@poe-platform/safe-js 0.1.128 → 0.1.130

package/dist/safe-js/chunks/{chunk-EAKCL5OK.js → chunk-SGKEOIQL.js}

@@ -27,7 +27,7 @@ import {
   validateMigrationSemantics,
   validateSnapshotData,
   validateSnapshotMigration
-} from "./chunk-LZEDWYSI.js";
+} from "./chunk-ZTGKRKQH.js";
 
 // packages/safe-js/src/migrate.ts
 import { createHash } from "node:crypto";
@@ -8245,4 +8245,4 @@ export {
   parseMcpConfig,
   makeMcpModule
 };
-//# sourceMappingURL=chunk-EAKCL5OK.js.map
+//# sourceMappingURL=chunk-SGKEOIQL.js.map

package/dist/safe-js/chunks/{chunk-LZEDWYSI.js → chunk-ZTGKRKQH.js}

@@ -25092,6 +25092,9 @@ function isStringMethodName(property) {
 function validateStringMethodArguments(_methodName, _args) {
 }
 function callStringMethod(value, methodName, args, budget, callClosure = async (closure, closureArgs) => await closure.call(closureArgs), parent, context) {
+  if (methodName === "concat" && args.some((argument) => argument !== null && typeof argument === "object")) {
+    return callConcat(value, args, budget, context);
+  }
   if (methodName === "isWellFormed") {
     for (let index = 0; index < value.length; index++) {
       const codeUnit = value.charCodeAt(index);
@@ -25247,6 +25250,19 @@ function callStringMethod(value, methodName, args, budget, callClosure = async (
     operation.release();
   }
 }
+async function callConcat(value, args, budget, context) {
+  let result = budget.allocateString(value);
+  const release = retainValues(budget, () => [result]);
+  try {
+    for (const argument of args) {
+      const text = sandboxString(argument, budget, context);
+      result = budget.allocateString(result + (typeof text === "string" ? text : await text));
+    }
+    return result;
+  } finally {
+    release();
+  }
+}
 function callReplaceLikeMethod(value, methodName, args, budget, callClosure, context) {
   const search = args[0];
   const replacement = args[1];
@@ -26707,14 +26723,18 @@ function isObjectPrototypeSetterProperty(property, key) {
 }
 async function evaluateTemplateLiteral(node, context) {
   let value = context.budget.allocateString(node.quasis[0]?.value.cooked ?? "");
-  const release = retainValues(context.budget, () => [value]);
+  let input = void 0;
+  const release = retainValues(context.budget, () => [value, input]);
   try {
     for (let index = 0; index < node.expressions.length; index += 1) {
       const expression = await evaluateNode(node.expressions[index], context);
       if (expression.kind !== "normal") {
         return expression;
       }
-      const expressionText = context.budget.allocateString(String(expression.value));
+      input = expression.value;
+      const text = sandboxString(input, context.budget, createCoercionContext(context));
+      const expressionText = typeof text === "string" ? text : await text;
+      input = void 0;
       value = context.budget.allocateString(value + expressionText);
       const quasiText = context.budget.allocateString(node.quasis[index + 1]?.value.cooked ?? "");
       value = context.budget.allocateString(value + quasiText);
@@ -33480,4 +33500,4 @@ export {
   FileSnapshotBackend,
   run
 };
-//# sourceMappingURL=chunk-LZEDWYSI.js.map
+//# sourceMappingURL=chunk-ZTGKRKQH.js.map