pi-mono/packages/codemode/CHANGELOG.md

Changelog

[Unreleased]

Added

• Added RemoteCodemodeSandbox, which runs each script's VM in another isolate while tools run in the caller. CodemodeSandboxDurableObject from the new @earendil-works/pi-codemode/cloudflare entry is its remote end, deployed as its own Cloudflare Worker. examples/cloudflare shows the setup
• Added InlineCodemodeSandbox, which runs the VM on the calling thread for runtimes without worker threads. Its interruptBudget limits scripts that compute without awaiting a tool
• Added the @earendil-works/pi-codemode/portable entry, which has no Node imports, and CodemodeSandboxBase, the API all three sandboxes share
• Added sandbox.start(), a deterministic run whose calls the host answers itself (onCall, run.deliver()), so a host can replay a script after a restart: a virtual clock from startedAt, randomness from seed, UTC, no WeakRef/FinalizationRegistry, results applied in the order the host numbers them, the VM's fingerprint (onStarted), and the calls issued after each result (onIdle). Works with every sandbox; execute() is unchanged

Changed

• schemaToType() and the declarations built on it show property constraints the TypeScript type cannot express as tags on the property's comment line, such as // @integer @minimum 0 @maximum 30000 @default 0. Covered keywords: integer, numeric bounds, multipleOf, string length, pattern, format, array length, uniqueItems, non-null default, and deprecated; constraints of nullable anyOf/oneOf fields are read from the non-null branch, and draft-04 boolean exclusiveMinimum/exclusiveMaximum are shown as exclusive bounds. Property descriptions now also split on U+2028/U+2029. A type over maxChars is rendered again without tags before it becomes unknown (#10707)
• The VM now polls for interrupts while it drains promise jobs, so a script such as while (true) await null is stopped at the same points as a synchronous loop

Fixed

• Fixed CodemodeSandbox failing with a broken bridge error when the host runs under node --watch on Node 24 or 26, which posts watch:import/watch:require messages on the worker channel (#10725)

[1.1.0] - 2026-10-07

Added

• Added console: true to text output items produced by console.*, so hosts can tell them apart from text() output

[1.0.4] - 2026-10-05

Changed

• Built-ins are frozen and built-in globals are read-only before the script runs, so patches such as Array.prototype.toJSON = ... have no effect. Instances can still override constructor, name, message, toString, toLocaleString, valueOf, toJSON, and Object.prototype members (#10444)

Fixed

• Fixed a script that patched built-ins crashing the host process and leaving execute() unsettled. Malformed payloads from the worker now fail the execution with a sandbox error (#10444)

[1.0.3] - 2026-10-05

[1.0.2] - 2026-10-04

[1.0.1] - 2026-10-03

Fixed

• Fixed scripts that print in a loop growing the host's memory until it crashes: output is limited to MAX_OUTPUT_CHARS (16 Mi) characters and MAX_OUTPUT_ITEMS (100000) items, and a script past either limit fails with a RangeError (#10283)

[1.0.0] - 2026-10-01

Added

• Added renderToolOutputType(), the type a tool call resolves to.

Changed

• Reading a member of tools or of a global namespace that does not exist now throws an error naming the close matches, instead of returning undefined. Use "name" in tools to check for a tool. store() size errors explain what the store is for.

[0.99.2] - 2026-09-30

Changed

• Allowed CodemodeSandbox.workerUrl to be a string, as required for embedded worker entrypoints in Bun compiled executables (#10204).

Fixed

• Fixed image() accepting malformed base64 data and unsupported image types. It now throws a TypeError unless the data is valid base64 of a PNG, JPEG, GIF, or WebP image, derives the MIME type from the image signature instead of the declared type, and strips line breaks from wrapped base64 (#10215).

[0.99.1] - 2026-09-29

[0.99.0] - 2026-09-29

Added

• Initial spike: CodemodeSandbox runs model-written JavaScript in a worker thread and exposes injected tools as tools.<name>(args) async functions.