@tracecode/harness 0.16.5 → 0.16.7

package/CHANGELOG.md

@@ -6,6 +6,27 @@ This repo uses Git tags as release boundaries. Version notes below summarize wha
 
 ## [Unreleased]
 
+## [0.16.7] - 2026-08-14
+
+### Fixed
+
+- Made Java's trusted init-time external-compiler authority control compile
+  requests instead of requiring an untrusted per-execution flag, and separated
+  browser/external artifact-cache identities.
+- Forwarded the public C++ external-compiler endpoint into the prepared browser
+  provider without warming the unused in-browser TraceCC compiler.
+- Failed Java external-compiler initialization closed when the runtime bridge
+  cannot install compiled class manifests, preventing silent browser-compiler
+  fallback.
+
+## [0.16.6] - 2026-08-14
+
+### Fixed
+
+- Exposed the Java external-compiler endpoint through the public browser Judge
+  options, preserving a warm trusted compiler alongside disposable learner
+  runners in server-hosted browser authorities.
+
 ## [0.16.5] - 2026-08-12
 
 ### Added

package/dist/{browser-runtime-provider-POTAJULA.js → browser-runtime-provider-BMDGQ3KS.js}

@@ -2,9 +2,9 @@ var define = undefined;
 import {
   createCppBrowserRuntimeProvider,
   createTraceCCBrowserCompilerService
-} from "./chunk-GX4SGR3L.js";
-import "./chunk-I2JLGVMT.js";
-import "./chunk-NHGF353L.js";
+} from "./chunk-KYRVBA6G.js";
+import "./chunk-EL32HALA.js";
+import "./chunk-GLWDM276.js";
 import "./chunk-5KH5ABPQ.js";
 import "./chunk-C2RUZCIL.js";
 import "./chunk-756Z7C6D.js";
@@ -12,4 +12,4 @@ export {
   createCppBrowserRuntimeProvider,
   createTraceCCBrowserCompilerService
 };
-//# sourceMappingURL=browser-runtime-provider-POTAJULA.js.map
+//# sourceMappingURL=browser-runtime-provider-BMDGQ3KS.js.map

package/dist/{chunk-OXFBZTWZ.js → chunk-6FC562KX.js}

@@ -1,7 +1,7 @@
 var define = undefined;
 import {
   normalizeRuntimeProjectPath
-} from "./chunk-NHGF353L.js";
+} from "./chunk-GLWDM276.js";
 import {
   _await,
   bounded,
@@ -11512,23 +11512,23 @@ async function createBrowserProjectWorkspace(options = {}) {
   const hasProvider = (provider) => providers.includes(provider);
   const [pythonProvider, javascriptProvider, javaProvider, csharpProvider, cppProvider] = await Promise.all([
     hasProvider("python") ? Promise.all([
-      import("./project-browser-7MVLDAHN.js"),
-      import("./python-worker-client-R7K7HDO7.js")
+      import("./project-browser-YM4F7OYW.js"),
+      import("./python-worker-client-FD6RJKAT.js")
     ]) : void 0,
-    hasProvider("javascript") || hasProvider("typescript") ? import("./project-browser-YUBOA2Q4.js") : void 0,
+    hasProvider("javascript") || hasProvider("typescript") ? import("./project-browser-VA4JO24R.js") : void 0,
     hasProvider("java") ? Promise.all([
-      import("./project-browser-XKQ2MNK3.js"),
-      import("./java-project-ASCLR77F.js"),
+      import("./project-browser-OESLR46C.js"),
+      import("./java-project-HKJVRSGW.js"),
       import("./java-project-client-PEQKFTH6.js")
     ]) : void 0,
     hasProvider("csharp") ? Promise.all([
-      import("./project-browser-VSLHVOH4.js"),
-      import("./csharp-worker-client-GAUCDYVS.js")
+      import("./project-browser-MVPRY3P4.js"),
+      import("./csharp-worker-client-3X7TM35A.js")
     ]) : void 0,
     hasProvider("cpp") ? Promise.all([
-      import("./project-browser-DKMZFGCJ.js"),
-      import("./cpp-worker-client-SKBOLX5Q.js"),
-      import("./browser-runtime-provider-POTAJULA.js"),
+      import("./project-browser-UQPBIF52.js"),
+      import("./cpp-worker-client-GUABNYCC.js"),
+      import("./browser-runtime-provider-BMDGQ3KS.js"),
       import("./tracecc-runtime-assets-G3BFH7LY.js")
     ]) : void 0
   ]);
@@ -12165,4 +12165,4 @@ export {
   createBrowserProjectWorkspace,
   createBrowserRuntimeEnvironment
 };
-//# sourceMappingURL=chunk-OXFBZTWZ.js.map
+//# sourceMappingURL=chunk-6FC562KX.js.map

package/dist/{chunk-I2JLGVMT.js → chunk-EL32HALA.js}

@@ -4,7 +4,7 @@ import {
   liftCodeBatchOutcome,
   liftCodeOutcome,
   liftTraceOutcome
-} from "./chunk-NHGF353L.js";
+} from "./chunk-GLWDM276.js";
 import {
   WorkerCrashedError,
   WorkerReadyTimeoutError,
@@ -470,7 +470,9 @@ var CppWorkerClient = class {
             lldWasmUrl: this.options.linkerWasmUrl,
             sysrootUrl: this.options.sysrootUrl,
             runtimeHeaderUrl: this.options.runtimeHeaderUrl,
-            traceccCompilerEnabled: Boolean(this.options.trustedCompilerService),
+            traceccCompilerEnabled: Boolean(
+              this.options.trustedCompilerService || this.externalCompilerUrl
+            ),
             compilerFrameUrl: this.compilerFrameUrl,
             compilerWorkerUrl: this.options.compilerWorkerUrl,
             toolchainIntegrity: this.options.compilerIntegrity
@@ -1370,4 +1372,4 @@ var CppWorkerClient = class {
 export {
   CppWorkerClient
 };
-//# sourceMappingURL=chunk-I2JLGVMT.js.map
+//# sourceMappingURL=chunk-EL32HALA.js.map

package/dist/{chunk-JPDVJCVS.js → chunk-ERYCOWPS.js}

@@ -3,7 +3,7 @@ import {
   createEmptyRuntimeTrace,
   liftCodeBatchOutcome,
   liftCodeOutcome
-} from "./chunk-NHGF353L.js";
+} from "./chunk-GLWDM276.js";
 import {
   WorkerCrashedError,
   WorkerReadyTimeoutError,
@@ -559,4 +559,4 @@ export {
   PythonWorkerClient,
   isWorkerSupported
 };
-//# sourceMappingURL=chunk-JPDVJCVS.js.map
+//# sourceMappingURL=chunk-ERYCOWPS.js.map

package/dist/{chunk-NHGF353L.js → chunk-GLWDM276.js}

@@ -3,7 +3,7 @@ var define = undefined;
 // package.json
 var package_default = {
   name: "@tracecode/harness",
-  version: "0.16.5",
+  version: "0.16.7",
   license: "AGPL-3.0-only",
   homepage: "https://tracecode.app",
   repository: {
@@ -269,7 +269,7 @@ var LANGUAGE_RUNTIME_INFOS = Object.freeze(
       "versionLabel": "Python 3.13.2",
       "executionPlatform": {
         "name": "TraceKernel",
-        "version": "0.16.5"
+        "version": "0.16.7"
       },
       "description": "Python 3.13.2 runs in TraceKernel's isolated Python runtime.\n\nCommon algorithm helpers are imported automatically, including array, bisect, collections, functools, heapq, itertools. Other standard-library modules can be imported normally.\n\nOptional third-party packages are consumer-owned runtime assets and are available only when declared by the TraceKernel runtime manifest.",
       "runtime": {
@@ -296,7 +296,7 @@ var LANGUAGE_RUNTIME_INFOS = Object.freeze(
       "versionLabel": "JavaScript (ECMAScript 2023)",
       "executionPlatform": {
         "name": "TraceKernel",
-        "version": "0.16.5"
+        "version": "0.16.7"
       },
       "runtime": {
         "name": "TraceKernel JavaScript runtime",
@@ -388,7 +388,7 @@ Binary Search Tree, Trie, and Graph are bundled too, but are not exposed globall
       "versionLabel": "TypeScript 5.9.3",
       "executionPlatform": {
         "name": "TraceKernel",
-        "version": "0.16.5"
+        "version": "0.16.7"
       },
       "description": `TypeScript 5.9.3 is compiled with the TypeScript compiler and executed by TraceKernel's JavaScript runtime.
 
@@ -488,7 +488,7 @@ The compiled output runs on the same TraceKernel execution lane as JavaScript su
       "versionLabel": "Java 23",
       "executionPlatform": {
         "name": "TraceKernel",
-        "version": "0.16.5"
+        "version": "0.16.7"
       },
       "description": "Java 23 is compiled with javac 23 and executed by the Java runtime on TraceKernel.\n\nCommon imports are added automatically: java.util.*, java.io.*, java.math.*, java.util.stream.*, javafx.util.Pair.",
       "runtime": {
@@ -525,7 +525,7 @@ The compiled output runs on the same TraceKernel execution lane as JavaScript su
       "versionLabel": "C# 14",
       "executionPlatform": {
         "name": "TraceKernel",
-        "version": "0.16.5"
+        "version": "0.16.7"
       },
       "description": "C# 14 source is compiled and executed by TraceKernel's isolated C# runtime.\n\nCommon namespaces are imported automatically: System, System.Collections, System.Collections.Generic, System.IO, System.Linq, System.Numerics, System.Text, System.Text.RegularExpressions.",
       "runtime": {
@@ -554,7 +554,7 @@ The compiled output runs on the same TraceKernel execution lane as JavaScript su
       "versionLabel": "C++23",
       "executionPlatform": {
         "name": "TraceKernel",
-        "version": "0.16.5"
+        "version": "0.16.7"
       },
       "description": "C++ source is compiled using the C++23 standard.\n\nSubmissions compile to WebAssembly and run in TraceKernel's WASI execution lane. The compiler currently uses -O0 and -fno-exceptions, with a fixed program stack size.\n\nCommon standard library headers are included automatically, including <algorithm>, <array>, <bitset>, <climits>, <cmath>, <cstdint>, <functional>, <limits>, <numeric>, <sstream>, <tuple>, <vector>, <unordered_map>, <unordered_set> and more.",
       "runtime": {
@@ -706,7 +706,7 @@ var LANGUAGE_RUNTIME_OPEN_SOURCE_INFOS = Object.freeze(
             {
               "kind": "modifications",
               "label": "Runtime modifications",
-              "url": "https://github.com/tracecodeapp/harness/tree/v0.16.5/workers/python/pyodide-0.29.3"
+              "url": "https://github.com/tracecodeapp/harness/tree/v0.16.7/workers/python/pyodide-0.29.3"
             }
           ]
         }
@@ -4433,4 +4433,4 @@ export {
   normalizeJavaSerializedResult,
   javaTraceHooksEventsToRuntimeTrace
 };
-//# sourceMappingURL=chunk-NHGF353L.js.map
+//# sourceMappingURL=chunk-GLWDM276.js.map

package/dist/{chunk-GX4SGR3L.js → chunk-KYRVBA6G.js}

@@ -1,7 +1,7 @@
 var define = undefined;
 import {
   CppWorkerClient
-} from "./chunk-I2JLGVMT.js";
+} from "./chunk-EL32HALA.js";
 import {
   createPromotableBrowserBackgroundTask,
   createWorkerProtocolToken
@@ -851,25 +851,26 @@ function createCppBrowserRuntimeProvider(options = {}) {
         tracingTimeoutMs: options.tracingTimeoutMs,
         workerIdleTimeoutMs: options.workerIdleTimeoutMs,
         programCacheLimit: options.programCacheLimit,
-        usePrecompiledHeader: options.usePrecompiledHeader
+        usePrecompiledHeader: options.usePrecompiledHeader,
+        externalCompilerUrl: options.externalCompilerUrl
       };
-      const compilerService = createTraceCCBrowserCompilerService(compiler, {
+      const compilerService = options.externalCompilerUrl ? void 0 : createTraceCCBrowserCompilerService(compiler, {
         assets: context.assets,
         ...workerFactory ? { workerFactory } : {}
       });
       const createWorkerClient = () => new CppWorkerClient({
         ...workerOptions,
-        trustedCompilerService: compilerService
+        ...compilerService ? { trustedCompilerService: compilerService } : {}
       });
       const preparedProvider = createCppPreparedExecutionProvider({
         createWorkerClient,
         warmCompilerOnInit: false,
-        prewarmCompiler: () => compilerService.prewarmAssets(),
+        prewarmCompiler: () => compilerService?.prewarmAssets() ?? Promise.resolve(),
         scheduleCompilerPrewarm: createPromotableBrowserBackgroundTask
       });
       const preparedProviders = /* @__PURE__ */ new Map([["cpp", preparedProvider]]);
       const terminateCompiler = () => {
-        compilerService.terminate();
+        compilerService?.terminate();
       };
       return {
         preparedProviders,
@@ -890,4 +891,4 @@ export {
   createTraceCCBrowserCompilerService,
   createCppBrowserRuntimeProvider
 };
-//# sourceMappingURL=chunk-GX4SGR3L.js.map
+//# sourceMappingURL=chunk-KYRVBA6G.js.map

package/dist/{chunk-P5FQOYM4.js → chunk-ZX2AEA6Q.js}

@@ -4,7 +4,7 @@ import {
   liftCodeBatchOutcome,
   liftTraceOutcome,
   withRuntimeTraceOptions
-} from "./chunk-NHGF353L.js";
+} from "./chunk-GLWDM276.js";
 import {
   HostArtifactCache,
   WorkerCrashedError,
@@ -1124,4 +1124,4 @@ var CSharpWorkerClient = class {
 export {
   CSharpWorkerClient
 };
-//# sourceMappingURL=chunk-P5FQOYM4.js.map
+//# sourceMappingURL=chunk-ZX2AEA6Q.js.map

package/dist/core.cjs

@@ -189,7 +189,7 @@ module.exports = __toCommonJS(src_exports);
 // package.json
 var package_default = {
   name: "@tracecode/harness",
-  version: "0.16.5",
+  version: "0.16.7",
   license: "AGPL-3.0-only",
   homepage: "https://tracecode.app",
   repository: {
@@ -455,7 +455,7 @@ var LANGUAGE_RUNTIME_INFOS = Object.freeze(
       "versionLabel": "Python 3.13.2",
       "executionPlatform": {
         "name": "TraceKernel",
-        "version": "0.16.5"
+        "version": "0.16.7"
       },
       "description": "Python 3.13.2 runs in TraceKernel's isolated Python runtime.\n\nCommon algorithm helpers are imported automatically, including array, bisect, collections, functools, heapq, itertools. Other standard-library modules can be imported normally.\n\nOptional third-party packages are consumer-owned runtime assets and are available only when declared by the TraceKernel runtime manifest.",
       "runtime": {
@@ -482,7 +482,7 @@ var LANGUAGE_RUNTIME_INFOS = Object.freeze(
       "versionLabel": "JavaScript (ECMAScript 2023)",
       "executionPlatform": {
         "name": "TraceKernel",
-        "version": "0.16.5"
+        "version": "0.16.7"
       },
       "runtime": {
         "name": "TraceKernel JavaScript runtime",
@@ -574,7 +574,7 @@ Binary Search Tree, Trie, and Graph are bundled too, but are not exposed globall
       "versionLabel": "TypeScript 5.9.3",
       "executionPlatform": {
         "name": "TraceKernel",
-        "version": "0.16.5"
+        "version": "0.16.7"
       },
       "description": `TypeScript 5.9.3 is compiled with the TypeScript compiler and executed by TraceKernel's JavaScript runtime.
 
@@ -674,7 +674,7 @@ The compiled output runs on the same TraceKernel execution lane as JavaScript su
       "versionLabel": "Java 23",
       "executionPlatform": {
         "name": "TraceKernel",
-        "version": "0.16.5"
+        "version": "0.16.7"
       },
       "description": "Java 23 is compiled with javac 23 and executed by the Java runtime on TraceKernel.\n\nCommon imports are added automatically: java.util.*, java.io.*, java.math.*, java.util.stream.*, javafx.util.Pair.",
       "runtime": {
@@ -711,7 +711,7 @@ The compiled output runs on the same TraceKernel execution lane as JavaScript su
       "versionLabel": "C# 14",
       "executionPlatform": {
         "name": "TraceKernel",
-        "version": "0.16.5"
+        "version": "0.16.7"
       },
       "description": "C# 14 source is compiled and executed by TraceKernel's isolated C# runtime.\n\nCommon namespaces are imported automatically: System, System.Collections, System.Collections.Generic, System.IO, System.Linq, System.Numerics, System.Text, System.Text.RegularExpressions.",
       "runtime": {
@@ -740,7 +740,7 @@ The compiled output runs on the same TraceKernel execution lane as JavaScript su
       "versionLabel": "C++23",
       "executionPlatform": {
         "name": "TraceKernel",
-        "version": "0.16.5"
+        "version": "0.16.7"
       },
       "description": "C++ source is compiled using the C++23 standard.\n\nSubmissions compile to WebAssembly and run in TraceKernel's WASI execution lane. The compiler currently uses -O0 and -fno-exceptions, with a fixed program stack size.\n\nCommon standard library headers are included automatically, including <algorithm>, <array>, <bitset>, <climits>, <cmath>, <cstdint>, <functional>, <limits>, <numeric>, <sstream>, <tuple>, <vector>, <unordered_map>, <unordered_set> and more.",
       "runtime": {
@@ -892,7 +892,7 @@ var LANGUAGE_RUNTIME_OPEN_SOURCE_INFOS = Object.freeze(
             {
               "kind": "modifications",
               "label": "Runtime modifications",
-              "url": "https://github.com/tracecodeapp/harness/tree/v0.16.5/workers/python/pyodide-0.29.3"
+              "url": "https://github.com/tracecodeapp/harness/tree/v0.16.7/workers/python/pyodide-0.29.3"
             }
           ]
         }

package/dist/core.js

@@ -162,7 +162,7 @@ import {
   withRuntimeProjectCommandRunnerCapabilities,
   withRuntimeTraceOptions,
   writeRuntimeCommandStdinPipeBytes
-} from "./chunk-NHGF353L.js";
+} from "./chunk-GLWDM276.js";
 import "./chunk-756Z7C6D.js";
 export {
   LANGUAGE_RUNTIME_INFOS,

package/dist/{cpp-worker-client-SKBOLX5Q.js → cpp-worker-client-GUABNYCC.js}

@@ -1,12 +1,12 @@
 var define = undefined;
 import {
   CppWorkerClient
-} from "./chunk-I2JLGVMT.js";
-import "./chunk-NHGF353L.js";
+} from "./chunk-EL32HALA.js";
+import "./chunk-GLWDM276.js";
 import "./chunk-5KH5ABPQ.js";
 import "./chunk-C2RUZCIL.js";
 import "./chunk-756Z7C6D.js";
 export {
   CppWorkerClient
 };
-//# sourceMappingURL=cpp-worker-client-SKBOLX5Q.js.map
+//# sourceMappingURL=cpp-worker-client-GUABNYCC.js.map

package/dist/{csharp-worker-client-GAUCDYVS.js → csharp-worker-client-3X7TM35A.js}

@@ -1,12 +1,12 @@
 var define = undefined;
 import {
   CSharpWorkerClient
-} from "./chunk-P5FQOYM4.js";
-import "./chunk-NHGF353L.js";
+} from "./chunk-ZX2AEA6Q.js";
+import "./chunk-GLWDM276.js";
 import "./chunk-5KH5ABPQ.js";
 import "./chunk-C2RUZCIL.js";
 import "./chunk-756Z7C6D.js";
 export {
   CSharpWorkerClient
 };
-//# sourceMappingURL=csharp-worker-client-GAUCDYVS.js.map
+//# sourceMappingURL=csharp-worker-client-3X7TM35A.js.map

package/dist/internal/tracekernel-workspace.cjs

@@ -17081,7 +17081,7 @@ module.exports = __toCommonJS(workspace_exports);
 // package.json
 var package_default = {
   name: "@tracecode/harness",
-  version: "0.16.5",
+  version: "0.16.7",
   license: "AGPL-3.0-only",
   homepage: "https://tracecode.app",
   repository: {
@@ -17347,7 +17347,7 @@ var LANGUAGE_RUNTIME_INFOS = Object.freeze(
       "versionLabel": "Python 3.13.2",
       "executionPlatform": {
         "name": "TraceKernel",
-        "version": "0.16.5"
+        "version": "0.16.7"
       },
       "description": "Python 3.13.2 runs in TraceKernel's isolated Python runtime.\n\nCommon algorithm helpers are imported automatically, including array, bisect, collections, functools, heapq, itertools. Other standard-library modules can be imported normally.\n\nOptional third-party packages are consumer-owned runtime assets and are available only when declared by the TraceKernel runtime manifest.",
       "runtime": {
@@ -17374,7 +17374,7 @@ var LANGUAGE_RUNTIME_INFOS = Object.freeze(
       "versionLabel": "JavaScript (ECMAScript 2023)",
       "executionPlatform": {
         "name": "TraceKernel",
-        "version": "0.16.5"
+        "version": "0.16.7"
       },
       "runtime": {
         "name": "TraceKernel JavaScript runtime",
@@ -17466,7 +17466,7 @@ Binary Search Tree, Trie, and Graph are bundled too, but are not exposed globall
       "versionLabel": "TypeScript 5.9.3",
       "executionPlatform": {
         "name": "TraceKernel",
-        "version": "0.16.5"
+        "version": "0.16.7"
       },
       "description": `TypeScript 5.9.3 is compiled with the TypeScript compiler and executed by TraceKernel's JavaScript runtime.
 
@@ -17566,7 +17566,7 @@ The compiled output runs on the same TraceKernel execution lane as JavaScript su
       "versionLabel": "Java 23",
       "executionPlatform": {
         "name": "TraceKernel",
-        "version": "0.16.5"
+        "version": "0.16.7"
       },
       "description": "Java 23 is compiled with javac 23 and executed by the Java runtime on TraceKernel.\n\nCommon imports are added automatically: java.util.*, java.io.*, java.math.*, java.util.stream.*, javafx.util.Pair.",
       "runtime": {
@@ -17603,7 +17603,7 @@ The compiled output runs on the same TraceKernel execution lane as JavaScript su
       "versionLabel": "C# 14",
       "executionPlatform": {
         "name": "TraceKernel",
-        "version": "0.16.5"
+        "version": "0.16.7"
       },
       "description": "C# 14 source is compiled and executed by TraceKernel's isolated C# runtime.\n\nCommon namespaces are imported automatically: System, System.Collections, System.Collections.Generic, System.IO, System.Linq, System.Numerics, System.Text, System.Text.RegularExpressions.",
       "runtime": {
@@ -17632,7 +17632,7 @@ The compiled output runs on the same TraceKernel execution lane as JavaScript su
       "versionLabel": "C++23",
       "executionPlatform": {
         "name": "TraceKernel",
-        "version": "0.16.5"
+        "version": "0.16.7"
       },
       "description": "C++ source is compiled using the C++23 standard.\n\nSubmissions compile to WebAssembly and run in TraceKernel's WASI execution lane. The compiler currently uses -O0 and -fno-exceptions, with a fixed program stack size.\n\nCommon standard library headers are included automatically, including <algorithm>, <array>, <bitset>, <climits>, <cmath>, <cstdint>, <functional>, <limits>, <numeric>, <sstream>, <tuple>, <vector>, <unordered_map>, <unordered_set> and more.",
       "runtime": {
@@ -17784,7 +17784,7 @@ var LANGUAGE_RUNTIME_OPEN_SOURCE_INFOS = Object.freeze(
             {
               "kind": "modifications",
               "label": "Runtime modifications",
-              "url": "https://github.com/tracecodeapp/harness/tree/v0.16.5/workers/python/pyodide-0.29.3"
+              "url": "https://github.com/tracecodeapp/harness/tree/v0.16.7/workers/python/pyodide-0.29.3"
             }
           ]
         }

package/dist/internal/tracekernel-workspace.js

@@ -162,7 +162,7 @@ import {
   withRuntimeProjectCommandRunnerCapabilities,
   withRuntimeTraceOptions,
   writeRuntimeCommandStdinPipeBytes
-} from "../chunk-NHGF353L.js";
+} from "../chunk-GLWDM276.js";
 import {
   TraceKernelChildProcessError,
   TraceKernelControlledRuntime,

package/dist/{java-project-ASCLR77F.js → java-project-HKJVRSGW.js}

@@ -4,7 +4,7 @@ import {
   runtimeAbortSignalName,
   runtimeSignalExitCode,
   withRuntimeProjectCommandRunnerCapabilities
-} from "./chunk-NHGF353L.js";
+} from "./chunk-GLWDM276.js";
 import "./chunk-756Z7C6D.js";
 
 // packages/runtime-java/src/java-project.ts
@@ -484,4 +484,4 @@ export {
   JAVA_PROJECT_CAPABILITIES,
   createJavaProjectRunner
 };
-//# sourceMappingURL=java-project-ASCLR77F.js.map
+//# sourceMappingURL=java-project-HKJVRSGW.js.map

package/dist/judge.cjs

@@ -13074,7 +13074,7 @@ var init_runtime_language_info_data = __esm({
           "versionLabel": "Python 3.13.2",
           "executionPlatform": {
             "name": "TraceKernel",
-            "version": "0.16.5"
+            "version": "0.16.7"
           },
           "description": "Python 3.13.2 runs in TraceKernel's isolated Python runtime.\n\nCommon algorithm helpers are imported automatically, including array, bisect, collections, functools, heapq, itertools. Other standard-library modules can be imported normally.\n\nOptional third-party packages are consumer-owned runtime assets and are available only when declared by the TraceKernel runtime manifest.",
           "runtime": {
@@ -13101,7 +13101,7 @@ var init_runtime_language_info_data = __esm({
           "versionLabel": "JavaScript (ECMAScript 2023)",
           "executionPlatform": {
             "name": "TraceKernel",
-            "version": "0.16.5"
+            "version": "0.16.7"
           },
           "runtime": {
             "name": "TraceKernel JavaScript runtime",
@@ -13193,7 +13193,7 @@ Binary Search Tree, Trie, and Graph are bundled too, but are not exposed globall
           "versionLabel": "TypeScript 5.9.3",
           "executionPlatform": {
             "name": "TraceKernel",
-            "version": "0.16.5"
+            "version": "0.16.7"
           },
           "description": `TypeScript 5.9.3 is compiled with the TypeScript compiler and executed by TraceKernel's JavaScript runtime.
 
@@ -13293,7 +13293,7 @@ The compiled output runs on the same TraceKernel execution lane as JavaScript su
           "versionLabel": "Java 23",
           "executionPlatform": {
             "name": "TraceKernel",
-            "version": "0.16.5"
+            "version": "0.16.7"
           },
           "description": "Java 23 is compiled with javac 23 and executed by the Java runtime on TraceKernel.\n\nCommon imports are added automatically: java.util.*, java.io.*, java.math.*, java.util.stream.*, javafx.util.Pair.",
           "runtime": {
@@ -13330,7 +13330,7 @@ The compiled output runs on the same TraceKernel execution lane as JavaScript su
           "versionLabel": "C# 14",
           "executionPlatform": {
             "name": "TraceKernel",
-            "version": "0.16.5"
+            "version": "0.16.7"
           },
           "description": "C# 14 source is compiled and executed by TraceKernel's isolated C# runtime.\n\nCommon namespaces are imported automatically: System, System.Collections, System.Collections.Generic, System.IO, System.Linq, System.Numerics, System.Text, System.Text.RegularExpressions.",
           "runtime": {
@@ -13359,7 +13359,7 @@ The compiled output runs on the same TraceKernel execution lane as JavaScript su
           "versionLabel": "C++23",
           "executionPlatform": {
             "name": "TraceKernel",
-            "version": "0.16.5"
+            "version": "0.16.7"
           },
           "description": "C++ source is compiled using the C++23 standard.\n\nSubmissions compile to WebAssembly and run in TraceKernel's WASI execution lane. The compiler currently uses -O0 and -fno-exceptions, with a fixed program stack size.\n\nCommon standard library headers are included automatically, including <algorithm>, <array>, <bitset>, <climits>, <cmath>, <cstdint>, <functional>, <limits>, <numeric>, <sstream>, <tuple>, <vector>, <unordered_map>, <unordered_set> and more.",
           "runtime": {
@@ -13524,7 +13524,7 @@ var init_runtime_open_source_info_data = __esm({
                 {
                   "kind": "modifications",
                   "label": "Runtime modifications",
-                  "url": "https://github.com/tracecodeapp/harness/tree/v0.16.5/workers/python/pyodide-0.29.3"
+                  "url": "https://github.com/tracecodeapp/harness/tree/v0.16.7/workers/python/pyodide-0.29.3"
                 }
               ]
             }
@@ -15213,7 +15213,7 @@ var init_package = __esm({
   "package.json"() {
     package_default = {
       name: "@tracecode/harness",
-      version: "0.16.5",
+      version: "0.16.7",
       license: "AGPL-3.0-only",
       homepage: "https://tracecode.app",
       repository: {
@@ -31172,7 +31172,9 @@ var init_cpp_worker_client = __esm({
                 lldWasmUrl: this.options.linkerWasmUrl,
                 sysrootUrl: this.options.sysrootUrl,
                 runtimeHeaderUrl: this.options.runtimeHeaderUrl,
-                traceccCompilerEnabled: Boolean(this.options.trustedCompilerService),
+                traceccCompilerEnabled: Boolean(
+                  this.options.trustedCompilerService || this.externalCompilerUrl
+                ),
                 compilerFrameUrl: this.compilerFrameUrl,
                 compilerWorkerUrl: this.options.compilerWorkerUrl,
                 toolchainIntegrity: this.options.compilerIntegrity
@@ -32682,25 +32684,26 @@ function createCppBrowserRuntimeProvider(options = {}) {
         tracingTimeoutMs: options.tracingTimeoutMs,
         workerIdleTimeoutMs: options.workerIdleTimeoutMs,
         programCacheLimit: options.programCacheLimit,
-        usePrecompiledHeader: options.usePrecompiledHeader
+        usePrecompiledHeader: options.usePrecompiledHeader,
+        externalCompilerUrl: options.externalCompilerUrl
       };
-      const compilerService = createTraceCCBrowserCompilerService(compiler, {
+      const compilerService = options.externalCompilerUrl ? void 0 : createTraceCCBrowserCompilerService(compiler, {
         assets: context2.assets,
         ...workerFactory ? { workerFactory } : {}
       });
       const createWorkerClient = () => new CppWorkerClient({
         ...workerOptions,
-        trustedCompilerService: compilerService
+        ...compilerService ? { trustedCompilerService: compilerService } : {}
       });
       const preparedProvider = createCppPreparedExecutionProvider({
         createWorkerClient,
         warmCompilerOnInit: false,
-        prewarmCompiler: () => compilerService.prewarmAssets(),
+        prewarmCompiler: () => compilerService?.prewarmAssets() ?? Promise.resolve(),
         scheduleCompilerPrewarm: createPromotableBrowserBackgroundTask
       });
       const preparedProviders = /* @__PURE__ */ new Map([["cpp", preparedProvider]]);
       const terminateCompiler = () => {
-        compilerService.terminate();
+        compilerService?.terminate();
       };
       return {
         preparedProviders,
@@ -130326,6 +130329,7 @@ function createJavaBrowserRuntimeProvider(options = {}) {
         debug: context2.debug,
         workerIdleTimeoutMs: options.workerIdleTimeoutMs,
         compileCacheLimit: options.compileCacheLimit,
+        externalCompilerUrl: options.externalCompilerUrl,
         assetPreflight: context2.preflight("java", ["worker"])
       };
       const preparedProvider = createJavaBrowserPreparedExecutionProvider(workerOptions);

package/dist/judge.d.cts

@@ -873,6 +873,8 @@ interface BrowserJudgePythonOptions {
 interface BrowserJudgeJavaOptions {
     readonly workerIdleTimeoutMs?: number;
     readonly compileCacheLimit?: number;
+    /** Same-origin trusted Java compiler endpoint. */
+    readonly externalCompilerUrl?: string;
     /** Immutable TraceJVM asset tree used by the Java worker. */
     readonly runtimeAssetBaseUrl?: string;
 }

package/dist/judge.d.ts

@@ -873,6 +873,8 @@ interface BrowserJudgePythonOptions {
 interface BrowserJudgeJavaOptions {
     readonly workerIdleTimeoutMs?: number;
     readonly compileCacheLimit?: number;
+    /** Same-origin trusted Java compiler endpoint. */
+    readonly externalCompilerUrl?: string;
     /** Immutable TraceJVM asset tree used by the Java worker. */
     readonly runtimeAssetBaseUrl?: string;
 }

package/dist/judge.js

@@ -1,8 +1,8 @@
 var define = undefined;
 import {
   createCppBrowserRuntimeProvider
-} from "./chunk-GX4SGR3L.js";
-import "./chunk-I2JLGVMT.js";
+} from "./chunk-KYRVBA6G.js";
+import "./chunk-EL32HALA.js";
 import {
   normalizeTraceJVMRuntimeAssetBaseUrl,
   preflightBuiltInTraceJVMRuntimeAssets,
@@ -10,20 +10,20 @@ import {
 } from "./chunk-FYDQ4ZKL.js";
 import {
   CSharpWorkerClient
-} from "./chunk-P5FQOYM4.js";
+} from "./chunk-ZX2AEA6Q.js";
 import {
   PYTHON_RUNTIME_IMAGE_PROTOCOL_VERSION,
   createBrowserProjectWorkspace,
   createBrowserRuntimeAssetPreflight,
   createBrowserRuntimeEnvironment,
   makeTraceKernelHost
-} from "./chunk-OXFBZTWZ.js";
+} from "./chunk-6FC562KX.js";
 import {
   resolveBuiltInTraceCCRuntimeManifest
 } from "./chunk-EJE2EJDI.js";
 import {
   PythonWorkerClient
-} from "./chunk-JPDVJCVS.js";
+} from "./chunk-ERYCOWPS.js";
 import {
   RUNTIME_TRACE_SCHEMA_VERSION,
   createEmptyRuntimeTrace,
@@ -32,7 +32,7 @@ import {
   liftCodeOutcome,
   liftTraceOutcome,
   runtimeWorkspaceActorPreset
-} from "./chunk-NHGF353L.js";
+} from "./chunk-GLWDM276.js";
 import {
   TraceKernelControlledRuntime,
   TraceKernelSharedSyscallServer,
@@ -4594,6 +4594,7 @@ function createJavaBrowserRuntimeProvider(options = {}) {
         debug: context.debug,
         workerIdleTimeoutMs: options.workerIdleTimeoutMs,
         compileCacheLimit: options.compileCacheLimit,
+        externalCompilerUrl: options.externalCompilerUrl,
         assetPreflight: context.preflight("java", ["worker"])
       };
       const preparedProvider = createJavaBrowserPreparedExecutionProvider(workerOptions);

package/dist/{project-browser-VSLHVOH4.js → project-browser-MVPRY3P4.js}

@@ -3,7 +3,7 @@ import {
   createRuntimeProjectIoBridge,
   runRuntimeProjectWorkerBridge,
   withRuntimeProjectCommandRunnerCapabilities
-} from "./chunk-NHGF353L.js";
+} from "./chunk-GLWDM276.js";
 import "./chunk-756Z7C6D.js";
 
 // packages/runtime-csharp/src/project-browser.ts
@@ -79,4 +79,4 @@ function createBrowserCSharpProjectRunner(workerClient, options = {}) {
 export {
   createBrowserCSharpProjectRunner
 };
-//# sourceMappingURL=project-browser-VSLHVOH4.js.map
+//# sourceMappingURL=project-browser-MVPRY3P4.js.map

package/dist/{project-browser-XKQ2MNK3.js → project-browser-OESLR46C.js}

@@ -3,7 +3,7 @@ import {
   createRuntimeProjectIoBridge,
   runRuntimeProjectWorkerBridge,
   withRuntimeProjectCommandRunnerCapabilities
-} from "./chunk-NHGF353L.js";
+} from "./chunk-GLWDM276.js";
 import "./chunk-756Z7C6D.js";
 
 // packages/runtime-java/src/project-browser.ts
@@ -77,4 +77,4 @@ function createBrowserJavaProjectRunner(workerClient, options = {}) {
 export {
   createBrowserJavaProjectRunner
 };
-//# sourceMappingURL=project-browser-XKQ2MNK3.js.map
+//# sourceMappingURL=project-browser-OESLR46C.js.map

package/dist/{project-browser-DKMZFGCJ.js → project-browser-UQPBIF52.js}

@@ -2,7 +2,7 @@ var define = undefined;
 import {
   runRuntimeProjectWorkerBridge,
   withRuntimeProjectCommandRunnerCapabilities
-} from "./chunk-NHGF353L.js";
+} from "./chunk-GLWDM276.js";
 import "./chunk-756Z7C6D.js";
 
 // packages/runtime-cpp/src/project-browser.ts
@@ -32,4 +32,4 @@ function createBrowserCppProjectRunner(workerClient, options = {}) {
 export {
   createBrowserCppProjectRunner
 };
-//# sourceMappingURL=project-browser-DKMZFGCJ.js.map
+//# sourceMappingURL=project-browser-UQPBIF52.js.map

package/dist/{project-browser-YUBOA2Q4.js → project-browser-VA4JO24R.js}

@@ -53,7 +53,7 @@ import {
   runtimeKernelWriteFsErrorMessage,
   runtimeKernelWriteTarget,
   runtimeProjectInfrastructureFailure
-} from "./chunk-NHGF353L.js";
+} from "./chunk-GLWDM276.js";
 import {
   decodeTraceKernelWatchEvent
 } from "./chunk-LTRAP6OY.js";
@@ -10865,4 +10865,4 @@ export {
   createBrowserTypeScriptProjectRunner,
   runBrowserJavaScriptProjectRequest
 };
-//# sourceMappingURL=project-browser-YUBOA2Q4.js.map
+//# sourceMappingURL=project-browser-VA4JO24R.js.map

package/dist/{project-browser-7MVLDAHN.js → project-browser-YM4F7OYW.js}

@@ -2,7 +2,7 @@ var define = undefined;
 import {
   runRuntimeProjectWorkerBridge,
   withRuntimeProjectCommandRunnerCapabilities
-} from "./chunk-NHGF353L.js";
+} from "./chunk-GLWDM276.js";
 import "./chunk-756Z7C6D.js";
 
 // packages/runtime-python/src/project-browser.ts
@@ -35,4 +35,4 @@ function createBrowserPythonProjectRunner(workerClient, options = {}) {
 export {
   createBrowserPythonProjectRunner
 };
-//# sourceMappingURL=project-browser-7MVLDAHN.js.map
+//# sourceMappingURL=project-browser-YM4F7OYW.js.map

package/dist/{python-worker-client-R7K7HDO7.js → python-worker-client-FD6RJKAT.js}

@@ -2,8 +2,8 @@ var define = undefined;
 import {
   PythonWorkerClient,
   isWorkerSupported
-} from "./chunk-JPDVJCVS.js";
-import "./chunk-NHGF353L.js";
+} from "./chunk-ERYCOWPS.js";
+import "./chunk-GLWDM276.js";
 import "./chunk-5KH5ABPQ.js";
 import "./chunk-C2RUZCIL.js";
 import "./chunk-756Z7C6D.js";
@@ -11,4 +11,4 @@ export {
   PythonWorkerClient,
   isWorkerSupported
 };
-//# sourceMappingURL=python-worker-client-R7K7HDO7.js.map
+//# sourceMappingURL=python-worker-client-FD6RJKAT.js.map

package/dist/tracekernel.cjs

@@ -13521,7 +13521,7 @@ var init_package = __esm({
   "package.json"() {
     package_default = {
       name: "@tracecode/harness",
-      version: "0.16.5",
+      version: "0.16.7",
       license: "AGPL-3.0-only",
       homepage: "https://tracecode.app",
       repository: {
@@ -13800,7 +13800,7 @@ var init_runtime_language_info_data = __esm({
           "versionLabel": "Python 3.13.2",
           "executionPlatform": {
             "name": "TraceKernel",
-            "version": "0.16.5"
+            "version": "0.16.7"
           },
           "description": "Python 3.13.2 runs in TraceKernel's isolated Python runtime.\n\nCommon algorithm helpers are imported automatically, including array, bisect, collections, functools, heapq, itertools. Other standard-library modules can be imported normally.\n\nOptional third-party packages are consumer-owned runtime assets and are available only when declared by the TraceKernel runtime manifest.",
           "runtime": {
@@ -13827,7 +13827,7 @@ var init_runtime_language_info_data = __esm({
           "versionLabel": "JavaScript (ECMAScript 2023)",
           "executionPlatform": {
             "name": "TraceKernel",
-            "version": "0.16.5"
+            "version": "0.16.7"
           },
           "runtime": {
             "name": "TraceKernel JavaScript runtime",
@@ -13919,7 +13919,7 @@ Binary Search Tree, Trie, and Graph are bundled too, but are not exposed globall
           "versionLabel": "TypeScript 5.9.3",
           "executionPlatform": {
             "name": "TraceKernel",
-            "version": "0.16.5"
+            "version": "0.16.7"
           },
           "description": `TypeScript 5.9.3 is compiled with the TypeScript compiler and executed by TraceKernel's JavaScript runtime.
 
@@ -14019,7 +14019,7 @@ The compiled output runs on the same TraceKernel execution lane as JavaScript su
           "versionLabel": "Java 23",
           "executionPlatform": {
             "name": "TraceKernel",
-            "version": "0.16.5"
+            "version": "0.16.7"
           },
           "description": "Java 23 is compiled with javac 23 and executed by the Java runtime on TraceKernel.\n\nCommon imports are added automatically: java.util.*, java.io.*, java.math.*, java.util.stream.*, javafx.util.Pair.",
           "runtime": {
@@ -14056,7 +14056,7 @@ The compiled output runs on the same TraceKernel execution lane as JavaScript su
           "versionLabel": "C# 14",
           "executionPlatform": {
             "name": "TraceKernel",
-            "version": "0.16.5"
+            "version": "0.16.7"
           },
           "description": "C# 14 source is compiled and executed by TraceKernel's isolated C# runtime.\n\nCommon namespaces are imported automatically: System, System.Collections, System.Collections.Generic, System.IO, System.Linq, System.Numerics, System.Text, System.Text.RegularExpressions.",
           "runtime": {
@@ -14085,7 +14085,7 @@ The compiled output runs on the same TraceKernel execution lane as JavaScript su
           "versionLabel": "C++23",
           "executionPlatform": {
             "name": "TraceKernel",
-            "version": "0.16.5"
+            "version": "0.16.7"
           },
           "description": "C++ source is compiled using the C++23 standard.\n\nSubmissions compile to WebAssembly and run in TraceKernel's WASI execution lane. The compiler currently uses -O0 and -fno-exceptions, with a fixed program stack size.\n\nCommon standard library headers are included automatically, including <algorithm>, <array>, <bitset>, <climits>, <cmath>, <cstdint>, <functional>, <limits>, <numeric>, <sstream>, <tuple>, <vector>, <unordered_map>, <unordered_set> and more.",
           "runtime": {
@@ -14250,7 +14250,7 @@ var init_runtime_open_source_info_data = __esm({
                 {
                   "kind": "modifications",
                   "label": "Runtime modifications",
-                  "url": "https://github.com/tracecodeapp/harness/tree/v0.16.5/workers/python/pyodide-0.29.3"
+                  "url": "https://github.com/tracecodeapp/harness/tree/v0.16.7/workers/python/pyodide-0.29.3"
                 }
               ]
             }
@@ -122582,7 +122582,9 @@ var init_cpp_worker_client = __esm({
                 lldWasmUrl: this.options.linkerWasmUrl,
                 sysrootUrl: this.options.sysrootUrl,
                 runtimeHeaderUrl: this.options.runtimeHeaderUrl,
-                traceccCompilerEnabled: Boolean(this.options.trustedCompilerService),
+                traceccCompilerEnabled: Boolean(
+                  this.options.trustedCompilerService || this.externalCompilerUrl
+                ),
                 compilerFrameUrl: this.compilerFrameUrl,
                 compilerWorkerUrl: this.options.compilerWorkerUrl,
                 toolchainIntegrity: this.options.compilerIntegrity
@@ -124331,25 +124333,26 @@ function createCppBrowserRuntimeProvider(options = {}) {
         tracingTimeoutMs: options.tracingTimeoutMs,
         workerIdleTimeoutMs: options.workerIdleTimeoutMs,
         programCacheLimit: options.programCacheLimit,
-        usePrecompiledHeader: options.usePrecompiledHeader
+        usePrecompiledHeader: options.usePrecompiledHeader,
+        externalCompilerUrl: options.externalCompilerUrl
       };
-      const compilerService = createTraceCCBrowserCompilerService(compiler, {
+      const compilerService = options.externalCompilerUrl ? void 0 : createTraceCCBrowserCompilerService(compiler, {
         assets: context2.assets,
         ...workerFactory ? { workerFactory } : {}
       });
       const createWorkerClient = () => new CppWorkerClient({
         ...workerOptions,
-        trustedCompilerService: compilerService
+        ...compilerService ? { trustedCompilerService: compilerService } : {}
       });
       const preparedProvider = createCppPreparedExecutionProvider({
         createWorkerClient,
         warmCompilerOnInit: false,
-        prewarmCompiler: () => compilerService.prewarmAssets(),
+        prewarmCompiler: () => compilerService?.prewarmAssets() ?? Promise.resolve(),
         scheduleCompilerPrewarm: createPromotableBrowserBackgroundTask
       });
       const preparedProviders = /* @__PURE__ */ new Map([["cpp", preparedProvider]]);
       const terminateCompiler = () => {
-        compilerService.terminate();
+        compilerService?.terminate();
       };
       return {
         preparedProviders,

package/dist/tracekernel.js

@@ -61,7 +61,7 @@ import {
   makeTraceKernelSharedSyscallChannel,
   resolveBrowserRuntimeAssetManifests,
   resolveBrowserRuntimeAssets
-} from "./chunk-OXFBZTWZ.js";
+} from "./chunk-6FC562KX.js";
 import {
   TRACECC_RUNTIME_ASSET_RELATIVE_PATH,
   TRACECC_RUNTIME_CONTENT_HASH,
@@ -72,7 +72,7 @@ import {
 } from "./chunk-EJE2EJDI.js";
 import {
   PythonWorkerClient
-} from "./chunk-JPDVJCVS.js";
+} from "./chunk-ERYCOWPS.js";
 import {
   LANGUAGE_RUNTIME_INFOS,
   LANGUAGE_RUNTIME_OPEN_SOURCE_INFOS,
@@ -236,7 +236,7 @@ import {
   withRuntimeProjectCommandRunnerCapabilities,
   withRuntimeTraceOptions,
   writeRuntimeCommandStdinPipeBytes
-} from "./chunk-NHGF353L.js";
+} from "./chunk-GLWDM276.js";
 import {
   _await,
   bounded,

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@tracecode/harness",
-  "version": "0.16.5",
+  "version": "0.16.7",
   "license": "AGPL-3.0-only",
   "homepage": "https://tracecode.app",
   "repository": {
@@ -65,8 +65,8 @@
     "tsup": "^8.5.0",
     "tsx": "^4.21.0",
     "typescript": "^5.0.0",
-    "@tracecode/runtime-contracts": "^0.16.5",
-    "@tracecode/tracekernel": "^0.16.5"
+    "@tracecode/runtime-contracts": "^0.16.7",
+    "@tracecode/tracekernel": "^0.16.7"
   },
   "dependencies": {
     "@datastructures-js/binary-search-tree": "5.4.0",

package/runtime-assets.lock.json

@@ -2,12 +2,12 @@
   "schema": "tracecode.runtime-assets-lock.v1",
   "harness": {
     "name": "@tracecode/harness",
-    "version": "0.16.5",
-    "releaseId": "@tracecode/harness@0.16.5+sha256.c6ee3755a6514784ec821e10964ab96aeee35c35139fe33fedd8eda248721524"
+    "version": "0.16.7",
+    "releaseId": "@tracecode/harness@0.16.7+sha256.cebbba0bbcd7b57102dcc49d825e507cd3153271308303a659551ad0b596ccc7"
   },
   "treeSha256Algorithm": "sha256-path-nul-bytes-nul-v1",
-  "packageTreeSha256": "c6ee3755a6514784ec821e10964ab96aeee35c35139fe33fedd8eda248721524",
-  "totalPackagedRuntimeBytes": 151720964,
+  "packageTreeSha256": "cebbba0bbcd7b57102dcc49d825e507cd3153271308303a659551ad0b596ccc7",
+  "totalPackagedRuntimeBytes": 151721849,
   "components": {
     "cpp": {
       "releaseId": "cpp+sha256.9340d58c47a65abceff7fa7a783b57d01550d697013c2b50782aec77e6b19816",
@@ -1809,9 +1809,9 @@
       ]
     },
     "java": {
-      "releaseId": "java+sha256.1e0f657b97aa9c772e22115fa78f3ef667dc17ff7c62dd9ffacabfdba8bf0d0c",
-      "treeSha256": "1e0f657b97aa9c772e22115fa78f3ef667dc17ff7c62dd9ffacabfdba8bf0d0c",
-      "totalBytes": 602441,
+      "releaseId": "java+sha256.edb99c14d07da3ac4fb41a52ea6ddc23c060c98311584eb1193e4cbde1d8afd9",
+      "treeSha256": "edb99c14d07da3ac4fb41a52ea6ddc23c060c98311584eb1193e4cbde1d8afd9",
+      "totalBytes": 603326,
       "files": [
         {
           "path": "workers/java/java-runtime-worker.js",
@@ -1829,9 +1829,9 @@
         },
         {
           "path": "workers/java/java-worker.js",
-          "size": 317127,
-          "sha256": "331c9e9e090def0d026e3efcfc48620d8a1347fa5e6c8956c49bd37947c20dbe",
-          "integrity": "sha256-MxyengkN7w0Cbj78/EhiDYoTR/pebIlWxJvTeUfCDb4=",
+          "size": 318012,
+          "sha256": "391f3b6a6aecee419892d05e2123683edb21b042e80f5111678e635a8eb30e0d",
+          "integrity": "sha256-OR87amrs7kGYktBeISNoPtshsELoD1ERZ45jWo6zDg0=",
           "mediaType": "text/javascript"
         },
         {
@@ -1844,15 +1844,15 @@
       ]
     },
     "javascript": {
-      "releaseId": "javascript+sha256.6fb50d48194799a2f66b59a9ec92ba64b210abaf3278765bde5bfd682cdfca0e",
-      "treeSha256": "6fb50d48194799a2f66b59a9ec92ba64b210abaf3278765bde5bfd682cdfca0e",
+      "releaseId": "javascript+sha256.fe615a05e50b54db86c546edefde77975ad4c52a5e17c91c31bc81cd2707e252",
+      "treeSha256": "fe615a05e50b54db86c546edefde77975ad4c52a5e17c91c31bc81cd2707e252",
       "totalBytes": 1204569,
       "files": [
         {
           "path": "workers/javascript/javascript-project-worker.js",
           "size": 562771,
-          "sha256": "e3e1635d322831f1e217b3f095ad437c16c8092c05bb600d4e5295c6da8119fe",
-          "integrity": "sha256-4+FjXTIoMfHiF7Pwla1DfBbICSwFu2ANTlKVxtqBGf4=",
+          "sha256": "e0fde62145bbd56ff925b53570222fe5799bf51e4d21631e2dfb881537d5250c",
+          "integrity": "sha256-4P3mIUW71W/5JbU1cCIv5Xmb9R5NIWMeLfuIFTfVJQw=",
           "mediaType": "text/javascript"
         },
         {

package/workers/java/java-worker.js

@@ -175,6 +175,7 @@ let activeJavaProjectIo = null;
 let javaCompileIsolationCounter = 0;
 let javaProjectBridgeRunCounter = 0;
 let javaCompileCacheLimit = DEFAULT_JAVA_COMPILE_CACHE_LIMIT;
+let externalJavaCompilerConfigured = false;
 const javaCompileCache = new Map();
 const preparedJavaRuntimePrograms = new Map();
 const activeProtocolTokens = new Map();
@@ -930,7 +931,10 @@ function resetIdleTimer() {
   }, idleTimeoutMs);
 }
 
-function applyWorkerOptions(payload) {
+function applyWorkerOptions(payload, allowCompilerAuthorityChange = false) {
+  if (allowCompilerAuthorityChange) {
+    externalJavaCompilerConfigured = payload?.externalCompilerEnabled === true;
+  }
   const nextIdleTimeoutMs = Number(payload?.idleTimeoutMs);
   if (Number.isFinite(nextIdleTimeoutMs) && nextIdleTimeoutMs > 0) {
     idleTimeoutMs = Math.max(1_000, Math.floor(nextIdleTimeoutMs));
@@ -4779,6 +4783,7 @@ function classicJavaCompileCacheKey(mode, stableCompileId) {
   return stableHash({
     version: JAVA_COMPILE_CACHE_VERSION,
     mode,
+    compilerAuthority: externalJavaCompilerEnabled() ? 'external' : 'browser',
     stableCompileId,
     helperJar: HELPER_JAR_PATH,
     compilerJar: JDK17_COMPILER_JAR_PATH,
@@ -5497,12 +5502,12 @@ function javaReportConsoleOutput(report, options = {}) {
   );
 }
 
-function externalJavaCompilerEnabled(payload) {
-  return payload?.externalCompilerEnabled === true;
+function externalJavaCompilerEnabled() {
+  return externalJavaCompilerConfigured;
 }
 
-function externalJavaCompilerAvailable(payload, compileLibraryClass, methodName) {
-  return externalJavaCompilerEnabled(payload) && typeof compileLibraryClass?.[methodName] === 'function';
+function externalJavaCompilerAvailable(compileLibraryClass, methodName) {
+  return externalJavaCompilerEnabled() && typeof compileLibraryClass?.[methodName] === 'function';
 }
 
 function normalizeExternalJavaCompileResult(value) {
@@ -7090,7 +7095,7 @@ async function runJavaTraceRequest(payload, requestId) {
         'true',
         String(resolveMaxStoredEvents(payload.options))
       );
-    } else if (externalJavaCompilerAvailable(payload, compileLibraryClass, 'traceCompiledClassManifest')) {
+    } else if (externalJavaCompilerAvailable(compileLibraryClass, 'traceCompiledClassManifest')) {
       const externalCompile = await compileJavaOutsideBrowser({
         schema: 'tracecode.java.external-compile.v1',
         mode: 'trace',
@@ -7277,7 +7282,7 @@ async function runJavaCodeRequest(payload, requestId) {
         '',
         'true'
       );
-    } else if (externalJavaCompilerAvailable(payload, compileLibraryClass, 'runCompiledClassManifest')) {
+    } else if (externalJavaCompilerAvailable(compileLibraryClass, 'runCompiledClassManifest')) {
       const externalCompile = await compileJavaOutsideBrowser({
         schema: 'tracecode.java.external-compile.v1',
         mode: 'execute',
@@ -7650,7 +7655,7 @@ async function runJavaCodeBatchRequest(payload, requestId) {
         '',
         'true'
       );
-    } else if (externalJavaCompilerAvailable(payload, compileLibraryClass, 'runCompiledClassManifestBatch')) {
+    } else if (externalJavaCompilerAvailable(compileLibraryClass, 'runCompiledClassManifestBatch')) {
       const externalCompile = await compileJavaOutsideBrowser({
         schema: 'tracecode.java.external-compile.v1',
         mode: 'execute-batch',
@@ -8475,9 +8480,24 @@ self.onmessage = (event) => {
   if (message.type === 'init') {
     queue = queue.then(async () => {
       try {
-        applyWorkerOptions(message.payload);
+        applyWorkerOptions(message.payload, true);
         const startedAt = performance.now();
         await ensureReady();
+        if (externalJavaCompilerEnabled()) {
+          const compileLibraryClass = await getCompileLibraryClass();
+          const missingMethods = [
+            'runCompiledClassManifest',
+            'traceCompiledClassManifest',
+            'runCompiledClassManifestBatch',
+          ].filter((methodName) =>
+            typeof compileLibraryClass?.[methodName] !== 'function'
+          );
+          if (missingMethods.length > 0) {
+            throw new Error(
+              `Java external compiler bridge is missing: ${missingMethods.join(', ')}`
+            );
+          }
+        }
         const totalMs = performance.now() - startedAt;
         postMessageResponse({
           id: message.id,
@@ -8485,6 +8505,7 @@ self.onmessage = (event) => {
           payload: {
             success: true,
             loadTimeMs: Math.round(totalMs),
+            externalCompilerEnabled: externalJavaCompilerEnabled(),
             timings: {
               totalMs,
               initMs: initLoadTimeMs ?? 0,

package/workers/javascript/javascript-project-worker.js

@@ -1621,7 +1621,7 @@ var TraceKernelRuntimeFileClient = class {
 // package.json
 var package_default = {
   name: "@tracecode/harness",
-  version: "0.16.5",
+  version: "0.16.7",
   license: "AGPL-3.0-only",
   homepage: "https://tracecode.app",
   repository: {
@@ -1887,7 +1887,7 @@ var LANGUAGE_RUNTIME_INFOS = Object.freeze(
       "versionLabel": "Python 3.13.2",
       "executionPlatform": {
         "name": "TraceKernel",
-        "version": "0.16.5"
+        "version": "0.16.7"
       },
       "description": "Python 3.13.2 runs in TraceKernel's isolated Python runtime.\n\nCommon algorithm helpers are imported automatically, including array, bisect, collections, functools, heapq, itertools. Other standard-library modules can be imported normally.\n\nOptional third-party packages are consumer-owned runtime assets and are available only when declared by the TraceKernel runtime manifest.",
       "runtime": {
@@ -1914,7 +1914,7 @@ var LANGUAGE_RUNTIME_INFOS = Object.freeze(
       "versionLabel": "JavaScript (ECMAScript 2023)",
       "executionPlatform": {
         "name": "TraceKernel",
-        "version": "0.16.5"
+        "version": "0.16.7"
       },
       "runtime": {
         "name": "TraceKernel JavaScript runtime",
@@ -2006,7 +2006,7 @@ Binary Search Tree, Trie, and Graph are bundled too, but are not exposed globall
       "versionLabel": "TypeScript 5.9.3",
       "executionPlatform": {
         "name": "TraceKernel",
-        "version": "0.16.5"
+        "version": "0.16.7"
       },
       "description": `TypeScript 5.9.3 is compiled with the TypeScript compiler and executed by TraceKernel's JavaScript runtime.
 
@@ -2106,7 +2106,7 @@ The compiled output runs on the same TraceKernel execution lane as JavaScript su
       "versionLabel": "Java 23",
       "executionPlatform": {
         "name": "TraceKernel",
-        "version": "0.16.5"
+        "version": "0.16.7"
       },
       "description": "Java 23 is compiled with javac 23 and executed by the Java runtime on TraceKernel.\n\nCommon imports are added automatically: java.util.*, java.io.*, java.math.*, java.util.stream.*, javafx.util.Pair.",
       "runtime": {
@@ -2143,7 +2143,7 @@ The compiled output runs on the same TraceKernel execution lane as JavaScript su
       "versionLabel": "C# 14",
       "executionPlatform": {
         "name": "TraceKernel",
-        "version": "0.16.5"
+        "version": "0.16.7"
       },
       "description": "C# 14 source is compiled and executed by TraceKernel's isolated C# runtime.\n\nCommon namespaces are imported automatically: System, System.Collections, System.Collections.Generic, System.IO, System.Linq, System.Numerics, System.Text, System.Text.RegularExpressions.",
       "runtime": {
@@ -2172,7 +2172,7 @@ The compiled output runs on the same TraceKernel execution lane as JavaScript su
       "versionLabel": "C++23",
       "executionPlatform": {
         "name": "TraceKernel",
-        "version": "0.16.5"
+        "version": "0.16.7"
       },
       "description": "C++ source is compiled using the C++23 standard.\n\nSubmissions compile to WebAssembly and run in TraceKernel's WASI execution lane. The compiler currently uses -O0 and -fno-exceptions, with a fixed program stack size.\n\nCommon standard library headers are included automatically, including <algorithm>, <array>, <bitset>, <climits>, <cmath>, <cstdint>, <functional>, <limits>, <numeric>, <sstream>, <tuple>, <vector>, <unordered_map>, <unordered_set> and more.",
       "runtime": {