@opencode/codemode 0.0.0-dev-19618 → 0.0.0-dev-19619

package/dist/data.d.ts

@@ -23,5 +23,10 @@ export declare const fromData: (protos: Prototypes, value: unknown, label: strin
  * non-finite numbers become null, and array holes become null. `undefined` object properties are
  * dropped ("json") or become null ("result", for program results where the consumer must never see
  * undefined); a bare `undefined` follows the same rule.
+ *
+ * At the host boundary (tool arguments and program results) `__proto__` keys are dropped and values
+ * `JSON.stringify` would flatten to `{}` cross in a useful form instead: a Set as an array, a RegExp
+ * and URLSearchParams as their strings. `JSON.stringify` itself passes `boundary: false` to keep JS
+ * behavior.
  */
-export declare const toData: (value: unknown, label: string, undefinedAs?: "json" | "result", stripProto?: boolean) => unknown;
+export declare const toData: (value: unknown, label: string, undefinedAs?: "json" | "result", boundary?: boolean) => unknown;

package/dist/data.js

@@ -27,10 +27,15 @@ export const fromData = (protos, value, label) => copy(value, label, "data", 0,
  * non-finite numbers become null, and array holes become null. `undefined` object properties are
  * dropped ("json") or become null ("result", for program results where the consumer must never see
  * undefined); a bare `undefined` follows the same rule.
+ *
+ * At the host boundary (tool arguments and program results) `__proto__` keys are dropped and values
+ * `JSON.stringify` would flatten to `{}` cross in a useful form instead: a Set as an array, a RegExp
+ * and URLSearchParams as their strings. `JSON.stringify` itself passes `boundary: false` to keep JS
+ * behavior.
  */
-export const toData = (value, label, undefinedAs = "json", stripProto = true) => copy(value, label, undefinedAs, 0, new Set(), undefined, stripProto);
-const copy = (value, label, mode, depth, seen, protos, stripProto = true) => {
-    const next = (item) => copy(item, label, mode, depth + 1, seen, protos, stripProto);
+export const toData = (value, label, undefinedAs = "json", boundary = true) => copy(value, label, undefinedAs, 0, new Set(), undefined, boundary);
+const copy = (value, label, mode, depth, seen, protos, boundary = true) => {
+    const next = (item) => copy(item, label, mode, depth + 1, seen, protos, boundary);
     if (depth > MAX_VALUE_DEPTH) {
         throw new ToolRuntimeError("InvalidDataValue", `${label} exceeds the maximum value depth of ${MAX_VALUE_DEPTH}.`);
     }
@@ -88,6 +93,20 @@ const copy = (value, label, mode, depth, seen, protos, stripProto = true) => {
         return value.url.href;
     if (value instanceof URL)
         return value.href;
+    if (boundary && protos === undefined) {
+        if (value instanceof ProgramRegExp)
+            return String(value.regex);
+        if (value instanceof ProgramURLSearchParams)
+            return value.params.toString();
+        if (value instanceof ProgramSet) {
+            if (seen.has(value))
+                throw new ToolRuntimeError("InvalidDataValue", `${label} contains a circular value.`);
+            seen.add(value);
+            const copied = Array.from(value.set, (item) => next(item) ?? null);
+            seen.delete(value);
+            return copied;
+        }
+    }
     // Remaining wrappers and their host counterparts serialize as empty objects, like JSON.stringify.
     if (isWrapper(value) ||
         value instanceof RegExp ||
@@ -113,7 +132,7 @@ const copy = (value, label, mode, depth, seen, protos, stripProto = true) => {
             defineHost(copied, "message", next(get(value, "message")));
         }
         for (const [key, item] of entries(value)) {
-            if (stripProto && key === "__proto__")
+            if (boundary && key === "__proto__")
                 continue;
             const copiedItem = next(item);
             if (copiedItem === undefined && mode === "json")
@@ -150,7 +169,7 @@ const copy = (value, label, mode, depth, seen, protos, stripProto = true) => {
     }
     const copied = {};
     for (const [key, item] of Object.entries(value)) {
-        if (stripProto && key === "__proto__")
+        if (boundary && key === "__proto__")
             continue;
         const copiedItem = next(item);
         if (copiedItem === undefined && mode === "json")

package/dist/stdlib/json.js

@@ -54,7 +54,7 @@ const stringify = (runner, args) => {
                 .filter((item) => typeof item === "string" || typeof item === "number")
                 .map(String)
             : null;
-        // A string cannot pollute, so __proto__ stays: JSON.stringify includes own __proto__ keys, like JS.
+        // Not a host boundary: __proto__ stays and Set/RegExp/URLSearchParams serialize as {}, like JS.
         const text = JSON.stringify(toData(args[0], "JSON.stringify value", "json", false), properties, indent);
         if (text !== undefined)
             checkStringLength(text.length);

package/package.json

@@ -1,7 +1,7 @@
 {
   "$schema": "https://json.schemastore.org/package.json",
   "name": "@opencode/codemode",
-  "version": "0.0.0-dev-19618",
+  "version": "0.0.0-dev-19619",
   "description": "Effect-native confined code execution over schema-described tools",
   "type": "module",
   "license": "MIT",