage()
+				},
+				ok: false
+			};
+			const result = await descriptor.execute(call.input, require_runner.createExecutionContext(signal, provider.name, descriptor.safeName, descriptor.originalName));
+			if (result !== void 0 && !require_runner.isJsonSerializable(result)) throw new require_runner.ExecuteFailure("serialization_error", "Host value is not JSON-serializable");
+			return {
+				ok: true,
+				result
+			};
+		} catch (error) {
+			return {
+				error: toTrustedExecuteError(error),
+				ok: false
+			};
+		}
+	};
+}
+
+//#endregion
 //#region src/quickjsExecutor.ts
 /**
-* QuickJS-backed executor for one-shot sandboxed JavaScript runs.
+* QuickJS-backed executor for ephemeral sandboxed JavaScript runs.
 */
 var QuickJsExecutor = class {
 	options;
 	/**
-	* Creates a QuickJS executor with one-shot runtime limits and host bridging configuration.
+	* Creates a QuickJS executor with ephemeral runtime limits and host bridging configuration.
 	*/
 	constructor(options = {}) {
 		this.options = options;
@@ -17,9 +80,9 @@ var QuickJsExecutor = class {
 	* Executes JavaScript against the provided tool namespaces in a fresh QuickJS runtime.
 	*/
 	async execute(code, providers, options = {}) {
-		if (options.signal?.aborted) return (0, __execbox_core.createTimeoutExecuteResult)();
+		if (options.signal?.aborted) return require_runner.createTimeoutExecuteResult();
 		const abortController = new AbortController();
-		const onToolCall = (0, __execbox_core.createToolCallDispatcher)(providers, abortController.signal);
+		const onToolCall = createToolCallDispatcher(providers, abortController.signal);
 		const onAbort = () => {
 			abortController.abort();
 		};
@@ -29,7 +92,7 @@ var QuickJsExecutor = class {
 				abortController,
 				code,
 				onToolCall,
-				providers: (0, __execbox_core.extractProviderManifests)(providers)
+				providers: extractProviderManifests(providers)
 			}, {
 				...this.options,
 				...options

package/dist/index.cjs.map

@@ -1 +1 @@
-{"version":3,"file":"index.cjs","names":["runQuickJsSession"],"sources":["../src/quickjsExecutor.ts"],"sourcesContent":["import {\n  createTimeoutExecuteResult,\n  createToolCallDispatcher,\n  extractProviderManifests,\n  type ExecutionOptions,\n  type ExecuteResult,\n  type Executor,\n  type ResolvedToolProvider,\n} from \"@execbox/core\";\n\nimport { runQuickJsSession } from \"./runner/index\";\nimport type { QuickJsExecutorOptions } from \"./types\";\n\n/**\n * QuickJS-backed executor for one-shot sandboxed JavaScript runs.\n */\nexport class QuickJsExecutor implements Executor {\n  private readonly options: QuickJsExecutorOptions;\n\n  /**\n   * Creates a QuickJS executor with one-shot runtime limits and host bridging configuration.\n   */\n  constructor(options: QuickJsExecutorOptions = {}) {\n    this.options = options;\n  }\n\n  /**\n   * Executes JavaScript against the provided tool namespaces in a fresh QuickJS runtime.\n   */\n  async execute(\n    code: string,\n    providers: ResolvedToolProvider[],\n    options: ExecutionOptions = {},\n  ): Promise<ExecuteResult> {\n    if (options.signal?.aborted) {\n      return createTimeoutExecuteResult();\n    }\n\n    const abortController = new AbortController();\n    const onToolCall = createToolCallDispatcher(\n      providers,\n      abortController.signal,\n    );\n    const onAbort = () => {\n      abortController.abort();\n    };\n\n    options.signal?.addEventListener(\"abort\", onAbort, { once: true });\n\n    try {\n      return await runQuickJsSession(\n        {\n          abortController,\n          code,\n          onToolCall,\n          providers: extractProviderManifests(providers),\n        },\n        {\n          ...this.options,\n          ...options,\n        },\n      );\n    } finally {\n      options.signal?.removeEventListener(\"abort\", onAbort);\n      abortController.abort();\n    }\n  }\n}\n"],"mappings":";;;;;;;AAgBA,IAAa,kBAAb,MAAiD;CAC/C,AAAiB;;;;CAKjB,YAAY,UAAkC,EAAE,EAAE;AAChD,OAAK,UAAU;;;;;CAMjB,MAAM,QACJ,MACA,WACA,UAA4B,EAAE,EACN;AACxB,MAAI,QAAQ,QAAQ,QAClB,wDAAmC;EAGrC,MAAM,kBAAkB,IAAI,iBAAiB;EAC7C,MAAM,0DACJ,WACA,gBAAgB,OACjB;EACD,MAAM,gBAAgB;AACpB,mBAAgB,OAAO;;AAGzB,UAAQ,QAAQ,iBAAiB,SAAS,SAAS,EAAE,MAAM,MAAM,CAAC;AAElE,MAAI;AACF,UAAO,MAAMA,iCACX;IACE;IACA;IACA;IACA,wDAAoC,UAAU;IAC/C,EACD;IACE,GAAG,KAAK;IACR,GAAG;IACJ,CACF;YACO;AACR,WAAQ,QAAQ,oBAAoB,SAAS,QAAQ;AACrD,mBAAgB,OAAO"}
+{"version":3,"file":"index.cjs","names":["isExecuteFailure","normalizeThrownMessage","getExecutionTimeoutMessage","createExecutionContext","isJsonSerializable","ExecuteFailure","createTimeoutExecuteResult","runQuickJsSession"],"sources":["../../core/src/runner.ts","../src/quickjsExecutor.ts"],"sourcesContent":["import {\n  createExecutionContext,\n  getExecutionTimeoutMessage,\n  normalizeThrownMessage,\n} from \"./executor/shared.ts\";\nimport {\n  ExecuteFailure,\n  isExecuteFailure,\n  isJsonSerializable,\n} from \"./errors.ts\";\nimport type { ExecuteError, ResolvedToolProvider } from \"./types.ts\";\n\n/**\n * Transport-safe metadata for one exposed tool.\n */\nexport interface ProviderToolManifest {\n  description?: string;\n  originalName: string;\n  safeName: string;\n}\n\n/**\n * Namespace manifest shared with runner implementations.\n */\nexport interface ProviderManifest {\n  name: string;\n  tools: Record<string, ProviderToolManifest>;\n  types: string;\n}\n\n/**\n * Execution limits forwarded to runner implementations.\n */\nexport interface ExecutorRuntimeOptions {\n  maxLogChars?: number;\n  maxLogLines?: number;\n  memoryLimitBytes?: number;\n  timeoutMs?: number;\n}\n\n/**\n * Public execution options accepted by executors per call.\n */\nexport interface ExecutionOptions extends ExecutorRuntimeOptions {\n  signal?: AbortSignal;\n}\n\n/**\n * Tool invocation request emitted from a runner.\n */\nexport interface ToolCall {\n  input: unknown;\n  providerName: string;\n  safeToolName: string;\n}\n\n/**\n * Trusted host response to a tool invocation request.\n */\nexport type ToolCallResult =\n  | {\n      ok: true;\n      result: unknown;\n    }\n  | {\n      error: ExecuteError;\n      ok: false;\n    };\n\nfunction toTrustedExecuteError(error: unknown): ExecuteError {\n  if (isExecuteFailure(error)) {\n    return {\n      code: error.code,\n      message: error.message,\n    };\n  }\n\n  return {\n    code: \"tool_error\",\n    message: normalizeThrownMessage(error),\n  };\n}\n\n/**\n * Converts resolved providers into manifest metadata that reveals only namespace details.\n */\nexport function extractProviderManifests(\n  providers: ResolvedToolProvider[],\n): ProviderManifest[] {\n  return providers.map((provider) => ({\n    name: provider.name,\n    tools: Object.fromEntries(\n      Object.entries(provider.tools).map(([safeToolName, descriptor]) => [\n        safeToolName,\n        {\n          description: descriptor.description,\n          originalName: descriptor.originalName,\n          safeName: descriptor.safeName,\n        },\n      ]),\n    ),\n    types: provider.types,\n  }));\n}\n\n/**\n * Creates a host-side dispatcher for runner-emitted tool calls.\n */\nexport function createToolCallDispatcher(\n  providers: ResolvedToolProvider[],\n  signal: AbortSignal,\n): (call: ToolCall) => Promise<ToolCallResult> {\n  const providerMap = new Map(\n    providers.map((provider) => [provider.name, provider] as const),\n  );\n\n  return async (call) => {\n    const provider = providerMap.get(call.providerName);\n    const descriptor = provider?.tools[call.safeToolName];\n\n    if (!provider || !descriptor) {\n      return {\n        error: {\n          code: \"internal_error\",\n          message: `Unknown tool ${call.providerName}.${call.safeToolName}`,\n        },\n        ok: false,\n      };\n    }\n\n    try {\n      if (signal.aborted) {\n        return {\n          error: {\n            code: \"timeout\",\n            message: getExecutionTimeoutMessage(),\n          },\n          ok: false,\n        };\n      }\n\n      const result = await descriptor.execute(\n        call.input,\n        createExecutionContext(\n          signal,\n          provider.name,\n          descriptor.safeName,\n          descriptor.originalName,\n        ),\n      );\n\n      if (result !== undefined && !isJsonSerializable(result)) {\n        throw new ExecuteFailure(\n          \"serialization_error\",\n          \"Host value is not JSON-serializable\",\n        );\n      }\n\n      return {\n        ok: true,\n        result,\n      };\n    } catch (error) {\n      return {\n        error: toTrustedExecuteError(error),\n        ok: false,\n      };\n    }\n  };\n}\n","import {\n  createTimeoutExecuteResult,\n  createToolCallDispatcher,\n  extractProviderManifests,\n} from \"../../core/src/runtime.ts\";\nimport type {\n  ExecutionOptions,\n  ExecuteResult,\n  Executor,\n  ResolvedToolProvider,\n} from \"@execbox/core\";\n\nimport { runQuickJsSession } from \"./runner/index.ts\";\nimport type { QuickJsExecutorOptions } from \"./types\";\n\n/**\n * QuickJS-backed executor for ephemeral sandboxed JavaScript runs.\n */\nexport class QuickJsExecutor implements Executor {\n  private readonly options: QuickJsExecutorOptions;\n\n  /**\n   * Creates a QuickJS executor with ephemeral runtime limits and host bridging configuration.\n   */\n  constructor(options: QuickJsExecutorOptions = {}) {\n    this.options = options;\n  }\n\n  /**\n   * Executes JavaScript against the provided tool namespaces in a fresh QuickJS runtime.\n   */\n  async execute(\n    code: string,\n    providers: ResolvedToolProvider[],\n    options: ExecutionOptions = {},\n  ): Promise<ExecuteResult> {\n    if (options.signal?.aborted) {\n      return createTimeoutExecuteResult();\n    }\n\n    const abortController = new AbortController();\n    const onToolCall = createToolCallDispatcher(\n      providers,\n      abortController.signal,\n    );\n    const onAbort = () => {\n      abortController.abort();\n    };\n\n    options.signal?.addEventListener(\"abort\", onAbort, { once: true });\n\n    try {\n      return await runQuickJsSession(\n        {\n          abortController,\n          code,\n          onToolCall,\n          providers: extractProviderManifests(providers),\n        },\n        {\n          ...this.options,\n          ...options,\n        },\n      );\n    } finally {\n      options.signal?.removeEventListener(\"abort\", onAbort);\n      abortController.abort();\n    }\n  }\n}\n"],"mappings":";;;AAqEA,SAAS,sBAAsB,OAA8B;AAC3D,KAAIA,gCAAiB,MAAM,CACzB,QAAO;EACL,MAAM,MAAM;EACZ,SAAS,MAAM;EAChB;AAGH,QAAO;EACL,MAAM;EACN,SAASC,sCAAuB,MAAM;EACvC;;;;;AAMH,SAAgB,yBACd,WACoB;AACpB,QAAO,UAAU,KAAK,cAAc;EAClC,MAAM,SAAS;EACf,OAAO,OAAO,YACZ,OAAO,QAAQ,SAAS,MAAM,CAAC,KAAK,CAAC,cAAc,gBAAgB,CACjE,cACA;GACE,aAAa,WAAW;GACxB,cAAc,WAAW;GACzB,UAAU,WAAW;GACtB,CACF,CAAC,CACH;EACD,OAAO,SAAS;EACjB,EAAE;;;;;AAML,SAAgB,yBACd,WACA,QAC6C;CAC7C,MAAM,cAAc,IAAI,IACtB,UAAU,KAAK,aAAa,CAAC,SAAS,MAAM,SAAS,CAAU,CAChE;AAED,QAAO,OAAO,SAAS;EACrB,MAAM,WAAW,YAAY,IAAI,KAAK,aAAa;EACnD,MAAM,aAAa,UAAU,MAAM,KAAK;AAExC,MAAI,CAAC,YAAY,CAAC,WAChB,QAAO;GACL,OAAO;IACL,MAAM;IACN,SAAS,gBAAgB,KAAK,aAAa,GAAG,KAAK;IACpD;GACD,IAAI;GACL;AAGH,MAAI;AACF,OAAI,OAAO,QACT,QAAO;IACL,OAAO;KACL,MAAM;KACN,SAASC,2CAA4B;KACtC;IACD,IAAI;IACL;GAGH,MAAM,SAAS,MAAM,WAAW,QAC9B,KAAK,OACLC,sCACE,QACA,SAAS,MACT,WAAW,UACX,WAAW,aACZ,CACF;AAED,OAAI,WAAW,UAAa,CAACC,kCAAmB,OAAO,CACrD,OAAM,IAAIC,8BACR,uBACA,sCACD;AAGH,UAAO;IACL,IAAI;IACJ;IACD;WACM,OAAO;AACd,UAAO;IACL,OAAO,sBAAsB,MAAM;IACnC,IAAI;IACL;;;;;;;;;;ACpJP,IAAa,kBAAb,MAAiD;CAC/C,AAAiB;;;;CAKjB,YAAY,UAAkC,EAAE,EAAE;AAChD,OAAK,UAAU;;;;;CAMjB,MAAM,QACJ,MACA,WACA,UAA4B,EAAE,EACN;AACxB,MAAI,QAAQ,QAAQ,QAClB,QAAOC,2CAA4B;EAGrC,MAAM,kBAAkB,IAAI,iBAAiB;EAC7C,MAAM,aAAa,yBACjB,WACA,gBAAgB,OACjB;EACD,MAAM,gBAAgB;AACpB,mBAAgB,OAAO;;AAGzB,UAAQ,QAAQ,iBAAiB,SAAS,SAAS,EAAE,MAAM,MAAM,CAAC;AAElE,MAAI;AACF,UAAO,MAAMC,iCACX;IACE;IACA;IACA;IACA,WAAW,yBAAyB,UAAU;IAC/C,EACD;IACE,GAAG,KAAK;IACR,GAAG;IACJ,CACF;YACO;AACR,WAAQ,QAAQ,oBAAoB,SAAS,QAAQ;AACrD,mBAAgB,OAAO"}

package/dist/index.d.cts

@@ -1,15 +1,19 @@
-import { t as QuickJsExecutorOptions } from "./types-BB8mb_-T.cjs";
+/**
+ * @packageDocumentation
+ * Public TypeScript declarations for this package entrypoint.
+ */
+import { t as QuickJsExecutorOptions } from "./types-CVE2n2LY.cjs";
 import { ExecuteResult, ExecutionOptions, Executor, ResolvedToolProvider } from "@execbox/core";
 
 //#region src/quickjsExecutor.d.ts
 
 /**
- * QuickJS-backed executor for one-shot sandboxed JavaScript runs.
+ * QuickJS-backed executor for ephemeral sandboxed JavaScript runs.
  */
 declare class QuickJsExecutor implements Executor {
   private readonly options;
   /**
-   * Creates a QuickJS executor with one-shot runtime limits and host bridging configuration.
+   * Creates a QuickJS executor with ephemeral runtime limits and host bridging configuration.
    */
   constructor(options?: QuickJsExecutorOptions);
   /**

package/dist/index.d.cts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.cts","names":[],"sources":["../src/quickjsExecutor.ts"],"sourcesContent":[],"mappings":";;;;;;;AAgBA;AAMuB,cANV,eAAA,YAA2B,QAMjB,CAAA;EASR,iBAAA,OAAA;EACF;;;EAhB2B,WAAA,CAAA,OAAA,CAAA,EAMjB,sBANiB;EAAQ;;;mCAejC,kCACF,mBACR,QAAQ"}
+{"version":3,"file":"index.d.cts","names":[],"sources":["../src/quickjsExecutor.ts"],"sourcesContent":[],"mappings":";;;;;;;;;;;AAkBA,CAAA,CAAA;AAMuB,OAAA,CAAA,KAAA,CANV,eAAA,CAAA,UAAA,CAA2B,QAMjB,CAAA;EASR,OAAA,CAAA,QAAA,CAAA,OAAA;EACF,CAAA,CAAA;;;EAhB2B,WAAA,CAAA,OAAA,CAAA,CAAA,CAMjB,sBANiB,CAAA;EAAQ,CAAA,CAAA;;;mCAejC,kCACF,mBACR,QAAQ"}

package/dist/index.d.ts

@@ -1,15 +1,19 @@
-import { t as QuickJsExecutorOptions } from "./types-D7uau0GM.js";
+/**
+ * @packageDocumentation
+ * Public TypeScript declarations for this package entrypoint.
+ */
+import { t as QuickJsExecutorOptions } from "./types-BXi8Lqtk.js";
 import { ExecuteResult, ExecutionOptions, Executor, ResolvedToolProvider } from "@execbox/core";
 
 //#region src/quickjsExecutor.d.ts
 
 /**
- * QuickJS-backed executor for one-shot sandboxed JavaScript runs.
+ * QuickJS-backed executor for ephemeral sandboxed JavaScript runs.
  */
 declare class QuickJsExecutor implements Executor {
   private readonly options;
   /**
-   * Creates a QuickJS executor with one-shot runtime limits and host bridging configuration.
+   * Creates a QuickJS executor with ephemeral runtime limits and host bridging configuration.
    */
   constructor(options?: QuickJsExecutorOptions);
   /**

package/dist/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","names":[],"sources":["../src/quickjsExecutor.ts"],"sourcesContent":[],"mappings":";;;;;;;AAgBA;AAMuB,cANV,eAAA,YAA2B,QAMjB,CAAA;EASR,iBAAA,OAAA;EACF;;;EAhB2B,WAAA,CAAA,OAAA,CAAA,EAMjB,sBANiB;EAAQ;;;mCAejC,kCACF,mBACR,QAAQ"}
+{"version":3,"file":"index.d.ts","names":[],"sources":["../src/quickjsExecutor.ts"],"sourcesContent":[],"mappings":";;;;;;;;;;;AAkBA,CAAA,CAAA;AAMuB,OAAA,CAAA,KAAA,CANV,eAAA,CAAA,UAAA,CAA2B,QAMjB,CAAA;EASR,OAAA,CAAA,QAAA,CAAA,OAAA;EACF,CAAA,CAAA;;;EAhB2B,WAAA,CAAA,OAAA,CAAA,CAAA,CAMjB,sBANiB,CAAA;EAAQ,CAAA,CAAA;;;mCAejC,kCACF,mBACR,QAAQ"}

package/dist/index.js

@@ -1,14 +1,77 @@
-import { t as runQuickJsSession } from "./runner-O4f_FOhI.js";
-import { createTimeoutExecuteResult, createToolCallDispatcher, extractProviderManifests } from "@execbox/core";
+import { a as createExecutionContext, c as normalizeThrownMessage, i as isJsonSerializable, n as ExecuteFailure, o as createTimeoutExecuteResult, r as isExecuteFailure, s as getExecutionTimeoutMessage, t as runQuickJsSession } from "./runner-CVaY4RVQ.js";
 
+//#region ../core/src/runner.ts
+function toTrustedExecuteError(error) {
+	if (isExecuteFailure(error)) return {
+		code: error.code,
+		message: error.message
+	};
+	return {
+		code: "tool_error",
+		message: normalizeThrownMessage(error)
+	};
+}
+/**
+* Converts resolved providers into manifest metadata that reveals only namespace details.
+*/
+function extractProviderManifests(providers) {
+	return providers.map((provider) => ({
+		name: provider.name,
+		tools: Object.fromEntries(Object.entries(provider.tools).map(([safeToolName, descriptor]) => [safeToolName, {
+			description: descriptor.description,
+			originalName: descriptor.originalName,
+			safeName: descriptor.safeName
+		}])),
+		types: provider.types
+	}));
+}
+/**
+* Creates a host-side dispatcher for runner-emitted tool calls.
+*/
+function createToolCallDispatcher(providers, signal) {
+	const providerMap = new Map(providers.map((provider) => [provider.name, provider]));
+	return async (call) => {
+		const provider = providerMap.get(call.providerName);
+		const descriptor = provider?.tools[call.safeToolName];
+		if (!provider || !descriptor) return {
+			error: {
+				code: "internal_error",
+				message: `Unknown tool ${call.providerName}.${call.safeToolName}`
+			},
+			ok: false
+		};
+		try {
+			if (signal.aborted) return {
+				error: {
+					code: "timeout",
+					message: getExecutionTimeoutMessage()
+				},
+				ok: false
+			};
+			const result = await descriptor.execute(call.input, createExecutionContext(signal, provider.name, descriptor.safeName, descriptor.originalName));
+			if (result !== void 0 && !isJsonSerializable(result)) throw new ExecuteFailure("serialization_error", "Host value is not JSON-serializable");
+			return {
+				ok: true,
+				result
+			};
+		} catch (error) {
+			return {
+				error: toTrustedExecuteError(error),
+				ok: false
+			};
+		}
+	};
+}
+
+//#endregion
 //#region src/quickjsExecutor.ts
 /**
-* QuickJS-backed executor for one-shot sandboxed JavaScript runs.
+* QuickJS-backed executor for ephemeral sandboxed JavaScript runs.
 */
 var QuickJsExecutor = class {
 	options;
 	/**
-	* Creates a QuickJS executor with one-shot runtime limits and host bridging configuration.
+	* Creates a QuickJS executor with ephemeral runtime limits and host bridging configuration.
 	*/
 	constructor(options = {}) {
 		this.options = options;

package/dist/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","names":[],"sources":["../src/quickjsExecutor.ts"],"sourcesContent":["import {\n  createTimeoutExecuteResult,\n  createToolCallDispatcher,\n  extractProviderManifests,\n  type ExecutionOptions,\n  type ExecuteResult,\n  type Executor,\n  type ResolvedToolProvider,\n} from \"@execbox/core\";\n\nimport { runQuickJsSession } from \"./runner/index\";\nimport type { QuickJsExecutorOptions } from \"./types\";\n\n/**\n * QuickJS-backed executor for one-shot sandboxed JavaScript runs.\n */\nexport class QuickJsExecutor implements Executor {\n  private readonly options: QuickJsExecutorOptions;\n\n  /**\n   * Creates a QuickJS executor with one-shot runtime limits and host bridging configuration.\n   */\n  constructor(options: QuickJsExecutorOptions = {}) {\n    this.options = options;\n  }\n\n  /**\n   * Executes JavaScript against the provided tool namespaces in a fresh QuickJS runtime.\n   */\n  async execute(\n    code: string,\n    providers: ResolvedToolProvider[],\n    options: ExecutionOptions = {},\n  ): Promise<ExecuteResult> {\n    if (options.signal?.aborted) {\n      return createTimeoutExecuteResult();\n    }\n\n    const abortController = new AbortController();\n    const onToolCall = createToolCallDispatcher(\n      providers,\n      abortController.signal,\n    );\n    const onAbort = () => {\n      abortController.abort();\n    };\n\n    options.signal?.addEventListener(\"abort\", onAbort, { once: true });\n\n    try {\n      return await runQuickJsSession(\n        {\n          abortController,\n          code,\n          onToolCall,\n          providers: extractProviderManifests(providers),\n        },\n        {\n          ...this.options,\n          ...options,\n        },\n      );\n    } finally {\n      options.signal?.removeEventListener(\"abort\", onAbort);\n      abortController.abort();\n    }\n  }\n}\n"],"mappings":";;;;;;;AAgBA,IAAa,kBAAb,MAAiD;CAC/C,AAAiB;;;;CAKjB,YAAY,UAAkC,EAAE,EAAE;AAChD,OAAK,UAAU;;;;;CAMjB,MAAM,QACJ,MACA,WACA,UAA4B,EAAE,EACN;AACxB,MAAI,QAAQ,QAAQ,QAClB,QAAO,4BAA4B;EAGrC,MAAM,kBAAkB,IAAI,iBAAiB;EAC7C,MAAM,aAAa,yBACjB,WACA,gBAAgB,OACjB;EACD,MAAM,gBAAgB;AACpB,mBAAgB,OAAO;;AAGzB,UAAQ,QAAQ,iBAAiB,SAAS,SAAS,EAAE,MAAM,MAAM,CAAC;AAElE,MAAI;AACF,UAAO,MAAM,kBACX;IACE;IACA;IACA;IACA,WAAW,yBAAyB,UAAU;IAC/C,EACD;IACE,GAAG,KAAK;IACR,GAAG;IACJ,CACF;YACO;AACR,WAAQ,QAAQ,oBAAoB,SAAS,QAAQ;AACrD,mBAAgB,OAAO"}
+{"version":3,"file":"index.js","names":[],"sources":["../../core/src/runner.ts","../src/quickjsExecutor.ts"],"sourcesContent":["import {\n  createExecutionContext,\n  getExecutionTimeoutMessage,\n  normalizeThrownMessage,\n} from \"./executor/shared.ts\";\nimport {\n  ExecuteFailure,\n  isExecuteFailure,\n  isJsonSerializable,\n} from \"./errors.ts\";\nimport type { ExecuteError, ResolvedToolProvider } from \"./types.ts\";\n\n/**\n * Transport-safe metadata for one exposed tool.\n */\nexport interface ProviderToolManifest {\n  description?: string;\n  originalName: string;\n  safeName: string;\n}\n\n/**\n * Namespace manifest shared with runner implementations.\n */\nexport interface ProviderManifest {\n  name: string;\n  tools: Record<string, ProviderToolManifest>;\n  types: string;\n}\n\n/**\n * Execution limits forwarded to runner implementations.\n */\nexport interface ExecutorRuntimeOptions {\n  maxLogChars?: number;\n  maxLogLines?: number;\n  memoryLimitBytes?: number;\n  timeoutMs?: number;\n}\n\n/**\n * Public execution options accepted by executors per call.\n */\nexport interface ExecutionOptions extends ExecutorRuntimeOptions {\n  signal?: AbortSignal;\n}\n\n/**\n * Tool invocation request emitted from a runner.\n */\nexport interface ToolCall {\n  input: unknown;\n  providerName: string;\n  safeToolName: string;\n}\n\n/**\n * Trusted host response to a tool invocation request.\n */\nexport type ToolCallResult =\n  | {\n      ok: true;\n      result: unknown;\n    }\n  | {\n      error: ExecuteError;\n      ok: false;\n    };\n\nfunction toTrustedExecuteError(error: unknown): ExecuteError {\n  if (isExecuteFailure(error)) {\n    return {\n      code: error.code,\n      message: error.message,\n    };\n  }\n\n  return {\n    code: \"tool_error\",\n    message: normalizeThrownMessage(error),\n  };\n}\n\n/**\n * Converts resolved providers into manifest metadata that reveals only namespace details.\n */\nexport function extractProviderManifests(\n  providers: ResolvedToolProvider[],\n): ProviderManifest[] {\n  return providers.map((provider) => ({\n    name: provider.name,\n    tools: Object.fromEntries(\n      Object.entries(provider.tools).map(([safeToolName, descriptor]) => [\n        safeToolName,\n        {\n          description: descriptor.description,\n          originalName: descriptor.originalName,\n          safeName: descriptor.safeName,\n        },\n      ]),\n    ),\n    types: provider.types,\n  }));\n}\n\n/**\n * Creates a host-side dispatcher for runner-emitted tool calls.\n */\nexport function createToolCallDispatcher(\n  providers: ResolvedToolProvider[],\n  signal: AbortSignal,\n): (call: ToolCall) => Promise<ToolCallResult> {\n  const providerMap = new Map(\n    providers.map((provider) => [provider.name, provider] as const),\n  );\n\n  return async (call) => {\n    const provider = providerMap.get(call.providerName);\n    const descriptor = provider?.tools[call.safeToolName];\n\n    if (!provider || !descriptor) {\n      return {\n        error: {\n          code: \"internal_error\",\n          message: `Unknown tool ${call.providerName}.${call.safeToolName}`,\n        },\n        ok: false,\n      };\n    }\n\n    try {\n      if (signal.aborted) {\n        return {\n          error: {\n            code: \"timeout\",\n            message: getExecutionTimeoutMessage(),\n          },\n          ok: false,\n        };\n      }\n\n      const result = await descriptor.execute(\n        call.input,\n        createExecutionContext(\n          signal,\n          provider.name,\n          descriptor.safeName,\n          descriptor.originalName,\n        ),\n      );\n\n      if (result !== undefined && !isJsonSerializable(result)) {\n        throw new ExecuteFailure(\n          \"serialization_error\",\n          \"Host value is not JSON-serializable\",\n        );\n      }\n\n      return {\n        ok: true,\n        result,\n      };\n    } catch (error) {\n      return {\n        error: toTrustedExecuteError(error),\n        ok: false,\n      };\n    }\n  };\n}\n","import {\n  createTimeoutExecuteResult,\n  createToolCallDispatcher,\n  extractProviderManifests,\n} from \"../../core/src/runtime.ts\";\nimport type {\n  ExecutionOptions,\n  ExecuteResult,\n  Executor,\n  ResolvedToolProvider,\n} from \"@execbox/core\";\n\nimport { runQuickJsSession } from \"./runner/index.ts\";\nimport type { QuickJsExecutorOptions } from \"./types\";\n\n/**\n * QuickJS-backed executor for ephemeral sandboxed JavaScript runs.\n */\nexport class QuickJsExecutor implements Executor {\n  private readonly options: QuickJsExecutorOptions;\n\n  /**\n   * Creates a QuickJS executor with ephemeral runtime limits and host bridging configuration.\n   */\n  constructor(options: QuickJsExecutorOptions = {}) {\n    this.options = options;\n  }\n\n  /**\n   * Executes JavaScript against the provided tool namespaces in a fresh QuickJS runtime.\n   */\n  async execute(\n    code: string,\n    providers: ResolvedToolProvider[],\n    options: ExecutionOptions = {},\n  ): Promise<ExecuteResult> {\n    if (options.signal?.aborted) {\n      return createTimeoutExecuteResult();\n    }\n\n    const abortController = new AbortController();\n    const onToolCall = createToolCallDispatcher(\n      providers,\n      abortController.signal,\n    );\n    const onAbort = () => {\n      abortController.abort();\n    };\n\n    options.signal?.addEventListener(\"abort\", onAbort, { once: true });\n\n    try {\n      return await runQuickJsSession(\n        {\n          abortController,\n          code,\n          onToolCall,\n          providers: extractProviderManifests(providers),\n        },\n        {\n          ...this.options,\n          ...options,\n        },\n      );\n    } finally {\n      options.signal?.removeEventListener(\"abort\", onAbort);\n      abortController.abort();\n    }\n  }\n}\n"],"mappings":";;;AAqEA,SAAS,sBAAsB,OAA8B;AAC3D,KAAI,iBAAiB,MAAM,CACzB,QAAO;EACL,MAAM,MAAM;EACZ,SAAS,MAAM;EAChB;AAGH,QAAO;EACL,MAAM;EACN,SAAS,uBAAuB,MAAM;EACvC;;;;;AAMH,SAAgB,yBACd,WACoB;AACpB,QAAO,UAAU,KAAK,cAAc;EAClC,MAAM,SAAS;EACf,OAAO,OAAO,YACZ,OAAO,QAAQ,SAAS,MAAM,CAAC,KAAK,CAAC,cAAc,gBAAgB,CACjE,cACA;GACE,aAAa,WAAW;GACxB,cAAc,WAAW;GACzB,UAAU,WAAW;GACtB,CACF,CAAC,CACH;EACD,OAAO,SAAS;EACjB,EAAE;;;;;AAML,SAAgB,yBACd,WACA,QAC6C;CAC7C,MAAM,cAAc,IAAI,IACtB,UAAU,KAAK,aAAa,CAAC,SAAS,MAAM,SAAS,CAAU,CAChE;AAED,QAAO,OAAO,SAAS;EACrB,MAAM,WAAW,YAAY,IAAI,KAAK,aAAa;EACnD,MAAM,aAAa,UAAU,MAAM,KAAK;AAExC,MAAI,CAAC,YAAY,CAAC,WAChB,QAAO;GACL,OAAO;IACL,MAAM;IACN,SAAS,gBAAgB,KAAK,aAAa,GAAG,KAAK;IACpD;GACD,IAAI;GACL;AAGH,MAAI;AACF,OAAI,OAAO,QACT,QAAO;IACL,OAAO;KACL,MAAM;KACN,SAAS,4BAA4B;KACtC;IACD,IAAI;IACL;GAGH,MAAM,SAAS,MAAM,WAAW,QAC9B,KAAK,OACL,uBACE,QACA,SAAS,MACT,WAAW,UACX,WAAW,aACZ,CACF;AAED,OAAI,WAAW,UAAa,CAAC,mBAAmB,OAAO,CACrD,OAAM,IAAI,eACR,uBACA,sCACD;AAGH,UAAO;IACL,IAAI;IACJ;IACD;WACM,OAAO;AACd,UAAO;IACL,OAAO,sBAAsB,MAAM;IACnC,IAAI;IACL;;;;;;;;;;ACpJP,IAAa,kBAAb,MAAiD;CAC/C,AAAiB;;;;CAKjB,YAAY,UAAkC,EAAE,EAAE;AAChD,OAAK,UAAU;;;;;CAMjB,MAAM,QACJ,MACA,WACA,UAA4B,EAAE,EACN;AACxB,MAAI,QAAQ,QAAQ,QAClB,QAAO,4BAA4B;EAGrC,MAAM,kBAAkB,IAAI,iBAAiB;EAC7C,MAAM,aAAa,yBACjB,WACA,gBAAgB,OACjB;EACD,MAAM,gBAAgB;AACpB,mBAAgB,OAAO;;AAGzB,UAAQ,QAAQ,iBAAiB,SAAS,SAAS,EAAE,MAAM,MAAM,CAAC;AAElE,MAAI;AACF,UAAO,MAAM,kBACX;IACE;IACA;IACA;IACA,WAAW,yBAAyB,UAAU;IAC/C,EACD;IACE,GAAG,KAAK;IACR,GAAG;IACJ,CACF;YACO;AACR,WAAQ,QAAQ,oBAAoB,SAAS,QAAQ;AACrD,mBAAgB,OAAO"}

package/dist/runner/index.cjs

@@ -1,3 +1,3 @@
-const require_runner = require('../runner-9_N9h2rp.cjs');
+const require_runner = require('../runner-BqkDnP0t.cjs');
 
 exports.runQuickJsSession = require_runner.runQuickJsSession;

package/dist/runner/index.d.cts

@@ -1,81 +1,13 @@
-import { t as QuickJsExecutorOptions } from "../types-BB8mb_-T.cjs";
-
-//#region ../core/src/types.d.ts
-
-/**
- * Stable error codes returned by executors and wrapped tool calls.
- */
-type ExecuteErrorCode = "timeout" | "memory_limit" | "validation_error" | "tool_error" | "runtime_error" | "serialization_error" | "internal_error";
-/**
- * Structured execution failure returned in {@link ExecuteResult}.
- */
-interface ExecuteError {
-  /** Machine-readable error category. */
-  code: ExecuteErrorCode;
-  /** Human-readable failure message. */
-  message: string;
-}
-/**
- * Structured result returned by every executor invocation.
- */
-type ExecuteResult<T = unknown> = {
-  durationMs: number;
-  logs: string[];
-  ok: true;
-  result: T;
-} | {
-  durationMs: number;
-  error: ExecuteError;
-  logs: string[];
-  ok: false;
-};
-//#endregion
-//#region ../core/src/runner.d.ts
-/**
- * Transport-safe metadata for one exposed tool.
- */
-interface ProviderToolManifest {
-  description?: string;
-  originalName: string;
-  safeName: string;
-}
 /**
- * Namespace manifest shared with runner implementations.
+ * @packageDocumentation
+ * Public TypeScript declarations for this package entrypoint.
  */
-interface ProviderManifest {
-  name: string;
-  tools: Record<string, ProviderToolManifest>;
-  types: string;
-}
-/**
- * Execution limits forwarded to runner implementations.
- */
-interface ExecutorRuntimeOptions {
-  maxLogChars?: number;
-  maxLogLines?: number;
-  memoryLimitBytes?: number;
-  timeoutMs?: number;
-}
-/**
- * Tool invocation request emitted from a runner.
- */
-interface ToolCall {
-  input: unknown;
-  providerName: string;
-  safeToolName: string;
-}
-/**
- * Trusted host response to a tool invocation request.
- */
-type ToolCallResult = {
-  ok: true;
-  result: unknown;
-} | {
-  error: ExecuteError;
-  ok: false;
-};
-//#endregion
+import { t as QuickJsExecutorOptions } from "../types-CVE2n2LY.cjs";
+import { ExecuteResult, ExecutorRuntimeOptions, ProviderManifest, ToolCall, ToolCallResult } from "@execbox/core";
+import { QuickJSWASMModule } from "quickjs-emscripten";
+
 //#region src/runner/index.d.ts
+
 /**
  * Transport-neutral host tool call emitted from a QuickJS session.
  */
@@ -94,11 +26,13 @@ interface QuickJsSessionRequest {
 /**
  * Options controlling one transport-backed QuickJS session.
  */
-type QuickJsSessionOptions = QuickJsExecutorOptions & ExecutorRuntimeOptions;
+type QuickJsSessionOptions = QuickJsExecutorOptions & ExecutorRuntimeOptions & {
+  module?: QuickJSWASMModule;
+};
 /**
  * Runs one QuickJS-backed execution session using a transport-neutral tool callback.
  */
 declare function runQuickJsSession(request: QuickJsSessionRequest, options?: QuickJsSessionOptions): Promise<ExecuteResult>;
 //#endregion
-export { QuickJsSessionOptions, QuickJsSessionRequest, QuickJsSessionToolCall, runQuickJsSession };
+export { type QuickJsExecutorOptions, QuickJsSessionOptions, QuickJsSessionRequest, QuickJsSessionToolCall, runQuickJsSession };
 //# sourceMappingURL=index.d.cts.map

package/dist/runner/index.d.cts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.cts","names":[],"sources":["../../../core/src/types.ts","../../../core/src/runner.ts","../../src/runner/index.ts"],"sourcesContent":[],"mappings":";;;;ACeA;AASA;AASA;AAiBiB,KDnCL,gBAAA,GCmCa,SAAA,GAAA,cAAA,GAAA,kBAAA,GAAA,YAAA,GAAA,eAAA,GAAA,qBAAA,GAAA,gBAAA;AASzB;;;UDhCiB,YAAA;EEuBL;EAKK,IAAA,EF1BT,gBE0BS;EACG;EAEC,OAAA,EAAA,MAAA;;;;;AAGV,KFxBC,aEwBD,CAAA,IAAA,OAAA,CAAA,GAAA;EAAW,UAAA,EAAA,MAAA;EAMV,IAAA,EAAA,MAAA,EAAA;EA4TU,EAAA,EAAA,IAAA;EACX,MAAA,EFtVG,CEsVH;CACA,GAAA;EACA,UAAA,EAAA,MAAA;EAAR,KAAA,EFpVU,YEoVV;EAAO,IAAA,EAAA,MAAA,EAAA;;;;;;;AFnXV;AAYiB,UCZA,oBAAA,CDcT;EAQI,WAAA,CAAA,EAAA,MAAa;;;;ACtBzB;AASA;AASA;AAiBiB,UA1BA,gBAAA,CA0BQ;EASb,IAAA,EAAA,MAAA;SAjCH,eAAe;;;ACwBxB;AAKA;;AAGqB,UDzBJ,sBAAA,CCyBI;EAAqB,WAAA,CAAA,EAAA,MAAA;EAAR,WAAA,CAAA,EAAA,MAAA;EAA0B,gBAAA,CAAA,EAAA,MAAA;EAE/C,SAAA,CAAA,EAAA,MAAA;;;;;UDVI,QAAA;;;;;;;;KASL,cAAA;;;;SAMC;;;;;;ADlDb;AAYA;AAUY,KEaA,sBAAA,GAAyB,QFJxB;;;;AC/BI,UCwCA,qBAAA,CDxCoB;EASpB,eAAA,CAAA,ECgCG,eD9BI;EAOP,IAAA,EAAA,MAAA;EAiBA,UAAA,EAAQ,CAAA,IAAA,ECQJ,QDRI,EAAA,GCQS,ODRT,CCQiB,cDRjB,CAAA,GCQmC,cDRnC;EASb,SAAA,CAAA,EAAA,GAAA,GAAc,IAAA;aCCb;WACF;;AAXX;AAKA;;AAGqB,KAST,qBAAA,GAAwB,sBATf,GAUnB,sBAVmB;;;;AAER,iBAmUS,iBAAA,CAnUT,OAAA,EAoUF,qBApUE,EAAA,OAAA,CAAA,EAqUF,qBArUE,CAAA,EAsUV,OAtUU,CAsUF,aAtUE,CAAA"}
+{"version":3,"file":"index.d.cts","names":[],"sources":["../../src/runner/index.ts"],"sourcesContent":[],"mappings":";;;;;;;;;;;AA0DA,CAAA,CAAA,CAAA,SAAA,CAAA,OAAA,CAAA,IAAA,CAAA,IAAA,CAAA,IAAA,CAAA,OAAA,CAAA,IAAA,CAAA,CAAA,CAAA,OAAA,CAAA,OAAA;AAKA,CAAA,CAAA;AACoB,IAAA,CANR,sBAAA,CAAA,CAAA,CAAyB,QAMjB;;;;AAEwC,SAAA,CAH3C,qBAAA,CAG2C;EAE/C,eAAA,CAAA,CAAA,CAJO,eAIP;EACF,IAAA,CAAA,CAAA,MAAA;EAAW,UAAA,CAAA,CAAA,CAAA,IAAA,CAAA,CAHD,QAGC,CAAA,CAAA,CAAA,CAAA,CAHY,OAGZ,CAHoB,cAGpB,CAAA,CAAA,CAAA,CAHsC,cAGtC;EAMV,SAAA,CAAA,CAAA,CAAA,CAAA,CAAA,CAAA,CAAA,CAAA,CAAA,IAAA;EAAwB,SAAA,CAAA,CAPvB,gBAOuB,CAAA,CAAA;EAClC,MAAA,CAAA,CAAA,CAPS,WAOT;;;AA6TF,CAAA,CAAA,CAAA,OAAA,CAAA,WAAA,CAAA,GAAA,CAAA,SAAA,CAAA,MAAA,CAAA,OAAA,CAAA,OAAA;;AAEW,IAAA,CAhUC,qBAAA,CAAA,CAAA,CAAwB,sBAgUzB,CAAA,CAAA,CA/TT,sBA+TS,CAAA,CAAA,CAAA;EACA,MAAA,CAAA,CAAA,CA/TE,iBA+TF;CAAR;;;;iBAHmB,iBAAA,UACX,iCACA,wBACR,QAAQ"}

package/dist/runner/index.d.ts

@@ -1,81 +1,13 @@
-import { t as QuickJsExecutorOptions } from "../types-D7uau0GM.js";
-
-//#region ../core/src/types.d.ts
-
-/**
- * Stable error codes returned by executors and wrapped tool calls.
- */
-type ExecuteErrorCode = "timeout" | "memory_limit" | "validation_error" | "tool_error" | "runtime_error" | "serialization_error" | "internal_error";
-/**
- * Structured execution failure returned in {@link ExecuteResult}.
- */
-interface ExecuteError {
-  /** Machine-readable error category. */
-  code: ExecuteErrorCode;
-  /** Human-readable failure message. */
-  message: string;
-}
-/**
- * Structured result returned by every executor invocation.
- */
-type ExecuteResult<T = unknown> = {
-  durationMs: number;
-  logs: string[];
-  ok: true;
-  result: T;
-} | {
-  durationMs: number;
-  error: ExecuteError;
-  logs: string[];
-  ok: false;
-};
-//#endregion
-//#region ../core/src/runner.d.ts
-/**
- * Transport-safe metadata for one exposed tool.
- */
-interface ProviderToolManifest {
-  description?: string;
-  originalName: string;
-  safeName: string;
-}
 /**
- * Namespace manifest shared with runner implementations.
+ * @packageDocumentation
+ * Public TypeScript declarations for this package entrypoint.
  */
-interface ProviderManifest {
-  name: string;
-  tools: Record<string, ProviderToolManifest>;
-  types: string;
-}
-/**
- * Execution limits forwarded to runner implementations.
- */
-interface ExecutorRuntimeOptions {
-  maxLogChars?: number;
-  maxLogLines?: number;
-  memoryLimitBytes?: number;
-  timeoutMs?: number;
-}
-/**
- * Tool invocation request emitted from a runner.
- */
-interface ToolCall {
-  input: unknown;
-  providerName: string;
-  safeToolName: string;
-}
-/**
- * Trusted host response to a tool invocation request.
- */
-type ToolCallResult = {
-  ok: true;
-  result: unknown;
-} | {
-  error: ExecuteError;
-  ok: false;
-};
-//#endregion
+import { t as QuickJsExecutorOptions } from "../types-BXi8Lqtk.js";
+import { QuickJSWASMModule } from "quickjs-emscripten";
+import { ExecuteResult, ExecutorRuntimeOptions, ProviderManifest, ToolCall, ToolCallResult } from "@execbox/core";
+
 //#region src/runner/index.d.ts
+
 /**
  * Transport-neutral host tool call emitted from a QuickJS session.
  */
@@ -94,11 +26,13 @@ interface QuickJsSessionRequest {
 /**
  * Options controlling one transport-backed QuickJS session.
  */
-type QuickJsSessionOptions = QuickJsExecutorOptions & ExecutorRuntimeOptions;
+type QuickJsSessionOptions = QuickJsExecutorOptions & ExecutorRuntimeOptions & {
+  module?: QuickJSWASMModule;
+};
 /**
  * Runs one QuickJS-backed execution session using a transport-neutral tool callback.
  */
 declare function runQuickJsSession(request: QuickJsSessionRequest, options?: QuickJsSessionOptions): Promise<ExecuteResult>;
 //#endregion
-export { QuickJsSessionOptions, QuickJsSessionRequest, QuickJsSessionToolCall, runQuickJsSession };
+export { type QuickJsExecutorOptions, QuickJsSessionOptions, QuickJsSessionRequest, QuickJsSessionToolCall, runQuickJsSession };
 //# sourceMappingURL=index.d.ts.map

package/dist/runner/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","names":[],"sources":["../../../core/src/types.ts","../../../core/src/runner.ts","../../src/runner/index.ts"],"sourcesContent":[],"mappings":";;;;ACeA;AASA;AASA;AAiBiB,KDnCL,gBAAA,GCmCa,SAAA,GAAA,cAAA,GAAA,kBAAA,GAAA,YAAA,GAAA,eAAA,GAAA,qBAAA,GAAA,gBAAA;AASzB;;;UDhCiB,YAAA;EEuBL;EAKK,IAAA,EF1BT,gBE0BS;EACG;EAEC,OAAA,EAAA,MAAA;;;;;AAGV,KFxBC,aEwBD,CAAA,IAAA,OAAA,CAAA,GAAA;EAAW,UAAA,EAAA,MAAA;EAMV,IAAA,EAAA,MAAA,EAAA;EA4TU,EAAA,EAAA,IAAA;EACX,MAAA,EFtVG,CEsVH;CACA,GAAA;EACA,UAAA,EAAA,MAAA;EAAR,KAAA,EFpVU,YEoVV;EAAO,IAAA,EAAA,MAAA,EAAA;;;;;;;AFnXV;AAYiB,UCZA,oBAAA,CDcT;EAQI,WAAA,CAAA,EAAA,MAAa;;;;ACtBzB;AASA;AASA;AAiBiB,UA1BA,gBAAA,CA0BQ;EASb,IAAA,EAAA,MAAA;SAjCH,eAAe;;;ACwBxB;AAKA;;AAGqB,UDzBJ,sBAAA,CCyBI;EAAqB,WAAA,CAAA,EAAA,MAAA;EAAR,WAAA,CAAA,EAAA,MAAA;EAA0B,gBAAA,CAAA,EAAA,MAAA;EAE/C,SAAA,CAAA,EAAA,MAAA;;;;;UDVI,QAAA;;;;;;;;KASL,cAAA;;;;SAMC;;;;;;ADlDb;AAYA;AAUY,KEaA,sBAAA,GAAyB,QFJxB;;;;AC/BI,UCwCA,qBAAA,CDxCoB;EASpB,eAAA,CAAA,ECgCG,eD9BI;EAOP,IAAA,EAAA,MAAA;EAiBA,UAAA,EAAQ,CAAA,IAAA,ECQJ,QDRI,EAAA,GCQS,ODRT,CCQiB,cDRjB,CAAA,GCQmC,cDRnC;EASb,SAAA,CAAA,EAAA,GAAA,GAAc,IAAA;aCCb;WACF;;AAXX;AAKA;;AAGqB,KAST,qBAAA,GAAwB,sBATf,GAUnB,sBAVmB;;;;AAER,iBAmUS,iBAAA,CAnUT,OAAA,EAoUF,qBApUE,EAAA,OAAA,CAAA,EAqUF,qBArUE,CAAA,EAsUV,OAtUU,CAsUF,aAtUE,CAAA"}
+{"version":3,"file":"index.d.ts","names":[],"sources":["../../src/runner/index.ts"],"sourcesContent":[],"mappings":";;;;;;;;;;;AA0DA,CAAA,CAAA,CAAA,SAAA,CAAA,OAAA,CAAA,IAAA,CAAA,IAAA,CAAA,IAAA,CAAA,OAAA,CAAA,IAAA,CAAA,CAAA,CAAA,OAAA,CAAA,OAAA;AAKA,CAAA,CAAA;AACoB,IAAA,CANR,sBAAA,CAAA,CAAA,CAAyB,QAMjB;;;;AAEwC,SAAA,CAH3C,qBAAA,CAG2C;EAE/C,eAAA,CAAA,CAAA,CAJO,eAIP;EACF,IAAA,CAAA,CAAA,MAAA;EAAW,UAAA,CAAA,CAAA,CAAA,IAAA,CAAA,CAHD,QAGC,CAAA,CAAA,CAAA,CAAA,CAHY,OAGZ,CAHoB,cAGpB,CAAA,CAAA,CAAA,CAHsC,cAGtC;EAMV,SAAA,CAAA,CAAA,CAAA,CAAA,CAAA,CAAA,CAAA,CAAA,CAAA,IAAA;EAAwB,SAAA,CAAA,CAPvB,gBAOuB,CAAA,CAAA;EAClC,MAAA,CAAA,CAAA,CAPS,WAOT;;;AA6TF,CAAA,CAAA,CAAA,OAAA,CAAA,WAAA,CAAA,GAAA,CAAA,SAAA,CAAA,MAAA,CAAA,OAAA,CAAA,OAAA;;AAEW,IAAA,CAhUC,qBAAA,CAAA,CAAA,CAAwB,sBAgUzB,CAAA,CAAA,CA/TT,sBA+TS,CAAA,CAAA,CAAA;EACA,MAAA,CAAA,CAAA,CA/TE,iBA+TF;CAAR;;;;iBAHmB,iBAAA,UACX,iCACA,wBACR,QAAQ"}

package/dist/runner/index.js

@@ -1,3 +1,3 @@
-import { t as runQuickJsSession } from "../runner-O4f_FOhI.js";
+import { t as runQuickJsSession } from "../runner-CVaY4RVQ.js";
 
 export { runQuickJsSession };

package/dist/runner/protocolEndpoint.cjs

@@ -1,4 +1,4 @@
-const require_runner = require('../runner-9_N9h2rp.cjs');
+const require_runner = require('../runner-BqkDnP0t.cjs');
 let node_crypto = require("node:crypto");
 
 //#region ../protocol/src/messages.ts
@@ -39,6 +39,10 @@ function isDispatcherMessage(value) {
 //#endregion
 //#region src/runner/protocolEndpoint.ts
 /**
+* @packageDocumentation
+* Public API for the `@execbox/quickjs/runner/protocol-endpoint` entrypoint.
+*/
+/**
 * Attaches the shared QuickJS protocol loop to a worker/process messaging port.
 */
 function attachQuickJsProtocolEndpoint(port) {