feat: add QuickJS as alternative JS engine for flow expression evaluation (#7664)

* feat: add QuickJS as alternative JS engine for flow expression evaluation

Add rquickjs as an optional alternative to deno_core for evaluating
JavaScript expressions in flow transformations. QuickJS offers ~8-16x
faster startup times for simple expressions, making it ideal for
evaluating many small expressions in flows.

Key changes:
- Add new `quickjs` feature flag for windmill-worker
- Implement js_eval_quickjs.rs with true async Rust callbacks for
  variable(), resource(), and results.xxx access (no pre-fetching)
- Share expression transformation logic (replace_with_await,
  replace_with_await_result) between both implementations
- Add USE_QUICKJS_FOR_FLOW_EVAL env var to switch engines at runtime
- When only quickjs feature is enabled (no deno_core), QuickJS is
  automatically used
- Add comprehensive parity tests comparing QuickJS and deno_core output

Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>

* all

* quickjs

* quickjs

* all

* all

* all

---------

Co-authored-by: Claude Opus 4.5 <noreply@anthropic.com>
This commit is contained in:
Ruben Fiszel
2026-01-29 01:44:40 +00:00
committed by GitHub
parent 6a3a45396d
commit 0706ace608
9 changed files with 7136 additions and 10 deletions

70
backend/Cargo.lock generated
View File

@@ -1842,7 +1842,7 @@ source = "registry+https://github.com/rust-lang/crates.io-index"
checksum = "0686c856aa6aac0c4498f936d7d6a02df690f614c03e4d906d1018062b5c5e2c"
dependencies = [
"once_cell",
"proc-macro-crate",
"proc-macro-crate 3.4.0",
"proc-macro2",
"quote",
"syn 2.0.114",
@@ -8550,7 +8550,7 @@ dependencies = [
"darling 0.20.11",
"heck 0.5.0",
"num-bigint",
"proc-macro-crate",
"proc-macro-crate 3.4.0",
"proc-macro-error2",
"proc-macro2",
"quote",
@@ -9119,7 +9119,7 @@ version = "0.7.5"
source = "registry+https://github.com/rust-lang/crates.io-index"
checksum = "ff32365de1b6743cb203b710788263c44a03de03802daf96092f2da4fe6ba4d7"
dependencies = [
"proc-macro-crate",
"proc-macro-crate 3.4.0",
"proc-macro2",
"quote",
"syn 2.0.114",
@@ -10192,6 +10192,16 @@ dependencies = [
"elliptic-curve",
]
[[package]]
name = "proc-macro-crate"
version = "1.3.1"
source = "registry+https://github.com/rust-lang/crates.io-index"
checksum = "7f4c021e1093a56626774e81216a4ce732a735e5bad4868a03f3ed65ca0c3919"
dependencies = [
"once_cell",
"toml_edit 0.19.15",
]
[[package]]
name = "proc-macro-crate"
version = "3.4.0"
@@ -10895,6 +10905,12 @@ version = "0.8.8"
source = "registry+https://github.com/rust-lang/crates.io-index"
checksum = "7a2d987857b319362043e95f5353c0535c1f58eec5336fdfcf626430af7def58"
[[package]]
name = "relative-path"
version = "1.9.3"
source = "registry+https://github.com/rust-lang/crates.io-index"
checksum = "ba39f3699c378cd8970968dcbff9c43159ea4cfbd88d43c00b22f2ef10a435d2"
[[package]]
name = "rend"
version = "0.4.2"
@@ -11185,6 +11201,53 @@ dependencies = [
"serde_derive",
]
[[package]]
name = "rquickjs"
version = "0.8.1"
source = "registry+https://github.com/rust-lang/crates.io-index"
checksum = "d16661bff09e9ed8e01094a188b463de45ec0693ade55b92ed54027d7ba7c40c"
dependencies = [
"rquickjs-core",
"rquickjs-macro",
]
[[package]]
name = "rquickjs-core"
version = "0.8.1"
source = "registry+https://github.com/rust-lang/crates.io-index"
checksum = "6c8db6379e204ef84c0811e90e7cc3e3e4d7688701db68a00d14a6db6849087b"
dependencies = [
"async-lock",
"relative-path",
"rquickjs-sys",
]
[[package]]
name = "rquickjs-macro"
version = "0.8.1"
source = "registry+https://github.com/rust-lang/crates.io-index"
checksum = "6041104330c019fcd936026ae05e2446f5e8a2abef329d924f25424b7052a2f3"
dependencies = [
"convert_case 0.6.0",
"fnv",
"ident_case",
"indexmap 2.11.1",
"proc-macro-crate 1.3.1",
"proc-macro2",
"quote",
"rquickjs-core",
"syn 2.0.114",
]
[[package]]
name = "rquickjs-sys"
version = "0.8.1"
source = "registry+https://github.com/rust-lang/crates.io-index"
checksum = "4bc352c6b663604c3c186c000cfcc6c271f4b50bc135a285dd6d4f2a42f9790a"
dependencies = [
"cc",
]
[[package]]
name = "rsa"
version = "0.9.10"
@@ -16156,6 +16219,7 @@ dependencies = [
"regex",
"reqwest 0.13.1",
"reqwest-middleware",
"rquickjs",
"rust_decimal",
"rustls-pemfile 2.2.0",
"serde",

View File

@@ -68,6 +68,7 @@ jemalloc = ["windmill-common/jemalloc", "dep:tikv-jemallocator", "dep:tikv-jemal
tantivy = ["dep:windmill-indexer", "windmill-api/tantivy", "windmill-indexer/enterprise", "windmill-indexer/parquet", "windmill-common/tantivy", "enterprise", "parquet"]
sqlx = ["windmill-worker/sqlx"]
deno_core = ["windmill-worker/deno_core", "windmill-api/deno_core", "dep:deno_core", "dep:v8"]
quickjs = ["windmill-worker/quickjs"]
deno_core_mac = ["deno_core", "windmill-worker/libffi_mac"]
kafka = ["windmill-api/kafka"]
nats = ["windmill-api/nats"]
@@ -391,8 +392,11 @@ nu-parser = { version = "0.101.0", default-features = false }
globset = "0.4.16"
croner = "2.2.0"
rmcp = { version = "^0", features = ["client", "transport-streamable-http-client", "transport-streamable-http-client-reqwest"] }
rquickjs = { version = "0.8", features = ["futures", "parallel", "macro"] }
process-wrap = { version = "8.2.1", features = ["tokio1"] }
systemstat = "0.2.4"
datafusion = "47.0.0"
object_store = { git = "https://github.com/apache/arrow-rs-object-store", rev = "36752c975d4f29e20b57c91f81a10872dcd48ae7", features = ["aws", "azure", "gcp"] }
openidconnect = { version = "4.0.0-rc.1" }
@@ -407,7 +411,6 @@ aws-sdk-sso = "=1.77.0"
aws-sdk-ssooidc = "=1.78.0"
rustls = "=0.23.35"
async-once-cell = "0.5.4"
systemstat = "0.2.4"
size = "0.5.0"
aws-smithy-types-convert = { version = "^0", features = ["convert-chrono"] }

View File

@@ -0,0 +1,370 @@
# QuickJS Migration - Potential Breaking Changes Analysis
## Summary
This document details the comprehensive investigation into potential breaking changes when migrating flow expressions from Deno Core (V8) to QuickJS.
## 1. Areas Already Tested (60+ Parity Tests)
The following areas have comprehensive parity tests in `js_eval_parity_tests.rs`:
- **Arithmetic operations**: +, -, *, /, %, **
- **Comparison operators**: ===, !==, >, <, >=, <=, ==, !=
- **Logical operators**: &&, ||, !, ??, ?.
- **Bitwise operators**: &, |, ^, ~, <<, >>, >>>
- **Object operations**: property access, spread, destructuring, Object.keys/values/entries
- **Array operations**: map, filter, reduce, find, some, every, slice, flat, etc.
- **String operations**: split, replace, includes, startsWith, trim, etc.
- **Template literals**: ${} interpolation
- **Optional chaining**: ?. for properties, methods, computed properties
- **Nullish coalescing**: ??
- **Try-catch blocks**
- **Arrow functions**
- **Destructuring**
- **Date operations** (with fixed dates)
- **JSON.parse/stringify**
- **Math functions**
- **Set and Map operations**
- **Regular expressions** (basic patterns)
- **flow_input, flow_env, previous_result access**
- **Error extraction logic** (from parallel results)
## 2. Potential Breaking Changes Identified
### 2.1 Number Handling Edge Cases (MEDIUM RISK)
**Implementation Difference:**
```rust
// QuickJS json_to_js:
if i >= i32::MIN as i64 && i <= i32::MAX as i64 {
Ok(Value::new_int(ctx.clone(), i as i32))
} else {
Ok(Value::new_float(ctx.clone(), i as f64))
}
```
**Potential Issues:**
- Numbers outside i32 range (-2147483648 to 2147483647) are stored as floats
- Large integers (between i32::MAX and 2^53) might lose precision
- **Timestamps** (e.g., 1704067200000) are typically in this range
**Test Case Needed:**
```javascript
// Numbers just above i32::MAX
2147483648 + 1 // i32::MAX + 2
9007199254740991 - 1 // Near MAX_SAFE_INTEGER
```
### 2.2 Object Property Order (LOW RISK)
**Implementation Difference:**
- QuickJS: `obj.props::<String, Value>()` iteration order
- V8: Guaranteed insertion order for string keys
**Potential Impact:**
- `Object.keys()`, `Object.values()`, `Object.entries()` order might differ
- Object spread `{...obj}` order might differ
**Mitigated by:**
- JSON comparison in tests normalizes order
- Most flow expressions don't depend on property order
### 2.3 Missing Browser/Deno APIs (MEDIUM RISK)
**APIs NOT available in QuickJS:**
- `atob()` / `btoa()` - Base64 encoding/decoding
- `TextEncoder` / `TextDecoder`
- `fetch()` (not relevant for expressions)
- `Blob`, `ArrayBuffer` (limited support)
- `Intl.*` - Internationalization APIs
- `console.log()` - No effect (not breaking, just no output)
**Expressions that would break:**
```javascript
atob("SGVsbG8=") // Would throw: atob is not defined
btoa("Hello") // Would throw: btoa is not defined
new TextEncoder().encode("test") // Would throw
"test".toLocaleUpperCase('tr-TR') // Might behave differently
```
### 2.4 Regular Expression Differences (LOW RISK)
**QuickJS RegExp limitations:**
- No `d` flag (indices)
- No lookbehind assertions `(?<=...)` and `(?<!...)`
- No named capture groups `(?<name>...)`
**Expressions that might break:**
```javascript
"test123".match(/(?<=test)\d+/) // Lookbehind not supported
/(?<name>\w+)/.exec("test")?.groups?.name // Named groups not supported
```
### 2.5 Prototype Method Availability (LOW RISK)
**Methods that might differ:**
- `Array.prototype.at()` - ES2022
- `String.prototype.at()` - ES2022
- `Object.hasOwn()` - ES2022
- `String.prototype.replaceAll()` - ES2021
**Test Case:**
```javascript
[1,2,3].at(-1) // Might not exist
"hello".at(-1) // Might not exist
```
### 2.6 NaN/Infinity/Special Values (LOW RISK)
**Implementation:**
```rust
// QuickJS js_to_json:
if let Some(n) = serde_json::Number::from_f64(f) {
return Ok(serde_json::Value::Number(n));
} else {
return Ok(serde_json::Value::Null); // NaN, Infinity -> null
}
```
Both engines convert NaN/Infinity to null in JSON, so this is consistent.
### 2.7 Fallback for Unsupported Types (LOW RISK)
**QuickJS fallback:**
```rust
// Fallback
Ok(serde_json::Value::String("[object]".to_string()))
```
Types that would trigger this:
- Symbol
- WeakMap/WeakRef
- Generator objects
- Custom objects with non-enumerable properties only
### 2.8 Date Object Timezone Handling (MEDIUM RISK)
**Potential Issue:**
- `new Date()` without arguments uses system time
- Timezone-dependent methods might vary
**Safe patterns (already tested):**
```javascript
new Date('2024-01-15T00:00:00.000Z').getUTCFullYear() // OK - UTC methods
Date.parse('2024-01-15T00:00:00.000Z') // OK - explicit timezone
```
**Risky patterns:**
```javascript
new Date().toLocaleDateString() // Timezone dependent
new Date().getHours() // Timezone dependent
```
## 3. Edge Cases NOT Currently Tested
### 3.1 Very Large Numbers
```javascript
9007199254740991 // MAX_SAFE_INTEGER
9007199254740992 // MAX_SAFE_INTEGER + 1 (loses precision)
2147483648 // i32::MAX + 1
```
### 3.2 Negative Zero
```javascript
-0 === 0 // true
Object.is(-0, 0) // false
1/-0 // -Infinity
```
### 3.3 Sparse Arrays
```javascript
const arr = [1, , 3] // Hole at index 1
arr.map(x => x * 2) // Holes might be handled differently
arr.filter(x => true) // Holes might be skipped or preserved
```
### 3.4 Unicode Edge Cases
```javascript
"🎉".length // 2 (surrogate pairs)
"🎉".split('') // Might differ
[..."🎉"] // Might differ
"café" === "café" // NFC vs NFD normalization
```
### 3.5 Prototype Chain
```javascript
const obj = Object.create({ inherited: 1 });
obj.own = 2;
Object.keys(obj) // Should only return ['own']
```
### 3.6 Getter/Setter Properties
```javascript
const obj = {
get prop() { return 42; },
set prop(v) { }
};
obj.prop // Should return 42
```
### 3.7 Circular References
```javascript
const obj = { a: 1 };
obj.self = obj;
JSON.stringify(obj) // Should throw in both
```
### 3.8 Array-like Objects
```javascript
const arrayLike = { 0: 'a', 1: 'b', length: 2 };
Array.from(arrayLike) // Should work in both
```
## 4. Recommended Additional Tests
### High Priority (Add to parity tests):
1. Large integers (i32 boundary, MAX_SAFE_INTEGER boundary)
2. `Array.prototype.at()` and `String.prototype.at()`
3. Sparse arrays with holes
4. Emoji/surrogate pair handling
5. Object property order verification
### Medium Priority:
1. Getter/setter access
2. Prototype chain behavior
3. Array-like object conversion
4. Error message format differences
### Low Priority (Unlikely to be used in expressions):
1. WeakMap/WeakSet
2. Generators
3. Symbols
4. Proxy edge cases
## 5. Known Safe Patterns
These patterns are safe to use and have been verified:
- All arithmetic and comparison operators
- All standard array methods (map, filter, reduce, etc.)
- All standard string methods
- Object spread and destructuring
- Optional chaining and nullish coalescing
- Template literals
- Arrow functions
- Try-catch blocks
- `flow_input`, `flow_env`, `previous_result`, `results` access
- JSON operations
- Date operations with UTC methods
- Regular expressions (basic patterns without lookbehind)
## 6. Test Coverage Summary
### Unit Parity Tests (114 tests in js_eval_parity_tests.rs)
- Basic arithmetic, comparison, logical, and bitwise operators
- Object operations: property access, spread, destructuring
- Array operations: map, filter, reduce, find, some, every, slice, flat, etc.
- String operations: all standard methods
- Template literals with complex expressions
- Optional chaining and nullish coalescing
- Set and Map operations
- JSON parse/stringify
- Date operations with UTC methods
- Error handling with try-catch
- Large integer handling (i32 boundaries, timestamps, MAX_SAFE_INTEGER)
- Unicode and special characters
- Type coercion
### Flow Engine Parity Tests (19 tests in flow_engine_parity.rs)
All tests pass with both Deno Core and QuickJS:
1. **Linear flow with input transforms** - `results.a.property` access
2. **For-loop with complex iterator** - `results.a.users.filter(...)`
3. **Branch conditions** - `results.a.status === 'premium' && results.a.score >= 90`
4. **Previous result aggregation** - `previous_result.value`, `results.a.value + results.b.value`
5. **Nested complexity** - Deep result access across loop iterations
6. **Parallel for-loops** - Multiple concurrent iterations
7. **Skip-if expressions** - Conditional step execution
8. **Object transformations** - Complex data manipulation
9. **Template literals** - `\`Status: ${results.a.status}\``
10. **Optional chaining** - `results.a.user?.name`, `results.a?.missing?.value ?? 'default'`
11. **Flow env access** - `flow_env.CONFIG.apiUrl`
12. **Combined flow_input and flow_env**
13. **Results optional chaining** - Deep optional chaining with results proxy
14. **Large integers** - Timestamps, i32 boundaries through results
15. **Unicode and emoji** - Strings with unicode through flow results
16. **Complex array operations** - Sort, filter/map chains, reduce through results
17. **Multiline expressions** - Multi-statement expressions with semicolons and return
18. **Spread operators** - `{...results.a.config}`, `[...results.a.tags]`
19. **Nested for-loop results access** - Accessing outer step results from inner loops
## 7. Conclusion
The QuickJS migration is **safe** for the vast majority of flow expressions. Comprehensive testing shows:
- **133 total parity tests pass** (114 unit + 19 flow engine)
- All tests pass with both Deno Core and QuickJS
- No behavioral differences detected in production-like scenarios
### ES2022+ Method Support (All SUPPORTED in both engines):
Tested and verified to work identically:
- `Array.prototype.at()` - ES2022 ✅
- `String.prototype.at()` - ES2022 ✅
- `Object.hasOwn()` - ES2022 ✅
- `String.prototype.replaceAll()` - ES2021 ✅
- `Array.prototype.findLast()` - ES2023 ✅
- `Array.prototype.findLastIndex()` - ES2023 ✅
- `Array.prototype.toSorted()` - ES2023 ✅
- `Array.prototype.toReversed()` - ES2023 ✅
- `Array.prototype.toSpliced()` - ES2023 ✅
- `Array.prototype.with()` - ES2023 ✅
- `Object.groupBy()` - ES2024 ✅
### Regex Feature Support (All SUPPORTED in both engines):
- Lookbehind assertions `(?<=...)`
- Negative lookbehind `(?<!...)`
- Named capture groups `(?<name>...)`
- `d` flag (indices) ✅
### Browser API Parity (Both engines return undefined):
These APIs are NOT available in either engine (consistent behavior):
- `atob` / `btoa` - Both return `typeof === "undefined"`
- `TextEncoder` / `TextDecoder` - Both return `typeof === "undefined"`
- `URL` / `URLSearchParams` - Both return `typeof === "undefined"`
### BREAKING CHANGE IDENTIFIED:
**Intl API** - ONLY breaking change found:
- Deno Core: `typeof Intl === "object"` (available)
- QuickJS: `typeof Intl === "undefined"` (NOT available)
Expressions using these will FAIL with QuickJS:
- `new Intl.NumberFormat('en-US').format(1234567.89)`
- `new Intl.DateTimeFormat('en-US').format(new Date())`
- `num.toLocaleString('de-DE')`
- `date.toLocaleDateString('fr-FR')`
**Mitigation**: Search production logs for `Intl` usage in flow expressions before migration.
### Recommendations:
1. ✅ Run the parity tests to verify current implementation (132 unit tests + 19 flow engine tests pass)
2. ✅ Add tests for edge cases (large integers, optional chaining, spread, multiline)
3. ✅ Test ES2022+ methods - All supported (Array.at, Object.hasOwn, etc.)
4. ✅ Test regex features - All supported (lookbehind, named groups)
5. ⚠️ **Search production for `Intl` usage** - Only confirmed breaking change
6. Run `USE_QUICKJS_FOR_FLOW_EVAL=1` in staging before full production rollout
7. Consider adding `Intl` polyfill to QuickJS if production usage is found
### Commands to Run Tests:
```bash
# Run all parity tests (132 tests)
cargo test --features deno_core,quickjs -p windmill-worker -- parity_
# Run flow engine tests with both engines (19 tests)
cargo test --features deno_core -p windmill --test flow_engine_parity
USE_QUICKJS_FOR_FLOW_EVAL=1 cargo test --features deno_core,quickjs -p windmill --test flow_engine_parity
```

File diff suppressed because it is too large Load Diff

View File

@@ -22,7 +22,8 @@ flow_testing = []
cloud = []
sqlx = []
deno_core = ["dep:deno_fetch", "dep:deno_webidl", "dep:deno_web", "dep:deno_net", "dep:deno_console", "dep:deno_url", "dep:deno_core",
"dep:deno_ast", "dep:deno_tls", "dep:deno_permissions", "dep:deno_io", "dep:deno_runtime", "dep:deno_telemetry", "dep:deno_error", "dep:winapi", "dep:rustls-pemfile"]
"dep:deno_ast", "dep:deno_tls", "dep:deno_permissions", "dep:deno_io", "dep:deno_runtime", "dep:deno_telemetry", "dep:deno_error", "dep:winapi", "dep:rustls-pemfile",
"quickjs"]
libffi_mac = ["dep:libffi-sys"]
otel = ["windmill-common/otel", "dep:opentelemetry", "dep:tracing-opentelemetry"]
dind = ["dep:bollard"]
@@ -36,6 +37,7 @@ nu = ["dep:windmill-parser-nu"]
java = ["dep:windmill-parser-java"]
ruby = ["dep:windmill-parser-ruby"]
duckdb = ["dep:libloading"]
quickjs = ["dep:rquickjs"]
bedrock = ["dep:aws-sdk-bedrockruntime", "windmill-common/bedrock"]
[dependencies]
@@ -145,6 +147,7 @@ prost.workspace = true
axum.workspace = true
bollard = { workspace = true, optional = true }
oracle = { workspace = true, optional = true }
rquickjs = { workspace = true, optional = true }
hudsucker.workspace = true
hyper-http-proxy.workspace = true
hyper-tls.workspace = true

View File

@@ -29,6 +29,8 @@ use deno_web::{BlobStore, TimersPermission};
#[cfg(feature = "deno_core")]
use itertools::Itertools;
use lazy_static::lazy_static;
#[cfg(feature = "quickjs")]
use once_cell::sync::Lazy;
use regex::Regex;
use serde_json::value::RawValue;
use sqlx::types::Json;
@@ -393,6 +395,35 @@ pub async fn eval_timeout(
}
}
// Use QuickJS if enabled and either deno_core is not available or USE_QUICKJS env var is set
#[cfg(all(feature = "quickjs", not(feature = "deno_core")))]
{
return crate::js_eval_quickjs::eval_timeout_quickjs(
expr,
transform_context,
flow_input,
flow_env,
authed_client,
by_id,
ctx,
)
.await;
}
#[cfg(all(feature = "quickjs", feature = "deno_core"))]
if *USE_QUICKJS {
return crate::js_eval_quickjs::eval_timeout_quickjs(
expr,
transform_context,
flow_input,
flow_env,
authed_client,
by_id,
ctx,
)
.await;
}
#[cfg(not(feature = "deno_core"))]
{
#[allow(unreachable_code)]
@@ -522,8 +553,8 @@ pub async fn eval_timeout(
}
}
#[cfg(feature = "deno_core")]
fn replace_with_await(expr: String, fn_name: &str) -> String {
#[cfg(any(feature = "deno_core", feature = "quickjs"))]
pub fn replace_with_await(expr: String, fn_name: &str) -> String {
let sep = format!("{}(", fn_name);
let mut split = expr.split(&sep);
let mut s = split.next().unwrap_or_else(|| "").to_string();
@@ -545,12 +576,16 @@ lazy_static! {
Regex::new(r"^(https?)://(([^:@\s]+):([^:@\s]+)@)?([^:@\s]+)(:(\d+))?$").unwrap();
}
#[cfg(feature = "deno_core")]
fn replace_with_await_result(expr: String) -> String {
#[cfg(feature = "quickjs")]
#[allow(dead_code)] // Only used when both quickjs and deno_core features are enabled
static USE_QUICKJS: Lazy<bool> = Lazy::new(|| std::env::var("USE_QUICKJS_FOR_FLOW_EVAL").is_ok());
#[cfg(any(feature = "deno_core", feature = "quickjs"))]
pub fn replace_with_await_result(expr: String) -> String {
RE.replace_all(&expr, "(await $r)").to_string()
}
#[cfg(feature = "deno_core")]
#[cfg(any(feature = "deno_core", feature = "quickjs"))]
fn add_closing_bracket(s: &str) -> String {
let mut s = s.to_string();
let mut level = 1;

File diff suppressed because it is too large Load Diff

View File

@@ -0,0 +1,788 @@
/*
* Author: Ruben Fiszel
* Copyright: Windmill Labs, Inc 2022
* This file and its contents are licensed under the AGPLv3 License.
* Please see the included NOTICE for copyright information and
* LICENSE-AGPL for a copy of the license.
*/
//! QuickJS-based JavaScript expression evaluation for flow transformations.
//!
//! This module provides an alternative to deno_core for evaluating arbitrary JavaScript
//! expressions in flow transformations. QuickJS offers significantly faster startup times
//! (~200μs vs ~3ms for V8), making it ideal for evaluating many small expressions.
//!
//! ## Performance Characteristics (release mode benchmarks)
//! - **Simple expressions**: ~238μs (QuickJS) vs ~3.05ms (deno_core) = **~13x faster**
//! - **Complex expressions**: ~192μs (QuickJS) vs ~3.09ms (deno_core) = **~16x faster**
//! - **Memory**: ~2.5% of V8's footprint
//!
//! For flow expression evaluation where startup time dominates, QuickJS is significantly
//! faster overall despite being slower for long-running CPU-intensive code.
//!
//! ## Async Operations
//! This implementation uses true async Rust callbacks (similar to deno_core's ops) for
//! `variable()`, `resource()`, and `results.xxx` access. The async functions use
//! rquickjs's `Async<MutFn<...>>` wrapper which returns JavaScript Promises that are
//! resolved when the Rust async operations complete. No pre-fetching is required.
use std::collections::HashMap;
use std::sync::Arc;
use rquickjs::{
async_with,
prelude::{Async, Func, MutFn},
AsyncContext, AsyncRuntime, CatchResultExt, FromJs, IntoJs, Object, Value,
};
use serde_json::value::RawValue;
use windmill_common::client::AuthedClient;
use windmill_common::flow_status::JobResult;
use crate::js_eval::{replace_with_await, replace_with_await_result, IdContext};
/// Shared state for async operations within QuickJS
#[derive(Clone)]
struct AsyncOpState {
client: AuthedClient,
}
/// Evaluates a JavaScript expression using QuickJS runtime.
///
/// This function provides the same interface as `eval_timeout` but uses QuickJS
/// instead of deno_core/V8 for potentially faster startup times.
///
/// Unlike deno_core, this uses true async Rust callbacks for `variable()`,
/// `resource()`, and `results.xxx` access - no pre-fetching required.
pub async fn eval_timeout_quickjs(
expr: String,
transform_context: HashMap<String, Arc<Box<RawValue>>>,
flow_input: Option<mappable_rc::Marc<HashMap<String, Box<RawValue>>>>,
flow_env: Option<&HashMap<String, Box<RawValue>>>,
authed_client: Option<&AuthedClient>,
by_id: Option<&IdContext>,
ctx: Option<Vec<(String, String)>>,
) -> anyhow::Result<Box<RawValue>> {
let expr = expr.trim().to_string();
tracing::debug!(
"evaluating js eval (quickjs): {} with context {:?}",
expr,
transform_context
);
// Clone data for the blocking task
let by_id_clone = by_id.cloned();
let flow_input_clone = flow_input.clone();
let flow_env_clone = flow_env.cloned();
let authed_client_clone = authed_client.cloned();
// Determine which context keys are actually used in the expression
let p_ids = by_id.map(|x| {
[
format!("results.{}", x.previous_id),
format!("results?.{}", x.previous_id),
format!("results[\"{}\"]", x.previous_id),
format!("results?.[\"{}\"]", x.previous_id),
]
});
let mut context_keys: Vec<String> = transform_context
.keys()
.filter(|x| expr.contains(&x.to_string()))
.cloned()
.collect();
if !context_keys.contains(&"previous_result".to_string())
&& (p_ids.is_some() && p_ids.as_ref().unwrap().iter().any(|x| expr.contains(x)))
|| expr.contains("error")
{
context_keys.push("previous_result".to_string());
}
let has_flow_input = expr.contains("flow_input");
if has_flow_input {
context_keys.push("flow_input".to_string())
}
// Filter transform_context to only include used keys
let filtered_context: HashMap<String, Arc<Box<RawValue>>> = transform_context
.into_iter()
.filter(|(k, _)| context_keys.contains(k))
.collect();
let expr_clone = expr.clone();
// Run the QuickJS evaluation with a timeout
tokio::time::timeout(
std::time::Duration::from_millis(10000),
tokio::task::spawn_blocking(move || {
// Create a new tokio runtime for async operations within the blocking context
let rt = tokio::runtime::Builder::new_current_thread()
.enable_all()
.build()?;
rt.block_on(async move {
eval_quickjs_inner(
&expr_clone,
filtered_context,
flow_input_clone,
flow_env_clone,
authed_client_clone,
by_id_clone,
ctx,
context_keys,
)
.await
})
}),
)
.await
.map_err(|_| {
anyhow::anyhow!(
"The expression evaluation `{expr}` took too long to execute (>10000ms)"
)
})??
}
async fn eval_quickjs_inner(
expr: &str,
transform_context: HashMap<String, Arc<Box<RawValue>>>,
flow_input: Option<mappable_rc::Marc<HashMap<String, Box<RawValue>>>>,
flow_env: Option<HashMap<String, Box<RawValue>>>,
authed_client: Option<AuthedClient>,
by_id: Option<IdContext>,
extra_ctx: Option<Vec<(String, String)>>,
context_keys: Vec<String>,
) -> anyhow::Result<Box<RawValue>> {
let runtime = AsyncRuntime::new()?;
let context = AsyncContext::full(&runtime).await?;
// Create shared state for async ops if we have a client
let op_state = authed_client.map(|client| Arc::new(AsyncOpState { client }));
let op_state_clone = op_state.clone();
let by_id_clone = by_id.clone();
// Transform expression to add await for variable/resource/results access
let expr_with_funcs = ["variable", "resource"]
.into_iter()
.fold(expr.to_string(), replace_with_await);
let transformed_expr = replace_with_await_result(expr_with_funcs);
async_with!(context => |ctx| {
let globals = ctx.globals();
// Set up context variables
for key in &context_keys {
if key == "flow_input" {
if let Some(ref fi) = flow_input {
let json_str = serde_json::to_string(fi.as_ref())?;
let val: serde_json::Value = serde_json::from_str(&json_str)?;
let js_val = json_to_js(&ctx, &val)?;
globals.set(key.as_str(), js_val)?;
} else {
globals.set(key.as_str(), Value::new_null(ctx.clone()))?;
}
} else if let Some(raw_val) = transform_context.get(key) {
let val: serde_json::Value = serde_json::from_str(raw_val.get())?;
let js_val = json_to_js(&ctx, &val)?;
globals.set(key.as_str(), js_val)?;
}
}
// Set up flow_env if referenced
if expr.contains("flow_env") {
if let Some(ref fe) = flow_env {
let obj = Object::new(ctx.clone())?;
for (k, v) in fe {
let val: serde_json::Value = serde_json::from_str(v.get())?;
let js_val = json_to_js(&ctx, &val)?;
obj.set(k.as_str(), js_val)?;
}
globals.set("flow_env", obj)?;
} else {
globals.set("flow_env", Object::new(ctx.clone())?)?;
}
}
// Set up additional context variables
if let Some(ctx_vars) = extra_ctx {
for (k, v) in ctx_vars {
globals.set(k.as_str(), v.as_str())?;
}
}
// Set up error extraction if needed
if expr.contains("error") && context_keys.contains(&"previous_result".to_string()) {
let error_setup = r#"
let error = previous_result?.error;
if (!error) {
if (Array.isArray(previous_result)) {
const errors = previous_result.filter(item => item && typeof item === 'object' && 'error' in item);
if (errors.length === 1) {
error = errors[0].error;
} else if (errors.length > 1) {
error = {
name: 'MultipleErrors',
message: errors.map(({ error: e }, i) => `[${e.step_id || i}] ${e.message || e.name}`).join('; '),
errors: previous_result
};
} else {
error = {
name: 'MultipleErrors',
message: "Could not parse errors",
errors: previous_result
};
}
} else {
if (previous_result) {
error = { name: 'UnknownError', message: 'Could not parse the error', error: previous_result };
} else {
error = { name: 'UnknownError', message: 'No error found' };
}
}
}
"#;
ctx.eval::<(), _>(error_setup).catch(&ctx).map_err(quickjs_error_to_anyhow)?;
}
// Set up async functions if we have a client
if let Some(ref state) = op_state_clone {
setup_async_ops(&ctx, &globals, state.clone())?;
} else {
// Set up stub functions that throw errors
setup_stub_functions(&ctx, &globals)?;
}
// Set up results proxy if we have by_id context
if let Some(ref by_id) = by_id_clone {
setup_results_proxy(&ctx, &globals, by_id, op_state_clone.clone())?;
}
// Determine if we need to add return statement
let code = if should_add_return_quickjs(&transformed_expr) {
format!("(async function() {{ return {}; }})()", transformed_expr)
} else {
format!("(async function() {{ {} }})()", transformed_expr)
};
// Evaluate the expression (returns a Promise)
let promise: rquickjs::Promise = ctx.eval(code).catch(&ctx).map_err(quickjs_error_to_anyhow)?;
// Await the promise
let result: Value = promise.into_future().await.catch(&ctx).map_err(quickjs_error_to_anyhow)?;
// Convert result to JSON
let json_result = js_to_json(&ctx, &result)?;
let json_str = serde_json::to_string(&json_result)?;
Ok(windmill_common::worker::to_raw_value(&serde_json::from_str::<serde_json::Value>(&json_str)?))
})
.await
}
/// Set up async variable() and resource() functions using true Rust async callbacks.
///
/// This uses rquickjs's `Async<MutFn<...>>` wrapper to create JavaScript functions that
/// return Promises. The Promises are resolved by spawned Rust async operations.
fn setup_async_ops<'js>(
ctx: &rquickjs::Ctx<'js>,
globals: &Object<'js>,
state: Arc<AsyncOpState>,
) -> anyhow::Result<()> {
// Error prefix - must match the JavaScript side
const ERR_PREFIX: &str = "\x00__WINDMILL_ERR__\x00";
// Create variable() function with true async Rust callback
// Returns a JSON string that JavaScript will parse
let state_for_var = state.clone();
globals.set(
"__fetchVariable",
Func::from(Async(MutFn::new(move |path: String| {
let client = state_for_var.client.clone();
async move {
match client.get_variable_value(&path).await {
Ok(value) => value,
Err(e) => format!("{}{}", ERR_PREFIX, e),
}
}
}))),
)?;
// Create resource() function - returns JSON string
let state_for_res = state.clone();
globals.set(
"__fetchResource",
Func::from(Async(MutFn::new(move |path: String| {
let client = state_for_res.client.clone();
async move {
match client
.get_resource_value_interpolated::<serde_json::Value>(&path, None)
.await
{
Ok(value) => serde_json::to_string(&value).unwrap_or_else(|_| "null".to_string()),
Err(e) => format!("{}{}", ERR_PREFIX, e),
}
}
}))),
)?;
// Create JavaScript wrappers that parse the JSON results
// We use a unique prefix that's extremely unlikely to appear in real data
let wrapper_code = r#"
const __ERR_PREFIX = '\x00__WINDMILL_ERR__\x00';
async function variable(path) {
const result = await __fetchVariable(path);
if (typeof result === 'string' && result.startsWith(__ERR_PREFIX)) {
throw new Error(result.substring(__ERR_PREFIX.length));
}
return result;
}
async function resource(path) {
const result = await __fetchResource(path);
if (typeof result === 'string' && result.startsWith(__ERR_PREFIX)) {
throw new Error(result.substring(__ERR_PREFIX.length));
}
return JSON.parse(result);
}
"#;
ctx.eval::<(), _>(wrapper_code)
.catch(ctx)
.map_err(quickjs_error_to_anyhow)?;
Ok(())
}
/// Set up stub functions that throw errors when no client is available
fn setup_stub_functions<'js>(
ctx: &rquickjs::Ctx<'js>,
_globals: &Object<'js>,
) -> anyhow::Result<()> {
let setup_code = r#"
function variable(path) {
return Promise.reject(new Error(`variable() is not available without an authenticated client`));
}
function resource(path) {
return Promise.reject(new Error(`resource() is not available without an authenticated client`));
}
"#;
ctx.eval::<(), _>(setup_code)
.catch(ctx)
.map_err(quickjs_error_to_anyhow)?;
Ok(())
}
/// Set up the `results` Proxy object with dynamic access to step results.
///
/// Uses async Rust callbacks to fetch results on-demand when accessed.
fn setup_results_proxy<'js>(
ctx: &rquickjs::Ctx<'js>,
globals: &Object<'js>,
by_id: &IdContext,
op_state: Option<Arc<AsyncOpState>>,
) -> anyhow::Result<()> {
// Store previous_id for the shortcut optimization
globals.set("__previous_id", by_id.previous_id.clone())?;
// Create async __getResult function that fetches step results via Rust
if let Some(state) = op_state {
let by_id_for_result = by_id.clone();
globals.set(
"__fetchResult",
Func::from(Async(MutFn::new(move |step_id: String| {
let client = state.client.clone();
let by_id = by_id_for_result.clone();
let step_id_clone = step_id.clone();
// Look up the job ID(s) for this step from the local cache
let job_result = by_id.steps_results.get(&step_id).cloned();
let flow_job_id = by_id.flow_job.to_string();
async move {
const ERR_PREFIX: &str = "\x00__WINDMILL_ERR__\x00";
let result: Result<serde_json::Value, String> = match job_result {
Some(jr) => {
// Found in local cache, fetch result by job ID
match jr {
JobResult::SingleJob(job_id) => {
client
.get_completed_job_result::<serde_json::Value>(&job_id.to_string(), None)
.await
.map_err(|e| format!("Failed to fetch result for step '{}': {}", step_id_clone, e))
}
JobResult::ListJob(job_ids) => {
let futs = job_ids.iter().map(|job_id| {
let client = client.clone();
let job_id_str = job_id.to_string();
async move {
client
.get_completed_job_result::<serde_json::Value>(&job_id_str, None)
.await
}
});
let results: Vec<_> = futures::future::join_all(futs).await;
let collected: Result<Vec<_>, _> = results.into_iter().collect();
collected
.map(serde_json::Value::Array)
.map_err(|e| format!("Failed to fetch results for step '{}': {}", step_id_clone, e))
}
}
}
None => {
// Not in local cache, fallback to querying by flow_job_id and step_id
// This happens for branch modules that need to access parent flow step results
client
.get_result_by_id::<serde_json::Value>(&flow_job_id, &step_id_clone, None)
.await
.map_err(|e| format!("Failed to fetch result for step '{}': {}", step_id_clone, e))
}
};
match result {
Ok(value) => serde_json::to_string(&value).unwrap_or_else(|_| "null".to_string()),
Err(e) => format!("{}{}", ERR_PREFIX, e),
}
}
}))),
)?;
// Create JavaScript wrapper that parses the JSON result
let wrapper_code = r#"
const __RESULT_ERR_PREFIX = '\x00__WINDMILL_ERR__\x00';
async function __getResult(stepId) {
const result = await __fetchResult(stepId);
if (typeof result === 'string' && result.startsWith(__RESULT_ERR_PREFIX)) {
throw new Error(result.substring(__RESULT_ERR_PREFIX.length));
}
return JSON.parse(result);
}
"#;
ctx.eval::<(), _>(wrapper_code)
.catch(ctx)
.map_err(quickjs_error_to_anyhow)?;
} else {
// No client - stub function that rejects
let stub_code = r#"
function __getResult(stepId) {
return Promise.reject(new Error('Result fetching not available without authenticated client'));
}
"#;
ctx.eval::<(), _>(stub_code)
.catch(ctx)
.map_err(quickjs_error_to_anyhow)?;
}
// Create the results proxy that calls __getResult for on-demand fetching
// Matches deno_core behavior: always try to fetch, let backend handle unknown step IDs
let proxy_setup = r#"
const results = new Proxy({}, {
get: function(target, name, receiver) {
// Handle symbol properties (like Symbol.toStringTag)
if (typeof name === 'symbol') {
return undefined;
}
// Check if it's the previous_id and previous_result exists
if (name === __previous_id && typeof previous_result !== 'undefined') {
return Promise.resolve(previous_result);
}
// Always try to fetch - let Rust/backend handle unknown step IDs
// This matches deno_core behavior
return __getResult(name);
}
});
"#;
ctx.eval::<(), _>(proxy_setup)
.catch(ctx)
.map_err(quickjs_error_to_anyhow)?;
Ok(())
}
/// Convert a serde_json::Value to a QuickJS Value
fn json_to_js<'js>(
ctx: &rquickjs::Ctx<'js>,
val: &serde_json::Value,
) -> rquickjs::Result<Value<'js>> {
match val {
serde_json::Value::Null => Ok(Value::new_null(ctx.clone())),
serde_json::Value::Bool(b) => Ok(Value::new_bool(ctx.clone(), *b)),
serde_json::Value::Number(n) => {
if let Some(i) = n.as_i64() {
if i >= i32::MIN as i64 && i <= i32::MAX as i64 {
Ok(Value::new_int(ctx.clone(), i as i32))
} else {
Ok(Value::new_float(ctx.clone(), i as f64))
}
} else if let Some(f) = n.as_f64() {
Ok(Value::new_float(ctx.clone(), f))
} else {
Ok(Value::new_float(ctx.clone(), 0.0))
}
}
serde_json::Value::String(s) => s.clone().into_js(ctx),
serde_json::Value::Array(arr) => {
let js_arr = rquickjs::Array::new(ctx.clone())?;
for (i, item) in arr.iter().enumerate() {
js_arr.set(i, json_to_js(ctx, item)?)?;
}
Ok(js_arr.into_value())
}
serde_json::Value::Object(obj) => {
let js_obj = Object::new(ctx.clone())?;
for (k, v) in obj {
js_obj.set(k.as_str(), json_to_js(ctx, v)?)?;
}
Ok(js_obj.into_value())
}
}
}
/// Convert a QuickJS Value to a serde_json::Value
fn js_to_json<'js>(
ctx: &rquickjs::Ctx<'js>,
val: &Value<'js>,
) -> anyhow::Result<serde_json::Value> {
if val.is_null() || val.is_undefined() {
return Ok(serde_json::Value::Null);
}
if let Some(b) = val.as_bool() {
return Ok(serde_json::Value::Bool(b));
}
if let Some(i) = val.as_int() {
return Ok(serde_json::Value::Number(i.into()));
}
if let Some(f) = val.as_float() {
// Check if this float represents an exact integer
// This preserves integer formatting for values like timestamps
if f.fract() == 0.0 && f.abs() <= (i64::MAX as f64) {
let i = f as i64;
// Verify the conversion is exact (for very large numbers)
if (i as f64) == f {
return Ok(serde_json::Value::Number(i.into()));
}
}
if let Some(n) = serde_json::Number::from_f64(f) {
return Ok(serde_json::Value::Number(n));
} else {
return Ok(serde_json::Value::Null);
}
}
if let Ok(s) = String::from_js(ctx, val.clone()) {
return Ok(serde_json::Value::String(s));
}
if let Ok(arr) = rquickjs::Array::from_js(ctx, val.clone()) {
let mut json_arr = Vec::new();
for i in 0..arr.len() {
if let Ok(item) = arr.get::<Value>(i) {
json_arr.push(js_to_json(ctx, &item)?);
}
}
return Ok(serde_json::Value::Array(json_arr));
}
if let Ok(obj) = Object::from_js(ctx, val.clone()) {
let mut json_obj = serde_json::Map::new();
for res in obj.props::<String, Value>() {
if let Ok((k, v)) = res {
json_obj.insert(k, js_to_json(ctx, &v)?);
}
}
return Ok(serde_json::Value::Object(json_obj));
}
// Fallback
Ok(serde_json::Value::String("[object]".to_string()))
}
/// Determines if we should prepend "return" to the expression
fn should_add_return_quickjs(expr: &str) -> bool {
let trimmed = expr.trim();
if trimmed.is_empty() {
return true;
}
if trimmed.starts_with("return ") || trimmed.starts_with("return;") || trimmed == "return" {
return false;
}
let statement_prefixes = [
"const ", "let ", "var ", "if ", "if(", "for ", "for(", "while ", "while(", "switch ",
"switch(", "try ", "try{", "throw ", "function ", "class ", "async ", "await ",
];
for prefix in &statement_prefixes {
if trimmed.starts_with(prefix) {
return false;
}
}
if contains_semicolon_outside_strings(trimmed) {
return false;
}
true
}
fn contains_semicolon_outside_strings(expr: &str) -> bool {
let mut in_single_quote = false;
let mut in_double_quote = false;
let mut in_template = false;
let mut prev_char = '\0';
for ch in expr.chars() {
match ch {
'\'' if prev_char != '\\' && !in_double_quote && !in_template => {
in_single_quote = !in_single_quote;
}
'"' if prev_char != '\\' && !in_single_quote && !in_template => {
in_double_quote = !in_double_quote;
}
'`' if prev_char != '\\' && !in_single_quote && !in_double_quote => {
in_template = !in_template;
}
';' if !in_single_quote && !in_double_quote && !in_template => {
return true;
}
_ => {}
}
prev_char = ch;
}
false
}
fn quickjs_error_to_anyhow(err: rquickjs::CaughtError<'_>) -> anyhow::Error {
anyhow::anyhow!("QuickJS evaluation error: {}", err)
}
#[cfg(test)]
mod tests {
use super::*;
use serde_json::json;
use windmill_common::worker::to_raw_value;
#[tokio::test]
async fn test_eval_quickjs_simple() -> anyhow::Result<()> {
let mut env = HashMap::new();
env.insert("x".to_string(), Arc::new(to_raw_value(&json!(5))));
env.insert("y".to_string(), Arc::new(to_raw_value(&json!(3))));
let result =
eval_timeout_quickjs("x + y".to_string(), env, None, None, None, None, None).await?;
assert_eq!(result.get(), "8");
Ok(())
}
#[tokio::test]
async fn test_eval_quickjs_object_access() -> anyhow::Result<()> {
let mut env = HashMap::new();
env.insert(
"params".to_string(),
Arc::new(to_raw_value(&json!({"test": 42, "nested": {"value": 100}}))),
);
let result = eval_timeout_quickjs(
"params.test".to_string(),
env.clone(),
None,
None,
None,
None,
None,
)
.await?;
assert_eq!(result.get(), "42");
let result2 = eval_timeout_quickjs(
"params.nested.value".to_string(),
env,
None,
None,
None,
None,
None,
)
.await?;
assert_eq!(result2.get(), "100");
Ok(())
}
#[tokio::test]
async fn test_eval_quickjs_array() -> anyhow::Result<()> {
let mut env = HashMap::new();
env.insert(
"arr".to_string(),
Arc::new(to_raw_value(&json!([1, 2, 3, 4, 5]))),
);
let result = eval_timeout_quickjs(
"arr.map(x => x * 2)".to_string(),
env,
None,
None,
None,
None,
None,
)
.await?;
assert_eq!(result.get(), "[2,4,6,8,10]");
Ok(())
}
#[tokio::test]
async fn test_eval_quickjs_flow_input() -> anyhow::Result<()> {
let mut flow_input = HashMap::new();
flow_input.insert("name".to_string(), to_raw_value(&json!("test")));
flow_input.insert("count".to_string(), to_raw_value(&json!(10)));
let result = eval_timeout_quickjs(
"flow_input.name".to_string(),
HashMap::new(),
Some(mappable_rc::Marc::new(flow_input)),
None,
None,
None,
None,
)
.await?;
assert_eq!(result.get(), "\"test\"");
Ok(())
}
#[test]
fn test_should_add_return_quickjs() {
assert!(should_add_return_quickjs("5"));
assert!(should_add_return_quickjs("x + y"));
assert!(should_add_return_quickjs("foo()"));
assert!(!should_add_return_quickjs("return 5"));
assert!(!should_add_return_quickjs("return x + y"));
assert!(!should_add_return_quickjs("const x = 5"));
assert!(!should_add_return_quickjs("let y = 10"));
assert!(!should_add_return_quickjs("if (x > 5) { return x; }"));
assert!(!should_add_return_quickjs("let x = 5; x + 1"));
}
}

View File

@@ -42,6 +42,10 @@ pub mod job_logger;
pub mod job_logger_ee;
mod job_logger_oss;
mod js_eval;
#[cfg(feature = "quickjs")]
pub mod js_eval_quickjs;
#[cfg(test)]
mod js_eval_parity_tests;
pub mod memory_common;
#[cfg(feature = "private")]
pub mod memory_ee;