@poe-platform/safe-js 0.1.799 → 0.1.801

package/README.md

@@ -8,6 +8,8 @@ built-ins. It is suitable for capability-controlled scripts and agent workflows.
 Complete ECMAScript conformance has not been established; see
 [development status](#development-status) and [meaningful limitations](#meaningful-limitations).
 
+Under `workerd` and `browser` conditions, the standalone root and `/core` exports select the portable interpreter with `makeFsModule`, `makeEnvModule`, `makeTimeModule`, `makeFailModule`, `makeMetricModule`, and `makeHarnessModule`. The `/modules/fs` entry is also portable; supply a filesystem adapter for host file access.
+
 ## Quickstart
 
 Install the public ESM package. Its declared Node.js minimum is 18.18+, but
@@ -36,7 +38,7 @@ console.log(result.returnValue);
 
 `run()` takes source text, not a file path. Success returns `ok`, `returnValue`, `snapshot`, and `stats`. Handle both an `ok: false` result and a rejected promise: parsing, budget exhaustion, cancellation, and some execution failures can reject. Top-level `await` in this example lets rejections reach Node.
 
-`@poe-platform/safe-js/core` exposes `run`, `createRealm`, `defineExtension`, `lint`, `Budget`, and replayable-random helpers. The `/core`, `/workerd`, and `/modules/fs` workspace entries bundle with the `workerd` or `browser` condition without Node built-ins. Supply a `@poe-code/safe-fs` adapter for filesystem capabilities; `createRootedSourceResolver(root, adapter)` grants portable source imports. File snapshots, migrations, harnesses, and file-running helpers also accept an `adapter`. The shared filesystem lives in `@poe-platform/safe-fs`, with a portable `/core` entry. Existing `@poe-platform/safe-js/fs`, `/fs/core`, and `/fs/node` imports re-export it. Legacy `poe-code/safe-js` imports remain available through the CLI package but use a separate runtime; keep factories and errors within one import family.
+`@poe-platform/safe-js/core` exposes `run`, `createRealm`, `defineExtension`, `lint`, `Budget`, and replayable-random helpers for Node.js. In Workers, the `@poe-platform/safe-js` root selects `/workerd`: it exports the portable core API plus `declareHostOperation` without requiring `nodejs_compat`, including the runtime hooks needed by Safe Bash's `nodeCommands()`. The `/core` and `/modules/fs` workspace entries also bundle with the `workerd` or `browser` condition without Node built-ins. Supply a `@poe-platform/safe-fs/core` adapter for filesystem capabilities; `createRootedSourceResolver(root, adapter)` grants portable source imports. File snapshots, migrations, harnesses, and file-running helpers also accept an `adapter`. The shared filesystem lives in `@poe-platform/safe-fs`, with a portable `/core` entry. Existing `@poe-platform/safe-js/fs`, `/fs/core`, and `/fs/node` imports re-export it. Legacy `poe-code/safe-js` imports remain available through the CLI package but use a separate runtime; keep factories and errors within one import family.
 
 ## Supported features
 
@@ -549,7 +551,7 @@ Factories return exports to register in `modules`; calling a factory alone does
 
 `spawn.retry(definition, options, retryOptions)` and `defaultRetry` use `{ maxAttempts, backoffMs, isErrorRetryable?, isRetryable? }`. `spawn.parallel(calls, options?)` accepts definition/options tuples or spawn-handle factories; options are `check`, `maxConcurrent`, `failFast`, and `signal`. Usage helpers are `createSpawnUsageAccumulator()` and `runWithSpawnUsageAccumulator(accumulator, operation)`.
 
-**Config files.** `parseMcpConfig(json, directory)` accepts `servers` and the three numeric MCP limits, resolving stdio paths against `directory`. `parseFsConfig(json)` accepts `{ adapter: { type, options }, root?, cwd?, readFileMaxBytes?, hostReadMemoryLimit? }`; `resolveFsConfig(config, { registry? })` constructs the adapter for `makeFsModule`. Built-in types are `memory` and `real`; `real` requires an absolute host `options.root`. Outer `root`/`cwd` are absolute virtual paths. Custom registry descriptors supply `validateOptions` and `create`. Signals and injected functions are SDK options, not JSON fields.
+**Config files.** `parseMcpConfig(json, directory)` accepts `servers` and the three numeric MCP limits, resolving stdio paths against `directory`. `parseFsConfig(json)` accepts `{ adapter: { type, options }, root?, cwd?, readFileMaxBytes?, hostReadMemoryLimit? }`; `resolveFsConfig(config, { registry? })` constructs the adapter for `makeFsModule`. Built-in types are `memory` and `real`; `real` requires an absolute host `options.root`. Outer `root`/`cwd` are absolute virtual paths. Custom registry descriptors supply `validateOptions` and `create`. `maxSymlinkFollows` optionally bounds dangling-symlink canonicalization for rooted filesystem modules; it defaults to `Infinity` and accepts the same finite values through filesystem JSON configuration. Actual symlink cycles still fail. Signals and injected functions are SDK options, not JSON fields.
 
 </details>
 

package/dist/safe-js/chunks/{chunk-KULEMOAE.js → chunk-4KMUWNZD.js}

@@ -2524,115 +2524,6 @@ function isRecord2(value) {
   return typeof value === "object" && value !== null && !Array.isArray(value);
 }
 
-// packages/safe-js/src/modules/env.ts
-var EnvAccessError = class extends Error {
-  code = "ENV_ACCESS_DENIED";
-  variable;
-  constructor(variable) {
-    super(`Environment access denied for ${JSON.stringify(variable)}.`);
-    this.name = "EnvAccessError";
-    this.variable = variable;
-    hostErrorData.set(this, { code: this.code, variable });
-  }
-};
-function makeEnvModule(input) {
-  const options = normalizeEnvOptions(Array.isArray(input) ? { allow: input } : input);
-  const allowedNames = new Set(options.allow);
-  const values = options.values;
-  return {
-    get(name) {
-      const variable = readEnvName(name, "Environment variable name");
-      if (!allowedNames.has(variable)) throw new EnvAccessError(variable);
-      return readEnvValue(values ?? (typeof process !== "undefined" ? process.env ?? {} : {}), variable);
-    }
-  };
-}
-function parseEnvConfig(json) {
-  return normalizeEnvOptions(JSON.parse(json));
-}
-function normalizeEnvOptions(input) {
-  if (input === null || typeof input !== "object" || Array.isArray(input)) {
-    throw new TypeError("Environment options must be an object.");
-  }
-  const fields = Object.getOwnPropertyDescriptors(input);
-  for (const key of Reflect.ownKeys(fields)) {
-    if (key !== "allow" && key !== "values") {
-      throw new TypeError("Unknown environment option.");
-    }
-    if (!("value" in fields[key])) {
-      throw new TypeError("Environment options must not contain accessors.");
-    }
-  }
-  const inputAllow = Object.getOwnPropertyDescriptor(input, "allow")?.value;
-  if (!Array.isArray(inputAllow)) {
-    throw new TypeError("Environment allow list must be an array of non-empty strings.");
-  }
-  const allow = [];
-  for (let index = 0; index < inputAllow.length; index += 1) {
-    const descriptor = Object.getOwnPropertyDescriptor(inputAllow, index);
-    if (descriptor === void 0 || !("value" in descriptor)) {
-      throw new TypeError("Environment allow list must contain only own data entries.");
-    }
-    allow.push(readEnvName(descriptor.value, `Environment allow list[${index}]`));
-  }
-  const inputValues = Object.getOwnPropertyDescriptor(input, "values")?.value;
-  if (inputValues === void 0) return { allow };
-  if (inputValues === null || typeof inputValues !== "object" || Array.isArray(inputValues)) {
-    throw new TypeError("Environment values must be an object.");
-  }
-  return {
-    allow,
-    values: Object.fromEntries(allow.map((name) => [name, readEnvValue(inputValues, name)]))
-  };
-}
-function readEnvValue(values, name) {
-  const descriptor = Object.getOwnPropertyDescriptor(values, name);
-  if (descriptor === void 0) return void 0;
-  if (!("value" in descriptor)) {
-    throw new TypeError(`Environment value for ${JSON.stringify(name)} must not be an accessor.`);
-  }
-  if (descriptor.value !== void 0 && typeof descriptor.value !== "string") {
-    throw new TypeError(
-      `Environment value for ${JSON.stringify(name)} must be a string or undefined.`
-    );
-  }
-  return descriptor.value;
-}
-function readEnvName(value, label) {
-  if (typeof value !== "string" || value.length === 0) {
-    throw new TypeError(`${label} must be a non-empty string.`);
-  }
-  if (value.includes("\0") || value.includes("=")) {
-    throw new TypeError(`${label} must not contain NUL or equals signs.`);
-  }
-  return value;
-}
-
-// packages/safe-js/src/modules/fail.ts
-var HarnessFailure = class extends Error {
-  constructor(message) {
-    super(message);
-    this.name = "HarnessFailure";
-  }
-};
-function makeFailModule() {
-  function fail(message) {
-    throw new HarnessFailure(readNonEmptyString2(message, "Harness failure message"));
-  }
-  return {
-    default: fail
-  };
-}
-function readNonEmptyString2(value, label) {
-  if (typeof value !== "string") {
-    throw new Error(`${label} must be a non-empty string.`);
-  }
-  if (value.trim().length === 0) {
-    throw new Error(`${label} must be a non-empty string.`);
-  }
-  return value;
-}
-
 // packages/safe-js/src/modules/fs-config.ts
 import {
   createFileSystem,
@@ -2641,7 +2532,7 @@ import {
   validateFileSystemConfig
 } from "@poe-platform/safe-fs";
 function validateFsConfig(value) {
-  const config = readConfigRecord(value, "fs config", ["adapter", "root", "cwd", "readFileMaxBytes", "hostReadMemoryLimit"]);
+  const config = readConfigRecord(value, "fs config", ["adapter", "root", "cwd", "readFileMaxBytes", "hostReadMemoryLimit", "maxSymlinkFollows"]);
   const paths = {};
   for (const key of ["root", "cwd"]) {
     const path = config[key];
@@ -2652,7 +2543,7 @@ function validateFsConfig(value) {
     paths[key] = path;
   }
   const limits = {};
-  for (const key of ["readFileMaxBytes", "hostReadMemoryLimit"]) {
+  for (const key of ["readFileMaxBytes", "hostReadMemoryLimit", "maxSymlinkFollows"]) {
     const value2 = config[key];
     if (value2 === void 0) continue;
     if (value2 !== Infinity && (typeof value2 !== "number" || !Number.isSafeInteger(value2) || value2 < 0))
@@ -2701,7 +2592,7 @@ function makeLogModule(sink = createJsonlStdoutSink()) {
       normalizedSink({
         ts: (/* @__PURE__ */ new Date()).toISOString(),
         type: "event",
-        name: readNonEmptyString3(name, "Event name"),
+        name: readNonEmptyString2(name, "Event name"),
         payload
       });
     }
@@ -2724,7 +2615,7 @@ function createJsonlStdoutSink() {
   stdoutSinks.set(stream, sink);
   return sink;
 }
-function readNonEmptyString3(value, label) {
+function readNonEmptyString2(value, label) {
   if (typeof value !== "string") {
     throw new Error(`${label} must be a non-empty string.`);
   }
@@ -2796,43 +2687,6 @@ function toJsonValue(value, seen) {
   return String(value);
 }
 
-// packages/safe-js/src/modules/metric.ts
-function makeMetricModule(npmRunner) {
-  return {
-    async run(name) {
-      const metricName = readNonEmptyString4(name, "Metric name");
-      const scriptName = `metric:${metricName}`;
-      const stdout = await npmRunner(scriptName);
-      const score = parseMetricScore(stdout, scriptName);
-      return score;
-    }
-  };
-}
-function parseMetricScore(stdout, scriptName) {
-  if (typeof stdout !== "string") {
-    throw new Error(`Metric runner for "${scriptName}" must resolve to a stdout string.`);
-  }
-  const scoreLine = stdout.split("\n").map((line) => line.trim()).filter((line) => line.length > 0).at(-1);
-  if (scoreLine === void 0) {
-    throw new Error(`Metric script "${scriptName}" must print a numeric score.`);
-  }
-  const score = Number(scoreLine);
-  if (!Number.isFinite(score)) {
-    throw new Error(`Metric script "${scriptName}" must print a numeric score.`);
-  }
-  return score;
-}
-function readNonEmptyString4(value, label) {
-  if (typeof value !== "string") {
-    throw new Error(`${label} must be a non-empty string.`);
-  }
-  const normalizedValue = value.trim();
-  if (normalizedValue.length === 0) {
-    throw new Error(`${label} must be a non-empty string.`);
-  }
-  return normalizedValue;
-}
-
 export {
   formatInterpreterError,
   SPAWN_MODES,
@@ -2845,12 +2699,7 @@ export {
   createSpawnUsageAccumulator,
   runWithSpawnUsageAccumulator,
   makeAgentModule,
-  EnvAccessError,
-  makeEnvModule,
-  parseEnvConfig,
-  makeFailModule,
   parseFsConfig,
   resolveFsConfig,
-  makeLogModule,
-  makeMetricModule
+  makeLogModule
 };