@poe-platform/safe-js 0.1.196 → 0.1.197

package/dist/safe-js/chunks/{chunk-KMQUDIYF.js → chunk-7KLRGTR4.js}

@@ -7694,6 +7694,9 @@ function getSandboxPrototype(value, budget) {
 function hasExplicitSandboxPrototype(value) {
   return prototypes.has(value);
 }
+function hasNullObjectPrototype(value) {
+  return prototypes.get(value) === null && !Array.isArray(value) && !isSandboxClosure(value) && !isSandboxRegex(value);
+}
 function getSandboxPropertyDescriptor(value, key, budget) {
   const hostProperties = isSandboxClosure(value) ? value.properties : void 0;
   if (isSandboxClosure(value) && !isGuestClosure(value))
@@ -7775,7 +7778,7 @@ function hasGuestObjectState(value) {
   const intrinsicUnchanged = intrinsicConstructors.get(value);
   if (intrinsicUnchanged !== void 0) return !intrinsicUnchanged();
   if (isLiveCapability(value)) return true;
-  if (functionProperties.has(value) || prototypes.has(value)) return true;
+  if (functionProperties.has(value) || prototypes.has(value) && !hasNullObjectPrototype(value)) return true;
   if (isSandboxBox(value) || isSandboxDate(value)) return false;
   return descriptorObjects.has(value) && Object.values(Object.getOwnPropertyDescriptors(value)).some(
     (descriptor) => !descriptor.enumerable || !descriptor.configurable || !descriptor.writable
@@ -8096,6 +8099,7 @@ function serializeHeapReference(value, path, state) {
       });
       state.heap[String(id)] = {
         kind: "object",
+        ...hasNullObjectPrototype(value) ? { sandboxNullPrototype: true } : {},
         entries: serializeObjectEntries(value, path, state),
         ...symbolEntries.length === 0 ? {} : { symbolEntries },
         ...errorType === void 0 ? {} : { errorType }
@@ -8129,7 +8133,7 @@ function indexHeapContainers(snapshot) {
   const heapIds = /* @__PURE__ */ new Map();
   let nextId = 1;
   for (const [value, stat2] of stats.entries()) {
-    if (stat2.count > 1 || stat2.cyclic || ownSerializableSymbolKeys(value).length > 0 || isSandboxBox(value) || isSandboxRegExpIterator(value) || isSandboxRegex(value) && hasCustomRegexProperties(value) || isSandboxDate(value) || isFloat32Array(value) || Array.isArray(value) && requiresArrayEntries(value) || isSandboxArguments(value) || sandboxErrorTypes.has(value)) {
+    if (stat2.count > 1 || stat2.cyclic || hasNullObjectPrototype(value) || ownSerializableSymbolKeys(value).length > 0 || isSandboxBox(value) || isSandboxRegExpIterator(value) || isSandboxRegex(value) && hasCustomRegexProperties(value) || isSandboxDate(value) || isFloat32Array(value) || Array.isArray(value) && requiresArrayEntries(value) || isSandboxArguments(value) || sandboxErrorTypes.has(value)) {
       heapIds.set(value, nextId);
       nextId += 1;
     }
@@ -8315,6 +8319,8 @@ function validateDumpHeap(root, state) {
       continue;
     }
     if (entry.kind === "object") {
+      if (Object.hasOwn(entry, "sandboxNullPrototype") && entry.sandboxNullPrototype !== true)
+        fail("invalidValue", `${path}.sandboxNullPrototype`, "invalid object prototype");
       requireRecord(entry.entries, `${path}.entries`);
       continue;
     }
@@ -8435,7 +8441,11 @@ function validateTaggedValue(record2, path, state) {
       return;
     case "array":
     case "arguments":
+      return;
     case "object":
+      if (Object.hasOwn(record2, "sandboxNullPrototype") && record2.sandboxNullPrototype !== true)
+        fail("invalidValue", `${path}.sandboxNullPrototype`, "invalid object prototype");
+      return;
     case "map":
     case "set":
     case "collection-iterator":
@@ -17970,6 +17980,7 @@ function encodeReplayData(value, options = {}) {
       nodes[id] = {
         kind: Array.isArray(entry) ? "array" : "object",
         nullPrototype: prototype === null,
+        ...hasNullObjectPrototype(entry) ? { sandboxNullPrototype: true } : {},
         ...errorType === void 0 ? {} : { errorType },
         extensible: Object.isExtensible(entry),
         properties,
@@ -18192,6 +18203,10 @@ function decodeReplayData(input, options = {}, parent) {
         throw new TypeError("Invalid replay object metadata.");
       }
       const result2 = kind === "array" ? [] : Object.create(node.nullPrototype ? null : Object.prototype);
+      if (Object.hasOwn(node, "sandboxNullPrototype")) {
+        if (kind !== "object" || node.sandboxNullPrototype !== true) throw new TypeError("Invalid replay object prototype.");
+        setSandboxPrototype(result2, null);
+      }
       if (Object.hasOwn(node, "errorType")) {
         sandboxErrorTypes.set(result2, node.errorType);
       }
@@ -21827,6 +21842,7 @@ function copyToSandbox(value, state, path = "<root>", cloneSandboxCollections =
     const copy = createPlainObject(
       !cloneSandboxCollections || Object.getPrototypeOf(value) === null
     );
+    if (!state.structuredClone && hasNullObjectPrototype(value)) setSandboxPrototype(copy, null);
     state.seen.set(value, copy);
     const errorType = sandboxErrorTypes.get(value);
     if (errorType !== void 0) sandboxErrorTypes.set(copy, errorType);
@@ -22038,7 +22054,7 @@ function copyFromSandbox(value, state, path = "<root>", options, depth = 0) {
     if (existing !== void 0) {
       return existing;
     }
-    const copy = createPlainObject(Object.getPrototypeOf(value) === null);
+    const copy = createPlainObject(hasNullObjectPrototype(value) || Object.getPrototypeOf(value) === null);
     state.seen.set(value, copy);
     for (const entry of getEnumerableObjectEntries(value, path)) {
       defineOwnDataProperty(
@@ -37166,4 +37182,4 @@ export {
   FileSnapshotBackend,
   run
 };
-//# sourceMappingURL=chunk-KMQUDIYF.js.map
+//# sourceMappingURL=chunk-7KLRGTR4.js.map