@poe-platform/safe-js 0.1.222 → 0.1.224

package/dist/safe-js/chunks/{chunk-M7KI5UI3.js → chunk-DQY3GFKQ.js}

@@ -138,6 +138,47 @@ function findSourceOffset(source, line, column) {
   return source.length;
 }
 
+// packages/safe-js/src/interp/template-objects.ts
+var realms = /* @__PURE__ */ new WeakMap();
+var templateOrigins = /* @__PURE__ */ new WeakMap();
+var templateRawArrays = /* @__PURE__ */ new WeakMap();
+var templateCookedArrays = /* @__PURE__ */ new WeakMap();
+function templateObject(node, budget) {
+  const cached = realms.get(budget)?.get(node);
+  if (cached !== void 0) return cached;
+  budget.allocateArrayLength(node.quasis.length);
+  const strings = node.quasis.map((quasi) => quasi.value.cooked === void 0 ? void 0 : budget.allocateString(quasi.value.cooked));
+  const raw = node.quasis.map((quasi) => budget.allocateString(quasi.value.raw));
+  Object.freeze(raw);
+  Object.defineProperty(strings, "raw", { value: raw });
+  Object.freeze(strings);
+  registerTemplateObject(node, strings, budget);
+  return strings;
+}
+function registerTemplateObject(node, value, budget) {
+  const raw = Object.getOwnPropertyDescriptor(value, "raw")?.value;
+  if (!Object.isFrozen(value) || !Array.isArray(raw) || !Object.isFrozen(raw) || value.length !== node.quasis.length || raw.length !== node.quasis.length || node.quasis.some((quasi, index) => Object.getOwnPropertyDescriptor(value, String(index))?.value !== quasi.value.cooked || Object.getOwnPropertyDescriptor(raw, String(index))?.value !== quasi.value.raw))
+    throw new TypeError("Invalid template object contents.");
+  let realm = realms.get(budget);
+  const existing = realm?.get(node);
+  if (existing !== void 0 && existing !== value) throw new TypeError("Conflicting template object identity.");
+  if (realm === void 0) {
+    realm = /* @__PURE__ */ new Map();
+    realms.set(budget, realm);
+    const retained = realm;
+    budget.setRetainedValues(realm, () => retained.values());
+  }
+  realm.set(node, value);
+  templateOrigins.set(value, node);
+  templateRawArrays.set(value, raw);
+  templateCookedArrays.set(raw, value);
+}
+function releaseTemplateObjects(budget) {
+  const realm = realms.get(budget);
+  if (realm !== void 0) budget.setRetainedValues(realm, void 0);
+  realms.delete(budget);
+}
+
 // packages/safe-js/src/interp/budget.ts
 var REGEX_STEP_LIMIT = 2e3;
 var REGEX_COMPILE_LIMITS = Object.freeze({
@@ -391,6 +432,7 @@ var Budget = class {
   }
   reset() {
     if (this.compileUses !== 0) throw new SandboxError("reentry");
+    releaseTemplateObjects(this);
     this.compileGeneration += 1;
     this.defaultCompileOwner = void 0;
     this.provisionalScopes = 0;
@@ -6860,9 +6902,9 @@ function exportDate(value) {
   return new NativeDate(dateTime(value));
 }
 function dateDataProperties(value) {
-  const descriptors = Object.getOwnPropertyDescriptors(value);
-  return Reflect.ownKeys(descriptors).map((key) => {
-    const descriptor = Object.getOwnPropertyDescriptor(descriptors, key).value;
+  const descriptors2 = Object.getOwnPropertyDescriptors(value);
+  return Reflect.ownKeys(descriptors2).map((key) => {
+    const descriptor = Object.getOwnPropertyDescriptor(descriptors2, key).value;
     if (!("value" in descriptor)) throw new TypeError("Date accessor properties cannot be copied as data.");
     return [key, descriptor];
   });
@@ -7159,9 +7201,9 @@ function primitiveReceiver(value, kind) {
 }
 function boxedDataProperties(value, includeSymbols = false) {
   const primitive = nativeBoxedValue(value);
-  const descriptors = Object.getOwnPropertyDescriptors(value);
-  const keys = includeSymbols ? Reflect.ownKeys(descriptors) : Object.keys(descriptors);
-  return keys.map((key) => [key, Object.getOwnPropertyDescriptor(descriptors, key).value]).filter(([key]) => {
+  const descriptors2 = Object.getOwnPropertyDescriptors(value);
+  const keys = includeSymbols ? Reflect.ownKeys(descriptors2) : Object.keys(descriptors2);
+  return keys.map((key) => [key, Object.getOwnPropertyDescriptor(descriptors2, key).value]).filter(([key]) => {
     if (typeof key === "symbol") return true;
     if (typeof primitive !== "string") return true;
     if (key === "length") return false;
@@ -7910,10 +7952,10 @@ function getGeneratorOrigin(value) {
 
 // packages/safe-js/src/interp/intrinsics.ts
 var identities = /* @__PURE__ */ new WeakMap();
-var realms = /* @__PURE__ */ new WeakMap();
+var realms2 = /* @__PURE__ */ new WeakMap();
 function registerBuiltinIdentities(budget, bindings) {
-  let realm = realms.get(budget);
-  if (realm === void 0) realms.set(budget, realm = /* @__PURE__ */ new Map());
+  let realm = realms2.get(budget);
+  if (realm === void 0) realms2.set(budget, realm = /* @__PURE__ */ new Map());
   const pending = Object.entries(bindings).map(([name, value]) => [[name], value]);
   const visited = /* @__PURE__ */ new WeakSet();
   for (let index = 0; index < pending.length; index++) {
@@ -7948,15 +7990,15 @@ function getIntrinsicIdentity(value) {
   return identities.get(value);
 }
 function resolveIntrinsicIdentity(budget, id) {
-  const value = realms.get(budget)?.get(id);
+  const value = realms2.get(budget)?.get(id);
   if (value === void 0) throw new TypeError(`Unknown intrinsic identity: ${id}`);
   return value;
 }
 function listIntrinsicIdentities(budget) {
-  return [...realms.get(budget)?.keys() ?? []];
+  return [...realms2.get(budget)?.keys() ?? []];
 }
 function releaseIntrinsicIdentities(budget) {
-  realms.delete(budget);
+  realms2.delete(budget);
 }
 
 // packages/safe-js/src/interp/object-model.ts
@@ -8074,23 +8116,24 @@ function registerIntrinsicPrototype(budget, prototype, constructor) {
   const unchanged = (before, after) => before !== void 0 && after !== void 0 && Object.is(before.value, after.value) && before.get === after.get && before.set === after.set && before.writable === after.writable && before.configurable === after.configurable && before.enumerable === after.enumerable;
   intrinsicConstructors.set(
     constructor,
-    () => records.every(({ target, value, descriptors, prototype: parent, explicit, extensible }) => {
+    () => records.every(({ target, value, descriptors: descriptors2, prototype: parent, explicit, extensible }) => {
       const current = Object.getOwnPropertyDescriptors(value);
-      return getSandboxPrototype(target) === parent && Object.isExtensible(value) === extensible && hasExplicitSandboxPrototype(target) === explicit && Reflect.ownKeys(current).length === descriptors.size && Reflect.ownKeys(value).every((key) => unchanged(descriptors.get(key), Object.getOwnPropertyDescriptor(value, key)));
+      return getSandboxPrototype(target) === parent && Object.isExtensible(value) === extensible && hasExplicitSandboxPrototype(target) === explicit && Reflect.ownKeys(current).length === descriptors2.size && Reflect.ownKeys(value).every((key) => unchanged(descriptors2.get(key), Object.getOwnPropertyDescriptor(value, key)));
     })
   );
   budget.setRetainedValues(
     prototype,
-    () => records.flatMap(({ target, value, descriptors, prototype: parent }) => [
+    () => records.flatMap(({ target, value, descriptors: descriptors2, prototype: parent }) => [
       ...getSandboxPrototype(target) === parent ? [] : [getSandboxPrototype(target)],
       ...Reflect.ownKeys(value).flatMap((key) => {
         const descriptor = Object.getOwnPropertyDescriptor(value, key);
-        return unchanged(descriptors.get(key), descriptor) ? [] : [key, descriptor.value, ...retainedAccessorClosures(descriptor)];
+        return unchanged(descriptors2.get(key), descriptor) ? [] : [key, descriptor.value, ...retainedAccessorClosures(descriptor)];
       })
     ])
   );
 }
 function releaseObjectPrototype(budget) {
+  releaseTemplateObjects(budget);
   releaseIntrinsicIdentities(budget);
   for (const prototype of intrinsicPrototypeRoots.get(budget) ?? []) budget.setRetainedValues(prototype, void 0);
   intrinsicPrototypeRoots.delete(budget);
@@ -8538,7 +8581,11 @@ function captureGuestHeapNode(value, encode) {
       ...value.state !== "suspended" || origin2.expressionStates === void 0 ? {} : {
         expressionStates: Object.fromEntries([...origin2.expressionStates].map(([id, expression]) => [
           String(id),
-          expression.kind === "binary" ? { kind: "binary", left: encode(expression.left) } : expression.kind === "template" ? { ...expression } : expression.kind === "object" ? {
+          expression.kind === "binary" ? { kind: "binary", left: encode(expression.left) } : expression.kind === "member" ? {
+            kind: "member",
+            object: encode(expression.object),
+            ...Object.hasOwn(expression, "superReceiver") ? { superReceiver: encode(expression.superReceiver) } : {}
+          } : expression.kind === "template" ? { ...expression } : expression.kind === "object" ? {
             kind: "object",
             value: encode(expression.value),
             index: expression.index,
@@ -8559,7 +8606,16 @@ function captureGuestHeapNode(value, encode) {
     if (Array.isArray(value) && (!Object.isExtensible(value) || hasExplicitSandboxPrototype(value) || Reflect.ownKeys(value).some((key) => {
       const descriptor = Object.getOwnPropertyDescriptor(value, key);
       return key === "length" ? descriptor.writable !== true : !("value" in descriptor) || !descriptor.enumerable || !descriptor.configurable || !descriptor.writable;
-    }))) return { kind: "guest-array", state: captureObjectState(value, encode) };
+    }))) {
+      const templateNodeId = templateOrigins.get(value)?.nodeId;
+      const templateOwner = templateCookedArrays.get(value);
+      return {
+        kind: "guest-array",
+        state: captureObjectState(value, encode),
+        ...templateNodeId === void 0 ? {} : { templateNodeId },
+        ...templateOwner === void 0 ? {} : { templateOwner: encode(templateOwner) }
+      };
+    }
     if (isLiveCapability(value) || isSandboxClosure(value) || isSandboxBox(value) || isSandboxDate(value) || isSandboxRegex(value) || isSandboxMap(value) || isSandboxSet(value) || isSandboxPromise(value) || isSandboxGenerator(value) || isSandboxArguments(value) || isSandboxCollectionIterator(value) || isSandboxRegExpIterator(value)) return void 0;
     const prototype = Object.getPrototypeOf(value);
     if ((prototype === null || prototype === Object.prototype) && hasGuestObjectState(value))
@@ -13517,11 +13573,11 @@ function createObjectArrayGlobals(options) {
         getOwnPropertyDescriptors: createSandboxClosure({
           sandbox: true,
           call: ([value]) => {
-            const descriptors = /* @__PURE__ */ Object.create(null);
+            const descriptors2 = /* @__PURE__ */ Object.create(null);
             const properties = objectProperties(value);
             for (const key of [...Object.getOwnPropertyNames(properties), ...ownSandboxSymbolKeys(value)])
-              defineOwnDataProperty(descriptors, key, exposePropertyDescriptor(Object.getOwnPropertyDescriptor(properties, key)));
-            return allocateProducedSandboxValue(descriptors, options.budget);
+              defineOwnDataProperty(descriptors2, key, exposePropertyDescriptor(Object.getOwnPropertyDescriptor(properties, key)));
+            return allocateProducedSandboxValue(descriptors2, options.budget);
           },
           name: "getOwnPropertyDescriptors"
         }),
@@ -13552,8 +13608,8 @@ function createObjectArrayGlobals(options) {
         }),
         defineProperties: createSandboxClosure({
           sandbox: true,
-          call: async ([value, descriptors], context) => {
-            await definePropertiesFromObject(value, descriptors, options.budget, context);
+          call: async ([value, descriptors2], context) => {
+            await definePropertiesFromObject(value, descriptors2, options.budget, context);
             return value;
           },
           name: "defineProperties"
@@ -13582,12 +13638,12 @@ function createObjectArrayGlobals(options) {
         }),
         create: createSandboxClosure({
           sandbox: true,
-          call: async ([prototype, descriptors], context) => {
+          call: async ([prototype, descriptors2], context) => {
             if (prototype !== null) objectProperties(prototype);
             const value = /* @__PURE__ */ Object.create(null);
             setSandboxPrototype(value, prototype, options.budget);
-            if (descriptors !== void 0) {
-              await definePropertiesFromObject(value, descriptors, options.budget, context);
+            if (descriptors2 !== void 0) {
+              await definePropertiesFromObject(value, descriptors2, options.budget, context);
             }
             return allocateProducedSandboxValue(value, options.budget);
           },
@@ -13936,19 +13992,19 @@ async function propertyDescriptor(input, budget, context) {
     release();
   }
 }
-async function definePropertiesFromObject(target, descriptors, budget, context) {
+async function definePropertiesFromObject(target, descriptors2, budget, context) {
   objectProperties(target, true);
   const properties = [];
   const release = retainValues(budget, () => [
     target,
-    descriptors,
+    descriptors2,
     properties,
     ...properties.flatMap(([, descriptor]) => retainedAccessorClosures(descriptor))
   ]);
   try {
-    for (const key of ownEnumerableSandboxKeys(descriptors, true)) {
-      if (!hasOwnSandboxProperty(descriptors, key, true)) continue;
-      const descriptor = await (context?.getProperty !== void 0 ? context.getProperty(descriptors, key) : getSandboxDataProperty(descriptors, key, budget));
+    for (const key of ownEnumerableSandboxKeys(descriptors2, true)) {
+      if (!hasOwnSandboxProperty(descriptors2, key, true)) continue;
+      const descriptor = await (context?.getProperty !== void 0 ? context.getProperty(descriptors2, key) : getSandboxDataProperty(descriptors2, key, budget));
       properties.push([key, await propertyDescriptor(descriptor, budget, context)]);
     }
     for (const [key, descriptor] of properties) defineDataProperty(target, key, descriptor, budget);
@@ -16179,7 +16235,6 @@ function relativeIndex(value, length, fallback) {
 }
 
 // packages/safe-js/src/interp/interpreter.ts
-var taggedTemplateRawArrays = /* @__PURE__ */ new WeakMap();
 var dispatchTable = {
   ArrayExpression: evaluateArrayExpression,
   AssignmentExpression: evaluateAssignmentExpression,
@@ -16654,7 +16709,7 @@ async function evaluateTaggedTemplateExpression(node, context) {
         hasValue: true,
         value: await invokeSandboxClosure(
           tag2,
-          [createTaggedTemplateStrings(node.quasi, context), ...values.value],
+          [templateObject(node.quasi, context.budget), ...values.value],
           context,
           [...context.callStack, formatStackFrame(node, tag2.name)],
           node.span,
@@ -16679,26 +16734,6 @@ async function evaluateTaggedTemplateExpression(node, context) {
   const tag = await evaluateNode(node.tag, context);
   return tag.kind === "normal" ? invokeTag(tag.value, void 0) : tag;
 }
-function createTaggedTemplateStrings(node, context) {
-  context.budget.allocateArrayLength(node.quasis.length);
-  const strings = node.quasis.map(
-    (quasi) => quasi.value.cooked === void 0 ? void 0 : context.budget.allocateString(quasi.value.cooked)
-  );
-  context.budget.allocateArrayLength(node.quasis.length);
-  const raw = node.quasis.map(
-    (quasi) => context.budget.allocateString(quasi.value.raw)
-  );
-  Object.defineProperty(strings, "raw", {
-    configurable: false,
-    enumerable: false,
-    value: raw,
-    writable: false
-  });
-  taggedTemplateRawArrays.set(strings, raw);
-  Object.freeze(raw);
-  Object.freeze(strings);
-  return strings;
-}
 async function evaluateArrowFunction(node, context) {
   return evaluateArrowFunctionExpression(node, context, evaluateNode);
 }
@@ -18197,13 +18232,24 @@ function attachFatalSandboxErrorContext(error, node, stackFrames) {
   replaceErrorStack(error, stackFrames);
 }
 async function evaluateMemberAccess(node, context, consume) {
-  const superReceiver = node.object.type === "Super" ? { value: context.scope.lookup("this") } : void 0;
-  const object = await evaluateNode(node.object, context);
+  const restored = context.generatorResume === void 0 || node.nodeId === void 0 ? void 0 : context.restoredGeneratorExpressionStates?.get(node.nodeId);
+  if (restored !== void 0 && restored.kind !== "member") throw new TypeError("Invalid member continuation.");
+  const thisBinding = node.object.type === "Super" ? context.scope.lookup("this") : void 0;
+  const superReceiver = restored?.kind === "member" && Object.hasOwn(restored, "superReceiver") ? { value: restored.superReceiver } : thisBinding === void 0 ? void 0 : { value: thisBinding.found ? thisBinding.value : void 0 };
+  const object = restored?.kind === "member" ? { kind: "normal", value: restored.object } : await evaluateNode(node.object, context);
   if (object.kind !== "normal") return object;
   if ((object.value === null || object.value === void 0) && node.optional) {
     return consume({ kind: "nullish" });
   }
   let property;
+  if (node.computed && context.generatorYield !== void 0 && node.nodeId !== void 0) {
+    const state = {
+      kind: "member",
+      object: object.value,
+      ...superReceiver === void 0 ? {} : { superReceiver: superReceiver.value }
+    };
+    context = { ...context, generatorExpressionStates: new Map([...context.generatorExpressionStates ?? [], [node.nodeId, state]]) };
+  }
   const release = retainValues(context.budget, () => [object.value, property]);
   try {
     const result = node.computed ? await evaluateNode(node.property, context) : { kind: "normal", value: getStaticPropertyName2(node.property) };
@@ -18213,7 +18259,7 @@ async function evaluateMemberAccess(node, context, consume) {
       kind: "resolved",
       object: object.value,
       property,
-      ...superReceiver === void 0 ? {} : { superReceiver: { value: superReceiver.value.found ? superReceiver.value.value : void 0 } }
+      ...superReceiver === void 0 ? {} : { superReceiver }
     });
   } finally {
     release();
@@ -18898,8 +18944,8 @@ function getMemberValue(target, property, context) {
 }
 function getArrayMemberValue(target, property, context) {
   if (hasExplicitSandboxPrototype(target)) return void 0;
-  if (property === "raw" && taggedTemplateRawArrays.has(target)) {
-    return taggedTemplateRawArrays.get(target);
+  if (property === "raw" && templateRawArrays.has(target)) {
+    return templateRawArrays.get(target);
   }
   return getArrayMember(target, property, createArrayMethodOptions(context));
 }
@@ -22350,7 +22396,10 @@ function validateGuestHeapNode(raw, heap, maxArrayLength = 4294967295) {
     if (typeof node.id !== "string" || !intrinsicCatalogue().has(node.id)) throw new TypeError("Unknown intrinsic identity.");
     if (Object.hasOwn(node, "state")) state(node.state);
   } else if (node.kind === "guest-object" || node.kind === "guest-array") {
-    fields(node, ["kind", "state"]);
+    fields(node, ["kind", "state"], node.kind === "guest-array" ? ["templateNodeId", "templateOwner"] : []);
+    if (Object.hasOwn(node, "templateOwner")) reference(node.templateOwner, ["guest-array"]);
+    if (Object.hasOwn(node, "templateNodeId") && integer(node.templateNodeId) < 1)
+      throw new TypeError("Invalid template source identity.");
     state(node.state);
     if (node.kind === "guest-array") {
       const properties = array(record2(record2(node.state).properties).properties).map((entry) => array(entry));
@@ -22396,6 +22445,8 @@ function validateGuestHeapNode(raw, heap, maxArrayLength = 4294967295) {
         const expression = record2(raw2);
         if (expression.kind === "binary") {
           fields(expression, ["kind", "left"]);
+        } else if (expression.kind === "member") {
+          fields(expression, ["kind", "object"], ["superReceiver"]);
         } else if (expression.kind === "template") {
           fields(expression, ["kind", "prefix", "index"]);
           integer(expression.index);
@@ -22571,7 +22622,7 @@ function validateGuestFunctionAst(record3, origin) {
       pending.push({
         value,
         blocks,
-        expressions: node.type === "BinaryExpression" && key === "right" && typeof node.nodeId === "number" ? new Map([...frame.expressions, [node.nodeId, { kind: "binary" }]]) : frame.expressions,
+        expressions: node.type === "BinaryExpression" && key === "right" && typeof node.nodeId === "number" ? new Map([...frame.expressions, [node.nodeId, { kind: "binary" }]]) : node.type === "MemberExpression" && node.computed === true && key === "property" && typeof node.nodeId === "number" ? new Map([...frame.expressions, [node.nodeId, { kind: "member", superReceiver: node.object.type === "Super" }]]) : frame.expressions,
         finalizers: node.type === "TryStatement" && key === "finalizer" && typeof node.nodeId === "number" ? /* @__PURE__ */ new Set([...frame.finalizers, node.nodeId]) : frame.finalizers
       });
     }
@@ -22597,11 +22648,66 @@ function validateGuestFunctionAst(record3, origin) {
   for (const [id, expression] of expressions) {
     const expected = yieldExpressions?.get(Number(id));
     const compatibleKind = expected?.kind === expression.kind || expected?.kind === "call" && expected.member === true && expression.kind === "array-call";
-    if (expected === void 0 || !compatibleKind || expected.kind !== "binary" && expected.index !== expression.index || expected.kind === "object" && expected.key !== Object.hasOwn(expression, "key"))
+    if (expected === void 0 || !compatibleKind || expected.kind !== "binary" && expected.kind !== "member" && expected.index !== expression.index || expected.kind === "member" && expected.superReceiver !== Object.hasOwn(expression, "superReceiver") || expected.kind === "object" && expected.key !== Object.hasOwn(expression, "key"))
       throw new TypeError("Invalid generator AST identity: unrelated expression continuation");
   }
 }
 
+// packages/safe-js/src/snapshot/template-validation.ts
+function validateTemplateObjects(heap, nodes) {
+  const sites = /* @__PURE__ */ new Map();
+  for (const node of nodes) {
+    if (node.type === "TaggedTemplateExpression" && node.quasi.nodeId !== void 0)
+      sites.set(node.quasi.nodeId, node.quasi);
+  }
+  const seen = /* @__PURE__ */ new Set();
+  const rawOwners = /* @__PURE__ */ new Map();
+  for (const raw of Object.values(heap)) {
+    const entry = raw;
+    if (entry.kind !== "guest-array" || entry.templateNodeId === void 0) continue;
+    const node = sites.get(entry.templateNodeId);
+    if (node === void 0 || seen.has(entry.templateNodeId)) throw new TypeError("Invalid or duplicate template source identity.");
+    seen.add(entry.templateNodeId);
+    const cooked = descriptors(entry.state);
+    const rawReference = cooked.get("raw")?.value;
+    const rawArray = rawReference?.kind === "ref" ? heap[String(rawReference.id)] : void 0;
+    if (rawArray?.kind !== "guest-array") throw new TypeError("Invalid template raw array.");
+    if (rawOwners.has(rawArray) && rawOwners.get(rawArray) !== raw) throw new TypeError("Conflicting template raw identity.");
+    rawOwners.set(rawArray, raw);
+    checkArray(cooked, node.quasis.map((quasi) => quasi.value.cooked), true);
+    checkArray(descriptors(rawArray.state), node.quasis.map((quasi) => quasi.value.raw), false);
+  }
+  for (const [raw, owner] of rawOwners) {
+    const reference = raw.templateOwner;
+    if (reference === void 0 || heap[String(reference.id)] !== owner)
+      throw new TypeError("Missing or invalid template owner identity.");
+  }
+  for (const raw of Object.values(heap)) {
+    const entry = raw;
+    if (entry.templateOwner !== void 0 && rawOwners.get(raw) !== heap[String(entry.templateOwner.id)])
+      throw new TypeError("Invalid template owner identity.");
+  }
+}
+function descriptors(raw) {
+  const state = raw;
+  if (Object.hasOwn(state, "prototype") || state.properties.extensible !== false)
+    throw new TypeError("Invalid template object state.");
+  return new Map(state.properties.properties);
+}
+function checkArray(properties, values, cooked) {
+  if (properties.size !== values.length + (cooked ? 2 : 1)) throw new TypeError("Invalid template property count.");
+  const expected = new Map(values.map((value, index) => [String(index), value]));
+  expected.set("length", values.length);
+  if (cooked) expected.set("raw", properties.get("raw")?.value);
+  for (const [key, value] of expected) {
+    const descriptor = properties.get(key);
+    const actual = descriptor?.value;
+    const equal = value === void 0 ? actual !== null && typeof actual === "object" && actual.kind === "undefined" : actual === value;
+    if (descriptor?.kind !== "data" || descriptor.configurable !== false || descriptor.writable !== false || descriptor.enumerable !== (key !== "length" && key !== "raw") || !equal)
+      throw new TypeError("Invalid template property descriptor or contents.");
+  }
+}
+
 // packages/safe-js/src/snapshot/validation.ts
 var DEFAULT_MAX_DEPTH = MAX_DATA_DEPTH;
 var DEFAULT_MAX_ENTRIES = 1e5;
@@ -23873,8 +23979,8 @@ function measureSandboxData(values, options = {}) {
     seen.add(value);
     usage += 1;
     if (!isGuestHostObject(value)) {
-      const descriptors2 = Object.getOwnPropertySymbols(value).filter((key) => !internalSymbols.has(key)).map((key) => [key, Object.getOwnPropertyDescriptor(value, key)]);
-      for (const [key, descriptor] of descriptors2) {
+      const descriptors3 = Object.getOwnPropertySymbols(value).filter((key) => !internalSymbols.has(key)).map((key) => [key, Object.getOwnPropertyDescriptor(value, key)]);
+      for (const [key, descriptor] of descriptors3) {
         usage += 1;
         visit(key, depth + 1);
         if ("value" in descriptor) visit(descriptor.value, depth + 1);
@@ -24010,16 +24116,16 @@ function measureSandboxData(values, options = {}) {
       }
       return;
     }
-    const descriptors = Object.getOwnPropertyDescriptors(value);
-    const keys = Object.keys(descriptors);
+    const descriptors2 = Object.getOwnPropertyDescriptors(value);
+    const keys = Object.keys(descriptors2);
     const includeNonEnumerable = isSandboxDate(value) || hasManagedDescriptors(value);
     let entryCount = 0;
     for (const key of keys) {
-      if (descriptors[key].enumerable || includeNonEnumerable) entryCount += 1;
+      if (descriptors2[key].enumerable || includeNonEnumerable) entryCount += 1;
     }
     usage += entryCount;
     for (const key of keys) {
-      const descriptor = descriptors[key];
+      const descriptor = descriptors2[key];
       if (!descriptor.enumerable && !includeNonEnumerable) continue;
       usage += key.length;
       if ("value" in descriptor) visit(descriptor.value, depth + 1);
@@ -24627,11 +24733,11 @@ function defineOwnDataProperty(target, key, value) {
   });
 }
 function getEnumerableObjectEntries(value, path) {
-  const descriptors = Object.getOwnPropertyDescriptors(value);
+  const descriptors2 = Object.getOwnPropertyDescriptors(value);
   const entries = [];
-  for (const key of Reflect.ownKeys(descriptors)) {
+  for (const key of Reflect.ownKeys(descriptors2)) {
     if (typeof key === "symbol" && internalSymbols.has(key)) continue;
-    const descriptor = Object.getOwnPropertyDescriptor(descriptors, key).value;
+    const descriptor = Object.getOwnPropertyDescriptor(descriptors2, key).value;
     if (!descriptor.enumerable) {
       continue;
     }
@@ -24646,11 +24752,11 @@ function getEnumerableObjectEntries(value, path) {
   return entries;
 }
 function getEnumerableArrayEntries(value, path) {
-  const descriptors = Object.getOwnPropertyDescriptors(value);
+  const descriptors2 = Object.getOwnPropertyDescriptors(value);
   const entries = [];
-  for (const key of Reflect.ownKeys(descriptors)) {
+  for (const key of Reflect.ownKeys(descriptors2)) {
     if (typeof key === "symbol" && internalSymbols.has(key)) continue;
-    const descriptor = Object.getOwnPropertyDescriptor(descriptors, key).value;
+    const descriptor = Object.getOwnPropertyDescriptor(descriptors2, key).value;
     if (key === "length" || !descriptor.enumerable) {
       continue;
     }
@@ -25312,9 +25418,9 @@ function normalize(value, seen) {
       return normalized2;
     }
     const normalized = /* @__PURE__ */ Object.create(null);
-    const descriptors = Object.getOwnPropertyDescriptors(value);
-    for (const key of Object.keys(descriptors).sort()) {
-      const descriptor = descriptors[key];
+    const descriptors2 = Object.getOwnPropertyDescriptors(value);
+    for (const key of Object.keys(descriptors2).sort()) {
+      const descriptor = descriptors2[key];
       if (!descriptor.enumerable) continue;
       if (!("value" in descriptor)) {
         throw new TypeError("Host call arguments cannot contain accessor properties.");
@@ -25556,7 +25662,7 @@ function restore(snapshot, options, owner) {
     throw new SnapshotMismatchError(snapshot.sourceHash, currentSourceHash);
   }
   if (snapshot.heap !== void 0 && typeof snapshot.heap === "object" && snapshot.heap !== null) {
-    const closures = Object.entries(snapshot.heap).filter(([, value]) => value !== null && typeof value === "object" && ["guest-function", "guest-generator"].includes(String(value.kind)));
+    const closures = Object.entries(snapshot.heap).filter(([, value]) => value !== null && typeof value === "object" && (["guest-function", "guest-generator"].includes(String(value.kind)) || value.templateNodeId !== void 0));
     if (closures.length > 0) {
       const functions = /* @__PURE__ */ new Map();
       const pending = [parseModule(options.source, "<input>", owner)];
@@ -25564,13 +25670,14 @@ function restore(snapshot, options, owner) {
         const value = pending.pop();
         if (value === null || typeof value !== "object") continue;
         const node = value;
-        if (["ArrowFunctionExpression", "FunctionExpression", "FunctionDeclaration"].includes(String(node.type)) && typeof node.nodeId === "number") {
+        if (typeof node.nodeId === "number") {
           functions.set(node.nodeId, node);
         }
         for (const entry of Object.values(node)) pending.push(entry);
       }
       for (const [id, value] of closures) {
         const record3 = value;
+        if (record3.kind === "guest-array") continue;
         const origin = functions.get(record3.astNodeId);
         try {
           validateGuestFunctionAst(record3, origin);
@@ -25578,6 +25685,11 @@ function restore(snapshot, options, owner) {
           throw new SnapshotValidationError("invalidValue", `$.heap[${JSON.stringify(id)}].astNodeId`, error instanceof Error ? error.message : String(error));
         }
       }
+      try {
+        validateTemplateObjects(snapshot.heap, functions.values());
+      } catch (error) {
+        throw new SnapshotValidationError("invalidValue", "$.heap", String(error));
+      }
     }
   }
   return snapshot;
@@ -38782,4 +38894,4 @@ export {
   FileSnapshotBackend,
   run
 };
-//# sourceMappingURL=chunk-M7KI5UI3.js.map
+//# sourceMappingURL=chunk-DQY3GFKQ.js.map