@mcploom/codexec-isolated-vm 0.1.0

package/LICENSE

@@ -0,0 +1,21 @@
+MIT License
+
+Copyright (c) 2026 Mouaad Aallam
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+SOFTWARE.

package/README.md

@@ -0,0 +1,45 @@
+# @mcploom/codexec-isolated-vm
+
+`isolated-vm` executor package for `@mcploom/codexec`.
+
+## Install
+
+```bash
+npm install @mcploom/codexec @mcploom/codexec-isolated-vm
+```
+
+It implements the shared `Executor` contract from `@mcploom/codexec`, so it can be used anywhere the QuickJS package can be used.
+
+## Requirements
+
+- Node 20+ must run with `--no-node-snapshot`
+- the optional `isolated-vm` native dependency must install successfully in the host environment
+- native-addon failures are surfaced only when `IsolatedVmExecutor` is used
+
+## Usage
+
+```ts
+import { resolveProvider } from "@mcploom/codexec";
+import { IsolatedVmExecutor } from "@mcploom/codexec-isolated-vm";
+
+const provider = resolveProvider({
+  tools: {
+    echo: {
+      execute: async (input) => input,
+    },
+  },
+});
+
+const executor = new IsolatedVmExecutor();
+const result = await executor.execute("await codemode.echo({ ok: true })", [
+  provider,
+]);
+```
+
+This package is verified through the opt-in workspace flow:
+
+```bash
+npm run verify:isolated-vm
+```
+
+`isolated-vm` is not documented here as a hard security boundary. If the workload is hostile or process stability matters more than in-process performance, prefer process isolation around the executor.

package/dist/index.cjs

@@ -0,0 +1,340 @@
+let __mcploom_codexec = require("@mcploom/codexec");
+
+//#region src/isolatedVmExecutor.ts
+const DEFAULT_MEMORY_LIMIT_BYTES = 64 * 1024 * 1024;
+const DEFAULT_TIMEOUT_MS = 5e3;
+const DEFAULT_MAX_LOG_LINES = 100;
+const DEFAULT_MAX_LOG_CHARS = 64e3;
+const HOST_ERROR_PREFIX = "__MCP_CODE_EXEC_HOST_ERROR__";
+let cachedModulePromise;
+function createExecutionContext(signal, providerName, safeToolName, originalToolName) {
+	return {
+		originalToolName,
+		providerName,
+		safeToolName,
+		signal
+	};
+}
+function hasRequiredNodeFlag() {
+	const execArgv = process.execArgv.join(" ");
+	const nodeOptions = process.env.NODE_OPTIONS ?? "";
+	return execArgv.includes("--no-node-snapshot") || nodeOptions.includes("--no-node-snapshot");
+}
+function isKnownErrorCode(value) {
+	return value === "timeout" || value === "memory_limit" || value === "validation_error" || value === "tool_error" || value === "runtime_error" || value === "serialization_error" || value === "internal_error";
+}
+function normalizeThrownMessage(error) {
+	if (error instanceof Error) return error.message;
+	if (typeof error === "object" && error !== null && "message" in error) {
+		const message = error.message;
+		if (typeof message === "string") return message;
+	}
+	return String(error);
+}
+function truncateLogs(logs, maxLogLines, maxLogChars) {
+	const limitedLines = logs.slice(0, maxLogLines);
+	let remainingChars = maxLogChars;
+	const truncated = [];
+	for (const line of limitedLines) {
+		if (remainingChars <= 0) break;
+		if (line.length <= remainingChars) {
+			truncated.push(line);
+			remainingChars -= line.length;
+			continue;
+		}
+		truncated.push(line.slice(0, remainingChars));
+		break;
+	}
+	return truncated;
+}
+function formatLogValue(value) {
+	if (typeof value === "string") return value;
+	if (value === void 0) return "undefined";
+	try {
+		return JSON.stringify(value);
+	} catch {
+		return String(value);
+	}
+}
+function formatConsoleLine(values) {
+	return values.map((value) => formatLogValue(value)).join(" ");
+}
+function toJsonValue(value, message) {
+	if (value === void 0) return;
+	const jsonValue = JSON.stringify(value);
+	if (jsonValue === void 0) throw new __mcploom_codexec.ExecuteFailure("serialization_error", message);
+	try {
+		return JSON.parse(jsonValue);
+	} catch {
+		throw new __mcploom_codexec.ExecuteFailure("serialization_error", message);
+	}
+}
+function toTransferableValue(ivm, value) {
+	const normalizedValue = toJsonValue(value, "Host value is not JSON-serializable");
+	if (normalizedValue === null || normalizedValue === void 0 || typeof normalizedValue === "string" || typeof normalizedValue === "number" || typeof normalizedValue === "boolean") return normalizedValue;
+	return new ivm.ExternalCopy(normalizedValue).copyInto({ release: true });
+}
+function toExecuteError(error, deadline) {
+	if (typeof error === "object" && error !== null && "code" in error && "message" in error && isKnownErrorCode(error.code) && typeof error.message === "string") return {
+		code: error.code,
+		message: error.message
+	};
+	if ((0, __mcploom_codexec.isExecuteFailure)(error)) return {
+		code: error.code,
+		message: error.message
+	};
+	const message = normalizeThrownMessage(error);
+	const normalizedMessage = message.toLowerCase();
+	if (Date.now() > deadline || normalizedMessage.includes("timed out") || normalizedMessage.includes("time limit")) return {
+		code: "timeout",
+		message: "Execution timed out"
+	};
+	if (normalizedMessage.includes("memory limit") || normalizedMessage.includes("out of memory")) return {
+		code: "memory_limit",
+		message
+	};
+	if (normalizedMessage.includes("could not be cloned") || normalizedMessage.includes("non-transferable") || normalizedMessage.includes("not json-serializable")) return {
+		code: "serialization_error",
+		message
+	};
+	return {
+		code: "runtime_error",
+		message
+	};
+}
+function toMemoryLimitMb(memoryLimitBytes) {
+	return Math.max(8, Math.ceil(memoryLimitBytes / (1024 * 1024)));
+}
+function remainingTime(deadline) {
+	return Math.max(0, deadline - Date.now());
+}
+async function runWithDeadline(operation, deadline, signal) {
+	if (signal.aborted || Date.now() > deadline) throw new __mcploom_codexec.ExecuteFailure("timeout", "Execution timed out");
+	const timeoutMs = remainingTime(deadline);
+	if (timeoutMs <= 0) throw new __mcploom_codexec.ExecuteFailure("timeout", "Execution timed out");
+	let timeoutId;
+	return await new Promise((resolve, reject) => {
+		const onAbort = () => {
+			reject(new __mcploom_codexec.ExecuteFailure("timeout", "Execution timed out"));
+		};
+		signal.addEventListener("abort", onAbort, { once: true });
+		timeoutId = setTimeout(() => {
+			signal.removeEventListener("abort", onAbort);
+			reject(new __mcploom_codexec.ExecuteFailure("timeout", "Execution timed out"));
+		}, timeoutMs);
+		operation.then((value) => {
+			signal.removeEventListener("abort", onAbort);
+			if (timeoutId) clearTimeout(timeoutId);
+			resolve(value);
+		}, (error) => {
+			signal.removeEventListener("abort", onAbort);
+			if (timeoutId) clearTimeout(timeoutId);
+			reject(error);
+		});
+	});
+}
+async function loadDefaultModule() {
+	cachedModulePromise ??= import("isolated-vm").then((loaded) => {
+		return "default" in loaded ? loaded.default : loaded;
+	});
+	return cachedModulePromise;
+}
+function createBootstrapSource(providers, timeoutMs) {
+	const lines = [
+		`const __MCP_HOST_ERROR_PREFIX = ${JSON.stringify(HOST_ERROR_PREFIX)};`,
+		"const __mcpNormalizeError = (error) => {",
+		"  if (error && typeof error === 'object' && typeof error.code === 'string' && typeof error.message === 'string') {",
+		"    return { code: error.code, message: error.message };",
+		"  }",
+		"  if (error && typeof error.message === 'string' && error.message.startsWith(__MCP_HOST_ERROR_PREFIX)) {",
+		"    try {",
+		"      const payload = JSON.parse(error.message.slice(__MCP_HOST_ERROR_PREFIX.length));",
+		"      if (payload && typeof payload.code === 'string' && typeof payload.message === 'string') {",
+		"        return payload;",
+		"      }",
+		"    } catch {}",
+		"  }",
+		"  if (error && typeof error.message === 'string') {",
+		"    return { code: 'runtime_error', message: error.message };",
+		"  }",
+		"  return { code: 'runtime_error', message: String(error) };",
+		"};",
+		"const __mcpRaiseNormalizedError = (error) => {",
+		"  const normalized = __mcpNormalizeError(error);",
+		"  const wrapped = new Error(normalized.message);",
+		"  wrapped.code = normalized.code;",
+		"  throw wrapped;",
+		"};",
+		"const __mcpToJsonValue = (value) => {",
+		"  if (typeof value === 'undefined') {",
+		"    return undefined;",
+		"  }",
+		"  const json = JSON.stringify(value);",
+		"  if (typeof json === 'undefined') {",
+		"    const error = new Error('Guest code returned a non-serializable value');",
+		"    error.code = 'serialization_error';",
+		"    throw error;",
+		"  }",
+		"  return JSON.parse(json);",
+		"};",
+		"globalThis.console = {",
+		"  log: (...args) => __mcp_console_log(...args),",
+		"  info: (...args) => __mcp_console_info(...args),",
+		"  warn: (...args) => __mcp_console_warn(...args),",
+		"  error: (...args) => __mcp_console_error(...args),",
+		"};"
+	];
+	for (const provider of providers) {
+		lines.push(`globalThis.${provider.name} = {};`);
+		for (const safeToolName of Object.keys(provider.tools)) {
+			const hostReferenceName = `__mcp_tool_${provider.name}_${safeToolName}`;
+			lines.push(`globalThis.${provider.name}.${safeToolName} = async (input) => {`, "  try {", `    return await ${hostReferenceName}.applySyncPromise(undefined, [input], { arguments: { copy: true }, timeout: ${timeoutMs} });`, "  } catch (error) {", "    __mcpRaiseNormalizedError(error);", "  }", "};");
+		}
+	}
+	return lines.join("\n");
+}
+function createExecutionSource(code) {
+	return [
+		`const __mcpUserFunction = (${(0, __mcploom_codexec.normalizeCode)(code)});`,
+		"return (async () => {",
+		"  try {",
+		"    const value = await __mcpUserFunction();",
+		"    return { ok: true, value: __mcpToJsonValue(value) };",
+		"  } catch (error) {",
+		"    return { ok: false, error: __mcpNormalizeError(error) };",
+		"  }",
+		"})();"
+	].join("\n");
+}
+function setConsoleBindings(context, logs) {
+	const jail = context.global;
+	jail.setSync("__mcp_console_log", (...args) => {
+		logs.push(formatConsoleLine(args));
+	});
+	jail.setSync("__mcp_console_info", (...args) => {
+		logs.push(formatConsoleLine(args));
+	});
+	jail.setSync("__mcp_console_warn", (...args) => {
+		logs.push(formatConsoleLine(args));
+	});
+	jail.setSync("__mcp_console_error", (...args) => {
+		logs.push(formatConsoleLine(args));
+	});
+}
+function setProviderBindings(ivm, context, providers, signal, deadline) {
+	const jail = context.global;
+	for (const provider of providers) for (const [safeToolName, descriptor] of Object.entries(provider.tools)) {
+		const hostReferenceName = `__mcp_tool_${provider.name}_${safeToolName}`;
+		jail.setSync(hostReferenceName, async (input) => {
+			const executionContext = createExecutionContext(signal, provider.name, safeToolName, descriptor.originalName);
+			try {
+				const normalizedInput = input === void 0 ? void 0 : toJsonValue(input, "Guest code passed a non-serializable tool input");
+				return toTransferableValue(ivm, await runWithDeadline(Promise.resolve(descriptor.execute(normalizedInput, executionContext)), deadline, signal));
+			} catch (error) {
+				const executeError = toExecuteError(error, deadline);
+				throw new Error(`${HOST_ERROR_PREFIX}${JSON.stringify(executeError)}`, { cause: error });
+			}
+		}, { reference: true });
+	}
+}
+/**
+* isolated-vm-backed executor for one-shot sandboxed JavaScript runs.
+*/
+var IsolatedVmExecutor = class {
+	loadModule;
+	maxLogChars;
+	maxLogLines;
+	memoryLimitBytes;
+	timeoutMs;
+	constructor(options = {}) {
+		this.loadModule = async () => {
+			return options.loadModule ? await options.loadModule() : await loadDefaultModule();
+		};
+		this.maxLogChars = options.maxLogChars ?? DEFAULT_MAX_LOG_CHARS;
+		this.maxLogLines = options.maxLogLines ?? DEFAULT_MAX_LOG_LINES;
+		this.memoryLimitBytes = options.memoryLimitBytes ?? DEFAULT_MEMORY_LIMIT_BYTES;
+		this.timeoutMs = options.timeoutMs ?? DEFAULT_TIMEOUT_MS;
+	}
+	/**
+	* Executes JavaScript against the provided tool namespaces in a fresh isolated-vm context.
+	*/
+	async execute(code, providers) {
+		const startedAt = Date.now();
+		const deadline = startedAt + this.timeoutMs;
+		const logs = [];
+		const abortController = new AbortController();
+		if (Number.parseInt(process.versions.node.split(".")[0] ?? "0", 10) >= 20 && !hasRequiredNodeFlag()) return {
+			durationMs: Date.now() - startedAt,
+			error: {
+				code: "internal_error",
+				message: "isolated-vm requires Node to run with --no-node-snapshot on Node 20+"
+			},
+			logs,
+			ok: false
+		};
+		let catastrophicErrorMessage;
+		let isolate;
+		let context;
+		try {
+			const ivm = await this.loadModule();
+			isolate = new ivm.Isolate({
+				memoryLimit: toMemoryLimitMb(this.memoryLimitBytes),
+				onCatastrophicError: (message) => {
+					catastrophicErrorMessage = message;
+					abortController.abort();
+				}
+			});
+			context = await isolate.createContext();
+			setConsoleBindings(context, logs);
+			setProviderBindings(ivm, context, providers, abortController.signal, deadline);
+			await context.eval(createBootstrapSource(providers, this.timeoutMs), { timeout: this.timeoutMs });
+			const execution = await context.evalClosure(createExecutionSource(code), [], {
+				timeout: this.timeoutMs,
+				result: {
+					copy: true,
+					promise: true
+				}
+			});
+			if (catastrophicErrorMessage) return {
+				durationMs: Date.now() - startedAt,
+				error: {
+					code: "internal_error",
+					message: `isolated-vm catastrophic error: ${catastrophicErrorMessage}`
+				},
+				logs: truncateLogs(logs, this.maxLogLines, this.maxLogChars),
+				ok: false
+			};
+			if (!execution.ok) return {
+				durationMs: Date.now() - startedAt,
+				error: toExecuteError(execution.error, deadline),
+				logs: truncateLogs(logs, this.maxLogLines, this.maxLogChars),
+				ok: false
+			};
+			return {
+				durationMs: Date.now() - startedAt,
+				logs: truncateLogs(logs, this.maxLogLines, this.maxLogChars),
+				ok: true,
+				result: execution.value
+			};
+		} catch (error) {
+			const executeError = catastrophicErrorMessage !== void 0 ? {
+				code: "internal_error",
+				message: `isolated-vm catastrophic error: ${catastrophicErrorMessage}`
+			} : toExecuteError(error, deadline);
+			return {
+				durationMs: Date.now() - startedAt,
+				error: executeError,
+				logs: truncateLogs(logs, this.maxLogLines, this.maxLogChars),
+				ok: false
+			};
+		} finally {
+			abortController.abort();
+			context?.release?.();
+			isolate?.dispose();
+		}
+	}
+};
+
+//#endregion
+exports.IsolatedVmExecutor = IsolatedVmExecutor;
+//# sourceMappingURL=index.cjs.map

package/dist/index.cjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.cjs","names":["cachedModulePromise: Promise<IsolatedVmModule> | undefined","truncated: string[]","ExecuteFailure","timeoutId: ReturnType<typeof setTimeout> | undefined","logs: string[]","catastrophicErrorMessage: string | undefined","isolate: IsolatedVmIsolate | undefined","context: IsolatedVmContext | undefined"],"sources":["../src/isolatedVmExecutor.ts"],"sourcesContent":["import {\n  ExecuteFailure,\n  isExecuteFailure,\n  normalizeCode,\n} from \"@mcploom/codexec\";\nimport type {\n  ExecuteError,\n  ExecuteResult,\n  Executor,\n  ResolvedToolProvider,\n  ToolExecutionContext,\n} from \"@mcploom/codexec\";\n\nimport type { IsolatedVmExecutorOptions } from \"./types\";\n\ntype IsolatedVmExternalCopyInstance = {\n  copyInto: (options?: { release?: boolean; transferIn?: boolean }) => unknown;\n  release?: () => void;\n};\n\ntype IsolatedVmReferenceInstance = {\n  setSync: (\n    property: string,\n    value: unknown,\n    options?: Record<string, unknown>,\n  ) => void;\n};\n\ntype IsolatedVmContext = {\n  eval: (code: string, options?: Record<string, unknown>) => Promise<unknown>;\n  evalClosure: (\n    code: string,\n    args?: unknown[],\n    options?: Record<string, unknown>,\n  ) => Promise<unknown>;\n  global: IsolatedVmReferenceInstance;\n  release?: () => void;\n};\n\ntype IsolatedVmIsolate = {\n  createContext: () => Promise<IsolatedVmContext>;\n  dispose: () => void;\n};\n\ntype IsolatedVmModule = {\n  ExternalCopy: new (\n    value: unknown,\n    options?: Record<string, unknown>,\n  ) => IsolatedVmExternalCopyInstance;\n  Isolate: new (options?: {\n    inspector?: boolean;\n    memoryLimit?: number;\n    onCatastrophicError?: (message: string) => void;\n  }) => IsolatedVmIsolate;\n};\n\ntype GuestExecutionEnvelope =\n  | {\n      ok: true;\n      value: unknown;\n    }\n  | {\n      error: {\n        code?: string;\n        message?: string;\n      };\n      ok: false;\n    };\n\nconst DEFAULT_MEMORY_LIMIT_BYTES = 64 * 1024 * 1024;\nconst DEFAULT_TIMEOUT_MS = 5000;\nconst DEFAULT_MAX_LOG_LINES = 100;\nconst DEFAULT_MAX_LOG_CHARS = 64_000;\nconst HOST_ERROR_PREFIX = \"__MCP_CODE_EXEC_HOST_ERROR__\";\n\nlet cachedModulePromise: Promise<IsolatedVmModule> | undefined;\n\nfunction createExecutionContext(\n  signal: AbortSignal,\n  providerName: string,\n  safeToolName: string,\n  originalToolName: string,\n): ToolExecutionContext {\n  return {\n    originalToolName,\n    providerName,\n    safeToolName,\n    signal,\n  };\n}\n\nfunction hasRequiredNodeFlag(): boolean {\n  const execArgv = process.execArgv.join(\" \");\n  const nodeOptions = process.env.NODE_OPTIONS ?? \"\";\n  return (\n    execArgv.includes(\"--no-node-snapshot\") ||\n    nodeOptions.includes(\"--no-node-snapshot\")\n  );\n}\n\nfunction isKnownErrorCode(value: unknown): value is ExecuteError[\"code\"] {\n  return (\n    value === \"timeout\" ||\n    value === \"memory_limit\" ||\n    value === \"validation_error\" ||\n    value === \"tool_error\" ||\n    value === \"runtime_error\" ||\n    value === \"serialization_error\" ||\n    value === \"internal_error\"\n  );\n}\n\nfunction normalizeThrownMessage(error: unknown): string {\n  if (error instanceof Error) {\n    return error.message;\n  }\n\n  if (typeof error === \"object\" && error !== null && \"message\" in error) {\n    const message = (error as { message?: unknown }).message;\n    if (typeof message === \"string\") {\n      return message;\n    }\n  }\n\n  return String(error);\n}\n\nfunction truncateLogs(\n  logs: string[],\n  maxLogLines: number,\n  maxLogChars: number,\n): string[] {\n  const limitedLines = logs.slice(0, maxLogLines);\n  let remainingChars = maxLogChars;\n  const truncated: string[] = [];\n\n  for (const line of limitedLines) {\n    if (remainingChars <= 0) {\n      break;\n    }\n\n    if (line.length <= remainingChars) {\n      truncated.push(line);\n      remainingChars -= line.length;\n      continue;\n    }\n\n    truncated.push(line.slice(0, remainingChars));\n    break;\n  }\n\n  return truncated;\n}\n\nfunction formatLogValue(value: unknown): string {\n  if (typeof value === \"string\") {\n    return value;\n  }\n\n  if (value === undefined) {\n    return \"undefined\";\n  }\n\n  try {\n    return JSON.stringify(value);\n  } catch {\n    return String(value);\n  }\n}\n\nfunction formatConsoleLine(values: unknown[]): string {\n  return values.map((value) => formatLogValue(value)).join(\" \");\n}\n\nfunction toJsonValue(value: unknown, message: string): unknown {\n  if (value === undefined) {\n    return undefined;\n  }\n\n  const jsonValue = JSON.stringify(value);\n\n  if (jsonValue === undefined) {\n    throw new ExecuteFailure(\"serialization_error\", message);\n  }\n\n  try {\n    return JSON.parse(jsonValue) as unknown;\n  } catch {\n    throw new ExecuteFailure(\"serialization_error\", message);\n  }\n}\n\nfunction toTransferableValue(ivm: IsolatedVmModule, value: unknown): unknown {\n  const normalizedValue = toJsonValue(\n    value,\n    \"Host value is not JSON-serializable\",\n  );\n\n  if (\n    normalizedValue === null ||\n    normalizedValue === undefined ||\n    typeof normalizedValue === \"string\" ||\n    typeof normalizedValue === \"number\" ||\n    typeof normalizedValue === \"boolean\"\n  ) {\n    return normalizedValue;\n  }\n\n  const copy = new ivm.ExternalCopy(normalizedValue);\n  return copy.copyInto({ release: true });\n}\n\nfunction toExecuteError(error: unknown, deadline: number): ExecuteError {\n  if (\n    typeof error === \"object\" &&\n    error !== null &&\n    \"code\" in error &&\n    \"message\" in error &&\n    isKnownErrorCode((error as { code?: unknown }).code) &&\n    typeof (error as { message?: unknown }).message === \"string\"\n  ) {\n    return {\n      code: (error as { code: ExecuteError[\"code\"] }).code,\n      message: (error as { message: string }).message,\n    };\n  }\n\n  if (isExecuteFailure(error)) {\n    return {\n      code: error.code,\n      message: error.message,\n    };\n  }\n\n  const message = normalizeThrownMessage(error);\n  const normalizedMessage = message.toLowerCase();\n\n  if (\n    Date.now() > deadline ||\n    normalizedMessage.includes(\"timed out\") ||\n    normalizedMessage.includes(\"time limit\")\n  ) {\n    return {\n      code: \"timeout\",\n      message: \"Execution timed out\",\n    };\n  }\n\n  if (\n    normalizedMessage.includes(\"memory limit\") ||\n    normalizedMessage.includes(\"out of memory\")\n  ) {\n    return {\n      code: \"memory_limit\",\n      message,\n    };\n  }\n\n  if (\n    normalizedMessage.includes(\"could not be cloned\") ||\n    normalizedMessage.includes(\"non-transferable\") ||\n    normalizedMessage.includes(\"not json-serializable\")\n  ) {\n    return {\n      code: \"serialization_error\",\n      message,\n    };\n  }\n\n  return {\n    code: \"runtime_error\",\n    message,\n  };\n}\n\nfunction toMemoryLimitMb(memoryLimitBytes: number): number {\n  return Math.max(8, Math.ceil(memoryLimitBytes / (1024 * 1024)));\n}\n\nfunction remainingTime(deadline: number): number {\n  return Math.max(0, deadline - Date.now());\n}\n\nasync function runWithDeadline<T>(\n  operation: Promise<T>,\n  deadline: number,\n  signal: AbortSignal,\n): Promise<T> {\n  if (signal.aborted || Date.now() > deadline) {\n    throw new ExecuteFailure(\"timeout\", \"Execution timed out\");\n  }\n\n  const timeoutMs = remainingTime(deadline);\n  if (timeoutMs <= 0) {\n    throw new ExecuteFailure(\"timeout\", \"Execution timed out\");\n  }\n\n  let timeoutId: ReturnType<typeof setTimeout> | undefined;\n\n  return await new Promise<T>((resolve, reject) => {\n    const onAbort = () => {\n      reject(new ExecuteFailure(\"timeout\", \"Execution timed out\"));\n    };\n\n    signal.addEventListener(\"abort\", onAbort, { once: true });\n    timeoutId = setTimeout(() => {\n      signal.removeEventListener(\"abort\", onAbort);\n      reject(new ExecuteFailure(\"timeout\", \"Execution timed out\"));\n    }, timeoutMs);\n\n    void operation.then(\n      (value) => {\n        signal.removeEventListener(\"abort\", onAbort);\n        if (timeoutId) {\n          clearTimeout(timeoutId);\n        }\n        resolve(value);\n      },\n      (error) => {\n        signal.removeEventListener(\"abort\", onAbort);\n        if (timeoutId) {\n          clearTimeout(timeoutId);\n        }\n        reject(error);\n      },\n    );\n  });\n}\n\nasync function loadDefaultModule(): Promise<IsolatedVmModule> {\n  cachedModulePromise ??= import(\"isolated-vm\").then((loaded) => {\n    const candidate = (\n      \"default\" in loaded ? loaded.default : loaded\n    ) as unknown;\n    return candidate as IsolatedVmModule;\n  });\n\n  return cachedModulePromise;\n}\n\nfunction createBootstrapSource(\n  providers: ResolvedToolProvider[],\n  timeoutMs: number,\n): string {\n  const lines = [\n    `const __MCP_HOST_ERROR_PREFIX = ${JSON.stringify(HOST_ERROR_PREFIX)};`,\n    \"const __mcpNormalizeError = (error) => {\",\n    \"  if (error && typeof error === 'object' && typeof error.code === 'string' && typeof error.message === 'string') {\",\n    \"    return { code: error.code, message: error.message };\",\n    \"  }\",\n    \"  if (error && typeof error.message === 'string' && error.message.startsWith(__MCP_HOST_ERROR_PREFIX)) {\",\n    \"    try {\",\n    \"      const payload = JSON.parse(error.message.slice(__MCP_HOST_ERROR_PREFIX.length));\",\n    \"      if (payload && typeof payload.code === 'string' && typeof payload.message === 'string') {\",\n    \"        return payload;\",\n    \"      }\",\n    \"    } catch {}\",\n    \"  }\",\n    \"  if (error && typeof error.message === 'string') {\",\n    \"    return { code: 'runtime_error', message: error.message };\",\n    \"  }\",\n    \"  return { code: 'runtime_error', message: String(error) };\",\n    \"};\",\n    \"const __mcpRaiseNormalizedError = (error) => {\",\n    \"  const normalized = __mcpNormalizeError(error);\",\n    \"  const wrapped = new Error(normalized.message);\",\n    \"  wrapped.code = normalized.code;\",\n    \"  throw wrapped;\",\n    \"};\",\n    \"const __mcpToJsonValue = (value) => {\",\n    \"  if (typeof value === 'undefined') {\",\n    \"    return undefined;\",\n    \"  }\",\n    \"  const json = JSON.stringify(value);\",\n    \"  if (typeof json === 'undefined') {\",\n    \"    const error = new Error('Guest code returned a non-serializable value');\",\n    \"    error.code = 'serialization_error';\",\n    \"    throw error;\",\n    \"  }\",\n    \"  return JSON.parse(json);\",\n    \"};\",\n    \"globalThis.console = {\",\n    \"  log: (...args) => __mcp_console_log(...args),\",\n    \"  info: (...args) => __mcp_console_info(...args),\",\n    \"  warn: (...args) => __mcp_console_warn(...args),\",\n    \"  error: (...args) => __mcp_console_error(...args),\",\n    \"};\",\n  ];\n\n  for (const provider of providers) {\n    lines.push(`globalThis.${provider.name} = {};`);\n\n    for (const safeToolName of Object.keys(provider.tools)) {\n      const hostReferenceName = `__mcp_tool_${provider.name}_${safeToolName}`;\n      lines.push(\n        `globalThis.${provider.name}.${safeToolName} = async (input) => {`,\n        \"  try {\",\n        `    return await ${hostReferenceName}.applySyncPromise(undefined, [input], { arguments: { copy: true }, timeout: ${timeoutMs} });`,\n        \"  } catch (error) {\",\n        \"    __mcpRaiseNormalizedError(error);\",\n        \"  }\",\n        \"};\",\n      );\n    }\n  }\n\n  return lines.join(\"\\n\");\n}\n\nfunction createExecutionSource(code: string): string {\n  const executableSource = normalizeCode(code);\n\n  return [\n    `const __mcpUserFunction = (${executableSource});`,\n    \"return (async () => {\",\n    \"  try {\",\n    \"    const value = await __mcpUserFunction();\",\n    \"    return { ok: true, value: __mcpToJsonValue(value) };\",\n    \"  } catch (error) {\",\n    \"    return { ok: false, error: __mcpNormalizeError(error) };\",\n    \"  }\",\n    \"})();\",\n  ].join(\"\\n\");\n}\n\nfunction setConsoleBindings(context: IsolatedVmContext, logs: string[]): void {\n  const jail = context.global;\n  jail.setSync(\"__mcp_console_log\", (...args: unknown[]) => {\n    logs.push(formatConsoleLine(args));\n  });\n  jail.setSync(\"__mcp_console_info\", (...args: unknown[]) => {\n    logs.push(formatConsoleLine(args));\n  });\n  jail.setSync(\"__mcp_console_warn\", (...args: unknown[]) => {\n    logs.push(formatConsoleLine(args));\n  });\n  jail.setSync(\"__mcp_console_error\", (...args: unknown[]) => {\n    logs.push(formatConsoleLine(args));\n  });\n}\n\nfunction setProviderBindings(\n  ivm: IsolatedVmModule,\n  context: IsolatedVmContext,\n  providers: ResolvedToolProvider[],\n  signal: AbortSignal,\n  deadline: number,\n): void {\n  const jail = context.global;\n\n  for (const provider of providers) {\n    for (const [safeToolName, descriptor] of Object.entries(provider.tools)) {\n      const hostReferenceName = `__mcp_tool_${provider.name}_${safeToolName}`;\n\n      jail.setSync(\n        hostReferenceName,\n        async (input: unknown) => {\n          const executionContext = createExecutionContext(\n            signal,\n            provider.name,\n            safeToolName,\n            descriptor.originalName,\n          );\n\n          try {\n            const normalizedInput =\n              input === undefined\n                ? undefined\n                : toJsonValue(\n                    input,\n                    \"Guest code passed a non-serializable tool input\",\n                  );\n            const result = await runWithDeadline(\n              Promise.resolve(\n                descriptor.execute(normalizedInput, executionContext),\n              ),\n              deadline,\n              signal,\n            );\n\n            return toTransferableValue(ivm, result);\n          } catch (error) {\n            const executeError = toExecuteError(error, deadline);\n            throw new Error(\n              `${HOST_ERROR_PREFIX}${JSON.stringify(executeError)}`,\n              {\n                cause: error,\n              },\n            );\n          }\n        },\n        { reference: true },\n      );\n    }\n  }\n}\n\n/**\n * isolated-vm-backed executor for one-shot sandboxed JavaScript runs.\n */\nexport class IsolatedVmExecutor implements Executor {\n  private readonly loadModule: () => Promise<IsolatedVmModule>;\n  private readonly maxLogChars: number;\n  private readonly maxLogLines: number;\n  private readonly memoryLimitBytes: number;\n  private readonly timeoutMs: number;\n\n  constructor(options: IsolatedVmExecutorOptions = {}) {\n    this.loadModule = async () => {\n      const loaded = options.loadModule\n        ? await options.loadModule()\n        : await loadDefaultModule();\n      return loaded as IsolatedVmModule;\n    };\n    this.maxLogChars = options.maxLogChars ?? DEFAULT_MAX_LOG_CHARS;\n    this.maxLogLines = options.maxLogLines ?? DEFAULT_MAX_LOG_LINES;\n    this.memoryLimitBytes =\n      options.memoryLimitBytes ?? DEFAULT_MEMORY_LIMIT_BYTES;\n    this.timeoutMs = options.timeoutMs ?? DEFAULT_TIMEOUT_MS;\n  }\n\n  /**\n   * Executes JavaScript against the provided tool namespaces in a fresh isolated-vm context.\n   */\n  async execute(\n    code: string,\n    providers: ResolvedToolProvider[],\n  ): Promise<ExecuteResult> {\n    const startedAt = Date.now();\n    const deadline = startedAt + this.timeoutMs;\n    const logs: string[] = [];\n    const abortController = new AbortController();\n    const nodeMajorVersion = Number.parseInt(\n      process.versions.node.split(\".\")[0] ?? \"0\",\n      10,\n    );\n\n    if (nodeMajorVersion >= 20 && !hasRequiredNodeFlag()) {\n      return {\n        durationMs: Date.now() - startedAt,\n        error: {\n          code: \"internal_error\",\n          message:\n            \"isolated-vm requires Node to run with --no-node-snapshot on Node 20+\",\n        },\n        logs,\n        ok: false,\n      };\n    }\n\n    let catastrophicErrorMessage: string | undefined;\n    let isolate: IsolatedVmIsolate | undefined;\n    let context: IsolatedVmContext | undefined;\n\n    try {\n      const ivm = await this.loadModule();\n      isolate = new ivm.Isolate({\n        memoryLimit: toMemoryLimitMb(this.memoryLimitBytes),\n        onCatastrophicError: (message) => {\n          catastrophicErrorMessage = message;\n          abortController.abort();\n        },\n      });\n      context = await isolate.createContext();\n\n      setConsoleBindings(context, logs);\n      setProviderBindings(\n        ivm,\n        context,\n        providers,\n        abortController.signal,\n        deadline,\n      );\n      await context.eval(createBootstrapSource(providers, this.timeoutMs), {\n        timeout: this.timeoutMs,\n      });\n\n      const execution = (await context.evalClosure(\n        createExecutionSource(code),\n        [],\n        {\n          timeout: this.timeoutMs,\n          result: { copy: true, promise: true },\n        },\n      )) as GuestExecutionEnvelope;\n\n      if (catastrophicErrorMessage) {\n        return {\n          durationMs: Date.now() - startedAt,\n          error: {\n            code: \"internal_error\",\n            message: `isolated-vm catastrophic error: ${catastrophicErrorMessage}`,\n          },\n          logs: truncateLogs(logs, this.maxLogLines, this.maxLogChars),\n          ok: false,\n        };\n      }\n\n      if (!execution.ok) {\n        return {\n          durationMs: Date.now() - startedAt,\n          error: toExecuteError(execution.error, deadline),\n          logs: truncateLogs(logs, this.maxLogLines, this.maxLogChars),\n          ok: false,\n        };\n      }\n\n      return {\n        durationMs: Date.now() - startedAt,\n        logs: truncateLogs(logs, this.maxLogLines, this.maxLogChars),\n        ok: true,\n        result: execution.value,\n      };\n    } catch (error) {\n      const executeError =\n        catastrophicErrorMessage !== undefined\n          ? {\n              code: \"internal_error\" as const,\n              message: `isolated-vm catastrophic error: ${catastrophicErrorMessage}`,\n            }\n          : toExecuteError(error, deadline);\n\n      return {\n        durationMs: Date.now() - startedAt,\n        error: executeError,\n        logs: truncateLogs(logs, this.maxLogLines, this.maxLogChars),\n        ok: false,\n      };\n    } finally {\n      abortController.abort();\n      context?.release?.();\n      isolate?.dispose();\n    }\n  }\n}\n"],"mappings":";;;AAqEA,MAAM,6BAA6B,KAAK,OAAO;AAC/C,MAAM,qBAAqB;AAC3B,MAAM,wBAAwB;AAC9B,MAAM,wBAAwB;AAC9B,MAAM,oBAAoB;AAE1B,IAAIA;AAEJ,SAAS,uBACP,QACA,cACA,cACA,kBACsB;AACtB,QAAO;EACL;EACA;EACA;EACA;EACD;;AAGH,SAAS,sBAA+B;CACtC,MAAM,WAAW,QAAQ,SAAS,KAAK,IAAI;CAC3C,MAAM,cAAc,QAAQ,IAAI,gBAAgB;AAChD,QACE,SAAS,SAAS,qBAAqB,IACvC,YAAY,SAAS,qBAAqB;;AAI9C,SAAS,iBAAiB,OAA+C;AACvE,QACE,UAAU,aACV,UAAU,kBACV,UAAU,sBACV,UAAU,gBACV,UAAU,mBACV,UAAU,yBACV,UAAU;;AAId,SAAS,uBAAuB,OAAwB;AACtD,KAAI,iBAAiB,MACnB,QAAO,MAAM;AAGf,KAAI,OAAO,UAAU,YAAY,UAAU,QAAQ,aAAa,OAAO;EACrE,MAAM,UAAW,MAAgC;AACjD,MAAI,OAAO,YAAY,SACrB,QAAO;;AAIX,QAAO,OAAO,MAAM;;AAGtB,SAAS,aACP,MACA,aACA,aACU;CACV,MAAM,eAAe,KAAK,MAAM,GAAG,YAAY;CAC/C,IAAI,iBAAiB;CACrB,MAAMC,YAAsB,EAAE;AAE9B,MAAK,MAAM,QAAQ,cAAc;AAC/B,MAAI,kBAAkB,EACpB;AAGF,MAAI,KAAK,UAAU,gBAAgB;AACjC,aAAU,KAAK,KAAK;AACpB,qBAAkB,KAAK;AACvB;;AAGF,YAAU,KAAK,KAAK,MAAM,GAAG,eAAe,CAAC;AAC7C;;AAGF,QAAO;;AAGT,SAAS,eAAe,OAAwB;AAC9C,KAAI,OAAO,UAAU,SACnB,QAAO;AAGT,KAAI,UAAU,OACZ,QAAO;AAGT,KAAI;AACF,SAAO,KAAK,UAAU,MAAM;SACtB;AACN,SAAO,OAAO,MAAM;;;AAIxB,SAAS,kBAAkB,QAA2B;AACpD,QAAO,OAAO,KAAK,UAAU,eAAe,MAAM,CAAC,CAAC,KAAK,IAAI;;AAG/D,SAAS,YAAY,OAAgB,SAA0B;AAC7D,KAAI,UAAU,OACZ;CAGF,MAAM,YAAY,KAAK,UAAU,MAAM;AAEvC,KAAI,cAAc,OAChB,OAAM,IAAIC,iCAAe,uBAAuB,QAAQ;AAG1D,KAAI;AACF,SAAO,KAAK,MAAM,UAAU;SACtB;AACN,QAAM,IAAIA,iCAAe,uBAAuB,QAAQ;;;AAI5D,SAAS,oBAAoB,KAAuB,OAAyB;CAC3E,MAAM,kBAAkB,YACtB,OACA,sCACD;AAED,KACE,oBAAoB,QACpB,oBAAoB,UACpB,OAAO,oBAAoB,YAC3B,OAAO,oBAAoB,YAC3B,OAAO,oBAAoB,UAE3B,QAAO;AAIT,QADa,IAAI,IAAI,aAAa,gBAAgB,CACtC,SAAS,EAAE,SAAS,MAAM,CAAC;;AAGzC,SAAS,eAAe,OAAgB,UAAgC;AACtE,KACE,OAAO,UAAU,YACjB,UAAU,QACV,UAAU,SACV,aAAa,SACb,iBAAkB,MAA6B,KAAK,IACpD,OAAQ,MAAgC,YAAY,SAEpD,QAAO;EACL,MAAO,MAAyC;EAChD,SAAU,MAA8B;EACzC;AAGH,6CAAqB,MAAM,CACzB,QAAO;EACL,MAAM,MAAM;EACZ,SAAS,MAAM;EAChB;CAGH,MAAM,UAAU,uBAAuB,MAAM;CAC7C,MAAM,oBAAoB,QAAQ,aAAa;AAE/C,KACE,KAAK,KAAK,GAAG,YACb,kBAAkB,SAAS,YAAY,IACvC,kBAAkB,SAAS,aAAa,CAExC,QAAO;EACL,MAAM;EACN,SAAS;EACV;AAGH,KACE,kBAAkB,SAAS,eAAe,IAC1C,kBAAkB,SAAS,gBAAgB,CAE3C,QAAO;EACL,MAAM;EACN;EACD;AAGH,KACE,kBAAkB,SAAS,sBAAsB,IACjD,kBAAkB,SAAS,mBAAmB,IAC9C,kBAAkB,SAAS,wBAAwB,CAEnD,QAAO;EACL,MAAM;EACN;EACD;AAGH,QAAO;EACL,MAAM;EACN;EACD;;AAGH,SAAS,gBAAgB,kBAAkC;AACzD,QAAO,KAAK,IAAI,GAAG,KAAK,KAAK,oBAAoB,OAAO,MAAM,CAAC;;AAGjE,SAAS,cAAc,UAA0B;AAC/C,QAAO,KAAK,IAAI,GAAG,WAAW,KAAK,KAAK,CAAC;;AAG3C,eAAe,gBACb,WACA,UACA,QACY;AACZ,KAAI,OAAO,WAAW,KAAK,KAAK,GAAG,SACjC,OAAM,IAAIA,iCAAe,WAAW,sBAAsB;CAG5D,MAAM,YAAY,cAAc,SAAS;AACzC,KAAI,aAAa,EACf,OAAM,IAAIA,iCAAe,WAAW,sBAAsB;CAG5D,IAAIC;AAEJ,QAAO,MAAM,IAAI,SAAY,SAAS,WAAW;EAC/C,MAAM,gBAAgB;AACpB,UAAO,IAAID,iCAAe,WAAW,sBAAsB,CAAC;;AAG9D,SAAO,iBAAiB,SAAS,SAAS,EAAE,MAAM,MAAM,CAAC;AACzD,cAAY,iBAAiB;AAC3B,UAAO,oBAAoB,SAAS,QAAQ;AAC5C,UAAO,IAAIA,iCAAe,WAAW,sBAAsB,CAAC;KAC3D,UAAU;AAEb,EAAK,UAAU,MACZ,UAAU;AACT,UAAO,oBAAoB,SAAS,QAAQ;AAC5C,OAAI,UACF,cAAa,UAAU;AAEzB,WAAQ,MAAM;MAEf,UAAU;AACT,UAAO,oBAAoB,SAAS,QAAQ;AAC5C,OAAI,UACF,cAAa,UAAU;AAEzB,UAAO,MAAM;IAEhB;GACD;;AAGJ,eAAe,oBAA+C;AAC5D,yBAAwB,OAAO,eAAe,MAAM,WAAW;AAI7D,SAFE,aAAa,SAAS,OAAO,UAAU;GAGzC;AAEF,QAAO;;AAGT,SAAS,sBACP,WACA,WACQ;CACR,MAAM,QAAQ;EACZ,mCAAmC,KAAK,UAAU,kBAAkB,CAAC;EACrE;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACD;AAED,MAAK,MAAM,YAAY,WAAW;AAChC,QAAM,KAAK,cAAc,SAAS,KAAK,QAAQ;AAE/C,OAAK,MAAM,gBAAgB,OAAO,KAAK,SAAS,MAAM,EAAE;GACtD,MAAM,oBAAoB,cAAc,SAAS,KAAK,GAAG;AACzD,SAAM,KACJ,cAAc,SAAS,KAAK,GAAG,aAAa,wBAC5C,WACA,oBAAoB,kBAAkB,8EAA8E,UAAU,OAC9H,uBACA,yCACA,OACA,KACD;;;AAIL,QAAO,MAAM,KAAK,KAAK;;AAGzB,SAAS,sBAAsB,MAAsB;AAGnD,QAAO;EACL,mEAHqC,KAAK,CAGK;EAC/C;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACD,CAAC,KAAK,KAAK;;AAGd,SAAS,mBAAmB,SAA4B,MAAsB;CAC5E,MAAM,OAAO,QAAQ;AACrB,MAAK,QAAQ,sBAAsB,GAAG,SAAoB;AACxD,OAAK,KAAK,kBAAkB,KAAK,CAAC;GAClC;AACF,MAAK,QAAQ,uBAAuB,GAAG,SAAoB;AACzD,OAAK,KAAK,kBAAkB,KAAK,CAAC;GAClC;AACF,MAAK,QAAQ,uBAAuB,GAAG,SAAoB;AACzD,OAAK,KAAK,kBAAkB,KAAK,CAAC;GAClC;AACF,MAAK,QAAQ,wBAAwB,GAAG,SAAoB;AAC1D,OAAK,KAAK,kBAAkB,KAAK,CAAC;GAClC;;AAGJ,SAAS,oBACP,KACA,SACA,WACA,QACA,UACM;CACN,MAAM,OAAO,QAAQ;AAErB,MAAK,MAAM,YAAY,UACrB,MAAK,MAAM,CAAC,cAAc,eAAe,OAAO,QAAQ,SAAS,MAAM,EAAE;EACvE,MAAM,oBAAoB,cAAc,SAAS,KAAK,GAAG;AAEzD,OAAK,QACH,mBACA,OAAO,UAAmB;GACxB,MAAM,mBAAmB,uBACvB,QACA,SAAS,MACT,cACA,WAAW,aACZ;AAED,OAAI;IACF,MAAM,kBACJ,UAAU,SACN,SACA,YACE,OACA,kDACD;AASP,WAAO,oBAAoB,KARZ,MAAM,gBACnB,QAAQ,QACN,WAAW,QAAQ,iBAAiB,iBAAiB,CACtD,EACD,UACA,OACD,CAEsC;YAChC,OAAO;IACd,MAAM,eAAe,eAAe,OAAO,SAAS;AACpD,UAAM,IAAI,MACR,GAAG,oBAAoB,KAAK,UAAU,aAAa,IACnD,EACE,OAAO,OACR,CACF;;KAGL,EAAE,WAAW,MAAM,CACpB;;;;;;AAQP,IAAa,qBAAb,MAAoD;CAClD,AAAiB;CACjB,AAAiB;CACjB,AAAiB;CACjB,AAAiB;CACjB,AAAiB;CAEjB,YAAY,UAAqC,EAAE,EAAE;AACnD,OAAK,aAAa,YAAY;AAI5B,UAHe,QAAQ,aACnB,MAAM,QAAQ,YAAY,GAC1B,MAAM,mBAAmB;;AAG/B,OAAK,cAAc,QAAQ,eAAe;AAC1C,OAAK,cAAc,QAAQ,eAAe;AAC1C,OAAK,mBACH,QAAQ,oBAAoB;AAC9B,OAAK,YAAY,QAAQ,aAAa;;;;;CAMxC,MAAM,QACJ,MACA,WACwB;EACxB,MAAM,YAAY,KAAK,KAAK;EAC5B,MAAM,WAAW,YAAY,KAAK;EAClC,MAAME,OAAiB,EAAE;EACzB,MAAM,kBAAkB,IAAI,iBAAiB;AAM7C,MALyB,OAAO,SAC9B,QAAQ,SAAS,KAAK,MAAM,IAAI,CAAC,MAAM,KACvC,GACD,IAEuB,MAAM,CAAC,qBAAqB,CAClD,QAAO;GACL,YAAY,KAAK,KAAK,GAAG;GACzB,OAAO;IACL,MAAM;IACN,SACE;IACH;GACD;GACA,IAAI;GACL;EAGH,IAAIC;EACJ,IAAIC;EACJ,IAAIC;AAEJ,MAAI;GACF,MAAM,MAAM,MAAM,KAAK,YAAY;AACnC,aAAU,IAAI,IAAI,QAAQ;IACxB,aAAa,gBAAgB,KAAK,iBAAiB;IACnD,sBAAsB,YAAY;AAChC,gCAA2B;AAC3B,qBAAgB,OAAO;;IAE1B,CAAC;AACF,aAAU,MAAM,QAAQ,eAAe;AAEvC,sBAAmB,SAAS,KAAK;AACjC,uBACE,KACA,SACA,WACA,gBAAgB,QAChB,SACD;AACD,SAAM,QAAQ,KAAK,sBAAsB,WAAW,KAAK,UAAU,EAAE,EACnE,SAAS,KAAK,WACf,CAAC;GAEF,MAAM,YAAa,MAAM,QAAQ,YAC/B,sBAAsB,KAAK,EAC3B,EAAE,EACF;IACE,SAAS,KAAK;IACd,QAAQ;KAAE,MAAM;KAAM,SAAS;KAAM;IACtC,CACF;AAED,OAAI,yBACF,QAAO;IACL,YAAY,KAAK,KAAK,GAAG;IACzB,OAAO;KACL,MAAM;KACN,SAAS,mCAAmC;KAC7C;IACD,MAAM,aAAa,MAAM,KAAK,aAAa,KAAK,YAAY;IAC5D,IAAI;IACL;AAGH,OAAI,CAAC,UAAU,GACb,QAAO;IACL,YAAY,KAAK,KAAK,GAAG;IACzB,OAAO,eAAe,UAAU,OAAO,SAAS;IAChD,MAAM,aAAa,MAAM,KAAK,aAAa,KAAK,YAAY;IAC5D,IAAI;IACL;AAGH,UAAO;IACL,YAAY,KAAK,KAAK,GAAG;IACzB,MAAM,aAAa,MAAM,KAAK,aAAa,KAAK,YAAY;IAC5D,IAAI;IACJ,QAAQ,UAAU;IACnB;WACM,OAAO;GACd,MAAM,eACJ,6BAA6B,SACzB;IACE,MAAM;IACN,SAAS,mCAAmC;IAC7C,GACD,eAAe,OAAO,SAAS;AAErC,UAAO;IACL,YAAY,KAAK,KAAK,GAAG;IACzB,OAAO;IACP,MAAM,aAAa,MAAM,KAAK,aAAa,KAAK,YAAY;IAC5D,IAAI;IACL;YACO;AACR,mBAAgB,OAAO;AACvB,YAAS,WAAW;AACpB,YAAS,SAAS"}

package/dist/index.d.cts

@@ -0,0 +1,38 @@
+import { ExecuteResult, Executor, ResolvedToolProvider } from "@mcploom/codexec";
+
+//#region src/types.d.ts
+/**
+ * Options for constructing an {@link IsolatedVmExecutor}.
+ */
+interface IsolatedVmExecutorOptions {
+  /** Optional isolated-vm module loader override for tests or custom builds. */
+  loadModule?: () => Promise<unknown> | unknown;
+  /** Maximum total characters preserved across captured log lines. */
+  maxLogChars?: number;
+  /** Maximum number of captured log lines returned in the result. */
+  maxLogLines?: number;
+  /** Guest memory limit in bytes. */
+  memoryLimitBytes?: number;
+  /** Wall-clock execution timeout in milliseconds. */
+  timeoutMs?: number;
+}
+//#endregion
+//#region src/isolatedVmExecutor.d.ts
+/**
+ * isolated-vm-backed executor for one-shot sandboxed JavaScript runs.
+ */
+declare class IsolatedVmExecutor implements Executor {
+  private readonly loadModule;
+  private readonly maxLogChars;
+  private readonly maxLogLines;
+  private readonly memoryLimitBytes;
+  private readonly timeoutMs;
+  constructor(options?: IsolatedVmExecutorOptions);
+  /**
+   * Executes JavaScript against the provided tool namespaces in a fresh isolated-vm context.
+   */
+  execute(code: string, providers: ResolvedToolProvider[]): Promise<ExecuteResult>;
+}
+//#endregion
+export { IsolatedVmExecutor, type IsolatedVmExecutorOptions };
+//# sourceMappingURL=index.d.cts.map

package/dist/index.d.cts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.cts","names":[],"sources":["../src/types.ts","../src/isolatedVmExecutor.ts"],"sourcesContent":[],"mappings":";;;;;;AAGiB,UAAA,yBAAA,CAEI;;qBAAA;;EC+eR,WAAA,CAAA,EAAA,MAAA;EAOU;EAmBR,WAAA,CAAA,EAAA,MAAA;EACF;EAAR,gBAAA,CAAA,EAAA,MAAA;EA3BsC;EAAQ,SAAA,CAAA,EAAA,MAAA;;;;;ADjfnD;;cCifa,kBAAA,YAA8B;;EAA9B,iBAAA,WAAmB;EAOT,iBAAA,WAAA;EAmBR,iBAAA,gBAAA;EACF,iBAAA,SAAA;EAAR,WAAA,CAAA,OAAA,CAAA,EApBkB,yBAoBlB;EA3BsC;;;mCA0B5B,yBACV,QAAQ"}

package/dist/index.d.ts

@@ -0,0 +1,38 @@
+import { ExecuteResult, Executor, ResolvedToolProvider } from "@mcploom/codexec";
+
+//#region src/types.d.ts
+/**
+ * Options for constructing an {@link IsolatedVmExecutor}.
+ */
+interface IsolatedVmExecutorOptions {
+  /** Optional isolated-vm module loader override for tests or custom builds. */
+  loadModule?: () => Promise<unknown> | unknown;
+  /** Maximum total characters preserved across captured log lines. */
+  maxLogChars?: number;
+  /** Maximum number of captured log lines returned in the result. */
+  maxLogLines?: number;
+  /** Guest memory limit in bytes. */
+  memoryLimitBytes?: number;
+  /** Wall-clock execution timeout in milliseconds. */
+  timeoutMs?: number;
+}
+//#endregion
+//#region src/isolatedVmExecutor.d.ts
+/**
+ * isolated-vm-backed executor for one-shot sandboxed JavaScript runs.
+ */
+declare class IsolatedVmExecutor implements Executor {
+  private readonly loadModule;
+  private readonly maxLogChars;
+  private readonly maxLogLines;
+  private readonly memoryLimitBytes;
+  private readonly timeoutMs;
+  constructor(options?: IsolatedVmExecutorOptions);
+  /**
+   * Executes JavaScript against the provided tool namespaces in a fresh isolated-vm context.
+   */
+  execute(code: string, providers: ResolvedToolProvider[]): Promise<ExecuteResult>;
+}
+//#endregion
+export { IsolatedVmExecutor, type IsolatedVmExecutorOptions };
+//# sourceMappingURL=index.d.ts.map

package/dist/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","names":[],"sources":["../src/types.ts","../src/isolatedVmExecutor.ts"],"sourcesContent":[],"mappings":";;;;;;AAGiB,UAAA,yBAAA,CAEI;;qBAAA;;EC+eR,WAAA,CAAA,EAAA,MAAA;EAOU;EAmBR,WAAA,CAAA,EAAA,MAAA;EACF;EAAR,gBAAA,CAAA,EAAA,MAAA;EA3BsC;EAAQ,SAAA,CAAA,EAAA,MAAA;;;;;ADjfnD;;cCifa,kBAAA,YAA8B;;EAA9B,iBAAA,WAAmB;EAOT,iBAAA,WAAA;EAmBR,iBAAA,gBAAA;EACF,iBAAA,SAAA;EAAR,WAAA,CAAA,OAAA,CAAA,EApBkB,yBAoBlB;EA3BsC;;;mCA0B5B,yBACV,QAAQ"}

package/dist/index.js

@@ -0,0 +1,340 @@
+import { ExecuteFailure, isExecuteFailure, normalizeCode } from "@mcploom/codexec";
+
+//#region src/isolatedVmExecutor.ts
+const DEFAULT_MEMORY_LIMIT_BYTES = 64 * 1024 * 1024;
+const DEFAULT_TIMEOUT_MS = 5e3;
+const DEFAULT_MAX_LOG_LINES = 100;
+const DEFAULT_MAX_LOG_CHARS = 64e3;
+const HOST_ERROR_PREFIX = "__MCP_CODE_EXEC_HOST_ERROR__";
+let cachedModulePromise;
+function createExecutionContext(signal, providerName, safeToolName, originalToolName) {
+	return {
+		originalToolName,
+		providerName,
+		safeToolName,
+		signal
+	};
+}
+function hasRequiredNodeFlag() {
+	const execArgv = process.execArgv.join(" ");
+	const nodeOptions = process.env.NODE_OPTIONS ?? "";
+	return execArgv.includes("--no-node-snapshot") || nodeOptions.includes("--no-node-snapshot");
+}
+function isKnownErrorCode(value) {
+	return value === "timeout" || value === "memory_limit" || value === "validation_error" || value === "tool_error" || value === "runtime_error" || value === "serialization_error" || value === "internal_error";
+}
+function normalizeThrownMessage(error) {
+	if (error instanceof Error) return error.message;
+	if (typeof error === "object" && error !== null && "message" in error) {
+		const message = error.message;
+		if (typeof message === "string") return message;
+	}
+	return String(error);
+}
+function truncateLogs(logs, maxLogLines, maxLogChars) {
+	const limitedLines = logs.slice(0, maxLogLines);
+	let remainingChars = maxLogChars;
+	const truncated = [];
+	for (const line of limitedLines) {
+		if (remainingChars <= 0) break;
+		if (line.length <= remainingChars) {
+			truncated.push(line);
+			remainingChars -= line.length;
+			continue;
+		}
+		truncated.push(line.slice(0, remainingChars));
+		break;
+	}
+	return truncated;
+}
+function formatLogValue(value) {
+	if (typeof value === "string") return value;
+	if (value === void 0) return "undefined";
+	try {
+		return JSON.stringify(value);
+	} catch {
+		return String(value);
+	}
+}
+function formatConsoleLine(values) {
+	return values.map((value) => formatLogValue(value)).join(" ");
+}
+function toJsonValue(value, message) {
+	if (value === void 0) return;
+	const jsonValue = JSON.stringify(value);
+	if (jsonValue === void 0) throw new ExecuteFailure("serialization_error", message);
+	try {
+		return JSON.parse(jsonValue);
+	} catch {
+		throw new ExecuteFailure("serialization_error", message);
+	}
+}
+function toTransferableValue(ivm, value) {
+	const normalizedValue = toJsonValue(value, "Host value is not JSON-serializable");
+	if (normalizedValue === null || normalizedValue === void 0 || typeof normalizedValue === "string" || typeof normalizedValue === "number" || typeof normalizedValue === "boolean") return normalizedValue;
+	return new ivm.ExternalCopy(normalizedValue).copyInto({ release: true });
+}
+function toExecuteError(error, deadline) {
+	if (typeof error === "object" && error !== null && "code" in error && "message" in error && isKnownErrorCode(error.code) && typeof error.message === "string") return {
+		code: error.code,
+		message: error.message
+	};
+	if (isExecuteFailure(error)) return {
+		code: error.code,
+		message: error.message
+	};
+	const message = normalizeThrownMessage(error);
+	const normalizedMessage = message.toLowerCase();
+	if (Date.now() > deadline || normalizedMessage.includes("timed out") || normalizedMessage.includes("time limit")) return {
+		code: "timeout",
+		message: "Execution timed out"
+	};
+	if (normalizedMessage.includes("memory limit") || normalizedMessage.includes("out of memory")) return {
+		code: "memory_limit",
+		message
+	};
+	if (normalizedMessage.includes("could not be cloned") || normalizedMessage.includes("non-transferable") || normalizedMessage.includes("not json-serializable")) return {
+		code: "serialization_error",
+		message
+	};
+	return {
+		code: "runtime_error",
+		message
+	};
+}
+function toMemoryLimitMb(memoryLimitBytes) {
+	return Math.max(8, Math.ceil(memoryLimitBytes / (1024 * 1024)));
+}
+function remainingTime(deadline) {
+	return Math.max(0, deadline - Date.now());
+}
+async function runWithDeadline(operation, deadline, signal) {
+	if (signal.aborted || Date.now() > deadline) throw new ExecuteFailure("timeout", "Execution timed out");
+	const timeoutMs = remainingTime(deadline);
+	if (timeoutMs <= 0) throw new ExecuteFailure("timeout", "Execution timed out");
+	let timeoutId;
+	return await new Promise((resolve, reject) => {
+		const onAbort = () => {
+			reject(new ExecuteFailure("timeout", "Execution timed out"));
+		};
+		signal.addEventListener("abort", onAbort, { once: true });
+		timeoutId = setTimeout(() => {
+			signal.removeEventListener("abort", onAbort);
+			reject(new ExecuteFailure("timeout", "Execution timed out"));
+		}, timeoutMs);
+		operation.then((value) => {
+			signal.removeEventListener("abort", onAbort);
+			if (timeoutId) clearTimeout(timeoutId);
+			resolve(value);
+		}, (error) => {
+			signal.removeEventListener("abort", onAbort);
+			if (timeoutId) clearTimeout(timeoutId);
+			reject(error);
+		});
+	});
+}
+async function loadDefaultModule() {
+	cachedModulePromise ??= import("isolated-vm").then((loaded) => {
+		return "default" in loaded ? loaded.default : loaded;
+	});
+	return cachedModulePromise;
+}
+function createBootstrapSource(providers, timeoutMs) {
+	const lines = [
+		`const __MCP_HOST_ERROR_PREFIX = ${JSON.stringify(HOST_ERROR_PREFIX)};`,
+		"const __mcpNormalizeError = (error) => {",
+		"  if (error && typeof error === 'object' && typeof error.code === 'string' && typeof error.message === 'string') {",
+		"    return { code: error.code, message: error.message };",
+		"  }",
+		"  if (error && typeof error.message === 'string' && error.message.startsWith(__MCP_HOST_ERROR_PREFIX)) {",
+		"    try {",
+		"      const payload = JSON.parse(error.message.slice(__MCP_HOST_ERROR_PREFIX.length));",
+		"      if (payload && typeof payload.code === 'string' && typeof payload.message === 'string') {",
+		"        return payload;",
+		"      }",
+		"    } catch {}",
+		"  }",
+		"  if (error && typeof error.message === 'string') {",
+		"    return { code: 'runtime_error', message: error.message };",
+		"  }",
+		"  return { code: 'runtime_error', message: String(error) };",
+		"};",
+		"const __mcpRaiseNormalizedError = (error) => {",
+		"  const normalized = __mcpNormalizeError(error);",
+		"  const wrapped = new Error(normalized.message);",
+		"  wrapped.code = normalized.code;",
+		"  throw wrapped;",
+		"};",
+		"const __mcpToJsonValue = (value) => {",
+		"  if (typeof value === 'undefined') {",
+		"    return undefined;",
+		"  }",
+		"  const json = JSON.stringify(value);",
+		"  if (typeof json === 'undefined') {",
+		"    const error = new Error('Guest code returned a non-serializable value');",
+		"    error.code = 'serialization_error';",
+		"    throw error;",
+		"  }",
+		"  return JSON.parse(json);",
+		"};",
+		"globalThis.console = {",
+		"  log: (...args) => __mcp_console_log(...args),",
+		"  info: (...args) => __mcp_console_info(...args),",
+		"  warn: (...args) => __mcp_console_warn(...args),",
+		"  error: (...args) => __mcp_console_error(...args),",
+		"};"
+	];
+	for (const provider of providers) {
+		lines.push(`globalThis.${provider.name} = {};`);
+		for (const safeToolName of Object.keys(provider.tools)) {
+			const hostReferenceName = `__mcp_tool_${provider.name}_${safeToolName}`;
+			lines.push(`globalThis.${provider.name}.${safeToolName} = async (input) => {`, "  try {", `    return await ${hostReferenceName}.applySyncPromise(undefined, [input], { arguments: { copy: true }, timeout: ${timeoutMs} });`, "  } catch (error) {", "    __mcpRaiseNormalizedError(error);", "  }", "};");
+		}
+	}
+	return lines.join("\n");
+}
+function createExecutionSource(code) {
+	return [
+		`const __mcpUserFunction = (${normalizeCode(code)});`,
+		"return (async () => {",
+		"  try {",
+		"    const value = await __mcpUserFunction();",
+		"    return { ok: true, value: __mcpToJsonValue(value) };",
+		"  } catch (error) {",
+		"    return { ok: false, error: __mcpNormalizeError(error) };",
+		"  }",
+		"})();"
+	].join("\n");
+}
+function setConsoleBindings(context, logs) {
+	const jail = context.global;
+	jail.setSync("__mcp_console_log", (...args) => {
+		logs.push(formatConsoleLine(args));
+	});
+	jail.setSync("__mcp_console_info", (...args) => {
+		logs.push(formatConsoleLine(args));
+	});
+	jail.setSync("__mcp_console_warn", (...args) => {
+		logs.push(formatConsoleLine(args));
+	});
+	jail.setSync("__mcp_console_error", (...args) => {
+		logs.push(formatConsoleLine(args));
+	});
+}
+function setProviderBindings(ivm, context, providers, signal, deadline) {
+	const jail = context.global;
+	for (const provider of providers) for (const [safeToolName, descriptor] of Object.entries(provider.tools)) {
+		const hostReferenceName = `__mcp_tool_${provider.name}_${safeToolName}`;
+		jail.setSync(hostReferenceName, async (input) => {
+			const executionContext = createExecutionContext(signal, provider.name, safeToolName, descriptor.originalName);
+			try {
+				const normalizedInput = input === void 0 ? void 0 : toJsonValue(input, "Guest code passed a non-serializable tool input");
+				return toTransferableValue(ivm, await runWithDeadline(Promise.resolve(descriptor.execute(normalizedInput, executionContext)), deadline, signal));
+			} catch (error) {
+				const executeError = toExecuteError(error, deadline);
+				throw new Error(`${HOST_ERROR_PREFIX}${JSON.stringify(executeError)}`, { cause: error });
+			}
+		}, { reference: true });
+	}
+}
+/**
+* isolated-vm-backed executor for one-shot sandboxed JavaScript runs.
+*/
+var IsolatedVmExecutor = class {
+	loadModule;
+	maxLogChars;
+	maxLogLines;
+	memoryLimitBytes;
+	timeoutMs;
+	constructor(options = {}) {
+		this.loadModule = async () => {
+			return options.loadModule ? await options.loadModule() : await loadDefaultModule();
+		};
+		this.maxLogChars = options.maxLogChars ?? DEFAULT_MAX_LOG_CHARS;
+		this.maxLogLines = options.maxLogLines ?? DEFAULT_MAX_LOG_LINES;
+		this.memoryLimitBytes = options.memoryLimitBytes ?? DEFAULT_MEMORY_LIMIT_BYTES;
+		this.timeoutMs = options.timeoutMs ?? DEFAULT_TIMEOUT_MS;
+	}
+	/**
+	* Executes JavaScript against the provided tool namespaces in a fresh isolated-vm context.
+	*/
+	async execute(code, providers) {
+		const startedAt = Date.now();
+		const deadline = startedAt + this.timeoutMs;
+		const logs = [];
+		const abortController = new AbortController();
+		if (Number.parseInt(process.versions.node.split(".")[0] ?? "0", 10) >= 20 && !hasRequiredNodeFlag()) return {
+			durationMs: Date.now() - startedAt,
+			error: {
+				code: "internal_error",
+				message: "isolated-vm requires Node to run with --no-node-snapshot on Node 20+"
+			},
+			logs,
+			ok: false
+		};
+		let catastrophicErrorMessage;
+		let isolate;
+		let context;
+		try {
+			const ivm = await this.loadModule();
+			isolate = new ivm.Isolate({
+				memoryLimit: toMemoryLimitMb(this.memoryLimitBytes),
+				onCatastrophicError: (message) => {
+					catastrophicErrorMessage = message;
+					abortController.abort();
+				}
+			});
+			context = await isolate.createContext();
+			setConsoleBindings(context, logs);
+			setProviderBindings(ivm, context, providers, abortController.signal, deadline);
+			await context.eval(createBootstrapSource(providers, this.timeoutMs), { timeout: this.timeoutMs });
+			const execution = await context.evalClosure(createExecutionSource(code), [], {
+				timeout: this.timeoutMs,
+				result: {
+					copy: true,
+					promise: true
+				}
+			});
+			if (catastrophicErrorMessage) return {
+				durationMs: Date.now() - startedAt,
+				error: {
+					code: "internal_error",
+					message: `isolated-vm catastrophic error: ${catastrophicErrorMessage}`
+				},
+				logs: truncateLogs(logs, this.maxLogLines, this.maxLogChars),
+				ok: false
+			};
+			if (!execution.ok) return {
+				durationMs: Date.now() - startedAt,
+				error: toExecuteError(execution.error, deadline),
+				logs: truncateLogs(logs, this.maxLogLines, this.maxLogChars),
+				ok: false
+			};
+			return {
+				durationMs: Date.now() - startedAt,
+				logs: truncateLogs(logs, this.maxLogLines, this.maxLogChars),
+				ok: true,
+				result: execution.value
+			};
+		} catch (error) {
+			const executeError = catastrophicErrorMessage !== void 0 ? {
+				code: "internal_error",
+				message: `isolated-vm catastrophic error: ${catastrophicErrorMessage}`
+			} : toExecuteError(error, deadline);
+			return {
+				durationMs: Date.now() - startedAt,
+				error: executeError,
+				logs: truncateLogs(logs, this.maxLogLines, this.maxLogChars),
+				ok: false
+			};
+		} finally {
+			abortController.abort();
+			context?.release?.();
+			isolate?.dispose();
+		}
+	}
+};
+
+//#endregion
+export { IsolatedVmExecutor };
+//# sourceMappingURL=index.js.map

package/dist/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","names":["cachedModulePromise: Promise<IsolatedVmModule> | undefined","truncated: string[]","timeoutId: ReturnType<typeof setTimeout> | undefined","logs: string[]","catastrophicErrorMessage: string | undefined","isolate: IsolatedVmIsolate | undefined","context: IsolatedVmContext | undefined"],"sources":["../src/isolatedVmExecutor.ts"],"sourcesContent":["import {\n  ExecuteFailure,\n  isExecuteFailure,\n  normalizeCode,\n} from \"@mcploom/codexec\";\nimport type {\n  ExecuteError,\n  ExecuteResult,\n  Executor,\n  ResolvedToolProvider,\n  ToolExecutionContext,\n} from \"@mcploom/codexec\";\n\nimport type { IsolatedVmExecutorOptions } from \"./types\";\n\ntype IsolatedVmExternalCopyInstance = {\n  copyInto: (options?: { release?: boolean; transferIn?: boolean }) => unknown;\n  release?: () => void;\n};\n\ntype IsolatedVmReferenceInstance = {\n  setSync: (\n    property: string,\n    value: unknown,\n    options?: Record<string, unknown>,\n  ) => void;\n};\n\ntype IsolatedVmContext = {\n  eval: (code: string, options?: Record<string, unknown>) => Promise<unknown>;\n  evalClosure: (\n    code: string,\n    args?: unknown[],\n    options?: Record<string, unknown>,\n  ) => Promise<unknown>;\n  global: IsolatedVmReferenceInstance;\n  release?: () => void;\n};\n\ntype IsolatedVmIsolate = {\n  createContext: () => Promise<IsolatedVmContext>;\n  dispose: () => void;\n};\n\ntype IsolatedVmModule = {\n  ExternalCopy: new (\n    value: unknown,\n    options?: Record<string, unknown>,\n  ) => IsolatedVmExternalCopyInstance;\n  Isolate: new (options?: {\n    inspector?: boolean;\n    memoryLimit?: number;\n    onCatastrophicError?: (message: string) => void;\n  }) => IsolatedVmIsolate;\n};\n\ntype GuestExecutionEnvelope =\n  | {\n      ok: true;\n      value: unknown;\n    }\n  | {\n      error: {\n        code?: string;\n        message?: string;\n      };\n      ok: false;\n    };\n\nconst DEFAULT_MEMORY_LIMIT_BYTES = 64 * 1024 * 1024;\nconst DEFAULT_TIMEOUT_MS = 5000;\nconst DEFAULT_MAX_LOG_LINES = 100;\nconst DEFAULT_MAX_LOG_CHARS = 64_000;\nconst HOST_ERROR_PREFIX = \"__MCP_CODE_EXEC_HOST_ERROR__\";\n\nlet cachedModulePromise: Promise<IsolatedVmModule> | undefined;\n\nfunction createExecutionContext(\n  signal: AbortSignal,\n  providerName: string,\n  safeToolName: string,\n  originalToolName: string,\n): ToolExecutionContext {\n  return {\n    originalToolName,\n    providerName,\n    safeToolName,\n    signal,\n  };\n}\n\nfunction hasRequiredNodeFlag(): boolean {\n  const execArgv = process.execArgv.join(\" \");\n  const nodeOptions = process.env.NODE_OPTIONS ?? \"\";\n  return (\n    execArgv.includes(\"--no-node-snapshot\") ||\n    nodeOptions.includes(\"--no-node-snapshot\")\n  );\n}\n\nfunction isKnownErrorCode(value: unknown): value is ExecuteError[\"code\"] {\n  return (\n    value === \"timeout\" ||\n    value === \"memory_limit\" ||\n    value === \"validation_error\" ||\n    value === \"tool_error\" ||\n    value === \"runtime_error\" ||\n    value === \"serialization_error\" ||\n    value === \"internal_error\"\n  );\n}\n\nfunction normalizeThrownMessage(error: unknown): string {\n  if (error instanceof Error) {\n    return error.message;\n  }\n\n  if (typeof error === \"object\" && error !== null && \"message\" in error) {\n    const message = (error as { message?: unknown }).message;\n    if (typeof message === \"string\") {\n      return message;\n    }\n  }\n\n  return String(error);\n}\n\nfunction truncateLogs(\n  logs: string[],\n  maxLogLines: number,\n  maxLogChars: number,\n): string[] {\n  const limitedLines = logs.slice(0, maxLogLines);\n  let remainingChars = maxLogChars;\n  const truncated: string[] = [];\n\n  for (const line of limitedLines) {\n    if (remainingChars <= 0) {\n      break;\n    }\n\n    if (line.length <= remainingChars) {\n      truncated.push(line);\n      remainingChars -= line.length;\n      continue;\n    }\n\n    truncated.push(line.slice(0, remainingChars));\n    break;\n  }\n\n  return truncated;\n}\n\nfunction formatLogValue(value: unknown): string {\n  if (typeof value === \"string\") {\n    return value;\n  }\n\n  if (value === undefined) {\n    return \"undefined\";\n  }\n\n  try {\n    return JSON.stringify(value);\n  } catch {\n    return String(value);\n  }\n}\n\nfunction formatConsoleLine(values: unknown[]): string {\n  return values.map((value) => formatLogValue(value)).join(\" \");\n}\n\nfunction toJsonValue(value: unknown, message: string): unknown {\n  if (value === undefined) {\n    return undefined;\n  }\n\n  const jsonValue = JSON.stringify(value);\n\n  if (jsonValue === undefined) {\n    throw new ExecuteFailure(\"serialization_error\", message);\n  }\n\n  try {\n    return JSON.parse(jsonValue) as unknown;\n  } catch {\n    throw new ExecuteFailure(\"serialization_error\", message);\n  }\n}\n\nfunction toTransferableValue(ivm: IsolatedVmModule, value: unknown): unknown {\n  const normalizedValue = toJsonValue(\n    value,\n    \"Host value is not JSON-serializable\",\n  );\n\n  if (\n    normalizedValue === null ||\n    normalizedValue === undefined ||\n    typeof normalizedValue === \"string\" ||\n    typeof normalizedValue === \"number\" ||\n    typeof normalizedValue === \"boolean\"\n  ) {\n    return normalizedValue;\n  }\n\n  const copy = new ivm.ExternalCopy(normalizedValue);\n  return copy.copyInto({ release: true });\n}\n\nfunction toExecuteError(error: unknown, deadline: number): ExecuteError {\n  if (\n    typeof error === \"object\" &&\n    error !== null &&\n    \"code\" in error &&\n    \"message\" in error &&\n    isKnownErrorCode((error as { code?: unknown }).code) &&\n    typeof (error as { message?: unknown }).message === \"string\"\n  ) {\n    return {\n      code: (error as { code: ExecuteError[\"code\"] }).code,\n      message: (error as { message: string }).message,\n    };\n  }\n\n  if (isExecuteFailure(error)) {\n    return {\n      code: error.code,\n      message: error.message,\n    };\n  }\n\n  const message = normalizeThrownMessage(error);\n  const normalizedMessage = message.toLowerCase();\n\n  if (\n    Date.now() > deadline ||\n    normalizedMessage.includes(\"timed out\") ||\n    normalizedMessage.includes(\"time limit\")\n  ) {\n    return {\n      code: \"timeout\",\n      message: \"Execution timed out\",\n    };\n  }\n\n  if (\n    normalizedMessage.includes(\"memory limit\") ||\n    normalizedMessage.includes(\"out of memory\")\n  ) {\n    return {\n      code: \"memory_limit\",\n      message,\n    };\n  }\n\n  if (\n    normalizedMessage.includes(\"could not be cloned\") ||\n    normalizedMessage.includes(\"non-transferable\") ||\n    normalizedMessage.includes(\"not json-serializable\")\n  ) {\n    return {\n      code: \"serialization_error\",\n      message,\n    };\n  }\n\n  return {\n    code: \"runtime_error\",\n    message,\n  };\n}\n\nfunction toMemoryLimitMb(memoryLimitBytes: number): number {\n  return Math.max(8, Math.ceil(memoryLimitBytes / (1024 * 1024)));\n}\n\nfunction remainingTime(deadline: number): number {\n  return Math.max(0, deadline - Date.now());\n}\n\nasync function runWithDeadline<T>(\n  operation: Promise<T>,\n  deadline: number,\n  signal: AbortSignal,\n): Promise<T> {\n  if (signal.aborted || Date.now() > deadline) {\n    throw new ExecuteFailure(\"timeout\", \"Execution timed out\");\n  }\n\n  const timeoutMs = remainingTime(deadline);\n  if (timeoutMs <= 0) {\n    throw new ExecuteFailure(\"timeout\", \"Execution timed out\");\n  }\n\n  let timeoutId: ReturnType<typeof setTimeout> | undefined;\n\n  return await new Promise<T>((resolve, reject) => {\n    const onAbort = () => {\n      reject(new ExecuteFailure(\"timeout\", \"Execution timed out\"));\n    };\n\n    signal.addEventListener(\"abort\", onAbort, { once: true });\n    timeoutId = setTimeout(() => {\n      signal.removeEventListener(\"abort\", onAbort);\n      reject(new ExecuteFailure(\"timeout\", \"Execution timed out\"));\n    }, timeoutMs);\n\n    void operation.then(\n      (value) => {\n        signal.removeEventListener(\"abort\", onAbort);\n        if (timeoutId) {\n          clearTimeout(timeoutId);\n        }\n        resolve(value);\n      },\n      (error) => {\n        signal.removeEventListener(\"abort\", onAbort);\n        if (timeoutId) {\n          clearTimeout(timeoutId);\n        }\n        reject(error);\n      },\n    );\n  });\n}\n\nasync function loadDefaultModule(): Promise<IsolatedVmModule> {\n  cachedModulePromise ??= import(\"isolated-vm\").then((loaded) => {\n    const candidate = (\n      \"default\" in loaded ? loaded.default : loaded\n    ) as unknown;\n    return candidate as IsolatedVmModule;\n  });\n\n  return cachedModulePromise;\n}\n\nfunction createBootstrapSource(\n  providers: ResolvedToolProvider[],\n  timeoutMs: number,\n): string {\n  const lines = [\n    `const __MCP_HOST_ERROR_PREFIX = ${JSON.stringify(HOST_ERROR_PREFIX)};`,\n    \"const __mcpNormalizeError = (error) => {\",\n    \"  if (error && typeof error === 'object' && typeof error.code === 'string' && typeof error.message === 'string') {\",\n    \"    return { code: error.code, message: error.message };\",\n    \"  }\",\n    \"  if (error && typeof error.message === 'string' && error.message.startsWith(__MCP_HOST_ERROR_PREFIX)) {\",\n    \"    try {\",\n    \"      const payload = JSON.parse(error.message.slice(__MCP_HOST_ERROR_PREFIX.length));\",\n    \"      if (payload && typeof payload.code === 'string' && typeof payload.message === 'string') {\",\n    \"        return payload;\",\n    \"      }\",\n    \"    } catch {}\",\n    \"  }\",\n    \"  if (error && typeof error.message === 'string') {\",\n    \"    return { code: 'runtime_error', message: error.message };\",\n    \"  }\",\n    \"  return { code: 'runtime_error', message: String(error) };\",\n    \"};\",\n    \"const __mcpRaiseNormalizedError = (error) => {\",\n    \"  const normalized = __mcpNormalizeError(error);\",\n    \"  const wrapped = new Error(normalized.message);\",\n    \"  wrapped.code = normalized.code;\",\n    \"  throw wrapped;\",\n    \"};\",\n    \"const __mcpToJsonValue = (value) => {\",\n    \"  if (typeof value === 'undefined') {\",\n    \"    return undefined;\",\n    \"  }\",\n    \"  const json = JSON.stringify(value);\",\n    \"  if (typeof json === 'undefined') {\",\n    \"    const error = new Error('Guest code returned a non-serializable value');\",\n    \"    error.code = 'serialization_error';\",\n    \"    throw error;\",\n    \"  }\",\n    \"  return JSON.parse(json);\",\n    \"};\",\n    \"globalThis.console = {\",\n    \"  log: (...args) => __mcp_console_log(...args),\",\n    \"  info: (...args) => __mcp_console_info(...args),\",\n    \"  warn: (...args) => __mcp_console_warn(...args),\",\n    \"  error: (...args) => __mcp_console_error(...args),\",\n    \"};\",\n  ];\n\n  for (const provider of providers) {\n    lines.push(`globalThis.${provider.name} = {};`);\n\n    for (const safeToolName of Object.keys(provider.tools)) {\n      const hostReferenceName = `__mcp_tool_${provider.name}_${safeToolName}`;\n      lines.push(\n        `globalThis.${provider.name}.${safeToolName} = async (input) => {`,\n        \"  try {\",\n        `    return await ${hostReferenceName}.applySyncPromise(undefined, [input], { arguments: { copy: true }, timeout: ${timeoutMs} });`,\n        \"  } catch (error) {\",\n        \"    __mcpRaiseNormalizedError(error);\",\n        \"  }\",\n        \"};\",\n      );\n    }\n  }\n\n  return lines.join(\"\\n\");\n}\n\nfunction createExecutionSource(code: string): string {\n  const executableSource = normalizeCode(code);\n\n  return [\n    `const __mcpUserFunction = (${executableSource});`,\n    \"return (async () => {\",\n    \"  try {\",\n    \"    const value = await __mcpUserFunction();\",\n    \"    return { ok: true, value: __mcpToJsonValue(value) };\",\n    \"  } catch (error) {\",\n    \"    return { ok: false, error: __mcpNormalizeError(error) };\",\n    \"  }\",\n    \"})();\",\n  ].join(\"\\n\");\n}\n\nfunction setConsoleBindings(context: IsolatedVmContext, logs: string[]): void {\n  const jail = context.global;\n  jail.setSync(\"__mcp_console_log\", (...args: unknown[]) => {\n    logs.push(formatConsoleLine(args));\n  });\n  jail.setSync(\"__mcp_console_info\", (...args: unknown[]) => {\n    logs.push(formatConsoleLine(args));\n  });\n  jail.setSync(\"__mcp_console_warn\", (...args: unknown[]) => {\n    logs.push(formatConsoleLine(args));\n  });\n  jail.setSync(\"__mcp_console_error\", (...args: unknown[]) => {\n    logs.push(formatConsoleLine(args));\n  });\n}\n\nfunction setProviderBindings(\n  ivm: IsolatedVmModule,\n  context: IsolatedVmContext,\n  providers: ResolvedToolProvider[],\n  signal: AbortSignal,\n  deadline: number,\n): void {\n  const jail = context.global;\n\n  for (const provider of providers) {\n    for (const [safeToolName, descriptor] of Object.entries(provider.tools)) {\n      const hostReferenceName = `__mcp_tool_${provider.name}_${safeToolName}`;\n\n      jail.setSync(\n        hostReferenceName,\n        async (input: unknown) => {\n          const executionContext = createExecutionContext(\n            signal,\n            provider.name,\n            safeToolName,\n            descriptor.originalName,\n          );\n\n          try {\n            const normalizedInput =\n              input === undefined\n                ? undefined\n                : toJsonValue(\n                    input,\n                    \"Guest code passed a non-serializable tool input\",\n                  );\n            const result = await runWithDeadline(\n              Promise.resolve(\n                descriptor.execute(normalizedInput, executionContext),\n              ),\n              deadline,\n              signal,\n            );\n\n            return toTransferableValue(ivm, result);\n          } catch (error) {\n            const executeError = toExecuteError(error, deadline);\n            throw new Error(\n              `${HOST_ERROR_PREFIX}${JSON.stringify(executeError)}`,\n              {\n                cause: error,\n              },\n            );\n          }\n        },\n        { reference: true },\n      );\n    }\n  }\n}\n\n/**\n * isolated-vm-backed executor for one-shot sandboxed JavaScript runs.\n */\nexport class IsolatedVmExecutor implements Executor {\n  private readonly loadModule: () => Promise<IsolatedVmModule>;\n  private readonly maxLogChars: number;\n  private readonly maxLogLines: number;\n  private readonly memoryLimitBytes: number;\n  private readonly timeoutMs: number;\n\n  constructor(options: IsolatedVmExecutorOptions = {}) {\n    this.loadModule = async () => {\n      const loaded = options.loadModule\n        ? await options.loadModule()\n        : await loadDefaultModule();\n      return loaded as IsolatedVmModule;\n    };\n    this.maxLogChars = options.maxLogChars ?? DEFAULT_MAX_LOG_CHARS;\n    this.maxLogLines = options.maxLogLines ?? DEFAULT_MAX_LOG_LINES;\n    this.memoryLimitBytes =\n      options.memoryLimitBytes ?? DEFAULT_MEMORY_LIMIT_BYTES;\n    this.timeoutMs = options.timeoutMs ?? DEFAULT_TIMEOUT_MS;\n  }\n\n  /**\n   * Executes JavaScript against the provided tool namespaces in a fresh isolated-vm context.\n   */\n  async execute(\n    code: string,\n    providers: ResolvedToolProvider[],\n  ): Promise<ExecuteResult> {\n    const startedAt = Date.now();\n    const deadline = startedAt + this.timeoutMs;\n    const logs: string[] = [];\n    const abortController = new AbortController();\n    const nodeMajorVersion = Number.parseInt(\n      process.versions.node.split(\".\")[0] ?? \"0\",\n      10,\n    );\n\n    if (nodeMajorVersion >= 20 && !hasRequiredNodeFlag()) {\n      return {\n        durationMs: Date.now() - startedAt,\n        error: {\n          code: \"internal_error\",\n          message:\n            \"isolated-vm requires Node to run with --no-node-snapshot on Node 20+\",\n        },\n        logs,\n        ok: false,\n      };\n    }\n\n    let catastrophicErrorMessage: string | undefined;\n    let isolate: IsolatedVmIsolate | undefined;\n    let context: IsolatedVmContext | undefined;\n\n    try {\n      const ivm = await this.loadModule();\n      isolate = new ivm.Isolate({\n        memoryLimit: toMemoryLimitMb(this.memoryLimitBytes),\n        onCatastrophicError: (message) => {\n          catastrophicErrorMessage = message;\n          abortController.abort();\n        },\n      });\n      context = await isolate.createContext();\n\n      setConsoleBindings(context, logs);\n      setProviderBindings(\n        ivm,\n        context,\n        providers,\n        abortController.signal,\n        deadline,\n      );\n      await context.eval(createBootstrapSource(providers, this.timeoutMs), {\n        timeout: this.timeoutMs,\n      });\n\n      const execution = (await context.evalClosure(\n        createExecutionSource(code),\n        [],\n        {\n          timeout: this.timeoutMs,\n          result: { copy: true, promise: true },\n        },\n      )) as GuestExecutionEnvelope;\n\n      if (catastrophicErrorMessage) {\n        return {\n          durationMs: Date.now() - startedAt,\n          error: {\n            code: \"internal_error\",\n            message: `isolated-vm catastrophic error: ${catastrophicErrorMessage}`,\n          },\n          logs: truncateLogs(logs, this.maxLogLines, this.maxLogChars),\n          ok: false,\n        };\n      }\n\n      if (!execution.ok) {\n        return {\n          durationMs: Date.now() - startedAt,\n          error: toExecuteError(execution.error, deadline),\n          logs: truncateLogs(logs, this.maxLogLines, this.maxLogChars),\n          ok: false,\n        };\n      }\n\n      return {\n        durationMs: Date.now() - startedAt,\n        logs: truncateLogs(logs, this.maxLogLines, this.maxLogChars),\n        ok: true,\n        result: execution.value,\n      };\n    } catch (error) {\n      const executeError =\n        catastrophicErrorMessage !== undefined\n          ? {\n              code: \"internal_error\" as const,\n              message: `isolated-vm catastrophic error: ${catastrophicErrorMessage}`,\n            }\n          : toExecuteError(error, deadline);\n\n      return {\n        durationMs: Date.now() - startedAt,\n        error: executeError,\n        logs: truncateLogs(logs, this.maxLogLines, this.maxLogChars),\n        ok: false,\n      };\n    } finally {\n      abortController.abort();\n      context?.release?.();\n      isolate?.dispose();\n    }\n  }\n}\n"],"mappings":";;;AAqEA,MAAM,6BAA6B,KAAK,OAAO;AAC/C,MAAM,qBAAqB;AAC3B,MAAM,wBAAwB;AAC9B,MAAM,wBAAwB;AAC9B,MAAM,oBAAoB;AAE1B,IAAIA;AAEJ,SAAS,uBACP,QACA,cACA,cACA,kBACsB;AACtB,QAAO;EACL;EACA;EACA;EACA;EACD;;AAGH,SAAS,sBAA+B;CACtC,MAAM,WAAW,QAAQ,SAAS,KAAK,IAAI;CAC3C,MAAM,cAAc,QAAQ,IAAI,gBAAgB;AAChD,QACE,SAAS,SAAS,qBAAqB,IACvC,YAAY,SAAS,qBAAqB;;AAI9C,SAAS,iBAAiB,OAA+C;AACvE,QACE,UAAU,aACV,UAAU,kBACV,UAAU,sBACV,UAAU,gBACV,UAAU,mBACV,UAAU,yBACV,UAAU;;AAId,SAAS,uBAAuB,OAAwB;AACtD,KAAI,iBAAiB,MACnB,QAAO,MAAM;AAGf,KAAI,OAAO,UAAU,YAAY,UAAU,QAAQ,aAAa,OAAO;EACrE,MAAM,UAAW,MAAgC;AACjD,MAAI,OAAO,YAAY,SACrB,QAAO;;AAIX,QAAO,OAAO,MAAM;;AAGtB,SAAS,aACP,MACA,aACA,aACU;CACV,MAAM,eAAe,KAAK,MAAM,GAAG,YAAY;CAC/C,IAAI,iBAAiB;CACrB,MAAMC,YAAsB,EAAE;AAE9B,MAAK,MAAM,QAAQ,cAAc;AAC/B,MAAI,kBAAkB,EACpB;AAGF,MAAI,KAAK,UAAU,gBAAgB;AACjC,aAAU,KAAK,KAAK;AACpB,qBAAkB,KAAK;AACvB;;AAGF,YAAU,KAAK,KAAK,MAAM,GAAG,eAAe,CAAC;AAC7C;;AAGF,QAAO;;AAGT,SAAS,eAAe,OAAwB;AAC9C,KAAI,OAAO,UAAU,SACnB,QAAO;AAGT,KAAI,UAAU,OACZ,QAAO;AAGT,KAAI;AACF,SAAO,KAAK,UAAU,MAAM;SACtB;AACN,SAAO,OAAO,MAAM;;;AAIxB,SAAS,kBAAkB,QAA2B;AACpD,QAAO,OAAO,KAAK,UAAU,eAAe,MAAM,CAAC,CAAC,KAAK,IAAI;;AAG/D,SAAS,YAAY,OAAgB,SAA0B;AAC7D,KAAI,UAAU,OACZ;CAGF,MAAM,YAAY,KAAK,UAAU,MAAM;AAEvC,KAAI,cAAc,OAChB,OAAM,IAAI,eAAe,uBAAuB,QAAQ;AAG1D,KAAI;AACF,SAAO,KAAK,MAAM,UAAU;SACtB;AACN,QAAM,IAAI,eAAe,uBAAuB,QAAQ;;;AAI5D,SAAS,oBAAoB,KAAuB,OAAyB;CAC3E,MAAM,kBAAkB,YACtB,OACA,sCACD;AAED,KACE,oBAAoB,QACpB,oBAAoB,UACpB,OAAO,oBAAoB,YAC3B,OAAO,oBAAoB,YAC3B,OAAO,oBAAoB,UAE3B,QAAO;AAIT,QADa,IAAI,IAAI,aAAa,gBAAgB,CACtC,SAAS,EAAE,SAAS,MAAM,CAAC;;AAGzC,SAAS,eAAe,OAAgB,UAAgC;AACtE,KACE,OAAO,UAAU,YACjB,UAAU,QACV,UAAU,SACV,aAAa,SACb,iBAAkB,MAA6B,KAAK,IACpD,OAAQ,MAAgC,YAAY,SAEpD,QAAO;EACL,MAAO,MAAyC;EAChD,SAAU,MAA8B;EACzC;AAGH,KAAI,iBAAiB,MAAM,CACzB,QAAO;EACL,MAAM,MAAM;EACZ,SAAS,MAAM;EAChB;CAGH,MAAM,UAAU,uBAAuB,MAAM;CAC7C,MAAM,oBAAoB,QAAQ,aAAa;AAE/C,KACE,KAAK,KAAK,GAAG,YACb,kBAAkB,SAAS,YAAY,IACvC,kBAAkB,SAAS,aAAa,CAExC,QAAO;EACL,MAAM;EACN,SAAS;EACV;AAGH,KACE,kBAAkB,SAAS,eAAe,IAC1C,kBAAkB,SAAS,gBAAgB,CAE3C,QAAO;EACL,MAAM;EACN;EACD;AAGH,KACE,kBAAkB,SAAS,sBAAsB,IACjD,kBAAkB,SAAS,mBAAmB,IAC9C,kBAAkB,SAAS,wBAAwB,CAEnD,QAAO;EACL,MAAM;EACN;EACD;AAGH,QAAO;EACL,MAAM;EACN;EACD;;AAGH,SAAS,gBAAgB,kBAAkC;AACzD,QAAO,KAAK,IAAI,GAAG,KAAK,KAAK,oBAAoB,OAAO,MAAM,CAAC;;AAGjE,SAAS,cAAc,UAA0B;AAC/C,QAAO,KAAK,IAAI,GAAG,WAAW,KAAK,KAAK,CAAC;;AAG3C,eAAe,gBACb,WACA,UACA,QACY;AACZ,KAAI,OAAO,WAAW,KAAK,KAAK,GAAG,SACjC,OAAM,IAAI,eAAe,WAAW,sBAAsB;CAG5D,MAAM,YAAY,cAAc,SAAS;AACzC,KAAI,aAAa,EACf,OAAM,IAAI,eAAe,WAAW,sBAAsB;CAG5D,IAAIC;AAEJ,QAAO,MAAM,IAAI,SAAY,SAAS,WAAW;EAC/C,MAAM,gBAAgB;AACpB,UAAO,IAAI,eAAe,WAAW,sBAAsB,CAAC;;AAG9D,SAAO,iBAAiB,SAAS,SAAS,EAAE,MAAM,MAAM,CAAC;AACzD,cAAY,iBAAiB;AAC3B,UAAO,oBAAoB,SAAS,QAAQ;AAC5C,UAAO,IAAI,eAAe,WAAW,sBAAsB,CAAC;KAC3D,UAAU;AAEb,EAAK,UAAU,MACZ,UAAU;AACT,UAAO,oBAAoB,SAAS,QAAQ;AAC5C,OAAI,UACF,cAAa,UAAU;AAEzB,WAAQ,MAAM;MAEf,UAAU;AACT,UAAO,oBAAoB,SAAS,QAAQ;AAC5C,OAAI,UACF,cAAa,UAAU;AAEzB,UAAO,MAAM;IAEhB;GACD;;AAGJ,eAAe,oBAA+C;AAC5D,yBAAwB,OAAO,eAAe,MAAM,WAAW;AAI7D,SAFE,aAAa,SAAS,OAAO,UAAU;GAGzC;AAEF,QAAO;;AAGT,SAAS,sBACP,WACA,WACQ;CACR,MAAM,QAAQ;EACZ,mCAAmC,KAAK,UAAU,kBAAkB,CAAC;EACrE;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACD;AAED,MAAK,MAAM,YAAY,WAAW;AAChC,QAAM,KAAK,cAAc,SAAS,KAAK,QAAQ;AAE/C,OAAK,MAAM,gBAAgB,OAAO,KAAK,SAAS,MAAM,EAAE;GACtD,MAAM,oBAAoB,cAAc,SAAS,KAAK,GAAG;AACzD,SAAM,KACJ,cAAc,SAAS,KAAK,GAAG,aAAa,wBAC5C,WACA,oBAAoB,kBAAkB,8EAA8E,UAAU,OAC9H,uBACA,yCACA,OACA,KACD;;;AAIL,QAAO,MAAM,KAAK,KAAK;;AAGzB,SAAS,sBAAsB,MAAsB;AAGnD,QAAO;EACL,8BAHuB,cAAc,KAAK,CAGK;EAC/C;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACD,CAAC,KAAK,KAAK;;AAGd,SAAS,mBAAmB,SAA4B,MAAsB;CAC5E,MAAM,OAAO,QAAQ;AACrB,MAAK,QAAQ,sBAAsB,GAAG,SAAoB;AACxD,OAAK,KAAK,kBAAkB,KAAK,CAAC;GAClC;AACF,MAAK,QAAQ,uBAAuB,GAAG,SAAoB;AACzD,OAAK,KAAK,kBAAkB,KAAK,CAAC;GAClC;AACF,MAAK,QAAQ,uBAAuB,GAAG,SAAoB;AACzD,OAAK,KAAK,kBAAkB,KAAK,CAAC;GAClC;AACF,MAAK,QAAQ,wBAAwB,GAAG,SAAoB;AAC1D,OAAK,KAAK,kBAAkB,KAAK,CAAC;GAClC;;AAGJ,SAAS,oBACP,KACA,SACA,WACA,QACA,UACM;CACN,MAAM,OAAO,QAAQ;AAErB,MAAK,MAAM,YAAY,UACrB,MAAK,MAAM,CAAC,cAAc,eAAe,OAAO,QAAQ,SAAS,MAAM,EAAE;EACvE,MAAM,oBAAoB,cAAc,SAAS,KAAK,GAAG;AAEzD,OAAK,QACH,mBACA,OAAO,UAAmB;GACxB,MAAM,mBAAmB,uBACvB,QACA,SAAS,MACT,cACA,WAAW,aACZ;AAED,OAAI;IACF,MAAM,kBACJ,UAAU,SACN,SACA,YACE,OACA,kDACD;AASP,WAAO,oBAAoB,KARZ,MAAM,gBACnB,QAAQ,QACN,WAAW,QAAQ,iBAAiB,iBAAiB,CACtD,EACD,UACA,OACD,CAEsC;YAChC,OAAO;IACd,MAAM,eAAe,eAAe,OAAO,SAAS;AACpD,UAAM,IAAI,MACR,GAAG,oBAAoB,KAAK,UAAU,aAAa,IACnD,EACE,OAAO,OACR,CACF;;KAGL,EAAE,WAAW,MAAM,CACpB;;;;;;AAQP,IAAa,qBAAb,MAAoD;CAClD,AAAiB;CACjB,AAAiB;CACjB,AAAiB;CACjB,AAAiB;CACjB,AAAiB;CAEjB,YAAY,UAAqC,EAAE,EAAE;AACnD,OAAK,aAAa,YAAY;AAI5B,UAHe,QAAQ,aACnB,MAAM,QAAQ,YAAY,GAC1B,MAAM,mBAAmB;;AAG/B,OAAK,cAAc,QAAQ,eAAe;AAC1C,OAAK,cAAc,QAAQ,eAAe;AAC1C,OAAK,mBACH,QAAQ,oBAAoB;AAC9B,OAAK,YAAY,QAAQ,aAAa;;;;;CAMxC,MAAM,QACJ,MACA,WACwB;EACxB,MAAM,YAAY,KAAK,KAAK;EAC5B,MAAM,WAAW,YAAY,KAAK;EAClC,MAAMC,OAAiB,EAAE;EACzB,MAAM,kBAAkB,IAAI,iBAAiB;AAM7C,MALyB,OAAO,SAC9B,QAAQ,SAAS,KAAK,MAAM,IAAI,CAAC,MAAM,KACvC,GACD,IAEuB,MAAM,CAAC,qBAAqB,CAClD,QAAO;GACL,YAAY,KAAK,KAAK,GAAG;GACzB,OAAO;IACL,MAAM;IACN,SACE;IACH;GACD;GACA,IAAI;GACL;EAGH,IAAIC;EACJ,IAAIC;EACJ,IAAIC;AAEJ,MAAI;GACF,MAAM,MAAM,MAAM,KAAK,YAAY;AACnC,aAAU,IAAI,IAAI,QAAQ;IACxB,aAAa,gBAAgB,KAAK,iBAAiB;IACnD,sBAAsB,YAAY;AAChC,gCAA2B;AAC3B,qBAAgB,OAAO;;IAE1B,CAAC;AACF,aAAU,MAAM,QAAQ,eAAe;AAEvC,sBAAmB,SAAS,KAAK;AACjC,uBACE,KACA,SACA,WACA,gBAAgB,QAChB,SACD;AACD,SAAM,QAAQ,KAAK,sBAAsB,WAAW,KAAK,UAAU,EAAE,EACnE,SAAS,KAAK,WACf,CAAC;GAEF,MAAM,YAAa,MAAM,QAAQ,YAC/B,sBAAsB,KAAK,EAC3B,EAAE,EACF;IACE,SAAS,KAAK;IACd,QAAQ;KAAE,MAAM;KAAM,SAAS;KAAM;IACtC,CACF;AAED,OAAI,yBACF,QAAO;IACL,YAAY,KAAK,KAAK,GAAG;IACzB,OAAO;KACL,MAAM;KACN,SAAS,mCAAmC;KAC7C;IACD,MAAM,aAAa,MAAM,KAAK,aAAa,KAAK,YAAY;IAC5D,IAAI;IACL;AAGH,OAAI,CAAC,UAAU,GACb,QAAO;IACL,YAAY,KAAK,KAAK,GAAG;IACzB,OAAO,eAAe,UAAU,OAAO,SAAS;IAChD,MAAM,aAAa,MAAM,KAAK,aAAa,KAAK,YAAY;IAC5D,IAAI;IACL;AAGH,UAAO;IACL,YAAY,KAAK,KAAK,GAAG;IACzB,MAAM,aAAa,MAAM,KAAK,aAAa,KAAK,YAAY;IAC5D,IAAI;IACJ,QAAQ,UAAU;IACnB;WACM,OAAO;GACd,MAAM,eACJ,6BAA6B,SACzB;IACE,MAAM;IACN,SAAS,mCAAmC;IAC7C,GACD,eAAe,OAAO,SAAS;AAErC,UAAO;IACL,YAAY,KAAK,KAAK,GAAG;IACzB,OAAO;IACP,MAAM,aAAa,MAAM,KAAK,aAAa,KAAK,YAAY;IAC5D,IAAI;IACL;YACO;AACR,mBAAgB,OAAO;AACvB,YAAS,WAAW;AACpB,YAAS,SAAS"}

package/package.json

@@ -0,0 +1,49 @@
+{
+  "name": "@mcploom/codexec-isolated-vm",
+  "version": "0.1.0",
+  "description": "isolated-vm executor for the mcploom codexec core package.",
+  "license": "MIT",
+  "type": "module",
+  "engines": {
+    "node": ">=20"
+  },
+  "main": "./dist/index.cjs",
+  "module": "./dist/index.js",
+  "types": "./dist/index.d.ts",
+  "exports": {
+    ".": {
+      "types": "./dist/index.d.ts",
+      "import": "./dist/index.js",
+      "require": "./dist/index.cjs"
+    }
+  },
+  "sideEffects": false,
+  "files": [
+    "dist",
+    "README.md",
+    "LICENSE"
+  ],
+  "scripts": {
+    "build": "tsdown"
+  },
+  "keywords": [
+    "mcp",
+    "model-context-protocol",
+    "isolated-vm",
+    "sandbox",
+    "code-execution"
+  ],
+  "repository": {
+    "type": "git",
+    "url": "git+https://github.com/aallam/mcploom.git",
+    "directory": "packages/codexec-isolated-vm"
+  },
+  "homepage": "https://github.com/aallam/mcploom/tree/main/packages/codexec-isolated-vm#readme",
+  "bugs": "https://github.com/aallam/mcploom/issues",
+  "dependencies": {
+    "@mcploom/codexec": "^0.1.0"
+  },
+  "optionalDependencies": {
+    "isolated-vm": "^6.0.1"
+  }
+}