@openpond/evals 0.7.4 → 0.7.5

package/JAVASCRIPT_ENVIRONMENTS.md

@@ -3,7 +3,7 @@
 These entrypoints execute authored tool modules over owner-held JSON state:
 
 - `@openpond/evals/javascript-environment` validates immutable definitions and creates an episode with `step`, `collect`, `snapshot` and `destroy`.
-- `@openpond/evals/javascript-environment/node` executes each operation in a terminable worker around the isolated interpreter.
+- `@openpond/evals/javascript-environment/node` exposes worker and Node subprocess owners around the isolated interpreter.
 - `@openpond/evals/javascript-environment/attempt` runs a policy adapter through the declared tools and returns its messages, output and independently recorded state.
 
 The interpreter exposes no host functions, filesystem, network, timers or module loader. Environment code receives an explicit seed and supplied inputs; ambient `Date` and `Math.random` are unavailable. A module cannot call a production connector or launch a process. Tools that require those capabilities need a separate host adapter and its permissions.
@@ -53,7 +53,9 @@ Hosts persist the returned attempt under their task/model/release identity and g
 
 ## Lifecycle ownership
 
-Server hosts should pass `executeJavaScriptEnvironmentInWorker` as the session or attempt runner. Each worker runs a fresh interpreter. A promise settles only after the worker is terminated, including timeout and cancellation. The session rejects overlapping operations and waits for an active operation to stop before cleanup. Call `destroy` in `finally` when using the session API directly; the attempt runner does this automatically.
+Server hosts that require process isolation should pass `executeJavaScriptEnvironmentInProcess` as the session or attempt runner. It requires Node 22.14–24 on `PATH` and gives each operation a fresh Node child and QuickJS interpreter. The child inherits only `PATH`, uses a bounded heap and response stream, and is killed on timeout or cancellation. Authored source travels as JSON interpreter data. A promise settles only after the child exits. This keeps interpreter allocation outside the execution owner's worker-thread lifecycle. `executeJavaScriptVerifierInProcess` provides the same ownership for graders from `@openpond/evals/javascript-verifier/node`.
+
+Node hosts can also use `executeJavaScriptEnvironmentInWorker`. Each worker runs a fresh interpreter and settles only after termination. Both owners include startup in the declared deadline; neither retries failed operations. The session rejects overlapping operations and waits for active execution to stop before cleanup. Call `destroy` in `finally` when using the session API directly; the attempt runner does this automatically.
 
 Cleanup receives the definition's `operationTimeoutMs`, including interpreter and
 worker startup, with no shorter implicit deadline. It still runs after the episode

package/dist/javascript-environment-node.js

@@ -1,7 +1,13 @@
 import { JavaScriptEnvironmentOperationSchema, JavaScriptEnvironmentResultSchema } from "./javascript-environment-contract.js";
 import { executeJavaScriptIsolateInWorker } from "./javascript-isolate-node.js";
+import { executeJavaScriptIsolateInProcess } from "./javascript-isolate-process.js";
 /** The execution owner awaits termination before recording a step or cleanup. */
 export async function executeJavaScriptEnvironmentInWorker(input) {
     const operation = JavaScriptEnvironmentOperationSchema.parse(input.operation);
     return JavaScriptEnvironmentResultSchema.parse(await executeJavaScriptIsolateInWorker({ ...input, exportName: operation, maxResultBytes: 1_572_864, deterministic: true, errorPrefix: "environment" }));
 }
+/** Uses a Node child process independently of the execution owner's runtime. */
+export async function executeJavaScriptEnvironmentInProcess(input) {
+    const operation = JavaScriptEnvironmentOperationSchema.parse(input.operation);
+    return JavaScriptEnvironmentResultSchema.parse(await executeJavaScriptIsolateInProcess({ ...input, exportName: operation, maxResultBytes: 1_572_864, deterministic: true, errorPrefix: "environment" }));
+}

package/dist/javascript-isolate-process-entry.js

@@ -0,0 +1,8 @@
+import { executeJavaScriptIsolate } from "./javascript-isolate.js";
+// Only this bundled, trusted program runs in Node. Authored source is interpreter data.
+const owner = globalThis;
+const input = owner.__openpondIsolateInput;
+delete owner.__openpondIsolateInput;
+if (!input)
+    throw new Error("JavaScript process requires its execution owner.");
+void executeJavaScriptIsolate(input).then((result) => process.stdout.write(JSON.stringify({ ok: true, result })), (error) => process.stdout.write(JSON.stringify({ ok: false, error: (error instanceof Error ? error.message : "JavaScript execution failed.").slice(0, 8_192) })));