poe-code 14.0.19 → 14.0.21

package/packages/safe-js/dist/cli.js

@@ -22,7 +22,7 @@ import {
   resolveFsConfig,
   splitFrontmatter,
   withBrokenPipeGuard
-} from "./chunks/chunk-W6AHPZCN.js";
+} from "./chunks/chunk-5XRQ3GNN.js";
 import {
   Budget,
   SandboxError,
@@ -34,7 +34,7 @@ import {
   replaceErrorStack,
   restore,
   run
-} from "./chunks/chunk-BW4SYRDC.js";
+} from "./chunks/chunk-CZNLD2Z3.js";
 import "./chunks/chunk-7M2SJPSZ.js";
 import "./chunks/chunk-2QRYPKQQ.js";
 import "./chunks/chunk-4YIDX44G.js";

package/packages/safe-js/dist/core.js

@@ -5,7 +5,7 @@ import {
   defineExtension,
   lint,
   run
-} from "./chunks/chunk-BW4SYRDC.js";
+} from "./chunks/chunk-CZNLD2Z3.js";
 import "./chunks/chunk-4YIDX44G.js";
 export {
   Budget,

package/packages/safe-js/dist/index.js

@@ -26,7 +26,7 @@ import {
   runWithSpawnUsageAccumulator,
   splitFrontmatter,
   supportsSpawnMode
-} from "./chunks/chunk-W6AHPZCN.js";
+} from "./chunks/chunk-5XRQ3GNN.js";
 import {
   Budget,
   FileSnapshotBackend,
@@ -50,7 +50,7 @@ import {
   registerPendingHostCallPolicy,
   restore,
   run
-} from "./chunks/chunk-BW4SYRDC.js";
+} from "./chunks/chunk-CZNLD2Z3.js";
 import "./chunks/chunk-7M2SJPSZ.js";
 import "./chunks/chunk-2QRYPKQQ.js";
 import "./chunks/chunk-4YIDX44G.js";

package/packages/safe-js/dist/realm.d.ts

@@ -18,6 +18,9 @@ export type RealmOptions = {
     bindings?: Record<string, CallerInjectedBinding>;
     modules?: ModuleRegistry;
     extensions?: readonly SafeJSExtension[];
+    builtinOverrides?: {
+        console?: string;
+    };
     grants?: readonly string[];
     budget?: Budget;
     signal?: AbortSignal;

package/packages/safe-js/dist/realm.js

@@ -32,6 +32,7 @@ class RealmState {
     bridge;
     limits;
     extensions;
+    consoleExtension;
     cleanups = [];
     callbacks = new Map();
     pendingCallbacks = new Set();
@@ -91,6 +92,14 @@ class RealmState {
         const grants = new Set(readStringList(options.grants ?? [], "Realm grants"));
         for (const extension of this.extensions)
             getExtensionSetup(extension);
+        const overrides = readDataRecord(options.builtinOverrides === undefined ? {} : options.builtinOverrides, "Builtin overrides");
+        for (const [name, extensionName] of Object.entries(overrides)) {
+            if (name !== "console" || typeof extensionName !== "string" || extensionName.length === 0 || extensionName.length > 256)
+                throw new TypeError("Builtin overrides only supports console with a nonempty extension name.");
+            if (!this.extensions.some(extension => extension.manifest.name === extensionName && extension.manifest.globals?.includes(name)))
+                throw new TypeError("Console override requires a registered extension declaring console.");
+            this.consoleExtension = extensionName;
+        }
         this.budget = options.budget ?? new Budget({ maxCallDepth: 1000 });
         this.lease = this.budget.acquireCompileOwner(true);
         this.compilation = new CompileScope(this.lease.owner);
@@ -111,7 +120,10 @@ class RealmState {
                 random: createReplayableRandom({ seed: options.randomSeed }).next
             });
             const names = new Set();
-            const globals = new Set([...Object.keys(this.builtinBindings), ...Object.keys(this.globals)]);
+            const globals = new Set([
+                ...Object.keys(this.builtinBindings).filter(name => name !== "console" || this.consoleExtension === undefined),
+                ...Object.keys(this.globals)
+            ]);
             const modules = new Map(Object.entries(this.modules).map(([name, exports]) => [name, new Set(Object.keys(exports))]));
             for (const extension of this.extensions) {
                 const manifest = extension.manifest;
@@ -123,6 +135,8 @@ class RealmState {
                         throw new TypeError(`Missing grant '${capability}' for extension '${manifest.name}'.`);
                 }
                 for (const name of manifest.globals ?? []) {
+                    if (name === "console" && this.consoleExtension !== undefined && manifest.name !== this.consoleExtension)
+                        throw new TypeError(`Conflicting global 'console': replacement is authorized only for '${this.consoleExtension}'.`);
                     if (globals.has(name))
                         throw new TypeError(`Conflicting global '${name}'.`);
                     globals.add(name);
@@ -539,6 +553,8 @@ class RealmState {
             const globals = readDataRecord(exports.globals ?? {}, "Extension globals");
             const modules = readModules(exports.modules);
             assertNames(Object.keys(globals), extension.manifest.globals ?? [], "global");
+            if (extension.manifest.name === this.consoleExtension && !this.hostObjects.has(globals.console))
+                throw new TypeError("Console replacement must be a host object created in this realm.");
             assertNames(Object.keys(modules), Object.keys(extension.manifest.modules ?? {}), "module");
             for (const [name, values] of Object.entries(modules)) {
                 assertNames(Object.keys(values), extension.manifest.modules?.[name] ?? [], "module export");
@@ -794,6 +810,7 @@ function readRealmOptions(value, oneShot = false) {
         "bindings",
         "modules",
         "extensions",
+        "builtinOverrides",
         "grants",
         "budget",
         "signal",

package/packages/safe-js/dist/run.d.ts

@@ -14,6 +14,7 @@ import type { SnapshotBackend } from "./snapshot/backend.js";
 import { type ReplayData } from "./snapshot/replay-data.js";
 export type RunOptions = {
     extensions?: RealmOptions["extensions"];
+    builtinOverrides?: RealmOptions["builtinOverrides"];
     grants?: RealmOptions["grants"];
     limits?: RealmOptions["limits"];
     bindings?: Record<string, CallerInjectedBinding>;

package/packages/safe-js/dist/run.js

@@ -39,7 +39,7 @@ export class UnhandledRejectionError extends Error {
 }
 const DEFAULT_MAX_CALL_DEPTH = 1_000;
 export function run(source, options = {}) {
-    if (options.extensions !== undefined)
+    if (options.extensions !== undefined || options.builtinOverrides !== undefined)
         return runWithExtensions(source, options);
     const lifecycle = {
         hostCallbackDepth: 0,

package/packages/safe-bash-mcp/dist/cli.d.ts

@@ -1,2 +0,0 @@
-#!/usr/bin/env node
-export {};

package/packages/safe-bash-mcp/dist/cli.js

@@ -1,23 +0,0 @@
-#!/usr/bin/env node
-import { resolve } from "node:path";
-import { pathToFileURL } from "node:url";
-import { parseArgs } from "node:util";
-import { createSafeBashMcpServer } from "./index.js";
-const { values } = parseArgs({
-    options: { config: { type: "string" } },
-    strict: true,
-    allowPositionals: false
-});
-const options = values.config === undefined
-    ? {}
-    : (await import(pathToFileURL(resolve(values.config)).href)).default;
-if (options === undefined) {
-    throw new TypeError("The config module must default-export SafeBashMcpOptions");
-}
-const server = createSafeBashMcpServer(options);
-try {
-    await server.listen();
-}
-finally {
-    await server.close();
-}

package/packages/safe-bash-mcp/dist/index.d.ts

@@ -1,21 +0,0 @@
-import { Shell, type ShellOptions } from "poe-code/safe-bash";
-import { type Server } from "../../tiny-stdio-mcp-server/dist/index.js";
-export interface SafeBashMcpOptions extends Partial<ShellOptions> {
-    readonly createShell?: (options: ShellOptions) => Shell;
-}
-export interface ShellExecuteInput {
-    readonly command: string;
-    readonly cwd?: string;
-    readonly env?: Record<string, string>;
-    readonly stdin?: string;
-}
-export interface ShellExecuteOutput {
-    readonly stdout: string;
-    readonly stderr: string;
-    readonly exitCode: number;
-}
-export type SafeBashMcpServer = Server & {
-    readonly shell: Shell;
-    close(): Promise<void>;
-};
-export declare function createSafeBashMcpServer(options?: SafeBashMcpOptions): SafeBashMcpServer;

package/packages/safe-bash-mcp/dist/index.js

@@ -1,141 +0,0 @@
-import { createMemoryFileSystem } from "poe-code/safe-fs";
-import { CommandRegistry, Shell, createStandardCommands } from "poe-code/safe-bash";
-import { createServer } from "tiny-stdio-mcp-server";
-const inputSchema = {
-    type: "object",
-    properties: {
-        command: { type: "string", minLength: 1, description: "Bash source interpreted by safe-bash, never a host shell" },
-        cwd: { type: "string", description: "Working directory in the configured virtual filesystem for this call" },
-        env: { type: "object", additionalProperties: { type: "string" }, description: "Environment overrides for this call" },
-        stdin: { type: "string", description: "Standard input for this call" }
-    },
-    required: ["command"],
-    additionalProperties: false
-};
-const outputSchema = {
-    type: "object",
-    properties: {
-        stdout: { type: "string" },
-        stderr: { type: "string" },
-        exitCode: { type: "integer" }
-    },
-    required: ["stdout", "stderr", "exitCode"],
-    additionalProperties: false
-};
-export function createSafeBashMcpServer(options = {}) {
-    if (options === null || typeof options !== "object" || Array.isArray(options)) {
-        throw new TypeError("Safe-bash MCP options must be an object");
-    }
-    const { createShell, ...shellOptions } = options;
-    const resolvedOptions = {
-        ...shellOptions,
-        fs: options.fs ?? createMemoryFileSystem(),
-        commands: options.commands ?? new CommandRegistry(createStandardCommands())
-    };
-    const shell = createShell ? createShell(resolvedOptions) : new Shell(resolvedOptions);
-    const lifetime = new AbortController();
-    let closing;
-    const close = () => {
-        if (closing === undefined) {
-            closing = shell.dispose();
-            lifetime.abort();
-        }
-        return closing;
-    };
-    let pending = Promise.resolve();
-    const server = createServer({ name: "safe-bash-mcp", version: "0.1.0" });
-    server.tool("shell_execute", "Execute Bash in a shared virtual filesystem. Calls run in order; cwd and environment changes do not persist across calls.", inputSchema, async ({ command, ...execOptions }) => {
-        const execution = pending.then(() => {
-            if (lifetime.signal.aborted)
-                throw new Error("Safe-bash MCP server is closed");
-            return shell.exec(command, execOptions);
-        });
-        pending = execution.then(() => undefined, () => undefined);
-        const { stdout, stderr, exitCode } = await execution;
-        const output = { stdout, stderr, exitCode };
-        return {
-            content: [{ type: "text", text: JSON.stringify(output) }],
-            structuredContent: output,
-            isError: exitCode !== 0
-        };
-    }, outputSchema);
-    const connect = server.connect;
-    return Object.assign(server, {
-        shell,
-        close,
-        async connect(transport) {
-            const readable = new PassThrough();
-            let stopped = false;
-            let failure;
-            const stop = () => {
-                if (stopped)
-                    return;
-                stopped = true;
-                void close().catch(() => undefined);
-                transport.readable.unpipe(readable);
-                readable.end();
-            };
-            const fail = (error) => {
-                failure ??= error;
-                stop();
-            };
-            const writable = new Writable({
-                write(chunk, encoding, callback) {
-                    if (!stopped) {
-                        try {
-                            transport.writable.write(chunk, encoding);
-                        }
-                        catch (error) {
-                            fail(error);
-                        }
-                    }
-                    callback();
-                }
-            });
-            const connection = connect({ readable, writable });
-            transport.readable.once("end", stop);
-            transport.readable.once("close", stop);
-            transport.readable.on("error", fail);
-            transport.writable.once("close", stop);
-            transport.writable.on("error", fail);
-            lifetime.signal.addEventListener("abort", stop, { once: true });
-            try {
-                if (lifetime.signal.aborted ||
-                    transport.readable.readableEnded ||
-                    transport.readable.destroyed ||
-                    transport.writable.destroyed) {
-                    stop();
-                }
-                else {
-                    transport.readable.pipe(readable);
-                }
-                await connection;
-            }
-            catch (error) {
-                failure ??= error;
-            }
-            finally {
-                stop();
-                transport.readable.removeListener("end", stop);
-                transport.readable.removeListener("close", stop);
-                transport.readable.removeListener("error", fail);
-                transport.writable.removeListener("close", stop);
-                transport.writable.removeListener("error", fail);
-                lifetime.signal.removeEventListener("abort", stop);
-                readable.destroy();
-                writable.destroy();
-            }
-            try {
-                await close();
-            }
-            catch (error) {
-                if (failure !== undefined)
-                    throw new AggregateError([failure, error], "MCP transport and shell cleanup failed");
-                throw error;
-            }
-            if (failure !== undefined)
-                throw failure;
-        }
-    });
-}
-import { PassThrough, Writable } from "node:stream";