@yolk-sdk/codemode 0.1.0-canary.100

package/dist/node.mjs

@@ -0,0 +1,393 @@
+import { codeModeCallLabels } from "./catalog.mjs";
+import * as nodeModule from "node:module";
+import { Option, Predicate } from "effect";
+import * as Schema from "effect/Schema";
+import { CodemodeSandbox } from "@earendil-works/pi-codemode";
+//#region src/node.ts
+/** Default cap of concurrent script executions per executor. */
+const defaultMaxConcurrentExecutions = 4;
+/** Abort- and deadline-aware counting semaphore for executions. */
+const makeExecutionSlots = (max) => {
+	let active = 0;
+	const waiting = [];
+	const acquire = (signal, timeoutMs) => {
+		if (signal.aborted) return Promise.resolve("aborted");
+		if (active < max) {
+			active++;
+			return Promise.resolve("acquired");
+		}
+		return new Promise((resolve) => {
+			let timer;
+			const settle = (outcome) => {
+				const index = waiting.indexOf(settle);
+				if (index !== -1) waiting.splice(index, 1);
+				if (timer !== void 0) clearTimeout(timer);
+				signal.removeEventListener("abort", onAbort);
+				resolve(outcome);
+			};
+			const onAbort = () => settle("aborted");
+			waiting.push(settle);
+			signal.addEventListener("abort", onAbort, { once: true });
+			if (Number.isFinite(timeoutMs)) timer = setTimeout(() => settle("timeout"), Math.max(0, timeoutMs));
+		});
+	};
+	const release = () => {
+		const next = waiting[0];
+		if (next === void 0) active--;
+		else next("acquired");
+	};
+	return {
+		acquire,
+		release
+	};
+};
+const wrapperPrefix = "async function __yolkCodeMode() {\n";
+const wrapperSuffix = "\n}";
+/**
+* Evaluated in the VM before the script runs: `(tools, labels) => guardedTools`, with `labels` the
+* `[name, callLabel]` pairs of the tools in order (`codeModeCallLabels`). Each call walks its first
+* argument once, the way `JSON.stringify` reads it (each own enumerable string key and each array
+* index read once, so getters run once; a callable `toJSON` is called once with the key, `''` at
+* the root, and its result is walked at the same path), and builds a fresh copy (null-prototype
+* objects and arrays) that is what the call sends. It rejects with a `TypeError` naming the call
+* label and path when JSON would change the value instead of carrying it: non-finite numbers,
+* invalid `Date`s, `undefined`/function/symbol array items and holes, function/symbol/bigint
+* values, cycles, and objects that are neither plain (prototype `Object.prototype` or `null`) nor
+* arrays and have no `toJSON`. An argument with more than `maxArgumentValues` values or nested more
+* than `maxArgumentDepth` levels is rejected too, never sent unchecked. `undefined`-valued keys are
+* left out (absent, as JSON drops them); the same object twice (not a cycle) is copied twice. An
+* error thrown by a getter or `toJSON` rejects the call with that error. A rejected call never
+* reaches the host. Every member of pi's `tools` is wrapped; unknown members fall through to pi's
+* proxy (close-match suggestions). Not a security boundary (`globalThis.tools` is unguarded):
+* arguments are still decoded by the host.
+*/
+const toolsGuardSource = `(function (tools, labels) {
+  // Captured before the script runs, so a script that changes built-ins cannot change the checks.
+  const { apply, getPrototypeOf, setPrototypeOf } = Reflect
+  const isFinite = Number.isFinite
+  const isArray = Array.isArray
+  const { keys, create, defineProperty } = Object
+  const getTime = Date.prototype.getTime
+  const TypeErrorCtor = TypeError
+  const SetCtor = Set
+  const setAdd = Set.prototype.add
+  const setHas = Set.prototype.has
+  const setDelete = Set.prototype.delete
+  const ObjectProto = Object.prototype
+  const { trunc, min } = Math
+  const stringify = JSON.stringify
+  const plainJson = 'pass plain JSON (objects, arrays, strings, finite numbers, booleans, null)'
+  const maxValues = 100000
+  const maxDepth = 64
+  class Rejected {
+    constructor(message) {
+      defineProperty(this, 'message', { value: message })
+    }
+  }
+  const keyPath = (path, key) =>
+    /^[A-Za-z_$][\\w$]*$/.test(key)
+      ? (path === '' ? key : path + '.' + key)
+      : path + '[' + stringify(key) + ']'
+  const typeName = value => {
+    const proto = getPrototypeOf(value)
+    const name = proto && typeof proto.constructor === 'function' ? proto.constructor.name : ''
+    return name ? (/^[AEIOU]/.test(name) ? 'an ' : 'a ') + name : 'a non-plain object'
+  }
+  // The JSON copy of a value already read from its holder at key (undefined: absent), or throws
+  // Rejected with why JSON would not carry it unchanged.
+  const snapshot = (read, key, path, slot, walk) => {
+    const at = path === '' ? 'is ' : 'at ' + path + ' is '
+    if (++walk.values > maxValues) {
+      throw new Rejected('has more than ' + maxValues + ' values; split the work across calls')
+    }
+    let value = read
+    const kind = typeof value
+    if ((kind === 'object' && value !== null) || kind === 'function' || kind === 'bigint') {
+      // The intrinsic getTime reads a Date's internal time (and throws for anything else).
+      let time
+      try {
+        time = apply(getTime, value, [])
+      } catch {
+        time = undefined
+      }
+      if (time !== undefined && !isFinite(time)) {
+        throw new Rejected(at + 'an invalid Date; pass a valid Date or an ISO string')
+      }
+      const toJSON = value.toJSON
+      if (typeof toJSON === 'function') value = apply(toJSON, value, [key])
+    }
+    switch (typeof value) {
+      case 'string':
+      case 'boolean':
+        return value
+      case 'number':
+        if (isFinite(value)) return value
+        throw new Rejected(
+          at + value + '; pass a finite number' + (slot === 'key' ? ' or omit the key' : '')
+        )
+      case 'undefined':
+        if (slot === 'item') throw new Rejected(at + 'undefined; arrays cannot hold undefined')
+        return undefined
+      case 'bigint':
+      case 'function':
+      case 'symbol':
+        throw new Rejected(at + 'a ' + typeof value + '; ' + plainJson)
+    }
+    if (value === null) return null
+    if (apply(setHas, walk.ancestors, [value])) {
+      throw new Rejected(at + 'a circular reference; ' + plainJson)
+    }
+    if (walk.depth >= maxDepth) {
+      throw new Rejected('at ' + path + ' is nested more than ' + maxDepth + ' levels deep')
+    }
+    const array = isArray(value)
+    if (!array) {
+      const proto = getPrototypeOf(value)
+      if (proto !== ObjectProto && proto !== null) {
+        throw new Rejected(at + typeName(value) + '; ' + plainJson)
+      }
+    }
+    apply(setAdd, walk.ancestors, [value])
+    walk.depth++
+    let copy
+    if (array) {
+      // LengthOfArrayLike, read once, as JSON.stringify does.
+      // Unary plus is ToNumber: one coercion, and it throws for a bigint as JSON.stringify does.
+      const raw = +value.length
+      const length = raw > 0 ? min(trunc(raw), 9007199254740991) : 0
+      // No prototype: no inherited toJSON or index setter can change the checked copy when pi
+      // serializes it (still an array to JSON.stringify).
+      copy = []
+      setPrototypeOf(copy, null)
+      for (let i = 0; i < length; i++) {
+        copy[i] = snapshot(value[i], '' + i, path + '[' + i + ']', 'item', walk)
+      }
+    } else {
+      copy = create(null)
+      // Indexed over the fresh key array: no iterator a script could replace.
+      const names = keys(value)
+      for (let i = 0; i < names.length; i++) {
+        const name = names[i]
+        const item = snapshot(value[name], name, keyPath(path, name), 'key', walk)
+        if (item !== undefined) copy[name] = item
+      }
+    }
+    walk.depth--
+    apply(setDelete, walk.ancestors, [value])
+    return copy
+  }
+  const wrap = (label, call) => async (...args) => {
+    let json
+    try {
+      json = snapshot(args[0], '', '', 'root', { values: 0, depth: 0, ancestors: new SetCtor() })
+    } catch (error) {
+      if (error instanceof Rejected) throw new TypeErrorCtor(label + ': argument ' + error.message)
+      throw error
+    }
+    return call(json)
+  }
+  // Each tool's function sits at tools[name] unless an earlier tool holds that key, in which case
+  // that earlier function is already wrapped.
+  const wrappers = new Map()
+  for (const [name, label] of labels) {
+    const call = name in tools ? tools[name] : undefined
+    if (typeof call === 'function' && !wrappers.has(call)) wrappers.set(call, wrap(label, call))
+  }
+  const guarded = Object.create(null)
+  for (const key of Object.keys(tools)) {
+    const call = tools[key]
+    if (!wrappers.has(call)) wrappers.set(call, wrap('tools[' + JSON.stringify(key) + ']', call))
+    guarded[key] = wrappers.get(call)
+  }
+  return new Proxy(Object.freeze(guarded), {
+    get: (target, key) => (key in target ? target[key] : tools[key])
+  })
+})`;
+const guardPrefix = "return (async (tools, console) => {";
+/** JSON as a JavaScript expression (U+2028/U+2029 escaped for older parsers). */
+const jsonSource = (value) => JSON.stringify(value).replace(/[\u2028\u2029]/g, (char) => char === "\u2028" ? "\\u2028" : "\\u2029");
+const guardSuffix = (tools) => {
+	const labels = codeModeCallLabels(tools.map((tool) => tool.name));
+	return `\n})(${toolsGuardSource}(tools, ${jsonSource(tools.map((tool, index) => [tool.name, tool.callLabel ?? labels[index] ?? `tools[${JSON.stringify(tool.name)}]`]))}), console)`;
+};
+const lineTerminators = /\r\n?|[\n\u2028\u2029]/g;
+/** Lines of the script as QuickJS counts them (at least; never fewer). */
+const scriptLineCount = (code) => (code.match(lineTerminators)?.length ?? 0) + 1;
+const scriptFrame = /codemode\.js:(\d+):\d+/;
+/** Drops stack frames of the wrapper and guard, which sit below the script's last line. */
+const withoutWrapperFrames = (stack, scriptLines) => stack.split("\n").filter((line) => {
+	const frame = scriptFrame.exec(line);
+	return frame === null || Number(frame[1]) <= scriptLines;
+}).join("\n");
+const ErrorWithCode = Schema.Struct({ code: Schema.String });
+const errorCode = (error) => Option.getOrUndefined(Option.map(Schema.decodeUnknownOption(ErrorWithCode)(error), (e) => e.code));
+const syntaxLocation = (error) => {
+	const match = /^[^\n]*:(\d+)\n([^\n]*)\n([^\n]*)\n/.exec(error.stack ?? "");
+	if (match === null) return "";
+	const line = Number(match[1]) - 1;
+	return line >= 1 ? ` (line ${line})\n${match[2] ?? ""}\n${match[3] ?? ""}` : "";
+};
+const typeStripMessage = (error) => {
+	const message = error instanceof Error ? error.message : String(error);
+	if (errorCode(error) === "ERR_UNSUPPORTED_TYPESCRIPT_SYNTAX") return `${message}. Write plain JavaScript: type annotations are stripped, but enums, namespaces, and parameter properties are not supported.`;
+	return `The script could not be parsed: ${message}${error instanceof Error ? syntaxLocation(error) : ""}`;
+};
+/**
+* Strips TypeScript annotations with Node's `stripTypeScriptTypes` (Node 22.13+; whitespace
+* replacement keeps line and column numbers). The script is wrapped in an async function so
+* top-level `return` and `await` parse. On Node without the API, code passes through unchanged.
+*/
+const stripTypes = (code) => {
+	if (!Predicate.isFunction(nodeModule.stripTypeScriptTypes)) return {
+		ok: true,
+		code
+	};
+	try {
+		const stripped = nodeModule.stripTypeScriptTypes(`${wrapperPrefix}${code}${wrapperSuffix}`, { mode: "strip" });
+		if (!stripped.startsWith(wrapperPrefix) || !stripped.endsWith(wrapperSuffix)) return {
+			ok: false,
+			error: {
+				kind: "script",
+				message: "The script could not be parsed."
+			}
+		};
+		return {
+			ok: true,
+			code: stripped.slice(34, stripped.length - 2)
+		};
+	} catch (error) {
+		return {
+			ok: false,
+			error: {
+				kind: "script",
+				message: typeStripMessage(error)
+			}
+		};
+	}
+};
+const piTool = (tool) => {
+	const converted = {
+		name: tool.name,
+		execute: (args, context) => tool.execute(args, context)
+	};
+	if (tool.description !== void 0) converted.description = tool.description;
+	if (tool.inputSchema !== void 0) converted.inputSchema = tool.inputSchema;
+	if (tool.outputSchema !== void 0) converted.outputSchema = tool.outputSchema;
+	return converted;
+};
+const piGlobal = (global) => {
+	const converted = piTool(global);
+	if (global.spread !== void 0) converted.spread = global.spread;
+	if (global.signature !== void 0) converted.signature = global.signature;
+	return converted;
+};
+const failure = (error) => ({
+	ok: false,
+	error,
+	output: []
+});
+const StoreWrites = Schema.Struct({
+	set: Schema.Record(Schema.String, Schema.Json),
+	delete: Schema.Array(Schema.String)
+});
+const decodeStoreWrites = Schema.decodeUnknownOption(StoreWrites);
+const fromPiResult = (result, scriptLines) => {
+	if (result.ok) {
+		const storeWrites = decodeStoreWrites(result.storeWrites);
+		if (Option.isNone(storeWrites)) return failure({
+			kind: "sandbox",
+			message: "The script reported store writes that are not JSON."
+		});
+		const converted = {
+			ok: true,
+			output: result.output,
+			storeWrites: storeWrites.value
+		};
+		if (result.value !== void 0) converted.value = result.value;
+		return converted;
+	}
+	const { kind, name, message, stack } = result.error;
+	const error = {
+		kind,
+		message: name !== void 0 && name.length > 0 && !message.startsWith(name) ? `${name}: ${message}` : message
+	};
+	if (stack !== void 0) error.stack = withoutWrapperFrames(stack, scriptLines);
+	return {
+		ok: false,
+		error,
+		output: result.output
+	};
+};
+const describeError = (error) => error instanceof Error ? error.message : String(error);
+/**
+* A `CodeModeExecutor` on `@earendil-works/pi-codemode`: every execution gets a fresh QuickJS VM
+* (WebAssembly) in a fresh worker thread, closed when the execution ends. Applies the timeout,
+* heap cap, abort signal, and store, strips TypeScript annotations first, rejects tool arguments
+* that JSON would silently change inside the script (see `CodeModeExecutorTool`), and caps concurrent
+* executions per executor; create one executor per process (module scope) so the cap is
+* per process.
+*
+* Node only. The worker inherits a copy of `process.env` (scripts cannot read it: the VM has no
+* `process`). Under Next.js, list `@yolk-sdk/codemode`, `@earendil-works/pi-codemode`, and
+* `quickjs-wasi` in `serverExternalPackages` so the worker file and wasm stay on disk.
+*/
+const makePiCodeModeExecutor = (options = {}) => {
+	const slots = makeExecutionSlots(Math.max(1, Math.floor(options.maxConcurrentExecutions ?? 4)));
+	const run = async (code, execution, queuedAt) => {
+		const remaining = () => execution.timeoutMs - (Date.now() - queuedAt);
+		const stripped = stripTypes(code);
+		if (!stripped.ok) return failure(stripped.error);
+		const timeoutMs = remaining();
+		if (timeoutMs <= 0) return failure({
+			kind: "timeout",
+			message: `Execution timed out after ${execution.timeoutMs} ms`
+		});
+		const sandboxOptions = {
+			tools: execution.tools.map(piTool),
+			globals: execution.globals.map(piGlobal),
+			timeoutMs,
+			memoryLimitBytes: execution.memoryLimitBytes
+		};
+		if (options.wasm !== void 0) sandboxOptions.wasm = options.wasm;
+		if (options.workerUrl !== void 0) sandboxOptions.workerUrl = options.workerUrl;
+		let sandbox;
+		try {
+			sandbox = new CodemodeSandbox(sandboxOptions);
+		} catch (error) {
+			return failure({
+				kind: "sandbox",
+				message: `Could not create the sandbox: ${describeError(error)}`
+			});
+		}
+		try {
+			return fromPiResult(await sandbox.execute(`${guardPrefix}${stripped.code}${guardSuffix(execution.tools)}`, {
+				signal: execution.signal,
+				store: execution.store,
+				timeoutMs
+			}), scriptLineCount(stripped.code));
+		} finally {
+			await sandbox.close();
+		}
+	};
+	return { execute: async (code, execution) => {
+		const queuedAt = Date.now();
+		const slot = await slots.acquire(execution.signal, execution.timeoutMs);
+		if (slot === "aborted") return failure({
+			kind: "aborted",
+			message: "Execution aborted"
+		});
+		if (slot === "timeout") return failure({
+			kind: "timeout",
+			message: `Execution timed out after ${execution.timeoutMs} ms while waiting for a free execution slot`
+		});
+		try {
+			return await run(code, execution, queuedAt);
+		} finally {
+			slots.release();
+		}
+	} };
+};
+//#endregion
+export { defaultMaxConcurrentExecutions, makePiCodeModeExecutor };
+
+//# sourceMappingURL=node.mjs.map

package/dist/node.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"node.mjs","names":[],"sources":["../src/node.ts"],"sourcesContent":["import * as nodeModule from 'node:module'\nimport { Option, Predicate } from 'effect'\nimport * as Schema from 'effect/Schema'\nimport {\n  CodemodeSandbox,\n  type CodemodeResult,\n  type CodemodeSandboxOptions,\n  type CodemodeTool,\n  type CodemodeWasmModule\n} from '@earendil-works/pi-codemode'\nimport { codeModeCallLabels } from './catalog.ts'\nimport type {\n  CodeModeError,\n  CodeModeExecuteOptions,\n  CodeModeExecutionResult,\n  CodeModeExecutor,\n  CodeModeExecutorGlobal,\n  CodeModeExecutorTool,\n  CodeModeStoreWrites\n} from './executor.ts'\n\n/** Default cap of concurrent script executions per executor. */\nexport const defaultMaxConcurrentExecutions = 4\n\nexport type PiCodeModeExecutorOptions = {\n  /**\n   * Compiled `quickjs-wasi/quickjs.wasm` (see pi's `loadQuickJSWasm`). Default: the file of the\n   * installed `quickjs-wasi` package, compiled once per process.\n   */\n  readonly wasm?: CodemodeWasmModule | Promise<CodemodeWasmModule>\n  /**\n   * Worker entry that imports `@earendil-works/pi-codemode/worker`. Default: pi's own worker file,\n   * which exists on disk when the package is not bundled (Next `serverExternalPackages`).\n   */\n  readonly workerUrl?: string | URL\n  /** Concurrent executions of this executor; more wait for a free slot. Default 4. */\n  readonly maxConcurrentExecutions?: number\n}\n\ntype SlotOutcome = 'acquired' | 'aborted' | 'timeout'\n\ntype Waiter = (outcome: SlotOutcome) => void\n\n/** Abort- and deadline-aware counting semaphore for executions. */\nconst makeExecutionSlots = (max: number) => {\n  let active = 0\n  const waiting: Array<Waiter> = []\n\n  const acquire = (signal: AbortSignal, timeoutMs: number): Promise<SlotOutcome> => {\n    if (signal.aborted) return Promise.resolve('aborted')\n\n    if (active < max) {\n      active++\n\n      return Promise.resolve('acquired')\n    }\n\n    return new Promise(resolve => {\n      let timer: ReturnType<typeof setTimeout> | undefined\n\n      const settle: Waiter = outcome => {\n        const index = waiting.indexOf(settle)\n\n        if (index !== -1) waiting.splice(index, 1)\n\n        if (timer !== undefined) clearTimeout(timer)\n        signal.removeEventListener('abort', onAbort)\n        resolve(outcome)\n      }\n\n      const onAbort = () => settle('aborted')\n\n      waiting.push(settle)\n      signal.addEventListener('abort', onAbort, { once: true })\n\n      if (Number.isFinite(timeoutMs)) {\n        timer = setTimeout(() => settle('timeout'), Math.max(0, timeoutMs))\n      }\n    })\n  }\n\n  const release = () => {\n    const next = waiting[0]\n\n    if (next === undefined) {\n      active--\n    } else {\n      // The slot passes straight to the next waiter.\n      next('acquired')\n    }\n  }\n\n  return { acquire, release }\n}\n\nconst wrapperPrefix = 'async function __yolkCodeMode() {\\n'\n\nconst wrapperSuffix = '\\n}'\n\n/** Most values one argument may hold; a larger argument is rejected. */\nconst maxArgumentValues = 100_000\n\n/** Deepest object/array nesting one argument may have; deeper arguments are rejected. */\nconst maxArgumentDepth = 64\n\n/**\n * Evaluated in the VM before the script runs: `(tools, labels) => guardedTools`, with `labels` the\n * `[name, callLabel]` pairs of the tools in order (`codeModeCallLabels`). Each call walks its first\n * argument once, the way `JSON.stringify` reads it (each own enumerable string key and each array\n * index read once, so getters run once; a callable `toJSON` is called once with the key, `''` at\n * the root, and its result is walked at the same path), and builds a fresh copy (null-prototype\n * objects and arrays) that is what the call sends. It rejects with a `TypeError` naming the call\n * label and path when JSON would change the value instead of carrying it: non-finite numbers,\n * invalid `Date`s, `undefined`/function/symbol array items and holes, function/symbol/bigint\n * values, cycles, and objects that are neither plain (prototype `Object.prototype` or `null`) nor\n * arrays and have no `toJSON`. An argument with more than `maxArgumentValues` values or nested more\n * than `maxArgumentDepth` levels is rejected too, never sent unchecked. `undefined`-valued keys are\n * left out (absent, as JSON drops them); the same object twice (not a cycle) is copied twice. An\n * error thrown by a getter or `toJSON` rejects the call with that error. A rejected call never\n * reaches the host. Every member of pi's `tools` is wrapped; unknown members fall through to pi's\n * proxy (close-match suggestions). Not a security boundary (`globalThis.tools` is unguarded):\n * arguments are still decoded by the host.\n */\nconst toolsGuardSource = `(function (tools, labels) {\n  // Captured before the script runs, so a script that changes built-ins cannot change the checks.\n  const { apply, getPrototypeOf, setPrototypeOf } = Reflect\n  const isFinite = Number.isFinite\n  const isArray = Array.isArray\n  const { keys, create, defineProperty } = Object\n  const getTime = Date.prototype.getTime\n  const TypeErrorCtor = TypeError\n  const SetCtor = Set\n  const setAdd = Set.prototype.add\n  const setHas = Set.prototype.has\n  const setDelete = Set.prototype.delete\n  const ObjectProto = Object.prototype\n  const { trunc, min } = Math\n  const stringify = JSON.stringify\n  const plainJson = 'pass plain JSON (objects, arrays, strings, finite numbers, booleans, null)'\n  const maxValues = ${maxArgumentValues}\n  const maxDepth = ${maxArgumentDepth}\n  class Rejected {\n    constructor(message) {\n      defineProperty(this, 'message', { value: message })\n    }\n  }\n  const keyPath = (path, key) =>\n    /^[A-Za-z_$][\\\\w$]*$/.test(key)\n      ? (path === '' ? key : path + '.' + key)\n      : path + '[' + stringify(key) + ']'\n  const typeName = value => {\n    const proto = getPrototypeOf(value)\n    const name = proto && typeof proto.constructor === 'function' ? proto.constructor.name : ''\n    return name ? (/^[AEIOU]/.test(name) ? 'an ' : 'a ') + name : 'a non-plain object'\n  }\n  // The JSON copy of a value already read from its holder at key (undefined: absent), or throws\n  // Rejected with why JSON would not carry it unchanged.\n  const snapshot = (read, key, path, slot, walk) => {\n    const at = path === '' ? 'is ' : 'at ' + path + ' is '\n    if (++walk.values > maxValues) {\n      throw new Rejected('has more than ' + maxValues + ' values; split the work across calls')\n    }\n    let value = read\n    const kind = typeof value\n    if ((kind === 'object' && value !== null) || kind === 'function' || kind === 'bigint') {\n      // The intrinsic getTime reads a Date's internal time (and throws for anything else).\n      let time\n      try {\n        time = apply(getTime, value, [])\n      } catch {\n        time = undefined\n      }\n      if (time !== undefined && !isFinite(time)) {\n        throw new Rejected(at + 'an invalid Date; pass a valid Date or an ISO string')\n      }\n      const toJSON = value.toJSON\n      if (typeof toJSON === 'function') value = apply(toJSON, value, [key])\n    }\n    switch (typeof value) {\n      case 'string':\n      case 'boolean':\n        return value\n      case 'number':\n        if (isFinite(value)) return value\n        throw new Rejected(\n          at + value + '; pass a finite number' + (slot === 'key' ? ' or omit the key' : '')\n        )\n      case 'undefined':\n        if (slot === 'item') throw new Rejected(at + 'undefined; arrays cannot hold undefined')\n        return undefined\n      case 'bigint':\n      case 'function':\n      case 'symbol':\n        throw new Rejected(at + 'a ' + typeof value + '; ' + plainJson)\n    }\n    if (value === null) return null\n    if (apply(setHas, walk.ancestors, [value])) {\n      throw new Rejected(at + 'a circular reference; ' + plainJson)\n    }\n    if (walk.depth >= maxDepth) {\n      throw new Rejected('at ' + path + ' is nested more than ' + maxDepth + ' levels deep')\n    }\n    const array = isArray(value)\n    if (!array) {\n      const proto = getPrototypeOf(value)\n      if (proto !== ObjectProto && proto !== null) {\n        throw new Rejected(at + typeName(value) + '; ' + plainJson)\n      }\n    }\n    apply(setAdd, walk.ancestors, [value])\n    walk.depth++\n    let copy\n    if (array) {\n      // LengthOfArrayLike, read once, as JSON.stringify does.\n      // Unary plus is ToNumber: one coercion, and it throws for a bigint as JSON.stringify does.\n      const raw = +value.length\n      const length = raw > 0 ? min(trunc(raw), 9007199254740991) : 0\n      // No prototype: no inherited toJSON or index setter can change the checked copy when pi\n      // serializes it (still an array to JSON.stringify).\n      copy = []\n      setPrototypeOf(copy, null)\n      for (let i = 0; i < length; i++) {\n        copy[i] = snapshot(value[i], '' + i, path + '[' + i + ']', 'item', walk)\n      }\n    } else {\n      copy = create(null)\n      // Indexed over the fresh key array: no iterator a script could replace.\n      const names = keys(value)\n      for (let i = 0; i < names.length; i++) {\n        const name = names[i]\n        const item = snapshot(value[name], name, keyPath(path, name), 'key', walk)\n        if (item !== undefined) copy[name] = item\n      }\n    }\n    walk.depth--\n    apply(setDelete, walk.ancestors, [value])\n    return copy\n  }\n  const wrap = (label, call) => async (...args) => {\n    let json\n    try {\n      json = snapshot(args[0], '', '', 'root', { values: 0, depth: 0, ancestors: new SetCtor() })\n    } catch (error) {\n      if (error instanceof Rejected) throw new TypeErrorCtor(label + ': argument ' + error.message)\n      throw error\n    }\n    return call(json)\n  }\n  // Each tool's function sits at tools[name] unless an earlier tool holds that key, in which case\n  // that earlier function is already wrapped.\n  const wrappers = new Map()\n  for (const [name, label] of labels) {\n    const call = name in tools ? tools[name] : undefined\n    if (typeof call === 'function' && !wrappers.has(call)) wrappers.set(call, wrap(label, call))\n  }\n  const guarded = Object.create(null)\n  for (const key of Object.keys(tools)) {\n    const call = tools[key]\n    if (!wrappers.has(call)) wrappers.set(call, wrap('tools[' + JSON.stringify(key) + ']', call))\n    guarded[key] = wrappers.get(call)\n  }\n  return new Proxy(Object.freeze(guarded), {\n    get: (target, key) => (key in target ? target[key] : tools[key])\n  })\n})`\n\n// pi runs `(async (tools, console) => {<code>\\n})`. The script runs in an inner function of the\n// same shape whose `tools` is guarded; the prefix shares line 1 with the script (only line-1\n// columns shift) and the guard follows the script, so its line numbers are unchanged.\nconst guardPrefix = 'return (async (tools, console) => {'\n\n/** JSON as a JavaScript expression (U+2028/U+2029 escaped for older parsers). */\nconst jsonSource = (value: unknown) =>\n  JSON.stringify(value).replace(/[\\u2028\\u2029]/g, char =>\n    char === '\\u2028' ? '\\\\u2028' : '\\\\u2029'\n  )\n\nconst guardSuffix = (tools: ReadonlyArray<CodeModeExecutorTool>) => {\n  const names = tools.map(tool => tool.name)\n  const labels = codeModeCallLabels(names)\n\n  // `makeCodeModeTool` supplies each label; other callers get pi's binding rule.\n  const pairs = tools.map((tool, index) => [\n    tool.name,\n    tool.callLabel ?? labels[index] ?? `tools[${JSON.stringify(tool.name)}]`\n  ])\n\n  return `\\n})(${toolsGuardSource}(tools, ${jsonSource(pairs)}), console)`\n}\n\nconst lineTerminators = /\\r\\n?|[\\n\\u2028\\u2029]/g\n\n/** Lines of the script as QuickJS counts them (at least; never fewer). */\nconst scriptLineCount = (code: string) => (code.match(lineTerminators)?.length ?? 0) + 1\n\nconst scriptFrame = /codemode\\.js:(\\d+):\\d+/\n\n/** Drops stack frames of the wrapper and guard, which sit below the script's last line. */\nconst withoutWrapperFrames = (stack: string, scriptLines: number) =>\n  stack\n    .split('\\n')\n    .filter(line => {\n      const frame = scriptFrame.exec(line)\n\n      return frame === null || Number(frame[1]) <= scriptLines\n    })\n    .join('\\n')\n\nconst ErrorWithCode = Schema.Struct({ code: Schema.String })\n\nconst errorCode = (error: unknown) =>\n  Option.getOrUndefined(Option.map(Schema.decodeUnknownOption(ErrorWithCode)(error), e => e.code))\n\nconst syntaxLocation = (error: Error) => {\n  const match = /^[^\\n]*:(\\d+)\\n([^\\n]*)\\n([^\\n]*)\\n/.exec(error.stack ?? '')\n\n  if (match === null) return ''\n\n  const line = Number(match[1]) - 1\n\n  return line >= 1 ? ` (line ${line})\\n${match[2] ?? ''}\\n${match[3] ?? ''}` : ''\n}\n\nconst typeStripMessage = (error: unknown) => {\n  const message = error instanceof Error ? error.message : String(error)\n\n  if (errorCode(error) === 'ERR_UNSUPPORTED_TYPESCRIPT_SYNTAX') {\n    return `${message}. Write plain JavaScript: type annotations are stripped, but enums, namespaces, and parameter properties are not supported.`\n  }\n\n  const location = error instanceof Error ? syntaxLocation(error) : ''\n\n  return `The script could not be parsed: ${message}${location}`\n}\n\ntype Stripped =\n  | { readonly ok: true; readonly code: string }\n  | { readonly ok: false; readonly error: CodeModeError }\n\n/**\n * Strips TypeScript annotations with Node's `stripTypeScriptTypes` (Node 22.13+; whitespace\n * replacement keeps line and column numbers). The script is wrapped in an async function so\n * top-level `return` and `await` parse. On Node without the API, code passes through unchanged.\n */\nconst stripTypes = (code: string): Stripped => {\n  if (!Predicate.isFunction(nodeModule.stripTypeScriptTypes)) return { ok: true, code }\n\n  try {\n    const stripped = nodeModule.stripTypeScriptTypes(`${wrapperPrefix}${code}${wrapperSuffix}`, {\n      mode: 'strip'\n    })\n\n    if (!stripped.startsWith(wrapperPrefix) || !stripped.endsWith(wrapperSuffix)) {\n      return { ok: false, error: { kind: 'script', message: 'The script could not be parsed.' } }\n    }\n\n    return {\n      ok: true,\n      code: stripped.slice(wrapperPrefix.length, stripped.length - wrapperSuffix.length)\n    }\n  } catch (error) {\n    return { ok: false, error: { kind: 'script', message: typeStripMessage(error) } }\n  }\n}\n\nconst piTool = (tool: CodeModeExecutorTool): CodemodeTool => {\n  const converted: CodemodeTool = {\n    name: tool.name,\n    execute: (args, context) => tool.execute(args, context)\n  }\n\n  if (tool.description !== undefined) converted.description = tool.description\n\n  if (tool.inputSchema !== undefined) converted.inputSchema = tool.inputSchema\n\n  if (tool.outputSchema !== undefined) converted.outputSchema = tool.outputSchema\n\n  return converted\n}\n\nconst piGlobal = (global: CodeModeExecutorGlobal): CodemodeTool => {\n  const converted = piTool(global)\n\n  if (global.spread !== undefined) converted.spread = global.spread\n\n  if (global.signature !== undefined) converted.signature = global.signature\n\n  return converted\n}\n\nconst failure = (error: CodeModeError): CodeModeExecutionResult => ({\n  ok: false,\n  error,\n  output: []\n})\n\nconst StoreWrites = Schema.Struct({\n  set: Schema.Record(Schema.String, Schema.Json),\n  delete: Schema.Array(Schema.String)\n})\n\nconst decodeStoreWrites = Schema.decodeUnknownOption(StoreWrites)\n\ntype MutableCodeModeError = {\n  kind: CodeModeError['kind']\n  message: string\n  stack?: string\n}\n\ntype MutableExecutionResult = {\n  ok: boolean\n  value?: unknown\n  error?: CodeModeError\n  output: CodeModeExecutionResult['output']\n  storeWrites?: CodeModeStoreWrites\n}\n\nconst fromPiResult = (result: CodemodeResult, scriptLines: number): CodeModeExecutionResult => {\n  if (result.ok) {\n    const storeWrites = decodeStoreWrites(result.storeWrites)\n\n    if (Option.isNone(storeWrites)) {\n      return failure({\n        kind: 'sandbox',\n        message: 'The script reported store writes that are not JSON.'\n      })\n    }\n\n    const converted: MutableExecutionResult = {\n      ok: true,\n      output: result.output,\n      storeWrites: storeWrites.value\n    }\n\n    if (result.value !== undefined) converted.value = result.value\n\n    return converted\n  }\n\n  const { kind, name, message, stack } = result.error\n  const named = name !== undefined && name.length > 0 && !message.startsWith(name)\n\n  const error: MutableCodeModeError = {\n    kind,\n    message: named ? `${name}: ${message}` : message\n  }\n\n  if (stack !== undefined) error.stack = withoutWrapperFrames(stack, scriptLines)\n\n  return { ok: false, error, output: result.output }\n}\n\nconst describeError = (error: unknown) => (error instanceof Error ? error.message : String(error))\n\n/**\n * A `CodeModeExecutor` on `@earendil-works/pi-codemode`: every execution gets a fresh QuickJS VM\n * (WebAssembly) in a fresh worker thread, closed when the execution ends. Applies the timeout,\n * heap cap, abort signal, and store, strips TypeScript annotations first, rejects tool arguments\n * that JSON would silently change inside the script (see `CodeModeExecutorTool`), and caps concurrent\n * executions per executor; create one executor per process (module scope) so the cap is\n * per process.\n *\n * Node only. The worker inherits a copy of `process.env` (scripts cannot read it: the VM has no\n * `process`). Under Next.js, list `@yolk-sdk/codemode`, `@earendil-works/pi-codemode`, and\n * `quickjs-wasi` in `serverExternalPackages` so the worker file and wasm stay on disk.\n */\nexport const makePiCodeModeExecutor = (\n  options: PiCodeModeExecutorOptions = {}\n): CodeModeExecutor => {\n  const slots = makeExecutionSlots(\n    Math.max(1, Math.floor(options.maxConcurrentExecutions ?? defaultMaxConcurrentExecutions))\n  )\n\n  const run = async (code: string, execution: CodeModeExecuteOptions, queuedAt: number) => {\n    const remaining = () => execution.timeoutMs - (Date.now() - queuedAt)\n    const stripped = stripTypes(code)\n\n    if (!stripped.ok) return failure(stripped.error)\n\n    const timeoutMs = remaining()\n\n    if (timeoutMs <= 0) {\n      return failure({\n        kind: 'timeout',\n        message: `Execution timed out after ${execution.timeoutMs} ms`\n      })\n    }\n\n    const sandboxOptions: CodemodeSandboxOptions = {\n      tools: execution.tools.map(piTool),\n      globals: execution.globals.map(piGlobal),\n      timeoutMs,\n      memoryLimitBytes: execution.memoryLimitBytes\n    }\n\n    if (options.wasm !== undefined) sandboxOptions.wasm = options.wasm\n\n    if (options.workerUrl !== undefined) sandboxOptions.workerUrl = options.workerUrl\n\n    let sandbox: CodemodeSandbox\n\n    try {\n      sandbox = new CodemodeSandbox(sandboxOptions)\n    } catch (error) {\n      return failure({\n        kind: 'sandbox',\n        message: `Could not create the sandbox: ${describeError(error)}`\n      })\n    }\n\n    try {\n      return fromPiResult(\n        await sandbox.execute(`${guardPrefix}${stripped.code}${guardSuffix(execution.tools)}`, {\n          signal: execution.signal,\n          store: execution.store,\n          timeoutMs\n        }),\n        scriptLineCount(stripped.code)\n      )\n    } finally {\n      await sandbox.close()\n    }\n  }\n\n  return {\n    execute: async (code, execution) => {\n      const queuedAt = Date.now()\n      const slot = await slots.acquire(execution.signal, execution.timeoutMs)\n\n      if (slot === 'aborted') return failure({ kind: 'aborted', message: 'Execution aborted' })\n\n      if (slot === 'timeout') {\n        return failure({\n          kind: 'timeout',\n          message: `Execution timed out after ${execution.timeoutMs} ms while waiting for a free execution slot`\n        })\n      }\n\n      try {\n        return await run(code, execution, queuedAt)\n      } finally {\n        slots.release()\n      }\n    }\n  }\n}\n"],"mappings":";;;;;;;AAsBA,MAAa,iCAAiC;;AAsB9C,MAAM,sBAAsB,QAAgB;CAC1C,IAAI,SAAS;CACb,MAAM,UAAyB,CAAC;CAEhC,MAAM,WAAW,QAAqB,cAA4C;EAChF,IAAI,OAAO,SAAS,OAAO,QAAQ,QAAQ,SAAS;EAEpD,IAAI,SAAS,KAAK;GAChB;GAEA,OAAO,QAAQ,QAAQ,UAAU;EACnC;EAEA,OAAO,IAAI,SAAQ,YAAW;GAC5B,IAAI;GAEJ,MAAM,UAAiB,YAAW;IAChC,MAAM,QAAQ,QAAQ,QAAQ,MAAM;IAEpC,IAAI,UAAU,IAAI,QAAQ,OAAO,OAAO,CAAC;IAEzC,IAAI,UAAU,KAAA,GAAW,aAAa,KAAK;IAC3C,OAAO,oBAAoB,SAAS,OAAO;IAC3C,QAAQ,OAAO;GACjB;GAEA,MAAM,gBAAgB,OAAO,SAAS;GAEtC,QAAQ,KAAK,MAAM;GACnB,OAAO,iBAAiB,SAAS,SAAS,EAAE,MAAM,KAAK,CAAC;GAExD,IAAI,OAAO,SAAS,SAAS,GAC3B,QAAQ,iBAAiB,OAAO,SAAS,GAAG,KAAK,IAAI,GAAG,SAAS,CAAC;EAEtE,CAAC;CACH;CAEA,MAAM,gBAAgB;EACpB,MAAM,OAAO,QAAQ;EAErB,IAAI,SAAS,KAAA,GACX;OAGA,KAAK,UAAU;CAEnB;CAEA,OAAO;EAAE;EAAS;CAAQ;AAC5B;AAEA,MAAM,gBAAgB;AAEtB,MAAM,gBAAgB;;;;;;;;;;;;;;;;;;;AA0BtB,MAAM,mBAAmB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAkJzB,MAAM,cAAc;;AAGpB,MAAM,cAAc,UAClB,KAAK,UAAU,KAAK,EAAE,QAAQ,oBAAmB,SAC/C,SAAS,WAAW,YAAY,SAClC;AAEF,MAAM,eAAe,UAA+C;CAElE,MAAM,SAAS,mBADD,MAAM,KAAI,SAAQ,KAAK,IACC,CAAC;CAQvC,OAAO,QAAQ,iBAAiB,UAAU,WAL5B,MAAM,KAAK,MAAM,UAAU,CACvC,KAAK,MACL,KAAK,aAAa,OAAO,UAAU,SAAS,KAAK,UAAU,KAAK,IAAI,EAAE,EACxE,CAEyD,CAAC,EAAE;AAC9D;AAEA,MAAM,kBAAkB;;AAGxB,MAAM,mBAAmB,UAAkB,KAAK,MAAM,eAAe,GAAG,UAAU,KAAK;AAEvF,MAAM,cAAc;;AAGpB,MAAM,wBAAwB,OAAe,gBAC3C,MACG,MAAM,IAAI,EACV,QAAO,SAAQ;CACd,MAAM,QAAQ,YAAY,KAAK,IAAI;CAEnC,OAAO,UAAU,QAAQ,OAAO,MAAM,EAAE,KAAK;AAC/C,CAAC,EACA,KAAK,IAAI;AAEd,MAAM,gBAAgB,OAAO,OAAO,EAAE,MAAM,OAAO,OAAO,CAAC;AAE3D,MAAM,aAAa,UACjB,OAAO,eAAe,OAAO,IAAI,OAAO,oBAAoB,aAAa,EAAE,KAAK,IAAG,MAAK,EAAE,IAAI,CAAC;AAEjG,MAAM,kBAAkB,UAAiB;CACvC,MAAM,QAAQ,sCAAsC,KAAK,MAAM,SAAS,EAAE;CAE1E,IAAI,UAAU,MAAM,OAAO;CAE3B,MAAM,OAAO,OAAO,MAAM,EAAE,IAAI;CAEhC,OAAO,QAAQ,IAAI,UAAU,KAAK,KAAK,MAAM,MAAM,GAAG,IAAI,MAAM,MAAM,OAAO;AAC/E;AAEA,MAAM,oBAAoB,UAAmB;CAC3C,MAAM,UAAU,iBAAiB,QAAQ,MAAM,UAAU,OAAO,KAAK;CAErE,IAAI,UAAU,KAAK,MAAM,qCACvB,OAAO,GAAG,QAAQ;CAKpB,OAAO,mCAAmC,UAFzB,iBAAiB,QAAQ,eAAe,KAAK,IAAI;AAGpE;;;;;;AAWA,MAAM,cAAc,SAA2B;CAC7C,IAAI,CAAC,UAAU,WAAW,WAAW,oBAAoB,GAAG,OAAO;EAAE,IAAI;EAAM;CAAK;CAEpF,IAAI;EACF,MAAM,WAAW,WAAW,qBAAqB,GAAG,gBAAgB,OAAO,iBAAiB,EAC1F,MAAM,QACR,CAAC;EAED,IAAI,CAAC,SAAS,WAAW,aAAa,KAAK,CAAC,SAAS,SAAS,aAAa,GACzE,OAAO;GAAE,IAAI;GAAO,OAAO;IAAE,MAAM;IAAU,SAAS;GAAkC;EAAE;EAG5F,OAAO;GACL,IAAI;GACJ,MAAM,SAAS,MAAM,IAAsB,SAAS,SAAS,CAAoB;EACnF;CACF,SAAS,OAAO;EACd,OAAO;GAAE,IAAI;GAAO,OAAO;IAAE,MAAM;IAAU,SAAS,iBAAiB,KAAK;GAAE;EAAE;CAClF;AACF;AAEA,MAAM,UAAU,SAA6C;CAC3D,MAAM,YAA0B;EAC9B,MAAM,KAAK;EACX,UAAU,MAAM,YAAY,KAAK,QAAQ,MAAM,OAAO;CACxD;CAEA,IAAI,KAAK,gBAAgB,KAAA,GAAW,UAAU,cAAc,KAAK;CAEjE,IAAI,KAAK,gBAAgB,KAAA,GAAW,UAAU,cAAc,KAAK;CAEjE,IAAI,KAAK,iBAAiB,KAAA,GAAW,UAAU,eAAe,KAAK;CAEnE,OAAO;AACT;AAEA,MAAM,YAAY,WAAiD;CACjE,MAAM,YAAY,OAAO,MAAM;CAE/B,IAAI,OAAO,WAAW,KAAA,GAAW,UAAU,SAAS,OAAO;CAE3D,IAAI,OAAO,cAAc,KAAA,GAAW,UAAU,YAAY,OAAO;CAEjE,OAAO;AACT;AAEA,MAAM,WAAW,WAAmD;CAClE,IAAI;CACJ;CACA,QAAQ,CAAC;AACX;AAEA,MAAM,cAAc,OAAO,OAAO;CAChC,KAAK,OAAO,OAAO,OAAO,QAAQ,OAAO,IAAI;CAC7C,QAAQ,OAAO,MAAM,OAAO,MAAM;AACpC,CAAC;AAED,MAAM,oBAAoB,OAAO,oBAAoB,WAAW;AAgBhE,MAAM,gBAAgB,QAAwB,gBAAiD;CAC7F,IAAI,OAAO,IAAI;EACb,MAAM,cAAc,kBAAkB,OAAO,WAAW;EAExD,IAAI,OAAO,OAAO,WAAW,GAC3B,OAAO,QAAQ;GACb,MAAM;GACN,SAAS;EACX,CAAC;EAGH,MAAM,YAAoC;GACxC,IAAI;GACJ,QAAQ,OAAO;GACf,aAAa,YAAY;EAC3B;EAEA,IAAI,OAAO,UAAU,KAAA,GAAW,UAAU,QAAQ,OAAO;EAEzD,OAAO;CACT;CAEA,MAAM,EAAE,MAAM,MAAM,SAAS,UAAU,OAAO;CAG9C,MAAM,QAA8B;EAClC;EACA,SAJY,SAAS,KAAA,KAAa,KAAK,SAAS,KAAK,CAAC,QAAQ,WAAW,IAAI,IAI5D,GAAG,KAAK,IAAI,YAAY;CAC3C;CAEA,IAAI,UAAU,KAAA,GAAW,MAAM,QAAQ,qBAAqB,OAAO,WAAW;CAE9E,OAAO;EAAE,IAAI;EAAO;EAAO,QAAQ,OAAO;CAAO;AACnD;AAEA,MAAM,iBAAiB,UAAoB,iBAAiB,QAAQ,MAAM,UAAU,OAAO,KAAK;;;;;;;;;;;;;AAchG,MAAa,0BACX,UAAqC,CAAC,MACjB;CACrB,MAAM,QAAQ,mBACZ,KAAK,IAAI,GAAG,KAAK,MAAM,QAAQ,2BAAA,CAAyD,CAAC,CAC3F;CAEA,MAAM,MAAM,OAAO,MAAc,WAAmC,aAAqB;EACvF,MAAM,kBAAkB,UAAU,aAAa,KAAK,IAAI,IAAI;EAC5D,MAAM,WAAW,WAAW,IAAI;EAEhC,IAAI,CAAC,SAAS,IAAI,OAAO,QAAQ,SAAS,KAAK;EAE/C,MAAM,YAAY,UAAU;EAE5B,IAAI,aAAa,GACf,OAAO,QAAQ;GACb,MAAM;GACN,SAAS,6BAA6B,UAAU,UAAU;EAC5D,CAAC;EAGH,MAAM,iBAAyC;GAC7C,OAAO,UAAU,MAAM,IAAI,MAAM;GACjC,SAAS,UAAU,QAAQ,IAAI,QAAQ;GACvC;GACA,kBAAkB,UAAU;EAC9B;EAEA,IAAI,QAAQ,SAAS,KAAA,GAAW,eAAe,OAAO,QAAQ;EAE9D,IAAI,QAAQ,cAAc,KAAA,GAAW,eAAe,YAAY,QAAQ;EAExE,IAAI;EAEJ,IAAI;GACF,UAAU,IAAI,gBAAgB,cAAc;EAC9C,SAAS,OAAO;GACd,OAAO,QAAQ;IACb,MAAM;IACN,SAAS,iCAAiC,cAAc,KAAK;GAC/D,CAAC;EACH;EAEA,IAAI;GACF,OAAO,aACL,MAAM,QAAQ,QAAQ,GAAG,cAAc,SAAS,OAAO,YAAY,UAAU,KAAK,KAAK;IACrF,QAAQ,UAAU;IAClB,OAAO,UAAU;IACjB;GACF,CAAC,GACD,gBAAgB,SAAS,IAAI,CAC/B;EACF,UAAU;GACR,MAAM,QAAQ,MAAM;EACtB;CACF;CAEA,OAAO,EACL,SAAS,OAAO,MAAM,cAAc;EAClC,MAAM,WAAW,KAAK,IAAI;EAC1B,MAAM,OAAO,MAAM,MAAM,QAAQ,UAAU,QAAQ,UAAU,SAAS;EAEtE,IAAI,SAAS,WAAW,OAAO,QAAQ;GAAE,MAAM;GAAW,SAAS;EAAoB,CAAC;EAExF,IAAI,SAAS,WACX,OAAO,QAAQ;GACb,MAAM;GACN,SAAS,6BAA6B,UAAU,UAAU;EAC5D,CAAC;EAGH,IAAI;GACF,OAAO,MAAM,IAAI,MAAM,WAAW,QAAQ;EAC5C,UAAU;GACR,MAAM,QAAQ;EAChB;CACF,EACF;AACF"}

package/dist/output.d.mts

@@ -0,0 +1,42 @@
+import { CodeModeExecutionResult, CodeModeOutputItem } from "./executor.mjs";
+import { Content, NestedToolCallStatus } from "@yolk-sdk/agent/protocol";
+
+//#region src/output.d.ts
+/** Text or image piece of the model-visible result, in order. */
+type CodeModeResultSegment = CodeModeOutputItem;
+/**
+ * Keeps at most about `maxChars` characters of text: the head and the tail of the segments, with an
+ * omission marker in between. Images inside the omitted middle are dropped and counted.
+ */
+declare const boundCodeModeSegments: (segments: ReadonlyArray<CodeModeResultSegment>, maxChars: number) => ReadonlyArray<CodeModeResultSegment>;
+/** Agent `Content`: a plain string without images, ordered text and image parts otherwise. */
+declare const codeModeSegmentsContent: (segments: ReadonlyArray<CodeModeResultSegment>) => Content;
+type CodeModeCallSummary = {
+  readonly name: string;
+  readonly status: NestedToolCallStatus;
+};
+/** `name: 2 ok, 1 error; other: 1 cancelled`, by first appearance. */
+declare const summarizeCodeModeCalls: (calls: ReadonlyArray<CodeModeCallSummary>) => string;
+/** Default cap of images kept in one result. */
+declare const defaultCodeModeMaxImages = 8;
+/** Default cap of base64 image data kept in one result, in characters (4 MiB). */
+declare const defaultCodeModeMaxImageBytes: number;
+/**
+ * Model-visible segments of one execution: a `Script completed` / `Script failed` header with the
+ * wall time, the output in order, the JSON return value (omitted when undefined), and for failures
+ * the error and the tool calls already made. Images are kept in order while they fit `maxImages`
+ * (default 8) and `maxImageBytes` of base64 in total (default 4 MiB); an image that would exceed
+ * either is dropped and counted in an omission note after the output. The result is then bounded
+ * by `maxChars` with a head-and-tail cut, which also drops images in the omitted middle.
+ */
+declare const codeModeResultSegments: (input: {
+  readonly result: CodeModeExecutionResult;
+  readonly wallTimeMs: number;
+  readonly calls: ReadonlyArray<CodeModeCallSummary>;
+  readonly maxChars: number;
+  readonly maxImages?: number;
+  readonly maxImageBytes?: number;
+}) => ReadonlyArray<CodeModeResultSegment>;
+//#endregion
+export { CodeModeCallSummary, CodeModeResultSegment, boundCodeModeSegments, codeModeResultSegments, codeModeSegmentsContent, defaultCodeModeMaxImageBytes, defaultCodeModeMaxImages, summarizeCodeModeCalls };
+//# sourceMappingURL=output.d.mts.map

package/dist/output.d.mts.map

@@ -0,0 +1 @@
+{"version":3,"file":"output.d.mts","names":[],"sources":["../src/output.ts"],"mappings":";;;;;KAUY,qBAAA,GAAwB,kBAAkB;AAAtD;;;;AAAA,cA8Ba,qBAAA,GACX,QAAA,EAAU,aAAA,CAAc,qBAAA,GACxB,QAAA,aACC,aAAA,CAAc,qBAAA;AAHjB;AAAA,cA6Fa,uBAAA,GACX,QAAA,EAAU,aAAA,CAAc,qBAAA,MACvB,OAAA;AAAA,KAiBS,mBAAA;EAAA,SACD,IAAA;EAAA,SACA,MAAA,EAAQ,oBAAoB;AAAA;;cAM1B,sBAAA,GAA0B,KAAA,EAAO,aAAa,CAAC,mBAAA;;cAwC/C,wBAAA;;cAGA,4BAAA;;;;;AAhKyB;AA0FtC;;;cAmFa,sBAAA,GAA0B,KAAA;EAAA,SAC5B,MAAA,EAAQ,uBAAA;EAAA,SACR,UAAA;EAAA,SACA,KAAA,EAAO,aAAA,CAAc,mBAAA;EAAA,SACrB,QAAA;EAAA,SACA,SAAA;EAAA,SACA,aAAA;AAAA,MACP,aAAA,CAAc,qBAAA"}