@poe-platform/safe-js 0.1.120 → 0.1.122

package/dist/safe-js/chunks/{chunk-XEFVZTJ7.js → chunk-MQSVO6I2.js}

@@ -27,7 +27,7 @@ import {
   validateMigrationSemantics,
   validateSnapshotData,
   validateSnapshotMigration
-} from "./chunk-XI33TU4X.js";
+} from "./chunk-OZTC4BT3.js";
 
 // packages/safe-js/src/migrate.ts
 import { createHash } from "node:crypto";
@@ -8245,4 +8245,4 @@ export {
   parseMcpConfig,
   makeMcpModule
 };
-//# sourceMappingURL=chunk-XEFVZTJ7.js.map
+//# sourceMappingURL=chunk-MQSVO6I2.js.map

package/dist/safe-js/chunks/{chunk-XI33TU4X.js → chunk-OZTC4BT3.js}

@@ -7623,7 +7623,7 @@ function validateTaggedValue(record2, path, state) {
     case "undefined":
       return;
     case "number":
-      if (!["-Infinity", "Infinity", "NaN"].includes(String(record2.value))) {
+      if (!["-Infinity", "Infinity", "NaN", "-0"].includes(String(record2.value))) {
         fail("invalidValue", `${path}.value`, "unknown non-finite number value");
       }
       return;
@@ -7645,6 +7645,11 @@ function validateTaggedValue(record2, path, state) {
       requireString(record2.flags, `${path}.flags`, state.limits);
       requireSafeInteger(record2.lastIndex, `${path}.lastIndex`, 0);
       return;
+    case "regex-object":
+      requireString(record2.source, `${path}.source`, state.limits);
+      requireString(record2.flags, `${path}.flags`, state.limits);
+      if (!Object.hasOwn(record2, "lastIndex")) fail("invalidValue", `${path}.lastIndex`, "missing regex cursor");
+      return;
     case "array":
     case "arguments":
     case "object":
@@ -8472,10 +8477,10 @@ function charge(context) {
   allocateRegexSteps(context.steps);
 }
 function normalizeLastIndex(lastIndex) {
-  if (!Number.isFinite(lastIndex) || lastIndex <= 0) {
+  if (Number.isNaN(lastIndex) || lastIndex <= 0) {
     return 0;
   }
-  return Math.floor(lastIndex);
+  return Math.min(Math.floor(lastIndex), Number.MAX_SAFE_INTEGER);
 }
 function charactersEqual(left, right, ignoreCase) {
   return left !== void 0 && foldCharacter(left, ignoreCase) === foldCharacter(right, ignoreCase);
@@ -8508,6 +8513,16 @@ function isLineTerminator(character) {
 
 // packages/safe-js/src/interp/methods/regex.ts
 var regexMethodNames = /* @__PURE__ */ new Set(["exec", "test"]);
+var regexFlagProperties = {
+  hasIndices: "d",
+  global: "g",
+  ignoreCase: "i",
+  multiline: "m",
+  dotAll: "s",
+  unicode: "u",
+  unicodeSets: "v",
+  sticky: "y"
+};
 function isRegexMethodName(property) {
   return typeof property === "string" && regexMethodNames.has(property);
 }
@@ -8518,6 +8533,7 @@ function getRegexMember(target, property, budget) {
     return budget === void 0 ? flags : budget.allocateString(flags);
   }
   if (property === "lastIndex") return target.lastIndex;
+  if (Object.hasOwn(regexFlagProperties, property)) return target.flags.includes(regexFlagProperties[property]);
   if (!isRegexMethodName(property)) {
     return void 0;
   }
@@ -8552,14 +8568,15 @@ function setRegexMember(target, property, value) {
   if (property !== "lastIndex") {
     throw new TypeError(`RegExp#${String(property)} is not writable.`);
   }
-  target.lastIndex = Number(value);
+  target.lastIndex = value;
 }
 async function callRegexMethod(target, methodName, args, budget, context) {
   if (target === null || typeof target !== "object" || methodName === "exec" && !isSandboxRegex(target)) {
     throw new TypeError(`RegExp#${methodName} requires ${methodName === "exec" ? "a regex" : "an object"} receiver.`);
   }
   const retained = {};
-  budget.setRetainedValues(retained, () => [target, ...args]);
+  let cursor;
+  budget.setRetainedValues(retained, () => [target, ...args, cursor]);
   try {
     const input = await sandboxString(args[0], budget, context);
     if (methodName === "test") {
@@ -8573,15 +8590,17 @@ async function callRegexMethod(target, methodName, args, budget, context) {
       }
     }
     if (!isSandboxRegex(target)) throw new TypeError("RegExp execution requires a regex receiver.");
-    const match = executeRegex(target, input);
+    cursor = target.lastIndex;
+    const lastIndex = await sandboxNumber(cursor, budget, context);
+    const match = executeRegex(target, input, lastIndex);
     return methodName === "test" ? match !== null : toMatchArray(match, input);
   } finally {
     budget.setRetainedValues(retained, void 0);
   }
 }
-function executeRegex(target, input) {
+function executeRegex(target, input, lastIndex) {
   const pattern = getSandboxRegexPattern(target);
-  const match = matchRegex(pattern, input, target.lastIndex);
+  const match = matchRegex(pattern, input, lastIndex);
   if (pattern.flags.global) {
     target.lastIndex = match === null ? 0 : match.index + match.text.length;
   }
@@ -10505,13 +10524,14 @@ function deepCopyToSandbox(value) {
     seen: /* @__PURE__ */ new WeakMap()
   });
 }
-function cloneSandboxValue(value) {
+function cloneSandboxValue(value, options = {}) {
   const initializeIterators = [];
   const copy = copyToSandbox(
     value,
     {
       seen: /* @__PURE__ */ new WeakMap(),
-      initializeIterators
+      initializeIterators,
+      ...options
     },
     "<root>",
     true
@@ -10610,11 +10630,12 @@ function measureSandboxData(values, options = {}) {
     }
     if (isSandboxPromise(value)) return;
     if (isSandboxRegex(value)) {
-      const { source, flags } = captureRegexData(value);
+      const { source, flags, lastIndex } = captureRegexData(value);
       const compiled = regexCompiledData(getSandboxRegexPattern(value));
       const staged = compiled.ticket === void 0 ? 0 : compiled.ticket.owner.budget.compileTicketUsage(compiled.ticket);
       usage += Math.max(6 + source.length + flags.length + compiled.units, staged - 1);
       if (compiled.ticket !== void 0) options.compileTickets?.add(compiled.ticket);
+      visit(lastIndex, depth + 1);
       return;
     }
     if (isSandboxArguments(value)) {
@@ -10695,7 +10716,16 @@ function copyToSandbox(value, state, path = "<root>", cloneSandboxCollections =
     return value;
   }
   if (isLiveCapability(value)) throw new TypeError("Live capabilities require their owning realm bridge.");
-  if (isSandboxClosure(value) || isSandboxGenerator(value) || isSandboxRegex(value) || isSandboxPromise(value)) {
+  if (isSandboxRegex(value)) {
+    if (!cloneSandboxCollections) return value;
+    const existing = state.seen.get(value);
+    if (existing !== void 0) return existing;
+    const copy = createSandboxRegex(value.source, value.flags, 0, state.compilation);
+    state.seen.set(value, copy);
+    if (!state.resetRegexLastIndex) copy.lastIndex = copyToSandbox(value.lastIndex, state, `${path}.lastIndex`, true, depth + 1);
+    return copy;
+  }
+  if (isSandboxClosure(value) || isSandboxGenerator(value) || isSandboxPromise(value)) {
     return value;
   }
   if (isSandboxCollectionIterator(value)) {
@@ -10904,9 +10934,9 @@ function copyFromSandbox(value, state, path = "<root>", options, depth = 0) {
       if (existing !== void 0) return existing;
       guard.allocate(1 + source.length + flags.length);
       const regex = new RegExp(source, flags);
-      regex.lastIndex = lastIndex;
-      guard.retainScratch();
       state.seen.set(value, regex);
+      Reflect.set(regex, "lastIndex", copyFromSandbox(lastIndex, state, `${path}.lastIndex`, options, depth + 1));
+      guard.retainScratch();
       return regex;
     } finally {
       guard.close();
@@ -11293,7 +11323,7 @@ function encodeReplayData(value, options = {}) {
         kind: "regex",
         source: entry.source,
         flags: entry.flags,
-        lastIndex: entry.lastIndex
+        lastIndex: child(entry.lastIndex, "lastIndex")
       };
     } else if (isSandboxArguments(entry)) {
       nodes[id] = { kind: "arguments", data: serializeArguments(entry, child) };
@@ -11460,11 +11490,12 @@ function decodeReplayData(input, options = {}, parent) {
         return result3;
       }
       if (kind === "regex") {
-        if (typeof node.source !== "string" || typeof node.flags !== "string" || typeof node.lastIndex !== "number" || !Number.isFinite(node.lastIndex)) {
+        if (typeof node.source !== "string" || typeof node.flags !== "string" || !Object.hasOwn(node, "lastIndex")) {
           throw new TypeError("Invalid replay regular expression.");
         }
-        const result3 = createSandboxRegex(node.source, node.flags, node.lastIndex, compilation);
+        const result3 = createSandboxRegex(node.source, node.flags, 0, compilation);
         restored.set(id, result3);
+        result3.lastIndex = child(own(node, "lastIndex"));
         return result3;
       }
       if (kind === "arguments") {
@@ -25029,7 +25060,11 @@ function callStringMethod(value, methodName, args, budget, callClosure = async (
     return budget.allocateString(result + value.slice(spanStart));
   }
   if (methodName === "replace" || methodName === "replaceAll") {
-    return callReplaceLikeMethod(value, methodName, args, budget, callClosure);
+    return callReplaceLikeMethod(value, methodName, args, budget, callClosure, context);
+  }
+  const regex = args[0];
+  if (isSandboxRegex(regex) && regex.lastIndex !== null && typeof regex.lastIndex === "object" && (methodName === "match" && !regex.flags.includes("g") || methodName === "matchAll" && regex.flags.includes("g"))) {
+    return callStringRegexCursor(value, methodName, regex, budget, parent, context);
   }
   if ((methodName === "match" || methodName === "matchAll" || methodName === "search") && !isSandboxRegex(args[0])) {
     return callStringPattern(value, methodName, args[0], budget, parent, context);
@@ -25144,7 +25179,7 @@ function callStringMethod(value, methodName, args, budget, callClosure = async (
     operation.release();
   }
 }
-function callReplaceLikeMethod(value, methodName, args, budget, callClosure) {
+function callReplaceLikeMethod(value, methodName, args, budget, callClosure, context) {
   const search = args[0];
   const replacement = args[1];
   if (!isSandboxRegex(search) && typeof search !== "string" || typeof replacement !== "string" && !isSandboxClosure(replacement)) {
@@ -25162,7 +25197,8 @@ function callReplaceLikeMethod(value, methodName, args, budget, callClosure) {
       replacement,
       methodName === "replaceAll",
       budget,
-      callClosure
+      callClosure,
+      context
     );
   }
   if (typeof replacement === "string") {
@@ -25179,20 +25215,28 @@ function callReplaceLikeMethod(value, methodName, args, budget, callClosure) {
     callClosure
   );
 }
-async function replaceRegex(value, regex, replacement, replaceAll, budget, callClosure) {
+async function replaceRegex(value, regex, replacement, replaceAll, budget, callClosure, context) {
   if (regex.flags.includes("g")) regex.lastIndex = 0;
-  const matches = collectRegexMatches(regex, value, replaceAll || regex.flags.includes("g"));
-  let result = "";
-  let copiedThrough = 0;
-  for (const match of matches) {
-    result += value.slice(copiedThrough, match.index);
-    result += typeof replacement === "string" ? expandReplacement(replacement, match.text, match.captures, value, match.index) : String(
-      await callClosure(replacement, [match.text, ...match.captures, match.index, value])
-    );
-    copiedThrough = match.index + match.text.length;
+  const cursor = regex.lastIndex;
+  const retained = {};
+  budget.setRetainedValues(retained, () => [regex, cursor, replacement]);
+  try {
+    const lastIndex = await sandboxNumber(cursor, budget, context);
+    const matches = collectRegexMatches(regex, value, replaceAll || regex.flags.includes("g"), void 0, lastIndex);
+    let result = "";
+    let copiedThrough = 0;
+    for (const match of matches) {
+      result += value.slice(copiedThrough, match.index);
+      result += typeof replacement === "string" ? expandReplacement(replacement, match.text, match.captures, value, match.index) : String(
+        await callClosure(replacement, [match.text, ...match.captures, match.index, value])
+      );
+      copiedThrough = match.index + match.text.length;
+    }
+    result += value.slice(copiedThrough);
+    return budget.allocateString(result);
+  } finally {
+    budget.setRetainedValues(retained, void 0);
   }
-  result += value.slice(copiedThrough);
-  return budget.allocateString(result);
 }
 function expandReplacement(replacement, match, captures, input, matchIndex) {
   let result = "";
@@ -25319,35 +25363,51 @@ async function callStringPattern(value, methodName, pattern, budget, parent, con
     operation.release();
   }
 }
-function callMatchLikeMethod(value, methodName, args, compilation) {
+async function callStringRegexCursor(value, methodName, regex, budget, parent, context) {
+  const operation = budget.acquireCompileOwner(false, parent?.owner);
+  const compilation = new CompileScope(operation.owner);
+  const cursor = regex.lastIndex;
+  const retained = {};
+  budget.setRetainedValues(retained, () => [regex, cursor]);
+  try {
+    const lastIndex = await sandboxNumber(cursor, budget, context);
+    return callMatchLikeMethod(value, methodName, [regex], compilation, lastIndex);
+  } finally {
+    budget.setRetainedValues(retained, void 0);
+    compilation.dispose();
+    operation.release();
+  }
+}
+function callMatchLikeMethod(value, methodName, args, compilation, lastIndex) {
   const regex = args[0];
   if (!isSandboxRegex(regex))
     throw new TypeError(`String#${methodName} requires a regex argument.`);
   if (methodName === "search") {
-    const lastIndex = regex.lastIndex;
-    if (!Object.is(lastIndex, 0)) regex.lastIndex = 0;
-    const match = executeRegex(regex, value);
-    if (!Object.is(regex.lastIndex, lastIndex)) regex.lastIndex = lastIndex;
+    const lastIndex2 = regex.lastIndex;
+    if (!Object.is(lastIndex2, 0)) regex.lastIndex = 0;
+    const match = executeRegex(regex, value, 0);
+    if (!Object.is(regex.lastIndex, lastIndex2)) regex.lastIndex = lastIndex2;
     return match?.index ?? -1;
   }
   if (methodName === "matchAll" && !regex.flags.includes("g"))
     throw new TypeError("String#matchAll requires a global regex.");
   if (methodName === "match" && !regex.flags.includes("g"))
-    return toMatchArray(executeRegex(regex, value), value);
+    return toMatchArray(executeRegex(regex, value, lastIndex ?? Number(regex.lastIndex)), value);
   if (methodName === "match") regex.lastIndex = 0;
-  const matcher = methodName === "matchAll" ? createSandboxRegex(regex.source, regex.flags, regex.lastIndex, compilation) : regex;
-  const matches = collectRegexMatches(matcher, value, true, compilation.owner?.budget);
+  const matcher = methodName === "matchAll" ? createSandboxRegex(regex.source, regex.flags, normalizeLastIndex(lastIndex ?? Number(regex.lastIndex)), compilation) : regex;
+  const matches = collectRegexMatches(matcher, value, true, compilation.owner?.budget, Number(matcher.lastIndex));
   if (methodName === "match" && matches.length === 0) return null;
   return methodName === "match" ? matches.map((match) => match.text) : matches.map((match) => toMatchArray(match, value));
 }
-function collectRegexMatches(regex, value, all, budget) {
+function collectRegexMatches(regex, value, all, budget, lastIndex = 0) {
   const matches = [];
   do {
-    const match = executeRegex(regex, value);
+    const match = executeRegex(regex, value, lastIndex);
     if (match === null) break;
     budget?.allocateArrayLength(matches.length + 1);
     matches.push(match);
-    if (all && match.text.length === 0) regex.lastIndex += 1;
+    lastIndex = match.index + match.text.length;
+    if (all && match.text.length === 0) regex.lastIndex = ++lastIndex;
   } while (all);
   return matches;
 }
@@ -30678,7 +30738,7 @@ function createMiscGlobals(options) {
   return {
     structuredClone: createSandboxClosure({
       sandbox: true,
-      call: ([value]) => structuredCloneSandboxValue(value, options.budget),
+      call: ([value], context) => structuredCloneSandboxValue(value, options.budget, context?.compilation),
       name: "structuredClone"
     }),
     parseInt: createSandboxClosure({
@@ -30703,11 +30763,20 @@ function createMiscGlobals(options) {
     })
   };
 }
-function structuredCloneSandboxValue(value, budget) {
-  assertSandboxGraphDepth(value);
-  const clone = cloneSandboxValue(value);
-  assertStructuredCloneable(clone, /* @__PURE__ */ new WeakSet());
-  return allocateProducedSandboxValue(clone, budget);
+function structuredCloneSandboxValue(value, budget, parent) {
+  const operation = budget.acquireCompileOwner(false, parent?.owner);
+  const compilation = parent?.owner === operation.owner ? parent : new CompileScope(operation.owner);
+  try {
+    const clone = cloneSandboxValue(value, { compilation, resetRegexLastIndex: true });
+    assertSandboxGraphDepth(clone);
+    assertStructuredCloneable(clone, /* @__PURE__ */ new WeakSet());
+    allocateProducedSandboxValue(clone, budget);
+    if (compilation !== parent) reconcileCompiledValues(budget, [clone], compilation);
+    return clone;
+  } finally {
+    if (compilation !== parent) compilation.dispose();
+    operation.release();
+  }
 }
 function assertStructuredCloneable(value, seen) {
   if (isSandboxClosure(value) || isSandboxPromise(value) || isSandboxCollectionIterator(value)) {
@@ -33349,4 +33418,4 @@ export {
   FileSnapshotBackend,
   run
 };
-//# sourceMappingURL=chunk-XI33TU4X.js.map
+//# sourceMappingURL=chunk-OZTC4BT3.js.map