- Updated dependencies []:
- @tanstack/ai-code-mode@0.1.22
- Updated dependencies []:
- @tanstack/ai-code-mode@0.1.21
- Updated dependencies []:
- @tanstack/ai-code-mode@0.1.20
-
Refresh package README content and npm metadata for better discoverability. (#626)
-
Updated dependencies [
ebeb22e]:- @tanstack/ai-code-mode@0.1.19
- Updated dependencies []:
- @tanstack/ai-code-mode@0.1.18
- Updated dependencies [
ec1393d]:- @tanstack/ai-code-mode@0.1.17
- Updated dependencies [
2ad137b]:- @tanstack/ai-code-mode@0.1.16
- Updated dependencies []:
- @tanstack/ai-code-mode@0.1.15
- Updated dependencies []:
- @tanstack/ai-code-mode@0.1.14
- Updated dependencies []:
- @tanstack/ai-code-mode@0.1.13
- Updated dependencies []:
- @tanstack/ai-code-mode@0.1.12
- Updated dependencies []:
- @tanstack/ai-code-mode@0.1.11
- Updated dependencies []:
- @tanstack/ai-code-mode@0.1.10
-
Port the Cloudflare worker driver from
unsafe_evaltoworker_loader(Dynamic Workers). (#523)Cloudflare gates the
unsafe_evalbinding for all customer prod accounts; the previous driver was unusable in production and broken inwrangler devon current Wrangler 4.x. The supported replacement is theworker_loaderbinding (GA-beta'd 2026-03-24).Breaking: the worker now requires the
LOADERbinding instead ofUNSAFE_EVAL. Update yourwrangler.toml:# before [[unsafe.bindings]] name = "UNSAFE_EVAL" type = "unsafe_eval" # after [[worker_loaders]] binding = "LOADER"
The HTTP tool-callback protocol and public driver API are unchanged. Workers Paid plan is required for any edge usage (deploy or
wrangler dev --remote); localwrangler devworks on the Free plan.Closes #522.
-
fix(ai-isolate-cloudflare): accumulate
toolResultsacross rounds in the driver round-trip (#524)The Cloudflare isolate driver was wiping
toolResultsbetween rounds.wrap-codeuses sequentialtc_<idx>ids that are re-derived every round when the Worker re-executes user code, so prior-round results must remain in the cache. With the wipe, multi-tool programs (e.g.await A(); await B();) would ping-pong between{tc_0}and{tc_1}and exhaustmaxToolRounds, surfacing asMaxRoundsExceeded.Single-tool code worked because only one cache entry was ever needed in a given round. Existing tests covered single-round flows only and did not exercise real
wrap-codeids end-to-end, so the regression slipped through.Added a
tc_<idx>-shaped regression test that fails on the prior implementation and passes with the merge. -
Updated dependencies []:
- @tanstack/ai-code-mode@0.1.9
-
feat(ai-isolate-cloudflare): support production deployments and close tool-name injection vector (#465)
The Worker now documents production-capable
unsafe_evalusage (previously the code, wrangler.toml, and README all described it as dev-only). Tool names are validated against a strict identifier regex before being interpolated into the generated wrapper code, so a malicious tool name likefoo'); process.exit(1); (function bar() {is rejected at generation time rather than breaking out of the wrapping function. -
Updated dependencies []:
- @tanstack/ai-code-mode@0.1.8
- Updated dependencies []:
- @tanstack/ai-code-mode@0.1.7
- Updated dependencies []:
- @tanstack/ai-code-mode@0.1.6
- Updated dependencies []:
- @tanstack/ai-code-mode@0.1.5
- Updated dependencies []:
- @tanstack/ai-code-mode@0.1.4
- Updated dependencies []:
- @tanstack/ai-code-mode@0.1.3
- Updated dependencies []:
- @tanstack/ai-code-mode@0.1.2
- Updated dependencies [
1d1c58f]:- @tanstack/ai-code-mode@0.1.1
-
Add code mode and isolate packages for secure AI code execution (#362)
Also includes fixes for Ollama tool call argument streaming and usage reporting, OpenAI realtime adapter handling of missing call_id/item_id, realtime client guards for missing toolCallId, and new DevtoolsChatMiddleware type export from ai-event-client.
- Updated dependencies [
54abae0]:- @tanstack/ai-code-mode@0.1.0