poe-code 14.0.75 → 14.0.76

package/packages/safe-js/dist/chunks/{chunk-BAJI3K4B.js → chunk-VD2AS4E4.js}

@@ -27,7 +27,7 @@ import {
   validateMigrationSemantics,
   validateSnapshotData,
   validateSnapshotMigration
-} from "./chunk-EOTY4PCT.js";
+} from "./chunk-UZYQWFMY.js";
 import {
   createFileSystem,
   createNodeFileSystemAdapterRegistry,
@@ -8249,4 +8249,4 @@ export {
   parseMcpConfig,
   makeMcpModule
 };
-//# sourceMappingURL=chunk-BAJI3K4B.js.map
+//# sourceMappingURL=chunk-VD2AS4E4.js.map

package/packages/safe-js/dist/cli.js

@@ -22,7 +22,7 @@ import {
   resolveFsConfig,
   splitFrontmatter,
   withBrokenPipeGuard
-} from "./chunks/chunk-BAJI3K4B.js";
+} from "./chunks/chunk-VD2AS4E4.js";
 import {
   Budget,
   SandboxError,
@@ -34,7 +34,7 @@ import {
   replaceErrorStack,
   restore,
   run
-} from "./chunks/chunk-EOTY4PCT.js";
+} from "./chunks/chunk-UZYQWFMY.js";
 import "./chunks/chunk-ZWJ5BJUI.js";
 import "./chunks/chunk-3YTQEPZI.js";
 import "./chunks/chunk-4YIDX44G.js";

package/packages/safe-js/dist/core.js

@@ -5,7 +5,7 @@ import {
   defineExtension,
   lint,
   run
-} from "./chunks/chunk-EOTY4PCT.js";
+} from "./chunks/chunk-UZYQWFMY.js";
 import "./chunks/chunk-4YIDX44G.js";
 export {
   Budget,

package/packages/safe-js/dist/index.js

@@ -26,7 +26,7 @@ import {
   runWithSpawnUsageAccumulator,
   splitFrontmatter,
   supportsSpawnMode
-} from "./chunks/chunk-BAJI3K4B.js";
+} from "./chunks/chunk-VD2AS4E4.js";
 import {
   Budget,
   FileSnapshotBackend,
@@ -50,7 +50,7 @@ import {
   registerPendingHostCallPolicy,
   restore,
   run
-} from "./chunks/chunk-EOTY4PCT.js";
+} from "./chunks/chunk-UZYQWFMY.js";
 import "./chunks/chunk-ZWJ5BJUI.js";
 import "./chunks/chunk-3YTQEPZI.js";
 import "./chunks/chunk-4YIDX44G.js";

package/packages/safe-js/dist/index.js.map

@@ -1,7 +1,7 @@
 {
   "version": 3,
   "sources": ["../src/parse.ts", "../src/runner/run-harness.ts", "../src/loader/find-exported.ts", "../src/modules/time.ts", "../src/index.ts"],
-  "sourcesContent": ["import { parse as parseInternal, type ParseResult as ParsedNode } from \"./parse/parser.js\";\n\nexport { DisallowedSyntaxError } from \"./parse/parser.js\";\nexport const parse: (source: string, filename?: string) => ParsedNode = parseInternal;\nexport type {\n  ArrayPattern,\n  ArrayExpression,\n  ArrowFunctionExpression,\n  AssignmentExpression,\n  AssignmentPattern,\n  AssignmentProperty,\n  AwaitExpression,\n  BinaryExpression,\n  BlockStatement,\n  BooleanLiteral,\n  BreakStatement,\n  CallExpression,\n  CatchClause,\n  ClassBody,\n  ClassDeclaration,\n  ClassElement,\n  ClassExpression,\n  ClassNode,\n  ConditionalExpression,\n  ContinueStatement,\n  DoWhileStatement,\n  EmptyStatement,\n  Expression,\n  ExpressionStatement,\n  ExportDefaultDeclaration,\n  ExportNamedDeclaration,\n  ImportDeclaration,\n  ImportDefaultSpecifier,\n  ImportNamespaceSpecifier,\n  ImportSpecifier,\n  ForInStatement,\n  ForOfStatement,\n  ForStatement,\n  FunctionDeclaration,\n  FunctionExpression,\n  Identifier,\n  IfStatement,\n  LogicalExpression,\n  MemberExpression,\n  MetaProperty,\n  NewExpression,\n  NewTargetExpression,\n  NullLiteral,\n  NumericLiteral,\n  ObjectExpression,\n  ObjectPattern,\n  ParseResult,\n  PatternTarget,\n  Property,\n  RegexLiteral,\n  RestElement,\n  ReturnStatement,\n  SequenceExpression,\n  SourceSpan,\n  SpreadElement,\n  Statement,\n  StringLiteral,\n  SuperExpression,\n  SwitchCase,\n  SwitchStatement,\n  TaggedTemplateExpression,\n  TemplateElement,\n  TemplateLiteral,\n  ThisExpression,\n  ThrowStatement,\n  TryStatement,\n  UnaryExpression,\n  UndefinedLiteral,\n  UpdateExpression,\n  UpdateTarget,\n  VariableDeclaration,\n  VariableDeclarationKind,\n  VariableDeclarator,\n  WhileStatement\n} from \"./parse/parser.js\";\n", "import { readFile, stat } from \"node:fs/promises\";\nimport { extname } from \"node:path\";\n\nimport { supportsSpawnMode } from \"@poe-code/agent-spawn/configs\";\nimport { SPAWN_MODES, type SpawnMode } from \"@poe-code/agent-spawn/types\";\nimport { hasOwnErrorCode } from \"../error-codes.js\";\nimport { countLineBreaks, extractBlock, maskSource } from \"../loader/extract-block.js\";\nimport { splitFrontmatter } from \"../loader/frontmatter.js\";\nimport { lint, type Diagnostic } from \"../lint.js\";\nimport { createLintModulesFromRuntimeRegistry } from \"../lint/runtime-modules.js\";\nimport type { ModuleExports, ModuleRegistry } from \"../modules/registry.js\";\nimport type { OtelSink } from \"../observability/otel.js\";\nimport { parseModule } from \"../parse/parser.js\";\nimport { run, type RunOptions, type RunResult } from \"../run.js\";\nimport type { SnapshotBackend } from \"../snapshot/backend.js\";\n\ntype HarnessMeta = {\n  filepath: string;\n  kind: unknown;\n  version: unknown;\n};\n\nexport type RunHarnessOptions = {\n  budget?: RunOptions[\"budget\"];\n  modulesFor: (frontmatter: Record<string, unknown>, meta: HarnessMeta) => ModuleRegistry;\n  otelSink?: OtelSink;\n  signal?: AbortSignal;\n  snapshotBackend?: SnapshotBackend;\n  snapshotIntervalMs?: number;\n  snapshotPath?: string;\n};\n\nexport type RunHarnessExecutionErrorResult = {\n  aborted?: true;\n  error: unknown;\n  ok: false;\n};\n\nexport type RunHarnessResult = RunResult | RunHarnessExecutionErrorResult;\n\nfunction getOwnEntry(record: Record<string, unknown>, key: string): unknown {\n  return Object.prototype.hasOwnProperty.call(record, key) ? record[key] : undefined;\n}\n\nfunction createHarnessMeta(filepath: string, frontmatter: Record<string, unknown>): HarnessMeta {\n  return {\n    filepath,\n    kind: getOwnEntry(frontmatter, \"kind\"),\n    version: getOwnEntry(frontmatter, \"version\")\n  };\n}\n\nfunction assertFrontmatterAgentModes(frontmatter: Record<string, unknown>): void {\n  const agents = getOwnEntry(frontmatter, \"agents\");\n  if (typeof agents !== \"object\" || agents === null || Array.isArray(agents)) {\n    return;\n  }\n\n  for (const [name, definition] of Object.entries(agents)) {\n    if (typeof definition !== \"object\" || definition === null || Array.isArray(definition)) {\n      continue;\n    }\n\n    const record = definition as Record<string, unknown>;\n    const agent = getOwnEntry(record, \"agent\");\n    const mode = getOwnEntry(record, \"mode\");\n    if (typeof agent !== \"string\" || typeof mode !== \"string\") {\n      continue;\n    }\n\n    // Malformed mode strings are reported by the agent module's own validation.\n    if (!SPAWN_MODES.includes(mode as SpawnMode)) {\n      continue;\n    }\n\n    if (!supportsSpawnMode(agent, mode as SpawnMode)) {\n      throw new Error(`Harness agent \"${name}\": agent \"${agent}\" does not support mode \"${mode}\".`);\n    }\n  }\n}\n\nexport class LintError extends Error {\n  readonly diagnostics: readonly Diagnostic[];\n\n  constructor(diagnostics: readonly Diagnostic[]) {\n    super(formatLintErrorMessage(diagnostics));\n    this.name = \"LintError\";\n    this.diagnostics = diagnostics;\n  }\n}\n\nexport async function runHarness(\n  filepath: string,\n  options: RunHarnessOptions\n): Promise<RunHarnessResult> {\n  const rawSource = await readHarnessFile(filepath);\n  const { executableSource, frontmatter, isRawScript } = loadExecutableSource(filepath, rawSource);\n  assertFrontmatterAgentModes(frontmatter);\n  const meta = createHarnessMeta(filepath, frontmatter);\n  const modules = excludeHarnessModule(options.modulesFor(frontmatter, meta), isRawScript);\n  const diagnostics = lint(executableSource, {\n    filename: filepath,\n    modules: createLintModulesFromRuntimeRegistry(modules)\n  });\n  const lintErrors = diagnostics.filter((diagnostic) => diagnostic.severity === \"error\");\n\n  if (lintErrors.length > 0) {\n    throw new LintError(lintErrors);\n  }\n\n  return runHarnessSource(executableSource, {\n    budget: options.budget,\n    entryPointArgs: hasDefaultExport(executableSource, filepath) ? [] : undefined,\n    filename: filepath,\n    modules,\n    otelSink: options.otelSink,\n    signal: options.signal,\n    snapshotBackend: options.snapshotBackend,\n    snapshotIntervalMs: options.snapshotIntervalMs,\n    snapshotPath: options.snapshotPath\n  });\n}\n\nexport async function runHarnessPair(\n  filepath: string,\n  options: RunHarnessOptions\n): Promise<RunHarnessResult> {\n  const pair = resolveHarnessPair(filepath);\n  const [rawMarkdown, rawScript] = await Promise.all([\n    readHarnessFile(pair.markdownPath),\n    readHarnessFile(pair.scriptPath)\n  ]);\n  const { frontmatter, body } = splitFrontmatter(stripByteOrderMark(rawMarkdown));\n  assertFrontmatterAgentModes(frontmatter);\n  const executableSource = stripByteOrderMark(rawScript);\n  const meta = createHarnessMeta(pair.markdownPath, frontmatter);\n  const modules = options.modulesFor(frontmatter, meta);\n  const diagnostics = lint(executableSource, {\n    allowedExportNames: [\"schema\"],\n    defaultExport: {\n      parameters: [\"frontmatter\"],\n      required: true\n    },\n    filename: pair.scriptPath,\n    frontmatterFields: Object.keys(frontmatter),\n    modules: createLintModulesFromRuntimeRegistry(modules)\n  });\n  const lintErrors = diagnostics.filter((diagnostic) => diagnostic.severity === \"error\");\n\n  if (lintErrors.length > 0) {\n    throw new LintError(lintErrors);\n  }\n\n  return runHarnessSource(executableSource, {\n    budget: options.budget,\n    entryPointArgs: [frontmatter],\n    filename: pair.scriptPath,\n    importMeta: {\n      body,\n      filepath: pair.markdownPath,\n      kind: meta.kind,\n      version: meta.version\n    },\n    modules,\n    otelSink: options.otelSink,\n    signal: options.signal,\n    snapshotBackend: options.snapshotBackend,\n    snapshotIntervalMs: options.snapshotIntervalMs,\n    snapshotPath: options.snapshotPath\n  });\n}\n\nasync function readHarnessFile(filepath: string): Promise<string> {\n  try {\n    const stats = await stat(filepath);\n    if (!stats.isFile()) {\n      throw new Error(`Harness path must point to a file: ${filepath}`);\n    }\n\n    return await readFile(filepath, \"utf8\");\n  } catch (error) {\n    if (hasOwnErrorCode(error, \"ENOENT\") || hasOwnErrorCode(error, \"ENOTDIR\")) {\n      throw new Error(`Harness file not found: ${filepath}`);\n    }\n\n    throw error;\n  }\n}\n\nfunction loadExecutableSource(\n  filepath: string,\n  source: string\n): {\n  executableSource: string;\n  frontmatter: Record<string, unknown>;\n  isRawScript: boolean;\n} {\n  if (isRawScriptPath(filepath)) {\n    const executableSource = stripByteOrderMark(source);\n    if (executableSource.length === 0) {\n      throw new Error(`No code block found in empty harness file: ${filepath}`);\n    }\n\n    return {\n      executableSource,\n      frontmatter: {},\n      isRawScript: true\n    };\n  }\n\n  const { frontmatter, body } = splitFrontmatter(source);\n  if (source.length === 0 || body.trim().length === 0) {\n    throw new Error(`No code block found in empty harness file: ${filepath}`);\n  }\n\n  const bodyStartOffset = source.length - body.length;\n  const { source: executableBlock, startOffset } = extractBlock(\n    body,\n    countLineBreaks(source, 0, bodyStartOffset) + 1\n  );\n  return {\n    executableSource:\n      maskSource(source.slice(0, bodyStartOffset + startOffset)) + stripHashbang(executableBlock),\n    frontmatter,\n    isRawScript: false\n  };\n}\n\nfunction resolveHarnessPair(filepath: string): { markdownPath: string; scriptPath: string } {\n  const extension = extname(filepath);\n  const basename = extension.length === 0 ? filepath : filepath.slice(0, -extension.length);\n\n  if (isRawScriptExtension(extension)) {\n    return {\n      markdownPath: `${basename}.md`,\n      scriptPath: filepath\n    };\n  }\n\n  return {\n    markdownPath: filepath,\n    scriptPath: `${basename}.ajs`\n  };\n}\n\nfunction isRawScriptPath(filepath: string): boolean {\n  return isRawScriptExtension(extname(filepath));\n}\n\nfunction isRawScriptExtension(extension: string): boolean {\n  return extension === \".safejs\" || extension === \".ajs\";\n}\n\nasync function runHarnessSource(\n  executableSource: string,\n  options: Parameters<typeof run>[1]\n): Promise<RunHarnessResult> {\n  try {\n    return await run(executableSource, options);\n  } catch (error) {\n    if (isSetupError(error)) {\n      throw error;\n    }\n\n    return {\n      ...(isAbortError(error) ? { aborted: true as const } : {}),\n      error,\n      ok: false\n    };\n  }\n}\n\nfunction isSetupError(error: unknown): boolean {\n  return error instanceof Error && error.name === \"ParseError\";\n}\n\nfunction isAbortError(error: unknown): boolean {\n  if (error instanceof Error) {\n    return error.name === \"AbortError\";\n  }\n\n  return (\n    typeof error === \"object\" &&\n    error !== null &&\n    Object.prototype.hasOwnProperty.call(error, \"name\") &&\n    (error as { name?: unknown }).name === \"AbortError\"\n  );\n}\n\nfunction hasDefaultExport(source: string, filename: string): boolean {\n  return parseModule(source, filename).body.some(\n    (statement) => statement.type === \"ExportDefaultDeclaration\"\n  );\n}\n\nfunction excludeHarnessModule(modules: ModuleRegistry, isRawScript: boolean): ModuleRegistry {\n  if (!isRawScript) {\n    return modules;\n  }\n\n  if (modules instanceof Map) {\n    const rawModules = new Map(modules);\n    rawModules.delete(\"harness\");\n    return rawModules;\n  }\n\n  const rawModules: Record<string, ModuleExports> = {};\n\n  for (const [moduleName, moduleExports] of Object.entries(modules)) {\n    if (moduleName !== \"harness\") {\n      rawModules[moduleName] = moduleExports;\n    }\n  }\n\n  return rawModules;\n}\n\nfunction stripByteOrderMark(source: string): string {\n  return source.startsWith(\"\\uFEFF\") ? source.slice(1) : source;\n}\n\nfunction stripHashbang(source: string): string {\n  if (!source.startsWith(\"#!\")) {\n    return source;\n  }\n\n  let end = 2;\n  while (end < source.length && source[end] !== \"\\n\" && source[end] !== \"\\r\") end += 1;\n  return `${\" \".repeat(end)}${source.slice(end)}`;\n}\n\nfunction formatLintErrorMessage(diagnostics: readonly Diagnostic[]): string {\n  if (diagnostics.length === 0) {\n    return \"Script lint failed.\";\n  }\n\n  return diagnostics\n    .map(\n      (diagnostic) =>\n        `${diagnostic.filename}:${diagnostic.line}:${diagnostic.column} ${diagnostic.code} ${diagnostic.message}`\n    )\n    .join(\"\\n\");\n}\n", "import type { ClassDeclaration, Expression, FunctionDeclaration, Module } from \"../parse/parser.js\";\n\nexport function findExportedConstInitializer(module: Module, name: string): Expression | ClassDeclaration | FunctionDeclaration | undefined {\n  for (const statement of module.body) {\n    if (statement.type === \"ExportDefaultDeclaration\") {\n      if (name === \"default\") {\n        return statement.declaration;\n      }\n\n      continue;\n    }\n\n    if (statement.type !== \"ExportNamedDeclaration\") {\n      continue;\n    }\n\n    const declaration = statement.declaration;\n    if (declaration.kind !== \"const\") {\n      throw new Error(`Exported '${name}' must be declared with const.`);\n    }\n\n    if (declaration.declarations.length !== 1) {\n      throw new Error(\"Exported const declarations must contain exactly one declarator.\");\n    }\n\n    const declarator = declaration.declarations[0]!;\n    if (declarator.id.type !== \"Identifier\") {\n      throw new Error(\"Destructured exported const bindings are not supported.\");\n    }\n\n    if (declarator.id.name !== name) {\n      continue;\n    }\n\n    if (declarator.init === undefined) {\n      throw new Error(`Exported const '${name}' must have an initializer.`);\n    }\n\n    return declarator.init;\n  }\n\n  return undefined;\n}\n", "import { webcrypto as crypto } from \"node:crypto\";\n\nimport { createSeededRandom } from \"../interp/globals/math.js\";\n\nexport type TimeModuleOptions = {\n  now?: () => number;\n  random?: () => number;\n  seed?: number;\n  signal?: AbortSignal;\n};\n\nexport function makeTimeModule(options: TimeModuleOptions = {}): {\n  random: () => number;\n  now: () => number;\n  sleep: (ms: number) => Promise<void>;\n  uuid: () => string;\n} {\n  const hasDeterministicRandom = options.random !== undefined || options.seed !== undefined;\n  const random =\n    options.random ??\n    (options.seed === undefined ? () => Math.random() : createSeededRandom(options.seed).next);\n  const now = options.now ?? (() => Date.now());\n  const signal = options.signal;\n\n  async function sleep(ms: number): Promise<void> {\n    assertSleepDelay(ms);\n\n    return await new Promise<void>((resolve, reject) => {\n      if (signal?.aborted === true) {\n        reject(createSleepAbortError());\n        return;\n      }\n\n      const start = performance.now();\n      let timeout = setTimeout(resolveSleep, ms);\n\n      function cleanup(): void {\n        clearTimeout(timeout);\n        signal?.removeEventListener(\"abort\", rejectSleep);\n      }\n\n      function resolveSleep(): void {\n        const remainingMs = ms - (performance.now() - start);\n        if (remainingMs > 0) {\n          timeout = setTimeout(resolveSleep, remainingMs);\n          return;\n        }\n\n        cleanup();\n        resolve();\n      }\n\n      function rejectSleep(): void {\n        cleanup();\n        reject(createSleepAbortError());\n      }\n\n      signal?.addEventListener(\"abort\", rejectSleep, { once: true });\n    });\n  }\n\n  return {\n    random,\n    now,\n    sleep,\n    uuid: hasDeterministicRandom ? () => createRandomUuid(random) : () => crypto.randomUUID()\n  };\n}\n\nfunction createRandomUuid(random: () => number): string {\n  const bytes = Array.from({ length: 16 }, () => Math.floor(readRandomUnit(random()) * 256));\n  bytes[6] = (bytes[6] & 0x0f) | 0x40;\n  bytes[8] = (bytes[8] & 0x3f) | 0x80;\n  const hex = bytes.map((byte) => byte.toString(16).padStart(2, \"0\")).join(\"\");\n\n  return [\n    hex.slice(0, 8),\n    hex.slice(8, 12),\n    hex.slice(12, 16),\n    hex.slice(16, 20),\n    hex.slice(20)\n  ].join(\"-\");\n}\n\nfunction readRandomUnit(value: number): number {\n  if (Number.isFinite(value) && value >= 0 && value < 1) {\n    return value;\n  }\n\n  throw new RangeError(\"time.uuid() random source must return a number in [0, 1).\");\n}\n\nfunction assertSleepDelay(ms: number): void {\n  if (Number.isFinite(ms) && ms >= 0) {\n    return;\n  }\n\n  throw new RangeError(\"time.sleep(ms) requires a non-negative finite millisecond delay.\");\n}\n\nfunction createSleepAbortError(): Error {\n  return new Error(\"time.sleep aborted.\");\n}\n", "import { parseModule as parseModuleInternal, type Module } from \"./parse/parser.js\";\nimport { restore as restoreInternal, type SafeJSSnapshot, type RestoreOptions } from \"./restore.js\";\nimport {\n  deepCopyFromSandbox as copyFromSandboxInternal,\n  type SandboxPromise,\n  type SandboxValue\n} from \"./interp/values.js\";\n\nexport { parse } from \"./parse.js\";\nexport const parseModule: (source: string, filename?: string) => Module = parseModuleInternal;\nexport const restore: <TSnapshot extends SafeJSSnapshot>(\n  snapshot: TSnapshot,\n  options: RestoreOptions\n) => TSnapshot = restoreInternal;\ntype PublicCopyOptions = Omit<\n  NonNullable<Parameters<typeof copyFromSandboxInternal>[1]>,\n  \"compilation\" | \"unwrapHostObject\"\n>;\nexport const deepCopyFromSandbox: {\n  (value: SandboxPromise, options?: PublicCopyOptions): Promise<unknown>;\n  (value: SandboxValue, options?: PublicCopyOptions): unknown;\n} = copyFromSandboxInternal;\nexport { lint, type Diagnostic, type Fix, type LintFixResult, type LintOptions } from \"./lint.js\";\nexport { run } from \"./run.js\";\nexport { createRealm, type SafeJSRealm, type RealmOptions, type RealmResult, type RealmLimits } from \"./realm.js\";\nexport { defineExtension, type SafeJSExtension, type ExtensionDefinition, type ExtensionManifest, type ExtensionContext, type ExtensionExports, type CallbackOptions, type CallbackInvocation } from \"./extensions.js\";\nexport type { HostObject, HostObjectDefinition, HostObjectIndexedDefinition, HostObjectNamedDefinition, GuestReference } from \"./interp/host-capabilities.js\";\nexport { createReplayableRandom, type ReplayableRandom } from \"./random.js\";\nexport type { RunClock, RunClockSnapshot, RunRandom } from \"./run.js\";\nexport { noopOtelSink } from \"./observability/otel.js\";\nexport type { OtelSink, OtelSpan } from \"./observability/otel.js\";\nexport { FileSnapshotBackend } from \"./snapshot/backend.js\";\nexport type { Snapshot, SnapshotBackend } from \"./snapshot/backend.js\";\nexport { declareHostOperation } from \"./interp/host-bridge.js\";\nexport { HostCallResumabilityError } from \"./interp/host-call.js\";\nexport type {\n  HostCallLifecycle,\n  HostCallOutcome,\n  HostCallRecord,\n  HostCallResumeContext,\n  HostCallResumeProof,\n  HostCallResumeProvider,\n  HostCallResumeRequest\n} from \"./interp/host-call.js\";\nexport {\n  HostOperationResumePolicyError,\n  registerPendingHostCallPolicy\n} from \"./snapshot/policy.js\";\nexport type {\n  PendingHostCallPolicyMode,\n  PendingHostCallPolicyRegistration\n} from \"./snapshot/policy.js\";\nexport { dump, type DumpOptions } from \"./dump.js\";\nexport { inspectSnapshotMigration, migrateSnapshot } from \"./migrate.js\";\nexport { migrateSnapshotFile, type SnapshotMigrationFileOptions } from \"./migration-file.js\";\nexport type {\n  SnapshotMigration,\n  SnapshotMigrationOptions,\n  SnapshotMigrationReconciliation,\n  SnapshotMigrationResolution\n} from \"./migrate.js\";\nexport { SnapshotValidationError } from \"./snapshot/validation.js\";\nexport type { SnapshotValidationCode } from \"./snapshot/validation.js\";\nexport { Budget, SandboxError } from \"./interp/budget.js\";\nexport type { BudgetName, BudgetOptions } from \"./interp/budget.js\";\nexport { formatInterpreterError, type InterpreterDiagnostic } from \"./error/format.js\";\nexport { deepCopyToSandbox } from \"./interp/values.js\";\nexport { runHarness, runHarnessPair } from \"./runner/run-harness.js\";\nexport { extractBlock } from \"./loader/extract-block.js\";\nexport { findExportedConstInitializer } from \"./loader/find-exported.js\";\nexport { splitFrontmatter } from \"./loader/frontmatter.js\";\nexport type { ExportDefaultDeclaration, ExportNamedDeclaration, MetaProperty } from \"./parse.js\";\nexport {\n  AgentSpawnError,\n  createSpawnUsageAccumulator,\n  makeAgentModule,\n  runWithSpawnUsageAccumulator\n} from \"./modules/agent.js\";\nexport type {\n  AgentModuleDefinition,\n  AgentModuleOptions,\n  AgentModuleParallelCall,\n  AgentModuleRetryOptions,\n  AgentModuleSpawnOptions,\n  AgentSpawnEvent,\n  SpawnAgent,\n  SpawnAgentInput,\n  SpawnAgentResult,\n  SpawnUsageAccumulator,\n  SpawnUsageTotal\n} from \"./modules/agent.js\";\nexport { EnvAccessError, makeEnvModule, parseEnvConfig } from \"./modules/env.js\";\nexport type { EnvModule, EnvModuleOptions } from \"./modules/env.js\";\nexport { makeFailModule } from \"./modules/fail.js\";\nexport { makeFsModule } from \"./modules/fs.js\";\nexport { parseFsConfig, resolveFsConfig } from \"./modules/fs-config.js\";\nexport type { FsConfig, ResolveFsConfigOptions } from \"./modules/fs-config.js\";\nexport type {\n  FsImplementation,\n  FsModule,\n  FsModuleOptions,\n  SandboxDirent,\n  SandboxStats\n} from \"./modules/fs.js\";\nexport { makeHarnessModule } from \"./modules/harness.js\";\nexport { makeLogModule } from \"./modules/log.js\";\nexport { makeMetricModule } from \"./modules/metric.js\";\nexport { makeMcpModule } from \"./modules/mcp.js\";\nexport { parseMcpConfig } from \"./modules/mcp-transport.js\";\nexport type { McpModuleOptions, McpServerConfig } from \"./modules/mcp-transport.js\";\nexport type { ManagedMcpClient, ManagedMcpModule, McpNamedServerHandle } from \"./modules/mcp.js\";\nexport { makeTimeModule } from \"./modules/time.js\";\n"],
+  "sourcesContent": ["import { parse as parseInternal, type ParseResult as ParsedNode } from \"./parse/parser.js\";\n\nexport { DisallowedSyntaxError } from \"./parse/parser.js\";\nexport const parse: (source: string, filename?: string) => ParsedNode = parseInternal;\nexport type {\n  ArrayPattern,\n  ArrayExpression,\n  ArrowFunctionExpression,\n  AssignmentExpression,\n  AssignmentPattern,\n  AssignmentProperty,\n  AwaitExpression,\n  BinaryExpression,\n  BigIntLiteral,\n  BlockStatement,\n  BooleanLiteral,\n  BreakStatement,\n  CallExpression,\n  CatchClause,\n  ClassBody,\n  ClassDeclaration,\n  ClassElement,\n  ClassExpression,\n  ClassNode,\n  ConditionalExpression,\n  ContinueStatement,\n  DoWhileStatement,\n  EmptyStatement,\n  Expression,\n  ExpressionStatement,\n  ExportDefaultDeclaration,\n  ExportNamedDeclaration,\n  ImportDeclaration,\n  ImportDefaultSpecifier,\n  ImportNamespaceSpecifier,\n  ImportSpecifier,\n  ForInStatement,\n  ForOfStatement,\n  ForStatement,\n  FunctionDeclaration,\n  FunctionExpression,\n  Identifier,\n  IfStatement,\n  LogicalExpression,\n  MemberExpression,\n  MetaProperty,\n  NewExpression,\n  NewTargetExpression,\n  NullLiteral,\n  NumericLiteral,\n  ObjectExpression,\n  ObjectPattern,\n  ParseResult,\n  PatternTarget,\n  Property,\n  RegexLiteral,\n  RestElement,\n  ReturnStatement,\n  SequenceExpression,\n  SourceSpan,\n  SpreadElement,\n  Statement,\n  StringLiteral,\n  SuperExpression,\n  SwitchCase,\n  SwitchStatement,\n  TaggedTemplateExpression,\n  TemplateElement,\n  TemplateLiteral,\n  ThisExpression,\n  ThrowStatement,\n  TryStatement,\n  UnaryExpression,\n  UndefinedLiteral,\n  UpdateExpression,\n  UpdateTarget,\n  VariableDeclaration,\n  VariableDeclarationKind,\n  VariableDeclarator,\n  WhileStatement\n} from \"./parse/parser.js\";\n", "import { readFile, stat } from \"node:fs/promises\";\nimport { extname } from \"node:path\";\n\nimport { supportsSpawnMode } from \"@poe-code/agent-spawn/configs\";\nimport { SPAWN_MODES, type SpawnMode } from \"@poe-code/agent-spawn/types\";\nimport { hasOwnErrorCode } from \"../error-codes.js\";\nimport { countLineBreaks, extractBlock, maskSource } from \"../loader/extract-block.js\";\nimport { splitFrontmatter } from \"../loader/frontmatter.js\";\nimport { lint, type Diagnostic } from \"../lint.js\";\nimport { createLintModulesFromRuntimeRegistry } from \"../lint/runtime-modules.js\";\nimport type { ModuleExports, ModuleRegistry } from \"../modules/registry.js\";\nimport type { OtelSink } from \"../observability/otel.js\";\nimport { parseModule } from \"../parse/parser.js\";\nimport { run, type RunOptions, type RunResult } from \"../run.js\";\nimport type { SnapshotBackend } from \"../snapshot/backend.js\";\n\ntype HarnessMeta = {\n  filepath: string;\n  kind: unknown;\n  version: unknown;\n};\n\nexport type RunHarnessOptions = {\n  budget?: RunOptions[\"budget\"];\n  modulesFor: (frontmatter: Record<string, unknown>, meta: HarnessMeta) => ModuleRegistry;\n  otelSink?: OtelSink;\n  signal?: AbortSignal;\n  snapshotBackend?: SnapshotBackend;\n  snapshotIntervalMs?: number;\n  snapshotPath?: string;\n};\n\nexport type RunHarnessExecutionErrorResult = {\n  aborted?: true;\n  error: unknown;\n  ok: false;\n};\n\nexport type RunHarnessResult = RunResult | RunHarnessExecutionErrorResult;\n\nfunction getOwnEntry(record: Record<string, unknown>, key: string): unknown {\n  return Object.prototype.hasOwnProperty.call(record, key) ? record[key] : undefined;\n}\n\nfunction createHarnessMeta(filepath: string, frontmatter: Record<string, unknown>): HarnessMeta {\n  return {\n    filepath,\n    kind: getOwnEntry(frontmatter, \"kind\"),\n    version: getOwnEntry(frontmatter, \"version\")\n  };\n}\n\nfunction assertFrontmatterAgentModes(frontmatter: Record<string, unknown>): void {\n  const agents = getOwnEntry(frontmatter, \"agents\");\n  if (typeof agents !== \"object\" || agents === null || Array.isArray(agents)) {\n    return;\n  }\n\n  for (const [name, definition] of Object.entries(agents)) {\n    if (typeof definition !== \"object\" || definition === null || Array.isArray(definition)) {\n      continue;\n    }\n\n    const record = definition as Record<string, unknown>;\n    const agent = getOwnEntry(record, \"agent\");\n    const mode = getOwnEntry(record, \"mode\");\n    if (typeof agent !== \"string\" || typeof mode !== \"string\") {\n      continue;\n    }\n\n    // Malformed mode strings are reported by the agent module's own validation.\n    if (!SPAWN_MODES.includes(mode as SpawnMode)) {\n      continue;\n    }\n\n    if (!supportsSpawnMode(agent, mode as SpawnMode)) {\n      throw new Error(`Harness agent \"${name}\": agent \"${agent}\" does not support mode \"${mode}\".`);\n    }\n  }\n}\n\nexport class LintError extends Error {\n  readonly diagnostics: readonly Diagnostic[];\n\n  constructor(diagnostics: readonly Diagnostic[]) {\n    super(formatLintErrorMessage(diagnostics));\n    this.name = \"LintError\";\n    this.diagnostics = diagnostics;\n  }\n}\n\nexport async function runHarness(\n  filepath: string,\n  options: RunHarnessOptions\n): Promise<RunHarnessResult> {\n  const rawSource = await readHarnessFile(filepath);\n  const { executableSource, frontmatter, isRawScript } = loadExecutableSource(filepath, rawSource);\n  assertFrontmatterAgentModes(frontmatter);\n  const meta = createHarnessMeta(filepath, frontmatter);\n  const modules = excludeHarnessModule(options.modulesFor(frontmatter, meta), isRawScript);\n  const diagnostics = lint(executableSource, {\n    filename: filepath,\n    modules: createLintModulesFromRuntimeRegistry(modules)\n  });\n  const lintErrors = diagnostics.filter((diagnostic) => diagnostic.severity === \"error\");\n\n  if (lintErrors.length > 0) {\n    throw new LintError(lintErrors);\n  }\n\n  return runHarnessSource(executableSource, {\n    budget: options.budget,\n    entryPointArgs: hasDefaultExport(executableSource, filepath) ? [] : undefined,\n    filename: filepath,\n    modules,\n    otelSink: options.otelSink,\n    signal: options.signal,\n    snapshotBackend: options.snapshotBackend,\n    snapshotIntervalMs: options.snapshotIntervalMs,\n    snapshotPath: options.snapshotPath\n  });\n}\n\nexport async function runHarnessPair(\n  filepath: string,\n  options: RunHarnessOptions\n): Promise<RunHarnessResult> {\n  const pair = resolveHarnessPair(filepath);\n  const [rawMarkdown, rawScript] = await Promise.all([\n    readHarnessFile(pair.markdownPath),\n    readHarnessFile(pair.scriptPath)\n  ]);\n  const { frontmatter, body } = splitFrontmatter(stripByteOrderMark(rawMarkdown));\n  assertFrontmatterAgentModes(frontmatter);\n  const executableSource = stripByteOrderMark(rawScript);\n  const meta = createHarnessMeta(pair.markdownPath, frontmatter);\n  const modules = options.modulesFor(frontmatter, meta);\n  const diagnostics = lint(executableSource, {\n    allowedExportNames: [\"schema\"],\n    defaultExport: {\n      parameters: [\"frontmatter\"],\n      required: true\n    },\n    filename: pair.scriptPath,\n    frontmatterFields: Object.keys(frontmatter),\n    modules: createLintModulesFromRuntimeRegistry(modules)\n  });\n  const lintErrors = diagnostics.filter((diagnostic) => diagnostic.severity === \"error\");\n\n  if (lintErrors.length > 0) {\n    throw new LintError(lintErrors);\n  }\n\n  return runHarnessSource(executableSource, {\n    budget: options.budget,\n    entryPointArgs: [frontmatter],\n    filename: pair.scriptPath,\n    importMeta: {\n      body,\n      filepath: pair.markdownPath,\n      kind: meta.kind,\n      version: meta.version\n    },\n    modules,\n    otelSink: options.otelSink,\n    signal: options.signal,\n    snapshotBackend: options.snapshotBackend,\n    snapshotIntervalMs: options.snapshotIntervalMs,\n    snapshotPath: options.snapshotPath\n  });\n}\n\nasync function readHarnessFile(filepath: string): Promise<string> {\n  try {\n    const stats = await stat(filepath);\n    if (!stats.isFile()) {\n      throw new Error(`Harness path must point to a file: ${filepath}`);\n    }\n\n    return await readFile(filepath, \"utf8\");\n  } catch (error) {\n    if (hasOwnErrorCode(error, \"ENOENT\") || hasOwnErrorCode(error, \"ENOTDIR\")) {\n      throw new Error(`Harness file not found: ${filepath}`);\n    }\n\n    throw error;\n  }\n}\n\nfunction loadExecutableSource(\n  filepath: string,\n  source: string\n): {\n  executableSource: string;\n  frontmatter: Record<string, unknown>;\n  isRawScript: boolean;\n} {\n  if (isRawScriptPath(filepath)) {\n    const executableSource = stripByteOrderMark(source);\n    if (executableSource.length === 0) {\n      throw new Error(`No code block found in empty harness file: ${filepath}`);\n    }\n\n    return {\n      executableSource,\n      frontmatter: {},\n      isRawScript: true\n    };\n  }\n\n  const { frontmatter, body } = splitFrontmatter(source);\n  if (source.length === 0 || body.trim().length === 0) {\n    throw new Error(`No code block found in empty harness file: ${filepath}`);\n  }\n\n  const bodyStartOffset = source.length - body.length;\n  const { source: executableBlock, startOffset } = extractBlock(\n    body,\n    countLineBreaks(source, 0, bodyStartOffset) + 1\n  );\n  return {\n    executableSource:\n      maskSource(source.slice(0, bodyStartOffset + startOffset)) + stripHashbang(executableBlock),\n    frontmatter,\n    isRawScript: false\n  };\n}\n\nfunction resolveHarnessPair(filepath: string): { markdownPath: string; scriptPath: string } {\n  const extension = extname(filepath);\n  const basename = extension.length === 0 ? filepath : filepath.slice(0, -extension.length);\n\n  if (isRawScriptExtension(extension)) {\n    return {\n      markdownPath: `${basename}.md`,\n      scriptPath: filepath\n    };\n  }\n\n  return {\n    markdownPath: filepath,\n    scriptPath: `${basename}.ajs`\n  };\n}\n\nfunction isRawScriptPath(filepath: string): boolean {\n  return isRawScriptExtension(extname(filepath));\n}\n\nfunction isRawScriptExtension(extension: string): boolean {\n  return extension === \".safejs\" || extension === \".ajs\";\n}\n\nasync function runHarnessSource(\n  executableSource: string,\n  options: Parameters<typeof run>[1]\n): Promise<RunHarnessResult> {\n  try {\n    return await run(executableSource, options);\n  } catch (error) {\n    if (isSetupError(error)) {\n      throw error;\n    }\n\n    return {\n      ...(isAbortError(error) ? { aborted: true as const } : {}),\n      error,\n      ok: false\n    };\n  }\n}\n\nfunction isSetupError(error: unknown): boolean {\n  return error instanceof Error && error.name === \"ParseError\";\n}\n\nfunction isAbortError(error: unknown): boolean {\n  if (error instanceof Error) {\n    return error.name === \"AbortError\";\n  }\n\n  return (\n    typeof error === \"object\" &&\n    error !== null &&\n    Object.prototype.hasOwnProperty.call(error, \"name\") &&\n    (error as { name?: unknown }).name === \"AbortError\"\n  );\n}\n\nfunction hasDefaultExport(source: string, filename: string): boolean {\n  return parseModule(source, filename).body.some(\n    (statement) => statement.type === \"ExportDefaultDeclaration\"\n  );\n}\n\nfunction excludeHarnessModule(modules: ModuleRegistry, isRawScript: boolean): ModuleRegistry {\n  if (!isRawScript) {\n    return modules;\n  }\n\n  if (modules instanceof Map) {\n    const rawModules = new Map(modules);\n    rawModules.delete(\"harness\");\n    return rawModules;\n  }\n\n  const rawModules: Record<string, ModuleExports> = {};\n\n  for (const [moduleName, moduleExports] of Object.entries(modules)) {\n    if (moduleName !== \"harness\") {\n      rawModules[moduleName] = moduleExports;\n    }\n  }\n\n  return rawModules;\n}\n\nfunction stripByteOrderMark(source: string): string {\n  return source.startsWith(\"\\uFEFF\") ? source.slice(1) : source;\n}\n\nfunction stripHashbang(source: string): string {\n  if (!source.startsWith(\"#!\")) {\n    return source;\n  }\n\n  let end = 2;\n  while (end < source.length && source[end] !== \"\\n\" && source[end] !== \"\\r\") end += 1;\n  return `${\" \".repeat(end)}${source.slice(end)}`;\n}\n\nfunction formatLintErrorMessage(diagnostics: readonly Diagnostic[]): string {\n  if (diagnostics.length === 0) {\n    return \"Script lint failed.\";\n  }\n\n  return diagnostics\n    .map(\n      (diagnostic) =>\n        `${diagnostic.filename}:${diagnostic.line}:${diagnostic.column} ${diagnostic.code} ${diagnostic.message}`\n    )\n    .join(\"\\n\");\n}\n", "import type { ClassDeclaration, Expression, FunctionDeclaration, Module } from \"../parse/parser.js\";\n\nexport function findExportedConstInitializer(module: Module, name: string): Expression | ClassDeclaration | FunctionDeclaration | undefined {\n  for (const statement of module.body) {\n    if (statement.type === \"ExportDefaultDeclaration\") {\n      if (name === \"default\") {\n        return statement.declaration;\n      }\n\n      continue;\n    }\n\n    if (statement.type !== \"ExportNamedDeclaration\") {\n      continue;\n    }\n\n    const declaration = statement.declaration;\n    if (declaration.kind !== \"const\") {\n      throw new Error(`Exported '${name}' must be declared with const.`);\n    }\n\n    if (declaration.declarations.length !== 1) {\n      throw new Error(\"Exported const declarations must contain exactly one declarator.\");\n    }\n\n    const declarator = declaration.declarations[0]!;\n    if (declarator.id.type !== \"Identifier\") {\n      throw new Error(\"Destructured exported const bindings are not supported.\");\n    }\n\n    if (declarator.id.name !== name) {\n      continue;\n    }\n\n    if (declarator.init === undefined) {\n      throw new Error(`Exported const '${name}' must have an initializer.`);\n    }\n\n    return declarator.init;\n  }\n\n  return undefined;\n}\n", "import { webcrypto as crypto } from \"node:crypto\";\n\nimport { createSeededRandom } from \"../interp/globals/math.js\";\n\nexport type TimeModuleOptions = {\n  now?: () => number;\n  random?: () => number;\n  seed?: number;\n  signal?: AbortSignal;\n};\n\nexport function makeTimeModule(options: TimeModuleOptions = {}): {\n  random: () => number;\n  now: () => number;\n  sleep: (ms: number) => Promise<void>;\n  uuid: () => string;\n} {\n  const hasDeterministicRandom = options.random !== undefined || options.seed !== undefined;\n  const random =\n    options.random ??\n    (options.seed === undefined ? () => Math.random() : createSeededRandom(options.seed).next);\n  const now = options.now ?? (() => Date.now());\n  const signal = options.signal;\n\n  async function sleep(ms: number): Promise<void> {\n    assertSleepDelay(ms);\n\n    return await new Promise<void>((resolve, reject) => {\n      if (signal?.aborted === true) {\n        reject(createSleepAbortError());\n        return;\n      }\n\n      const start = performance.now();\n      let timeout = setTimeout(resolveSleep, ms);\n\n      function cleanup(): void {\n        clearTimeout(timeout);\n        signal?.removeEventListener(\"abort\", rejectSleep);\n      }\n\n      function resolveSleep(): void {\n        const remainingMs = ms - (performance.now() - start);\n        if (remainingMs > 0) {\n          timeout = setTimeout(resolveSleep, remainingMs);\n          return;\n        }\n\n        cleanup();\n        resolve();\n      }\n\n      function rejectSleep(): void {\n        cleanup();\n        reject(createSleepAbortError());\n      }\n\n      signal?.addEventListener(\"abort\", rejectSleep, { once: true });\n    });\n  }\n\n  return {\n    random,\n    now,\n    sleep,\n    uuid: hasDeterministicRandom ? () => createRandomUuid(random) : () => crypto.randomUUID()\n  };\n}\n\nfunction createRandomUuid(random: () => number): string {\n  const bytes = Array.from({ length: 16 }, () => Math.floor(readRandomUnit(random()) * 256));\n  bytes[6] = (bytes[6] & 0x0f) | 0x40;\n  bytes[8] = (bytes[8] & 0x3f) | 0x80;\n  const hex = bytes.map((byte) => byte.toString(16).padStart(2, \"0\")).join(\"\");\n\n  return [\n    hex.slice(0, 8),\n    hex.slice(8, 12),\n    hex.slice(12, 16),\n    hex.slice(16, 20),\n    hex.slice(20)\n  ].join(\"-\");\n}\n\nfunction readRandomUnit(value: number): number {\n  if (Number.isFinite(value) && value >= 0 && value < 1) {\n    return value;\n  }\n\n  throw new RangeError(\"time.uuid() random source must return a number in [0, 1).\");\n}\n\nfunction assertSleepDelay(ms: number): void {\n  if (Number.isFinite(ms) && ms >= 0) {\n    return;\n  }\n\n  throw new RangeError(\"time.sleep(ms) requires a non-negative finite millisecond delay.\");\n}\n\nfunction createSleepAbortError(): Error {\n  return new Error(\"time.sleep aborted.\");\n}\n", "import { parseModule as parseModuleInternal, type Module } from \"./parse/parser.js\";\nimport { restore as restoreInternal, type SafeJSSnapshot, type RestoreOptions } from \"./restore.js\";\nimport {\n  deepCopyFromSandbox as copyFromSandboxInternal,\n  type SandboxPromise,\n  type SandboxValue\n} from \"./interp/values.js\";\n\nexport { parse } from \"./parse.js\";\nexport const parseModule: (source: string, filename?: string) => Module = parseModuleInternal;\nexport const restore: <TSnapshot extends SafeJSSnapshot>(\n  snapshot: TSnapshot,\n  options: RestoreOptions\n) => TSnapshot = restoreInternal;\ntype PublicCopyOptions = Omit<\n  NonNullable<Parameters<typeof copyFromSandboxInternal>[1]>,\n  \"compilation\" | \"unwrapHostObject\"\n>;\nexport const deepCopyFromSandbox: {\n  (value: SandboxPromise, options?: PublicCopyOptions): Promise<unknown>;\n  (value: SandboxValue, options?: PublicCopyOptions): unknown;\n} = copyFromSandboxInternal;\nexport { lint, type Diagnostic, type Fix, type LintFixResult, type LintOptions } from \"./lint.js\";\nexport { run } from \"./run.js\";\nexport { createRealm, type SafeJSRealm, type RealmOptions, type RealmResult, type RealmLimits } from \"./realm.js\";\nexport { defineExtension, type SafeJSExtension, type ExtensionDefinition, type ExtensionManifest, type ExtensionContext, type ExtensionExports, type CallbackOptions, type CallbackInvocation } from \"./extensions.js\";\nexport type { HostObject, HostObjectDefinition, HostObjectIndexedDefinition, HostObjectNamedDefinition, GuestReference } from \"./interp/host-capabilities.js\";\nexport { createReplayableRandom, type ReplayableRandom } from \"./random.js\";\nexport type { RunClock, RunClockSnapshot, RunRandom } from \"./run.js\";\nexport { noopOtelSink } from \"./observability/otel.js\";\nexport type { OtelSink, OtelSpan } from \"./observability/otel.js\";\nexport { FileSnapshotBackend } from \"./snapshot/backend.js\";\nexport type { Snapshot, SnapshotBackend } from \"./snapshot/backend.js\";\nexport { declareHostOperation } from \"./interp/host-bridge.js\";\nexport { HostCallResumabilityError } from \"./interp/host-call.js\";\nexport type {\n  HostCallLifecycle,\n  HostCallOutcome,\n  HostCallRecord,\n  HostCallResumeContext,\n  HostCallResumeProof,\n  HostCallResumeProvider,\n  HostCallResumeRequest\n} from \"./interp/host-call.js\";\nexport {\n  HostOperationResumePolicyError,\n  registerPendingHostCallPolicy\n} from \"./snapshot/policy.js\";\nexport type {\n  PendingHostCallPolicyMode,\n  PendingHostCallPolicyRegistration\n} from \"./snapshot/policy.js\";\nexport { dump, type DumpOptions } from \"./dump.js\";\nexport { inspectSnapshotMigration, migrateSnapshot } from \"./migrate.js\";\nexport { migrateSnapshotFile, type SnapshotMigrationFileOptions } from \"./migration-file.js\";\nexport type {\n  SnapshotMigration,\n  SnapshotMigrationOptions,\n  SnapshotMigrationReconciliation,\n  SnapshotMigrationResolution\n} from \"./migrate.js\";\nexport { SnapshotValidationError } from \"./snapshot/validation.js\";\nexport type { SnapshotValidationCode } from \"./snapshot/validation.js\";\nexport { Budget, SandboxError } from \"./interp/budget.js\";\nexport type { BudgetName, BudgetOptions } from \"./interp/budget.js\";\nexport { formatInterpreterError, type InterpreterDiagnostic } from \"./error/format.js\";\nexport { deepCopyToSandbox } from \"./interp/values.js\";\nexport { runHarness, runHarnessPair } from \"./runner/run-harness.js\";\nexport { extractBlock } from \"./loader/extract-block.js\";\nexport { findExportedConstInitializer } from \"./loader/find-exported.js\";\nexport { splitFrontmatter } from \"./loader/frontmatter.js\";\nexport type { ExportDefaultDeclaration, ExportNamedDeclaration, MetaProperty } from \"./parse.js\";\nexport {\n  AgentSpawnError,\n  createSpawnUsageAccumulator,\n  makeAgentModule,\n  runWithSpawnUsageAccumulator\n} from \"./modules/agent.js\";\nexport type {\n  AgentModuleDefinition,\n  AgentModuleOptions,\n  AgentModuleParallelCall,\n  AgentModuleRetryOptions,\n  AgentModuleSpawnOptions,\n  AgentSpawnEvent,\n  SpawnAgent,\n  SpawnAgentInput,\n  SpawnAgentResult,\n  SpawnUsageAccumulator,\n  SpawnUsageTotal\n} from \"./modules/agent.js\";\nexport { EnvAccessError, makeEnvModule, parseEnvConfig } from \"./modules/env.js\";\nexport type { EnvModule, EnvModuleOptions } from \"./modules/env.js\";\nexport { makeFailModule } from \"./modules/fail.js\";\nexport { makeFsModule } from \"./modules/fs.js\";\nexport { parseFsConfig, resolveFsConfig } from \"./modules/fs-config.js\";\nexport type { FsConfig, ResolveFsConfigOptions } from \"./modules/fs-config.js\";\nexport type {\n  FsImplementation,\n  FsModule,\n  FsModuleOptions,\n  SandboxDirent,\n  SandboxStats\n} from \"./modules/fs.js\";\nexport { makeHarnessModule } from \"./modules/harness.js\";\nexport { makeLogModule } from \"./modules/log.js\";\nexport { makeMetricModule } from \"./modules/metric.js\";\nexport { makeMcpModule } from \"./modules/mcp.js\";\nexport { parseMcpConfig } from \"./modules/mcp-transport.js\";\nexport type { McpModuleOptions, McpServerConfig } from \"./modules/mcp-transport.js\";\nexport type { ManagedMcpClient, ManagedMcpModule, McpNamedServerHandle } from \"./modules/mcp.js\";\nexport { makeTimeModule } from \"./modules/time.js\";\n"],
   "mappings": ";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAGO,IAAMA,SAA2D;;;ACHxE,SAAS,UAAU,YAAY;AAC/B,SAAS,eAAe;AAuCxB,SAAS,YAAY,QAAiC,KAAsB;AAC1E,SAAO,OAAO,UAAU,eAAe,KAAK,QAAQ,GAAG,IAAI,OAAO,GAAG,IAAI;AAC3E;AAEA,SAAS,kBAAkB,UAAkB,aAAmD;AAC9F,SAAO;AAAA,IACL;AAAA,IACA,MAAM,YAAY,aAAa,MAAM;AAAA,IACrC,SAAS,YAAY,aAAa,SAAS;AAAA,EAC7C;AACF;AAEA,SAAS,4BAA4B,aAA4C;AAC/E,QAAM,SAAS,YAAY,aAAa,QAAQ;AAChD,MAAI,OAAO,WAAW,YAAY,WAAW,QAAQ,MAAM,QAAQ,MAAM,GAAG;AAC1E;AAAA,EACF;AAEA,aAAW,CAAC,MAAM,UAAU,KAAK,OAAO,QAAQ,MAAM,GAAG;AACvD,QAAI,OAAO,eAAe,YAAY,eAAe,QAAQ,MAAM,QAAQ,UAAU,GAAG;AACtF;AAAA,IACF;AAEA,UAAM,SAAS;AACf,UAAM,QAAQ,YAAY,QAAQ,OAAO;AACzC,UAAM,OAAO,YAAY,QAAQ,MAAM;AACvC,QAAI,OAAO,UAAU,YAAY,OAAO,SAAS,UAAU;AACzD;AAAA,IACF;AAGA,QAAI,CAAC,YAAY,SAAS,IAAiB,GAAG;AAC5C;AAAA,IACF;AAEA,QAAI,CAAC,kBAAkB,OAAO,IAAiB,GAAG;AAChD,YAAM,IAAI,MAAM,kBAAkB,IAAI,aAAa,KAAK,4BAA4B,IAAI,IAAI;AAAA,IAC9F;AAAA,EACF;AACF;AAEO,IAAM,YAAN,cAAwB,MAAM;AAAA,EAC1B;AAAA,EAET,YAAY,aAAoC;AAC9C,UAAM,uBAAuB,WAAW,CAAC;AACzC,SAAK,OAAO;AACZ,SAAK,cAAc;AAAA,EACrB;AACF;AAEA,eAAsB,WACpB,UACA,SAC2B;AAC3B,QAAM,YAAY,MAAM,gBAAgB,QAAQ;AAChD,QAAM,EAAE,kBAAkB,aAAa,YAAY,IAAI,qBAAqB,UAAU,SAAS;AAC/F,8BAA4B,WAAW;AACvC,QAAM,OAAO,kBAAkB,UAAU,WAAW;AACpD,QAAM,UAAU,qBAAqB,QAAQ,WAAW,aAAa,IAAI,GAAG,WAAW;AACvF,QAAM,cAAc,KAAK,kBAAkB;AAAA,IACzC,UAAU;AAAA,IACV,SAAS,qCAAqC,OAAO;AAAA,EACvD,CAAC;AACD,QAAM,aAAa,YAAY,OAAO,CAAC,eAAe,WAAW,aAAa,OAAO;AAErF,MAAI,WAAW,SAAS,GAAG;AACzB,UAAM,IAAI,UAAU,UAAU;AAAA,EAChC;AAEA,SAAO,iBAAiB,kBAAkB;AAAA,IACxC,QAAQ,QAAQ;AAAA,IAChB,gBAAgB,iBAAiB,kBAAkB,QAAQ,IAAI,CAAC,IAAI;AAAA,IACpE,UAAU;AAAA,IACV;AAAA,IACA,UAAU,QAAQ;AAAA,IAClB,QAAQ,QAAQ;AAAA,IAChB,iBAAiB,QAAQ;AAAA,IACzB,oBAAoB,QAAQ;AAAA,IAC5B,cAAc,QAAQ;AAAA,EACxB,CAAC;AACH;AAEA,eAAsB,eACpB,UACA,SAC2B;AAC3B,QAAM,OAAO,mBAAmB,QAAQ;AACxC,QAAM,CAAC,aAAa,SAAS,IAAI,MAAM,QAAQ,IAAI;AAAA,IACjD,gBAAgB,KAAK,YAAY;AAAA,IACjC,gBAAgB,KAAK,UAAU;AAAA,EACjC,CAAC;AACD,QAAM,EAAE,aAAa,KAAK,IAAI,iBAAiB,mBAAmB,WAAW,CAAC;AAC9E,8BAA4B,WAAW;AACvC,QAAM,mBAAmB,mBAAmB,SAAS;AACrD,QAAM,OAAO,kBAAkB,KAAK,cAAc,WAAW;AAC7D,QAAM,UAAU,QAAQ,WAAW,aAAa,IAAI;AACpD,QAAM,cAAc,KAAK,kBAAkB;AAAA,IACzC,oBAAoB,CAAC,QAAQ;AAAA,IAC7B,eAAe;AAAA,MACb,YAAY,CAAC,aAAa;AAAA,MAC1B,UAAU;AAAA,IACZ;AAAA,IACA,UAAU,KAAK;AAAA,IACf,mBAAmB,OAAO,KAAK,WAAW;AAAA,IAC1C,SAAS,qCAAqC,OAAO;AAAA,EACvD,CAAC;AACD,QAAM,aAAa,YAAY,OAAO,CAAC,eAAe,WAAW,aAAa,OAAO;AAErF,MAAI,WAAW,SAAS,GAAG;AACzB,UAAM,IAAI,UAAU,UAAU;AAAA,EAChC;AAEA,SAAO,iBAAiB,kBAAkB;AAAA,IACxC,QAAQ,QAAQ;AAAA,IAChB,gBAAgB,CAAC,WAAW;AAAA,IAC5B,UAAU,KAAK;AAAA,IACf,YAAY;AAAA,MACV;AAAA,MACA,UAAU,KAAK;AAAA,MACf,MAAM,KAAK;AAAA,MACX,SAAS,KAAK;AAAA,IAChB;AAAA,IACA;AAAA,IACA,UAAU,QAAQ;AAAA,IAClB,QAAQ,QAAQ;AAAA,IAChB,iBAAiB,QAAQ;AAAA,IACzB,oBAAoB,QAAQ;AAAA,IAC5B,cAAc,QAAQ;AAAA,EACxB,CAAC;AACH;AAEA,eAAe,gBAAgB,UAAmC;AAChE,MAAI;AACF,UAAM,QAAQ,MAAM,KAAK,QAAQ;AACjC,QAAI,CAAC,MAAM,OAAO,GAAG;AACnB,YAAM,IAAI,MAAM,sCAAsC,QAAQ,EAAE;AAAA,IAClE;AAEA,WAAO,MAAM,SAAS,UAAU,MAAM;AAAA,EACxC,SAAS,OAAO;AACd,QAAI,gBAAgB,OAAO,QAAQ,KAAK,gBAAgB,OAAO,SAAS,GAAG;AACzE,YAAM,IAAI,MAAM,2BAA2B,QAAQ,EAAE;AAAA,IACvD;AAEA,UAAM;AAAA,EACR;AACF;AAEA,SAAS,qBACP,UACA,QAKA;AACA,MAAI,gBAAgB,QAAQ,GAAG;AAC7B,UAAM,mBAAmB,mBAAmB,MAAM;AAClD,QAAI,iBAAiB,WAAW,GAAG;AACjC,YAAM,IAAI,MAAM,8CAA8C,QAAQ,EAAE;AAAA,IAC1E;AAEA,WAAO;AAAA,MACL;AAAA,MACA,aAAa,CAAC;AAAA,MACd,aAAa;AAAA,IACf;AAAA,EACF;AAEA,QAAM,EAAE,aAAa,KAAK,IAAI,iBAAiB,MAAM;AACrD,MAAI,OAAO,WAAW,KAAK,KAAK,KAAK,EAAE,WAAW,GAAG;AACnD,UAAM,IAAI,MAAM,8CAA8C,QAAQ,EAAE;AAAA,EAC1E;AAEA,QAAM,kBAAkB,OAAO,SAAS,KAAK;AAC7C,QAAM,EAAE,QAAQ,iBAAiB,YAAY,IAAI;AAAA,IAC/C;AAAA,IACA,gBAAgB,QAAQ,GAAG,eAAe,IAAI;AAAA,EAChD;AACA,SAAO;AAAA,IACL,kBACE,WAAW,OAAO,MAAM,GAAG,kBAAkB,WAAW,CAAC,IAAI,cAAc,eAAe;AAAA,IAC5F;AAAA,IACA,aAAa;AAAA,EACf;AACF;AAEA,SAAS,mBAAmB,UAAgE;AAC1F,QAAM,YAAY,QAAQ,QAAQ;AAClC,QAAM,WAAW,UAAU,WAAW,IAAI,WAAW,SAAS,MAAM,GAAG,CAAC,UAAU,MAAM;AAExF,MAAI,qBAAqB,SAAS,GAAG;AACnC,WAAO;AAAA,MACL,cAAc,GAAG,QAAQ;AAAA,MACzB,YAAY;AAAA,IACd;AAAA,EACF;AAEA,SAAO;AAAA,IACL,cAAc;AAAA,IACd,YAAY,GAAG,QAAQ;AAAA,EACzB;AACF;AAEA,SAAS,gBAAgB,UAA2B;AAClD,SAAO,qBAAqB,QAAQ,QAAQ,CAAC;AAC/C;AAEA,SAAS,qBAAqB,WAA4B;AACxD,SAAO,cAAc,aAAa,cAAc;AAClD;AAEA,eAAe,iBACb,kBACA,SAC2B;AAC3B,MAAI;AACF,WAAO,MAAM,IAAI,kBAAkB,OAAO;AAAA,EAC5C,SAAS,OAAO;AACd,QAAI,aAAa,KAAK,GAAG;AACvB,YAAM;AAAA,IACR;AAEA,WAAO;AAAA,MACL,GAAI,aAAa,KAAK,IAAI,EAAE,SAAS,KAAc,IAAI,CAAC;AAAA,MACxD;AAAA,MACA,IAAI;AAAA,IACN;AAAA,EACF;AACF;AAEA,SAAS,aAAa,OAAyB;AAC7C,SAAO,iBAAiB,SAAS,MAAM,SAAS;AAClD;AAEA,SAAS,aAAa,OAAyB;AAC7C,MAAI,iBAAiB,OAAO;AAC1B,WAAO,MAAM,SAAS;AAAA,EACxB;AAEA,SACE,OAAO,UAAU,YACjB,UAAU,QACV,OAAO,UAAU,eAAe,KAAK,OAAO,MAAM,KACjD,MAA6B,SAAS;AAE3C;AAEA,SAAS,iBAAiB,QAAgB,UAA2B;AACnE,SAAO,YAAY,QAAQ,QAAQ,EAAE,KAAK;AAAA,IACxC,CAAC,cAAc,UAAU,SAAS;AAAA,EACpC;AACF;AAEA,SAAS,qBAAqB,SAAyB,aAAsC;AAC3F,MAAI,CAAC,aAAa;AAChB,WAAO;AAAA,EACT;AAEA,MAAI,mBAAmB,KAAK;AAC1B,UAAMC,cAAa,IAAI,IAAI,OAAO;AAClC,IAAAA,YAAW,OAAO,SAAS;AAC3B,WAAOA;AAAA,EACT;AAEA,QAAM,aAA4C,CAAC;AAEnD,aAAW,CAAC,YAAY,aAAa,KAAK,OAAO,QAAQ,OAAO,GAAG;AACjE,QAAI,eAAe,WAAW;AAC5B,iBAAW,UAAU,IAAI;AAAA,IAC3B;AAAA,EACF;AAEA,SAAO;AACT;AAEA,SAAS,mBAAmB,QAAwB;AAClD,SAAO,OAAO,WAAW,QAAQ,IAAI,OAAO,MAAM,CAAC,IAAI;AACzD;AAEA,SAAS,cAAc,QAAwB;AAC7C,MAAI,CAAC,OAAO,WAAW,IAAI,GAAG;AAC5B,WAAO;AAAA,EACT;AAEA,MAAI,MAAM;AACV,SAAO,MAAM,OAAO,UAAU,OAAO,GAAG,MAAM,QAAQ,OAAO,GAAG,MAAM,KAAM,QAAO;AACnF,SAAO,GAAG,IAAI,OAAO,GAAG,CAAC,GAAG,OAAO,MAAM,GAAG,CAAC;AAC/C;AAEA,SAAS,uBAAuB,aAA4C;AAC1E,MAAI,YAAY,WAAW,GAAG;AAC5B,WAAO;AAAA,EACT;AAEA,SAAO,YACJ;AAAA,IACC,CAAC,eACC,GAAG,WAAW,QAAQ,IAAI,WAAW,IAAI,IAAI,WAAW,MAAM,IAAI,WAAW,IAAI,IAAI,WAAW,OAAO;AAAA,EAC3G,EACC,KAAK,IAAI;AACd;;;ACpVO,SAAS,6BAA6B,QAAgB,MAA+E;AAC1I,aAAW,aAAa,OAAO,MAAM;AACnC,QAAI,UAAU,SAAS,4BAA4B;AACjD,UAAI,SAAS,WAAW;AACtB,eAAO,UAAU;AAAA,MACnB;AAEA;AAAA,IACF;AAEA,QAAI,UAAU,SAAS,0BAA0B;AAC/C;AAAA,IACF;AAEA,UAAM,cAAc,UAAU;AAC9B,QAAI,YAAY,SAAS,SAAS;AAChC,YAAM,IAAI,MAAM,aAAa,IAAI,gCAAgC;AAAA,IACnE;AAEA,QAAI,YAAY,aAAa,WAAW,GAAG;AACzC,YAAM,IAAI,MAAM,kEAAkE;AAAA,IACpF;AAEA,UAAM,aAAa,YAAY,aAAa,CAAC;AAC7C,QAAI,WAAW,GAAG,SAAS,cAAc;AACvC,YAAM,IAAI,MAAM,yDAAyD;AAAA,IAC3E;AAEA,QAAI,WAAW,GAAG,SAAS,MAAM;AAC/B;AAAA,IACF;AAEA,QAAI,WAAW,SAAS,QAAW;AACjC,YAAM,IAAI,MAAM,mBAAmB,IAAI,6BAA6B;AAAA,IACtE;AAEA,WAAO,WAAW;AAAA,EACpB;AAEA,SAAO;AACT;;;AC1CA,SAAS,aAAa,cAAc;AAW7B,SAAS,eAAe,UAA6B,CAAC,GAK3D;AACA,QAAM,yBAAyB,QAAQ,WAAW,UAAa,QAAQ,SAAS;AAChF,QAAM,SACJ,QAAQ,WACP,QAAQ,SAAS,SAAY,MAAM,KAAK,OAAO,IAAI,mBAAmB,QAAQ,IAAI,EAAE;AACvF,QAAM,MAAM,QAAQ,QAAQ,MAAM,KAAK,IAAI;AAC3C,QAAM,SAAS,QAAQ;AAEvB,iBAAe,MAAM,IAA2B;AAC9C,qBAAiB,EAAE;AAEnB,WAAO,MAAM,IAAI,QAAc,CAAC,SAAS,WAAW;AAClD,UAAI,QAAQ,YAAY,MAAM;AAC5B,eAAO,sBAAsB,CAAC;AAC9B;AAAA,MACF;AAEA,YAAM,QAAQ,YAAY,IAAI;AAC9B,UAAI,UAAU,WAAW,cAAc,EAAE;AAEzC,eAAS,UAAgB;AACvB,qBAAa,OAAO;AACpB,gBAAQ,oBAAoB,SAAS,WAAW;AAAA,MAClD;AAEA,eAAS,eAAqB;AAC5B,cAAM,cAAc,MAAM,YAAY,IAAI,IAAI;AAC9C,YAAI,cAAc,GAAG;AACnB,oBAAU,WAAW,cAAc,WAAW;AAC9C;AAAA,QACF;AAEA,gBAAQ;AACR,gBAAQ;AAAA,MACV;AAEA,eAAS,cAAoB;AAC3B,gBAAQ;AACR,eAAO,sBAAsB,CAAC;AAAA,MAChC;AAEA,cAAQ,iBAAiB,SAAS,aAAa,EAAE,MAAM,KAAK,CAAC;AAAA,IAC/D,CAAC;AAAA,EACH;AAEA,SAAO;AAAA,IACL;AAAA,IACA;AAAA,IACA;AAAA,IACA,MAAM,yBAAyB,MAAM,iBAAiB,MAAM,IAAI,MAAM,OAAO,WAAW;AAAA,EAC1F;AACF;AAEA,SAAS,iBAAiB,QAA8B;AACtD,QAAM,QAAQ,MAAM,KAAK,EAAE,QAAQ,GAAG,GAAG,MAAM,KAAK,MAAM,eAAe,OAAO,CAAC,IAAI,GAAG,CAAC;AACzF,QAAM,CAAC,IAAK,MAAM,CAAC,IAAI,KAAQ;AAC/B,QAAM,CAAC,IAAK,MAAM,CAAC,IAAI,KAAQ;AAC/B,QAAM,MAAM,MAAM,IAAI,CAAC,SAAS,KAAK,SAAS,EAAE,EAAE,SAAS,GAAG,GAAG,CAAC,EAAE,KAAK,EAAE;AAE3E,SAAO;AAAA,IACL,IAAI,MAAM,GAAG,CAAC;AAAA,IACd,IAAI,MAAM,GAAG,EAAE;AAAA,IACf,IAAI,MAAM,IAAI,EAAE;AAAA,IAChB,IAAI,MAAM,IAAI,EAAE;AAAA,IAChB,IAAI,MAAM,EAAE;AAAA,EACd,EAAE,KAAK,GAAG;AACZ;AAEA,SAAS,eAAe,OAAuB;AAC7C,MAAI,OAAO,SAAS,KAAK,KAAK,SAAS,KAAK,QAAQ,GAAG;AACrD,WAAO;AAAA,EACT;AAEA,QAAM,IAAI,WAAW,2DAA2D;AAClF;AAEA,SAAS,iBAAiB,IAAkB;AAC1C,MAAI,OAAO,SAAS,EAAE,KAAK,MAAM,GAAG;AAClC;AAAA,EACF;AAEA,QAAM,IAAI,WAAW,kEAAkE;AACzF;AAEA,SAAS,wBAA+B;AACtC,SAAO,IAAI,MAAM,qBAAqB;AACxC;;;AC7FO,IAAMC,eAA6D;AACnE,IAAMC,WAGI;AAKV,IAAMC,uBAGT;",
   "names": ["parse", "rawModules", "parseModule", "restore", "deepCopyFromSandbox"]
 }

package/packages/safe-js/dist/interp/bigint-operators.d.ts

@@ -0,0 +1,3 @@
+import { Budget } from "./budget.js";
+export type BigIntOperator = "+" | "-" | "*" | "/" | "%" | "**" | "&" | "|" | "^" | "<<" | ">>" | ">>>";
+export declare function bigIntOperation(operator: BigIntOperator, left: bigint, right: bigint, budget: Budget): bigint;

package/packages/safe-js/dist/interp/bigint-operators.js

@@ -0,0 +1,62 @@
+import { SandboxError } from "./budget.js";
+export function bigIntOperation(operator, left, right, budget) {
+    if (operator === ">>>")
+        throw new TypeError("BigInts have no unsigned right shift.");
+    if ((operator === "/" || operator === "%") && right === 0n)
+        throw new RangeError("Division by zero.");
+    if (operator === "**" && right < 0n)
+        throw new RangeError("BigInt exponent must be nonnegative.");
+    const leftSize = left.toString(16).length;
+    const rightSize = right.toString(16).length;
+    budget.visitNode(leftSize + rightSize);
+    let size = Math.max(leftSize, rightSize) + 1;
+    let work = leftSize + rightSize;
+    if (operator === "*") {
+        size = leftSize + rightSize;
+        work = leftSize * rightSize;
+    }
+    else if (operator === "/" || operator === "%") {
+        size = leftSize;
+        work = leftSize * rightSize;
+    }
+    else if (operator === "**") {
+        if (right === 0n)
+            return 1n;
+        if (left === 0n || left === 1n)
+            return left;
+        if (left === -1n)
+            return right % 2n === 0n ? 1n : -1n;
+        size = leftSize * Number(right);
+        work = size * size;
+    }
+    else if (operator === "<<" || operator === ">>") {
+        if (left === 0n)
+            return 0n;
+        const shift = operator === "<<" ? right : -right;
+        size = shift > 0n ? leftSize + Math.ceil(Number(shift) / 4) : leftSize;
+        work = size + rightSize;
+    }
+    if (!Number.isSafeInteger(size) || !Number.isSafeInteger(work))
+        throw new SandboxError({ budget: "dataSize", current: Infinity, limit: Number.MAX_SAFE_INTEGER });
+    budget.visitNode(work);
+    const allocation = {};
+    budget.setRetainedDataUsage(allocation, size);
+    try {
+        switch (operator) {
+            case "+": return left + right;
+            case "-": return left - right;
+            case "*": return left * right;
+            case "/": return left / right;
+            case "%": return left % right;
+            case "**": return left ** right;
+            case "&": return left & right;
+            case "|": return left | right;
+            case "^": return left ^ right;
+            case "<<": return left << right;
+            case ">>": return left >> right;
+        }
+    }
+    finally {
+        budget.setRetainedDataUsage(allocation, 0);
+    }
+}

package/packages/safe-js/dist/interp/boxed.d.ts

@@ -1,6 +1,6 @@
 import type { SandboxObject } from "./values.js";
-export type BoxedPrimitive = string | number | boolean | symbol;
-export type BoxedKind = "string" | "number" | "boolean" | "symbol";
+export type BoxedPrimitive = string | number | bigint | boolean | symbol;
+export type BoxedKind = "string" | "number" | "bigint" | "boolean" | "symbol";
 declare const boxedPrimitiveBrand: unique symbol;
 export type SandboxBox = SandboxObject & {
     readonly [boxedPrimitiveBrand]: true;

package/packages/safe-js/dist/interp/boxed.js

@@ -4,6 +4,7 @@ const numberValue = Number.prototype.valueOf;
 const stringValue = String.prototype.valueOf;
 const booleanValue = Boolean.prototype.valueOf;
 const symbolValue = Symbol.prototype.valueOf;
+const bigintValue = BigInt.prototype.valueOf;
 export function nativeBoxedValue(value) {
     if (types.isNumberObject(value))
         return Reflect.apply(numberValue, value, []);
@@ -13,10 +14,12 @@ export function nativeBoxedValue(value) {
         return Reflect.apply(booleanValue, value, []);
     if (types.isSymbolObject(value))
         return Reflect.apply(symbolValue, value, []);
+    if (types.isBigIntObject(value))
+        return Reflect.apply(bigintValue, value, []);
     return undefined;
 }
 export function createSandboxBox(value) {
-    if (typeof value !== "number" && typeof value !== "string" && typeof value !== "boolean" && typeof value !== "symbol")
+    if (typeof value !== "number" && typeof value !== "bigint" && typeof value !== "string" && typeof value !== "boolean" && typeof value !== "symbol")
         throw new TypeError("Invalid boxed primitive payload.");
     const box = Object(value);
     Object.setPrototypeOf(box, null);

package/packages/safe-js/dist/interp/globals/bigint.d.ts

@@ -0,0 +1,2 @@
+import type { Budget } from "../budget.js";
+export declare function createBigIntGlobal(budget: Budget): import("../values.js").SandboxClosure;

package/packages/safe-js/dist/interp/globals/bigint.js

@@ -0,0 +1,85 @@
+import { primitiveReceiver } from "../boxed.js";
+import { installBoxedPrototype, materializeFunctionProperties } from "../object-model.js";
+import { objectToPrimitive, sandboxNumber } from "../string-coercion.js";
+import { createSandboxClosure } from "../values.js";
+export function createBigIntGlobal(budget) {
+    const convert = async (value, context, allowNumber = false) => {
+        const primitive = value !== null && typeof value === "object"
+            ? await objectToPrimitive(value, budget, context, new Set(), "number") : value;
+        if (typeof primitive === "bigint")
+            return primitive;
+        if (typeof primitive !== "string" && typeof primitive !== "boolean" && !(allowNumber && typeof primitive === "number"))
+            throw new TypeError("Cannot convert value to BigInt.");
+        const size = typeof primitive === "string" ? primitive.length : 256;
+        budget.visitNode(size);
+        const allocation = {};
+        budget.setRetainedDataUsage(allocation, size);
+        try {
+            return BigInt(primitive);
+        }
+        finally {
+            budget.setRetainedDataUsage(allocation, 0);
+        }
+    };
+    const constructor = createSandboxClosure({
+        guest: true, sandbox: true, name: "BigInt", length: 1,
+        call: ([value], context) => convert(value, context, true)
+    });
+    const prototype = Object.create(null);
+    Object.defineProperties(prototype, {
+        constructor: { value: constructor, writable: true, configurable: true },
+        valueOf: {
+            value: createSandboxClosure({ sandbox: true, name: "valueOf", length: 0,
+                call: (_args, context) => primitiveReceiver(context?.thisValue, "bigint") }),
+            writable: true, configurable: true
+        },
+        toString: {
+            value: createSandboxClosure({ sandbox: true, name: "toString", length: 1,
+                call: async ([radix], context) => {
+                    const value = primitiveReceiver(context?.thisValue, "bigint");
+                    const base = radix === undefined ? 10 : await sandboxNumber(radix, budget, context);
+                    const allocation = {};
+                    const size = value.toString(16).length * 4;
+                    budget.visitNode(size);
+                    budget.setRetainedDataUsage(allocation, size);
+                    try {
+                        return budget.allocateString(value.toString(base));
+                    }
+                    finally {
+                        budget.setRetainedDataUsage(allocation, 0);
+                    }
+                } }),
+            writable: true, configurable: true
+        },
+        [Symbol.toStringTag]: { value: "BigInt", configurable: true }
+    });
+    const properties = materializeFunctionProperties(constructor);
+    Object.defineProperty(properties, "prototype", { value: prototype });
+    for (const name of ["asIntN", "asUintN"]) {
+        Object.defineProperty(properties, name, {
+            writable: true, configurable: true,
+            value: createSandboxClosure({ sandbox: true, name, length: 2,
+                call: async ([bits, input], context) => {
+                    const number = await sandboxNumber(bits, budget, context);
+                    const width = Number.isNaN(number) ? 0 : Math.trunc(number);
+                    if (width < 0 || !Number.isSafeInteger(width))
+                        throw new RangeError("Invalid BigInt width.");
+                    const value = await convert(input, context);
+                    const size = value.toString(16).length;
+                    budget.visitNode(size);
+                    if (width >= size * 4 + 1 && (name === "asIntN" || value >= 0n))
+                        return value;
+                    const allocation = {};
+                    budget.setRetainedDataUsage(allocation, Math.ceil(width / 4) + 1);
+                    try {
+                        return BigInt[name](width, value);
+                    }
+                    finally {
+                        budget.setRetainedDataUsage(allocation, 0);
+                    }
+                } })
+        });
+    }
+    installBoxedPrototype(budget, prototype, constructor, "bigint");
+    return constructor;
+}

package/packages/safe-js/dist/interp/globals/console-json.js

@@ -1,6 +1,6 @@
 import { retainValues } from "../resources.js";
 import { readPropertyDescriptor } from "../accessors.js";
-import { getSandboxPropertyDescriptor } from "../object-model.js";
+import { getBoxedPrototype, getSandboxPropertyDescriptor } from "../object-model.js";
 import { isSandboxDate } from "../date.js";
 import { dateToJSON } from "./date.js";
 import { boxedValue, isSandboxBox } from "../boxed.js";
@@ -79,25 +79,58 @@ export function createConsoleJsonGlobals(options) {
     };
 }
 async function stringifyJson(value, replacer, indent, budget, context) {
-    if (replacer !== undefined && replacer !== null && !isSandboxClosure(replacer)) {
-        throw new TypeError("JSON.stringify(value, replacer, indent) only supports function, null, or undefined replacers.");
-    }
-    if (indent !== undefined && typeof indent !== "number" && typeof indent !== "string") {
-        throw new TypeError("JSON.stringify(value, replacer, indent) requires indent to be a string, number, or undefined.");
+    const allocation = {};
+    let propertyList;
+    const release = retainValues(budget, () => [value, replacer, indent]);
+    try {
+        if (Array.isArray(replacer)) {
+            propertyList = [];
+            const seen = new Set();
+            let size = 0;
+            const state = { budget, context, gap: "", stack: [] };
+            const length = replacer.length;
+            for (let index = 0; index < length; index++) {
+                budget.visitNode();
+                const entry = await getStringifyProperty(replacer, String(index), state);
+                const primitive = isSandboxBox(entry) ? boxedValue(entry) : entry;
+                if (typeof primitive !== "string" && typeof primitive !== "number")
+                    continue;
+                const key = await sandboxString(entry, budget, context);
+                if (seen.has(key))
+                    continue;
+                budget.allocateArrayLength(propertyList.length + 1);
+                size += key.length + 2;
+                budget.setRetainedDataUsage(allocation, size);
+                propertyList.push(key);
+                seen.add(key);
+            }
+        }
+        if (isSandboxBox(indent)) {
+            const primitive = boxedValue(indent);
+            if (typeof primitive === "number")
+                indent = await sandboxNumber(indent, budget, context);
+            else if (typeof primitive === "string")
+                indent = await sandboxString(indent, budget, context);
+        }
+        const holder = {};
+        defineDataProperty(holder, "", value);
+        const output = await stringifyProperty("", holder, {
+            budget,
+            context,
+            gap: normalizeStringifyGap(indent),
+            replacer: isSandboxClosure(replacer) ? replacer : undefined,
+            propertyList,
+            stack: []
+        });
+        if (output === undefined) {
+            return undefined;
+        }
+        return budget.allocateString(output);
     }
-    const holder = {};
-    defineDataProperty(holder, "", value);
-    const output = await stringifyProperty("", holder, {
-        budget,
-        context,
-        gap: normalizeStringifyGap(indent),
-        replacer: isSandboxClosure(replacer) ? replacer : undefined,
-        stack: []
-    });
-    if (output === undefined) {
-        return undefined;
+    finally {
+        budget.setRetainedDataUsage(allocation, 0);
+        release();
     }
-    return budget.allocateString(output);
 }
 async function stringifyProperty(key, holder, state, indent = "") {
     let value = await getStringifyProperty(holder, key, state);
@@ -106,7 +139,7 @@ async function stringifyProperty(key, holder, state, indent = "") {
         if (isSandboxDate(value) && getSandboxPropertyDescriptor(value, "toJSON", state.budget) === undefined) {
             value = await dateToJSON(value, state.budget, state.context);
         }
-        else if (isStringifyContainer(value)) {
+        else if (typeof value === "bigint" || isSandboxClosure(value) || isStringifyContainer(value)) {
             const toJSON = await getStringifyProperty(value, "toJSON", state);
             if (isSandboxClosure(toJSON)) {
                 value = await callStringifyClosure(toJSON, [key], value, state);
@@ -188,7 +221,7 @@ async function stringifyObject(value, state, indent) {
     const release = retainValues(state.budget, () => entries);
     try {
         const nextIndent = indent + state.gap;
-        for (const key of Object.keys(value)) {
+        for (const key of state.propertyList ?? Object.keys(value)) {
             const serialized = await stringifyProperty(key, value, state, nextIndent);
             if (serialized !== undefined) {
                 entries.push(`${quoteJsonString(key)}:${state.gap === "" ? "" : " "}${serialized}`);
@@ -256,6 +289,8 @@ function toSandboxValue(value) {
         value === undefined ||
         typeof value === "string" ||
         typeof value === "number" ||
+        typeof value === "bigint" ||
+        typeof value === "symbol" ||
         typeof value === "boolean" ||
         isSandboxClosure(value) ||
         isSandboxPromise(value) ||
@@ -263,15 +298,13 @@ function toSandboxValue(value) {
         isStringifyContainer(value)) {
         return value;
     }
-    if (typeof value === "bigint") {
-        throw new TypeError("Do not know how to serialize a BigInt.");
-    }
     throw new TypeError(`JSON.stringify(value) produced an unsupported value of type ${typeof value}.`);
 }
 function getStringifyProperty(target, key, state) {
     if (state.context?.getProperty !== undefined)
         return state.context.getProperty(target, key);
-    const descriptor = getSandboxPropertyDescriptor(target, key, state.budget);
+    const object = typeof target === "bigint" ? getBoxedPrototype(target, state.budget) : target;
+    const descriptor = object === undefined ? undefined : getSandboxPropertyDescriptor(object, key, state.budget);
     return descriptor === undefined
         ? undefined
         : readPropertyDescriptor(descriptor, target, state.context);

package/packages/safe-js/dist/interp/globals/object-array.js

@@ -266,7 +266,7 @@ export function createObjectArrayGlobals(options) {
             }
         }, options.budget),
         Number: createPrimitiveConstructor({
-            call: (args, context) => sandboxNumber(args.length === 0 ? 0 : args[0], options.budget, context),
+            call: (args, context) => sandboxNumber(args.length === 0 ? 0 : args[0], options.budget, context, true),
             name: "Number",
             properties: {
                 isFinite: createSandboxClosure({

package/packages/safe-js/dist/interp/globals.d.ts

@@ -28,6 +28,7 @@ export declare function createBuiltinBindings(options: Parameters<typeof createC
     Float32Array: import("./values.js").SandboxClosure;
     Date: import("./values.js").SandboxClosure;
     Symbol: import("./values.js").SandboxClosure;
+    BigInt: import("./values.js").SandboxClosure;
     Map: import("./values.js").SandboxClosure;
     Set: import("./values.js").SandboxClosure;
     JSON: import("./values.js").SandboxObject;

package/packages/safe-js/dist/interp/globals.js

@@ -9,6 +9,7 @@ import { createObjectArrayGlobals } from "./globals/object-array.js";
 import { createPromiseGlobals } from "./promise.js";
 import { createDateGlobal } from "./globals/date.js";
 import { createSymbolGlobal } from "./globals/symbol.js";
+import { createBigIntGlobal } from "./globals/bigint.js";
 export function createBuiltinBindings(options) {
     return {
         ...createConsoleJsonGlobals(options),
@@ -16,6 +17,7 @@ export function createBuiltinBindings(options) {
         Float32Array: createFloat32ArrayGlobal(options.budget),
         Date: createDateGlobal(options),
         Symbol: createSymbolGlobal(options.budget),
+        BigInt: createBigIntGlobal(options.budget),
         ...createErrorGlobals(options),
         ...createMathGlobals({ random: options.random }),
         ...createObjectArrayGlobals(options),

package/packages/safe-js/dist/interp/host-bridge.js

@@ -561,6 +561,7 @@ function isSandboxLikeValue(value) {
         value === undefined ||
         typeof value === "string" ||
         typeof value === "number" ||
+        typeof value === "bigint" ||
         typeof value === "boolean") {
         return true;
     }
@@ -628,6 +629,7 @@ export function copyHostValueToSandbox(value, stackFrames, options, state, path)
     if (value === null ||
         value === undefined ||
         typeof value === "number" ||
+        typeof value === "bigint" ||
         typeof value === "boolean") {
         return value;
     }