@poe-platform/safe-js 0.1.128 → 0.1.129

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
@@ -27,7 +27,7 @@ import {
27
27
  validateMigrationSemantics,
28
28
  validateSnapshotData,
29
29
  validateSnapshotMigration
30
- } from "./chunk-LZEDWYSI.js";
30
+ } from "./chunk-OM5W7AYB.js";
31
31
 
32
32
  // packages/safe-js/src/migrate.ts
33
33
  import { createHash } from "node:crypto";
@@ -8245,4 +8245,4 @@ export {
8245
8245
  parseMcpConfig,
8246
8246
  makeMcpModule
8247
8247
  };
8248
- //# sourceMappingURL=chunk-EAKCL5OK.js.map
8248
+ //# sourceMappingURL=chunk-EH4VQYKL.js.map
@@ -26707,14 +26707,18 @@ function isObjectPrototypeSetterProperty(property, key) {
26707
26707
  }
26708
26708
  async function evaluateTemplateLiteral(node, context) {
26709
26709
  let value = context.budget.allocateString(node.quasis[0]?.value.cooked ?? "");
26710
- const release = retainValues(context.budget, () => [value]);
26710
+ let input = void 0;
26711
+ const release = retainValues(context.budget, () => [value, input]);
26711
26712
  try {
26712
26713
  for (let index = 0; index < node.expressions.length; index += 1) {
26713
26714
  const expression = await evaluateNode(node.expressions[index], context);
26714
26715
  if (expression.kind !== "normal") {
26715
26716
  return expression;
26716
26717
  }
26717
- const expressionText = context.budget.allocateString(String(expression.value));
26718
+ input = expression.value;
26719
+ const text = sandboxString(input, context.budget, createCoercionContext(context));
26720
+ const expressionText = typeof text === "string" ? text : await text;
26721
+ input = void 0;
26718
26722
  value = context.budget.allocateString(value + expressionText);
26719
26723
  const quasiText = context.budget.allocateString(node.quasis[index + 1]?.value.cooked ?? "");
26720
26724
  value = context.budget.allocateString(value + quasiText);
@@ -33480,4 +33484,4 @@ export {
33480
33484
  FileSnapshotBackend,
33481
33485
  run
33482
33486
  };
33483
- //# sourceMappingURL=chunk-LZEDWYSI.js.map
33487
+ //# sourceMappingURL=chunk-OM5W7AYB.js.map