Add code mode for composing session tools with JavaScript

Cargo.toml

@@ -10,6 +10,7 @@ members = [
     "crates/auth",
     "crates/bots",
     "crates/channels",
+    "crates/codemode",
     "crates/environments",
     "crates/harness",
     "crates/mcp",

clients/typescript/schema/api.schema.json

@@ -7295,6 +7295,110 @@
       ],
       "type": "object"
     },
+    "CodeModeFeature": {
+      "additionalProperties": false,
+      "description": "Grants JavaScript composition through `code_execute`. Available script tools\nare the session's ordinary callable tools, optionally narrowed by allowedTools.\nTypeScript, ambient filesystem/network access, and recursive code execution\nare unavailable. An empty allowedTools list grants pure computation only.",
+      "properties": {
+        "allowedTools": {
+          "description": "Logical tool ids (for example vfs.read_file), not provider wire names.\nAbsent permits every currently callable grant; an empty list permits none.",
+          "items": {
+            "type": "string"
+          },
+          "type": [
+            "array",
+            "null"
+          ]
+        },
+        "maxCatalogBytes": {
+          "default": 1048576,
+          "description": "Pinned callable catalog bytes, at most 8 MiB.",
+          "format": "uint64",
+          "minimum": 0,
+          "type": "integer"
+        },
+        "maxMemoryBytes": {
+          "default": 67108864,
+          "description": "Interpreter heap, at most 512 MiB.",
+          "format": "uint64",
+          "minimum": 0,
+          "type": "integer"
+        },
+        "maxOutputBytes": {
+          "default": 1048576,
+          "description": "Combined text() output and return value, at most 8 MiB.",
+          "format": "uint64",
+          "minimum": 0,
+          "type": "integer"
+        },
+        "maxOutstandingToolCalls": {
+          "default": 16,
+          "description": "Concurrent pending calls, at most 64 and no greater than maxToolCalls.",
+          "format": "uint32",
+          "minimum": 0,
+          "type": "integer"
+        },
+        "maxRequestBytes": {
+          "default": 1048576,
+          "description": "Serialized arguments per tool request, at most 8 MiB.",
+          "format": "uint64",
+          "minimum": 0,
+          "type": "integer"
+        },
+        "maxResultBytes": {
+          "default": 1048576,
+          "description": "Serialized completion per tool request, at most 8 MiB.",
+          "format": "uint64",
+          "minimum": 0,
+          "type": "integer"
+        },
+        "maxSourceBytes": {
+          "default": 262144,
+          "description": "UTF-8 source bytes, at most 1 MiB.",
+          "format": "uint64",
+          "minimum": 0,
+          "type": "integer"
+        },
+        "maxStackBytes": {
+          "default": 1048576,
+          "description": "Interpreter native stack, at most 8 MiB.",
+          "format": "uint64",
+          "minimum": 0,
+          "type": "integer"
+        },
+        "maxToolCalls": {
+          "default": 128,
+          "description": "Calls per script, at most 1,024.",
+          "format": "uint32",
+          "minimum": 0,
+          "type": "integer"
+        },
+        "timeoutMs": {
+          "default": 60000,
+          "description": "Total attempt time including input loading, interpreter capacity waits,\nJavaScript evaluation, and tool waits; at most 600,000 milliseconds.",
+          "format": "uint64",
+          "minimum": 0,
+          "type": "integer"
+        },
+        "version": {
+          "default": 1,
+          "format": "uint32",
+          "minimum": 0,
+          "type": "integer"
+        }
+      },
+      "type": "object"
+    },
+    "CodeToolProgressPhase": {
+      "description": "Bounded lifecycle telemetry for a session-owned code tool execution.",
+      "enum": [
+        "scopeOpened",
+        "callAdmitted",
+        "callDeferred",
+        "callCompleted",
+        "scopeClosed"
+      ],
+      "type": "string"
+    },
     "CompactionPolicy": {
       "oneOf": [
         {
@@ -10757,6 +10861,16 @@
       "additionalProperties": false,
       "description": "Capability grants. An absent feature is not granted; `{}` grants it with\ndefaults. Every block carries a behavior `version` that pins semantics.",
       "properties": {
+        "codeMode": {
+          "anyOf": [
+            {
+              "$ref": "#/definitions/CodeModeFeature"
+            },
+            {
+              "type": "null"
+            }
+          ]
+        },
         "environments": {
           "anyOf": [
             {
@@ -15485,6 +15599,43 @@
             "batchId"
           ],
           "type": "object"
+        },
+        {
+          "description": "Progress of a code tool execution. This preserves the contiguous session\nevent cursor without projecting internal scope bindings or payloads as\nconversational tool calls.",
+          "properties": {
+            "executionId": {
+              "type": "string"
+            },
+            "phase": {
+              "$ref": "#/definitions/CodeToolProgressPhase"
+            },
+            "requestId": {
+              "type": [
+                "string",
+                "null"
+              ]
+            },
+            "status": {
+              "anyOf": [
+                {
+                  "$ref": "#/definitions/ToolItemStatus"
+                },
+                {
+                  "type": "null"
+                }
+              ]
+            },
+            "type": {
+              "const": "codeToolProgress",
+              "type": "string"
+            }
+          },
+          "required": [
+            "type",
+            "executionId",
+            "phase"
+          ],
+          "type": "object"
         }
       ]
     },
@@ -17146,6 +17297,11 @@
           "description": "Runs or controls a process.",
           "type": "string"
         },
+        {
+          "const": "code",
+          "description": "Orchestrates tool calls in a code-mode script.",
+          "type": "string"
+        },
         {
           "const": "mcp",
           "description": "Calls a tool on an MCP server, through the builtin bridge or a\nprovider-native MCP block.",