@n8n/expression-runtime 0.7.0 → 0.9.0

package/dist/cjs/bridge/isolated-vm-bridge.d.ts

@@ -16,11 +16,7 @@ export declare class IsolatedVmBridge implements RuntimeBridge {
     private initialized;
     private disposed;
     private config;
-    private scriptCache;
-    private valueAtPathRef?;
-    private arrayElementRef?;
-    private callFunctionRef?;
-    private resetDataProxiesRef?;
+    private logger;
     constructor(config?: BridgeConfig);
     /**
      * Initialize the isolate and create execution context.
@@ -41,7 +37,7 @@ export declare class IsolatedVmBridge implements RuntimeBridge {
      * - DateTime, extend, extendOptional (expression engine globals)
      * - SafeObject and SafeError wrappers
      * - createDeepLazyProxy function
-     * - __data object initialization
+     * - buildContext function
      *
      * @private
      * @throws {Error} If context not initialized or bundle loading fails
@@ -60,56 +56,67 @@ export declare class IsolatedVmBridge implements RuntimeBridge {
     /**
      * Inject the E() error handler into the isolate context.
      *
-     * Tournament wraps expressions with try-catch that calls E(error, this).
-     * This handler:
-     * - Re-throws security violations from __sanitize
-     * - Swallows TypeErrors (failed attack attempts return undefined)
-     * - Re-throws all other errors
+     * There are two exception-handling layers inside the isolate:
+     *
+     * 1. **Inner layer (this handler, `E()`)** — Tournament wraps each
+     *    expression with try-catch that calls `E(error, this)`. This handler
+     *    must match the legacy engine's behavior (set in expression.ts via
+     *    setErrorHandler):
+     *    - Re-throw ExpressionError / ExpressionExtensionError
+     *    - Swallow everything else (TypeErrors, generic Errors, etc.)
+     *
+     * 2. **Outer layer (`wrappedCode` try-catch in `execute()`)** — Catches
+     *    anything that escaped `E()` (e.g. re-thrown ExpressionErrors) and
+     *    serializes it into a sentinel object so the host can reconstruct it.
+     *
+     * Inside the isolate, errors from host callbacks arrive as sentinel
+     * objects ({ __isError, name, message, ... }) rather than class instances,
+     * so we match by name instead of instanceof.
      *
      * @private
      * @throws {Error} If context not initialized
      */
     private injectErrorHandler;
     /**
-     * Reset data proxies in the isolate context.
-     *
-     * This method should be called before each execute() to:
-     * 1. Clear proxy caches from previous evaluations
-     * 2. Initialize fresh workflow data references
-     * 3. Expose workflow properties to globalThis
+     * Create an ivm.Reference callback for getting value/metadata at a path.
      *
-     * The reset function runs in the isolate and calls back to the host
-     * via ivm.Reference callbacks to fetch workflow data.
+     * Used by createDeepLazyProxy when accessing properties. Returns metadata
+     * markers for functions, arrays, and objects, or the primitive value directly.
      *
+     * @param data - Current workflow data to use for callback responses
      * @private
-     * @throws {Error} If context not initialized or reset fails
      */
-    private resetDataProxies;
+    private createGetValueAtPathRef;
     /**
-     * Register callback functions for cross-isolate communication.
+     * Create an ivm.Reference callback for getting array elements at an index.
      *
-     * Creates three ivm.Reference callbacks that the runtime bundle uses
-     * to fetch data from the host process:
+     * Used by array proxy when accessing numeric indices.
      *
-     * - __getValueAtPath: Returns metadata or primitive for a property path
-     * - __getArrayElement: Returns individual array elements
-     * - __callFunctionAtPath: Executes functions in host context
+     * @param data - Current workflow data to use for callback responses
+     * @private
+     */
+    private createGetArrayElementRef;
+    /**
+     * Create an ivm.Reference callback for calling functions at a path.
      *
-     * These callbacks are called synchronously from isolate proxy traps.
+     * Used when expressions invoke functions from workflow data.
      *
      * @param data - Current workflow data to use for callback responses
      * @private
      */
-    private registerCallbacks;
+    private createCallFunctionAtPathRef;
     /**
      * Execute JavaScript code in the isolated context.
      *
      * Flow:
-     * 1. Register callbacks as ivm.Reference for cross-isolate communication
-     * 2. Call resetDataProxies() to initialize workflow data proxies
-     * 3. Compile script (with caching for performance)
-     * 4. Execute with timeout enforcement
-     * 5. Return result (copied from isolate)
+     * 1. Create three ivm.Reference callbacks scoped to the current data
+     * 2. Use evalClosureSync to run the code in a closure where $0/$1/$2
+     *    are the callback references — no global mutable state
+     * 3. buildContext() inside the isolate creates a fresh evaluation context
+     *    from the closure-scoped references
+     *
+     * Each call gets its own closure, so nested and concurrent evaluations
+     * cannot interfere with each other.
      *
      * @param code - JavaScript expression to evaluate
      * @param data - Workflow data (e.g., { $json: {...}, $runIndex: 0 })
@@ -117,6 +124,13 @@ export declare class IsolatedVmBridge implements RuntimeBridge {
      * @throws {Error} If bridge not initialized or execution fails
      */
     execute(code: string, data: Record<string, unknown>, options?: ExecuteOptions): unknown;
+    /**
+     * Reconstruct an error from serialized isolate data.
+     *
+     * Maps error names back to their host-side classes and restores
+     * custom properties that would otherwise be lost crossing the boundary.
+     */
+    private reconstructError;
     /**
      * Dispose of the isolate and free resources.
      *

package/dist/cjs/bridge/isolated-vm-bridge.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"isolated-vm-bridge.d.ts","sourceRoot":"","sources":["../../../src/bridge/isolated-vm-bridge.ts"],"names":[],"mappings":"AAGA,OAAO,KAAK,EAAE,aAAa,EAAE,YAAY,EAAE,cAAc,EAAE,MAAM,UAAU,CAAC;AAwC5E;;;;;;;;;;GAUG;AACH,qBAAa,gBAAiB,YAAW,aAAa;IACrD,OAAO,CAAC,OAAO,CAAc;IAC7B,OAAO,CAAC,OAAO,CAAC,CAAc;IAC9B,OAAO,CAAC,WAAW,CAAS;IAC5B,OAAO,CAAC,QAAQ,CAAS;IACzB,OAAO,CAAC,MAAM,CAAyB;IAIvC,OAAO,CAAC,WAAW,CAAiC;IAIpD,OAAO,CAAC,cAAc,CAAC,CAAgB;IACvC,OAAO,CAAC,eAAe,CAAC,CAAgB;IACxC,OAAO,CAAC,eAAe,CAAC,CAAgB;IAKxC,OAAO,CAAC,mBAAmB,CAAC,CAAgB;gBAEhC,MAAM,GAAE,YAAiB;IAWrC;;;;;;;;;;OAUG;IACG,UAAU,IAAI,OAAO,CAAC,IAAI,CAAC;IAqCjC;;;;;;;;;;;OAWG;YACW,mBAAmB;IAoCjC;;;;;;;;OAQG;YACW,iBAAiB;IA+B/B;;;;;;;;;;;OAWG;YACW,kBAAkB;IA0BhC;;;;;;;;;;;;;OAaG;IACH,OAAO,CAAC,gBAAgB;IAmBxB;;;;;;;;;;;;;;OAcG;IACH,OAAO,CAAC,iBAAiB;IAsJzB;;;;;;;;;;;;;;OAcG;IACH,OAAO,CAAC,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAAE,OAAO,CAAC,EAAE,cAAc,GAAG,OAAO;IAsDvF;;;;OAIG;IACG,OAAO,IAAI,OAAO,CAAC,IAAI,CAAC;IAwB9B;;;;OAIG;IACH,UAAU,IAAI,OAAO;CAGrB"}
+{"version":3,"file":"isolated-vm-bridge.d.ts","sourceRoot":"","sources":["../../../src/bridge/isolated-vm-bridge.ts"],"names":[],"mappings":"AAGA,OAAO,KAAK,EAAE,aAAa,EAAE,YAAY,EAAE,cAAc,EAAE,MAAM,UAAU,CAAC;AA0E5E;;;;;;;;;;GAUG;AACH,qBAAa,gBAAiB,YAAW,aAAa;IACrD,OAAO,CAAC,OAAO,CAAc;IAC7B,OAAO,CAAC,OAAO,CAAC,CAAc;IAC9B,OAAO,CAAC,WAAW,CAAS;IAC5B,OAAO,CAAC,QAAQ,CAAS;IACzB,OAAO,CAAC,MAAM,CAAyB;IACvC,OAAO,CAAC,MAAM,CAAmC;gBAErC,MAAM,GAAE,YAAiB;IAYrC;;;;;;;;;;OAUG;IACG,UAAU,IAAI,OAAO,CAAC,IAAI,CAAC;IA8BjC;;;;;;;;;;;OAWG;YACW,mBAAmB;IAgCjC;;;;;;;;OAQG;YACW,iBAAiB;IA4B/B;;;;;;;;;;;;;;;;;;;;;;OAsBG;YACW,kBAAkB;IAwBhC;;;;;;;;OAQG;IACH,OAAO,CAAC,uBAAuB;IAgE/B;;;;;;;OAOG;IACH,OAAO,CAAC,wBAAwB;IAyDhC;;;;;;;OAOG;IACH,OAAO,CAAC,2BAA2B;IAkCnC;;;;;;;;;;;;;;;;;OAiBG;IACH,OAAO,CAAC,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAAE,OAAO,CAAC,EAAE,cAAc,GAAG,OAAO;IAsFvF;;;;;OAKG;IACH,OAAO,CAAC,gBAAgB;IAexB;;;;OAIG;IACG,OAAO,IAAI,OAAO,CAAC,IAAI,CAAC;IAgB9B;;;;OAIG;IACH,UAAU,IAAI,OAAO;CAGrB"}