poe-code 11.0.26 → 11.0.28

package/dist/index.js

@@ -137769,7 +137769,7 @@ var init_policy = __esm({
 // packages/safejs/src/interp/host-call.ts
 import { createHash as createHash13, randomUUID as randomUUID49 } from "node:crypto";
 function copyOutcome(outcome) {
-  return outcome.status === "fulfilled" ? { status: "fulfilled", value: deepCopyToSandbox(outcome.value) } : { status: "rejected", reason: deepCopyToSandbox(outcome.reason) };
+  return outcome.status === "fulfilled" ? { status: "fulfilled", value: cloneSandboxValue(outcome.value) } : { status: "rejected", reason: cloneSandboxValue(outcome.reason) };
 }
 function restoreReplayCalls(input, encodedOutcomes, callbackSizes, requiredHostCapabilities = /* @__PURE__ */ new Set()) {
   validateSnapshotData(input);
@@ -141499,6 +141499,7 @@ function wrapCallerInjectedFunction(name, value, options, state) {
           entries: /* @__PURE__ */ new Map(),
           hostFunctions: /* @__PURE__ */ new Map(),
           sourceFunctions: /* @__PURE__ */ new Map(),
+          proofFunctions: /* @__PURE__ */ new WeakMap(),
           active: /* @__PURE__ */ new Set(),
           seen: /* @__PURE__ */ new WeakMap(),
           restored: []
@@ -141677,6 +141678,7 @@ function executeHostCall(record2, restored, invoke2, stackFrames, options, span,
     );
   }
   if (restored && record2.policy === "read-side-effect" && record2.lifecycle !== "created") {
+    let active = true;
     const context = callbacks === void 0 ? void 0 : {
       callbacks: new Map(callbacks.hostFunctions),
       replayed: callbacks.restored.map((invocation) => ({
@@ -141685,9 +141687,23 @@ function executeHostCall(record2, restored, invoke2, stackFrames, options, span,
       })),
       async waitForCallbacks() {
         while (callbacks.active.size > 0) await Promise.allSettled([...callbacks.active]);
+      },
+      toSandboxValue(value) {
+        if (!active) throw new TypeError("Host call resume context is no longer active.");
+        if (options.signal?.aborted) throw readAbortReason2(options.signal);
+        return copyHostValueToSandbox(
+          value,
+          stackFrames,
+          { ...options, proofFunctions: callbacks.proofFunctions },
+          { seen: /* @__PURE__ */ new WeakMap() },
+          "<root>"
+        );
       }
     };
-    return createHostCallPromise(record2, hostCalls.reconcile(record2, context), hostCalls);
+    const outcome2 = hostCalls.reconcile(record2, context).finally(() => {
+      active = false;
+    });
+    return createHostCallPromise(record2, outcome2, hostCalls);
   }
   if (restored && callbacks !== void 0) callbacks.nextReissuedInvocation = 0;
   hostCalls.start(record2);
@@ -141927,6 +141943,7 @@ function wrapSandboxClosureForHost(closure, stackFrames, budget, callbacks) {
   callbacks?.entries.set(id, invoke2);
   callbacks?.hostFunctions.set(id, wrapped);
   callbacks?.sourceFunctions.set(id, closure);
+  callbacks?.proofFunctions.set(wrapped, closure);
   if (callbacks?.record !== void 0)
     callbacks.journal?.registerCallbackFunction(callbacks.record, id, closure, wrapped);
   return wrapped;
@@ -142005,9 +142022,17 @@ function copyHostValueToSandbox(value, stackFrames, options, state, path191) {
     throw new TypeError("Host error data must not contain functions or promises.");
   }
   if (isSandboxClosure(value) || isSandboxPromise(value)) {
+    if (options.proofFunctions !== void 0)
+      throw new TypeError(`Unsupported proof value at ${path191}: sandbox capability`);
     return deepCopyToSandbox(value);
   }
   if (typeof value === "function") {
+    if (options.proofFunctions !== void 0) {
+      const sourceClosure2 = options.proofFunctions.get(value);
+      if (sourceClosure2 === void 0)
+        throw new TypeError(`Unsupported proof value at ${path191}: function`);
+      return sourceClosure2;
+    }
     const sourceClosure = options.hostCalls?.nativeClosures.get(value);
     if (sourceClosure !== void 0) return sourceClosure;
     const callable = value;
@@ -142026,6 +142051,8 @@ function copyHostValueToSandbox(value, stackFrames, options, state, path191) {
     );
   }
   if (!options.errorData && isPromiseLike5(value)) {
+    if (options.proofFunctions !== void 0)
+      throw new TypeError(`Unsupported proof value at ${path191}: promise`);
     const existing = state.seen.get(value);
     if (existing !== void 0) return existing;
     const promise = wrapHostPromiseWithSignal(Promise.resolve(value), options.signal).then(
@@ -155781,7 +155808,7 @@ var init_package2 = __esm({
   "package.json"() {
     package_default2 = {
       name: "poe-code",
-      version: "11.0.26",
+      version: "11.0.28",
       description: "CLI tool to configure Poe API for developer workflows.",
       license: "MIT",
       type: "module",