pi-mono/packages/codemode/CHANGELOG.md
Mario Zechner 7b597d1481 feat(durable): durable code mode (@earendil-works/pi-durable/codemode)
A codemode tool whose scripts call the conversation's tools as nested calls and
survive a restart. The script runs deterministically (pi-codemode start()); each
result is journaled before it is delivered. A rerun starts the script again from
the stored start data, delivers the journaled results in order (nested calls
reattach by key c<id>), checks every recorded call count, holds calls the
journal lacks until replay ends and checks them against earlier attempts' keys,
then continues live. A call launches only once the count of the drain that made
it is committed, so a rerun can prove which calls are new. Divergence, a changed
module version or sandbox fingerprint, and a passed deadline end the call with a
stored error; a decided outcome is returned without a VM. store()/load() keep
values per conversation, rewindable and forked as of the fork's entry.

pi-codemode: CodemodeRun.finished, set when the outcome is decided.
2026-10-11 21:31:48 +00:00

4.6 KiB

Changelog

[Unreleased]

Added

  • Added RemoteCodemodeSandbox, which runs each script's VM in another isolate while tools run in the caller. CodemodeSandboxDurableObject from the new @earendil-works/pi-codemode/cloudflare entry is its remote end, deployed as its own Cloudflare Worker. examples/cloudflare shows the setup
  • Added InlineCodemodeSandbox, which runs the VM on the calling thread for runtimes without worker threads. Its interruptBudget limits scripts that compute without awaiting a tool
  • Added the @earendil-works/pi-codemode/portable entry, which has no Node imports, and CodemodeSandboxBase, the API all three sandboxes share
  • Added sandbox.start(), a deterministic run whose calls the host answers itself (onCall, run.deliver()), so a host can replay a script after a restart: a virtual clock from startedAt, randomness from seed, UTC, no WeakRef/FinalizationRegistry, results applied in the order the host numbers them, the VM's fingerprint (onStarted), the calls issued after each result (onIdle), and whether the run has its outcome (run.finished). Works with every sandbox; execute() is unchanged

Changed

  • schemaToType() and the declarations built on it show property constraints the TypeScript type cannot express as tags on the property's comment line, such as // @integer @minimum 0 @maximum 30000 @default 0. Covered keywords: integer, numeric bounds, multipleOf, string length, pattern, format, array length, uniqueItems, non-null default, and deprecated; constraints of nullable anyOf/oneOf fields are read from the non-null branch, and draft-04 boolean exclusiveMinimum/exclusiveMaximum are shown as exclusive bounds. Property descriptions now also split on U+2028/U+2029. A type over maxChars is rendered again without tags before it becomes unknown (#10707)
  • The VM now polls for interrupts while it drains promise jobs, so a script such as while (true) await null is stopped at the same points as a synchronous loop

Fixed

  • Fixed CodemodeSandbox failing with a broken bridge error when the host runs under node --watch on Node 24 or 26, which posts watch:import/watch:require messages on the worker channel (#10725)

[1.1.0] - 2026-10-07

Added

  • Added console: true to text output items produced by console.*, so hosts can tell them apart from text() output

[1.0.4] - 2026-10-05

Changed

  • Built-ins are frozen and built-in globals are read-only before the script runs, so patches such as Array.prototype.toJSON = ... have no effect. Instances can still override constructor, name, message, toString, toLocaleString, valueOf, toJSON, and Object.prototype members (#10444)

Fixed

  • Fixed a script that patched built-ins crashing the host process and leaving execute() unsettled. Malformed payloads from the worker now fail the execution with a sandbox error (#10444)

[1.0.3] - 2026-10-05

[1.0.2] - 2026-10-04

[1.0.1] - 2026-10-03

Fixed

  • Fixed scripts that print in a loop growing the host's memory until it crashes: output is limited to MAX_OUTPUT_CHARS (16 Mi) characters and MAX_OUTPUT_ITEMS (100000) items, and a script past either limit fails with a RangeError (#10283)

[1.0.0] - 2026-10-01

Added

  • Added renderToolOutputType(), the type a tool call resolves to.

Changed

  • Reading a member of tools or of a global namespace that does not exist now throws an error naming the close matches, instead of returning undefined. Use "name" in tools to check for a tool. store() size errors explain what the store is for.

[0.99.2] - 2026-09-30

Changed

  • Allowed CodemodeSandbox.workerUrl to be a string, as required for embedded worker entrypoints in Bun compiled executables (#10204).

Fixed

  • Fixed image() accepting malformed base64 data and unsupported image types. It now throws a TypeError unless the data is valid base64 of a PNG, JPEG, GIF, or WebP image, derives the MIME type from the image signature instead of the declared type, and strips line breaks from wrapped base64 (#10215).

[0.99.1] - 2026-09-29

[0.99.0] - 2026-09-29

Added

  • Initial spike: CodemodeSandbox runs model-written JavaScript in a worker thread and exposes injected tools as tools.<name>(args) async functions.