@poe-platform/safe-js 0.1.730 → 0.1.732

package/dist/safe-js/modules/fs.js

@@ -0,0 +1,16 @@
+import {
+  FS_OPTION_SURFACE,
+  makeFsModule
+} from "../chunks/chunk-K4T4EBED.js";
+import "../chunks/chunk-GVKXZW53.js";
+import "../chunks/chunk-2GVBG23M.js";
+import "../chunks/chunk-MDIWQFYU.js";
+import "../chunks/chunk-QKO4FATZ.js";
+import "../chunks/chunk-YUQFFRUF.js";
+import "../chunks/chunk-UQPYTZOZ.js";
+import "../chunks/chunk-4YIDX44G.js";
+export {
+  FS_OPTION_SURFACE,
+  makeFsModule
+};
+//# sourceMappingURL=fs.js.map

package/dist/safe-js/modules/source-files.d.ts

@@ -1,5 +1,6 @@
+import { type FileSystem } from "@poe-platform/safe-fs/core";
 import type { SourceResolver } from "./source-graph.js";
-/** Explicit Node host grant. No package lookup, extension search, or URL loading. */
-export declare function createRootedSourceResolver(root: string): Promise<SourceResolver & {
+/** Explicit filesystem grant. No package lookup, extension search, or URL loading. */
+export declare function createRootedSourceResolver(root: string, adapter?: FileSystem): Promise<SourceResolver & {
     entryId(filename?: string): Promise<string>;
 }>;

package/dist/safe-js/platform/context.js

@@ -0,0 +1,58 @@
+/** Stack-scoped context for hosts without native asynchronous context support.
+ * Continuations scheduled by SafeJS capture and restore these stacks explicitly.
+ */
+export class StackContext {
+    static stores = new Set();
+    value;
+    generation = 0;
+    constructor() { StackContext.stores.add(new WeakRef(this)); }
+    getStore() { return this.value; }
+    run(value, callback) {
+        const previous = this.value;
+        const generation = this.generation;
+        this.value = value;
+        try {
+            return callback();
+        }
+        finally {
+            if (this.generation === generation)
+                this.value = previous;
+        }
+    }
+    exit(callback) {
+        const previous = this.value;
+        const generation = this.generation;
+        this.value = undefined;
+        try {
+            return callback();
+        }
+        finally {
+            if (this.generation === generation)
+                this.value = previous;
+        }
+    }
+    disable() { this.value = undefined; this.generation++; }
+    static snapshot() {
+        const values = [];
+        for (const reference of StackContext.stores) {
+            const store = reference.deref();
+            if (store === undefined)
+                StackContext.stores.delete(reference);
+            else
+                values.push([store, store.value, store.generation]);
+        }
+        return callback => {
+            const restore = values.map(([store]) => store.value);
+            for (const [store, value, generation] of values)
+                if (store.generation === generation)
+                    store.value = value;
+            try {
+                return callback();
+            }
+            finally {
+                values.forEach(([store, , generation], index) => { if (store.generation === generation)
+                    store.value = restore[index]; });
+            }
+        };
+    }
+}

package/dist/safe-js/platform/node.js

@@ -0,0 +1,64 @@
+import * as nodeUtil from "node:util";
+import * as nativeFsPromises from "node:fs/promises";
+import { AsyncLocalStorage } from "node:async_hooks";
+import { MessageChannel, MessagePort, receiveMessageOnPort } from "node:worker_threads";
+const nativeClone = structuredClone;
+const sharedByteLength = Object.getOwnPropertyDescriptor(SharedArrayBuffer.prototype, "byteLength").get;
+const postMessage = MessagePort.prototype.postMessage;
+const closePort = MessagePort.prototype.close;
+// Probe private storage once: a broken native clone must never copy a guest's
+// potentially large allocation before selecting the shared-wrapper fallback.
+const probe = new SharedArrayBuffer(1);
+let nativeSharesStorage = false;
+try {
+    const copy = nativeClone(probe);
+    Reflect.apply(sharedByteLength, copy, []);
+    new Uint8Array(copy)[0] = 1;
+    nativeSharesStorage = copy !== probe && new Uint8Array(probe)[0] === 1;
+}
+catch {
+    // Some supported hosts do not implement shared-buffer structured cloning.
+}
+export const cloneSharedBufferWrapper = nativeSharesStorage
+    ? nativeClone
+    : (value) => {
+        Reflect.apply(sharedByteLength, value, []);
+        const { port1, port2 } = new MessageChannel();
+        try {
+            Reflect.apply(postMessage, port1, [value]);
+            const copy = receiveMessageOnPort(port2)?.message;
+            Reflect.apply(sharedByteLength, copy, []);
+            if (copy === value)
+                throw new TypeError("Shared storage requires a distinct wrapper.");
+            return copy;
+        }
+        finally {
+            Reflect.apply(closePort, port1, []);
+            Reflect.apply(closePort, port2, []);
+        }
+    };
+export function createHostCallbackContext() {
+    return new AsyncLocalStorage();
+}
+export const accessDeniedSystemError = readSystemError("EACCES");
+function readSystemError(code) {
+    const fallback = new Map([
+        [process.platform === "win32" ? -4092 : -13, ["EACCES", "permission denied"]]
+    ]);
+    const systemErrors = nodeUtil.getSystemErrorMap?.() ?? fallback;
+    for (const [errno, [name, message]] of systemErrors) {
+        if (name === code) {
+            return [errno, message];
+        }
+    }
+    throw new Error(`node does not define the ${code} system error.`);
+}
+export { AsyncLocalStorage };
+export const types = nodeUtil.types;
+export { setImmediate as yieldToHost } from "node:timers/promises";
+export { inspect } from "node:util";
+export { formatWithOptions } from "node:util";
+export { constants as fsConstants } from "node:fs";
+export const hostFs = nativeFsPromises;
+export const hostCwd = process.cwd.bind(process);
+export const hostPlatform = process.platform;

package/dist/safe-js/platform/types.js

@@ -0,0 +1,63 @@
+// Slot probes do not read user properties or Symbol.toStringTag.
+function slot(method, value) {
+    if (typeof value !== "object" || value === null)
+        return false;
+    try {
+        Reflect.apply(method, value, []);
+        return true;
+    }
+    catch {
+        return false;
+    }
+}
+const getter = (prototype, key) => Object.getOwnPropertyDescriptor(prototype, key).get;
+const regexpPrototype = RegExp.prototype;
+const regexpSource = getter(regexpPrototype, "source");
+const booleanValue = Boolean.prototype.valueOf;
+const numberValue = Number.prototype.valueOf;
+const stringValue = String.prototype.valueOf;
+const bigintValue = BigInt.prototype.valueOf;
+const symbolValue = Symbol.prototype.valueOf;
+const dateValue = Date.prototype.getTime;
+const asyncFunctionPrototype = Object.getPrototypeOf(async function () { });
+const generatorFunctionPrototype = Object.getPrototypeOf(function* () { });
+const arrayBufferLength = getter(ArrayBuffer.prototype, "byteLength");
+const dataViewBuffer = getter(DataView.prototype, "buffer");
+const mapSize = getter(Map.prototype, "size");
+const promiseThen = Promise.prototype.then;
+const NativeError = Error;
+const nativeIsError = Reflect.get(NativeError, "isError");
+const proxies = new WeakSet();
+export function createTrackedProxy(target, handler) {
+    const proxy = new Proxy(target, handler);
+    proxies.add(proxy);
+    return proxy;
+}
+export const types = {
+    isProxy: (value) => (typeof value === "object" && value !== null || typeof value === "function") && proxies.has(value),
+    isBooleanObject: (value) => typeof value === "object" && value !== null && slot(booleanValue, value),
+    isNumberObject: (value) => typeof value === "object" && value !== null && slot(numberValue, value),
+    isStringObject: (value) => typeof value === "object" && slot(stringValue, value),
+    isBigIntObject: (value) => typeof value === "object" && value !== null && slot(bigintValue, value),
+    isSymbolObject: (value) => typeof value === "object" && value !== null && slot(symbolValue, value),
+    isDate: (value) => slot(dateValue, value),
+    isRegExp: (value) => value !== regexpPrototype && slot(regexpSource, value),
+    isArrayBuffer: (value) => slot(arrayBufferLength, value),
+    isDataView: (value) => slot(dataViewBuffer, value),
+    isMap: (value) => slot(mapSize, value),
+    isPromise(value) {
+        // Promise has no exposed slot getter. Handle both branches so the probe
+        // cannot introduce an unhandled rejection.
+        try {
+            Reflect.apply(promiseThen, value, [() => undefined, () => undefined]);
+            return true;
+        }
+        catch {
+            return false;
+        }
+    },
+    isAsyncFunction: (value) => typeof value === "function" && Object.getPrototypeOf(value) === asyncFunctionPrototype,
+    isGeneratorFunction: (value) => typeof value === "function" && Object.getPrototypeOf(value) === generatorFunctionPrototype,
+    isNativeError: (value) => typeof value === "object" && value !== null &&
+        (typeof nativeIsError === "function" ? Reflect.apply(nativeIsError, NativeError, [value]) === true : value instanceof NativeError)
+};

package/dist/safe-js/platform/workerd.js

@@ -0,0 +1,39 @@
+import { StackContext } from "./context.js";
+// Hosts may supply native asynchronous context without Node module resolution.
+export const AsyncLocalStorage = Reflect.get(globalThis, "AsyncLocalStorage") ?? StackContext;
+export { types } from "./types.js";
+import { SandboxError } from "../interp/budget.js";
+export const cloneSharedBufferWrapper = structuredClone;
+export function createHostCallbackContext() {
+    let storage = new AsyncLocalStorage();
+    return {
+        run(value, callback) {
+            if (storage === undefined)
+                throw new SandboxError("reentry");
+            return storage.run(value, callback);
+        },
+        getStore() {
+            return storage?.getStore();
+        },
+        disable() {
+            // Workerd has no native disable. Retire access even in retained async contexts.
+            storage = undefined;
+        }
+    };
+}
+export const accessDeniedSystemError = [-13, "permission denied"];
+export const yieldToHost = () => new Promise(resolve => setTimeout(resolve, 0));
+export const hostCwd = () => "/";
+export const hostPlatform = "workerd";
+export const fsConstants = { F_OK: 0, R_OK: 4, W_OK: 2, X_OK: 1, COPYFILE_EXCL: 1 };
+export const hostFs = new Proxy({}, {
+    get() { throw new TypeError("A filesystem adapter is required on this host."); }
+});
+// Diagnostics use data descriptors and never invoke a caller's toString.
+export function inspect(value, _options) {
+    if (typeof value === "string")
+        return "'" + value.replaceAll("'", "\\'") + "'";
+    if (typeof value === "object" && value !== null)
+        return Array.isArray(value) ? "[Array]" : "[Object]";
+    return String(value);
+}

package/dist/safe-js/runner/run-harness.d.ts

@@ -1,3 +1,4 @@
+import { type FileSystem } from "@poe-platform/safe-fs/core";
 import { type Diagnostic } from "../lint.js";
 import type { ModuleRegistry } from "../modules/registry.js";
 import type { OtelSink } from "../observability/otel.js";
@@ -9,6 +10,7 @@ type HarnessMeta = {
     version: unknown;
 };
 export type RunHarnessOptions = {
+    adapter?: FileSystem;
     budget?: RunOptions["budget"];
     modulesFor: (frontmatter: Record<string, unknown>, meta: HarnessMeta) => ModuleRegistry;
     otelSink?: OtelSink;

package/dist/safe-js/snapshot/backend.d.ts

@@ -1,3 +1,4 @@
+import { type FileSystem } from "@poe-platform/safe-fs/core";
 import type { SafeJSSnapshot } from "../restore.js";
 export type Snapshot = SafeJSSnapshot;
 export interface SnapshotBackend {
@@ -6,6 +7,7 @@ export interface SnapshotBackend {
     remove(): Promise<void>;
 }
 export type FileSnapshotBackendOptions = {
+    adapter?: FileSystem;
     writeMaxAttempts?: number;
     writeRetryDelayMs?: number;
 };

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@poe-platform/safe-js",
-  "version": "0.1.730",
+  "version": "0.1.732",
   "description": "Budgeted JavaScript interpreter with explicit host capabilities and resumable execution",
   "type": "module",
   "license": "MIT",
@@ -58,7 +58,7 @@
     "access": "public"
   },
   "dependencies": {
-    "@poe-platform/safe-fs": "0.1.730",
+    "@poe-platform/safe-fs": "0.1.732",
     "@petamoriken/float16": "^3.9.3",
     "@noble/hashes": "2.4.0",
     "@formatjs/intl-localematcher": "0.8.13",
@@ -70,6 +70,13 @@
     "@formatjs/intl-numberformat": "9.4.0",
     "@types/node": "^25.2.2"
   },
+  "imports": {
+    "#safe-js-platform": {
+      "workerd": "./dist/safe-js/platform/workerd.js",
+      "browser": "./dist/safe-js/platform/workerd.js",
+      "default": "./dist/safe-js/platform/node.js"
+    }
+  },
   "bin": {
     "poe-safejs": "./dist/safe-js/cli.js",
     "poe-safe-js": "./dist/safe-js/cli.js"

package/dist/safe-js/chunks/chunk-FCCA27RC.js

@@ -1,69 +0,0 @@
-// packages/safe-js/src/modules/source-files.ts
-import { open, realpath, stat } from "node:fs/promises";
-import { constants } from "node:fs";
-import path from "node:path";
-async function createRootedSourceResolver(root) {
-  const directory = await realpath(root);
-  const granted = path.resolve(root);
-  if (!(await stat(directory)).isDirectory()) throw new TypeError("Source module root must be a directory.");
-  const contains = (filename) => {
-    const relative = path.relative(directory, filename);
-    return relative !== ".." && !relative.startsWith(`..${path.sep}`) && !path.isAbsolute(relative);
-  };
-  const resolver = async (specifier, referrer, { signal }) => {
-    signal?.throwIfAborted();
-    if (!specifier.startsWith("./") && !specifier.startsWith("../") || !path.isAbsolute(referrer)) return void 0;
-    const relative = path.relative(granted, referrer);
-    const canonicalReferrer = relative !== ".." && !relative.startsWith(`..${path.sep}`) && !path.isAbsolute(relative) ? path.resolve(directory, relative) : referrer;
-    if (!contains(canonicalReferrer)) return void 0;
-    const candidate = path.resolve(path.dirname(canonicalReferrer), specifier);
-    if (!contains(candidate)) return void 0;
-    try {
-      const id = await realpath(candidate);
-      signal?.throwIfAborted();
-      if (!contains(id)) return void 0;
-      const expected = await stat(id);
-      signal?.throwIfAborted();
-      if (!expected.isFile()) return void 0;
-      const handle = await open(id, constants.O_RDONLY | constants.O_NOFOLLOW | constants.O_NONBLOCK);
-      try {
-        signal?.throwIfAborted();
-        const actual = await handle.stat();
-        signal?.throwIfAborted();
-        if (!actual.isFile() || actual.dev !== expected.dev || actual.ino !== expected.ino) return void 0;
-        const currentId = await realpath(id);
-        signal?.throwIfAborted();
-        if (currentId !== id) return void 0;
-        const source = await handle.readFile({ encoding: "utf8", signal });
-        signal?.throwIfAborted();
-        return { id, source };
-      } finally {
-        await handle.close();
-      }
-    } catch (error) {
-      signal?.throwIfAborted();
-      if (error !== null && typeof error === "object" && "code" in error && ["ENOENT", "ENOTDIR", "ELOOP"].includes(String(error.code))) return void 0;
-      throw error;
-    }
-  };
-  return Object.assign(resolver, { async entryId(filename) {
-    if (filename === void 0) return path.join(directory, "<entry>");
-    const supplied = path.resolve(granted, filename);
-    const relative = path.relative(granted, supplied);
-    const candidate = relative !== ".." && !relative.startsWith(`..${path.sep}`) && !path.isAbsolute(relative) ? path.resolve(directory, relative) : supplied;
-    if (!contains(candidate)) throw new TypeError("Source entry must be inside its granted root.");
-    try {
-      const id = await realpath(candidate);
-      if (!contains(id)) throw new TypeError("Source entry must be inside its granted root.");
-      return id;
-    } catch (error) {
-      if (error !== null && typeof error === "object" && "code" in error && error.code === "ENOENT") return candidate;
-      throw error;
-    }
-  } });
-}
-
-export {
-  createRootedSourceResolver
-};
-//# sourceMappingURL=chunk-FCCA27RC.js.map

package/dist/safe-js/chunks/chunk-FCCA27RC.js.map

@@ -1,7 +0,0 @@
-{
-  "version": 3,
-  "sources": ["../../src/modules/source-files.ts"],
-  "sourcesContent": ["import {open,realpath,stat} from \"node:fs/promises\";\nimport {constants} from \"node:fs\";\nimport path from \"node:path\";\nimport type {SourceResolver} from \"./source-graph.js\";\n\n/** Explicit Node host grant. No package lookup, extension search, or URL loading. */\nexport async function createRootedSourceResolver(root: string): Promise<SourceResolver & {\n  entryId(filename?: string): Promise<string>;\n}> {\n  const directory = await realpath(root);\n  const granted = path.resolve(root);\n  if (!(await stat(directory)).isDirectory()) throw new TypeError(\"Source module root must be a directory.\");\n  const contains = (filename: string) => {\n    const relative = path.relative(directory,filename);\n    return relative !== \"..\" && !relative.startsWith(`..${path.sep}`) && !path.isAbsolute(relative);\n  };\n  const resolver: SourceResolver = async (specifier,referrer,{signal}) => {\n    signal?.throwIfAborted();\n    if ((!specifier.startsWith(\"./\") && !specifier.startsWith(\"../\")) || !path.isAbsolute(referrer)) return undefined;\n    const relative = path.relative(granted,referrer);\n    const canonicalReferrer = relative !== \"..\" && !relative.startsWith(`..${path.sep}`) && !path.isAbsolute(relative)\n      ? path.resolve(directory,relative) : referrer;\n    if (!contains(canonicalReferrer)) return undefined;\n    const candidate = path.resolve(path.dirname(canonicalReferrer),specifier);\n    if (!contains(candidate)) return undefined;\n    try {\n      const id = await realpath(candidate);\n      signal?.throwIfAborted();\n      if (!contains(id)) return undefined;\n      const expected = await stat(id);\n      signal?.throwIfAborted();\n      if (!expected.isFile()) return undefined;\n      const handle = await open(id,constants.O_RDONLY | constants.O_NOFOLLOW | constants.O_NONBLOCK);\n      try {\n        signal?.throwIfAborted();\n        const actual = await handle.stat();\n        signal?.throwIfAborted();\n        // Read the checked inode, never reopen its pathname. These checks deny\n        // observed replacements; Node's path APIs do not provide atomic ancestor\n        // confinement against an adversary repeatedly swapping directories.\n        if (!actual.isFile() || actual.dev !== expected.dev || actual.ino !== expected.ino) return undefined;\n        const currentId = await realpath(id);\n        signal?.throwIfAborted();\n        if (currentId !== id) return undefined;\n        const source = await handle.readFile({encoding:\"utf8\",signal});\n        signal?.throwIfAborted();\n        return {id,source};\n      } finally {await handle.close();}\n    } catch (error) {\n      signal?.throwIfAborted();\n      if (error !== null && typeof error === \"object\" && \"code\" in error &&\n          [\"ENOENT\",\"ENOTDIR\",\"ELOOP\"].includes(String(error.code))) return undefined;\n      throw error;\n    }\n  };\n  return Object.assign(resolver, {async entryId(filename?: string): Promise<string> {\n    if (filename === undefined) return path.join(directory,\"<entry>\");\n    const supplied = path.resolve(granted,filename);\n    const relative = path.relative(granted,supplied);\n    const candidate = relative !== \"..\" && !relative.startsWith(`..${path.sep}`) && !path.isAbsolute(relative)\n      ? path.resolve(directory,relative) : supplied;\n    if (!contains(candidate)) throw new TypeError(\"Source entry must be inside its granted root.\");\n    try {\n      const id = await realpath(candidate);\n      if (!contains(id)) throw new TypeError(\"Source entry must be inside its granted root.\");\n      return id;\n    } catch (error) {\n      if (error !== null && typeof error === \"object\" && \"code\" in error && error.code === \"ENOENT\") return candidate;\n      throw error;\n    }\n  }});\n}\n"],
-  "mappings": ";AAAA,SAAQ,MAAK,UAAS,YAAW;AACjC,SAAQ,iBAAgB;AACxB,OAAO,UAAU;AAIjB,eAAsB,2BAA2B,MAE9C;AACD,QAAM,YAAY,MAAM,SAAS,IAAI;AACrC,QAAM,UAAU,KAAK,QAAQ,IAAI;AACjC,MAAI,EAAE,MAAM,KAAK,SAAS,GAAG,YAAY,EAAG,OAAM,IAAI,UAAU,yCAAyC;AACzG,QAAM,WAAW,CAAC,aAAqB;AACrC,UAAM,WAAW,KAAK,SAAS,WAAU,QAAQ;AACjD,WAAO,aAAa,QAAQ,CAAC,SAAS,WAAW,KAAK,KAAK,GAAG,EAAE,KAAK,CAAC,KAAK,WAAW,QAAQ;AAAA,EAChG;AACA,QAAM,WAA2B,OAAO,WAAU,UAAS,EAAC,OAAM,MAAM;AACtE,YAAQ,eAAe;AACvB,QAAK,CAAC,UAAU,WAAW,IAAI,KAAK,CAAC,UAAU,WAAW,KAAK,KAAM,CAAC,KAAK,WAAW,QAAQ,EAAG,QAAO;AACxG,UAAM,WAAW,KAAK,SAAS,SAAQ,QAAQ;AAC/C,UAAM,oBAAoB,aAAa,QAAQ,CAAC,SAAS,WAAW,KAAK,KAAK,GAAG,EAAE,KAAK,CAAC,KAAK,WAAW,QAAQ,IAC7G,KAAK,QAAQ,WAAU,QAAQ,IAAI;AACvC,QAAI,CAAC,SAAS,iBAAiB,EAAG,QAAO;AACzC,UAAM,YAAY,KAAK,QAAQ,KAAK,QAAQ,iBAAiB,GAAE,SAAS;AACxE,QAAI,CAAC,SAAS,SAAS,EAAG,QAAO;AACjC,QAAI;AACF,YAAM,KAAK,MAAM,SAAS,SAAS;AACnC,cAAQ,eAAe;AACvB,UAAI,CAAC,SAAS,EAAE,EAAG,QAAO;AAC1B,YAAM,WAAW,MAAM,KAAK,EAAE;AAC9B,cAAQ,eAAe;AACvB,UAAI,CAAC,SAAS,OAAO,EAAG,QAAO;AAC/B,YAAM,SAAS,MAAM,KAAK,IAAG,UAAU,WAAW,UAAU,aAAa,UAAU,UAAU;AAC7F,UAAI;AACF,gBAAQ,eAAe;AACvB,cAAM,SAAS,MAAM,OAAO,KAAK;AACjC,gBAAQ,eAAe;AAIvB,YAAI,CAAC,OAAO,OAAO,KAAK,OAAO,QAAQ,SAAS,OAAO,OAAO,QAAQ,SAAS,IAAK,QAAO;AAC3F,cAAM,YAAY,MAAM,SAAS,EAAE;AACnC,gBAAQ,eAAe;AACvB,YAAI,cAAc,GAAI,QAAO;AAC7B,cAAM,SAAS,MAAM,OAAO,SAAS,EAAC,UAAS,QAAO,OAAM,CAAC;AAC7D,gBAAQ,eAAe;AACvB,eAAO,EAAC,IAAG,OAAM;AAAA,MACnB,UAAE;AAAS,cAAM,OAAO,MAAM;AAAA,MAAE;AAAA,IAClC,SAAS,OAAO;AACd,cAAQ,eAAe;AACvB,UAAI,UAAU,QAAQ,OAAO,UAAU,YAAY,UAAU,SACzD,CAAC,UAAS,WAAU,OAAO,EAAE,SAAS,OAAO,MAAM,IAAI,CAAC,EAAG,QAAO;AACtE,YAAM;AAAA,IACR;AAAA,EACF;AACA,SAAO,OAAO,OAAO,UAAU,EAAC,MAAM,QAAQ,UAAoC;AAChF,QAAI,aAAa,OAAW,QAAO,KAAK,KAAK,WAAU,SAAS;AAChE,UAAM,WAAW,KAAK,QAAQ,SAAQ,QAAQ;AAC9C,UAAM,WAAW,KAAK,SAAS,SAAQ,QAAQ;AAC/C,UAAM,YAAY,aAAa,QAAQ,CAAC,SAAS,WAAW,KAAK,KAAK,GAAG,EAAE,KAAK,CAAC,KAAK,WAAW,QAAQ,IACrG,KAAK,QAAQ,WAAU,QAAQ,IAAI;AACvC,QAAI,CAAC,SAAS,SAAS,EAAG,OAAM,IAAI,UAAU,+CAA+C;AAC7F,QAAI;AACF,YAAM,KAAK,MAAM,SAAS,SAAS;AACnC,UAAI,CAAC,SAAS,EAAE,EAAG,OAAM,IAAI,UAAU,+CAA+C;AACtF,aAAO;AAAA,IACT,SAAS,OAAO;AACd,UAAI,UAAU,QAAQ,OAAO,UAAU,YAAY,UAAU,SAAS,MAAM,SAAS,SAAU,QAAO;AACtG,YAAM;AAAA,IACR;AAAA,EACF,EAAC,CAAC;AACJ;",
-  "names": []
-}

package/dist/safe-js/chunks/chunk-LRSWTDIV.js.map

@@ -1,7 +0,0 @@
-{
-  "version": 3,
-  "sources": ["../../src/migration-file.ts", "../../src/migrate.ts"],
-  "sourcesContent": ["import { randomUUID } from \"node:crypto\";\nimport { link, open, readFile, unlink } from \"node:fs/promises\";\nimport path from \"node:path\";\nimport { hasOwnErrorCode } from \"./error-codes.js\";\n\nimport {\n  inspectSnapshotMigration,\n  migrateSnapshot,\n  type SnapshotMigrationOptions\n} from \"./migrate.js\";\nimport type { SafeJSSnapshot } from \"./restore.js\";\nimport { serializeSafeJSSnapshot } from \"./snapshot/dump-format.js\";\n\nexport type SnapshotMigrationFileOptions = {\n  snapshotPath: string;\n  sourcePath: string;\n  targetSourcePath?: string;\n  planPath?: string;\n  outputPath?: string;\n  inspect?: boolean;\n  dryRun?: boolean;\n  cwd?: string;\n};\n\nexport async function migrateSnapshotFile(options: SnapshotMigrationFileOptions) {\n  const cwd = options.cwd ?? process.cwd();\n  const resolvePath = (value: string | undefined, label: string) => {\n    if (typeof value !== \"string\" || value.trim().length === 0)\n      throw new TypeError(`Migration requires ${label}.`);\n    return path.resolve(cwd, value);\n  };\n  const snapshotPath = resolvePath(options.snapshotPath, \"a snapshot path\");\n  const sourcePath = resolvePath(options.sourcePath, \"--from <original.ajs>\");\n  if (\n    options.inspect &&\n    [options.targetSourcePath, options.planPath, options.outputPath].some(\n      (value) => value !== undefined\n    )\n  )\n    throw new TypeError(\"Migration --inspect cannot be combined with --to, --plan, or --output.\");\n  const outputPath = options.inspect\n    ? undefined\n    : resolvePath(options.outputPath, \"--output <new-checkpoint.json>\");\n  const targetSourcePath = options.inspect\n    ? undefined\n    : resolvePath(options.targetSourcePath, \"--to <continuation.ajs>\");\n  const planPath = options.inspect\n    ? undefined\n    : resolvePath(options.planPath, \"--plan <migration.json>\");\n  for (const filepath of [sourcePath, targetSourcePath]) {\n    if (filepath !== undefined && ![\".ajs\", \".safejs\"].includes(path.extname(filepath)))\n      throw new TypeError(\n        \"Migration source paths must name executable .ajs or .safejs files, not harness Markdown.\"\n      );\n  }\n  const snapshot: SafeJSSnapshot = JSON.parse(await readFile(snapshotPath, \"utf8\"));\n  const source = await readFile(sourcePath, \"utf8\");\n  const inspection = inspectSnapshotMigration(snapshot, { source });\n  if (options.inspect) return { inspection };\n  const plan: unknown = JSON.parse(await readFile(planPath!, \"utf8\"));\n  if (\n    plan === null ||\n    typeof plan !== \"object\" ||\n    !Object.hasOwn(plan, \"state\") ||\n    !Object.hasOwn(plan, \"reconciliation\")\n  )\n    throw new TypeError(\"Migration plan requires explicit state and reconciliation fields.\");\n  const targetSource = await readFile(targetSourcePath!, \"utf8\");\n  const migrated = migrateSnapshot(snapshot, {\n    source,\n    targetSource,\n    state: (plan as SnapshotMigrationOptions).state,\n    reconciliation: (plan as SnapshotMigrationOptions).reconciliation\n  });\n  const contents = serializeSafeJSSnapshot(migrated);\n  if (!options.dryRun) {\n    const temporaryPath = path.join(\n      path.dirname(outputPath!),\n      `.safejs-migration-${randomUUID()}.tmp`\n    );\n    let created = false;\n    try {\n      const handle = await open(temporaryPath, \"wx\", 0o600);\n      created = true;\n      try {\n        await handle.writeFile(contents, \"utf8\");\n        await handle.sync();\n      } finally {\n        await handle.close();\n      }\n      try {\n        await link(temporaryPath, outputPath!);\n      } catch (error) {\n        if (hasOwnErrorCode(error, \"EEXIST\"))\n          throw Object.assign(\n            new Error(\n              `Migration output already exists: ${JSON.stringify(outputPath)}. Choose a new output path; existing files are never overwritten.`,\n              { cause: error }\n            ),\n            { code: \"EEXIST\" }\n          );\n        throw error;\n      }\n    } finally {\n      if (created) await unlink(temporaryPath);\n    }\n  }\n  return { inspection, outputPath, dryRun: options.dryRun === true };\n}\n", "import { sha256 } from \"@noble/hashes/sha2.js\";\nimport { bytesToHex } from \"@noble/hashes/utils.js\";\n\nimport { assertSnapshotInactive } from \"./interp/running-state.js\";\nimport { deepCopyToSandbox } from \"./interp/values.js\";\nimport { hashSource } from \"./parse/hash.js\";\nimport { parseModule } from \"./parse/parser.js\";\nimport type { SafeJSSnapshot } from \"./restore.js\";\nimport { DUMP_FORMAT_VERSION, EXECUTION_SEMANTICS } from \"./snapshot/dump-format.js\";\nimport {\n  validateMigrationJournal,\n  validateMigrationReconciliation,\n  validateMigrationSemantics,\n  validateSnapshotMigration,\n  type SnapshotMigration,\n  type SnapshotMigrationReconciliation\n} from \"./snapshot/migration.js\";\nimport { encodeReplayData } from \"./snapshot/replay-data.js\";\nimport { validateDumpEnvelope, validateSnapshotData } from \"./snapshot/validation.js\";\n\nexport type {\n  SnapshotMigration,\n  SnapshotMigrationReconciliation,\n  SnapshotMigrationResolution\n} from \"./snapshot/migration.js\";\n\nexport type SnapshotMigrationOptions = {\n  source: string;\n  targetSource: string;\n  state: unknown;\n  reconciliation: SnapshotMigrationReconciliation;\n};\n\nexport function inspectSnapshotMigration(snapshot: SafeJSSnapshot, options: { source: string }) {\n  assertSnapshotInactive(snapshot);\n  validateSnapshotData(snapshot);\n  validateDumpEnvelope(snapshot);\n  validateMigrationSemantics(snapshot.executionSemantics);\n  const sourceHash = hashSource(\n    options.source,\n    undefined,\n    snapshot.executionSemantics === \"jobs-v8\" || snapshot.executionSemantics === EXECUTION_SEMANTICS\n  );\n  if (snapshot.sourceHash !== sourceHash)\n    throw new TypeError(\n      `Migration requires the original executable source (checkpoint hash ${snapshot.sourceHash}, supplied ${sourceHash}). Preserve the checkpoint; do not replace its hash.`\n    );\n  validateSnapshotMigration(snapshot.migration, sourceHash);\n  const replay = validateMigrationJournal(sourceHash, snapshot.replay, snapshot.hostCalls);\n  return {\n    checkpointDigest: bytesToHex(sha256(new TextEncoder().encode(canonicalData(snapshot)))),\n    sourceHash,\n    executionSemantics: snapshot.executionSemantics,\n    calls: replay.calls,\n    unresolvedCalls: replay.calls.filter(\n      (call) => ![\"settled\", \"consumed\"].includes(call.lifecycle)\n    )\n  };\n}\n\nexport function migrateSnapshot(\n  snapshot: SafeJSSnapshot,\n  options: SnapshotMigrationOptions\n): SafeJSSnapshot & { migration: SnapshotMigration } {\n  if (!Object.hasOwn(options, \"state\"))\n    throw new TypeError(\"Migration requires explicit application state.\");\n  const inspection = inspectSnapshotMigration(snapshot, { source: options.source });\n  parseModule(options.targetSource);\n  const targetSourceHash = hashSource(options.targetSource);\n  validateMigrationReconciliation(\n    options.reconciliation,\n    inspection.checkpointDigest,\n    inspection.calls\n  );\n  const state = encodeReplayData(deepCopyToSandbox(options.state));\n  const previous = snapshot.migration as SnapshotMigration | undefined;\n  const migration: SnapshotMigration = {\n    version: 1,\n    state,\n    history: [\n      ...structuredClone(previous?.history ?? []),\n      {\n        sourceHash: inspection.sourceHash,\n        targetSourceHash,\n        executionSemantics: inspection.executionSemantics,\n        replay: { version: 1, calls: inspection.calls },\n        reconciliation: structuredClone(options.reconciliation)\n      }\n    ]\n  };\n  validateSnapshotMigration(migration, targetSourceHash);\n  return {\n    version: DUMP_FORMAT_VERSION,\n    executionSemantics: EXECUTION_SEMANTICS,\n    sourceHash: targetSourceHash,\n    bindings: {},\n    replay: { version: 1, calls: [] },\n    migration\n  };\n}\n\nfunction canonicalData(value: unknown): string {\n  if (Array.isArray(value)) return `[${value.map(canonicalData).join(\",\")}]`;\n  if (value !== null && typeof value === \"object\")\n    return `{${Object.keys(value)\n      .sort()\n      .map(\n        (key) => `${JSON.stringify(key)}:${canonicalData((value as Record<string, unknown>)[key])}`\n      )\n      .join(\",\")}}`;\n  return JSON.stringify(value);\n}\n"],
-  "mappings": ";;;;;;;;;;;;;;;;;;;;;;;;;AAAA,SAAS,kBAAkB;AAC3B,SAAS,MAAM,MAAM,UAAU,cAAc;AAC7C,OAAO,UAAU;;;ACFjB,SAAS,cAAc;AACvB,SAAS,kBAAkB;AAgCpB,SAAS,yBAAyB,UAA0B,SAA6B;AAC9F,yBAAuB,QAAQ;AAC/B,uBAAqB,QAAQ;AAC7B,uBAAqB,QAAQ;AAC7B,6BAA2B,SAAS,kBAAkB;AACtD,QAAM,aAAa;AAAA,IACjB,QAAQ;AAAA,IACR;AAAA,IACA,SAAS,uBAAuB,aAAa,SAAS,uBAAuB;AAAA,EAC/E;AACA,MAAI,SAAS,eAAe;AAC1B,UAAM,IAAI;AAAA,MACR,sEAAsE,SAAS,UAAU,cAAc,UAAU;AAAA,IACnH;AACF,4BAA0B,SAAS,WAAW,UAAU;AACxD,QAAM,SAAS,yBAAyB,YAAY,SAAS,QAAQ,SAAS,SAAS;AACvF,SAAO;AAAA,IACL,kBAAkB,WAAW,OAAO,IAAI,YAAY,EAAE,OAAO,cAAc,QAAQ,CAAC,CAAC,CAAC;AAAA,IACtF;AAAA,IACA,oBAAoB,SAAS;AAAA,IAC7B,OAAO,OAAO;AAAA,IACd,iBAAiB,OAAO,MAAM;AAAA,MAC5B,CAAC,SAAS,CAAC,CAAC,WAAW,UAAU,EAAE,SAAS,KAAK,SAAS;AAAA,IAC5D;AAAA,EACF;AACF;AAEO,SAAS,gBACd,UACA,SACmD;AACnD,MAAI,CAAC,OAAO,OAAO,SAAS,OAAO;AACjC,UAAM,IAAI,UAAU,gDAAgD;AACtE,QAAM,aAAa,yBAAyB,UAAU,EAAE,QAAQ,QAAQ,OAAO,CAAC;AAChF,cAAY,QAAQ,YAAY;AAChC,QAAM,mBAAmB,WAAW,QAAQ,YAAY;AACxD;AAAA,IACE,QAAQ;AAAA,IACR,WAAW;AAAA,IACX,WAAW;AAAA,EACb;AACA,QAAM,QAAQ,iBAAiB,kBAAkB,QAAQ,KAAK,CAAC;AAC/D,QAAM,WAAW,SAAS;AAC1B,QAAM,YAA+B;AAAA,IACnC,SAAS;AAAA,IACT;AAAA,IACA,SAAS;AAAA,MACP,GAAG,gBAAgB,UAAU,WAAW,CAAC,CAAC;AAAA,MAC1C;AAAA,QACE,YAAY,WAAW;AAAA,QACvB;AAAA,QACA,oBAAoB,WAAW;AAAA,QAC/B,QAAQ,EAAE,SAAS,GAAG,OAAO,WAAW,MAAM;AAAA,QAC9C,gBAAgB,gBAAgB,QAAQ,cAAc;AAAA,MACxD;AAAA,IACF;AAAA,EACF;AACA,4BAA0B,WAAW,gBAAgB;AACrD,SAAO;AAAA,IACL,SAAS;AAAA,IACT,oBAAoB;AAAA,IACpB,YAAY;AAAA,IACZ,UAAU,CAAC;AAAA,IACX,QAAQ,EAAE,SAAS,GAAG,OAAO,CAAC,EAAE;AAAA,IAChC;AAAA,EACF;AACF;AAEA,SAAS,cAAc,OAAwB;AAC7C,MAAI,MAAM,QAAQ,KAAK,EAAG,QAAO,IAAI,MAAM,IAAI,aAAa,EAAE,KAAK,GAAG,CAAC;AACvE,MAAI,UAAU,QAAQ,OAAO,UAAU;AACrC,WAAO,IAAI,OAAO,KAAK,KAAK,EACzB,KAAK,EACL;AAAA,MACC,CAAC,QAAQ,GAAG,KAAK,UAAU,GAAG,CAAC,IAAI,cAAe,MAAkC,GAAG,CAAC,CAAC;AAAA,IAC3F,EACC,KAAK,GAAG,CAAC;AACd,SAAO,KAAK,UAAU,KAAK;AAC7B;;;ADvFA,eAAsB,oBAAoB,SAAuC;AAC/E,QAAM,MAAM,QAAQ,OAAO,QAAQ,IAAI;AACvC,QAAM,cAAc,CAAC,OAA2B,UAAkB;AAChE,QAAI,OAAO,UAAU,YAAY,MAAM,KAAK,EAAE,WAAW;AACvD,YAAM,IAAI,UAAU,sBAAsB,KAAK,GAAG;AACpD,WAAO,KAAK,QAAQ,KAAK,KAAK;AAAA,EAChC;AACA,QAAM,eAAe,YAAY,QAAQ,cAAc,iBAAiB;AACxE,QAAM,aAAa,YAAY,QAAQ,YAAY,uBAAuB;AAC1E,MACE,QAAQ,WACR,CAAC,QAAQ,kBAAkB,QAAQ,UAAU,QAAQ,UAAU,EAAE;AAAA,IAC/D,CAAC,UAAU,UAAU;AAAA,EACvB;AAEA,UAAM,IAAI,UAAU,wEAAwE;AAC9F,QAAM,aAAa,QAAQ,UACvB,SACA,YAAY,QAAQ,YAAY,gCAAgC;AACpE,QAAM,mBAAmB,QAAQ,UAC7B,SACA,YAAY,QAAQ,kBAAkB,yBAAyB;AACnE,QAAM,WAAW,QAAQ,UACrB,SACA,YAAY,QAAQ,UAAU,yBAAyB;AAC3D,aAAW,YAAY,CAAC,YAAY,gBAAgB,GAAG;AACrD,QAAI,aAAa,UAAa,CAAC,CAAC,QAAQ,SAAS,EAAE,SAAS,KAAK,QAAQ,QAAQ,CAAC;AAChF,YAAM,IAAI;AAAA,QACR;AAAA,MACF;AAAA,EACJ;AACA,QAAM,WAA2B,KAAK,MAAM,MAAM,SAAS,cAAc,MAAM,CAAC;AAChF,QAAM,SAAS,MAAM,SAAS,YAAY,MAAM;AAChD,QAAM,aAAa,yBAAyB,UAAU,EAAE,OAAO,CAAC;AAChE,MAAI,QAAQ,QAAS,QAAO,EAAE,WAAW;AACzC,QAAM,OAAgB,KAAK,MAAM,MAAM,SAAS,UAAW,MAAM,CAAC;AAClE,MACE,SAAS,QACT,OAAO,SAAS,YAChB,CAAC,OAAO,OAAO,MAAM,OAAO,KAC5B,CAAC,OAAO,OAAO,MAAM,gBAAgB;AAErC,UAAM,IAAI,UAAU,mEAAmE;AACzF,QAAM,eAAe,MAAM,SAAS,kBAAmB,MAAM;AAC7D,QAAM,WAAW,gBAAgB,UAAU;AAAA,IACzC;AAAA,IACA;AAAA,IACA,OAAQ,KAAkC;AAAA,IAC1C,gBAAiB,KAAkC;AAAA,EACrD,CAAC;AACD,QAAM,WAAW,wBAAwB,QAAQ;AACjD,MAAI,CAAC,QAAQ,QAAQ;AACnB,UAAM,gBAAgB,KAAK;AAAA,MACzB,KAAK,QAAQ,UAAW;AAAA,MACxB,qBAAqB,WAAW,CAAC;AAAA,IACnC;AACA,QAAI,UAAU;AACd,QAAI;AACF,YAAM,SAAS,MAAM,KAAK,eAAe,MAAM,GAAK;AACpD,gBAAU;AACV,UAAI;AACF,cAAM,OAAO,UAAU,UAAU,MAAM;AACvC,cAAM,OAAO,KAAK;AAAA,MACpB,UAAE;AACA,cAAM,OAAO,MAAM;AAAA,MACrB;AACA,UAAI;AACF,cAAM,KAAK,eAAe,UAAW;AAAA,MACvC,SAAS,OAAO;AACd,YAAI,gBAAgB,OAAO,QAAQ;AACjC,gBAAM,OAAO;AAAA,YACX,IAAI;AAAA,cACF,oCAAoC,KAAK,UAAU,UAAU,CAAC;AAAA,cAC9D,EAAE,OAAO,MAAM;AAAA,YACjB;AAAA,YACA,EAAE,MAAM,SAAS;AAAA,UACnB;AACF,cAAM;AAAA,MACR;AAAA,IACF,UAAE;AACA,UAAI,QAAS,OAAM,OAAO,aAAa;AAAA,IACzC;AAAA,EACF;AACA,SAAO,EAAE,YAAY,YAAY,QAAQ,QAAQ,WAAW,KAAK;AACnE;",
-  "names": []
-}