@poe-platform/safe-js 0.1.720 → 0.1.721

package/dist/safe-js/chunks/{chunk-NEJ44T4Y.js → chunk-IS7YUCOF.js}

@@ -1,6 +1,6 @@
 import {
   deepCopyToSandbox
-} from "./chunk-KP6I45ET.js";
+} from "./chunk-DNA7BMBY.js";
 
 // packages/safe-js/src/modules/harness.ts
 function makeHarnessModule(frontmatter, meta) {
@@ -52,4 +52,4 @@ ${prompt}`;
 export {
   makeHarnessModule
 };
-//# sourceMappingURL=chunk-NEJ44T4Y.js.map
+//# sourceMappingURL=chunk-IS7YUCOF.js.map

package/dist/safe-js/chunks/{chunk-BGJXQN4A.js → chunk-JNLY7IMV.js}

@@ -7,7 +7,7 @@ import {
   validateMigrationReconciliation,
   validateMigrationSemantics,
   validateSnapshotMigration
-} from "./chunk-U6KZ2DQ2.js";
+} from "./chunk-GMPZBMPA.js";
 import {
   DUMP_FORMAT_VERSION,
   EXECUTION_SEMANTICS,
@@ -17,10 +17,10 @@ import {
   serializeSafeJSSnapshot,
   validateDumpEnvelope,
   validateSnapshotData
-} from "./chunk-KP6I45ET.js";
+} from "./chunk-DNA7BMBY.js";
 import {
   parseModule
-} from "./chunk-IDQ67DY2.js";
+} from "./chunk-ILYJBA2D.js";
 
 // packages/safe-js/src/migration-file.ts
 import { randomUUID } from "node:crypto";
@@ -179,4 +179,4 @@ export {
   migrateSnapshot,
   migrateSnapshotFile
 };
-//# sourceMappingURL=chunk-BGJXQN4A.js.map
+//# sourceMappingURL=chunk-JNLY7IMV.js.map

package/dist/safe-js/chunks/{chunk-RML35GIF.js → chunk-LPBTSTDG.js}

@@ -6,10 +6,10 @@ import {
 import {
   declareHostOperation,
   runResources
-} from "./chunk-KP6I45ET.js";
+} from "./chunk-DNA7BMBY.js";
 import {
   hostErrorData
-} from "./chunk-IDQ67DY2.js";
+} from "./chunk-ILYJBA2D.js";
 
 // packages/safe-js/src/modules/mcp.ts
 var DEFAULT_TOOL_BATCH_CONCURRENCY = 4;
@@ -402,4 +402,4 @@ function isPlainObjectRecord(value) {
 export {
   makeMcpModule
 };
-//# sourceMappingURL=chunk-RML35GIF.js.map
+//# sourceMappingURL=chunk-LPBTSTDG.js.map

package/dist/safe-js/chunks/{chunk-KK5NCR5R.js → chunk-Q7B6JIMI.js}

@@ -1,10 +1,10 @@
 import {
   restore
-} from "./chunk-NJM2Q74Z.js";
+} from "./chunk-A4L72WXV.js";
 import {
   attachDumpController,
   createDumpController
-} from "./chunk-A7CADQAD.js";
+} from "./chunk-BEXRQET4.js";
 import {
   getOwnErrorCode,
   hasOwnErrorCode
@@ -12,7 +12,7 @@ import {
 import {
   hashParsedAst,
   hashSource
-} from "./chunk-U6KZ2DQ2.js";
+} from "./chunk-GMPZBMPA.js";
 import {
   DUMP_FORMAT_VERSION,
   EXECUTION_SEMANTICS,
@@ -21,6 +21,9 @@ import {
   PromiseReplay,
   SandboxJobQueue,
   Scope,
+  arrayBufferDetached,
+  arrayBufferLength,
+  arrayBufferOptions,
   attachExecutionControl,
   attachSourceLoader,
   awaitSandboxValue,
@@ -30,6 +33,7 @@ import {
   consumeSettledHostCall,
   copyHostValueToSandbox,
   createBuiltinBindings,
+  createEvalSource,
   createGuestReference,
   createHostCallbackContext,
   createLiveHostObject,
@@ -49,10 +53,12 @@ import {
   enterSnapshotRun,
   exportHostCapability,
   getExtensionSetup,
+  getRealmGlobalObject,
   guestProxyStates,
   inMemoryRunSnapshots,
   interpret,
   invokeBuiltinClosure,
+  isSandboxArrayBuffer,
   isSandboxClosure,
   isSandboxCollectionIterator,
   isSandboxMap,
@@ -75,6 +81,7 @@ import {
   releaseObjectPrototype,
   resolveModuleImports,
   resolveModuleNamespace,
+  retainValues,
   revokeGuestCallback,
   revokeGuestReference,
   revokeHostObject,
@@ -90,7 +97,7 @@ import {
   withSandboxPromiseRejectionTracker,
   wrapCallerInjectedBindings,
   wrapCancelableBindings
-} from "./chunk-KP6I45ET.js";
+} from "./chunk-DNA7BMBY.js";
 import {
   Budget,
   CompileScope,
@@ -105,7 +112,7 @@ import {
   parseSourceModule,
   replaceErrorStack,
   safeAddEvent
-} from "./chunk-IDQ67DY2.js";
+} from "./chunk-ILYJBA2D.js";
 
 // packages/safe-js/src/realm.ts
 import { AsyncLocalStorage } from "node:async_hooks";
@@ -491,6 +498,8 @@ function createReplayableRandom(options = {}) {
 var RealmState = class {
   constructor(options, queue = new SandboxJobQueue()) {
     this.options = options;
+    if (options.classicScripts !== void 0 && typeof options.classicScripts !== "boolean")
+      throw new TypeError("Realm classicScripts must be a boolean.");
     this.queue = queue;
     const limitInput = readDataRecord(options.limits ?? {}, "Realm limits");
     this.limits = {
@@ -524,6 +533,8 @@ var RealmState = class {
     if (this.extensions.length > this.limits.extensions)
       throw new RangeError("Realm extension limit exceeded.");
     this.globals = readDataRecord(options.bindings ?? {}, "Realm bindings");
+    if (options.classicScripts && ["this", "globalThis"].some((name) => Object.hasOwn(this.globals, name)))
+      throw new TypeError("Classic Script receiver bindings cannot be replaced.");
     this.modules = readModules(options.modules);
     const grants = new Set(readStringList(options.grants ?? [], "Realm grants"));
     for (const extension of this.extensions) getExtensionSetup(extension);
@@ -536,7 +547,7 @@ var RealmState = class {
       this.consoleExtension = extensionName;
     }
     this.budget = options.budget ?? new Budget({ maxCallDepth: 1e3 });
-    this.lease = this.budget.acquireCompileOwner(true);
+    this.lease = this.budget.acquireRealmOwner();
     this.compilation = new CompileScope(this.lease.owner);
     this.bridge = {
       owner: this,
@@ -570,6 +581,8 @@ var RealmState = class {
       );
       for (const extension of this.extensions) {
         const manifest = extension.manifest;
+        if (options.classicScripts && manifest.globals?.some((name) => name === "this" || name === "globalThis"))
+          throw new TypeError("Classic Script receiver bindings cannot be replaced.");
         if (names.has(manifest.name))
           throw new TypeError(`Duplicate extension '${manifest.name}'.`);
         names.add(manifest.name);
@@ -676,7 +689,7 @@ var RealmState = class {
       }
       if (captured.length > 0)
         this.budget.reconcileDataUsage(
-          measureSandboxData([...this.scope?.retainedDataRoots() ?? [], ...this.retainedRoots()])
+          measureSandboxData([...this.scope?.retainedDataRoots() ?? [], ...this.retainedRoots(), ...this.budget.retainedValues()])
         );
       return { args: values, rollback };
     } catch (error) {
@@ -685,6 +698,40 @@ var RealmState = class {
       throw error;
     }
   };
+  createArrayBufferReference = (buffer) => {
+    this.assertOpen();
+    if (!isSandboxArrayBuffer(buffer) || arrayBufferDetached(buffer) || arrayBufferOptions(buffer) !== void 0 || Reflect.ownKeys(buffer).length !== 0)
+      throw new TypeError(
+        "Live buffer references require a fixed, attached, plain ArrayBuffer without metadata."
+      );
+    let reference;
+    try {
+      this.budget.allocateArrayLength(arrayBufferLength(buffer));
+      this.checkCollection(
+        this.guestReferences.size + 1,
+        this.limits.guestReferences,
+        "guest reference"
+      );
+      const root = [buffer];
+      reference = createGuestReference(root, this, this.assertOpen);
+      this.guestReferences.set(reference, root);
+      this.budget.reconcileDataUsage(
+        measureSandboxData([
+          ...this.scope?.retainedDataRoots() ?? [],
+          ...this.retainedRoots(),
+          ...this.budget.retainedValues()
+        ])
+      );
+      return reference;
+    } catch (error) {
+      if (reference !== void 0) {
+        revokeGuestReference(reference, this);
+        this.guestReferences.delete(reference);
+      }
+      if (error instanceof SandboxError) this.poison(error);
+      throw error;
+    }
+  };
   releaseGuestReference = (reference) => {
     readGuestReference(reference, this);
     revokeGuestReference(reference, this);
@@ -880,7 +927,7 @@ var RealmState = class {
     });
     try {
       this.budget.reconcileDataUsage(
-        measureSandboxData([...this.scope?.retainedDataRoots() ?? [], ...this.retainedRoots()])
+        measureSandboxData([...this.scope?.retainedDataRoots() ?? [], ...this.retainedRoots(), ...this.budget.retainedValues()])
       );
     } catch (error) {
       this.poison(error);
@@ -965,7 +1012,7 @@ var RealmState = class {
           this.resources,
           () => withCancellationSignal(
             this.controller.signal,
-            () => active && this.phase.getStore()?.active ? runAsyncPrefix(invoke) : this.queue.run(invoke)
+            () => active && this.phase.getStore()?.active ? runAsyncPrefix(invoke, completeSynchronous === void 0 && this.phase.getStore()?.extension !== void 0) : this.queue.run(invoke)
           )
         )
       );
@@ -997,6 +1044,12 @@ var RealmState = class {
         },
         chargeWork: this.chargeWork,
         createHostObject: this.createHostObject,
+        createArrayBufferReference: (buffer) => {
+          this.assertOpen();
+          if (!extension.manifest.capabilities?.includes("array-buffer:share"))
+            throw new TypeError("Live buffers require the array-buffer:share grant.");
+          return this.createArrayBufferReference(buffer);
+        },
         startCallback: this.startCallback,
         invokeCallback: this.invokeCallback,
         releaseCallback: this.releaseCallback,
@@ -1081,8 +1134,10 @@ var RealmState = class {
     const bindings = wrapCallerInjectedBindings(this.globals, this.bridgeOptions());
     this.scope = new Scope(this.builtinBindings, void 0, void 0, { chargeData: false }).child(
       bindings,
-      { functionBoundary: true }
+      this.options.classicScripts ? { globalEnvironment: true } : { functionBoundary: true }
     );
+    if (this.options.classicScripts)
+      this.scope.declare("this", "const", getRealmGlobalObject(this.budget));
   }
   async evaluateRaw(source, filename = "<realm>", nested = false, sourceType) {
     this.assertOpen();
@@ -1101,46 +1156,54 @@ var RealmState = class {
         surfaceUnhandledThrows: true
       });
       const before = this.sourceGraph.stats.nodeVisits;
-      const namespace = await this.sourceGraph.evaluateSource({ id: filename, source }, (module2) => {
-        this.sourceModuleHash = hashParsedAst(module2);
+      const namespace = await this.sourceGraph.evaluateSource({ id: filename, source }, (module) => {
+        this.sourceModuleHash = hashParsedAst(module);
       });
       await this.sourceGraph.settle();
       return { ok: true, returnValue: namespace, snapshot: { bindings: {} }, stats: { nodeVisits: this.sourceGraph.stats.nodeVisits - before, currentDataSize: this.budget.currentDataSize, peakDataSize: this.budget.peakDataSize } };
     }
-    const module = parseExecutableModule(source, filename, this.lease.owner);
-    this.initialize();
-    const moduleEnvironment = createModuleEnvironment(this.modules, { ...this.bridgeOptions(), wrappedModules: this.convertedModules });
-    const imports = resolveModuleImports(module, this.modules, {
-      environment: moduleEnvironment,
-      ...this.bridgeOptions(),
-      wrappedModules: this.convertedModules
-    });
-    this.scope.moduleEnvironment = moduleEnvironment;
-    for (const [name, value] of Object.entries(imports)) {
-      const binding = this.scope.lookup(name);
-      if (!binding.found) this.scope.declare(name, "const", value);
-      else if (binding.value !== value) throw new TypeError(`Conflicting import '${name}'.`);
-    }
-    const result = await interpret(
-      {
-        type: "BlockStatement",
-        body: module.body.filter((statement) => statement.type !== "ImportDeclaration"),
-        span: module.span
-      },
-      {
-        scope: this.scope,
-        useScopeDirectly: true,
-        budget: this.budget,
-        compilation: this.compilation,
-        signal: this.controller.signal,
-        surfaceUnhandledThrows: true,
-        jobs: this.queue,
-        nested,
-        assertActive: this.assertOpen
+    const script = this.options.classicScripts ? createEvalSource(source, {}, this.lease.owner, filename) : void 0;
+    const releaseSource = script ? retainValues(this.budget, () => [script.source]) : void 0;
+    try {
+      if (script) this.budget.chargeDataUsage(measureSandboxData([script.source]));
+      const module = script?.node ?? parseExecutableModule(source, filename, this.lease.owner);
+      this.initialize();
+      const moduleEnvironment = createModuleEnvironment(this.modules, { ...this.bridgeOptions(), wrappedModules: this.convertedModules });
+      const imports = script ? {} : resolveModuleImports(module, this.modules, {
+        environment: moduleEnvironment,
+        ...this.bridgeOptions(),
+        wrappedModules: this.convertedModules
+      });
+      this.scope.moduleEnvironment = moduleEnvironment;
+      for (const [name, value] of Object.entries(imports)) {
+        const binding = this.scope.lookup(name);
+        if (!binding.found) this.scope.declare(name, "const", value);
+        else if (binding.value !== value) throw new TypeError(`Conflicting import '${name}'.`);
       }
-    );
-    this.assertOpen();
-    return result;
+      const result = await interpret(
+        {
+          type: "BlockStatement",
+          body: module.body.filter((statement) => statement.type !== "ImportDeclaration"),
+          span: module.span
+        },
+        {
+          ...script ? { script: { strict: script.strict } } : {},
+          scope: this.scope,
+          useScopeDirectly: true,
+          budget: this.budget,
+          compilation: this.compilation,
+          signal: this.controller.signal,
+          surfaceUnhandledThrows: true,
+          jobs: this.queue,
+          nested,
+          assertActive: this.assertOpen
+        }
+      );
+      this.assertOpen();
+      return result;
+    } finally {
+      releaseSource?.();
+    }
   }
   evaluateNested = async (source, extension) => {
     this.assertOpen();
@@ -1352,6 +1415,7 @@ function readRealmOptions(value, oneShot = false) {
     "clock",
     "limits"
   ]);
+  if (!oneShot) supported.add("classicScripts");
   for (const [key, entry] of Object.entries(options)) {
     if (supported.has(key) || oneShot && (key === "filename" || key === "sourceType" || entry === void 0)) continue;
     throw new TypeError(`Unsupported ${oneShot ? "extension-run" : "realm"} option '${key}'.`);
@@ -2447,4 +2511,4 @@ export {
   UnhandledRejectionError,
   run
 };
-//# sourceMappingURL=chunk-KK5NCR5R.js.map
+//# sourceMappingURL=chunk-Q7B6JIMI.js.map