@nitrostack/core 1.0.17 → 1.1.0-beta.1

package/dist/core/transforms/code-mode/guest-evaluator.js

@@ -0,0 +1,277 @@
+import { getQuickJS } from 'quickjs-emscripten';
+/**
+ * Converts a JavaScript value to a QuickJS handle using JSON parsing in the context.
+ */
+function jsonToHandle(context, value) {
+    const jsonGlobal = context.getProp(context.global, 'JSON');
+    const parseFn = context.getProp(jsonGlobal, 'parse');
+    let serialized;
+    try {
+        serialized = JSON.stringify(value === undefined ? null : value);
+    }
+    catch {
+        serialized = JSON.stringify(String(value));
+    }
+    const jsonStr = context.newString(serialized);
+    try {
+        const res = context.callFunction(parseFn, jsonGlobal, jsonStr);
+        return context.unwrapResult(res);
+    }
+    finally {
+        jsonStr.dispose();
+        parseFn.dispose();
+        jsonGlobal.dispose();
+    }
+}
+/**
+ * Executes all pending microtask jobs in the QuickJS runtime.
+ */
+function pumpMicrotasks(runtime) {
+    while (runtime.hasPendingJob()) {
+        const res = runtime.executePendingJobs();
+        if (res && 'error' in res && res.error) {
+            res.error.dispose();
+        }
+    }
+}
+/**
+ * Formats error details into a clean, human- and model-legible message.
+ */
+function extractErrorMessage(dumped, limits) {
+    if (dumped && typeof dumped === 'object') {
+        const d = dumped;
+        if (d.name === 'InternalError' && d.message === 'interrupted') {
+            return `Execution interrupted: timeout exceeded (${limits.timeoutMs}ms)`;
+        }
+        if (d.name === 'InternalError' && d.message === 'out of memory') {
+            return `out of memory: exceeded heap limit of ${limits.memoryLimitMb}MB`;
+        }
+        if (typeof d.message === 'string' && d.message.length > 0) {
+            return d.message;
+        }
+    }
+    return String(dumped);
+}
+function byteCount(computed) {
+    if (typeof computed === 'number' && Number.isFinite(computed))
+        return computed;
+    if (!computed || typeof computed !== 'object')
+        return undefined;
+    const record = computed;
+    for (const key of ['memory_used_size', 'malloc_size', 'bytes']) {
+        const value = record[key];
+        if (typeof value === 'number' && Number.isFinite(value))
+            return value;
+    }
+    return undefined;
+}
+/**
+ * Memory used by a QuickJS runtime, in megabytes.
+ * Prefers a numeric reading. The text dump is the fallback, and a format
+ * change or a missing API reports 0 rather than failing the script.
+ */
+export function memoryUsedMb(runtime) {
+    try {
+        if (typeof runtime.computeMemoryUsage === 'function') {
+            const computed = runtime.computeMemoryUsage();
+            const bytes = byteCount(computed);
+            const dispose = computed?.dispose;
+            if (typeof dispose === 'function') {
+                try {
+                    dispose.call(computed);
+                }
+                catch {
+                    // Handle was already released.
+                }
+            }
+            if (bytes !== undefined)
+                return bytes / (1024 * 1024);
+        }
+    }
+    catch {
+        // Fall through to the text dump.
+    }
+    try {
+        const dump = runtime.dumpMemoryUsage?.() ?? '';
+        const match = dump.match(/memory used\s+\d+\s+(\d+)/);
+        if (match?.[1])
+            return parseInt(match[1], 10) / (1024 * 1024);
+    }
+    catch {
+        // Telemetry only.
+    }
+    return 0;
+}
+/**
+ * Evaluates JavaScript guest code inside an isolated QuickJS WebAssembly sandbox.
+ * Supports async callTool bridging across IPC/host dispatcher, microtask pumping,
+ * console capturing, circuit breaker enforcement, and 2-tier timeout protection.
+ */
+export async function evaluateGuestScript(code, limits, ipcToolDispatcher) {
+    const QuickJS = await getQuickJS();
+    const runtime = QuickJS.newRuntime();
+    const context = runtime.newContext();
+    const logs = [];
+    const pendingDeferreds = new Set();
+    let toolCallCount = 0;
+    const startTime = Date.now();
+    const deadline = startTime + limits.timeoutMs;
+    try {
+        // 1. Enforce memory constraints
+        runtime.setMemoryLimit(limits.memoryLimitMb * 1024 * 1024);
+        runtime.setMaxStackSize(1024 * 1024);
+        // 2. Tier 1: Soft Interrupt Handler
+        runtime.setInterruptHandler(() => Date.now() > deadline);
+        // 3. Inject sandboxed console
+        const consoleHandle = context.newObject();
+        const createLogFn = (level) => {
+            return context.newFunction(level, (...args) => {
+                if (logs.length >= 100)
+                    return;
+                const msg = args
+                    .map((a) => {
+                    const d = context.dump(a);
+                    return typeof d === 'string' ? d : JSON.stringify(d);
+                })
+                    .join(' ');
+                logs.push({
+                    level,
+                    message: msg.length > 2000 ? `${msg.slice(0, 2000)}…` : msg,
+                    timestamp: Date.now(),
+                });
+            });
+        };
+        const logFn = createLogFn('log');
+        const warnFn = createLogFn('warn');
+        const errorFn = createLogFn('error');
+        context.setProp(consoleHandle, 'log', logFn);
+        context.setProp(consoleHandle, 'warn', warnFn);
+        context.setProp(consoleHandle, 'error', errorFn);
+        context.setProp(context.global, 'console', consoleHandle);
+        consoleHandle.dispose();
+        logFn.dispose();
+        warnFn.dispose();
+        errorFn.dispose();
+        // 4. Inject callTool() with Promise bridging
+        const callToolFn = context.newFunction('callTool', (nameHandle, argsHandle) => {
+            toolCallCount++;
+            if (toolCallCount > limits.maxToolCalls) {
+                throw new Error(`Circuit breaker: exceeded maximum allowed tool calls (${limits.maxToolCalls})`);
+            }
+            let toolName = '';
+            try {
+                toolName = context.getString(nameHandle);
+            }
+            catch {
+                toolName = String(context.dump(nameHandle));
+            }
+            const toolArgs = (context.dump(argsHandle) || {});
+            const deferred = context.newPromise();
+            pendingDeferreds.add(deferred);
+            // Dispatch async call across IPC boundary
+            ipcToolDispatcher(toolName, toolArgs)
+                .then((result) => {
+                if (!context.alive)
+                    return;
+                const valHandle = jsonToHandle(context, result);
+                deferred.resolve(valHandle);
+                valHandle.dispose();
+            })
+                .catch((err) => {
+                if (!context.alive)
+                    return;
+                const errMsg = err instanceof Error ? err.message : String(err);
+                const errHandle = context.newError(errMsg);
+                deferred.reject(errHandle);
+                errHandle.dispose();
+            })
+                .finally(() => {
+                pendingDeferreds.delete(deferred);
+                if (!context.alive)
+                    return;
+                // The deferred owns resolve/reject handles distinct from the one returned
+                // below; without this they accumulate against the guest heap limit.
+                deferred.dispose();
+                pumpMicrotasks(runtime);
+            });
+            return deferred.handle;
+        });
+        context.setProp(context.global, 'callTool', callToolFn);
+        callToolFn.dispose();
+        // 5. Wrap guest code in an async IIFE and evaluate
+        const wrappedCode = `(async () => {\n${code}\n})()`;
+        const evalResult = context.evalCode(wrappedCode);
+        if (evalResult.error) {
+            const errorMsg = extractErrorMessage(context.dump(evalResult.error), limits);
+            evalResult.error.dispose();
+            return {
+                success: false,
+                error: errorMsg,
+                logs,
+                toolCallCount,
+                durationMs: Date.now() - startTime,
+                memoryUsedMb: memoryUsedMb(runtime),
+            };
+        }
+        // 6. Await promise resolution with microtask event-loop pumping
+        const promiseHandle = evalResult.value;
+        let success = false;
+        let resultValue = undefined;
+        let errorMessage = undefined;
+        try {
+            while (true) {
+                pumpMicrotasks(runtime);
+                const state = context.getPromiseState(promiseHandle);
+                if (state.type === 'fulfilled') {
+                    resultValue = context.dump(state.value);
+                    state.value.dispose();
+                    success = true;
+                    break;
+                }
+                else if (state.type === 'rejected') {
+                    const dumped = context.dump(state.error);
+                    state.error.dispose();
+                    success = false;
+                    errorMessage = extractErrorMessage(dumped, limits);
+                    break;
+                }
+                if (Date.now() > deadline) {
+                    success = false;
+                    errorMessage = `Execution interrupted: timeout exceeded (${limits.timeoutMs}ms)`;
+                    break;
+                }
+                // Yield to Node event loop for IPC message delivery and promise settling
+                await new Promise((resolve) => setTimeout(resolve, 2));
+            }
+        }
+        finally {
+            promiseHandle.dispose();
+        }
+        const usedMb = memoryUsedMb(runtime);
+        return {
+            success,
+            value: success ? resultValue : undefined,
+            error: success ? undefined : errorMessage,
+            logs,
+            toolCallCount,
+            durationMs: Date.now() - startTime,
+            memoryUsedMb: usedMb,
+        };
+    }
+    finally {
+        // A timed-out script can still own callTool deferreds. Free them before the
+        // runtime or QuickJS aborts in JS_FreeRuntime.
+        for (const deferred of pendingDeferreds) {
+            try {
+                deferred.dispose();
+            }
+            catch {
+                // Already released by the tool-call settlement path.
+            }
+        }
+        pendingDeferreds.clear();
+        context.dispose();
+        runtime.dispose();
+    }
+}
+//# sourceMappingURL=guest-evaluator.js.map

package/dist/core/transforms/code-mode/guest-evaluator.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"guest-evaluator.js","sourceRoot":"","sources":["../../../../src/core/transforms/code-mode/guest-evaluator.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAiD,MAAM,oBAAoB,CAAC;AAG/F;;GAEG;AACH,SAAS,YAAY,CAAC,OAAuB,EAAE,KAAc;IAC3D,MAAM,UAAU,GAAG,OAAO,CAAC,OAAO,CAAC,OAAO,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAC3D,MAAM,OAAO,GAAG,OAAO,CAAC,OAAO,CAAC,UAAU,EAAE,OAAO,CAAC,CAAC;IACrD,IAAI,UAAkB,CAAC;IACvB,IAAI,CAAC;QACH,UAAU,GAAG,IAAI,CAAC,SAAS,CAAC,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC;IAClE,CAAC;IAAC,MAAM,CAAC;QACP,UAAU,GAAG,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC;IAC7C,CAAC;IACD,MAAM,OAAO,GAAG,OAAO,CAAC,SAAS,CAAC,UAAU,CAAC,CAAC;IAC9C,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,OAAO,CAAC,YAAY,CAAC,OAAO,EAAE,UAAU,EAAE,OAAO,CAAC,CAAC;QAC/D,OAAO,OAAO,CAAC,YAAY,CAAC,GAAG,CAAC,CAAC;IACnC,CAAC;YAAS,CAAC;QACT,OAAO,CAAC,OAAO,EAAE,CAAC;QAClB,OAAO,CAAC,OAAO,EAAE,CAAC;QAClB,UAAU,CAAC,OAAO,EAAE,CAAC;IACvB,CAAC;AACH,CAAC;AAED;;GAEG;AACH,SAAS,cAAc,CAAC,OAAuB;IAC7C,OAAO,OAAO,CAAC,aAAa,EAAE,EAAE,CAAC;QAC/B,MAAM,GAAG,GAAG,OAAO,CAAC,kBAAkB,EAAE,CAAC;QACzC,IAAI,GAAG,IAAI,OAAO,IAAI,GAAG,IAAI,GAAG,CAAC,KAAK,EAAE,CAAC;YACvC,GAAG,CAAC,KAAK,CAAC,OAAO,EAAE,CAAC;QACtB,CAAC;IACH,CAAC;AACH,CAAC;AAED;;GAEG;AACH,SAAS,mBAAmB,CAAC,MAAe,EAAE,MAAuB;IACnE,IAAI,MAAM,IAAI,OAAO,MAAM,KAAK,QAAQ,EAAE,CAAC;QACzC,MAAM,CAAC,GAAG,MAAiC,CAAC;QAC5C,IAAI,CAAC,CAAC,IAAI,KAAK,eAAe,IAAI,CAAC,CAAC,OAAO,KAAK,aAAa,EAAE,CAAC;YAC9D,OAAO,4CAA4C,MAAM,CAAC,SAAS,KAAK,CAAC;QAC3E,CAAC;QACD,IAAI,CAAC,CAAC,IAAI,KAAK,eAAe,IAAI,CAAC,CAAC,OAAO,KAAK,eAAe,EAAE,CAAC;YAChE,OAAO,yCAAyC,MAAM,CAAC,aAAa,IAAI,CAAC;QAC3E,CAAC;QACD,IAAI,OAAO,CAAC,CAAC,OAAO,KAAK,QAAQ,IAAI,CAAC,CAAC,OAAO,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YAC1D,OAAO,CAAC,CAAC,OAAO,CAAC;QACnB,CAAC;IACH,CAAC;IACD,OAAO,MAAM,CAAC,MAAM,CAAC,CAAC;AACxB,CAAC;AAED,SAAS,SAAS,CAAC,QAAiB;IAClC,IAAI,OAAO,QAAQ,KAAK,QAAQ,IAAI,MAAM,CAAC,QAAQ,CAAC,QAAQ,CAAC;QAAE,OAAO,QAAQ,CAAC;IAC/E,IAAI,CAAC,QAAQ,IAAI,OAAO,QAAQ,KAAK,QAAQ;QAAE,OAAO,SAAS,CAAC;IAChE,MAAM,MAAM,GAAG,QAAmC,CAAC;IACnD,KAAK,MAAM,GAAG,IAAI,CAAC,kBAAkB,EAAE,aAAa,EAAE,OAAO,CAAC,EAAE,CAAC;QAC/D,MAAM,KAAK,GAAG,MAAM,CAAC,GAAG,CAAC,CAAC;QAC1B,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC;YAAE,OAAO,KAAK,CAAC;IACxE,CAAC;IACD,OAAO,SAAS,CAAC;AACnB,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,YAAY,CAAC,OAG5B;IACC,IAAI,CAAC;QACH,IAAI,OAAO,OAAO,CAAC,kBAAkB,KAAK,UAAU,EAAE,CAAC;YACrD,MAAM,QAAQ,GAAG,OAAO,CAAC,kBAAkB,EAAE,CAAC;YAC9C,MAAM,KAAK,GAAG,SAAS,CAAC,QAAQ,CAAC,CAAC;YAClC,MAAM,OAAO,GAAI,QAA4C,EAAE,OAAO,CAAC;YACvE,IAAI,OAAO,OAAO,KAAK,UAAU,EAAE,CAAC;gBAClC,IAAI,CAAC;oBACH,OAAO,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;gBACzB,CAAC;gBAAC,MAAM,CAAC;oBACP,+BAA+B;gBACjC,CAAC;YACH,CAAC;YACD,IAAI,KAAK,KAAK,SAAS;gBAAE,OAAO,KAAK,GAAG,CAAC,IAAI,GAAG,IAAI,CAAC,CAAC;QACxD,CAAC;IACH,CAAC;IAAC,MAAM,CAAC;QACP,iCAAiC;IACnC,CAAC;IAED,IAAI,CAAC;QACH,MAAM,IAAI,GAAG,OAAO,CAAC,eAAe,EAAE,EAAE,IAAI,EAAE,CAAC;QAC/C,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,2BAA2B,CAAC,CAAC;QACtD,IAAI,KAAK,EAAE,CAAC,CAAC,CAAC;YAAE,OAAO,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,GAAG,CAAC,IAAI,GAAG,IAAI,CAAC,CAAC;IAChE,CAAC;IAAC,MAAM,CAAC;QACP,kBAAkB;IACpB,CAAC;IACD,OAAO,CAAC,CAAC;AACX,CAAC;AAID;;;;GAIG;AACH,MAAM,CAAC,KAAK,UAAU,mBAAmB,CACvC,IAAY,EACZ,MAAuB,EACvB,iBAAoF;IAEpF,MAAM,OAAO,GAAG,MAAM,UAAU,EAAE,CAAC;IACnC,MAAM,OAAO,GAAG,OAAO,CAAC,UAAU,EAAE,CAAC;IACrC,MAAM,OAAO,GAAG,OAAO,CAAC,UAAU,EAAE,CAAC;IAErC,MAAM,IAAI,GAAsB,EAAE,CAAC;IACnC,MAAM,gBAAgB,GAAG,IAAI,GAAG,EAA2B,CAAC;IAC5D,IAAI,aAAa,GAAG,CAAC,CAAC;IACtB,MAAM,SAAS,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;IAC7B,MAAM,QAAQ,GAAG,SAAS,GAAG,MAAM,CAAC,SAAS,CAAC;IAE9C,IAAI,CAAC;QACH,gCAAgC;QAChC,OAAO,CAAC,cAAc,CAAC,MAAM,CAAC,aAAa,GAAG,IAAI,GAAG,IAAI,CAAC,CAAC;QAC3D,OAAO,CAAC,eAAe,CAAC,IAAI,GAAG,IAAI,CAAC,CAAC;QAErC,oCAAoC;QACpC,OAAO,CAAC,mBAAmB,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,QAAQ,CAAC,CAAC;QAEzD,8BAA8B;QAC9B,MAAM,aAAa,GAAG,OAAO,CAAC,SAAS,EAAE,CAAC;QAC1C,MAAM,WAAW,GAAG,CAAC,KAA+B,EAAE,EAAE;YACtD,OAAO,OAAO,CAAC,WAAW,CAAC,KAAK,EAAE,CAAC,GAAG,IAAI,EAAE,EAAE;gBAC5C,IAAI,IAAI,CAAC,MAAM,IAAI,GAAG;oBAAE,OAAO;gBAC/B,MAAM,GAAG,GAAG,IAAI;qBACb,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE;oBACT,MAAM,CAAC,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;oBAC1B,OAAO,OAAO,CAAC,KAAK,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC;gBACvD,CAAC,CAAC;qBACD,IAAI,CAAC,GAAG,CAAC,CAAC;gBACb,IAAI,CAAC,IAAI,CAAC;oBACR,KAAK;oBACL,OAAO,EAAE,GAAG,CAAC,MAAM,GAAG,IAAI,CAAC,CAAC,CAAC,GAAG,GAAG,CAAC,KAAK,CAAC,CAAC,EAAE,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG;oBAC3D,SAAS,EAAE,IAAI,CAAC,GAAG,EAAE;iBACtB,CAAC,CAAC;YACL,CAAC,CAAC,CAAC;QACL,CAAC,CAAC;QAEF,MAAM,KAAK,GAAG,WAAW,CAAC,KAAK,CAAC,CAAC;QACjC,MAAM,MAAM,GAAG,WAAW,CAAC,MAAM,CAAC,CAAC;QACnC,MAAM,OAAO,GAAG,WAAW,CAAC,OAAO,CAAC,CAAC;QAErC,OAAO,CAAC,OAAO,CAAC,aAAa,EAAE,KAAK,EAAE,KAAK,CAAC,CAAC;QAC7C,OAAO,CAAC,OAAO,CAAC,aAAa,EAAE,MAAM,EAAE,MAAM,CAAC,CAAC;QAC/C,OAAO,CAAC,OAAO,CAAC,aAAa,EAAE,OAAO,EAAE,OAAO,CAAC,CAAC;QACjD,OAAO,CAAC,OAAO,CAAC,OAAO,CAAC,MAAM,EAAE,SAAS,EAAE,aAAa,CAAC,CAAC;QAE1D,aAAa,CAAC,OAAO,EAAE,CAAC;QACxB,KAAK,CAAC,OAAO,EAAE,CAAC;QAChB,MAAM,CAAC,OAAO,EAAE,CAAC;QACjB,OAAO,CAAC,OAAO,EAAE,CAAC;QAElB,6CAA6C;QAC7C,MAAM,UAAU,GAAG,OAAO,CAAC,WAAW,CAAC,UAAU,EAAE,CAAC,UAAU,EAAE,UAAU,EAAE,EAAE;YAC5E,aAAa,EAAE,CAAC;YAChB,IAAI,aAAa,GAAG,MAAM,CAAC,YAAY,EAAE,CAAC;gBACxC,MAAM,IAAI,KAAK,CAAC,yDAAyD,MAAM,CAAC,YAAY,GAAG,CAAC,CAAC;YACnG,CAAC;YAED,IAAI,QAAQ,GAAG,EAAE,CAAC;YAClB,IAAI,CAAC;gBACH,QAAQ,GAAG,OAAO,CAAC,SAAS,CAAC,UAAU,CAAC,CAAC;YAC3C,CAAC;YAAC,MAAM,CAAC;gBACP,QAAQ,GAAG,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC,CAAC;YAC9C,CAAC;YAED,MAAM,QAAQ,GAAG,CAAC,OAAO,CAAC,IAAI,CAAC,UAAU,CAAC,IAAI,EAAE,CAA4B,CAAC;YAC7E,MAAM,QAAQ,GAAG,OAAO,CAAC,UAAU,EAAE,CAAC;YACtC,gBAAgB,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;YAE/B,0CAA0C;YAC1C,iBAAiB,CAAC,QAAQ,EAAE,QAAQ,CAAC;iBAClC,IAAI,CAAC,CAAC,MAAM,EAAE,EAAE;gBACf,IAAI,CAAC,OAAO,CAAC,KAAK;oBAAE,OAAO;gBAC3B,MAAM,SAAS,GAAG,YAAY,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;gBAChD,QAAQ,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC;gBAC5B,SAAS,CAAC,OAAO,EAAE,CAAC;YACtB,CAAC,CAAC;iBACD,KAAK,CAAC,CAAC,GAAG,EAAE,EAAE;gBACb,IAAI,CAAC,OAAO,CAAC,KAAK;oBAAE,OAAO;gBAC3B,MAAM,MAAM,GAAG,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;gBAChE,MAAM,SAAS,GAAG,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;gBAC3C,QAAQ,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC;gBAC3B,SAAS,CAAC,OAAO,EAAE,CAAC;YACtB,CAAC,CAAC;iBACD,OAAO,CAAC,GAAG,EAAE;gBACZ,gBAAgB,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;gBAClC,IAAI,CAAC,OAAO,CAAC,KAAK;oBAAE,OAAO;gBAC3B,0EAA0E;gBAC1E,oEAAoE;gBACpE,QAAQ,CAAC,OAAO,EAAE,CAAC;gBACnB,cAAc,CAAC,OAAO,CAAC,CAAC;YAC1B,CAAC,CAAC,CAAC;YAEL,OAAO,QAAQ,CAAC,MAAM,CAAC;QACzB,CAAC,CAAC,CAAC;QAEH,OAAO,CAAC,OAAO,CAAC,OAAO,CAAC,MAAM,EAAE,UAAU,EAAE,UAAU,CAAC,CAAC;QACxD,UAAU,CAAC,OAAO,EAAE,CAAC;QAErB,mDAAmD;QACnD,MAAM,WAAW,GAAG,mBAAmB,IAAI,QAAQ,CAAC;QACpD,MAAM,UAAU,GAAG,OAAO,CAAC,QAAQ,CAAC,WAAW,CAAC,CAAC;QAEjD,IAAI,UAAU,CAAC,KAAK,EAAE,CAAC;YACrB,MAAM,QAAQ,GAAG,mBAAmB,CAAC,OAAO,CAAC,IAAI,CAAC,UAAU,CAAC,KAAK,CAAC,EAAE,MAAM,CAAC,CAAC;YAC7E,UAAU,CAAC,KAAK,CAAC,OAAO,EAAE,CAAC;YAC3B,OAAO;gBACL,OAAO,EAAE,KAAK;gBACd,KAAK,EAAE,QAAQ;gBACf,IAAI;gBACJ,aAAa;gBACb,UAAU,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,SAAS;gBAClC,YAAY,EAAE,YAAY,CAAC,OAAO,CAAC;aACpC,CAAC;QACJ,CAAC;QAED,gEAAgE;QAChE,MAAM,aAAa,GAAG,UAAU,CAAC,KAAK,CAAC;QACvC,IAAI,OAAO,GAAG,KAAK,CAAC;QACpB,IAAI,WAAW,GAAY,SAAS,CAAC;QACrC,IAAI,YAAY,GAAuB,SAAS,CAAC;QAEjD,IAAI,CAAC;YACH,OAAO,IAAI,EAAE,CAAC;gBACZ,cAAc,CAAC,OAAO,CAAC,CAAC;gBAExB,MAAM,KAAK,GAAG,OAAO,CAAC,eAAe,CAAC,aAAa,CAAC,CAAC;gBACrD,IAAI,KAAK,CAAC,IAAI,KAAK,WAAW,EAAE,CAAC;oBAC/B,WAAW,GAAG,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;oBACxC,KAAK,CAAC,KAAK,CAAC,OAAO,EAAE,CAAC;oBACtB,OAAO,GAAG,IAAI,CAAC;oBACf,MAAM;gBACR,CAAC;qBAAM,IAAI,KAAK,CAAC,IAAI,KAAK,UAAU,EAAE,CAAC;oBACrC,MAAM,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;oBACzC,KAAK,CAAC,KAAK,CAAC,OAAO,EAAE,CAAC;oBACtB,OAAO,GAAG,KAAK,CAAC;oBAChB,YAAY,GAAG,mBAAmB,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;oBACnD,MAAM;gBACR,CAAC;gBAED,IAAI,IAAI,CAAC,GAAG,EAAE,GAAG,QAAQ,EAAE,CAAC;oBAC1B,OAAO,GAAG,KAAK,CAAC;oBAChB,YAAY,GAAG,4CAA4C,MAAM,CAAC,SAAS,KAAK,CAAC;oBACjF,MAAM;gBACR,CAAC;gBAED,yEAAyE;gBACzE,MAAM,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,UAAU,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,CAAC;YACzD,CAAC;QACH,CAAC;gBAAS,CAAC;YACT,aAAa,CAAC,OAAO,EAAE,CAAC;QAC1B,CAAC;QAED,MAAM,MAAM,GAAG,YAAY,CAAC,OAAO,CAAC,CAAC;QAErC,OAAO;YACL,OAAO;YACP,KAAK,EAAE,OAAO,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,SAAS;YACxC,KAAK,EAAE,OAAO,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,YAAY;YACzC,IAAI;YACJ,aAAa;YACb,UAAU,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,SAAS;YAClC,YAAY,EAAE,MAAM;SACrB,CAAC;IACJ,CAAC;YAAS,CAAC;QACT,4EAA4E;QAC5E,+CAA+C;QAC/C,KAAK,MAAM,QAAQ,IAAI,gBAAgB,EAAE,CAAC;YACxC,IAAI,CAAC;gBACH,QAAQ,CAAC,OAAO,EAAE,CAAC;YACrB,CAAC;YAAC,MAAM,CAAC;gBACP,qDAAqD;YACvD,CAAC;QACH,CAAC;QACD,gBAAgB,CAAC,KAAK,EAAE,CAAC;QACzB,OAAO,CAAC,OAAO,EAAE,CAAC;QAClB,OAAO,CAAC,OAAO,EAAE,CAAC;IACpB,CAAC;AACH,CAAC"}

package/dist/core/transforms/code-mode/index.d.ts

@@ -0,0 +1,11 @@
+export * from './types.js';
+export * from './sandbox.interface.js';
+export * from './legible-error.js';
+export * from './ipc-messages.js';
+export * from './worker-pool.js';
+export * from './guest-evaluator.js';
+export * from './quickjs-wasm.provider.js';
+export * from './destructive-guard.js';
+export * from './synthetic-tools.js';
+export * from './code-mode.transform.js';
+//# sourceMappingURL=index.d.ts.map

package/dist/core/transforms/code-mode/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../../src/core/transforms/code-mode/index.ts"],"names":[],"mappings":"AAAA,cAAc,YAAY,CAAC;AAC3B,cAAc,wBAAwB,CAAC;AACvC,cAAc,oBAAoB,CAAC;AACnC,cAAc,mBAAmB,CAAC;AAClC,cAAc,kBAAkB,CAAC;AACjC,cAAc,sBAAsB,CAAC;AACrC,cAAc,4BAA4B,CAAC;AAC3C,cAAc,wBAAwB,CAAC;AACvC,cAAc,sBAAsB,CAAC;AACrC,cAAc,0BAA0B,CAAC"}

package/dist/core/transforms/code-mode/index.js

@@ -0,0 +1,11 @@
+export * from './types.js';
+export * from './sandbox.interface.js';
+export * from './legible-error.js';
+export * from './ipc-messages.js';
+export * from './worker-pool.js';
+export * from './guest-evaluator.js';
+export * from './quickjs-wasm.provider.js';
+export * from './destructive-guard.js';
+export * from './synthetic-tools.js';
+export * from './code-mode.transform.js';
+//# sourceMappingURL=index.js.map

package/dist/core/transforms/code-mode/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../../src/core/transforms/code-mode/index.ts"],"names":[],"mappings":"AAAA,cAAc,YAAY,CAAC;AAC3B,cAAc,wBAAwB,CAAC;AACvC,cAAc,oBAAoB,CAAC;AACnC,cAAc,mBAAmB,CAAC;AAClC,cAAc,kBAAkB,CAAC;AACjC,cAAc,sBAAsB,CAAC;AACrC,cAAc,4BAA4B,CAAC;AAC3C,cAAc,wBAAwB,CAAC;AACvC,cAAc,sBAAsB,CAAC;AACrC,cAAc,0BAA0B,CAAC"}

package/dist/core/transforms/code-mode/ipc-messages.d.ts

@@ -0,0 +1,31 @@
+import { ExecutionLimits, SandboxExecutionResult } from './types.js';
+export type HostToWorkerMessage = {
+    type: 'EXECUTE';
+    taskId: string;
+    code: string;
+    limits: ExecutionLimits;
+} | {
+    type: 'TOOL_RESPONSE';
+    taskId: string;
+    callId: string;
+    result?: unknown;
+    error?: string;
+} | {
+    type: 'SHUTDOWN';
+};
+export type WorkerToHostMessage = {
+    type: 'TOOL_REQUEST';
+    taskId: string;
+    callId: string;
+    toolName: string;
+    args: Record<string, unknown>;
+} | {
+    type: 'EXECUTION_COMPLETE';
+    taskId: string;
+    result: SandboxExecutionResult;
+} | {
+    type: 'EXECUTION_FAILED';
+    taskId: string;
+    error: string;
+};
+//# sourceMappingURL=ipc-messages.d.ts.map

package/dist/core/transforms/code-mode/ipc-messages.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"ipc-messages.d.ts","sourceRoot":"","sources":["../../../../src/core/transforms/code-mode/ipc-messages.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,eAAe,EAAE,sBAAsB,EAAE,MAAM,YAAY,CAAC;AAGrE,MAAM,MAAM,mBAAmB,GAC3B;IAAE,IAAI,EAAE,SAAS,CAAC;IAAC,MAAM,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,MAAM,CAAC;IAAC,MAAM,EAAE,eAAe,CAAA;CAAE,GAC1E;IAAE,IAAI,EAAE,eAAe,CAAC;IAAC,MAAM,EAAE,MAAM,CAAC;IAAC,MAAM,EAAE,MAAM,CAAC;IAAC,MAAM,CAAC,EAAE,OAAO,CAAC;IAAC,KAAK,CAAC,EAAE,MAAM,CAAA;CAAE,GAC3F;IAAE,IAAI,EAAE,UAAU,CAAA;CAAE,CAAC;AAGzB,MAAM,MAAM,mBAAmB,GAC3B;IAAE,IAAI,EAAE,cAAc,CAAC;IAAC,MAAM,EAAE,MAAM,CAAC;IAAC,MAAM,EAAE,MAAM,CAAC;IAAC,QAAQ,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAA;CAAE,GACzG;IAAE,IAAI,EAAE,oBAAoB,CAAC;IAAC,MAAM,EAAE,MAAM,CAAC;IAAC,MAAM,EAAE,sBAAsB,CAAA;CAAE,GAC9E;IAAE,IAAI,EAAE,kBAAkB,CAAC;IAAC,MAAM,EAAE,MAAM,CAAC;IAAC,KAAK,EAAE,MAAM,CAAA;CAAE,CAAC"}

package/dist/core/transforms/code-mode/ipc-messages.js

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=ipc-messages.js.map

package/dist/core/transforms/code-mode/ipc-messages.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"ipc-messages.js","sourceRoot":"","sources":["../../../../src/core/transforms/code-mode/ipc-messages.ts"],"names":[],"mappings":""}

package/dist/core/transforms/code-mode/legible-error.d.ts

@@ -0,0 +1,8 @@
+import { Tool } from '../../tool.js';
+/**
+ * When guest sandbox code calls a tool with invalid or missing arguments,
+ * formatLegibleToolError extracts the canonical parameter schema and formats
+ * an actionable, self-correcting error message for the LLM.
+ */
+export declare function formatLegibleToolError(tool: Tool, rawError: unknown): Promise<string>;
+//# sourceMappingURL=legible-error.d.ts.map

package/dist/core/transforms/code-mode/legible-error.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"legible-error.d.ts","sourceRoot":"","sources":["../../../../src/core/transforms/code-mode/legible-error.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,IAAI,EAAE,MAAM,eAAe,CAAC;AAErC;;;;GAIG;AACH,wBAAsB,sBAAsB,CAAC,IAAI,EAAE,IAAI,EAAE,QAAQ,EAAE,OAAO,GAAG,OAAO,CAAC,MAAM,CAAC,CAY3F"}

package/dist/core/transforms/code-mode/legible-error.js

@@ -0,0 +1,17 @@
+/**
+ * When guest sandbox code calls a tool with invalid or missing arguments,
+ * formatLegibleToolError extracts the canonical parameter schema and formats
+ * an actionable, self-correcting error message for the LLM.
+ */
+export async function formatLegibleToolError(tool, rawError) {
+    const mcpTool = await tool.toMcpTool();
+    const schema = mcpTool.inputSchema || {};
+    const properties = schema?.properties || {};
+    const requiredSet = new Set(Array.isArray(schema?.required) ? schema.required : []);
+    const paramSummary = Object.keys(properties)
+        .map((key) => `${key}${requiredSet.has(key) ? '*' : ''}`)
+        .join(', ');
+    const baseMessage = rawError instanceof Error ? rawError.message : String(rawError);
+    return `callTool('${tool.name}') failed: ${baseMessage}\nValid parameters for ${tool.name} (* = required): ${paramSummary || '(none)'}`;
+}
+//# sourceMappingURL=legible-error.js.map

package/dist/core/transforms/code-mode/legible-error.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"legible-error.js","sourceRoot":"","sources":["../../../../src/core/transforms/code-mode/legible-error.ts"],"names":[],"mappings":"AAEA;;;;GAIG;AACH,MAAM,CAAC,KAAK,UAAU,sBAAsB,CAAC,IAAU,EAAE,QAAiB;IACxE,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,SAAS,EAAE,CAAC;IACvC,MAAM,MAAM,GAAI,OAAO,CAAC,WAAmC,IAAI,EAAE,CAAC;IAClE,MAAM,UAAU,GAAG,MAAM,EAAE,UAAU,IAAI,EAAE,CAAC;IAC5C,MAAM,WAAW,GAAG,IAAI,GAAG,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,EAAE,QAAQ,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;IAEpF,MAAM,YAAY,GAAG,MAAM,CAAC,IAAI,CAAC,UAAU,CAAC;SACzC,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,GAAG,GAAG,WAAW,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC;SACxD,IAAI,CAAC,IAAI,CAAC,CAAC;IAEd,MAAM,WAAW,GAAG,QAAQ,YAAY,KAAK,CAAC,CAAC,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;IACpF,OAAO,aAAa,IAAI,CAAC,IAAI,cAAc,WAAW,0BAA0B,IAAI,CAAC,IAAI,oBAAoB,YAAY,IAAI,QAAQ,EAAE,CAAC;AAC1I,CAAC"}

package/dist/core/transforms/code-mode/quickjs-wasm.provider.d.ts

@@ -0,0 +1,25 @@
+import { ExecutionContext } from '../../types.js';
+import { SandboxProvider, ToolDispatcher } from './sandbox.interface.js';
+import { ExecutionLimits, SandboxExecutionResult } from './types.js';
+/**
+ * Sandboxed execution provider utilizing QuickJS compiled to WebAssembly.
+ * Guarantees memory isolation and cross-platform zero-dependency execution.
+ */
+export declare class QuickJsWasmSandboxProvider implements SandboxProvider {
+    readonly name = "quickjs-wasm";
+    /**
+     * Warms the QuickJS WebAssembly module so the first execute() does not pay for
+     * compilation. `getQuickJS` memoizes process-wide, so there is nothing to cache here.
+     */
+    initialize(): Promise<void>;
+    /**
+     * Executes a user-provided script in the QuickJS WebAssembly sandbox.
+     */
+    execute(code: string, dispatcher: ToolDispatcher, limits: ExecutionLimits, context?: ExecutionContext): Promise<SandboxExecutionResult>;
+    /**
+     * No-op: each execute() builds and tears down its own runtime and context, and the
+     * WebAssembly module itself is shared process-wide rather than owned here.
+     */
+    dispose(): Promise<void>;
+}
+//# sourceMappingURL=quickjs-wasm.provider.d.ts.map

package/dist/core/transforms/code-mode/quickjs-wasm.provider.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"quickjs-wasm.provider.d.ts","sourceRoot":"","sources":["../../../../src/core/transforms/code-mode/quickjs-wasm.provider.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,gBAAgB,EAAE,MAAM,gBAAgB,CAAC;AAClD,OAAO,EAAE,eAAe,EAAE,cAAc,EAAE,MAAM,wBAAwB,CAAC;AACzE,OAAO,EAAE,eAAe,EAAE,sBAAsB,EAAE,MAAM,YAAY,CAAC;AAGrE;;;GAGG;AACH,qBAAa,0BAA2B,YAAW,eAAe;IAChE,QAAQ,CAAC,IAAI,kBAAkB;IAE/B;;;OAGG;IACG,UAAU,IAAI,OAAO,CAAC,IAAI,CAAC;IAIjC;;OAEG;IACG,OAAO,CACX,IAAI,EAAE,MAAM,EACZ,UAAU,EAAE,cAAc,EAC1B,MAAM,EAAE,eAAe,EACvB,OAAO,CAAC,EAAE,gBAAgB,GACzB,OAAO,CAAC,sBAAsB,CAAC;IASlC;;;OAGG;IACG,OAAO,IAAI,OAAO,CAAC,IAAI,CAAC;CAG/B"}

package/dist/core/transforms/code-mode/quickjs-wasm.provider.js

@@ -0,0 +1,31 @@
+import { getQuickJS } from 'quickjs-emscripten';
+import { evaluateGuestScript } from './guest-evaluator.js';
+/**
+ * Sandboxed execution provider utilizing QuickJS compiled to WebAssembly.
+ * Guarantees memory isolation and cross-platform zero-dependency execution.
+ */
+export class QuickJsWasmSandboxProvider {
+    name = 'quickjs-wasm';
+    /**
+     * Warms the QuickJS WebAssembly module so the first execute() does not pay for
+     * compilation. `getQuickJS` memoizes process-wide, so there is nothing to cache here.
+     */
+    async initialize() {
+        await getQuickJS();
+    }
+    /**
+     * Executes a user-provided script in the QuickJS WebAssembly sandbox.
+     */
+    async execute(code, dispatcher, limits, context) {
+        await this.initialize();
+        return evaluateGuestScript(code, limits, (toolName, args) => dispatcher(toolName, args, context));
+    }
+    /**
+     * No-op: each execute() builds and tears down its own runtime and context, and the
+     * WebAssembly module itself is shared process-wide rather than owned here.
+     */
+    async dispose() {
+        // Nothing to release.
+    }
+}
+//# sourceMappingURL=quickjs-wasm.provider.js.map

package/dist/core/transforms/code-mode/quickjs-wasm.provider.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"quickjs-wasm.provider.js","sourceRoot":"","sources":["../../../../src/core/transforms/code-mode/quickjs-wasm.provider.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,oBAAoB,CAAC;AAIhD,OAAO,EAAE,mBAAmB,EAAE,MAAM,sBAAsB,CAAC;AAE3D;;;GAGG;AACH,MAAM,OAAO,0BAA0B;IAC5B,IAAI,GAAG,cAAc,CAAC;IAE/B;;;OAGG;IACH,KAAK,CAAC,UAAU;QACd,MAAM,UAAU,EAAE,CAAC;IACrB,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,OAAO,CACX,IAAY,EACZ,UAA0B,EAC1B,MAAuB,EACvB,OAA0B;QAE1B,MAAM,IAAI,CAAC,UAAU,EAAE,CAAC;QACxB,OAAO,mBAAmB,CACxB,IAAI,EACJ,MAAM,EACN,CAAC,QAAgB,EAAE,IAA6B,EAAE,EAAE,CAAC,UAAU,CAAC,QAAQ,EAAE,IAAI,EAAE,OAAO,CAAC,CACzF,CAAC;IACJ,CAAC;IAED;;;OAGG;IACH,KAAK,CAAC,OAAO;QACX,sBAAsB;IACxB,CAAC;CACF"}

package/dist/core/transforms/code-mode/sandbox.interface.d.ts

@@ -0,0 +1,10 @@
+import { ExecutionContext } from '../../types.js';
+import { ExecutionLimits, SandboxExecutionResult } from './types.js';
+export type ToolDispatcher = (name: string, args: Record<string, unknown>, context?: ExecutionContext) => Promise<unknown>;
+export interface SandboxProvider {
+    readonly name: string;
+    initialize(): Promise<void>;
+    execute(code: string, dispatcher: ToolDispatcher, limits: ExecutionLimits, context?: ExecutionContext): Promise<SandboxExecutionResult>;
+    dispose(): Promise<void>;
+}
+//# sourceMappingURL=sandbox.interface.d.ts.map

package/dist/core/transforms/code-mode/sandbox.interface.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"sandbox.interface.d.ts","sourceRoot":"","sources":["../../../../src/core/transforms/code-mode/sandbox.interface.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,gBAAgB,EAAE,MAAM,gBAAgB,CAAC;AAClD,OAAO,EAAE,eAAe,EAAE,sBAAsB,EAAE,MAAM,YAAY,CAAC;AAErE,MAAM,MAAM,cAAc,GAAG,CAC3B,IAAI,EAAE,MAAM,EACZ,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAC7B,OAAO,CAAC,EAAE,gBAAgB,KACvB,OAAO,CAAC,OAAO,CAAC,CAAC;AAEtB,MAAM,WAAW,eAAe;IAC9B,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,UAAU,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC;IAC5B,OAAO,CACL,IAAI,EAAE,MAAM,EACZ,UAAU,EAAE,cAAc,EAC1B,MAAM,EAAE,eAAe,EACvB,OAAO,CAAC,EAAE,gBAAgB,GACzB,OAAO,CAAC,sBAAsB,CAAC,CAAC;IACnC,OAAO,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC;CAC1B"}

package/dist/core/transforms/code-mode/sandbox.interface.js

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=sandbox.interface.js.map

package/dist/core/transforms/code-mode/sandbox.interface.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sandbox.interface.js","sourceRoot":"","sources":["../../../../src/core/transforms/code-mode/sandbox.interface.ts"],"names":[],"mappings":""}

package/dist/core/transforms/code-mode/sandbox.worker.d.ts

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=sandbox.worker.d.ts.map

package/dist/core/transforms/code-mode/sandbox.worker.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"sandbox.worker.d.ts","sourceRoot":"","sources":["../../../../src/core/transforms/code-mode/sandbox.worker.ts"],"names":[],"mappings":""}

package/dist/core/transforms/code-mode/sandbox.worker.js

@@ -0,0 +1,69 @@
+import { parentPort } from 'node:worker_threads';
+import { evaluateGuestScript } from './guest-evaluator.js';
+if (parentPort) {
+    const pendingToolCalls = new Map();
+    parentPort.on('message', async (msg) => {
+        if (msg.type === 'SHUTDOWN') {
+            process.exit(0);
+        }
+        if (msg.type === 'TOOL_RESPONSE') {
+            const pending = pendingToolCalls.get(msg.callId);
+            if (pending) {
+                pendingToolCalls.delete(msg.callId);
+                if (msg.error) {
+                    pending.reject(new Error(msg.error));
+                }
+                else {
+                    pending.resolve(msg.result);
+                }
+            }
+            return;
+        }
+        if (msg.type === 'EXECUTE') {
+            try {
+                const result = await evaluateGuestScript(msg.code, msg.limits, (toolName, args) => {
+                    const callId = crypto.randomUUID();
+                    return new Promise((resolve, reject) => {
+                        pendingToolCalls.set(callId, { resolve, reject });
+                        parentPort.postMessage({
+                            type: 'TOOL_REQUEST',
+                            taskId: msg.taskId,
+                            callId,
+                            toolName,
+                            args: args || {},
+                        });
+                    });
+                });
+                parentPort.postMessage({
+                    type: 'EXECUTION_COMPLETE',
+                    taskId: msg.taskId,
+                    result,
+                });
+            }
+            catch (err) {
+                const result = {
+                    success: false,
+                    error: err instanceof Error ? err.message : String(err),
+                    logs: [],
+                    toolCallCount: 0,
+                    durationMs: 0,
+                    memoryUsedMb: 0,
+                };
+                parentPort.postMessage({
+                    type: 'EXECUTION_COMPLETE',
+                    taskId: msg.taskId,
+                    result,
+                });
+            }
+            finally {
+                // A script that ended (timeout, throw, or return) must not leave callTool
+                // promises pending for the life of the worker.
+                for (const pending of pendingToolCalls.values()) {
+                    pending.reject(new Error('callTool interrupted: script execution ended'));
+                }
+                pendingToolCalls.clear();
+            }
+        }
+    });
+}
+//# sourceMappingURL=sandbox.worker.js.map

package/dist/core/transforms/code-mode/sandbox.worker.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sandbox.worker.js","sourceRoot":"","sources":["../../../../src/core/transforms/code-mode/sandbox.worker.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,qBAAqB,CAAC;AAGjD,OAAO,EAAE,mBAAmB,EAAE,MAAM,sBAAsB,CAAC;AAE3D,IAAI,UAAU,EAAE,CAAC;IACf,MAAM,gBAAgB,GAAG,IAAI,GAAG,EAG7B,CAAC;IAEJ,UAAU,CAAC,EAAE,CAAC,SAAS,EAAE,KAAK,EAAE,GAAwB,EAAE,EAAE;QAC1D,IAAI,GAAG,CAAC,IAAI,KAAK,UAAU,EAAE,CAAC;YAC5B,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QAClB,CAAC;QAED,IAAI,GAAG,CAAC,IAAI,KAAK,eAAe,EAAE,CAAC;YACjC,MAAM,OAAO,GAAG,gBAAgB,CAAC,GAAG,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;YACjD,IAAI,OAAO,EAAE,CAAC;gBACZ,gBAAgB,CAAC,MAAM,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;gBACpC,IAAI,GAAG,CAAC,KAAK,EAAE,CAAC;oBACd,OAAO,CAAC,MAAM,CAAC,IAAI,KAAK,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC;gBACvC,CAAC;qBAAM,CAAC;oBACN,OAAO,CAAC,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;gBAC9B,CAAC;YACH,CAAC;YACD,OAAO;QACT,CAAC;QAED,IAAI,GAAG,CAAC,IAAI,KAAK,SAAS,EAAE,CAAC;YAC3B,IAAI,CAAC;gBACH,MAAM,MAAM,GAAG,MAAM,mBAAmB,CACtC,GAAG,CAAC,IAAI,EACR,GAAG,CAAC,MAAM,EACV,CAAC,QAAgB,EAAE,IAA6B,EAAE,EAAE;oBAClD,MAAM,MAAM,GAAG,MAAM,CAAC,UAAU,EAAE,CAAC;oBACnC,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;wBACrC,gBAAgB,CAAC,GAAG,CAAC,MAAM,EAAE,EAAE,OAAO,EAAE,MAAM,EAAE,CAAC,CAAC;wBAClD,UAAW,CAAC,WAAW,CAAC;4BACtB,IAAI,EAAE,cAAc;4BACpB,MAAM,EAAE,GAAG,CAAC,MAAM;4BAClB,MAAM;4BACN,QAAQ;4BACR,IAAI,EAAE,IAAI,IAAI,EAAE;yBACM,CAAC,CAAC;oBAC5B,CAAC,CAAC,CAAC;gBACL,CAAC,CACF,CAAC;gBAEF,UAAW,CAAC,WAAW,CAAC;oBACtB,IAAI,EAAE,oBAAoB;oBAC1B,MAAM,EAAE,GAAG,CAAC,MAAM;oBAClB,MAAM;iBACgB,CAAC,CAAC;YAC5B,CAAC;YAAC,OAAO,GAAY,EAAE,CAAC;gBACtB,MAAM,MAAM,GAA2B;oBACrC,OAAO,EAAE,KAAK;oBACd,KAAK,EAAE,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC;oBACvD,IAAI,EAAE,EAAE;oBACR,aAAa,EAAE,CAAC;oBAChB,UAAU,EAAE,CAAC;oBACb,YAAY,EAAE,CAAC;iBAChB,CAAC;gBAEF,UAAW,CAAC,WAAW,CAAC;oBACtB,IAAI,EAAE,oBAAoB;oBAC1B,MAAM,EAAE,GAAG,CAAC,MAAM;oBAClB,MAAM;iBACgB,CAAC,CAAC;YAC5B,CAAC;oBAAS,CAAC;gBACT,0EAA0E;gBAC1E,+CAA+C;gBAC/C,KAAK,MAAM,OAAO,IAAI,gBAAgB,CAAC,MAAM,EAAE,EAAE,CAAC;oBAChD,OAAO,CAAC,MAAM,CAAC,IAAI,KAAK,CAAC,8CAA8C,CAAC,CAAC,CAAC;gBAC5E,CAAC;gBACD,gBAAgB,CAAC,KAAK,EAAE,CAAC;YAC3B,CAAC;QACH,CAAC;IACH,CAAC,CAAC,CAAC;AACL,CAAC"}

package/dist/core/transforms/code-mode/synthetic-tools.d.ts

@@ -0,0 +1,23 @@
+import { Tool } from '../../tool.js';
+import { ExecutionContext } from '../../types.js';
+import { BM25Engine } from '../search/bm25.engine.js';
+import { WorkerPool } from './worker-pool.js';
+import { ExecutionLimits } from './types.js';
+export interface CodeModeSyntheticToolNames {
+    searchToolName?: string;
+    getSchemaToolName?: string;
+    executeToolName?: string;
+}
+/**
+ * Narrows a set of tool names to those the caller is authorized to see.
+ */
+export type AuthorizedToolFilter = (names: string[], context?: ExecutionContext) => Promise<Tool[]>;
+/**
+ * Builds the 3 synthetic meta-tools (search, get_schema, execute) for Code Mode.
+ */
+export declare function buildCodeModeTools(bm25Engine: BM25Engine<Tool>, rawTools: Map<string, Tool>, workerPool: WorkerPool, limits: ExecutionLimits, customNames?: CodeModeSyntheticToolNames, filterAuthorized?: AuthorizedToolFilter): {
+    searchTool: Tool;
+    getSchemaTool: Tool;
+    executeTool: Tool;
+};
+//# sourceMappingURL=synthetic-tools.d.ts.map

package/dist/core/transforms/code-mode/synthetic-tools.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"synthetic-tools.d.ts","sourceRoot":"","sources":["../../../../src/core/transforms/code-mode/synthetic-tools.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,IAAI,EAAE,MAAM,eAAe,CAAC;AACrC,OAAO,EAAE,gBAAgB,EAAE,MAAM,gBAAgB,CAAC;AAClD,OAAO,EAAE,UAAU,EAAE,MAAM,0BAA0B,CAAC;AAEtD,OAAO,EAAE,UAAU,EAAE,MAAM,kBAAkB,CAAC;AAC9C,OAAO,EAAE,eAAe,EAAE,MAAM,YAAY,CAAC;AAE7C,MAAM,WAAW,0BAA0B;IACzC,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,iBAAiB,CAAC,EAAE,MAAM,CAAC;IAC3B,eAAe,CAAC,EAAE,MAAM,CAAC;CAC1B;AAED;;GAEG;AACH,MAAM,MAAM,oBAAoB,GAAG,CACjC,KAAK,EAAE,MAAM,EAAE,EACf,OAAO,CAAC,EAAE,gBAAgB,KACvB,OAAO,CAAC,IAAI,EAAE,CAAC,CAAC;AAErB;;GAEG;AACH,wBAAgB,kBAAkB,CAChC,UAAU,EAAE,UAAU,CAAC,IAAI,CAAC,EAC5B,QAAQ,EAAE,GAAG,CAAC,MAAM,EAAE,IAAI,CAAC,EAC3B,UAAU,EAAE,UAAU,EACtB,MAAM,EAAE,eAAe,EACvB,WAAW,GAAE,0BAA+B,EAC5C,gBAAgB,GAAE,oBAC2D,GAC5E;IAAE,UAAU,EAAE,IAAI,CAAC;IAAC,aAAa,EAAE,IAAI,CAAC;IAAC,WAAW,EAAE,IAAI,CAAA;CAAE,CAwH9D"}