@agimon-ai/po-codemode 0.0.1-alpha.27 → 0.0.1-alpha.29

package/dist/{codemodeTools-DiqyGxSU.cjs → codemodeTools-46IqsFCu.cjs}

@@ -262,7 +262,7 @@ function recordedCall(call, budget) {
 		} }
 	};
 }
-function toResult(result, output, saved, calls) {
+function toResult(result, output, saved, calls, approvals = []) {
 	const content = [];
 	if (output.lines.length > 0) content.push({
 		type: "text",
@@ -285,6 +285,10 @@ function toResult(result, output, saved, calls) {
 			text: `${name}: ${message}${hint}`
 		});
 	}
+	if (approvals.length > 0) content.push({
+		type: "text",
+		text: `Waiting for the person's approval: ${approvals.map((entry) => `${entry.name} (approval ${entry.approvalId})`).join(", ")}. Each runs once approved, and its outcome arrives as a message. Keep working meanwhile.`
+	});
 	if (content.length === 0) content.push({
 		type: "text",
 		text: "(no return value)"
@@ -298,9 +302,13 @@ function toResult(result, output, saved, calls) {
 		data: image.data,
 		mimeType: image.mimeType
 	});
+	const details = {
+		...calls.length > 0 ? { calls } : {},
+		...approvals.length > 0 ? { approvals } : {}
+	};
 	return {
 		content,
-		...calls.length > 0 ? { details: { calls } } : {},
+		...Object.keys(details).length > 0 ? { details } : {},
 		...result.ok ? {} : { isError: true }
 	};
 }
@@ -405,7 +413,6 @@ function createCodemodeTools({ registry, isolate, scripts, npm, signal: lifecycl
 		if (closing || ownerSignal.aborted) return text("Code mode session is disposing.", true);
 		if (running >= MAX_CONCURRENT_RUNS) return text(`This session already has ${MAX_CONCURRENT_RUNS} exec runs active. Wait for one to finish.`, true);
 		running += 1;
-		const expiresAt = Date.now() + deadlineMs;
 		const controller = new AbortController();
 		const runSignal = AbortSignal.any([
 			ownerSignal,
@@ -426,6 +433,7 @@ function createCodemodeTools({ registry, isolate, scripts, npm, signal: lifecycl
 			...presence === void 0 ? {} : { interaction: presence }
 		}) ? "unattended" : "interactive";
 		const run = {
+			source: parameters.code,
 			sessionId: execution.sessionId,
 			...execution.caller === void 0 ? {} : { caller: execution.caller },
 			toolCallId,
@@ -441,6 +449,7 @@ function createCodemodeTools({ registry, isolate, scripts, npm, signal: lifecycl
 				warning: "The exec run has ended."
 			} : output.emitImage(image)
 		};
+		const approvals = [];
 		const gateFor = (namespace) => (name, policy, call) => async (...args) => {
 			const gate = await (0, _agimon_ai_po_core_approval.gateApproval)({
 				policy,
@@ -449,15 +458,22 @@ function createCodemodeTools({ registry, isolate, scripts, npm, signal: lifecycl
 					name
 				},
 				input: args[0],
+				arguments: args[0],
 				sessionId: run.sessionId,
 				toolCallId,
 				...run.caller === void 0 ? {} : { caller: run.caller },
 				background,
 				interaction,
 				service: approval?.(),
-				signal: runSignal,
-				expiresAt
+				signal: runSignal
 			});
+			if (!gate.ok && gate.pending === true) {
+				approvals.push({
+					approvalId: gate.approvalId,
+					name
+				});
+				throw new _agimon_ai_po_core_approval.ApprovalPendingError(gate.approvalId, gate.reason);
+			}
 			if (!gate.ok) throw new Error(gate.reason);
 			if (!registry.list().includes(namespace)) throw new Error(`'${name}' is no longer active. Nothing ran.`);
 			if (runSignal.aborted) throw new Error(`'${name}' was cancelled. Nothing ran.`);
@@ -567,186 +583,226 @@ function createCodemodeTools({ registry, isolate, scripts, npm, signal: lifecycl
 			});
 			running -= 1;
 		}
-		return toResult(result, output, saved, calls);
+		return toResult(result, output, saved, calls, approvals);
 	};
-	return {
-		discover: {
-			name: "discover",
-			label: "Discover",
-			description: "List the code-mode namespaces and reusable scripts you can use from `exec`, show one namespace in full, or search members and scripts. Not required before exec: its description already names the namespaces.",
-			parameters: DiscoverToolSchema,
-			promptSnippet: "List code-mode namespaces and their TypeScript declarations",
-			executionMode: "parallel",
-			async execute(_toolCallId, parameters, _signal, _onUpdate, execution) {
-				const service = isolate();
-				if (!service) return text("Code mode is not available on this host.", true);
-				const namespaces = visible(service);
-				const listed = scripts && service.liveObjects ? await scripts.list(activeDomains(execution)) : [];
-				if (parameters.namespace !== void 0) {
-					const found = namespaces.find((namespace) => namespace.name === parameters.namespace);
-					if (!found) {
-						const names = namespaces.map((namespace) => namespace.name).join(", ") || "none";
-						return text(`Unknown namespace "${parameters.namespace}". Registered: ${names}.`, true);
-					}
-					return text(truncate(found.declarations, MAX_DECLARATION_CHARS));
-				}
-				if (parameters.query !== void 0) {
-					const needle = parameters.query.toLowerCase();
-					const hits = [];
-					for (const namespace of namespaces) {
-						const lines = namespace.declarations.split("\n");
-						lines.forEach((line, index) => {
-							if (!line.toLowerCase().includes(needle) || hits.length >= MAX_QUERY_LINES) return;
-							const doc = lines[index - 1]?.trim().startsWith("/**") ? `${lines[index - 1]?.trim()} ` : "";
-							hits.push(`${namespace.name}: ${doc}${line.trim()}`);
-						});
-					}
-					for (const script of listed) {
-						if (hits.length >= MAX_QUERY_LINES) break;
-						if (`${script.specifier} ${script.description}`.toLowerCase().includes(needle)) hits.push(`script ${script.specifier}: ${script.description}`);
-					}
-					return text(hits.length > 0 ? hits.join("\n") : `No members or scripts match "${parameters.query}".`);
+	const discover = {
+		name: "discover",
+		label: "Discover",
+		description: "List the code-mode namespaces and reusable scripts you can use from `exec`, show one namespace in full, or search members and scripts. Not required before exec: its description already names the namespaces.",
+		parameters: DiscoverToolSchema,
+		promptSnippet: "List code-mode namespaces and their TypeScript declarations",
+		executionMode: "parallel",
+		async execute(_toolCallId, parameters, _signal, _onUpdate, execution) {
+			const service = isolate();
+			if (!service) return text("Code mode is not available on this host.", true);
+			const namespaces = visible(service);
+			const listed = scripts && service.liveObjects ? await scripts.list(activeDomains(execution)) : [];
+			if (parameters.namespace !== void 0) {
+				const found = namespaces.find((namespace) => namespace.name === parameters.namespace);
+				if (!found) {
+					const names = namespaces.map((namespace) => namespace.name).join(", ") || "none";
+					return text(`Unknown namespace "${parameters.namespace}". Registered: ${names}.`, true);
 				}
-				const sections = [];
-				if (namespaces.length === 0) sections.push("No namespaces are registered in this session.");
+				return text(truncate(found.declarations, MAX_DECLARATION_CHARS));
+			}
+			if (parameters.query !== void 0) {
+				const needle = parameters.query.toLowerCase();
+				const hits = [];
 				for (const namespace of namespaces) {
-					const members = memberNames(namespace).map((member) => gatedLabel(namespace, member));
-					sections.push(`- ${namespace.name}: ${namespace.summary}\n  members: ${members.join(", ")}`);
+					const lines = namespace.declarations.split("\n");
+					lines.forEach((line, index) => {
+						if (!line.toLowerCase().includes(needle) || hits.length >= MAX_QUERY_LINES) return;
+						const doc = lines[index - 1]?.trim().startsWith("/**") ? `${lines[index - 1]?.trim()} ` : "";
+						hits.push(`${namespace.name}: ${doc}${line.trim()}`);
+					});
 				}
-				sections.push(GLOBALS_HELP);
-				if (!service.liveObjects) sections.push("This host runs plain JavaScript with JSON-only functions.");
-				if (listed.length > 0) {
-					sections.push(`Scripts. ${SCRIPTS_HELP}`);
-					for (const script of listed.slice(0, MAX_LISTED_SCRIPTS)) sections.push(`- ${script.specifier}${script.description ? `: ${script.description}` : ""}`);
-					if (listed.length > MAX_LISTED_SCRIPTS) sections.push(`...and ${listed.length - MAX_LISTED_SCRIPTS} more; use discover({ query }) to search.`);
+				for (const script of listed) {
+					if (hits.length >= MAX_QUERY_LINES) break;
+					if (`${script.specifier} ${script.description}`.toLowerCase().includes(needle)) hits.push(`script ${script.specifier}: ${script.description}`);
 				}
-				if (namespaces.length > 0) sections.push("Call discover({ namespace }) for full types.");
-				return text(sections.join("\n"));
+				return text(hits.length > 0 ? hits.join("\n") : `No members or scripts match "${parameters.query}".`);
 			}
-		},
-		exec: {
-			name: "exec",
-			label: "Exec",
-			get description() {
-				const service = isolate();
-				return [
-					"Run a TypeScript script inside the Po server with live objects from the namespaces below in scope.",
-					"It runs with full server trust, like bash. Keep each call to one logical step.",
-					(service ? visible(service) : []).map((namespace) => `- ${namespace.name}: ${namespace.summary}`).join("\n") || "(no namespaces registered yet; call discover to check)",
-					GLOBALS_HELP,
-					...scripts && service?.liveObjects ? [`${SCRIPTS_HELP} discover lists saved and domain scripts.`, ...domainScriptsHelp()] : [],
-					"Use discover({ namespace }) for full signatures when needed."
-				].join("\n");
-			},
-			parameters: ExecToolSchema,
-			promptSnippet: "Run a TypeScript script against live Po objects (browser and other namespaces)",
-			executionMode: "serial",
-			async execute(toolCallId, parameters, signal, _onUpdate, execution) {
-				return executeCode(parameters, signal, execution, Math.min(MAX_TIMEOUT_MS, Math.max(MIN_TIMEOUT_MS, parameters.timeoutMs ?? DEFAULT_TIMEOUT_MS)), toolCallId);
+			const sections = [];
+			if (namespaces.length === 0) sections.push("No namespaces are registered in this session.");
+			for (const namespace of namespaces) {
+				const members = memberNames(namespace).map((member) => gatedLabel(namespace, member));
+				sections.push(`- ${namespace.name}: ${namespace.summary}\n  members: ${members.join(", ")}`);
 			}
+			sections.push(GLOBALS_HELP);
+			if (!service.liveObjects) sections.push("This host runs plain JavaScript with JSON-only functions.");
+			if (listed.length > 0) {
+				sections.push(`Scripts. ${SCRIPTS_HELP}`);
+				for (const script of listed.slice(0, MAX_LISTED_SCRIPTS)) sections.push(`- ${script.specifier}${script.description ? `: ${script.description}` : ""}`);
+				if (listed.length > MAX_LISTED_SCRIPTS) sections.push(`...and ${listed.length - MAX_LISTED_SCRIPTS} more; use discover({ query }) to search.`);
+			}
+			if (namespaces.length > 0) sections.push("Call discover({ namespace }) for full types.");
+			return text(sections.join("\n"));
+		}
+	};
+	const exec = {
+		name: "exec",
+		label: "Exec",
+		get description() {
+			const service = isolate();
+			return [
+				"Run a TypeScript script inside the Po server with live objects from the namespaces below in scope.",
+				"It runs with full server trust, like bash. Keep each call to one logical step.",
+				(service ? visible(service) : []).map((namespace) => `- ${namespace.name}: ${namespace.summary}`).join("\n") || "(no namespaces registered yet; call discover to check)",
+				GLOBALS_HELP,
+				...scripts && service?.liveObjects ? [`${SCRIPTS_HELP} discover lists saved and domain scripts.`, ...domainScriptsHelp()] : [],
+				"Use discover({ namespace }) for full signatures when needed."
+			].join("\n");
 		},
-		execBackground: {
-			name: "exec_background",
-			label: "Background Exec",
-			description: "Run a long-lived Node code-mode script. Returns its ID immediately; one completion message arrives after execution and cleanup. End the turn rather than polling. Full server trust, like exec.",
-			parameters: ExecBackgroundToolSchema,
-			mainAgentOnly: true,
-			executionMode: "serial",
-			async execute(toolCallId, parameters, signal, _onUpdate, execution) {
-				if (signal?.aborted) return text("Background exec launch was aborted.", true);
-				if (closing || ownerSignal.aborted) return text("Code mode session is disposing.", true);
-				if (!isolate()?.liveObjects) return text("Background exec requires a Node host with live objects.", true);
-				if (!execution.session?.admitMessage) return text("This session cannot admit background exec completion messages.", true);
-				if (running >= MAX_CONCURRENT_RUNS) return text(`This session already has ${MAX_CONCURRENT_RUNS} exec runs active. Wait for one to finish.`, true);
-				const deadlineMs = Math.min(BACKGROUND_MAX_TIMEOUT_MS, Math.max(MIN_TIMEOUT_MS, parameters.timeoutMs ?? BACKGROUND_DEFAULT_TIMEOUT_MS));
-				const id = crypto.randomUUID();
-				const controller = new AbortController();
-				const job = {
-					id,
-					sessionId: execution.sessionId,
-					controller,
-					status: "running",
-					done: Promise.resolve()
-				};
-				jobs.set(id, job);
-				onBackgroundChange?.();
-				job.done = (async () => {
-					let timedOut = false;
-					const timer = setTimeout(() => {
-						timedOut = true;
-						controller.abort();
-					}, deadlineMs);
-					try {
-						const result = await executeCode(parameters, controller.signal, execution, deadlineMs, toolCallId, true);
-						clearTimeout(timer);
-						job.status = "reporting";
-						onBackgroundChange?.();
-						const status = timedOut ? "timed-out" : controller.signal.aborted ? "stopped" : result.isError ? "failed" : "completed";
-						const message = {
-							type: "po-codemode-finished",
-							text: `Background exec ${id} ${status}.\n${result.content.flatMap((part) => part.type === "text" ? [part.text] : []).join("\n")}`,
-							display: true,
-							details: {
-								id,
-								status,
-								result
-							}
-						};
-						let warned = false;
-						while (!ownerSignal.aborted) {
-							let stopAdmission;
-							try {
-								const stopped = new Promise((resolve) => {
-									stopAdmission = resolve;
-									ownerSignal.addEventListener("abort", stopAdmission, { once: true });
-									if (ownerSignal.aborted) resolve();
-								});
-								await Promise.race([execution.session.admitMessage(message, "steer", `po-codemode-finished:${execution.sessionId}:${id}`), stopped]);
-								break;
-							} catch (error) {
-								if (ownerSignal.aborted) break;
-								if (!warned) {
-									warned = true;
-									await Promise.resolve().then(() => execution.client.notify({
-										body: `Background exec completion admission failed; retrying: ${String(error)}`,
-										level: "warning"
-									})).catch(() => void 0);
-								}
-								await sleep(250, ownerSignal).catch(() => void 0);
-							} finally {
-								if (stopAdmission) ownerSignal.removeEventListener("abort", stopAdmission);
+		parameters: ExecToolSchema,
+		promptSnippet: "Run a TypeScript script against live Po objects (browser and other namespaces)",
+		executionMode: "serial",
+		async execute(toolCallId, parameters, signal, _onUpdate, execution) {
+			return executeCode(parameters, signal, execution, Math.min(MAX_TIMEOUT_MS, Math.max(MIN_TIMEOUT_MS, parameters.timeoutMs ?? DEFAULT_TIMEOUT_MS)), toolCallId);
+		}
+	};
+	const execBackground = {
+		name: "exec_background",
+		label: "Background Exec",
+		description: "Run a long-lived Node code-mode script. Returns its ID immediately; one completion message arrives after execution and cleanup. End the turn rather than polling. Full server trust, like exec.",
+		parameters: ExecBackgroundToolSchema,
+		mainAgentOnly: true,
+		executionMode: "serial",
+		async execute(toolCallId, parameters, signal, _onUpdate, execution) {
+			if (signal?.aborted) return text("Background exec launch was aborted.", true);
+			if (closing || ownerSignal.aborted) return text("Code mode session is disposing.", true);
+			if (!isolate()?.liveObjects) return text("Background exec requires a Node host with live objects.", true);
+			if (!execution.session?.admitMessage) return text("This session cannot admit background exec completion messages.", true);
+			if (running >= MAX_CONCURRENT_RUNS) return text(`This session already has ${MAX_CONCURRENT_RUNS} exec runs active. Wait for one to finish.`, true);
+			const deadlineMs = Math.min(BACKGROUND_MAX_TIMEOUT_MS, Math.max(MIN_TIMEOUT_MS, parameters.timeoutMs ?? BACKGROUND_DEFAULT_TIMEOUT_MS));
+			const id = crypto.randomUUID();
+			const controller = new AbortController();
+			const job = {
+				id,
+				sessionId: execution.sessionId,
+				controller,
+				status: "running",
+				done: Promise.resolve()
+			};
+			jobs.set(id, job);
+			onBackgroundChange?.();
+			job.done = (async () => {
+				let timedOut = false;
+				const timer = setTimeout(() => {
+					timedOut = true;
+					controller.abort();
+				}, deadlineMs);
+				try {
+					const result = await executeCode(parameters, controller.signal, execution, deadlineMs, toolCallId, true);
+					clearTimeout(timer);
+					job.status = "reporting";
+					onBackgroundChange?.();
+					const status = timedOut ? "timed-out" : controller.signal.aborted ? "stopped" : result.isError ? "failed" : "completed";
+					const message = {
+						type: "po-codemode-finished",
+						text: `Background exec ${id} ${status}.\n${result.content.flatMap((part) => part.type === "text" ? [part.text] : []).join("\n")}`,
+						display: true,
+						details: {
+							id,
+							status,
+							result
+						}
+					};
+					let warned = false;
+					while (!ownerSignal.aborted) {
+						let stopAdmission;
+						try {
+							const stopped = new Promise((resolve) => {
+								stopAdmission = resolve;
+								ownerSignal.addEventListener("abort", stopAdmission, { once: true });
+								if (ownerSignal.aborted) resolve();
+							});
+							await Promise.race([execution.session.admitMessage(message, "steer", `po-codemode-finished:${execution.sessionId}:${id}`), stopped]);
+							break;
+						} catch (error) {
+							if (ownerSignal.aborted) break;
+							if (!warned) {
+								warned = true;
+								await Promise.resolve().then(() => execution.client.notify({
+									body: `Background exec completion admission failed; retrying: ${String(error)}`,
+									level: "warning"
+								})).catch(() => void 0);
 							}
+							await sleep(250, ownerSignal).catch(() => void 0);
+						} finally {
+							if (stopAdmission) ownerSignal.removeEventListener("abort", stopAdmission);
 						}
-					} finally {
-						clearTimeout(timer);
-						jobs.delete(id);
-						onBackgroundChange?.();
 					}
-				})();
-				return {
-					...text(JSON.stringify({ id })),
-					details: { id }
-				};
-			}
-		},
-		execCancel: {
-			name: "exec_cancel",
-			label: "Cancel Exec",
-			description: "Cancel a background exec in this session. Its terminal message follows child cleanup.",
-			parameters: ExecCancelToolSchema,
-			mainAgentOnly: true,
-			executionMode: "serial",
-			async execute(_toolCallId, parameters, _signal, _onUpdate, execution) {
-				const job = jobs.get(parameters.id);
-				if (job && job.sessionId !== execution.sessionId) return text("Background exec belongs to another session.", true);
-				if (job?.status === "running") job.controller.abort(parameters.reason ? new Error(parameters.reason) : void 0);
-				return text(JSON.stringify({
-					id: parameters.id,
-					status: job?.status === "running" ? "stopping" : "finished"
-				}));
+				} finally {
+					clearTimeout(timer);
+					jobs.delete(id);
+					onBackgroundChange?.();
+				}
+			})();
+			return {
+				...text(JSON.stringify({ id })),
+				details: { id }
+			};
+		}
+	};
+	const execCancel = {
+		name: "exec_cancel",
+		label: "Cancel Exec",
+		description: "Cancel a background exec in this session. Its terminal message follows child cleanup.",
+		parameters: ExecCancelToolSchema,
+		mainAgentOnly: true,
+		executionMode: "serial",
+		async execute(_toolCallId, parameters, _signal, _onUpdate, execution) {
+			const job = jobs.get(parameters.id);
+			if (job && job.sessionId !== execution.sessionId) return text("Background exec belongs to another session.", true);
+			if (job?.status === "running") job.controller.abort(parameters.reason ? new Error(parameters.reason) : void 0);
+			return text(JSON.stringify({
+				id: parameters.id,
+				status: job?.status === "running" ? "stopping" : "finished"
+			}));
+		}
+	};
+	const runApproved = async (call, signal, sessionId) => {
+		const name = call.operation.name;
+		const [namespaceName, ...path] = name.split(".");
+		const namespace = registry.list().find((entry) => entry.name === namespaceName);
+		if (namespace === void 0 || path.length === 0) throw new Error(`'${name}' is no longer active. Nothing ran.`);
+		if (namespace.approval?.[path.join(".")] === void 0) throw new Error(`'${name}' no longer asks for approval, so it was not replayed. Nothing ran.`);
+		signal.throwIfAborted();
+		const cleanups = [];
+		const bound = namespace.bind({
+			source: "",
+			sessionId,
+			caller: "main",
+			toolCallId: `approval:${call.approvalId}`,
+			interaction: "interactive",
+			signal,
+			onDispose: (cleanup) => void cleanups.push(cleanup),
+			record: () => void 0,
+			emitImage: () => ({
+				emitted: false,
+				warning: "An approved call cannot show images."
+			})
+		});
+		try {
+			let receiver = bound;
+			let member = bound;
+			for (const key of path) {
+				receiver = member;
+				member = typeof member === "object" && member !== null ? Reflect.get(member, key, member) : void 0;
 			}
-		},
+			if (typeof member !== "function") throw new Error(`'${name}' is no longer active. Nothing ran.`);
+			return await Reflect.apply(member, receiver, [call.input]);
+		} finally {
+			for (const cleanup of cleanups.reverse()) await cleanup();
+		}
+	};
+	return {
+		discover,
+		exec,
+		execBackground,
+		execCancel,
 		backgroundWork,
+		runApproved,
 		async dispose() {
 			closing = true;
 			unsubscribe();
@@ -769,4 +825,4 @@ Object.defineProperty(exports, "createCodemodeTools", {
 	}
 });
 
-//# sourceMappingURL=codemodeTools-DiqyGxSU.cjs.map
+//# sourceMappingURL=codemodeTools-46IqsFCu.cjs.map