poe-code 9.0.0 → 10.0.0

package/packages/safejs/dist/chunks/{chunk-55ZK3CR7.js → chunk-SDKCGJW4.js}

@@ -14,7 +14,7 @@ import {
   safeEndSpan,
   safeRecordException,
   safeStartSpan
-} from "./chunk-GQBEEFVQ.js";
+} from "./chunk-E6LJNTDX.js";
 
 // packages/safejs/src/error/format.ts
 var DEFAULT_MAX_MESSAGE_LENGTH = 1e4;
@@ -2608,6 +2608,90 @@ function isRecord2(value) {
   return typeof value === "object" && value !== null && !Array.isArray(value);
 }
 
+// packages/safejs/src/modules/env.ts
+var EnvAccessError = class extends Error {
+  code = "ENV_ACCESS_DENIED";
+  variable;
+  constructor(variable) {
+    super(`Environment access denied for ${JSON.stringify(variable)}.`);
+    this.name = "EnvAccessError";
+    this.variable = variable;
+    hostErrorData.set(this, { code: this.code, variable });
+  }
+};
+function makeEnvModule(input) {
+  const options = normalizeEnvOptions(Array.isArray(input) ? { allow: input } : input);
+  const allowedNames = new Set(options.allow);
+  const values = options.values ?? process.env;
+  return {
+    get(name) {
+      const variable = readEnvName(name, "Environment variable name");
+      if (!allowedNames.has(variable)) throw new EnvAccessError(variable);
+      return readEnvValue(values, variable);
+    }
+  };
+}
+function parseEnvConfig(json) {
+  return normalizeEnvOptions(JSON.parse(json));
+}
+function normalizeEnvOptions(input) {
+  if (input === null || typeof input !== "object" || Array.isArray(input)) {
+    throw new TypeError("Environment options must be an object.");
+  }
+  const fields = Object.getOwnPropertyDescriptors(input);
+  for (const key2 of Reflect.ownKeys(fields)) {
+    if (key2 !== "allow" && key2 !== "values") {
+      throw new TypeError("Unknown environment option.");
+    }
+    if (!("value" in fields[key2])) {
+      throw new TypeError("Environment options must not contain accessors.");
+    }
+  }
+  const inputAllow = Object.getOwnPropertyDescriptor(input, "allow")?.value;
+  if (!Array.isArray(inputAllow)) {
+    throw new TypeError("Environment allow list must be an array of non-empty strings.");
+  }
+  const allow = [];
+  for (let index = 0; index < inputAllow.length; index += 1) {
+    const descriptor = Object.getOwnPropertyDescriptor(inputAllow, index);
+    if (descriptor === void 0 || !("value" in descriptor)) {
+      throw new TypeError("Environment allow list must contain only own data entries.");
+    }
+    allow.push(readEnvName(descriptor.value, `Environment allow list[${index}]`));
+  }
+  const inputValues = Object.getOwnPropertyDescriptor(input, "values")?.value;
+  if (inputValues === void 0) return { allow };
+  if (inputValues === null || typeof inputValues !== "object" || Array.isArray(inputValues)) {
+    throw new TypeError("Environment values must be an object.");
+  }
+  return {
+    allow,
+    values: Object.fromEntries(allow.map((name) => [name, readEnvValue(inputValues, name)]))
+  };
+}
+function readEnvValue(values, name) {
+  const descriptor = Object.getOwnPropertyDescriptor(values, name);
+  if (descriptor === void 0) return void 0;
+  if (!("value" in descriptor)) {
+    throw new TypeError(`Environment value for ${JSON.stringify(name)} must not be an accessor.`);
+  }
+  if (descriptor.value !== void 0 && typeof descriptor.value !== "string") {
+    throw new TypeError(
+      `Environment value for ${JSON.stringify(name)} must be a string or undefined.`
+    );
+  }
+  return descriptor.value;
+}
+function readEnvName(value, label) {
+  if (typeof value !== "string" || value.length === 0) {
+    throw new TypeError(`${label} must be a non-empty string.`);
+  }
+  if (value.includes("\0") || value.includes("=")) {
+    throw new TypeError(`${label} must not contain NUL or equals signs.`);
+  }
+  return value;
+}
+
 // packages/safejs/src/modules/fail.ts
 var HarnessFailure = class extends Error {
   constructor(message) {
@@ -7785,6 +7869,9 @@ export {
   createSpawnUsageAccumulator,
   runWithSpawnUsageAccumulator,
   makeAgentModule,
+  EnvAccessError,
+  makeEnvModule,
+  parseEnvConfig,
   makeFailModule,
   resolveCanonicalPath,
   containsPath,
@@ -7799,4 +7886,4 @@ export {
   parseMcpConfig,
   makeMcpModule
 };
-//# sourceMappingURL=chunk-55ZK3CR7.js.map
+//# sourceMappingURL=chunk-SDKCGJW4.js.map