poe-code 9.0.0 → 10.0.0

package/packages/safejs/dist/cli.d.ts

@@ -1,4 +1,5 @@
 #!/usr/bin/env node
+import { type EnvModuleOptions } from "./modules/env.js";
 import { type McpModuleOptions } from "./modules/mcp-transport.js";
 import { type OutputStream } from "./output-stream.js";
 import type { ModuleRegistry } from "./modules/registry.js";
@@ -13,6 +14,7 @@ export type WriteMarkdownFile = (filepath: string, source: string, options: {
 }) => Promise<void>;
 export type RunCliOptions = {
     cwd?: string;
+    env?: EnvModuleOptions;
     mcp?: McpModuleOptions;
     modulesFor?: (frontmatter: Record<string, unknown>, meta: HarnessMeta, streams: {
         stderr: CliStream;

package/packages/safejs/dist/cli.js

@@ -7,16 +7,18 @@ import {
   extractBlock,
   formatInterpreterError,
   makeAgentModule,
+  makeEnvModule,
   makeFailModule,
   makeFsModule,
   makeHarnessModule,
   makeLogModule,
   makeMcpModule,
   makeMetricModule,
+  parseEnvConfig,
   parseMcpConfig,
   splitFrontmatter,
   withBrokenPipeGuard
-} from "./chunks/chunk-55ZK3CR7.js";
+} from "./chunks/chunk-SDKCGJW4.js";
 import {
   Budget,
   SandboxError,
@@ -28,7 +30,7 @@ import {
   replaceErrorStack,
   restore,
   run
-} from "./chunks/chunk-GQBEEFVQ.js";
+} from "./chunks/chunk-E6LJNTDX.js";
 import "./chunks/chunk-4YIDX44G.js";
 
 // packages/safejs/src/cli.ts
@@ -69,6 +71,7 @@ async function runCli(argv, options = {}) {
         });
         return await runScriptFile(filepath, parsed, {
           cwd,
+          env: options.env,
           mcp: options.mcp,
           modulesFor: options.modulesFor,
           process: options.process ?? process,
@@ -121,6 +124,11 @@ function parseArgs(argv) {
       index += 1;
       continue;
     }
+    if (arg === "--env-config") {
+      parsed.envConfig = readFlagValue(argv, index, arg);
+      index += 1;
+      continue;
+    }
     if (arg === "--snapshot") {
       parsed.snapshotPath = readFlagValue(argv, index, arg);
       index += 1;
@@ -198,6 +206,20 @@ async function runScriptFile(filepath, parsed, options) {
     stderr: options.stderr,
     stdout: options.stdout
   });
+  let env = options.env;
+  if (parsed.envConfig !== void 0) {
+    if (env !== void 0) throw new TypeError("Pass environment options or --env-config, not both.");
+    const configPath = path.resolve(options.cwd, parsed.envConfig);
+    env = parseEnvConfig(await options.readFile(configPath, "utf8"));
+  }
+  if (env !== void 0) {
+    const registry = new Map(
+      runtime.registry instanceof Map ? runtime.registry : Object.entries(runtime.registry)
+    );
+    if (registry.has("env")) throw new TypeError("Environment is already registered by modulesFor.");
+    registry.set("env", makeEnvModule(env));
+    runtime.registry = registry;
+  }
   let mcp = options.mcp;
   if (parsed.mcpConfig !== void 0) {
     if (mcp !== void 0) throw new TypeError("Pass MCP options or --mcp-config, not both.");
@@ -494,6 +516,7 @@ function createUsage() {
     "  --fs-root <path>      directory --fs confines the script to (default: the script's",
     "                        directory)",
     "  --mcp-config <path>   register named MCP servers from an explicit JSON config",
+    "  --env-config <path>   grant environment reads from an explicit JSON config",
     "  --snapshot <path>     write the final snapshot, and best-effort snapshot on SIGINT",
     "  --restore <path>      restore from a snapshot before running",
     "  --max-steps <n>       cap interpreter step budget",

package/packages/safejs/dist/cli.js.map

@@ -1,7 +1,7 @@
 {
   "version": 3,
   "sources": ["../src/cli.ts"],
-  "sourcesContent": ["#!/usr/bin/env node\nimport { mkdir, readFile, realpath, stat, writeFile } from \"node:fs/promises\";\nimport path, { dirname, extname } from \"node:path\";\nimport { formatWithOptions } from \"node:util\";\nimport { fileURLToPath } from \"node:url\";\n\nimport { hasOwnErrorCode } from \"./error-codes.js\";\nimport { formatInterpreterError } from \"./error/format.js\";\nimport { replaceErrorStack } from \"./error/shape.js\";\nimport { Budget, SandboxError } from \"./interp/budget.js\";\nimport { countLineBreaks, extractBlock } from \"./loader/extract-block.js\";\nimport { splitFrontmatter } from \"./loader/frontmatter.js\";\nimport { lint, type Diagnostic, type Fix } from \"./lint.js\";\nimport { createLintModulesFromRuntimeRegistry } from \"./lint/runtime-modules.js\";\nimport { makeAgentModule } from \"./modules/agent.js\";\nimport { makeFailModule } from \"./modules/fail.js\";\nimport { makeFsModule, type FsModuleOptions } from \"./modules/fs.js\";\nimport { makeMcpModule } from \"./modules/mcp.js\";\nimport { parseMcpConfig, type McpModuleOptions } from \"./modules/mcp-transport.js\";\nimport { makeHarnessModule } from \"./modules/harness.js\";\nimport { makeLogModule, type LogModuleEntry } from \"./modules/log.js\";\nimport { makeMetricModule } from \"./modules/metric.js\";\nimport {\n  createBrokenPipeState,\n  createSafeOutputStream,\n  withBrokenPipeGuard,\n  type BrokenPipeState,\n  type OutputStream\n} from \"./output-stream.js\";\nimport type { CallerInjectedBinding } from \"./interp/host-bridge.js\";\nimport type { ModuleExports, ModuleRegistry } from \"./modules/registry.js\";\nimport { parseModule } from \"./parse/parser.js\";\nimport { restore, type SafeJSSnapshot } from \"./restore.js\";\nimport { run, type RunResult } from \"./run.js\";\nimport { dump, dumpCurrent } from \"./snapshot/dump.js\";\n\ntype CliStream = OutputStream;\n\ntype CliProcess = Pick<NodeJS.Process, \"off\" | \"on\">;\n\ntype FileStats = {\n  isFile(): boolean;\n};\n\nexport type ReadMarkdownFile = (filepath: string, encoding: \"utf8\") => Promise<string>;\nexport type WriteMarkdownFile = (\n  filepath: string,\n  source: string,\n  options: { encoding: \"utf8\" }\n) => Promise<void>;\n\nexport type RunCliOptions = {\n  cwd?: string;\n  mcp?: McpModuleOptions;\n  modulesFor?: (\n    frontmatter: Record<string, unknown>,\n    meta: HarnessMeta,\n    streams: { stderr: CliStream; stdout: CliStream }\n  ) => ModuleRegistry;\n  process?: CliProcess;\n  readFile?: ReadMarkdownFile;\n  stat?: (filepath: string) => Promise<FileStats>;\n  stdout?: CliStream;\n  stderr?: CliStream;\n  writeFile?: WriteMarkdownFile;\n};\n\ntype HarnessMeta = {\n  filepath: string;\n  kind: unknown;\n  version: unknown;\n};\n\ntype ParsedArgs = {\n  filepath?: string;\n  fix: boolean;\n  fs: boolean;\n  fsRoot?: string;\n  mcpConfig?: string;\n  dataSize?: number;\n  maxSteps?: number;\n  restorePath?: string;\n  snapshotPath?: string;\n};\n\ntype LoadedSource = {\n  sourceOffset: number;\n  fixRanges?: readonly Fix[\"range\"][];\n  executableSource: string;\n  frontmatter: Record<string, unknown>;\n  isRawScript: boolean;\n  rawSource: string;\n};\n\ntype CliRuntime = {\n  registry: ModuleRegistry;\n};\n\nconst EXIT_RUNTIME = 1;\nconst EXIT_PARSE = 2;\nconst EXIT_BUDGET = 3;\nconst EXIT_SIGINT = 130;\n\nexport async function runCli(\n  argv: readonly string[],\n  options: RunCliOptions = {}\n): Promise<number> {\n  const brokenPipe = createBrokenPipeState();\n  const stdout = createSafeOutputStream(options.stdout ?? process.stdout, brokenPipe);\n  const stderr = createSafeOutputStream(options.stderr ?? process.stderr, brokenPipe);\n\n  return withBrokenPipeGuard(\n    [options.stdout ?? process.stdout, options.stderr ?? process.stderr],\n    brokenPipe,\n    async () => {\n      try {\n        if (argv.includes(\"--help\") || argv.includes(\"-h\")) {\n          stdout.write(`${createUsage()}\\n`);\n          return 0;\n        }\n\n        const parsed = parseArgs(argv);\n        if (parsed.filepath === undefined) {\n          stderr.write(`${createUsage()}\\n`);\n          return brokenPipe.closed ? 0 : EXIT_RUNTIME;\n        }\n\n        const cwd = options.cwd ?? readCurrentWorkingDirectory();\n        const filepath = path.resolve(cwd, parsed.filepath);\n        await assertHarnessFile({\n          displayPath: parsed.filepath,\n          filepath,\n          statFile: options.stat ?? stat\n        });\n\n        return await runScriptFile(filepath, parsed, {\n          cwd,\n          mcp: options.mcp,\n          modulesFor: options.modulesFor,\n          process: options.process ?? process,\n          readFile: options.readFile ?? readFile,\n          brokenPipe,\n          stderr,\n          stdout,\n          writeFile: options.writeFile ?? writeFile\n        });\n      } catch (error) {\n        if (brokenPipe.closed) {\n          return 0;\n        }\n        stderr.write(`${readErrorMessage(error)}\\n`);\n        return brokenPipe.closed\n          ? 0\n          : error instanceof CliExitError\n            ? error.exitCode\n            : exitCodeForError(error);\n      }\n    }\n  );\n}\n\nfunction readCurrentWorkingDirectory(): string {\n  try {\n    return process.cwd();\n  } catch (error) {\n    throw new Error(`Unable to resolve current working directory: ${readErrorMessage(error)}`);\n  }\n}\n\nfunction parseArgs(argv: readonly string[]): ParsedArgs {\n  const parsed: ParsedArgs = {\n    fix: false,\n    fs: false\n  };\n\n  for (let index = 0; index < argv.length; index += 1) {\n    const arg = argv[index];\n\n    if (arg === \"--fix\") {\n      parsed.fix = true;\n      continue;\n    }\n\n    if (arg === \"--fs\") {\n      parsed.fs = true;\n      continue;\n    }\n\n    if (arg === \"--fs-root\") {\n      parsed.fsRoot = readFlagValue(argv, index, arg);\n      index += 1;\n      continue;\n    }\n\n    if (arg === \"--mcp-config\") {\n      parsed.mcpConfig = readFlagValue(argv, index, arg);\n      index += 1;\n      continue;\n    }\n\n    if (arg === \"--snapshot\") {\n      parsed.snapshotPath = readFlagValue(argv, index, arg);\n      index += 1;\n      continue;\n    }\n\n    if (arg === \"--restore\") {\n      parsed.restorePath = readFlagValue(argv, index, arg);\n      index += 1;\n      continue;\n    }\n\n    if (arg === \"--max-steps\") {\n      parsed.maxSteps = readPositiveInteger(readFlagValue(argv, index, arg), arg);\n      index += 1;\n      continue;\n    }\n\n    if (arg === \"--data-size\") {\n      parsed.dataSize = readPositiveInteger(readFlagValue(argv, index, arg), arg);\n      index += 1;\n      continue;\n    }\n\n    if (arg.startsWith(\"-\")) {\n      throw new CliExitError(`Unknown flag: ${arg}`, EXIT_RUNTIME);\n    }\n\n    if (parsed.filepath !== undefined) {\n      throw new CliExitError(`Unexpected argument: ${arg}`, EXIT_RUNTIME);\n    }\n\n    parsed.filepath = arg;\n  }\n\n  if (!parsed.fs && parsed.fsRoot !== undefined) {\n    throw new CliExitError(\n      \"--fs-root requires --fs. Pass --fs to give the script a filesystem confined to that root, or drop --fs-root.\",\n      EXIT_RUNTIME\n    );\n  }\n\n  return parsed;\n}\n\nfunction readFlagValue(argv: readonly string[], index: number, flag: string): string {\n  const value = argv[index + 1];\n  if (value === undefined || value.length === 0) {\n    throw new CliExitError(`Missing value for ${flag}`, EXIT_RUNTIME);\n  }\n\n  return value;\n}\n\nfunction readPositiveInteger(value: string, flag: string): number {\n  const parsed = Number(value);\n\n  if (!Number.isInteger(parsed) || parsed <= 0) {\n    throw new CliExitError(`${flag} must be a positive integer`, EXIT_RUNTIME);\n  }\n\n  return parsed;\n}\n\nasync function assertHarnessFile(input: {\n  displayPath: string;\n  filepath: string;\n  statFile: (filepath: string) => Promise<FileStats>;\n}): Promise<void> {\n  let stats: FileStats;\n  try {\n    stats = await input.statFile(input.filepath);\n  } catch (error) {\n    if (hasErrorCode(error, \"ENOENT\")) {\n      throw new CliExitError(`File not found: ${input.displayPath}`, EXIT_RUNTIME);\n    }\n\n    throw error;\n  }\n\n  if (!stats.isFile()) {\n    throw new CliExitError(`Harness path must point to a file: ${input.displayPath}`, EXIT_RUNTIME);\n  }\n}\n\nasync function runScriptFile(\n  filepath: string,\n  parsed: ParsedArgs,\n  options: {\n    cwd: string;\n    mcp: McpModuleOptions | undefined;\n    modulesFor: RunCliOptions[\"modulesFor\"];\n    brokenPipe: BrokenPipeState;\n    process: CliProcess;\n    readFile: ReadMarkdownFile;\n    stderr: CliStream;\n    stdout: CliStream;\n    writeFile: WriteMarkdownFile;\n  }\n): Promise<number> {\n  const loaded = loadExecutableSource(filepath, await options.readFile(filepath, \"utf8\"));\n  const meta = {\n    filepath,\n    kind: loaded.frontmatter.kind,\n    version: loaded.frontmatter.version\n  };\n  const runtime = createRuntime(loaded.frontmatter, meta, {\n    fs: parsed.fs\n      ? { root: path.resolve(options.cwd, parsed.fsRoot ?? dirname(filepath)) }\n      : undefined,\n    modulesFor: options.modulesFor,\n    stderr: options.stderr,\n    stdout: options.stdout\n  });\n  let mcp = options.mcp;\n  if (parsed.mcpConfig !== undefined) {\n    if (mcp !== undefined) throw new TypeError(\"Pass MCP options or --mcp-config, not both.\");\n    const configPath = path.resolve(options.cwd, parsed.mcpConfig);\n    mcp = parseMcpConfig(await options.readFile(configPath, \"utf8\"), dirname(configPath));\n  }\n  if (mcp !== undefined) {\n    const registry = new Map(\n      runtime.registry instanceof Map ? runtime.registry : Object.entries(runtime.registry)\n    );\n    if (registry.has(\"mcp\")) throw new TypeError(\"MCP is already registered by modulesFor.\");\n    registry.set(\"mcp\", makeMcpModule(mcp));\n    runtime.registry = registry;\n  }\n  const modules = excludeHarnessModule(runtime.registry, loaded.isRawScript);\n  let executableSource = loaded.executableSource;\n  const lintResult = parsed.fix\n    ? lint(executableSource, {\n        allowedExportNames: [\"schema\"],\n        filename: filepath,\n        fix: true,\n        fixRanges: loaded.fixRanges,\n        frontmatterFields: Object.keys(loaded.frontmatter),\n        modules: createLintModulesFromRuntimeRegistry(modules)\n      })\n    : lint(executableSource, {\n        allowedExportNames: [\"schema\"],\n        filename: filepath,\n        frontmatterFields: Object.keys(loaded.frontmatter),\n        modules: createLintModulesFromRuntimeRegistry(modules)\n      });\n  const diagnostics = Array.isArray(lintResult) ? lintResult : lintResult.diagnostics;\n\n  if (!Array.isArray(lintResult)) {\n    executableSource = lintResult.fixed;\n    if (lintResult.fixed !== loaded.executableSource) {\n      await options.writeFile(\n        filepath,\n        replaceExecutableSource(loaded.rawSource, loaded, lintResult.fixes),\n        {\n          encoding: \"utf8\"\n        }\n      );\n    }\n  }\n\n  const lintErrors = diagnostics.filter((diagnostic) => diagnostic.severity === \"error\");\n  if (lintErrors.length > 0) {\n    options.stderr.write(`Lint failed:\\n${formatDiagnostics(lintErrors)}\\n`);\n    if (options.brokenPipe.closed) {\n      return 0;\n    }\n    return lintErrors.some((diagnostic) => diagnostic.code === \"AS001\") ? EXIT_PARSE : EXIT_RUNTIME;\n  }\n\n  const lintWarnings = diagnostics.filter((diagnostic) => diagnostic.severity === \"warning\");\n  if (lintWarnings.length > 0) {\n    options.stderr.write(`Lint warnings:\\n${formatDiagnostics(lintWarnings)}\\n`);\n    if (options.brokenPipe.closed) {\n      return 0;\n    }\n  }\n\n  const snapshot = await readRestoreSnapshot(parsed.restorePath, options);\n  if (snapshot !== undefined) {\n    restore(snapshot, { source: executableSource });\n  }\n\n  const abortController = new AbortController();\n  let interrupted = false;\n  let runPromise: Promise<RunResult> | undefined;\n  let signalSnapshotWrite: Promise<void> | undefined;\n  const onSigint = () => {\n    interrupted = true;\n    abortController.abort(createAbortError());\n    options.stderr.write(\"Interrupted by SIGINT\\n\");\n\n    if (parsed.snapshotPath !== undefined && runPromise !== undefined) {\n      signalSnapshotWrite = writeCurrentSnapshot(runPromise, parsed.snapshotPath, options);\n    }\n  };\n\n  options.process.on(\"SIGINT\", onSigint);\n  try {\n    runPromise = run(executableSource, {\n      budget:\n        parsed.maxSteps === undefined && parsed.dataSize === undefined\n          ? undefined\n          : new Budget({ dataSize: parsed.dataSize, maxSteps: parsed.maxSteps }),\n      entryPointArgs: hasDefaultExport(executableSource, filepath) ? [] : undefined,\n      filename: filepath,\n      modules,\n      signal: abortController.signal,\n      sink: createConsoleSink(options.stdout, options.stderr),\n      snapshot\n    });\n    const result = await runPromise;\n    await signalSnapshotWrite;\n\n    if (options.brokenPipe.closed) {\n      return 0;\n    }\n\n    if (parsed.snapshotPath !== undefined) {\n      await writeSnapshot(parsed.snapshotPath, await dump(result), options);\n    }\n\n    if (!result.ok) {\n      options.stderr.write(\n        `${formatInterpreterError(result.error, {\n          filename: filepath,\n          source: executableSource\n        })}\\n`\n      );\n      if (options.brokenPipe.closed) {\n        return 0;\n      }\n      return interrupted ? EXIT_SIGINT : exitCodeForError(result.error);\n    }\n\n    options.stdout.write(`${JSON.stringify({ ok: true, returnValue: result.returnValue })}\\n`);\n    return options.brokenPipe.closed ? 0 : interrupted ? EXIT_SIGINT : 0;\n  } catch (error) {\n    await signalSnapshotWrite;\n    if (options.brokenPipe.closed) {\n      return 0;\n    }\n    options.stderr.write(\n      `${formatInterpreterError(error, {\n        filename: filepath,\n        source: executableSource\n      })}\\n`\n    );\n    return options.brokenPipe.closed ? 0 : interrupted ? EXIT_SIGINT : exitCodeForError(error);\n  } finally {\n    options.process.off(\"SIGINT\", onSigint);\n  }\n}\n\nfunction loadExecutableSource(filepath: string, rawSource: string): LoadedSource {\n  const source = stripByteOrderMark(rawSource);\n  const byteOrderMarkLength = rawSource.length - source.length;\n\n  if (isRawScriptExtension(extname(filepath))) {\n    return {\n      sourceOffset: byteOrderMarkLength,\n      executableSource: source,\n      frontmatter: {},\n      isRawScript: true,\n      rawSource\n    };\n  }\n\n  const { frontmatter, body } = splitFrontmatter(source);\n  const bodyStartOffset = source.length - body.length;\n  const executableBlock = extractBlock(body, countLineBreaks(source, 0, bodyStartOffset) + 1);\n  const lineOffset = countLineBreaks(source, 0, bodyStartOffset + executableBlock.startOffset);\n\n  return {\n    sourceOffset: byteOrderMarkLength + bodyStartOffset + executableBlock.startOffset - lineOffset,\n    fixRanges: executableBlock.ranges.map(([start, end]) => [\n      start - executableBlock.startOffset + lineOffset,\n      end - executableBlock.startOffset + lineOffset\n    ]),\n    executableSource: createLineOffsetSource(executableBlock.source, lineOffset),\n    frontmatter,\n    isRawScript: false,\n    rawSource\n  };\n}\n\nfunction isRawScriptExtension(extension: string): boolean {\n  return extension === \".safejs\" || extension === \".ajs\";\n}\n\nfunction replaceExecutableSource(\n  source: string,\n  loaded: LoadedSource,\n  fixes: readonly Fix[]\n): string {\n  return fixes.reduce(\n    (result, fix) =>\n      `${result.slice(0, loaded.sourceOffset + fix.range[0])}${fix.replacement}${result.slice(loaded.sourceOffset + fix.range[1])}`,\n    source\n  );\n}\n\nfunction createRuntime(\n  frontmatter: Record<string, unknown>,\n  meta: HarnessMeta,\n  options: {\n    fs: FsModuleOptions | undefined;\n    modulesFor: RunCliOptions[\"modulesFor\"];\n    stderr: CliStream;\n    stdout: CliStream;\n  }\n): CliRuntime {\n  if (options.modulesFor !== undefined) {\n    return {\n      registry: options.modulesFor(frontmatter, meta, {\n        stderr: options.stderr,\n        stdout: options.stdout\n      })\n    };\n  }\n\n  const state = {\n    checkpointCount: 0,\n    commitCount: 0,\n    metricCalls: new Map<string, number>(),\n    spawnCount: 0\n  };\n  const harness = makeHarnessModule(frontmatter, meta);\n  const agent = makeAgentModule(async (input) => {\n    state.spawnCount += 1;\n\n    return {\n      exitCode: 0,\n      stdout: \"\",\n      stderr: \"\",\n      summary: `${input.agent} handled ${summarizePrompt(input.prompt)}`,\n      durationMs: 25 * state.spawnCount\n    };\n  });\n  const git = {\n    async checkpoint() {\n      state.checkpointCount += 1;\n      return {\n        head: `head-${state.checkpointCount}`,\n        stashRef: `savepoint-${state.checkpointCount}`\n      };\n    },\n    async commit() {\n      state.commitCount += 1;\n      return `commit-${state.commitCount}`;\n    },\n    async revert() {\n      return undefined;\n    }\n  };\n  const log = makeLogModule((entry) => {\n    const normalized = normalizeLogEntry(entry);\n    const stream = normalized.type === \"error\" ? options.stderr : options.stdout;\n    stream.write(`${JSON.stringify(normalized)}\\n`);\n  });\n  const metric = makeMetricModule(async (scriptName) => `${readMetricScore(scriptName, state)}\\n`);\n\n  return {\n    registry: {\n      agent: toModuleExports(agent),\n      fail: toModuleExports(new Map([[\"default\", makeFailModule().default]])),\n      // The one module here that is not a stub, so it is registered only when asked for.\n      ...(options.fs === undefined ? {} : { fs: toModuleExports(makeFsModule(options.fs)) }),\n      git: toModuleExports(\n        new Map<string, CallerInjectedBinding>([\n          [\"checkpoint\", git.checkpoint],\n          [\"commit\", git.commit],\n          [\"revert\", git.revert]\n        ])\n      ),\n      harness: toModuleExports(harness),\n      log: toModuleExports(log),\n      metric: toModuleExports(metric)\n    }\n  };\n}\n\nasync function readRestoreSnapshot(\n  restorePath: string | undefined,\n  options: {\n    cwd: string;\n    readFile: ReadMarkdownFile;\n  }\n): Promise<SafeJSSnapshot | undefined> {\n  if (restorePath === undefined) {\n    return undefined;\n  }\n\n  const snapshotPath = path.resolve(options.cwd, restorePath);\n  let rawSnapshot: string;\n  try {\n    rawSnapshot = await options.readFile(snapshotPath, \"utf8\");\n  } catch (error) {\n    if (hasErrorCode(error, \"ENOENT\")) {\n      throw new CliExitError(`Snapshot not found: ${restorePath}`, EXIT_RUNTIME);\n    }\n\n    throw error;\n  }\n\n  try {\n    return JSON.parse(rawSnapshot) as SafeJSSnapshot;\n  } catch (error) {\n    throw new Error(`Failed to parse snapshot at ${restorePath}: ${readErrorMessage(error)}`);\n  }\n}\n\nasync function writeCurrentSnapshot(\n  result: PromiseLike<RunResult>,\n  snapshotPath: string,\n  options: {\n    cwd: string;\n    stderr: CliStream;\n    writeFile: WriteMarkdownFile;\n  }\n): Promise<void> {\n  try {\n    await writeSnapshot(snapshotPath, await dumpCurrent(result), options);\n  } catch (error) {\n    options.stderr.write(\n      `Failed to write snapshot at ${snapshotPath}: ${readErrorMessage(error)}\\n`\n    );\n  }\n}\n\nasync function writeSnapshot(\n  snapshotPath: string,\n  content: string,\n  options: {\n    cwd: string;\n    writeFile: WriteMarkdownFile;\n  }\n): Promise<void> {\n  const resolvedPath = path.resolve(options.cwd, snapshotPath);\n  await mkdir(dirname(resolvedPath), { recursive: true });\n  await options.writeFile(resolvedPath, content, { encoding: \"utf8\" });\n}\n\nfunction createConsoleSink(\n  stdout: CliStream,\n  stderr: CliStream\n): {\n  error: (...args: unknown[]) => void;\n  log: (...args: unknown[]) => void;\n} {\n  return {\n    error(...args) {\n      stderr.write(`${formatConsoleArgs(args)}\\n`);\n    },\n    log(...args) {\n      stdout.write(`${formatConsoleArgs(args)}\\n`);\n    }\n  };\n}\n\nfunction formatConsoleArgs(args: readonly unknown[]): string {\n  return formatWithOptions({ colors: false, depth: 4 }, ...args);\n}\n\nfunction createUsage(): string {\n  return [\n    \"Usage: poe-safejs [options] <script.md|script.safejs|script.ajs>\",\n    \"\",\n    \"Options:\",\n    \"  --fix                 apply lint fixes before running\",\n    \"  --fs                  register the fs module: a real filesystem, unlike the agent,\",\n    \"                        git, and metric stubs this runner bundles\",\n    \"  --fs-root <path>      directory --fs confines the script to (default: the script's\",\n    \"                        directory)\",\n    \"  --mcp-config <path>   register named MCP servers from an explicit JSON config\",\n    \"  --snapshot <path>     write the final snapshot, and best-effort snapshot on SIGINT\",\n    \"  --restore <path>      restore from a snapshot before running\",\n    \"  --max-steps <n>       cap interpreter step budget\",\n    \"  --data-size <n>       cap retained sandbox data units\",\n    \"  -h, --help            print this help\",\n    \"\",\n    \"Exit codes:\",\n    \"  0 success\",\n    \"  1 runtime, usage, file, or restore error\",\n    \"  2 parse error\",\n    \"  3 budget exceeded\",\n    \"  130 interrupted by SIGINT\"\n  ].join(\"\\n\");\n}\n\nfunction formatDiagnostics(diagnostics: readonly Diagnostic[]): string {\n  return diagnostics\n    .map(\n      (diagnostic) =>\n        `${diagnostic.filename}:${diagnostic.line}:${diagnostic.column} ${diagnostic.code} ${diagnostic.message}`\n    )\n    .join(\"\\n\");\n}\n\nfunction exitCodeForError(error: unknown): number {\n  if (error instanceof SandboxError && error.code === \"budgetExceeded\") {\n    return EXIT_BUDGET;\n  }\n\n  if (isParseError(error)) {\n    return EXIT_PARSE;\n  }\n\n  return EXIT_RUNTIME;\n}\n\nfunction isParseError(error: unknown): boolean {\n  return error instanceof Error && error.name === \"ParseError\";\n}\n\nfunction hasDefaultExport(source: string, filename: string): boolean {\n  return parseModule(source, filename).body.some(\n    (statement) => statement.type === \"ExportDefaultDeclaration\"\n  );\n}\n\nfunction excludeHarnessModule(modules: ModuleRegistry, isRawScript: boolean): ModuleRegistry {\n  if (!isRawScript) {\n    return modules;\n  }\n\n  if (modules instanceof Map) {\n    const rawModules = new Map(modules);\n    rawModules.delete(\"harness\");\n    return rawModules;\n  }\n\n  const rawModules = Object.create(null) as Record<string, ModuleExports>;\n\n  for (const [moduleName, moduleExports] of Object.entries(modules)) {\n    if (moduleName !== \"harness\") {\n      rawModules[moduleName] = moduleExports;\n    }\n  }\n\n  return rawModules;\n}\n\nfunction stripByteOrderMark(source: string): string {\n  return source.startsWith(\"\\uFEFF\") ? source.slice(1) : source;\n}\n\nfunction createLineOffsetSource(source: string, lineOffset: number): string {\n  return `${\"\\n\".repeat(Math.max(lineOffset, 0))}${source}`;\n}\n\nfunction normalizeLogEntry(entry: LogModuleEntry): LogModuleEntry {\n  return {\n    ...entry,\n    ts: \"2026-04-29T00:00:00.000Z\"\n  };\n}\n\nfunction summarizePrompt(prompt: string): string {\n  const normalizedPrompt = prompt.trim().replaceAll(\"\\n\", \" \");\n  return normalizedPrompt.length <= 48 ? normalizedPrompt : `${normalizedPrompt.slice(0, 45)}...`;\n}\n\nfunction readMetricScore(\n  scriptName: string,\n  state: {\n    metricCalls: Map<string, number>;\n  }\n): number {\n  const callCount = (state.metricCalls.get(scriptName) ?? 0) + 1;\n  state.metricCalls.set(scriptName, callCount);\n\n  if (scriptName === \"tests\" && callCount === 1) {\n    return 10;\n  }\n\n  if (scriptName === \"tests\" && callCount === 2) {\n    return 9;\n  }\n\n  return 9 + callCount;\n}\n\nfunction toModuleExports(value: unknown): ModuleExports {\n  return value as ModuleExports;\n}\n\nfunction createAbortError(): Error {\n  if (typeof DOMException === \"function\") {\n    const error = new DOMException(\"This operation was aborted\", \"AbortError\");\n    replaceErrorStack(error);\n    return error;\n  }\n\n  const error = new Error(\"This operation was aborted\");\n  error.name = \"AbortError\";\n  replaceErrorStack(error);\n  return error;\n}\n\nfunction hasErrorCode(error: unknown, code: string): boolean {\n  return hasOwnErrorCode(error, code);\n}\n\nfunction readErrorMessage(error: unknown): string {\n  if (error instanceof Error) {\n    return error.message;\n  }\n\n  return String(error);\n}\n\nclass CliExitError extends Error {\n  readonly exitCode: number;\n\n  constructor(message: string, exitCode: number) {\n    super(message);\n    this.name = \"CliExitError\";\n    this.exitCode = exitCode;\n  }\n}\n\nasync function isDirectExecution(entryPoint: string | undefined): Promise<boolean> {\n  if (typeof entryPoint !== \"string\" || entryPoint.length === 0) {\n    return false;\n  }\n\n  try {\n    const [resolvedEntryPoint, resolvedModule] = await Promise.all([\n      realpath(path.resolve(entryPoint)),\n      realpath(fileURLToPath(import.meta.url))\n    ]);\n    return resolvedEntryPoint === resolvedModule;\n  } catch {\n    return false;\n  }\n}\n\nif (await isDirectExecution(process.argv[1])) {\n  process.exitCode = await runCli(process.argv.slice(2));\n}\n"],
-  "mappings": ";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AACA,SAAS,OAAO,UAAU,UAAU,MAAM,iBAAiB;AAC3D,OAAO,QAAQ,SAAS,eAAe;AACvC,SAAS,yBAAyB;AAClC,SAAS,qBAAqB;AA8F9B,IAAM,eAAe;AACrB,IAAM,aAAa;AACnB,IAAM,cAAc;AACpB,IAAM,cAAc;AAEpB,eAAsB,OACpB,MACA,UAAyB,CAAC,GACT;AACjB,QAAM,aAAa,sBAAsB;AACzC,QAAM,SAAS,uBAAuB,QAAQ,UAAU,QAAQ,QAAQ,UAAU;AAClF,QAAM,SAAS,uBAAuB,QAAQ,UAAU,QAAQ,QAAQ,UAAU;AAElF,SAAO;AAAA,IACL,CAAC,QAAQ,UAAU,QAAQ,QAAQ,QAAQ,UAAU,QAAQ,MAAM;AAAA,IACnE;AAAA,IACA,YAAY;AACV,UAAI;AACF,YAAI,KAAK,SAAS,QAAQ,KAAK,KAAK,SAAS,IAAI,GAAG;AAClD,iBAAO,MAAM,GAAG,YAAY,CAAC;AAAA,CAAI;AACjC,iBAAO;AAAA,QACT;AAEA,cAAM,SAAS,UAAU,IAAI;AAC7B,YAAI,OAAO,aAAa,QAAW;AACjC,iBAAO,MAAM,GAAG,YAAY,CAAC;AAAA,CAAI;AACjC,iBAAO,WAAW,SAAS,IAAI;AAAA,QACjC;AAEA,cAAM,MAAM,QAAQ,OAAO,4BAA4B;AACvD,cAAM,WAAW,KAAK,QAAQ,KAAK,OAAO,QAAQ;AAClD,cAAM,kBAAkB;AAAA,UACtB,aAAa,OAAO;AAAA,UACpB;AAAA,UACA,UAAU,QAAQ,QAAQ;AAAA,QAC5B,CAAC;AAED,eAAO,MAAM,cAAc,UAAU,QAAQ;AAAA,UAC3C;AAAA,UACA,KAAK,QAAQ;AAAA,UACb,YAAY,QAAQ;AAAA,UACpB,SAAS,QAAQ,WAAW;AAAA,UAC5B,UAAU,QAAQ,YAAY;AAAA,UAC9B;AAAA,UACA;AAAA,UACA;AAAA,UACA,WAAW,QAAQ,aAAa;AAAA,QAClC,CAAC;AAAA,MACH,SAAS,OAAO;AACd,YAAI,WAAW,QAAQ;AACrB,iBAAO;AAAA,QACT;AACA,eAAO,MAAM,GAAG,iBAAiB,KAAK,CAAC;AAAA,CAAI;AAC3C,eAAO,WAAW,SACd,IACA,iBAAiB,eACf,MAAM,WACN,iBAAiB,KAAK;AAAA,MAC9B;AAAA,IACF;AAAA,EACF;AACF;AAEA,SAAS,8BAAsC;AAC7C,MAAI;AACF,WAAO,QAAQ,IAAI;AAAA,EACrB,SAAS,OAAO;AACd,UAAM,IAAI,MAAM,gDAAgD,iBAAiB,KAAK,CAAC,EAAE;AAAA,EAC3F;AACF;AAEA,SAAS,UAAU,MAAqC;AACtD,QAAM,SAAqB;AAAA,IACzB,KAAK;AAAA,IACL,IAAI;AAAA,EACN;AAEA,WAAS,QAAQ,GAAG,QAAQ,KAAK,QAAQ,SAAS,GAAG;AACnD,UAAM,MAAM,KAAK,KAAK;AAEtB,QAAI,QAAQ,SAAS;AACnB,aAAO,MAAM;AACb;AAAA,IACF;AAEA,QAAI,QAAQ,QAAQ;AAClB,aAAO,KAAK;AACZ;AAAA,IACF;AAEA,QAAI,QAAQ,aAAa;AACvB,aAAO,SAAS,cAAc,MAAM,OAAO,GAAG;AAC9C,eAAS;AACT;AAAA,IACF;AAEA,QAAI,QAAQ,gBAAgB;AAC1B,aAAO,YAAY,cAAc,MAAM,OAAO,GAAG;AACjD,eAAS;AACT;AAAA,IACF;AAEA,QAAI,QAAQ,cAAc;AACxB,aAAO,eAAe,cAAc,MAAM,OAAO,GAAG;AACpD,eAAS;AACT;AAAA,IACF;AAEA,QAAI,QAAQ,aAAa;AACvB,aAAO,cAAc,cAAc,MAAM,OAAO,GAAG;AACnD,eAAS;AACT;AAAA,IACF;AAEA,QAAI,QAAQ,eAAe;AACzB,aAAO,WAAW,oBAAoB,cAAc,MAAM,OAAO,GAAG,GAAG,GAAG;AAC1E,eAAS;AACT;AAAA,IACF;AAEA,QAAI,QAAQ,eAAe;AACzB,aAAO,WAAW,oBAAoB,cAAc,MAAM,OAAO,GAAG,GAAG,GAAG;AAC1E,eAAS;AACT;AAAA,IACF;AAEA,QAAI,IAAI,WAAW,GAAG,GAAG;AACvB,YAAM,IAAI,aAAa,iBAAiB,GAAG,IAAI,YAAY;AAAA,IAC7D;AAEA,QAAI,OAAO,aAAa,QAAW;AACjC,YAAM,IAAI,aAAa,wBAAwB,GAAG,IAAI,YAAY;AAAA,IACpE;AAEA,WAAO,WAAW;AAAA,EACpB;AAEA,MAAI,CAAC,OAAO,MAAM,OAAO,WAAW,QAAW;AAC7C,UAAM,IAAI;AAAA,MACR;AAAA,MACA;AAAA,IACF;AAAA,EACF;AAEA,SAAO;AACT;AAEA,SAAS,cAAc,MAAyB,OAAe,MAAsB;AACnF,QAAM,QAAQ,KAAK,QAAQ,CAAC;AAC5B,MAAI,UAAU,UAAa,MAAM,WAAW,GAAG;AAC7C,UAAM,IAAI,aAAa,qBAAqB,IAAI,IAAI,YAAY;AAAA,EAClE;AAEA,SAAO;AACT;AAEA,SAAS,oBAAoB,OAAe,MAAsB;AAChE,QAAM,SAAS,OAAO,KAAK;AAE3B,MAAI,CAAC,OAAO,UAAU,MAAM,KAAK,UAAU,GAAG;AAC5C,UAAM,IAAI,aAAa,GAAG,IAAI,+BAA+B,YAAY;AAAA,EAC3E;AAEA,SAAO;AACT;AAEA,eAAe,kBAAkB,OAIf;AAChB,MAAI;AACJ,MAAI;AACF,YAAQ,MAAM,MAAM,SAAS,MAAM,QAAQ;AAAA,EAC7C,SAAS,OAAO;AACd,QAAI,aAAa,OAAO,QAAQ,GAAG;AACjC,YAAM,IAAI,aAAa,mBAAmB,MAAM,WAAW,IAAI,YAAY;AAAA,IAC7E;AAEA,UAAM;AAAA,EACR;AAEA,MAAI,CAAC,MAAM,OAAO,GAAG;AACnB,UAAM,IAAI,aAAa,sCAAsC,MAAM,WAAW,IAAI,YAAY;AAAA,EAChG;AACF;AAEA,eAAe,cACb,UACA,QACA,SAWiB;AACjB,QAAM,SAAS,qBAAqB,UAAU,MAAM,QAAQ,SAAS,UAAU,MAAM,CAAC;AACtF,QAAM,OAAO;AAAA,IACX;AAAA,IACA,MAAM,OAAO,YAAY;AAAA,IACzB,SAAS,OAAO,YAAY;AAAA,EAC9B;AACA,QAAM,UAAU,cAAc,OAAO,aAAa,MAAM;AAAA,IACtD,IAAI,OAAO,KACP,EAAE,MAAM,KAAK,QAAQ,QAAQ,KAAK,OAAO,UAAU,QAAQ,QAAQ,CAAC,EAAE,IACtE;AAAA,IACJ,YAAY,QAAQ;AAAA,IACpB,QAAQ,QAAQ;AAAA,IAChB,QAAQ,QAAQ;AAAA,EAClB,CAAC;AACD,MAAI,MAAM,QAAQ;AAClB,MAAI,OAAO,cAAc,QAAW;AAClC,QAAI,QAAQ,OAAW,OAAM,IAAI,UAAU,6CAA6C;AACxF,UAAM,aAAa,KAAK,QAAQ,QAAQ,KAAK,OAAO,SAAS;AAC7D,UAAM,eAAe,MAAM,QAAQ,SAAS,YAAY,MAAM,GAAG,QAAQ,UAAU,CAAC;AAAA,EACtF;AACA,MAAI,QAAQ,QAAW;AACrB,UAAM,WAAW,IAAI;AAAA,MACnB,QAAQ,oBAAoB,MAAM,QAAQ,WAAW,OAAO,QAAQ,QAAQ,QAAQ;AAAA,IACtF;AACA,QAAI,SAAS,IAAI,KAAK,EAAG,OAAM,IAAI,UAAU,0CAA0C;AACvF,aAAS,IAAI,OAAO,cAAc,GAAG,CAAC;AACtC,YAAQ,WAAW;AAAA,EACrB;AACA,QAAM,UAAU,qBAAqB,QAAQ,UAAU,OAAO,WAAW;AACzE,MAAI,mBAAmB,OAAO;AAC9B,QAAM,aAAa,OAAO,MACtB,KAAK,kBAAkB;AAAA,IACrB,oBAAoB,CAAC,QAAQ;AAAA,IAC7B,UAAU;AAAA,IACV,KAAK;AAAA,IACL,WAAW,OAAO;AAAA,IAClB,mBAAmB,OAAO,KAAK,OAAO,WAAW;AAAA,IACjD,SAAS,qCAAqC,OAAO;AAAA,EACvD,CAAC,IACD,KAAK,kBAAkB;AAAA,IACrB,oBAAoB,CAAC,QAAQ;AAAA,IAC7B,UAAU;AAAA,IACV,mBAAmB,OAAO,KAAK,OAAO,WAAW;AAAA,IACjD,SAAS,qCAAqC,OAAO;AAAA,EACvD,CAAC;AACL,QAAM,cAAc,MAAM,QAAQ,UAAU,IAAI,aAAa,WAAW;AAExE,MAAI,CAAC,MAAM,QAAQ,UAAU,GAAG;AAC9B,uBAAmB,WAAW;AAC9B,QAAI,WAAW,UAAU,OAAO,kBAAkB;AAChD,YAAM,QAAQ;AAAA,QACZ;AAAA,QACA,wBAAwB,OAAO,WAAW,QAAQ,WAAW,KAAK;AAAA,QAClE;AAAA,UACE,UAAU;AAAA,QACZ;AAAA,MACF;AAAA,IACF;AAAA,EACF;AAEA,QAAM,aAAa,YAAY,OAAO,CAAC,eAAe,WAAW,aAAa,OAAO;AACrF,MAAI,WAAW,SAAS,GAAG;AACzB,YAAQ,OAAO,MAAM;AAAA,EAAiB,kBAAkB,UAAU,CAAC;AAAA,CAAI;AACvE,QAAI,QAAQ,WAAW,QAAQ;AAC7B,aAAO;AAAA,IACT;AACA,WAAO,WAAW,KAAK,CAAC,eAAe,WAAW,SAAS,OAAO,IAAI,aAAa;AAAA,EACrF;AAEA,QAAM,eAAe,YAAY,OAAO,CAAC,eAAe,WAAW,aAAa,SAAS;AACzF,MAAI,aAAa,SAAS,GAAG;AAC3B,YAAQ,OAAO,MAAM;AAAA,EAAmB,kBAAkB,YAAY,CAAC;AAAA,CAAI;AAC3E,QAAI,QAAQ,WAAW,QAAQ;AAC7B,aAAO;AAAA,IACT;AAAA,EACF;AAEA,QAAM,WAAW,MAAM,oBAAoB,OAAO,aAAa,OAAO;AACtE,MAAI,aAAa,QAAW;AAC1B,YAAQ,UAAU,EAAE,QAAQ,iBAAiB,CAAC;AAAA,EAChD;AAEA,QAAM,kBAAkB,IAAI,gBAAgB;AAC5C,MAAI,cAAc;AAClB,MAAI;AACJ,MAAI;AACJ,QAAM,WAAW,MAAM;AACrB,kBAAc;AACd,oBAAgB,MAAM,iBAAiB,CAAC;AACxC,YAAQ,OAAO,MAAM,yBAAyB;AAE9C,QAAI,OAAO,iBAAiB,UAAa,eAAe,QAAW;AACjE,4BAAsB,qBAAqB,YAAY,OAAO,cAAc,OAAO;AAAA,IACrF;AAAA,EACF;AAEA,UAAQ,QAAQ,GAAG,UAAU,QAAQ;AACrC,MAAI;AACF,iBAAa,IAAI,kBAAkB;AAAA,MACjC,QACE,OAAO,aAAa,UAAa,OAAO,aAAa,SACjD,SACA,IAAI,OAAO,EAAE,UAAU,OAAO,UAAU,UAAU,OAAO,SAAS,CAAC;AAAA,MACzE,gBAAgB,iBAAiB,kBAAkB,QAAQ,IAAI,CAAC,IAAI;AAAA,MACpE,UAAU;AAAA,MACV;AAAA,MACA,QAAQ,gBAAgB;AAAA,MACxB,MAAM,kBAAkB,QAAQ,QAAQ,QAAQ,MAAM;AAAA,MACtD;AAAA,IACF,CAAC;AACD,UAAM,SAAS,MAAM;AACrB,UAAM;AAEN,QAAI,QAAQ,WAAW,QAAQ;AAC7B,aAAO;AAAA,IACT;AAEA,QAAI,OAAO,iBAAiB,QAAW;AACrC,YAAM,cAAc,OAAO,cAAc,MAAM,KAAK,MAAM,GAAG,OAAO;AAAA,IACtE;AAEA,QAAI,CAAC,OAAO,IAAI;AACd,cAAQ,OAAO;AAAA,QACb,GAAG,uBAAuB,OAAO,OAAO;AAAA,UACtC,UAAU;AAAA,UACV,QAAQ;AAAA,QACV,CAAC,CAAC;AAAA;AAAA,MACJ;AACA,UAAI,QAAQ,WAAW,QAAQ;AAC7B,eAAO;AAAA,MACT;AACA,aAAO,cAAc,cAAc,iBAAiB,OAAO,KAAK;AAAA,IAClE;AAEA,YAAQ,OAAO,MAAM,GAAG,KAAK,UAAU,EAAE,IAAI,MAAM,aAAa,OAAO,YAAY,CAAC,CAAC;AAAA,CAAI;AACzF,WAAO,QAAQ,WAAW,SAAS,IAAI,cAAc,cAAc;AAAA,EACrE,SAAS,OAAO;AACd,UAAM;AACN,QAAI,QAAQ,WAAW,QAAQ;AAC7B,aAAO;AAAA,IACT;AACA,YAAQ,OAAO;AAAA,MACb,GAAG,uBAAuB,OAAO;AAAA,QAC/B,UAAU;AAAA,QACV,QAAQ;AAAA,MACV,CAAC,CAAC;AAAA;AAAA,IACJ;AACA,WAAO,QAAQ,WAAW,SAAS,IAAI,cAAc,cAAc,iBAAiB,KAAK;AAAA,EAC3F,UAAE;AACA,YAAQ,QAAQ,IAAI,UAAU,QAAQ;AAAA,EACxC;AACF;AAEA,SAAS,qBAAqB,UAAkB,WAAiC;AAC/E,QAAM,SAAS,mBAAmB,SAAS;AAC3C,QAAM,sBAAsB,UAAU,SAAS,OAAO;AAEtD,MAAI,qBAAqB,QAAQ,QAAQ,CAAC,GAAG;AAC3C,WAAO;AAAA,MACL,cAAc;AAAA,MACd,kBAAkB;AAAA,MAClB,aAAa,CAAC;AAAA,MACd,aAAa;AAAA,MACb;AAAA,IACF;AAAA,EACF;AAEA,QAAM,EAAE,aAAa,KAAK,IAAI,iBAAiB,MAAM;AACrD,QAAM,kBAAkB,OAAO,SAAS,KAAK;AAC7C,QAAM,kBAAkB,aAAa,MAAM,gBAAgB,QAAQ,GAAG,eAAe,IAAI,CAAC;AAC1F,QAAM,aAAa,gBAAgB,QAAQ,GAAG,kBAAkB,gBAAgB,WAAW;AAE3F,SAAO;AAAA,IACL,cAAc,sBAAsB,kBAAkB,gBAAgB,cAAc;AAAA,IACpF,WAAW,gBAAgB,OAAO,IAAI,CAAC,CAAC,OAAO,GAAG,MAAM;AAAA,MACtD,QAAQ,gBAAgB,cAAc;AAAA,MACtC,MAAM,gBAAgB,cAAc;AAAA,IACtC,CAAC;AAAA,IACD,kBAAkB,uBAAuB,gBAAgB,QAAQ,UAAU;AAAA,IAC3E;AAAA,IACA,aAAa;AAAA,IACb;AAAA,EACF;AACF;AAEA,SAAS,qBAAqB,WAA4B;AACxD,SAAO,cAAc,aAAa,cAAc;AAClD;AAEA,SAAS,wBACP,QACA,QACA,OACQ;AACR,SAAO,MAAM;AAAA,IACX,CAAC,QAAQ,QACP,GAAG,OAAO,MAAM,GAAG,OAAO,eAAe,IAAI,MAAM,CAAC,CAAC,CAAC,GAAG,IAAI,WAAW,GAAG,OAAO,MAAM,OAAO,eAAe,IAAI,MAAM,CAAC,CAAC,CAAC;AAAA,IAC7H;AAAA,EACF;AACF;AAEA,SAAS,cACP,aACA,MACA,SAMY;AACZ,MAAI,QAAQ,eAAe,QAAW;AACpC,WAAO;AAAA,MACL,UAAU,QAAQ,WAAW,aAAa,MAAM;AAAA,QAC9C,QAAQ,QAAQ;AAAA,QAChB,QAAQ,QAAQ;AAAA,MAClB,CAAC;AAAA,IACH;AAAA,EACF;AAEA,QAAM,QAAQ;AAAA,IACZ,iBAAiB;AAAA,IACjB,aAAa;AAAA,IACb,aAAa,oBAAI,IAAoB;AAAA,IACrC,YAAY;AAAA,EACd;AACA,QAAM,UAAU,kBAAkB,aAAa,IAAI;AACnD,QAAM,QAAQ,gBAAgB,OAAO,UAAU;AAC7C,UAAM,cAAc;AAEpB,WAAO;AAAA,MACL,UAAU;AAAA,MACV,QAAQ;AAAA,MACR,QAAQ;AAAA,MACR,SAAS,GAAG,MAAM,KAAK,YAAY,gBAAgB,MAAM,MAAM,CAAC;AAAA,MAChE,YAAY,KAAK,MAAM;AAAA,IACzB;AAAA,EACF,CAAC;AACD,QAAM,MAAM;AAAA,IACV,MAAM,aAAa;AACjB,YAAM,mBAAmB;AACzB,aAAO;AAAA,QACL,MAAM,QAAQ,MAAM,eAAe;AAAA,QACnC,UAAU,aAAa,MAAM,eAAe;AAAA,MAC9C;AAAA,IACF;AAAA,IACA,MAAM,SAAS;AACb,YAAM,eAAe;AACrB,aAAO,UAAU,MAAM,WAAW;AAAA,IACpC;AAAA,IACA,MAAM,SAAS;AACb,aAAO;AAAA,IACT;AAAA,EACF;AACA,QAAM,MAAM,cAAc,CAAC,UAAU;AACnC,UAAM,aAAa,kBAAkB,KAAK;AAC1C,UAAM,SAAS,WAAW,SAAS,UAAU,QAAQ,SAAS,QAAQ;AACtE,WAAO,MAAM,GAAG,KAAK,UAAU,UAAU,CAAC;AAAA,CAAI;AAAA,EAChD,CAAC;AACD,QAAM,SAAS,iBAAiB,OAAO,eAAe,GAAG,gBAAgB,YAAY,KAAK,CAAC;AAAA,CAAI;AAE/F,SAAO;AAAA,IACL,UAAU;AAAA,MACR,OAAO,gBAAgB,KAAK;AAAA,MAC5B,MAAM,gBAAgB,oBAAI,IAAI,CAAC,CAAC,WAAW,eAAe,EAAE,OAAO,CAAC,CAAC,CAAC;AAAA;AAAA,MAEtE,GAAI,QAAQ,OAAO,SAAY,CAAC,IAAI,EAAE,IAAI,gBAAgB,aAAa,QAAQ,EAAE,CAAC,EAAE;AAAA,MACpF,KAAK;AAAA,QACH,oBAAI,IAAmC;AAAA,UACrC,CAAC,cAAc,IAAI,UAAU;AAAA,UAC7B,CAAC,UAAU,IAAI,MAAM;AAAA,UACrB,CAAC,UAAU,IAAI,MAAM;AAAA,QACvB,CAAC;AAAA,MACH;AAAA,MACA,SAAS,gBAAgB,OAAO;AAAA,MAChC,KAAK,gBAAgB,GAAG;AAAA,MACxB,QAAQ,gBAAgB,MAAM;AAAA,IAChC;AAAA,EACF;AACF;AAEA,eAAe,oBACb,aACA,SAIqC;AACrC,MAAI,gBAAgB,QAAW;AAC7B,WAAO;AAAA,EACT;AAEA,QAAM,eAAe,KAAK,QAAQ,QAAQ,KAAK,WAAW;AAC1D,MAAI;AACJ,MAAI;AACF,kBAAc,MAAM,QAAQ,SAAS,cAAc,MAAM;AAAA,EAC3D,SAAS,OAAO;AACd,QAAI,aAAa,OAAO,QAAQ,GAAG;AACjC,YAAM,IAAI,aAAa,uBAAuB,WAAW,IAAI,YAAY;AAAA,IAC3E;AAEA,UAAM;AAAA,EACR;AAEA,MAAI;AACF,WAAO,KAAK,MAAM,WAAW;AAAA,EAC/B,SAAS,OAAO;AACd,UAAM,IAAI,MAAM,+BAA+B,WAAW,KAAK,iBAAiB,KAAK,CAAC,EAAE;AAAA,EAC1F;AACF;AAEA,eAAe,qBACb,QACA,cACA,SAKe;AACf,MAAI;AACF,UAAM,cAAc,cAAc,MAAM,YAAY,MAAM,GAAG,OAAO;AAAA,EACtE,SAAS,OAAO;AACd,YAAQ,OAAO;AAAA,MACb,+BAA+B,YAAY,KAAK,iBAAiB,KAAK,CAAC;AAAA;AAAA,IACzE;AAAA,EACF;AACF;AAEA,eAAe,cACb,cACA,SACA,SAIe;AACf,QAAM,eAAe,KAAK,QAAQ,QAAQ,KAAK,YAAY;AAC3D,QAAM,MAAM,QAAQ,YAAY,GAAG,EAAE,WAAW,KAAK,CAAC;AACtD,QAAM,QAAQ,UAAU,cAAc,SAAS,EAAE,UAAU,OAAO,CAAC;AACrE;AAEA,SAAS,kBACP,QACA,QAIA;AACA,SAAO;AAAA,IACL,SAAS,MAAM;AACb,aAAO,MAAM,GAAG,kBAAkB,IAAI,CAAC;AAAA,CAAI;AAAA,IAC7C;AAAA,IACA,OAAO,MAAM;AACX,aAAO,MAAM,GAAG,kBAAkB,IAAI,CAAC;AAAA,CAAI;AAAA,IAC7C;AAAA,EACF;AACF;AAEA,SAAS,kBAAkB,MAAkC;AAC3D,SAAO,kBAAkB,EAAE,QAAQ,OAAO,OAAO,EAAE,GAAG,GAAG,IAAI;AAC/D;AAEA,SAAS,cAAsB;AAC7B,SAAO;AAAA,IACL;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,EACF,EAAE,KAAK,IAAI;AACb;AAEA,SAAS,kBAAkB,aAA4C;AACrE,SAAO,YACJ;AAAA,IACC,CAAC,eACC,GAAG,WAAW,QAAQ,IAAI,WAAW,IAAI,IAAI,WAAW,MAAM,IAAI,WAAW,IAAI,IAAI,WAAW,OAAO;AAAA,EAC3G,EACC,KAAK,IAAI;AACd;AAEA,SAAS,iBAAiB,OAAwB;AAChD,MAAI,iBAAiB,gBAAgB,MAAM,SAAS,kBAAkB;AACpE,WAAO;AAAA,EACT;AAEA,MAAI,aAAa,KAAK,GAAG;AACvB,WAAO;AAAA,EACT;AAEA,SAAO;AACT;AAEA,SAAS,aAAa,OAAyB;AAC7C,SAAO,iBAAiB,SAAS,MAAM,SAAS;AAClD;AAEA,SAAS,iBAAiB,QAAgB,UAA2B;AACnE,SAAO,YAAY,QAAQ,QAAQ,EAAE,KAAK;AAAA,IACxC,CAAC,cAAc,UAAU,SAAS;AAAA,EACpC;AACF;AAEA,SAAS,qBAAqB,SAAyB,aAAsC;AAC3F,MAAI,CAAC,aAAa;AAChB,WAAO;AAAA,EACT;AAEA,MAAI,mBAAmB,KAAK;AAC1B,UAAMA,cAAa,IAAI,IAAI,OAAO;AAClC,IAAAA,YAAW,OAAO,SAAS;AAC3B,WAAOA;AAAA,EACT;AAEA,QAAM,aAAa,uBAAO,OAAO,IAAI;AAErC,aAAW,CAAC,YAAY,aAAa,KAAK,OAAO,QAAQ,OAAO,GAAG;AACjE,QAAI,eAAe,WAAW;AAC5B,iBAAW,UAAU,IAAI;AAAA,IAC3B;AAAA,EACF;AAEA,SAAO;AACT;AAEA,SAAS,mBAAmB,QAAwB;AAClD,SAAO,OAAO,WAAW,QAAQ,IAAI,OAAO,MAAM,CAAC,IAAI;AACzD;AAEA,SAAS,uBAAuB,QAAgB,YAA4B;AAC1E,SAAO,GAAG,KAAK,OAAO,KAAK,IAAI,YAAY,CAAC,CAAC,CAAC,GAAG,MAAM;AACzD;AAEA,SAAS,kBAAkB,OAAuC;AAChE,SAAO;AAAA,IACL,GAAG;AAAA,IACH,IAAI;AAAA,EACN;AACF;AAEA,SAAS,gBAAgB,QAAwB;AAC/C,QAAM,mBAAmB,OAAO,KAAK,EAAE,WAAW,MAAM,GAAG;AAC3D,SAAO,iBAAiB,UAAU,KAAK,mBAAmB,GAAG,iBAAiB,MAAM,GAAG,EAAE,CAAC;AAC5F;AAEA,SAAS,gBACP,YACA,OAGQ;AACR,QAAM,aAAa,MAAM,YAAY,IAAI,UAAU,KAAK,KAAK;AAC7D,QAAM,YAAY,IAAI,YAAY,SAAS;AAE3C,MAAI,eAAe,WAAW,cAAc,GAAG;AAC7C,WAAO;AAAA,EACT;AAEA,MAAI,eAAe,WAAW,cAAc,GAAG;AAC7C,WAAO;AAAA,EACT;AAEA,SAAO,IAAI;AACb;AAEA,SAAS,gBAAgB,OAA+B;AACtD,SAAO;AACT;AAEA,SAAS,mBAA0B;AACjC,MAAI,OAAO,iBAAiB,YAAY;AACtC,UAAMC,SAAQ,IAAI,aAAa,8BAA8B,YAAY;AACzE,sBAAkBA,MAAK;AACvB,WAAOA;AAAA,EACT;AAEA,QAAM,QAAQ,IAAI,MAAM,4BAA4B;AACpD,QAAM,OAAO;AACb,oBAAkB,KAAK;AACvB,SAAO;AACT;AAEA,SAAS,aAAa,OAAgB,MAAuB;AAC3D,SAAO,gBAAgB,OAAO,IAAI;AACpC;AAEA,SAAS,iBAAiB,OAAwB;AAChD,MAAI,iBAAiB,OAAO;AAC1B,WAAO,MAAM;AAAA,EACf;AAEA,SAAO,OAAO,KAAK;AACrB;AAEA,IAAM,eAAN,cAA2B,MAAM;AAAA,EACtB;AAAA,EAET,YAAY,SAAiB,UAAkB;AAC7C,UAAM,OAAO;AACb,SAAK,OAAO;AACZ,SAAK,WAAW;AAAA,EAClB;AACF;AAEA,eAAe,kBAAkB,YAAkD;AACjF,MAAI,OAAO,eAAe,YAAY,WAAW,WAAW,GAAG;AAC7D,WAAO;AAAA,EACT;AAEA,MAAI;AACF,UAAM,CAAC,oBAAoB,cAAc,IAAI,MAAM,QAAQ,IAAI;AAAA,MAC7D,SAAS,KAAK,QAAQ,UAAU,CAAC;AAAA,MACjC,SAAS,cAAc,YAAY,GAAG,CAAC;AAAA,IACzC,CAAC;AACD,WAAO,uBAAuB;AAAA,EAChC,QAAQ;AACN,WAAO;AAAA,EACT;AACF;AAEA,IAAI,MAAM,kBAAkB,QAAQ,KAAK,CAAC,CAAC,GAAG;AAC5C,UAAQ,WAAW,MAAM,OAAO,QAAQ,KAAK,MAAM,CAAC,CAAC;AACvD;",
+  "sourcesContent": ["#!/usr/bin/env node\nimport { mkdir, readFile, realpath, stat, writeFile } from \"node:fs/promises\";\nimport path, { dirname, extname } from \"node:path\";\nimport { formatWithOptions } from \"node:util\";\nimport { fileURLToPath } from \"node:url\";\n\nimport { hasOwnErrorCode } from \"./error-codes.js\";\nimport { formatInterpreterError } from \"./error/format.js\";\nimport { replaceErrorStack } from \"./error/shape.js\";\nimport { Budget, SandboxError } from \"./interp/budget.js\";\nimport { countLineBreaks, extractBlock } from \"./loader/extract-block.js\";\nimport { splitFrontmatter } from \"./loader/frontmatter.js\";\nimport { lint, type Diagnostic, type Fix } from \"./lint.js\";\nimport { createLintModulesFromRuntimeRegistry } from \"./lint/runtime-modules.js\";\nimport { makeAgentModule } from \"./modules/agent.js\";\nimport { makeEnvModule, parseEnvConfig, type EnvModuleOptions } from \"./modules/env.js\";\nimport { makeFailModule } from \"./modules/fail.js\";\nimport { makeFsModule, type FsModuleOptions } from \"./modules/fs.js\";\nimport { makeMcpModule } from \"./modules/mcp.js\";\nimport { parseMcpConfig, type McpModuleOptions } from \"./modules/mcp-transport.js\";\nimport { makeHarnessModule } from \"./modules/harness.js\";\nimport { makeLogModule, type LogModuleEntry } from \"./modules/log.js\";\nimport { makeMetricModule } from \"./modules/metric.js\";\nimport {\n  createBrokenPipeState,\n  createSafeOutputStream,\n  withBrokenPipeGuard,\n  type BrokenPipeState,\n  type OutputStream\n} from \"./output-stream.js\";\nimport type { CallerInjectedBinding } from \"./interp/host-bridge.js\";\nimport type { ModuleExports, ModuleRegistry } from \"./modules/registry.js\";\nimport { parseModule } from \"./parse/parser.js\";\nimport { restore, type SafeJSSnapshot } from \"./restore.js\";\nimport { run, type RunResult } from \"./run.js\";\nimport { dump, dumpCurrent } from \"./snapshot/dump.js\";\n\ntype CliStream = OutputStream;\n\ntype CliProcess = Pick<NodeJS.Process, \"off\" | \"on\">;\n\ntype FileStats = {\n  isFile(): boolean;\n};\n\nexport type ReadMarkdownFile = (filepath: string, encoding: \"utf8\") => Promise<string>;\nexport type WriteMarkdownFile = (\n  filepath: string,\n  source: string,\n  options: { encoding: \"utf8\" }\n) => Promise<void>;\n\nexport type RunCliOptions = {\n  cwd?: string;\n  env?: EnvModuleOptions;\n  mcp?: McpModuleOptions;\n  modulesFor?: (\n    frontmatter: Record<string, unknown>,\n    meta: HarnessMeta,\n    streams: { stderr: CliStream; stdout: CliStream }\n  ) => ModuleRegistry;\n  process?: CliProcess;\n  readFile?: ReadMarkdownFile;\n  stat?: (filepath: string) => Promise<FileStats>;\n  stdout?: CliStream;\n  stderr?: CliStream;\n  writeFile?: WriteMarkdownFile;\n};\n\ntype HarnessMeta = {\n  filepath: string;\n  kind: unknown;\n  version: unknown;\n};\n\ntype ParsedArgs = {\n  filepath?: string;\n  fix: boolean;\n  fs: boolean;\n  fsRoot?: string;\n  envConfig?: string;\n  mcpConfig?: string;\n  dataSize?: number;\n  maxSteps?: number;\n  restorePath?: string;\n  snapshotPath?: string;\n};\n\ntype LoadedSource = {\n  sourceOffset: number;\n  fixRanges?: readonly Fix[\"range\"][];\n  executableSource: string;\n  frontmatter: Record<string, unknown>;\n  isRawScript: boolean;\n  rawSource: string;\n};\n\ntype CliRuntime = {\n  registry: ModuleRegistry;\n};\n\nconst EXIT_RUNTIME = 1;\nconst EXIT_PARSE = 2;\nconst EXIT_BUDGET = 3;\nconst EXIT_SIGINT = 130;\n\nexport async function runCli(\n  argv: readonly string[],\n  options: RunCliOptions = {}\n): Promise<number> {\n  const brokenPipe = createBrokenPipeState();\n  const stdout = createSafeOutputStream(options.stdout ?? process.stdout, brokenPipe);\n  const stderr = createSafeOutputStream(options.stderr ?? process.stderr, brokenPipe);\n\n  return withBrokenPipeGuard(\n    [options.stdout ?? process.stdout, options.stderr ?? process.stderr],\n    brokenPipe,\n    async () => {\n      try {\n        if (argv.includes(\"--help\") || argv.includes(\"-h\")) {\n          stdout.write(`${createUsage()}\\n`);\n          return 0;\n        }\n\n        const parsed = parseArgs(argv);\n        if (parsed.filepath === undefined) {\n          stderr.write(`${createUsage()}\\n`);\n          return brokenPipe.closed ? 0 : EXIT_RUNTIME;\n        }\n\n        const cwd = options.cwd ?? readCurrentWorkingDirectory();\n        const filepath = path.resolve(cwd, parsed.filepath);\n        await assertHarnessFile({\n          displayPath: parsed.filepath,\n          filepath,\n          statFile: options.stat ?? stat\n        });\n\n        return await runScriptFile(filepath, parsed, {\n          cwd,\n          env: options.env,\n          mcp: options.mcp,\n          modulesFor: options.modulesFor,\n          process: options.process ?? process,\n          readFile: options.readFile ?? readFile,\n          brokenPipe,\n          stderr,\n          stdout,\n          writeFile: options.writeFile ?? writeFile\n        });\n      } catch (error) {\n        if (brokenPipe.closed) {\n          return 0;\n        }\n        stderr.write(`${readErrorMessage(error)}\\n`);\n        return brokenPipe.closed\n          ? 0\n          : error instanceof CliExitError\n            ? error.exitCode\n            : exitCodeForError(error);\n      }\n    }\n  );\n}\n\nfunction readCurrentWorkingDirectory(): string {\n  try {\n    return process.cwd();\n  } catch (error) {\n    throw new Error(`Unable to resolve current working directory: ${readErrorMessage(error)}`);\n  }\n}\n\nfunction parseArgs(argv: readonly string[]): ParsedArgs {\n  const parsed: ParsedArgs = {\n    fix: false,\n    fs: false\n  };\n\n  for (let index = 0; index < argv.length; index += 1) {\n    const arg = argv[index];\n\n    if (arg === \"--fix\") {\n      parsed.fix = true;\n      continue;\n    }\n\n    if (arg === \"--fs\") {\n      parsed.fs = true;\n      continue;\n    }\n\n    if (arg === \"--fs-root\") {\n      parsed.fsRoot = readFlagValue(argv, index, arg);\n      index += 1;\n      continue;\n    }\n\n    if (arg === \"--mcp-config\") {\n      parsed.mcpConfig = readFlagValue(argv, index, arg);\n      index += 1;\n      continue;\n    }\n\n    if (arg === \"--env-config\") {\n      parsed.envConfig = readFlagValue(argv, index, arg);\n      index += 1;\n      continue;\n    }\n\n    if (arg === \"--snapshot\") {\n      parsed.snapshotPath = readFlagValue(argv, index, arg);\n      index += 1;\n      continue;\n    }\n\n    if (arg === \"--restore\") {\n      parsed.restorePath = readFlagValue(argv, index, arg);\n      index += 1;\n      continue;\n    }\n\n    if (arg === \"--max-steps\") {\n      parsed.maxSteps = readPositiveInteger(readFlagValue(argv, index, arg), arg);\n      index += 1;\n      continue;\n    }\n\n    if (arg === \"--data-size\") {\n      parsed.dataSize = readPositiveInteger(readFlagValue(argv, index, arg), arg);\n      index += 1;\n      continue;\n    }\n\n    if (arg.startsWith(\"-\")) {\n      throw new CliExitError(`Unknown flag: ${arg}`, EXIT_RUNTIME);\n    }\n\n    if (parsed.filepath !== undefined) {\n      throw new CliExitError(`Unexpected argument: ${arg}`, EXIT_RUNTIME);\n    }\n\n    parsed.filepath = arg;\n  }\n\n  if (!parsed.fs && parsed.fsRoot !== undefined) {\n    throw new CliExitError(\n      \"--fs-root requires --fs. Pass --fs to give the script a filesystem confined to that root, or drop --fs-root.\",\n      EXIT_RUNTIME\n    );\n  }\n\n  return parsed;\n}\n\nfunction readFlagValue(argv: readonly string[], index: number, flag: string): string {\n  const value = argv[index + 1];\n  if (value === undefined || value.length === 0) {\n    throw new CliExitError(`Missing value for ${flag}`, EXIT_RUNTIME);\n  }\n\n  return value;\n}\n\nfunction readPositiveInteger(value: string, flag: string): number {\n  const parsed = Number(value);\n\n  if (!Number.isInteger(parsed) || parsed <= 0) {\n    throw new CliExitError(`${flag} must be a positive integer`, EXIT_RUNTIME);\n  }\n\n  return parsed;\n}\n\nasync function assertHarnessFile(input: {\n  displayPath: string;\n  filepath: string;\n  statFile: (filepath: string) => Promise<FileStats>;\n}): Promise<void> {\n  let stats: FileStats;\n  try {\n    stats = await input.statFile(input.filepath);\n  } catch (error) {\n    if (hasErrorCode(error, \"ENOENT\")) {\n      throw new CliExitError(`File not found: ${input.displayPath}`, EXIT_RUNTIME);\n    }\n\n    throw error;\n  }\n\n  if (!stats.isFile()) {\n    throw new CliExitError(`Harness path must point to a file: ${input.displayPath}`, EXIT_RUNTIME);\n  }\n}\n\nasync function runScriptFile(\n  filepath: string,\n  parsed: ParsedArgs,\n  options: {\n    cwd: string;\n    env: EnvModuleOptions | undefined;\n    mcp: McpModuleOptions | undefined;\n    modulesFor: RunCliOptions[\"modulesFor\"];\n    brokenPipe: BrokenPipeState;\n    process: CliProcess;\n    readFile: ReadMarkdownFile;\n    stderr: CliStream;\n    stdout: CliStream;\n    writeFile: WriteMarkdownFile;\n  }\n): Promise<number> {\n  const loaded = loadExecutableSource(filepath, await options.readFile(filepath, \"utf8\"));\n  const meta = {\n    filepath,\n    kind: loaded.frontmatter.kind,\n    version: loaded.frontmatter.version\n  };\n  const runtime = createRuntime(loaded.frontmatter, meta, {\n    fs: parsed.fs\n      ? { root: path.resolve(options.cwd, parsed.fsRoot ?? dirname(filepath)) }\n      : undefined,\n    modulesFor: options.modulesFor,\n    stderr: options.stderr,\n    stdout: options.stdout\n  });\n  let env = options.env;\n  if (parsed.envConfig !== undefined) {\n    if (env !== undefined) throw new TypeError(\"Pass environment options or --env-config, not both.\");\n    const configPath = path.resolve(options.cwd, parsed.envConfig);\n    env = parseEnvConfig(await options.readFile(configPath, \"utf8\"));\n  }\n  if (env !== undefined) {\n    const registry = new Map(\n      runtime.registry instanceof Map ? runtime.registry : Object.entries(runtime.registry)\n    );\n    if (registry.has(\"env\")) throw new TypeError(\"Environment is already registered by modulesFor.\");\n    registry.set(\"env\", makeEnvModule(env));\n    runtime.registry = registry;\n  }\n  let mcp = options.mcp;\n  if (parsed.mcpConfig !== undefined) {\n    if (mcp !== undefined) throw new TypeError(\"Pass MCP options or --mcp-config, not both.\");\n    const configPath = path.resolve(options.cwd, parsed.mcpConfig);\n    mcp = parseMcpConfig(await options.readFile(configPath, \"utf8\"), dirname(configPath));\n  }\n  if (mcp !== undefined) {\n    const registry = new Map(\n      runtime.registry instanceof Map ? runtime.registry : Object.entries(runtime.registry)\n    );\n    if (registry.has(\"mcp\")) throw new TypeError(\"MCP is already registered by modulesFor.\");\n    registry.set(\"mcp\", makeMcpModule(mcp));\n    runtime.registry = registry;\n  }\n  const modules = excludeHarnessModule(runtime.registry, loaded.isRawScript);\n  let executableSource = loaded.executableSource;\n  const lintResult = parsed.fix\n    ? lint(executableSource, {\n        allowedExportNames: [\"schema\"],\n        filename: filepath,\n        fix: true,\n        fixRanges: loaded.fixRanges,\n        frontmatterFields: Object.keys(loaded.frontmatter),\n        modules: createLintModulesFromRuntimeRegistry(modules)\n      })\n    : lint(executableSource, {\n        allowedExportNames: [\"schema\"],\n        filename: filepath,\n        frontmatterFields: Object.keys(loaded.frontmatter),\n        modules: createLintModulesFromRuntimeRegistry(modules)\n      });\n  const diagnostics = Array.isArray(lintResult) ? lintResult : lintResult.diagnostics;\n\n  if (!Array.isArray(lintResult)) {\n    executableSource = lintResult.fixed;\n    if (lintResult.fixed !== loaded.executableSource) {\n      await options.writeFile(\n        filepath,\n        replaceExecutableSource(loaded.rawSource, loaded, lintResult.fixes),\n        {\n          encoding: \"utf8\"\n        }\n      );\n    }\n  }\n\n  const lintErrors = diagnostics.filter((diagnostic) => diagnostic.severity === \"error\");\n  if (lintErrors.length > 0) {\n    options.stderr.write(`Lint failed:\\n${formatDiagnostics(lintErrors)}\\n`);\n    if (options.brokenPipe.closed) {\n      return 0;\n    }\n    return lintErrors.some((diagnostic) => diagnostic.code === \"AS001\") ? EXIT_PARSE : EXIT_RUNTIME;\n  }\n\n  const lintWarnings = diagnostics.filter((diagnostic) => diagnostic.severity === \"warning\");\n  if (lintWarnings.length > 0) {\n    options.stderr.write(`Lint warnings:\\n${formatDiagnostics(lintWarnings)}\\n`);\n    if (options.brokenPipe.closed) {\n      return 0;\n    }\n  }\n\n  const snapshot = await readRestoreSnapshot(parsed.restorePath, options);\n  if (snapshot !== undefined) {\n    restore(snapshot, { source: executableSource });\n  }\n\n  const abortController = new AbortController();\n  let interrupted = false;\n  let runPromise: Promise<RunResult> | undefined;\n  let signalSnapshotWrite: Promise<void> | undefined;\n  const onSigint = () => {\n    interrupted = true;\n    abortController.abort(createAbortError());\n    options.stderr.write(\"Interrupted by SIGINT\\n\");\n\n    if (parsed.snapshotPath !== undefined && runPromise !== undefined) {\n      signalSnapshotWrite = writeCurrentSnapshot(runPromise, parsed.snapshotPath, options);\n    }\n  };\n\n  options.process.on(\"SIGINT\", onSigint);\n  try {\n    runPromise = run(executableSource, {\n      budget:\n        parsed.maxSteps === undefined && parsed.dataSize === undefined\n          ? undefined\n          : new Budget({ dataSize: parsed.dataSize, maxSteps: parsed.maxSteps }),\n      entryPointArgs: hasDefaultExport(executableSource, filepath) ? [] : undefined,\n      filename: filepath,\n      modules,\n      signal: abortController.signal,\n      sink: createConsoleSink(options.stdout, options.stderr),\n      snapshot\n    });\n    const result = await runPromise;\n    await signalSnapshotWrite;\n\n    if (options.brokenPipe.closed) {\n      return 0;\n    }\n\n    if (parsed.snapshotPath !== undefined) {\n      await writeSnapshot(parsed.snapshotPath, await dump(result), options);\n    }\n\n    if (!result.ok) {\n      options.stderr.write(\n        `${formatInterpreterError(result.error, {\n          filename: filepath,\n          source: executableSource\n        })}\\n`\n      );\n      if (options.brokenPipe.closed) {\n        return 0;\n      }\n      return interrupted ? EXIT_SIGINT : exitCodeForError(result.error);\n    }\n\n    options.stdout.write(`${JSON.stringify({ ok: true, returnValue: result.returnValue })}\\n`);\n    return options.brokenPipe.closed ? 0 : interrupted ? EXIT_SIGINT : 0;\n  } catch (error) {\n    await signalSnapshotWrite;\n    if (options.brokenPipe.closed) {\n      return 0;\n    }\n    options.stderr.write(\n      `${formatInterpreterError(error, {\n        filename: filepath,\n        source: executableSource\n      })}\\n`\n    );\n    return options.brokenPipe.closed ? 0 : interrupted ? EXIT_SIGINT : exitCodeForError(error);\n  } finally {\n    options.process.off(\"SIGINT\", onSigint);\n  }\n}\n\nfunction loadExecutableSource(filepath: string, rawSource: string): LoadedSource {\n  const source = stripByteOrderMark(rawSource);\n  const byteOrderMarkLength = rawSource.length - source.length;\n\n  if (isRawScriptExtension(extname(filepath))) {\n    return {\n      sourceOffset: byteOrderMarkLength,\n      executableSource: source,\n      frontmatter: {},\n      isRawScript: true,\n      rawSource\n    };\n  }\n\n  const { frontmatter, body } = splitFrontmatter(source);\n  const bodyStartOffset = source.length - body.length;\n  const executableBlock = extractBlock(body, countLineBreaks(source, 0, bodyStartOffset) + 1);\n  const lineOffset = countLineBreaks(source, 0, bodyStartOffset + executableBlock.startOffset);\n\n  return {\n    sourceOffset: byteOrderMarkLength + bodyStartOffset + executableBlock.startOffset - lineOffset,\n    fixRanges: executableBlock.ranges.map(([start, end]) => [\n      start - executableBlock.startOffset + lineOffset,\n      end - executableBlock.startOffset + lineOffset\n    ]),\n    executableSource: createLineOffsetSource(executableBlock.source, lineOffset),\n    frontmatter,\n    isRawScript: false,\n    rawSource\n  };\n}\n\nfunction isRawScriptExtension(extension: string): boolean {\n  return extension === \".safejs\" || extension === \".ajs\";\n}\n\nfunction replaceExecutableSource(\n  source: string,\n  loaded: LoadedSource,\n  fixes: readonly Fix[]\n): string {\n  return fixes.reduce(\n    (result, fix) =>\n      `${result.slice(0, loaded.sourceOffset + fix.range[0])}${fix.replacement}${result.slice(loaded.sourceOffset + fix.range[1])}`,\n    source\n  );\n}\n\nfunction createRuntime(\n  frontmatter: Record<string, unknown>,\n  meta: HarnessMeta,\n  options: {\n    fs: FsModuleOptions | undefined;\n    modulesFor: RunCliOptions[\"modulesFor\"];\n    stderr: CliStream;\n    stdout: CliStream;\n  }\n): CliRuntime {\n  if (options.modulesFor !== undefined) {\n    return {\n      registry: options.modulesFor(frontmatter, meta, {\n        stderr: options.stderr,\n        stdout: options.stdout\n      })\n    };\n  }\n\n  const state = {\n    checkpointCount: 0,\n    commitCount: 0,\n    metricCalls: new Map<string, number>(),\n    spawnCount: 0\n  };\n  const harness = makeHarnessModule(frontmatter, meta);\n  const agent = makeAgentModule(async (input) => {\n    state.spawnCount += 1;\n\n    return {\n      exitCode: 0,\n      stdout: \"\",\n      stderr: \"\",\n      summary: `${input.agent} handled ${summarizePrompt(input.prompt)}`,\n      durationMs: 25 * state.spawnCount\n    };\n  });\n  const git = {\n    async checkpoint() {\n      state.checkpointCount += 1;\n      return {\n        head: `head-${state.checkpointCount}`,\n        stashRef: `savepoint-${state.checkpointCount}`\n      };\n    },\n    async commit() {\n      state.commitCount += 1;\n      return `commit-${state.commitCount}`;\n    },\n    async revert() {\n      return undefined;\n    }\n  };\n  const log = makeLogModule((entry) => {\n    const normalized = normalizeLogEntry(entry);\n    const stream = normalized.type === \"error\" ? options.stderr : options.stdout;\n    stream.write(`${JSON.stringify(normalized)}\\n`);\n  });\n  const metric = makeMetricModule(async (scriptName) => `${readMetricScore(scriptName, state)}\\n`);\n\n  return {\n    registry: {\n      agent: toModuleExports(agent),\n      fail: toModuleExports(new Map([[\"default\", makeFailModule().default]])),\n      // The one module here that is not a stub, so it is registered only when asked for.\n      ...(options.fs === undefined ? {} : { fs: toModuleExports(makeFsModule(options.fs)) }),\n      git: toModuleExports(\n        new Map<string, CallerInjectedBinding>([\n          [\"checkpoint\", git.checkpoint],\n          [\"commit\", git.commit],\n          [\"revert\", git.revert]\n        ])\n      ),\n      harness: toModuleExports(harness),\n      log: toModuleExports(log),\n      metric: toModuleExports(metric)\n    }\n  };\n}\n\nasync function readRestoreSnapshot(\n  restorePath: string | undefined,\n  options: {\n    cwd: string;\n    readFile: ReadMarkdownFile;\n  }\n): Promise<SafeJSSnapshot | undefined> {\n  if (restorePath === undefined) {\n    return undefined;\n  }\n\n  const snapshotPath = path.resolve(options.cwd, restorePath);\n  let rawSnapshot: string;\n  try {\n    rawSnapshot = await options.readFile(snapshotPath, \"utf8\");\n  } catch (error) {\n    if (hasErrorCode(error, \"ENOENT\")) {\n      throw new CliExitError(`Snapshot not found: ${restorePath}`, EXIT_RUNTIME);\n    }\n\n    throw error;\n  }\n\n  try {\n    return JSON.parse(rawSnapshot) as SafeJSSnapshot;\n  } catch (error) {\n    throw new Error(`Failed to parse snapshot at ${restorePath}: ${readErrorMessage(error)}`);\n  }\n}\n\nasync function writeCurrentSnapshot(\n  result: PromiseLike<RunResult>,\n  snapshotPath: string,\n  options: {\n    cwd: string;\n    stderr: CliStream;\n    writeFile: WriteMarkdownFile;\n  }\n): Promise<void> {\n  try {\n    await writeSnapshot(snapshotPath, await dumpCurrent(result), options);\n  } catch (error) {\n    options.stderr.write(\n      `Failed to write snapshot at ${snapshotPath}: ${readErrorMessage(error)}\\n`\n    );\n  }\n}\n\nasync function writeSnapshot(\n  snapshotPath: string,\n  content: string,\n  options: {\n    cwd: string;\n    writeFile: WriteMarkdownFile;\n  }\n): Promise<void> {\n  const resolvedPath = path.resolve(options.cwd, snapshotPath);\n  await mkdir(dirname(resolvedPath), { recursive: true });\n  await options.writeFile(resolvedPath, content, { encoding: \"utf8\" });\n}\n\nfunction createConsoleSink(\n  stdout: CliStream,\n  stderr: CliStream\n): {\n  error: (...args: unknown[]) => void;\n  log: (...args: unknown[]) => void;\n} {\n  return {\n    error(...args) {\n      stderr.write(`${formatConsoleArgs(args)}\\n`);\n    },\n    log(...args) {\n      stdout.write(`${formatConsoleArgs(args)}\\n`);\n    }\n  };\n}\n\nfunction formatConsoleArgs(args: readonly unknown[]): string {\n  return formatWithOptions({ colors: false, depth: 4 }, ...args);\n}\n\nfunction createUsage(): string {\n  return [\n    \"Usage: poe-safejs [options] <script.md|script.safejs|script.ajs>\",\n    \"\",\n    \"Options:\",\n    \"  --fix                 apply lint fixes before running\",\n    \"  --fs                  register the fs module: a real filesystem, unlike the agent,\",\n    \"                        git, and metric stubs this runner bundles\",\n    \"  --fs-root <path>      directory --fs confines the script to (default: the script's\",\n    \"                        directory)\",\n    \"  --mcp-config <path>   register named MCP servers from an explicit JSON config\",\n    \"  --env-config <path>   grant environment reads from an explicit JSON config\",\n    \"  --snapshot <path>     write the final snapshot, and best-effort snapshot on SIGINT\",\n    \"  --restore <path>      restore from a snapshot before running\",\n    \"  --max-steps <n>       cap interpreter step budget\",\n    \"  --data-size <n>       cap retained sandbox data units\",\n    \"  -h, --help            print this help\",\n    \"\",\n    \"Exit codes:\",\n    \"  0 success\",\n    \"  1 runtime, usage, file, or restore error\",\n    \"  2 parse error\",\n    \"  3 budget exceeded\",\n    \"  130 interrupted by SIGINT\"\n  ].join(\"\\n\");\n}\n\nfunction formatDiagnostics(diagnostics: readonly Diagnostic[]): string {\n  return diagnostics\n    .map(\n      (diagnostic) =>\n        `${diagnostic.filename}:${diagnostic.line}:${diagnostic.column} ${diagnostic.code} ${diagnostic.message}`\n    )\n    .join(\"\\n\");\n}\n\nfunction exitCodeForError(error: unknown): number {\n  if (error instanceof SandboxError && error.code === \"budgetExceeded\") {\n    return EXIT_BUDGET;\n  }\n\n  if (isParseError(error)) {\n    return EXIT_PARSE;\n  }\n\n  return EXIT_RUNTIME;\n}\n\nfunction isParseError(error: unknown): boolean {\n  return error instanceof Error && error.name === \"ParseError\";\n}\n\nfunction hasDefaultExport(source: string, filename: string): boolean {\n  return parseModule(source, filename).body.some(\n    (statement) => statement.type === \"ExportDefaultDeclaration\"\n  );\n}\n\nfunction excludeHarnessModule(modules: ModuleRegistry, isRawScript: boolean): ModuleRegistry {\n  if (!isRawScript) {\n    return modules;\n  }\n\n  if (modules instanceof Map) {\n    const rawModules = new Map(modules);\n    rawModules.delete(\"harness\");\n    return rawModules;\n  }\n\n  const rawModules = Object.create(null) as Record<string, ModuleExports>;\n\n  for (const [moduleName, moduleExports] of Object.entries(modules)) {\n    if (moduleName !== \"harness\") {\n      rawModules[moduleName] = moduleExports;\n    }\n  }\n\n  return rawModules;\n}\n\nfunction stripByteOrderMark(source: string): string {\n  return source.startsWith(\"\\uFEFF\") ? source.slice(1) : source;\n}\n\nfunction createLineOffsetSource(source: string, lineOffset: number): string {\n  return `${\"\\n\".repeat(Math.max(lineOffset, 0))}${source}`;\n}\n\nfunction normalizeLogEntry(entry: LogModuleEntry): LogModuleEntry {\n  return {\n    ...entry,\n    ts: \"2026-04-29T00:00:00.000Z\"\n  };\n}\n\nfunction summarizePrompt(prompt: string): string {\n  const normalizedPrompt = prompt.trim().replaceAll(\"\\n\", \" \");\n  return normalizedPrompt.length <= 48 ? normalizedPrompt : `${normalizedPrompt.slice(0, 45)}...`;\n}\n\nfunction readMetricScore(\n  scriptName: string,\n  state: {\n    metricCalls: Map<string, number>;\n  }\n): number {\n  const callCount = (state.metricCalls.get(scriptName) ?? 0) + 1;\n  state.metricCalls.set(scriptName, callCount);\n\n  if (scriptName === \"tests\" && callCount === 1) {\n    return 10;\n  }\n\n  if (scriptName === \"tests\" && callCount === 2) {\n    return 9;\n  }\n\n  return 9 + callCount;\n}\n\nfunction toModuleExports(value: unknown): ModuleExports {\n  return value as ModuleExports;\n}\n\nfunction createAbortError(): Error {\n  if (typeof DOMException === \"function\") {\n    const error = new DOMException(\"This operation was aborted\", \"AbortError\");\n    replaceErrorStack(error);\n    return error;\n  }\n\n  const error = new Error(\"This operation was aborted\");\n  error.name = \"AbortError\";\n  replaceErrorStack(error);\n  return error;\n}\n\nfunction hasErrorCode(error: unknown, code: string): boolean {\n  return hasOwnErrorCode(error, code);\n}\n\nfunction readErrorMessage(error: unknown): string {\n  if (error instanceof Error) {\n    return error.message;\n  }\n\n  return String(error);\n}\n\nclass CliExitError extends Error {\n  readonly exitCode: number;\n\n  constructor(message: string, exitCode: number) {\n    super(message);\n    this.name = \"CliExitError\";\n    this.exitCode = exitCode;\n  }\n}\n\nasync function isDirectExecution(entryPoint: string | undefined): Promise<boolean> {\n  if (typeof entryPoint !== \"string\" || entryPoint.length === 0) {\n    return false;\n  }\n\n  try {\n    const [resolvedEntryPoint, resolvedModule] = await Promise.all([\n      realpath(path.resolve(entryPoint)),\n      realpath(fileURLToPath(import.meta.url))\n    ]);\n    return resolvedEntryPoint === resolvedModule;\n  } catch {\n    return false;\n  }\n}\n\nif (await isDirectExecution(process.argv[1])) {\n  process.exitCode = await runCli(process.argv.slice(2));\n}\n"],
+  "mappings": ";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AACA,SAAS,OAAO,UAAU,UAAU,MAAM,iBAAiB;AAC3D,OAAO,QAAQ,SAAS,eAAe;AACvC,SAAS,yBAAyB;AAClC,SAAS,qBAAqB;AAiG9B,IAAM,eAAe;AACrB,IAAM,aAAa;AACnB,IAAM,cAAc;AACpB,IAAM,cAAc;AAEpB,eAAsB,OACpB,MACA,UAAyB,CAAC,GACT;AACjB,QAAM,aAAa,sBAAsB;AACzC,QAAM,SAAS,uBAAuB,QAAQ,UAAU,QAAQ,QAAQ,UAAU;AAClF,QAAM,SAAS,uBAAuB,QAAQ,UAAU,QAAQ,QAAQ,UAAU;AAElF,SAAO;AAAA,IACL,CAAC,QAAQ,UAAU,QAAQ,QAAQ,QAAQ,UAAU,QAAQ,MAAM;AAAA,IACnE;AAAA,IACA,YAAY;AACV,UAAI;AACF,YAAI,KAAK,SAAS,QAAQ,KAAK,KAAK,SAAS,IAAI,GAAG;AAClD,iBAAO,MAAM,GAAG,YAAY,CAAC;AAAA,CAAI;AACjC,iBAAO;AAAA,QACT;AAEA,cAAM,SAAS,UAAU,IAAI;AAC7B,YAAI,OAAO,aAAa,QAAW;AACjC,iBAAO,MAAM,GAAG,YAAY,CAAC;AAAA,CAAI;AACjC,iBAAO,WAAW,SAAS,IAAI;AAAA,QACjC;AAEA,cAAM,MAAM,QAAQ,OAAO,4BAA4B;AACvD,cAAM,WAAW,KAAK,QAAQ,KAAK,OAAO,QAAQ;AAClD,cAAM,kBAAkB;AAAA,UACtB,aAAa,OAAO;AAAA,UACpB;AAAA,UACA,UAAU,QAAQ,QAAQ;AAAA,QAC5B,CAAC;AAED,eAAO,MAAM,cAAc,UAAU,QAAQ;AAAA,UAC3C;AAAA,UACA,KAAK,QAAQ;AAAA,UACb,KAAK,QAAQ;AAAA,UACb,YAAY,QAAQ;AAAA,UACpB,SAAS,QAAQ,WAAW;AAAA,UAC5B,UAAU,QAAQ,YAAY;AAAA,UAC9B;AAAA,UACA;AAAA,UACA;AAAA,UACA,WAAW,QAAQ,aAAa;AAAA,QAClC,CAAC;AAAA,MACH,SAAS,OAAO;AACd,YAAI,WAAW,QAAQ;AACrB,iBAAO;AAAA,QACT;AACA,eAAO,MAAM,GAAG,iBAAiB,KAAK,CAAC;AAAA,CAAI;AAC3C,eAAO,WAAW,SACd,IACA,iBAAiB,eACf,MAAM,WACN,iBAAiB,KAAK;AAAA,MAC9B;AAAA,IACF;AAAA,EACF;AACF;AAEA,SAAS,8BAAsC;AAC7C,MAAI;AACF,WAAO,QAAQ,IAAI;AAAA,EACrB,SAAS,OAAO;AACd,UAAM,IAAI,MAAM,gDAAgD,iBAAiB,KAAK,CAAC,EAAE;AAAA,EAC3F;AACF;AAEA,SAAS,UAAU,MAAqC;AACtD,QAAM,SAAqB;AAAA,IACzB,KAAK;AAAA,IACL,IAAI;AAAA,EACN;AAEA,WAAS,QAAQ,GAAG,QAAQ,KAAK,QAAQ,SAAS,GAAG;AACnD,UAAM,MAAM,KAAK,KAAK;AAEtB,QAAI,QAAQ,SAAS;AACnB,aAAO,MAAM;AACb;AAAA,IACF;AAEA,QAAI,QAAQ,QAAQ;AAClB,aAAO,KAAK;AACZ;AAAA,IACF;AAEA,QAAI,QAAQ,aAAa;AACvB,aAAO,SAAS,cAAc,MAAM,OAAO,GAAG;AAC9C,eAAS;AACT;AAAA,IACF;AAEA,QAAI,QAAQ,gBAAgB;AAC1B,aAAO,YAAY,cAAc,MAAM,OAAO,GAAG;AACjD,eAAS;AACT;AAAA,IACF;AAEA,QAAI,QAAQ,gBAAgB;AAC1B,aAAO,YAAY,cAAc,MAAM,OAAO,GAAG;AACjD,eAAS;AACT;AAAA,IACF;AAEA,QAAI,QAAQ,cAAc;AACxB,aAAO,eAAe,cAAc,MAAM,OAAO,GAAG;AACpD,eAAS;AACT;AAAA,IACF;AAEA,QAAI,QAAQ,aAAa;AACvB,aAAO,cAAc,cAAc,MAAM,OAAO,GAAG;AACnD,eAAS;AACT;AAAA,IACF;AAEA,QAAI,QAAQ,eAAe;AACzB,aAAO,WAAW,oBAAoB,cAAc,MAAM,OAAO,GAAG,GAAG,GAAG;AAC1E,eAAS;AACT;AAAA,IACF;AAEA,QAAI,QAAQ,eAAe;AACzB,aAAO,WAAW,oBAAoB,cAAc,MAAM,OAAO,GAAG,GAAG,GAAG;AAC1E,eAAS;AACT;AAAA,IACF;AAEA,QAAI,IAAI,WAAW,GAAG,GAAG;AACvB,YAAM,IAAI,aAAa,iBAAiB,GAAG,IAAI,YAAY;AAAA,IAC7D;AAEA,QAAI,OAAO,aAAa,QAAW;AACjC,YAAM,IAAI,aAAa,wBAAwB,GAAG,IAAI,YAAY;AAAA,IACpE;AAEA,WAAO,WAAW;AAAA,EACpB;AAEA,MAAI,CAAC,OAAO,MAAM,OAAO,WAAW,QAAW;AAC7C,UAAM,IAAI;AAAA,MACR;AAAA,MACA;AAAA,IACF;AAAA,EACF;AAEA,SAAO;AACT;AAEA,SAAS,cAAc,MAAyB,OAAe,MAAsB;AACnF,QAAM,QAAQ,KAAK,QAAQ,CAAC;AAC5B,MAAI,UAAU,UAAa,MAAM,WAAW,GAAG;AAC7C,UAAM,IAAI,aAAa,qBAAqB,IAAI,IAAI,YAAY;AAAA,EAClE;AAEA,SAAO;AACT;AAEA,SAAS,oBAAoB,OAAe,MAAsB;AAChE,QAAM,SAAS,OAAO,KAAK;AAE3B,MAAI,CAAC,OAAO,UAAU,MAAM,KAAK,UAAU,GAAG;AAC5C,UAAM,IAAI,aAAa,GAAG,IAAI,+BAA+B,YAAY;AAAA,EAC3E;AAEA,SAAO;AACT;AAEA,eAAe,kBAAkB,OAIf;AAChB,MAAI;AACJ,MAAI;AACF,YAAQ,MAAM,MAAM,SAAS,MAAM,QAAQ;AAAA,EAC7C,SAAS,OAAO;AACd,QAAI,aAAa,OAAO,QAAQ,GAAG;AACjC,YAAM,IAAI,aAAa,mBAAmB,MAAM,WAAW,IAAI,YAAY;AAAA,IAC7E;AAEA,UAAM;AAAA,EACR;AAEA,MAAI,CAAC,MAAM,OAAO,GAAG;AACnB,UAAM,IAAI,aAAa,sCAAsC,MAAM,WAAW,IAAI,YAAY;AAAA,EAChG;AACF;AAEA,eAAe,cACb,UACA,QACA,SAYiB;AACjB,QAAM,SAAS,qBAAqB,UAAU,MAAM,QAAQ,SAAS,UAAU,MAAM,CAAC;AACtF,QAAM,OAAO;AAAA,IACX;AAAA,IACA,MAAM,OAAO,YAAY;AAAA,IACzB,SAAS,OAAO,YAAY;AAAA,EAC9B;AACA,QAAM,UAAU,cAAc,OAAO,aAAa,MAAM;AAAA,IACtD,IAAI,OAAO,KACP,EAAE,MAAM,KAAK,QAAQ,QAAQ,KAAK,OAAO,UAAU,QAAQ,QAAQ,CAAC,EAAE,IACtE;AAAA,IACJ,YAAY,QAAQ;AAAA,IACpB,QAAQ,QAAQ;AAAA,IAChB,QAAQ,QAAQ;AAAA,EAClB,CAAC;AACD,MAAI,MAAM,QAAQ;AAClB,MAAI,OAAO,cAAc,QAAW;AAClC,QAAI,QAAQ,OAAW,OAAM,IAAI,UAAU,qDAAqD;AAChG,UAAM,aAAa,KAAK,QAAQ,QAAQ,KAAK,OAAO,SAAS;AAC7D,UAAM,eAAe,MAAM,QAAQ,SAAS,YAAY,MAAM,CAAC;AAAA,EACjE;AACA,MAAI,QAAQ,QAAW;AACrB,UAAM,WAAW,IAAI;AAAA,MACnB,QAAQ,oBAAoB,MAAM,QAAQ,WAAW,OAAO,QAAQ,QAAQ,QAAQ;AAAA,IACtF;AACA,QAAI,SAAS,IAAI,KAAK,EAAG,OAAM,IAAI,UAAU,kDAAkD;AAC/F,aAAS,IAAI,OAAO,cAAc,GAAG,CAAC;AACtC,YAAQ,WAAW;AAAA,EACrB;AACA,MAAI,MAAM,QAAQ;AAClB,MAAI,OAAO,cAAc,QAAW;AAClC,QAAI,QAAQ,OAAW,OAAM,IAAI,UAAU,6CAA6C;AACxF,UAAM,aAAa,KAAK,QAAQ,QAAQ,KAAK,OAAO,SAAS;AAC7D,UAAM,eAAe,MAAM,QAAQ,SAAS,YAAY,MAAM,GAAG,QAAQ,UAAU,CAAC;AAAA,EACtF;AACA,MAAI,QAAQ,QAAW;AACrB,UAAM,WAAW,IAAI;AAAA,MACnB,QAAQ,oBAAoB,MAAM,QAAQ,WAAW,OAAO,QAAQ,QAAQ,QAAQ;AAAA,IACtF;AACA,QAAI,SAAS,IAAI,KAAK,EAAG,OAAM,IAAI,UAAU,0CAA0C;AACvF,aAAS,IAAI,OAAO,cAAc,GAAG,CAAC;AACtC,YAAQ,WAAW;AAAA,EACrB;AACA,QAAM,UAAU,qBAAqB,QAAQ,UAAU,OAAO,WAAW;AACzE,MAAI,mBAAmB,OAAO;AAC9B,QAAM,aAAa,OAAO,MACtB,KAAK,kBAAkB;AAAA,IACrB,oBAAoB,CAAC,QAAQ;AAAA,IAC7B,UAAU;AAAA,IACV,KAAK;AAAA,IACL,WAAW,OAAO;AAAA,IAClB,mBAAmB,OAAO,KAAK,OAAO,WAAW;AAAA,IACjD,SAAS,qCAAqC,OAAO;AAAA,EACvD,CAAC,IACD,KAAK,kBAAkB;AAAA,IACrB,oBAAoB,CAAC,QAAQ;AAAA,IAC7B,UAAU;AAAA,IACV,mBAAmB,OAAO,KAAK,OAAO,WAAW;AAAA,IACjD,SAAS,qCAAqC,OAAO;AAAA,EACvD,CAAC;AACL,QAAM,cAAc,MAAM,QAAQ,UAAU,IAAI,aAAa,WAAW;AAExE,MAAI,CAAC,MAAM,QAAQ,UAAU,GAAG;AAC9B,uBAAmB,WAAW;AAC9B,QAAI,WAAW,UAAU,OAAO,kBAAkB;AAChD,YAAM,QAAQ;AAAA,QACZ;AAAA,QACA,wBAAwB,OAAO,WAAW,QAAQ,WAAW,KAAK;AAAA,QAClE;AAAA,UACE,UAAU;AAAA,QACZ;AAAA,MACF;AAAA,IACF;AAAA,EACF;AAEA,QAAM,aAAa,YAAY,OAAO,CAAC,eAAe,WAAW,aAAa,OAAO;AACrF,MAAI,WAAW,SAAS,GAAG;AACzB,YAAQ,OAAO,MAAM;AAAA,EAAiB,kBAAkB,UAAU,CAAC;AAAA,CAAI;AACvE,QAAI,QAAQ,WAAW,QAAQ;AAC7B,aAAO;AAAA,IACT;AACA,WAAO,WAAW,KAAK,CAAC,eAAe,WAAW,SAAS,OAAO,IAAI,aAAa;AAAA,EACrF;AAEA,QAAM,eAAe,YAAY,OAAO,CAAC,eAAe,WAAW,aAAa,SAAS;AACzF,MAAI,aAAa,SAAS,GAAG;AAC3B,YAAQ,OAAO,MAAM;AAAA,EAAmB,kBAAkB,YAAY,CAAC;AAAA,CAAI;AAC3E,QAAI,QAAQ,WAAW,QAAQ;AAC7B,aAAO;AAAA,IACT;AAAA,EACF;AAEA,QAAM,WAAW,MAAM,oBAAoB,OAAO,aAAa,OAAO;AACtE,MAAI,aAAa,QAAW;AAC1B,YAAQ,UAAU,EAAE,QAAQ,iBAAiB,CAAC;AAAA,EAChD;AAEA,QAAM,kBAAkB,IAAI,gBAAgB;AAC5C,MAAI,cAAc;AAClB,MAAI;AACJ,MAAI;AACJ,QAAM,WAAW,MAAM;AACrB,kBAAc;AACd,oBAAgB,MAAM,iBAAiB,CAAC;AACxC,YAAQ,OAAO,MAAM,yBAAyB;AAE9C,QAAI,OAAO,iBAAiB,UAAa,eAAe,QAAW;AACjE,4BAAsB,qBAAqB,YAAY,OAAO,cAAc,OAAO;AAAA,IACrF;AAAA,EACF;AAEA,UAAQ,QAAQ,GAAG,UAAU,QAAQ;AACrC,MAAI;AACF,iBAAa,IAAI,kBAAkB;AAAA,MACjC,QACE,OAAO,aAAa,UAAa,OAAO,aAAa,SACjD,SACA,IAAI,OAAO,EAAE,UAAU,OAAO,UAAU,UAAU,OAAO,SAAS,CAAC;AAAA,MACzE,gBAAgB,iBAAiB,kBAAkB,QAAQ,IAAI,CAAC,IAAI;AAAA,MACpE,UAAU;AAAA,MACV;AAAA,MACA,QAAQ,gBAAgB;AAAA,MACxB,MAAM,kBAAkB,QAAQ,QAAQ,QAAQ,MAAM;AAAA,MACtD;AAAA,IACF,CAAC;AACD,UAAM,SAAS,MAAM;AACrB,UAAM;AAEN,QAAI,QAAQ,WAAW,QAAQ;AAC7B,aAAO;AAAA,IACT;AAEA,QAAI,OAAO,iBAAiB,QAAW;AACrC,YAAM,cAAc,OAAO,cAAc,MAAM,KAAK,MAAM,GAAG,OAAO;AAAA,IACtE;AAEA,QAAI,CAAC,OAAO,IAAI;AACd,cAAQ,OAAO;AAAA,QACb,GAAG,uBAAuB,OAAO,OAAO;AAAA,UACtC,UAAU;AAAA,UACV,QAAQ;AAAA,QACV,CAAC,CAAC;AAAA;AAAA,MACJ;AACA,UAAI,QAAQ,WAAW,QAAQ;AAC7B,eAAO;AAAA,MACT;AACA,aAAO,cAAc,cAAc,iBAAiB,OAAO,KAAK;AAAA,IAClE;AAEA,YAAQ,OAAO,MAAM,GAAG,KAAK,UAAU,EAAE,IAAI,MAAM,aAAa,OAAO,YAAY,CAAC,CAAC;AAAA,CAAI;AACzF,WAAO,QAAQ,WAAW,SAAS,IAAI,cAAc,cAAc;AAAA,EACrE,SAAS,OAAO;AACd,UAAM;AACN,QAAI,QAAQ,WAAW,QAAQ;AAC7B,aAAO;AAAA,IACT;AACA,YAAQ,OAAO;AAAA,MACb,GAAG,uBAAuB,OAAO;AAAA,QAC/B,UAAU;AAAA,QACV,QAAQ;AAAA,MACV,CAAC,CAAC;AAAA;AAAA,IACJ;AACA,WAAO,QAAQ,WAAW,SAAS,IAAI,cAAc,cAAc,iBAAiB,KAAK;AAAA,EAC3F,UAAE;AACA,YAAQ,QAAQ,IAAI,UAAU,QAAQ;AAAA,EACxC;AACF;AAEA,SAAS,qBAAqB,UAAkB,WAAiC;AAC/E,QAAM,SAAS,mBAAmB,SAAS;AAC3C,QAAM,sBAAsB,UAAU,SAAS,OAAO;AAEtD,MAAI,qBAAqB,QAAQ,QAAQ,CAAC,GAAG;AAC3C,WAAO;AAAA,MACL,cAAc;AAAA,MACd,kBAAkB;AAAA,MAClB,aAAa,CAAC;AAAA,MACd,aAAa;AAAA,MACb;AAAA,IACF;AAAA,EACF;AAEA,QAAM,EAAE,aAAa,KAAK,IAAI,iBAAiB,MAAM;AACrD,QAAM,kBAAkB,OAAO,SAAS,KAAK;AAC7C,QAAM,kBAAkB,aAAa,MAAM,gBAAgB,QAAQ,GAAG,eAAe,IAAI,CAAC;AAC1F,QAAM,aAAa,gBAAgB,QAAQ,GAAG,kBAAkB,gBAAgB,WAAW;AAE3F,SAAO;AAAA,IACL,cAAc,sBAAsB,kBAAkB,gBAAgB,cAAc;AAAA,IACpF,WAAW,gBAAgB,OAAO,IAAI,CAAC,CAAC,OAAO,GAAG,MAAM;AAAA,MACtD,QAAQ,gBAAgB,cAAc;AAAA,MACtC,MAAM,gBAAgB,cAAc;AAAA,IACtC,CAAC;AAAA,IACD,kBAAkB,uBAAuB,gBAAgB,QAAQ,UAAU;AAAA,IAC3E;AAAA,IACA,aAAa;AAAA,IACb;AAAA,EACF;AACF;AAEA,SAAS,qBAAqB,WAA4B;AACxD,SAAO,cAAc,aAAa,cAAc;AAClD;AAEA,SAAS,wBACP,QACA,QACA,OACQ;AACR,SAAO,MAAM;AAAA,IACX,CAAC,QAAQ,QACP,GAAG,OAAO,MAAM,GAAG,OAAO,eAAe,IAAI,MAAM,CAAC,CAAC,CAAC,GAAG,IAAI,WAAW,GAAG,OAAO,MAAM,OAAO,eAAe,IAAI,MAAM,CAAC,CAAC,CAAC;AAAA,IAC7H;AAAA,EACF;AACF;AAEA,SAAS,cACP,aACA,MACA,SAMY;AACZ,MAAI,QAAQ,eAAe,QAAW;AACpC,WAAO;AAAA,MACL,UAAU,QAAQ,WAAW,aAAa,MAAM;AAAA,QAC9C,QAAQ,QAAQ;AAAA,QAChB,QAAQ,QAAQ;AAAA,MAClB,CAAC;AAAA,IACH;AAAA,EACF;AAEA,QAAM,QAAQ;AAAA,IACZ,iBAAiB;AAAA,IACjB,aAAa;AAAA,IACb,aAAa,oBAAI,IAAoB;AAAA,IACrC,YAAY;AAAA,EACd;AACA,QAAM,UAAU,kBAAkB,aAAa,IAAI;AACnD,QAAM,QAAQ,gBAAgB,OAAO,UAAU;AAC7C,UAAM,cAAc;AAEpB,WAAO;AAAA,MACL,UAAU;AAAA,MACV,QAAQ;AAAA,MACR,QAAQ;AAAA,MACR,SAAS,GAAG,MAAM,KAAK,YAAY,gBAAgB,MAAM,MAAM,CAAC;AAAA,MAChE,YAAY,KAAK,MAAM;AAAA,IACzB;AAAA,EACF,CAAC;AACD,QAAM,MAAM;AAAA,IACV,MAAM,aAAa;AACjB,YAAM,mBAAmB;AACzB,aAAO;AAAA,QACL,MAAM,QAAQ,MAAM,eAAe;AAAA,QACnC,UAAU,aAAa,MAAM,eAAe;AAAA,MAC9C;AAAA,IACF;AAAA,IACA,MAAM,SAAS;AACb,YAAM,eAAe;AACrB,aAAO,UAAU,MAAM,WAAW;AAAA,IACpC;AAAA,IACA,MAAM,SAAS;AACb,aAAO;AAAA,IACT;AAAA,EACF;AACA,QAAM,MAAM,cAAc,CAAC,UAAU;AACnC,UAAM,aAAa,kBAAkB,KAAK;AAC1C,UAAM,SAAS,WAAW,SAAS,UAAU,QAAQ,SAAS,QAAQ;AACtE,WAAO,MAAM,GAAG,KAAK,UAAU,UAAU,CAAC;AAAA,CAAI;AAAA,EAChD,CAAC;AACD,QAAM,SAAS,iBAAiB,OAAO,eAAe,GAAG,gBAAgB,YAAY,KAAK,CAAC;AAAA,CAAI;AAE/F,SAAO;AAAA,IACL,UAAU;AAAA,MACR,OAAO,gBAAgB,KAAK;AAAA,MAC5B,MAAM,gBAAgB,oBAAI,IAAI,CAAC,CAAC,WAAW,eAAe,EAAE,OAAO,CAAC,CAAC,CAAC;AAAA;AAAA,MAEtE,GAAI,QAAQ,OAAO,SAAY,CAAC,IAAI,EAAE,IAAI,gBAAgB,aAAa,QAAQ,EAAE,CAAC,EAAE;AAAA,MACpF,KAAK;AAAA,QACH,oBAAI,IAAmC;AAAA,UACrC,CAAC,cAAc,IAAI,UAAU;AAAA,UAC7B,CAAC,UAAU,IAAI,MAAM;AAAA,UACrB,CAAC,UAAU,IAAI,MAAM;AAAA,QACvB,CAAC;AAAA,MACH;AAAA,MACA,SAAS,gBAAgB,OAAO;AAAA,MAChC,KAAK,gBAAgB,GAAG;AAAA,MACxB,QAAQ,gBAAgB,MAAM;AAAA,IAChC;AAAA,EACF;AACF;AAEA,eAAe,oBACb,aACA,SAIqC;AACrC,MAAI,gBAAgB,QAAW;AAC7B,WAAO;AAAA,EACT;AAEA,QAAM,eAAe,KAAK,QAAQ,QAAQ,KAAK,WAAW;AAC1D,MAAI;AACJ,MAAI;AACF,kBAAc,MAAM,QAAQ,SAAS,cAAc,MAAM;AAAA,EAC3D,SAAS,OAAO;AACd,QAAI,aAAa,OAAO,QAAQ,GAAG;AACjC,YAAM,IAAI,aAAa,uBAAuB,WAAW,IAAI,YAAY;AAAA,IAC3E;AAEA,UAAM;AAAA,EACR;AAEA,MAAI;AACF,WAAO,KAAK,MAAM,WAAW;AAAA,EAC/B,SAAS,OAAO;AACd,UAAM,IAAI,MAAM,+BAA+B,WAAW,KAAK,iBAAiB,KAAK,CAAC,EAAE;AAAA,EAC1F;AACF;AAEA,eAAe,qBACb,QACA,cACA,SAKe;AACf,MAAI;AACF,UAAM,cAAc,cAAc,MAAM,YAAY,MAAM,GAAG,OAAO;AAAA,EACtE,SAAS,OAAO;AACd,YAAQ,OAAO;AAAA,MACb,+BAA+B,YAAY,KAAK,iBAAiB,KAAK,CAAC;AAAA;AAAA,IACzE;AAAA,EACF;AACF;AAEA,eAAe,cACb,cACA,SACA,SAIe;AACf,QAAM,eAAe,KAAK,QAAQ,QAAQ,KAAK,YAAY;AAC3D,QAAM,MAAM,QAAQ,YAAY,GAAG,EAAE,WAAW,KAAK,CAAC;AACtD,QAAM,QAAQ,UAAU,cAAc,SAAS,EAAE,UAAU,OAAO,CAAC;AACrE;AAEA,SAAS,kBACP,QACA,QAIA;AACA,SAAO;AAAA,IACL,SAAS,MAAM;AACb,aAAO,MAAM,GAAG,kBAAkB,IAAI,CAAC;AAAA,CAAI;AAAA,IAC7C;AAAA,IACA,OAAO,MAAM;AACX,aAAO,MAAM,GAAG,kBAAkB,IAAI,CAAC;AAAA,CAAI;AAAA,IAC7C;AAAA,EACF;AACF;AAEA,SAAS,kBAAkB,MAAkC;AAC3D,SAAO,kBAAkB,EAAE,QAAQ,OAAO,OAAO,EAAE,GAAG,GAAG,IAAI;AAC/D;AAEA,SAAS,cAAsB;AAC7B,SAAO;AAAA,IACL;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,EACF,EAAE,KAAK,IAAI;AACb;AAEA,SAAS,kBAAkB,aAA4C;AACrE,SAAO,YACJ;AAAA,IACC,CAAC,eACC,GAAG,WAAW,QAAQ,IAAI,WAAW,IAAI,IAAI,WAAW,MAAM,IAAI,WAAW,IAAI,IAAI,WAAW,OAAO;AAAA,EAC3G,EACC,KAAK,IAAI;AACd;AAEA,SAAS,iBAAiB,OAAwB;AAChD,MAAI,iBAAiB,gBAAgB,MAAM,SAAS,kBAAkB;AACpE,WAAO;AAAA,EACT;AAEA,MAAI,aAAa,KAAK,GAAG;AACvB,WAAO;AAAA,EACT;AAEA,SAAO;AACT;AAEA,SAAS,aAAa,OAAyB;AAC7C,SAAO,iBAAiB,SAAS,MAAM,SAAS;AAClD;AAEA,SAAS,iBAAiB,QAAgB,UAA2B;AACnE,SAAO,YAAY,QAAQ,QAAQ,EAAE,KAAK;AAAA,IACxC,CAAC,cAAc,UAAU,SAAS;AAAA,EACpC;AACF;AAEA,SAAS,qBAAqB,SAAyB,aAAsC;AAC3F,MAAI,CAAC,aAAa;AAChB,WAAO;AAAA,EACT;AAEA,MAAI,mBAAmB,KAAK;AAC1B,UAAMA,cAAa,IAAI,IAAI,OAAO;AAClC,IAAAA,YAAW,OAAO,SAAS;AAC3B,WAAOA;AAAA,EACT;AAEA,QAAM,aAAa,uBAAO,OAAO,IAAI;AAErC,aAAW,CAAC,YAAY,aAAa,KAAK,OAAO,QAAQ,OAAO,GAAG;AACjE,QAAI,eAAe,WAAW;AAC5B,iBAAW,UAAU,IAAI;AAAA,IAC3B;AAAA,EACF;AAEA,SAAO;AACT;AAEA,SAAS,mBAAmB,QAAwB;AAClD,SAAO,OAAO,WAAW,QAAQ,IAAI,OAAO,MAAM,CAAC,IAAI;AACzD;AAEA,SAAS,uBAAuB,QAAgB,YAA4B;AAC1E,SAAO,GAAG,KAAK,OAAO,KAAK,IAAI,YAAY,CAAC,CAAC,CAAC,GAAG,MAAM;AACzD;AAEA,SAAS,kBAAkB,OAAuC;AAChE,SAAO;AAAA,IACL,GAAG;AAAA,IACH,IAAI;AAAA,EACN;AACF;AAEA,SAAS,gBAAgB,QAAwB;AAC/C,QAAM,mBAAmB,OAAO,KAAK,EAAE,WAAW,MAAM,GAAG;AAC3D,SAAO,iBAAiB,UAAU,KAAK,mBAAmB,GAAG,iBAAiB,MAAM,GAAG,EAAE,CAAC;AAC5F;AAEA,SAAS,gBACP,YACA,OAGQ;AACR,QAAM,aAAa,MAAM,YAAY,IAAI,UAAU,KAAK,KAAK;AAC7D,QAAM,YAAY,IAAI,YAAY,SAAS;AAE3C,MAAI,eAAe,WAAW,cAAc,GAAG;AAC7C,WAAO;AAAA,EACT;AAEA,MAAI,eAAe,WAAW,cAAc,GAAG;AAC7C,WAAO;AAAA,EACT;AAEA,SAAO,IAAI;AACb;AAEA,SAAS,gBAAgB,OAA+B;AACtD,SAAO;AACT;AAEA,SAAS,mBAA0B;AACjC,MAAI,OAAO,iBAAiB,YAAY;AACtC,UAAMC,SAAQ,IAAI,aAAa,8BAA8B,YAAY;AACzE,sBAAkBA,MAAK;AACvB,WAAOA;AAAA,EACT;AAEA,QAAM,QAAQ,IAAI,MAAM,4BAA4B;AACpD,QAAM,OAAO;AACb,oBAAkB,KAAK;AACvB,SAAO;AACT;AAEA,SAAS,aAAa,OAAgB,MAAuB;AAC3D,SAAO,gBAAgB,OAAO,IAAI;AACpC;AAEA,SAAS,iBAAiB,OAAwB;AAChD,MAAI,iBAAiB,OAAO;AAC1B,WAAO,MAAM;AAAA,EACf;AAEA,SAAO,OAAO,KAAK;AACrB;AAEA,IAAM,eAAN,cAA2B,MAAM;AAAA,EACtB;AAAA,EAET,YAAY,SAAiB,UAAkB;AAC7C,UAAM,OAAO;AACb,SAAK,OAAO;AACZ,SAAK,WAAW;AAAA,EAClB;AACF;AAEA,eAAe,kBAAkB,YAAkD;AACjF,MAAI,OAAO,eAAe,YAAY,WAAW,WAAW,GAAG;AAC7D,WAAO;AAAA,EACT;AAEA,MAAI;AACF,UAAM,CAAC,oBAAoB,cAAc,IAAI,MAAM,QAAQ,IAAI;AAAA,MAC7D,SAAS,KAAK,QAAQ,UAAU,CAAC;AAAA,MACjC,SAAS,cAAc,YAAY,GAAG,CAAC;AAAA,IACzC,CAAC;AACD,WAAO,uBAAuB;AAAA,EAChC,QAAQ;AACN,WAAO;AAAA,EACT;AACF;AAEA,IAAI,MAAM,kBAAkB,QAAQ,KAAK,CAAC,CAAC,GAAG;AAC5C,UAAQ,WAAW,MAAM,OAAO,QAAQ,KAAK,MAAM,CAAC,CAAC;AACvD;",
   "names": ["rawModules", "error"]
 }

package/packages/safejs/dist/core.js

@@ -3,7 +3,7 @@ import {
   createReplayableRandom,
   lint,
   run
-} from "./chunks/chunk-GQBEEFVQ.js";
+} from "./chunks/chunk-E6LJNTDX.js";
 import "./chunks/chunk-4YIDX44G.js";
 export {
   Budget,

package/packages/safejs/dist/index.d.ts

@@ -28,7 +28,8 @@ export { splitFrontmatter } from "./loader/frontmatter.js";
 export type { ExportDefaultDeclaration, ExportNamedDeclaration, MetaProperty } from "./parse.js";
 export { AgentSpawnError, createSpawnUsageAccumulator, makeAgentModule, runWithSpawnUsageAccumulator } from "./modules/agent.js";
 export type { AgentModuleDefinition, AgentModuleOptions, AgentModuleParallelCall, AgentModuleRetryOptions, AgentModuleSpawnOptions, AgentSpawnEvent, SpawnAgent, SpawnAgentInput, SpawnAgentResult, SpawnUsageAccumulator, SpawnUsageTotal } from "./modules/agent.js";
-export { makeEnvModule } from "./modules/env.js";
+export { EnvAccessError, makeEnvModule, parseEnvConfig } from "./modules/env.js";
+export type { EnvModule, EnvModuleOptions } from "./modules/env.js";
 export { makeFailModule } from "./modules/fail.js";
 export { makeFsModule } from "./modules/fs.js";
 export type { FsImplementation, FsModule, FsModuleOptions, SandboxDirent, SandboxStats } from "./modules/fs.js";

package/packages/safejs/dist/index.js

@@ -1,5 +1,6 @@
 import {
   AgentSpawnError,
+  EnvAccessError,
   SPAWN_MODES,
   containsPath,
   countLineBreaks,
@@ -9,18 +10,20 @@ import {
   formatInterpreterError,
   isSamePath,
   makeAgentModule,
+  makeEnvModule,
   makeFailModule,
   makeFsModule,
   makeHarnessModule,
   makeLogModule,
   makeMcpModule,
   makeMetricModule,
+  parseEnvConfig,
   parseMcpConfig,
   resolveCanonicalPath,
   runWithSpawnUsageAccumulator,
   splitFrontmatter,
   supportsSpawnMode
-} from "./chunks/chunk-55ZK3CR7.js";
+} from "./chunks/chunk-SDKCGJW4.js";
 import {
   Budget,
   FileSnapshotBackend,
@@ -42,7 +45,7 @@ import {
   registerPendingHostCallPolicy,
   restore,
   run
-} from "./chunks/chunk-GQBEEFVQ.js";
+} from "./chunks/chunk-E6LJNTDX.js";
 import "./chunks/chunk-4YIDX44G.js";
 
 // packages/safejs/src/runner/run-harness.ts
@@ -319,38 +322,6 @@ function findExportedConstInitializer(module, name) {
   return void 0;
 }
 
-// packages/safejs/src/modules/env.ts
-function makeEnvModule(allowList) {
-  const allowedNames = normalizeAllowList(allowList);
-  return {
-    get(name) {
-      const normalizedName = readNonEmptyString(name, "Environment variable name");
-      if (!allowedNames.has(normalizedName)) {
-        return void 0;
-      }
-      return process.env[normalizedName];
-    }
-  };
-}
-function normalizeAllowList(allowList) {
-  if (!Array.isArray(allowList)) {
-    throw new Error("Environment allow list must be an array of non-empty strings.");
-  }
-  return new Set(
-    allowList.map((entry, index) => readNonEmptyString(entry, `Environment allow list[${index}]`))
-  );
-}
-function readNonEmptyString(value, label) {
-  if (typeof value !== "string") {
-    throw new Error(`${label} must be a non-empty string.`);
-  }
-  const normalizedValue = value.trim();
-  if (normalizedValue.length === 0) {
-    throw new Error(`${label} must be a non-empty string.`);
-  }
-  return normalizedValue;
-}
-
 // packages/safejs/src/modules/git.ts
 import { execFile } from "node:child_process";
 import { mkdir, readlink, realpath, rm, stat as stat2 } from "node:fs/promises";
@@ -358,7 +329,7 @@ import { dirname, isAbsolute, resolve } from "node:path";
 var GIT_EXEC_MAX_BUFFER = 10 * 1024 * 1024;
 var SAVEPOINT_REF_PREFIX = "refs/poe-code/checkpoints/";
 function makeGitModule(cwd) {
-  const normalizedCwd = readNonEmptyString2(cwd, "Git module cwd");
+  const normalizedCwd = readNonEmptyString(cwd, "Git module cwd");
   return {
     async head() {
       return runGitAndTrim(normalizedCwd, ["rev-parse", "HEAD"]);
@@ -430,7 +401,7 @@ function makeGitModule(cwd) {
       return stdout;
     },
     async worktreeCreate(branch, options) {
-      const normalizedBranch = readNonEmptyString2(branch, "Git worktree branch");
+      const normalizedBranch = readNonEmptyString(branch, "Git worktree branch");
       const normalizedOptions = normalizeWorktreeCreateOptions(options);
       const repoRoot = await getRepoRoot(normalizedCwd);
       const worktreePath = await resolveWorktreePath(
@@ -483,7 +454,7 @@ function normalizeCommitOptions(options) {
   }
   const files = getOwnProperty(options, "files");
   return {
-    message: readNonEmptyString2(getOwnProperty(options, "message"), "Git commit options message"),
+    message: readNonEmptyString(getOwnProperty(options, "message"), "Git commit options message"),
     files: files === void 0 ? void 0 : readNonEmptyStringArray(files, "Git commit options files")
   };
 }
@@ -492,12 +463,12 @@ function normalizeSavepoint(savepoint) {
     throw new Error("Git savepoint must be an object.");
   }
   const stashRefValue = getOwnProperty(savepoint, "stashRef");
-  const stashRef = stashRefValue === void 0 ? void 0 : readNonEmptyString2(stashRefValue, "Git savepoint stashRef");
+  const stashRef = stashRefValue === void 0 ? void 0 : readNonEmptyString(stashRefValue, "Git savepoint stashRef");
   if (stashRef !== void 0 && !stashRef.startsWith(SAVEPOINT_REF_PREFIX)) {
     throw new Error("Git savepoint stashRef must be a Poe checkpoint ref.");
   }
   return {
-    head: readNonEmptyString2(getOwnProperty(savepoint, "head"), "Git savepoint head"),
+    head: readNonEmptyString(getOwnProperty(savepoint, "head"), "Git savepoint head"),
     stashRef
   };
 }
@@ -513,8 +484,8 @@ function normalizeWorktreeCreateOptions(options) {
   const base = getOwnProperty(options, "base");
   const path = getOwnProperty(options, "path");
   return {
-    base: base === void 0 ? "HEAD" : readNonEmptyString2(base, "Git worktree create options base"),
-    path: path === void 0 ? void 0 : readNonEmptyString2(path, "Git worktree create options path")
+    base: base === void 0 ? "HEAD" : readNonEmptyString(base, "Git worktree create options base"),
+    path: path === void 0 ? void 0 : readNonEmptyString(path, "Git worktree create options path")
   };
 }
 function createSavepointRef() {
@@ -655,7 +626,7 @@ function pickGitFailureMessage(stdout, stderr, error) {
   }
   return error.message;
 }
-function readNonEmptyString2(value, label) {
+function readNonEmptyString(value, label) {
   if (typeof value !== "string" || value.trim().length === 0) {
     throw new Error(`${label} must be a non-empty string.`);
   }
@@ -665,7 +636,7 @@ function readNonEmptyStringArray(value, label) {
   if (!Array.isArray(value) || value.length === 0) {
     throw new Error(`${label} must be a non-empty array of strings.`);
   }
-  const entries = value.map((entry, index) => readNonEmptyString2(entry, `${label}[${index}]`));
+  const entries = value.map((entry, index) => readNonEmptyString(entry, `${label}[${index}]`));
   return [...entries];
 }
 function isRecord(value) {
@@ -751,6 +722,7 @@ function createSleepAbortError() {
 export {
   AgentSpawnError,
   Budget,
+  EnvAccessError,
   FileSnapshotBackend,
   HostCallResumabilityError,
   HostOperationResumePolicyError,
@@ -778,6 +750,7 @@ export {
   makeTimeModule,
   noopOtelSink,
   parse,
+  parseEnvConfig,
   parseMcpConfig,
   parseModule,
   registerPendingHostCallPolicy,