@adonis-agora/agent 0.74.1 → 0.76.0

package/dist/src/react-native/genui/provider.d.ts

@@ -0,0 +1,19 @@
+import { type ReactNode } from 'react';
+import { type GenerativeUIFallback, type GenuiProviderProps } from '../../react/core/genui/generative-ui.js';
+import type { GenuiActionHandler } from './sandbox.js';
+/** The item's persisted text, as a `<Text>` — the web default draws a `<span>`, which RN cannot. */
+export declare const nativeGenuiFallback: GenerativeUIFallback;
+/**
+ * `GenuiProvider` for React Native: the same provider (the same shared contexts — `GenerativeUI`
+ * and `useGenerativeUI` read it as on the web), with `fallback` defaulting to
+ * {@link nativeGenuiFallback} so an unknown or failing component never draws a DOM element.
+ */
+export declare function GenuiProvider({ fallback, ...props }: GenuiProviderProps): import("react").JSX.Element;
+/** Where UI actions go — a sandbox's `agent.send(…)`. Typically the chat's `sendUiAction`. */
+export declare function GenuiActionProvider({ onAction, children, }: {
+    onAction: GenuiActionHandler;
+    children?: ReactNode;
+}): import("react").JSX.Element;
+/** The enclosing {@link GenuiActionProvider}'s handler, or `null` outside one. */
+export declare function useGenuiAction(): GenuiActionHandler | null;
+//# sourceMappingURL=provider.d.ts.map

package/dist/src/react-native/genui/provider.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"provider.d.ts","sourceRoot":"","sources":["../../../../src/react-native/genui/provider.tsx"],"names":[],"mappings":"AAAA,OAAO,EAAE,KAAK,SAAS,EAAc,MAAM,OAAO,CAAC;AAEnD,OAAO,EAEL,KAAK,oBAAoB,EAEzB,KAAK,kBAAkB,EACxB,MAAM,yCAAyC,CAAC;AAEjD,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,cAAc,CAAC;AAEvD,oGAAoG;AACpG,eAAO,MAAM,mBAAmB,EAAE,oBACyD,CAAC;AAE5F;;;;GAIG;AACH,wBAAgB,aAAa,CAAC,EAAE,QAAQ,EAAE,GAAG,KAAK,EAAE,EAAE,kBAAkB,+BAEvE;AAED,8FAA8F;AAC9F,wBAAgB,mBAAmB,CAAC,EAClC,QAAQ,EACR,QAAQ,GACT,EAAE;IACD,QAAQ,EAAE,kBAAkB,CAAC;IAC7B,QAAQ,CAAC,EAAE,SAAS,CAAC;CACtB,+BAEA;AAED,kFAAkF;AAClF,wBAAgB,cAAc,IAAI,kBAAkB,GAAG,IAAI,CAE1D"}

package/dist/src/react-native/genui/provider.js

@@ -0,0 +1,23 @@
+import { jsx as _jsx } from "react/jsx-runtime";
+import { useContext } from 'react';
+import { Text } from 'react-native';
+import { GenuiProvider as BaseGenuiProvider, GenuiActionContext, } from '../../react/core/genui/generative-ui.js';
+/** The item's persisted text, as a `<Text>` — the web default draws a `<span>`, which RN cannot. */
+export const nativeGenuiFallback = (problem) => problem.item.fallbackText !== undefined ? _jsx(Text, { children: problem.item.fallbackText }) : null;
+/**
+ * `GenuiProvider` for React Native: the same provider (the same shared contexts — `GenerativeUI`
+ * and `useGenerativeUI` read it as on the web), with `fallback` defaulting to
+ * {@link nativeGenuiFallback} so an unknown or failing component never draws a DOM element.
+ */
+export function GenuiProvider({ fallback, ...props }) {
+    return _jsx(BaseGenuiProvider, { ...props, fallback: fallback ?? nativeGenuiFallback });
+}
+/** Where UI actions go — a sandbox's `agent.send(…)`. Typically the chat's `sendUiAction`. */
+export function GenuiActionProvider({ onAction, children, }) {
+    return _jsx(GenuiActionContext.Provider, { value: onAction, children: children });
+}
+/** The enclosing {@link GenuiActionProvider}'s handler, or `null` outside one. */
+export function useGenuiAction() {
+    return useContext(GenuiActionContext);
+}
+//# sourceMappingURL=provider.js.map

package/dist/src/react-native/genui/provider.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"provider.js","sourceRoot":"","sources":["../../../../src/react-native/genui/provider.tsx"],"names":[],"mappings":";AAAA,OAAO,EAAkB,UAAU,EAAE,MAAM,OAAO,CAAC;AACnD,OAAO,EAAE,IAAI,EAAE,MAAM,cAAc,CAAC;AACpC,OAAO,EACL,aAAa,IAAI,iBAAiB,EAElC,kBAAkB,GAEnB,MAAM,yCAAyC,CAAC;AAIjD,oGAAoG;AACpG,MAAM,CAAC,MAAM,mBAAmB,GAAyB,CAAC,OAA4B,EAAE,EAAE,CACxF,OAAO,CAAC,IAAI,CAAC,YAAY,KAAK,SAAS,CAAC,CAAC,CAAC,KAAC,IAAI,cAAE,OAAO,CAAC,IAAI,CAAC,YAAY,GAAQ,CAAC,CAAC,CAAC,IAAI,CAAC;AAE5F;;;;GAIG;AACH,MAAM,UAAU,aAAa,CAAC,EAAE,QAAQ,EAAE,GAAG,KAAK,EAAsB;IACtE,OAAO,KAAC,iBAAiB,OAAK,KAAK,EAAE,QAAQ,EAAE,QAAQ,IAAI,mBAAmB,GAAI,CAAC;AACrF,CAAC;AAED,8FAA8F;AAC9F,MAAM,UAAU,mBAAmB,CAAC,EAClC,QAAQ,EACR,QAAQ,GAIT;IACC,OAAO,KAAC,kBAAkB,CAAC,QAAQ,IAAC,KAAK,EAAE,QAAQ,YAAG,QAAQ,GAA+B,CAAC;AAChG,CAAC;AAED,kFAAkF;AAClF,MAAM,UAAU,cAAc;IAC5B,OAAO,UAAU,CAAC,kBAAkB,CAAC,CAAC;AACxC,CAAC"}

package/dist/src/react-native/genui/sandbox-assets.d.ts

@@ -0,0 +1,57 @@
+/**
+ * The sandbox's look, as a React Native app gives it. Like the server's `genui.sandbox` config
+ * (`GET <agent>/config`), but each asset may come inline (`runtime`, `source`) instead of by url.
+ */
+export interface NativeSandboxConfig {
+    /** Pass the app's theme in. Default true. */
+    theme?: boolean;
+    /**
+     * Tailwind (v4 `@tailwindcss/browser`): its source inline (`runtime`), or a `url` to fetch it from
+     * (the agent's public asset — relative urls resolve against `baseUrl`); `css` is extra Tailwind
+     * directives (`@theme`, `@custom-variant`) the app's stylesheet declares.
+     */
+    tailwind?: {
+        runtime?: string;
+        url?: string;
+        css?: string;
+    };
+    /** The kit bundle (JSX views): its source inline, or a `url` to fetch it from. */
+    kit?: {
+        source?: string;
+        url?: string;
+    };
+    /** The app's compiled styles (`genuiSandboxKit({ styles })`): inline, or a `url` to fetch them from. */
+    css?: {
+        source?: string;
+        url?: string;
+    };
+}
+/**
+ * Where the config comes from: an object; a url answering `GET <agent>/config` (or the sandbox
+ * config itself); a loader (your own authenticated client); `false` — theme only. Default: `GET
+ * <baseUrl>/config` when there is a `baseUrl`, else theme only.
+ */
+export type NativeSandboxConfigSource = NativeSandboxConfig | string | false | (() => NativeSandboxConfig | undefined | Promise<NativeSandboxConfig | undefined>);
+export type FetchLike = (input: string, init?: {
+    headers?: Record<string, string>;
+    credentials?: 'omit' | 'same-origin' | 'include';
+}) => Promise<{
+    ok: boolean;
+    text(): Promise<string>;
+}>;
+/** Fetch a text once per url, shared by every sandbox in the app; a failure is forgotten. */
+export declare function loadNativeSandboxText(url: string, fetchImpl?: FetchLike | undefined, init?: Parameters<FetchLike>[1]): Promise<string | null>;
+/** The sandbox's config: `undefined` (and `loading`) until it is known. */
+export declare function useNativeSandboxConfig(source: NativeSandboxConfigSource | undefined, baseUrl: string | undefined, fetchImpl: FetchLike | undefined): {
+    config: NativeSandboxConfig | undefined;
+    loading: boolean;
+};
+/**
+ * An asset's text: inline if given, else fetched from its url (resolved against `baseUrl`).
+ * `undefined` while it loads, `null` when it could not be had (or there is none).
+ */
+export declare function useNativeSandboxAsset(asset: {
+    inline?: string | undefined;
+    url?: string | undefined;
+} | undefined, baseUrl: string | undefined, fetchImpl: FetchLike | undefined): string | null | undefined;
+//# sourceMappingURL=sandbox-assets.d.ts.map

package/dist/src/react-native/genui/sandbox-assets.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"sandbox-assets.d.ts","sourceRoot":"","sources":["../../../../src/react-native/genui/sandbox-assets.ts"],"names":[],"mappings":"AAQA;;;GAGG;AACH,MAAM,WAAW,mBAAmB;IAClC,6CAA6C;IAC7C,KAAK,CAAC,EAAE,OAAO,CAAC;IAChB;;;;OAIG;IACH,QAAQ,CAAC,EAAE;QAAE,OAAO,CAAC,EAAE,MAAM,CAAC;QAAC,GAAG,CAAC,EAAE,MAAM,CAAC;QAAC,GAAG,CAAC,EAAE,MAAM,CAAA;KAAE,CAAC;IAC5D,kFAAkF;IAClF,GAAG,CAAC,EAAE;QAAE,MAAM,CAAC,EAAE,MAAM,CAAC;QAAC,GAAG,CAAC,EAAE,MAAM,CAAA;KAAE,CAAC;IACxC,wGAAwG;IACxG,GAAG,CAAC,EAAE;QAAE,MAAM,CAAC,EAAE,MAAM,CAAC;QAAC,GAAG,CAAC,EAAE,MAAM,CAAA;KAAE,CAAC;CACzC;AAED;;;;GAIG;AACH,MAAM,MAAM,yBAAyB,GACjC,mBAAmB,GACnB,MAAM,GACN,KAAK,GACL,CAAC,MAAM,mBAAmB,GAAG,SAAS,GAAG,OAAO,CAAC,mBAAmB,GAAG,SAAS,CAAC,CAAC,CAAC;AAEvF,MAAM,MAAM,SAAS,GAAG,CACtB,KAAK,EAAE,MAAM,EACb,IAAI,CAAC,EAAE;IAAE,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAAC,WAAW,CAAC,EAAE,MAAM,GAAG,aAAa,GAAG,SAAS,CAAA;CAAE,KAC1F,OAAO,CAAC;IAAE,EAAE,EAAE,OAAO,CAAC;IAAC,IAAI,IAAI,OAAO,CAAC,MAAM,CAAC,CAAA;CAAE,CAAC,CAAC;AA2CvD,6FAA6F;AAC7F,wBAAgB,qBAAqB,CACnC,GAAG,EAAE,MAAM,EACX,SAAS,GAAE,SAAS,GAAG,SAA0B,EACjD,IAAI,GAAE,UAAU,CAAC,SAAS,CAAC,CAAC,CAAC,CAA2B,GACvD,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC,CAgBxB;AAiCD,2EAA2E;AAC3E,wBAAgB,sBAAsB,CACpC,MAAM,EAAE,yBAAyB,GAAG,SAAS,EAC7C,OAAO,EAAE,MAAM,GAAG,SAAS,EAC3B,SAAS,EAAE,SAAS,GAAG,SAAS,GAC/B;IAAE,MAAM,EAAE,mBAAmB,GAAG,SAAS,CAAC;IAAC,OAAO,EAAE,OAAO,CAAA;CAAE,CAwB/D;AAED;;;GAGG;AACH,wBAAgB,qBAAqB,CACnC,KAAK,EAAE;IAAE,MAAM,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IAAC,GAAG,CAAC,EAAE,MAAM,GAAG,SAAS,CAAA;CAAE,GAAG,SAAS,EAC5E,OAAO,EAAE,MAAM,GAAG,SAAS,EAC3B,SAAS,EAAE,SAAS,GAAG,SAAS,GAC/B,MAAM,GAAG,IAAI,GAAG,SAAS,CAuB3B"}

package/dist/src/react-native/genui/sandbox-assets.js

@@ -0,0 +1,153 @@
+/**
+ * The theme / Tailwind / kit settings and assets of a React Native sandbox. A web host reads them
+ * from its own origin (`GET /agent/config`, then the asset urls it names); an app has no origin, so
+ * it passes them in, or names the agent by an absolute `baseUrl` — relative urls resolve against it.
+ */
+import { useEffect, useState } from 'react';
+import { resolveSandboxUrl } from './sandbox-host.js';
+/** Largest config or asset text accepted (the kit bundle is the big one). */
+const MAX_ASSET_CHARS = 8 * 1024 * 1024;
+function defaultFetch() {
+    const f = globalThis.fetch;
+    return typeof f === 'function' ? f : undefined;
+}
+function toConfig(body) {
+    if (typeof body !== 'object' || body === null)
+        return undefined;
+    const record = body;
+    const sandbox = typeof record.genui?.sandbox === 'object' && record.genui.sandbox !== null
+        ? record.genui.sandbox
+        : typeof record.theme === 'boolean'
+            ? record
+            : undefined;
+    if (sandbox === undefined)
+        return undefined;
+    const config = { theme: sandbox.theme !== false };
+    const tailwind = sandbox.tailwind;
+    if (typeof tailwind === 'object' && tailwind !== null && typeof tailwind.url === 'string') {
+        config.tailwind = {
+            url: tailwind.url,
+            ...(typeof tailwind.css === 'string' ? { css: tailwind.css } : {}),
+        };
+    }
+    const kit = sandbox.kit;
+    if (typeof kit === 'object' && kit !== null && typeof kit.url === 'string') {
+        config.kit = { url: kit.url };
+    }
+    const css = sandbox.css;
+    if (typeof css === 'object' && css !== null && typeof css.url === 'string') {
+        config.css = { url: css.url };
+    }
+    return config;
+}
+const THEME_ONLY = Object.freeze({ theme: true });
+const texts = new Map();
+/** Fetch a text once per url, shared by every sandbox in the app; a failure is forgotten. */
+export function loadNativeSandboxText(url, fetchImpl = defaultFetch(), init = { credentials: 'omit' }) {
+    if (fetchImpl === undefined)
+        return Promise.resolve(null);
+    let pending = texts.get(url);
+    if (pending === undefined) {
+        pending = Promise.resolve()
+            .then(() => fetchImpl(url, init))
+            .then((response) => (response.ok ? response.text() : null))
+            .then((text) => (typeof text === 'string' && text.length <= MAX_ASSET_CHARS ? text : null))
+            .catch(() => null)
+            .then((text) => {
+            if (text === null)
+                texts.delete(url);
+            return text;
+        });
+        texts.set(url, pending);
+    }
+    return pending;
+}
+async function loadConfig(source, baseUrl, fetchImpl) {
+    if (typeof source === 'function') {
+        try {
+            const loaded = await source();
+            return typeof loaded === 'object' && loaded !== null ? loaded : undefined;
+        }
+        catch {
+            return undefined;
+        }
+    }
+    const url = typeof source === 'string'
+        ? resolveSandboxUrl(source, baseUrl)
+        : baseUrl !== undefined
+            ? resolveSandboxUrl(`${baseUrl.replace(/\/+$/, '')}/config`, undefined)
+            : undefined;
+    if (url === undefined)
+        return undefined;
+    const text = await loadNativeSandboxText(url, fetchImpl, {
+        headers: { accept: 'application/json' },
+    });
+    if (text === null)
+        return undefined;
+    try {
+        return toConfig(JSON.parse(text));
+    }
+    catch {
+        return undefined;
+    }
+}
+/** The sandbox's config: `undefined` (and `loading`) until it is known. */
+export function useNativeSandboxConfig(source, baseUrl, fetchImpl) {
+    const immediate = source === false || (source === undefined && baseUrl === undefined)
+        ? THEME_ONLY
+        : typeof source === 'object'
+            ? source
+            : undefined;
+    const [state, setState] = useState({
+        config: undefined,
+        done: false,
+    });
+    useEffect(() => {
+        if (immediate !== undefined)
+            return;
+        let cancelled = false;
+        setState({ config: undefined, done: false });
+        void loadConfig(source, baseUrl, fetchImpl).then((config) => {
+            if (!cancelled)
+                setState({ config: config ?? THEME_ONLY, done: true });
+        });
+        return () => {
+            cancelled = true;
+        };
+    }, [immediate, source, baseUrl, fetchImpl]);
+    if (immediate !== undefined)
+        return { config: immediate, loading: false };
+    return { config: state.config, loading: !state.done };
+}
+/**
+ * An asset's text: inline if given, else fetched from its url (resolved against `baseUrl`).
+ * `undefined` while it loads, `null` when it could not be had (or there is none).
+ */
+export function useNativeSandboxAsset(asset, baseUrl, fetchImpl) {
+    const inline = asset?.inline;
+    const url = inline === undefined && asset?.url !== undefined
+        ? resolveSandboxUrl(asset.url, baseUrl)
+        : undefined;
+    const [state, setState] = useState({
+        url: undefined,
+        text: null,
+    });
+    useEffect(() => {
+        if (url === undefined)
+            return;
+        let cancelled = false;
+        void loadNativeSandboxText(url, fetchImpl).then((text) => {
+            if (!cancelled)
+                setState({ url, text });
+        });
+        return () => {
+            cancelled = true;
+        };
+    }, [url, fetchImpl]);
+    if (typeof inline === 'string')
+        return inline;
+    if (url === undefined)
+        return null;
+    return state.url === url ? state.text : undefined;
+}
+//# sourceMappingURL=sandbox-assets.js.map

package/dist/src/react-native/genui/sandbox-assets.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sandbox-assets.js","sourceRoot":"","sources":["../../../../src/react-native/genui/sandbox-assets.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AACH,OAAO,EAAE,SAAS,EAAE,QAAQ,EAAE,MAAM,OAAO,CAAC;AAC5C,OAAO,EAAE,iBAAiB,EAAE,MAAM,mBAAmB,CAAC;AAqCtD,6EAA6E;AAC7E,MAAM,eAAe,GAAG,CAAC,GAAG,IAAI,GAAG,IAAI,CAAC;AAExC,SAAS,YAAY;IACnB,MAAM,CAAC,GAAI,UAAkC,CAAC,KAAK,CAAC;IACpD,OAAO,OAAO,CAAC,KAAK,UAAU,CAAC,CAAC,CAAE,CAAe,CAAC,CAAC,CAAC,SAAS,CAAC;AAChE,CAAC;AAED,SAAS,QAAQ,CAAC,IAAa;IAC7B,IAAI,OAAO,IAAI,KAAK,QAAQ,IAAI,IAAI,KAAK,IAAI;QAAE,OAAO,SAAS,CAAC;IAChE,MAAM,MAAM,GAAG,IAA0D,CAAC;IAC1E,MAAM,OAAO,GACX,OAAO,MAAM,CAAC,KAAK,EAAE,OAAO,KAAK,QAAQ,IAAI,MAAM,CAAC,KAAK,CAAC,OAAO,KAAK,IAAI;QACxE,CAAC,CAAE,MAAM,CAAC,KAAK,CAAC,OAAmC;QACnD,CAAC,CAAC,OAAO,MAAM,CAAC,KAAK,KAAK,SAAS;YACjC,CAAC,CAAE,MAAkC;YACrC,CAAC,CAAC,SAAS,CAAC;IAClB,IAAI,OAAO,KAAK,SAAS;QAAE,OAAO,SAAS,CAAC;IAC5C,MAAM,MAAM,GAAwB,EAAE,KAAK,EAAE,OAAO,CAAC,KAAK,KAAK,KAAK,EAAE,CAAC;IACvE,MAAM,QAAQ,GAAG,OAAO,CAAC,QAA+D,CAAC;IACzF,IAAI,OAAO,QAAQ,KAAK,QAAQ,IAAI,QAAQ,KAAK,IAAI,IAAI,OAAO,QAAQ,CAAC,GAAG,KAAK,QAAQ,EAAE,CAAC;QAC1F,MAAM,CAAC,QAAQ,GAAG;YAChB,GAAG,EAAE,QAAQ,CAAC,GAAG;YACjB,GAAG,CAAC,OAAO,QAAQ,CAAC,GAAG,KAAK,QAAQ,CAAC,CAAC,CAAC,EAAE,GAAG,EAAE,QAAQ,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SACnE,CAAC;IACJ,CAAC;IACD,MAAM,GAAG,GAAG,OAAO,CAAC,GAA2C,CAAC;IAChE,IAAI,OAAO,GAAG,KAAK,QAAQ,IAAI,GAAG,KAAK,IAAI,IAAI,OAAO,GAAG,CAAC,GAAG,KAAK,QAAQ,EAAE,CAAC;QAC3E,MAAM,CAAC,GAAG,GAAG,EAAE,GAAG,EAAE,GAAG,CAAC,GAAG,EAAE,CAAC;IAChC,CAAC;IACD,MAAM,GAAG,GAAG,OAAO,CAAC,GAA2C,CAAC;IAChE,IAAI,OAAO,GAAG,KAAK,QAAQ,IAAI,GAAG,KAAK,IAAI,IAAI,OAAO,GAAG,CAAC,GAAG,KAAK,QAAQ,EAAE,CAAC;QAC3E,MAAM,CAAC,GAAG,GAAG,EAAE,GAAG,EAAE,GAAG,CAAC,GAAG,EAAE,CAAC;IAChC,CAAC;IACD,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,MAAM,UAAU,GAAwB,MAAM,CAAC,MAAM,CAAC,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;AAEvE,MAAM,KAAK,GAAG,IAAI,GAAG,EAAkC,CAAC;AAExD,6FAA6F;AAC7F,MAAM,UAAU,qBAAqB,CACnC,GAAW,EACX,SAAS,GAA0B,YAAY,EAAE,EACjD,IAAI,GAA6B,EAAE,WAAW,EAAE,MAAM,EAAE;IAExD,IAAI,SAAS,KAAK,SAAS;QAAE,OAAO,OAAO,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;IAC1D,IAAI,OAAO,GAAG,KAAK,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;IAC7B,IAAI,OAAO,KAAK,SAAS,EAAE,CAAC;QAC1B,OAAO,GAAG,OAAO,CAAC,OAAO,EAAE;aACxB,IAAI,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC;aAChC,IAAI,CAAC,CAAC,QAAQ,EAAE,EAAE,CAAC,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;aAC1D,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,OAAO,IAAI,KAAK,QAAQ,IAAI,IAAI,CAAC,MAAM,IAAI,eAAe,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;aAC1F,KAAK,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC;aACjB,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE;YACb,IAAI,IAAI,KAAK,IAAI;gBAAE,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;YACrC,OAAO,IAAI,CAAC;QACd,CAAC,CAAC,CAAC;QACL,KAAK,CAAC,GAAG,CAAC,GAAG,EAAE,OAAO,CAAC,CAAC;IAC1B,CAAC;IACD,OAAO,OAAO,CAAC;AACjB,CAAC;AAED,KAAK,UAAU,UAAU,CACvB,MAA6C,EAC7C,OAA2B,EAC3B,SAAgC;IAEhC,IAAI,OAAO,MAAM,KAAK,UAAU,EAAE,CAAC;QACjC,IAAI,CAAC;YACH,MAAM,MAAM,GAAG,MAAM,MAAM,EAAE,CAAC;YAC9B,OAAO,OAAO,MAAM,KAAK,QAAQ,IAAI,MAAM,KAAK,IAAI,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,SAAS,CAAC;QAC5E,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,SAAS,CAAC;QACnB,CAAC;IACH,CAAC;IACD,MAAM,GAAG,GACP,OAAO,MAAM,KAAK,QAAQ;QACxB,CAAC,CAAC,iBAAiB,CAAC,MAAM,EAAE,OAAO,CAAC;QACpC,CAAC,CAAC,OAAO,KAAK,SAAS;YACrB,CAAC,CAAC,iBAAiB,CAAC,GAAG,OAAO,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,SAAS,EAAE,SAAS,CAAC;YACvE,CAAC,CAAC,SAAS,CAAC;IAClB,IAAI,GAAG,KAAK,SAAS;QAAE,OAAO,SAAS,CAAC;IACxC,MAAM,IAAI,GAAG,MAAM,qBAAqB,CAAC,GAAG,EAAE,SAAS,EAAE;QACvD,OAAO,EAAE,EAAE,MAAM,EAAE,kBAAkB,EAAE;KACxC,CAAC,CAAC;IACH,IAAI,IAAI,KAAK,IAAI;QAAE,OAAO,SAAS,CAAC;IACpC,IAAI,CAAC;QACH,OAAO,QAAQ,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC;IACpC,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,SAAS,CAAC;IACnB,CAAC;AACH,CAAC;AAED,2EAA2E;AAC3E,MAAM,UAAU,sBAAsB,CACpC,MAA6C,EAC7C,OAA2B,EAC3B,SAAgC;IAEhC,MAAM,SAAS,GACb,MAAM,KAAK,KAAK,IAAI,CAAC,MAAM,KAAK,SAAS,IAAI,OAAO,KAAK,SAAS,CAAC;QACjE,CAAC,CAAC,UAAU;QACZ,CAAC,CAAC,OAAO,MAAM,KAAK,QAAQ;YAC1B,CAAC,CAAC,MAAM;YACR,CAAC,CAAC,SAAS,CAAC;IAClB,MAAM,CAAC,KAAK,EAAE,QAAQ,CAAC,GAAG,QAAQ,CAA6D;QAC7F,MAAM,EAAE,SAAS;QACjB,IAAI,EAAE,KAAK;KACZ,CAAC,CAAC;IACH,SAAS,CAAC,GAAG,EAAE;QACb,IAAI,SAAS,KAAK,SAAS;YAAE,OAAO;QACpC,IAAI,SAAS,GAAG,KAAK,CAAC;QACtB,QAAQ,CAAC,EAAE,MAAM,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;QAC7C,KAAK,UAAU,CAAC,MAAM,EAAE,OAAO,EAAE,SAAS,CAAC,CAAC,IAAI,CAAC,CAAC,MAAM,EAAE,EAAE;YAC1D,IAAI,CAAC,SAAS;gBAAE,QAAQ,CAAC,EAAE,MAAM,EAAE,MAAM,IAAI,UAAU,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC;QACzE,CAAC,CAAC,CAAC;QACH,OAAO,GAAG,EAAE;YACV,SAAS,GAAG,IAAI,CAAC;QACnB,CAAC,CAAC;IACJ,CAAC,EAAE,CAAC,SAAS,EAAE,MAAM,EAAE,OAAO,EAAE,SAAS,CAAC,CAAC,CAAC;IAC5C,IAAI,SAAS,KAAK,SAAS;QAAE,OAAO,EAAE,MAAM,EAAE,SAAS,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC;IAC1E,OAAO,EAAE,MAAM,EAAE,KAAK,CAAC,MAAM,EAAE,OAAO,EAAE,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC;AACxD,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,qBAAqB,CACnC,KAA4E,EAC5E,OAA2B,EAC3B,SAAgC;IAEhC,MAAM,MAAM,GAAG,KAAK,EAAE,MAAM,CAAC;IAC7B,MAAM,GAAG,GACP,MAAM,KAAK,SAAS,IAAI,KAAK,EAAE,GAAG,KAAK,SAAS;QAC9C,CAAC,CAAC,iBAAiB,CAAC,KAAK,CAAC,GAAG,EAAE,OAAO,CAAC;QACvC,CAAC,CAAC,SAAS,CAAC;IAChB,MAAM,CAAC,KAAK,EAAE,QAAQ,CAAC,GAAG,QAAQ,CAAmD;QACnF,GAAG,EAAE,SAAS;QACd,IAAI,EAAE,IAAI;KACX,CAAC,CAAC;IACH,SAAS,CAAC,GAAG,EAAE;QACb,IAAI,GAAG,KAAK,SAAS;YAAE,OAAO;QAC9B,IAAI,SAAS,GAAG,KAAK,CAAC;QACtB,KAAK,qBAAqB,CAAC,GAAG,EAAE,SAAS,CAAC,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE;YACvD,IAAI,CAAC,SAAS;gBAAE,QAAQ,CAAC,EAAE,GAAG,EAAE,IAAI,EAAE,CAAC,CAAC;QAC1C,CAAC,CAAC,CAAC;QACH,OAAO,GAAG,EAAE;YACV,SAAS,GAAG,IAAI,CAAC;QACnB,CAAC,CAAC;IACJ,CAAC,EAAE,CAAC,GAAG,EAAE,SAAS,CAAC,CAAC,CAAC;IACrB,IAAI,OAAO,MAAM,KAAK,QAAQ;QAAE,OAAO,MAAM,CAAC;IAC9C,IAAI,GAAG,KAAK,SAAS;QAAE,OAAO,IAAI,CAAC;IACnC,OAAO,KAAK,CAAC,GAAG,KAAK,GAAG,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS,CAAC;AACpD,CAAC"}

package/dist/src/react-native/genui/sandbox-host.d.ts

@@ -0,0 +1,119 @@
+/**
+ * The host side of a sandbox drawn in a `react-native-webview`, as plain functions: what the
+ * WebView may load, what it may say, how the host talks back, the theme it gets. No React Native
+ * import here — the renderer (`sandbox.tsx`) wires these to the WebView, the tests call them as is.
+ */
+import type { StandardSchemaV1 } from '@standard-schema/spec';
+import { type UiAction } from '../../genui/actions.js';
+import { type SandboxPolicy } from '../../genui/sandbox.js';
+import type { JsonSchema } from '../../genui/schema.js';
+import type { SandboxRefusal } from '../../react/core/genui/sandbox.js';
+/** Whether a URL is the inline sandbox document itself — everything else is a navigation away. */
+export declare function isInlineDocumentUrl(url: unknown): boolean;
+/**
+ * `onShouldStartLoadWithRequest`: the inline document loads, nothing else does — no link, no
+ * `location = …`, no `window.open`, no `tel:` / `mailto:` / app scheme. (Used with an
+ * `originWhitelist` that lets every URL through to it: `react-native-webview` hands a URL the
+ * whitelist refuses to `Linking.openURL` — the system browser or another app — instead of dropping it.)
+ */
+export declare function shouldStartSandboxLoad(request: {
+    url?: unknown;
+}): boolean;
+/** Room for the envelope (`type`, `token`, keys) around a payload in one bridge message. */
+export declare const NATIVE_SANDBOX_ENVELOPE_CHARS = 1024;
+export type FrameMessage = 
+/** A message with this frame's token, parsed. */
+{
+    kind: 'message';
+    data: Record<string, unknown> & {
+        type: string;
+    };
+}
+/** An `agent.send` with this frame's token, too long to even parse (`bytes`: at least). */
+ | {
+    kind: 'too-large';
+    bytes: number;
+}
+/** Anything else — not a string, too long, not JSON, not an object, no or another token. */
+ | {
+    kind: 'drop';
+};
+/**
+ * Read one `onMessage` string from the WebView. Its length is capped BEFORE it is parsed (the cap
+ * is the payload limit plus the envelope: a payload within the limit always fits, as its JSON has at
+ * most as many UTF-16 units as UTF-8 bytes); only a JSON object carrying `token` and a frame message
+ * type gets through. A send too long to parse is recognised by its envelope's exact prefix — which
+ * the bridge writes first — so it is refused as `too-large` rather than dropped unseen.
+ */
+export declare function parseFrameMessage(raw: unknown, token: string, maxPayloadBytes: number): FrameMessage;
+/**
+ * The script `injectJavaScript` runs to hand the frame one host message: a `message` event whose
+ * `source` is the frame's own window — its `parent` (a top-level document is its own parent), the
+ * only source the bridge and the JSX runtime listen to. The message is JSON (as a JS literal; the
+ * line separators JSON leaves raw are escaped), never code.
+ */
+export declare function hostMessageScript(message: Record<string, unknown>): string;
+/** The frame's height: what it measured, within 24 px and the policy's `maxHeight`. */
+export declare function clampSandboxHeight(value: number, policy: SandboxPolicy): number;
+/**
+ * The app's design tokens for the frame — what a web host reads off its page's `:root`. `vars` are
+ * CSS custom properties (`{ '--primary': '#2563eb' }` or `{ primary: '#2563eb' }`); `dark` sets the
+ * frame's `dark` class and `data-theme`; `colorScheme` (`'dark'`, `'light dark'`) is mirrored as
+ * `color-scheme` when given.
+ */
+export interface NativeSandboxTheme {
+    vars: Record<string, string>;
+    dark?: boolean;
+    colorScheme?: string;
+    /** Light/dark attributes for the frame's root (`data-theme`, `data-bs-theme`…), as a web host mirrors its own. */
+    attributes?: Record<string, string>;
+}
+/** The theme as the frame takes it: `:root{…}`, light/dark, root attributes, Tailwind's `@theme`. */
+export interface NativeThemeCss {
+    css: string;
+    dark: boolean;
+    attributes: Record<string, string>;
+    tailwind: string;
+}
+/** `vars` keyed `--name` (a bare `name` gets its dashes), invalid names and non-strings dropped. */
+export declare function normalizeThemeVars(vars: Record<string, unknown>): Record<string, string>;
+export declare function nativeThemeCss(theme: NativeSandboxTheme): NativeThemeCss;
+/**
+ * A url the config names, made absolute against `baseUrl` (React Native has no page origin to
+ * resolve it against). Only `http:` / `https:` come out; anything else, or a relative url without
+ * an absolute `baseUrl`, is `undefined`.
+ */
+export declare function resolveSandboxUrl(url: string, baseUrl: string | undefined): string | undefined;
+/** The count and time of the accepted sends of one frame. */
+export interface SendState {
+    count: number;
+    last: number;
+}
+export interface SendCheck {
+    payload: unknown;
+    state: SendState;
+    policy: SandboxPolicy;
+    /** The view is still being written: what it sends is not the user's yet. */
+    incomplete: boolean;
+    schema?: StandardSchemaV1 | JsonSchema;
+    confirm?: (action: UiAction) => boolean | Promise<boolean>;
+    hasHandler: boolean;
+    componentId?: string;
+    title?: string;
+    now?: number;
+}
+/**
+ * Everything the web host checks an `agent.send` for, in its order: a preview's send declined, the
+ * count, the interval, JSON, the size, `schema`, `confirm`, a handler. The interval clock starts at
+ * a send that passed the size check; the count grows only for a delivered action.
+ */
+export declare function checkSandboxSend(check: SendCheck): Promise<{
+    ok: true;
+    action: UiAction;
+} | {
+    ok: false;
+    refusal: SandboxRefusal;
+}>;
+/** A per-frame token. Not a secret from the frame's own code — it tells this frame's messages apart. */
+export declare function sandboxToken(): string;
+//# sourceMappingURL=sandbox-host.d.ts.map

package/dist/src/react-native/genui/sandbox-host.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"sandbox-host.d.ts","sourceRoot":"","sources":["../../../../src/react-native/genui/sandbox-host.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AACH,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,uBAAuB,CAAC;AAC9D,OAAO,EAGL,KAAK,QAAQ,EAEd,MAAM,wBAAwB,CAAC;AAChC,OAAO,EAAqC,KAAK,aAAa,EAAE,MAAM,wBAAwB,CAAC;AAE/F,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,uBAAuB,CAAC;AACxD,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,mCAAmC,CAAC;AAQxE,kGAAkG;AAClG,wBAAgB,mBAAmB,CAAC,GAAG,EAAE,OAAO,GAAG,OAAO,CAEzD;AAED;;;;;GAKG;AACH,wBAAgB,sBAAsB,CAAC,OAAO,EAAE;IAAE,GAAG,CAAC,EAAE,OAAO,CAAA;CAAE,GAAG,OAAO,CAE1E;AAED,4FAA4F;AAC5F,eAAO,MAAM,6BAA6B,OAAO,CAAC;AAUlD,MAAM,MAAM,YAAY;AACtB,iDAAiD;AAC/C;IAAE,IAAI,EAAE,SAAS,CAAC;IAAC,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG;QAAE,IAAI,EAAE,MAAM,CAAA;KAAE,CAAA;CAAE;AACvE,2FAA2F;GACzF;IAAE,IAAI,EAAE,WAAW,CAAC;IAAC,KAAK,EAAE,MAAM,CAAA;CAAE;AACtC,4FAA4F;GAC1F;IAAE,IAAI,EAAE,MAAM,CAAA;CAAE,CAAC;AAErB;;;;;;GAMG;AACH,wBAAgB,iBAAiB,CAC/B,GAAG,EAAE,OAAO,EACZ,KAAK,EAAE,MAAM,EACb,eAAe,EAAE,MAAM,GACtB,YAAY,CAmBd;AAED;;;;;GAKG;AACH,wBAAgB,iBAAiB,CAAC,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,MAAM,CAO1E;AAED,uFAAuF;AACvF,wBAAgB,kBAAkB,CAAC,KAAK,EAAE,MAAM,EAAE,MAAM,EAAE,aAAa,GAAG,MAAM,CAG/E;AAED;;;;;GAKG;AACH,MAAM,WAAW,kBAAkB;IACjC,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAC7B,IAAI,CAAC,EAAE,OAAO,CAAC;IACf,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,kHAAkH;IAClH,UAAU,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;CACrC;AAED,qGAAqG;AACrG,MAAM,WAAW,cAAc;IAC7B,GAAG,EAAE,MAAM,CAAC;IACZ,IAAI,EAAE,OAAO,CAAC;IACd,UAAU,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IACnC,QAAQ,EAAE,MAAM,CAAC;CAClB;AAMD,oGAAoG;AACpG,wBAAgB,kBAAkB,CAAC,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CASxF;AAED,wBAAgB,cAAc,CAAC,KAAK,EAAE,kBAAkB,GAAG,cAAc,CAexE;AAED;;;;GAIG;AACH,wBAAgB,iBAAiB,CAAC,GAAG,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,GAAG,SAAS,GAAG,MAAM,GAAG,SAAS,CAgB9F;AAED,6DAA6D;AAC7D,MAAM,WAAW,SAAS;IACxB,KAAK,EAAE,MAAM,CAAC;IACd,IAAI,EAAE,MAAM,CAAC;CACd;AAED,MAAM,WAAW,SAAS;IACxB,OAAO,EAAE,OAAO,CAAC;IACjB,KAAK,EAAE,SAAS,CAAC;IACjB,MAAM,EAAE,aAAa,CAAC;IACtB,4EAA4E;IAC5E,UAAU,EAAE,OAAO,CAAC;IACpB,MAAM,CAAC,EAAE,gBAAgB,GAAG,UAAU,CAAC;IACvC,OAAO,CAAC,EAAE,CAAC,MAAM,EAAE,QAAQ,KAAK,OAAO,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC;IAC3D,UAAU,EAAE,OAAO,CAAC;IACpB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,GAAG,CAAC,EAAE,MAAM,CAAC;CACd;AAED;;;;GAIG;AACH,wBAAsB,gBAAgB,CACpC,KAAK,EAAE,SAAS,GACf,OAAO,CAAC;IAAE,EAAE,EAAE,IAAI,CAAC;IAAC,MAAM,EAAE,QAAQ,CAAA;CAAE,GAAG;IAAE,EAAE,EAAE,KAAK,CAAC;IAAC,OAAO,EAAE,cAAc,CAAA;CAAE,CAAC,CA+BlF;AAED,wGAAwG;AACxG,wBAAgB,YAAY,IAAI,MAAM,CASrC"}

package/dist/src/react-native/genui/sandbox-host.js

@@ -0,0 +1,188 @@
+import { jsonByteLength, sandboxAction, validateUiActionContext, } from '../../genui/actions.js';
+import { SANDBOX_DEFAULTS, SANDBOX_MESSAGE } from '../../genui/sandbox.js';
+import { hostThemeCss, tailwindThemeCss } from '../../genui/sandbox-theme.js';
+/**
+ * The only URLs the WebView may be at: the inline document (`source={{ html }}` loads as
+ * `about:blank`; `about:srcdoc` for engines that name it so), and in-page `#fragment` jumps.
+ */
+const INLINE_DOCUMENT = /^about:(blank|srcdoc)(#.*)?$/i;
+/** Whether a URL is the inline sandbox document itself — everything else is a navigation away. */
+export function isInlineDocumentUrl(url) {
+    return typeof url === 'string' && INLINE_DOCUMENT.test(url);
+}
+/**
+ * `onShouldStartLoadWithRequest`: the inline document loads, nothing else does — no link, no
+ * `location = …`, no `window.open`, no `tel:` / `mailto:` / app scheme. (Used with an
+ * `originWhitelist` that lets every URL through to it: `react-native-webview` hands a URL the
+ * whitelist refuses to `Linking.openURL` — the system browser or another app — instead of dropping it.)
+ */
+export function shouldStartSandboxLoad(request) {
+    return isInlineDocumentUrl(request.url);
+}
+/** Room for the envelope (`type`, `token`, keys) around a payload in one bridge message. */
+export const NATIVE_SANDBOX_ENVELOPE_CHARS = 1024;
+/** The frame → host message types a host acts on. */
+const FRAME_TYPES = new Set([
+    SANDBOX_MESSAGE.ready,
+    SANDBOX_MESSAGE.resize,
+    SANDBOX_MESSAGE.send,
+    SANDBOX_MESSAGE.error,
+]);
+/**
+ * Read one `onMessage` string from the WebView. Its length is capped BEFORE it is parsed (the cap
+ * is the payload limit plus the envelope: a payload within the limit always fits, as its JSON has at
+ * most as many UTF-16 units as UTF-8 bytes); only a JSON object carrying `token` and a frame message
+ * type gets through. A send too long to parse is recognised by its envelope's exact prefix — which
+ * the bridge writes first — so it is refused as `too-large` rather than dropped unseen.
+ */
+export function parseFrameMessage(raw, token, maxPayloadBytes) {
+    if (typeof raw !== 'string')
+        return { kind: 'drop' };
+    if (raw.length > maxPayloadBytes + NATIVE_SANDBOX_ENVELOPE_CHARS) {
+        const prefix = `{"type":${JSON.stringify(SANDBOX_MESSAGE.send)},"token":${JSON.stringify(token)},"payload":`;
+        return raw.startsWith(prefix)
+            ? { kind: 'too-large', bytes: raw.length - prefix.length - 1 }
+            : { kind: 'drop' };
+    }
+    let data;
+    try {
+        data = JSON.parse(raw);
+    }
+    catch {
+        return { kind: 'drop' };
+    }
+    if (typeof data !== 'object' || data === null || Array.isArray(data))
+        return { kind: 'drop' };
+    const record = data;
+    if (typeof record.token !== 'string' || record.token !== token)
+        return { kind: 'drop' };
+    if (typeof record.type !== 'string' || !FRAME_TYPES.has(record.type))
+        return { kind: 'drop' };
+    return { kind: 'message', data: record };
+}
+/**
+ * The script `injectJavaScript` runs to hand the frame one host message: a `message` event whose
+ * `source` is the frame's own window — its `parent` (a top-level document is its own parent), the
+ * only source the bridge and the JSX runtime listen to. The message is JSON (as a JS literal; the
+ * line separators JSON leaves raw are escaped), never code.
+ */
+export function hostMessageScript(message) {
+    const literal = JSON.stringify(message)
+        .split(String.fromCharCode(0x2028))
+        .join('\\u2028')
+        .split(String.fromCharCode(0x2029))
+        .join('\\u2029');
+    return `(function(){try{window.dispatchEvent(new MessageEvent('message',{data:${literal},source:window}))}catch(e){}})();true;`;
+}
+/** The frame's height: what it measured, within 24 px and the policy's `maxHeight`. */
+export function clampSandboxHeight(value, policy) {
+    const max = policy.maxHeight ?? SANDBOX_DEFAULTS.maxHeight;
+    return Math.max(24, Math.min(max, Math.ceil(value)));
+}
+const MODE_ATTRIBUTE = /^data-([\w-]*-)?(theme|mode|scheme)$/;
+const VAR_NAME = /^--[A-Za-z0-9_-]+$/;
+/** `vars` keyed `--name` (a bare `name` gets its dashes), invalid names and non-strings dropped. */
+export function normalizeThemeVars(vars) {
+    const out = {};
+    for (const [key, value] of Object.entries(vars)) {
+        const name = key.startsWith('--') ? key : `--${key}`;
+        if (!VAR_NAME.test(name))
+            continue;
+        if (typeof value === 'number')
+            out[name] = String(value);
+        else if (typeof value === 'string' && value.trim() !== '')
+            out[name] = value.trim();
+    }
+    return out;
+}
+export function nativeThemeCss(theme) {
+    const vars = normalizeThemeVars(theme.vars ?? {});
+    return {
+        css: hostThemeCss(vars, theme.colorScheme !== undefined ? { colorScheme: theme.colorScheme } : {}),
+        dark: theme.dark === true,
+        attributes: Object.fromEntries(Object.entries(theme.attributes ?? {}).filter(([name, value]) => MODE_ATTRIBUTE.test(name) && typeof value === 'string')),
+        tailwind: tailwindThemeCss(vars),
+    };
+}
+/**
+ * A url the config names, made absolute against `baseUrl` (React Native has no page origin to
+ * resolve it against). Only `http:` / `https:` come out; anything else, or a relative url without
+ * an absolute `baseUrl`, is `undefined`.
+ */
+export function resolveSandboxUrl(url, baseUrl) {
+    const absolute = /^https?:\/\/[^/?#]+/i;
+    if (absolute.test(url))
+        return url;
+    if (baseUrl === undefined)
+        return undefined;
+    const base = absolute.exec(baseUrl);
+    if (base === null)
+        return undefined;
+    const origin = base[0];
+    if (url.startsWith('//')) {
+        const out = `${origin.slice(0, origin.indexOf(':'))}:${url}`;
+        return absolute.test(out) ? out : undefined;
+    }
+    if (url.startsWith('/'))
+        return `${origin}${url}`;
+    if (/^[a-z][a-z0-9+.-]*:/i.test(url))
+        return undefined;
+    const path = baseUrl.slice(origin.length).replace(/[?#].*$/, '');
+    const directory = path.endsWith('/') ? path : path.replace(/[^/]*$/, '') || '/';
+    return `${origin}${directory.startsWith('/') ? '' : '/'}${directory}${url}`;
+}
+/**
+ * Everything the web host checks an `agent.send` for, in its order: a preview's send declined, the
+ * count, the interval, JSON, the size, `schema`, `confirm`, a handler. The interval clock starts at
+ * a send that passed the size check; the count grows only for a delivered action.
+ */
+export async function checkSandboxSend(check) {
+    const { state, policy } = check;
+    if (check.incomplete)
+        return { ok: false, refusal: { reason: 'declined' } };
+    const maxSends = policy.maxSends ?? SANDBOX_DEFAULTS.maxSends;
+    if (state.count >= maxSends)
+        return { ok: false, refusal: { reason: 'too-many', limit: maxSends } };
+    const now = check.now ?? Date.now();
+    const interval = policy.minSendIntervalMs ?? SANDBOX_DEFAULTS.minSendIntervalMs;
+    if (state.last > 0 && now - state.last < interval) {
+        return { ok: false, refusal: { reason: 'too-soon', waitMs: interval - (now - state.last) } };
+    }
+    const bytes = jsonByteLength(check.payload);
+    if (bytes === undefined)
+        return { ok: false, refusal: { reason: 'not-json' } };
+    const limit = policy.maxPayloadBytes ?? SANDBOX_DEFAULTS.maxPayloadBytes;
+    if (bytes > limit)
+        return { ok: false, refusal: { reason: 'too-large', bytes, limit } };
+    state.last = now;
+    let action = sandboxAction(check.payload, {
+        ...(check.componentId !== undefined ? { componentId: check.componentId } : {}),
+        ...(check.title !== undefined ? { title: check.title } : {}),
+    });
+    if (check.schema !== undefined) {
+        const checked = await validateUiActionContext(action, check.schema);
+        if (!checked.ok)
+            return { ok: false, refusal: { reason: 'invalid', issues: checked.issues } };
+        action = { ...action, context: checked.context };
+    }
+    if (check.confirm !== undefined && !(await check.confirm(action))) {
+        return { ok: false, refusal: { reason: 'declined' } };
+    }
+    if (!check.hasHandler)
+        return { ok: false, refusal: { reason: 'no-handler' } };
+    state.count += 1;
+    return { ok: true, action };
+}
+/** A per-frame token. Not a secret from the frame's own code — it tells this frame's messages apart. */
+export function sandboxToken() {
+    const bytes = new Uint8Array(16);
+    const crypto = globalThis
+        .crypto;
+    if (typeof crypto?.getRandomValues === 'function')
+        crypto.getRandomValues(bytes);
+    else
+        for (let index = 0; index < bytes.length; index++)
+            bytes[index] = Math.floor(Math.random() * 256);
+    return Array.from(bytes, (byte) => byte.toString(16).padStart(2, '0')).join('');
+}
+//# sourceMappingURL=sandbox-host.js.map

package/dist/src/react-native/genui/sandbox-host.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sandbox-host.js","sourceRoot":"","sources":["../../../../src/react-native/genui/sandbox-host.ts"],"names":[],"mappings":"AAMA,OAAO,EACL,cAAc,EACd,aAAa,EAEb,uBAAuB,GACxB,MAAM,wBAAwB,CAAC;AAChC,OAAO,EAAE,gBAAgB,EAAE,eAAe,EAAsB,MAAM,wBAAwB,CAAC;AAC/F,OAAO,EAAE,YAAY,EAAE,gBAAgB,EAAE,MAAM,8BAA8B,CAAC;AAI9E;;;GAGG;AACH,MAAM,eAAe,GAAG,+BAA+B,CAAC;AAExD,kGAAkG;AAClG,MAAM,UAAU,mBAAmB,CAAC,GAAY;IAC9C,OAAO,OAAO,GAAG,KAAK,QAAQ,IAAI,eAAe,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;AAC9D,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,sBAAsB,CAAC,OAA0B;IAC/D,OAAO,mBAAmB,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;AAC1C,CAAC;AAED,4FAA4F;AAC5F,MAAM,CAAC,MAAM,6BAA6B,GAAG,IAAI,CAAC;AAElD,qDAAqD;AACrD,MAAM,WAAW,GAAwB,IAAI,GAAG,CAAC;IAC/C,eAAe,CAAC,KAAK;IACrB,eAAe,CAAC,MAAM;IACtB,eAAe,CAAC,IAAI;IACpB,eAAe,CAAC,KAAK;CACtB,CAAC,CAAC;AAUH;;;;;;GAMG;AACH,MAAM,UAAU,iBAAiB,CAC/B,GAAY,EACZ,KAAa,EACb,eAAuB;IAEvB,IAAI,OAAO,GAAG,KAAK,QAAQ;QAAE,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC;IACrD,IAAI,GAAG,CAAC,MAAM,GAAG,eAAe,GAAG,6BAA6B,EAAE,CAAC;QACjE,MAAM,MAAM,GAAG,WAAW,IAAI,CAAC,SAAS,CAAC,eAAe,CAAC,IAAI,CAAC,YAAY,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,aAAa,CAAC;QAC7G,OAAO,GAAG,CAAC,UAAU,CAAC,MAAM,CAAC;YAC3B,CAAC,CAAC,EAAE,IAAI,EAAE,WAAW,EAAE,KAAK,EAAE,GAAG,CAAC,MAAM,GAAG,MAAM,CAAC,MAAM,GAAG,CAAC,EAAE;YAC9D,CAAC,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC;IACvB,CAAC;IACD,IAAI,IAAa,CAAC;IAClB,IAAI,CAAC;QACH,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;IACzB,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC;IAC1B,CAAC;IACD,IAAI,OAAO,IAAI,KAAK,QAAQ,IAAI,IAAI,KAAK,IAAI,IAAI,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC;QAAE,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC;IAC9F,MAAM,MAAM,GAAG,IAA+B,CAAC;IAC/C,IAAI,OAAO,MAAM,CAAC,KAAK,KAAK,QAAQ,IAAI,MAAM,CAAC,KAAK,KAAK,KAAK;QAAE,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC;IACxF,IAAI,OAAO,MAAM,CAAC,IAAI,KAAK,QAAQ,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC;QAAE,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC;IAC9F,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,IAAI,EAAE,MAAoD,EAAE,CAAC;AACzF,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,iBAAiB,CAAC,OAAgC;IAChE,MAAM,OAAO,GAAG,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC;SACpC,KAAK,CAAC,MAAM,CAAC,YAAY,CAAC,MAAM,CAAC,CAAC;SAClC,IAAI,CAAC,SAAS,CAAC;SACf,KAAK,CAAC,MAAM,CAAC,YAAY,CAAC,MAAM,CAAC,CAAC;SAClC,IAAI,CAAC,SAAS,CAAC,CAAC;IACnB,OAAO,yEAAyE,OAAO,wCAAwC,CAAC;AAClI,CAAC;AAED,uFAAuF;AACvF,MAAM,UAAU,kBAAkB,CAAC,KAAa,EAAE,MAAqB;IACrE,MAAM,GAAG,GAAG,MAAM,CAAC,SAAS,IAAI,gBAAgB,CAAC,SAAS,CAAC;IAC3D,OAAO,IAAI,CAAC,GAAG,CAAC,EAAE,EAAE,IAAI,CAAC,GAAG,CAAC,GAAG,EAAE,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;AACvD,CAAC;AAwBD,MAAM,cAAc,GAAG,sCAAsC,CAAC;AAE9D,MAAM,QAAQ,GAAG,oBAAoB,CAAC;AAEtC,oGAAoG;AACpG,MAAM,UAAU,kBAAkB,CAAC,IAA6B;IAC9D,MAAM,GAAG,GAA2B,EAAE,CAAC;IACvC,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,CAAC;QAChD,MAAM,IAAI,GAAG,GAAG,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,KAAK,GAAG,EAAE,CAAC;QACrD,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC;YAAE,SAAS;QACnC,IAAI,OAAO,KAAK,KAAK,QAAQ;YAAE,GAAG,CAAC,IAAI,CAAC,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC;aACpD,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,IAAI,EAAE,KAAK,EAAE;YAAE,GAAG,CAAC,IAAI,CAAC,GAAG,KAAK,CAAC,IAAI,EAAE,CAAC;IACtF,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC;AAED,MAAM,UAAU,cAAc,CAAC,KAAyB;IACtD,MAAM,IAAI,GAAG,kBAAkB,CAAC,KAAK,CAAC,IAAI,IAAI,EAAE,CAAC,CAAC;IAClD,OAAO;QACL,GAAG,EAAE,YAAY,CACf,IAAI,EACJ,KAAK,CAAC,WAAW,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,WAAW,EAAE,KAAK,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC,EAAE,CAC1E;QACD,IAAI,EAAE,KAAK,CAAC,IAAI,KAAK,IAAI;QACzB,UAAU,EAAE,MAAM,CAAC,WAAW,CAC5B,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,UAAU,IAAI,EAAE,CAAC,CAAC,MAAM,CAC3C,CAAC,CAAC,IAAI,EAAE,KAAK,CAAC,EAAE,EAAE,CAAC,cAAc,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,OAAO,KAAK,KAAK,QAAQ,CAC1E,CACF;QACD,QAAQ,EAAE,gBAAgB,CAAC,IAAI,CAAC;KACjC,CAAC;AACJ,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,iBAAiB,CAAC,GAAW,EAAE,OAA2B;IACxE,MAAM,QAAQ,GAAG,sBAAsB,CAAC;IACxC,IAAI,QAAQ,CAAC,IAAI,CAAC,GAAG,CAAC;QAAE,OAAO,GAAG,CAAC;IACnC,IAAI,OAAO,KAAK,SAAS;QAAE,OAAO,SAAS,CAAC;IAC5C,MAAM,IAAI,GAAG,QAAQ,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;IACpC,IAAI,IAAI,KAAK,IAAI;QAAE,OAAO,SAAS,CAAC;IACpC,MAAM,MAAM,GAAG,IAAI,CAAC,CAAC,CAAC,CAAC;IACvB,IAAI,GAAG,CAAC,UAAU,CAAC,IAAI,CAAC,EAAE,CAAC;QACzB,MAAM,GAAG,GAAG,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC,EAAE,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,IAAI,GAAG,EAAE,CAAC;QAC7D,OAAO,QAAQ,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,SAAS,CAAC;IAC9C,CAAC;IACD,IAAI,GAAG,CAAC,UAAU,CAAC,GAAG,CAAC;QAAE,OAAO,GAAG,MAAM,GAAG,GAAG,EAAE,CAAC;IAClD,IAAI,sBAAsB,CAAC,IAAI,CAAC,GAAG,CAAC;QAAE,OAAO,SAAS,CAAC;IACvD,MAAM,IAAI,GAAG,OAAO,CAAC,KAAK,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,OAAO,CAAC,SAAS,EAAE,EAAE,CAAC,CAAC;IACjE,MAAM,SAAS,GAAG,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,QAAQ,EAAE,EAAE,CAAC,IAAI,GAAG,CAAC;IAChF,OAAO,GAAG,MAAM,GAAG,SAAS,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,GAAG,GAAG,SAAS,GAAG,GAAG,EAAE,CAAC;AAC9E,CAAC;AAsBD;;;;GAIG;AACH,MAAM,CAAC,KAAK,UAAU,gBAAgB,CACpC,KAAgB;IAEhB,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,GAAG,KAAK,CAAC;IAChC,IAAI,KAAK,CAAC,UAAU;QAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,OAAO,EAAE,EAAE,MAAM,EAAE,UAAU,EAAE,EAAE,CAAC;IAC5E,MAAM,QAAQ,GAAG,MAAM,CAAC,QAAQ,IAAI,gBAAgB,CAAC,QAAQ,CAAC;IAC9D,IAAI,KAAK,CAAC,KAAK,IAAI,QAAQ;QACzB,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,OAAO,EAAE,EAAE,MAAM,EAAE,UAAU,EAAE,KAAK,EAAE,QAAQ,EAAE,EAAE,CAAC;IACzE,MAAM,GAAG,GAAG,KAAK,CAAC,GAAG,IAAI,IAAI,CAAC,GAAG,EAAE,CAAC;IACpC,MAAM,QAAQ,GAAG,MAAM,CAAC,iBAAiB,IAAI,gBAAgB,CAAC,iBAAiB,CAAC;IAChF,IAAI,KAAK,CAAC,IAAI,GAAG,CAAC,IAAI,GAAG,GAAG,KAAK,CAAC,IAAI,GAAG,QAAQ,EAAE,CAAC;QAClD,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,OAAO,EAAE,EAAE,MAAM,EAAE,UAAU,EAAE,MAAM,EAAE,QAAQ,GAAG,CAAC,GAAG,GAAG,KAAK,CAAC,IAAI,CAAC,EAAE,EAAE,CAAC;IAC/F,CAAC;IACD,MAAM,KAAK,GAAG,cAAc,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;IAC5C,IAAI,KAAK,KAAK,SAAS;QAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,OAAO,EAAE,EAAE,MAAM,EAAE,UAAU,EAAE,EAAE,CAAC;IAC/E,MAAM,KAAK,GAAG,MAAM,CAAC,eAAe,IAAI,gBAAgB,CAAC,eAAe,CAAC;IACzE,IAAI,KAAK,GAAG,KAAK;QAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,OAAO,EAAE,EAAE,MAAM,EAAE,WAAW,EAAE,KAAK,EAAE,KAAK,EAAE,EAAE,CAAC;IACxF,KAAK,CAAC,IAAI,GAAG,GAAG,CAAC;IACjB,IAAI,MAAM,GAAG,aAAa,CAAC,KAAK,CAAC,OAAO,EAAE;QACxC,GAAG,CAAC,KAAK,CAAC,WAAW,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,WAAW,EAAE,KAAK,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAC9E,GAAG,CAAC,KAAK,CAAC,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,KAAK,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KAC7D,CAAC,CAAC;IACH,IAAI,KAAK,CAAC,MAAM,KAAK,SAAS,EAAE,CAAC;QAC/B,MAAM,OAAO,GAAG,MAAM,uBAAuB,CAAC,MAAM,EAAE,KAAK,CAAC,MAAM,CAAC,CAAC;QACpE,IAAI,CAAC,OAAO,CAAC,EAAE;YAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,OAAO,EAAE,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,EAAE,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC;QAC9F,MAAM,GAAG,EAAE,GAAG,MAAM,EAAE,OAAO,EAAE,OAAO,CAAC,OAAO,EAAE,CAAC;IACnD,CAAC;IACD,IAAI,KAAK,CAAC,OAAO,KAAK,SAAS,IAAI,CAAC,CAAC,MAAM,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,EAAE,CAAC;QAClE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,OAAO,EAAE,EAAE,MAAM,EAAE,UAAU,EAAE,EAAE,CAAC;IACxD,CAAC;IACD,IAAI,CAAC,KAAK,CAAC,UAAU;QAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,OAAO,EAAE,EAAE,MAAM,EAAE,YAAY,EAAE,EAAE,CAAC;IAC/E,KAAK,CAAC,KAAK,IAAI,CAAC,CAAC;IACjB,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC;AAC9B,CAAC;AAED,wGAAwG;AACxG,MAAM,UAAU,YAAY;IAC1B,MAAM,KAAK,GAAG,IAAI,UAAU,CAAC,EAAE,CAAC,CAAC;IACjC,MAAM,MAAM,GAAI,UAA6E;SAC1F,MAAM,CAAC;IACV,IAAI,OAAO,MAAM,EAAE,eAAe,KAAK,UAAU;QAAE,MAAM,CAAC,eAAe,CAAC,KAAK,CAAC,CAAC;;QAE/E,KAAK,IAAI,KAAK,GAAG,CAAC,EAAE,KAAK,GAAG,KAAK,CAAC,MAAM,EAAE,KAAK,EAAE;YAC/C,KAAK,CAAC,KAAK,CAAC,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,MAAM,EAAE,GAAG,GAAG,CAAC,CAAC;IACnD,OAAO,KAAK,CAAC,IAAI,CAAC,KAAK,EAAE,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;AAClF,CAAC"}