@execbox/process

Child-process executor for @execbox/core, using the shared QuickJS runner behind a Node IPC boundary.

Choose execbox-process When

• you want QuickJS semantics with a stronger lifecycle boundary than worker threads
• you want to hard-kill the execution process on timeout
• you want pooled child-process reuse by default, with explicit ephemeral opt-out when needed

If you want the simplest default backend, use @execbox/quickjs instead.

Install

npm install @execbox/core @execbox/process

Usage

import { resolveProvider } from "@execbox/core";
import { ProcessExecutor } from "@execbox/process";

const provider = resolveProvider({
  name: "tools",
  tools: {
    echo: {
      execute: async (input) => input,
    },
  },
});

const executor = new ProcessExecutor();
const result = await executor.execute("await tools.echo({ ok: true })", [
  provider,
]);

Pooling

ProcessExecutor now defaults to pooled child-process reuse. Each execute() call still gets a fresh QuickJS runtime/context inside the child; only the outer child-process shell is reused.

const executor = new ProcessExecutor({
  mode: "pooled",
  pool: {
    idleTimeoutMs: 30_000,
    maxSize: 2,
    prewarm: true,
  },
});

await executor.prewarm?.(2);
await executor.dispose?.();

Use mode: "ephemeral" to keep the previous behavior of creating a fresh child process for every execution, even if a pool config is present:

const executor = new ProcessExecutor({
  mode: "ephemeral",
});

Default pooled settings are:

• maxSize: 1
• minSize: 0
• idleTimeoutMs: 30_000
• prewarm: false

Call dispose() in long-lived applications and tests when you want deterministic cleanup of pooled child processes.

Pooling Internals

ProcessExecutor does not keep a QuickJS runtime alive between executions. The pooled resource is the outer child-process shell only.

• the child process starts once and attaches the shared QuickJS protocol endpoint
• each execute() call sends one execute message to that endpoint, which starts a fresh runQuickJsSession() inside the child
• the parent acquires one pooled shell lease, runs runHostTransportSession() for that execution, then releases or evicts the lease when the session settles
• pooled mode uses a borrowed transport wrapper because the host session always disposes its transport at the end of an execution, while the real pooled child must stay alive for reuse
• if all pooled children are busy and the pool is already at maxSize, new executions wait in an internal FIFO queue until a shell is released or replaced

Shell reuse rules are:

• success returns the child to the pool
• normal guest/tool/runtime failures also return it
• timeout and internal_error evict it
• idle children are evicted after idleTimeoutMs

The transport wrapper also caches the first unexpected close reason and replays it to late listeners. That prevents pooled executions from hanging if the child exits before the host session has attached its close handler.

Queue wait time is pool backpressure, not execution time. The configured execution timeout starts only after the lease has been acquired and the host transport session begins.

Security Notes

• This package improves lifecycle isolation by moving the QuickJS runtime to a fresh child process.
• It is still not documented as a hard hostile-code boundary equivalent to a container or VM.
• Providers remain the real capability boundary.
• Internally it is a thin transport adapter over the shared execbox-protocol host session and the shared QuickJS protocol endpoint.

Examples

• Process-backed execbox execution
• Architecture overview
• Executors architecture