edict-lang 1.2.0 → 1.6.0

package/dist/codegen/imports.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"imports.js","sourceRoot":"","sources":["../../src/codegen/imports.ts"],"names":[],"mappings":"AAAA,gFAAgF;AAChF,yEAAyE;AACzE,gFAAgF;AAChF,4CAA4C;AAE5C,OAAO,QAAQ,MAAM,UAAU,CAAC;AAEhC,OAAO,EAAE,eAAe,EAAE,MAAM,YAAY,CAAC;AAW7C,gFAAgF;AAChF,aAAa;AACb,gFAAgF;AAEhF;;;;;;GAMG;AACH,MAAM,UAAU,qBAAqB,CACjC,MAAmB,EACnB,aAA0B;IAE1B,MAAM,IAAI,GAAG,IAAI,GAAG,EAAqB,CAAC;IAE1C,2BAA2B;IAC3B,KAAK,MAAM,IAAI,IAAI,aAAa,EAAE,CAAC;QAC/B,IAAI,CAAC,GAAG,CAAC,IAAI,EAAE,EAAE,UAAU,EAAE,EAAE,EAAE,UAAU,EAAE,QAAQ,CAAC,GAAG,EAAE,CAAC,CAAC;IACjE,CAAC;IAED,+EAA+E;IAC/E,KAAK,IAAI,IAAI,GAAG,CAAC,EAAE,IAAI,GAAG,CAAC,EAAE,IAAI,EAAE,EAAE,CAAC;QAClC,KAAK,MAAM,GAAG,IAAI,MAAM,CAAC,WAAW,EAAE,CAAC;YACnC,IAAI,GAAG,CAAC,IAAI,KAAK,IAAI;gBAAE,SAAS;YAChC,cAAc,CAAC,GAAG,CAAC,IAAI,EAAE,GAAG,EAAE,IAAI,EAAE,aAAa,CAAC,CAAC;QACvD,CAAC;IACL,CAAC;IAED,OAAO,IAAI,CAAC;AAChB,CAAC;AAED,gFAAgF;AAChF,mBAAmB;AACnB,gFAAgF;AAEhF,SAAS,cAAc,CACnB,KAAmB,EACnB,WAAwB,EACxB,IAA4B,EAC5B,aAA0B;IAE1B,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;QACvB,aAAa,CAAC,IAAI,EAAE,WAAW,EAAE,IAAI,EAAE,aAAa,CAAC,CAAC;IAC1D,CAAC;AACL,CAAC;AAED,SAAS,aAAa,CAClB,IAAgB,EAChB,WAAwB,EACxB,IAA4B,EAC5B,aAA0B;IAE1B,IAAI,IAAI,CAAC,IAAI,KAAK,MAAM,IAAI,IAAI,CAAC,EAAE,CAAC,IAAI,KAAK,OAAO,IAAI,aAAa,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC,IAAI,CAAC,EAAE,CAAC;QACtF,MAAM,IAAI,GAAG,IAAI,CAAC,EAAE,CAAC,IAAI,CAAC;QAC1B,mCAAmC;QACnC,MAAM,UAAU,GAAG,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC,iBAAiB,CAAC,GAAG,EAAE,WAAW,EAAE,IAAI,CAAC,CAAC,CAAC;QACnF,6DAA6D;QAC7D,mFAAmF;QACnF,MAAM,QAAQ,GAAG,UAAU,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,KAAK,QAAQ,CAAC,GAAG,CAAC,CAAC;QAC1D,IAAI,QAAQ,EAAE,CAAC;YACX,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,UAAU,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;gBACzC,IAAI,UAAU,CAAC,CAAC,CAAC,KAAK,QAAQ,CAAC,GAAG,IAAI,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,IAAI,KAAK,SAAS;oBAClE,OAAQ,IAAI,CAAC,IAAI,CAAC,CAAC,CAAsC,CAAC,KAAK,KAAK,QAAQ,EAAE,CAAC;oBAC/E,UAAU,CAAC,CAAC,CAAC,GAAG,QAAQ,CAAC,GAAG,CAAC;gBACjC,CAAC;YACL,CAAC;QACL,CAAC;QACD,8DAA8D;QAC9D,4FAA4F;QAC5F,MAAM,cAAc,GAAG,WAAW,CAAC,IAAI,CAAC,MAAM,GAAG,CAAC;YAC9C,CAAC,CAAC,WAAW,CAAC,IAAI,CAAC,WAAW,CAAC,IAAI,CAAC,MAAM,GAAG,CAAC,CAAC;YAC/C,CAAC,CAAC,IAAI,CAAC;QACX,MAAM,UAAU,GAAG,gBAAgB,CAAC,cAAc,EAAE,IAAI,CAAC,IAAI,WAAW,CAAC,UAAU;YAC/E,CAAC,CAAC,eAAe,CAAC,WAAW,CAAC,UAAU,CAAC;YACzC,CAAC,CAAC,QAAQ,CAAC,GAAG,CAAC;QACnB,IAAI,CAAC,GAAG,CAAC,IAAI,EAAE,EAAE,UAAU,EAAE,UAAU,EAAE,CAAC,CAAC;IAC/C,CAAC;IAED,+BAA+B;IAC/B,QAAQ,IAAI,CAAC,IAAI,EAAE,CAAC;QAChB,KAAK,OAAO;YAAE,aAAa,CAAC,IAAI,CAAC,IAAI,EAAE,WAAW,EAAE,IAAI,EAAE,aAAa,CAAC,CAAC;YAAC,aAAa,CAAC,IAAI,CAAC,KAAK,EAAE,WAAW,EAAE,IAAI,EAAE,aAAa,CAAC,CAAC;YAAC,MAAM;QAC7I,KAAK,MAAM;YAAE,aAAa,CAAC,IAAI,CAAC,OAAO,EAAE,WAAW,EAAE,IAAI,EAAE,aAAa,CAAC,CAAC;YAAC,MAAM;QAClF,KAAK,MAAM;YAAE,aAAa,CAAC,IAAI,CAAC,EAAE,EAAE,WAAW,EAAE,IAAI,EAAE,aAAa,CAAC,CAAC;YAAC,KAAK,MAAM,CAAC,IAAI,IAAI,CAAC,IAAI;gBAAE,aAAa,CAAC,CAAC,EAAE,WAAW,EAAE,IAAI,EAAE,aAAa,CAAC,CAAC;YAAC,MAAM;QAC5J,KAAK,IAAI;YAAE,aAAa,CAAC,IAAI,CAAC,SAAS,EAAE,WAAW,EAAE,IAAI,EAAE,aAAa,CAAC,CAAC;YAAC,cAAc,CAAC,IAAI,CAAC,IAAI,EAAE,WAAW,EAAE,IAAI,EAAE,aAAa,CAAC,CAAC;YAAC,IAAI,IAAI,CAAC,IAAI;gBAAE,cAAc,CAAC,IAAI,CAAC,IAAI,EAAE,WAAW,EAAE,IAAI,EAAE,aAAa,CAAC,CAAC;YAAC,MAAM;QAC3N,KAAK,KAAK;YAAE,aAAa,CAAC,IAAI,CAAC,KAAK,EAAE,WAAW,EAAE,IAAI,EAAE,aAAa,CAAC,CAAC;YAAC,MAAM;QAC/E,KAAK,OAAO;YAAE,cAAc,CAAC,IAAI,CAAC,IAAI,EAAE,WAAW,EAAE,IAAI,EAAE,aAAa,CAAC,CAAC;YAAC,MAAM;QACjF,KAAK,OAAO;YAAE,aAAa,CAAC,IAAI,CAAC,MAAM,EAAE,WAAW,EAAE,IAAI,EAAE,aAAa,CAAC,CAAC;YAAC,KAAK,MAAM,GAAG,IAAI,IAAI,CAAC,IAAI;gBAAE,cAAc,CAAC,GAAG,CAAC,IAAI,EAAE,WAAW,EAAE,IAAI,EAAE,aAAa,CAAC,CAAC;YAAC,MAAM;QAC3K,KAAK,QAAQ;YAAE,cAAc,CAAC,IAAI,CAAC,IAAI,EAAE,WAAW,EAAE,IAAI,EAAE,aAAa,CAAC,CAAC;YAAC,MAAM;QAClF,KAAK,OAAO;YAAE,KAAK,MAAM,EAAE,IAAI,IAAI,CAAC,QAAQ;gBAAE,aAAa,CAAC,EAAE,EAAE,WAAW,EAAE,IAAI,EAAE,aAAa,CAAC,CAAC;YAAC,MAAM;QACzG,KAAK,aAAa;YAAE,KAAK,MAAM,CAAC,IAAI,IAAI,CAAC,MAAM;gBAAE,aAAa,CAAC,CAAC,CAAC,KAAK,EAAE,WAAW,EAAE,IAAI,EAAE,aAAa,CAAC,CAAC;YAAC,MAAM;QACjH,KAAK,QAAQ;YAAE,aAAa,CAAC,IAAI,CAAC,MAAM,EAAE,WAAW,EAAE,IAAI,EAAE,aAAa,CAAC,CAAC;YAAC,MAAM;QACnF,OAAO,CAAC,CAAC,MAAM;IACnB,CAAC;AACL,CAAC;AAED;;;GAGG;AACH,SAAS,iBAAiB,CACtB,IAAgB,EAChB,WAAwB,EACxB,IAA6B;IAE7B,IAAI,IAAI,CAAC,IAAI,KAAK,SAAS,EAAE,CAAC;QAC1B,IAAI,IAAI,CAAC,IAAI;YAAE,OAAO,eAAe,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACjD,IAAI,OAAO,IAAI,CAAC,KAAK,KAAK,QAAQ,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,IAAI,CAAC,KAAK,CAAC;YAAE,OAAO,QAAQ,CAAC,GAAG,CAAC;QACzF,OAAO,QAAQ,CAAC,GAAG,CAAC;IACxB,CAAC;IACD,IAAI,IAAI,CAAC,IAAI,KAAK,OAAO,EAAE,CAAC;QACxB,MAAM,KAAK,GAAG,WAAW,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,IAAI,CAAC,IAAI,CAAC,CAAC;QACjE,IAAI,KAAK;YAAE,OAAO,eAAe,CAAC,KAAK,CAAC,IAAK,CAAC,CAAC;QAC/C,OAAO,QAAQ,CAAC,GAAG,CAAC;IACxB,CAAC;IACD,IAAI,IAAI,CAAC,IAAI,KAAK,OAAO,EAAE,CAAC;QACxB,8CAA8C;QAC9C,MAAM,MAAM,GAAG,CAAC,IAAI,EAAE,IAAI,EAAE,GAAG,EAAE,GAAG,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,SAAS,CAAC,CAAC;QAC1E,IAAI,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAC;YAAE,OAAO,QAAQ,CAAC,GAAG,CAAC;QAClD,OAAO,iBAAiB,CAAC,IAAI,CAAC,IAAI,EAAE,WAAW,EAAE,IAAI,CAAC,CAAC;IAC3D,CAAC;IACD,IAAI,IAAI,CAAC,IAAI,KAAK,MAAM,IAAI,IAAI,CAAC,EAAE,CAAC,IAAI,KAAK,OAAO,EAAE,CAAC;QACnD,iDAAiD;QACjD,IAAI,IAAI,EAAE,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC,IAAI,CAAC,EAAE,CAAC;YAC1B,OAAO,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC,IAAI,CAAE,CAAC,UAAU,CAAC;QAC9C,CAAC;QACD,gDAAgD;QAChD,OAAO,QAAQ,CAAC,GAAG,CAAC;IACxB,CAAC;IACD,OAAO,QAAQ,CAAC,GAAG,CAAC;AACxB,CAAC;AAED;;GAEG;AACH,SAAS,gBAAgB,CAAC,MAAqC,EAAE,MAAkB;IAC/E,IAAI,CAAC,MAAM;QAAE,OAAO,KAAK,CAAC;IAC1B,IAAI,MAAM,KAAK,MAAM;QAAE,OAAO,IAAI,CAAC;IACnC,QAAQ,MAAM,CAAC,IAAI,EAAE,CAAC;QAClB,KAAK,MAAM,CAAC,CAAC,OAAO,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,gBAAgB,CAAC,CAAC,EAAE,MAAM,CAAC,CAAC,IAAI,gBAAgB,CAAC,MAAM,CAAC,EAAE,EAAE,MAAM,CAAC,CAAC;QAC9G,KAAK,OAAO,CAAC,CAAC,OAAO,gBAAgB,CAAC,MAAM,CAAC,IAAI,EAAE,MAAM,CAAC,IAAI,gBAAgB,CAAC,MAAM,CAAC,KAAK,EAAE,MAAM,CAAC,CAAC;QACrG,KAAK,MAAM,CAAC,CAAC,OAAO,gBAAgB,CAAC,MAAM,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;QAC7D,OAAO,CAAC,CAAC,OAAO,KAAK,CAAC;IAC1B,CAAC;AACL,CAAC"}

package/dist/codegen/node-host-adapter.d.ts

@@ -0,0 +1,35 @@
+import type { EdictHostAdapter } from "./host-adapter.js";
+/**
+ * Node.js implementation of the Edict host adapter.
+ *
+ * Uses Node.js-specific APIs for crypto, HTTP, and filesystem operations.
+ * This is the default adapter used when no adapter is explicitly specified.
+ */
+export declare class NodeHostAdapter implements EdictHostAdapter {
+    private readonly sandboxDir?;
+    constructor(sandboxDir?: string);
+    sha256(data: string): string;
+    md5(data: string): string;
+    hmac(algo: string, key: string, data: string): string;
+    fetch(url: string, method: string, body?: string): {
+        ok: boolean;
+        data: string;
+    };
+    readFile(path: string): {
+        ok: true;
+        data: string;
+    } | {
+        ok: false;
+        error: string;
+    };
+    writeFile(path: string, content: string): {
+        ok: true;
+    } | {
+        ok: false;
+        error: string;
+    };
+    env(name: string): string;
+    args(): string[];
+    exit(code: number): never;
+}
+//# sourceMappingURL=node-host-adapter.d.ts.map

package/dist/codegen/node-host-adapter.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"node-host-adapter.d.ts","sourceRoot":"","sources":["../../src/codegen/node-host-adapter.ts"],"names":[],"mappings":"AAaA,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,mBAAmB,CAAC;AAuE1D;;;;;GAKG;AACH,qBAAa,eAAgB,YAAW,gBAAgB;IACpD,OAAO,CAAC,QAAQ,CAAC,UAAU,CAAC,CAAS;gBAEzB,UAAU,CAAC,EAAE,MAAM;IAM/B,MAAM,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM;IAI5B,GAAG,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM;IAIzB,IAAI,CAAC,IAAI,EAAE,MAAM,EAAE,GAAG,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,GAAG,MAAM;IAUrD,KAAK,CAAC,GAAG,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,MAAM,GAAG;QAAE,EAAE,EAAE,OAAO,CAAC;QAAC,IAAI,EAAE,MAAM,CAAA;KAAE;IAMhF,QAAQ,CAAC,IAAI,EAAE,MAAM,GAAG;QAAE,EAAE,EAAE,IAAI,CAAC;QAAC,IAAI,EAAE,MAAM,CAAA;KAAE,GAAG;QAAE,EAAE,EAAE,KAAK,CAAC;QAAC,KAAK,EAAE,MAAM,CAAA;KAAE;IAoBjF,SAAS,CAAC,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,GAAG;QAAE,EAAE,EAAE,IAAI,CAAA;KAAE,GAAG;QAAE,EAAE,EAAE,KAAK,CAAC;QAAC,KAAK,EAAE,MAAM,CAAA;KAAE;IAiBrF,GAAG,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM;IAIzB,IAAI,IAAI,MAAM,EAAE;IAIhB,IAAI,CAAC,IAAI,EAAE,MAAM,GAAG,KAAK;CAG5B"}

package/dist/codegen/node-host-adapter.js

@@ -0,0 +1,155 @@
+// =============================================================================
+// Node.js Host Adapter — platform-specific operations for Node.js runtime
+// =============================================================================
+// Extracted from the monolithic host-functions.ts. Uses Node.js APIs:
+// - node:crypto   (createHash, createHmac)
+// - node:child_process (execFileSync for sync HTTP)
+// - node:fs       (readFileSync, writeFileSync)
+// - node:path     (resolve)
+import { createHash, createHmac } from "node:crypto";
+import { execFileSync } from "node:child_process";
+import { readFileSync, writeFileSync } from "node:fs";
+import { resolve as pathResolve } from "node:path";
+/** Max response body size (1 MB) — prevents WASM memory overflow. */
+const HTTP_MAX_RESPONSE_BYTES = 1_048_576;
+/** Max file size (1 MB) — prevents WASM memory overflow. */
+const IO_MAX_FILE_BYTES = 1_048_576;
+/**
+ * Validate that a resolved path is inside the sandbox directory.
+ * Returns the resolved absolute path on success, or an error string.
+ */
+function validateSandboxPath(rawPath, sandboxDir) {
+    const resolved = pathResolve(sandboxDir, rawPath);
+    if (!resolved.startsWith(sandboxDir)) {
+        return { ok: false, error: `path_outside_sandbox: ${rawPath}` };
+    }
+    return { ok: true, path: resolved };
+}
+/**
+ * Perform a synchronous HTTP request by spawning a child Node process.
+ * Returns `{ok, data}` — ok=true for 2xx responses, ok=false for errors.
+ */
+function syncFetch(url, method, body) {
+    const script = `
+        (async () => {
+            try {
+                const url = process.env.__EDICT_URL;
+                const method = process.env.__EDICT_METHOD;
+                const body = process.env.__EDICT_BODY;
+                const opts = { method };
+                if (body !== undefined && body !== "") {
+                    opts.headers = {"Content-Type": "application/json"};
+                    opts.body = body;
+                }
+                const res = await fetch(url, opts);
+                let text = await res.text();
+                if (text.length > ${HTTP_MAX_RESPONSE_BYTES}) text = text.slice(0, ${HTTP_MAX_RESPONSE_BYTES});
+                if (!res.ok) {
+                    process.stdout.write(JSON.stringify({ok: false, data: res.status + " " + text}));
+                } else {
+                    process.stdout.write(JSON.stringify({ok: true, data: text}));
+                }
+            } catch (e) {
+                process.stdout.write(JSON.stringify({ok: false, data: e.message || String(e)}));
+            }
+        })();
+    `;
+    const env = {
+        ...process.env,
+        __EDICT_URL: url,
+        __EDICT_METHOD: method,
+    };
+    if (body !== undefined) {
+        env.__EDICT_BODY = body;
+    }
+    try {
+        const stdout = execFileSync(process.execPath, ["-e", script], {
+            timeout: 10_000,
+            env,
+            maxBuffer: HTTP_MAX_RESPONSE_BYTES + 1024, // room for JSON framing
+        });
+        return JSON.parse(stdout.toString("utf-8"));
+    }
+    catch {
+        return { ok: false, data: "Request timed out or process error" };
+    }
+}
+/**
+ * Node.js implementation of the Edict host adapter.
+ *
+ * Uses Node.js-specific APIs for crypto, HTTP, and filesystem operations.
+ * This is the default adapter used when no adapter is explicitly specified.
+ */
+export class NodeHostAdapter {
+    sandboxDir;
+    constructor(sandboxDir) {
+        this.sandboxDir = sandboxDir;
+    }
+    // ── Crypto ──────────────────────────────────────────────────────────
+    sha256(data) {
+        return createHash("sha256").update(data).digest("hex");
+    }
+    md5(data) {
+        return createHash("md5").update(data).digest("hex");
+    }
+    hmac(algo, key, data) {
+        try {
+            return createHmac(algo, key).update(data).digest("hex");
+        }
+        catch {
+            return ""; // invalid algorithm → empty string
+        }
+    }
+    // ── HTTP ────────────────────────────────────────────────────────────
+    fetch(url, method, body) {
+        return syncFetch(url, method, body);
+    }
+    // ── IO ──────────────────────────────────────────────────────────────
+    readFile(path) {
+        if (!this.sandboxDir) {
+            return { ok: false, error: "filesystem_not_configured" };
+        }
+        const validation = validateSandboxPath(path, this.sandboxDir);
+        if (!validation.ok) {
+            return { ok: false, error: validation.error };
+        }
+        try {
+            let content = readFileSync(validation.path, "utf-8");
+            if (content.length > IO_MAX_FILE_BYTES) {
+                content = content.slice(0, IO_MAX_FILE_BYTES);
+            }
+            return { ok: true, data: content };
+        }
+        catch (e) {
+            const msg = e instanceof Error ? e.message : String(e);
+            return { ok: false, error: msg };
+        }
+    }
+    writeFile(path, content) {
+        if (!this.sandboxDir) {
+            return { ok: false, error: "filesystem_not_configured" };
+        }
+        const validation = validateSandboxPath(path, this.sandboxDir);
+        if (!validation.ok) {
+            return { ok: false, error: validation.error };
+        }
+        try {
+            writeFileSync(validation.path, content, "utf-8");
+            return { ok: true };
+        }
+        catch (e) {
+            const msg = e instanceof Error ? e.message : String(e);
+            return { ok: false, error: msg };
+        }
+    }
+    env(name) {
+        return process.env[name] ?? "";
+    }
+    args() {
+        return process.argv.slice(2);
+    }
+    exit(code) {
+        throw new Error(`edict_exit:${code}`);
+    }
+}
+//# sourceMappingURL=node-host-adapter.js.map

package/dist/codegen/node-host-adapter.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"node-host-adapter.js","sourceRoot":"","sources":["../../src/codegen/node-host-adapter.ts"],"names":[],"mappings":"AAAA,gFAAgF;AAChF,0EAA0E;AAC1E,gFAAgF;AAChF,sEAAsE;AACtE,2CAA2C;AAC3C,oDAAoD;AACpD,gDAAgD;AAChD,4BAA4B;AAE5B,OAAO,EAAE,UAAU,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACrD,OAAO,EAAE,YAAY,EAAE,MAAM,oBAAoB,CAAC;AAClD,OAAO,EAAE,YAAY,EAAE,aAAa,EAAE,MAAM,SAAS,CAAC;AACtD,OAAO,EAAE,OAAO,IAAI,WAAW,EAAE,MAAM,WAAW,CAAC;AAGnD,qEAAqE;AACrE,MAAM,uBAAuB,GAAG,SAAS,CAAC;AAE1C,4DAA4D;AAC5D,MAAM,iBAAiB,GAAG,SAAS,CAAC;AAEpC;;;GAGG;AACH,SAAS,mBAAmB,CAAC,OAAe,EAAE,UAAkB;IAC5D,MAAM,QAAQ,GAAG,WAAW,CAAC,UAAU,EAAE,OAAO,CAAC,CAAC;IAClD,IAAI,CAAC,QAAQ,CAAC,UAAU,CAAC,UAAU,CAAC,EAAE,CAAC;QACnC,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,yBAAyB,OAAO,EAAE,EAAE,CAAC;IACpE,CAAC;IACD,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,QAAQ,EAAE,CAAC;AACxC,CAAC;AAED;;;GAGG;AACH,SAAS,SAAS,CAAC,GAAW,EAAE,MAAc,EAAE,IAAa;IACzD,MAAM,MAAM,GAAG;;;;;;;;;;;;;oCAaiB,uBAAuB,0BAA0B,uBAAuB;;;;;;;;;;KAUvG,CAAC;IAEF,MAAM,GAAG,GAA2B;QAChC,GAAG,OAAO,CAAC,GAA6B;QACxC,WAAW,EAAE,GAAG;QAChB,cAAc,EAAE,MAAM;KACzB,CAAC;IACF,IAAI,IAAI,KAAK,SAAS,EAAE,CAAC;QACrB,GAAG,CAAC,YAAY,GAAG,IAAI,CAAC;IAC5B,CAAC;IAED,IAAI,CAAC;QACD,MAAM,MAAM,GAAG,YAAY,CAAC,OAAO,CAAC,QAAQ,EAAE,CAAC,IAAI,EAAE,MAAM,CAAC,EAAE;YAC1D,OAAO,EAAE,MAAM;YACf,GAAG;YACH,SAAS,EAAE,uBAAuB,GAAG,IAAI,EAAE,wBAAwB;SACtE,CAAC,CAAC;QACH,OAAO,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC,CAAC;IAChD,CAAC;IAAC,MAAM,CAAC;QACL,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,oCAAoC,EAAE,CAAC;IACrE,CAAC;AACL,CAAC;AAED;;;;;GAKG;AACH,MAAM,OAAO,eAAe;IACP,UAAU,CAAU;IAErC,YAAY,UAAmB;QAC3B,IAAI,CAAC,UAAU,GAAG,UAAU,CAAC;IACjC,CAAC;IAED,uEAAuE;IAEvE,MAAM,CAAC,IAAY;QACf,OAAO,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;IAC3D,CAAC;IAED,GAAG,CAAC,IAAY;QACZ,OAAO,UAAU,CAAC,KAAK,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;IACxD,CAAC;IAED,IAAI,CAAC,IAAY,EAAE,GAAW,EAAE,IAAY;QACxC,IAAI,CAAC;YACD,OAAO,UAAU,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;QAC5D,CAAC;QAAC,MAAM,CAAC;YACL,OAAO,EAAE,CAAC,CAAC,mCAAmC;QAClD,CAAC;IACL,CAAC;IAED,uEAAuE;IAEvE,KAAK,CAAC,GAAW,EAAE,MAAc,EAAE,IAAa;QAC5C,OAAO,SAAS,CAAC,GAAG,EAAE,MAAM,EAAE,IAAI,CAAC,CAAC;IACxC,CAAC;IAED,uEAAuE;IAEvE,QAAQ,CAAC,IAAY;QACjB,IAAI,CAAC,IAAI,CAAC,UAAU,EAAE,CAAC;YACnB,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,2BAA2B,EAAE,CAAC;QAC7D,CAAC;QACD,MAAM,UAAU,GAAG,mBAAmB,CAAC,IAAI,EAAE,IAAI,CAAC,UAAU,CAAC,CAAC;QAC9D,IAAI,CAAC,UAAU,CAAC,EAAE,EAAE,CAAC;YACjB,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,UAAU,CAAC,KAAK,EAAE,CAAC;QAClD,CAAC;QACD,IAAI,CAAC;YACD,IAAI,OAAO,GAAG,YAAY,CAAC,UAAU,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;YACrD,IAAI,OAAO,CAAC,MAAM,GAAG,iBAAiB,EAAE,CAAC;gBACrC,OAAO,GAAG,OAAO,CAAC,KAAK,CAAC,CAAC,EAAE,iBAAiB,CAAC,CAAC;YAClD,CAAC;YACD,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,OAAO,EAAE,CAAC;QACvC,CAAC;QAAC,OAAO,CAAC,EAAE,CAAC;YACT,MAAM,GAAG,GAAG,CAAC,YAAY,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC;YACvD,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,GAAG,EAAE,CAAC;QACrC,CAAC;IACL,CAAC;IAED,SAAS,CAAC,IAAY,EAAE,OAAe;QACnC,IAAI,CAAC,IAAI,CAAC,UAAU,EAAE,CAAC;YACnB,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,2BAA2B,EAAE,CAAC;QAC7D,CAAC;QACD,MAAM,UAAU,GAAG,mBAAmB,CAAC,IAAI,EAAE,IAAI,CAAC,UAAU,CAAC,CAAC;QAC9D,IAAI,CAAC,UAAU,CAAC,EAAE,EAAE,CAAC;YACjB,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,UAAU,CAAC,KAAK,EAAE,CAAC;QAClD,CAAC;QACD,IAAI,CAAC;YACD,aAAa,CAAC,UAAU,CAAC,IAAI,EAAE,OAAO,EAAE,OAAO,CAAC,CAAC;YACjD,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,CAAC;QACxB,CAAC;QAAC,OAAO,CAAC,EAAE,CAAC;YACT,MAAM,GAAG,GAAG,CAAC,YAAY,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC;YACvD,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,GAAG,EAAE,CAAC;QACrC,CAAC;IACL,CAAC;IAED,GAAG,CAAC,IAAY;QACZ,OAAO,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC;IACnC,CAAC;IAED,IAAI;QACA,OAAO,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;IACjC,CAAC;IAED,IAAI,CAAC,IAAY;QACb,MAAM,IAAI,KAAK,CAAC,cAAc,IAAI,EAAE,CAAC,CAAC;IAC1C,CAAC;CACJ"}

package/dist/codegen/runner.d.ts

@@ -1,3 +1,15 @@
+import type { EdictHostAdapter } from "./host-adapter.js";
+/** Configuration for execution sandbox limits */
+export interface RunLimits {
+    /** Max execution time in ms (default: 15_000, min: 100) */
+    timeoutMs?: number;
+    /** Max WASM memory in MB (compile-time, default: 1) */
+    maxMemoryMb?: number;
+    /** Sandbox directory for file IO builtins. If unset, readFile/writeFile return Err. */
+    sandboxDir?: string;
+    /** Optional host adapter for platform-specific operations. Defaults to NodeHostAdapter. */
+    adapter?: EdictHostAdapter;
+}
 export interface RunResult {
     /** Captured stdout output */
     output: string;
@@ -5,12 +17,34 @@ export interface RunResult {
     exitCode: number;
     /** Return value from main (if any) */
     returnValue?: number;
+    /** Runtime limit error, if execution was killed */
+    error?: "execution_timeout" | "execution_oom";
+    /** Limit values that were enforced */
+    limitInfo?: {
+        timeoutMs?: number;
+        maxMemoryMb?: number;
+    };
 }
 /**
- * Run a compiled Edict WASM binary.
+ * Run a compiled Edict WASM binary with sandbox limits.
+ *
+ * Spawns a worker thread and enforces a timeout. If execution exceeds
+ * the timeout, the worker is terminated and a structured error is returned.
+ *
+ * @param wasm - The WASM binary (Uint8Array from codegen)
+ * @param entryFn - Name of the function to call (default: "main")
+ * @param limits - Optional execution limits (timeout, memory)
+ */
+export declare function run(wasm: Uint8Array, entryFn?: string, limits?: RunLimits): Promise<RunResult>;
+/**
+ * Direct (in-process) WASM execution — no worker thread, no timeout.
+ *
+ * Used by the worker thread internally and available for tests
+ * that don't need sandbox limits.
  *
  * @param wasm - The WASM binary (Uint8Array from codegen)
  * @param entryFn - Name of the function to call (default: "main")
+ * @param limits - Optional execution limits (sandboxDir for file IO)
  */
-export declare function run(wasm: Uint8Array, entryFn?: string): Promise<RunResult>;
+export declare function runDirect(wasm: Uint8Array, entryFn?: string, limits?: RunLimits): Promise<RunResult>;
 //# sourceMappingURL=runner.d.ts.map

package/dist/codegen/runner.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"runner.d.ts","sourceRoot":"","sources":["../../src/codegen/runner.ts"],"names":[],"mappings":"AA4BA,MAAM,WAAW,SAAS;IACtB,6BAA6B;IAC7B,MAAM,EAAE,MAAM,CAAC;IACf,8BAA8B;IAC9B,QAAQ,EAAE,MAAM,CAAC;IACjB,sCAAsC;IACtC,WAAW,CAAC,EAAE,MAAM,CAAC;CACxB;AAED;;;;;GAKG;AACH,wBAAsB,GAAG,CACrB,IAAI,EAAE,UAAU,EAChB,OAAO,GAAE,MAAe,GACzB,OAAO,CAAC,SAAS,CAAC,CAgXpB"}
+{"version":3,"file":"runner.d.ts","sourceRoot":"","sources":["../../src/codegen/runner.ts"],"names":[],"mappings":"AAaA,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,mBAAmB,CAAC;AAwB1D,iDAAiD;AACjD,MAAM,WAAW,SAAS;IACtB,2DAA2D;IAC3D,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,uDAAuD;IACvD,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,uFAAuF;IACvF,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,2FAA2F;IAC3F,OAAO,CAAC,EAAE,gBAAgB,CAAC;CAC9B;AAED,MAAM,WAAW,SAAS;IACtB,6BAA6B;IAC7B,MAAM,EAAE,MAAM,CAAC;IACf,8BAA8B;IAC9B,QAAQ,EAAE,MAAM,CAAC;IACjB,sCAAsC;IACtC,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,mDAAmD;IACnD,KAAK,CAAC,EAAE,mBAAmB,GAAG,eAAe,CAAC;IAC9C,sCAAsC;IACtC,SAAS,CAAC,EAAE;QAAE,SAAS,CAAC,EAAE,MAAM,CAAC;QAAC,WAAW,CAAC,EAAE,MAAM,CAAA;KAAE,CAAC;CAC5D;AAED;;;;;;;;;GASG;AACH,wBAAsB,GAAG,CACrB,IAAI,EAAE,UAAU,EAChB,OAAO,GAAE,MAAe,EACxB,MAAM,GAAE,SAAc,GACvB,OAAO,CAAC,SAAS,CAAC,CA0GpB;AAED;;;;;;;;;GASG;AACH,wBAAsB,SAAS,CAC3B,IAAI,EAAE,UAAU,EAChB,OAAO,GAAE,MAAe,EACxB,MAAM,GAAE,SAAc,GACvB,OAAO,CAAC,SAAS,CAAC,CAiDpB"}