@markusylisiurunen/tau 0.3.46 → 0.3.47

package/dist/core/static/code_mode/history/sandbox_runner.mjs

@@ -1,111 +1 @@
-import { parentPort, workerData } from "node:worker_threads";
-import { codeModeMath, createCodeModeDate } from "../capabilities.mjs";
-
-if (!parentPort) throw new Error("history sandbox requires a parent port");
-if (
-  typeof workerData !== "object" ||
-  workerData === null ||
-  typeof workerData.code !== "string" ||
-  typeof workerData.docs !== "string"
-) {
-  throw new Error("history sandbox received invalid worker data");
-}
-
-lockdown();
-
-const codeModeDate = createCodeModeDate();
-const pending = new Map();
-let nextRequestId = 1;
-
-parentPort.on("message", (message) => {
-  if (message?.type !== "response" || typeof message.id !== "number") return;
-  const request = pending.get(message.id);
-  if (!request) return;
-  pending.delete(message.id);
-  if (message.ok) {
-    request.resolve(message.value);
-    return;
-  }
-  const error = new Error(message.error?.message || "History request failed");
-  if (message.error?.name) error.name = message.error.name;
-  request.reject(error);
-});
-
-function requestHistory(method, argsJson) {
-  if (typeof method !== "string" || typeof argsJson !== "string") {
-    return Promise.reject(new Error("invalid history bridge request"));
-  }
-  const id = nextRequestId++;
-  return new Promise((resolve, reject) => {
-    pending.set(id, { resolve, reject });
-    parentPort.postMessage({ type: "request", id, method, argsJson });
-  });
-}
-
-function writeOutput(stream, text) {
-  if ((stream !== "stdout" && stream !== "stderr") || typeof text !== "string") {
-    throw new Error("invalid console bridge output");
-  }
-  const output = stream === "stderr" ? process.stderr : process.stdout;
-  output.write(text + "\n");
-}
-
-const compartment = new Compartment({
-  globals: {
-    Date: codeModeDate,
-    Math: codeModeMath,
-    _requestHistory: harden(requestHistory),
-    _writeOutput: harden(writeOutput),
-    docs: workerData.docs,
-  },
-  __options__: true,
-});
-
-compartment.evaluate(String.raw`
-(() => {
-  const requestHistoryBridge = _requestHistory;
-  const writeOutputBridge = _writeOutput;
-  delete globalThis._requestHistory;
-  delete globalThis._writeOutput;
-
-  function formatOutputValue(value) {
-    if (typeof value === "string") return value;
-    if (value instanceof Error) return value.stack || value.message;
-    try {
-      const serialized = JSON.stringify(value);
-      if (serialized !== undefined) return serialized;
-    } catch {}
-    return String(value);
-  }
-  function writeConsole(stream, values) {
-    writeOutputBridge(stream, values.map(formatOutputValue).join(" "));
-  }
-  Object.defineProperty(globalThis, "console", {
-    value: Object.freeze({
-      debug: (...values) => writeConsole("stdout", values),
-      error: (...values) => writeConsole("stderr", values),
-      info: (...values) => writeConsole("stdout", values),
-      log: (...values) => writeConsole("stdout", values),
-      warn: (...values) => writeConsole("stderr", values),
-    }),
-  });
-  function callHistory(method, args) {
-    return requestHistoryBridge(method, JSON.stringify(args));
-  }
-  Object.defineProperty(globalThis, "history", {
-    value: Object.freeze({
-      search: (...args) => callHistory("search", args),
-      read: (...args) => callHistory("read", args),
-    }),
-  });
-})();
-`);
-
-try {
-  await compartment.evaluate("(async () => {\n" + workerData.code + "\n})()");
-} catch (error) {
-  writeOutput("stderr", error instanceof Error ? error.stack || error.message : String(error));
-  process.exitCode = 1;
-} finally {
-  parentPort.close();
-}
+import "../sandbox_runner.mjs";

package/dist/core/static/code_mode/nook/documentation.md

@@ -1,16 +1,3 @@
-The one-shot JavaScript runtime provides these globals:
-
-- `nook.skill()`: load the configured Nook deployment's version-matched app-authoring skill.
-- `nook.sites`: list, copy, deploy, and delete sites.
-- `nook.templates`: list, copy, save, and delete editable templates.
-- `nook.kv`: get, put, import, export, delete, and list per-site JSON KV entries.
-- `docs`: this agent-facing SDK document.
-- `console`: program output. Only text written through console methods is returned; program return values are ignored.
-- `Date`: standard date handling with live current-time access.
-- `Math`: standard math operations, including `Math.random()`.
-
-Top-level `await` is supported. A program may make at most 64 SDK calls, with at most four running concurrently, and must finish within 60 seconds. Independent calls can run concurrently with `Promise.all` within that limit.
-
 Use absolute file system paths. Generated code has no direct filesystem, process, environment, network, credential, import, timer, or `fetch` access. Nook methods are the only platform capability.
 
 ## App-authoring guidance
@@ -215,4 +202,4 @@ Copy, inspect or modify with filesystem tools in later calls, build with Bash, t
 
 ## Output guidance
 
-Output is limited to roughly 8,192 tokens. Print only information needed for the task. Prefer concise labeled text over serialized response objects. Select relevant fields when possible; when all fields matter, flatten and label them compactly. Emit JSON only when the user explicitly requests JSON or another machine-readable result.
+Print only information needed for the task. Prefer concise labeled text over serialized response objects. Select relevant fields when possible; when all fields matter, flatten and label them compactly. Emit JSON only when the user explicitly requests JSON or another machine-readable result.

package/dist/core/static/code_mode/nook/sandbox_runner.mjs

@@ -1,147 +1 @@
-import { parentPort, workerData } from "node:worker_threads";
-import { codeModeMath, createCodeModeDate } from "../capabilities.mjs";
-
-if (!parentPort) {
-  throw new Error("nook sandbox requires a parent port");
-}
-if (
-  typeof workerData !== "object" ||
-  workerData === null ||
-  typeof workerData.code !== "string" ||
-  typeof workerData.docs !== "string"
-) {
-  throw new Error("nook sandbox received invalid worker data");
-}
-
-lockdown();
-
-const codeModeDate = createCodeModeDate();
-const pending = new Map();
-let nextRequestId = 1;
-
-parentPort.on("message", (message) => {
-  if (message?.type !== "response" || typeof message.id !== "number") return;
-  const request = pending.get(message.id);
-  if (!request) return;
-  pending.delete(message.id);
-  if (message.ok) {
-    request.resolve(message.value);
-    return;
-  }
-
-  const error = new Error(message.error?.message || "Nook request failed");
-  if (message.error?.name) error.name = message.error.name;
-  request.reject(error);
-});
-
-function requestNook(method, argsJson) {
-  if (typeof method !== "string" || typeof argsJson !== "string") {
-    return Promise.reject(new Error("invalid nook bridge request"));
-  }
-  const id = nextRequestId++;
-  return new Promise((resolve, reject) => {
-    pending.set(id, { resolve, reject });
-    parentPort.postMessage({ type: "request", id, method, argsJson });
-  });
-}
-
-function writeOutput(stream, text) {
-  if ((stream !== "stdout" && stream !== "stderr") || typeof text !== "string") {
-    throw new Error("invalid console bridge output");
-  }
-  const output = stream === "stderr" ? process.stderr : process.stdout;
-  output.write(text + "\n");
-}
-
-const compartment = new Compartment({
-  globals: {
-    Date: codeModeDate,
-    Math: codeModeMath,
-    _requestNook: harden(requestNook),
-    _writeOutput: harden(writeOutput),
-    docs: workerData.docs,
-  },
-  __options__: true,
-});
-
-compartment.evaluate(String.raw`
-(() => {
-  const requestNookBridge = _requestNook;
-  const writeOutputBridge = _writeOutput;
-  delete globalThis._requestNook;
-  delete globalThis._writeOutput;
-
-  function formatOutputValue(value) {
-    if (typeof value === "string") return value;
-    if (value instanceof Error) return value.stack || value.message;
-    try {
-      const serialized = JSON.stringify(value);
-      if (serialized !== undefined) return serialized;
-    } catch {}
-    return String(value);
-  }
-  function writeConsole(stream, values) {
-    writeOutputBridge(stream, values.map(formatOutputValue).join(" "));
-  }
-  Object.defineProperty(globalThis, "console", {
-    value: Object.freeze({
-      debug: (...values) => writeConsole("stdout", values),
-      error: (...values) => writeConsole("stderr", values),
-      info: (...values) => writeConsole("stdout", values),
-      log: (...values) => writeConsole("stdout", values),
-      warn: (...values) => writeConsole("stderr", values),
-    }),
-  });
-  function serializeArguments(args) {
-    return JSON.stringify(args, (_key, value) => {
-      if (
-        value === undefined ||
-        typeof value === "function" ||
-        typeof value === "symbol" ||
-        typeof value === "bigint" ||
-        (typeof value === "number" && !Number.isFinite(value))
-      ) {
-        throw new TypeError("Nook arguments must be JSON-serializable values");
-      }
-      return value;
-    });
-  }
-  function callNook(method, args) {
-    return requestNookBridge(method, serializeArguments(args));
-  }
-  Object.defineProperty(globalThis, "nook", {
-    value: Object.freeze({
-      skill: (...args) => callNook("skill", args),
-      sites: Object.freeze({
-        list: (...args) => callNook("sites.list", args),
-        copy: (...args) => callNook("sites.copy", args),
-        deploy: (...args) => callNook("sites.deploy", args),
-        delete: (...args) => callNook("sites.delete", args),
-      }),
-      templates: Object.freeze({
-        list: (...args) => callNook("templates.list", args),
-        copy: (...args) => callNook("templates.copy", args),
-        save: (...args) => callNook("templates.save", args),
-        delete: (...args) => callNook("templates.delete", args),
-      }),
-      kv: Object.freeze({
-        get: (...args) => callNook("kv.get", args),
-        getToFile: (...args) => callNook("kv.getToFile", args),
-        put: (...args) => callNook("kv.put", args),
-        putFromFile: (...args) => callNook("kv.putFromFile", args),
-        delete: (...args) => callNook("kv.delete", args),
-        list: (...args) => callNook("kv.list", args),
-      }),
-    }),
-  });
-})();
-`);
-
-try {
-  await compartment.evaluate("(async () => {\n" + workerData.code + "\n})()");
-} catch (error) {
-  writeOutput("stderr", error instanceof Error ? error.stack || error.message : String(error));
-  process.exitCode = 1;
-} finally {
-  parentPort.close();
-}
+import "../sandbox_runner.mjs";

package/dist/core/static/code_mode/sandbox_runner.mjs

@@ -0,0 +1,186 @@
+import { Buffer } from "node:buffer";
+import { parentPort, workerData } from "node:worker_threads";
+import { codeModeMath, createCodeModeDate } from "./capabilities.mjs";
+
+if (!parentPort) {
+  throw new Error("code-mode sandbox requires a parent port");
+}
+if (
+  typeof workerData !== "object" ||
+  workerData === null ||
+  typeof workerData.code !== "string" ||
+  typeof workerData.docs !== "string" ||
+  typeof workerData.name !== "string" ||
+  !Array.isArray(workerData.methods) ||
+  !Number.isSafeInteger(workerData.maxBridgeRequests) ||
+  workerData.maxBridgeRequests <= 0 ||
+  !Number.isSafeInteger(workerData.maxConcurrentBridgeRequests) ||
+  workerData.maxConcurrentBridgeRequests <= 0 ||
+  !Number.isSafeInteger(workerData.maxBridgePayloadBytes) ||
+  workerData.maxBridgePayloadBytes <= 0
+) {
+  throw new Error("code-mode sandbox received invalid worker data");
+}
+
+lockdown();
+
+const codeModeDate = createCodeModeDate();
+const pending = new Map();
+let nextRequestId = 1;
+
+parentPort.on("message", (message) => {
+  if (message?.type !== "response" || typeof message.id !== "number") return;
+  const request = pending.get(message.id);
+  if (!request) return;
+  pending.delete(message.id);
+  if (message.ok) {
+    try {
+      if (
+        typeof message.valueJson !== "string" ||
+        Buffer.byteLength(message.valueJson, "utf8") > workerData.maxBridgePayloadBytes
+      ) {
+        throw new Error("invalid code-mode bridge response");
+      }
+      request.resolve(JSON.parse(message.valueJson));
+    } catch {
+      request.reject(new Error("code-mode bridge returned invalid JSON"));
+    }
+    return;
+  }
+
+  const error = new Error(message.error?.message || "Code-mode API request failed");
+  if (message.error?.name) error.name = message.error.name;
+  request.reject(error);
+});
+
+function requestApi(methodId, argsJson) {
+  if (!Number.isSafeInteger(methodId) || methodId < 0 || typeof argsJson !== "string") {
+    return Promise.reject(new Error("invalid code-mode bridge request"));
+  }
+  if (Buffer.byteLength(argsJson, "utf8") > workerData.maxBridgePayloadBytes) {
+    return Promise.reject(
+      new Error(
+        `code-mode API arguments exceeded ${workerData.maxBridgePayloadBytes} bridge payload bytes`,
+      ),
+    );
+  }
+  if (nextRequestId > workerData.maxBridgeRequests) {
+    return Promise.reject(
+      new Error(`code-mode sandbox exceeded ${workerData.maxBridgeRequests} bridge requests`),
+    );
+  }
+  if (pending.size >= workerData.maxConcurrentBridgeRequests) {
+    return Promise.reject(
+      new Error(
+        `code-mode sandbox exceeded ${workerData.maxConcurrentBridgeRequests} concurrent bridge requests`,
+      ),
+    );
+  }
+  const id = nextRequestId++;
+  return new Promise((resolve, reject) => {
+    pending.set(id, { resolve, reject });
+    parentPort.postMessage({ type: "request", id, methodId, argsJson });
+  });
+}
+
+function writeOutput(stream, text) {
+  if ((stream !== "stdout" && stream !== "stderr") || typeof text !== "string") {
+    throw new Error("invalid console bridge output");
+  }
+  const output = stream === "stderr" ? process.stderr : process.stdout;
+  output.write(text + "\n");
+}
+
+const compartment = new Compartment({
+  globals: {
+    Date: codeModeDate,
+    Math: codeModeMath,
+    _apiName: workerData.name,
+    _methods: harden(workerData.methods),
+    _requestApi: harden(requestApi),
+    _writeOutput: harden(writeOutput),
+    docs: workerData.docs,
+  },
+  __options__: true,
+});
+
+compartment.evaluate(String.raw`
+(() => {
+  const apiName = _apiName;
+  const methods = _methods;
+  const requestApiBridge = _requestApi;
+  const writeOutputBridge = _writeOutput;
+  delete globalThis._apiName;
+  delete globalThis._methods;
+  delete globalThis._requestApi;
+  delete globalThis._writeOutput;
+
+  function formatOutputValue(value) {
+    if (typeof value === "string") return value;
+    if (value instanceof Error) return value.stack || value.message;
+    try {
+      const serialized = JSON.stringify(value);
+      if (serialized !== undefined) return serialized;
+    } catch {}
+    return String(value);
+  }
+  function writeConsole(stream, values) {
+    writeOutputBridge(stream, values.map(formatOutputValue).join(" "));
+  }
+  Object.defineProperty(globalThis, "console", {
+    value: Object.freeze({
+      debug: (...values) => writeConsole("stdout", values),
+      error: (...values) => writeConsole("stderr", values),
+      info: (...values) => writeConsole("stdout", values),
+      log: (...values) => writeConsole("stdout", values),
+      warn: (...values) => writeConsole("stderr", values),
+    }),
+  });
+
+  function serializeArguments(args) {
+    return JSON.stringify(args, (_key, value) => {
+      if (
+        value === undefined ||
+        typeof value === "function" ||
+        typeof value === "symbol" ||
+        typeof value === "bigint" ||
+        (typeof value === "number" && !Number.isFinite(value))
+      ) {
+        throw new TypeError("Code-mode API arguments must be JSON-serializable values");
+      }
+      return value;
+    });
+  }
+
+  const api = Object.create(null);
+  for (const method of methods) {
+    let target = api;
+    for (const segment of method.path.slice(0, -1)) {
+      target[segment] ??= Object.create(null);
+      target = target[segment];
+    }
+    target[method.path.at(-1)] = (...args) =>
+      requestApiBridge(method.id, serializeArguments(args));
+  }
+
+  function freezeApi(value) {
+    for (const child of Object.values(value)) {
+      if (typeof child === "object" && child !== null) freezeApi(child);
+    }
+    return Object.freeze(value);
+  }
+
+  Object.defineProperty(globalThis, apiName, {
+    value: freezeApi(api),
+  });
+})();
+`);
+
+try {
+  await compartment.evaluate("(async () => {\n" + workerData.code + "\n})()");
+} catch (error) {
+  writeOutput("stderr", error instanceof Error ? error.stack || error.message : String(error));
+  process.exitCode = 1;
+} finally {
+  parentPort.close();
+}

package/dist/core/static/code_mode/web/documentation.md

@@ -1,15 +1,3 @@
-The one-shot JavaScript runtime provides these globals:
-
-- `web.discover(url)`: discover metadata for direct Markdown representations and `llms.txt` files for a direct URL.
-- `web.search(query, options?)`: search the web and return relevant page highlights.
-- `web.fetch(urls, options?)`: retrieve highlights or bounded text from known URLs through the web extraction service.
-- `docs`: this document.
-- `console`: program output. Only text written through console methods is returned; program return values are ignored.
-- `Date`: standard date handling with live current-time access.
-- `Math`: standard math operations, including `Math.random()`.
-
-Top-level `await` is supported. A program may make at most 64 SDK calls, with at most four running concurrently, and must finish within 60 seconds. Independent calls can run concurrently with `Promise.all` within that limit.
-
 ## Defaults
 
 The API is designed for agent workflows and defaults to token-efficient retrieval:
@@ -247,4 +235,4 @@ In the next turn, retrieve the selected Markdown representation or `llms.txt` wi
 
 ## Output guidance
 
-Output is limited to roughly 8,192 tokens. Print only information needed for the task. Prefer concise labeled text over serialized response objects. Select relevant fields when possible; when all fields matter, flatten and label them compactly. Emit JSON only when the user explicitly requests JSON or another machine-readable result.
+Print only information needed for the task. Prefer concise labeled text over serialized response objects. Select relevant fields when possible; when all fields matter, flatten and label them compactly. Emit JSON only when the user explicitly requests JSON or another machine-readable result.

package/dist/core/static/code_mode/web/sandbox_runner.mjs

@@ -1,115 +1 @@
-import { parentPort, workerData } from "node:worker_threads";
-import { codeModeMath, createCodeModeDate } from "../capabilities.mjs";
-
-if (!parentPort) {
-  throw new Error("web sandbox requires a parent port");
-}
-if (
-  typeof workerData !== "object" ||
-  workerData === null ||
-  typeof workerData.code !== "string" ||
-  typeof workerData.docs !== "string"
-) {
-  throw new Error("web sandbox received invalid worker data");
-}
-
-lockdown();
-
-const codeModeDate = createCodeModeDate();
-const pending = new Map();
-let nextRequestId = 1;
-
-parentPort.on("message", (message) => {
-  if (message?.type !== "response" || typeof message.id !== "number") return;
-  const request = pending.get(message.id);
-  if (!request) return;
-  pending.delete(message.id);
-  if (message.ok) {
-    request.resolve(message.value);
-    return;
-  }
-
-  const error = new Error(message.error?.message || "Web request failed");
-  if (message.error?.name) error.name = message.error.name;
-  request.reject(error);
-});
-
-function requestWeb(method, argsJson) {
-  if (typeof method !== "string" || typeof argsJson !== "string") {
-    return Promise.reject(new Error("invalid web bridge request"));
-  }
-  const id = nextRequestId++;
-  return new Promise((resolve, reject) => {
-    pending.set(id, { resolve, reject });
-    parentPort.postMessage({ type: "request", id, method, argsJson });
-  });
-}
-
-function writeOutput(stream, text) {
-  if ((stream !== "stdout" && stream !== "stderr") || typeof text !== "string") {
-    throw new Error("invalid console bridge output");
-  }
-  const output = stream === "stderr" ? process.stderr : process.stdout;
-  output.write(text + "\n");
-}
-
-const compartment = new Compartment({
-  globals: {
-    Date: codeModeDate,
-    Math: codeModeMath,
-    _requestWeb: harden(requestWeb),
-    _writeOutput: harden(writeOutput),
-    docs: workerData.docs,
-  },
-  __options__: true,
-});
-
-compartment.evaluate(String.raw`
-(() => {
-  const requestWebBridge = _requestWeb;
-  const writeOutputBridge = _writeOutput;
-  delete globalThis._requestWeb;
-  delete globalThis._writeOutput;
-
-  function formatOutputValue(value) {
-    if (typeof value === "string") return value;
-    if (value instanceof Error) return value.stack || value.message;
-    try {
-      const serialized = JSON.stringify(value);
-      if (serialized !== undefined) return serialized;
-    } catch {}
-    return String(value);
-  }
-  function writeConsole(stream, values) {
-    writeOutputBridge(stream, values.map(formatOutputValue).join(" "));
-  }
-  Object.defineProperty(globalThis, "console", {
-    value: Object.freeze({
-      debug: (...values) => writeConsole("stdout", values),
-      error: (...values) => writeConsole("stderr", values),
-      info: (...values) => writeConsole("stdout", values),
-      log: (...values) => writeConsole("stdout", values),
-      warn: (...values) => writeConsole("stderr", values),
-    }),
-  });
-  function callWeb(method, args) {
-    return requestWebBridge(method, JSON.stringify(args));
-  }
-  Object.defineProperty(globalThis, "web", {
-    value: Object.freeze({
-      discover: (...args) => callWeb("discover", args),
-      search: (...args) => callWeb("search", args),
-      fetch: (...args) => callWeb("fetch", args),
-    }),
-  });
-})();
-`);
-
-try {
-  await compartment.evaluate("(async () => {\n" + workerData.code + "\n})()");
-} catch (error) {
-  writeOutput("stderr", error instanceof Error ? error.stack || error.message : String(error));
-  process.exitCode = 1;
-} finally {
-  parentPort.close();
-}
+import "../sandbox_runner.mjs";

package/dist/core/tools/bash.js

@@ -96,7 +96,7 @@ async function createBashTempFilePath(backend) {
         return undefined;
     }
 }
-async function writeBashTempFile(backend, content) {
+export async function writeBashTempFile(backend, content) {
     if (!content)
         return undefined;
     const tempPath = await createBashTempFilePath(backend);