@poe-platform/safe-js 0.1.805 → 0.1.806

package/dist/safe-js/chunks/{chunk-HFCSCNZN.js → chunk-E7V44LSN.js}

@@ -1,3 +1,7 @@
+import {
+  paths_default
+} from "./chunk-2IYZK337.js";
+
 // packages/tiny-mcp-client/src/http-json-budget.ts
 function assertHttpJsonBudget(text) {
   let nodes = 0;
@@ -222,6 +226,9 @@ function dialectFor(schema, inherited) {
   return inherited;
 }
 function resolveUri(reference, baseUri) {
+  if (typeof URL === "undefined" && (reference === "" || reference.startsWith("#"))) {
+    return `${withoutFragment(baseUri)}${reference}`;
+  }
   try {
     return new URL(reference, baseUri).href;
   } catch {
@@ -270,8 +277,8 @@ function receivedType(value) {
   }
   return typeof value;
 }
-function issue(path6, expected, value, message, keyword = keywordFor(expected)) {
-  return { path: path6, expected, received: receivedType(value), message, keyword };
+function issue(path5, expected, value, message, keyword = keywordFor(expected)) {
+  return { path: path5, expected, received: receivedType(value), message, keyword };
 }
 function keywordFor(expected) {
   if (["null", "boolean", "object", "array", "number", "integer", "string"].includes(expected)) {
@@ -1102,41 +1109,41 @@ function evaluateArrayApplicators(graph, node, schema, value, context) {
   }
   return results;
 }
-function evaluateValidationKeywords(node, schema, value, path6) {
+function evaluateValidationKeywords(node, schema, value, path5) {
   const results = [];
   const types = typeof schema.type === "string" ? [schema.type] : Array.isArray(schema.type) ? schema.type : [];
   if (types.length > 0 && !types.some((type) => typeof type === "string" && typeMatches(type, value))) {
-    results.push(invalidResult(issue(path6, types.join(","), value, `must be ${types.join(",")}`)));
+    results.push(invalidResult(issue(path5, types.join(","), value, `must be ${types.join(",")}`)));
     return results;
   }
   if (schema.const !== void 0 && !deepEqual(schema.const, value)) {
-    results.push(invalidResult(issue(path6, "const", value, "must be equal to constant")));
+    results.push(invalidResult(issue(path5, "const", value, "must be equal to constant")));
   }
   if (Array.isArray(schema.enum) && !schema.enum.some((entry) => deepEqual(entry, value))) {
     results.push(
-      invalidResult(issue(path6, "enum", value, "must be equal to one of the allowed values"))
+      invalidResult(issue(path5, "enum", value, "must be equal to one of the allowed values"))
     );
   }
   if (typeof value === "number" && Number.isFinite(value)) {
-    evaluateNumberKeywords(schema, value, path6, results);
+    evaluateNumberKeywords(schema, value, path5, results);
   }
   if (typeof value === "string") {
-    evaluateStringKeywords(schema, value, path6, results);
+    evaluateStringKeywords(schema, value, path5, results);
   }
   if (Array.isArray(value)) {
-    evaluateArrayKeywords(schema, value, path6, results);
+    evaluateArrayKeywords(schema, value, path5, results);
   }
   if (isObject(value)) {
-    evaluateObjectKeywords(node, schema, value, path6, results);
+    evaluateObjectKeywords(node, schema, value, path5, results);
   }
   return results;
 }
-function evaluateNumberKeywords(schema, value, path6, results) {
+function evaluateNumberKeywords(schema, value, path5, results) {
   if (typeof schema.multipleOf === "number" && !isMultipleOf(value, schema.multipleOf)) {
     results.push(
       invalidResult(
         issue(
-          path6,
+          path5,
           `multiple of ${schema.multipleOf}`,
           value,
           `must be multiple of ${schema.multipleOf}`
@@ -1146,36 +1153,36 @@ function evaluateNumberKeywords(schema, value, path6, results) {
   }
   if (typeof schema.maximum === "number" && value > schema.maximum) {
     results.push(
-      invalidResult(issue(path6, `<= ${schema.maximum}`, value, `must be <= ${schema.maximum}`))
+      invalidResult(issue(path5, `<= ${schema.maximum}`, value, `must be <= ${schema.maximum}`))
     );
   }
   if (typeof schema.minimum === "number" && value < schema.minimum) {
     results.push(
-      invalidResult(issue(path6, `>= ${schema.minimum}`, value, `must be >= ${schema.minimum}`))
+      invalidResult(issue(path5, `>= ${schema.minimum}`, value, `must be >= ${schema.minimum}`))
     );
   }
   if (typeof schema.exclusiveMaximum === "number" && value >= schema.exclusiveMaximum) {
     results.push(
       invalidResult(
-        issue(path6, `< ${schema.exclusiveMaximum}`, value, `must be < ${schema.exclusiveMaximum}`)
+        issue(path5, `< ${schema.exclusiveMaximum}`, value, `must be < ${schema.exclusiveMaximum}`)
       )
     );
   }
   if (typeof schema.exclusiveMinimum === "number" && value <= schema.exclusiveMinimum) {
     results.push(
       invalidResult(
-        issue(path6, `> ${schema.exclusiveMinimum}`, value, `must be > ${schema.exclusiveMinimum}`)
+        issue(path5, `> ${schema.exclusiveMinimum}`, value, `must be > ${schema.exclusiveMinimum}`)
       )
     );
   }
 }
-function evaluateStringKeywords(schema, value, path6, results) {
+function evaluateStringKeywords(schema, value, path5, results) {
   const length = unicodeLength(value);
   if (typeof schema.maxLength === "number" && length > schema.maxLength) {
     results.push(
       invalidResult(
         issue(
-          path6,
+          path5,
           `length <= ${schema.maxLength}`,
           value,
           `must NOT have more than ${schema.maxLength} characters`
@@ -1187,7 +1194,7 @@ function evaluateStringKeywords(schema, value, path6, results) {
     results.push(
       invalidResult(
         issue(
-          path6,
+          path5,
           `length >= ${schema.minLength}`,
           value,
           `must NOT have fewer than ${schema.minLength} characters`
@@ -1198,17 +1205,17 @@ function evaluateStringKeywords(schema, value, path6, results) {
   if (typeof schema.pattern === "string" && !new RegExp(schema.pattern, "u").test(value)) {
     results.push(
       invalidResult(
-        issue(path6, `pattern ${schema.pattern}`, value, `must match pattern ${schema.pattern}`)
+        issue(path5, `pattern ${schema.pattern}`, value, `must match pattern ${schema.pattern}`)
       )
     );
   }
 }
-function evaluateArrayKeywords(schema, value, path6, results) {
+function evaluateArrayKeywords(schema, value, path5, results) {
   if (typeof schema.maxItems === "number" && value.length > schema.maxItems) {
     results.push(
       invalidResult(
         issue(
-          path6,
+          path5,
           `items <= ${schema.maxItems}`,
           value,
           `must NOT have more than ${schema.maxItems} items`
@@ -1220,7 +1227,7 @@ function evaluateArrayKeywords(schema, value, path6, results) {
     results.push(
       invalidResult(
         issue(
-          path6,
+          path5,
           `items >= ${schema.minItems}`,
           value,
           `must NOT have fewer than ${schema.minItems} items`
@@ -1233,7 +1240,7 @@ function evaluateArrayKeywords(schema, value, path6, results) {
       for (let right = left + 1; right < value.length; right += 1) {
         if (deepEqual(value[left], value[right])) {
           results.push(
-            invalidResult(issue(path6, "unique items", value, "must NOT have duplicate items"))
+            invalidResult(issue(path5, "unique items", value, "must NOT have duplicate items"))
           );
           return;
         }
@@ -1241,13 +1248,13 @@ function evaluateArrayKeywords(schema, value, path6, results) {
     }
   }
 }
-function evaluateObjectKeywords(node, schema, value, path6, results) {
+function evaluateObjectKeywords(node, schema, value, path5, results) {
   const keys = Object.keys(value);
   if (typeof schema.maxProperties === "number" && keys.length > schema.maxProperties) {
     results.push(
       invalidResult(
         issue(
-          path6,
+          path5,
           `properties <= ${schema.maxProperties}`,
           value,
           `must NOT have more than ${schema.maxProperties} properties`
@@ -1259,7 +1266,7 @@ function evaluateObjectKeywords(node, schema, value, path6, results) {
     results.push(
       invalidResult(
         issue(
-          path6,
+          path5,
           `properties >= ${schema.minProperties}`,
           value,
           `must NOT have fewer than ${schema.minProperties} properties`
@@ -1272,7 +1279,7 @@ function evaluateObjectKeywords(node, schema, value, path6, results) {
       if (typeof key2 === "string" && !Object.prototype.hasOwnProperty.call(value, key2)) {
         results.push(
           invalidResult(
-            issue([...path6, key2], "required", void 0, `must have required property '${key2}'`)
+            issue([...path5, key2], "required", void 0, `must have required property '${key2}'`)
           )
         );
       }
@@ -1281,24 +1288,24 @@ function evaluateObjectKeywords(node, schema, value, path6, results) {
   const dependentRequired = isObject(schema.dependentRequired) ? schema.dependentRequired : {};
   for (const [key2, dependencies] of Object.entries(dependentRequired)) {
     if (Object.prototype.hasOwnProperty.call(value, key2) && Array.isArray(dependencies)) {
-      addMissingDependencies(value, dependencies, path6, results);
+      addMissingDependencies(value, dependencies, path5, results);
     }
   }
   if (node.dialect === "draft7" && isObject(schema.dependencies)) {
     for (const [key2, dependencies] of Object.entries(schema.dependencies)) {
       if (Object.prototype.hasOwnProperty.call(value, key2) && Array.isArray(dependencies)) {
-        addMissingDependencies(value, dependencies, path6, results);
+        addMissingDependencies(value, dependencies, path5, results);
       }
     }
   }
 }
-function addMissingDependencies(value, dependencies, path6, results) {
+function addMissingDependencies(value, dependencies, path5, results) {
   for (const dependency of dependencies) {
     if (typeof dependency === "string" && !Object.prototype.hasOwnProperty.call(value, dependency)) {
       results.push(
         invalidResult(
           issue(
-            [...path6, dependency],
+            [...path5, dependency],
             "dependency",
             void 0,
             `must have property '${dependency}'`
@@ -6504,7 +6511,7 @@ function getParameterHeaders(schema) {
   const names = /* @__PURE__ */ new Set();
   const ancestors = /* @__PURE__ */ new Set();
   let nodes = 0;
-  const visit = (value, path6, reachable, depth) => {
+  const visit = (value, path5, reachable, depth) => {
     if (++nodes > 1e4 || depth > 64)
       throw new Error("MCP header schema traversal limit exceeded");
     if (typeof value === "boolean") return;
@@ -6513,7 +6520,7 @@ function getParameterHeaders(schema) {
     try {
       if (Object.prototype.hasOwnProperty.call(value, "x-mcp-header")) {
         const name = value["x-mcp-header"];
-        if (!reachable || path6.length === 0 || typeof name !== "string" || name.length === 0 || [...name].some((character) => {
+        if (!reachable || path5.length === 0 || typeof name !== "string" || name.length === 0 || [...name].some((character) => {
           const code = character.charCodeAt(0);
           return !tokenPunctuation.has(character) && !(code >= 48 && code <= 57 || code >= 65 && code <= 90 || code >= 97 && code <= 122);
         }))
@@ -6523,7 +6530,7 @@ function getParameterHeaders(schema) {
         const key2 = name.toLowerCase();
         if (names.has(key2)) throw new Error("Duplicate x-mcp-header name");
         names.add(key2);
-        headers.push({ name: `Mcp-Param-${name}`, path: [...path6], type: value.type });
+        headers.push({ name: `Mcp-Param-${name}`, path: [...path5], type: value.type });
       }
       for (const [keyword, child] of Object.entries(value)) {
         if (schemaMaps.has(keyword)) {
@@ -6531,17 +6538,17 @@ function getParameterHeaders(schema) {
           for (const [key2, nested] of Object.entries(child))
             visit(
               nested,
-              keyword === "properties" ? [...path6, key2] : path6,
+              keyword === "properties" ? [...path5, key2] : path5,
               reachable && keyword === "properties",
               depth + 1
             );
         } else if (schemaArrays.has(keyword)) {
           if (!Array.isArray(child)) throw new Error("Invalid schema array");
-          for (const nested of child) visit(nested, path6, false, depth + 1);
+          for (const nested of child) visit(nested, path5, false, depth + 1);
         } else if (schemaChildren.has(keyword)) {
           if (Array.isArray(child))
-            for (const nested of child) visit(nested, path6, false, depth + 1);
-          else visit(child, path6, false, depth + 1);
+            for (const nested of child) visit(nested, path5, false, depth + 1);
+          else visit(child, path5, false, depth + 1);
         }
       }
     } finally {
@@ -6753,8 +6760,8 @@ function authorizationServerMetadataLocations(issuer) {
   ];
   const issuerUrl = new URL(issuer);
   if (issuerUrl.pathname !== "/") {
-    const path6 = issuerUrl.pathname.endsWith("/") ? issuerUrl.pathname.slice(0, -1) : issuerUrl.pathname;
-    issuerUrl.pathname = `${path6}/.well-known/openid-configuration`;
+    const path5 = issuerUrl.pathname.endsWith("/") ? issuerUrl.pathname.slice(0, -1) : issuerUrl.pathname;
+    issuerUrl.pathname = `${path5}/.well-known/openid-configuration`;
     locations.push(issuerUrl.toString());
   }
   return locations;
@@ -9354,8 +9361,10 @@ function parseJsonRpcPayload(parsed) {
   };
 }
 
-// packages/tiny-mcp-client/src/stdio-transport.ts
+// packages/tiny-mcp-client/src/spawn.node.ts
 import { spawn as spawn2 } from "node:child_process";
+
+// packages/tiny-mcp-client/src/stdio-transport.ts
 function defaultStdioSpawn(command, args, options) {
   return spawn2(command, args, options);
 }
@@ -9460,8 +9469,6 @@ var StdioTransport = class _StdioTransport {
 };
 
 // packages/safe-js/src/modules/mcp-transport.ts
-import { spawn as spawn3 } from "node:child_process";
-import path5 from "node:path";
 function parseMcpConfig(source, directory) {
   const parsed = JSON.parse(source);
   const options = normalizeMcpOptions(parsed, [
@@ -9472,9 +9479,9 @@ function parseMcpConfig(source, directory) {
   ]);
   for (const server of Object.values(options.servers)) {
     if ("command" in server) {
-      server.cwd = path5.resolve(directory, server.cwd ?? ".");
+      server.cwd = paths_default.resolve(directory, server.cwd ?? ".");
       if (server.command.includes("/") || server.command.includes("\\")) {
-        server.command = path5.resolve(directory, server.command);
+        server.command = paths_default.resolve(directory, server.command);
       }
     }
   }
@@ -9583,7 +9590,7 @@ function connectMcpTransport(server, options, signal) {
   const transport = "command" in server ? new StdioTransport({
     ...server,
     spawn(command, args, spawnOptions) {
-      child = options.spawn === void 0 ? spawn3(command, args, spawnOptions) : options.spawn(command, args, spawnOptions);
+      child = options.spawn === void 0 ? defaultStdioSpawn(command, args, spawnOptions) : options.spawn(command, args, spawnOptions);
       return child;
     }
   }) : new HttpTransport({

package/dist/safe-js/chunks/{chunk-VVOPJZRG.js → chunk-H25SH6HQ.js}

@@ -7,6 +7,7 @@ import { setImmediate } from "node:timers/promises";
 import { inspect } from "node:util";
 import { formatWithOptions } from "node:util";
 import { constants } from "node:fs";
+import { createNodeFileSystemAdapterRegistry } from "@poe-platform/safe-fs";
 var nativeClone = structuredClone;
 var sharedByteLength = Object.getOwnPropertyDescriptor(SharedArrayBuffer.prototype, "byteLength").get;
 var postMessage = MessagePort.prototype.postMessage;
@@ -69,5 +70,6 @@ export {
   setImmediate,
   inspect,
   formatWithOptions,
-  constants
+  constants,
+  createNodeFileSystemAdapterRegistry
 };

package/dist/safe-js/chunks/{chunk-AN6Z3R6M.js → chunk-MJH5AYEK.js}

@@ -2,7 +2,7 @@ import {
   HostCallJournal,
   decodeReplayData,
   validateSnapshotData
-} from "./chunk-JVE54EBX.js";
+} from "./chunk-ROIZEQTS.js";
 import {
   CompileScope,
   SandboxError,

package/dist/safe-js/chunks/{chunk-JQ5QJV5Q.js → chunk-P5Y4UF4L.js}

@@ -1,10 +1,10 @@
 import {
   paths_default
-} from "./chunk-KMBCLXER.js";
+} from "./chunk-2IYZK337.js";
 import {
   constants,
   hostFs
-} from "./chunk-VVOPJZRG.js";
+} from "./chunk-H25SH6HQ.js";
 
 // packages/safe-js/src/modules/source-files.ts
 import { resolvePath } from "@poe-platform/safe-fs/core";

package/dist/safe-js/chunks/{chunk-JVE54EBX.js → chunk-ROIZEQTS.js}

@@ -47,7 +47,7 @@ import {
   cloneSharedBufferWrapper,
   setImmediate,
   types
-} from "./chunk-VVOPJZRG.js";
+} from "./chunk-H25SH6HQ.js";
 
 // packages/safe-js/src/interp/native-promise-properties.ts
 var admittedSymbols = /* @__PURE__ */ new WeakMap();
@@ -23773,7 +23773,7 @@ function readHostOperationPolicy(operation) {
 }
 function wrapCallerInjectedBindings(bindings, options) {
   const operation = options.budget.acquireCompileOwner(false, options.compileOwner);
-  options = { ...options, registerCapabilities: true, compileOwner: operation.owner };
+  options = { ...options, resources: options.resources ?? runResources.getStore(), registerCapabilities: true, compileOwner: operation.owner };
   try {
     const state = { seen: /* @__PURE__ */ new WeakMap() };
     const copied = Object.fromEntries(
@@ -23924,10 +23924,12 @@ function wrapCallerInjectedFunction(name, value, options, state, validateResult)
         const captured = options.realm?.captureArguments(callable, args, copyArguments);
         const hostArgs = captured?.args ?? copyArguments(args);
         const budgetedOperation = budgetedHostOperations.get(callable);
-        const callOperation = () => {
+        const invokeOperation = () => {
           const result2 = budgetedOperation === void 0 ? Reflect.apply(callable, void 0, hostArgs) : budgetedOperation(hostArgs, options.budget);
           return validateResult === void 0 ? result2 : validateResult(result2);
         };
+        const resources = options.resources;
+        const callOperation = resources === void 0 ? invokeOperation : () => runResources.run(resources, invokeOperation);
         const hostCalls = options.hostCalls;
         const operation = options.operation ?? bindingName;
         const moduleId = options.moduleId ?? "<bindings>";
@@ -25155,7 +25157,7 @@ function createModuleEnvironment(modules, options, restored) {
     namespaces: createBindingRecord(Object.fromEntries(options.wrappedModules ?? []))
   };
   revokeImmutableEmptyModuleEnvironment(environment);
-  moduleEnvironments.set(environment, { registry, options, prepared: /* @__PURE__ */ new Set(), capabilities: /* @__PURE__ */ new Map() });
+  moduleEnvironments.set(environment, { registry, options, resources: options.resources ?? runResources.getStore(), prepared: /* @__PURE__ */ new Set(), capabilities: /* @__PURE__ */ new Map() });
   return environment;
 }
 function createImmutableEmptyModuleEnvironment(options) {
@@ -25188,6 +25190,7 @@ function resolveModuleNamespace(environment, moduleName, prepare = true) {
   if (exports === void 0) throw new Error(createUnknownModuleMessage(moduleName, [...backend.registry.keys()]));
   let namespace = createModuleNamespace(wrapCancelableBindings(
     wrapCallerInjectedBindings(Object.fromEntries(exports), {
+      resources: backend.resources,
       realm: options.realm,
       budget: options.budget,
       compileOwner: options.compileOwner,

package/dist/safe-js/chunks/{chunk-HR3HSM26.js → chunk-SAYUBVHD.js}

@@ -2,7 +2,7 @@ import {
   hashParsedAst,
   hashSource,
   validateSnapshotMigration
-} from "./chunk-AN6Z3R6M.js";
+} from "./chunk-MJH5AYEK.js";
 import {
   SnapshotValidationError,
   assertSnapshotInactive,
@@ -11,7 +11,7 @@ import {
   validateDumpEnvelope,
   validateGuestHeapSource,
   validateRuntimeSnapshotDescriptors
-} from "./chunk-JVE54EBX.js";
+} from "./chunk-ROIZEQTS.js";
 import {
   SandboxError,
   parseExecutableModule,

package/dist/safe-js/chunks/{chunk-IRCZI6HL.js → chunk-SV37HEM5.js}

@@ -10,7 +10,7 @@ import {
   validateMigrationReconciliation,
   validateMigrationSemantics,
   validateSnapshotMigration
-} from "./chunk-AN6Z3R6M.js";
+} from "./chunk-MJH5AYEK.js";
 import {
   DUMP_FORMAT_VERSION,
   EXECUTION_SEMANTICS,
@@ -20,17 +20,17 @@ import {
   serializeSafeJSSnapshot,
   validateDumpEnvelope,
   validateSnapshotData
-} from "./chunk-JVE54EBX.js";
+} from "./chunk-ROIZEQTS.js";
 import {
   parseModule
 } from "./chunk-EQUBWQJN.js";
 import {
   paths_default
-} from "./chunk-KMBCLXER.js";
+} from "./chunk-2IYZK337.js";
 import {
   hostCwd,
   hostFs
-} from "./chunk-VVOPJZRG.js";
+} from "./chunk-H25SH6HQ.js";
 
 // packages/safe-js/src/migration-file.ts
 import { createFsBridge } from "@poe-platform/safe-fs/core";

package/dist/safe-js/chunks/{chunk-RPGCF4KE.js → chunk-TG7TRXYG.js}

@@ -16,8 +16,9 @@ import {
   tokenize
 } from "./chunk-EQUBWQJN.js";
 import {
+  createNodeFileSystemAdapterRegistry,
   hostEnv
-} from "./chunk-VVOPJZRG.js";
+} from "./chunk-H25SH6HQ.js";
 
 // packages/safe-js/src/lint/rules/AS001.ts
 function AS001(source, options = {}) {
@@ -11447,6 +11448,50 @@ function toJsonValue(value, seen) {
   return String(value);
 }
 
+// packages/safe-js/src/modules/fs-config.ts
+import {
+  createFileSystem,
+  readConfigRecord,
+  validateFileSystemConfig
+} from "@poe-platform/safe-fs/core";
+function validateFsConfig(value) {
+  const config = readConfigRecord(value, "fs config", ["adapter", "root", "cwd", "readFileMaxBytes", "hostReadMemoryLimit", "maxSymlinkFollows"]);
+  const paths = {};
+  for (const key of ["root", "cwd"]) {
+    const path = config[key];
+    if (path === void 0) continue;
+    if (typeof path !== "string" || !path.startsWith("/") || path.includes("\0")) {
+      throw new TypeError(`${key} must be an absolute virtual path`);
+    }
+    paths[key] = path;
+  }
+  const limits = {};
+  for (const key of ["readFileMaxBytes", "hostReadMemoryLimit", "maxSymlinkFollows"]) {
+    const value2 = config[key];
+    if (value2 === void 0) continue;
+    if (value2 !== Infinity && (typeof value2 !== "number" || !Number.isSafeInteger(value2) || value2 < 0))
+      throw new TypeError(`${key} must be a non-negative safe integer or Infinity`);
+    Object.assign(limits, { [key]: value2 });
+  }
+  return {
+    adapter: validateFileSystemConfig(config.adapter),
+    ...paths,
+    ...limits
+  };
+}
+function parseFsConfig(json) {
+  return validateFsConfig(JSON.parse(json));
+}
+async function resolveFsConfig(config, options = {}) {
+  const { adapter: adapterConfig, ...paths } = validateFsConfig(config);
+  const resolution = readConfigRecord(options, "fs resolution option", ["registry"]);
+  const registry = createNodeFileSystemAdapterRegistry(
+    resolution.registry
+  );
+  const adapter = await createFileSystem(adapterConfig, { registry });
+  return { adapter, ...paths };
+}
+
 export {
   lint,
   EnvAccessError,
@@ -11455,5 +11500,7 @@ export {
   HarnessFailure,
   makeFailModule,
   makeMetricModule,
-  makeLogModule
+  makeLogModule,
+  parseFsConfig,
+  resolveFsConfig
 };