fix: add missing UpgradeSocket bridge refs, fix V8 postinstall and typecheck errors

- Add UpgradeSocketWriteRawBridgeRef, UpgradeSocketEndRawBridgeRef,
  UpgradeSocketDestroyRawBridgeRef to bridge-contract.ts (were imported
  in index.ts but never defined)
- Fix V8 postinstall to use postinstall.cjs (package.json has type:module
  so postinstall.js with require() fails)
- Add type annotations to execution-driver.ts callback params

Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>

Author: NathanFlurry

packages/secure-exec-core/src/shared/bridge-contract.ts

@@ -178,6 +178,11 @@ export type NetworkHttpServerListenResult = { address: { address: string; family
 export type NetworkHttpServerListenRawBridgeRef = (optionsJson: string) => Promise<NetworkHttpServerListenResult>;
 export type NetworkHttpServerCloseRawBridgeRef = (serverId: number) => Promise<void>;
 
+// Upgrade socket (WebSocket relay) boundary contracts.
+export type UpgradeSocketWriteRawBridgeRef = (socketId: number, dataBase64: string) => void;
+export type UpgradeSocketEndRawBridgeRef = (socketId: number) => void;
+export type UpgradeSocketDestroyRawBridgeRef = (socketId: number) => void;
+
 // PTY boundary contracts.
 export type PtySetRawModeBridgeRef = (mode: boolean) => void;
 

packages/secure-exec-node/src/execution-driver.ts

@@ -16,10 +16,10 @@ async function getSharedV8Runtime(): Promise<V8Runtime> {
 	if (!sharedV8RuntimePromise) {
 		sharedV8RuntimePromise = createV8Runtime({
 			warmupBridgeCode: composeBridgeCodeForWarmup(),
-		}).then((r) => {
+		}).then((r: V8Runtime) => {
 			sharedV8Runtime = r;
 			return r;
-		}).catch((err) => {
+		}).catch((err: unknown) => {
 			// Reset on failure so next call retries instead of returning cached rejection
 			sharedV8RuntimePromise = null;
 			sharedV8Runtime = null;
@@ -446,7 +446,7 @@ export class NodeExecutionDriver implements RuntimeDriver {
 					arch: osConfig.arch ?? process.arch,
 				},
 				bridgeHandlers,
-				onStreamCallback: (_callbackType, _payload) => {
+				onStreamCallback: (_callbackType: string, _payload: unknown) => {
 					// Handle stream callbacks from V8 (e.g., HTTP server responses)
 				},
 			});

packages/secure-exec-v8/package.json

@@ -7,7 +7,7 @@
   "types": "./dist/index.d.ts",
   "files": [
     "dist",
-    "postinstall.js",
+    "postinstall.cjs",
     "README.md"
   ],
   "repository": {
@@ -26,7 +26,7 @@
     "check-types": "tsc --noEmit",
     "build": "tsc",
     "test": "vitest run",
-    "postinstall": "node postinstall.js"
+    "postinstall": "node postinstall.cjs"
   },
   "optionalDependencies": {
     "@secure-exec/v8-linux-x64-gnu": "0.1.0",