@truefoundry/trueforge-core 0.0.0 → 0.1.0

package/dist/core/sandbox/SandboxErrors.js

@@ -0,0 +1,102 @@
+"use strict";
+var __defProp = Object.defineProperty;
+var __getOwnPropDesc = Object.getOwnPropertyDescriptor;
+var __getOwnPropNames = Object.getOwnPropertyNames;
+var __hasOwnProp = Object.prototype.hasOwnProperty;
+var __export = (target, all) => {
+  for (var name in all)
+    __defProp(target, name, { get: all[name], enumerable: true });
+};
+var __copyProps = (to, from, except, desc) => {
+  if (from && typeof from === "object" || typeof from === "function") {
+    for (let key of __getOwnPropNames(from))
+      if (!__hasOwnProp.call(to, key) && key !== except)
+        __defProp(to, key, { get: () => from[key], enumerable: !(desc = __getOwnPropDesc(from, key)) || desc.enumerable });
+  }
+  return to;
+};
+var __toCommonJS = (mod) => __copyProps(__defProp({}, "__esModule", { value: true }), mod);
+
+// src/core/sandbox/SandboxErrors.ts
+var SandboxErrors_exports = {};
+__export(SandboxErrors_exports, {
+  SandboxError: () => SandboxError,
+  SandboxFileNotFoundError: () => SandboxFileNotFoundError,
+  SandboxFileTooLargeError: () => SandboxFileTooLargeError,
+  SandboxNotAvailableError: () => SandboxNotAvailableError,
+  SandboxPathIsDirectoryError: () => SandboxPathIsDirectoryError,
+  validateNoPathTraversal: () => validateNoPathTraversal,
+  validateSandboxOwnedByTenant: () => validateSandboxOwnedByTenant
+});
+module.exports = __toCommonJS(SandboxErrors_exports);
+var SandboxError = class extends Error {
+};
+var SandboxFileNotFoundError = class extends SandboxError {
+  statusCode = 404;
+  constructor(path) {
+    super(`File not found: ${path}`);
+    this.name = "SandboxFileNotFoundError";
+  }
+};
+var SandboxNotAvailableError = class extends SandboxError {
+  statusCode = 410;
+  constructor(sandboxId) {
+    super(`Sandbox '${sandboxId}' no longer exists \u2014 it may have been auto-deleted`);
+    this.name = "SandboxNotAvailableError";
+  }
+};
+var SandboxPathIsDirectoryError = class extends SandboxError {
+  statusCode = 400;
+  constructor(path) {
+    super(`Path is a directory, not a file: ${path}`);
+    this.name = "SandboxPathIsDirectoryError";
+  }
+};
+var SandboxFileTooLargeError = class extends SandboxError {
+  statusCode = 413;
+  fileSize;
+  maxSize;
+  constructor(path, fileSize, maxSize) {
+    super(`File too large: ${path} (${String(fileSize)} bytes, max ${String(maxSize)})`);
+    this.name = "SandboxFileTooLargeError";
+    this.fileSize = fileSize;
+    this.maxSize = maxSize;
+  }
+};
+var SandboxTenantMismatchError = class extends SandboxError {
+  statusCode = 403;
+  constructor(requestTenant) {
+    super(`Sandbox does not belong to tenant ${requestTenant}`);
+    this.name = "SandboxTenantMismatchError";
+  }
+};
+var SandboxPathTraversalError = class extends SandboxError {
+  statusCode = 400;
+  constructor(path) {
+    super(`Path must not contain ".." segments: ${path}`);
+    this.name = "SandboxPathTraversalError";
+  }
+};
+function validateSandboxOwnedByTenant(sandboxId, tenantName) {
+  const dotIndex = sandboxId.indexOf(".");
+  if (dotIndex === -1 || sandboxId.substring(0, dotIndex) !== tenantName) {
+    throw new SandboxTenantMismatchError(tenantName);
+  }
+}
+var PATH_TRAVERSAL_RE = /(?:^|[\\/])\.\.(?:[\\/]|$)/;
+function validateNoPathTraversal(path) {
+  if (PATH_TRAVERSAL_RE.test(path)) {
+    throw new SandboxPathTraversalError(path);
+  }
+}
+// Annotate the CommonJS export names for ESM import in node:
+0 && (module.exports = {
+  SandboxError,
+  SandboxFileNotFoundError,
+  SandboxFileTooLargeError,
+  SandboxNotAvailableError,
+  SandboxPathIsDirectoryError,
+  validateNoPathTraversal,
+  validateSandboxOwnedByTenant
+});
+//# sourceMappingURL=SandboxErrors.js.map

package/dist/core/sandbox/SandboxErrors.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../../../src/core/sandbox/SandboxErrors.ts"],"sourcesContent":["export abstract class SandboxError extends Error {\n  /**\n   * Every sandbox failure is caused by the request itself — a bad path, another tenant's sandbox,\n   * a missing or oversized file — so each subclass carries the status a host should reply with.\n   * Listing the codes in use rather than `number` lets a typed route return this directly; adding\n   * a subclass with a new code means widening this union and declaring it on the route.\n   */\n  abstract readonly statusCode: 400 | 403 | 404 | 410 | 413;\n}\n\nexport class SandboxFileNotFoundError extends SandboxError {\n  readonly statusCode = 404;\n\n  constructor(path: string) {\n    super(`File not found: ${path}`);\n    this.name = 'SandboxFileNotFoundError';\n  }\n}\n\nexport class SandboxNotAvailableError extends SandboxError {\n  readonly statusCode = 410;\n\n  constructor(sandboxId: string) {\n    super(`Sandbox '${sandboxId}' no longer exists — it may have been auto-deleted`);\n    this.name = 'SandboxNotAvailableError';\n  }\n}\n\nexport class SandboxPathIsDirectoryError extends SandboxError {\n  readonly statusCode = 400;\n\n  constructor(path: string) {\n    super(`Path is a directory, not a file: ${path}`);\n    this.name = 'SandboxPathIsDirectoryError';\n  }\n}\n\nexport class SandboxFileTooLargeError extends SandboxError {\n  readonly statusCode = 413;\n  readonly fileSize: number;\n  readonly maxSize: number;\n\n  constructor(path: string, fileSize: number, maxSize: number) {\n    super(`File too large: ${path} (${String(fileSize)} bytes, max ${String(maxSize)})`);\n    this.name = 'SandboxFileTooLargeError';\n    this.fileSize = fileSize;\n    this.maxSize = maxSize;\n  }\n}\n\nclass SandboxTenantMismatchError extends SandboxError {\n  readonly statusCode = 403;\n\n  constructor(requestTenant: string) {\n    super(`Sandbox does not belong to tenant ${requestTenant}`);\n    this.name = 'SandboxTenantMismatchError';\n  }\n}\n\nclass SandboxPathTraversalError extends SandboxError {\n  readonly statusCode = 400;\n\n  constructor(path: string) {\n    super(`Path must not contain \"..\" segments: ${path}`);\n    this.name = 'SandboxPathTraversalError';\n  }\n}\n\nexport function validateSandboxOwnedByTenant(sandboxId: string, tenantName: string): void {\n  const dotIndex = sandboxId.indexOf('.');\n  if (dotIndex === -1 || sandboxId.substring(0, dotIndex) !== tenantName) {\n    throw new SandboxTenantMismatchError(tenantName);\n  }\n}\n\nconst PATH_TRAVERSAL_RE = /(?:^|[\\\\/])\\.\\.(?:[\\\\/]|$)/;\n\nexport function validateNoPathTraversal(path: string): void {\n  if (PATH_TRAVERSAL_RE.test(path)) {\n    throw new SandboxPathTraversalError(path);\n  }\n}\n"],"mappings":";;;;;;;;;;;;;;;;;;;;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAO,IAAe,eAAf,cAAoC,MAAM;AAQjD;AAEO,IAAM,2BAAN,cAAuC,aAAa;AAAA,EAChD,aAAa;AAAA,EAEtB,YAAY,MAAc;AACxB,UAAM,mBAAmB,IAAI,EAAE;AAC/B,SAAK,OAAO;AAAA,EACd;AACF;AAEO,IAAM,2BAAN,cAAuC,aAAa;AAAA,EAChD,aAAa;AAAA,EAEtB,YAAY,WAAmB;AAC7B,UAAM,YAAY,SAAS,yDAAoD;AAC/E,SAAK,OAAO;AAAA,EACd;AACF;AAEO,IAAM,8BAAN,cAA0C,aAAa;AAAA,EACnD,aAAa;AAAA,EAEtB,YAAY,MAAc;AACxB,UAAM,oCAAoC,IAAI,EAAE;AAChD,SAAK,OAAO;AAAA,EACd;AACF;AAEO,IAAM,2BAAN,cAAuC,aAAa;AAAA,EAChD,aAAa;AAAA,EACb;AAAA,EACA;AAAA,EAET,YAAY,MAAc,UAAkB,SAAiB;AAC3D,UAAM,mBAAmB,IAAI,KAAK,OAAO,QAAQ,CAAC,eAAe,OAAO,OAAO,CAAC,GAAG;AACnF,SAAK,OAAO;AACZ,SAAK,WAAW;AAChB,SAAK,UAAU;AAAA,EACjB;AACF;AAEA,IAAM,6BAAN,cAAyC,aAAa;AAAA,EAC3C,aAAa;AAAA,EAEtB,YAAY,eAAuB;AACjC,UAAM,qCAAqC,aAAa,EAAE;AAC1D,SAAK,OAAO;AAAA,EACd;AACF;AAEA,IAAM,4BAAN,cAAwC,aAAa;AAAA,EAC1C,aAAa;AAAA,EAEtB,YAAY,MAAc;AACxB,UAAM,wCAAwC,IAAI,EAAE;AACpD,SAAK,OAAO;AAAA,EACd;AACF;AAEO,SAAS,6BAA6B,WAAmB,YAA0B;AACxF,QAAM,WAAW,UAAU,QAAQ,GAAG;AACtC,MAAI,aAAa,MAAM,UAAU,UAAU,GAAG,QAAQ,MAAM,YAAY;AACtE,UAAM,IAAI,2BAA2B,UAAU;AAAA,EACjD;AACF;AAEA,IAAM,oBAAoB;AAEnB,SAAS,wBAAwB,MAAoB;AAC1D,MAAI,kBAAkB,KAAK,IAAI,GAAG;AAChC,UAAM,IAAI,0BAA0B,IAAI;AAAA,EAC1C;AACF;","names":[]}

package/dist/core/sandbox/SandboxErrors.mjs

@@ -0,0 +1,71 @@
+// src/core/sandbox/SandboxErrors.ts
+var SandboxError = class extends Error {
+};
+var SandboxFileNotFoundError = class extends SandboxError {
+  statusCode = 404;
+  constructor(path) {
+    super(`File not found: ${path}`);
+    this.name = "SandboxFileNotFoundError";
+  }
+};
+var SandboxNotAvailableError = class extends SandboxError {
+  statusCode = 410;
+  constructor(sandboxId) {
+    super(`Sandbox '${sandboxId}' no longer exists \u2014 it may have been auto-deleted`);
+    this.name = "SandboxNotAvailableError";
+  }
+};
+var SandboxPathIsDirectoryError = class extends SandboxError {
+  statusCode = 400;
+  constructor(path) {
+    super(`Path is a directory, not a file: ${path}`);
+    this.name = "SandboxPathIsDirectoryError";
+  }
+};
+var SandboxFileTooLargeError = class extends SandboxError {
+  statusCode = 413;
+  fileSize;
+  maxSize;
+  constructor(path, fileSize, maxSize) {
+    super(`File too large: ${path} (${String(fileSize)} bytes, max ${String(maxSize)})`);
+    this.name = "SandboxFileTooLargeError";
+    this.fileSize = fileSize;
+    this.maxSize = maxSize;
+  }
+};
+var SandboxTenantMismatchError = class extends SandboxError {
+  statusCode = 403;
+  constructor(requestTenant) {
+    super(`Sandbox does not belong to tenant ${requestTenant}`);
+    this.name = "SandboxTenantMismatchError";
+  }
+};
+var SandboxPathTraversalError = class extends SandboxError {
+  statusCode = 400;
+  constructor(path) {
+    super(`Path must not contain ".." segments: ${path}`);
+    this.name = "SandboxPathTraversalError";
+  }
+};
+function validateSandboxOwnedByTenant(sandboxId, tenantName) {
+  const dotIndex = sandboxId.indexOf(".");
+  if (dotIndex === -1 || sandboxId.substring(0, dotIndex) !== tenantName) {
+    throw new SandboxTenantMismatchError(tenantName);
+  }
+}
+var PATH_TRAVERSAL_RE = /(?:^|[\\/])\.\.(?:[\\/]|$)/;
+function validateNoPathTraversal(path) {
+  if (PATH_TRAVERSAL_RE.test(path)) {
+    throw new SandboxPathTraversalError(path);
+  }
+}
+export {
+  SandboxError,
+  SandboxFileNotFoundError,
+  SandboxFileTooLargeError,
+  SandboxNotAvailableError,
+  SandboxPathIsDirectoryError,
+  validateNoPathTraversal,
+  validateSandboxOwnedByTenant
+};
+//# sourceMappingURL=SandboxErrors.mjs.map

package/dist/core/sandbox/SandboxErrors.mjs.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../../../src/core/sandbox/SandboxErrors.ts"],"sourcesContent":["export abstract class SandboxError extends Error {\n  /**\n   * Every sandbox failure is caused by the request itself — a bad path, another tenant's sandbox,\n   * a missing or oversized file — so each subclass carries the status a host should reply with.\n   * Listing the codes in use rather than `number` lets a typed route return this directly; adding\n   * a subclass with a new code means widening this union and declaring it on the route.\n   */\n  abstract readonly statusCode: 400 | 403 | 404 | 410 | 413;\n}\n\nexport class SandboxFileNotFoundError extends SandboxError {\n  readonly statusCode = 404;\n\n  constructor(path: string) {\n    super(`File not found: ${path}`);\n    this.name = 'SandboxFileNotFoundError';\n  }\n}\n\nexport class SandboxNotAvailableError extends SandboxError {\n  readonly statusCode = 410;\n\n  constructor(sandboxId: string) {\n    super(`Sandbox '${sandboxId}' no longer exists — it may have been auto-deleted`);\n    this.name = 'SandboxNotAvailableError';\n  }\n}\n\nexport class SandboxPathIsDirectoryError extends SandboxError {\n  readonly statusCode = 400;\n\n  constructor(path: string) {\n    super(`Path is a directory, not a file: ${path}`);\n    this.name = 'SandboxPathIsDirectoryError';\n  }\n}\n\nexport class SandboxFileTooLargeError extends SandboxError {\n  readonly statusCode = 413;\n  readonly fileSize: number;\n  readonly maxSize: number;\n\n  constructor(path: string, fileSize: number, maxSize: number) {\n    super(`File too large: ${path} (${String(fileSize)} bytes, max ${String(maxSize)})`);\n    this.name = 'SandboxFileTooLargeError';\n    this.fileSize = fileSize;\n    this.maxSize = maxSize;\n  }\n}\n\nclass SandboxTenantMismatchError extends SandboxError {\n  readonly statusCode = 403;\n\n  constructor(requestTenant: string) {\n    super(`Sandbox does not belong to tenant ${requestTenant}`);\n    this.name = 'SandboxTenantMismatchError';\n  }\n}\n\nclass SandboxPathTraversalError extends SandboxError {\n  readonly statusCode = 400;\n\n  constructor(path: string) {\n    super(`Path must not contain \"..\" segments: ${path}`);\n    this.name = 'SandboxPathTraversalError';\n  }\n}\n\nexport function validateSandboxOwnedByTenant(sandboxId: string, tenantName: string): void {\n  const dotIndex = sandboxId.indexOf('.');\n  if (dotIndex === -1 || sandboxId.substring(0, dotIndex) !== tenantName) {\n    throw new SandboxTenantMismatchError(tenantName);\n  }\n}\n\nconst PATH_TRAVERSAL_RE = /(?:^|[\\\\/])\\.\\.(?:[\\\\/]|$)/;\n\nexport function validateNoPathTraversal(path: string): void {\n  if (PATH_TRAVERSAL_RE.test(path)) {\n    throw new SandboxPathTraversalError(path);\n  }\n}\n"],"mappings":";AAAO,IAAe,eAAf,cAAoC,MAAM;AAQjD;AAEO,IAAM,2BAAN,cAAuC,aAAa;AAAA,EAChD,aAAa;AAAA,EAEtB,YAAY,MAAc;AACxB,UAAM,mBAAmB,IAAI,EAAE;AAC/B,SAAK,OAAO;AAAA,EACd;AACF;AAEO,IAAM,2BAAN,cAAuC,aAAa;AAAA,EAChD,aAAa;AAAA,EAEtB,YAAY,WAAmB;AAC7B,UAAM,YAAY,SAAS,yDAAoD;AAC/E,SAAK,OAAO;AAAA,EACd;AACF;AAEO,IAAM,8BAAN,cAA0C,aAAa;AAAA,EACnD,aAAa;AAAA,EAEtB,YAAY,MAAc;AACxB,UAAM,oCAAoC,IAAI,EAAE;AAChD,SAAK,OAAO;AAAA,EACd;AACF;AAEO,IAAM,2BAAN,cAAuC,aAAa;AAAA,EAChD,aAAa;AAAA,EACb;AAAA,EACA;AAAA,EAET,YAAY,MAAc,UAAkB,SAAiB;AAC3D,UAAM,mBAAmB,IAAI,KAAK,OAAO,QAAQ,CAAC,eAAe,OAAO,OAAO,CAAC,GAAG;AACnF,SAAK,OAAO;AACZ,SAAK,WAAW;AAChB,SAAK,UAAU;AAAA,EACjB;AACF;AAEA,IAAM,6BAAN,cAAyC,aAAa;AAAA,EAC3C,aAAa;AAAA,EAEtB,YAAY,eAAuB;AACjC,UAAM,qCAAqC,aAAa,EAAE;AAC1D,SAAK,OAAO;AAAA,EACd;AACF;AAEA,IAAM,4BAAN,cAAwC,aAAa;AAAA,EAC1C,aAAa;AAAA,EAEtB,YAAY,MAAc;AACxB,UAAM,wCAAwC,IAAI,EAAE;AACpD,SAAK,OAAO;AAAA,EACd;AACF;AAEO,SAAS,6BAA6B,WAAmB,YAA0B;AACxF,QAAM,WAAW,UAAU,QAAQ,GAAG;AACtC,MAAI,aAAa,MAAM,UAAU,UAAU,GAAG,QAAQ,MAAM,YAAY;AACtE,UAAM,IAAI,2BAA2B,UAAU;AAAA,EACjD;AACF;AAEA,IAAM,oBAAoB;AAEnB,SAAS,wBAAwB,MAAoB;AAC1D,MAAI,kBAAkB,KAAK,IAAI,GAAG;AAChC,UAAM,IAAI,0BAA0B,IAAI;AAAA,EAC1C;AACF;","names":[]}

package/dist/core/sandbox/codeMode/CodeModeDispatcher.d.ts

@@ -0,0 +1,29 @@
+import { type IToolSet } from '../../mcp/IMCPServer';
+import type { CodeModeReply, CodeModeRequest } from './types';
+/** Minimal logger surface used by Code Mode (avoids a hard winston dep for PoC binders). */
+export interface CodeModeLogger {
+    child(bindings: Record<string, unknown>): CodeModeLogger;
+    error(message: string, meta?: unknown): void;
+}
+/**
+ * Shared Code Mode policy leaf: tool routing, authz, error `source`. No NATS/UDS.
+ */
+export declare class CodeModeDispatcher {
+    private readonly toolSets;
+    private readonly logger;
+    private closed;
+    constructor(params: {
+        toolSets: readonly IToolSet[];
+        logger: CodeModeLogger;
+    });
+    close(): void;
+    dispatch(params: {
+        request: CodeModeRequest;
+        traceCarrier: Readonly<Record<string, string>>;
+    }): Promise<CodeModeReply>;
+    private route;
+    private getToolSet;
+    private handleListTools;
+    private handleCallTool;
+}
+//# sourceMappingURL=CodeModeDispatcher.d.ts.map

package/dist/core/sandbox/codeMode/CodeModeDispatcher.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"CodeModeDispatcher.d.ts","sourceRoot":"","sources":["../../../../src/core/sandbox/codeMode/CodeModeDispatcher.ts"],"names":[],"mappings":"AAGA,OAAO,EAIL,KAAK,QAAQ,EACd,MAAM,sBAAsB,CAAC;AAE9B,OAAO,KAAK,EAAuB,aAAa,EAAE,eAAe,EAAE,MAAM,SAAS,CAAC;AAEnF,4FAA4F;AAC5F,MAAM,WAAW,cAAc;IAC7B,KAAK,CAAC,QAAQ,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,cAAc,CAAC;IACzD,KAAK,CAAC,OAAO,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,OAAO,GAAG,IAAI,CAAC;CAC9C;AA2BD;;GAEG;AACH,qBAAa,kBAAkB;IAC7B,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAAwB;IACjD,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAiB;IACxC,OAAO,CAAC,MAAM,CAAS;IAEvB,YAAY,MAAM,EAAE;QAAE,QAAQ,EAAE,SAAS,QAAQ,EAAE,CAAC;QAAC,MAAM,EAAE,cAAc,CAAA;KAAE,EAM5E;IAED,KAAK,IAAI,IAAI,CAEZ;IAEK,QAAQ,CAAC,MAAM,EAAE;QACrB,OAAO,EAAE,eAAe,CAAC;QACzB,YAAY,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,CAAC;KAChD,GAAG,OAAO,CAAC,aAAa,CAAC,CAoBzB;IAED,OAAO,CAAC,KAAK;IAWb,OAAO,CAAC,UAAU;YAQJ,eAAe;YAUf,cAAc;CAoB7B"}

package/dist/core/sandbox/codeMode/CodeModeDispatcher.js

@@ -0,0 +1,128 @@
+"use strict";
+var __defProp = Object.defineProperty;
+var __getOwnPropDesc = Object.getOwnPropertyDescriptor;
+var __getOwnPropNames = Object.getOwnPropertyNames;
+var __hasOwnProp = Object.prototype.hasOwnProperty;
+var __export = (target, all) => {
+  for (var name in all)
+    __defProp(target, name, { get: all[name], enumerable: true });
+};
+var __copyProps = (to, from, except, desc) => {
+  if (from && typeof from === "object" || typeof from === "function") {
+    for (let key of __getOwnPropNames(from))
+      if (!__hasOwnProp.call(to, key) && key !== except)
+        __defProp(to, key, { get: () => from[key], enumerable: !(desc = __getOwnPropDesc(from, key)) || desc.enumerable });
+  }
+  return to;
+};
+var __toCommonJS = (mod) => __copyProps(__defProp({}, "__esModule", { value: true }), mod);
+
+// src/core/sandbox/codeMode/CodeModeDispatcher.ts
+var CodeModeDispatcher_exports = {};
+__export(CodeModeDispatcher_exports, {
+  CodeModeDispatcher: () => CodeModeDispatcher
+});
+module.exports = __toCommonJS(CodeModeDispatcher_exports);
+var import_api = require("@opentelemetry/api");
+var import_core = require("@opentelemetry/core");
+var import_errors = require("../../errors.js");
+var import_IMCPServer = require("../../mcp/IMCPServer.js");
+var import_errorLogFields = require("../../util/errorLogFields.js");
+var InvalidMCPUsageError = class extends Error {
+  name = "InvalidMCPUsageError";
+};
+function isHttpClientError(error) {
+  if (typeof error !== "object" || error === null || !("status" in error)) {
+    return false;
+  }
+  const { status } = error;
+  return typeof status === "number" && status >= 400 && status < 500;
+}
+function classifyErrorSource(e) {
+  if (e instanceof InvalidMCPUsageError) return "caller";
+  if (isHttpClientError(e)) return "caller";
+  if (e instanceof import_errors.McpConnectionError && e.statusCode >= 400 && e.statusCode < 500) return "caller";
+  return "internal";
+}
+var _w3cExtractor = new import_core.W3CTraceContextPropagator();
+var CodeModeDispatcher = class {
+  toolSets;
+  logger;
+  closed = false;
+  constructor(params) {
+    this.toolSets = /* @__PURE__ */ new Map();
+    for (const server of params.toolSets) {
+      this.toolSets.set(server.name, server);
+    }
+    this.logger = params.logger.child({ module: "CodeModeDispatcher" });
+  }
+  close() {
+    this.closed = true;
+  }
+  async dispatch(params) {
+    if (this.closed) {
+      return { ok: false, error: "Code Mode dispatcher is closed", source: "transport" };
+    }
+    const ctx = _w3cExtractor.extract(
+      (0, import_core.unsuppressTracing)(import_api.context.active()),
+      { ...params.traceCarrier },
+      import_api.defaultTextMapGetter
+    );
+    try {
+      const result = await import_api.context.with(ctx, () => this.route(params.request));
+      return { ok: true, result };
+    } catch (e) {
+      const source = classifyErrorSource(e);
+      const errorMessage = e instanceof Error ? e.message : "Unknown Code Mode dispatch error";
+      this.logger.error(`Code Mode dispatch failed (source=${source})`, (0, import_errorLogFields.extractErrorLogFields)(e));
+      return { ok: false, error: errorMessage, source };
+    }
+  }
+  route(request) {
+    switch (request.op) {
+      case "list_tools":
+        return this.handleListTools(request);
+      case "call_tool":
+        return this.handleCallTool(request);
+      default:
+        throw new InvalidMCPUsageError(`Unknown Code Mode operation`);
+    }
+  }
+  getToolSet(serverName) {
+    const server = this.toolSets.get(serverName);
+    if (!server) {
+      throw new InvalidMCPUsageError(`MCP server '${serverName}' is not available for this agent`);
+    }
+    return server;
+  }
+  async handleListTools(req) {
+    const { server } = req;
+    const mcp = this.getToolSet(server);
+    const response = await mcp.listTools();
+    if ((0, import_IMCPServer.isAuthRequired)(response)) {
+      throw new InvalidMCPUsageError(`MCP server '${server}' requires OAuth; cannot list tools from sandbox`);
+    }
+    return response.result;
+  }
+  async handleCallTool(req) {
+    const { server, tool, arguments: args } = req;
+    const response = await this.getToolSet(server).callTool({ name: tool, arguments: args ?? {} });
+    if ((0, import_IMCPServer.isAuthRequired)(response)) {
+      throw new InvalidMCPUsageError(`MCP server '${server}' requires OAuth; cannot call tool from sandbox`);
+    }
+    if ((0, import_IMCPServer.isCallToolResponseCreateSubAgent)(response)) {
+      throw new InvalidMCPUsageError(`Tool '${server}/${tool}' creates a sub-agent and is not callable from sandbox`);
+    }
+    if (!(0, import_IMCPServer.isCallToolResponseResult)(response)) {
+      throw new InvalidMCPUsageError(
+        `Tool '${server}/${tool}' requires interactive handling and is not callable from sandbox`
+      );
+    }
+    return response.result;
+  }
+};
+// Annotate the CommonJS export names for ESM import in node:
+0 && (module.exports = {
+  CodeModeDispatcher
+});
+//# sourceMappingURL=CodeModeDispatcher.js.map

package/dist/core/sandbox/codeMode/CodeModeDispatcher.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../../../../src/core/sandbox/codeMode/CodeModeDispatcher.ts"],"sourcesContent":["import { context, defaultTextMapGetter } from '@opentelemetry/api';\nimport { unsuppressTracing, W3CTraceContextPropagator } from '@opentelemetry/core';\nimport { McpConnectionError } from '../../errors';\nimport {\n  isAuthRequired,\n  isCallToolResponseCreateSubAgent,\n  isCallToolResponseResult,\n  type IToolSet,\n} from '../../mcp/IMCPServer';\nimport { extractErrorLogFields } from '../../util/errorLogFields';\nimport type { CodeModeErrorSource, CodeModeReply, CodeModeRequest } from './types';\n\n/** Minimal logger surface used by Code Mode (avoids a hard winston dep for PoC binders). */\nexport interface CodeModeLogger {\n  child(bindings: Record<string, unknown>): CodeModeLogger;\n  error(message: string, meta?: unknown): void;\n}\n\n// Caller-caused failure: retrying won't help.\nclass InvalidMCPUsageError extends Error {\n  override readonly name = 'InvalidMCPUsageError';\n}\n\nfunction isHttpClientError(error: unknown): error is { status: number } {\n  if (typeof error !== 'object' || error === null || !('status' in error)) {\n    return false;\n  }\n  const { status } = error;\n  return typeof status === 'number' && status >= 400 && status < 500;\n}\n\nfunction classifyErrorSource(e: unknown): CodeModeErrorSource {\n  if (e instanceof InvalidMCPUsageError) return 'caller';\n  if (isHttpClientError(e)) return 'caller';\n  if (e instanceof McpConnectionError && e.statusCode >= 400 && e.statusCode < 500) return 'caller';\n  return 'internal';\n}\n\n// Direct W3C extractor, NOT the global `propagation` API. The gateway-wide propagator\n// refuses to restore traceparent unless internal-secret headers are present. Code Mode\n// is intra-process trusted, so we bypass that gate and honor the sandbox carrier.\nconst _w3cExtractor = new W3CTraceContextPropagator();\n\n/**\n * Shared Code Mode policy leaf: tool routing, authz, error `source`. No NATS/UDS.\n */\nexport class CodeModeDispatcher {\n  private readonly toolSets: Map<string, IToolSet>;\n  private readonly logger: CodeModeLogger;\n  private closed = false;\n\n  constructor(params: { toolSets: readonly IToolSet[]; logger: CodeModeLogger }) {\n    this.toolSets = new Map();\n    for (const server of params.toolSets) {\n      this.toolSets.set(server.name, server);\n    }\n    this.logger = params.logger.child({ module: 'CodeModeDispatcher' });\n  }\n\n  close(): void {\n    this.closed = true;\n  }\n\n  async dispatch(params: {\n    request: CodeModeRequest;\n    traceCarrier: Readonly<Record<string, string>>;\n  }): Promise<CodeModeReply> {\n    if (this.closed) {\n      return { ok: false, error: 'Code Mode dispatcher is closed', source: 'transport' };\n    }\n\n    const ctx = _w3cExtractor.extract(\n      unsuppressTracing(context.active()),\n      { ...params.traceCarrier },\n      defaultTextMapGetter,\n    );\n\n    try {\n      const result = await context.with(ctx, () => this.route(params.request));\n      return { ok: true, result };\n    } catch (e) {\n      const source = classifyErrorSource(e);\n      const errorMessage = e instanceof Error ? e.message : 'Unknown Code Mode dispatch error';\n      this.logger.error(`Code Mode dispatch failed (source=${source})`, extractErrorLogFields(e));\n      return { ok: false, error: errorMessage, source };\n    }\n  }\n\n  private route(request: CodeModeRequest): Promise<unknown> {\n    switch (request.op) {\n      case 'list_tools':\n        return this.handleListTools(request);\n      case 'call_tool':\n        return this.handleCallTool(request);\n      default:\n        throw new InvalidMCPUsageError(`Unknown Code Mode operation`);\n    }\n  }\n\n  private getToolSet(serverName: string): IToolSet {\n    const server = this.toolSets.get(serverName);\n    if (!server) {\n      throw new InvalidMCPUsageError(`MCP server '${serverName}' is not available for this agent`);\n    }\n    return server;\n  }\n\n  private async handleListTools(req: { server: string }): Promise<unknown> {\n    const { server } = req;\n    const mcp = this.getToolSet(server);\n    const response = await mcp.listTools();\n    if (isAuthRequired(response)) {\n      throw new InvalidMCPUsageError(`MCP server '${server}' requires OAuth; cannot list tools from sandbox`);\n    }\n    return response.result;\n  }\n\n  private async handleCallTool(req: {\n    server: string;\n    tool: string;\n    arguments?: Record<string, unknown> | undefined;\n  }): Promise<unknown> {\n    const { server, tool, arguments: args } = req;\n    const response = await this.getToolSet(server).callTool({ name: tool, arguments: args ?? {} });\n    if (isAuthRequired(response)) {\n      throw new InvalidMCPUsageError(`MCP server '${server}' requires OAuth; cannot call tool from sandbox`);\n    }\n    if (isCallToolResponseCreateSubAgent(response)) {\n      throw new InvalidMCPUsageError(`Tool '${server}/${tool}' creates a sub-agent and is not callable from sandbox`);\n    }\n    if (!isCallToolResponseResult(response)) {\n      throw new InvalidMCPUsageError(\n        `Tool '${server}/${tool}' requires interactive handling and is not callable from sandbox`,\n      );\n    }\n    return response.result;\n  }\n}\n"],"mappings":";;;;;;;;;;;;;;;;;;;;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,iBAA8C;AAC9C,kBAA6D;AAC7D,oBAAmC;AACnC,wBAKO;AACP,4BAAsC;AAUtC,IAAM,uBAAN,cAAmC,MAAM;AAAA,EACrB,OAAO;AAC3B;AAEA,SAAS,kBAAkB,OAA6C;AACtE,MAAI,OAAO,UAAU,YAAY,UAAU,QAAQ,EAAE,YAAY,QAAQ;AACvE,WAAO;AAAA,EACT;AACA,QAAM,EAAE,OAAO,IAAI;AACnB,SAAO,OAAO,WAAW,YAAY,UAAU,OAAO,SAAS;AACjE;AAEA,SAAS,oBAAoB,GAAiC;AAC5D,MAAI,aAAa,qBAAsB,QAAO;AAC9C,MAAI,kBAAkB,CAAC,EAAG,QAAO;AACjC,MAAI,aAAa,oCAAsB,EAAE,cAAc,OAAO,EAAE,aAAa,IAAK,QAAO;AACzF,SAAO;AACT;AAKA,IAAM,gBAAgB,IAAI,sCAA0B;AAK7C,IAAM,qBAAN,MAAyB;AAAA,EACb;AAAA,EACA;AAAA,EACT,SAAS;AAAA,EAEjB,YAAY,QAAmE;AAC7E,SAAK,WAAW,oBAAI,IAAI;AACxB,eAAW,UAAU,OAAO,UAAU;AACpC,WAAK,SAAS,IAAI,OAAO,MAAM,MAAM;AAAA,IACvC;AACA,SAAK,SAAS,OAAO,OAAO,MAAM,EAAE,QAAQ,qBAAqB,CAAC;AAAA,EACpE;AAAA,EAEA,QAAc;AACZ,SAAK,SAAS;AAAA,EAChB;AAAA,EAEA,MAAM,SAAS,QAGY;AACzB,QAAI,KAAK,QAAQ;AACf,aAAO,EAAE,IAAI,OAAO,OAAO,kCAAkC,QAAQ,YAAY;AAAA,IACnF;AAEA,UAAM,MAAM,cAAc;AAAA,UACxB,+BAAkB,mBAAQ,OAAO,CAAC;AAAA,MAClC,EAAE,GAAG,OAAO,aAAa;AAAA,MACzB;AAAA,IACF;AAEA,QAAI;AACF,YAAM,SAAS,MAAM,mBAAQ,KAAK,KAAK,MAAM,KAAK,MAAM,OAAO,OAAO,CAAC;AACvE,aAAO,EAAE,IAAI,MAAM,OAAO;AAAA,IAC5B,SAAS,GAAG;AACV,YAAM,SAAS,oBAAoB,CAAC;AACpC,YAAM,eAAe,aAAa,QAAQ,EAAE,UAAU;AACtD,WAAK,OAAO,MAAM,qCAAqC,MAAM,SAAK,6CAAsB,CAAC,CAAC;AAC1F,aAAO,EAAE,IAAI,OAAO,OAAO,cAAc,OAAO;AAAA,IAClD;AAAA,EACF;AAAA,EAEQ,MAAM,SAA4C;AACxD,YAAQ,QAAQ,IAAI;AAAA,MAClB,KAAK;AACH,eAAO,KAAK,gBAAgB,OAAO;AAAA,MACrC,KAAK;AACH,eAAO,KAAK,eAAe,OAAO;AAAA,MACpC;AACE,cAAM,IAAI,qBAAqB,6BAA6B;AAAA,IAChE;AAAA,EACF;AAAA,EAEQ,WAAW,YAA8B;AAC/C,UAAM,SAAS,KAAK,SAAS,IAAI,UAAU;AAC3C,QAAI,CAAC,QAAQ;AACX,YAAM,IAAI,qBAAqB,eAAe,UAAU,mCAAmC;AAAA,IAC7F;AACA,WAAO;AAAA,EACT;AAAA,EAEA,MAAc,gBAAgB,KAA2C;AACvE,UAAM,EAAE,OAAO,IAAI;AACnB,UAAM,MAAM,KAAK,WAAW,MAAM;AAClC,UAAM,WAAW,MAAM,IAAI,UAAU;AACrC,YAAI,kCAAe,QAAQ,GAAG;AAC5B,YAAM,IAAI,qBAAqB,eAAe,MAAM,kDAAkD;AAAA,IACxG;AACA,WAAO,SAAS;AAAA,EAClB;AAAA,EAEA,MAAc,eAAe,KAIR;AACnB,UAAM,EAAE,QAAQ,MAAM,WAAW,KAAK,IAAI;AAC1C,UAAM,WAAW,MAAM,KAAK,WAAW,MAAM,EAAE,SAAS,EAAE,MAAM,MAAM,WAAW,QAAQ,CAAC,EAAE,CAAC;AAC7F,YAAI,kCAAe,QAAQ,GAAG;AAC5B,YAAM,IAAI,qBAAqB,eAAe,MAAM,iDAAiD;AAAA,IACvG;AACA,YAAI,oDAAiC,QAAQ,GAAG;AAC9C,YAAM,IAAI,qBAAqB,SAAS,MAAM,IAAI,IAAI,wDAAwD;AAAA,IAChH;AACA,QAAI,KAAC,4CAAyB,QAAQ,GAAG;AACvC,YAAM,IAAI;AAAA,QACR,SAAS,MAAM,IAAI,IAAI;AAAA,MACzB;AAAA,IACF;AACA,WAAO,SAAS;AAAA,EAClB;AACF;","names":[]}

package/dist/core/sandbox/codeMode/CodeModeDispatcher.mjs

@@ -0,0 +1,107 @@
+// src/core/sandbox/codeMode/CodeModeDispatcher.ts
+import { context, defaultTextMapGetter } from "@opentelemetry/api";
+import { unsuppressTracing, W3CTraceContextPropagator } from "@opentelemetry/core";
+import { McpConnectionError } from "../../errors.mjs";
+import {
+  isAuthRequired,
+  isCallToolResponseCreateSubAgent,
+  isCallToolResponseResult
+} from "../../mcp/IMCPServer.mjs";
+import { extractErrorLogFields } from "../../util/errorLogFields.mjs";
+var InvalidMCPUsageError = class extends Error {
+  name = "InvalidMCPUsageError";
+};
+function isHttpClientError(error) {
+  if (typeof error !== "object" || error === null || !("status" in error)) {
+    return false;
+  }
+  const { status } = error;
+  return typeof status === "number" && status >= 400 && status < 500;
+}
+function classifyErrorSource(e) {
+  if (e instanceof InvalidMCPUsageError) return "caller";
+  if (isHttpClientError(e)) return "caller";
+  if (e instanceof McpConnectionError && e.statusCode >= 400 && e.statusCode < 500) return "caller";
+  return "internal";
+}
+var _w3cExtractor = new W3CTraceContextPropagator();
+var CodeModeDispatcher = class {
+  toolSets;
+  logger;
+  closed = false;
+  constructor(params) {
+    this.toolSets = /* @__PURE__ */ new Map();
+    for (const server of params.toolSets) {
+      this.toolSets.set(server.name, server);
+    }
+    this.logger = params.logger.child({ module: "CodeModeDispatcher" });
+  }
+  close() {
+    this.closed = true;
+  }
+  async dispatch(params) {
+    if (this.closed) {
+      return { ok: false, error: "Code Mode dispatcher is closed", source: "transport" };
+    }
+    const ctx = _w3cExtractor.extract(
+      unsuppressTracing(context.active()),
+      { ...params.traceCarrier },
+      defaultTextMapGetter
+    );
+    try {
+      const result = await context.with(ctx, () => this.route(params.request));
+      return { ok: true, result };
+    } catch (e) {
+      const source = classifyErrorSource(e);
+      const errorMessage = e instanceof Error ? e.message : "Unknown Code Mode dispatch error";
+      this.logger.error(`Code Mode dispatch failed (source=${source})`, extractErrorLogFields(e));
+      return { ok: false, error: errorMessage, source };
+    }
+  }
+  route(request) {
+    switch (request.op) {
+      case "list_tools":
+        return this.handleListTools(request);
+      case "call_tool":
+        return this.handleCallTool(request);
+      default:
+        throw new InvalidMCPUsageError(`Unknown Code Mode operation`);
+    }
+  }
+  getToolSet(serverName) {
+    const server = this.toolSets.get(serverName);
+    if (!server) {
+      throw new InvalidMCPUsageError(`MCP server '${serverName}' is not available for this agent`);
+    }
+    return server;
+  }
+  async handleListTools(req) {
+    const { server } = req;
+    const mcp = this.getToolSet(server);
+    const response = await mcp.listTools();
+    if (isAuthRequired(response)) {
+      throw new InvalidMCPUsageError(`MCP server '${server}' requires OAuth; cannot list tools from sandbox`);
+    }
+    return response.result;
+  }
+  async handleCallTool(req) {
+    const { server, tool, arguments: args } = req;
+    const response = await this.getToolSet(server).callTool({ name: tool, arguments: args ?? {} });
+    if (isAuthRequired(response)) {
+      throw new InvalidMCPUsageError(`MCP server '${server}' requires OAuth; cannot call tool from sandbox`);
+    }
+    if (isCallToolResponseCreateSubAgent(response)) {
+      throw new InvalidMCPUsageError(`Tool '${server}/${tool}' creates a sub-agent and is not callable from sandbox`);
+    }
+    if (!isCallToolResponseResult(response)) {
+      throw new InvalidMCPUsageError(
+        `Tool '${server}/${tool}' requires interactive handling and is not callable from sandbox`
+      );
+    }
+    return response.result;
+  }
+};
+export {
+  CodeModeDispatcher
+};
+//# sourceMappingURL=CodeModeDispatcher.mjs.map

package/dist/core/sandbox/codeMode/CodeModeDispatcher.mjs.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../../../../src/core/sandbox/codeMode/CodeModeDispatcher.ts"],"sourcesContent":["import { context, defaultTextMapGetter } from '@opentelemetry/api';\nimport { unsuppressTracing, W3CTraceContextPropagator } from '@opentelemetry/core';\nimport { McpConnectionError } from '../../errors';\nimport {\n  isAuthRequired,\n  isCallToolResponseCreateSubAgent,\n  isCallToolResponseResult,\n  type IToolSet,\n} from '../../mcp/IMCPServer';\nimport { extractErrorLogFields } from '../../util/errorLogFields';\nimport type { CodeModeErrorSource, CodeModeReply, CodeModeRequest } from './types';\n\n/** Minimal logger surface used by Code Mode (avoids a hard winston dep for PoC binders). */\nexport interface CodeModeLogger {\n  child(bindings: Record<string, unknown>): CodeModeLogger;\n  error(message: string, meta?: unknown): void;\n}\n\n// Caller-caused failure: retrying won't help.\nclass InvalidMCPUsageError extends Error {\n  override readonly name = 'InvalidMCPUsageError';\n}\n\nfunction isHttpClientError(error: unknown): error is { status: number } {\n  if (typeof error !== 'object' || error === null || !('status' in error)) {\n    return false;\n  }\n  const { status } = error;\n  return typeof status === 'number' && status >= 400 && status < 500;\n}\n\nfunction classifyErrorSource(e: unknown): CodeModeErrorSource {\n  if (e instanceof InvalidMCPUsageError) return 'caller';\n  if (isHttpClientError(e)) return 'caller';\n  if (e instanceof McpConnectionError && e.statusCode >= 400 && e.statusCode < 500) return 'caller';\n  return 'internal';\n}\n\n// Direct W3C extractor, NOT the global `propagation` API. The gateway-wide propagator\n// refuses to restore traceparent unless internal-secret headers are present. Code Mode\n// is intra-process trusted, so we bypass that gate and honor the sandbox carrier.\nconst _w3cExtractor = new W3CTraceContextPropagator();\n\n/**\n * Shared Code Mode policy leaf: tool routing, authz, error `source`. No NATS/UDS.\n */\nexport class CodeModeDispatcher {\n  private readonly toolSets: Map<string, IToolSet>;\n  private readonly logger: CodeModeLogger;\n  private closed = false;\n\n  constructor(params: { toolSets: readonly IToolSet[]; logger: CodeModeLogger }) {\n    this.toolSets = new Map();\n    for (const server of params.toolSets) {\n      this.toolSets.set(server.name, server);\n    }\n    this.logger = params.logger.child({ module: 'CodeModeDispatcher' });\n  }\n\n  close(): void {\n    this.closed = true;\n  }\n\n  async dispatch(params: {\n    request: CodeModeRequest;\n    traceCarrier: Readonly<Record<string, string>>;\n  }): Promise<CodeModeReply> {\n    if (this.closed) {\n      return { ok: false, error: 'Code Mode dispatcher is closed', source: 'transport' };\n    }\n\n    const ctx = _w3cExtractor.extract(\n      unsuppressTracing(context.active()),\n      { ...params.traceCarrier },\n      defaultTextMapGetter,\n    );\n\n    try {\n      const result = await context.with(ctx, () => this.route(params.request));\n      return { ok: true, result };\n    } catch (e) {\n      const source = classifyErrorSource(e);\n      const errorMessage = e instanceof Error ? e.message : 'Unknown Code Mode dispatch error';\n      this.logger.error(`Code Mode dispatch failed (source=${source})`, extractErrorLogFields(e));\n      return { ok: false, error: errorMessage, source };\n    }\n  }\n\n  private route(request: CodeModeRequest): Promise<unknown> {\n    switch (request.op) {\n      case 'list_tools':\n        return this.handleListTools(request);\n      case 'call_tool':\n        return this.handleCallTool(request);\n      default:\n        throw new InvalidMCPUsageError(`Unknown Code Mode operation`);\n    }\n  }\n\n  private getToolSet(serverName: string): IToolSet {\n    const server = this.toolSets.get(serverName);\n    if (!server) {\n      throw new InvalidMCPUsageError(`MCP server '${serverName}' is not available for this agent`);\n    }\n    return server;\n  }\n\n  private async handleListTools(req: { server: string }): Promise<unknown> {\n    const { server } = req;\n    const mcp = this.getToolSet(server);\n    const response = await mcp.listTools();\n    if (isAuthRequired(response)) {\n      throw new InvalidMCPUsageError(`MCP server '${server}' requires OAuth; cannot list tools from sandbox`);\n    }\n    return response.result;\n  }\n\n  private async handleCallTool(req: {\n    server: string;\n    tool: string;\n    arguments?: Record<string, unknown> | undefined;\n  }): Promise<unknown> {\n    const { server, tool, arguments: args } = req;\n    const response = await this.getToolSet(server).callTool({ name: tool, arguments: args ?? {} });\n    if (isAuthRequired(response)) {\n      throw new InvalidMCPUsageError(`MCP server '${server}' requires OAuth; cannot call tool from sandbox`);\n    }\n    if (isCallToolResponseCreateSubAgent(response)) {\n      throw new InvalidMCPUsageError(`Tool '${server}/${tool}' creates a sub-agent and is not callable from sandbox`);\n    }\n    if (!isCallToolResponseResult(response)) {\n      throw new InvalidMCPUsageError(\n        `Tool '${server}/${tool}' requires interactive handling and is not callable from sandbox`,\n      );\n    }\n    return response.result;\n  }\n}\n"],"mappings":";AAAA,SAAS,SAAS,4BAA4B;AAC9C,SAAS,mBAAmB,iCAAiC;AAC7D,SAAS,0BAA0B;AACnC;AAAA,EACE;AAAA,EACA;AAAA,EACA;AAAA,OAEK;AACP,SAAS,6BAA6B;AAUtC,IAAM,uBAAN,cAAmC,MAAM;AAAA,EACrB,OAAO;AAC3B;AAEA,SAAS,kBAAkB,OAA6C;AACtE,MAAI,OAAO,UAAU,YAAY,UAAU,QAAQ,EAAE,YAAY,QAAQ;AACvE,WAAO;AAAA,EACT;AACA,QAAM,EAAE,OAAO,IAAI;AACnB,SAAO,OAAO,WAAW,YAAY,UAAU,OAAO,SAAS;AACjE;AAEA,SAAS,oBAAoB,GAAiC;AAC5D,MAAI,aAAa,qBAAsB,QAAO;AAC9C,MAAI,kBAAkB,CAAC,EAAG,QAAO;AACjC,MAAI,aAAa,sBAAsB,EAAE,cAAc,OAAO,EAAE,aAAa,IAAK,QAAO;AACzF,SAAO;AACT;AAKA,IAAM,gBAAgB,IAAI,0BAA0B;AAK7C,IAAM,qBAAN,MAAyB;AAAA,EACb;AAAA,EACA;AAAA,EACT,SAAS;AAAA,EAEjB,YAAY,QAAmE;AAC7E,SAAK,WAAW,oBAAI,IAAI;AACxB,eAAW,UAAU,OAAO,UAAU;AACpC,WAAK,SAAS,IAAI,OAAO,MAAM,MAAM;AAAA,IACvC;AACA,SAAK,SAAS,OAAO,OAAO,MAAM,EAAE,QAAQ,qBAAqB,CAAC;AAAA,EACpE;AAAA,EAEA,QAAc;AACZ,SAAK,SAAS;AAAA,EAChB;AAAA,EAEA,MAAM,SAAS,QAGY;AACzB,QAAI,KAAK,QAAQ;AACf,aAAO,EAAE,IAAI,OAAO,OAAO,kCAAkC,QAAQ,YAAY;AAAA,IACnF;AAEA,UAAM,MAAM,cAAc;AAAA,MACxB,kBAAkB,QAAQ,OAAO,CAAC;AAAA,MAClC,EAAE,GAAG,OAAO,aAAa;AAAA,MACzB;AAAA,IACF;AAEA,QAAI;AACF,YAAM,SAAS,MAAM,QAAQ,KAAK,KAAK,MAAM,KAAK,MAAM,OAAO,OAAO,CAAC;AACvE,aAAO,EAAE,IAAI,MAAM,OAAO;AAAA,IAC5B,SAAS,GAAG;AACV,YAAM,SAAS,oBAAoB,CAAC;AACpC,YAAM,eAAe,aAAa,QAAQ,EAAE,UAAU;AACtD,WAAK,OAAO,MAAM,qCAAqC,MAAM,KAAK,sBAAsB,CAAC,CAAC;AAC1F,aAAO,EAAE,IAAI,OAAO,OAAO,cAAc,OAAO;AAAA,IAClD;AAAA,EACF;AAAA,EAEQ,MAAM,SAA4C;AACxD,YAAQ,QAAQ,IAAI;AAAA,MAClB,KAAK;AACH,eAAO,KAAK,gBAAgB,OAAO;AAAA,MACrC,KAAK;AACH,eAAO,KAAK,eAAe,OAAO;AAAA,MACpC;AACE,cAAM,IAAI,qBAAqB,6BAA6B;AAAA,IAChE;AAAA,EACF;AAAA,EAEQ,WAAW,YAA8B;AAC/C,UAAM,SAAS,KAAK,SAAS,IAAI,UAAU;AAC3C,QAAI,CAAC,QAAQ;AACX,YAAM,IAAI,qBAAqB,eAAe,UAAU,mCAAmC;AAAA,IAC7F;AACA,WAAO;AAAA,EACT;AAAA,EAEA,MAAc,gBAAgB,KAA2C;AACvE,UAAM,EAAE,OAAO,IAAI;AACnB,UAAM,MAAM,KAAK,WAAW,MAAM;AAClC,UAAM,WAAW,MAAM,IAAI,UAAU;AACrC,QAAI,eAAe,QAAQ,GAAG;AAC5B,YAAM,IAAI,qBAAqB,eAAe,MAAM,kDAAkD;AAAA,IACxG;AACA,WAAO,SAAS;AAAA,EAClB;AAAA,EAEA,MAAc,eAAe,KAIR;AACnB,UAAM,EAAE,QAAQ,MAAM,WAAW,KAAK,IAAI;AAC1C,UAAM,WAAW,MAAM,KAAK,WAAW,MAAM,EAAE,SAAS,EAAE,MAAM,MAAM,WAAW,QAAQ,CAAC,EAAE,CAAC;AAC7F,QAAI,eAAe,QAAQ,GAAG;AAC5B,YAAM,IAAI,qBAAqB,eAAe,MAAM,iDAAiD;AAAA,IACvG;AACA,QAAI,iCAAiC,QAAQ,GAAG;AAC9C,YAAM,IAAI,qBAAqB,SAAS,MAAM,IAAI,IAAI,wDAAwD;AAAA,IAChH;AACA,QAAI,CAAC,yBAAyB,QAAQ,GAAG;AACvC,YAAM,IAAI;AAAA,QACR,SAAS,MAAM,IAAI,IAAI;AAAA,MACzB;AAAA,IACF;AACA,WAAO,SAAS;AAAA,EAClB;AACF;","names":[]}

package/dist/core/sandbox/codeMode/CodeModeTransport.d.ts

@@ -0,0 +1,21 @@
+import type { CodeModeDispatcher } from './CodeModeDispatcher';
+/**
+ * Code Mode channel. Construct eagerly with the dispatcher; connect/listen in `start`.
+ * `start` may be called again after failure; `stop` is always valid after construct.
+ */
+export interface CodeModeTransport {
+    /**
+     * Lazy connect/listen; may be called again after a failed attempt (non-sticky).
+     * Idempotent once successfully started.
+     */
+    start(params: {
+        codeModeDispatcher: CodeModeDispatcher;
+        sandboxId: string;
+        requestTimeoutSeconds: number;
+    }): Promise<{
+        env: Record<string, string>;
+    }>;
+    /** Best-effort teardown whether start succeeded, failed, or never ran. */
+    stop(): Promise<void>;
+}
+//# sourceMappingURL=CodeModeTransport.d.ts.map

package/dist/core/sandbox/codeMode/CodeModeTransport.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"CodeModeTransport.d.ts","sourceRoot":"","sources":["../../../../src/core/sandbox/codeMode/CodeModeTransport.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,sBAAsB,CAAC;AAE/D;;;GAGG;AACH,MAAM,WAAW,iBAAiB;IAChC;;;OAGG;IACH,KAAK,CAAC,MAAM,EAAE;QAAE,kBAAkB,EAAE,kBAAkB,CAAC;QAAC,SAAS,EAAE,MAAM,CAAC;QAAC,qBAAqB,EAAE,MAAM,CAAA;KAAE,GAAG,OAAO,CAAC;QACnH,GAAG,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;KAC7B,CAAC,CAAC;IACH,0EAA0E;IAC1E,IAAI,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC;CACvB"}

package/dist/core/sandbox/codeMode/CodeModeTransport.js

@@ -0,0 +1,19 @@
+"use strict";
+var __defProp = Object.defineProperty;
+var __getOwnPropDesc = Object.getOwnPropertyDescriptor;
+var __getOwnPropNames = Object.getOwnPropertyNames;
+var __hasOwnProp = Object.prototype.hasOwnProperty;
+var __copyProps = (to, from, except, desc) => {
+  if (from && typeof from === "object" || typeof from === "function") {
+    for (let key of __getOwnPropNames(from))
+      if (!__hasOwnProp.call(to, key) && key !== except)
+        __defProp(to, key, { get: () => from[key], enumerable: !(desc = __getOwnPropDesc(from, key)) || desc.enumerable });
+  }
+  return to;
+};
+var __toCommonJS = (mod) => __copyProps(__defProp({}, "__esModule", { value: true }), mod);
+
+// src/core/sandbox/codeMode/CodeModeTransport.ts
+var CodeModeTransport_exports = {};
+module.exports = __toCommonJS(CodeModeTransport_exports);
+//# sourceMappingURL=CodeModeTransport.js.map

package/dist/core/sandbox/codeMode/CodeModeTransport.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../../../../src/core/sandbox/codeMode/CodeModeTransport.ts"],"sourcesContent":["import type { CodeModeDispatcher } from './CodeModeDispatcher';\n\n/**\n * Code Mode channel. Construct eagerly with the dispatcher; connect/listen in `start`.\n * `start` may be called again after failure; `stop` is always valid after construct.\n */\nexport interface CodeModeTransport {\n  /**\n   * Lazy connect/listen; may be called again after a failed attempt (non-sticky).\n   * Idempotent once successfully started.\n   */\n  start(params: { codeModeDispatcher: CodeModeDispatcher; sandboxId: string; requestTimeoutSeconds: number }): Promise<{\n    env: Record<string, string>;\n  }>;\n  /** Best-effort teardown whether start succeeded, failed, or never ran. */\n  stop(): Promise<void>;\n}\n"],"mappings":";;;;;;;;;;;;;;;;AAAA;AAAA;","names":[]}

package/dist/core/sandbox/codeMode/CodeModeTransport.mjs

@@ -0,0 +1 @@
+//# sourceMappingURL=CodeModeTransport.mjs.map

package/dist/core/sandbox/codeMode/CodeModeTransport.mjs.map

@@ -0,0 +1 @@
+{"version":3,"sources":[],"sourcesContent":[],"mappings":"","names":[]}

package/dist/core/sandbox/codeMode/nats/CodeModeNatsTransport.d.ts

@@ -0,0 +1,34 @@
+import type { Logger } from 'winston';
+import type { CodeModeDispatcher } from '../CodeModeDispatcher';
+import type { CodeModeTransport } from '../CodeModeTransport';
+/**
+ * NATS Code Mode transport. Session cache + connection-drop invalidate live here
+ * (no `whenClosed` on the public interface).
+ */
+export declare class CodeModeNatsTransport implements CodeModeTransport {
+    private readonly resolveHostUrl;
+    private readonly sandboxClientNatsUrl;
+    private readonly logger;
+    private sessionPromise;
+    private nc;
+    private dispatcher;
+    constructor(params: {
+        resolveHostUrl: (sandboxId: string) => Promise<string>;
+        sandboxClientNatsUrl?: string;
+        logger: Logger;
+    });
+    start(params: {
+        codeModeDispatcher: CodeModeDispatcher;
+        sandboxId: string;
+        requestTimeoutSeconds: number;
+    }): Promise<{
+        env: Record<string, string>;
+    }>;
+    stop(): Promise<void>;
+    private connectSession;
+    private subscribe;
+    private handleMessage;
+    private encode;
+    private decode;
+}
+//# sourceMappingURL=CodeModeNatsTransport.d.ts.map

package/dist/core/sandbox/codeMode/nats/CodeModeNatsTransport.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"CodeModeNatsTransport.d.ts","sourceRoot":"","sources":["../../../../../src/core/sandbox/codeMode/nats/CodeModeNatsTransport.ts"],"names":[],"mappings":"AAIA,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,SAAS,CAAC;AAKtC,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,uBAAuB,CAAC;AAChE,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,sBAAsB,CAAC;AAe9D;;;GAGG;AACH,qBAAa,qBAAsB,YAAW,iBAAiB;IAC7D,OAAO,CAAC,QAAQ,CAAC,cAAc,CAAyC;IACxE,OAAO,CAAC,QAAQ,CAAC,oBAAoB,CAAS;IAC9C,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAS;IAEhC,OAAO,CAAC,cAAc,CAAuD;IAC7E,OAAO,CAAC,EAAE,CAA6B;IACvC,OAAO,CAAC,UAAU,CAAiC;IAEnD,YAAY,MAAM,EAAE;QAClB,cAAc,EAAE,CAAC,SAAS,EAAE,MAAM,KAAK,OAAO,CAAC,MAAM,CAAC,CAAC;QACvD,oBAAoB,CAAC,EAAE,MAAM,CAAC;QAC9B,MAAM,EAAE,MAAM,CAAC;KAChB,EAIA;IAED,KAAK,CAAC,MAAM,EAAE;QACZ,kBAAkB,EAAE,kBAAkB,CAAC;QACvC,SAAS,EAAE,MAAM,CAAC;QAClB,qBAAqB,EAAE,MAAM,CAAC;KAC/B,GAAG,OAAO,CAAC;QAAE,GAAG,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAA;KAAE,CAAC,CAO3C;IAEK,IAAI,IAAI,OAAO,CAAC,IAAI,CAAC,CAqB1B;YAEa,cAAc;IAkD5B,OAAO,CAAC,SAAS;YAQH,aAAa;IA+C3B,OAAO,CAAC,MAAM;IAId,OAAO,CAAC,MAAM;CAIf"}