@ai-sdk/code-mode 1.0.6 → 1.0.8

package/dist/index.d.ts

@@ -1,5 +1,12 @@
 import { Tool, ModelMessage, Experimental_ToolCallerTool } from 'ai';
 
+/**
+ * Allows the model to call a tool directly.
+ *
+ * Use a string instead of a Symbol to allow for serializability.
+ */
+declare const DIRECT_TOOL_CALL = "AI_SDK_DIRECT_TOOL_CALL";
+
 /**
  * Host tools made available to sandboxed code through the global `tools` object.
  */
@@ -13,6 +20,7 @@ interface CodeModeToolExecutionOptions {
     abortSignal?: AbortSignal;
     experimental_context?: unknown;
     context?: unknown;
+    codeModeInterrupt?: CodeModeInterruptExecutionContext;
 }
 /**
  * AI SDK tool returned by `createCodeModeTool`.
@@ -32,6 +40,98 @@ interface CodeModeToolInput {
      */
     js: string;
 }
+type ApprovalDecision = 'approved' | 'denied' | {
+    approved: boolean;
+    reason?: string;
+};
+interface CodeModeApprovalRequest {
+    toolName: string;
+    input: unknown;
+    toolCallId: string;
+}
+interface CodeModeApprovalResponse {
+    approvalId: string;
+    approved: boolean;
+    reason?: string;
+}
+interface CodeModeInterruptPayload {
+    kind: string;
+    [key: string]: unknown;
+}
+interface CodeModeInterruptResolution<TResolution = unknown> {
+    interruptId: string;
+    resolution: TResolution;
+}
+interface CodeModeInterruptExecutionContext<TPayload extends CodeModeInterruptPayload = CodeModeInterruptPayload, TResolution = unknown> {
+    interruptId: string;
+    payload: TPayload;
+    resolution: TResolution;
+}
+type CodeModeContinuationLedgerEntry = {
+    kind: 'tool';
+    name: string;
+    inputJson: string;
+    toolCallId: string;
+    status: 'fulfilled';
+    dateNowMs: number;
+    valueJson: string;
+} | {
+    kind: 'tool';
+    name: string;
+    inputJson: string;
+    toolCallId: string;
+    status: 'rejected';
+    dateNowMs: number;
+    error: SerializableError;
+} | {
+    kind: 'tool';
+    name: string;
+    inputJson: string;
+    toolCallId: string;
+    interruptId: string;
+    interruptPayload: CodeModeInterruptPayload;
+    status: 'interrupted';
+};
+interface CodeModeDeterminismState {
+    dateNowMs: number;
+    randomSeed: string;
+}
+interface CodeModeContinuationAuth {
+    alg: 'HMAC-SHA256';
+    nonce: string;
+    issuedAtMs: number;
+    expiresAtMs: number;
+    signature: string;
+}
+interface CodeModeContinuation {
+    version: 1;
+    js: string;
+    outerToolCallId: string;
+    determinism: CodeModeDeterminismState;
+    ledger: CodeModeContinuationLedgerEntry[];
+    auth: CodeModeContinuationAuth;
+}
+interface CodeModeInterrupt<TPayload extends CodeModeInterruptPayload = CodeModeInterruptPayload> {
+    type: 'code-mode-interrupt';
+    interruptId: string;
+    toolName: string;
+    toolCallId: string;
+    outerToolCallId: string;
+    input: unknown;
+    payload: TPayload;
+    continuation: CodeModeContinuation;
+}
+type CodeModeUnwrappedResult = {
+    status: 'completed';
+    output: unknown;
+} | {
+    status: 'interrupted';
+    interrupt: CodeModeInterrupt;
+};
+interface CodeModeApprovalInterruptPayload extends CodeModeInterruptPayload {
+    kind: 'ai-sdk-code-mode/tool-approval';
+}
+type CodeModeApprovalInterrupt = CodeModeInterrupt<CodeModeApprovalInterruptPayload>;
 /**
  * Execution limits applied to each sandbox invocation.
  */
@@ -62,6 +162,21 @@ interface CodeModeExecutionPolicy {
  */
 interface CodeModeOptions {
     executionPolicy?: CodeModeExecutionPolicy;
+    continuationSecurity?: CodeModeContinuationSecurityOptions;
+    approval?: {
+        /**
+         * @defaultValue `'callback'`
+         */
+        mode?: 'callback' | 'interrupt';
+        onApprovalRequired?: (request: CodeModeApprovalRequest) => Promise<ApprovalDecision> | ApprovalDecision;
+    };
+}
+interface CodeModeContinuationSecurityOptions {
+    signingKey?: string | Uint8Array;
+    /**
+     * @defaultValue `60 * 60 * 1000`
+     */
+    maxAgeMs?: number;
 }
 /**
  * Input for `runCodeMode`.
@@ -71,6 +186,8 @@ interface RunCodeModeInput {
     tools: CodeModeToolSet;
     toolExecutionOptions?: Partial<CodeModeToolExecutionOptions>;
     options?: CodeModeOptions;
+    continuation?: CodeModeContinuation;
+    interruptResolution?: CodeModeInterruptResolution;
 }
 
 /**
@@ -84,6 +201,17 @@ declare function createCodeModeTool(tools: CodeModeToolSet, options?: CodeModeOp
  */
 declare function codeModeTool(options?: CodeModeOptions): Experimental_ToolCallerTool<CodeModeTool>;
 
+declare function isCodeModeApprovalInterrupt(value: unknown, continuationSecurity?: CodeModeContinuationSecurityOptions): value is CodeModeApprovalInterrupt;
+declare function continueCodeModeApproval({ interrupt, approvalResponse, tools, options, toolExecutionOptions, }: {
+    interrupt: CodeModeApprovalInterrupt;
+    approvalResponse: CodeModeApprovalResponse;
+    tools: CodeModeToolSet;
+    options?: CodeModeOptions;
+    toolExecutionOptions?: Partial<CodeModeToolExecutionOptions>;
+}): Promise<unknown>;
+declare function toCodeModeApprovalMessages(interrupt: CodeModeApprovalInterrupt): ModelMessage[];
+declare function getCodeModeApprovalResponse(messages: ModelMessage[], interrupt: CodeModeApprovalInterrupt): CodeModeApprovalResponse | undefined;
+
 /**
  * Base class for errors raised by code mode.
  *
@@ -153,6 +281,25 @@ declare class CodeModeProtocolError extends CodeModeError {
 declare class CodeModeToolError extends CodeModeError {
     constructor(message: string, details?: unknown);
 }
+declare class CodeModeToolApprovalRequiredError extends CodeModeToolError {
+    constructor(toolName: string, input: unknown, toolCallId: string);
+}
+declare class CodeModeToolApprovalDeniedError extends CodeModeToolError {
+    constructor(toolName: string, input: unknown, toolCallId: string, reason?: string);
+}
+
+declare function requestCodeModeInterrupt<TPayload extends CodeModeInterruptPayload>(payload: TPayload): never;
+
+declare function isCodeModeInterrupt(value: unknown, continuationSecurity?: CodeModeContinuationSecurityOptions): value is CodeModeInterrupt;
+declare function continueCodeModeInterrupt<TPayload extends CodeModeInterruptPayload = CodeModeInterruptPayload, TResolution = unknown>({ interrupt, resolution, tools, options, toolExecutionOptions, }: {
+    interrupt: CodeModeInterrupt<TPayload>;
+    resolution: TResolution;
+    tools: CodeModeToolSet;
+    options?: CodeModeOptions;
+    toolExecutionOptions?: Partial<CodeModeToolExecutionOptions>;
+}): Promise<unknown>;
+declare function getCodeModeInterrupt(result: unknown, continuationSecurity?: CodeModeContinuationSecurityOptions): CodeModeInterrupt | undefined;
+declare function unwrapCodeModeResult(result: unknown, continuationSecurity?: CodeModeContinuationSecurityOptions): CodeModeUnwrappedResult;
 
 /**
  * Runs one code-mode invocation directly without wrapping it as an AI SDK tool.
@@ -165,6 +312,10 @@ declare class CodeModeToolError extends CodeModeError {
  */
 declare function runCodeMode(input: RunCodeModeInput): Promise<unknown>;
 
+declare function setCodeModeContinuationSigningKey(key?: string | Uint8Array, options?: {
+    maxAgeMs?: number;
+}): void;
+
 /**
  * Sets the process-global maximum number of active code-mode workers.
  *
@@ -176,4 +327,4 @@ declare function runCodeMode(input: RunCodeModeInput): Promise<unknown>;
  */
 declare function setMaxWorkers(maxWorkers?: number): void;
 
-export { CodeModeAbortedError, CodeModeBridgeLimitError, CodeModeConcurrencyError, CodeModeDetachedBridgeRequestError, CodeModeError, type CodeModeExecutionPolicy, type CodeModeOptions, CodeModeProtocolError, CodeModeSourceTooLargeError, CodeModeTimeoutError, type CodeModeTool, CodeModeToolError, type CodeModeToolExecutionOptions, type CodeModeToolInput, type CodeModeToolSet, type RunCodeModeInput, codeModeTool as experimental_codeModeTool, createCodeModeTool as experimental_createCodeModeTool, runCodeMode as experimental_runCodeMode, setMaxWorkers as experimental_setMaxWorkers };
+export { type ApprovalDecision, CodeModeAbortedError, type CodeModeApprovalInterrupt, type CodeModeApprovalRequest, type CodeModeApprovalResponse, CodeModeBridgeLimitError, CodeModeConcurrencyError, type CodeModeContinuation, type CodeModeContinuationSecurityOptions, CodeModeDetachedBridgeRequestError, CodeModeError, type CodeModeExecutionPolicy, type CodeModeInterrupt, type CodeModeInterruptExecutionContext, type CodeModeInterruptPayload, type CodeModeInterruptResolution, type CodeModeOptions, CodeModeProtocolError, CodeModeSourceTooLargeError, CodeModeTimeoutError, type CodeModeTool, CodeModeToolApprovalDeniedError, CodeModeToolApprovalRequiredError, CodeModeToolError, type CodeModeToolExecutionOptions, type CodeModeToolInput, type CodeModeToolSet, type CodeModeUnwrappedResult, DIRECT_TOOL_CALL, type RunCodeModeInput, codeModeTool as experimental_codeModeTool, continueCodeModeApproval as experimental_continueCodeModeApproval, continueCodeModeInterrupt as experimental_continueCodeModeInterrupt, createCodeModeTool as experimental_createCodeModeTool, getCodeModeApprovalResponse as experimental_getCodeModeApprovalResponse, getCodeModeInterrupt as experimental_getCodeModeInterrupt, isCodeModeApprovalInterrupt as experimental_isCodeModeApprovalInterrupt, isCodeModeInterrupt as experimental_isCodeModeInterrupt, requestCodeModeInterrupt as experimental_requestCodeModeInterrupt, runCodeMode as experimental_runCodeMode, setCodeModeContinuationSigningKey as experimental_setCodeModeContinuationSigningKey, setMaxWorkers as experimental_setMaxWorkers, toCodeModeApprovalMessages as experimental_toCodeModeApprovalMessages, unwrapCodeModeResult as experimental_unwrapCodeModeResult };

package/dist/index.js

@@ -1,7 +1,14 @@
+import { DIRECT_TOOL_CALL } from "./direct-tool-call.js";
 import {
   codeModeTool,
   createCodeModeTool
 } from "./code-mode-tool.js";
+import {
+  continueCodeModeApproval,
+  getCodeModeApprovalResponse,
+  isCodeModeApprovalInterrupt,
+  toCodeModeApprovalMessages
+} from "./approval-continuation.js";
 import {
   CodeModeAbortedError,
   CodeModeBridgeLimitError,
@@ -11,9 +18,19 @@ import {
   CodeModeProtocolError,
   CodeModeSourceTooLargeError,
   CodeModeTimeoutError,
+  CodeModeToolApprovalDeniedError,
+  CodeModeToolApprovalRequiredError,
   CodeModeToolError
 } from "./errors.js";
+import { requestCodeModeInterrupt } from "./host-interrupt.js";
+import {
+  continueCodeModeInterrupt,
+  getCodeModeInterrupt,
+  isCodeModeInterrupt,
+  unwrapCodeModeResult
+} from "./interrupt-continuation.js";
 import { runCodeMode } from "./run-code-mode.js";
+import { setCodeModeContinuationSigningKey } from "./continuation-capability.js";
 import { setMaxWorkers } from "./runtime/max-workers.js";
 export {
   CodeModeAbortedError,
@@ -24,10 +41,23 @@ export {
   CodeModeProtocolError,
   CodeModeSourceTooLargeError,
   CodeModeTimeoutError,
+  CodeModeToolApprovalDeniedError,
+  CodeModeToolApprovalRequiredError,
   CodeModeToolError,
+  DIRECT_TOOL_CALL,
   codeModeTool as experimental_codeModeTool,
+  continueCodeModeApproval as experimental_continueCodeModeApproval,
+  continueCodeModeInterrupt as experimental_continueCodeModeInterrupt,
   createCodeModeTool as experimental_createCodeModeTool,
+  getCodeModeApprovalResponse as experimental_getCodeModeApprovalResponse,
+  getCodeModeInterrupt as experimental_getCodeModeInterrupt,
+  isCodeModeApprovalInterrupt as experimental_isCodeModeApprovalInterrupt,
+  isCodeModeInterrupt as experimental_isCodeModeInterrupt,
+  requestCodeModeInterrupt as experimental_requestCodeModeInterrupt,
   runCodeMode as experimental_runCodeMode,
-  setMaxWorkers as experimental_setMaxWorkers
+  setCodeModeContinuationSigningKey as experimental_setCodeModeContinuationSigningKey,
+  setMaxWorkers as experimental_setMaxWorkers,
+  toCodeModeApprovalMessages as experimental_toCodeModeApprovalMessages,
+  unwrapCodeModeResult as experimental_unwrapCodeModeResult
 };
 //# sourceMappingURL=index.js.map

package/dist/index.js.map

@@ -1 +1 @@
-{"version":3,"sources":["../src/index.ts"],"sourcesContent":["export {\n  codeModeTool as experimental_codeModeTool,\n  createCodeModeTool as experimental_createCodeModeTool,\n} from './code-mode-tool.js';\nexport {\n  CodeModeAbortedError,\n  CodeModeBridgeLimitError,\n  CodeModeConcurrencyError,\n  CodeModeDetachedBridgeRequestError,\n  CodeModeError,\n  CodeModeProtocolError,\n  CodeModeSourceTooLargeError,\n  CodeModeTimeoutError,\n  CodeModeToolError,\n} from './errors.js';\nexport { runCodeMode as experimental_runCodeMode } from './run-code-mode.js';\nexport { setMaxWorkers as experimental_setMaxWorkers } from './runtime/max-workers.js';\nexport type {\n  CodeModeExecutionPolicy,\n  CodeModeOptions,\n  CodeModeTool,\n  CodeModeToolExecutionOptions,\n  CodeModeToolInput,\n  CodeModeToolSet,\n  RunCodeModeInput,\n} from './types.js';\n"],"mappings":"AAAA;AAAA,EACkB;AAAA,EACM;AAAA,OACjB;AACP;AAAA,EACE;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,OACK;AACP,SAAwB,mBAAgC;AACxD,SAA0B,qBAAkC;","names":[]}
+{"version":3,"sources":["../src/index.ts"],"sourcesContent":["export { DIRECT_TOOL_CALL } from './direct-tool-call.js';\nexport {\n  codeModeTool as experimental_codeModeTool,\n  createCodeModeTool as experimental_createCodeModeTool,\n} from './code-mode-tool.js';\nexport {\n  continueCodeModeApproval as experimental_continueCodeModeApproval,\n  getCodeModeApprovalResponse as experimental_getCodeModeApprovalResponse,\n  isCodeModeApprovalInterrupt as experimental_isCodeModeApprovalInterrupt,\n  toCodeModeApprovalMessages as experimental_toCodeModeApprovalMessages,\n} from './approval-continuation.js';\nexport {\n  CodeModeAbortedError,\n  CodeModeBridgeLimitError,\n  CodeModeConcurrencyError,\n  CodeModeDetachedBridgeRequestError,\n  CodeModeError,\n  CodeModeProtocolError,\n  CodeModeSourceTooLargeError,\n  CodeModeTimeoutError,\n  CodeModeToolApprovalDeniedError,\n  CodeModeToolApprovalRequiredError,\n  CodeModeToolError,\n} from './errors.js';\nexport { requestCodeModeInterrupt as experimental_requestCodeModeInterrupt } from './host-interrupt.js';\nexport {\n  continueCodeModeInterrupt as experimental_continueCodeModeInterrupt,\n  getCodeModeInterrupt as experimental_getCodeModeInterrupt,\n  isCodeModeInterrupt as experimental_isCodeModeInterrupt,\n  unwrapCodeModeResult as experimental_unwrapCodeModeResult,\n} from './interrupt-continuation.js';\nexport { runCodeMode as experimental_runCodeMode } from './run-code-mode.js';\nexport { setCodeModeContinuationSigningKey as experimental_setCodeModeContinuationSigningKey } from './continuation-capability.js';\nexport { setMaxWorkers as experimental_setMaxWorkers } from './runtime/max-workers.js';\nexport type {\n  ApprovalDecision,\n  CodeModeApprovalInterrupt,\n  CodeModeApprovalRequest,\n  CodeModeApprovalResponse,\n  CodeModeContinuation,\n  CodeModeContinuationSecurityOptions,\n  CodeModeExecutionPolicy,\n  CodeModeInterrupt,\n  CodeModeInterruptExecutionContext,\n  CodeModeInterruptPayload,\n  CodeModeInterruptResolution,\n  CodeModeOptions,\n  CodeModeTool,\n  CodeModeToolExecutionOptions,\n  CodeModeToolInput,\n  CodeModeToolSet,\n  CodeModeUnwrappedResult,\n  RunCodeModeInput,\n} from './types.js';\n"],"mappings":"AAAA,SAAS,wBAAwB;AACjC;AAAA,EACkB;AAAA,EACM;AAAA,OACjB;AACP;AAAA,EAC8B;AAAA,EACG;AAAA,EACA;AAAA,EACD;AAAA,OACzB;AACP;AAAA,EACE;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,OACK;AACP,SAAqC,gCAA6C;AAClF;AAAA,EAC+B;AAAA,EACL;AAAA,EACD;AAAA,EACC;AAAA,OACnB;AACP,SAAwB,mBAAgC;AACxD,SAA8C,yCAAsD;AACpG,SAA0B,qBAAkC;","names":[]}

package/dist/interrupt-continuation.js

@@ -0,0 +1,115 @@
+import {
+  hasValidCodeModeContinuationCapability,
+  verifyCodeModeContinuation
+} from "./continuation-capability.js";
+import { CodeModeProtocolError } from "./errors.js";
+import { runCodeMode } from "./run-code-mode.js";
+function isCodeModeInterrupt(value, continuationSecurity = {}) {
+  if (isRecord(value) && value.type === "code-mode-interrupt" && typeof value.interruptId === "string" && typeof value.toolCallId === "string" && typeof value.toolName === "string" && typeof value.outerToolCallId === "string" && isRecord(value.payload) && typeof value.payload.kind === "string" && isRecord(value.continuation) && hasValidCodeModeContinuationCapability(
+    value.continuation,
+    continuationSecurity
+  )) {
+    try {
+      assertInterruptMatchesLedger(value);
+      return true;
+    } catch {
+      return false;
+    }
+  }
+  return false;
+}
+async function continueCodeModeInterrupt({
+  interrupt,
+  resolution,
+  tools,
+  options = {},
+  toolExecutionOptions
+}) {
+  verifyCodeModeContinuation(
+    interrupt.continuation,
+    options.continuationSecurity
+  );
+  assertInterruptMatchesLedger(interrupt);
+  const interruptResolution = {
+    interruptId: interrupt.interruptId,
+    resolution
+  };
+  return await runCodeMode({
+    js: interrupt.continuation.js,
+    tools,
+    options,
+    continuation: interrupt.continuation,
+    interruptResolution,
+    ...toolExecutionOptions !== void 0 ? { toolExecutionOptions } : {}
+  });
+}
+function getCodeModeInterrupt(result, continuationSecurity = {}) {
+  const direct = readInterruptValue(result, continuationSecurity);
+  if (direct !== void 0) {
+    return direct;
+  }
+  if (!isRecord(result)) {
+    return void 0;
+  }
+  for (const key of ["toolResults", "content"]) {
+    const parts = result[key];
+    if (!Array.isArray(parts)) {
+      continue;
+    }
+    for (const part of parts) {
+      if (!isRecord(part)) {
+        continue;
+      }
+      const interrupt = readInterruptValue(part.output, continuationSecurity);
+      if (interrupt !== void 0) {
+        return interrupt;
+      }
+    }
+  }
+  return void 0;
+}
+function unwrapCodeModeResult(result, continuationSecurity = {}) {
+  const interrupt = getCodeModeInterrupt(result, continuationSecurity);
+  return interrupt === void 0 ? { status: "completed", output: result } : { status: "interrupted", interrupt };
+}
+function readInterruptValue(value, continuationSecurity) {
+  if (isCodeModeInterrupt(value, continuationSecurity)) {
+    return value;
+  }
+  if (isRecord(value) && (value.type === "json" || value.type === "text") && "value" in value) {
+    return readInterruptValue(value.value, continuationSecurity);
+  }
+  return void 0;
+}
+function assertInterruptMatchesLedger(interrupt) {
+  if (interrupt.continuation.outerToolCallId !== interrupt.outerToolCallId) {
+    throw new CodeModeProtocolError(
+      "Code-mode interrupt outer tool call id does not match its continuation."
+    );
+  }
+  const matches = interrupt.continuation.ledger.filter(
+    (entry) => entry.status === "interrupted" && entry.interruptId === interrupt.interruptId && entry.toolCallId === interrupt.toolCallId && entry.name === interrupt.toolName && jsonEqual(fromJsonPayload(entry.inputJson), interrupt.input) && jsonEqual(entry.interruptPayload, interrupt.payload)
+  );
+  if (matches.length !== 1) {
+    throw new CodeModeProtocolError(
+      "Code-mode interrupt metadata does not match the signed continuation ledger.",
+      { interruptId: interrupt.interruptId, matches: matches.length }
+    );
+  }
+}
+function jsonEqual(left, right) {
+  return JSON.stringify(left) === JSON.stringify(right);
+}
+function fromJsonPayload(valueJson) {
+  return valueJson === "" ? void 0 : JSON.parse(valueJson);
+}
+function isRecord(value) {
+  return typeof value === "object" && value !== null && !Array.isArray(value);
+}
+export {
+  continueCodeModeInterrupt,
+  getCodeModeInterrupt,
+  isCodeModeInterrupt,
+  unwrapCodeModeResult
+};
+//# sourceMappingURL=interrupt-continuation.js.map

package/dist/interrupt-continuation.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/interrupt-continuation.ts"],"sourcesContent":["import {\n  hasValidCodeModeContinuationCapability,\n  verifyCodeModeContinuation,\n} from './continuation-capability.js';\nimport { CodeModeProtocolError } from './errors.js';\nimport { runCodeMode } from './run-code-mode.js';\nimport type {\n  CodeModeContinuationSecurityOptions,\n  CodeModeInterrupt,\n  CodeModeInterruptPayload,\n  CodeModeInterruptResolution,\n  CodeModeOptions,\n  CodeModeToolExecutionOptions,\n  CodeModeToolSet,\n  CodeModeUnwrappedResult,\n} from './types.js';\n\nexport function isCodeModeInterrupt(\n  value: unknown,\n  continuationSecurity: CodeModeContinuationSecurityOptions = {},\n): value is CodeModeInterrupt {\n  if (\n    isRecord(value) &&\n    value.type === 'code-mode-interrupt' &&\n    typeof value.interruptId === 'string' &&\n    typeof value.toolCallId === 'string' &&\n    typeof value.toolName === 'string' &&\n    typeof value.outerToolCallId === 'string' &&\n    isRecord(value.payload) &&\n    typeof value.payload.kind === 'string' &&\n    isRecord(value.continuation) &&\n    hasValidCodeModeContinuationCapability(\n      value.continuation,\n      continuationSecurity,\n    )\n  ) {\n    try {\n      assertInterruptMatchesLedger(value as unknown as CodeModeInterrupt);\n      return true;\n    } catch {\n      return false;\n    }\n  }\n  return false;\n}\n\nexport async function continueCodeModeInterrupt<\n  TPayload extends CodeModeInterruptPayload = CodeModeInterruptPayload,\n  TResolution = unknown,\n>({\n  interrupt,\n  resolution,\n  tools,\n  options = {},\n  toolExecutionOptions,\n}: {\n  interrupt: CodeModeInterrupt<TPayload>;\n  resolution: TResolution;\n  tools: CodeModeToolSet;\n  options?: CodeModeOptions;\n  toolExecutionOptions?: Partial<CodeModeToolExecutionOptions>;\n}): Promise<unknown> {\n  verifyCodeModeContinuation(\n    interrupt.continuation,\n    options.continuationSecurity,\n  );\n  assertInterruptMatchesLedger(interrupt);\n\n  const interruptResolution: CodeModeInterruptResolution<TResolution> = {\n    interruptId: interrupt.interruptId,\n    resolution,\n  };\n  return await runCodeMode({\n    js: interrupt.continuation.js,\n    tools,\n    options,\n    continuation: interrupt.continuation,\n    interruptResolution,\n    ...(toolExecutionOptions !== undefined ? { toolExecutionOptions } : {}),\n  });\n}\n\nexport function getCodeModeInterrupt(\n  result: unknown,\n  continuationSecurity: CodeModeContinuationSecurityOptions = {},\n): CodeModeInterrupt | undefined {\n  const direct = readInterruptValue(result, continuationSecurity);\n  if (direct !== undefined) {\n    return direct;\n  }\n  if (!isRecord(result)) {\n    return undefined;\n  }\n\n  for (const key of ['toolResults', 'content'] as const) {\n    const parts = result[key];\n    if (!Array.isArray(parts)) {\n      continue;\n    }\n    for (const part of parts) {\n      if (!isRecord(part)) {\n        continue;\n      }\n      const interrupt = readInterruptValue(part.output, continuationSecurity);\n      if (interrupt !== undefined) {\n        return interrupt;\n      }\n    }\n  }\n  return undefined;\n}\n\nexport function unwrapCodeModeResult(\n  result: unknown,\n  continuationSecurity: CodeModeContinuationSecurityOptions = {},\n): CodeModeUnwrappedResult {\n  const interrupt = getCodeModeInterrupt(result, continuationSecurity);\n  return interrupt === undefined\n    ? { status: 'completed', output: result }\n    : { status: 'interrupted', interrupt };\n}\n\nfunction readInterruptValue(\n  value: unknown,\n  continuationSecurity: CodeModeContinuationSecurityOptions,\n): CodeModeInterrupt | undefined {\n  if (isCodeModeInterrupt(value, continuationSecurity)) {\n    return value;\n  }\n  if (\n    isRecord(value) &&\n    (value.type === 'json' || value.type === 'text') &&\n    'value' in value\n  ) {\n    return readInterruptValue(value.value, continuationSecurity);\n  }\n  return undefined;\n}\n\nfunction assertInterruptMatchesLedger(interrupt: CodeModeInterrupt): void {\n  if (interrupt.continuation.outerToolCallId !== interrupt.outerToolCallId) {\n    throw new CodeModeProtocolError(\n      'Code-mode interrupt outer tool call id does not match its continuation.',\n    );\n  }\n  const matches = interrupt.continuation.ledger.filter(\n    entry =>\n      entry.status === 'interrupted' &&\n      entry.interruptId === interrupt.interruptId &&\n      entry.toolCallId === interrupt.toolCallId &&\n      entry.name === interrupt.toolName &&\n      jsonEqual(fromJsonPayload(entry.inputJson), interrupt.input) &&\n      jsonEqual(entry.interruptPayload, interrupt.payload),\n  );\n  if (matches.length !== 1) {\n    throw new CodeModeProtocolError(\n      'Code-mode interrupt metadata does not match the signed continuation ledger.',\n      { interruptId: interrupt.interruptId, matches: matches.length },\n    );\n  }\n}\n\nfunction jsonEqual(left: unknown, right: unknown): boolean {\n  return JSON.stringify(left) === JSON.stringify(right);\n}\n\nfunction fromJsonPayload(valueJson: string): unknown {\n  return valueJson === '' ? undefined : JSON.parse(valueJson);\n}\n\nfunction isRecord(value: unknown): value is Record<string, unknown> {\n  return typeof value === 'object' && value !== null && !Array.isArray(value);\n}\n"],"mappings":"AAAA;AAAA,EACE;AAAA,EACA;AAAA,OACK;AACP,SAAS,6BAA6B;AACtC,SAAS,mBAAmB;AAYrB,SAAS,oBACd,OACA,uBAA4D,CAAC,GACjC;AAC5B,MACE,SAAS,KAAK,KACd,MAAM,SAAS,yBACf,OAAO,MAAM,gBAAgB,YAC7B,OAAO,MAAM,eAAe,YAC5B,OAAO,MAAM,aAAa,YAC1B,OAAO,MAAM,oBAAoB,YACjC,SAAS,MAAM,OAAO,KACtB,OAAO,MAAM,QAAQ,SAAS,YAC9B,SAAS,MAAM,YAAY,KAC3B;AAAA,IACE,MAAM;AAAA,IACN;AAAA,EACF,GACA;AACA,QAAI;AACF,mCAA6B,KAAqC;AAClE,aAAO;AAAA,IACT,QAAQ;AACN,aAAO;AAAA,IACT;AAAA,EACF;AACA,SAAO;AACT;AAEA,eAAsB,0BAGpB;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA,UAAU,CAAC;AAAA,EACX;AACF,GAMqB;AACnB;AAAA,IACE,UAAU;AAAA,IACV,QAAQ;AAAA,EACV;AACA,+BAA6B,SAAS;AAEtC,QAAM,sBAAgE;AAAA,IACpE,aAAa,UAAU;AAAA,IACvB;AAAA,EACF;AACA,SAAO,MAAM,YAAY;AAAA,IACvB,IAAI,UAAU,aAAa;AAAA,IAC3B;AAAA,IACA;AAAA,IACA,cAAc,UAAU;AAAA,IACxB;AAAA,IACA,GAAI,yBAAyB,SAAY,EAAE,qBAAqB,IAAI,CAAC;AAAA,EACvE,CAAC;AACH;AAEO,SAAS,qBACd,QACA,uBAA4D,CAAC,GAC9B;AAC/B,QAAM,SAAS,mBAAmB,QAAQ,oBAAoB;AAC9D,MAAI,WAAW,QAAW;AACxB,WAAO;AAAA,EACT;AACA,MAAI,CAAC,SAAS,MAAM,GAAG;AACrB,WAAO;AAAA,EACT;AAEA,aAAW,OAAO,CAAC,eAAe,SAAS,GAAY;AACrD,UAAM,QAAQ,OAAO,GAAG;AACxB,QAAI,CAAC,MAAM,QAAQ,KAAK,GAAG;AACzB;AAAA,IACF;AACA,eAAW,QAAQ,OAAO;AACxB,UAAI,CAAC,SAAS,IAAI,GAAG;AACnB;AAAA,MACF;AACA,YAAM,YAAY,mBAAmB,KAAK,QAAQ,oBAAoB;AACtE,UAAI,cAAc,QAAW;AAC3B,eAAO;AAAA,MACT;AAAA,IACF;AAAA,EACF;AACA,SAAO;AACT;AAEO,SAAS,qBACd,QACA,uBAA4D,CAAC,GACpC;AACzB,QAAM,YAAY,qBAAqB,QAAQ,oBAAoB;AACnE,SAAO,cAAc,SACjB,EAAE,QAAQ,aAAa,QAAQ,OAAO,IACtC,EAAE,QAAQ,eAAe,UAAU;AACzC;AAEA,SAAS,mBACP,OACA,sBAC+B;AAC/B,MAAI,oBAAoB,OAAO,oBAAoB,GAAG;AACpD,WAAO;AAAA,EACT;AACA,MACE,SAAS,KAAK,MACb,MAAM,SAAS,UAAU,MAAM,SAAS,WACzC,WAAW,OACX;AACA,WAAO,mBAAmB,MAAM,OAAO,oBAAoB;AAAA,EAC7D;AACA,SAAO;AACT;AAEA,SAAS,6BAA6B,WAAoC;AACxE,MAAI,UAAU,aAAa,oBAAoB,UAAU,iBAAiB;AACxE,UAAM,IAAI;AAAA,MACR;AAAA,IACF;AAAA,EACF;AACA,QAAM,UAAU,UAAU,aAAa,OAAO;AAAA,IAC5C,WACE,MAAM,WAAW,iBACjB,MAAM,gBAAgB,UAAU,eAChC,MAAM,eAAe,UAAU,cAC/B,MAAM,SAAS,UAAU,YACzB,UAAU,gBAAgB,MAAM,SAAS,GAAG,UAAU,KAAK,KAC3D,UAAU,MAAM,kBAAkB,UAAU,OAAO;AAAA,EACvD;AACA,MAAI,QAAQ,WAAW,GAAG;AACxB,UAAM,IAAI;AAAA,MACR;AAAA,MACA,EAAE,aAAa,UAAU,aAAa,SAAS,QAAQ,OAAO;AAAA,IAChE;AAAA,EACF;AACF;AAEA,SAAS,UAAU,MAAe,OAAyB;AACzD,SAAO,KAAK,UAAU,IAAI,MAAM,KAAK,UAAU,KAAK;AACtD;AAEA,SAAS,gBAAgB,WAA4B;AACnD,SAAO,cAAc,KAAK,SAAY,KAAK,MAAM,SAAS;AAC5D;AAEA,SAAS,SAAS,OAAkD;AAClE,SAAO,OAAO,UAAU,YAAY,UAAU,QAAQ,CAAC,MAAM,QAAQ,KAAK;AAC5E;","names":[]}

package/dist/runtime/guest-sources.js

@@ -89,6 +89,92 @@ const HARDENING_SOURCE = `
   }
 })();
 `;
+const DETERMINISTIC_APIS_SOURCE = `
+var __codeModeResetDateNow = (function(config) {
+  var OriginalDate = Date;
+  var dateNowMs = Number(config && config.dateNowMs);
+  if (!Number.isFinite(dateNowMs)) dateNowMs = 0;
+
+  function resetDateNow(value) {
+    var next = Number(value);
+    if (Number.isFinite(next)) dateNowMs = Math.trunc(next);
+  }
+
+  function nextDateMs() {
+    var value = dateNowMs;
+    dateNowMs += 1;
+    return value;
+  }
+
+  function CodeModeDate() {
+    if (new.target) {
+      if (arguments.length === 0) return new OriginalDate(nextDateMs());
+      return Reflect.construct(OriginalDate, arguments, new.target);
+    }
+    return new OriginalDate(nextDateMs()).toString();
+  }
+
+  Object.defineProperty(CodeModeDate, 'prototype', {
+    value: OriginalDate.prototype,
+    writable: false,
+    configurable: false,
+  });
+  Object.defineProperty(OriginalDate.prototype, 'constructor', {
+    value: CodeModeDate,
+    writable: false,
+    configurable: false,
+  });
+  Object.defineProperty(CodeModeDate, 'now', {
+    value: nextDateMs,
+    writable: false,
+    configurable: false,
+  });
+  Object.defineProperty(CodeModeDate, 'parse', {
+    value: OriginalDate.parse,
+    writable: false,
+    configurable: false,
+  });
+  Object.defineProperty(CodeModeDate, 'UTC', {
+    value: OriginalDate.UTC,
+    writable: false,
+    configurable: false,
+  });
+  Object.defineProperty(globalThis, 'Date', {
+    value: CodeModeDate,
+    writable: false,
+    configurable: false,
+  });
+
+  var randomSeed = String(config && config.randomSeed || '');
+  var mask64 = (1n << 64n) - 1n;
+  function readSeedPart(offset, fallback) {
+    var part = randomSeed.slice(offset, offset + 16);
+    return /^[0-9a-fA-F]{16}$/.test(part) ? BigInt('0x' + part) : fallback;
+  }
+  var randomState0 = readSeedPart(0, 0x243f6a8885a308d3n);
+  var randomState1 = readSeedPart(16, 0x13198a2e03707344n);
+  if ((randomState0 | randomState1) === 0n) {
+    randomState1 = 0x9e3779b97f4a7c15n;
+  }
+  function nextRandom64() {
+    var s1 = randomState0;
+    var s0 = randomState1;
+    randomState0 = s0;
+    s1 = (s1 ^ ((s1 << 23n) & mask64)) & mask64;
+    randomState1 = (s1 ^ s0 ^ (s1 >> 17n) ^ (s0 >> 26n)) & mask64;
+    return (randomState1 + s0) & mask64;
+  }
+  Object.defineProperty(Math, 'random', {
+    value: function() {
+      return Number(nextRandom64() >> 11n) / 9007199254740992;
+    },
+    writable: false,
+    configurable: false,
+  });
+
+  return resetDateNow;
+})(__codeModeDeterminism);
+`;
 const BRIDGE_TRACKING_SOURCE = `
 (function() {
   var nextRecordId = 0;
@@ -238,11 +324,15 @@ const SERIALIZATION_GUARD_SOURCE = `
 `;
 function buildGuestRuntimeSetupSource() {
   return `
-(function(__codeModeInvokeTool) {
+(function(__codeModeInvokeTool, __codeModeDeterminism) {
+${DETERMINISTIC_APIS_SOURCE}
 ${HARDENING_SOURCE}
 ${BRIDGE_TRACKING_SOURCE}
 ${TOOLS_PROXY_SOURCE}
 ${SERIALIZATION_GUARD_SOURCE}
+return Object.freeze({
+  resetDateNow: __codeModeResetDateNow,
+});
 })
 `;
 }

package/dist/runtime/guest-sources.js.map

@@ -1 +1 @@
-{"version":3,"sources":["../../src/runtime/guest-sources.ts"],"sourcesContent":["const HARDENING_SOURCE = `\n(function() {\n  try { delete globalThis.crypto; } catch {}\n  if ('crypto' in globalThis) {\n    Object.defineProperty(globalThis, 'crypto', {\n      value: undefined,\n      writable: false,\n      configurable: false,\n    });\n  }\n  try { delete globalThis.performance; } catch {}\n  if ('performance' in globalThis) {\n    Object.defineProperty(globalThis, 'performance', {\n      value: undefined,\n      writable: false,\n      configurable: false,\n    });\n  }\n\n  Object.defineProperty(globalThis, 'eval', {\n    value: undefined,\n    writable: false,\n    configurable: false,\n  });\n\n  const OriginalFunction = Function;\n  const BlockedFunction = function() {\n    throw new TypeError('Function constructor is not allowed');\n  };\n  BlockedFunction.prototype = OriginalFunction.prototype;\n\n  const AsyncFunction = (async function(){}).constructor;\n  const GeneratorFunction = (function*(){}).constructor;\n  const AsyncGeneratorFunction = (async function*(){}).constructor;\n  for (const proto of [\n    OriginalFunction.prototype,\n    AsyncFunction.prototype,\n    GeneratorFunction.prototype,\n    AsyncGeneratorFunction.prototype,\n  ]) {\n    Object.defineProperty(proto, 'constructor', {\n      value: BlockedFunction,\n      writable: false,\n      configurable: false,\n    });\n  }\n  Object.defineProperty(globalThis, 'Function', {\n    value: BlockedFunction,\n    writable: false,\n    configurable: false,\n  });\n\n  const g = globalThis;\n  const toFreeze = [\n    Object, Object.prototype,\n    OriginalFunction, OriginalFunction.prototype,\n    AsyncFunction, AsyncFunction.prototype,\n    GeneratorFunction, GeneratorFunction.prototype,\n    AsyncGeneratorFunction, AsyncGeneratorFunction.prototype,\n    Array, Array.prototype,\n    String, String.prototype,\n    Number, Number.prototype,\n    g.BigInt, g.BigInt && g.BigInt.prototype,\n    Boolean, Boolean.prototype,\n    g.Symbol, g.Symbol && g.Symbol.prototype,\n    RegExp, RegExp.prototype,\n    Date, Date.prototype,\n    Map, Map.prototype,\n    Set, Set.prototype,\n    WeakMap, WeakMap.prototype,\n    WeakSet, WeakSet.prototype,\n    Promise, Promise.prototype,\n    ArrayBuffer, ArrayBuffer.prototype,\n    g.DataView, g.DataView && g.DataView.prototype,\n    JSON, Math, g.Reflect, g.Proxy,\n  ];\n  for (const name of [\n    'Int8Array','Uint8Array','Uint8ClampedArray',\n    'Int16Array','Uint16Array','Int32Array','Uint32Array',\n    'Float32Array','Float64Array',\n    'BigInt64Array','BigUint64Array',\n  ]) {\n    if (g[name]) toFreeze.push(g[name], g[name].prototype);\n  }\n  for (const obj of toFreeze) {\n    if (obj != null) {\n      try { Object.freeze(obj); } catch {}\n    }\n  }\n})();\n`;\n\nconst BRIDGE_TRACKING_SOURCE = `\n(function() {\n  var nextRecordId = 0;\n  var records = [];\n\n  function detachedError(message, record) {\n    var error = new Error(message);\n    error.name = 'CodeModeDetachedBridgeRequestError';\n    error.code = 'CODE_MODE_DETACHED_BRIDGE_REQUEST';\n    error.details = {\n      id: record.id,\n      kind: record.kind,\n      name: record.name,\n      status: record.status\n    };\n    return error;\n  }\n\n  Object.defineProperty(globalThis, '__codeModeCreateBridgePromise', {\n    value: function(kind, name, start) {\n      var record = {\n        id: ++nextRecordId,\n        kind: String(kind),\n        name: String(name || ''),\n        observed: false,\n        status: 'idle'\n      };\n      var promise;\n      records.push(record);\n\n      function getPromise() {\n        record.observed = true;\n        if (!promise) {\n          record.status = 'pending';\n          promise = Promise.resolve().then(start).then(\n            function(value) {\n              record.status = 'fulfilled';\n              return value;\n            },\n            function(error) {\n              record.status = 'rejected';\n              throw error;\n            }\n          );\n        }\n        return promise;\n      }\n\n      return Object.freeze({\n        then: function(onFulfilled, onRejected) {\n          return getPromise().then(onFulfilled, onRejected);\n        },\n        catch: function(onRejected) {\n          return getPromise().catch(onRejected);\n        },\n        finally: function(onFinally) {\n          return getPromise().finally(onFinally);\n        },\n        get [Symbol.toStringTag]() {\n          return 'Promise';\n        }\n      });\n    },\n    writable: false,\n    configurable: false\n  });\n\n  Object.defineProperty(globalThis, '__codeModeAssertNoDetachedBridgeCalls', {\n    value: function() {\n      for (var i = 0; i < records.length; i++) {\n        var record = records[i];\n        if (!record.observed) {\n          throw detachedError(\n            'Code mode created an unawaited ' + record.kind + ' bridge request: ' + record.name + '.',\n            record\n          );\n        }\n        if (record.status === 'pending') {\n          throw detachedError(\n            'Code mode returned while a ' + record.kind + ' bridge request was still pending: ' + record.name + '.',\n            record\n          );\n        }\n      }\n    },\n    writable: false,\n    configurable: false\n  });\n})();\n`;\n\nconst TOOLS_PROXY_SOURCE = `\n(function(invokeTool) {\n  globalThis.tools = (function makeProxy(path) {\n    return new Proxy(function(){}, {\n      get: function(_target, prop) {\n        if (prop === 'then' || typeof prop === 'symbol') return undefined;\n        return makeProxy(path.concat([String(prop)]));\n      },\n      apply: function(_target, _thisArg, args) {\n        var toolPath = path.join('.');\n        if (!toolPath) throw new Error('Tool path missing in invocation');\n        var inputJson = args.length > 0 ? JSON.stringify(args[0]) : '';\n        if (inputJson === undefined) {\n          throw new Error('Tool input must be JSON-serializable');\n        }\n        return globalThis.__codeModeCreateBridgePromise('tool', toolPath, async function() {\n          var resultJson = await invokeTool(toolPath, inputJson);\n          return resultJson === '' ? undefined : JSON.parse(resultJson);\n        });\n      }\n    });\n  })([]);\n})(__codeModeInvokeTool);\n`;\n\nconst SERIALIZATION_GUARD_SOURCE = `\n(function() {\n  function serializeJsonPayload(value) {\n    if (typeof globalThis.__codeModeAssertNoDetachedBridgeCalls === 'function') {\n      globalThis.__codeModeAssertNoDetachedBridgeCalls();\n    }\n\n    if (value === undefined) {\n      return '';\n    }\n\n    var encoded;\n    try {\n      encoded = JSON.stringify(value);\n    } catch (error) {\n      var message = error && error.message ? String(error.message) : String(error);\n      throw new TypeError('Code mode result is not JSON-serializable: ' + message);\n    }\n\n    if (encoded === undefined) {\n      throw new TypeError('Code mode result is not JSON-serializable.');\n    }\n\n    return encoded;\n  }\n\n  Object.defineProperty(globalThis, '__codeModeSerializeJsonPayload', {\n    value: serializeJsonPayload,\n    writable: false,\n    configurable: false,\n  });\n})();\n`;\n\nexport function buildGuestRuntimeSetupSource(): string {\n  return `\n(function(__codeModeInvokeTool) {\n${HARDENING_SOURCE}\n${BRIDGE_TRACKING_SOURCE}\n${TOOLS_PROXY_SOURCE}\n${SERIALIZATION_GUARD_SOURCE}\n})\n`;\n}\n\nexport function wrapUserCode(js: string): string {\n  return `\nglobalThis.__codeModeResult = (async () => {\n${js}\n})();\n`;\n}\n"],"mappings":"AAAA,MAAM,mBAAmB;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AA4FzB,MAAM,yBAAyB;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AA2F/B,MAAM,qBAAqB;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAyB3B,MAAM,6BAA6B;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAkC5B,SAAS,+BAAuC;AACrD,SAAO;AAAA;AAAA,EAEP,gBAAgB;AAAA,EAChB,sBAAsB;AAAA,EACtB,kBAAkB;AAAA,EAClB,0BAA0B;AAAA;AAAA;AAG5B;AAEO,SAAS,aAAa,IAAoB;AAC/C,SAAO;AAAA;AAAA,EAEP,EAAE;AAAA;AAAA;AAGJ;","names":[]}
+{"version":3,"sources":["../../src/runtime/guest-sources.ts"],"sourcesContent":["const HARDENING_SOURCE = `\n(function() {\n  try { delete globalThis.crypto; } catch {}\n  if ('crypto' in globalThis) {\n    Object.defineProperty(globalThis, 'crypto', {\n      value: undefined,\n      writable: false,\n      configurable: false,\n    });\n  }\n  try { delete globalThis.performance; } catch {}\n  if ('performance' in globalThis) {\n    Object.defineProperty(globalThis, 'performance', {\n      value: undefined,\n      writable: false,\n      configurable: false,\n    });\n  }\n\n  Object.defineProperty(globalThis, 'eval', {\n    value: undefined,\n    writable: false,\n    configurable: false,\n  });\n\n  const OriginalFunction = Function;\n  const BlockedFunction = function() {\n    throw new TypeError('Function constructor is not allowed');\n  };\n  BlockedFunction.prototype = OriginalFunction.prototype;\n\n  const AsyncFunction = (async function(){}).constructor;\n  const GeneratorFunction = (function*(){}).constructor;\n  const AsyncGeneratorFunction = (async function*(){}).constructor;\n  for (const proto of [\n    OriginalFunction.prototype,\n    AsyncFunction.prototype,\n    GeneratorFunction.prototype,\n    AsyncGeneratorFunction.prototype,\n  ]) {\n    Object.defineProperty(proto, 'constructor', {\n      value: BlockedFunction,\n      writable: false,\n      configurable: false,\n    });\n  }\n  Object.defineProperty(globalThis, 'Function', {\n    value: BlockedFunction,\n    writable: false,\n    configurable: false,\n  });\n\n  const g = globalThis;\n  const toFreeze = [\n    Object, Object.prototype,\n    OriginalFunction, OriginalFunction.prototype,\n    AsyncFunction, AsyncFunction.prototype,\n    GeneratorFunction, GeneratorFunction.prototype,\n    AsyncGeneratorFunction, AsyncGeneratorFunction.prototype,\n    Array, Array.prototype,\n    String, String.prototype,\n    Number, Number.prototype,\n    g.BigInt, g.BigInt && g.BigInt.prototype,\n    Boolean, Boolean.prototype,\n    g.Symbol, g.Symbol && g.Symbol.prototype,\n    RegExp, RegExp.prototype,\n    Date, Date.prototype,\n    Map, Map.prototype,\n    Set, Set.prototype,\n    WeakMap, WeakMap.prototype,\n    WeakSet, WeakSet.prototype,\n    Promise, Promise.prototype,\n    ArrayBuffer, ArrayBuffer.prototype,\n    g.DataView, g.DataView && g.DataView.prototype,\n    JSON, Math, g.Reflect, g.Proxy,\n  ];\n  for (const name of [\n    'Int8Array','Uint8Array','Uint8ClampedArray',\n    'Int16Array','Uint16Array','Int32Array','Uint32Array',\n    'Float32Array','Float64Array',\n    'BigInt64Array','BigUint64Array',\n  ]) {\n    if (g[name]) toFreeze.push(g[name], g[name].prototype);\n  }\n  for (const obj of toFreeze) {\n    if (obj != null) {\n      try { Object.freeze(obj); } catch {}\n    }\n  }\n})();\n`;\n\nconst DETERMINISTIC_APIS_SOURCE = `\nvar __codeModeResetDateNow = (function(config) {\n  var OriginalDate = Date;\n  var dateNowMs = Number(config && config.dateNowMs);\n  if (!Number.isFinite(dateNowMs)) dateNowMs = 0;\n\n  function resetDateNow(value) {\n    var next = Number(value);\n    if (Number.isFinite(next)) dateNowMs = Math.trunc(next);\n  }\n\n  function nextDateMs() {\n    var value = dateNowMs;\n    dateNowMs += 1;\n    return value;\n  }\n\n  function CodeModeDate() {\n    if (new.target) {\n      if (arguments.length === 0) return new OriginalDate(nextDateMs());\n      return Reflect.construct(OriginalDate, arguments, new.target);\n    }\n    return new OriginalDate(nextDateMs()).toString();\n  }\n\n  Object.defineProperty(CodeModeDate, 'prototype', {\n    value: OriginalDate.prototype,\n    writable: false,\n    configurable: false,\n  });\n  Object.defineProperty(OriginalDate.prototype, 'constructor', {\n    value: CodeModeDate,\n    writable: false,\n    configurable: false,\n  });\n  Object.defineProperty(CodeModeDate, 'now', {\n    value: nextDateMs,\n    writable: false,\n    configurable: false,\n  });\n  Object.defineProperty(CodeModeDate, 'parse', {\n    value: OriginalDate.parse,\n    writable: false,\n    configurable: false,\n  });\n  Object.defineProperty(CodeModeDate, 'UTC', {\n    value: OriginalDate.UTC,\n    writable: false,\n    configurable: false,\n  });\n  Object.defineProperty(globalThis, 'Date', {\n    value: CodeModeDate,\n    writable: false,\n    configurable: false,\n  });\n\n  var randomSeed = String(config && config.randomSeed || '');\n  var mask64 = (1n << 64n) - 1n;\n  function readSeedPart(offset, fallback) {\n    var part = randomSeed.slice(offset, offset + 16);\n    return /^[0-9a-fA-F]{16}$/.test(part) ? BigInt('0x' + part) : fallback;\n  }\n  var randomState0 = readSeedPart(0, 0x243f6a8885a308d3n);\n  var randomState1 = readSeedPart(16, 0x13198a2e03707344n);\n  if ((randomState0 | randomState1) === 0n) {\n    randomState1 = 0x9e3779b97f4a7c15n;\n  }\n  function nextRandom64() {\n    var s1 = randomState0;\n    var s0 = randomState1;\n    randomState0 = s0;\n    s1 = (s1 ^ ((s1 << 23n) & mask64)) & mask64;\n    randomState1 = (s1 ^ s0 ^ (s1 >> 17n) ^ (s0 >> 26n)) & mask64;\n    return (randomState1 + s0) & mask64;\n  }\n  Object.defineProperty(Math, 'random', {\n    value: function() {\n      return Number(nextRandom64() >> 11n) / 9007199254740992;\n    },\n    writable: false,\n    configurable: false,\n  });\n\n  return resetDateNow;\n})(__codeModeDeterminism);\n`;\n\nconst BRIDGE_TRACKING_SOURCE = `\n(function() {\n  var nextRecordId = 0;\n  var records = [];\n\n  function detachedError(message, record) {\n    var error = new Error(message);\n    error.name = 'CodeModeDetachedBridgeRequestError';\n    error.code = 'CODE_MODE_DETACHED_BRIDGE_REQUEST';\n    error.details = {\n      id: record.id,\n      kind: record.kind,\n      name: record.name,\n      status: record.status\n    };\n    return error;\n  }\n\n  Object.defineProperty(globalThis, '__codeModeCreateBridgePromise', {\n    value: function(kind, name, start) {\n      var record = {\n        id: ++nextRecordId,\n        kind: String(kind),\n        name: String(name || ''),\n        observed: false,\n        status: 'idle'\n      };\n      var promise;\n      records.push(record);\n\n      function getPromise() {\n        record.observed = true;\n        if (!promise) {\n          record.status = 'pending';\n          promise = Promise.resolve().then(start).then(\n            function(value) {\n              record.status = 'fulfilled';\n              return value;\n            },\n            function(error) {\n              record.status = 'rejected';\n              throw error;\n            }\n          );\n        }\n        return promise;\n      }\n\n      return Object.freeze({\n        then: function(onFulfilled, onRejected) {\n          return getPromise().then(onFulfilled, onRejected);\n        },\n        catch: function(onRejected) {\n          return getPromise().catch(onRejected);\n        },\n        finally: function(onFinally) {\n          return getPromise().finally(onFinally);\n        },\n        get [Symbol.toStringTag]() {\n          return 'Promise';\n        }\n      });\n    },\n    writable: false,\n    configurable: false\n  });\n\n  Object.defineProperty(globalThis, '__codeModeAssertNoDetachedBridgeCalls', {\n    value: function() {\n      for (var i = 0; i < records.length; i++) {\n        var record = records[i];\n        if (!record.observed) {\n          throw detachedError(\n            'Code mode created an unawaited ' + record.kind + ' bridge request: ' + record.name + '.',\n            record\n          );\n        }\n        if (record.status === 'pending') {\n          throw detachedError(\n            'Code mode returned while a ' + record.kind + ' bridge request was still pending: ' + record.name + '.',\n            record\n          );\n        }\n      }\n    },\n    writable: false,\n    configurable: false\n  });\n})();\n`;\n\nconst TOOLS_PROXY_SOURCE = `\n(function(invokeTool) {\n  globalThis.tools = (function makeProxy(path) {\n    return new Proxy(function(){}, {\n      get: function(_target, prop) {\n        if (prop === 'then' || typeof prop === 'symbol') return undefined;\n        return makeProxy(path.concat([String(prop)]));\n      },\n      apply: function(_target, _thisArg, args) {\n        var toolPath = path.join('.');\n        if (!toolPath) throw new Error('Tool path missing in invocation');\n        var inputJson = args.length > 0 ? JSON.stringify(args[0]) : '';\n        if (inputJson === undefined) {\n          throw new Error('Tool input must be JSON-serializable');\n        }\n        return globalThis.__codeModeCreateBridgePromise('tool', toolPath, async function() {\n          var resultJson = await invokeTool(toolPath, inputJson);\n          return resultJson === '' ? undefined : JSON.parse(resultJson);\n        });\n      }\n    });\n  })([]);\n})(__codeModeInvokeTool);\n`;\n\nconst SERIALIZATION_GUARD_SOURCE = `\n(function() {\n  function serializeJsonPayload(value) {\n    if (typeof globalThis.__codeModeAssertNoDetachedBridgeCalls === 'function') {\n      globalThis.__codeModeAssertNoDetachedBridgeCalls();\n    }\n\n    if (value === undefined) {\n      return '';\n    }\n\n    var encoded;\n    try {\n      encoded = JSON.stringify(value);\n    } catch (error) {\n      var message = error && error.message ? String(error.message) : String(error);\n      throw new TypeError('Code mode result is not JSON-serializable: ' + message);\n    }\n\n    if (encoded === undefined) {\n      throw new TypeError('Code mode result is not JSON-serializable.');\n    }\n\n    return encoded;\n  }\n\n  Object.defineProperty(globalThis, '__codeModeSerializeJsonPayload', {\n    value: serializeJsonPayload,\n    writable: false,\n    configurable: false,\n  });\n})();\n`;\n\nexport function buildGuestRuntimeSetupSource(): string {\n  return `\n(function(__codeModeInvokeTool, __codeModeDeterminism) {\n${DETERMINISTIC_APIS_SOURCE}\n${HARDENING_SOURCE}\n${BRIDGE_TRACKING_SOURCE}\n${TOOLS_PROXY_SOURCE}\n${SERIALIZATION_GUARD_SOURCE}\nreturn Object.freeze({\n  resetDateNow: __codeModeResetDateNow,\n});\n})\n`;\n}\n\nexport function wrapUserCode(js: string): string {\n  return `\nglobalThis.__codeModeResult = (async () => {\n${js}\n})();\n`;\n}\n"],"mappings":"AAAA,MAAM,mBAAmB;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AA4FzB,MAAM,4BAA4B;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAuFlC,MAAM,yBAAyB;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AA2F/B,MAAM,qBAAqB;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAyB3B,MAAM,6BAA6B;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAkC5B,SAAS,+BAAuC;AACrD,SAAO;AAAA;AAAA,EAEP,yBAAyB;AAAA,EACzB,gBAAgB;AAAA,EAChB,sBAAsB;AAAA,EACtB,kBAAkB;AAAA,EAClB,0BAA0B;AAAA;AAAA;AAAA;AAAA;AAAA;AAM5B;AAEO,SAAS,aAAa,IAAoB;AAC/C,SAAO;AAAA;AAAA,EAEP,EAAE;AAAA;AAAA;AAGJ;","names":[]}