@nodetool-ai/agents 0.7.0-rc.23 → 0.8.1

package/dist/host-modules/tfjs.js

@@ -0,0 +1,186 @@
+/**
+ * `@nodetool-ai/sandbox-tfjs` — TensorFlow.js and its model zoo, on the host.
+ *
+ * The models are tens of megabytes of weights fetched over the network and
+ * held between calls; the guest has neither the heap for them nor a way to
+ * keep anything alive past a run. So the library runs here, each model is
+ * loaded once per process, and the guest passes encoded image bytes and gets
+ * plain records back.
+ *
+ * These are the four readings `lib.tensorflow.*` used to expose as nodes.
+ */
+import { imageOps } from "../sandbox-media.js";
+import { importOptionalLibrary, optionsOf, requireBytes, requireText } from "./limits.js";
+/** Predictions `classify` returns at most. */
+export const MAX_CLASSIFY_RESULTS = 100;
+/** Detections `detect` returns at most. */
+export const MAX_DETECTIONS = 100;
+/**
+ * Load once per process, and forget a rejection so a failed weight download
+ * does not poison every later call with the same settled promise.
+ */
+function once(factory) {
+    let pending = null;
+    return () => {
+        if (pending !== null)
+            return pending;
+        const promise = factory();
+        pending = promise;
+        promise.catch(() => {
+            if (pending === promise)
+                pending = null;
+        });
+        return promise;
+    };
+}
+const loadTf = once(async () => {
+    const tf = await importOptionalLibrary("tfjs", "@tensorflow/tfjs");
+    try {
+        await tf.setBackend?.("cpu");
+        await tf.ready?.();
+    }
+    catch {
+        // Backend selection is best-effort; the default backend still works.
+    }
+    return tf;
+});
+const loadMobileNet = once(async () => {
+    await loadTf();
+    const mod = await importOptionalLibrary("tfjs", "@tensorflow-models/mobilenet");
+    return mod.load({ version: 2, alpha: 1.0 });
+});
+const loadCocoSsd = once(async () => {
+    await loadTf();
+    const mod = await importOptionalLibrary("tfjs", "@tensorflow-models/coco-ssd");
+    return mod.load({ base: "mobilenet_v2" });
+});
+const loadQna = once(async () => {
+    await loadTf();
+    const mod = await importOptionalLibrary("tfjs", "@tensorflow-models/qna");
+    return mod.load();
+});
+/**
+ * Encoded image bytes to the int32 RGB tensor every vision model here wants.
+ *
+ * Decoding goes through the sandbox's own `image` backend, so an image the
+ * guest could not decode with `image.decode` cannot get in this way either,
+ * and the pixel caps that bridge enforces apply unchanged.
+ */
+async function toTensor(where, image) {
+    const bytes = requireBytes(where, image, "image");
+    const decoded = await imageOps.decode(bytes);
+    const width = Number(decoded.width);
+    const height = Number(decoded.height);
+    const rgba = decoded.pixels;
+    const rgb = new Uint8Array(width * height * 3);
+    for (let pixel = 0; pixel < width * height; pixel++) {
+        rgb[pixel * 3] = rgba[pixel * 4];
+        rgb[pixel * 3 + 1] = rgba[pixel * 4 + 1];
+        rgb[pixel * 3 + 2] = rgba[pixel * 4 + 2];
+    }
+    const tf = await loadTf();
+    return tf.tensor3d(rgb, [height, width, 3], "int32");
+}
+function bounded(value, fallback, min, max) {
+    const parsed = Number(value ?? fallback);
+    if (!Number.isFinite(parsed))
+        return fallback;
+    return Math.min(Math.max(parsed, min), max);
+}
+/**
+ * ImageNet labels for an image, most likely first.
+ *
+ * ```js
+ * const labels = await classify(await workspace.readBytes("cat.png"), { topK: 3 });
+ * ```
+ */
+export async function classify(image, options) {
+    const where = "tfjs.classify";
+    const opts = optionsOf(options);
+    const topK = Math.round(bounded(opts.topK, 5, 1, MAX_CLASSIFY_RESULTS));
+    const input = await toTensor(where, image);
+    try {
+        const model = await loadMobileNet();
+        const predictions = await model.classify(input, topK);
+        return predictions.map((prediction) => ({
+            className: prediction.className,
+            probability: prediction.probability
+        }));
+    }
+    finally {
+        input.dispose?.();
+    }
+}
+/**
+ * A MobileNet feature vector for an image — the penultimate layer, for
+ * nearest-neighbour search and transfer learning.
+ */
+export async function embed(image) {
+    const where = "tfjs.embed";
+    const input = await toTensor(where, image);
+    try {
+        const model = await loadMobileNet();
+        const embedding = model.infer(input, true);
+        try {
+            const rows = await embedding.array();
+            return rows[0] ?? [];
+        }
+        finally {
+            embedding.dispose?.();
+        }
+    }
+    finally {
+        input.dispose?.();
+    }
+}
+/**
+ * COCO-SSD object detections: a class, a score, and a pixel box each.
+ *
+ * ```js
+ * const objects = await detect(bytes, { maxBoxes: 10, minScore: 0.6 });
+ * ```
+ */
+export async function detect(image, options) {
+    const where = "tfjs.detect";
+    const opts = optionsOf(options);
+    const maxBoxes = Math.round(bounded(opts.maxBoxes, 20, 1, MAX_DETECTIONS));
+    const minScore = bounded(opts.minScore, 0.5, 0, 1);
+    const input = await toTensor(where, image);
+    try {
+        const model = await loadCocoSsd();
+        const detections = await model.detect(input, maxBoxes, minScore);
+        return detections.map((detection) => ({
+            className: detection.class,
+            score: detection.score,
+            bbox: {
+                x: detection.bbox[0],
+                y: detection.bbox[1],
+                width: detection.bbox[2],
+                height: detection.bbox[3]
+            }
+        }));
+    }
+    finally {
+        input.dispose?.();
+    }
+}
+/**
+ * Extractive question answering with BERT: spans of the passage that answer
+ * the question, best first. It quotes the passage — it never writes prose.
+ */
+export async function answer(question, passage) {
+    const where = "tfjs.answer";
+    const asked = requireText(where, question, "question").trim();
+    const text = requireText(where, passage, "passage").trim();
+    if (!asked || !text)
+        return [];
+    const model = await loadQna();
+    const answers = await model.findAnswers(asked, text);
+    return answers.map((found) => ({
+        text: found.text,
+        score: found.score,
+        startIndex: found.startIndex,
+        endIndex: found.endIndex
+    }));
+}
+//# sourceMappingURL=tfjs.js.map

package/dist/host-modules/tfjs.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"tfjs.js","sourceRoot":"","sources":["../../src/host-modules/tfjs.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AAEH,OAAO,EAAE,QAAQ,EAAE,MAAM,qBAAqB,CAAC;AAC/C,OAAO,EACL,qBAAqB,EACrB,SAAS,EACT,YAAY,EACZ,WAAW,EACZ,MAAM,aAAa,CAAC;AAErB,8CAA8C;AAC9C,MAAM,CAAC,MAAM,oBAAoB,GAAG,GAAG,CAAC;AACxC,2CAA2C;AAC3C,MAAM,CAAC,MAAM,cAAc,GAAG,GAAG,CAAC;AA0ClC;;;GAGG;AACH,SAAS,IAAI,CAAI,OAAyB;IACxC,IAAI,OAAO,GAAsB,IAAI,CAAC;IACtC,OAAO,GAAG,EAAE;QACV,IAAI,OAAO,KAAK,IAAI;YAAE,OAAO,OAAO,CAAC;QACrC,MAAM,OAAO,GAAG,OAAO,EAAE,CAAC;QAC1B,OAAO,GAAG,OAAO,CAAC;QAClB,OAAO,CAAC,KAAK,CAAC,GAAG,EAAE;YACjB,IAAI,OAAO,KAAK,OAAO;gBAAE,OAAO,GAAG,IAAI,CAAC;QAC1C,CAAC,CAAC,CAAC;QACH,OAAO,OAAO,CAAC;IACjB,CAAC,CAAC;AACJ,CAAC;AAED,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,IAAqB,EAAE;IAC9C,MAAM,EAAE,GAAG,MAAM,qBAAqB,CAAS,MAAM,EAAE,kBAAkB,CAAC,CAAC;IAC3E,IAAI,CAAC;QACH,MAAM,EAAE,CAAC,UAAU,EAAE,CAAC,KAAK,CAAC,CAAC;QAC7B,MAAM,EAAE,CAAC,KAAK,EAAE,EAAE,CAAC;IACrB,CAAC;IAAC,MAAM,CAAC;QACP,qEAAqE;IACvE,CAAC;IACD,OAAO,EAAE,CAAC;AACZ,CAAC,CAAC,CAAC;AAEH,MAAM,aAAa,GAAG,IAAI,CAAC,KAAK,IAA4B,EAAE;IAC5D,MAAM,MAAM,EAAE,CAAC;IACf,MAAM,GAAG,GAAG,MAAM,qBAAqB,CAEpC,MAAM,EAAE,8BAA8B,CAAC,CAAC;IAC3C,OAAO,GAAG,CAAC,IAAI,CAAC,EAAE,OAAO,EAAE,CAAC,EAAE,KAAK,EAAE,GAAG,EAAE,CAAC,CAAC;AAC9C,CAAC,CAAC,CAAC;AAEH,MAAM,WAAW,GAAG,IAAI,CAAC,KAAK,IAA0B,EAAE;IACxD,MAAM,MAAM,EAAE,CAAC;IACf,MAAM,GAAG,GAAG,MAAM,qBAAqB,CAEpC,MAAM,EAAE,6BAA6B,CAAC,CAAC;IAC1C,OAAO,GAAG,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,cAAc,EAAE,CAAC,CAAC;AAC5C,CAAC,CAAC,CAAC;AAEH,MAAM,OAAO,GAAG,IAAI,CAAC,KAAK,IAAsB,EAAE;IAChD,MAAM,MAAM,EAAE,CAAC;IACf,MAAM,GAAG,GAAG,MAAM,qBAAqB,CACrC,MAAM,EACN,wBAAwB,CACzB,CAAC;IACF,OAAO,GAAG,CAAC,IAAI,EAAE,CAAC;AACpB,CAAC,CAAC,CAAC;AAEH;;;;;;GAMG;AACH,KAAK,UAAU,QAAQ,CAAC,KAAa,EAAE,KAAc;IACnD,MAAM,KAAK,GAAG,YAAY,CAAC,KAAK,EAAE,KAAK,EAAE,OAAO,CAAC,CAAC;IAClD,MAAM,OAAO,GAAG,MAAM,QAAQ,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;IAC7C,MAAM,KAAK,GAAG,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;IACpC,MAAM,MAAM,GAAG,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;IACtC,MAAM,IAAI,GAAG,OAAO,CAAC,MAAoB,CAAC;IAC1C,MAAM,GAAG,GAAG,IAAI,UAAU,CAAC,KAAK,GAAG,MAAM,GAAG,CAAC,CAAC,CAAC;IAC/C,KAAK,IAAI,KAAK,GAAG,CAAC,EAAE,KAAK,GAAG,KAAK,GAAG,MAAM,EAAE,KAAK,EAAE,EAAE,CAAC;QACpD,GAAG,CAAC,KAAK,GAAG,CAAC,CAAC,GAAG,IAAI,CAAC,KAAK,GAAG,CAAC,CAAC,CAAC;QACjC,GAAG,CAAC,KAAK,GAAG,CAAC,GAAG,CAAC,CAAC,GAAG,IAAI,CAAC,KAAK,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC;QACzC,GAAG,CAAC,KAAK,GAAG,CAAC,GAAG,CAAC,CAAC,GAAG,IAAI,CAAC,KAAK,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC;IAC3C,CAAC;IACD,MAAM,EAAE,GAAG,MAAM,MAAM,EAAE,CAAC;IAC1B,OAAO,EAAE,CAAC,QAAQ,CAAC,GAAG,EAAE,CAAC,MAAM,EAAE,KAAK,EAAE,CAAC,CAAC,EAAE,OAAO,CAAC,CAAC;AACvD,CAAC;AAED,SAAS,OAAO,CAAC,KAAc,EAAE,QAAgB,EAAE,GAAW,EAAE,GAAW;IACzE,MAAM,MAAM,GAAG,MAAM,CAAC,KAAK,IAAI,QAAQ,CAAC,CAAC;IACzC,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC;QAAE,OAAO,QAAQ,CAAC;IAC9C,OAAO,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,GAAG,CAAC,MAAM,EAAE,GAAG,CAAC,EAAE,GAAG,CAAC,CAAC;AAC9C,CAAC;AAED;;;;;;GAMG;AACH,MAAM,CAAC,KAAK,UAAU,QAAQ,CAC5B,KAAc,EACd,OAAiB;IAEjB,MAAM,KAAK,GAAG,eAAe,CAAC;IAC9B,MAAM,IAAI,GAAG,SAAS,CAAC,OAAO,CAAC,CAAC;IAChC,MAAM,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC,EAAE,CAAC,EAAE,oBAAoB,CAAC,CAAC,CAAC;IACxE,MAAM,KAAK,GAAG,MAAM,QAAQ,CAAC,KAAK,EAAE,KAAK,CAAC,CAAC;IAC3C,IAAI,CAAC;QACH,MAAM,KAAK,GAAG,MAAM,aAAa,EAAE,CAAC;QACpC,MAAM,WAAW,GAAG,MAAM,KAAK,CAAC,QAAQ,CAAC,KAAK,EAAE,IAAI,CAAC,CAAC;QACtD,OAAO,WAAW,CAAC,GAAG,CAAC,CAAC,UAAU,EAAE,EAAE,CAAC,CAAC;YACtC,SAAS,EAAE,UAAU,CAAC,SAAS;YAC/B,WAAW,EAAE,UAAU,CAAC,WAAW;SACpC,CAAC,CAAC,CAAC;IACN,CAAC;YAAS,CAAC;QACT,KAAK,CAAC,OAAO,EAAE,EAAE,CAAC;IACpB,CAAC;AACH,CAAC;AAED;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,KAAK,CAAC,KAAc;IACxC,MAAM,KAAK,GAAG,YAAY,CAAC;IAC3B,MAAM,KAAK,GAAG,MAAM,QAAQ,CAAC,KAAK,EAAE,KAAK,CAAC,CAAC;IAC3C,IAAI,CAAC;QACH,MAAM,KAAK,GAAG,MAAM,aAAa,EAAE,CAAC;QACpC,MAAM,SAAS,GAAG,KAAK,CAAC,KAAK,CAAC,KAAK,EAAE,IAAI,CAAC,CAAC;QAC3C,IAAI,CAAC;YACH,MAAM,IAAI,GAAG,MAAM,SAAS,CAAC,KAAK,EAAE,CAAC;YACrC,OAAO,IAAI,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;QACvB,CAAC;gBAAS,CAAC;YACT,SAAS,CAAC,OAAO,EAAE,EAAE,CAAC;QACxB,CAAC;IACH,CAAC;YAAS,CAAC;QACT,KAAK,CAAC,OAAO,EAAE,EAAE,CAAC;IACpB,CAAC;AACH,CAAC;AAED;;;;;;GAMG;AACH,MAAM,CAAC,KAAK,UAAU,MAAM,CAC1B,KAAc,EACd,OAAiB;IAEjB,MAAM,KAAK,GAAG,aAAa,CAAC;IAC5B,MAAM,IAAI,GAAG,SAAS,CAAC,OAAO,CAAC,CAAC;IAChC,MAAM,QAAQ,GAAG,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,QAAQ,EAAE,EAAE,EAAE,CAAC,EAAE,cAAc,CAAC,CAAC,CAAC;IAC3E,MAAM,QAAQ,GAAG,OAAO,CAAC,IAAI,CAAC,QAAQ,EAAE,GAAG,EAAE,CAAC,EAAE,CAAC,CAAC,CAAC;IACnD,MAAM,KAAK,GAAG,MAAM,QAAQ,CAAC,KAAK,EAAE,KAAK,CAAC,CAAC;IAC3C,IAAI,CAAC;QACH,MAAM,KAAK,GAAG,MAAM,WAAW,EAAE,CAAC;QAClC,MAAM,UAAU,GAAG,MAAM,KAAK,CAAC,MAAM,CAAC,KAAK,EAAE,QAAQ,EAAE,QAAQ,CAAC,CAAC;QACjE,OAAO,UAAU,CAAC,GAAG,CAAC,CAAC,SAAS,EAAE,EAAE,CAAC,CAAC;YACpC,SAAS,EAAE,SAAS,CAAC,KAAK;YAC1B,KAAK,EAAE,SAAS,CAAC,KAAK;YACtB,IAAI,EAAE;gBACJ,CAAC,EAAE,SAAS,CAAC,IAAI,CAAC,CAAC,CAAC;gBACpB,CAAC,EAAE,SAAS,CAAC,IAAI,CAAC,CAAC,CAAC;gBACpB,KAAK,EAAE,SAAS,CAAC,IAAI,CAAC,CAAC,CAAC;gBACxB,MAAM,EAAE,SAAS,CAAC,IAAI,CAAC,CAAC,CAAC;aAC1B;SACF,CAAC,CAAC,CAAC;IACN,CAAC;YAAS,CAAC;QACT,KAAK,CAAC,OAAO,EAAE,EAAE,CAAC;IACpB,CAAC;AACH,CAAC;AAED;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,MAAM,CAC1B,QAAiB,EACjB,OAAgB;IAEhB,MAAM,KAAK,GAAG,aAAa,CAAC;IAC5B,MAAM,KAAK,GAAG,WAAW,CAAC,KAAK,EAAE,QAAQ,EAAE,UAAU,CAAC,CAAC,IAAI,EAAE,CAAC;IAC9D,MAAM,IAAI,GAAG,WAAW,CAAC,KAAK,EAAE,OAAO,EAAE,SAAS,CAAC,CAAC,IAAI,EAAE,CAAC;IAC3D,IAAI,CAAC,KAAK,IAAI,CAAC,IAAI;QAAE,OAAO,EAAE,CAAC;IAC/B,MAAM,KAAK,GAAG,MAAM,OAAO,EAAE,CAAC;IAC9B,MAAM,OAAO,GAAG,MAAM,KAAK,CAAC,WAAW,CAAC,KAAK,EAAE,IAAI,CAAC,CAAC;IACrD,OAAO,OAAO,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;QAC7B,IAAI,EAAE,KAAK,CAAC,IAAI;QAChB,KAAK,EAAE,KAAK,CAAC,KAAK;QAClB,UAAU,EAAE,KAAK,CAAC,UAAU;QAC5B,QAAQ,EAAE,KAAK,CAAC,QAAQ;KACzB,CAAC,CAAC,CAAC;AACN,CAAC"}

package/dist/host-modules/tokens.d.ts

@@ -0,0 +1,17 @@
+/**
+ * `@nodetool-ai/sandbox-tokens` — js-tiktoken, on the host.
+ *
+ * The BPE ranks for one encoding are several megabytes of base64 that the
+ * compiler would have to inline into a guest bundle capped at 1 MB, so this
+ * cannot be a guest module. It runs here, and the ranks load once per process
+ * per encoding.
+ *
+ * This is what `nodetool.text.CountTokens` used to be.
+ */
+/** How many tokens `text` costs under `encoding` (default cl100k_base). */
+export declare function count(text: unknown, encoding?: unknown): Promise<number>;
+/** The token ids `text` encodes to. */
+export declare function encode(text: unknown, encoding?: unknown): Promise<number[]>;
+/** The text a token id list decodes back to. */
+export declare function decode(tokens: unknown, encoding?: unknown): Promise<string>;
+//# sourceMappingURL=tokens.d.ts.map

package/dist/host-modules/tokens.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"tokens.d.ts","sourceRoot":"","sources":["../../src/host-modules/tokens.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AAgDH,2EAA2E;AAC3E,wBAAsB,KAAK,CAAC,IAAI,EAAE,OAAO,EAAE,QAAQ,CAAC,EAAE,OAAO,GAAG,OAAO,CAAC,MAAM,CAAC,CAM9E;AAED,uCAAuC;AACvC,wBAAsB,MAAM,CAC1B,IAAI,EAAE,OAAO,EACb,QAAQ,CAAC,EAAE,OAAO,GACjB,OAAO,CAAC,MAAM,EAAE,CAAC,CAMnB;AAED,gDAAgD;AAChD,wBAAsB,MAAM,CAC1B,MAAM,EAAE,OAAO,EACf,QAAQ,CAAC,EAAE,OAAO,GACjB,OAAO,CAAC,MAAM,CAAC,CAejB"}

package/dist/host-modules/tokens.js

@@ -0,0 +1,74 @@
+/**
+ * `@nodetool-ai/sandbox-tokens` — js-tiktoken, on the host.
+ *
+ * The BPE ranks for one encoding are several megabytes of base64 that the
+ * compiler would have to inline into a guest bundle capped at 1 MB, so this
+ * cannot be a guest module. It runs here, and the ranks load once per process
+ * per encoding.
+ *
+ * This is what `nodetool.text.CountTokens` used to be.
+ */
+import { requireText, unwrapLibrary } from "./limits.js";
+import { isFunction, isString } from "../utils/type-guards.js";
+/** The encodings js-tiktoken ships ranks for, as the old node offered them. */
+const ENCODINGS = ["cl100k_base", "p50k_base", "r50k_base", "o200k_base"];
+/** The encoding an argument names, defaulted, or a named error for the guest. */
+function requireEncoding(where, value) {
+    if (value === undefined || value === null)
+        return "cl100k_base";
+    if (!isString(value) || !ENCODINGS.includes(value)) {
+        throw new Error(`${where}: encoding must be one of ${ENCODINGS.join(", ")}`);
+    }
+    return value;
+}
+async function loadTiktoken(where) {
+    const mod = await import("js-tiktoken");
+    return unwrapLibrary(mod, where, "js-tiktoken", (v) => isFunction(v?.getEncoding));
+}
+const encoders = new Map();
+async function encoderFor(where, encoding) {
+    const cached = encoders.get(encoding);
+    if (cached !== undefined)
+        return cached;
+    const lib = await loadTiktoken(where);
+    const encoder = lib.getEncoding(encoding);
+    encoders.set(encoding, encoder);
+    return encoder;
+}
+/** How many tokens `text` costs under `encoding` (default cl100k_base). */
+export async function count(text, encoding) {
+    const where = "tokens.count";
+    const value = requireText(where, text);
+    if (value === "")
+        return 0;
+    const encoder = await encoderFor(where, requireEncoding(where, encoding));
+    return encoder.encode(value).length;
+}
+/** The token ids `text` encodes to. */
+export async function encode(text, encoding) {
+    const where = "tokens.encode";
+    const value = requireText(where, text);
+    if (value === "")
+        return [];
+    const encoder = await encoderFor(where, requireEncoding(where, encoding));
+    return encoder.encode(value);
+}
+/** The text a token id list decodes back to. */
+export async function decode(tokens, encoding) {
+    const where = "tokens.decode";
+    if (!Array.isArray(tokens)) {
+        throw new Error(`${where}: tokens must be an array of token ids`);
+    }
+    const ids = tokens.map((token) => {
+        const id = Number(token);
+        if (!Number.isInteger(id) || id < 0) {
+            throw new Error(`${where}: tokens must be non-negative integers`);
+        }
+        return id;
+    });
+    if (ids.length === 0)
+        return "";
+    const encoder = await encoderFor(where, requireEncoding(where, encoding));
+    return encoder.decode(ids);
+}
+//# sourceMappingURL=tokens.js.map

package/dist/host-modules/tokens.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"tokens.js","sourceRoot":"","sources":["../../src/host-modules/tokens.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AAEH,OAAO,EAAE,WAAW,EAAE,aAAa,EAAE,MAAM,aAAa,CAAC;AACzD,OAAO,EAAE,UAAU,EAAE,QAAQ,EAAE,MAAM,yBAAyB,CAAC;AAE/D,+EAA+E;AAC/E,MAAM,SAAS,GAAG,CAAC,aAAa,EAAE,WAAW,EAAE,WAAW,EAAE,YAAY,CAAU,CAAC;AAanF,iFAAiF;AACjF,SAAS,eAAe,CAAC,KAAa,EAAE,KAAc;IACpD,IAAI,KAAK,KAAK,SAAS,IAAI,KAAK,KAAK,IAAI;QAAE,OAAO,aAAa,CAAC;IAChE,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC,KAAqB,CAAC,EAAE,CAAC;QACnE,MAAM,IAAI,KAAK,CACb,GAAG,KAAK,6BAA6B,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAC5D,CAAC;IACJ,CAAC;IACD,OAAO,KAAqB,CAAC;AAC/B,CAAC;AAED,KAAK,UAAU,YAAY,CAAC,KAAa;IACvC,MAAM,GAAG,GAAY,MAAM,MAAM,CAAC,aAAa,CAAC,CAAC;IACjD,OAAO,aAAa,CAAe,GAAG,EAAE,KAAK,EAAE,aAAa,EAAE,CAAC,CAAC,EAAE,EAAE,CAClE,UAAU,CAAE,CAA8B,EAAE,WAAW,CAAC,CACzD,CAAC;AACJ,CAAC;AAED,MAAM,QAAQ,GAAG,IAAI,GAAG,EAAyB,CAAC;AAElD,KAAK,UAAU,UAAU,CAAC,KAAa,EAAE,QAAsB;IAC7D,MAAM,MAAM,GAAG,QAAQ,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;IACtC,IAAI,MAAM,KAAK,SAAS;QAAE,OAAO,MAAM,CAAC;IACxC,MAAM,GAAG,GAAG,MAAM,YAAY,CAAC,KAAK,CAAC,CAAC;IACtC,MAAM,OAAO,GAAG,GAAG,CAAC,WAAW,CAAC,QAAQ,CAAC,CAAC;IAC1C,QAAQ,CAAC,GAAG,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC;IAChC,OAAO,OAAO,CAAC;AACjB,CAAC;AAED,2EAA2E;AAC3E,MAAM,CAAC,KAAK,UAAU,KAAK,CAAC,IAAa,EAAE,QAAkB;IAC3D,MAAM,KAAK,GAAG,cAAc,CAAC;IAC7B,MAAM,KAAK,GAAG,WAAW,CAAC,KAAK,EAAE,IAAI,CAAC,CAAC;IACvC,IAAI,KAAK,KAAK,EAAE;QAAE,OAAO,CAAC,CAAC;IAC3B,MAAM,OAAO,GAAG,MAAM,UAAU,CAAC,KAAK,EAAE,eAAe,CAAC,KAAK,EAAE,QAAQ,CAAC,CAAC,CAAC;IAC1E,OAAO,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,MAAM,CAAC;AACtC,CAAC;AAED,uCAAuC;AACvC,MAAM,CAAC,KAAK,UAAU,MAAM,CAC1B,IAAa,EACb,QAAkB;IAElB,MAAM,KAAK,GAAG,eAAe,CAAC;IAC9B,MAAM,KAAK,GAAG,WAAW,CAAC,KAAK,EAAE,IAAI,CAAC,CAAC;IACvC,IAAI,KAAK,KAAK,EAAE;QAAE,OAAO,EAAE,CAAC;IAC5B,MAAM,OAAO,GAAG,MAAM,UAAU,CAAC,KAAK,EAAE,eAAe,CAAC,KAAK,EAAE,QAAQ,CAAC,CAAC,CAAC;IAC1E,OAAO,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;AAC/B,CAAC;AAED,gDAAgD;AAChD,MAAM,CAAC,KAAK,UAAU,MAAM,CAC1B,MAAe,EACf,QAAkB;IAElB,MAAM,KAAK,GAAG,eAAe,CAAC;IAC9B,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC;QAC3B,MAAM,IAAI,KAAK,CAAC,GAAG,KAAK,wCAAwC,CAAC,CAAC;IACpE,CAAC;IACD,MAAM,GAAG,GAAG,MAAM,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE;QAC/B,MAAM,EAAE,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC;QACzB,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,EAAE,CAAC,IAAI,EAAE,GAAG,CAAC,EAAE,CAAC;YACpC,MAAM,IAAI,KAAK,CAAC,GAAG,KAAK,wCAAwC,CAAC,CAAC;QACpE,CAAC;QACD,OAAO,EAAE,CAAC;IACZ,CAAC,CAAC,CAAC;IACH,IAAI,GAAG,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,EAAE,CAAC;IAChC,MAAM,OAAO,GAAG,MAAM,UAAU,CAAC,KAAK,EAAE,eAAe,CAAC,KAAK,EAAE,QAAQ,CAAC,CAAC,CAAC;IAC1E,OAAO,OAAO,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;AAC7B,CAAC"}

package/dist/host-modules/twilio.d.ts

@@ -0,0 +1,34 @@
+/**
+ * `@nodetool-ai/sandbox-twilio` — Twilio's request shape, on the host.
+ *
+ * Twilio is HTTP Basic auth over form-encoded bodies, on a URL that buries the
+ * account SID in the path. None of that is hard; all of it is easy to get
+ * wrong once, and the failure is a 401 that names nothing. The helper builds
+ * the request; the guest sends it.
+ */
+import { type PreparedRequest } from "./prepared-request.js";
+/**
+ * Build an authenticated Twilio request.
+ *
+ * ```js
+ * import { request } from "@nodetool-ai/sandbox-twilio";
+ *
+ * const req = await request({
+ *   accountSid: await nodetool.secrets.get("TWILIO_ACCOUNT_SID"),
+ *   authToken: await nodetool.secrets.get("TWILIO_AUTH_TOKEN"),
+ *   path: "Messages.json",
+ *   method: "POST",
+ *   params: { To: "+15551234567", From: "+15559876543", Body: "shipped" }
+ * });
+ * const res = await fetch(req.url, req);
+ * ```
+ *
+ * A `path` without a leading slash is an Account resource and is placed under
+ * `/2010-04-01/Accounts/<sid>/`. One with a leading slash is used as written,
+ * which is how the other products are reached — pass
+ * `{ host: "lookups.twilio.com", path: "/v2/PhoneNumbers/+15551234567" }`.
+ *
+ * `params` become the form body on a write and the query string on a read.
+ */
+export declare function request(options?: unknown): Promise<PreparedRequest>;
+//# sourceMappingURL=twilio.d.ts.map

package/dist/host-modules/twilio.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"twilio.d.ts","sourceRoot":"","sources":["../../src/host-modules/twilio.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAGH,OAAO,EAML,KAAK,eAAe,EACrB,MAAM,uBAAuB,CAAC;AAK/B;;;;;;;;;;;;;;;;;;;;;;GAsBG;AACH,wBAAsB,OAAO,CAAC,OAAO,CAAC,EAAE,OAAO,GAAG,OAAO,CAAC,eAAe,CAAC,CAqCzE"}

package/dist/host-modules/twilio.js

@@ -0,0 +1,67 @@
+/**
+ * `@nodetool-ai/sandbox-twilio` — Twilio's request shape, on the host.
+ *
+ * Twilio is HTTP Basic auth over form-encoded bodies, on a URL that buries the
+ * account SID in the path. None of that is hard; all of it is easy to get
+ * wrong once, and the failure is a 401 that names nothing. The helper builds
+ * the request; the guest sends it.
+ */
+import { optionsOf } from "./limits.js";
+import { base64Utf8, formBody, methodOf, requireString, withQuery } from "./prepared-request.js";
+/** The API version every Account resource path carries. */
+const ACCOUNT_API_VERSION = "2010-04-01";
+/**
+ * Build an authenticated Twilio request.
+ *
+ * ```js
+ * import { request } from "@nodetool-ai/sandbox-twilio";
+ *
+ * const req = await request({
+ *   accountSid: await nodetool.secrets.get("TWILIO_ACCOUNT_SID"),
+ *   authToken: await nodetool.secrets.get("TWILIO_AUTH_TOKEN"),
+ *   path: "Messages.json",
+ *   method: "POST",
+ *   params: { To: "+15551234567", From: "+15559876543", Body: "shipped" }
+ * });
+ * const res = await fetch(req.url, req);
+ * ```
+ *
+ * A `path` without a leading slash is an Account resource and is placed under
+ * `/2010-04-01/Accounts/<sid>/`. One with a leading slash is used as written,
+ * which is how the other products are reached — pass
+ * `{ host: "lookups.twilio.com", path: "/v2/PhoneNumbers/+15551234567" }`.
+ *
+ * `params` become the form body on a write and the query string on a read.
+ */
+export async function request(options) {
+    const where = "twilio.request";
+    const opts = optionsOf(options);
+    const accountSid = requireString(where, opts.accountSid, "accountSid");
+    const authToken = requireString(where, opts.authToken, "authToken");
+    const path = requireString(where, opts.path, "path");
+    const method = methodOf(opts.method, "GET");
+    const host = String(opts.host ?? "api.twilio.com");
+    if (!/^[a-z0-9.-]+\.twilio\.com$/.test(host)) {
+        throw new Error(`${where}: host must be a twilio.com host, got "${host}"`);
+    }
+    const url = new URL(path.startsWith("/")
+        ? path
+        : `/${ACCOUNT_API_VERSION}/Accounts/${encodeURIComponent(accountSid)}/${path}`, `https://${host}`);
+    const headers = {
+        Authorization: `Basic ${base64Utf8(`${accountSid}:${authToken}`)}`
+    };
+    if (method === "GET" || method === "DELETE") {
+        withQuery(url, opts.params);
+        withQuery(url, opts.query);
+        return { url: url.toString(), method, headers };
+    }
+    withQuery(url, opts.query);
+    headers["Content-Type"] = "application/x-www-form-urlencoded";
+    return {
+        url: url.toString(),
+        method,
+        headers,
+        body: formBody(where, opts.params)
+    };
+}
+//# sourceMappingURL=twilio.js.map

package/dist/host-modules/twilio.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"twilio.js","sourceRoot":"","sources":["../../src/host-modules/twilio.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAEH,OAAO,EAAE,SAAS,EAAE,MAAM,aAAa,CAAC;AACxC,OAAO,EACL,UAAU,EACV,QAAQ,EACR,QAAQ,EACR,aAAa,EACb,SAAS,EAEV,MAAM,uBAAuB,CAAC;AAE/B,2DAA2D;AAC3D,MAAM,mBAAmB,GAAG,YAAY,CAAC;AAEzC;;;;;;;;;;;;;;;;;;;;;;GAsBG;AACH,MAAM,CAAC,KAAK,UAAU,OAAO,CAAC,OAAiB;IAC7C,MAAM,KAAK,GAAG,gBAAgB,CAAC;IAC/B,MAAM,IAAI,GAAG,SAAS,CAAC,OAAO,CAAC,CAAC;IAChC,MAAM,UAAU,GAAG,aAAa,CAAC,KAAK,EAAE,IAAI,CAAC,UAAU,EAAE,YAAY,CAAC,CAAC;IACvE,MAAM,SAAS,GAAG,aAAa,CAAC,KAAK,EAAE,IAAI,CAAC,SAAS,EAAE,WAAW,CAAC,CAAC;IACpE,MAAM,IAAI,GAAG,aAAa,CAAC,KAAK,EAAE,IAAI,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;IACrD,MAAM,MAAM,GAAG,QAAQ,CAAC,IAAI,CAAC,MAAM,EAAE,KAAK,CAAC,CAAC;IAC5C,MAAM,IAAI,GAAG,MAAM,CAAC,IAAI,CAAC,IAAI,IAAI,gBAAgB,CAAC,CAAC;IACnD,IAAI,CAAC,4BAA4B,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;QAC7C,MAAM,IAAI,KAAK,CAAC,GAAG,KAAK,0CAA0C,IAAI,GAAG,CAAC,CAAC;IAC7E,CAAC;IAED,MAAM,GAAG,GAAG,IAAI,GAAG,CACjB,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC;QAClB,CAAC,CAAC,IAAI;QACN,CAAC,CAAC,IAAI,mBAAmB,aAAa,kBAAkB,CAAC,UAAU,CAAC,IAAI,IAAI,EAAE,EAChF,WAAW,IAAI,EAAE,CAClB,CAAC;IAEF,MAAM,OAAO,GAA2B;QACtC,aAAa,EAAE,SAAS,UAAU,CAAC,GAAG,UAAU,IAAI,SAAS,EAAE,CAAC,EAAE;KACnE,CAAC;IAEF,IAAI,MAAM,KAAK,KAAK,IAAI,MAAM,KAAK,QAAQ,EAAE,CAAC;QAC5C,SAAS,CAAC,GAAG,EAAE,IAAI,CAAC,MAAM,CAAC,CAAC;QAC5B,SAAS,CAAC,GAAG,EAAE,IAAI,CAAC,KAAK,CAAC,CAAC;QAC3B,OAAO,EAAE,GAAG,EAAE,GAAG,CAAC,QAAQ,EAAE,EAAE,MAAM,EAAE,OAAO,EAAE,CAAC;IAClD,CAAC;IAED,SAAS,CAAC,GAAG,EAAE,IAAI,CAAC,KAAK,CAAC,CAAC;IAC3B,OAAO,CAAC,cAAc,CAAC,GAAG,mCAAmC,CAAC;IAC9D,OAAO;QACL,GAAG,EAAE,GAAG,CAAC,QAAQ,EAAE;QACnB,MAAM;QACN,OAAO;QACP,IAAI,EAAE,QAAQ,CAAC,KAAK,EAAE,IAAI,CAAC,MAAM,CAAC;KACnC,CAAC;AACJ,CAAC"}

package/dist/host-modules/xlsx.d.ts

@@ -0,0 +1,26 @@
+/**
+ * `@nodetool-ai/sandbox-xlsx` — exceljs, on the host.
+ *
+ * exceljs is built on Node streams and ships its own zip layer; it is not a
+ * guest-module candidate and never will be. It runs here, and the guest gets
+ * records back, or hands records over and gets workbook bytes.
+ */
+/** Sheets one `write` call may produce. */
+export declare const MAX_WRITE_SHEETS = 64;
+/** Cells one `write` call may produce, across every sheet. */
+export declare const MAX_WRITE_CELLS = 250000;
+/**
+ * Excel workbook bytes to records per sheet; pass `sheet` to get one sheet's
+ * rows directly. Formula cells yield their computed result.
+ */
+export declare function parse(bytes: unknown, options?: unknown): Promise<unknown[] | Record<string, unknown[]>>;
+/**
+ * Records to workbook bytes.
+ *
+ * `sheets` is either `{"Costs": [...]}` or `[{name, rows, header, columns,
+ * styles}]`. Rows are records by default, keyed by the union of their keys in
+ * first-seen order; `header: false` takes arrays of cells instead. Column
+ * widths are fitted to the content unless `autoFitColumns: false`.
+ */
+export declare function write(sheets: unknown, options?: unknown): Promise<Uint8Array>;
+//# sourceMappingURL=xlsx.d.ts.map

package/dist/host-modules/xlsx.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"xlsx.d.ts","sourceRoot":"","sources":["../../src/host-modules/xlsx.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AASH,2CAA2C;AAC3C,eAAO,MAAM,gBAAgB,KAAK,CAAC;AACnC,8DAA8D;AAC9D,eAAO,MAAM,eAAe,SAAU,CAAC;AA2DvC;;;GAGG;AACH,wBAAsB,KAAK,CACzB,KAAK,EAAE,OAAO,EACd,OAAO,CAAC,EAAE,OAAO,GAChB,OAAO,CAAC,OAAO,EAAE,GAAG,MAAM,CAAC,MAAM,EAAE,OAAO,EAAE,CAAC,CAAC,CAoEhD;AAkKD;;;;;;;GAOG;AACH,wBAAsB,KAAK,CAAC,MAAM,EAAE,OAAO,EAAE,OAAO,CAAC,EAAE,OAAO,GAAG,OAAO,CAAC,UAAU,CAAC,CAqGnF"}