@zackbart/connecta 0.7.1 → 0.7.4

package/dist/executors/quickjs-runtime.js

@@ -0,0 +1,383 @@
+// QuickJS-in-WebAssembly runtime used inside the disposable child process.
+//
+// Model-written code runs inside a QuickJS interpreter compiled to WASM:
+// memory-safe, no ambient authority — the guest has no fetch, filesystem,
+// env, timers, or imports. The only bridge to the host is `__call`, which
+// returns a QuickJS promise that the host resolves with a JSON payload after
+// running the provider function; `executePendingJobs` drives guest
+// continuations from a host-side loop. Values cross the boundary as JSON, so
+// provider args/results must be JSON-serializable.
+import { getQuickJS, } from "quickjs-emscripten";
+/** Load and compile the shared QuickJS WASM module before a run budget starts. */
+export async function prepareQuickJs() {
+    await getQuickJS();
+}
+const MAX_LOG_ENTRIES = 200;
+// Cap each entry AND the cumulative buffer at capture time so untrusted guest
+// code can't retain unbounded host memory: a single `console.log("x".repeat(N))`
+// otherwise copies the whole N-char guest string into a host array we hold for
+// the entire execution. 8k chars/entry is generous for glue-code logging (the
+// join in execute.ts trims the assembled log to 4k anyway), and 256k total
+// keeps the worst case — 200 maxed-out entries — bounded well under a MiB.
+const MAX_LOG_ENTRY_CHARS = 8_000;
+const MAX_LOG_TOTAL_CHARS = 256_000;
+// Keep one host result below the range where quickjs-emscripten@0.32.0 can
+// nondeterministically fail during runtime disposal under concurrent load.
+// This still lets guest code reduce data more than ten times larger than
+// connecta's final response budget.
+const MAX_HOST_RESULT_BYTES = 256 * 1024;
+function msg(err) {
+    return err instanceof Error ? err.message : String(err);
+}
+function exceedsUtf8ByteLimit(value, limit) {
+    let bytes = 0;
+    for (let index = 0; index < value.length; index += 1) {
+        const code = value.charCodeAt(index);
+        if (code <= 0x7f)
+            bytes += 1;
+        else if (code <= 0x7ff)
+            bytes += 2;
+        else if (code >= 0xd800 &&
+            code <= 0xdbff &&
+            index + 1 < value.length &&
+            value.charCodeAt(index + 1) >= 0xdc00 &&
+            value.charCodeAt(index + 1) <= 0xdfff) {
+            bytes += 4;
+            index += 1;
+        }
+        else {
+            bytes += 3;
+        }
+        if (bytes > limit)
+            return true;
+    }
+    return false;
+}
+/** Normalize model output into an async-arrow expression: strip markdown fences, wrap bare bodies. */
+export function normalizeCode(code) {
+    let c = code.trim();
+    const fence = /^```[\w-]*\s*\n([\s\S]*?)\n?```$/.exec(c);
+    if (fence)
+        c = fence[1].trim();
+    // Sniff for an existing function expression past any leading comments/blank
+    // lines — models routinely prefix their code with a `//` or `/* */` note,
+    // which would otherwise defeat the detection and wrap the whole thing.
+    const head = c.replace(/^(?:\s+|\/\/[^\n]*|\/\*[\s\S]*?\*\/)+/, "");
+    if (/^async\b/.test(head) || head.startsWith("("))
+        return c;
+    return `async () => {\n${c}\n}`;
+}
+/**
+ * Constant-size guest prelude: one lazy namespace Proxy per provider, never one
+ * generated closure per visible tool. Unknown properties cross the host bridge
+ * and fail closed there.
+ */
+function setupScript(providers) {
+    const lines = [
+        `globalThis.console = (() => {
+  const fmt = (x) => { if (typeof x === "string") return x; try { return JSON.stringify(x); } catch { return String(x); } };
+  const emit = (...a) => __log(a.map(fmt).join(" "));
+  return { log: emit, info: emit, warn: emit, error: emit, debug: emit };
+})();`,
+        `globalThis.__invoke = async (ns, fn, args) => {
+  const r = JSON.parse(await __call(ns, fn, JSON.stringify(args)));
+  if (!r.ok) throw new Error(r.error);
+  return r.value;
+};`,
+        `globalThis.__namespace = (ns) => Object.freeze(new Proxy(Object.create(null), {
+  get: (_target, key) => typeof key === "string" ? (...args) => __invoke(ns, key, args) : undefined
+}));`,
+    ];
+    for (const p of providers) {
+        const ns = JSON.stringify(p.name);
+        lines.push(`globalThis[${ns}] = __namespace(${ns});`);
+    }
+    lines.push(`delete globalThis.__namespace;`);
+    return lines.join("\n");
+}
+/** True when a dumped error is QuickJS's deadline-interrupt signal. */
+function isInterrupt(dumped) {
+    if (!dumped || typeof dumped !== "object")
+        return false;
+    const e = dumped;
+    return e.name === "InternalError" && e.message === "interrupted";
+}
+function formatGuestError(dumped) {
+    if (dumped && typeof dumped === "object") {
+        const e = dumped;
+        if (e.message != null) {
+            return e.name != null && e.name !== "Error"
+                ? `${String(e.name)}: ${String(e.message)}`
+                : String(e.message);
+        }
+    }
+    return typeof dumped === "string" ? dumped : JSON.stringify(dumped);
+}
+function armWake(bridge) {
+    bridge.waitForSettle = new Promise((resolve) => {
+        bridge.wake = resolve;
+    });
+}
+function waitForHostOrDeadline(waitForSettle, remainingMs) {
+    return new Promise((resolve) => {
+        let done = false;
+        const timer = setTimeout(() => {
+            done = true;
+            resolve(false);
+        }, remainingMs);
+        void waitForSettle.then(() => {
+            if (done)
+                return;
+            done = true;
+            clearTimeout(timer);
+            resolve(true);
+        });
+    });
+}
+function installBridge(ctx, providers, logs) {
+    const bridge = {
+        pending: 0,
+        aborted: false,
+        wake: () => { },
+        waitForSettle: Promise.resolve(),
+    };
+    armWake(bridge);
+    // Running total of chars actually retained in `logs`; once the cumulative
+    // budget is spent we push one marker and drop the rest, so a flood of large
+    // entries can't grow the host array without bound.
+    let logTotalChars = 0;
+    let logBudgetSpent = false;
+    const logFn = ctx.newFunction("__log", (h) => {
+        if (logs.length >= MAX_LOG_ENTRIES) {
+            if (logs.length === MAX_LOG_ENTRIES) {
+                logs.push(`[log truncated after ${MAX_LOG_ENTRIES} entries]`);
+            }
+            return;
+        }
+        if (logBudgetSpent)
+            return;
+        // Cap the entry before retaining it: `getString` yields a transient copy,
+        // but slicing here keeps only a bounded string alive in `logs`.
+        let entry = ctx.getString(h);
+        if (entry.length > MAX_LOG_ENTRY_CHARS) {
+            entry = `${entry.slice(0, MAX_LOG_ENTRY_CHARS)}…[entry truncated]`;
+        }
+        if (logTotalChars + entry.length > MAX_LOG_TOTAL_CHARS) {
+            logs.push("[log truncated: size budget exceeded]");
+            logBudgetSpent = true;
+            return;
+        }
+        logs.push(entry);
+        logTotalChars += entry.length;
+    });
+    ctx.setProp(ctx.global, "__log", logFn);
+    logFn.dispose();
+    const byName = new Map(providers.map((p) => [p.name, p]));
+    const invoke = async (ns, fn, argsJson) => {
+        try {
+            const provider = byName.get(ns);
+            const f = provider && Object.hasOwn(provider.fns, fn)
+                ? provider.fns[fn]
+                : undefined;
+            if (!f)
+                throw new Error(`Unknown function ${ns}.${fn}`);
+            const args = JSON.parse(argsJson);
+            const value = await f(...args);
+            let json;
+            try {
+                json = JSON.stringify({ ok: true, value });
+            }
+            catch (err) {
+                throw new Error(`Host result from ${ns}.${fn} could not be serialized: ${msg(err)}`);
+            }
+            if (exceedsUtf8ByteLimit(json, MAX_HOST_RESULT_BYTES)) {
+                throw new Error(`Host result from ${ns}.${fn} exceeds the ${MAX_HOST_RESULT_BYTES}-byte serialized bridge limit.`);
+            }
+            return json;
+        }
+        catch (err) {
+            return JSON.stringify({ ok: false, error: msg(err) });
+        }
+    };
+    const callFn = ctx.newFunction("__call", (nsH, fnH, argsH) => {
+        const ns = ctx.getString(nsH);
+        const fn = ctx.getString(fnH);
+        const argsJson = ctx.getString(argsH);
+        const deferred = ctx.newPromise();
+        bridge.pending++;
+        void invoke(ns, fn, argsJson).then((json) => {
+            bridge.pending--;
+            if (bridge.aborted) {
+                // Context is (about to be) torn down — settle nothing, free our handles.
+                deferred.dispose();
+            }
+            else {
+                const h = ctx.newString(json);
+                deferred.resolve(h);
+                h.dispose();
+            }
+            bridge.wake();
+        });
+        return deferred.handle;
+    });
+    ctx.setProp(ctx.global, "__call", callFn);
+    callFn.dispose();
+    return bridge;
+}
+/**
+ * Execute one program inside the child. Wall time includes host waits; guest
+ * CPU accumulates only while evalCode/executePendingJobs is synchronously
+ * driving QuickJS, so a slow downstream does not consume the short CPU budget.
+ */
+export async function executeQuickJs(code, providers, options) {
+    const { timeoutMs, cpuTimeMs, memoryLimitBytes, maxStackSizeBytes } = options;
+    const QuickJS = await getQuickJS();
+    const ctx = QuickJS.newContext();
+    const deadline = Date.now() + timeoutMs;
+    const timeoutError = `Execution timed out after ${timeoutMs}ms.`;
+    const cpuTimeoutError = `Execution exceeded the ${cpuTimeMs}ms guest CPU budget.`;
+    let cpuUsedMs = 0;
+    let segmentStarted = 0;
+    let inGuest = false;
+    let cpuInterrupted = false;
+    let wallInterrupted = false;
+    const runGuest = (operation) => {
+        segmentStarted = Date.now();
+        inGuest = true;
+        try {
+            return operation();
+        }
+        finally {
+            cpuUsedMs += Date.now() - segmentStarted;
+            inGuest = false;
+        }
+    };
+    ctx.runtime.setMemoryLimit(memoryLimitBytes);
+    ctx.runtime.setMaxStackSize(maxStackSizeBytes);
+    ctx.runtime.setInterruptHandler(() => {
+        if (!inGuest)
+            return false;
+        wallInterrupted = Date.now() >= deadline;
+        cpuInterrupted =
+            cpuUsedMs + (Date.now() - segmentStarted) >= cpuTimeMs;
+        return wallInterrupted || cpuInterrupted;
+    });
+    const logs = [];
+    const bridge = installBridge(ctx, providers, logs);
+    const finish = (r) => {
+        bridge.aborted = true;
+        // Outstanding host calls still hold deferred-promise handles; their
+        // callbacks free them and wake the drain, which disposes the context
+        // once the last straggler settles. Re-arm before every wait so the
+        // deferred never resolves-and-stays-resolved between settles — that
+        // would spin the microtask queue and starve the very timers the
+        // stragglers are waiting on. Arming before the pending check (and
+        // synchronously, before the first await) closes the settle-before-arm
+        // window: any settle after this point resolves the promise we await.
+        if (bridge.pending === 0)
+            ctx.dispose();
+        else {
+            void (async () => {
+                armWake(bridge);
+                while (bridge.pending > 0) {
+                    await bridge.waitForSettle;
+                    armWake(bridge);
+                }
+                ctx.dispose();
+            })();
+        }
+        return logs.length > 0 ? { ...r, logs } : r;
+    };
+    const fail = (error) => finish({ result: undefined, error });
+    const timedOut = () => ({
+        result: undefined,
+        error: timeoutError,
+        timedOut: true,
+    });
+    const setup = runGuest(() => ctx.evalCode(setupScript(providers)));
+    if (setup.error) {
+        const detail = formatGuestError(ctx.dump(setup.error));
+        setup.error.dispose();
+        if (wallInterrupted)
+            return finish(timedOut());
+        if (cpuInterrupted)
+            return fail(cpuTimeoutError);
+        return fail(`Sandbox setup failed: ${detail}`);
+    }
+    setup.value.dispose();
+    const evaluated = runGuest(() => ctx.evalCode(`Promise.resolve((\n${normalizeCode(code)}\n)())`));
+    if (evaluated.error) {
+        const dumped = ctx.dump(evaluated.error);
+        evaluated.error.dispose();
+        if (isInterrupt(dumped) && wallInterrupted)
+            return finish(timedOut());
+        if (isInterrupt(dumped) && cpuInterrupted)
+            return fail(cpuTimeoutError);
+        return fail(formatGuestError(dumped));
+    }
+    const promiseHandle = evaluated.value;
+    // Drive the guest: run microtask jobs, inspect the result promise,
+    // sleep until a host call settles (or the budget runs out), repeat.
+    // Returns without touching the context lifecycle; disposal happens below.
+    const drive = async () => {
+        for (;;) {
+            if (Date.now() >= deadline) {
+                return timedOut();
+            }
+            const jobs = runGuest(() => ctx.runtime.executePendingJobs());
+            if (jobs.error) {
+                const dumped = ctx.dump(jobs.error);
+                jobs.error.dispose();
+                if (isInterrupt(dumped) && wallInterrupted) {
+                    return timedOut();
+                }
+                if (isInterrupt(dumped) && cpuInterrupted) {
+                    return { result: undefined, error: cpuTimeoutError };
+                }
+                return { result: undefined, error: formatGuestError(dumped) };
+            }
+            const state = ctx.getPromiseState(promiseHandle);
+            if (state.type === "fulfilled") {
+                const result = runGuest(() => ctx.dump(state.value));
+                state.value.dispose();
+                return { result };
+            }
+            if (state.type === "rejected") {
+                const dumped = ctx.dump(state.error);
+                state.error.dispose();
+                if (isInterrupt(dumped) && wallInterrupted) {
+                    return timedOut();
+                }
+                if (isInterrupt(dumped) && cpuInterrupted) {
+                    return { result: undefined, error: cpuTimeoutError };
+                }
+                return { result: undefined, error: formatGuestError(dumped) };
+            }
+            if (bridge.pending === 0) {
+                return {
+                    result: undefined,
+                    error: "Execution stalled: code awaits something that can never settle.",
+                };
+            }
+            const remaining = deadline - Date.now();
+            if (remaining <= 0) {
+                return timedOut();
+            }
+            const settled = await waitForHostOrDeadline(bridge.waitForSettle, remaining);
+            if (settled)
+                armWake(bridge);
+            else {
+                return timedOut();
+            }
+        }
+    };
+    let outcome;
+    try {
+        outcome = await drive();
+    }
+    finally {
+        promiseHandle.dispose();
+    }
+    return finish(outcome);
+}
+//# sourceMappingURL=quickjs-runtime.js.map

package/dist/executors/quickjs-runtime.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"quickjs-runtime.js","sourceRoot":"","sources":["../../src/executors/quickjs-runtime.ts"],"names":[],"mappings":"AAAA,2EAA2E;AAC3E,EAAE;AACF,yEAAyE;AACzE,0EAA0E;AAC1E,0EAA0E;AAC1E,6EAA6E;AAC7E,mEAAmE;AACnE,6EAA6E;AAC7E,mDAAmD;AAEnD,OAAO,EACL,UAAU,GAGX,MAAM,oBAAoB,CAAC;AAU5B,kFAAkF;AAClF,MAAM,CAAC,KAAK,UAAU,cAAc;IAClC,MAAM,UAAU,EAAE,CAAC;AACrB,CAAC;AAED,MAAM,eAAe,GAAG,GAAG,CAAC;AAC5B,8EAA8E;AAC9E,iFAAiF;AACjF,+EAA+E;AAC/E,8EAA8E;AAC9E,2EAA2E;AAC3E,2EAA2E;AAC3E,MAAM,mBAAmB,GAAG,KAAK,CAAC;AAClC,MAAM,mBAAmB,GAAG,OAAO,CAAC;AACpC,2EAA2E;AAC3E,2EAA2E;AAC3E,yEAAyE;AACzE,oCAAoC;AACpC,MAAM,qBAAqB,GAAG,GAAG,GAAG,IAAI,CAAC;AAEzC,SAAS,GAAG,CAAC,GAAY;IACvB,OAAO,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;AAC1D,CAAC;AAED,SAAS,oBAAoB,CAAC,KAAa,EAAE,KAAa;IACxD,IAAI,KAAK,GAAG,CAAC,CAAC;IACd,KAAK,IAAI,KAAK,GAAG,CAAC,EAAE,KAAK,GAAG,KAAK,CAAC,MAAM,EAAE,KAAK,IAAI,CAAC,EAAE,CAAC;QACrD,MAAM,IAAI,GAAG,KAAK,CAAC,UAAU,CAAC,KAAK,CAAC,CAAC;QACrC,IAAI,IAAI,IAAI,IAAI;YAAE,KAAK,IAAI,CAAC,CAAC;aACxB,IAAI,IAAI,IAAI,KAAK;YAAE,KAAK,IAAI,CAAC,CAAC;aAC9B,IACH,IAAI,IAAI,MAAM;YACd,IAAI,IAAI,MAAM;YACd,KAAK,GAAG,CAAC,GAAG,KAAK,CAAC,MAAM;YACxB,KAAK,CAAC,UAAU,CAAC,KAAK,GAAG,CAAC,CAAC,IAAI,MAAM;YACrC,KAAK,CAAC,UAAU,CAAC,KAAK,GAAG,CAAC,CAAC,IAAI,MAAM,EACrC,CAAC;YACD,KAAK,IAAI,CAAC,CAAC;YACX,KAAK,IAAI,CAAC,CAAC;QACb,CAAC;aAAM,CAAC;YACN,KAAK,IAAI,CAAC,CAAC;QACb,CAAC;QACD,IAAI,KAAK,GAAG,KAAK;YAAE,OAAO,IAAI,CAAC;IACjC,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED,sGAAsG;AACtG,MAAM,UAAU,aAAa,CAAC,IAAY;IACxC,IAAI,CAAC,GAAG,IAAI,CAAC,IAAI,EAAE,CAAC;IACpB,MAAM,KAAK,GAAG,kCAAkC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IACzD,IAAI,KAAK;QAAE,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;IAC/B,4EAA4E;IAC5E,0EAA0E;IAC1E,uEAAuE;IACvE,MAAM,IAAI,GAAG,CAAC,CAAC,OAAO,CAAC,uCAAuC,EAAE,EAAE,CAAC,CAAC;IACpE,IAAI,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC;QAAE,OAAO,CAAC,CAAC;IAC5D,OAAO,kBAAkB,CAAC,KAAK,CAAC;AAClC,CAAC;AAED;;;;GAIG;AACH,SAAS,WAAW,CAAC,SAA6B;IAChD,MAAM,KAAK,GAAa;QACtB;;;;MAIE;QACF;;;;GAID;QACC;;KAEC;KACF,CAAC;IACF,KAAK,MAAM,CAAC,IAAI,SAAS,EAAE,CAAC;QAC1B,MAAM,EAAE,GAAG,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;QAClC,KAAK,CAAC,IAAI,CAAC,cAAc,EAAE,mBAAmB,EAAE,IAAI,CAAC,CAAC;IACxD,CAAC;IACD,KAAK,CAAC,IAAI,CAAC,gCAAgC,CAAC,CAAC;IAC7C,OAAO,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AAC1B,CAAC;AAED,uEAAuE;AACvE,SAAS,WAAW,CAAC,MAAe;IAClC,IAAI,CAAC,MAAM,IAAI,OAAO,MAAM,KAAK,QAAQ;QAAE,OAAO,KAAK,CAAC;IACxD,MAAM,CAAC,GAAG,MAA+C,CAAC;IAC1D,OAAO,CAAC,CAAC,IAAI,KAAK,eAAe,IAAI,CAAC,CAAC,OAAO,KAAK,aAAa,CAAC;AACnE,CAAC;AAED,SAAS,gBAAgB,CAAC,MAAe;IACvC,IAAI,MAAM,IAAI,OAAO,MAAM,KAAK,QAAQ,EAAE,CAAC;QACzC,MAAM,CAAC,GAAG,MAA+C,CAAC;QAC1D,IAAI,CAAC,CAAC,OAAO,IAAI,IAAI,EAAE,CAAC;YACtB,OAAO,CAAC,CAAC,IAAI,IAAI,IAAI,IAAI,CAAC,CAAC,IAAI,KAAK,OAAO;gBACzC,CAAC,CAAC,GAAG,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,MAAM,CAAC,CAAC,CAAC,OAAO,CAAC,EAAE;gBAC3C,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC;QACxB,CAAC;IACH,CAAC;IACD,OAAO,OAAO,MAAM,KAAK,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC;AACtE,CAAC;AASD,SAAS,OAAO,CAAC,MAAkB;IACjC,MAAM,CAAC,aAAa,GAAG,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,EAAE;QAC7C,MAAM,CAAC,IAAI,GAAG,OAAO,CAAC;IACxB,CAAC,CAAC,CAAC;AACL,CAAC;AAED,SAAS,qBAAqB,CAC5B,aAA4B,EAC5B,WAAmB;IAEnB,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,EAAE;QAC7B,IAAI,IAAI,GAAG,KAAK,CAAC;QACjB,MAAM,KAAK,GAAG,UAAU,CAAC,GAAG,EAAE;YAC5B,IAAI,GAAG,IAAI,CAAC;YACZ,OAAO,CAAC,KAAK,CAAC,CAAC;QACjB,CAAC,EAAE,WAAW,CAAC,CAAC;QAChB,KAAK,aAAa,CAAC,IAAI,CAAC,GAAG,EAAE;YAC3B,IAAI,IAAI;gBAAE,OAAO;YACjB,IAAI,GAAG,IAAI,CAAC;YACZ,YAAY,CAAC,KAAK,CAAC,CAAC;YACpB,OAAO,CAAC,IAAI,CAAC,CAAC;QAChB,CAAC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;AACL,CAAC;AAED,SAAS,aAAa,CACpB,GAAmB,EACnB,SAA6B,EAC7B,IAAc;IAEd,MAAM,MAAM,GAAe;QACzB,OAAO,EAAE,CAAC;QACV,OAAO,EAAE,KAAK;QACd,IAAI,EAAE,GAAG,EAAE,GAAE,CAAC;QACd,aAAa,EAAE,OAAO,CAAC,OAAO,EAAE;KACjC,CAAC;IACF,OAAO,CAAC,MAAM,CAAC,CAAC;IAEhB,0EAA0E;IAC1E,4EAA4E;IAC5E,mDAAmD;IACnD,IAAI,aAAa,GAAG,CAAC,CAAC;IACtB,IAAI,cAAc,GAAG,KAAK,CAAC;IAC3B,MAAM,KAAK,GAAG,GAAG,CAAC,WAAW,CAAC,OAAO,EAAE,CAAC,CAAC,EAAE,EAAE;QAC3C,IAAI,IAAI,CAAC,MAAM,IAAI,eAAe,EAAE,CAAC;YACnC,IAAI,IAAI,CAAC,MAAM,KAAK,eAAe,EAAE,CAAC;gBACpC,IAAI,CAAC,IAAI,CAAC,wBAAwB,eAAe,WAAW,CAAC,CAAC;YAChE,CAAC;YACD,OAAO;QACT,CAAC;QACD,IAAI,cAAc;YAAE,OAAO;QAC3B,0EAA0E;QAC1E,gEAAgE;QAChE,IAAI,KAAK,GAAG,GAAG,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC;QAC7B,IAAI,KAAK,CAAC,MAAM,GAAG,mBAAmB,EAAE,CAAC;YACvC,KAAK,GAAG,GAAG,KAAK,CAAC,KAAK,CAAC,CAAC,EAAE,mBAAmB,CAAC,oBAAoB,CAAC;QACrE,CAAC;QACD,IAAI,aAAa,GAAG,KAAK,CAAC,MAAM,GAAG,mBAAmB,EAAE,CAAC;YACvD,IAAI,CAAC,IAAI,CAAC,uCAAuC,CAAC,CAAC;YACnD,cAAc,GAAG,IAAI,CAAC;YACtB,OAAO;QACT,CAAC;QACD,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QACjB,aAAa,IAAI,KAAK,CAAC,MAAM,CAAC;IAChC,CAAC,CAAC,CAAC;IACH,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,MAAM,EAAE,OAAO,EAAE,KAAK,CAAC,CAAC;IACxC,KAAK,CAAC,OAAO,EAAE,CAAC;IAEhB,MAAM,MAAM,GAAG,IAAI,GAAG,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC;IAC1D,MAAM,MAAM,GAAG,KAAK,EAClB,EAAU,EACV,EAAU,EACV,QAAgB,EACC,EAAE;QACnB,IAAI,CAAC;YACH,MAAM,QAAQ,GAAG,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;YAChC,MAAM,CAAC,GACL,QAAQ,IAAI,MAAM,CAAC,MAAM,CAAC,QAAQ,CAAC,GAAG,EAAE,EAAE,CAAC;gBACzC,CAAC,CAAC,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC;gBAClB,CAAC,CAAC,SAAS,CAAC;YAChB,IAAI,CAAC,CAAC;gBAAE,MAAM,IAAI,KAAK,CAAC,oBAAoB,EAAE,IAAI,EAAE,EAAE,CAAC,CAAC;YACxD,MAAM,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAc,CAAC;YAC/C,MAAM,KAAK,GAAG,MAAM,CAAC,CAAC,GAAG,IAAI,CAAC,CAAC;YAC/B,IAAI,IAAY,CAAC;YACjB,IAAI,CAAC;gBACH,IAAI,GAAG,IAAI,CAAC,SAAS,CAAC,EAAE,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;YAC7C,CAAC;YAAC,OAAO,GAAG,EAAE,CAAC;gBACb,MAAM,IAAI,KAAK,CACb,oBAAoB,EAAE,IAAI,EAAE,6BAA6B,GAAG,CAAC,GAAG,CAAC,EAAE,CACpE,CAAC;YACJ,CAAC;YACD,IAAI,oBAAoB,CAAC,IAAI,EAAE,qBAAqB,CAAC,EAAE,CAAC;gBACtD,MAAM,IAAI,KAAK,CACb,oBAAoB,EAAE,IAAI,EAAE,gBAAgB,qBAAqB,gCAAgC,CAClG,CAAC;YACJ,CAAC;YACD,OAAO,IAAI,CAAC;QACd,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,OAAO,IAAI,CAAC,SAAS,CAAC,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;QACxD,CAAC;IACH,CAAC,CAAC;IAEF,MAAM,MAAM,GAAG,GAAG,CAAC,WAAW,CAAC,QAAQ,EAAE,CAAC,GAAG,EAAE,GAAG,EAAE,KAAK,EAAE,EAAE;QAC3D,MAAM,EAAE,GAAG,GAAG,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC;QAC9B,MAAM,EAAE,GAAG,GAAG,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC;QAC9B,MAAM,QAAQ,GAAG,GAAG,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC;QACtC,MAAM,QAAQ,GAA2B,GAAG,CAAC,UAAU,EAAE,CAAC;QAC1D,MAAM,CAAC,OAAO,EAAE,CAAC;QACjB,KAAK,MAAM,CAAC,EAAE,EAAE,EAAE,EAAE,QAAQ,CAAC,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE;YAC1C,MAAM,CAAC,OAAO,EAAE,CAAC;YACjB,IAAI,MAAM,CAAC,OAAO,EAAE,CAAC;gBACnB,yEAAyE;gBACzE,QAAQ,CAAC,OAAO,EAAE,CAAC;YACrB,CAAC;iBAAM,CAAC;gBACN,MAAM,CAAC,GAAG,GAAG,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC;gBAC9B,QAAQ,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC;gBACpB,CAAC,CAAC,OAAO,EAAE,CAAC;YACd,CAAC;YACD,MAAM,CAAC,IAAI,EAAE,CAAC;QAChB,CAAC,CAAC,CAAC;QACH,OAAO,QAAQ,CAAC,MAAM,CAAC;IACzB,CAAC,CAAC,CAAC;IACH,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,MAAM,EAAE,QAAQ,EAAE,MAAM,CAAC,CAAC;IAC1C,MAAM,CAAC,OAAO,EAAE,CAAC;IAEjB,OAAO,MAAM,CAAC;AAChB,CAAC;AAWD;;;;GAIG;AACH,MAAM,CAAC,KAAK,UAAU,cAAc,CAClC,IAAY,EACZ,SAA6B,EAC7B,OAA8B;IAE1B,MAAM,EAAE,SAAS,EAAE,SAAS,EAAE,gBAAgB,EAAE,iBAAiB,EAAE,GACjE,OAAO,CAAC;IACV,MAAM,OAAO,GAAG,MAAM,UAAU,EAAE,CAAC;IACnC,MAAM,GAAG,GAAG,OAAO,CAAC,UAAU,EAAE,CAAC;IACjC,MAAM,QAAQ,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,SAAS,CAAC;IACxC,MAAM,YAAY,GAAG,6BAA6B,SAAS,KAAK,CAAC;IACjE,MAAM,eAAe,GAAG,0BAA0B,SAAS,sBAAsB,CAAC;IAClF,IAAI,SAAS,GAAG,CAAC,CAAC;IAClB,IAAI,cAAc,GAAG,CAAC,CAAC;IACvB,IAAI,OAAO,GAAG,KAAK,CAAC;IACpB,IAAI,cAAc,GAAG,KAAK,CAAC;IAC3B,IAAI,eAAe,GAAG,KAAK,CAAC;IAC5B,MAAM,QAAQ,GAAG,CAAI,SAAkB,EAAK,EAAE;QAC5C,cAAc,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QAC5B,OAAO,GAAG,IAAI,CAAC;QACf,IAAI,CAAC;YACH,OAAO,SAAS,EAAE,CAAC;QACrB,CAAC;gBAAS,CAAC;YACT,SAAS,IAAI,IAAI,CAAC,GAAG,EAAE,GAAG,cAAc,CAAC;YACzC,OAAO,GAAG,KAAK,CAAC;QAClB,CAAC;IACH,CAAC,CAAC;IACF,GAAG,CAAC,OAAO,CAAC,cAAc,CAAC,gBAAgB,CAAC,CAAC;IAC7C,GAAG,CAAC,OAAO,CAAC,eAAe,CAAC,iBAAiB,CAAC,CAAC;IAC/C,GAAG,CAAC,OAAO,CAAC,mBAAmB,CAAC,GAAG,EAAE;QACnC,IAAI,CAAC,OAAO;YAAE,OAAO,KAAK,CAAC;QAC3B,eAAe,GAAG,IAAI,CAAC,GAAG,EAAE,IAAI,QAAQ,CAAC;QACzC,cAAc;YACZ,SAAS,GAAG,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,cAAc,CAAC,IAAI,SAAS,CAAC;QACzD,OAAO,eAAe,IAAI,cAAc,CAAC;IAC3C,CAAC,CAAC,CAAC;IAEH,MAAM,IAAI,GAAa,EAAE,CAAC;IAC1B,MAAM,MAAM,GAAG,aAAa,CAAC,GAAG,EAAE,SAAS,EAAE,IAAI,CAAC,CAAC;IACnD,MAAM,MAAM,GAAG,CAA0B,CAAI,EAAK,EAAE;QAClD,MAAM,CAAC,OAAO,GAAG,IAAI,CAAC;QACtB,oEAAoE;QACpE,qEAAqE;QACrE,mEAAmE;QACnE,oEAAoE;QACpE,gEAAgE;QAChE,kEAAkE;QAClE,sEAAsE;QACtE,qEAAqE;QACrE,IAAI,MAAM,CAAC,OAAO,KAAK,CAAC;YAAE,GAAG,CAAC,OAAO,EAAE,CAAC;aACnC,CAAC;YACJ,KAAK,CAAC,KAAK,IAAI,EAAE;gBACf,OAAO,CAAC,MAAM,CAAC,CAAC;gBAChB,OAAO,MAAM,CAAC,OAAO,GAAG,CAAC,EAAE,CAAC;oBAC1B,MAAM,MAAM,CAAC,aAAa,CAAC;oBAC3B,OAAO,CAAC,MAAM,CAAC,CAAC;gBAClB,CAAC;gBACD,GAAG,CAAC,OAAO,EAAE,CAAC;YAChB,CAAC,CAAC,EAAE,CAAC;QACP,CAAC;QACD,OAAO,IAAI,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,GAAG,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC;IAC9C,CAAC,CAAC;IACF,MAAM,IAAI,GAAG,CAAC,KAAa,EAAiB,EAAE,CAC5C,MAAM,CAAC,EAAE,MAAM,EAAE,SAAS,EAAE,KAAK,EAAE,CAAC,CAAC;IACvC,MAAM,QAAQ,GAAG,GAA2B,EAAE,CAAC,CAAC;QAC9C,MAAM,EAAE,SAAS;QACjB,KAAK,EAAE,YAAY;QACnB,QAAQ,EAAE,IAAI;KACf,CAAC,CAAC;IAEH,MAAM,KAAK,GAAG,QAAQ,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,QAAQ,CAAC,WAAW,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC;IACnE,IAAI,KAAK,CAAC,KAAK,EAAE,CAAC;QAChB,MAAM,MAAM,GAAG,gBAAgB,CAAC,GAAG,CAAC,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC;QACvD,KAAK,CAAC,KAAK,CAAC,OAAO,EAAE,CAAC;QACtB,IAAI,eAAe;YAAE,OAAO,MAAM,CAAC,QAAQ,EAAE,CAAC,CAAC;QAC/C,IAAI,cAAc;YAAE,OAAO,IAAI,CAAC,eAAe,CAAC,CAAC;QACjD,OAAO,IAAI,CAAC,yBAAyB,MAAM,EAAE,CAAC,CAAC;IACjD,CAAC;IACD,KAAK,CAAC,KAAK,CAAC,OAAO,EAAE,CAAC;IAEtB,MAAM,SAAS,GAAG,QAAQ,CAAC,GAAG,EAAE,CAC9B,GAAG,CAAC,QAAQ,CAAC,sBAAsB,aAAa,CAAC,IAAI,CAAC,QAAQ,CAAC,CAChE,CAAC;IACF,IAAI,SAAS,CAAC,KAAK,EAAE,CAAC;QACpB,MAAM,MAAM,GAAG,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC;QACzC,SAAS,CAAC,KAAK,CAAC,OAAO,EAAE,CAAC;QAC1B,IAAI,WAAW,CAAC,MAAM,CAAC,IAAI,eAAe;YAAE,OAAO,MAAM,CAAC,QAAQ,EAAE,CAAC,CAAC;QACtE,IAAI,WAAW,CAAC,MAAM,CAAC,IAAI,cAAc;YAAE,OAAO,IAAI,CAAC,eAAe,CAAC,CAAC;QACxE,OAAO,IAAI,CAAC,gBAAgB,CAAC,MAAM,CAAC,CAAC,CAAC;IACxC,CAAC;IACD,MAAM,aAAa,GAAG,SAAS,CAAC,KAAK,CAAC;IAEtC,mEAAmE;IACnE,oEAAoE;IACpE,0EAA0E;IAC1E,MAAM,KAAK,GAAG,KAAK,IAAqC,EAAE;QACxD,SAAS,CAAC;YACR,IAAI,IAAI,CAAC,GAAG,EAAE,IAAI,QAAQ,EAAE,CAAC;gBAC3B,OAAO,QAAQ,EAAE,CAAC;YACpB,CAAC;YACD,MAAM,IAAI,GAAG,QAAQ,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,OAAO,CAAC,kBAAkB,EAAE,CAAC,CAAC;YAC9D,IAAI,IAAI,CAAC,KAAK,EAAE,CAAC;gBACf,MAAM,MAAM,GAAG,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;gBACpC,IAAI,CAAC,KAAK,CAAC,OAAO,EAAE,CAAC;gBACrB,IAAI,WAAW,CAAC,MAAM,CAAC,IAAI,eAAe,EAAE,CAAC;oBAC3C,OAAO,QAAQ,EAAE,CAAC;gBACpB,CAAC;gBACD,IAAI,WAAW,CAAC,MAAM,CAAC,IAAI,cAAc,EAAE,CAAC;oBAC1C,OAAO,EAAE,MAAM,EAAE,SAAS,EAAE,KAAK,EAAE,eAAe,EAAE,CAAC;gBACvD,CAAC;gBACD,OAAO,EAAE,MAAM,EAAE,SAAS,EAAE,KAAK,EAAE,gBAAgB,CAAC,MAAM,CAAC,EAAE,CAAC;YAChE,CAAC;YACD,MAAM,KAAK,GAAG,GAAG,CAAC,eAAe,CAAC,aAAa,CAAC,CAAC;YACjD,IAAI,KAAK,CAAC,IAAI,KAAK,WAAW,EAAE,CAAC;gBAC/B,MAAM,MAAM,GAAY,QAAQ,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC;gBAC9D,KAAK,CAAC,KAAK,CAAC,OAAO,EAAE,CAAC;gBACtB,OAAO,EAAE,MAAM,EAAE,CAAC;YACpB,CAAC;YACD,IAAI,KAAK,CAAC,IAAI,KAAK,UAAU,EAAE,CAAC;gBAC9B,MAAM,MAAM,GAAG,GAAG,CAAC,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;gBACrC,KAAK,CAAC,KAAK,CAAC,OAAO,EAAE,CAAC;gBACtB,IAAI,WAAW,CAAC,MAAM,CAAC,IAAI,eAAe,EAAE,CAAC;oBAC3C,OAAO,QAAQ,EAAE,CAAC;gBACpB,CAAC;gBACD,IAAI,WAAW,CAAC,MAAM,CAAC,IAAI,cAAc,EAAE,CAAC;oBAC1C,OAAO,EAAE,MAAM,EAAE,SAAS,EAAE,KAAK,EAAE,eAAe,EAAE,CAAC;gBACvD,CAAC;gBACD,OAAO,EAAE,MAAM,EAAE,SAAS,EAAE,KAAK,EAAE,gBAAgB,CAAC,MAAM,CAAC,EAAE,CAAC;YAChE,CAAC;YACD,IAAI,MAAM,CAAC,OAAO,KAAK,CAAC,EAAE,CAAC;gBACzB,OAAO;oBACL,MAAM,EAAE,SAAS;oBACjB,KAAK,EACH,iEAAiE;iBACpE,CAAC;YACJ,CAAC;YACD,MAAM,SAAS,GAAG,QAAQ,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;YACxC,IAAI,SAAS,IAAI,CAAC,EAAE,CAAC;gBACnB,OAAO,QAAQ,EAAE,CAAC;YACpB,CAAC;YACD,MAAM,OAAO,GAAG,MAAM,qBAAqB,CACzC,MAAM,CAAC,aAAa,EACpB,SAAS,CACV,CAAC;YACF,IAAI,OAAO;gBAAE,OAAO,CAAC,MAAM,CAAC,CAAC;iBACxB,CAAC;gBACJ,OAAO,QAAQ,EAAE,CAAC;YACpB,CAAC;QACH,CAAC;IACH,CAAC,CAAC;IAEF,IAAI,OAA+B,CAAC;IACpC,IAAI,CAAC;QACH,OAAO,GAAG,MAAM,KAAK,EAAE,CAAC;IAC1B,CAAC;YAAS,CAAC;QACT,aAAa,CAAC,OAAO,EAAE,CAAC;IAC1B,CAAC;IACD,OAAO,MAAM,CAAC,OAAO,CAAC,CAAC;AAC7B,CAAC"}

package/dist/executors/quickjs.d.ts

@@ -1,26 +1,31 @@
-import type { Executor } from "../types.js";
+import type { AdmittingExecutor } from "../types.js";
+export { normalizeCode } from "./quickjs-runtime.js";
 export interface QuickJsExecutorOptions {
     /**
-     * Wall-clock budget for the whole execution, host tool calls included
-     * (same wall-clock-budget semantics as codemode's DynamicWorkerExecutor).
-     * Default 30s — intentionally tighter than codemode's 60s default: connecta
-     * sandbox code is tool-call glue, not compute, so a shorter leash surfaces
-     * hung downstreams sooner. Raise it here if a workload legitimately needs it.
+     * Wall-clock budget for the whole execution, host tool calls included.
+     * Default 30s.
      */
     timeoutMs?: number;
-    /** Guest heap limit. Default 64 MiB. */
+    /**
+     * Cumulative time spent synchronously driving guest JavaScript. Host waits do
+     * not consume it. Default 250ms.
+     */
+    cpuTimeMs?: number;
+    /** Guest heap limit per child execution. Default 64 MiB. */
     memoryLimitBytes?: number;
     /** Guest stack limit. Default 1 MiB. */
     maxStackSizeBytes?: number;
+    /** Maximum simultaneous executions/child processes. Default 1. */
+    concurrency?: number;
+    /** Maximum callers waiting before provider construction. Default 32. */
+    maxQueueSize?: number;
+    /** Maximum admission wait. Default 5s. */
+    queueTimeoutMs?: number;
 }
-/** Normalize model output into an async-arrow expression: strip markdown fences, wrap bare bodies. */
-export declare function normalizeCode(code: string): string;
 /**
- * Sandbox executor for Node (or any JS runtime) built on quickjs-emscripten.
- * Suits connecta's execute_code: code is tool-call glue, so an interpreter's
- * speed is irrelevant while its isolation (plain WASM, zero native deps) is
- * the point. One fresh QuickJS context per execution; the WASM module itself
- * is cached across calls by quickjs-emscripten.
+ * Bounded Node QuickJS executor. Admission is acquired before connecta builds
+ * providers; one lease maps to one child and carries execution, avoiding a
+ * double-acquire deadlock at concurrency 1.
  */
-export declare function quickJsExecutor(options?: QuickJsExecutorOptions): Executor;
+export declare function quickJsExecutor(options?: QuickJsExecutorOptions): AdmittingExecutor;
 //# sourceMappingURL=quickjs.d.ts.map

package/dist/executors/quickjs.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"quickjs.d.ts","sourceRoot":"","sources":["../../src/executors/quickjs.ts"],"names":[],"mappings":"AAgBA,OAAO,KAAK,EAAiB,QAAQ,EAAoB,MAAM,aAAa,CAAC;AAE7E,MAAM,WAAW,sBAAsB;IACrC;;;;;;OAMG;IACH,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,wCAAwC;IACxC,gBAAgB,CAAC,EAAE,MAAM,CAAC;IAC1B,wCAAwC;IACxC,iBAAiB,CAAC,EAAE,MAAM,CAAC;CAC5B;AAgBD,sGAAsG;AACtG,wBAAgB,aAAa,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,CAUlD;AAwJD;;;;;;GAMG;AACH,wBAAgB,eAAe,CAC7B,OAAO,GAAE,sBAA2B,GACnC,QAAQ,CAiIV"}
+{"version":3,"file":"quickjs.d.ts","sourceRoot":"","sources":["../../src/executors/quickjs.ts"],"names":[],"mappings":"AAUA,OAAO,KAAK,EACV,iBAAiB,EAIlB,MAAM,aAAa,CAAC;AAerB,OAAO,EAAE,aAAa,EAAE,MAAM,sBAAsB,CAAC;AAErD,MAAM,WAAW,sBAAsB;IACrC;;;OAGG;IACH,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB;;;OAGG;IACH,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,4DAA4D;IAC5D,gBAAgB,CAAC,EAAE,MAAM,CAAC;IAC1B,wCAAwC;IACxC,iBAAiB,CAAC,EAAE,MAAM,CAAC;IAC3B,kEAAkE;IAClE,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,wEAAwE;IACxE,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,0CAA0C;IAC1C,cAAc,CAAC,EAAE,MAAM,CAAC;CACzB;AA6oBD;;;;GAIG;AACH,wBAAgB,eAAe,CAC7B,OAAO,GAAE,sBAA2B,GACnC,iBAAiB,CAEnB"}