@ggui-ai/ui-gen 0.25.0 → 0.26.0

package/src/harness/check/runtime-render/render-check-host.ts

@@ -46,6 +46,7 @@ import { runSandboxed } from '@ggui-ai/sandbox';
 import type { SandboxResult } from '@ggui-ai/sandbox';
 import type { ProbeHostLoad } from '../../../evaluation/types-public.js';
 import type { RenderCheckResult, RunRenderCheckInput } from './render-check.js';
+import { parseVerdictLine } from '../../../internal/verdict-line.js';
 
 /**
  * The subprocess bounds of one isolated check (ggui#1380). They are
@@ -227,12 +228,9 @@ export function mapSandboxResultToCheckResult(
       t0,
     );
   }
-  const stdout = result.stdout.trim();
-  if (stdout.length === 0) {
-    return unverified('render check worker exited without producing a verdict.', t0);
-  }
+  let verdict: RenderCheckResult | undefined;
   try {
-    return JSON.parse(stdout) as RenderCheckResult;
+    verdict = parseVerdictLine<RenderCheckResult>(result.stdout);
   } catch (err) {
     return unverified(
       `render check worker verdict was not valid JSON — ${
@@ -241,6 +239,10 @@ export function mapSandboxResultToCheckResult(
       t0,
     );
   }
+  if (verdict === undefined) {
+    return unverified('render check worker exited without producing a verdict.', t0);
+  }
+  return verdict;
 }
 
 /**
@@ -269,7 +271,9 @@ export async function runRenderCheckViaWorker(
     gracePeriodMs: bounds.gracePeriodMs,
     maxStdoutBytes: CHECK_STDOUT_CAP,
     nodeHeapMb: bounds.heapMb,
-    stdin: JSON.stringify(input),
+    // ggui#1398: the check learns its own deadline, so its report-only
+    // pending phase can step aside instead of pushing it past the bound.
+    stdin: JSON.stringify({ ...input, deadlineAt: t0 + bounds.timeoutMs }),
     // NODE_ENV steers React's production vs development build — keep
     // parity with the caller; everything else stays on the sandbox's
     // default allowlist.

package/src/harness/check/runtime-render/render-check-worker.ts

@@ -43,7 +43,8 @@ import { resolve as resolvePath } from 'node:path';
 import { fileURLToPath } from 'node:url';
 import * as esbuild from 'esbuild';
 import { runRenderCheckInProcess } from './render-check.js';
-import type { RunRenderCheckInput } from './render-check.js';
+import type { RenderCheckResult, RunRenderCheckInput } from './render-check.js';
+import { formatVerdictLine } from '../../../internal/verdict-line.js';
 
 async function readAllStdin(): Promise<string> {
   const chunks: Buffer[] = [];
@@ -53,8 +54,10 @@ async function readAllStdin(): Promise<string> {
   return Buffer.concat(chunks).toString('utf8');
 }
 
-function emit(value: unknown): void {
-  process.stdout.write(`${JSON.stringify(value)}\n`);
+function emit(value: RenderCheckResult): void {
+  // One prefixed line: the host reads the last such line, so a card that
+  // writes to stdout while it is checked cannot corrupt the verdict.
+  process.stdout.write(formatVerdictLine(value));
 }
 
 /**