@poe-platform/safe-js 0.1.0

package/dist/safe-js/index.js

@@ -0,0 +1,454 @@
+import {
+  AgentSpawnError,
+  EnvAccessError,
+  SPAWN_MODES,
+  countLineBreaks,
+  createLintModulesFromRuntimeRegistry,
+  createSpawnUsageAccumulator,
+  extractBlock,
+  formatInterpreterError,
+  inspectSnapshotMigration,
+  makeAgentModule,
+  makeEnvModule,
+  makeFailModule,
+  makeFsModule,
+  makeHarnessModule,
+  makeLogModule,
+  makeMcpModule,
+  makeMetricModule,
+  maskSource,
+  migrateSnapshot,
+  migrateSnapshotFile,
+  parseEnvConfig,
+  parseFsConfig,
+  parseMcpConfig,
+  resolveFsConfig,
+  runWithSpawnUsageAccumulator,
+  splitFrontmatter,
+  supportsSpawnMode
+} from "./chunks/chunk-DC5B3GYM.js";
+import {
+  Budget,
+  FileSnapshotBackend,
+  HostCallResumabilityError,
+  HostOperationResumePolicyError,
+  SandboxError,
+  SnapshotValidationError,
+  createReplayableRandom,
+  createSeededRandom,
+  declareHostOperation,
+  deepCopyFromSandbox,
+  deepCopyToSandbox,
+  dump,
+  hasOwnErrorCode,
+  lint,
+  noopOtelSink,
+  parse,
+  parseModule,
+  registerPendingHostCallPolicy,
+  restore,
+  run
+} from "./chunks/chunk-Z3D76J4U.js";
+import "./chunks/chunk-7M2SJPSZ.js";
+import "./chunks/chunk-2QRYPKQQ.js";
+import "./chunks/chunk-4YIDX44G.js";
+
+// packages/safe-js/src/parse.ts
+var parse2 = parse;
+
+// packages/safe-js/src/runner/run-harness.ts
+import { readFile, stat } from "node:fs/promises";
+import { extname } from "node:path";
+function getOwnEntry(record, key) {
+  return Object.prototype.hasOwnProperty.call(record, key) ? record[key] : void 0;
+}
+function createHarnessMeta(filepath, frontmatter) {
+  return {
+    filepath,
+    kind: getOwnEntry(frontmatter, "kind"),
+    version: getOwnEntry(frontmatter, "version")
+  };
+}
+function assertFrontmatterAgentModes(frontmatter) {
+  const agents = getOwnEntry(frontmatter, "agents");
+  if (typeof agents !== "object" || agents === null || Array.isArray(agents)) {
+    return;
+  }
+  for (const [name, definition] of Object.entries(agents)) {
+    if (typeof definition !== "object" || definition === null || Array.isArray(definition)) {
+      continue;
+    }
+    const record = definition;
+    const agent = getOwnEntry(record, "agent");
+    const mode = getOwnEntry(record, "mode");
+    if (typeof agent !== "string" || typeof mode !== "string") {
+      continue;
+    }
+    if (!SPAWN_MODES.includes(mode)) {
+      continue;
+    }
+    if (!supportsSpawnMode(agent, mode)) {
+      throw new Error(`Harness agent "${name}": agent "${agent}" does not support mode "${mode}".`);
+    }
+  }
+}
+var LintError = class extends Error {
+  diagnostics;
+  constructor(diagnostics) {
+    super(formatLintErrorMessage(diagnostics));
+    this.name = "LintError";
+    this.diagnostics = diagnostics;
+  }
+};
+async function runHarness(filepath, options) {
+  const rawSource = await readHarnessFile(filepath);
+  const { executableSource, frontmatter, isRawScript } = loadExecutableSource(filepath, rawSource);
+  assertFrontmatterAgentModes(frontmatter);
+  const meta = createHarnessMeta(filepath, frontmatter);
+  const modules = excludeHarnessModule(options.modulesFor(frontmatter, meta), isRawScript);
+  const diagnostics = lint(executableSource, {
+    filename: filepath,
+    modules: createLintModulesFromRuntimeRegistry(modules)
+  });
+  const lintErrors = diagnostics.filter((diagnostic) => diagnostic.severity === "error");
+  if (lintErrors.length > 0) {
+    throw new LintError(lintErrors);
+  }
+  return runHarnessSource(executableSource, {
+    budget: options.budget,
+    entryPointArgs: hasDefaultExport(executableSource, filepath) ? [] : void 0,
+    filename: filepath,
+    modules,
+    otelSink: options.otelSink,
+    signal: options.signal,
+    snapshotBackend: options.snapshotBackend,
+    snapshotIntervalMs: options.snapshotIntervalMs,
+    snapshotPath: options.snapshotPath
+  });
+}
+async function runHarnessPair(filepath, options) {
+  const pair = resolveHarnessPair(filepath);
+  const [rawMarkdown, rawScript] = await Promise.all([
+    readHarnessFile(pair.markdownPath),
+    readHarnessFile(pair.scriptPath)
+  ]);
+  const { frontmatter, body } = splitFrontmatter(stripByteOrderMark(rawMarkdown));
+  assertFrontmatterAgentModes(frontmatter);
+  const executableSource = stripByteOrderMark(rawScript);
+  const meta = createHarnessMeta(pair.markdownPath, frontmatter);
+  const modules = options.modulesFor(frontmatter, meta);
+  const diagnostics = lint(executableSource, {
+    allowedExportNames: ["schema"],
+    defaultExport: {
+      parameters: ["frontmatter"],
+      required: true
+    },
+    filename: pair.scriptPath,
+    frontmatterFields: Object.keys(frontmatter),
+    modules: createLintModulesFromRuntimeRegistry(modules)
+  });
+  const lintErrors = diagnostics.filter((diagnostic) => diagnostic.severity === "error");
+  if (lintErrors.length > 0) {
+    throw new LintError(lintErrors);
+  }
+  return runHarnessSource(executableSource, {
+    budget: options.budget,
+    entryPointArgs: [frontmatter],
+    filename: pair.scriptPath,
+    importMeta: {
+      body,
+      filepath: pair.markdownPath,
+      kind: meta.kind,
+      version: meta.version
+    },
+    modules,
+    otelSink: options.otelSink,
+    signal: options.signal,
+    snapshotBackend: options.snapshotBackend,
+    snapshotIntervalMs: options.snapshotIntervalMs,
+    snapshotPath: options.snapshotPath
+  });
+}
+async function readHarnessFile(filepath) {
+  try {
+    const stats = await stat(filepath);
+    if (!stats.isFile()) {
+      throw new Error(`Harness path must point to a file: ${filepath}`);
+    }
+    return await readFile(filepath, "utf8");
+  } catch (error) {
+    if (hasOwnErrorCode(error, "ENOENT") || hasOwnErrorCode(error, "ENOTDIR")) {
+      throw new Error(`Harness file not found: ${filepath}`);
+    }
+    throw error;
+  }
+}
+function loadExecutableSource(filepath, source) {
+  if (isRawScriptPath(filepath)) {
+    const executableSource = stripByteOrderMark(source);
+    if (executableSource.length === 0) {
+      throw new Error(`No code block found in empty harness file: ${filepath}`);
+    }
+    return {
+      executableSource,
+      frontmatter: {},
+      isRawScript: true
+    };
+  }
+  const { frontmatter, body } = splitFrontmatter(source);
+  if (source.length === 0 || body.trim().length === 0) {
+    throw new Error(`No code block found in empty harness file: ${filepath}`);
+  }
+  const bodyStartOffset = source.length - body.length;
+  const { source: executableBlock, startOffset } = extractBlock(
+    body,
+    countLineBreaks(source, 0, bodyStartOffset) + 1
+  );
+  return {
+    executableSource: maskSource(source.slice(0, bodyStartOffset + startOffset)) + stripHashbang(executableBlock),
+    frontmatter,
+    isRawScript: false
+  };
+}
+function resolveHarnessPair(filepath) {
+  const extension = extname(filepath);
+  const basename = extension.length === 0 ? filepath : filepath.slice(0, -extension.length);
+  if (isRawScriptExtension(extension)) {
+    return {
+      markdownPath: `${basename}.md`,
+      scriptPath: filepath
+    };
+  }
+  return {
+    markdownPath: filepath,
+    scriptPath: `${basename}.ajs`
+  };
+}
+function isRawScriptPath(filepath) {
+  return isRawScriptExtension(extname(filepath));
+}
+function isRawScriptExtension(extension) {
+  return extension === ".safejs" || extension === ".ajs";
+}
+async function runHarnessSource(executableSource, options) {
+  try {
+    return await run(executableSource, options);
+  } catch (error) {
+    if (isSetupError(error)) {
+      throw error;
+    }
+    return {
+      ...isAbortError(error) ? { aborted: true } : {},
+      error,
+      ok: false
+    };
+  }
+}
+function isSetupError(error) {
+  return error instanceof Error && error.name === "ParseError";
+}
+function isAbortError(error) {
+  if (error instanceof Error) {
+    return error.name === "AbortError";
+  }
+  return typeof error === "object" && error !== null && Object.prototype.hasOwnProperty.call(error, "name") && error.name === "AbortError";
+}
+function hasDefaultExport(source, filename) {
+  return parseModule(source, filename).body.some(
+    (statement) => statement.type === "ExportDefaultDeclaration"
+  );
+}
+function excludeHarnessModule(modules, isRawScript) {
+  if (!isRawScript) {
+    return modules;
+  }
+  if (modules instanceof Map) {
+    const rawModules2 = new Map(modules);
+    rawModules2.delete("harness");
+    return rawModules2;
+  }
+  const rawModules = {};
+  for (const [moduleName, moduleExports] of Object.entries(modules)) {
+    if (moduleName !== "harness") {
+      rawModules[moduleName] = moduleExports;
+    }
+  }
+  return rawModules;
+}
+function stripByteOrderMark(source) {
+  return source.startsWith("\uFEFF") ? source.slice(1) : source;
+}
+function stripHashbang(source) {
+  if (!source.startsWith("#!")) {
+    return source;
+  }
+  let end = 2;
+  while (end < source.length && source[end] !== "\n" && source[end] !== "\r") end += 1;
+  return `${" ".repeat(end)}${source.slice(end)}`;
+}
+function formatLintErrorMessage(diagnostics) {
+  if (diagnostics.length === 0) {
+    return "Script lint failed.";
+  }
+  return diagnostics.map(
+    (diagnostic) => `${diagnostic.filename}:${diagnostic.line}:${diagnostic.column} ${diagnostic.code} ${diagnostic.message}`
+  ).join("\n");
+}
+
+// packages/safe-js/src/loader/find-exported.ts
+function findExportedConstInitializer(module, name) {
+  for (const statement of module.body) {
+    if (statement.type === "ExportDefaultDeclaration") {
+      if (name === "default") {
+        return statement.declaration;
+      }
+      continue;
+    }
+    if (statement.type !== "ExportNamedDeclaration") {
+      continue;
+    }
+    const declaration = statement.declaration;
+    if (declaration.kind !== "const") {
+      throw new Error(`Exported '${name}' must be declared with const.`);
+    }
+    if (declaration.declarations.length !== 1) {
+      throw new Error("Exported const declarations must contain exactly one declarator.");
+    }
+    const declarator = declaration.declarations[0];
+    if (declarator.id.type !== "Identifier") {
+      throw new Error("Destructured exported const bindings are not supported.");
+    }
+    if (declarator.id.name !== name) {
+      continue;
+    }
+    if (declarator.init === void 0) {
+      throw new Error(`Exported const '${name}' must have an initializer.`);
+    }
+    return declarator.init;
+  }
+  return void 0;
+}
+
+// packages/safe-js/src/modules/time.ts
+import { webcrypto as crypto } from "node:crypto";
+function makeTimeModule(options = {}) {
+  const hasDeterministicRandom = options.random !== void 0 || options.seed !== void 0;
+  const random = options.random ?? (options.seed === void 0 ? () => Math.random() : createSeededRandom(options.seed).next);
+  const now = options.now ?? (() => Date.now());
+  const signal = options.signal;
+  async function sleep(ms) {
+    assertSleepDelay(ms);
+    return await new Promise((resolve, reject) => {
+      if (signal?.aborted === true) {
+        reject(createSleepAbortError());
+        return;
+      }
+      const start = performance.now();
+      let timeout = setTimeout(resolveSleep, ms);
+      function cleanup() {
+        clearTimeout(timeout);
+        signal?.removeEventListener("abort", rejectSleep);
+      }
+      function resolveSleep() {
+        const remainingMs = ms - (performance.now() - start);
+        if (remainingMs > 0) {
+          timeout = setTimeout(resolveSleep, remainingMs);
+          return;
+        }
+        cleanup();
+        resolve();
+      }
+      function rejectSleep() {
+        cleanup();
+        reject(createSleepAbortError());
+      }
+      signal?.addEventListener("abort", rejectSleep, { once: true });
+    });
+  }
+  return {
+    random,
+    now,
+    sleep,
+    uuid: hasDeterministicRandom ? () => createRandomUuid(random) : () => crypto.randomUUID()
+  };
+}
+function createRandomUuid(random) {
+  const bytes = Array.from({ length: 16 }, () => Math.floor(readRandomUnit(random()) * 256));
+  bytes[6] = bytes[6] & 15 | 64;
+  bytes[8] = bytes[8] & 63 | 128;
+  const hex = bytes.map((byte) => byte.toString(16).padStart(2, "0")).join("");
+  return [
+    hex.slice(0, 8),
+    hex.slice(8, 12),
+    hex.slice(12, 16),
+    hex.slice(16, 20),
+    hex.slice(20)
+  ].join("-");
+}
+function readRandomUnit(value) {
+  if (Number.isFinite(value) && value >= 0 && value < 1) {
+    return value;
+  }
+  throw new RangeError("time.uuid() random source must return a number in [0, 1).");
+}
+function assertSleepDelay(ms) {
+  if (Number.isFinite(ms) && ms >= 0) {
+    return;
+  }
+  throw new RangeError("time.sleep(ms) requires a non-negative finite millisecond delay.");
+}
+function createSleepAbortError() {
+  return new Error("time.sleep aborted.");
+}
+
+// packages/safe-js/src/index.ts
+var parseModule2 = parseModule;
+var restore2 = restore;
+var deepCopyFromSandbox2 = deepCopyFromSandbox;
+export {
+  AgentSpawnError,
+  Budget,
+  EnvAccessError,
+  FileSnapshotBackend,
+  HostCallResumabilityError,
+  HostOperationResumePolicyError,
+  SandboxError,
+  SnapshotValidationError,
+  createReplayableRandom,
+  createSpawnUsageAccumulator,
+  declareHostOperation,
+  deepCopyFromSandbox2 as deepCopyFromSandbox,
+  deepCopyToSandbox,
+  dump,
+  extractBlock,
+  findExportedConstInitializer,
+  formatInterpreterError,
+  inspectSnapshotMigration,
+  lint,
+  makeAgentModule,
+  makeEnvModule,
+  makeFailModule,
+  makeFsModule,
+  makeHarnessModule,
+  makeLogModule,
+  makeMcpModule,
+  makeMetricModule,
+  makeTimeModule,
+  migrateSnapshot,
+  migrateSnapshotFile,
+  noopOtelSink,
+  parse2 as parse,
+  parseEnvConfig,
+  parseFsConfig,
+  parseMcpConfig,
+  parseModule2 as parseModule,
+  registerPendingHostCallPolicy,
+  resolveFsConfig,
+  restore2 as restore,
+  run,
+  runHarness,
+  runHarnessPair,
+  runWithSpawnUsageAccumulator,
+  splitFrontmatter
+};
+//# sourceMappingURL=index.js.map

package/dist/safe-js/index.js.map

@@ -0,0 +1,7 @@
+{
+  "version": 3,
+  "sources": ["../src/parse.ts", "../src/runner/run-harness.ts", "../src/loader/find-exported.ts", "../src/modules/time.ts", "../src/index.ts"],
+  "sourcesContent": ["import { parse as parseInternal, type ParseResult as ParsedNode } from \"./parse/parser.js\";\n\nexport { DisallowedSyntaxError } from \"./parse/parser.js\";\nexport const parse: (source: string, filename?: string) => ParsedNode = parseInternal;\nexport type {\n  ArrayPattern,\n  ArrayExpression,\n  ArrowFunctionExpression,\n  AssignmentExpression,\n  AssignmentPattern,\n  AssignmentProperty,\n  AwaitExpression,\n  BinaryExpression,\n  BlockStatement,\n  BooleanLiteral,\n  BreakStatement,\n  CallExpression,\n  CatchClause,\n  ConditionalExpression,\n  ContinueStatement,\n  DoWhileStatement,\n  EmptyStatement,\n  Expression,\n  ExpressionStatement,\n  ExportDefaultDeclaration,\n  ExportNamedDeclaration,\n  ImportDeclaration,\n  ImportDefaultSpecifier,\n  ImportNamespaceSpecifier,\n  ImportSpecifier,\n  ForInStatement,\n  ForOfStatement,\n  ForStatement,\n  FunctionDeclaration,\n  FunctionExpression,\n  Identifier,\n  IfStatement,\n  LogicalExpression,\n  MemberExpression,\n  MetaProperty,\n  NewExpression,\n  NullLiteral,\n  NumericLiteral,\n  ObjectExpression,\n  ObjectPattern,\n  ParseResult,\n  PatternTarget,\n  Property,\n  RegexLiteral,\n  RestElement,\n  ReturnStatement,\n  SequenceExpression,\n  SourceSpan,\n  SpreadElement,\n  Statement,\n  StringLiteral,\n  SwitchCase,\n  SwitchStatement,\n  TaggedTemplateExpression,\n  TemplateElement,\n  TemplateLiteral,\n  ThisExpression,\n  ThrowStatement,\n  TryStatement,\n  UnaryExpression,\n  UndefinedLiteral,\n  UpdateExpression,\n  UpdateTarget,\n  VariableDeclaration,\n  VariableDeclarationKind,\n  VariableDeclarator,\n  WhileStatement\n} from \"./parse/parser.js\";\n", "import { readFile, stat } from \"node:fs/promises\";\nimport { extname } from \"node:path\";\n\nimport { supportsSpawnMode } from \"@poe-code/agent-spawn/configs\";\nimport { SPAWN_MODES, type SpawnMode } from \"@poe-code/agent-spawn/types\";\nimport { hasOwnErrorCode } from \"../error-codes.js\";\nimport { countLineBreaks, extractBlock, maskSource } from \"../loader/extract-block.js\";\nimport { splitFrontmatter } from \"../loader/frontmatter.js\";\nimport { lint, type Diagnostic } from \"../lint.js\";\nimport { createLintModulesFromRuntimeRegistry } from \"../lint/runtime-modules.js\";\nimport type { ModuleExports, ModuleRegistry } from \"../modules/registry.js\";\nimport type { OtelSink } from \"../observability/otel.js\";\nimport { parseModule } from \"../parse/parser.js\";\nimport { run, type RunOptions, type RunResult } from \"../run.js\";\nimport type { SnapshotBackend } from \"../snapshot/backend.js\";\n\ntype HarnessMeta = {\n  filepath: string;\n  kind: unknown;\n  version: unknown;\n};\n\nexport type RunHarnessOptions = {\n  budget?: RunOptions[\"budget\"];\n  modulesFor: (frontmatter: Record<string, unknown>, meta: HarnessMeta) => ModuleRegistry;\n  otelSink?: OtelSink;\n  signal?: AbortSignal;\n  snapshotBackend?: SnapshotBackend;\n  snapshotIntervalMs?: number;\n  snapshotPath?: string;\n};\n\nexport type RunHarnessExecutionErrorResult = {\n  aborted?: true;\n  error: unknown;\n  ok: false;\n};\n\nexport type RunHarnessResult = RunResult | RunHarnessExecutionErrorResult;\n\nfunction getOwnEntry(record: Record<string, unknown>, key: string): unknown {\n  return Object.prototype.hasOwnProperty.call(record, key) ? record[key] : undefined;\n}\n\nfunction createHarnessMeta(filepath: string, frontmatter: Record<string, unknown>): HarnessMeta {\n  return {\n    filepath,\n    kind: getOwnEntry(frontmatter, \"kind\"),\n    version: getOwnEntry(frontmatter, \"version\")\n  };\n}\n\nfunction assertFrontmatterAgentModes(frontmatter: Record<string, unknown>): void {\n  const agents = getOwnEntry(frontmatter, \"agents\");\n  if (typeof agents !== \"object\" || agents === null || Array.isArray(agents)) {\n    return;\n  }\n\n  for (const [name, definition] of Object.entries(agents)) {\n    if (typeof definition !== \"object\" || definition === null || Array.isArray(definition)) {\n      continue;\n    }\n\n    const record = definition as Record<string, unknown>;\n    const agent = getOwnEntry(record, \"agent\");\n    const mode = getOwnEntry(record, \"mode\");\n    if (typeof agent !== \"string\" || typeof mode !== \"string\") {\n      continue;\n    }\n\n    // Malformed mode strings are reported by the agent module's own validation.\n    if (!SPAWN_MODES.includes(mode as SpawnMode)) {\n      continue;\n    }\n\n    if (!supportsSpawnMode(agent, mode as SpawnMode)) {\n      throw new Error(`Harness agent \"${name}\": agent \"${agent}\" does not support mode \"${mode}\".`);\n    }\n  }\n}\n\nexport class LintError extends Error {\n  readonly diagnostics: readonly Diagnostic[];\n\n  constructor(diagnostics: readonly Diagnostic[]) {\n    super(formatLintErrorMessage(diagnostics));\n    this.name = \"LintError\";\n    this.diagnostics = diagnostics;\n  }\n}\n\nexport async function runHarness(\n  filepath: string,\n  options: RunHarnessOptions\n): Promise<RunHarnessResult> {\n  const rawSource = await readHarnessFile(filepath);\n  const { executableSource, frontmatter, isRawScript } = loadExecutableSource(filepath, rawSource);\n  assertFrontmatterAgentModes(frontmatter);\n  const meta = createHarnessMeta(filepath, frontmatter);\n  const modules = excludeHarnessModule(options.modulesFor(frontmatter, meta), isRawScript);\n  const diagnostics = lint(executableSource, {\n    filename: filepath,\n    modules: createLintModulesFromRuntimeRegistry(modules)\n  });\n  const lintErrors = diagnostics.filter((diagnostic) => diagnostic.severity === \"error\");\n\n  if (lintErrors.length > 0) {\n    throw new LintError(lintErrors);\n  }\n\n  return runHarnessSource(executableSource, {\n    budget: options.budget,\n    entryPointArgs: hasDefaultExport(executableSource, filepath) ? [] : undefined,\n    filename: filepath,\n    modules,\n    otelSink: options.otelSink,\n    signal: options.signal,\n    snapshotBackend: options.snapshotBackend,\n    snapshotIntervalMs: options.snapshotIntervalMs,\n    snapshotPath: options.snapshotPath\n  });\n}\n\nexport async function runHarnessPair(\n  filepath: string,\n  options: RunHarnessOptions\n): Promise<RunHarnessResult> {\n  const pair = resolveHarnessPair(filepath);\n  const [rawMarkdown, rawScript] = await Promise.all([\n    readHarnessFile(pair.markdownPath),\n    readHarnessFile(pair.scriptPath)\n  ]);\n  const { frontmatter, body } = splitFrontmatter(stripByteOrderMark(rawMarkdown));\n  assertFrontmatterAgentModes(frontmatter);\n  const executableSource = stripByteOrderMark(rawScript);\n  const meta = createHarnessMeta(pair.markdownPath, frontmatter);\n  const modules = options.modulesFor(frontmatter, meta);\n  const diagnostics = lint(executableSource, {\n    allowedExportNames: [\"schema\"],\n    defaultExport: {\n      parameters: [\"frontmatter\"],\n      required: true\n    },\n    filename: pair.scriptPath,\n    frontmatterFields: Object.keys(frontmatter),\n    modules: createLintModulesFromRuntimeRegistry(modules)\n  });\n  const lintErrors = diagnostics.filter((diagnostic) => diagnostic.severity === \"error\");\n\n  if (lintErrors.length > 0) {\n    throw new LintError(lintErrors);\n  }\n\n  return runHarnessSource(executableSource, {\n    budget: options.budget,\n    entryPointArgs: [frontmatter],\n    filename: pair.scriptPath,\n    importMeta: {\n      body,\n      filepath: pair.markdownPath,\n      kind: meta.kind,\n      version: meta.version\n    },\n    modules,\n    otelSink: options.otelSink,\n    signal: options.signal,\n    snapshotBackend: options.snapshotBackend,\n    snapshotIntervalMs: options.snapshotIntervalMs,\n    snapshotPath: options.snapshotPath\n  });\n}\n\nasync function readHarnessFile(filepath: string): Promise<string> {\n  try {\n    const stats = await stat(filepath);\n    if (!stats.isFile()) {\n      throw new Error(`Harness path must point to a file: ${filepath}`);\n    }\n\n    return await readFile(filepath, \"utf8\");\n  } catch (error) {\n    if (hasOwnErrorCode(error, \"ENOENT\") || hasOwnErrorCode(error, \"ENOTDIR\")) {\n      throw new Error(`Harness file not found: ${filepath}`);\n    }\n\n    throw error;\n  }\n}\n\nfunction loadExecutableSource(\n  filepath: string,\n  source: string\n): {\n  executableSource: string;\n  frontmatter: Record<string, unknown>;\n  isRawScript: boolean;\n} {\n  if (isRawScriptPath(filepath)) {\n    const executableSource = stripByteOrderMark(source);\n    if (executableSource.length === 0) {\n      throw new Error(`No code block found in empty harness file: ${filepath}`);\n    }\n\n    return {\n      executableSource,\n      frontmatter: {},\n      isRawScript: true\n    };\n  }\n\n  const { frontmatter, body } = splitFrontmatter(source);\n  if (source.length === 0 || body.trim().length === 0) {\n    throw new Error(`No code block found in empty harness file: ${filepath}`);\n  }\n\n  const bodyStartOffset = source.length - body.length;\n  const { source: executableBlock, startOffset } = extractBlock(\n    body,\n    countLineBreaks(source, 0, bodyStartOffset) + 1\n  );\n  return {\n    executableSource:\n      maskSource(source.slice(0, bodyStartOffset + startOffset)) + stripHashbang(executableBlock),\n    frontmatter,\n    isRawScript: false\n  };\n}\n\nfunction resolveHarnessPair(filepath: string): { markdownPath: string; scriptPath: string } {\n  const extension = extname(filepath);\n  const basename = extension.length === 0 ? filepath : filepath.slice(0, -extension.length);\n\n  if (isRawScriptExtension(extension)) {\n    return {\n      markdownPath: `${basename}.md`,\n      scriptPath: filepath\n    };\n  }\n\n  return {\n    markdownPath: filepath,\n    scriptPath: `${basename}.ajs`\n  };\n}\n\nfunction isRawScriptPath(filepath: string): boolean {\n  return isRawScriptExtension(extname(filepath));\n}\n\nfunction isRawScriptExtension(extension: string): boolean {\n  return extension === \".safejs\" || extension === \".ajs\";\n}\n\nasync function runHarnessSource(\n  executableSource: string,\n  options: Parameters<typeof run>[1]\n): Promise<RunHarnessResult> {\n  try {\n    return await run(executableSource, options);\n  } catch (error) {\n    if (isSetupError(error)) {\n      throw error;\n    }\n\n    return {\n      ...(isAbortError(error) ? { aborted: true as const } : {}),\n      error,\n      ok: false\n    };\n  }\n}\n\nfunction isSetupError(error: unknown): boolean {\n  return error instanceof Error && error.name === \"ParseError\";\n}\n\nfunction isAbortError(error: unknown): boolean {\n  if (error instanceof Error) {\n    return error.name === \"AbortError\";\n  }\n\n  return (\n    typeof error === \"object\" &&\n    error !== null &&\n    Object.prototype.hasOwnProperty.call(error, \"name\") &&\n    (error as { name?: unknown }).name === \"AbortError\"\n  );\n}\n\nfunction hasDefaultExport(source: string, filename: string): boolean {\n  return parseModule(source, filename).body.some(\n    (statement) => statement.type === \"ExportDefaultDeclaration\"\n  );\n}\n\nfunction excludeHarnessModule(modules: ModuleRegistry, isRawScript: boolean): ModuleRegistry {\n  if (!isRawScript) {\n    return modules;\n  }\n\n  if (modules instanceof Map) {\n    const rawModules = new Map(modules);\n    rawModules.delete(\"harness\");\n    return rawModules;\n  }\n\n  const rawModules: Record<string, ModuleExports> = {};\n\n  for (const [moduleName, moduleExports] of Object.entries(modules)) {\n    if (moduleName !== \"harness\") {\n      rawModules[moduleName] = moduleExports;\n    }\n  }\n\n  return rawModules;\n}\n\nfunction stripByteOrderMark(source: string): string {\n  return source.startsWith(\"\\uFEFF\") ? source.slice(1) : source;\n}\n\nfunction stripHashbang(source: string): string {\n  if (!source.startsWith(\"#!\")) {\n    return source;\n  }\n\n  let end = 2;\n  while (end < source.length && source[end] !== \"\\n\" && source[end] !== \"\\r\") end += 1;\n  return `${\" \".repeat(end)}${source.slice(end)}`;\n}\n\nfunction formatLintErrorMessage(diagnostics: readonly Diagnostic[]): string {\n  if (diagnostics.length === 0) {\n    return \"Script lint failed.\";\n  }\n\n  return diagnostics\n    .map(\n      (diagnostic) =>\n        `${diagnostic.filename}:${diagnostic.line}:${diagnostic.column} ${diagnostic.code} ${diagnostic.message}`\n    )\n    .join(\"\\n\");\n}\n", "import type { Expression, Module } from \"../parse/parser.js\";\n\nexport function findExportedConstInitializer(module: Module, name: string): Expression | undefined {\n  for (const statement of module.body) {\n    if (statement.type === \"ExportDefaultDeclaration\") {\n      if (name === \"default\") {\n        return statement.declaration;\n      }\n\n      continue;\n    }\n\n    if (statement.type !== \"ExportNamedDeclaration\") {\n      continue;\n    }\n\n    const declaration = statement.declaration;\n    if (declaration.kind !== \"const\") {\n      throw new Error(`Exported '${name}' must be declared with const.`);\n    }\n\n    if (declaration.declarations.length !== 1) {\n      throw new Error(\"Exported const declarations must contain exactly one declarator.\");\n    }\n\n    const declarator = declaration.declarations[0]!;\n    if (declarator.id.type !== \"Identifier\") {\n      throw new Error(\"Destructured exported const bindings are not supported.\");\n    }\n\n    if (declarator.id.name !== name) {\n      continue;\n    }\n\n    if (declarator.init === undefined) {\n      throw new Error(`Exported const '${name}' must have an initializer.`);\n    }\n\n    return declarator.init;\n  }\n\n  return undefined;\n}\n", "import { webcrypto as crypto } from \"node:crypto\";\n\nimport { createSeededRandom } from \"../interp/globals/math.js\";\n\nexport type TimeModuleOptions = {\n  now?: () => number;\n  random?: () => number;\n  seed?: number;\n  signal?: AbortSignal;\n};\n\nexport function makeTimeModule(options: TimeModuleOptions = {}): {\n  random: () => number;\n  now: () => number;\n  sleep: (ms: number) => Promise<void>;\n  uuid: () => string;\n} {\n  const hasDeterministicRandom = options.random !== undefined || options.seed !== undefined;\n  const random =\n    options.random ??\n    (options.seed === undefined ? () => Math.random() : createSeededRandom(options.seed).next);\n  const now = options.now ?? (() => Date.now());\n  const signal = options.signal;\n\n  async function sleep(ms: number): Promise<void> {\n    assertSleepDelay(ms);\n\n    return await new Promise<void>((resolve, reject) => {\n      if (signal?.aborted === true) {\n        reject(createSleepAbortError());\n        return;\n      }\n\n      const start = performance.now();\n      let timeout = setTimeout(resolveSleep, ms);\n\n      function cleanup(): void {\n        clearTimeout(timeout);\n        signal?.removeEventListener(\"abort\", rejectSleep);\n      }\n\n      function resolveSleep(): void {\n        const remainingMs = ms - (performance.now() - start);\n        if (remainingMs > 0) {\n          timeout = setTimeout(resolveSleep, remainingMs);\n          return;\n        }\n\n        cleanup();\n        resolve();\n      }\n\n      function rejectSleep(): void {\n        cleanup();\n        reject(createSleepAbortError());\n      }\n\n      signal?.addEventListener(\"abort\", rejectSleep, { once: true });\n    });\n  }\n\n  return {\n    random,\n    now,\n    sleep,\n    uuid: hasDeterministicRandom ? () => createRandomUuid(random) : () => crypto.randomUUID()\n  };\n}\n\nfunction createRandomUuid(random: () => number): string {\n  const bytes = Array.from({ length: 16 }, () => Math.floor(readRandomUnit(random()) * 256));\n  bytes[6] = (bytes[6] & 0x0f) | 0x40;\n  bytes[8] = (bytes[8] & 0x3f) | 0x80;\n  const hex = bytes.map((byte) => byte.toString(16).padStart(2, \"0\")).join(\"\");\n\n  return [\n    hex.slice(0, 8),\n    hex.slice(8, 12),\n    hex.slice(12, 16),\n    hex.slice(16, 20),\n    hex.slice(20)\n  ].join(\"-\");\n}\n\nfunction readRandomUnit(value: number): number {\n  if (Number.isFinite(value) && value >= 0 && value < 1) {\n    return value;\n  }\n\n  throw new RangeError(\"time.uuid() random source must return a number in [0, 1).\");\n}\n\nfunction assertSleepDelay(ms: number): void {\n  if (Number.isFinite(ms) && ms >= 0) {\n    return;\n  }\n\n  throw new RangeError(\"time.sleep(ms) requires a non-negative finite millisecond delay.\");\n}\n\nfunction createSleepAbortError(): Error {\n  return new Error(\"time.sleep aborted.\");\n}\n", "import { parseModule as parseModuleInternal, type Module } from \"./parse/parser.js\";\nimport { restore as restoreInternal, type SafeJSSnapshot, type RestoreOptions } from \"./restore.js\";\nimport {\n  deepCopyFromSandbox as copyFromSandboxInternal,\n  type SandboxPromise,\n  type SandboxValue\n} from \"./interp/values.js\";\n\nexport { parse } from \"./parse.js\";\nexport const parseModule: (source: string, filename?: string) => Module = parseModuleInternal;\nexport const restore: <TSnapshot extends SafeJSSnapshot>(\n  snapshot: TSnapshot,\n  options: RestoreOptions\n) => TSnapshot = restoreInternal;\ntype PublicCopyOptions = Omit<\n  NonNullable<Parameters<typeof copyFromSandboxInternal>[1]>,\n  \"compilation\"\n>;\nexport const deepCopyFromSandbox: {\n  (value: SandboxPromise, options?: PublicCopyOptions): Promise<unknown>;\n  (value: SandboxValue, options?: PublicCopyOptions): unknown;\n} = copyFromSandboxInternal;\nexport { lint, type Diagnostic, type Fix, type LintFixResult, type LintOptions } from \"./lint.js\";\nexport { run } from \"./run.js\";\nexport { createReplayableRandom, type ReplayableRandom } from \"./random.js\";\nexport type { RunClock, RunClockSnapshot, RunRandom } from \"./run.js\";\nexport { noopOtelSink } from \"./observability/otel.js\";\nexport type { OtelSink, OtelSpan } from \"./observability/otel.js\";\nexport { FileSnapshotBackend } from \"./snapshot/backend.js\";\nexport type { Snapshot, SnapshotBackend } from \"./snapshot/backend.js\";\nexport { declareHostOperation } from \"./interp/host-bridge.js\";\nexport { HostCallResumabilityError } from \"./interp/host-call.js\";\nexport type {\n  HostCallLifecycle,\n  HostCallOutcome,\n  HostCallRecord,\n  HostCallResumeContext,\n  HostCallResumeProof,\n  HostCallResumeProvider,\n  HostCallResumeRequest\n} from \"./interp/host-call.js\";\nexport {\n  HostOperationResumePolicyError,\n  registerPendingHostCallPolicy\n} from \"./snapshot/policy.js\";\nexport type {\n  PendingHostCallPolicyMode,\n  PendingHostCallPolicyRegistration\n} from \"./snapshot/policy.js\";\nexport { dump, type DumpOptions } from \"./dump.js\";\nexport { inspectSnapshotMigration, migrateSnapshot } from \"./migrate.js\";\nexport { migrateSnapshotFile, type SnapshotMigrationFileOptions } from \"./migration-file.js\";\nexport type {\n  SnapshotMigration,\n  SnapshotMigrationOptions,\n  SnapshotMigrationReconciliation,\n  SnapshotMigrationResolution\n} from \"./migrate.js\";\nexport { SnapshotValidationError } from \"./snapshot/validation.js\";\nexport type { SnapshotValidationCode } from \"./snapshot/validation.js\";\nexport { Budget, SandboxError } from \"./interp/budget.js\";\nexport type { BudgetName, BudgetOptions } from \"./interp/budget.js\";\nexport { formatInterpreterError, type InterpreterDiagnostic } from \"./error/format.js\";\nexport { deepCopyToSandbox } from \"./interp/values.js\";\nexport { runHarness, runHarnessPair } from \"./runner/run-harness.js\";\nexport { extractBlock } from \"./loader/extract-block.js\";\nexport { findExportedConstInitializer } from \"./loader/find-exported.js\";\nexport { splitFrontmatter } from \"./loader/frontmatter.js\";\nexport type { ExportDefaultDeclaration, ExportNamedDeclaration, MetaProperty } from \"./parse.js\";\nexport {\n  AgentSpawnError,\n  createSpawnUsageAccumulator,\n  makeAgentModule,\n  runWithSpawnUsageAccumulator\n} from \"./modules/agent.js\";\nexport type {\n  AgentModuleDefinition,\n  AgentModuleOptions,\n  AgentModuleParallelCall,\n  AgentModuleRetryOptions,\n  AgentModuleSpawnOptions,\n  AgentSpawnEvent,\n  SpawnAgent,\n  SpawnAgentInput,\n  SpawnAgentResult,\n  SpawnUsageAccumulator,\n  SpawnUsageTotal\n} from \"./modules/agent.js\";\nexport { EnvAccessError, makeEnvModule, parseEnvConfig } from \"./modules/env.js\";\nexport type { EnvModule, EnvModuleOptions } from \"./modules/env.js\";\nexport { makeFailModule } from \"./modules/fail.js\";\nexport { makeFsModule } from \"./modules/fs.js\";\nexport { parseFsConfig, resolveFsConfig } from \"./modules/fs-config.js\";\nexport type { FsConfig, ResolveFsConfigOptions } from \"./modules/fs-config.js\";\nexport type {\n  FsImplementation,\n  FsModule,\n  FsModuleOptions,\n  SandboxDirent,\n  SandboxStats\n} from \"./modules/fs.js\";\nexport { makeHarnessModule } from \"./modules/harness.js\";\nexport { makeLogModule } from \"./modules/log.js\";\nexport { makeMetricModule } from \"./modules/metric.js\";\nexport { makeMcpModule } from \"./modules/mcp.js\";\nexport { parseMcpConfig } from \"./modules/mcp-transport.js\";\nexport type { McpModuleOptions, McpServerConfig } from \"./modules/mcp-transport.js\";\nexport type { ManagedMcpClient, ManagedMcpModule, McpNamedServerHandle } from \"./modules/mcp.js\";\nexport { makeTimeModule } from \"./modules/time.js\";\n"],
+  "mappings": ";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAGO,IAAMA,SAA2D;;;ACHxE,SAAS,UAAU,YAAY;AAC/B,SAAS,eAAe;AAuCxB,SAAS,YAAY,QAAiC,KAAsB;AAC1E,SAAO,OAAO,UAAU,eAAe,KAAK,QAAQ,GAAG,IAAI,OAAO,GAAG,IAAI;AAC3E;AAEA,SAAS,kBAAkB,UAAkB,aAAmD;AAC9F,SAAO;AAAA,IACL;AAAA,IACA,MAAM,YAAY,aAAa,MAAM;AAAA,IACrC,SAAS,YAAY,aAAa,SAAS;AAAA,EAC7C;AACF;AAEA,SAAS,4BAA4B,aAA4C;AAC/E,QAAM,SAAS,YAAY,aAAa,QAAQ;AAChD,MAAI,OAAO,WAAW,YAAY,WAAW,QAAQ,MAAM,QAAQ,MAAM,GAAG;AAC1E;AAAA,EACF;AAEA,aAAW,CAAC,MAAM,UAAU,KAAK,OAAO,QAAQ,MAAM,GAAG;AACvD,QAAI,OAAO,eAAe,YAAY,eAAe,QAAQ,MAAM,QAAQ,UAAU,GAAG;AACtF;AAAA,IACF;AAEA,UAAM,SAAS;AACf,UAAM,QAAQ,YAAY,QAAQ,OAAO;AACzC,UAAM,OAAO,YAAY,QAAQ,MAAM;AACvC,QAAI,OAAO,UAAU,YAAY,OAAO,SAAS,UAAU;AACzD;AAAA,IACF;AAGA,QAAI,CAAC,YAAY,SAAS,IAAiB,GAAG;AAC5C;AAAA,IACF;AAEA,QAAI,CAAC,kBAAkB,OAAO,IAAiB,GAAG;AAChD,YAAM,IAAI,MAAM,kBAAkB,IAAI,aAAa,KAAK,4BAA4B,IAAI,IAAI;AAAA,IAC9F;AAAA,EACF;AACF;AAEO,IAAM,YAAN,cAAwB,MAAM;AAAA,EAC1B;AAAA,EAET,YAAY,aAAoC;AAC9C,UAAM,uBAAuB,WAAW,CAAC;AACzC,SAAK,OAAO;AACZ,SAAK,cAAc;AAAA,EACrB;AACF;AAEA,eAAsB,WACpB,UACA,SAC2B;AAC3B,QAAM,YAAY,MAAM,gBAAgB,QAAQ;AAChD,QAAM,EAAE,kBAAkB,aAAa,YAAY,IAAI,qBAAqB,UAAU,SAAS;AAC/F,8BAA4B,WAAW;AACvC,QAAM,OAAO,kBAAkB,UAAU,WAAW;AACpD,QAAM,UAAU,qBAAqB,QAAQ,WAAW,aAAa,IAAI,GAAG,WAAW;AACvF,QAAM,cAAc,KAAK,kBAAkB;AAAA,IACzC,UAAU;AAAA,IACV,SAAS,qCAAqC,OAAO;AAAA,EACvD,CAAC;AACD,QAAM,aAAa,YAAY,OAAO,CAAC,eAAe,WAAW,aAAa,OAAO;AAErF,MAAI,WAAW,SAAS,GAAG;AACzB,UAAM,IAAI,UAAU,UAAU;AAAA,EAChC;AAEA,SAAO,iBAAiB,kBAAkB;AAAA,IACxC,QAAQ,QAAQ;AAAA,IAChB,gBAAgB,iBAAiB,kBAAkB,QAAQ,IAAI,CAAC,IAAI;AAAA,IACpE,UAAU;AAAA,IACV;AAAA,IACA,UAAU,QAAQ;AAAA,IAClB,QAAQ,QAAQ;AAAA,IAChB,iBAAiB,QAAQ;AAAA,IACzB,oBAAoB,QAAQ;AAAA,IAC5B,cAAc,QAAQ;AAAA,EACxB,CAAC;AACH;AAEA,eAAsB,eACpB,UACA,SAC2B;AAC3B,QAAM,OAAO,mBAAmB,QAAQ;AACxC,QAAM,CAAC,aAAa,SAAS,IAAI,MAAM,QAAQ,IAAI;AAAA,IACjD,gBAAgB,KAAK,YAAY;AAAA,IACjC,gBAAgB,KAAK,UAAU;AAAA,EACjC,CAAC;AACD,QAAM,EAAE,aAAa,KAAK,IAAI,iBAAiB,mBAAmB,WAAW,CAAC;AAC9E,8BAA4B,WAAW;AACvC,QAAM,mBAAmB,mBAAmB,SAAS;AACrD,QAAM,OAAO,kBAAkB,KAAK,cAAc,WAAW;AAC7D,QAAM,UAAU,QAAQ,WAAW,aAAa,IAAI;AACpD,QAAM,cAAc,KAAK,kBAAkB;AAAA,IACzC,oBAAoB,CAAC,QAAQ;AAAA,IAC7B,eAAe;AAAA,MACb,YAAY,CAAC,aAAa;AAAA,MAC1B,UAAU;AAAA,IACZ;AAAA,IACA,UAAU,KAAK;AAAA,IACf,mBAAmB,OAAO,KAAK,WAAW;AAAA,IAC1C,SAAS,qCAAqC,OAAO;AAAA,EACvD,CAAC;AACD,QAAM,aAAa,YAAY,OAAO,CAAC,eAAe,WAAW,aAAa,OAAO;AAErF,MAAI,WAAW,SAAS,GAAG;AACzB,UAAM,IAAI,UAAU,UAAU;AAAA,EAChC;AAEA,SAAO,iBAAiB,kBAAkB;AAAA,IACxC,QAAQ,QAAQ;AAAA,IAChB,gBAAgB,CAAC,WAAW;AAAA,IAC5B,UAAU,KAAK;AAAA,IACf,YAAY;AAAA,MACV;AAAA,MACA,UAAU,KAAK;AAAA,MACf,MAAM,KAAK;AAAA,MACX,SAAS,KAAK;AAAA,IAChB;AAAA,IACA;AAAA,IACA,UAAU,QAAQ;AAAA,IAClB,QAAQ,QAAQ;AAAA,IAChB,iBAAiB,QAAQ;AAAA,IACzB,oBAAoB,QAAQ;AAAA,IAC5B,cAAc,QAAQ;AAAA,EACxB,CAAC;AACH;AAEA,eAAe,gBAAgB,UAAmC;AAChE,MAAI;AACF,UAAM,QAAQ,MAAM,KAAK,QAAQ;AACjC,QAAI,CAAC,MAAM,OAAO,GAAG;AACnB,YAAM,IAAI,MAAM,sCAAsC,QAAQ,EAAE;AAAA,IAClE;AAEA,WAAO,MAAM,SAAS,UAAU,MAAM;AAAA,EACxC,SAAS,OAAO;AACd,QAAI,gBAAgB,OAAO,QAAQ,KAAK,gBAAgB,OAAO,SAAS,GAAG;AACzE,YAAM,IAAI,MAAM,2BAA2B,QAAQ,EAAE;AAAA,IACvD;AAEA,UAAM;AAAA,EACR;AACF;AAEA,SAAS,qBACP,UACA,QAKA;AACA,MAAI,gBAAgB,QAAQ,GAAG;AAC7B,UAAM,mBAAmB,mBAAmB,MAAM;AAClD,QAAI,iBAAiB,WAAW,GAAG;AACjC,YAAM,IAAI,MAAM,8CAA8C,QAAQ,EAAE;AAAA,IAC1E;AAEA,WAAO;AAAA,MACL;AAAA,MACA,aAAa,CAAC;AAAA,MACd,aAAa;AAAA,IACf;AAAA,EACF;AAEA,QAAM,EAAE,aAAa,KAAK,IAAI,iBAAiB,MAAM;AACrD,MAAI,OAAO,WAAW,KAAK,KAAK,KAAK,EAAE,WAAW,GAAG;AACnD,UAAM,IAAI,MAAM,8CAA8C,QAAQ,EAAE;AAAA,EAC1E;AAEA,QAAM,kBAAkB,OAAO,SAAS,KAAK;AAC7C,QAAM,EAAE,QAAQ,iBAAiB,YAAY,IAAI;AAAA,IAC/C;AAAA,IACA,gBAAgB,QAAQ,GAAG,eAAe,IAAI;AAAA,EAChD;AACA,SAAO;AAAA,IACL,kBACE,WAAW,OAAO,MAAM,GAAG,kBAAkB,WAAW,CAAC,IAAI,cAAc,eAAe;AAAA,IAC5F;AAAA,IACA,aAAa;AAAA,EACf;AACF;AAEA,SAAS,mBAAmB,UAAgE;AAC1F,QAAM,YAAY,QAAQ,QAAQ;AAClC,QAAM,WAAW,UAAU,WAAW,IAAI,WAAW,SAAS,MAAM,GAAG,CAAC,UAAU,MAAM;AAExF,MAAI,qBAAqB,SAAS,GAAG;AACnC,WAAO;AAAA,MACL,cAAc,GAAG,QAAQ;AAAA,MACzB,YAAY;AAAA,IACd;AAAA,EACF;AAEA,SAAO;AAAA,IACL,cAAc;AAAA,IACd,YAAY,GAAG,QAAQ;AAAA,EACzB;AACF;AAEA,SAAS,gBAAgB,UAA2B;AAClD,SAAO,qBAAqB,QAAQ,QAAQ,CAAC;AAC/C;AAEA,SAAS,qBAAqB,WAA4B;AACxD,SAAO,cAAc,aAAa,cAAc;AAClD;AAEA,eAAe,iBACb,kBACA,SAC2B;AAC3B,MAAI;AACF,WAAO,MAAM,IAAI,kBAAkB,OAAO;AAAA,EAC5C,SAAS,OAAO;AACd,QAAI,aAAa,KAAK,GAAG;AACvB,YAAM;AAAA,IACR;AAEA,WAAO;AAAA,MACL,GAAI,aAAa,KAAK,IAAI,EAAE,SAAS,KAAc,IAAI,CAAC;AAAA,MACxD;AAAA,MACA,IAAI;AAAA,IACN;AAAA,EACF;AACF;AAEA,SAAS,aAAa,OAAyB;AAC7C,SAAO,iBAAiB,SAAS,MAAM,SAAS;AAClD;AAEA,SAAS,aAAa,OAAyB;AAC7C,MAAI,iBAAiB,OAAO;AAC1B,WAAO,MAAM,SAAS;AAAA,EACxB;AAEA,SACE,OAAO,UAAU,YACjB,UAAU,QACV,OAAO,UAAU,eAAe,KAAK,OAAO,MAAM,KACjD,MAA6B,SAAS;AAE3C;AAEA,SAAS,iBAAiB,QAAgB,UAA2B;AACnE,SAAO,YAAY,QAAQ,QAAQ,EAAE,KAAK;AAAA,IACxC,CAAC,cAAc,UAAU,SAAS;AAAA,EACpC;AACF;AAEA,SAAS,qBAAqB,SAAyB,aAAsC;AAC3F,MAAI,CAAC,aAAa;AAChB,WAAO;AAAA,EACT;AAEA,MAAI,mBAAmB,KAAK;AAC1B,UAAMC,cAAa,IAAI,IAAI,OAAO;AAClC,IAAAA,YAAW,OAAO,SAAS;AAC3B,WAAOA;AAAA,EACT;AAEA,QAAM,aAA4C,CAAC;AAEnD,aAAW,CAAC,YAAY,aAAa,KAAK,OAAO,QAAQ,OAAO,GAAG;AACjE,QAAI,eAAe,WAAW;AAC5B,iBAAW,UAAU,IAAI;AAAA,IAC3B;AAAA,EACF;AAEA,SAAO;AACT;AAEA,SAAS,mBAAmB,QAAwB;AAClD,SAAO,OAAO,WAAW,QAAQ,IAAI,OAAO,MAAM,CAAC,IAAI;AACzD;AAEA,SAAS,cAAc,QAAwB;AAC7C,MAAI,CAAC,OAAO,WAAW,IAAI,GAAG;AAC5B,WAAO;AAAA,EACT;AAEA,MAAI,MAAM;AACV,SAAO,MAAM,OAAO,UAAU,OAAO,GAAG,MAAM,QAAQ,OAAO,GAAG,MAAM,KAAM,QAAO;AACnF,SAAO,GAAG,IAAI,OAAO,GAAG,CAAC,GAAG,OAAO,MAAM,GAAG,CAAC;AAC/C;AAEA,SAAS,uBAAuB,aAA4C;AAC1E,MAAI,YAAY,WAAW,GAAG;AAC5B,WAAO;AAAA,EACT;AAEA,SAAO,YACJ;AAAA,IACC,CAAC,eACC,GAAG,WAAW,QAAQ,IAAI,WAAW,IAAI,IAAI,WAAW,MAAM,IAAI,WAAW,IAAI,IAAI,WAAW,OAAO;AAAA,EAC3G,EACC,KAAK,IAAI;AACd;;;ACpVO,SAAS,6BAA6B,QAAgB,MAAsC;AACjG,aAAW,aAAa,OAAO,MAAM;AACnC,QAAI,UAAU,SAAS,4BAA4B;AACjD,UAAI,SAAS,WAAW;AACtB,eAAO,UAAU;AAAA,MACnB;AAEA;AAAA,IACF;AAEA,QAAI,UAAU,SAAS,0BAA0B;AAC/C;AAAA,IACF;AAEA,UAAM,cAAc,UAAU;AAC9B,QAAI,YAAY,SAAS,SAAS;AAChC,YAAM,IAAI,MAAM,aAAa,IAAI,gCAAgC;AAAA,IACnE;AAEA,QAAI,YAAY,aAAa,WAAW,GAAG;AACzC,YAAM,IAAI,MAAM,kEAAkE;AAAA,IACpF;AAEA,UAAM,aAAa,YAAY,aAAa,CAAC;AAC7C,QAAI,WAAW,GAAG,SAAS,cAAc;AACvC,YAAM,IAAI,MAAM,yDAAyD;AAAA,IAC3E;AAEA,QAAI,WAAW,GAAG,SAAS,MAAM;AAC/B;AAAA,IACF;AAEA,QAAI,WAAW,SAAS,QAAW;AACjC,YAAM,IAAI,MAAM,mBAAmB,IAAI,6BAA6B;AAAA,IACtE;AAEA,WAAO,WAAW;AAAA,EACpB;AAEA,SAAO;AACT;;;AC1CA,SAAS,aAAa,cAAc;AAW7B,SAAS,eAAe,UAA6B,CAAC,GAK3D;AACA,QAAM,yBAAyB,QAAQ,WAAW,UAAa,QAAQ,SAAS;AAChF,QAAM,SACJ,QAAQ,WACP,QAAQ,SAAS,SAAY,MAAM,KAAK,OAAO,IAAI,mBAAmB,QAAQ,IAAI,EAAE;AACvF,QAAM,MAAM,QAAQ,QAAQ,MAAM,KAAK,IAAI;AAC3C,QAAM,SAAS,QAAQ;AAEvB,iBAAe,MAAM,IAA2B;AAC9C,qBAAiB,EAAE;AAEnB,WAAO,MAAM,IAAI,QAAc,CAAC,SAAS,WAAW;AAClD,UAAI,QAAQ,YAAY,MAAM;AAC5B,eAAO,sBAAsB,CAAC;AAC9B;AAAA,MACF;AAEA,YAAM,QAAQ,YAAY,IAAI;AAC9B,UAAI,UAAU,WAAW,cAAc,EAAE;AAEzC,eAAS,UAAgB;AACvB,qBAAa,OAAO;AACpB,gBAAQ,oBAAoB,SAAS,WAAW;AAAA,MAClD;AAEA,eAAS,eAAqB;AAC5B,cAAM,cAAc,MAAM,YAAY,IAAI,IAAI;AAC9C,YAAI,cAAc,GAAG;AACnB,oBAAU,WAAW,cAAc,WAAW;AAC9C;AAAA,QACF;AAEA,gBAAQ;AACR,gBAAQ;AAAA,MACV;AAEA,eAAS,cAAoB;AAC3B,gBAAQ;AACR,eAAO,sBAAsB,CAAC;AAAA,MAChC;AAEA,cAAQ,iBAAiB,SAAS,aAAa,EAAE,MAAM,KAAK,CAAC;AAAA,IAC/D,CAAC;AAAA,EACH;AAEA,SAAO;AAAA,IACL;AAAA,IACA;AAAA,IACA;AAAA,IACA,MAAM,yBAAyB,MAAM,iBAAiB,MAAM,IAAI,MAAM,OAAO,WAAW;AAAA,EAC1F;AACF;AAEA,SAAS,iBAAiB,QAA8B;AACtD,QAAM,QAAQ,MAAM,KAAK,EAAE,QAAQ,GAAG,GAAG,MAAM,KAAK,MAAM,eAAe,OAAO,CAAC,IAAI,GAAG,CAAC;AACzF,QAAM,CAAC,IAAK,MAAM,CAAC,IAAI,KAAQ;AAC/B,QAAM,CAAC,IAAK,MAAM,CAAC,IAAI,KAAQ;AAC/B,QAAM,MAAM,MAAM,IAAI,CAAC,SAAS,KAAK,SAAS,EAAE,EAAE,SAAS,GAAG,GAAG,CAAC,EAAE,KAAK,EAAE;AAE3E,SAAO;AAAA,IACL,IAAI,MAAM,GAAG,CAAC;AAAA,IACd,IAAI,MAAM,GAAG,EAAE;AAAA,IACf,IAAI,MAAM,IAAI,EAAE;AAAA,IAChB,IAAI,MAAM,IAAI,EAAE;AAAA,IAChB,IAAI,MAAM,EAAE;AAAA,EACd,EAAE,KAAK,GAAG;AACZ;AAEA,SAAS,eAAe,OAAuB;AAC7C,MAAI,OAAO,SAAS,KAAK,KAAK,SAAS,KAAK,QAAQ,GAAG;AACrD,WAAO;AAAA,EACT;AAEA,QAAM,IAAI,WAAW,2DAA2D;AAClF;AAEA,SAAS,iBAAiB,IAAkB;AAC1C,MAAI,OAAO,SAAS,EAAE,KAAK,MAAM,GAAG;AAClC;AAAA,EACF;AAEA,QAAM,IAAI,WAAW,kEAAkE;AACzF;AAEA,SAAS,wBAA+B;AACtC,SAAO,IAAI,MAAM,qBAAqB;AACxC;;;AC7FO,IAAMC,eAA6D;AACnE,IAAMC,WAGI;AAKV,IAAMC,uBAGT;",
+  "names": ["parse", "rawModules", "parseModule", "restore", "deepCopyFromSandbox"]
+}

package/dist/safe-js/interp/arguments.d.ts

@@ -0,0 +1,10 @@
+import type { SandboxObject, SandboxValue } from "./values.js";
+declare const sandboxArgumentsBrand: unique symbol;
+export type SandboxArguments = SandboxObject & {
+    readonly [sandboxArgumentsBrand]: true;
+};
+export declare function createSandboxArguments(values: readonly SandboxValue[]): SandboxArguments;
+export declare function isSandboxArguments(value: unknown): value is SandboxArguments;
+export declare function getSandboxArgumentEntries(value: SandboxObject): Array<[string, SandboxValue]>;
+export declare function copySandboxArgumentProperties(source: SandboxObject, target: object, copyValue: (value: SandboxValue, key: string) => unknown): void;
+export {};

package/dist/safe-js/interp/async.d.ts

@@ -0,0 +1,56 @@
+import type { ArrowFunctionExpression, AwaitExpression, BlockStatement, FunctionDeclaration, FunctionExpression, ParseResult, SourceSpan } from "../parse.js";
+import { type GeneratorCompletion } from "./generator.js";
+import { type OtelSpan } from "../observability/otel.js";
+import type { Budget } from "./budget.js";
+import type { EvaluationResult } from "./exceptions.js";
+import type { InterpreterError, InterpreterSnapshot, LoopIterationSnapshot } from "./interpreter.js";
+import { CompileScope } from "./regex/compile-guard.js";
+import type { Scope } from "./scope.js";
+import { type SandboxValue } from "./values.js";
+export type InterpreterYieldPoint = {
+    kind: "await" | "generator-yield" | "loop-iteration";
+    nodeId?: number;
+    otelSpan?: OtelSpan;
+    replayState?: unknown;
+    snapshot: () => InterpreterSnapshot;
+    span: SourceSpan;
+};
+type ResumeBreakpoint = Omit<InterpreterYieldPoint, "snapshot">;
+export type AsyncInterpreterError = InterpreterError;
+export type AsyncEvaluationResult = EvaluationResult<AsyncInterpreterError>;
+export type AsyncEvaluationContext = {
+    compilation?: CompileScope;
+    activeLoopIterations: Map<number, LoopIterationSnapshot>;
+    budget: Budget;
+    callStack: string[];
+    onYield?: (yieldPoint: InterpreterYieldPoint) => void;
+    onSuspend?: () => void;
+    captureReplayState?: () => unknown;
+    rootNode?: ParseResult;
+    functionBody?: BlockStatement;
+    restoredLoopIterations: Map<number, LoopIterationSnapshot>;
+    resumeTarget?: {
+        nodeId?: number;
+    };
+    scope: Scope;
+    signal?: AbortSignal;
+    snapshot?: (scope: Scope) => InterpreterSnapshot;
+    stats: {
+        currentDataSize: number;
+        nodeVisits: number;
+        peakDataSize: number;
+    };
+    generatorYield?: (value?: SandboxValue, yieldNodeId?: number) => Promise<GeneratorCompletion>;
+    generatorResume?: {
+        sent: GeneratorCompletion[];
+        yieldNodeId: number;
+    };
+};
+export type EvaluateAsyncNode = (node: ParseResult, context: AsyncEvaluationContext) => Promise<AsyncEvaluationResult>;
+export declare function emitResumeBreakpoint(context: AsyncEvaluationContext, breakpoint: ResumeBreakpoint): void;
+export declare function evaluateArrowFunctionExpression(node: ArrowFunctionExpression, context: AsyncEvaluationContext, evaluateNode: EvaluateAsyncNode): Promise<AsyncEvaluationResult>;
+export declare function evaluateFunctionExpression(node: FunctionExpression, context: AsyncEvaluationContext, evaluateNode: EvaluateAsyncNode): Promise<AsyncEvaluationResult>;
+export declare function createInterpretedClosure(node: ArrowFunctionExpression | FunctionDeclaration | FunctionExpression, context: AsyncEvaluationContext, evaluateNode: EvaluateAsyncNode): import("./values.js").SandboxClosure;
+export declare function evaluateAwaitExpression(node: AwaitExpression, context: AsyncEvaluationContext, evaluateNode: EvaluateAsyncNode): Promise<AsyncEvaluationResult>;
+export declare function normalizeClosureResult(result: SandboxValue | Promise<SandboxValue> | PromiseLike<SandboxValue>, budget?: Budget): SandboxValue;
+export {};