@mcploom/codexec-worker 0.1.1

package/README.md

@@ -0,0 +1,54 @@
+# @mcploom/codexec-worker
+
+Worker-thread executor for `@mcploom/codexec`, using the shared QuickJS runner behind a message boundary.
+
+[![npm version](https://img.shields.io/npm/v/%40mcploom%2Fcodexec--worker?style=flat-square)](https://www.npmjs.com/package/@mcploom/codexec-worker)
+[![License](https://img.shields.io/github/license/aallam/mcploom?style=flat-square)](https://github.com/aallam/mcploom/blob/main/LICENSE)
+
+## Choose `codexec-worker` When
+
+- you want QuickJS semantics without running the runtime on the main thread
+- you want a worker termination backstop for timeouts
+- you are comfortable paying worker startup overhead per execution
+
+If you want the simplest default backend, use [`@mcploom/codexec-quickjs`](https://www.npmjs.com/package/@mcploom/codexec-quickjs) instead.
+
+## Install
+
+```bash
+npm install @mcploom/codexec @mcploom/codexec-worker
+```
+
+## Usage
+
+```ts
+import { resolveProvider } from "@mcploom/codexec";
+import { WorkerExecutor } from "@mcploom/codexec-worker";
+
+const provider = resolveProvider({
+  name: "tools",
+  tools: {
+    echo: {
+      execute: async (input) => input,
+    },
+  },
+});
+
+const executor = new WorkerExecutor();
+const result = await executor.execute("await tools.echo({ ok: true })", [
+  provider,
+]);
+```
+
+## Security Notes
+
+- This package improves lifecycle isolation by moving the QuickJS runtime to a worker thread.
+- It is still same-process execution and is not documented as a hard hostile-code boundary.
+- Providers remain the real capability boundary.
+- Internally it is a thin transport adapter over the shared `codexec-protocol` host session and the shared QuickJS protocol endpoint.
+
+## Examples
+
+- [Worker-backed codexec execution](https://github.com/aallam/mcploom/blob/main/examples/codexec-worker.ts)
+- [Architecture overview](https://github.com/aallam/mcploom/blob/main/docs/codexec/architecture/README.md)
+- [Executors architecture](https://github.com/aallam/mcploom/blob/main/docs/codexec/architecture/codexec-executors.md)

package/dist/index.cjs

@@ -0,0 +1,94 @@
+let node_crypto = require("node:crypto");
+let node_worker_threads = require("node:worker_threads");
+let __mcploom_codexec_protocol = require("@mcploom/codexec-protocol");
+let __mcploom_codexec = require("@mcploom/codexec");
+
+//#region src/workerExecutor.ts
+const DEFAULT_CANCEL_GRACE_MS = 25;
+const DEFAULT_MAX_LOG_CHARS = 64e3;
+const DEFAULT_MAX_LOG_LINES = 100;
+const DEFAULT_MEMORY_LIMIT_BYTES = 64 * 1024 * 1024;
+const DEFAULT_TIMEOUT_MS = 5e3;
+function resolveWorkerEntryUrl() {
+	const extension = require("url").pathToFileURL(__filename).href.endsWith(".ts") ? ".ts" : ".js";
+	return new URL(`./workerEntry${extension}`, require("url").pathToFileURL(__filename).href);
+}
+function createRuntimeOptions(options, overrides = {}) {
+	return {
+		maxLogChars: overrides.maxLogChars ?? options.maxLogChars ?? DEFAULT_MAX_LOG_CHARS,
+		maxLogLines: overrides.maxLogLines ?? options.maxLogLines ?? DEFAULT_MAX_LOG_LINES,
+		memoryLimitBytes: overrides.memoryLimitBytes ?? options.memoryLimitBytes ?? DEFAULT_MEMORY_LIMIT_BYTES,
+		timeoutMs: overrides.timeoutMs ?? options.timeoutMs ?? DEFAULT_TIMEOUT_MS
+	};
+}
+function createWorkerTransport(worker) {
+	return {
+		dispose: async () => {
+			await worker.terminate().catch(() => {});
+		},
+		onClose: (handler) => {
+			const wrapped = (code) => {
+				handler({
+					code,
+					message: `Worker exited unexpectedly with code ${code}`
+				});
+			};
+			worker.on("exit", wrapped);
+			return () => worker.off("exit", wrapped);
+		},
+		onError: (handler) => {
+			worker.on("error", handler);
+			return () => worker.off("error", handler);
+		},
+		onMessage: (handler) => {
+			const wrapped = (message) => {
+				handler(message);
+			};
+			worker.on("message", wrapped);
+			return () => worker.off("message", wrapped);
+		},
+		send: (message) => {
+			worker.postMessage(message);
+		},
+		terminate: async () => {
+			await worker.terminate().catch(() => {});
+		}
+	};
+}
+/**
+* Worker-thread executor that runs guest code inside a dedicated QuickJS runtime per call.
+*/
+var WorkerExecutor = class {
+	cancelGraceMs;
+	options;
+	/**
+	* Creates a worker-backed executor with hard-stop timeout behavior.
+	*/
+	constructor(options = {}) {
+		this.cancelGraceMs = options.cancelGraceMs ?? DEFAULT_CANCEL_GRACE_MS;
+		this.options = options;
+	}
+	/**
+	* Executes JavaScript inside a fresh worker thread running QuickJS.
+	*/
+	async execute(code, providers, options = {}) {
+		if (options.signal?.aborted) return (0, __mcploom_codexec.createTimeoutExecuteResult)();
+		const worker = new node_worker_threads.Worker(resolveWorkerEntryUrl(), {
+			execArgv: (0, __mcploom_codexec_protocol.getNodeTransportExecArgv)(require("url").pathToFileURL(__filename).href),
+			resourceLimits: this.options.workerResourceLimits
+		});
+		return await (0, __mcploom_codexec_protocol.runHostTransportSession)({
+			cancelGraceMs: this.cancelGraceMs,
+			code,
+			executionId: (0, node_crypto.randomUUID)(),
+			providers,
+			runtimeOptions: createRuntimeOptions(this.options, options),
+			signal: options.signal,
+			transport: createWorkerTransport(worker)
+		});
+	}
+};
+
+//#endregion
+exports.WorkerExecutor = WorkerExecutor;
+//# sourceMappingURL=index.cjs.map

package/dist/index.cjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.cjs","names":["Worker"],"sources":["../src/workerExecutor.ts"],"sourcesContent":["import { randomUUID } from \"node:crypto\";\nimport { Worker } from \"node:worker_threads\";\n\nimport {\n  type ExecutorRuntimeOptions,\n  runHostTransportSession,\n  getNodeTransportExecArgv,\n  type HostTransport,\n  type RunnerMessage,\n} from \"@mcploom/codexec-protocol\";\nimport {\n  createTimeoutExecuteResult,\n  type ExecutionOptions,\n  type ExecuteResult,\n  type Executor,\n  type ResolvedToolProvider,\n} from \"@mcploom/codexec\";\n\nimport type { WorkerExecutorOptions } from \"./types\";\n\nconst DEFAULT_CANCEL_GRACE_MS = 25;\nconst DEFAULT_MAX_LOG_CHARS = 64_000;\nconst DEFAULT_MAX_LOG_LINES = 100;\nconst DEFAULT_MEMORY_LIMIT_BYTES = 64 * 1024 * 1024;\nconst DEFAULT_TIMEOUT_MS = 5000;\n\nfunction resolveWorkerEntryUrl(): URL {\n  const extension = import.meta.url.endsWith(\".ts\") ? \".ts\" : \".js\";\n  return new URL(`./workerEntry${extension}`, import.meta.url);\n}\n\nfunction createRuntimeOptions(\n  options: WorkerExecutorOptions,\n  overrides: ExecutionOptions = {},\n): Required<ExecutorRuntimeOptions> {\n  return {\n    maxLogChars:\n      overrides.maxLogChars ?? options.maxLogChars ?? DEFAULT_MAX_LOG_CHARS,\n    maxLogLines:\n      overrides.maxLogLines ?? options.maxLogLines ?? DEFAULT_MAX_LOG_LINES,\n    memoryLimitBytes:\n      overrides.memoryLimitBytes ??\n      options.memoryLimitBytes ??\n      DEFAULT_MEMORY_LIMIT_BYTES,\n    timeoutMs: overrides.timeoutMs ?? options.timeoutMs ?? DEFAULT_TIMEOUT_MS,\n  };\n}\n\nfunction createWorkerTransport(worker: Worker): HostTransport {\n  return {\n    dispose: async () => {\n      await worker.terminate().catch(() => {});\n    },\n    onClose: (handler) => {\n      const wrapped = (code: number) => {\n        handler({\n          code,\n          message: `Worker exited unexpectedly with code ${code}`,\n        });\n      };\n      worker.on(\"exit\", wrapped);\n      return () => worker.off(\"exit\", wrapped);\n    },\n    onError: (handler) => {\n      worker.on(\"error\", handler);\n      return () => worker.off(\"error\", handler);\n    },\n    onMessage: (handler) => {\n      const wrapped = (message: unknown) => {\n        handler(message as RunnerMessage);\n      };\n      worker.on(\"message\", wrapped);\n      return () => worker.off(\"message\", wrapped);\n    },\n    send: (message) => {\n      worker.postMessage(message);\n    },\n    terminate: async () => {\n      await worker.terminate().catch(() => {});\n    },\n  };\n}\n\n/**\n * Worker-thread executor that runs guest code inside a dedicated QuickJS runtime per call.\n */\nexport class WorkerExecutor implements Executor {\n  private readonly cancelGraceMs: number;\n  private readonly options: WorkerExecutorOptions;\n\n  /**\n   * Creates a worker-backed executor with hard-stop timeout behavior.\n   */\n  constructor(options: WorkerExecutorOptions = {}) {\n    this.cancelGraceMs = options.cancelGraceMs ?? DEFAULT_CANCEL_GRACE_MS;\n    this.options = options;\n  }\n\n  /**\n   * Executes JavaScript inside a fresh worker thread running QuickJS.\n   */\n  async execute(\n    code: string,\n    providers: ResolvedToolProvider[],\n    options: ExecutionOptions = {},\n  ): Promise<ExecuteResult> {\n    if (options.signal?.aborted) {\n      return createTimeoutExecuteResult();\n    }\n\n    const worker = new Worker(resolveWorkerEntryUrl(), {\n      execArgv: getNodeTransportExecArgv(import.meta.url),\n      resourceLimits: this.options.workerResourceLimits,\n    });\n\n    return await runHostTransportSession({\n      cancelGraceMs: this.cancelGraceMs,\n      code,\n      executionId: randomUUID(),\n      providers,\n      runtimeOptions: createRuntimeOptions(this.options, options),\n      signal: options.signal,\n      transport: createWorkerTransport(worker),\n    });\n  }\n}\n"],"mappings":";;;;;;AAoBA,MAAM,0BAA0B;AAChC,MAAM,wBAAwB;AAC9B,MAAM,wBAAwB;AAC9B,MAAM,6BAA6B,KAAK,OAAO;AAC/C,MAAM,qBAAqB;AAE3B,SAAS,wBAA6B;CACpC,MAAM,0DAA4B,SAAS,MAAM,GAAG,QAAQ;AAC5D,QAAO,IAAI,IAAI,gBAAgB,2DAA6B;;AAG9D,SAAS,qBACP,SACA,YAA8B,EAAE,EACE;AAClC,QAAO;EACL,aACE,UAAU,eAAe,QAAQ,eAAe;EAClD,aACE,UAAU,eAAe,QAAQ,eAAe;EAClD,kBACE,UAAU,oBACV,QAAQ,oBACR;EACF,WAAW,UAAU,aAAa,QAAQ,aAAa;EACxD;;AAGH,SAAS,sBAAsB,QAA+B;AAC5D,QAAO;EACL,SAAS,YAAY;AACnB,SAAM,OAAO,WAAW,CAAC,YAAY,GAAG;;EAE1C,UAAU,YAAY;GACpB,MAAM,WAAW,SAAiB;AAChC,YAAQ;KACN;KACA,SAAS,wCAAwC;KAClD,CAAC;;AAEJ,UAAO,GAAG,QAAQ,QAAQ;AAC1B,gBAAa,OAAO,IAAI,QAAQ,QAAQ;;EAE1C,UAAU,YAAY;AACpB,UAAO,GAAG,SAAS,QAAQ;AAC3B,gBAAa,OAAO,IAAI,SAAS,QAAQ;;EAE3C,YAAY,YAAY;GACtB,MAAM,WAAW,YAAqB;AACpC,YAAQ,QAAyB;;AAEnC,UAAO,GAAG,WAAW,QAAQ;AAC7B,gBAAa,OAAO,IAAI,WAAW,QAAQ;;EAE7C,OAAO,YAAY;AACjB,UAAO,YAAY,QAAQ;;EAE7B,WAAW,YAAY;AACrB,SAAM,OAAO,WAAW,CAAC,YAAY,GAAG;;EAE3C;;;;;AAMH,IAAa,iBAAb,MAAgD;CAC9C,AAAiB;CACjB,AAAiB;;;;CAKjB,YAAY,UAAiC,EAAE,EAAE;AAC/C,OAAK,gBAAgB,QAAQ,iBAAiB;AAC9C,OAAK,UAAU;;;;;CAMjB,MAAM,QACJ,MACA,WACA,UAA4B,EAAE,EACN;AACxB,MAAI,QAAQ,QAAQ,QAClB,2DAAmC;EAGrC,MAAM,SAAS,IAAIA,2BAAO,uBAAuB,EAAE;GACjD,iHAAmD;GACnD,gBAAgB,KAAK,QAAQ;GAC9B,CAAC;AAEF,SAAO,8DAA8B;GACnC,eAAe,KAAK;GACpB;GACA,0CAAyB;GACzB;GACA,gBAAgB,qBAAqB,KAAK,SAAS,QAAQ;GAC3D,QAAQ,QAAQ;GAChB,WAAW,sBAAsB,OAAO;GACzC,CAAC"}

package/dist/index.d.cts

@@ -0,0 +1,48 @@
+import { ExecuteResult, ExecutionOptions, Executor, ResolvedToolProvider } from "@mcploom/codexec";
+
+//#region src/types.d.ts
+/**
+ * Optional V8 heap limits used only as a backstop for worker thread safety.
+ */
+interface WorkerResourceLimits {
+  maxOldGenerationSizeMb?: number;
+  maxYoungGenerationSizeMb?: number;
+  stackSizeMb?: number;
+}
+/**
+ * Options for constructing a {@link WorkerExecutor}.
+ */
+interface WorkerExecutorOptions {
+  /** Extra grace period after timeout before force-terminating the worker. */
+  cancelGraceMs?: number;
+  /** Maximum total characters preserved across captured log lines. */
+  maxLogChars?: number;
+  /** Maximum number of captured log lines returned in the result. */
+  maxLogLines?: number;
+  /** Guest memory limit in bytes enforced by QuickJS inside the worker. */
+  memoryLimitBytes?: number;
+  /** Wall-clock execution timeout in milliseconds. */
+  timeoutMs?: number;
+  /** Optional Node worker heap limits used as a backstop only. */
+  workerResourceLimits?: WorkerResourceLimits;
+}
+//#endregion
+//#region src/workerExecutor.d.ts
+/**
+ * Worker-thread executor that runs guest code inside a dedicated QuickJS runtime per call.
+ */
+declare class WorkerExecutor implements Executor {
+  private readonly cancelGraceMs;
+  private readonly options;
+  /**
+   * Creates a worker-backed executor with hard-stop timeout behavior.
+   */
+  constructor(options?: WorkerExecutorOptions);
+  /**
+   * Executes JavaScript inside a fresh worker thread running QuickJS.
+   */
+  execute(code: string, providers: ResolvedToolProvider[], options?: ExecutionOptions): Promise<ExecuteResult>;
+}
+//#endregion
+export { WorkerExecutor, type WorkerExecutorOptions, type WorkerResourceLimits };
+//# sourceMappingURL=index.d.cts.map

package/dist/index.d.cts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.cts","names":[],"sources":["../src/types.ts","../src/workerExecutor.ts"],"sourcesContent":[],"mappings":";;;;;;AAGiB,UAAA,oBAAA,CAAoB;EASpB,sBAAA,CAAA,EAAqB,MAAA;;;;AC0EtC;;;AAkBa,UD5FI,qBAAA,CC4FJ;EACA;EAAR,aAAA,CAAA,EAAA,MAAA;EAnBkC;EAAQ,WAAA,CAAA,EAAA,MAAA;;;;;;;;yBD9DtB;;;;;AArBzB;AASA;cC0Ea,cAAA,YAA0B;;;EAA1B;;;EAkBA,WAAA,CAAA,OAAA,CAAA,EAXU,qBAWV;EACA;;;EAnBkC,OAAA,CAAA,IAAA,EAAA,MAAA,EAAA,SAAA,EAiBhC,oBAjBgC,EAAA,EAAA,OAAA,CAAA,EAkBlC,gBAlBkC,CAAA,EAmB1C,OAnB0C,CAmBlC,aAnBkC,CAAA"}

package/dist/index.d.ts

@@ -0,0 +1,48 @@
+import { ExecuteResult, ExecutionOptions, Executor, ResolvedToolProvider } from "@mcploom/codexec";
+
+//#region src/types.d.ts
+/**
+ * Optional V8 heap limits used only as a backstop for worker thread safety.
+ */
+interface WorkerResourceLimits {
+  maxOldGenerationSizeMb?: number;
+  maxYoungGenerationSizeMb?: number;
+  stackSizeMb?: number;
+}
+/**
+ * Options for constructing a {@link WorkerExecutor}.
+ */
+interface WorkerExecutorOptions {
+  /** Extra grace period after timeout before force-terminating the worker. */
+  cancelGraceMs?: number;
+  /** Maximum total characters preserved across captured log lines. */
+  maxLogChars?: number;
+  /** Maximum number of captured log lines returned in the result. */
+  maxLogLines?: number;
+  /** Guest memory limit in bytes enforced by QuickJS inside the worker. */
+  memoryLimitBytes?: number;
+  /** Wall-clock execution timeout in milliseconds. */
+  timeoutMs?: number;
+  /** Optional Node worker heap limits used as a backstop only. */
+  workerResourceLimits?: WorkerResourceLimits;
+}
+//#endregion
+//#region src/workerExecutor.d.ts
+/**
+ * Worker-thread executor that runs guest code inside a dedicated QuickJS runtime per call.
+ */
+declare class WorkerExecutor implements Executor {
+  private readonly cancelGraceMs;
+  private readonly options;
+  /**
+   * Creates a worker-backed executor with hard-stop timeout behavior.
+   */
+  constructor(options?: WorkerExecutorOptions);
+  /**
+   * Executes JavaScript inside a fresh worker thread running QuickJS.
+   */
+  execute(code: string, providers: ResolvedToolProvider[], options?: ExecutionOptions): Promise<ExecuteResult>;
+}
+//#endregion
+export { WorkerExecutor, type WorkerExecutorOptions, type WorkerResourceLimits };
+//# sourceMappingURL=index.d.ts.map

package/dist/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","names":[],"sources":["../src/types.ts","../src/workerExecutor.ts"],"sourcesContent":[],"mappings":";;;;;;AAGiB,UAAA,oBAAA,CAAoB;EASpB,sBAAA,CAAA,EAAqB,MAAA;;;;AC0EtC;;;AAkBa,UD5FI,qBAAA,CC4FJ;EACA;EAAR,aAAA,CAAA,EAAA,MAAA;EAnBkC;EAAQ,WAAA,CAAA,EAAA,MAAA;;;;;;;;yBD9DtB;;;;;AArBzB;AASA;cC0Ea,cAAA,YAA0B;;;EAA1B;;;EAkBA,WAAA,CAAA,OAAA,CAAA,EAXU,qBAWV;EACA;;;EAnBkC,OAAA,CAAA,IAAA,EAAA,MAAA,EAAA,SAAA,EAiBhC,oBAjBgC,EAAA,EAAA,OAAA,CAAA,EAkBlC,gBAlBkC,CAAA,EAmB1C,OAnB0C,CAmBlC,aAnBkC,CAAA"}

package/dist/index.js

@@ -0,0 +1,94 @@
+import { randomUUID } from "node:crypto";
+import { Worker } from "node:worker_threads";
+import { getNodeTransportExecArgv, runHostTransportSession } from "@mcploom/codexec-protocol";
+import { createTimeoutExecuteResult } from "@mcploom/codexec";
+
+//#region src/workerExecutor.ts
+const DEFAULT_CANCEL_GRACE_MS = 25;
+const DEFAULT_MAX_LOG_CHARS = 64e3;
+const DEFAULT_MAX_LOG_LINES = 100;
+const DEFAULT_MEMORY_LIMIT_BYTES = 64 * 1024 * 1024;
+const DEFAULT_TIMEOUT_MS = 5e3;
+function resolveWorkerEntryUrl() {
+	const extension = import.meta.url.endsWith(".ts") ? ".ts" : ".js";
+	return new URL(`./workerEntry${extension}`, import.meta.url);
+}
+function createRuntimeOptions(options, overrides = {}) {
+	return {
+		maxLogChars: overrides.maxLogChars ?? options.maxLogChars ?? DEFAULT_MAX_LOG_CHARS,
+		maxLogLines: overrides.maxLogLines ?? options.maxLogLines ?? DEFAULT_MAX_LOG_LINES,
+		memoryLimitBytes: overrides.memoryLimitBytes ?? options.memoryLimitBytes ?? DEFAULT_MEMORY_LIMIT_BYTES,
+		timeoutMs: overrides.timeoutMs ?? options.timeoutMs ?? DEFAULT_TIMEOUT_MS
+	};
+}
+function createWorkerTransport(worker) {
+	return {
+		dispose: async () => {
+			await worker.terminate().catch(() => {});
+		},
+		onClose: (handler) => {
+			const wrapped = (code) => {
+				handler({
+					code,
+					message: `Worker exited unexpectedly with code ${code}`
+				});
+			};
+			worker.on("exit", wrapped);
+			return () => worker.off("exit", wrapped);
+		},
+		onError: (handler) => {
+			worker.on("error", handler);
+			return () => worker.off("error", handler);
+		},
+		onMessage: (handler) => {
+			const wrapped = (message) => {
+				handler(message);
+			};
+			worker.on("message", wrapped);
+			return () => worker.off("message", wrapped);
+		},
+		send: (message) => {
+			worker.postMessage(message);
+		},
+		terminate: async () => {
+			await worker.terminate().catch(() => {});
+		}
+	};
+}
+/**
+* Worker-thread executor that runs guest code inside a dedicated QuickJS runtime per call.
+*/
+var WorkerExecutor = class {
+	cancelGraceMs;
+	options;
+	/**
+	* Creates a worker-backed executor with hard-stop timeout behavior.
+	*/
+	constructor(options = {}) {
+		this.cancelGraceMs = options.cancelGraceMs ?? DEFAULT_CANCEL_GRACE_MS;
+		this.options = options;
+	}
+	/**
+	* Executes JavaScript inside a fresh worker thread running QuickJS.
+	*/
+	async execute(code, providers, options = {}) {
+		if (options.signal?.aborted) return createTimeoutExecuteResult();
+		const worker = new Worker(resolveWorkerEntryUrl(), {
+			execArgv: getNodeTransportExecArgv(import.meta.url),
+			resourceLimits: this.options.workerResourceLimits
+		});
+		return await runHostTransportSession({
+			cancelGraceMs: this.cancelGraceMs,
+			code,
+			executionId: randomUUID(),
+			providers,
+			runtimeOptions: createRuntimeOptions(this.options, options),
+			signal: options.signal,
+			transport: createWorkerTransport(worker)
+		});
+	}
+};
+
+//#endregion
+export { WorkerExecutor };
+//# sourceMappingURL=index.js.map

package/dist/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","names":[],"sources":["../src/workerExecutor.ts"],"sourcesContent":["import { randomUUID } from \"node:crypto\";\nimport { Worker } from \"node:worker_threads\";\n\nimport {\n  type ExecutorRuntimeOptions,\n  runHostTransportSession,\n  getNodeTransportExecArgv,\n  type HostTransport,\n  type RunnerMessage,\n} from \"@mcploom/codexec-protocol\";\nimport {\n  createTimeoutExecuteResult,\n  type ExecutionOptions,\n  type ExecuteResult,\n  type Executor,\n  type ResolvedToolProvider,\n} from \"@mcploom/codexec\";\n\nimport type { WorkerExecutorOptions } from \"./types\";\n\nconst DEFAULT_CANCEL_GRACE_MS = 25;\nconst DEFAULT_MAX_LOG_CHARS = 64_000;\nconst DEFAULT_MAX_LOG_LINES = 100;\nconst DEFAULT_MEMORY_LIMIT_BYTES = 64 * 1024 * 1024;\nconst DEFAULT_TIMEOUT_MS = 5000;\n\nfunction resolveWorkerEntryUrl(): URL {\n  const extension = import.meta.url.endsWith(\".ts\") ? \".ts\" : \".js\";\n  return new URL(`./workerEntry${extension}`, import.meta.url);\n}\n\nfunction createRuntimeOptions(\n  options: WorkerExecutorOptions,\n  overrides: ExecutionOptions = {},\n): Required<ExecutorRuntimeOptions> {\n  return {\n    maxLogChars:\n      overrides.maxLogChars ?? options.maxLogChars ?? DEFAULT_MAX_LOG_CHARS,\n    maxLogLines:\n      overrides.maxLogLines ?? options.maxLogLines ?? DEFAULT_MAX_LOG_LINES,\n    memoryLimitBytes:\n      overrides.memoryLimitBytes ??\n      options.memoryLimitBytes ??\n      DEFAULT_MEMORY_LIMIT_BYTES,\n    timeoutMs: overrides.timeoutMs ?? options.timeoutMs ?? DEFAULT_TIMEOUT_MS,\n  };\n}\n\nfunction createWorkerTransport(worker: Worker): HostTransport {\n  return {\n    dispose: async () => {\n      await worker.terminate().catch(() => {});\n    },\n    onClose: (handler) => {\n      const wrapped = (code: number) => {\n        handler({\n          code,\n          message: `Worker exited unexpectedly with code ${code}`,\n        });\n      };\n      worker.on(\"exit\", wrapped);\n      return () => worker.off(\"exit\", wrapped);\n    },\n    onError: (handler) => {\n      worker.on(\"error\", handler);\n      return () => worker.off(\"error\", handler);\n    },\n    onMessage: (handler) => {\n      const wrapped = (message: unknown) => {\n        handler(message as RunnerMessage);\n      };\n      worker.on(\"message\", wrapped);\n      return () => worker.off(\"message\", wrapped);\n    },\n    send: (message) => {\n      worker.postMessage(message);\n    },\n    terminate: async () => {\n      await worker.terminate().catch(() => {});\n    },\n  };\n}\n\n/**\n * Worker-thread executor that runs guest code inside a dedicated QuickJS runtime per call.\n */\nexport class WorkerExecutor implements Executor {\n  private readonly cancelGraceMs: number;\n  private readonly options: WorkerExecutorOptions;\n\n  /**\n   * Creates a worker-backed executor with hard-stop timeout behavior.\n   */\n  constructor(options: WorkerExecutorOptions = {}) {\n    this.cancelGraceMs = options.cancelGraceMs ?? DEFAULT_CANCEL_GRACE_MS;\n    this.options = options;\n  }\n\n  /**\n   * Executes JavaScript inside a fresh worker thread running QuickJS.\n   */\n  async execute(\n    code: string,\n    providers: ResolvedToolProvider[],\n    options: ExecutionOptions = {},\n  ): Promise<ExecuteResult> {\n    if (options.signal?.aborted) {\n      return createTimeoutExecuteResult();\n    }\n\n    const worker = new Worker(resolveWorkerEntryUrl(), {\n      execArgv: getNodeTransportExecArgv(import.meta.url),\n      resourceLimits: this.options.workerResourceLimits,\n    });\n\n    return await runHostTransportSession({\n      cancelGraceMs: this.cancelGraceMs,\n      code,\n      executionId: randomUUID(),\n      providers,\n      runtimeOptions: createRuntimeOptions(this.options, options),\n      signal: options.signal,\n      transport: createWorkerTransport(worker),\n    });\n  }\n}\n"],"mappings":";;;;;;AAoBA,MAAM,0BAA0B;AAChC,MAAM,wBAAwB;AAC9B,MAAM,wBAAwB;AAC9B,MAAM,6BAA6B,KAAK,OAAO;AAC/C,MAAM,qBAAqB;AAE3B,SAAS,wBAA6B;CACpC,MAAM,YAAY,OAAO,KAAK,IAAI,SAAS,MAAM,GAAG,QAAQ;AAC5D,QAAO,IAAI,IAAI,gBAAgB,aAAa,OAAO,KAAK,IAAI;;AAG9D,SAAS,qBACP,SACA,YAA8B,EAAE,EACE;AAClC,QAAO;EACL,aACE,UAAU,eAAe,QAAQ,eAAe;EAClD,aACE,UAAU,eAAe,QAAQ,eAAe;EAClD,kBACE,UAAU,oBACV,QAAQ,oBACR;EACF,WAAW,UAAU,aAAa,QAAQ,aAAa;EACxD;;AAGH,SAAS,sBAAsB,QAA+B;AAC5D,QAAO;EACL,SAAS,YAAY;AACnB,SAAM,OAAO,WAAW,CAAC,YAAY,GAAG;;EAE1C,UAAU,YAAY;GACpB,MAAM,WAAW,SAAiB;AAChC,YAAQ;KACN;KACA,SAAS,wCAAwC;KAClD,CAAC;;AAEJ,UAAO,GAAG,QAAQ,QAAQ;AAC1B,gBAAa,OAAO,IAAI,QAAQ,QAAQ;;EAE1C,UAAU,YAAY;AACpB,UAAO,GAAG,SAAS,QAAQ;AAC3B,gBAAa,OAAO,IAAI,SAAS,QAAQ;;EAE3C,YAAY,YAAY;GACtB,MAAM,WAAW,YAAqB;AACpC,YAAQ,QAAyB;;AAEnC,UAAO,GAAG,WAAW,QAAQ;AAC7B,gBAAa,OAAO,IAAI,WAAW,QAAQ;;EAE7C,OAAO,YAAY;AACjB,UAAO,YAAY,QAAQ;;EAE7B,WAAW,YAAY;AACrB,SAAM,OAAO,WAAW,CAAC,YAAY,GAAG;;EAE3C;;;;;AAMH,IAAa,iBAAb,MAAgD;CAC9C,AAAiB;CACjB,AAAiB;;;;CAKjB,YAAY,UAAiC,EAAE,EAAE;AAC/C,OAAK,gBAAgB,QAAQ,iBAAiB;AAC9C,OAAK,UAAU;;;;;CAMjB,MAAM,QACJ,MACA,WACA,UAA4B,EAAE,EACN;AACxB,MAAI,QAAQ,QAAQ,QAClB,QAAO,4BAA4B;EAGrC,MAAM,SAAS,IAAI,OAAO,uBAAuB,EAAE;GACjD,UAAU,yBAAyB,OAAO,KAAK,IAAI;GACnD,gBAAgB,KAAK,QAAQ;GAC9B,CAAC;AAEF,SAAO,MAAM,wBAAwB;GACnC,eAAe,KAAK;GACpB;GACA,aAAa,YAAY;GACzB;GACA,gBAAgB,qBAAqB,KAAK,SAAS,QAAQ;GAC3D,QAAQ,QAAQ;GAChB,WAAW,sBAAsB,OAAO;GACzC,CAAC"}

package/dist/workerEntry.cjs

@@ -0,0 +1,18 @@
+let node_worker_threads = require("node:worker_threads");
+let __mcploom_codexec_quickjs_runner_protocol_endpoint = require("@mcploom/codexec-quickjs/runner/protocol-endpoint");
+
+//#region src/workerEntry.ts
+if (!node_worker_threads.parentPort) throw new Error("WorkerExecutor requires a worker parent port");
+const workerPort = node_worker_threads.parentPort;
+(0, __mcploom_codexec_quickjs_runner_protocol_endpoint.attachQuickJsProtocolEndpoint)({
+	onMessage(handler) {
+		workerPort.on("message", handler);
+		return () => workerPort.off("message", handler);
+	},
+	send(message) {
+		workerPort.postMessage(message);
+	}
+});
+
+//#endregion
+//# sourceMappingURL=workerEntry.cjs.map

package/dist/workerEntry.cjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"workerEntry.cjs","names":["parentPort"],"sources":["../src/workerEntry.ts"],"sourcesContent":["import { parentPort } from \"node:worker_threads\";\n\nimport { attachQuickJsProtocolEndpoint } from \"@mcploom/codexec-quickjs/runner/protocol-endpoint\";\nimport type { DispatcherMessage, RunnerMessage } from \"@mcploom/codexec-protocol\";\n\nif (!parentPort) {\n  throw new Error(\"WorkerExecutor requires a worker parent port\");\n}\n\nconst workerPort = parentPort;\n\nattachQuickJsProtocolEndpoint({\n  onMessage(handler: (message: DispatcherMessage) => void): () => void {\n    workerPort.on(\"message\", handler);\n    return () => workerPort.off(\"message\", handler);\n  },\n  send(message: RunnerMessage): void {\n    workerPort.postMessage(message);\n  },\n});\n"],"mappings":";;;;AAKA,IAAI,CAACA,+BACH,OAAM,IAAI,MAAM,+CAA+C;AAGjE,MAAM,aAAaA;sFAEW;CAC5B,UAAU,SAA2D;AACnE,aAAW,GAAG,WAAW,QAAQ;AACjC,eAAa,WAAW,IAAI,WAAW,QAAQ;;CAEjD,KAAK,SAA8B;AACjC,aAAW,YAAY,QAAQ;;CAElC,CAAC"}

package/dist/workerEntry.d.cts

@@ -0,0 +1 @@
+export { };

package/dist/workerEntry.d.ts

@@ -0,0 +1 @@
+export { };

package/dist/workerEntry.js

@@ -0,0 +1,19 @@
+import { parentPort } from "node:worker_threads";
+import { attachQuickJsProtocolEndpoint } from "@mcploom/codexec-quickjs/runner/protocol-endpoint";
+
+//#region src/workerEntry.ts
+if (!parentPort) throw new Error("WorkerExecutor requires a worker parent port");
+const workerPort = parentPort;
+attachQuickJsProtocolEndpoint({
+	onMessage(handler) {
+		workerPort.on("message", handler);
+		return () => workerPort.off("message", handler);
+	},
+	send(message) {
+		workerPort.postMessage(message);
+	}
+});
+
+//#endregion
+export {  };
+//# sourceMappingURL=workerEntry.js.map

package/dist/workerEntry.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"workerEntry.js","names":[],"sources":["../src/workerEntry.ts"],"sourcesContent":["import { parentPort } from \"node:worker_threads\";\n\nimport { attachQuickJsProtocolEndpoint } from \"@mcploom/codexec-quickjs/runner/protocol-endpoint\";\nimport type { DispatcherMessage, RunnerMessage } from \"@mcploom/codexec-protocol\";\n\nif (!parentPort) {\n  throw new Error(\"WorkerExecutor requires a worker parent port\");\n}\n\nconst workerPort = parentPort;\n\nattachQuickJsProtocolEndpoint({\n  onMessage(handler: (message: DispatcherMessage) => void): () => void {\n    workerPort.on(\"message\", handler);\n    return () => workerPort.off(\"message\", handler);\n  },\n  send(message: RunnerMessage): void {\n    workerPort.postMessage(message);\n  },\n});\n"],"mappings":";;;;AAKA,IAAI,CAAC,WACH,OAAM,IAAI,MAAM,+CAA+C;AAGjE,MAAM,aAAa;AAEnB,8BAA8B;CAC5B,UAAU,SAA2D;AACnE,aAAW,GAAG,WAAW,QAAQ;AACjC,eAAa,WAAW,IAAI,WAAW,QAAQ;;CAEjD,KAAK,SAA8B;AACjC,aAAW,YAAY,QAAQ;;CAElC,CAAC"}

package/package.json

@@ -0,0 +1,48 @@
+{
+  "name": "@mcploom/codexec-worker",
+  "version": "0.1.1",
+  "description": "Worker thread executor for the mcploom codexec core package.",
+  "license": "MIT",
+  "type": "module",
+  "engines": {
+    "node": ">=22"
+  },
+  "main": "./dist/index.cjs",
+  "module": "./dist/index.js",
+  "types": "./dist/index.d.ts",
+  "exports": {
+    ".": {
+      "types": "./dist/index.d.ts",
+      "import": "./dist/index.js",
+      "require": "./dist/index.cjs"
+    }
+  },
+  "sideEffects": false,
+  "files": [
+    "dist",
+    "README.md",
+    "LICENSE"
+  ],
+  "scripts": {
+    "build": "tsdown"
+  },
+  "keywords": [
+    "mcp",
+    "model-context-protocol",
+    "worker-threads",
+    "quickjs",
+    "code-execution"
+  ],
+  "repository": {
+    "type": "git",
+    "url": "git+https://github.com/aallam/mcploom.git",
+    "directory": "packages/codexec-worker"
+  },
+  "homepage": "https://github.com/aallam/mcploom/tree/main/packages/codexec-worker#readme",
+  "bugs": "https://github.com/aallam/mcploom/issues",
+  "dependencies": {
+    "@mcploom/codexec": "^0.3.0",
+    "@mcploom/codexec-protocol": "^0.1.1",
+    "@mcploom/codexec-quickjs": "^0.2.0"
+  }
+}