melchizedek-agents 1.10.0 → 1.10.2

package/CHANGELOG.md

@@ -4,6 +4,23 @@ Consumers of the package read this file; it records changes to the
 **published API surface** (the exports map in `package.json`, the bins,
 the starter pack and the templates), not the repo's full history.
 
+## 1.10.2 — 2026-10-21
+
+A patch release: a process that ran the code sandbox could fail to exit.
+`runInSandbox` (`melchizedek-agents/sandbox`, used by `run_code` and
+`script:`) started each worker with V8 heap caps; with them, a garbage
+collection a background compile job requested while the worker was exiting
+could deadlock Node's task drain (nodejs/node#54918), so that worker never
+exited and its process stayed alive after its work was done. The worker now
+runs without `resourceLimits` (ADR 0142); a run's memory is still bounded by
+its wasm memory limit (default 64 MB). No API changes.
+
+## 1.10.1 — 2026-10-21
+
+A patch release: `zod` is pinned exactly again (`4.6.7`). 1.10.0 named it
+as `^4.6.7`, so a consumer could resolve a newer zod than the one the
+engine was tested with; nothing else changes.
+
 ## 1.10.0 — 2026-10-20
 
 A minor release for deployments: a served syndicate takes end-user

package/dist/lib/project.js

@@ -39,7 +39,7 @@ const syndicateRecord = z
 export const projectManifestSchema = z
     .object({
     manifest: z.number().int().min(1),
-    engine: z.string().regex(/^\d+\.\d+\.\d+(-[0-9A-Za-z.-]+)?$/, 'must be an exact version, e.g. 1.10.0'),
+    engine: z.string().regex(/^\d+\.\d+\.\d+(-[0-9A-Za-z.-]+)?$/, 'must be an exact version, e.g. 1.10.1'),
     agents: relPath,
     ignore: z.array(z.string().min(1)).optional(),
     tests: relPath.optional(),

package/dist/lib/sandbox/sandbox.js

@@ -159,8 +159,10 @@ export async function runInSandbox(opts) {
     const worker = new Worker(workerUrl(), {
         // Source runs need type stripping in the worker; the package runs compiled JS.
         execArgv: import.meta.url.endsWith('.ts') ? ['--experimental-strip-types', '--disable-warning=ExperimentalWarning'] : [],
-        // The wasm heap is held by setMemoryLimit; this bounds the JS around it.
-        resourceLimits: { maxOldGenerationSizeMb: 96, maxYoungGenerationSizeMb: 16 },
+        // No resourceLimits: the code's heap is the wasm memory setMemoryLimit holds, outside the V8
+        // heap. Capping the V8 heap made GCs frequent enough that one a background compile job asked
+        // for while the worker was exiting deadlocked Node's task drain, so the worker never exited
+        // and its process never could (ADR 0142).
         stdout: true,
         stderr: true,
     });

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "melchizedek-agents",
-  "version": "1.10.0",
+  "version": "1.10.2",
   "description": "A multi-model, multi-agent orchestration framework — YAML-defined syndicates on the engine's own agent loop, Supabase or Postgres session persistence, pgvector long-term memory. Companion repo to the lyceumagents.com curriculum.",
   "type": "module",
   "license": "MIT",
@@ -168,7 +168,7 @@
     "pg": "^8.23.1",
     "quickjs-emscripten-core": "0.32.0",
     "yaml": "^2.9.0",
-    "zod": "^4.6.7"
+    "zod": "4.6.7"
   },
   "devDependencies": {
     "@electric-sql/pglite": "^0.5.10",