@poe-platform/safe-js 0.1.745 → 0.1.747

package/README.md

@@ -460,7 +460,7 @@ For one-shot use, `run(source, { extensions, grants, ... })` accepts the same re
 
 `JSON.parse` checks both parse paths before building native objects: input work counts toward steps and deadlines, array lengths and object member counts use `arrayLength`, and nesting uses `maxCallDepth` only when explicitly configured. Parsing requires room for a conservative temporary allocation bound of `16 * text.length + 8` data units alongside existing data; whitespace and duplicate keys count toward this bound.
 
-There are no runtime environment variables to set. `makeEnvModule({ allow, values? })` grants reads of names in `allow`; `values` supplies an explicit string map instead of reading the host's `process.env`. Disallowed reads throw `EnvAccessError`; allowed but unset names return `undefined`. Agent and MCP integrations may require their own credentials.
+There are no runtime environment variables to set. `makeEnvModule({ allow, values? })` grants reads of names in `allow`; `values` supplies an explicit string map instead of reading the host's `process.env`. Hosts without `process.env` have no ambient values; pass Worker bindings through `values`. Disallowed reads throw `EnvAccessError`; allowed but unset names return `undefined`. Agent and MCP integrations may require their own credentials.
 
 <details>
 <summary>Linting, parsing, and value conversion</summary>
@@ -540,7 +540,7 @@ Factories return exports to register in `modules`; calling a factory alone does
 | `makeFsModule(options?)` | Node-backed `{ root?, fs? }`, or shared-filesystem `{ adapter, root?, cwd?, signal? }`; do not combine `fs` and `adapter`. Pass safe-fs instances through `adapter`; supplying one as `fs` throws at construction. Named methods, default imports and `promises` imports expose the same asynchronous filesystem operations, including `fs.promises.readFile(...)` on default imports and `promises.default.readFile(...)` on named imports. Node access without `root` is unconfined. Rooted calls sharing the same adapter or Node implementation are serialized through path checks and backend completion to prevent guest namespace races. External host mutations or distinct adapters over the same storage require independent backend confinement. With an adapter, `root` confines access and `cwd` selects the virtual relative-path base; without `root`, explicit `cwd` also confines access. Omitting both uses virtual `/`. Adapter text reads pass a byte cap derived conservatively from the guest string and remaining data limits to the backend before decoding. Optional `readFileMaxBytes` and `hostReadMemoryLimit` default to `Infinity` and accept explicit `Infinity`. A finite host allowance reserves ten bytes per input byte for collection, copies, encoding expansion and admission across concurrent reads from that module; reservations release after the underlying read settles and decoding finishes, including when cancellation rejects the caller earlier. Native Node/injected `fs` implementations retain their own read behavior. Read text with `readFile(path, "utf8")`; see the [module methods](src/modules/fs.ts) and [filesystem package](../safe-fs/README.md). |
 | `makeEnvModule(namesOrOptions)` | Allowed-name array or `{ allow, values? }`; exposes `get(name)`. `parseEnvConfig(json)` accepts the object form. |
 | `makeTimeModule(options?)` | `now`, `random`, `seed`, `signal`; exposes `now`, `random`, `sleep`, `uuid`. Defaults to host time/randomness; `seed` makes the random generator deterministic, and explicit `random` takes precedence. |
-| `makeLogModule(sink)` | Sends timestamped `info`, `error`, and `event` entries to your callback. |
+| `makeLogModule(sink)` | Sends timestamped `info`, `error`, and `event` entries to your callback; defaults to JSON lines on stdout, or console JSON when stdout is unavailable. |
 | `makeMetricModule(npmRunner)` | Runs `metric:<name>` through your callback; reads the final nonempty stdout line as a finite numeric score. |
 | `makeHarnessModule(frontmatter, meta)` | `meta` is `{ kind, version, filepath }`. Exposes `tasks`, `agents`, `meta`, and `applyConstraints`; prompt constraints come from frontmatter `principles` and `constraints`. |
 | `makeFailModule()` | Exposes a default function that throws a harness failure. No options. |

package/dist/safe-js/chunks/{chunk-MKY3MQUB.js → chunk-MZZ4GGSY.js}

@@ -16,7 +16,8 @@ import {
   splitSourceLines
 } from "./chunk-5WP5IRMP.js";
 import {
-  AsyncLocalStorage
+  AsyncLocalStorage,
+  hostCwd
 } from "./chunk-JCHJGIQA.js";
 
 // packages/safe-js/src/error/format.ts
@@ -1856,7 +1857,7 @@ function runObservedSpawn(moduleSink, input, operation) {
 }
 function readCurrentWorkingDirectory() {
   try {
-    return process.cwd();
+    return hostCwd();
   } catch (error) {
     throw new Error(`Unable to resolve current working directory: ${formatSpawnError(error)}`);
   }
@@ -2542,7 +2543,7 @@ function makeEnvModule(input) {
     get(name) {
       const variable = readEnvName(name, "Environment variable name");
       if (!allowedNames.has(variable)) throw new EnvAccessError(variable);
-      return readEnvValue(values ?? process.env, variable);
+      return readEnvValue(values ?? (typeof process !== "undefined" ? process.env ?? {} : {}), variable);
     }
   };
 }
@@ -2707,7 +2708,10 @@ function makeLogModule(sink = createJsonlStdoutSink()) {
   };
 }
 function createJsonlStdoutSink() {
-  const stream = process.stdout;
+  const stream = typeof process !== "undefined" ? process.stdout : void 0;
+  if (stream === void 0) {
+    return (entry) => console.log(JSON.stringify(toJsonValue(entry, /* @__PURE__ */ new WeakSet())));
+  }
   const existing = stdoutSinks.get(stream);
   if (existing) return existing;
   const brokenPipe = createBrokenPipeState();

package/dist/safe-js/chunks/{cli-runtime-BGB24HNE.js → cli-runtime-5DZW4OP4.js}

@@ -12,7 +12,7 @@ import {
   parseFsConfig,
   resolveFsConfig,
   splitFrontmatter
-} from "./chunk-MKY3MQUB.js";
+} from "./chunk-MZZ4GGSY.js";
 import {
   parseMcpConfig
 } from "./chunk-L3MIVH3T.js";

package/dist/safe-js/cli.js

@@ -13,7 +13,7 @@ import path from "node:path";
 import { fileURLToPath } from "node:url";
 async function runCli(argv, options = {}) {
   if (!argv.includes("--help") && !argv.includes("-h")) {
-    const runtime = await import("./chunks/cli-runtime-BGB24HNE.js");
+    const runtime = await import("./chunks/cli-runtime-5DZW4OP4.js");
     return runtime.runCli(argv, options, createUsage());
   }
   const brokenPipe = createBrokenPipeState();
@@ -32,7 +32,7 @@ async function runCli(argv, options = {}) {
         stderr.write(`${error instanceof Error ? error.message : String(error)}
 `);
         if (brokenPipe.closed) return 0;
-        const { exitCodeForError } = await import("./chunks/cli-runtime-BGB24HNE.js");
+        const { exitCodeForError } = await import("./chunks/cli-runtime-5DZW4OP4.js");
         return exitCodeForError(error);
       }
     }

package/dist/safe-js/index.js

@@ -32,7 +32,7 @@ import {
   runWithSpawnUsageAccumulator,
   splitFrontmatter,
   supportsSpawnMode
-} from "./chunks/chunk-MKY3MQUB.js";
+} from "./chunks/chunk-MZZ4GGSY.js";
 import {
   parseMcpConfig
 } from "./chunks/chunk-L3MIVH3T.js";

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@poe-platform/safe-js",
-  "version": "0.1.745",
+  "version": "0.1.747",
   "description": "Budgeted JavaScript interpreter with explicit host capabilities and resumable execution",
   "type": "module",
   "license": "MIT",
@@ -58,7 +58,7 @@
     "access": "public"
   },
   "dependencies": {
-    "@poe-platform/safe-fs": "0.1.745",
+    "@poe-platform/safe-fs": "0.1.747",
     "@petamoriken/float16": "^3.9.3",
     "@noble/hashes": "2.4.0",
     "@formatjs/intl-localematcher": "0.8.13",