@hew-lang/sandbox-vm 0.10.0-rc1 → 0.11.0-rc3

package/README.md

@@ -61,6 +61,23 @@ A `sandbox_rejected` result includes rejection entries with `category`, `code`,
 checked traps, VM failures and step-budget exhaustion have distinct statuses.
 Consumers can offer explicit remote execution for native capabilities.
 
+## Crash details
+
+Actor callers and crash hooks receive the same originating `CrashInfo`, with
+owned kind, trap, message, site and trace fields. The VM captures up to 48 real
+Hew activations before unwind and folds consecutive identical functions into
+`StackFrame.repeat`. Distinct instruction sites remain separate. Diagnostic
+messages are bounded to 4096 UTF-8 bytes, including an explicit ` [truncated]`
+suffix when needed; oversized function names are omitted. Capture is always enabled; there is no VM trace-control
+option. Frames describe the failing execution rather than its observer.
+
+Current bytecode carries function names and byte-offset spans, but no source
+file and line table. `CrashInfo.site` and each frame's `site` are therefore
+`None`. A failure outside an executing Hew activation also has no trace.
+Diagnostic materialization respects the receiving actor's managed heap budget:
+it omits the trace first, then uses an empty message if necessary, preserving
+the original kind and trap when diagnostic storage cannot fit.
+
 ## Validation
 
 From the repository root:

package/dist/interpreter/run-program.js

@@ -54,8 +54,10 @@ var SandboxExitCode;
     SandboxExitCode[SandboxExitCode["HeapExceeded"] = 200] = "HeapExceeded";
     SandboxExitCode[SandboxExitCode["IntegerOverflow"] = 201] = "IntegerOverflow";
     SandboxExitCode[SandboxExitCode["DivideByZero"] = 202] = "DivideByZero";
+    SandboxExitCode[SandboxExitCode["SignedMinDivNegOne"] = 203] = "SignedMinDivNegOne";
     SandboxExitCode[SandboxExitCode["ShiftOutOfRange"] = 204] = "ShiftOutOfRange";
     SandboxExitCode[SandboxExitCode["IndexOutOfBounds"] = 205] = "IndexOutOfBounds";
+    SandboxExitCode[SandboxExitCode["StackOverflow"] = 215] = "StackOverflow";
     SandboxExitCode[SandboxExitCode["ActorSendFailed"] = 206] = "ActorSendFailed";
     SandboxExitCode[SandboxExitCode["MachineDispatchUnreachable"] = 207] = "MachineDispatchUnreachable";
     SandboxExitCode[SandboxExitCode["ExhaustivenessFallthrough"] = 208] = "ExhaustivenessFallthrough";
@@ -66,6 +68,8 @@ const TRAP_EXIT_CODES = {
     integer_overflow: SandboxExitCode.IntegerOverflow,
     shift_out_of_range: SandboxExitCode.ShiftOutOfRange,
     divide_by_zero: SandboxExitCode.DivideByZero,
+    signed_min_div_neg_one: SandboxExitCode.SignedMinDivNegOne,
+    stack_overflow: SandboxExitCode.StackOverflow,
     invalid_local: SandboxExitCode.InternalError,
     invalid_block: SandboxExitCode.InternalError,
     invalid_call: SandboxExitCode.InternalError,

package/dist/interpreter/types.d.ts

@@ -2,7 +2,7 @@ export type JsonValue = null | boolean | number | string | JsonValue[] | {
     [key: string]: JsonValue;
 };
 export type SandboxBytecodePackage = import("./v1/package.js").PackageV1;
-export type TrapKind = "heap_exceeded" | "actor_refused" | "integer_overflow" | "shift_out_of_range" | "divide_by_zero" | "invalid_local" | "invalid_block" | "invalid_call" | "invalid_enum_tag" | "invalid_record_field" | "vector_bounds" | "string_bounds" | "regex_compile" | "capability_missing" | "budget_exhausted" | "panic" | "unsupported_instruction" | "internal_error";
+export type TrapKind = import("./v1/package.js").TrapName | "invalid_local" | "invalid_block" | "invalid_call" | "invalid_enum_tag" | "invalid_record_field" | "string_bounds" | "regex_compile" | "capability_missing" | "budget_exhausted" | "panic" | "unsupported_instruction" | "internal_error";
 export type RuntimeStatus = "ok" | "compile_error" | "sandbox_rejected" | "runtime_failure" | "budget_exhausted" | "panic" | "trap";
 export interface RuntimeFailure {
     kind: "panic" | "trap" | "budget_exhausted" | "unsupported" | "internal_error";

package/dist/interpreter/v1/browser-directory.js

@@ -1,4 +1,4 @@
-import { UNIT } from "../values.js";
+import { vectorItems, UNIT } from "../values.js";
 export const DIRECTORY_OPERATIONS = {
     hew_dir_open_read: {
         release: "hew_dir_read_close",
@@ -250,7 +250,7 @@ export class BrowserDirectories {
                 const data = args[1];
                 if (data?.kind !== "vector")
                     throw new Error("file write requires bytes");
-                const bytes = Uint8Array.from(data.items, (value) => {
+                const bytes = Uint8Array.from(vectorItems(data), (value) => {
                     if (value.kind !== "i64")
                         throw new Error("file write requires byte elements");
                     return Number(value.value);

package/dist/interpreter/v1/codecs.js

@@ -1,4 +1,4 @@
-import { UNIT, stringValue } from "../values.js";
+import { vectorItems, UNIT, stringValue } from "../values.js";
 import { runtimeTag } from "./package.js";
 import { collectionOperation } from "./value-operations.js";
 class DecodeFailure extends Error {
@@ -19,7 +19,7 @@ function fields(value) {
     if (value.kind === "record")
         return value.fields;
     if (value.kind === "vector")
-        return value.items;
+        return vectorItems(value);
     throw new Error(`codec aggregate received ${value.kind}`);
 }
 function toBridge(pkg, shape, id, value) {