@agentkit-js/kernel-pyodide 0.2.0

package/LICENSE

@@ -0,0 +1,186 @@
+                                 Apache License
+                           Version 2.0, January 2004
+                        http://www.apache.org/licenses/
+
+   TERMS AND CONDITIONS FOR USE, REPRODUCTION, AND DISTRIBUTION
+
+   1. Definitions.
+
+      "License" shall mean the terms and conditions for use, reproduction,
+      and distribution as defined by Sections 1 through 9 of this document.
+
+      "Licensor" shall mean the copyright owner or entity authorized by
+      the copyright owner that is granting the License.
+
+      "Legal Entity" shall mean the union of the acting entity and all
+      other entities that control, are controlled by, or are under common
+      control with that entity. For the purposes of this definition,
+      "control" means (i) the power, direct or indirect, to cause the
+      direction or management of such entity, whether by contract or
+      otherwise, or (ii) ownership of fifty percent (50%) or more of the
+      outstanding shares, or (iii) beneficial ownership of such entity.
+
+      "You" (or "Your") shall mean an individual or Legal Entity
+      exercising permissions granted by this License.
+
+      "Source" form shall mean the preferred form for making modifications,
+      including but not limited to software source code, documentation
+      source, and configuration files.
+
+      "Object" form shall mean any form resulting from mechanical
+      transformation or translation of a Source form, including but
+      not limited to compiled object code, generated documentation,
+      and conversions to other media types.
+
+      "Work" shall mean the work of authorship made available under
+      the License, as indicated by a copyright notice that is included in
+      or attached to the work (an example is provided in the Appendix below).
+
+      "Derivative Works" shall mean any work, whether in Source or Object
+      form, that is based on (or derived from) the Work and for which the
+      editorial revisions, annotations, elaborations, or other modifications
+      represent, as a whole, an original work of authorship. For the purposes
+      of this License, Derivative Works shall not include works that remain
+      separable from, or merely link (or bind by name) to the interfaces of,
+      the Work and Derivative Works thereof.
+
+      "Contribution" shall mean, as defined by the copyright owner,
+      any work of authorship, including the original version of the Work and
+      any modifications or additions to that Work or Derivative Works of the
+      Work, that is intentionally submitted to the Licensor for inclusion in
+      the Work by the copyright owner or by an individual or Legal Entity
+      authorized to submit on behalf of the copyright owner. For the purposes
+      of this definition, "submitted" means any form of electronic, verbal,
+      or written communication sent to the Licensor or its representatives,
+      including but not limited to communication on electronic mailing lists,
+      source code control systems, and issue tracking systems that are
+      managed by, or on behalf of, the Licensor for the purpose of
+      discussing and improving the Work, but excluding communication that is
+      conspicuously marked or otherwise designated in writing by the copyright
+      owner as "Not a Contribution."
+
+      "Contributor" shall mean Licensor and any Legal Entity on behalf of
+      whom a Contribution has been received by the Licensor and included
+      within the Work.
+
+   2. Grant of Copyright License. Subject to the terms and conditions of
+      this License, each Contributor hereby grants to You a perpetual,
+      worldwide, non-exclusive, no-charge, royalty-free, irrevocable
+      copyright license to reproduce, prepare Derivative Works of,
+      publicly display, publicly perform, sublicense, and distribute the
+      Work and such Derivative Works in Source or Object form.
+
+   3. Grant of Patent License. Subject to the terms and conditions of
+      this License, each Contributor hereby grants to You a perpetual,
+      worldwide, non-exclusive, no-charge, royalty-free, irrevocable
+      (except as stated in this section) patent license to make, have made,
+      use, offer to sell, sell, import, and otherwise transfer the Work,
+      where such license applies only to those patent claims licensable
+      by such Contributor that are necessarily infringed by their
+      Contribution(s) alone or by the combination of their Contribution(s)
+      with the Work to which such Contribution(s) was submitted. If You
+      institute patent litigation against any entity (including a cross-claim
+      or counterclaim in a lawsuit) alleging that the Work or any
+      Contribution embodied within the Work constitutes patent or
+      contributory patent infringement, then any patent licenses granted
+      to You under this License for that Work shall terminate as of the date
+      such litigation is filed.
+
+   4. Redistribution. You may reproduce and distribute copies of the
+      Work or Derivative Works thereof in any medium, with or without
+      modifications, and in Source or Object form, provided that You
+      meet the following conditions:
+
+      (a) You must give any other recipients of the Work or Derivative
+          Works a copy of this License; and
+
+      (b) You must cause any modified files to carry prominent notices
+          stating that You changed the files; and
+
+      (c) You must retain, in the Source form of any Derivative Works
+          that You distribute, all copyright, patent, trademark, and
+          attribution notices from the Source form of the Work,
+          excluding those notices that do not pertain to any part of
+          the Derivative Works; and
+
+      (d) If the Work includes a "NOTICE" text file as part of its
+          distribution, You must include a readable copy of the
+          attribution notices contained within such NOTICE file, in
+          at least one of the following places: within a NOTICE text
+          file distributed as part of the Derivative Works; within
+          the Source form or documentation, if provided along with the
+          Derivative Works; or, within a display generated by the
+          Derivative Works, if and wherever such third-party notices
+          normally appear. The contents of the NOTICE file are for
+          informational purposes only and do not modify the License.
+          You may add Your own attribution notices within Derivative
+          Works that You distribute, alongside or as an addendum to
+          the NOTICE text from the Work, provided that such additional
+          attribution notices cannot be construed as modifying the License.
+
+      You may add Your own license statement for Your modifications and
+      may provide additional grant of rights to use, copy, modify, merge,
+      publish, distribute, sublicense, and/or sell copies of the
+      Contribution, either alone or in combination with the Work.
+
+   5. Submission of Contributions. Unless You explicitly state otherwise,
+      any Contribution intentionally submitted for inclusion in the Work
+      by You to the Licensor shall be under the terms and conditions of
+      this License, without any additional terms or conditions.
+      Notwithstanding the above, nothing herein shall supersede or modify
+      the terms of any separate license agreement you may have executed
+      with Licensor regarding such Contributions.
+
+   6. Trademarks. This License does not grant permission to use the trade
+      names, trademarks, service marks, or product names of the Licensor,
+      except as required for reasonable and customary use in describing the
+      origin of the Work and reproducing the content of the NOTICE file.
+
+   7. Disclaimer of Warranty. Unless required by applicable law or
+      agreed to in writing, Licensor provides the Work (and each
+      Contributor provides its Contributions) on an "AS IS" BASIS,
+      WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or
+      implied, including, without limitation, any conditions of
+      TITLE, NON-INFRINGEMENT, MERCHANTABILITY, or FITNESS FOR A
+      PARTICULAR PURPOSE. You are solely responsible for determining the
+      appropriateness of using or reproducing the Work and assume any
+      risks associated with Your exercise of permissions under this License.
+
+   8. Limitation of Liability. In no event and under no legal theory,
+      whether in tort (including negligence), contract, or otherwise,
+      unless required by applicable law (such as deliberate and grossly
+      negligent acts) or agreed to in writing, shall any Contributor be
+      liable to You for damages, including any direct, indirect, special,
+      incidental, or exemplary damages of any character arising as a
+      result of this License or out of the use or inability to use the
+      Work (including but not limited to damages for loss of goodwill,
+      work stoppage, computer failure or malfunction, or all other
+      commercial damages or losses), even if such Contributor has been
+      advised of the possibility of such damages.
+
+   9. Accepting Warranty or Additional Liability. While redistributing
+      the Work or Derivative Works thereof, You may choose to offer,
+      and charge a fee for, acceptance of support, warranty, indemnity,
+      or other liability obligations and/or rights consistent with this
+      License. However, in accepting such obligations, You may act only
+      on Your own behalf and on Your sole responsibility, not on behalf
+      of any other Contributor, and only if You agree to indemnify,
+      defend, and hold each Contributor harmless for any liability
+      incurred by, or claims asserted against, such Contributor by reason
+      of your accepting any such warranty or additional liability.
+
+   END OF TERMS AND CONDITIONS
+
+   Copyright 2026 agentkit-js contributors
+
+   Licensed under the Apache License, Version 2.0 (the "License");
+   you may not use this file except in compliance with the License.
+   You may obtain a copy of the License at
+
+       http://www.apache.org/licenses/LICENSE-2.0
+
+   Unless required by applicable law or agreed to in writing, software
+   distributed under the License is distributed on an "AS IS" BASIS,
+   WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+   See the License for the specific language governing permissions and
+   limitations under the License.

package/README.md

@@ -0,0 +1,32 @@
+# @agentkit-js/kernel-pyodide
+
+CPython-in-WASM kernel (Pyodide) — run real Python code from agents on Node, Bun, and CF Workers.
+
+> Part of [agentkit-js](https://github.com/telleroutlook/agentkit-js) — a TypeScript + WASM agent runtime.
+
+## Install
+
+```bash
+npm install @agentkit-js/kernel-pyodide @agentkit-js/core pyodide
+```
+
+## Usage
+
+```ts
+import { PyodideKernel } from "@agentkit-js/kernel-pyodide";
+
+const kernel = new PyodideKernel();
+const result = await kernel.run(`import math; print(math.gcd(2024, 56))`);
+console.log(result.logs); // ["8"]
+```
+
+> ⚠️ **Memory budget on edge runtimes** — Pyodide's WASM image and Python heap together are
+> ~50–80 MB resident. Cloudflare Workers' free tier (~128 MB) leaves only thin headroom for
+> user code; for memory-heavy workloads use [`kernel-wasmtime`](../kernel-wasmtime) or
+> [`kernel-remote`](../kernel-remote) microVMs.
+
+See the [kernel decision tree](https://github.com/telleroutlook/agentkit-js/blob/main/docs/kernels/comparison.md).
+
+## License
+
+[Apache-2.0](./LICENSE) — © agentkit-js contributors

package/dist/PyodideKernel.d.ts

@@ -0,0 +1,25 @@
+import type { CapabilityManifest, KernelResult, WasmKernel } from "@agentkit-js/core/executor";
+/**
+ * PyodideKernel — runs Python code in a Pyodide (CPython-in-WASM) sandbox (A4).
+ *
+ * Uses the `pyodide` npm package (pure JS/WASM, no native binaries required).
+ * A4 target from the spec: full CPython semantics, numpy/scipy/pandas available
+ * via pyodide.loadPackage().
+ *
+ * State model mirrors JsKernel:
+ *  - Python globals persist across run() calls (stateful kernel).
+ *  - __final_answer__ sentinel signals the agent's final answer.
+ *  - reset() clears all Python globals and re-initialises the namespace.
+ *  - snapshot()/restore() serialise via JSON (functions not preserved).
+ *
+ * Pyodide is loaded lazily on the first run() call (~500ms first-use overhead).
+ */
+export declare class PyodideKernel implements WasmKernel {
+    #private;
+    run(code: string, capabilities?: Partial<CapabilityManifest>): Promise<KernelResult>;
+    reset(): Promise<void>;
+    snapshot(): Promise<Uint8Array>;
+    restore(snapshot: Uint8Array): Promise<void>;
+    [Symbol.asyncDispose](): Promise<void>;
+}
+//# sourceMappingURL=PyodideKernel.d.ts.map

package/dist/PyodideKernel.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"PyodideKernel.d.ts","sourceRoot":"","sources":["../src/PyodideKernel.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,kBAAkB,EAAE,YAAY,EAAE,UAAU,EAAE,MAAM,4BAA4B,CAAC;AAW/F;;;;;;;;;;;;;;GAcG;AACH,qBAAa,aAAc,YAAW,UAAU;;IA8CxC,GAAG,CAAC,IAAI,EAAE,MAAM,EAAE,YAAY,CAAC,EAAE,OAAO,CAAC,kBAAkB,CAAC,GAAG,OAAO,CAAC,YAAY,CAAC;IA2IpF,KAAK,IAAI,OAAO,CAAC,IAAI,CAAC;IAetB,QAAQ,IAAI,OAAO,CAAC,UAAU,CAAC;IAoB/B,OAAO,CAAC,QAAQ,EAAE,UAAU,GAAG,OAAO,CAAC,IAAI,CAAC;IAQ5C,CAAC,MAAM,CAAC,YAAY,CAAC,IAAI,OAAO,CAAC,IAAI,CAAC;CAK7C"}

package/dist/PyodideKernel.js

@@ -0,0 +1,235 @@
+/**
+ * PyodideKernel — runs Python code in a Pyodide (CPython-in-WASM) sandbox (A4).
+ *
+ * Uses the `pyodide` npm package (pure JS/WASM, no native binaries required).
+ * A4 target from the spec: full CPython semantics, numpy/scipy/pandas available
+ * via pyodide.loadPackage().
+ *
+ * State model mirrors JsKernel:
+ *  - Python globals persist across run() calls (stateful kernel).
+ *  - __final_answer__ sentinel signals the agent's final answer.
+ *  - reset() clears all Python globals and re-initialises the namespace.
+ *  - snapshot()/restore() serialise via JSON (functions not preserved).
+ *
+ * Pyodide is loaded lazily on the first run() call (~500ms first-use overhead).
+ */
+export class PyodideKernel {
+    #py = null;
+    #logs = [];
+    #initPromise = null;
+    async #ensurePyodide() {
+        if (this.#py)
+            return this.#py;
+        if (this.#initPromise)
+            return this.#initPromise;
+        this.#initPromise = (async () => {
+            const { loadPyodide } = await import("pyodide");
+            // Resolve the pyodide package directory so its WASM assets can be found
+            // regardless of the module resolution root (monorepo, pnpm hoisting, etc.).
+            // Use a plain POSIX path (no file:// prefix) — Pyodide handles both forms
+            // but the file:// form breaks under vitest's module resolver.
+            const { createRequire } = await import("node:module");
+            const { dirname } = await import("node:path");
+            const pkgRequire = createRequire(import.meta.url);
+            const pkgJsonPath = pkgRequire.resolve("pyodide/package.json");
+            const indexURL = `${dirname(pkgJsonPath)}/`;
+            const py = (await loadPyodide({ indexURL }));
+            // Initialise both sentinel spellings (Q5: dual alias for cross-kernel compatibility).
+            py.runPython("__final_answer__ = None; __finalAnswer__ = None");
+            // Q9: install capability infrastructure (urllib patch, check helpers) once.
+            // Per-call capability data is updated cheaply by #applyCapabilities.
+            this.#installCapabilityInfrastructure(py);
+            this.#py = py;
+            return py;
+        })();
+        return this.#initPromise;
+    }
+    #attachCapture(py) {
+        py.setStdout({
+            batched: (s) => {
+                this.#logs.push(s);
+            },
+        });
+        py.setStderr({
+            batched: (s) => {
+                this.#logs.push(`[stderr] ${s}`);
+            },
+        });
+    }
+    async run(code, capabilities) {
+        const py = await this.#ensurePyodide();
+        this.#logs = [];
+        this.#attachCapture(py);
+        // Reset the sentinel before each run.
+        py.globals.set("__final_answer__", null);
+        py.globals.set("__finalAnswer__", null);
+        // A2: inject/revoke capability globals per call.
+        this.#applyCapabilities(py, capabilities);
+        let output;
+        try {
+            output = py.runPython(code);
+        }
+        catch (err) {
+            throw new Error(`PyodideKernelError: ${err instanceof Error ? err.message : String(err)}`);
+        }
+        // Q5: check both sentinel spellings for cross-kernel compatibility.
+        const finalAnswerSnake = py.globals.get("__final_answer__");
+        const finalAnswerCamel = py.globals.get("__finalAnswer__");
+        const finalAnswer = finalAnswerSnake !== null && finalAnswerSnake !== undefined
+            ? finalAnswerSnake
+            : finalAnswerCamel;
+        const isFinalAnswer = finalAnswer !== null && finalAnswer !== undefined;
+        return {
+            output: isFinalAnswer ? finalAnswer : output,
+            logs: [...this.#logs],
+            isFinalAnswer,
+        };
+    }
+    /**
+     * Enforce capability constraints (A2) for the current run call.
+     *
+     * Network enforcement (allowedHosts):
+     *   The urllib monkey-patch is installed ONCE at context init time (in #ensurePyodide).
+     *   Per-call, we only update the _allowed_hosts data variable that the patch reads.
+     *   This prevents the nesting bug where re-patching every step caused _original_urlopen
+     *   to capture the previous _checked_urlopen, forming a deeper call chain each step.
+     *
+     * File-system (allowedReadPaths / allowedWritePaths): Pyodide runs on Emscripten MEMFS
+     *   (in-memory, isolated from real disk unless NODEFS is mounted — which we never do).
+     *   Advisory __check_path__ helpers are installed once at init; data updated per-call.
+     */
+    #applyCapabilities(py, capabilities) {
+        const allowedHosts = capabilities?.allowedHosts ?? [];
+        const readPaths = capabilities?.allowedReadPaths ?? [];
+        const writePaths = capabilities?.allowedWritePaths ?? [];
+        const extraCaps = capabilities?.extraCapabilities ?? [];
+        // Only update the data variables — functions were defined once at init time.
+        const hostsJson = JSON.stringify(JSON.stringify(allowedHosts));
+        const readJson = JSON.stringify(JSON.stringify(readPaths));
+        const writeJson = JSON.stringify(JSON.stringify(writePaths));
+        const extraJson = JSON.stringify(JSON.stringify(extraCaps));
+        py.runPython(`
+import json as _j
+_allowed_hosts = _j.loads(${hostsJson})
+__allowed_read_paths__ = _j.loads(${readJson})
+__allowed_write_paths__ = _j.loads(${writeJson})
+__extra_capabilities__ = _j.loads(${extraJson})
+del _j
+`);
+    }
+    /**
+     * Install capability enforcement infrastructure once at context initialisation.
+     *
+     * Q9: The urllib monkey-patch is applied here (once) rather than in #applyCapabilities
+     * (which runs every step). Re-patching every step caused _original_urlopen to
+     * capture the previous _checked_urlopen on the second call, forming a call chain
+     * that grew one layer deeper per step. Using a sentinel (_agentkit_original_urlopen)
+     * ensures the true original is only captured once, no matter how many times the
+     * data variables (_allowed_hosts) are updated.
+     */
+    #installCapabilityInfrastructure(py) {
+        py.runPython(`
+import urllib.request as _urllib_req, urllib.parse as _urllib_parse
+
+# Q9: capture the true original once using a sentinel — prevents nesting if called again.
+if not hasattr(_urllib_req, "_agentkit_original_urlopen"):
+    _urllib_req._agentkit_original_urlopen = _urllib_req.urlopen
+
+_original_urlopen = _urllib_req._agentkit_original_urlopen
+
+# Seed data variables with deny-all defaults; updated per-call by #applyCapabilities.
+_allowed_hosts = []
+__allowed_read_paths__ = []
+__allowed_write_paths__ = []
+__extra_capabilities__ = []
+
+def _checked_urlopen(url, *args, **kwargs):
+    raw = url.full_url if isinstance(url, _urllib_req.Request) else str(url)
+    hostname = _urllib_parse.urlparse(raw).hostname or ""
+    if not _allowed_hosts:
+        raise PermissionError(
+            f"CapabilityDenied: network access to '{hostname}' is denied "
+            f"(allowedHosts is empty)"
+        )
+    def _matches(host, pattern):
+        if pattern.startswith("*."):
+            return host.endswith(pattern[1:]) or host == pattern[2:]
+        return host == pattern
+    if not any(_matches(hostname, h) for h in _allowed_hosts):
+        raise PermissionError(
+            f"CapabilityDenied: '{hostname}' is not in allowedHosts {_allowed_hosts}"
+        )
+    return _original_urlopen(url, *args, **kwargs)
+
+_urllib_req.urlopen = _checked_urlopen
+
+# Advisory path-check helpers (FS already sandboxed by Emscripten MEMFS).
+def __check_host__(host):
+    if not _allowed_hosts:
+        raise PermissionError(f"CapabilityDenied: network to '{host}' denied")
+    if not any((lambda p: host == p or host.endswith('.' + p.lstrip('*').lstrip('.')))(h) for h in _allowed_hosts):
+        raise PermissionError(f"CapabilityDenied: '{host}' not in allowedHosts")
+
+def __check_read_path__(path):
+    if not __allowed_read_paths__:
+        raise PermissionError(f"CapabilityDenied: read '{path}' denied (no paths allowed)")
+    if not any(path.startswith(p) for p in __allowed_read_paths__):
+        raise PermissionError(f"CapabilityDenied: read '{path}' not in allowedReadPaths")
+
+def __check_write_path__(path):
+    if not __allowed_write_paths__:
+        raise PermissionError(f"CapabilityDenied: write '{path}' denied (no paths allowed)")
+    if not any(path.startswith(p) for p in __allowed_write_paths__):
+        raise PermissionError(f"CapabilityDenied: write '{path}' not in allowedWritePaths")
+
+del _urllib_parse
+`);
+    }
+    async reset() {
+        if (!this.#py)
+            return;
+        // Clear all user-defined globals and re-seed both sentinel spellings.
+        this.#py.runPython(`
+import sys
+# Remove all user-defined names, keep builtins.
+for _k in list(globals().keys()):
+    if not _k.startswith('__'):
+        del globals()[_k]
+__final_answer__ = None
+__finalAnswer__ = None
+`);
+        this.#logs = [];
+    }
+    async snapshot() {
+        const py = await this.#ensurePyodide();
+        // Serialise all serialisable globals to JSON.
+        // Non-serialisable values (functions, modules) are skipped.
+        const state = py.runPython(`
+import json
+_snap = {}
+for _k, _v in list(globals().items()):
+    if _k.startswith('_') and _k != '__final_answer__':
+        continue
+    try:
+        json.dumps(_v)
+        _snap[_k] = _v
+    except Exception:
+        pass
+json.dumps(_snap)
+`);
+        return new TextEncoder().encode(state);
+    }
+    async restore(snapshot) {
+        const py = await this.#ensurePyodide();
+        const obj = JSON.parse(new TextDecoder().decode(snapshot));
+        py.globals.set("_snap", py.toPy(obj));
+        py.runPython(`globals().update(_snap); del _snap`);
+        this.#logs = [];
+    }
+    async [Symbol.asyncDispose]() {
+        await this.reset();
+        this.#py = null;
+        this.#initPromise = null;
+    }
+}
+//# sourceMappingURL=PyodideKernel.js.map

package/dist/PyodideKernel.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"PyodideKernel.js","sourceRoot":"","sources":["../src/PyodideKernel.ts"],"names":[],"mappings":"AAWA;;;;;;;;;;;;;;GAcG;AACH,MAAM,OAAO,aAAa;IACxB,GAAG,GAA4B,IAAI,CAAC;IACpC,KAAK,GAAa,EAAE,CAAC;IACrB,YAAY,GAAqC,IAAI,CAAC;IAEtD,KAAK,CAAC,cAAc;QAClB,IAAI,IAAI,CAAC,GAAG;YAAE,OAAO,IAAI,CAAC,GAAG,CAAC;QAC9B,IAAI,IAAI,CAAC,YAAY;YAAE,OAAO,IAAI,CAAC,YAAY,CAAC;QAEhD,IAAI,CAAC,YAAY,GAAG,CAAC,KAAK,IAAI,EAAE;YAC9B,MAAM,EAAE,WAAW,EAAE,GAAG,MAAM,MAAM,CAAC,SAAS,CAAC,CAAC;YAChD,wEAAwE;YACxE,4EAA4E;YAC5E,0EAA0E;YAC1E,8DAA8D;YAC9D,MAAM,EAAE,aAAa,EAAE,GAAG,MAAM,MAAM,CAAC,aAAa,CAAC,CAAC;YACtD,MAAM,EAAE,OAAO,EAAE,GAAG,MAAM,MAAM,CAAC,WAAW,CAAC,CAAC;YAC9C,MAAM,UAAU,GAAG,aAAa,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;YAClD,MAAM,WAAW,GAAG,UAAU,CAAC,OAAO,CAAC,sBAAsB,CAAC,CAAC;YAC/D,MAAM,QAAQ,GAAG,GAAG,OAAO,CAAC,WAAW,CAAC,GAAG,CAAC;YAE5C,MAAM,EAAE,GAAG,CAAC,MAAM,WAAW,CAAC,EAAE,QAAQ,EAAE,CAAC,CAAgC,CAAC;YAC5E,sFAAsF;YACtF,EAAE,CAAC,SAAS,CAAC,iDAAiD,CAAC,CAAC;YAChE,4EAA4E;YAC5E,qEAAqE;YACrE,IAAI,CAAC,gCAAgC,CAAC,EAAE,CAAC,CAAC;YAC1C,IAAI,CAAC,GAAG,GAAG,EAAE,CAAC;YACd,OAAO,EAAE,CAAC;QACZ,CAAC,CAAC,EAAE,CAAC;QACL,OAAO,IAAI,CAAC,YAAY,CAAC;IAC3B,CAAC;IAED,cAAc,CAAC,EAAoB;QACjC,EAAE,CAAC,SAAS,CAAC;YACX,OAAO,EAAE,CAAC,CAAS,EAAE,EAAE;gBACrB,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;YACrB,CAAC;SACF,CAAC,CAAC;QACH,EAAE,CAAC,SAAS,CAAC;YACX,OAAO,EAAE,CAAC,CAAS,EAAE,EAAE;gBACrB,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,YAAY,CAAC,EAAE,CAAC,CAAC;YACnC,CAAC;SACF,CAAC,CAAC;IACL,CAAC;IAED,KAAK,CAAC,GAAG,CAAC,IAAY,EAAE,YAA0C;QAChE,MAAM,EAAE,GAAG,MAAM,IAAI,CAAC,cAAc,EAAE,CAAC;QACvC,IAAI,CAAC,KAAK,GAAG,EAAE,CAAC;QAChB,IAAI,CAAC,cAAc,CAAC,EAAE,CAAC,CAAC;QAExB,sCAAsC;QACtC,EAAE,CAAC,OAAO,CAAC,GAAG,CAAC,kBAAkB,EAAE,IAAI,CAAC,CAAC;QACzC,EAAE,CAAC,OAAO,CAAC,GAAG,CAAC,iBAAiB,EAAE,IAAI,CAAC,CAAC;QAExC,iDAAiD;QACjD,IAAI,CAAC,kBAAkB,CAAC,EAAE,EAAE,YAAY,CAAC,CAAC;QAE1C,IAAI,MAAe,CAAC;QACpB,IAAI,CAAC;YACH,MAAM,GAAG,EAAE,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC;QAC9B,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,MAAM,IAAI,KAAK,CAAC,uBAAuB,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;QAC7F,CAAC;QAED,oEAAoE;QACpE,MAAM,gBAAgB,GAAG,EAAE,CAAC,OAAO,CAAC,GAAG,CAAC,kBAAkB,CAAC,CAAC;QAC5D,MAAM,gBAAgB,GAAG,EAAE,CAAC,OAAO,CAAC,GAAG,CAAC,iBAAiB,CAAC,CAAC;QAC3D,MAAM,WAAW,GACf,gBAAgB,KAAK,IAAI,IAAI,gBAAgB,KAAK,SAAS;YACzD,CAAC,CAAC,gBAAgB;YAClB,CAAC,CAAC,gBAAgB,CAAC;QACvB,MAAM,aAAa,GAAG,WAAW,KAAK,IAAI,IAAI,WAAW,KAAK,SAAS,CAAC;QAExE,OAAO;YACL,MAAM,EAAE,aAAa,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,MAAM;YAC5C,IAAI,EAAE,CAAC,GAAG,IAAI,CAAC,KAAK,CAAC;YACrB,aAAa;SACd,CAAC;IACJ,CAAC;IAED;;;;;;;;;;;;OAYG;IACH,kBAAkB,CAAC,EAAoB,EAAE,YAA0C;QACjF,MAAM,YAAY,GAAG,YAAY,EAAE,YAAY,IAAI,EAAE,CAAC;QACtD,MAAM,SAAS,GAAG,YAAY,EAAE,gBAAgB,IAAI,EAAE,CAAC;QACvD,MAAM,UAAU,GAAG,YAAY,EAAE,iBAAiB,IAAI,EAAE,CAAC;QACzD,MAAM,SAAS,GAAG,YAAY,EAAE,iBAAiB,IAAI,EAAE,CAAC;QAExD,6EAA6E;QAC7E,MAAM,SAAS,GAAG,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,SAAS,CAAC,YAAY,CAAC,CAAC,CAAC;QAC/D,MAAM,QAAQ,GAAG,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,SAAS,CAAC,SAAS,CAAC,CAAC,CAAC;QAC3D,MAAM,SAAS,GAAG,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,SAAS,CAAC,UAAU,CAAC,CAAC,CAAC;QAC7D,MAAM,SAAS,GAAG,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,SAAS,CAAC,SAAS,CAAC,CAAC,CAAC;QAE5D,EAAE,CAAC,SAAS,CAAC;;4BAEW,SAAS;oCACD,QAAQ;qCACP,SAAS;oCACV,SAAS;;CAE5C,CAAC,CAAC;IACD,CAAC;IAED;;;;;;;;;OASG;IACH,gCAAgC,CAAC,EAAoB;QACnD,EAAE,CAAC,SAAS,CAAC;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;CAuDhB,CAAC,CAAC;IACD,CAAC;IAED,KAAK,CAAC,KAAK;QACT,IAAI,CAAC,IAAI,CAAC,GAAG;YAAE,OAAO;QACtB,sEAAsE;QACtE,IAAI,CAAC,GAAG,CAAC,SAAS,CAAC;;;;;;;;CAQtB,CAAC,CAAC;QACC,IAAI,CAAC,KAAK,GAAG,EAAE,CAAC;IAClB,CAAC;IAED,KAAK,CAAC,QAAQ;QACZ,MAAM,EAAE,GAAG,MAAM,IAAI,CAAC,cAAc,EAAE,CAAC;QACvC,8CAA8C;QAC9C,4DAA4D;QAC5D,MAAM,KAAK,GAAG,EAAE,CAAC,SAAS,CAAC;;;;;;;;;;;;CAY9B,CAAW,CAAC;QACT,OAAO,IAAI,WAAW,EAAE,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;IACzC,CAAC;IAED,KAAK,CAAC,OAAO,CAAC,QAAoB;QAChC,MAAM,EAAE,GAAG,MAAM,IAAI,CAAC,cAAc,EAAE,CAAC;QACvC,MAAM,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,WAAW,EAAE,CAAC,MAAM,CAAC,QAAQ,CAAC,CAA4B,CAAC;QACtF,EAAE,CAAC,OAAO,CAAC,GAAG,CAAC,OAAO,EAAE,EAAE,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC;QACtC,EAAE,CAAC,SAAS,CAAC,oCAAoC,CAAC,CAAC;QACnD,IAAI,CAAC,KAAK,GAAG,EAAE,CAAC;IAClB,CAAC;IAED,KAAK,CAAC,CAAC,MAAM,CAAC,YAAY,CAAC;QACzB,MAAM,IAAI,CAAC,KAAK,EAAE,CAAC;QACnB,IAAI,CAAC,GAAG,GAAG,IAAI,CAAC;QAChB,IAAI,CAAC,YAAY,GAAG,IAAI,CAAC;IAC3B,CAAC;CACF"}

package/dist/index.d.ts

@@ -0,0 +1,2 @@
+export { PyodideKernel } from "./PyodideKernel.js";
+//# sourceMappingURL=index.d.ts.map

package/dist/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,aAAa,EAAE,MAAM,oBAAoB,CAAC"}

package/dist/index.js

@@ -0,0 +1,2 @@
+export { PyodideKernel } from "./PyodideKernel.js";
+//# sourceMappingURL=index.js.map

package/dist/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,aAAa,EAAE,MAAM,oBAAoB,CAAC"}

package/package.json

@@ -0,0 +1,59 @@
+{
+  "name": "@agentkit-js/kernel-pyodide",
+  "version": "0.2.0",
+  "description": "PyodideKernel — CPython-in-WASM kernel for agentkit-js",
+  "type": "module",
+  "main": "./dist/index.js",
+  "types": "./dist/index.d.ts",
+  "exports": {
+    ".": {
+      "import": "./dist/index.js",
+      "types": "./dist/index.d.ts"
+    }
+  },
+  "scripts": {
+    "build": "tsc -p tsconfig.json",
+    "typecheck": "tsc -p tsconfig.json --noEmit",
+    "test": "vitest run",
+    "clean": "rm -rf dist .turbo"
+  },
+  "dependencies": {
+    "@agentkit-js/core": "workspace:*"
+  },
+  "peerDependencies": {
+    "pyodide": ">=0.26.0"
+  },
+  "devDependencies": {
+    "pyodide": "0.29.4",
+    "typescript": "^5.7.0",
+    "vitest": "^2.1.0"
+  },
+  "license": "Apache-2.0",
+  "repository": {
+    "type": "git",
+    "url": "git+https://github.com/telleroutlook/agentkit-js.git",
+    "directory": "packages/kernel-pyodide"
+  },
+  "homepage": "https://github.com/telleroutlook/agentkit-js/tree/main/packages/kernel-pyodide#readme",
+  "bugs": {
+    "url": "https://github.com/telleroutlook/agentkit-js/issues"
+  },
+  "engines": {
+    "node": ">=20.0.0"
+  },
+  "keywords": [
+    "agentkit",
+    "agent",
+    "ai",
+    "llm"
+  ],
+  "publishConfig": {
+    "access": "public"
+  },
+  "files": [
+    "dist",
+    "LICENSE",
+    "README.md"
+  ],
+  "author": "agentkit-js contributors"
+}