@poe-platform/safe-js 0.1.724 → 0.1.725

package/README.md

@@ -324,6 +324,7 @@ Supply your own bounded `journal`; this does not add browser console behavior. W
 | `invokeCallback(callback, { thisValue?, args? })` | Invoke a captured guest function with the realm's state, cancellation and budgets. Same operation as on the realm. |
 | `startCallback(callback, { thisValue?, args? })` | Return separate `synchronous` and `result` promises for the same realm-owned invocation. Also available on the realm. |
 | `releaseCallback(callback)` | Revoke the callback and release its retained guest state. |
+| `retainCallbackArguments(operation)` | During setup, give each call independent callback wrappers in its copied arguments. Requires declared and granted `guest:retain`. The host owns these wrappers and releases each with `releaseCallback`; aliases within one call still share a wrapper. |
 | `retainGuestArguments(operation, from)` | During setup, opt an operation into opaque argument references starting at the zero-based index `from`. Requires declared and granted `guest:retain`. Earlier arguments keep normal conversion; live host methods preserve the declaration. |
 | `releaseGuestReference(reference)` | Revoke one reference and release its retained state. Also available on the realm. |
 | `nestedOperation(fn)` | During setup, mark a host operation authorized to run nested source. Requires declared and granted `source:nested`. |
@@ -333,6 +334,8 @@ Use `expandos: { maxKeys, maxKeyCodeUnits, assertActive? }` to allow guest assig
 
 For a timer-shaped `schedule(callback, delay, ...args)`, register `context.retainGuestArguments(schedule, 2)`. The host receives normal callback/delay values and opaque `GuestReference` handles for the remaining arguments. Pass those handles to `context.invokeCallback(callback, { args })` to recover the original guest objects and observe mutations made after scheduling. References also work as callback receivers and host return values, including cycles, closures, primitives and live host objects.
 
+Also register `context.retainCallbackArguments(schedule)` when each scheduled task owns its callback. Different calls then receive independently releasable wrappers, even for the same guest function; normal exports keep their shared callback identity. Release a timer's wrapper after cancellation or after all its invocation phases settle. Copied callbacks count against `limits.callbacks` and data budgets. Argument-copy failure or synchronous host failure revokes that call's owned wrappers; asynchronous operations must release theirs in host cleanup. Returning a wrapper to guest code preserves the original function identity and does not release it.
+
 For a trusted native buffer such as WebAssembly memory, use `context.createArrayBufferReference(buffer)` and return the handle from a host property or operation. Guest ArrayBuffer views then share its bytes with the host, preserving identity and bidirectional writes. Ordinary host buffers still copy. Shared, resizable, detached, subclassed and proxy buffers reject, as do buffers with own properties or symbols. After native memory growth detaches the old buffer, create a new reference to the new buffer; the old reference continues to denote the detached buffer.
 
 Release each reference when the host no longer needs it; returning it does not release it. Retained graphs count against data budgets and `limits.guestReferences`. Synchronous native failure releases references captured for that call; asynchronous operations must release theirs in host cleanup. Close revokes all remaining references. Handles cannot be inspected, used in another realm, or serialized into replay/error data. Unmarked operations still copy values.

package/dist/safe-js/chunks/{chunk-E5VQVLWF.js → chunk-6YSHQ5ET.js}

@@ -5,7 +5,7 @@ import {
   accessDeniedSystemError,
   declareBudgetedHostOperation,
   declareHostOperation
-} from "./chunk-ZHJPXLUJ.js";
+} from "./chunk-QU2F65UQ.js";
 
 // packages/safe-js/src/modules/fs.ts
 import { constants as nodeFsConstants } from "node:fs";
@@ -721,4 +721,4 @@ export {
   FS_OPTION_SURFACE,
   makeFsModule
 };
-//# sourceMappingURL=chunk-E5VQVLWF.js.map
+//# sourceMappingURL=chunk-6YSHQ5ET.js.map

package/dist/safe-js/chunks/{chunk-GM32LIKF.js → chunk-ECTNNLWN.js}

@@ -7,7 +7,7 @@ import {
   validateMigrationReconciliation,
   validateMigrationSemantics,
   validateSnapshotMigration
-} from "./chunk-2DISWAVU.js";
+} from "./chunk-Y7LSEUWV.js";
 import {
   DUMP_FORMAT_VERSION,
   EXECUTION_SEMANTICS,
@@ -17,7 +17,7 @@ import {
   serializeSafeJSSnapshot,
   validateDumpEnvelope,
   validateSnapshotData
-} from "./chunk-ZHJPXLUJ.js";
+} from "./chunk-QU2F65UQ.js";
 import {
   parseModule
 } from "./chunk-KOO6YGQG.js";
@@ -179,4 +179,4 @@ export {
   migrateSnapshot,
   migrateSnapshotFile
 };
-//# sourceMappingURL=chunk-GM32LIKF.js.map
+//# sourceMappingURL=chunk-ECTNNLWN.js.map

package/dist/safe-js/chunks/{chunk-WYY65M7Z.js → chunk-FYSWUSHN.js}

@@ -1,7 +1,7 @@
 import {
   SnapshotNotReadyError,
   serializeSafeJSSnapshot
-} from "./chunk-ZHJPXLUJ.js";
+} from "./chunk-QU2F65UQ.js";
 import {
   SandboxError
 } from "./chunk-KOO6YGQG.js";
@@ -195,4 +195,4 @@ export {
   dumpCurrent,
   serializeRunSnapshot
 };
-//# sourceMappingURL=chunk-WYY65M7Z.js.map
+//# sourceMappingURL=chunk-FYSWUSHN.js.map

package/dist/safe-js/chunks/{chunk-CSRNI5HI.js → chunk-K6F5QLZQ.js}

@@ -6,7 +6,7 @@ import {
 import {
   declareHostOperation,
   runResources
-} from "./chunk-ZHJPXLUJ.js";
+} from "./chunk-QU2F65UQ.js";
 import {
   hostErrorData
 } from "./chunk-KOO6YGQG.js";
@@ -402,4 +402,4 @@ function isPlainObjectRecord(value) {
 export {
   makeMcpModule
 };
-//# sourceMappingURL=chunk-CSRNI5HI.js.map
+//# sourceMappingURL=chunk-K6F5QLZQ.js.map

package/dist/safe-js/chunks/{chunk-GYT2ECWI.js → chunk-O2CPPE6M.js}

@@ -1,6 +1,6 @@
 import {
   deepCopyToSandbox
-} from "./chunk-ZHJPXLUJ.js";
+} from "./chunk-QU2F65UQ.js";
 
 // packages/safe-js/src/modules/harness.ts
 function makeHarnessModule(frontmatter, meta) {
@@ -52,4 +52,4 @@ ${prompt}`;
 export {
   makeHarnessModule
 };
-//# sourceMappingURL=chunk-GYT2ECWI.js.map
+//# sourceMappingURL=chunk-O2CPPE6M.js.map

package/dist/safe-js/chunks/{chunk-5M2P3GUC.js → chunk-PKRGP34X.js}

@@ -1,10 +1,10 @@
 import {
   restore
-} from "./chunk-TMRO2MK6.js";
+} from "./chunk-V2ESZF34.js";
 import {
   attachDumpController,
   createDumpController
-} from "./chunk-WYY65M7Z.js";
+} from "./chunk-FYSWUSHN.js";
 import {
   getOwnErrorCode,
   hasOwnErrorCode
@@ -12,7 +12,7 @@ import {
 import {
   hashParsedAst,
   hashSource
-} from "./chunk-2DISWAVU.js";
+} from "./chunk-Y7LSEUWV.js";
 import {
   DUMP_FORMAT_VERSION,
   EXECUTION_SEMANTICS,
@@ -100,7 +100,7 @@ import {
   withSandboxPromiseRejectionTracker,
   wrapCallerInjectedBindings,
   wrapCancelableBindings
-} from "./chunk-ZHJPXLUJ.js";
+} from "./chunk-QU2F65UQ.js";
 import {
   Budget,
   CompileScope,
@@ -751,6 +751,7 @@ var RealmState = class {
   guestReferences = /* @__PURE__ */ new Map();
   retainedOperations = /* @__PURE__ */ new WeakMap();
   nestedOperations = /* @__PURE__ */ new WeakMap();
+  callbackOperations = /* @__PURE__ */ new WeakMap();
   convertedModules = /* @__PURE__ */ new Map();
   nativeConversions = { seen: /* @__PURE__ */ new WeakMap() };
   modules;
@@ -784,15 +785,27 @@ var RealmState = class {
   };
   captureArguments = (operation, args, copy) => {
     const from = this.retainedOperations.get(operation)?.from ?? args.length;
-    const values = copy(args.slice(0, from));
+    const owned = this.callbackOperations.has(operation) ? /* @__PURE__ */ new Map() : void 0;
     const captured = [];
     const rollback = () => {
       for (const reference of captured) {
         revokeGuestReference(reference, this);
         this.guestReferences.delete(reference);
       }
+      for (const callback of owned?.values() ?? []) {
+        revokeGuestCallback(callback, this);
+        this.callbacks.delete(callback);
+      }
     };
     try {
+      const values = copy(args.slice(0, from), owned === void 0 ? void 0 : (closure) => {
+        let callback = owned.get(closure);
+        if (callback === void 0) {
+          callback = this.wrapCallback(closure, true);
+          owned.set(closure, callback);
+        }
+        return callback;
+      });
       for (const value of args.slice(from)) {
         this.checkCollection(
           this.guestReferences.size + 1,
@@ -1053,9 +1066,9 @@ var RealmState = class {
     }
     return object;
   };
-  wrapCallback = (closure) => {
+  wrapCallback = (closure, owned = false) => {
     this.assertOpen();
-    const existing = this.callbackCache.get(closure);
+    const existing = owned ? void 0 : this.callbackCache.get(closure);
     if (existing !== void 0 && this.callbacks.has(existing)) return existing;
     this.checkCollection(this.callbacks.size + 1, this.limits.callbacks, "callback");
     const invokeCallback = this.invokeCallback;
@@ -1063,7 +1076,7 @@ var RealmState = class {
       return invokeCallback(callback, { args, thisValue: this });
     };
     this.callbacks.set(callback, closure);
-    this.callbackCache.set(closure, callback);
+    if (!owned) this.callbackCache.set(closure, callback);
     registerGuestCallback(callback, {
       owner: this,
       closure,
@@ -1221,6 +1234,20 @@ var RealmState = class {
         invokeCallback: this.invokeCallback,
         releaseCallback: this.releaseCallback,
         releaseGuestReference: this.releaseGuestReference,
+        retainCallbackArguments: (operation) => {
+          this.assertOpen();
+          if (!extension.manifest.capabilities?.includes("guest:retain"))
+            throw new TypeError("Retaining callbacks requires the guest:retain grant.");
+          if (typeof operation !== "function")
+            throw new TypeError("Retained callback operation must be a function.");
+          if (this.scope !== void 0)
+            throw new TypeError("Retained callback operations must be registered during setup.");
+          const owner = this.callbackOperations.get(operation);
+          if (owner !== void 0 && owner !== extension)
+            throw new TypeError("Retained callback operation already belongs to another extension.");
+          this.callbackOperations.set(operation, extension);
+          return operation;
+        },
         retainGuestArguments: (operation, from) => {
           this.assertOpen();
           if (!extension.manifest.capabilities?.includes("guest:retain"))
@@ -2798,4 +2825,4 @@ export {
   UnhandledRejectionError,
   run
 };
-//# sourceMappingURL=chunk-5M2P3GUC.js.map
+//# sourceMappingURL=chunk-PKRGP34X.js.map