@poe-platform/safe-js 0.1.134 → 0.1.136

package/dist/safe-js/chunks/{chunk-2I6B4TFA.js → chunk-T55F5CLZ.js}

@@ -27,7 +27,7 @@ import {
   validateMigrationSemantics,
   validateSnapshotData,
   validateSnapshotMigration
-} from "./chunk-L74RZHUW.js";
+} from "./chunk-XO7B4P27.js";
 
 // packages/safe-js/src/migrate.ts
 import { createHash } from "node:crypto";
@@ -8249,4 +8249,4 @@ export {
   parseMcpConfig,
   makeMcpModule
 };
-//# sourceMappingURL=chunk-2I6B4TFA.js.map
+//# sourceMappingURL=chunk-T55F5CLZ.js.map

package/dist/safe-js/chunks/{chunk-L74RZHUW.js → chunk-XO7B4P27.js}

@@ -7163,16 +7163,24 @@ function registerIntrinsicPrototype(budget, prototype, constructor) {
   let roots = intrinsicPrototypeRoots.get(budget);
   if (roots === void 0) intrinsicPrototypeRoots.set(budget, roots = /* @__PURE__ */ new Set());
   roots.add(prototype);
-  const records = [prototype, materializeFunctionProperties(constructor)].map((value) => ({
-    value,
-    descriptors: new Map(Object.entries(Object.getOwnPropertyDescriptors(value)))
+  const records = [prototype, constructor].map((target) => ({
+    target,
+    value: isGuestClosure(target) ? materializeFunctionProperties(target) : target,
+    prototype: getSandboxPrototype(target),
+    explicit: hasExplicitSandboxPrototype(target)
+  })).map((record2) => ({
+    ...record2,
+    descriptors: new Map(Object.entries(Object.getOwnPropertyDescriptors(record2.value)))
   }));
   const unchanged = (before, after) => before !== void 0 && after !== void 0 && Object.is(before.value, after.value) && before.writable === after.writable && before.configurable === after.configurable && before.enumerable === after.enumerable;
-  intrinsicConstructors.set(constructor, () => records.every(({ value, descriptors }) => {
+  intrinsicConstructors.set(constructor, () => records.every(({ target, value, descriptors, prototype: parent, explicit }) => {
     const current = Object.getOwnPropertyDescriptors(value);
-    return Object.keys(current).length === descriptors.size && Object.keys(current).every((key) => unchanged(descriptors.get(key), current[key]));
+    return getSandboxPrototype(target) === parent && hasExplicitSandboxPrototype(target) === explicit && Object.keys(current).length === descriptors.size && Object.keys(current).every((key) => unchanged(descriptors.get(key), current[key]));
   }));
-  budget.setRetainedValues(prototype, () => records.flatMap(({ value, descriptors }) => Object.entries(Object.getOwnPropertyDescriptors(value)).flatMap(([key, descriptor]) => unchanged(descriptors.get(key), descriptor) ? [] : [key, descriptor.value])));
+  budget.setRetainedValues(prototype, () => records.flatMap(({ target, value, descriptors, prototype: parent }) => [
+    ...getSandboxPrototype(target) === parent ? [] : [getSandboxPrototype(target)],
+    ...Object.entries(Object.getOwnPropertyDescriptors(value)).flatMap(([key, descriptor]) => unchanged(descriptors.get(key), descriptor) ? [] : [key, descriptor.value])
+  ]));
 }
 function releaseObjectPrototype(budget) {
   for (const prototype of intrinsicPrototypeRoots.get(budget) ?? []) budget.setRetainedValues(prototype, void 0);
@@ -7186,7 +7194,7 @@ function getSandboxPrototype(value, budget) {
     const prototype = getBoxedPrototype(boxedValue(value), budget);
     if (prototype !== void 0 && prototype !== value) return prototype;
   }
-  return budget !== void 0 && isPrototypeRecord(value) ? intrinsicPrototypes.get(budget) ?? null : null;
+  return budget !== void 0 && !isSandboxClosure(value) && isPrototypeRecord(value) ? intrinsicPrototypes.get(budget) ?? null : null;
 }
 function hasExplicitSandboxPrototype(value) {
   return prototypes.has(value);
@@ -7196,14 +7204,16 @@ function getSandboxDataProperty(value, key, budget) {
   let depth = 0;
   while (typeof current === "object" && current !== null) {
     if (isGuestHostObject(current)) return getHostObjectMember(current, String(key));
-    if (isGuestClosure(current)) return getGuestFunctionProperty(current, String(key));
-    if (isSandboxClosure(current)) {
+    if (isGuestClosure(current)) {
+      const entry = getGuestFunctionProperty(current, String(key));
+      if (entry !== void 0 || Object.hasOwn(current.properties ?? {}, String(key))) return entry;
+    } else if (isSandboxClosure(current)) {
       const properties = current.properties;
       return properties !== void 0 && Object.hasOwn(properties, String(key)) ? properties[String(key)] : void 0;
     }
     if (isSandboxMap(current) || isSandboxSet(current) || isSandboxPromise(current) || isSandboxRegex(current) || isSandboxGenerator(current))
       return void 0;
-    if (Object.hasOwn(current, String(key))) return current[String(key)];
+    if (!isSandboxClosure(current) && Object.hasOwn(current, String(key))) return current[String(key)];
     current = getSandboxPrototype(current, budget);
     if (current !== null) {
       budget?.visitNode();
@@ -7218,7 +7228,7 @@ function setSandboxPrototype(value, prototype, budget) {
   }
   if (!isPrototypeRecord(value) || prototype !== null && !isPrototypeRecord(prototype)) {
     throw new TypeError(
-      "Prototype links require ordinary sandbox objects; callable and exotic prototype chains are not supported."
+      "Prototype links require ordinary sandbox objects or guest functions."
     );
   }
   if (prototypes.has(value) && getSandboxPrototype(value, budget) === prototype) return;
@@ -7234,6 +7244,7 @@ function setSandboxPrototype(value, prototype, budget) {
   prototypes.set(value, prototype);
 }
 function isPrototypeRecord(value) {
+  if (isGuestClosure(value)) return true;
   if (isGuestHostObject(value)) return false;
   if (isSandboxClosure(value) || isSandboxGenerator(value) || isSandboxMap(value) || isSandboxPromise(value) || isSandboxRegex(value) || isSandboxSet(value))
     return false;
@@ -25030,18 +25041,27 @@ function toIntegerOrInfinity(value) {
 // packages/safe-js/src/interp/methods/function.ts
 var functionMethodNames = /* @__PURE__ */ new Set(["apply", "bind", "call", "toString"]);
 function getFunctionMember(target, property, options) {
-  if (isGuestClosure(target)) {
-    const value = getGuestFunctionProperty(target, String(property));
-    if (value !== void 0 || Object.hasOwn(target.properties ?? {}, String(property))) return value;
-    if (!isFunctionMethodName(property)) return void 0;
-  }
-  const properties = target.properties;
-  if (properties !== void 0 && Object.hasOwn(properties, String(property))) {
-    return properties[String(property)];
-  }
-  if (property === "length") {
-    return target.length;
+  let current = target;
+  let depth = 0;
+  while (current !== null) {
+    if (isGuestClosure(current)) {
+      const value = getGuestFunctionProperty(current, String(property));
+      if (value !== void 0 || Object.hasOwn(current.properties ?? {}, String(property))) return value;
+    } else if (isSandboxClosure(current)) {
+      if (current.properties !== void 0 && Object.hasOwn(current.properties, String(property)))
+        return current.properties[String(property)];
+      if (property === "length") return current.length;
+    } else if (Object.hasOwn(current, String(property))) {
+      return current[String(property)];
+    }
+    if (isSandboxClosure(current) && !hasExplicitSandboxPrototype(current)) break;
+    current = getSandboxPrototype(current, options.budget);
+    if (current !== null) {
+      options.budget?.visitNode();
+      assertSandboxDataDepth(++depth);
+    }
   }
+  if (current === null) return void 0;
   if (property === "toString" && runResources.getStore()?.functionSourceText === false) return void 0;
   if (!isFunctionMethodName(property)) {
     return void 0;
@@ -25067,7 +25087,7 @@ function callFunctionMethod(target, methodName, args, options, stack) {
   const thisValue = args[0];
   if (methodName === "bind") {
     const boundArgs = args.slice(1);
-    return createSandboxClosure({
+    const bound = createSandboxClosure({
       guest: true,
       sandbox: true,
       name: `bound ${target.name ?? ""}`,
@@ -25085,6 +25105,9 @@ function callFunctionMethod(target, methodName, args, options, stack) {
         )
       }
     });
+    if (hasExplicitSandboxPrototype(target))
+      setSandboxPrototype(bound, getSandboxPrototype(target, options.budget), options.budget);
+    return bound;
   }
   if (methodName === "call") {
     return options.callClosure(target, args.slice(1), stack, thisValue);
@@ -28935,7 +28958,7 @@ function hasSandboxProperty(value, key, context) {
   while (typeof current === "object" && current !== null) {
     if (isGuestHostObject(current)) return hasHostObjectMember(current, key);
     if (hasOwnSandboxProperty(current, key, false)) return true;
-    if (Array.isArray(current) || !isPlainSandboxObject(current) || isSandboxDate(current) || isFloat32Array(current) || isSandboxGenerator(current) || isSandboxCollectionIterator(current)) {
+    if (!(isGuestClosure(current) && hasExplicitSandboxPrototype(current)) && (Array.isArray(current) || !isPlainSandboxObject(current) || isSandboxDate(current) || isFloat32Array(current) || isSandboxGenerator(current) || isSandboxCollectionIterator(current))) {
       return getPropertyValue(current, key, context) !== void 0;
     }
     current = getSandboxPrototype(current, context.budget);
@@ -30905,7 +30928,13 @@ function createConsoleJsonGlobals(options) {
     JSON: {
       parse: createSandboxClosure({
         sandbox: true,
-        call: async ([text]) => parseJson(text, options.budget),
+        call: async ([text], context) => {
+          const converted = sandboxString(text, options.budget, context);
+          return copyJsonToSandbox(
+            JSON.parse(converted instanceof Promise ? await converted : converted),
+            options.budget
+          );
+        },
         name: "parse"
       }),
       stringify: createSandboxClosure({
@@ -30971,10 +31000,6 @@ function createConsoleJsonGlobals(options) {
     )
   };
 }
-function parseJson(input, budget) {
-  const text = budget.allocateString(toJsonParseText(input));
-  return copyJsonToSandbox(JSON.parse(text), budget);
-}
 async function stringifyJson(value, replacer, indent, budget, context) {
   if (replacer !== void 0 && replacer !== null && !isSandboxClosure(replacer)) {
     throw new TypeError(
@@ -31000,15 +31025,6 @@ async function stringifyJson(value, replacer, indent, budget, context) {
   }
   return budget.allocateString(output);
 }
-function toJsonParseText(input) {
-  if (Array.isArray(input)) {
-    return input.map((entry) => entry === null || entry === void 0 ? "" : toJsonParseText(entry)).join(",");
-  }
-  if (typeof input === "object" && input !== null) {
-    return "[object Object]";
-  }
-  return String(input);
-}
 async function stringifyProperty(key, holder, state, indent = "") {
   let value = getOwnDataValue(holder, key);
   if (isSandboxDate(value)) {
@@ -33999,4 +34015,4 @@ export {
   FileSnapshotBackend,
   run
 };
-//# sourceMappingURL=chunk-L74RZHUW.js.map
+//# sourceMappingURL=chunk-XO7B4P27.js.map