poe-code 14.0.7 → 14.0.9

package/packages/safe-js/dist/chunks/{chunk-ETKM3KPA.js → chunk-RXLDJ6LQ.js}

@@ -27,7 +27,7 @@ import {
   validateMigrationSemantics,
   validateSnapshotData,
   validateSnapshotMigration
-} from "./chunk-BWVASPJX.js";
+} from "./chunk-MO3YD4ID.js";
 import {
   createFileSystem,
   createNodeFileSystemAdapterRegistry,
@@ -8245,4 +8245,4 @@ export {
   parseMcpConfig,
   makeMcpModule
 };
-//# sourceMappingURL=chunk-ETKM3KPA.js.map
+//# sourceMappingURL=chunk-RXLDJ6LQ.js.map

package/packages/safe-js/dist/cli.js

@@ -22,7 +22,7 @@ import {
   resolveFsConfig,
   splitFrontmatter,
   withBrokenPipeGuard
-} from "./chunks/chunk-ETKM3KPA.js";
+} from "./chunks/chunk-RXLDJ6LQ.js";
 import {
   Budget,
   SandboxError,
@@ -34,7 +34,7 @@ import {
   replaceErrorStack,
   restore,
   run
-} from "./chunks/chunk-BWVASPJX.js";
+} from "./chunks/chunk-MO3YD4ID.js";
 import "./chunks/chunk-7M2SJPSZ.js";
 import "./chunks/chunk-2QRYPKQQ.js";
 import "./chunks/chunk-4YIDX44G.js";

package/packages/safe-js/dist/core.d.ts

@@ -2,7 +2,7 @@ export { lint, type Diagnostic, type Fix, type LintFixResult, type LintOptions }
 export { run } from "./run.js";
 export { createRealm, type SafeJSRealm, type RealmOptions, type RealmResult, type RealmLimits } from "./realm.js";
 export { defineExtension, type SafeJSExtension, type ExtensionDefinition, type ExtensionManifest, type ExtensionContext, type ExtensionExports, type CallbackOptions } from "./extensions.js";
-export type { HostObject, HostObjectDefinition, GuestReference } from "./interp/host-capabilities.js";
+export type { HostObject, HostObjectDefinition, HostObjectIndexedDefinition, HostObjectNamedDefinition, GuestReference } from "./interp/host-capabilities.js";
 export { createReplayableRandom, type ReplayableRandom } from "./random.js";
 export type { RunClock, RunClockSnapshot, RunRandom } from "./run.js";
 export { Budget } from "./interp/budget.js";

package/packages/safe-js/dist/core.js

@@ -5,7 +5,7 @@ import {
   defineExtension,
   lint,
   run
-} from "./chunks/chunk-BWVASPJX.js";
+} from "./chunks/chunk-MO3YD4ID.js";
 import "./chunks/chunk-4YIDX44G.js";
 export {
   Budget,

package/packages/safe-js/dist/index.d.ts

@@ -13,7 +13,7 @@ export { lint, type Diagnostic, type Fix, type LintFixResult, type LintOptions }
 export { run } from "./run.js";
 export { createRealm, type SafeJSRealm, type RealmOptions, type RealmResult, type RealmLimits } from "./realm.js";
 export { defineExtension, type SafeJSExtension, type ExtensionDefinition, type ExtensionManifest, type ExtensionContext, type ExtensionExports, type CallbackOptions } from "./extensions.js";
-export type { HostObject, HostObjectDefinition, GuestReference } from "./interp/host-capabilities.js";
+export type { HostObject, HostObjectDefinition, HostObjectIndexedDefinition, HostObjectNamedDefinition, GuestReference } from "./interp/host-capabilities.js";
 export { createReplayableRandom, type ReplayableRandom } from "./random.js";
 export type { RunClock, RunClockSnapshot, RunRandom } from "./run.js";
 export { noopOtelSink } from "./observability/otel.js";

package/packages/safe-js/dist/index.js

@@ -26,7 +26,7 @@ import {
   runWithSpawnUsageAccumulator,
   splitFrontmatter,
   supportsSpawnMode
-} from "./chunks/chunk-ETKM3KPA.js";
+} from "./chunks/chunk-RXLDJ6LQ.js";
 import {
   Budget,
   FileSnapshotBackend,
@@ -50,7 +50,7 @@ import {
   registerPendingHostCallPolicy,
   restore,
   run
-} from "./chunks/chunk-BWVASPJX.js";
+} from "./chunks/chunk-MO3YD4ID.js";
 import "./chunks/chunk-7M2SJPSZ.js";
 import "./chunks/chunk-2QRYPKQQ.js";
 import "./chunks/chunk-4YIDX44G.js";

package/packages/safe-js/dist/index.js.map

@@ -1,7 +1,7 @@
 {
   "version": 3,
   "sources": ["../src/parse.ts", "../src/runner/run-harness.ts", "../src/loader/find-exported.ts", "../src/modules/time.ts", "../src/index.ts"],
-  "sourcesContent": ["import { parse as parseInternal, type ParseResult as ParsedNode } from \"./parse/parser.js\";\n\nexport { DisallowedSyntaxError } from \"./parse/parser.js\";\nexport const parse: (source: string, filename?: string) => ParsedNode = parseInternal;\nexport type {\n  ArrayPattern,\n  ArrayExpression,\n  ArrowFunctionExpression,\n  AssignmentExpression,\n  AssignmentPattern,\n  AssignmentProperty,\n  AwaitExpression,\n  BinaryExpression,\n  BlockStatement,\n  BooleanLiteral,\n  BreakStatement,\n  CallExpression,\n  CatchClause,\n  ConditionalExpression,\n  ContinueStatement,\n  DoWhileStatement,\n  EmptyStatement,\n  Expression,\n  ExpressionStatement,\n  ExportDefaultDeclaration,\n  ExportNamedDeclaration,\n  ImportDeclaration,\n  ImportDefaultSpecifier,\n  ImportNamespaceSpecifier,\n  ImportSpecifier,\n  ForInStatement,\n  ForOfStatement,\n  ForStatement,\n  FunctionDeclaration,\n  FunctionExpression,\n  Identifier,\n  IfStatement,\n  LogicalExpression,\n  MemberExpression,\n  MetaProperty,\n  NewExpression,\n  NullLiteral,\n  NumericLiteral,\n  ObjectExpression,\n  ObjectPattern,\n  ParseResult,\n  PatternTarget,\n  Property,\n  RegexLiteral,\n  RestElement,\n  ReturnStatement,\n  SequenceExpression,\n  SourceSpan,\n  SpreadElement,\n  Statement,\n  StringLiteral,\n  SwitchCase,\n  SwitchStatement,\n  TaggedTemplateExpression,\n  TemplateElement,\n  TemplateLiteral,\n  ThisExpression,\n  ThrowStatement,\n  TryStatement,\n  UnaryExpression,\n  UndefinedLiteral,\n  UpdateExpression,\n  UpdateTarget,\n  VariableDeclaration,\n  VariableDeclarationKind,\n  VariableDeclarator,\n  WhileStatement\n} from \"./parse/parser.js\";\n", "import { readFile, stat } from \"node:fs/promises\";\nimport { extname } from \"node:path\";\n\nimport { supportsSpawnMode } from \"@poe-code/agent-spawn/configs\";\nimport { SPAWN_MODES, type SpawnMode } from \"@poe-code/agent-spawn/types\";\nimport { hasOwnErrorCode } from \"../error-codes.js\";\nimport { countLineBreaks, extractBlock, maskSource } from \"../loader/extract-block.js\";\nimport { splitFrontmatter } from \"../loader/frontmatter.js\";\nimport { lint, type Diagnostic } from \"../lint.js\";\nimport { createLintModulesFromRuntimeRegistry } from \"../lint/runtime-modules.js\";\nimport type { ModuleExports, ModuleRegistry } from \"../modules/registry.js\";\nimport type { OtelSink } from \"../observability/otel.js\";\nimport { parseModule } from \"../parse/parser.js\";\nimport { run, type RunOptions, type RunResult } from \"../run.js\";\nimport type { SnapshotBackend } from \"../snapshot/backend.js\";\n\ntype HarnessMeta = {\n  filepath: string;\n  kind: unknown;\n  version: unknown;\n};\n\nexport type RunHarnessOptions = {\n  budget?: RunOptions[\"budget\"];\n  modulesFor: (frontmatter: Record<string, unknown>, meta: HarnessMeta) => ModuleRegistry;\n  otelSink?: OtelSink;\n  signal?: AbortSignal;\n  snapshotBackend?: SnapshotBackend;\n  snapshotIntervalMs?: number;\n  snapshotPath?: string;\n};\n\nexport type RunHarnessExecutionErrorResult = {\n  aborted?: true;\n  error: unknown;\n  ok: false;\n};\n\nexport type RunHarnessResult = RunResult | RunHarnessExecutionErrorResult;\n\nfunction getOwnEntry(record: Record<string, unknown>, key: string): unknown {\n  return Object.prototype.hasOwnProperty.call(record, key) ? record[key] : undefined;\n}\n\nfunction createHarnessMeta(filepath: string, frontmatter: Record<string, unknown>): HarnessMeta {\n  return {\n    filepath,\n    kind: getOwnEntry(frontmatter, \"kind\"),\n    version: getOwnEntry(frontmatter, \"version\")\n  };\n}\n\nfunction assertFrontmatterAgentModes(frontmatter: Record<string, unknown>): void {\n  const agents = getOwnEntry(frontmatter, \"agents\");\n  if (typeof agents !== \"object\" || agents === null || Array.isArray(agents)) {\n    return;\n  }\n\n  for (const [name, definition] of Object.entries(agents)) {\n    if (typeof definition !== \"object\" || definition === null || Array.isArray(definition)) {\n      continue;\n    }\n\n    const record = definition as Record<string, unknown>;\n    const agent = getOwnEntry(record, \"agent\");\n    const mode = getOwnEntry(record, \"mode\");\n    if (typeof agent !== \"string\" || typeof mode !== \"string\") {\n      continue;\n    }\n\n    // Malformed mode strings are reported by the agent module's own validation.\n    if (!SPAWN_MODES.includes(mode as SpawnMode)) {\n      continue;\n    }\n\n    if (!supportsSpawnMode(agent, mode as SpawnMode)) {\n      throw new Error(`Harness agent \"${name}\": agent \"${agent}\" does not support mode \"${mode}\".`);\n    }\n  }\n}\n\nexport class LintError extends Error {\n  readonly diagnostics: readonly Diagnostic[];\n\n  constructor(diagnostics: readonly Diagnostic[]) {\n    super(formatLintErrorMessage(diagnostics));\n    this.name = \"LintError\";\n    this.diagnostics = diagnostics;\n  }\n}\n\nexport async function runHarness(\n  filepath: string,\n  options: RunHarnessOptions\n): Promise<RunHarnessResult> {\n  const rawSource = await readHarnessFile(filepath);\n  const { executableSource, frontmatter, isRawScript } = loadExecutableSource(filepath, rawSource);\n  assertFrontmatterAgentModes(frontmatter);\n  const meta = createHarnessMeta(filepath, frontmatter);\n  const modules = excludeHarnessModule(options.modulesFor(frontmatter, meta), isRawScript);\n  const diagnostics = lint(executableSource, {\n    filename: filepath,\n    modules: createLintModulesFromRuntimeRegistry(modules)\n  });\n  const lintErrors = diagnostics.filter((diagnostic) => diagnostic.severity === \"error\");\n\n  if (lintErrors.length > 0) {\n    throw new LintError(lintErrors);\n  }\n\n  return runHarnessSource(executableSource, {\n    budget: options.budget,\n    entryPointArgs: hasDefaultExport(executableSource, filepath) ? [] : undefined,\n    filename: filepath,\n    modules,\n    otelSink: options.otelSink,\n    signal: options.signal,\n    snapshotBackend: options.snapshotBackend,\n    snapshotIntervalMs: options.snapshotIntervalMs,\n    snapshotPath: options.snapshotPath\n  });\n}\n\nexport async function runHarnessPair(\n  filepath: string,\n  options: RunHarnessOptions\n): Promise<RunHarnessResult> {\n  const pair = resolveHarnessPair(filepath);\n  const [rawMarkdown, rawScript] = await Promise.all([\n    readHarnessFile(pair.markdownPath),\n    readHarnessFile(pair.scriptPath)\n  ]);\n  const { frontmatter, body } = splitFrontmatter(stripByteOrderMark(rawMarkdown));\n  assertFrontmatterAgentModes(frontmatter);\n  const executableSource = stripByteOrderMark(rawScript);\n  const meta = createHarnessMeta(pair.markdownPath, frontmatter);\n  const modules = options.modulesFor(frontmatter, meta);\n  const diagnostics = lint(executableSource, {\n    allowedExportNames: [\"schema\"],\n    defaultExport: {\n      parameters: [\"frontmatter\"],\n      required: true\n    },\n    filename: pair.scriptPath,\n    frontmatterFields: Object.keys(frontmatter),\n    modules: createLintModulesFromRuntimeRegistry(modules)\n  });\n  const lintErrors = diagnostics.filter((diagnostic) => diagnostic.severity === \"error\");\n\n  if (lintErrors.length > 0) {\n    throw new LintError(lintErrors);\n  }\n\n  return runHarnessSource(executableSource, {\n    budget: options.budget,\n    entryPointArgs: [frontmatter],\n    filename: pair.scriptPath,\n    importMeta: {\n      body,\n      filepath: pair.markdownPath,\n      kind: meta.kind,\n      version: meta.version\n    },\n    modules,\n    otelSink: options.otelSink,\n    signal: options.signal,\n    snapshotBackend: options.snapshotBackend,\n    snapshotIntervalMs: options.snapshotIntervalMs,\n    snapshotPath: options.snapshotPath\n  });\n}\n\nasync function readHarnessFile(filepath: string): Promise<string> {\n  try {\n    const stats = await stat(filepath);\n    if (!stats.isFile()) {\n      throw new Error(`Harness path must point to a file: ${filepath}`);\n    }\n\n    return await readFile(filepath, \"utf8\");\n  } catch (error) {\n    if (hasOwnErrorCode(error, \"ENOENT\") || hasOwnErrorCode(error, \"ENOTDIR\")) {\n      throw new Error(`Harness file not found: ${filepath}`);\n    }\n\n    throw error;\n  }\n}\n\nfunction loadExecutableSource(\n  filepath: string,\n  source: string\n): {\n  executableSource: string;\n  frontmatter: Record<string, unknown>;\n  isRawScript: boolean;\n} {\n  if (isRawScriptPath(filepath)) {\n    const executableSource = stripByteOrderMark(source);\n    if (executableSource.length === 0) {\n      throw new Error(`No code block found in empty harness file: ${filepath}`);\n    }\n\n    return {\n      executableSource,\n      frontmatter: {},\n      isRawScript: true\n    };\n  }\n\n  const { frontmatter, body } = splitFrontmatter(source);\n  if (source.length === 0 || body.trim().length === 0) {\n    throw new Error(`No code block found in empty harness file: ${filepath}`);\n  }\n\n  const bodyStartOffset = source.length - body.length;\n  const { source: executableBlock, startOffset } = extractBlock(\n    body,\n    countLineBreaks(source, 0, bodyStartOffset) + 1\n  );\n  return {\n    executableSource:\n      maskSource(source.slice(0, bodyStartOffset + startOffset)) + stripHashbang(executableBlock),\n    frontmatter,\n    isRawScript: false\n  };\n}\n\nfunction resolveHarnessPair(filepath: string): { markdownPath: string; scriptPath: string } {\n  const extension = extname(filepath);\n  const basename = extension.length === 0 ? filepath : filepath.slice(0, -extension.length);\n\n  if (isRawScriptExtension(extension)) {\n    return {\n      markdownPath: `${basename}.md`,\n      scriptPath: filepath\n    };\n  }\n\n  return {\n    markdownPath: filepath,\n    scriptPath: `${basename}.ajs`\n  };\n}\n\nfunction isRawScriptPath(filepath: string): boolean {\n  return isRawScriptExtension(extname(filepath));\n}\n\nfunction isRawScriptExtension(extension: string): boolean {\n  return extension === \".safejs\" || extension === \".ajs\";\n}\n\nasync function runHarnessSource(\n  executableSource: string,\n  options: Parameters<typeof run>[1]\n): Promise<RunHarnessResult> {\n  try {\n    return await run(executableSource, options);\n  } catch (error) {\n    if (isSetupError(error)) {\n      throw error;\n    }\n\n    return {\n      ...(isAbortError(error) ? { aborted: true as const } : {}),\n      error,\n      ok: false\n    };\n  }\n}\n\nfunction isSetupError(error: unknown): boolean {\n  return error instanceof Error && error.name === \"ParseError\";\n}\n\nfunction isAbortError(error: unknown): boolean {\n  if (error instanceof Error) {\n    return error.name === \"AbortError\";\n  }\n\n  return (\n    typeof error === \"object\" &&\n    error !== null &&\n    Object.prototype.hasOwnProperty.call(error, \"name\") &&\n    (error as { name?: unknown }).name === \"AbortError\"\n  );\n}\n\nfunction hasDefaultExport(source: string, filename: string): boolean {\n  return parseModule(source, filename).body.some(\n    (statement) => statement.type === \"ExportDefaultDeclaration\"\n  );\n}\n\nfunction excludeHarnessModule(modules: ModuleRegistry, isRawScript: boolean): ModuleRegistry {\n  if (!isRawScript) {\n    return modules;\n  }\n\n  if (modules instanceof Map) {\n    const rawModules = new Map(modules);\n    rawModules.delete(\"harness\");\n    return rawModules;\n  }\n\n  const rawModules: Record<string, ModuleExports> = {};\n\n  for (const [moduleName, moduleExports] of Object.entries(modules)) {\n    if (moduleName !== \"harness\") {\n      rawModules[moduleName] = moduleExports;\n    }\n  }\n\n  return rawModules;\n}\n\nfunction stripByteOrderMark(source: string): string {\n  return source.startsWith(\"\\uFEFF\") ? source.slice(1) : source;\n}\n\nfunction stripHashbang(source: string): string {\n  if (!source.startsWith(\"#!\")) {\n    return source;\n  }\n\n  let end = 2;\n  while (end < source.length && source[end] !== \"\\n\" && source[end] !== \"\\r\") end += 1;\n  return `${\" \".repeat(end)}${source.slice(end)}`;\n}\n\nfunction formatLintErrorMessage(diagnostics: readonly Diagnostic[]): string {\n  if (diagnostics.length === 0) {\n    return \"Script lint failed.\";\n  }\n\n  return diagnostics\n    .map(\n      (diagnostic) =>\n        `${diagnostic.filename}:${diagnostic.line}:${diagnostic.column} ${diagnostic.code} ${diagnostic.message}`\n    )\n    .join(\"\\n\");\n}\n", "import type { Expression, Module } from \"../parse/parser.js\";\n\nexport function findExportedConstInitializer(module: Module, name: string): Expression | undefined {\n  for (const statement of module.body) {\n    if (statement.type === \"ExportDefaultDeclaration\") {\n      if (name === \"default\") {\n        return statement.declaration;\n      }\n\n      continue;\n    }\n\n    if (statement.type !== \"ExportNamedDeclaration\") {\n      continue;\n    }\n\n    const declaration = statement.declaration;\n    if (declaration.kind !== \"const\") {\n      throw new Error(`Exported '${name}' must be declared with const.`);\n    }\n\n    if (declaration.declarations.length !== 1) {\n      throw new Error(\"Exported const declarations must contain exactly one declarator.\");\n    }\n\n    const declarator = declaration.declarations[0]!;\n    if (declarator.id.type !== \"Identifier\") {\n      throw new Error(\"Destructured exported const bindings are not supported.\");\n    }\n\n    if (declarator.id.name !== name) {\n      continue;\n    }\n\n    if (declarator.init === undefined) {\n      throw new Error(`Exported const '${name}' must have an initializer.`);\n    }\n\n    return declarator.init;\n  }\n\n  return undefined;\n}\n", "import { webcrypto as crypto } from \"node:crypto\";\n\nimport { createSeededRandom } from \"../interp/globals/math.js\";\n\nexport type TimeModuleOptions = {\n  now?: () => number;\n  random?: () => number;\n  seed?: number;\n  signal?: AbortSignal;\n};\n\nexport function makeTimeModule(options: TimeModuleOptions = {}): {\n  random: () => number;\n  now: () => number;\n  sleep: (ms: number) => Promise<void>;\n  uuid: () => string;\n} {\n  const hasDeterministicRandom = options.random !== undefined || options.seed !== undefined;\n  const random =\n    options.random ??\n    (options.seed === undefined ? () => Math.random() : createSeededRandom(options.seed).next);\n  const now = options.now ?? (() => Date.now());\n  const signal = options.signal;\n\n  async function sleep(ms: number): Promise<void> {\n    assertSleepDelay(ms);\n\n    return await new Promise<void>((resolve, reject) => {\n      if (signal?.aborted === true) {\n        reject(createSleepAbortError());\n        return;\n      }\n\n      const start = performance.now();\n      let timeout = setTimeout(resolveSleep, ms);\n\n      function cleanup(): void {\n        clearTimeout(timeout);\n        signal?.removeEventListener(\"abort\", rejectSleep);\n      }\n\n      function resolveSleep(): void {\n        const remainingMs = ms - (performance.now() - start);\n        if (remainingMs > 0) {\n          timeout = setTimeout(resolveSleep, remainingMs);\n          return;\n        }\n\n        cleanup();\n        resolve();\n      }\n\n      function rejectSleep(): void {\n        cleanup();\n        reject(createSleepAbortError());\n      }\n\n      signal?.addEventListener(\"abort\", rejectSleep, { once: true });\n    });\n  }\n\n  return {\n    random,\n    now,\n    sleep,\n    uuid: hasDeterministicRandom ? () => createRandomUuid(random) : () => crypto.randomUUID()\n  };\n}\n\nfunction createRandomUuid(random: () => number): string {\n  const bytes = Array.from({ length: 16 }, () => Math.floor(readRandomUnit(random()) * 256));\n  bytes[6] = (bytes[6] & 0x0f) | 0x40;\n  bytes[8] = (bytes[8] & 0x3f) | 0x80;\n  const hex = bytes.map((byte) => byte.toString(16).padStart(2, \"0\")).join(\"\");\n\n  return [\n    hex.slice(0, 8),\n    hex.slice(8, 12),\n    hex.slice(12, 16),\n    hex.slice(16, 20),\n    hex.slice(20)\n  ].join(\"-\");\n}\n\nfunction readRandomUnit(value: number): number {\n  if (Number.isFinite(value) && value >= 0 && value < 1) {\n    return value;\n  }\n\n  throw new RangeError(\"time.uuid() random source must return a number in [0, 1).\");\n}\n\nfunction assertSleepDelay(ms: number): void {\n  if (Number.isFinite(ms) && ms >= 0) {\n    return;\n  }\n\n  throw new RangeError(\"time.sleep(ms) requires a non-negative finite millisecond delay.\");\n}\n\nfunction createSleepAbortError(): Error {\n  return new Error(\"time.sleep aborted.\");\n}\n", "import { parseModule as parseModuleInternal, type Module } from \"./parse/parser.js\";\nimport { restore as restoreInternal, type SafeJSSnapshot, type RestoreOptions } from \"./restore.js\";\nimport {\n  deepCopyFromSandbox as copyFromSandboxInternal,\n  type SandboxPromise,\n  type SandboxValue\n} from \"./interp/values.js\";\n\nexport { parse } from \"./parse.js\";\nexport const parseModule: (source: string, filename?: string) => Module = parseModuleInternal;\nexport const restore: <TSnapshot extends SafeJSSnapshot>(\n  snapshot: TSnapshot,\n  options: RestoreOptions\n) => TSnapshot = restoreInternal;\ntype PublicCopyOptions = Omit<\n  NonNullable<Parameters<typeof copyFromSandboxInternal>[1]>,\n  \"compilation\" | \"unwrapHostObject\"\n>;\nexport const deepCopyFromSandbox: {\n  (value: SandboxPromise, options?: PublicCopyOptions): Promise<unknown>;\n  (value: SandboxValue, options?: PublicCopyOptions): unknown;\n} = copyFromSandboxInternal;\nexport { lint, type Diagnostic, type Fix, type LintFixResult, type LintOptions } from \"./lint.js\";\nexport { run } from \"./run.js\";\nexport { createRealm, type SafeJSRealm, type RealmOptions, type RealmResult, type RealmLimits } from \"./realm.js\";\nexport { defineExtension, type SafeJSExtension, type ExtensionDefinition, type ExtensionManifest, type ExtensionContext, type ExtensionExports, type CallbackOptions } from \"./extensions.js\";\nexport type { HostObject, HostObjectDefinition, GuestReference } from \"./interp/host-capabilities.js\";\nexport { createReplayableRandom, type ReplayableRandom } from \"./random.js\";\nexport type { RunClock, RunClockSnapshot, RunRandom } from \"./run.js\";\nexport { noopOtelSink } from \"./observability/otel.js\";\nexport type { OtelSink, OtelSpan } from \"./observability/otel.js\";\nexport { FileSnapshotBackend } from \"./snapshot/backend.js\";\nexport type { Snapshot, SnapshotBackend } from \"./snapshot/backend.js\";\nexport { declareHostOperation } from \"./interp/host-bridge.js\";\nexport { HostCallResumabilityError } from \"./interp/host-call.js\";\nexport type {\n  HostCallLifecycle,\n  HostCallOutcome,\n  HostCallRecord,\n  HostCallResumeContext,\n  HostCallResumeProof,\n  HostCallResumeProvider,\n  HostCallResumeRequest\n} from \"./interp/host-call.js\";\nexport {\n  HostOperationResumePolicyError,\n  registerPendingHostCallPolicy\n} from \"./snapshot/policy.js\";\nexport type {\n  PendingHostCallPolicyMode,\n  PendingHostCallPolicyRegistration\n} from \"./snapshot/policy.js\";\nexport { dump, type DumpOptions } from \"./dump.js\";\nexport { inspectSnapshotMigration, migrateSnapshot } from \"./migrate.js\";\nexport { migrateSnapshotFile, type SnapshotMigrationFileOptions } from \"./migration-file.js\";\nexport type {\n  SnapshotMigration,\n  SnapshotMigrationOptions,\n  SnapshotMigrationReconciliation,\n  SnapshotMigrationResolution\n} from \"./migrate.js\";\nexport { SnapshotValidationError } from \"./snapshot/validation.js\";\nexport type { SnapshotValidationCode } from \"./snapshot/validation.js\";\nexport { Budget, SandboxError } from \"./interp/budget.js\";\nexport type { BudgetName, BudgetOptions } from \"./interp/budget.js\";\nexport { formatInterpreterError, type InterpreterDiagnostic } from \"./error/format.js\";\nexport { deepCopyToSandbox } from \"./interp/values.js\";\nexport { runHarness, runHarnessPair } from \"./runner/run-harness.js\";\nexport { extractBlock } from \"./loader/extract-block.js\";\nexport { findExportedConstInitializer } from \"./loader/find-exported.js\";\nexport { splitFrontmatter } from \"./loader/frontmatter.js\";\nexport type { ExportDefaultDeclaration, ExportNamedDeclaration, MetaProperty } from \"./parse.js\";\nexport {\n  AgentSpawnError,\n  createSpawnUsageAccumulator,\n  makeAgentModule,\n  runWithSpawnUsageAccumulator\n} from \"./modules/agent.js\";\nexport type {\n  AgentModuleDefinition,\n  AgentModuleOptions,\n  AgentModuleParallelCall,\n  AgentModuleRetryOptions,\n  AgentModuleSpawnOptions,\n  AgentSpawnEvent,\n  SpawnAgent,\n  SpawnAgentInput,\n  SpawnAgentResult,\n  SpawnUsageAccumulator,\n  SpawnUsageTotal\n} from \"./modules/agent.js\";\nexport { EnvAccessError, makeEnvModule, parseEnvConfig } from \"./modules/env.js\";\nexport type { EnvModule, EnvModuleOptions } from \"./modules/env.js\";\nexport { makeFailModule } from \"./modules/fail.js\";\nexport { makeFsModule } from \"./modules/fs.js\";\nexport { parseFsConfig, resolveFsConfig } from \"./modules/fs-config.js\";\nexport type { FsConfig, ResolveFsConfigOptions } from \"./modules/fs-config.js\";\nexport type {\n  FsImplementation,\n  FsModule,\n  FsModuleOptions,\n  SandboxDirent,\n  SandboxStats\n} from \"./modules/fs.js\";\nexport { makeHarnessModule } from \"./modules/harness.js\";\nexport { makeLogModule } from \"./modules/log.js\";\nexport { makeMetricModule } from \"./modules/metric.js\";\nexport { makeMcpModule } from \"./modules/mcp.js\";\nexport { parseMcpConfig } from \"./modules/mcp-transport.js\";\nexport type { McpModuleOptions, McpServerConfig } from \"./modules/mcp-transport.js\";\nexport type { ManagedMcpClient, ManagedMcpModule, McpNamedServerHandle } from \"./modules/mcp.js\";\nexport { makeTimeModule } from \"./modules/time.js\";\n"],
+  "sourcesContent": ["import { parse as parseInternal, type ParseResult as ParsedNode } from \"./parse/parser.js\";\n\nexport { DisallowedSyntaxError } from \"./parse/parser.js\";\nexport const parse: (source: string, filename?: string) => ParsedNode = parseInternal;\nexport type {\n  ArrayPattern,\n  ArrayExpression,\n  ArrowFunctionExpression,\n  AssignmentExpression,\n  AssignmentPattern,\n  AssignmentProperty,\n  AwaitExpression,\n  BinaryExpression,\n  BlockStatement,\n  BooleanLiteral,\n  BreakStatement,\n  CallExpression,\n  CatchClause,\n  ConditionalExpression,\n  ContinueStatement,\n  DoWhileStatement,\n  EmptyStatement,\n  Expression,\n  ExpressionStatement,\n  ExportDefaultDeclaration,\n  ExportNamedDeclaration,\n  ImportDeclaration,\n  ImportDefaultSpecifier,\n  ImportNamespaceSpecifier,\n  ImportSpecifier,\n  ForInStatement,\n  ForOfStatement,\n  ForStatement,\n  FunctionDeclaration,\n  FunctionExpression,\n  Identifier,\n  IfStatement,\n  LogicalExpression,\n  MemberExpression,\n  MetaProperty,\n  NewExpression,\n  NullLiteral,\n  NumericLiteral,\n  ObjectExpression,\n  ObjectPattern,\n  ParseResult,\n  PatternTarget,\n  Property,\n  RegexLiteral,\n  RestElement,\n  ReturnStatement,\n  SequenceExpression,\n  SourceSpan,\n  SpreadElement,\n  Statement,\n  StringLiteral,\n  SwitchCase,\n  SwitchStatement,\n  TaggedTemplateExpression,\n  TemplateElement,\n  TemplateLiteral,\n  ThisExpression,\n  ThrowStatement,\n  TryStatement,\n  UnaryExpression,\n  UndefinedLiteral,\n  UpdateExpression,\n  UpdateTarget,\n  VariableDeclaration,\n  VariableDeclarationKind,\n  VariableDeclarator,\n  WhileStatement\n} from \"./parse/parser.js\";\n", "import { readFile, stat } from \"node:fs/promises\";\nimport { extname } from \"node:path\";\n\nimport { supportsSpawnMode } from \"@poe-code/agent-spawn/configs\";\nimport { SPAWN_MODES, type SpawnMode } from \"@poe-code/agent-spawn/types\";\nimport { hasOwnErrorCode } from \"../error-codes.js\";\nimport { countLineBreaks, extractBlock, maskSource } from \"../loader/extract-block.js\";\nimport { splitFrontmatter } from \"../loader/frontmatter.js\";\nimport { lint, type Diagnostic } from \"../lint.js\";\nimport { createLintModulesFromRuntimeRegistry } from \"../lint/runtime-modules.js\";\nimport type { ModuleExports, ModuleRegistry } from \"../modules/registry.js\";\nimport type { OtelSink } from \"../observability/otel.js\";\nimport { parseModule } from \"../parse/parser.js\";\nimport { run, type RunOptions, type RunResult } from \"../run.js\";\nimport type { SnapshotBackend } from \"../snapshot/backend.js\";\n\ntype HarnessMeta = {\n  filepath: string;\n  kind: unknown;\n  version: unknown;\n};\n\nexport type RunHarnessOptions = {\n  budget?: RunOptions[\"budget\"];\n  modulesFor: (frontmatter: Record<string, unknown>, meta: HarnessMeta) => ModuleRegistry;\n  otelSink?: OtelSink;\n  signal?: AbortSignal;\n  snapshotBackend?: SnapshotBackend;\n  snapshotIntervalMs?: number;\n  snapshotPath?: string;\n};\n\nexport type RunHarnessExecutionErrorResult = {\n  aborted?: true;\n  error: unknown;\n  ok: false;\n};\n\nexport type RunHarnessResult = RunResult | RunHarnessExecutionErrorResult;\n\nfunction getOwnEntry(record: Record<string, unknown>, key: string): unknown {\n  return Object.prototype.hasOwnProperty.call(record, key) ? record[key] : undefined;\n}\n\nfunction createHarnessMeta(filepath: string, frontmatter: Record<string, unknown>): HarnessMeta {\n  return {\n    filepath,\n    kind: getOwnEntry(frontmatter, \"kind\"),\n    version: getOwnEntry(frontmatter, \"version\")\n  };\n}\n\nfunction assertFrontmatterAgentModes(frontmatter: Record<string, unknown>): void {\n  const agents = getOwnEntry(frontmatter, \"agents\");\n  if (typeof agents !== \"object\" || agents === null || Array.isArray(agents)) {\n    return;\n  }\n\n  for (const [name, definition] of Object.entries(agents)) {\n    if (typeof definition !== \"object\" || definition === null || Array.isArray(definition)) {\n      continue;\n    }\n\n    const record = definition as Record<string, unknown>;\n    const agent = getOwnEntry(record, \"agent\");\n    const mode = getOwnEntry(record, \"mode\");\n    if (typeof agent !== \"string\" || typeof mode !== \"string\") {\n      continue;\n    }\n\n    // Malformed mode strings are reported by the agent module's own validation.\n    if (!SPAWN_MODES.includes(mode as SpawnMode)) {\n      continue;\n    }\n\n    if (!supportsSpawnMode(agent, mode as SpawnMode)) {\n      throw new Error(`Harness agent \"${name}\": agent \"${agent}\" does not support mode \"${mode}\".`);\n    }\n  }\n}\n\nexport class LintError extends Error {\n  readonly diagnostics: readonly Diagnostic[];\n\n  constructor(diagnostics: readonly Diagnostic[]) {\n    super(formatLintErrorMessage(diagnostics));\n    this.name = \"LintError\";\n    this.diagnostics = diagnostics;\n  }\n}\n\nexport async function runHarness(\n  filepath: string,\n  options: RunHarnessOptions\n): Promise<RunHarnessResult> {\n  const rawSource = await readHarnessFile(filepath);\n  const { executableSource, frontmatter, isRawScript } = loadExecutableSource(filepath, rawSource);\n  assertFrontmatterAgentModes(frontmatter);\n  const meta = createHarnessMeta(filepath, frontmatter);\n  const modules = excludeHarnessModule(options.modulesFor(frontmatter, meta), isRawScript);\n  const diagnostics = lint(executableSource, {\n    filename: filepath,\n    modules: createLintModulesFromRuntimeRegistry(modules)\n  });\n  const lintErrors = diagnostics.filter((diagnostic) => diagnostic.severity === \"error\");\n\n  if (lintErrors.length > 0) {\n    throw new LintError(lintErrors);\n  }\n\n  return runHarnessSource(executableSource, {\n    budget: options.budget,\n    entryPointArgs: hasDefaultExport(executableSource, filepath) ? [] : undefined,\n    filename: filepath,\n    modules,\n    otelSink: options.otelSink,\n    signal: options.signal,\n    snapshotBackend: options.snapshotBackend,\n    snapshotIntervalMs: options.snapshotIntervalMs,\n    snapshotPath: options.snapshotPath\n  });\n}\n\nexport async function runHarnessPair(\n  filepath: string,\n  options: RunHarnessOptions\n): Promise<RunHarnessResult> {\n  const pair = resolveHarnessPair(filepath);\n  const [rawMarkdown, rawScript] = await Promise.all([\n    readHarnessFile(pair.markdownPath),\n    readHarnessFile(pair.scriptPath)\n  ]);\n  const { frontmatter, body } = splitFrontmatter(stripByteOrderMark(rawMarkdown));\n  assertFrontmatterAgentModes(frontmatter);\n  const executableSource = stripByteOrderMark(rawScript);\n  const meta = createHarnessMeta(pair.markdownPath, frontmatter);\n  const modules = options.modulesFor(frontmatter, meta);\n  const diagnostics = lint(executableSource, {\n    allowedExportNames: [\"schema\"],\n    defaultExport: {\n      parameters: [\"frontmatter\"],\n      required: true\n    },\n    filename: pair.scriptPath,\n    frontmatterFields: Object.keys(frontmatter),\n    modules: createLintModulesFromRuntimeRegistry(modules)\n  });\n  const lintErrors = diagnostics.filter((diagnostic) => diagnostic.severity === \"error\");\n\n  if (lintErrors.length > 0) {\n    throw new LintError(lintErrors);\n  }\n\n  return runHarnessSource(executableSource, {\n    budget: options.budget,\n    entryPointArgs: [frontmatter],\n    filename: pair.scriptPath,\n    importMeta: {\n      body,\n      filepath: pair.markdownPath,\n      kind: meta.kind,\n      version: meta.version\n    },\n    modules,\n    otelSink: options.otelSink,\n    signal: options.signal,\n    snapshotBackend: options.snapshotBackend,\n    snapshotIntervalMs: options.snapshotIntervalMs,\n    snapshotPath: options.snapshotPath\n  });\n}\n\nasync function readHarnessFile(filepath: string): Promise<string> {\n  try {\n    const stats = await stat(filepath);\n    if (!stats.isFile()) {\n      throw new Error(`Harness path must point to a file: ${filepath}`);\n    }\n\n    return await readFile(filepath, \"utf8\");\n  } catch (error) {\n    if (hasOwnErrorCode(error, \"ENOENT\") || hasOwnErrorCode(error, \"ENOTDIR\")) {\n      throw new Error(`Harness file not found: ${filepath}`);\n    }\n\n    throw error;\n  }\n}\n\nfunction loadExecutableSource(\n  filepath: string,\n  source: string\n): {\n  executableSource: string;\n  frontmatter: Record<string, unknown>;\n  isRawScript: boolean;\n} {\n  if (isRawScriptPath(filepath)) {\n    const executableSource = stripByteOrderMark(source);\n    if (executableSource.length === 0) {\n      throw new Error(`No code block found in empty harness file: ${filepath}`);\n    }\n\n    return {\n      executableSource,\n      frontmatter: {},\n      isRawScript: true\n    };\n  }\n\n  const { frontmatter, body } = splitFrontmatter(source);\n  if (source.length === 0 || body.trim().length === 0) {\n    throw new Error(`No code block found in empty harness file: ${filepath}`);\n  }\n\n  const bodyStartOffset = source.length - body.length;\n  const { source: executableBlock, startOffset } = extractBlock(\n    body,\n    countLineBreaks(source, 0, bodyStartOffset) + 1\n  );\n  return {\n    executableSource:\n      maskSource(source.slice(0, bodyStartOffset + startOffset)) + stripHashbang(executableBlock),\n    frontmatter,\n    isRawScript: false\n  };\n}\n\nfunction resolveHarnessPair(filepath: string): { markdownPath: string; scriptPath: string } {\n  const extension = extname(filepath);\n  const basename = extension.length === 0 ? filepath : filepath.slice(0, -extension.length);\n\n  if (isRawScriptExtension(extension)) {\n    return {\n      markdownPath: `${basename}.md`,\n      scriptPath: filepath\n    };\n  }\n\n  return {\n    markdownPath: filepath,\n    scriptPath: `${basename}.ajs`\n  };\n}\n\nfunction isRawScriptPath(filepath: string): boolean {\n  return isRawScriptExtension(extname(filepath));\n}\n\nfunction isRawScriptExtension(extension: string): boolean {\n  return extension === \".safejs\" || extension === \".ajs\";\n}\n\nasync function runHarnessSource(\n  executableSource: string,\n  options: Parameters<typeof run>[1]\n): Promise<RunHarnessResult> {\n  try {\n    return await run(executableSource, options);\n  } catch (error) {\n    if (isSetupError(error)) {\n      throw error;\n    }\n\n    return {\n      ...(isAbortError(error) ? { aborted: true as const } : {}),\n      error,\n      ok: false\n    };\n  }\n}\n\nfunction isSetupError(error: unknown): boolean {\n  return error instanceof Error && error.name === \"ParseError\";\n}\n\nfunction isAbortError(error: unknown): boolean {\n  if (error instanceof Error) {\n    return error.name === \"AbortError\";\n  }\n\n  return (\n    typeof error === \"object\" &&\n    error !== null &&\n    Object.prototype.hasOwnProperty.call(error, \"name\") &&\n    (error as { name?: unknown }).name === \"AbortError\"\n  );\n}\n\nfunction hasDefaultExport(source: string, filename: string): boolean {\n  return parseModule(source, filename).body.some(\n    (statement) => statement.type === \"ExportDefaultDeclaration\"\n  );\n}\n\nfunction excludeHarnessModule(modules: ModuleRegistry, isRawScript: boolean): ModuleRegistry {\n  if (!isRawScript) {\n    return modules;\n  }\n\n  if (modules instanceof Map) {\n    const rawModules = new Map(modules);\n    rawModules.delete(\"harness\");\n    return rawModules;\n  }\n\n  const rawModules: Record<string, ModuleExports> = {};\n\n  for (const [moduleName, moduleExports] of Object.entries(modules)) {\n    if (moduleName !== \"harness\") {\n      rawModules[moduleName] = moduleExports;\n    }\n  }\n\n  return rawModules;\n}\n\nfunction stripByteOrderMark(source: string): string {\n  return source.startsWith(\"\\uFEFF\") ? source.slice(1) : source;\n}\n\nfunction stripHashbang(source: string): string {\n  if (!source.startsWith(\"#!\")) {\n    return source;\n  }\n\n  let end = 2;\n  while (end < source.length && source[end] !== \"\\n\" && source[end] !== \"\\r\") end += 1;\n  return `${\" \".repeat(end)}${source.slice(end)}`;\n}\n\nfunction formatLintErrorMessage(diagnostics: readonly Diagnostic[]): string {\n  if (diagnostics.length === 0) {\n    return \"Script lint failed.\";\n  }\n\n  return diagnostics\n    .map(\n      (diagnostic) =>\n        `${diagnostic.filename}:${diagnostic.line}:${diagnostic.column} ${diagnostic.code} ${diagnostic.message}`\n    )\n    .join(\"\\n\");\n}\n", "import type { Expression, Module } from \"../parse/parser.js\";\n\nexport function findExportedConstInitializer(module: Module, name: string): Expression | undefined {\n  for (const statement of module.body) {\n    if (statement.type === \"ExportDefaultDeclaration\") {\n      if (name === \"default\") {\n        return statement.declaration;\n      }\n\n      continue;\n    }\n\n    if (statement.type !== \"ExportNamedDeclaration\") {\n      continue;\n    }\n\n    const declaration = statement.declaration;\n    if (declaration.kind !== \"const\") {\n      throw new Error(`Exported '${name}' must be declared with const.`);\n    }\n\n    if (declaration.declarations.length !== 1) {\n      throw new Error(\"Exported const declarations must contain exactly one declarator.\");\n    }\n\n    const declarator = declaration.declarations[0]!;\n    if (declarator.id.type !== \"Identifier\") {\n      throw new Error(\"Destructured exported const bindings are not supported.\");\n    }\n\n    if (declarator.id.name !== name) {\n      continue;\n    }\n\n    if (declarator.init === undefined) {\n      throw new Error(`Exported const '${name}' must have an initializer.`);\n    }\n\n    return declarator.init;\n  }\n\n  return undefined;\n}\n", "import { webcrypto as crypto } from \"node:crypto\";\n\nimport { createSeededRandom } from \"../interp/globals/math.js\";\n\nexport type TimeModuleOptions = {\n  now?: () => number;\n  random?: () => number;\n  seed?: number;\n  signal?: AbortSignal;\n};\n\nexport function makeTimeModule(options: TimeModuleOptions = {}): {\n  random: () => number;\n  now: () => number;\n  sleep: (ms: number) => Promise<void>;\n  uuid: () => string;\n} {\n  const hasDeterministicRandom = options.random !== undefined || options.seed !== undefined;\n  const random =\n    options.random ??\n    (options.seed === undefined ? () => Math.random() : createSeededRandom(options.seed).next);\n  const now = options.now ?? (() => Date.now());\n  const signal = options.signal;\n\n  async function sleep(ms: number): Promise<void> {\n    assertSleepDelay(ms);\n\n    return await new Promise<void>((resolve, reject) => {\n      if (signal?.aborted === true) {\n        reject(createSleepAbortError());\n        return;\n      }\n\n      const start = performance.now();\n      let timeout = setTimeout(resolveSleep, ms);\n\n      function cleanup(): void {\n        clearTimeout(timeout);\n        signal?.removeEventListener(\"abort\", rejectSleep);\n      }\n\n      function resolveSleep(): void {\n        const remainingMs = ms - (performance.now() - start);\n        if (remainingMs > 0) {\n          timeout = setTimeout(resolveSleep, remainingMs);\n          return;\n        }\n\n        cleanup();\n        resolve();\n      }\n\n      function rejectSleep(): void {\n        cleanup();\n        reject(createSleepAbortError());\n      }\n\n      signal?.addEventListener(\"abort\", rejectSleep, { once: true });\n    });\n  }\n\n  return {\n    random,\n    now,\n    sleep,\n    uuid: hasDeterministicRandom ? () => createRandomUuid(random) : () => crypto.randomUUID()\n  };\n}\n\nfunction createRandomUuid(random: () => number): string {\n  const bytes = Array.from({ length: 16 }, () => Math.floor(readRandomUnit(random()) * 256));\n  bytes[6] = (bytes[6] & 0x0f) | 0x40;\n  bytes[8] = (bytes[8] & 0x3f) | 0x80;\n  const hex = bytes.map((byte) => byte.toString(16).padStart(2, \"0\")).join(\"\");\n\n  return [\n    hex.slice(0, 8),\n    hex.slice(8, 12),\n    hex.slice(12, 16),\n    hex.slice(16, 20),\n    hex.slice(20)\n  ].join(\"-\");\n}\n\nfunction readRandomUnit(value: number): number {\n  if (Number.isFinite(value) && value >= 0 && value < 1) {\n    return value;\n  }\n\n  throw new RangeError(\"time.uuid() random source must return a number in [0, 1).\");\n}\n\nfunction assertSleepDelay(ms: number): void {\n  if (Number.isFinite(ms) && ms >= 0) {\n    return;\n  }\n\n  throw new RangeError(\"time.sleep(ms) requires a non-negative finite millisecond delay.\");\n}\n\nfunction createSleepAbortError(): Error {\n  return new Error(\"time.sleep aborted.\");\n}\n", "import { parseModule as parseModuleInternal, type Module } from \"./parse/parser.js\";\nimport { restore as restoreInternal, type SafeJSSnapshot, type RestoreOptions } from \"./restore.js\";\nimport {\n  deepCopyFromSandbox as copyFromSandboxInternal,\n  type SandboxPromise,\n  type SandboxValue\n} from \"./interp/values.js\";\n\nexport { parse } from \"./parse.js\";\nexport const parseModule: (source: string, filename?: string) => Module = parseModuleInternal;\nexport const restore: <TSnapshot extends SafeJSSnapshot>(\n  snapshot: TSnapshot,\n  options: RestoreOptions\n) => TSnapshot = restoreInternal;\ntype PublicCopyOptions = Omit<\n  NonNullable<Parameters<typeof copyFromSandboxInternal>[1]>,\n  \"compilation\" | \"unwrapHostObject\"\n>;\nexport const deepCopyFromSandbox: {\n  (value: SandboxPromise, options?: PublicCopyOptions): Promise<unknown>;\n  (value: SandboxValue, options?: PublicCopyOptions): unknown;\n} = copyFromSandboxInternal;\nexport { lint, type Diagnostic, type Fix, type LintFixResult, type LintOptions } from \"./lint.js\";\nexport { run } from \"./run.js\";\nexport { createRealm, type SafeJSRealm, type RealmOptions, type RealmResult, type RealmLimits } from \"./realm.js\";\nexport { defineExtension, type SafeJSExtension, type ExtensionDefinition, type ExtensionManifest, type ExtensionContext, type ExtensionExports, type CallbackOptions } from \"./extensions.js\";\nexport type { HostObject, HostObjectDefinition, HostObjectIndexedDefinition, HostObjectNamedDefinition, GuestReference } from \"./interp/host-capabilities.js\";\nexport { createReplayableRandom, type ReplayableRandom } from \"./random.js\";\nexport type { RunClock, RunClockSnapshot, RunRandom } from \"./run.js\";\nexport { noopOtelSink } from \"./observability/otel.js\";\nexport type { OtelSink, OtelSpan } from \"./observability/otel.js\";\nexport { FileSnapshotBackend } from \"./snapshot/backend.js\";\nexport type { Snapshot, SnapshotBackend } from \"./snapshot/backend.js\";\nexport { declareHostOperation } from \"./interp/host-bridge.js\";\nexport { HostCallResumabilityError } from \"./interp/host-call.js\";\nexport type {\n  HostCallLifecycle,\n  HostCallOutcome,\n  HostCallRecord,\n  HostCallResumeContext,\n  HostCallResumeProof,\n  HostCallResumeProvider,\n  HostCallResumeRequest\n} from \"./interp/host-call.js\";\nexport {\n  HostOperationResumePolicyError,\n  registerPendingHostCallPolicy\n} from \"./snapshot/policy.js\";\nexport type {\n  PendingHostCallPolicyMode,\n  PendingHostCallPolicyRegistration\n} from \"./snapshot/policy.js\";\nexport { dump, type DumpOptions } from \"./dump.js\";\nexport { inspectSnapshotMigration, migrateSnapshot } from \"./migrate.js\";\nexport { migrateSnapshotFile, type SnapshotMigrationFileOptions } from \"./migration-file.js\";\nexport type {\n  SnapshotMigration,\n  SnapshotMigrationOptions,\n  SnapshotMigrationReconciliation,\n  SnapshotMigrationResolution\n} from \"./migrate.js\";\nexport { SnapshotValidationError } from \"./snapshot/validation.js\";\nexport type { SnapshotValidationCode } from \"./snapshot/validation.js\";\nexport { Budget, SandboxError } from \"./interp/budget.js\";\nexport type { BudgetName, BudgetOptions } from \"./interp/budget.js\";\nexport { formatInterpreterError, type InterpreterDiagnostic } from \"./error/format.js\";\nexport { deepCopyToSandbox } from \"./interp/values.js\";\nexport { runHarness, runHarnessPair } from \"./runner/run-harness.js\";\nexport { extractBlock } from \"./loader/extract-block.js\";\nexport { findExportedConstInitializer } from \"./loader/find-exported.js\";\nexport { splitFrontmatter } from \"./loader/frontmatter.js\";\nexport type { ExportDefaultDeclaration, ExportNamedDeclaration, MetaProperty } from \"./parse.js\";\nexport {\n  AgentSpawnError,\n  createSpawnUsageAccumulator,\n  makeAgentModule,\n  runWithSpawnUsageAccumulator\n} from \"./modules/agent.js\";\nexport type {\n  AgentModuleDefinition,\n  AgentModuleOptions,\n  AgentModuleParallelCall,\n  AgentModuleRetryOptions,\n  AgentModuleSpawnOptions,\n  AgentSpawnEvent,\n  SpawnAgent,\n  SpawnAgentInput,\n  SpawnAgentResult,\n  SpawnUsageAccumulator,\n  SpawnUsageTotal\n} from \"./modules/agent.js\";\nexport { EnvAccessError, makeEnvModule, parseEnvConfig } from \"./modules/env.js\";\nexport type { EnvModule, EnvModuleOptions } from \"./modules/env.js\";\nexport { makeFailModule } from \"./modules/fail.js\";\nexport { makeFsModule } from \"./modules/fs.js\";\nexport { parseFsConfig, resolveFsConfig } from \"./modules/fs-config.js\";\nexport type { FsConfig, ResolveFsConfigOptions } from \"./modules/fs-config.js\";\nexport type {\n  FsImplementation,\n  FsModule,\n  FsModuleOptions,\n  SandboxDirent,\n  SandboxStats\n} from \"./modules/fs.js\";\nexport { makeHarnessModule } from \"./modules/harness.js\";\nexport { makeLogModule } from \"./modules/log.js\";\nexport { makeMetricModule } from \"./modules/metric.js\";\nexport { makeMcpModule } from \"./modules/mcp.js\";\nexport { parseMcpConfig } from \"./modules/mcp-transport.js\";\nexport type { McpModuleOptions, McpServerConfig } from \"./modules/mcp-transport.js\";\nexport type { ManagedMcpClient, ManagedMcpModule, McpNamedServerHandle } from \"./modules/mcp.js\";\nexport { makeTimeModule } from \"./modules/time.js\";\n"],
   "mappings": ";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAGO,IAAMA,SAA2D;;;ACHxE,SAAS,UAAU,YAAY;AAC/B,SAAS,eAAe;AAuCxB,SAAS,YAAY,QAAiC,KAAsB;AAC1E,SAAO,OAAO,UAAU,eAAe,KAAK,QAAQ,GAAG,IAAI,OAAO,GAAG,IAAI;AAC3E;AAEA,SAAS,kBAAkB,UAAkB,aAAmD;AAC9F,SAAO;AAAA,IACL;AAAA,IACA,MAAM,YAAY,aAAa,MAAM;AAAA,IACrC,SAAS,YAAY,aAAa,SAAS;AAAA,EAC7C;AACF;AAEA,SAAS,4BAA4B,aAA4C;AAC/E,QAAM,SAAS,YAAY,aAAa,QAAQ;AAChD,MAAI,OAAO,WAAW,YAAY,WAAW,QAAQ,MAAM,QAAQ,MAAM,GAAG;AAC1E;AAAA,EACF;AAEA,aAAW,CAAC,MAAM,UAAU,KAAK,OAAO,QAAQ,MAAM,GAAG;AACvD,QAAI,OAAO,eAAe,YAAY,eAAe,QAAQ,MAAM,QAAQ,UAAU,GAAG;AACtF;AAAA,IACF;AAEA,UAAM,SAAS;AACf,UAAM,QAAQ,YAAY,QAAQ,OAAO;AACzC,UAAM,OAAO,YAAY,QAAQ,MAAM;AACvC,QAAI,OAAO,UAAU,YAAY,OAAO,SAAS,UAAU;AACzD;AAAA,IACF;AAGA,QAAI,CAAC,YAAY,SAAS,IAAiB,GAAG;AAC5C;AAAA,IACF;AAEA,QAAI,CAAC,kBAAkB,OAAO,IAAiB,GAAG;AAChD,YAAM,IAAI,MAAM,kBAAkB,IAAI,aAAa,KAAK,4BAA4B,IAAI,IAAI;AAAA,IAC9F;AAAA,EACF;AACF;AAEO,IAAM,YAAN,cAAwB,MAAM;AAAA,EAC1B;AAAA,EAET,YAAY,aAAoC;AAC9C,UAAM,uBAAuB,WAAW,CAAC;AACzC,SAAK,OAAO;AACZ,SAAK,cAAc;AAAA,EACrB;AACF;AAEA,eAAsB,WACpB,UACA,SAC2B;AAC3B,QAAM,YAAY,MAAM,gBAAgB,QAAQ;AAChD,QAAM,EAAE,kBAAkB,aAAa,YAAY,IAAI,qBAAqB,UAAU,SAAS;AAC/F,8BAA4B,WAAW;AACvC,QAAM,OAAO,kBAAkB,UAAU,WAAW;AACpD,QAAM,UAAU,qBAAqB,QAAQ,WAAW,aAAa,IAAI,GAAG,WAAW;AACvF,QAAM,cAAc,KAAK,kBAAkB;AAAA,IACzC,UAAU;AAAA,IACV,SAAS,qCAAqC,OAAO;AAAA,EACvD,CAAC;AACD,QAAM,aAAa,YAAY,OAAO,CAAC,eAAe,WAAW,aAAa,OAAO;AAErF,MAAI,WAAW,SAAS,GAAG;AACzB,UAAM,IAAI,UAAU,UAAU;AAAA,EAChC;AAEA,SAAO,iBAAiB,kBAAkB;AAAA,IACxC,QAAQ,QAAQ;AAAA,IAChB,gBAAgB,iBAAiB,kBAAkB,QAAQ,IAAI,CAAC,IAAI;AAAA,IACpE,UAAU;AAAA,IACV;AAAA,IACA,UAAU,QAAQ;AAAA,IAClB,QAAQ,QAAQ;AAAA,IAChB,iBAAiB,QAAQ;AAAA,IACzB,oBAAoB,QAAQ;AAAA,IAC5B,cAAc,QAAQ;AAAA,EACxB,CAAC;AACH;AAEA,eAAsB,eACpB,UACA,SAC2B;AAC3B,QAAM,OAAO,mBAAmB,QAAQ;AACxC,QAAM,CAAC,aAAa,SAAS,IAAI,MAAM,QAAQ,IAAI;AAAA,IACjD,gBAAgB,KAAK,YAAY;AAAA,IACjC,gBAAgB,KAAK,UAAU;AAAA,EACjC,CAAC;AACD,QAAM,EAAE,aAAa,KAAK,IAAI,iBAAiB,mBAAmB,WAAW,CAAC;AAC9E,8BAA4B,WAAW;AACvC,QAAM,mBAAmB,mBAAmB,SAAS;AACrD,QAAM,OAAO,kBAAkB,KAAK,cAAc,WAAW;AAC7D,QAAM,UAAU,QAAQ,WAAW,aAAa,IAAI;AACpD,QAAM,cAAc,KAAK,kBAAkB;AAAA,IACzC,oBAAoB,CAAC,QAAQ;AAAA,IAC7B,eAAe;AAAA,MACb,YAAY,CAAC,aAAa;AAAA,MAC1B,UAAU;AAAA,IACZ;AAAA,IACA,UAAU,KAAK;AAAA,IACf,mBAAmB,OAAO,KAAK,WAAW;AAAA,IAC1C,SAAS,qCAAqC,OAAO;AAAA,EACvD,CAAC;AACD,QAAM,aAAa,YAAY,OAAO,CAAC,eAAe,WAAW,aAAa,OAAO;AAErF,MAAI,WAAW,SAAS,GAAG;AACzB,UAAM,IAAI,UAAU,UAAU;AAAA,EAChC;AAEA,SAAO,iBAAiB,kBAAkB;AAAA,IACxC,QAAQ,QAAQ;AAAA,IAChB,gBAAgB,CAAC,WAAW;AAAA,IAC5B,UAAU,KAAK;AAAA,IACf,YAAY;AAAA,MACV;AAAA,MACA,UAAU,KAAK;AAAA,MACf,MAAM,KAAK;AAAA,MACX,SAAS,KAAK;AAAA,IAChB;AAAA,IACA;AAAA,IACA,UAAU,QAAQ;AAAA,IAClB,QAAQ,QAAQ;AAAA,IAChB,iBAAiB,QAAQ;AAAA,IACzB,oBAAoB,QAAQ;AAAA,IAC5B,cAAc,QAAQ;AAAA,EACxB,CAAC;AACH;AAEA,eAAe,gBAAgB,UAAmC;AAChE,MAAI;AACF,UAAM,QAAQ,MAAM,KAAK,QAAQ;AACjC,QAAI,CAAC,MAAM,OAAO,GAAG;AACnB,YAAM,IAAI,MAAM,sCAAsC,QAAQ,EAAE;AAAA,IAClE;AAEA,WAAO,MAAM,SAAS,UAAU,MAAM;AAAA,EACxC,SAAS,OAAO;AACd,QAAI,gBAAgB,OAAO,QAAQ,KAAK,gBAAgB,OAAO,SAAS,GAAG;AACzE,YAAM,IAAI,MAAM,2BAA2B,QAAQ,EAAE;AAAA,IACvD;AAEA,UAAM;AAAA,EACR;AACF;AAEA,SAAS,qBACP,UACA,QAKA;AACA,MAAI,gBAAgB,QAAQ,GAAG;AAC7B,UAAM,mBAAmB,mBAAmB,MAAM;AAClD,QAAI,iBAAiB,WAAW,GAAG;AACjC,YAAM,IAAI,MAAM,8CAA8C,QAAQ,EAAE;AAAA,IAC1E;AAEA,WAAO;AAAA,MACL;AAAA,MACA,aAAa,CAAC;AAAA,MACd,aAAa;AAAA,IACf;AAAA,EACF;AAEA,QAAM,EAAE,aAAa,KAAK,IAAI,iBAAiB,MAAM;AACrD,MAAI,OAAO,WAAW,KAAK,KAAK,KAAK,EAAE,WAAW,GAAG;AACnD,UAAM,IAAI,MAAM,8CAA8C,QAAQ,EAAE;AAAA,EAC1E;AAEA,QAAM,kBAAkB,OAAO,SAAS,KAAK;AAC7C,QAAM,EAAE,QAAQ,iBAAiB,YAAY,IAAI;AAAA,IAC/C;AAAA,IACA,gBAAgB,QAAQ,GAAG,eAAe,IAAI;AAAA,EAChD;AACA,SAAO;AAAA,IACL,kBACE,WAAW,OAAO,MAAM,GAAG,kBAAkB,WAAW,CAAC,IAAI,cAAc,eAAe;AAAA,IAC5F;AAAA,IACA,aAAa;AAAA,EACf;AACF;AAEA,SAAS,mBAAmB,UAAgE;AAC1F,QAAM,YAAY,QAAQ,QAAQ;AAClC,QAAM,WAAW,UAAU,WAAW,IAAI,WAAW,SAAS,MAAM,GAAG,CAAC,UAAU,MAAM;AAExF,MAAI,qBAAqB,SAAS,GAAG;AACnC,WAAO;AAAA,MACL,cAAc,GAAG,QAAQ;AAAA,MACzB,YAAY;AAAA,IACd;AAAA,EACF;AAEA,SAAO;AAAA,IACL,cAAc;AAAA,IACd,YAAY,GAAG,QAAQ;AAAA,EACzB;AACF;AAEA,SAAS,gBAAgB,UAA2B;AAClD,SAAO,qBAAqB,QAAQ,QAAQ,CAAC;AAC/C;AAEA,SAAS,qBAAqB,WAA4B;AACxD,SAAO,cAAc,aAAa,cAAc;AAClD;AAEA,eAAe,iBACb,kBACA,SAC2B;AAC3B,MAAI;AACF,WAAO,MAAM,IAAI,kBAAkB,OAAO;AAAA,EAC5C,SAAS,OAAO;AACd,QAAI,aAAa,KAAK,GAAG;AACvB,YAAM;AAAA,IACR;AAEA,WAAO;AAAA,MACL,GAAI,aAAa,KAAK,IAAI,EAAE,SAAS,KAAc,IAAI,CAAC;AAAA,MACxD;AAAA,MACA,IAAI;AAAA,IACN;AAAA,EACF;AACF;AAEA,SAAS,aAAa,OAAyB;AAC7C,SAAO,iBAAiB,SAAS,MAAM,SAAS;AAClD;AAEA,SAAS,aAAa,OAAyB;AAC7C,MAAI,iBAAiB,OAAO;AAC1B,WAAO,MAAM,SAAS;AAAA,EACxB;AAEA,SACE,OAAO,UAAU,YACjB,UAAU,QACV,OAAO,UAAU,eAAe,KAAK,OAAO,MAAM,KACjD,MAA6B,SAAS;AAE3C;AAEA,SAAS,iBAAiB,QAAgB,UAA2B;AACnE,SAAO,YAAY,QAAQ,QAAQ,EAAE,KAAK;AAAA,IACxC,CAAC,cAAc,UAAU,SAAS;AAAA,EACpC;AACF;AAEA,SAAS,qBAAqB,SAAyB,aAAsC;AAC3F,MAAI,CAAC,aAAa;AAChB,WAAO;AAAA,EACT;AAEA,MAAI,mBAAmB,KAAK;AAC1B,UAAMC,cAAa,IAAI,IAAI,OAAO;AAClC,IAAAA,YAAW,OAAO,SAAS;AAC3B,WAAOA;AAAA,EACT;AAEA,QAAM,aAA4C,CAAC;AAEnD,aAAW,CAAC,YAAY,aAAa,KAAK,OAAO,QAAQ,OAAO,GAAG;AACjE,QAAI,eAAe,WAAW;AAC5B,iBAAW,UAAU,IAAI;AAAA,IAC3B;AAAA,EACF;AAEA,SAAO;AACT;AAEA,SAAS,mBAAmB,QAAwB;AAClD,SAAO,OAAO,WAAW,QAAQ,IAAI,OAAO,MAAM,CAAC,IAAI;AACzD;AAEA,SAAS,cAAc,QAAwB;AAC7C,MAAI,CAAC,OAAO,WAAW,IAAI,GAAG;AAC5B,WAAO;AAAA,EACT;AAEA,MAAI,MAAM;AACV,SAAO,MAAM,OAAO,UAAU,OAAO,GAAG,MAAM,QAAQ,OAAO,GAAG,MAAM,KAAM,QAAO;AACnF,SAAO,GAAG,IAAI,OAAO,GAAG,CAAC,GAAG,OAAO,MAAM,GAAG,CAAC;AAC/C;AAEA,SAAS,uBAAuB,aAA4C;AAC1E,MAAI,YAAY,WAAW,GAAG;AAC5B,WAAO;AAAA,EACT;AAEA,SAAO,YACJ;AAAA,IACC,CAAC,eACC,GAAG,WAAW,QAAQ,IAAI,WAAW,IAAI,IAAI,WAAW,MAAM,IAAI,WAAW,IAAI,IAAI,WAAW,OAAO;AAAA,EAC3G,EACC,KAAK,IAAI;AACd;;;ACpVO,SAAS,6BAA6B,QAAgB,MAAsC;AACjG,aAAW,aAAa,OAAO,MAAM;AACnC,QAAI,UAAU,SAAS,4BAA4B;AACjD,UAAI,SAAS,WAAW;AACtB,eAAO,UAAU;AAAA,MACnB;AAEA;AAAA,IACF;AAEA,QAAI,UAAU,SAAS,0BAA0B;AAC/C;AAAA,IACF;AAEA,UAAM,cAAc,UAAU;AAC9B,QAAI,YAAY,SAAS,SAAS;AAChC,YAAM,IAAI,MAAM,aAAa,IAAI,gCAAgC;AAAA,IACnE;AAEA,QAAI,YAAY,aAAa,WAAW,GAAG;AACzC,YAAM,IAAI,MAAM,kEAAkE;AAAA,IACpF;AAEA,UAAM,aAAa,YAAY,aAAa,CAAC;AAC7C,QAAI,WAAW,GAAG,SAAS,cAAc;AACvC,YAAM,IAAI,MAAM,yDAAyD;AAAA,IAC3E;AAEA,QAAI,WAAW,GAAG,SAAS,MAAM;AAC/B;AAAA,IACF;AAEA,QAAI,WAAW,SAAS,QAAW;AACjC,YAAM,IAAI,MAAM,mBAAmB,IAAI,6BAA6B;AAAA,IACtE;AAEA,WAAO,WAAW;AAAA,EACpB;AAEA,SAAO;AACT;;;AC1CA,SAAS,aAAa,cAAc;AAW7B,SAAS,eAAe,UAA6B,CAAC,GAK3D;AACA,QAAM,yBAAyB,QAAQ,WAAW,UAAa,QAAQ,SAAS;AAChF,QAAM,SACJ,QAAQ,WACP,QAAQ,SAAS,SAAY,MAAM,KAAK,OAAO,IAAI,mBAAmB,QAAQ,IAAI,EAAE;AACvF,QAAM,MAAM,QAAQ,QAAQ,MAAM,KAAK,IAAI;AAC3C,QAAM,SAAS,QAAQ;AAEvB,iBAAe,MAAM,IAA2B;AAC9C,qBAAiB,EAAE;AAEnB,WAAO,MAAM,IAAI,QAAc,CAAC,SAAS,WAAW;AAClD,UAAI,QAAQ,YAAY,MAAM;AAC5B,eAAO,sBAAsB,CAAC;AAC9B;AAAA,MACF;AAEA,YAAM,QAAQ,YAAY,IAAI;AAC9B,UAAI,UAAU,WAAW,cAAc,EAAE;AAEzC,eAAS,UAAgB;AACvB,qBAAa,OAAO;AACpB,gBAAQ,oBAAoB,SAAS,WAAW;AAAA,MAClD;AAEA,eAAS,eAAqB;AAC5B,cAAM,cAAc,MAAM,YAAY,IAAI,IAAI;AAC9C,YAAI,cAAc,GAAG;AACnB,oBAAU,WAAW,cAAc,WAAW;AAC9C;AAAA,QACF;AAEA,gBAAQ;AACR,gBAAQ;AAAA,MACV;AAEA,eAAS,cAAoB;AAC3B,gBAAQ;AACR,eAAO,sBAAsB,CAAC;AAAA,MAChC;AAEA,cAAQ,iBAAiB,SAAS,aAAa,EAAE,MAAM,KAAK,CAAC;AAAA,IAC/D,CAAC;AAAA,EACH;AAEA,SAAO;AAAA,IACL;AAAA,IACA;AAAA,IACA;AAAA,IACA,MAAM,yBAAyB,MAAM,iBAAiB,MAAM,IAAI,MAAM,OAAO,WAAW;AAAA,EAC1F;AACF;AAEA,SAAS,iBAAiB,QAA8B;AACtD,QAAM,QAAQ,MAAM,KAAK,EAAE,QAAQ,GAAG,GAAG,MAAM,KAAK,MAAM,eAAe,OAAO,CAAC,IAAI,GAAG,CAAC;AACzF,QAAM,CAAC,IAAK,MAAM,CAAC,IAAI,KAAQ;AAC/B,QAAM,CAAC,IAAK,MAAM,CAAC,IAAI,KAAQ;AAC/B,QAAM,MAAM,MAAM,IAAI,CAAC,SAAS,KAAK,SAAS,EAAE,EAAE,SAAS,GAAG,GAAG,CAAC,EAAE,KAAK,EAAE;AAE3E,SAAO;AAAA,IACL,IAAI,MAAM,GAAG,CAAC;AAAA,IACd,IAAI,MAAM,GAAG,EAAE;AAAA,IACf,IAAI,MAAM,IAAI,EAAE;AAAA,IAChB,IAAI,MAAM,IAAI,EAAE;AAAA,IAChB,IAAI,MAAM,EAAE;AAAA,EACd,EAAE,KAAK,GAAG;AACZ;AAEA,SAAS,eAAe,OAAuB;AAC7C,MAAI,OAAO,SAAS,KAAK,KAAK,SAAS,KAAK,QAAQ,GAAG;AACrD,WAAO;AAAA,EACT;AAEA,QAAM,IAAI,WAAW,2DAA2D;AAClF;AAEA,SAAS,iBAAiB,IAAkB;AAC1C,MAAI,OAAO,SAAS,EAAE,KAAK,MAAM,GAAG;AAClC;AAAA,EACF;AAEA,QAAM,IAAI,WAAW,kEAAkE;AACzF;AAEA,SAAS,wBAA+B;AACtC,SAAO,IAAI,MAAM,qBAAqB;AACxC;;;AC7FO,IAAMC,eAA6D;AACnE,IAAMC,WAGI;AAKV,IAAMC,uBAGT;",
   "names": ["parse", "rawModules", "parseModule", "restore", "deepCopyFromSandbox"]
 }

package/packages/safe-js/dist/interp/async.js

@@ -114,6 +114,7 @@ export function createInterpretedClosure(node, context, evaluateNode) {
 function createGeneratorClosure(node, context, evaluateNode) {
     return createSandboxClosure({
         guest: true,
+        generator: true,
         sandbox: true,
         length: getFunctionLength(node.params),
         ...(node.id === undefined ? {} : { name: node.id.name }),

package/packages/safe-js/dist/interp/globals/object-array.d.ts

@@ -1,7 +1,7 @@
 import type { Budget, CompileOwner } from "../budget.js";
-import { type SandboxClosure, type SandboxObject } from "../values.js";
+import { type SandboxClosure } from "../values.js";
 export type ObjectArrayGlobals = {
-    Object: SandboxObject;
+    Object: SandboxClosure;
     Array: SandboxClosure;
     String: SandboxClosure;
     Number: SandboxClosure;

package/packages/safe-js/dist/interp/globals/object-array.js

@@ -1,5 +1,6 @@
 import { dateTime, isSandboxDate } from "../date.js";
 import { getDatePrototype } from "./date.js";
+import { createObjectGlobal, hasOwnSandboxProperty } from "./object.js";
 import { getHostObjectKeys, isGuestHostObject } from "../host-capabilities.js";
 import { isFloat32Array } from "../float32.js";
 import { setSandboxProperty } from "../interpreter.js";
@@ -9,7 +10,7 @@ import { getSandboxPrototype, isGuestClosure, markDescriptorObject, materializeF
 import { allocateProducedSandboxValue, createSandboxClosure, deepCopyToSandbox, isSandboxClosure, isSandboxGenerator, isSandboxMap, isSandboxPromise, isSandboxRegex, isSandboxSet, ownEnumerableSandboxEntries as getOwnEnumerableEntries } from "../values.js";
 export function createObjectArrayGlobals(options) {
     return {
-        Object: {
+        Object: createObjectGlobal({
             keys: createSandboxClosure({
                 sandbox: true,
                 call: ([value]) => budgetSandboxValue(getOwnEnumerableKeys(value), options.budget),
@@ -27,7 +28,14 @@ export function createObjectArrayGlobals(options) {
             }),
             hasOwn: createSandboxClosure({
                 sandbox: true,
-                call: ([value, key]) => Reflect.apply(Object.hasOwn, Object, [isSandboxClosure(value) ? objectProperties(value) : value, key]),
+                call: ([value, key], context) => {
+                    if (value === null || value === undefined)
+                        throw new TypeError("Cannot convert undefined or null to object.");
+                    const name = sandboxString(key, options.budget, context);
+                    return typeof name === "string"
+                        ? hasOwnSandboxProperty(value, name, false)
+                        : name.then(property => hasOwnSandboxProperty(value, property, false));
+                },
                 name: "hasOwn"
             }),
             getOwnPropertyDescriptor: createSandboxClosure({
@@ -70,7 +78,7 @@ export function createObjectArrayGlobals(options) {
                     if (isSandboxDate(value))
                         return getDatePrototype(value, options.budget, options.compileOwner);
                     objectProperties(value);
-                    return getSandboxPrototype(value);
+                    return getSandboxPrototype(value, options.budget);
                 },
                 name: "getPrototypeOf"
             }),
@@ -124,6 +132,8 @@ export function createObjectArrayGlobals(options) {
             freeze: createSandboxClosure({
                 sandbox: true,
                 call: ([value]) => {
+                    if (isGuestHostObject(value))
+                        throw new TypeError("Live host objects cannot be frozen.");
                     if (typeof value === "object" && value !== null) {
                         Object.freeze(isGuestClosure(value) ? materializeFunctionProperties(value) : value);
                     }
@@ -141,7 +151,7 @@ export function createObjectArrayGlobals(options) {
                 call: ([target, ...sources]) => assignSandboxValues(target, sources, options.budget),
                 name: "assign"
             })
-        },
+        }, options.budget),
         Array: createSandboxClosure({
             sandbox: true,
             call: (args) => createArrayFromConstructorArgs(args, options.budget),
@@ -358,6 +368,24 @@ function isAssignableSandboxTarget(value) {
 async function arrayFromSandboxValues(args, budget) {
     const [items, mapFn, thisValue] = args;
     const iterator = getSandboxIterator(items);
+    if (isGuestHostObject(items) && iterator !== undefined) {
+        if (mapFn !== undefined && !isSandboxClosure(mapFn))
+            throw new TypeError("Array.from mapping callback must be a function.");
+        const values = [];
+        while (true) {
+            const next = await iterator.next();
+            if (next.done)
+                break;
+            budget.allocateArrayLength(values.length + 1);
+            const value = mapFn === undefined
+                ? next.value
+                : await mapFn.call([next.value, values.length], { stack: [], thisValue });
+            if (isSandboxPromise(value) && value.synchronousPrefix !== undefined)
+                await value.synchronousPrefix;
+            values.push(value);
+        }
+        return allocateProducedSandboxValue(values, budget);
+    }
     const values = iterator === undefined
         ? Reflect.apply(Array.from, Array, [items])
         : await collectIteratorValues(iterator);

package/packages/safe-js/dist/interp/globals/object.d.ts

@@ -0,0 +1,4 @@
+import type { Budget } from "../budget.js";
+import { type SandboxClosure, type SandboxObject, type SandboxValue } from "../values.js";
+export declare function createObjectGlobal(methods: SandboxObject, budget: Budget): SandboxClosure;
+export declare function hasOwnSandboxProperty(value: SandboxValue, key: string, enumerable: boolean): boolean;

package/packages/safe-js/dist/interp/globals/object.js

@@ -0,0 +1,153 @@
+import { assertSandboxDataDepth } from "../../graph-depth.js";
+import { isSandboxDate } from "../date.js";
+import { isSandboxErrorConstructorInstance } from "../exceptions.js";
+import { isFloat32Array } from "../float32.js";
+import { hasHostObjectMember, isGuestHostObject } from "../host-capabilities.js";
+import { getSandboxPrototype, installObjectPrototype, isGuestClosure, markDescriptorObject, materializeFunctionProperties } from "../object-model.js";
+import { sandboxString } from "../string-coercion.js";
+import { createSandboxClosure, isSandboxClosure, isSandboxGenerator, isSandboxMap, isSandboxPromise, isSandboxRegex, isSandboxSet } from "../values.js";
+export function createObjectGlobal(methods, budget) {
+    const construct = ([value]) => {
+        if (value === null || value === undefined) {
+            budget.chargeDataUsage(1);
+            return Object.create(null);
+        }
+        if (typeof value !== "object")
+            throw new TypeError("Object primitive boxing is not supported.");
+        return value;
+    };
+    const constructor = createSandboxClosure({
+        guest: true,
+        sandbox: true,
+        name: "Object",
+        length: 1,
+        call: construct,
+        construct
+    });
+    const properties = materializeFunctionProperties(constructor);
+    const prototype = properties.prototype;
+    Object.defineProperty(properties, "prototype", { writable: false });
+    for (const [name, method] of Object.entries(methods)) {
+        Object.defineProperty(properties, name, { value: method, writable: true, configurable: true });
+    }
+    const prototypeMethods = {
+        toString: createSandboxClosure({
+            sandbox: true,
+            name: "toString",
+            length: 0,
+            call: (_args, context) => budget.allocateString(`[object ${typeTag(context?.thisValue)}]`)
+        }),
+        valueOf: createSandboxClosure({
+            sandbox: true,
+            name: "valueOf",
+            length: 0,
+            call: (_args, context) => {
+                const value = requireReceiver(context?.thisValue);
+                if (typeof value !== "object")
+                    throw new TypeError("Object primitive boxing is not supported.");
+                return value;
+            }
+        }),
+        hasOwnProperty: createSandboxClosure({
+            sandbox: true,
+            name: "hasOwnProperty",
+            length: 1,
+            call: async ([key], context) => hasOwnSandboxProperty(requireReceiver(context?.thisValue), await sandboxString(key, budget, context), false)
+        }),
+        propertyIsEnumerable: createSandboxClosure({
+            sandbox: true,
+            name: "propertyIsEnumerable",
+            length: 1,
+            call: async ([key], context) => hasOwnSandboxProperty(requireReceiver(context?.thisValue), await sandboxString(key, budget, context), true)
+        }),
+        isPrototypeOf: createSandboxClosure({
+            sandbox: true,
+            name: "isPrototypeOf",
+            length: 1,
+            call: ([value], context) => {
+                if (typeof value !== "object" || value === null)
+                    return false;
+                const receiver = requireReceiver(context?.thisValue);
+                let depth = 0;
+                for (let current = getSandboxPrototype(value, budget); current !== null; current = getSandboxPrototype(current, budget)) {
+                    budget.visitNode();
+                    assertSandboxDataDepth(depth++);
+                    if (current === receiver)
+                        return true;
+                }
+                return false;
+            }
+        })
+    };
+    for (const [name, method] of Object.entries(prototypeMethods)) {
+        Object.defineProperty(prototype, name, { value: method, writable: true, configurable: true });
+    }
+    markDescriptorObject(prototype);
+    installObjectPrototype(budget, prototype, constructor);
+    return constructor;
+}
+function requireReceiver(value) {
+    if (value === null || value === undefined)
+        throw new TypeError("Object method requires a non-null receiver.");
+    return value;
+}
+export function hasOwnSandboxProperty(value, key, enumerable) {
+    requireReceiver(value);
+    if (isGuestHostObject(value))
+        return hasHostObjectMember(value, key, enumerable);
+    let properties;
+    if (isGuestClosure(value))
+        properties = materializeFunctionProperties(value);
+    else if (isSandboxClosure(value)) {
+        if (key === "length" || key === "name")
+            return !enumerable;
+        properties = value.properties ?? Object.create(null);
+    }
+    else if (isSandboxMap(value) ||
+        isSandboxSet(value) ||
+        isSandboxPromise(value) ||
+        isSandboxGenerator(value))
+        return false;
+    else if (isSandboxRegex(value))
+        return key === "lastIndex" && !enumerable;
+    else
+        properties = Object(value);
+    const descriptor = Object.getOwnPropertyDescriptor(properties, key);
+    return descriptor !== undefined && (!enumerable || descriptor.enumerable === true);
+}
+function typeTag(value) {
+    if (value === undefined)
+        return "Undefined";
+    if (value === null)
+        return "Null";
+    if (typeof value === "string")
+        return "String";
+    if (typeof value === "number")
+        return "Number";
+    if (typeof value === "boolean")
+        return "Boolean";
+    if (isSandboxClosure(value)) {
+        while (value.boundTarget !== undefined)
+            value = value.boundTarget;
+        return value.generator ? "GeneratorFunction" : value.async ? "AsyncFunction" : "Function";
+    }
+    if (Array.isArray(value))
+        return "Array";
+    if (isSandboxDate(value))
+        return "Date";
+    if (isSandboxErrorConstructorInstance(value, "Error"))
+        return "Error";
+    if (isSandboxRegex(value))
+        return "RegExp";
+    if (isSandboxMap(value))
+        return "Map";
+    if (isSandboxSet(value))
+        return "Set";
+    if (isSandboxPromise(value))
+        return "Promise";
+    if (isSandboxGenerator(value))
+        return "Generator";
+    if (isFloat32Array(value))
+        return "Float32Array";
+    return "Object";
+}

package/packages/safe-js/dist/interp/globals.d.ts

@@ -11,7 +11,7 @@ export declare function createBuiltinBindings(options: Parameters<typeof createC
     parseFloat: import("./values.js").SandboxClosure;
     isNaN: import("./values.js").SandboxClosure;
     isFinite: import("./values.js").SandboxClosure;
-    Object: import("./values.js").SandboxObject;
+    Object: import("./values.js").SandboxClosure;
     Array: import("./values.js").SandboxClosure;
     String: import("./values.js").SandboxClosure;
     Number: import("./values.js").SandboxClosure;

package/packages/safe-js/dist/interp/host-capabilities.d.ts

@@ -1,5 +1,6 @@
 import { type HostOperation } from "../extensions.js";
 import type { SandboxClosure, SandboxObject, SandboxValue } from "./values.js";
+import type { SandboxIterator } from "./iteration.js";
 declare const hostObjectBrand: unique symbol;
 declare const guestReferenceBrand: unique symbol;
 declare const sandboxHostObjectBrand: unique symbol;
@@ -12,18 +13,34 @@ export type HostObject = Readonly<Record<string, never>> & {
 export type GuestReference = Readonly<Record<string, never>> & {
     readonly [guestReferenceBrand]: true;
 };
+export type HostObjectIndexedDefinition = {
+    length(): number;
+    get(index: number): unknown;
+    maxLength: number;
+};
 export type HostObjectDefinition = {
+    indexed?: HostObjectIndexedDefinition;
+    named?: HostObjectNamedDefinition;
     properties?: Record<string, {
         get?: () => unknown;
         set?: (value: unknown) => void;
     }>;
     methods?: Record<string, HostOperation>;
 };
+export type HostObjectNamedDefinition = {
+    keys(): readonly string[];
+    get(name: string): unknown;
+    maxKeys: number;
+    maxKeyCodeUnits: number;
+    enumerable?: boolean;
+};
 export type HostObjectController = {
     owner: object;
     assertActive(): void;
     chargeWork(units?: number): void;
-    read(operation: () => unknown): SandboxValue;
+    checkLength(length: number): void;
+    checkTemporaryDataSize(size: number): void;
+    read(operation: () => unknown, validate?: (value: unknown) => unknown): SandboxValue;
     write(operation: (value: unknown) => void, value: SandboxValue): void;
     method(operation: HostOperation): SandboxClosure;
 };
@@ -47,4 +64,7 @@ export declare function revokeHostObject(value: HostObject, owner: object): void
 export declare function getHostObjectMember(value: SandboxObject, key: string): SandboxValue;
 export declare function setHostObjectMember(value: SandboxObject, key: string, entry: SandboxValue): void;
 export declare function getHostObjectKeys(value: SandboxObject): string[];
+export declare function hasHostObjectMember(value: SandboxObject, key: string, enumerableOnly?: boolean): boolean;
+export declare function measureHostObjectData(value: SandboxObject): number;
+export declare function getHostObjectIterator(value: SandboxObject): SandboxIterator | undefined;
 export {};