poe-code 14.0.64 → 14.0.66

package/packages/safe-js/dist/cli.js

@@ -22,7 +22,7 @@ import {
   resolveFsConfig,
   splitFrontmatter,
   withBrokenPipeGuard
-} from "./chunks/chunk-3EXDJDQM.js";
+} from "./chunks/chunk-MKTUVVEB.js";
 import {
   Budget,
   SandboxError,
@@ -34,7 +34,7 @@ import {
   replaceErrorStack,
   restore,
   run
-} from "./chunks/chunk-XO7B4P27.js";
+} from "./chunks/chunk-YKISHTWT.js";
 import "./chunks/chunk-UXMKEUH3.js";
 import "./chunks/chunk-5DYEOCT5.js";
 import "./chunks/chunk-4YIDX44G.js";

package/packages/safe-js/dist/core.js

@@ -5,7 +5,7 @@ import {
   defineExtension,
   lint,
   run
-} from "./chunks/chunk-XO7B4P27.js";
+} from "./chunks/chunk-YKISHTWT.js";
 import "./chunks/chunk-4YIDX44G.js";
 export {
   Budget,

package/packages/safe-js/dist/index.js

@@ -26,7 +26,7 @@ import {
   runWithSpawnUsageAccumulator,
   splitFrontmatter,
   supportsSpawnMode
-} from "./chunks/chunk-3EXDJDQM.js";
+} from "./chunks/chunk-MKTUVVEB.js";
 import {
   Budget,
   FileSnapshotBackend,
@@ -50,7 +50,7 @@ import {
   registerPendingHostCallPolicy,
   restore,
   run
-} from "./chunks/chunk-XO7B4P27.js";
+} from "./chunks/chunk-YKISHTWT.js";
 import "./chunks/chunk-UXMKEUH3.js";
 import "./chunks/chunk-5DYEOCT5.js";
 import "./chunks/chunk-4YIDX44G.js";

package/packages/safe-js/dist/index.js.map

@@ -1,7 +1,7 @@
 {
   "version": 3,
   "sources": ["../src/parse.ts", "../src/runner/run-harness.ts", "../src/loader/find-exported.ts", "../src/modules/time.ts", "../src/index.ts"],
-  "sourcesContent": ["import { parse as parseInternal, type ParseResult as ParsedNode } from \"./parse/parser.js\";\n\nexport { DisallowedSyntaxError } from \"./parse/parser.js\";\nexport const parse: (source: string, filename?: string) => ParsedNode = parseInternal;\nexport type {\n  ArrayPattern,\n  ArrayExpression,\n  ArrowFunctionExpression,\n  AssignmentExpression,\n  AssignmentPattern,\n  AssignmentProperty,\n  AwaitExpression,\n  BinaryExpression,\n  BlockStatement,\n  BooleanLiteral,\n  BreakStatement,\n  CallExpression,\n  CatchClause,\n  ConditionalExpression,\n  ContinueStatement,\n  DoWhileStatement,\n  EmptyStatement,\n  Expression,\n  ExpressionStatement,\n  ExportDefaultDeclaration,\n  ExportNamedDeclaration,\n  ImportDeclaration,\n  ImportDefaultSpecifier,\n  ImportNamespaceSpecifier,\n  ImportSpecifier,\n  ForInStatement,\n  ForOfStatement,\n  ForStatement,\n  FunctionDeclaration,\n  FunctionExpression,\n  Identifier,\n  IfStatement,\n  LogicalExpression,\n  MemberExpression,\n  MetaProperty,\n  NewExpression,\n  NullLiteral,\n  NumericLiteral,\n  ObjectExpression,\n  ObjectPattern,\n  ParseResult,\n  PatternTarget,\n  Property,\n  RegexLiteral,\n  RestElement,\n  ReturnStatement,\n  SequenceExpression,\n  SourceSpan,\n  SpreadElement,\n  Statement,\n  StringLiteral,\n  SwitchCase,\n  SwitchStatement,\n  TaggedTemplateExpression,\n  TemplateElement,\n  TemplateLiteral,\n  ThisExpression,\n  ThrowStatement,\n  TryStatement,\n  UnaryExpression,\n  UndefinedLiteral,\n  UpdateExpression,\n  UpdateTarget,\n  VariableDeclaration,\n  VariableDeclarationKind,\n  VariableDeclarator,\n  WhileStatement\n} from \"./parse/parser.js\";\n", "import { readFile, stat } from \"node:fs/promises\";\nimport { extname } from \"node:path\";\n\nimport { supportsSpawnMode } from \"@poe-code/agent-spawn/configs\";\nimport { SPAWN_MODES, type SpawnMode } from \"@poe-code/agent-spawn/types\";\nimport { hasOwnErrorCode } from \"../error-codes.js\";\nimport { countLineBreaks, extractBlock, maskSource } from \"../loader/extract-block.js\";\nimport { splitFrontmatter } from \"../loader/frontmatter.js\";\nimport { lint, type Diagnostic } from \"../lint.js\";\nimport { createLintModulesFromRuntimeRegistry } from \"../lint/runtime-modules.js\";\nimport type { ModuleExports, ModuleRegistry } from \"../modules/registry.js\";\nimport type { OtelSink } from \"../observability/otel.js\";\nimport { parseModule } from \"../parse/parser.js\";\nimport { run, type RunOptions, type RunResult } from \"../run.js\";\nimport type { SnapshotBackend } from \"../snapshot/backend.js\";\n\ntype HarnessMeta = {\n  filepath: string;\n  kind: unknown;\n  version: unknown;\n};\n\nexport type RunHarnessOptions = {\n  budget?: RunOptions[\"budget\"];\n  modulesFor: (frontmatter: Record<string, unknown>, meta: HarnessMeta) => ModuleRegistry;\n  otelSink?: OtelSink;\n  signal?: AbortSignal;\n  snapshotBackend?: SnapshotBackend;\n  snapshotIntervalMs?: number;\n  snapshotPath?: string;\n};\n\nexport type RunHarnessExecutionErrorResult = {\n  aborted?: true;\n  error: unknown;\n  ok: false;\n};\n\nexport type RunHarnessResult = RunResult | RunHarnessExecutionErrorResult;\n\nfunction getOwnEntry(record: Record<string, unknown>, key: string): unknown {\n  return Object.prototype.hasOwnProperty.call(record, key) ? record[key] : undefined;\n}\n\nfunction createHarnessMeta(filepath: string, frontmatter: Record<string, unknown>): HarnessMeta {\n  return {\n    filepath,\n    kind: getOwnEntry(frontmatter, \"kind\"),\n    version: getOwnEntry(frontmatter, \"version\")\n  };\n}\n\nfunction assertFrontmatterAgentModes(frontmatter: Record<string, unknown>): void {\n  const agents = getOwnEntry(frontmatter, \"agents\");\n  if (typeof agents !== \"object\" || agents === null || Array.isArray(agents)) {\n    return;\n  }\n\n  for (const [name, definition] of Object.entries(agents)) {\n    if (typeof definition !== \"object\" || definition === null || Array.isArray(definition)) {\n      continue;\n    }\n\n    const record = definition as Record<string, unknown>;\n    const agent = getOwnEntry(record, \"agent\");\n    const mode = getOwnEntry(record, \"mode\");\n    if (typeof agent !== \"string\" || typeof mode !== \"string\") {\n      continue;\n    }\n\n    // Malformed mode strings are reported by the agent module's own validation.\n    if (!SPAWN_MODES.includes(mode as SpawnMode)) {\n      continue;\n    }\n\n    if (!supportsSpawnMode(agent, mode as SpawnMode)) {\n      throw new Error(`Harness agent \"${name}\": agent \"${agent}\" does not support mode \"${mode}\".`);\n    }\n  }\n}\n\nexport class LintError extends Error {\n  readonly diagnostics: readonly Diagnostic[];\n\n  constructor(diagnostics: readonly Diagnostic[]) {\n    super(formatLintErrorMessage(diagnostics));\n    this.name = \"LintError\";\n    this.diagnostics = diagnostics;\n  }\n}\n\nexport async function runHarness(\n  filepath: string,\n  options: RunHarnessOptions\n): Promise<RunHarnessResult> {\n  const rawSource = await readHarnessFile(filepath);\n  const { executableSource, frontmatter, isRawScript } = loadExecutableSource(filepath, rawSource);\n  assertFrontmatterAgentModes(frontmatter);\n  const meta = createHarnessMeta(filepath, frontmatter);\n  const modules = excludeHarnessModule(options.modulesFor(frontmatter, meta), isRawScript);\n  const diagnostics = lint(executableSource, {\n    filename: filepath,\n    modules: createLintModulesFromRuntimeRegistry(modules)\n  });\n  const lintErrors = diagnostics.filter((diagnostic) => diagnostic.severity === \"error\");\n\n  if (lintErrors.length > 0) {\n    throw new LintError(lintErrors);\n  }\n\n  return runHarnessSource(executableSource, {\n    budget: options.budget,\n    entryPointArgs: hasDefaultExport(executableSource, filepath) ? [] : undefined,\n    filename: filepath,\n    modules,\n    otelSink: options.otelSink,\n    signal: options.signal,\n    snapshotBackend: options.snapshotBackend,\n    snapshotIntervalMs: options.snapshotIntervalMs,\n    snapshotPath: options.snapshotPath\n  });\n}\n\nexport async function runHarnessPair(\n  filepath: string,\n  options: RunHarnessOptions\n): Promise<RunHarnessResult> {\n  const pair = resolveHarnessPair(filepath);\n  const [rawMarkdown, rawScript] = await Promise.all([\n    readHarnessFile(pair.markdownPath),\n    readHarnessFile(pair.scriptPath)\n  ]);\n  const { frontmatter, body } = splitFrontmatter(stripByteOrderMark(rawMarkdown));\n  assertFrontmatterAgentModes(frontmatter);\n  const executableSource = stripByteOrderMark(rawScript);\n  const meta = createHarnessMeta(pair.markdownPath, frontmatter);\n  const modules = options.modulesFor(frontmatter, meta);\n  const diagnostics = lint(executableSource, {\n    allowedExportNames: [\"schema\"],\n    defaultExport: {\n      parameters: [\"frontmatter\"],\n      required: true\n    },\n    filename: pair.scriptPath,\n    frontmatterFields: Object.keys(frontmatter),\n    modules: createLintModulesFromRuntimeRegistry(modules)\n  });\n  const lintErrors = diagnostics.filter((diagnostic) => diagnostic.severity === \"error\");\n\n  if (lintErrors.length > 0) {\n    throw new LintError(lintErrors);\n  }\n\n  return runHarnessSource(executableSource, {\n    budget: options.budget,\n    entryPointArgs: [frontmatter],\n    filename: pair.scriptPath,\n    importMeta: {\n      body,\n      filepath: pair.markdownPath,\n      kind: meta.kind,\n      version: meta.version\n    },\n    modules,\n    otelSink: options.otelSink,\n    signal: options.signal,\n    snapshotBackend: options.snapshotBackend,\n    snapshotIntervalMs: options.snapshotIntervalMs,\n    snapshotPath: options.snapshotPath\n  });\n}\n\nasync function readHarnessFile(filepath: string): Promise<string> {\n  try {\n    const stats = await stat(filepath);\n    if (!stats.isFile()) {\n      throw new Error(`Harness path must point to a file: ${filepath}`);\n    }\n\n    return await readFile(filepath, \"utf8\");\n  } catch (error) {\n    if (hasOwnErrorCode(error, \"ENOENT\") || hasOwnErrorCode(error, \"ENOTDIR\")) {\n      throw new Error(`Harness file not found: ${filepath}`);\n    }\n\n    throw error;\n  }\n}\n\nfunction loadExecutableSource(\n  filepath: string,\n  source: string\n): {\n  executableSource: string;\n  frontmatter: Record<string, unknown>;\n  isRawScript: boolean;\n} {\n  if (isRawScriptPath(filepath)) {\n    const executableSource = stripByteOrderMark(source);\n    if (executableSource.length === 0) {\n      throw new Error(`No code block found in empty harness file: ${filepath}`);\n    }\n\n    return {\n      executableSource,\n      frontmatter: {},\n      isRawScript: true\n    };\n  }\n\n  const { frontmatter, body } = splitFrontmatter(source);\n  if (source.length === 0 || body.trim().length === 0) {\n    throw new Error(`No code block found in empty harness file: ${filepath}`);\n  }\n\n  const bodyStartOffset = source.length - body.length;\n  const { source: executableBlock, startOffset } = extractBlock(\n    body,\n    countLineBreaks(source, 0, bodyStartOffset) + 1\n  );\n  return {\n    executableSource:\n      maskSource(source.slice(0, bodyStartOffset + startOffset)) + stripHashbang(executableBlock),\n    frontmatter,\n    isRawScript: false\n  };\n}\n\nfunction resolveHarnessPair(filepath: string): { markdownPath: string; scriptPath: string } {\n  const extension = extname(filepath);\n  const basename = extension.length === 0 ? filepath : filepath.slice(0, -extension.length);\n\n  if (isRawScriptExtension(extension)) {\n    return {\n      markdownPath: `${basename}.md`,\n      scriptPath: filepath\n    };\n  }\n\n  return {\n    markdownPath: filepath,\n    scriptPath: `${basename}.ajs`\n  };\n}\n\nfunction isRawScriptPath(filepath: string): boolean {\n  return isRawScriptExtension(extname(filepath));\n}\n\nfunction isRawScriptExtension(extension: string): boolean {\n  return extension === \".safejs\" || extension === \".ajs\";\n}\n\nasync function runHarnessSource(\n  executableSource: string,\n  options: Parameters<typeof run>[1]\n): Promise<RunHarnessResult> {\n  try {\n    return await run(executableSource, options);\n  } catch (error) {\n    if (isSetupError(error)) {\n      throw error;\n    }\n\n    return {\n      ...(isAbortError(error) ? { aborted: true as const } : {}),\n      error,\n      ok: false\n    };\n  }\n}\n\nfunction isSetupError(error: unknown): boolean {\n  return error instanceof Error && error.name === \"ParseError\";\n}\n\nfunction isAbortError(error: unknown): boolean {\n  if (error instanceof Error) {\n    return error.name === \"AbortError\";\n  }\n\n  return (\n    typeof error === \"object\" &&\n    error !== null &&\n    Object.prototype.hasOwnProperty.call(error, \"name\") &&\n    (error as { name?: unknown }).name === \"AbortError\"\n  );\n}\n\nfunction hasDefaultExport(source: string, filename: string): boolean {\n  return parseModule(source, filename).body.some(\n    (statement) => statement.type === \"ExportDefaultDeclaration\"\n  );\n}\n\nfunction excludeHarnessModule(modules: ModuleRegistry, isRawScript: boolean): ModuleRegistry {\n  if (!isRawScript) {\n    return modules;\n  }\n\n  if (modules instanceof Map) {\n    const rawModules = new Map(modules);\n    rawModules.delete(\"harness\");\n    return rawModules;\n  }\n\n  const rawModules: Record<string, ModuleExports> = {};\n\n  for (const [moduleName, moduleExports] of Object.entries(modules)) {\n    if (moduleName !== \"harness\") {\n      rawModules[moduleName] = moduleExports;\n    }\n  }\n\n  return rawModules;\n}\n\nfunction stripByteOrderMark(source: string): string {\n  return source.startsWith(\"\\uFEFF\") ? source.slice(1) : source;\n}\n\nfunction stripHashbang(source: string): string {\n  if (!source.startsWith(\"#!\")) {\n    return source;\n  }\n\n  let end = 2;\n  while (end < source.length && source[end] !== \"\\n\" && source[end] !== \"\\r\") end += 1;\n  return `${\" \".repeat(end)}${source.slice(end)}`;\n}\n\nfunction formatLintErrorMessage(diagnostics: readonly Diagnostic[]): string {\n  if (diagnostics.length === 0) {\n    return \"Script lint failed.\";\n  }\n\n  return diagnostics\n    .map(\n      (diagnostic) =>\n        `${diagnostic.filename}:${diagnostic.line}:${diagnostic.column} ${diagnostic.code} ${diagnostic.message}`\n    )\n    .join(\"\\n\");\n}\n", "import type { Expression, Module } from \"../parse/parser.js\";\n\nexport function findExportedConstInitializer(module: Module, name: string): Expression | undefined {\n  for (const statement of module.body) {\n    if (statement.type === \"ExportDefaultDeclaration\") {\n      if (name === \"default\") {\n        return statement.declaration;\n      }\n\n      continue;\n    }\n\n    if (statement.type !== \"ExportNamedDeclaration\") {\n      continue;\n    }\n\n    const declaration = statement.declaration;\n    if (declaration.kind !== \"const\") {\n      throw new Error(`Exported '${name}' must be declared with const.`);\n    }\n\n    if (declaration.declarations.length !== 1) {\n      throw new Error(\"Exported const declarations must contain exactly one declarator.\");\n    }\n\n    const declarator = declaration.declarations[0]!;\n    if (declarator.id.type !== \"Identifier\") {\n      throw new Error(\"Destructured exported const bindings are not supported.\");\n    }\n\n    if (declarator.id.name !== name) {\n      continue;\n    }\n\n    if (declarator.init === undefined) {\n      throw new Error(`Exported const '${name}' must have an initializer.`);\n    }\n\n    return declarator.init;\n  }\n\n  return undefined;\n}\n", "import { webcrypto as crypto } from \"node:crypto\";\n\nimport { createSeededRandom } from \"../interp/globals/math.js\";\n\nexport type TimeModuleOptions = {\n  now?: () => number;\n  random?: () => number;\n  seed?: number;\n  signal?: AbortSignal;\n};\n\nexport function makeTimeModule(options: TimeModuleOptions = {}): {\n  random: () => number;\n  now: () => number;\n  sleep: (ms: number) => Promise<void>;\n  uuid: () => string;\n} {\n  const hasDeterministicRandom = options.random !== undefined || options.seed !== undefined;\n  const random =\n    options.random ??\n    (options.seed === undefined ? () => Math.random() : createSeededRandom(options.seed).next);\n  const now = options.now ?? (() => Date.now());\n  const signal = options.signal;\n\n  async function sleep(ms: number): Promise<void> {\n    assertSleepDelay(ms);\n\n    return await new Promise<void>((resolve, reject) => {\n      if (signal?.aborted === true) {\n        reject(createSleepAbortError());\n        return;\n      }\n\n      const start = performance.now();\n      let timeout = setTimeout(resolveSleep, ms);\n\n      function cleanup(): void {\n        clearTimeout(timeout);\n        signal?.removeEventListener(\"abort\", rejectSleep);\n      }\n\n      function resolveSleep(): void {\n        const remainingMs = ms - (performance.now() - start);\n        if (remainingMs > 0) {\n          timeout = setTimeout(resolveSleep, remainingMs);\n          return;\n        }\n\n        cleanup();\n        resolve();\n      }\n\n      function rejectSleep(): void {\n        cleanup();\n        reject(createSleepAbortError());\n      }\n\n      signal?.addEventListener(\"abort\", rejectSleep, { once: true });\n    });\n  }\n\n  return {\n    random,\n    now,\n    sleep,\n    uuid: hasDeterministicRandom ? () => createRandomUuid(random) : () => crypto.randomUUID()\n  };\n}\n\nfunction createRandomUuid(random: () => number): string {\n  const bytes = Array.from({ length: 16 }, () => Math.floor(readRandomUnit(random()) * 256));\n  bytes[6] = (bytes[6] & 0x0f) | 0x40;\n  bytes[8] = (bytes[8] & 0x3f) | 0x80;\n  const hex = bytes.map((byte) => byte.toString(16).padStart(2, \"0\")).join(\"\");\n\n  return [\n    hex.slice(0, 8),\n    hex.slice(8, 12),\n    hex.slice(12, 16),\n    hex.slice(16, 20),\n    hex.slice(20)\n  ].join(\"-\");\n}\n\nfunction readRandomUnit(value: number): number {\n  if (Number.isFinite(value) && value >= 0 && value < 1) {\n    return value;\n  }\n\n  throw new RangeError(\"time.uuid() random source must return a number in [0, 1).\");\n}\n\nfunction assertSleepDelay(ms: number): void {\n  if (Number.isFinite(ms) && ms >= 0) {\n    return;\n  }\n\n  throw new RangeError(\"time.sleep(ms) requires a non-negative finite millisecond delay.\");\n}\n\nfunction createSleepAbortError(): Error {\n  return new Error(\"time.sleep aborted.\");\n}\n", "import { parseModule as parseModuleInternal, type Module } from \"./parse/parser.js\";\nimport { restore as restoreInternal, type SafeJSSnapshot, type RestoreOptions } from \"./restore.js\";\nimport {\n  deepCopyFromSandbox as copyFromSandboxInternal,\n  type SandboxPromise,\n  type SandboxValue\n} from \"./interp/values.js\";\n\nexport { parse } from \"./parse.js\";\nexport const parseModule: (source: string, filename?: string) => Module = parseModuleInternal;\nexport const restore: <TSnapshot extends SafeJSSnapshot>(\n  snapshot: TSnapshot,\n  options: RestoreOptions\n) => TSnapshot = restoreInternal;\ntype PublicCopyOptions = Omit<\n  NonNullable<Parameters<typeof copyFromSandboxInternal>[1]>,\n  \"compilation\" | \"unwrapHostObject\"\n>;\nexport const deepCopyFromSandbox: {\n  (value: SandboxPromise, options?: PublicCopyOptions): Promise<unknown>;\n  (value: SandboxValue, options?: PublicCopyOptions): unknown;\n} = copyFromSandboxInternal;\nexport { lint, type Diagnostic, type Fix, type LintFixResult, type LintOptions } from \"./lint.js\";\nexport { run } from \"./run.js\";\nexport { createRealm, type SafeJSRealm, type RealmOptions, type RealmResult, type RealmLimits } from \"./realm.js\";\nexport { defineExtension, type SafeJSExtension, type ExtensionDefinition, type ExtensionManifest, type ExtensionContext, type ExtensionExports, type CallbackOptions, type CallbackInvocation } from \"./extensions.js\";\nexport type { HostObject, HostObjectDefinition, HostObjectIndexedDefinition, HostObjectNamedDefinition, GuestReference } from \"./interp/host-capabilities.js\";\nexport { createReplayableRandom, type ReplayableRandom } from \"./random.js\";\nexport type { RunClock, RunClockSnapshot, RunRandom } from \"./run.js\";\nexport { noopOtelSink } from \"./observability/otel.js\";\nexport type { OtelSink, OtelSpan } from \"./observability/otel.js\";\nexport { FileSnapshotBackend } from \"./snapshot/backend.js\";\nexport type { Snapshot, SnapshotBackend } from \"./snapshot/backend.js\";\nexport { declareHostOperation } from \"./interp/host-bridge.js\";\nexport { HostCallResumabilityError } from \"./interp/host-call.js\";\nexport type {\n  HostCallLifecycle,\n  HostCallOutcome,\n  HostCallRecord,\n  HostCallResumeContext,\n  HostCallResumeProof,\n  HostCallResumeProvider,\n  HostCallResumeRequest\n} from \"./interp/host-call.js\";\nexport {\n  HostOperationResumePolicyError,\n  registerPendingHostCallPolicy\n} from \"./snapshot/policy.js\";\nexport type {\n  PendingHostCallPolicyMode,\n  PendingHostCallPolicyRegistration\n} from \"./snapshot/policy.js\";\nexport { dump, type DumpOptions } from \"./dump.js\";\nexport { inspectSnapshotMigration, migrateSnapshot } from \"./migrate.js\";\nexport { migrateSnapshotFile, type SnapshotMigrationFileOptions } from \"./migration-file.js\";\nexport type {\n  SnapshotMigration,\n  SnapshotMigrationOptions,\n  SnapshotMigrationReconciliation,\n  SnapshotMigrationResolution\n} from \"./migrate.js\";\nexport { SnapshotValidationError } from \"./snapshot/validation.js\";\nexport type { SnapshotValidationCode } from \"./snapshot/validation.js\";\nexport { Budget, SandboxError } from \"./interp/budget.js\";\nexport type { BudgetName, BudgetOptions } from \"./interp/budget.js\";\nexport { formatInterpreterError, type InterpreterDiagnostic } from \"./error/format.js\";\nexport { deepCopyToSandbox } from \"./interp/values.js\";\nexport { runHarness, runHarnessPair } from \"./runner/run-harness.js\";\nexport { extractBlock } from \"./loader/extract-block.js\";\nexport { findExportedConstInitializer } from \"./loader/find-exported.js\";\nexport { splitFrontmatter } from \"./loader/frontmatter.js\";\nexport type { ExportDefaultDeclaration, ExportNamedDeclaration, MetaProperty } from \"./parse.js\";\nexport {\n  AgentSpawnError,\n  createSpawnUsageAccumulator,\n  makeAgentModule,\n  runWithSpawnUsageAccumulator\n} from \"./modules/agent.js\";\nexport type {\n  AgentModuleDefinition,\n  AgentModuleOptions,\n  AgentModuleParallelCall,\n  AgentModuleRetryOptions,\n  AgentModuleSpawnOptions,\n  AgentSpawnEvent,\n  SpawnAgent,\n  SpawnAgentInput,\n  SpawnAgentResult,\n  SpawnUsageAccumulator,\n  SpawnUsageTotal\n} from \"./modules/agent.js\";\nexport { EnvAccessError, makeEnvModule, parseEnvConfig } from \"./modules/env.js\";\nexport type { EnvModule, EnvModuleOptions } from \"./modules/env.js\";\nexport { makeFailModule } from \"./modules/fail.js\";\nexport { makeFsModule } from \"./modules/fs.js\";\nexport { parseFsConfig, resolveFsConfig } from \"./modules/fs-config.js\";\nexport type { FsConfig, ResolveFsConfigOptions } from \"./modules/fs-config.js\";\nexport type {\n  FsImplementation,\n  FsModule,\n  FsModuleOptions,\n  SandboxDirent,\n  SandboxStats\n} from \"./modules/fs.js\";\nexport { makeHarnessModule } from \"./modules/harness.js\";\nexport { makeLogModule } from \"./modules/log.js\";\nexport { makeMetricModule } from \"./modules/metric.js\";\nexport { makeMcpModule } from \"./modules/mcp.js\";\nexport { parseMcpConfig } from \"./modules/mcp-transport.js\";\nexport type { McpModuleOptions, McpServerConfig } from \"./modules/mcp-transport.js\";\nexport type { ManagedMcpClient, ManagedMcpModule, McpNamedServerHandle } from \"./modules/mcp.js\";\nexport { makeTimeModule } from \"./modules/time.js\";\n"],
+  "sourcesContent": ["import { parse as parseInternal, type ParseResult as ParsedNode } from \"./parse/parser.js\";\n\nexport { DisallowedSyntaxError } from \"./parse/parser.js\";\nexport const parse: (source: string, filename?: string) => ParsedNode = parseInternal;\nexport type {\n  ArrayPattern,\n  ArrayExpression,\n  ArrowFunctionExpression,\n  AssignmentExpression,\n  AssignmentPattern,\n  AssignmentProperty,\n  AwaitExpression,\n  BinaryExpression,\n  BlockStatement,\n  BooleanLiteral,\n  BreakStatement,\n  CallExpression,\n  CatchClause,\n  ClassBody,\n  ClassDeclaration,\n  ClassElement,\n  ClassExpression,\n  ClassNode,\n  ConditionalExpression,\n  ContinueStatement,\n  DoWhileStatement,\n  EmptyStatement,\n  Expression,\n  ExpressionStatement,\n  ExportDefaultDeclaration,\n  ExportNamedDeclaration,\n  ImportDeclaration,\n  ImportDefaultSpecifier,\n  ImportNamespaceSpecifier,\n  ImportSpecifier,\n  ForInStatement,\n  ForOfStatement,\n  ForStatement,\n  FunctionDeclaration,\n  FunctionExpression,\n  Identifier,\n  IfStatement,\n  LogicalExpression,\n  MemberExpression,\n  MetaProperty,\n  NewExpression,\n  NewTargetExpression,\n  NullLiteral,\n  NumericLiteral,\n  ObjectExpression,\n  ObjectPattern,\n  ParseResult,\n  PatternTarget,\n  Property,\n  RegexLiteral,\n  RestElement,\n  ReturnStatement,\n  SequenceExpression,\n  SourceSpan,\n  SpreadElement,\n  Statement,\n  StringLiteral,\n  SuperExpression,\n  SwitchCase,\n  SwitchStatement,\n  TaggedTemplateExpression,\n  TemplateElement,\n  TemplateLiteral,\n  ThisExpression,\n  ThrowStatement,\n  TryStatement,\n  UnaryExpression,\n  UndefinedLiteral,\n  UpdateExpression,\n  UpdateTarget,\n  VariableDeclaration,\n  VariableDeclarationKind,\n  VariableDeclarator,\n  WhileStatement\n} from \"./parse/parser.js\";\n", "import { readFile, stat } from \"node:fs/promises\";\nimport { extname } from \"node:path\";\n\nimport { supportsSpawnMode } from \"@poe-code/agent-spawn/configs\";\nimport { SPAWN_MODES, type SpawnMode } from \"@poe-code/agent-spawn/types\";\nimport { hasOwnErrorCode } from \"../error-codes.js\";\nimport { countLineBreaks, extractBlock, maskSource } from \"../loader/extract-block.js\";\nimport { splitFrontmatter } from \"../loader/frontmatter.js\";\nimport { lint, type Diagnostic } from \"../lint.js\";\nimport { createLintModulesFromRuntimeRegistry } from \"../lint/runtime-modules.js\";\nimport type { ModuleExports, ModuleRegistry } from \"../modules/registry.js\";\nimport type { OtelSink } from \"../observability/otel.js\";\nimport { parseModule } from \"../parse/parser.js\";\nimport { run, type RunOptions, type RunResult } from \"../run.js\";\nimport type { SnapshotBackend } from \"../snapshot/backend.js\";\n\ntype HarnessMeta = {\n  filepath: string;\n  kind: unknown;\n  version: unknown;\n};\n\nexport type RunHarnessOptions = {\n  budget?: RunOptions[\"budget\"];\n  modulesFor: (frontmatter: Record<string, unknown>, meta: HarnessMeta) => ModuleRegistry;\n  otelSink?: OtelSink;\n  signal?: AbortSignal;\n  snapshotBackend?: SnapshotBackend;\n  snapshotIntervalMs?: number;\n  snapshotPath?: string;\n};\n\nexport type RunHarnessExecutionErrorResult = {\n  aborted?: true;\n  error: unknown;\n  ok: false;\n};\n\nexport type RunHarnessResult = RunResult | RunHarnessExecutionErrorResult;\n\nfunction getOwnEntry(record: Record<string, unknown>, key: string): unknown {\n  return Object.prototype.hasOwnProperty.call(record, key) ? record[key] : undefined;\n}\n\nfunction createHarnessMeta(filepath: string, frontmatter: Record<string, unknown>): HarnessMeta {\n  return {\n    filepath,\n    kind: getOwnEntry(frontmatter, \"kind\"),\n    version: getOwnEntry(frontmatter, \"version\")\n  };\n}\n\nfunction assertFrontmatterAgentModes(frontmatter: Record<string, unknown>): void {\n  const agents = getOwnEntry(frontmatter, \"agents\");\n  if (typeof agents !== \"object\" || agents === null || Array.isArray(agents)) {\n    return;\n  }\n\n  for (const [name, definition] of Object.entries(agents)) {\n    if (typeof definition !== \"object\" || definition === null || Array.isArray(definition)) {\n      continue;\n    }\n\n    const record = definition as Record<string, unknown>;\n    const agent = getOwnEntry(record, \"agent\");\n    const mode = getOwnEntry(record, \"mode\");\n    if (typeof agent !== \"string\" || typeof mode !== \"string\") {\n      continue;\n    }\n\n    // Malformed mode strings are reported by the agent module's own validation.\n    if (!SPAWN_MODES.includes(mode as SpawnMode)) {\n      continue;\n    }\n\n    if (!supportsSpawnMode(agent, mode as SpawnMode)) {\n      throw new Error(`Harness agent \"${name}\": agent \"${agent}\" does not support mode \"${mode}\".`);\n    }\n  }\n}\n\nexport class LintError extends Error {\n  readonly diagnostics: readonly Diagnostic[];\n\n  constructor(diagnostics: readonly Diagnostic[]) {\n    super(formatLintErrorMessage(diagnostics));\n    this.name = \"LintError\";\n    this.diagnostics = diagnostics;\n  }\n}\n\nexport async function runHarness(\n  filepath: string,\n  options: RunHarnessOptions\n): Promise<RunHarnessResult> {\n  const rawSource = await readHarnessFile(filepath);\n  const { executableSource, frontmatter, isRawScript } = loadExecutableSource(filepath, rawSource);\n  assertFrontmatterAgentModes(frontmatter);\n  const meta = createHarnessMeta(filepath, frontmatter);\n  const modules = excludeHarnessModule(options.modulesFor(frontmatter, meta), isRawScript);\n  const diagnostics = lint(executableSource, {\n    filename: filepath,\n    modules: createLintModulesFromRuntimeRegistry(modules)\n  });\n  const lintErrors = diagnostics.filter((diagnostic) => diagnostic.severity === \"error\");\n\n  if (lintErrors.length > 0) {\n    throw new LintError(lintErrors);\n  }\n\n  return runHarnessSource(executableSource, {\n    budget: options.budget,\n    entryPointArgs: hasDefaultExport(executableSource, filepath) ? [] : undefined,\n    filename: filepath,\n    modules,\n    otelSink: options.otelSink,\n    signal: options.signal,\n    snapshotBackend: options.snapshotBackend,\n    snapshotIntervalMs: options.snapshotIntervalMs,\n    snapshotPath: options.snapshotPath\n  });\n}\n\nexport async function runHarnessPair(\n  filepath: string,\n  options: RunHarnessOptions\n): Promise<RunHarnessResult> {\n  const pair = resolveHarnessPair(filepath);\n  const [rawMarkdown, rawScript] = await Promise.all([\n    readHarnessFile(pair.markdownPath),\n    readHarnessFile(pair.scriptPath)\n  ]);\n  const { frontmatter, body } = splitFrontmatter(stripByteOrderMark(rawMarkdown));\n  assertFrontmatterAgentModes(frontmatter);\n  const executableSource = stripByteOrderMark(rawScript);\n  const meta = createHarnessMeta(pair.markdownPath, frontmatter);\n  const modules = options.modulesFor(frontmatter, meta);\n  const diagnostics = lint(executableSource, {\n    allowedExportNames: [\"schema\"],\n    defaultExport: {\n      parameters: [\"frontmatter\"],\n      required: true\n    },\n    filename: pair.scriptPath,\n    frontmatterFields: Object.keys(frontmatter),\n    modules: createLintModulesFromRuntimeRegistry(modules)\n  });\n  const lintErrors = diagnostics.filter((diagnostic) => diagnostic.severity === \"error\");\n\n  if (lintErrors.length > 0) {\n    throw new LintError(lintErrors);\n  }\n\n  return runHarnessSource(executableSource, {\n    budget: options.budget,\n    entryPointArgs: [frontmatter],\n    filename: pair.scriptPath,\n    importMeta: {\n      body,\n      filepath: pair.markdownPath,\n      kind: meta.kind,\n      version: meta.version\n    },\n    modules,\n    otelSink: options.otelSink,\n    signal: options.signal,\n    snapshotBackend: options.snapshotBackend,\n    snapshotIntervalMs: options.snapshotIntervalMs,\n    snapshotPath: options.snapshotPath\n  });\n}\n\nasync function readHarnessFile(filepath: string): Promise<string> {\n  try {\n    const stats = await stat(filepath);\n    if (!stats.isFile()) {\n      throw new Error(`Harness path must point to a file: ${filepath}`);\n    }\n\n    return await readFile(filepath, \"utf8\");\n  } catch (error) {\n    if (hasOwnErrorCode(error, \"ENOENT\") || hasOwnErrorCode(error, \"ENOTDIR\")) {\n      throw new Error(`Harness file not found: ${filepath}`);\n    }\n\n    throw error;\n  }\n}\n\nfunction loadExecutableSource(\n  filepath: string,\n  source: string\n): {\n  executableSource: string;\n  frontmatter: Record<string, unknown>;\n  isRawScript: boolean;\n} {\n  if (isRawScriptPath(filepath)) {\n    const executableSource = stripByteOrderMark(source);\n    if (executableSource.length === 0) {\n      throw new Error(`No code block found in empty harness file: ${filepath}`);\n    }\n\n    return {\n      executableSource,\n      frontmatter: {},\n      isRawScript: true\n    };\n  }\n\n  const { frontmatter, body } = splitFrontmatter(source);\n  if (source.length === 0 || body.trim().length === 0) {\n    throw new Error(`No code block found in empty harness file: ${filepath}`);\n  }\n\n  const bodyStartOffset = source.length - body.length;\n  const { source: executableBlock, startOffset } = extractBlock(\n    body,\n    countLineBreaks(source, 0, bodyStartOffset) + 1\n  );\n  return {\n    executableSource:\n      maskSource(source.slice(0, bodyStartOffset + startOffset)) + stripHashbang(executableBlock),\n    frontmatter,\n    isRawScript: false\n  };\n}\n\nfunction resolveHarnessPair(filepath: string): { markdownPath: string; scriptPath: string } {\n  const extension = extname(filepath);\n  const basename = extension.length === 0 ? filepath : filepath.slice(0, -extension.length);\n\n  if (isRawScriptExtension(extension)) {\n    return {\n      markdownPath: `${basename}.md`,\n      scriptPath: filepath\n    };\n  }\n\n  return {\n    markdownPath: filepath,\n    scriptPath: `${basename}.ajs`\n  };\n}\n\nfunction isRawScriptPath(filepath: string): boolean {\n  return isRawScriptExtension(extname(filepath));\n}\n\nfunction isRawScriptExtension(extension: string): boolean {\n  return extension === \".safejs\" || extension === \".ajs\";\n}\n\nasync function runHarnessSource(\n  executableSource: string,\n  options: Parameters<typeof run>[1]\n): Promise<RunHarnessResult> {\n  try {\n    return await run(executableSource, options);\n  } catch (error) {\n    if (isSetupError(error)) {\n      throw error;\n    }\n\n    return {\n      ...(isAbortError(error) ? { aborted: true as const } : {}),\n      error,\n      ok: false\n    };\n  }\n}\n\nfunction isSetupError(error: unknown): boolean {\n  return error instanceof Error && error.name === \"ParseError\";\n}\n\nfunction isAbortError(error: unknown): boolean {\n  if (error instanceof Error) {\n    return error.name === \"AbortError\";\n  }\n\n  return (\n    typeof error === \"object\" &&\n    error !== null &&\n    Object.prototype.hasOwnProperty.call(error, \"name\") &&\n    (error as { name?: unknown }).name === \"AbortError\"\n  );\n}\n\nfunction hasDefaultExport(source: string, filename: string): boolean {\n  return parseModule(source, filename).body.some(\n    (statement) => statement.type === \"ExportDefaultDeclaration\"\n  );\n}\n\nfunction excludeHarnessModule(modules: ModuleRegistry, isRawScript: boolean): ModuleRegistry {\n  if (!isRawScript) {\n    return modules;\n  }\n\n  if (modules instanceof Map) {\n    const rawModules = new Map(modules);\n    rawModules.delete(\"harness\");\n    return rawModules;\n  }\n\n  const rawModules: Record<string, ModuleExports> = {};\n\n  for (const [moduleName, moduleExports] of Object.entries(modules)) {\n    if (moduleName !== \"harness\") {\n      rawModules[moduleName] = moduleExports;\n    }\n  }\n\n  return rawModules;\n}\n\nfunction stripByteOrderMark(source: string): string {\n  return source.startsWith(\"\\uFEFF\") ? source.slice(1) : source;\n}\n\nfunction stripHashbang(source: string): string {\n  if (!source.startsWith(\"#!\")) {\n    return source;\n  }\n\n  let end = 2;\n  while (end < source.length && source[end] !== \"\\n\" && source[end] !== \"\\r\") end += 1;\n  return `${\" \".repeat(end)}${source.slice(end)}`;\n}\n\nfunction formatLintErrorMessage(diagnostics: readonly Diagnostic[]): string {\n  if (diagnostics.length === 0) {\n    return \"Script lint failed.\";\n  }\n\n  return diagnostics\n    .map(\n      (diagnostic) =>\n        `${diagnostic.filename}:${diagnostic.line}:${diagnostic.column} ${diagnostic.code} ${diagnostic.message}`\n    )\n    .join(\"\\n\");\n}\n", "import type { Expression, Module } from \"../parse/parser.js\";\n\nexport function findExportedConstInitializer(module: Module, name: string): Expression | undefined {\n  for (const statement of module.body) {\n    if (statement.type === \"ExportDefaultDeclaration\") {\n      if (name === \"default\") {\n        return statement.declaration;\n      }\n\n      continue;\n    }\n\n    if (statement.type !== \"ExportNamedDeclaration\") {\n      continue;\n    }\n\n    const declaration = statement.declaration;\n    if (declaration.kind !== \"const\") {\n      throw new Error(`Exported '${name}' must be declared with const.`);\n    }\n\n    if (declaration.declarations.length !== 1) {\n      throw new Error(\"Exported const declarations must contain exactly one declarator.\");\n    }\n\n    const declarator = declaration.declarations[0]!;\n    if (declarator.id.type !== \"Identifier\") {\n      throw new Error(\"Destructured exported const bindings are not supported.\");\n    }\n\n    if (declarator.id.name !== name) {\n      continue;\n    }\n\n    if (declarator.init === undefined) {\n      throw new Error(`Exported const '${name}' must have an initializer.`);\n    }\n\n    return declarator.init;\n  }\n\n  return undefined;\n}\n", "import { webcrypto as crypto } from \"node:crypto\";\n\nimport { createSeededRandom } from \"../interp/globals/math.js\";\n\nexport type TimeModuleOptions = {\n  now?: () => number;\n  random?: () => number;\n  seed?: number;\n  signal?: AbortSignal;\n};\n\nexport function makeTimeModule(options: TimeModuleOptions = {}): {\n  random: () => number;\n  now: () => number;\n  sleep: (ms: number) => Promise<void>;\n  uuid: () => string;\n} {\n  const hasDeterministicRandom = options.random !== undefined || options.seed !== undefined;\n  const random =\n    options.random ??\n    (options.seed === undefined ? () => Math.random() : createSeededRandom(options.seed).next);\n  const now = options.now ?? (() => Date.now());\n  const signal = options.signal;\n\n  async function sleep(ms: number): Promise<void> {\n    assertSleepDelay(ms);\n\n    return await new Promise<void>((resolve, reject) => {\n      if (signal?.aborted === true) {\n        reject(createSleepAbortError());\n        return;\n      }\n\n      const start = performance.now();\n      let timeout = setTimeout(resolveSleep, ms);\n\n      function cleanup(): void {\n        clearTimeout(timeout);\n        signal?.removeEventListener(\"abort\", rejectSleep);\n      }\n\n      function resolveSleep(): void {\n        const remainingMs = ms - (performance.now() - start);\n        if (remainingMs > 0) {\n          timeout = setTimeout(resolveSleep, remainingMs);\n          return;\n        }\n\n        cleanup();\n        resolve();\n      }\n\n      function rejectSleep(): void {\n        cleanup();\n        reject(createSleepAbortError());\n      }\n\n      signal?.addEventListener(\"abort\", rejectSleep, { once: true });\n    });\n  }\n\n  return {\n    random,\n    now,\n    sleep,\n    uuid: hasDeterministicRandom ? () => createRandomUuid(random) : () => crypto.randomUUID()\n  };\n}\n\nfunction createRandomUuid(random: () => number): string {\n  const bytes = Array.from({ length: 16 }, () => Math.floor(readRandomUnit(random()) * 256));\n  bytes[6] = (bytes[6] & 0x0f) | 0x40;\n  bytes[8] = (bytes[8] & 0x3f) | 0x80;\n  const hex = bytes.map((byte) => byte.toString(16).padStart(2, \"0\")).join(\"\");\n\n  return [\n    hex.slice(0, 8),\n    hex.slice(8, 12),\n    hex.slice(12, 16),\n    hex.slice(16, 20),\n    hex.slice(20)\n  ].join(\"-\");\n}\n\nfunction readRandomUnit(value: number): number {\n  if (Number.isFinite(value) && value >= 0 && value < 1) {\n    return value;\n  }\n\n  throw new RangeError(\"time.uuid() random source must return a number in [0, 1).\");\n}\n\nfunction assertSleepDelay(ms: number): void {\n  if (Number.isFinite(ms) && ms >= 0) {\n    return;\n  }\n\n  throw new RangeError(\"time.sleep(ms) requires a non-negative finite millisecond delay.\");\n}\n\nfunction createSleepAbortError(): Error {\n  return new Error(\"time.sleep aborted.\");\n}\n", "import { parseModule as parseModuleInternal, type Module } from \"./parse/parser.js\";\nimport { restore as restoreInternal, type SafeJSSnapshot, type RestoreOptions } from \"./restore.js\";\nimport {\n  deepCopyFromSandbox as copyFromSandboxInternal,\n  type SandboxPromise,\n  type SandboxValue\n} from \"./interp/values.js\";\n\nexport { parse } from \"./parse.js\";\nexport const parseModule: (source: string, filename?: string) => Module = parseModuleInternal;\nexport const restore: <TSnapshot extends SafeJSSnapshot>(\n  snapshot: TSnapshot,\n  options: RestoreOptions\n) => TSnapshot = restoreInternal;\ntype PublicCopyOptions = Omit<\n  NonNullable<Parameters<typeof copyFromSandboxInternal>[1]>,\n  \"compilation\" | \"unwrapHostObject\"\n>;\nexport const deepCopyFromSandbox: {\n  (value: SandboxPromise, options?: PublicCopyOptions): Promise<unknown>;\n  (value: SandboxValue, options?: PublicCopyOptions): unknown;\n} = copyFromSandboxInternal;\nexport { lint, type Diagnostic, type Fix, type LintFixResult, type LintOptions } from \"./lint.js\";\nexport { run } from \"./run.js\";\nexport { createRealm, type SafeJSRealm, type RealmOptions, type RealmResult, type RealmLimits } from \"./realm.js\";\nexport { defineExtension, type SafeJSExtension, type ExtensionDefinition, type ExtensionManifest, type ExtensionContext, type ExtensionExports, type CallbackOptions, type CallbackInvocation } from \"./extensions.js\";\nexport type { HostObject, HostObjectDefinition, HostObjectIndexedDefinition, HostObjectNamedDefinition, GuestReference } from \"./interp/host-capabilities.js\";\nexport { createReplayableRandom, type ReplayableRandom } from \"./random.js\";\nexport type { RunClock, RunClockSnapshot, RunRandom } from \"./run.js\";\nexport { noopOtelSink } from \"./observability/otel.js\";\nexport type { OtelSink, OtelSpan } from \"./observability/otel.js\";\nexport { FileSnapshotBackend } from \"./snapshot/backend.js\";\nexport type { Snapshot, SnapshotBackend } from \"./snapshot/backend.js\";\nexport { declareHostOperation } from \"./interp/host-bridge.js\";\nexport { HostCallResumabilityError } from \"./interp/host-call.js\";\nexport type {\n  HostCallLifecycle,\n  HostCallOutcome,\n  HostCallRecord,\n  HostCallResumeContext,\n  HostCallResumeProof,\n  HostCallResumeProvider,\n  HostCallResumeRequest\n} from \"./interp/host-call.js\";\nexport {\n  HostOperationResumePolicyError,\n  registerPendingHostCallPolicy\n} from \"./snapshot/policy.js\";\nexport type {\n  PendingHostCallPolicyMode,\n  PendingHostCallPolicyRegistration\n} from \"./snapshot/policy.js\";\nexport { dump, type DumpOptions } from \"./dump.js\";\nexport { inspectSnapshotMigration, migrateSnapshot } from \"./migrate.js\";\nexport { migrateSnapshotFile, type SnapshotMigrationFileOptions } from \"./migration-file.js\";\nexport type {\n  SnapshotMigration,\n  SnapshotMigrationOptions,\n  SnapshotMigrationReconciliation,\n  SnapshotMigrationResolution\n} from \"./migrate.js\";\nexport { SnapshotValidationError } from \"./snapshot/validation.js\";\nexport type { SnapshotValidationCode } from \"./snapshot/validation.js\";\nexport { Budget, SandboxError } from \"./interp/budget.js\";\nexport type { BudgetName, BudgetOptions } from \"./interp/budget.js\";\nexport { formatInterpreterError, type InterpreterDiagnostic } from \"./error/format.js\";\nexport { deepCopyToSandbox } from \"./interp/values.js\";\nexport { runHarness, runHarnessPair } from \"./runner/run-harness.js\";\nexport { extractBlock } from \"./loader/extract-block.js\";\nexport { findExportedConstInitializer } from \"./loader/find-exported.js\";\nexport { splitFrontmatter } from \"./loader/frontmatter.js\";\nexport type { ExportDefaultDeclaration, ExportNamedDeclaration, MetaProperty } from \"./parse.js\";\nexport {\n  AgentSpawnError,\n  createSpawnUsageAccumulator,\n  makeAgentModule,\n  runWithSpawnUsageAccumulator\n} from \"./modules/agent.js\";\nexport type {\n  AgentModuleDefinition,\n  AgentModuleOptions,\n  AgentModuleParallelCall,\n  AgentModuleRetryOptions,\n  AgentModuleSpawnOptions,\n  AgentSpawnEvent,\n  SpawnAgent,\n  SpawnAgentInput,\n  SpawnAgentResult,\n  SpawnUsageAccumulator,\n  SpawnUsageTotal\n} from \"./modules/agent.js\";\nexport { EnvAccessError, makeEnvModule, parseEnvConfig } from \"./modules/env.js\";\nexport type { EnvModule, EnvModuleOptions } from \"./modules/env.js\";\nexport { makeFailModule } from \"./modules/fail.js\";\nexport { makeFsModule } from \"./modules/fs.js\";\nexport { parseFsConfig, resolveFsConfig } from \"./modules/fs-config.js\";\nexport type { FsConfig, ResolveFsConfigOptions } from \"./modules/fs-config.js\";\nexport type {\n  FsImplementation,\n  FsModule,\n  FsModuleOptions,\n  SandboxDirent,\n  SandboxStats\n} from \"./modules/fs.js\";\nexport { makeHarnessModule } from \"./modules/harness.js\";\nexport { makeLogModule } from \"./modules/log.js\";\nexport { makeMetricModule } from \"./modules/metric.js\";\nexport { makeMcpModule } from \"./modules/mcp.js\";\nexport { parseMcpConfig } from \"./modules/mcp-transport.js\";\nexport type { McpModuleOptions, McpServerConfig } from \"./modules/mcp-transport.js\";\nexport type { ManagedMcpClient, ManagedMcpModule, McpNamedServerHandle } from \"./modules/mcp.js\";\nexport { makeTimeModule } from \"./modules/time.js\";\n"],
   "mappings": ";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAGO,IAAMA,SAA2D;;;ACHxE,SAAS,UAAU,YAAY;AAC/B,SAAS,eAAe;AAuCxB,SAAS,YAAY,QAAiC,KAAsB;AAC1E,SAAO,OAAO,UAAU,eAAe,KAAK,QAAQ,GAAG,IAAI,OAAO,GAAG,IAAI;AAC3E;AAEA,SAAS,kBAAkB,UAAkB,aAAmD;AAC9F,SAAO;AAAA,IACL;AAAA,IACA,MAAM,YAAY,aAAa,MAAM;AAAA,IACrC,SAAS,YAAY,aAAa,SAAS;AAAA,EAC7C;AACF;AAEA,SAAS,4BAA4B,aAA4C;AAC/E,QAAM,SAAS,YAAY,aAAa,QAAQ;AAChD,MAAI,OAAO,WAAW,YAAY,WAAW,QAAQ,MAAM,QAAQ,MAAM,GAAG;AAC1E;AAAA,EACF;AAEA,aAAW,CAAC,MAAM,UAAU,KAAK,OAAO,QAAQ,MAAM,GAAG;AACvD,QAAI,OAAO,eAAe,YAAY,eAAe,QAAQ,MAAM,QAAQ,UAAU,GAAG;AACtF;AAAA,IACF;AAEA,UAAM,SAAS;AACf,UAAM,QAAQ,YAAY,QAAQ,OAAO;AACzC,UAAM,OAAO,YAAY,QAAQ,MAAM;AACvC,QAAI,OAAO,UAAU,YAAY,OAAO,SAAS,UAAU;AACzD;AAAA,IACF;AAGA,QAAI,CAAC,YAAY,SAAS,IAAiB,GAAG;AAC5C;AAAA,IACF;AAEA,QAAI,CAAC,kBAAkB,OAAO,IAAiB,GAAG;AAChD,YAAM,IAAI,MAAM,kBAAkB,IAAI,aAAa,KAAK,4BAA4B,IAAI,IAAI;AAAA,IAC9F;AAAA,EACF;AACF;AAEO,IAAM,YAAN,cAAwB,MAAM;AAAA,EAC1B;AAAA,EAET,YAAY,aAAoC;AAC9C,UAAM,uBAAuB,WAAW,CAAC;AACzC,SAAK,OAAO;AACZ,SAAK,cAAc;AAAA,EACrB;AACF;AAEA,eAAsB,WACpB,UACA,SAC2B;AAC3B,QAAM,YAAY,MAAM,gBAAgB,QAAQ;AAChD,QAAM,EAAE,kBAAkB,aAAa,YAAY,IAAI,qBAAqB,UAAU,SAAS;AAC/F,8BAA4B,WAAW;AACvC,QAAM,OAAO,kBAAkB,UAAU,WAAW;AACpD,QAAM,UAAU,qBAAqB,QAAQ,WAAW,aAAa,IAAI,GAAG,WAAW;AACvF,QAAM,cAAc,KAAK,kBAAkB;AAAA,IACzC,UAAU;AAAA,IACV,SAAS,qCAAqC,OAAO;AAAA,EACvD,CAAC;AACD,QAAM,aAAa,YAAY,OAAO,CAAC,eAAe,WAAW,aAAa,OAAO;AAErF,MAAI,WAAW,SAAS,GAAG;AACzB,UAAM,IAAI,UAAU,UAAU;AAAA,EAChC;AAEA,SAAO,iBAAiB,kBAAkB;AAAA,IACxC,QAAQ,QAAQ;AAAA,IAChB,gBAAgB,iBAAiB,kBAAkB,QAAQ,IAAI,CAAC,IAAI;AAAA,IACpE,UAAU;AAAA,IACV;AAAA,IACA,UAAU,QAAQ;AAAA,IAClB,QAAQ,QAAQ;AAAA,IAChB,iBAAiB,QAAQ;AAAA,IACzB,oBAAoB,QAAQ;AAAA,IAC5B,cAAc,QAAQ;AAAA,EACxB,CAAC;AACH;AAEA,eAAsB,eACpB,UACA,SAC2B;AAC3B,QAAM,OAAO,mBAAmB,QAAQ;AACxC,QAAM,CAAC,aAAa,SAAS,IAAI,MAAM,QAAQ,IAAI;AAAA,IACjD,gBAAgB,KAAK,YAAY;AAAA,IACjC,gBAAgB,KAAK,UAAU;AAAA,EACjC,CAAC;AACD,QAAM,EAAE,aAAa,KAAK,IAAI,iBAAiB,mBAAmB,WAAW,CAAC;AAC9E,8BAA4B,WAAW;AACvC,QAAM,mBAAmB,mBAAmB,SAAS;AACrD,QAAM,OAAO,kBAAkB,KAAK,cAAc,WAAW;AAC7D,QAAM,UAAU,QAAQ,WAAW,aAAa,IAAI;AACpD,QAAM,cAAc,KAAK,kBAAkB;AAAA,IACzC,oBAAoB,CAAC,QAAQ;AAAA,IAC7B,eAAe;AAAA,MACb,YAAY,CAAC,aAAa;AAAA,MAC1B,UAAU;AAAA,IACZ;AAAA,IACA,UAAU,KAAK;AAAA,IACf,mBAAmB,OAAO,KAAK,WAAW;AAAA,IAC1C,SAAS,qCAAqC,OAAO;AAAA,EACvD,CAAC;AACD,QAAM,aAAa,YAAY,OAAO,CAAC,eAAe,WAAW,aAAa,OAAO;AAErF,MAAI,WAAW,SAAS,GAAG;AACzB,UAAM,IAAI,UAAU,UAAU;AAAA,EAChC;AAEA,SAAO,iBAAiB,kBAAkB;AAAA,IACxC,QAAQ,QAAQ;AAAA,IAChB,gBAAgB,CAAC,WAAW;AAAA,IAC5B,UAAU,KAAK;AAAA,IACf,YAAY;AAAA,MACV;AAAA,MACA,UAAU,KAAK;AAAA,MACf,MAAM,KAAK;AAAA,MACX,SAAS,KAAK;AAAA,IAChB;AAAA,IACA;AAAA,IACA,UAAU,QAAQ;AAAA,IAClB,QAAQ,QAAQ;AAAA,IAChB,iBAAiB,QAAQ;AAAA,IACzB,oBAAoB,QAAQ;AAAA,IAC5B,cAAc,QAAQ;AAAA,EACxB,CAAC;AACH;AAEA,eAAe,gBAAgB,UAAmC;AAChE,MAAI;AACF,UAAM,QAAQ,MAAM,KAAK,QAAQ;AACjC,QAAI,CAAC,MAAM,OAAO,GAAG;AACnB,YAAM,IAAI,MAAM,sCAAsC,QAAQ,EAAE;AAAA,IAClE;AAEA,WAAO,MAAM,SAAS,UAAU,MAAM;AAAA,EACxC,SAAS,OAAO;AACd,QAAI,gBAAgB,OAAO,QAAQ,KAAK,gBAAgB,OAAO,SAAS,GAAG;AACzE,YAAM,IAAI,MAAM,2BAA2B,QAAQ,EAAE;AAAA,IACvD;AAEA,UAAM;AAAA,EACR;AACF;AAEA,SAAS,qBACP,UACA,QAKA;AACA,MAAI,gBAAgB,QAAQ,GAAG;AAC7B,UAAM,mBAAmB,mBAAmB,MAAM;AAClD,QAAI,iBAAiB,WAAW,GAAG;AACjC,YAAM,IAAI,MAAM,8CAA8C,QAAQ,EAAE;AAAA,IAC1E;AAEA,WAAO;AAAA,MACL;AAAA,MACA,aAAa,CAAC;AAAA,MACd,aAAa;AAAA,IACf;AAAA,EACF;AAEA,QAAM,EAAE,aAAa,KAAK,IAAI,iBAAiB,MAAM;AACrD,MAAI,OAAO,WAAW,KAAK,KAAK,KAAK,EAAE,WAAW,GAAG;AACnD,UAAM,IAAI,MAAM,8CAA8C,QAAQ,EAAE;AAAA,EAC1E;AAEA,QAAM,kBAAkB,OAAO,SAAS,KAAK;AAC7C,QAAM,EAAE,QAAQ,iBAAiB,YAAY,IAAI;AAAA,IAC/C;AAAA,IACA,gBAAgB,QAAQ,GAAG,eAAe,IAAI;AAAA,EAChD;AACA,SAAO;AAAA,IACL,kBACE,WAAW,OAAO,MAAM,GAAG,kBAAkB,WAAW,CAAC,IAAI,cAAc,eAAe;AAAA,IAC5F;AAAA,IACA,aAAa;AAAA,EACf;AACF;AAEA,SAAS,mBAAmB,UAAgE;AAC1F,QAAM,YAAY,QAAQ,QAAQ;AAClC,QAAM,WAAW,UAAU,WAAW,IAAI,WAAW,SAAS,MAAM,GAAG,CAAC,UAAU,MAAM;AAExF,MAAI,qBAAqB,SAAS,GAAG;AACnC,WAAO;AAAA,MACL,cAAc,GAAG,QAAQ;AAAA,MACzB,YAAY;AAAA,IACd;AAAA,EACF;AAEA,SAAO;AAAA,IACL,cAAc;AAAA,IACd,YAAY,GAAG,QAAQ;AAAA,EACzB;AACF;AAEA,SAAS,gBAAgB,UAA2B;AAClD,SAAO,qBAAqB,QAAQ,QAAQ,CAAC;AAC/C;AAEA,SAAS,qBAAqB,WAA4B;AACxD,SAAO,cAAc,aAAa,cAAc;AAClD;AAEA,eAAe,iBACb,kBACA,SAC2B;AAC3B,MAAI;AACF,WAAO,MAAM,IAAI,kBAAkB,OAAO;AAAA,EAC5C,SAAS,OAAO;AACd,QAAI,aAAa,KAAK,GAAG;AACvB,YAAM;AAAA,IACR;AAEA,WAAO;AAAA,MACL,GAAI,aAAa,KAAK,IAAI,EAAE,SAAS,KAAc,IAAI,CAAC;AAAA,MACxD;AAAA,MACA,IAAI;AAAA,IACN;AAAA,EACF;AACF;AAEA,SAAS,aAAa,OAAyB;AAC7C,SAAO,iBAAiB,SAAS,MAAM,SAAS;AAClD;AAEA,SAAS,aAAa,OAAyB;AAC7C,MAAI,iBAAiB,OAAO;AAC1B,WAAO,MAAM,SAAS;AAAA,EACxB;AAEA,SACE,OAAO,UAAU,YACjB,UAAU,QACV,OAAO,UAAU,eAAe,KAAK,OAAO,MAAM,KACjD,MAA6B,SAAS;AAE3C;AAEA,SAAS,iBAAiB,QAAgB,UAA2B;AACnE,SAAO,YAAY,QAAQ,QAAQ,EAAE,KAAK;AAAA,IACxC,CAAC,cAAc,UAAU,SAAS;AAAA,EACpC;AACF;AAEA,SAAS,qBAAqB,SAAyB,aAAsC;AAC3F,MAAI,CAAC,aAAa;AAChB,WAAO;AAAA,EACT;AAEA,MAAI,mBAAmB,KAAK;AAC1B,UAAMC,cAAa,IAAI,IAAI,OAAO;AAClC,IAAAA,YAAW,OAAO,SAAS;AAC3B,WAAOA;AAAA,EACT;AAEA,QAAM,aAA4C,CAAC;AAEnD,aAAW,CAAC,YAAY,aAAa,KAAK,OAAO,QAAQ,OAAO,GAAG;AACjE,QAAI,eAAe,WAAW;AAC5B,iBAAW,UAAU,IAAI;AAAA,IAC3B;AAAA,EACF;AAEA,SAAO;AACT;AAEA,SAAS,mBAAmB,QAAwB;AAClD,SAAO,OAAO,WAAW,QAAQ,IAAI,OAAO,MAAM,CAAC,IAAI;AACzD;AAEA,SAAS,cAAc,QAAwB;AAC7C,MAAI,CAAC,OAAO,WAAW,IAAI,GAAG;AAC5B,WAAO;AAAA,EACT;AAEA,MAAI,MAAM;AACV,SAAO,MAAM,OAAO,UAAU,OAAO,GAAG,MAAM,QAAQ,OAAO,GAAG,MAAM,KAAM,QAAO;AACnF,SAAO,GAAG,IAAI,OAAO,GAAG,CAAC,GAAG,OAAO,MAAM,GAAG,CAAC;AAC/C;AAEA,SAAS,uBAAuB,aAA4C;AAC1E,MAAI,YAAY,WAAW,GAAG;AAC5B,WAAO;AAAA,EACT;AAEA,SAAO,YACJ;AAAA,IACC,CAAC,eACC,GAAG,WAAW,QAAQ,IAAI,WAAW,IAAI,IAAI,WAAW,MAAM,IAAI,WAAW,IAAI,IAAI,WAAW,OAAO;AAAA,EAC3G,EACC,KAAK,IAAI;AACd;;;ACpVO,SAAS,6BAA6B,QAAgB,MAAsC;AACjG,aAAW,aAAa,OAAO,MAAM;AACnC,QAAI,UAAU,SAAS,4BAA4B;AACjD,UAAI,SAAS,WAAW;AACtB,eAAO,UAAU;AAAA,MACnB;AAEA;AAAA,IACF;AAEA,QAAI,UAAU,SAAS,0BAA0B;AAC/C;AAAA,IACF;AAEA,UAAM,cAAc,UAAU;AAC9B,QAAI,YAAY,SAAS,SAAS;AAChC,YAAM,IAAI,MAAM,aAAa,IAAI,gCAAgC;AAAA,IACnE;AAEA,QAAI,YAAY,aAAa,WAAW,GAAG;AACzC,YAAM,IAAI,MAAM,kEAAkE;AAAA,IACpF;AAEA,UAAM,aAAa,YAAY,aAAa,CAAC;AAC7C,QAAI,WAAW,GAAG,SAAS,cAAc;AACvC,YAAM,IAAI,MAAM,yDAAyD;AAAA,IAC3E;AAEA,QAAI,WAAW,GAAG,SAAS,MAAM;AAC/B;AAAA,IACF;AAEA,QAAI,WAAW,SAAS,QAAW;AACjC,YAAM,IAAI,MAAM,mBAAmB,IAAI,6BAA6B;AAAA,IACtE;AAEA,WAAO,WAAW;AAAA,EACpB;AAEA,SAAO;AACT;;;AC1CA,SAAS,aAAa,cAAc;AAW7B,SAAS,eAAe,UAA6B,CAAC,GAK3D;AACA,QAAM,yBAAyB,QAAQ,WAAW,UAAa,QAAQ,SAAS;AAChF,QAAM,SACJ,QAAQ,WACP,QAAQ,SAAS,SAAY,MAAM,KAAK,OAAO,IAAI,mBAAmB,QAAQ,IAAI,EAAE;AACvF,QAAM,MAAM,QAAQ,QAAQ,MAAM,KAAK,IAAI;AAC3C,QAAM,SAAS,QAAQ;AAEvB,iBAAe,MAAM,IAA2B;AAC9C,qBAAiB,EAAE;AAEnB,WAAO,MAAM,IAAI,QAAc,CAAC,SAAS,WAAW;AAClD,UAAI,QAAQ,YAAY,MAAM;AAC5B,eAAO,sBAAsB,CAAC;AAC9B;AAAA,MACF;AAEA,YAAM,QAAQ,YAAY,IAAI;AAC9B,UAAI,UAAU,WAAW,cAAc,EAAE;AAEzC,eAAS,UAAgB;AACvB,qBAAa,OAAO;AACpB,gBAAQ,oBAAoB,SAAS,WAAW;AAAA,MAClD;AAEA,eAAS,eAAqB;AAC5B,cAAM,cAAc,MAAM,YAAY,IAAI,IAAI;AAC9C,YAAI,cAAc,GAAG;AACnB,oBAAU,WAAW,cAAc,WAAW;AAC9C;AAAA,QACF;AAEA,gBAAQ;AACR,gBAAQ;AAAA,MACV;AAEA,eAAS,cAAoB;AAC3B,gBAAQ;AACR,eAAO,sBAAsB,CAAC;AAAA,MAChC;AAEA,cAAQ,iBAAiB,SAAS,aAAa,EAAE,MAAM,KAAK,CAAC;AAAA,IAC/D,CAAC;AAAA,EACH;AAEA,SAAO;AAAA,IACL;AAAA,IACA;AAAA,IACA;AAAA,IACA,MAAM,yBAAyB,MAAM,iBAAiB,MAAM,IAAI,MAAM,OAAO,WAAW;AAAA,EAC1F;AACF;AAEA,SAAS,iBAAiB,QAA8B;AACtD,QAAM,QAAQ,MAAM,KAAK,EAAE,QAAQ,GAAG,GAAG,MAAM,KAAK,MAAM,eAAe,OAAO,CAAC,IAAI,GAAG,CAAC;AACzF,QAAM,CAAC,IAAK,MAAM,CAAC,IAAI,KAAQ;AAC/B,QAAM,CAAC,IAAK,MAAM,CAAC,IAAI,KAAQ;AAC/B,QAAM,MAAM,MAAM,IAAI,CAAC,SAAS,KAAK,SAAS,EAAE,EAAE,SAAS,GAAG,GAAG,CAAC,EAAE,KAAK,EAAE;AAE3E,SAAO;AAAA,IACL,IAAI,MAAM,GAAG,CAAC;AAAA,IACd,IAAI,MAAM,GAAG,EAAE;AAAA,IACf,IAAI,MAAM,IAAI,EAAE;AAAA,IAChB,IAAI,MAAM,IAAI,EAAE;AAAA,IAChB,IAAI,MAAM,EAAE;AAAA,EACd,EAAE,KAAK,GAAG;AACZ;AAEA,SAAS,eAAe,OAAuB;AAC7C,MAAI,OAAO,SAAS,KAAK,KAAK,SAAS,KAAK,QAAQ,GAAG;AACrD,WAAO;AAAA,EACT;AAEA,QAAM,IAAI,WAAW,2DAA2D;AAClF;AAEA,SAAS,iBAAiB,IAAkB;AAC1C,MAAI,OAAO,SAAS,EAAE,KAAK,MAAM,GAAG;AAClC;AAAA,EACF;AAEA,QAAM,IAAI,WAAW,kEAAkE;AACzF;AAEA,SAAS,wBAA+B;AACtC,SAAO,IAAI,MAAM,qBAAqB;AACxC;;;AC7FO,IAAMC,eAA6D;AACnE,IAAMC,WAGI;AAKV,IAAMC,uBAGT;",
   "names": ["parse", "rawModules", "parseModule", "restore", "deepCopyFromSandbox"]
 }

package/packages/safe-js/dist/interp/accessors.d.ts

@@ -0,0 +1,9 @@
+import type { SandboxCallContext, SandboxClosure, SandboxValue } from "./values.js";
+type NativeAccessor = (...args: never[]) => unknown;
+/** Native descriptors store identity only. Guest code runs through invokeClosure. */
+export declare function accessorAdapter(closure: SandboxClosure, kind: "get" | "set"): NativeAccessor;
+export declare function accessorClosure(adapter: NativeAccessor | undefined): SandboxClosure | undefined;
+export declare function retainedAccessorClosures(descriptor: PropertyDescriptor): SandboxClosure[];
+export declare function readPropertyDescriptor(descriptor: PropertyDescriptor, receiver: SandboxValue, context?: SandboxCallContext, allowNativeGetter?: boolean): SandboxValue | Promise<SandboxValue>;
+export declare function writePropertyDescriptor(descriptor: PropertyDescriptor, receiver: SandboxValue, value: SandboxValue, context?: SandboxCallContext): Promise<void>;
+export {};

package/packages/safe-js/dist/interp/accessors.js

@@ -0,0 +1,68 @@
+const accessorClosures = new WeakMap();
+const getterAdapters = new WeakMap();
+const setterAdapters = new WeakMap();
+/** Native descriptors store identity only. Guest code runs through invokeClosure. */
+export function accessorAdapter(closure, kind) {
+    if (kind === "get") {
+        let adapter = getterAdapters.get(closure);
+        if (adapter === undefined) {
+            // In particular, native Promise transport must not execute a guest `then`
+            // getter when carrying an ordinary interpreter result between async frames.
+            adapter = () => undefined;
+            getterAdapters.set(closure, adapter);
+            accessorClosures.set(adapter, closure);
+        }
+        return adapter;
+    }
+    let adapter = setterAdapters.get(closure);
+    if (adapter === undefined) {
+        adapter = () => {
+            throw new TypeError("Accessor writes require sandbox execution.");
+        };
+        setterAdapters.set(closure, adapter);
+        accessorClosures.set(adapter, closure);
+    }
+    return adapter;
+}
+export function accessorClosure(adapter) {
+    if (adapter === undefined)
+        return undefined;
+    const closure = accessorClosures.get(adapter);
+    if (closure === undefined)
+        throw new TypeError("Native accessors cannot execute in the sandbox.");
+    return closure;
+}
+export function retainedAccessorClosures(descriptor) {
+    const closures = [];
+    for (const adapter of [descriptor.get, descriptor.set]) {
+        const closure = adapter === undefined ? undefined : accessorClosures.get(adapter);
+        if (closure !== undefined)
+            closures.push(closure);
+    }
+    return closures;
+}
+export function readPropertyDescriptor(descriptor, receiver, context, allowNativeGetter = false) {
+    if ("value" in descriptor)
+        return descriptor.value;
+    if (descriptor.get === undefined)
+        return undefined;
+    const getter = accessorClosures.get(descriptor.get);
+    // Low-level interpreter callers can supply trusted native getters. Public
+    // host admission still rejects them; preserve that existing internal route.
+    if (getter === undefined) {
+        if (!allowNativeGetter)
+            throw new TypeError("Native accessors cannot execute in the sandbox.");
+        return Reflect.apply(descriptor.get, receiver, []);
+    }
+    if (context?.invokeClosure === undefined)
+        throw new TypeError("Accessor reads require sandbox execution.");
+    return context.invokeClosure(getter, [], receiver);
+}
+export function writePropertyDescriptor(descriptor, receiver, value, context) {
+    const setter = accessorClosure(descriptor.set);
+    if (setter === undefined)
+        throw new TypeError("Cannot assign to a getter-only property.");
+    if (context?.invokeClosure === undefined)
+        throw new TypeError("Accessor writes require sandbox execution.");
+    return context.invokeClosure(setter, [value], receiver).then(() => undefined);
+}

package/packages/safe-js/dist/interp/async.d.ts

@@ -6,7 +6,7 @@ import type { EvaluationResult } from "./exceptions.js";
 import type { InterpreterError, InterpreterSnapshot, LoopIterationSnapshot } from "./interpreter.js";
 import { CompileScope } from "./regex/compile-guard.js";
 import type { Scope } from "./scope.js";
-import { type SandboxValue } from "./values.js";
+import { type SandboxClosure, type SandboxObject, type SandboxValue } from "./values.js";
 export type InterpreterYieldPoint = {
     kind: "await" | "generator-yield" | "loop-iteration";
     nodeId?: number;
@@ -19,6 +19,16 @@ type ResumeBreakpoint = Omit<InterpreterYieldPoint, "snapshot">;
 export type AsyncInterpreterError = InterpreterError;
 export type AsyncEvaluationResult = EvaluationResult<AsyncInterpreterError>;
 export type AsyncEvaluationContext = {
+    inferredName?: string;
+    functionEnvironment?: {
+        newTarget?: SandboxClosure;
+        homeObject?: SandboxObject | SandboxClosure;
+        construction?: {
+            derived: boolean;
+            initialize(scope: Scope): Promise<void>;
+            superCall(args: readonly SandboxValue[]): Promise<SandboxValue>;
+        };
+    };
     assertActive?: () => void;
     compilation?: CompileScope;
     activeLoopIterations: Map<number, LoopIterationSnapshot>;
@@ -51,8 +61,9 @@ export type EvaluateAsyncNode = (node: ParseResult, context: AsyncEvaluationCont
 export declare function emitResumeBreakpoint(context: AsyncEvaluationContext, breakpoint: ResumeBreakpoint): void;
 export declare function evaluateArrowFunctionExpression(node: ArrowFunctionExpression, context: AsyncEvaluationContext, evaluateNode: EvaluateAsyncNode): Promise<AsyncEvaluationResult>;
 export declare function evaluateFunctionExpression(node: FunctionExpression, context: AsyncEvaluationContext, evaluateNode: EvaluateAsyncNode): Promise<AsyncEvaluationResult>;
-export declare function createInterpretedClosure(node: ArrowFunctionExpression | FunctionDeclaration | FunctionExpression, context: AsyncEvaluationContext, evaluateNode: EvaluateAsyncNode): import("./values.js").SandboxClosure;
+export declare function createInterpretedClosure(node: ArrowFunctionExpression | FunctionDeclaration | FunctionExpression, context: AsyncEvaluationContext, evaluateNode: EvaluateAsyncNode, homeObject?: SandboxObject | SandboxClosure): SandboxClosure;
 export declare function executeAsyncFunction(execute: (onSuspend: () => void) => Promise<SandboxValue>, budget: Budget, signal?: AbortSignal): import("./values.js").SandboxPromise;
 export declare function evaluateAwaitExpression(node: AwaitExpression, context: AsyncEvaluationContext, evaluateNode: EvaluateAsyncNode): Promise<AsyncEvaluationResult>;
+export declare function executeClosure(node: ArrowFunctionExpression | FunctionDeclaration | FunctionExpression, args: readonly SandboxValue[], thisValue: SandboxValue, context: AsyncEvaluationContext, evaluateNode: EvaluateAsyncNode): Promise<SandboxValue>;
 export declare function normalizeClosureResult(result: SandboxValue | Promise<SandboxValue> | PromiseLike<SandboxValue>, budget?: Budget): SandboxValue;
 export {};

package/packages/safe-js/dist/interp/async.js

@@ -1,7 +1,7 @@
 import { createGeneratorChannel } from "./generator.js";
 import { getBoundOtelSpan } from "../observability/otel.js";
 import { bindPattern } from "./patterns.js";
-import { getThenable, resolveSandboxValue } from "./promise.js";
+import { requiresPromiseResolution, resolveSandboxValue } from "./promise.js";
 import { runAsyncPrefix, suspendJob } from "./jobs.js";
 import { CompileScope } from "./regex/compile-guard.js";
 import { awaitSandboxValue } from "./cancel.js";
@@ -29,7 +29,7 @@ export async function evaluateFunctionExpression(node, context, evaluateNode) {
         return {
             kind: "normal",
             hasValue: true,
-            value: createInterpretedClosure(node, context, evaluateNode)
+            value: createInterpretedClosure(node, context, evaluateNode, node.method === true ? context.functionEnvironment?.homeObject : undefined)
         };
     }
     const wrapperScope = context.scope.child();
@@ -41,7 +41,10 @@ export async function evaluateFunctionExpression(node, context, evaluateNode) {
         value: closure
     };
 }
-export function createInterpretedClosure(node, context, evaluateNode) {
+export function createInterpretedClosure(node, context, evaluateNode, homeObject) {
+    if (node.type !== "ArrowFunctionExpression") {
+        context = { ...context, functionEnvironment: { homeObject } };
+    }
     if (node.type !== "ArrowFunctionExpression" && node.generator) {
         return createGeneratorClosure(node, context, evaluateNode);
     }
@@ -50,12 +53,14 @@ export function createInterpretedClosure(node, context, evaluateNode) {
         !node.async
         ? async (args, callContext) => {
             const thisValue = {};
-            const prototype = getGuestFunctionProperty(closure, "prototype");
+            const newTarget = callContext?.newTarget ?? closure;
+            const prototype = getGuestFunctionProperty(newTarget, "prototype");
             if (typeof prototype === "object" && prototype !== null) {
                 setSandboxPrototype(thisValue, prototype, context.budget);
             }
             const result = await executeClosure(node, args, thisValue, {
                 ...context,
+                functionEnvironment: { newTarget },
                 compilation: callContext?.compilation ?? context.compilation,
                 callStack: [...(callContext?.stack ?? context.callStack)]
             }, evaluateNode);
@@ -74,7 +79,7 @@ export function createInterpretedClosure(node, context, evaluateNode) {
                 : { name: node.id.name }
             : {}),
         ...(construct === undefined ? {} : { construct }),
-        retainedValues: () => context.scope.retainedValues(),
+        retainedValues: () => [...context.scope.retainedValues(), context.functionEnvironment?.homeObject, context.functionEnvironment?.newTarget],
         call: (args, callContext) => {
             const invocationContext = {
                 ...context,
@@ -97,7 +102,7 @@ export function executeAsyncFunction(execute, budget, signal) {
         runAsyncPrefix(async () => {
             try {
                 const value = await execute(completePrefix);
-                resolve(isSandboxPromise(value) || getThenable(value) !== undefined
+                resolve(requiresPromiseResolution(value, budget)
                     ? awaitSandboxValue(createSandboxPromise(resolveSandboxValue(value, { budget }), {
                         trackReplay: false
                     }), signal, budget)
@@ -124,7 +129,7 @@ function createGeneratorClosure(node, context, evaluateNode) {
         sandbox: true,
         length: getFunctionLength(node.params),
         ...(node.id === undefined ? {} : { name: node.id.name }),
-        retainedValues: () => context.scope.retainedValues(),
+        retainedValues: () => [...context.scope.retainedValues(), context.functionEnvironment?.homeObject, context.functionEnvironment?.newTarget],
         call: async (args, callContext) => {
             const closureContext = {
                 ...context,
@@ -186,7 +191,7 @@ export async function evaluateAwaitExpression(node, context, evaluateNode) {
         leaveAwait();
     }
 }
-async function executeClosure(node, args, thisValue, context, evaluateNode) {
+export async function executeClosure(node, args, thisValue, context, evaluateNode) {
     const parent = context.compilation;
     const operation = context.budget.acquireCompileOwner(false, parent?.owner);
     const compilation = new CompileScope(operation.owner, parent);
@@ -219,9 +224,14 @@ async function executeClosure(node, args, thisValue, context, evaluateNode) {
 async function createClosureScope(node, args, thisValue, context, evaluateNode) {
     const scope = context.scope.child({}, { functionBoundary: true });
     if (node.type !== "ArrowFunctionExpression") {
-        scope.declare("this", "const", thisValue);
+        const construction = context.functionEnvironment?.construction;
+        if (construction?.derived === true)
+            scope.predeclare("this", "const");
+        else
+            scope.declare("this", "const", thisValue);
         context.budget.allocateArrayLength(args.length);
         scope.declare("arguments", "let", createSandboxArguments(args));
+        await construction?.initialize(scope);
     }
     await bindParameters(node.params, args, scope, context, evaluateNode);
     const bodyScope = node.params.some(containsParameterExpression)

package/packages/safe-js/dist/interp/classes.d.ts

@@ -0,0 +1,4 @@
+import type { ClassNode } from "../parse.js";
+import { type AsyncEvaluationContext, type AsyncEvaluationResult, type EvaluateAsyncNode } from "./async.js";
+import { type SandboxCallContext } from "./values.js";
+export declare function evaluateClass(node: ClassNode, context: AsyncEvaluationContext, evaluateNode: EvaluateAsyncNode, callContext: SandboxCallContext): Promise<AsyncEvaluationResult>;

package/packages/safe-js/dist/interp/classes.js

@@ -0,0 +1,182 @@
+import { getFunctionLength } from "../parse/bindings.js";
+import { functionSources } from "../parse/function-source.js";
+import { accessorAdapter } from "./accessors.js";
+import { createInterpretedClosure, executeClosure } from "./async.js";
+import { retainValues } from "./resources.js";
+import { getSandboxPrototype, materializeFunctionProperties, setSandboxPrototype } from "./object-model.js";
+import { defineDataProperty } from "./globals/object-array.js";
+import { createPatternContext } from "./interpreter.js";
+import { hoistVarDeclarations } from "./var-hoist.js";
+import { createSandboxClosure, isSandboxClosure } from "./values.js";
+export async function evaluateClass(node, context, evaluateNode, callContext) {
+    const scope = context.scope.child();
+    if (node.id !== undefined)
+        scope.predeclare(node.id.name, "const");
+    const classContext = { ...context, scope, inferredName: undefined };
+    let parent;
+    let prototypeParent;
+    const fields = [];
+    const statics = [];
+    let constructor;
+    const release = retainValues(context.budget, () => [parent, prototypeParent, constructor, ...fields.map(field => field.key), ...statics.flatMap(field => "key" in field ? [field.key] : [])]);
+    try {
+        if (node.superClass !== undefined) {
+            const result = await evaluateNode(node.superClass, classContext);
+            if (result.kind !== "normal")
+                return result;
+            parent = result.value;
+            if (parent !== null && (!isSandboxClosure(parent) || parent.construct === undefined))
+                throw new TypeError("Class extends value is not a constructor or null.");
+            prototypeParent = parent === null ? null : await callContext.getProperty(parent, "prototype");
+            if (prototypeParent !== null && typeof prototypeParent !== "object")
+                throw new TypeError("Class extends value has an invalid prototype.");
+        }
+        const constructorElement = node.body.body.find((element) => element.type === "MethodDefinition" && element.kind === "constructor");
+        const derived = node.superClass !== undefined;
+        constructor = createSandboxClosure({
+            guest: true,
+            sandbox: true,
+            name: node.id?.name ?? context.inferredName ?? "",
+            length: constructorElement === undefined ? 0 : getFunctionLength(constructorElement.value.params),
+            sourceRange: functionSources.get(node),
+            retainedValues: () => [...scope.retainedValues(), ...fields.map(field => field.key)],
+            call: () => { throw new TypeError("Class constructor cannot be invoked without 'new'."); },
+            construct: async (args, invocation) => {
+                const newTarget = invocation?.newTarget ?? constructor;
+                let thisValue;
+                let thisScope;
+                let initialized = !derived;
+                const initializeFields = async (receiver) => {
+                    for (const field of fields) {
+                        await initializeElement(field, receiver, prototype, classContext, evaluateNode);
+                    }
+                };
+                const superCall = async (argumentsList) => {
+                    // SuperConstructor is read at invocation time, not captured at definition.
+                    const superConstructor = getSandboxPrototype(constructor, context.budget);
+                    if (!isSandboxClosure(superConstructor) || superConstructor.construct === undefined)
+                        throw new TypeError("Super constructor is not a constructor.");
+                    const receiver = await invocation.invokeClosure(superConstructor, argumentsList, undefined, true, newTarget);
+                    if (initialized)
+                        throw new ReferenceError("Super constructor may only initialize this once.");
+                    initialized = true;
+                    thisValue = receiver;
+                    thisScope?.declare("this", "const", receiver);
+                    await initializeFields(receiver);
+                    return receiver;
+                };
+                if (!derived) {
+                    thisValue = {};
+                    const targetPrototype = await invocation.getProperty(newTarget, "prototype");
+                    if (typeof targetPrototype === "object" && targetPrototype !== null)
+                        setSandboxPrototype(thisValue, targetPrototype, context.budget);
+                }
+                if (constructorElement === undefined) {
+                    if (derived)
+                        return superCall(args);
+                    await initializeFields(thisValue);
+                    return thisValue;
+                }
+                const result = await executeClosure(constructorElement.value, args, thisValue, {
+                    ...classContext,
+                    compilation: invocation?.compilation ?? context.compilation,
+                    callStack: [...(invocation?.stack ?? context.callStack)],
+                    functionEnvironment: {
+                        newTarget,
+                        homeObject: prototype,
+                        construction: {
+                            derived,
+                            superCall,
+                            initialize: async (functionScope) => {
+                                thisScope = functionScope;
+                                if (!derived)
+                                    await initializeFields(thisValue);
+                            }
+                        }
+                    }
+                }, evaluateNode);
+                if (typeof result === "object" && result !== null)
+                    return result;
+                if (derived && result !== undefined)
+                    throw new TypeError("Derived constructors may only return an object or undefined.");
+                if (!initialized)
+                    throw new ReferenceError("Must call super constructor before returning from derived constructor.");
+                return thisValue;
+            }
+        });
+        const properties = materializeFunctionProperties(constructor);
+        const prototype = properties.prototype;
+        Object.defineProperty(properties, "prototype", { writable: false });
+        if (derived)
+            setSandboxPrototype(prototype, prototypeParent, context.budget);
+        if (isSandboxClosure(parent))
+            setSandboxPrototype(constructor, parent, context.budget);
+        const pattern = createPatternContext(classContext, scope, evaluateNode);
+        for (const element of node.body.body) {
+            context.budget.visitNode();
+            if (element.type === "StaticBlock") {
+                statics.push({ element });
+                continue;
+            }
+            if (element.type === "MethodDefinition" && element.kind === "constructor")
+                continue;
+            let key;
+            if (element.computed) {
+                const result = await evaluateNode(element.key, classContext);
+                if (result.kind !== "normal")
+                    return result;
+                key = await pattern.toPropertyKey(result.value);
+            }
+            else {
+                key = element.key.type === "Identifier" ? element.key.name : String(element.key.value);
+            }
+            context.budget.allocateString(key);
+            if (element.type === "PropertyDefinition") {
+                (element.static ? statics : fields).push({ element, key });
+            }
+            else {
+                const home = element.static ? constructor : prototype;
+                const method = createInterpretedClosure(element.value, classContext, evaluateNode, home);
+                const accessor = element.kind === "get" || element.kind === "set" ? element.kind : undefined;
+                Object.defineProperty(materializeFunctionProperties(method), "name", {
+                    value: accessor === undefined ? key : `${accessor} ${key}`
+                });
+                Object.defineProperty(element.static ? properties : prototype, key, accessor === undefined
+                    ? { value: method, configurable: true, writable: true, enumerable: false }
+                    : { [accessor]: accessorAdapter(method, accessor), configurable: true, enumerable: false });
+            }
+        }
+        if (node.id !== undefined)
+            scope.declare(node.id.name, "const", constructor);
+        for (const element of statics)
+            await initializeElement(element, constructor, constructor, classContext, evaluateNode);
+        if (node.type === "ClassDeclaration") {
+            context.scope.declare(node.id.name, "let", constructor);
+            return { kind: "normal", hasValue: false, value: undefined };
+        }
+        return { kind: "normal", hasValue: true, value: constructor };
+    }
+    finally {
+        release();
+    }
+}
+async function initializeElement(definition, receiver, homeObject, context, evaluateNode) {
+    const scope = context.scope.child({}, { functionBoundary: true });
+    scope.declare("this", "const", receiver);
+    const element = definition.element;
+    const initializer = element.type === "StaticBlock" ? element.body : element.value;
+    let value;
+    if (initializer !== undefined) {
+        if (element.type === "StaticBlock")
+            hoistVarDeclarations(element.body, scope);
+        const result = await evaluateNode(initializer, { ...context, scope, functionEnvironment: { homeObject }, inferredName: "key" in definition ? definition.key : undefined });
+        if (result.kind === "error")
+            throw result.error;
+        if (result.kind === "throw")
+            throw result.value;
+        value = result.hasValue ? result.value : undefined;
+    }
+    if ("key" in definition) {
+        defineDataProperty(receiver, definition.key, { value, configurable: true, writable: true, enumerable: true }, context.budget);
+    }
+}

package/packages/safe-js/dist/interp/exceptions.d.ts

@@ -31,7 +31,7 @@ type ExceptionContext = {
     callStack: readonly string[];
     scope: Scope;
     toPropertyKey?: (value: SandboxValue) => Promise<string>;
-    getProperty?: (value: SandboxValue, key: string | number) => SandboxValue;
+    getProperty?: (value: SandboxValue, key: string | number) => SandboxValue | Promise<SandboxValue>;
 };
 type EvaluateExceptionNode<TContext, TError> = (node: ParseResult, context: TContext) => Promise<EvaluationResult<TError>>;
 export declare function evaluateThrowStatement<TContext extends ExceptionContext, TError>(node: ThrowStatement, context: TContext, evaluateNode: EvaluateExceptionNode<TContext, TError>): Promise<EvaluationResult<TError>>;