@n8n/expression-runtime 0.30.0 → 0.31.1

package/dist/esm/bridge/host-functions.js

@@ -0,0 +1,328 @@
+import { bridgeMessageSchema } from './bridge-messages';
+// ============================================================================
+// Host-side functions shared by the expression bridges.
+//
+// Both IsolatedVmBridge and QuickJsBridge expose the same three host
+// callbacks to the guest — getValueAtPath, getArrayElement, callHost — plus
+// the error-sentinel helpers and bundle loader around them. The logic is
+// engine-agnostic: each bridge wraps these pure functions in its own
+// callback mechanism (ivm.Callback / vm.newFunction) and marshals the
+// plain, JSON-shaped return values across its own boundary.
+// ============================================================================
+/** Check if a value is an error sentinel returned by serializeError. */
+export function isErrorSentinel(value) {
+    return (typeof value === 'object' &&
+        value !== null &&
+        value.__isError === true);
+}
+/**
+ * Serialize an error into a transferable metadata object.
+ *
+ * Host-side callbacks (getValueAtPath, etc.) catch errors and return this
+ * sentinel instead of letting the error cross the boundary (which strips
+ * custom class identity and properties). The guest-side proxy detects
+ * __isError and throws the sentinel; the host reconstructs a real Error
+ * after it round-trips back (see reconstructError).
+ */
+export function serializeError(err) {
+    if (err instanceof Error) {
+        const extra = Object.fromEntries(Object.entries(err).filter(([key]) => key !== 'name' && key !== 'message' && key !== 'stack'));
+        return {
+            __isError: true,
+            name: err.name,
+            message: err.message,
+            stack: err.stack,
+            extra,
+        };
+    }
+    return { __isError: true, name: 'Error', message: String(err), extra: {} };
+}
+/**
+ * Reconstruct an error from a serialized error sentinel.
+ *
+ * Restores the name, stack, and custom properties that would otherwise be
+ * lost crossing the guest boundary.
+ */
+export function reconstructError(data) {
+    const error = new Error(data.message);
+    error.name = data.name || 'Error';
+    if (data.stack) {
+        error.stack = data.stack;
+    }
+    // Restore custom properties transferred across the boundary
+    if (data.extra) {
+        Object.assign(error, data.extra);
+    }
+    return error;
+}
+/**
+ * Navigate the data object by path and return metadata or a primitive value.
+ *
+ * Used by createDeepLazyProxy when accessing properties. Returns metadata
+ * markers for arrays and objects, or the primitive value directly.
+ *
+ * Special-case: paths starting with ['$item', index] call data.$item(index)
+ * to get the sub-proxy for that item, then continue navigating the rest;
+ * likewise ['$', nodeName] calls data.$(nodeName).
+ *
+ * Function-typed values are returned as `undefined` — every callable on
+ * the host data surface (`$('Foo').first()`, `$items()`, `$fromAI()`,
+ * `$evaluateExpression()`, `$getPairedItem()`) is wired guest-side via
+ * the typed-RPC dispatcher (`callHost`). No expression form should
+ * reach a function through this path (invariant:
+ * __tests__/host-fn-shadowing.test.ts).
+ */
+export function getValueAtPath(data, pathArr) {
+    let value = data;
+    let startIndex = 0;
+    const itemFn = data.$item;
+    if (pathArr.length >= 2 && pathArr[0] === '$item' && typeof itemFn === 'function') {
+        const itemIndex = parseInt(pathArr[1], 10);
+        if (!isNaN(itemIndex)) {
+            value = itemFn(itemIndex);
+            startIndex = 2;
+        }
+    }
+    else {
+        const dollarFn = data.$;
+        if (pathArr.length >= 2 && pathArr[0] === '$' && typeof dollarFn === 'function') {
+            value = dollarFn(pathArr[1]);
+            startIndex = 2;
+        }
+    }
+    for (let i = startIndex; i < pathArr.length; i++) {
+        value = value?.[pathArr[i]];
+        if (value === undefined || value === null) {
+            return value;
+        }
+    }
+    // Functions are not reachable via the lazy-proxy data path —
+    // every callable on the host data surface routes through the
+    // typed-RPC dispatcher. Return undefined so any residual
+    // access surfaces as missing rather than as a stale metadata
+    // marker the runtime no longer knows how to interpret.
+    if (typeof value === 'function') {
+        return undefined;
+    }
+    // Handle arrays - always lazy, only transfer length
+    if (Array.isArray(value)) {
+        return {
+            __isArray: true,
+            __length: value.length,
+            __data: null,
+        };
+    }
+    // Dates have no enumerable own keys; pass through instead of
+    // marshaling as an empty object.
+    if (value instanceof Date) {
+        return value;
+    }
+    // Handle objects - return metadata with keys
+    if (value !== null && typeof value === 'object') {
+        return {
+            __isObject: true,
+            __keys: Object.keys(value),
+        };
+    }
+    // Primitive value
+    return value;
+}
+/**
+ * Get an array element at an index, navigating to the array by path first
+ * (same `$`/`$item` special-casing as getValueAtPath).
+ *
+ * Used by the array proxy when accessing numeric indices.
+ */
+export function getArrayElement(data, pathArr, index) {
+    let arr = data;
+    let startIndex = 0;
+    const itemFn = data.$item;
+    if (pathArr.length >= 2 && pathArr[0] === '$item' && typeof itemFn === 'function') {
+        const itemIndex = parseInt(pathArr[1], 10);
+        if (!isNaN(itemIndex)) {
+            arr = itemFn(itemIndex);
+            startIndex = 2;
+        }
+    }
+    else {
+        const dollarFn = data.$;
+        if (pathArr.length >= 2 && pathArr[0] === '$' && typeof dollarFn === 'function') {
+            arr = dollarFn(pathArr[1]);
+            startIndex = 2;
+        }
+    }
+    for (let i = startIndex; i < pathArr.length; i++) {
+        arr = arr?.[pathArr[i]];
+        if (arr === undefined || arr === null) {
+            return undefined;
+        }
+    }
+    if (!Array.isArray(arr)) {
+        return undefined;
+    }
+    // Only genuine array indices are reachable; anything else (e.g.
+    // 'constructor', '__lookupGetter__') would read off the prototype
+    // chain and could leak a host function reference across the boundary.
+    if (!Number.isInteger(index) || index < 0) {
+        return undefined;
+    }
+    const element = arr[index];
+    // Functions are never reachable through the data surface — mirror the
+    // guard in getValueAtPath so a host callable can't cross the boundary
+    // (invariant: __tests__/host-fn-shadowing.test.ts).
+    if (typeof element === 'function') {
+        return undefined;
+    }
+    // Dates have no enumerable own keys; pass through instead of
+    // marshaling as an empty object.
+    if (element instanceof Date) {
+        return element;
+    }
+    // If element is object/array, return metadata
+    if (element !== null && typeof element === 'object') {
+        if (Array.isArray(element)) {
+            return {
+                __isArray: true,
+                __length: element.length,
+                __data: null,
+            };
+        }
+        return {
+            __isObject: true,
+            __keys: Object.keys(element),
+        };
+    }
+    // Primitive element
+    return element;
+}
+/**
+ * Host-side dispatcher for the typed-RPC `callHost` channel.
+ *
+ * The guest sends one envelope per typed RPC invocation:
+ *   `callHost({ type: 'getNodeFirst', nodeName, branchIndex?, runIndex? })`
+ *
+ * Inputs cross a trust boundary, so the dispatcher parses every envelope
+ * with the host-side zod schema (`bridgeMessageSchema`) before any
+ * dispatch happens. Anything that deviates from the declared shape —
+ * unknown `type`, missing required fields, extra unexpected fields,
+ * wrong field types — fails the parse and throws; the calling bridge
+ * catches and returns an error sentinel to the guest.
+ *
+ * After parsing, `switch (msg.type)` dispatches with a fully narrowed
+ * message type. The operation set is exactly the cases in this switch;
+ * the `type` field selects a static branch in source, not a property
+ * lookup on a runtime object. Each case reads a fixed literal property
+ * name off the host-side data proxy — the guest cannot influence which
+ * property is dereferenced.
+ *
+ * Return-value note: cases must return plain, structured-clone-able,
+ * JSON-shaped data. Each bridge marshals the result across its own
+ * boundary (structured clone for isolated-vm, sentinel-wrapped JSON
+ * round-trip for QuickJS), so engine objects or other non-cloneable
+ * values must not be returned.
+ */
+export function dispatchHostCall(rawMsg, data) {
+    const msg = bridgeMessageSchema.parse(rawMsg);
+    switch (msg.type) {
+        // The `$('Foo').{first,last,all}` typed RPCs.
+        //
+        // Eliminating `data.$` as a host-callable entirely would require
+        // reaching the `WorkflowDataProxy` internals (e.g.
+        // `getNodeExecutionOrPinnedData`) rather than the public `$()` API;
+        // that's a follow-up.
+        //
+        // `data.$` is a host-wired function (`WorkflowDataProxy`'s `$`). If it
+        // ever isn't, optional chaining short-circuits to `undefined` — the
+        // same observable result the runtime's `E()` handler produces from any
+        // thrown error here.
+        case 'getNodeFirst':
+            return data.$?.(msg.nodeName)?.first?.(msg.branchIndex, msg.runIndex);
+        case 'getNodeLast':
+            return data.$?.(msg.nodeName)?.last?.(msg.branchIndex, msg.runIndex);
+        case 'getNodeAll':
+            return data.$?.(msg.nodeName)?.all?.(msg.branchIndex, msg.runIndex);
+        // The `$input.{first,last,all}` typed RPCs.
+        //
+        // Each reads a fixed literal property name off `data.$input` (the
+        // host's `WorkflowDataProxy` input proxy). The host enforces zero
+        // arguments on these methods — the schemas have no fields besides
+        // `type`, so the guest cannot pass anything that would trigger the
+        // "should have no arguments" error path on the host side.
+        case 'getInputFirst':
+            return data.$input?.first?.();
+        case 'getInputLast':
+            return data.$input?.last?.();
+        case 'getInputAll':
+            return data.$input?.all?.();
+        // `$items(nodeName?, outputIndex?, runIndex?)` — the global accessor
+        // for a node's execution data. Reads the literal `$items` property
+        // off `data` (host-wired by `WorkflowDataProxy`) and forwards the
+        // validated args verbatim. The host applies its own defaults when
+        // fields are `undefined`.
+        case 'getItems':
+            return data.$items?.(msg.nodeName, msg.outputIndex, msg.runIndex);
+        // `$fromAI(name, description?, type?, defaultValue?)` and its
+        // `$fromAi` / `$fromai` aliases. Reads the literal `$fromAI` property
+        // off `data` (host-wired) and forwards the args. The host validates
+        // `name` (required + regex) and applies its own resolution / fallback
+        // logic, so empty / invalid names surface as the host's structured
+        // `ExpressionError` rather than a generic zod parse error.
+        //
+        // Note: `msg.valueType` maps to the host's third positional parameter
+        // (`_type` in `WorkflowDataProxy.handleFromAi`). The bridge protocol
+        // renames it to avoid collision with the `type` discriminator on the
+        // envelope — the host parameter currently goes unused, but if it ever
+        // gains a name (`type`), this mapping should stay explicit.
+        case 'fromAi':
+            return data.$fromAI?.(msg.name, msg.description, msg.valueType, msg.defaultValue);
+        // The `$('Foo').pairedItem(itemIndex?)` / `.itemMatching(...)` /
+        // `.item` cluster. Three separate typed RPCs, each reading exactly one
+        // literal property off the host node proxy.
+        //
+        // The split is load-bearing: the host's `pairedItemMethod` closure
+        // captures which property name the proxy `get` trap saw, and uses
+        // that to pick the right error message (e.g. "Missing item index for
+        // .itemMatching()") and to decide between method-call vs getter
+        // semantics for `.item`. Reading the matching property here lets
+        // those host-side branches fire exactly as they do in the legacy
+        // engine; no in-guest validation needed.
+        case 'getNodePairedItem':
+            return data.$?.(msg.nodeName)?.pairedItem?.(msg.itemIndex);
+        case 'getNodeItemMatching':
+            return data.$?.(msg.nodeName)?.itemMatching?.(msg.itemIndex);
+        case 'getNodeItem':
+            // `.item` is a host getter — accessing it invokes the resolver and
+            // returns the value immediately. Optional chaining only short-
+            // circuits on null/undefined; the getter still fires on access.
+            return data.$?.(msg.nodeName)?.item;
+        // `$evaluateExpression(expression, itemIndex?)`. Forwards the string
+        // to the host's nested-evaluation helper, which re-enters the
+        // expression engine on the inner expression. Under the VM engine this
+        // round-trips through the bridge again on a fresh evaluation cycle,
+        // which is the same shape the legacy engine supports.
+        case 'evaluateExpression':
+            return data.$evaluateExpression?.(msg.expression, msg.itemIndex);
+        // `$getPairedItem(destinationNodeName, incomingSourceData,
+        // initialPairedItem)`. Forwards directly to the host binding, which
+        // walks the paired-item ancestry chain back to the named upstream
+        // node and returns the matching execution item.
+        //
+        // The two trailing host parameters — `usedMethodName` and
+        // `nodeBeforeLast` — are deliberately not part of the wire protocol:
+        // the host's default for `usedMethodName` is already `$getPairedItem`,
+        // and `nodeBeforeLast` is an internal recursion argument the host sets
+        // during traversal.
+        case 'getPairedItem':
+            return data.$getPairedItem?.(msg.destinationNodeName, msg.incomingSourceData, msg.initialPairedItem);
+        default: {
+            // Unreachable at runtime — zod rejects unknown `type` values
+            // before the switch. The `never` assignment is the compile-time
+            // guard: a new schema added to `bridgeMessageSchema` without a
+            // matching case here becomes a type error.
+            const exhaustive = msg;
+            void exhaustive;
+            throw new Error('Unhandled bridge message');
+        }
+    }
+}
+//# sourceMappingURL=host-functions.js.map

package/dist/esm/bridge/host-functions.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"host-functions.js","sourceRoot":"","sources":["../../../src/bridge/host-functions.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,mBAAmB,EAAE,MAAM,mBAAmB,CAAC;AAExD,+EAA+E;AAC/E,wDAAwD;AACxD,EAAE;AACF,qEAAqE;AACrE,4EAA4E;AAC5E,yEAAyE;AACzE,qEAAqE;AACrE,sEAAsE;AACtE,4DAA4D;AAC5D,+EAA+E;AAE/E,wEAAwE;AACxE,MAAM,UAAU,eAAe,CAAC,KAAc;IAC7C,OAAO,CACN,OAAO,KAAK,KAAK,QAAQ;QACzB,KAAK,KAAK,IAAI;QACb,KAAiC,CAAC,SAAS,KAAK,IAAI,CACrD,CAAC;AACH,CAAC;AAED;;;;;;;;GAQG;AACH,MAAM,UAAU,cAAc,CAAC,GAAY;IAC1C,IAAI,GAAG,YAAY,KAAK,EAAE,CAAC;QAC1B,MAAM,KAAK,GAAG,MAAM,CAAC,WAAW,CAC/B,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,GAAG,CAAC,EAAE,EAAE,CAAC,GAAG,KAAK,MAAM,IAAI,GAAG,KAAK,SAAS,IAAI,GAAG,KAAK,OAAO,CAAC,CAC7F,CAAC;QACF,OAAO;YACN,SAAS,EAAE,IAAI;YACf,IAAI,EAAE,GAAG,CAAC,IAAI;YACd,OAAO,EAAE,GAAG,CAAC,OAAO;YACpB,KAAK,EAAE,GAAG,CAAC,KAAK;YAChB,KAAK;SACL,CAAC;IACH,CAAC;IACD,OAAO,EAAE,SAAS,EAAE,IAAI,EAAE,IAAI,EAAE,OAAO,EAAE,OAAO,EAAE,MAAM,CAAC,GAAG,CAAC,EAAE,KAAK,EAAE,EAAE,EAAE,CAAC;AAC5E,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,gBAAgB,CAAC,IAAmB;IACnD,MAAM,KAAK,GAAG,IAAI,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;IACtC,KAAK,CAAC,IAAI,GAAG,IAAI,CAAC,IAAI,IAAI,OAAO,CAAC;IAClC,IAAI,IAAI,CAAC,KAAK,EAAE,CAAC;QAChB,KAAK,CAAC,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC;IAC1B,CAAC;IAED,4DAA4D;IAC5D,IAAI,IAAI,CAAC,KAAK,EAAE,CAAC;QAChB,MAAM,CAAC,MAAM,CAAC,KAAK,EAAE,IAAI,CAAC,KAAK,CAAC,CAAC;IAClC,CAAC;IAED,OAAO,KAAK,CAAC;AACd,CAAC;AAED;;;;;;;;;;;;;;;;GAgBG;AACH,MAAM,UAAU,cAAc,CAAC,IAAkB,EAAE,OAAiB;IACnE,IAAI,KAAK,GAAY,IAAI,CAAC;IAC1B,IAAI,UAAU,GAAG,CAAC,CAAC;IACnB,MAAM,MAAM,GAAI,IAAgC,CAAC,KAAK,CAAC;IACvD,IAAI,OAAO,CAAC,MAAM,IAAI,CAAC,IAAI,OAAO,CAAC,CAAC,CAAC,KAAK,OAAO,IAAI,OAAO,MAAM,KAAK,UAAU,EAAE,CAAC;QACnF,MAAM,SAAS,GAAG,QAAQ,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;QAC3C,IAAI,CAAC,KAAK,CAAC,SAAS,CAAC,EAAE,CAAC;YACvB,KAAK,GAAI,MAAiC,CAAC,SAAS,CAAC,CAAC;YACtD,UAAU,GAAG,CAAC,CAAC;QAChB,CAAC;IACF,CAAC;SAAM,CAAC;QACP,MAAM,QAAQ,GAAI,IAAgC,CAAC,CAAC,CAAC;QACrD,IAAI,OAAO,CAAC,MAAM,IAAI,CAAC,IAAI,OAAO,CAAC,CAAC,CAAC,KAAK,GAAG,IAAI,OAAO,QAAQ,KAAK,UAAU,EAAE,CAAC;YACjF,KAAK,GAAI,QAAsC,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC;YAC5D,UAAU,GAAG,CAAC,CAAC;QAChB,CAAC;IACF,CAAC;IACD,KAAK,IAAI,CAAC,GAAG,UAAU,EAAE,CAAC,GAAG,OAAO,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;QAClD,KAAK,GAAI,KAAiC,EAAE,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC;QACzD,IAAI,KAAK,KAAK,SAAS,IAAI,KAAK,KAAK,IAAI,EAAE,CAAC;YAC3C,OAAO,KAAK,CAAC;QACd,CAAC;IACF,CAAC;IAED,6DAA6D;IAC7D,6DAA6D;IAC7D,yDAAyD;IACzD,6DAA6D;IAC7D,uDAAuD;IACvD,IAAI,OAAO,KAAK,KAAK,UAAU,EAAE,CAAC;QACjC,OAAO,SAAS,CAAC;IAClB,CAAC;IAED,oDAAoD;IACpD,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;QAC1B,OAAO;YACN,SAAS,EAAE,IAAI;YACf,QAAQ,EAAE,KAAK,CAAC,MAAM;YACtB,MAAM,EAAE,IAAI;SACZ,CAAC;IACH,CAAC;IAED,6DAA6D;IAC7D,iCAAiC;IACjC,IAAI,KAAK,YAAY,IAAI,EAAE,CAAC;QAC3B,OAAO,KAAK,CAAC;IACd,CAAC;IAED,6CAA6C;IAC7C,IAAI,KAAK,KAAK,IAAI,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;QACjD,OAAO;YACN,UAAU,EAAE,IAAI;YAChB,MAAM,EAAE,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC;SAC1B,CAAC;IACH,CAAC;IAED,kBAAkB;IAClB,OAAO,KAAK,CAAC;AACd,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,eAAe,CAAC,IAAkB,EAAE,OAAiB,EAAE,KAAa;IACnF,IAAI,GAAG,GAAY,IAAI,CAAC;IACxB,IAAI,UAAU,GAAG,CAAC,CAAC;IACnB,MAAM,MAAM,GAAI,IAAgC,CAAC,KAAK,CAAC;IACvD,IAAI,OAAO,CAAC,MAAM,IAAI,CAAC,IAAI,OAAO,CAAC,CAAC,CAAC,KAAK,OAAO,IAAI,OAAO,MAAM,KAAK,UAAU,EAAE,CAAC;QACnF,MAAM,SAAS,GAAG,QAAQ,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;QAC3C,IAAI,CAAC,KAAK,CAAC,SAAS,CAAC,EAAE,CAAC;YACvB,GAAG,GAAI,MAAiC,CAAC,SAAS,CAAC,CAAC;YACpD,UAAU,GAAG,CAAC,CAAC;QAChB,CAAC;IACF,CAAC;SAAM,CAAC;QACP,MAAM,QAAQ,GAAI,IAAgC,CAAC,CAAC,CAAC;QACrD,IAAI,OAAO,CAAC,MAAM,IAAI,CAAC,IAAI,OAAO,CAAC,CAAC,CAAC,KAAK,GAAG,IAAI,OAAO,QAAQ,KAAK,UAAU,EAAE,CAAC;YACjF,GAAG,GAAI,QAAsC,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC;YAC1D,UAAU,GAAG,CAAC,CAAC;QAChB,CAAC;IACF,CAAC;IACD,KAAK,IAAI,CAAC,GAAG,UAAU,EAAE,CAAC,GAAG,OAAO,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;QAClD,GAAG,GAAI,GAA+B,EAAE,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC;QACrD,IAAI,GAAG,KAAK,SAAS,IAAI,GAAG,KAAK,IAAI,EAAE,CAAC;YACvC,OAAO,SAAS,CAAC;QAClB,CAAC;IACF,CAAC;IAED,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC;QACzB,OAAO,SAAS,CAAC;IAClB,CAAC;IAED,gEAAgE;IAChE,kEAAkE;IAClE,sEAAsE;IACtE,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,KAAK,CAAC,IAAI,KAAK,GAAG,CAAC,EAAE,CAAC;QAC3C,OAAO,SAAS,CAAC;IAClB,CAAC;IAED,MAAM,OAAO,GAAG,GAAG,CAAC,KAAK,CAAC,CAAC;IAE3B,sEAAsE;IACtE,sEAAsE;IACtE,oDAAoD;IACpD,IAAI,OAAO,OAAO,KAAK,UAAU,EAAE,CAAC;QACnC,OAAO,SAAS,CAAC;IAClB,CAAC;IAED,6DAA6D;IAC7D,iCAAiC;IACjC,IAAI,OAAO,YAAY,IAAI,EAAE,CAAC;QAC7B,OAAO,OAAO,CAAC;IAChB,CAAC;IAED,8CAA8C;IAC9C,IAAI,OAAO,KAAK,IAAI,IAAI,OAAO,OAAO,KAAK,QAAQ,EAAE,CAAC;QACrD,IAAI,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC,EAAE,CAAC;YAC5B,OAAO;gBACN,SAAS,EAAE,IAAI;gBACf,QAAQ,EAAE,OAAO,CAAC,MAAM;gBACxB,MAAM,EAAE,IAAI;aACZ,CAAC;QACH,CAAC;QACD,OAAO;YACN,UAAU,EAAE,IAAI;YAChB,MAAM,EAAE,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC;SAC5B,CAAC;IACH,CAAC;IAED,oBAAoB;IACpB,OAAO,OAAO,CAAC;AAChB,CAAC;AAED;;;;;;;;;;;;;;;;;;;;;;;;;GAyBG;AACH,MAAM,UAAU,gBAAgB,CAAC,MAAe,EAAE,IAAkB;IACnE,MAAM,GAAG,GAAG,mBAAmB,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;IAC9C,QAAQ,GAAG,CAAC,IAAI,EAAE,CAAC;QAClB,8CAA8C;QAC9C,EAAE;QACF,iEAAiE;QACjE,mDAAmD;QACnD,oEAAoE;QACpE,sBAAsB;QACtB,EAAE;QACF,uEAAuE;QACvE,oEAAoE;QACpE,uEAAuE;QACvE,qBAAqB;QACrB,KAAK,cAAc;YAClB,OAAO,IAAI,CAAC,CAAC,EAAE,CAAC,GAAG,CAAC,QAAQ,CAAC,EAAE,KAAK,EAAE,CAAC,GAAG,CAAC,WAAW,EAAE,GAAG,CAAC,QAAQ,CAAC,CAAC;QACvE,KAAK,aAAa;YACjB,OAAO,IAAI,CAAC,CAAC,EAAE,CAAC,GAAG,CAAC,QAAQ,CAAC,EAAE,IAAI,EAAE,CAAC,GAAG,CAAC,WAAW,EAAE,GAAG,CAAC,QAAQ,CAAC,CAAC;QACtE,KAAK,YAAY;YAChB,OAAO,IAAI,CAAC,CAAC,EAAE,CAAC,GAAG,CAAC,QAAQ,CAAC,EAAE,GAAG,EAAE,CAAC,GAAG,CAAC,WAAW,EAAE,GAAG,CAAC,QAAQ,CAAC,CAAC;QACrE,4CAA4C;QAC5C,EAAE;QACF,kEAAkE;QAClE,kEAAkE;QAClE,kEAAkE;QAClE,mEAAmE;QACnE,0DAA0D;QAC1D,KAAK,eAAe;YACnB,OAAO,IAAI,CAAC,MAAM,EAAE,KAAK,EAAE,EAAE,CAAC;QAC/B,KAAK,cAAc;YAClB,OAAO,IAAI,CAAC,MAAM,EAAE,IAAI,EAAE,EAAE,CAAC;QAC9B,KAAK,aAAa;YACjB,OAAO,IAAI,CAAC,MAAM,EAAE,GAAG,EAAE,EAAE,CAAC;QAC7B,qEAAqE;QACrE,mEAAmE;QACnE,kEAAkE;QAClE,kEAAkE;QAClE,0BAA0B;QAC1B,KAAK,UAAU;YACd,OAAO,IAAI,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,QAAQ,EAAE,GAAG,CAAC,WAAW,EAAE,GAAG,CAAC,QAAQ,CAAC,CAAC;QACnE,8DAA8D;QAC9D,sEAAsE;QACtE,oEAAoE;QACpE,sEAAsE;QACtE,mEAAmE;QACnE,2DAA2D;QAC3D,EAAE;QACF,sEAAsE;QACtE,qEAAqE;QACrE,qEAAqE;QACrE,sEAAsE;QACtE,4DAA4D;QAC5D,KAAK,QAAQ;YACZ,OAAO,IAAI,CAAC,OAAO,EAAE,CAAC,GAAG,CAAC,IAAI,EAAE,GAAG,CAAC,WAAW,EAAE,GAAG,CAAC,SAAS,EAAE,GAAG,CAAC,YAAY,CAAC,CAAC;QACnF,iEAAiE;QACjE,uEAAuE;QACvE,4CAA4C;QAC5C,EAAE;QACF,mEAAmE;QACnE,kEAAkE;QAClE,qEAAqE;QACrE,gEAAgE;QAChE,iEAAiE;QACjE,iEAAiE;QACjE,yCAAyC;QACzC,KAAK,mBAAmB;YACvB,OAAO,IAAI,CAAC,CAAC,EAAE,CAAC,GAAG,CAAC,QAAQ,CAAC,EAAE,UAAU,EAAE,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;QAC5D,KAAK,qBAAqB;YACzB,OAAO,IAAI,CAAC,CAAC,EAAE,CAAC,GAAG,CAAC,QAAQ,CAAC,EAAE,YAAY,EAAE,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;QAC9D,KAAK,aAAa;YACjB,mEAAmE;YACnE,+DAA+D;YAC/D,gEAAgE;YAChE,OAAO,IAAI,CAAC,CAAC,EAAE,CAAC,GAAG,CAAC,QAAQ,CAAC,EAAE,IAAI,CAAC;QACrC,qEAAqE;QACrE,8DAA8D;QAC9D,sEAAsE;QACtE,oEAAoE;QACpE,sDAAsD;QACtD,KAAK,oBAAoB;YACxB,OAAO,IAAI,CAAC,mBAAmB,EAAE,CAAC,GAAG,CAAC,UAAU,EAAE,GAAG,CAAC,SAAS,CAAC,CAAC;QAClE,2DAA2D;QAC3D,oEAAoE;QACpE,kEAAkE;QAClE,gDAAgD;QAChD,EAAE;QACF,0DAA0D;QAC1D,qEAAqE;QACrE,uEAAuE;QACvE,uEAAuE;QACvE,oBAAoB;QACpB,KAAK,eAAe;YACnB,OAAO,IAAI,CAAC,cAAc,EAAE,CAC3B,GAAG,CAAC,mBAAmB,EACvB,GAAG,CAAC,kBAAkB,EACtB,GAAG,CAAC,iBAAiB,CACrB,CAAC;QACH,SAAS,CAAC;YACT,6DAA6D;YAC7D,gEAAgE;YAChE,+DAA+D;YAC/D,2CAA2C;YAC3C,MAAM,UAAU,GAAU,GAAG,CAAC;YAC9B,KAAK,UAAU,CAAC;YAChB,MAAM,IAAI,KAAK,CAAC,0BAA0B,CAAC,CAAC;QAC7C,CAAC;IACF,CAAC;AACF,CAAC"}

package/dist/esm/bridge/isolated-vm-bridge.d.ts

@@ -43,16 +43,6 @@ export declare class IsolatedVmBridge implements RuntimeBridge {
      * @throws {Error} If context not initialized or bundle loading fails
      */
     private loadVendorLibraries;
-    /**
-     * Verify the proxy system loaded correctly.
-     *
-     * The proxy system is loaded as part of the runtime bundle in loadVendorLibraries().
-     * This method verifies all required components are available.
-     *
-     * @private
-     * @throws {Error} If context not initialized or proxy system verification fails
-     */
-    private verifyProxySystem;
     /**
      * Inject the E() error handler into the isolate context.
      *
@@ -77,17 +67,20 @@ export declare class IsolatedVmBridge implements RuntimeBridge {
      * @throws {Error} If context not initialized
      */
     private injectErrorHandler;
+    /**
+     * Synchronous variant of initialize(): the same steps through isolated-vm's
+     * sync APIs, for on-demand creation inside the synchronous evaluate() path
+     * (lazy acquisition with an exhausted pool). Blocks the event loop for the
+     * duration of one isolate setup — pool warmup should stay on the async
+     * initialize().
+     */
+    initializeSync(): void;
     /**
      * Create an ivm.Callback for getting value/metadata at a path.
      *
-     * Used by createDeepLazyProxy when accessing properties. Returns metadata
-     * markers for arrays and objects, or the primitive value directly.
-     *
-     * Function-typed values are returned as `undefined` — every callable on
-     * the host data surface (`$('Foo').first()`, `$items()`, `$fromAI()`,
-     * `$evaluateExpression()`, `$getPairedItem()`) is wired in-isolate via
-     * the typed-RPC dispatcher (`callHost`). No expression form should
-     * reach a function through this path.
+     * Thin wrapper around the shared getValueAtPath (see host-functions.ts
+     * for navigation and guard semantics); errors are caught and returned
+     * as sentinels instead of crossing the isolate boundary.
      *
      * @param data - Current workflow data to use for callback responses
      * @private
@@ -96,144 +89,32 @@ export declare class IsolatedVmBridge implements RuntimeBridge {
     /**
      * Create an ivm.Callback for getting array elements at an index.
      *
-     * Used by array proxy when accessing numeric indices.
+     * Thin wrapper around the shared getArrayElement (see host-functions.ts
+     * for navigation and guard semantics); errors are caught and returned
+     * as sentinels instead of crossing the isolate boundary.
      *
      * @param data - Current workflow data to use for callback responses
      * @private
      */
     private createGetArrayElementRef;
     /**
-     * Create the single typed-RPC dispatcher.
-     *
-     * The isolate sends one envelope per typed RPC invocation:
-     *   `callHost({ type: 'getNodeFirst', nodeName, branchIndex?, runIndex? })`
+     * Create the ivm.Callback for the typed-RPC `callHost` channel.
      *
-     * Inputs cross a trust boundary, so the dispatcher parses every envelope
-     * with the host-side zod schema (`bridgeMessageSchema`) before any
-     * dispatch happens. Anything that deviates from the declared shape —
-     * unknown `type`, missing required fields, extra unexpected fields,
-     * wrong field types — fails the parse and an error sentinel is returned
-     * to the caller.
+     * Thin wrapper around the shared dispatchHostCall (see host-functions.ts
+     * for envelope validation and per-message rationale); errors — including
+     * zod parse failures — are caught and returned as sentinels instead of
+     * crossing the isolate boundary.
      *
-     * After parsing, `switch (msg.type)` dispatches to a private handler with
-     * a fully narrowed message type. The operation set is exactly the cases
-     * in this switch; the `type` field selects a static branch in source,
-     * not a property lookup on a runtime object.
-     *
-     * Return-value note: handlers must return plain, structured-clone-able
-     * data. Results cross into the isolate through an ivm.Callback, which copies
-     * them via the structured-clone algorithm — return JSON-shaped values, not
-     * isolated-vm objects (`Reference`/`ExternalCopy`) or other non-cloneable
-     * values.
+     * Return-value note: the dispatcher returns plain, structured-clone-able
+     * data. Results cross into the isolate through an ivm.Callback, which
+     * copies them via the structured-clone algorithm — JSON-shaped values,
+     * not isolated-vm objects (`Reference`/`ExternalCopy`) or other
+     * non-cloneable values.
      *
      * @param data - Current workflow data
      * @private
      */
     private createCallHostRef;
-    /**
-     * Handlers for the `$('Foo').{first,last,all}` typed RPCs.
-     *
-     * Each handler reads a fixed literal property name off the host-side node
-     * proxy — the isolate cannot influence which property is dereferenced.
-     * Eliminating `data.$` as a host-callable entirely would require reaching
-     * the `WorkflowDataProxy` internals (e.g. `getNodeExecutionOrPinnedData`)
-     * rather than the public `$()` API; that's a follow-up.
-     *
-     * `data.$` is a host-wired function (`WorkflowDataProxy`'s `$`). If it
-     * ever isn't, optional chaining short-circuits to `undefined` — the same
-     * observable result the runtime's `E()` handler produces from any thrown
-     * error here.
-     *
-     * @private
-     */
-    private handleGetNodeFirst;
-    private handleGetNodeLast;
-    private handleGetNodeAll;
-    /**
-     * Handlers for the `$input.{first,last,all}` typed RPCs.
-     *
-     * Each reads a fixed literal property name off `data.$input` (the host's
-     * `WorkflowDataProxy` input proxy). The host enforces zero arguments on
-     * these methods — the schemas have no fields besides `type`, so the
-     * isolate cannot pass anything that would trigger the "should have no
-     * arguments" error path on the host side.
-     *
-     * @private
-     */
-    private handleGetInputFirst;
-    private handleGetInputLast;
-    private handleGetInputAll;
-    /**
-     * Handler for `$items(nodeName?, outputIndex?, runIndex?)` — the
-     * global accessor for a node's execution data. Reads the literal
-     * `$items` property off `data` (host-wired by `WorkflowDataProxy`)
-     * and forwards the validated args verbatim. The host applies its own
-     * defaults when fields are `undefined`.
-     *
-     * @private
-     */
-    private handleGetItems;
-    /**
-     * Handler for `$fromAI(name, description?, type?, defaultValue?)` and its
-     * `$fromAi` / `$fromai` aliases. Reads the literal `$fromAI` property
-     * off `data` (host-wired) and forwards the args. The host validates
-     * `name` (required + regex) and applies its own resolution / fallback
-     * logic, so empty / invalid names surface as the host's structured
-     * `ExpressionError` rather than a generic zod parse error.
-     *
-     * Note: `msg.valueType` maps to the host's third positional parameter
-     * (`_type` in `WorkflowDataProxy.handleFromAi`). The bridge protocol
-     * renames it to avoid collision with the `type` discriminator on the
-     * envelope — the host parameter currently goes unused, but if it ever
-     * gains a name (`type`), this mapping should stay explicit.
-     *
-     * @private
-     */
-    private handleFromAi;
-    /**
-     * Handlers for the `$('Foo').pairedItem(itemIndex?)` / `.itemMatching(...)` /
-     * `.item` cluster. Three separate typed RPCs, each reading exactly one
-     * literal property off the host node proxy.
-     *
-     * The split is load-bearing: the host's `pairedItemMethod` closure
-     * captures which property name the proxy `get` trap saw, and uses
-     * that to pick the right error message (e.g. "Missing item index for
-     * .itemMatching()") and to decide between method-call vs getter
-     * semantics for `.item`. Reading the matching property here lets
-     * those host-side branches fire exactly as they do in the legacy
-     * engine; no in-isolate validation needed.
-     *
-     * @private
-     */
-    private handleGetNodePairedItem;
-    private handleGetNodeItemMatching;
-    private handleGetNodeItem;
-    /**
-     * Handler for `$evaluateExpression(expression, itemIndex?)`. Forwards
-     * the string to the host's nested-evaluation helper, which re-enters
-     * the expression engine on the inner expression. Under the VM engine
-     * this round-trips through the bridge again as a new evaluation on the
-     * enclosing call's time budget, which is the same shape the legacy
-     * engine supports.
-     *
-     * @private
-     */
-    private handleEvaluateExpression;
-    /**
-     * Handler for `$getPairedItem(destinationNodeName, incomingSourceData,
-     * initialPairedItem)`. Forwards directly to the host binding, which
-     * walks the paired-item ancestry chain back to the named upstream node
-     * and returns the matching execution item.
-     *
-     * The two trailing host parameters — `usedMethodName` and
-     * `nodeBeforeLast` — are deliberately not part of the wire protocol:
-     * the host's default for `usedMethodName` is already `$getPairedItem`,
-     * and `nodeBeforeLast` is an internal recursion argument the host sets
-     * during traversal.
-     *
-     * @private
-     */
-    private handleGetPairedItem;
     /**
      * Execute JavaScript code in the isolated context.
      *
@@ -260,13 +141,6 @@ export declare class IsolatedVmBridge implements RuntimeBridge {
      * ran on — reporting "timed out after 137ms" would misstate the limit.
      */
     private timeoutError;
-    /**
-     * Reconstruct an error from serialized isolate data.
-     *
-     * Maps error names back to their host-side classes and restores
-     * custom properties that would otherwise be lost crossing the boundary.
-     */
-    private reconstructError;
     /**
      * Dispose of the isolate and free resources.
      *

package/dist/esm/bridge/isolated-vm-bridge.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"isolated-vm-bridge.d.ts","sourceRoot":"","sources":["../../../src/bridge/isolated-vm-bridge.ts"],"names":[],"mappings":"AAGA,OAAO,KAAK,EAAE,aAAa,EAAE,YAAY,EAAE,cAAc,EAAE,YAAY,EAAE,MAAM,UAAU,CAAC;AA+E1F;;;;;;;;;;GAUG;AACH,qBAAa,gBAAiB,YAAW,aAAa;IACrD,OAAO,CAAC,OAAO,CAAc;IAC7B,OAAO,CAAC,OAAO,CAAC,CAAc;IAC9B,OAAO,CAAC,WAAW,CAAS;IAC5B,OAAO,CAAC,QAAQ,CAAS;IACzB,OAAO,CAAC,MAAM,CAAyB;IACvC,OAAO,CAAC,MAAM,CAAmC;IAEjD,YAAY,MAAM,GAAE,YAAiB,EAUpC;IAED;;;;;;;;;;OAUG;IACG,UAAU,IAAI,OAAO,CAAC,IAAI,CAAC,CA4BhC;IAED;;;;;;;;;;;OAWG;YACW,mBAAmB;IAgCjC;;;;;;;;OAQG;YACW,iBAAiB;IA4B/B;;;;;;;;;;;;;;;;;;;;;;OAsBG;YACW,kBAAkB;IAwBhC;;;;;;;;;;;;;;OAcG;IACH,OAAO,CAAC,uBAAuB;IAqE/B;;;;;;;OAOG;IACH,OAAO,CAAC,wBAAwB;IA4EhC;;;;;;;;;;;;;;;;;;;;;;;;;;OA0BG;IACH,OAAO,CAAC,iBAAiB;IA+CzB;;;;;;;;;;;;;;;OAeG;IACH,OAAO,CAAC,kBAAkB;IAO1B,OAAO,CAAC,iBAAiB;IAOzB,OAAO,CAAC,gBAAgB;IAOxB;;;;;;;;;;OAUG;IACH,OAAO,CAAC,mBAAmB;IAI3B,OAAO,CAAC,kBAAkB;IAI1B,OAAO,CAAC,iBAAiB;IAIzB;;;;;;;;OAQG;IACH,OAAO,CAAC,cAAc;IAOtB;;;;;;;;;;;;;;;OAeG;IACH,OAAO,CAAC,YAAY;IAOpB;;;;;;;;;;;;;;OAcG;IACH,OAAO,CAAC,uBAAuB;IAO/B,OAAO,CAAC,yBAAyB;IAOjC,OAAO,CAAC,iBAAiB;IAUzB;;;;;;;;;OASG;IACH,OAAO,CAAC,wBAAwB;IAOhC;;;;;;;;;;;;;OAaG;IACH,OAAO,CAAC,mBAAmB;IAW3B;;;;;;;;;;;;;;;;;;;OAmBG;IACH,OAAO,CAAC,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,YAAY,EAAE,OAAO,CAAC,EAAE,cAAc,GAAG,OAAO,CA4G3E;IAED;;;OAGG;IACH,OAAO,CAAC,YAAY;IASpB;;;;;OAKG;IACH,OAAO,CAAC,gBAAgB;IAexB;;;;OAIG;IACG,OAAO,IAAI,OAAO,CAAC,IAAI,CAAC,CAc7B;IAED;;;;OAIG;IACH,UAAU,IAAI,OAAO,CAEpB;CACD"}
+{"version":3,"file":"isolated-vm-bridge.d.ts","sourceRoot":"","sources":["../../../src/bridge/isolated-vm-bridge.ts"],"names":[],"mappings":"AAGA,OAAO,KAAK,EAAE,aAAa,EAAE,YAAY,EAAE,cAAc,EAAE,YAAY,EAAE,MAAM,UAAU,CAAC;AA8G1F;;;;;;;;;;GAUG;AACH,qBAAa,gBAAiB,YAAW,aAAa;IACrD,OAAO,CAAC,OAAO,CAAc;IAC7B,OAAO,CAAC,OAAO,CAAC,CAAc;IAC9B,OAAO,CAAC,WAAW,CAAS;IAC5B,OAAO,CAAC,QAAQ,CAAS;IACzB,OAAO,CAAC,MAAM,CAAyB;IACvC,OAAO,CAAC,MAAM,CAAmC;IAEjD,YAAY,MAAM,GAAE,YAAiB,EAUpC;IAED;;;;;;;;;;OAUG;IACG,UAAU,IAAI,OAAO,CAAC,IAAI,CAAC,CAyBhC;IAED;;;;;;;;;;;OAWG;YACW,mBAAmB;IA8BjC;;;;;;;;;;;;;;;;;;;;;;OAsBG;YACW,kBAAkB;IAUhC;;;;;;OAMG;IACH,cAAc,IAAI,IAAI,CAgCrB;IAED;;;;;;;;;OASG;IACH,OAAO,CAAC,uBAAuB;IAU/B;;;;;;;;;OASG;IACH,OAAO,CAAC,wBAAwB;IAUhC;;;;;;;;;;;;;;;;OAgBG;IACH,OAAO,CAAC,iBAAiB;IAUzB;;;;;;;;;;;;;;;;;;;OAmBG;IACH,OAAO,CAAC,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,YAAY,EAAE,OAAO,CAAC,EAAE,cAAc,GAAG,OAAO,CA8G3E;IAED;;;OAGG;IACH,OAAO,CAAC,YAAY;IASpB;;;;OAIG;IACG,OAAO,IAAI,OAAO,CAAC,IAAI,CAAC,CAc7B;IAED;;;;OAIG;IACH,UAAU,IAAI,OAAO,CAEpB;CACD"}