@poe-platform/safe-js 0.1.805 → 0.1.807

package/dist/safe-js/modules/fs-config.d.ts

@@ -1,4 +1,4 @@
-import { type FileSystemAdapterRegistry, type FileSystemConfig } from "@poe-platform/safe-fs";
+import { type FileSystemAdapterRegistry, type FileSystemConfig } from "@poe-platform/safe-fs/core";
 import type { FsModuleOptions } from "./fs.js";
 export type FsConfig = {
     readonly adapter: FileSystemConfig;

package/dist/safe-js/modules/fs.js

@@ -1,13 +1,13 @@
 import {
   FS_OPTION_SURFACE,
   makeFsModule
-} from "../chunks/chunk-WZ27FAD3.js";
+} from "../chunks/chunk-C5NG3LHQ.js";
 import "../chunks/chunk-DIG26TEI.js";
 import "../chunks/chunk-ONWFPHUI.js";
-import "../chunks/chunk-JVE54EBX.js";
+import "../chunks/chunk-ROIZEQTS.js";
 import "../chunks/chunk-EQUBWQJN.js";
-import "../chunks/chunk-KMBCLXER.js";
-import "../chunks/chunk-VVOPJZRG.js";
+import "../chunks/chunk-2IYZK337.js";
+import "../chunks/chunk-H25SH6HQ.js";
 import "../chunks/chunk-CQ52GEHY.js";
 export {
   FS_OPTION_SURFACE,

package/dist/safe-js/modules/mcp-transport.d.ts

@@ -1,4 +1,4 @@
-import { type ChildProcessWithoutNullStreams, type SpawnOptions } from "node:child_process";
+import type { ChildProcessWithoutNullStreams, SpawnOptions } from "node:child_process";
 import type { McpConnection } from "./mcp.js";
 export type McpServerConfig = {
     command: string;

package/dist/safe-js/modules/registry.d.ts

@@ -1,3 +1,4 @@
+import { type RunResources } from "../interp/resources.js";
 import type { Budget, CompileOwner } from "../interp/budget.js";
 import type { HostCallJournal } from "../interp/host-call.js";
 import { type RealmBridge, type CallerInjectedBinding } from "../interp/host-bridge.js";
@@ -11,6 +12,7 @@ export type ModuleEnvironment = {
     namespaces: Record<string, SandboxValue>;
 };
 export type ModuleEnvironmentOptions = {
+    resources?: RunResources;
     budget: Budget;
     realm?: RealmBridge;
     wrappedModules?: Map<string, Record<string, SandboxValue>>;

package/dist/safe-js/platform/context.js

@@ -33,25 +33,36 @@ export class StackContext {
     }
     disable() { this.value = undefined; this.generation++; }
     static snapshot() {
-        const values = [];
+        const values = new Map();
         for (const reference of StackContext.stores) {
             const store = reference.deref();
             if (store === undefined)
                 StackContext.stores.delete(reference);
             else
-                values.push([store, store.value, store.generation]);
+                values.set(store, [store.value, store.generation]);
         }
         return callback => {
-            const restore = values.map(([store]) => store.value);
-            for (const [store, value, generation] of values)
-                if (store.generation === generation)
-                    store.value = value;
+            const restore = [];
+            // A later-created execution must not leak its ambient context into an
+            // earlier continuation. Save and clear every live store, not only those
+            // that existed when the continuation was captured.
+            for (const reference of StackContext.stores) {
+                const store = reference.deref();
+                if (store === undefined) {
+                    StackContext.stores.delete(reference);
+                    continue;
+                }
+                restore.push([store, store.value, store.generation]);
+                const captured = values.get(store);
+                store.value = captured?.[1] === store.generation ? captured[0] : undefined;
+            }
             try {
                 return callback();
             }
             finally {
-                values.forEach(([store, , generation], index) => { if (store.generation === generation)
-                    store.value = restore[index]; });
+                for (const [store, value, generation] of restore)
+                    if (store.generation === generation)
+                        store.value = value;
             }
         };
     }

package/dist/safe-js/platform/node.d.ts

@@ -15,3 +15,4 @@ export declare const hostFs: typeof nativeFsPromises;
 export declare const hostCwd: () => string;
 export declare const hostPlatform: NodeJS.Platform;
 export declare const hostEnv: () => Readonly<Record<string, string | undefined>>;
+export { createNodeFileSystemAdapterRegistry as createFileSystemAdapterRegistry } from "@poe-platform/safe-fs";

package/dist/safe-js/platform/node.js

@@ -63,3 +63,4 @@ export const hostFs = nativeFsPromises;
 export const hostCwd = process.cwd.bind(process);
 export const hostPlatform = process.platform;
 export const hostEnv = () => process.env;
+export { createNodeFileSystemAdapterRegistry as createFileSystemAdapterRegistry } from "@poe-platform/safe-fs";

package/dist/safe-js/platform/workerd.d.ts

@@ -20,3 +20,4 @@ export declare const hostFs: import("@poe-platform/safe-fs/core").FsBridge;
 export declare function inspect(value: unknown, _options?: {
     depth?: number;
 }): string;
+export { createPortableFileSystemAdapterRegistry as createFileSystemAdapterRegistry } from "@poe-platform/safe-fs/core";

package/dist/safe-js/platform/workerd.js

@@ -39,3 +39,4 @@ export function inspect(value, _options) {
         return Array.isArray(value) ? "[Array]" : "[Object]";
     return String(value);
 }
+export { createPortableFileSystemAdapterRegistry as createFileSystemAdapterRegistry } from "@poe-platform/safe-fs/core";

package/dist/safe-js/portable/chunks/{chunk-W6MZOTYR.js → chunk-LCUQNFD2.js}

@@ -743,21 +743,29 @@ var StackContext = class _StackContext {
     this.generation++;
   }
   static snapshot() {
-    const values = [];
+    const values = /* @__PURE__ */ new Map();
     for (const reference of _StackContext.stores) {
       const store = reference.deref();
       if (store === void 0) _StackContext.stores.delete(reference);
-      else values.push([store, store.value, store.generation]);
+      else values.set(store, [store.value, store.generation]);
     }
     return (callback) => {
-      const restore = values.map(([store]) => store.value);
-      for (const [store, value, generation] of values) if (store.generation === generation) store.value = value;
+      const restore = [];
+      for (const reference of _StackContext.stores) {
+        const store = reference.deref();
+        if (store === void 0) {
+          _StackContext.stores.delete(reference);
+          continue;
+        }
+        restore.push([store, store.value, store.generation]);
+        const captured = values.get(store);
+        store.value = captured?.[1] === store.generation ? captured[0] : void 0;
+      }
       try {
         return callback();
       } finally {
-        values.forEach(([store, , generation], index) => {
-          if (store.generation === generation) store.value = restore[index];
-        });
+        for (const [store, value, generation] of restore)
+          if (store.generation === generation) store.value = value;
       }
     };
   }
@@ -824,6 +832,7 @@ var types = {
 };
 
 // packages/safe-js/src/platform/workerd.ts
+import { createPortableFileSystemAdapterRegistry } from "@poe-platform/safe-fs/core";
 var AsyncLocalStorage = Reflect.get(globalThis, "AsyncLocalStorage") ?? StackContext;
 var cloneSharedBufferWrapper = structuredClone;
 function createHostCallbackContext() {
@@ -901,6 +910,7 @@ export {
   fsConstants,
   hostFs,
   inspect,
+  createPortableFileSystemAdapterRegistry,
   basename,
   dirname,
   isAbsolutePath,

package/dist/safe-js/portable/chunks/{chunk-NLGXLZCK.js → chunk-MKRVEJD6.js}

@@ -2,7 +2,7 @@ import {
   fsConstants,
   hostFs,
   paths_default
-} from "./chunk-W6MZOTYR.js";
+} from "./chunk-LCUQNFD2.js";
 
 // packages/safe-js/src/modules/source-files.ts
 import { resolvePath } from "@poe-platform/safe-fs/core";

package/dist/safe-js/portable/chunks/{chunk-OCBLPMJE.js → chunk-OCBYWLKS.js}

@@ -33,7 +33,7 @@ import {
   templateRealms,
   types,
   yieldToHost
-} from "./chunk-W6MZOTYR.js";
+} from "./chunk-LCUQNFD2.js";
 
 // packages/safe-js/src/modules/fs.ts
 import { createFsBridge } from "@poe-platform/safe-fs/core";
@@ -28782,7 +28782,7 @@ function createModuleEnvironment(modules, options, restored) {
     namespaces: createBindingRecord(Object.fromEntries(options.wrappedModules ?? []))
   };
   revokeImmutableEmptyModuleEnvironment(environment);
-  moduleEnvironments.set(environment, { registry, options, prepared: /* @__PURE__ */ new Set(), capabilities: /* @__PURE__ */ new Map() });
+  moduleEnvironments.set(environment, { registry, options, resources: options.resources ?? runResources.getStore(), prepared: /* @__PURE__ */ new Set(), capabilities: /* @__PURE__ */ new Map() });
   return environment;
 }
 function createImmutableEmptyModuleEnvironment(options) {
@@ -28815,6 +28815,7 @@ function resolveModuleNamespace(environment, moduleName, prepare = true) {
   if (exports === void 0) throw new Error(createUnknownModuleMessage(moduleName, [...backend.registry.keys()]));
   let namespace = createModuleNamespace(wrapCancelableBindings(
     wrapCallerInjectedBindings(Object.fromEntries(exports), {
+      resources: backend.resources,
       realm: options.realm,
       budget: options.budget,
       compileOwner: options.compileOwner,
@@ -56560,7 +56561,7 @@ function readHostOperationPolicy(operation) {
 }
 function wrapCallerInjectedBindings(bindings, options) {
   const operation = options.budget.acquireCompileOwner(false, options.compileOwner);
-  options = { ...options, registerCapabilities: true, compileOwner: operation.owner };
+  options = { ...options, resources: options.resources ?? runResources.getStore(), registerCapabilities: true, compileOwner: operation.owner };
   try {
     const state = { seen: /* @__PURE__ */ new WeakMap() };
     const copied = Object.fromEntries(
@@ -56711,10 +56712,12 @@ function wrapCallerInjectedFunction(name, value, options, state, validateResult)
         const captured = options.realm?.captureArguments(callable, args, copyArguments);
         const hostArgs = captured?.args ?? copyArguments(args);
         const budgetedOperation = budgetedHostOperations.get(callable);
-        const callOperation = () => {
+        const invokeOperation = () => {
           const result2 = budgetedOperation === void 0 ? Reflect.apply(callable, void 0, hostArgs) : budgetedOperation(hostArgs, options.budget);
           return validateResult === void 0 ? result2 : validateResult(result2);
         };
+        const resources = options.resources;
+        const callOperation = resources === void 0 ? invokeOperation : () => runResources.run(resources, invokeOperation);
         const hostCalls = options.hostCalls;
         const operation = options.operation ?? bindingName;
         const moduleId = options.moduleId ?? "<bindings>";

package/dist/safe-js/portable/chunks/{source-files-AEDWESAJ.js → source-files-HMG6KJLP.js}

@@ -1,7 +1,7 @@
 import {
   createRootedSourceResolver
-} from "./chunk-NLGXLZCK.js";
-import "./chunk-W6MZOTYR.js";
+} from "./chunk-MKRVEJD6.js";
+import "./chunk-LCUQNFD2.js";
 export {
   createRootedSourceResolver
 };

package/dist/safe-js/portable/core.js

@@ -119,16 +119,17 @@ import {
   wrapCallerInjectedBindings,
   wrapCancelableBindings,
   wrapHostConstructor
-} from "./chunks/chunk-OCBLPMJE.js";
+} from "./chunks/chunk-OCBYWLKS.js";
 import {
   createRootedSourceResolver
-} from "./chunks/chunk-NLGXLZCK.js";
+} from "./chunks/chunk-MKRVEJD6.js";
 import {
   AsyncLocalStorage,
   Budget,
   SandboxError,
   attachErrorSpan,
   createHostCallbackContext,
+  createPortableFileSystemAdapterRegistry,
   describeThrownValue,
   dirname,
   hostEnv,
@@ -137,7 +138,7 @@ import {
   materializeWrappedErrorCause,
   replaceErrorStack,
   types
-} from "./chunks/chunk-W6MZOTYR.js";
+} from "./chunks/chunk-LCUQNFD2.js";
 
 // packages/safe-js/src/parse/hash.ts
 var FNV_OFFSET_BASIS = 2166136261;
@@ -383,6 +384,9 @@ function restore(snapshot, options, owner) {
 // packages/safe-js/src/parse.ts
 var parse2 = parse;
 
+// packages/safe-js/src/host-context.ts
+var captureHostContext = AsyncLocalStorage.snapshot;
+
 // packages/safe-js/src/lint/rules/AS001.ts
 function AS001(source, options = {}) {
   return new AS001Scanner(source, options.filename ?? "<input>").scan();
@@ -12215,6 +12219,7 @@ var RealmState = class {
   nestedDepth = 0;
   failure;
   bridgeOptions = () => ({
+    resources: this.resources,
     budget: this.budget,
     compileOwner: this.lease.owner,
     signal: this.controller.signal,
@@ -13928,7 +13933,7 @@ function run(source, options = {}) {
         throw new TypeError("Source resolution requires sourceType: 'module'.");
       if (options.sourceRoot !== void 0) {
         if (options.sourceResolver !== void 0) throw new TypeError("Specify sourceRoot or sourceResolver, not both.");
-        const { createRootedSourceResolver: createRootedSourceResolver2 } = await import("./chunks/source-files-AEDWESAJ.js");
+        const { createRootedSourceResolver: createRootedSourceResolver2 } = await import("./chunks/source-files-HMG6KJLP.js");
         const { sourceRoot, ...resolved } = options;
         const sourceResolver = await createRootedSourceResolver2(sourceRoot);
         return runWithExtensions(source, { ...resolved, filename: await sourceResolver.entryId(options.filename), sourceResolver }, jobs);
@@ -14943,6 +14948,50 @@ function toJsonValue(value, seen) {
   return String(value);
 }
 
+// packages/safe-js/src/modules/fs-config.ts
+import {
+  createFileSystem,
+  readConfigRecord,
+  validateFileSystemConfig
+} from "@poe-platform/safe-fs/core";
+function validateFsConfig(value) {
+  const config = readConfigRecord(value, "fs config", ["adapter", "root", "cwd", "readFileMaxBytes", "hostReadMemoryLimit", "maxSymlinkFollows"]);
+  const paths = {};
+  for (const key of ["root", "cwd"]) {
+    const path = config[key];
+    if (path === void 0) continue;
+    if (typeof path !== "string" || !path.startsWith("/") || path.includes("\0")) {
+      throw new TypeError(`${key} must be an absolute virtual path`);
+    }
+    paths[key] = path;
+  }
+  const limits = {};
+  for (const key of ["readFileMaxBytes", "hostReadMemoryLimit", "maxSymlinkFollows"]) {
+    const value2 = config[key];
+    if (value2 === void 0) continue;
+    if (value2 !== Infinity && (typeof value2 !== "number" || !Number.isSafeInteger(value2) || value2 < 0))
+      throw new TypeError(`${key} must be a non-negative safe integer or Infinity`);
+    Object.assign(limits, { [key]: value2 });
+  }
+  return {
+    adapter: validateFileSystemConfig(config.adapter),
+    ...paths,
+    ...limits
+  };
+}
+function parseFsConfig(json) {
+  return validateFsConfig(JSON.parse(json));
+}
+async function resolveFsConfig(config, options = {}) {
+  const { adapter: adapterConfig, ...paths } = validateFsConfig(config);
+  const resolution = readConfigRecord(options, "fs resolution option", ["registry"]);
+  const registry = createPortableFileSystemAdapterRegistry(
+    resolution.registry
+  );
+  const adapter = await createFileSystem(adapterConfig, { registry });
+  return { adapter, ...paths };
+}
+
 // packages/safe-js/src/core.ts
 var parseModule2 = parseModule;
 var parseSourceModule2 = parseSourceModule;
@@ -14956,6 +15005,7 @@ export {
   SandboxError,
   SnapshotValidationError,
   admitNativePromiseProperties,
+  captureHostContext,
   createRealm,
   createReplayableRandom,
   createRootedSourceResolver,
@@ -14974,8 +15024,10 @@ export {
   makeTimeModule,
   parse2 as parse,
   parseEnvConfig,
+  parseFsConfig,
   parseModule2 as parseModule,
   parseSourceModule2 as parseSourceModule,
+  resolveFsConfig,
   restore2 as restore,
   run
 };

package/dist/safe-js/portable/modules/fs.js

@@ -1,8 +1,8 @@
 import {
   FS_OPTION_SURFACE,
   makeFsModule
-} from "../chunks/chunk-OCBLPMJE.js";
-import "../chunks/chunk-W6MZOTYR.js";
+} from "../chunks/chunk-OCBYWLKS.js";
+import "../chunks/chunk-LCUQNFD2.js";
 export {
   FS_OPTION_SURFACE,
   makeFsModule

package/dist/safe-js/workerd.d.ts

@@ -1,3 +1,2 @@
-export * from "./core.js";
+export * from "./index.js";
 export type { RunOptions, RunResult } from "./run.js";
-export { declareHostOperation } from "./interp/host-bridge.js";