@adonis-agora/agent 0.75.0 → 0.76.0

package/dist/src/react-native/genui/sandbox-host.d.ts

@@ -0,0 +1,119 @@
+/**
+ * The host side of a sandbox drawn in a `react-native-webview`, as plain functions: what the
+ * WebView may load, what it may say, how the host talks back, the theme it gets. No React Native
+ * import here — the renderer (`sandbox.tsx`) wires these to the WebView, the tests call them as is.
+ */
+import type { StandardSchemaV1 } from '@standard-schema/spec';
+import { type UiAction } from '../../genui/actions.js';
+import { type SandboxPolicy } from '../../genui/sandbox.js';
+import type { JsonSchema } from '../../genui/schema.js';
+import type { SandboxRefusal } from '../../react/core/genui/sandbox.js';
+/** Whether a URL is the inline sandbox document itself — everything else is a navigation away. */
+export declare function isInlineDocumentUrl(url: unknown): boolean;
+/**
+ * `onShouldStartLoadWithRequest`: the inline document loads, nothing else does — no link, no
+ * `location = …`, no `window.open`, no `tel:` / `mailto:` / app scheme. (Used with an
+ * `originWhitelist` that lets every URL through to it: `react-native-webview` hands a URL the
+ * whitelist refuses to `Linking.openURL` — the system browser or another app — instead of dropping it.)
+ */
+export declare function shouldStartSandboxLoad(request: {
+    url?: unknown;
+}): boolean;
+/** Room for the envelope (`type`, `token`, keys) around a payload in one bridge message. */
+export declare const NATIVE_SANDBOX_ENVELOPE_CHARS = 1024;
+export type FrameMessage = 
+/** A message with this frame's token, parsed. */
+{
+    kind: 'message';
+    data: Record<string, unknown> & {
+        type: string;
+    };
+}
+/** An `agent.send` with this frame's token, too long to even parse (`bytes`: at least). */
+ | {
+    kind: 'too-large';
+    bytes: number;
+}
+/** Anything else — not a string, too long, not JSON, not an object, no or another token. */
+ | {
+    kind: 'drop';
+};
+/**
+ * Read one `onMessage` string from the WebView. Its length is capped BEFORE it is parsed (the cap
+ * is the payload limit plus the envelope: a payload within the limit always fits, as its JSON has at
+ * most as many UTF-16 units as UTF-8 bytes); only a JSON object carrying `token` and a frame message
+ * type gets through. A send too long to parse is recognised by its envelope's exact prefix — which
+ * the bridge writes first — so it is refused as `too-large` rather than dropped unseen.
+ */
+export declare function parseFrameMessage(raw: unknown, token: string, maxPayloadBytes: number): FrameMessage;
+/**
+ * The script `injectJavaScript` runs to hand the frame one host message: a `message` event whose
+ * `source` is the frame's own window — its `parent` (a top-level document is its own parent), the
+ * only source the bridge and the JSX runtime listen to. The message is JSON (as a JS literal; the
+ * line separators JSON leaves raw are escaped), never code.
+ */
+export declare function hostMessageScript(message: Record<string, unknown>): string;
+/** The frame's height: what it measured, within 24 px and the policy's `maxHeight`. */
+export declare function clampSandboxHeight(value: number, policy: SandboxPolicy): number;
+/**
+ * The app's design tokens for the frame — what a web host reads off its page's `:root`. `vars` are
+ * CSS custom properties (`{ '--primary': '#2563eb' }` or `{ primary: '#2563eb' }`); `dark` sets the
+ * frame's `dark` class and `data-theme`; `colorScheme` (`'dark'`, `'light dark'`) is mirrored as
+ * `color-scheme` when given.
+ */
+export interface NativeSandboxTheme {
+    vars: Record<string, string>;
+    dark?: boolean;
+    colorScheme?: string;
+    /** Light/dark attributes for the frame's root (`data-theme`, `data-bs-theme`…), as a web host mirrors its own. */
+    attributes?: Record<string, string>;
+}
+/** The theme as the frame takes it: `:root{…}`, light/dark, root attributes, Tailwind's `@theme`. */
+export interface NativeThemeCss {
+    css: string;
+    dark: boolean;
+    attributes: Record<string, string>;
+    tailwind: string;
+}
+/** `vars` keyed `--name` (a bare `name` gets its dashes), invalid names and non-strings dropped. */
+export declare function normalizeThemeVars(vars: Record<string, unknown>): Record<string, string>;
+export declare function nativeThemeCss(theme: NativeSandboxTheme): NativeThemeCss;
+/**
+ * A url the config names, made absolute against `baseUrl` (React Native has no page origin to
+ * resolve it against). Only `http:` / `https:` come out; anything else, or a relative url without
+ * an absolute `baseUrl`, is `undefined`.
+ */
+export declare function resolveSandboxUrl(url: string, baseUrl: string | undefined): string | undefined;
+/** The count and time of the accepted sends of one frame. */
+export interface SendState {
+    count: number;
+    last: number;
+}
+export interface SendCheck {
+    payload: unknown;
+    state: SendState;
+    policy: SandboxPolicy;
+    /** The view is still being written: what it sends is not the user's yet. */
+    incomplete: boolean;
+    schema?: StandardSchemaV1 | JsonSchema;
+    confirm?: (action: UiAction) => boolean | Promise<boolean>;
+    hasHandler: boolean;
+    componentId?: string;
+    title?: string;
+    now?: number;
+}
+/**
+ * Everything the web host checks an `agent.send` for, in its order: a preview's send declined, the
+ * count, the interval, JSON, the size, `schema`, `confirm`, a handler. The interval clock starts at
+ * a send that passed the size check; the count grows only for a delivered action.
+ */
+export declare function checkSandboxSend(check: SendCheck): Promise<{
+    ok: true;
+    action: UiAction;
+} | {
+    ok: false;
+    refusal: SandboxRefusal;
+}>;
+/** A per-frame token. Not a secret from the frame's own code — it tells this frame's messages apart. */
+export declare function sandboxToken(): string;
+//# sourceMappingURL=sandbox-host.d.ts.map

package/dist/src/react-native/genui/sandbox-host.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"sandbox-host.d.ts","sourceRoot":"","sources":["../../../../src/react-native/genui/sandbox-host.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AACH,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,uBAAuB,CAAC;AAC9D,OAAO,EAGL,KAAK,QAAQ,EAEd,MAAM,wBAAwB,CAAC;AAChC,OAAO,EAAqC,KAAK,aAAa,EAAE,MAAM,wBAAwB,CAAC;AAE/F,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,uBAAuB,CAAC;AACxD,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,mCAAmC,CAAC;AAQxE,kGAAkG;AAClG,wBAAgB,mBAAmB,CAAC,GAAG,EAAE,OAAO,GAAG,OAAO,CAEzD;AAED;;;;;GAKG;AACH,wBAAgB,sBAAsB,CAAC,OAAO,EAAE;IAAE,GAAG,CAAC,EAAE,OAAO,CAAA;CAAE,GAAG,OAAO,CAE1E;AAED,4FAA4F;AAC5F,eAAO,MAAM,6BAA6B,OAAO,CAAC;AAUlD,MAAM,MAAM,YAAY;AACtB,iDAAiD;AAC/C;IAAE,IAAI,EAAE,SAAS,CAAC;IAAC,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG;QAAE,IAAI,EAAE,MAAM,CAAA;KAAE,CAAA;CAAE;AACvE,2FAA2F;GACzF;IAAE,IAAI,EAAE,WAAW,CAAC;IAAC,KAAK,EAAE,MAAM,CAAA;CAAE;AACtC,4FAA4F;GAC1F;IAAE,IAAI,EAAE,MAAM,CAAA;CAAE,CAAC;AAErB;;;;;;GAMG;AACH,wBAAgB,iBAAiB,CAC/B,GAAG,EAAE,OAAO,EACZ,KAAK,EAAE,MAAM,EACb,eAAe,EAAE,MAAM,GACtB,YAAY,CAmBd;AAED;;;;;GAKG;AACH,wBAAgB,iBAAiB,CAAC,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,MAAM,CAO1E;AAED,uFAAuF;AACvF,wBAAgB,kBAAkB,CAAC,KAAK,EAAE,MAAM,EAAE,MAAM,EAAE,aAAa,GAAG,MAAM,CAG/E;AAED;;;;;GAKG;AACH,MAAM,WAAW,kBAAkB;IACjC,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAC7B,IAAI,CAAC,EAAE,OAAO,CAAC;IACf,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,kHAAkH;IAClH,UAAU,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;CACrC;AAED,qGAAqG;AACrG,MAAM,WAAW,cAAc;IAC7B,GAAG,EAAE,MAAM,CAAC;IACZ,IAAI,EAAE,OAAO,CAAC;IACd,UAAU,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IACnC,QAAQ,EAAE,MAAM,CAAC;CAClB;AAMD,oGAAoG;AACpG,wBAAgB,kBAAkB,CAAC,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CASxF;AAED,wBAAgB,cAAc,CAAC,KAAK,EAAE,kBAAkB,GAAG,cAAc,CAexE;AAED;;;;GAIG;AACH,wBAAgB,iBAAiB,CAAC,GAAG,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,GAAG,SAAS,GAAG,MAAM,GAAG,SAAS,CAgB9F;AAED,6DAA6D;AAC7D,MAAM,WAAW,SAAS;IACxB,KAAK,EAAE,MAAM,CAAC;IACd,IAAI,EAAE,MAAM,CAAC;CACd;AAED,MAAM,WAAW,SAAS;IACxB,OAAO,EAAE,OAAO,CAAC;IACjB,KAAK,EAAE,SAAS,CAAC;IACjB,MAAM,EAAE,aAAa,CAAC;IACtB,4EAA4E;IAC5E,UAAU,EAAE,OAAO,CAAC;IACpB,MAAM,CAAC,EAAE,gBAAgB,GAAG,UAAU,CAAC;IACvC,OAAO,CAAC,EAAE,CAAC,MAAM,EAAE,QAAQ,KAAK,OAAO,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC;IAC3D,UAAU,EAAE,OAAO,CAAC;IACpB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,GAAG,CAAC,EAAE,MAAM,CAAC;CACd;AAED;;;;GAIG;AACH,wBAAsB,gBAAgB,CACpC,KAAK,EAAE,SAAS,GACf,OAAO,CAAC;IAAE,EAAE,EAAE,IAAI,CAAC;IAAC,MAAM,EAAE,QAAQ,CAAA;CAAE,GAAG;IAAE,EAAE,EAAE,KAAK,CAAC;IAAC,OAAO,EAAE,cAAc,CAAA;CAAE,CAAC,CA+BlF;AAED,wGAAwG;AACxG,wBAAgB,YAAY,IAAI,MAAM,CASrC"}

package/dist/src/react-native/genui/sandbox-host.js

@@ -0,0 +1,188 @@
+import { jsonByteLength, sandboxAction, validateUiActionContext, } from '../../genui/actions.js';
+import { SANDBOX_DEFAULTS, SANDBOX_MESSAGE } from '../../genui/sandbox.js';
+import { hostThemeCss, tailwindThemeCss } from '../../genui/sandbox-theme.js';
+/**
+ * The only URLs the WebView may be at: the inline document (`source={{ html }}` loads as
+ * `about:blank`; `about:srcdoc` for engines that name it so), and in-page `#fragment` jumps.
+ */
+const INLINE_DOCUMENT = /^about:(blank|srcdoc)(#.*)?$/i;
+/** Whether a URL is the inline sandbox document itself — everything else is a navigation away. */
+export function isInlineDocumentUrl(url) {
+    return typeof url === 'string' && INLINE_DOCUMENT.test(url);
+}
+/**
+ * `onShouldStartLoadWithRequest`: the inline document loads, nothing else does — no link, no
+ * `location = …`, no `window.open`, no `tel:` / `mailto:` / app scheme. (Used with an
+ * `originWhitelist` that lets every URL through to it: `react-native-webview` hands a URL the
+ * whitelist refuses to `Linking.openURL` — the system browser or another app — instead of dropping it.)
+ */
+export function shouldStartSandboxLoad(request) {
+    return isInlineDocumentUrl(request.url);
+}
+/** Room for the envelope (`type`, `token`, keys) around a payload in one bridge message. */
+export const NATIVE_SANDBOX_ENVELOPE_CHARS = 1024;
+/** The frame → host message types a host acts on. */
+const FRAME_TYPES = new Set([
+    SANDBOX_MESSAGE.ready,
+    SANDBOX_MESSAGE.resize,
+    SANDBOX_MESSAGE.send,
+    SANDBOX_MESSAGE.error,
+]);
+/**
+ * Read one `onMessage` string from the WebView. Its length is capped BEFORE it is parsed (the cap
+ * is the payload limit plus the envelope: a payload within the limit always fits, as its JSON has at
+ * most as many UTF-16 units as UTF-8 bytes); only a JSON object carrying `token` and a frame message
+ * type gets through. A send too long to parse is recognised by its envelope's exact prefix — which
+ * the bridge writes first — so it is refused as `too-large` rather than dropped unseen.
+ */
+export function parseFrameMessage(raw, token, maxPayloadBytes) {
+    if (typeof raw !== 'string')
+        return { kind: 'drop' };
+    if (raw.length > maxPayloadBytes + NATIVE_SANDBOX_ENVELOPE_CHARS) {
+        const prefix = `{"type":${JSON.stringify(SANDBOX_MESSAGE.send)},"token":${JSON.stringify(token)},"payload":`;
+        return raw.startsWith(prefix)
+            ? { kind: 'too-large', bytes: raw.length - prefix.length - 1 }
+            : { kind: 'drop' };
+    }
+    let data;
+    try {
+        data = JSON.parse(raw);
+    }
+    catch {
+        return { kind: 'drop' };
+    }
+    if (typeof data !== 'object' || data === null || Array.isArray(data))
+        return { kind: 'drop' };
+    const record = data;
+    if (typeof record.token !== 'string' || record.token !== token)
+        return { kind: 'drop' };
+    if (typeof record.type !== 'string' || !FRAME_TYPES.has(record.type))
+        return { kind: 'drop' };
+    return { kind: 'message', data: record };
+}
+/**
+ * The script `injectJavaScript` runs to hand the frame one host message: a `message` event whose
+ * `source` is the frame's own window — its `parent` (a top-level document is its own parent), the
+ * only source the bridge and the JSX runtime listen to. The message is JSON (as a JS literal; the
+ * line separators JSON leaves raw are escaped), never code.
+ */
+export function hostMessageScript(message) {
+    const literal = JSON.stringify(message)
+        .split(String.fromCharCode(0x2028))
+        .join('\\u2028')
+        .split(String.fromCharCode(0x2029))
+        .join('\\u2029');
+    return `(function(){try{window.dispatchEvent(new MessageEvent('message',{data:${literal},source:window}))}catch(e){}})();true;`;
+}
+/** The frame's height: what it measured, within 24 px and the policy's `maxHeight`. */
+export function clampSandboxHeight(value, policy) {
+    const max = policy.maxHeight ?? SANDBOX_DEFAULTS.maxHeight;
+    return Math.max(24, Math.min(max, Math.ceil(value)));
+}
+const MODE_ATTRIBUTE = /^data-([\w-]*-)?(theme|mode|scheme)$/;
+const VAR_NAME = /^--[A-Za-z0-9_-]+$/;
+/** `vars` keyed `--name` (a bare `name` gets its dashes), invalid names and non-strings dropped. */
+export function normalizeThemeVars(vars) {
+    const out = {};
+    for (const [key, value] of Object.entries(vars)) {
+        const name = key.startsWith('--') ? key : `--${key}`;
+        if (!VAR_NAME.test(name))
+            continue;
+        if (typeof value === 'number')
+            out[name] = String(value);
+        else if (typeof value === 'string' && value.trim() !== '')
+            out[name] = value.trim();
+    }
+    return out;
+}
+export function nativeThemeCss(theme) {
+    const vars = normalizeThemeVars(theme.vars ?? {});
+    return {
+        css: hostThemeCss(vars, theme.colorScheme !== undefined ? { colorScheme: theme.colorScheme } : {}),
+        dark: theme.dark === true,
+        attributes: Object.fromEntries(Object.entries(theme.attributes ?? {}).filter(([name, value]) => MODE_ATTRIBUTE.test(name) && typeof value === 'string')),
+        tailwind: tailwindThemeCss(vars),
+    };
+}
+/**
+ * A url the config names, made absolute against `baseUrl` (React Native has no page origin to
+ * resolve it against). Only `http:` / `https:` come out; anything else, or a relative url without
+ * an absolute `baseUrl`, is `undefined`.
+ */
+export function resolveSandboxUrl(url, baseUrl) {
+    const absolute = /^https?:\/\/[^/?#]+/i;
+    if (absolute.test(url))
+        return url;
+    if (baseUrl === undefined)
+        return undefined;
+    const base = absolute.exec(baseUrl);
+    if (base === null)
+        return undefined;
+    const origin = base[0];
+    if (url.startsWith('//')) {
+        const out = `${origin.slice(0, origin.indexOf(':'))}:${url}`;
+        return absolute.test(out) ? out : undefined;
+    }
+    if (url.startsWith('/'))
+        return `${origin}${url}`;
+    if (/^[a-z][a-z0-9+.-]*:/i.test(url))
+        return undefined;
+    const path = baseUrl.slice(origin.length).replace(/[?#].*$/, '');
+    const directory = path.endsWith('/') ? path : path.replace(/[^/]*$/, '') || '/';
+    return `${origin}${directory.startsWith('/') ? '' : '/'}${directory}${url}`;
+}
+/**
+ * Everything the web host checks an `agent.send` for, in its order: a preview's send declined, the
+ * count, the interval, JSON, the size, `schema`, `confirm`, a handler. The interval clock starts at
+ * a send that passed the size check; the count grows only for a delivered action.
+ */
+export async function checkSandboxSend(check) {
+    const { state, policy } = check;
+    if (check.incomplete)
+        return { ok: false, refusal: { reason: 'declined' } };
+    const maxSends = policy.maxSends ?? SANDBOX_DEFAULTS.maxSends;
+    if (state.count >= maxSends)
+        return { ok: false, refusal: { reason: 'too-many', limit: maxSends } };
+    const now = check.now ?? Date.now();
+    const interval = policy.minSendIntervalMs ?? SANDBOX_DEFAULTS.minSendIntervalMs;
+    if (state.last > 0 && now - state.last < interval) {
+        return { ok: false, refusal: { reason: 'too-soon', waitMs: interval - (now - state.last) } };
+    }
+    const bytes = jsonByteLength(check.payload);
+    if (bytes === undefined)
+        return { ok: false, refusal: { reason: 'not-json' } };
+    const limit = policy.maxPayloadBytes ?? SANDBOX_DEFAULTS.maxPayloadBytes;
+    if (bytes > limit)
+        return { ok: false, refusal: { reason: 'too-large', bytes, limit } };
+    state.last = now;
+    let action = sandboxAction(check.payload, {
+        ...(check.componentId !== undefined ? { componentId: check.componentId } : {}),
+        ...(check.title !== undefined ? { title: check.title } : {}),
+    });
+    if (check.schema !== undefined) {
+        const checked = await validateUiActionContext(action, check.schema);
+        if (!checked.ok)
+            return { ok: false, refusal: { reason: 'invalid', issues: checked.issues } };
+        action = { ...action, context: checked.context };
+    }
+    if (check.confirm !== undefined && !(await check.confirm(action))) {
+        return { ok: false, refusal: { reason: 'declined' } };
+    }
+    if (!check.hasHandler)
+        return { ok: false, refusal: { reason: 'no-handler' } };
+    state.count += 1;
+    return { ok: true, action };
+}
+/** A per-frame token. Not a secret from the frame's own code — it tells this frame's messages apart. */
+export function sandboxToken() {
+    const bytes = new Uint8Array(16);
+    const crypto = globalThis
+        .crypto;
+    if (typeof crypto?.getRandomValues === 'function')
+        crypto.getRandomValues(bytes);
+    else
+        for (let index = 0; index < bytes.length; index++)
+            bytes[index] = Math.floor(Math.random() * 256);
+    return Array.from(bytes, (byte) => byte.toString(16).padStart(2, '0')).join('');
+}
+//# sourceMappingURL=sandbox-host.js.map

package/dist/src/react-native/genui/sandbox-host.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sandbox-host.js","sourceRoot":"","sources":["../../../../src/react-native/genui/sandbox-host.ts"],"names":[],"mappings":"AAMA,OAAO,EACL,cAAc,EACd,aAAa,EAEb,uBAAuB,GACxB,MAAM,wBAAwB,CAAC;AAChC,OAAO,EAAE,gBAAgB,EAAE,eAAe,EAAsB,MAAM,wBAAwB,CAAC;AAC/F,OAAO,EAAE,YAAY,EAAE,gBAAgB,EAAE,MAAM,8BAA8B,CAAC;AAI9E;;;GAGG;AACH,MAAM,eAAe,GAAG,+BAA+B,CAAC;AAExD,kGAAkG;AAClG,MAAM,UAAU,mBAAmB,CAAC,GAAY;IAC9C,OAAO,OAAO,GAAG,KAAK,QAAQ,IAAI,eAAe,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;AAC9D,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,sBAAsB,CAAC,OAA0B;IAC/D,OAAO,mBAAmB,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;AAC1C,CAAC;AAED,4FAA4F;AAC5F,MAAM,CAAC,MAAM,6BAA6B,GAAG,IAAI,CAAC;AAElD,qDAAqD;AACrD,MAAM,WAAW,GAAwB,IAAI,GAAG,CAAC;IAC/C,eAAe,CAAC,KAAK;IACrB,eAAe,CAAC,MAAM;IACtB,eAAe,CAAC,IAAI;IACpB,eAAe,CAAC,KAAK;CACtB,CAAC,CAAC;AAUH;;;;;;GAMG;AACH,MAAM,UAAU,iBAAiB,CAC/B,GAAY,EACZ,KAAa,EACb,eAAuB;IAEvB,IAAI,OAAO,GAAG,KAAK,QAAQ;QAAE,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC;IACrD,IAAI,GAAG,CAAC,MAAM,GAAG,eAAe,GAAG,6BAA6B,EAAE,CAAC;QACjE,MAAM,MAAM,GAAG,WAAW,IAAI,CAAC,SAAS,CAAC,eAAe,CAAC,IAAI,CAAC,YAAY,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,aAAa,CAAC;QAC7G,OAAO,GAAG,CAAC,UAAU,CAAC,MAAM,CAAC;YAC3B,CAAC,CAAC,EAAE,IAAI,EAAE,WAAW,EAAE,KAAK,EAAE,GAAG,CAAC,MAAM,GAAG,MAAM,CAAC,MAAM,GAAG,CAAC,EAAE;YAC9D,CAAC,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC;IACvB,CAAC;IACD,IAAI,IAAa,CAAC;IAClB,IAAI,CAAC;QACH,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;IACzB,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC;IAC1B,CAAC;IACD,IAAI,OAAO,IAAI,KAAK,QAAQ,IAAI,IAAI,KAAK,IAAI,IAAI,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC;QAAE,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC;IAC9F,MAAM,MAAM,GAAG,IAA+B,CAAC;IAC/C,IAAI,OAAO,MAAM,CAAC,KAAK,KAAK,QAAQ,IAAI,MAAM,CAAC,KAAK,KAAK,KAAK;QAAE,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC;IACxF,IAAI,OAAO,MAAM,CAAC,IAAI,KAAK,QAAQ,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC;QAAE,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC;IAC9F,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,IAAI,EAAE,MAAoD,EAAE,CAAC;AACzF,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,iBAAiB,CAAC,OAAgC;IAChE,MAAM,OAAO,GAAG,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC;SACpC,KAAK,CAAC,MAAM,CAAC,YAAY,CAAC,MAAM,CAAC,CAAC;SAClC,IAAI,CAAC,SAAS,CAAC;SACf,KAAK,CAAC,MAAM,CAAC,YAAY,CAAC,MAAM,CAAC,CAAC;SAClC,IAAI,CAAC,SAAS,CAAC,CAAC;IACnB,OAAO,yEAAyE,OAAO,wCAAwC,CAAC;AAClI,CAAC;AAED,uFAAuF;AACvF,MAAM,UAAU,kBAAkB,CAAC,KAAa,EAAE,MAAqB;IACrE,MAAM,GAAG,GAAG,MAAM,CAAC,SAAS,IAAI,gBAAgB,CAAC,SAAS,CAAC;IAC3D,OAAO,IAAI,CAAC,GAAG,CAAC,EAAE,EAAE,IAAI,CAAC,GAAG,CAAC,GAAG,EAAE,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;AACvD,CAAC;AAwBD,MAAM,cAAc,GAAG,sCAAsC,CAAC;AAE9D,MAAM,QAAQ,GAAG,oBAAoB,CAAC;AAEtC,oGAAoG;AACpG,MAAM,UAAU,kBAAkB,CAAC,IAA6B;IAC9D,MAAM,GAAG,GAA2B,EAAE,CAAC;IACvC,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,CAAC;QAChD,MAAM,IAAI,GAAG,GAAG,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,KAAK,GAAG,EAAE,CAAC;QACrD,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC;YAAE,SAAS;QACnC,IAAI,OAAO,KAAK,KAAK,QAAQ;YAAE,GAAG,CAAC,IAAI,CAAC,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC;aACpD,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,IAAI,EAAE,KAAK,EAAE;YAAE,GAAG,CAAC,IAAI,CAAC,GAAG,KAAK,CAAC,IAAI,EAAE,CAAC;IACtF,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC;AAED,MAAM,UAAU,cAAc,CAAC,KAAyB;IACtD,MAAM,IAAI,GAAG,kBAAkB,CAAC,KAAK,CAAC,IAAI,IAAI,EAAE,CAAC,CAAC;IAClD,OAAO;QACL,GAAG,EAAE,YAAY,CACf,IAAI,EACJ,KAAK,CAAC,WAAW,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,WAAW,EAAE,KAAK,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC,EAAE,CAC1E;QACD,IAAI,EAAE,KAAK,CAAC,IAAI,KAAK,IAAI;QACzB,UAAU,EAAE,MAAM,CAAC,WAAW,CAC5B,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,UAAU,IAAI,EAAE,CAAC,CAAC,MAAM,CAC3C,CAAC,CAAC,IAAI,EAAE,KAAK,CAAC,EAAE,EAAE,CAAC,cAAc,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,OAAO,KAAK,KAAK,QAAQ,CAC1E,CACF;QACD,QAAQ,EAAE,gBAAgB,CAAC,IAAI,CAAC;KACjC,CAAC;AACJ,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,iBAAiB,CAAC,GAAW,EAAE,OAA2B;IACxE,MAAM,QAAQ,GAAG,sBAAsB,CAAC;IACxC,IAAI,QAAQ,CAAC,IAAI,CAAC,GAAG,CAAC;QAAE,OAAO,GAAG,CAAC;IACnC,IAAI,OAAO,KAAK,SAAS;QAAE,OAAO,SAAS,CAAC;IAC5C,MAAM,IAAI,GAAG,QAAQ,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;IACpC,IAAI,IAAI,KAAK,IAAI;QAAE,OAAO,SAAS,CAAC;IACpC,MAAM,MAAM,GAAG,IAAI,CAAC,CAAC,CAAC,CAAC;IACvB,IAAI,GAAG,CAAC,UAAU,CAAC,IAAI,CAAC,EAAE,CAAC;QACzB,MAAM,GAAG,GAAG,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC,EAAE,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,IAAI,GAAG,EAAE,CAAC;QAC7D,OAAO,QAAQ,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,SAAS,CAAC;IAC9C,CAAC;IACD,IAAI,GAAG,CAAC,UAAU,CAAC,GAAG,CAAC;QAAE,OAAO,GAAG,MAAM,GAAG,GAAG,EAAE,CAAC;IAClD,IAAI,sBAAsB,CAAC,IAAI,CAAC,GAAG,CAAC;QAAE,OAAO,SAAS,CAAC;IACvD,MAAM,IAAI,GAAG,OAAO,CAAC,KAAK,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,OAAO,CAAC,SAAS,EAAE,EAAE,CAAC,CAAC;IACjE,MAAM,SAAS,GAAG,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,QAAQ,EAAE,EAAE,CAAC,IAAI,GAAG,CAAC;IAChF,OAAO,GAAG,MAAM,GAAG,SAAS,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,GAAG,GAAG,SAAS,GAAG,GAAG,EAAE,CAAC;AAC9E,CAAC;AAsBD;;;;GAIG;AACH,MAAM,CAAC,KAAK,UAAU,gBAAgB,CACpC,KAAgB;IAEhB,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,GAAG,KAAK,CAAC;IAChC,IAAI,KAAK,CAAC,UAAU;QAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,OAAO,EAAE,EAAE,MAAM,EAAE,UAAU,EAAE,EAAE,CAAC;IAC5E,MAAM,QAAQ,GAAG,MAAM,CAAC,QAAQ,IAAI,gBAAgB,CAAC,QAAQ,CAAC;IAC9D,IAAI,KAAK,CAAC,KAAK,IAAI,QAAQ;QACzB,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,OAAO,EAAE,EAAE,MAAM,EAAE,UAAU,EAAE,KAAK,EAAE,QAAQ,EAAE,EAAE,CAAC;IACzE,MAAM,GAAG,GAAG,KAAK,CAAC,GAAG,IAAI,IAAI,CAAC,GAAG,EAAE,CAAC;IACpC,MAAM,QAAQ,GAAG,MAAM,CAAC,iBAAiB,IAAI,gBAAgB,CAAC,iBAAiB,CAAC;IAChF,IAAI,KAAK,CAAC,IAAI,GAAG,CAAC,IAAI,GAAG,GAAG,KAAK,CAAC,IAAI,GAAG,QAAQ,EAAE,CAAC;QAClD,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,OAAO,EAAE,EAAE,MAAM,EAAE,UAAU,EAAE,MAAM,EAAE,QAAQ,GAAG,CAAC,GAAG,GAAG,KAAK,CAAC,IAAI,CAAC,EAAE,EAAE,CAAC;IAC/F,CAAC;IACD,MAAM,KAAK,GAAG,cAAc,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;IAC5C,IAAI,KAAK,KAAK,SAAS;QAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,OAAO,EAAE,EAAE,MAAM,EAAE,UAAU,EAAE,EAAE,CAAC;IAC/E,MAAM,KAAK,GAAG,MAAM,CAAC,eAAe,IAAI,gBAAgB,CAAC,eAAe,CAAC;IACzE,IAAI,KAAK,GAAG,KAAK;QAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,OAAO,EAAE,EAAE,MAAM,EAAE,WAAW,EAAE,KAAK,EAAE,KAAK,EAAE,EAAE,CAAC;IACxF,KAAK,CAAC,IAAI,GAAG,GAAG,CAAC;IACjB,IAAI,MAAM,GAAG,aAAa,CAAC,KAAK,CAAC,OAAO,EAAE;QACxC,GAAG,CAAC,KAAK,CAAC,WAAW,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,WAAW,EAAE,KAAK,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAC9E,GAAG,CAAC,KAAK,CAAC,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,KAAK,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KAC7D,CAAC,CAAC;IACH,IAAI,KAAK,CAAC,MAAM,KAAK,SAAS,EAAE,CAAC;QAC/B,MAAM,OAAO,GAAG,MAAM,uBAAuB,CAAC,MAAM,EAAE,KAAK,CAAC,MAAM,CAAC,CAAC;QACpE,IAAI,CAAC,OAAO,CAAC,EAAE;YAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,OAAO,EAAE,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,EAAE,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC;QAC9F,MAAM,GAAG,EAAE,GAAG,MAAM,EAAE,OAAO,EAAE,OAAO,CAAC,OAAO,EAAE,CAAC;IACnD,CAAC;IACD,IAAI,KAAK,CAAC,OAAO,KAAK,SAAS,IAAI,CAAC,CAAC,MAAM,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,EAAE,CAAC;QAClE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,OAAO,EAAE,EAAE,MAAM,EAAE,UAAU,EAAE,EAAE,CAAC;IACxD,CAAC;IACD,IAAI,CAAC,KAAK,CAAC,UAAU;QAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,OAAO,EAAE,EAAE,MAAM,EAAE,YAAY,EAAE,EAAE,CAAC;IAC/E,KAAK,CAAC,KAAK,IAAI,CAAC,CAAC;IACjB,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC;AAC9B,CAAC;AAED,wGAAwG;AACxG,MAAM,UAAU,YAAY;IAC1B,MAAM,KAAK,GAAG,IAAI,UAAU,CAAC,EAAE,CAAC,CAAC;IACjC,MAAM,MAAM,GAAI,UAA6E;SAC1F,MAAM,CAAC;IACV,IAAI,OAAO,MAAM,EAAE,eAAe,KAAK,UAAU;QAAE,MAAM,CAAC,eAAe,CAAC,KAAK,CAAC,CAAC;;QAE/E,KAAK,IAAI,KAAK,GAAG,CAAC,EAAE,KAAK,GAAG,KAAK,CAAC,MAAM,EAAE,KAAK,EAAE;YAC/C,KAAK,CAAC,KAAK,CAAC,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,MAAM,EAAE,GAAG,GAAG,CAAC,CAAC;IACnD,OAAO,KAAK,CAAC,IAAI,CAAC,KAAK,EAAE,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;AAClF,CAAC"}

package/dist/src/react-native/genui/sandbox.d.ts

@@ -0,0 +1,86 @@
+import type { StandardSchemaV1 } from '@standard-schema/spec';
+import { type ReactNode } from 'react';
+import { type StyleProp, type ViewStyle } from 'react-native';
+import { type WebViewProps } from 'react-native-webview';
+import type { UiAction } from '../../genui/actions.js';
+import { type SandboxPolicy, type SandboxProps } from '../../genui/sandbox.js';
+import type { JsonSchema } from '../../genui/schema.js';
+import type { SandboxRefusal } from '../../react/core/genui/sandbox.js';
+import type { GenuiRenderer } from '../../react/core/genui/types.js';
+import { type FetchLike, type NativeSandboxConfigSource } from './sandbox-assets.js';
+import { type NativeSandboxTheme } from './sandbox-host.js';
+/** What a drawn component calls to hand an action back to the agent (the next user turn). */
+export type GenuiActionHandler = (action: UiAction) => void;
+export interface NativeSandboxRendererOptions {
+    /**
+     * The policy the frame runs under. Default: the one the catalog's definition carries (through the
+     * enclosing `GenuiProvider`'s catalog), else none — no network, the default limits.
+     */
+    policy?: SandboxPolicy;
+    /** Checks the values of every `agent.send(…)` (a Zod object, any Standard Schema, or a JSON Schema). */
+    schema?: StandardSchemaV1 | JsonSchema;
+    /** Last word on an action before it is sent — e.g. an `Alert`. Falsy → dropped (`declined`). */
+    confirm?: (action: UiAction) => boolean | Promise<boolean>;
+    /** Where actions go. Default: the enclosing `GenuiActionProvider` / `GenuiProvider onAction`. */
+    onAction?: GenuiActionHandler;
+    /** Something the frame sent was refused — the same reasons as the web renderer's. */
+    onRefused?: (refusal: SandboxRefusal) => void;
+    /** An uncaught error in the generated code, or the view lost (it navigated, its process died). */
+    onError?: (message: string) => void;
+    /**
+     * The app's design tokens, as CSS custom properties on the frame's `:root` (the web renderer reads
+     * them off its page). An object, or a hook returning one — called while rendering, so it may use
+     * hooks (`() => useAppTheme()`); a change reaches a drawn view without reloading it. `false`: off.
+     */
+    theme?: NativeSandboxTheme | false | (() => NativeSandboxTheme | null | undefined);
+    /**
+     * Tailwind and the kit: an object (assets inline or by url), a url answering `GET <agent>/config`,
+     * a loader, or `false`. Default: `GET <baseUrl>/config` with a `baseUrl`, else theme only.
+     */
+    config?: NativeSandboxConfigSource;
+    /**
+     * The agent's absolute url (`https://api.example.com/agent`): where the config is fetched from by
+     * default, and what the relative urls it names resolve against.
+     */
+    baseUrl?: string;
+    /** The `fetch` for the config and assets. Default: the global one. */
+    fetch?: FetchLike;
+    /** What to draw while nothing is drawable yet. Default: a box of `initialHeight` with the placeholder lines. */
+    placeholder?: (state: {
+        height: number;
+        messages: string[];
+        title?: string;
+    }) => ReactNode;
+    /** Extra style for the WebView (its height is the content's). */
+    style?: StyleProp<ViewStyle>;
+}
+/**
+ * The WebView props every sandbox gets. JavaScript runs inside it; it stores nothing (no DOM
+ * storage, incognito, no cache, no cookies), reads no file, opens no window, loads no mixed content,
+ * shows no link preview, does not scroll (the host sizes it to its content) and goes nowhere: every
+ * URL reaches `onShouldStartLoadWithRequest` (the whitelist lets them through — a URL it refuses
+ * would be handed to `Linking.openURL`), which allows only the inline document.
+ */
+export declare const NATIVE_SANDBOX_WEBVIEW_PROPS: Readonly<WebViewProps>;
+/**
+ * A React Native renderer for the sandbox component (`Sandbox`): the model's HTML, CSS and JS in a
+ * hardened `react-native-webview` ({@link NATIVE_SANDBOX_WEBVIEW_PROPS}) — the same document as the
+ * web renderer's iframe (`buildSandboxDocument`, the same CSP: no network unless the policy lists an
+ * origin), sized to its content.
+ *
+ * It streams like the web one: a placeholder of `initialHeight`, a preview of the styled markup (no
+ * code runs), then the live view, whose code is posted in as it closes. The only bridge is the one
+ * the document carries: `ReactNativeWebView.postMessage` out (ready, resize, error, `agent.send`),
+ * `injectJavaScript` dispatching a `message` event in (render, run, theme, jsx). Everything the
+ * WebView says is checked as the web host checks it — length capped before parsing, the frame's
+ * token, size, interval and count limits, JSON only, `schema`, `confirm` — and an accepted
+ * `agent.send` is handed on as a `UiAction`.
+ *
+ * ```tsx
+ * <GenuiProvider registry={{ Sandbox: createNativeSandboxRenderer({ theme: () => useSandboxTheme() }) }} onAction={chat.sendUiAction}>
+ * ```
+ */
+export declare function createNativeSandboxRenderer(options?: NativeSandboxRendererOptions): GenuiRenderer<SandboxProps>;
+/** The native sandbox renderer with its defaults (theme from nothing, no Tailwind, no kit). */
+export declare const NativeSandboxView: GenuiRenderer<SandboxProps>;
+//# sourceMappingURL=sandbox.d.ts.map

package/dist/src/react-native/genui/sandbox.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"sandbox.d.ts","sourceRoot":"","sources":["../../../../src/react-native/genui/sandbox.tsx"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,uBAAuB,CAAC;AAC9D,OAAO,EAEL,KAAK,SAAS,EAQf,MAAM,OAAO,CAAC;AACf,OAAO,EAAE,KAAK,SAAS,EAAc,KAAK,SAAS,EAAE,MAAM,cAAc,CAAC;AAC1E,OAAO,EAIL,KAAK,YAAY,EAClB,MAAM,sBAAsB,CAAC;AAC9B,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,wBAAwB,CAAC;AACvD,OAAO,EAKL,KAAK,aAAa,EAClB,KAAK,YAAY,EAElB,MAAM,wBAAwB,CAAC;AAChC,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,uBAAuB,CAAC;AAMxD,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,mCAAmC,CAAC;AACxE,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,iCAAiC,CAAC;AACrE,OAAO,EACL,KAAK,SAAS,EACd,KAAK,yBAAyB,EAG/B,MAAM,qBAAqB,CAAC;AAC7B,OAAO,EAIL,KAAK,kBAAkB,EAMxB,MAAM,mBAAmB,CAAC;AAE3B,6FAA6F;AAC7F,MAAM,MAAM,kBAAkB,GAAG,CAAC,MAAM,EAAE,QAAQ,KAAK,IAAI,CAAC;AAE5D,MAAM,WAAW,4BAA4B;IAC3C;;;OAGG;IACH,MAAM,CAAC,EAAE,aAAa,CAAC;IACvB,wGAAwG;IACxG,MAAM,CAAC,EAAE,gBAAgB,GAAG,UAAU,CAAC;IACvC,gGAAgG;IAChG,OAAO,CAAC,EAAE,CAAC,MAAM,EAAE,QAAQ,KAAK,OAAO,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC;IAC3D,iGAAiG;IACjG,QAAQ,CAAC,EAAE,kBAAkB,CAAC;IAC9B,qFAAqF;IACrF,SAAS,CAAC,EAAE,CAAC,OAAO,EAAE,cAAc,KAAK,IAAI,CAAC;IAC9C,kGAAkG;IAClG,OAAO,CAAC,EAAE,CAAC,OAAO,EAAE,MAAM,KAAK,IAAI,CAAC;IACpC;;;;OAIG;IACH,KAAK,CAAC,EAAE,kBAAkB,GAAG,KAAK,GAAG,CAAC,MAAM,kBAAkB,GAAG,IAAI,GAAG,SAAS,CAAC,CAAC;IACnF;;;OAGG;IACH,MAAM,CAAC,EAAE,yBAAyB,CAAC;IACnC;;;OAGG;IACH,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,sEAAsE;IACtE,KAAK,CAAC,EAAE,SAAS,CAAC;IAClB,gHAAgH;IAChH,WAAW,CAAC,EAAE,CAAC,KAAK,EAAE;QAAE,MAAM,EAAE,MAAM,CAAC;QAAC,QAAQ,EAAE,MAAM,EAAE,CAAC;QAAC,KAAK,CAAC,EAAE,MAAM,CAAA;KAAE,KAAK,SAAS,CAAC;IAC3F,iEAAiE;IACjE,KAAK,CAAC,EAAE,SAAS,CAAC,SAAS,CAAC,CAAC;CAC9B;AAED;;;;;;GAMG;AACH,eAAO,MAAM,4BAA4B,EAAE,QAAQ,CAAC,YAAY,CA2CvC,CAAC;AAsE1B;;;;;;;;;;;;;;;;;GAiBG;AACH,wBAAgB,2BAA2B,CACzC,OAAO,GAAE,4BAAiC,GACzC,aAAa,CAAC,YAAY,CAAC,CAyU7B;AAED,+FAA+F;AAC/F,eAAO,MAAM,iBAAiB,EAAE,aAAa,CAAC,YAAY,CAAiC,CAAC"}