@poe-platform/safe-js 0.1.729 → 0.1.731

package/README.md

@@ -36,7 +36,7 @@ console.log(result.returnValue);
 
 `run()` takes source text, not a file path. Success returns `ok`, `returnValue`, `snapshot`, and `stats`. Handle both an `ok: false` result and a rejected promise: parsing, budget exhaustion, cancellation, and some execution failures can reject. Top-level `await` in this example lets rejections reach Node.
 
-`@poe-platform/safe-js/core` exposes `run`, `createRealm`, `defineExtension`, `lint`, `Budget`, and replayable-random helpers. The shared filesystem lives in `@poe-platform/safe-fs`, with a portable `/core` entry. Existing `@poe-platform/safe-js/fs`, `/fs/core`, and `/fs/node` imports re-export it. Legacy `poe-code/safe-js` imports remain available through the CLI package but use a separate runtime; keep factories and errors within one import family.
+`@poe-platform/safe-js/core` exposes `run`, `createRealm`, `defineExtension`, `lint`, `Budget`, and replayable-random helpers. The `/core`, `/workerd`, and `/modules/fs` workspace entries bundle with the `workerd` or `browser` condition without Node built-ins. Supply a `@poe-code/safe-fs` adapter for filesystem capabilities; `createRootedSourceResolver(root, adapter)` grants portable source imports. File snapshots, migrations, harnesses, and file-running helpers also accept an `adapter`. The shared filesystem lives in `@poe-platform/safe-fs`, with a portable `/core` entry. Existing `@poe-platform/safe-js/fs`, `/fs/core`, and `/fs/node` imports re-export it. Legacy `poe-code/safe-js` imports remain available through the CLI package but use a separate runtime; keep factories and errors within one import family.
 
 ## Supported features
 
@@ -237,7 +237,7 @@ Execution gives host timers and cancellation turns between guest nodes after ela
 | `extensions` | Explicit `defineExtension(...)` registrations; `[]`. Setup runs once, on first evaluation, not on construction or unused close. |
 | `grants` | Granted capability names; `[]`. Every requested capability must be granted before any extension setup runs. |
 | `builtinOverrides` | Optional `{ console: "extension-name" }` authorizes that registered extension to replace only the builtin console. It must declare `console` and export a host object created in the realm. No overrides by default. |
-| `limits` | Positive integer caps: `extensions: 32`, `hostObjects: 1024`, `callbacks: 1024`, `guestReferences: 1024`, `cleanups: 1024`, `nestedEvaluations: 16`. Collection budgets also apply. |
+| `limits` | Optional positive integer caps for `extensions`, `hostObjects`, `callbacks`, `guestReferences`, `cleanups`, and `nestedEvaluations`. Every cap defaults to `Infinity` and accepts explicit `Infinity`. Collection budgets also apply. |
 | `stringCompilation` | Optional `"allow"` (default) or `"deny"`. Denial raises a catchable guest EvalError for string eval and Function/AsyncFunction/GeneratorFunction/AsyncGeneratorFunction compilation, including retained callbacks. Host source evaluation remains available. This is separate from WebAssembly compilation policy. |
 | `classicScripts` | Optional boolean, default `false`. Evaluations use classic Script grammar with persistent globals: top-level `this` is the intrinsic global object, `var` and functions create global properties, and `let`/`const` remain lexical. Injected capabilities stay immutable lexical bindings. Explicit source modules retain module semantics. |
 | `classicScriptErrors` | Optional `"fatal"` (default) or `"report"`; reporting requires `classicScripts: true`. Ordinary escaped Script exceptions return `ok: false` with `recoverable: true` while preserving realm state. Syntax, budget, cancellation, module, callback and unhandled rejection failures remain fatal. |
@@ -445,7 +445,7 @@ For one-shot use, `run(source, { extensions, grants, ... })` accepts the same re
 | `snapshotIntervalMs` | Periodic checkpoint interval when persistence is configured: 30,000 ms; `0` disables periodic writes. Capture happens at interpreter yield points. |
 | `hostCallResumeProvider` | Reconciles pending external operations on restore; returns a matching `HostCallResumeProof`. |
 
-`new Budget(options?)` accepts optional limits. A custom budget replaces the default, so include `maxCallDepth` if you want that guard.
+`new Budget(options?)` accepts optional limits, each unlimited by default. Explicit `Infinity` also disables a limit. Set `maxCallDepth` to opt into a recursion guard in `run()` or `createRealm()`.
 
 | Option | Limit |
 | --- | --- |
@@ -536,7 +536,7 @@ Factories return exports to register in `modules`; calling a factory alone does
 | --- | --- |
 | `makeAgentModule(spawnAgent, options?)` | Inject the agent runner. Options: `defaultRetry`, `onEvent`, `otelSink`. Exposes `spawn`, `spawn.retry`, and `spawn.parallel`; call options follow this table. |
 | `makeMcpModule(options)` | Required `servers` map: stdio `{ command, args?, cwd?, env? }` or HTTP `{ url, headers? }`. Options: `requestTimeoutMs` (30,000), `closeTimeoutMs` (1,000), `maxToolPages` (100), `signal`, and injected `fetch`/`spawn`. Named clients expose `tools`, `tool`, `toolBatch`, and `close`; close managed clients when finished. A custom connector function is also accepted. |
-| `makeFsModule(options?)` | Node-backed `{ root?, fs? }`, or shared-filesystem `{ adapter, root?, cwd?, signal? }`; do not combine `fs` and `adapter`. Node access without `root` is unconfined. Rooted calls sharing the same adapter or Node implementation are serialized through path checks and backend completion to prevent guest namespace races. External host mutations or distinct adapters over the same storage require independent backend confinement. With an adapter, `root` confines access and `cwd` selects the virtual relative-path base; without `root`, explicit `cwd` also confines access. Omitting both uses virtual `/`. Adapter text reads pass a byte cap derived conservatively from the guest string and remaining data limits to the backend before decoding. Each read is also capped at 419,430 input bytes. A shared 16 MiB host read allowance reserves ten bytes per input byte for collection, copies, encoding expansion and admission; concurrent reads that exceed it reject, and reservations release after the underlying read settles and decoding finishes, including when cancellation rejects the caller earlier. Native Node/injected `fs` implementations retain their own read behavior. Read text with `readFile(path, "utf8")`; see the [module methods](src/modules/fs.ts) and [filesystem package](../safe-fs/README.md). |
+| `makeFsModule(options?)` | Node-backed `{ root?, fs? }`, or shared-filesystem `{ adapter, root?, cwd?, signal? }`; do not combine `fs` and `adapter`. Node access without `root` is unconfined. Rooted calls sharing the same adapter or Node implementation are serialized through path checks and backend completion to prevent guest namespace races. External host mutations or distinct adapters over the same storage require independent backend confinement. With an adapter, `root` confines access and `cwd` selects the virtual relative-path base; without `root`, explicit `cwd` also confines access. Omitting both uses virtual `/`. Adapter text reads pass a byte cap derived conservatively from the guest string and remaining data limits to the backend before decoding. Optional `readFileMaxBytes` and `hostReadMemoryLimit` default to `Infinity` and accept explicit `Infinity`. A finite host allowance reserves ten bytes per input byte for collection, copies, encoding expansion and admission across concurrent reads from that module; reservations release after the underlying read settles and decoding finishes, including when cancellation rejects the caller earlier. Native Node/injected `fs` implementations retain their own read behavior. Read text with `readFile(path, "utf8")`; see the [module methods](src/modules/fs.ts) and [filesystem package](../safe-fs/README.md). |
 | `makeEnvModule(namesOrOptions)` | Allowed-name array or `{ allow, values? }`; exposes `get(name)`. `parseEnvConfig(json)` accepts the object form. |
 | `makeTimeModule(options?)` | `now`, `random`, `seed`, `signal`; exposes `now`, `random`, `sleep`, `uuid`. Defaults to host time/randomness; `seed` makes the random generator deterministic, and explicit `random` takes precedence. |
 | `makeLogModule(sink)` | Sends timestamped `info`, `error`, and `event` entries to your callback. |
@@ -548,7 +548,7 @@ Factories return exports to register in `modules`; calling a factory alone does
 
 `spawn.retry(definition, options, retryOptions)` and `defaultRetry` use `{ maxAttempts, backoffMs, isErrorRetryable?, isRetryable? }`. `spawn.parallel(calls, options?)` accepts definition/options tuples or spawn-handle factories; options are `check`, `maxConcurrent`, `failFast`, and `signal`. Usage helpers are `createSpawnUsageAccumulator()` and `runWithSpawnUsageAccumulator(accumulator, operation)`.
 
-**Config files.** `parseMcpConfig(json, directory)` accepts `servers` and the three numeric MCP limits, resolving stdio paths against `directory`. `parseFsConfig(json)` accepts `{ adapter: { type, options }, root?, cwd? }`; `resolveFsConfig(config, { registry? })` constructs the adapter for `makeFsModule`. Built-in types are `memory` and `real`; `real` requires an absolute host `options.root`. Outer `root`/`cwd` are absolute virtual paths. Custom registry descriptors supply `validateOptions` and `create`. Signals and injected functions are SDK options, not JSON fields.
+**Config files.** `parseMcpConfig(json, directory)` accepts `servers` and the three numeric MCP limits, resolving stdio paths against `directory`. `parseFsConfig(json)` accepts `{ adapter: { type, options }, root?, cwd?, readFileMaxBytes?, hostReadMemoryLimit? }`; `resolveFsConfig(config, { registry? })` constructs the adapter for `makeFsModule`. Built-in types are `memory` and `real`; `real` requires an absolute host `options.root`. Outer `root`/`cwd` are absolute virtual paths. Custom registry descriptors supply `validateOptions` and `create`. Signals and injected functions are SDK options, not JSON fields.
 
 </details>
 

package/dist/safe-js/chunks/{chunk-SJZWSPWD.js → chunk-2GVBG23M.js}

@@ -14,4 +14,4 @@ export {
   getOwnErrorCode,
   hasOwnErrorCode
 };
-//# sourceMappingURL=chunk-SJZWSPWD.js.map
+//# sourceMappingURL=chunk-2GVBG23M.js.map

package/dist/safe-js/chunks/{chunk-SJZWSPWD.js.map → chunk-2GVBG23M.js.map}

@@ -1,7 +1,7 @@
 {
   "version": 3,
   "sources": ["../../src/error-codes.ts"],
-  "sourcesContent": ["export function getOwnErrorCode(error: unknown): string | undefined {\n  if (\n    typeof error !== \"object\" ||\n    error === null ||\n    !Object.prototype.hasOwnProperty.call(error, \"code\")\n  ) {\n    return undefined;\n  }\n\n  const code = (error as { code?: unknown }).code;\n  return typeof code === \"string\" ? code : undefined;\n}\n\nexport function hasOwnErrorCode(error: unknown, code: string): error is NodeJS.ErrnoException {\n  return getOwnErrorCode(error) === code;\n}\n"],
+  "sourcesContent": ["export function getOwnErrorCode(error: unknown): string | undefined {\n  if (\n    typeof error !== \"object\" ||\n    error === null ||\n    !Object.prototype.hasOwnProperty.call(error, \"code\")\n  ) {\n    return undefined;\n  }\n\n  const code = (error as { code?: unknown }).code;\n  return typeof code === \"string\" ? code : undefined;\n}\n\nexport function hasOwnErrorCode(error: unknown, code: string): error is NodeJS.ErrnoException {\n  return getOwnErrorCode(error) === code;\n}\n\nexport type SystemError = Error & { code?: string; errno?: number; syscall?: string; path?: string; dest?: string };\n"],
   "mappings": ";AAAO,SAAS,gBAAgB,OAAoC;AAClE,MACE,OAAO,UAAU,YACjB,UAAU,QACV,CAAC,OAAO,UAAU,eAAe,KAAK,OAAO,MAAM,GACnD;AACA,WAAO;AAAA,EACT;AAEA,QAAM,OAAQ,MAA6B;AAC3C,SAAO,OAAO,SAAS,WAAW,OAAO;AAC3C;AAEO,SAAS,gBAAgB,OAAgB,MAA8C;AAC5F,SAAO,gBAAgB,KAAK,MAAM;AACpC;",
   "names": []
 }

package/dist/safe-js/chunks/{chunk-VIMROAQA.js → chunk-E4XLBT7R.js}

@@ -1,6 +1,6 @@
 import {
   isSandboxClosure
-} from "./chunk-S5YDMMM3.js";
+} from "./chunk-MDIWQFYU.js";
 
 // packages/safe-js/src/lint/runtime-modules.ts
 var AsyncFunction = (async () => void 0).constructor;
@@ -34,4 +34,4 @@ function isAsyncRuntimeExport(value) {
 export {
   createLintModulesFromRuntimeRegistry
 };
-//# sourceMappingURL=chunk-VIMROAQA.js.map
+//# sourceMappingURL=chunk-E4XLBT7R.js.map

package/dist/safe-js/chunks/chunk-F6CV74HU.js

@@ -0,0 +1,114 @@
+import {
+  paths_default
+} from "./chunk-YUQFFRUF.js";
+import {
+  constants,
+  hostFs
+} from "./chunk-UQPYTZOZ.js";
+
+// packages/safe-js/src/modules/source-files.ts
+import { resolvePath } from "@poe-platform/safe-fs/core";
+async function createRootedSourceResolver(root, adapter) {
+  const realpath = (filename) => adapter ? adapter.realpath(filename) : hostFs.realpath(filename);
+  const stat = async (filename) => adapter ? sourceStat(await adapter.stat(filename)) : await hostFs.stat(filename);
+  const granted = adapter ? resolvePath("/", root) : paths_default.resolve(root);
+  const directory = await realpath(granted);
+  if (!(await stat(directory)).isDirectory()) throw new TypeError("Source module root must be a directory.");
+  const contains = (filename) => {
+    const relative = paths_default.relative(directory, filename);
+    return relative !== ".." && !relative.startsWith(`..${paths_default.sep}`) && !paths_default.isAbsolute(relative);
+  };
+  const resolver = async (specifier, referrer, { signal }) => {
+    signal?.throwIfAborted();
+    if (!specifier.startsWith("./") && !specifier.startsWith("../") || !paths_default.isAbsolute(referrer)) return void 0;
+    const relative = paths_default.relative(granted, referrer);
+    const canonicalReferrer = relative !== ".." && !relative.startsWith(`..${paths_default.sep}`) && !paths_default.isAbsolute(relative) ? paths_default.resolve(directory, relative) : referrer;
+    if (!contains(canonicalReferrer)) return void 0;
+    const candidate = paths_default.resolve(paths_default.dirname(canonicalReferrer), specifier);
+    if (!contains(candidate)) return void 0;
+    try {
+      const id = await realpath(candidate);
+      signal?.throwIfAborted();
+      if (!contains(id)) return void 0;
+      const expected = await stat(id);
+      signal?.throwIfAborted();
+      if (!expected.isFile()) return void 0;
+      const handle = adapter ? await openSourceFile(adapter, id, signal) : await hostFs.open(id, constants.O_RDONLY | constants.O_NOFOLLOW | constants.O_NONBLOCK);
+      try {
+        signal?.throwIfAborted();
+        const actual = await handle.stat();
+        signal?.throwIfAborted();
+        if (!actual.isFile() || ("identity" in actual && "identity" in expected ? !sameSourceIdentity(actual.identity, expected.identity) : actual.dev !== expected.dev || actual.ino !== expected.ino)) return void 0;
+        const currentId = await realpath(id);
+        signal?.throwIfAborted();
+        if (currentId !== id) return void 0;
+        const source = await handle.readFile({ encoding: "utf8", signal });
+        signal?.throwIfAborted();
+        return { id, source };
+      } finally {
+        await handle.close();
+      }
+    } catch (error) {
+      signal?.throwIfAborted();
+      if (error !== null && typeof error === "object" && "code" in error && ["ENOENT", "ENOTDIR", "ELOOP"].includes(String(error.code))) return void 0;
+      throw error;
+    }
+  };
+  return Object.assign(resolver, { async entryId(filename) {
+    if (filename === void 0) return paths_default.join(directory, "<entry>");
+    const supplied = paths_default.resolve(granted, filename);
+    const relative = paths_default.relative(granted, supplied);
+    const candidate = relative !== ".." && !relative.startsWith(`..${paths_default.sep}`) && !paths_default.isAbsolute(relative) ? paths_default.resolve(directory, relative) : supplied;
+    if (!contains(candidate)) throw new TypeError("Source entry must be inside its granted root.");
+    try {
+      const id = await realpath(candidate);
+      if (!contains(id)) throw new TypeError("Source entry must be inside its granted root.");
+      return id;
+    } catch (error) {
+      if (error !== null && typeof error === "object" && "code" in error && error.code === "ENOENT") return candidate;
+      throw error;
+    }
+  } });
+}
+function sourceStat(value) {
+  return {
+    identity: value,
+    dev: value.dev,
+    ino: value.ino,
+    isFile: () => value.type === "file",
+    isDirectory: () => value.type === "directory"
+  };
+}
+function sameSourceIdentity(actual, expected) {
+  if (expected.identityScope !== void 0 && expected.opaqueIdentity !== void 0) {
+    return actual.identityScope === expected.identityScope && actual.opaqueIdentity === expected.opaqueIdentity && (expected.opaqueVersion === void 0 || actual.opaqueVersion === expected.opaqueVersion);
+  }
+  return expected.dev !== void 0 && expected.ino !== void 0 && actual.dev === expected.dev && actual.ino === expected.ino;
+}
+async function openSourceFile(adapter, id, signal) {
+  if (!adapter.openReadFile) throw new TypeError("Source filesystem must support retained reads.");
+  const handle = await adapter.openReadFile(id, signal ? { signal } : {});
+  return {
+    stat: async () => sourceStat(await handle.stat(signal ? { signal } : {})),
+    close: handle.close.bind(handle),
+    async readFile(_options) {
+      const decoder = new TextDecoder("utf-8", { ignoreBOM: true });
+      const chunks = [];
+      let position = 0;
+      for (; ; ) {
+        signal?.throwIfAborted();
+        const chunk = await handle.read(position, 64 * 1024, signal ? { signal } : {});
+        if (chunk.byteLength === 0) break;
+        chunks.push(decoder.decode(chunk, { stream: true }));
+        position += chunk.byteLength;
+      }
+      chunks.push(decoder.decode());
+      return chunks.join("");
+    }
+  };
+}
+
+export {
+  createRootedSourceResolver
+};
+//# sourceMappingURL=chunk-F6CV74HU.js.map

package/dist/safe-js/chunks/chunk-F6CV74HU.js.map

@@ -0,0 +1,7 @@
+{
+  "version": 3,
+  "sources": ["../../src/modules/source-files.ts"],
+  "sourcesContent": ["import {hostFs, fsConstants as constants} from \"#safe-js-platform\";\nimport {resolvePath, type FileSystem, type FileStat} from \"@poe-code/safe-fs/core\";\n\nimport path from \"./paths.js\";\nimport type {SourceResolver} from \"./source-graph.js\";\n\n/** Explicit filesystem grant. No package lookup, extension search, or URL loading. */\nexport async function createRootedSourceResolver(root: string, adapter?: FileSystem): Promise<SourceResolver & {\n  entryId(filename?: string): Promise<string>;\n}> {\n  const realpath = (filename: string) => adapter ? adapter.realpath(filename) : hostFs.realpath(filename);\n  const stat = async (filename: string) => adapter ? sourceStat(await adapter.stat(filename)) : await hostFs.stat(filename);\n  const granted = adapter ? resolvePath(\"/\", root) : path.resolve(root);\n  const directory = await realpath(granted);\n  if (!(await stat(directory)).isDirectory()) throw new TypeError(\"Source module root must be a directory.\");\n  const contains = (filename: string) => {\n    const relative = path.relative(directory,filename);\n    return relative !== \"..\" && !relative.startsWith(`..${path.sep}`) && !path.isAbsolute(relative);\n  };\n  const resolver: SourceResolver = async (specifier,referrer,{signal}) => {\n    signal?.throwIfAborted();\n    if ((!specifier.startsWith(\"./\") && !specifier.startsWith(\"../\")) || !path.isAbsolute(referrer)) return undefined;\n    const relative = path.relative(granted,referrer);\n    const canonicalReferrer = relative !== \"..\" && !relative.startsWith(`..${path.sep}`) && !path.isAbsolute(relative)\n      ? path.resolve(directory,relative) : referrer;\n    if (!contains(canonicalReferrer)) return undefined;\n    const candidate = path.resolve(path.dirname(canonicalReferrer),specifier);\n    if (!contains(candidate)) return undefined;\n    try {\n      const id = await realpath(candidate);\n      signal?.throwIfAborted();\n      if (!contains(id)) return undefined;\n      const expected = await stat(id);\n      signal?.throwIfAborted();\n      if (!expected.isFile()) return undefined;\n      const handle = adapter\n        ? await openSourceFile(adapter, id, signal)\n        : await hostFs.open(id,constants.O_RDONLY | constants.O_NOFOLLOW | constants.O_NONBLOCK);\n      try {\n        signal?.throwIfAborted();\n        const actual = await handle.stat();\n        signal?.throwIfAborted();\n        // Read the checked inode, never reopen its pathname. These checks deny\n        // observed replacements; Node's path APIs do not provide atomic ancestor\n        // confinement against an adversary repeatedly swapping directories.\n        if (!actual.isFile() || (\"identity\" in actual && \"identity\" in expected\n          ? !sameSourceIdentity(actual.identity, expected.identity)\n          : actual.dev !== expected.dev || actual.ino !== expected.ino)) return undefined;\n        const currentId = await realpath(id);\n        signal?.throwIfAborted();\n        if (currentId !== id) return undefined;\n        const source = await handle.readFile({encoding:\"utf8\",signal});\n        signal?.throwIfAborted();\n        return {id,source};\n      } finally {await handle.close();}\n    } catch (error) {\n      signal?.throwIfAborted();\n      if (error !== null && typeof error === \"object\" && \"code\" in error &&\n          [\"ENOENT\",\"ENOTDIR\",\"ELOOP\"].includes(String(error.code))) return undefined;\n      throw error;\n    }\n  };\n  return Object.assign(resolver, {async entryId(filename?: string): Promise<string> {\n    if (filename === undefined) return path.join(directory,\"<entry>\");\n    const supplied = path.resolve(granted,filename);\n    const relative = path.relative(granted,supplied);\n    const candidate = relative !== \"..\" && !relative.startsWith(`..${path.sep}`) && !path.isAbsolute(relative)\n      ? path.resolve(directory,relative) : supplied;\n    if (!contains(candidate)) throw new TypeError(\"Source entry must be inside its granted root.\");\n    try {\n      const id = await realpath(candidate);\n      if (!contains(id)) throw new TypeError(\"Source entry must be inside its granted root.\");\n      return id;\n    } catch (error) {\n      if (error !== null && typeof error === \"object\" && \"code\" in error && error.code === \"ENOENT\") return candidate;\n      throw error;\n    }\n  }});\n}\n\nfunction sourceStat(value: FileStat) {\n  return {identity: value, dev: value.dev, ino: value.ino,\n    isFile: () => value.type === \"file\", isDirectory: () => value.type === \"directory\"};\n}\n\nfunction sameSourceIdentity(actual: FileStat, expected: FileStat): boolean {\n  if (expected.identityScope !== undefined && expected.opaqueIdentity !== undefined) {\n    return actual.identityScope === expected.identityScope && actual.opaqueIdentity === expected.opaqueIdentity &&\n      (expected.opaqueVersion === undefined || actual.opaqueVersion === expected.opaqueVersion);\n  }\n  return expected.dev !== undefined && expected.ino !== undefined && actual.dev === expected.dev && actual.ino === expected.ino;\n}\n\nasync function openSourceFile(adapter: FileSystem, id: string, signal?: AbortSignal) {\n  if (!adapter.openReadFile) throw new TypeError(\"Source filesystem must support retained reads.\");\n  const handle = await adapter.openReadFile(id, signal ? {signal} : {});\n  return {\n    stat: async () => sourceStat(await handle.stat(signal ? {signal} : {})),\n    close: handle.close.bind(handle),\n    async readFile(_options: {encoding: \"utf8\"; signal?: AbortSignal}) {\n      const decoder = new TextDecoder(\"utf-8\", {ignoreBOM: true});\n      const chunks: string[] = [];\n      let position = 0;\n      for (;;) {\n        signal?.throwIfAborted();\n        const chunk = await handle.read(position, 64 * 1024, signal ? {signal} : {});\n        if (chunk.byteLength === 0) break;\n        chunks.push(decoder.decode(chunk, {stream: true}));\n        position += chunk.byteLength;\n      }\n      chunks.push(decoder.decode());\n      return chunks.join(\"\");\n    }\n  };\n}\n"],
+  "mappings": ";;;;;;;;;AACA,SAAQ,mBAAkD;AAM1D,eAAsB,2BAA2B,MAAc,SAE5D;AACD,QAAM,WAAW,CAAC,aAAqB,UAAU,QAAQ,SAAS,QAAQ,IAAI,OAAO,SAAS,QAAQ;AACtG,QAAM,OAAO,OAAO,aAAqB,UAAU,WAAW,MAAM,QAAQ,KAAK,QAAQ,CAAC,IAAI,MAAM,OAAO,KAAK,QAAQ;AACxH,QAAM,UAAU,UAAU,YAAY,KAAK,IAAI,IAAI,cAAK,QAAQ,IAAI;AACpE,QAAM,YAAY,MAAM,SAAS,OAAO;AACxC,MAAI,EAAE,MAAM,KAAK,SAAS,GAAG,YAAY,EAAG,OAAM,IAAI,UAAU,yCAAyC;AACzG,QAAM,WAAW,CAAC,aAAqB;AACrC,UAAM,WAAW,cAAK,SAAS,WAAU,QAAQ;AACjD,WAAO,aAAa,QAAQ,CAAC,SAAS,WAAW,KAAK,cAAK,GAAG,EAAE,KAAK,CAAC,cAAK,WAAW,QAAQ;AAAA,EAChG;AACA,QAAM,WAA2B,OAAO,WAAU,UAAS,EAAC,OAAM,MAAM;AACtE,YAAQ,eAAe;AACvB,QAAK,CAAC,UAAU,WAAW,IAAI,KAAK,CAAC,UAAU,WAAW,KAAK,KAAM,CAAC,cAAK,WAAW,QAAQ,EAAG,QAAO;AACxG,UAAM,WAAW,cAAK,SAAS,SAAQ,QAAQ;AAC/C,UAAM,oBAAoB,aAAa,QAAQ,CAAC,SAAS,WAAW,KAAK,cAAK,GAAG,EAAE,KAAK,CAAC,cAAK,WAAW,QAAQ,IAC7G,cAAK,QAAQ,WAAU,QAAQ,IAAI;AACvC,QAAI,CAAC,SAAS,iBAAiB,EAAG,QAAO;AACzC,UAAM,YAAY,cAAK,QAAQ,cAAK,QAAQ,iBAAiB,GAAE,SAAS;AACxE,QAAI,CAAC,SAAS,SAAS,EAAG,QAAO;AACjC,QAAI;AACF,YAAM,KAAK,MAAM,SAAS,SAAS;AACnC,cAAQ,eAAe;AACvB,UAAI,CAAC,SAAS,EAAE,EAAG,QAAO;AAC1B,YAAM,WAAW,MAAM,KAAK,EAAE;AAC9B,cAAQ,eAAe;AACvB,UAAI,CAAC,SAAS,OAAO,EAAG,QAAO;AAC/B,YAAM,SAAS,UACX,MAAM,eAAe,SAAS,IAAI,MAAM,IACxC,MAAM,OAAO,KAAK,IAAG,UAAU,WAAW,UAAU,aAAa,UAAU,UAAU;AACzF,UAAI;AACF,gBAAQ,eAAe;AACvB,cAAM,SAAS,MAAM,OAAO,KAAK;AACjC,gBAAQ,eAAe;AAIvB,YAAI,CAAC,OAAO,OAAO,MAAM,cAAc,UAAU,cAAc,WAC3D,CAAC,mBAAmB,OAAO,UAAU,SAAS,QAAQ,IACtD,OAAO,QAAQ,SAAS,OAAO,OAAO,QAAQ,SAAS,KAAM,QAAO;AACxE,cAAM,YAAY,MAAM,SAAS,EAAE;AACnC,gBAAQ,eAAe;AACvB,YAAI,cAAc,GAAI,QAAO;AAC7B,cAAM,SAAS,MAAM,OAAO,SAAS,EAAC,UAAS,QAAO,OAAM,CAAC;AAC7D,gBAAQ,eAAe;AACvB,eAAO,EAAC,IAAG,OAAM;AAAA,MACnB,UAAE;AAAS,cAAM,OAAO,MAAM;AAAA,MAAE;AAAA,IAClC,SAAS,OAAO;AACd,cAAQ,eAAe;AACvB,UAAI,UAAU,QAAQ,OAAO,UAAU,YAAY,UAAU,SACzD,CAAC,UAAS,WAAU,OAAO,EAAE,SAAS,OAAO,MAAM,IAAI,CAAC,EAAG,QAAO;AACtE,YAAM;AAAA,IACR;AAAA,EACF;AACA,SAAO,OAAO,OAAO,UAAU,EAAC,MAAM,QAAQ,UAAoC;AAChF,QAAI,aAAa,OAAW,QAAO,cAAK,KAAK,WAAU,SAAS;AAChE,UAAM,WAAW,cAAK,QAAQ,SAAQ,QAAQ;AAC9C,UAAM,WAAW,cAAK,SAAS,SAAQ,QAAQ;AAC/C,UAAM,YAAY,aAAa,QAAQ,CAAC,SAAS,WAAW,KAAK,cAAK,GAAG,EAAE,KAAK,CAAC,cAAK,WAAW,QAAQ,IACrG,cAAK,QAAQ,WAAU,QAAQ,IAAI;AACvC,QAAI,CAAC,SAAS,SAAS,EAAG,OAAM,IAAI,UAAU,+CAA+C;AAC7F,QAAI;AACF,YAAM,KAAK,MAAM,SAAS,SAAS;AACnC,UAAI,CAAC,SAAS,EAAE,EAAG,OAAM,IAAI,UAAU,+CAA+C;AACtF,aAAO;AAAA,IACT,SAAS,OAAO;AACd,UAAI,UAAU,QAAQ,OAAO,UAAU,YAAY,UAAU,SAAS,MAAM,SAAS,SAAU,QAAO;AACtG,YAAM;AAAA,IACR;AAAA,EACF,EAAC,CAAC;AACJ;AAEA,SAAS,WAAW,OAAiB;AACnC,SAAO;AAAA,IAAC,UAAU;AAAA,IAAO,KAAK,MAAM;AAAA,IAAK,KAAK,MAAM;AAAA,IAClD,QAAQ,MAAM,MAAM,SAAS;AAAA,IAAQ,aAAa,MAAM,MAAM,SAAS;AAAA,EAAW;AACtF;AAEA,SAAS,mBAAmB,QAAkB,UAA6B;AACzE,MAAI,SAAS,kBAAkB,UAAa,SAAS,mBAAmB,QAAW;AACjF,WAAO,OAAO,kBAAkB,SAAS,iBAAiB,OAAO,mBAAmB,SAAS,mBAC1F,SAAS,kBAAkB,UAAa,OAAO,kBAAkB,SAAS;AAAA,EAC/E;AACA,SAAO,SAAS,QAAQ,UAAa,SAAS,QAAQ,UAAa,OAAO,QAAQ,SAAS,OAAO,OAAO,QAAQ,SAAS;AAC5H;AAEA,eAAe,eAAe,SAAqB,IAAY,QAAsB;AACnF,MAAI,CAAC,QAAQ,aAAc,OAAM,IAAI,UAAU,gDAAgD;AAC/F,QAAM,SAAS,MAAM,QAAQ,aAAa,IAAI,SAAS,EAAC,OAAM,IAAI,CAAC,CAAC;AACpE,SAAO;AAAA,IACL,MAAM,YAAY,WAAW,MAAM,OAAO,KAAK,SAAS,EAAC,OAAM,IAAI,CAAC,CAAC,CAAC;AAAA,IACtE,OAAO,OAAO,MAAM,KAAK,MAAM;AAAA,IAC/B,MAAM,SAAS,UAAoD;AACjE,YAAM,UAAU,IAAI,YAAY,SAAS,EAAC,WAAW,KAAI,CAAC;AAC1D,YAAM,SAAmB,CAAC;AAC1B,UAAI,WAAW;AACf,iBAAS;AACP,gBAAQ,eAAe;AACvB,cAAM,QAAQ,MAAM,OAAO,KAAK,UAAU,KAAK,MAAM,SAAS,EAAC,OAAM,IAAI,CAAC,CAAC;AAC3E,YAAI,MAAM,eAAe,EAAG;AAC5B,eAAO,KAAK,QAAQ,OAAO,OAAO,EAAC,QAAQ,KAAI,CAAC,CAAC;AACjD,oBAAY,MAAM;AAAA,MACpB;AACA,aAAO,KAAK,QAAQ,OAAO,CAAC;AAC5B,aAAO,OAAO,KAAK,EAAE;AAAA,IACvB;AAAA,EACF;AACF;",
+  "names": []
+}

package/dist/safe-js/chunks/{chunk-OZLTLIHX.js → chunk-G6WTEIJJ.js}

@@ -1,6 +1,6 @@
 import {
   hasOwnErrorCode
-} from "./chunk-SJZWSPWD.js";
+} from "./chunk-2GVBG23M.js";
 
 // packages/safe-js/src/output-stream.ts
 function createBrokenPipeState() {
@@ -57,4 +57,4 @@ export {
   withBrokenPipeGuard,
   addBrokenPipeListener
 };
-//# sourceMappingURL=chunk-OZLTLIHX.js.map
+//# sourceMappingURL=chunk-G6WTEIJJ.js.map

package/dist/safe-js/chunks/{chunk-XX57YCGZ.js → chunk-GNEORAQI.js}

@@ -1,18 +1,21 @@
 import {
-  restore
-} from "./chunk-EN724VH3.js";
-import {
-  attachDumpController,
-  createDumpController
-} from "./chunk-MVLDRXWS.js";
+  fsCodec
+} from "./chunk-GVKXZW53.js";
 import {
   getOwnErrorCode,
   hasOwnErrorCode
-} from "./chunk-SJZWSPWD.js";
+} from "./chunk-2GVBG23M.js";
+import {
+  restore
+} from "./chunk-O4IDRXW7.js";
 import {
   hashParsedAst,
   hashSource
-} from "./chunk-EA7AHM2X.js";
+} from "./chunk-PSVV3IG2.js";
+import {
+  attachDumpController,
+  createDumpController
+} from "./chunk-X3CKAZQ4.js";
 import {
   DUMP_FORMAT_VERSION,
   EXECUTION_SEMANTICS,
@@ -35,7 +38,6 @@ import {
   createBuiltinBindings,
   createEvalSource,
   createGuestReference,
-  createHostCallbackContext,
   createImmutableEmptyModuleEnvironment,
   createLiveHostObject,
   createModuleEnvironment,
@@ -100,7 +102,7 @@ import {
   withSandboxPromiseRejectionTracker,
   wrapCallerInjectedBindings,
   wrapCancelableBindings
-} from "./chunk-S5YDMMM3.js";
+} from "./chunk-MDIWQFYU.js";
 import {
   Budget,
   CompileScope,
@@ -115,14 +117,18 @@ import {
   parseSourceModule,
   replaceErrorStack,
   safeAddEvent
-} from "./chunk-Y5EZYHU6.js";
-
-// packages/safe-js/src/realm.ts
-import { AsyncLocalStorage as AsyncLocalStorage2 } from "node:async_hooks";
-import { types } from "node:util";
+} from "./chunk-QKO4FATZ.js";
+import {
+  dirname
+} from "./chunk-YUQFFRUF.js";
+import {
+  AsyncLocalStorage,
+  createHostCallbackContext,
+  hostFs,
+  types
+} from "./chunk-UQPYTZOZ.js";
 
 // packages/safe-js/src/modules/source-graph.ts
-import { AsyncLocalStorage } from "node:async_hooks";
 var ambiguous = /* @__PURE__ */ Symbol("ambiguous module export");
 var sourceRecords = /* @__PURE__ */ new WeakSet();
 var SourceModuleGraph = class {
@@ -612,17 +618,17 @@ var RealmState = class {
     this.queue = queue;
     const limitInput = readDataRecord(options.limits ?? {}, "Realm limits");
     this.limits = {
-      extensions: 32,
-      hostObjects: 1024,
-      callbacks: 1024,
-      guestReferences: 1024,
-      cleanups: 1024,
-      nestedEvaluations: 16
+      extensions: Infinity,
+      hostObjects: Infinity,
+      callbacks: Infinity,
+      guestReferences: Infinity,
+      cleanups: Infinity,
+      nestedEvaluations: Infinity
     };
     for (const [name, value] of Object.entries(limitInput)) {
-      if (!Object.hasOwn(this.limits, name) || !Number.isSafeInteger(value) || Number(value) < 1)
-        throw new TypeError("Realm limits must be positive safe integers with supported names.");
-      this.limits[name] = Number(value);
+      if (!Object.hasOwn(this.limits, name) || value !== void 0 && value !== Infinity && (!Number.isSafeInteger(value) || Number(value) < 1))
+        throw new TypeError("Realm limits must be positive safe integers or Infinity with supported names.");
+      if (value !== void 0) this.limits[name] = Number(value);
     }
     if (options.extensions !== void 0 && (!Array.isArray(options.extensions) || types.isProxy(options.extensions)))
       throw new TypeError("Extensions must be a registration array.");
@@ -655,7 +661,7 @@ var RealmState = class {
         throw new TypeError("Console override requires a registered extension declaring console.");
       this.consoleExtension = extensionName;
     }
-    this.budget = options.budget ?? new Budget({ maxCallDepth: 1e3 });
+    this.budget = options.budget ?? new Budget();
     this.lease = this.budget.acquireRealmOwner();
     this.compilation = new CompileScope(this.lease.owner);
     this.bridge = {
@@ -731,7 +737,7 @@ var RealmState = class {
   lease;
   compilation;
   controller = new AbortController();
-  phase = new AsyncLocalStorage2();
+  phase = new AsyncLocalStorage();
   queue;
   tracker = createSandboxPromiseRejectionTracker();
   bridge;
@@ -1733,9 +1739,7 @@ function readRealmOptions(value, oneShot = false) {
 }
 
 // packages/safe-js/src/snapshot/backend.ts
-import { randomUUID } from "node:crypto";
-import { readFile, rename, stat, unlink, writeFile } from "node:fs/promises";
-import { dirname } from "node:path";
+import { createFsBridge } from "@poe-platform/safe-fs/core";
 var DEFAULT_WRITE_MAX_ATTEMPTS = 3;
 var DEFAULT_WRITE_RETRY_DELAY_MS = 100;
 var LOCKED_FILE_ERROR_CODES = /* @__PURE__ */ new Set(["EACCES", "EBUSY", "EPERM"]);
@@ -1743,15 +1747,17 @@ var pendingOperations = /* @__PURE__ */ new Map();
 var FileSnapshotBackend = class {
   constructor(path, options = {}) {
     this.path = path;
+    this.#io = options.adapter === void 0 ? hostFs : createFsBridge(options.adapter, { codec: fsCodec });
     this.#writeMaxAttempts = options.writeMaxAttempts ?? DEFAULT_WRITE_MAX_ATTEMPTS;
     this.#writeRetryDelayMs = options.writeRetryDelayMs ?? DEFAULT_WRITE_RETRY_DELAY_MS;
   }
   path;
+  #io;
   #writeMaxAttempts;
   #writeRetryDelayMs;
   async read() {
     try {
-      return JSON.parse(await readFile(this.path, "utf8"));
+      return JSON.parse(await this.#io.readFile(this.path, "utf8"));
     } catch (error) {
       if (hasErrorCode(error, "ENOENT")) {
         return void 0;
@@ -1765,7 +1771,7 @@ var FileSnapshotBackend = class {
   async write(snapshot) {
     await enqueueOperation(
       this.path,
-      () => writeSnapshotAtomically(this.path, snapshot, {
+      () => writeSnapshotAtomically(this.#io, this.path, snapshot, {
         maxAttempts: this.#writeMaxAttempts,
         retryDelayMs: this.#writeRetryDelayMs
       })
@@ -1774,7 +1780,7 @@ var FileSnapshotBackend = class {
   async remove() {
     await enqueueOperation(this.path, async () => {
       try {
-        await unlink(this.path);
+        await this.#io.unlink(this.path);
       } catch (error) {
         if (!hasErrorCode(error, "ENOENT")) {
           throw error;
@@ -1783,14 +1789,14 @@ var FileSnapshotBackend = class {
     });
   }
 };
-async function writeSnapshotAtomically(snapshotPath, snapshot, options) {
+async function writeSnapshotAtomically(io, snapshotPath, snapshot, options) {
   const parentPath = dirname(snapshotPath);
   const contents = serializeSafeJSSnapshot(snapshot);
-  await assertParentDirectoryExists(snapshotPath, parentPath);
+  await assertParentDirectoryExists(io, snapshotPath, parentPath);
   for (let attempt = 1; attempt <= options.maxAttempts; attempt += 1) {
     try {
-      const temporaryPath = `${snapshotPath}.${randomUUID()}.tmp`;
-      await writeSnapshotOnce(temporaryPath, snapshotPath, contents);
+      const temporaryPath = `${snapshotPath}.${globalThis.crypto.randomUUID()}.tmp`;
+      await writeSnapshotOnce(io, temporaryPath, snapshotPath, contents);
       return;
     } catch (error) {
       if (hasErrorCode(error, "EEXIST")) {
@@ -1819,9 +1825,9 @@ async function writeSnapshotAtomically(snapshotPath, snapshot, options) {
     }
   }
 }
-async function assertParentDirectoryExists(snapshotPath, parentPath) {
+async function assertParentDirectoryExists(io, snapshotPath, parentPath) {
   try {
-    const parent = await stat(parentPath);
+    const parent = await io.stat(parentPath);
     if (!parent.isDirectory()) {
       throw new Error(
         `Cannot write snapshot at ${snapshotPath}: parent path ${parentPath} is not a directory`
@@ -1839,24 +1845,24 @@ async function assertParentDirectoryExists(snapshotPath, parentPath) {
     throw error;
   }
 }
-async function writeSnapshotOnce(temporaryPath, snapshotPath, contents) {
+async function writeSnapshotOnce(io, temporaryPath, snapshotPath, contents) {
   let temporaryCreated = false;
   let renamed = false;
   try {
     try {
-      await writeFile(temporaryPath, contents, { encoding: "utf8", flag: "wx" });
+      await io.writeFile(temporaryPath, contents, { encoding: "utf8", flag: "wx" });
       temporaryCreated = true;
     } catch (error) {
       if (!hasErrorCode(error, "EEXIST")) {
-        await removeTemporarySnapshot(temporaryPath).catch(() => void 0);
+        await removeTemporarySnapshot(io, temporaryPath).catch(() => void 0);
       }
       throw error;
     }
-    await rename(temporaryPath, snapshotPath);
+    await io.rename(temporaryPath, snapshotPath);
     renamed = true;
   } finally {
     if (temporaryCreated && !renamed) {
-      await removeTemporarySnapshot(temporaryPath).catch(() => void 0);
+      await removeTemporarySnapshot(io, temporaryPath).catch(() => void 0);
     }
   }
 }
@@ -1873,9 +1879,9 @@ async function enqueueOperation(path, operation) {
     }
   }
 }
-async function removeTemporarySnapshot(temporaryPath) {
+async function removeTemporarySnapshot(io, temporaryPath) {
   try {
-    await unlink(temporaryPath);
+    await io.unlink(temporaryPath);
   } catch (error) {
     if (!hasErrorCode(error, "ENOENT")) {
       throw error;
@@ -2212,7 +2218,6 @@ var UnhandledRejectionError = class extends Error {
     replaceErrorStack(this);
   }
 };
-var DEFAULT_MAX_CALL_DEPTH = 1e3;
 function run(source, options = {}) {
   const jobs = new SandboxJobQueue();
   if (options.extensions !== void 0 || options.builtinOverrides !== void 0 || options.sourceType !== void 0 || options.sourceResolver !== void 0 || options.sourceRoot !== void 0) {
@@ -2221,7 +2226,7 @@ function run(source, options = {}) {
         throw new TypeError("Source resolution requires sourceType: 'module'.");
       if (options.sourceRoot !== void 0) {
         if (options.sourceResolver !== void 0) throw new TypeError("Specify sourceRoot or sourceResolver, not both.");
-        const { createRootedSourceResolver } = await import("./source-files-73OHLNGH.js");
+        const { createRootedSourceResolver } = await import("./source-files-L3SGK63Z.js");
         const { sourceRoot, ...resolved } = options;
         const sourceResolver = await createRootedSourceResolver(sourceRoot);
         return runWithExtensions(source, { ...resolved, filename: await sourceResolver.entryId(options.filename), sourceResolver }, jobs);
@@ -2245,7 +2250,7 @@ function run(source, options = {}) {
   const detachExecutionFailure = promiseTracker.onFatalRejection((error) => jobs.interrupt(error));
   let completedSnapshot;
   const execute = async () => {
-    const budget = options.budget ?? new Budget({ maxCallDepth: DEFAULT_MAX_CALL_DEPTH });
+    const budget = options.budget ?? new Budget();
     const operation = budget.acquireCompileOwner(true);
     const compilation = new CompileScope(operation.owner);
     try {
@@ -2824,4 +2829,4 @@ export {
   UnhandledRejectionError,
   run
 };
-//# sourceMappingURL=chunk-XX57YCGZ.js.map
+//# sourceMappingURL=chunk-GNEORAQI.js.map