@poe-platform/safe-js 0.1.299 → 0.1.301

package/dist/safe-js/chunks/{chunk-3QW2X67U.js → chunk-M4L3EZHL.js}

@@ -7398,6 +7398,55 @@ function graphEntries(value) {
   return entries;
 }
 
+// packages/safe-js/src/interp/resources.ts
+import { AsyncLocalStorage } from "node:async_hooks";
+var runResources = new AsyncLocalStorage();
+function retainValues(budget, values) {
+  const retained = {};
+  budget.setRetainedValues(retained, values);
+  const pending = runResources.getStore()?.referenceReleases;
+  const release = () => {
+    budget.setRetainedValues(retained, void 0);
+    pending?.delete(release);
+  };
+  pending?.add(release);
+  return release;
+}
+async function withRunResources(signal, execute) {
+  const controller = new AbortController();
+  const cancel = () => controller.abort(signal?.reason);
+  const cleanups = /* @__PURE__ */ new Set();
+  const resources = {
+    signal: controller.signal,
+    referenceReleases: /* @__PURE__ */ new Set(),
+    add(close) {
+      cleanups.add(close);
+    }
+  };
+  signal?.addEventListener("abort", cancel, { once: true });
+  if (signal?.aborted) cancel();
+  let result;
+  let failure;
+  let errors = [];
+  try {
+    result = await runResources.run(resources, execute);
+  } catch (error) {
+    failure = { reason: error };
+  } finally {
+    signal?.removeEventListener("abort", cancel);
+    controller.abort(new Error("SafeJS run finished."));
+    for (const release of resources.referenceReleases) release();
+    resources.referenceReleases.clear();
+    const outcomes = await Promise.allSettled(
+      [...cleanups].map((close) => Promise.resolve().then(close))
+    );
+    errors = outcomes.flatMap((outcome) => outcome.status === "rejected" ? [outcome.reason] : []);
+  }
+  if (failure !== void 0) throw failure.reason;
+  if (errors.length > 0) throw new AggregateError(errors, "SafeJS resource cleanup failed.");
+  return result;
+}
+
 // packages/safe-js/src/interp/symbols.ts
 var wellKnownSymbols = Object.freeze({
   iterator: Symbol.iterator,
@@ -7813,6 +7862,7 @@ function namedKeys(state) {
 // packages/safe-js/src/interp/object-model.ts
 var guestClosures = /* @__PURE__ */ new WeakSet();
 var functionProperties = /* @__PURE__ */ new WeakMap();
+var functionPropertyRevisions = /* @__PURE__ */ new WeakMap();
 var prototypes = /* @__PURE__ */ new WeakMap();
 var intrinsicPrototypes = /* @__PURE__ */ new WeakMap();
 var boxedPrototypes = /* @__PURE__ */ new WeakMap();
@@ -7821,6 +7871,7 @@ var collectionPrototypes = /* @__PURE__ */ new WeakMap();
 var promisePrototypes = /* @__PURE__ */ new WeakMap();
 var datePrototypes = /* @__PURE__ */ new WeakMap();
 var arrayPrototypes = /* @__PURE__ */ new WeakMap();
+var functionPrototypes = /* @__PURE__ */ new WeakMap();
 var initialArrayMethods = /* @__PURE__ */ new WeakMap();
 var initialRegexDescriptors = /* @__PURE__ */ new WeakMap();
 var intrinsicPrototypeRoots = /* @__PURE__ */ new WeakMap();
@@ -7856,9 +7907,23 @@ function materializeFunctionProperties(closure) {
     descriptorObjects.add(prototype);
     Object.defineProperty(properties, "prototype", { value: prototype, writable: true });
   }
-  descriptorObjects.add(properties);
-  functionProperties.set(closure, properties);
-  return properties;
+  const state = { revision: 0 };
+  const tracked = new Proxy(properties, {
+    defineProperty(target, key, descriptor) {
+      const changed = Reflect.defineProperty(target, key, descriptor);
+      if (changed) state.revision++;
+      return changed;
+    },
+    deleteProperty(target, key) {
+      const changed = Reflect.deleteProperty(target, key);
+      if (changed) state.revision++;
+      return changed;
+    }
+  });
+  functionPropertyRevisions.set(tracked, state);
+  descriptorObjects.add(tracked);
+  functionProperties.set(closure, tracked);
+  return tracked;
 }
 function getGuestFunctionProperty(closure, key) {
   let properties = functionProperties.get(closure);
@@ -7876,6 +7941,12 @@ function installObjectPrototype(budget, prototype, constructor) {
   intrinsicPrototypes.set(budget, prototype);
   registerIntrinsicPrototype(budget, prototype, constructor);
 }
+function installFunctionPrototype(budget, prototype) {
+  functionPrototypes.set(budget, prototype);
+  registerBuiltinIdentities(budget, { "%FunctionPrototype%": prototype });
+  registerIntrinsicFunction(budget, prototype);
+  registerIntrinsicObject(budget, materializeFunctionProperties(prototype));
+}
 function installBoxedPrototype(budget, prototype, constructor, kind = typeof boxedValue(prototype)) {
   let state = boxedPrototypes.get(budget);
   if (state === void 0) boxedPrototypes.set(budget, state = /* @__PURE__ */ new Map());
@@ -7962,6 +8033,9 @@ function trackIntrinsicState(budget, root, owner, targets) {
     explicit: hasExplicitSandboxPrototype(target)
   })).map((record4) => ({
     ...record4,
+    revision: functionPropertyRevisions.get(record4.value),
+    capturedRevision: -1,
+    captured: [],
     extensible: Object.isExtensible(record4.value),
     descriptors: new Map(Reflect.ownKeys(record4.value).map((key) => [key, Object.getOwnPropertyDescriptor(record4.value, key)]))
   }));
@@ -7977,14 +8051,21 @@ function trackIntrinsicState(budget, root, owner, targets) {
   );
   budget.setRetainedValues(root, () => {
     const retained = [];
-    for (const { target, value, descriptors: descriptors2, prototype: parent } of records) {
+    for (const record4 of records) {
+      const { target, value, descriptors: descriptors2, prototype: parent, revision } = record4;
       const currentPrototype = getSandboxPrototype(target);
       if (currentPrototype !== parent) retained.push(currentPrototype);
-      for (const key of Reflect.ownKeys(value)) {
-        const descriptor = Object.getOwnPropertyDescriptor(value, key);
-        if (unchanged(descriptors2.get(key), descriptor)) continue;
-        retained.push(key, descriptor.value, ...retainedAccessorClosures(descriptor));
+      if (revision === void 0 || revision.revision !== record4.capturedRevision) {
+        const captured = [];
+        for (const key of Reflect.ownKeys(value)) {
+          const descriptor = Object.getOwnPropertyDescriptor(value, key);
+          if (unchanged(descriptors2.get(key), descriptor)) continue;
+          captured.push(key, descriptor.value, ...retainedAccessorClosures(descriptor));
+        }
+        record4.captured = captured;
+        record4.capturedRevision = revision?.revision ?? -1;
       }
+      for (const item of record4.captured) retained.push(item);
     }
     return retained;
   });
@@ -8000,11 +8081,14 @@ function releaseObjectPrototype(budget) {
   promisePrototypes.delete(budget);
   datePrototypes.delete(budget);
   arrayPrototypes.delete(budget);
+  functionPrototypes.delete(budget);
   initialRegexDescriptors.delete(budget);
   intrinsicPrototypes.delete(budget);
 }
 function getSandboxPrototype(value, budget) {
   if (prototypes.has(value)) return prototypes.get(value) ?? null;
+  if (budget !== void 0 && isGuestClosure(value) && runResources.getStore()?.functionSourceText !== false)
+    return functionPrototypes.get(budget) ?? null;
   if (budget !== void 0 && Array.isArray(value)) return arrayPrototypes.get(budget) ?? null;
   if (budget !== void 0 && isSandboxDate(value)) return datePrototypes.get(budget) ?? null;
   if (budget !== void 0 && isSandboxPromise(value)) return promisePrototypes.get(budget) ?? null;
@@ -8030,7 +8114,14 @@ function getSandboxPropertyDescriptor(value, key, budget) {
   let current = value;
   let depth = 0;
   while (typeof current === "object" && current !== null && (Array.isArray(current) || isSandboxGenerator(current) || isSandboxDate(current) || isSandboxPromise(current) || isSandboxRegex(current) || isSandboxMap(current) || isSandboxSet(current) || isPrototypeRecord(current))) {
-    const properties = isSandboxGenerator(current) ? getGeneratorProperties(current) : isSandboxPromise(current) ? getPromiseProperties(current) : isGuestClosure(current) ? getGuestFunctionProperties(current) : isSandboxRegex(current) ? getRegexProperties(current) : isSandboxMap(current) || isSandboxSet(current) ? getCollectionProperties(current) : current;
+    const properties = isSandboxGenerator(current) ? getGeneratorProperties(current) : isSandboxPromise(current) ? getPromiseProperties(current) : isGuestClosure(current) ? key === "prototype" && current.construct !== void 0 && current.boundTarget === void 0 ? materializeFunctionProperties(current) : getGuestFunctionProperties(current) : isSandboxRegex(current) ? getRegexProperties(current) : isSandboxMap(current) || isSandboxSet(current) ? getCollectionProperties(current) : current;
+    if (properties === void 0 && isGuestClosure(current) && (key === "name" || key === "length"))
+      return {
+        value: key === "name" ? current.name ?? "" : current.length ?? 0,
+        writable: false,
+        enumerable: false,
+        configurable: true
+      };
     const descriptor = properties === void 0 ? void 0 : Object.getOwnPropertyDescriptor(properties, key);
     if (descriptor !== void 0) return descriptor;
     current = getSandboxPrototype(current, budget);
@@ -8141,7 +8232,7 @@ function isRawJson(value) {
 import { types as nodeTypes } from "node:util";
 
 // packages/safe-js/src/interp/promise-tracker.ts
-import { AsyncLocalStorage } from "node:async_hooks";
+import { AsyncLocalStorage as AsyncLocalStorage2 } from "node:async_hooks";
 var SandboxPromiseRejectionTracker = class {
   records = /* @__PURE__ */ new Set();
   recordsByPromise = /* @__PURE__ */ new WeakMap();
@@ -8218,8 +8309,8 @@ var SandboxPromiseRejectionTracker = class {
     return void 0;
   }
 };
-var activePromiseTracker = new AsyncLocalStorage();
-var fatalRejectionCleanup = new AsyncLocalStorage();
+var activePromiseTracker = new AsyncLocalStorage2();
+var fatalRejectionCleanup = new AsyncLocalStorage2();
 function assertPromiseExecutionAllowed() {
   const failure = activePromiseTracker.getStore()?.failure;
   if (failure !== void 0 && fatalRejectionCleanup.getStore() !== true) throw failure;
@@ -8781,55 +8872,6 @@ function isLineTerminator(character) {
   return character === "\n" || character === "\r" || character === "\u2028" || character === "\u2029";
 }
 
-// packages/safe-js/src/interp/resources.ts
-import { AsyncLocalStorage as AsyncLocalStorage2 } from "node:async_hooks";
-var runResources = new AsyncLocalStorage2();
-function retainValues(budget, values) {
-  const retained = {};
-  budget.setRetainedValues(retained, values);
-  const pending = runResources.getStore()?.referenceReleases;
-  const release = () => {
-    budget.setRetainedValues(retained, void 0);
-    pending?.delete(release);
-  };
-  pending?.add(release);
-  return release;
-}
-async function withRunResources(signal, execute) {
-  const controller = new AbortController();
-  const cancel = () => controller.abort(signal?.reason);
-  const cleanups = /* @__PURE__ */ new Set();
-  const resources = {
-    signal: controller.signal,
-    referenceReleases: /* @__PURE__ */ new Set(),
-    add(close) {
-      cleanups.add(close);
-    }
-  };
-  signal?.addEventListener("abort", cancel, { once: true });
-  if (signal?.aborted) cancel();
-  let result;
-  let failure;
-  let errors = [];
-  try {
-    result = await runResources.run(resources, execute);
-  } catch (error) {
-    failure = { reason: error };
-  } finally {
-    signal?.removeEventListener("abort", cancel);
-    controller.abort(new Error("SafeJS run finished."));
-    for (const release of resources.referenceReleases) release();
-    resources.referenceReleases.clear();
-    const outcomes = await Promise.allSettled(
-      [...cleanups].map((close) => Promise.resolve().then(close))
-    );
-    errors = outcomes.flatMap((outcome) => outcome.status === "rejected" ? [outcome.reason] : []);
-  }
-  if (failure !== void 0) throw failure.reason;
-  if (errors.length > 0) throw new AggregateError(errors, "SafeJS resource cleanup failed.");
-  return result;
-}
-
 // packages/safe-js/src/interp/bigint-operators.ts
 function bigIntOperation(operator, left, right, budget) {
   if (operator === ">>>") throw new TypeError("BigInts have no unsigned right shift.");
@@ -13973,7 +14015,7 @@ function getFunctionMember(target, property, options) {
     } else if (Object.hasOwn(current, String(property))) {
       return current[String(property)];
     }
-    if (isSandboxClosure(current) && !hasExplicitSandboxPrototype(current)) break;
+    if (isSandboxClosure(current) && !hasExplicitSandboxPrototype(current) && getSandboxPrototype(current, options.budget) === null) break;
     current = getSandboxPrototype(current, options.budget);
     if (current !== null) {
       options.budget?.visitNode();
@@ -18312,7 +18354,7 @@ async function objectToPrimitive(value, budget, context, joining, hint, ordinary
   }
 }
 function conversionHook(value, name, budget, context) {
-  const implicitBuiltin = !hasExplicitSandboxPrototype(value) && (Array.isArray(value) && getSandboxPrototype(value, budget) === null || isFloat32Array(value) || sandboxErrorTypes.has(value) || isSandboxClosure(value) || isSandboxMap(value) || isSandboxSet(value) || isSandboxCollectionIterator(value) || isSandboxRegExpIterator(value) || isSandboxPromise(value) || isSandboxRegex(value) && getSandboxPrototype(value, budget) === null || isSandboxGenerator(value) || isGuestHostObject(value));
+  const implicitBuiltin = !hasExplicitSandboxPrototype(value) && (Array.isArray(value) && getSandboxPrototype(value, budget) === null || isFloat32Array(value) || sandboxErrorTypes.has(value) || isSandboxClosure(value) && getSandboxPrototype(value, budget) === null || isSandboxMap(value) || isSandboxSet(value) || isSandboxCollectionIterator(value) || isSandboxRegExpIterator(value) || isSandboxPromise(value) || isSandboxRegex(value) && getSandboxPrototype(value, budget) === null || isSandboxGenerator(value) || isGuestHostObject(value));
   let current = value;
   let depth = 0;
   while (current !== null) {
@@ -23901,6 +23943,31 @@ function createUriGlobals(budget) {
   }));
 }
 
+// packages/safe-js/src/interp/globals/function.ts
+function createFunctionPrototype(budget) {
+  const prototype = createSandboxClosure({ guest: true, sandbox: true, name: "", length: 0, call: () => void 0 });
+  const properties = materializeFunctionProperties(prototype);
+  Object.defineProperty(properties, "constructor", { value: void 0, writable: true, configurable: true });
+  for (const [name, length] of [["call", 1], ["apply", 2], ["bind", 1], ["toString", 0]]) {
+    Object.defineProperty(properties, name, {
+      writable: true,
+      configurable: true,
+      value: createSandboxClosure({
+        guest: true,
+        sandbox: true,
+        name,
+        length,
+        call: (args, context) => callFunctionMethod(context?.thisValue, name, args, {
+          budget,
+          callClosure: (target, values, stack, thisValue, construct, newTarget) => context?.invokeClosure !== void 0 ? context.invokeClosure(target, values, thisValue, construct, newTarget) : invokeBuiltinClosure(target, values, budget, { ...context, stack, thisValue, newTarget }, thisValue, construct)
+        }, context?.stack ?? [], context)
+      })
+    });
+  }
+  setSandboxPrototype(prototype, getSandboxPrototype(/* @__PURE__ */ Object.create(null), budget));
+  installFunctionPrototype(budget, prototype);
+}
+
 // packages/safe-js/src/interp/globals/symbol.ts
 var registries = /* @__PURE__ */ new WeakMap();
 function createSymbolGlobal(budget) {
@@ -24131,6 +24198,7 @@ function createBuiltinBindings(options) {
     ...createPromiseGlobals(options),
     ...createRegexGlobals(options)
   };
+  createFunctionPrototype(options.budget);
   registerBuiltinIdentities(options.budget, bindings);
   return bindings;
 }
@@ -40948,12 +41016,12 @@ export {
   safeAddEvent,
   safeRecordException,
   safeEndSpan,
+  runResources,
   defineExtension,
   encodeReplayData,
   HostOperationResumePolicyError,
   registerPendingHostCallPolicy,
   HostCallResumabilityError,
-  runResources,
   assertSnapshotInactive,
   isSandboxClosure,
   deepCopyToSandbox,
@@ -40981,4 +41049,4 @@ export {
   FileSnapshotBackend,
   run
 };
-//# sourceMappingURL=chunk-3QW2X67U.js.map
+//# sourceMappingURL=chunk-M4L3EZHL.js.map