@poe-platform/safe-js 0.1.246 → 0.1.248

package/dist/safe-js/chunks/{chunk-SIFD2ANX.js → chunk-FAZ46PGV.js}

@@ -7162,6 +7162,52 @@ function regexpIteratorState(value) {
   return state;
 }
 
+// packages/safe-js/src/interp/arguments.ts
+var sandboxArgumentsBrand = /* @__PURE__ */ Symbol("SandboxArguments");
+internalSymbols.add(sandboxArgumentsBrand);
+function createSandboxArguments(values) {
+  const result = /* @__PURE__ */ (function() {
+    return arguments;
+  })();
+  for (let index = 0; index < values.length; index += 1) {
+    result[index] = values[index];
+  }
+  result.length = values.length;
+  Object.defineProperty(result, sandboxArgumentsBrand, { value: true });
+  return result;
+}
+function isSandboxArguments(value) {
+  return typeof value === "object" && value !== null && Object.hasOwn(value, sandboxArgumentsBrand);
+}
+function getSandboxArgumentEntries(value) {
+  return Object.entries(Object.getOwnPropertyDescriptors(value)).flatMap(
+    ([key, descriptor]) => "value" in descriptor ? [[key, descriptor.value]] : []
+  );
+}
+function copySandboxArgumentProperties(source, target, copyValue) {
+  const names = Object.getOwnPropertyNames(source);
+  if (!names.includes("length") || names.indexOf("length") > names.indexOf("callee")) {
+    Reflect.deleteProperty(target, "length");
+  }
+  for (const [key, descriptor] of Object.entries(Object.getOwnPropertyDescriptors(source))) {
+    if (!("value" in descriptor)) {
+      if (key !== "callee") throw new TypeError(`Cannot copy arguments accessor '${key}'.`);
+      continue;
+    }
+    Object.defineProperty(target, key, { ...descriptor, value: copyValue(descriptor.value, key) });
+  }
+  const iterator = Object.getOwnPropertyDescriptor(source, Symbol.iterator);
+  if (iterator === void 0) {
+    Reflect.deleteProperty(target, Symbol.iterator);
+  } else {
+    if (iterator.value !== Array.prototype.values) {
+      throw new TypeError("Cannot copy a replaced arguments iterator.");
+    }
+    Object.defineProperty(target, Symbol.iterator, iterator);
+  }
+  if (!Object.isExtensible(source)) Object.preventExtensions(target);
+}
+
 // packages/safe-js/src/interp/boxed.ts
 import { types as types3 } from "node:util";
 var boxes = /* @__PURE__ */ new WeakSet();
@@ -7211,6 +7257,163 @@ function boxedDataProperties(value, includeSymbols = false) {
   });
 }
 
+// packages/safe-js/src/graph-depth.ts
+var MAX_DATA_DEPTH = 1024;
+var SnapshotBudgetError = class extends Error {
+  code = "budgetExceeded";
+  budget = "dataDepth";
+  current;
+  limit;
+  path;
+  constructor(path, current, limit = MAX_DATA_DEPTH) {
+    super(`Snapshot budget exceeded for dataDepth at ${path}: ${current} > ${limit}.`);
+    this.name = "SnapshotBudgetError";
+    this.current = current;
+    this.limit = limit;
+    this.path = path;
+    replaceErrorStack(this);
+  }
+};
+function assertSandboxDataDepth(depth) {
+  if (depth > MAX_DATA_DEPTH) {
+    throw new SandboxError({ budget: "dataDepth", current: depth, limit: MAX_DATA_DEPTH });
+  }
+}
+function assertSnapshotDataDepth(depth, path) {
+  if (depth > MAX_DATA_DEPTH) throw new SnapshotBudgetError(path, depth);
+}
+function assertSnapshotGraphDepth(value, rootPath = "$") {
+  walkGraphDepth(value, rootPath, (depth, path) => assertSnapshotDataDepth(depth, path));
+}
+function assertSandboxGraphDepth(value) {
+  walkGraphDepth(value, "<root>", (depth) => assertSandboxDataDepth(depth));
+}
+function walkGraphDepth(root, rootPath, assertDepth) {
+  const ancestors = /* @__PURE__ */ new WeakSet();
+  const stack = [{ value: root, path: rootPath, depth: 0, exiting: false }];
+  while (stack.length > 0) {
+    const frame = stack.pop();
+    if (typeof frame.value !== "object" || frame.value === null) continue;
+    if (frame.exiting) {
+      ancestors.delete(frame.value);
+      continue;
+    }
+    assertDepth(frame.depth, frame.path);
+    if (ancestors.has(frame.value)) continue;
+    ancestors.add(frame.value);
+    stack.push({ ...frame, exiting: true });
+    const entries = graphEntries(frame.value);
+    for (let index = entries.length - 1; index >= 0; index -= 1) {
+      const [key, entry] = entries[index];
+      stack.push({
+        value: entry,
+        path: `${frame.path}${key}`,
+        depth: frame.depth + 1,
+        exiting: false
+      });
+    }
+  }
+}
+function graphEntries(value) {
+  const properties = regexGuestProperties.get(value);
+  if (properties !== void 0) return Reflect.ownKeys(properties).flatMap((key) => {
+    const descriptor = Object.getOwnPropertyDescriptor(properties, key);
+    return "value" in descriptor ? [[`.${String(key)}`, descriptor.value]] : [];
+  });
+  if (isSandboxBox(value)) return boxedDataProperties(value).map(([key, descriptor]) => [`.${key}`, descriptor.value]);
+  if (isSandboxArguments(value)) {
+    return getSandboxArgumentEntries(value).map(([key, entry]) => [`.${key}`, entry]);
+  }
+  const map = isSandboxMap(value) ? value.entries : value instanceof Map ? value : void 0;
+  if (map !== void 0) {
+    return [...map.entries()].flatMap(([key, entry], index) => [
+      [`.<map>[${index}].key`, key],
+      [`.<map>[${index}].value`, entry]
+    ]);
+  }
+  const set = isSandboxSet(value) ? value.values : value instanceof Set ? value : void 0;
+  if (set !== void 0) {
+    return [...set.values()].map((entry, index) => [`.<set>[${index}]`, entry]);
+  }
+  const entries = [];
+  if (isSandboxCollectionIterator(value)) entries.push([".<collection>", collectionIteratorState(value).collection]);
+  if (isSandboxRegExpIterator(value)) entries.push([".<matcher>", regexpIteratorState(value).matcher]);
+  for (const key of Object.keys(value)) {
+    const descriptor = Object.getOwnPropertyDescriptor(value, key);
+    if (descriptor !== void 0 && "value" in descriptor)
+      entries.push([Array.isArray(value) ? `[${key}]` : `.${key}`, descriptor.value]);
+  }
+  return entries;
+}
+
+// packages/safe-js/src/interp/symbols.ts
+var wellKnownSymbols = Object.freeze({
+  iterator: Symbol.iterator,
+  asyncIterator: Symbol.asyncIterator,
+  hasInstance: Symbol.hasInstance,
+  isConcatSpreadable: Symbol.isConcatSpreadable,
+  match: Symbol.match,
+  matchAll: Symbol.matchAll,
+  replace: Symbol.replace,
+  search: Symbol.search,
+  species: Symbol.species,
+  split: Symbol.split,
+  toPrimitive: Symbol.toPrimitive,
+  toStringTag: Symbol.toStringTag,
+  unscopables: Symbol.unscopables
+});
+
+// packages/safe-js/src/interp/intrinsics.ts
+var identities = /* @__PURE__ */ new WeakMap();
+var realms2 = /* @__PURE__ */ new WeakMap();
+function registerBuiltinIdentities(budget, bindings) {
+  let realm = realms2.get(budget);
+  if (realm === void 0) realms2.set(budget, realm = /* @__PURE__ */ new Map());
+  const pending = Object.entries(bindings).map(([name, value]) => [[name], value]);
+  const visited = /* @__PURE__ */ new WeakSet();
+  for (let index = 0; index < pending.length; index++) {
+    const [path, value] = pending[index];
+    if (value === null || typeof value !== "object") continue;
+    const id = JSON.stringify(path);
+    const previous = realm.get(id);
+    if (previous !== void 0 && previous !== value)
+      throw new TypeError(`Duplicate intrinsic identity: ${id}`);
+    realm.set(id, value);
+    if (!identities.has(value)) identities.set(value, id);
+    if (visited.has(value)) continue;
+    visited.add(value);
+    const owner = isSandboxClosure(value) ? value.properties : value;
+    if (owner === void 0) continue;
+    for (const key of Reflect.ownKeys(owner)) {
+      if (typeof key === "symbol" && internalSymbols.has(key)) continue;
+      const descriptor = Object.getOwnPropertyDescriptor(owner, key);
+      const symbolName = typeof key === "symbol" ? Object.entries(wellKnownSymbols).find(([, symbol]) => symbol === key)?.[0] : void 0;
+      if (typeof key === "symbol" && symbolName === void 0)
+        throw new TypeError("Intrinsic symbol keys must be well-known symbols.");
+      const member = [...path, typeof key === "string" ? key : { symbol: symbolName }];
+      if ("value" in descriptor) pending.push([member, descriptor.value]);
+      for (const kind of ["get", "set"]) {
+        const closure = accessorClosure(descriptor[kind]);
+        if (closure !== void 0) pending.push([[...member, kind], closure]);
+      }
+    }
+  }
+}
+function getIntrinsicIdentity(value) {
+  return identities.get(value);
+}
+function resolveIntrinsicIdentity(budget, id) {
+  const value = realms2.get(budget)?.get(id);
+  if (value === void 0) throw new TypeError(`Unknown intrinsic identity: ${id}`);
+  return value;
+}
+function listIntrinsicIdentities(budget) {
+  return [...realms2.get(budget)?.keys() ?? []];
+}
+function releaseIntrinsicIdentities(budget) {
+  realms2.delete(budget);
+}
+
 // packages/safe-js/src/interp/host-capabilities.ts
 import { types as types4 } from "node:util";
 var MAX_INDEXED_LENGTH = 65536;
@@ -7555,491 +7758,46 @@ function namedKeys(state) {
   });
 }
 
-// packages/safe-js/src/interp/values.ts
-import { types as nodeTypes } from "node:util";
-
-// packages/safe-js/src/interp/promise-tracker.ts
-import { AsyncLocalStorage } from "node:async_hooks";
-var SandboxPromiseRejectionTracker = class {
-  records = /* @__PURE__ */ new Set();
-  recordsByPromise = /* @__PURE__ */ new WeakMap();
-  fatalRejection;
-  fatalWaiters = /* @__PURE__ */ new Set();
-  get failure() {
-    return this.fatalRejection;
-  }
-  onFatalRejection(interrupt) {
-    if (this.fatalRejection === void 0) this.fatalWaiters.add(interrupt);
-    else interrupt(this.fatalRejection);
-    return () => this.fatalWaiters.delete(interrupt);
-  }
-  interruptOnFatalRejection(pending) {
-    return new Promise((resolve, reject) => {
-      const detach = this.onFatalRejection(reject);
-      pending.then(
-        (value) => {
-          detach();
-          resolve(value);
-        },
-        (reason) => {
-          detach();
-          reject(reason);
-        }
-      );
-    });
-  }
-  observe(promise) {
-    const record3 = this.recordsByPromise.get(promise);
-    if (record3 !== void 0) {
-      record3.observed = true;
-    }
-  }
-  track(promise, outcome) {
-    const existing = this.recordsByPromise.get(promise);
-    if (existing !== void 0 && outcome === void 0) {
-      return;
-    }
-    const record3 = existing ?? {
-      observed: false,
-      promise,
-      rejected: false
-    };
-    this.records.add(record3);
-    this.recordsByPromise.set(promise, record3);
-    const pending = outcome ?? promise.promise;
-    pending.then(
-      () => void 0,
-      (reason) => {
-        if (this.fatalRejection === void 0 && reason instanceof SandboxError && (reason.code === "budgetExceeded" || reason.code === "reentry")) {
-          this.fatalRejection = reason;
-          for (const interrupt of this.fatalWaiters) interrupt(reason);
-          this.fatalWaiters.clear();
-        }
-        if (record3.rejected) return;
-        record3.rejected = true;
-        record3.rejectionReason = reason;
-      }
-    );
-    pending.catch(() => void 0);
-  }
-  async findUnhandledRejection() {
-    await flushPromiseJobs();
-    if (this.fatalRejection !== void 0) throw this.fatalRejection;
-    for (const record3 of this.records) {
-      if (record3.rejected && !record3.observed) {
-        return {
-          reason: record3.rejectionReason,
-          span: record3.promise.span
-        };
-      }
-    }
-    return void 0;
-  }
-};
-var activePromiseTracker = new AsyncLocalStorage();
-var fatalRejectionCleanup = new AsyncLocalStorage();
-function assertPromiseExecutionAllowed() {
-  const failure = activePromiseTracker.getStore()?.failure;
-  if (failure !== void 0 && fatalRejectionCleanup.getStore() !== true) throw failure;
-}
-function onFatalPromiseRejection(interrupt) {
-  if (fatalRejectionCleanup.getStore() === true) return void 0;
-  return activePromiseTracker.getStore()?.onFatalRejection(interrupt);
-}
-function interruptOnFatalPromiseRejection(pending) {
-  if (fatalRejectionCleanup.getStore() === true) return pending;
-  return activePromiseTracker.getStore()?.interruptOnFatalRejection(pending) ?? pending;
-}
-function withFatalPromiseCleanup(callback) {
-  return fatalRejectionCleanup.run(true, callback);
-}
-function createSandboxPromiseRejectionTracker() {
-  return new SandboxPromiseRejectionTracker();
-}
-function observeSandboxPromise(promise) {
-  activePromiseTracker.getStore()?.observe(promise);
-}
-function trackSandboxPromise(promise, outcome) {
-  activePromiseTracker.getStore()?.track(promise, outcome);
-}
-function withSandboxPromiseRejectionTracker(tracker, callback) {
-  return activePromiseTracker.run(tracker, callback);
-}
-async function flushPromiseJobs() {
-  for (let index = 0; index < 20; index += 1) {
-    await Promise.resolve();
-  }
-}
-
-// packages/safe-js/src/interp/promise-replay.ts
-import { AsyncLocalStorage as AsyncLocalStorage5 } from "node:async_hooks";
-
-// packages/safe-js/src/snapshot/bigint.ts
-function validateBigIntData(value) {
-  if (typeof value !== "string" || value.length === 0) throw new TypeError("Invalid BigInt snapshot value.");
-  if (value === "0") return;
-  const start = value[0] === "-" ? 1 : 0;
-  if (start === value.length || value[start] === "0") throw new TypeError("Invalid BigInt snapshot value.");
-  for (let index = start; index < value.length; index++) {
-    const code = value.charCodeAt(index);
-    if (code < 48 || code > 57) throw new TypeError("Invalid BigInt snapshot value.");
-  }
-}
-
-// packages/safe-js/src/interp/symbols.ts
-var wellKnownSymbols = Object.freeze({
-  iterator: Symbol.iterator,
-  asyncIterator: Symbol.asyncIterator,
-  hasInstance: Symbol.hasInstance,
-  isConcatSpreadable: Symbol.isConcatSpreadable,
-  match: Symbol.match,
-  matchAll: Symbol.matchAll,
-  replace: Symbol.replace,
-  search: Symbol.search,
-  species: Symbol.species,
-  split: Symbol.split,
-  toPrimitive: Symbol.toPrimitive,
-  toStringTag: Symbol.toStringTag,
-  unscopables: Symbol.unscopables
-});
-
-// packages/safe-js/src/snapshot/symbols.ts
-function symbolData(value) {
-  const wellKnown = Object.keys(wellKnownSymbols).find((key) => wellKnownSymbols[key] === value);
-  return {
-    kind: "symbol",
-    ...wellKnown === void 0 ? value.description === void 0 ? {} : { description: value.description } : { wellKnown }
-  };
-}
-function serializeSymbol(value, heapIds, heap) {
-  let id = heapIds.get(value);
-  if (id === void 0) {
-    id = heapIds.size + 1;
-    heapIds.set(value, id);
-    heap[String(id)] = symbolData(value);
-  }
-  return { kind: "ref", id };
-}
-function ownSerializableSymbolKeys(value) {
-  return Object.getOwnPropertySymbols(value).filter((key) => !internalSymbols.has(key));
-}
-function serializeSymbolProperties(value, encode) {
-  return ownSerializableSymbolKeys(value).map((key) => {
-    const descriptor = Object.getOwnPropertyDescriptor(value, key);
-    if (!("value" in descriptor)) throw new TypeError("Symbol accessor properties cannot be serialized.");
-    return [encode(key), { value: encode(descriptor.value), enumerable: descriptor.enumerable === true, writable: descriptor.writable === true, configurable: descriptor.configurable === true }];
-  });
-}
-function restoreSymbolProperties(target, entries, decode) {
-  for (const [key, descriptor] of entries ?? []) {
-    const symbol = decode(key);
-    if (typeof symbol !== "symbol") throw new TypeError("Expected a symbol property key");
-    Object.defineProperty(target, symbol, { ...descriptor, value: decode(descriptor.value) });
-  }
-}
-
-// packages/safe-js/src/snapshot/regexp-properties.ts
-function hasCustomRegexProperties(value) {
-  const properties = getRegexProperties(value);
-  return Reflect.ownKeys(properties).length !== 1 || !Object.isExtensible(properties) || Object.getOwnPropertyDescriptor(properties, "lastIndex")?.writable !== true;
-}
-function serializeRegexProperties(value, encode) {
-  if (!hasCustomRegexProperties(value)) return {};
-  const source = getRegexProperties(value);
-  const properties = /* @__PURE__ */ Object.create(null);
-  for (const key of Object.getOwnPropertyNames(source)) {
-    const descriptor = Object.getOwnPropertyDescriptor(source, key);
-    if (!("value" in descriptor)) throw new TypeError("RegExp accessor properties cannot be serialized as data.");
-    properties[key] = {
-      value: encode(descriptor.value),
-      enumerable: descriptor.enumerable === true,
-      configurable: descriptor.configurable === true,
-      writable: descriptor.writable === true
-    };
-  }
-  const symbolEntries = serializeSymbolProperties(source, encode);
-  return {
-    properties,
-    ...symbolEntries.length === 0 ? {} : { symbolEntries },
-    ...Object.isExtensible(source) ? {} : { extensible: false }
-  };
-}
-function validateRegexProperties(data) {
-  const descriptor = (value) => {
-    if (typeof value !== "object" || value === null || Array.isArray(value) || !Object.hasOwn(value, "value") || !["enumerable", "configurable", "writable"].every((key) => Object.hasOwn(value, key) && typeof value[key] === "boolean") || Object.keys(value).some((key) => !["value", "enumerable", "configurable", "writable"].includes(key)))
-      throw new TypeError("Invalid RegExp data property descriptor.");
-  };
-  if (data.extensible !== void 0 && typeof data.extensible !== "boolean")
-    throw new TypeError("Invalid RegExp extensibility.");
-  if (data.properties !== void 0) {
-    if (typeof data.properties !== "object" || data.properties === null || Array.isArray(data.properties))
-      throw new TypeError("Invalid RegExp property data.");
-    for (const entry of Object.values(data.properties)) descriptor(entry);
-  }
-  if (data.symbolEntries !== void 0) {
-    if (!Array.isArray(data.symbolEntries)) throw new TypeError("Invalid RegExp symbol properties.");
-    for (const entry of data.symbolEntries) {
-      if (!Array.isArray(entry) || entry.length !== 2) throw new TypeError("Invalid RegExp symbol property.");
-      descriptor(entry[1]);
-    }
-  }
-}
-function restoreRegexProperties(value, data, decode) {
-  validateRegexProperties(data);
-  const properties = getRegexProperties(value);
-  for (const [key, descriptor] of Object.entries(data.properties ?? {}))
-    Object.defineProperty(properties, key, { ...descriptor, value: decode(descriptor.value) });
-  restoreSymbolProperties(properties, data.symbolEntries, decode);
-  if (data.extensible === false) Object.preventExtensions(properties);
-}
-
-// packages/safe-js/src/snapshot/validation.ts
-import { types as types6 } from "node:util";
-
-// packages/safe-js/src/interp/arguments.ts
-var sandboxArgumentsBrand = /* @__PURE__ */ Symbol("SandboxArguments");
-internalSymbols.add(sandboxArgumentsBrand);
-function createSandboxArguments(values) {
-  const result = /* @__PURE__ */ (function() {
-    return arguments;
-  })();
-  for (let index = 0; index < values.length; index += 1) {
-    result[index] = values[index];
-  }
-  result.length = values.length;
-  Object.defineProperty(result, sandboxArgumentsBrand, { value: true });
-  return result;
-}
-function isSandboxArguments(value) {
-  return typeof value === "object" && value !== null && Object.hasOwn(value, sandboxArgumentsBrand);
-}
-function getSandboxArgumentEntries(value) {
-  return Object.entries(Object.getOwnPropertyDescriptors(value)).flatMap(
-    ([key, descriptor]) => "value" in descriptor ? [[key, descriptor.value]] : []
-  );
-}
-function copySandboxArgumentProperties(source, target, copyValue) {
-  const names = Object.getOwnPropertyNames(source);
-  if (!names.includes("length") || names.indexOf("length") > names.indexOf("callee")) {
-    Reflect.deleteProperty(target, "length");
-  }
-  for (const [key, descriptor] of Object.entries(Object.getOwnPropertyDescriptors(source))) {
-    if (!("value" in descriptor)) {
-      if (key !== "callee") throw new TypeError(`Cannot copy arguments accessor '${key}'.`);
-      continue;
-    }
-    Object.defineProperty(target, key, { ...descriptor, value: copyValue(descriptor.value, key) });
-  }
-  const iterator = Object.getOwnPropertyDescriptor(source, Symbol.iterator);
-  if (iterator === void 0) {
-    Reflect.deleteProperty(target, Symbol.iterator);
-  } else {
-    if (iterator.value !== Array.prototype.values) {
-      throw new TypeError("Cannot copy a replaced arguments iterator.");
-    }
-    Object.defineProperty(target, Symbol.iterator, iterator);
-  }
-  if (!Object.isExtensible(source)) Object.preventExtensions(target);
-}
-
-// packages/safe-js/src/graph-depth.ts
-var MAX_DATA_DEPTH = 1024;
-var SnapshotBudgetError = class extends Error {
-  code = "budgetExceeded";
-  budget = "dataDepth";
-  current;
-  limit;
-  path;
-  constructor(path, current, limit = MAX_DATA_DEPTH) {
-    super(`Snapshot budget exceeded for dataDepth at ${path}: ${current} > ${limit}.`);
-    this.name = "SnapshotBudgetError";
-    this.current = current;
-    this.limit = limit;
-    this.path = path;
-    replaceErrorStack(this);
-  }
-};
-function assertSandboxDataDepth(depth) {
-  if (depth > MAX_DATA_DEPTH) {
-    throw new SandboxError({ budget: "dataDepth", current: depth, limit: MAX_DATA_DEPTH });
-  }
-}
-function assertSnapshotDataDepth(depth, path) {
-  if (depth > MAX_DATA_DEPTH) throw new SnapshotBudgetError(path, depth);
-}
-function assertSnapshotGraphDepth(value, rootPath = "$") {
-  walkGraphDepth(value, rootPath, (depth, path) => assertSnapshotDataDepth(depth, path));
-}
-function assertSandboxGraphDepth(value) {
-  walkGraphDepth(value, "<root>", (depth) => assertSandboxDataDepth(depth));
-}
-function walkGraphDepth(root, rootPath, assertDepth) {
-  const ancestors = /* @__PURE__ */ new WeakSet();
-  const stack = [{ value: root, path: rootPath, depth: 0, exiting: false }];
-  while (stack.length > 0) {
-    const frame = stack.pop();
-    if (typeof frame.value !== "object" || frame.value === null) continue;
-    if (frame.exiting) {
-      ancestors.delete(frame.value);
-      continue;
-    }
-    assertDepth(frame.depth, frame.path);
-    if (ancestors.has(frame.value)) continue;
-    ancestors.add(frame.value);
-    stack.push({ ...frame, exiting: true });
-    const entries = graphEntries(frame.value);
-    for (let index = entries.length - 1; index >= 0; index -= 1) {
-      const [key, entry] = entries[index];
-      stack.push({
-        value: entry,
-        path: `${frame.path}${key}`,
-        depth: frame.depth + 1,
-        exiting: false
-      });
-    }
-  }
-}
-function graphEntries(value) {
-  const properties = regexGuestProperties.get(value);
-  if (properties !== void 0) return Reflect.ownKeys(properties).flatMap((key) => {
-    const descriptor = Object.getOwnPropertyDescriptor(properties, key);
-    return "value" in descriptor ? [[`.${String(key)}`, descriptor.value]] : [];
-  });
-  if (isSandboxBox(value)) return boxedDataProperties(value).map(([key, descriptor]) => [`.${key}`, descriptor.value]);
-  if (isSandboxArguments(value)) {
-    return getSandboxArgumentEntries(value).map(([key, entry]) => [`.${key}`, entry]);
-  }
-  const map = isSandboxMap(value) ? value.entries : value instanceof Map ? value : void 0;
-  if (map !== void 0) {
-    return [...map.entries()].flatMap(([key, entry], index) => [
-      [`.<map>[${index}].key`, key],
-      [`.<map>[${index}].value`, entry]
-    ]);
-  }
-  const set = isSandboxSet(value) ? value.values : value instanceof Set ? value : void 0;
-  if (set !== void 0) {
-    return [...set.values()].map((entry, index) => [`.<set>[${index}]`, entry]);
-  }
-  const entries = [];
-  if (isSandboxCollectionIterator(value)) entries.push([".<collection>", collectionIteratorState(value).collection]);
-  if (isSandboxRegExpIterator(value)) entries.push([".<matcher>", regexpIteratorState(value).matcher]);
-  for (const key of Object.keys(value)) {
-    const descriptor = Object.getOwnPropertyDescriptor(value, key);
-    if (descriptor !== void 0 && "value" in descriptor)
-      entries.push([Array.isArray(value) ? `[${key}]` : `.${key}`, descriptor.value]);
-  }
-  return entries;
-}
-
-// packages/safe-js/src/interp/closure-origin.ts
-var origins = /* @__PURE__ */ new WeakMap();
-var generatorOrigins = /* @__PURE__ */ new WeakMap();
-function registerClosureOrigin(closure, node, context) {
-  origins.set(closure, { node, scope: context.scope, environment: context.functionEnvironment });
-}
-function getClosureOrigin(value) {
-  return origins.get(value);
-}
-function registerGeneratorOrigin(generator, node, scope, context) {
-  const origin = { node, scope, closureScope: context.scope, environment: context.functionEnvironment };
-  generatorOrigins.set(generator, origin);
-  return origin;
-}
-function getGeneratorOrigin(value) {
-  return generatorOrigins.get(value);
-}
-
-// packages/safe-js/src/interp/intrinsics.ts
-var identities = /* @__PURE__ */ new WeakMap();
-var realms2 = /* @__PURE__ */ new WeakMap();
-function registerBuiltinIdentities(budget, bindings) {
-  let realm = realms2.get(budget);
-  if (realm === void 0) realms2.set(budget, realm = /* @__PURE__ */ new Map());
-  const pending = Object.entries(bindings).map(([name, value]) => [[name], value]);
-  const visited = /* @__PURE__ */ new WeakSet();
-  for (let index = 0; index < pending.length; index++) {
-    const [path, value] = pending[index];
-    if (value === null || typeof value !== "object") continue;
-    const id = JSON.stringify(path);
-    const previous = realm.get(id);
-    if (previous !== void 0 && previous !== value)
-      throw new TypeError(`Duplicate intrinsic identity: ${id}`);
-    realm.set(id, value);
-    if (!identities.has(value)) identities.set(value, id);
-    if (visited.has(value)) continue;
-    visited.add(value);
-    const owner = isSandboxClosure(value) ? value.properties : value;
-    if (owner === void 0) continue;
-    for (const key of Reflect.ownKeys(owner)) {
-      if (typeof key === "symbol" && internalSymbols.has(key)) continue;
-      const descriptor = Object.getOwnPropertyDescriptor(owner, key);
-      const symbolName = typeof key === "symbol" ? Object.entries(wellKnownSymbols).find(([, symbol]) => symbol === key)?.[0] : void 0;
-      if (typeof key === "symbol" && symbolName === void 0)
-        throw new TypeError("Intrinsic symbol keys must be well-known symbols.");
-      const member = [...path, typeof key === "string" ? key : { symbol: symbolName }];
-      if ("value" in descriptor) pending.push([member, descriptor.value]);
-      for (const kind of ["get", "set"]) {
-        const closure = accessorClosure(descriptor[kind]);
-        if (closure !== void 0) pending.push([[...member, kind], closure]);
-      }
-    }
-  }
-}
-function getIntrinsicIdentity(value) {
-  return identities.get(value);
-}
-function resolveIntrinsicIdentity(budget, id) {
-  const value = realms2.get(budget)?.get(id);
-  if (value === void 0) throw new TypeError(`Unknown intrinsic identity: ${id}`);
-  return value;
-}
-function listIntrinsicIdentities(budget) {
-  return [...realms2.get(budget)?.keys() ?? []];
-}
-function releaseIntrinsicIdentities(budget) {
-  realms2.delete(budget);
-}
-
-// packages/safe-js/src/interp/object-model.ts
-var guestClosures = /* @__PURE__ */ new WeakSet();
-var functionProperties = /* @__PURE__ */ new WeakMap();
-var prototypes = /* @__PURE__ */ new WeakMap();
-var intrinsicPrototypes = /* @__PURE__ */ new WeakMap();
-var boxedPrototypes = /* @__PURE__ */ new WeakMap();
-var regexPrototypes = /* @__PURE__ */ new WeakMap();
-var initialRegexDescriptors = /* @__PURE__ */ new WeakMap();
-var intrinsicPrototypeRoots = /* @__PURE__ */ new WeakMap();
-var intrinsicConstructors = /* @__PURE__ */ new WeakMap();
-var intrinsicFunctions = /* @__PURE__ */ new WeakSet();
-var initialBoxedMethods = /* @__PURE__ */ new WeakMap();
-var descriptorObjects = /* @__PURE__ */ new WeakSet();
-function registerGuestClosure(closure) {
-  guestClosures.add(closure);
-}
-function isGuestClosure(value) {
-  return typeof value === "object" && value !== null && guestClosures.has(value);
-}
-function getGuestFunctionProperties(closure) {
-  return functionProperties.get(closure);
-}
-function materializeFunctionProperties(closure) {
-  if (!isGuestClosure(closure)) throw new TypeError("Host function properties are read only.");
-  const existing = functionProperties.get(closure);
-  if (existing !== void 0) return existing;
-  const properties = /* @__PURE__ */ Object.create(null);
-  Object.defineProperties(properties, {
-    length: { value: closure.length ?? 0, configurable: true },
-    name: { value: closure.name ?? "", configurable: true }
-  });
-  if (closure.construct !== void 0 && closure.boundTarget === void 0) {
-    const prototype = /* @__PURE__ */ Object.create(null);
-    Object.defineProperty(prototype, "constructor", {
-      value: closure,
-      writable: true,
-      configurable: true
-    });
-    descriptorObjects.add(prototype);
-    Object.defineProperty(properties, "prototype", { value: prototype, writable: true });
+// packages/safe-js/src/interp/object-model.ts
+var guestClosures = /* @__PURE__ */ new WeakSet();
+var functionProperties = /* @__PURE__ */ new WeakMap();
+var prototypes = /* @__PURE__ */ new WeakMap();
+var intrinsicPrototypes = /* @__PURE__ */ new WeakMap();
+var boxedPrototypes = /* @__PURE__ */ new WeakMap();
+var regexPrototypes = /* @__PURE__ */ new WeakMap();
+var initialRegexDescriptors = /* @__PURE__ */ new WeakMap();
+var intrinsicPrototypeRoots = /* @__PURE__ */ new WeakMap();
+var intrinsicConstructors = /* @__PURE__ */ new WeakMap();
+var intrinsicFunctions = /* @__PURE__ */ new WeakSet();
+var initialBoxedMethods = /* @__PURE__ */ new WeakMap();
+var descriptorObjects = /* @__PURE__ */ new WeakSet();
+function registerGuestClosure(closure) {
+  guestClosures.add(closure);
+}
+function isGuestClosure(value) {
+  return typeof value === "object" && value !== null && guestClosures.has(value);
+}
+function getGuestFunctionProperties(closure) {
+  return functionProperties.get(closure);
+}
+function materializeFunctionProperties(closure) {
+  if (!isGuestClosure(closure)) throw new TypeError("Host function properties are read only.");
+  const existing = functionProperties.get(closure);
+  if (existing !== void 0) return existing;
+  const properties = /* @__PURE__ */ Object.create(null);
+  Object.defineProperties(properties, {
+    length: { value: closure.length ?? 0, configurable: true },
+    name: { value: closure.name ?? "", configurable: true }
+  });
+  if (closure.construct !== void 0 && closure.boundTarget === void 0) {
+    const prototype = /* @__PURE__ */ Object.create(null);
+    Object.defineProperty(prototype, "constructor", {
+      value: closure,
+      writable: true,
+      configurable: true
+    });
+    descriptorObjects.add(prototype);
+    Object.defineProperty(properties, "prototype", { value: prototype, writable: true });
   }
   descriptorObjects.add(properties);
   functionProperties.set(closure, properties);
@@ -8139,117 +7897,376 @@ function trackIntrinsicState(budget, root, owner, targets) {
     ])
   );
 }
-function releaseObjectPrototype(budget) {
-  releaseTemplateObjects(budget);
-  releaseIntrinsicIdentities(budget);
-  for (const prototype of intrinsicPrototypeRoots.get(budget) ?? []) budget.setRetainedValues(prototype, void 0);
-  intrinsicPrototypeRoots.delete(budget);
-  boxedPrototypes.delete(budget);
-  regexPrototypes.delete(budget);
-  initialRegexDescriptors.delete(budget);
-  intrinsicPrototypes.delete(budget);
+function releaseObjectPrototype(budget) {
+  releaseTemplateObjects(budget);
+  releaseIntrinsicIdentities(budget);
+  for (const prototype of intrinsicPrototypeRoots.get(budget) ?? []) budget.setRetainedValues(prototype, void 0);
+  intrinsicPrototypeRoots.delete(budget);
+  boxedPrototypes.delete(budget);
+  regexPrototypes.delete(budget);
+  initialRegexDescriptors.delete(budget);
+  intrinsicPrototypes.delete(budget);
+}
+function getSandboxPrototype(value, budget) {
+  if (prototypes.has(value)) return prototypes.get(value) ?? null;
+  if (budget !== void 0 && isSandboxRegex(value)) return regexPrototypes.get(budget) ?? null;
+  if (budget !== void 0 && isSandboxBox(value)) {
+    const prototype = getBoxedPrototype(boxedValue(value), budget);
+    if (prototype !== void 0 && prototype !== value) return prototype;
+  }
+  return budget !== void 0 && !isSandboxClosure(value) && isPrototypeRecord(value) ? intrinsicPrototypes.get(budget) ?? null : null;
+}
+function hasExplicitSandboxPrototype(value) {
+  return prototypes.has(value);
+}
+function hasNullObjectPrototype(value) {
+  return prototypes.get(value) === null && !Array.isArray(value) && !isSandboxClosure(value) && !isSandboxRegex(value);
+}
+function getSandboxPropertyDescriptor(value, key, budget) {
+  const hostProperties = isSandboxClosure(value) ? value.properties : void 0;
+  if (isSandboxClosure(value) && !isGuestClosure(value))
+    return hostProperties === void 0 ? void 0 : Object.getOwnPropertyDescriptor(hostProperties, key);
+  let current = value;
+  let depth = 0;
+  while (typeof current === "object" && current !== null && (Array.isArray(current) || isSandboxDate(current) || isSandboxRegex(current) || isPrototypeRecord(current))) {
+    const properties = isGuestClosure(current) ? getGuestFunctionProperties(current) : isSandboxRegex(current) ? getRegexProperties(current) : current;
+    const descriptor = properties === void 0 ? void 0 : Object.getOwnPropertyDescriptor(properties, key);
+    if (descriptor !== void 0) return descriptor;
+    current = getSandboxPrototype(current, budget);
+    if (current !== null) {
+      budget?.visitNode();
+      assertSandboxDataDepth(++depth);
+    }
+  }
+  return void 0;
+}
+function getSandboxDataProperty(value, key, budget) {
+  let current = value;
+  let depth = 0;
+  while (typeof current === "object" && current !== null) {
+    if (isGuestHostObject(current)) return typeof key === "symbol" ? void 0 : getHostObjectMember(current, String(key));
+    if (isSandboxRegex(current)) return Object.getOwnPropertyDescriptor(getRegexProperties(current), key)?.value;
+    if (isGuestClosure(current)) {
+      const entry = getGuestFunctionProperty(current, key);
+      if (entry !== void 0 || Object.hasOwn(current.properties ?? {}, key)) return entry;
+    } else if (isSandboxClosure(current)) {
+      const properties = current.properties;
+      return properties !== void 0 && Object.hasOwn(properties, key) ? properties[key] : void 0;
+    }
+    if (isSandboxMap(current) || isSandboxSet(current) || isSandboxPromise(current) || isSandboxRegex(current) || isSandboxGenerator(current))
+      return void 0;
+    if (!isSandboxClosure(current) && Object.hasOwn(current, key)) return current[key];
+    current = getSandboxPrototype(current, budget);
+    if (current !== null) {
+      budget?.visitNode();
+      assertSandboxDataDepth(++depth);
+    }
+  }
+  return void 0;
+}
+function setSandboxPrototype(value, prototype, budget) {
+  if (budget !== void 0 && intrinsicPrototypes.get(budget) === value && prototype !== null) {
+    throw new TypeError("Object.prototype has an immutable null prototype.");
+  }
+  if (!Array.isArray(value) && !isSandboxRegex(value) && !isPrototypeRecord(value) || prototype !== null && !Array.isArray(prototype) && !isPrototypeRecord(prototype)) {
+    throw new TypeError(
+      "Prototype links require ordinary sandbox objects, arrays, or guest functions."
+    );
+  }
+  if (prototypes.has(value) && getSandboxPrototype(value, budget) === prototype) return;
+  if (!Object.isExtensible(isGuestClosure(value) ? materializeFunctionProperties(value) : isSandboxRegex(value) ? getRegexProperties(value) : value)) {
+    throw new TypeError("Cannot change the prototype of a non-extensible object.");
+  }
+  let depth = 0;
+  for (let current = prototype; current !== null; current = getSandboxPrototype(current, budget)) {
+    budget?.visitNode();
+    assertSandboxDataDepth(depth++);
+    if (current === value) throw new TypeError("Cyclic prototype value.");
+  }
+  prototypes.set(value, prototype);
+}
+function isPrototypeRecord(value) {
+  if (isGuestClosure(value)) return true;
+  if (isGuestHostObject(value)) return false;
+  if (isSandboxClosure(value) || isSandboxGenerator(value) || isSandboxMap(value) || isSandboxPromise(value) || isSandboxRegex(value) || isSandboxSet(value))
+    return false;
+  const prototype = Object.getPrototypeOf(value);
+  return prototype === null || prototype === Object.prototype;
+}
+function markDescriptorObject(value) {
+  descriptorObjects.add(value);
+}
+function hasManagedDescriptors(value) {
+  return descriptorObjects.has(value);
+}
+function hasGuestObjectState(value) {
+  const intrinsicUnchanged = intrinsicConstructors.get(value);
+  if (intrinsicUnchanged !== void 0) return !intrinsicUnchanged();
+  if (isLiveCapability(value)) return true;
+  if (functionProperties.has(value) || prototypes.has(value) && !hasNullObjectPrototype(value)) return true;
+  if (isSandboxBox(value) || isSandboxDate(value)) return false;
+  return descriptorObjects.has(value) && Object.values(Object.getOwnPropertyDescriptors(value)).some(
+    (descriptor) => !descriptor.enumerable || !descriptor.configurable || !descriptor.writable
+  );
+}
+
+// packages/safe-js/src/interp/raw-json.ts
+var rawJsonValues = /* @__PURE__ */ new WeakSet();
+function createRawJson(text) {
+  if (text.length === 0 || text.trim() !== text) throw new SyntaxError("Invalid raw JSON text.");
+  const parsed = JSON.parse(text);
+  if (typeof parsed === "object" && parsed !== null) throw new SyntaxError("Raw JSON requires a primitive value.");
+  const value = /* @__PURE__ */ Object.create(null);
+  value.rawJSON = text;
+  setSandboxPrototype(value, null);
+  Object.freeze(value);
+  rawJsonValues.add(value);
+  return value;
+}
+function isRawJson(value) {
+  return typeof value === "object" && value !== null && rawJsonValues.has(value);
+}
+
+// packages/safe-js/src/interp/values.ts
+import { types as nodeTypes } from "node:util";
+
+// packages/safe-js/src/interp/promise-tracker.ts
+import { AsyncLocalStorage } from "node:async_hooks";
+var SandboxPromiseRejectionTracker = class {
+  records = /* @__PURE__ */ new Set();
+  recordsByPromise = /* @__PURE__ */ new WeakMap();
+  fatalRejection;
+  fatalWaiters = /* @__PURE__ */ new Set();
+  get failure() {
+    return this.fatalRejection;
+  }
+  onFatalRejection(interrupt) {
+    if (this.fatalRejection === void 0) this.fatalWaiters.add(interrupt);
+    else interrupt(this.fatalRejection);
+    return () => this.fatalWaiters.delete(interrupt);
+  }
+  interruptOnFatalRejection(pending) {
+    return new Promise((resolve, reject) => {
+      const detach = this.onFatalRejection(reject);
+      pending.then(
+        (value) => {
+          detach();
+          resolve(value);
+        },
+        (reason) => {
+          detach();
+          reject(reason);
+        }
+      );
+    });
+  }
+  observe(promise) {
+    const record3 = this.recordsByPromise.get(promise);
+    if (record3 !== void 0) {
+      record3.observed = true;
+    }
+  }
+  track(promise, outcome) {
+    const existing = this.recordsByPromise.get(promise);
+    if (existing !== void 0 && outcome === void 0) {
+      return;
+    }
+    const record3 = existing ?? {
+      observed: false,
+      promise,
+      rejected: false
+    };
+    this.records.add(record3);
+    this.recordsByPromise.set(promise, record3);
+    const pending = outcome ?? promise.promise;
+    pending.then(
+      () => void 0,
+      (reason) => {
+        if (this.fatalRejection === void 0 && reason instanceof SandboxError && (reason.code === "budgetExceeded" || reason.code === "reentry")) {
+          this.fatalRejection = reason;
+          for (const interrupt of this.fatalWaiters) interrupt(reason);
+          this.fatalWaiters.clear();
+        }
+        if (record3.rejected) return;
+        record3.rejected = true;
+        record3.rejectionReason = reason;
+      }
+    );
+    pending.catch(() => void 0);
+  }
+  async findUnhandledRejection() {
+    await flushPromiseJobs();
+    if (this.fatalRejection !== void 0) throw this.fatalRejection;
+    for (const record3 of this.records) {
+      if (record3.rejected && !record3.observed) {
+        return {
+          reason: record3.rejectionReason,
+          span: record3.promise.span
+        };
+      }
+    }
+    return void 0;
+  }
+};
+var activePromiseTracker = new AsyncLocalStorage();
+var fatalRejectionCleanup = new AsyncLocalStorage();
+function assertPromiseExecutionAllowed() {
+  const failure = activePromiseTracker.getStore()?.failure;
+  if (failure !== void 0 && fatalRejectionCleanup.getStore() !== true) throw failure;
+}
+function onFatalPromiseRejection(interrupt) {
+  if (fatalRejectionCleanup.getStore() === true) return void 0;
+  return activePromiseTracker.getStore()?.onFatalRejection(interrupt);
+}
+function interruptOnFatalPromiseRejection(pending) {
+  if (fatalRejectionCleanup.getStore() === true) return pending;
+  return activePromiseTracker.getStore()?.interruptOnFatalRejection(pending) ?? pending;
+}
+function withFatalPromiseCleanup(callback) {
+  return fatalRejectionCleanup.run(true, callback);
 }
-function getSandboxPrototype(value, budget) {
-  if (prototypes.has(value)) return prototypes.get(value) ?? null;
-  if (budget !== void 0 && isSandboxRegex(value)) return regexPrototypes.get(budget) ?? null;
-  if (budget !== void 0 && isSandboxBox(value)) {
-    const prototype = getBoxedPrototype(boxedValue(value), budget);
-    if (prototype !== void 0 && prototype !== value) return prototype;
-  }
-  return budget !== void 0 && !isSandboxClosure(value) && isPrototypeRecord(value) ? intrinsicPrototypes.get(budget) ?? null : null;
+function createSandboxPromiseRejectionTracker() {
+  return new SandboxPromiseRejectionTracker();
 }
-function hasExplicitSandboxPrototype(value) {
-  return prototypes.has(value);
+function observeSandboxPromise(promise) {
+  activePromiseTracker.getStore()?.observe(promise);
 }
-function hasNullObjectPrototype(value) {
-  return prototypes.get(value) === null && !Array.isArray(value) && !isSandboxClosure(value) && !isSandboxRegex(value);
+function trackSandboxPromise(promise, outcome) {
+  activePromiseTracker.getStore()?.track(promise, outcome);
 }
-function getSandboxPropertyDescriptor(value, key, budget) {
-  const hostProperties = isSandboxClosure(value) ? value.properties : void 0;
-  if (isSandboxClosure(value) && !isGuestClosure(value))
-    return hostProperties === void 0 ? void 0 : Object.getOwnPropertyDescriptor(hostProperties, key);
-  let current = value;
-  let depth = 0;
-  while (typeof current === "object" && current !== null && (Array.isArray(current) || isSandboxDate(current) || isSandboxRegex(current) || isPrototypeRecord(current))) {
-    const properties = isGuestClosure(current) ? getGuestFunctionProperties(current) : isSandboxRegex(current) ? getRegexProperties(current) : current;
-    const descriptor = properties === void 0 ? void 0 : Object.getOwnPropertyDescriptor(properties, key);
-    if (descriptor !== void 0) return descriptor;
-    current = getSandboxPrototype(current, budget);
-    if (current !== null) {
-      budget?.visitNode();
-      assertSandboxDataDepth(++depth);
-    }
+function withSandboxPromiseRejectionTracker(tracker, callback) {
+  return activePromiseTracker.run(tracker, callback);
+}
+async function flushPromiseJobs() {
+  for (let index = 0; index < 20; index += 1) {
+    await Promise.resolve();
   }
-  return void 0;
 }
-function getSandboxDataProperty(value, key, budget) {
-  let current = value;
-  let depth = 0;
-  while (typeof current === "object" && current !== null) {
-    if (isGuestHostObject(current)) return typeof key === "symbol" ? void 0 : getHostObjectMember(current, String(key));
-    if (isSandboxRegex(current)) return Object.getOwnPropertyDescriptor(getRegexProperties(current), key)?.value;
-    if (isGuestClosure(current)) {
-      const entry = getGuestFunctionProperty(current, key);
-      if (entry !== void 0 || Object.hasOwn(current.properties ?? {}, key)) return entry;
-    } else if (isSandboxClosure(current)) {
-      const properties = current.properties;
-      return properties !== void 0 && Object.hasOwn(properties, key) ? properties[key] : void 0;
-    }
-    if (isSandboxMap(current) || isSandboxSet(current) || isSandboxPromise(current) || isSandboxRegex(current) || isSandboxGenerator(current))
-      return void 0;
-    if (!isSandboxClosure(current) && Object.hasOwn(current, key)) return current[key];
-    current = getSandboxPrototype(current, budget);
-    if (current !== null) {
-      budget?.visitNode();
-      assertSandboxDataDepth(++depth);
-    }
+
+// packages/safe-js/src/interp/promise-replay.ts
+import { AsyncLocalStorage as AsyncLocalStorage5 } from "node:async_hooks";
+
+// packages/safe-js/src/snapshot/bigint.ts
+function validateBigIntData(value) {
+  if (typeof value !== "string" || value.length === 0) throw new TypeError("Invalid BigInt snapshot value.");
+  if (value === "0") return;
+  const start = value[0] === "-" ? 1 : 0;
+  if (start === value.length || value[start] === "0") throw new TypeError("Invalid BigInt snapshot value.");
+  for (let index = start; index < value.length; index++) {
+    const code = value.charCodeAt(index);
+    if (code < 48 || code > 57) throw new TypeError("Invalid BigInt snapshot value.");
   }
-  return void 0;
 }
-function setSandboxPrototype(value, prototype, budget) {
-  if (budget !== void 0 && intrinsicPrototypes.get(budget) === value && prototype !== null) {
-    throw new TypeError("Object.prototype has an immutable null prototype.");
+
+// packages/safe-js/src/snapshot/symbols.ts
+function symbolData(value) {
+  const wellKnown = Object.keys(wellKnownSymbols).find((key) => wellKnownSymbols[key] === value);
+  return {
+    kind: "symbol",
+    ...wellKnown === void 0 ? value.description === void 0 ? {} : { description: value.description } : { wellKnown }
+  };
+}
+function serializeSymbol(value, heapIds, heap) {
+  let id = heapIds.get(value);
+  if (id === void 0) {
+    id = heapIds.size + 1;
+    heapIds.set(value, id);
+    heap[String(id)] = symbolData(value);
   }
-  if (!Array.isArray(value) && !isSandboxRegex(value) && !isPrototypeRecord(value) || prototype !== null && !Array.isArray(prototype) && !isPrototypeRecord(prototype)) {
-    throw new TypeError(
-      "Prototype links require ordinary sandbox objects, arrays, or guest functions."
-    );
+  return { kind: "ref", id };
+}
+function ownSerializableSymbolKeys(value) {
+  return Object.getOwnPropertySymbols(value).filter((key) => !internalSymbols.has(key));
+}
+function serializeSymbolProperties(value, encode) {
+  return ownSerializableSymbolKeys(value).map((key) => {
+    const descriptor = Object.getOwnPropertyDescriptor(value, key);
+    if (!("value" in descriptor)) throw new TypeError("Symbol accessor properties cannot be serialized.");
+    return [encode(key), { value: encode(descriptor.value), enumerable: descriptor.enumerable === true, writable: descriptor.writable === true, configurable: descriptor.configurable === true }];
+  });
+}
+function restoreSymbolProperties(target, entries, decode) {
+  for (const [key, descriptor] of entries ?? []) {
+    const symbol = decode(key);
+    if (typeof symbol !== "symbol") throw new TypeError("Expected a symbol property key");
+    Object.defineProperty(target, symbol, { ...descriptor, value: decode(descriptor.value) });
   }
-  if (prototypes.has(value) && getSandboxPrototype(value, budget) === prototype) return;
-  if (!Object.isExtensible(isGuestClosure(value) ? materializeFunctionProperties(value) : isSandboxRegex(value) ? getRegexProperties(value) : value)) {
-    throw new TypeError("Cannot change the prototype of a non-extensible object.");
+}
+
+// packages/safe-js/src/snapshot/regexp-properties.ts
+function hasCustomRegexProperties(value) {
+  const properties = getRegexProperties(value);
+  return Reflect.ownKeys(properties).length !== 1 || !Object.isExtensible(properties) || Object.getOwnPropertyDescriptor(properties, "lastIndex")?.writable !== true;
+}
+function serializeRegexProperties(value, encode) {
+  if (!hasCustomRegexProperties(value)) return {};
+  const source = getRegexProperties(value);
+  const properties = /* @__PURE__ */ Object.create(null);
+  for (const key of Object.getOwnPropertyNames(source)) {
+    const descriptor = Object.getOwnPropertyDescriptor(source, key);
+    if (!("value" in descriptor)) throw new TypeError("RegExp accessor properties cannot be serialized as data.");
+    properties[key] = {
+      value: encode(descriptor.value),
+      enumerable: descriptor.enumerable === true,
+      configurable: descriptor.configurable === true,
+      writable: descriptor.writable === true
+    };
   }
-  let depth = 0;
-  for (let current = prototype; current !== null; current = getSandboxPrototype(current, budget)) {
-    budget?.visitNode();
-    assertSandboxDataDepth(depth++);
-    if (current === value) throw new TypeError("Cyclic prototype value.");
+  const symbolEntries = serializeSymbolProperties(source, encode);
+  return {
+    properties,
+    ...symbolEntries.length === 0 ? {} : { symbolEntries },
+    ...Object.isExtensible(source) ? {} : { extensible: false }
+  };
+}
+function validateRegexProperties(data) {
+  const descriptor = (value) => {
+    if (typeof value !== "object" || value === null || Array.isArray(value) || !Object.hasOwn(value, "value") || !["enumerable", "configurable", "writable"].every((key) => Object.hasOwn(value, key) && typeof value[key] === "boolean") || Object.keys(value).some((key) => !["value", "enumerable", "configurable", "writable"].includes(key)))
+      throw new TypeError("Invalid RegExp data property descriptor.");
+  };
+  if (data.extensible !== void 0 && typeof data.extensible !== "boolean")
+    throw new TypeError("Invalid RegExp extensibility.");
+  if (data.properties !== void 0) {
+    if (typeof data.properties !== "object" || data.properties === null || Array.isArray(data.properties))
+      throw new TypeError("Invalid RegExp property data.");
+    for (const entry of Object.values(data.properties)) descriptor(entry);
+  }
+  if (data.symbolEntries !== void 0) {
+    if (!Array.isArray(data.symbolEntries)) throw new TypeError("Invalid RegExp symbol properties.");
+    for (const entry of data.symbolEntries) {
+      if (!Array.isArray(entry) || entry.length !== 2) throw new TypeError("Invalid RegExp symbol property.");
+      descriptor(entry[1]);
+    }
   }
-  prototypes.set(value, prototype);
 }
-function isPrototypeRecord(value) {
-  if (isGuestClosure(value)) return true;
-  if (isGuestHostObject(value)) return false;
-  if (isSandboxClosure(value) || isSandboxGenerator(value) || isSandboxMap(value) || isSandboxPromise(value) || isSandboxRegex(value) || isSandboxSet(value))
-    return false;
-  const prototype = Object.getPrototypeOf(value);
-  return prototype === null || prototype === Object.prototype;
+function restoreRegexProperties(value, data, decode) {
+  validateRegexProperties(data);
+  const properties = getRegexProperties(value);
+  for (const [key, descriptor] of Object.entries(data.properties ?? {}))
+    Object.defineProperty(properties, key, { ...descriptor, value: decode(descriptor.value) });
+  restoreSymbolProperties(properties, data.symbolEntries, decode);
+  if (data.extensible === false) Object.preventExtensions(properties);
 }
-function markDescriptorObject(value) {
-  descriptorObjects.add(value);
+
+// packages/safe-js/src/snapshot/validation.ts
+import { types as types6 } from "node:util";
+
+// packages/safe-js/src/interp/closure-origin.ts
+var origins = /* @__PURE__ */ new WeakMap();
+var generatorOrigins = /* @__PURE__ */ new WeakMap();
+function registerClosureOrigin(closure, node, context) {
+  origins.set(closure, { node, scope: context.scope, environment: context.functionEnvironment });
 }
-function hasManagedDescriptors(value) {
-  return descriptorObjects.has(value);
+function getClosureOrigin(value) {
+  return origins.get(value);
 }
-function hasGuestObjectState(value) {
-  const intrinsicUnchanged = intrinsicConstructors.get(value);
-  if (intrinsicUnchanged !== void 0) return !intrinsicUnchanged();
-  if (isLiveCapability(value)) return true;
-  if (functionProperties.has(value) || prototypes.has(value) && !hasNullObjectPrototype(value)) return true;
-  if (isSandboxBox(value) || isSandboxDate(value)) return false;
-  return descriptorObjects.has(value) && Object.values(Object.getOwnPropertyDescriptors(value)).some(
-    (descriptor) => !descriptor.enumerable || !descriptor.configurable || !descriptor.writable
-  );
+function registerGeneratorOrigin(generator, node, scope, context) {
+  const origin = { node, scope, closureScope: context.scope, environment: context.functionEnvironment };
+  generatorOrigins.set(generator, origin);
+  return origin;
+}
+function getGeneratorOrigin(value) {
+  return generatorOrigins.get(value);
 }
 
 // packages/safe-js/src/interp/scope.ts
@@ -12534,12 +12551,12 @@ function createObjectArrayGlobals(options) {
           }),
           fromCharCode: createSandboxClosure({
             sandbox: true,
-            call: (args) => options.budget.allocateString(Reflect.apply(String.fromCharCode, String, [...args])),
+            call: (args, context) => stringFromCodes(args, String.fromCharCode, options.budget, context),
             name: "fromCharCode"
           }),
           fromCodePoint: createSandboxClosure({
             sandbox: true,
-            call: (args) => options.budget.allocateString(Reflect.apply(String.fromCodePoint, String, [...args])),
+            call: (args, context) => stringFromCodes(args, String.fromCodePoint, options.budget, context),
             name: "fromCodePoint"
           })
         }
@@ -12931,6 +12948,32 @@ function budgetSandboxValue2(value, budget) {
   const sandboxValue = deepCopyToSandbox(value);
   return allocateProducedSandboxValue(sandboxValue, budget);
 }
+function stringFromCodes(args, convert, budget, context) {
+  let result = "";
+  let index = 0;
+  const release = retainValues(budget, () => [...args, result]);
+  try {
+    const output = advance();
+    if (typeof output !== "string") return output.finally(release);
+    release();
+    return output;
+  } catch (error) {
+    release();
+    throw error;
+  }
+  function advance() {
+    while (index < args.length) {
+      budget.visitNode();
+      const number = sandboxNumber(args[index++], budget, context);
+      if (number instanceof Promise) return number.then((value) => {
+        result = budget.allocateString(result + convert(value));
+        return advance();
+      });
+      result = budget.allocateString(result + convert(number));
+    }
+    return result;
+  }
+}
 function stringRaw(args, budget, context) {
   const [template, ...substitutions] = args;
   if (context?.getProperty !== void 0)
@@ -18733,6 +18776,8 @@ function encodeReplayData(value, options = {}) {
         id: capabilityId,
         properties: child(entry.properties, "properties")
       };
+    } else if (isRawJson(entry)) {
+      nodes[id] = { kind: "raw-json", text: entry.rawJSON };
     } else if (nativeBoxedValue(entry) !== void 0) {
       const properties = /* @__PURE__ */ Object.create(null);
       let symbolIndex = 0;
@@ -18969,6 +19014,13 @@ function decodeReplayData(input, options = {}, parent) {
         if (!node.extensible) Object.preventExtensions(result3);
         return result3;
       }
+      if (kind === "raw-json") {
+        if (Object.keys(node).some((key) => !["kind", "text"].includes(key)) || typeof own(node, "text") !== "string")
+          throw new TypeError("Invalid replay raw JSON fields.");
+        const result3 = createRawJson(own(node, "text"));
+        restored.set(id, result3);
+        return result3;
+      }
       if (kind === "date") {
         if (Object.keys(node).some((key) => !["kind", "time", "properties", "symbolProperties", "extensible"].includes(key))) throw new TypeError("Invalid serialized Date fields.");
         if (node.extensible !== void 0 && typeof node.extensible !== "boolean") throw new TypeError("Invalid replay Date extensibility.");
@@ -21049,6 +21101,7 @@ function syncIterator(iterator) {
 
 // packages/safe-js/src/snapshot/guest-heap.ts
 function captureGuestHeapNode(value, encode) {
+  if (isRawJson(value)) return { kind: "raw-json", text: value.rawJSON };
   const intrinsic = getIntrinsicIdentity(value);
   if (intrinsic !== void 0) {
     const state2 = captureObjectState(value, encode);
@@ -21685,6 +21738,22 @@ function createConsoleJsonGlobals(options) {
   const sink = options.sink ?? console;
   return {
     JSON: {
+      rawJSON: createSandboxClosure({
+        sandbox: true,
+        name: "rawJSON",
+        length: 1,
+        call: async ([value], context) => {
+          const text = await sandboxString(value, options.budget, context);
+          options.budget.visitNode(text.length);
+          return createRawJson(options.budget.allocateString(text));
+        }
+      }),
+      isRawJSON: createSandboxClosure({
+        sandbox: true,
+        name: "isRawJSON",
+        length: 1,
+        call: ([value]) => isRawJson(value)
+      }),
       parse: createSandboxClosure({
         sandbox: true,
         length: 2,
@@ -21839,6 +21908,7 @@ async function stringifyProperty(key, holder, state, indent = "") {
   }
 }
 async function stringifyValue(value, state, indent) {
+  if (isRawJson(value)) return value.rawJSON;
   if (isSandboxBox(value)) {
     const primitive = boxedValue(value);
     value = typeof primitive === "number" ? await sandboxNumber(value, state.budget, state.context) : typeof primitive === "string" ? await sandboxString(value, state.budget, state.context) : typeof primitive === "symbol" ? value : primitive;
@@ -22812,6 +22882,12 @@ function absent(value) {
 }
 function validateGuestHeapNode(raw, heap, maxArrayLength = 4294967295) {
   const node = record2(raw);
+  if (node.kind === "raw-json") {
+    fields(node, ["kind", "text"]);
+    if (typeof node.text !== "string") throw new TypeError("Invalid raw JSON source.");
+    createRawJson(node.text);
+    return true;
+  }
   if (!["intrinsic", "guest-function", "guest-generator", "scope-frame", "guest-object", "guest-array"].includes(String(node.kind))) return false;
   const reference = (value, kinds) => {
     const ref = record2(value);
@@ -24792,6 +24868,13 @@ function copyToSandbox(value, state, path = "<root>", cloneSandboxCollections =
     return value;
   }
   if (isLiveCapability(value)) throw new TypeError("Live capabilities require their owning realm bridge.");
+  if (isRawJson(value)) {
+    const existing = state.seen.get(value);
+    if (existing !== void 0) return existing;
+    const copy = createRawJson(value.rawJSON);
+    state.seen.set(value, copy);
+    return copy;
+  }
   if (isSandboxRegex(value)) {
     if (!cloneSandboxCollections) return value;
     const existing = state.seen.get(value);
@@ -39464,4 +39547,4 @@ export {
   FileSnapshotBackend,
   run
 };
-//# sourceMappingURL=chunk-SIFD2ANX.js.map
+//# sourceMappingURL=chunk-FAZ46PGV.js.map