poe-code 14.0.18 → 14.0.20

package/packages/safe-js/dist/cli.js

@@ -22,7 +22,7 @@ import {
   resolveFsConfig,
   splitFrontmatter,
   withBrokenPipeGuard
-} from "./chunks/chunk-W6AHPZCN.js";
+} from "./chunks/chunk-5XRQ3GNN.js";
 import {
   Budget,
   SandboxError,
@@ -34,7 +34,7 @@ import {
   replaceErrorStack,
   restore,
   run
-} from "./chunks/chunk-BW4SYRDC.js";
+} from "./chunks/chunk-CZNLD2Z3.js";
 import "./chunks/chunk-7M2SJPSZ.js";
 import "./chunks/chunk-2QRYPKQQ.js";
 import "./chunks/chunk-4YIDX44G.js";

package/packages/safe-js/dist/core.js

@@ -5,7 +5,7 @@ import {
   defineExtension,
   lint,
   run
-} from "./chunks/chunk-BW4SYRDC.js";
+} from "./chunks/chunk-CZNLD2Z3.js";
 import "./chunks/chunk-4YIDX44G.js";
 export {
   Budget,

package/packages/safe-js/dist/index.js

@@ -26,7 +26,7 @@ import {
   runWithSpawnUsageAccumulator,
   splitFrontmatter,
   supportsSpawnMode
-} from "./chunks/chunk-W6AHPZCN.js";
+} from "./chunks/chunk-5XRQ3GNN.js";
 import {
   Budget,
   FileSnapshotBackend,
@@ -50,7 +50,7 @@ import {
   registerPendingHostCallPolicy,
   restore,
   run
-} from "./chunks/chunk-BW4SYRDC.js";
+} from "./chunks/chunk-CZNLD2Z3.js";
 import "./chunks/chunk-7M2SJPSZ.js";
 import "./chunks/chunk-2QRYPKQQ.js";
 import "./chunks/chunk-4YIDX44G.js";

package/packages/safe-js/dist/realm.d.ts

@@ -18,6 +18,9 @@ export type RealmOptions = {
     bindings?: Record<string, CallerInjectedBinding>;
     modules?: ModuleRegistry;
     extensions?: readonly SafeJSExtension[];
+    builtinOverrides?: {
+        console?: string;
+    };
     grants?: readonly string[];
     budget?: Budget;
     signal?: AbortSignal;

package/packages/safe-js/dist/realm.js

@@ -32,6 +32,7 @@ class RealmState {
     bridge;
     limits;
     extensions;
+    consoleExtension;
     cleanups = [];
     callbacks = new Map();
     pendingCallbacks = new Set();
@@ -91,6 +92,14 @@ class RealmState {
         const grants = new Set(readStringList(options.grants ?? [], "Realm grants"));
         for (const extension of this.extensions)
             getExtensionSetup(extension);
+        const overrides = readDataRecord(options.builtinOverrides === undefined ? {} : options.builtinOverrides, "Builtin overrides");
+        for (const [name, extensionName] of Object.entries(overrides)) {
+            if (name !== "console" || typeof extensionName !== "string" || extensionName.length === 0 || extensionName.length > 256)
+                throw new TypeError("Builtin overrides only supports console with a nonempty extension name.");
+            if (!this.extensions.some(extension => extension.manifest.name === extensionName && extension.manifest.globals?.includes(name)))
+                throw new TypeError("Console override requires a registered extension declaring console.");
+            this.consoleExtension = extensionName;
+        }
         this.budget = options.budget ?? new Budget({ maxCallDepth: 1000 });
         this.lease = this.budget.acquireCompileOwner(true);
         this.compilation = new CompileScope(this.lease.owner);
@@ -111,7 +120,10 @@ class RealmState {
                 random: createReplayableRandom({ seed: options.randomSeed }).next
             });
             const names = new Set();
-            const globals = new Set([...Object.keys(this.builtinBindings), ...Object.keys(this.globals)]);
+            const globals = new Set([
+                ...Object.keys(this.builtinBindings).filter(name => name !== "console" || this.consoleExtension === undefined),
+                ...Object.keys(this.globals)
+            ]);
             const modules = new Map(Object.entries(this.modules).map(([name, exports]) => [name, new Set(Object.keys(exports))]));
             for (const extension of this.extensions) {
                 const manifest = extension.manifest;
@@ -123,6 +135,8 @@ class RealmState {
                         throw new TypeError(`Missing grant '${capability}' for extension '${manifest.name}'.`);
                 }
                 for (const name of manifest.globals ?? []) {
+                    if (name === "console" && this.consoleExtension !== undefined && manifest.name !== this.consoleExtension)
+                        throw new TypeError(`Conflicting global 'console': replacement is authorized only for '${this.consoleExtension}'.`);
                     if (globals.has(name))
                         throw new TypeError(`Conflicting global '${name}'.`);
                     globals.add(name);
@@ -539,6 +553,8 @@ class RealmState {
             const globals = readDataRecord(exports.globals ?? {}, "Extension globals");
             const modules = readModules(exports.modules);
             assertNames(Object.keys(globals), extension.manifest.globals ?? [], "global");
+            if (extension.manifest.name === this.consoleExtension && !this.hostObjects.has(globals.console))
+                throw new TypeError("Console replacement must be a host object created in this realm.");
             assertNames(Object.keys(modules), Object.keys(extension.manifest.modules ?? {}), "module");
             for (const [name, values] of Object.entries(modules)) {
                 assertNames(Object.keys(values), extension.manifest.modules?.[name] ?? [], "module export");
@@ -794,6 +810,7 @@ function readRealmOptions(value, oneShot = false) {
         "bindings",
         "modules",
         "extensions",
+        "builtinOverrides",
         "grants",
         "budget",
         "signal",

package/packages/safe-js/dist/run.d.ts

@@ -14,6 +14,7 @@ import type { SnapshotBackend } from "./snapshot/backend.js";
 import { type ReplayData } from "./snapshot/replay-data.js";
 export type RunOptions = {
     extensions?: RealmOptions["extensions"];
+    builtinOverrides?: RealmOptions["builtinOverrides"];
     grants?: RealmOptions["grants"];
     limits?: RealmOptions["limits"];
     bindings?: Record<string, CallerInjectedBinding>;

package/packages/safe-js/dist/run.js

@@ -39,7 +39,7 @@ export class UnhandledRejectionError extends Error {
 }
 const DEFAULT_MAX_CALL_DEPTH = 1_000;
 export function run(source, options = {}) {
-    if (options.extensions !== undefined)
+    if (options.extensions !== undefined || options.builtinOverrides !== undefined)
         return runWithExtensions(source, options);
     const lifecycle = {
         hostCallbackDepth: 0,