@poe-platform/safe-js 0.1.299 → 0.1.300

package/dist/safe-js/chunks/{chunk-FTBN4WF3.js → chunk-JBOD6COV.js}

@@ -27,7 +27,7 @@ import {
   validateMigrationSemantics,
   validateSnapshotData,
   validateSnapshotMigration
-} from "./chunk-3QW2X67U.js";
+} from "./chunk-ONR2CYEH.js";
 
 // packages/safe-js/src/migrate.ts
 import { createHash } from "node:crypto";
@@ -8249,4 +8249,4 @@ export {
   parseMcpConfig,
   makeMcpModule
 };
-//# sourceMappingURL=chunk-FTBN4WF3.js.map
+//# sourceMappingURL=chunk-JBOD6COV.js.map

package/dist/safe-js/chunks/{chunk-3QW2X67U.js → chunk-ONR2CYEH.js}

@@ -7398,6 +7398,55 @@ function graphEntries(value) {
   return entries;
 }
 
+// packages/safe-js/src/interp/resources.ts
+import { AsyncLocalStorage } from "node:async_hooks";
+var runResources = new AsyncLocalStorage();
+function retainValues(budget, values) {
+  const retained = {};
+  budget.setRetainedValues(retained, values);
+  const pending = runResources.getStore()?.referenceReleases;
+  const release = () => {
+    budget.setRetainedValues(retained, void 0);
+    pending?.delete(release);
+  };
+  pending?.add(release);
+  return release;
+}
+async function withRunResources(signal, execute) {
+  const controller = new AbortController();
+  const cancel = () => controller.abort(signal?.reason);
+  const cleanups = /* @__PURE__ */ new Set();
+  const resources = {
+    signal: controller.signal,
+    referenceReleases: /* @__PURE__ */ new Set(),
+    add(close) {
+      cleanups.add(close);
+    }
+  };
+  signal?.addEventListener("abort", cancel, { once: true });
+  if (signal?.aborted) cancel();
+  let result;
+  let failure;
+  let errors = [];
+  try {
+    result = await runResources.run(resources, execute);
+  } catch (error) {
+    failure = { reason: error };
+  } finally {
+    signal?.removeEventListener("abort", cancel);
+    controller.abort(new Error("SafeJS run finished."));
+    for (const release of resources.referenceReleases) release();
+    resources.referenceReleases.clear();
+    const outcomes = await Promise.allSettled(
+      [...cleanups].map((close) => Promise.resolve().then(close))
+    );
+    errors = outcomes.flatMap((outcome) => outcome.status === "rejected" ? [outcome.reason] : []);
+  }
+  if (failure !== void 0) throw failure.reason;
+  if (errors.length > 0) throw new AggregateError(errors, "SafeJS resource cleanup failed.");
+  return result;
+}
+
 // packages/safe-js/src/interp/symbols.ts
 var wellKnownSymbols = Object.freeze({
   iterator: Symbol.iterator,
@@ -7821,6 +7870,7 @@ var collectionPrototypes = /* @__PURE__ */ new WeakMap();
 var promisePrototypes = /* @__PURE__ */ new WeakMap();
 var datePrototypes = /* @__PURE__ */ new WeakMap();
 var arrayPrototypes = /* @__PURE__ */ new WeakMap();
+var functionPrototypes = /* @__PURE__ */ new WeakMap();
 var initialArrayMethods = /* @__PURE__ */ new WeakMap();
 var initialRegexDescriptors = /* @__PURE__ */ new WeakMap();
 var intrinsicPrototypeRoots = /* @__PURE__ */ new WeakMap();
@@ -7876,6 +7926,12 @@ function installObjectPrototype(budget, prototype, constructor) {
   intrinsicPrototypes.set(budget, prototype);
   registerIntrinsicPrototype(budget, prototype, constructor);
 }
+function installFunctionPrototype(budget, prototype) {
+  functionPrototypes.set(budget, prototype);
+  registerBuiltinIdentities(budget, { "%FunctionPrototype%": prototype });
+  registerIntrinsicFunction(budget, prototype);
+  registerIntrinsicObject(budget, materializeFunctionProperties(prototype));
+}
 function installBoxedPrototype(budget, prototype, constructor, kind = typeof boxedValue(prototype)) {
   let state = boxedPrototypes.get(budget);
   if (state === void 0) boxedPrototypes.set(budget, state = /* @__PURE__ */ new Map());
@@ -8000,11 +8056,14 @@ function releaseObjectPrototype(budget) {
   promisePrototypes.delete(budget);
   datePrototypes.delete(budget);
   arrayPrototypes.delete(budget);
+  functionPrototypes.delete(budget);
   initialRegexDescriptors.delete(budget);
   intrinsicPrototypes.delete(budget);
 }
 function getSandboxPrototype(value, budget) {
   if (prototypes.has(value)) return prototypes.get(value) ?? null;
+  if (budget !== void 0 && isGuestClosure(value) && runResources.getStore()?.functionSourceText !== false)
+    return functionPrototypes.get(budget) ?? null;
   if (budget !== void 0 && Array.isArray(value)) return arrayPrototypes.get(budget) ?? null;
   if (budget !== void 0 && isSandboxDate(value)) return datePrototypes.get(budget) ?? null;
   if (budget !== void 0 && isSandboxPromise(value)) return promisePrototypes.get(budget) ?? null;
@@ -8030,7 +8089,14 @@ function getSandboxPropertyDescriptor(value, key, budget) {
   let current = value;
   let depth = 0;
   while (typeof current === "object" && current !== null && (Array.isArray(current) || isSandboxGenerator(current) || isSandboxDate(current) || isSandboxPromise(current) || isSandboxRegex(current) || isSandboxMap(current) || isSandboxSet(current) || isPrototypeRecord(current))) {
-    const properties = isSandboxGenerator(current) ? getGeneratorProperties(current) : isSandboxPromise(current) ? getPromiseProperties(current) : isGuestClosure(current) ? getGuestFunctionProperties(current) : isSandboxRegex(current) ? getRegexProperties(current) : isSandboxMap(current) || isSandboxSet(current) ? getCollectionProperties(current) : current;
+    const properties = isSandboxGenerator(current) ? getGeneratorProperties(current) : isSandboxPromise(current) ? getPromiseProperties(current) : isGuestClosure(current) ? key === "prototype" && current.construct !== void 0 && current.boundTarget === void 0 ? materializeFunctionProperties(current) : getGuestFunctionProperties(current) : isSandboxRegex(current) ? getRegexProperties(current) : isSandboxMap(current) || isSandboxSet(current) ? getCollectionProperties(current) : current;
+    if (properties === void 0 && isGuestClosure(current) && (key === "name" || key === "length"))
+      return {
+        value: key === "name" ? current.name ?? "" : current.length ?? 0,
+        writable: false,
+        enumerable: false,
+        configurable: true
+      };
     const descriptor = properties === void 0 ? void 0 : Object.getOwnPropertyDescriptor(properties, key);
     if (descriptor !== void 0) return descriptor;
     current = getSandboxPrototype(current, budget);
@@ -8141,7 +8207,7 @@ function isRawJson(value) {
 import { types as nodeTypes } from "node:util";
 
 // packages/safe-js/src/interp/promise-tracker.ts
-import { AsyncLocalStorage } from "node:async_hooks";
+import { AsyncLocalStorage as AsyncLocalStorage2 } from "node:async_hooks";
 var SandboxPromiseRejectionTracker = class {
   records = /* @__PURE__ */ new Set();
   recordsByPromise = /* @__PURE__ */ new WeakMap();
@@ -8218,8 +8284,8 @@ var SandboxPromiseRejectionTracker = class {
     return void 0;
   }
 };
-var activePromiseTracker = new AsyncLocalStorage();
-var fatalRejectionCleanup = new AsyncLocalStorage();
+var activePromiseTracker = new AsyncLocalStorage2();
+var fatalRejectionCleanup = new AsyncLocalStorage2();
 function assertPromiseExecutionAllowed() {
   const failure = activePromiseTracker.getStore()?.failure;
   if (failure !== void 0 && fatalRejectionCleanup.getStore() !== true) throw failure;
@@ -8781,55 +8847,6 @@ function isLineTerminator(character) {
   return character === "\n" || character === "\r" || character === "\u2028" || character === "\u2029";
 }
 
-// packages/safe-js/src/interp/resources.ts
-import { AsyncLocalStorage as AsyncLocalStorage2 } from "node:async_hooks";
-var runResources = new AsyncLocalStorage2();
-function retainValues(budget, values) {
-  const retained = {};
-  budget.setRetainedValues(retained, values);
-  const pending = runResources.getStore()?.referenceReleases;
-  const release = () => {
-    budget.setRetainedValues(retained, void 0);
-    pending?.delete(release);
-  };
-  pending?.add(release);
-  return release;
-}
-async function withRunResources(signal, execute) {
-  const controller = new AbortController();
-  const cancel = () => controller.abort(signal?.reason);
-  const cleanups = /* @__PURE__ */ new Set();
-  const resources = {
-    signal: controller.signal,
-    referenceReleases: /* @__PURE__ */ new Set(),
-    add(close) {
-      cleanups.add(close);
-    }
-  };
-  signal?.addEventListener("abort", cancel, { once: true });
-  if (signal?.aborted) cancel();
-  let result;
-  let failure;
-  let errors = [];
-  try {
-    result = await runResources.run(resources, execute);
-  } catch (error) {
-    failure = { reason: error };
-  } finally {
-    signal?.removeEventListener("abort", cancel);
-    controller.abort(new Error("SafeJS run finished."));
-    for (const release of resources.referenceReleases) release();
-    resources.referenceReleases.clear();
-    const outcomes = await Promise.allSettled(
-      [...cleanups].map((close) => Promise.resolve().then(close))
-    );
-    errors = outcomes.flatMap((outcome) => outcome.status === "rejected" ? [outcome.reason] : []);
-  }
-  if (failure !== void 0) throw failure.reason;
-  if (errors.length > 0) throw new AggregateError(errors, "SafeJS resource cleanup failed.");
-  return result;
-}
-
 // packages/safe-js/src/interp/bigint-operators.ts
 function bigIntOperation(operator, left, right, budget) {
   if (operator === ">>>") throw new TypeError("BigInts have no unsigned right shift.");
@@ -13973,7 +13990,7 @@ function getFunctionMember(target, property, options) {
     } else if (Object.hasOwn(current, String(property))) {
       return current[String(property)];
     }
-    if (isSandboxClosure(current) && !hasExplicitSandboxPrototype(current)) break;
+    if (isSandboxClosure(current) && !hasExplicitSandboxPrototype(current) && getSandboxPrototype(current, options.budget) === null) break;
     current = getSandboxPrototype(current, options.budget);
     if (current !== null) {
       options.budget?.visitNode();
@@ -18312,7 +18329,7 @@ async function objectToPrimitive(value, budget, context, joining, hint, ordinary
   }
 }
 function conversionHook(value, name, budget, context) {
-  const implicitBuiltin = !hasExplicitSandboxPrototype(value) && (Array.isArray(value) && getSandboxPrototype(value, budget) === null || isFloat32Array(value) || sandboxErrorTypes.has(value) || isSandboxClosure(value) || isSandboxMap(value) || isSandboxSet(value) || isSandboxCollectionIterator(value) || isSandboxRegExpIterator(value) || isSandboxPromise(value) || isSandboxRegex(value) && getSandboxPrototype(value, budget) === null || isSandboxGenerator(value) || isGuestHostObject(value));
+  const implicitBuiltin = !hasExplicitSandboxPrototype(value) && (Array.isArray(value) && getSandboxPrototype(value, budget) === null || isFloat32Array(value) || sandboxErrorTypes.has(value) || isSandboxClosure(value) && getSandboxPrototype(value, budget) === null || isSandboxMap(value) || isSandboxSet(value) || isSandboxCollectionIterator(value) || isSandboxRegExpIterator(value) || isSandboxPromise(value) || isSandboxRegex(value) && getSandboxPrototype(value, budget) === null || isSandboxGenerator(value) || isGuestHostObject(value));
   let current = value;
   let depth = 0;
   while (current !== null) {
@@ -23901,6 +23918,31 @@ function createUriGlobals(budget) {
   }));
 }
 
+// packages/safe-js/src/interp/globals/function.ts
+function createFunctionPrototype(budget) {
+  const prototype = createSandboxClosure({ guest: true, sandbox: true, name: "", length: 0, call: () => void 0 });
+  const properties = materializeFunctionProperties(prototype);
+  Object.defineProperty(properties, "constructor", { value: void 0, writable: true, configurable: true });
+  for (const [name, length] of [["call", 1], ["apply", 2], ["bind", 1], ["toString", 0]]) {
+    Object.defineProperty(properties, name, {
+      writable: true,
+      configurable: true,
+      value: createSandboxClosure({
+        guest: true,
+        sandbox: true,
+        name,
+        length,
+        call: (args, context) => callFunctionMethod(context?.thisValue, name, args, {
+          budget,
+          callClosure: (target, values, stack, thisValue, construct, newTarget) => context?.invokeClosure !== void 0 ? context.invokeClosure(target, values, thisValue, construct, newTarget) : invokeBuiltinClosure(target, values, budget, { ...context, stack, thisValue, newTarget }, thisValue, construct)
+        }, context?.stack ?? [], context)
+      })
+    });
+  }
+  setSandboxPrototype(prototype, getSandboxPrototype(/* @__PURE__ */ Object.create(null), budget));
+  installFunctionPrototype(budget, prototype);
+}
+
 // packages/safe-js/src/interp/globals/symbol.ts
 var registries = /* @__PURE__ */ new WeakMap();
 function createSymbolGlobal(budget) {
@@ -24131,6 +24173,7 @@ function createBuiltinBindings(options) {
     ...createPromiseGlobals(options),
     ...createRegexGlobals(options)
   };
+  createFunctionPrototype(options.budget);
   registerBuiltinIdentities(options.budget, bindings);
   return bindings;
 }
@@ -40948,12 +40991,12 @@ export {
   safeAddEvent,
   safeRecordException,
   safeEndSpan,
+  runResources,
   defineExtension,
   encodeReplayData,
   HostOperationResumePolicyError,
   registerPendingHostCallPolicy,
   HostCallResumabilityError,
-  runResources,
   assertSnapshotInactive,
   isSandboxClosure,
   deepCopyToSandbox,
@@ -40981,4 +41024,4 @@ export {
   FileSnapshotBackend,
   run
 };
-//# sourceMappingURL=chunk-3QW2X67U.js.map
+//# sourceMappingURL=chunk-ONR2CYEH.js.map