melchizedek-agents 1.6.0 → 1.8.0

package/dist/lib/tools/runCodeTool.js

@@ -0,0 +1,59 @@
+/**
+ * lib/tools/runCodeTool.ts — `run_code`: an agent runs JavaScript in the
+ * engine's sandbox and rests its answer on what the code returned
+ * (ADR 0137 items 2 to 4).
+ *
+ * WHY a registry tool: any agent on any provider can list it
+ * (`tools: [run_code]`), since the model only writes text, and it gets what
+ * every registry tool gets: `require_approval`, MCP exposure (ADR 0125), the
+ * result bound and `retries.tool_errors`. `code_execution: gemini` stays,
+ * for Python in Gemini's own sandbox on Gemini models (ADR 0033).
+ *
+ * THE CONTRACT: `{ code, input? }`. The code is a JavaScript module whose
+ * default export is called with `input`; the tool returns
+ * `{ result, logs, error }`: the export's JSON-serializable return, the
+ * `console.log` output, and what stopped it, if anything. Each is bounded at
+ * MAX_RESULT_CHARS. The code reaches nothing but `input` and `console`: no
+ * network, no host, no keys, no clock, no randomness (lib/sandbox/).
+ *
+ * THE SWITCH: nothing runs unless the operator set MELCHIZEDEK_CODE_SANDBOX=on;
+ * a syndicate listing run_code without it is refused at load (refuseOnNative),
+ * and a call that reaches here anyway answers with the reason.
+ *
+ * ATTACH: an agent's `run_code: { attach: true }` puts each run's code and
+ * result on the reply as a `code_run` data part (lib/runtime/syndicateTurn.ts
+ * collects them, the A2A executor publishes them). Off by default.
+ */
+import { z } from 'zod';
+import { codeSandboxEnabled, codeSandboxOffMessage, runInSandbox } from '../sandbox/sandbox.js';
+import { MAX_RESULT_CHARS } from './tool.js';
+import { defineTool } from './toolContract.js';
+/** The registry name. */
+export const RUN_CODE = 'run_code';
+/** The largest program a call may send. */
+export const MAX_CODE_CHARS = 64_000;
+export const runCodeTool = defineTool({
+    name: RUN_CODE,
+    description: 'Run JavaScript and get back what it returns, so an answer can rest on a computation instead of mental arithmetic: totals, conversions, statistics, dates from given timestamps, parsing, sorting, checking a formula. '
+        + '`code` is an ES module whose default export is called with `input` and returns a JSON-serializable value, e.g. `export default ({ xs }) => xs.reduce((a, b) => a + b, 0)`. '
+        + 'console.log output comes back in `logs`. The code has no network, no files, no clock and no randomness (Date.now, new Date() and Math.random throw); pass any data it needs in `input`. '
+        + 'It returns { result, logs, error }; when error is set, fix the code and run it again.',
+    schema: z.object({
+        code: z.string().min(1).max(MAX_CODE_CHARS).describe('An ES module: `export default (input) => value`. May be async.'),
+        input: z.unknown().optional().describe('JSON the default export is called with.'),
+    }),
+    async execute({ code, input }, ctx) {
+        if (!codeSandboxEnabled())
+            return { result: null, logs: '', error: codeSandboxOffMessage(RUN_CODE) };
+        const run = await runInSandbox({
+            source: code,
+            value: input ?? null,
+            ...(ctx.signal ? { signal: ctx.signal } : {}),
+            limits: { maxLogChars: MAX_RESULT_CHARS, maxResultChars: MAX_RESULT_CHARS },
+        });
+        const logs = run.logsTruncated ? `${run.logs}\n[logs truncated at ${MAX_RESULT_CHARS.toLocaleString('en-US')} characters]` : run.logs;
+        if (!run.ok)
+            return { result: null, logs, error: `${run.error?.code ?? 'CODE_ERROR'}: ${run.error?.message ?? 'the code did not finish'}` };
+        return { result: run.result ?? null, logs, error: null };
+    },
+});

package/dist/scripts/a2a_server.js

@@ -97,7 +97,6 @@ var __rewriteRelativeImportExtension = (this && this.__rewriteRelativeImportExte
  */
 import { randomBytes } from 'node:crypto';
 import { readdirSync, realpathSync, writeFileSync } from 'node:fs';
-import path from 'node:path';
 import { pathToFileURL } from 'node:url';
 import { createA2AApp } from '../lib/a2a/app.js';
 import { callerTokens, firstOf, hashCallerToken, jwtIdentity, parseCallers, sharedSecret, trustedHeader, } from '../lib/a2a/identity.js';
@@ -116,6 +115,7 @@ import { callbackIdentity, callbackIdentityProblem, oauthServerSetup } from '../
 import { postgresCredentialRows } from '../lib/storage/postgres/credentialStore.js';
 import { setOAuthHosts } from '../lib/tools/oauthHosts.js';
 import { setCredentialHosts } from '../lib/tools/credentialHosts.js';
+import { resolveAgentsDir } from '../lib/project.js';
 // Re-exported for existing importers (tests/failNarration.test.ts).
 export { describeTurnError } from '../lib/a2a/executor.js';
 /** Minimum bearer-secret length below which the server warns. */
@@ -181,7 +181,7 @@ export function servedFileSyndicates(syndicateName, servedAgents, registryAgents
             add(id);
     }
     else {
-        const agentsDir = path.resolve(process.env.MELCHIZEDEK_AGENTS_DIR ?? path.join(process.cwd(), 'config', 'agents'));
+        const agentsDir = resolveAgentsDir();
         let names = [];
         try {
             names = readdirSync(agentsDir);
@@ -633,7 +633,7 @@ if (invokedAsMain) {
         if (error?.code === 'ENOENT') {
             console.error(`[A2A] Syndicate not found: ${arg || 'syndicate.yaml'}.\n`
                 + '      Pass your syndicate: melchizedek-serve <name>.yaml\n'
-                + '      (agents directory: MELCHIZEDEK_AGENTS_DIR, or <cwd>/config/agents)');
+                + '      (agents directory: MELCHIZEDEK_AGENTS_DIR, else the agents folder in melchizedek.json, else <cwd>/config/agents)');
             process.exit(1);
         }
         console.error(error);

package/dist/scripts/doctor.js

@@ -33,6 +33,7 @@ import { loadEnv } from '../lib/loadEnv.js';
 import { checkProblems, renderDoctor, runDoctor } from '../lib/doctor.js';
 import { renderCapabilityMatrix } from '../lib/models/capabilities.js';
 import { assignMemoryNamespace, LEGACY_MEMORY_APP_NAME } from '../lib/memory/namespace.js';
+import { resolveAgentsDir } from '../lib/project.js';
 loadEnv();
 const args = process.argv.slice(2);
 const json = args.includes('--json');
@@ -52,7 +53,7 @@ function packageScripts() {
 if (fixAt !== -1) {
     // ADR 0020: give each named long-term syndicate its own memory namespace.
     // Only the files named are touched; with none named, list the candidates.
-    const agentsDir = path.resolve(process.env.MELCHIZEDEK_AGENTS_DIR ?? path.join(process.cwd(), 'config', 'agents'));
+    const agentsDir = resolveAgentsDir();
     const files = args.slice(fixAt + 1).filter((a) => !a.startsWith('--'));
     if (files.length === 0) {
         const pending = runDoctor({ agentsDir }).syndicates.filter((s) => s.memory && !s.memory.declared && !s.file.includes('/'));

package/dist/scripts/mcp_server.js

@@ -38,6 +38,7 @@
 import { readdirSync, realpathSync } from 'node:fs';
 import path from 'node:path';
 import { pathToFileURL } from 'node:url';
+import { resolveAgentsDir } from '../lib/project.js';
 /** The bin's flags. Throws, naming the flag, on one it does not know. */
 export function parseMcpArgs(argv) {
     const out = { syndicates: [], http: false, help: false };
@@ -160,7 +161,7 @@ export async function startMcpServer(argv = process.argv.slice(2)) {
     const bindings = () => ({
         current_date: new Date().toLocaleDateString('en-US', { year: 'numeric', month: 'long', day: 'numeric' }),
     });
-    const agentsDir = path.resolve(process.env.MELCHIZEDEK_AGENTS_DIR ?? path.join(process.cwd(), 'config', 'agents'));
+    const agentsDir = resolveAgentsDir();
     let files = args.syndicates.map((id) => (id.endsWith('.yaml') || id.endsWith('.yml') ? id : `${id}.yaml`));
     const named = files.length > 0;
     if (!named) {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "melchizedek-agents",
-  "version": "1.6.0",
+  "version": "1.8.0",
   "description": "A multi-model, multi-agent orchestration framework — YAML-defined syndicates on the engine's own agent loop, Supabase or Postgres session persistence, pgvector long-term memory. Companion repo to the lyceumagents.com curriculum.",
   "type": "module",
   "license": "MIT",
@@ -21,6 +21,8 @@
     "./loadSyndicate": "./dist/lib/loadSyndicate.js",
     "./loadEnv": "./dist/lib/loadEnv.js",
     "./dispatch": "./dist/lib/dispatch.js",
+    "./script": "./dist/lib/script/run.js",
+    "./sandbox": "./dist/lib/sandbox/sandbox.js",
     "./compile": "./dist/lib/compile.js",
     "./runtime": "./dist/lib/runtime/syndicateTurn.js",
     "./runtime/turnControl": "./dist/lib/runtime/turnControl.js",
@@ -31,6 +33,7 @@
     "./a2a/limits": "./dist/lib/a2a/redisLimits.js",
     "./mcp": "./dist/lib/mcp/server.js",
     "./registry": "./dist/lib/registry.js",
+    "./project": "./dist/lib/project.js",
     "./server": "./dist/scripts/a2a_server.js",
     "./guards": "./dist/lib/guards/index.js",
     "./storage/postgres": "./dist/lib/storage/postgres/index.js",
@@ -148,6 +151,7 @@
     "@a2a-js/sdk": "^1.3.0",
     "@anthropic-ai/sdk": "^0.131.0",
     "@google/genai": "2.27.0",
+    "@jitl/quickjs-wasmfile-release-sync": "0.32.0",
     "@modelcontextprotocol/sdk": "^1.32.1",
     "@opentelemetry/api": "^1.9.1",
     "@opentelemetry/core": "^2.8.0",
@@ -161,6 +165,7 @@
     "jose": "^6.2.12",
     "openai": "^7.28.0",
     "pg": "^8.23.1",
+    "quickjs-emscripten-core": "0.32.0",
     "yaml": "^2.9.0",
     "zod": "4.6.5"
   },