@wasm-oj/server 0.2.2 → 0.2.4

package/dist/chunks/process-keepalive-BaXpMTap.js

@@ -0,0 +1,191 @@
+import "./toolchains-uz3XbZGI.js";
+import { assertLanguageIdentifier } from "@wasm-oj/contracts";
+//#region src/core/project-files.ts
+var PROJECT_SOURCE_LIMITS = Object.freeze({
+	files: 256,
+	bytesPerFile: 4194304,
+	totalBytes: 16777216
+});
+var UTF8_ENCODER = new TextEncoder();
+/** Locale-independent ordering used anywhere file order can affect build output. */
+function compareCanonicalPaths(left, right) {
+	return left < right ? -1 : left > right ? 1 : 0;
+}
+function assertSafeRelativePath(path, label = "Project path") {
+	if (typeof path !== "string" || !path || path !== path.trim() || path.length > 4096) throw new Error(`${label} must be a non-empty, trimmed string of at most 4096 characters.`);
+	if (path.startsWith("/") || path.includes("\\") || path.includes("\0") || path.split("/").some((segment) => !segment || segment === "." || segment === "..")) throw new Error(`${label} '${path}' must be a normalized relative path that cannot escape the project.`);
+}
+/**
+* Validates a project file set and returns a fresh, locale-independently sorted
+* array. Build hosts must use this order for filesystem creation and argv.
+*/
+function canonicalProjectFiles(files) {
+	if (!Array.isArray(files) || files.length === 0) throw new Error("A project must contain at least one source file.");
+	if (files.length > PROJECT_SOURCE_LIMITS.files) throw new Error(`A project cannot contain more than ${PROJECT_SOURCE_LIMITS.files} source files.`);
+	const seen = /* @__PURE__ */ new Set();
+	let totalBytes = 0;
+	return files.map((file, index) => {
+		if (!file || typeof file !== "object") throw new Error(`Project file ${index} is invalid.`);
+		assertSafeRelativePath(file.path, `Project file ${index} path`);
+		assertLanguageIdentifier(file.language);
+		if (typeof file.content !== "string") throw new Error(`Project file '${file.path}' content must be a string.`);
+		if (file.content.length > PROJECT_SOURCE_LIMITS.bytesPerFile) throw new Error(`Project file '${file.path}' exceeds the ${PROJECT_SOURCE_LIMITS.bytesPerFile} byte source limit.`);
+		const contentBytes = UTF8_ENCODER.encode(file.content).byteLength;
+		if (contentBytes > PROJECT_SOURCE_LIMITS.bytesPerFile) throw new Error(`Project file '${file.path}' exceeds the ${PROJECT_SOURCE_LIMITS.bytesPerFile} byte source limit.`);
+		totalBytes += contentBytes;
+		if (totalBytes > PROJECT_SOURCE_LIMITS.totalBytes) throw new Error(`Project sources exceed the ${PROJECT_SOURCE_LIMITS.totalBytes} byte total limit.`);
+		if (seen.has(file.path)) throw new Error(`Duplicate project path '${file.path}'.`);
+		seen.add(file.path);
+		return {
+			path: file.path,
+			language: file.language,
+			content: file.content
+		};
+	}).sort((left, right) => compareCanonicalPaths(left.path, right.path));
+}
+function canonicalFileEntries(files) {
+	if (!files || typeof files !== "object" || Array.isArray(files)) throw new Error("Runtime bundle files must be a record.");
+	return Object.entries(files).map(([path, contents]) => {
+		assertSafeRelativePath(path, "Runtime bundle path");
+		return [path, contents];
+	}).sort(([left], [right]) => compareCanonicalPaths(left, right));
+}
+function canonicalFileRecord(files) {
+	return Object.fromEntries(canonicalFileEntries(files));
+}
+//#endregion
+//#region src/core/dependencies.ts
+var MIB = 1048576;
+/** Contract-level admission limits shared by dependency hosts and compilers. */
+var DEPENDENCY_RESOLUTION_LIMITS = Object.freeze({
+	requirements: 128,
+	sourceFiles: 128,
+	sourceTextBytes: 8 * MIB,
+	hosts: 32,
+	roots: 512,
+	packages: 512,
+	referencesPerPackage: 512,
+	concurrency: 16,
+	metadataBytes: 8 * MIB,
+	packageBytes: 256 * MIB,
+	totalDownloadBytes: 512 * MIB,
+	archiveFiles: 16384,
+	unpackedBytes: 512 * MIB
+});
+Object.freeze({
+	packages: DEPENDENCY_RESOLUTION_LIMITS.packages,
+	filesPerPackage: DEPENDENCY_RESOLUTION_LIMITS.archiveFiles,
+	bytesPerFile: 64 * MIB,
+	totalBytes: DEPENDENCY_RESOLUTION_LIMITS.unpackedBytes
+});
+/**
+* Read stdout until `parse` recognizes one complete self-delimiting message.
+*
+* `@wasmer/sdk` 0.10 `Instance.wait()` joins stdout EOF, stderr EOF and the exit code, and its
+* thread-pool teardown can drop either EOF after all output arrived, so `wait()` never settles.
+* Completion therefore comes from the message itself. Either EOF means the guest exited, so the
+* other stream then gets `idleGraceMs` without new bytes before the read stops. If both EOFs are
+* lost before the message completes, the caller's own deadline still bounds the read.
+*/
+async function readProcessMessage(child, parse, options = {}) {
+	const idleGraceMs = options.idleGraceMs ?? 2e3;
+	await child.stdin?.close().catch(() => void 0);
+	const stdoutReader = child.stdout.getReader();
+	const stderrReader = child.stderr.getReader();
+	const nextStdout = () => stdoutReader.read().then(({ done, value }) => ({
+		source: "stdout",
+		chunk: done ? void 0 : value
+	}));
+	const nextStderr = () => stderrReader.read().then(({ done, value }) => ({
+		source: "stderr",
+		chunk: done ? void 0 : value
+	})).catch(() => ({ source: "stderr" }));
+	const stdout = byteBuffer();
+	const stderr = byteBuffer();
+	let stdoutRead = nextStdout();
+	let stderrRead = nextStderr();
+	let message;
+	try {
+		while (true) {
+			const complete = message !== void 0;
+			const pending = (complete ? [options.collectStderr ? stderrRead : void 0] : [stdoutRead, stderrRead]).filter((read) => read !== void 0);
+			if (pending.length === 0) break;
+			let timer;
+			if (complete || pending.length === 1) pending.push(new Promise((resolve) => {
+				timer = setTimeout(() => resolve({ source: "idle" }), idleGraceMs);
+			}));
+			const event = await Promise.race(pending).finally(() => clearTimeout(timer));
+			if (event.source === "idle") break;
+			if (event.source === "stdout") {
+				if (!event.chunk) {
+					stdoutRead = void 0;
+					continue;
+				}
+				stdout.append(event.chunk);
+				message = parse(stdout.bytes());
+				stdoutRead = message === void 0 ? nextStdout() : void 0;
+			} else if (!event.chunk) stderrRead = void 0;
+			else {
+				stderr.append(event.chunk);
+				stderrRead = nextStderr();
+			}
+		}
+	} finally {
+		await Promise.allSettled([stdoutReader.cancel(), stderrReader.cancel()]);
+	}
+	return {
+		message,
+		stderr: new TextDecoder().decode(stderr.bytes())
+	};
+}
+var JSON_WHITESPACE = /* @__PURE__ */ new Set([
+	9,
+	10,
+	13,
+	32
+]);
+/** Parse stdout once it holds one complete JSON object, optionally followed by whitespace. */
+function completeJsonObject(stdout) {
+	let end = stdout.byteLength;
+	while (end > 0 && JSON_WHITESPACE.has(stdout[end - 1])) end -= 1;
+	if (end === 0 || stdout[end - 1] !== 125) return void 0;
+	try {
+		return JSON.parse(new TextDecoder().decode(stdout.subarray(0, end)));
+	} catch {
+		return;
+	}
+}
+/** An append-only byte buffer that grows geometrically, so appending chunks stays linear. */
+function byteBuffer() {
+	let buffer = /* @__PURE__ */ new Uint8Array(0);
+	let length = 0;
+	return {
+		append(chunk) {
+			if (length + chunk.byteLength > buffer.byteLength) {
+				const grown = new Uint8Array(Math.max(length + chunk.byteLength, buffer.byteLength * 2));
+				grown.set(buffer.subarray(0, length));
+				buffer = grown;
+			}
+			buffer.set(chunk, length);
+			length += chunk.byteLength;
+		},
+		bytes: () => buffer.subarray(0, length)
+	};
+}
+//#endregion
+//#region src/server/process-keepalive.mjs
+/**
+* Keep Node alive while a promise is backed only by a foreign async runtime.
+* Top-level await does not itself create a referenced libuv handle, so Node can
+* otherwise exit with code 13 while a Wasmer SDK operation is still pending.
+*/
+async function withProcessKeepalive(promise) {
+	const keepalive = setInterval(() => void 0, 6e4);
+	try {
+		return await promise;
+	} finally {
+		clearInterval(keepalive);
+	}
+}
+//#endregion
+export { canonicalFileRecord as a, assertSafeRelativePath as i, completeJsonObject as n, canonicalProjectFiles as o, readProcessMessage as r, withProcessKeepalive as t };

package/dist/index.js

@@ -775,8 +775,8 @@ Object.freeze({
 });
 new TextEncoder();
 Object.freeze({
-	runtimeCoreWasmSha256: "1e297ad276694e9fb8a23afdc6ccc0b2ae56a223ced19d5cae26fe4661daa11e",
-	runtimeSourceRootSha256: "27c52cb1887aa8a7e0d8a238514fc8881cf86c68267e2a1691f110423692e2b6",
+	runtimeCoreWasmSha256: "0ae00fc646f529aafb5d1a68758220e6428f6c565e8e621eeb6c8f14ac5d4a10",
+	runtimeSourceRootSha256: "a7e9071511d127e3b14920558c7c38c27a1fa19d98906c8476c1df8041a9c3bb",
 	wasmerNativeVersion: "7.2.1",
 	wasmerSdkVersion: "0.10.0",
 	wasmerSdkWasmSha256: "49a6646209f5ab5e7c737eac33407d87d9a9959ac83e5ecaaab9261b2323589e",
@@ -787,7 +787,7 @@ Object.freeze({
 * Release verification independently checks the component bytes before this
 * identity is admitted into a calibrated release.
 */
-var WASM_OJ_RUNTIME_IDENTITY_SHA256 = "d3e44cafdc1c17a7e6bd4591ef04ec8161af805a519b5bbff437b15e5accd442";
+var WASM_OJ_RUNTIME_IDENTITY_SHA256 = "e5680beae9bd832ed2b679267250ce1efc7d104dd005bb155135664b40f961fb";
 //#endregion
 //#region src/core/cost-profile.ts
 function coordinates(language, target, optimization) {
@@ -1858,6 +1858,100 @@ function failedBuild(project, stdout, stderr, code, source, providedDiagnostics)
 		cacheHit: false
 	};
 }
+/**
+* Read stdout until `parse` recognizes one complete self-delimiting message.
+*
+* `@wasmer/sdk` 0.10 `Instance.wait()` joins stdout EOF, stderr EOF and the exit code, and its
+* thread-pool teardown can drop either EOF after all output arrived, so `wait()` never settles.
+* Completion therefore comes from the message itself. Either EOF means the guest exited, so the
+* other stream then gets `idleGraceMs` without new bytes before the read stops. If both EOFs are
+* lost before the message completes, the caller's own deadline still bounds the read.
+*/
+async function readProcessMessage(child, parse, options = {}) {
+	const idleGraceMs = options.idleGraceMs ?? 2e3;
+	await child.stdin?.close().catch(() => void 0);
+	const stdoutReader = child.stdout.getReader();
+	const stderrReader = child.stderr.getReader();
+	const nextStdout = () => stdoutReader.read().then(({ done, value }) => ({
+		source: "stdout",
+		chunk: done ? void 0 : value
+	}));
+	const nextStderr = () => stderrReader.read().then(({ done, value }) => ({
+		source: "stderr",
+		chunk: done ? void 0 : value
+	})).catch(() => ({ source: "stderr" }));
+	const stdout = byteBuffer();
+	const stderr = byteBuffer();
+	let stdoutRead = nextStdout();
+	let stderrRead = nextStderr();
+	let message;
+	try {
+		while (true) {
+			const complete = message !== void 0;
+			const pending = (complete ? [options.collectStderr ? stderrRead : void 0] : [stdoutRead, stderrRead]).filter((read) => read !== void 0);
+			if (pending.length === 0) break;
+			let timer;
+			if (complete || pending.length === 1) pending.push(new Promise((resolve) => {
+				timer = setTimeout(() => resolve({ source: "idle" }), idleGraceMs);
+			}));
+			const event = await Promise.race(pending).finally(() => clearTimeout(timer));
+			if (event.source === "idle") break;
+			if (event.source === "stdout") {
+				if (!event.chunk) {
+					stdoutRead = void 0;
+					continue;
+				}
+				stdout.append(event.chunk);
+				message = parse(stdout.bytes());
+				stdoutRead = message === void 0 ? nextStdout() : void 0;
+			} else if (!event.chunk) stderrRead = void 0;
+			else {
+				stderr.append(event.chunk);
+				stderrRead = nextStderr();
+			}
+		}
+	} finally {
+		await Promise.allSettled([stdoutReader.cancel(), stderrReader.cancel()]);
+	}
+	return {
+		message,
+		stderr: new TextDecoder().decode(stderr.bytes())
+	};
+}
+var JSON_WHITESPACE = /* @__PURE__ */ new Set([
+	9,
+	10,
+	13,
+	32
+]);
+/** Parse stdout once it holds one complete JSON object, optionally followed by whitespace. */
+function completeJsonObject(stdout) {
+	let end = stdout.byteLength;
+	while (end > 0 && JSON_WHITESPACE.has(stdout[end - 1])) end -= 1;
+	if (end === 0 || stdout[end - 1] !== 125) return void 0;
+	try {
+		return JSON.parse(new TextDecoder().decode(stdout.subarray(0, end)));
+	} catch {
+		return;
+	}
+}
+/** An append-only byte buffer that grows geometrically, so appending chunks stays linear. */
+function byteBuffer() {
+	let buffer = /* @__PURE__ */ new Uint8Array(0);
+	let length = 0;
+	return {
+		append(chunk) {
+			if (length + chunk.byteLength > buffer.byteLength) {
+				const grown = new Uint8Array(Math.max(length + chunk.byteLength, buffer.byteLength * 2));
+				grown.set(buffer.subarray(0, length));
+				buffer = grown;
+			}
+			buffer.set(chunk, length);
+			length += chunk.byteLength;
+		},
+		bytes: () => buffer.subarray(0, length)
+	};
+}
 new TextEncoder();
 Object.freeze({
 	python: "python",
@@ -2244,7 +2338,7 @@ async function transpileScriptProject(project, requestId) {
 	if (!entrypoint) throw new Error("The TypeScript/WASI compiler has no executable entrypoint.");
 	const outputPaths = emittedFiles.map((file) => emittedScriptPath(file.path));
 	const declarationPath = "/project/.wasm-oj/quickjs.d.ts";
-	const output = await (await entrypoint.run({ stdin: JSON.stringify({
+	const instance = await entrypoint.run({ stdin: JSON.stringify({
 		files: {
 			...Object.fromEntries(project.files.map((file) => [`/project/${file.path}`, file.content])),
 			...Object.fromEntries(Object.entries(dependencyFiles).filter(([, contents]) => typeof contents === "string").map(([path, contents]) => [`/project/${path}`, contents])),
@@ -2256,13 +2350,9 @@ async function transpileScriptProject(project, requestId) {
 			...Object.entries(dependencyFiles).filter(([path, contents]) => path.endsWith(".d.ts") && typeof contents === "string").map(([path]) => `/project/${path}`)
 		],
 		outputs: outputPaths.map((path) => `/project/build/${path}`)
-	}) })).wait();
-	let response;
-	if (output.ok) try {
-		response = JSON.parse(output.stdout);
-	} catch {
-		response = void 0;
-	}
+	}) });
+	const output = await readProcessMessage(instance, completeJsonObject, { collectStderr: true }).finally(() => instance.free());
+	const response = output.message;
 	const files = {};
 	if (response) for (const outputPath of outputPaths) {
 		const contents = response.files[`/project/build/${outputPath}`];
@@ -2271,7 +2361,7 @@ async function transpileScriptProject(project, requestId) {
 	Object.assign(files, dependencyFiles);
 	return {
 		files,
-		output,
+		stderr: output.stderr,
 		response
 	};
 }
@@ -2304,10 +2394,10 @@ async function buildScript(project, cacheKey, requestId) {
 		progress(requestId, "compiling", "Compiling TypeScript with TypeScript/WASI", .5);
 		const transpiled = await transpileScriptProject(project, requestId);
 		files = transpiled.files;
-		stderr = transpiled.output.stderr;
+		stderr = transpiled.stderr;
 		diagnostics = parseTypeScriptDiagnostics(transpiled.response?.diagnostics ?? "");
 		const emittedOutputsPresent = emittedSourceFiles(project).every((file) => Object.hasOwn(files, emittedScriptPath(file.path)));
-		if (!transpiled.output.ok || !transpiled.response || transpiled.response.status !== 0 || !emittedOutputsPresent || diagnostics.some((diagnostic) => diagnostic.severity === "error")) return {
+		if (!transpiled.response || transpiled.response.status !== 0 || !emittedOutputsPresent || diagnostics.some((diagnostic) => diagnostic.severity === "error")) return {
 			success: false,
 			diagnostics: ensureFailureDiagnostic(diagnostics, {
 				file: project.config.entry,
@@ -3287,7 +3377,6 @@ var ServerRunner = class {
 		this.assertArtifactToolchain(contestantArtifact);
 		this.assertArtifactToolchain(interactorArtifact);
 		if (this.activeOperation || this.cacheClearActive) throw new Error("ServerRunner accepts one active operation at a time.");
-		if (interactorArtifact.kind !== "wasm") throw new Error("Interactive judge artifacts must be standalone Wasm modules.");
 		const operation = createServerRunOperation(this.generation);
 		this.activeOperation = operation;
 		this.inFlightRuns.add(operation);
@@ -3610,7 +3699,7 @@ var ServerRunner = class {
 				const cleanup = (ignoreLateChildError) => {
 					child.off("close", onClose);
 					child.off("error", onChildError);
-					child.stdin.off("error", onStdinError);
+					child.stdin.off("error", onStdinError).on("error", () => void 0);
 					child.stdout.off("data", onStdout);
 					child.stderr.off("data", onStderr);
 					this.activePreparationStages.delete(active);
@@ -3749,7 +3838,7 @@ var ServerRunner = class {
 				clearTimeout(timer);
 				child.off("close", onClose);
 				child.off("error", onChildError);
-				child.stdin.off("error", onStdinError);
+				child.stdin.off("error", onStdinError).on("error", () => void 0);
 				child.stdout.off("data", onStdout);
 				child.stderr.off("data", onStderr);
 				this.activeNativeRuns.delete(active);
@@ -3847,7 +3936,7 @@ var ServerRunner = class {
 				clearTimeout(timer);
 				child.off("close", onClose);
 				child.off("error", onChildError);
-				child.stdin.off("error", onStdinError);
+				child.stdin.off("error", onStdinError).on("error", () => void 0);
 				child.stdout.off("data", onStdout);
 				child.stderr.off("data", onStderr);
 				this.activeNativeRuns.delete(active);

package/dist/server-build-stage.mjs

@@ -1,7 +1,7 @@
 import { A as QUICKJS_PACKAGE, B as toolchainPackageIdentities, C as JAVA_COMPILE_CLASSLIB_SHA256, E as JAVA_VERSION, I as RUST_VERSION, L as TYPESCRIPT_ASSET_PATH, O as PYTHON_PACKAGE, R as TYPESCRIPT_VERSION, S as JAVA_COMPILE_CLASSLIB_ASSET_PATH, T as JAVA_RUNTIME_CLASSLIB_SHA256, a as CLANG_PACKAGE_ASSET_PATH, b as JAVA_COMPILER_PACKAGE, i as CLANG_LIBCXX_PCH_MANIFEST_SHA256, n as CLANG_CC1_PINS_SHA256, o as CLANG_PACKAGE_SHA256, r as CLANG_LIBCXX_PCH_MANIFEST_ASSET_PATH, s as CLANG_VERSION, t as CLANG_CC1_PINS_ASSET_PATH, v as GO_VERSION, w as JAVA_RUNTIME_CLASSLIB_ASSET_PATH, x as JAVA_COMPILER_SHA256, y as JAVA_COMPILER_ASSET_PATH, z as toolchainContentIdentity } from "./chunks/toolchains-uz3XbZGI.js";
+import { a as canonicalFileRecord, i as assertSafeRelativePath, n as completeJsonObject, o as canonicalProjectFiles, r as readProcessMessage, t as withProcessKeepalive } from "./chunks/process-keepalive-BaXpMTap.js";
 import { f as MountedOutputStabilityObserver, n as RUST_TOOLCHAIN, t as RUST_COMPILE_TIMEOUT_MS } from "./chunks/rust-toolchain-CK5h2WT8.js";
 import { _ as pythonDependencyFiles, g as npmDependencyFiles, h as goDependencyInput, i as GO_TOOLCHAIN, m as cppDependencyInput, n as GO_COMPILE_TIMEOUT_MS, p as assertProjectDependencyEcosystem, v as rustDependencyInput } from "./chunks/go-toolchain-DRQSILaC.js";
-import { t as withProcessKeepalive } from "./chunks/process-keepalive-BWLUz55N.js";
 import { constants, writeFileSync } from "node:fs";
 import { deserialize, serialize } from "node:v8";
 import { access, lstat, mkdtemp, open, readFile, rm, writeFile } from "node:fs/promises";
@@ -15,60 +15,6 @@ import { assertCompilerCacheKey, assertValidProject, toolchainAssetSource, toolc
 import { WASM_OJ_CONTRACT_VERSION, WASM_OJ_SCHEMAS, assertLanguageIdentifier, isBuiltinLanguage } from "@wasm-oj/contracts";
 import { Directory as Directory$1, Wasmer as Wasmer$1 } from "@wasmer/sdk";
 import { fileURLToPath } from "node:url";
-//#region src/core/project-files.ts
-var PROJECT_SOURCE_LIMITS = Object.freeze({
-	files: 256,
-	bytesPerFile: 4194304,
-	totalBytes: 16777216
-});
-var UTF8_ENCODER = new TextEncoder();
-/** Locale-independent ordering used anywhere file order can affect build output. */
-function compareCanonicalPaths(left, right) {
-	return left < right ? -1 : left > right ? 1 : 0;
-}
-function assertSafeRelativePath(path, label = "Project path") {
-	if (typeof path !== "string" || !path || path !== path.trim() || path.length > 4096) throw new Error(`${label} must be a non-empty, trimmed string of at most 4096 characters.`);
-	if (path.startsWith("/") || path.includes("\\") || path.includes("\0") || path.split("/").some((segment) => !segment || segment === "." || segment === "..")) throw new Error(`${label} '${path}' must be a normalized relative path that cannot escape the project.`);
-}
-/**
-* Validates a project file set and returns a fresh, locale-independently sorted
-* array. Build hosts must use this order for filesystem creation and argv.
-*/
-function canonicalProjectFiles(files) {
-	if (!Array.isArray(files) || files.length === 0) throw new Error("A project must contain at least one source file.");
-	if (files.length > PROJECT_SOURCE_LIMITS.files) throw new Error(`A project cannot contain more than ${PROJECT_SOURCE_LIMITS.files} source files.`);
-	const seen = /* @__PURE__ */ new Set();
-	let totalBytes = 0;
-	return files.map((file, index) => {
-		if (!file || typeof file !== "object") throw new Error(`Project file ${index} is invalid.`);
-		assertSafeRelativePath(file.path, `Project file ${index} path`);
-		assertLanguageIdentifier(file.language);
-		if (typeof file.content !== "string") throw new Error(`Project file '${file.path}' content must be a string.`);
-		if (file.content.length > PROJECT_SOURCE_LIMITS.bytesPerFile) throw new Error(`Project file '${file.path}' exceeds the ${PROJECT_SOURCE_LIMITS.bytesPerFile} byte source limit.`);
-		const contentBytes = UTF8_ENCODER.encode(file.content).byteLength;
-		if (contentBytes > PROJECT_SOURCE_LIMITS.bytesPerFile) throw new Error(`Project file '${file.path}' exceeds the ${PROJECT_SOURCE_LIMITS.bytesPerFile} byte source limit.`);
-		totalBytes += contentBytes;
-		if (totalBytes > PROJECT_SOURCE_LIMITS.totalBytes) throw new Error(`Project sources exceed the ${PROJECT_SOURCE_LIMITS.totalBytes} byte total limit.`);
-		if (seen.has(file.path)) throw new Error(`Duplicate project path '${file.path}'.`);
-		seen.add(file.path);
-		return {
-			path: file.path,
-			language: file.language,
-			content: file.content
-		};
-	}).sort((left, right) => compareCanonicalPaths(left.path, right.path));
-}
-function canonicalFileEntries(files) {
-	if (!files || typeof files !== "object" || Array.isArray(files)) throw new Error("Runtime bundle files must be a record.");
-	return Object.entries(files).map(([path, contents]) => {
-		assertSafeRelativePath(path, "Runtime bundle path");
-		return [path, contents];
-	}).sort(([left], [right]) => compareCanonicalPaths(left, right));
-}
-function canonicalFileRecord(files) {
-	return Object.fromEntries(canonicalFileEntries(files));
-}
-//#endregion
 //#region src/core/sha256.ts
 async function sha256Hex(value) {
 	const source = typeof value === "string" ? new TextEncoder().encode(value) : value;
@@ -78,31 +24,6 @@ async function sha256Hex(value) {
 	return Array.from(new Uint8Array(digest), (byte) => byte.toString(16).padStart(2, "0")).join("");
 }
 //#endregion
-//#region src/core/dependencies.ts
-var MIB = 1048576;
-/** Contract-level admission limits shared by dependency hosts and compilers. */
-var DEPENDENCY_RESOLUTION_LIMITS = Object.freeze({
-	requirements: 128,
-	sourceFiles: 128,
-	sourceTextBytes: 8 * MIB,
-	hosts: 32,
-	roots: 512,
-	packages: 512,
-	referencesPerPackage: 512,
-	concurrency: 16,
-	metadataBytes: 8 * MIB,
-	packageBytes: 256 * MIB,
-	totalDownloadBytes: 512 * MIB,
-	archiveFiles: 16384,
-	unpackedBytes: 512 * MIB
-});
-Object.freeze({
-	packages: DEPENDENCY_RESOLUTION_LIMITS.packages,
-	filesPerPackage: DEPENDENCY_RESOLUTION_LIMITS.archiveFiles,
-	bytesPerFile: 64 * MIB,
-	totalBytes: DEPENDENCY_RESOLUTION_LIMITS.unpackedBytes
-});
-//#endregion
 //#region src/compiler/clang-pins.ts
 var decoder$3 = new TextDecoder();
 async function decodeClangPins(bytes) {
@@ -561,8 +482,8 @@ Object.freeze({
 });
 new TextEncoder();
 Object.freeze({
-	runtimeCoreWasmSha256: "1e297ad276694e9fb8a23afdc6ccc0b2ae56a223ced19d5cae26fe4661daa11e",
-	runtimeSourceRootSha256: "27c52cb1887aa8a7e0d8a238514fc8881cf86c68267e2a1691f110423692e2b6",
+	runtimeCoreWasmSha256: "0ae00fc646f529aafb5d1a68758220e6428f6c565e8e621eeb6c8f14ac5d4a10",
+	runtimeSourceRootSha256: "a7e9071511d127e3b14920558c7c38c27a1fa19d98906c8476c1df8041a9c3bb",
 	wasmerNativeVersion: "7.2.1",
 	wasmerSdkVersion: "0.10.0",
 	wasmerSdkWasmSha256: "49a6646209f5ab5e7c737eac33407d87d9a9959ac83e5ecaaab9261b2323589e",
@@ -573,7 +494,7 @@ Object.freeze({
 * Release verification independently checks the component bytes before this
 * identity is admitted into a calibrated release.
 */
-var WASM_OJ_RUNTIME_IDENTITY_SHA256 = "d3e44cafdc1c17a7e6bd4591ef04ec8161af805a519b5bbff437b15e5accd442";
+var WASM_OJ_RUNTIME_IDENTITY_SHA256 = "e5680beae9bd832ed2b679267250ce1efc7d104dd005bb155135664b40f961fb";
 //#endregion
 //#region src/core/cost-profile.ts
 function coordinates(language, target, optimization) {
@@ -1753,7 +1674,7 @@ async function transpileScriptProject(project, requestId) {
 	if (!entrypoint) throw new Error("The TypeScript/WASI compiler has no executable entrypoint.");
 	const outputPaths = emittedFiles.map((file) => emittedScriptPath(file.path));
 	const declarationPath = "/project/.wasm-oj/quickjs.d.ts";
-	const output = await (await entrypoint.run({ stdin: JSON.stringify({
+	const instance = await entrypoint.run({ stdin: JSON.stringify({
 		files: {
 			...Object.fromEntries(project.files.map((file) => [`/project/${file.path}`, file.content])),
 			...Object.fromEntries(Object.entries(dependencyFiles).filter(([, contents]) => typeof contents === "string").map(([path, contents]) => [`/project/${path}`, contents])),
@@ -1765,13 +1686,9 @@ async function transpileScriptProject(project, requestId) {
 			...Object.entries(dependencyFiles).filter(([path, contents]) => path.endsWith(".d.ts") && typeof contents === "string").map(([path]) => `/project/${path}`)
 		],
 		outputs: outputPaths.map((path) => `/project/build/${path}`)
-	}) })).wait();
-	let response;
-	if (output.ok) try {
-		response = JSON.parse(output.stdout);
-	} catch {
-		response = void 0;
-	}
+	}) });
+	const output = await readProcessMessage(instance, completeJsonObject, { collectStderr: true }).finally(() => instance.free());
+	const response = output.message;
 	const files = {};
 	if (response) for (const outputPath of outputPaths) {
 		const contents = response.files[`/project/build/${outputPath}`];
@@ -1780,7 +1697,7 @@ async function transpileScriptProject(project, requestId) {
 	Object.assign(files, dependencyFiles);
 	return {
 		files,
-		output,
+		stderr: output.stderr,
 		response
 	};
 }
@@ -1813,10 +1730,10 @@ async function buildScript(project, cacheKey, requestId) {
 		progress(requestId, "compiling", "Compiling TypeScript with TypeScript/WASI", .5);
 		const transpiled = await transpileScriptProject(project, requestId);
 		files = transpiled.files;
-		stderr = transpiled.output.stderr;
+		stderr = transpiled.stderr;
 		diagnostics = parseTypeScriptDiagnostics(transpiled.response?.diagnostics ?? "");
 		const emittedOutputsPresent = emittedSourceFiles(project).every((file) => Object.hasOwn(files, emittedScriptPath(file.path)));
-		if (!transpiled.output.ok || !transpiled.response || transpiled.response.status !== 0 || !emittedOutputsPresent || diagnostics.some((diagnostic) => diagnostic.severity === "error")) return {
+		if (!transpiled.response || transpiled.response.status !== 0 || !emittedOutputsPresent || diagnostics.some((diagnostic) => diagnostic.severity === "error")) return {
 			success: false,
 			diagnostics: ensureFailureDiagnostic(diagnostics, {
 				file: project.config.entry,

package/dist/server-runner-stage.mjs

@@ -1,5 +1,5 @@
 import { D as PYTHON_COMPRESSED_PACKAGE_SHA256, O as PYTHON_PACKAGE, k as PYTHON_PACKAGE_SHA256 } from "./chunks/toolchains-uz3XbZGI.js";
-import { t as withProcessKeepalive } from "./chunks/process-keepalive-BWLUz55N.js";
+import { r as readProcessMessage, t as withProcessKeepalive } from "./chunks/process-keepalive-BaXpMTap.js";
 import { writeFileSync } from "node:fs";
 import { serialize } from "node:v8";
 import { readFile } from "node:fs/promises";
@@ -7,6 +7,71 @@ import { createHash } from "node:crypto";
 import path from "node:path";
 import { gunzipSync } from "node:zlib";
 import { Runtime, Wasmer, init } from "@wasmer/sdk/node";
+import { WASM_OJ_STORAGE } from "@wasm-oj/contracts";
+//#region src/runner/runtime-files.ts
+var MAGIC = new TextEncoder().encode("WOJFS002");
+var HEADER_BYTES = 12;
+`${WASM_OJ_STORAGE.runtimeFilesCache}`;
+String.raw`
+import io
+import os
+import sys
+import zipfile
+
+source_root = "/usr/local/lib/python3.14"
+guest_path = "/cpython/lib/python314.zip"
+output = sys.stdout.buffer
+output.write(b"WOJFS002")
+
+archive_buffer = io.BytesIO()
+with zipfile.ZipFile(archive_buffer, "w", compression=zipfile.ZIP_STORED) as archive:
+    for root, directories, files in os.walk(source_root):
+        directories[:] = sorted(
+            name for name in directories
+            if name != "__pycache__" and not os.path.islink(os.path.join(root, name))
+        )
+        for name in sorted(files):
+            source_path = os.path.join(root, name)
+            if os.path.islink(source_path) or name.endswith((".pyc", ".pyo")):
+                continue
+            archive_path = os.path.relpath(source_path, source_root).replace(os.sep, "/")
+            info = zipfile.ZipInfo(archive_path, date_time=(1980, 1, 1, 0, 0, 0))
+            info.compress_type = zipfile.ZIP_STORED
+            info.external_attr = 0o100644 << 16
+            with open(source_path, "rb") as source:
+                archive.writestr(info, source.read())
+
+encoded_path = guest_path.encode("utf-8")
+archive_data = archive_buffer.getvalue()
+output.write(len(encoded_path).to_bytes(4, "little"))
+output.write(len(archive_data).to_bytes(8, "little"))
+output.write(encoded_path)
+output.write(archive_data)
+
+output.write((0).to_bytes(4, "little"))
+output.write((0).to_bytes(8, "little"))
+`;
+/**
+* Read an export until stdout holds a complete archive and return exactly its framed bytes.
+* `@wasmer/sdk` `Instance.wait()` can hang after all output arrived; see readProcessMessage.
+*/
+async function readRuntimeFilesExport(exporter, idleGraceMs) {
+	const { message, stderr } = await readProcessMessage(exporter, completeArchive, { idleGraceMs });
+	if (message === void 0) throw new Error(`The runtime file export ended before its archive was complete: ${stderr}`);
+	return message;
+}
+function completeArchive(bytes) {
+	const view = new DataView(bytes.buffer, bytes.byteOffset, bytes.byteLength);
+	let offset = MAGIC.byteLength;
+	while (offset + HEADER_BYTES <= bytes.byteLength) {
+		const pathLength = view.getUint32(offset, true);
+		const dataLength = Number(view.getBigUint64(offset + 4, true));
+		offset += HEADER_BYTES;
+		if (pathLength === 0 && dataLength === 0) return bytes.slice(0, offset);
+		offset += pathLength + dataLength;
+	}
+}
+//#endregion
 //#region src/server/server-runner-stage.mjs
 var MAX_INPUT_BYTES = 1048576;
 var MAX_RESULT_BYTES = 268435456;
@@ -43,9 +108,13 @@ try {
 				PYTHONDONTWRITEBYTECODE: "1"
 			}
 		}));
-		const output = await withProcessKeepalive(instance.wait());
-		if (!output.ok) throw new Error(`Unable to export runtime files from ${input.request.packageSpecifier}: exit ${output.code}: ${boundedText(output.stderr)}`);
-		bytes = output.stdoutBytes.slice();
+		try {
+			bytes = await withProcessKeepalive(readRuntimeFilesExport(instance));
+		} catch (error) {
+			throw new Error(`Unable to export runtime files from ${input.request.packageSpecifier}: ${boundedText(errorText(error))}`);
+		} finally {
+			instance.free();
+		}
 	}
 	if (bytes.byteLength > MAX_RESULT_BYTES) throw new Error(`Runner stage result is ${bytes.byteLength} bytes; the limit is ${MAX_RESULT_BYTES} bytes.`);
 	response = {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@wasm-oj/server",
-  "version": "0.2.2",
+  "version": "0.2.4",
   "description": "Node.js compiler and runner host for the WASM-OJ SDK.",
   "license": "MIT",
   "author": "JacobLinCool",
@@ -58,8 +58,8 @@
     "node": ">=24.18.0 <25"
   },
   "dependencies": {
-    "@wasm-oj/contracts": "0.2.2",
-    "@wasm-oj/core": "0.2.2",
+    "@wasm-oj/contracts": "0.2.4",
+    "@wasm-oj/core": "0.2.4",
     "@wasmer/sdk": "0.10.0",
     "fflate": "0.8.3"
   },