@truefoundry/trueforge-core 0.0.0 → 0.1.0

package/dist/core/sandbox/codeMode/nats/CodeModeNatsTransport.js

@@ -0,0 +1,187 @@
+"use strict";
+var __defProp = Object.defineProperty;
+var __getOwnPropDesc = Object.getOwnPropertyDescriptor;
+var __getOwnPropNames = Object.getOwnPropertyNames;
+var __hasOwnProp = Object.prototype.hasOwnProperty;
+var __export = (target, all) => {
+  for (var name in all)
+    __defProp(target, name, { get: all[name], enumerable: true });
+};
+var __copyProps = (to, from, except, desc) => {
+  if (from && typeof from === "object" || typeof from === "function") {
+    for (let key of __getOwnPropNames(from))
+      if (!__hasOwnProp.call(to, key) && key !== except)
+        __defProp(to, key, { get: () => from[key], enumerable: !(desc = __getOwnPropDesc(from, key)) || desc.enumerable });
+  }
+  return to;
+};
+var __toCommonJS = (mod) => __copyProps(__defProp({}, "__esModule", { value: true }), mod);
+
+// src/core/sandbox/codeMode/nats/CodeModeNatsTransport.ts
+var CodeModeNatsTransport_exports = {};
+__export(CodeModeNatsTransport_exports, {
+  CodeModeNatsTransport: () => CodeModeNatsTransport
+});
+module.exports = __toCommonJS(CodeModeNatsTransport_exports);
+var import_nats_core = require("@nats-io/nats-core");
+var import_api = require("@opentelemetry/api");
+var import_core = require("@opentelemetry/core");
+var import_node_crypto = require("crypto");
+var import_ws = require("ws");
+var import_errorLogFields = require("../../../util/errorLogFields.js");
+var import_promiseUtils = require("../../../util/promiseUtils.js");
+var import_constants = require("../../constants.js");
+var import_types = require("../types.js");
+Object.assign(global, { WebSocket: import_ws.WebSocket });
+var NATS_CONNECT_TIMEOUT_MS = 1e4;
+var NATS_CONNECT_RETRIES = 3;
+var NATS_CONNECT_BACKOFF_MS = 250;
+var NATS_DRAIN_TIMEOUT_MS = 5e3;
+var SANDBOX_NATS_SUBJECT_ROOT = "sandbox.bridge";
+var SANDBOX_NATS_MCP_LEAF = "mcp";
+var CodeModeNatsTransport = class {
+  resolveHostUrl;
+  sandboxClientNatsUrl;
+  logger;
+  sessionPromise;
+  nc;
+  dispatcher;
+  constructor(params) {
+    this.resolveHostUrl = params.resolveHostUrl;
+    this.sandboxClientNatsUrl = params.sandboxClientNatsUrl ?? `ws://localhost:${String(import_constants.DEFAULT_SANDBOX_NATS_WS_PORT)}`;
+    this.logger = params.logger.child({ module: "CodeModeNatsTransport" });
+  }
+  start(params) {
+    this.dispatcher = params.codeModeDispatcher;
+    this.sessionPromise ??= this.connectSession(params).catch((e) => {
+      this.sessionPromise = void 0;
+      throw e;
+    });
+    return this.sessionPromise;
+  }
+  async stop() {
+    const pending = this.sessionPromise;
+    this.sessionPromise = void 0;
+    if (pending !== void 0) {
+      try {
+        await pending;
+      } catch {
+      }
+    }
+    const nc = this.nc;
+    this.nc = void 0;
+    if (nc === void 0) return;
+    try {
+      await (0, import_promiseUtils.withTimeout)(nc.drain(), NATS_DRAIN_TIMEOUT_MS);
+    } catch (e) {
+      this.logger.warn("Code Mode NATS drain failed/timed out; forcing close", (0, import_errorLogFields.extractErrorLogFields)(e));
+      await nc.close().catch(() => {
+      });
+    }
+  }
+  async connectSession(params) {
+    const url = await this.resolveHostUrl(params.sandboxId);
+    const subjectPrefix = `${SANDBOX_NATS_SUBJECT_ROOT}.${(0, import_node_crypto.randomUUID)()}`;
+    let lastErr;
+    let nc;
+    for (let attempt = 1; attempt <= NATS_CONNECT_RETRIES; attempt++) {
+      try {
+        nc = await import_api.context.with(
+          (0, import_core.suppressTracing)(import_api.context.active()),
+          () => (0, import_nats_core.wsconnect)({ servers: [url], timeout: NATS_CONNECT_TIMEOUT_MS })
+        );
+        this.logger.info(`Connected to sandbox NATS (attempt ${String(attempt)})`, { subjectPrefix });
+        break;
+      } catch (e) {
+        lastErr = e;
+        this.logger.warn(`Code Mode NATS connect attempt ${String(attempt)} failed`, (0, import_errorLogFields.extractErrorLogFields)(e));
+        if (attempt < NATS_CONNECT_RETRIES) {
+          await new Promise((resolve) => setTimeout(resolve, NATS_CONNECT_BACKOFF_MS));
+        }
+      }
+    }
+    if (nc === void 0) {
+      throw lastErr instanceof Error ? lastErr : new Error("Code Mode NATS connect failed");
+    }
+    this.nc = nc;
+    this.subscribe(nc, subjectPrefix);
+    const cachedPromise = this.sessionPromise;
+    void nc.closed().then(() => {
+      if (this.sessionPromise === cachedPromise) {
+        this.sessionPromise = void 0;
+        this.nc = void 0;
+        this.logger.info("Code Mode NATS connection closed; session invalidated", {
+          sandboxId: params.sandboxId
+        });
+      }
+    });
+    return {
+      env: {
+        TFY_NATS_URL: this.sandboxClientNatsUrl,
+        TFY_NATS_SUBJECT_PREFIX: subjectPrefix,
+        TFY_CM_REQUEST_TIMEOUT_SECONDS: String(params.requestTimeoutSeconds)
+      }
+    };
+  }
+  subscribe(nc, subjectPrefix) {
+    nc.subscribe(`${subjectPrefix}.${SANDBOX_NATS_MCP_LEAF}`, {
+      callback: (err, msg) => {
+        void this.handleMessage(err, msg);
+      }
+    });
+  }
+  async handleMessage(err, msg) {
+    if (err) {
+      this.logger.error("Code Mode NATS subscription error", (0, import_errorLogFields.extractErrorLogFields)(err));
+      return;
+    }
+    if (!msg.reply) {
+      this.logger.warn(`Code Mode NATS request on '${msg.subject}' has no reply subject; dropping`);
+      return;
+    }
+    const dispatcher = this.dispatcher;
+    if (dispatcher === void 0) {
+      try {
+        msg.respond(this.encode({ ok: false, error: "Code Mode dispatcher is not configured", source: "internal" }));
+      } catch (e) {
+        this.logger.warn(`Failed to send dispatcher-missing reply on '${msg.subject}'`, (0, import_errorLogFields.extractErrorLogFields)(e));
+      }
+      return;
+    }
+    const carrier = {};
+    const traceparent = msg.headers?.get("traceparent");
+    const tracestate = msg.headers?.get("tracestate");
+    if (traceparent) carrier["traceparent"] = traceparent;
+    if (tracestate) carrier["tracestate"] = tracestate;
+    let request;
+    try {
+      request = this.decode(msg);
+    } catch (e) {
+      this.logger.error(`Failed to decode Code Mode NATS request on '${msg.subject}'`, (0, import_errorLogFields.extractErrorLogFields)(e));
+      try {
+        msg.respond(this.encode({ ok: false, error: "Malformed Code Mode request", source: "caller" }));
+      } catch (respondErr) {
+        this.logger.warn(`Failed to send decode-error reply on '${msg.subject}'`, (0, import_errorLogFields.extractErrorLogFields)(respondErr));
+      }
+      return;
+    }
+    const reply = await dispatcher.dispatch({ request, traceCarrier: carrier });
+    try {
+      msg.respond(this.encode(reply));
+    } catch (e) {
+      this.logger.error("Failed to publish Code Mode NATS reply", (0, import_errorLogFields.extractErrorLogFields)(e));
+    }
+  }
+  encode(reply) {
+    return new TextEncoder().encode(JSON.stringify(reply));
+  }
+  decode(msg) {
+    const raw = JSON.parse(new TextDecoder().decode(msg.data));
+    return import_types.CodeModeRequestSchema.parse(raw);
+  }
+};
+// Annotate the CommonJS export names for ESM import in node:
+0 && (module.exports = {
+  CodeModeNatsTransport
+});
+//# sourceMappingURL=CodeModeNatsTransport.js.map

package/dist/core/sandbox/codeMode/nats/CodeModeNatsTransport.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../../../../../src/core/sandbox/codeMode/nats/CodeModeNatsTransport.ts"],"sourcesContent":["import { wsconnect, type Msg, type NatsConnection } from '@nats-io/nats-core';\nimport { context } from '@opentelemetry/api';\nimport { suppressTracing } from '@opentelemetry/core';\nimport { randomUUID } from 'node:crypto';\nimport type { Logger } from 'winston';\nimport { WebSocket } from 'ws';\nimport { extractErrorLogFields } from '../../../util/errorLogFields';\nimport { withTimeout } from '../../../util/promiseUtils';\nimport { DEFAULT_SANDBOX_NATS_WS_PORT } from '../../constants';\nimport type { CodeModeDispatcher } from '../CodeModeDispatcher';\nimport type { CodeModeTransport } from '../CodeModeTransport';\nimport { CodeModeRequestSchema, type CodeModeReply, type CodeModeRequest } from '../types';\n\n// `wsconnect` from @nats-io/nats-core relies on a global WebSocket constructor; in Node we\n// provide it from `ws`. Same pattern as `src/services/NatsService.ts`.\nObject.assign(global, { WebSocket });\n\nconst NATS_CONNECT_TIMEOUT_MS = 10_000;\nconst NATS_CONNECT_RETRIES = 3;\nconst NATS_CONNECT_BACKOFF_MS = 250;\nconst NATS_DRAIN_TIMEOUT_MS = 5_000;\n\nconst SANDBOX_NATS_SUBJECT_ROOT = 'sandbox.bridge';\nconst SANDBOX_NATS_MCP_LEAF = 'mcp';\n\n/**\n * NATS Code Mode transport. Session cache + connection-drop invalidate live here\n * (no `whenClosed` on the public interface).\n */\nexport class CodeModeNatsTransport implements CodeModeTransport {\n  private readonly resolveHostUrl: (sandboxId: string) => Promise<string>;\n  private readonly sandboxClientNatsUrl: string;\n  private readonly logger: Logger;\n\n  private sessionPromise: Promise<{ env: Record<string, string> }> | undefined;\n  private nc: NatsConnection | undefined;\n  private dispatcher: CodeModeDispatcher | undefined;\n\n  constructor(params: {\n    resolveHostUrl: (sandboxId: string) => Promise<string>;\n    sandboxClientNatsUrl?: string;\n    logger: Logger;\n  }) {\n    this.resolveHostUrl = params.resolveHostUrl;\n    this.sandboxClientNatsUrl = params.sandboxClientNatsUrl ?? `ws://localhost:${String(DEFAULT_SANDBOX_NATS_WS_PORT)}`;\n    this.logger = params.logger.child({ module: 'CodeModeNatsTransport' });\n  }\n\n  start(params: {\n    codeModeDispatcher: CodeModeDispatcher;\n    sandboxId: string;\n    requestTimeoutSeconds: number;\n  }): Promise<{ env: Record<string, string> }> {\n    this.dispatcher = params.codeModeDispatcher;\n    this.sessionPromise ??= this.connectSession(params).catch((e: unknown) => {\n      this.sessionPromise = undefined;\n      throw e;\n    });\n    return this.sessionPromise;\n  }\n\n  async stop(): Promise<void> {\n    const pending = this.sessionPromise;\n    this.sessionPromise = undefined;\n    if (pending !== undefined) {\n      try {\n        await pending;\n      } catch {\n        // Connect failed; nothing to drain.\n      }\n    }\n    const nc = this.nc;\n    this.nc = undefined;\n    if (nc === undefined) return;\n    try {\n      await withTimeout(nc.drain(), NATS_DRAIN_TIMEOUT_MS);\n    } catch (e) {\n      this.logger.warn('Code Mode NATS drain failed/timed out; forcing close', extractErrorLogFields(e));\n      await nc.close().catch(() => {\n        /* no-op */\n      });\n    }\n  }\n\n  private async connectSession(params: {\n    sandboxId: string;\n    requestTimeoutSeconds: number;\n  }): Promise<{ env: Record<string, string> }> {\n    const url = await this.resolveHostUrl(params.sandboxId);\n    const subjectPrefix = `${SANDBOX_NATS_SUBJECT_ROOT}.${randomUUID()}`;\n    let lastErr: unknown;\n    let nc: NatsConnection | undefined;\n    for (let attempt = 1; attempt <= NATS_CONNECT_RETRIES; attempt++) {\n      try {\n        nc = await context.with(suppressTracing(context.active()), () =>\n          wsconnect({ servers: [url], timeout: NATS_CONNECT_TIMEOUT_MS }),\n        );\n        this.logger.info(`Connected to sandbox NATS (attempt ${String(attempt)})`, { subjectPrefix });\n        break;\n      } catch (e) {\n        lastErr = e;\n        this.logger.warn(`Code Mode NATS connect attempt ${String(attempt)} failed`, extractErrorLogFields(e));\n        if (attempt < NATS_CONNECT_RETRIES) {\n          await new Promise(resolve => setTimeout(resolve, NATS_CONNECT_BACKOFF_MS));\n        }\n      }\n    }\n    if (nc === undefined) {\n      throw lastErr instanceof Error ? lastErr : new Error('Code Mode NATS connect failed');\n    }\n\n    this.nc = nc;\n    this.subscribe(nc, subjectPrefix);\n\n    const cachedPromise = this.sessionPromise;\n    void nc.closed().then(() => {\n      if (this.sessionPromise === cachedPromise) {\n        this.sessionPromise = undefined;\n        this.nc = undefined;\n        this.logger.info('Code Mode NATS connection closed; session invalidated', {\n          sandboxId: params.sandboxId,\n        });\n      }\n    });\n\n    return {\n      env: {\n        TFY_NATS_URL: this.sandboxClientNatsUrl,\n        TFY_NATS_SUBJECT_PREFIX: subjectPrefix,\n        TFY_CM_REQUEST_TIMEOUT_SECONDS: String(params.requestTimeoutSeconds),\n      },\n    };\n  }\n\n  private subscribe(nc: NatsConnection, subjectPrefix: string): void {\n    nc.subscribe(`${subjectPrefix}.${SANDBOX_NATS_MCP_LEAF}`, {\n      callback: (err, msg) => {\n        void this.handleMessage(err, msg);\n      },\n    });\n  }\n\n  private async handleMessage(err: Error | null, msg: Msg): Promise<void> {\n    if (err) {\n      this.logger.error('Code Mode NATS subscription error', extractErrorLogFields(err));\n      return;\n    }\n    if (!msg.reply) {\n      this.logger.warn(`Code Mode NATS request on '${msg.subject}' has no reply subject; dropping`);\n      return;\n    }\n\n    const dispatcher = this.dispatcher;\n    if (dispatcher === undefined) {\n      try {\n        msg.respond(this.encode({ ok: false, error: 'Code Mode dispatcher is not configured', source: 'internal' }));\n      } catch (e) {\n        this.logger.warn(`Failed to send dispatcher-missing reply on '${msg.subject}'`, extractErrorLogFields(e));\n      }\n      return;\n    }\n\n    const carrier: Record<string, string> = {};\n    const traceparent = msg.headers?.get('traceparent');\n    const tracestate = msg.headers?.get('tracestate');\n    if (traceparent) carrier['traceparent'] = traceparent;\n    if (tracestate) carrier['tracestate'] = tracestate;\n\n    let request: CodeModeRequest;\n    try {\n      request = this.decode(msg);\n    } catch (e) {\n      this.logger.error(`Failed to decode Code Mode NATS request on '${msg.subject}'`, extractErrorLogFields(e));\n      try {\n        msg.respond(this.encode({ ok: false, error: 'Malformed Code Mode request', source: 'caller' }));\n      } catch (respondErr) {\n        this.logger.warn(`Failed to send decode-error reply on '${msg.subject}'`, extractErrorLogFields(respondErr));\n      }\n      return;\n    }\n\n    const reply = await dispatcher.dispatch({ request, traceCarrier: carrier });\n    try {\n      msg.respond(this.encode(reply));\n    } catch (e) {\n      this.logger.error('Failed to publish Code Mode NATS reply', extractErrorLogFields(e));\n    }\n  }\n\n  private encode(reply: CodeModeReply): Uint8Array {\n    return new TextEncoder().encode(JSON.stringify(reply));\n  }\n\n  private decode(msg: Msg): CodeModeRequest {\n    const raw: unknown = JSON.parse(new TextDecoder().decode(msg.data));\n    return CodeModeRequestSchema.parse(raw);\n  }\n}\n"],"mappings":";;;;;;;;;;;;;;;;;;;;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,uBAAyD;AACzD,iBAAwB;AACxB,kBAAgC;AAChC,yBAA2B;AAE3B,gBAA0B;AAC1B,4BAAsC;AACtC,0BAA4B;AAC5B,uBAA6C;AAG7C,mBAAgF;AAIhF,OAAO,OAAO,QAAQ,EAAE,+BAAU,CAAC;AAEnC,IAAM,0BAA0B;AAChC,IAAM,uBAAuB;AAC7B,IAAM,0BAA0B;AAChC,IAAM,wBAAwB;AAE9B,IAAM,4BAA4B;AAClC,IAAM,wBAAwB;AAMvB,IAAM,wBAAN,MAAyD;AAAA,EAC7C;AAAA,EACA;AAAA,EACA;AAAA,EAET;AAAA,EACA;AAAA,EACA;AAAA,EAER,YAAY,QAIT;AACD,SAAK,iBAAiB,OAAO;AAC7B,SAAK,uBAAuB,OAAO,wBAAwB,kBAAkB,OAAO,6CAA4B,CAAC;AACjH,SAAK,SAAS,OAAO,OAAO,MAAM,EAAE,QAAQ,wBAAwB,CAAC;AAAA,EACvE;AAAA,EAEA,MAAM,QAIuC;AAC3C,SAAK,aAAa,OAAO;AACzB,SAAK,mBAAmB,KAAK,eAAe,MAAM,EAAE,MAAM,CAAC,MAAe;AACxE,WAAK,iBAAiB;AACtB,YAAM;AAAA,IACR,CAAC;AACD,WAAO,KAAK;AAAA,EACd;AAAA,EAEA,MAAM,OAAsB;AAC1B,UAAM,UAAU,KAAK;AACrB,SAAK,iBAAiB;AACtB,QAAI,YAAY,QAAW;AACzB,UAAI;AACF,cAAM;AAAA,MACR,QAAQ;AAAA,MAER;AAAA,IACF;AACA,UAAM,KAAK,KAAK;AAChB,SAAK,KAAK;AACV,QAAI,OAAO,OAAW;AACtB,QAAI;AACF,gBAAM,iCAAY,GAAG,MAAM,GAAG,qBAAqB;AAAA,IACrD,SAAS,GAAG;AACV,WAAK,OAAO,KAAK,4DAAwD,6CAAsB,CAAC,CAAC;AACjG,YAAM,GAAG,MAAM,EAAE,MAAM,MAAM;AAAA,MAE7B,CAAC;AAAA,IACH;AAAA,EACF;AAAA,EAEA,MAAc,eAAe,QAGgB;AAC3C,UAAM,MAAM,MAAM,KAAK,eAAe,OAAO,SAAS;AACtD,UAAM,gBAAgB,GAAG,yBAAyB,QAAI,+BAAW,CAAC;AAClE,QAAI;AACJ,QAAI;AACJ,aAAS,UAAU,GAAG,WAAW,sBAAsB,WAAW;AAChE,UAAI;AACF,aAAK,MAAM,mBAAQ;AAAA,cAAK,6BAAgB,mBAAQ,OAAO,CAAC;AAAA,UAAG,UACzD,4BAAU,EAAE,SAAS,CAAC,GAAG,GAAG,SAAS,wBAAwB,CAAC;AAAA,QAChE;AACA,aAAK,OAAO,KAAK,sCAAsC,OAAO,OAAO,CAAC,KAAK,EAAE,cAAc,CAAC;AAC5F;AAAA,MACF,SAAS,GAAG;AACV,kBAAU;AACV,aAAK,OAAO,KAAK,kCAAkC,OAAO,OAAO,CAAC,eAAW,6CAAsB,CAAC,CAAC;AACrG,YAAI,UAAU,sBAAsB;AAClC,gBAAM,IAAI,QAAQ,aAAW,WAAW,SAAS,uBAAuB,CAAC;AAAA,QAC3E;AAAA,MACF;AAAA,IACF;AACA,QAAI,OAAO,QAAW;AACpB,YAAM,mBAAmB,QAAQ,UAAU,IAAI,MAAM,+BAA+B;AAAA,IACtF;AAEA,SAAK,KAAK;AACV,SAAK,UAAU,IAAI,aAAa;AAEhC,UAAM,gBAAgB,KAAK;AAC3B,SAAK,GAAG,OAAO,EAAE,KAAK,MAAM;AAC1B,UAAI,KAAK,mBAAmB,eAAe;AACzC,aAAK,iBAAiB;AACtB,aAAK,KAAK;AACV,aAAK,OAAO,KAAK,yDAAyD;AAAA,UACxE,WAAW,OAAO;AAAA,QACpB,CAAC;AAAA,MACH;AAAA,IACF,CAAC;AAED,WAAO;AAAA,MACL,KAAK;AAAA,QACH,cAAc,KAAK;AAAA,QACnB,yBAAyB;AAAA,QACzB,gCAAgC,OAAO,OAAO,qBAAqB;AAAA,MACrE;AAAA,IACF;AAAA,EACF;AAAA,EAEQ,UAAU,IAAoB,eAA6B;AACjE,OAAG,UAAU,GAAG,aAAa,IAAI,qBAAqB,IAAI;AAAA,MACxD,UAAU,CAAC,KAAK,QAAQ;AACtB,aAAK,KAAK,cAAc,KAAK,GAAG;AAAA,MAClC;AAAA,IACF,CAAC;AAAA,EACH;AAAA,EAEA,MAAc,cAAc,KAAmB,KAAyB;AACtE,QAAI,KAAK;AACP,WAAK,OAAO,MAAM,yCAAqC,6CAAsB,GAAG,CAAC;AACjF;AAAA,IACF;AACA,QAAI,CAAC,IAAI,OAAO;AACd,WAAK,OAAO,KAAK,8BAA8B,IAAI,OAAO,kCAAkC;AAC5F;AAAA,IACF;AAEA,UAAM,aAAa,KAAK;AACxB,QAAI,eAAe,QAAW;AAC5B,UAAI;AACF,YAAI,QAAQ,KAAK,OAAO,EAAE,IAAI,OAAO,OAAO,0CAA0C,QAAQ,WAAW,CAAC,CAAC;AAAA,MAC7G,SAAS,GAAG;AACV,aAAK,OAAO,KAAK,+CAA+C,IAAI,OAAO,SAAK,6CAAsB,CAAC,CAAC;AAAA,MAC1G;AACA;AAAA,IACF;AAEA,UAAM,UAAkC,CAAC;AACzC,UAAM,cAAc,IAAI,SAAS,IAAI,aAAa;AAClD,UAAM,aAAa,IAAI,SAAS,IAAI,YAAY;AAChD,QAAI,YAAa,SAAQ,aAAa,IAAI;AAC1C,QAAI,WAAY,SAAQ,YAAY,IAAI;AAExC,QAAI;AACJ,QAAI;AACF,gBAAU,KAAK,OAAO,GAAG;AAAA,IAC3B,SAAS,GAAG;AACV,WAAK,OAAO,MAAM,+CAA+C,IAAI,OAAO,SAAK,6CAAsB,CAAC,CAAC;AACzG,UAAI;AACF,YAAI,QAAQ,KAAK,OAAO,EAAE,IAAI,OAAO,OAAO,+BAA+B,QAAQ,SAAS,CAAC,CAAC;AAAA,MAChG,SAAS,YAAY;AACnB,aAAK,OAAO,KAAK,yCAAyC,IAAI,OAAO,SAAK,6CAAsB,UAAU,CAAC;AAAA,MAC7G;AACA;AAAA,IACF;AAEA,UAAM,QAAQ,MAAM,WAAW,SAAS,EAAE,SAAS,cAAc,QAAQ,CAAC;AAC1E,QAAI;AACF,UAAI,QAAQ,KAAK,OAAO,KAAK,CAAC;AAAA,IAChC,SAAS,GAAG;AACV,WAAK,OAAO,MAAM,8CAA0C,6CAAsB,CAAC,CAAC;AAAA,IACtF;AAAA,EACF;AAAA,EAEQ,OAAO,OAAkC;AAC/C,WAAO,IAAI,YAAY,EAAE,OAAO,KAAK,UAAU,KAAK,CAAC;AAAA,EACvD;AAAA,EAEQ,OAAO,KAA2B;AACxC,UAAM,MAAe,KAAK,MAAM,IAAI,YAAY,EAAE,OAAO,IAAI,IAAI,CAAC;AAClE,WAAO,mCAAsB,MAAM,GAAG;AAAA,EACxC;AACF;","names":[]}

package/dist/core/sandbox/codeMode/nats/CodeModeNatsTransport.mjs

@@ -0,0 +1,162 @@
+// src/core/sandbox/codeMode/nats/CodeModeNatsTransport.ts
+import { wsconnect } from "@nats-io/nats-core";
+import { context } from "@opentelemetry/api";
+import { suppressTracing } from "@opentelemetry/core";
+import { randomUUID } from "crypto";
+import { WebSocket } from "ws";
+import { extractErrorLogFields } from "../../../util/errorLogFields.mjs";
+import { withTimeout } from "../../../util/promiseUtils.mjs";
+import { DEFAULT_SANDBOX_NATS_WS_PORT } from "../../constants.mjs";
+import { CodeModeRequestSchema } from "../types.mjs";
+Object.assign(global, { WebSocket });
+var NATS_CONNECT_TIMEOUT_MS = 1e4;
+var NATS_CONNECT_RETRIES = 3;
+var NATS_CONNECT_BACKOFF_MS = 250;
+var NATS_DRAIN_TIMEOUT_MS = 5e3;
+var SANDBOX_NATS_SUBJECT_ROOT = "sandbox.bridge";
+var SANDBOX_NATS_MCP_LEAF = "mcp";
+var CodeModeNatsTransport = class {
+  resolveHostUrl;
+  sandboxClientNatsUrl;
+  logger;
+  sessionPromise;
+  nc;
+  dispatcher;
+  constructor(params) {
+    this.resolveHostUrl = params.resolveHostUrl;
+    this.sandboxClientNatsUrl = params.sandboxClientNatsUrl ?? `ws://localhost:${String(DEFAULT_SANDBOX_NATS_WS_PORT)}`;
+    this.logger = params.logger.child({ module: "CodeModeNatsTransport" });
+  }
+  start(params) {
+    this.dispatcher = params.codeModeDispatcher;
+    this.sessionPromise ??= this.connectSession(params).catch((e) => {
+      this.sessionPromise = void 0;
+      throw e;
+    });
+    return this.sessionPromise;
+  }
+  async stop() {
+    const pending = this.sessionPromise;
+    this.sessionPromise = void 0;
+    if (pending !== void 0) {
+      try {
+        await pending;
+      } catch {
+      }
+    }
+    const nc = this.nc;
+    this.nc = void 0;
+    if (nc === void 0) return;
+    try {
+      await withTimeout(nc.drain(), NATS_DRAIN_TIMEOUT_MS);
+    } catch (e) {
+      this.logger.warn("Code Mode NATS drain failed/timed out; forcing close", extractErrorLogFields(e));
+      await nc.close().catch(() => {
+      });
+    }
+  }
+  async connectSession(params) {
+    const url = await this.resolveHostUrl(params.sandboxId);
+    const subjectPrefix = `${SANDBOX_NATS_SUBJECT_ROOT}.${randomUUID()}`;
+    let lastErr;
+    let nc;
+    for (let attempt = 1; attempt <= NATS_CONNECT_RETRIES; attempt++) {
+      try {
+        nc = await context.with(
+          suppressTracing(context.active()),
+          () => wsconnect({ servers: [url], timeout: NATS_CONNECT_TIMEOUT_MS })
+        );
+        this.logger.info(`Connected to sandbox NATS (attempt ${String(attempt)})`, { subjectPrefix });
+        break;
+      } catch (e) {
+        lastErr = e;
+        this.logger.warn(`Code Mode NATS connect attempt ${String(attempt)} failed`, extractErrorLogFields(e));
+        if (attempt < NATS_CONNECT_RETRIES) {
+          await new Promise((resolve) => setTimeout(resolve, NATS_CONNECT_BACKOFF_MS));
+        }
+      }
+    }
+    if (nc === void 0) {
+      throw lastErr instanceof Error ? lastErr : new Error("Code Mode NATS connect failed");
+    }
+    this.nc = nc;
+    this.subscribe(nc, subjectPrefix);
+    const cachedPromise = this.sessionPromise;
+    void nc.closed().then(() => {
+      if (this.sessionPromise === cachedPromise) {
+        this.sessionPromise = void 0;
+        this.nc = void 0;
+        this.logger.info("Code Mode NATS connection closed; session invalidated", {
+          sandboxId: params.sandboxId
+        });
+      }
+    });
+    return {
+      env: {
+        TFY_NATS_URL: this.sandboxClientNatsUrl,
+        TFY_NATS_SUBJECT_PREFIX: subjectPrefix,
+        TFY_CM_REQUEST_TIMEOUT_SECONDS: String(params.requestTimeoutSeconds)
+      }
+    };
+  }
+  subscribe(nc, subjectPrefix) {
+    nc.subscribe(`${subjectPrefix}.${SANDBOX_NATS_MCP_LEAF}`, {
+      callback: (err, msg) => {
+        void this.handleMessage(err, msg);
+      }
+    });
+  }
+  async handleMessage(err, msg) {
+    if (err) {
+      this.logger.error("Code Mode NATS subscription error", extractErrorLogFields(err));
+      return;
+    }
+    if (!msg.reply) {
+      this.logger.warn(`Code Mode NATS request on '${msg.subject}' has no reply subject; dropping`);
+      return;
+    }
+    const dispatcher = this.dispatcher;
+    if (dispatcher === void 0) {
+      try {
+        msg.respond(this.encode({ ok: false, error: "Code Mode dispatcher is not configured", source: "internal" }));
+      } catch (e) {
+        this.logger.warn(`Failed to send dispatcher-missing reply on '${msg.subject}'`, extractErrorLogFields(e));
+      }
+      return;
+    }
+    const carrier = {};
+    const traceparent = msg.headers?.get("traceparent");
+    const tracestate = msg.headers?.get("tracestate");
+    if (traceparent) carrier["traceparent"] = traceparent;
+    if (tracestate) carrier["tracestate"] = tracestate;
+    let request;
+    try {
+      request = this.decode(msg);
+    } catch (e) {
+      this.logger.error(`Failed to decode Code Mode NATS request on '${msg.subject}'`, extractErrorLogFields(e));
+      try {
+        msg.respond(this.encode({ ok: false, error: "Malformed Code Mode request", source: "caller" }));
+      } catch (respondErr) {
+        this.logger.warn(`Failed to send decode-error reply on '${msg.subject}'`, extractErrorLogFields(respondErr));
+      }
+      return;
+    }
+    const reply = await dispatcher.dispatch({ request, traceCarrier: carrier });
+    try {
+      msg.respond(this.encode(reply));
+    } catch (e) {
+      this.logger.error("Failed to publish Code Mode NATS reply", extractErrorLogFields(e));
+    }
+  }
+  encode(reply) {
+    return new TextEncoder().encode(JSON.stringify(reply));
+  }
+  decode(msg) {
+    const raw = JSON.parse(new TextDecoder().decode(msg.data));
+    return CodeModeRequestSchema.parse(raw);
+  }
+};
+export {
+  CodeModeNatsTransport
+};
+//# sourceMappingURL=CodeModeNatsTransport.mjs.map

package/dist/core/sandbox/codeMode/nats/CodeModeNatsTransport.mjs.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../../../../../src/core/sandbox/codeMode/nats/CodeModeNatsTransport.ts"],"sourcesContent":["import { wsconnect, type Msg, type NatsConnection } from '@nats-io/nats-core';\nimport { context } from '@opentelemetry/api';\nimport { suppressTracing } from '@opentelemetry/core';\nimport { randomUUID } from 'node:crypto';\nimport type { Logger } from 'winston';\nimport { WebSocket } from 'ws';\nimport { extractErrorLogFields } from '../../../util/errorLogFields';\nimport { withTimeout } from '../../../util/promiseUtils';\nimport { DEFAULT_SANDBOX_NATS_WS_PORT } from '../../constants';\nimport type { CodeModeDispatcher } from '../CodeModeDispatcher';\nimport type { CodeModeTransport } from '../CodeModeTransport';\nimport { CodeModeRequestSchema, type CodeModeReply, type CodeModeRequest } from '../types';\n\n// `wsconnect` from @nats-io/nats-core relies on a global WebSocket constructor; in Node we\n// provide it from `ws`. Same pattern as `src/services/NatsService.ts`.\nObject.assign(global, { WebSocket });\n\nconst NATS_CONNECT_TIMEOUT_MS = 10_000;\nconst NATS_CONNECT_RETRIES = 3;\nconst NATS_CONNECT_BACKOFF_MS = 250;\nconst NATS_DRAIN_TIMEOUT_MS = 5_000;\n\nconst SANDBOX_NATS_SUBJECT_ROOT = 'sandbox.bridge';\nconst SANDBOX_NATS_MCP_LEAF = 'mcp';\n\n/**\n * NATS Code Mode transport. Session cache + connection-drop invalidate live here\n * (no `whenClosed` on the public interface).\n */\nexport class CodeModeNatsTransport implements CodeModeTransport {\n  private readonly resolveHostUrl: (sandboxId: string) => Promise<string>;\n  private readonly sandboxClientNatsUrl: string;\n  private readonly logger: Logger;\n\n  private sessionPromise: Promise<{ env: Record<string, string> }> | undefined;\n  private nc: NatsConnection | undefined;\n  private dispatcher: CodeModeDispatcher | undefined;\n\n  constructor(params: {\n    resolveHostUrl: (sandboxId: string) => Promise<string>;\n    sandboxClientNatsUrl?: string;\n    logger: Logger;\n  }) {\n    this.resolveHostUrl = params.resolveHostUrl;\n    this.sandboxClientNatsUrl = params.sandboxClientNatsUrl ?? `ws://localhost:${String(DEFAULT_SANDBOX_NATS_WS_PORT)}`;\n    this.logger = params.logger.child({ module: 'CodeModeNatsTransport' });\n  }\n\n  start(params: {\n    codeModeDispatcher: CodeModeDispatcher;\n    sandboxId: string;\n    requestTimeoutSeconds: number;\n  }): Promise<{ env: Record<string, string> }> {\n    this.dispatcher = params.codeModeDispatcher;\n    this.sessionPromise ??= this.connectSession(params).catch((e: unknown) => {\n      this.sessionPromise = undefined;\n      throw e;\n    });\n    return this.sessionPromise;\n  }\n\n  async stop(): Promise<void> {\n    const pending = this.sessionPromise;\n    this.sessionPromise = undefined;\n    if (pending !== undefined) {\n      try {\n        await pending;\n      } catch {\n        // Connect failed; nothing to drain.\n      }\n    }\n    const nc = this.nc;\n    this.nc = undefined;\n    if (nc === undefined) return;\n    try {\n      await withTimeout(nc.drain(), NATS_DRAIN_TIMEOUT_MS);\n    } catch (e) {\n      this.logger.warn('Code Mode NATS drain failed/timed out; forcing close', extractErrorLogFields(e));\n      await nc.close().catch(() => {\n        /* no-op */\n      });\n    }\n  }\n\n  private async connectSession(params: {\n    sandboxId: string;\n    requestTimeoutSeconds: number;\n  }): Promise<{ env: Record<string, string> }> {\n    const url = await this.resolveHostUrl(params.sandboxId);\n    const subjectPrefix = `${SANDBOX_NATS_SUBJECT_ROOT}.${randomUUID()}`;\n    let lastErr: unknown;\n    let nc: NatsConnection | undefined;\n    for (let attempt = 1; attempt <= NATS_CONNECT_RETRIES; attempt++) {\n      try {\n        nc = await context.with(suppressTracing(context.active()), () =>\n          wsconnect({ servers: [url], timeout: NATS_CONNECT_TIMEOUT_MS }),\n        );\n        this.logger.info(`Connected to sandbox NATS (attempt ${String(attempt)})`, { subjectPrefix });\n        break;\n      } catch (e) {\n        lastErr = e;\n        this.logger.warn(`Code Mode NATS connect attempt ${String(attempt)} failed`, extractErrorLogFields(e));\n        if (attempt < NATS_CONNECT_RETRIES) {\n          await new Promise(resolve => setTimeout(resolve, NATS_CONNECT_BACKOFF_MS));\n        }\n      }\n    }\n    if (nc === undefined) {\n      throw lastErr instanceof Error ? lastErr : new Error('Code Mode NATS connect failed');\n    }\n\n    this.nc = nc;\n    this.subscribe(nc, subjectPrefix);\n\n    const cachedPromise = this.sessionPromise;\n    void nc.closed().then(() => {\n      if (this.sessionPromise === cachedPromise) {\n        this.sessionPromise = undefined;\n        this.nc = undefined;\n        this.logger.info('Code Mode NATS connection closed; session invalidated', {\n          sandboxId: params.sandboxId,\n        });\n      }\n    });\n\n    return {\n      env: {\n        TFY_NATS_URL: this.sandboxClientNatsUrl,\n        TFY_NATS_SUBJECT_PREFIX: subjectPrefix,\n        TFY_CM_REQUEST_TIMEOUT_SECONDS: String(params.requestTimeoutSeconds),\n      },\n    };\n  }\n\n  private subscribe(nc: NatsConnection, subjectPrefix: string): void {\n    nc.subscribe(`${subjectPrefix}.${SANDBOX_NATS_MCP_LEAF}`, {\n      callback: (err, msg) => {\n        void this.handleMessage(err, msg);\n      },\n    });\n  }\n\n  private async handleMessage(err: Error | null, msg: Msg): Promise<void> {\n    if (err) {\n      this.logger.error('Code Mode NATS subscription error', extractErrorLogFields(err));\n      return;\n    }\n    if (!msg.reply) {\n      this.logger.warn(`Code Mode NATS request on '${msg.subject}' has no reply subject; dropping`);\n      return;\n    }\n\n    const dispatcher = this.dispatcher;\n    if (dispatcher === undefined) {\n      try {\n        msg.respond(this.encode({ ok: false, error: 'Code Mode dispatcher is not configured', source: 'internal' }));\n      } catch (e) {\n        this.logger.warn(`Failed to send dispatcher-missing reply on '${msg.subject}'`, extractErrorLogFields(e));\n      }\n      return;\n    }\n\n    const carrier: Record<string, string> = {};\n    const traceparent = msg.headers?.get('traceparent');\n    const tracestate = msg.headers?.get('tracestate');\n    if (traceparent) carrier['traceparent'] = traceparent;\n    if (tracestate) carrier['tracestate'] = tracestate;\n\n    let request: CodeModeRequest;\n    try {\n      request = this.decode(msg);\n    } catch (e) {\n      this.logger.error(`Failed to decode Code Mode NATS request on '${msg.subject}'`, extractErrorLogFields(e));\n      try {\n        msg.respond(this.encode({ ok: false, error: 'Malformed Code Mode request', source: 'caller' }));\n      } catch (respondErr) {\n        this.logger.warn(`Failed to send decode-error reply on '${msg.subject}'`, extractErrorLogFields(respondErr));\n      }\n      return;\n    }\n\n    const reply = await dispatcher.dispatch({ request, traceCarrier: carrier });\n    try {\n      msg.respond(this.encode(reply));\n    } catch (e) {\n      this.logger.error('Failed to publish Code Mode NATS reply', extractErrorLogFields(e));\n    }\n  }\n\n  private encode(reply: CodeModeReply): Uint8Array {\n    return new TextEncoder().encode(JSON.stringify(reply));\n  }\n\n  private decode(msg: Msg): CodeModeRequest {\n    const raw: unknown = JSON.parse(new TextDecoder().decode(msg.data));\n    return CodeModeRequestSchema.parse(raw);\n  }\n}\n"],"mappings":";AAAA,SAAS,iBAAgD;AACzD,SAAS,eAAe;AACxB,SAAS,uBAAuB;AAChC,SAAS,kBAAkB;AAE3B,SAAS,iBAAiB;AAC1B,SAAS,6BAA6B;AACtC,SAAS,mBAAmB;AAC5B,SAAS,oCAAoC;AAG7C,SAAS,6BAAuE;AAIhF,OAAO,OAAO,QAAQ,EAAE,UAAU,CAAC;AAEnC,IAAM,0BAA0B;AAChC,IAAM,uBAAuB;AAC7B,IAAM,0BAA0B;AAChC,IAAM,wBAAwB;AAE9B,IAAM,4BAA4B;AAClC,IAAM,wBAAwB;AAMvB,IAAM,wBAAN,MAAyD;AAAA,EAC7C;AAAA,EACA;AAAA,EACA;AAAA,EAET;AAAA,EACA;AAAA,EACA;AAAA,EAER,YAAY,QAIT;AACD,SAAK,iBAAiB,OAAO;AAC7B,SAAK,uBAAuB,OAAO,wBAAwB,kBAAkB,OAAO,4BAA4B,CAAC;AACjH,SAAK,SAAS,OAAO,OAAO,MAAM,EAAE,QAAQ,wBAAwB,CAAC;AAAA,EACvE;AAAA,EAEA,MAAM,QAIuC;AAC3C,SAAK,aAAa,OAAO;AACzB,SAAK,mBAAmB,KAAK,eAAe,MAAM,EAAE,MAAM,CAAC,MAAe;AACxE,WAAK,iBAAiB;AACtB,YAAM;AAAA,IACR,CAAC;AACD,WAAO,KAAK;AAAA,EACd;AAAA,EAEA,MAAM,OAAsB;AAC1B,UAAM,UAAU,KAAK;AACrB,SAAK,iBAAiB;AACtB,QAAI,YAAY,QAAW;AACzB,UAAI;AACF,cAAM;AAAA,MACR,QAAQ;AAAA,MAER;AAAA,IACF;AACA,UAAM,KAAK,KAAK;AAChB,SAAK,KAAK;AACV,QAAI,OAAO,OAAW;AACtB,QAAI;AACF,YAAM,YAAY,GAAG,MAAM,GAAG,qBAAqB;AAAA,IACrD,SAAS,GAAG;AACV,WAAK,OAAO,KAAK,wDAAwD,sBAAsB,CAAC,CAAC;AACjG,YAAM,GAAG,MAAM,EAAE,MAAM,MAAM;AAAA,MAE7B,CAAC;AAAA,IACH;AAAA,EACF;AAAA,EAEA,MAAc,eAAe,QAGgB;AAC3C,UAAM,MAAM,MAAM,KAAK,eAAe,OAAO,SAAS;AACtD,UAAM,gBAAgB,GAAG,yBAAyB,IAAI,WAAW,CAAC;AAClE,QAAI;AACJ,QAAI;AACJ,aAAS,UAAU,GAAG,WAAW,sBAAsB,WAAW;AAChE,UAAI;AACF,aAAK,MAAM,QAAQ;AAAA,UAAK,gBAAgB,QAAQ,OAAO,CAAC;AAAA,UAAG,MACzD,UAAU,EAAE,SAAS,CAAC,GAAG,GAAG,SAAS,wBAAwB,CAAC;AAAA,QAChE;AACA,aAAK,OAAO,KAAK,sCAAsC,OAAO,OAAO,CAAC,KAAK,EAAE,cAAc,CAAC;AAC5F;AAAA,MACF,SAAS,GAAG;AACV,kBAAU;AACV,aAAK,OAAO,KAAK,kCAAkC,OAAO,OAAO,CAAC,WAAW,sBAAsB,CAAC,CAAC;AACrG,YAAI,UAAU,sBAAsB;AAClC,gBAAM,IAAI,QAAQ,aAAW,WAAW,SAAS,uBAAuB,CAAC;AAAA,QAC3E;AAAA,MACF;AAAA,IACF;AACA,QAAI,OAAO,QAAW;AACpB,YAAM,mBAAmB,QAAQ,UAAU,IAAI,MAAM,+BAA+B;AAAA,IACtF;AAEA,SAAK,KAAK;AACV,SAAK,UAAU,IAAI,aAAa;AAEhC,UAAM,gBAAgB,KAAK;AAC3B,SAAK,GAAG,OAAO,EAAE,KAAK,MAAM;AAC1B,UAAI,KAAK,mBAAmB,eAAe;AACzC,aAAK,iBAAiB;AACtB,aAAK,KAAK;AACV,aAAK,OAAO,KAAK,yDAAyD;AAAA,UACxE,WAAW,OAAO;AAAA,QACpB,CAAC;AAAA,MACH;AAAA,IACF,CAAC;AAED,WAAO;AAAA,MACL,KAAK;AAAA,QACH,cAAc,KAAK;AAAA,QACnB,yBAAyB;AAAA,QACzB,gCAAgC,OAAO,OAAO,qBAAqB;AAAA,MACrE;AAAA,IACF;AAAA,EACF;AAAA,EAEQ,UAAU,IAAoB,eAA6B;AACjE,OAAG,UAAU,GAAG,aAAa,IAAI,qBAAqB,IAAI;AAAA,MACxD,UAAU,CAAC,KAAK,QAAQ;AACtB,aAAK,KAAK,cAAc,KAAK,GAAG;AAAA,MAClC;AAAA,IACF,CAAC;AAAA,EACH;AAAA,EAEA,MAAc,cAAc,KAAmB,KAAyB;AACtE,QAAI,KAAK;AACP,WAAK,OAAO,MAAM,qCAAqC,sBAAsB,GAAG,CAAC;AACjF;AAAA,IACF;AACA,QAAI,CAAC,IAAI,OAAO;AACd,WAAK,OAAO,KAAK,8BAA8B,IAAI,OAAO,kCAAkC;AAC5F;AAAA,IACF;AAEA,UAAM,aAAa,KAAK;AACxB,QAAI,eAAe,QAAW;AAC5B,UAAI;AACF,YAAI,QAAQ,KAAK,OAAO,EAAE,IAAI,OAAO,OAAO,0CAA0C,QAAQ,WAAW,CAAC,CAAC;AAAA,MAC7G,SAAS,GAAG;AACV,aAAK,OAAO,KAAK,+CAA+C,IAAI,OAAO,KAAK,sBAAsB,CAAC,CAAC;AAAA,MAC1G;AACA;AAAA,IACF;AAEA,UAAM,UAAkC,CAAC;AACzC,UAAM,cAAc,IAAI,SAAS,IAAI,aAAa;AAClD,UAAM,aAAa,IAAI,SAAS,IAAI,YAAY;AAChD,QAAI,YAAa,SAAQ,aAAa,IAAI;AAC1C,QAAI,WAAY,SAAQ,YAAY,IAAI;AAExC,QAAI;AACJ,QAAI;AACF,gBAAU,KAAK,OAAO,GAAG;AAAA,IAC3B,SAAS,GAAG;AACV,WAAK,OAAO,MAAM,+CAA+C,IAAI,OAAO,KAAK,sBAAsB,CAAC,CAAC;AACzG,UAAI;AACF,YAAI,QAAQ,KAAK,OAAO,EAAE,IAAI,OAAO,OAAO,+BAA+B,QAAQ,SAAS,CAAC,CAAC;AAAA,MAChG,SAAS,YAAY;AACnB,aAAK,OAAO,KAAK,yCAAyC,IAAI,OAAO,KAAK,sBAAsB,UAAU,CAAC;AAAA,MAC7G;AACA;AAAA,IACF;AAEA,UAAM,QAAQ,MAAM,WAAW,SAAS,EAAE,SAAS,cAAc,QAAQ,CAAC;AAC1E,QAAI;AACF,UAAI,QAAQ,KAAK,OAAO,KAAK,CAAC;AAAA,IAChC,SAAS,GAAG;AACV,WAAK,OAAO,MAAM,0CAA0C,sBAAsB,CAAC,CAAC;AAAA,IACtF;AAAA,EACF;AAAA,EAEQ,OAAO,OAAkC;AAC/C,WAAO,IAAI,YAAY,EAAE,OAAO,KAAK,UAAU,KAAK,CAAC;AAAA,EACvD;AAAA,EAEQ,OAAO,KAA2B;AACxC,UAAM,MAAe,KAAK,MAAM,IAAI,YAAY,EAAE,OAAO,IAAI,IAAI,CAAC;AAClE,WAAO,sBAAsB,MAAM,GAAG;AAAA,EACxC;AACF;","names":[]}

package/dist/core/sandbox/codeMode/types.d.ts

@@ -0,0 +1,34 @@
+/**
+ * Shared Code Mode request/reply wire shapes (NATS body and UDS JSON).
+ */
+import { z } from 'zod';
+export declare const CodeModeRequestSchema: z.ZodDiscriminatedUnion<[z.ZodObject<{
+    op: z.ZodLiteral<"list_tools">;
+    server: z.ZodString;
+}, z.core.$strip>, z.ZodObject<{
+    op: z.ZodLiteral<"call_tool">;
+    server: z.ZodString;
+    tool: z.ZodString;
+    arguments: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodUnknown>>;
+}, z.core.$strip>], "op">;
+export type CodeModeRequest = z.infer<typeof CodeModeRequestSchema>;
+export declare const CodeModeErrorSourceSchema: z.ZodEnum<{
+    caller: "caller";
+    internal: "internal";
+    transport: "transport";
+}>;
+export type CodeModeErrorSource = z.infer<typeof CodeModeErrorSourceSchema>;
+export declare const CodeModeReplySchema: z.ZodDiscriminatedUnion<[z.ZodObject<{
+    ok: z.ZodLiteral<true>;
+    result: z.ZodUnknown;
+}, z.core.$strip>, z.ZodObject<{
+    ok: z.ZodLiteral<false>;
+    error: z.ZodString;
+    source: z.ZodEnum<{
+        caller: "caller";
+        internal: "internal";
+        transport: "transport";
+    }>;
+}, z.core.$strip>], "ok">;
+export type CodeModeReply = z.infer<typeof CodeModeReplySchema>;
+//# sourceMappingURL=types.d.ts.map

package/dist/core/sandbox/codeMode/types.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../../../../src/core/sandbox/codeMode/types.ts"],"names":[],"mappings":"AAAA;;GAEG;AACH,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB,eAAO,MAAM,qBAAqB;;;;;;;;yBAWhC,CAAC;AACH,MAAM,MAAM,eAAe,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,qBAAqB,CAAC,CAAC;AAEpE,eAAO,MAAM,yBAAyB;;;;EAA8C,CAAC;AACrF,MAAM,MAAM,mBAAmB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,yBAAyB,CAAC,CAAC;AAE5E,eAAO,MAAM,mBAAmB;;;;;;;;;;;yBAU9B,CAAC;AACH,MAAM,MAAM,aAAa,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,mBAAmB,CAAC,CAAC"}

package/dist/core/sandbox/codeMode/types.js

@@ -0,0 +1,59 @@
+"use strict";
+var __defProp = Object.defineProperty;
+var __getOwnPropDesc = Object.getOwnPropertyDescriptor;
+var __getOwnPropNames = Object.getOwnPropertyNames;
+var __hasOwnProp = Object.prototype.hasOwnProperty;
+var __export = (target, all) => {
+  for (var name in all)
+    __defProp(target, name, { get: all[name], enumerable: true });
+};
+var __copyProps = (to, from, except, desc) => {
+  if (from && typeof from === "object" || typeof from === "function") {
+    for (let key of __getOwnPropNames(from))
+      if (!__hasOwnProp.call(to, key) && key !== except)
+        __defProp(to, key, { get: () => from[key], enumerable: !(desc = __getOwnPropDesc(from, key)) || desc.enumerable });
+  }
+  return to;
+};
+var __toCommonJS = (mod) => __copyProps(__defProp({}, "__esModule", { value: true }), mod);
+
+// src/core/sandbox/codeMode/types.ts
+var types_exports = {};
+__export(types_exports, {
+  CodeModeErrorSourceSchema: () => CodeModeErrorSourceSchema,
+  CodeModeReplySchema: () => CodeModeReplySchema,
+  CodeModeRequestSchema: () => CodeModeRequestSchema
+});
+module.exports = __toCommonJS(types_exports);
+var import_zod = require("zod");
+var CodeModeRequestSchema = import_zod.z.discriminatedUnion("op", [
+  import_zod.z.object({
+    op: import_zod.z.literal("list_tools"),
+    server: import_zod.z.string().min(1)
+  }),
+  import_zod.z.object({
+    op: import_zod.z.literal("call_tool"),
+    server: import_zod.z.string().min(1),
+    tool: import_zod.z.string().min(1),
+    arguments: import_zod.z.record(import_zod.z.string(), import_zod.z.unknown()).optional()
+  })
+]);
+var CodeModeErrorSourceSchema = import_zod.z.enum(["internal", "caller", "transport"]);
+var CodeModeReplySchema = import_zod.z.discriminatedUnion("ok", [
+  import_zod.z.object({
+    ok: import_zod.z.literal(true),
+    result: import_zod.z.unknown()
+  }),
+  import_zod.z.object({
+    ok: import_zod.z.literal(false),
+    error: import_zod.z.string(),
+    source: CodeModeErrorSourceSchema
+  })
+]);
+// Annotate the CommonJS export names for ESM import in node:
+0 && (module.exports = {
+  CodeModeErrorSourceSchema,
+  CodeModeReplySchema,
+  CodeModeRequestSchema
+});
+//# sourceMappingURL=types.js.map

package/dist/core/sandbox/codeMode/types.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../../../../src/core/sandbox/codeMode/types.ts"],"sourcesContent":["/**\n * Shared Code Mode request/reply wire shapes (NATS body and UDS JSON).\n */\nimport { z } from 'zod';\n\nexport const CodeModeRequestSchema = z.discriminatedUnion('op', [\n  z.object({\n    op: z.literal('list_tools'),\n    server: z.string().min(1),\n  }),\n  z.object({\n    op: z.literal('call_tool'),\n    server: z.string().min(1),\n    tool: z.string().min(1),\n    arguments: z.record(z.string(), z.unknown()).optional(),\n  }),\n]);\nexport type CodeModeRequest = z.infer<typeof CodeModeRequestSchema>;\n\nexport const CodeModeErrorSourceSchema = z.enum(['internal', 'caller', 'transport']);\nexport type CodeModeErrorSource = z.infer<typeof CodeModeErrorSourceSchema>;\n\nexport const CodeModeReplySchema = z.discriminatedUnion('ok', [\n  z.object({\n    ok: z.literal(true),\n    result: z.unknown(),\n  }),\n  z.object({\n    ok: z.literal(false),\n    error: z.string(),\n    source: CodeModeErrorSourceSchema,\n  }),\n]);\nexport type CodeModeReply = z.infer<typeof CodeModeReplySchema>;\n"],"mappings":";;;;;;;;;;;;;;;;;;;;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAGA,iBAAkB;AAEX,IAAM,wBAAwB,aAAE,mBAAmB,MAAM;AAAA,EAC9D,aAAE,OAAO;AAAA,IACP,IAAI,aAAE,QAAQ,YAAY;AAAA,IAC1B,QAAQ,aAAE,OAAO,EAAE,IAAI,CAAC;AAAA,EAC1B,CAAC;AAAA,EACD,aAAE,OAAO;AAAA,IACP,IAAI,aAAE,QAAQ,WAAW;AAAA,IACzB,QAAQ,aAAE,OAAO,EAAE,IAAI,CAAC;AAAA,IACxB,MAAM,aAAE,OAAO,EAAE,IAAI,CAAC;AAAA,IACtB,WAAW,aAAE,OAAO,aAAE,OAAO,GAAG,aAAE,QAAQ,CAAC,EAAE,SAAS;AAAA,EACxD,CAAC;AACH,CAAC;AAGM,IAAM,4BAA4B,aAAE,KAAK,CAAC,YAAY,UAAU,WAAW,CAAC;AAG5E,IAAM,sBAAsB,aAAE,mBAAmB,MAAM;AAAA,EAC5D,aAAE,OAAO;AAAA,IACP,IAAI,aAAE,QAAQ,IAAI;AAAA,IAClB,QAAQ,aAAE,QAAQ;AAAA,EACpB,CAAC;AAAA,EACD,aAAE,OAAO;AAAA,IACP,IAAI,aAAE,QAAQ,KAAK;AAAA,IACnB,OAAO,aAAE,OAAO;AAAA,IAChB,QAAQ;AAAA,EACV,CAAC;AACH,CAAC;","names":[]}

package/dist/core/sandbox/codeMode/types.mjs

@@ -0,0 +1,32 @@
+// src/core/sandbox/codeMode/types.ts
+import { z } from "zod";
+var CodeModeRequestSchema = z.discriminatedUnion("op", [
+  z.object({
+    op: z.literal("list_tools"),
+    server: z.string().min(1)
+  }),
+  z.object({
+    op: z.literal("call_tool"),
+    server: z.string().min(1),
+    tool: z.string().min(1),
+    arguments: z.record(z.string(), z.unknown()).optional()
+  })
+]);
+var CodeModeErrorSourceSchema = z.enum(["internal", "caller", "transport"]);
+var CodeModeReplySchema = z.discriminatedUnion("ok", [
+  z.object({
+    ok: z.literal(true),
+    result: z.unknown()
+  }),
+  z.object({
+    ok: z.literal(false),
+    error: z.string(),
+    source: CodeModeErrorSourceSchema
+  })
+]);
+export {
+  CodeModeErrorSourceSchema,
+  CodeModeReplySchema,
+  CodeModeRequestSchema
+};
+//# sourceMappingURL=types.mjs.map

package/dist/core/sandbox/codeMode/types.mjs.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../../../../src/core/sandbox/codeMode/types.ts"],"sourcesContent":["/**\n * Shared Code Mode request/reply wire shapes (NATS body and UDS JSON).\n */\nimport { z } from 'zod';\n\nexport const CodeModeRequestSchema = z.discriminatedUnion('op', [\n  z.object({\n    op: z.literal('list_tools'),\n    server: z.string().min(1),\n  }),\n  z.object({\n    op: z.literal('call_tool'),\n    server: z.string().min(1),\n    tool: z.string().min(1),\n    arguments: z.record(z.string(), z.unknown()).optional(),\n  }),\n]);\nexport type CodeModeRequest = z.infer<typeof CodeModeRequestSchema>;\n\nexport const CodeModeErrorSourceSchema = z.enum(['internal', 'caller', 'transport']);\nexport type CodeModeErrorSource = z.infer<typeof CodeModeErrorSourceSchema>;\n\nexport const CodeModeReplySchema = z.discriminatedUnion('ok', [\n  z.object({\n    ok: z.literal(true),\n    result: z.unknown(),\n  }),\n  z.object({\n    ok: z.literal(false),\n    error: z.string(),\n    source: CodeModeErrorSourceSchema,\n  }),\n]);\nexport type CodeModeReply = z.infer<typeof CodeModeReplySchema>;\n"],"mappings":";AAGA,SAAS,SAAS;AAEX,IAAM,wBAAwB,EAAE,mBAAmB,MAAM;AAAA,EAC9D,EAAE,OAAO;AAAA,IACP,IAAI,EAAE,QAAQ,YAAY;AAAA,IAC1B,QAAQ,EAAE,OAAO,EAAE,IAAI,CAAC;AAAA,EAC1B,CAAC;AAAA,EACD,EAAE,OAAO;AAAA,IACP,IAAI,EAAE,QAAQ,WAAW;AAAA,IACzB,QAAQ,EAAE,OAAO,EAAE,IAAI,CAAC;AAAA,IACxB,MAAM,EAAE,OAAO,EAAE,IAAI,CAAC;AAAA,IACtB,WAAW,EAAE,OAAO,EAAE,OAAO,GAAG,EAAE,QAAQ,CAAC,EAAE,SAAS;AAAA,EACxD,CAAC;AACH,CAAC;AAGM,IAAM,4BAA4B,EAAE,KAAK,CAAC,YAAY,UAAU,WAAW,CAAC;AAG5E,IAAM,sBAAsB,EAAE,mBAAmB,MAAM;AAAA,EAC5D,EAAE,OAAO;AAAA,IACP,IAAI,EAAE,QAAQ,IAAI;AAAA,IAClB,QAAQ,EAAE,QAAQ;AAAA,EACpB,CAAC;AAAA,EACD,EAAE,OAAO;AAAA,IACP,IAAI,EAAE,QAAQ,KAAK;AAAA,IACnB,OAAO,EAAE,OAAO;AAAA,IAChB,QAAQ;AAAA,EACV,CAAC;AACH,CAAC;","names":[]}

package/dist/core/sandbox/constants.d.ts

@@ -0,0 +1,10 @@
+/** Stable directory inside the sandbox for user file uploads (mkdir during sandbox init). */
+export declare const SANDBOX_FILE_UPLOADS_DIR = "/tmp/uploads";
+/** Default port of the pod-local NATS WebSocket broker used by the sandbox→gateway MCP bridge. */
+export declare const DEFAULT_SANDBOX_NATS_WS_PORT = 4444;
+/**
+ * Default lifetime of a Daytona signed preview URL for the NATS bridge.
+ * Matches the gateway's default AGENT_RESPONSE_MAX_EXECUTION_TIME_MS (1 hour).
+ */
+export declare const DEFAULT_PREVIEW_URL_EXPIRY_SECONDS = 3600;
+//# sourceMappingURL=constants.d.ts.map

package/dist/core/sandbox/constants.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"constants.d.ts","sourceRoot":"","sources":["../../../src/core/sandbox/constants.ts"],"names":[],"mappings":"AAAA,6FAA6F;AAC7F,eAAO,MAAM,wBAAwB,iBAAiB,CAAC;AAEvD,kGAAkG;AAClG,eAAO,MAAM,4BAA4B,OAAO,CAAC;AAEjD;;;GAGG;AACH,eAAO,MAAM,kCAAkC,OAAO,CAAC"}

package/dist/core/sandbox/constants.js

@@ -0,0 +1,37 @@
+"use strict";
+var __defProp = Object.defineProperty;
+var __getOwnPropDesc = Object.getOwnPropertyDescriptor;
+var __getOwnPropNames = Object.getOwnPropertyNames;
+var __hasOwnProp = Object.prototype.hasOwnProperty;
+var __export = (target, all) => {
+  for (var name in all)
+    __defProp(target, name, { get: all[name], enumerable: true });
+};
+var __copyProps = (to, from, except, desc) => {
+  if (from && typeof from === "object" || typeof from === "function") {
+    for (let key of __getOwnPropNames(from))
+      if (!__hasOwnProp.call(to, key) && key !== except)
+        __defProp(to, key, { get: () => from[key], enumerable: !(desc = __getOwnPropDesc(from, key)) || desc.enumerable });
+  }
+  return to;
+};
+var __toCommonJS = (mod) => __copyProps(__defProp({}, "__esModule", { value: true }), mod);
+
+// src/core/sandbox/constants.ts
+var constants_exports = {};
+__export(constants_exports, {
+  DEFAULT_PREVIEW_URL_EXPIRY_SECONDS: () => DEFAULT_PREVIEW_URL_EXPIRY_SECONDS,
+  DEFAULT_SANDBOX_NATS_WS_PORT: () => DEFAULT_SANDBOX_NATS_WS_PORT,
+  SANDBOX_FILE_UPLOADS_DIR: () => SANDBOX_FILE_UPLOADS_DIR
+});
+module.exports = __toCommonJS(constants_exports);
+var SANDBOX_FILE_UPLOADS_DIR = "/tmp/uploads";
+var DEFAULT_SANDBOX_NATS_WS_PORT = 4444;
+var DEFAULT_PREVIEW_URL_EXPIRY_SECONDS = 3600;
+// Annotate the CommonJS export names for ESM import in node:
+0 && (module.exports = {
+  DEFAULT_PREVIEW_URL_EXPIRY_SECONDS,
+  DEFAULT_SANDBOX_NATS_WS_PORT,
+  SANDBOX_FILE_UPLOADS_DIR
+});
+//# sourceMappingURL=constants.js.map

package/dist/core/sandbox/constants.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../../../src/core/sandbox/constants.ts"],"sourcesContent":["/** Stable directory inside the sandbox for user file uploads (mkdir during sandbox init). */\nexport const SANDBOX_FILE_UPLOADS_DIR = '/tmp/uploads';\n\n/** Default port of the pod-local NATS WebSocket broker used by the sandbox→gateway MCP bridge. */\nexport const DEFAULT_SANDBOX_NATS_WS_PORT = 4444;\n\n/**\n * Default lifetime of a Daytona signed preview URL for the NATS bridge.\n * Matches the gateway's default AGENT_RESPONSE_MAX_EXECUTION_TIME_MS (1 hour).\n */\nexport const DEFAULT_PREVIEW_URL_EXPIRY_SECONDS = 3600;\n"],"mappings":";;;;;;;;;;;;;;;;;;;;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AACO,IAAM,2BAA2B;AAGjC,IAAM,+BAA+B;AAMrC,IAAM,qCAAqC;","names":[]}

package/dist/core/sandbox/constants.mjs

@@ -0,0 +1,10 @@
+// src/core/sandbox/constants.ts
+var SANDBOX_FILE_UPLOADS_DIR = "/tmp/uploads";
+var DEFAULT_SANDBOX_NATS_WS_PORT = 4444;
+var DEFAULT_PREVIEW_URL_EXPIRY_SECONDS = 3600;
+export {
+  DEFAULT_PREVIEW_URL_EXPIRY_SECONDS,
+  DEFAULT_SANDBOX_NATS_WS_PORT,
+  SANDBOX_FILE_UPLOADS_DIR
+};
+//# sourceMappingURL=constants.mjs.map

package/dist/core/sandbox/constants.mjs.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../../../src/core/sandbox/constants.ts"],"sourcesContent":["/** Stable directory inside the sandbox for user file uploads (mkdir during sandbox init). */\nexport const SANDBOX_FILE_UPLOADS_DIR = '/tmp/uploads';\n\n/** Default port of the pod-local NATS WebSocket broker used by the sandbox→gateway MCP bridge. */\nexport const DEFAULT_SANDBOX_NATS_WS_PORT = 4444;\n\n/**\n * Default lifetime of a Daytona signed preview URL for the NATS bridge.\n * Matches the gateway's default AGENT_RESPONSE_MAX_EXECUTION_TIME_MS (1 hour).\n */\nexport const DEFAULT_PREVIEW_URL_EXPIRY_SECONDS = 3600;\n"],"mappings":";AACO,IAAM,2BAA2B;AAGjC,IAAM,+BAA+B;AAMrC,IAAM,qCAAqC;","names":[]}