release: v0.1.1-rc.1

NathanFlurry · NathanFlurry · commit b590289a6c8e · 2026-03-20T00:37:15.000-07:00
diff --git a/crates/v8-runtime/npm/darwin-arm64/package.json b/crates/v8-runtime/npm/darwin-arm64/package.json
@@ -1,11 +1,17 @@
 {
   "name": "@secure-exec/v8-darwin-arm64",
-  "version": "0.1.0",
+  "version": "0.1.1-rc.1",
   "license": "Apache-2.0",
-  "os": ["darwin"],
-  "cpu": ["arm64"],
+  "os": [
+    "darwin"
+  ],
+  "cpu": [
+    "arm64"
+  ],
   "main": "install.js",
-  "files": ["install.js"],
+  "files": [
+    "install.js"
+  ],
   "scripts": {
     "postinstall": "node install.js"
   },
diff --git a/crates/v8-runtime/npm/darwin-x64/package.json b/crates/v8-runtime/npm/darwin-x64/package.json
@@ -1,11 +1,17 @@
 {
   "name": "@secure-exec/v8-darwin-x64",
-  "version": "0.1.0",
+  "version": "0.1.1-rc.1",
   "license": "Apache-2.0",
-  "os": ["darwin"],
-  "cpu": ["x64"],
+  "os": [
+    "darwin"
+  ],
+  "cpu": [
+    "x64"
+  ],
   "main": "install.js",
-  "files": ["install.js"],
+  "files": [
+    "install.js"
+  ],
   "scripts": {
     "postinstall": "node install.js"
   },
diff --git a/crates/v8-runtime/npm/linux-arm64-gnu/package.json b/crates/v8-runtime/npm/linux-arm64-gnu/package.json
@@ -1,11 +1,17 @@
 {
   "name": "@secure-exec/v8-linux-arm64-gnu",
-  "version": "0.1.0",
+  "version": "0.1.1-rc.1",
   "license": "Apache-2.0",
-  "os": ["linux"],
-  "cpu": ["arm64"],
+  "os": [
+    "linux"
+  ],
+  "cpu": [
+    "arm64"
+  ],
   "main": "install.js",
-  "files": ["install.js"],
+  "files": [
+    "install.js"
+  ],
   "scripts": {
     "postinstall": "node install.js"
   },
diff --git a/crates/v8-runtime/npm/linux-x64-gnu/package.json b/crates/v8-runtime/npm/linux-x64-gnu/package.json
@@ -1,11 +1,17 @@
 {
   "name": "@secure-exec/v8-linux-x64-gnu",
-  "version": "0.1.0",
+  "version": "0.1.1-rc.1",
   "license": "Apache-2.0",
-  "os": ["linux"],
-  "cpu": ["x64"],
+  "os": [
+    "linux"
+  ],
+  "cpu": [
+    "x64"
+  ],
   "main": "secure-exec-v8",
-  "files": ["secure-exec-v8"],
+  "files": [
+    "secure-exec-v8"
+  ],
   "repository": {
     "type": "git",
     "url": "https://github.com/rivet-dev/secure-exec.git",
diff --git a/crates/v8-runtime/npm/win32-x64/package.json b/crates/v8-runtime/npm/win32-x64/package.json
@@ -1,11 +1,17 @@
 {
   "name": "@secure-exec/v8-win32-x64",
-  "version": "0.1.0",
+  "version": "0.1.1-rc.1",
   "license": "Apache-2.0",
-  "os": ["win32"],
-  "cpu": ["x64"],
+  "os": [
+    "win32"
+  ],
+  "cpu": [
+    "x64"
+  ],
   "main": "install.js",
-  "files": ["install.js"],
+  "files": [
+    "install.js"
+  ],
   "scripts": {
     "postinstall": "node install.js"
   },
diff --git a/package.json b/package.json
@@ -1,6 +1,6 @@
 {
 	"name": "secure-exec-monorepo",
-	"version": "0.1.0",
+	"version": "0.1.1-rc.1",
 	"private": true,
 	"license": "Apache-2.0",
 	"type": "module",
diff --git a/packages/kernel/package.json b/packages/kernel/package.json
@@ -1,6 +1,6 @@
 {
   "name": "@secure-exec/kernel",
-  "version": "0.1.0",
+  "version": "0.1.1-rc.1",
   "description": "OS kernel — VFS, FD table, process table, device layer, pipes, command registry, permissions",
   "type": "module",
   "main": "src/index.ts",
diff --git a/packages/os/browser/package.json b/packages/os/browser/package.json
@@ -1,6 +1,6 @@
 {
   "name": "@secure-exec/os-browser",
-  "version": "0.1.0",
+  "version": "0.1.1-rc.1",
   "description": "Browser platform adapter — in-memory/OPFS filesystem and Web Worker abstractions",
   "type": "module",
   "main": "src/index.ts",
diff --git a/packages/os/node/package.json b/packages/os/node/package.json
@@ -1,6 +1,6 @@
 {
   "name": "@secure-exec/os-node",
-  "version": "0.1.0",
+  "version": "0.1.1-rc.1",
   "description": "Node.js platform adapter — filesystem and worker abstractions",
   "type": "module",
   "main": "src/index.ts",
diff --git a/packages/runtime/node/package.json b/packages/runtime/node/package.json
@@ -1,6 +1,6 @@
 {
   "name": "@secure-exec/runtime-node",
-  "version": "0.1.0",
+  "version": "0.1.1-rc.1",
   "description": "Node.js runtime driver — wraps secure-exec NodeExecutionDriver behind the kernel RuntimeDriver interface",
   "type": "module",
   "main": "src/index.ts",
diff --git a/packages/runtime/python/package.json b/packages/runtime/python/package.json
@@ -1,6 +1,6 @@
 {
   "name": "@secure-exec/runtime-python",
-  "version": "0.1.0",
+  "version": "0.1.1-rc.1",
   "description": "Python runtime driver — wraps Pyodide behind the kernel RuntimeDriver interface",
   "type": "module",
   "main": "src/index.ts",
diff --git a/packages/runtime/wasmvm/package.json b/packages/runtime/wasmvm/package.json
@@ -1,6 +1,6 @@
 {
   "name": "@secure-exec/runtime-wasmvm",
-  "version": "0.1.0",
+  "version": "0.1.1-rc.1",
   "description": "WasmVM runtime driver — BusyBox-style WASM binary with Unix userland",
   "type": "module",
   "main": "src/index.ts",
diff --git a/packages/secure-exec-browser/package.json b/packages/secure-exec-browser/package.json
@@ -1,6 +1,6 @@
 {
   "name": "@secure-exec/browser",
-  "version": "0.1.0",
+  "version": "0.1.1-rc.1",
   "type": "module",
   "license": "Apache-2.0",
   "main": "./dist/index.js",
diff --git a/packages/secure-exec-core/package.json b/packages/secure-exec-core/package.json
@@ -1,6 +1,6 @@
 {
   "name": "@secure-exec/core",
-  "version": "0.1.0",
+  "version": "0.1.1-rc.1",
   "type": "module",
   "license": "Apache-2.0",
   "main": "./dist/index.js",
diff --git a/packages/secure-exec-node/package.json b/packages/secure-exec-node/package.json
@@ -1,6 +1,6 @@
 {
   "name": "@secure-exec/node",
-  "version": "0.1.0",
+  "version": "0.1.1-rc.1",
   "type": "module",
   "license": "Apache-2.0",
   "main": "./dist/index.js",
diff --git a/packages/secure-exec-python/package.json b/packages/secure-exec-python/package.json
@@ -1,6 +1,6 @@
 {
   "name": "@secure-exec/python",
-  "version": "0.1.0",
+  "version": "0.1.1-rc.1",
   "type": "module",
   "license": "Apache-2.0",
   "main": "./dist/index.js",
diff --git a/packages/secure-exec-typescript/package.json b/packages/secure-exec-typescript/package.json
@@ -1,6 +1,6 @@
 {
   "name": "@secure-exec/typescript",
-  "version": "0.1.0",
+  "version": "0.1.1-rc.1",
   "type": "module",
   "license": "Apache-2.0",
   "main": "./dist/index.js",
diff --git a/packages/secure-exec-v8/package.json b/packages/secure-exec-v8/package.json
@@ -1,6 +1,6 @@
 {
   "name": "@secure-exec/v8",
-  "version": "0.1.0",
+  "version": "0.1.1-rc.1",
   "type": "module",
   "license": "Apache-2.0",
   "main": "./dist/index.js",
@@ -29,11 +29,11 @@
     "postinstall": "node postinstall.js"
   },
   "optionalDependencies": {
-    "@secure-exec/v8-linux-x64-gnu": "0.1.0",
-    "@secure-exec/v8-linux-arm64-gnu": "0.1.0",
-    "@secure-exec/v8-darwin-x64": "0.1.0",
-    "@secure-exec/v8-darwin-arm64": "0.1.0",
-    "@secure-exec/v8-win32-x64": "0.1.0"
+    "@secure-exec/v8-linux-x64-gnu": "0.1.1-rc.1",
+    "@secure-exec/v8-linux-arm64-gnu": "0.1.1-rc.1",
+    "@secure-exec/v8-darwin-x64": "0.1.1-rc.1",
+    "@secure-exec/v8-darwin-arm64": "0.1.1-rc.1",
+    "@secure-exec/v8-win32-x64": "0.1.1-rc.1"
   },
   "dependencies": {},
   "devDependencies": {
diff --git a/packages/secure-exec/benchmarks/bench-utils.ts b/packages/secure-exec/benchmarks/bench-utils.ts
@@ -3,6 +3,8 @@ import {
 	createNodeDriver,
 	createNodeRuntimeDriverFactory,
 } from "../src/index.js";
+import { createV8Runtime } from "@secure-exec/v8";
+import type { V8Runtime } from "@secure-exec/v8";
 import os from "node:os";
 
 export const BATCH_SIZES = [1, 10, 50, 100, 200];
@@ -13,10 +15,30 @@ export const TRIVIAL_CODE = `export const x = 1;`;
 // Cap concurrency below available parallelism to leave headroom for the bench harness itself.
 export const MAX_CONCURRENCY = Math.max(1, os.availableParallelism() - 4);
 
+// Shared V8 process — spawned once via initSharedV8(), reused by all bench runtimes.
+let sharedV8: V8Runtime | null = null;
+
+export async function initSharedV8(): Promise<V8Runtime> {
+	if (!sharedV8) {
+		sharedV8 = await createV8Runtime();
+	}
+	return sharedV8;
+}
+
+export async function shutdownSharedV8(): Promise<void> {
+	if (sharedV8) {
+		await sharedV8.dispose();
+		sharedV8 = null;
+	}
+}
+
 export function createBenchRuntime(): NodeRuntime {
+	if (!sharedV8) {
+		throw new Error("Call initSharedV8() before createBenchRuntime()");
+	}
 	return new NodeRuntime({
 		systemDriver: createNodeDriver(),
-		runtimeDriverFactory: createNodeRuntimeDriverFactory(),
+		runtimeDriverFactory: createNodeRuntimeDriverFactory({ v8Runtime: sharedV8 }),
 	});
 }
 
diff --git a/packages/secure-exec/benchmarks/coldstart.bench.ts b/packages/secure-exec/benchmarks/coldstart.bench.ts
@@ -16,6 +16,8 @@ import {
 	TRIVIAL_CODE,
 	WARMUP_ITERATIONS,
 	createBenchRuntime,
+	initSharedV8,
+	shutdownSharedV8,
 	getHardware,
 	printTable,
 	round,
@@ -122,6 +124,11 @@ async function main() {
 	console.error(`Iterations: ${ITERATIONS} (+ ${WARMUP_ITERATIONS} warmup)`);
 	console.error(`Batch sizes: ${BATCH_SIZES.join(", ")}`);
 
+	// Pre-spawn the shared V8 process so the bench loop only measures isolate creation
+	console.error(`\nSpawning shared V8 process...`);
+	await initSharedV8();
+	console.error(`V8 process ready.\n`);
+
 	const results: ColdStartEntry[] = [];
 
 	for (const batchSize of BATCH_SIZES) {
@@ -163,6 +170,8 @@ async function main() {
 
 	// JSON to stdout
 	console.log(JSON.stringify({ hardware, results }, null, 2));
+
+	await shutdownSharedV8();
 }
 
 main().catch((err) => {
diff --git a/packages/secure-exec/benchmarks/memory.bench.ts b/packages/secure-exec/benchmarks/memory.bench.ts
@@ -13,6 +13,8 @@ import {
 	MEMORY_ITERATIONS,
 	TRIVIAL_CODE,
 	createBenchRuntime,
+	initSharedV8,
+	shutdownSharedV8,
 	forceGC,
 	formatBytes,
 	getHardware,
@@ -114,6 +116,11 @@ async function main() {
 	console.error(`Iterations per batch: ${MEMORY_ITERATIONS}`);
 	console.error(`Batch sizes: ${BATCH_SIZES.join(", ")}`);
 
+	// Pre-spawn the shared V8 process so the bench loop only measures isolate overhead
+	console.error(`\nSpawning shared V8 process...`);
+	await initSharedV8();
+	console.error(`V8 process ready.\n`);
+
 	const results: MemoryEntry[] = [];
 
 	for (const batchSize of BATCH_SIZES) {
@@ -154,6 +161,8 @@ async function main() {
 
 	// JSON to stdout
 	console.log(JSON.stringify({ hardware, results }, null, 2));
+
+	await shutdownSharedV8();
 }
 
 main().catch((err) => {
diff --git a/packages/secure-exec/benchmarks/profile-phases.ts b/packages/secure-exec/benchmarks/profile-phases.ts
@@ -0,0 +1,66 @@
+/**
+ * Phase-level profiling: isolate where time goes in cold vs warm.
+ */
+
+import { createV8Runtime } from "@secure-exec/v8";
+import {
+	NodeRuntime,
+	createNodeDriver,
+	createNodeRuntimeDriverFactory,
+} from "../src/index.js";
+
+const TRIVIAL_CODE = `export const x = 1;`;
+const RUNS = 30;
+
+async function main() {
+	const v8 = await createV8Runtime();
+
+	// First cold — warms the snapshot cache
+	const warmupRt = new NodeRuntime({
+		systemDriver: createNodeDriver(),
+		runtimeDriverFactory: createNodeRuntimeDriverFactory({ v8Runtime: v8 }),
+	});
+	await warmupRt.run(TRIVIAL_CODE);
+	await warmupRt.terminate();
+
+	console.error("Snapshot cached. Profiling cold + warm paths.\n");
+
+	// Measure cold starts (new runtime each time, snapshot is cached)
+	const coldConstruct: number[] = [];
+	const coldFirstRun: number[] = [];
+	const warmRun: number[] = [];
+
+	for (let i = 0; i < RUNS; i++) {
+		const t0 = performance.now();
+		const rt = new NodeRuntime({
+			systemDriver: createNodeDriver(),
+			runtimeDriverFactory: createNodeRuntimeDriverFactory({ v8Runtime: v8 }),
+		});
+		const t1 = performance.now();
+		await rt.run(TRIVIAL_CODE);
+		const t2 = performance.now();
+		await rt.run(TRIVIAL_CODE);
+		const t3 = performance.now();
+
+		coldConstruct.push(t1 - t0);
+		coldFirstRun.push(t2 - t1);
+		warmRun.push(t3 - t2);
+
+		await rt.terminate();
+	}
+
+	const fmt = (arr: number[]) => {
+		const s = [...arr].sort((a, b) => a - b);
+		const m = arr.reduce((a, b) => a + b, 0) / arr.length;
+		return `mean=${m.toFixed(2)}  p50=${s[Math.floor(s.length / 2)].toFixed(2)}  min=${s[0].toFixed(2)}  max=${s[s.length - 1].toFixed(2)}`;
+	};
+
+	console.error(`constructor (TS obj only):  ${fmt(coldConstruct)}ms`);
+	console.error(`first run (cold):           ${fmt(coldFirstRun)}ms`);
+	console.error(`second run (warm):          ${fmt(warmRun)}ms`);
+	console.error(`cold - warm delta:          ${((coldFirstRun.reduce((a,b) => a+b,0) - warmRun.reduce((a,b) => a+b,0)) / RUNS).toFixed(2)}ms`);
+
+	await v8.dispose();
+}
+
+main().then(() => process.exit(0)).catch(e => { console.error(e); process.exit(1); });
diff --git a/packages/secure-exec/package.json b/packages/secure-exec/package.json
diff --git a/pnpm-lock.yaml b/pnpm-lock.yaml

Original file line number	Diff line number	Diff line change
`@@ -1,6 +1,6 @@`
`1`	`1`	`{`
`2`	`2`	`"name": "secure-exec-monorepo",`
`3`		`- "version": "0.1.0",`
	`3`	`+ "version": "0.1.1-rc.1",`
`4`	`4`	`"private": true,`
`5`	`5`	`"license": "Apache-2.0",`
`6`	`6`	`"type": "module",`
Original file line number	Diff line number	Diff line change
`@@ -1,6 +1,6 @@`
`1`	`1`	`{`
`2`	`2`	`"name": "@secure-exec/kernel",`
`3`		`- "version": "0.1.0",`
	`3`	`+ "version": "0.1.1-rc.1",`
`4`	`4`	`"description": "OS kernel — VFS, FD table, process table, device layer, pipes, command registry, permissions",`
`5`	`5`	`"type": "module",`
`6`	`6`	`"main": "src/index.ts",`
Original file line number	Diff line number	Diff line change
`@@ -1,6 +1,6 @@`
`1`	`1`	`{`
`2`	`2`	`"name": "@secure-exec/os-browser",`
`3`		`- "version": "0.1.0",`
	`3`	`+ "version": "0.1.1-rc.1",`
`4`	`4`	`"description": "Browser platform adapter — in-memory/OPFS filesystem and Web Worker abstractions",`
`5`	`5`	`"type": "module",`
`6`	`6`	`"main": "src/index.ts",`
Original file line number	Diff line number	Diff line change
`@@ -1,6 +1,6 @@`
`1`	`1`	`{`
`2`	`2`	`"name": "@secure-exec/os-node",`
`3`		`- "version": "0.1.0",`
	`3`	`+ "version": "0.1.1-rc.1",`
`4`	`4`	`"description": "Node.js platform adapter — filesystem and worker abstractions",`
`5`	`5`	`"type": "module",`
`6`	`6`	`"main": "src/index.ts",`
Original file line number	Diff line number	Diff line change
`@@ -1,6 +1,6 @@`
`1`	`1`	`{`
`2`	`2`	`"name": "@secure-exec/runtime-node",`
`3`		`- "version": "0.1.0",`
	`3`	`+ "version": "0.1.1-rc.1",`
`4`	`4`	`"description": "Node.js runtime driver — wraps secure-exec NodeExecutionDriver behind the kernel RuntimeDriver interface",`
`5`	`5`	`"type": "module",`
`6`	`6`	`"main": "src/index.ts",`