dorkos 0.133.0 → 0.134.0

package/dist/drizzle/meta/_journal.json

@@ -1310,6 +1310,13 @@
       "when": 1794102258314,
       "tag": "20261108014418_dor3938_cross_agent_writer",
       "breakpoints": true
+    },
+    {
+      "idx": 187,
+      "version": "6",
+      "when": 1794109827322,
+      "tag": "20261108035027_dor3547_extension_grant_subject",
+      "breakpoints": true
     }
   ]
 }

package/dist/server/extension-child.cjs

@@ -48258,7 +48258,9 @@ var import_node_fs = __toESM(require("node:fs"), 1);
 var import_node_module = require("node:module");
 var import_node_path = __toESM(require("node:path"), 1);
 var import_node_vm = __toESM(require("node:vm"), 1);
-function createInjectedRequire(provided, fromFile) {
+var ISOLATED_REFUSED_BUILTINS = /* @__PURE__ */ new Set(["node:sqlite", "sqlite"]);
+var SQLITE_REFUSAL = "Isolated extensions can't use node:sqlite. Keep data in ctx.storage or your files folder.";
+function createInjectedRequire(provided, fromFile, refused = /* @__PURE__ */ new Set()) {
   const nodeRequire = (0, import_node_module.createRequire)(fromFile);
   const cache = /* @__PURE__ */ new Map();
   return (name) => {
@@ -48268,6 +48270,9 @@ function createInjectedRequire(provided, fromFile) {
       if (!cache.has(name)) cache.set(name, provide());
       return cache.get(name);
     }
+    if (refused.has(name)) {
+      throw Object.assign(new Error(SQLITE_REFUSAL), { code: "ERR_EXTENSION_BUILTIN_REFUSED" });
+    }
     if ((0, import_node_module.isBuiltin)(name)) return nodeRequire(name);
     throw Object.assign(new Error(bundleDependencyRefusal(name)), {
       code: "ERR_EXTENSION_BUNDLE_DEPENDENCY"
@@ -49019,9 +49024,19 @@ function permissionReport() {
     child: has("child"),
     worker: has("worker"),
     addon: has("addon"),
-    wasi: has("wasi")
+    wasi: has("wasi"),
+    sqlite: sqliteLoads()
   };
 }
+function sqliteLoads() {
+  const get = process.getBuiltinModule;
+  if (typeof get !== "function") return true;
+  try {
+    return get.call(process, "node:sqlite") !== void 0;
+  } catch (err) {
+    return err.code !== "ERR_UNKNOWN_BUILTIN_MODULE";
+  }
+}
 function localAddresses() {
   try {
     return Object.values(import_node_os3.default.networkInterfaces()).flat().map((info) => info?.address).filter((address) => typeof address === "string");
@@ -49068,7 +49083,8 @@ function main() {
         child_process: () => shim.module,
         "node:child_process": () => shim.module
       },
-      __filename
+      __filename,
+      ISOLATED_REFUSED_BUILTINS
     );
     if (!init.testSeams) lockRawChannel();
     let exported;