@poe-platform/safe-js 0.1.722 → 0.1.724

package/README.md

@@ -521,7 +521,7 @@ Factories return exports to register in `modules`; calling a factory alone does
 | --- | --- |
 | `makeAgentModule(spawnAgent, options?)` | Inject the agent runner. Options: `defaultRetry`, `onEvent`, `otelSink`. Exposes `spawn`, `spawn.retry`, and `spawn.parallel`; call options follow this table. |
 | `makeMcpModule(options)` | Required `servers` map: stdio `{ command, args?, cwd?, env? }` or HTTP `{ url, headers? }`. Options: `requestTimeoutMs` (30,000), `closeTimeoutMs` (1,000), `maxToolPages` (100), `signal`, and injected `fetch`/`spawn`. Named clients expose `tools`, `tool`, `toolBatch`, and `close`; close managed clients when finished. A custom connector function is also accepted. |
-| `makeFsModule(options?)` | Node-backed `{ root?, fs? }`, or shared-filesystem `{ adapter, root?, cwd?, signal? }`; do not combine `fs` and `adapter`. Node access without `root` is unconfined. Rooted calls sharing the same adapter or Node implementation are serialized through path checks and backend completion to prevent guest namespace races. External host mutations or distinct adapters over the same storage require independent backend confinement. With an adapter, `root` confines access and `cwd` selects the virtual relative-path base; without `root`, explicit `cwd` also confines access. Omitting both uses virtual `/`. Read text with `readFile(path, "utf8")`; see the [module methods](src/modules/fs.ts) and [filesystem package](../safe-fs/README.md). |
+| `makeFsModule(options?)` | Node-backed `{ root?, fs? }`, or shared-filesystem `{ adapter, root?, cwd?, signal? }`; do not combine `fs` and `adapter`. Node access without `root` is unconfined. Rooted calls sharing the same adapter or Node implementation are serialized through path checks and backend completion to prevent guest namespace races. External host mutations or distinct adapters over the same storage require independent backend confinement. With an adapter, `root` confines access and `cwd` selects the virtual relative-path base; without `root`, explicit `cwd` also confines access. Omitting both uses virtual `/`. Adapter text reads pass a byte cap derived conservatively from the guest string and remaining data limits to the backend before decoding. Each read is also capped at 419,430 input bytes. A shared 16 MiB host read allowance reserves ten bytes per input byte for collection, copies, encoding expansion and admission; concurrent reads that exceed it reject, and reservations release after the underlying read settles and decoding finishes, including when cancellation rejects the caller earlier. Native Node/injected `fs` implementations retain their own read behavior. Read text with `readFile(path, "utf8")`; see the [module methods](src/modules/fs.ts) and [filesystem package](../safe-fs/README.md). |
 | `makeEnvModule(namesOrOptions)` | Allowed-name array or `{ allow, values? }`; exposes `get(name)`. `parseEnvConfig(json)` accepts the object form. |
 | `makeTimeModule(options?)` | `now`, `random`, `seed`, `signal`; exposes `now`, `random`, `sleep`, `uuid`. Defaults to host time/randomness; `seed` makes the random generator deterministic, and explicit `random` takes precedence. |
 | `makeLogModule(sink)` | Sends timestamped `info`, `error`, and `event` entries to your callback. |

package/dist/safe-js/chunks/{chunk-K3ZRBAG5.js → chunk-2DISWAVU.js}

@@ -2,14 +2,14 @@ import {
   HostCallJournal,
   decodeReplayData,
   validateSnapshotData
-} from "./chunk-BNIEPGDU.js";
+} from "./chunk-ZHJPXLUJ.js";
 import {
   CompileScope,
   SandboxError,
   functionSources,
   parse,
   parseModule
-} from "./chunk-RYVHEOHM.js";
+} from "./chunk-KOO6YGQG.js";
 
 // packages/safe-js/src/parse/hash.ts
 var FNV_OFFSET_BASIS = 2166136261;
@@ -219,4 +219,4 @@ export {
   validateMigrationReconciliation,
   validateSnapshotMigration
 };
-//# sourceMappingURL=chunk-K3ZRBAG5.js.map
+//# sourceMappingURL=chunk-2DISWAVU.js.map

package/dist/safe-js/chunks/{chunk-EH5A2EQI.js → chunk-5M2P3GUC.js}

@@ -1,10 +1,10 @@
 import {
   restore
-} from "./chunk-7SBQ7WTV.js";
+} from "./chunk-TMRO2MK6.js";
 import {
   attachDumpController,
   createDumpController
-} from "./chunk-S2GFVXSI.js";
+} from "./chunk-WYY65M7Z.js";
 import {
   getOwnErrorCode,
   hasOwnErrorCode
@@ -12,7 +12,7 @@ import {
 import {
   hashParsedAst,
   hashSource
-} from "./chunk-K3ZRBAG5.js";
+} from "./chunk-2DISWAVU.js";
 import {
   DUMP_FORMAT_VERSION,
   EXECUTION_SEMANTICS,
@@ -100,7 +100,7 @@ import {
   withSandboxPromiseRejectionTracker,
   wrapCallerInjectedBindings,
   wrapCancelableBindings
-} from "./chunk-BNIEPGDU.js";
+} from "./chunk-ZHJPXLUJ.js";
 import {
   Budget,
   CompileScope,
@@ -115,7 +115,7 @@ import {
   parseSourceModule,
   replaceErrorStack,
   safeAddEvent
-} from "./chunk-RYVHEOHM.js";
+} from "./chunk-KOO6YGQG.js";
 
 // packages/safe-js/src/realm.ts
 import { AsyncLocalStorage as AsyncLocalStorage2 } from "node:async_hooks";
@@ -2798,4 +2798,4 @@ export {
   UnhandledRejectionError,
   run
 };
-//# sourceMappingURL=chunk-EH5A2EQI.js.map
+//# sourceMappingURL=chunk-5M2P3GUC.js.map

package/dist/safe-js/chunks/{chunk-WF7HYDJ4.js → chunk-6OE64YMG.js}

@@ -14,7 +14,7 @@ import {
   safeRecordException,
   safeStartSpan,
   splitSourceLines
-} from "./chunk-RYVHEOHM.js";
+} from "./chunk-KOO6YGQG.js";
 
 // packages/safe-js/src/error/format.ts
 var DEFAULT_MAX_MESSAGE_LENGTH = 1e4;
@@ -2841,4 +2841,4 @@ export {
   makeLogModule,
   makeMetricModule
 };
-//# sourceMappingURL=chunk-WF7HYDJ4.js.map
+//# sourceMappingURL=chunk-6OE64YMG.js.map

package/dist/safe-js/chunks/{chunk-D3GC5QPZ.js → chunk-BRBOVGNC.js}

@@ -9818,4 +9818,4 @@ CC-BY-4.0. See https://creativecommons.org/licenses/by/4.0/legalcode for
 the full license text.
 
 */
-//# sourceMappingURL=chunk-D3GC5QPZ.js.map
+//# sourceMappingURL=chunk-BRBOVGNC.js.map