@truefoundry/trueforge-core 0.1.0-rc.0 → 0.1.0

package/dist/core/sandbox/codeMode/CodeModeDispatcher.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"CodeModeDispatcher.d.ts","sourceRoot":"","sources":["../../../../src/core/sandbox/codeMode/CodeModeDispatcher.ts"],"names":[],"mappings":"AAGA,OAAO,EAIL,KAAK,QAAQ,EACd,MAAM,sBAAsB,CAAC;AAE9B,OAAO,KAAK,EAAuB,aAAa,EAAE,eAAe,EAAE,MAAM,SAAS,CAAC;AAEnF,4FAA4F;AAC5F,MAAM,WAAW,cAAc;IAC7B,KAAK,CAAC,QAAQ,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,cAAc,CAAC;IACzD,KAAK,CAAC,OAAO,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,OAAO,GAAG,IAAI,CAAC;CAC9C;AA2BD;;GAEG;AACH,qBAAa,kBAAkB;IAC7B,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAAwB;IACjD,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAiB;IACxC,OAAO,CAAC,MAAM,CAAS;IAEvB,YAAY,MAAM,EAAE;QAAE,QAAQ,EAAE,SAAS,QAAQ,EAAE,CAAC;QAAC,MAAM,EAAE,cAAc,CAAA;KAAE,EAM5E;IAED,KAAK,IAAI,IAAI,CAEZ;IAEK,QAAQ,CAAC,MAAM,EAAE;QACrB,OAAO,EAAE,eAAe,CAAC;QACzB,YAAY,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,CAAC;KAChD,GAAG,OAAO,CAAC,aAAa,CAAC,CAoBzB;IAED,OAAO,CAAC,KAAK;IAWb,OAAO,CAAC,UAAU;YAQJ,eAAe;YAUf,cAAc;CAoB7B"}

package/dist/core/sandbox/codeMode/CodeModeDispatcher.js

@@ -0,0 +1,128 @@
+"use strict";
+var __defProp = Object.defineProperty;
+var __getOwnPropDesc = Object.getOwnPropertyDescriptor;
+var __getOwnPropNames = Object.getOwnPropertyNames;
+var __hasOwnProp = Object.prototype.hasOwnProperty;
+var __export = (target, all) => {
+  for (var name in all)
+    __defProp(target, name, { get: all[name], enumerable: true });
+};
+var __copyProps = (to, from, except, desc) => {
+  if (from && typeof from === "object" || typeof from === "function") {
+    for (let key of __getOwnPropNames(from))
+      if (!__hasOwnProp.call(to, key) && key !== except)
+        __defProp(to, key, { get: () => from[key], enumerable: !(desc = __getOwnPropDesc(from, key)) || desc.enumerable });
+  }
+  return to;
+};
+var __toCommonJS = (mod) => __copyProps(__defProp({}, "__esModule", { value: true }), mod);
+
+// src/core/sandbox/codeMode/CodeModeDispatcher.ts
+var CodeModeDispatcher_exports = {};
+__export(CodeModeDispatcher_exports, {
+  CodeModeDispatcher: () => CodeModeDispatcher
+});
+module.exports = __toCommonJS(CodeModeDispatcher_exports);
+var import_api = require("@opentelemetry/api");
+var import_core = require("@opentelemetry/core");
+var import_errors = require("../../errors.js");
+var import_IMCPServer = require("../../mcp/IMCPServer.js");
+var import_errorLogFields = require("../../util/errorLogFields.js");
+var InvalidMCPUsageError = class extends Error {
+  name = "InvalidMCPUsageError";
+};
+function isHttpClientError(error) {
+  if (typeof error !== "object" || error === null || !("status" in error)) {
+    return false;
+  }
+  const { status } = error;
+  return typeof status === "number" && status >= 400 && status < 500;
+}
+function classifyErrorSource(e) {
+  if (e instanceof InvalidMCPUsageError) return "caller";
+  if (isHttpClientError(e)) return "caller";
+  if (e instanceof import_errors.McpConnectionError && e.statusCode >= 400 && e.statusCode < 500) return "caller";
+  return "internal";
+}
+var _w3cExtractor = new import_core.W3CTraceContextPropagator();
+var CodeModeDispatcher = class {
+  toolSets;
+  logger;
+  closed = false;
+  constructor(params) {
+    this.toolSets = /* @__PURE__ */ new Map();
+    for (const server of params.toolSets) {
+      this.toolSets.set(server.name, server);
+    }
+    this.logger = params.logger.child({ module: "CodeModeDispatcher" });
+  }
+  close() {
+    this.closed = true;
+  }
+  async dispatch(params) {
+    if (this.closed) {
+      return { ok: false, error: "Code Mode dispatcher is closed", source: "transport" };
+    }
+    const ctx = _w3cExtractor.extract(
+      (0, import_core.unsuppressTracing)(import_api.context.active()),
+      { ...params.traceCarrier },
+      import_api.defaultTextMapGetter
+    );
+    try {
+      const result = await import_api.context.with(ctx, () => this.route(params.request));
+      return { ok: true, result };
+    } catch (e) {
+      const source = classifyErrorSource(e);
+      const errorMessage = e instanceof Error ? e.message : "Unknown Code Mode dispatch error";
+      this.logger.error(`Code Mode dispatch failed (source=${source})`, (0, import_errorLogFields.extractErrorLogFields)(e));
+      return { ok: false, error: errorMessage, source };
+    }
+  }
+  route(request) {
+    switch (request.op) {
+      case "list_tools":
+        return this.handleListTools(request);
+      case "call_tool":
+        return this.handleCallTool(request);
+      default:
+        throw new InvalidMCPUsageError(`Unknown Code Mode operation`);
+    }
+  }
+  getToolSet(serverName) {
+    const server = this.toolSets.get(serverName);
+    if (!server) {
+      throw new InvalidMCPUsageError(`MCP server '${serverName}' is not available for this agent`);
+    }
+    return server;
+  }
+  async handleListTools(req) {
+    const { server } = req;
+    const mcp = this.getToolSet(server);
+    const response = await mcp.listTools();
+    if ((0, import_IMCPServer.isAuthRequired)(response)) {
+      throw new InvalidMCPUsageError(`MCP server '${server}' requires OAuth; cannot list tools from sandbox`);
+    }
+    return response.result;
+  }
+  async handleCallTool(req) {
+    const { server, tool, arguments: args } = req;
+    const response = await this.getToolSet(server).callTool({ name: tool, arguments: args ?? {} });
+    if ((0, import_IMCPServer.isAuthRequired)(response)) {
+      throw new InvalidMCPUsageError(`MCP server '${server}' requires OAuth; cannot call tool from sandbox`);
+    }
+    if ((0, import_IMCPServer.isCallToolResponseCreateSubAgent)(response)) {
+      throw new InvalidMCPUsageError(`Tool '${server}/${tool}' creates a sub-agent and is not callable from sandbox`);
+    }
+    if (!(0, import_IMCPServer.isCallToolResponseResult)(response)) {
+      throw new InvalidMCPUsageError(
+        `Tool '${server}/${tool}' requires interactive handling and is not callable from sandbox`
+      );
+    }
+    return response.result;
+  }
+};
+// Annotate the CommonJS export names for ESM import in node:
+0 && (module.exports = {
+  CodeModeDispatcher
+});
+//# sourceMappingURL=CodeModeDispatcher.js.map

package/dist/core/sandbox/codeMode/CodeModeDispatcher.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../../../../src/core/sandbox/codeMode/CodeModeDispatcher.ts"],"sourcesContent":["import { context, defaultTextMapGetter } from '@opentelemetry/api';\nimport { unsuppressTracing, W3CTraceContextPropagator } from '@opentelemetry/core';\nimport { McpConnectionError } from '../../errors';\nimport {\n  isAuthRequired,\n  isCallToolResponseCreateSubAgent,\n  isCallToolResponseResult,\n  type IToolSet,\n} from '../../mcp/IMCPServer';\nimport { extractErrorLogFields } from '../../util/errorLogFields';\nimport type { CodeModeErrorSource, CodeModeReply, CodeModeRequest } from './types';\n\n/** Minimal logger surface used by Code Mode (avoids a hard winston dep for PoC binders). */\nexport interface CodeModeLogger {\n  child(bindings: Record<string, unknown>): CodeModeLogger;\n  error(message: string, meta?: unknown): void;\n}\n\n// Caller-caused failure: retrying won't help.\nclass InvalidMCPUsageError extends Error {\n  override readonly name = 'InvalidMCPUsageError';\n}\n\nfunction isHttpClientError(error: unknown): error is { status: number } {\n  if (typeof error !== 'object' || error === null || !('status' in error)) {\n    return false;\n  }\n  const { status } = error;\n  return typeof status === 'number' && status >= 400 && status < 500;\n}\n\nfunction classifyErrorSource(e: unknown): CodeModeErrorSource {\n  if (e instanceof InvalidMCPUsageError) return 'caller';\n  if (isHttpClientError(e)) return 'caller';\n  if (e instanceof McpConnectionError && e.statusCode >= 400 && e.statusCode < 500) return 'caller';\n  return 'internal';\n}\n\n// Direct W3C extractor, NOT the global `propagation` API. The gateway-wide propagator\n// refuses to restore traceparent unless internal-secret headers are present. Code Mode\n// is intra-process trusted, so we bypass that gate and honor the sandbox carrier.\nconst _w3cExtractor = new W3CTraceContextPropagator();\n\n/**\n * Shared Code Mode policy leaf: tool routing, authz, error `source`. No NATS/UDS.\n */\nexport class CodeModeDispatcher {\n  private readonly toolSets: Map<string, IToolSet>;\n  private readonly logger: CodeModeLogger;\n  private closed = false;\n\n  constructor(params: { toolSets: readonly IToolSet[]; logger: CodeModeLogger }) {\n    this.toolSets = new Map();\n    for (const server of params.toolSets) {\n      this.toolSets.set(server.name, server);\n    }\n    this.logger = params.logger.child({ module: 'CodeModeDispatcher' });\n  }\n\n  close(): void {\n    this.closed = true;\n  }\n\n  async dispatch(params: {\n    request: CodeModeRequest;\n    traceCarrier: Readonly<Record<string, string>>;\n  }): Promise<CodeModeReply> {\n    if (this.closed) {\n      return { ok: false, error: 'Code Mode dispatcher is closed', source: 'transport' };\n    }\n\n    const ctx = _w3cExtractor.extract(\n      unsuppressTracing(context.active()),\n      { ...params.traceCarrier },\n      defaultTextMapGetter,\n    );\n\n    try {\n      const result = await context.with(ctx, () => this.route(params.request));\n      return { ok: true, result };\n    } catch (e) {\n      const source = classifyErrorSource(e);\n      const errorMessage = e instanceof Error ? e.message : 'Unknown Code Mode dispatch error';\n      this.logger.error(`Code Mode dispatch failed (source=${source})`, extractErrorLogFields(e));\n      return { ok: false, error: errorMessage, source };\n    }\n  }\n\n  private route(request: CodeModeRequest): Promise<unknown> {\n    switch (request.op) {\n      case 'list_tools':\n        return this.handleListTools(request);\n      case 'call_tool':\n        return this.handleCallTool(request);\n      default:\n        throw new InvalidMCPUsageError(`Unknown Code Mode operation`);\n    }\n  }\n\n  private getToolSet(serverName: string): IToolSet {\n    const server = this.toolSets.get(serverName);\n    if (!server) {\n      throw new InvalidMCPUsageError(`MCP server '${serverName}' is not available for this agent`);\n    }\n    return server;\n  }\n\n  private async handleListTools(req: { server: string }): Promise<unknown> {\n    const { server } = req;\n    const mcp = this.getToolSet(server);\n    const response = await mcp.listTools();\n    if (isAuthRequired(response)) {\n      throw new InvalidMCPUsageError(`MCP server '${server}' requires OAuth; cannot list tools from sandbox`);\n    }\n    return response.result;\n  }\n\n  private async handleCallTool(req: {\n    server: string;\n    tool: string;\n    arguments?: Record<string, unknown> | undefined;\n  }): Promise<unknown> {\n    const { server, tool, arguments: args } = req;\n    const response = await this.getToolSet(server).callTool({ name: tool, arguments: args ?? {} });\n    if (isAuthRequired(response)) {\n      throw new InvalidMCPUsageError(`MCP server '${server}' requires OAuth; cannot call tool from sandbox`);\n    }\n    if (isCallToolResponseCreateSubAgent(response)) {\n      throw new InvalidMCPUsageError(`Tool '${server}/${tool}' creates a sub-agent and is not callable from sandbox`);\n    }\n    if (!isCallToolResponseResult(response)) {\n      throw new InvalidMCPUsageError(\n        `Tool '${server}/${tool}' requires interactive handling and is not callable from sandbox`,\n      );\n    }\n    return response.result;\n  }\n}\n"],"mappings":";;;;;;;;;;;;;;;;;;;;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,iBAA8C;AAC9C,kBAA6D;AAC7D,oBAAmC;AACnC,wBAKO;AACP,4BAAsC;AAUtC,IAAM,uBAAN,cAAmC,MAAM;AAAA,EACrB,OAAO;AAC3B;AAEA,SAAS,kBAAkB,OAA6C;AACtE,MAAI,OAAO,UAAU,YAAY,UAAU,QAAQ,EAAE,YAAY,QAAQ;AACvE,WAAO;AAAA,EACT;AACA,QAAM,EAAE,OAAO,IAAI;AACnB,SAAO,OAAO,WAAW,YAAY,UAAU,OAAO,SAAS;AACjE;AAEA,SAAS,oBAAoB,GAAiC;AAC5D,MAAI,aAAa,qBAAsB,QAAO;AAC9C,MAAI,kBAAkB,CAAC,EAAG,QAAO;AACjC,MAAI,aAAa,oCAAsB,EAAE,cAAc,OAAO,EAAE,aAAa,IAAK,QAAO;AACzF,SAAO;AACT;AAKA,IAAM,gBAAgB,IAAI,sCAA0B;AAK7C,IAAM,qBAAN,MAAyB;AAAA,EACb;AAAA,EACA;AAAA,EACT,SAAS;AAAA,EAEjB,YAAY,QAAmE;AAC7E,SAAK,WAAW,oBAAI,IAAI;AACxB,eAAW,UAAU,OAAO,UAAU;AACpC,WAAK,SAAS,IAAI,OAAO,MAAM,MAAM;AAAA,IACvC;AACA,SAAK,SAAS,OAAO,OAAO,MAAM,EAAE,QAAQ,qBAAqB,CAAC;AAAA,EACpE;AAAA,EAEA,QAAc;AACZ,SAAK,SAAS;AAAA,EAChB;AAAA,EAEA,MAAM,SAAS,QAGY;AACzB,QAAI,KAAK,QAAQ;AACf,aAAO,EAAE,IAAI,OAAO,OAAO,kCAAkC,QAAQ,YAAY;AAAA,IACnF;AAEA,UAAM,MAAM,cAAc;AAAA,UACxB,+BAAkB,mBAAQ,OAAO,CAAC;AAAA,MAClC,EAAE,GAAG,OAAO,aAAa;AAAA,MACzB;AAAA,IACF;AAEA,QAAI;AACF,YAAM,SAAS,MAAM,mBAAQ,KAAK,KAAK,MAAM,KAAK,MAAM,OAAO,OAAO,CAAC;AACvE,aAAO,EAAE,IAAI,MAAM,OAAO;AAAA,IAC5B,SAAS,GAAG;AACV,YAAM,SAAS,oBAAoB,CAAC;AACpC,YAAM,eAAe,aAAa,QAAQ,EAAE,UAAU;AACtD,WAAK,OAAO,MAAM,qCAAqC,MAAM,SAAK,6CAAsB,CAAC,CAAC;AAC1F,aAAO,EAAE,IAAI,OAAO,OAAO,cAAc,OAAO;AAAA,IAClD;AAAA,EACF;AAAA,EAEQ,MAAM,SAA4C;AACxD,YAAQ,QAAQ,IAAI;AAAA,MAClB,KAAK;AACH,eAAO,KAAK,gBAAgB,OAAO;AAAA,MACrC,KAAK;AACH,eAAO,KAAK,eAAe,OAAO;AAAA,MACpC;AACE,cAAM,IAAI,qBAAqB,6BAA6B;AAAA,IAChE;AAAA,EACF;AAAA,EAEQ,WAAW,YAA8B;AAC/C,UAAM,SAAS,KAAK,SAAS,IAAI,UAAU;AAC3C,QAAI,CAAC,QAAQ;AACX,YAAM,IAAI,qBAAqB,eAAe,UAAU,mCAAmC;AAAA,IAC7F;AACA,WAAO;AAAA,EACT;AAAA,EAEA,MAAc,gBAAgB,KAA2C;AACvE,UAAM,EAAE,OAAO,IAAI;AACnB,UAAM,MAAM,KAAK,WAAW,MAAM;AAClC,UAAM,WAAW,MAAM,IAAI,UAAU;AACrC,YAAI,kCAAe,QAAQ,GAAG;AAC5B,YAAM,IAAI,qBAAqB,eAAe,MAAM,kDAAkD;AAAA,IACxG;AACA,WAAO,SAAS;AAAA,EAClB;AAAA,EAEA,MAAc,eAAe,KAIR;AACnB,UAAM,EAAE,QAAQ,MAAM,WAAW,KAAK,IAAI;AAC1C,UAAM,WAAW,MAAM,KAAK,WAAW,MAAM,EAAE,SAAS,EAAE,MAAM,MAAM,WAAW,QAAQ,CAAC,EAAE,CAAC;AAC7F,YAAI,kCAAe,QAAQ,GAAG;AAC5B,YAAM,IAAI,qBAAqB,eAAe,MAAM,iDAAiD;AAAA,IACvG;AACA,YAAI,oDAAiC,QAAQ,GAAG;AAC9C,YAAM,IAAI,qBAAqB,SAAS,MAAM,IAAI,IAAI,wDAAwD;AAAA,IAChH;AACA,QAAI,KAAC,4CAAyB,QAAQ,GAAG;AACvC,YAAM,IAAI;AAAA,QACR,SAAS,MAAM,IAAI,IAAI;AAAA,MACzB;AAAA,IACF;AACA,WAAO,SAAS;AAAA,EAClB;AACF;","names":[]}

package/dist/core/sandbox/codeMode/CodeModeDispatcher.mjs

@@ -0,0 +1,107 @@
+// src/core/sandbox/codeMode/CodeModeDispatcher.ts
+import { context, defaultTextMapGetter } from "@opentelemetry/api";
+import { unsuppressTracing, W3CTraceContextPropagator } from "@opentelemetry/core";
+import { McpConnectionError } from "../../errors.mjs";
+import {
+  isAuthRequired,
+  isCallToolResponseCreateSubAgent,
+  isCallToolResponseResult
+} from "../../mcp/IMCPServer.mjs";
+import { extractErrorLogFields } from "../../util/errorLogFields.mjs";
+var InvalidMCPUsageError = class extends Error {
+  name = "InvalidMCPUsageError";
+};
+function isHttpClientError(error) {
+  if (typeof error !== "object" || error === null || !("status" in error)) {
+    return false;
+  }
+  const { status } = error;
+  return typeof status === "number" && status >= 400 && status < 500;
+}
+function classifyErrorSource(e) {
+  if (e instanceof InvalidMCPUsageError) return "caller";
+  if (isHttpClientError(e)) return "caller";
+  if (e instanceof McpConnectionError && e.statusCode >= 400 && e.statusCode < 500) return "caller";
+  return "internal";
+}
+var _w3cExtractor = new W3CTraceContextPropagator();
+var CodeModeDispatcher = class {
+  toolSets;
+  logger;
+  closed = false;
+  constructor(params) {
+    this.toolSets = /* @__PURE__ */ new Map();
+    for (const server of params.toolSets) {
+      this.toolSets.set(server.name, server);
+    }
+    this.logger = params.logger.child({ module: "CodeModeDispatcher" });
+  }
+  close() {
+    this.closed = true;
+  }
+  async dispatch(params) {
+    if (this.closed) {
+      return { ok: false, error: "Code Mode dispatcher is closed", source: "transport" };
+    }
+    const ctx = _w3cExtractor.extract(
+      unsuppressTracing(context.active()),
+      { ...params.traceCarrier },
+      defaultTextMapGetter
+    );
+    try {
+      const result = await context.with(ctx, () => this.route(params.request));
+      return { ok: true, result };
+    } catch (e) {
+      const source = classifyErrorSource(e);
+      const errorMessage = e instanceof Error ? e.message : "Unknown Code Mode dispatch error";
+      this.logger.error(`Code Mode dispatch failed (source=${source})`, extractErrorLogFields(e));
+      return { ok: false, error: errorMessage, source };
+    }
+  }
+  route(request) {
+    switch (request.op) {
+      case "list_tools":
+        return this.handleListTools(request);
+      case "call_tool":
+        return this.handleCallTool(request);
+      default:
+        throw new InvalidMCPUsageError(`Unknown Code Mode operation`);
+    }
+  }
+  getToolSet(serverName) {
+    const server = this.toolSets.get(serverName);
+    if (!server) {
+      throw new InvalidMCPUsageError(`MCP server '${serverName}' is not available for this agent`);
+    }
+    return server;
+  }
+  async handleListTools(req) {
+    const { server } = req;
+    const mcp = this.getToolSet(server);
+    const response = await mcp.listTools();
+    if (isAuthRequired(response)) {
+      throw new InvalidMCPUsageError(`MCP server '${server}' requires OAuth; cannot list tools from sandbox`);
+    }
+    return response.result;
+  }
+  async handleCallTool(req) {
+    const { server, tool, arguments: args } = req;
+    const response = await this.getToolSet(server).callTool({ name: tool, arguments: args ?? {} });
+    if (isAuthRequired(response)) {
+      throw new InvalidMCPUsageError(`MCP server '${server}' requires OAuth; cannot call tool from sandbox`);
+    }
+    if (isCallToolResponseCreateSubAgent(response)) {
+      throw new InvalidMCPUsageError(`Tool '${server}/${tool}' creates a sub-agent and is not callable from sandbox`);
+    }
+    if (!isCallToolResponseResult(response)) {
+      throw new InvalidMCPUsageError(
+        `Tool '${server}/${tool}' requires interactive handling and is not callable from sandbox`
+      );
+    }
+    return response.result;
+  }
+};
+export {
+  CodeModeDispatcher
+};
+//# sourceMappingURL=CodeModeDispatcher.mjs.map

package/dist/core/sandbox/codeMode/CodeModeDispatcher.mjs.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../../../../src/core/sandbox/codeMode/CodeModeDispatcher.ts"],"sourcesContent":["import { context, defaultTextMapGetter } from '@opentelemetry/api';\nimport { unsuppressTracing, W3CTraceContextPropagator } from '@opentelemetry/core';\nimport { McpConnectionError } from '../../errors';\nimport {\n  isAuthRequired,\n  isCallToolResponseCreateSubAgent,\n  isCallToolResponseResult,\n  type IToolSet,\n} from '../../mcp/IMCPServer';\nimport { extractErrorLogFields } from '../../util/errorLogFields';\nimport type { CodeModeErrorSource, CodeModeReply, CodeModeRequest } from './types';\n\n/** Minimal logger surface used by Code Mode (avoids a hard winston dep for PoC binders). */\nexport interface CodeModeLogger {\n  child(bindings: Record<string, unknown>): CodeModeLogger;\n  error(message: string, meta?: unknown): void;\n}\n\n// Caller-caused failure: retrying won't help.\nclass InvalidMCPUsageError extends Error {\n  override readonly name = 'InvalidMCPUsageError';\n}\n\nfunction isHttpClientError(error: unknown): error is { status: number } {\n  if (typeof error !== 'object' || error === null || !('status' in error)) {\n    return false;\n  }\n  const { status } = error;\n  return typeof status === 'number' && status >= 400 && status < 500;\n}\n\nfunction classifyErrorSource(e: unknown): CodeModeErrorSource {\n  if (e instanceof InvalidMCPUsageError) return 'caller';\n  if (isHttpClientError(e)) return 'caller';\n  if (e instanceof McpConnectionError && e.statusCode >= 400 && e.statusCode < 500) return 'caller';\n  return 'internal';\n}\n\n// Direct W3C extractor, NOT the global `propagation` API. The gateway-wide propagator\n// refuses to restore traceparent unless internal-secret headers are present. Code Mode\n// is intra-process trusted, so we bypass that gate and honor the sandbox carrier.\nconst _w3cExtractor = new W3CTraceContextPropagator();\n\n/**\n * Shared Code Mode policy leaf: tool routing, authz, error `source`. No NATS/UDS.\n */\nexport class CodeModeDispatcher {\n  private readonly toolSets: Map<string, IToolSet>;\n  private readonly logger: CodeModeLogger;\n  private closed = false;\n\n  constructor(params: { toolSets: readonly IToolSet[]; logger: CodeModeLogger }) {\n    this.toolSets = new Map();\n    for (const server of params.toolSets) {\n      this.toolSets.set(server.name, server);\n    }\n    this.logger = params.logger.child({ module: 'CodeModeDispatcher' });\n  }\n\n  close(): void {\n    this.closed = true;\n  }\n\n  async dispatch(params: {\n    request: CodeModeRequest;\n    traceCarrier: Readonly<Record<string, string>>;\n  }): Promise<CodeModeReply> {\n    if (this.closed) {\n      return { ok: false, error: 'Code Mode dispatcher is closed', source: 'transport' };\n    }\n\n    const ctx = _w3cExtractor.extract(\n      unsuppressTracing(context.active()),\n      { ...params.traceCarrier },\n      defaultTextMapGetter,\n    );\n\n    try {\n      const result = await context.with(ctx, () => this.route(params.request));\n      return { ok: true, result };\n    } catch (e) {\n      const source = classifyErrorSource(e);\n      const errorMessage = e instanceof Error ? e.message : 'Unknown Code Mode dispatch error';\n      this.logger.error(`Code Mode dispatch failed (source=${source})`, extractErrorLogFields(e));\n      return { ok: false, error: errorMessage, source };\n    }\n  }\n\n  private route(request: CodeModeRequest): Promise<unknown> {\n    switch (request.op) {\n      case 'list_tools':\n        return this.handleListTools(request);\n      case 'call_tool':\n        return this.handleCallTool(request);\n      default:\n        throw new InvalidMCPUsageError(`Unknown Code Mode operation`);\n    }\n  }\n\n  private getToolSet(serverName: string): IToolSet {\n    const server = this.toolSets.get(serverName);\n    if (!server) {\n      throw new InvalidMCPUsageError(`MCP server '${serverName}' is not available for this agent`);\n    }\n    return server;\n  }\n\n  private async handleListTools(req: { server: string }): Promise<unknown> {\n    const { server } = req;\n    const mcp = this.getToolSet(server);\n    const response = await mcp.listTools();\n    if (isAuthRequired(response)) {\n      throw new InvalidMCPUsageError(`MCP server '${server}' requires OAuth; cannot list tools from sandbox`);\n    }\n    return response.result;\n  }\n\n  private async handleCallTool(req: {\n    server: string;\n    tool: string;\n    arguments?: Record<string, unknown> | undefined;\n  }): Promise<unknown> {\n    const { server, tool, arguments: args } = req;\n    const response = await this.getToolSet(server).callTool({ name: tool, arguments: args ?? {} });\n    if (isAuthRequired(response)) {\n      throw new InvalidMCPUsageError(`MCP server '${server}' requires OAuth; cannot call tool from sandbox`);\n    }\n    if (isCallToolResponseCreateSubAgent(response)) {\n      throw new InvalidMCPUsageError(`Tool '${server}/${tool}' creates a sub-agent and is not callable from sandbox`);\n    }\n    if (!isCallToolResponseResult(response)) {\n      throw new InvalidMCPUsageError(\n        `Tool '${server}/${tool}' requires interactive handling and is not callable from sandbox`,\n      );\n    }\n    return response.result;\n  }\n}\n"],"mappings":";AAAA,SAAS,SAAS,4BAA4B;AAC9C,SAAS,mBAAmB,iCAAiC;AAC7D,SAAS,0BAA0B;AACnC;AAAA,EACE;AAAA,EACA;AAAA,EACA;AAAA,OAEK;AACP,SAAS,6BAA6B;AAUtC,IAAM,uBAAN,cAAmC,MAAM;AAAA,EACrB,OAAO;AAC3B;AAEA,SAAS,kBAAkB,OAA6C;AACtE,MAAI,OAAO,UAAU,YAAY,UAAU,QAAQ,EAAE,YAAY,QAAQ;AACvE,WAAO;AAAA,EACT;AACA,QAAM,EAAE,OAAO,IAAI;AACnB,SAAO,OAAO,WAAW,YAAY,UAAU,OAAO,SAAS;AACjE;AAEA,SAAS,oBAAoB,GAAiC;AAC5D,MAAI,aAAa,qBAAsB,QAAO;AAC9C,MAAI,kBAAkB,CAAC,EAAG,QAAO;AACjC,MAAI,aAAa,sBAAsB,EAAE,cAAc,OAAO,EAAE,aAAa,IAAK,QAAO;AACzF,SAAO;AACT;AAKA,IAAM,gBAAgB,IAAI,0BAA0B;AAK7C,IAAM,qBAAN,MAAyB;AAAA,EACb;AAAA,EACA;AAAA,EACT,SAAS;AAAA,EAEjB,YAAY,QAAmE;AAC7E,SAAK,WAAW,oBAAI,IAAI;AACxB,eAAW,UAAU,OAAO,UAAU;AACpC,WAAK,SAAS,IAAI,OAAO,MAAM,MAAM;AAAA,IACvC;AACA,SAAK,SAAS,OAAO,OAAO,MAAM,EAAE,QAAQ,qBAAqB,CAAC;AAAA,EACpE;AAAA,EAEA,QAAc;AACZ,SAAK,SAAS;AAAA,EAChB;AAAA,EAEA,MAAM,SAAS,QAGY;AACzB,QAAI,KAAK,QAAQ;AACf,aAAO,EAAE,IAAI,OAAO,OAAO,kCAAkC,QAAQ,YAAY;AAAA,IACnF;AAEA,UAAM,MAAM,cAAc;AAAA,MACxB,kBAAkB,QAAQ,OAAO,CAAC;AAAA,MAClC,EAAE,GAAG,OAAO,aAAa;AAAA,MACzB;AAAA,IACF;AAEA,QAAI;AACF,YAAM,SAAS,MAAM,QAAQ,KAAK,KAAK,MAAM,KAAK,MAAM,OAAO,OAAO,CAAC;AACvE,aAAO,EAAE,IAAI,MAAM,OAAO;AAAA,IAC5B,SAAS,GAAG;AACV,YAAM,SAAS,oBAAoB,CAAC;AACpC,YAAM,eAAe,aAAa,QAAQ,EAAE,UAAU;AACtD,WAAK,OAAO,MAAM,qCAAqC,MAAM,KAAK,sBAAsB,CAAC,CAAC;AAC1F,aAAO,EAAE,IAAI,OAAO,OAAO,cAAc,OAAO;AAAA,IAClD;AAAA,EACF;AAAA,EAEQ,MAAM,SAA4C;AACxD,YAAQ,QAAQ,IAAI;AAAA,MAClB,KAAK;AACH,eAAO,KAAK,gBAAgB,OAAO;AAAA,MACrC,KAAK;AACH,eAAO,KAAK,eAAe,OAAO;AAAA,MACpC;AACE,cAAM,IAAI,qBAAqB,6BAA6B;AAAA,IAChE;AAAA,EACF;AAAA,EAEQ,WAAW,YAA8B;AAC/C,UAAM,SAAS,KAAK,SAAS,IAAI,UAAU;AAC3C,QAAI,CAAC,QAAQ;AACX,YAAM,IAAI,qBAAqB,eAAe,UAAU,mCAAmC;AAAA,IAC7F;AACA,WAAO;AAAA,EACT;AAAA,EAEA,MAAc,gBAAgB,KAA2C;AACvE,UAAM,EAAE,OAAO,IAAI;AACnB,UAAM,MAAM,KAAK,WAAW,MAAM;AAClC,UAAM,WAAW,MAAM,IAAI,UAAU;AACrC,QAAI,eAAe,QAAQ,GAAG;AAC5B,YAAM,IAAI,qBAAqB,eAAe,MAAM,kDAAkD;AAAA,IACxG;AACA,WAAO,SAAS;AAAA,EAClB;AAAA,EAEA,MAAc,eAAe,KAIR;AACnB,UAAM,EAAE,QAAQ,MAAM,WAAW,KAAK,IAAI;AAC1C,UAAM,WAAW,MAAM,KAAK,WAAW,MAAM,EAAE,SAAS,EAAE,MAAM,MAAM,WAAW,QAAQ,CAAC,EAAE,CAAC;AAC7F,QAAI,eAAe,QAAQ,GAAG;AAC5B,YAAM,IAAI,qBAAqB,eAAe,MAAM,iDAAiD;AAAA,IACvG;AACA,QAAI,iCAAiC,QAAQ,GAAG;AAC9C,YAAM,IAAI,qBAAqB,SAAS,MAAM,IAAI,IAAI,wDAAwD;AAAA,IAChH;AACA,QAAI,CAAC,yBAAyB,QAAQ,GAAG;AACvC,YAAM,IAAI;AAAA,QACR,SAAS,MAAM,IAAI,IAAI;AAAA,MACzB;AAAA,IACF;AACA,WAAO,SAAS;AAAA,EAClB;AACF;","names":[]}

package/dist/core/sandbox/codeMode/CodeModeTransport.d.ts

@@ -0,0 +1,21 @@
+import type { CodeModeDispatcher } from './CodeModeDispatcher';
+/**
+ * Code Mode channel. Construct eagerly with the dispatcher; connect/listen in `start`.
+ * `start` may be called again after failure; `stop` is always valid after construct.
+ */
+export interface CodeModeTransport {
+    /**
+     * Lazy connect/listen; may be called again after a failed attempt (non-sticky).
+     * Idempotent once successfully started.
+     */
+    start(params: {
+        codeModeDispatcher: CodeModeDispatcher;
+        sandboxId: string;
+        requestTimeoutSeconds: number;
+    }): Promise<{
+        env: Record<string, string>;
+    }>;
+    /** Best-effort teardown whether start succeeded, failed, or never ran. */
+    stop(): Promise<void>;
+}
+//# sourceMappingURL=CodeModeTransport.d.ts.map

package/dist/core/sandbox/codeMode/CodeModeTransport.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"CodeModeTransport.d.ts","sourceRoot":"","sources":["../../../../src/core/sandbox/codeMode/CodeModeTransport.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,sBAAsB,CAAC;AAE/D;;;GAGG;AACH,MAAM,WAAW,iBAAiB;IAChC;;;OAGG;IACH,KAAK,CAAC,MAAM,EAAE;QAAE,kBAAkB,EAAE,kBAAkB,CAAC;QAAC,SAAS,EAAE,MAAM,CAAC;QAAC,qBAAqB,EAAE,MAAM,CAAA;KAAE,GAAG,OAAO,CAAC;QACnH,GAAG,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;KAC7B,CAAC,CAAC;IACH,0EAA0E;IAC1E,IAAI,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC;CACvB"}

package/dist/core/sandbox/codeMode/CodeModeTransport.js

@@ -0,0 +1,19 @@
+"use strict";
+var __defProp = Object.defineProperty;
+var __getOwnPropDesc = Object.getOwnPropertyDescriptor;
+var __getOwnPropNames = Object.getOwnPropertyNames;
+var __hasOwnProp = Object.prototype.hasOwnProperty;
+var __copyProps = (to, from, except, desc) => {
+  if (from && typeof from === "object" || typeof from === "function") {
+    for (let key of __getOwnPropNames(from))
+      if (!__hasOwnProp.call(to, key) && key !== except)
+        __defProp(to, key, { get: () => from[key], enumerable: !(desc = __getOwnPropDesc(from, key)) || desc.enumerable });
+  }
+  return to;
+};
+var __toCommonJS = (mod) => __copyProps(__defProp({}, "__esModule", { value: true }), mod);
+
+// src/core/sandbox/codeMode/CodeModeTransport.ts
+var CodeModeTransport_exports = {};
+module.exports = __toCommonJS(CodeModeTransport_exports);
+//# sourceMappingURL=CodeModeTransport.js.map

package/dist/core/sandbox/codeMode/CodeModeTransport.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../../../../src/core/sandbox/codeMode/CodeModeTransport.ts"],"sourcesContent":["import type { CodeModeDispatcher } from './CodeModeDispatcher';\n\n/**\n * Code Mode channel. Construct eagerly with the dispatcher; connect/listen in `start`.\n * `start` may be called again after failure; `stop` is always valid after construct.\n */\nexport interface CodeModeTransport {\n  /**\n   * Lazy connect/listen; may be called again after a failed attempt (non-sticky).\n   * Idempotent once successfully started.\n   */\n  start(params: { codeModeDispatcher: CodeModeDispatcher; sandboxId: string; requestTimeoutSeconds: number }): Promise<{\n    env: Record<string, string>;\n  }>;\n  /** Best-effort teardown whether start succeeded, failed, or never ran. */\n  stop(): Promise<void>;\n}\n"],"mappings":";;;;;;;;;;;;;;;;AAAA;AAAA;","names":[]}

package/dist/core/sandbox/codeMode/CodeModeTransport.mjs

@@ -0,0 +1 @@
+//# sourceMappingURL=CodeModeTransport.mjs.map

package/dist/core/sandbox/codeMode/CodeModeTransport.mjs.map

@@ -0,0 +1 @@
+{"version":3,"sources":[],"sourcesContent":[],"mappings":"","names":[]}

package/dist/core/sandbox/codeMode/nats/CodeModeNatsTransport.d.ts

@@ -0,0 +1,34 @@
+import type { Logger } from 'winston';
+import type { CodeModeDispatcher } from '../CodeModeDispatcher';
+import type { CodeModeTransport } from '../CodeModeTransport';
+/**
+ * NATS Code Mode transport. Session cache + connection-drop invalidate live here
+ * (no `whenClosed` on the public interface).
+ */
+export declare class CodeModeNatsTransport implements CodeModeTransport {
+    private readonly resolveHostUrl;
+    private readonly sandboxClientNatsUrl;
+    private readonly logger;
+    private sessionPromise;
+    private nc;
+    private dispatcher;
+    constructor(params: {
+        resolveHostUrl: (sandboxId: string) => Promise<string>;
+        sandboxClientNatsUrl?: string;
+        logger: Logger;
+    });
+    start(params: {
+        codeModeDispatcher: CodeModeDispatcher;
+        sandboxId: string;
+        requestTimeoutSeconds: number;
+    }): Promise<{
+        env: Record<string, string>;
+    }>;
+    stop(): Promise<void>;
+    private connectSession;
+    private subscribe;
+    private handleMessage;
+    private encode;
+    private decode;
+}
+//# sourceMappingURL=CodeModeNatsTransport.d.ts.map

package/dist/core/sandbox/codeMode/nats/CodeModeNatsTransport.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"CodeModeNatsTransport.d.ts","sourceRoot":"","sources":["../../../../../src/core/sandbox/codeMode/nats/CodeModeNatsTransport.ts"],"names":[],"mappings":"AAIA,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,SAAS,CAAC;AAKtC,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,uBAAuB,CAAC;AAChE,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,sBAAsB,CAAC;AAe9D;;;GAGG;AACH,qBAAa,qBAAsB,YAAW,iBAAiB;IAC7D,OAAO,CAAC,QAAQ,CAAC,cAAc,CAAyC;IACxE,OAAO,CAAC,QAAQ,CAAC,oBAAoB,CAAS;IAC9C,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAS;IAEhC,OAAO,CAAC,cAAc,CAAuD;IAC7E,OAAO,CAAC,EAAE,CAA6B;IACvC,OAAO,CAAC,UAAU,CAAiC;IAEnD,YAAY,MAAM,EAAE;QAClB,cAAc,EAAE,CAAC,SAAS,EAAE,MAAM,KAAK,OAAO,CAAC,MAAM,CAAC,CAAC;QACvD,oBAAoB,CAAC,EAAE,MAAM,CAAC;QAC9B,MAAM,EAAE,MAAM,CAAC;KAChB,EAIA;IAED,KAAK,CAAC,MAAM,EAAE;QACZ,kBAAkB,EAAE,kBAAkB,CAAC;QACvC,SAAS,EAAE,MAAM,CAAC;QAClB,qBAAqB,EAAE,MAAM,CAAC;KAC/B,GAAG,OAAO,CAAC;QAAE,GAAG,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAA;KAAE,CAAC,CAO3C;IAEK,IAAI,IAAI,OAAO,CAAC,IAAI,CAAC,CAqB1B;YAEa,cAAc;IAkD5B,OAAO,CAAC,SAAS;YAQH,aAAa;IA+C3B,OAAO,CAAC,MAAM;IAId,OAAO,CAAC,MAAM;CAIf"}

package/dist/core/sandbox/codeMode/nats/CodeModeNatsTransport.js

@@ -0,0 +1,187 @@
+"use strict";
+var __defProp = Object.defineProperty;
+var __getOwnPropDesc = Object.getOwnPropertyDescriptor;
+var __getOwnPropNames = Object.getOwnPropertyNames;
+var __hasOwnProp = Object.prototype.hasOwnProperty;
+var __export = (target, all) => {
+  for (var name in all)
+    __defProp(target, name, { get: all[name], enumerable: true });
+};
+var __copyProps = (to, from, except, desc) => {
+  if (from && typeof from === "object" || typeof from === "function") {
+    for (let key of __getOwnPropNames(from))
+      if (!__hasOwnProp.call(to, key) && key !== except)
+        __defProp(to, key, { get: () => from[key], enumerable: !(desc = __getOwnPropDesc(from, key)) || desc.enumerable });
+  }
+  return to;
+};
+var __toCommonJS = (mod) => __copyProps(__defProp({}, "__esModule", { value: true }), mod);
+
+// src/core/sandbox/codeMode/nats/CodeModeNatsTransport.ts
+var CodeModeNatsTransport_exports = {};
+__export(CodeModeNatsTransport_exports, {
+  CodeModeNatsTransport: () => CodeModeNatsTransport
+});
+module.exports = __toCommonJS(CodeModeNatsTransport_exports);
+var import_nats_core = require("@nats-io/nats-core");
+var import_api = require("@opentelemetry/api");
+var import_core = require("@opentelemetry/core");
+var import_node_crypto = require("crypto");
+var import_ws = require("ws");
+var import_errorLogFields = require("../../../util/errorLogFields.js");
+var import_promiseUtils = require("../../../util/promiseUtils.js");
+var import_constants = require("../../constants.js");
+var import_types = require("../types.js");
+Object.assign(global, { WebSocket: import_ws.WebSocket });
+var NATS_CONNECT_TIMEOUT_MS = 1e4;
+var NATS_CONNECT_RETRIES = 3;
+var NATS_CONNECT_BACKOFF_MS = 250;
+var NATS_DRAIN_TIMEOUT_MS = 5e3;
+var SANDBOX_NATS_SUBJECT_ROOT = "sandbox.bridge";
+var SANDBOX_NATS_MCP_LEAF = "mcp";
+var CodeModeNatsTransport = class {
+  resolveHostUrl;
+  sandboxClientNatsUrl;
+  logger;
+  sessionPromise;
+  nc;
+  dispatcher;
+  constructor(params) {
+    this.resolveHostUrl = params.resolveHostUrl;
+    this.sandboxClientNatsUrl = params.sandboxClientNatsUrl ?? `ws://localhost:${String(import_constants.DEFAULT_SANDBOX_NATS_WS_PORT)}`;
+    this.logger = params.logger.child({ module: "CodeModeNatsTransport" });
+  }
+  start(params) {
+    this.dispatcher = params.codeModeDispatcher;
+    this.sessionPromise ??= this.connectSession(params).catch((e) => {
+      this.sessionPromise = void 0;
+      throw e;
+    });
+    return this.sessionPromise;
+  }
+  async stop() {
+    const pending = this.sessionPromise;
+    this.sessionPromise = void 0;
+    if (pending !== void 0) {
+      try {
+        await pending;
+      } catch {
+      }
+    }
+    const nc = this.nc;
+    this.nc = void 0;
+    if (nc === void 0) return;
+    try {
+      await (0, import_promiseUtils.withTimeout)(nc.drain(), NATS_DRAIN_TIMEOUT_MS);
+    } catch (e) {
+      this.logger.warn("Code Mode NATS drain failed/timed out; forcing close", (0, import_errorLogFields.extractErrorLogFields)(e));
+      await nc.close().catch(() => {
+      });
+    }
+  }
+  async connectSession(params) {
+    const url = await this.resolveHostUrl(params.sandboxId);
+    const subjectPrefix = `${SANDBOX_NATS_SUBJECT_ROOT}.${(0, import_node_crypto.randomUUID)()}`;
+    let lastErr;
+    let nc;
+    for (let attempt = 1; attempt <= NATS_CONNECT_RETRIES; attempt++) {
+      try {
+        nc = await import_api.context.with(
+          (0, import_core.suppressTracing)(import_api.context.active()),
+          () => (0, import_nats_core.wsconnect)({ servers: [url], timeout: NATS_CONNECT_TIMEOUT_MS })
+        );
+        this.logger.info(`Connected to sandbox NATS (attempt ${String(attempt)})`, { subjectPrefix });
+        break;
+      } catch (e) {
+        lastErr = e;
+        this.logger.warn(`Code Mode NATS connect attempt ${String(attempt)} failed`, (0, import_errorLogFields.extractErrorLogFields)(e));
+        if (attempt < NATS_CONNECT_RETRIES) {
+          await new Promise((resolve) => setTimeout(resolve, NATS_CONNECT_BACKOFF_MS));
+        }
+      }
+    }
+    if (nc === void 0) {
+      throw lastErr instanceof Error ? lastErr : new Error("Code Mode NATS connect failed");
+    }
+    this.nc = nc;
+    this.subscribe(nc, subjectPrefix);
+    const cachedPromise = this.sessionPromise;
+    void nc.closed().then(() => {
+      if (this.sessionPromise === cachedPromise) {
+        this.sessionPromise = void 0;
+        this.nc = void 0;
+        this.logger.info("Code Mode NATS connection closed; session invalidated", {
+          sandboxId: params.sandboxId
+        });
+      }
+    });
+    return {
+      env: {
+        TFY_NATS_URL: this.sandboxClientNatsUrl,
+        TFY_NATS_SUBJECT_PREFIX: subjectPrefix,
+        TFY_CM_REQUEST_TIMEOUT_SECONDS: String(params.requestTimeoutSeconds)
+      }
+    };
+  }
+  subscribe(nc, subjectPrefix) {
+    nc.subscribe(`${subjectPrefix}.${SANDBOX_NATS_MCP_LEAF}`, {
+      callback: (err, msg) => {
+        void this.handleMessage(err, msg);
+      }
+    });
+  }
+  async handleMessage(err, msg) {
+    if (err) {
+      this.logger.error("Code Mode NATS subscription error", (0, import_errorLogFields.extractErrorLogFields)(err));
+      return;
+    }
+    if (!msg.reply) {
+      this.logger.warn(`Code Mode NATS request on '${msg.subject}' has no reply subject; dropping`);
+      return;
+    }
+    const dispatcher = this.dispatcher;
+    if (dispatcher === void 0) {
+      try {
+        msg.respond(this.encode({ ok: false, error: "Code Mode dispatcher is not configured", source: "internal" }));
+      } catch (e) {
+        this.logger.warn(`Failed to send dispatcher-missing reply on '${msg.subject}'`, (0, import_errorLogFields.extractErrorLogFields)(e));
+      }
+      return;
+    }
+    const carrier = {};
+    const traceparent = msg.headers?.get("traceparent");
+    const tracestate = msg.headers?.get("tracestate");
+    if (traceparent) carrier["traceparent"] = traceparent;
+    if (tracestate) carrier["tracestate"] = tracestate;
+    let request;
+    try {
+      request = this.decode(msg);
+    } catch (e) {
+      this.logger.error(`Failed to decode Code Mode NATS request on '${msg.subject}'`, (0, import_errorLogFields.extractErrorLogFields)(e));
+      try {
+        msg.respond(this.encode({ ok: false, error: "Malformed Code Mode request", source: "caller" }));
+      } catch (respondErr) {
+        this.logger.warn(`Failed to send decode-error reply on '${msg.subject}'`, (0, import_errorLogFields.extractErrorLogFields)(respondErr));
+      }
+      return;
+    }
+    const reply = await dispatcher.dispatch({ request, traceCarrier: carrier });
+    try {
+      msg.respond(this.encode(reply));
+    } catch (e) {
+      this.logger.error("Failed to publish Code Mode NATS reply", (0, import_errorLogFields.extractErrorLogFields)(e));
+    }
+  }
+  encode(reply) {
+    return new TextEncoder().encode(JSON.stringify(reply));
+  }
+  decode(msg) {
+    const raw = JSON.parse(new TextDecoder().decode(msg.data));
+    return import_types.CodeModeRequestSchema.parse(raw);
+  }
+};
+// Annotate the CommonJS export names for ESM import in node:
+0 && (module.exports = {
+  CodeModeNatsTransport
+});
+//# sourceMappingURL=CodeModeNatsTransport.js.map

package/dist/core/sandbox/codeMode/nats/CodeModeNatsTransport.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../../../../../src/core/sandbox/codeMode/nats/CodeModeNatsTransport.ts"],"sourcesContent":["import { wsconnect, type Msg, type NatsConnection } from '@nats-io/nats-core';\nimport { context } from '@opentelemetry/api';\nimport { suppressTracing } from '@opentelemetry/core';\nimport { randomUUID } from 'node:crypto';\nimport type { Logger } from 'winston';\nimport { WebSocket } from 'ws';\nimport { extractErrorLogFields } from '../../../util/errorLogFields';\nimport { withTimeout } from '../../../util/promiseUtils';\nimport { DEFAULT_SANDBOX_NATS_WS_PORT } from '../../constants';\nimport type { CodeModeDispatcher } from '../CodeModeDispatcher';\nimport type { CodeModeTransport } from '../CodeModeTransport';\nimport { CodeModeRequestSchema, type CodeModeReply, type CodeModeRequest } from '../types';\n\n// `wsconnect` from @nats-io/nats-core relies on a global WebSocket constructor; in Node we\n// provide it from `ws`. Same pattern as `src/services/NatsService.ts`.\nObject.assign(global, { WebSocket });\n\nconst NATS_CONNECT_TIMEOUT_MS = 10_000;\nconst NATS_CONNECT_RETRIES = 3;\nconst NATS_CONNECT_BACKOFF_MS = 250;\nconst NATS_DRAIN_TIMEOUT_MS = 5_000;\n\nconst SANDBOX_NATS_SUBJECT_ROOT = 'sandbox.bridge';\nconst SANDBOX_NATS_MCP_LEAF = 'mcp';\n\n/**\n * NATS Code Mode transport. Session cache + connection-drop invalidate live here\n * (no `whenClosed` on the public interface).\n */\nexport class CodeModeNatsTransport implements CodeModeTransport {\n  private readonly resolveHostUrl: (sandboxId: string) => Promise<string>;\n  private readonly sandboxClientNatsUrl: string;\n  private readonly logger: Logger;\n\n  private sessionPromise: Promise<{ env: Record<string, string> }> | undefined;\n  private nc: NatsConnection | undefined;\n  private dispatcher: CodeModeDispatcher | undefined;\n\n  constructor(params: {\n    resolveHostUrl: (sandboxId: string) => Promise<string>;\n    sandboxClientNatsUrl?: string;\n    logger: Logger;\n  }) {\n    this.resolveHostUrl = params.resolveHostUrl;\n    this.sandboxClientNatsUrl = params.sandboxClientNatsUrl ?? `ws://localhost:${String(DEFAULT_SANDBOX_NATS_WS_PORT)}`;\n    this.logger = params.logger.child({ module: 'CodeModeNatsTransport' });\n  }\n\n  start(params: {\n    codeModeDispatcher: CodeModeDispatcher;\n    sandboxId: string;\n    requestTimeoutSeconds: number;\n  }): Promise<{ env: Record<string, string> }> {\n    this.dispatcher = params.codeModeDispatcher;\n    this.sessionPromise ??= this.connectSession(params).catch((e: unknown) => {\n      this.sessionPromise = undefined;\n      throw e;\n    });\n    return this.sessionPromise;\n  }\n\n  async stop(): Promise<void> {\n    const pending = this.sessionPromise;\n    this.sessionPromise = undefined;\n    if (pending !== undefined) {\n      try {\n        await pending;\n      } catch {\n        // Connect failed; nothing to drain.\n      }\n    }\n    const nc = this.nc;\n    this.nc = undefined;\n    if (nc === undefined) return;\n    try {\n      await withTimeout(nc.drain(), NATS_DRAIN_TIMEOUT_MS);\n    } catch (e) {\n      this.logger.warn('Code Mode NATS drain failed/timed out; forcing close', extractErrorLogFields(e));\n      await nc.close().catch(() => {\n        /* no-op */\n      });\n    }\n  }\n\n  private async connectSession(params: {\n    sandboxId: string;\n    requestTimeoutSeconds: number;\n  }): Promise<{ env: Record<string, string> }> {\n    const url = await this.resolveHostUrl(params.sandboxId);\n    const subjectPrefix = `${SANDBOX_NATS_SUBJECT_ROOT}.${randomUUID()}`;\n    let lastErr: unknown;\n    let nc: NatsConnection | undefined;\n    for (let attempt = 1; attempt <= NATS_CONNECT_RETRIES; attempt++) {\n      try {\n        nc = await context.with(suppressTracing(context.active()), () =>\n          wsconnect({ servers: [url], timeout: NATS_CONNECT_TIMEOUT_MS }),\n        );\n        this.logger.info(`Connected to sandbox NATS (attempt ${String(attempt)})`, { subjectPrefix });\n        break;\n      } catch (e) {\n        lastErr = e;\n        this.logger.warn(`Code Mode NATS connect attempt ${String(attempt)} failed`, extractErrorLogFields(e));\n        if (attempt < NATS_CONNECT_RETRIES) {\n          await new Promise(resolve => setTimeout(resolve, NATS_CONNECT_BACKOFF_MS));\n        }\n      }\n    }\n    if (nc === undefined) {\n      throw lastErr instanceof Error ? lastErr : new Error('Code Mode NATS connect failed');\n    }\n\n    this.nc = nc;\n    this.subscribe(nc, subjectPrefix);\n\n    const cachedPromise = this.sessionPromise;\n    void nc.closed().then(() => {\n      if (this.sessionPromise === cachedPromise) {\n        this.sessionPromise = undefined;\n        this.nc = undefined;\n        this.logger.info('Code Mode NATS connection closed; session invalidated', {\n          sandboxId: params.sandboxId,\n        });\n      }\n    });\n\n    return {\n      env: {\n        TFY_NATS_URL: this.sandboxClientNatsUrl,\n        TFY_NATS_SUBJECT_PREFIX: subjectPrefix,\n        TFY_CM_REQUEST_TIMEOUT_SECONDS: String(params.requestTimeoutSeconds),\n      },\n    };\n  }\n\n  private subscribe(nc: NatsConnection, subjectPrefix: string): void {\n    nc.subscribe(`${subjectPrefix}.${SANDBOX_NATS_MCP_LEAF}`, {\n      callback: (err, msg) => {\n        void this.handleMessage(err, msg);\n      },\n    });\n  }\n\n  private async handleMessage(err: Error | null, msg: Msg): Promise<void> {\n    if (err) {\n      this.logger.error('Code Mode NATS subscription error', extractErrorLogFields(err));\n      return;\n    }\n    if (!msg.reply) {\n      this.logger.warn(`Code Mode NATS request on '${msg.subject}' has no reply subject; dropping`);\n      return;\n    }\n\n    const dispatcher = this.dispatcher;\n    if (dispatcher === undefined) {\n      try {\n        msg.respond(this.encode({ ok: false, error: 'Code Mode dispatcher is not configured', source: 'internal' }));\n      } catch (e) {\n        this.logger.warn(`Failed to send dispatcher-missing reply on '${msg.subject}'`, extractErrorLogFields(e));\n      }\n      return;\n    }\n\n    const carrier: Record<string, string> = {};\n    const traceparent = msg.headers?.get('traceparent');\n    const tracestate = msg.headers?.get('tracestate');\n    if (traceparent) carrier['traceparent'] = traceparent;\n    if (tracestate) carrier['tracestate'] = tracestate;\n\n    let request: CodeModeRequest;\n    try {\n      request = this.decode(msg);\n    } catch (e) {\n      this.logger.error(`Failed to decode Code Mode NATS request on '${msg.subject}'`, extractErrorLogFields(e));\n      try {\n        msg.respond(this.encode({ ok: false, error: 'Malformed Code Mode request', source: 'caller' }));\n      } catch (respondErr) {\n        this.logger.warn(`Failed to send decode-error reply on '${msg.subject}'`, extractErrorLogFields(respondErr));\n      }\n      return;\n    }\n\n    const reply = await dispatcher.dispatch({ request, traceCarrier: carrier });\n    try {\n      msg.respond(this.encode(reply));\n    } catch (e) {\n      this.logger.error('Failed to publish Code Mode NATS reply', extractErrorLogFields(e));\n    }\n  }\n\n  private encode(reply: CodeModeReply): Uint8Array {\n    return new TextEncoder().encode(JSON.stringify(reply));\n  }\n\n  private decode(msg: Msg): CodeModeRequest {\n    const raw: unknown = JSON.parse(new TextDecoder().decode(msg.data));\n    return CodeModeRequestSchema.parse(raw);\n  }\n}\n"],"mappings":";;;;;;;;;;;;;;;;;;;;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,uBAAyD;AACzD,iBAAwB;AACxB,kBAAgC;AAChC,yBAA2B;AAE3B,gBAA0B;AAC1B,4BAAsC;AACtC,0BAA4B;AAC5B,uBAA6C;AAG7C,mBAAgF;AAIhF,OAAO,OAAO,QAAQ,EAAE,+BAAU,CAAC;AAEnC,IAAM,0BAA0B;AAChC,IAAM,uBAAuB;AAC7B,IAAM,0BAA0B;AAChC,IAAM,wBAAwB;AAE9B,IAAM,4BAA4B;AAClC,IAAM,wBAAwB;AAMvB,IAAM,wBAAN,MAAyD;AAAA,EAC7C;AAAA,EACA;AAAA,EACA;AAAA,EAET;AAAA,EACA;AAAA,EACA;AAAA,EAER,YAAY,QAIT;AACD,SAAK,iBAAiB,OAAO;AAC7B,SAAK,uBAAuB,OAAO,wBAAwB,kBAAkB,OAAO,6CAA4B,CAAC;AACjH,SAAK,SAAS,OAAO,OAAO,MAAM,EAAE,QAAQ,wBAAwB,CAAC;AAAA,EACvE;AAAA,EAEA,MAAM,QAIuC;AAC3C,SAAK,aAAa,OAAO;AACzB,SAAK,mBAAmB,KAAK,eAAe,MAAM,EAAE,MAAM,CAAC,MAAe;AACxE,WAAK,iBAAiB;AACtB,YAAM;AAAA,IACR,CAAC;AACD,WAAO,KAAK;AAAA,EACd;AAAA,EAEA,MAAM,OAAsB;AAC1B,UAAM,UAAU,KAAK;AACrB,SAAK,iBAAiB;AACtB,QAAI,YAAY,QAAW;AACzB,UAAI;AACF,cAAM;AAAA,MACR,QAAQ;AAAA,MAER;AAAA,IACF;AACA,UAAM,KAAK,KAAK;AAChB,SAAK,KAAK;AACV,QAAI,OAAO,OAAW;AACtB,QAAI;AACF,gBAAM,iCAAY,GAAG,MAAM,GAAG,qBAAqB;AAAA,IACrD,SAAS,GAAG;AACV,WAAK,OAAO,KAAK,4DAAwD,6CAAsB,CAAC,CAAC;AACjG,YAAM,GAAG,MAAM,EAAE,MAAM,MAAM;AAAA,MAE7B,CAAC;AAAA,IACH;AAAA,EACF;AAAA,EAEA,MAAc,eAAe,QAGgB;AAC3C,UAAM,MAAM,MAAM,KAAK,eAAe,OAAO,SAAS;AACtD,UAAM,gBAAgB,GAAG,yBAAyB,QAAI,+BAAW,CAAC;AAClE,QAAI;AACJ,QAAI;AACJ,aAAS,UAAU,GAAG,WAAW,sBAAsB,WAAW;AAChE,UAAI;AACF,aAAK,MAAM,mBAAQ;AAAA,cAAK,6BAAgB,mBAAQ,OAAO,CAAC;AAAA,UAAG,UACzD,4BAAU,EAAE,SAAS,CAAC,GAAG,GAAG,SAAS,wBAAwB,CAAC;AAAA,QAChE;AACA,aAAK,OAAO,KAAK,sCAAsC,OAAO,OAAO,CAAC,KAAK,EAAE,cAAc,CAAC;AAC5F;AAAA,MACF,SAAS,GAAG;AACV,kBAAU;AACV,aAAK,OAAO,KAAK,kCAAkC,OAAO,OAAO,CAAC,eAAW,6CAAsB,CAAC,CAAC;AACrG,YAAI,UAAU,sBAAsB;AAClC,gBAAM,IAAI,QAAQ,aAAW,WAAW,SAAS,uBAAuB,CAAC;AAAA,QAC3E;AAAA,MACF;AAAA,IACF;AACA,QAAI,OAAO,QAAW;AACpB,YAAM,mBAAmB,QAAQ,UAAU,IAAI,MAAM,+BAA+B;AAAA,IACtF;AAEA,SAAK,KAAK;AACV,SAAK,UAAU,IAAI,aAAa;AAEhC,UAAM,gBAAgB,KAAK;AAC3B,SAAK,GAAG,OAAO,EAAE,KAAK,MAAM;AAC1B,UAAI,KAAK,mBAAmB,eAAe;AACzC,aAAK,iBAAiB;AACtB,aAAK,KAAK;AACV,aAAK,OAAO,KAAK,yDAAyD;AAAA,UACxE,WAAW,OAAO;AAAA,QACpB,CAAC;AAAA,MACH;AAAA,IACF,CAAC;AAED,WAAO;AAAA,MACL,KAAK;AAAA,QACH,cAAc,KAAK;AAAA,QACnB,yBAAyB;AAAA,QACzB,gCAAgC,OAAO,OAAO,qBAAqB;AAAA,MACrE;AAAA,IACF;AAAA,EACF;AAAA,EAEQ,UAAU,IAAoB,eAA6B;AACjE,OAAG,UAAU,GAAG,aAAa,IAAI,qBAAqB,IAAI;AAAA,MACxD,UAAU,CAAC,KAAK,QAAQ;AACtB,aAAK,KAAK,cAAc,KAAK,GAAG;AAAA,MAClC;AAAA,IACF,CAAC;AAAA,EACH;AAAA,EAEA,MAAc,cAAc,KAAmB,KAAyB;AACtE,QAAI,KAAK;AACP,WAAK,OAAO,MAAM,yCAAqC,6CAAsB,GAAG,CAAC;AACjF;AAAA,IACF;AACA,QAAI,CAAC,IAAI,OAAO;AACd,WAAK,OAAO,KAAK,8BAA8B,IAAI,OAAO,kCAAkC;AAC5F;AAAA,IACF;AAEA,UAAM,aAAa,KAAK;AACxB,QAAI,eAAe,QAAW;AAC5B,UAAI;AACF,YAAI,QAAQ,KAAK,OAAO,EAAE,IAAI,OAAO,OAAO,0CAA0C,QAAQ,WAAW,CAAC,CAAC;AAAA,MAC7G,SAAS,GAAG;AACV,aAAK,OAAO,KAAK,+CAA+C,IAAI,OAAO,SAAK,6CAAsB,CAAC,CAAC;AAAA,MAC1G;AACA;AAAA,IACF;AAEA,UAAM,UAAkC,CAAC;AACzC,UAAM,cAAc,IAAI,SAAS,IAAI,aAAa;AAClD,UAAM,aAAa,IAAI,SAAS,IAAI,YAAY;AAChD,QAAI,YAAa,SAAQ,aAAa,IAAI;AAC1C,QAAI,WAAY,SAAQ,YAAY,IAAI;AAExC,QAAI;AACJ,QAAI;AACF,gBAAU,KAAK,OAAO,GAAG;AAAA,IAC3B,SAAS,GAAG;AACV,WAAK,OAAO,MAAM,+CAA+C,IAAI,OAAO,SAAK,6CAAsB,CAAC,CAAC;AACzG,UAAI;AACF,YAAI,QAAQ,KAAK,OAAO,EAAE,IAAI,OAAO,OAAO,+BAA+B,QAAQ,SAAS,CAAC,CAAC;AAAA,MAChG,SAAS,YAAY;AACnB,aAAK,OAAO,KAAK,yCAAyC,IAAI,OAAO,SAAK,6CAAsB,UAAU,CAAC;AAAA,MAC7G;AACA;AAAA,IACF;AAEA,UAAM,QAAQ,MAAM,WAAW,SAAS,EAAE,SAAS,cAAc,QAAQ,CAAC;AAC1E,QAAI;AACF,UAAI,QAAQ,KAAK,OAAO,KAAK,CAAC;AAAA,IAChC,SAAS,GAAG;AACV,WAAK,OAAO,MAAM,8CAA0C,6CAAsB,CAAC,CAAC;AAAA,IACtF;AAAA,EACF;AAAA,EAEQ,OAAO,OAAkC;AAC/C,WAAO,IAAI,YAAY,EAAE,OAAO,KAAK,UAAU,KAAK,CAAC;AAAA,EACvD;AAAA,EAEQ,OAAO,KAA2B;AACxC,UAAM,MAAe,KAAK,MAAM,IAAI,YAAY,EAAE,OAAO,IAAI,IAAI,CAAC;AAClE,WAAO,mCAAsB,MAAM,GAAG;AAAA,EACxC;AACF;","names":[]}