@poe-platform/safe-js 0.1.165 → 0.1.167

package/dist/safe-js/chunks/{chunk-4JKST34C.js → chunk-HH5HD7AM.js}

@@ -27,7 +27,7 @@ import {
   validateMigrationSemantics,
   validateSnapshotData,
   validateSnapshotMigration
-} from "./chunk-IHPQO2HC.js";
+} from "./chunk-QQ2J2CDJ.js";
 
 // packages/safe-js/src/migrate.ts
 import { createHash } from "node:crypto";
@@ -8249,4 +8249,4 @@ export {
   parseMcpConfig,
   makeMcpModule
 };
-//# sourceMappingURL=chunk-4JKST34C.js.map
+//# sourceMappingURL=chunk-HH5HD7AM.js.map

package/dist/safe-js/chunks/{chunk-IHPQO2HC.js → chunk-QQ2J2CDJ.js}

@@ -7536,9 +7536,9 @@ function setSandboxPrototype(value, prototype, budget) {
   if (budget !== void 0 && intrinsicPrototypes.get(budget) === value && prototype !== null) {
     throw new TypeError("Object.prototype has an immutable null prototype.");
   }
-  if (!isPrototypeRecord(value) || prototype !== null && !isPrototypeRecord(prototype)) {
+  if (!Array.isArray(value) && !isPrototypeRecord(value) || prototype !== null && !Array.isArray(prototype) && !isPrototypeRecord(prototype)) {
     throw new TypeError(
-      "Prototype links require ordinary sandbox objects or guest functions."
+      "Prototype links require ordinary sandbox objects, arrays, or guest functions."
     );
   }
   if (prototypes.has(value) && getSandboxPrototype(value, budget) === prototype) return;
@@ -9371,6 +9371,7 @@ function getSandboxIterator(value, budget, context) {
   if (isSandboxSet(value)) {
     return collectionIterator(value.values);
   }
+  if (Array.isArray(value) && hasExplicitSandboxPrototype(value)) return void 0;
   if (Array.isArray(value) && context?.getProperty !== void 0) {
     let index = 0;
     return {
@@ -15713,6 +15714,8 @@ async function evaluateMemberCallExpression(node, context) {
       return evaluateResolvedCallExpression(node, await getPropertyValue(member.object, member.property, context, member.superReceiver.value), context, member.superReceiver.value);
     if (typeof member.property === "symbol")
       return evaluateResolvedCallExpression(node, await getPropertyValue(member.object, member.property, context), context, member.object);
+    if (Array.isArray(member.object) && hasExplicitSandboxPrototype(member.object))
+      return evaluateResolvedCallExpression(node, await getPropertyValue(member.object, member.property, context), context, member.object);
     if ((typeof member.object === "string" || typeof member.object === "number" || typeof member.object === "boolean" || typeof member.object === "symbol") && getBoxedPrototype(member.object, context.budget) !== void 0) {
       if (isDefaultBoxedMethod(member.object, member.property, context.budget)) {
         if (typeof member.object === "string" && isStringMethodName(member.property))
@@ -16024,42 +16027,47 @@ function applyBinaryOperator(node, left, right, context) {
     case ">>>":
       return toNumber(left) >>> toNumber(right);
     case "instanceof":
-      while (isSandboxClosure(right) && right.boundTarget !== void 0) right = right.boundTarget;
-      if (isSandboxPromiseConstructor(right)) return isSandboxPromise(left);
-      if (isSandboxMapConstructor(right) && isSandboxMap(left)) {
-        return true;
-      }
-      if (isFloat32ArrayConstructor(right)) return isFloat32Array(left);
-      if (isDateConstructor(right))
-        return isSandboxDate(left) && getDatePrototype(left, context.budget, context.compilation?.owner) !== null;
-      if (isSandboxSetConstructor(right) && isSandboxSet(left)) {
-        return true;
-      }
-      if (isSandboxErrorConstructorInstance2(left, right)) {
-        return true;
-      }
-      if (isGuestClosure(right)) {
-        if (typeof left !== "object" || left === null) return false;
-        const check = (prototype2) => {
-          if (typeof prototype2 !== "object" || prototype2 === null) {
-            throw new TypeError("Function has a non-object prototype in instanceof check.");
-          }
-          let depth = 0;
-          for (let current = getSandboxPrototype(left, context.budget); current !== null; current = getSandboxPrototype(current, context.budget)) {
-            context.budget.visitNode();
-            assertSandboxDataDepth(depth++);
-            if (current === prototype2) return true;
-          }
-          return false;
-        };
-        const prototype = getPropertyValue(right, "prototype", context);
-        return prototype instanceof Promise ? prototype.then(check) : check(prototype);
-      }
-      return false;
+      return evaluateInstanceof(left, right, context);
     case "in":
       return hasSandboxProperty(right, left, context);
   }
 }
+async function evaluateInstanceof(left, right, context) {
+  while (true) {
+    if (right === null || typeof right !== "object" && typeof right !== "function")
+      throw new TypeError("Right-hand side of 'instanceof' must be an object.");
+    const method = await getPropertyValue(right, Symbol.hasInstance, context);
+    if (method !== void 0 && method !== null) {
+      if (!isSandboxClosure(method)) throw new TypeError("Symbol.hasInstance must be callable.");
+      return Boolean(await invokeSandboxClosure(method, [left], context, context.callStack, void 0, right));
+    }
+    if (!isSandboxClosure(right))
+      throw new TypeError("Right-hand side of 'instanceof' is not a function.");
+    if (right.boundTarget === void 0) break;
+    context.budget.visitNode();
+    right = right.boundTarget;
+  }
+  if (isSandboxPromiseConstructor(right)) return isSandboxPromise(left);
+  if (isSandboxMapConstructor(right) && isSandboxMap(left)) return true;
+  if (isFloat32ArrayConstructor(right)) return isFloat32Array(left);
+  if (isDateConstructor(right))
+    return isSandboxDate(left) && getDatePrototype(left, context.budget, context.compilation?.owner) !== null;
+  if (isSandboxSetConstructor(right) && isSandboxSet(left)) return true;
+  if (isSandboxErrorConstructorInstance2(left, right)) return true;
+  if (isGuestClosure(right)) {
+    if (typeof left !== "object" || left === null) return false;
+    const prototype = await getPropertyValue(right, "prototype", context);
+    if (typeof prototype !== "object" || prototype === null)
+      throw new TypeError("Function has a non-object prototype in instanceof check.");
+    let depth = 0;
+    for (let current = getSandboxPrototype(left, context.budget); current !== null; current = getSandboxPrototype(current, context.budget)) {
+      context.budget.visitNode();
+      assertSandboxDataDepth(depth++);
+      if (current === prototype) return true;
+    }
+  }
+  return false;
+}
 function createCoercionContext(context) {
   return {
     stack: context.callStack,
@@ -16076,7 +16084,7 @@ function hasSandboxProperty(value, key, context) {
   while (typeof current === "object" && current !== null) {
     if (isGuestHostObject(current)) return typeof key === "symbol" ? false : hasHostObjectMember(current, String(key));
     if (hasOwnSandboxProperty(current, key, false)) return true;
-    if (!(isGuestClosure(current) && hasExplicitSandboxPrototype(current)) && (Array.isArray(current) || !isPlainSandboxObject(current) || isSandboxDate(current) || isFloat32Array(current) || isSandboxGenerator(current) || isSandboxCollectionIterator(current))) {
+    if (!((isGuestClosure(current) || Array.isArray(current)) && hasExplicitSandboxPrototype(current)) && (Array.isArray(current) || !isPlainSandboxObject(current) || isSandboxDate(current) || isFloat32Array(current) || isSandboxGenerator(current) || isSandboxCollectionIterator(current))) {
       return getPropertyValue(current, key, context) !== void 0;
     }
     current = getSandboxPrototype(current, context.budget);
@@ -16289,6 +16297,7 @@ function getMemberValue(target, property, context) {
   return void 0;
 }
 function getArrayMemberValue(target, property, context) {
+  if (hasExplicitSandboxPrototype(target)) return void 0;
   if (property === "raw" && taggedTemplateRawArrays.has(target)) {
     return taggedTemplateRawArrays.get(target);
   }
@@ -35928,4 +35937,4 @@ export {
   FileSnapshotBackend,
   run
 };
-//# sourceMappingURL=chunk-IHPQO2HC.js.map
+//# sourceMappingURL=chunk-QQ2J2CDJ.js.map