@poe-platform/safe-js 0.1.730 → 0.1.732

package/dist/safe-js/chunks/{chunk-VIMROAQA.js → chunk-E4XLBT7R.js}

@@ -1,6 +1,6 @@
 import {
   isSandboxClosure
-} from "./chunk-S5YDMMM3.js";
+} from "./chunk-MDIWQFYU.js";
 
 // packages/safe-js/src/lint/runtime-modules.ts
 var AsyncFunction = (async () => void 0).constructor;
@@ -34,4 +34,4 @@ function isAsyncRuntimeExport(value) {
 export {
   createLintModulesFromRuntimeRegistry
 };
-//# sourceMappingURL=chunk-VIMROAQA.js.map
+//# sourceMappingURL=chunk-E4XLBT7R.js.map

package/dist/safe-js/chunks/chunk-F6CV74HU.js

@@ -0,0 +1,114 @@
+import {
+  paths_default
+} from "./chunk-YUQFFRUF.js";
+import {
+  constants,
+  hostFs
+} from "./chunk-UQPYTZOZ.js";
+
+// packages/safe-js/src/modules/source-files.ts
+import { resolvePath } from "@poe-platform/safe-fs/core";
+async function createRootedSourceResolver(root, adapter) {
+  const realpath = (filename) => adapter ? adapter.realpath(filename) : hostFs.realpath(filename);
+  const stat = async (filename) => adapter ? sourceStat(await adapter.stat(filename)) : await hostFs.stat(filename);
+  const granted = adapter ? resolvePath("/", root) : paths_default.resolve(root);
+  const directory = await realpath(granted);
+  if (!(await stat(directory)).isDirectory()) throw new TypeError("Source module root must be a directory.");
+  const contains = (filename) => {
+    const relative = paths_default.relative(directory, filename);
+    return relative !== ".." && !relative.startsWith(`..${paths_default.sep}`) && !paths_default.isAbsolute(relative);
+  };
+  const resolver = async (specifier, referrer, { signal }) => {
+    signal?.throwIfAborted();
+    if (!specifier.startsWith("./") && !specifier.startsWith("../") || !paths_default.isAbsolute(referrer)) return void 0;
+    const relative = paths_default.relative(granted, referrer);
+    const canonicalReferrer = relative !== ".." && !relative.startsWith(`..${paths_default.sep}`) && !paths_default.isAbsolute(relative) ? paths_default.resolve(directory, relative) : referrer;
+    if (!contains(canonicalReferrer)) return void 0;
+    const candidate = paths_default.resolve(paths_default.dirname(canonicalReferrer), specifier);
+    if (!contains(candidate)) return void 0;
+    try {
+      const id = await realpath(candidate);
+      signal?.throwIfAborted();
+      if (!contains(id)) return void 0;
+      const expected = await stat(id);
+      signal?.throwIfAborted();
+      if (!expected.isFile()) return void 0;
+      const handle = adapter ? await openSourceFile(adapter, id, signal) : await hostFs.open(id, constants.O_RDONLY | constants.O_NOFOLLOW | constants.O_NONBLOCK);
+      try {
+        signal?.throwIfAborted();
+        const actual = await handle.stat();
+        signal?.throwIfAborted();
+        if (!actual.isFile() || ("identity" in actual && "identity" in expected ? !sameSourceIdentity(actual.identity, expected.identity) : actual.dev !== expected.dev || actual.ino !== expected.ino)) return void 0;
+        const currentId = await realpath(id);
+        signal?.throwIfAborted();
+        if (currentId !== id) return void 0;
+        const source = await handle.readFile({ encoding: "utf8", signal });
+        signal?.throwIfAborted();
+        return { id, source };
+      } finally {
+        await handle.close();
+      }
+    } catch (error) {
+      signal?.throwIfAborted();
+      if (error !== null && typeof error === "object" && "code" in error && ["ENOENT", "ENOTDIR", "ELOOP"].includes(String(error.code))) return void 0;
+      throw error;
+    }
+  };
+  return Object.assign(resolver, { async entryId(filename) {
+    if (filename === void 0) return paths_default.join(directory, "<entry>");
+    const supplied = paths_default.resolve(granted, filename);
+    const relative = paths_default.relative(granted, supplied);
+    const candidate = relative !== ".." && !relative.startsWith(`..${paths_default.sep}`) && !paths_default.isAbsolute(relative) ? paths_default.resolve(directory, relative) : supplied;
+    if (!contains(candidate)) throw new TypeError("Source entry must be inside its granted root.");
+    try {
+      const id = await realpath(candidate);
+      if (!contains(id)) throw new TypeError("Source entry must be inside its granted root.");
+      return id;
+    } catch (error) {
+      if (error !== null && typeof error === "object" && "code" in error && error.code === "ENOENT") return candidate;
+      throw error;
+    }
+  } });
+}
+function sourceStat(value) {
+  return {
+    identity: value,
+    dev: value.dev,
+    ino: value.ino,
+    isFile: () => value.type === "file",
+    isDirectory: () => value.type === "directory"
+  };
+}
+function sameSourceIdentity(actual, expected) {
+  if (expected.identityScope !== void 0 && expected.opaqueIdentity !== void 0) {
+    return actual.identityScope === expected.identityScope && actual.opaqueIdentity === expected.opaqueIdentity && (expected.opaqueVersion === void 0 || actual.opaqueVersion === expected.opaqueVersion);
+  }
+  return expected.dev !== void 0 && expected.ino !== void 0 && actual.dev === expected.dev && actual.ino === expected.ino;
+}
+async function openSourceFile(adapter, id, signal) {
+  if (!adapter.openReadFile) throw new TypeError("Source filesystem must support retained reads.");
+  const handle = await adapter.openReadFile(id, signal ? { signal } : {});
+  return {
+    stat: async () => sourceStat(await handle.stat(signal ? { signal } : {})),
+    close: handle.close.bind(handle),
+    async readFile(_options) {
+      const decoder = new TextDecoder("utf-8", { ignoreBOM: true });
+      const chunks = [];
+      let position = 0;
+      for (; ; ) {
+        signal?.throwIfAborted();
+        const chunk = await handle.read(position, 64 * 1024, signal ? { signal } : {});
+        if (chunk.byteLength === 0) break;
+        chunks.push(decoder.decode(chunk, { stream: true }));
+        position += chunk.byteLength;
+      }
+      chunks.push(decoder.decode());
+      return chunks.join("");
+    }
+  };
+}
+
+export {
+  createRootedSourceResolver
+};
+//# sourceMappingURL=chunk-F6CV74HU.js.map

package/dist/safe-js/chunks/chunk-F6CV74HU.js.map

@@ -0,0 +1,7 @@
+{
+  "version": 3,
+  "sources": ["../../src/modules/source-files.ts"],
+  "sourcesContent": ["import {hostFs, fsConstants as constants} from \"#safe-js-platform\";\nimport {resolvePath, type FileSystem, type FileStat} from \"@poe-code/safe-fs/core\";\n\nimport path from \"./paths.js\";\nimport type {SourceResolver} from \"./source-graph.js\";\n\n/** Explicit filesystem grant. No package lookup, extension search, or URL loading. */\nexport async function createRootedSourceResolver(root: string, adapter?: FileSystem): Promise<SourceResolver & {\n  entryId(filename?: string): Promise<string>;\n}> {\n  const realpath = (filename: string) => adapter ? adapter.realpath(filename) : hostFs.realpath(filename);\n  const stat = async (filename: string) => adapter ? sourceStat(await adapter.stat(filename)) : await hostFs.stat(filename);\n  const granted = adapter ? resolvePath(\"/\", root) : path.resolve(root);\n  const directory = await realpath(granted);\n  if (!(await stat(directory)).isDirectory()) throw new TypeError(\"Source module root must be a directory.\");\n  const contains = (filename: string) => {\n    const relative = path.relative(directory,filename);\n    return relative !== \"..\" && !relative.startsWith(`..${path.sep}`) && !path.isAbsolute(relative);\n  };\n  const resolver: SourceResolver = async (specifier,referrer,{signal}) => {\n    signal?.throwIfAborted();\n    if ((!specifier.startsWith(\"./\") && !specifier.startsWith(\"../\")) || !path.isAbsolute(referrer)) return undefined;\n    const relative = path.relative(granted,referrer);\n    const canonicalReferrer = relative !== \"..\" && !relative.startsWith(`..${path.sep}`) && !path.isAbsolute(relative)\n      ? path.resolve(directory,relative) : referrer;\n    if (!contains(canonicalReferrer)) return undefined;\n    const candidate = path.resolve(path.dirname(canonicalReferrer),specifier);\n    if (!contains(candidate)) return undefined;\n    try {\n      const id = await realpath(candidate);\n      signal?.throwIfAborted();\n      if (!contains(id)) return undefined;\n      const expected = await stat(id);\n      signal?.throwIfAborted();\n      if (!expected.isFile()) return undefined;\n      const handle = adapter\n        ? await openSourceFile(adapter, id, signal)\n        : await hostFs.open(id,constants.O_RDONLY | constants.O_NOFOLLOW | constants.O_NONBLOCK);\n      try {\n        signal?.throwIfAborted();\n        const actual = await handle.stat();\n        signal?.throwIfAborted();\n        // Read the checked inode, never reopen its pathname. These checks deny\n        // observed replacements; Node's path APIs do not provide atomic ancestor\n        // confinement against an adversary repeatedly swapping directories.\n        if (!actual.isFile() || (\"identity\" in actual && \"identity\" in expected\n          ? !sameSourceIdentity(actual.identity, expected.identity)\n          : actual.dev !== expected.dev || actual.ino !== expected.ino)) return undefined;\n        const currentId = await realpath(id);\n        signal?.throwIfAborted();\n        if (currentId !== id) return undefined;\n        const source = await handle.readFile({encoding:\"utf8\",signal});\n        signal?.throwIfAborted();\n        return {id,source};\n      } finally {await handle.close();}\n    } catch (error) {\n      signal?.throwIfAborted();\n      if (error !== null && typeof error === \"object\" && \"code\" in error &&\n          [\"ENOENT\",\"ENOTDIR\",\"ELOOP\"].includes(String(error.code))) return undefined;\n      throw error;\n    }\n  };\n  return Object.assign(resolver, {async entryId(filename?: string): Promise<string> {\n    if (filename === undefined) return path.join(directory,\"<entry>\");\n    const supplied = path.resolve(granted,filename);\n    const relative = path.relative(granted,supplied);\n    const candidate = relative !== \"..\" && !relative.startsWith(`..${path.sep}`) && !path.isAbsolute(relative)\n      ? path.resolve(directory,relative) : supplied;\n    if (!contains(candidate)) throw new TypeError(\"Source entry must be inside its granted root.\");\n    try {\n      const id = await realpath(candidate);\n      if (!contains(id)) throw new TypeError(\"Source entry must be inside its granted root.\");\n      return id;\n    } catch (error) {\n      if (error !== null && typeof error === \"object\" && \"code\" in error && error.code === \"ENOENT\") return candidate;\n      throw error;\n    }\n  }});\n}\n\nfunction sourceStat(value: FileStat) {\n  return {identity: value, dev: value.dev, ino: value.ino,\n    isFile: () => value.type === \"file\", isDirectory: () => value.type === \"directory\"};\n}\n\nfunction sameSourceIdentity(actual: FileStat, expected: FileStat): boolean {\n  if (expected.identityScope !== undefined && expected.opaqueIdentity !== undefined) {\n    return actual.identityScope === expected.identityScope && actual.opaqueIdentity === expected.opaqueIdentity &&\n      (expected.opaqueVersion === undefined || actual.opaqueVersion === expected.opaqueVersion);\n  }\n  return expected.dev !== undefined && expected.ino !== undefined && actual.dev === expected.dev && actual.ino === expected.ino;\n}\n\nasync function openSourceFile(adapter: FileSystem, id: string, signal?: AbortSignal) {\n  if (!adapter.openReadFile) throw new TypeError(\"Source filesystem must support retained reads.\");\n  const handle = await adapter.openReadFile(id, signal ? {signal} : {});\n  return {\n    stat: async () => sourceStat(await handle.stat(signal ? {signal} : {})),\n    close: handle.close.bind(handle),\n    async readFile(_options: {encoding: \"utf8\"; signal?: AbortSignal}) {\n      const decoder = new TextDecoder(\"utf-8\", {ignoreBOM: true});\n      const chunks: string[] = [];\n      let position = 0;\n      for (;;) {\n        signal?.throwIfAborted();\n        const chunk = await handle.read(position, 64 * 1024, signal ? {signal} : {});\n        if (chunk.byteLength === 0) break;\n        chunks.push(decoder.decode(chunk, {stream: true}));\n        position += chunk.byteLength;\n      }\n      chunks.push(decoder.decode());\n      return chunks.join(\"\");\n    }\n  };\n}\n"],
+  "mappings": ";;;;;;;;;AACA,SAAQ,mBAAkD;AAM1D,eAAsB,2BAA2B,MAAc,SAE5D;AACD,QAAM,WAAW,CAAC,aAAqB,UAAU,QAAQ,SAAS,QAAQ,IAAI,OAAO,SAAS,QAAQ;AACtG,QAAM,OAAO,OAAO,aAAqB,UAAU,WAAW,MAAM,QAAQ,KAAK,QAAQ,CAAC,IAAI,MAAM,OAAO,KAAK,QAAQ;AACxH,QAAM,UAAU,UAAU,YAAY,KAAK,IAAI,IAAI,cAAK,QAAQ,IAAI;AACpE,QAAM,YAAY,MAAM,SAAS,OAAO;AACxC,MAAI,EAAE,MAAM,KAAK,SAAS,GAAG,YAAY,EAAG,OAAM,IAAI,UAAU,yCAAyC;AACzG,QAAM,WAAW,CAAC,aAAqB;AACrC,UAAM,WAAW,cAAK,SAAS,WAAU,QAAQ;AACjD,WAAO,aAAa,QAAQ,CAAC,SAAS,WAAW,KAAK,cAAK,GAAG,EAAE,KAAK,CAAC,cAAK,WAAW,QAAQ;AAAA,EAChG;AACA,QAAM,WAA2B,OAAO,WAAU,UAAS,EAAC,OAAM,MAAM;AACtE,YAAQ,eAAe;AACvB,QAAK,CAAC,UAAU,WAAW,IAAI,KAAK,CAAC,UAAU,WAAW,KAAK,KAAM,CAAC,cAAK,WAAW,QAAQ,EAAG,QAAO;AACxG,UAAM,WAAW,cAAK,SAAS,SAAQ,QAAQ;AAC/C,UAAM,oBAAoB,aAAa,QAAQ,CAAC,SAAS,WAAW,KAAK,cAAK,GAAG,EAAE,KAAK,CAAC,cAAK,WAAW,QAAQ,IAC7G,cAAK,QAAQ,WAAU,QAAQ,IAAI;AACvC,QAAI,CAAC,SAAS,iBAAiB,EAAG,QAAO;AACzC,UAAM,YAAY,cAAK,QAAQ,cAAK,QAAQ,iBAAiB,GAAE,SAAS;AACxE,QAAI,CAAC,SAAS,SAAS,EAAG,QAAO;AACjC,QAAI;AACF,YAAM,KAAK,MAAM,SAAS,SAAS;AACnC,cAAQ,eAAe;AACvB,UAAI,CAAC,SAAS,EAAE,EAAG,QAAO;AAC1B,YAAM,WAAW,MAAM,KAAK,EAAE;AAC9B,cAAQ,eAAe;AACvB,UAAI,CAAC,SAAS,OAAO,EAAG,QAAO;AAC/B,YAAM,SAAS,UACX,MAAM,eAAe,SAAS,IAAI,MAAM,IACxC,MAAM,OAAO,KAAK,IAAG,UAAU,WAAW,UAAU,aAAa,UAAU,UAAU;AACzF,UAAI;AACF,gBAAQ,eAAe;AACvB,cAAM,SAAS,MAAM,OAAO,KAAK;AACjC,gBAAQ,eAAe;AAIvB,YAAI,CAAC,OAAO,OAAO,MAAM,cAAc,UAAU,cAAc,WAC3D,CAAC,mBAAmB,OAAO,UAAU,SAAS,QAAQ,IACtD,OAAO,QAAQ,SAAS,OAAO,OAAO,QAAQ,SAAS,KAAM,QAAO;AACxE,cAAM,YAAY,MAAM,SAAS,EAAE;AACnC,gBAAQ,eAAe;AACvB,YAAI,cAAc,GAAI,QAAO;AAC7B,cAAM,SAAS,MAAM,OAAO,SAAS,EAAC,UAAS,QAAO,OAAM,CAAC;AAC7D,gBAAQ,eAAe;AACvB,eAAO,EAAC,IAAG,OAAM;AAAA,MACnB,UAAE;AAAS,cAAM,OAAO,MAAM;AAAA,MAAE;AAAA,IAClC,SAAS,OAAO;AACd,cAAQ,eAAe;AACvB,UAAI,UAAU,QAAQ,OAAO,UAAU,YAAY,UAAU,SACzD,CAAC,UAAS,WAAU,OAAO,EAAE,SAAS,OAAO,MAAM,IAAI,CAAC,EAAG,QAAO;AACtE,YAAM;AAAA,IACR;AAAA,EACF;AACA,SAAO,OAAO,OAAO,UAAU,EAAC,MAAM,QAAQ,UAAoC;AAChF,QAAI,aAAa,OAAW,QAAO,cAAK,KAAK,WAAU,SAAS;AAChE,UAAM,WAAW,cAAK,QAAQ,SAAQ,QAAQ;AAC9C,UAAM,WAAW,cAAK,SAAS,SAAQ,QAAQ;AAC/C,UAAM,YAAY,aAAa,QAAQ,CAAC,SAAS,WAAW,KAAK,cAAK,GAAG,EAAE,KAAK,CAAC,cAAK,WAAW,QAAQ,IACrG,cAAK,QAAQ,WAAU,QAAQ,IAAI;AACvC,QAAI,CAAC,SAAS,SAAS,EAAG,OAAM,IAAI,UAAU,+CAA+C;AAC7F,QAAI;AACF,YAAM,KAAK,MAAM,SAAS,SAAS;AACnC,UAAI,CAAC,SAAS,EAAE,EAAG,OAAM,IAAI,UAAU,+CAA+C;AACtF,aAAO;AAAA,IACT,SAAS,OAAO;AACd,UAAI,UAAU,QAAQ,OAAO,UAAU,YAAY,UAAU,SAAS,MAAM,SAAS,SAAU,QAAO;AACtG,YAAM;AAAA,IACR;AAAA,EACF,EAAC,CAAC;AACJ;AAEA,SAAS,WAAW,OAAiB;AACnC,SAAO;AAAA,IAAC,UAAU;AAAA,IAAO,KAAK,MAAM;AAAA,IAAK,KAAK,MAAM;AAAA,IAClD,QAAQ,MAAM,MAAM,SAAS;AAAA,IAAQ,aAAa,MAAM,MAAM,SAAS;AAAA,EAAW;AACtF;AAEA,SAAS,mBAAmB,QAAkB,UAA6B;AACzE,MAAI,SAAS,kBAAkB,UAAa,SAAS,mBAAmB,QAAW;AACjF,WAAO,OAAO,kBAAkB,SAAS,iBAAiB,OAAO,mBAAmB,SAAS,mBAC1F,SAAS,kBAAkB,UAAa,OAAO,kBAAkB,SAAS;AAAA,EAC/E;AACA,SAAO,SAAS,QAAQ,UAAa,SAAS,QAAQ,UAAa,OAAO,QAAQ,SAAS,OAAO,OAAO,QAAQ,SAAS;AAC5H;AAEA,eAAe,eAAe,SAAqB,IAAY,QAAsB;AACnF,MAAI,CAAC,QAAQ,aAAc,OAAM,IAAI,UAAU,gDAAgD;AAC/F,QAAM,SAAS,MAAM,QAAQ,aAAa,IAAI,SAAS,EAAC,OAAM,IAAI,CAAC,CAAC;AACpE,SAAO;AAAA,IACL,MAAM,YAAY,WAAW,MAAM,OAAO,KAAK,SAAS,EAAC,OAAM,IAAI,CAAC,CAAC,CAAC;AAAA,IACtE,OAAO,OAAO,MAAM,KAAK,MAAM;AAAA,IAC/B,MAAM,SAAS,UAAoD;AACjE,YAAM,UAAU,IAAI,YAAY,SAAS,EAAC,WAAW,KAAI,CAAC;AAC1D,YAAM,SAAmB,CAAC;AAC1B,UAAI,WAAW;AACf,iBAAS;AACP,gBAAQ,eAAe;AACvB,cAAM,QAAQ,MAAM,OAAO,KAAK,UAAU,KAAK,MAAM,SAAS,EAAC,OAAM,IAAI,CAAC,CAAC;AAC3E,YAAI,MAAM,eAAe,EAAG;AAC5B,eAAO,KAAK,QAAQ,OAAO,OAAO,EAAC,QAAQ,KAAI,CAAC,CAAC;AACjD,oBAAY,MAAM;AAAA,MACpB;AACA,aAAO,KAAK,QAAQ,OAAO,CAAC;AAC5B,aAAO,OAAO,KAAK,EAAE;AAAA,IACvB;AAAA,EACF;AACF;",
+  "names": []
+}

package/dist/safe-js/chunks/{chunk-OZLTLIHX.js → chunk-G6WTEIJJ.js}

@@ -1,6 +1,6 @@
 import {
   hasOwnErrorCode
-} from "./chunk-SJZWSPWD.js";
+} from "./chunk-2GVBG23M.js";
 
 // packages/safe-js/src/output-stream.ts
 function createBrokenPipeState() {
@@ -57,4 +57,4 @@ export {
   withBrokenPipeGuard,
   addBrokenPipeListener
 };
-//# sourceMappingURL=chunk-OZLTLIHX.js.map
+//# sourceMappingURL=chunk-G6WTEIJJ.js.map

package/dist/safe-js/chunks/{chunk-XX57YCGZ.js → chunk-GNEORAQI.js}

@@ -1,18 +1,21 @@
 import {
-  restore
-} from "./chunk-EN724VH3.js";
-import {
-  attachDumpController,
-  createDumpController
-} from "./chunk-MVLDRXWS.js";
+  fsCodec
+} from "./chunk-GVKXZW53.js";
 import {
   getOwnErrorCode,
   hasOwnErrorCode
-} from "./chunk-SJZWSPWD.js";
+} from "./chunk-2GVBG23M.js";
+import {
+  restore
+} from "./chunk-O4IDRXW7.js";
 import {
   hashParsedAst,
   hashSource
-} from "./chunk-EA7AHM2X.js";
+} from "./chunk-PSVV3IG2.js";
+import {
+  attachDumpController,
+  createDumpController
+} from "./chunk-X3CKAZQ4.js";
 import {
   DUMP_FORMAT_VERSION,
   EXECUTION_SEMANTICS,
@@ -35,7 +38,6 @@ import {
   createBuiltinBindings,
   createEvalSource,
   createGuestReference,
-  createHostCallbackContext,
   createImmutableEmptyModuleEnvironment,
   createLiveHostObject,
   createModuleEnvironment,
@@ -100,7 +102,7 @@ import {
   withSandboxPromiseRejectionTracker,
   wrapCallerInjectedBindings,
   wrapCancelableBindings
-} from "./chunk-S5YDMMM3.js";
+} from "./chunk-MDIWQFYU.js";
 import {
   Budget,
   CompileScope,
@@ -115,14 +117,18 @@ import {
   parseSourceModule,
   replaceErrorStack,
   safeAddEvent
-} from "./chunk-Y5EZYHU6.js";
-
-// packages/safe-js/src/realm.ts
-import { AsyncLocalStorage as AsyncLocalStorage2 } from "node:async_hooks";
-import { types } from "node:util";
+} from "./chunk-QKO4FATZ.js";
+import {
+  dirname
+} from "./chunk-YUQFFRUF.js";
+import {
+  AsyncLocalStorage,
+  createHostCallbackContext,
+  hostFs,
+  types
+} from "./chunk-UQPYTZOZ.js";
 
 // packages/safe-js/src/modules/source-graph.ts
-import { AsyncLocalStorage } from "node:async_hooks";
 var ambiguous = /* @__PURE__ */ Symbol("ambiguous module export");
 var sourceRecords = /* @__PURE__ */ new WeakSet();
 var SourceModuleGraph = class {
@@ -612,17 +618,17 @@ var RealmState = class {
     this.queue = queue;
     const limitInput = readDataRecord(options.limits ?? {}, "Realm limits");
     this.limits = {
-      extensions: 32,
-      hostObjects: 1024,
-      callbacks: 1024,
-      guestReferences: 1024,
-      cleanups: 1024,
-      nestedEvaluations: 16
+      extensions: Infinity,
+      hostObjects: Infinity,
+      callbacks: Infinity,
+      guestReferences: Infinity,
+      cleanups: Infinity,
+      nestedEvaluations: Infinity
     };
     for (const [name, value] of Object.entries(limitInput)) {
-      if (!Object.hasOwn(this.limits, name) || !Number.isSafeInteger(value) || Number(value) < 1)
-        throw new TypeError("Realm limits must be positive safe integers with supported names.");
-      this.limits[name] = Number(value);
+      if (!Object.hasOwn(this.limits, name) || value !== void 0 && value !== Infinity && (!Number.isSafeInteger(value) || Number(value) < 1))
+        throw new TypeError("Realm limits must be positive safe integers or Infinity with supported names.");
+      if (value !== void 0) this.limits[name] = Number(value);
     }
     if (options.extensions !== void 0 && (!Array.isArray(options.extensions) || types.isProxy(options.extensions)))
       throw new TypeError("Extensions must be a registration array.");
@@ -655,7 +661,7 @@ var RealmState = class {
         throw new TypeError("Console override requires a registered extension declaring console.");
       this.consoleExtension = extensionName;
     }
-    this.budget = options.budget ?? new Budget({ maxCallDepth: 1e3 });
+    this.budget = options.budget ?? new Budget();
     this.lease = this.budget.acquireRealmOwner();
     this.compilation = new CompileScope(this.lease.owner);
     this.bridge = {
@@ -731,7 +737,7 @@ var RealmState = class {
   lease;
   compilation;
   controller = new AbortController();
-  phase = new AsyncLocalStorage2();
+  phase = new AsyncLocalStorage();
   queue;
   tracker = createSandboxPromiseRejectionTracker();
   bridge;
@@ -1733,9 +1739,7 @@ function readRealmOptions(value, oneShot = false) {
 }
 
 // packages/safe-js/src/snapshot/backend.ts
-import { randomUUID } from "node:crypto";
-import { readFile, rename, stat, unlink, writeFile } from "node:fs/promises";
-import { dirname } from "node:path";
+import { createFsBridge } from "@poe-platform/safe-fs/core";
 var DEFAULT_WRITE_MAX_ATTEMPTS = 3;
 var DEFAULT_WRITE_RETRY_DELAY_MS = 100;
 var LOCKED_FILE_ERROR_CODES = /* @__PURE__ */ new Set(["EACCES", "EBUSY", "EPERM"]);
@@ -1743,15 +1747,17 @@ var pendingOperations = /* @__PURE__ */ new Map();
 var FileSnapshotBackend = class {
   constructor(path, options = {}) {
     this.path = path;
+    this.#io = options.adapter === void 0 ? hostFs : createFsBridge(options.adapter, { codec: fsCodec });
     this.#writeMaxAttempts = options.writeMaxAttempts ?? DEFAULT_WRITE_MAX_ATTEMPTS;
     this.#writeRetryDelayMs = options.writeRetryDelayMs ?? DEFAULT_WRITE_RETRY_DELAY_MS;
   }
   path;
+  #io;
   #writeMaxAttempts;
   #writeRetryDelayMs;
   async read() {
     try {
-      return JSON.parse(await readFile(this.path, "utf8"));
+      return JSON.parse(await this.#io.readFile(this.path, "utf8"));
     } catch (error) {
       if (hasErrorCode(error, "ENOENT")) {
         return void 0;
@@ -1765,7 +1771,7 @@ var FileSnapshotBackend = class {
   async write(snapshot) {
     await enqueueOperation(
       this.path,
-      () => writeSnapshotAtomically(this.path, snapshot, {
+      () => writeSnapshotAtomically(this.#io, this.path, snapshot, {
         maxAttempts: this.#writeMaxAttempts,
         retryDelayMs: this.#writeRetryDelayMs
       })
@@ -1774,7 +1780,7 @@ var FileSnapshotBackend = class {
   async remove() {
     await enqueueOperation(this.path, async () => {
       try {
-        await unlink(this.path);
+        await this.#io.unlink(this.path);
       } catch (error) {
         if (!hasErrorCode(error, "ENOENT")) {
           throw error;
@@ -1783,14 +1789,14 @@ var FileSnapshotBackend = class {
     });
   }
 };
-async function writeSnapshotAtomically(snapshotPath, snapshot, options) {
+async function writeSnapshotAtomically(io, snapshotPath, snapshot, options) {
   const parentPath = dirname(snapshotPath);
   const contents = serializeSafeJSSnapshot(snapshot);
-  await assertParentDirectoryExists(snapshotPath, parentPath);
+  await assertParentDirectoryExists(io, snapshotPath, parentPath);
   for (let attempt = 1; attempt <= options.maxAttempts; attempt += 1) {
     try {
-      const temporaryPath = `${snapshotPath}.${randomUUID()}.tmp`;
-      await writeSnapshotOnce(temporaryPath, snapshotPath, contents);
+      const temporaryPath = `${snapshotPath}.${globalThis.crypto.randomUUID()}.tmp`;
+      await writeSnapshotOnce(io, temporaryPath, snapshotPath, contents);
       return;
     } catch (error) {
       if (hasErrorCode(error, "EEXIST")) {
@@ -1819,9 +1825,9 @@ async function writeSnapshotAtomically(snapshotPath, snapshot, options) {
     }
   }
 }
-async function assertParentDirectoryExists(snapshotPath, parentPath) {
+async function assertParentDirectoryExists(io, snapshotPath, parentPath) {
   try {
-    const parent = await stat(parentPath);
+    const parent = await io.stat(parentPath);
     if (!parent.isDirectory()) {
       throw new Error(
         `Cannot write snapshot at ${snapshotPath}: parent path ${parentPath} is not a directory`
@@ -1839,24 +1845,24 @@ async function assertParentDirectoryExists(snapshotPath, parentPath) {
     throw error;
   }
 }
-async function writeSnapshotOnce(temporaryPath, snapshotPath, contents) {
+async function writeSnapshotOnce(io, temporaryPath, snapshotPath, contents) {
   let temporaryCreated = false;
   let renamed = false;
   try {
     try {
-      await writeFile(temporaryPath, contents, { encoding: "utf8", flag: "wx" });
+      await io.writeFile(temporaryPath, contents, { encoding: "utf8", flag: "wx" });
       temporaryCreated = true;
     } catch (error) {
       if (!hasErrorCode(error, "EEXIST")) {
-        await removeTemporarySnapshot(temporaryPath).catch(() => void 0);
+        await removeTemporarySnapshot(io, temporaryPath).catch(() => void 0);
       }
       throw error;
     }
-    await rename(temporaryPath, snapshotPath);
+    await io.rename(temporaryPath, snapshotPath);
     renamed = true;
   } finally {
     if (temporaryCreated && !renamed) {
-      await removeTemporarySnapshot(temporaryPath).catch(() => void 0);
+      await removeTemporarySnapshot(io, temporaryPath).catch(() => void 0);
     }
   }
 }
@@ -1873,9 +1879,9 @@ async function enqueueOperation(path, operation) {
     }
   }
 }
-async function removeTemporarySnapshot(temporaryPath) {
+async function removeTemporarySnapshot(io, temporaryPath) {
   try {
-    await unlink(temporaryPath);
+    await io.unlink(temporaryPath);
   } catch (error) {
     if (!hasErrorCode(error, "ENOENT")) {
       throw error;
@@ -2212,7 +2218,6 @@ var UnhandledRejectionError = class extends Error {
     replaceErrorStack(this);
   }
 };
-var DEFAULT_MAX_CALL_DEPTH = 1e3;
 function run(source, options = {}) {
   const jobs = new SandboxJobQueue();
   if (options.extensions !== void 0 || options.builtinOverrides !== void 0 || options.sourceType !== void 0 || options.sourceResolver !== void 0 || options.sourceRoot !== void 0) {
@@ -2221,7 +2226,7 @@ function run(source, options = {}) {
         throw new TypeError("Source resolution requires sourceType: 'module'.");
       if (options.sourceRoot !== void 0) {
         if (options.sourceResolver !== void 0) throw new TypeError("Specify sourceRoot or sourceResolver, not both.");
-        const { createRootedSourceResolver } = await import("./source-files-73OHLNGH.js");
+        const { createRootedSourceResolver } = await import("./source-files-L3SGK63Z.js");
         const { sourceRoot, ...resolved } = options;
         const sourceResolver = await createRootedSourceResolver(sourceRoot);
         return runWithExtensions(source, { ...resolved, filename: await sourceResolver.entryId(options.filename), sourceResolver }, jobs);
@@ -2245,7 +2250,7 @@ function run(source, options = {}) {
   const detachExecutionFailure = promiseTracker.onFatalRejection((error) => jobs.interrupt(error));
   let completedSnapshot;
   const execute = async () => {
-    const budget = options.budget ?? new Budget({ maxCallDepth: DEFAULT_MAX_CALL_DEPTH });
+    const budget = options.budget ?? new Budget();
     const operation = budget.acquireCompileOwner(true);
     const compilation = new CompileScope(operation.owner);
     try {
@@ -2824,4 +2829,4 @@ export {
   UnhandledRejectionError,
   run
 };
-//# sourceMappingURL=chunk-XX57YCGZ.js.map
+//# sourceMappingURL=chunk-GNEORAQI.js.map