@execbox/quickjs 0.2.0 → 0.2.1

package/README.md

@@ -5,6 +5,8 @@ QuickJS executor backend for `@execbox/core`.
 [![npm version](https://img.shields.io/npm/v/%40execbox%2Fquickjs?style=flat-square)](https://www.npmjs.com/package/@execbox/quickjs)
 [![License](https://img.shields.io/github/license/aallam/execbox?style=flat-square)](https://github.com/aallam/execbox/blob/main/LICENSE)
 
+Docs: https://execbox.aallam.com
+
 ## Choose QuickJS When
 
 - you want the easiest execbox backend to install
@@ -16,8 +18,8 @@ QuickJS executor backend for `@execbox/core`.
 - Each execution gets a fresh QuickJS runtime with no ambient Node globals injected by execbox.
 - Tool calls cross a JSON-only bridge, and executor timeouts propagate abort signals to in-flight provider work.
 - In the default deployment model, provider definitions are controlled by the host application, while hostile users control guest code and tool inputs.
-- This package is not presented as a hard security boundary for hostile code. It is best-effort in-process isolation.
-- If you need a stronger boundary, run execbox behind a separate process or container.
+- This package is designed for host-controlled deployments and does not by itself create a hard isolation boundary for hostile code.
+- If you need a stronger boundary, move execution into a separate process, container, or remote runtime.
 
 ## Architecture Docs
 

package/dist/index.cjs

@@ -1,6 +1,69 @@
-const require_runner = require('./runner-DhOZH9xz.cjs');
-let __execbox_core = require("@execbox/core");
+const require_runner = require('./runner-BqkDnP0t.cjs');
 
+//#region ../core/src/runner.ts
+function toTrustedExecuteError(error) {
+	if (require_runner.isExecuteFailure(error)) return {
+		code: error.code,
+		message: error.message
+	};
+	return {
+		code: "tool_error",
+		message: require_runner.normalizeThrownMessage(error)
+	};
+}
+/**
+* Converts resolved providers into manifest metadata that reveals only namespace details.
+*/
+function extractProviderManifests(providers) {
+	return providers.map((provider) => ({
+		name: provider.name,
+		tools: Object.fromEntries(Object.entries(provider.tools).map(([safeToolName, descriptor]) => [safeToolName, {
+			description: descriptor.description,
+			originalName: descriptor.originalName,
+			safeName: descriptor.safeName
+		}])),
+		types: provider.types
+	}));
+}
+/**
+* Creates a host-side dispatcher for runner-emitted tool calls.
+*/
+function createToolCallDispatcher(providers, signal) {
+	const providerMap = new Map(providers.map((provider) => [provider.name, provider]));
+	return async (call) => {
+		const provider = providerMap.get(call.providerName);
+		const descriptor = provider?.tools[call.safeToolName];
+		if (!provider || !descriptor) return {
+			error: {
+				code: "internal_error",
+				message: `Unknown tool ${call.providerName}.${call.safeToolName}`
+			},
+			ok: false
+		};
+		try {
+			if (signal.aborted) return {
+				error: {
+					code: "timeout",
+					message: require_runner.getExecutionTimeoutMessage()
+				},
+				ok: false
+			};
+			const result = await descriptor.execute(call.input, require_runner.createExecutionContext(signal, provider.name, descriptor.safeName, descriptor.originalName));
+			if (result !== void 0 && !require_runner.isJsonSerializable(result)) throw new require_runner.ExecuteFailure("serialization_error", "Host value is not JSON-serializable");
+			return {
+				ok: true,
+				result
+			};
+		} catch (error) {
+			return {
+				error: toTrustedExecuteError(error),
+				ok: false
+			};
+		}
+	};
+}
+
+//#endregion
 //#region src/quickjsExecutor.ts
 /**
 * QuickJS-backed executor for ephemeral sandboxed JavaScript runs.
@@ -17,9 +80,9 @@ var QuickJsExecutor = class {
 	* Executes JavaScript against the provided tool namespaces in a fresh QuickJS runtime.
 	*/
 	async execute(code, providers, options = {}) {
-		if (options.signal?.aborted) return (0, __execbox_core.createTimeoutExecuteResult)();
+		if (options.signal?.aborted) return require_runner.createTimeoutExecuteResult();
 		const abortController = new AbortController();
-		const onToolCall = (0, __execbox_core.createToolCallDispatcher)(providers, abortController.signal);
+		const onToolCall = createToolCallDispatcher(providers, abortController.signal);
 		const onAbort = () => {
 			abortController.abort();
 		};
@@ -29,7 +92,7 @@ var QuickJsExecutor = class {
 				abortController,
 				code,
 				onToolCall,
-				providers: (0, __execbox_core.extractProviderManifests)(providers)
+				providers: extractProviderManifests(providers)
 			}, {
 				...this.options,
 				...options

package/dist/index.cjs.map

@@ -1 +1 @@
-{"version":3,"file":"index.cjs","names":["runQuickJsSession"],"sources":["../src/quickjsExecutor.ts"],"sourcesContent":["import {\n  createTimeoutExecuteResult,\n  createToolCallDispatcher,\n  extractProviderManifests,\n  type ExecutionOptions,\n  type ExecuteResult,\n  type Executor,\n  type ResolvedToolProvider,\n} from \"@execbox/core\";\n\nimport { runQuickJsSession } from \"./runner/index\";\nimport type { QuickJsExecutorOptions } from \"./types\";\n\n/**\n * QuickJS-backed executor for ephemeral sandboxed JavaScript runs.\n */\nexport class QuickJsExecutor implements Executor {\n  private readonly options: QuickJsExecutorOptions;\n\n  /**\n   * Creates a QuickJS executor with ephemeral runtime limits and host bridging configuration.\n   */\n  constructor(options: QuickJsExecutorOptions = {}) {\n    this.options = options;\n  }\n\n  /**\n   * Executes JavaScript against the provided tool namespaces in a fresh QuickJS runtime.\n   */\n  async execute(\n    code: string,\n    providers: ResolvedToolProvider[],\n    options: ExecutionOptions = {},\n  ): Promise<ExecuteResult> {\n    if (options.signal?.aborted) {\n      return createTimeoutExecuteResult();\n    }\n\n    const abortController = new AbortController();\n    const onToolCall = createToolCallDispatcher(\n      providers,\n      abortController.signal,\n    );\n    const onAbort = () => {\n      abortController.abort();\n    };\n\n    options.signal?.addEventListener(\"abort\", onAbort, { once: true });\n\n    try {\n      return await runQuickJsSession(\n        {\n          abortController,\n          code,\n          onToolCall,\n          providers: extractProviderManifests(providers),\n        },\n        {\n          ...this.options,\n          ...options,\n        },\n      );\n    } finally {\n      options.signal?.removeEventListener(\"abort\", onAbort);\n      abortController.abort();\n    }\n  }\n}\n"],"mappings":";;;;;;;AAgBA,IAAa,kBAAb,MAAiD;CAC/C,AAAiB;;;;CAKjB,YAAY,UAAkC,EAAE,EAAE;AAChD,OAAK,UAAU;;;;;CAMjB,MAAM,QACJ,MACA,WACA,UAA4B,EAAE,EACN;AACxB,MAAI,QAAQ,QAAQ,QAClB,wDAAmC;EAGrC,MAAM,kBAAkB,IAAI,iBAAiB;EAC7C,MAAM,0DACJ,WACA,gBAAgB,OACjB;EACD,MAAM,gBAAgB;AACpB,mBAAgB,OAAO;;AAGzB,UAAQ,QAAQ,iBAAiB,SAAS,SAAS,EAAE,MAAM,MAAM,CAAC;AAElE,MAAI;AACF,UAAO,MAAMA,iCACX;IACE;IACA;IACA;IACA,wDAAoC,UAAU;IAC/C,EACD;IACE,GAAG,KAAK;IACR,GAAG;IACJ,CACF;YACO;AACR,WAAQ,QAAQ,oBAAoB,SAAS,QAAQ;AACrD,mBAAgB,OAAO"}
+{"version":3,"file":"index.cjs","names":["isExecuteFailure","normalizeThrownMessage","getExecutionTimeoutMessage","createExecutionContext","isJsonSerializable","ExecuteFailure","createTimeoutExecuteResult","runQuickJsSession"],"sources":["../../core/src/runner.ts","../src/quickjsExecutor.ts"],"sourcesContent":["import {\n  createExecutionContext,\n  getExecutionTimeoutMessage,\n  normalizeThrownMessage,\n} from \"./executor/shared.ts\";\nimport {\n  ExecuteFailure,\n  isExecuteFailure,\n  isJsonSerializable,\n} from \"./errors.ts\";\nimport type { ExecuteError, ResolvedToolProvider } from \"./types.ts\";\n\n/**\n * Transport-safe metadata for one exposed tool.\n */\nexport interface ProviderToolManifest {\n  description?: string;\n  originalName: string;\n  safeName: string;\n}\n\n/**\n * Namespace manifest shared with runner implementations.\n */\nexport interface ProviderManifest {\n  name: string;\n  tools: Record<string, ProviderToolManifest>;\n  types: string;\n}\n\n/**\n * Execution limits forwarded to runner implementations.\n */\nexport interface ExecutorRuntimeOptions {\n  maxLogChars?: number;\n  maxLogLines?: number;\n  memoryLimitBytes?: number;\n  timeoutMs?: number;\n}\n\n/**\n * Public execution options accepted by executors per call.\n */\nexport interface ExecutionOptions extends ExecutorRuntimeOptions {\n  signal?: AbortSignal;\n}\n\n/**\n * Tool invocation request emitted from a runner.\n */\nexport interface ToolCall {\n  input: unknown;\n  providerName: string;\n  safeToolName: string;\n}\n\n/**\n * Trusted host response to a tool invocation request.\n */\nexport type ToolCallResult =\n  | {\n      ok: true;\n      result: unknown;\n    }\n  | {\n      error: ExecuteError;\n      ok: false;\n    };\n\nfunction toTrustedExecuteError(error: unknown): ExecuteError {\n  if (isExecuteFailure(error)) {\n    return {\n      code: error.code,\n      message: error.message,\n    };\n  }\n\n  return {\n    code: \"tool_error\",\n    message: normalizeThrownMessage(error),\n  };\n}\n\n/**\n * Converts resolved providers into manifest metadata that reveals only namespace details.\n */\nexport function extractProviderManifests(\n  providers: ResolvedToolProvider[],\n): ProviderManifest[] {\n  return providers.map((provider) => ({\n    name: provider.name,\n    tools: Object.fromEntries(\n      Object.entries(provider.tools).map(([safeToolName, descriptor]) => [\n        safeToolName,\n        {\n          description: descriptor.description,\n          originalName: descriptor.originalName,\n          safeName: descriptor.safeName,\n        },\n      ]),\n    ),\n    types: provider.types,\n  }));\n}\n\n/**\n * Creates a host-side dispatcher for runner-emitted tool calls.\n */\nexport function createToolCallDispatcher(\n  providers: ResolvedToolProvider[],\n  signal: AbortSignal,\n): (call: ToolCall) => Promise<ToolCallResult> {\n  const providerMap = new Map(\n    providers.map((provider) => [provider.name, provider] as const),\n  );\n\n  return async (call) => {\n    const provider = providerMap.get(call.providerName);\n    const descriptor = provider?.tools[call.safeToolName];\n\n    if (!provider || !descriptor) {\n      return {\n        error: {\n          code: \"internal_error\",\n          message: `Unknown tool ${call.providerName}.${call.safeToolName}`,\n        },\n        ok: false,\n      };\n    }\n\n    try {\n      if (signal.aborted) {\n        return {\n          error: {\n            code: \"timeout\",\n            message: getExecutionTimeoutMessage(),\n          },\n          ok: false,\n        };\n      }\n\n      const result = await descriptor.execute(\n        call.input,\n        createExecutionContext(\n          signal,\n          provider.name,\n          descriptor.safeName,\n          descriptor.originalName,\n        ),\n      );\n\n      if (result !== undefined && !isJsonSerializable(result)) {\n        throw new ExecuteFailure(\n          \"serialization_error\",\n          \"Host value is not JSON-serializable\",\n        );\n      }\n\n      return {\n        ok: true,\n        result,\n      };\n    } catch (error) {\n      return {\n        error: toTrustedExecuteError(error),\n        ok: false,\n      };\n    }\n  };\n}\n","import {\n  createTimeoutExecuteResult,\n  createToolCallDispatcher,\n  extractProviderManifests,\n} from \"../../core/src/runtime.ts\";\nimport type {\n  ExecutionOptions,\n  ExecuteResult,\n  Executor,\n  ResolvedToolProvider,\n} from \"@execbox/core\";\n\nimport { runQuickJsSession } from \"./runner/index.ts\";\nimport type { QuickJsExecutorOptions } from \"./types\";\n\n/**\n * QuickJS-backed executor for ephemeral sandboxed JavaScript runs.\n */\nexport class QuickJsExecutor implements Executor {\n  private readonly options: QuickJsExecutorOptions;\n\n  /**\n   * Creates a QuickJS executor with ephemeral runtime limits and host bridging configuration.\n   */\n  constructor(options: QuickJsExecutorOptions = {}) {\n    this.options = options;\n  }\n\n  /**\n   * Executes JavaScript against the provided tool namespaces in a fresh QuickJS runtime.\n   */\n  async execute(\n    code: string,\n    providers: ResolvedToolProvider[],\n    options: ExecutionOptions = {},\n  ): Promise<ExecuteResult> {\n    if (options.signal?.aborted) {\n      return createTimeoutExecuteResult();\n    }\n\n    const abortController = new AbortController();\n    const onToolCall = createToolCallDispatcher(\n      providers,\n      abortController.signal,\n    );\n    const onAbort = () => {\n      abortController.abort();\n    };\n\n    options.signal?.addEventListener(\"abort\", onAbort, { once: true });\n\n    try {\n      return await runQuickJsSession(\n        {\n          abortController,\n          code,\n          onToolCall,\n          providers: extractProviderManifests(providers),\n        },\n        {\n          ...this.options,\n          ...options,\n        },\n      );\n    } finally {\n      options.signal?.removeEventListener(\"abort\", onAbort);\n      abortController.abort();\n    }\n  }\n}\n"],"mappings":";;;AAqEA,SAAS,sBAAsB,OAA8B;AAC3D,KAAIA,gCAAiB,MAAM,CACzB,QAAO;EACL,MAAM,MAAM;EACZ,SAAS,MAAM;EAChB;AAGH,QAAO;EACL,MAAM;EACN,SAASC,sCAAuB,MAAM;EACvC;;;;;AAMH,SAAgB,yBACd,WACoB;AACpB,QAAO,UAAU,KAAK,cAAc;EAClC,MAAM,SAAS;EACf,OAAO,OAAO,YACZ,OAAO,QAAQ,SAAS,MAAM,CAAC,KAAK,CAAC,cAAc,gBAAgB,CACjE,cACA;GACE,aAAa,WAAW;GACxB,cAAc,WAAW;GACzB,UAAU,WAAW;GACtB,CACF,CAAC,CACH;EACD,OAAO,SAAS;EACjB,EAAE;;;;;AAML,SAAgB,yBACd,WACA,QAC6C;CAC7C,MAAM,cAAc,IAAI,IACtB,UAAU,KAAK,aAAa,CAAC,SAAS,MAAM,SAAS,CAAU,CAChE;AAED,QAAO,OAAO,SAAS;EACrB,MAAM,WAAW,YAAY,IAAI,KAAK,aAAa;EACnD,MAAM,aAAa,UAAU,MAAM,KAAK;AAExC,MAAI,CAAC,YAAY,CAAC,WAChB,QAAO;GACL,OAAO;IACL,MAAM;IACN,SAAS,gBAAgB,KAAK,aAAa,GAAG,KAAK;IACpD;GACD,IAAI;GACL;AAGH,MAAI;AACF,OAAI,OAAO,QACT,QAAO;IACL,OAAO;KACL,MAAM;KACN,SAASC,2CAA4B;KACtC;IACD,IAAI;IACL;GAGH,MAAM,SAAS,MAAM,WAAW,QAC9B,KAAK,OACLC,sCACE,QACA,SAAS,MACT,WAAW,UACX,WAAW,aACZ,CACF;AAED,OAAI,WAAW,UAAa,CAACC,kCAAmB,OAAO,CACrD,OAAM,IAAIC,8BACR,uBACA,sCACD;AAGH,UAAO;IACL,IAAI;IACJ;IACD;WACM,OAAO;AACd,UAAO;IACL,OAAO,sBAAsB,MAAM;IACnC,IAAI;IACL;;;;;;;;;;ACpJP,IAAa,kBAAb,MAAiD;CAC/C,AAAiB;;;;CAKjB,YAAY,UAAkC,EAAE,EAAE;AAChD,OAAK,UAAU;;;;;CAMjB,MAAM,QACJ,MACA,WACA,UAA4B,EAAE,EACN;AACxB,MAAI,QAAQ,QAAQ,QAClB,QAAOC,2CAA4B;EAGrC,MAAM,kBAAkB,IAAI,iBAAiB;EAC7C,MAAM,aAAa,yBACjB,WACA,gBAAgB,OACjB;EACD,MAAM,gBAAgB;AACpB,mBAAgB,OAAO;;AAGzB,UAAQ,QAAQ,iBAAiB,SAAS,SAAS,EAAE,MAAM,MAAM,CAAC;AAElE,MAAI;AACF,UAAO,MAAMC,iCACX;IACE;IACA;IACA;IACA,WAAW,yBAAyB,UAAU;IAC/C,EACD;IACE,GAAG,KAAK;IACR,GAAG;IACJ,CACF;YACO;AACR,WAAQ,QAAQ,oBAAoB,SAAS,QAAQ;AACrD,mBAAgB,OAAO"}

package/dist/index.d.cts

@@ -1,4 +1,8 @@
-import { t as QuickJsExecutorOptions } from "./types-BB8mb_-T.cjs";
+/**
+ * @packageDocumentation
+ * Public TypeScript declarations for this package entrypoint.
+ */
+import { t as QuickJsExecutorOptions } from "./types-CVE2n2LY.cjs";
 import { ExecuteResult, ExecutionOptions, Executor, ResolvedToolProvider } from "@execbox/core";
 
 //#region src/quickjsExecutor.d.ts

package/dist/index.d.cts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.cts","names":[],"sources":["../src/quickjsExecutor.ts"],"sourcesContent":[],"mappings":";;;;;;;AAgBA;AAMuB,cANV,eAAA,YAA2B,QAMjB,CAAA;EASR,iBAAA,OAAA;EACF;;;EAhB2B,WAAA,CAAA,OAAA,CAAA,EAMjB,sBANiB;EAAQ;;;mCAejC,kCACF,mBACR,QAAQ"}
+{"version":3,"file":"index.d.cts","names":[],"sources":["../src/quickjsExecutor.ts"],"sourcesContent":[],"mappings":";;;;;;;;;;;AAkBA,CAAA,CAAA;AAMuB,OAAA,CAAA,KAAA,CANV,eAAA,CAAA,UAAA,CAA2B,QAMjB,CAAA;EASR,OAAA,CAAA,QAAA,CAAA,OAAA;EACF,CAAA,CAAA;;;EAhB2B,WAAA,CAAA,OAAA,CAAA,CAAA,CAMjB,sBANiB,CAAA;EAAQ,CAAA,CAAA;;;mCAejC,kCACF,mBACR,QAAQ"}

package/dist/index.d.ts

@@ -1,4 +1,8 @@
-import { t as QuickJsExecutorOptions } from "./types-D7uau0GM.js";
+/**
+ * @packageDocumentation
+ * Public TypeScript declarations for this package entrypoint.
+ */
+import { t as QuickJsExecutorOptions } from "./types-BXi8Lqtk.js";
 import { ExecuteResult, ExecutionOptions, Executor, ResolvedToolProvider } from "@execbox/core";
 
 //#region src/quickjsExecutor.d.ts

package/dist/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","names":[],"sources":["../src/quickjsExecutor.ts"],"sourcesContent":[],"mappings":";;;;;;;AAgBA;AAMuB,cANV,eAAA,YAA2B,QAMjB,CAAA;EASR,iBAAA,OAAA;EACF;;;EAhB2B,WAAA,CAAA,OAAA,CAAA,EAMjB,sBANiB;EAAQ;;;mCAejC,kCACF,mBACR,QAAQ"}
+{"version":3,"file":"index.d.ts","names":[],"sources":["../src/quickjsExecutor.ts"],"sourcesContent":[],"mappings":";;;;;;;;;;;AAkBA,CAAA,CAAA;AAMuB,OAAA,CAAA,KAAA,CANV,eAAA,CAAA,UAAA,CAA2B,QAMjB,CAAA;EASR,OAAA,CAAA,QAAA,CAAA,OAAA;EACF,CAAA,CAAA;;;EAhB2B,WAAA,CAAA,OAAA,CAAA,CAAA,CAMjB,sBANiB,CAAA;EAAQ,CAAA,CAAA;;;mCAejC,kCACF,mBACR,QAAQ"}

package/dist/index.js

@@ -1,6 +1,69 @@
-import { t as runQuickJsSession } from "./runner-B4UG88h1.js";
-import { createTimeoutExecuteResult, createToolCallDispatcher, extractProviderManifests } from "@execbox/core";
+import { a as createExecutionContext, c as normalizeThrownMessage, i as isJsonSerializable, n as ExecuteFailure, o as createTimeoutExecuteResult, r as isExecuteFailure, s as getExecutionTimeoutMessage, t as runQuickJsSession } from "./runner-CVaY4RVQ.js";
 
+//#region ../core/src/runner.ts
+function toTrustedExecuteError(error) {
+	if (isExecuteFailure(error)) return {
+		code: error.code,
+		message: error.message
+	};
+	return {
+		code: "tool_error",
+		message: normalizeThrownMessage(error)
+	};
+}
+/**
+* Converts resolved providers into manifest metadata that reveals only namespace details.
+*/
+function extractProviderManifests(providers) {
+	return providers.map((provider) => ({
+		name: provider.name,
+		tools: Object.fromEntries(Object.entries(provider.tools).map(([safeToolName, descriptor]) => [safeToolName, {
+			description: descriptor.description,
+			originalName: descriptor.originalName,
+			safeName: descriptor.safeName
+		}])),
+		types: provider.types
+	}));
+}
+/**
+* Creates a host-side dispatcher for runner-emitted tool calls.
+*/
+function createToolCallDispatcher(providers, signal) {
+	const providerMap = new Map(providers.map((provider) => [provider.name, provider]));
+	return async (call) => {
+		const provider = providerMap.get(call.providerName);
+		const descriptor = provider?.tools[call.safeToolName];
+		if (!provider || !descriptor) return {
+			error: {
+				code: "internal_error",
+				message: `Unknown tool ${call.providerName}.${call.safeToolName}`
+			},
+			ok: false
+		};
+		try {
+			if (signal.aborted) return {
+				error: {
+					code: "timeout",
+					message: getExecutionTimeoutMessage()
+				},
+				ok: false
+			};
+			const result = await descriptor.execute(call.input, createExecutionContext(signal, provider.name, descriptor.safeName, descriptor.originalName));
+			if (result !== void 0 && !isJsonSerializable(result)) throw new ExecuteFailure("serialization_error", "Host value is not JSON-serializable");
+			return {
+				ok: true,
+				result
+			};
+		} catch (error) {
+			return {
+				error: toTrustedExecuteError(error),
+				ok: false
+			};
+		}
+	};
+}
+
+//#endregion
 //#region src/quickjsExecutor.ts
 /**
 * QuickJS-backed executor for ephemeral sandboxed JavaScript runs.

package/dist/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","names":[],"sources":["../src/quickjsExecutor.ts"],"sourcesContent":["import {\n  createTimeoutExecuteResult,\n  createToolCallDispatcher,\n  extractProviderManifests,\n  type ExecutionOptions,\n  type ExecuteResult,\n  type Executor,\n  type ResolvedToolProvider,\n} from \"@execbox/core\";\n\nimport { runQuickJsSession } from \"./runner/index\";\nimport type { QuickJsExecutorOptions } from \"./types\";\n\n/**\n * QuickJS-backed executor for ephemeral sandboxed JavaScript runs.\n */\nexport class QuickJsExecutor implements Executor {\n  private readonly options: QuickJsExecutorOptions;\n\n  /**\n   * Creates a QuickJS executor with ephemeral runtime limits and host bridging configuration.\n   */\n  constructor(options: QuickJsExecutorOptions = {}) {\n    this.options = options;\n  }\n\n  /**\n   * Executes JavaScript against the provided tool namespaces in a fresh QuickJS runtime.\n   */\n  async execute(\n    code: string,\n    providers: ResolvedToolProvider[],\n    options: ExecutionOptions = {},\n  ): Promise<ExecuteResult> {\n    if (options.signal?.aborted) {\n      return createTimeoutExecuteResult();\n    }\n\n    const abortController = new AbortController();\n    const onToolCall = createToolCallDispatcher(\n      providers,\n      abortController.signal,\n    );\n    const onAbort = () => {\n      abortController.abort();\n    };\n\n    options.signal?.addEventListener(\"abort\", onAbort, { once: true });\n\n    try {\n      return await runQuickJsSession(\n        {\n          abortController,\n          code,\n          onToolCall,\n          providers: extractProviderManifests(providers),\n        },\n        {\n          ...this.options,\n          ...options,\n        },\n      );\n    } finally {\n      options.signal?.removeEventListener(\"abort\", onAbort);\n      abortController.abort();\n    }\n  }\n}\n"],"mappings":";;;;;;;AAgBA,IAAa,kBAAb,MAAiD;CAC/C,AAAiB;;;;CAKjB,YAAY,UAAkC,EAAE,EAAE;AAChD,OAAK,UAAU;;;;;CAMjB,MAAM,QACJ,MACA,WACA,UAA4B,EAAE,EACN;AACxB,MAAI,QAAQ,QAAQ,QAClB,QAAO,4BAA4B;EAGrC,MAAM,kBAAkB,IAAI,iBAAiB;EAC7C,MAAM,aAAa,yBACjB,WACA,gBAAgB,OACjB;EACD,MAAM,gBAAgB;AACpB,mBAAgB,OAAO;;AAGzB,UAAQ,QAAQ,iBAAiB,SAAS,SAAS,EAAE,MAAM,MAAM,CAAC;AAElE,MAAI;AACF,UAAO,MAAM,kBACX;IACE;IACA;IACA;IACA,WAAW,yBAAyB,UAAU;IAC/C,EACD;IACE,GAAG,KAAK;IACR,GAAG;IACJ,CACF;YACO;AACR,WAAQ,QAAQ,oBAAoB,SAAS,QAAQ;AACrD,mBAAgB,OAAO"}
+{"version":3,"file":"index.js","names":[],"sources":["../../core/src/runner.ts","../src/quickjsExecutor.ts"],"sourcesContent":["import {\n  createExecutionContext,\n  getExecutionTimeoutMessage,\n  normalizeThrownMessage,\n} from \"./executor/shared.ts\";\nimport {\n  ExecuteFailure,\n  isExecuteFailure,\n  isJsonSerializable,\n} from \"./errors.ts\";\nimport type { ExecuteError, ResolvedToolProvider } from \"./types.ts\";\n\n/**\n * Transport-safe metadata for one exposed tool.\n */\nexport interface ProviderToolManifest {\n  description?: string;\n  originalName: string;\n  safeName: string;\n}\n\n/**\n * Namespace manifest shared with runner implementations.\n */\nexport interface ProviderManifest {\n  name: string;\n  tools: Record<string, ProviderToolManifest>;\n  types: string;\n}\n\n/**\n * Execution limits forwarded to runner implementations.\n */\nexport interface ExecutorRuntimeOptions {\n  maxLogChars?: number;\n  maxLogLines?: number;\n  memoryLimitBytes?: number;\n  timeoutMs?: number;\n}\n\n/**\n * Public execution options accepted by executors per call.\n */\nexport interface ExecutionOptions extends ExecutorRuntimeOptions {\n  signal?: AbortSignal;\n}\n\n/**\n * Tool invocation request emitted from a runner.\n */\nexport interface ToolCall {\n  input: unknown;\n  providerName: string;\n  safeToolName: string;\n}\n\n/**\n * Trusted host response to a tool invocation request.\n */\nexport type ToolCallResult =\n  | {\n      ok: true;\n      result: unknown;\n    }\n  | {\n      error: ExecuteError;\n      ok: false;\n    };\n\nfunction toTrustedExecuteError(error: unknown): ExecuteError {\n  if (isExecuteFailure(error)) {\n    return {\n      code: error.code,\n      message: error.message,\n    };\n  }\n\n  return {\n    code: \"tool_error\",\n    message: normalizeThrownMessage(error),\n  };\n}\n\n/**\n * Converts resolved providers into manifest metadata that reveals only namespace details.\n */\nexport function extractProviderManifests(\n  providers: ResolvedToolProvider[],\n): ProviderManifest[] {\n  return providers.map((provider) => ({\n    name: provider.name,\n    tools: Object.fromEntries(\n      Object.entries(provider.tools).map(([safeToolName, descriptor]) => [\n        safeToolName,\n        {\n          description: descriptor.description,\n          originalName: descriptor.originalName,\n          safeName: descriptor.safeName,\n        },\n      ]),\n    ),\n    types: provider.types,\n  }));\n}\n\n/**\n * Creates a host-side dispatcher for runner-emitted tool calls.\n */\nexport function createToolCallDispatcher(\n  providers: ResolvedToolProvider[],\n  signal: AbortSignal,\n): (call: ToolCall) => Promise<ToolCallResult> {\n  const providerMap = new Map(\n    providers.map((provider) => [provider.name, provider] as const),\n  );\n\n  return async (call) => {\n    const provider = providerMap.get(call.providerName);\n    const descriptor = provider?.tools[call.safeToolName];\n\n    if (!provider || !descriptor) {\n      return {\n        error: {\n          code: \"internal_error\",\n          message: `Unknown tool ${call.providerName}.${call.safeToolName}`,\n        },\n        ok: false,\n      };\n    }\n\n    try {\n      if (signal.aborted) {\n        return {\n          error: {\n            code: \"timeout\",\n            message: getExecutionTimeoutMessage(),\n          },\n          ok: false,\n        };\n      }\n\n      const result = await descriptor.execute(\n        call.input,\n        createExecutionContext(\n          signal,\n          provider.name,\n          descriptor.safeName,\n          descriptor.originalName,\n        ),\n      );\n\n      if (result !== undefined && !isJsonSerializable(result)) {\n        throw new ExecuteFailure(\n          \"serialization_error\",\n          \"Host value is not JSON-serializable\",\n        );\n      }\n\n      return {\n        ok: true,\n        result,\n      };\n    } catch (error) {\n      return {\n        error: toTrustedExecuteError(error),\n        ok: false,\n      };\n    }\n  };\n}\n","import {\n  createTimeoutExecuteResult,\n  createToolCallDispatcher,\n  extractProviderManifests,\n} from \"../../core/src/runtime.ts\";\nimport type {\n  ExecutionOptions,\n  ExecuteResult,\n  Executor,\n  ResolvedToolProvider,\n} from \"@execbox/core\";\n\nimport { runQuickJsSession } from \"./runner/index.ts\";\nimport type { QuickJsExecutorOptions } from \"./types\";\n\n/**\n * QuickJS-backed executor for ephemeral sandboxed JavaScript runs.\n */\nexport class QuickJsExecutor implements Executor {\n  private readonly options: QuickJsExecutorOptions;\n\n  /**\n   * Creates a QuickJS executor with ephemeral runtime limits and host bridging configuration.\n   */\n  constructor(options: QuickJsExecutorOptions = {}) {\n    this.options = options;\n  }\n\n  /**\n   * Executes JavaScript against the provided tool namespaces in a fresh QuickJS runtime.\n   */\n  async execute(\n    code: string,\n    providers: ResolvedToolProvider[],\n    options: ExecutionOptions = {},\n  ): Promise<ExecuteResult> {\n    if (options.signal?.aborted) {\n      return createTimeoutExecuteResult();\n    }\n\n    const abortController = new AbortController();\n    const onToolCall = createToolCallDispatcher(\n      providers,\n      abortController.signal,\n    );\n    const onAbort = () => {\n      abortController.abort();\n    };\n\n    options.signal?.addEventListener(\"abort\", onAbort, { once: true });\n\n    try {\n      return await runQuickJsSession(\n        {\n          abortController,\n          code,\n          onToolCall,\n          providers: extractProviderManifests(providers),\n        },\n        {\n          ...this.options,\n          ...options,\n        },\n      );\n    } finally {\n      options.signal?.removeEventListener(\"abort\", onAbort);\n      abortController.abort();\n    }\n  }\n}\n"],"mappings":";;;AAqEA,SAAS,sBAAsB,OAA8B;AAC3D,KAAI,iBAAiB,MAAM,CACzB,QAAO;EACL,MAAM,MAAM;EACZ,SAAS,MAAM;EAChB;AAGH,QAAO;EACL,MAAM;EACN,SAAS,uBAAuB,MAAM;EACvC;;;;;AAMH,SAAgB,yBACd,WACoB;AACpB,QAAO,UAAU,KAAK,cAAc;EAClC,MAAM,SAAS;EACf,OAAO,OAAO,YACZ,OAAO,QAAQ,SAAS,MAAM,CAAC,KAAK,CAAC,cAAc,gBAAgB,CACjE,cACA;GACE,aAAa,WAAW;GACxB,cAAc,WAAW;GACzB,UAAU,WAAW;GACtB,CACF,CAAC,CACH;EACD,OAAO,SAAS;EACjB,EAAE;;;;;AAML,SAAgB,yBACd,WACA,QAC6C;CAC7C,MAAM,cAAc,IAAI,IACtB,UAAU,KAAK,aAAa,CAAC,SAAS,MAAM,SAAS,CAAU,CAChE;AAED,QAAO,OAAO,SAAS;EACrB,MAAM,WAAW,YAAY,IAAI,KAAK,aAAa;EACnD,MAAM,aAAa,UAAU,MAAM,KAAK;AAExC,MAAI,CAAC,YAAY,CAAC,WAChB,QAAO;GACL,OAAO;IACL,MAAM;IACN,SAAS,gBAAgB,KAAK,aAAa,GAAG,KAAK;IACpD;GACD,IAAI;GACL;AAGH,MAAI;AACF,OAAI,OAAO,QACT,QAAO;IACL,OAAO;KACL,MAAM;KACN,SAAS,4BAA4B;KACtC;IACD,IAAI;IACL;GAGH,MAAM,SAAS,MAAM,WAAW,QAC9B,KAAK,OACL,uBACE,QACA,SAAS,MACT,WAAW,UACX,WAAW,aACZ,CACF;AAED,OAAI,WAAW,UAAa,CAAC,mBAAmB,OAAO,CACrD,OAAM,IAAI,eACR,uBACA,sCACD;AAGH,UAAO;IACL,IAAI;IACJ;IACD;WACM,OAAO;AACd,UAAO;IACL,OAAO,sBAAsB,MAAM;IACnC,IAAI;IACL;;;;;;;;;;ACpJP,IAAa,kBAAb,MAAiD;CAC/C,AAAiB;;;;CAKjB,YAAY,UAAkC,EAAE,EAAE;AAChD,OAAK,UAAU;;;;;CAMjB,MAAM,QACJ,MACA,WACA,UAA4B,EAAE,EACN;AACxB,MAAI,QAAQ,QAAQ,QAClB,QAAO,4BAA4B;EAGrC,MAAM,kBAAkB,IAAI,iBAAiB;EAC7C,MAAM,aAAa,yBACjB,WACA,gBAAgB,OACjB;EACD,MAAM,gBAAgB;AACpB,mBAAgB,OAAO;;AAGzB,UAAQ,QAAQ,iBAAiB,SAAS,SAAS,EAAE,MAAM,MAAM,CAAC;AAElE,MAAI;AACF,UAAO,MAAM,kBACX;IACE;IACA;IACA;IACA,WAAW,yBAAyB,UAAU;IAC/C,EACD;IACE,GAAG,KAAK;IACR,GAAG;IACJ,CACF;YACO;AACR,WAAQ,QAAQ,oBAAoB,SAAS,QAAQ;AACrD,mBAAgB,OAAO"}

package/dist/runner/index.cjs

@@ -1,3 +1,3 @@
-const require_runner = require('../runner-DhOZH9xz.cjs');
+const require_runner = require('../runner-BqkDnP0t.cjs');
 
 exports.runQuickJsSession = require_runner.runQuickJsSession;

package/dist/runner/index.d.cts

@@ -1,82 +1,13 @@
-import { t as QuickJsExecutorOptions } from "../types-BB8mb_-T.cjs";
-import { QuickJSWASMModule } from "quickjs-emscripten";
-
-//#region ../core/src/types.d.ts
-
-/**
- * Stable error codes returned by executors and wrapped tool calls.
- */
-type ExecuteErrorCode = "timeout" | "memory_limit" | "validation_error" | "tool_error" | "runtime_error" | "serialization_error" | "internal_error";
-/**
- * Structured execution failure returned in {@link ExecuteResult}.
- */
-interface ExecuteError {
-  /** Machine-readable error category. */
-  code: ExecuteErrorCode;
-  /** Human-readable failure message. */
-  message: string;
-}
-/**
- * Structured result returned by every executor invocation.
- */
-type ExecuteResult<T = unknown> = {
-  durationMs: number;
-  logs: string[];
-  ok: true;
-  result: T;
-} | {
-  durationMs: number;
-  error: ExecuteError;
-  logs: string[];
-  ok: false;
-};
-//#endregion
-//#region ../core/src/runner.d.ts
-/**
- * Transport-safe metadata for one exposed tool.
- */
-interface ProviderToolManifest {
-  description?: string;
-  originalName: string;
-  safeName: string;
-}
 /**
- * Namespace manifest shared with runner implementations.
+ * @packageDocumentation
+ * Public TypeScript declarations for this package entrypoint.
  */
-interface ProviderManifest {
-  name: string;
-  tools: Record<string, ProviderToolManifest>;
-  types: string;
-}
-/**
- * Execution limits forwarded to runner implementations.
- */
-interface ExecutorRuntimeOptions {
-  maxLogChars?: number;
-  maxLogLines?: number;
-  memoryLimitBytes?: number;
-  timeoutMs?: number;
-}
-/**
- * Tool invocation request emitted from a runner.
- */
-interface ToolCall {
-  input: unknown;
-  providerName: string;
-  safeToolName: string;
-}
-/**
- * Trusted host response to a tool invocation request.
- */
-type ToolCallResult = {
-  ok: true;
-  result: unknown;
-} | {
-  error: ExecuteError;
-  ok: false;
-};
-//#endregion
+import { t as QuickJsExecutorOptions } from "../types-CVE2n2LY.cjs";
+import { ExecuteResult, ExecutorRuntimeOptions, ProviderManifest, ToolCall, ToolCallResult } from "@execbox/core";
+import { QuickJSWASMModule } from "quickjs-emscripten";
+
 //#region src/runner/index.d.ts
+
 /**
  * Transport-neutral host tool call emitted from a QuickJS session.
  */
@@ -103,5 +34,5 @@ type QuickJsSessionOptions = QuickJsExecutorOptions & ExecutorRuntimeOptions & {
  */
 declare function runQuickJsSession(request: QuickJsSessionRequest, options?: QuickJsSessionOptions): Promise<ExecuteResult>;
 //#endregion
-export { QuickJsSessionOptions, QuickJsSessionRequest, QuickJsSessionToolCall, runQuickJsSession };
+export { type QuickJsExecutorOptions, QuickJsSessionOptions, QuickJsSessionRequest, QuickJsSessionToolCall, runQuickJsSession };
 //# sourceMappingURL=index.d.cts.map

package/dist/runner/index.d.cts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.cts","names":[],"sources":["../../../core/src/types.ts","../../../core/src/runner.ts","../../src/runner/index.ts"],"sourcesContent":[],"mappings":";;;;;;ACeA;AASA;AASiB,KDlBL,gBAAA,GCkB2B,SAAA,GAAA,cAAA,GAAA,kBAAA,GAAA,YAAA,GAAA,eAAA,GAAA,qBAAA,GAAA,gBAAA;AAiBvC;AASA;;UDhCiB,YAAA;;EEuBL,IAAA,EFrBJ,gBEqBI;EAKK;EACG,OAAA,EAAA,MAAA;;;;;AAIP,KFvBD,aEuBC,CAAA,IAAA,OAAA,CAAA,GAAA;EACF,UAAA,EAAA,MAAA;EAAW,IAAA,EAAA,MAAA,EAAA;EAMV,EAAA,EAAA,IAAA;EAAwB,MAAA,EFzBtB,CEyBsB;CAClC,GAAA;EACW,UAAA,EAAA,MAAA;EAAiB,KAAA,EFvBjB,YEuBiB;EA4TR,IAAA,EAAA,MAAA,EAAA;EACX,EAAA,EAAA,KAAA;CACA;;;;;;AFpXC,UCAK,oBAAA,CDAW;EAYX,WAAA,CAAA,EAAA,MAAY;EAUjB,YAAA,EAAA,MAAa;;;;ACtBzB;AASA;AASiB,UATA,gBAAA,CASsB;EAiBtB,IAAA,EAAA,MAAQ;EASb,KAAA,EAjCH,MAiCG,CAAA,MAAc,EAjCF,oBAuCC,CAAA;;;;ACfzB;AAKA;AACoB,UDvBH,sBAAA,CCuBG;EAEC,WAAA,CAAA,EAAA,MAAA;EAAqB,WAAA,CAAA,EAAA,MAAA;EAAR,gBAAA,CAAA,EAAA,MAAA;EAA0B,SAAA,CAAA,EAAA,MAAA;;;AAuU5D;;AAEW,UDjVM,QAAA,CCiVN;EACA,KAAA,EAAA,OAAA;EAAR,YAAA,EAAA,MAAA;EAAO,YAAA,EAAA,MAAA;;;;;KDzUE,cAAA;;;;SAMC;;;;;;ADlDb;AAYA;AAUY,KEaA,sBAAA,GAAyB,QFJxB;;;;AC/BI,UCwCA,qBAAA,CDxCoB;EASpB,eAAA,CAAA,ECgCG,eD9BI;EAOP,IAAA,EAAA,MAAA;EAiBA,UAAA,EAAQ,CAAA,IAAA,ECQJ,QDRI,EAAA,GCQS,ODRT,CCQiB,cDRjB,CAAA,GCQmC,cDRnC;EASb,SAAA,CAAA,EAAA,GAAA,GAAc,IAAA;aCCb;WACF;;AAXX;AAKA;;AAGqB,KAST,qBAAA,GAAwB,sBATf,GAUnB,sBAVmB,GAAA;EAAqB,MAAA,CAAA,EAW7B,iBAX6B;CAAR;;;;AAGZ,iBAoUA,iBAAA,CApUA,OAAA,EAqUX,qBArUW,EAAA,OAAA,CAAA,EAsUX,qBAtUW,CAAA,EAuUnB,OAvUmB,CAuUX,aAvUW,CAAA"}
+{"version":3,"file":"index.d.cts","names":[],"sources":["../../src/runner/index.ts"],"sourcesContent":[],"mappings":";;;;;;;;;;;AA0DA,CAAA,CAAA,CAAA,SAAA,CAAA,OAAA,CAAA,IAAA,CAAA,IAAA,CAAA,IAAA,CAAA,OAAA,CAAA,IAAA,CAAA,CAAA,CAAA,OAAA,CAAA,OAAA;AAKA,CAAA,CAAA;AACoB,IAAA,CANR,sBAAA,CAAA,CAAA,CAAyB,QAMjB;;;;AAEwC,SAAA,CAH3C,qBAAA,CAG2C;EAE/C,eAAA,CAAA,CAAA,CAJO,eAIP;EACF,IAAA,CAAA,CAAA,MAAA;EAAW,UAAA,CAAA,CAAA,CAAA,IAAA,CAAA,CAHD,QAGC,CAAA,CAAA,CAAA,CAAA,CAHY,OAGZ,CAHoB,cAGpB,CAAA,CAAA,CAAA,CAHsC,cAGtC;EAMV,SAAA,CAAA,CAAA,CAAA,CAAA,CAAA,CAAA,CAAA,CAAA,CAAA,IAAA;EAAwB,SAAA,CAAA,CAPvB,gBAOuB,CAAA,CAAA;EAClC,MAAA,CAAA,CAAA,CAPS,WAOT;;;AA6TF,CAAA,CAAA,CAAA,OAAA,CAAA,WAAA,CAAA,GAAA,CAAA,SAAA,CAAA,MAAA,CAAA,OAAA,CAAA,OAAA;;AAEW,IAAA,CAhUC,qBAAA,CAAA,CAAA,CAAwB,sBAgUzB,CAAA,CAAA,CA/TT,sBA+TS,CAAA,CAAA,CAAA;EACA,MAAA,CAAA,CAAA,CA/TE,iBA+TF;CAAR;;;;iBAHmB,iBAAA,UACX,iCACA,wBACR,QAAQ"}

package/dist/runner/index.d.ts

@@ -1,82 +1,13 @@
-import { t as QuickJsExecutorOptions } from "../types-D7uau0GM.js";
-import { QuickJSWASMModule } from "quickjs-emscripten";
-
-//#region ../core/src/types.d.ts
-
-/**
- * Stable error codes returned by executors and wrapped tool calls.
- */
-type ExecuteErrorCode = "timeout" | "memory_limit" | "validation_error" | "tool_error" | "runtime_error" | "serialization_error" | "internal_error";
-/**
- * Structured execution failure returned in {@link ExecuteResult}.
- */
-interface ExecuteError {
-  /** Machine-readable error category. */
-  code: ExecuteErrorCode;
-  /** Human-readable failure message. */
-  message: string;
-}
-/**
- * Structured result returned by every executor invocation.
- */
-type ExecuteResult<T = unknown> = {
-  durationMs: number;
-  logs: string[];
-  ok: true;
-  result: T;
-} | {
-  durationMs: number;
-  error: ExecuteError;
-  logs: string[];
-  ok: false;
-};
-//#endregion
-//#region ../core/src/runner.d.ts
-/**
- * Transport-safe metadata for one exposed tool.
- */
-interface ProviderToolManifest {
-  description?: string;
-  originalName: string;
-  safeName: string;
-}
 /**
- * Namespace manifest shared with runner implementations.
+ * @packageDocumentation
+ * Public TypeScript declarations for this package entrypoint.
  */
-interface ProviderManifest {
-  name: string;
-  tools: Record<string, ProviderToolManifest>;
-  types: string;
-}
-/**
- * Execution limits forwarded to runner implementations.
- */
-interface ExecutorRuntimeOptions {
-  maxLogChars?: number;
-  maxLogLines?: number;
-  memoryLimitBytes?: number;
-  timeoutMs?: number;
-}
-/**
- * Tool invocation request emitted from a runner.
- */
-interface ToolCall {
-  input: unknown;
-  providerName: string;
-  safeToolName: string;
-}
-/**
- * Trusted host response to a tool invocation request.
- */
-type ToolCallResult = {
-  ok: true;
-  result: unknown;
-} | {
-  error: ExecuteError;
-  ok: false;
-};
-//#endregion
+import { t as QuickJsExecutorOptions } from "../types-BXi8Lqtk.js";
+import { QuickJSWASMModule } from "quickjs-emscripten";
+import { ExecuteResult, ExecutorRuntimeOptions, ProviderManifest, ToolCall, ToolCallResult } from "@execbox/core";
+
 //#region src/runner/index.d.ts
+
 /**
  * Transport-neutral host tool call emitted from a QuickJS session.
  */
@@ -103,5 +34,5 @@ type QuickJsSessionOptions = QuickJsExecutorOptions & ExecutorRuntimeOptions & {
  */
 declare function runQuickJsSession(request: QuickJsSessionRequest, options?: QuickJsSessionOptions): Promise<ExecuteResult>;
 //#endregion
-export { QuickJsSessionOptions, QuickJsSessionRequest, QuickJsSessionToolCall, runQuickJsSession };
+export { type QuickJsExecutorOptions, QuickJsSessionOptions, QuickJsSessionRequest, QuickJsSessionToolCall, runQuickJsSession };
 //# sourceMappingURL=index.d.ts.map

package/dist/runner/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","names":[],"sources":["../../../core/src/types.ts","../../../core/src/runner.ts","../../src/runner/index.ts"],"sourcesContent":[],"mappings":";;;;;;ACeA;AASA;AASiB,KDlBL,gBAAA,GCkB2B,SAAA,GAAA,cAAA,GAAA,kBAAA,GAAA,YAAA,GAAA,eAAA,GAAA,qBAAA,GAAA,gBAAA;AAiBvC;AASA;;UDhCiB,YAAA;;EEuBL,IAAA,EFrBJ,gBEqBI;EAKK;EACG,OAAA,EAAA,MAAA;;;;;AAIP,KFvBD,aEuBC,CAAA,IAAA,OAAA,CAAA,GAAA;EACF,UAAA,EAAA,MAAA;EAAW,IAAA,EAAA,MAAA,EAAA;EAMV,EAAA,EAAA,IAAA;EAAwB,MAAA,EFzBtB,CEyBsB;CAClC,GAAA;EACW,UAAA,EAAA,MAAA;EAAiB,KAAA,EFvBjB,YEuBiB;EA4TR,IAAA,EAAA,MAAA,EAAA;EACX,EAAA,EAAA,KAAA;CACA;;;;;;AFpXC,UCAK,oBAAA,CDAW;EAYX,WAAA,CAAA,EAAA,MAAY;EAUjB,YAAA,EAAA,MAAa;;;;ACtBzB;AASA;AASiB,UATA,gBAAA,CASsB;EAiBtB,IAAA,EAAA,MAAQ;EASb,KAAA,EAjCH,MAiCG,CAAA,MAAc,EAjCF,oBAuCC,CAAA;;;;ACfzB;AAKA;AACoB,UDvBH,sBAAA,CCuBG;EAEC,WAAA,CAAA,EAAA,MAAA;EAAqB,WAAA,CAAA,EAAA,MAAA;EAAR,gBAAA,CAAA,EAAA,MAAA;EAA0B,SAAA,CAAA,EAAA,MAAA;;;AAuU5D;;AAEW,UDjVM,QAAA,CCiVN;EACA,KAAA,EAAA,OAAA;EAAR,YAAA,EAAA,MAAA;EAAO,YAAA,EAAA,MAAA;;;;;KDzUE,cAAA;;;;SAMC;;;;;;ADlDb;AAYA;AAUY,KEaA,sBAAA,GAAyB,QFJxB;;;;AC/BI,UCwCA,qBAAA,CDxCoB;EASpB,eAAA,CAAA,ECgCG,eD9BI;EAOP,IAAA,EAAA,MAAA;EAiBA,UAAA,EAAQ,CAAA,IAAA,ECQJ,QDRI,EAAA,GCQS,ODRT,CCQiB,cDRjB,CAAA,GCQmC,cDRnC;EASb,SAAA,CAAA,EAAA,GAAA,GAAc,IAAA;aCCb;WACF;;AAXX;AAKA;;AAGqB,KAST,qBAAA,GAAwB,sBATf,GAUnB,sBAVmB,GAAA;EAAqB,MAAA,CAAA,EAW7B,iBAX6B;CAAR;;;;AAGZ,iBAoUA,iBAAA,CApUA,OAAA,EAqUX,qBArUW,EAAA,OAAA,CAAA,EAsUX,qBAtUW,CAAA,EAuUnB,OAvUmB,CAuUX,aAvUW,CAAA"}
+{"version":3,"file":"index.d.ts","names":[],"sources":["../../src/runner/index.ts"],"sourcesContent":[],"mappings":";;;;;;;;;;;AA0DA,CAAA,CAAA,CAAA,SAAA,CAAA,OAAA,CAAA,IAAA,CAAA,IAAA,CAAA,IAAA,CAAA,OAAA,CAAA,IAAA,CAAA,CAAA,CAAA,OAAA,CAAA,OAAA;AAKA,CAAA,CAAA;AACoB,IAAA,CANR,sBAAA,CAAA,CAAA,CAAyB,QAMjB;;;;AAEwC,SAAA,CAH3C,qBAAA,CAG2C;EAE/C,eAAA,CAAA,CAAA,CAJO,eAIP;EACF,IAAA,CAAA,CAAA,MAAA;EAAW,UAAA,CAAA,CAAA,CAAA,IAAA,CAAA,CAHD,QAGC,CAAA,CAAA,CAAA,CAAA,CAHY,OAGZ,CAHoB,cAGpB,CAAA,CAAA,CAAA,CAHsC,cAGtC;EAMV,SAAA,CAAA,CAAA,CAAA,CAAA,CAAA,CAAA,CAAA,CAAA,CAAA,IAAA;EAAwB,SAAA,CAAA,CAPvB,gBAOuB,CAAA,CAAA;EAClC,MAAA,CAAA,CAAA,CAPS,WAOT;;;AA6TF,CAAA,CAAA,CAAA,OAAA,CAAA,WAAA,CAAA,GAAA,CAAA,SAAA,CAAA,MAAA,CAAA,OAAA,CAAA,OAAA;;AAEW,IAAA,CAhUC,qBAAA,CAAA,CAAA,CAAwB,sBAgUzB,CAAA,CAAA,CA/TT,sBA+TS,CAAA,CAAA,CAAA;EACA,MAAA,CAAA,CAAA,CA/TE,iBA+TF;CAAR;;;;iBAHmB,iBAAA,UACX,iCACA,wBACR,QAAQ"}

package/dist/runner/index.js

@@ -1,3 +1,3 @@
-import { t as runQuickJsSession } from "../runner-B4UG88h1.js";
+import { t as runQuickJsSession } from "../runner-CVaY4RVQ.js";
 
 export { runQuickJsSession };

package/dist/runner/protocolEndpoint.cjs

@@ -1,4 +1,4 @@
-const require_runner = require('../runner-DhOZH9xz.cjs');
+const require_runner = require('../runner-BqkDnP0t.cjs');
 let node_crypto = require("node:crypto");
 
 //#region ../protocol/src/messages.ts
@@ -39,6 +39,10 @@ function isDispatcherMessage(value) {
 //#endregion
 //#region src/runner/protocolEndpoint.ts
 /**
+* @packageDocumentation
+* Public API for the `@execbox/quickjs/runner/protocol-endpoint` entrypoint.
+*/
+/**
 * Attaches the shared QuickJS protocol loop to a worker/process messaging port.
 */
 function attachQuickJsProtocolEndpoint(port) {

package/dist/runner/protocolEndpoint.cjs.map

@@ -1 +1 @@
-{"version":3,"file":"protocolEndpoint.cjs","names":["activeAbortController: AbortController | undefined","activeExecutionId: string | undefined","runQuickJsSession"],"sources":["../../../protocol/src/messages.ts","../../src/runner/protocolEndpoint.ts"],"sourcesContent":["import type {\n  ExecuteResult,\n  ExecutorRuntimeOptions,\n  ProviderManifest,\n  ToolCall,\n  ToolCallResult,\n} from \"@execbox/core\";\n\nfunction isRecord(value: unknown): value is Record<string, unknown> {\n  return typeof value === \"object\" && value !== null;\n}\n\nfunction isFiniteNumber(value: unknown): value is number {\n  return typeof value === \"number\" && Number.isFinite(value);\n}\n\nfunction isRuntimeOptions(value: unknown): value is ExecutorRuntimeOptions {\n  if (!isRecord(value)) {\n    return false;\n  }\n\n  return (\n    isFiniteNumber(value.maxLogChars) &&\n    isFiniteNumber(value.maxLogLines) &&\n    isFiniteNumber(value.memoryLimitBytes) &&\n    isFiniteNumber(value.timeoutMs)\n  );\n}\n\nfunction isProviderManifest(value: unknown): value is ProviderManifest {\n  if (!isRecord(value) || typeof value.name !== \"string\") {\n    return false;\n  }\n\n  if (!isRecord(value.tools) || typeof value.types !== \"string\") {\n    return false;\n  }\n\n  return Object.values(value.tools).every(\n    (tool) =>\n      isRecord(tool) &&\n      typeof tool.originalName === \"string\" &&\n      typeof tool.safeName === \"string\" &&\n      (tool.description === undefined || typeof tool.description === \"string\"),\n  );\n}\n\nfunction isExecuteError(\n  value: unknown,\n): value is { code: string; message: string } {\n  return (\n    isRecord(value) &&\n    typeof value.code === \"string\" &&\n    typeof value.message === \"string\"\n  );\n}\n\nfunction isDonePayload(value: unknown): value is DoneMessage {\n  if (!isRecord(value) || !isFiniteNumber(value.durationMs)) {\n    return false;\n  }\n\n  if (\n    !Array.isArray(value.logs) ||\n    !value.logs.every((log) => typeof log === \"string\")\n  ) {\n    return false;\n  }\n\n  if (typeof value.ok !== \"boolean\") {\n    return false;\n  }\n\n  return value.ok ? true : isExecuteError(value.error);\n}\n\n/**\n * Message sent from dispatcher to runner to start one execution session.\n */\nexport interface ExecuteMessage {\n  code: string;\n  id: string;\n  options: ExecutorRuntimeOptions;\n  providers: ProviderManifest[];\n  type: \"execute\";\n}\n\n/**\n * Message sent from dispatcher to request prompt cancellation.\n */\nexport interface CancelMessage {\n  id: string;\n  type: \"cancel\";\n}\n\n/**\n * Message sent from a runner when guest code invokes a host tool.\n */\nexport interface ToolCallMessage extends ToolCall {\n  callId: string;\n  type: \"tool_call\";\n}\n\n/**\n * Message carrying a trusted host tool result back to the runner.\n */\nexport type ToolResultMessage = {\n  callId: string;\n  type: \"tool_result\";\n} & ToolCallResult;\n\n/**\n * Message indicating the runner has finished bootstrapping guest execution timing.\n */\nexport interface StartedMessage {\n  id: string;\n  type: \"started\";\n}\n\n/**\n * Final successful execution result returned by a runner.\n *\n * Node IPC can omit `undefined` fields during serialization, so `result`\n * remains optional at the protocol boundary and is normalized by the host.\n */\nexport type DoneSuccessMessage<T = unknown> = {\n  durationMs: number;\n  id: string;\n  logs: string[];\n  ok: true;\n  result?: T;\n  type: \"done\";\n};\n\n/**\n * Final failed execution result returned by a runner.\n */\nexport type DoneFailureMessage = {\n  id: string;\n  type: \"done\";\n} & Extract<ExecuteResult, { ok: false }>;\n\n/**\n * Final execution result returned by a runner.\n */\nexport type DoneMessage = DoneSuccessMessage | DoneFailureMessage;\n\n/**\n * Messages accepted by a runner transport endpoint.\n */\nexport type DispatcherMessage =\n  | CancelMessage\n  | ExecuteMessage\n  | ToolResultMessage;\n\n/**\n * Messages emitted by a runner transport endpoint.\n */\nexport type RunnerMessage = DoneMessage | StartedMessage | ToolCallMessage;\n\n/**\n * Returns whether an unknown value is a dispatcher-to-runner message.\n */\nexport function isDispatcherMessage(\n  value: unknown,\n): value is DispatcherMessage {\n  if (!isRecord(value) || typeof value.type !== \"string\") {\n    return false;\n  }\n\n  switch (value.type) {\n    case \"cancel\":\n      return typeof value.id === \"string\";\n    case \"execute\":\n      return (\n        typeof value.code === \"string\" &&\n        typeof value.id === \"string\" &&\n        isRuntimeOptions(value.options) &&\n        Array.isArray(value.providers) &&\n        value.providers.every(isProviderManifest)\n      );\n    case \"tool_result\":\n      if (typeof value.callId !== \"string\" || typeof value.ok !== \"boolean\") {\n        return false;\n      }\n\n      if (value.ok) {\n        return \"result\" in value;\n      }\n\n      return isExecuteError(value.error);\n    default:\n      return false;\n  }\n}\n\n/**\n * Returns whether an unknown value is a runner-to-dispatcher message.\n */\nexport function isRunnerMessage(value: unknown): value is RunnerMessage {\n  if (!isRecord(value) || typeof value.type !== \"string\") {\n    return false;\n  }\n\n  switch (value.type) {\n    case \"started\":\n      return typeof value.id === \"string\";\n    case \"tool_call\":\n      return (\n        typeof value.callId === \"string\" &&\n        typeof value.providerName === \"string\" &&\n        typeof value.safeToolName === \"string\" &&\n        \"input\" in value\n      );\n    case \"done\":\n      return typeof value.id === \"string\" && isDonePayload(value);\n    default:\n      return false;\n  }\n}\n","import { randomUUID } from \"node:crypto\";\n\nimport type {\n  DispatcherMessage,\n  ExecuteMessage,\n  RunnerMessage,\n  ToolCallResult,\n} from \"@execbox/protocol\";\nimport { isDispatcherMessage } from \"../../../protocol/src/messages.ts\";\n\nimport { runQuickJsSession } from \"./index.ts\";\n\n/**\n * Minimal worker/process-side port used by the shared QuickJS protocol endpoint.\n */\nexport interface QuickJsProtocolPort {\n  onMessage(handler: (message: DispatcherMessage) => void): void | (() => void);\n  send(message: RunnerMessage): void;\n}\n\n/**\n * Attaches the shared QuickJS protocol loop to a worker/process messaging port.\n */\nexport function attachQuickJsProtocolEndpoint(\n  port: QuickJsProtocolPort,\n): () => void {\n  const pendingToolCalls = new Map<string, (result: ToolCallResult) => void>();\n  let activeAbortController: AbortController | undefined;\n  let activeExecutionId: string | undefined;\n\n  async function startExecution(message: ExecuteMessage): Promise<void> {\n    if (activeExecutionId) {\n      port.send({\n        durationMs: 0,\n        error: {\n          code: \"internal_error\",\n          message: \"QuickJS endpoint already has an active execution\",\n        },\n        id: message.id,\n        logs: [],\n        ok: false,\n        type: \"done\",\n      });\n      return;\n    }\n\n    const abortController = new AbortController();\n    activeAbortController = abortController;\n    activeExecutionId = message.id;\n\n    try {\n      const result = await runQuickJsSession(\n        {\n          abortController,\n          code: message.code,\n          onStarted: () => {\n            port.send({\n              id: message.id,\n              type: \"started\",\n            });\n          },\n          onToolCall: (call) =>\n            new Promise<ToolCallResult>((resolve) => {\n              const callId = randomUUID();\n              pendingToolCalls.set(callId, resolve);\n              port.send({\n                ...call,\n                callId,\n                type: \"tool_call\",\n              });\n            }),\n          providers: message.providers,\n        },\n        message.options,\n      );\n\n      port.send({\n        ...result,\n        id: message.id,\n        type: \"done\",\n      });\n    } catch (error) {\n      port.send({\n        durationMs: 0,\n        error: {\n          code: \"internal_error\",\n          message: error instanceof Error ? error.message : String(error),\n        },\n        id: message.id,\n        logs: [],\n        ok: false,\n        type: \"done\",\n      });\n    } finally {\n      pendingToolCalls.clear();\n      activeAbortController = undefined;\n      activeExecutionId = undefined;\n    }\n  }\n\n  const maybeDetach = port.onMessage((message: DispatcherMessage) => {\n    if (!isDispatcherMessage(message)) {\n      return;\n    }\n\n    switch (message.type) {\n      case \"cancel\":\n        if (message.id === activeExecutionId) {\n          activeAbortController?.abort();\n        }\n        break;\n      case \"execute\":\n        void startExecution(message);\n        break;\n      case \"tool_result\": {\n        const resolve = pendingToolCalls.get(message.callId);\n        pendingToolCalls.delete(message.callId);\n        resolve?.(message);\n        break;\n      }\n    }\n  });\n\n  return () => {\n    if (typeof maybeDetach === \"function\") {\n      maybeDetach();\n    }\n    pendingToolCalls.clear();\n    activeAbortController?.abort();\n    activeAbortController = undefined;\n    activeExecutionId = undefined;\n  };\n}\n"],"mappings":";;;;AAQA,SAAS,SAAS,OAAkD;AAClE,QAAO,OAAO,UAAU,YAAY,UAAU;;AAGhD,SAAS,eAAe,OAAiC;AACvD,QAAO,OAAO,UAAU,YAAY,OAAO,SAAS,MAAM;;AAG5D,SAAS,iBAAiB,OAAiD;AACzE,KAAI,CAAC,SAAS,MAAM,CAClB,QAAO;AAGT,QACE,eAAe,MAAM,YAAY,IACjC,eAAe,MAAM,YAAY,IACjC,eAAe,MAAM,iBAAiB,IACtC,eAAe,MAAM,UAAU;;AAInC,SAAS,mBAAmB,OAA2C;AACrE,KAAI,CAAC,SAAS,MAAM,IAAI,OAAO,MAAM,SAAS,SAC5C,QAAO;AAGT,KAAI,CAAC,SAAS,MAAM,MAAM,IAAI,OAAO,MAAM,UAAU,SACnD,QAAO;AAGT,QAAO,OAAO,OAAO,MAAM,MAAM,CAAC,OAC/B,SACC,SAAS,KAAK,IACd,OAAO,KAAK,iBAAiB,YAC7B,OAAO,KAAK,aAAa,aACxB,KAAK,gBAAgB,UAAa,OAAO,KAAK,gBAAgB,UAClE;;AAGH,SAAS,eACP,OAC4C;AAC5C,QACE,SAAS,MAAM,IACf,OAAO,MAAM,SAAS,YACtB,OAAO,MAAM,YAAY;;;;;AA8G7B,SAAgB,oBACd,OAC4B;AAC5B,KAAI,CAAC,SAAS,MAAM,IAAI,OAAO,MAAM,SAAS,SAC5C,QAAO;AAGT,SAAQ,MAAM,MAAd;EACE,KAAK,SACH,QAAO,OAAO,MAAM,OAAO;EAC7B,KAAK,UACH,QACE,OAAO,MAAM,SAAS,YACtB,OAAO,MAAM,OAAO,YACpB,iBAAiB,MAAM,QAAQ,IAC/B,MAAM,QAAQ,MAAM,UAAU,IAC9B,MAAM,UAAU,MAAM,mBAAmB;EAE7C,KAAK;AACH,OAAI,OAAO,MAAM,WAAW,YAAY,OAAO,MAAM,OAAO,UAC1D,QAAO;AAGT,OAAI,MAAM,GACR,QAAO,YAAY;AAGrB,UAAO,eAAe,MAAM,MAAM;EACpC,QACE,QAAO;;;;;;;;;ACzKb,SAAgB,8BACd,MACY;CACZ,MAAM,mCAAmB,IAAI,KAA+C;CAC5E,IAAIA;CACJ,IAAIC;CAEJ,eAAe,eAAe,SAAwC;AACpE,MAAI,mBAAmB;AACrB,QAAK,KAAK;IACR,YAAY;IACZ,OAAO;KACL,MAAM;KACN,SAAS;KACV;IACD,IAAI,QAAQ;IACZ,MAAM,EAAE;IACR,IAAI;IACJ,MAAM;IACP,CAAC;AACF;;EAGF,MAAM,kBAAkB,IAAI,iBAAiB;AAC7C,0BAAwB;AACxB,sBAAoB,QAAQ;AAE5B,MAAI;GACF,MAAM,SAAS,MAAMC,iCACnB;IACE;IACA,MAAM,QAAQ;IACd,iBAAiB;AACf,UAAK,KAAK;MACR,IAAI,QAAQ;MACZ,MAAM;MACP,CAAC;;IAEJ,aAAa,SACX,IAAI,SAAyB,YAAY;KACvC,MAAM,sCAAqB;AAC3B,sBAAiB,IAAI,QAAQ,QAAQ;AACrC,UAAK,KAAK;MACR,GAAG;MACH;MACA,MAAM;MACP,CAAC;MACF;IACJ,WAAW,QAAQ;IACpB,EACD,QAAQ,QACT;AAED,QAAK,KAAK;IACR,GAAG;IACH,IAAI,QAAQ;IACZ,MAAM;IACP,CAAC;WACK,OAAO;AACd,QAAK,KAAK;IACR,YAAY;IACZ,OAAO;KACL,MAAM;KACN,SAAS,iBAAiB,QAAQ,MAAM,UAAU,OAAO,MAAM;KAChE;IACD,IAAI,QAAQ;IACZ,MAAM,EAAE;IACR,IAAI;IACJ,MAAM;IACP,CAAC;YACM;AACR,oBAAiB,OAAO;AACxB,2BAAwB;AACxB,uBAAoB;;;CAIxB,MAAM,cAAc,KAAK,WAAW,YAA+B;AACjE,MAAI,CAAC,oBAAoB,QAAQ,CAC/B;AAGF,UAAQ,QAAQ,MAAhB;GACE,KAAK;AACH,QAAI,QAAQ,OAAO,kBACjB,wBAAuB,OAAO;AAEhC;GACF,KAAK;AACH,IAAK,eAAe,QAAQ;AAC5B;GACF,KAAK,eAAe;IAClB,MAAM,UAAU,iBAAiB,IAAI,QAAQ,OAAO;AACpD,qBAAiB,OAAO,QAAQ,OAAO;AACvC,cAAU,QAAQ;AAClB;;;GAGJ;AAEF,cAAa;AACX,MAAI,OAAO,gBAAgB,WACzB,cAAa;AAEf,mBAAiB,OAAO;AACxB,yBAAuB,OAAO;AAC9B,0BAAwB;AACxB,sBAAoB"}
+{"version":3,"file":"protocolEndpoint.cjs","names":["activeAbortController: AbortController | undefined","activeExecutionId: string | undefined","runQuickJsSession"],"sources":["../../../protocol/src/messages.ts","../../src/runner/protocolEndpoint.ts"],"sourcesContent":["import type {\n  ExecuteResult,\n  ExecutorRuntimeOptions,\n  ProviderManifest,\n  ToolCall,\n  ToolCallResult,\n} from \"@execbox/core\";\n\nfunction isRecord(value: unknown): value is Record<string, unknown> {\n  return typeof value === \"object\" && value !== null;\n}\n\nfunction isFiniteNumber(value: unknown): value is number {\n  return typeof value === \"number\" && Number.isFinite(value);\n}\n\nfunction isRuntimeOptions(value: unknown): value is ExecutorRuntimeOptions {\n  if (!isRecord(value)) {\n    return false;\n  }\n\n  return (\n    isFiniteNumber(value.maxLogChars) &&\n    isFiniteNumber(value.maxLogLines) &&\n    isFiniteNumber(value.memoryLimitBytes) &&\n    isFiniteNumber(value.timeoutMs)\n  );\n}\n\nfunction isProviderManifest(value: unknown): value is ProviderManifest {\n  if (!isRecord(value) || typeof value.name !== \"string\") {\n    return false;\n  }\n\n  if (!isRecord(value.tools) || typeof value.types !== \"string\") {\n    return false;\n  }\n\n  return Object.values(value.tools).every(\n    (tool) =>\n      isRecord(tool) &&\n      typeof tool.originalName === \"string\" &&\n      typeof tool.safeName === \"string\" &&\n      (tool.description === undefined || typeof tool.description === \"string\"),\n  );\n}\n\nfunction isExecuteError(\n  value: unknown,\n): value is { code: string; message: string } {\n  return (\n    isRecord(value) &&\n    typeof value.code === \"string\" &&\n    typeof value.message === \"string\"\n  );\n}\n\nfunction isDonePayload(value: unknown): value is DoneMessage {\n  if (!isRecord(value) || !isFiniteNumber(value.durationMs)) {\n    return false;\n  }\n\n  if (\n    !Array.isArray(value.logs) ||\n    !value.logs.every((log) => typeof log === \"string\")\n  ) {\n    return false;\n  }\n\n  if (typeof value.ok !== \"boolean\") {\n    return false;\n  }\n\n  return value.ok ? true : isExecuteError(value.error);\n}\n\n/**\n * Message sent from dispatcher to runner to start one execution session.\n */\nexport interface ExecuteMessage {\n  code: string;\n  id: string;\n  options: ExecutorRuntimeOptions;\n  providers: ProviderManifest[];\n  type: \"execute\";\n}\n\n/**\n * Message sent from dispatcher to request prompt cancellation.\n */\nexport interface CancelMessage {\n  id: string;\n  type: \"cancel\";\n}\n\n/**\n * Message sent from a runner when guest code invokes a host tool.\n */\nexport interface ToolCallMessage extends ToolCall {\n  callId: string;\n  type: \"tool_call\";\n}\n\n/**\n * Message carrying a trusted host tool result back to the runner.\n */\nexport type ToolResultMessage = {\n  callId: string;\n  type: \"tool_result\";\n} & ToolCallResult;\n\n/**\n * Message indicating the runner has finished bootstrapping guest execution timing.\n */\nexport interface StartedMessage {\n  id: string;\n  type: \"started\";\n}\n\n/**\n * Final successful execution result returned by a runner.\n *\n * Node IPC can omit `undefined` fields during serialization, so `result`\n * remains optional at the protocol boundary and is normalized by the host.\n */\nexport type DoneSuccessMessage<T = unknown> = {\n  durationMs: number;\n  id: string;\n  logs: string[];\n  ok: true;\n  result?: T;\n  type: \"done\";\n};\n\n/**\n * Final failed execution result returned by a runner.\n */\nexport type DoneFailureMessage = {\n  id: string;\n  type: \"done\";\n} & Extract<ExecuteResult, { ok: false }>;\n\n/**\n * Final execution result returned by a runner.\n */\nexport type DoneMessage = DoneSuccessMessage | DoneFailureMessage;\n\n/**\n * Messages accepted by a runner transport endpoint.\n */\nexport type DispatcherMessage =\n  | CancelMessage\n  | ExecuteMessage\n  | ToolResultMessage;\n\n/**\n * Messages emitted by a runner transport endpoint.\n */\nexport type RunnerMessage = DoneMessage | StartedMessage | ToolCallMessage;\n\n/**\n * Returns whether an unknown value is a dispatcher-to-runner message.\n */\nexport function isDispatcherMessage(\n  value: unknown,\n): value is DispatcherMessage {\n  if (!isRecord(value) || typeof value.type !== \"string\") {\n    return false;\n  }\n\n  switch (value.type) {\n    case \"cancel\":\n      return typeof value.id === \"string\";\n    case \"execute\":\n      return (\n        typeof value.code === \"string\" &&\n        typeof value.id === \"string\" &&\n        isRuntimeOptions(value.options) &&\n        Array.isArray(value.providers) &&\n        value.providers.every(isProviderManifest)\n      );\n    case \"tool_result\":\n      if (typeof value.callId !== \"string\" || typeof value.ok !== \"boolean\") {\n        return false;\n      }\n\n      if (value.ok) {\n        return \"result\" in value;\n      }\n\n      return isExecuteError(value.error);\n    default:\n      return false;\n  }\n}\n\n/**\n * Returns whether an unknown value is a runner-to-dispatcher message.\n */\nexport function isRunnerMessage(value: unknown): value is RunnerMessage {\n  if (!isRecord(value) || typeof value.type !== \"string\") {\n    return false;\n  }\n\n  switch (value.type) {\n    case \"started\":\n      return typeof value.id === \"string\";\n    case \"tool_call\":\n      return (\n        typeof value.callId === \"string\" &&\n        typeof value.providerName === \"string\" &&\n        typeof value.safeToolName === \"string\" &&\n        \"input\" in value\n      );\n    case \"done\":\n      return typeof value.id === \"string\" && isDonePayload(value);\n    default:\n      return false;\n  }\n}\n","/**\n * @packageDocumentation\n * Public API for the `@execbox/quickjs/runner/protocol-endpoint` entrypoint.\n */\nimport { randomUUID } from \"node:crypto\";\n\nimport type {\n  DispatcherMessage,\n  ExecuteMessage,\n  RunnerMessage,\n  ToolCallResult,\n} from \"@execbox/protocol\";\n// This entrypoint is executed directly from source in worker/process tests before\n// workspace packages are built, so its runtime validator must stay source-local.\nimport { isDispatcherMessage } from \"../../../protocol/src/messages.ts\";\n\nimport { runQuickJsSession } from \"./index.ts\";\n\n/**\n * Minimal worker/process-side port used by the shared QuickJS protocol endpoint.\n */\nexport interface QuickJsProtocolPort {\n  onMessage(handler: (message: DispatcherMessage) => void): void | (() => void);\n  send(message: RunnerMessage): void;\n}\n\n/**\n * Attaches the shared QuickJS protocol loop to a worker/process messaging port.\n */\nexport function attachQuickJsProtocolEndpoint(\n  port: QuickJsProtocolPort,\n): () => void {\n  const pendingToolCalls = new Map<string, (result: ToolCallResult) => void>();\n  let activeAbortController: AbortController | undefined;\n  let activeExecutionId: string | undefined;\n\n  async function startExecution(message: ExecuteMessage): Promise<void> {\n    if (activeExecutionId) {\n      port.send({\n        durationMs: 0,\n        error: {\n          code: \"internal_error\",\n          message: \"QuickJS endpoint already has an active execution\",\n        },\n        id: message.id,\n        logs: [],\n        ok: false,\n        type: \"done\",\n      });\n      return;\n    }\n\n    const abortController = new AbortController();\n    activeAbortController = abortController;\n    activeExecutionId = message.id;\n\n    try {\n      const result = await runQuickJsSession(\n        {\n          abortController,\n          code: message.code,\n          onStarted: () => {\n            port.send({\n              id: message.id,\n              type: \"started\",\n            });\n          },\n          onToolCall: (call) =>\n            new Promise<ToolCallResult>((resolve) => {\n              const callId = randomUUID();\n              pendingToolCalls.set(callId, resolve);\n              port.send({\n                ...call,\n                callId,\n                type: \"tool_call\",\n              });\n            }),\n          providers: message.providers,\n        },\n        message.options,\n      );\n\n      port.send({\n        ...result,\n        id: message.id,\n        type: \"done\",\n      });\n    } catch (error) {\n      port.send({\n        durationMs: 0,\n        error: {\n          code: \"internal_error\",\n          message: error instanceof Error ? error.message : String(error),\n        },\n        id: message.id,\n        logs: [],\n        ok: false,\n        type: \"done\",\n      });\n    } finally {\n      pendingToolCalls.clear();\n      activeAbortController = undefined;\n      activeExecutionId = undefined;\n    }\n  }\n\n  const maybeDetach = port.onMessage((message: DispatcherMessage) => {\n    if (!isDispatcherMessage(message)) {\n      return;\n    }\n\n    switch (message.type) {\n      case \"cancel\":\n        if (message.id === activeExecutionId) {\n          activeAbortController?.abort();\n        }\n        break;\n      case \"execute\":\n        void startExecution(message);\n        break;\n      case \"tool_result\": {\n        const resolve = pendingToolCalls.get(message.callId);\n        pendingToolCalls.delete(message.callId);\n        resolve?.(message);\n        break;\n      }\n    }\n  });\n\n  return () => {\n    if (typeof maybeDetach === \"function\") {\n      maybeDetach();\n    }\n    pendingToolCalls.clear();\n    activeAbortController?.abort();\n    activeAbortController = undefined;\n    activeExecutionId = undefined;\n  };\n}\n"],"mappings":";;;;AAQA,SAAS,SAAS,OAAkD;AAClE,QAAO,OAAO,UAAU,YAAY,UAAU;;AAGhD,SAAS,eAAe,OAAiC;AACvD,QAAO,OAAO,UAAU,YAAY,OAAO,SAAS,MAAM;;AAG5D,SAAS,iBAAiB,OAAiD;AACzE,KAAI,CAAC,SAAS,MAAM,CAClB,QAAO;AAGT,QACE,eAAe,MAAM,YAAY,IACjC,eAAe,MAAM,YAAY,IACjC,eAAe,MAAM,iBAAiB,IACtC,eAAe,MAAM,UAAU;;AAInC,SAAS,mBAAmB,OAA2C;AACrE,KAAI,CAAC,SAAS,MAAM,IAAI,OAAO,MAAM,SAAS,SAC5C,QAAO;AAGT,KAAI,CAAC,SAAS,MAAM,MAAM,IAAI,OAAO,MAAM,UAAU,SACnD,QAAO;AAGT,QAAO,OAAO,OAAO,MAAM,MAAM,CAAC,OAC/B,SACC,SAAS,KAAK,IACd,OAAO,KAAK,iBAAiB,YAC7B,OAAO,KAAK,aAAa,aACxB,KAAK,gBAAgB,UAAa,OAAO,KAAK,gBAAgB,UAClE;;AAGH,SAAS,eACP,OAC4C;AAC5C,QACE,SAAS,MAAM,IACf,OAAO,MAAM,SAAS,YACtB,OAAO,MAAM,YAAY;;;;;AA8G7B,SAAgB,oBACd,OAC4B;AAC5B,KAAI,CAAC,SAAS,MAAM,IAAI,OAAO,MAAM,SAAS,SAC5C,QAAO;AAGT,SAAQ,MAAM,MAAd;EACE,KAAK,SACH,QAAO,OAAO,MAAM,OAAO;EAC7B,KAAK,UACH,QACE,OAAO,MAAM,SAAS,YACtB,OAAO,MAAM,OAAO,YACpB,iBAAiB,MAAM,QAAQ,IAC/B,MAAM,QAAQ,MAAM,UAAU,IAC9B,MAAM,UAAU,MAAM,mBAAmB;EAE7C,KAAK;AACH,OAAI,OAAO,MAAM,WAAW,YAAY,OAAO,MAAM,OAAO,UAC1D,QAAO;AAGT,OAAI,MAAM,GACR,QAAO,YAAY;AAGrB,UAAO,eAAe,MAAM,MAAM;EACpC,QACE,QAAO;;;;;;;;;;;;;ACnKb,SAAgB,8BACd,MACY;CACZ,MAAM,mCAAmB,IAAI,KAA+C;CAC5E,IAAIA;CACJ,IAAIC;CAEJ,eAAe,eAAe,SAAwC;AACpE,MAAI,mBAAmB;AACrB,QAAK,KAAK;IACR,YAAY;IACZ,OAAO;KACL,MAAM;KACN,SAAS;KACV;IACD,IAAI,QAAQ;IACZ,MAAM,EAAE;IACR,IAAI;IACJ,MAAM;IACP,CAAC;AACF;;EAGF,MAAM,kBAAkB,IAAI,iBAAiB;AAC7C,0BAAwB;AACxB,sBAAoB,QAAQ;AAE5B,MAAI;GACF,MAAM,SAAS,MAAMC,iCACnB;IACE;IACA,MAAM,QAAQ;IACd,iBAAiB;AACf,UAAK,KAAK;MACR,IAAI,QAAQ;MACZ,MAAM;MACP,CAAC;;IAEJ,aAAa,SACX,IAAI,SAAyB,YAAY;KACvC,MAAM,sCAAqB;AAC3B,sBAAiB,IAAI,QAAQ,QAAQ;AACrC,UAAK,KAAK;MACR,GAAG;MACH;MACA,MAAM;MACP,CAAC;MACF;IACJ,WAAW,QAAQ;IACpB,EACD,QAAQ,QACT;AAED,QAAK,KAAK;IACR,GAAG;IACH,IAAI,QAAQ;IACZ,MAAM;IACP,CAAC;WACK,OAAO;AACd,QAAK,KAAK;IACR,YAAY;IACZ,OAAO;KACL,MAAM;KACN,SAAS,iBAAiB,QAAQ,MAAM,UAAU,OAAO,MAAM;KAChE;IACD,IAAI,QAAQ;IACZ,MAAM,EAAE;IACR,IAAI;IACJ,MAAM;IACP,CAAC;YACM;AACR,oBAAiB,OAAO;AACxB,2BAAwB;AACxB,uBAAoB;;;CAIxB,MAAM,cAAc,KAAK,WAAW,YAA+B;AACjE,MAAI,CAAC,oBAAoB,QAAQ,CAC/B;AAGF,UAAQ,QAAQ,MAAhB;GACE,KAAK;AACH,QAAI,QAAQ,OAAO,kBACjB,wBAAuB,OAAO;AAEhC;GACF,KAAK;AACH,IAAK,eAAe,QAAQ;AAC5B;GACF,KAAK,eAAe;IAClB,MAAM,UAAU,iBAAiB,IAAI,QAAQ,OAAO;AACpD,qBAAiB,OAAO,QAAQ,OAAO;AACvC,cAAU,QAAQ;AAClB;;;GAGJ;AAEF,cAAa;AACX,MAAI,OAAO,gBAAgB,WACzB,cAAa;AAEf,mBAAiB,OAAO;AACxB,yBAAuB,OAAO;AAC9B,0BAAwB;AACxB,sBAAoB"}

package/dist/runner/protocolEndpoint.d.cts

@@ -1,3 +1,7 @@
+/**
+ * @packageDocumentation
+ * Public TypeScript declarations for this package entrypoint.
+ */
 import { DispatcherMessage, RunnerMessage } from "@execbox/protocol";
 
 //#region src/runner/protocolEndpoint.d.ts

package/dist/runner/protocolEndpoint.d.cts.map

@@ -1 +1 @@
-{"version":3,"file":"protocolEndpoint.d.cts","names":[],"sources":["../../src/runner/protocolEndpoint.ts"],"sourcesContent":[],"mappings":";;;;;;AAeA;AAQgB,UARC,mBAAA,CAQ4B;+BAPd;gBACf;;;;;iBAMA,6BAAA,OACR"}
+{"version":3,"file":"protocolEndpoint.d.cts","names":[],"sources":["../../src/runner/protocolEndpoint.ts"],"sourcesContent":[],"mappings":";;;;;;;;;;AAqBA,CAAA,CAAA;AAQgB,SAAA,CARC,mBAAA,CAQ4B;+BAPd;gBACf;;;;;iBAMA,6BAAA,OACR"}

package/dist/runner/protocolEndpoint.d.ts

@@ -1,3 +1,7 @@
+/**
+ * @packageDocumentation
+ * Public TypeScript declarations for this package entrypoint.
+ */
 import { DispatcherMessage, RunnerMessage } from "@execbox/protocol";
 
 //#region src/runner/protocolEndpoint.d.ts

package/dist/runner/protocolEndpoint.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"protocolEndpoint.d.ts","names":[],"sources":["../../src/runner/protocolEndpoint.ts"],"sourcesContent":[],"mappings":";;;;;;AAeA;AAQgB,UARC,mBAAA,CAQ4B;+BAPd;gBACf;;;;;iBAMA,6BAAA,OACR"}
+{"version":3,"file":"protocolEndpoint.d.ts","names":[],"sources":["../../src/runner/protocolEndpoint.ts"],"sourcesContent":[],"mappings":";;;;;;;;;;AAqBA,CAAA,CAAA;AAQgB,SAAA,CARC,mBAAA,CAQ4B;+BAPd;gBACf;;;;;iBAMA,6BAAA,OACR"}

package/dist/runner/protocolEndpoint.js

@@ -1,4 +1,4 @@
-import { t as runQuickJsSession } from "../runner-B4UG88h1.js";
+import { t as runQuickJsSession } from "../runner-CVaY4RVQ.js";
 import { randomUUID } from "node:crypto";
 
 //#region ../protocol/src/messages.ts
@@ -39,6 +39,10 @@ function isDispatcherMessage(value) {
 //#endregion
 //#region src/runner/protocolEndpoint.ts
 /**
+* @packageDocumentation
+* Public API for the `@execbox/quickjs/runner/protocol-endpoint` entrypoint.
+*/
+/**
 * Attaches the shared QuickJS protocol loop to a worker/process messaging port.
 */
 function attachQuickJsProtocolEndpoint(port) {