@weave-kit/engine 0.1.0

package/dist/subsystems/script/backend/isolated-vm.js

@@ -0,0 +1,380 @@
+import { createRequire } from 'node:module';
+import { Worker } from 'node:worker_threads';
+import { SchemaError } from '../../../core/index.js';
+/**
+ * `isolated-vm` sandbox backend (Node / V8 isolates).
+ *
+ * Isolation model:
+ * - each `*.server.js` runs in its own worker thread hosting its own V8 isolate
+ *   (`new ivm.Isolate({ memoryLimit })`) — real heap isolation, no host
+ *   capability globals reachable (no require/process/fetch/Function escapes)
+ * - `this.db` / `this.services` / `console` are **synchronous Callbacks** whose
+ *   implementations bridge to the engine main process over a SharedArrayBuffer +
+ *   `Atomics.wait/notify` message channel — the sandbox posts an RPC, the main
+ *   process runs the async data-access/providers and replies, the sandbox
+ *   resumes synchronously
+ * - wall-clock timeout is enforced host-side (race → `worker.terminate()`); the
+ *   isolate eval timeout additionally kills CPU-bound sync loops
+ * - v7.0.1 resolves `evalClosure` with `undefined` for a promise that never
+ *   settles, so hook completion is tracked with an in-isolate `__done` sentinel
+ *   instead of the completion value alone — a hook still pending when evalClosure
+ *   returns can never resolve (no timers/IO in the sandbox), so it is reported
+ *   as a timeout and the sandbox is poisoned (lazily respawned on next call)
+ *
+ * The worker code is an inlined string (`eval: true`) with `isolated-vm`
+ * resolved at runtime, so the backend works from source (tsx) and from the
+ * compiled `dist`, and survives `weave build` bundling.
+ */
+const require = createRequire(import.meta.url);
+/**
+ * Resolve `isolated-vm` lazily — it is an **optional** dependency (a native
+ * addon). Users without the script subsystem must be able to install and load
+ * the engine; the missing-module error is only raised when the backend is
+ * actually created, and the dispatcher turns it into an actionable message.
+ */
+let cachedIvmPath;
+function resolveIvmPath() {
+    if (cachedIvmPath !== undefined)
+        return cachedIvmPath;
+    try {
+        cachedIvmPath = require.resolve('isolated-vm');
+    }
+    catch {
+        throw new Error('isolated-vm is not installed (required by the script sandbox backend)');
+    }
+    return cachedIvmPath;
+}
+/** reply buffer size (JSON payloads, capped) */
+const DATA_BYTES = 8 * 1024 * 1024;
+const WORKER_CODE = String.raw `
+const { parentPort, workerData } = require('node:worker_threads');
+const ivm = require(workerData.ivmPath);
+
+const DATA_BYTES = workerData.dataBytes;
+const sab = workerData.sab;
+const genView = new Int32Array(sab, 0, 1);
+const lenView = new Int32Array(sab, 4, 1);
+const dataView = new Uint8Array(sab, 8, DATA_BYTES);
+const td = new TextDecoder();
+const te = new TextEncoder();
+let currentUser = { id: 'system', roles: [], teamId: undefined as string | undefined };
+let isolate, context, exportsRef;
+
+function rpcSync(ns, method, args, user) {
+  const gen = Atomics.load(genView, 0);
+  parentPort.postMessage({ type: 'rpc', ns, method, args, user });
+  const res = Atomics.wait(genView, 0, gen, workerData.queryTimeoutMs);
+  if (res === 'timed-out') throw new Error('query timeout after ' + workerData.queryTimeoutMs + 'ms');
+  const parsed = JSON.parse(td.decode(dataView.subarray(0, lenView[0])));
+  if (parsed.ok) return parsed.value;
+  const err = new Error(parsed.error);
+  if (parsed.errorCode !== undefined) err.code = parsed.errorCode;
+  throw err;
+}
+
+function transform(src) {
+  return src
+    .replace(/export\s+(async\s+)?function\s+(\w+)/g, '__exports.$2 = $1function $2')
+    .replace(/export\s+(const|let|var)\s+(\w+)/g, '__exports.$2 = ')
+    .replace(/export\s+default\s+/g, '__exports.default = ');
+}
+
+async function init() {
+  isolate = new ivm.Isolate({ memoryLimit: workerData.memoryLimitMb });
+  context = await isolate.createContext();
+  await context.eval('globalThis.__exports = {}');
+  exportsRef = await context.global.get('__exports', { reference: true });
+  const rpcCb = new ivm.Callback((ns, method, args) => rpcSync(ns, method, args, currentUser));
+  await context.global.set('__rpc', rpcCb);
+  await context.eval(transform(workerData.source), { timeout: workerData.timeoutMs });
+}
+
+async function callHook(hook, args) {
+  currentUser = args.user;
+  await context.evalClosure(
+    'globalThis.__ctx = ({ record: $0, records: $5, changes: $1, user: $2, transition: $3, state: $4, ' +
+    'db: { objects: (n) => ({ find: (o) => __rpc("objects","find",[n,"find",o]), ' +
+    'findOne: (id) => __rpc("objects","findOne",[n,"findOne",id]), ' +
+    'create: (d) => __rpc("objects","create",[n,"create",d]), ' +
+    'update: (id, ch) => __rpc("objects","update",[n,"update",id,ch]), ' +
+    'delete: (id) => __rpc("objects","delete",[n,"delete",id]) }), ' +
+    'query: (sql, p) => __rpc("query","run",[sql,p]) }, ' +
+    'services: { email: { send: (o) => __rpc("services","email.send",[o]) }, ' +
+    'slack: { post: (o) => __rpc("services","slack.post",[o]) }, ' +
+    'webhook: { call: (o) => __rpc("services","webhook.call",[o]) } }, ' +
+    'console: { log: (...a) => __rpc("console","log",a.map(String)), ' +
+    'warn: (...a) => __rpc("console","warn",a.map(String)), ' +
+    'error: (...a) => __rpc("console","error",a.map(String)), ' +
+    'info: (...a) => __rpc("console","info",a.map(String)) } })',
+    [args.record, args.changes, args.user, args.transition === undefined ? null : args.transition, args.state === undefined ? null : args.state, args.records === undefined ? null : args.records],
+    { arguments: { copy: true } },
+  );
+  const hookRef = await exportsRef.get(hook, { reference: true });
+  // v7.0.1 returns a Reference even for missing properties — verify it is a function
+  if (!hookRef || hookRef.typeof !== 'function') return { ok: false, error: { message: 'no hook: ' + hook } };
+  try {
+    // isolated-vm v7.0.1 resolves evalClosure with undefined for a promise that
+    // never settles, so the completion value alone is ambiguous — record completion
+    // inside the isolate and read the __done sentinel back
+    await context.evalClosure(
+      '(async () => { globalThis.__done = false; globalThis.__result = undefined; try { ' +
+      'globalThis.__result = { ok: true, value: await __exports[$0].call(__ctx) }; } ' +
+      'catch (e) { globalThis.__result = { ok: false, error: { message: String((e && e.message) || e), code: (e && e.code) || "abort" } }; } ' +
+      'finally { globalThis.__done = true; } })()',
+      [hook],
+      { arguments: { copy: true }, result: { promise: true, copy: true }, timeout: workerData.timeoutMs },
+    );
+    const done = await context.global.get('__done', { copy: true });
+    if (done !== true) {
+      // the hook is logically still pending — this sandbox has no timers/IO, so
+      // it can never resolve; poison the isolate and report a timeout (the host
+      // tears the sandbox down and it respawns on the next call)
+      return { ok: false, error: { message: 'script timed out (async hook did not settle)', code: 'timeout' }, poisoned: true };
+    }
+    const value = await context.global.get('__result', { copy: true });
+    if (value !== undefined && typeof value === 'object' && value.ok === false) {
+      const rawError = (value as { error?: { message?: string; code?: string } }).error;
+      return { ok: false, error: { message: String(rawError?.message ?? 'script error'), code: (rawError?.code as 'abort' | 'timeout' | 'sandbox' | undefined) ?? 'abort' } };
+    }
+    return { ok: true, value: value !== undefined && typeof value === 'object' && value.ok === true ? value.value : value };
+  } catch (e) {
+    const m = String((e && e.message) || e);
+    const timedOut = /timed out|timeout/i.test(m);
+    return { ok: false, error: { message: m, code: timedOut ? 'timeout' : 'abort' } };
+  }
+}
+
+parentPort.on('message', async (msg) => {
+  if (msg.type === 'shutdown') {
+    try {
+      await isolate.dispose();
+    } catch {}
+    // drop the message listener so the worker's event loop drains and the
+    // thread exits — isolated-vm's background V8 threads are only released on
+    // a clean isolate dispose, which worker.terminate() would otherwise leak
+    parentPort.removeAllListeners();
+    parentPort.postMessage({ type: 'closed' });
+    return;
+  }
+  if (msg.type === 'init') {
+    try {
+      await init();
+      parentPort.postMessage({ type: 'ready' });
+    } catch (e) {
+      parentPort.postMessage({ type: 'initError', error: String((e && e.message) || e) });
+    }
+    return;
+  }
+  if (msg.type === 'call') {
+    try {
+      const r = await callHook(msg.hook, msg.args);
+      parentPort.postMessage({ type: 'callResult', id: msg.id, ...r });
+    } catch (e) {
+      parentPort.postMessage({ type: 'callResult', id: msg.id, ok: false, error: { message: String((e && e.message) || e) } });
+    }
+  }
+});
+`;
+class IsolatedVmSandboxInstance {
+    entry;
+    executor;
+    opts;
+    worker;
+    ready;
+    pending = new Map();
+    nextCallId = 1;
+    closed = false;
+    sab = new SharedArrayBuffer(8 + DATA_BYTES);
+    genView = new Int32Array(this.sab, 0, 1);
+    lenView = new Int32Array(this.sab, 4, 1);
+    dataView = new Uint8Array(this.sab, 8, DATA_BYTES);
+    constructor(entry, executor, opts) {
+        this.entry = entry;
+        this.executor = executor;
+        this.opts = opts;
+    }
+    ensureReady() {
+        if (this.ready === undefined) {
+            this.ready = this.spawn();
+        }
+        return this.ready;
+    }
+    spawn() {
+        return new Promise((resolve, reject) => {
+            const worker = new Worker(WORKER_CODE, {
+                eval: true,
+                workerData: {
+                    source: this.entry.source,
+                    timeoutMs: this.opts.timeoutMs,
+                    queryTimeoutMs: this.opts.queryTimeoutMs,
+                    memoryLimitMb: this.opts.memoryLimitMb,
+                    dataBytes: DATA_BYTES,
+                    sab: this.sab,
+                    ivmPath: resolveIvmPath(),
+                },
+            });
+            // the worker hosts a V8 isolate with background threads that would keep
+            // the process alive after the sandbox is closed — decouple its lifetime
+            // (calls are awaited explicitly, so the main event loop stays alive
+            // while a hook runs)
+            worker.unref();
+            this.worker = worker;
+            const onMessage = (message) => {
+                if (message.type === 'ready') {
+                    resolve();
+                    return;
+                }
+                if (message.type === 'initError') {
+                    this.destroy();
+                    reject(new SchemaError('script.compile', { file: `${this.entry.name}.server.js`, detail: message.error }));
+                    return;
+                }
+                if (message.type === 'rpc') {
+                    void this.handleRpc(message);
+                    return;
+                }
+                if (message.type === 'callResult') {
+                    const pending = this.pending.get(message.id);
+                    if (pending !== undefined) {
+                        this.pending.delete(message.id);
+                        clearTimeout(pending.timer);
+                        pending.resolve(message.ok ? { ok: true, value: message.value } : { ok: false, error: message.error });
+                    }
+                    if (!message.ok && message.poisoned) {
+                        // the hook left a never-settling promise behind — the isolate can
+                        // never resolve it, so tear the sandbox down (it respawns on demand)
+                        this.destroy();
+                    }
+                }
+            };
+            worker.on('message', onMessage);
+            worker.on('error', (error) => {
+                this.destroy();
+                reject(error);
+            });
+            worker.postMessage({ type: 'init' });
+        });
+    }
+    writeReply(payload) {
+        const bytes = new TextEncoder().encode(JSON.stringify(payload));
+        if (bytes.length > DATA_BYTES) {
+            throw new Error(`rpc reply exceeds ${DATA_BYTES} bytes`);
+        }
+        this.lenView[0] = bytes.length;
+        this.dataView.set(bytes);
+    }
+    async handleRpc(message) {
+        try {
+            const value = await this.executor({ ns: message.ns, method: message.method, args: message.args, user: message.user }, this.opts.queryTimeoutMs);
+            this.writeReply({ ok: true, value });
+        }
+        catch (error) {
+            // carry the engine SchemaError code across the RPC bridge so a script
+            // hook can inspect `e.code` (e.g. rbac.denied) instead of parsing text
+            this.writeReply({
+                ok: false,
+                error: error instanceof Error ? error.message : String(error),
+                errorCode: error instanceof SchemaError ? error.code : undefined,
+            });
+        }
+        Atomics.add(this.genView, 0, 1);
+        Atomics.notify(this.genView, 0, 1);
+    }
+    async call(hook, args) {
+        await this.ensureReady();
+        if (this.closed || this.worker === undefined) {
+            return { ok: false, error: { message: 'sandbox is closed', code: 'sandbox' } };
+        }
+        const id = this.nextCallId++;
+        return new Promise((resolve) => {
+            const timer = setTimeout(() => {
+                this.pending.delete(id);
+                resolve({ ok: false, error: { message: 'script timed out', code: 'timeout' } });
+                void this.destroy();
+            }, this.opts.timeoutMs);
+            this.pending.set(id, { resolve, timer });
+            this.worker?.postMessage({ type: 'call', id, hook, args });
+        });
+    }
+    failAll(error) {
+        for (const [, pending] of this.pending) {
+            clearTimeout(pending.timer);
+            pending.resolve({ ok: false, error });
+        }
+        this.pending.clear();
+    }
+    /**
+     * Ask the worker to dispose its isolate (releasing isolated-vm's background
+     * V8 threads) and exit cleanly; `worker.terminate()` alone leaks those
+     * threads and can keep the process alive. Returns `true` when the worker
+     * acknowledged `closed` (isolate dispose confirmed); `false` when the
+     * handshake timed out and we fell back to a forced terminate (release not
+     * confirmed — caller should surface it).
+     */
+    async gracefulShutdown(worker) {
+        let confirmed = false;
+        const closed = new Promise((resolve) => {
+            const onMessage = (message) => {
+                if (message.type === 'closed') {
+                    confirmed = true;
+                    worker.off('message', onMessage);
+                    resolve();
+                }
+            };
+            worker.on('message', onMessage);
+            setTimeout(() => {
+                worker.off('message', onMessage);
+                resolve();
+            }, 1000);
+        });
+        try {
+            worker.postMessage({ type: 'shutdown' });
+        }
+        catch {
+            // worker already dead
+        }
+        await closed;
+        worker.removeAllListeners();
+        await worker.terminate().catch(() => { });
+        return confirmed;
+    }
+    destroy() {
+        const worker = this.worker;
+        this.worker = undefined;
+        this.ready = undefined;
+        if (worker !== undefined) {
+            worker.removeAllListeners();
+            try {
+                worker.postMessage({ type: 'shutdown' });
+            }
+            catch {
+                // worker already dead
+            }
+            setTimeout(() => {
+                void worker.terminate().catch(() => { });
+            }, 100);
+        }
+        this.failAll({ message: 'sandbox destroyed', code: 'sandbox' });
+    }
+    async close() {
+        this.closed = true;
+        this.failAll({ message: 'sandbox closed', code: 'sandbox' });
+        const worker = this.worker;
+        this.worker = undefined;
+        if (worker !== undefined) {
+            return this.gracefulShutdown(worker);
+        }
+        return true;
+    }
+}
+export function createIsolatedVmSandboxBackend(options) {
+    // fail fast when the optional native dependency is missing
+    resolveIvmPath();
+    return {
+        create(entry, executor) {
+            return new IsolatedVmSandboxInstance(entry, executor, options);
+        },
+        async close() { },
+    };
+}
+//# sourceMappingURL=isolated-vm.js.map

package/dist/subsystems/script/backend/isolated-vm.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"isolated-vm.js","sourceRoot":"","sources":["../../../../src/subsystems/script/backend/isolated-vm.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,aAAa,EAAE,MAAM,aAAa,CAAC;AAC5C,OAAO,EAAE,MAAM,EAAE,MAAM,qBAAqB,CAAC;AAC7C,OAAO,EAAE,WAAW,EAAE,MAAM,wBAAwB,CAAC;AAIrD;;;;;;;;;;;;;;;;;;;;;;;GAuBG;AAEH,MAAM,OAAO,GAAG,aAAa,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;AAE/C;;;;;GAKG;AACH,IAAI,aAAiC,CAAC;AACtC,SAAS,cAAc;IACrB,IAAI,aAAa,KAAK,SAAS;QAAE,OAAO,aAAa,CAAC;IACtD,IAAI,CAAC;QACH,aAAa,GAAG,OAAO,CAAC,OAAO,CAAC,aAAa,CAAC,CAAC;IACjD,CAAC;IAAC,MAAM,CAAC;QACP,MAAM,IAAI,KAAK,CAAC,uEAAuE,CAAC,CAAC;IAC3F,CAAC;IACD,OAAO,aAAa,CAAC;AACvB,CAAC;AAED,gDAAgD;AAChD,MAAM,UAAU,GAAG,CAAC,GAAG,IAAI,GAAG,IAAI,CAAC;AAUnC,MAAM,WAAW,GAAG,MAAM,CAAC,GAAG,CAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;CAgI7B,CAAC;AAQF,MAAM,yBAAyB;IAaV;IACA;IACA;IAdX,MAAM,CAAqB;IAC3B,KAAK,CAA4B;IACxB,OAAO,GAAG,IAAI,GAAG,EAA6F,CAAC;IACxH,UAAU,GAAG,CAAC,CAAC;IACf,MAAM,GAAG,KAAK,CAAC;IAEN,GAAG,GAAG,IAAI,iBAAiB,CAAC,CAAC,GAAG,UAAU,CAAC,CAAC;IAC5C,OAAO,GAAG,IAAI,UAAU,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,EAAE,CAAC,CAAC,CAAC;IACzC,OAAO,GAAG,IAAI,UAAU,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,EAAE,CAAC,CAAC,CAAC;IACzC,QAAQ,GAAG,IAAI,UAAU,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,EAAE,UAAU,CAAC,CAAC;IAEpE,YACmB,KAAmB,EACnB,QAAqB,EACrB,IAA8B;QAF9B,UAAK,GAAL,KAAK,CAAc;QACnB,aAAQ,GAAR,QAAQ,CAAa;QACrB,SAAI,GAAJ,IAAI,CAA0B;IAC9C,CAAC;IAEI,WAAW;QACjB,IAAI,IAAI,CAAC,KAAK,KAAK,SAAS,EAAE,CAAC;YAC7B,IAAI,CAAC,KAAK,GAAG,IAAI,CAAC,KAAK,EAAE,CAAC;QAC5B,CAAC;QACD,OAAO,IAAI,CAAC,KAAK,CAAC;IACpB,CAAC;IAEO,KAAK;QACX,OAAO,IAAI,OAAO,CAAO,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;YAC3C,MAAM,MAAM,GAAG,IAAI,MAAM,CAAC,WAAW,EAAE;gBACrC,IAAI,EAAE,IAAI;gBACV,UAAU,EAAE;oBACV,MAAM,EAAE,IAAI,CAAC,KAAK,CAAC,MAAM;oBACzB,SAAS,EAAE,IAAI,CAAC,IAAI,CAAC,SAAS;oBAC9B,cAAc,EAAE,IAAI,CAAC,IAAI,CAAC,cAAc;oBACxC,aAAa,EAAE,IAAI,CAAC,IAAI,CAAC,aAAa;oBACtC,SAAS,EAAE,UAAU;oBACrB,GAAG,EAAE,IAAI,CAAC,GAAG;oBACb,OAAO,EAAE,cAAc,EAAE;iBAC1B;aACF,CAAC,CAAC;YACH,wEAAwE;YACxE,wEAAwE;YACxE,oEAAoE;YACpE,qBAAqB;YACrB,MAAM,CAAC,KAAK,EAAE,CAAC;YACf,IAAI,CAAC,MAAM,GAAG,MAAM,CAAC;YAErB,MAAM,SAAS,GAAG,CAAC,OAAsB,EAAQ,EAAE;gBACjD,IAAI,OAAO,CAAC,IAAI,KAAK,OAAO,EAAE,CAAC;oBAC7B,OAAO,EAAE,CAAC;oBACV,OAAO;gBACT,CAAC;gBACD,IAAI,OAAO,CAAC,IAAI,KAAK,WAAW,EAAE,CAAC;oBACjC,IAAI,CAAC,OAAO,EAAE,CAAC;oBACf,MAAM,CAAC,IAAI,WAAW,CAAC,gBAAgB,EAAE,EAAE,IAAI,EAAE,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,YAAY,EAAE,MAAM,EAAE,OAAO,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC;oBAC3G,OAAO;gBACT,CAAC;gBACD,IAAI,OAAO,CAAC,IAAI,KAAK,KAAK,EAAE,CAAC;oBAC3B,KAAK,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,CAAC;oBAC7B,OAAO;gBACT,CAAC;gBACD,IAAI,OAAO,CAAC,IAAI,KAAK,YAAY,EAAE,CAAC;oBAClC,MAAM,OAAO,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC;oBAC7C,IAAI,OAAO,KAAK,SAAS,EAAE,CAAC;wBAC1B,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC;wBAChC,YAAY,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;wBAC5B,OAAO,CAAC,OAAO,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,OAAO,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,OAAO,CAAC,KAAK,EAAE,CAAC,CAAC;oBACzG,CAAC;oBACD,IAAI,CAAC,OAAO,CAAC,EAAE,IAAI,OAAO,CAAC,QAAQ,EAAE,CAAC;wBACpC,kEAAkE;wBAClE,qEAAqE;wBACrE,IAAI,CAAC,OAAO,EAAE,CAAC;oBACjB,CAAC;gBACH,CAAC;YACH,CAAC,CAAC;YACF,MAAM,CAAC,EAAE,CAAC,SAAS,EAAE,SAAS,CAAC,CAAC;YAChC,MAAM,CAAC,EAAE,CAAC,OAAO,EAAE,CAAC,KAAK,EAAE,EAAE;gBAC3B,IAAI,CAAC,OAAO,EAAE,CAAC;gBACf,MAAM,CAAC,KAAK,CAAC,CAAC;YAChB,CAAC,CAAC,CAAC;YACH,MAAM,CAAC,WAAW,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC,CAAC;QACvC,CAAC,CAAC,CAAC;IACL,CAAC;IAEO,UAAU,CAAC,OAA6E;QAC9F,MAAM,KAAK,GAAG,IAAI,WAAW,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,CAAC,CAAC;QAChE,IAAI,KAAK,CAAC,MAAM,GAAG,UAAU,EAAE,CAAC;YAC9B,MAAM,IAAI,KAAK,CAAC,qBAAqB,UAAU,QAAQ,CAAC,CAAC;QAC3D,CAAC;QACD,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,GAAG,KAAK,CAAC,MAAM,CAAC;QAC/B,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;IAC3B,CAAC;IAEO,KAAK,CAAC,SAAS,CAAC,OAAgD;QACtE,IAAI,CAAC;YACH,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,QAAQ,CAC/B,EAAE,EAAE,EAAE,OAAO,CAAC,EAAE,EAAE,MAAM,EAAE,OAAO,CAAC,MAAM,EAAE,IAAI,EAAE,OAAO,CAAC,IAAI,EAAE,IAAI,EAAE,OAAO,CAAC,IAAI,EAAE,EAClF,IAAI,CAAC,IAAI,CAAC,cAAc,CACzB,CAAC;YACF,IAAI,CAAC,UAAU,CAAC,EAAE,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;QACvC,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,sEAAsE;YACtE,uEAAuE;YACvE,IAAI,CAAC,UAAU,CAAC;gBACd,EAAE,EAAE,KAAK;gBACT,KAAK,EAAE,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC;gBAC7D,SAAS,EAAE,KAAK,YAAY,WAAW,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS;aACjE,CAAC,CAAC;QACL,CAAC;QACD,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,OAAO,EAAE,CAAC,EAAE,CAAC,CAAC,CAAC;QAChC,OAAO,CAAC,MAAM,CAAC,IAAI,CAAC,OAAO,EAAE,CAAC,EAAE,CAAC,CAAC,CAAC;IACrC,CAAC;IAED,KAAK,CAAC,IAAI,CAAC,IAAgB,EAAE,IAAwB;QACnD,MAAM,IAAI,CAAC,WAAW,EAAE,CAAC;QACzB,IAAI,IAAI,CAAC,MAAM,IAAI,IAAI,CAAC,MAAM,KAAK,SAAS,EAAE,CAAC;YAC7C,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,EAAE,OAAO,EAAE,mBAAmB,EAAE,IAAI,EAAE,SAAS,EAAE,EAAE,CAAC;QACjF,CAAC;QACD,MAAM,EAAE,GAAG,IAAI,CAAC,UAAU,EAAE,CAAC;QAC7B,OAAO,IAAI,OAAO,CAAoB,CAAC,OAAO,EAAE,EAAE;YAChD,MAAM,KAAK,GAAG,UAAU,CAAC,GAAG,EAAE;gBAC5B,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;gBACxB,OAAO,CAAC,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,EAAE,OAAO,EAAE,kBAAkB,EAAE,IAAI,EAAE,SAAS,EAAE,EAAE,CAAC,CAAC;gBAChF,KAAK,IAAI,CAAC,OAAO,EAAE,CAAC;YACtB,CAAC,EAAE,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;YACxB,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,EAAE,EAAE,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC,CAAC;YACzC,IAAI,CAAC,MAAM,EAAE,WAAW,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC;QAC7D,CAAC,CAAC,CAAC;IACL,CAAC;IAEO,OAAO,CAAC,KAAkE;QAChF,KAAK,MAAM,CAAC,EAAE,OAAO,CAAC,IAAI,IAAI,CAAC,OAAO,EAAE,CAAC;YACvC,YAAY,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;YAC5B,OAAO,CAAC,OAAO,CAAC,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,CAAC,CAAC;QACxC,CAAC;QACD,IAAI,CAAC,OAAO,CAAC,KAAK,EAAE,CAAC;IACvB,CAAC;IAED;;;;;;;OAOG;IACK,KAAK,CAAC,gBAAgB,CAAC,MAAc;QAC3C,IAAI,SAAS,GAAG,KAAK,CAAC;QACtB,MAAM,MAAM,GAAG,IAAI,OAAO,CAAO,CAAC,OAAO,EAAE,EAAE;YAC3C,MAAM,SAAS,GAAG,CAAC,OAAsB,EAAQ,EAAE;gBACjD,IAAI,OAAO,CAAC,IAAI,KAAK,QAAQ,EAAE,CAAC;oBAC9B,SAAS,GAAG,IAAI,CAAC;oBACjB,MAAM,CAAC,GAAG,CAAC,SAAS,EAAE,SAAS,CAAC,CAAC;oBACjC,OAAO,EAAE,CAAC;gBACZ,CAAC;YACH,CAAC,CAAC;YACF,MAAM,CAAC,EAAE,CAAC,SAAS,EAAE,SAAS,CAAC,CAAC;YAChC,UAAU,CAAC,GAAG,EAAE;gBACd,MAAM,CAAC,GAAG,CAAC,SAAS,EAAE,SAAS,CAAC,CAAC;gBACjC,OAAO,EAAE,CAAC;YACZ,CAAC,EAAE,IAAI,CAAC,CAAC;QACX,CAAC,CAAC,CAAC;QACH,IAAI,CAAC;YACH,MAAM,CAAC,WAAW,CAAC,EAAE,IAAI,EAAE,UAAU,EAAE,CAAC,CAAC;QAC3C,CAAC;QAAC,MAAM,CAAC;YACP,sBAAsB;QACxB,CAAC;QACD,MAAM,MAAM,CAAC;QACb,MAAM,CAAC,kBAAkB,EAAE,CAAC;QAC5B,MAAM,MAAM,CAAC,SAAS,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,GAAE,CAAC,CAAC,CAAC;QACzC,OAAO,SAAS,CAAC;IACnB,CAAC;IAEO,OAAO;QACb,MAAM,MAAM,GAAG,IAAI,CAAC,MAAM,CAAC;QAC3B,IAAI,CAAC,MAAM,GAAG,SAAS,CAAC;QACxB,IAAI,CAAC,KAAK,GAAG,SAAS,CAAC;QACvB,IAAI,MAAM,KAAK,SAAS,EAAE,CAAC;YACzB,MAAM,CAAC,kBAAkB,EAAE,CAAC;YAC5B,IAAI,CAAC;gBACH,MAAM,CAAC,WAAW,CAAC,EAAE,IAAI,EAAE,UAAU,EAAE,CAAC,CAAC;YAC3C,CAAC;YAAC,MAAM,CAAC;gBACP,sBAAsB;YACxB,CAAC;YACD,UAAU,CAAC,GAAG,EAAE;gBACd,KAAK,MAAM,CAAC,SAAS,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,GAAE,CAAC,CAAC,CAAC;YAC1C,CAAC,EAAE,GAAG,CAAC,CAAC;QACV,CAAC;QACD,IAAI,CAAC,OAAO,CAAC,EAAE,OAAO,EAAE,mBAAmB,EAAE,IAAI,EAAE,SAAS,EAAE,CAAC,CAAC;IAClE,CAAC;IAED,KAAK,CAAC,KAAK;QACT,IAAI,CAAC,MAAM,GAAG,IAAI,CAAC;QACnB,IAAI,CAAC,OAAO,CAAC,EAAE,OAAO,EAAE,gBAAgB,EAAE,IAAI,EAAE,SAAS,EAAE,CAAC,CAAC;QAC7D,MAAM,MAAM,GAAG,IAAI,CAAC,MAAM,CAAC;QAC3B,IAAI,CAAC,MAAM,GAAG,SAAS,CAAC;QACxB,IAAI,MAAM,KAAK,SAAS,EAAE,CAAC;YACzB,OAAO,IAAI,CAAC,gBAAgB,CAAC,MAAM,CAAC,CAAC;QACvC,CAAC;QACD,OAAO,IAAI,CAAC;IACd,CAAC;CACF;AAED,MAAM,UAAU,8BAA8B,CAAC,OAAiC;IAC9E,2DAA2D;IAC3D,cAAc,EAAE,CAAC;IACjB,OAAO;QACL,MAAM,CAAC,KAAmB,EAAE,QAAqB;YAC/C,OAAO,IAAI,yBAAyB,CAAC,KAAK,EAAE,QAAQ,EAAE,OAAO,CAAC,CAAC;QACjE,CAAC;QACD,KAAK,CAAC,KAAK,KAAI,CAAC;KACjB,CAAC;AACJ,CAAC"}

package/dist/subsystems/script/backend/types.d.ts

@@ -0,0 +1,61 @@
+import type { ScriptDispatchArgs, ScriptHook } from '../../../core/index.js';
+/**
+ * Sandbox backend contract — the pluggable isolation engine.
+ *
+ * `create()` spawns an isolated runtime for one `*.server.js` file and returns
+ * a handle that executes hooks with a script-visible `this` (plain data +
+ * RPC proxies). Today the backend is `node:worker_threads` (Bun-compatible,
+ * Node escape path intact); a V8-isolate backend (e.g. isolated-vm) can be
+ * swapped in later without touching the dispatcher.
+ */
+/** a data-access / service call the sandbox delegates to the engine main process */
+export interface RpcRequest {
+    /** 'objects' | 'services' | 'console' */
+    ns: string;
+    /** method name (e.g. 'find', 'email.send', 'log') */
+    method: string;
+    /** arguments after the object name (for 'objects': [objectName, method, ...args]) */
+    args: unknown[];
+    /** the script author (this.user) driving the call — rebuilt as an RbacSubject */
+    user: {
+        id: string;
+        name?: string;
+        roles: string[];
+        teamId?: string;
+    };
+}
+export type RpcExecutor = (req: RpcRequest, timeoutMs: number) => Promise<unknown>;
+export interface SandboxCallResult {
+    ok: boolean;
+    /** resolved return value of the hook (structured-clone safe) */
+    value?: unknown;
+    /** thrown error, serialized to { message }; code distinguishes user-thrown vs sandbox failure */
+    error?: {
+        message: string;
+        code?: 'abort' | 'timeout' | 'sandbox';
+    };
+}
+export interface SandboxEntry {
+    /** object name (also the worker/instance key) */
+    name: string;
+    /** raw source of the *.server.js file */
+    source: string;
+    /** hook names detected at load (drives fast-path registration) */
+    hooks: ScriptHook[];
+}
+export interface SandboxInstance {
+    /** run one hook; resolves when done, on timeout, or on sandbox crash */
+    call(hook: ScriptHook, args: ScriptDispatchArgs): Promise<SandboxCallResult>;
+    /**
+     * Release the sandbox. Returns whether the shutdown handshake **confirmed**
+     * a clean release (`true`) or fell back to a forced terminate on timeout
+     * (`false` — the isolate release was not confirmed). `false` only happens on
+     * a wedged worker; the dispatcher surfaces it as a warning.
+     */
+    close(): Promise<boolean>;
+}
+export interface SandboxBackend {
+    create(entry: SandboxEntry, executor: RpcExecutor): SandboxInstance;
+    close(): Promise<void>;
+}
+//# sourceMappingURL=types.d.ts.map

package/dist/subsystems/script/backend/types.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../../../../src/subsystems/script/backend/types.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,kBAAkB,EAAE,UAAU,EAAE,MAAM,wBAAwB,CAAC;AAE7E;;;;;;;;GAQG;AAEH,oFAAoF;AACpF,MAAM,WAAW,UAAU;IACzB,yCAAyC;IACzC,EAAE,EAAE,MAAM,CAAC;IACX,qDAAqD;IACrD,MAAM,EAAE,MAAM,CAAC;IACf,qFAAqF;IACrF,IAAI,EAAE,OAAO,EAAE,CAAC;IAChB,iFAAiF;IACjF,IAAI,EAAE;QAAE,EAAE,EAAE,MAAM,CAAC;QAAC,IAAI,CAAC,EAAE,MAAM,CAAC;QAAC,KAAK,EAAE,MAAM,EAAE,CAAC;QAAC,MAAM,CAAC,EAAE,MAAM,CAAA;KAAE,CAAC;CACvE;AAED,MAAM,MAAM,WAAW,GAAG,CAAC,GAAG,EAAE,UAAU,EAAE,SAAS,EAAE,MAAM,KAAK,OAAO,CAAC,OAAO,CAAC,CAAC;AAEnF,MAAM,WAAW,iBAAiB;IAChC,EAAE,EAAE,OAAO,CAAC;IACZ,gEAAgE;IAChE,KAAK,CAAC,EAAE,OAAO,CAAC;IAChB,iGAAiG;IACjG,KAAK,CAAC,EAAE;QAAE,OAAO,EAAE,MAAM,CAAC;QAAC,IAAI,CAAC,EAAE,OAAO,GAAG,SAAS,GAAG,SAAS,CAAA;KAAE,CAAC;CACrE;AAED,MAAM,WAAW,YAAY;IAC3B,iDAAiD;IACjD,IAAI,EAAE,MAAM,CAAC;IACb,yCAAyC;IACzC,MAAM,EAAE,MAAM,CAAC;IACf,kEAAkE;IAClE,KAAK,EAAE,UAAU,EAAE,CAAC;CACrB;AAED,MAAM,WAAW,eAAe;IAC9B,wEAAwE;IACxE,IAAI,CAAC,IAAI,EAAE,UAAU,EAAE,IAAI,EAAE,kBAAkB,GAAG,OAAO,CAAC,iBAAiB,CAAC,CAAC;IAC7E;;;;;OAKG;IACH,KAAK,IAAI,OAAO,CAAC,OAAO,CAAC,CAAC;CAC3B;AAED,MAAM,WAAW,cAAc;IAC7B,MAAM,CAAC,KAAK,EAAE,YAAY,EAAE,QAAQ,EAAE,WAAW,GAAG,eAAe,CAAC;IACpE,KAAK,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC;CACxB"}

package/dist/subsystems/script/backend/types.js

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=types.js.map

package/dist/subsystems/script/backend/types.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.js","sourceRoot":"","sources":["../../../../src/subsystems/script/backend/types.ts"],"names":[],"mappings":""}

package/dist/subsystems/script/bridge.d.ts

@@ -0,0 +1,29 @@
+import type { Pool } from 'pg';
+import type { Locale, ObjectRegistry, ScriptServices } from '../../core/index.js';
+import type { ObjectDataAccess } from '../../runtime/data-access/index.js';
+import type { RpcExecutor } from './backend/types.js';
+export interface ScriptBridgeOptions {
+    pool: Pool;
+    registry: ObjectRegistry;
+    /** RBAC-decorated object data-access — `this.db.objects` runs through it */
+    dataAccess: ObjectDataAccess;
+    /** main-process service implementations (`this.services`) */
+    services: ScriptServices;
+    /** per-call timeout in ms (`queryTimeout`) */
+    queryTimeoutMs: number;
+    /** non-owner role `this.db.query` switches to for row-level security (RLS) */
+    rlsRole: string;
+    /** cap on rows a script may fetch per `db.objects(...).find()` call */
+    maxObjectsPerQuery: number;
+    /** restricted SQL row cap */
+    maxRows?: number;
+    locale?: Locale;
+}
+/**
+ * The main-process executor for sandbox RPCs. Receives a call posted by the
+ * worker and runs it against the real engine resources, always with the
+ * script author's identity rebuilt as an `RbacSubject` so `withRbac` enforces
+ * permissions on every `this.db.objects` call.
+ */
+export declare function createScriptRpcExecutor(options: ScriptBridgeOptions): RpcExecutor;
+//# sourceMappingURL=bridge.d.ts.map

package/dist/subsystems/script/bridge.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"bridge.d.ts","sourceRoot":"","sources":["../../../src/subsystems/script/bridge.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,IAAI,EAAE,MAAM,IAAI,CAAC;AAC/B,OAAO,KAAK,EAAE,MAAM,EAAE,cAAc,EAAE,cAAc,EAAE,MAAM,qBAAqB,CAAC;AAClF,OAAO,KAAK,EAAqB,gBAAgB,EAAE,MAAM,oCAAoC,CAAC;AAG9F,OAAO,KAAK,EAAE,WAAW,EAAc,MAAM,oBAAoB,CAAC;AAElE,MAAM,WAAW,mBAAmB;IAClC,IAAI,EAAE,IAAI,CAAC;IACX,QAAQ,EAAE,cAAc,CAAC;IACzB,4EAA4E;IAC5E,UAAU,EAAE,gBAAgB,CAAC;IAC7B,6DAA6D;IAC7D,QAAQ,EAAE,cAAc,CAAC;IACzB,8CAA8C;IAC9C,cAAc,EAAE,MAAM,CAAC;IACvB,8EAA8E;IAC9E,OAAO,EAAE,MAAM,CAAC;IAChB,uEAAuE;IACvE,kBAAkB,EAAE,MAAM,CAAC;IAC3B,6BAA6B;IAC7B,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,MAAM,CAAC,EAAE,MAAM,CAAC;CACjB;AAmBD;;;;;GAKG;AACH,wBAAgB,uBAAuB,CAAC,OAAO,EAAE,mBAAmB,GAAG,WAAW,CAyFjF"}

package/dist/subsystems/script/bridge.js

@@ -0,0 +1,106 @@
+import { enforceSqlGates, executeRestrictedSql } from '../../runtime/data-access/index.js';
+import { createSqlAnalyzer } from '../../runtime/sql-analyzer/index.js';
+/** time-box an async call — rejects with a plain error after `ms` */
+function withTimeout(promise, ms) {
+    return new Promise((resolve, reject) => {
+        const timer = setTimeout(() => reject(new Error(`query timeout after ${ms}ms`)), ms);
+        promise.then((value) => {
+            clearTimeout(timer);
+            resolve(value);
+        }, (error) => {
+            clearTimeout(timer);
+            reject(error);
+        });
+    });
+}
+/**
+ * The main-process executor for sandbox RPCs. Receives a call posted by the
+ * worker and runs it against the real engine resources, always with the
+ * script author's identity rebuilt as an `RbacSubject` so `withRbac` enforces
+ * permissions on every `this.db.objects` call.
+ */
+export function createScriptRpcExecutor(options) {
+    const { pool, registry, dataAccess, services, locale } = options;
+    const analyzer = createSqlAnalyzer();
+    // warm up the WASM module at engine startup so the first db.query has no cold start
+    void analyzer.ensureLoaded();
+    async function handleObjects(req, timeoutMs) {
+        const [objectName, method, ...rest] = req.args;
+        // clamp the rows a script may request per find call (findOne uses limit 1)
+        if (method === 'find' && rest[0] !== undefined && typeof rest[0] === 'object' && !Array.isArray(rest[0])) {
+            const opts = rest[0];
+            const cap = options.maxObjectsPerQuery;
+            if (cap !== undefined)
+                opts.limit = Math.max(1, Math.min(opts.limit ?? cap, cap));
+        }
+        const ctx = {
+            pool,
+            registry,
+            subject: { id: req.user.id, roles: req.user.roles, teamId: req.user.teamId },
+            locale,
+        };
+        const fn = dataAccess[method];
+        if (typeof fn !== 'function') {
+            throw new Error(`unknown db.objects method: ${method}`);
+        }
+        return withTimeout(fn.call(dataAccess, objectName, ...rest, ctx), timeoutMs);
+    }
+    async function handleQuery(req, timeoutMs) {
+        const [sql, params] = req.args;
+        // RBAC gates: read permission + team scope + field exclude over the parsed
+        // table/column references (row-level scope is PostgreSQL RLS, see C2 design)
+        const analysis = await analyzer.analyzeSelect(sql, locale);
+        enforceSqlGates({
+            analysis,
+            registry,
+            roles: req.user.roles,
+            teamId: req.user.teamId,
+            locale,
+        });
+        return executeRestrictedSql(pool, sql, params, {
+            maxRows: options.maxRows,
+            timeoutMs,
+            rls: {
+                role: options.rlsRole,
+                subject: { id: req.user.id, roles: req.user.roles, teamId: req.user.teamId },
+            },
+        });
+    }
+    async function handleServices(req, timeoutMs) {
+        const args = (req.args[0] ?? {});
+        let call;
+        switch (req.method) {
+            case 'email.send':
+                call = services.email.send(args);
+                break;
+            case 'slack.post':
+                call = services.slack.post(args);
+                break;
+            case 'webhook.call':
+                call = services.webhook.call(args);
+                break;
+            default:
+                throw new Error(`unknown service: ${req.method}`);
+        }
+        return withTimeout(call, timeoutMs);
+    }
+    return async (req, timeoutMs) => {
+        switch (req.ns) {
+            case 'objects':
+                return handleObjects(req, timeoutMs);
+            case 'query':
+                return handleQuery(req, timeoutMs);
+            case 'services':
+                return handleServices(req, timeoutMs);
+            case 'console': {
+                const level = req.method;
+                const logger = console[level] ?? console.log;
+                logger(...req.args);
+                return undefined;
+            }
+            default:
+                throw new Error(`unknown rpc namespace: ${req.ns}`);
+        }
+    };
+}
+//# sourceMappingURL=bridge.js.map

package/dist/subsystems/script/bridge.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"bridge.js","sourceRoot":"","sources":["../../../src/subsystems/script/bridge.ts"],"names":[],"mappings":"AAGA,OAAO,EAAE,eAAe,EAAE,oBAAoB,EAAE,MAAM,oCAAoC,CAAC;AAC3F,OAAO,EAAE,iBAAiB,EAAE,MAAM,qCAAqC,CAAC;AAqBxE,qEAAqE;AACrE,SAAS,WAAW,CAAI,OAAmB,EAAE,EAAU;IACrD,OAAO,IAAI,OAAO,CAAI,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;QACxC,MAAM,KAAK,GAAG,UAAU,CAAC,GAAG,EAAE,CAAC,MAAM,CAAC,IAAI,KAAK,CAAC,uBAAuB,EAAE,IAAI,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;QACrF,OAAO,CAAC,IAAI,CACV,CAAC,KAAK,EAAE,EAAE;YACR,YAAY,CAAC,KAAK,CAAC,CAAC;YACpB,OAAO,CAAC,KAAK,CAAC,CAAC;QACjB,CAAC,EACD,CAAC,KAAK,EAAE,EAAE;YACR,YAAY,CAAC,KAAK,CAAC,CAAC;YACpB,MAAM,CAAC,KAAK,CAAC,CAAC;QAChB,CAAC,CACF,CAAC;IACJ,CAAC,CAAC,CAAC;AACL,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,uBAAuB,CAAC,OAA4B;IAClE,MAAM,EAAE,IAAI,EAAE,QAAQ,EAAE,UAAU,EAAE,QAAQ,EAAE,MAAM,EAAE,GAAG,OAAO,CAAC;IACjE,MAAM,QAAQ,GAAG,iBAAiB,EAAE,CAAC;IACrC,oFAAoF;IACpF,KAAK,QAAQ,CAAC,YAAY,EAAE,CAAC;IAE7B,KAAK,UAAU,aAAa,CAAC,GAAe,EAAE,SAAiB;QAC7D,MAAM,CAAC,UAAU,EAAE,MAAM,EAAE,GAAG,IAAI,CAAC,GAAG,GAAG,CAAC,IAAsC,CAAC;QACjF,2EAA2E;QAC3E,IAAI,MAAM,KAAK,MAAM,IAAI,IAAI,CAAC,CAAC,CAAC,KAAK,SAAS,IAAI,OAAO,IAAI,CAAC,CAAC,CAAC,KAAK,QAAQ,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;YACzG,MAAM,IAAI,GAAG,IAAI,CAAC,CAAC,CAAuB,CAAC;YAC3C,MAAM,GAAG,GAAG,OAAO,CAAC,kBAAkB,CAAC;YACvC,IAAI,GAAG,KAAK,SAAS;gBAAE,IAAI,CAAC,KAAK,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,KAAK,IAAI,GAAG,EAAE,GAAG,CAAC,CAAC,CAAC;QACpF,CAAC;QACD,MAAM,GAAG,GAAsB;YAC7B,IAAI;YACJ,QAAQ;YACR,OAAO,EAAE,EAAE,EAAE,EAAE,GAAG,CAAC,IAAI,CAAC,EAAE,EAAE,KAAK,EAAE,GAAG,CAAC,IAAI,CAAC,KAAK,EAAE,MAAM,EAAE,GAAG,CAAC,IAAI,CAAC,MAAM,EAAE;YAC5E,MAAM;SACP,CAAC;QACF,MAAM,EAAE,GAAI,UAAiD,CAAC,MAAM,CAAC,CAAC;QACtE,IAAI,OAAO,EAAE,KAAK,UAAU,EAAE,CAAC;YAC7B,MAAM,IAAI,KAAK,CAAC,8BAA8B,MAAM,EAAE,CAAC,CAAC;QAC1D,CAAC;QACD,OAAO,WAAW,CACf,EAA6D,CAAC,IAAI,CAAC,UAAU,EAAE,UAAU,EAAE,GAAG,IAAI,EAAE,GAAG,CAAC,EACzG,SAAS,CACV,CAAC;IACJ,CAAC;IAED,KAAK,UAAU,WAAW,CAAC,GAAe,EAAE,SAAiB;QAC3D,MAAM,CAAC,GAAG,EAAE,MAAM,CAAC,GAAG,GAAG,CAAC,IAA2B,CAAC;QACtD,2EAA2E;QAC3E,6EAA6E;QAC7E,MAAM,QAAQ,GAAG,MAAM,QAAQ,CAAC,aAAa,CAAC,GAAG,EAAE,MAAM,CAAC,CAAC;QAC3D,eAAe,CAAC;YACd,QAAQ;YACR,QAAQ;YACR,KAAK,EAAE,GAAG,CAAC,IAAI,CAAC,KAAK;YACrB,MAAM,EAAE,GAAG,CAAC,IAAI,CAAC,MAAM;YACvB,MAAM;SACP,CAAC,CAAC;QACH,OAAO,oBAAoB,CAAC,IAAI,EAAE,GAAG,EAAE,MAAM,EAAE;YAC7C,OAAO,EAAE,OAAO,CAAC,OAAO;YACxB,SAAS;YACT,GAAG,EAAE;gBACH,IAAI,EAAE,OAAO,CAAC,OAAO;gBACrB,OAAO,EAAE,EAAE,EAAE,EAAE,GAAG,CAAC,IAAI,CAAC,EAAE,EAAE,KAAK,EAAE,GAAG,CAAC,IAAI,CAAC,KAAK,EAAE,MAAM,EAAE,GAAG,CAAC,IAAI,CAAC,MAAM,EAAE;aAC7E;SACF,CAAC,CAAC;IACL,CAAC;IAED,KAAK,UAAU,cAAc,CAAC,GAAe,EAAE,SAAiB;QAC9D,MAAM,IAAI,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,EAAE,CAA4B,CAAC;QAC5D,IAAI,IAAsB,CAAC;QAC3B,QAAQ,GAAG,CAAC,MAAM,EAAE,CAAC;YACnB,KAAK,YAAY;gBACf,IAAI,GAAG,QAAQ,CAAC,KAAK,CAAC,IAAI,CAAC,IAAiE,CAAqB,CAAC;gBAClH,MAAM;YACR,KAAK,YAAY;gBACf,IAAI,GAAG,QAAQ,CAAC,KAAK,CAAC,IAAI,CAAC,IAAiE,CAAqB,CAAC;gBAClH,MAAM;YACR,KAAK,cAAc;gBACjB,IAAI,GAAG,QAAQ,CAAC,OAAO,CAAC,IAAI,CAAC,IAAmE,CAAqB,CAAC;gBACtH,MAAM;YACR;gBACE,MAAM,IAAI,KAAK,CAAC,oBAAoB,GAAG,CAAC,MAAM,EAAE,CAAC,CAAC;QACtD,CAAC;QACD,OAAO,WAAW,CAAC,IAAI,EAAE,SAAS,CAAC,CAAC;IACtC,CAAC;IAED,OAAO,KAAK,EAAE,GAAG,EAAE,SAAS,EAAoB,EAAE;QAChD,QAAQ,GAAG,CAAC,EAAE,EAAE,CAAC;YACf,KAAK,SAAS;gBACZ,OAAO,aAAa,CAAC,GAAG,EAAE,SAAS,CAAC,CAAC;YACvC,KAAK,OAAO;gBACV,OAAO,WAAW,CAAC,GAAG,EAAE,SAAS,CAAC,CAAC;YACrC,KAAK,UAAU;gBACb,OAAO,cAAc,CAAC,GAAG,EAAE,SAAS,CAAC,CAAC;YACxC,KAAK,SAAS,CAAC,CAAC,CAAC;gBACf,MAAM,KAAK,GAAG,GAAG,CAAC,MAA2C,CAAC;gBAC9D,MAAM,MAAM,GAAG,OAAO,CAAC,KAAK,CAAC,IAAI,OAAO,CAAC,GAAG,CAAC;gBAC7C,MAAM,CAAC,GAAI,GAAG,CAAC,IAAkB,CAAC,CAAC;gBACnC,OAAO,SAAS,CAAC;YACnB,CAAC;YACD;gBACE,MAAM,IAAI,KAAK,CAAC,0BAA0B,GAAG,CAAC,EAAE,EAAE,CAAC,CAAC;QACxD,CAAC;IACH,CAAC,CAAC;AACJ,CAAC"}

package/dist/subsystems/script/dispatcher.d.ts

@@ -0,0 +1,46 @@
+import type { Pool } from 'pg';
+import { type EngineScriptConfig, type Locale, type ObjectRegistry, type ScriptDispatcher, type ScriptServices } from '../../core/index.js';
+import type { ObjectDataAccess } from '../../runtime/data-access/index.js';
+export interface ScriptDispatcherOptions {
+    /** path to the project `objects/` directory */
+    objectsDir: string;
+    registry: ObjectRegistry;
+    pool: Pool;
+    /** RBAC-decorated data-access used by `this.db.objects` */
+    dataAccess: ObjectDataAccess;
+    /** main-process service implementations; defaults to webhook-capable stubs */
+    services?: ScriptServices;
+    config?: EngineScriptConfig;
+    locale?: Locale;
+}
+export interface ResolvedScriptConfig {
+    timeout: number;
+    queryTimeout: number;
+    memoryLimit: number;
+    maxConcurrentScripts: number;
+    /** non-owner role `this.db.query` switches to for row-level security */
+    rlsRole: string;
+    /** cap on rows a script may fetch per `db.objects(...).find()` call */
+    maxObjectsPerQuery: number;
+}
+/** sandbox resource defaults (`weavekit.config.ts → subsystems.script.sandbox`) */
+export declare const SCRIPT_DEFAULTS: {
+    readonly timeout: 5000;
+    readonly queryTimeout: 2000;
+    readonly memoryLimit: number;
+    readonly maxConcurrentScripts: 10;
+};
+export declare const RLS_ROLE_DEFAULT = "weavekit_query";
+export declare function resolveScriptConfig(config?: EngineScriptConfig): ResolvedScriptConfig;
+/**
+ * Assemble the write-path hook dispatcher.
+ *
+ * - discovers `objects/<name>/server.js` (only for registered objects)
+ * - lazily spawns one sandbox per script on first dispatch
+ * - enforces resource limits (timeout / queryTimeout / memory / concurrency)
+ * - before-hook errors throw (data-access aborts); after-hook errors are
+ *   caught by data-access and surfaced as warnings — the dispatcher itself
+ *   always throws on a hook failure and lets the caller decide
+ */
+export declare function createScriptDispatcher(options: ScriptDispatcherOptions): Promise<ScriptDispatcher>;
+//# sourceMappingURL=dispatcher.d.ts.map