@poe-platform/safe-js 0.1.800 → 0.1.802

package/README.md

@@ -551,7 +551,7 @@ Factories return exports to register in `modules`; calling a factory alone does
 
 `spawn.retry(definition, options, retryOptions)` and `defaultRetry` use `{ maxAttempts, backoffMs, isErrorRetryable?, isRetryable? }`. `spawn.parallel(calls, options?)` accepts definition/options tuples or spawn-handle factories; options are `check`, `maxConcurrent`, `failFast`, and `signal`. Usage helpers are `createSpawnUsageAccumulator()` and `runWithSpawnUsageAccumulator(accumulator, operation)`.
 
-**Config files.** `parseMcpConfig(json, directory)` accepts `servers` and the three numeric MCP limits, resolving stdio paths against `directory`. `parseFsConfig(json)` accepts `{ adapter: { type, options }, root?, cwd?, readFileMaxBytes?, hostReadMemoryLimit? }`; `resolveFsConfig(config, { registry? })` constructs the adapter for `makeFsModule`. Built-in types are `memory` and `real`; `real` requires an absolute host `options.root`. Outer `root`/`cwd` are absolute virtual paths. Custom registry descriptors supply `validateOptions` and `create`. Signals and injected functions are SDK options, not JSON fields.
+**Config files.** `parseMcpConfig(json, directory)` accepts `servers` and the three numeric MCP limits, resolving stdio paths against `directory`. `parseFsConfig(json)` accepts `{ adapter: { type, options }, root?, cwd?, readFileMaxBytes?, hostReadMemoryLimit? }`; `resolveFsConfig(config, { registry? })` constructs the adapter for `makeFsModule`. Built-in types are `memory` and `real`; `real` requires an absolute host `options.root`. Outer `root`/`cwd` are absolute virtual paths. Custom registry descriptors supply `validateOptions` and `create`. `maxSymlinkFollows` optionally bounds dangling-symlink canonicalization for rooted filesystem modules; it defaults to `Infinity` and accepts the same finite values through filesystem JSON configuration. Actual symlink cycles still fail. Signals and injected functions are SDK options, not JSON fields.
 
 </details>
 

package/dist/safe-js/chunks/{chunk-XAV2RKLO.js → chunk-4KMUWNZD.js}

@@ -2532,7 +2532,7 @@ import {
   validateFileSystemConfig
 } from "@poe-platform/safe-fs";
 function validateFsConfig(value) {
-  const config = readConfigRecord(value, "fs config", ["adapter", "root", "cwd", "readFileMaxBytes", "hostReadMemoryLimit"]);
+  const config = readConfigRecord(value, "fs config", ["adapter", "root", "cwd", "readFileMaxBytes", "hostReadMemoryLimit", "maxSymlinkFollows"]);
   const paths = {};
   for (const key of ["root", "cwd"]) {
     const path = config[key];
@@ -2543,7 +2543,7 @@ function validateFsConfig(value) {
     paths[key] = path;
   }
   const limits = {};
-  for (const key of ["readFileMaxBytes", "hostReadMemoryLimit"]) {
+  for (const key of ["readFileMaxBytes", "hostReadMemoryLimit", "maxSymlinkFollows"]) {
     const value2 = config[key];
     if (value2 === void 0) continue;
     if (value2 !== Infinity && (typeof value2 !== "number" || !Number.isSafeInteger(value2) || value2 < 0))

package/dist/safe-js/chunks/{chunk-SHMRT4QX.js → chunk-6H5VC5W5.js}

@@ -3686,11 +3686,11 @@ function copyBoundedOAuthJson(value, message) {
 import http from "node:http";
 
 // packages/mcp-oauth/src/client/authorization-state.ts
-import crypto from "node:crypto";
+import crypto2 from "node:crypto";
 function createAuthorizationState(input) {
   const payload = {
     v: 1,
-    n: crypto.randomBytes(16).toString("base64url"),
+    n: crypto2.randomBytes(16).toString("base64url"),
     i: input.issuer,
     r: input.requireIssuer
   };
@@ -4198,7 +4198,7 @@ function registrationMatchesRedirect(client, requestedUri, fresh = false) {
 }
 
 // packages/mcp-oauth/src/client/auth-store-session-store.ts
-import crypto2 from "node:crypto";
+import crypto3 from "node:crypto";
 import path4 from "node:path";
 
 // packages/auth-store/src/encrypted-file-store.ts
@@ -4956,7 +4956,7 @@ function snapshotPersistenceOptions(options) {
 }
 function createNamedSecretStore(key2, options, defaults, namespace) {
   options = snapshotOAuthPersistenceOptions(options);
-  const hash = crypto2.createHash("sha256").update(namespace === void 0 ? key2 : JSON.stringify([namespace, key2])).digest("hex");
+  const hash = crypto3.createHash("sha256").update(namespace === void 0 ? key2 : JSON.stringify([namespace, key2])).digest("hex");
   const configuredFilePath = options.fileStore?.filePath;
   const parsedFilePath = configuredFilePath === void 0 ? null : path4.parse(configuredFilePath);
   const fileStore = {
@@ -5256,12 +5256,12 @@ async function fetchMcpResponse(fetchImplementation, input, init = {}) {
 import { URL as URL2 } from "node:url";
 
 // packages/mcp-oauth/src/client/pkce.ts
-import crypto3 from "node:crypto";
+import crypto4 from "node:crypto";
 function generateCodeVerifier() {
-  return crypto3.randomBytes(32).toString("base64url");
+  return crypto4.randomBytes(32).toString("base64url");
 }
 function generateCodeChallenge(verifier) {
-  return crypto3.createHash("sha256").update(verifier).digest("base64url");
+  return crypto4.createHash("sha256").update(verifier).digest("base64url");
 }
 
 // packages/mcp-oauth/src/http-response.ts
@@ -5390,7 +5390,7 @@ async function requestTokens(input) {
   if (method === "client_secret_basic") {
     const encoded = new URLSearchParams({ credential: input.clientId }).toString().slice("credential=".length);
     const encodedSecret = new URLSearchParams({ credential: input.clientSecret }).toString().slice("credential=".length);
-    headers.set("Authorization", `Basic ${Buffer.from(`${encoded}:${encodedSecret}`).toString("base64")}`);
+    headers.set("Authorization", `Basic ${btoa(`${encoded}:${encodedSecret}`)}`);
   } else {
     body.set("client_id", input.clientId);
     if (method === "client_secret_post") body.set("client_secret", input.clientSecret);

package/dist/safe-js/chunks/{chunk-QEDOBN2G.js → chunk-HFRBLE6Y.js}

@@ -1217,7 +1217,7 @@ var RealmState = class {
     this.assertOpen();
     const closure = readGuestCallback(callback, this);
     this.checkCollection(this.pendingCallbacks.size + 1, this.limits.callbacks, "pending callback");
-    const scheduled = this.options.callbackScheduling === "after-prefix";
+    const scheduled = this.options.callbackScheduling === "after-prefix" || this.queuedCallbacks.has(callback);
     const record = {
       closure,
       prefixComplete: false
@@ -1599,7 +1599,7 @@ var RealmState = class {
       await this.dispose();
     this.assertOpen();
     if (this.active !== void 0) throw new SandboxError("reentry");
-    const scheduled = this.options.callbackScheduling === "after-prefix";
+    const scheduled = this.options.callbackScheduling === "after-prefix" || this.releaseReconciliation !== void 0 || this.pendingWork.size > 0;
     if (scheduled && (this.phase.getStore()?.active || [...this.pendingCallbacks].some((record) => !record.prefixComplete)))
       throw new SandboxError("reentry");
     const rejectionOwner = scheduled ? this.tracker.startOperation() : void 0;
@@ -1649,13 +1649,13 @@ var RealmState = class {
     } finally {
       this.tracker.finishOperation(rejectionOwner);
       if (this.active === pending) this.active = void 0;
-      if (scheduled) this.reconcileWhenIdle();
+      if (scheduled || this.releaseReconciliation !== void 0) this.reconcileWhenIdle();
     }
   }
   close = () => {
     this.closed = true;
     this.controller.abort(new Error("SafeJS realm is closed."));
-    if (this.options.callbackScheduling === "after-prefix") {
+    if (this.options.callbackScheduling === "after-prefix" || this.releaseReconciliation !== void 0 || this.pendingWork.size > 0) {
       const disposal = this.dispose();
       if (this.phase.getStore()?.active) {
         void disposal.catch(() => void 0);
@@ -1674,7 +1674,7 @@ var RealmState = class {
     this.closed = true;
     this.controller.abort(new Error("SafeJS realm is closed."));
     this.options.signal?.removeEventListener("abort", this.abort);
-    if (this.options.callbackScheduling === "after-prefix") {
+    if (this.options.callbackScheduling === "after-prefix" || this.releaseReconciliation !== void 0 || this.pendingWork.size > 0) {
       this.disposal = Promise.resolve().then(async () => {
         while (this.pendingWork.size > 0) await Promise.allSettled([...this.pendingWork]);
         await this.sourceGraph?.settle();
@@ -1836,16 +1836,24 @@ import { createFsBridge } from "@poe-platform/safe-fs/core";
 var DEFAULT_WRITE_MAX_ATTEMPTS = 3;
 var DEFAULT_WRITE_RETRY_DELAY_MS = 100;
 var LOCKED_FILE_ERROR_CODES = /* @__PURE__ */ new Set(["EACCES", "EBUSY", "EPERM"]);
-var pendingOperations = /* @__PURE__ */ new Map();
+var adapterOperations = /* @__PURE__ */ new WeakMap();
 var FileSnapshotBackend = class {
   constructor(path, options = {}) {
     this.path = path;
+    const adapter = options.adapter ?? hostFs;
+    let pending = adapterOperations.get(adapter);
+    if (pending === void 0) {
+      pending = /* @__PURE__ */ new Map();
+      adapterOperations.set(adapter, pending);
+    }
+    this.#pendingOperations = pending;
     this.#io = options.adapter === void 0 ? hostFs : createFsBridge(options.adapter, { codec: fsCodec });
     this.#writeMaxAttempts = options.writeMaxAttempts ?? DEFAULT_WRITE_MAX_ATTEMPTS;
     this.#writeRetryDelayMs = options.writeRetryDelayMs ?? DEFAULT_WRITE_RETRY_DELAY_MS;
   }
   path;
   #io;
+  #pendingOperations;
   #writeMaxAttempts;
   #writeRetryDelayMs;
   async read() {
@@ -1863,6 +1871,7 @@ var FileSnapshotBackend = class {
   }
   async write(snapshot) {
     await enqueueOperation(
+      this.#pendingOperations,
       this.path,
       () => writeSnapshotAtomically(this.#io, this.path, snapshot, {
         maxAttempts: this.#writeMaxAttempts,
@@ -1871,7 +1880,7 @@ var FileSnapshotBackend = class {
     );
   }
   async remove() {
-    await enqueueOperation(this.path, async () => {
+    await enqueueOperation(this.#pendingOperations, this.path, async () => {
       try {
         await this.#io.unlink(this.path);
       } catch (error) {
@@ -1959,7 +1968,7 @@ async function writeSnapshotOnce(io, temporaryPath, snapshotPath, contents) {
     }
   }
 }
-async function enqueueOperation(path, operation) {
+async function enqueueOperation(pendingOperations, path, operation) {
   const previous = pendingOperations.get(path) ?? Promise.resolve();
   const pending = previous.catch(() => void 0).then(operation);
   const queued = pending.catch(() => void 0);
@@ -2551,10 +2560,9 @@ function run(source, options = {}) {
             migration: restoredSnapshot?.migration,
             bindings: executionScope.snapshot().bindings,
             clock: options.clock,
-            hostCalls: hostCalls.snapshot(),
-            replay: hostCalls.snapshotReplay(),
+            hostCalls,
             initialInputs: initialInputs.snapshot,
-            promiseReplay: promiseReplay.snapshot(),
+            promiseReplay,
             random,
             sourceHash
           });
@@ -2581,12 +2589,11 @@ function run(source, options = {}) {
                   migration: restoredSnapshot?.migration,
                   bindings: interpreterSnapshot2.bindings,
                   clock: options.clock,
-                  hostCalls: hostCalls.snapshot(),
+                  hostCalls,
                   loopIterations: interpreterSnapshot2.loopIterations,
                   pendingAwaits: [createPendingAwaitSnapshot(yieldPoint)],
-                  replay: hostCalls.snapshotReplay(),
                   initialInputs: initialInputs.snapshot,
-                  promiseReplay: promiseReplay.snapshot(),
+                  promiseReplay,
                   random,
                   randomResumeState: typeof yieldPoint.replayState === "number" ? yieldPoint.replayState : void 0,
                   sourceHash
@@ -2626,12 +2633,11 @@ function run(source, options = {}) {
                   migration: restoredSnapshot?.migration,
                   bindings: interpreterSnapshot2.bindings,
                   clock: options.clock,
-                  hostCalls: hostCalls.snapshot(),
+                  hostCalls,
                   loopIterations: interpreterSnapshot2.loopIterations,
                   pendingAwaits: [createPendingAwaitSnapshot(yieldPoint)],
-                  replay: hostCalls.snapshotReplay(),
                   initialInputs: initialInputs.snapshot,
-                  promiseReplay: promiseReplay.snapshot(),
+                  promiseReplay,
                   random,
                   randomResumeState: typeof yieldPoint.replayState === "number" ? yieldPoint.replayState : void 0,
                   sourceHash
@@ -2648,27 +2654,17 @@ function run(source, options = {}) {
           await throwIfReturnedPromiseRejected(result2);
           await throwIfUnhandledPromiseRejected(promiseTracker);
           await activeSnapshotScheduler.finish();
-          let replay;
-          let replayError;
-          try {
-            replay = hostCalls.snapshotReplay();
-          } catch (error) {
-            if (!(error instanceof MissingReplayCapabilityError)) throw error;
-            replayError = error.message;
-          }
           const snapshot = createRunSnapshot({
             executionSemantics,
             migration: restoredSnapshot?.migration,
             bindings: executionScope.snapshot().bindings,
             clock: options.clock,
-            hostCalls: hostCalls.snapshot(),
-            replay,
+            hostCalls,
             initialInputs: initialInputs.snapshot,
-            promiseReplay: promiseReplay.snapshot(),
+            promiseReplay,
             random,
             sourceHash
           });
-          if (replayError !== void 0) snapshot.replayError = replayError;
           dumpController.finalize(snapshot);
           completedSnapshot = snapshot;
           reconcileCompiledValues(
@@ -2845,6 +2841,15 @@ function createExecutableNode(module) {
   };
 }
 function createRunSnapshot(input) {
+  let replay;
+  let replayError;
+  try {
+    replay = input.hostCalls.snapshotReplay();
+  } catch (error) {
+    if (!(error instanceof MissingReplayCapabilityError)) throw error;
+    replayError = error.message;
+  }
+  const hostCalls = input.hostCalls.snapshot();
   const snapshot = {
     version: DUMP_FORMAT_VERSION,
     executionSemantics: input.executionSemantics,
@@ -2852,11 +2857,12 @@ function createRunSnapshot(input) {
     ...input.migration === void 0 ? {} : { migration: structuredClone(input.migration) },
     bindings: input.bindings,
     clock: input.clock?.snapshot(),
-    ...input.hostCalls === void 0 || input.hostCalls.length === 0 ? {} : { hostCalls: input.hostCalls },
+    ...hostCalls.length === 0 ? {} : { hostCalls },
     ...input.loopIterations === void 0 ? {} : { loopIterations: input.loopIterations },
-    ...input.replay === void 0 ? {} : { replay: input.replay },
+    ...replay === void 0 ? {} : { replay },
+    ...replayError === void 0 ? {} : { replayError },
     ...input.initialInputs === void 0 ? {} : { initialInputs: structuredClone(input.initialInputs) },
-    ...input.promiseReplay === void 0 ? {} : { promiseReplay: input.promiseReplay },
+    promiseReplay: input.promiseReplay.snapshot(),
     ...input.pendingAwaits === void 0 || input.pendingAwaits.length === 0 ? {} : { pendingAwaits: input.pendingAwaits },
     random: input.random === void 0 ? void 0 : {
       seed: input.random.seed,

package/dist/safe-js/chunks/{chunk-LWHXSNF6.js → chunk-IB6WAQAE.js}

@@ -2,7 +2,7 @@ import {
   McpError,
   connectMcpTransport,
   normalizeMcpOptions
-} from "./chunk-SHMRT4QX.js";
+} from "./chunk-6H5VC5W5.js";
 import {
   declareHostOperation,
   runResources

package/dist/safe-js/chunks/{chunk-YAHDXC7P.js → chunk-YCFOANSU.js}

@@ -34,11 +34,14 @@ import {
 // packages/safe-js/src/modules/canonical-path.ts
 var MISSING_PATH_CODES = ["ENOENT", "ENOTDIR"];
 var NOT_A_SYMLINK_CODES = [...MISSING_PATH_CODES, "EINVAL"];
-var MAX_SYMLINK_FOLLOWS = 32;
-async function resolveCanonicalPath({ realpath, readlink }, path) {
+async function resolveCanonicalPath({ realpath, readlink }, path, maxSymlinkFollows = Infinity) {
+  if (maxSymlinkFollows !== Infinity && (!Number.isSafeInteger(maxSymlinkFollows) || maxSymlinkFollows < 0)) {
+    throw new RangeError("maxSymlinkFollows must be a nonnegative safe integer or Infinity");
+  }
   const missingSegments = [];
   let current = path;
   let follows = 0;
+  const visited = /* @__PURE__ */ new Set();
   while (true) {
     try {
       const canonicalCurrent = await realpath(current);
@@ -49,9 +52,10 @@ async function resolveCanonicalPath({ realpath, readlink }, path) {
       }
       const target = await readSymlinkTarget(readlink, current);
       if (target !== void 0) {
-        if (++follows > MAX_SYMLINK_FOLLOWS) {
+        if (++follows > maxSymlinkFollows || visited.has(current)) {
           throw createLoopError(path);
         }
+        visited.add(current);
         current = isAbsolutePath(target) ? target : `${dirname(current)}${sep}${target}`;
         continue;
       }
@@ -264,9 +268,10 @@ var NULL_BYTE = "\0";
 var [ACCESS_DENIED_ERRNO, ACCESS_DENIED_MESSAGE] = accessDeniedSystemError;
 function makeFsModule(options = {}) {
   assertSupportedPlatform();
+  const maxSymlinkFollows = options.maxSymlinkFollows ?? Infinity;
   const hostReadMemoryLimit = options.hostReadMemoryLimit ?? Infinity;
   const readFileMaxBytes = options.readFileMaxBytes ?? Infinity;
-  for (const limit of [hostReadMemoryLimit, readFileMaxBytes]) {
+  for (const limit of [hostReadMemoryLimit, readFileMaxBytes, maxSymlinkFollows]) {
     if (limit !== Infinity && (!Number.isSafeInteger(limit) || limit < 0))
       throw new TypeError("Filesystem read limits must be non-negative safe integers or Infinity.");
   }
@@ -288,7 +293,7 @@ function makeFsModule(options = {}) {
     cwd: options.root === void 0 ? options.cwd : void 0,
     signal: options.signal
   });
-  const fs = options.root === void 0 ? implementation : makeRootedFs(implementation, options.root, options.adapter, options.cwd, options.signal);
+  const fs = options.root === void 0 ? implementation : makeRootedFs(implementation, options.root, options.adapter, options.cwd, options.signal, maxSymlinkFollows);
   let readFile = bindStringResult(fs, "readFile");
   if (options.adapter !== void 0) {
     const boundedRead = async (args, budget) => {
@@ -316,7 +321,7 @@ function makeFsModule(options = {}) {
         }
       });
       const portable = bridge;
-      const boundedFs = options.root === void 0 ? portable : makeRootedFs(portable, options.root, options.adapter, options.cwd, options.signal);
+      const boundedFs = options.root === void 0 ? portable : makeRootedFs(portable, options.root, options.adapter, options.cwd, options.signal, maxSymlinkFollows);
       return await invoke(boundedFs, "readFile", args);
     };
     const directRead = declare("readFile", "re-issue", (...args) => boundedRead(args));
@@ -408,7 +413,7 @@ function invoke(fs, name, args) {
   return Reflect.apply(fs[name], fs, args);
 }
 var rootedFsOperations = /* @__PURE__ */ new WeakMap();
-function makeRootedFs(fs, root, adapter, cwd, signal) {
+function makeRootedFs(fs, root, adapter, cwd, signal, maxSymlinkFollows = Infinity) {
   if (root.trim().length === 0) {
     throw new Error("fs module root must be a non-empty string.");
   }
@@ -429,7 +434,7 @@ function makeRootedFs(fs, root, adapter, cwd, signal) {
         return await invoke(
           fs,
           name,
-          await resolvePathArguments(fs, resolvedRoot, name, args, adapter, cwd, signal)
+          await resolvePathArguments(fs, resolvedRoot, name, args, adapter, cwd, signal, maxSymlinkFollows)
         );
       } finally {
         release();
@@ -450,8 +455,8 @@ function assertRootCanConfineOptions(name, args) {
     throw createUnsupportedOptionError("cp", "dereference", ROOT_REFUSED_DEREFERENCE_REASON);
   }
 }
-async function resolvePathArguments(fs, root, name, args, adapter, cwd, signal) {
-  const canonicalRoot = await resolveCanonicalPath(readCanonicalPathFs(fs), resolve(root));
+async function resolvePathArguments(fs, root, name, args, adapter, cwd, signal, maxSymlinkFollows = Infinity) {
+  const canonicalRoot = await resolveCanonicalPath(readCanonicalPathFs(fs), resolve(root), maxSymlinkFollows);
   const base = cwd ?? canonicalRoot;
   const resolved = [...args];
   if (name === "symlink") {
@@ -475,7 +480,7 @@ async function resolvePathArguments(fs, root, name, args, adapter, cwd, signal)
     await assertInsideRoot(fs, canonicalRoot, name, [checkedTarget, linkPath], adapter, signal, [
       targetPath,
       linkPath
-    ]);
+    ], maxSymlinkFollows);
     return resolved;
   }
   const paths = FS_PATH_ARGUMENTS[name].map((_, index) => {
@@ -483,12 +488,12 @@ async function resolvePathArguments(fs, root, name, args, adapter, cwd, signal)
     resolved[index] = path;
     return path;
   });
-  await assertInsideRoot(fs, canonicalRoot, name, paths, adapter, signal);
+  await assertInsideRoot(fs, canonicalRoot, name, paths, adapter, signal, paths, maxSymlinkFollows);
   if (name === "mkdtemp") {
     const prefix = args[0];
     const absolutePrefix = isAbsolutePath(prefix) ? prefix : `${base}${sep}${prefix}`;
     const parent = absolutePrefix.endsWith(sep) ? absolutePrefix : dirname(absolutePrefix);
-    await assertInsideRoot(fs, canonicalRoot, name, [parent], adapter, signal, paths);
+    await assertInsideRoot(fs, canonicalRoot, name, [parent], adapter, signal, paths, maxSymlinkFollows);
     resolved[0] = absolutePrefix;
   }
   if (adapter !== void 0 && name === "mkdir") {
@@ -506,15 +511,15 @@ async function resolvePathArguments(fs, root, name, args, adapter, cwd, signal)
   }
   return resolved;
 }
-async function assertInsideRoot(fs, canonicalRoot, name, paths, adapter, signal, reportedPaths = paths) {
+async function assertInsideRoot(fs, canonicalRoot, name, paths, adapter, signal, reportedPaths = paths, maxSymlinkFollows = Infinity) {
   for (const path of paths) {
-    if (await escapesRoot(fs, canonicalRoot, path, adapter, signal)) {
+    if (await escapesRoot(fs, canonicalRoot, path, adapter, signal, maxSymlinkFollows)) {
       throw createAccessDeniedError(name, reportedPaths[0], reportedPaths[1]);
     }
   }
 }
-async function escapesRoot(fs, canonicalRoot, path, adapter, signal) {
-  const canonicalPath = await resolveCanonicalPath(readCanonicalPathFs(fs), path);
+async function escapesRoot(fs, canonicalRoot, path, adapter, signal, maxSymlinkFollows = Infinity) {
+  const canonicalPath = await resolveCanonicalPath(readCanonicalPathFs(fs), path, maxSymlinkFollows);
   return !await (adapter === void 0 ? containsPath(readStat(fs), canonicalRoot, canonicalPath) : containsAdapterPath(adapter, canonicalRoot, canonicalPath, signal));
 }
 async function containsAdapterPath(adapter, canonicalRoot, canonicalPath, signal) {

package/dist/safe-js/chunks/{cli-runtime-OCWFX4TM.js → cli-runtime-L4IABN2W.js}

@@ -8,10 +8,10 @@ import {
   parseFsConfig,
   resolveFsConfig,
   splitFrontmatter
-} from "./chunk-XAV2RKLO.js";
+} from "./chunk-4KMUWNZD.js";
 import {
   parseMcpConfig
-} from "./chunk-SHMRT4QX.js";
+} from "./chunk-6H5VC5W5.js";
 import {
   lint,
   makeEnvModule,
@@ -291,12 +291,12 @@ async function assertHarnessFile(input) {
 }
 async function runScriptFile(filepath, parsed, options) {
   const [{ run }, { restore }, { dump, dumpCurrent }, { createLintModulesFromRuntimeRegistry }, { makeFsModule }, { makeMcpModule }] = await Promise.all([
-    import("./run-3X6J7FPV.js"),
+    import("./run-M6N5KCPF.js"),
     import("./restore-GDHBT5ZD.js"),
     import("./dump-KUPBSXSL.js"),
     import("./runtime-modules-MGSXY4BN.js"),
     import("../modules/fs.js"),
-    import("./mcp-4D3WWY7U.js")
+    import("./mcp-5TMFK3UE.js")
   ]);
   const loaded = loadExecutableSource(filepath, await options.readFile(filepath, "utf8"));
   const meta = {

package/dist/safe-js/chunks/{mcp-4D3WWY7U.js → mcp-5TMFK3UE.js}

@@ -1,7 +1,7 @@
 import {
   makeMcpModule
-} from "./chunk-LWHXSNF6.js";
-import "./chunk-SHMRT4QX.js";
+} from "./chunk-IB6WAQAE.js";
+import "./chunk-6H5VC5W5.js";
 import "./chunk-5RLD4TVI.js";
 import "./chunk-A3LXCGMJ.js";
 import "./chunk-JCHJGIQA.js";

package/dist/safe-js/chunks/{run-3X6J7FPV.js → run-M6N5KCPF.js}

@@ -1,7 +1,7 @@
 import {
   UnhandledRejectionError,
   run
-} from "./chunk-QEDOBN2G.js";
+} from "./chunk-HFRBLE6Y.js";
 import "./chunk-DHGJSEFX.js";
 import "./chunk-DIG26TEI.js";
 import "./chunk-ONWFPHUI.js";

package/dist/safe-js/cli.js

@@ -13,7 +13,7 @@ import path from "node:path";
 import { fileURLToPath } from "node:url";
 async function runCli(argv, options = {}) {
   if (!argv.includes("--help") && !argv.includes("-h")) {
-    const runtime = await import("./chunks/cli-runtime-OCWFX4TM.js");
+    const runtime = await import("./chunks/cli-runtime-L4IABN2W.js");
     return runtime.runCli(argv, options, createUsage());
   }
   const brokenPipe = createBrokenPipeState();
@@ -32,7 +32,7 @@ async function runCli(argv, options = {}) {
         stderr.write(`${error instanceof Error ? error.message : String(error)}
 `);
         if (brokenPipe.closed) return 0;
-        const { exitCodeForError } = await import("./chunks/cli-runtime-OCWFX4TM.js");
+        const { exitCodeForError } = await import("./chunks/cli-runtime-L4IABN2W.js");
         return exitCodeForError(error);
       }
     }

package/dist/safe-js/core.js

@@ -16,7 +16,7 @@ import {
 import {
   FS_OPTION_SURFACE,
   makeFsModule
-} from "./chunks/chunk-YAHDXC7P.js";
+} from "./chunks/chunk-YCFOANSU.js";
 import {
   createRootedSourceResolver
 } from "./chunks/chunk-3NFTBEZR.js";
@@ -24,7 +24,7 @@ import {
   createRealm,
   createReplayableRandom,
   run
-} from "./chunks/chunk-QEDOBN2G.js";
+} from "./chunks/chunk-HFRBLE6Y.js";
 import "./chunks/chunk-DHGJSEFX.js";
 import "./chunks/chunk-DIG26TEI.js";
 import "./chunks/chunk-ONWFPHUI.js";

package/dist/safe-js/index.js

@@ -8,7 +8,7 @@ import {
 } from "./chunks/chunk-7THYP46K.js";
 import {
   makeMcpModule
-} from "./chunks/chunk-LWHXSNF6.js";
+} from "./chunks/chunk-IB6WAQAE.js";
 import {
   AgentSpawnError,
   SPAWN_MODES,
@@ -24,10 +24,10 @@ import {
   runWithSpawnUsageAccumulator,
   splitFrontmatter,
   supportsSpawnMode
-} from "./chunks/chunk-XAV2RKLO.js";
+} from "./chunks/chunk-4KMUWNZD.js";
 import {
   parseMcpConfig
-} from "./chunks/chunk-SHMRT4QX.js";
+} from "./chunks/chunk-6H5VC5W5.js";
 import {
   makeTimeModule
 } from "./chunks/chunk-QRWRR6IA.js";
@@ -45,7 +45,7 @@ import {
 import "./chunks/chunk-X3YCE3ZH.js";
 import {
   makeFsModule
-} from "./chunks/chunk-YAHDXC7P.js";
+} from "./chunks/chunk-YCFOANSU.js";
 import {
   createRootedSourceResolver
 } from "./chunks/chunk-3NFTBEZR.js";
@@ -54,7 +54,7 @@ import {
   createRealm,
   createReplayableRandom,
   run
-} from "./chunks/chunk-QEDOBN2G.js";
+} from "./chunks/chunk-HFRBLE6Y.js";
 import "./chunks/chunk-DHGJSEFX.js";
 import {
   fsCodec

package/dist/safe-js/modules/fs-config.d.ts

@@ -6,6 +6,7 @@ export type FsConfig = {
     readonly cwd?: string;
     readonly readFileMaxBytes?: number;
     readonly hostReadMemoryLimit?: number;
+    readonly maxSymlinkFollows?: number;
 };
 export type ResolveFsConfigOptions = {
     readonly registry?: FileSystemAdapterRegistry;

package/dist/safe-js/modules/fs.d.ts

@@ -44,6 +44,8 @@ type StatOptions = {
     bigint?: false;
 };
 export type FsModuleOptions = {
+    /** Dangling-symlink canonicalization quota; unlimited by default. */
+    maxSymlinkFollows?: number;
     hostReadMemoryLimit?: number;
     readFileMaxBytes?: number;
 } & ({

package/dist/safe-js/modules/fs.js

@@ -1,7 +1,7 @@
 import {
   FS_OPTION_SURFACE,
   makeFsModule
-} from "../chunks/chunk-YAHDXC7P.js";
+} from "../chunks/chunk-YCFOANSU.js";
 import "../chunks/chunk-DIG26TEI.js";
 import "../chunks/chunk-ONWFPHUI.js";
 import "../chunks/chunk-5RLD4TVI.js";

package/dist/safe-js/portable/chunks/{chunk-KYJVK33V.js → chunk-2FNMGWDK.js}

@@ -57798,11 +57798,14 @@ function describeValue2(value) {
 // packages/safe-js/src/modules/canonical-path.ts
 var MISSING_PATH_CODES = ["ENOENT", "ENOTDIR"];
 var NOT_A_SYMLINK_CODES = [...MISSING_PATH_CODES, "EINVAL"];
-var MAX_SYMLINK_FOLLOWS = 32;
-async function resolveCanonicalPath({ realpath, readlink }, path) {
+async function resolveCanonicalPath({ realpath, readlink }, path, maxSymlinkFollows = Infinity) {
+  if (maxSymlinkFollows !== Infinity && (!Number.isSafeInteger(maxSymlinkFollows) || maxSymlinkFollows < 0)) {
+    throw new RangeError("maxSymlinkFollows must be a nonnegative safe integer or Infinity");
+  }
   const missingSegments = [];
   let current = path;
   let follows = 0;
+  const visited = /* @__PURE__ */ new Set();
   while (true) {
     try {
       const canonicalCurrent = await realpath(current);
@@ -57813,9 +57816,10 @@ async function resolveCanonicalPath({ realpath, readlink }, path) {
       }
       const target = await readSymlinkTarget(readlink, current);
       if (target !== void 0) {
-        if (++follows > MAX_SYMLINK_FOLLOWS) {
+        if (++follows > maxSymlinkFollows || visited.has(current)) {
           throw createLoopError(path);
         }
+        visited.add(current);
         current = isAbsolutePath(target) ? target : `${dirname(current)}${sep}${target}`;
         continue;
       }
@@ -58028,9 +58032,10 @@ var NULL_BYTE = "\0";
 var [ACCESS_DENIED_ERRNO, ACCESS_DENIED_MESSAGE] = accessDeniedSystemError;
 function makeFsModule(options = {}) {
   assertSupportedPlatform();
+  const maxSymlinkFollows = options.maxSymlinkFollows ?? Infinity;
   const hostReadMemoryLimit = options.hostReadMemoryLimit ?? Infinity;
   const readFileMaxBytes = options.readFileMaxBytes ?? Infinity;
-  for (const limit of [hostReadMemoryLimit, readFileMaxBytes]) {
+  for (const limit of [hostReadMemoryLimit, readFileMaxBytes, maxSymlinkFollows]) {
     if (limit !== Infinity && (!Number.isSafeInteger(limit) || limit < 0))
       throw new TypeError("Filesystem read limits must be non-negative safe integers or Infinity.");
   }
@@ -58052,7 +58057,7 @@ function makeFsModule(options = {}) {
     cwd: options.root === void 0 ? options.cwd : void 0,
     signal: options.signal
   });
-  const fs = options.root === void 0 ? implementation : makeRootedFs(implementation, options.root, options.adapter, options.cwd, options.signal);
+  const fs = options.root === void 0 ? implementation : makeRootedFs(implementation, options.root, options.adapter, options.cwd, options.signal, maxSymlinkFollows);
   let readFile = bindStringResult(fs, "readFile");
   if (options.adapter !== void 0) {
     const boundedRead = async (args, budget) => {
@@ -58080,7 +58085,7 @@ function makeFsModule(options = {}) {
         }
       });
       const portable = bridge;
-      const boundedFs = options.root === void 0 ? portable : makeRootedFs(portable, options.root, options.adapter, options.cwd, options.signal);
+      const boundedFs = options.root === void 0 ? portable : makeRootedFs(portable, options.root, options.adapter, options.cwd, options.signal, maxSymlinkFollows);
       return await invoke(boundedFs, "readFile", args);
     };
     const directRead = declare("readFile", "re-issue", (...args) => boundedRead(args));
@@ -58172,7 +58177,7 @@ function invoke(fs, name, args) {
   return Reflect.apply(fs[name], fs, args);
 }
 var rootedFsOperations = /* @__PURE__ */ new WeakMap();
-function makeRootedFs(fs, root, adapter, cwd, signal) {
+function makeRootedFs(fs, root, adapter, cwd, signal, maxSymlinkFollows = Infinity) {
   if (root.trim().length === 0) {
     throw new Error("fs module root must be a non-empty string.");
   }
@@ -58193,7 +58198,7 @@ function makeRootedFs(fs, root, adapter, cwd, signal) {
         return await invoke(
           fs,
           name,
-          await resolvePathArguments(fs, resolvedRoot, name, args, adapter, cwd, signal)
+          await resolvePathArguments(fs, resolvedRoot, name, args, adapter, cwd, signal, maxSymlinkFollows)
         );
       } finally {
         release();
@@ -58214,8 +58219,8 @@ function assertRootCanConfineOptions(name, args) {
     throw createUnsupportedOptionError("cp", "dereference", ROOT_REFUSED_DEREFERENCE_REASON);
   }
 }
-async function resolvePathArguments(fs, root, name, args, adapter, cwd, signal) {
-  const canonicalRoot = await resolveCanonicalPath(readCanonicalPathFs(fs), resolve(root));
+async function resolvePathArguments(fs, root, name, args, adapter, cwd, signal, maxSymlinkFollows = Infinity) {
+  const canonicalRoot = await resolveCanonicalPath(readCanonicalPathFs(fs), resolve(root), maxSymlinkFollows);
   const base = cwd ?? canonicalRoot;
   const resolved = [...args];
   if (name === "symlink") {
@@ -58239,7 +58244,7 @@ async function resolvePathArguments(fs, root, name, args, adapter, cwd, signal)
     await assertInsideRoot(fs, canonicalRoot, name, [checkedTarget, linkPath], adapter, signal, [
       targetPath,
       linkPath
-    ]);
+    ], maxSymlinkFollows);
     return resolved;
   }
   const paths = FS_PATH_ARGUMENTS[name].map((_, index) => {
@@ -58247,12 +58252,12 @@ async function resolvePathArguments(fs, root, name, args, adapter, cwd, signal)
     resolved[index] = path;
     return path;
   });
-  await assertInsideRoot(fs, canonicalRoot, name, paths, adapter, signal);
+  await assertInsideRoot(fs, canonicalRoot, name, paths, adapter, signal, paths, maxSymlinkFollows);
   if (name === "mkdtemp") {
     const prefix = args[0];
     const absolutePrefix = isAbsolutePath(prefix) ? prefix : `${base}${sep}${prefix}`;
     const parent = absolutePrefix.endsWith(sep) ? absolutePrefix : dirname(absolutePrefix);
-    await assertInsideRoot(fs, canonicalRoot, name, [parent], adapter, signal, paths);
+    await assertInsideRoot(fs, canonicalRoot, name, [parent], adapter, signal, paths, maxSymlinkFollows);
     resolved[0] = absolutePrefix;
   }
   if (adapter !== void 0 && name === "mkdir") {
@@ -58270,15 +58275,15 @@ async function resolvePathArguments(fs, root, name, args, adapter, cwd, signal)
   }
   return resolved;
 }
-async function assertInsideRoot(fs, canonicalRoot, name, paths, adapter, signal, reportedPaths = paths) {
+async function assertInsideRoot(fs, canonicalRoot, name, paths, adapter, signal, reportedPaths = paths, maxSymlinkFollows = Infinity) {
   for (const path of paths) {
-    if (await escapesRoot(fs, canonicalRoot, path, adapter, signal)) {
+    if (await escapesRoot(fs, canonicalRoot, path, adapter, signal, maxSymlinkFollows)) {
       throw createAccessDeniedError(name, reportedPaths[0], reportedPaths[1]);
     }
   }
 }
-async function escapesRoot(fs, canonicalRoot, path, adapter, signal) {
-  const canonicalPath = await resolveCanonicalPath(readCanonicalPathFs(fs), path);
+async function escapesRoot(fs, canonicalRoot, path, adapter, signal, maxSymlinkFollows = Infinity) {
+  const canonicalPath = await resolveCanonicalPath(readCanonicalPathFs(fs), path, maxSymlinkFollows);
   return !await (adapter === void 0 ? containsPath(readStat(fs), canonicalRoot, canonicalPath) : containsAdapterPath(adapter, canonicalRoot, canonicalPath, signal));
 }
 async function containsAdapterPath(adapter, canonicalRoot, canonicalPath, signal) {

package/dist/safe-js/portable/core.js

@@ -119,7 +119,7 @@ import {
   wrapCallerInjectedBindings,
   wrapCancelableBindings,
   wrapHostConstructor
-} from "./chunks/chunk-KYJVK33V.js";
+} from "./chunks/chunk-2FNMGWDK.js";
 import {
   createRootedSourceResolver
 } from "./chunks/chunk-XCTU25SU.js";
@@ -12489,7 +12489,7 @@ var RealmState = class {
     this.assertOpen();
     const closure = readGuestCallback(callback, this);
     this.checkCollection(this.pendingCallbacks.size + 1, this.limits.callbacks, "pending callback");
-    const scheduled = this.options.callbackScheduling === "after-prefix";
+    const scheduled = this.options.callbackScheduling === "after-prefix" || this.queuedCallbacks.has(callback);
     const record = {
       closure,
       prefixComplete: false
@@ -12871,7 +12871,7 @@ var RealmState = class {
       await this.dispose();
     this.assertOpen();
     if (this.active !== void 0) throw new SandboxError("reentry");
-    const scheduled = this.options.callbackScheduling === "after-prefix";
+    const scheduled = this.options.callbackScheduling === "after-prefix" || this.releaseReconciliation !== void 0 || this.pendingWork.size > 0;
     if (scheduled && (this.phase.getStore()?.active || [...this.pendingCallbacks].some((record) => !record.prefixComplete)))
       throw new SandboxError("reentry");
     const rejectionOwner = scheduled ? this.tracker.startOperation() : void 0;
@@ -12921,13 +12921,13 @@ var RealmState = class {
     } finally {
       this.tracker.finishOperation(rejectionOwner);
       if (this.active === pending) this.active = void 0;
-      if (scheduled) this.reconcileWhenIdle();
+      if (scheduled || this.releaseReconciliation !== void 0) this.reconcileWhenIdle();
     }
   }
   close = () => {
     this.closed = true;
     this.controller.abort(new Error("SafeJS realm is closed."));
-    if (this.options.callbackScheduling === "after-prefix") {
+    if (this.options.callbackScheduling === "after-prefix" || this.releaseReconciliation !== void 0 || this.pendingWork.size > 0) {
       const disposal = this.dispose();
       if (this.phase.getStore()?.active) {
         void disposal.catch(() => void 0);
@@ -12946,7 +12946,7 @@ var RealmState = class {
     this.closed = true;
     this.controller.abort(new Error("SafeJS realm is closed."));
     this.options.signal?.removeEventListener("abort", this.abort);
-    if (this.options.callbackScheduling === "after-prefix") {
+    if (this.options.callbackScheduling === "after-prefix" || this.releaseReconciliation !== void 0 || this.pendingWork.size > 0) {
       this.disposal = Promise.resolve().then(async () => {
         while (this.pendingWork.size > 0) await Promise.allSettled([...this.pendingWork]);
         await this.sourceGraph?.settle();
@@ -13393,16 +13393,24 @@ import { createFsBridge } from "@poe-platform/safe-fs/core";
 var DEFAULT_WRITE_MAX_ATTEMPTS = 3;
 var DEFAULT_WRITE_RETRY_DELAY_MS = 100;
 var LOCKED_FILE_ERROR_CODES = /* @__PURE__ */ new Set(["EACCES", "EBUSY", "EPERM"]);
-var pendingOperations = /* @__PURE__ */ new Map();
+var adapterOperations = /* @__PURE__ */ new WeakMap();
 var FileSnapshotBackend = class {
   constructor(path, options = {}) {
     this.path = path;
+    const adapter = options.adapter ?? hostFs;
+    let pending = adapterOperations.get(adapter);
+    if (pending === void 0) {
+      pending = /* @__PURE__ */ new Map();
+      adapterOperations.set(adapter, pending);
+    }
+    this.#pendingOperations = pending;
     this.#io = options.adapter === void 0 ? hostFs : createFsBridge(options.adapter, { codec: fsCodec });
     this.#writeMaxAttempts = options.writeMaxAttempts ?? DEFAULT_WRITE_MAX_ATTEMPTS;
     this.#writeRetryDelayMs = options.writeRetryDelayMs ?? DEFAULT_WRITE_RETRY_DELAY_MS;
   }
   path;
   #io;
+  #pendingOperations;
   #writeMaxAttempts;
   #writeRetryDelayMs;
   async read() {
@@ -13420,6 +13428,7 @@ var FileSnapshotBackend = class {
   }
   async write(snapshot) {
     await enqueueOperation(
+      this.#pendingOperations,
       this.path,
       () => writeSnapshotAtomically(this.#io, this.path, snapshot, {
         maxAttempts: this.#writeMaxAttempts,
@@ -13428,7 +13437,7 @@ var FileSnapshotBackend = class {
     );
   }
   async remove() {
-    await enqueueOperation(this.path, async () => {
+    await enqueueOperation(this.#pendingOperations, this.path, async () => {
       try {
         await this.#io.unlink(this.path);
       } catch (error) {
@@ -13516,7 +13525,7 @@ async function writeSnapshotOnce(io, temporaryPath, snapshotPath, contents) {
     }
   }
 }
-async function enqueueOperation(path, operation) {
+async function enqueueOperation(pendingOperations, path, operation) {
   const previous = pendingOperations.get(path) ?? Promise.resolve();
   const pending = previous.catch(() => void 0).then(operation);
   const queued = pending.catch(() => void 0);
@@ -14108,10 +14117,9 @@ function run(source, options = {}) {
             migration: restoredSnapshot?.migration,
             bindings: executionScope.snapshot().bindings,
             clock: options.clock,
-            hostCalls: hostCalls.snapshot(),
-            replay: hostCalls.snapshotReplay(),
+            hostCalls,
             initialInputs: initialInputs.snapshot,
-            promiseReplay: promiseReplay.snapshot(),
+            promiseReplay,
             random,
             sourceHash
           });
@@ -14138,12 +14146,11 @@ function run(source, options = {}) {
                   migration: restoredSnapshot?.migration,
                   bindings: interpreterSnapshot2.bindings,
                   clock: options.clock,
-                  hostCalls: hostCalls.snapshot(),
+                  hostCalls,
                   loopIterations: interpreterSnapshot2.loopIterations,
                   pendingAwaits: [createPendingAwaitSnapshot(yieldPoint)],
-                  replay: hostCalls.snapshotReplay(),
                   initialInputs: initialInputs.snapshot,
-                  promiseReplay: promiseReplay.snapshot(),
+                  promiseReplay,
                   random,
                   randomResumeState: typeof yieldPoint.replayState === "number" ? yieldPoint.replayState : void 0,
                   sourceHash
@@ -14183,12 +14190,11 @@ function run(source, options = {}) {
                   migration: restoredSnapshot?.migration,
                   bindings: interpreterSnapshot2.bindings,
                   clock: options.clock,
-                  hostCalls: hostCalls.snapshot(),
+                  hostCalls,
                   loopIterations: interpreterSnapshot2.loopIterations,
                   pendingAwaits: [createPendingAwaitSnapshot(yieldPoint)],
-                  replay: hostCalls.snapshotReplay(),
                   initialInputs: initialInputs.snapshot,
-                  promiseReplay: promiseReplay.snapshot(),
+                  promiseReplay,
                   random,
                   randomResumeState: typeof yieldPoint.replayState === "number" ? yieldPoint.replayState : void 0,
                   sourceHash
@@ -14205,27 +14211,17 @@ function run(source, options = {}) {
           await throwIfReturnedPromiseRejected(result2);
           await throwIfUnhandledPromiseRejected(promiseTracker);
           await activeSnapshotScheduler.finish();
-          let replay;
-          let replayError;
-          try {
-            replay = hostCalls.snapshotReplay();
-          } catch (error) {
-            if (!(error instanceof MissingReplayCapabilityError)) throw error;
-            replayError = error.message;
-          }
           const snapshot = createRunSnapshot({
             executionSemantics,
             migration: restoredSnapshot?.migration,
             bindings: executionScope.snapshot().bindings,
             clock: options.clock,
-            hostCalls: hostCalls.snapshot(),
-            replay,
+            hostCalls,
             initialInputs: initialInputs.snapshot,
-            promiseReplay: promiseReplay.snapshot(),
+            promiseReplay,
             random,
             sourceHash
           });
-          if (replayError !== void 0) snapshot.replayError = replayError;
           dumpController.finalize(snapshot);
           completedSnapshot = snapshot;
           reconcileCompiledValues(
@@ -14402,6 +14398,15 @@ function createExecutableNode(module) {
   };
 }
 function createRunSnapshot(input) {
+  let replay;
+  let replayError;
+  try {
+    replay = input.hostCalls.snapshotReplay();
+  } catch (error) {
+    if (!(error instanceof MissingReplayCapabilityError)) throw error;
+    replayError = error.message;
+  }
+  const hostCalls = input.hostCalls.snapshot();
   const snapshot = {
     version: DUMP_FORMAT_VERSION,
     executionSemantics: input.executionSemantics,
@@ -14409,11 +14414,12 @@ function createRunSnapshot(input) {
     ...input.migration === void 0 ? {} : { migration: structuredClone(input.migration) },
     bindings: input.bindings,
     clock: input.clock?.snapshot(),
-    ...input.hostCalls === void 0 || input.hostCalls.length === 0 ? {} : { hostCalls: input.hostCalls },
+    ...hostCalls.length === 0 ? {} : { hostCalls },
     ...input.loopIterations === void 0 ? {} : { loopIterations: input.loopIterations },
-    ...input.replay === void 0 ? {} : { replay: input.replay },
+    ...replay === void 0 ? {} : { replay },
+    ...replayError === void 0 ? {} : { replayError },
     ...input.initialInputs === void 0 ? {} : { initialInputs: structuredClone(input.initialInputs) },
-    ...input.promiseReplay === void 0 ? {} : { promiseReplay: input.promiseReplay },
+    promiseReplay: input.promiseReplay.snapshot(),
     ...input.pendingAwaits === void 0 || input.pendingAwaits.length === 0 ? {} : { pendingAwaits: input.pendingAwaits },
     random: input.random === void 0 ? void 0 : {
       seed: input.random.seed,

package/dist/safe-js/portable/modules/fs.js

@@ -1,7 +1,7 @@
 import {
   FS_OPTION_SURFACE,
   makeFsModule
-} from "../chunks/chunk-KYJVK33V.js";
+} from "../chunks/chunk-2FNMGWDK.js";
 import "../chunks/chunk-H5X3T5VP.js";
 export {
   FS_OPTION_SURFACE,

package/dist/safe-js/workerd.js

@@ -71259,7 +71259,7 @@ var RealmState = class {
     this.assertOpen();
     const closure = readGuestCallback(callback, this);
     this.checkCollection(this.pendingCallbacks.size + 1, this.limits.callbacks, "pending callback");
-    const scheduled = this.options.callbackScheduling === "after-prefix";
+    const scheduled = this.options.callbackScheduling === "after-prefix" || this.queuedCallbacks.has(callback);
     const record5 = {
       closure,
       prefixComplete: false
@@ -71641,7 +71641,7 @@ var RealmState = class {
       await this.dispose();
     this.assertOpen();
     if (this.active !== void 0) throw new SandboxError("reentry");
-    const scheduled = this.options.callbackScheduling === "after-prefix";
+    const scheduled = this.options.callbackScheduling === "after-prefix" || this.releaseReconciliation !== void 0 || this.pendingWork.size > 0;
     if (scheduled && (this.phase.getStore()?.active || [...this.pendingCallbacks].some((record5) => !record5.prefixComplete)))
       throw new SandboxError("reentry");
     const rejectionOwner = scheduled ? this.tracker.startOperation() : void 0;
@@ -71691,13 +71691,13 @@ var RealmState = class {
     } finally {
       this.tracker.finishOperation(rejectionOwner);
       if (this.active === pending) this.active = void 0;
-      if (scheduled) this.reconcileWhenIdle();
+      if (scheduled || this.releaseReconciliation !== void 0) this.reconcileWhenIdle();
     }
   }
   close = () => {
     this.closed = true;
     this.controller.abort(new Error("SafeJS realm is closed."));
-    if (this.options.callbackScheduling === "after-prefix") {
+    if (this.options.callbackScheduling === "after-prefix" || this.releaseReconciliation !== void 0 || this.pendingWork.size > 0) {
       const disposal = this.dispose();
       if (this.phase.getStore()?.active) {
         void disposal.catch(() => void 0);
@@ -71716,7 +71716,7 @@ var RealmState = class {
     this.closed = true;
     this.controller.abort(new Error("SafeJS realm is closed."));
     this.options.signal?.removeEventListener("abort", this.abort);
-    if (this.options.callbackScheduling === "after-prefix") {
+    if (this.options.callbackScheduling === "after-prefix" || this.releaseReconciliation !== void 0 || this.pendingWork.size > 0) {
       this.disposal = Promise.resolve().then(async () => {
         while (this.pendingWork.size > 0) await Promise.allSettled([...this.pendingWork]);
         await this.sourceGraph?.settle();
@@ -72264,16 +72264,24 @@ function hasOwnErrorCode(error, code) {
 var DEFAULT_WRITE_MAX_ATTEMPTS = 3;
 var DEFAULT_WRITE_RETRY_DELAY_MS = 100;
 var LOCKED_FILE_ERROR_CODES = /* @__PURE__ */ new Set(["EACCES", "EBUSY", "EPERM"]);
-var pendingOperations = /* @__PURE__ */ new Map();
+var adapterOperations = /* @__PURE__ */ new WeakMap();
 var FileSnapshotBackend = class {
   constructor(path, options = {}) {
     this.path = path;
+    const adapter = options.adapter ?? hostFs;
+    let pending = adapterOperations.get(adapter);
+    if (pending === void 0) {
+      pending = /* @__PURE__ */ new Map();
+      adapterOperations.set(adapter, pending);
+    }
+    this.#pendingOperations = pending;
     this.#io = options.adapter === void 0 ? hostFs : createFsBridge(options.adapter, { codec: fsCodec });
     this.#writeMaxAttempts = options.writeMaxAttempts ?? DEFAULT_WRITE_MAX_ATTEMPTS;
     this.#writeRetryDelayMs = options.writeRetryDelayMs ?? DEFAULT_WRITE_RETRY_DELAY_MS;
   }
   path;
   #io;
+  #pendingOperations;
   #writeMaxAttempts;
   #writeRetryDelayMs;
   async read() {
@@ -72291,6 +72299,7 @@ var FileSnapshotBackend = class {
   }
   async write(snapshot) {
     await enqueueOperation(
+      this.#pendingOperations,
       this.path,
       () => writeSnapshotAtomically(this.#io, this.path, snapshot, {
         maxAttempts: this.#writeMaxAttempts,
@@ -72299,7 +72308,7 @@ var FileSnapshotBackend = class {
     );
   }
   async remove() {
-    await enqueueOperation(this.path, async () => {
+    await enqueueOperation(this.#pendingOperations, this.path, async () => {
       try {
         await this.#io.unlink(this.path);
       } catch (error) {
@@ -72387,7 +72396,7 @@ async function writeSnapshotOnce(io, temporaryPath, snapshotPath, contents) {
     }
   }
 }
-async function enqueueOperation(path, operation) {
+async function enqueueOperation(pendingOperations, path, operation) {
   const previous = pendingOperations.get(path) ?? Promise.resolve();
   const pending = previous.catch(() => void 0).then(operation);
   const queued = pending.catch(() => void 0);
@@ -72980,10 +72989,9 @@ function run(source, options = {}) {
             migration: restoredSnapshot?.migration,
             bindings: executionScope.snapshot().bindings,
             clock: options.clock,
-            hostCalls: hostCalls.snapshot(),
-            replay: hostCalls.snapshotReplay(),
+            hostCalls,
             initialInputs: initialInputs.snapshot,
-            promiseReplay: promiseReplay.snapshot(),
+            promiseReplay,
             random,
             sourceHash
           });
@@ -73010,12 +73018,11 @@ function run(source, options = {}) {
                   migration: restoredSnapshot?.migration,
                   bindings: interpreterSnapshot2.bindings,
                   clock: options.clock,
-                  hostCalls: hostCalls.snapshot(),
+                  hostCalls,
                   loopIterations: interpreterSnapshot2.loopIterations,
                   pendingAwaits: [createPendingAwaitSnapshot(yieldPoint)],
-                  replay: hostCalls.snapshotReplay(),
                   initialInputs: initialInputs.snapshot,
-                  promiseReplay: promiseReplay.snapshot(),
+                  promiseReplay,
                   random,
                   randomResumeState: typeof yieldPoint.replayState === "number" ? yieldPoint.replayState : void 0,
                   sourceHash
@@ -73055,12 +73062,11 @@ function run(source, options = {}) {
                   migration: restoredSnapshot?.migration,
                   bindings: interpreterSnapshot2.bindings,
                   clock: options.clock,
-                  hostCalls: hostCalls.snapshot(),
+                  hostCalls,
                   loopIterations: interpreterSnapshot2.loopIterations,
                   pendingAwaits: [createPendingAwaitSnapshot(yieldPoint)],
-                  replay: hostCalls.snapshotReplay(),
                   initialInputs: initialInputs.snapshot,
-                  promiseReplay: promiseReplay.snapshot(),
+                  promiseReplay,
                   random,
                   randomResumeState: typeof yieldPoint.replayState === "number" ? yieldPoint.replayState : void 0,
                   sourceHash
@@ -73077,27 +73083,17 @@ function run(source, options = {}) {
           await throwIfReturnedPromiseRejected(result2);
           await throwIfUnhandledPromiseRejected(promiseTracker);
           await activeSnapshotScheduler.finish();
-          let replay;
-          let replayError;
-          try {
-            replay = hostCalls.snapshotReplay();
-          } catch (error) {
-            if (!(error instanceof MissingReplayCapabilityError)) throw error;
-            replayError = error.message;
-          }
           const snapshot = createRunSnapshot({
             executionSemantics,
             migration: restoredSnapshot?.migration,
             bindings: executionScope.snapshot().bindings,
             clock: options.clock,
-            hostCalls: hostCalls.snapshot(),
-            replay,
+            hostCalls,
             initialInputs: initialInputs.snapshot,
-            promiseReplay: promiseReplay.snapshot(),
+            promiseReplay,
             random,
             sourceHash
           });
-          if (replayError !== void 0) snapshot.replayError = replayError;
           dumpController.finalize(snapshot);
           completedSnapshot = snapshot;
           reconcileCompiledValues(
@@ -73274,6 +73270,15 @@ function createExecutableNode(module) {
   };
 }
 function createRunSnapshot(input) {
+  let replay;
+  let replayError;
+  try {
+    replay = input.hostCalls.snapshotReplay();
+  } catch (error) {
+    if (!(error instanceof MissingReplayCapabilityError)) throw error;
+    replayError = error.message;
+  }
+  const hostCalls = input.hostCalls.snapshot();
   const snapshot = {
     version: DUMP_FORMAT_VERSION,
     executionSemantics: input.executionSemantics,
@@ -73281,11 +73286,12 @@ function createRunSnapshot(input) {
     ...input.migration === void 0 ? {} : { migration: structuredClone(input.migration) },
     bindings: input.bindings,
     clock: input.clock?.snapshot(),
-    ...input.hostCalls === void 0 || input.hostCalls.length === 0 ? {} : { hostCalls: input.hostCalls },
+    ...hostCalls.length === 0 ? {} : { hostCalls },
     ...input.loopIterations === void 0 ? {} : { loopIterations: input.loopIterations },
-    ...input.replay === void 0 ? {} : { replay: input.replay },
+    ...replay === void 0 ? {} : { replay },
+    ...replayError === void 0 ? {} : { replayError },
     ...input.initialInputs === void 0 ? {} : { initialInputs: structuredClone(input.initialInputs) },
-    ...input.promiseReplay === void 0 ? {} : { promiseReplay: input.promiseReplay },
+    promiseReplay: input.promiseReplay.snapshot(),
     ...input.pendingAwaits === void 0 || input.pendingAwaits.length === 0 ? {} : { pendingAwaits: input.pendingAwaits },
     random: input.random === void 0 ? void 0 : {
       seed: input.random.seed,
@@ -73472,11 +73478,14 @@ import {
 init_paths();
 var MISSING_PATH_CODES = ["ENOENT", "ENOTDIR"];
 var NOT_A_SYMLINK_CODES = [...MISSING_PATH_CODES, "EINVAL"];
-var MAX_SYMLINK_FOLLOWS = 32;
-async function resolveCanonicalPath({ realpath, readlink }, path) {
+async function resolveCanonicalPath({ realpath, readlink }, path, maxSymlinkFollows = Infinity) {
+  if (maxSymlinkFollows !== Infinity && (!Number.isSafeInteger(maxSymlinkFollows) || maxSymlinkFollows < 0)) {
+    throw new RangeError("maxSymlinkFollows must be a nonnegative safe integer or Infinity");
+  }
   const missingSegments = [];
   let current = path;
   let follows = 0;
+  const visited = /* @__PURE__ */ new Set();
   while (true) {
     try {
       const canonicalCurrent = await realpath(current);
@@ -73487,9 +73496,10 @@ async function resolveCanonicalPath({ realpath, readlink }, path) {
       }
       const target = await readSymlinkTarget(readlink, current);
       if (target !== void 0) {
-        if (++follows > MAX_SYMLINK_FOLLOWS) {
+        if (++follows > maxSymlinkFollows || visited.has(current)) {
           throw createLoopError(path);
         }
+        visited.add(current);
         current = isAbsolutePath(target) ? target : `${dirname(current)}${sep}${target}`;
         continue;
       }
@@ -73702,9 +73712,10 @@ var NULL_BYTE = "\0";
 var [ACCESS_DENIED_ERRNO, ACCESS_DENIED_MESSAGE] = accessDeniedSystemError;
 function makeFsModule(options = {}) {
   assertSupportedPlatform();
+  const maxSymlinkFollows = options.maxSymlinkFollows ?? Infinity;
   const hostReadMemoryLimit = options.hostReadMemoryLimit ?? Infinity;
   const readFileMaxBytes = options.readFileMaxBytes ?? Infinity;
-  for (const limit of [hostReadMemoryLimit, readFileMaxBytes]) {
+  for (const limit of [hostReadMemoryLimit, readFileMaxBytes, maxSymlinkFollows]) {
     if (limit !== Infinity && (!Number.isSafeInteger(limit) || limit < 0))
       throw new TypeError("Filesystem read limits must be non-negative safe integers or Infinity.");
   }
@@ -73726,7 +73737,7 @@ function makeFsModule(options = {}) {
     cwd: options.root === void 0 ? options.cwd : void 0,
     signal: options.signal
   });
-  const fs = options.root === void 0 ? implementation : makeRootedFs(implementation, options.root, options.adapter, options.cwd, options.signal);
+  const fs = options.root === void 0 ? implementation : makeRootedFs(implementation, options.root, options.adapter, options.cwd, options.signal, maxSymlinkFollows);
   let readFile = bindStringResult(fs, "readFile");
   if (options.adapter !== void 0) {
     const boundedRead = async (args, budget) => {
@@ -73754,7 +73765,7 @@ function makeFsModule(options = {}) {
         }
       });
       const portable = bridge;
-      const boundedFs = options.root === void 0 ? portable : makeRootedFs(portable, options.root, options.adapter, options.cwd, options.signal);
+      const boundedFs = options.root === void 0 ? portable : makeRootedFs(portable, options.root, options.adapter, options.cwd, options.signal, maxSymlinkFollows);
       return await invoke(boundedFs, "readFile", args);
     };
     const directRead = declare("readFile", "re-issue", (...args) => boundedRead(args));
@@ -73846,7 +73857,7 @@ function invoke(fs, name, args) {
   return Reflect.apply(fs[name], fs, args);
 }
 var rootedFsOperations = /* @__PURE__ */ new WeakMap();
-function makeRootedFs(fs, root, adapter, cwd, signal) {
+function makeRootedFs(fs, root, adapter, cwd, signal, maxSymlinkFollows = Infinity) {
   if (root.trim().length === 0) {
     throw new Error("fs module root must be a non-empty string.");
   }
@@ -73867,7 +73878,7 @@ function makeRootedFs(fs, root, adapter, cwd, signal) {
         return await invoke(
           fs,
           name,
-          await resolvePathArguments(fs, resolvedRoot, name, args, adapter, cwd, signal)
+          await resolvePathArguments(fs, resolvedRoot, name, args, adapter, cwd, signal, maxSymlinkFollows)
         );
       } finally {
         release();
@@ -73888,8 +73899,8 @@ function assertRootCanConfineOptions(name, args) {
     throw createUnsupportedOptionError("cp", "dereference", ROOT_REFUSED_DEREFERENCE_REASON);
   }
 }
-async function resolvePathArguments(fs, root, name, args, adapter, cwd, signal) {
-  const canonicalRoot = await resolveCanonicalPath(readCanonicalPathFs(fs), resolve(root));
+async function resolvePathArguments(fs, root, name, args, adapter, cwd, signal, maxSymlinkFollows = Infinity) {
+  const canonicalRoot = await resolveCanonicalPath(readCanonicalPathFs(fs), resolve(root), maxSymlinkFollows);
   const base = cwd ?? canonicalRoot;
   const resolved = [...args];
   if (name === "symlink") {
@@ -73913,7 +73924,7 @@ async function resolvePathArguments(fs, root, name, args, adapter, cwd, signal)
     await assertInsideRoot(fs, canonicalRoot, name, [checkedTarget, linkPath], adapter, signal, [
       targetPath,
       linkPath
-    ]);
+    ], maxSymlinkFollows);
     return resolved;
   }
   const paths = FS_PATH_ARGUMENTS[name].map((_, index) => {
@@ -73921,12 +73932,12 @@ async function resolvePathArguments(fs, root, name, args, adapter, cwd, signal)
     resolved[index] = path;
     return path;
   });
-  await assertInsideRoot(fs, canonicalRoot, name, paths, adapter, signal);
+  await assertInsideRoot(fs, canonicalRoot, name, paths, adapter, signal, paths, maxSymlinkFollows);
   if (name === "mkdtemp") {
     const prefix = args[0];
     const absolutePrefix = isAbsolutePath(prefix) ? prefix : `${base}${sep}${prefix}`;
     const parent = absolutePrefix.endsWith(sep) ? absolutePrefix : dirname(absolutePrefix);
-    await assertInsideRoot(fs, canonicalRoot, name, [parent], adapter, signal, paths);
+    await assertInsideRoot(fs, canonicalRoot, name, [parent], adapter, signal, paths, maxSymlinkFollows);
     resolved[0] = absolutePrefix;
   }
   if (adapter !== void 0 && name === "mkdir") {
@@ -73944,15 +73955,15 @@ async function resolvePathArguments(fs, root, name, args, adapter, cwd, signal)
   }
   return resolved;
 }
-async function assertInsideRoot(fs, canonicalRoot, name, paths, adapter, signal, reportedPaths = paths) {
+async function assertInsideRoot(fs, canonicalRoot, name, paths, adapter, signal, reportedPaths = paths, maxSymlinkFollows = Infinity) {
   for (const path of paths) {
-    if (await escapesRoot(fs, canonicalRoot, path, adapter, signal)) {
+    if (await escapesRoot(fs, canonicalRoot, path, adapter, signal, maxSymlinkFollows)) {
       throw createAccessDeniedError(name, reportedPaths[0], reportedPaths[1]);
     }
   }
 }
-async function escapesRoot(fs, canonicalRoot, path, adapter, signal) {
-  const canonicalPath = await resolveCanonicalPath(readCanonicalPathFs(fs), path);
+async function escapesRoot(fs, canonicalRoot, path, adapter, signal, maxSymlinkFollows = Infinity) {
+  const canonicalPath = await resolveCanonicalPath(readCanonicalPathFs(fs), path, maxSymlinkFollows);
   return !await (adapter === void 0 ? containsPath(readStat(fs), canonicalRoot, canonicalPath) : containsAdapterPath(adapter, canonicalRoot, canonicalPath, signal));
 }
 async function containsAdapterPath(adapter, canonicalRoot, canonicalPath, signal) {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@poe-platform/safe-js",
-  "version": "0.1.800",
+  "version": "0.1.802",
   "description": "Budgeted JavaScript interpreter with explicit host capabilities and resumable execution",
   "type": "module",
   "license": "MIT",
@@ -82,7 +82,7 @@
     "access": "public"
   },
   "dependencies": {
-    "@poe-platform/safe-fs": "0.1.800",
+    "@poe-platform/safe-fs": "0.1.802",
     "@petamoriken/float16": "^3.9.3",
     "@noble/hashes": "2.4.0",
     "@formatjs/intl-localematcher": "0.8.13",