@tangle-network/agent-runtime 0.169.0 → 0.171.0

package/dist/graph.js

@@ -2,190 +2,9 @@ import { m as ValidationError } from "./errors-CDZ8XsVj.js";
 import { d as replaySpawnTree, i as InMemorySpawnJournal, l as materializeTreeView, o as closesCursorSlot, r as InMemoryResultBlobStore, u as pendingWaits, x as contentAddress } from "./spawn-journal-Tgvp5VS5.js";
 import { t as addSpend } from "./util-D6ZEuBMi.js";
 import { N as createBudgetPool, U as createExecutorRegistry, a as uncertainSpawnBudgets, i as sumMeasuredSpendFromEvents, l as runFinalizer, o as bestDelivered, p as createScope, r as maxSeqOf, s as collectDelivered } from "./supervisor-B-mmmiOU.js";
-import { i as workerFromBackend, s as supervisorAgent } from "./supervise-rEE46ruH.js";
-import { t as GraphEdgeCapError } from "./graph-ZDMygFIo.js";
-//#region src/runtime/graph/codemode.ts
-const IDENTIFIER = /^[A-Za-z_$][A-Za-z0-9_$]*$/u;
-/**
-* Refuse the obvious escapes in authored source. A LINT, not a sandbox: it reads text and cannot
-* constrain what running code does. Generalized from `strategy-author.ts`'s contract check, which
-* has guarded agent-authored optimization strategies since 0.60.
-*/
-function assertAuthoredCode(code, options = {}) {
-	const context = options.context ?? "authored code";
-	const allowed = options.allowedImports ?? [];
-	for (const line of code.split("\n")) {
-		if (!/^\s*import\s/.test(line)) continue;
-		if (!allowed.some((specifier) => line.includes(`'${specifier}'`) || line.includes(`"${specifier}"`))) throw new ValidationError(`${context} rejected: foreign import — ${line.trim().slice(0, 120)}${allowed.length === 0 ? " (no import is allowed here)" : ` (allowed: ${allowed.join(", ")})`}`);
-	}
-	for (const [pattern, what] of [
-		[/\brequire\s*\(/, "require()"],
-		[/\bimport\s*\(/, "dynamic import()"],
-		[/\beval\s*\(/, "eval()"],
-		[/new\s+Function\s*\(/, "new Function()"],
-		[/\bprocess\s*[.[]/, "process access"],
-		[/\bglobalThis\s*[.[]/, "globalThis access"],
-		[/\bfetch\s*\(/, "network access"],
-		[/child_process|node:fs|node:net|node:http|worker_threads/, "node builtin access"]
-	]) if (pattern.test(code)) throw new ValidationError(`${context} rejected: ${what}`);
-}
-/** The API doc the model is shown — generated from the grant, so the two cannot disagree. */
-function renderCodeApi(config) {
-	return [
-		"Write ONE async function body. It may call only these operations:",
-		"",
-		...config.operations.map((operation) => `  ${operation.signature}\n    // ${operation.description}`),
-		"",
-		"Return the result as the body's return value. No imports, no require, no process, no fetch.",
-		"Reply with a single fenced code block and nothing else.",
-		"",
-		`TASK: ${config.task}`
-	].join("\n");
-}
-/** Pull the first fenced block out of a model reply; the whole reply if it carries no fence. */
-function extractCodeBlock(reply) {
-	const code = (/```(?:[a-zA-Z]*)\n([\s\S]*?)```/u.exec(reply)?.[1] ?? reply).trim();
-	if (code.length === 0) throw new ValidationError("codemode: the model returned no code");
-	return code;
-}
-/**
-* A node that asks a model for a program and runs it. Declares the two effects it cannot supply
-* itself — `model` (who writes the code) and `codeRunner` (where it runs) — so the host owns both.
-*/
-function codemodeKind() {
-	return {
-		id: "codemode",
-		version: 1,
-		description: "Ask a model for a program over a granted API, then run it as one node.",
-		validateConfig: (raw, context) => {
-			if (typeof raw !== "object" || raw === null || Array.isArray(raw)) throw new ValidationError(`${context}: codemode config must be an object`);
-			const config = raw;
-			if (typeof config.task !== "string" || config.task.trim().length === 0) throw new ValidationError(`${context}: codemode config.task must be a non-empty string`);
-			if (!Array.isArray(config.operations) || config.operations.length === 0) throw new ValidationError(`${context}: codemode config.operations must grant at least one operation`);
-			const seen = /* @__PURE__ */ new Set();
-			for (const operation of config.operations) {
-				if (!IDENTIFIER.test(operation?.name ?? "")) throw new ValidationError(`${context}: operation name ${JSON.stringify(operation?.name)} is not a JS identifier`);
-				if (seen.has(operation.name)) throw new ValidationError(`${context}: duplicate operation ${operation.name}`);
-				seen.add(operation.name);
-				if (typeof operation.call !== "function") throw new ValidationError(`${context}: operation ${operation.name} has no call`);
-			}
-			return {
-				operations: config.operations,
-				task: config.task,
-				...config.allowedImports === void 0 ? {} : { allowedImports: config.allowedImports }
-			};
-		},
-		configSchema: {
-			type: "object",
-			properties: {
-				task: { type: "string" },
-				operations: { type: "array" }
-			},
-			required: ["task", "operations"]
-		},
-		inputs: [{
-			name: "context",
-			schema: {}
-		}],
-		outputs: [],
-		effects: ["model", "codeRunner"],
-		onCrash: "restart",
-		budget: "metered",
-		run: ({ config, profile, inputs, effects }) => {
-			const author = effects.model;
-			const runner = effects.codeRunner;
-			let artifact;
-			return {
-				name: profile.name ?? "codemode",
-				act: () => Promise.reject(new ValidationError("codemode: act() is not the execution path")),
-				executorSpec: {
-					profile,
-					harness: null,
-					executor: {
-						runtime: "inline",
-						async execute(task, signal) {
-							const spends = [];
-							const prompt = [
-								renderCodeApi(config),
-								inputs.context === void 0 ? "" : `\nCONTEXT: ${JSON.stringify(inputs.context)}`,
-								typeof task === "string" && task.length > 0 ? `\n${task}` : ""
-							].filter((part) => part.length > 0).join("\n");
-							const authored = await author.complete({
-								prompt,
-								profile,
-								signal
-							});
-							if (authored.spend) spends.push(authored.spend);
-							const code = extractCodeBlock(authored.text);
-							assertAuthoredCode(code, {
-								...config.allowedImports === void 0 ? {} : { allowedImports: config.allowedImports },
-								context: `codemode ${JSON.stringify(profile.name ?? "node")}`
-							});
-							const api = {};
-							for (const operation of config.operations) api[operation.name] = async (...args) => {
-								const result = await operation.call(...args);
-								if (result?.spend) spends.push(result.spend);
-								return result?.value;
-							};
-							const out = await runner.run({
-								code,
-								api: Object.freeze(api),
-								signal
-							});
-							artifact = {
-								outRef: contentAddress({ codemode: out }),
-								out,
-								spent: totalSpend(spends)
-							};
-							return artifact;
-						},
-						teardown: () => Promise.resolve({ destroyed: true }),
-						resultArtifact: () => {
-							if (!artifact) throw new ValidationError("codemode: resultArtifact() read before execute()");
-							return artifact;
-						}
-					}
-				}
-			};
-		}
-	};
-}
-/** The node's spend is the model call plus every operation that reported one. An operation that
-*  reports nothing is not assumed free — it contributes an UNKNOWN mark, like the kernel's own. */
-function totalSpend(parts) {
-	return parts.reduce((total, part) => ({
-		iterations: total.iterations + (part.iterations ?? 0),
-		tokens: {
-			input: total.tokens.input + (part.tokens?.input ?? 0),
-			output: total.tokens.output + (part.tokens?.output ?? 0),
-			...part.tokens?.tokensKnown === false ? { tokensKnown: false } : {}
-		},
-		usd: total.usd + (part.usd ?? 0),
-		...part.usdKnown === false ? { usdKnown: false } : {},
-		ms: total.ms + (part.ms ?? 0)
-	}), {
-		iterations: 1,
-		tokens: {
-			input: 0,
-			output: 0
-		},
-		usd: 0,
-		ms: 0
-	});
-}
-/**
-* An in-process `codeRunner`: builds the authored body as a function with the granted API in
-* scope. **A development convenience, not a security boundary** — `assertAuthoredCode` is a lint,
-* and code running in this process can reach whatever the process can. Supply a jailed runner for
-* code you did not write.
-*/
-function inlineCodeRunner() {
-	return { async run({ code, api }) {
-		const names = Object.keys(api);
-		return new Function(...names, `"use strict"; return (async () => { ${code} })()`)(...names.map((name) => api[name]));
-	} };
-}
-//#endregion
+import { i as workerFromBackend, s as supervisorAgent } from "./supervise-CG7JDcEG.js";
+import { t as assertAuthoredCode } from "./authored-code-DzYtiflw.js";
+import { t as GraphEdgeCapError } from "./graph-DK_za3yj.js";
 //#region src/runtime/graph/condition.ts
 /**
 * The ONE predicate tree: every guard in a graph — an edge `guard`, a filter projection's
@@ -2254,6 +2073,6 @@ async function runGraphLoop(engine, compiled, task, options, wakes, onWakeSignal
 	});
 }
 //#endregion
-export { CONDITION_OPS, DEFAULT_MAX_NODE_VISITS, ENGINE_WOKEN_SEQ_BASE, JOIN_RULES, MAX_MAX_NODE_VISITS, RUN_GRAPH_ROOT_KIND, admitPayload, agentKind, applyGraphFoldEvent, applyProjection, assembleGraphResult, assertAuthoredCode, codemodeKind, compileGraph, createEdgeLedger, createGraphEngine, createGraphRun, createRegistry, decideJoin, emptyFoldState, evaluateCondition, extractCodeBlock, foldGraphJournal, formatRegistryHandle, graphFromRunGraph, inlineCodeRunner, isEngineFired, isSuspensionRequest, kindHandle, materializeSettles, mintSuspensionToken, narrowEffects, openGraphRun, parseRegistryHandle, renderCodeApi, runEngineGraph, schemaAccepts, scriptKind, subgraphKind, supervisorKind, suspended, suspensionNodeId, tokenFromSuspensionNodeId, validateCondition, validateNodeKind, validateProjection };
+export { CONDITION_OPS, DEFAULT_MAX_NODE_VISITS, ENGINE_WOKEN_SEQ_BASE, JOIN_RULES, MAX_MAX_NODE_VISITS, RUN_GRAPH_ROOT_KIND, admitPayload, agentKind, applyGraphFoldEvent, applyProjection, assembleGraphResult, assertAuthoredCode, compileGraph, createEdgeLedger, createGraphEngine, createGraphRun, createRegistry, decideJoin, emptyFoldState, evaluateCondition, foldGraphJournal, formatRegistryHandle, graphFromRunGraph, isEngineFired, isSuspensionRequest, kindHandle, materializeSettles, mintSuspensionToken, narrowEffects, openGraphRun, parseRegistryHandle, runEngineGraph, schemaAccepts, scriptKind, subgraphKind, supervisorKind, suspended, suspensionNodeId, tokenFromSuspensionNodeId, validateCondition, validateNodeKind, validateProjection };
 
 //# sourceMappingURL=graph.js.map